@saasicat/nest 0.18.1 → 0.21.0

package/dist/{chunk-E7AJ42AB.js → chunk-VQQWF7MW.js}

@@ -3,7 +3,7 @@ import {
   computeIncludedVat,
   getPlanPriceGross,
   round2
-} from "./chunk-R2QOSVAA.js";
+} from "./chunk-DQKCK7DX.js";
 import {
   __name
 } from "./chunk-SHUYVCID.js";
@@ -50,15 +50,15 @@ function buildLabel(code, cycle) {
     maximumFractionDigits: 2
   })} \u20AC`;
   if (code.durationType === "ONCE") {
-    return `${valueStr} einmalig`;
+    return `${valueStr} once`;
   }
   if (code.durationType === "MONTHS") {
     const m = code.durationValue ?? 0;
-    return m === 1 ? `${valueStr} im ersten Monat` : `${valueStr} f\xFCr ${m} Monate`;
+    return m === 1 ? `${valueStr} for the first month` : `${valueStr} for ${m} months`;
   }
   const n = code.durationValue ?? 0;
-  if (n === 1) return cycle === "YEARLY" ? `${valueStr} im ersten Jahr` : `${valueStr} im ersten Monat`;
-  return cycle === "YEARLY" ? `${valueStr} in den ersten ${n} Jahren` : `${valueStr} in den ersten ${n} Monaten`;
+  if (n === 1) return cycle === "YEARLY" ? `${valueStr} for the first year` : `${valueStr} for the first month`;
+  return cycle === "YEARLY" ? `${valueStr} for the first ${n} years` : `${valueStr} for the first ${n} months`;
 }
 __name(buildLabel, "buildLabel");
 
@@ -74,6 +74,7 @@ var PROMO_SERVICE_CONFIG_TOKEN = /* @__PURE__ */ Symbol.for("saas-platform/Promo
 
