@saasicat/nest 0.2.0

package/dist/index.js

@@ -0,0 +1,956 @@
+import {
+  PreviewPromoCodeDto,
+  PromoCodeExpirer,
+  PromoCodePublicController,
+  PromoCodeRateLimitGuard,
+  PromoCodesModule,
+  hashIp,
+  ipFingerprint
+} from "./chunk-2VNZYRDV.js";
+import {
+  ACTIVATION_ORCHESTRATOR_TOKEN,
+  BaseIpRateLimitGuard,
+  ContinueRegistrationDto,
+  CronExpression,
+  PASSWORD_HASHER_TOKEN,
+  PAYMENT_EVENT_LOG_TOKEN,
+  PAYMENT_PROVIDER_TOKEN,
+  PENDING_REGISTRATION_REPOSITORY_TOKEN,
+  PLAN_CATALOG_LOOKUP_TOKEN,
+  PaymentWebhookDto,
+  PendingRegistrationService,
+  PreviewRegistrationPromoDto,
+  REGISTRATION_AUDIT_LOGGER_TOKEN,
+  REGISTRATION_BUSINESS_TYPE_LOOKUP_TOKEN,
+  REGISTRATION_CONFIGURATOR_LOOKUP_TOKEN,
+  REGISTRATION_CONFIG_TOKEN,
+  REGISTRATION_OTP_DELIVERY_TOKEN,
+  REGISTRATION_PROMO_PREVIEW_TOKEN,
+  REGISTRATION_RESUME_BASE_URL_TOKEN,
+  REGISTRATION_RESUME_DELIVERY_TOKEN,
+  REGISTRATION_RESUME_TOKEN_SIGNER_TOKEN,
+  RegisterStartDto,
+  RegistrationCleanupCron,
+  RegistrationModule,
+  ResendRegistrationOtpDto,
+  SLUG_AVAILABILITY_CHECK_TOKEN,
+  SaveRegistrationConfigDto,
+  SaveRegistrationConfigSelectionDto,
+  SelectRegistrationPlanDto,
+  StartRegistrationCheckoutDto,
+  USER_ACCOUNT_LOOKUP_TOKEN,
+  VerifyRegistrationOtpDto,
+  computeBreakdown,
+  generateOtpCode,
+  hashOtpCode,
+  resolveModel,
+  slugify,
+  verifyOtpCode
+} from "./chunk-XSGU2Y2O.js";
+import {
+  ADMIN_STATS_AUDIT_WINDOW_DAYS_TOKEN,
+  AUDIT_STATS_PORT_TOKEN,
+  AdminStatsController,
+  AdminStatsModule,
+  AdminStatsService,
+  PROMO_CODE_STATS_PORT_TOKEN,
+  SUBSCRIPTION_STATS_PORT_TOKEN
+} from "./chunk-YNEW3L63.js";
+import {
+  CONTRACT_FREEZE_PORT_TOKEN,
+  CONTRACT_FREEZE_PROJECT_KEY_TOKEN,
+  CONTRACT_FREEZE_SOURCE_PORT_TOKEN,
+  CancelSubscriptionDto,
+  CatalogBundleUpsellResolver,
+  ChangePlanDto,
+  CompleteOnboardingSubscriptionDto,
+  ComposedTenantAuthGuard,
+  ConfiguratorCatalogBuilder,
+  FEATURE_GUARD_CONFIG_TOKEN,
+  FEATURE_UI_REGISTRY_TOKEN,
+  FeatureGuard,
+  LimitExceededFilter,
+  PLAN_CATALOG_IMPORT_SINK_TOKEN,
+  PUBLIC_CATALOG_BUNDLE_REPOSITORY_TOKEN,
+  PUBLIC_CATALOG_BUSINESS_TYPE_REPOSITORY_TOKEN,
+  PUBLIC_CATALOG_MARKETING_REPOSITORY_TOKEN,
+  PUBLIC_CATALOG_PROJECT_KEY_TOKEN,
+  PendingPlanMaterializationService,
+  PlanCatalogImportDto,
+  PlanCatalogImporterModule,
+  PlanCatalogImporterService,
+  PlanCatalogValidationError,
+  PlanChangePreviewService,
+  PreviewPlanChangeDto,
+  PublicCatalogController,
+  PublicCatalogModule,
+  PublishValidationError,
+  SELF_SERVICE_BLOCKED_BUNDLES_TOKEN,
+  SELF_SERVICE_BLOCKED_PLANS_TOKEN,
+  SubscriptionBundleModule,
+  SubscriptionBundlePreviewService,
+  SubscriptionBundlesService,
+  SubscriptionContractFreezeService,
+  TenantAdminGuard,
+  TenantBillingController,
+  TenantBillingModule,
+  UPSELL_OFFER_CURRENCY_TOKEN,
+  UPSELL_OFFER_RESOLVER_TOKEN,
+  addMonths,
+  assertBaseVersionFresh,
+  assertChangeNote,
+  assertDraftPublishable,
+  assertOptimisticLockHeld,
+  buildPlanCatalogImporterController,
+  buildTenantSubscriptionBundlesController,
+  clearPendingPlanVersionFields,
+  computeCarriedTrialEndsAt,
+  computeNextPeriod,
+  computeProration,
+  decideRenewal,
+  initialPeriodWindow,
+  loadPlanCatalogFromFile,
+  loadPlanCatalogFromString,
+  periodEndAfter,
