@saasicat/nest 0.13.0 → 0.15.0

package/dist/chunk-LZHLGUQI.js

@@ -1,190 +0,0 @@
-import {
-  SuperAdminGuard
-} from "./chunk-FVT7KTUI.js";
-import {
-  asProvider
-} from "./chunk-SABTXESR.js";
-import {
-  __name
-} from "./chunk-SHUYVCID.js";
-
-// src/admin/admin-stats.tokens.ts
-var SUBSCRIPTION_STATS_PORT_TOKEN = /* @__PURE__ */ Symbol.for("saas-platform/SubscriptionStatsPort");
-var PROMO_CODE_STATS_PORT_TOKEN = /* @__PURE__ */ Symbol.for("saas-platform/PromoCodeStatsPort");
-var AUDIT_STATS_PORT_TOKEN = /* @__PURE__ */ Symbol.for("saas-platform/AuditStatsPort");
-var ADMIN_STATS_AUDIT_WINDOW_DAYS_TOKEN = /* @__PURE__ */ Symbol.for("saas-platform/AdminStatsAuditWindowDays");
-
-// src/admin/admin-stats.service.ts
-import { Inject, Injectable, Optional } from "@nestjs/common";
-function _ts_decorate(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-  return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-__name(_ts_decorate, "_ts_decorate");
-function _ts_metadata(k, v) {
-  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-}
-__name(_ts_metadata, "_ts_metadata");
-function _ts_param(paramIndex, decorator) {
-  return function(target, key) {
-    decorator(target, key, paramIndex);
-  };
-}
-__name(_ts_param, "_ts_param");
-var DAY_MS = 864e5;
-var DEFAULT_AUDIT_WINDOW_DAYS = 7;
-var AdminStatsService = class {
-  static {
-    __name(this, "AdminStatsService");
-  }
-  subscriptions;
-  promos;
-  audit;
-  auditWindowDays;
-  constructor(subscriptions, promos, audit, auditWindowDays = DEFAULT_AUDIT_WINDOW_DAYS) {
-    this.subscriptions = subscriptions;
-    this.promos = promos;
-    this.audit = audit;
-    this.auditWindowDays = auditWindowDays;
-  }
-  async getSnapshot() {
-    const since = new Date(Date.now() - this.auditWindowDays * DAY_MS);
-    const [subscriptions, promos, auditCount] = await Promise.all([
-      this.subscriptions.getStats(),
-      this.promos.getStats(),
-      this.audit.countSince(since)
-    ]);
-    return {
-      subscriptions,
-      promos,
-      audit: {
-        countLastNDays: auditCount,
-        nDays: this.auditWindowDays
-      }
-    };
-  }
-};
-AdminStatsService = _ts_decorate([
-  Injectable(),
-  _ts_param(0, Inject(SUBSCRIPTION_STATS_PORT_TOKEN)),
-  _ts_param(1, Inject(PROMO_CODE_STATS_PORT_TOKEN)),
-  _ts_param(2, Inject(AUDIT_STATS_PORT_TOKEN)),
-  _ts_param(3, Optional()),
-  _ts_param(3, Inject(ADMIN_STATS_AUDIT_WINDOW_DAYS_TOKEN)),
-  _ts_metadata("design:type", Function),
-  _ts_metadata("design:paramtypes", [
-    typeof SubscriptionStatsPort === "undefined" ? Object : SubscriptionStatsPort,
-    typeof PromoCodeStatsPort === "undefined" ? Object : PromoCodeStatsPort,
-    typeof AuditStatsPort === "undefined" ? Object : AuditStatsPort,
-    Number
-  ])
-], AdminStatsService);
-
-// src/admin/admin-stats.controller.ts
-import { Controller, Get, Inject as Inject2, UseGuards } from "@nestjs/common";
-function _ts_decorate2(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-  return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-__name(_ts_decorate2, "_ts_decorate");
-function _ts_metadata2(k, v) {
-  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-}
-__name(_ts_metadata2, "_ts_metadata");
-function _ts_param2(paramIndex, decorator) {
-  return function(target, key) {
-    decorator(target, key, paramIndex);
-  };
-}
-__name(_ts_param2, "_ts_param");
-var AdminStatsController = class {
-  static {
-    __name(this, "AdminStatsController");
-  }
-  stats;
-  // Explicit @Inject instead of type reflection: tsup/esbuild do not emit
-  // `design:paramtypes` metadata, so Nest could otherwise not resolve the
-  // service type at the constructor.
