tychat-contracts 1.0.57 → 1.0.59

package/README.md

@@ -5,7 +5,7 @@ DTOs compartilhados com **class-validator** usados pela **tychat-api** e pelos m
 ## Estrutura
 
 - **auth**: `LoginDto`, `RefreshTokenDto`, `RequestPasswordResetDto`, `ConfirmPasswordResetDto`, `AuthLoginResponseDto`, payloads Kafka (`LoginPayload`, `RequestPasswordResetPayload`, etc.)
-- **users**: `CreateUserDto` (sem password para criação por admin), `UserListItemDto`, `UpdateSelfUserDto` (name/email), `UpdateUserByAdminDto` (name/email/role), `UpdatedUserDto`, `ChangeForcePasswordDto`
+- **users**: `CreateUserDto` (sem password para criação por admin), `UserListItemDto`, `UpdateSelfUserDto` (apenas **name**), `UpdateUserByAdminDto` (name/email/role; regras de e-mail na API/auth-service), `UpdatedUserDto`, `ChangeForcePasswordDto`
 - **professionals**: `ProfessionalProfileDto`, `UpdateProfessionalProfileDto`, `CreateProfessionalWithProfileDto`
 - **notifications**: payloads Kafka para notificações de e-mail (`NotificationUserCreatedEventPayload`, `NotificationPasswordResetRequestedEventPayload`)
 
@@ -20,7 +20,7 @@ Nos projetos que consomem (tychat-api, tychat-tenant-service, etc.):
 
 ```json
 "dependencies": {
-  "tychat-contracts": "^1.0.53"
+  "tychat-contracts": "^1.0.58"
 }
 ```
 

package/dist/users/update-self-user.dto.d.ts

@@ -1,7 +1,6 @@
-/** Fields the authenticated user may change on their own profile (no role change). */
+/** Fields the authenticated user may change on their own profile (no role change). Email is not editable here. */
 export declare class UpdateSelfUserDto {
     _atLeastOne?: string;
     name?: string;
-    email?: string;
 }
 //# sourceMappingURL=update-self-user.dto.d.ts.map

package/dist/users/update-self-user.dto.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"update-self-user.dto.d.ts","sourceRoot":"","sources":["../../src/users/update-self-user.dto.ts"],"names":[],"mappings":"AAIA,sFAAsF;AACtF,qBAAa,iBAAiB;IAG5B,WAAW,CAAC,EAAE,MAAM,CAAC;IAWrB,IAAI,CAAC,EAAE,MAAM,CAAC;IAUd,KAAK,CAAC,EAAE,MAAM,CAAC;CAEhB"}
+{"version":3,"file":"update-self-user.dto.d.ts","sourceRoot":"","sources":["../../src/users/update-self-user.dto.ts"],"names":[],"mappings":"AAIA,kHAAkH;AAClH,qBAAa,iBAAiB;IAG5B,WAAW,CAAC,EAAE,MAAM,CAAC;IAWrB,IAAI,CAAC,EAAE,MAAM,CAAC;CAEf"}

package/dist/users/update-self-user.dto.js

@@ -13,16 +13,15 @@ exports.UpdateSelfUserDto = void 0;
 const swagger_1 = require("@nestjs/swagger");
 const class_validator_1 = require("class-validator");
 const at_least_one_of_decorator_1 = require("./at-least-one-of.decorator");
-/** Fields the authenticated user may change on their own profile (no role change). */
+/** Fields the authenticated user may change on their own profile (no role change). Email is not editable here. */
 class UpdateSelfUserDto {
     _atLeastOne;
     name;
-    email;
 }
 exports.UpdateSelfUserDto = UpdateSelfUserDto;
 __decorate([
     (0, swagger_1.ApiHideProperty)(),
-    (0, at_least_one_of_decorator_1.AtLeastOneOf)(['name', 'email']),
+    (0, at_least_one_of_decorator_1.AtLeastOneOf)(['name']),
     __metadata("design:type", String)
 ], UpdateSelfUserDto.prototype, "_atLeastOne", void 0);
 __decorate([
@@ -37,14 +36,3 @@ __decorate([
     (0, class_validator_1.MaxLength)(255),
     __metadata("design:type", String)
 ], UpdateSelfUserDto.prototype, "name", void 0);
-__decorate([
-    (0, swagger_1.ApiPropertyOptional)({
-        description: 'E-mail (unique per tenant)',
-        example: 'maria@empresa.com',
-        maxLength: 255,
-    }),
-    (0, class_validator_1.IsOptional)(),
-    (0, class_validator_1.IsEmail)({}, { message: 'email must be a valid e-mail' }),
-    (0, class_validator_1.MaxLength)(255),
-    __metadata("design:type", String)
-], UpdateSelfUserDto.prototype, "email", void 0);

package/dist/users/update-user-by-admin.dto.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"update-user-by-admin.dto.d.ts","sourceRoot":"","sources":["../../src/users/update-user-by-admin.dto.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,cAAc,gEAIjB,CAAC;AACX,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAE1D,wEAAwE;AACxE,qBAAa,oBAAoB;IAG/B,WAAW,CAAC,EAAE,MAAM,CAAC;IAWrB,IAAI,CAAC,EAAE,MAAM,CAAC;IAUd,KAAK,CAAC,EAAE,MAAM,CAAC;IAYf,IAAI,CAAC,EAAE,WAAW,CAAC;CACpB"}
+{"version":3,"file":"update-user-by-admin.dto.d.ts","sourceRoot":"","sources":["../../src/users/update-user-by-admin.dto.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,cAAc,gEAIjB,CAAC;AACX,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAE1D,wEAAwE;AACxE,qBAAa,oBAAoB;IAG/B,WAAW,CAAC,EAAE,MAAM,CAAC;IAWrB,IAAI,CAAC,EAAE,MAAM,CAAC;IAWd,KAAK,CAAC,EAAE,MAAM,CAAC;IAYf,IAAI,CAAC,EAAE,WAAW,CAAC;CACpB"}

