@aepstore-dev/contracts 1.32.0 → 1.33.0

package/proto/activity.proto

@@ -1,200 +1,200 @@
-syntax = "proto3";
-
-package activity.v1;
-
-service ActivityService {
-    // Reports
-    rpc ReportCreate(CreateReportRequest) returns (ReportResponse);
-    rpc ReportList(ListReportsRequest) returns (ReportsListResponse);
-    rpc ReportGet(ReportIdRequest) returns (ReportResponse);
-    rpc ReportModerate(ModerateReportRequest) returns (ReportResponse);
-
-    // Report categories
-    rpc ReportCategoryCreate(CreateReportCategoryRequest) returns (ReportCategoryResponse);
-    rpc ReportCategoryList(ListReportCategoriesRequest) returns (ReportCategoriesListResponse);
-    rpc ReportCategoryGet(ReportCategoryIdRequest) returns (ReportCategoryResponse);
-    rpc ReportCategoryUpdate(UpdateReportCategoryRequest) returns (ReportCategoryResponse);
-    rpc ReportCategoryDelete(ReportCategoryIdRequest) returns (Ok);
-
-    // Reviews
-    rpc ReviewCreate(CreateReviewRequest) returns (ReviewResponse);
-    rpc GetProductReviews(GetProductReviewsRequest) returns (ReviewsListResponse);
-
-    // NOTE: subscriptions live in users-service (CreateSubscription/DeleteSubscription).
-    // The former activity.ToggleSubscription was a duplicate write path — removed.
-}
-
-// =================================================================
-// Enums
-// =================================================================
-
-// Member names match the DB enum string values exactly (enums: String on the
-// wire), so DB values pass straight through with no mapping. UNSPECIFIED=0
-// represents "no value / not provided" (e.g. an optional list filter).
-enum ReportType {
-    REPORT_TYPE_UNSPECIFIED = 0;
-    PRODUCT = 1;
-    PROFILE = 2;
-    REVIEW = 3;
-}
-
-enum ReportStatus {
-    REPORT_STATUS_UNSPECIFIED = 0;
-    PENDING = 1;
-    IN_PROGRESS = 2;
-    RESOLVED = 3;
-    DISMISSED = 4;
-}
-
-// =================================================================
-// Reports
-// =================================================================
-
-message Report {
-    string id = 1;
-    ReportType type = 2;
-    string object_id = 3;
-    string user_id = 4;
-    string product_id = 5;
-    repeated ReportCategory categories = 6;
-    string message = 7;
-    ReportStatus status = 8;
-    string created_at = 9;
-    string updated_at = 10;
-}
-
-message ReportResponse {
-    Report report = 1;
-}
-
-message CreateReportRequest {
-    string user_id = 1;
-    ReportType type = 2;
-    string object_id = 3;
-    repeated string categories = 4; // names
-    string message = 5;
-}
-
-message ListReportsRequest {
-    ReportType type = 1;
-    ReportStatus status = 2;
-    string user_id = 3;
-    string object_id = 4;
-    int32 page = 5;
-    int32 limit = 6;
-}
-
-message ReportsListResponse {
-    repeated Report items = 1;
-    int32 total = 2;
-    int32 page = 3;
-    int32 limit = 4;
-}
-
-message ReportIdRequest {
-    string id = 1;
-}
-
-message ModerateReportRequest {
-    string id = 1;
-    string action = 2; // 'accept' | 'reject'
-}
-
-// =================================================================
-// Report categories
-// =================================================================
-
-message ReportCategory {
-    string id = 1;
-    string name = 2;
-    ReportType type = 3;
-    string icon = 4;
-    string description = 5;
-}
-
-message ReportCategoryResponse {
