@acequants/aegis-contracts 0.1.58 → 0.1.60

package/dist/src/gen/service_provisioning/v1/service_provisioning.d.ts

@@ -0,0 +1,122 @@
+import type { handleUnaryCall, UntypedServiceImplementation } from "@grpc/grpc-js";
+import _m0 from "protobufjs/minimal";
+import { Observable } from "rxjs";
+export declare const protobufPackage = "aegis.service_provisioning.v1";
+/**
+ * Single request — "create / upsert this row on the downstream service".
+ *
+ * `resource`        → the namespace registered by the consumer (e.g. "agent").
+ *                     Must match a `defineProvisioningHandler.name` registered
+ *                     via `ServiceProvisioningModule.forFeature([...])`.
+ *
+ * `idempotency_key` → producer-chosen stable identifier for this logical
+ *                     operation. The consumer is REQUIRED to be idempotent
+ *                     under this key — typically by upserting on a unique
+ *                     column derived from the payload (e.g. `userPublicId`).
+ *                     The producer also uses this as the BullMQ `jobId` so
+ *                     replays at the queue layer are dropped before they
+ *                     reach the wire.
+ *
+ * `payload_json`    → UTF-8 JSON string of the producer's request projection
+ *                     for this resource. The consumer's handler parses it
+ *                     into a typed `T` at the boundary. Keep it LEAN — only
+ *                     the fields the consumer actually needs to perform the
+ *                     write.
+ */
+export interface ServiceProvisioningRequest {
+    resource: string;
+    idempotencyKey: string;
+    payloadJson: string;
+}
+/**
+ * Single response — "I am done; here is whatever the handler chose to ack".
+ *
+ * `ack_json` is a UTF-8 JSON string. It is OPTIONAL — handlers may return
+ * `"{}"` if they have nothing useful to say. Producers MUST NOT depend on a
+ * specific shape unless their target definition says so. The success of the
+ * RPC itself (no error status) is the primary signal.
+ */
+export interface ServiceProvisioningResponse {
+    ackJson: string;
+}
+export declare const AEGIS_SERVICE_PROVISIONING_V1_PACKAGE_NAME = "aegis.service_provisioning.v1";
+export declare const ServiceProvisioningRequest: {
+    encode(message: ServiceProvisioningRequest, writer?: _m0.Writer): _m0.Writer;
+    decode(input: _m0.Reader | Uint8Array, length?: number): ServiceProvisioningRequest;
+};
+export declare const ServiceProvisioningResponse: {
+    encode(message: ServiceProvisioningResponse, writer?: _m0.Writer): _m0.Writer;
+    decode(input: _m0.Reader | Uint8Array, length?: number): ServiceProvisioningResponse;
+};
+/**
+ * The only service. Add new flows by registering them on each side, not by
+ * editing this proto.
+ *
+ * Error semantics (mapped via @grpc/grpc-js `status` codes):
+ *
+ *   • OK              — write committed (or already existed; see ALREADY_EXISTS).
+ *   • ALREADY_EXISTS  — clean duplicate; producer should treat as success.
+ *   • NOT_FOUND       — `resource` is not registered on the consumer.
+ *   • INVALID_ARGUMENT — `payload_json` failed the handler's `parse(...)`.
+ *   • UNAUTHENTICATED — internal shared-secret metadata missing or wrong.
+ *   • INTERNAL        — handler threw an unexpected error.
+ *
+ * Anything other than OK / ALREADY_EXISTS is retryable from the producer's
+ * BullMQ processor with exponential backoff.
+ */
+export interface ServiceProvisioningClient {
+    provision(request: ServiceProvisioningRequest): Observable<ServiceProvisioningResponse>;
+}
+/**
+ * The only service. Add new flows by registering them on each side, not by
+ * editing this proto.
+ *
+ * Error semantics (mapped via @grpc/grpc-js `status` codes):
+ *
+ *   • OK              — write committed (or already existed; see ALREADY_EXISTS).
+ *   • ALREADY_EXISTS  — clean duplicate; producer should treat as success.
+ *   • NOT_FOUND       — `resource` is not registered on the consumer.
+ *   • INVALID_ARGUMENT — `payload_json` failed the handler's `parse(...)`.
+ *   • UNAUTHENTICATED — internal shared-secret metadata missing or wrong.
+ *   • INTERNAL        — handler threw an unexpected error.
+ *
+ * Anything other than OK / ALREADY_EXISTS is retryable from the producer's
+ * BullMQ processor with exponential backoff.
+ */
+export interface ServiceProvisioningController {
+    provision(request: ServiceProvisioningRequest): Promise<ServiceProvisioningResponse> | Observable<ServiceProvisioningResponse> | ServiceProvisioningResponse;
+}
+export declare function ServiceProvisioningControllerMethods(): (constructor: Function) => void;
+export declare const SERVICE_PROVISIONING_SERVICE_NAME = "ServiceProvisioning";
+/**
+ * The only service. Add new flows by registering them on each side, not by
+ * editing this proto.
+ *
+ * Error semantics (mapped via @grpc/grpc-js `status` codes):
+ *
+ *   • OK              — write committed (or already existed; see ALREADY_EXISTS).
+ *   • ALREADY_EXISTS  — clean duplicate; producer should treat as success.
+ *   • NOT_FOUND       — `resource` is not registered on the consumer.
+ *   • INVALID_ARGUMENT — `payload_json` failed the handler's `parse(...)`.
+ *   • UNAUTHENTICATED — internal shared-secret metadata missing or wrong.
+ *   • INTERNAL        — handler threw an unexpected error.
+ *
+ * Anything other than OK / ALREADY_EXISTS is retryable from the producer's
+ * BullMQ processor with exponential backoff.
+ */
+export type ServiceProvisioningService = typeof ServiceProvisioningService;
+export declare const ServiceProvisioningService: {
+    readonly provision: {
+        readonly path: "/aegis.service_provisioning.v1.ServiceProvisioning/Provision";
+        readonly requestStream: false;
+        readonly responseStream: false;
+        readonly requestSerialize: (value: ServiceProvisioningRequest) => Buffer<ArrayBuffer>;
+        readonly requestDeserialize: (value: Buffer) => ServiceProvisioningRequest;
+        readonly responseSerialize: (value: ServiceProvisioningResponse) => Buffer<ArrayBuffer>;
+        readonly responseDeserialize: (value: Buffer) => ServiceProvisioningResponse;
+    };
+};
+export interface ServiceProvisioningServer extends UntypedServiceImplementation {
+    provision: handleUnaryCall<ServiceProvisioningRequest, ServiceProvisioningResponse>;
+}
+//# sourceMappingURL=service_provisioning.d.ts.map