+  periodEndWithMinLead,
+  resolveBundleCancelEffectiveAt,
+  resolveBundlePriceNet
+} from "./chunk-RIGLQ4BV.js";
+import {
+  PROMO_CODE_REDEMPTION_REPOSITORY_TOKEN,
+  PROMO_CODE_REPOSITORY_TOKEN,
+  PROMO_CODE_VALIDATION_LOG_REPOSITORY_TOKEN,
+  PROMO_FIRST_TIME_CUSTOMER_CHECK_TOKEN,
+  PROMO_REVENUE_DEDUCTION_AGGREGATOR_TOKEN,
+  PROMO_SERVICE_CONFIG_TOKEN,
+  PROMO_SUBSCRIPTION_LOOKUP_TOKEN,
+  PROMO_TRANSACTION_RUNNER_TOKEN,
+  PromoCodesService,
+  addCycles,
+  buildLabel,
+  computeDiscountGross,
+  computeDiscountedGross,
+  computeRegularStartsAt
+} from "./chunk-ZL4LLE2Z.js";
+import {
+  SubscriptionContractModule,
+  SubscriptionContractService,
+  contractLineItemToInvoiceLineItem,
+  sortContractLineItemsForInvoice,
+  subscriptionContractToInvoiceSnapshot
+} from "./chunk-2PNX2QL2.js";
+import {
+  ADVISORY_STRICT_MODE_CODES,
+  BundlesService,
+  BusinessTypeBundleInputDto,
+  BusinessTypesService,
+  CatalogEntriesService,
+  CatalogModule,
+  CreateBundleDto,
+  CreateBundleVersionDraftDto,
+  CreateBusinessTypeDto,
+  CreateBusinessTypeVersionDraftDto,
+  CreateMarketingProjectionDto,
+  CreatePlanDto,
+  CreatePlanVersionDraftDto,
+  CreatePromotionDto,
+  ListCatalogEntriesQueryDto,
+  ListMarketingProjectionsQueryDto,
+  ListMarketingSettingsQueryDto,
+  ListPromotionsQueryDto,
+  MarketingProjectionsService,
+  MarketingSettingsService,
+  PlanVersionsService,
+  PlansService,
+  PromotionsService,
+  PublicMarketingCatalogService,
+  PublishBundleVersionDto,
+  PublishBusinessTypeVersionDto,
+  PublishPlanVersionDto,
+  ReviewCatalogEntryDto,
+  SyncDiscoveryDto,
+  UpdateBundleDto,
+  UpdateBundleVersionDraftDto,
+  UpdateBusinessTypeDto,
+  UpdateBusinessTypeVersionDraftDto,
+  UpdateCatalogEntryI18nDto,
+  UpdateMarketingProjectionDto,
+  UpdateMarketingSettingsDto,
+  UpdatePlanDto,
+  UpdatePlanVersionDraftDto,
+  UpdatePromotionDto,
+  blockingStrictModeWarnings,
+  buildBundleVersionsController,
+  buildBundlesController,
+  buildBusinessTypeVersionsController,
+  buildBusinessTypesController,
+  buildCatalogEntriesController,
+  buildMarketingProjectionsController,
+  buildMarketingSettingsController,
+  buildPlanVersionsController,
+  buildPlansController,
+  buildPromotionsController,
+  buildPublicMarketingCatalogController,
+  featureApprovalSignature,
+  formatPreflightReport,
+  formatSeedGateReport,
+  loadApprovedCatalogKeys,
+  preflightExitCode,
+  quotaApprovalSignature,
+  runPreflight,
+  runSeedGateFromFile,
+  seedGateExitCode,
+  validateBundleDraft,
+  validateBusinessTypeDraft,
+  validatePlanDraft,
+  validateSeedAgainstSnapshot
+} from "./chunk-V7HUZ6UQ.js";
+import {
+  AUDIT_CONTEXT_RESOLVER_TOKEN,
+  PENDING_PLAN_QUERY_PORT_TOKEN,
+  SUBSCRIPTION_USAGE_PORT_TOKEN,
+  SUBSCRIPTION_WRITE_PORT_TOKEN,
+  TENANT_AUTH_GUARDS_TOKEN,
+  TENANT_ID_RESOLVER_TOKEN,
+  TRIAL_PROJECTION_PORT_TOKEN,
+  USAGE_SNAPSHOT_PORT_TOKEN,
+  USER_EMAIL_RESOLVER_TOKEN,
+  USER_ID_RESOLVER_TOKEN,
+  classifyBundleVersionDiff,
+  classifyPlanDiff
+} from "./chunk-WPUVJRIN.js";
+import {
+  CHECKOUT_OFFER_REPOSITORY_TOKEN,
+  CheckoutOfferModule,
+  CheckoutOfferService,
+  CreateCheckoutOfferDto,
+  UpdateCheckoutOfferDto,
+  buildCheckoutOfferController
+} from "./chunk-SYEVGPFC.js";
+import "./chunk-MDIZUVIK.js";
+import {
