@mamindom/contracts 1.0.125 → 1.0.127

package/gen/rbac.ts

@@ -0,0 +1,192 @@
+// Code generated by protoc-gen-ts_proto. DO NOT EDIT.
+// versions:
+//   protoc-gen-ts_proto  v2.11.4
+//   protoc               v3.21.12
+// source: rbac.proto
+
+/* eslint-disable */
+import { GrpcMethod, GrpcStreamMethod } from "@nestjs/microservices";
+import { Observable } from "rxjs";
+
+export const protobufPackage = "rbac.v1";
+
+export interface RbacPermission {
+  id: string;
+  key: string;
+  groupKey: string;
+  label: string;
+  description: string;
+}
+
+export interface RbacRole {
+  id: string;
+  slug: string;
+  name: string;
+  description: string;
+  color: string;
+  isSystem: boolean;
+  isProtected: boolean;
+  usersCount: number;
+  permissionKeys: string[];
+  createdAt: string;
+  updatedAt: string;
+}
+
+export interface ListPermissionsRequest {
+}
+
+export interface ListPermissionsResponse {
+  items: RbacPermission[];
+}
+
+export interface ListRolesRequest {
+  search?: string | undefined;
+}
+
+export interface ListRolesResponse {
+  items: RbacRole[];
+}
+
+export interface GetRoleRequest {
+  id: string;
+}
+
+export interface CreateRoleRequest {
+  slug: string;
+  name: string;
+  description: string;
+  color: string;
+  permissionKeys: string[];
+}
+
+export interface UpdateRoleRequest {
+  id: string;
+  name?: string | undefined;
+  description?: string | undefined;
+  color?:
+    | string
+    | undefined;
+  /** Якщо передано — повна заміна; якщо не передано — без змін. */
+  permissionKeys: string[];
+  replacePermissions: boolean;
+}
+
+export interface DeleteRoleRequest {
+  id: string;
+}
+
+export interface DeleteRoleResponse {
+  ok: boolean;
+}
+
+export interface AssignAccountRoleRequest {
+  accountId: string;
+  /**
+   * Якщо custom_role_id порожній — користувач відвʼязується від кастомної ролі,
+   * і дозволи беруться з системної.
+   */
+  customRoleId?: string | undefined;
+}
+
+export interface AssignAccountRoleResponse {
+  ok: boolean;
+}
+
+export interface GetAccountPermissionsRequest {
+  accountId: string;
+}
+
+export interface GetAccountPermissionsResponse {
+  /**
+   * Effective permissions з урахуванням system role + custom role override.
+   * Може містити "*" — повний доступ (ADMIN).
+   */
+  permissionKeys: string[];
+  /** Слаг ефективної ролі (для UI/labels). */
+  roleSlug: string;
+  roleName: string;
+}
+
+export const RBAC_V1_PACKAGE_NAME = "rbac.v1";
+
+export interface RbacServiceClient {
+  /** Permissions catalog (read-only, seeded). */
+
+  listPermissions(request: ListPermissionsRequest): Observable<ListPermissionsResponse>;
+
+  /** Roles CRUD. */
+
+  listRoles(request: ListRolesRequest): Observable<ListRolesResponse>;
+
+  getRole(request: GetRoleRequest): Observable<RbacRole>;
+
+  createRole(request: CreateRoleRequest): Observable<RbacRole>;
+
+  updateRole(request: UpdateRoleRequest): Observable<RbacRole>;
+
+  deleteRole(request: DeleteRoleRequest): Observable<DeleteRoleResponse>;
+
+  /** Account ↔ role bindings. */
+
+  assignAccountRole(request: AssignAccountRoleRequest): Observable<AssignAccountRoleResponse>;
+
+  getAccountPermissions(request: GetAccountPermissionsRequest): Observable<GetAccountPermissionsResponse>;
+}
+
+export interface RbacServiceController {
+  /** Permissions catalog (read-only, seeded). */
+
+  listPermissions(
+    request: ListPermissionsRequest,
+  ): Promise<ListPermissionsResponse> | Observable<ListPermissionsResponse> | ListPermissionsResponse;
+
+  /** Roles CRUD. */
+
+  listRoles(request: ListRolesRequest): Promise<ListRolesResponse> | Observable<ListRolesResponse> | ListRolesResponse;
+
+  getRole(request: GetRoleRequest): Promise<RbacRole> | Observable<RbacRole> | RbacRole;
+
+  createRole(request: CreateRoleRequest): Promise<RbacRole> | Observable<RbacRole> | RbacRole;
+
+  updateRole(request: UpdateRoleRequest): Promise<RbacRole> | Observable<RbacRole> | RbacRole;
+
+  deleteRole(
+    request: DeleteRoleRequest,
+  ): Promise<DeleteRoleResponse> | Observable<DeleteRoleResponse> | DeleteRoleResponse;
+
+  /** Account ↔ role bindings. */
+
+  assignAccountRole(
+    request: AssignAccountRoleRequest,
+  ): Promise<AssignAccountRoleResponse> | Observable<AssignAccountRoleResponse> | AssignAccountRoleResponse;
+
+  getAccountPermissions(
+    request: GetAccountPermissionsRequest,
+  ): Promise<GetAccountPermissionsResponse> | Observable<GetAccountPermissionsResponse> | GetAccountPermissionsResponse;
+}
+
+export function RbacServiceControllerMethods() {
+  return function (constructor: Function) {
+    const grpcMethods: string[] = [
+      "listPermissions",
+      "listRoles",
+      "getRole",
+      "createRole",
+      "updateRole",
+      "deleteRole",
+      "assignAccountRole",
+      "getAccountPermissions",
+    ];
+    for (const method of grpcMethods) {
+      const descriptor: any = Reflect.getOwnPropertyDescriptor(constructor.prototype, method);
+      GrpcMethod("RbacService", method)(constructor.prototype[method], method, descriptor);
+    }
+    const grpcStreamMethods: string[] = [];
+    for (const method of grpcStreamMethods) {
+      const descriptor: any = Reflect.getOwnPropertyDescriptor(constructor.prototype, method);
+      GrpcStreamMethod("RbacService", method)(constructor.prototype[method], method, descriptor);
+    }
+  };
+}
+
+export const RBAC_SERVICE_NAME = "RbacService";