package/dist/src/gen/service_provisioning/v1/service_provisioning.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service_provisioning.d.ts","sourceRoot":"","sources":["../../../../../src/gen/service_provisioning/v1/service_provisioning.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,eAAe,EAAE,4BAA4B,EAAE,MAAM,eAAe,CAAC;AAEnF,OAAO,GAAG,MAAM,oBAAoB,CAAC;AACrC,OAAO,EAAE,UAAU,EAAE,MAAM,MAAM,CAAC;AAElC,eAAO,MAAM,eAAe,kCAAkC,CAAC;AAE/D;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,2BAA2B;IAC1C,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,eAAO,MAAM,0CAA0C,kCAAkC,CAAC;AAM1F,eAAO,MAAM,0BAA0B;oBACrB,0BAA0B,WAAU,GAAG,CAAC,MAAM,GAAyB,GAAG,CAAC,MAAM;kBAanF,GAAG,CAAC,MAAM,GAAG,UAAU,WAAW,MAAM,GAAG,0BAA0B;CAoCpF,CAAC;AAMF,eAAO,MAAM,2BAA2B;oBACtB,2BAA2B,WAAU,GAAG,CAAC,MAAM,GAAyB,GAAG,CAAC,MAAM;kBAOpF,GAAG,CAAC,MAAM,GAAG,UAAU,WAAW,MAAM,GAAG,2BAA2B;CAsBrF,CAAC;AAEF;;;;;;;;;;;;;;;GAeG;AAEH,MAAM,WAAW,yBAAyB;IACxC,SAAS,CAAC,OAAO,EAAE,0BAA0B,GAAG,UAAU,CAAC,2BAA2B,CAAC,CAAC;CACzF;AAED;;;;;;;;;;;;;;;GAeG;AAEH,MAAM,WAAW,6BAA6B;IAC5C,SAAS,CACP,OAAO,EAAE,0BAA0B,GAClC,OAAO,CAAC,2BAA2B,CAAC,GAAG,UAAU,CAAC,2BAA2B,CAAC,GAAG,2BAA2B,CAAC;CACjH;AAED,wBAAgB,oCAAoC,KACjC,aAAa,QAAQ,UAYvC;AAED,eAAO,MAAM,iCAAiC,wBAAwB,CAAC;AAEvE;;;;;;;;;;;;;;;GAeG;AACH,MAAM,MAAM,0BAA0B,GAAG,OAAO,0BAA0B,CAAC;AAC3E,eAAO,MAAM,0BAA0B;;;;;2CAKT,0BAA0B;6CAExB,MAAM;4CACP,2BAA2B;8CAEzB,MAAM;;CAE7B,CAAC;AAEX,MAAM,WAAW,yBAA0B,SAAQ,4BAA4B;IAC7E,SAAS,EAAE,eAAe,CAAC,0BAA0B,EAAE,2BAA2B,CAAC,CAAC;CACrF"}

