gymmonk-schema 0.37.0 → 0.39.0

package/dist/file.d.ts

@@ -25,7 +25,7 @@ import { z } from 'zod';
  * `<folder>/<userId>/<timestamp>-<random><ext>`. That per-user prefix is what
  * makes ownership checkable on cleanup.
  */
-export declare const UPLOAD_FOLDERS: readonly ["profile-photos", "center-photos", "logos", "member-documents", "equipment-photos", "announcement-media", "exercise-media", "progress-photos", "feedback-media"];
+export declare const UPLOAD_FOLDERS: readonly ["profile-photos", "center-photos", "logos", "member-documents", "equipment-photos", "announcement-media", "exercise-media", "progress-photos", "payment-proofs", "feedback-media"];
 export declare const uploadFolderSchema: z.ZodEnum<{
     "profile-photos": "profile-photos";
     "center-photos": "center-photos";
@@ -35,6 +35,7 @@ export declare const uploadFolderSchema: z.ZodEnum<{
     "announcement-media": "announcement-media";
     "exercise-media": "exercise-media";
     "progress-photos": "progress-photos";
+    "payment-proofs": "payment-proofs";
     "feedback-media": "feedback-media";
 }>;
 export type UploadFolder = z.infer<typeof uploadFolderSchema>;
@@ -82,6 +83,7 @@ export declare const signedUploadUrlBodySchema: z.ZodObject<{
         "announcement-media": "announcement-media";
         "exercise-media": "exercise-media";
         "progress-photos": "progress-photos";
+        "payment-proofs": "payment-proofs";
         "feedback-media": "feedback-media";
     }>;
     fileSize: z.ZodNumber;

package/dist/file.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"file.d.ts","sourceRoot":"","sources":["../src/file.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB;;;;;;;;;GASG;AACH,eAAO,MAAM,cAAc,4KAmBjB,CAAC;AAEX,eAAO,MAAM,kBAAkB;;;;;;;;;;EAAyB,CAAC;AACzD,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAI9D,wDAAwD;AACxD,eAAO,MAAM,yBAAyB,oFAM5B,CAAC;AAEX,eAAO,MAAM,oBAAoB;;;;;;EAAoC,CAAC;AACtE,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAIlE;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,KAAK,CAAC;AAErC,wEAAwE;AACxE,eAAO,MAAM,kBAAkB,EAAE,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAEpE,CAAC;AAMF;;;;;;GAMG;AACH,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;iBA0BlC,CAAC;AAEL,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,mDAAmD;AACnD,eAAO,MAAM,6BAA6B;;;;;iBAUxC,CAAC;AAEH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAIpF;;;;;;;;GAQG;AACH,eAAO,MAAM,wBAAwB;;iBAEnC,CAAC;AAEH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,eAAO,MAAM,4BAA4B;;;iBAGvC,CAAC;AAEH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC"}
+{"version":3,"file":"file.d.ts","sourceRoot":"","sources":["../src/file.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB;;;;;;;;;GASG;AACH,eAAO,MAAM,cAAc,8LAqBjB,CAAC;AAEX,eAAO,MAAM,kBAAkB;;;;;;;;;;;EAAyB,CAAC;AACzD,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAI9D,wDAAwD;AACxD,eAAO,MAAM,yBAAyB,oFAM5B,CAAC;AAEX,eAAO,MAAM,oBAAoB;;;;;;EAAoC,CAAC;AACtE,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAIlE;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,KAAK,CAAC;AAErC,wEAAwE;AACxE,eAAO,MAAM,kBAAkB,EAAE,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAEpE,CAAC;AAMF;;;;;;GAMG;AACH,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;iBA0BlC,CAAC;AAEL,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,mDAAmD;AACnD,eAAO,MAAM,6BAA6B;;;;;iBAUxC,CAAC;AAEH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAIpF;;;;;;;;GAQG;AACH,eAAO,MAAM,wBAAwB;;iBAEnC,CAAC;AAEH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,eAAO,MAAM,4BAA4B;;;iBAGvC,CAAC;AAEH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC"}

package/dist/file.js

@@ -43,6 +43,8 @@ export const UPLOAD_FOLDERS = [
     'exercise-media',
     /** Progress photos a member uploads against a measurement entry. */
     'progress-photos',
+    /** Screenshot of a transfer, attached to a membership awaiting confirmation. */
+    'payment-proofs',
     /** Screenshots and photos attached to feedback or a complaint. */
     'feedback-media',
 ];