package/package.json

@@ -1,7 +1,7 @@
 {
 	"name": "@mamindom/contracts",
 	"description": "proto",
-	"version": "1.0.125",
+	"version": "1.0.127",
 	"main": "./dist/src/index.js",
 	"types": "./dist/src/index.d.ts",
 	"exports": {

package/proto/audit.proto

@@ -0,0 +1,59 @@
+syntax = "proto3";
+
+package audit.v1;
+
+service AuditService {
+  rpc LogAction(LogActionRequest) returns (LogActionResponse);
+  rpc ListAudit(ListAuditRequest) returns (ListAuditResponse);
+}
+
+message LogActionRequest {
+  optional string actor_id     = 1;
+  optional string actor_name   = 2;
+  optional string actor_email  = 3;
+  string action                = 4;  // e.g. "order.cancelled", "product.price_changed"
+  string target_type           = 5;  // e.g. "order", "product", "role"
+  optional string target_id    = 6;
+  optional string summary      = 7;  // human-readable summary
+  optional string before_json  = 8;  // serialized JSON snapshot (small!)
+  optional string after_json   = 9;
+  optional string ip           = 10;
+  optional string user_agent   = 11;
+}
+
+message LogActionResponse {
+  bool ok = 1;
+}
+
+message ListAuditRequest {
+  optional int32 page          = 1;
+  optional int32 limit         = 2;
+  optional string actor_id     = 3;
+  optional string target_type  = 4;
+  optional string target_id    = 5;
+  optional string action       = 6;
+  optional string action_group = 7;  // "orders" matches order.* etc
+  optional string from         = 8;  // ISO date
+  optional string to           = 9;
+}
+
+message AuditEntry {
+  string id            = 1;
+  string actor_id      = 2;
+  string actor_name    = 3;
+  string actor_email   = 4;
+  string action        = 5;
+  string target_type   = 6;
+  string target_id     = 7;
+  string summary       = 8;
+  string before_json   = 9;
+  string after_json    = 10;
+  string ip            = 11;
+  string user_agent    = 12;
+  string created_at    = 13;
+}
+
+message ListAuditResponse {
+  repeated AuditEntry items = 1;
+  int32 total = 2;
+}

package/proto/cart.proto

@@ -100,6 +100,9 @@ message DeliveryDraft {
   string pickup_point_id = 7;
   double cost          = 8;
   bool   free_shipping = 9;
+  // Область з City.region — клієнт передає при виборі міста, щоб
+  // потім order-service зміг записати в snapshot замовлення.
+  string region        = 10;
 }
 
