@aepstore-dev/contracts 1.67.0 → 1.68.0

package/gen/auth.ts

@@ -1,323 +1,323 @@
-// Code generated by protoc-gen-ts_proto. DO NOT EDIT.
-// versions:
-//   protoc-gen-ts_proto  v2.10.1
-//   protoc               v7.35.1
-// source: auth.proto
-
-/* eslint-disable */
-import { GrpcMethod, GrpcStreamMethod } from "@nestjs/microservices";
-import { Observable } from "rxjs";
-
-export const protobufPackage = "auth.v1";
-
-export enum TwoFactorType {
-  NONE = 0,
-  APP = 1,
-  EMAIL = 2,
-  UNRECOGNIZED = -1,
-}
-
-/** Login by username OR email (one of the two must be set). */
-export interface LoginRequest {
-  password: string;
-  /** username OR email — resolved by the service */
-  credentials: string;
-  /**
-   * Gateway-supplied audit context. LoginEvent rows for LOGIN /
-   * PASSWORD_FAIL get the same ip/user-agent that REFRESH and RESTORE
-   * already carry; the gRPC layer has no transport-level access to
-   * either, so the gateway extracts them from the HTTP request.
-   */
-  userAgent: string;
-  ip: string;
-}
-
-export interface RegisterRequest {
-  email: string;
-  username: string;
-  password: string;
-  /** optional, attached by gateway from req */
-  ip: string;
-}
-
-/** type ∈ { twofa, reset, totp_generate, totp_activate, confirm } (legacy strings) */
-export interface CreateCodeRequest {
-  email: string;
-  type: string;
-}
-
-/**
- * type ∈ { twofa, twofa_deactivate, reset, totp, totp_deactivate, backup, confirm }
- * new_password is only used by the 'reset' flow.
- */
-export interface VerifyCodeRequest {
-  email: string;
-  code: string;
-  type: string;
-  /** optional */
-  newPassword: string;
-}
-
-export interface CheckTokenRequest {
-  token: string;
-}
-
-export interface RefreshTokenRequest {
-  refreshToken: string;
-  /** optional */
-  userAgent: string;
-  /** optional */
-  ip: string;
-}
-
-export interface Get2faStatusRequest {
-  username: string;
-}
-
-export interface GetProfileRequest {
-  userId: string;
-}
-
-export interface AuthUser {
-  id: string;
-  username: string;
-  email: string;
-  avatarUrl: string;
-  bannerUrl: string;
-  roles: string[];
-}
-
-/**
- * Unified result for login/register/createCode/verifyCode/refresh. Which fields
- * are populated depends on the flow:
- *   - fully authenticated → access_token + refresh_token + expires_in + user
- *   - 2FA required / pending confirm → message + two_factor_required + two_factor_type + user (no tokens)
- *   - totp_generate → secret + otpauth + qr (+ user)
- *   - totp_activate → backup_codes (+ tokens/user)
- */
-export interface AuthResult {
-  accessToken: string;
-  refreshToken: string;
-  expiresIn: number;
-  user: AuthUser | undefined;
-  message: string;
-  /**
-   * Renamed from `requires_2fa` in 1.52.0: the digit-after-underscore broke
-   * the grpc proto-loader's camelCase pass (`_2` isn't `_<letter>`), so the
-   * wire key stayed snake_case and never matched the camelCase handler output
-   * → always serialised false. `two_factor_required` camelCases cleanly to
-   * `twoFactorRequired` on every layer. Field number 6 is unchanged (wire-
-   * compatible).
-   */
-  twoFactorRequired: boolean;
-  twoFactorType: TwoFactorType;
-  /** TOTP setup extras */
-  secret: string;
-  otpauth: string;
-  /** data URL (PNG) */
-  qr: string;
-  backupCodes: string[];
-}
-
-export interface TwoFactorStatusResponse {
-  twoFactorType: TwoFactorType;
-  has2fa: boolean;
-  isVerified: boolean;
-}
-
-export interface Empty {
-}
-
-export interface LogoutCurrentRequest {
-  refreshToken: string;
-}
-
-export interface LogoutAllRequest {
-  userId: string;
-  /**
-   * Current session's refresh token — excluded from the wipe so "log out
-   * everywhere" keeps THIS device signed in. Empty = revoke every session.