package/dist/file.js.map

@@ -1 +1 @@
-{"version":3,"file":"file.js","sourceRoot":"","sources":["../src/file.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,gFAAgF;AAEhF;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,uEAAuE;IACvE,gBAAgB;IAChB,0DAA0D;IAC1D,eAAe;IACf,qCAAqC;IACrC,OAAO;IACP,kEAAkE;IAClE,kBAAkB;IAClB,6CAA6C;IAC7C,kBAAkB;IAClB,0CAA0C;IAC1C,oBAAoB;IACpB,iDAAiD;IACjD,gBAAgB;IAChB,oEAAoE;IACpE,iBAAiB;IACjB,kEAAkE;IAClE,gBAAgB;CACR,CAAC;AAEX,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;AAGzD,gFAAgF;AAEhF,wDAAwD;AACxD,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,YAAY;IACZ,WAAW;IACX,YAAY;IACZ,WAAW;IACX,iBAAiB;CACT,CAAC;AAEX,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;AAGtE,gFAAgF;AAEhF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAErC,wEAAwE;AACxE,MAAM,CAAC,MAAM,kBAAkB,GAA0C;IACvE,kBAAkB,EAAE,EAAE;CACvB,CAAC;AAEF,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,kBAAkB,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC;AAEvF,gFAAgF;AAEhF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC;KACvC,MAAM,CAAC;IACN,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,GAAG,CAAC;SACR,KAAK,CAAC,mBAAmB,EAAE,mBAAmB,CAAC;IAClD,WAAW,EAAE,oBAAoB;IACjC,MAAM,EAAE,kBAAkB;IAC1B,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,GAAG,EAAE;SACL,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,WAAW,GAAG,IAAI,GAAG,IAAI,EAAE,6BAA6B,WAAW,IAAI,CAAC;CAChF,CAAC;KACD,WAAW,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;IACzB,qEAAqE;IACrE,oEAAoE;IACpE,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,kBAAkB,CAAC;IACpE,IAAI,IAAI,CAAC,QAAQ,GAAG,KAAK,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;QACxC,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,UAAU,CAAC;YAClB,OAAO,EAAE,6BAA6B,KAAK,UAAU,IAAI,CAAC,MAAM,EAAE;SACnE,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAIL,mDAAmD;AACnD,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,sDAAsD;IACtD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,+DAA+D;IAC/D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB;6DACyD;IACzD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,sCAAsC;IACtC,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;CAC5B,CAAC,CAAC;AAIH,gFAAgF;AAEhF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;CACrD,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAChC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACjC,CAAC,CAAC","sourcesContent":["/**\n * gymmonk-schema — File uploads\n * =============================\n * Contracts for the signed-URL upload flow. GymMonk never streams file bytes\n * through the API: the browser asks the backend for a short-lived v4 signed\n * PUT URL, uploads straight to Google Cloud Storage, and stores the returned\n * PERMANENT public URL.\n *\n * The download URL is deliberately NOT signed. A signed read URL expires,\n * which would rot every image reference already written to Mongo; the bucket\n * instead grants `allUsers` object-viewer and we store the plain public URL.\n *\n * Mirrors reform-backend's `shared/schemas/file.schema.ts`.\n *\n * @module gymmonk-schema/file\n */\n\nimport { z } from 'zod';\n\n// ─── Folders ─────────────────────────────────────────────────────────────────\n\n/**\n * Every folder an upload may target. This is an allow-list, not a hint: the\n * backend rejects anything outside it, so a compromised client cannot scatter\n * objects across the bucket. Adding a new upload surface means adding it here\n * FIRST, then publishing the package.\n *\n * `userId` is appended by the backend, so the effective path is\n * `<folder>/<userId>/<timestamp>-<random><ext>`. That per-user prefix is what\n * makes ownership checkable on cleanup.\n */\nexport const UPLOAD_FOLDERS = [\n  /** Member + owner + staff avatars. Square, cropped round in the UI. */\n  'profile-photos',\n  /** Gym/center gallery photos. Multi-select, uncropped. */\n  'center-photos',\n  /** Organisation and center logos. */\n  'logos',\n  /** Member ID proof / address proof captured at the front desk. */\n  'member-documents',\n  /** Equipment photos in the gym inventory. */\n  'equipment-photos',\n  /** Images attached to an announcement. */\n  'announcement-media',\n  /** Custom exercise thumbnails added by a gym. */\n  'exercise-media',\n  /** Progress photos a member uploads against a measurement entry. */\n  'progress-photos',\n  /** Screenshots and photos attached to feedback or a complaint. */\n  'feedback-media',\n] as const;\n\nexport const uploadFolderSchema = z.enum(UPLOAD_FOLDERS);\nexport type UploadFolder = z.infer<typeof uploadFolderSchema>;\n\n// ─── Content types ───────────────────────────────────────────────────────────\n\n/** MIME types the signed-URL endpoint will sign for. */\nexport const ALLOWED_UPLOAD_MIME_TYPES = [\n  'image/jpeg',\n  'image/png',\n  'image/webp',\n  'image/gif',\n  'application/pdf',\n] as const;\n\nexport const uploadMimeTypeSchema = z.enum(ALLOWED_UPLOAD_MIME_TYPES);\nexport type UploadMimeType = z.infer<typeof uploadMimeTypeSchema>;\n\n// ─── Size limits ─────────────────────────────────────────────────────────────\n\n/**\n * Default per-file ceiling, in MB. Validation runs on the RAW pick, before the\n * client-side optimizer shrinks it — a modern phone camera produces 8-12 MB\n * JPEGs that compress to well under 1 MB, so a tighter cap would reject\n * perfectly ordinary photos.\n */\nexport const MAX_UPLOAD_SIZE_MB = 10;\n\n/** Per-folder overrides. Documents may be larger scans than a photo. */\nexport const FOLDER_MAX_SIZE_MB: Partial<Record<UploadFolder, number>> = {\n  'member-documents': 20,\n};\n\nconst HARD_CAP_MB = Math.max(MAX_UPLOAD_SIZE_MB, ...Object.values(FOLDER_MAX_SIZE_MB));\n\n// ─── Signed upload URL ───────────────────────────────────────────────────────\n\n/**\n * Request body for `POST /api/v1/files/signed-url`.\n *\n * `fileName` is restricted to a safe charset because it becomes part of the GCS\n * object path — the client sanitises before sending, and this rejects anything\n * that slipped through (path separators, control characters, unicode tricks).\n */\nexport const signedUploadUrlBodySchema = z\n  .object({\n    fileName: z\n      .string()\n      .min(1)\n      .max(255)\n      .regex(/^[a-zA-Z0-9_.-]+$/, 'Invalid file name'),\n    contentType: uploadMimeTypeSchema,\n    folder: uploadFolderSchema,\n    fileSize: z\n      .number()\n      .int()\n      .min(1)\n      .max(HARD_CAP_MB * 1024 * 1024, `File must be smaller than ${HARD_CAP_MB}MB`),\n  })\n  .superRefine((data, ctx) => {\n    // Tighten to the per-folder cap. The outer `.max` is only the widest\n    // ceiling any folder allows; this is the one that actually applies.\n    const capMb = FOLDER_MAX_SIZE_MB[data.folder] ?? MAX_UPLOAD_SIZE_MB;\n    if (data.fileSize > capMb * 1024 * 1024) {\n      ctx.addIssue({\n        code: 'custom',\n        path: ['fileSize'],\n        message: `File must be smaller than ${capMb}MB for ${data.folder}`,\n      });\n    }\n  });\n\nexport type SignedUploadUrlBody = z.infer<typeof signedUploadUrlBodySchema>;\n\n/** Response of `POST /api/v1/files/signed-url`. */\nexport const signedUploadUrlResponseSchema = z.object({\n  /** Short-lived v4 signed URL — PUT the bytes here. */\n  uploadUrl: z.string(),\n  /** Permanent public URL. This is what gets stored in Mongo. */\n  downloadUrl: z.string(),\n  /** Object path inside the bucket, without the bucket prefix. Used to\n   *  delete an object the user abandoned before saving. */\n  filePath: z.string(),\n  /** When `uploadUrl` stops working. */\n  expiresAt: z.iso.datetime(),\n});\n\nexport type SignedUploadUrlResponse = z.infer<typeof signedUploadUrlResponseSchema>;\n\n// ─── Cleanup ─────────────────────────────────────────────────────────────────\n\n/**\n * Body for `POST /api/v1/files/cleanup-uploads`. Called when a user removes a\n * photo they uploaded but never saved, so the orphaned object does not sit in\n * the bucket forever.\n *\n * Ownership is enforced per-path from the `userId` segment the backend embedded\n * at signing time. Paths belonging to someone else are skipped silently rather\n * than 403-ing, so one foreign entry cannot void a legitimate batch.\n */\nexport const cleanupUploadsBodySchema = z.object({\n  filePaths: z.array(z.string().min(1)).min(1).max(20),\n});\n\nexport type CleanupUploadsBody = z.infer<typeof cleanupUploadsBodySchema>;\n\nexport const cleanupUploadsResponseSchema = z.object({\n  deleted: z.number().int().min(0),\n  skipped: z.number().int().min(0),\n});\n\nexport type CleanupUploadsResponse = z.infer<typeof cleanupUploadsResponseSchema>;\n"]}