 message PaymentDraft {

package/proto/manager.proto

@@ -0,0 +1,94 @@
+syntax = "proto3";
+
+package manager.v1;
+
+service ManagerService {
+  rpc ListManagers(ListManagersRequest) returns (ListManagersResponse);
+  rpc GetManager(GetManagerRequest) returns (ManagerProfileDto);
+  // Резолв account_id (з auth-service) → ManagerProfile. Використовується
+  // у gateway щоб з'ясувати ManagerProfile.id для логіну-під-менеджером —
+  // order.managerId зберігає ManagerProfile.id, а не Account.id.
+  rpc GetManagerByAccount(GetManagerByAccountRequest) returns (ManagerProfileDto);
+  rpc CreateManager(CreateManagerRequest) returns (ManagerProfileDto);
+  rpc UpdateManager(UpdateManagerRequest) returns (ManagerProfileDto);
+  rpc SetManagerActive(SetManagerActiveRequest) returns (ManagerProfileDto);
+  rpc TerminateManager(TerminateManagerRequest) returns (ManagerProfileDto);
+  rpc ReorderManagers(ReorderManagersRequest) returns (BoolResult);
+  rpc AddVacation(AddVacationRequest) returns (AddVacationResponse);
+  rpc DeleteVacation(DeleteVacationRequest) returns (BoolResult);
+  rpc ReassignUnassigned(ReassignUnassignedRequest) returns (ReassignUnassignedResponse);
+}
+
+message Vacation {
+  string id        = 1;
+  string starts_at = 2;
+  string ends_at   = 3;
+  string reason    = 4;
+}
+
+message ManagerProfileDto {
+  string id                    = 1;
+  string account_id            = 2;
+  string display_name          = 3;
+  string email                 = 4;
+  bool   is_active             = 5;
+  int32  queue_order           = 6;
+  int32  assigned_count        = 7;
+  string terminated_at         = 8;
+  string reassignment_strategy = 9;
+  repeated Vacation vacations  = 10;
+  string created_at            = 11;
+  string updated_at            = 12;
+}
+
+message ListManagersRequest {}
+message ListManagersResponse {
+  repeated ManagerProfileDto items = 1;
+}
+
+message GetManagerRequest { string id = 1; }
+
+message GetManagerByAccountRequest { string account_id = 1; }
+
+message CreateManagerRequest {
+  string account_id                     = 1;
+  optional string display_name          = 2;
+  optional string email                 = 3;
+  optional string reassignment_strategy = 4; // URGENT_ONLY | ALL
+}
+
+message UpdateManagerRequest {
+  string id                             = 1;
+  optional string display_name          = 2;
+  optional string email                 = 3;
+  optional string reassignment_strategy = 4;
+}
+
+message SetManagerActiveRequest {
+  string id        = 1;
+  bool   is_active = 2;
+}
+
+message TerminateManagerRequest { string id = 1; }
+
+message ReorderManagersRequest {
+  repeated string ordered_ids = 1;
+}
+
+message AddVacationRequest {
+  string manager_id = 1;
+  string starts_at  = 2; // ISO date
+  string ends_at    = 3;
+  optional string reason = 4;
+}
+message AddVacationResponse { string id = 1; }
+
+message DeleteVacationRequest { string id = 1; }
+
+message ReassignUnassignedRequest {}
+message ReassignUnassignedResponse {
+  bool ok = 1;
+  int32 reassigned_count = 2;
+}
+
+message BoolResult { bool ok = 1; }