-  constructor(stats) {
-    this.stats = stats;
-  }
-  async getDashboardSnapshot() {
-    return this.stats.getSnapshot();
-  }
-};
-_ts_decorate2([
-  Get("dashboard"),
-  _ts_metadata2("design:type", Function),
-  _ts_metadata2("design:paramtypes", []),
-  _ts_metadata2("design:returntype", Promise)
-], AdminStatsController.prototype, "getDashboardSnapshot", null);
-AdminStatsController = _ts_decorate2([
-  Controller("admin/stats"),
-  UseGuards(SuperAdminGuard),
-  _ts_param2(0, Inject2(AdminStatsService)),
-  _ts_metadata2("design:type", Function),
-  _ts_metadata2("design:paramtypes", [
-    typeof AdminStatsService === "undefined" ? Object : AdminStatsService
-  ])
-], AdminStatsController);
-
-// src/admin/admin-stats.module.ts
-import { Module } from "@nestjs/common";
-function _ts_decorate3(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-  return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-__name(_ts_decorate3, "_ts_decorate");
-var AdminStatsModule = class _AdminStatsModule {
-  static {
-    __name(this, "AdminStatsModule");
-  }
-  static forRoot(options) {
-    const providers = [
-      asProvider(SUBSCRIPTION_STATS_PORT_TOKEN, options.subscriptionStatsPort),
-      asProvider(PROMO_CODE_STATS_PORT_TOKEN, options.promoCodeStatsPort),
-      asProvider(AUDIT_STATS_PORT_TOKEN, options.auditStatsPort),
-      AdminStatsService,
-      SuperAdminGuard
-    ];
-    if (options.auditWindowDays !== void 0) {
-      providers.push({
-        provide: ADMIN_STATS_AUDIT_WINDOW_DAYS_TOKEN,
-        useValue: options.auditWindowDays
-      });
-    }
-    if (options.extraProviders) providers.push(...options.extraProviders);
-    return {
-      module: _AdminStatsModule,
-      global: options.global ?? false,
-      imports: options.imports ?? [],
-      controllers: [
-        AdminStatsController
-      ],
-      providers,
-      exports: [
-        AdminStatsService,
-        SuperAdminGuard
-      ]
-    };
-  }
-};
-AdminStatsModule = _ts_decorate3([
-  Module({})
-], AdminStatsModule);
-
-export {
-  SUBSCRIPTION_STATS_PORT_TOKEN,
-  PROMO_CODE_STATS_PORT_TOKEN,
-  AUDIT_STATS_PORT_TOKEN,
-  ADMIN_STATS_AUDIT_WINDOW_DAYS_TOKEN,
-  AdminStatsService,
-  AdminStatsController,
-  AdminStatsModule
-};

package/dist/chunk-WJ6BMDL3.js

@@ -1,313 +0,0 @@
-import {
-  MfaService
-} from "./chunk-FVT7KTUI.js";
-import {
-  asProvider
-} from "./chunk-SABTXESR.js";
-import {
-  __name
-} from "./chunk-SHUYVCID.js";
-
-// src/setup/tokens.ts
-var SETUP_PROVISIONING_PORT_TOKEN = /* @__PURE__ */ Symbol.for("saas-platform/SetupProvisioningPort");
-var SETUP_CONFIG_TOKEN = /* @__PURE__ */ Symbol.for("saas-platform/SetupConfig");
-
-// src/setup/setup.service.ts
-import { BadRequestException, ConflictException, ForbiddenException, Inject, Injectable, UnauthorizedException } from "@nestjs/common";
-import { isPlatformUserExistsError, SETUP_ERROR_CODES } from "@saasicat/types";
-import { randomBytes, timingSafeEqual } from "crypto";
-import QRCode from "qrcode";
-function _ts_decorate(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-  return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-__name(_ts_decorate, "_ts_decorate");
-function _ts_metadata(k, v) {
-  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-}
-__name(_ts_metadata, "_ts_metadata");
-function _ts_param(paramIndex, decorator) {
-  return function(target, key) {
-    decorator(target, key, paramIndex);
-  };
-}
-__name(_ts_param, "_ts_param");
-var GENERATED_PASSWORD_BYTES = 12;
-function timingSafeEqualStr(a, b) {
-  const ab = Buffer.from(a, "utf8");
-  const bb = Buffer.from(b, "utf8");
-  if (ab.length !== bb.length) return false;
-  return timingSafeEqual(ab, bb);
-}
-__name(timingSafeEqualStr, "timingSafeEqualStr");
-var SetupService = class {
-  static {
-    __name(this, "SetupService");
-  }
-  users;
-  config;
-  mfa;
-  constructor(users, config, mfa) {
-    this.users = users;