package/dist/src/gen/service_provisioning/v1/service_provisioning.js

@@ -0,0 +1,117 @@
+// Code generated by protoc-gen-ts_proto. DO NOT EDIT.
+// versions:
+//   protoc-gen-ts_proto  v1.181.2
+//   protoc               v6.32.0
+// source: service_provisioning/v1/service_provisioning.proto
+import { GrpcMethod, GrpcStreamMethod } from "@nestjs/microservices";
+import _m0 from "protobufjs/minimal";
+export const protobufPackage = "aegis.service_provisioning.v1";
+export const AEGIS_SERVICE_PROVISIONING_V1_PACKAGE_NAME = "aegis.service_provisioning.v1";
+function createBaseServiceProvisioningRequest() {
+    return { resource: "", idempotencyKey: "", payloadJson: "" };
+}
+export const ServiceProvisioningRequest = {
+    encode(message, writer = _m0.Writer.create()) {
+        if (message.resource !== "") {
+            writer.uint32(10).string(message.resource);
+        }
+        if (message.idempotencyKey !== "") {
+            writer.uint32(18).string(message.idempotencyKey);
+        }
+        if (message.payloadJson !== "") {
+            writer.uint32(26).string(message.payloadJson);
+        }
+        return writer;
+    },
+    decode(input, length) {
+        const reader = input instanceof _m0.Reader ? input : _m0.Reader.create(input);
+        let end = length === undefined ? reader.len : reader.pos + length;
+        const message = createBaseServiceProvisioningRequest();
+        while (reader.pos < end) {
+            const tag = reader.uint32();
+            switch (tag >>> 3) {
+                case 1:
+                    if (tag !== 10) {
+                        break;
+                    }
+                    message.resource = reader.string();
+                    continue;
+                case 2:
+                    if (tag !== 18) {
+                        break;
+                    }
+                    message.idempotencyKey = reader.string();
+                    continue;
+                case 3:
+                    if (tag !== 26) {
+                        break;
+                    }
+                    message.payloadJson = reader.string();
+                    continue;
+            }
+            if ((tag & 7) === 4 || tag === 0) {
+                break;
+            }
+            reader.skipType(tag & 7);
+        }
+        return message;
+    },
+};
+function createBaseServiceProvisioningResponse() {
+    return { ackJson: "" };
+}
+export const ServiceProvisioningResponse = {
+    encode(message, writer = _m0.Writer.create()) {
+        if (message.ackJson !== "") {
+            writer.uint32(10).string(message.ackJson);
+        }
+        return writer;
+    },
+    decode(input, length) {
+        const reader = input instanceof _m0.Reader ? input : _m0.Reader.create(input);
+        let end = length === undefined ? reader.len : reader.pos + length;
+        const message = createBaseServiceProvisioningResponse();
+        while (reader.pos < end) {
+            const tag = reader.uint32();
+            switch (tag >>> 3) {
+                case 1:
+                    if (tag !== 10) {
+                        break;
+                    }
+                    message.ackJson = reader.string();
+                    continue;
+            }
+            if ((tag & 7) === 4 || tag === 0) {
+                break;
+            }
+            reader.skipType(tag & 7);
+        }
+        return message;
+    },
+};
+export function ServiceProvisioningControllerMethods() {
+    return function (constructor) {
+        const grpcMethods = ["provision"];
+        for (const method of grpcMethods) {
+            const descriptor = Reflect.getOwnPropertyDescriptor(constructor.prototype, method);
+            GrpcMethod("ServiceProvisioning", method)(constructor.prototype[method], method, descriptor);
+        }
+        const grpcStreamMethods = [];
+        for (const method of grpcStreamMethods) {
+            const descriptor = Reflect.getOwnPropertyDescriptor(constructor.prototype, method);
+            GrpcStreamMethod("ServiceProvisioning", method)(constructor.prototype[method], method, descriptor);
+        }
+    };
+}
+export const SERVICE_PROVISIONING_SERVICE_NAME = "ServiceProvisioning";
+export const ServiceProvisioningService = {
+    provision: {
+        path: "/aegis.service_provisioning.v1.ServiceProvisioning/Provision",
+        requestStream: false,
+        responseStream: false,
+        requestSerialize: (value) => Buffer.from(ServiceProvisioningRequest.encode(value).finish()),
+        requestDeserialize: (value) => ServiceProvisioningRequest.decode(value),
+        responseSerialize: (value) => Buffer.from(ServiceProvisioningResponse.encode(value).finish()),
+        responseDeserialize: (value) => ServiceProvisioningResponse.decode(value),
+    },
+};

