@mamindom/contracts 1.0.124 → 1.0.126

package/dist/proto/rbac.proto

@@ -0,0 +1,109 @@
+syntax = "proto3";
+
+package rbac.v1;
+
+service RbacService {
+  // Permissions catalog (read-only, seeded).
+  rpc ListPermissions(ListPermissionsRequest) returns (ListPermissionsResponse);
+
+  // Roles CRUD.
+  rpc ListRoles(ListRolesRequest) returns (ListRolesResponse);
+  rpc GetRole(GetRoleRequest) returns (RbacRole);
+  rpc CreateRole(CreateRoleRequest) returns (RbacRole);
+  rpc UpdateRole(UpdateRoleRequest) returns (RbacRole);
+  rpc DeleteRole(DeleteRoleRequest) returns (DeleteRoleResponse);
+
+  // Account ↔ role bindings.
+  rpc AssignAccountRole(AssignAccountRoleRequest) returns (AssignAccountRoleResponse);
+  rpc GetAccountPermissions(GetAccountPermissionsRequest) returns (GetAccountPermissionsResponse);
+}
+
+message RbacPermission {
+  string id          = 1;
+  string key         = 2;
+  string group_key   = 3;
+  string label       = 4;
+  string description = 5;
+}
+
+message RbacRole {
+  string id            = 1;
+  string slug          = 2;
+  string name          = 3;
+  string description   = 4;
+  string color         = 5;
+  bool   is_system     = 6;
+  bool   is_protected  = 7;
+  int32  users_count   = 8;
+  repeated string permission_keys = 9;
+  string created_at    = 10;
+  string updated_at    = 11;
+}
+
+message ListPermissionsRequest {}
+
+message ListPermissionsResponse {
+  repeated RbacPermission items = 1;
+}
+
+message ListRolesRequest {
+  optional string search = 1;
+}
+
+message ListRolesResponse {
+  repeated RbacRole items = 1;
+}
+
+message GetRoleRequest {
+  string id = 1;
+}
+
+message CreateRoleRequest {
+  string slug                  = 1;
+  string name                  = 2;
+  string description           = 3;
+  string color                 = 4;
+  repeated string permission_keys = 5;
+}
+
+message UpdateRoleRequest {
+  string id                    = 1;
+  optional string name         = 2;
+  optional string description  = 3;
+  optional string color        = 4;
+  // Якщо передано — повна заміна; якщо не передано — без змін.
+  repeated string permission_keys = 5;
+  bool replace_permissions     = 6;
+}
+
+message DeleteRoleRequest {
+  string id = 1;
+}
+
+message DeleteRoleResponse {
+  bool ok = 1;
+}
+
+message AssignAccountRoleRequest {
+  string account_id        = 1;
+  // Якщо custom_role_id порожній — користувач відвʼязується від кастомної ролі,
+  // і дозволи беруться з системної.
+  optional string custom_role_id = 2;
+}
+
+message AssignAccountRoleResponse {
+  bool ok = 1;
+}
+
+message GetAccountPermissionsRequest {
+  string account_id = 1;
+}
+
+message GetAccountPermissionsResponse {
+  // Effective permissions з урахуванням system role + custom role override.
+  // Може містити "*" — повний доступ (ADMIN).
+  repeated string permission_keys = 1;
+  // Слаг ефективної ролі (для UI/labels).
+  string role_slug = 2;
+  string role_name = 3;
+}

package/dist/src/proto/paths.d.ts

@@ -1,6 +1,8 @@
 export declare const PROTO_PATHS: {
     readonly AUTH: string;
     readonly ACCOUNT: string;
+    readonly RBAC: string;
+    readonly AUDIT: string;
     readonly USERS: string;
     readonly COMMON: string;
     readonly CATEGORY: string;
@@ -19,6 +21,7 @@ export declare const PROTO_PATHS: {
     readonly CALCULATION: string;
     readonly COUPON: string;
     readonly PROMOTION: string;
+    readonly BONUS_SETTINGS: string;
     readonly COMMON_POST: string;
     readonly POST: string;
     readonly POST_CATEGORY: string;
@@ -31,6 +34,9 @@ export declare const PROTO_PATHS: {
     readonly SITE_SETTINGS: string;
     readonly CART: string;
     readonly ORDER: string;
+    readonly MANAGER: string;
     readonly PAYMENT: string;
     readonly DELIVERY: string;
+    readonly DELIVERY_SETTINGS: string;
+    readonly NOTIFICATION: string;
 };