+  DefinesQuota,
+  EnforceQuota,
+  ImplementsCapability,
+  RequiresCapability,
+  runHeadlessDiscoveryScan
+} from "./chunk-HRU3CP57.js";
+import {
+  DiscoverySnapshotNotFoundError,
+  loadDiscoverySnapshotFromFile
+} from "./chunk-ABB2CRAS.js";
+import "./chunk-2FR6ZL7R.js";
+import {
+  ADMIN_MANIFEST_CONFIG,
+  AdminBypassRlsInterceptor,
+  AdminManifestModule,
+  AdminManifestService,
+  AdminModule,
+  AdminPublicBootController,
+  MfaGuard,
+  MfaService,
+  PLATFORM_CORE_CONTRIBUTION_TOKEN,
+  PLATFORM_CORE_MANIFEST_CONTRIBUTION,
+  REQUIRE_MFA_KEY,
+  RequireMfa,
+  SuperAdminGuard
+} from "./chunk-P6MYZMXQ.js";
+import {
+  REQUIRE_FEATURE_KEY,
+  RequireFeature
+} from "./chunk-Q53N43LQ.js";
+import {
+  AUDIT_PORT_TOKEN,
+  AdminAuditService,
+  MFA_PORT_TOKEN,
+  RLS_BYPASS_PORT_TOKEN
+} from "./chunk-E56W4U2P.js";
+import {
+  DiscoveryModule,
+  buildDiscoveryController
+} from "./chunk-AJ3EPELS.js";
+import {
+  DISCOVERY_APP_INFO_TOKEN,
+  DISCOVERY_SNAPSHOT_PATH_TOKEN,
+  DiscoveryScanner,
+  computeSnapshotHash
+} from "./chunk-M6CZQYPY.js";
+import {
+  EntitlementModule,
+  EntitlementService,
+  LimitExceededError,
+  SUBSCRIPTION_BUNDLE_CONFIG_TOKEN,
+  SUBSCRIPTION_BUNDLE_REPOSITORY_TOKEN,
+  aggregateBusinessTypeQuotas,
+  aggregateContractLineItemEntitlements,
+  aggregateLimits,
+  aggregateSubscriptionBundleQuotas,
+  applyCustomLimits,
+  buildReplacedByIndex,
+  collectBusinessTypeFeatures,
+  collectSubscriptionBundleFeatures,
+  expandReplacedFeatures,
+  filterActiveSubscriptionBundles,
+  filterPlannedOnlyFeatures,
+  hasAnyFeature,
+  hasFeature,
+  resolveEntitlementPlan,
+  toEffectiveLimitsSnapshot
+} from "./chunk-YXGHPILG.js";
+import {
+  PLAN_CATALOG_READ_SINK_TOKEN,
+  PLAN_CATALOG_TOKEN,
+  PlanCatalogModule,
+  buildPlanCatalogFromSnapshot,
+  computeIncludedVat,
+  findPlan,
+  getActiveFeatureKeys,
+  getMarketedPlans,
+  getPlanOrThrow,
+  getPlanPriceGross,
+  getPlanPriceNet,
+  getPlanQuota,
+  grossFromNet,
+  isFeatureInPlan,
+  isFeaturePlannedOnly,
+  round2
+} from "./chunk-MV6LW5UB.js";
+import {
+  SUBSCRIPTION_CONTRACT_REPOSITORY_TOKEN
+} from "./chunk-NYLON2VC.js";
+import {
+  ENTITLEMENT_RESOLUTION_CONFIG_TOKEN,
+  PLAN_VERSION_REPOSITORY_TOKEN,
+  SUBSCRIPTION_REPOSITORY_TOKEN,
+  TRANSACTION_RUNNER_TOKEN
+} from "./chunk-7MLGHWKO.js";
+import {
+  BUNDLE_REPOSITORY_TOKEN,
+  BUSINESS_TYPE_REPOSITORY_TOKEN,
+  CATALOG_ENTRY_REPOSITORY_TOKEN,
+  CATALOG_SERVICE_CONFIG_TOKEN,
+  MARKETING_PROJECTION_REPOSITORY_TOKEN,
+  MARKETING_SETTINGS_REPOSITORY_TOKEN,
+  PLAN_REPOSITORY_TOKEN,
+  PROMOTION_REPOSITORY_TOKEN
+} from "./chunk-XCZ3TTFK.js";
+import {
+  asProvider
+} from "./chunk-SABTXESR.js";
+import {
+  DEFINES_QUOTA_KEY,
+  DISCOVERY_SNAPSHOT_TOKEN,
+  ENFORCE_QUOTA_KEY,
+  IMPLEMENTS_CAPABILITY_KEY,
+  REQUIRES_CAPABILITY_KEY
+} from "./chunk-L4SUWH5B.js";
+import {
+  __name
+} from "./chunk-SHUYVCID.js";
+
+// src/setup/setup.module.ts
+import { Module } from "@nestjs/common";
+
+// src/setup/setup.controller.ts
+import { Body, Controller, Get, Post } from "@nestjs/common";
+import { IsEmail, IsNotEmpty, IsOptional, IsString, MinLength } from "class-validator";
+
+// src/setup/setup.service.ts
+import { BadRequestException, ConflictException, ForbiddenException, Inject, Injectable, UnauthorizedException } from "@nestjs/common";