package/dist/src/gen/service_sync/v1/service_sync.d.ts

@@ -0,0 +1,88 @@
+import type { handleUnaryCall, UntypedServiceImplementation } from "@grpc/grpc-js";
+import _m0 from "protobufjs/minimal";
+import { Observable } from "rxjs";
+export declare const protobufPackage = "aegis.service_sync.v1";
+/**
+ * Single request — "give me these N rows of this resource".
+ *
+ * `resource`  → the namespace registered by the publisher (e.g. "user",
+ *               "role", "invoice"). Must match a `defineSyncSource.name`.
+ * `keys`      → opaque string keys (typically publicId / cuid). The publisher
+ *               decides what "key" means via `defineSyncSource.keyOf`.
+ *
+ * Limits — the consumer batches per-request, so 100–1000 keys per call is
+ * the expected shape. Above ~5000, split into chunks at the consumer.
+ */
+export interface ServiceSyncFetchRequest {
+    resource: string;
+    keys: string[];
+}
+/**
+ * Single response — "here are the rows I found".
+ *
+ * Missing keys are simply absent from `rows`. Consumers map by key and
+ * surface `null` for any key not returned (e.g. soft-deleted upstream).
+ */
+export interface ServiceSyncFetchResponse {
+    rows: ServiceSyncFetchRow[];
+}
+/**
+ * One row of result data.
+ *
+ * `payload_json` is a UTF-8 JSON string of the publisher's projection for
+ * this resource. The consumer parses it into a typed `T` at the boundary.
+ * Keep the projection LEAN — only the display fields the consumer needs.
+ */
+export interface ServiceSyncFetchRow {
+    key: string;
+    payloadJson: string;
+}
+export declare const AEGIS_SERVICE_SYNC_V1_PACKAGE_NAME = "aegis.service_sync.v1";
+export declare const ServiceSyncFetchRequest: {
+    encode(message: ServiceSyncFetchRequest, writer?: _m0.Writer): _m0.Writer;
+    decode(input: _m0.Reader | Uint8Array, length?: number): ServiceSyncFetchRequest;
+};
+export declare const ServiceSyncFetchResponse: {
+    encode(message: ServiceSyncFetchResponse, writer?: _m0.Writer): _m0.Writer;
+    decode(input: _m0.Reader | Uint8Array, length?: number): ServiceSyncFetchResponse;
+};
+export declare const ServiceSyncFetchRow: {
+    encode(message: ServiceSyncFetchRow, writer?: _m0.Writer): _m0.Writer;
+    decode(input: _m0.Reader | Uint8Array, length?: number): ServiceSyncFetchRow;
+};
+/**
+ * The only service. Add new resources by registering them on each side, not
+ * by editing this proto.
+ */
+export interface ServiceSyncClient {
+    fetch(request: ServiceSyncFetchRequest): Observable<ServiceSyncFetchResponse>;
+}
+/**
+ * The only service. Add new resources by registering them on each side, not
+ * by editing this proto.
+ */
+export interface ServiceSyncController {
+    fetch(request: ServiceSyncFetchRequest): Promise<ServiceSyncFetchResponse> | Observable<ServiceSyncFetchResponse> | ServiceSyncFetchResponse;
+}
+export declare function ServiceSyncControllerMethods(): (constructor: Function) => void;
+export declare const SERVICE_SYNC_SERVICE_NAME = "ServiceSync";
+/**
+ * The only service. Add new resources by registering them on each side, not
+ * by editing this proto.
+ */
+export type ServiceSyncService = typeof ServiceSyncService;
+export declare const ServiceSyncService: {
+    readonly fetch: {
+        readonly path: "/aegis.service_sync.v1.ServiceSync/Fetch";
+        readonly requestStream: false;
+        readonly responseStream: false;
+        readonly requestSerialize: (value: ServiceSyncFetchRequest) => Buffer<ArrayBuffer>;
+        readonly requestDeserialize: (value: Buffer) => ServiceSyncFetchRequest;
+        readonly responseSerialize: (value: ServiceSyncFetchResponse) => Buffer<ArrayBuffer>;
+        readonly responseDeserialize: (value: Buffer) => ServiceSyncFetchResponse;
+    };
+};
+export interface ServiceSyncServer extends UntypedServiceImplementation {
+    fetch: handleUnaryCall<ServiceSyncFetchRequest, ServiceSyncFetchResponse>;
+}
+//# sourceMappingURL=service_sync.d.ts.map