-    ReportCategory category = 1;
-}
-
-message CreateReportCategoryRequest {
-    string name = 1;
-    ReportType type = 2;
-    string icon = 3;
-    string description = 4;
-}
-
-message UpdateReportCategoryRequest {
-    string id = 1;
-    string name = 2;
-    string icon = 3;
-    string description = 4;
-}
-
-message ListReportCategoriesRequest {
-    ReportType type = 1;
-}
-
-message ReportCategoriesListResponse {
-    repeated ReportCategory items = 1;
-}
-
-message ReportCategoryIdRequest {
-    string id = 1;
-}
-
-// =================================================================
-// Reviews
-// =================================================================
-
-message ReviewUser {
-    string id = 1;
-    string username = 2;
-    string avatar_url = 3;
-}
-
-message Review {
-    reserved 4, 8, 9; // retired flat user_id / user_username / user_avatar_url
-    string id = 1;
-    int32 rating = 2;
-    string text = 3;
-    string product_id = 5;
-    string created_at = 6;
-    string updated_at = 7;
-    ReviewUser user = 10;
-}
-
-message ReviewResponse {
-    Review review = 1;
-}
-
-message CreateReviewRequest {
-    string user_id = 1;
-    string product_id = 2;
-    int32 rating = 3;
-    string text = 4;
-}
-
-message GetProductReviewsRequest {
-    string product_id = 1;
-    int32 page = 2;
-    int32 limit = 3;
-}
-
-message ReviewsListResponse {
-    repeated Review items = 1;
-    int32 total = 2;
-    int32 page = 3;
-    int32 limit = 4;
-}
-
-// =================================================================
-// Subscriptions
-// =================================================================
-
-// =================================================================
-// Misc
-// =================================================================
-
-message Ok {
-    bool ok = 1;
-}
+syntax = "proto3";
+
+package activity.v1;
+
+service ActivityService {
+    // Reports
+    rpc ReportCreate(CreateReportRequest) returns (ReportResponse);
+    rpc ReportList(ListReportsRequest) returns (ReportsListResponse);
+    rpc ReportGet(ReportIdRequest) returns (ReportResponse);
+    rpc ReportModerate(ModerateReportRequest) returns (ReportResponse);
+
+    // Report categories
+    rpc ReportCategoryCreate(CreateReportCategoryRequest) returns (ReportCategoryResponse);
+    rpc ReportCategoryList(ListReportCategoriesRequest) returns (ReportCategoriesListResponse);
+    rpc ReportCategoryGet(ReportCategoryIdRequest) returns (ReportCategoryResponse);
+    rpc ReportCategoryUpdate(UpdateReportCategoryRequest) returns (ReportCategoryResponse);
+    rpc ReportCategoryDelete(ReportCategoryIdRequest) returns (Ok);
+
+    // Reviews
+    rpc ReviewCreate(CreateReviewRequest) returns (ReviewResponse);
+    rpc GetProductReviews(GetProductReviewsRequest) returns (ReviewsListResponse);
+
+    // NOTE: subscriptions live in users-service (CreateSubscription/DeleteSubscription).
+    // The former activity.ToggleSubscription was a duplicate write path — removed.
+}
+
+// =================================================================
+// Enums
+// =================================================================
+
+// Member names match the DB enum string values exactly (enums: String on the
+// wire), so DB values pass straight through with no mapping. UNSPECIFIED=0
+// represents "no value / not provided" (e.g. an optional list filter).