-   */
-  refreshToken: string;
-}
-
-export interface LogoutResponse {
-  ok: boolean;
-  /** number of refresh-token rows deleted */
-  removed: number;
-}
-
-export interface RestoreLoginRequest {
-  /** email or username */
-  credentials: string;
-  password: string;
-  userAgent: string;
-  ip: string;
-}
-
-export interface ListLoginHistoryRequest {
-  userId: string;
-  page: number;
-  limit: number;
-}
-
-export interface LoginEventRow {
-  id: string;
-  /** LOGIN | LOGOUT | REFRESH | TWO_FA_FAIL | PASSWORD_FAIL | BLOCKED | RESTORE */
-  type: string;
-  success: boolean;
-  reason: string;
-  ip: string;
-  userAgent: string;
-  createdAt: string;
-}
-
-export interface ListLoginHistoryResponse {
-  items: LoginEventRow[];
-  total: number;
-  page: number;
-  limit: number;
-}
-
-export const AUTH_V1_PACKAGE_NAME = "auth.v1";
-
-/**
- * Ported from legacy auth-service (@MessagePattern → @GrpcMethod).
- * Tokens are HMAC primitives from @aepstore-dev/passport:
- *   - access token: short TTL, carries userId; the gateway validates it
- *     locally via PassportAuthGuard (no round-trip here).
- *   - refresh token: long TTL HMAC + a RefreshToken DB row (device list +
- *     revocation). Refresh verifies the HMAC AND that the row still exists.
- */
-
-export interface AuthServiceClient {
-  login(request: LoginRequest): Observable<AuthResult>;
-
-  register(request: RegisterRequest): Observable<AuthResult>;
-
-  createCode(request: CreateCodeRequest): Observable<AuthResult>;
-
-  verifyCode(request: VerifyCodeRequest): Observable<AuthResult>;
-
-  checkToken(request: CheckTokenRequest): Observable<AuthUser>;
-
-  refreshToken(request: RefreshTokenRequest): Observable<AuthResult>;
-
-  get2FaStatus(request: Get2faStatusRequest): Observable<TwoFactorStatusResponse>;
-
-  getProfile(request: GetProfileRequest): Observable<AuthUser>;
-
-  cleanupExpiredTotpSetups(request: Empty): Observable<Empty>;
-
-  /**
-   * Logout — kill refresh tokens. LogoutCurrent kills only the one whose
-   * HMAC matches; LogoutAll wipes every row for the user.
-   */
-
-  logoutCurrent(request: LogoutCurrentRequest): Observable<LogoutResponse>;
-
-  logoutAll(request: LogoutAllRequest): Observable<LogoutResponse>;
-
-  /**
-   * Self-service restore. Verifies credentials + password against a
-   * soft-deleted user, clears deletedAt/scheduledForHardDelete, and issues
-   * fresh tokens — the one auth path that DOES read deletedAt accounts.
-   */
-
-  restoreLogin(request: RestoreLoginRequest): Observable<AuthResult>;
-
-  /**
-   * Login history. Read-only audit feed for the settings page; rows come
-   * from LoginEvent. Internal alternative: tasks-service GC.
-   */
-
-  listLoginHistory(request: ListLoginHistoryRequest): Observable<ListLoginHistoryResponse>;
-}
-
-/**
- * Ported from legacy auth-service (@MessagePattern → @GrpcMethod).
- * Tokens are HMAC primitives from @aepstore-dev/passport:
- *   - access token: short TTL, carries userId; the gateway validates it
- *     locally via PassportAuthGuard (no round-trip here).