package/dist/src/proto/paths.js

@@ -5,6 +5,8 @@ const node_path_1 = require("node:path");
 exports.PROTO_PATHS = {
     AUTH: (0, node_path_1.join)(__dirname, '../../proto/auth.proto'),
     ACCOUNT: (0, node_path_1.join)(__dirname, '../../proto/account.proto'),
+    RBAC: (0, node_path_1.join)(__dirname, '../../proto/rbac.proto'),
+    AUDIT: (0, node_path_1.join)(__dirname, '../../proto/audit.proto'),
     USERS: (0, node_path_1.join)(__dirname, '../../proto/users.proto'),
     COMMON: (0, node_path_1.join)(__dirname, '../../proto/common.proto'),
     CATEGORY: (0, node_path_1.join)(__dirname, '../../proto/category.proto'),
@@ -23,6 +25,7 @@ exports.PROTO_PATHS = {
     CALCULATION: (0, node_path_1.join)(__dirname, '../../proto/calculation.proto'),
     COUPON: (0, node_path_1.join)(__dirname, '../../proto/coupon.proto'),
     PROMOTION: (0, node_path_1.join)(__dirname, '../../proto/promotion.proto'),
+    BONUS_SETTINGS: (0, node_path_1.join)(__dirname, '../../proto/bonus_settings.proto'),
     COMMON_POST: (0, node_path_1.join)(__dirname, '../../proto/common_post.proto'),
     POST: (0, node_path_1.join)(__dirname, '../../proto/post.proto'),
     POST_CATEGORY: (0, node_path_1.join)(__dirname, '../../proto/post_category.proto'),
@@ -35,6 +38,9 @@ exports.PROTO_PATHS = {
     SITE_SETTINGS: (0, node_path_1.join)(__dirname, '../../proto/site_settings.proto'),
     CART: (0, node_path_1.join)(__dirname, '../../proto/cart.proto'),
     ORDER: (0, node_path_1.join)(__dirname, '../../proto/order.proto'),
+    MANAGER: (0, node_path_1.join)(__dirname, '../../proto/manager.proto'),
     PAYMENT: (0, node_path_1.join)(__dirname, '../../proto/payment.proto'),
-    DELIVERY: (0, node_path_1.join)(__dirname, '../../proto/delivery.proto')
+    DELIVERY: (0, node_path_1.join)(__dirname, '../../proto/delivery.proto'),
+    DELIVERY_SETTINGS: (0, node_path_1.join)(__dirname, '../../proto/delivery_settings.proto'),
+    NOTIFICATION: (0, node_path_1.join)(__dirname, '../../proto/notification.proto')
 };

package/events/auth/otp-requested.interface.ts

@@ -1,5 +1,13 @@
 export interface OtpRequestedEvent {
-	identifier: string
-	type: string
+	// Target: email або phone (визначається за наявності '@').
+	target: string
+	// Категорія: 'login' | 'verify' | 'password_reset'.
+	purpose: string
 	code: string
+	// TTL (ms epoch).
+	expiresAt: number
+	userId?: string
+	// Backward-compat: deprecated alias для target.
+	identifier?: string
+	type?: string
 }

package/events/index.ts

@@ -2,3 +2,4 @@ export * from './auth'
 export * from './delivery'
 export * from './orders'
 export * from './payments'
+export * from './stock'

package/events/orders/order-cancelled.interface.ts

@@ -7,4 +7,13 @@ export interface OrderCancelledEvent {
 	wasPaid: boolean
 	releaseStock: boolean
 	cancelledAt: number
+
+	// Опціональний customer-snapshot для нотифікацій.
+	userId?: string
+	customer?: {
+		firstName: string
+		lastName: string
+		email: string
+		phone: string
+	}
 }

package/events/orders/order-status-changed.interface.ts

@@ -7,4 +7,18 @@ export interface OrderStatusChangedEvent {
 	actorId?: string
 	actorName?: string
 	changedAt: number
+
+	// Опціональний customer-snapshot для нотифікацій (щоб
+	// notification-service не робив додатковий lookup в order-service).
+	userId?: string
+	customer?: {
+		firstName: string
+		lastName: string
+		email: string
+		phone: string
+	}
+
+	// На переходах у shipped — ТТН + tracking URL.
+	trackingNumber?: string
+	trackingUrl?: string
 }

