@saasicat/nest 0.18.0 → 0.19.0

package/dist/{chunk-PLJEAUFU.js → chunk-7JIHG53V.js}

@@ -16,6 +16,7 @@ import {
 
 // src/admin/super-admin.guard.ts
 import { ForbiddenException, Injectable } from "@nestjs/common";
+import { AUTH_ERROR_CODES } from "@saasicat/types";
 function _ts_decorate(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
@@ -29,10 +30,18 @@ var SuperAdminGuard = class {
   }
   canActivate(context) {
     const request = context.switchToHttp().getRequest();
-    if (!request.user) throw new ForbiddenException("Nicht authentifiziert");
+    if (!request.user) {
+      throw new ForbiddenException({
+        code: AUTH_ERROR_CODES.NOT_AUTHENTICATED,
+        message: "Not authenticated"
+      });
+    }
     const role = request.user.platformRole ?? request.user.role;
     if (role !== "SUPER_ADMIN") {
-      throw new ForbiddenException("Nur SUPER_ADMIN-Rolle erlaubt");
+      throw new ForbiddenException({
+        code: AUTH_ERROR_CODES.SUPER_ADMIN_REQUIRED,
+        message: "Only the SUPER_ADMIN role is allowed"
+      });
     }
     return true;
   }
@@ -119,7 +128,7 @@ var MfaService = class _MfaService {
         return false;
       }
       const message = error instanceof Error ? error.message : String(error);
-      this.logger.warn(`TOTP-Verify f\xFCr User ${input.userId} unerwartet fehlgeschlagen: ${message}`);
+      this.logger.warn(`TOTP verification for user ${input.userId} failed unexpectedly: ${message}`);
       return false;
     }
   }
@@ -146,6 +155,7 @@ MfaService = _ts_decorate2([
 // src/admin/mfa.guard.ts
 import { Inject as Inject2, Injectable as Injectable3, Logger as Logger2, SetMetadata, UnauthorizedException } from "@nestjs/common";
 import { Reflector } from "@nestjs/core";
+import { AUTH_ERROR_CODES as AUTH_ERROR_CODES2 } from "@saasicat/types";
 function _ts_decorate3(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
@@ -187,22 +197,30 @@ var MfaGuard = class _MfaGuard {
     }
     const request = context.switchToHttp().getRequest();
     const user = request.user;
-    if (!user) throw new UnauthorizedException({
-      reason: "NOT_AUTHENTICATED"
-    });
+    if (!user) {
+      throw new UnauthorizedException({
+        code: AUTH_ERROR_CODES2.NOT_AUTHENTICATED,
+        // `reason` is superseded by `code` and will be removed.
+        reason: "NOT_AUTHENTICATED"
+      });
+    }
     const enabled = await this.mfaService.isEnabled(user.id);
     if (!enabled) {
       throw new UnauthorizedException({
+        code: AUTH_ERROR_CODES2.MFA_NOT_SET_UP,
+        // `reason` is superseded by `code` and will be removed.
         reason: "MFA_NOT_SET_UP",
-        message: "Bitte zuerst MFA-Setup \xFCber das CLI ausf\xFChren."
+        message: "Run the MFA setup via the CLI first."
       });
     }
     const headerVal = request.headers?.["x-mfa-code"];
     const code = Array.isArray(headerVal) ? headerVal[0] : headerVal;
     if (!code) {
       throw new UnauthorizedException({
+        code: AUTH_ERROR_CODES2.MFA_REQUIRED,
+        // `reason` is superseded by `code` and will be removed.
         reason: "MFA_REQUIRED",
-        message: "TOTP-Code im Header X-Mfa-Code erforderlich."
+        message: "TOTP code required in the X-Mfa-Code header."
       });
     }
     const valid = await this.mfaService.verify({
@@ -211,8 +229,10 @@ var MfaGuard = class _MfaGuard {
     });
     if (!valid) {
       throw new UnauthorizedException({
+        code: AUTH_ERROR_CODES2.MFA_FAILED,
+        // `reason` is superseded by `code` and will be removed.
         reason: "MFA_FAILED",
-        message: "TOTP-Code ung\xFCltig."
+        message: "Invalid TOTP code."
       });
     }
     return true;
@@ -615,7 +635,7 @@ var PLATFORM_CORE_MANIFEST_CONTRIBUTION = {
     actions: [
       {
         id: "platform.tenants.suspend",
-        label: "Mandant suspendieren",
+        label: "Suspend tenant",
         actionKey: "tenants.suspend",
         requiredCapability: "tenants.suspend",