package/dist/src/gen/service_sync/v1/service_sync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service_sync.d.ts","sourceRoot":"","sources":["../../../../../src/gen/service_sync/v1/service_sync.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,eAAe,EAAE,4BAA4B,EAAE,MAAM,eAAe,CAAC;AAEnF,OAAO,GAAG,MAAM,oBAAoB,CAAC;AACrC,OAAO,EAAE,UAAU,EAAE,MAAM,MAAM,CAAC;AAElC,eAAO,MAAM,eAAe,0BAA0B,CAAC;AAEvD;;;;;;;;;;GAUG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,EAAE,CAAC;CAChB;AAED;;;;;GAKG;AACH,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,mBAAmB,EAAE,CAAC;CAC7B;AAED;;;;;;GAMG;AACH,MAAM,WAAW,mBAAmB;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,eAAO,MAAM,kCAAkC,0BAA0B,CAAC;AAM1E,eAAO,MAAM,uBAAuB;oBAClB,uBAAuB,WAAU,GAAG,CAAC,MAAM,GAAyB,GAAG,CAAC,MAAM;kBAUhF,GAAG,CAAC,MAAM,GAAG,UAAU,WAAW,MAAM,GAAG,uBAAuB;CA6BjF,CAAC;AAMF,eAAO,MAAM,wBAAwB;oBACnB,wBAAwB,WAAU,GAAG,CAAC,MAAM,GAAyB,GAAG,CAAC,MAAM;kBAOjF,GAAG,CAAC,MAAM,GAAG,UAAU,WAAW,MAAM,GAAG,wBAAwB;CAsBlF,CAAC;AAMF,eAAO,MAAM,mBAAmB;oBACd,mBAAmB,WAAU,GAAG,CAAC,MAAM,GAAyB,GAAG,CAAC,MAAM;kBAU5E,GAAG,CAAC,MAAM,GAAG,UAAU,WAAW,MAAM,GAAG,mBAAmB;CA6B7E,CAAC;AAEF;;;GAGG;AAEH,MAAM,WAAW,iBAAiB;IAChC,KAAK,CAAC,OAAO,EAAE,uBAAuB,GAAG,UAAU,CAAC,wBAAwB,CAAC,CAAC;CAC/E;AAED;;;GAGG;AAEH,MAAM,WAAW,qBAAqB;IACpC,KAAK,CACH,OAAO,EAAE,uBAAuB,GAC/B,OAAO,CAAC,wBAAwB,CAAC,GAAG,UAAU,CAAC,wBAAwB,CAAC,GAAG,wBAAwB,CAAC;CACxG;AAED,wBAAgB,4BAA4B,KACzB,aAAa,QAAQ,UAYvC;AAED,eAAO,MAAM,yBAAyB,gBAAgB,CAAC;AAEvD;;;GAGG;AACH,MAAM,MAAM,kBAAkB,GAAG,OAAO,kBAAkB,CAAC;AAC3D,eAAO,MAAM,kBAAkB;;;;;2CAKD,uBAAuB;6CACrB,MAAM;4CACP,wBAAwB;8CAEtB,MAAM;;CAE7B,CAAC;AAEX,MAAM,WAAW,iBAAkB,SAAQ,4BAA4B;IACrE,KAAK,EAAE,eAAe,CAAC,uBAAuB,EAAE,wBAAwB,CAAC,CAAC;CAC3E"}