+{"version":3,"file":"file.js","sourceRoot":"","sources":["../src/file.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,gFAAgF;AAEhF;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,uEAAuE;IACvE,gBAAgB;IAChB,0DAA0D;IAC1D,eAAe;IACf,qCAAqC;IACrC,OAAO;IACP,kEAAkE;IAClE,kBAAkB;IAClB,6CAA6C;IAC7C,kBAAkB;IAClB,0CAA0C;IAC1C,oBAAoB;IACpB,iDAAiD;IACjD,gBAAgB;IAChB,oEAAoE;IACpE,iBAAiB;IACjB,gFAAgF;IAChF,gBAAgB;IAChB,kEAAkE;IAClE,gBAAgB;CACR,CAAC;AAEX,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;AAGzD,gFAAgF;AAEhF,wDAAwD;AACxD,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,YAAY;IACZ,WAAW;IACX,YAAY;IACZ,WAAW;IACX,iBAAiB;CACT,CAAC;AAEX,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;AAGtE,gFAAgF;AAEhF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAErC,wEAAwE;AACxE,MAAM,CAAC,MAAM,kBAAkB,GAA0C;IACvE,kBAAkB,EAAE,EAAE;CACvB,CAAC;AAEF,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,kBAAkB,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC;AAEvF,gFAAgF;AAEhF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC;KACvC,MAAM,CAAC;IACN,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,GAAG,CAAC;SACR,KAAK,CAAC,mBAAmB,EAAE,mBAAmB,CAAC;IAClD,WAAW,EAAE,oBAAoB;IACjC,MAAM,EAAE,kBAAkB;IAC1B,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,GAAG,EAAE;SACL,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,WAAW,GAAG,IAAI,GAAG,IAAI,EAAE,6BAA6B,WAAW,IAAI,CAAC;CAChF,CAAC;KACD,WAAW,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;IACzB,qEAAqE;IACrE,oEAAoE;IACpE,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,kBAAkB,CAAC;IACpE,IAAI,IAAI,CAAC,QAAQ,GAAG,KAAK,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;QACxC,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,UAAU,CAAC;YAClB,OAAO,EAAE,6BAA6B,KAAK,UAAU,IAAI,CAAC,MAAM,EAAE;SACnE,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAIL,mDAAmD;AACnD,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,sDAAsD;IACtD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,+DAA+D;IAC/D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB;6DACyD;IACzD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,sCAAsC;IACtC,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;CAC5B,CAAC,CAAC;AAIH,gFAAgF;AAEhF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;CACrD,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAChC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACjC,CAAC,CAAC","sourcesContent":["/**\n * gymmonk-schema — File uploads\n * =============================\n * Contracts for the signed-URL upload flow. GymMonk never streams file bytes\n * through the API: the browser asks the backend for a short-lived v4 signed\n * PUT URL, uploads straight to Google Cloud Storage, and stores the returned\n * PERMANENT public URL.\n *\n * The download URL is deliberately NOT signed. A signed read URL expires,\n * which would rot every image reference already written to Mongo; the bucket\n * instead grants `allUsers` object-viewer and we store the plain public URL.\n *\n * Mirrors reform-backend's `shared/schemas/file.schema.ts`.\n *\n * @module gymmonk-schema/file\n */\n\nimport { z } from 'zod';\n\n// ─── Folders ─────────────────────────────────────────────────────────────────\n\n/**\n * Every folder an upload may target. This is an allow-list, not a hint: the\n * backend rejects anything outside it, so a compromised client cannot scatter\n * objects across the bucket. Adding a new upload surface means adding it here\n * FIRST, then publishing the package.\n *\n * `userId` is appended by the backend, so the effective path is\n * `<folder>/<userId>/<timestamp>-<random><ext>`. That per-user prefix is what\n * makes ownership checkable on cleanup.\n */\nexport const UPLOAD_FOLDERS = [\n  /** Member + owner + staff avatars. Square, cropped round in the UI. */\n  'profile-photos',\n  /** Gym/center gallery photos. Multi-select, uncropped. */\n  'center-photos',\n  /** Organisation and center logos. */\n  'logos',\n  /** Member ID proof / address proof captured at the front desk. */\n  'member-documents',\n  /** Equipment photos in the gym inventory. */\n  'equipment-photos',\n  /** Images attached to an announcement. */\n  'announcement-media',\n  /** Custom exercise thumbnails added by a gym. */\n  'exercise-media',\n  /** Progress photos a member uploads against a measurement entry. */\n  'progress-photos',\n  /** Screenshot of a transfer, attached to a membership awaiting confirmation. */\n  'payment-proofs',\n  /** Screenshots and photos attached to feedback or a complaint. */\n  'feedback-media',\n] as const;\n\nexport const uploadFolderSchema = z.enum(UPLOAD_FOLDERS);\nexport type UploadFolder = z.infer<typeof uploadFolderSchema>;\n\n// ─── Content types ───────────────────────────────────────────────────────────\n\n/** MIME types the signed-URL endpoint will sign for. */\nexport const ALLOWED_UPLOAD_MIME_TYPES = [\n  'image/jpeg',\n  'image/png',\n  'image/webp',\n  'image/gif',\n  'application/pdf',\n] as const;\n\nexport const uploadMimeTypeSchema = z.enum(ALLOWED_UPLOAD_MIME_TYPES);\nexport type UploadMimeType = z.infer<typeof uploadMimeTypeSchema>;\n\n// ─── Size limits ─────────────────────────────────────────────────────────────\n\n/**\n * Default per-file ceiling, in MB. Validation runs on the RAW pick, before the\n * client-side optimizer shrinks it — a modern phone camera produces 8-12 MB\n * JPEGs that compress to well under 1 MB, so a tighter cap would reject\n * perfectly ordinary photos.\n */\nexport const MAX_UPLOAD_SIZE_MB = 10;\n\n/** Per-folder overrides. Documents may be larger scans than a photo. */\nexport const FOLDER_MAX_SIZE_MB: Partial<Record<UploadFolder, number>> = {\n  'member-documents': 20,\n};\n\nconst HARD_CAP_MB = Math.max(MAX_UPLOAD_SIZE_MB, ...Object.values(FOLDER_MAX_SIZE_MB));\n\n// ─── Signed upload URL ───────────────────────────────────────────────────────\n\n/**\n * Request body for `POST /api/v1/files/signed-url`.\n *\n * `fileName` is restricted to a safe charset because it becomes part of the GCS\n * object path — the client sanitises before sending, and this rejects anything\n * that slipped through (path separators, control characters, unicode tricks).\n */\nexport const signedUploadUrlBodySchema = z\n  .object({\n    fileName: z\n      .string()\n      .min(1)\n      .max(255)\n      .regex(/^[a-zA-Z0-9_.-]+$/, 'Invalid file name'),\n    contentType: uploadMimeTypeSchema,\n    folder: uploadFolderSchema,\n    fileSize: z\n      .number()\n      .int()\n      .min(1)\n      .max(HARD_CAP_MB * 1024 * 1024, `File must be smaller than ${HARD_CAP_MB}MB`),\n  })\n  .superRefine((data, ctx) => {\n    // Tighten to the per-folder cap. The outer `.max` is only the widest\n    // ceiling any folder allows; this is the one that actually applies.\n    const capMb = FOLDER_MAX_SIZE_MB[data.folder] ?? MAX_UPLOAD_SIZE_MB;\n    if (data.fileSize > capMb * 1024 * 1024) {\n      ctx.addIssue({\n        code: 'custom',\n        path: ['fileSize'],\n        message: `File must be smaller than ${capMb}MB for ${data.folder}`,\n      });\n    }\n  });\n\nexport type SignedUploadUrlBody = z.infer<typeof signedUploadUrlBodySchema>;\n\n/** Response of `POST /api/v1/files/signed-url`. */\nexport const signedUploadUrlResponseSchema = z.object({\n  /** Short-lived v4 signed URL — PUT the bytes here. */\n  uploadUrl: z.string(),\n  /** Permanent public URL. This is what gets stored in Mongo. */\n  downloadUrl: z.string(),\n  /** Object path inside the bucket, without the bucket prefix. Used to\n   *  delete an object the user abandoned before saving. */\n  filePath: z.string(),\n  /** When `uploadUrl` stops working. */\n  expiresAt: z.iso.datetime(),\n});\n\nexport type SignedUploadUrlResponse = z.infer<typeof signedUploadUrlResponseSchema>;\n\n// ─── Cleanup ─────────────────────────────────────────────────────────────────\n\n/**\n * Body for `POST /api/v1/files/cleanup-uploads`. Called when a user removes a\n * photo they uploaded but never saved, so the orphaned object does not sit in\n * the bucket forever.\n *\n * Ownership is enforced per-path from the `userId` segment the backend embedded\n * at signing time. Paths belonging to someone else are skipped silently rather\n * than 403-ing, so one foreign entry cannot void a legitimate batch.\n */\nexport const cleanupUploadsBodySchema = z.object({\n  filePaths: z.array(z.string().min(1)).min(1).max(20),\n});\n\nexport type CleanupUploadsBody = z.infer<typeof cleanupUploadsBodySchema>;\n\nexport const cleanupUploadsResponseSchema = z.object({\n  deleted: z.number().int().min(0),\n  skipped: z.number().int().min(0),\n});\n\nexport type CleanupUploadsResponse = z.infer<typeof cleanupUploadsResponseSchema>;\n"]}

