@mamindom/contracts 1.0.125 → 1.0.127

package/dist/proto/rbac.proto

@@ -0,0 +1,109 @@
+syntax = "proto3";
+
+package rbac.v1;
+
+service RbacService {
+  // Permissions catalog (read-only, seeded).
+  rpc ListPermissions(ListPermissionsRequest) returns (ListPermissionsResponse);
+
+  // Roles CRUD.
+  rpc ListRoles(ListRolesRequest) returns (ListRolesResponse);
+  rpc GetRole(GetRoleRequest) returns (RbacRole);
+  rpc CreateRole(CreateRoleRequest) returns (RbacRole);
+  rpc UpdateRole(UpdateRoleRequest) returns (RbacRole);
+  rpc DeleteRole(DeleteRoleRequest) returns (DeleteRoleResponse);
+
+  // Account ↔ role bindings.
+  rpc AssignAccountRole(AssignAccountRoleRequest) returns (AssignAccountRoleResponse);
+  rpc GetAccountPermissions(GetAccountPermissionsRequest) returns (GetAccountPermissionsResponse);
+}
+
+message RbacPermission {
+  string id          = 1;
+  string key         = 2;
+  string group_key   = 3;
+  string label       = 4;
+  string description = 5;
+}
+
+message RbacRole {
+  string id            = 1;
+  string slug          = 2;
+  string name          = 3;
+  string description   = 4;
+  string color         = 5;
+  bool   is_system     = 6;
+  bool   is_protected  = 7;
+  int32  users_count   = 8;
+  repeated string permission_keys = 9;
+  string created_at    = 10;
+  string updated_at    = 11;
+}
+
+message ListPermissionsRequest {}
+
+message ListPermissionsResponse {
+  repeated RbacPermission items = 1;
+}
+
+message ListRolesRequest {
+  optional string search = 1;
+}
+
+message ListRolesResponse {
+  repeated RbacRole items = 1;
+}
+
+message GetRoleRequest {
+  string id = 1;
+}
+
+message CreateRoleRequest {
+  string slug                  = 1;
+  string name                  = 2;
+  string description           = 3;
+  string color                 = 4;
+  repeated string permission_keys = 5;
+}
+
+message UpdateRoleRequest {
+  string id                    = 1;
+  optional string name         = 2;
+  optional string description  = 3;
+  optional string color        = 4;
+  // Якщо передано — повна заміна; якщо не передано — без змін.
+  repeated string permission_keys = 5;
+  bool replace_permissions     = 6;
+}
+
+message DeleteRoleRequest {
+  string id = 1;
+}
+
+message DeleteRoleResponse {
+  bool ok = 1;
+}
+
+message AssignAccountRoleRequest {
+  string account_id        = 1;
+  // Якщо custom_role_id порожній — користувач відвʼязується від кастомної ролі,
+  // і дозволи беруться з системної.
+  optional string custom_role_id = 2;
+}
+
+message AssignAccountRoleResponse {
+  bool ok = 1;
+}
+
+message GetAccountPermissionsRequest {
+  string account_id = 1;
+}
+
+message GetAccountPermissionsResponse {
+  // Effective permissions з урахуванням system role + custom role override.
+  // Може містити "*" — повний доступ (ADMIN).
+  repeated string permission_keys = 1;
+  // Слаг ефективної ролі (для UI/labels).
+  string role_slug = 2;
+  string role_name = 3;
+}

package/dist/src/proto/paths.d.ts

@@ -1,6 +1,8 @@
 export declare const PROTO_PATHS: {
     readonly AUTH: string;
     readonly ACCOUNT: string;
+    readonly RBAC: string;
+    readonly AUDIT: string;
     readonly USERS: string;
     readonly COMMON: string;
     readonly CATEGORY: string;
@@ -32,7 +34,9 @@ export declare const PROTO_PATHS: {
     readonly SITE_SETTINGS: string;
     readonly CART: string;
     readonly ORDER: string;
+    readonly MANAGER: string;
     readonly PAYMENT: string;
     readonly DELIVERY: string;
     readonly DELIVERY_SETTINGS: string;
+    readonly NOTIFICATION: string;
 };