 // src/promo/service.ts
 import { BadRequestException, Inject, Injectable, NotFoundException } from "@nestjs/common";
+import { BILLING_ERROR_CODES, PROMO_ERROR_CODES } from "@saasicat/types";
 function _ts_decorate(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
@@ -91,7 +92,23 @@ function _ts_param(paramIndex, decorator) {
   };
 }
 __name(_ts_param, "_ts_param");
-var CODE_PATTERN = /^[A-Z0-9_-]{4,32}$/;
+var CODE_MIN_LENGTH = 4;
+var CODE_MAX_LENGTH = 32;
+var CODE_PATTERN = new RegExp(`^[A-Z0-9_-]{${CODE_MIN_LENGTH},${CODE_MAX_LENGTH}}$`);
+var PERCENT_MIN_EXCLUSIVE = 0;
+var PERCENT_MAX = 100;
+var DURATION_MIN = 1;
+var DURATION_MAX = 24;
+function notRedeemable(reason) {
+  return new BadRequestException({
+    code: PROMO_ERROR_CODES.PROMO_CODE_NOT_REDEEMABLE,
+    message: `Code cannot be redeemed: ${reason}`,
+    params: {
+      reason
+    }
+  });
+}
+__name(notRedeemable, "notRedeemable");
 var PromoCodesService = class {
   static {
     __name(this, "PromoCodesService");
@@ -120,46 +137,118 @@ var PromoCodesService = class {
   async create(input) {
     const code = input.code.trim().toUpperCase();
     if (!CODE_PATTERN.test(code)) {
-      throw new BadRequestException('Code darf nur Gro\xDFbuchstaben, Ziffern, \u201E-" und \u201E_" enthalten (4\u201332 Zeichen).');
+      throw new BadRequestException({
+        code: PROMO_ERROR_CODES.PROMO_CODE_FORMAT_INVALID,
+        message: 'The code may only contain upper-case letters, digits, "-" and "_" (4\u201332 characters).',
+        params: {
+          promoCode: code,
+          minLength: CODE_MIN_LENGTH,
+          maxLength: CODE_MAX_LENGTH
+        }
+      });
     }
     if (input.valueType === "PERCENT") {
-      if (!(input.value > 0 && input.value <= 100)) {
-        throw new BadRequestException("Prozentsatz muss zwischen 0 und 100 liegen.");
+      if (!(input.value > PERCENT_MIN_EXCLUSIVE && input.value <= PERCENT_MAX)) {
+        throw new BadRequestException({
+          code: PROMO_ERROR_CODES.PROMO_PERCENT_OUT_OF_RANGE,
+          message: "The percentage must be between 0 and 100.",
+          params: {
+            value: input.value,
+            min: PERCENT_MIN_EXCLUSIVE,
+            max: PERCENT_MAX
+          }
+        });
       }
     } else if (!(input.value > 0)) {
-      throw new BadRequestException("Betrag muss positiv sein.");
+      throw new BadRequestException({
+        code: PROMO_ERROR_CODES.PROMO_AMOUNT_NOT_POSITIVE,
+        message: "The amount must be positive.",
+        params: {
+          value: input.value,
+          min: 0
+        }
+      });
     }
     if (input.durationType === "ONCE") {
       if (input.durationValue != null) {
-        throw new BadRequestException("Bei einmaligem Rabatt darf keine Laufzeit gesetzt sein.");
+        throw new BadRequestException({
+          code: PROMO_ERROR_CODES.PROMO_ONE_OFF_WITH_DURATION,
+          message: "A one-off discount must not set a duration.",
+          params: {
+            durationValue: input.durationValue
+          }
+        });
       }
     } else {
       const v = input.durationValue;
-      if (v == null || v < 1 || v > 24) {
-        throw new BadRequestException("Laufzeit ung\xFCltig (max. 24 Monate bzw. Abrechnungsperioden).");
+      if (v == null || v < DURATION_MIN || v > DURATION_MAX) {
+        throw new BadRequestException({
+          code: PROMO_ERROR_CODES.PROMO_DURATION_INVALID,
+          message: "Invalid duration (at most 24 months or billing periods).",
+          params: {
+            durationValue: v ?? null,
+            min: DURATION_MIN,
+            max: DURATION_MAX