package/dist/gym-registration.d.ts

@@ -201,4 +201,37 @@ export declare const gymRegistrationBodySchema: z.ZodObject<{
     }, z.core.$strip>;
 }, z.core.$strip>;
 export type GymRegistrationBody = z.infer<typeof gymRegistrationBodySchema>;
+/**
+ * The wizard's UI-shaped, partially-filled form, persisted a STEP AT A TIME.
+ *
+ * Opaque to the backend by design — the client owns the form shape, and what is
+ * stored here is re-validated strictly by `gymRegistrationBodySchema` at submit.
+ * Keys are form field names; the backend caps the stored size.
+ *
+ * ── Why the wizard needs its own cursor ─────────────────────────────────────
+ * Not the onboarding cursor. That one belongs to onboarding, a flow this user
+ * finished long ago and can no longer enter, and writing a `step` into it would
+ * move the resume target of a different wizard. This is a separate record with
+ * its own lifecycle: it starts when somebody begins describing their gym, and
+ * it is retired the moment the gym is actually submitted.
+ */
+export declare const gymRegistrationDraftSchema: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+export type GymRegistrationDraft = z.infer<typeof gymRegistrationDraftSchema>;
+/**
+ * `GET /gym-registration/draft` — how far the caller got and what they typed.
+ *
+ * `step: 0` with no draft is the ordinary "never started" answer, so the client
+ * has one shape to read rather than a null to branch on.
+ */
+export declare const gymRegistrationProgressSchema: z.ZodObject<{
+    step: z.ZodNumber;
+    draft: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, z.core.$strip>;
+export type GymRegistrationProgress = z.infer<typeof gymRegistrationProgressSchema>;
+/** `PUT /gym-registration/draft` body — any subset, merged server-side. */
+export declare const gymRegistrationProgressUpdateSchema: z.ZodObject<{
+    step: z.ZodOptional<z.ZodNumber>;
+    draft: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, z.core.$strip>;
+export type GymRegistrationProgressUpdate = z.infer<typeof gymRegistrationProgressUpdateSchema>;
 //# sourceMappingURL=gym-registration.d.ts.map

package/dist/gym-registration.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gym-registration.d.ts","sourceRoot":"","sources":["../src/gym-registration.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,sEAAsE;AACtE,eAAO,MAAM,sBAAsB;;;iBAGjC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAIpC,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC"}
+{"version":3,"file":"gym-registration.d.ts","sourceRoot":"","sources":["../src/gym-registration.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAQxB,sEAAsE;AACtE,eAAO,MAAM,sBAAsB;;;iBAGjC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAIpC,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAI5E;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,0BAA0B,wCAAoC,CAAC;AAC5E,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E;;;;;GAKG;AACH,eAAO,MAAM,6BAA6B;;;iBAGxC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF,2EAA2E;AAC3E,eAAO,MAAM,mCAAmC;;;iBAKpC,CAAC;AACb,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mCAAmC,CAAC,CAAC"}

