@antelopejs/dms-saas 0.0.1

package/dist/routes/platformOwner/workspaces-admin.js

@@ -0,0 +1,140 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SaasWorkspacesAdminController = void 0;
+const node_crypto_1 = require("node:crypto");
+const interface_api_1 = require("@antelopejs/interface-api");
+const interface_api_util_1 = require("@antelopejs/interface-api-util");
+const interface_database_decorators_1 = require("@antelopejs/interface-database-decorators");
+const db_1 = require("@antelopejs/interface-dms/db");
+const tenant_lifecycle_1 = require("@antelopejs/interface-dms/tenant-lifecycle");
+const auth_1 = require("@antelopejs/interface-dms/auth");
+const billing_state_1 = require("../../billing-state");
+const db_2 = require("../../db");
+const notifications_1 = require("../../notifications");
+const stripe_1 = require("../../stripe");
+const utils_1 = require("../../utils");
+const complimentary_1 = require("../../workspaces/complimentary");
+const HTTP_NOT_FOUND = 404;
+const HTTP_BAD_REQUEST = 400;
+const ACTIVE_STATUS = "active";
+const COMP_ICON = "i-ph-gift";
+const ANY_AUDIENCE = "any";
+const NOTIF_COMP_TITLE = "$saas.notifications.payload.complimentary_access_granted.title";
+const NOTIF_COMP_DESC = "$saas.notifications.payload.complimentary_access_granted.description";
+async function upsertFreeSubscription(tenantId, planId, freeUntil, createdBy) {
+    const tenantSubscriptionModel = (0, interface_database_decorators_1.GetModel)(db_2.TenantSubscriptionModel, tenantId);
+    const existing = await tenantSubscriptionModel.findOne();
+    const operationId = (0, node_crypto_1.randomUUID)();
+    if (existing)
+        await tenantSubscriptionModel.beginTransition(existing, {
+            operationId,
+            kind: "change_plan",
+            targetPlanId: planId,
+            requestedAt: new Date(),
+        });
+    if (existing?.stripeSubscriptionId) {
+        await (0, stripe_1.getStripeClient)().subscriptions.cancel(existing.stripeSubscriptionId, { idempotencyKey: `admin-grant-free:${operationId}` });
+    }
+    const payload = {
+        planId,
+        status: ACTIVE_STATUS,
+        stripeSubscriptionId: null,
+        stripeCheckoutSessionId: null,
+        refundRequestedAt: null,
+        freeUntil,
+        isComplimentary: true,
+        paidUsageStartedAt: null,
+        paidUsagePeriods: (0, complimentary_1.closePaidUsagePeriods)(existing, new Date()),
+        updatedAt: new Date(),
+    };
+    if (existing) {
+        await tenantSubscriptionModel.completeTransition(existing._id, operationId, payload);
+    }
+    else {
+        await tenantSubscriptionModel.insert([
+            {
+                ...payload,
+                _id: tenantId,
+                stripeCustomerId: null,
+                createdBy,
+                createdAt: new Date(),
+            },
+        ]);
+    }
+    await (0, billing_state_1.recomputeTenantBillingState)(tenantId);
+}
+async function assertPlanIsAvailableForTenant(plan, tenantId) {
+    (0, interface_api_util_1.assert)(plan && !plan.isDeleted && plan.isActive, HTTP_BAD_REQUEST, "saas.errors.plan.invalid");
+    const billingInfo = await (0, interface_database_decorators_1.GetModel)(db_2.TenantBillingInfoModel, tenantId).findOne();
+    (0, interface_api_util_1.assert)(plan.audience === ANY_AUDIENCE ||
+        plan.audience === billingInfo?.customerType, HTTP_BAD_REQUEST, "saas.errors.plan.not_available_for_customer_type");
+}
+class SaasWorkspacesAdminController extends (0, interface_api_1.Controller)("/api/saas/workspaces") {
+    async getAdminState(_user, tenantId) {
+        const tenant = await this.tenantModel.get(tenantId);
+        (0, interface_api_util_1.assert)(tenant, HTTP_NOT_FOUND, "saas.errors.workspace.not_found");
+        const sub = await (0, interface_database_decorators_1.GetModel)(db_2.TenantSubscriptionModel, tenantId).findOne();
+        return {
+            status: sub?.status ?? null,
+            planId: sub?.planId ?? null,
+            hasStripeSubscription: !!sub?.stripeSubscriptionId,
+            freeUntil: sub?.freeUntil ?? null,
+            domainTransition: sub?.domainTransition ?? null,
+            deletionStartedAt: sub?.deletionStartedAt ?? null,
+        };
+    }
+    async grantFreeAccess(user, tenantId, body) {
+        const tenant = await this.tenantModel.get(tenantId);
+        (0, interface_api_util_1.assert)(tenant, HTTP_NOT_FOUND, "saas.errors.workspace.not_found");
+        const plan = await this.planModel.get(body.planId);
+        (0, interface_api_util_1.assert)(plan, HTTP_BAD_REQUEST, "saas.errors.plan.invalid");
+        await assertPlanIsAvailableForTenant(plan, tenantId);
+        const freeUntil = (0, utils_1.parseFutureDate)(body.freeUntil, "saas.workspaces.admin.create.error.free_until_past");
+        await (0, tenant_lifecycle_1.runTenantLifecycleOperation)(tenantId, () => upsertFreeSubscription(tenantId, body.planId, freeUntil, user._id));
+        await (0, notifications_1.notifyTenantOwners)(tenantId, notifications_1.complimentaryAccessGrantedSubject, {
+            icon: COMP_ICON,
+            title: NOTIF_COMP_TITLE,
+            description: NOTIF_COMP_DESC,
+        });
+        return { tenantId, planId: body.planId, freeUntil };
+    }
+}
+exports.SaasWorkspacesAdminController = SaasWorkspacesAdminController;
+__decorate([
+    (0, interface_database_decorators_1.Model)(db_1.TenantModel),
+    __metadata("design:type", db_1.TenantModel)
+], SaasWorkspacesAdminController.prototype, "tenantModel", void 0);
+__decorate([
+    (0, interface_database_decorators_1.Model)(db_2.PlanModel),
+    __metadata("design:type", db_2.PlanModel)
+], SaasWorkspacesAdminController.prototype, "planModel", void 0);
+__decorate([
+    (0, interface_api_1.Get)("/:tenantId/admin-state"),
+    __param(0, (0, auth_1.AuthOwnerOnly)()),
+    __param(1, (0, interface_api_1.Parameter)("tenantId", "param")),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Function, String]),
+    __metadata("design:returntype", Promise)
+], SaasWorkspacesAdminController.prototype, "getAdminState", null);
+__decorate([
+    (0, interface_api_1.Post)("/:tenantId/grant-free-access"),
+    __param(0, (0, auth_1.AuthOwnerOnly)()),
+    __param(1, (0, interface_api_1.Parameter)("tenantId", "param")),
+    __param(2, (0, interface_api_1.JSONBody)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Function, String, Object]),
+    __metadata("design:returntype", Promise)
+], SaasWorkspacesAdminController.prototype, "grantFreeAccess", null);
+//# sourceMappingURL=workspaces-admin.js.map

