@aepstore-dev/contracts 1.61.0 → 1.63.0

package/proto/users.proto

@@ -1,402 +1,402 @@
-syntax = "proto3";
-
-package users.v1;
-
-service UsersService {
-    rpc GetPublicProfile(GetPublicProfileRequest) returns (PublicProfileResponse);
-    rpc UpdateProfile(UpdateProfileRequest) returns (PublicProfileResponse);
-    rpc UpdateUser(UpdateUserRequest) returns (UserResponse);
-    rpc CheckAvailability(CheckAvailabilityRequest) returns (CheckAvailabilityResponse);
-    rpc UpdateUserRole(UpdateUserRoleRequest) returns (UserResponse);
-    rpc GetUsers(GetUsersRequest) returns (GetUsersResponse);
-    rpc GetActiveDevices(GetActiveDevicesRequest) returns (GetActiveDevicesResponse);
-    rpc ManageDevices(ManageDevicesRequest) returns (ManageDevicesResponse);
-    rpc GetUserFields(GetUserFieldsRequest) returns (GetUserFieldsResponse);
-
-    rpc CreateSubscription(SubscriptionRequest) returns (SubscriptionResponse);
-    rpc DeleteSubscription(SubscriptionRequest) returns (SubscriptionResponse);
-
-    rpc BanUser(BanUserRequest) returns (UserResponse);
-    rpc UnbanUser(UnbanUserRequest) returns (UserResponse);
-
-    // Premium (paid). State lives in users-service; payments-service handles
-    // money and calls ActivatePremium (internal) on completion.
-    rpc GetMyPremium(GetMyPremiumRequest) returns (PremiumStateResponse);
-    rpc SetPremiumAutoRenew(SetPremiumAutoRenewRequest) returns (PremiumStateResponse);
-    // Internal — InternalServiceGuard. Called by payments-service after a
-    // successful premium payment (balance or YooKassa webhook).
-    rpc ActivatePremium(ActivatePremiumRequest) returns (PremiumStateResponse);
-    // Internal — fast lookup for the commission engine in payments-service.
-    rpc IsPremiumActive(IsPremiumActiveRequest) returns (IsPremiumActiveResponse);
-
-    // Avatar borders (catalog + admin CRUD). Catalog read is public; mutations
-    // are admin only (gateway enforces with RolesGuard).
-    rpc ListAvatarBorders(ListAvatarBordersRequest) returns (ListAvatarBordersResponse);
-    rpc UpsertAvatarBorder(UpsertAvatarBorderRequest) returns (AvatarBorder);
-    rpc DeleteAvatarBorder(DeleteAvatarBorderRequest) returns (DeleteAvatarBorderResponse);
-
-    // Account settings — bundled write surface for the UI.
-    rpc UpdatePrivacy(UpdatePrivacyRequest) returns (PublicProfileResponse);
-    rpc UpdateEmailPrefs(UpdateEmailPrefsRequest) returns (UpdateEmailPrefsResponse);
-    rpc UpdateLocale(UpdateLocaleRequest) returns (UpdateLocaleResponse);
-
-    // Soft-delete + restore. Internal AuthService also queries the soft-delete
-    // state on login (rejects if deletedAt set).
-    rpc SoftDeleteAccount(SoftDeleteAccountRequest) returns (SoftDeleteAccountResponse);
-    rpc RestoreAccount(RestoreAccountRequest) returns (UserResponse);
-    rpc HardDeletePending(HardDeletePendingRequest) returns (HardDeletePendingResponse); // tasks-service cron
-
-    // Blocks
-    rpc BlockUser(BlockUserRequest) returns (BlockUserResponse);
-    rpc UnblockUser(BlockUserRequest) returns (BlockUserResponse);
-    rpc ListBlockedUsers(ListBlockedUsersRequest) returns (ListBlockedUsersResponse);
-    rpc IsBlocked(IsBlockedRequest) returns (IsBlockedResponse); // internal lookup
-
-    // Data export
-    rpc RequestDataExport(RequestDataExportRequest) returns (DataExportRequestRow);
-    rpc ListDataExports(ListDataExportsRequest) returns (ListDataExportsResponse);
-    rpc PickPendingDataExport(PickPendingDataExportRequest) returns (DataExportRequestRow); // tasks-service
-    rpc CompleteDataExport(CompleteDataExportRequest) returns (DataExportRequestRow); // tasks-service
-    rpc CollectUserExportData(CollectUserExportDataRequest) returns (CollectUserExportDataResponse); // tasks-service
-
-    // Unified read for the settings page
-    rpc GetAccountSettings(GetAccountSettingsRequest) returns (AccountSettingsResponse);
-
-    // Password — separate from generic createCode/verifyCode reset flow.