         requiresMfa: true,
@@ -623,7 +643,7 @@ var PLATFORM_CORE_MANIFEST_CONTRIBUTION = {
       },
       {
         id: "platform.tenants.reactivate",
-        label: "Mandant reaktivieren",
+        label: "Reactivate tenant",
         actionKey: "tenants.reactivate",
         requiredCapability: "tenants.reactivate",
         requiresMfa: true,
@@ -639,7 +659,7 @@ var PLATFORM_CORE_MANIFEST_CONTRIBUTION = {
       },
       {
         id: "platform.tenants.export",
-        label: "DSGVO-Export",
+        label: "GDPR export",
         actionKey: "tenants.export",
         requiredCapability: "tenants.export",
         requiresMfa: true,
@@ -647,7 +667,7 @@ var PLATFORM_CORE_MANIFEST_CONTRIBUTION = {
       },
       {
         id: "platform.subscriptions.cancel",
-        label: "Subscription k\xFCndigen",
+        label: "Cancel subscription",
         actionKey: "subscriptions.cancel",
         requiredCapability: "subscriptions.cancel",
         requiresMfa: true,
@@ -655,7 +675,7 @@ var PLATFORM_CORE_MANIFEST_CONTRIBUTION = {
       },
       {
         id: "platform.pilots.grant",
-        label: "Pilot-Status setzen",
+        label: "Set pilot status",
         actionKey: "pilots.grant",
         requiredCapability: "pilots.grant",
         requiresMfa: true,
@@ -663,7 +683,7 @@ var PLATFORM_CORE_MANIFEST_CONTRIBUTION = {
       },
       {
         id: "platform.pilots.revoke",
-        label: "Pilot-Status entziehen",
+        label: "Revoke pilot status",
         actionKey: "pilots.revoke",
         requiredCapability: "pilots.revoke",
         requiresMfa: true,
@@ -671,7 +691,7 @@ var PLATFORM_CORE_MANIFEST_CONTRIBUTION = {
       },
       {
         id: "platform.pilots.extend",
-        label: "Pilot verl\xE4ngern",
+        label: "Extend pilot",
         actionKey: "pilots.extend",
         requiredCapability: "pilots.extend",
         requiresMfa: true,
@@ -683,102 +703,102 @@ var PLATFORM_CORE_MANIFEST_CONTRIBUTION = {
     actions: [
       {
         key: "TENANT_SUSPEND",
-        label: "Mandant suspendiert",
+        label: "Tenant suspended",
         severity: "high"
       },
       {
         key: "TENANT_REACTIVATE",
-        label: "Mandant reaktiviert",
+        label: "Tenant reactivated",
         severity: "medium"
       },
       {
         key: "TENANT_IMPERSONATE",
-        label: "Impersonation gestartet",
+        label: "Impersonation started",
         severity: "high"
       },
       {
         key: "TENANT_EXPORT",
-        label: "DSGVO-Export ausgel\xF6st",
+        label: "GDPR export triggered",
         severity: "medium"
       },
       {
         key: "PILOT_CREATE",
-        label: "Pilot-Tenant angelegt",
+        label: "Pilot tenant created",
         severity: "medium"
       },
       {
         key: "PILOT_GRANT",
-        label: "Pilot-Status gesetzt",
+        label: "Pilot status set",
         severity: "medium"
       },
       {
         key: "PILOT_REVOKE",
-        label: "Pilot-Status entzogen",
+        label: "Pilot status revoked",
         severity: "medium"
       },
       {
         key: "PILOT_EXTEND",
-        label: "Pilot verl\xE4ngert",
+        label: "Pilot extended",
         severity: "low"
       },
       {
         key: "PLAN_VERSION_PUBLISH",
-        label: "Plan-Version freigegeben",
+        label: "Plan version approved",
         severity: "high"
       },
       {
         key: "PLAN_VERSION_TERMINATE",
-        label: "Plan-Version terminiert",
+        label: "Plan version terminated",
         severity: "high"
       },
       {
         key: "SUBSCRIPTION_CANCEL",
-        label: "Subscription gek\xFCndigt",
+        label: "Subscription cancelled",
         severity: "high"
       },
       {
         key: "USER_RESET_PASSWORD",
-        label: "Passwort-Reset ausgel\xF6st",
+        label: "Password reset triggered",
         severity: "medium"
       },
       {
         key: "USER_DEACTIVATE",
-        label: "User deaktiviert",