package/dist/routes/platformOwner/workspaces-admin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspaces-admin.js","sourceRoot":"","sources":["../../../src/routes/platformOwner/workspaces-admin.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,6CAAyC;AACzC,6DAMmC;AACnC,uEAAwD;AACxD,6FAA4E;AAC5E,qDAA2D;AAC3D,iFAAyF;AACzF,yDAA+D;AAE/D,uDAAkE;AAClE,iCAOkB;AAClB,uDAG6B;AAC7B,yCAA+C;AAC/C,uCAA8C;AAC9C,kEAAuE;AAEvE,MAAM,cAAc,GAAG,GAAG,CAAC;AAC3B,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAE7B,MAAM,aAAa,GAA6B,QAAQ,CAAC;AAEzD,MAAM,SAAS,GAAG,WAAW,CAAC;AAC9B,MAAM,YAAY,GAAG,KAAK,CAAC;AAE3B,MAAM,gBAAgB,GACpB,gEAAgE,CAAC;AACnE,MAAM,eAAe,GACnB,sEAAsE,CAAC;AAgBzE,KAAK,UAAU,sBAAsB,CACnC,QAAgB,EAChB,MAAc,EACd,SAAsB,EACtB,SAAiB;IAEjB,MAAM,uBAAuB,GAAG,IAAA,wCAAQ,EAAC,4BAAuB,EAAE,QAAQ,CAAC,CAAC;IAC5E,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAAC,OAAO,EAAE,CAAC;IACzD,MAAM,WAAW,GAAG,IAAA,wBAAU,GAAE,CAAC;IACjC,IAAI,QAAQ;QACV,MAAM,uBAAuB,CAAC,eAAe,CAAC,QAAQ,EAAE;YACtD,WAAW;YACX,IAAI,EAAE,aAAa;YACnB,YAAY,EAAE,MAAM;YACpB,WAAW,EAAE,IAAI,IAAI,EAAE;SACxB,CAAC,CAAC;IACL,IAAI,QAAQ,EAAE,oBAAoB,EAAE,CAAC;QACnC,MAAM,IAAA,wBAAe,GAAE,CAAC,aAAa,CAAC,MAAM,CAC1C,QAAQ,CAAC,oBAAoB,EAC7B,EAAE,cAAc,EAAE,oBAAoB,WAAW,EAAE,EAAE,CACtD,CAAC;IACJ,CAAC;IAMD,MAAM,OAAO,GAAG;QACd,MAAM;QACN,MAAM,EAAE,aAAa;QACrB,oBAAoB,EAAE,IAAI;QAC1B,uBAAuB,EAAE,IAAI;QAC7B,iBAAiB,EAAE,IAAI;QACvB,SAAS;QACT,eAAe,EAAE,IAAI;QACrB,kBAAkB,EAAE,IAAI;QACxB,gBAAgB,EAAE,IAAA,qCAAqB,EAAC,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC;QAC7D,SAAS,EAAE,IAAI,IAAI,EAAE;KACtB,CAAC;IACF,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,uBAAuB,CAAC,kBAAkB,CAC9C,QAAQ,CAAC,GAAG,EACZ,WAAW,EACX,OAAO,CACR,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,MAAM,uBAAuB,CAAC,MAAM,CAAC;YACnC;gBACE,GAAG,OAAO;gBACV,GAAG,EAAE,QAAQ;gBACb,gBAAgB,EAAE,IAAI;gBACtB,SAAS;gBACT,SAAS,EAAE,IAAI,IAAI,EAAE;aACtB;SACF,CAAC,CAAC;IACL,CAAC;IACD,MAAM,IAAA,2CAA2B,EAAC,QAAQ,CAAC,CAAC;AAC9C,CAAC;AAED,KAAK,UAAU,8BAA8B,CAC3C,IAAU,EACV,QAAgB;IAEhB,IAAA,2BAAM,EACJ,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,QAAQ,EACxC,gBAAgB,EAChB,0BAA0B,CAC3B,CAAC;IACF,MAAM,WAAW,GAAG,MAAM,IAAA,wCAAQ,EAChC,2BAAsB,EACtB,QAAQ,CACT,CAAC,OAAO,EAAE,CAAC;IACZ,IAAA,2BAAM,EACJ,IAAI,CAAC,QAAQ,KAAK,YAAY;QAC5B,IAAI,CAAC,QAAQ,KAAK,WAAW,EAAE,YAAY,EAC7C,gBAAgB,EAChB,kDAAkD,CACnD,CAAC;AACJ,CAAC;AAED,MAAa,6BAA8B,SAAQ,IAAA,0BAAU,EAC3D,sBAAsB,CACvB;IAQO,AAAN,KAAK,CAAC,aAAa,CACA,KAAW,EACI,QAAgB;QAEhD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACpD,IAAA,2BAAM,EAAC,MAAM,EAAE,cAAc,EAAE,iCAAiC,CAAC,CAAC;QAClE,MAAM,GAAG,GAAG,MAAM,IAAA,wCAAQ,EAAC,4BAAuB,EAAE,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC;QACxE,OAAO;YACL,MAAM,EAAE,GAAG,EAAE,MAAM,IAAI,IAAI;YAC3B,MAAM,EAAE,GAAG,EAAE,MAAM,IAAI,IAAI;YAC3B,qBAAqB,EAAE,CAAC,CAAC,GAAG,EAAE,oBAAoB;YAClD,SAAS,EAAE,GAAG,EAAE,SAAS,IAAI,IAAI;YACjC,gBAAgB,EAAE,GAAG,EAAE,gBAAgB,IAAI,IAAI;YAC/C,iBAAiB,EAAE,GAAG,EAAE,iBAAiB,IAAI,IAAI;SAClD,CAAC;IACJ,CAAC;IAGK,AAAN,KAAK,CAAC,eAAe,CACF,IAAU,EACK,QAAgB,EACpC,IAAyB;QAErC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACpD,IAAA,2BAAM,EAAC,MAAM,EAAE,cAAc,EAAE,iCAAiC,CAAC,CAAC;QAClE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnD,IAAA,2BAAM,EAAC,IAAI,EAAE,gBAAgB,EAAE,0BAA0B,CAAC,CAAC;QAC3D,MAAM,8BAA8B,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACrD,MAAM,SAAS,GAAG,IAAA,uBAAe,EAC/B,IAAI,CAAC,SAAS,EACd,oDAAoD,CACrD,CAAC;QACF,MAAM,IAAA,8CAA2B,EAAC,QAAQ,EAAE,GAAG,EAAE,CAC/C,sBAAsB,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CACnE,CAAC;QACF,MAAM,IAAA,kCAAkB,EAAC,QAAQ,EAAE,iDAAiC,EAAE;YACpE,IAAI,EAAE,SAAS;YACf,KAAK,EAAE,gBAAgB;YACvB,WAAW,EAAE,eAAe;SAC7B,CAAC,CAAC;QACH,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC;IACtD,CAAC;CACF;AApDD,sEAoDC;AAhDS;IADP,IAAA,qCAAK,EAAC,gBAAW,CAAC;8BACE,gBAAW;kEAAC;AAGzB;IADP,IAAA,qCAAK,EAAC,cAAS,CAAC;8BACE,cAAS;gEAAC;AAGvB;IADL,IAAA,mBAAG,EAAC,wBAAwB,CAAC;IAE3B,WAAA,IAAA,oBAAa,GAAE,CAAA;IACf,WAAA,IAAA,yBAAS,EAAC,UAAU,EAAE,OAAO,CAAC,CAAA;;;;kEAahC;AAGK;IADL,IAAA,oBAAI,EAAC,8BAA8B,CAAC;IAElC,WAAA,IAAA,oBAAa,GAAE,CAAA;IACf,WAAA,IAAA,yBAAS,EAAC,UAAU,EAAE,OAAO,CAAC,CAAA;IAC9B,WAAA,IAAA,wBAAQ,GAAE,CAAA;;;;oEAoBZ"}