+          }
+        });
       }
     }
     if (input.validFrom && input.validUntil && input.validFrom >= input.validUntil) {
-      throw new BadRequestException("G\xFCltigkeits-Fenster ung\xFCltig.");
+      throw new BadRequestException({
+        code: PROMO_ERROR_CODES.PROMO_VALIDITY_WINDOW_INVALID,
+        message: "Invalid validity window.",
+        params: {
+          validFrom: input.validFrom.toISOString(),
+          validUntil: input.validUntil.toISOString()
+        }
+      });
     }
     const plans = input.appliesToPlans ?? [];
     const blocked = this.config.nonRedeemablePlans ?? [];
     for (const p of plans) {
       if (blocked.includes(p)) {
-        throw new BadRequestException(`${p}-Plan kann nicht rabattiert werden.`);
+        throw new BadRequestException({
+          code: PROMO_ERROR_CODES.PROMO_PLAN_NOT_DISCOUNTABLE,
+          message: `${p}-Plan cannot be discounted.`,
+          params: {
+            plan: p
+          }
+        });
       }
     }
     if (input.minimumPlanAmountGross != null && input.minimumPlanAmountGross <= 0) {
-      throw new BadRequestException("Mindest-Plan-Brutto muss positiv sein.");
+      throw new BadRequestException({
+        code: PROMO_ERROR_CODES.PROMO_MIN_AMOUNT_NOT_POSITIVE,
+        message: "The minimum plan gross amount must be positive.",
+        params: {
+          value: input.minimumPlanAmountGross,
+          min: 0
+        }
+      });
     }
     if (input.valueType === "ABSOLUTE" && !input.allowZeroInvoice) {
       const lowestApplicableGross = this.lowestApplicablePlanGross(plans);
       if (lowestApplicableGross != null && input.value >= lowestApplicableGross) {
-        throw new BadRequestException("Bei Absolutbetr\xE4gen muss der Rabatt unter dem niedrigsten anwendbaren Plan-Preis liegen oder allowZeroInvoice aktiviert sein.");
+        throw new BadRequestException({
+          code: PROMO_ERROR_CODES.PROMO_WOULD_PRODUCE_ZERO_INVOICE,
+          message: "For absolute amounts the discount must stay below the lowest applicable plan price, or allowZeroInvoice must be enabled.",
+          params: {
+            value: input.value,
+            lowestApplicablePlanGross: lowestApplicableGross
+          }
+        });
       }
     }
     const exists = await this.promoRepo.findByCode(code);
-    if (exists) throw new BadRequestException("Code existiert bereits.");
+    if (exists) {
+      throw new BadRequestException({
+        code: PROMO_ERROR_CODES.PROMO_CODE_ALREADY_EXISTS,
+        message: "The code already exists.",
+        params: {
+          promoCode: code
+        }
+      });
+    }
     return this.promoRepo.create({
       ...input,
       code
@@ -167,10 +256,26 @@ var PromoCodesService = class {
   }
   async update(id, input) {
     const existing = await this.promoRepo.findById(id);
-    if (!existing) throw new NotFoundException("Code nicht gefunden");
+    if (!existing) {
+      throw new NotFoundException({
+        code: PROMO_ERROR_CODES.PROMO_CODE_NOT_FOUND,
+        message: "Code not found",
+        params: {
+          promoCodeId: id,
+          promoCode: null
+        }
+      });
+    }
     if (input.maxRedemptions != null && existing.maxRedemptions != null) {
       if (input.maxRedemptions < existing.maxRedemptions) {
-        throw new BadRequestException("maxRedemptions kann nicht gesenkt werden.");
+        throw new BadRequestException({
+          code: PROMO_ERROR_CODES.PROMO_MAX_REDEMPTIONS_LOWERED,
+          message: "maxRedemptions cannot be lowered.",
+          params: {
+            current: existing.maxRedemptions,