package/events/stock/index.ts

@@ -0,0 +1,5 @@
+export * from './stock-confirm-requested.interface'
+export * from './stock-release-requested.interface'
+export * from './stock-reserve-failed.interface'
+export * from './stock-reserve-requested.interface'
+export * from './stock-reserved.interface'

package/events/stock/stock-confirm-requested.interface.ts

@@ -0,0 +1,6 @@
+// Подія від order-service: замовлення переходить у packing → catalog
+// списує резерв у реальний OUTGOING рух (підтверджує продаж).
+export interface StockConfirmRequestedEvent {
+	orderId: string
+	orderNumber: string
+}

package/events/stock/stock-release-requested.interface.ts

@@ -0,0 +1,11 @@
+// Подія від order-service: cancel/відмова → catalog скасовує всі резерви
+// замовлення (по reference_type='order', reference_id=orderId).
+export interface StockReleaseRequestedEvent {
+	orderId: string
+	orderNumber: string
+	items: Array<{
+		productId: string
+		variantId?: string
+		quantity: number
+	}>
+}

package/events/stock/stock-reserve-failed.interface.ts

@@ -0,0 +1,8 @@
+// Подія від catalog-service: catalog НЕ зміг зарезервувати (insufficient
+// stock, product disappeared). Order-service кенселить замовлення з reason.
+export interface StockReserveFailedEvent {
+	orderId: string
+	orderNumber: string
+	reason: string
+	missing?: Array<{ productId: string; needed: number }>
+}

package/events/stock/stock-reserve-requested.interface.ts

@@ -0,0 +1,16 @@
+// Подія від order-service: catalog має зарезервувати stock для замовлення.
+// Catalog сам обирає warehouse(и) (auto-pick first-available, greedy
+// fill через product_warehouses ORDER BY created_at).
+//
+// TTL у мс — після його закінчення UnpaidOrdersCron у order-service
+// автоматично скасує замовлення → catalog отримає stock.release_requested.
+export interface StockReserveRequestedEvent {
+	orderId: string
+	orderNumber: string
+	ttlMs: number
+	items: Array<{
+		productId: string
+		variantId?: string
+		quantity: number
+	}>
+}

package/events/stock/stock-reserved.interface.ts

@@ -0,0 +1,13 @@
+// Подія від catalog-service: успішний резерв → order-service зберігає
+// reservationId/reservedUntil у OrderItem (для admin UI і traceability).
+export interface StockReservedEvent {
+	orderId: string
+	orderNumber: string
+	reservedUntil: number
+	allocations: Array<{
+		productId: string
+		variantId?: string
+		warehouseId: string
+		quantity: number
+	}>
+}