package/dist/routes/public/index.d.ts

@@ -0,0 +1,3 @@
+export * from "./legal-documents";
+export * from "./register";
+export * from "./webhooks";

package/dist/routes/public/index.js

@@ -0,0 +1,20 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./legal-documents"), exports);
+__exportStar(require("./register"), exports);
+__exportStar(require("./webhooks"), exports);
+//# sourceMappingURL=index.js.map

package/dist/routes/public/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/routes/public/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,oDAAkC;AAClC,6CAA2B;AAC3B,6CAA2B"}

package/dist/routes/public/legal-documents.d.ts

@@ -0,0 +1,15 @@
+import type { User } from "@antelopejs/interface-dms/auth/db";
+import { LegalDocumentsModel } from "../../db";
+interface LegalDocumentsBody {
+    termsOfUse: string;
+    termsAndConditions: string;
+    privacyPolicy: string;
+}
+export declare function ensureLegalDocumentsSingleton(): Promise<void>;
+declare const LegalDocumentsController_base: import("@antelopejs/interface-api").ControllerClass<object>;
+export declare class LegalDocumentsController extends LegalDocumentsController_base {
+    legalDocumentsModel: LegalDocumentsModel;
+    get(): Promise<import("@antelopejs/interface-dms-saas/dist/db/tables/legalDocuments.table").LegalDocuments>;
+    update(_user: User, body: LegalDocumentsBody): Promise<import("@antelopejs/interface-dms-saas/dist/db/tables/legalDocuments.table").LegalDocuments | undefined>;
+}
+export {};