+import { isPlatformUserExistsError, SETUP_ERROR_CODES } from "@saasicat/types";
+import { randomBytes, timingSafeEqual } from "crypto";
+import QRCode from "qrcode";
+
+// src/setup/tokens.ts
+var SETUP_PROVISIONING_PORT_TOKEN = /* @__PURE__ */ Symbol.for("saas-platform/SetupProvisioningPort");
+var SETUP_CONFIG_TOKEN = /* @__PURE__ */ Symbol.for("saas-platform/SetupConfig");
+
+// src/setup/setup.service.ts
+function _ts_decorate(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate, "_ts_decorate");
+function _ts_metadata(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata, "_ts_metadata");
+function _ts_param(paramIndex, decorator) {
+  return function(target, key) {
+    decorator(target, key, paramIndex);
+  };
+}
+__name(_ts_param, "_ts_param");
+var GENERATED_PASSWORD_BYTES = 12;
+function timingSafeEqualStr(a, b) {
+  const ab = Buffer.from(a, "utf8");
+  const bb = Buffer.from(b, "utf8");
+  if (ab.length !== bb.length) return false;
+  return timingSafeEqual(ab, bb);
+}
+__name(timingSafeEqualStr, "timingSafeEqualStr");
+var SetupService = class {
+  static {
+    __name(this, "SetupService");
+  }
+  users;
+  config;
+  mfa;
+  constructor(users, config, mfa) {
+    this.users = users;
+    this.config = config;
+    this.mfa = mfa;
+  }
+  async status() {
+    return {
+      needsSetup: await this.users.countSuperAdmins() === 0
+    };
+  }
+  async setup(req) {
+    this.assertToken(req.token);
+    await this.assertNoSuperAdmin();
+    const email = req.email.trim().toLowerCase();
+    if (!email.includes("@")) {
+      throw new BadRequestException({
+        code: SETUP_ERROR_CODES.INVALID_EMAIL
+      });
+    }
+    const generated = !req.password;
+    const password = req.password ?? randomBytes(GENERATED_PASSWORD_BYTES).toString("base64url");
+    let user;
+    try {
+      user = await this.users.createSuperAdmin({
+        email,
+        password
+      });
+    } catch (err) {
+      if (isPlatformUserExistsError(err)) {
+        throw new ConflictException({
+          code: SETUP_ERROR_CODES.EMAIL_EXISTS,
+          message: err.message
+        });
+      }
+      throw err;
+    }
+    const totp = await this.mfa.setup(user.id, user.email, this.config.mfaIssuer);
+    const qrDataUrl = await QRCode.toDataURL(totp.otpauthUri, {
+      width: 220,
+      margin: 1
+    });
+    return {
+      userId: user.id,
+      email: user.email,
+      otpauthUri: totp.otpauthUri,
+      qrDataUrl,
+      secret: totp.secret,
+      ...generated ? {
+        generatedPassword: password
+      } : {}
+    };
+  }
+  async confirmMfa(req) {
+    this.assertToken(req.token);
+    const ok = await this.mfa.verify({
+      userId: req.userId,
+      code: req.code
+    });
+    return {
+      ok
+    };
+  }
+  assertToken(token) {
+    const expected = process.env[this.config.setupTokenEnvVar]?.trim();
+    if (!expected) {
+      throw new ForbiddenException({
+        code: SETUP_ERROR_CODES.SETUP_DISABLED,
+        message: `${this.config.setupTokenEnvVar} ist nicht gesetzt \u2014 Setup ist deaktiviert.`
+      });
+    }
+    if (!token || !timingSafeEqualStr(token, expected)) {
+      throw new UnauthorizedException({
+        code: SETUP_ERROR_CODES.INVALID_SETUP_TOKEN
+      });
+    }