package/dist/users/update-user-by-admin.dto.js

@@ -45,7 +45,7 @@ __decorate([
 ], UpdateUserByAdminDto.prototype, "name", void 0);
 __decorate([
     (0, swagger_1.ApiPropertyOptional)({
-        description: 'E-mail (unique per tenant)',
+        description: 'E-mail (único por tenant). Só pode ser alterado para utilizadores que não sejam administradores; não é permitido alterar o próprio e-mail nem o de outros administradores.',
         example: 'maria@empresa.com',
         maxLength: 255,
     }),

package/dist/users/user-update-kafka-payloads.d.ts

@@ -5,15 +5,17 @@ export interface AuthUpdateSelfPayload {
     tenant?: string;
     userId: string;
     name?: string;
-    email?: string;
 }
 /**
  * Kafka payload for auth.update_user_admin (tychat-api → tychat-auth-service).
  * actorRole must be "administrator" or the handler rejects the request.
+ * actorUserId is the JWT subject of the caller (used to block self email changes).
  */
 export interface AuthUpdateUserAdminPayload {
     tenant?: string;
     actorRole: string;
+    /** JWT `sub` of the administrator performing the update */
+    actorUserId: string;
     targetUserId: string;
     name?: string;
     email?: string;

package/dist/users/user-update-kafka-payloads.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"user-update-kafka-payloads.d.ts","sourceRoot":"","sources":["../../src/users/user-update-kafka-payloads.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;GAGG;AACH,MAAM,WAAW,0BAA0B;IACzC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,eAAe,GAAG,WAAW,GAAG,qBAAqB,CAAC;CAC9D;AAED;;GAEG;AACH,MAAM,WAAW,8BAA8B;IAC7C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;CACtB"}
+{"version":3,"file":"user-update-kafka-payloads.d.ts","sourceRoot":"","sources":["../../src/users/user-update-kafka-payloads.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;GAIG;AACH,MAAM,WAAW,0BAA0B;IACzC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,2DAA2D;IAC3D,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,eAAe,GAAG,WAAW,GAAG,qBAAqB,CAAC;CAC9D;AAED;;GAEG;AACH,MAAM,WAAW,8BAA8B;IAC7C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;CACtB"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tychat-contracts",
-  "version": "1.0.57",
+  "version": "1.0.59",
   "description": "DTOs compartilhados com class-validator (API e microserviços)",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/src/users/update-self-user.dto.ts

@@ -1,11 +1,11 @@
 import { ApiHideProperty, ApiPropertyOptional } from '@nestjs/swagger';
-import { IsEmail, IsOptional, IsString, MaxLength, MinLength } from 'class-validator';
+import { IsOptional, IsString, MaxLength, MinLength } from 'class-validator';
 import { AtLeastOneOf } from './at-least-one-of.decorator';
 
-/** Fields the authenticated user may change on their own profile (no role change). */
+/** Fields the authenticated user may change on their own profile (no role change). Email is not editable here. */
 export class UpdateSelfUserDto {
   @ApiHideProperty()
-  @AtLeastOneOf(['name', 'email'])
+  @AtLeastOneOf(['name'])
   _atLeastOne?: string;
 
   @ApiPropertyOptional({
@@ -19,14 +19,4 @@ export class UpdateSelfUserDto {
   @MaxLength(255)
   name?: string;
 
-  @ApiPropertyOptional({
-    description: 'E-mail (unique per tenant)',
-    example: 'maria@empresa.com',
-    maxLength: 255,
-  })
-  @IsOptional()
-  @IsEmail({}, { message: 'email must be a valid e-mail' })
-  @MaxLength(255)
-  email?: string;
-
 }

package/src/users/update-user-by-admin.dto.ts

@@ -27,7 +27,8 @@ export class UpdateUserByAdminDto {
   name?: string;
 
   @ApiPropertyOptional({
-    description: 'E-mail (unique per tenant)',
+    description:
+      'E-mail (único por tenant). Só pode ser alterado para utilizadores que não sejam administradores; não é permitido alterar o próprio e-mail nem o de outros administradores.',
     example: 'maria@empresa.com',
     maxLength: 255,
   })

package/src/users/user-update-kafka-payloads.ts

@@ -5,16 +5,18 @@ export interface AuthUpdateSelfPayload {
   tenant?: string;
   userId: string;
   name?: string;
-  email?: string;
 }
 
 /**
  * Kafka payload for auth.update_user_admin (tychat-api → tychat-auth-service).
  * actorRole must be "administrator" or the handler rejects the request.
+ * actorUserId is the JWT subject of the caller (used to block self email changes).
  */
 export interface AuthUpdateUserAdminPayload {
   tenant?: string;
   actorRole: string;
+  /** JWT `sub` of the administrator performing the update */
+  actorUserId: string;
   targetUserId: string;
   name?: string;
   email?: string;