package/dist/routes/public/legal-documents.js

@@ -0,0 +1,72 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LegalDocumentsController = void 0;
+exports.ensureLegalDocumentsSingleton = ensureLegalDocumentsSingleton;
+const interface_api_1 = require("@antelopejs/interface-api");
+const interface_database_decorators_1 = require("@antelopejs/interface-database-decorators");
+const auth_1 = require("@antelopejs/interface-dms/auth");
+const db_1 = require("../../db");
+const EMPTY_DOCUMENTS = {
+    _id: db_1.LEGAL_DOCUMENTS_SINGLETON_ID,
+    termsOfUse: "",
+    termsAndConditions: "",
+    privacyPolicy: "",
+    updatedAt: new Date(0),
+};
+async function ensureLegalDocumentsSingleton() {
+    const legalDocumentsModel = (0, interface_database_decorators_1.GetModel)(db_1.LegalDocumentsModel);
+    const existing = await legalDocumentsModel.get(db_1.LEGAL_DOCUMENTS_SINGLETON_ID);
+    if (existing)
+        return;
+    await legalDocumentsModel.insert([
+        { ...EMPTY_DOCUMENTS, updatedAt: new Date() },
+    ]);
+}
+class LegalDocumentsController extends (0, interface_api_1.Controller)("/api/saas/legal-documents") {
+    async get() {
+        const existing = await this.legalDocumentsModel.get(db_1.LEGAL_DOCUMENTS_SINGLETON_ID);
+        return existing ?? EMPTY_DOCUMENTS;
+    }
+    async update(_user, body) {
+        await ensureLegalDocumentsSingleton();
+        await this.legalDocumentsModel.update(db_1.LEGAL_DOCUMENTS_SINGLETON_ID, {
+            termsOfUse: body.termsOfUse,
+            termsAndConditions: body.termsAndConditions,
+            privacyPolicy: body.privacyPolicy,
+            updatedAt: new Date(),
+        });
+        return this.legalDocumentsModel.get(db_1.LEGAL_DOCUMENTS_SINGLETON_ID);
+    }
+}
+exports.LegalDocumentsController = LegalDocumentsController;
+__decorate([
+    (0, interface_database_decorators_1.Model)(db_1.LegalDocumentsModel),
+    __metadata("design:type", db_1.LegalDocumentsModel)
+], LegalDocumentsController.prototype, "legalDocumentsModel", void 0);
+__decorate([
+    (0, interface_api_1.Get)("/"),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Promise)
+], LegalDocumentsController.prototype, "get", null);
+__decorate([
+    (0, interface_api_1.Put)("/"),
+    __param(0, (0, auth_1.AuthOwnerOnly)()),
+    __param(1, (0, interface_api_1.JSONBody)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Function, Object]),
+    __metadata("design:returntype", Promise)
+], LegalDocumentsController.prototype, "update", null);
+//# sourceMappingURL=legal-documents.js.map

package/dist/routes/public/legal-documents.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"legal-documents.js","sourceRoot":"","sources":["../../../src/routes/public/legal-documents.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAoBA,sEAOC;AA3BD,6DAA2E;AAC3E,6FAA4E;AAC5E,yDAA+D;AAE/D,iCAA6E;AAQ7E,MAAM,eAAe,GAAG;IACtB,GAAG,EAAE,iCAA4B;IACjC,UAAU,EAAE,EAAE;IACd,kBAAkB,EAAE,EAAE;IACtB,aAAa,EAAE,EAAE;IACjB,SAAS,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC;CACvB,CAAC;AAEK,KAAK,UAAU,6BAA6B;IACjD,MAAM,mBAAmB,GAAG,IAAA,wCAAQ,EAAC,wBAAmB,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,GAAG,CAAC,iCAA4B,CAAC,CAAC;IAC7E,IAAI,QAAQ;QAAE,OAAO;IACrB,MAAM,mBAAmB,CAAC,MAAM,CAAC;QAC/B,EAAE,GAAG,eAAe,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE;KAC9C,CAAC,CAAC;AACL,CAAC;AAED,MAAa,wBAAyB,SAAQ,IAAA,0BAAU,EACtD,2BAA2B,CAC5B;IAKO,AAAN,KAAK,CAAC,GAAG;QACP,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,GAAG,CACjD,iCAA4B,CAC7B,CAAC;QACF,OAAO,QAAQ,IAAI,eAAe,CAAC;IACrC,CAAC;IAGK,AAAN,KAAK,CAAC,MAAM,CACO,KAAW,EAChB,IAAwB;QAEpC,MAAM,6BAA6B,EAAE,CAAC;QACtC,MAAM,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,iCAA4B,EAAE;YAClE,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;YAC3C,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,SAAS,EAAE,IAAI,IAAI,EAAE;SACtB,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,iCAA4B,CAAC,CAAC;IACpE,CAAC;CACF;AA5BD,4DA4BC;AAxBS;IADP,IAAA,qCAAK,EAAC,wBAAmB,CAAC;8BACE,wBAAmB;qEAAC;AAG3C;IADL,IAAA,mBAAG,EAAC,GAAG,CAAC;;;;mDAMR;AAGK;IADL,IAAA,mBAAG,EAAC,GAAG,CAAC;IAEN,WAAA,IAAA,oBAAa,GAAE,CAAA;IACf,WAAA,IAAA,wBAAQ,GAAE,CAAA;;;;sDAUZ"}

