@aepstore-dev/contracts 1.51.0 → 1.53.0

package/gen/auth.d.ts

@@ -71,7 +71,7 @@ export interface AuthUser {
  * Unified result for login/register/createCode/verifyCode/refresh. Which fields
  * are populated depends on the flow:
  *   - fully authenticated → access_token + refresh_token + expires_in + user
- *   - 2FA required / pending confirm → message + requires_2fa + two_factor_type + user (no tokens)
+ *   - 2FA required / pending confirm → message + two_factor_required + two_factor_type + user (no tokens)
  *   - totp_generate → secret + otpauth + qr (+ user)
  *   - totp_activate → backup_codes (+ tokens/user)
  */
@@ -81,7 +81,15 @@ export interface AuthResult {
     expiresIn: number;
     user: AuthUser | undefined;
     message: string;
-    requires2fa: boolean;
+    /**
+     * Renamed from `requires_2fa` in 1.52.0: the digit-after-underscore broke
+     * the grpc proto-loader's camelCase pass (`_2` isn't `_<letter>`), so the
+     * wire key stayed snake_case and never matched the camelCase handler output
+     * → always serialised false. `two_factor_required` camelCases cleanly to
+     * `twoFactorRequired` on every layer. Field number 6 is unchanged (wire-
+     * compatible).
+     */
+    twoFactorRequired: boolean;
     twoFactorType: TwoFactorType;
     /** TOTP setup extras */
     secret: string;

package/gen/auth.ts

@@ -91,7 +91,7 @@ export interface AuthUser {
  * Unified result for login/register/createCode/verifyCode/refresh. Which fields
  * are populated depends on the flow:
  *   - fully authenticated → access_token + refresh_token + expires_in + user
- *   - 2FA required / pending confirm → message + requires_2fa + two_factor_type + user (no tokens)
+ *   - 2FA required / pending confirm → message + two_factor_required + two_factor_type + user (no tokens)
  *   - totp_generate → secret + otpauth + qr (+ user)
  *   - totp_activate → backup_codes (+ tokens/user)
  */
@@ -101,7 +101,15 @@ export interface AuthResult {
   expiresIn: number;
   user: AuthUser | undefined;
   message: string;
-  requires2fa: boolean;
+  /**
+   * Renamed from `requires_2fa` in 1.52.0: the digit-after-underscore broke
+   * the grpc proto-loader's camelCase pass (`_2` isn't `_<letter>`), so the
+   * wire key stayed snake_case and never matched the camelCase handler output
+   * → always serialised false. `two_factor_required` camelCases cleanly to
+   * `twoFactorRequired` on every layer. Field number 6 is unchanged (wire-
+   * compatible).
+   */
+  twoFactorRequired: boolean;
   twoFactorType: TwoFactorType;
   /** TOTP setup extras */
   secret: string;

package/gen/users.d.ts

@@ -202,6 +202,28 @@ export interface UpdateUserRequest {
 export interface UserResponse {
     user: User | undefined;
 }
+/**
+ * Lightweight uniqueness probe for signup / account-settings forms. Called
+ * often (per keystroke/blur) — backed by a single indexed query, no writes.
+ * Mirrors the exact-match uniqueness check in UpdateUser so availability never
+ * disagrees with the real collision at submit time.
+ */
+export interface CheckAvailabilityRequest {
+    /** empty = skip this field */
+    username: string;
+    /** empty = skip this field */
+    email: string;
+    /** empty = none; set to current user so editing */
+    excludeUserId: string;
+}
+export interface CheckAvailabilityResponse {
+    /** false = username wasn't part of the query */
+    usernameChecked: boolean;
+    usernameAvailable: boolean;
+    /** false = email wasn't part of the query */
+    emailChecked: boolean;
+    emailAvailable: boolean;
+}
 export interface UpdateUserRoleRequest {
     adminId: string;
     userId: string;
@@ -530,6 +552,7 @@ export interface UsersServiceClient {
     getPublicProfile(request: GetPublicProfileRequest): Observable<PublicProfileResponse>;
     updateProfile(request: UpdateProfileRequest): Observable<PublicProfileResponse>;
     updateUser(request: UpdateUserRequest): Observable<UserResponse>;
+    checkAvailability(request: CheckAvailabilityRequest): Observable<CheckAvailabilityResponse>;
     updateUserRole(request: UpdateUserRoleRequest): Observable<UserResponse>;
     getUsers(request: GetUsersRequest): Observable<GetUsersResponse>;
     getActiveDevices(request: GetActiveDevicesRequest): Observable<GetActiveDevicesResponse>;
@@ -595,6 +618,7 @@ export interface UsersServiceController {
     getPublicProfile(request: GetPublicProfileRequest): Promise<PublicProfileResponse> | Observable<PublicProfileResponse> | PublicProfileResponse;
     updateProfile(request: UpdateProfileRequest): Promise<PublicProfileResponse> | Observable<PublicProfileResponse> | PublicProfileResponse;
     updateUser(request: UpdateUserRequest): Promise<UserResponse> | Observable<UserResponse> | UserResponse;
+    checkAvailability(request: CheckAvailabilityRequest): Promise<CheckAvailabilityResponse> | Observable<CheckAvailabilityResponse> | CheckAvailabilityResponse;
     updateUserRole(request: UpdateUserRoleRequest): Promise<UserResponse> | Observable<UserResponse> | UserResponse;
     getUsers(request: GetUsersRequest): Promise<GetUsersResponse> | Observable<GetUsersResponse> | GetUsersResponse;
     getActiveDevices(request: GetActiveDevicesRequest): Promise<GetActiveDevicesResponse> | Observable<GetActiveDevicesResponse> | GetActiveDevicesResponse;

package/gen/users.js

@@ -36,6 +36,7 @@ function UsersServiceControllerMethods() {
             "getPublicProfile",
             "updateProfile",
             "updateUser",
+            "checkAvailability",
             "updateUserRole",
             "getUsers",
             "getActiveDevices",

package/gen/users.ts

@@ -235,6 +235,30 @@ export interface UserResponse {
   user: User | undefined;
 }
 
