@saasicat/nest 0.7.0 → 0.9.0

package/dist/catalog/index.js

@@ -1,3 +1,13 @@
+import {
+  formatPreflightReport,
+  formatSeedGateReport,
+  preflightExitCode,
+  runPreflight,
+  runSeedGateFromFile,
+  seedGateExitCode,
+  validateSeedAgainstSnapshot
+} from "../chunk-7K5PT2LX.js";
+import "../chunk-ABB2CRAS.js";
 import {
   ADVISORY_STRICT_MODE_CODES,
   BundlesService,
@@ -42,20 +52,12 @@ import {
   buildPromotionsController,
   buildPublicMarketingCatalogController,
   featureApprovalSignature,
-  formatPreflightReport,
-  formatSeedGateReport,
   loadApprovedCatalogKeys,
-  preflightExitCode,
   quotaApprovalSignature,
-  runPreflight,
-  runSeedGateFromFile,
-  seedGateExitCode,
   validateBundleDraft,
-  validatePlanDraft,
-  validateSeedAgainstSnapshot
-} from "../chunk-5DDCSGZC.js";
+  validatePlanDraft
+} from "../chunk-PBQRPDO2.js";
 import "../chunk-WPUVJRIN.js";
-import "../chunk-ABB2CRAS.js";
 import "../chunk-E56W4U2P.js";
 import "../chunk-M6CZQYPY.js";
 import "../chunk-WKVBNTYC.js";