-    this.config = config;
-    this.mfa = mfa;
-  }
-  async status() {
-    return {
-      needsSetup: await this.users.countSuperAdmins() === 0
-    };
-  }
-  async setup(req) {
-    this.assertToken(req.token);
-    await this.assertNoSuperAdmin();
-    const email = req.email.trim().toLowerCase();
-    if (!email.includes("@")) {
-      throw new BadRequestException({
-        code: SETUP_ERROR_CODES.INVALID_EMAIL
-      });
-    }
-    const generated = !req.password;
-    const password = req.password ?? randomBytes(GENERATED_PASSWORD_BYTES).toString("base64url");
-    let user;
-    try {
-      user = await this.users.createSuperAdmin({
-        email,
-        password
-      });
-    } catch (err) {
-      if (isPlatformUserExistsError(err)) {
-        throw new ConflictException({
-          code: SETUP_ERROR_CODES.EMAIL_EXISTS,
-          message: err.message
-        });
-      }
-      throw err;
-    }
-    const totp = await this.mfa.setup(user.id, user.email, this.config.mfaIssuer);
-    const qrDataUrl = await QRCode.toDataURL(totp.otpauthUri, {
-      width: 220,
-      margin: 1
-    });
-    return {
-      userId: user.id,
-      email: user.email,
-      otpauthUri: totp.otpauthUri,
-      qrDataUrl,
-      secret: totp.secret,
-      ...generated ? {
-        generatedPassword: password
-      } : {}
-    };
-  }
-  async confirmMfa(req) {
-    this.assertToken(req.token);
-    const ok = await this.mfa.verify({
-      userId: req.userId,
-      code: req.code
-    });
-    return {
-      ok
-    };
-  }
-  assertToken(token) {
-    const expected = process.env[this.config.setupTokenEnvVar]?.trim();
-    if (!expected) {
-      throw new ForbiddenException({
-        code: SETUP_ERROR_CODES.SETUP_DISABLED,
-        message: `${this.config.setupTokenEnvVar} ist nicht gesetzt \u2014 Setup ist deaktiviert.`
-      });
-    }
-    if (!token || !timingSafeEqualStr(token, expected)) {
-      throw new UnauthorizedException({
-        code: SETUP_ERROR_CODES.INVALID_SETUP_TOKEN
-      });
-    }
-  }
-  async assertNoSuperAdmin() {
-    if (await this.users.countSuperAdmins() > 0) {
-      throw new ConflictException({
-        code: SETUP_ERROR_CODES.SETUP_ALREADY_DONE
-      });
-    }
-  }
-};
-SetupService = _ts_decorate([
-  Injectable(),
-  _ts_param(0, Inject(SETUP_PROVISIONING_PORT_TOKEN)),
-  _ts_param(1, Inject(SETUP_CONFIG_TOKEN)),
-  _ts_metadata("design:type", Function),
-  _ts_metadata("design:paramtypes", [
-    typeof SuperAdminProvisioningPort === "undefined" ? Object : SuperAdminProvisioningPort,
-    typeof SetupConfig === "undefined" ? Object : SetupConfig,
-    typeof MfaService === "undefined" ? Object : MfaService
-  ])
-], SetupService);
-
-// src/setup/setup.controller.ts
-import { Body, Controller, Get, Post } from "@nestjs/common";
-import { IsEmail, IsNotEmpty, IsOptional, IsString, MinLength } from "class-validator";
-function _ts_decorate2(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-  return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-__name(_ts_decorate2, "_ts_decorate");
-function _ts_metadata2(k, v) {
-  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-}
-__name(_ts_metadata2, "_ts_metadata");
-function _ts_param2(paramIndex, decorator) {
-  return function(target, key) {
-    decorator(target, key, paramIndex);
-  };
-}
-__name(_ts_param2, "_ts_param");
-var SetupDto = class SetupDto2 {
-  static {
-    __name(this, "SetupDto");
-  }
-  token;
-  email;
-  password;
-};
-_ts_decorate2([
-  IsString(),
-  IsNotEmpty(),
-  _ts_metadata2("design:type", String)
-], SetupDto.prototype, "token", void 0);
-_ts_decorate2([
-  IsEmail(),
-  _ts_metadata2("design:type", String)
-], SetupDto.prototype, "email", void 0);
-_ts_decorate2([
-  IsOptional(),
-  IsString(),
-  MinLength(8),
-  _ts_metadata2("design:type", String)
-], SetupDto.prototype, "password", void 0);
