@ofidj/contracts 3.6.24 → 3.7.1

package/CHANGELOG.md

@@ -1,28 +1,27 @@
-## Sandbox build isolation
+# Changelog
 
-- Compile contracts without ambient consumer test globals so nested checkouts build consistently under API and Angular workspaces.
+- Describe login acceptance fields and public versioned app-agreement metadata.
 
-# Changelog
+Dated entries are historical; current workflow is in the package README.
 
-- Add typed OIDC, organization/member/group/access and external-provider capability contracts.
+## [3.7.0] - 2026-09-11
 
-- Correct owner user-list payloads and expose closing-app status.
+Minor, not patch: `FidjApiAppsOAuthStatusResponse` is removed. It described the
+legacy per-app OAuth connector, whose routes answer 410 since 3.6.26, but the
+export going away is a break for anyone importing the type.
 
-- Add app groups, handler readiness and automatic erasure retry receipt contracts.
+- Add `pendingEmail`, the email-change and session contracts, and search/paging fields on the owner user list.
+- Remove `FidjApiAppsOAuthStatusResponse` with the legacy OAuth connector it described.
+- Compile contracts without ambient consumer test globals so nested workspace builds remain consistent.
 
+- Add the optional public app home URL to the public response contract.
+- Add typed OIDC, organization/member/group/access and external-provider capability contracts.
+- Correct owner user-list payloads and expose closing-app status.
+- Add app groups, handler readiness and automatic erasure retry receipt contracts.
 - Connect generated app data export/erasure, durable retry state and scoped completion receipts.
-
 - Add shared-account password recovery and email verification integration.
-
 - Local scenario: include Fidj in privacy, distinguish platform membership, and connect Alex’s personal and Studio Notes owner journeys.
 
-All notable changes to this project will be documented in this file.
-
-The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
-and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
-
-## [Unreleased]
-
 ### Local validation milestone (3.6.24)
 
 - Add app identity to consent responses and typed personal-app, export and erasure payloads.

package/README.md

@@ -2,7 +2,7 @@
 
 TypeScript API contracts for Fidj services — request/response interfaces for REST endpoints (API v3).
 
-> _Renamed from `fidj-api-contracts` at 1.0.0. The HTTP contract version (`/v3`) is unchanged and independent from this package's semver._
+> _Renamed from `fidj-api-contracts` at 1.0.0. The API remains `/v3`; the current 3.6.x package versions align with the coordinated API work._
 
 ## Structure
 
@@ -30,9 +30,13 @@ import {FidjApiUsersCreateRequest, FidjApiConsentsResponse} from '@ofidj/contrac
 ```bash
 npm run build          # Compile TypeScript
 npm run bp:style:fix   # Lint + format
-npm run bp:bump        # Version bump + git tag
+npm test               # Placeholder only; does not validate behavior
 ```
 
+## Validation
+
+Follow [workspace TDD](../AGENTS.md): write a failing consumer/type fixture before changing a contract, implement until green, then refactor. Build this package and run affected API/SDK checks. The release-check script currently references a missing dependency-switch command; see the [release rules](../README.md#branches-and-releases).
+
 ## Account lifecycle
 
 `FidjApiResetPasswordRequest` and `FidjApiVerifyEmailRequest` describe the one-use password reset and explicit email confirmation payloads. Recovery operates on the shared account; consent and erasure remain scoped to each app.
@@ -47,8 +51,6 @@ Authenticated `PUT /me` password changes require `{currentPassword, password}`.
 
 Owner details include `deletionPending`. Owner user-list contracts now describe the actual limited profile/role objects and per-app consent summary, replacing the old string-only declarations. This is a coordinated development-contract correction.
 