+/**
+ * Lightweight uniqueness probe for signup / account-settings forms. Called
+ * often (per keystroke/blur) — backed by a single indexed query, no writes.
+ * Mirrors the exact-match uniqueness check in UpdateUser so availability never
+ * disagrees with the real collision at submit time.
+ */
+export interface CheckAvailabilityRequest {
+  /** empty = skip this field */
+  username: string;
+  /** empty = skip this field */
+  email: string;
+  /** empty = none; set to current user so editing */
+  excludeUserId: string;
+}
+
+export interface CheckAvailabilityResponse {
+  /** false = username wasn't part of the query */
+  usernameChecked: boolean;
+  usernameAvailable: boolean;
+  /** false = email wasn't part of the query */
+  emailChecked: boolean;
+  emailAvailable: boolean;
+}
+
 export interface UpdateUserRoleRequest {
   adminId: string;
   userId: string;
@@ -618,6 +642,8 @@ export interface UsersServiceClient {
 
   updateUser(request: UpdateUserRequest): Observable<UserResponse>;
 
+  checkAvailability(request: CheckAvailabilityRequest): Observable<CheckAvailabilityResponse>;
+
   updateUserRole(request: UpdateUserRoleRequest): Observable<UserResponse>;
 
   getUsers(request: GetUsersRequest): Observable<GetUsersResponse>;
@@ -738,6 +764,10 @@ export interface UsersServiceController {
 
   updateUser(request: UpdateUserRequest): Promise<UserResponse> | Observable<UserResponse> | UserResponse;
 
+  checkAvailability(
+    request: CheckAvailabilityRequest,
+  ): Promise<CheckAvailabilityResponse> | Observable<CheckAvailabilityResponse> | CheckAvailabilityResponse;
+
   updateUserRole(request: UpdateUserRoleRequest): Promise<UserResponse> | Observable<UserResponse> | UserResponse;
 
   getUsers(request: GetUsersRequest): Promise<GetUsersResponse> | Observable<GetUsersResponse> | GetUsersResponse;
@@ -903,6 +933,7 @@ export function UsersServiceControllerMethods() {
       "getPublicProfile",
       "updateProfile",
       "updateUser",
+      "checkAvailability",
       "updateUserRole",
       "getUsers",
       "getActiveDevices",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aepstore-dev/contracts",
-  "version": "1.51.0",
+  "version": "1.53.0",
   "description": "Protobuf definitions for aepstore microservices",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",

package/proto/auth.proto

@@ -117,7 +117,7 @@ message AuthUser {
 // Unified result for login/register/createCode/verifyCode/refresh. Which fields
 // are populated depends on the flow:
 //   - fully authenticated → access_token + refresh_token + expires_in + user
-//   - 2FA required / pending confirm → message + requires_2fa + two_factor_type + user (no tokens)
+//   - 2FA required / pending confirm → message + two_factor_required + two_factor_type + user (no tokens)
 //   - totp_generate → secret + otpauth + qr (+ user)
 //   - totp_activate → backup_codes (+ tokens/user)
 message AuthResult {
@@ -127,7 +127,13 @@ message AuthResult {
     AuthUser user = 4;
 
     string message = 5;
-    bool requires_2fa = 6;
+    // Renamed from `requires_2fa` in 1.52.0: the digit-after-underscore broke
+    // the grpc proto-loader's camelCase pass (`_2` isn't `_<letter>`), so the
+    // wire key stayed snake_case and never matched the camelCase handler output
+    // → always serialised false. `two_factor_required` camelCases cleanly to
+    // `twoFactorRequired` on every layer. Field number 6 is unchanged (wire-
+    // compatible).
+    bool two_factor_required = 6;
     TwoFactorType two_factor_type = 7;
 
     // TOTP setup extras

package/proto/users.proto

@@ -6,6 +6,7 @@ service UsersService {
     rpc GetPublicProfile(GetPublicProfileRequest) returns (PublicProfileResponse);
     rpc UpdateProfile(UpdateProfileRequest) returns (PublicProfileResponse);
     rpc UpdateUser(UpdateUserRequest) returns (UserResponse);
+    rpc CheckAvailability(CheckAvailabilityRequest) returns (CheckAvailabilityResponse);
     rpc UpdateUserRole(UpdateUserRoleRequest) returns (UserResponse);
     rpc GetUsers(GetUsersRequest) returns (GetUsersResponse);
     rpc GetActiveDevices(GetActiveDevicesRequest) returns (GetActiveDevicesResponse);
@@ -264,6 +265,24 @@ message UserResponse {
     User user = 1;
 }
 
+// Lightweight uniqueness probe for signup / account-settings forms. Called
+// often (per keystroke/blur) — backed by a single indexed query, no writes.
+// Mirrors the exact-match uniqueness check in UpdateUser so availability never
+// disagrees with the real collision at submit time.
+message CheckAvailabilityRequest {
+    string username = 1;        // empty = skip this field
+    string email = 2;           // empty = skip this field
+    string exclude_user_id = 3; // empty = none; set to current user so editing
+                                // your OWN account doesn't report "taken"
+}
+
+message CheckAvailabilityResponse {
+    bool username_checked = 1;  // false = username wasn't part of the query
+    bool username_available = 2;
+    bool email_checked = 3;     // false = email wasn't part of the query
+    bool email_available = 4;
+}
+
 // =================================================================
 // UpdateUserRole (admin)
 // =================================================================