+  }
+  async assertNoSuperAdmin() {
+    if (await this.users.countSuperAdmins() > 0) {
+      throw new ConflictException({
+        code: SETUP_ERROR_CODES.SETUP_ALREADY_DONE
+      });
+    }
+  }
+};
+SetupService = _ts_decorate([
+  Injectable(),
+  _ts_param(0, Inject(SETUP_PROVISIONING_PORT_TOKEN)),
+  _ts_param(1, Inject(SETUP_CONFIG_TOKEN)),
+  _ts_metadata("design:type", Function),
+  _ts_metadata("design:paramtypes", [
+    typeof SuperAdminProvisioningPort === "undefined" ? Object : SuperAdminProvisioningPort,
+    typeof SetupConfig === "undefined" ? Object : SetupConfig,
+    typeof MfaService === "undefined" ? Object : MfaService
+  ])
+], SetupService);
+
+// src/setup/setup.controller.ts
+function _ts_decorate2(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate2, "_ts_decorate");
+function _ts_metadata2(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata2, "_ts_metadata");
+function _ts_param2(paramIndex, decorator) {
+  return function(target, key) {
+    decorator(target, key, paramIndex);
+  };
+}
+__name(_ts_param2, "_ts_param");
+var SetupDto = class SetupDto2 {
+  static {
+    __name(this, "SetupDto");
+  }
+  token;
+  email;
+  password;
+};
+_ts_decorate2([
+  IsString(),
+  IsNotEmpty(),
+  _ts_metadata2("design:type", String)
+], SetupDto.prototype, "token", void 0);
+_ts_decorate2([
+  IsEmail(),
+  _ts_metadata2("design:type", String)
+], SetupDto.prototype, "email", void 0);
+_ts_decorate2([
+  IsOptional(),
+  IsString(),
+  MinLength(8),
+  _ts_metadata2("design:type", String)
+], SetupDto.prototype, "password", void 0);
+var SetupConfirmMfaDto = class SetupConfirmMfaDto2 {
+  static {
+    __name(this, "SetupConfirmMfaDto");
+  }
+  token;
+  userId;
+  code;
+};
+_ts_decorate2([
+  IsString(),
+  IsNotEmpty(),
+  _ts_metadata2("design:type", String)
+], SetupConfirmMfaDto.prototype, "token", void 0);
+_ts_decorate2([
+  IsString(),
+  IsNotEmpty(),
+  _ts_metadata2("design:type", String)
+], SetupConfirmMfaDto.prototype, "userId", void 0);
+_ts_decorate2([
+  IsString(),
+  IsNotEmpty(),
+  _ts_metadata2("design:type", String)
+], SetupConfirmMfaDto.prototype, "code", void 0);
+var SetupController = class {
+  static {
+    __name(this, "SetupController");
+  }
+  setup;
+  constructor(setup) {
+    this.setup = setup;
+  }
+  status() {
+    return this.setup.status();
+  }
+  run(dto) {
+    return this.setup.setup(dto);
+  }
+  confirm(dto) {
+    return this.setup.confirmMfa(dto);
+  }
+};
+_ts_decorate2([
+  Get("status"),
+  _ts_metadata2("design:type", Function),
+  _ts_metadata2("design:paramtypes", []),
+  _ts_metadata2("design:returntype", typeof Promise === "undefined" ? Object : Promise)
+], SetupController.prototype, "status", null);
+_ts_decorate2([
+  Post(),
+  _ts_param2(0, Body()),
+  _ts_metadata2("design:type", Function),
+  _ts_metadata2("design:paramtypes", [
+    typeof SetupDto === "undefined" ? Object : SetupDto
+  ]),
+  _ts_metadata2("design:returntype", typeof Promise === "undefined" ? Object : Promise)
+], SetupController.prototype, "run", null);
+_ts_decorate2([
+  Post("confirm-mfa"),
+  _ts_param2(0, Body()),
+  _ts_metadata2("design:type", Function),
+  _ts_metadata2("design:paramtypes", [
+    typeof SetupConfirmMfaDto === "undefined" ? Object : SetupConfirmMfaDto
+  ]),