-    rpc ChangePassword(ChangePasswordRequest) returns (Ok);
-}
-
-message Ok { bool ok = 1; }
-
-// =================================================================
-// Common types
-// =================================================================
-
-message User {
-    string id = 1;
-    string email = 2;
-    string username = 3;
-    string avatar_url = 4;
-    repeated string roles = 5;
-    reserved 6;
-    reserved "role";
-    string created_at = 7; // ISO 8601
-    string updated_at = 8;
-    bool is_banned = 9;
-    string banned_until = 10; // ISO 8601, empty = permanent/none
-    string ban_reason = 11;
-    string full_name = 12;
-    string avatar_border_image_url = 13;
-}
-
-message BanUserRequest {
-    string admin_id = 1;
-    string user_id = 2;
-    string reason = 3;
-    string until = 4; // ISO 8601; empty = permanent ban
-}
-
-message UnbanUserRequest {
-    string admin_id = 1;
-    string user_id = 2;
-}
-
-message Country {
-    string id = 1;
-    string code = 2;
-    string name = 3;
-}
-
-message SocialMedia {
-    string id = 1;
-    string platform = 2;
-    string url = 3;       // full link (built from username on read; empty for discord)
-    string username = 4;  // handle for handle-based platforms; empty for website
-}
-
-message CreateSocialMedia {
-    string platform = 1;
-    string url = 2;       // only for platform="website"
-    string username = 3;  // handle for all other platforms
-}
-
-message ProductUser {
-    string id = 1;
-    string username = 2;
-    string avatar_url = 3;
-}
-
-message Category {
-    string id = 1;
-    string name = 2;
-}
-
-message Product {
-    string id = 1;
-    string name = 2;
-    string description = 3;
-    string price = 4; // Decimal as string (D7)
-    string created_at = 5;
-    string updated_at = 6;
-    // profile-card preview fields
-    string preview = 7;
-    string final_price = 8;    // Decimal as string
-    string average_rating = 9; // number as string
-    string status = 10;
-    // Author of the product (same person as the profile owner, but echoed per
-    // product so cards can render the author independently).
-    ProductUser user = 11;
-    repeated Category categories = 12;
-}
-
-message Video {
-    string id = 1;
-    string title = 2;
-    string description = 3;
-    string url = 4;
-    string created_at = 5;
-    string updated_at = 6;
-}
-
-message ActiveDevice {
-    string id = 1;
-    string user_agent = 2;
-    string ip = 3;
-    string created_at = 4;
-    string last_used_at = 5;
-}
-
-message ProfileStats {
-    int32 subscribers_count = 1;
-    int32 subscriptions_count = 2;
-    int32 products_count = 3;
-    int32 videos_count = 4;
-}
-
-// Compact public user card for subscriber/subscription lists — no email/ban data.
-message ProfileUser {
-    string id = 1;
-    string username = 2;
-    string avatar_url = 3;
-    string full_name = 4;
-    string avatar_border_image_url = 5;
-}
-
-// =================================================================
-// GetPublicProfile
-// =================================================================
-
-message GetPublicProfileRequest {
-    string username = 1;
-    string viewer_user_id = 2; // optional — present when caller is authenticated
-}
-
-message PublicProfileResponse {
-    string id = 1;
-    string username = 2;
-    string full_name = 3;
-    string rating = 4; // Decimal as string
-    string about_me = 5;
-    repeated SocialMedia social_media = 6;
-    ProfileStats stats = 7;
-    repeated Video videos = 8;
-    repeated Product products = 9;
-    Country country = 10;
-    string avatar_url = 11;
-    string banner_url = 12;
-    string role = 13;
-    string created_at = 14;
-    bool hide_subscriptions = 15;
-    // Either populated lists or empty depending on hide_subscriptions
-    repeated ProfileUser subscriptions = 16;
-    repeated ProfileUser subscribers = 17;
-    bool is_owner = 18;
-    bool is_subscribed = 19; // viewer is subscribed to this profile (false when anonymous / self)
-    // Premium fields — populated only when the profile owner has an active
-    // PremiumSubscription. Non-premium viewers and non-premium profiles see
-    // empty strings / false.
-    bool is_premium = 20;
-    string profile_color = 21;
-    AvatarBorder avatar_border = 22;
-    string animated_avatar_url = 23;
-    string animated_banner_url = 24;
-    string premium_expires_at = 25; // ISO 8601, empty when not premium
-}
-
-// =================================================================
-// UpdateProfile
-// =================================================================
-
-message UpdateProfileRequest {
-    string user_id = 1;
-    // Every editable field is `optional` so the wire format preserves the
-    // "not set" state. A partial patch from the client (e.g. only avatarUrl)
-    // no longer accidentally wipes the other columns to proto3 defaults.
-    optional string full_name = 2;
-    optional string about_me = 3;
-    optional bool newsletter_subscription = 4;
-    optional bool hide_subscriptions = 5;
-    optional string avatar_url = 6;
-    optional string banner_url = 7;
-    optional string country_id = 8;
-    optional string timezone = 9;
-    // social_media remains repeated (an empty list is still a meaningful
-    // "replace with empty"); the gateway omits the field entirely when the
-    // client didn't send it so partial patches don't clear social links.
-    repeated CreateSocialMedia social_media = 10;
-    // Premium-only fields — rejected with FAILED_PRECONDITION when the caller
-    // has no active premium. `''` = no change, `__clear__` = explicit reset.
-    optional string profile_color = 11;
-    optional string avatar_border_id = 12;
-    optional string animated_avatar_url = 13;
-    optional string animated_banner_url = 14;
-}
-
-// =================================================================
-// UpdateUser
-// =================================================================
-
-message UpdateUserRequest {
-    string user_id = 1;
-    string username = 2;
-    string email = 3;
-    string code = 4; // confirmation code when changing email/username
-}
-
-message UserResponse {
-    User user = 1;
-}
-
-// Lightweight uniqueness probe for signup / account-settings forms. Called
-// often (per keystroke/blur) — backed by a single indexed query, no writes.
-// Mirrors the exact-match uniqueness check in UpdateUser so availability never
-// disagrees with the real collision at submit time.