package/dist/src/gen/service_sync/v1/service_sync.js

@@ -0,0 +1,149 @@
+// Code generated by protoc-gen-ts_proto. DO NOT EDIT.
+// versions:
+//   protoc-gen-ts_proto  v1.181.2
+//   protoc               v6.32.0
+// source: service_sync/v1/service_sync.proto
+import { GrpcMethod, GrpcStreamMethod } from "@nestjs/microservices";
+import _m0 from "protobufjs/minimal";
+export const protobufPackage = "aegis.service_sync.v1";
+export const AEGIS_SERVICE_SYNC_V1_PACKAGE_NAME = "aegis.service_sync.v1";
+function createBaseServiceSyncFetchRequest() {
+    return { resource: "", keys: [] };
+}
+export const ServiceSyncFetchRequest = {
+    encode(message, writer = _m0.Writer.create()) {
+        if (message.resource !== "") {
+            writer.uint32(10).string(message.resource);
+        }
+        for (const v of message.keys) {
+            writer.uint32(18).string(v);
+        }
+        return writer;
+    },
+    decode(input, length) {
+        const reader = input instanceof _m0.Reader ? input : _m0.Reader.create(input);
+        let end = length === undefined ? reader.len : reader.pos + length;
+        const message = createBaseServiceSyncFetchRequest();
+        while (reader.pos < end) {
+            const tag = reader.uint32();
+            switch (tag >>> 3) {
+                case 1:
+                    if (tag !== 10) {
+                        break;
+                    }
+                    message.resource = reader.string();
+                    continue;
+                case 2:
+                    if (tag !== 18) {
+                        break;
+                    }
+                    message.keys.push(reader.string());
+                    continue;
+            }
+            if ((tag & 7) === 4 || tag === 0) {
+                break;
+            }
+            reader.skipType(tag & 7);
+        }
+        return message;
+    },
+};
+function createBaseServiceSyncFetchResponse() {
+    return { rows: [] };
+}
+export const ServiceSyncFetchResponse = {
+    encode(message, writer = _m0.Writer.create()) {
+        for (const v of message.rows) {
+            ServiceSyncFetchRow.encode(v, writer.uint32(10).fork()).ldelim();
+        }
+        return writer;
+    },
+    decode(input, length) {
+        const reader = input instanceof _m0.Reader ? input : _m0.Reader.create(input);
+        let end = length === undefined ? reader.len : reader.pos + length;
+        const message = createBaseServiceSyncFetchResponse();
+        while (reader.pos < end) {
+            const tag = reader.uint32();
+            switch (tag >>> 3) {
+                case 1:
+                    if (tag !== 10) {
+                        break;
+                    }
+                    message.rows.push(ServiceSyncFetchRow.decode(reader, reader.uint32()));
+                    continue;
+            }
+            if ((tag & 7) === 4 || tag === 0) {
+                break;
+            }
+            reader.skipType(tag & 7);
+        }
+        return message;
+    },
+};
+function createBaseServiceSyncFetchRow() {
+    return { key: "", payloadJson: "" };
+}
+export const ServiceSyncFetchRow = {
+    encode(message, writer = _m0.Writer.create()) {
+        if (message.key !== "") {
+            writer.uint32(10).string(message.key);
+        }
+        if (message.payloadJson !== "") {
+            writer.uint32(18).string(message.payloadJson);
+        }
+        return writer;
+    },
+    decode(input, length) {
+        const reader = input instanceof _m0.Reader ? input : _m0.Reader.create(input);
+        let end = length === undefined ? reader.len : reader.pos + length;
+        const message = createBaseServiceSyncFetchRow();
+        while (reader.pos < end) {
+            const tag = reader.uint32();
+            switch (tag >>> 3) {
+                case 1:
+                    if (tag !== 10) {
+                        break;
+                    }
+                    message.key = reader.string();
+                    continue;
+                case 2:
+                    if (tag !== 18) {
+                        break;
+                    }
+                    message.payloadJson = reader.string();
+                    continue;
+            }
+            if ((tag & 7) === 4 || tag === 0) {
+                break;
+            }
+            reader.skipType(tag & 7);
+        }
+        return message;
+    },
+};
+export function ServiceSyncControllerMethods() {
+    return function (constructor) {
+        const grpcMethods = ["fetch"];
+        for (const method of grpcMethods) {
+            const descriptor = Reflect.getOwnPropertyDescriptor(constructor.prototype, method);
+            GrpcMethod("ServiceSync", method)(constructor.prototype[method], method, descriptor);
+        }
+        const grpcStreamMethods = [];
+        for (const method of grpcStreamMethods) {
+            const descriptor = Reflect.getOwnPropertyDescriptor(constructor.prototype, method);
+            GrpcStreamMethod("ServiceSync", method)(constructor.prototype[method], method, descriptor);
+        }
+    };
+}
+export const SERVICE_SYNC_SERVICE_NAME = "ServiceSync";
+export const ServiceSyncService = {
+    fetch: {
+        path: "/aegis.service_sync.v1.ServiceSync/Fetch",
+        requestStream: false,
+        responseStream: false,
+        requestSerialize: (value) => Buffer.from(ServiceSyncFetchRequest.encode(value).finish()),
+        requestDeserialize: (value) => ServiceSyncFetchRequest.decode(value),
+        responseSerialize: (value) => Buffer.from(ServiceSyncFetchResponse.encode(value).finish()),
+        responseDeserialize: (value) => ServiceSyncFetchResponse.decode(value),
+    },
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@acequants/aegis-contracts",
-  "version": "0.1.58",
+  "version": "0.1.60",
   "private": false,
   "license": "MIT",
   "type": "module",