+  _ts_metadata2("design:returntype", typeof Promise === "undefined" ? Object : Promise)
+], SetupController.prototype, "confirm", null);
+SetupController = _ts_decorate2([
+  Controller("admin/setup"),
+  _ts_metadata2("design:type", Function),
+  _ts_metadata2("design:paramtypes", [
+    typeof SetupService === "undefined" ? Object : SetupService
+  ])
+], SetupController);
+
+// src/setup/setup.module.ts
+function _ts_decorate3(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate3, "_ts_decorate");
+var DEFAULT_SETUP_TOKEN_ENV_VAR = "SETUP_TOKEN";
+var DEFAULT_MFA_ISSUER = "SuperAdmin";
+var SetupModule = class _SetupModule {
+  static {
+    __name(this, "SetupModule");
+  }
+  static forRoot(options) {
+    return {
+      module: _SetupModule,
+      global: options.global ?? false,
+      controllers: [
+        SetupController
+      ],
+      providers: [
+        asProvider(SETUP_PROVISIONING_PORT_TOKEN, options.provisioningPort),
+        {
+          provide: SETUP_CONFIG_TOKEN,
+          useValue: {
+            setupTokenEnvVar: options.setupTokenEnvVar ?? DEFAULT_SETUP_TOKEN_ENV_VAR,
+            mfaIssuer: options.mfaIssuer ?? DEFAULT_MFA_ISSUER
+          }
+        },
+        SetupService
+      ],
+      exports: [
+        SetupService
+      ]
+    };
+  }
+};
+SetupModule = _ts_decorate3([
+  Module({})
+], SetupModule);
+export {
+  ACTIVATION_ORCHESTRATOR_TOKEN,
+  ADMIN_MANIFEST_CONFIG,
+  ADMIN_STATS_AUDIT_WINDOW_DAYS_TOKEN,
+  ADVISORY_STRICT_MODE_CODES,
+  AUDIT_CONTEXT_RESOLVER_TOKEN,
+  AUDIT_PORT_TOKEN,
+  AUDIT_STATS_PORT_TOKEN,
+  AdminAuditService,
+  AdminBypassRlsInterceptor,
+  AdminManifestModule,
+  AdminManifestService,
+  AdminModule,
+  AdminPublicBootController,
+  AdminStatsController,
+  AdminStatsModule,
+  AdminStatsService,
+  BUNDLE_REPOSITORY_TOKEN,
+  BUSINESS_TYPE_REPOSITORY_TOKEN,
+  BaseIpRateLimitGuard,
+  BundlesService,
+  BusinessTypeBundleInputDto,
+  BusinessTypesService,
+  CATALOG_ENTRY_REPOSITORY_TOKEN,
+  CATALOG_SERVICE_CONFIG_TOKEN,
+  CHECKOUT_OFFER_REPOSITORY_TOKEN,
+  CONTRACT_FREEZE_PORT_TOKEN,
+  CONTRACT_FREEZE_PROJECT_KEY_TOKEN,
+  CONTRACT_FREEZE_SOURCE_PORT_TOKEN,
+  CancelSubscriptionDto,
+  CatalogBundleUpsellResolver,
+  CatalogEntriesService,
+  CatalogModule,
+  ChangePlanDto,
+  CheckoutOfferModule,
+  CheckoutOfferService,
+  CompleteOnboardingSubscriptionDto,
+  ComposedTenantAuthGuard,
+  ConfiguratorCatalogBuilder,
+  ContinueRegistrationDto,
+  CreateBundleDto,
+  CreateBundleVersionDraftDto,
+  CreateBusinessTypeDto,
+  CreateBusinessTypeVersionDraftDto,
+  CreateCheckoutOfferDto,
+  CreateMarketingProjectionDto,
+  CreatePlanDto,
+  CreatePlanVersionDraftDto,
+  CreatePromotionDto,
+  CronExpression,
+  DEFINES_QUOTA_KEY,
+  DISCOVERY_APP_INFO_TOKEN,
+  DISCOVERY_SNAPSHOT_PATH_TOKEN,
+  DISCOVERY_SNAPSHOT_TOKEN,
+  DefinesQuota,
+  DiscoveryModule,
+  DiscoveryScanner,
+  DiscoverySnapshotNotFoundError,
+  ENFORCE_QUOTA_KEY,
+  ENTITLEMENT_RESOLUTION_CONFIG_TOKEN,
+  EnforceQuota,
+  EntitlementModule,
+  EntitlementService,
+  FEATURE_GUARD_CONFIG_TOKEN,
+  FEATURE_UI_REGISTRY_TOKEN,
+  FeatureGuard,
+  IMPLEMENTS_CAPABILITY_KEY,
+  ImplementsCapability,
+  LimitExceededError,
+  LimitExceededFilter,
+  ListCatalogEntriesQueryDto,
+  ListMarketingProjectionsQueryDto,