-message CheckAvailabilityRequest {
-    string username = 1;        // empty = skip this field
-    string email = 2;           // empty = skip this field
-    string exclude_user_id = 3; // empty = none; set to current user so editing
-                                // your OWN account doesn't report "taken"
-}
-
-message CheckAvailabilityResponse {
-    bool username_checked = 1;  // false = username wasn't part of the query
-    bool username_available = 2;
-    bool email_checked = 3;     // false = email wasn't part of the query
-    bool email_available = 4;
-}
-
-// =================================================================
-// UpdateUserRole (admin)
-// =================================================================
-
-message UpdateUserRoleRequest {
-    string admin_id = 1;
-    string user_id = 2;
-    string role = 3;
-    string action = 4; // "grant" (default) | "revoke"
-}
-
-// =================================================================
-// GetUsers (paginated)
-// =================================================================
-
-message GetUsersRequest {
-    string page = 1;
-    string limit = 2;
-    string search = 3;
-    string role_name = 4;
-}
-
-message GetUsersResponse {
-    repeated User items = 1;
-    int32 total = 2;
-    int32 page = 3;
-    int32 limit = 4;
-}
-
-// =================================================================
-// Active devices
-// =================================================================
-
-message GetActiveDevicesRequest {
-    string user_id = 1;
-}
-
-message GetActiveDevicesResponse {
-    repeated ActiveDevice devices = 1;
-}
-
-message ManageDevicesRequest {
-    string user_id = 1;
-    repeated string device_ids_to_remove = 2;
-}
-
-message ManageDevicesResponse {
-    bool ok = 1;
-    int32 removed_count = 2;
-}
-
-// =================================================================
-// GetUserFields — paginated dynamic field sets
-// =================================================================
-
-enum UserFieldsType {
-    USER_FIELDS_TYPE_UNSPECIFIED = 0;
-    USER_FIELDS_TYPE_VIDEOS = 1;
-    USER_FIELDS_TYPE_PRODUCTS = 2;
-    USER_FIELDS_TYPE_SUBSCRIPTIONS = 3;
-    USER_FIELDS_TYPE_SUBSCRIBERS = 4;
-}
-
-message GetUserFieldsRequest {
-    string username = 1;
-    UserFieldsType type = 2;
-    int32 page = 3;
-    int32 limit = 4;
-    string viewer_user_id = 5; // optional
-}
-
-message GetUserFieldsResponse {
-    repeated Video videos = 1;
-    repeated Product products = 2;
-    repeated ProfileUser subscriptions = 3;
-    repeated ProfileUser subscribers = 4;
-    int32 total = 5;
-    int32 page = 6;
-    int32 limit = 7;
-}
-
-// =================================================================
-// Subscriptions
-// =================================================================
-
-message SubscriptionRequest {
-    string subscriber_id = 1; // the authenticated user performing the action
-    string target_id = 2;     // the user being (un)subscribed to/from
-}
-
-message SubscriptionResponse {
-    bool subscribed = 1;          // state after the call
-    int32 subscribers_count = 2;  // target's subscriber count after the call
-}
-
-// =================================================================
-// Premium
-// =================================================================
-
-// Periods mirror PremiumPeriod enum in schema.prisma.
-enum PremiumPeriod {
-    PREMIUM_PERIOD_UNSPECIFIED = 0;
-    PREMIUM_PERIOD_MONTH_1 = 1;
-    PREMIUM_PERIOD_MONTH_3 = 2;
-    PREMIUM_PERIOD_MONTH_6 = 3;
-    PREMIUM_PERIOD_MONTH_12 = 4;
-}
-
-message GetMyPremiumRequest {
-    string user_id = 1;
-}
-
+syntax = "proto3";
+
+package users.v1;
+
+service UsersService {
+    rpc GetPublicProfile(GetPublicProfileRequest) returns (PublicProfileResponse);
+    rpc UpdateProfile(UpdateProfileRequest) returns (PublicProfileResponse);
+    rpc UpdateUser(UpdateUserRequest) returns (UserResponse);
+    rpc CheckAvailability(CheckAvailabilityRequest) returns (CheckAvailabilityResponse);
+    rpc UpdateUserRole(UpdateUserRoleRequest) returns (UserResponse);
+    rpc GetUsers(GetUsersRequest) returns (GetUsersResponse);
+    rpc GetActiveDevices(GetActiveDevicesRequest) returns (GetActiveDevicesResponse);
+    rpc ManageDevices(ManageDevicesRequest) returns (ManageDevicesResponse);
+    rpc GetUserFields(GetUserFieldsRequest) returns (GetUserFieldsResponse);
+
+    rpc CreateSubscription(SubscriptionRequest) returns (SubscriptionResponse);
+    rpc DeleteSubscription(SubscriptionRequest) returns (SubscriptionResponse);
+
+    rpc BanUser(BanUserRequest) returns (UserResponse);
+    rpc UnbanUser(UnbanUserRequest) returns (UserResponse);
+
+    // Premium (paid). State lives in users-service; payments-service handles
+    // money and calls ActivatePremium (internal) on completion.
+    rpc GetMyPremium(GetMyPremiumRequest) returns (PremiumStateResponse);
+    rpc SetPremiumAutoRenew(SetPremiumAutoRenewRequest) returns (PremiumStateResponse);
+    // Internal — InternalServiceGuard. Called by payments-service after a
+    // successful premium payment (balance or YooKassa webhook).
+    rpc ActivatePremium(ActivatePremiumRequest) returns (PremiumStateResponse);
+    // Internal — fast lookup for the commission engine in payments-service.
+    rpc IsPremiumActive(IsPremiumActiveRequest) returns (IsPremiumActiveResponse);
+
+    // Avatar borders (catalog + admin CRUD). Catalog read is public; mutations
+    // are admin only (gateway enforces with RolesGuard).