-var SetupConfirmMfaDto = class SetupConfirmMfaDto2 {
-  static {
-    __name(this, "SetupConfirmMfaDto");
-  }
-  token;
-  userId;
-  code;
-};
-_ts_decorate2([
-  IsString(),
-  IsNotEmpty(),
-  _ts_metadata2("design:type", String)
-], SetupConfirmMfaDto.prototype, "token", void 0);
-_ts_decorate2([
-  IsString(),
-  IsNotEmpty(),
-  _ts_metadata2("design:type", String)
-], SetupConfirmMfaDto.prototype, "userId", void 0);
-_ts_decorate2([
-  IsString(),
-  IsNotEmpty(),
-  _ts_metadata2("design:type", String)
-], SetupConfirmMfaDto.prototype, "code", void 0);
-var SetupController = class {
-  static {
-    __name(this, "SetupController");
-  }
-  setup;
-  constructor(setup) {
-    this.setup = setup;
-  }
-  status() {
-    return this.setup.status();
-  }
-  run(dto) {
-    return this.setup.setup(dto);
-  }
-  confirm(dto) {
-    return this.setup.confirmMfa(dto);
-  }
-};
-_ts_decorate2([
-  Get("status"),
-  _ts_metadata2("design:type", Function),
-  _ts_metadata2("design:paramtypes", []),
-  _ts_metadata2("design:returntype", typeof Promise === "undefined" ? Object : Promise)
-], SetupController.prototype, "status", null);
-_ts_decorate2([
-  Post(),
-  _ts_param2(0, Body()),
-  _ts_metadata2("design:type", Function),
-  _ts_metadata2("design:paramtypes", [
-    typeof SetupDto === "undefined" ? Object : SetupDto
-  ]),
-  _ts_metadata2("design:returntype", typeof Promise === "undefined" ? Object : Promise)
-], SetupController.prototype, "run", null);
-_ts_decorate2([
-  Post("confirm-mfa"),
-  _ts_param2(0, Body()),
-  _ts_metadata2("design:type", Function),
-  _ts_metadata2("design:paramtypes", [
-    typeof SetupConfirmMfaDto === "undefined" ? Object : SetupConfirmMfaDto
-  ]),
-  _ts_metadata2("design:returntype", typeof Promise === "undefined" ? Object : Promise)
-], SetupController.prototype, "confirm", null);
-SetupController = _ts_decorate2([
-  Controller("admin/setup"),
-  _ts_metadata2("design:type", Function),
-  _ts_metadata2("design:paramtypes", [
-    typeof SetupService === "undefined" ? Object : SetupService
-  ])
-], SetupController);
-
-// src/setup/setup.module.ts
-import { Module } from "@nestjs/common";
-function _ts_decorate3(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-  return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-__name(_ts_decorate3, "_ts_decorate");
-var DEFAULT_SETUP_TOKEN_ENV_VAR = "SETUP_TOKEN";
-var DEFAULT_MFA_ISSUER = "SuperAdmin";
-var SetupModule = class _SetupModule {
-  static {
-    __name(this, "SetupModule");
-  }
-  static forRoot(options) {
-    return {
-      module: _SetupModule,
-      global: options.global ?? false,
-      controllers: [
-        SetupController
-      ],
-      providers: [
-        asProvider(SETUP_PROVISIONING_PORT_TOKEN, options.provisioningPort),
-        {
-          provide: SETUP_CONFIG_TOKEN,
-          useValue: {
-            setupTokenEnvVar: options.setupTokenEnvVar ?? DEFAULT_SETUP_TOKEN_ENV_VAR,
-            mfaIssuer: options.mfaIssuer ?? DEFAULT_MFA_ISSUER
-          }
-        },
-        SetupService
-      ],
-      exports: [
-        SetupService
-      ]
-    };
-  }
-};
-SetupModule = _ts_decorate3([
-  Module({})
-], SetupModule);
-
-export {
-  SETUP_PROVISIONING_PORT_TOKEN,
-  SETUP_CONFIG_TOKEN,
-  SetupService,
-  SetupController,
-  SetupModule
-};

package/dist/setup.service-BPwJ7My_.d.cts

@@ -1,45 +0,0 @@
-import { DynamicModule } from '@nestjs/common';
-import { SuperAdminProvisioningPort, SetupStatusResponse, SetupRequest, SetupResult, SetupConfirmMfaRequest, SetupConfirmMfaResponse } from '@saasicat/types';
-import { P as ProviderSpec } from './di-CcNeq9v-.cjs';
-import { j as MfaService } from './admin-stats.module-v4SVvWzj.cjs';
-
-interface SetupModuleOptions {
-    /**
-     * App adapter for the existence check + creation of the first SUPER_ADMIN. A
-     * full `UserManagementPort` adapter (CLI) satisfies this contract as well, so
-     * it can be reused.