+            requested: input.maxRedemptions
+          }
+        });
       }
     }
     return this.promoRepo.update(id, input);
@@ -178,7 +283,14 @@ var PromoCodesService = class {
   async softDelete(id) {
     const redemptions = await this.redemptionRepo.countByPromoCode(id);
     if (redemptions > 0) {
-      throw new BadRequestException("Code hat bereits Einl\xF6sungen \u2014 Soft-Delete nicht m\xF6glich. Stattdessen pausieren.");
+      throw new BadRequestException({
+        code: PROMO_ERROR_CODES.PROMO_CODE_HAS_REDEMPTIONS,
+        message: "The code already has redemptions \u2014 it cannot be soft-deleted. Pause it instead.",
+        params: {
+          promoCodeId: id,
+          redemptions
+        }
+      });
     }
     await this.promoRepo.softDelete(id);
   }
@@ -189,7 +301,16 @@ var PromoCodesService = class {
   async findOne(id) {
     await this.lazyExpire();
     const code = await this.promoRepo.findById(id);
-    if (!code || code.deletedAt) throw new NotFoundException("Code nicht gefunden");
+    if (!code || code.deletedAt) {
+      throw new NotFoundException({
+        code: PROMO_ERROR_CODES.PROMO_CODE_NOT_FOUND,
+        message: "Code not found",
+        params: {
+          promoCodeId: id,
+          promoCode: null
+        }
+      });
+    }
     return code;
   }
   async stats(id) {
@@ -317,28 +438,51 @@ var PromoCodesService = class {
     const code = input.code.trim().toUpperCase();
     const promo = await this.promoRepo.findByCode(code, tx);
     if (!promo || promo.deletedAt) {
-      throw new BadRequestException("Code nicht gefunden");
+      throw new BadRequestException({
+        code: PROMO_ERROR_CODES.PROMO_CODE_NOT_FOUND,
+        // The lookup runs on the code string, so there is no id to report.
+        message: "Code not found",
+        params: {
+          promoCodeId: null,
+          promoCode: code
+        }
+      });
     }
     const sub = await this.subscriptionLookup.findById(input.subscriptionId, tx);
-    if (!sub) throw new NotFoundException("Subscription nicht gefunden");
+    if (!sub) {
+      throw new NotFoundException({
+        code: BILLING_ERROR_CODES.SUBSCRIPTION_NOT_FOUND,
+        message: "Subscription not found",
+        params: {
+          tenantId: input.tenantId
+        }
+      });
+    }
     if (sub.tenantId !== input.tenantId) {
-      throw new BadRequestException("Subscription geh\xF6rt nicht zum Tenant");
+      throw new BadRequestException({
+        code: BILLING_ERROR_CODES.SUBSCRIPTION_TENANT_MISMATCH,
+        message: "Subscription does not belong to the tenant",
+        params: {
+          subscriptionId: sub.id,
+          tenantId: input.tenantId
+        }
+      });
     }
     const reason = this.checkEligibility(promo, {
       code,
       planId: sub.plan,
       billingCycle: sub.billingCycle
     });
-    if (reason) throw new BadRequestException(`Code nicht einl\xF6sbar: ${reason}`);
+    if (reason) throw notRedeemable(reason);
     const firstTimeReason = await this.checkFirstTimeCustomer(promo, input.email, {
       requireEmail: true
     });
     if (firstTimeReason) {
-      throw new BadRequestException(`Code nicht einl\xF6sbar: ${firstTimeReason}`);
+      throw notRedeemable(firstTimeReason);
     }
     const claimed = await this.promoRepo.claimSlot(promo.id, tx);
     if (!claimed) {
-      throw new BadRequestException("Code nicht einl\xF6sbar: EXHAUSTED");
+      throw notRedeemable("EXHAUSTED");
     }
     await this.promoRepo.markExhaustedIfFull(promo.id, tx);
     const startsAt = sub.startedAt ?? /* @__PURE__ */ new Date();