-## Identity and tenant beta
-
-`FidjApiOidcConfiguration`, `FidjApiOrganization`, `FidjApiOrganizationAccess`, `FidjOrganizationMember`, `FidjOrganizationGroup` and `FidjApiExternalProvider` describe the coordinated identity expansion. Organization members identify app contracts; roles and suspension are tenant-scoped. External capability flags distinguish linking/revoking a Fidj grant from provider-account deletion, which is unsupported.
+## Experimental types
 
-App-session details may include authoritative `subject`, `username` and `appId` for an OIDC access token. Shared-account deletion now requires the principal session and `{confirm: 'delete-account'}`. Ordinary app sessions cannot change the global profile or enumerate other memberships.
+OIDC, organization and external-provider interfaces are development contracts, not evidence of implemented API routes. The workspace API has no OIDC provider or organization tenancy. Verify server behavior before using these types in an integration.

package/bpInfo.js

@@ -1,5 +1,5 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.bpInfo = void 0;
-exports.bpInfo = { version: 'v3.6.24' };
+exports.bpInfo = { version: 'v3.7.0' };
 //# sourceMappingURL=bpInfo.js.map

package/bpInfo.js.map

@@ -1 +1 @@
-{"version":3,"file":"bpInfo.js","sourceRoot":"","sources":["../src/bpInfo.ts"],"names":[],"mappings":";;;AAAa,QAAA,MAAM,GAAG,EAAC,OAAO,EAAE,SAAS,EAAC,CAAC"}
+{"version":3,"file":"bpInfo.js","sourceRoot":"","sources":["../src/bpInfo.ts"],"names":[],"mappings":";;;AAAa,QAAA,MAAM,GAAG,EAAC,OAAO,EAAE,QAAQ,EAAC,CAAC"}

package/fidj-api/FidjApiAccountSelfService.d.ts

@@ -0,0 +1,20 @@
+export interface FidjApiMeEmailChangeRequest {
+    email: string;
+    currentPassword: string;
+}
+export interface FidjApiMeEmailChangeResponse {
+    pendingEmail: string;
+    message: string;
+}
+export interface FidjApiMeSessionsResponse {
+    sessions: {
+        id: string;
+        app: string;
+        appId: string;
+        client_udid: string;
+        client_info: string;
+        createdAt: string;
+        endDate: string;
+        current: boolean;
+    }[];
+}

package/fidj-api/{FidjApiAppsOAuthStatusResponse.js → FidjApiAccountSelfService.js}

@@ -1,3 +1,3 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-//# sourceMappingURL=FidjApiAppsOAuthStatusResponse.js.map
+//# sourceMappingURL=FidjApiAccountSelfService.js.map

package/fidj-api/FidjApiAccountSelfService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"FidjApiAccountSelfService.js","sourceRoot":"","sources":["../../src/fidj-api/FidjApiAccountSelfService.ts"],"names":[],"mappings":""}

package/fidj-api/FidjApiAppsPublicResponse.d.ts

@@ -3,5 +3,10 @@ export interface FidjApiAppsPublicResponse {
         id: string;
         title: string;
         description?: string;
+        home?: string;
+        agreement?: {
+            version: string;
+            text: string;
+        };
     };
 }

package/fidj-api/FidjApiAppsUsersResponse.d.ts

@@ -1,4 +1,7 @@
 export interface FidjApiAppsUsersResponse {
+    total?: number;
+    page?: number;
+    pageSize?: number;
     users: {
         _id: string;
         owner: {
@@ -25,3 +28,26 @@ export interface FidjApiAppsUsersResponse {
         } | null;
     }[];
 }
+export interface FidjApiAppsUserConsentResponse {
+    user: {
+        id: string;
+        name?: string;
+        email: string;
+        emailVerified: boolean;
+    };
+    consent: {
+        terms: boolean;
+        termsVersion: string | null;
+        termsAcceptedAt: string | null;
+        analytics: boolean;
+        communications: boolean;
+        optionalData: boolean;
+    };
+    history: {
+        type: string;
+        granted: boolean;
+        changedAt: string;
+        source?: string;
+        cguVersion?: string;
+    }[];
+}

