tychat-contracts 1.0.51 → 1.0.53

package/README.md

@@ -5,7 +5,8 @@ DTOs compartilhados com **class-validator** usados pela **tychat-api** e pelos m
 ## Estrutura
 
 - **auth**: `LoginDto`, `RefreshTokenDto`, `RequestPasswordResetDto`, `ConfirmPasswordResetDto`, `AuthLoginResponseDto`, payloads Kafka (`LoginPayload`, `RequestPasswordResetPayload`, etc.)
-- **users**: `CreateUserDto` (sem password para criação por admin), `UserListItemDto`, `UpdateSelfUserDto`, `UpdateUserByAdminDto`, `UpdatedUserDto`, `ChangeForcePasswordDto`
+- **users**: `CreateUserDto` (sem password para criação por admin), `UserListItemDto`, `UpdateSelfUserDto` (name/email), `UpdateUserByAdminDto` (name/email/role), `UpdatedUserDto`, `ChangeForcePasswordDto`
+- **professionals**: `ProfessionalProfileDto`, `UpdateProfessionalProfileDto`, `CreateProfessionalWithProfileDto`
 
 ## Uso
 

package/dist/index.d.ts

@@ -10,4 +10,5 @@ export * from './payments';
 export * from './billing';
 export * from './ai';
 export * from './storage';
+export * from './notifications';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,QAAQ,CAAC;AACvB,cAAc,SAAS,CAAC;AACxB,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,cAAc,kBAAkB,CAAC;AACjC,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC;AAC1B,cAAc,MAAM,CAAC;AACrB,cAAc,WAAW,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,QAAQ,CAAC;AACvB,cAAc,SAAS,CAAC;AACxB,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,cAAc,kBAAkB,CAAC;AACjC,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC;AAC1B,cAAc,MAAM,CAAC;AACrB,cAAc,WAAW,CAAC;AAC1B,cAAc,iBAAiB,CAAC"}

package/dist/index.js

@@ -26,3 +26,4 @@ __exportStar(require("./payments"), exports);
 __exportStar(require("./billing"), exports);
 __exportStar(require("./ai"), exports);
 __exportStar(require("./storage"), exports);
+__exportStar(require("./notifications"), exports);

package/dist/notifications/index.d.ts

@@ -0,0 +1,2 @@
+export { NotificationUserCreatedEventPayload, NotificationPasswordResetRequestedEventPayload, } from './notifications-kafka.payloads';
+//# sourceMappingURL=index.d.ts.map

package/dist/notifications/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/notifications/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mCAAmC,EACnC,8CAA8C,GAC/C,MAAM,gCAAgC,CAAC"}

package/dist/notifications/index.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NotificationPasswordResetRequestedEventPayload = exports.NotificationUserCreatedEventPayload = void 0;
+var notifications_kafka_payloads_1 = require("./notifications-kafka.payloads");
+Object.defineProperty(exports, "NotificationUserCreatedEventPayload", { enumerable: true, get: function () { return notifications_kafka_payloads_1.NotificationUserCreatedEventPayload; } });
+Object.defineProperty(exports, "NotificationPasswordResetRequestedEventPayload", { enumerable: true, get: function () { return notifications_kafka_payloads_1.NotificationPasswordResetRequestedEventPayload; } });

package/dist/notifications/notifications-kafka.payloads.d.ts

@@ -0,0 +1,16 @@
+export declare class NotificationUserCreatedEventPayload {
+    eventId: string;
+    tenant: string;
+    email: string;
+    name: string;
+    password: string;
+    occurredAt: string;
+}
+export declare class NotificationPasswordResetRequestedEventPayload {
+    eventId: string;
+    tenant: string;
+    email: string;
+    verifyToken: string;
+    occurredAt: string;
+}
+//# sourceMappingURL=notifications-kafka.payloads.d.ts.map

package/dist/notifications/notifications-kafka.payloads.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"notifications-kafka.payloads.d.ts","sourceRoot":"","sources":["../../src/notifications/notifications-kafka.payloads.ts"],"names":[],"mappings":"AAGA,qBAAa,mCAAmC;IAM9C,OAAO,EAAE,MAAM,CAAC;IAShB,MAAM,EAAE,MAAM,CAAC;IAQf,KAAK,EAAE,MAAM,CAAC;IASd,IAAI,EAAE,MAAM,CAAC;IASb,QAAQ,EAAE,MAAM,CAAC;IAOjB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,qBAAa,8CAA8C;IAMzD,OAAO,EAAE,MAAM,CAAC;IAShB,MAAM,EAAE,MAAM,CAAC;IAQf,KAAK,EAAE,MAAM,CAAC;IASd,WAAW,EAAE,MAAM,CAAC;IAOpB,UAAU,EAAE,MAAM,CAAC;CACpB"}