+    rpc ListAvatarBorders(ListAvatarBordersRequest) returns (ListAvatarBordersResponse);
+    rpc UpsertAvatarBorder(UpsertAvatarBorderRequest) returns (AvatarBorder);
+    rpc DeleteAvatarBorder(DeleteAvatarBorderRequest) returns (DeleteAvatarBorderResponse);
+
+    // Account settings — bundled write surface for the UI.
+    rpc UpdatePrivacy(UpdatePrivacyRequest) returns (PublicProfileResponse);
+    rpc UpdateEmailPrefs(UpdateEmailPrefsRequest) returns (UpdateEmailPrefsResponse);
+    rpc UpdateLocale(UpdateLocaleRequest) returns (UpdateLocaleResponse);
+
+    // Soft-delete + restore. Internal AuthService also queries the soft-delete
+    // state on login (rejects if deletedAt set).
+    rpc SoftDeleteAccount(SoftDeleteAccountRequest) returns (SoftDeleteAccountResponse);
+    rpc RestoreAccount(RestoreAccountRequest) returns (UserResponse);
+    rpc HardDeletePending(HardDeletePendingRequest) returns (HardDeletePendingResponse); // tasks-service cron
+
+    // Blocks
+    rpc BlockUser(BlockUserRequest) returns (BlockUserResponse);
+    rpc UnblockUser(BlockUserRequest) returns (BlockUserResponse);
+    rpc ListBlockedUsers(ListBlockedUsersRequest) returns (ListBlockedUsersResponse);
+    rpc IsBlocked(IsBlockedRequest) returns (IsBlockedResponse); // internal lookup
+
+    // Data export
+    rpc RequestDataExport(RequestDataExportRequest) returns (DataExportRequestRow);
+    rpc ListDataExports(ListDataExportsRequest) returns (ListDataExportsResponse);
+    rpc PickPendingDataExport(PickPendingDataExportRequest) returns (DataExportRequestRow); // tasks-service
+    rpc CompleteDataExport(CompleteDataExportRequest) returns (DataExportRequestRow); // tasks-service
+    rpc CollectUserExportData(CollectUserExportDataRequest) returns (CollectUserExportDataResponse); // tasks-service
+
+    // Unified read for the settings page
+    rpc GetAccountSettings(GetAccountSettingsRequest) returns (AccountSettingsResponse);
+
+    // Password — separate from generic createCode/verifyCode reset flow.
+    rpc ChangePassword(ChangePasswordRequest) returns (Ok);
+}
+
+message Ok { bool ok = 1; }
+
+// =================================================================
+// Common types
+// =================================================================
+
+message User {
+    string id = 1;
+    string email = 2;
+    string username = 3;
+    string avatar_url = 4;
+    repeated string roles = 5;
+    reserved 6;
+    reserved "role";
+    string created_at = 7; // ISO 8601
+    string updated_at = 8;
+    bool is_banned = 9;
+    string banned_until = 10; // ISO 8601, empty = permanent/none
+    string ban_reason = 11;
+    string full_name = 12;
+    string avatar_border_image_url = 13;
+}
+
+message BanUserRequest {
+    string admin_id = 1;
+    string user_id = 2;
+    string reason = 3;
+    string until = 4; // ISO 8601; empty = permanent ban
+}
+
+message UnbanUserRequest {
+    string admin_id = 1;
+    string user_id = 2;
+}
+
+message Country {
+    string id = 1;
+    string code = 2;
+    string name = 3;
+}
+
+message SocialMedia {
+    string id = 1;
+    string platform = 2;
+    string url = 3;       // full link (built from username on read; empty for discord)
+    string username = 4;  // handle for handle-based platforms; empty for website
+}
+
+message CreateSocialMedia {
+    string platform = 1;
+    string url = 2;       // only for platform="website"
+    string username = 3;  // handle for all other platforms
+}
+
+message ProductUser {
+    string id = 1;
+    string username = 2;
+    string avatar_url = 3;
+}
+
+message Category {
+    string id = 1;
+    string name = 2;
+}
+
+message Product {
+    string id = 1;
+    string name = 2;
+    string description = 3;
+    string price = 4; // Decimal as string (D7)
+    string created_at = 5;
+    string updated_at = 6;
+    // profile-card preview fields
+    string preview = 7;
+    string final_price = 8;    // Decimal as string
+    string average_rating = 9; // number as string
+    string status = 10;
+    // Author of the product (same person as the profile owner, but echoed per
+    // product so cards can render the author independently).
+    ProductUser user = 11;
+    repeated Category categories = 12;
+}
+
+message Video {
+    string id = 1;
+    string title = 2;
+    string description = 3;
+    string url = 4;
+    string created_at = 5;
+    string updated_at = 6;
+}
+
+message ActiveDevice {
+    string id = 1;
+    string user_agent = 2;
+    string ip = 3;
+    string created_at = 4;
+    string last_used_at = 5;
+}
+
+message ProfileStats {
+    int32 subscribers_count = 1;
+    int32 subscriptions_count = 2;
+    int32 products_count = 3;
+    int32 videos_count = 4;
+}
+
+// Compact public user card for subscriber/subscription lists — no email/ban data.