+enum ReportType {
+    REPORT_TYPE_UNSPECIFIED = 0;
+    PRODUCT = 1;
+    PROFILE = 2;
+    REVIEW = 3;
+}
+
+enum ReportStatus {
+    REPORT_STATUS_UNSPECIFIED = 0;
+    PENDING = 1;
+    IN_PROGRESS = 2;
+    RESOLVED = 3;
+    DISMISSED = 4;
+}
+
+// =================================================================
+// Reports
+// =================================================================
+
+message Report {
+    string id = 1;
+    ReportType type = 2;
+    string object_id = 3;
+    string user_id = 4;
+    string product_id = 5;
+    repeated ReportCategory categories = 6;
+    string message = 7;
+    ReportStatus status = 8;
+    string created_at = 9;
+    string updated_at = 10;
+}
+
+message ReportResponse {
+    Report report = 1;
+}
+
+message CreateReportRequest {
+    string user_id = 1;
+    ReportType type = 2;
+    string object_id = 3;
+    repeated string categories = 4; // names
+    string message = 5;
+}
+
+message ListReportsRequest {
+    ReportType type = 1;
+    ReportStatus status = 2;
+    string user_id = 3;
+    string object_id = 4;
+    int32 page = 5;
+    int32 limit = 6;
+}
+
+message ReportsListResponse {
+    repeated Report items = 1;
+    int32 total = 2;
+    int32 page = 3;
+    int32 limit = 4;
+}
+
+message ReportIdRequest {
+    string id = 1;
+}
+
+message ModerateReportRequest {
+    string id = 1;
+    string action = 2; // 'accept' | 'reject'
+}
+
+// =================================================================
+// Report categories
+// =================================================================
+
+message ReportCategory {
+    string id = 1;
+    string name = 2;
+    ReportType type = 3;
+    string icon = 4;
+    string description = 5;
+}
+
+message ReportCategoryResponse {
+    ReportCategory category = 1;
+}
+
+message CreateReportCategoryRequest {
+    string name = 1;
+    ReportType type = 2;
+    string icon = 3;
+    string description = 4;
+}
+
+message UpdateReportCategoryRequest {
+    string id = 1;
+    string name = 2;
+    string icon = 3;
+    string description = 4;
+}
+
+message ListReportCategoriesRequest {
+    ReportType type = 1;
+}
+
+message ReportCategoriesListResponse {
+    repeated ReportCategory items = 1;
+}
+
+message ReportCategoryIdRequest {
+    string id = 1;
+}
+
+// =================================================================
+// Reviews
+// =================================================================
+
+message ReviewUser {
+    string id = 1;
+    string username = 2;
+    string avatar_url = 3;
+}
+
+message Review {
+    reserved 4, 8, 9; // retired flat user_id / user_username / user_avatar_url
+    string id = 1;
+    int32 rating = 2;
+    string text = 3;
+    string product_id = 5;
+    string created_at = 6;
+    string updated_at = 7;
+    ReviewUser user = 10;
+}
+
+message ReviewResponse {
+    Review review = 1;
+}
+
+message CreateReviewRequest {
+    string user_id = 1;
+    string product_id = 2;
+    int32 rating = 3;
+    string text = 4;
+}
+
+message GetProductReviewsRequest {
+    string product_id = 1;
+    int32 page = 2;
+    int32 limit = 3;
+}
+
+message ReviewsListResponse {
+    repeated Review items = 1;
+    int32 total = 2;
+    int32 page = 3;
+    int32 limit = 4;
+}
+
+// =================================================================
+// Subscriptions
+// =================================================================
+
+// =================================================================
+// Misc
+// =================================================================
+
+message Ok {
+    bool ok = 1;
+}

package/proto/auth.proto

@@ -1,126 +1,126 @@
-syntax = "proto3";
-
-package auth.v1;
-
-// Ported from legacy auth-service (@MessagePattern → @GrpcMethod).
-// Tokens are HMAC primitives from @aepstore-dev/passport:
-//   - access token: short TTL, carries userId; the gateway validates it
-//     locally via PassportAuthGuard (no round-trip here).
-//   - refresh token: long TTL HMAC + a RefreshToken DB row (device list +
-//     revocation). Refresh verifies the HMAC AND that the row still exists.