package/dist/{chunk-GJBXOCRZ.js → chunk-XTVAFJ3P.js}

@@ -1,6 +1,6 @@
 import {
   appendImplicitDiscountLineItem
-} from "./chunk-MDIZUVIK.js";
+} from "./chunk-BSK6YBLI.js";
 import {
   SaaSiCatPublicRoute
 } from "./chunk-YSC46BGM.js";
@@ -21,7 +21,7 @@ var CHECKOUT_OFFER_REPOSITORY_TOKEN = /* @__PURE__ */ Symbol.for("saas-platform/
 
 // src/checkout-offer/checkout-offer.service.ts
 import { ConflictException, Inject, Injectable, NotFoundException, Optional, UnprocessableEntityException } from "@nestjs/common";
-import { buildFeatureRequiresIndex, collectUnsatisfiedRequires, startOfUtcDay } from "@saasicat/types";
+import { CONTRACT_ERROR_CODES, buildFeatureRequiresIndex, collectUnsatisfiedRequires, startOfUtcDay } from "@saasicat/types";
 function _ts_decorate(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
@@ -59,7 +59,13 @@ var CheckoutOfferService = class {
   async getById(id) {
     const row = await this.repo.findById(id);
     if (!row) {
-      throw new NotFoundException(`CheckoutOffer '${id}' nicht gefunden`);
+      throw new NotFoundException({
+        code: CONTRACT_ERROR_CODES.CHECKOUT_OFFER_NOT_FOUND,
+        message: `CheckoutOffer '${id}' not found`,
+        params: {
+          offerId: id
+        }
+      });
     }
     return row;
   }
@@ -77,7 +83,7 @@ var CheckoutOfferService = class {
   /** Customization in onboarding — only while the offer is `open`. */
   async update(id, data) {
     const existing = await this.getById(id);
-    this.assertOpen(existing, "\xE4ndern");
+    this.assertOpen(existing, "changed");
     const next = this.normalizeUpdateData(existing, data);
     await this.assertFeatureRequiresSatisfied({
       projectKey: existing.projectKey,
@@ -95,7 +101,7 @@ var CheckoutOfferService = class {
    */
   async consume(id) {
     const existing = await this.getById(id);
-    this.assertOpen(existing, "verbrauchen");
+    this.assertOpen(existing, "consumed");
     await this.assertBundleVersionsStillBookable(existing);
     return this.repo.consume(id);
   }
@@ -124,8 +130,8 @@ var CheckoutOfferService = class {
     ], requiresIndex);
     if (missingRequires.length > 0) {
       throw new UnprocessableEntityException({
-        code: "CHECKOUT_OFFER_FEATURE_DEPENDENCY_UNSATISFIED",
-        message: `Die Paket-Auswahl deckt nicht alle Feature-Abh\xE4ngigkeiten: [${missingRequires.join(", ")}] fehlen in Plan + gew\xE4hlten Bundles.`,
+        code: CONTRACT_ERROR_CODES.CHECKOUT_OFFER_FEATURE_DEPENDENCY_UNSATISFIED,
+        message: `The selected plan does not cover all feature dependencies: [${missingRequires.join(", ")}] are missing from the plan + selected bundles.`,
         missingRequires
       });
     }
@@ -205,8 +211,8 @@ var CheckoutOfferService = class {
     }
     if (violations.length > 0) {
       throw new UnprocessableEntityException({
-        code: "CHECKOUT_OFFER_BUNDLE_VERSION_NOT_BOOKABLE",
-        message: "Mindestens eine BundleVersion aus dem CheckoutOffer ist nicht mehr buchbar.",
+        code: CONTRACT_ERROR_CODES.CHECKOUT_OFFER_BUNDLE_VERSION_NOT_BOOKABLE,
