@epztickets/common 1.72.0 → 1.74.0

package/build/events/subjects.d.ts

@@ -29,6 +29,8 @@ export declare enum Subjects {
     UserDeletionRequested = "events.user.deletion-requested",
     UserDeletionRejected = "events.user.deletion-rejected",
     UserEmailVerificationRequested = "events.user.email-verification-requested",
+    UserPasswordResetRequested = "events.user.password-reset-requested",
+    UserPasswordChanged = "events.user.password-changed",
     ConnectDisconnectRequested = "events.user.connect-disconnect-requested",
     ConnectDisconnectApproved = "events.user.connect-disconnect-approved",
     ConnectDisconnectRejected = "events.user.connect-disconnect-rejected",

package/build/events/subjects.js

@@ -51,6 +51,16 @@ var Subjects;
     // event payload because the email is the ONE place it surfaces
     // — auth's User row only has the SHA-256 hash.
     Subjects["UserEmailVerificationRequested"] = "events.user.email-verification-requested";
+    // Password-reset lifecycle. Auth publishes Requested when a user
+    // fills out /forgot-password with a known email — the plaintext
+    // token rides on the event so notifications-srv can build the
+    // reset link (the auth-side row only stores the SHA-256 hash).
+    // Auth publishes Changed after /confirm succeeds, so
+    // notifications-srv can send the "your password was changed"
+    // security-audit email. The Changed event has no token; the
+    // password is already updated by the time it publishes.
+    Subjects["UserPasswordResetRequested"] = "events.user.password-reset-requested";
+    Subjects["UserPasswordChanged"] = "events.user.password-changed";
     // Owner-initiated "stop hosting" lifecycle. Mirrors the deletion
     // request triplet — auth publishes Requested at submission, then
     // either Approved (which IS the disconnect) or Rejected after admin

package/build/events/user-created-event.d.ts

@@ -5,6 +5,7 @@ export interface UserCreatedEvent {
         id: string;
         email: string;
         phone?: string;
+        publicPhone?: string;
         version: number;
     };
 }

package/build/events/user-password-changed-event.d.ts

@@ -0,0 +1,14 @@
+import { Subjects } from "./subjects";
+export interface UserPasswordChangedEvent {
+    subject: Subjects.UserPasswordChanged;
+    data: {
+        userId: string;
+        email: string;
+        /** ISO timestamp of when the change was applied. */
+        changedAt: string;
+        /** Best-effort IP of the /confirm request, if available. */
+        ipAddress?: string;
+        /** Best-effort User-Agent of the /confirm request, if available. */
+        userAgent?: string;
+    };
+}

package/build/events/user-password-changed-event.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/build/events/user-password-reset-requested-event.d.ts

@@ -0,0 +1,12 @@
+import { Subjects } from "./subjects";
+export interface UserPasswordResetRequestedEvent {
+    subject: Subjects.UserPasswordResetRequested;
+    data: {
+        userId: string;
+        email: string;
+        /** Plaintext reset token to embed in the email link. */
+        token: string;
+        /** ISO timestamp of when the token expires (30min after issue). */
+        expiresAt: string;
+    };
+}

package/build/events/user-password-reset-requested-event.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/build/events/user-updated-event.d.ts

@@ -4,6 +4,7 @@ export interface UserUpdatedEvent {
     data: {
         id: string;
         phone?: string;
+        publicPhone?: string;
         stripeAccountId?: string;
         stripeChargesEnabled?: boolean;
         stripePayoutsEnabled?: boolean;

package/build/index.d.ts

@@ -49,6 +49,8 @@ export * from "./events/user-deleted-event";
 export * from "./events/user-deletion-requested-event";
 export * from "./events/user-deletion-rejected-event";
 export * from "./events/user-email-verification-requested-event";
+export * from "./events/user-password-reset-requested-event";
+export * from "./events/user-password-changed-event";
 export * from "./events/user-self-booking-recorded-event";
 export * from "./events/user-self-booking-trial-changed-event";
 export * from "./events/user-commission-rate-changed-event";

package/build/index.js

@@ -69,6 +69,8 @@ __exportStar(require("./events/user-deleted-event"), exports);
 __exportStar(require("./events/user-deletion-requested-event"), exports);
 __exportStar(require("./events/user-deletion-rejected-event"), exports);
 __exportStar(require("./events/user-email-verification-requested-event"), exports);
+__exportStar(require("./events/user-password-reset-requested-event"), exports);
+__exportStar(require("./events/user-password-changed-event"), exports);
 __exportStar(require("./events/user-self-booking-recorded-event"), exports);
 __exportStar(require("./events/user-self-booking-trial-changed-event"), exports);
 __exportStar(require("./events/user-commission-rate-changed-event"), exports);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@epztickets/common",
-  "version": "1.72.0",
+  "version": "1.74.0",
   "main": "./build/index.js",
   "types": "./build/index.d.ts",
   "files": [