package/dist/catalog.module-BKObceo0.d.ts

@@ -0,0 +1,103 @@
+import { Type, CanActivate, DynamicModule, ForwardReference, Provider } from '@nestjs/common';
+import { BundleRepository, MarketingProjectionRepository, CatalogEntryRepository, PromotionRepository, MarketingSettingsRepository, PlanRepository, FeatureUiRegistry } from '@saasicat/types';
+import { P as ProviderSpec } from './di-CcNeq9v-.js';
+
+interface CatalogControllerConfig {
+    /**
+     * Class-level guards for `BundlesController` and `BundleVersionsController`.
+     * REQUIRED — otherwise `forRoot()` throws at boot. Pass `[]` explicitly
+     * if the endpoints should intentionally be auth-free.
+     */
+    guards: Array<Type<CanActivate>>;
+}
+interface CatalogModuleOptions {
+    /** Adapter for `bundles` + `bundle_versions` persistence. */
+    bundleRepository: ProviderSpec<BundleRepository>;
+    /**
+     * Adapter for `marketing_projections` persistence. Optional — if
+     * omitted, MarketingProjectionsService + controller are not
+     * registered.
+     */
+    marketingProjectionRepository?: ProviderSpec<MarketingProjectionRepository>;
+    /**
+     * Adapter for `capability_/feature_/quota_catalog_entries` persistence
+     * (discovery review, SPEC_V2 §6.3). Optional — if omitted,
+     * CatalogEntriesService + controller are not registered.
+     */
+    catalogEntryRepository?: ProviderSpec<CatalogEntryRepository>;
+    /**
+     * Adapter for `promotions` persistence (SPEC_V2 §9a). Optional — if
+     * omitted, PromotionsService + controller are not registered.
+     */
+    promotionRepository?: ProviderSpec<PromotionRepository>;
+    /**
+     * Adapter for `marketing_settings` persistence (SPEC_V2 §6.5 —
+     * `activeLocales`). Optional.
+     */
+    marketingSettingsRepository?: ProviderSpec<MarketingSettingsRepository>;
+    /**
+     * Auth-free pricing-page endpoint `GET /public/marketing-catalog`
+     * (SPEC_V2 §9). Registered only when plan-, marketingProjection-
+     * and promotionRepository are set. `guards` is usually `[]`.
+     */
+    publicMarketingCatalog?: {
+        guards: Array<Type<CanActivate>>;
+        projectKey: string;
+        currency: string;
+        vatRate: number;
+    };
+    /**
+     * SPEC_V2 §11.1 M6 (Pack 1) — adapter for `plans` master-record persistence.
+     * Optional; if omitted, PlansService + controller are not
+     * registered (apps without a need for the plan editor stay unchanged).
+     */
+    planRepository?: ProviderSpec<PlanRepository>;
+    /**
+     * Controller mount for `/admin/catalog/bundles` + `/admin/catalog/bundle-versions`.
+     * If omitted, the endpoints are not registered — but the services remain usable via DI.
+     */
+    controller?: CatalogControllerConfig;
+    /**
+     * Strict-mode mode. `blocking` (default, #12) throws HTTP 422 on
+     * violations and requires a DiscoverySnapshot; `warn-only` returns them
+     * only as a warning (transition until 100% discovery coverage).
+     */
+    strictModeCheckMode?: 'warn-only' | 'blocking';
+    /**
+     * Discovery→catalog auto-sync at boot (#12). Default `true` — as soon as a
+     * `catalogEntryRepository` is wired and a DiscoverySnapshot is available,
+     * `CatalogEntriesService` mirrors the discovery into the DB at startup. `false`
+     * disables the boot sync; the manual sync endpoint remains usable.
+     */
+    autoSyncDiscoveryAtBoot?: boolean;
+    /**
+     * Feature keys the catalog is deliberately allowed to carry without them
+     * existing in the discovery snapshot (marketed non-code features such as
+     * support SLAs, e.g. `['PRIORITY_SUPPORT']`). The strict-mode check excludes
+     * them from BUNDLE_/PLAN_FEATURE_UNKNOWN. Use sparingly.
+     */
+    marketedOnlyFeatures?: string[];
+    /**
+     * Optional consumer-curated FeatureUiRegistry (label/description/icon
+     * per feature — the same one passed to `PublicCatalogModule.forRoot`). The
+     * discovery auto-sync seeds EMPTY `FeatureCatalogEntry` fields
+     * (label/description/icon) from it at boot; SuperAdmin edits stay untouched. This
+     * makes `FeatureCatalogEntry` the SSOT for UI metadata (SPEC_V2 §6.3 / #12).
+     */
+    featureUiRegistry?: FeatureUiRegistry;
+    /**
+     * Modules whose providers must be visible in the DI scope of this
+     * DynamicModule — typically: `AuthModule`/`PlatformAdminModule`, because the
+     * controller guards come from there.
+     */
+    imports?: Array<Type<unknown> | DynamicModule | Promise<DynamicModule> | ForwardReference>;
+    /** Additional providers registered in the DynamicModule itself. */
+    extraProviders?: Provider[];
+    /** Register the module globally — default `false`. */
+    global?: boolean;
+}
+declare class CatalogModule {
+    static forRoot(options: CatalogModuleOptions): DynamicModule;
+}
+
+export { type CatalogControllerConfig as C, CatalogModule as a, type CatalogModuleOptions as b };