package/dist/gym-registration.js

@@ -23,6 +23,10 @@
  */
 import { z } from 'zod';
 import { createCenterBodySchema } from './center.js';
+// The wizard's own step count, so the resume cursor below cannot be capped at a
+// number the wizard has outgrown. `onboarding-form` imports nothing from here,
+// so this is a one-way edge, not a cycle.
+import { GYM_REGISTRATION_TOTAL_STEPS } from './onboarding-form.js';
 import { createOrganisationBodySchema } from './organisation.js';
 /** The SaaS plan the owner selects at the final registration step. */
 export const gymPlanSelectionSchema = z.object({
@@ -34,4 +38,37 @@ export const gymRegistrationBodySchema = z.object({
     center: createCenterBodySchema,
     subscription: gymPlanSelectionSchema,
 });
+// ─── Resume: the per-step draft ──────────────────────────────────────────────
+/**
+ * The wizard's UI-shaped, partially-filled form, persisted a STEP AT A TIME.
+ *
+ * Opaque to the backend by design — the client owns the form shape, and what is
+ * stored here is re-validated strictly by `gymRegistrationBodySchema` at submit.
+ * Keys are form field names; the backend caps the stored size.
+ *
+ * ── Why the wizard needs its own cursor ─────────────────────────────────────
+ * Not the onboarding cursor. That one belongs to onboarding, a flow this user
+ * finished long ago and can no longer enter, and writing a `step` into it would
+ * move the resume target of a different wizard. This is a separate record with
+ * its own lifecycle: it starts when somebody begins describing their gym, and
+ * it is retired the moment the gym is actually submitted.
+ */
+export const gymRegistrationDraftSchema = z.record(z.string(), z.unknown());
+/**
+ * `GET /gym-registration/draft` — how far the caller got and what they typed.
+ *
+ * `step: 0` with no draft is the ordinary "never started" answer, so the client
+ * has one shape to read rather than a null to branch on.
+ */
+export const gymRegistrationProgressSchema = z.object({
+    step: z.number().int().min(0).max(GYM_REGISTRATION_TOTAL_STEPS),
+    draft: gymRegistrationDraftSchema.optional(),
+});
+/** `PUT /gym-registration/draft` body — any subset, merged server-side. */
+export const gymRegistrationProgressUpdateSchema = z
+    .object({
+    step: z.number().int().min(0).max(GYM_REGISTRATION_TOTAL_STEPS),
+    draft: gymRegistrationDraftSchema,
+})
+    .partial();
 //# sourceMappingURL=gym-registration.js.map

package/dist/gym-registration.js.map

@@ -1 +1 @@
-{"version":3,"file":"gym-registration.js","sourceRoot":"","sources":["../src/gym-registration.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,4BAA4B,EAAE,MAAM,mBAAmB,CAAC;AAEjE,sEAAsE;AACtE,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAChC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC9C,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,YAAY,EAAE,4BAA4B;IAC1C,MAAM,EAAE,sBAAsB;IAC9B,YAAY,EAAE,sBAAsB;CACrC,CAAC,CAAC","sourcesContent":["/**\n * gymmonk-schema — Gym registration\n * =================================\n * \"List your gym on GymMonk\" — the payload a signed-in MEMBER submits to create\n * the business they run.\n *\n * This used to be owner onboarding, a fork taken before the user had seen\n * anything. It is now an ordinary action taken from the Me tab by somebody who\n * already has an account, and that changes what it has to ask for:\n *\n *   - NO personal details. Name, gender, date of birth, phone and photo were\n *     all captured at onboarding. Asking again would be asking the same person\n *     the same questions twice and then having two answers to keep in step.\n *   - NO automatic membership of their own gym. Owning a gym and training at\n *     one are separate things — an owner keeps the single member identity they\n *     registered with, and is free to be a paying member of somebody else's gym.\n *\n * The submitted organisation starts `pending` and is invisible in the member\n * gym directory until a superadmin or platform manager approves it\n * (`organisationApprovalStatusSchema`).\n *\n * @module gymmonk-schema/gym-registration\n */\n\nimport { z } from 'zod';\nimport { createCenterBodySchema } from './center.js';\nimport { createOrganisationBodySchema } from './organisation.js';\n\n/** The SaaS plan the owner selects at the final registration step. */\nexport const gymPlanSelectionSchema = z.object({\n  planId: z.string().trim().min(1),\n  tenureId: z.string().trim().min(1).nullable(),\n});\nexport type GymPlanSelection = z.infer<typeof gymPlanSelectionSchema>;\n\nexport const gymRegistrationBodySchema = z.object({\n  organisation: createOrganisationBodySchema,\n  center: createCenterBodySchema,\n  subscription: gymPlanSelectionSchema,\n});\nexport type GymRegistrationBody = z.infer<typeof gymRegistrationBodySchema>;\n"]}
+{"version":3,"file":"gym-registration.js","sourceRoot":"","sources":["../src/gym-registration.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AACrD,gFAAgF;AAChF,+EAA+E;AAC/E,0CAA0C;AAC1C,OAAO,EAAE,4BAA4B,EAAE,MAAM,sBAAsB,CAAC;AACpE,OAAO,EAAE,4BAA4B,EAAE,MAAM,mBAAmB,CAAC;AAEjE,sEAAsE;AACtE,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAChC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC9C,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,YAAY,EAAE,4BAA4B;IAC1C,MAAM,EAAE,sBAAsB;IAC9B,YAAY,EAAE,sBAAsB;CACrC,CAAC,CAAC;AAGH,gFAAgF;AAEhF;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;AAG5E;;;;;GAKG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,4BAA4B,CAAC;IAC/D,KAAK,EAAE,0BAA0B,CAAC,QAAQ,EAAE;CAC7C,CAAC,CAAC;AAGH,2EAA2E;AAC3E,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC;KACjD,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,4BAA4B,CAAC;IAC/D,KAAK,EAAE,0BAA0B;CAClC,CAAC;KACD,OAAO,EAAE,CAAC","sourcesContent":["/**\n * gymmonk-schema — Gym registration\n * =================================\n * \"List your gym on GymMonk\" — the payload a signed-in MEMBER submits to create\n * the business they run.\n *\n * This used to be owner onboarding, a fork taken before the user had seen\n * anything. It is now an ordinary action taken from the Me tab by somebody who\n * already has an account, and that changes what it has to ask for:\n *\n *   - NO personal details. Name, gender, date of birth, phone and photo were\n *     all captured at onboarding. Asking again would be asking the same person\n *     the same questions twice and then having two answers to keep in step.\n *   - NO automatic membership of their own gym. Owning a gym and training at\n *     one are separate things — an owner keeps the single member identity they\n *     registered with, and is free to be a paying member of somebody else's gym.\n *\n * The submitted organisation starts `pending` and is invisible in the member\n * gym directory until a superadmin or platform manager approves it\n * (`organisationApprovalStatusSchema`).\n *\n * @module gymmonk-schema/gym-registration\n */\n\nimport { z } from 'zod';\nimport { createCenterBodySchema } from './center.js';\n// The wizard's own step count, so the resume cursor below cannot be capped at a\n// number the wizard has outgrown. `onboarding-form` imports nothing from here,\n// so this is a one-way edge, not a cycle.\nimport { GYM_REGISTRATION_TOTAL_STEPS } from './onboarding-form.js';\nimport { createOrganisationBodySchema } from './organisation.js';\n\n/** The SaaS plan the owner selects at the final registration step. */\nexport const gymPlanSelectionSchema = z.object({\n  planId: z.string().trim().min(1),\n  tenureId: z.string().trim().min(1).nullable(),\n});\nexport type GymPlanSelection = z.infer<typeof gymPlanSelectionSchema>;\n\nexport const gymRegistrationBodySchema = z.object({\n  organisation: createOrganisationBodySchema,\n  center: createCenterBodySchema,\n  subscription: gymPlanSelectionSchema,\n});\nexport type GymRegistrationBody = z.infer<typeof gymRegistrationBodySchema>;\n\n// ─── Resume: the per-step draft ──────────────────────────────────────────────\n\n/**\n * The wizard's UI-shaped, partially-filled form, persisted a STEP AT A TIME.\n *\n * Opaque to the backend by design — the client owns the form shape, and what is\n * stored here is re-validated strictly by `gymRegistrationBodySchema` at submit.\n * Keys are form field names; the backend caps the stored size.\n *\n * ── Why the wizard needs its own cursor ─────────────────────────────────────\n * Not the onboarding cursor. That one belongs to onboarding, a flow this user\n * finished long ago and can no longer enter, and writing a `step` into it would\n * move the resume target of a different wizard. This is a separate record with\n * its own lifecycle: it starts when somebody begins describing their gym, and\n * it is retired the moment the gym is actually submitted.\n */\nexport const gymRegistrationDraftSchema = z.record(z.string(), z.unknown());\nexport type GymRegistrationDraft = z.infer<typeof gymRegistrationDraftSchema>;\n\n/**\n * `GET /gym-registration/draft` — how far the caller got and what they typed.\n *\n * `step: 0` with no draft is the ordinary \"never started\" answer, so the client\n * has one shape to read rather than a null to branch on.\n */\nexport const gymRegistrationProgressSchema = z.object({\n  step: z.number().int().min(0).max(GYM_REGISTRATION_TOTAL_STEPS),\n  draft: gymRegistrationDraftSchema.optional(),\n});\nexport type GymRegistrationProgress = z.infer<typeof gymRegistrationProgressSchema>;\n\n/** `PUT /gym-registration/draft` body — any subset, merged server-side. */\nexport const gymRegistrationProgressUpdateSchema = z\n  .object({\n    step: z.number().int().min(0).max(GYM_REGISTRATION_TOTAL_STEPS),\n    draft: gymRegistrationDraftSchema,\n  })\n  .partial();\nexport type GymRegistrationProgressUpdate = z.infer<typeof gymRegistrationProgressUpdateSchema>;\n"]}