- *   - refresh token: long TTL HMAC + a RefreshToken DB row (device list +
- *     revocation). Refresh verifies the HMAC AND that the row still exists.
- */
-
-export interface AuthServiceController {
-  login(request: LoginRequest): Promise<AuthResult> | Observable<AuthResult> | AuthResult;
-
-  register(request: RegisterRequest): Promise<AuthResult> | Observable<AuthResult> | AuthResult;
-
-  createCode(request: CreateCodeRequest): Promise<AuthResult> | Observable<AuthResult> | AuthResult;
-
-  verifyCode(request: VerifyCodeRequest): Promise<AuthResult> | Observable<AuthResult> | AuthResult;
-
-  checkToken(request: CheckTokenRequest): Promise<AuthUser> | Observable<AuthUser> | AuthUser;
-
-  refreshToken(request: RefreshTokenRequest): Promise<AuthResult> | Observable<AuthResult> | AuthResult;
-
-  get2FaStatus(
-    request: Get2faStatusRequest,
-  ): Promise<TwoFactorStatusResponse> | Observable<TwoFactorStatusResponse> | TwoFactorStatusResponse;
-
-  getProfile(request: GetProfileRequest): Promise<AuthUser> | Observable<AuthUser> | AuthUser;
-
-  cleanupExpiredTotpSetups(request: Empty): Promise<Empty> | Observable<Empty> | Empty;
-
-  /**
-   * Logout — kill refresh tokens. LogoutCurrent kills only the one whose
-   * HMAC matches; LogoutAll wipes every row for the user.
-   */
-
-  logoutCurrent(request: LogoutCurrentRequest): Promise<LogoutResponse> | Observable<LogoutResponse> | LogoutResponse;
-
-  logoutAll(request: LogoutAllRequest): Promise<LogoutResponse> | Observable<LogoutResponse> | LogoutResponse;
-
-  /**
-   * Self-service restore. Verifies credentials + password against a
-   * soft-deleted user, clears deletedAt/scheduledForHardDelete, and issues
-   * fresh tokens — the one auth path that DOES read deletedAt accounts.
-   */
-
-  restoreLogin(request: RestoreLoginRequest): Promise<AuthResult> | Observable<AuthResult> | AuthResult;
-
-  /**
-   * Login history. Read-only audit feed for the settings page; rows come
-   * from LoginEvent. Internal alternative: tasks-service GC.
-   */
-
-  listLoginHistory(
-    request: ListLoginHistoryRequest,
-  ): Promise<ListLoginHistoryResponse> | Observable<ListLoginHistoryResponse> | ListLoginHistoryResponse;
-}
-
-export function AuthServiceControllerMethods() {
-  return function (constructor: Function) {
-    const grpcMethods: string[] = [
-      "login",
-      "register",
-      "createCode",
-      "verifyCode",
-      "checkToken",
-      "refreshToken",
-      "get2FaStatus",
-      "getProfile",
-      "cleanupExpiredTotpSetups",
-      "logoutCurrent",
-      "logoutAll",
-      "restoreLogin",
-      "listLoginHistory",
-    ];
-    for (const method of grpcMethods) {
-      const descriptor: any = Reflect.getOwnPropertyDescriptor(constructor.prototype, method);
-      GrpcMethod("AuthService", method)(constructor.prototype[method], method, descriptor);
-    }
-    const grpcStreamMethods: string[] = [];
-    for (const method of grpcStreamMethods) {
-      const descriptor: any = Reflect.getOwnPropertyDescriptor(constructor.prototype, method);
-      GrpcStreamMethod("AuthService", method)(constructor.prototype[method], method, descriptor);
-    }
-  };
-}
-
-export const AUTH_SERVICE_NAME = "AuthService";
+// Code generated by protoc-gen-ts_proto. DO NOT EDIT.