+message ProfileUser {
+    string id = 1;
+    string username = 2;
+    string avatar_url = 3;
+    string full_name = 4;
+    string avatar_border_image_url = 5;
+}
+
+// =================================================================
+// GetPublicProfile
+// =================================================================
+
+message GetPublicProfileRequest {
+    string username = 1;
+    string viewer_user_id = 2; // optional — present when caller is authenticated
+}
+
+message PublicProfileResponse {
+    string id = 1;
+    string username = 2;
+    string full_name = 3;
+    string rating = 4; // Decimal as string
+    string about_me = 5;
+    repeated SocialMedia social_media = 6;
+    ProfileStats stats = 7;
+    repeated Video videos = 8;
+    repeated Product products = 9;
+    Country country = 10;
+    string avatar_url = 11;
+    string banner_url = 12;
+    string role = 13;
+    string created_at = 14;
+    bool hide_subscriptions = 15;
+    // Either populated lists or empty depending on hide_subscriptions
+    repeated ProfileUser subscriptions = 16;
+    repeated ProfileUser subscribers = 17;
+    bool is_owner = 18;
+    bool is_subscribed = 19; // viewer is subscribed to this profile (false when anonymous / self)
+    // Premium fields — populated only when the profile owner has an active
+    // PremiumSubscription. Non-premium viewers and non-premium profiles see
+    // empty strings / false.
+    bool is_premium = 20;
+    string profile_color = 21;
+    AvatarBorder avatar_border = 22;
+    string animated_avatar_url = 23;
+    string animated_banner_url = 24;
+    string premium_expires_at = 25; // ISO 8601, empty when not premium
+}
+
+// =================================================================
+// UpdateProfile
+// =================================================================
+
+message UpdateProfileRequest {
+    string user_id = 1;
+    // Every editable field is `optional` so the wire format preserves the
+    // "not set" state. A partial patch from the client (e.g. only avatarUrl)
+    // no longer accidentally wipes the other columns to proto3 defaults.
+    optional string full_name = 2;
+    optional string about_me = 3;
+    optional bool newsletter_subscription = 4;
+    optional bool hide_subscriptions = 5;
+    optional string avatar_url = 6;
+    optional string banner_url = 7;
+    optional string country_id = 8;
+    optional string timezone = 9;
+    // social_media remains repeated (an empty list is still a meaningful
+    // "replace with empty"); the gateway omits the field entirely when the
+    // client didn't send it so partial patches don't clear social links.
+    repeated CreateSocialMedia social_media = 10;
+    // Premium-only fields — rejected with FAILED_PRECONDITION when the caller
+    // has no active premium. `''` = no change, `__clear__` = explicit reset.
+    optional string profile_color = 11;
+    optional string avatar_border_id = 12;
+    optional string animated_avatar_url = 13;
+    optional string animated_banner_url = 14;
+}
+
+// =================================================================
+// UpdateUser
+// =================================================================
+
+message UpdateUserRequest {
+    string user_id = 1;
+    string username = 2;
+    string email = 3;
+    string code = 4; // confirmation code when changing email/username
+}
+
+message UserResponse {
+    User user = 1;
+}
+
+// Lightweight uniqueness probe for signup / account-settings forms. Called
+// often (per keystroke/blur) — backed by a single indexed query, no writes.
+// Mirrors the exact-match uniqueness check in UpdateUser so availability never
+// disagrees with the real collision at submit time.
+message CheckAvailabilityRequest {
+    string username = 1;        // empty = skip this field
+    string email = 2;           // empty = skip this field
+    string exclude_user_id = 3; // empty = none; set to current user so editing
+                                // your OWN account doesn't report "taken"
+}
+
+message CheckAvailabilityResponse {
+    bool username_checked = 1;  // false = username wasn't part of the query
+    bool username_available = 2;
+    bool email_checked = 3;     // false = email wasn't part of the query
+    bool email_available = 4;
+}
+
+// =================================================================
+// UpdateUserRole (admin)
+// =================================================================
+
+message UpdateUserRoleRequest {
+    string admin_id = 1;
+    string user_id = 2;
+    string role = 3;
+    string action = 4; // "grant" (default) | "revoke"
+}
+
+// =================================================================
+// GetUsers (paginated)
+// =================================================================
+
+message GetUsersRequest {
+    string page = 1;
+    string limit = 2;
+    string search = 3;
+    string role_name = 4;
+}
+
+message GetUsersResponse {
+    repeated User items = 1;
+    int32 total = 2;
+    int32 page = 3;
+    int32 limit = 4;
+}
+
+// =================================================================
+// Active devices
+// =================================================================
+
+message GetActiveDevicesRequest {
+    string user_id = 1;
+}
+
+message GetActiveDevicesResponse {
+    repeated ActiveDevice devices = 1;
+}
+
+message ManageDevicesRequest {
+    string user_id = 1;
+    repeated string device_ids_to_remove = 2;
+}
+
+message ManageDevicesResponse {
+    bool ok = 1;
+    int32 removed_count = 2;
+}
+
+// =================================================================
+// GetUserFields — paginated dynamic field sets
+// =================================================================
+
+enum UserFieldsType {
+    USER_FIELDS_TYPE_UNSPECIFIED = 0;
+    USER_FIELDS_TYPE_VIDEOS = 1;
+    USER_FIELDS_TYPE_PRODUCTS = 2;
+    USER_FIELDS_TYPE_SUBSCRIPTIONS = 3;
+    USER_FIELDS_TYPE_SUBSCRIBERS = 4;
+}
+
+message GetUserFieldsRequest {
+    string username = 1;
+    UserFieldsType type = 2;
+    int32 page = 3;
+    int32 limit = 4;
+    string viewer_user_id = 5; // optional
+}
+
+message GetUserFieldsResponse {
+    repeated Video videos = 1;
+    repeated Product products = 2;
+    repeated ProfileUser subscriptions = 3;
+    repeated ProfileUser subscribers = 4;
+    int32 total = 5;
+    int32 page = 6;
+    int32 limit = 7;
+}
+
+// =================================================================
+// Subscriptions
+// =================================================================
+
+message SubscriptionRequest {
+    string subscriber_id = 1; // the authenticated user performing the action
+    string target_id = 2;     // the user being (un)subscribed to/from
+}
+
+message SubscriptionResponse {
+    bool subscribed = 1;          // state after the call
+    int32 subscribers_count = 2;  // target's subscriber count after the call
+}
+
+// =================================================================
+// Premium
+// =================================================================
+
+// Periods mirror PremiumPeriod enum in schema.prisma.
