@aepstore-dev/contracts 1.0.6 → 1.2.0

package/proto/auth.proto

@@ -2,37 +2,120 @@ syntax = "proto3";
 
 package auth.v1;
 
+// Ported from legacy auth-service (@MessagePattern → @GrpcMethod).
+// All tokens are HMAC primitives minted by @aepstore-dev/passport;
+// the access token only carries `userId`. Username / roles / 2FA state
+// must be looked up via Prisma or RbacService on the consumer side.
 service AuthService {
-    rpc SendOtp (SendOtpRequest) returns (SendOtpResponse);
-    rpc VerifyOtp (VerifyOtpRequest) returns (VerifyOtpResponse);
-    rpc Refresh (RefreshRequest) returns (RefreshResponse);
+    rpc Login(LoginRequest) returns (AuthResponse);
+    rpc Register(RegisterRequest) returns (AuthResponse);
+    rpc CreateCode(CreateCodeRequest) returns (CreateCodeResponse);
+    rpc VerifyCode(VerifyCodeRequest) returns (VerifyCodeResponse);
+    rpc CheckToken(CheckTokenRequest) returns (CheckTokenResponse);
+    rpc RefreshToken(RefreshTokenRequest) returns (AuthResponse);
+    rpc Get2faStatus(Get2faStatusRequest) returns (Get2faStatusResponse);
+    rpc GetProfile(GetProfileRequest) returns (UserProfileResponse);
+    rpc CleanupExpiredTotpSetups(Empty) returns (Empty);
 }
 
-message SendOtpRequest {
-    string identifier = 1;
+// Login by username OR email (one of the two must be set).
+message LoginRequest {
+    string password = 1;
+    string username = 2; // optional
+    string email = 3;    // optional
+}
+
+message RegisterRequest {
+    string email = 1;
+    string username = 2;
+    string password = 3;
+    string ip = 4; // optional, attached by gateway from req
+}
+
+// Standard tokens-plus-user payload returned by Login / Register / RefreshToken.
+message AuthResponse {
+    string access_token = 1;
+    string refresh_token = 2;
+    AuthUser user = 3;
+}
+
+message AuthUser {
+    string id = 1;
+    string email = 2;
+    string username = 3;
+    string role = 4; // primary role for backwards compat ("User" / "Administrator" / "Moderator")
+}
+
+// Code types: '2fa', 'reset', 'confirm', 'totp' (legacy strings preserved as-is).
+message CreateCodeRequest {
+    string email = 1;
     string type = 2;
 }
 
-message SendOtpResponse {
+message CreateCodeResponse {
     bool ok = 1;
 }
 
-message VerifyOtpRequest {
-    string identifier = 1;
-    string type = 2;
-    string code = 3;
+// `new_password` is only used by the 'reset' flow.
+message VerifyCodeRequest {
+    string email = 1;
+    string code = 2;
+    string type = 3;
+    string new_password = 4; // optional
 }
 
-message VerifyOtpResponse {
-    string access_token = 1;
-    string refresh_token = 2;
+// Some verification flows (e.g. confirm-on-register) issue tokens immediately;
+// others just return ok=true.
+message VerifyCodeResponse {
+    bool ok = 1;
+    string access_token = 2;  // optional
+    string refresh_token = 3; // optional
+}
+
+message CheckTokenRequest {
+    string token = 1;
+}
+
+message CheckTokenResponse {
+    bool valid = 1;
+    string user_id = 2;
+    string reason = 3; // populated when valid=false
 }
 
-message RefreshRequest {
+message RefreshTokenRequest {
     string refresh_token = 1;
+    string user_agent = 2; // optional
+    string ip = 3;         // optional
 }
 