-service AuthService {
-    rpc Login(LoginRequest) returns (AuthResult);
-    rpc Register(RegisterRequest) returns (AuthResult);
-    rpc CreateCode(CreateCodeRequest) returns (AuthResult);
-    rpc VerifyCode(VerifyCodeRequest) returns (AuthResult);
-    rpc CheckToken(CheckTokenRequest) returns (AuthUser);
-    rpc RefreshToken(RefreshTokenRequest) returns (AuthResult);
-    rpc Get2faStatus(Get2faStatusRequest) returns (TwoFactorStatusResponse);
-    rpc GetProfile(GetProfileRequest) returns (AuthUser);
-    rpc CleanupExpiredTotpSetups(Empty) returns (Empty);
-}
-
-enum TwoFactorType {
-    NONE = 0;
-    APP = 1;
-    EMAIL = 2;
-}
-
-// ---------------------------------------------------------------------------
-// Requests
-// ---------------------------------------------------------------------------
-
-// Login by username OR email (one of the two must be set).
-message LoginRequest {
-    string password = 1;
-    string credentials = 2; // username OR email — resolved by the service
-}
-
-message RegisterRequest {
-    string email = 1;
-    string username = 2;
-    string password = 3;
-    string ip = 4; // optional, attached by gateway from req
-}
-
-// type ∈ { twofa, reset, totp_generate, totp_activate, confirm } (legacy strings)
-message CreateCodeRequest {
-    string email = 1;
-    string type = 2;
-}
-
-// type ∈ { twofa, twofa_deactivate, reset, totp, totp_deactivate, backup, confirm }
-// new_password is only used by the 'reset' flow.
-message VerifyCodeRequest {
-    string email = 1;
-    string code = 2;
-    string type = 3;
-    string new_password = 4; // optional
-}
-
-message CheckTokenRequest {
-    string token = 1;
-}
-
-message RefreshTokenRequest {
-    string refresh_token = 1;
-    string user_agent = 2; // optional
-    string ip = 3;         // optional
-}
-
-message Get2faStatusRequest {
-    string username = 1;
-}
-
-message GetProfileRequest {
-    string user_id = 1;
-}
-
-// ---------------------------------------------------------------------------
-// Responses
-// ---------------------------------------------------------------------------
-
-message AuthUser {
-    string id = 1;
-    string username = 2;
-    string email = 3;
-    string avatar_url = 4;
-    string banner_url = 5;
-    repeated string roles = 6;
-    string role = 7; // primary role (roles[0])
-    bool is_verified = 8;
-    TwoFactorType two_factor_type = 9;
-    bool two_factor_enabled = 10;
-    string balance = 11; // Decimal as string (D7)
-}
-
-// Unified result for login/register/createCode/verifyCode/refresh. Which fields
-// are populated depends on the flow:
-//   - fully authenticated → access_token + refresh_token + expires_in + user
-//   - 2FA required / pending confirm → message + requires_2fa + two_factor_type + user (no tokens)
-//   - totp_generate → secret + otpauth + qr (+ user)
-//   - totp_activate → backup_codes (+ tokens/user)
-message AuthResult {
-    string access_token = 1;
-    string refresh_token = 2;
-    int32 expires_in = 3;
-    AuthUser user = 4;
-
-    string message = 5;
-    bool requires_2fa = 6;
-    TwoFactorType two_factor_type = 7;
-
-    // TOTP setup extras
-    string secret = 8;
-    string otpauth = 9;
-    string qr = 10; // data URL (PNG)
-    repeated string backup_codes = 11;
-}
-
-message TwoFactorStatusResponse {
-    TwoFactorType two_factor_type = 1;
-    bool has_2fa = 2;
-    bool is_verified = 3;
-}
-
-message Empty {}
+syntax = "proto3";
+
+package auth.v1;
+
+// Ported from legacy auth-service (@MessagePattern → @GrpcMethod).
+// Tokens are HMAC primitives from @aepstore-dev/passport:
+//   - access token: short TTL, carries userId; the gateway validates it
+//     locally via PassportAuthGuard (no round-trip here).