package/dist/notifications/notifications-kafka.payloads.js

@@ -0,0 +1,131 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NotificationPasswordResetRequestedEventPayload = exports.NotificationUserCreatedEventPayload = void 0;
+const swagger_1 = require("@nestjs/swagger");
+const class_validator_1 = require("class-validator");
+class NotificationUserCreatedEventPayload {
+    eventId;
+    tenant;
+    email;
+    name;
+    password;
+    occurredAt;
+}
+exports.NotificationUserCreatedEventPayload = NotificationUserCreatedEventPayload;
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'Unique event id used for idempotent processing',
+        example: '2d3ecf0d-8d38-4b95-95c8-d3e903e6f1fe',
+    }),
+    (0, class_validator_1.IsUUID)(),
+    __metadata("design:type", String)
+], NotificationUserCreatedEventPayload.prototype, "eventId", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'Tenant slug that owns the user',
+        example: 'default',
+    }),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MinLength)(1),
+    (0, class_validator_1.MaxLength)(255),
+    __metadata("design:type", String)
+], NotificationUserCreatedEventPayload.prototype, "tenant", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'Created user email address',
+        example: 'maria.silva@example.com',
+    }),
+    (0, class_validator_1.IsEmail)(),
+    (0, class_validator_1.MaxLength)(255),
+    __metadata("design:type", String)
+], NotificationUserCreatedEventPayload.prototype, "email", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'Created user display name',
+        example: 'Maria Silva',
+    }),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MinLength)(1),
+    (0, class_validator_1.MaxLength)(255),
+    __metadata("design:type", String)
+], NotificationUserCreatedEventPayload.prototype, "name", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'Temporary generated password',
+        example: 'tmp-9f2adce',
+    }),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MinLength)(6),
+    (0, class_validator_1.MaxLength)(255),
+    __metadata("design:type", String)
+], NotificationUserCreatedEventPayload.prototype, "password", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'Timestamp when the event was created',
+        example: '2026-03-22T12:30:00.000Z',
+    }),
+    (0, class_validator_1.IsISO8601)(),
+    __metadata("design:type", String)
+], NotificationUserCreatedEventPayload.prototype, "occurredAt", void 0);
+class NotificationPasswordResetRequestedEventPayload {
+    eventId;
+    tenant;
+    email;
+    verifyToken;
+    occurredAt;
+}
+exports.NotificationPasswordResetRequestedEventPayload = NotificationPasswordResetRequestedEventPayload;
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'Unique event id used for idempotent processing',
+        example: 'f5b3790a-1134-4db2-b4e0-ff40ce59d047',
+    }),
+    (0, class_validator_1.IsUUID)(),
+    __metadata("design:type", String)
+], NotificationPasswordResetRequestedEventPayload.prototype, "eventId", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'Tenant slug that owns the user',
+        example: 'default',
+    }),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MinLength)(1),
+    (0, class_validator_1.MaxLength)(255),
+    __metadata("design:type", String)
+], NotificationPasswordResetRequestedEventPayload.prototype, "tenant", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'User email that requested password reset',
+        example: 'maria.silva@example.com',
+    }),
+    (0, class_validator_1.IsEmail)(),
+    (0, class_validator_1.MaxLength)(255),
+    __metadata("design:type", String)
+], NotificationPasswordResetRequestedEventPayload.prototype, "email", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'Password reset verification token',
+        example: 'a3b5f3c1f3c6ef',
+    }),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MinLength)(1),
+    (0, class_validator_1.MaxLength)(255),
+    __metadata("design:type", String)
+], NotificationPasswordResetRequestedEventPayload.prototype, "verifyToken", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'Timestamp when the event was created',
+        example: '2026-03-22T12:30:00.000Z',
+    }),
+    (0, class_validator_1.IsISO8601)(),
+    __metadata("design:type", String)
+], NotificationPasswordResetRequestedEventPayload.prototype, "occurredAt", void 0);