-message RefreshResponse {
-    string access_token = 1;
-    string refresh_token = 2;
-}
+message Get2faStatusRequest {
+    string username = 1;
+}
+
+message Get2faStatusResponse {
+    bool enabled = 1;
+    TwoFactorType type = 2;
+}
+
+enum TwoFactorType {
+    NONE = 0;
+    APP = 1;
+    EMAIL = 2;
+}
+
+message GetProfileRequest {
+    string user_id = 1;
+}
+
+message UserProfileResponse {
+    string id = 1;
+    string email = 2;
+    string username = 3;
+    string full_name = 4;
+    bool is_verified = 5;
+    bool two_factor_enabled = 6;
+    TwoFactorType two_factor_type = 7;
+    repeated string roles = 8;
+}
+
+message Empty {}

package/proto/mail.proto

@@ -0,0 +1,42 @@
+syntax = "proto3";
+
+package mail.v1;
+
+// Legacy mail-service used @EventPattern (fire-and-forget). In the new gRPC
+// stack each becomes a unary RPC that returns an Ack. Callers ignore the
+// response if they don't care about delivery.
+service MailService {
+    rpc SendReg(SendRegRequest) returns (MailAck);
+    rpc Send2fa(Send2faRequest) returns (MailAck);
+    rpc SendPasswordReset(SendPasswordResetRequest) returns (MailAck);
+    rpc SendRegistrationConfirm(SendRegistrationConfirmRequest) returns (MailAck);
+}
+
+message MailAck {
+    bool queued = 1;
+}
+
+message SendRegRequest {
+    string user_id = 1;
+    string email = 2;
+    string username = 3;
+    string full_name = 4;
+}
+
+message Send2faRequest {
+    string email = 1;
+    string code = 2;
+    string username = 3;
+}
+
+message SendPasswordResetRequest {
+    string email = 1;
+    string code = 2;
+    string username = 3;
+}
+
+message SendRegistrationConfirmRequest {
+    string email = 1;
+    string code = 2;
+    string username = 3;
+}