package/gen/audit.ts

@@ -0,0 +1,109 @@
+// Code generated by protoc-gen-ts_proto. DO NOT EDIT.
+// versions:
+//   protoc-gen-ts_proto  v2.11.4
+//   protoc               v3.21.12
+// source: audit.proto
+
+/* eslint-disable */
+import { GrpcMethod, GrpcStreamMethod } from "@nestjs/microservices";
+import { Observable } from "rxjs";
+
+export const protobufPackage = "audit.v1";
+
+export interface LogActionRequest {
+  actorId?: string | undefined;
+  actorName?: string | undefined;
+  actorEmail?:
+    | string
+    | undefined;
+  /** e.g. "order.cancelled", "product.price_changed" */
+  action: string;
+  /** e.g. "order", "product", "role" */
+  targetType: string;
+  targetId?:
+    | string
+    | undefined;
+  /** human-readable summary */
+  summary?:
+    | string
+    | undefined;
+  /** serialized JSON snapshot (small!) */
+  beforeJson?: string | undefined;
+  afterJson?: string | undefined;
+  ip?: string | undefined;
+  userAgent?: string | undefined;
+}
+
+export interface LogActionResponse {
+  ok: boolean;
+}
+
+export interface ListAuditRequest {
+  page?: number | undefined;
+  limit?: number | undefined;
+  actorId?: string | undefined;
+  targetType?: string | undefined;
+  targetId?: string | undefined;
+  action?:
+    | string
+    | undefined;
+  /** "orders" matches order.* etc */
+  actionGroup?:
+    | string
+    | undefined;
+  /** ISO date */
+  from?: string | undefined;
+  to?: string | undefined;
+}
+
+export interface AuditEntry {
+  id: string;
+  actorId: string;
+  actorName: string;
+  actorEmail: string;
+  action: string;
+  targetType: string;
+  targetId: string;
+  summary: string;
+  beforeJson: string;
+  afterJson: string;
+  ip: string;
+  userAgent: string;
+  createdAt: string;
+}
+
+export interface ListAuditResponse {
+  items: AuditEntry[];
+  total: number;
+}
+
+export const AUDIT_V1_PACKAGE_NAME = "audit.v1";
+
+export interface AuditServiceClient {
+  logAction(request: LogActionRequest): Observable<LogActionResponse>;
+
+  listAudit(request: ListAuditRequest): Observable<ListAuditResponse>;
+}
+
+export interface AuditServiceController {
+  logAction(request: LogActionRequest): Promise<LogActionResponse> | Observable<LogActionResponse> | LogActionResponse;
+
+  listAudit(request: ListAuditRequest): Promise<ListAuditResponse> | Observable<ListAuditResponse> | ListAuditResponse;
+}
+
+export function AuditServiceControllerMethods() {
+  return function (constructor: Function) {
+    const grpcMethods: string[] = ["logAction", "listAudit"];
+    for (const method of grpcMethods) {
+      const descriptor: any = Reflect.getOwnPropertyDescriptor(constructor.prototype, method);
+      GrpcMethod("AuditService", method)(constructor.prototype[method], method, descriptor);
+    }
+    const grpcStreamMethods: string[] = [];
+    for (const method of grpcStreamMethods) {
+      const descriptor: any = Reflect.getOwnPropertyDescriptor(constructor.prototype, method);
+      GrpcStreamMethod("AuditService", method)(constructor.prototype[method], method, descriptor);
+    }
+  };
+}
+
+export const AUDIT_SERVICE_NAME = "AuditService";

package/gen/bonus_settings.ts

@@ -0,0 +1,71 @@
+// Code generated by protoc-gen-ts_proto. DO NOT EDIT.
+// versions:
+//   protoc-gen-ts_proto  v2.11.4
+//   protoc               v3.21.12
+// source: bonus_settings.proto
+
+/* eslint-disable */
+import { GrpcMethod, GrpcStreamMethod } from "@nestjs/microservices";
+import { Observable } from "rxjs";
+
+export const protobufPackage = "promo.v1";
+
+export interface BonusSettingsResponse {
+  /** Курс нарахування бонусів від суми замовлення (0.02 = 2%). */
+  earnRate: number;
+  /** Курс списання бонусів (1 бонус = N грн, default 1.0). */
+  redeemRate: number;
+  /** Мінімальна сума замовлення для нарахування бонусів (0 = без обмеження). */
+  minOrderForEarn: number;
+  /**
+   * Максимальний відсоток від суми замовлення, який можна оплатити бонусами
+   * (1.0 = до 100%, 0.5 = до 50%; 0 — без обмеження).
+   */
+  maxRedeemShare: number;
+  updatedAt: string;
+}
+
+export interface GetBonusSettingsRequest {
+}
+
+export interface UpdateBonusSettingsRequest {
+  earnRate?: number | undefined;
+  redeemRate?: number | undefined;
+  minOrderForEarn?: number | undefined;
+  maxRedeemShare?: number | undefined;
+}
+
+export const PROMO_V1_PACKAGE_NAME = "promo.v1";
+
+export interface BonusSettingsServiceClient {
+  getBonusSettings(request: GetBonusSettingsRequest): Observable<BonusSettingsResponse>;
+
+  updateBonusSettings(request: UpdateBonusSettingsRequest): Observable<BonusSettingsResponse>;
+}
+
+export interface BonusSettingsServiceController {
+  getBonusSettings(
+    request: GetBonusSettingsRequest,
+  ): Promise<BonusSettingsResponse> | Observable<BonusSettingsResponse> | BonusSettingsResponse;
+
+  updateBonusSettings(
+    request: UpdateBonusSettingsRequest,
+  ): Promise<BonusSettingsResponse> | Observable<BonusSettingsResponse> | BonusSettingsResponse;
+}
+
+export function BonusSettingsServiceControllerMethods() {
+  return function (constructor: Function) {
+    const grpcMethods: string[] = ["getBonusSettings", "updateBonusSettings"];
+    for (const method of grpcMethods) {
+      const descriptor: any = Reflect.getOwnPropertyDescriptor(constructor.prototype, method);
+      GrpcMethod("BonusSettingsService", method)(constructor.prototype[method], method, descriptor);
+    }
+    const grpcStreamMethods: string[] = [];
+    for (const method of grpcStreamMethods) {
+      const descriptor: any = Reflect.getOwnPropertyDescriptor(constructor.prototype, method);
+      GrpcStreamMethod("BonusSettingsService", method)(constructor.prototype[method], method, descriptor);
+    }
+  };
+}
+
+export const BONUS_SETTINGS_SERVICE_NAME = "BonusSettingsService";

