@aepstore-dev/contracts 1.41.0 → 1.42.1

package/gen/auth.ts

@@ -1,317 +0,0 @@
-// Code generated by protoc-gen-ts_proto. DO NOT EDIT.
-// versions:
-//   protoc-gen-ts_proto  v2.10.1
-//   protoc               v7.35.0
-// source: auth.proto
-
-/* eslint-disable */
-import { GrpcMethod, GrpcStreamMethod } from "@nestjs/microservices";
-import { Observable } from "rxjs";
-
-export const protobufPackage = "auth.v1";
-
-export enum TwoFactorType {
-  NONE = 0,
-  APP = 1,
-  EMAIL = 2,
-  UNRECOGNIZED = -1,
-}
-
-/** Login by username OR email (one of the two must be set). */
-export interface LoginRequest {
-  password: string;
-  /** username OR email — resolved by the service */
-  credentials: string;
-  /**
-   * Gateway-supplied audit context. LoginEvent rows for LOGIN /
-   * PASSWORD_FAIL get the same ip/user-agent that REFRESH and RESTORE
-   * already carry; the gRPC layer has no transport-level access to
-   * either, so the gateway extracts them from the HTTP request.
-   */
-  userAgent: string;
-  ip: string;
-}
-
-export interface RegisterRequest {
-  email: string;
-  username: string;
-  password: string;
-  /** optional, attached by gateway from req */
-  ip: string;
-}
-
-/** type ∈ { twofa, reset, totp_generate, totp_activate, confirm } (legacy strings) */
-export interface CreateCodeRequest {
-  email: string;
-  type: string;
-}
-
-/**
- * type ∈ { twofa, twofa_deactivate, reset, totp, totp_deactivate, backup, confirm }
- * new_password is only used by the 'reset' flow.
- */
-export interface VerifyCodeRequest {
-  email: string;
-  code: string;
-  type: string;
-  /** optional */
-  newPassword: string;
-}
-
-export interface CheckTokenRequest {
-  token: string;
-}
-
-export interface RefreshTokenRequest {
-  refreshToken: string;
-  /** optional */
-  userAgent: string;
-  /** optional */
-  ip: string;
-}
-
-export interface Get2faStatusRequest {
-  username: string;
-}
-
-export interface GetProfileRequest {
-  userId: string;
-}
-
-export interface AuthUser {
-  id: string;
-  username: string;
-  email: string;
-  avatarUrl: string;
-  bannerUrl: string;
-  roles: string[];
-  /** primary role (roles[0]) */
-  role: string;
-  isVerified: boolean;
-  twoFactorType: TwoFactorType;
-  twoFactorEnabled: boolean;
-  /** Decimal as string (D7) */
-  balance: string;
-}
-
-/**
- * Unified result for login/register/createCode/verifyCode/refresh. Which fields
- * are populated depends on the flow:
- *   - fully authenticated → access_token + refresh_token + expires_in + user
- *   - 2FA required / pending confirm → message + requires_2fa + two_factor_type + user (no tokens)
- *   - totp_generate → secret + otpauth + qr (+ user)
- *   - totp_activate → backup_codes (+ tokens/user)
- */
-export interface AuthResult {
-  accessToken: string;
-  refreshToken: string;
-  expiresIn: number;
-  user: AuthUser | undefined;
-  message: string;
-  requires2fa: boolean;
-  twoFactorType: TwoFactorType;
-  /** TOTP setup extras */
-  secret: string;
-  otpauth: string;
-  /** data URL (PNG) */
-  qr: string;
-  backupCodes: string[];
-}
-
-export interface TwoFactorStatusResponse {
-  twoFactorType: TwoFactorType;
-  has2fa: boolean;
-  isVerified: boolean;
-}
-
-export interface Empty {
-}
-
-export interface LogoutCurrentRequest {
-  refreshToken: string;
-}
-
-export interface LogoutAllRequest {
-  userId: string;
-}
-
-export interface LogoutResponse {
-  ok: boolean;
-  /** number of refresh-token rows deleted */
-  removed: number;
-}
-
-export interface RestoreLoginRequest {
-  /** email or username */
-  credentials: string;
-  password: string;
-  userAgent: string;
-  ip: string;
-}
-
-export interface ListLoginHistoryRequest {
-  userId: string;
-  page: number;
-  limit: number;
-}
-
-export interface LoginEventRow {
-  id: string;
-  /** LOGIN | LOGOUT | REFRESH | TWO_FA_FAIL | PASSWORD_FAIL | BLOCKED | RESTORE */
-  type: string;
-  success: boolean;
-  reason: string;
-  ip: string;
-  userAgent: string;
-  createdAt: string;
-}
-
-export interface ListLoginHistoryResponse {
-  items: LoginEventRow[];
-  total: number;
-  page: number;
-  limit: number;
-}
-
-export const AUTH_V1_PACKAGE_NAME = "auth.v1";
-
-/**
- * Ported from legacy auth-service (@MessagePattern → @GrpcMethod).
- * Tokens are HMAC primitives from @aepstore-dev/passport:
- *   - access token: short TTL, carries userId; the gateway validates it
- *     locally via PassportAuthGuard (no round-trip here).
