@aepstore-dev/contracts 1.50.0 → 1.52.0

package/gen/auth.d.ts

@@ -66,19 +66,12 @@ export interface AuthUser {
     avatarUrl: string;
     bannerUrl: string;
     roles: string[];
-    /** primary role (roles[0]) */
-    role: string;
-    isVerified: boolean;
-    twoFactorType: TwoFactorType;
-    twoFactorEnabled: boolean;
-    /** Decimal as string (D7) */
-    balance: string;
 }
 /**
  * Unified result for login/register/createCode/verifyCode/refresh. Which fields
  * are populated depends on the flow:
  *   - fully authenticated → access_token + refresh_token + expires_in + user
- *   - 2FA required / pending confirm → message + requires_2fa + two_factor_type + user (no tokens)
+ *   - 2FA required / pending confirm → message + two_factor_required + two_factor_type + user (no tokens)
  *   - totp_generate → secret + otpauth + qr (+ user)
  *   - totp_activate → backup_codes (+ tokens/user)
  */
@@ -88,7 +81,15 @@ export interface AuthResult {
     expiresIn: number;
     user: AuthUser | undefined;
     message: string;
-    requires2fa: boolean;
+    /**
+     * Renamed from `requires_2fa` in 1.52.0: the digit-after-underscore broke
+     * the grpc proto-loader's camelCase pass (`_2` isn't `_<letter>`), so the
+     * wire key stayed snake_case and never matched the camelCase handler output
+     * → always serialised false. `two_factor_required` camelCases cleanly to
+     * `twoFactorRequired` on every layer. Field number 6 is unchanged (wire-
+     * compatible).
+     */
+    twoFactorRequired: boolean;
     twoFactorType: TwoFactorType;
     /** TOTP setup extras */
     secret: string;

package/gen/auth.ts

@@ -85,20 +85,13 @@ export interface AuthUser {
   avatarUrl: string;
   bannerUrl: string;
   roles: string[];
-  /** primary role (roles[0]) */
-  role: string;
-  isVerified: boolean;
-  twoFactorType: TwoFactorType;
-  twoFactorEnabled: boolean;
-  /** Decimal as string (D7) */
-  balance: string;
 }
 
 /**
  * Unified result for login/register/createCode/verifyCode/refresh. Which fields
  * are populated depends on the flow:
  *   - fully authenticated → access_token + refresh_token + expires_in + user
- *   - 2FA required / pending confirm → message + requires_2fa + two_factor_type + user (no tokens)
+ *   - 2FA required / pending confirm → message + two_factor_required + two_factor_type + user (no tokens)
  *   - totp_generate → secret + otpauth + qr (+ user)
  *   - totp_activate → backup_codes (+ tokens/user)
  */
@@ -108,7 +101,15 @@ export interface AuthResult {
   expiresIn: number;
   user: AuthUser | undefined;
   message: string;
-  requires2fa: boolean;
+  /**
+   * Renamed from `requires_2fa` in 1.52.0: the digit-after-underscore broke
+   * the grpc proto-loader's camelCase pass (`_2` isn't `_<letter>`), so the
+   * wire key stayed snake_case and never matched the camelCase handler output
+   * → always serialised false. `two_factor_required` camelCases cleanly to
+   * `twoFactorRequired` on every layer. Field number 6 is unchanged (wire-
+   * compatible).
+   */
+  twoFactorRequired: boolean;
   twoFactorType: TwoFactorType;
   /** TOTP setup extras */
   secret: string;

package/gen/users.d.ts

@@ -26,8 +26,6 @@ export interface User {
     username: string;
     avatarUrl: string;
     roles: string[];
-    /** primary role for backwards compat */
-    role: string;
     /** ISO 8601 */
     createdAt: string;
     updatedAt: string;

package/gen/users.ts

@@ -39,8 +39,6 @@ export interface User {
   username: string;
   avatarUrl: string;
   roles: string[];
-  /** primary role for backwards compat */
-  role: string;
   /** ISO 8601 */
   createdAt: string;
   updatedAt: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aepstore-dev/contracts",
-  "version": "1.50.0",
+  "version": "1.52.0",
   "description": "Protobuf definitions for aepstore microservices",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",

package/proto/auth.proto

@@ -107,17 +107,17 @@ message AuthUser {
     string avatar_url = 4;
     string banner_url = 5;
     repeated string roles = 6;
-    string role = 7; // primary role (roles[0])
-    bool is_verified = 8;
-    TwoFactorType two_factor_type = 9;
-    bool two_factor_enabled = 10;
-    string balance = 11; // Decimal as string (D7)
+    // Reserved: 7=role, 8=is_verified, 9=two_factor_type, 10=two_factor_enabled,
+    // 11=balance. Dropped in contracts 1.51.0 — clients read 2FA flags from
+    // AuthResult / /account/settings, balance from /payments/wallet.
+    reserved 7, 8, 9, 10, 11;
+    reserved "role", "is_verified", "two_factor_type", "two_factor_enabled", "balance";
 }
 
 // Unified result for login/register/createCode/verifyCode/refresh. Which fields
 // are populated depends on the flow:
 //   - fully authenticated → access_token + refresh_token + expires_in + user
-//   - 2FA required / pending confirm → message + requires_2fa + two_factor_type + user (no tokens)
+//   - 2FA required / pending confirm → message + two_factor_required + two_factor_type + user (no tokens)
 //   - totp_generate → secret + otpauth + qr (+ user)
 //   - totp_activate → backup_codes (+ tokens/user)
 message AuthResult {
@@ -127,7 +127,13 @@ message AuthResult {
     AuthUser user = 4;
 
     string message = 5;
-    bool requires_2fa = 6;
+    // Renamed from `requires_2fa` in 1.52.0: the digit-after-underscore broke
+    // the grpc proto-loader's camelCase pass (`_2` isn't `_<letter>`), so the
+    // wire key stayed snake_case and never matched the camelCase handler output
+    // → always serialised false. `two_factor_required` camelCases cleanly to
+    // `twoFactorRequired` on every layer. Field number 6 is unchanged (wire-
+    // compatible).
+    bool two_factor_required = 6;
     TwoFactorType two_factor_type = 7;
 
     // TOTP setup extras

package/proto/users.proto

@@ -77,7 +77,8 @@ message User {
     string username = 3;
     string avatar_url = 4;
     repeated string roles = 5;
-    string role = 6; // primary role for backwards compat
+    reserved 6;
+    reserved "role";
     string created_at = 7; // ISO 8601
     string updated_at = 8;
     bool is_banned = 9;