+        label: "User deactivated",
         severity: "high"
       },
       {
         key: "USER_REASSIGN_ADMIN",
-        label: "Admin-Rolle \xFCbertragen",
+        label: "Admin role transferred",
         severity: "high"
       },
       {
         key: "PLATFORM_EMAIL_PROVIDER_CREATE",
-        label: "Plattform-Absender angelegt",
+        label: "Platform sender created",
         severity: "medium"
       },
       {
         key: "PLATFORM_EMAIL_PROVIDER_UPDATE",
-        label: "Plattform-Absender ge\xE4ndert",
+        label: "Platform sender changed",
         severity: "medium"
       },
       {
         key: "PLATFORM_EMAIL_PROVIDER_DELETE",
-        label: "Plattform-Absender gel\xF6scht",
+        label: "Platform sender deleted",
         severity: "medium"
       },
       {
         key: "PLATFORM_EMAIL_PROVIDER_TEST",
-        label: "Plattform-Absender Test-Versand",
+        label: "Platform sender test send",
         severity: "low"
       },
       {
         key: "EMAIL_HISTORY_DELETE",
-        label: "Plattform-E-Mail aus Verlauf entfernt",
+        label: "Platform email removed from history",
         severity: "medium"
       },
       {
         key: "EMAIL_HISTORY_RESEND",
-        label: "Plattform-E-Mail erneut versendet",
+        label: "Platform email resent",
         severity: "low"
       }
     ]
@@ -898,7 +918,7 @@ var AdminManifestModule = class _AdminManifestModule {
     ];
     if (includeManifestController) {
       if (options.guards === void 0) {
-        throw new Error("AdminManifestModule.forRoot: `guards` ist Pflicht, wenn `includeManifestController` aktiv ist (Default `true`). Setze `guards: [JwtAuthGuard, SuperAdminGuard]` (oder analog) \u2014 oder `guards: []`, um den Endpoint absichtlich auth-frei zu betreiben. Alternative: `includeManifestController: false` und einen eigenen Wrapping-Controller registrieren.");
+        throw new Error("AdminManifestModule.forRoot: `guards` is required when `includeManifestController` is enabled (default `true`). Set `guards: [JwtAuthGuard, SuperAdminGuard]` (or equivalent) \u2014 or `guards: []` to deliberately leave the endpoint unauthenticated. Alternative: `includeManifestController: false` plus registering your own wrapping controller.");
       }
       controllers.push(buildManifestController(options.guards, options.reloadGuards ?? []));
     }
@@ -1135,6 +1155,7 @@ AdminStatsModule = _ts_decorate11([
 // src/admin/admin-resources.module.ts
 import { Body, Controller as Controller4, Get as Get4, Inject as Inject9, Injectable as Injectable7, Module as Module4, NotFoundException, Param, Post as Post2, Query, Req, UseGuards as UseGuards3 } from "@nestjs/common";
 import { IsOptional, IsString, MaxLength } from "class-validator";
+import { BILLING_ERROR_CODES } from "@saasicat/types";
 function _ts_decorate12(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
@@ -1180,7 +1201,15 @@ var AdminResourcesService = class {
   }
   async getTenantDetail(slug) {
     const tenant = await this.resources.getTenantDetail(slug);
-    if (!tenant) throw new NotFoundException(`Tenant ${slug} not found`);
+    if (!tenant) {
+      throw new NotFoundException({
+        code: BILLING_ERROR_CODES.TENANT_NOT_FOUND,
+        message: `Tenant ${slug} not found`,
+        params: {
+          slug
+        }
+      });
+    }
     return tenant;
   }
   listUsers(filter) {
@@ -1206,7 +1235,15 @@ var AdminResourcesService = class {
   }
   async setTenantActive(slug, active, subscriptionStatus, actor, audit) {
     const result = await this.resources.setTenantActive(slug, active, subscriptionStatus);
-    if (!result) throw new NotFoundException(`Tenant ${slug} not found`);
+    if (!result) {
+      throw new NotFoundException({
+        code: BILLING_ERROR_CODES.TENANT_NOT_FOUND,
+        message: `Tenant ${slug} not found`,
+        params: {
+          slug
+        }
+      });
+    }
     await this.audit.log({
       actor,
       entity: "Tenant",