package/dist/users/update-self-user.dto.d.ts

@@ -3,6 +3,5 @@ export declare class UpdateSelfUserDto {
     _atLeastOne?: string;
     name?: string;
     email?: string;
-    password?: string;
 }
 //# sourceMappingURL=update-self-user.dto.d.ts.map

package/dist/users/update-self-user.dto.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"update-self-user.dto.d.ts","sourceRoot":"","sources":["../../src/users/update-self-user.dto.ts"],"names":[],"mappings":"AAIA,sFAAsF;AACtF,qBAAa,iBAAiB;IAG5B,WAAW,CAAC,EAAE,MAAM,CAAC;IAWrB,IAAI,CAAC,EAAE,MAAM,CAAC;IAUd,KAAK,CAAC,EAAE,MAAM,CAAC;IAWf,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB"}
+{"version":3,"file":"update-self-user.dto.d.ts","sourceRoot":"","sources":["../../src/users/update-self-user.dto.ts"],"names":[],"mappings":"AAIA,sFAAsF;AACtF,qBAAa,iBAAiB;IAG5B,WAAW,CAAC,EAAE,MAAM,CAAC;IAWrB,IAAI,CAAC,EAAE,MAAM,CAAC;IAUd,KAAK,CAAC,EAAE,MAAM,CAAC;CAEhB"}

package/dist/users/update-self-user.dto.js

@@ -18,12 +18,11 @@ class UpdateSelfUserDto {
     _atLeastOne;
     name;
     email;
-    password;
 }
 exports.UpdateSelfUserDto = UpdateSelfUserDto;
 __decorate([
     (0, swagger_1.ApiHideProperty)(),
-    (0, at_least_one_of_decorator_1.AtLeastOneOf)(['name', 'email', 'password']),
+    (0, at_least_one_of_decorator_1.AtLeastOneOf)(['name', 'email']),
     __metadata("design:type", String)
 ], UpdateSelfUserDto.prototype, "_atLeastOne", void 0);
 __decorate([
@@ -49,15 +48,3 @@ __decorate([
     (0, class_validator_1.MaxLength)(255),
     __metadata("design:type", String)
 ], UpdateSelfUserDto.prototype, "email", void 0);
-__decorate([
-    (0, swagger_1.ApiPropertyOptional)({
-        description: 'New password (bcrypt-hashed on the auth service)',
-        example: 'senha123',
-        minLength: 6,
-    }),
-    (0, class_validator_1.IsOptional)(),
-    (0, class_validator_1.IsString)(),
-    (0, class_validator_1.MinLength)(6, { message: 'password must be at least 6 characters' }),
-    (0, class_validator_1.MaxLength)(255),
-    __metadata("design:type", String)
-], UpdateSelfUserDto.prototype, "password", void 0);

package/dist/users/update-user-by-admin.dto.d.ts

@@ -5,7 +5,6 @@ export declare class UpdateUserByAdminDto {
     _atLeastOne?: string;
     name?: string;
     email?: string;
-    password?: string;
     role?: AllUserRole;
 }
 //# sourceMappingURL=update-user-by-admin.dto.d.ts.map

package/dist/users/update-user-by-admin.dto.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"update-user-by-admin.dto.d.ts","sourceRoot":"","sources":["../../src/users/update-user-by-admin.dto.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,cAAc,gEAIjB,CAAC;AACX,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAE1D,wEAAwE;AACxE,qBAAa,oBAAoB;IAG/B,WAAW,CAAC,EAAE,MAAM,CAAC;IAWrB,IAAI,CAAC,EAAE,MAAM,CAAC;IAUd,KAAK,CAAC,EAAE,MAAM,CAAC;IAWf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAYlB,IAAI,CAAC,EAAE,WAAW,CAAC;CACpB"}
+{"version":3,"file":"update-user-by-admin.dto.d.ts","sourceRoot":"","sources":["../../src/users/update-user-by-admin.dto.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,cAAc,gEAIjB,CAAC;AACX,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAE1D,wEAAwE;AACxE,qBAAa,oBAAoB;IAG/B,WAAW,CAAC,EAAE,MAAM,CAAC;IAWrB,IAAI,CAAC,EAAE,MAAM,CAAC;IAUd,KAAK,CAAC,EAAE,MAAM,CAAC;IAYf,IAAI,CAAC,EAAE,WAAW,CAAC;CACpB"}

