@saasicat/nest 0.18.1 → 0.21.0

package/dist/{chunk-PLJEAUFU.js → chunk-FYWLPYBK.js}

@@ -7,6 +7,9 @@ import {
 import {
   SaaSiCatPublicRoute
 } from "./chunk-YSC46BGM.js";
+import {
+  codedError
+} from "./chunk-EBJJNTW6.js";
 import {
   asProvider
 } from "./chunk-SABTXESR.js";
@@ -16,6 +19,7 @@ import {
 
 // src/admin/super-admin.guard.ts
 import { ForbiddenException, Injectable } from "@nestjs/common";
+import { AUTH_ERROR_CODES } from "@saasicat/types";
 function _ts_decorate(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
@@ -29,10 +33,18 @@ var SuperAdminGuard = class {
   }
   canActivate(context) {
     const request = context.switchToHttp().getRequest();
-    if (!request.user) throw new ForbiddenException("Nicht authentifiziert");
+    if (!request.user) {
+      throw new ForbiddenException({
+        code: AUTH_ERROR_CODES.NOT_AUTHENTICATED,
+        message: "Not authenticated"
+      });
+    }
     const role = request.user.platformRole ?? request.user.role;
     if (role !== "SUPER_ADMIN") {
-      throw new ForbiddenException("Nur SUPER_ADMIN-Rolle erlaubt");
+      throw new ForbiddenException({
+        code: AUTH_ERROR_CODES.SUPER_ADMIN_REQUIRED,
+        message: "Only the SUPER_ADMIN role is allowed"
+      });
     }
     return true;
   }
@@ -119,7 +131,7 @@ var MfaService = class _MfaService {
         return false;
       }
       const message = error instanceof Error ? error.message : String(error);
-      this.logger.warn(`TOTP-Verify f\xFCr User ${input.userId} unerwartet fehlgeschlagen: ${message}`);
+      this.logger.warn(`TOTP verification for user ${input.userId} failed unexpectedly: ${message}`);
       return false;
     }
   }
@@ -146,6 +158,7 @@ MfaService = _ts_decorate2([
 // src/admin/mfa.guard.ts
 import { Inject as Inject2, Injectable as Injectable3, Logger as Logger2, SetMetadata, UnauthorizedException } from "@nestjs/common";
 import { Reflector } from "@nestjs/core";
+import { AUTH_ERROR_CODES as AUTH_ERROR_CODES2 } from "@saasicat/types";
 function _ts_decorate3(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
@@ -187,22 +200,30 @@ var MfaGuard = class _MfaGuard {
     }
     const request = context.switchToHttp().getRequest();
     const user = request.user;
-    if (!user) throw new UnauthorizedException({
-      reason: "NOT_AUTHENTICATED"
-    });
+    if (!user) {
+      throw new UnauthorizedException({
+        ...codedError(AUTH_ERROR_CODES2.NOT_AUTHENTICATED),
+        // `reason` is superseded by `code` and will be removed.
+        reason: "NOT_AUTHENTICATED"
+      });
+    }
     const enabled = await this.mfaService.isEnabled(user.id);
     if (!enabled) {
       throw new UnauthorizedException({
+        code: AUTH_ERROR_CODES2.MFA_NOT_SET_UP,
+        // `reason` is superseded by `code` and will be removed.
         reason: "MFA_NOT_SET_UP",
-        message: "Bitte zuerst MFA-Setup \xFCber das CLI ausf\xFChren."
+        message: "Run the MFA setup via the CLI first."
       });
     }
     const headerVal = request.headers?.["x-mfa-code"];
     const code = Array.isArray(headerVal) ? headerVal[0] : headerVal;
     if (!code) {
       throw new UnauthorizedException({
+        code: AUTH_ERROR_CODES2.MFA_REQUIRED,
+        // `reason` is superseded by `code` and will be removed.
         reason: "MFA_REQUIRED",
-        message: "TOTP-Code im Header X-Mfa-Code erforderlich."
+        message: "TOTP code required in the X-Mfa-Code header."
       });
     }
     const valid = await this.mfaService.verify({
@@ -211,8 +232,10 @@ var MfaGuard = class _MfaGuard {
     });
     if (!valid) {
       throw new UnauthorizedException({
+        code: AUTH_ERROR_CODES2.MFA_FAILED,
+        // `reason` is superseded by `code` and will be removed.
         reason: "MFA_FAILED",
-        message: "TOTP-Code ung\xFCltig."
+        message: "Invalid TOTP code."