+        message: "At least one bundle version from the checkout offer is no longer bookable.",
         violations
       });
     }
@@ -260,15 +266,15 @@ var CheckoutOfferService = class {
     const hasPlan = lineItems.some((item) => item.kind === "plan");
     if (!hasPlan) {
       throw new UnprocessableEntityException({
-        code: "CHECKOUT_OFFER_PLAN_LINE_ITEM_REQUIRED",
-        message: "CheckoutOffer ben\xF6tigt eine eingefrorene Plan-LineItem."
+        code: CONTRACT_ERROR_CODES.CHECKOUT_OFFER_PLAN_LINE_ITEM_REQUIRED,
+        message: "A checkout offer requires a frozen plan line item."
       });
     }
     const missingBundleVersionIds = input.bundleVersionIds.filter((versionId) => !lineItems.some((item) => item.kind === "bundle" && item.sourceVersionId === versionId));
     if (missingBundleVersionIds.length > 0) {
       throw new UnprocessableEntityException({
-        code: "CHECKOUT_OFFER_BUNDLE_LINE_ITEMS_REQUIRED",
-        message: "Jede ausgew\xE4hlte BundleVersion ben\xF6tigt eine eingefrorene Bundle-LineItem.",
+        code: CONTRACT_ERROR_CODES.CHECKOUT_OFFER_BUNDLE_LINE_ITEMS_REQUIRED,
+        message: "Every selected bundle version requires a frozen bundle line item.",
         bundleVersionIds: missingBundleVersionIds
       });
     }
@@ -300,13 +306,36 @@ var CheckoutOfferService = class {
   }
   assertOpen(existing, action) {
     if (existing.status === "consumed") {
-      throw new ConflictException(`CheckoutOffer '${existing.id}' ist bereits verbraucht und kann nicht ${action} werden`);
+      throw new ConflictException({
+        code: CONTRACT_ERROR_CODES.CHECKOUT_OFFER_ALREADY_CONSUMED,
+        message: `Checkout offer '${existing.id}' has already been consumed and cannot be ${action}`,
+        params: {
+          offerId: existing.id,
+          action
+        }
+      });
     }
     if (existing.status === "expired") {
-      throw new ConflictException(`CheckoutOffer '${existing.id}' ist abgelaufen und kann nicht ${action} werden`);
+      throw new ConflictException({
+        code: CONTRACT_ERROR_CODES.CHECKOUT_OFFER_EXPIRED,
+        message: `Checkout offer '${existing.id}' has expired and cannot be ${action}`,
+        params: {
+          offerId: existing.id,
+          action,
+          validUntil: existing.validUntil ?? null
+        }
+      });
     }
     if (this.isExpired(existing)) {
-      throw new ConflictException(`CheckoutOffer '${existing.id}' ist abgelaufen und kann nicht ${action} werden`);
+      throw new ConflictException({
+        code: CONTRACT_ERROR_CODES.CHECKOUT_OFFER_EXPIRED,
+        message: `CheckoutOffer '${existing.id}' has expired and cannot be ${action}`,
+        params: {
+          offerId: existing.id,
+          action,
+          validUntil: existing.validUntil ?? null
+        }
+      });
     }
   }
   isExpired(row) {
@@ -385,7 +414,7 @@ var CreateCheckoutOfferDto = class {
 _ts_decorate2([
   IsString(),
   Matches(PROJECT_KEY_PATTERN, {
-    message: "projectKey muss kebab-case sein"
+    message: "projectKey must be kebab-case"
   }),
   MaxLength(64),
   _ts_metadata2("design:type", String)