package/dist/catalog.module-Dw2Hrbyu.d.cts

@@ -0,0 +1,103 @@
+import { Type, CanActivate, DynamicModule, ForwardReference, Provider } from '@nestjs/common';
+import { BundleRepository, MarketingProjectionRepository, CatalogEntryRepository, PromotionRepository, MarketingSettingsRepository, PlanRepository, FeatureUiRegistry } from '@saasicat/types';
+import { P as ProviderSpec } from './di-CcNeq9v-.cjs';
+
+interface CatalogControllerConfig {
+    /**
+     * Class-level guards for `BundlesController` and `BundleVersionsController`.
+     * REQUIRED — otherwise `forRoot()` throws at boot. Pass `[]` explicitly
+     * if the endpoints should intentionally be auth-free.
+     */
+    guards: Array<Type<CanActivate>>;
+}
+interface CatalogModuleOptions {
+    /** Adapter for `bundles` + `bundle_versions` persistence. */
+    bundleRepository: ProviderSpec<BundleRepository>;
+    /**
+     * Adapter for `marketing_projections` persistence. Optional — if
+     * omitted, MarketingProjectionsService + controller are not
+     * registered.
+     */
+    marketingProjectionRepository?: ProviderSpec<MarketingProjectionRepository>;
+    /**
+     * Adapter for `capability_/feature_/quota_catalog_entries` persistence
+     * (discovery review, SPEC_V2 §6.3). Optional — if omitted,
+     * CatalogEntriesService + controller are not registered.
+     */
+    catalogEntryRepository?: ProviderSpec<CatalogEntryRepository>;
+    /**
+     * Adapter for `promotions` persistence (SPEC_V2 §9a). Optional — if
+     * omitted, PromotionsService + controller are not registered.
+     */
+    promotionRepository?: ProviderSpec<PromotionRepository>;
+    /**
+     * Adapter for `marketing_settings` persistence (SPEC_V2 §6.5 —
+     * `activeLocales`). Optional.
+     */
+    marketingSettingsRepository?: ProviderSpec<MarketingSettingsRepository>;
+    /**
+     * Auth-free pricing-page endpoint `GET /public/marketing-catalog`
+     * (SPEC_V2 §9). Registered only when plan-, marketingProjection-
+     * and promotionRepository are set. `guards` is usually `[]`.
+     */
+    publicMarketingCatalog?: {
+        guards: Array<Type<CanActivate>>;
+        projectKey: string;
+        currency: string;
+        vatRate: number;
+    };
+    /**
+     * SPEC_V2 §11.1 M6 (Pack 1) — adapter for `plans` master-record persistence.
+     * Optional; if omitted, PlansService + controller are not
+     * registered (apps without a need for the plan editor stay unchanged).
+     */
+    planRepository?: ProviderSpec<PlanRepository>;
+    /**
+     * Controller mount for `/admin/catalog/bundles` + `/admin/catalog/bundle-versions`.
+     * If omitted, the endpoints are not registered — but the services remain usable via DI.
+     */
+    controller?: CatalogControllerConfig;
+    /**
+     * Strict-mode mode. `blocking` (default, #12) throws HTTP 422 on
+     * violations and requires a DiscoverySnapshot; `warn-only` returns them
+     * only as a warning (transition until 100% discovery coverage).
+     */
+    strictModeCheckMode?: 'warn-only' | 'blocking';
+    /**
+     * Discovery→catalog auto-sync at boot (#12). Default `true` — as soon as a
+     * `catalogEntryRepository` is wired and a DiscoverySnapshot is available,
+     * `CatalogEntriesService` mirrors the discovery into the DB at startup. `false`
+     * disables the boot sync; the manual sync endpoint remains usable.
+     */
+    autoSyncDiscoveryAtBoot?: boolean;
+    /**
+     * Feature keys the catalog is deliberately allowed to carry without them
+     * existing in the discovery snapshot (marketed non-code features such as
+     * support SLAs, e.g. `['PRIORITY_SUPPORT']`). The strict-mode check excludes
+     * them from BUNDLE_/PLAN_FEATURE_UNKNOWN. Use sparingly.
+     */
+    marketedOnlyFeatures?: string[];
+    /**
+     * Optional consumer-curated FeatureUiRegistry (label/description/icon
+     * per feature — the same one passed to `PublicCatalogModule.forRoot`). The
+     * discovery auto-sync seeds EMPTY `FeatureCatalogEntry` fields
+     * (label/description/icon) from it at boot; SuperAdmin edits stay untouched. This
+     * makes `FeatureCatalogEntry` the SSOT for UI metadata (SPEC_V2 §6.3 / #12).
+     */
+    featureUiRegistry?: FeatureUiRegistry;
+    /**
+     * Modules whose providers must be visible in the DI scope of this
+     * DynamicModule — typically: `AuthModule`/`PlatformAdminModule`, because the
+     * controller guards come from there.
+     */
+    imports?: Array<Type<unknown> | DynamicModule | Promise<DynamicModule> | ForwardReference>;
+    /** Additional providers registered in the DynamicModule itself. */
+    extraProviders?: Provider[];
+    /** Register the module globally — default `false`. */
+    global?: boolean;
+}
+declare class CatalogModule {
+    static forRoot(options: CatalogModuleOptions): DynamicModule;
+}
+
+export { type CatalogControllerConfig as C, CatalogModule as a, type CatalogModuleOptions as b };