package/proto/products.proto

@@ -0,0 +1,327 @@
+syntax = "proto3";
+
+package products.v1;
+
+service ProductsService {
+    rpc Create(CreateProductRequest) returns (ProductResponse);
+    rpc FindAll(QueryProductsRequest) returns (ProductsListResponse);
+    rpc FindAllApproved(QueryProductsRequest) returns (ProductsListResponse);
+    rpc FindMy(FindMyRequest) returns (ProductsListResponse);
+    rpc FindOne(FindOneRequest) returns (ProductResponse);
+    rpc Update(UpdateProductRequest) returns (ProductResponse);
+    rpc Remove(RemoveProductRequest) returns (Ok);
+    rpc SubmitForModeration(SubmitForModerationRequest) returns (ProductResponse);
+    rpc GetPriceRange(Empty) returns (PriceRangeResponse);
+
+    rpc AddToFavorites(FavoriteRequest) returns (Ok);
+    rpc RemoveFromFavorites(FavoriteRequest) returns (Ok);
+
+    rpc SaveMediaMetadata(SaveMediaMetadataRequest) returns (ProductResponse);
+    rpc SaveAttachmentMetadata(SaveAttachmentMetadataRequest) returns (ProductResponse);
+
+    rpc GetProductsForModeration(ProductModerationQueryRequest) returns (ProductsListResponse);
+    rpc ModerateProduct(ModerateProductRequest) returns (ModerationResponse);
+    rpc ResubmitProduct(ResubmitProductRequest) returns (ProductResponse);
+
+    rpc GetSecureDownloadLinks(GetSecureDownloadLinksRequest) returns (SecureDownloadLinksResponse);
+    rpc GetAttachmentDownloadInfo(GetAttachmentDownloadInfoRequest) returns (AttachmentDownloadInfoResponse);
+    rpc GetAttachmentStream(GetAttachmentStreamRequest) returns (stream AttachmentChunk);
+
+    rpc GetTopProduct(Empty) returns (ProductResponse);
+    rpc GetPopularProducts(QueryProductsRequest) returns (ProductsListResponse);
+}
+
+// =================================================================
+// Enums
+// =================================================================
+
+enum ProductStatus {
+    PRODUCT_STATUS_UNSPECIFIED = 0;
+    PRODUCT_STATUS_ACTIVE = 1;
+    PRODUCT_STATUS_DRAFT = 2;
+}
+
+enum ModerationStatus {
+    MODERATION_STATUS_UNSPECIFIED = 0;
+    MODERATION_STATUS_PENDING = 1;
+    MODERATION_STATUS_APPROVED = 2;
+    MODERATION_STATUS_REJECTED = 3;
+}
+
+enum MediaType {
+    MEDIA_TYPE_UNSPECIFIED = 0;
+    MEDIA_TYPE_IMAGE = 1;
+    MEDIA_TYPE_VIDEO = 2;
+}
+
+// =================================================================
+// Nested entities
+// =================================================================
+
+message Category {
+    string id = 1;
+    string name = 2;
+}
+
+message Application {
+    string id = 1;
+    string name = 2;
+}
+
+message Tag {
+    string id = 1;
+    string name = 2;
+}
+
+message ProductMedia {
+    string id = 1;
+    string url = 2;
+    MediaType type = 3;
+}
+
+message Attachment {
+    string id = 1;
+    string url = 2;
+    string file_key = 3;
+    string file_name = 4;
+    double file_size = 5;
+    string created_at = 6;
+}
+
+message ProductUser {
+    string id = 1;
+    string username = 2;
+    string avatar_url = 3;
+}
+
+message Product {
+    string id = 1;
+    string name = 2;
+    string description = 3;
+    string price = 4;            // Decimal as string (D7)
+    string discount_percent = 5; // Decimal as string
+    string final_price = 6;      // Decimal as string
+    string average_rating = 7;   // double as string for consistency
+    ProductStatus status = 8;
+    ModerationStatus moderation_status = 9;
+    string moderation_comment = 10;
+    string moderated_by = 11;
+    string moderated_at = 12;
+    string created_at = 13;
+    string updated_at = 14;
+    string preview = 15;
+    string video = 16;
+    ProductUser user = 17;
+    repeated ProductMedia media = 18;
+    repeated Category categories = 19;
+    repeated Application applications = 20;
+    repeated Tag tags = 21;
+}
+
+message ProductResponse {
+    Product product = 1;
+}
+
+message ProductsListResponse {
+    repeated Product items = 1;
+    int32 total = 2;
+    int32 page = 3;
+    int32 limit = 4;
+}
+
+message Ok {
+    bool ok = 1;
+}
+
+message Empty {}
+
+// =================================================================
+// Create / Update / Query
+// =================================================================
+
+message CreateProductRequest {
+    string user_id = 1;
+    string name = 2;
+    string price = 3;            // Decimal as string
+    repeated string category_ids = 4;
+    repeated string application_ids = 5;
+    repeated string tags = 6;
+    string discount_percent = 7; // optional
+    string final_price = 8;      // optional
+    string video = 9;
+    string description = 10;
+    ProductStatus status = 11;
+}
+
+message UpdateProductRequest {
+    string user_id = 1;
+    string id = 2;
+    string name = 3;
+    string description = 4;
+    string price = 5;
+    string discount_percent = 6;
+    string final_price = 7;
+    repeated string tags = 8;
+}
+
+message QueryProductsRequest {
+    string search = 1;
+    repeated string category_ids = 2;
+    repeated string application_ids = 3;
+    repeated string tags = 4;
+    string min_price = 5;
+    string max_price = 6;
+    int32 page = 7;
+    int32 limit = 8;
+    string sort_by = 9;     // createdAt | price | name | updatedAt | finalPrice
+    string sort_order = 10; // asc | desc
+    ProductStatus status = 11;
+    ModerationStatus moderation_status = 12;
+}
+
+message FindMyRequest {
+    string user_id = 1;
+    QueryProductsRequest query = 2;
+}
+
+message FindOneRequest {
+    string id = 1;
+    string viewer_user_id = 2; // optional — to compute is_favorited etc.
+}
+
+message RemoveProductRequest {
+    string id = 1;
+    string user_id = 2;
+}
+
+message SubmitForModerationRequest {
+    string id = 1;
+    string user_id = 2;
+}
+
+message PriceRangeResponse {
+    string min = 1; // Decimal as string
+    string max = 2;
+}
+
+// =================================================================
+// Favorites
+// =================================================================
+
+message FavoriteRequest {
+    string user_id = 1;
+    string product_id = 2;
+}
+
+// =================================================================
+// Media / Attachments metadata
+// =================================================================
+
+message MediaFile {
+    string url = 1;
+    MediaType type = 2;
+}
+
+message SaveMediaMetadataRequest {
+    string id = 1;
+    string user_id = 2;
+    repeated MediaFile files = 3;
+    string upload_id = 4;
+}
+
+message AttachmentMeta {
+    string url = 1;
+    string file_key = 2;
+    string file_name = 3;
+    double file_size = 4;
+}
+
+message SaveAttachmentMetadataRequest {
+    string id = 1;
+    string user_id = 2;
+    AttachmentMeta attachment = 3;
+    string upload_id = 4;
+}
+
+// =================================================================
+// Moderation
+// =================================================================
+
+message ProductModerationQueryRequest {
+    ModerationStatus status = 1;
+    int32 page = 2;
+    int32 limit = 3;
+    string sort_by = 4;
+    string sort_order = 5;
+}
+
+message ModerateProductRequest {
+    string product_id = 1;
+    string moderator_id = 2;
+    string action = 3;  // 'approve' | 'reject'
+    string comment = 4;
+}
+
+message ModerationResponse {
+    bool success = 1;
+    string message = 2;
+    Product product = 3;
+    ModerationStatus moderation_status = 4;
+    string moderation_comment = 5;
+    string moderated_by = 6;
+    string moderated_at = 7;
+}
+
+message ResubmitProductRequest {
+    string product_id = 1;
+    string user_id = 2;
+    string comment = 3;
+    // Free-form payload of changes — serialized as JSON string to keep the
+    // legacy `any` shape without forcing a strict schema on a free-form patch.
+    string changes_json = 4;
+}
+
+// =================================================================
+// Secure downloads
+// =================================================================
+
+message GetSecureDownloadLinksRequest {
+    string product_id = 1;
+    string user_id = 2;
+    int32 expires_in = 3;
+}
+
+message SecureDownloadLink {
+    string download_url = 1;
+    int32 expires_in = 2;
+    string file_name = 3;
+    double file_size = 4;
+    string attachment_id = 5;
+}
+
+message SecureDownloadLinksResponse {
+    repeated SecureDownloadLink links = 1;
+}
+
+message GetAttachmentDownloadInfoRequest {
+    string product_id = 1;
+    string attachment_id = 2;
+    string user_id = 3;
+}
+
+message AttachmentDownloadInfoResponse {
+    string file_name = 1;
+    double file_size = 2;
+    string content_type = 3;
+}
+
+message GetAttachmentStreamRequest {
+    string product_id = 1;
+    string attachment_id = 2;
+    string user_id = 3;
+}
+
+message AttachmentChunk {
+    bytes data = 1;
+    bool last = 2;
+}