+// versions:
+//   protoc-gen-ts_proto  v2.10.1
+//   protoc               v7.35.0
+// source: auth.proto
+
+/* eslint-disable */
+import { GrpcMethod, GrpcStreamMethod } from "@nestjs/microservices";
+import { Observable } from "rxjs";
+
+export const protobufPackage = "auth.v1";
+
+export enum TwoFactorType {
+  NONE = 0,
+  APP = 1,
+  EMAIL = 2,
+  UNRECOGNIZED = -1,
+}
+
+/** Login by username OR email (one of the two must be set). */
+export interface LoginRequest {
+  password: string;
+  /** username OR email — resolved by the service */
+  credentials: string;
+  /**
+   * Gateway-supplied audit context. LoginEvent rows for LOGIN /
+   * PASSWORD_FAIL get the same ip/user-agent that REFRESH and RESTORE
+   * already carry; the gRPC layer has no transport-level access to
+   * either, so the gateway extracts them from the HTTP request.
+   */
+  userAgent: string;
+  ip: string;
+}
+
+export interface RegisterRequest {
+  email: string;
+  username: string;
+  password: string;
+  /** optional, attached by gateway from req */
+  ip: string;
+}
+
+/** type ∈ { twofa, reset, totp_generate, totp_activate, confirm } (legacy strings) */
+export interface CreateCodeRequest {
+  email: string;
+  type: string;
+}
+
+/**
+ * type ∈ { twofa, twofa_deactivate, reset, totp, totp_deactivate, backup, confirm }
+ * new_password is only used by the 'reset' flow.
+ */
+export interface VerifyCodeRequest {
+  email: string;
+  code: string;
+  type: string;
+  /** optional */
+  newPassword: string;
+}
+
+export interface CheckTokenRequest {
+  token: string;
+}
+
+export interface RefreshTokenRequest {
+  refreshToken: string;
+  /** optional */
+  userAgent: string;
+  /** optional */
+  ip: string;
+}
+
+export interface Get2faStatusRequest {
+  username: string;
+}
+
+export interface GetProfileRequest {
+  userId: string;
+}
+
+export interface AuthUser {
+  id: string;
+  username: string;
+  email: string;
+  avatarUrl: string;
+  bannerUrl: string;
+  roles: string[];
+}
+
+/**
+ * Unified result for login/register/createCode/verifyCode/refresh. Which fields
+ * are populated depends on the flow:
+ *   - fully authenticated → access_token + refresh_token + expires_in + user
+ *   - 2FA required / pending confirm → message + two_factor_required + two_factor_type + user (no tokens)
+ *   - totp_generate → secret + otpauth + qr (+ user)
+ *   - totp_activate → backup_codes (+ tokens/user)
+ */
+export interface AuthResult {
+  accessToken: string;
+  refreshToken: string;
+  expiresIn: number;
+  user: AuthUser | undefined;
+  message: string;
+  /**
+   * Renamed from `requires_2fa` in 1.52.0: the digit-after-underscore broke
+   * the grpc proto-loader's camelCase pass (`_2` isn't `_<letter>`), so the
+   * wire key stayed snake_case and never matched the camelCase handler output
+   * → always serialised false. `two_factor_required` camelCases cleanly to
+   * `twoFactorRequired` on every layer. Field number 6 is unchanged (wire-
+   * compatible).
+   */
+  twoFactorRequired: boolean;
+  twoFactorType: TwoFactorType;
+  /** TOTP setup extras */
+  secret: string;
+  otpauth: string;
+  /** data URL (PNG) */
+  qr: string;
+  backupCodes: string[];
+}
+
+export interface TwoFactorStatusResponse {
+  twoFactorType: TwoFactorType;
+  has2fa: boolean;
+  isVerified: boolean;
+}
+
+export interface Empty {
+}
+
+export interface LogoutCurrentRequest {
+  refreshToken: string;
+}
+
+export interface LogoutAllRequest {
+  userId: string;
+  /**
+   * Current session's refresh token — excluded from the wipe so "log out
+   * everywhere" keeps THIS device signed in. Empty = revoke every session.