package/dist/routes/public/register.d.ts

@@ -0,0 +1,48 @@
+import { SessionModel, type User, UserModel } from "@antelopejs/interface-dms/auth/db";
+import type { WorkspaceProvisioningPayload } from "../../workspaces";
+interface RegisterBody extends WorkspaceProvisioningPayload {
+    email: string;
+    password: string;
+    name: string;
+}
+interface FinalizeBody extends WorkspaceProvisioningPayload {
+    tenant_assignment_token: string;
+}
+interface PendingRegistrationBody {
+    tenant_assignment_token: string;
+}
+interface PendingRegistration {
+    email: string;
+    name: string;
+    provider: string | null;
+}
+interface AuthResponse {
+    token_type: string;
+    access_token: string;
+    expires_in: number;
+    refresh_token: string;
+    user: Partial<User>;
+}
+interface SetupIntentResponse {
+    clientSecret: string | null;
+}
+interface RegisterResult {
+    userId: string;
+    tenantId: string;
+}
+declare const SaasRegisterApiController_base: import("@antelopejs/interface-api").ControllerClass<object>;
+export declare class SaasRegisterApiController extends SaasRegisterApiController_base {
+    userModel: UserModel;
+    sessionModel: SessionModel;
+    userAgent: string;
+    forwardedFor: string;
+    private ensureEmailAvailable;
+    private ensureNoWorkspaceYet;
+    private createInitialUser;
+    private issueAuthResponse;
+    createSetupIntent(): Promise<SetupIntentResponse>;
+    register(body: RegisterBody): Promise<RegisterResult>;
+    describePendingRegistration(body: PendingRegistrationBody): Promise<PendingRegistration>;
+    finalize(body: FinalizeBody): Promise<AuthResponse>;
+}
+export {};

package/dist/routes/public/register.js

@@ -0,0 +1,193 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SaasRegisterApiController = void 0;
+const node_crypto_1 = require("node:crypto");
+const interface_api_1 = require("@antelopejs/interface-api");
+const interface_api_util_1 = require("@antelopejs/interface-api-util");
+const logging_1 = require("@antelopejs/interface-core/logging");
+const interface_database_1 = require("@antelopejs/interface-database");
+const interface_database_decorators_1 = require("@antelopejs/interface-database-decorators");
+const db_1 = require("@antelopejs/interface-dms/db");
+const auth_1 = require("@antelopejs/interface-dms/auth");
+const db_2 = require("@antelopejs/interface-dms/auth/db");
+const auth_2 = require("../../auth");
+const config_1 = require("../../config");
+const stripe_1 = require("../../stripe");
+const workspaces_1 = require("../../workspaces");
+const HTTP_BAD_REQUEST = 400;
+const AUTH_KEY_BYTES = 32;
+function generateAuthKey() {
+    return (0, node_crypto_1.randomBytes)(AUTH_KEY_BYTES).toString("hex");
+}
+function toStripeProfile(payload, email, fallbackName) {
+    return {
+        email,
+        fallbackName,
+        customerType: payload.customerType,
+        companyName: payload.companyName,
+        vatNumber: payload.vatNumber,
+        address: payload.address,
+        paymentMethodId: payload.paymentMethodId,
+    };
+}
+class SaasRegisterApiController extends (0, interface_api_1.Controller)("/api/saas/register") {
+    async ensureEmailAvailable(email) {
+        const existing = await this.userModel.getByEmail(email);
+        (0, interface_api_util_1.assert)(!existing, HTTP_BAD_REQUEST, "saas.errors.user.email_in_use");
+    }
+    async ensureNoWorkspaceYet(userId) {
+        const memberModel = (0, interface_database_decorators_1.GetModel)(db_1.TenantMemberModel, interface_database_1.CROSS_INSTANCE);
+        const alreadyHasWorkspace = await memberModel.existsByUser(userId);
+        (0, interface_api_util_1.assert)(!alreadyHasWorkspace, HTTP_BAD_REQUEST, "saas.errors.user.already_has_workspace");
+    }
+    async createInitialUser(body) {
+        const userInsert = await this.userModel.insert([
+            {
+                email: body.email,
+                name: body.name,
+                password: body.password,
+                authKey: generateAuthKey(),
+                owner: false,
+                createdAt: new Date(),
+            },
+        ]);
+        return userInsert[0];
+    }
+    async issueAuthResponse(user, tenantId) {
+        const sessionId = await (0, auth_1.createSession)(this.sessionModel, user._id, this.userAgent || "", this.forwardedFor || "");
+        const accessTokenData = await (0, auth_1.generateAccessToken)(tenantId, user, sessionId);
+        const refreshTokenData = await (0, auth_1.generateRefreshToken)(tenantId, user, sessionId);
+        await this.sessionModel.update(sessionId, {
+            refreshToken: refreshTokenData.token,
+        });
+        return {
+            token_type: "Bearer",
+            access_token: accessTokenData.token,
+            expires_in: accessTokenData.expiresIn,
+            refresh_token: refreshTokenData.token,