+enum PremiumPeriod {
+    PREMIUM_PERIOD_UNSPECIFIED = 0;
+    PREMIUM_PERIOD_MONTH_1 = 1;
+    PREMIUM_PERIOD_MONTH_3 = 2;
+    PREMIUM_PERIOD_MONTH_6 = 3;
+    PREMIUM_PERIOD_MONTH_12 = 4;
+}
+
+message GetMyPremiumRequest {
+    string user_id = 1;
+}
+
 message PremiumStateResponse {
     bool is_active = 1;
     string status = 2;              // ACTIVE | EXPIRED | CANCELED | empty (never purchased)
@@ -426,14 +426,14 @@ message PremiumSavedPaymentCard {
     string nickname = 7;
     string created_at = 8;
 }
-
-message SetPremiumAutoRenewRequest {
-    string user_id = 1;
-    bool enabled = 2;
-}
-
-// Internal — payments-service hands us the period that was just paid for, plus
-// the YooKassa payment_method id (empty for balance/non-recurring purchases).
+
+message SetPremiumAutoRenewRequest {
+    string user_id = 1;
+    bool enabled = 2;
+}
+
+// Internal — payments-service hands us the period that was just paid for, plus
+// the YooKassa payment_method id (empty for balance/non-recurring purchases).
 message ActivatePremiumRequest {
     string user_id = 1;
     PremiumPeriod period = 2;
@@ -441,293 +441,293 @@ message ActivatePremiumRequest {
     bool is_renewal = 4;            // false = first purchase; true = cron-driven renewal
     bool auto_renew = 5;            // set by the purchase flow; renewals keep true
 }
-
-message IsPremiumActiveRequest {
-    string user_id = 1;
-}
-
-message IsPremiumActiveResponse {
-    bool is_active = 1;
-}
-
-// =================================================================
-// Avatar borders
-// =================================================================
-
-message AvatarBorder {
-    string id = 1;
-    string code = 2;
-    string name = 3;
-    string description = 4;
-    string image_url = 5;
-    bool is_animated = 6;
-    string source = 7;
-    int32 sort_order = 8;
-    bool is_active = 9;
-}
-
-message ListAvatarBordersRequest {
-    bool include_inactive = 1; // admin-only — gateway gates by role
-    string source = 2;         // optional filter
-}
-
-message ListAvatarBordersResponse {
-    repeated AvatarBorder items = 1;
-}
-
-message UpsertAvatarBorderRequest {
-    string id = 1;          // empty = create
-    string code = 2;        // required when creating
-    string name = 3;
-    string description = 4;
-    string image_url = 5;
-    bool is_animated = 6;
-    string source = 7;
-    int32 sort_order = 8;
-    bool is_active = 9;
-}
-
-message DeleteAvatarBorderRequest {
-    string id = 1;
-}
-
-message DeleteAvatarBorderResponse {
-    bool ok = 1;
-}
-
-// =================================================================
-// Account settings
-// =================================================================
-
-message UpdatePrivacyRequest {
-    string user_id = 1;
-    bool hide_email = 2;
-    bool hide_balance = 3;
-    bool hide_online = 4;
-}
-
-message UpdateEmailPrefsRequest {
-    string user_id = 1;
-    bool email_on_sales = 2;
-    bool email_on_reviews = 3;
-    bool email_on_news = 4;
-}
-
-message UpdateEmailPrefsResponse {
-    bool email_on_sales = 1;
-    bool email_on_reviews = 2;
-    bool email_on_news = 3;
-}
-
-message UpdateLocaleRequest {
-    string user_id = 1;
-    string locale = 2; // "ru" | "en" | ...
-}
-
-message UpdateLocaleResponse {
-    string locale = 1;
-}
-
-message SoftDeleteAccountRequest {
-    string user_id = 1;
-    string reason = 2;     // optional, for support/audit
-    int32 cooldown_days = 3; // 0 → use server default (30)
-}
-
-message SoftDeleteAccountResponse {
-    string deleted_at = 1;             // ISO 8601
-    string scheduled_for_hard_delete = 2;
-}
-
-message RestoreAccountRequest {
-    string user_id = 1;
-}
-
-message HardDeletePendingRequest {
-    int32 max_batch = 1; // 0 → default 100
-}
-
-message HardDeletePendingResponse {
-    int32 deleted = 1;
-}
-
-message ChangePasswordRequest {
-    string user_id = 1;
-    string current_password = 2;
-    string new_password = 3;
-    // Optional: revoke all other sessions on success.