+   */
+  refreshToken: string;
+}
+
+export interface LogoutResponse {
+  ok: boolean;
+  /** number of refresh-token rows deleted */
+  removed: number;
+}
+
+export interface RestoreLoginRequest {
+  /** email or username */
+  credentials: string;
+  password: string;
+  userAgent: string;
+  ip: string;
+}
+
+export interface ListLoginHistoryRequest {
+  userId: string;
+  page: number;
+  limit: number;
+}
+
+export interface LoginEventRow {
+  id: string;
+  /** LOGIN | LOGOUT | REFRESH | TWO_FA_FAIL | PASSWORD_FAIL | BLOCKED | RESTORE */
+  type: string;
+  success: boolean;
+  reason: string;
+  ip: string;
+  userAgent: string;
+  createdAt: string;
+}
+
+export interface ListLoginHistoryResponse {
+  items: LoginEventRow[];
+  total: number;
+  page: number;
+  limit: number;
+}
+
+export const AUTH_V1_PACKAGE_NAME = "auth.v1";
+
+/**
+ * Ported from legacy auth-service (@MessagePattern → @GrpcMethod).
+ * Tokens are HMAC primitives from @aepstore-dev/passport:
+ *   - access token: short TTL, carries userId; the gateway validates it
+ *     locally via PassportAuthGuard (no round-trip here).
+ *   - refresh token: long TTL HMAC + a RefreshToken DB row (device list +
+ *     revocation). Refresh verifies the HMAC AND that the row still exists.
+ */
+
+export interface AuthServiceClient {
+  login(request: LoginRequest): Observable<AuthResult>;
+
+  register(request: RegisterRequest): Observable<AuthResult>;
+
+  createCode(request: CreateCodeRequest): Observable<AuthResult>;
+
+  verifyCode(request: VerifyCodeRequest): Observable<AuthResult>;
+
+  checkToken(request: CheckTokenRequest): Observable<AuthUser>;
+
+  refreshToken(request: RefreshTokenRequest): Observable<AuthResult>;
+
+  get2FaStatus(request: Get2faStatusRequest): Observable<TwoFactorStatusResponse>;
+
+  getProfile(request: GetProfileRequest): Observable<AuthUser>;
+
+  cleanupExpiredTotpSetups(request: Empty): Observable<Empty>;
+
+  /**
+   * Logout — kill refresh tokens. LogoutCurrent kills only the one whose
+   * HMAC matches; LogoutAll wipes every row for the user.
+   */
+
+  logoutCurrent(request: LogoutCurrentRequest): Observable<LogoutResponse>;
+
+  logoutAll(request: LogoutAllRequest): Observable<LogoutResponse>;
+
+  /**
+   * Self-service restore. Verifies credentials + password against a
+   * soft-deleted user, clears deletedAt/scheduledForHardDelete, and issues
+   * fresh tokens — the one auth path that DOES read deletedAt accounts.
+   */
+
+  restoreLogin(request: RestoreLoginRequest): Observable<AuthResult>;
+
+  /**
+   * Login history. Read-only audit feed for the settings page; rows come
+   * from LoginEvent. Internal alternative: tasks-service GC.
+   */
+
+  listLoginHistory(request: ListLoginHistoryRequest): Observable<ListLoginHistoryResponse>;
+}
+
+/**
+ * Ported from legacy auth-service (@MessagePattern → @GrpcMethod).
+ * Tokens are HMAC primitives from @aepstore-dev/passport:
+ *   - access token: short TTL, carries userId; the gateway validates it
+ *     locally via PassportAuthGuard (no round-trip here).
+ *   - refresh token: long TTL HMAC + a RefreshToken DB row (device list +
+ *     revocation). Refresh verifies the HMAC AND that the row still exists.