+            user: await (0, auth_1.sanitizeUser)(user),
+        };
+    }
+    async createSetupIntent() {
+        (0, config_1.assertAdmissionOpen)();
+        return (0, stripe_1.createCardSetupIntent)();
+    }
+    async register(body) {
+        (0, config_1.assertAdmissionOpen)();
+        (0, workspaces_1.assertBillingCountry)(body.address);
+        (0, workspaces_1.assertRegistrationExtras)(body.extras);
+        await (0, workspaces_1.ensurePlanIsAvailableForCustomer)(body.planId, body.customerType);
+        await this.ensureEmailAvailable(body.email);
+        const handles = {};
+        try {
+            handles.userId = await this.createInitialUser(body);
+            const { tenantId } = await (0, workspaces_1.provisionWorkspace)({
+                userId: handles.userId,
+                payload: body,
+                stripeCustomerProfile: toStripeProfile(body, body.email, body.name),
+                card: await (0, workspaces_1.resolveCardDetails)(body.paymentMethodId),
+                handles,
+            });
+            return { userId: handles.userId, tenantId };
+        }
+        catch (error) {
+            await (0, workspaces_1.rollbackWorkspaceProvisioning)(handles);
+            if (handles.userId && !handles.mustPreserveWorkspace) {
+                await this.userModel.delete(handles.userId).catch((cleanupError) => {
+                    logging_1.Logging.Error(`[dms-saas:register] rollback failed to delete user ${handles.userId}`, cleanupError);
+                });
+            }
+            throw error;
+        }
+    }
+    async describePendingRegistration(body) {
+        (0, config_1.assertAdmissionOpen)();
+        const { user } = await (0, auth_1.validateTenantAssignmentToken)(body.tenant_assignment_token);
+        await this.ensureNoWorkspaceYet(user._id);
+        return {
+            email: user.email,
+            name: user.name,
+            provider: (0, auth_2.resolveEntryProvider)(await (0, auth_1.getExternalIdentities)(user._id)),
+        };
+    }
+    async finalize(body) {
+        (0, config_1.assertAdmissionOpen)();
+        (0, workspaces_1.assertBillingCountry)(body.address);
+        (0, workspaces_1.assertRegistrationExtras)(body.extras);
+        const { user } = await (0, auth_1.validateTenantAssignmentToken)(body.tenant_assignment_token);
+        await this.ensureNoWorkspaceYet(user._id);
+        await (0, workspaces_1.ensurePlanIsAvailableForCustomer)(body.planId, body.customerType);
+        const handles = { userId: user._id };
+        try {
+            const { tenantId } = await (0, workspaces_1.provisionWorkspace)({
+                userId: user._id,
+                payload: body,
+                stripeCustomerProfile: toStripeProfile(body, user.email, user.name),
+                card: await (0, workspaces_1.resolveCardDetails)(body.paymentMethodId),
+                handles,
+            });
+            return await this.issueAuthResponse(user, tenantId);
+        }
+        catch (error) {
+            await (0, workspaces_1.rollbackWorkspaceProvisioning)(handles);
+            throw error;
+        }
+    }
+}
+exports.SaasRegisterApiController = SaasRegisterApiController;
+__decorate([
+    (0, interface_database_decorators_1.Model)(db_2.UserModel),
+    __metadata("design:type", db_2.UserModel)
+], SaasRegisterApiController.prototype, "userModel", void 0);
+__decorate([
+    (0, interface_database_decorators_1.Model)(db_2.SessionModel),
+    __metadata("design:type", db_2.SessionModel)
+], SaasRegisterApiController.prototype, "sessionModel", void 0);
+__decorate([
+    (0, interface_api_1.Parameter)("user-agent", "header"),
+    __metadata("design:type", String)
+], SaasRegisterApiController.prototype, "userAgent", void 0);
+__decorate([
+    (0, interface_api_1.Parameter)("x-forwarded-for", "header"),
+    __metadata("design:type", String)
+], SaasRegisterApiController.prototype, "forwardedFor", void 0);
+__decorate([
+    (0, interface_api_1.Get)("/setup-intent"),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Promise)
+], SaasRegisterApiController.prototype, "createSetupIntent", null);
+__decorate([
+    (0, interface_api_1.Post)("/"),
+    __param(0, (0, interface_api_1.JSONBody)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], SaasRegisterApiController.prototype, "register", null);
+__decorate([
+    (0, interface_api_1.Post)("/pending"),
+    __param(0, (0, interface_api_1.JSONBody)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], SaasRegisterApiController.prototype, "describePendingRegistration", null);
+__decorate([
+    (0, interface_api_1.Post)("/finalize"),
+    __param(0, (0, interface_api_1.JSONBody)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], SaasRegisterApiController.prototype, "finalize", null);
+//# sourceMappingURL=register.js.map