package/proto/auth/v1/auth.proto

@@ -5,7 +5,14 @@ package aegis.auth.v1;
 option java_multiple_files = true;
 
 import "google/protobuf/timestamp.proto";
-// import "shared/v1/shared.proto";
+
+// -------------------------------------
+//  USER INTERSERVICE SYNC (AEGIS-GTMS)
+// -------------------------------------
+
+// -------------------------------------
+//  USER INTERSERVICE SYNC (AEGIS-GTMS)
+// -------------------------------------
 
 message GrpcDtoMessage {
     string message = 1;

package/proto/service_provisioning/v1/service_provisioning.proto

@@ -0,0 +1,86 @@
+syntax = "proto3";
+
+package aegis.service_provisioning.v1;
+
+option java_multiple_files = true;
+
+// =============================================================================
+// service-provisioning — generic cross-service WRITE replication contract
+// -----------------------------------------------------------------------------
+// The write-direction sibling of service-sync. One RPC, forever. To onboard a
+// NEW provisioning flow (Agent, Vendor, NotificationPreference, anything) you
+// do NOT edit this file. You register:
+//
+//   • on the PRODUCER  (caller, e.g. aegis) — a `defineProvisioningTarget`
+//     under aegis/src/common/service-provisioning.
+//   • on the CONSUMER (callee,  e.g. gtms ) — a `defineProvisioningHandler`
+//     under gtms/src/shared/v1/service-provisioning.
+//
+// Why a single generic RPC?
+//
+//   PROS
+//     • Zero proto churn when onboarding new flows.
+//     • One controller on the consumer side, dispatching by `resource`.
+//     • Producer feature modules contribute one target file + one forFeature
+//       line, mirroring the service-sync convention developers already know.
+//
+//   CONS / DO NOT
+//     • DO NOT use this for high-throughput data ingestion. It is request /
+//       response and per-call. Bulk ingest belongs in a streaming RPC or
+//       a queue topic.
+//     • DO NOT put binary blobs in `payload_json` — base64 inflates payloads.
+//     • DO NOT use this for read paths — that's what service-sync is for.
+// =============================================================================
+
+// Single request — "create / upsert this row on the downstream service".
+//
+// `resource`        → the namespace registered by the consumer (e.g. "agent").
+//                     Must match a `defineProvisioningHandler.name` registered
+//                     via `ServiceProvisioningModule.forFeature([...])`.
+//
+// `idempotency_key` → producer-chosen stable identifier for this logical
+//                     operation. The consumer is REQUIRED to be idempotent
+//                     under this key — typically by upserting on a unique
+//                     column derived from the payload (e.g. `userPublicId`).
+//                     The producer also uses this as the BullMQ `jobId` so
+//                     replays at the queue layer are dropped before they
+//                     reach the wire.
+//
+// `payload_json`    → UTF-8 JSON string of the producer's request projection
+//                     for this resource. The consumer's handler parses it
+//                     into a typed `T` at the boundary. Keep it LEAN — only
+//                     the fields the consumer actually needs to perform the
+//                     write.
+message ServiceProvisioningRequest {
+  string resource        = 1;
+  string idempotency_key = 2;
+  string payload_json    = 3;
+}
+
+// Single response — "I am done; here is whatever the handler chose to ack".
+//
+// `ack_json` is a UTF-8 JSON string. It is OPTIONAL — handlers may return
+// `"{}"` if they have nothing useful to say. Producers MUST NOT depend on a
+// specific shape unless their target definition says so. The success of the
+// RPC itself (no error status) is the primary signal.
+message ServiceProvisioningResponse {
+  string ack_json = 1;
+}
+
+// The only service. Add new flows by registering them on each side, not by
+// editing this proto.
+//
+// Error semantics (mapped via @grpc/grpc-js `status` codes):
+//
+//   • OK              — write committed (or already existed; see ALREADY_EXISTS).
+//   • ALREADY_EXISTS  — clean duplicate; producer should treat as success.
+//   • NOT_FOUND       — `resource` is not registered on the consumer.
+//   • INVALID_ARGUMENT — `payload_json` failed the handler's `parse(...)`.
+//   • UNAUTHENTICATED — internal shared-secret metadata missing or wrong.
+//   • INTERNAL        — handler threw an unexpected error.
+//
+// Anything other than OK / ALREADY_EXISTS is retryable from the producer's
+// BullMQ processor with exponential backoff.
+service ServiceProvisioning {
+  rpc Provision(ServiceProvisioningRequest) returns (ServiceProvisioningResponse);
+}

