feat: profile flow — Zod schema, /me/profile API, /profile page with BMR/TDEE

@ketopath/shared — new module profile/schema:
- profileInputSchema (Zod): age 18-110, gender, height 120-230 cm, weights
  35-300 kg, activityLevel, optional targetDate
- GENDERS / ACTIVITY_LEVELS string-literal arrays for UI iteration
- Re-exported from @ketopath/shared

apps/api — new module modules/profile:
- PUT /me/profile: requireAuth, validates body via profileInputSchema, upserts
  the row, returns the saved profile + derived { bmr, tdee, activityMultiplier }
  (BMR/TDEE computed via @ketopath/shared)
- GET /me/profile: requireAuth, returns the same shape, 404 when missing
- Decimal columns serialised back as numbers

apps/web — new /profile page:
- src/app/[locale]/profile/page.tsx (server): redirects unauthenticated users
  to /sign-in, calls fetchProfile to hydrate the form
- profile-form.tsx (client): react-hook-form + zodResolver bound to the same
  shared schema, native styled selects for gender/activityLevel until shadcn
  Select arrives, post-submit panel showing BMR/TDEE/multiplier
- actions.ts: server actions saveProfile / fetchProfile that proxy the call
  to API_URL via cookie passthrough (no CORS, no exposed token)
- Home page gains a "Completa il tuo profilo" CTA when signed in
- API_URL env var added to .env.example
- Italian copy in messages/it.json under Profile

Verified end-to-end with the "Michele" PRD persona (49, M, 170cm, 76kg, SEDENTARY):
BMR = 1583 kcal, TDEE = 1899 kcal, multiplier 1.2 — matches the unit tests.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

apps/web/src/app/[locale]/page.tsx

@@ -24,6 +24,9 @@ function HomeContent({ userName }: { userName: string | null }) {
       {userName ? (
         <div className="flex flex-wrap items-center gap-3">
           <span className="text-foreground text-sm">{t('signedInAs', { name: userName })}</span>
+          <Button asChild>
+            <Link href="/profile">{t('completeProfile')}</Link>
+          </Button>
           <SignOutButton label={t('signOut')} />
         </div>
       ) : (

apps/web/src/app/[locale]/profile/actions.ts

@@ -0,0 +1,43 @@
+'use server';
+
+import { profileInputSchema, type ProfileInput } from '@ketopath/shared';
+import { headers } from 'next/headers';
+
+const API_URL = process.env.API_URL ?? 'http://localhost:4000';
+
+export type SaveProfileResult = { ok: true; profile: unknown } | { ok: false; error: string };
+
+export async function saveProfile(input: ProfileInput): Promise<SaveProfileResult> {
+  const parsed = profileInputSchema.safeParse(input);
+  if (!parsed.success) {
+    return { ok: false, error: parsed.error.issues[0]?.message ?? 'invalid_input' };
+  }
+
+  const cookie = headers().get('cookie') ?? '';
+
+  const res = await fetch(`${API_URL}/me/profile`, {
+    method: 'PUT',
+    headers: { 'Content-Type': 'application/json', cookie },
+    body: JSON.stringify(parsed.data),
+    cache: 'no-store',
+  });
+
+  if (!res.ok) {
+    return { ok: false, error: `api_error_${res.status}` };
+  }
+
+  const data = (await res.json()) as { profile: unknown };
+  return { ok: true, profile: data.profile };
+}
+
+export async function fetchProfile(): Promise<unknown | null> {
+  const cookie = headers().get('cookie') ?? '';
+  const res = await fetch(`${API_URL}/me/profile`, {
+    headers: { cookie },
+    cache: 'no-store',
+  });
+  if (res.status === 404) return null;
+  if (!res.ok) throw new Error(`api_error_${res.status}`);
+  const data = (await res.json()) as { profile: unknown };
+  return data.profile;
+}

apps/web/src/app/[locale]/profile/page.tsx

@@ -0,0 +1,41 @@
+import { redirect } from 'next/navigation';
+import { useTranslations } from 'next-intl';
+import { setRequestLocale } from 'next-intl/server';
+
+import { Card, CardContent, CardDescription, CardHeader, CardTitle } from '@/components/ui/card';
+import { getServerSession } from '@/lib/auth';
+
+import { fetchProfile } from './actions';
+import { ProfileForm } from './profile-form';
+
+export default async function ProfilePage({ params: { locale } }: { params: { locale: string } }) {
+  setRequestLocale(locale);
+  const session = await getServerSession();
+  if (!session?.user) redirect('/sign-in');
+
+  const profile = (await fetchProfile()) as Parameters<typeof ProfileForm>[0]['initial'];
+
+  return <ProfilePageContent initial={profile} />;
+}
+
+function ProfilePageContent({
+  initial,
+}: {
+  initial: Parameters<typeof ProfileForm>[0]['initial'];
+}) {
+  const t = useTranslations('Profile');
+
+  return (
+    <main className="mx-auto flex min-h-screen max-w-2xl flex-col justify-center px-6 py-16">
+      <Card>
+        <CardHeader>
+          <CardTitle>{t('title')}</CardTitle>
+          <CardDescription>{t('subtitle')}</CardDescription>
+        </CardHeader>
+        <CardContent>
+          <ProfileForm initial={initial} />
+        </CardContent>
+      </Card>
+    </main>
+  );
+}