package/proto/notification.proto

@@ -0,0 +1,317 @@
+syntax = "proto3";
+
+package notification.v1;
+
+
+// Admin API для керування шаблонами нотифікацій, Telegram-чатами,
+// надсилання test-пакета, перегляду логів.
+
+service NotificationTemplateService {
+  rpc ListTemplates       (ListTemplatesRequest)       returns (ListTemplatesResponse);
+  rpc GetTemplate         (GetTemplateRequest)         returns (TemplateResponse);
+  rpc UpsertTemplate      (UpsertTemplateRequest)      returns (TemplateResponse);
+  rpc UpdateTemplate      (UpdateTemplateRequest)      returns (TemplateResponse);
+  rpc ToggleTemplate      (ToggleTemplateRequest)      returns (TemplateResponse);
+  rpc ListVersions        (ListVersionsRequest)        returns (ListVersionsResponse);
+  rpc RestoreVersion      (RestoreVersionRequest)      returns (TemplateResponse);
+  rpc RenderPreview       (RenderPreviewRequest)       returns (RenderPreviewResponse);
+  rpc SendTest            (SendTestRequest)            returns (SendTestResponse);
+}
+
+service NotificationLogsService {
+  rpc ListLogs (ListLogsRequest) returns (ListLogsResponse);
+}
+
+service TelegramChatsService {
+  rpc ListChats   (ListChatsRequest)   returns (ListChatsResponse);
+  rpc UpsertChat  (UpsertChatRequest)  returns (TelegramChatResponse);
+  rpc DeleteChat  (DeleteChatRequest)  returns (DeleteChatResponse);
+  rpc TestSendTelegram (TestSendTelegramRequest) returns (TestSendTelegramResponse);
+}
+
+
+enum NotificationChannel {
+  NOTIFICATION_CHANNEL_UNSPECIFIED = 0;
+  EMAIL    = 1;
+  SMS      = 2;
+  TELEGRAM = 3;
+}
+
+enum NotificationLocale {
+  NOTIFICATION_LOCALE_UNSPECIFIED = 0;
+  UK = 1;
+  RU = 2;
+}
+
+enum NotificationCategory {
+  NOTIFICATION_CATEGORY_UNSPECIFIED = 0;
+  TRANSACTIONAL = 1;
+  ACCOUNT       = 2;
+  MARKETING     = 3;
+  ADMIN         = 4;
+  OTP           = 5;
+}
+
+enum NotificationStatus {
+  NOTIFICATION_STATUS_UNSPECIFIED = 0;
+  PENDING    = 1;
+  SENT       = 2;
+  FAILED     = 3;
+  SIMULATED  = 4;
+  SUPPRESSED = 5;
+}
+
+enum TelegramTopic {
+  TELEGRAM_TOPIC_UNSPECIFIED = 0;
+  ORDERS         = 1;
+  ORDERS_ALERTS  = 2;
+  PAYMENTS       = 3;
+  WAREHOUSE      = 4;
+  REVIEWS        = 5;
+  CALLBACK       = 6;
+  REPORTS        = 7;
+  ALERTS         = 8;
+  GENERAL        = 9;
+}
+
+
+message NotificationTemplate {
+  string id = 1;
+  string key = 2;
+  NotificationChannel channel = 3;
+  NotificationLocale locale = 4;
+  NotificationCategory category = 5;
+  string title = 6;
+  string subject = 7;
+  // JSON-stringified Tiptap content (передаємо як string щоб не
+  // використовувати proto google.protobuf.Struct).
+  string content_json = 8;
+  string body_html = 9;
+  string body_text = 10;
+  // JSON array of variable names (для autocomplete).
+  string variables_json = 11;
+  bool is_active = 12;
+  int32 version = 13;
+  int64 created_at = 14;
+  int64 updated_at = 15;
+}
+
+message TemplateResponse {
+  bool ok = 1;
+  NotificationTemplate template = 2;
+  string error_message = 3;
+}
+
+
+// ─── List ────────────────────────────────────────────────────────────
+
+message ListTemplatesRequest {
+  optional NotificationChannel channel = 1;
+  optional NotificationLocale locale = 2;
+  optional NotificationCategory category = 3;
+  optional string search = 4;
+}
+
+message ListTemplatesResponse {
+  repeated NotificationTemplate items = 1;
+}
+
+
+// ─── Get ─────────────────────────────────────────────────────────────
+
+message GetTemplateRequest {
+  string id = 1;
+}
+
+
+// ─── Upsert (create new) ─────────────────────────────────────────────
+
+message UpsertTemplateRequest {
+  string key = 1;
+  NotificationChannel channel = 2;
+  NotificationLocale locale = 3;
+  NotificationCategory category = 4;
+  string title = 5;
+  string subject = 6;
+  string content_json = 7;
+  string body_html = 8;
+  string body_text = 9;
+  string variables_json = 10;
+  bool is_active = 11;
+}
+
+
+// ─── Update by id (з versioning) ─────────────────────────────────────
+
+message UpdateTemplateRequest {
+  string id = 1;
+  optional string title = 2;
+  optional string subject = 3;
+  optional string content_json = 4;
+  string body_html = 5;
+  string body_text = 6;
+  optional string variables_json = 7;
+  optional bool is_active = 8;
+  // Admin id для audit (хто змінив).
+  optional string actor_id = 9;
+}
+
+
+// ─── Toggle (вмикання/вимикання) ────────────────────────────────────
+