package/dist/member.d.ts

@@ -35,6 +35,8 @@ export declare const memberRosterItemSchema: z.ZodObject<{
     status: z.ZodNullable<z.ZodEnum<{
         invited: "invited";
         active: "active";
+        pending: "pending";
+        rejected: "rejected";
         paused: "paused";
         expired: "expired";
         cancelled: "cancelled";
@@ -201,6 +203,8 @@ export declare const memberDetailSchema: z.ZodObject<{
         status: z.ZodEnum<{
             invited: "invited";
             active: "active";
+            pending: "pending";
+            rejected: "rejected";
             paused: "paused";
             expired: "expired";
             cancelled: "cancelled";
@@ -209,6 +213,11 @@ export declare const memberDetailSchema: z.ZodObject<{
         endDate: z.ZodString;
         pausedFrom: z.ZodNullable<z.ZodString>;
         pausedTo: z.ZodNullable<z.ZodString>;
+        paymentProofUrl: z.ZodNullable<z.ZodString>;
+        requestedAt: z.ZodISODateTime;
+        decidedAt: z.ZodNullable<z.ZodISODateTime>;
+        decidedBy: z.ZodNullable<z.ZodString>;
+        decisionNote: z.ZodNullable<z.ZodString>;
         createdAt: z.ZodISODateTime;
         updatedAt: z.ZodISODateTime;
     }, z.core.$strip>>;
@@ -285,6 +294,7 @@ export declare const createMemberBodySchema: z.ZodObject<{
         planId: z.ZodString;
         variantId: z.ZodString;
         startDate: z.ZodOptional<z.ZodString>;
+        paymentProofUrl: z.ZodOptional<z.ZodString>;
         payment: z.ZodOptional<z.ZodObject<{
             amountInr: z.ZodNumber;
             method: z.ZodEnum<{
@@ -294,8 +304,8 @@ export declare const createMemberBodySchema: z.ZodObject<{
             }>;
             status: z.ZodDefault<z.ZodEnum<{
                 success: "success";
-                failed: "failed";
                 pending: "pending";
+                failed: "failed";
             }>>;
         }, z.core.$strip>>;
     }, z.core.$strip>>;
@@ -429,6 +439,8 @@ export declare const provisionResultSchema: z.ZodObject<{
         status: z.ZodEnum<{
             invited: "invited";
             active: "active";
+            pending: "pending";
+            rejected: "rejected";
             paused: "paused";
             expired: "expired";
             cancelled: "cancelled";
@@ -437,6 +449,11 @@ export declare const provisionResultSchema: z.ZodObject<{
         endDate: z.ZodString;
         pausedFrom: z.ZodNullable<z.ZodString>;
         pausedTo: z.ZodNullable<z.ZodString>;
+        paymentProofUrl: z.ZodNullable<z.ZodString>;
+        requestedAt: z.ZodISODateTime;
+        decidedAt: z.ZodNullable<z.ZodISODateTime>;
+        decidedBy: z.ZodNullable<z.ZodString>;
+        decisionNote: z.ZodNullable<z.ZodString>;
         createdAt: z.ZodISODateTime;
         updatedAt: z.ZodISODateTime;
     }, z.core.$strip>>;

package/dist/member.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"member.d.ts","sourceRoot":"","sources":["../src/member.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAsBxB,kDAAkD;AAClD,eAAO,MAAM,mBAAmB;;;;EAAyC,CAAC;AAC1E,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAIhE,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAsDjC,CAAC;AAEH,yFAAyF;AACzF,eAAO,MAAM,sBAAsB,KAAK,CAAC;AACzC,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE,oCAAoC;AACpC,eAAO,MAAM,uBAAuB;;;;;iBAKlC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAIxE,eAAO,MAAM,kBAAkB;;;;;EAAoD,CAAC;AACpF,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,eAAO,MAAM,gBAAgB;;;;;EAA6C,CAAC;AAC3E,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;iBAKhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAIpE,kEAAkE;AAClE,eAAO,MAAM,mBAAmB;;;;;;;iBAQ9B,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAiD7B,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAI9D,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAejC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAoB/B,CAAC;AACL,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAItE;;;;;;;;GAQG;AACH,eAAO,MAAM,kBAAkB;;;;;;iBAU7B,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,2EAA2E;AAC3E,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAehC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE;;;;GAIG;AACH,eAAO,MAAM,mBAAmB;;;;;;;iBAS9B,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE;;;;GAIG;AACH,eAAO,MAAM,qBAAqB;;iBAEhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAIpE,eAAO,MAAM,yBAAyB;;iBAAoC,CAAC;AAC3E,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,eAAO,MAAM,uBAAuB;;iBAElC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE,eAAO,MAAM,2BAA2B;;iBAEtC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEhF,wEAAwE;AACxE,eAAO,MAAM,sBAAsB;;iBAEjC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC"}
+{"version":3,"file":"member.d.ts","sourceRoot":"","sources":["../src/member.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAsBxB,kDAAkD;AAClD,eAAO,MAAM,mBAAmB;;;;EAAyC,CAAC;AAC1E,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAIhE,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAsDjC,CAAC;AAEH,yFAAyF;AACzF,eAAO,MAAM,sBAAsB,KAAK,CAAC;AACzC,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE,oCAAoC;AACpC,eAAO,MAAM,uBAAuB;;;;;iBAKlC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAIxE,eAAO,MAAM,kBAAkB;;;;;EAAoD,CAAC;AACpF,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,eAAO,MAAM,gBAAgB;;;;;EAA6C,CAAC;AAC3E,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;iBAKhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAIpE,kEAAkE;AAClE,eAAO,MAAM,mBAAmB;;;;;;;iBAQ9B,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAiD7B,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAI9D,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAejC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAoB/B,CAAC;AACL,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAItE;;;;;;;;GAQG;AACH,eAAO,MAAM,kBAAkB;;;;;;iBAU7B,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,2EAA2E;AAC3E,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAehC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE;;;;GAIG;AACH,eAAO,MAAM,mBAAmB;;;;;;;iBAS9B,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE;;;;GAIG;AACH,eAAO,MAAM,qBAAqB;;iBAEhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAIpE,eAAO,MAAM,yBAAyB;;iBAAoC,CAAC;AAC3E,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,eAAO,MAAM,uBAAuB;;iBAElC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE,eAAO,MAAM,2BAA2B;;iBAEtC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEhF,wEAAwE;AACxE,eAAO,MAAM,sBAAsB;;iBAEjC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC"}