package/dist/users/update-user-by-admin.dto.js

@@ -23,13 +23,12 @@ class UpdateUserByAdminDto {
     _atLeastOne;
     name;
     email;
-    password;
     role;
 }
 exports.UpdateUserByAdminDto = UpdateUserByAdminDto;
 __decorate([
     (0, swagger_1.ApiHideProperty)(),
-    (0, at_least_one_of_decorator_1.AtLeastOneOf)(['name', 'email', 'password', 'role']),
+    (0, at_least_one_of_decorator_1.AtLeastOneOf)(['name', 'email', 'role']),
     __metadata("design:type", String)
 ], UpdateUserByAdminDto.prototype, "_atLeastOne", void 0);
 __decorate([
@@ -55,18 +54,6 @@ __decorate([
     (0, class_validator_1.MaxLength)(255),
     __metadata("design:type", String)
 ], UpdateUserByAdminDto.prototype, "email", void 0);
-__decorate([
-    (0, swagger_1.ApiPropertyOptional)({
-        description: 'New password (bcrypt-hashed on the auth service)',
-        example: 'senha123',
-        minLength: 6,
-    }),
-    (0, class_validator_1.IsOptional)(),
-    (0, class_validator_1.IsString)(),
-    (0, class_validator_1.MinLength)(6, { message: 'password must be at least 6 characters' }),
-    (0, class_validator_1.MaxLength)(255),
-    __metadata("design:type", String)
-], UpdateUserByAdminDto.prototype, "password", void 0);
 __decorate([
     (0, swagger_1.ApiPropertyOptional)({
         description: 'User role',

package/dist/users/user-update-kafka-payloads.d.ts

@@ -6,7 +6,6 @@ export interface AuthUpdateSelfPayload {
     userId: string;
     name?: string;
     email?: string;
-    password?: string;
 }
 /**
  * Kafka payload for auth.update_user_admin (tychat-api → tychat-auth-service).
@@ -18,7 +17,6 @@ export interface AuthUpdateUserAdminPayload {
     targetUserId: string;
     name?: string;
     email?: string;
-    password?: string;
     role?: 'administrator' | 'attendant' | 'health_professional';
 }
 /**

package/dist/users/user-update-kafka-payloads.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"user-update-kafka-payloads.d.ts","sourceRoot":"","sources":["../../src/users/user-update-kafka-payloads.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;GAGG;AACH,MAAM,WAAW,0BAA0B;IACzC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,eAAe,GAAG,WAAW,GAAG,qBAAqB,CAAC;CAC9D;AAED;;GAEG;AACH,MAAM,WAAW,8BAA8B;IAC7C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;CACtB"}
+{"version":3,"file":"user-update-kafka-payloads.d.ts","sourceRoot":"","sources":["../../src/users/user-update-kafka-payloads.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;GAGG;AACH,MAAM,WAAW,0BAA0B;IACzC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,eAAe,GAAG,WAAW,GAAG,qBAAqB,CAAC;CAC9D;AAED;;GAEG;AACH,MAAM,WAAW,8BAA8B;IAC7C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;CACtB"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tychat-contracts",
-  "version": "1.0.51",
+  "version": "1.0.53",
   "description": "DTOs compartilhados com class-validator (API e microserviços)",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/src/index.ts

@@ -10,3 +10,4 @@ export * from './payments';
 export * from './billing';
 export * from './ai';
 export * from './storage';
+export * from './notifications';

package/src/notifications/index.ts

@@ -0,0 +1,4 @@
+export {
+  NotificationUserCreatedEventPayload,
+  NotificationPasswordResetRequestedEventPayload,
+} from './notifications-kafka.payloads';