package/dist/routes/public/register.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"register.js","sourceRoot":"","sources":["../../../src/routes/public/register.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,6CAA0C;AAC1C,6DAMmC;AACnC,uEAAwD;AACxD,gEAA6D;AAC7D,uEAAgE;AAChE,6FAA4E;AAC5E,qDAAiE;AACjE,yDAOwC;AACxC,0DAI2C;AAC3C,qCAAkD;AAClD,yCAAmD;AACnD,yCAAqD;AAMrD,iDAO0B;AAE1B,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAC7B,MAAM,cAAc,GAAG,EAAE,CAAC;AAuC1B,SAAS,eAAe;IACtB,OAAO,IAAA,yBAAW,EAAC,cAAc,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,eAAe,CACtB,OAAqC,EACrC,KAAa,EACb,YAAoB;IAEpB,OAAO;QACL,KAAK;QACL,YAAY;QACZ,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,eAAe,EAAE,OAAO,CAAC,eAAe;KACzC,CAAC;AACJ,CAAC;AAED,MAAa,yBAA0B,SAAQ,IAAA,0BAAU,EACvD,oBAAoB,CACrB;IAaS,KAAK,CAAC,oBAAoB,CAAC,KAAa;QAC9C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACxD,IAAA,2BAAM,EAAC,CAAC,QAAQ,EAAE,gBAAgB,EAAE,+BAA+B,CAAC,CAAC;IACvE,CAAC;IAEO,KAAK,CAAC,oBAAoB,CAAC,MAAc;QAC/C,MAAM,WAAW,GAAG,IAAA,wCAAQ,EAAC,sBAAiB,EAAE,mCAAc,CAAC,CAAC;QAChE,MAAM,mBAAmB,GAAG,MAAM,WAAW,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QACnE,IAAA,2BAAM,EACJ,CAAC,mBAAmB,EACpB,gBAAgB,EAChB,wCAAwC,CACzC,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAAC,IAAkB;QAChD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;YAC7C;gBACE,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,OAAO,EAAE,eAAe,EAAE;gBAC1B,KAAK,EAAE,KAAK;gBACZ,SAAS,EAAE,IAAI,IAAI,EAAE;aACtB;SACF,CAAC,CAAC;QACH,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC;IACvB,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAC7B,IAAU,EACV,QAAgB;QAEhB,MAAM,SAAS,GAAG,MAAM,IAAA,oBAAa,EACnC,IAAI,CAAC,YAAY,EACjB,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,SAAS,IAAI,EAAE,EACpB,IAAI,CAAC,YAAY,IAAI,EAAE,CACxB,CAAC;QACF,MAAM,eAAe,GAAG,MAAM,IAAA,0BAAmB,EAC/C,QAAQ,EACR,IAAI,EACJ,SAAS,CACV,CAAC;QACF,MAAM,gBAAgB,GAAG,MAAM,IAAA,2BAAoB,EACjD,QAAQ,EACR,IAAI,EACJ,SAAS,CACV,CAAC;QACF,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,SAAS,EAAE;YACxC,YAAY,EAAE,gBAAgB,CAAC,KAAK;SACrC,CAAC,CAAC;QACH,OAAO;YACL,UAAU,EAAE,QAAQ;YACpB,YAAY,EAAE,eAAe,CAAC,KAAK;YACnC,UAAU,EAAE,eAAe,CAAC,SAAS;YACrC,aAAa,EAAE,gBAAgB,CAAC,KAAK;YACrC,IAAI,EAAE,MAAM,IAAA,mBAAY,EAAC,IAAI,CAAC;SAC/B,CAAC;IACJ,CAAC;IAGK,AAAN,KAAK,CAAC,iBAAiB;QACrB,IAAA,4BAAmB,GAAE,CAAC;QACtB,OAAO,IAAA,8BAAqB,GAAE,CAAC;IACjC,CAAC;IAGK,AAAN,KAAK,CAAC,QAAQ,CAAa,IAAkB;QAC3C,IAAA,4BAAmB,GAAE,CAAC;QACtB,IAAA,iCAAoB,EAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACnC,IAAA,qCAAwB,EAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACtC,MAAM,IAAA,6CAAgC,EAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;QACvE,MAAM,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAE5C,MAAM,OAAO,GAAiC,EAAE,CAAC;QACjD,IAAI,CAAC;YACH,OAAO,CAAC,MAAM,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;YACpD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAA,+BAAkB,EAAC;gBAC5C,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,OAAO,EAAE,IAAI;gBACb,qBAAqB,EAAE,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC;gBACnE,IAAI,EAAE,MAAM,IAAA,+BAAkB,EAAC,IAAI,CAAC,eAAe,CAAC;gBACpD,OAAO;aACR,CAAC,CAAC;YACH,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC;QAC9C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAA,0CAA6B,EAAC,OAAO,CAAC,CAAC;YAC7C,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE,CAAC;gBACrD,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,YAAY,EAAE,EAAE;oBACjE,iBAAO,CAAC,KAAK,CACX,sDAAsD,OAAO,CAAC,MAAM,EAAE,EACtE,YAAY,CACb,CAAC;gBACJ,CAAC,CAAC,CAAC;YACL,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAgBK,AAAN,KAAK,CAAC,2BAA2B,CACnB,IAA6B;QAEzC,IAAA,4BAAmB,GAAE,CAAC;QACtB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAA,oCAA6B,EAClD,IAAI,CAAC,uBAAuB,CAC7B,CAAC;QACF,MAAM,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAE1C,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,QAAQ,EAAE,IAAA,2BAAoB,EAAC,MAAM,IAAA,4BAAqB,EAAC,IAAI,CAAC,GAAG,CAAC,CAAC;SACtE,CAAC;IACJ,CAAC;IAGK,AAAN,KAAK,CAAC,QAAQ,CAAa,IAAkB;QAC3C,IAAA,4BAAmB,GAAE,CAAC;QACtB,IAAA,iCAAoB,EAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACnC,IAAA,qCAAwB,EAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACtC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAA,oCAA6B,EAClD,IAAI,CAAC,uBAAuB,CAC7B,CAAC;QACF,MAAM,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAE1C,MAAM,IAAA,6CAAgC,EAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;QAEvE,MAAM,OAAO,GAAiC,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;QACnE,IAAI,CAAC;YACH,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAA,+BAAkB,EAAC;gBAC5C,MAAM,EAAE,IAAI,CAAC,GAAG;gBAChB,OAAO,EAAE,IAAI;gBACb,qBAAqB,EAAE,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC;gBACnE,IAAI,EAAE,MAAM,IAAA,+BAAkB,EAAC,IAAI,CAAC,eAAe,CAAC;gBACpD,OAAO;aACR,CAAC,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAA,0CAA6B,EAAC,OAAO,CAAC,CAAC;YAC7C,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;CACF;AA5KD,8DA4KC;AAxKS;IADP,IAAA,qCAAK,EAAC,cAAS,CAAC;8BACE,cAAS;4DAAC;AAGrB;IADP,IAAA,qCAAK,EAAC,iBAAY,CAAC;8BACE,iBAAY;+DAAC;AAG3B;IADP,IAAA,yBAAS,EAAC,YAAY,EAAE,QAAQ,CAAC;;4DACR;AAGlB;IADP,IAAA,yBAAS,EAAC,iBAAiB,EAAE,QAAQ,CAAC;;+DACV;AAgEvB;IADL,IAAA,mBAAG,EAAC,eAAe,CAAC;;;;kEAIpB;AAGK;IADL,IAAA,oBAAI,EAAC,GAAG,CAAC;IACM,WAAA,IAAA,wBAAQ,GAAE,CAAA;;;;yDA8BzB;AAgBK;IADL,IAAA,oBAAI,EAAC,UAAU,CAAC;IAEd,WAAA,IAAA,wBAAQ,GAAE,CAAA;;;;4EAaZ;AAGK;IADL,IAAA,oBAAI,EAAC,WAAW,CAAC;IACF,WAAA,IAAA,wBAAQ,GAAE,CAAA;;;;yDAyBzB"}