package/gen/delivery_settings.ts

@@ -0,0 +1,69 @@
+// Code generated by protoc-gen-ts_proto. DO NOT EDIT.
+// versions:
+//   protoc-gen-ts_proto  v2.11.4
+//   protoc               v3.21.12
+// source: delivery_settings.proto
+
+/* eslint-disable */
+import { GrpcMethod, GrpcStreamMethod } from "@nestjs/microservices";
+import { Observable } from "rxjs";
+
+export const protobufPackage = "delivery.v1";
+
+export interface DeliverySettingsResponse {
+  /** Дефолтна вага позиції у кг — fallback коли catalog не повертає weight. */
+  defaultItemWeightKg: number;
+  /** Поріг безкоштовної доставки в грн (0 = вимкнено). */
+  freeShippingThreshold: number;
+  /** Дефолтна оголошена вартість на одиницю товару у грн (для страхування НП). */
+  defaultDeclaredValue: number;
+  /** Reference відправника у НП (вибране warehouse адміністратором у settings). */
+  npSenderWarehouseRef?: string | undefined;
+  updatedAt: string;
+}
+
+export interface GetDeliverySettingsRequest {
+}
+
+export interface UpdateDeliverySettingsRequest {
+  defaultItemWeightKg?: number | undefined;
+  freeShippingThreshold?: number | undefined;
+  defaultDeclaredValue?: number | undefined;
+  npSenderWarehouseRef?: string | undefined;
+  clearNpSenderWarehouseRef: boolean;
+}
+
+export const DELIVERY_V1_PACKAGE_NAME = "delivery.v1";
+
+export interface DeliverySettingsServiceClient {
+  getDeliverySettings(request: GetDeliverySettingsRequest): Observable<DeliverySettingsResponse>;
+
+  updateDeliverySettings(request: UpdateDeliverySettingsRequest): Observable<DeliverySettingsResponse>;
+}
+
+export interface DeliverySettingsServiceController {
+  getDeliverySettings(
+    request: GetDeliverySettingsRequest,
+  ): Promise<DeliverySettingsResponse> | Observable<DeliverySettingsResponse> | DeliverySettingsResponse;
+
+  updateDeliverySettings(
+    request: UpdateDeliverySettingsRequest,
+  ): Promise<DeliverySettingsResponse> | Observable<DeliverySettingsResponse> | DeliverySettingsResponse;
+}
+
+export function DeliverySettingsServiceControllerMethods() {
+  return function (constructor: Function) {
+    const grpcMethods: string[] = ["getDeliverySettings", "updateDeliverySettings"];
+    for (const method of grpcMethods) {
+      const descriptor: any = Reflect.getOwnPropertyDescriptor(constructor.prototype, method);
+      GrpcMethod("DeliverySettingsService", method)(constructor.prototype[method], method, descriptor);
+    }
+    const grpcStreamMethods: string[] = [];
+    for (const method of grpcStreamMethods) {
+      const descriptor: any = Reflect.getOwnPropertyDescriptor(constructor.prototype, method);
+      GrpcStreamMethod("DeliverySettingsService", method)(constructor.prototype[method], method, descriptor);
+    }
+  };
+}
+
+export const DELIVERY_SETTINGS_SERVICE_NAME = "DeliverySettingsService";