+//   - refresh token: long TTL HMAC + a RefreshToken DB row (device list +
+//     revocation). Refresh verifies the HMAC AND that the row still exists.
+service AuthService {
+    rpc Login(LoginRequest) returns (AuthResult);
+    rpc Register(RegisterRequest) returns (AuthResult);
+    rpc CreateCode(CreateCodeRequest) returns (AuthResult);
+    rpc VerifyCode(VerifyCodeRequest) returns (AuthResult);
+    rpc CheckToken(CheckTokenRequest) returns (AuthUser);
+    rpc RefreshToken(RefreshTokenRequest) returns (AuthResult);
+    rpc Get2faStatus(Get2faStatusRequest) returns (TwoFactorStatusResponse);
+    rpc GetProfile(GetProfileRequest) returns (AuthUser);
+    rpc CleanupExpiredTotpSetups(Empty) returns (Empty);
+}
+
+enum TwoFactorType {
+    NONE = 0;
+    APP = 1;
+    EMAIL = 2;
+}
+
+// ---------------------------------------------------------------------------
+// Requests
+// ---------------------------------------------------------------------------
+
+// Login by username OR email (one of the two must be set).
+message LoginRequest {
+    string password = 1;
+    string credentials = 2; // username OR email — resolved by the service
+}
+
+message RegisterRequest {
+    string email = 1;
+    string username = 2;
+    string password = 3;
+    string ip = 4; // optional, attached by gateway from req
+}
+
+// type ∈ { twofa, reset, totp_generate, totp_activate, confirm } (legacy strings)
+message CreateCodeRequest {
+    string email = 1;
+    string type = 2;
+}
+
+// type ∈ { twofa, twofa_deactivate, reset, totp, totp_deactivate, backup, confirm }
+// new_password is only used by the 'reset' flow.
+message VerifyCodeRequest {
+    string email = 1;
+    string code = 2;
+    string type = 3;
+    string new_password = 4; // optional
+}
+
+message CheckTokenRequest {
+    string token = 1;
+}
+
+message RefreshTokenRequest {
+    string refresh_token = 1;
+    string user_agent = 2; // optional
+    string ip = 3;         // optional
+}
+
+message Get2faStatusRequest {
+    string username = 1;
+}
+
+message GetProfileRequest {
+    string user_id = 1;
+}
+
+// ---------------------------------------------------------------------------
+// Responses
+// ---------------------------------------------------------------------------
+
+message AuthUser {
+    string id = 1;
+    string username = 2;
+    string email = 3;
+    string avatar_url = 4;
+    string banner_url = 5;
+    repeated string roles = 6;
+    string role = 7; // primary role (roles[0])
+    bool is_verified = 8;
+    TwoFactorType two_factor_type = 9;
+    bool two_factor_enabled = 10;
+    string balance = 11; // Decimal as string (D7)
+}
+
+// Unified result for login/register/createCode/verifyCode/refresh. Which fields
+// are populated depends on the flow:
+//   - fully authenticated → access_token + refresh_token + expires_in + user
+//   - 2FA required / pending confirm → message + requires_2fa + two_factor_type + user (no tokens)
+//   - totp_generate → secret + otpauth + qr (+ user)
+//   - totp_activate → backup_codes (+ tokens/user)
+message AuthResult {
+    string access_token = 1;
+    string refresh_token = 2;
+    int32 expires_in = 3;
+    AuthUser user = 4;
+
+    string message = 5;
+    bool requires_2fa = 6;
+    TwoFactorType two_factor_type = 7;
+
+    // TOTP setup extras
+    string secret = 8;
+    string otpauth = 9;
+    string qr = 10; // data URL (PNG)
+    repeated string backup_codes = 11;
+}
+
+message TwoFactorStatusResponse {
+    TwoFactorType two_factor_type = 1;
+    bool has_2fa = 2;
+    bool is_verified = 3;
+}
+
+message Empty {}