package/dist/src/proto/paths.js

@@ -5,6 +5,8 @@ const node_path_1 = require("node:path");
 exports.PROTO_PATHS = {
     AUTH: (0, node_path_1.join)(__dirname, '../../proto/auth.proto'),
     ACCOUNT: (0, node_path_1.join)(__dirname, '../../proto/account.proto'),
+    RBAC: (0, node_path_1.join)(__dirname, '../../proto/rbac.proto'),
+    AUDIT: (0, node_path_1.join)(__dirname, '../../proto/audit.proto'),
     USERS: (0, node_path_1.join)(__dirname, '../../proto/users.proto'),
     COMMON: (0, node_path_1.join)(__dirname, '../../proto/common.proto'),
     CATEGORY: (0, node_path_1.join)(__dirname, '../../proto/category.proto'),
@@ -36,7 +38,9 @@ exports.PROTO_PATHS = {
     SITE_SETTINGS: (0, node_path_1.join)(__dirname, '../../proto/site_settings.proto'),
     CART: (0, node_path_1.join)(__dirname, '../../proto/cart.proto'),
     ORDER: (0, node_path_1.join)(__dirname, '../../proto/order.proto'),
+    MANAGER: (0, node_path_1.join)(__dirname, '../../proto/manager.proto'),
     PAYMENT: (0, node_path_1.join)(__dirname, '../../proto/payment.proto'),
     DELIVERY: (0, node_path_1.join)(__dirname, '../../proto/delivery.proto'),
-    DELIVERY_SETTINGS: (0, node_path_1.join)(__dirname, '../../proto/delivery_settings.proto')
+    DELIVERY_SETTINGS: (0, node_path_1.join)(__dirname, '../../proto/delivery_settings.proto'),
+    NOTIFICATION: (0, node_path_1.join)(__dirname, '../../proto/notification.proto')
 };

package/events/auth/otp-requested.interface.ts

@@ -1,5 +1,13 @@
 export interface OtpRequestedEvent {
-	identifier: string
-	type: string
+	// Target: email або phone (визначається за наявності '@').
+	target: string
+	// Категорія: 'login' | 'verify' | 'password_reset'.
+	purpose: string
 	code: string
+	// TTL (ms epoch).
+	expiresAt: number
+	userId?: string
+	// Backward-compat: deprecated alias для target.
+	identifier?: string
+	type?: string
 }

package/events/index.ts

@@ -2,3 +2,4 @@ export * from './auth'
 export * from './delivery'
 export * from './orders'
 export * from './payments'
+export * from './stock'

package/events/orders/order-cancelled.interface.ts

@@ -7,4 +7,13 @@ export interface OrderCancelledEvent {
 	wasPaid: boolean
 	releaseStock: boolean
 	cancelledAt: number
+
+	// Опціональний customer-snapshot для нотифікацій.
+	userId?: string
+	customer?: {
+		firstName: string
+		lastName: string
+		email: string
+		phone: string
+	}
 }

package/events/orders/order-status-changed.interface.ts

@@ -7,4 +7,18 @@ export interface OrderStatusChangedEvent {
 	actorId?: string
 	actorName?: string
 	changedAt: number
+
+	// Опціональний customer-snapshot для нотифікацій (щоб
+	// notification-service не робив додатковий lookup в order-service).
+	userId?: string
+	customer?: {
+		firstName: string
+		lastName: string
+		email: string
+		phone: string
+	}
+
+	// На переходах у shipped — ТТН + tracking URL.
+	trackingNumber?: string
+	trackingUrl?: string
 }

package/events/stock/index.ts

@@ -0,0 +1,5 @@
+export * from './stock-confirm-requested.interface'
+export * from './stock-release-requested.interface'
+export * from './stock-reserve-failed.interface'
+export * from './stock-reserve-requested.interface'
+export * from './stock-reserved.interface'

package/events/stock/stock-confirm-requested.interface.ts

@@ -0,0 +1,6 @@
+// Подія від order-service: замовлення переходить у packing → catalog
+// списує резерв у реальний OUTGOING рух (підтверджує продаж).
+export interface StockConfirmRequestedEvent {
+	orderId: string
+	orderNumber: string
+}

package/events/stock/stock-release-requested.interface.ts

@@ -0,0 +1,11 @@
+// Подія від order-service: cancel/відмова → catalog скасовує всі резерви
+// замовлення (по reference_type='order', reference_id=orderId).
+export interface StockReleaseRequestedEvent {
+	orderId: string
+	orderNumber: string
+	items: Array<{
+		productId: string
+		variantId?: string
+		quantity: number
+	}>
+}