package/dist/{chunk-7RRWI5LH.js → chunk-AFK2IE2L.js}

@@ -1,12 +1,12 @@
 import {
   DiscoverySnapshotNotFoundError,
   loadDiscoverySnapshotFromFile
-} from "./chunk-ABB2CRAS.js";
+} from "./chunk-74SCJ4HF.js";
 import {
   ADVISORY_STRICT_MODE_CODES,
   validateBundleDraft,
   validatePlanDraft
-} from "./chunk-P3DP6GJE.js";
+} from "./chunk-LXUBCLRK.js";
 import {
   __name
 } from "./chunk-SHUYVCID.js";
@@ -66,9 +66,9 @@ function runPreflight(input) {
 __name(runPreflight, "runPreflight");
 function formatPreflightReport(report) {
   const lines = [];
-  lines.push(`Preflight (Status: ${report.overall.toUpperCase()})`, `  Plans: ${report.counts.planFindings} \xB7 Bundles: ${report.counts.bundleFindings} \xB7 Gesamt: ${report.counts.total}`, "");
+  lines.push(`Preflight (Status: ${report.overall.toUpperCase()})`, `  Plans: ${report.counts.planFindings} \xB7 Bundles: ${report.counts.bundleFindings} \xB7 Total: ${report.counts.total}`, "");
   if (report.findings.length === 0) {
-    lines.push("  \u2713 Keine Strict-Mode-Verst\xF6\xDFe gefunden.");
+    lines.push("  \u2713 No strict-mode violations found.");
     return lines.join("\n");
   }
   let lastEntity = "";
@@ -138,9 +138,9 @@ function validateSeedAgainstSnapshot(input) {
 __name(validateSeedAgainstSnapshot, "validateSeedAgainstSnapshot");
 function formatSeedGateReport(report) {
   const lines = [];
-  lines.push(`Seed-Gate (Status: ${report.overall.toUpperCase()})`, `  Plans: ${report.counts.planFindings} \xB7 Bundles: ${report.counts.bundleFindings} \xB7 Gesamt: ${report.counts.total}`, "");
+  lines.push(`Seed-Gate (Status: ${report.overall.toUpperCase()})`, `  Plans: ${report.counts.planFindings} \xB7 Bundles: ${report.counts.bundleFindings} \xB7 Total: ${report.counts.total}`, "");
   if (report.findings.length === 0) {
-    lines.push("  \u2713 Alle geseedeten Plan-/Bundle-Features sind discovered (und, sofern gepr\xFCft, approved).");
+    lines.push("  \u2713 Every seeded plan/bundle feature is discovered (and approved where checked).");
     return lines.join("\n");
   }
   let lastEntity = "";
@@ -174,10 +174,10 @@ function runSeedGateFromFile(options) {
   } catch (err) {
     if (err instanceof DiscoverySnapshotNotFoundError) {
       if (mode === "blocking") {
-        error(`[seed-gate] FEHLER: Kein Discovery-Snapshot unter ${options.snapshotPath} \u2014 im blocking-Modus Pflicht (Headless-Scan vor dem Seed ausf\xFChren, #23).`);
+        error(`[seed-gate] ERROR: no discovery snapshot at ${options.snapshotPath} \u2014 required in blocking mode (run the headless scan before seeding, #23).`);
         return exit(4);
       }
-      warn(`[seed-gate] Kein Discovery-Snapshot unter ${options.snapshotPath} \u2014 \xFCbersprungen (report-only).`);
+      warn(`[seed-gate] No discovery snapshot at ${options.snapshotPath} \u2014 skipped (report-only).`);
       return null;
     }
     throw err;
@@ -191,10 +191,10 @@ function runSeedGateFromFile(options) {
   log(formatSeedGateReport(report));
   if (report.overall === "error") {
     if (mode === "blocking") {
-      error("[seed-gate] blocking: Verst\xF6\xDFe gefunden \u2014 Seed wird abgebrochen (#23).");
+      error("[seed-gate] blocking: violations found \u2014 aborting the seed (#23).");
       return exit(seedGateExitCode(report));
     }
-    warn("[seed-gate] report-only: Verst\xF6\xDFe gefunden, Seed l\xE4uft trotzdem weiter.");
+    warn("[seed-gate] report-only: violations found, seeding continues anyway.");
   }
   return report;
 }