package/src/notifications/notifications-kafka.payloads.ts

@@ -0,0 +1,95 @@
+import { ApiProperty } from '@nestjs/swagger';
+import { IsEmail, IsISO8601, IsString, IsUUID, MaxLength, MinLength } from 'class-validator';
+
+export class NotificationUserCreatedEventPayload {
+  @ApiProperty({
+    description: 'Unique event id used for idempotent processing',
+    example: '2d3ecf0d-8d38-4b95-95c8-d3e903e6f1fe',
+  })
+  @IsUUID()
+  eventId: string;
+
+  @ApiProperty({
+    description: 'Tenant slug that owns the user',
+    example: 'default',
+  })
+  @IsString()
+  @MinLength(1)
+  @MaxLength(255)
+  tenant: string;
+
+  @ApiProperty({
+    description: 'Created user email address',
+    example: 'maria.silva@example.com',
+  })
+  @IsEmail()
+  @MaxLength(255)
+  email: string;
+
+  @ApiProperty({
+    description: 'Created user display name',
+    example: 'Maria Silva',
+  })
+  @IsString()
+  @MinLength(1)
+  @MaxLength(255)
+  name: string;
+
+  @ApiProperty({
+    description: 'Temporary generated password',
+    example: 'tmp-9f2adce',
+  })
+  @IsString()
+  @MinLength(6)
+  @MaxLength(255)
+  password: string;
+
+  @ApiProperty({
+    description: 'Timestamp when the event was created',
+    example: '2026-03-22T12:30:00.000Z',
+  })
+  @IsISO8601()
+  occurredAt: string;
+}
+
+export class NotificationPasswordResetRequestedEventPayload {
+  @ApiProperty({
+    description: 'Unique event id used for idempotent processing',
+    example: 'f5b3790a-1134-4db2-b4e0-ff40ce59d047',
+  })
+  @IsUUID()
+  eventId: string;
+
+  @ApiProperty({
+    description: 'Tenant slug that owns the user',
+    example: 'default',
+  })
+  @IsString()
+  @MinLength(1)
+  @MaxLength(255)
+  tenant: string;
+
+  @ApiProperty({
+    description: 'User email that requested password reset',
+    example: 'maria.silva@example.com',
+  })
+  @IsEmail()
+  @MaxLength(255)
+  email: string;
+
+  @ApiProperty({
+    description: 'Password reset verification token',
+    example: 'a3b5f3c1f3c6ef',
+  })
+  @IsString()
+  @MinLength(1)
+  @MaxLength(255)
+  verifyToken: string;
+
+  @ApiProperty({
+    description: 'Timestamp when the event was created',
+    example: '2026-03-22T12:30:00.000Z',
+  })
+  @IsISO8601()
+  occurredAt: string;
+}

package/src/users/update-self-user.dto.ts

@@ -5,7 +5,7 @@ import { AtLeastOneOf } from './at-least-one-of.decorator';
 /** Fields the authenticated user may change on their own profile (no role change). */
 export class UpdateSelfUserDto {
   @ApiHideProperty()
-  @AtLeastOneOf(['name', 'email', 'password'])
+  @AtLeastOneOf(['name', 'email'])
   _atLeastOne?: string;
 
   @ApiPropertyOptional({
@@ -29,14 +29,4 @@ export class UpdateSelfUserDto {
   @MaxLength(255)
   email?: string;
 
-  @ApiPropertyOptional({
-    description: 'New password (bcrypt-hashed on the auth service)',
-    example: 'senha123',
-    minLength: 6,
-  })
-  @IsOptional()
-  @IsString()
-  @MinLength(6, { message: 'password must be at least 6 characters' })
-  @MaxLength(255)
-  password?: string;
 }

package/src/users/update-user-by-admin.dto.ts

@@ -12,7 +12,7 @@ export type AllUserRole = (typeof ALL_USER_ROLES)[number];
 /** Fields an administrator may change for any user (including role). */
 export class UpdateUserByAdminDto {
   @ApiHideProperty()
-  @AtLeastOneOf(['name', 'email', 'password', 'role'])
+  @AtLeastOneOf(['name', 'email', 'role'])
   _atLeastOne?: string;
 
   @ApiPropertyOptional({
@@ -36,17 +36,6 @@ export class UpdateUserByAdminDto {
   @MaxLength(255)
   email?: string;
 
-  @ApiPropertyOptional({
-    description: 'New password (bcrypt-hashed on the auth service)',
-    example: 'senha123',
-    minLength: 6,
-  })
-  @IsOptional()
-  @IsString()
-  @MinLength(6, { message: 'password must be at least 6 characters' })
-  @MaxLength(255)
-  password?: string;
-
   @ApiPropertyOptional({
     description: 'User role',
     enum: ALL_USER_ROLES,

package/src/users/user-update-kafka-payloads.ts

@@ -6,7 +6,6 @@ export interface AuthUpdateSelfPayload {
   userId: string;
   name?: string;
   email?: string;
-  password?: string;
 }
 
 /**
@@ -19,7 +18,6 @@ export interface AuthUpdateUserAdminPayload {
   targetUserId: string;
   name?: string;
   email?: string;
-  password?: string;
   role?: 'administrator' | 'attendant' | 'health_professional';
 }