package/events/stock/stock-reserve-failed.interface.ts

@@ -0,0 +1,8 @@
+// Подія від catalog-service: catalog НЕ зміг зарезервувати (insufficient
+// stock, product disappeared). Order-service кенселить замовлення з reason.
+export interface StockReserveFailedEvent {
+	orderId: string
+	orderNumber: string
+	reason: string
+	missing?: Array<{ productId: string; needed: number }>
+}

package/events/stock/stock-reserve-requested.interface.ts

@@ -0,0 +1,16 @@
+// Подія від order-service: catalog має зарезервувати stock для замовлення.
+// Catalog сам обирає warehouse(и) (auto-pick first-available, greedy
+// fill через product_warehouses ORDER BY created_at).
+//
+// TTL у мс — після його закінчення UnpaidOrdersCron у order-service
+// автоматично скасує замовлення → catalog отримає stock.release_requested.
+export interface StockReserveRequestedEvent {
+	orderId: string
+	orderNumber: string
+	ttlMs: number
+	items: Array<{
+		productId: string
+		variantId?: string
+		quantity: number
+	}>
+}

package/events/stock/stock-reserved.interface.ts

@@ -0,0 +1,13 @@
+// Подія від catalog-service: успішний резерв → order-service зберігає
+// reservationId/reservedUntil у OrderItem (для admin UI і traceability).
+export interface StockReservedEvent {
+	orderId: string
+	orderNumber: string
+	reservedUntil: number
+	allocations: Array<{
+		productId: string
+		variantId?: string
+		warehouseId: string
+		quantity: number
+	}>
+}

package/gen/audit.ts

@@ -0,0 +1,109 @@
+// Code generated by protoc-gen-ts_proto. DO NOT EDIT.
+// versions:
+//   protoc-gen-ts_proto  v2.11.4
+//   protoc               v3.21.12
+// source: audit.proto
+
+/* eslint-disable */
+import { GrpcMethod, GrpcStreamMethod } from "@nestjs/microservices";
+import { Observable } from "rxjs";
+
+export const protobufPackage = "audit.v1";
+
+export interface LogActionRequest {
+  actorId?: string | undefined;
+  actorName?: string | undefined;
+  actorEmail?:
+    | string
+    | undefined;
+  /** e.g. "order.cancelled", "product.price_changed" */
+  action: string;
+  /** e.g. "order", "product", "role" */
+  targetType: string;
+  targetId?:
+    | string
+    | undefined;
+  /** human-readable summary */
+  summary?:
+    | string
+    | undefined;
+  /** serialized JSON snapshot (small!) */
+  beforeJson?: string | undefined;
+  afterJson?: string | undefined;
+  ip?: string | undefined;
+  userAgent?: string | undefined;
+}
+
+export interface LogActionResponse {
+  ok: boolean;
+}
+
+export interface ListAuditRequest {
+  page?: number | undefined;
+  limit?: number | undefined;
+  actorId?: string | undefined;
+  targetType?: string | undefined;
+  targetId?: string | undefined;
+  action?:
+    | string
+    | undefined;
+  /** "orders" matches order.* etc */
+  actionGroup?:
+    | string
+    | undefined;
+  /** ISO date */
+  from?: string | undefined;
+  to?: string | undefined;
+}
+
+export interface AuditEntry {
+  id: string;
+  actorId: string;
+  actorName: string;
+  actorEmail: string;
+  action: string;
+  targetType: string;
+  targetId: string;
+  summary: string;
+  beforeJson: string;
+  afterJson: string;
+  ip: string;
+  userAgent: string;
+  createdAt: string;
+}
+
+export interface ListAuditResponse {
+  items: AuditEntry[];
+  total: number;
+}
+
+export const AUDIT_V1_PACKAGE_NAME = "audit.v1";
+
+export interface AuditServiceClient {
+  logAction(request: LogActionRequest): Observable<LogActionResponse>;
+
+  listAudit(request: ListAuditRequest): Observable<ListAuditResponse>;
+}
+
+export interface AuditServiceController {
+  logAction(request: LogActionRequest): Promise<LogActionResponse> | Observable<LogActionResponse> | LogActionResponse;
+
+  listAudit(request: ListAuditRequest): Promise<ListAuditResponse> | Observable<ListAuditResponse> | ListAuditResponse;
+}
+
+export function AuditServiceControllerMethods() {
+  return function (constructor: Function) {
+    const grpcMethods: string[] = ["logAction", "listAudit"];
+    for (const method of grpcMethods) {
+      const descriptor: any = Reflect.getOwnPropertyDescriptor(constructor.prototype, method);
+      GrpcMethod("AuditService", method)(constructor.prototype[method], method, descriptor);
+    }
+    const grpcStreamMethods: string[] = [];
+    for (const method of grpcStreamMethods) {
+      const descriptor: any = Reflect.getOwnPropertyDescriptor(constructor.prototype, method);
+      GrpcStreamMethod("AuditService", method)(constructor.prototype[method], method, descriptor);
+    }
+  };
+}
+
+export const AUDIT_SERVICE_NAME = "AuditService";