-    bool revoke_other_sessions = 4;
-}
-
-// =================================================================
-// Blocks
-// =================================================================
-
-message BlockUserRequest {
-    string blocker_id = 1;
-    string blocked_id = 2;
-    string reason = 3; // optional
-}
-
-message BlockUserResponse {
-    bool blocked = 1;
-}
-
-message BlockedUserRow {
-    string id = 1;
-    string username = 2;
-    string avatar_url = 3;
-    string blocked_at = 4;
-    string reason = 5;
-}
-
-message ListBlockedUsersRequest {
-    string blocker_id = 1;
-    int32 page = 2;
-    int32 limit = 3;
-}
-
-message ListBlockedUsersResponse {
-    repeated BlockedUserRow items = 1;
-    int32 total = 2;
-    int32 page = 3;
-    int32 limit = 4;
-}
-
-message IsBlockedRequest {
-    string blocker_id = 1;
-    string blocked_id = 2;
-}
-
-message IsBlockedResponse {
-    bool is_blocked = 1;
-}
-
-// =================================================================
-// Data export
-// =================================================================
-
-message DataExportRequestRow {
-    string id = 1;
-    string user_id = 2;
-    string status = 3; // PENDING | PROCESSING | READY | FAILED
-    string file_url = 4;
-    int32 file_size = 5;
-    string error = 6;
-    string created_at = 7;
-    string completed_at = 8;
-}
-
-message RequestDataExportRequest {
-    string user_id = 1;
-}
-
-message ListDataExportsRequest {
-    string user_id = 1;
-    int32 page = 2;
-    int32 limit = 3;
-}
-
-message ListDataExportsResponse {
-    repeated DataExportRequestRow items = 1;
-    int32 total = 2;
-    int32 page = 3;
-    int32 limit = 4;
-}
-
-message PickPendingDataExportRequest {
-    // tasks-service polls; returns one PENDING row marked PROCESSING, or empty.
-    bool _placeholder = 1;
-}
-
-message CompleteDataExportRequest {
-    string id = 1;
-    string file_url = 2;
-    int32 file_size = 3;
-    string error = 4; // if set, marks FAILED instead of READY
-}
-
-message CollectUserExportDataRequest {
-    string user_id = 1;
-}
-
-message CollectUserExportDataResponse {
-    // Opaque JSON-as-string of user-owned data. tasks-service writes it to
-    // S3 verbatim. Keeps the schema-specific marshaling private to users-service.
-    string payload_json = 1;
-}
-
-// =================================================================
-// Settings — unified read
-// =================================================================
-
-message GetAccountSettingsRequest {
-    string user_id = 1;
-}
-
-// Current premium plan the user holds. Mirrors a PremiumPlan catalog entry.
-// Absent (null) when the user has no active subscription.
-message PremiumPlanInfo {
-    string period = 1;          // MONTH_1 | MONTH_3 | MONTH_6 | MONTH_12
-    int32 months = 2;
-    string price = 3;           // total for the period, Decimal-as-string
-    string monthly_price = 4;   // ≈ X ₽/month
-    string discount_percent = 5;
-    string currency = 6;
-}
-
+
+message IsPremiumActiveRequest {
+    string user_id = 1;
+}
+
+message IsPremiumActiveResponse {
+    bool is_active = 1;
+}
+
+// =================================================================
+// Avatar borders
+// =================================================================
+
+message AvatarBorder {
+    string id = 1;
+    string code = 2;
+    string name = 3;
+    string description = 4;
+    string image_url = 5;
+    bool is_animated = 6;
+    string source = 7;
+    int32 sort_order = 8;
+    bool is_active = 9;
+}
+
+message ListAvatarBordersRequest {
+    bool include_inactive = 1; // admin-only — gateway gates by role
+    string source = 2;         // optional filter
+}
+
+message ListAvatarBordersResponse {
+    repeated AvatarBorder items = 1;
+}
+
+message UpsertAvatarBorderRequest {
+    string id = 1;          // empty = create
+    string code = 2;        // required when creating
+    string name = 3;
+    string description = 4;
+    string image_url = 5;
+    bool is_animated = 6;
+    string source = 7;
+    int32 sort_order = 8;
+    bool is_active = 9;
+}
+
+message DeleteAvatarBorderRequest {
+    string id = 1;
+}
+
+message DeleteAvatarBorderResponse {
+    bool ok = 1;
+}
+
+// =================================================================
+// Account settings
+// =================================================================
+
+message UpdatePrivacyRequest {
+    string user_id = 1;
+    bool hide_email = 2;
+    bool hide_balance = 3;
+    bool hide_online = 4;
+}
+
+message UpdateEmailPrefsRequest {
+    string user_id = 1;
+    bool email_on_sales = 2;
+    bool email_on_reviews = 3;
+    bool email_on_news = 4;
+}
+
+message UpdateEmailPrefsResponse {
+    bool email_on_sales = 1;
+    bool email_on_reviews = 2;
+    bool email_on_news = 3;
+}
+
+message UpdateLocaleRequest {
+    string user_id = 1;
+    string locale = 2; // "ru" | "en" | ...
+}
+
+message UpdateLocaleResponse {
+    string locale = 1;
+}
+
+message SoftDeleteAccountRequest {
+    string user_id = 1;
+    string reason = 2;     // optional, for support/audit
+    int32 cooldown_days = 3; // 0 → use server default (30)
+}
+
+message SoftDeleteAccountResponse {
+    string deleted_at = 1;             // ISO 8601
+    string scheduled_for_hard_delete = 2;
+}
+
+message RestoreAccountRequest {
+    string user_id = 1;
+}
+
+message HardDeletePendingRequest {
+    int32 max_batch = 1; // 0 → default 100
+}
+
+message HardDeletePendingResponse {
+    int32 deleted = 1;
+}
+
+message ChangePasswordRequest {
+    string user_id = 1;
+    string current_password = 2;
+    string new_password = 3;
+    // Optional: revoke all other sessions on success.