package/dist/{chunk-32EMXPU2.js → chunk-B7NRY2LV.js}

@@ -1,6 +1,6 @@
 import {
   appendImplicitDiscountLineItem
-} from "./chunk-MDIZUVIK.js";
+} from "./chunk-BSK6YBLI.js";
 import {
   SUBSCRIPTION_CONTRACT_REPOSITORY_TOKEN
 } from "./chunk-NYLON2VC.js";
@@ -13,6 +13,7 @@ import {
 
 // src/subscription-contract/subscription-contract.service.ts
 import { ConflictException, Inject, Injectable, NotFoundException, UnprocessableEntityException } from "@nestjs/common";
+import { CONTRACT_ERROR_CODES } from "@saasicat/types";
 function _ts_decorate(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
@@ -44,7 +45,13 @@ var SubscriptionContractService = class {
   async getById(contractId) {
     const row = await this.repo.findById(contractId);
     if (!row) {
-      throw new NotFoundException(`SubscriptionContract '${contractId}' nicht gefunden`);
+      throw new NotFoundException({
+        code: CONTRACT_ERROR_CODES.SUBSCRIPTION_CONTRACT_NOT_FOUND,
+        message: `SubscriptionContract '${contractId}' not found`,
+        params: {
+          contractId
+        }
+      });
     }
     return row;
   }
@@ -54,7 +61,14 @@ var SubscriptionContractService = class {
   async getActiveInvoiceSnapshotForTenant(tenantId, asOf = /* @__PURE__ */ new Date()) {
     const contract = await this.repo.findActiveByTenantId(tenantId, asOf);
     if (!contract) {
-      throw new NotFoundException(`Kein aktiver SubscriptionContract f\xFCr Tenant ${tenantId}`);
+      throw new NotFoundException({
+        code: CONTRACT_ERROR_CODES.NO_ACTIVE_SUBSCRIPTION_CONTRACT,
+        message: `No active subscription contract for tenant ${tenantId}`,
+        params: {
+          tenantId,
+          asOf: asOf.toISOString()
+        }
+      });
     }
     return subscriptionContractToInvoiceSnapshot(contract);
   }
@@ -87,7 +101,14 @@ var SubscriptionContractService = class {
   }
   createDataFromOffer(offer, options) {
     if (offer.status !== "consumed") {
-      throw new ConflictException(`CheckoutOffer '${offer.id}' muss vor Contract-Erstellung consumed sein`);
+      throw new ConflictException({
+        code: CONTRACT_ERROR_CODES.CHECKOUT_OFFER_NOT_CONSUMED,
+        message: `CheckoutOffer '${offer.id}' must be consumed before the contract is created`,
+        params: {
+          offerId: offer.id,
+          status: offer.status
+        }
+      });
     }
     const lineItems = this.lineItemsFromOffer(offer);
     return {
@@ -120,8 +141,8 @@ var SubscriptionContractService = class {
     const source = offer.lineItems ?? [];
     if (source.length === 0) {
       throw new UnprocessableEntityException({
-        code: "CHECKOUT_OFFER_LINE_ITEMS_REQUIRED",
-        message: "Aus einem CheckoutOffer kann nur ein Contract entstehen, wenn LineItems eingefroren sind."
+        code: CONTRACT_ERROR_CODES.CHECKOUT_OFFER_LINE_ITEMS_REQUIRED,
+        message: "A checkout offer can yield only one contract, and only once its line items are frozen."