package/proto/service_sync/v1/service_sync.proto

@@ -0,0 +1,69 @@
+syntax = "proto3";
+
+package aegis.service_sync.v1;
+
+option java_multiple_files = true;
+
+// =============================================================================
+// service-sync — generic cross-service entity hydration contract
+// -----------------------------------------------------------------------------
+// One RPC, forever. To expose a NEW entity (User, Role, Invoice, anything) you
+// do NOT edit this file. You register a SyncSource on the publisher side
+// (aegis/src/common/service-sync) and a SyncResource on the consumer side
+// (gtms/src/shared/v1/service-sync). The wire envelope here stays unchanged.
+//
+// The payload is intentionally `string payload_json` (not a typed `Any` or
+// per-resource message). That trade-off is deliberate:
+//
+//   PROS
+//     • Zero proto churn when onboarding new resources.
+//     • Publisher controls projection at the source — the wire just transports
+//       what `defineSyncSource.fetch()` returns.
+//     • Consumer regains end-to-end type safety via
+//       `defineSyncResource<T>()` — the generic <T> describes what JSON to
+//       expect, and is enforced at every consumer call-site.
+//
+//   CONS / DO NOT
+//     • DO NOT put binary blobs in `payload_json` — base64 inflates payloads.
+//     • DO NOT use this contract for streaming or pub/sub. It is a request /
+//       response read path for batched hydration. Anything else belongs in
+//       a domain-specific RPC.
+// =============================================================================
+
+// Single request — "give me these N rows of this resource".
+//
+// `resource`  → the namespace registered by the publisher (e.g. "user",
+//               "role", "invoice"). Must match a `defineSyncSource.name`.
+// `keys`      → opaque string keys (typically publicId / cuid). The publisher
+//               decides what "key" means via `defineSyncSource.keyOf`.
+//
+// Limits — the consumer batches per-request, so 100–1000 keys per call is
+// the expected shape. Above ~5000, split into chunks at the consumer.
+message ServiceSyncFetchRequest {
+  string resource = 1;
+  repeated string keys = 2;
+}
+
+// Single response — "here are the rows I found".
+//
+// Missing keys are simply absent from `rows`. Consumers map by key and
+// surface `null` for any key not returned (e.g. soft-deleted upstream).
+message ServiceSyncFetchResponse {
+  repeated ServiceSyncFetchRow rows = 1;
+}
+
+// One row of result data.
+//
+// `payload_json` is a UTF-8 JSON string of the publisher's projection for
+// this resource. The consumer parses it into a typed `T` at the boundary.
+// Keep the projection LEAN — only the display fields the consumer needs.
+message ServiceSyncFetchRow {
+  string key = 1;
+  string payload_json = 2;
+}
+
+// The only service. Add new resources by registering them on each side, not
+// by editing this proto.
+service ServiceSync {
+  rpc Fetch(ServiceSyncFetchRequest) returns (ServiceSyncFetchResponse);
+}