       });
     }
     return true;
@@ -615,7 +638,7 @@ var PLATFORM_CORE_MANIFEST_CONTRIBUTION = {
     actions: [
       {
         id: "platform.tenants.suspend",
-        label: "Mandant suspendieren",
+        label: "Suspend tenant",
         actionKey: "tenants.suspend",
         requiredCapability: "tenants.suspend",
         requiresMfa: true,
@@ -623,7 +646,7 @@ var PLATFORM_CORE_MANIFEST_CONTRIBUTION = {
       },
       {
         id: "platform.tenants.reactivate",
-        label: "Mandant reaktivieren",
+        label: "Reactivate tenant",
         actionKey: "tenants.reactivate",
         requiredCapability: "tenants.reactivate",
         requiresMfa: true,
@@ -639,7 +662,7 @@ var PLATFORM_CORE_MANIFEST_CONTRIBUTION = {
       },
       {
         id: "platform.tenants.export",
-        label: "DSGVO-Export",
+        label: "GDPR export",
         actionKey: "tenants.export",
         requiredCapability: "tenants.export",
         requiresMfa: true,
@@ -647,7 +670,7 @@ var PLATFORM_CORE_MANIFEST_CONTRIBUTION = {
       },
       {
         id: "platform.subscriptions.cancel",
-        label: "Subscription k\xFCndigen",
+        label: "Cancel subscription",
         actionKey: "subscriptions.cancel",
         requiredCapability: "subscriptions.cancel",
         requiresMfa: true,
@@ -655,7 +678,7 @@ var PLATFORM_CORE_MANIFEST_CONTRIBUTION = {
       },
       {
         id: "platform.pilots.grant",
-        label: "Pilot-Status setzen",
+        label: "Set pilot status",
         actionKey: "pilots.grant",
         requiredCapability: "pilots.grant",
         requiresMfa: true,
@@ -663,7 +686,7 @@ var PLATFORM_CORE_MANIFEST_CONTRIBUTION = {
       },
       {
         id: "platform.pilots.revoke",
-        label: "Pilot-Status entziehen",
+        label: "Revoke pilot status",
         actionKey: "pilots.revoke",
         requiredCapability: "pilots.revoke",
         requiresMfa: true,
@@ -671,7 +694,7 @@ var PLATFORM_CORE_MANIFEST_CONTRIBUTION = {
       },
       {
         id: "platform.pilots.extend",
-        label: "Pilot verl\xE4ngern",
+        label: "Extend pilot",
         actionKey: "pilots.extend",
         requiredCapability: "pilots.extend",
         requiresMfa: true,
@@ -683,102 +706,102 @@ var PLATFORM_CORE_MANIFEST_CONTRIBUTION = {
     actions: [
       {
         key: "TENANT_SUSPEND",
-        label: "Mandant suspendiert",
+        label: "Tenant suspended",
         severity: "high"
       },
       {
         key: "TENANT_REACTIVATE",
-        label: "Mandant reaktiviert",
+        label: "Tenant reactivated",
         severity: "medium"
       },
       {
         key: "TENANT_IMPERSONATE",
-        label: "Impersonation gestartet",
+        label: "Impersonation started",
         severity: "high"
       },
       {
         key: "TENANT_EXPORT",
-        label: "DSGVO-Export ausgel\xF6st",
+        label: "GDPR export triggered",
         severity: "medium"
       },
       {
         key: "PILOT_CREATE",
-        label: "Pilot-Tenant angelegt",
+        label: "Pilot tenant created",
         severity: "medium"
       },
       {
         key: "PILOT_GRANT",
-        label: "Pilot-Status gesetzt",
+        label: "Pilot status set",
         severity: "medium"
       },
       {
         key: "PILOT_REVOKE",
-        label: "Pilot-Status entzogen",
+        label: "Pilot status revoked",
         severity: "medium"
       },
       {
         key: "PILOT_EXTEND",
-        label: "Pilot verl\xE4ngert",
+        label: "Pilot extended",
         severity: "low"
       },
       {
         key: "PLAN_VERSION_PUBLISH",
-        label: "Plan-Version freigegeben",
+        label: "Plan version approved",
         severity: "high"
       },
       {
         key: "PLAN_VERSION_TERMINATE",
-        label: "Plan-Version terminiert",
+        label: "Plan version terminated",
         severity: "high"
       },
       {
         key: "SUBSCRIPTION_CANCEL",
-        label: "Subscription gek\xFCndigt",
+        label: "Subscription cancelled",
         severity: "high"
       },
       {
         key: "USER_RESET_PASSWORD",
-        label: "Passwort-Reset ausgel\xF6st",