package/gen/cart.ts

@@ -73,6 +73,11 @@ export interface DeliveryDraft {
   pickupPointId: string;
   cost: number;
   freeShipping: boolean;
+  /**
+   * Область з City.region — клієнт передає при виборі міста, щоб
+   * потім order-service зміг записати в snapshot замовлення.
+   */
+  region: string;
 }
 
 export interface PaymentDraft {

package/gen/manager.ts

@@ -0,0 +1,215 @@
+// Code generated by protoc-gen-ts_proto. DO NOT EDIT.
+// versions:
+//   protoc-gen-ts_proto  v2.11.4
+//   protoc               v3.21.12
+// source: manager.proto
+
+/* eslint-disable */
+import { GrpcMethod, GrpcStreamMethod } from "@nestjs/microservices";
+import { Observable } from "rxjs";
+
+export const protobufPackage = "manager.v1";
+
+export interface Vacation {
+  id: string;
+  startsAt: string;
+  endsAt: string;
+  reason: string;
+}
+
+export interface ManagerProfileDto {
+  id: string;
+  accountId: string;
+  displayName: string;
+  email: string;
+  isActive: boolean;
+  queueOrder: number;
+  assignedCount: number;
+  terminatedAt: string;
+  reassignmentStrategy: string;
+  vacations: Vacation[];
+  createdAt: string;
+  updatedAt: string;
+}
+
+export interface ListManagersRequest {
+}
+
+export interface ListManagersResponse {
+  items: ManagerProfileDto[];
+}
+
+export interface GetManagerRequest {
+  id: string;
+}
+
+export interface GetManagerByAccountRequest {
+  accountId: string;
+}
+
+export interface CreateManagerRequest {
+  accountId: string;
+  displayName?: string | undefined;
+  email?:
+    | string
+    | undefined;
+  /** URGENT_ONLY | ALL */
+  reassignmentStrategy?: string | undefined;
+}
+
+export interface UpdateManagerRequest {
+  id: string;
+  displayName?: string | undefined;
+  email?: string | undefined;
+  reassignmentStrategy?: string | undefined;
+}
+
+export interface SetManagerActiveRequest {
+  id: string;
+  isActive: boolean;
+}
+
+export interface TerminateManagerRequest {
+  id: string;
+}
+
+export interface ReorderManagersRequest {
+  orderedIds: string[];
+}
+
+export interface AddVacationRequest {
+  managerId: string;
+  /** ISO date */
+  startsAt: string;
+  endsAt: string;
+  reason?: string | undefined;
+}
+
+export interface AddVacationResponse {
+  id: string;
+}
+
+export interface DeleteVacationRequest {
+  id: string;
+}
+
+export interface ReassignUnassignedRequest {
+}
+
+export interface ReassignUnassignedResponse {
+  ok: boolean;
+  reassignedCount: number;
+}
+
+export interface BoolResult {
+  ok: boolean;
+}
+
+export const MANAGER_V1_PACKAGE_NAME = "manager.v1";
+
+export interface ManagerServiceClient {
+  listManagers(request: ListManagersRequest): Observable<ListManagersResponse>;
+
+  getManager(request: GetManagerRequest): Observable<ManagerProfileDto>;
+
+  /**
+   * Резолв account_id (з auth-service) → ManagerProfile. Використовується
+   * у gateway щоб з'ясувати ManagerProfile.id для логіну-під-менеджером —
+   * order.managerId зберігає ManagerProfile.id, а не Account.id.
+   */
+
+  getManagerByAccount(request: GetManagerByAccountRequest): Observable<ManagerProfileDto>;
+
+  createManager(request: CreateManagerRequest): Observable<ManagerProfileDto>;
+
+  updateManager(request: UpdateManagerRequest): Observable<ManagerProfileDto>;
+
+  setManagerActive(request: SetManagerActiveRequest): Observable<ManagerProfileDto>;