package/dist/{chunk-BOADBIGB.js → chunk-YYUXKLXK.js}

@@ -1,6 +1,6 @@
 import {
   DiscoveryScanner
-} from "./chunk-Z3FWN3HJ.js";
+} from "./chunk-5ZXBXYXU.js";
 import {
   DEFINES_QUOTA_KEY,
   DISCOVERY_SNAPSHOT_TOKEN,
@@ -44,7 +44,7 @@ async function runHeadlessDiscoveryScan(appModule, options = {}) {
       await app.close();
     }
   } catch (err) {
-    console.error("[discovery-scan] FEHLER:", err instanceof Error ? err.message : err);
+    console.error("[discovery-scan] ERROR:", err instanceof Error ? err.message : err);
     return exit(4);
   }
 }

package/dist/{chunk-YITTE646.js → chunk-ZH5PYEMI.js}

@@ -1,6 +1,6 @@
 import {
   PromoCodesModule
-} from "./chunk-GLLCB4BP.js";
+} from "./chunk-4O6R6ARQ.js";
 import {
   AdminManifestModule,
   AdminManifestService,
@@ -9,36 +9,39 @@ import {
   AdminStatsModule,
   MfaService,
   SuperAdminGuard
-} from "./chunk-PLJEAUFU.js";
+} from "./chunk-FYWLPYBK.js";
 import {
   PublicCatalogModule,
   REQUIRE_FEATURE_KEY,
   SubscriptionBundleModule,
   TenantBillingModule
-} from "./chunk-5KH2O4SF.js";
+} from "./chunk-NZLAYCEX.js";
 import {
   SubscriptionContractModule
-} from "./chunk-32EMXPU2.js";
+} from "./chunk-B7NRY2LV.js";
 import {
   CatalogModule
-} from "./chunk-P3DP6GJE.js";
+} from "./chunk-GC5AKN44.js";
 import {
   CheckoutOfferModule
-} from "./chunk-GJBXOCRZ.js";
+} from "./chunk-XTVAFJ3P.js";
 import {
   SaaSiCatPublicRoute
 } from "./chunk-YSC46BGM.js";
 import {
   DiscoveryModule
-} from "./chunk-V34AA7C7.js";
+} from "./chunk-6WL6VQ7Z.js";
 import {
   EntitlementModule,
   LimitExceededError
-} from "./chunk-EXOLOJFZ.js";
+} from "./chunk-AGOG5B77.js";
 import {
   PLAN_CATALOG_TOKEN,
   PlanCatalogModule
-} from "./chunk-R2QOSVAA.js";
+} from "./chunk-DQKCK7DX.js";
+import {
+  codedError
+} from "./chunk-EBJJNTW6.js";
 import {
   asProvider
 } from "./chunk-SABTXESR.js";
@@ -105,9 +108,7 @@ var SetupService = class {
     await this.assertNoSuperAdmin();
     const email = req.email.trim().toLowerCase();
     if (!email.includes("@")) {
-      throw new BadRequestException({
-        code: SETUP_ERROR_CODES.INVALID_EMAIL
-      });
+      throw new BadRequestException(codedError(SETUP_ERROR_CODES.INVALID_EMAIL));
     }
     const generated = !req.password;
     const password = req.password ?? randomBytes(GENERATED_PASSWORD_BYTES).toString("base64url");
@@ -157,20 +158,19 @@ var SetupService = class {
     if (!expected) {
       throw new ForbiddenException({
         code: SETUP_ERROR_CODES.SETUP_DISABLED,
-        message: `${this.config.setupTokenEnvVar} ist nicht gesetzt \u2014 Setup ist deaktiviert.`
+        message: `${this.config.setupTokenEnvVar} is not set \u2014 setup is disabled.`,
+        params: {
+          envVar: this.config.setupTokenEnvVar
+        }
       });
     }
     if (!token || !timingSafeEqualStr(token, expected)) {
-      throw new UnauthorizedException({
-        code: SETUP_ERROR_CODES.INVALID_SETUP_TOKEN
-      });
+      throw new UnauthorizedException(codedError(SETUP_ERROR_CODES.INVALID_SETUP_TOKEN));
     }
   }
   async assertNoSuperAdmin() {
     if (await this.users.countSuperAdmins() > 0) {
-      throw new ConflictException({
-        code: SETUP_ERROR_CODES.SETUP_ALREADY_DONE
-      });
+      throw new ConflictException(codedError(SETUP_ERROR_CODES.SETUP_ALREADY_DONE));
     }
   }
 };
@@ -448,6 +448,7 @@ StaticEntitlementService = _ts_decorate4([
 // src/platform/static-feature.guard.ts
 import { ForbiddenException as ForbiddenException2, Inject as Inject3, Injectable as Injectable3, Optional } from "@nestjs/common";
 import { Reflector } from "@nestjs/core";
+import { AUTH_ERROR_CODES, FEATURE_NOT_LICENSED } from "@saasicat/types";
 function _ts_decorate5(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
@@ -486,15 +487,32 @@ var StaticFeatureGuard = class {
     if (!required || required.length === 0) return true;
     const request = context.switchToHttp().getRequest();
     const user = request.user;
-    if (!user) throw new ForbiddenException2("Nicht authentifiziert");
+    if (!user) {
+      throw new ForbiddenException2({
+        code: AUTH_ERROR_CODES.NOT_AUTHENTICATED,
+        message: "Not authenticated"
+      });
+    }
     const role = this.config?.userRoleResolver ? this.config.userRoleResolver(user) : user.role ?? user.platformRole;
     if (role === "SUPER_ADMIN") return true;
     const tenantId = this.config?.tenantIdResolver ? this.config.tenantIdResolver(request) : request.tenantId ?? user.tenantId;
-    if (!tenantId) throw new ForbiddenException2("Kein Mandant zugeordnet");
+    if (!tenantId) {
+      throw new ForbiddenException2({
+        code: AUTH_ERROR_CODES.NO_TENANT_ASSIGNED,
+        message: "No tenant assigned"
+      });
+    }
     const snap = await this.entitlements.snapshot(tenantId);
     const allowed = required.some((f) => snap.features.includes(f));
     if (!allowed) {
-      throw new ForbiddenException2(`Feature ${required.join(" / ")} nicht im aktuellen Plan enthalten.`);
+      const body = {
+        code: FEATURE_NOT_LICENSED,
+        featureKey: required[0],
+        featureKeys: required,
+        offers: [],
+        message: `Feature ${required.join(" / ")} is not included in the current plan.`
+      };
+      throw new ForbiddenException2(body);
     }
     return true;
   }
@@ -737,7 +755,7 @@ function buildTenantManifestController(options) {
     async get(req) {
       const tenantId = req.user?.tenantId ?? req.tenantId;
       if (!tenantId) {
-        throw new Error("Kein Mandant im Request \u2014 TenantManifest braucht user.tenantId.");
+        throw new Error("No tenant on the request \u2014 TenantManifest requires user.tenantId.");
       }
       return this.svc.getManifest(tenantId);
     }