+        label: "Password reset triggered",
         severity: "medium"
       },
       {
         key: "USER_DEACTIVATE",
-        label: "User deaktiviert",
+        label: "User deactivated",
         severity: "high"
       },
       {
         key: "USER_REASSIGN_ADMIN",
-        label: "Admin-Rolle \xFCbertragen",
+        label: "Admin role transferred",
         severity: "high"
       },
       {
         key: "PLATFORM_EMAIL_PROVIDER_CREATE",
-        label: "Plattform-Absender angelegt",
+        label: "Platform sender created",
         severity: "medium"
       },
       {
         key: "PLATFORM_EMAIL_PROVIDER_UPDATE",
-        label: "Plattform-Absender ge\xE4ndert",
+        label: "Platform sender changed",
         severity: "medium"
       },
       {
         key: "PLATFORM_EMAIL_PROVIDER_DELETE",
-        label: "Plattform-Absender gel\xF6scht",
+        label: "Platform sender deleted",
         severity: "medium"
       },
       {
         key: "PLATFORM_EMAIL_PROVIDER_TEST",
-        label: "Plattform-Absender Test-Versand",
+        label: "Platform sender test send",
         severity: "low"
       },
       {
         key: "EMAIL_HISTORY_DELETE",
-        label: "Plattform-E-Mail aus Verlauf entfernt",
+        label: "Platform email removed from history",
         severity: "medium"
       },
       {
         key: "EMAIL_HISTORY_RESEND",
-        label: "Plattform-E-Mail erneut versendet",
+        label: "Platform email resent",
         severity: "low"
       }
     ]
@@ -898,7 +921,7 @@ var AdminManifestModule = class _AdminManifestModule {
     ];
     if (includeManifestController) {
       if (options.guards === void 0) {
-        throw new Error("AdminManifestModule.forRoot: `guards` ist Pflicht, wenn `includeManifestController` aktiv ist (Default `true`). Setze `guards: [JwtAuthGuard, SuperAdminGuard]` (oder analog) \u2014 oder `guards: []`, um den Endpoint absichtlich auth-frei zu betreiben. Alternative: `includeManifestController: false` und einen eigenen Wrapping-Controller registrieren.");
+        throw new Error("AdminManifestModule.forRoot: `guards` is required when `includeManifestController` is enabled (default `true`). Set `guards: [JwtAuthGuard, SuperAdminGuard]` (or equivalent) \u2014 or `guards: []` to deliberately leave the endpoint unauthenticated. Alternative: `includeManifestController: false` plus registering your own wrapping controller.");
       }
       controllers.push(buildManifestController(options.guards, options.reloadGuards ?? []));
     }
@@ -1135,6 +1158,7 @@ AdminStatsModule = _ts_decorate11([
 // src/admin/admin-resources.module.ts
 import { Body, Controller as Controller4, Get as Get4, Inject as Inject9, Injectable as Injectable7, Module as Module4, NotFoundException, Param, Post as Post2, Query, Req, UseGuards as UseGuards3 } from "@nestjs/common";
 import { IsOptional, IsString, MaxLength } from "class-validator";
+import { BILLING_ERROR_CODES } from "@saasicat/types";
 function _ts_decorate12(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
@@ -1180,7 +1204,15 @@ var AdminResourcesService = class {
   }
   async getTenantDetail(slug) {
     const tenant = await this.resources.getTenantDetail(slug);
-    if (!tenant) throw new NotFoundException(`Tenant ${slug} not found`);
+    if (!tenant) {
+      throw new NotFoundException({
+        code: BILLING_ERROR_CODES.TENANT_NOT_FOUND,
+        message: `Tenant ${slug} not found`,
+        params: {
+          slug
+        }
+      });
+    }
     return tenant;
   }
   listUsers(filter) {
@@ -1206,7 +1238,15 @@ var AdminResourcesService = class {
   }
   async setTenantActive(slug, active, subscriptionStatus, actor, audit) {
     const result = await this.resources.setTenantActive(slug, active, subscriptionStatus);
-    if (!result) throw new NotFoundException(`Tenant ${slug} not found`);
+    if (!result) {
+      throw new NotFoundException({
+        code: BILLING_ERROR_CODES.TENANT_NOT_FOUND,
+        message: `Tenant ${slug} not found`,
+        params: {
+          slug
+        }
+      });
+    }
     await this.audit.log({
       actor,
       entity: "Tenant",