apps/web/src/app/[locale]/profile/profile-form.tsx

@@ -0,0 +1,155 @@
+'use client';
+
+import { zodResolver } from '@hookform/resolvers/zod';
+import { ACTIVITY_LEVELS, GENDERS, profileInputSchema, type ProfileInput } from '@ketopath/shared';
+import { useRouter } from 'next/navigation';
+import { useTranslations } from 'next-intl';
+import { useState } from 'react';
+import { useForm } from 'react-hook-form';
+
+import { Button } from '@/components/ui/button';
+import { Input } from '@/components/ui/input';
+import { Label } from '@/components/ui/label';
+
+import { saveProfile } from './actions';
+
+type Derived = { bmr: number; tdee: number; activityMultiplier: number };
+type Profile = ProfileInput & { derived?: Derived };
+
+export function ProfileForm({ initial }: { initial: Profile | null }) {
+  const t = useTranslations('Profile');
+  const router = useRouter();
+  const [serverError, setServerError] = useState<string | null>(null);
+  const [saved, setSaved] = useState<Derived | null>(initial?.derived ?? null);
+
+  const {
+    register,
+    handleSubmit,
+    formState: { errors, isSubmitting },
+  } = useForm<ProfileInput>({
+    resolver: zodResolver(profileInputSchema),
+    defaultValues: initial
+      ? {
+          age: initial.age,
+          gender: initial.gender,
+          heightCm: initial.heightCm,
+          weightStartKg: initial.weightStartKg,
+          weightCurrentKg: initial.weightCurrentKg,
+          weightGoalKg: initial.weightGoalKg,
+          activityLevel: initial.activityLevel,
+        }
+      : undefined,
+  });
+
+  const onSubmit = handleSubmit(async (input) => {
+    setServerError(null);
+    const result = await saveProfile(input);
+    if (!result.ok) {
+      setServerError(result.error);
+      return;
+    }
+    const profile = result.profile as Profile;
+    if (profile.derived) setSaved(profile.derived);
+    router.refresh();
+  });
+
+  return (
+    <form onSubmit={onSubmit} className="space-y-5" noValidate>
+      <div className="grid grid-cols-2 gap-4">
+        <Field label={t('age')} error={errors.age?.message}>
+          <Input type="number" inputMode="numeric" {...register('age')} />
+        </Field>
+        <Field label={t('gender')} error={errors.gender?.message}>
+          <select
+            className="border-input bg-background ring-offset-background focus-visible:ring-ring flex h-10 w-full rounded-md border px-3 py-2 text-sm focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-offset-2"
+            {...register('gender')}
+          >
+            <option value="">{t('selectPlaceholder')}</option>
+            {GENDERS.map((g) => (
+              <option key={g} value={g}>
+                {t(`genderOptions.${g}`)}
+              </option>
+            ))}
+          </select>
+        </Field>
+      </div>
+
+      <Field label={t('heightCm')} error={errors.heightCm?.message}>
+        <Input type="number" inputMode="numeric" {...register('heightCm')} />
+      </Field>
+
+      <div className="grid grid-cols-3 gap-4">
+        <Field label={t('weightStartKg')} error={errors.weightStartKg?.message}>
+          <Input type="number" step="0.1" inputMode="decimal" {...register('weightStartKg')} />
+        </Field>
+        <Field label={t('weightCurrentKg')} error={errors.weightCurrentKg?.message}>
+          <Input type="number" step="0.1" inputMode="decimal" {...register('weightCurrentKg')} />
+        </Field>
+        <Field label={t('weightGoalKg')} error={errors.weightGoalKg?.message}>
+          <Input type="number" step="0.1" inputMode="decimal" {...register('weightGoalKg')} />
+        </Field>
+      </div>
+
+      <Field label={t('activityLevel')} error={errors.activityLevel?.message}>
+        <select
+          className="border-input bg-background ring-offset-background focus-visible:ring-ring flex h-10 w-full rounded-md border px-3 py-2 text-sm focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-offset-2"
+          {...register('activityLevel')}
+        >
+          <option value="">{t('selectPlaceholder')}</option>
+          {ACTIVITY_LEVELS.map((a) => (
+            <option key={a} value={a}>
+              {t(`activityOptions.${a}`)}
+            </option>
+          ))}
+        </select>
+      </Field>
+
+      {serverError ? (
+        <p role="alert" className="text-destructive text-sm">
+          {serverError}
+        </p>
+      ) : null}
+
+      <Button type="submit" disabled={isSubmitting} className="w-full">
+        {isSubmitting ? t('saving') : t('save')}
+      </Button>
+
+      {saved ? (
+        <div className="bg-secondary mt-6 rounded-md p-4 text-sm">
+          <p className="font-medium">{t('summary')}</p>
+          <ul className="mt-2 space-y-1">
+            <li>
+              {t('bmr')}: <span className="font-mono">{saved.bmr} kcal</span>
+            </li>
+            <li>
+              {t('tdee')}: <span className="font-mono">{saved.tdee} kcal</span>
+            </li>
+            <li>
+              {t('activityMultiplier')}:{' '}
+              <span className="font-mono">{saved.activityMultiplier}</span>
+            </li>
+          </ul>
+          <p className="text-muted-foreground mt-2 text-xs">{t('hint')}</p>
+        </div>
+      ) : null}
+    </form>
+  );
+}
+
+function Field({
+  label,
+  error,
+  children,
+}: {
+  label: string;
+  error?: string;
+  children: React.ReactNode;
+}) {
+  return (
+    <div className="space-y-1.5">
+      <Label>{label}</Label>
+      {children}
+      {error ? <p className="text-destructive text-xs">{error}</p> : null}
+    </div>
+  );
+}