- *   - refresh token: long TTL HMAC + a RefreshToken DB row (device list +
- *     revocation). Refresh verifies the HMAC AND that the row still exists.
- */
-
-export interface AuthServiceClient {
-  login(request: LoginRequest): Observable<AuthResult>;
-
-  register(request: RegisterRequest): Observable<AuthResult>;
-
-  createCode(request: CreateCodeRequest): Observable<AuthResult>;
-
-  verifyCode(request: VerifyCodeRequest): Observable<AuthResult>;
-
-  checkToken(request: CheckTokenRequest): Observable<AuthUser>;
-
-  refreshToken(request: RefreshTokenRequest): Observable<AuthResult>;
-
-  get2FaStatus(request: Get2faStatusRequest): Observable<TwoFactorStatusResponse>;
-
-  getProfile(request: GetProfileRequest): Observable<AuthUser>;
-
-  cleanupExpiredTotpSetups(request: Empty): Observable<Empty>;
-
-  /**
-   * Logout — kill refresh tokens. LogoutCurrent kills only the one whose
-   * HMAC matches; LogoutAll wipes every row for the user.
-   */
-
-  logoutCurrent(request: LogoutCurrentRequest): Observable<LogoutResponse>;
-
-  logoutAll(request: LogoutAllRequest): Observable<LogoutResponse>;
-
-  /**
-   * Self-service restore. Verifies credentials + password against a
-   * soft-deleted user, clears deletedAt/scheduledForHardDelete, and issues
-   * fresh tokens — the one auth path that DOES read deletedAt accounts.
-   */
-
-  restoreLogin(request: RestoreLoginRequest): Observable<AuthResult>;
-
-  /**
-   * Login history. Read-only audit feed for the settings page; rows come
-   * from LoginEvent. Internal alternative: tasks-service GC.
-   */
-
-  listLoginHistory(request: ListLoginHistoryRequest): Observable<ListLoginHistoryResponse>;
-}
-
-/**
- * Ported from legacy auth-service (@MessagePattern → @GrpcMethod).
- * Tokens are HMAC primitives from @aepstore-dev/passport:
- *   - access token: short TTL, carries userId; the gateway validates it
- *     locally via PassportAuthGuard (no round-trip here).
- *   - refresh token: long TTL HMAC + a RefreshToken DB row (device list +
- *     revocation). Refresh verifies the HMAC AND that the row still exists.
- */
-
-export interface AuthServiceController {
-  login(request: LoginRequest): Promise<AuthResult> | Observable<AuthResult> | AuthResult;
-
-  register(request: RegisterRequest): Promise<AuthResult> | Observable<AuthResult> | AuthResult;
-
-  createCode(request: CreateCodeRequest): Promise<AuthResult> | Observable<AuthResult> | AuthResult;
-
-  verifyCode(request: VerifyCodeRequest): Promise<AuthResult> | Observable<AuthResult> | AuthResult;
-
-  checkToken(request: CheckTokenRequest): Promise<AuthUser> | Observable<AuthUser> | AuthUser;
-
-  refreshToken(request: RefreshTokenRequest): Promise<AuthResult> | Observable<AuthResult> | AuthResult;
-
-  get2FaStatus(
-    request: Get2faStatusRequest,
-  ): Promise<TwoFactorStatusResponse> | Observable<TwoFactorStatusResponse> | TwoFactorStatusResponse;
-
-  getProfile(request: GetProfileRequest): Promise<AuthUser> | Observable<AuthUser> | AuthUser;
-
-  cleanupExpiredTotpSetups(request: Empty): Promise<Empty> | Observable<Empty> | Empty;
-
-  /**
-   * Logout — kill refresh tokens. LogoutCurrent kills only the one whose
-   * HMAC matches; LogoutAll wipes every row for the user.
-   */
-
-  logoutCurrent(request: LogoutCurrentRequest): Promise<LogoutResponse> | Observable<LogoutResponse> | LogoutResponse;
-
-  logoutAll(request: LogoutAllRequest): Promise<LogoutResponse> | Observable<LogoutResponse> | LogoutResponse;
-
-  /**
-   * Self-service restore. Verifies credentials + password against a
-   * soft-deleted user, clears deletedAt/scheduledForHardDelete, and issues
-   * fresh tokens — the one auth path that DOES read deletedAt accounts.
-   */
-
-  restoreLogin(request: RestoreLoginRequest): Promise<AuthResult> | Observable<AuthResult> | AuthResult;
-
-  /**
-   * Login history. Read-only audit feed for the settings page; rows come
-   * from LoginEvent. Internal alternative: tasks-service GC.