package/fidj-api/FidjApiPurposes.d.ts

@@ -0,0 +1,53 @@
+export type FidjApiLawfulBasis = 'consent' | 'contract' | 'legal_obligation' | 'vital_interests' | 'public_task' | 'legitimate_interests';
+export type FidjApiPurposeControl = 'none' | 'consent_switch' | 'objection' | 'revoke' | 'leave_app' | 'link_unlink' | 'export_only';
+export interface FidjApiPurpose {
+    purposeId: string;
+    version: number;
+    status: 'published' | 'withheld';
+    controllership: 'controller' | 'processor' | 'joint_controller';
+    name: string;
+    description: string;
+    controller: {
+        name: string;
+        contact: string;
+        privacyContact?: string;
+        dpo?: string | null;
+    };
+    dataCategories: string[];
+    lawfulBasis: FidjApiLawfulBasis;
+    basisEvidence: {
+        necessityStatement?: string | null;
+        legalReference?: string | null;
+        balancingTestRef?: string | null;
+        article9Condition?: string | null;
+    };
+    required: boolean;
+    defaultState: 'off' | null;
+    control: FidjApiPurposeControl;
+    retention: {
+        trigger: string;
+        days: number;
+        label: string;
+    };
+    withdrawalEffect: string;
+    objectionRight: boolean;
+    recipients: string[];
+    transfers: {
+        outsideEEA: boolean;
+        safeguard: string | null;
+    };
+    automatedDecision: boolean;
+    implementation: {
+        implemented: boolean;
+        verified?: boolean;
+        enforced: boolean;
+        code?: string;
+        gap?: string;
+    };
+    publishedAt?: string;
+}
+export interface FidjApiPurposesResponse {
+    schemaVersion: string;
+    purposes: FidjApiPurpose[];
+}
+export type FidjApiPurposeWriteRequest = FidjApiPurpose;

package/fidj-api/FidjApiPurposes.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=FidjApiPurposes.js.map

package/fidj-api/FidjApiPurposes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"FidjApiPurposes.js","sourceRoot":"","sources":["../../src/fidj-api/FidjApiPurposes.ts"],"names":[],"mappings":""}

package/fidj-api/FidjApiTokensCreateRequest.d.ts

@@ -1,4 +1,6 @@
 export interface FidjApiTokensCreateRequest {
+    termsAccepted?: boolean;
+    termsVersion?: string;
     grant_type: string;
     client_udid: string;
     client_info: string;

package/fidj-api/FidjApiUsersMeDetailsResponse.d.ts

@@ -8,6 +8,7 @@ export interface FidjApiUsersMeDetailsResponse {
         username: string;
         name: string;
         emailVerified?: boolean;
+        pendingEmail?: string | null;
         appsOwned: string[];
         appsSubscribed: string[];
     };

package/fidj-api/FidjApiUsersMeResponse.d.ts

@@ -3,5 +3,6 @@ export interface FidjApiUsersMeResponse {
         id: string;
         username: string;
         verified?: boolean;
+        pendingEmail?: string | null;
     };
 }

package/fidj-api/index.d.ts

@@ -17,7 +17,6 @@ export * from './FidjApiAppsPublicResponse';
 export * from './FidjApiAppsDetailsResponse';
 export * from './FidjApiAppsUpdateRequest';
 export * from './FidjApiAppsUsersResponse';
-export * from './FidjApiAppsOAuthStatusResponse';
 export * from './FidjApiAppsMeDetailsResponse';
 export * from './FidjApiContractsListResponse';
 export * from './FidjApiContractsCreateRequest';
@@ -27,4 +26,6 @@ export * from './FidjApiTokensCreateResponse';
 export * from './FidjApiPrivacyResponse';
 export * from './FidjApiAccountRecovery';
 export * from './FidjApiGroups';
+export * from './FidjApiPurposes';
 export * from "./identity";
+export * from './FidjApiAccountSelfService';