+  ListMarketingSettingsQueryDto,
+  ListPromotionsQueryDto,
+  MARKETING_PROJECTION_REPOSITORY_TOKEN,
+  MARKETING_SETTINGS_REPOSITORY_TOKEN,
+  MFA_PORT_TOKEN,
+  MarketingProjectionsService,
+  MarketingSettingsService,
+  MfaGuard,
+  MfaService,
+  PASSWORD_HASHER_TOKEN,
+  PAYMENT_EVENT_LOG_TOKEN,
+  PAYMENT_PROVIDER_TOKEN,
+  PENDING_PLAN_QUERY_PORT_TOKEN,
+  PENDING_REGISTRATION_REPOSITORY_TOKEN,
+  PLAN_CATALOG_IMPORT_SINK_TOKEN,
+  PLAN_CATALOG_LOOKUP_TOKEN,
+  PLAN_CATALOG_READ_SINK_TOKEN,
+  PLAN_CATALOG_TOKEN,
+  PLAN_REPOSITORY_TOKEN,
+  PLAN_VERSION_REPOSITORY_TOKEN,
+  PLATFORM_CORE_CONTRIBUTION_TOKEN,
+  PLATFORM_CORE_MANIFEST_CONTRIBUTION,
+  PROMOTION_REPOSITORY_TOKEN,
+  PROMO_CODE_REDEMPTION_REPOSITORY_TOKEN,
+  PROMO_CODE_REPOSITORY_TOKEN,
+  PROMO_CODE_STATS_PORT_TOKEN,
+  PROMO_CODE_VALIDATION_LOG_REPOSITORY_TOKEN,
+  PROMO_FIRST_TIME_CUSTOMER_CHECK_TOKEN,
+  PROMO_REVENUE_DEDUCTION_AGGREGATOR_TOKEN,
+  PROMO_SERVICE_CONFIG_TOKEN,
+  PROMO_SUBSCRIPTION_LOOKUP_TOKEN,
+  PROMO_TRANSACTION_RUNNER_TOKEN,
+  PUBLIC_CATALOG_BUNDLE_REPOSITORY_TOKEN,
+  PUBLIC_CATALOG_BUSINESS_TYPE_REPOSITORY_TOKEN,
+  PUBLIC_CATALOG_MARKETING_REPOSITORY_TOKEN,
+  PUBLIC_CATALOG_PROJECT_KEY_TOKEN,
+  PaymentWebhookDto,
+  PendingPlanMaterializationService,
+  PendingRegistrationService,
+  PlanCatalogImportDto,
+  PlanCatalogImporterModule,
+  PlanCatalogImporterService,
+  PlanCatalogModule,
+  PlanCatalogValidationError,
+  PlanChangePreviewService,
+  PlanVersionsService,
+  PlansService,
+  PreviewPlanChangeDto,
+  PreviewPromoCodeDto,
+  PreviewRegistrationPromoDto,
+  PromoCodeExpirer,
+  PromoCodePublicController,
+  PromoCodeRateLimitGuard,
+  PromoCodesModule,
+  PromoCodesService,
+  PromotionsService,
+  PublicCatalogController,
+  PublicCatalogModule,
+  PublicMarketingCatalogService,
+  PublishBundleVersionDto,
+  PublishBusinessTypeVersionDto,
+  PublishPlanVersionDto,
+  PublishValidationError,
+  REGISTRATION_AUDIT_LOGGER_TOKEN,
+  REGISTRATION_BUSINESS_TYPE_LOOKUP_TOKEN,
+  REGISTRATION_CONFIGURATOR_LOOKUP_TOKEN,
+  REGISTRATION_CONFIG_TOKEN,
+  REGISTRATION_OTP_DELIVERY_TOKEN,
+  REGISTRATION_PROMO_PREVIEW_TOKEN,
+  REGISTRATION_RESUME_BASE_URL_TOKEN,
+  REGISTRATION_RESUME_DELIVERY_TOKEN,
+  REGISTRATION_RESUME_TOKEN_SIGNER_TOKEN,
+  REQUIRES_CAPABILITY_KEY,
+  REQUIRE_FEATURE_KEY,
+  REQUIRE_MFA_KEY,
+  RLS_BYPASS_PORT_TOKEN,
+  RegisterStartDto,
+  RegistrationCleanupCron,
+  RegistrationModule,
+  RequireFeature,
+  RequireMfa,
+  RequiresCapability,
+  ResendRegistrationOtpDto,
+  ReviewCatalogEntryDto,
+  SELF_SERVICE_BLOCKED_BUNDLES_TOKEN,
+  SELF_SERVICE_BLOCKED_PLANS_TOKEN,
+  SETUP_CONFIG_TOKEN,
+  SETUP_PROVISIONING_PORT_TOKEN,
+  SLUG_AVAILABILITY_CHECK_TOKEN,
+  SUBSCRIPTION_BUNDLE_CONFIG_TOKEN,
+  SUBSCRIPTION_BUNDLE_REPOSITORY_TOKEN,
+  SUBSCRIPTION_CONTRACT_REPOSITORY_TOKEN,
+  SUBSCRIPTION_REPOSITORY_TOKEN,
+  SUBSCRIPTION_STATS_PORT_TOKEN,
+  SUBSCRIPTION_USAGE_PORT_TOKEN,
+  SUBSCRIPTION_WRITE_PORT_TOKEN,
+  SaveRegistrationConfigDto,
+  SaveRegistrationConfigSelectionDto,
+  SelectRegistrationPlanDto,
+  SetupController,
+  SetupModule,
+  SetupService,
+  StartRegistrationCheckoutDto,
+  SubscriptionBundleModule,
+  SubscriptionBundlePreviewService,
+  SubscriptionBundlesService,
+  SubscriptionContractFreezeService,