package/dist/routes/public/webhooks/index.d.ts

@@ -0,0 +1 @@
+export * from "./stripe";

package/dist/routes/public/webhooks/index.js

@@ -0,0 +1,18 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./stripe"), exports);
+//# sourceMappingURL=index.js.map

package/dist/routes/public/webhooks/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/routes/public/webhooks/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAAyB"}

package/dist/routes/public/webhooks/stripe.d.ts

@@ -0,0 +1,7 @@
+declare const StripeWebhookController_base: import("@antelopejs/interface-api").ControllerClass<object>;
+export declare class StripeWebhookController extends StripeWebhookController_base {
+    receive(rawBody: Buffer, signature: string): Promise<{
+        received: boolean;
+    }>;
+}
+export {};

package/dist/routes/public/webhooks/stripe.js

@@ -0,0 +1,41 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.StripeWebhookController = void 0;
+const interface_api_1 = require("@antelopejs/interface-api");
+const stripe_1 = require("../../../stripe");
+const HTTP_BAD_REQUEST = 400;
+class StripeWebhookController extends (0, interface_api_1.Controller)("/api/saas/webhooks/stripe") {
+    async receive(rawBody, signature) {
+        let event;
+        try {
+            event = (0, stripe_1.getStripeClient)().webhooks.constructEvent(rawBody, signature, (0, stripe_1.getStripeWebhookSecret)());
+        }
+        catch {
+            throw new interface_api_1.HTTPResult(HTTP_BAD_REQUEST, "saas.errors.webhook.invalid_signature");
+        }
+        await (0, stripe_1.dispatchStripeWebhookEvent)(event);
+        return { received: true };
+    }
+}
+exports.StripeWebhookController = StripeWebhookController;
+__decorate([
+    (0, interface_api_1.Post)("/"),
+    __param(0, (0, interface_api_1.RawBody)()),
+    __param(1, (0, interface_api_1.Parameter)("stripe-signature", "header")),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Buffer, String]),
+    __metadata("design:returntype", Promise)
+], StripeWebhookController.prototype, "receive", null);
+//# sourceMappingURL=stripe.js.map

package/dist/routes/public/webhooks/stripe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stripe.js","sourceRoot":"","sources":["../../../../src/routes/public/webhooks/stripe.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,6DAMmC;AAEnC,4CAIyB;AAEzB,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAE7B,MAAa,uBAAwB,SAAQ,IAAA,0BAAU,EACrD,2BAA2B,CAC5B;IAEO,AAAN,KAAK,CAAC,OAAO,CACA,OAAe,EACe,SAAiB;QAE1D,IAAI,KAAmB,CAAC;QACxB,IAAI,CAAC;YACH,KAAK,GAAG,IAAA,wBAAe,GAAE,CAAC,QAAQ,CAAC,cAAc,CAC/C,OAAO,EACP,SAAS,EACT,IAAA,+BAAsB,GAAE,CACzB,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,0BAAU,CAClB,gBAAgB,EAChB,uCAAuC,CACxC,CAAC;QACJ,CAAC;QACD,MAAM,IAAA,mCAA0B,EAAC,KAAK,CAAC,CAAC;QACxC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC5B,CAAC;CACF;AAxBD,0DAwBC;AApBO;IADL,IAAA,oBAAI,EAAC,GAAG,CAAC;IAEP,WAAA,IAAA,uBAAO,GAAE,CAAA;IACT,WAAA,IAAA,yBAAS,EAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAA;;qCADpB,MAAM;;sDAkB3B"}

package/dist/routes/tenant/billing-portal.d.ts

@@ -0,0 +1,31 @@
+import { type RequestContext } from "@antelopejs/interface-api";
+import { TenantMemberModel } from "@antelopejs/interface-dms/db";
+import type { User } from "@antelopejs/interface-dms/auth/db";
+import { type PaymentMethodSummary, type UnpaidInvoiceRef, type UnpaidInvoiceSummary } from "../../billing-state";
+import type { TenantSubscriptionStatus } from "../../db";
+import { TenantSubscriptionModel } from "../../db";
+interface PortalSessionBody {
+    returnUrl: string;
+}
+interface BillingStatus {
+    hasStripeCustomer: boolean;
+    status: TenantSubscriptionStatus | null;
+    isTenantOwner: boolean;
+    paymentMethod: PaymentMethodSummary | null;
+    unpaidInvoice: UnpaidInvoiceSummary | null;
+}
+interface WorkspaceAccess {
+    blocked: boolean;
+    status?: TenantSubscriptionStatus;
+    isTenantOwner: boolean;
+    unpaidInvoice: UnpaidInvoiceRef | null;
+}
+declare const SaasBillingPortalController_base: import("@antelopejs/interface-api").ControllerClass<object>;
+export declare class SaasBillingPortalController extends SaasBillingPortalController_base {
+    getWorkspaceAccess(ctx: RequestContext, user: User, tenantMemberModel: TenantMemberModel): Promise<WorkspaceAccess>;
+    getStatus(ctx: RequestContext, user: User, tenantSubscriptionModel: TenantSubscriptionModel, tenantMemberModel: TenantMemberModel): Promise<BillingStatus>;
+    createPortalSession(_user: User, body: PortalSessionBody, tenantSubscriptionModel: TenantSubscriptionModel): Promise<{
+        url: string;
+    }>;
+}
+export {};