+ */
+
+export interface AuthServiceController {
+  login(request: LoginRequest): Promise<AuthResult> | Observable<AuthResult> | AuthResult;
+
+  register(request: RegisterRequest): Promise<AuthResult> | Observable<AuthResult> | AuthResult;
+
+  createCode(request: CreateCodeRequest): Promise<AuthResult> | Observable<AuthResult> | AuthResult;
+
+  verifyCode(request: VerifyCodeRequest): Promise<AuthResult> | Observable<AuthResult> | AuthResult;
+
+  checkToken(request: CheckTokenRequest): Promise<AuthUser> | Observable<AuthUser> | AuthUser;
+
+  refreshToken(request: RefreshTokenRequest): Promise<AuthResult> | Observable<AuthResult> | AuthResult;
+
+  get2FaStatus(
+    request: Get2faStatusRequest,
+  ): Promise<TwoFactorStatusResponse> | Observable<TwoFactorStatusResponse> | TwoFactorStatusResponse;
+
+  getProfile(request: GetProfileRequest): Promise<AuthUser> | Observable<AuthUser> | AuthUser;
+
+  cleanupExpiredTotpSetups(request: Empty): Promise<Empty> | Observable<Empty> | Empty;
+
+  /**
+   * Logout — kill refresh tokens. LogoutCurrent kills only the one whose
+   * HMAC matches; LogoutAll wipes every row for the user.
+   */
+
+  logoutCurrent(request: LogoutCurrentRequest): Promise<LogoutResponse> | Observable<LogoutResponse> | LogoutResponse;
+
+  logoutAll(request: LogoutAllRequest): Promise<LogoutResponse> | Observable<LogoutResponse> | LogoutResponse;
+
+  /**
+   * Self-service restore. Verifies credentials + password against a
+   * soft-deleted user, clears deletedAt/scheduledForHardDelete, and issues
+   * fresh tokens — the one auth path that DOES read deletedAt accounts.
+   */
+
+  restoreLogin(request: RestoreLoginRequest): Promise<AuthResult> | Observable<AuthResult> | AuthResult;
+
+  /**
+   * Login history. Read-only audit feed for the settings page; rows come
+   * from LoginEvent. Internal alternative: tasks-service GC.
+   */
+
+  listLoginHistory(
+    request: ListLoginHistoryRequest,
+  ): Promise<ListLoginHistoryResponse> | Observable<ListLoginHistoryResponse> | ListLoginHistoryResponse;
+}
+
+export function AuthServiceControllerMethods() {
+  return function (constructor: Function) {
+    const grpcMethods: string[] = [
+      "login",
+      "register",
+      "createCode",
+      "verifyCode",
+      "checkToken",
+      "refreshToken",
+      "get2FaStatus",
+      "getProfile",
+      "cleanupExpiredTotpSetups",
+      "logoutCurrent",
+      "logoutAll",
+      "restoreLogin",
+      "listLoginHistory",
+    ];
+    for (const method of grpcMethods) {
+      const descriptor: any = Reflect.getOwnPropertyDescriptor(constructor.prototype, method);
+      GrpcMethod("AuthService", method)(constructor.prototype[method], method, descriptor);
+    }
+    const grpcStreamMethods: string[] = [];
+    for (const method of grpcStreamMethods) {
+      const descriptor: any = Reflect.getOwnPropertyDescriptor(constructor.prototype, method);
+      GrpcStreamMethod("AuthService", method)(constructor.prototype[method], method, descriptor);
+    }
+  };
+}
+
+export const AUTH_SERVICE_NAME = "AuthService";

package/gen/mail.js

@@ -2,7 +2,7 @@
 // Code generated by protoc-gen-ts_proto. DO NOT EDIT.
 // versions:
 //   protoc-gen-ts_proto  v2.10.1
-//   protoc               v7.35.1
+//   protoc               v7.35.0
 // source: mail.proto
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.MAIL_SERVICE_NAME = exports.MAIL_V1_PACKAGE_NAME = exports.protobufPackage = void 0;