+  SubscriptionContractModule,
+  SubscriptionContractService,
+  SuperAdminGuard,
+  SyncDiscoveryDto,
+  TENANT_AUTH_GUARDS_TOKEN,
+  TENANT_ID_RESOLVER_TOKEN,
+  TRANSACTION_RUNNER_TOKEN,
+  TRIAL_PROJECTION_PORT_TOKEN,
+  TenantAdminGuard,
+  TenantBillingController,
+  TenantBillingModule,
+  UPSELL_OFFER_CURRENCY_TOKEN,
+  UPSELL_OFFER_RESOLVER_TOKEN,
+  USAGE_SNAPSHOT_PORT_TOKEN,
+  USER_ACCOUNT_LOOKUP_TOKEN,
+  USER_EMAIL_RESOLVER_TOKEN,
+  USER_ID_RESOLVER_TOKEN,
+  UpdateBundleDto,
+  UpdateBundleVersionDraftDto,
+  UpdateBusinessTypeDto,
+  UpdateBusinessTypeVersionDraftDto,
+  UpdateCatalogEntryI18nDto,
+  UpdateCheckoutOfferDto,
+  UpdateMarketingProjectionDto,
+  UpdateMarketingSettingsDto,
+  UpdatePlanDto,
+  UpdatePlanVersionDraftDto,
+  UpdatePromotionDto,
+  VerifyRegistrationOtpDto,
+  addCycles,
+  addMonths,
+  aggregateBusinessTypeQuotas,
+  aggregateContractLineItemEntitlements,
+  aggregateLimits,
+  aggregateSubscriptionBundleQuotas,
+  applyCustomLimits,
+  asProvider,
+  assertBaseVersionFresh,
+  assertChangeNote,
+  assertDraftPublishable,
+  assertOptimisticLockHeld,
+  blockingStrictModeWarnings,
+  buildBundleVersionsController,
+  buildBundlesController,
+  buildBusinessTypeVersionsController,
+  buildBusinessTypesController,
+  buildCatalogEntriesController,
+  buildCheckoutOfferController,
+  buildDiscoveryController,
+  buildLabel,
+  buildMarketingProjectionsController,
+  buildMarketingSettingsController,
+  buildPlanCatalogFromSnapshot,
+  buildPlanCatalogImporterController,
+  buildPlanVersionsController,
+  buildPlansController,
+  buildPromotionsController,
+  buildPublicMarketingCatalogController,
+  buildReplacedByIndex,
+  buildTenantSubscriptionBundlesController,
+  classifyBundleVersionDiff,
+  classifyPlanDiff,
+  clearPendingPlanVersionFields,
+  collectBusinessTypeFeatures,
+  collectSubscriptionBundleFeatures,
+  computeBreakdown,
+  computeCarriedTrialEndsAt,
+  computeDiscountGross,
+  computeDiscountedGross,
+  computeIncludedVat,
+  computeNextPeriod,
+  computeProration,
+  computeRegularStartsAt,
+  computeSnapshotHash,
+  contractLineItemToInvoiceLineItem,
+  decideRenewal,
+  expandReplacedFeatures,
+  featureApprovalSignature,
+  filterActiveSubscriptionBundles,
+  filterPlannedOnlyFeatures,
+  findPlan,
+  formatPreflightReport,
+  formatSeedGateReport,
+  generateOtpCode,
+  getActiveFeatureKeys,
+  getMarketedPlans,
+  getPlanOrThrow,
+  getPlanPriceGross,
+  getPlanPriceNet,
+  getPlanQuota,
+  grossFromNet,
+  hasAnyFeature,
+  hasFeature,
+  hashIp,
+  hashOtpCode,
+  initialPeriodWindow,
+  ipFingerprint,
+  isFeatureInPlan,
+  isFeaturePlannedOnly,
+  loadApprovedCatalogKeys,
+  loadDiscoverySnapshotFromFile,
+  loadPlanCatalogFromFile,
+  loadPlanCatalogFromString,
+  periodEndAfter,
+  periodEndWithMinLead,
+  preflightExitCode,
+  quotaApprovalSignature,
+  resolveBundleCancelEffectiveAt,
+  resolveBundlePriceNet,
+  resolveEntitlementPlan,
+  resolveModel,
+  round2,
+  runHeadlessDiscoveryScan,
+  runPreflight,
+  runSeedGateFromFile,
+  seedGateExitCode,
+  slugify,
+  sortContractLineItemsForInvoice,
+  subscriptionContractToInvoiceSnapshot,
+  toEffectiveLimitsSnapshot,
+  validateBundleDraft,
+  validateBusinessTypeDraft,
+  validatePlanDraft,
+  validateSeedAgainstSnapshot,
+  verifyOtpCode
+};