       });
     }
     return appendImplicitDiscountLineItem({
@@ -159,8 +180,11 @@ var SubscriptionContractService = class {
     const date = value instanceof Date ? new Date(value) : new Date(value);
     if (Number.isNaN(date.getTime())) {
       throw new UnprocessableEntityException({
-        code: "SUBSCRIPTION_CONTRACT_INVALID_DATE",
-        message: `${field} muss ein g\xFCltiges Datum sein.`
+        code: CONTRACT_ERROR_CODES.SUBSCRIPTION_CONTRACT_INVALID_DATE,
+        message: `${field} must be a valid date.`,
+        params: {
+          field
+        }
       });
     }
     return date;
@@ -180,32 +204,39 @@ var SubscriptionContractService = class {
   assertCreateData(data) {
     if (data.lineItems.length === 0) {
       throw new UnprocessableEntityException({
-        code: "SUBSCRIPTION_CONTRACT_LINE_ITEMS_REQUIRED",
-        message: "SubscriptionContract ben\xF6tigt mindestens eine LineItem."
+        code: CONTRACT_ERROR_CODES.SUBSCRIPTION_CONTRACT_LINE_ITEMS_REQUIRED,
+        message: "A subscription contract requires at least one line item."
       });
     }
     if (data.effectiveUntil && data.effectiveUntil <= data.effectiveFrom) {
       throw new UnprocessableEntityException({
-        code: "SUBSCRIPTION_CONTRACT_INVALID_WINDOW",
-        message: "effectiveUntil muss nach effectiveFrom liegen."
+        code: CONTRACT_ERROR_CODES.SUBSCRIPTION_CONTRACT_INVALID_WINDOW,
+        message: "effectiveUntil must be after effectiveFrom."
       });
     }
     const planLineItems = data.lineItems.filter((item) => item.kind === "plan");
     if (planLineItems.length !== 1) {
       throw new UnprocessableEntityException({
-        code: "SUBSCRIPTION_CONTRACT_PLAN_LINE_ITEM_REQUIRED",
-        message: "SubscriptionContract ben\xF6tigt genau eine Plan-Grundposition."
+        code: CONTRACT_ERROR_CODES.SUBSCRIPTION_CONTRACT_PLAN_LINE_ITEM_REQUIRED,
+        message: "A subscription contract requires exactly one plan base item."
       });
     }
   }
   assertTerminable(existing, data) {
     if (existing.status === "terminated" || existing.status === "superseded") {
-      throw new ConflictException(`SubscriptionContract '${existing.id}' ist bereits geschlossen`);
+      throw new ConflictException({
+        code: CONTRACT_ERROR_CODES.SUBSCRIPTION_CONTRACT_ALREADY_CLOSED,
+        message: `SubscriptionContract '${existing.id}' is already closed`,
+        params: {
+          contractId: existing.id,
+          status: existing.status
+        }
+      });
     }
     if (data.effectiveUntil <= existing.effectiveFrom) {
       throw new UnprocessableEntityException({
-        code: "SUBSCRIPTION_CONTRACT_TERMINATION_BEFORE_START",
-        message: "effectiveUntil muss nach effectiveFrom des Contracts liegen."
+        code: CONTRACT_ERROR_CODES.SUBSCRIPTION_CONTRACT_TERMINATION_BEFORE_START,
+        message: "effectiveUntil must be after the effectiveFrom of the contract."
       });
     }
   }