+
+  terminateManager(request: TerminateManagerRequest): Observable<ManagerProfileDto>;
+
+  reorderManagers(request: ReorderManagersRequest): Observable<BoolResult>;
+
+  addVacation(request: AddVacationRequest): Observable<AddVacationResponse>;
+
+  deleteVacation(request: DeleteVacationRequest): Observable<BoolResult>;
+
+  reassignUnassigned(request: ReassignUnassignedRequest): Observable<ReassignUnassignedResponse>;
+}
+
+export interface ManagerServiceController {
+  listManagers(
+    request: ListManagersRequest,
+  ): Promise<ListManagersResponse> | Observable<ListManagersResponse> | ListManagersResponse;
+
+  getManager(
+    request: GetManagerRequest,
+  ): Promise<ManagerProfileDto> | Observable<ManagerProfileDto> | ManagerProfileDto;
+
+  /**
+   * Резолв account_id (з auth-service) → ManagerProfile. Використовується
+   * у gateway щоб з'ясувати ManagerProfile.id для логіну-під-менеджером —
+   * order.managerId зберігає ManagerProfile.id, а не Account.id.
+   */
+
+  getManagerByAccount(
+    request: GetManagerByAccountRequest,
+  ): Promise<ManagerProfileDto> | Observable<ManagerProfileDto> | ManagerProfileDto;
+
+  createManager(
+    request: CreateManagerRequest,
+  ): Promise<ManagerProfileDto> | Observable<ManagerProfileDto> | ManagerProfileDto;
+
+  updateManager(
+    request: UpdateManagerRequest,
+  ): Promise<ManagerProfileDto> | Observable<ManagerProfileDto> | ManagerProfileDto;
+
+  setManagerActive(
+    request: SetManagerActiveRequest,
+  ): Promise<ManagerProfileDto> | Observable<ManagerProfileDto> | ManagerProfileDto;
+
+  terminateManager(
+    request: TerminateManagerRequest,
+  ): Promise<ManagerProfileDto> | Observable<ManagerProfileDto> | ManagerProfileDto;
+
+  reorderManagers(request: ReorderManagersRequest): Promise<BoolResult> | Observable<BoolResult> | BoolResult;
+
+  addVacation(
+    request: AddVacationRequest,
+  ): Promise<AddVacationResponse> | Observable<AddVacationResponse> | AddVacationResponse;
+
+  deleteVacation(request: DeleteVacationRequest): Promise<BoolResult> | Observable<BoolResult> | BoolResult;
+
+  reassignUnassigned(
+    request: ReassignUnassignedRequest,
+  ): Promise<ReassignUnassignedResponse> | Observable<ReassignUnassignedResponse> | ReassignUnassignedResponse;
+}
+
+export function ManagerServiceControllerMethods() {
+  return function (constructor: Function) {
+    const grpcMethods: string[] = [
+      "listManagers",
+      "getManager",
+      "getManagerByAccount",
+      "createManager",
+      "updateManager",
+      "setManagerActive",
+      "terminateManager",
+      "reorderManagers",
+      "addVacation",
+      "deleteVacation",
+      "reassignUnassigned",
+    ];
+    for (const method of grpcMethods) {
+      const descriptor: any = Reflect.getOwnPropertyDescriptor(constructor.prototype, method);
+      GrpcMethod("ManagerService", method)(constructor.prototype[method], method, descriptor);
+    }
+    const grpcStreamMethods: string[] = [];
+    for (const method of grpcStreamMethods) {
+      const descriptor: any = Reflect.getOwnPropertyDescriptor(constructor.prototype, method);
+      GrpcStreamMethod("ManagerService", method)(constructor.prototype[method], method, descriptor);
+    }
+  };
+}
+
+export const MANAGER_SERVICE_NAME = "ManagerService";