package/fidj-api/index.js

@@ -38,7 +38,6 @@ __exportStar(require("./FidjApiAppsPublicResponse"), exports);
 __exportStar(require("./FidjApiAppsDetailsResponse"), exports);
 __exportStar(require("./FidjApiAppsUpdateRequest"), exports);
 __exportStar(require("./FidjApiAppsUsersResponse"), exports);
-__exportStar(require("./FidjApiAppsOAuthStatusResponse"), exports);
 __exportStar(require("./FidjApiAppsMeDetailsResponse"), exports);
 // Contracts
 __exportStar(require("./FidjApiContractsListResponse"), exports);
@@ -50,5 +49,7 @@ __exportStar(require("./FidjApiTokensCreateResponse"), exports);
 __exportStar(require("./FidjApiPrivacyResponse"), exports);
 __exportStar(require("./FidjApiAccountRecovery"), exports);
 __exportStar(require("./FidjApiGroups"), exports);
+__exportStar(require("./FidjApiPurposes"), exports);
 __exportStar(require("./identity"), exports);
+__exportStar(require("./FidjApiAccountSelfService"), exports);
 //# sourceMappingURL=index.js.map

package/fidj-api/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/fidj-api/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,SAAS;AACT,0DAAwC;AACxC,yDAAuC;AAEvC,OAAO;AACP,6DAA2C;AAC3C,8DAA4C;AAE5C,QAAQ;AACR,8DAA4C;AAC5C,+DAA6C;AAC7C,2DAAyC;AACzC,kEAAgD;AAChD,gEAA8C;AAC9C,8DAA4C;AAE5C,kBAAkB;AAClB,4DAA0C;AAC1C,iEAA+C;AAC/C,mEAAiD;AAEjD,OAAO;AACP,6DAA2C;AAC3C,8DAA4C;AAC5C,8DAA4C;AAC5C,+DAA6C;AAC7C,6DAA2C;AAC3C,6DAA2C;AAC3C,mEAAiD;AACjD,iEAA+C;AAE/C,YAAY;AACZ,iEAA+C;AAC/C,kEAAgD;AAChD,kEAAgD;AAEhD,SAAS;AACT,+DAA6C;AAC7C,gEAA8C;AAE9C,2DAAyC;AAEzC,2DAAyC;AAEzC,kDAAgC;AAEhC,6CAA2B"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/fidj-api/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,SAAS;AACT,0DAAwC;AACxC,yDAAuC;AAEvC,OAAO;AACP,6DAA2C;AAC3C,8DAA4C;AAE5C,QAAQ;AACR,8DAA4C;AAC5C,+DAA6C;AAC7C,2DAAyC;AACzC,kEAAgD;AAChD,gEAA8C;AAC9C,8DAA4C;AAE5C,kBAAkB;AAClB,4DAA0C;AAC1C,iEAA+C;AAC/C,mEAAiD;AAEjD,OAAO;AACP,6DAA2C;AAC3C,8DAA4C;AAC5C,8DAA4C;AAC5C,+DAA6C;AAC7C,6DAA2C;AAC3C,6DAA2C;AAC3C,iEAA+C;AAE/C,YAAY;AACZ,iEAA+C;AAC/C,kEAAgD;AAChD,kEAAgD;AAEhD,SAAS;AACT,+DAA6C;AAC7C,gEAA8C;AAE9C,2DAAyC;AAEzC,2DAAyC;AAEzC,kDAAgC;AAChC,oDAAkC;AAElC,6CAA2B;AAC3B,8DAA4C"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ofidj/contracts",
-  "version": "3.6.24",
+  "version": "3.7.1",
   "author": "contact@fidj.ovh",
   "description": "TypeScript API contracts for Fidj services - request/response interfaces for REST endpoints",
   "keywords": [

package/fidj-api/FidjApiAppsOAuthStatusResponse.d.ts

@@ -1,5 +0,0 @@
-export interface FidjApiAppsOAuthStatusResponse {
-    valid: boolean;
-    client_id?: string;
-    redirect_uri?: string;
-}

package/fidj-api/FidjApiAppsOAuthStatusResponse.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"FidjApiAppsOAuthStatusResponse.js","sourceRoot":"","sources":["../../src/fidj-api/FidjApiAppsOAuthStatusResponse.ts"],"names":[],"mappings":""}