package/proto/taxonomy.proto

@@ -0,0 +1,78 @@
+syntax = "proto3";
+
+package taxonomy.v1;
+
+service TaxonomyService {
+    rpc FindAllCategories(Empty) returns (CategoriesListResponse);
+    rpc FindAllApplications(Empty) returns (ApplicationsListResponse);
+    rpc FindAllTags(QueryTagsRequest) returns (TagsListResponse);
+
+    rpc CreateCategory(CreateCategoryRequest) returns (CategoryResponse);
+    rpc CreateApplication(CreateApplicationRequest) returns (ApplicationResponse);
+}
+
+message Category {
+    string id = 1;
+    string name = 2;
+    string description = 3;
+    string created_at = 4;
+    string updated_at = 5;
+}
+
+message Application {
+    string id = 1;
+    string name = 2;
+    string description = 3;
+    string created_at = 4;
+    string updated_at = 5;
+}
+
+message Tag {
+    string id = 1;
+    string name = 2;
+}
+
+// =================================================================
+// Requests / responses
+// =================================================================
+
+message Empty {}
+
+message CategoriesListResponse {
+    repeated Category items = 1;
+}
+
+message ApplicationsListResponse {
+    repeated Application items = 1;
+}
+
+message QueryTagsRequest {
+    string search = 1;
+    int32 page = 2;
+    int32 limit = 3;
+}
+
+message TagsListResponse {
+    repeated Tag items = 1;
+    int32 total = 2;
+    int32 page = 3;
+    int32 limit = 4;
+}
+
+message CreateCategoryRequest {
+    string name = 1;
+    string description = 2;
+}
+
+message CategoryResponse {
+    Category category = 1;
+}
+
+message CreateApplicationRequest {
+    string name = 1;
+    string description = 2;
+}
+
+message ApplicationResponse {
+    Application application = 1;
+}