package/dist/{define-saasicat-Rc0rXrYG.d.ts → define-saasicat-B20Ms8UC.d.ts}

@@ -3,7 +3,7 @@ import { ExecutionContext } from '@nestjs/common';
 import { Reflector } from '@nestjs/core';
 import { SuperAdminProvisioningPort, SetupStatusResponse, SetupRequest, SetupResult, SetupConfirmMfaRequest, SetupConfirmMfaResponse } from '@saasicat/types';
 import { h as MfaService } from './admin-stats.service-Db2exT_d.js';
-import { f as SaasPlatformModuleOptions } from './saas-platform.module-DLhoqKNA.js';
+import { f as SaasPlatformModuleOptions } from './saas-platform.module-DChhDrR-.js';
 
 /**
  * Shared metadata key for endpoints that intentionally run without application

package/dist/{define-saasicat-CeDBX9ji.d.cts → define-saasicat-Cf9DpEsY.d.cts}

@@ -3,7 +3,7 @@ import { ExecutionContext } from '@nestjs/common';
 import { Reflector } from '@nestjs/core';
 import { SuperAdminProvisioningPort, SetupStatusResponse, SetupRequest, SetupResult, SetupConfirmMfaRequest, SetupConfirmMfaResponse } from '@saasicat/types';
 import { h as MfaService } from './admin-stats.service-HUZIU448.cjs';
-import { f as SaasPlatformModuleOptions } from './saas-platform.module-D3rUTiho.cjs';
+import { f as SaasPlatformModuleOptions } from './saas-platform.module-BfaYfL-G.cjs';
 
 /**
  * Shared metadata key for endpoints that intentionally run without application

package/dist/discovery/index.d.cts

@@ -117,7 +117,7 @@ interface ImplementsCapabilityMetadata extends ImplementsCapabilityOptions {
  * ```ts
  * @Post()
  * @ImplementsCapability('invoice.create', {
- *   label: 'Rechnung erstellen',
+ *   label: 'Create invoice',
  *   feature: 'INVOICE_MANAGEMENT',
  *   kind: 'endpoint',
  *   owner: 'accounting',
@@ -157,7 +157,7 @@ declare const RequiresCapability: (...capabilityKeys: string[]) => _nestjs_commo
  * @Injectable()
  * @DefinesQuota({
  *   key: 'invoicesPerMonth',
- *   label: 'Rechnungen pro Monat',
+ *   label: 'Invoices per month',
  *   unit: 'invoices',
  *   policy: 'monthlyReset',
  *   feature: 'INVOICE_MANAGEMENT',

package/dist/discovery/index.d.ts

@@ -117,7 +117,7 @@ interface ImplementsCapabilityMetadata extends ImplementsCapabilityOptions {
  * ```ts
  * @Post()
  * @ImplementsCapability('invoice.create', {
- *   label: 'Rechnung erstellen',
+ *   label: 'Create invoice',
  *   feature: 'INVOICE_MANAGEMENT',
  *   kind: 'endpoint',
  *   owner: 'accounting',
@@ -157,7 +157,7 @@ declare const RequiresCapability: (...capabilityKeys: string[]) => _nestjs_commo
  * @Injectable()
  * @DefinesQuota({
  *   key: 'invoicesPerMonth',
- *   label: 'Rechnungen pro Monat',
+ *   label: 'Invoices per month',
  *   unit: 'invoices',
  *   policy: 'monthlyReset',
  *   feature: 'INVOICE_MANAGEMENT',