package/dist/{chunk-MDIZUVIK.js → chunk-BSK6YBLI.js}

@@ -40,7 +40,7 @@ function createDiscountLineItem(input, discountNet) {
     kind: "discount",
     sourceKey: promoCode?.code ?? firstPromotion?.id ?? "price-discount",
     sourceVersionId: null,
-    titleSnapshot: promoCode?.label ?? firstPromotion?.label ?? "Rabatt",
+    titleSnapshot: promoCode?.label ?? firstPromotion?.label ?? "Discount",
     descriptionSnapshot: promoCode ? `Promo-Code ${promoCode.code}` : null,
     quantity: 1,
     unit: null,

package/dist/{chunk-R2QOSVAA.js → chunk-DQKCK7DX.js}

@@ -152,7 +152,7 @@ __name(findPlan, "findPlan");
 function getPlanOrThrow(catalog, planId) {
   const plan = findPlan(catalog, planId);
   if (!plan) {
-    throw new Error(`Plan "${planId}" nicht im Catalog (${catalog.projectKey}) gefunden`);
+    throw new Error(`Plan "${planId}" not found in the catalog (${catalog.projectKey})`);
   }
   return plan;
 }

package/dist/{chunk-GLLCB4BP.js → chunk-EUU3B6NB.js}

@@ -8,7 +8,7 @@ import {
   PROMO_SUBSCRIPTION_LOOKUP_TOKEN,
   PROMO_TRANSACTION_RUNNER_TOKEN,
   PromoCodesService
-} from "./chunk-E7AJ42AB.js";
+} from "./chunk-QLJHIIOY.js";
 import {
   AdminAuditService
 } from "./chunk-E56W4U2P.js";
@@ -58,7 +58,7 @@ var PromoCodeExpirer = class _PromoCodeExpirer {
     const codes = await this.promoRepo.expireDueCodes(now);
     const redemptions = await this.redemptionRepo.expireDueRedemptions(now);
     if (codes > 0 || redemptions > 0) {
-      this.logger.log(`PromoCodeExpirer: ${codes} Codes, ${redemptions} Redemptions abgelaufen.`);
+      this.logger.log(`PromoCodeExpirer: ${codes} Codes, ${redemptions} redemptions expired.`);
     }
   }
 };
@@ -84,6 +84,7 @@ PromoCodeExpirer = _ts_decorate([
 
 // src/promo/rate-limit.guard.ts
 import { HttpException, HttpStatus, Injectable as Injectable2 } from "@nestjs/common";
+import { REGISTRATION_ERROR_CODES } from "@saasicat/types";
 function _ts_decorate2(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
@@ -95,6 +96,15 @@ var IP_WINDOW_MS = 6e4;
 var IP_LIMIT = 20;
 var SESSION_WINDOW_MS = 60 * 6e4;
 var SESSION_LIMIT = 50;
+function rateLimited() {
+  return new HttpException({
+    valid: false,
+    // Superseded by `code` — kept until all consumers read `code`.
+    reason: "RATE_LIMITED",
+    code: REGISTRATION_ERROR_CODES.RATE_LIMITED
+  }, HttpStatus.TOO_MANY_REQUESTS);
+}
+__name(rateLimited, "rateLimited");
 var PromoCodeRateLimitGuard = class {
   static {
     __name(this, "PromoCodeRateLimitGuard");
@@ -106,16 +116,10 @@ var PromoCodeRateLimitGuard = class {
     const ipKey = ipFingerprint(req);
     const sessionKey = req.user?.id ?? null;
     if (this.exceeded(this.ipBuckets, ipKey, IP_WINDOW_MS, IP_LIMIT)) {
-      throw new HttpException({
-        valid: false,
-        reason: "RATE_LIMITED"
-      }, HttpStatus.TOO_MANY_REQUESTS);
+      throw rateLimited();
     }
     if (sessionKey && this.exceeded(this.sessionBuckets, sessionKey, SESSION_WINDOW_MS, SESSION_LIMIT)) {
-      throw new HttpException({
-        valid: false,
-        reason: "RATE_LIMITED"
-      }, HttpStatus.TOO_MANY_REQUESTS);
+      throw rateLimited();
     }
     return true;
   }
@@ -179,21 +183,21 @@ var PreviewPromoCodeDto = class {
 _ts_decorate3([
   IsString(),
   Matches(CODE_PATTERN, {
-    message: 'code muss aus A\u2013Z, 0\u20139, "-" und "_" bestehen (4\u201332 Zeichen)'
+    message: 'code must consist of A\u2013Z, 0\u20139, "-" and "_" (4\u201332 characters)'
   }),
   _ts_metadata2("design:type", String)
 ], PreviewPromoCodeDto.prototype, "code", void 0);
 _ts_decorate3([
   IsString(),
   Matches(PLAN_OR_CYCLE_PATTERN, {
-    message: "plan muss SCREAMING_SNAKE_CASE sein"
+    message: "plan must be SCREAMING_SNAKE_CASE"
   }),
   _ts_metadata2("design:type", String)
 ], PreviewPromoCodeDto.prototype, "plan", void 0);
 _ts_decorate3([
   IsString(),
   Matches(PLAN_OR_CYCLE_PATTERN, {
-    message: "billingCycle muss SCREAMING_SNAKE_CASE sein (z. B. MONTHLY, YEARLY)"
+    message: "billingCycle must be SCREAMING_SNAKE_CASE (e.g. MONTHLY, YEARLY)"
   }),
   _ts_metadata2("design:type", String)
 ], PreviewPromoCodeDto.prototype, "billingCycle", void 0);