+    bool revoke_other_sessions = 4;
+}
+
+// =================================================================
+// Blocks
+// =================================================================
+
+message BlockUserRequest {
+    string blocker_id = 1;
+    string blocked_id = 2;
+    string reason = 3; // optional
+}
+
+message BlockUserResponse {
+    bool blocked = 1;
+}
+
+message BlockedUserRow {
+    string id = 1;
+    string username = 2;
+    string avatar_url = 3;
+    string blocked_at = 4;
+    string reason = 5;
+}
+
+message ListBlockedUsersRequest {
+    string blocker_id = 1;
+    int32 page = 2;
+    int32 limit = 3;
+}
+
+message ListBlockedUsersResponse {
+    repeated BlockedUserRow items = 1;
+    int32 total = 2;
+    int32 page = 3;
+    int32 limit = 4;
+}
+
+message IsBlockedRequest {
+    string blocker_id = 1;
+    string blocked_id = 2;
+}
+
+message IsBlockedResponse {
+    bool is_blocked = 1;
+}
+
+// =================================================================
+// Data export
+// =================================================================
+
+message DataExportRequestRow {
+    string id = 1;
+    string user_id = 2;
+    string status = 3; // PENDING | PROCESSING | READY | FAILED
+    string file_url = 4;
+    int32 file_size = 5;
+    string error = 6;
+    string created_at = 7;
+    string completed_at = 8;
+}
+
+message RequestDataExportRequest {
+    string user_id = 1;
+}
+
+message ListDataExportsRequest {
+    string user_id = 1;
+    int32 page = 2;
+    int32 limit = 3;
+}
+
+message ListDataExportsResponse {
+    repeated DataExportRequestRow items = 1;
+    int32 total = 2;
+    int32 page = 3;
+    int32 limit = 4;
+}
+
+message PickPendingDataExportRequest {
+    // tasks-service polls; returns one PENDING row marked PROCESSING, or empty.
+    bool _placeholder = 1;
+}
+
+message CompleteDataExportRequest {
+    string id = 1;
+    string file_url = 2;
+    int32 file_size = 3;
+    string error = 4; // if set, marks FAILED instead of READY
+}
+
+message CollectUserExportDataRequest {
+    string user_id = 1;
+}
+
+message CollectUserExportDataResponse {
+    // Opaque JSON-as-string of user-owned data. tasks-service writes it to
+    // S3 verbatim. Keeps the schema-specific marshaling private to users-service.
+    string payload_json = 1;
+}
+
+// =================================================================
+// Settings — unified read
+// =================================================================
+
+message GetAccountSettingsRequest {
+    string user_id = 1;
+}
+
+// Current premium plan the user holds. Mirrors a PremiumPlan catalog entry.
+// Absent (null) when the user has no active subscription.
+message PremiumPlanInfo {
+    string period = 1;          // MONTH_1 | MONTH_3 | MONTH_6 | MONTH_12
+    int32 months = 2;
+    string price = 3;           // total for the period, Decimal-as-string
+    string monthly_price = 4;   // ≈ X ₽/month
+    string discount_percent = 5;
+    string currency = 6;
+}
+
 message AccountSettingsResponse {
-    // Identity
-    string id = 1;
-    string username = 2;
-    string email = 3;
-    string full_name = 4;
-    string about_me = 5;
-    string avatar_url = 6;
-    string banner_url = 7;
-    string locale = 8;
-    string timezone = 9;
-    string country_id = 10;
-    string created_at = 11;
-
-    // 2FA
-    string two_factor_type = 12; // NONE | APP | EMAIL
-    bool two_factor_enabled = 13;
-    int32 backup_codes_remaining = 14;
-
-    // Privacy
-    bool hide_email = 15;
-    bool hide_balance = 16;
-    bool hide_online = 17;
-    bool hide_subscriptions = 18;
-
-    // Email prefs
-    bool email_on_sales = 19;
-    bool email_on_reviews = 20;
-    bool email_on_news = 21;
-
-    // Payout defaults
-    string payout_method = 22;
-    string payout_details = 23;
-
+    // Identity
+    string id = 1;
+    string username = 2;
+    string email = 3;
+    string full_name = 4;
+    string about_me = 5;
+    string avatar_url = 6;
+    string banner_url = 7;
+    string locale = 8;
+    string timezone = 9;
+    string country_id = 10;
+    string created_at = 11;
+
+    // 2FA
+    string two_factor_type = 12; // NONE | APP | EMAIL
+    bool two_factor_enabled = 13;
+    int32 backup_codes_remaining = 14;
+
+    // Privacy
+    bool hide_email = 15;
+    bool hide_balance = 16;
+    bool hide_online = 17;
+    bool hide_subscriptions = 18;
+
+    // Email prefs
+    bool email_on_sales = 19;
+    bool email_on_reviews = 20;
+    bool email_on_news = 21;
+
+    // Payout defaults
+    string payout_method = 22;
+    string payout_details = 23;
+
     // Premium snapshot — flat flag only. Rich subscription state lives at
     // /premium/me.
     reserved 24, 25, 26, 27;
     reserved "premium_status", "premium_expires_at", "premium_auto_renew";
     reserved 36;
     bool premium_is_active = 37;
-
-    // Soft-delete state
-    string deleted_at = 28;
-    string scheduled_for_hard_delete = 29;
-
-    repeated SocialMedia social_media = 30;
-
-    // Premium customization snapshot — denormalised border image URL so the
-    // client can render the current overlay without a second roundtrip.
-    string avatar_border_id = 31;
-    string avatar_border_image_url = 32;
-    string animated_avatar_url = 33;
-    string animated_banner_url = 34;
-    string profile_color = 35;
-}
+
+    // Soft-delete state
+    string deleted_at = 28;
+    string scheduled_for_hard_delete = 29;
+
+    repeated SocialMedia social_media = 30;
+
+    // Premium customization snapshot — denormalised border image URL so the
+    // client can render the current overlay without a second roundtrip.
+    string avatar_border_id = 31;
+    string avatar_border_image_url = 32;
+    string animated_avatar_url = 33;
+    string animated_banner_url = 34;
+    string profile_color = 35;
+}