-   */
-
-  listLoginHistory(
-    request: ListLoginHistoryRequest,
-  ): Promise<ListLoginHistoryResponse> | Observable<ListLoginHistoryResponse> | ListLoginHistoryResponse;
-}
-
-export function AuthServiceControllerMethods() {
-  return function (constructor: Function) {
-    const grpcMethods: string[] = [
-      "login",
-      "register",
-      "createCode",
-      "verifyCode",
-      "checkToken",
-      "refreshToken",
-      "get2FaStatus",
-      "getProfile",
-      "cleanupExpiredTotpSetups",
-      "logoutCurrent",
-      "logoutAll",
-      "restoreLogin",
-      "listLoginHistory",
-    ];
-    for (const method of grpcMethods) {
-      const descriptor: any = Reflect.getOwnPropertyDescriptor(constructor.prototype, method);
-      GrpcMethod("AuthService", method)(constructor.prototype[method], method, descriptor);
-    }
-    const grpcStreamMethods: string[] = [];
-    for (const method of grpcStreamMethods) {
-      const descriptor: any = Reflect.getOwnPropertyDescriptor(constructor.prototype, method);
-      GrpcStreamMethod("AuthService", method)(constructor.prototype[method], method, descriptor);
-    }
-  };
-}
-
-export const AUTH_SERVICE_NAME = "AuthService";

package/gen/mail.ts

@@ -1,121 +0,0 @@
-// Code generated by protoc-gen-ts_proto. DO NOT EDIT.
-// versions:
-//   protoc-gen-ts_proto  v2.10.1
-//   protoc               v7.35.0
-// source: mail.proto
-
-/* eslint-disable */
-import { GrpcMethod, GrpcStreamMethod } from "@nestjs/microservices";
-import { Observable } from "rxjs";
-
-export const protobufPackage = "mail.v1";
-
-export interface MailAck {
-  queued: boolean;
-}
-
-export interface SendRegRequest {
-  userId: string;
-  email: string;
-  username: string;
-  fullName: string;
-}
-
-export interface Send2faRequest {
-  email: string;
-  code: string;
-  username: string;
-}
-
-export interface SendPasswordResetRequest {
-  email: string;
-  code: string;
-  username: string;
-}
-
-export interface SendRegistrationConfirmRequest {
-  email: string;
-  code: string;
-  username: string;
-}
-
-export interface SendDataExportReadyRequest {
-  email: string;
-  username: string;
-  /** signed S3 URL */
-  fileUrl: string;
-  /** for the message body */
-  urlTtlHours: number;
-  fileSize: number;
-}
-
-export const MAIL_V1_PACKAGE_NAME = "mail.v1";
-
-/**
- * Legacy mail-service used @EventPattern (fire-and-forget). In the new gRPC
- * stack each becomes a unary RPC that returns an Ack. Callers ignore the
- * response if they don't care about delivery.
- */
-
-export interface MailServiceClient {
-  sendReg(request: SendRegRequest): Observable<MailAck>;
-
-  send2Fa(request: Send2faRequest): Observable<MailAck>;
-
-  sendPasswordReset(request: SendPasswordResetRequest): Observable<MailAck>;
-
-  sendRegistrationConfirm(request: SendRegistrationConfirmRequest): Observable<MailAck>;
-
-  /**
-   * GDPR data-export delivery — tasks-service fires after the JSON dump
-   * lands in S3; mail-service sends the signed URL with a sensible TTL note.
-   */
-
-  sendDataExportReady(request: SendDataExportReadyRequest): Observable<MailAck>;
-}
-
-/**
- * Legacy mail-service used @EventPattern (fire-and-forget). In the new gRPC
- * stack each becomes a unary RPC that returns an Ack. Callers ignore the
- * response if they don't care about delivery.
- */
-
-export interface MailServiceController {
-  sendReg(request: SendRegRequest): Promise<MailAck> | Observable<MailAck> | MailAck;
-
-  send2Fa(request: Send2faRequest): Promise<MailAck> | Observable<MailAck> | MailAck;
-
-  sendPasswordReset(request: SendPasswordResetRequest): Promise<MailAck> | Observable<MailAck> | MailAck;
-
-  sendRegistrationConfirm(request: SendRegistrationConfirmRequest): Promise<MailAck> | Observable<MailAck> | MailAck;
-
-  /**
-   * GDPR data-export delivery — tasks-service fires after the JSON dump
-   * lands in S3; mail-service sends the signed URL with a sensible TTL note.
-   */
-
-  sendDataExportReady(request: SendDataExportReadyRequest): Promise<MailAck> | Observable<MailAck> | MailAck;
-}
-
-export function MailServiceControllerMethods() {
-  return function (constructor: Function) {
-    const grpcMethods: string[] = [
-      "sendReg",
-      "send2Fa",
-      "sendPasswordReset",
-      "sendRegistrationConfirm",
-      "sendDataExportReady",
-    ];
-    for (const method of grpcMethods) {
-      const descriptor: any = Reflect.getOwnPropertyDescriptor(constructor.prototype, method);
-      GrpcMethod("MailService", method)(constructor.prototype[method], method, descriptor);
-    }
-    const grpcStreamMethods: string[] = [];
-    for (const method of grpcStreamMethods) {
-      const descriptor: any = Reflect.getOwnPropertyDescriptor(constructor.prototype, method);
-      GrpcStreamMethod("MailService", method)(constructor.prototype[method], method, descriptor);
-    }
-  };
-}
-
-export const MAIL_SERVICE_NAME = "MailService";