package/dist/membership-request.d.ts

@@ -28,8 +28,8 @@
 import { z } from 'zod';
 export declare const membershipRequestStatusSchema: z.ZodEnum<{
     pending: "pending";
-    approved: "approved";
     rejected: "rejected";
+    approved: "approved";
 }>;
 export type MembershipRequestStatus = z.infer<typeof membershipRequestStatusSchema>;
 export declare const membershipRequestSchema: z.ZodObject<{
@@ -38,8 +38,8 @@ export declare const membershipRequestSchema: z.ZodObject<{
     centerId: z.ZodString;
     status: z.ZodEnum<{
         pending: "pending";
-        approved: "approved";
         rejected: "rejected";
+        approved: "approved";
     }>;
     requestedAt: z.ZodISODateTime;
     decidedAt: z.ZodNullable<z.ZodISODateTime>;
@@ -57,8 +57,8 @@ export declare const membershipRequestItemSchema: z.ZodObject<{
     centerId: z.ZodString;
     status: z.ZodEnum<{
         pending: "pending";
-        approved: "approved";
         rejected: "rejected";
+        approved: "approved";
     }>;
     requestedAt: z.ZodISODateTime;
     decidedAt: z.ZodNullable<z.ZodISODateTime>;
@@ -94,8 +94,8 @@ export declare const membershipRequestQuerySchema: z.ZodObject<{
     limit: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
     status: z.ZodOptional<z.ZodEnum<{
         pending: "pending";
-        approved: "approved";
         rejected: "rejected";
+        approved: "approved";
     }>>;
 }, z.core.$strip>;
 export type MembershipRequestQuery = z.infer<typeof membershipRequestQuerySchema>;
@@ -109,8 +109,8 @@ export declare const myMembershipRequestSchema: z.ZodNullable<z.ZodObject<{
     centerId: z.ZodString;
     status: z.ZodEnum<{
         pending: "pending";
-        approved: "approved";
         rejected: "rejected";
+        approved: "approved";
     }>;
     requestedAt: z.ZodISODateTime;
     decidedAt: z.ZodNullable<z.ZodISODateTime>;