+message ToggleTemplateRequest {
+  string id = 1;
+  bool is_active = 2;
+}
+
+
+// ─── Versions ────────────────────────────────────────────────────────
+
+message NotificationTemplateVersion {
+  string id = 1;
+  int32 version = 2;
+  string title = 3;
+  string subject = 4;
+  string content_json = 5;
+  string body_html = 6;
+  string body_text = 7;
+  string variables_json = 8;
+  optional string created_by_id = 9;
+  int64 created_at = 10;
+}
+
+message ListVersionsRequest {
+  string template_id = 1;
+}
+
+message ListVersionsResponse {
+  repeated NotificationTemplateVersion items = 1;
+}
+
+message RestoreVersionRequest {
+  string template_id = 1;
+  int32 version = 2;
+  optional string actor_id = 3;
+}
+
+
+// ─── Preview ────────────────────────────────────────────────────────
+
+message RenderPreviewRequest {
+  string body_html = 1;
+  // JSON-stringified variables { "order.number": "MD-2026-0001", ... }
+  string variables_json = 2;
+  optional string subject = 3;
+}
+
+message RenderPreviewResponse {
+  string html = 1;
+  string subject = 2;
+}
+
+
+// ─── Test send ───────────────────────────────────────────────────────
+
+message SendTestRequest {
+  string template_id = 1;
+  // email або phone (залежно від channel).
+  string recipient = 2;
+  // JSON-stringified test variables.
+  string variables_json = 3;
+}
+
+message SendTestResponse {
+  bool ok = 1;
+  string error_message = 2;
+}
+
+
+// ─── Logs ────────────────────────────────────────────────────────────
+
+message NotificationLog {
+  string id = 1;
+  string template_key = 2;
+  NotificationChannel channel = 3;
+  NotificationLocale locale = 4;
+  string recipient = 5;
+  optional string order_id = 6;
+  optional string user_id = 7;
+  NotificationStatus status = 8;
+  optional string provider_message_id = 9;
+  optional string provider_name = 10;
+  optional string error = 11;
+  optional int64 sent_at = 12;
+  int64 created_at = 13;
+}
+
+message ListLogsRequest {
+  optional NotificationChannel channel = 1;
+  optional NotificationStatus status = 2;
+  optional string template_key = 3;
+  optional string order_id = 4;
+  optional string user_id = 5;
+  optional string recipient = 6;
+  optional int64 date_from = 7;
+  optional int64 date_to = 8;
+  int32 page = 9;
+  int32 limit = 10;
+}
+
+message ListLogsResponse {
+  repeated NotificationLog items = 1;
+  int32 total = 2;
+  int32 page = 3;
+  int32 limit = 4;
+}
+
+
+// ─── Telegram chats ──────────────────────────────────────────────────
+
+message TelegramChat {
+  string id = 1;
+  string chat_id = 2;
+  TelegramTopic topic = 3;
+  string label = 4;
+  optional string tag = 5;
+  bool is_active = 6;
+  int64 created_at = 7;
+  int64 updated_at = 8;
+}
+
+message TelegramChatResponse {
+  bool ok = 1;
+  TelegramChat chat = 2;
+  string error_message = 3;
+}
+
+message ListChatsRequest {}
+
+message ListChatsResponse {
+  repeated TelegramChat items = 1;
+}
+
+message UpsertChatRequest {
+  string chat_id = 1;
+  TelegramTopic topic = 2;
+  string label = 3;
+  optional string tag = 4;
+  bool is_active = 5;
+}
+
+message DeleteChatRequest {
+  string id = 1;
+}
+
+message DeleteChatResponse {
+  bool ok = 1;
+  string error_message = 2;
+}
+
+message TestSendTelegramRequest {
+  string chat_id = 1;
+}
+
+message TestSendTelegramResponse {
+  bool ok = 1;
+  string error_message = 2;
+}

package/proto/order.proto

@@ -69,6 +69,9 @@ message OrderDelivery {
   string tracking_url    = 10;
   string estimated_date  = 11;
   string shipment_status = 12;
+  // Адмін-облік: область/регіон з City.region від delivery-service.
+  // Старі замовлення можуть мати порожнє значення.
+  string region          = 13;
 }
 
 message OrderPayment {
@@ -82,6 +85,10 @@ message OrderPayment {
   int64  captured_at          = 8;
   int64  cancelled_at         = 9;
   int64  refunded_at          = 10;
+  // Денормалізовано з payment-service для відображення в адмінці
+  // без додаткового gRPC дзвінка. Оновлюється з payment-events listener.
+  double captured_amount      = 11;
+  double refunded_amount      = 12;
 }
 
 message OrderNote {
@@ -153,6 +160,10 @@ message Order {
 
   int64  created_at = 20;
   int64  updated_at = 21;
+
+  // Внутрішні нотатки менеджерів (видимі тільки в адмінці).
+  // Сортуються від новіших до старіших — server-side.
+  repeated OrderNote notes = 22;
 }
 
 // ─── Requests ──────────────────────────────────────────────────