-     */
-    provisioningPort: ProviderSpec<SuperAdminProvisioningPort>;
-    /** Env-var name of the setup token. Default `SETUP_TOKEN`. */
-    setupTokenEnvVar?: string;
-    /** Authenticator issuer for MFA enrollment. Default `SuperAdmin`. */
-    mfaIssuer?: string;
-    /** Register the module globally — default `false`. */
-    global?: boolean;
-}
-declare class SetupModule {
-    static forRoot(options: SetupModuleOptions): DynamicModule;
-}
-
-declare const SETUP_PROVISIONING_PORT_TOKEN: unique symbol;
-declare const SETUP_CONFIG_TOKEN: unique symbol;
-interface SetupConfig {
-    /** Env-var name of the setup token. Without the var set, setup is disabled. */
-    setupTokenEnvVar: string;
-    /** Authenticator issuer for the MFA enrollment in the wizard. */
-    mfaIssuer: string;
-}
-
-declare class SetupService {
-    private readonly users;
-    private readonly config;
-    private readonly mfa;
-    constructor(users: SuperAdminProvisioningPort, config: SetupConfig, mfa: MfaService);
-    status(): Promise<SetupStatusResponse>;
-    setup(req: SetupRequest): Promise<SetupResult>;
-    confirmMfa(req: SetupConfirmMfaRequest): Promise<SetupConfirmMfaResponse>;
-    private assertToken;
-    private assertNoSuperAdmin;
-}
-
-export { SetupService as S, SETUP_CONFIG_TOKEN as a, SETUP_PROVISIONING_PORT_TOKEN as b, type SetupConfig as c, SetupModule as d, type SetupModuleOptions as e };

package/dist/setup.service-D2mrdDDB.d.ts

@@ -1,45 +0,0 @@
-import { DynamicModule } from '@nestjs/common';
-import { SuperAdminProvisioningPort, SetupStatusResponse, SetupRequest, SetupResult, SetupConfirmMfaRequest, SetupConfirmMfaResponse } from '@saasicat/types';
-import { P as ProviderSpec } from './di-CcNeq9v-.js';
-import { j as MfaService } from './admin-stats.module-15ac5KY3.js';
-
-interface SetupModuleOptions {
-    /**
-     * App adapter for the existence check + creation of the first SUPER_ADMIN. A
-     * full `UserManagementPort` adapter (CLI) satisfies this contract as well, so
-     * it can be reused.
-     */
-    provisioningPort: ProviderSpec<SuperAdminProvisioningPort>;
-    /** Env-var name of the setup token. Default `SETUP_TOKEN`. */
-    setupTokenEnvVar?: string;
-    /** Authenticator issuer for MFA enrollment. Default `SuperAdmin`. */
-    mfaIssuer?: string;
-    /** Register the module globally — default `false`. */
-    global?: boolean;
-}
-declare class SetupModule {
-    static forRoot(options: SetupModuleOptions): DynamicModule;
-}
-
-declare const SETUP_PROVISIONING_PORT_TOKEN: unique symbol;
-declare const SETUP_CONFIG_TOKEN: unique symbol;
-interface SetupConfig {
-    /** Env-var name of the setup token. Without the var set, setup is disabled. */
-    setupTokenEnvVar: string;
-    /** Authenticator issuer for the MFA enrollment in the wizard. */
-    mfaIssuer: string;
-}
-
-declare class SetupService {
-    private readonly users;
-    private readonly config;
-    private readonly mfa;
-    constructor(users: SuperAdminProvisioningPort, config: SetupConfig, mfa: MfaService);
-    status(): Promise<SetupStatusResponse>;
-    setup(req: SetupRequest): Promise<SetupResult>;
-    confirmMfa(req: SetupConfirmMfaRequest): Promise<SetupConfirmMfaResponse>;
-    private assertToken;
-    private assertNoSuperAdmin;
-}
-
-export { SetupService as S, SETUP_CONFIG_TOKEN as a, SETUP_PROVISIONING_PORT_TOKEN as b, type SetupConfig as c, SetupModule as d, type SetupModuleOptions as e };