package/dist/membership.d.ts

@@ -12,12 +12,34 @@
  */
 import { z } from 'zod';
 /**
- * Membership lifecycle. `invited` = owner created it, member hasn't activated;
- * `expiring` is NOT stored (derived from `endDate`).
+ * Membership lifecycle.
+ *
+ * `pending` is where every membership STARTS, whoever created it. Choosing a
+ * plan is not the same event as paying for one, and until this release the two
+ * were welded together: the moment a member tapped a plan it went live, and the
+ * moment an owner assigned one at the desk it went live, whether or not any
+ * money had changed hands. A gym then had no way to tell a paid member from an
+ * optimistic one, and no lever to withhold access from the second.
+ *
+ * The only transition out of `pending` is the gym marking the payment done.
+ * That is deliberately a HUMAN act by the owner or a manager rather than a
+ * gateway callback: these gyms take cash at the desk and UPI transfers on a
+ * phone, so the person who knows the money arrived is the person at the gym.
+ *
+ * `rejected` is the other way out, for a screenshot that shows nothing, the
+ * wrong amount, or a transfer that never landed. It is a dead end — the
+ * member requests again rather than the gym reopening a closed decision.
+ *
+ * `invited` predates all of this and nothing writes it. Left in place because
+ * removing a value from a stored enum is not worth a migration.
+ *
+ * `expiring` is NOT stored — it is derived from `endDate` at the edge.
  */
 export declare const membershipStatusSchema: z.ZodEnum<{
     invited: "invited";
     active: "active";
+    pending: "pending";
+    rejected: "rejected";
     paused: "paused";
     expired: "expired";
     cancelled: "cancelled";
@@ -31,8 +53,8 @@ export declare const paymentMethodSchema: z.ZodEnum<{
 export type PaymentMethod = z.infer<typeof paymentMethodSchema>;
 export declare const paymentStatusSchema: z.ZodEnum<{
     success: "success";
-    failed: "failed";
     pending: "pending";
+    failed: "failed";
 }>;
 export type PaymentStatus = z.infer<typeof paymentStatusSchema>;
 export declare const paymentSchema: z.ZodObject<{
@@ -46,8 +68,8 @@ export declare const paymentSchema: z.ZodObject<{
     }>;
     status: z.ZodEnum<{
         success: "success";
-        failed: "failed";
         pending: "pending";
+        failed: "failed";
     }>;
     paidAt: z.ZodISODateTime;
     note: z.ZodNullable<z.ZodString>;
@@ -66,6 +88,8 @@ export declare const membershipSchema: z.ZodObject<{
     status: z.ZodEnum<{
         invited: "invited";
         active: "active";
+        pending: "pending";
+        rejected: "rejected";
         paused: "paused";
         expired: "expired";
         cancelled: "cancelled";
@@ -74,6 +98,11 @@ export declare const membershipSchema: z.ZodObject<{
     endDate: z.ZodString;
     pausedFrom: z.ZodNullable<z.ZodString>;
     pausedTo: z.ZodNullable<z.ZodString>;
+    paymentProofUrl: z.ZodNullable<z.ZodString>;
+    requestedAt: z.ZodISODateTime;
+    decidedAt: z.ZodNullable<z.ZodISODateTime>;
+    decidedBy: z.ZodNullable<z.ZodString>;
+    decisionNote: z.ZodNullable<z.ZodString>;
     createdAt: z.ZodISODateTime;
     updatedAt: z.ZodISODateTime;
 }, z.core.$strip>;
@@ -86,6 +115,7 @@ export declare const assignMembershipBodySchema: z.ZodObject<{
     planId: z.ZodString;
     variantId: z.ZodString;
     startDate: z.ZodOptional<z.ZodString>;
+    paymentProofUrl: z.ZodOptional<z.ZodString>;
     payment: z.ZodOptional<z.ZodObject<{
         amountInr: z.ZodNumber;
         method: z.ZodEnum<{
@@ -95,12 +125,89 @@ export declare const assignMembershipBodySchema: z.ZodObject<{
         }>;
         status: z.ZodDefault<z.ZodEnum<{
             success: "success";
-            failed: "failed";
             pending: "pending";
+            failed: "failed";
         }>>;
     }, z.core.$strip>>;
 }, z.core.$strip>;
 export type AssignMembershipBody = z.infer<typeof assignMembershipBodySchema>;
+/**
+ * The gym marking a pending membership's payment as done, which is the single
+ * act that activates it.
+ *
+ * It carries the LEDGER entry rather than being a bare approval, because those
+ * are the same event: the owner is asserting that this much money arrived by
+ * this route. Splitting them would let a membership go live with nothing
+ * written down, which is exactly the hole this feature exists to close.
+ *
+ * The amount is not forced to equal the plan price. A gym that takes half now
+ * and half on Friday still wants the member training, and the balance is
+ * already tracked against the term.
+ */
+export declare const confirmMembershipPaymentBodySchema: z.ZodObject<{
+    amountInr: z.ZodNumber;
+    method: z.ZodEnum<{
+        upi: "upi";
+        cash: "cash";
+        card: "card";
+    }>;
+    note: z.ZodPreprocess<z.ZodOptional<z.ZodString>>;
+}, z.core.$strip>;
+export type ConfirmMembershipPaymentBody = z.infer<typeof confirmMembershipPaymentBodySchema>;
+/**
+ * One row of the gym's confirmation queue.
+ *
+ * The membership plus just enough of the person to act on it. The owner is
+ * deciding about a HUMAN — "did Ravi's transfer land" — and a list of plan
+ * names and amounts with no names attached is not something anybody can
+ * answer. Kept to four fields rather than embedding the whole roster row,
+ * because this list is read on every visit to the members screen.
+ */
+export declare const pendingMembershipRowSchema: z.ZodObject<{
+    membership: z.ZodObject<{
+        id: z.ZodString;
+        enrolmentId: z.ZodString;
+        userId: z.ZodNullable<z.ZodString>;
+        centerId: z.ZodString;
+        planId: z.ZodString;
+        planName: z.ZodString;
+        variantId: z.ZodString;
+        variantLabel: z.ZodString;
+        priceInr: z.ZodNumber;
+        status: z.ZodEnum<{
+            invited: "invited";
+            active: "active";
+            pending: "pending";
+            rejected: "rejected";
+            paused: "paused";
+            expired: "expired";
+            cancelled: "cancelled";
+        }>;
+        startDate: z.ZodString;
+        endDate: z.ZodString;
+        pausedFrom: z.ZodNullable<z.ZodString>;
+        pausedTo: z.ZodNullable<z.ZodString>;
+        paymentProofUrl: z.ZodNullable<z.ZodString>;
+        requestedAt: z.ZodISODateTime;
+        decidedAt: z.ZodNullable<z.ZodISODateTime>;
+        decidedBy: z.ZodNullable<z.ZodString>;
+        decisionNote: z.ZodNullable<z.ZodString>;
+        createdAt: z.ZodISODateTime;
+        updatedAt: z.ZodISODateTime;
+    }, z.core.$strip>;
+    member: z.ZodObject<{
+        enrolmentId: z.ZodString;
+        gymMemberCode: z.ZodString;
+        name: z.ZodString;
+        avatarUrl: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export type PendingMembershipRow = z.infer<typeof pendingMembershipRowSchema>;
+/** Turning a request down. The reason reaches the member. */
+export declare const rejectMembershipPaymentBodySchema: z.ZodObject<{
+    reason: z.ZodPreprocess<z.ZodOptional<z.ZodString>>;
+}, z.core.$strip>;
+export type RejectMembershipPaymentBody = z.infer<typeof rejectMembershipPaymentBodySchema>;
 export declare const pauseDurationSchema: z.ZodEnum<{
     custom: "custom";
     "1w": "1w";

package/dist/membership.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"membership.d.ts","sourceRoot":"","sources":["../src/membership.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAWxB;;;GAGG;AACH,eAAO,MAAM,sBAAsB;;;;;;EAMjC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAItE,eAAO,MAAM,mBAAmB;;;;EAAkC,CAAC;AACnE,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE,eAAO,MAAM,mBAAmB;;;;EAA2C,CAAC;AAC5E,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;iBAQxB,CAAC;AACH,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAIpD,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;iBAuC3B,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAI1D;;;GAGG;AACH,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;iBAYrC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAI9E,eAAO,MAAM,mBAAmB;;;;;EAAuC,CAAC;AACxE,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE,eAAO,MAAM,yBAAyB;;;;;;;;;iBASlC,CAAC;AACL,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAI5E,8EAA8E;AAC9E,eAAO,MAAM,0BAA0B;;;iBAGrC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAI9E,eAAO,MAAM,wBAAwB;;;;;;;;iBAInC,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC"}
+{"version":3,"file":"membership.d.ts","sourceRoot":"","sources":["../src/membership.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAWxB;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,eAAO,MAAM,sBAAsB;;;;;;;;EAQjC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAItE,eAAO,MAAM,mBAAmB;;;;EAAkC,CAAC;AACnE,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE,eAAO,MAAM,mBAAmB;;;;EAA2C,CAAC;AAC5E,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;iBAQxB,CAAC;AACH,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAIpD,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAgE3B,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAI1D;;;GAGG;AACH,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;iBAiBrC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAI9E;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,kCAAkC;;;;;;;;iBAI7C,CAAC;AACH,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAE9F;;;;;;;;GAQG;AACH,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAQrC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E,6DAA6D;AAC7D,eAAO,MAAM,iCAAiC;;iBAE5C,CAAC;AACH,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAI5F,eAAO,MAAM,mBAAmB;;;;;EAAuC,CAAC;AACxE,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE,eAAO,MAAM,yBAAyB;;;;;;;;;iBASlC,CAAC;AACL,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAI5E,8EAA8E;AAC9E,eAAO,MAAM,0BAA0B;;;iBAGrC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAI9E,eAAO,MAAM,wBAAwB;;;;;;;;iBAInC,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC"}