package/dist/{chunk-U6HT27J7.js → chunk-3M6VLT5N.js}

@@ -296,6 +296,7 @@ var AdminModule = class _AdminModule {
     return {
       module: _AdminModule,
       global: options.global ?? false,
+      imports: options.imports ?? [],
       providers,
       exports: [
         MFA_PORT_TOKEN,
@@ -537,7 +538,7 @@ var PLATFORM_CORE_MANIFEST_CONTRIBUTION = {
     // section is deliberately curated:
     //   Overview: dashboard
     //   Product catalog: discovery → bundles → plans →
-    //                   planVersions → marketingCatalog → promoCodes
+    //                   marketingCatalog → promoCodes
     //                   (promoCodes is appended by the app contributions
     //                   and therefore lands at the end of the section)
     //   Customers: tenants → users → pilots
@@ -565,10 +566,6 @@ var PLATFORM_CORE_MANIFEST_CONTRIBUTION = {
         enabled: true,
         requiredCapability: "plans.read"
       },
-      planVersions: {
-        enabled: true,
-        requiredCapability: "plans.read"
-      },
       // SPEC_V2 §11.1 M3 — marketing catalog (locale pivot).
       // Apps that market a public catalog set
       // `marketingProjections.read = true`.
@@ -929,6 +926,256 @@ AdminManifestModule = _ts_decorate8([
   Module2({})
 ], AdminManifestModule);
 
+// src/admin/admin-resources.module.ts
+import { Body, Controller as Controller3, Get as Get3, Inject as Inject7, Injectable as Injectable6, Module as Module3, NotFoundException, Param, Post as Post2, Query, Req, UseGuards as UseGuards2 } from "@nestjs/common";
+import { IsOptional, IsString, MaxLength } from "class-validator";
+function _ts_decorate9(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate9, "_ts_decorate");
+function _ts_metadata7(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata7, "_ts_metadata");
+function _ts_param7(paramIndex, decorator) {
+  return function(target, key) {
+    decorator(target, key, paramIndex);
+  };
+}
+__name(_ts_param7, "_ts_param");
+var ADMIN_RESOURCES_PORT_TOKEN = /* @__PURE__ */ Symbol.for("saas-platform/AdminResourcesPort");
+var SuspendTenantDto = class {
+  static {
+    __name(this, "SuspendTenantDto");
+  }
+  reason;
+};
+_ts_decorate9([
+  IsOptional(),
+  IsString(),
+  MaxLength(500),
+  _ts_metadata7("design:type", String)
+], SuspendTenantDto.prototype, "reason", void 0);
+var AdminResourcesService = class {
+  static {
+    __name(this, "AdminResourcesService");
+  }
+  resources;
+  audit;
+  constructor(resources, audit) {
+    this.resources = resources;
+    this.audit = audit;
+  }
+  listTenants(filter) {
+    return this.resources.listTenants(filter);
+  }
+  async getTenantDetail(slug) {
+    const tenant = await this.resources.getTenantDetail(slug);
+    if (!tenant) throw new NotFoundException(`Tenant ${slug} not found`);
+    return tenant;
+  }
+  listUsers(filter) {
+    return this.resources.listUsers(filter);
+  }
+  listAudit(filter) {
+    return this.resources.listAudit(filter);
+  }
+  listSubscriptions() {
+    return this.resources.listSubscriptions();
+  }
+  suspendTenant(slug, reason, actor) {
+    return this.setTenantActive(slug, false, "PAST_DUE", actor, {
+      action: "TENANT_SUSPEND",
+      reason: reason ?? ""
+    });
+  }
+  reactivateTenant(slug, actor) {
+    return this.setTenantActive(slug, true, "ACTIVE", actor, {
+      action: "TENANT_REACTIVATE",
+      reason: ""
+    });
+  }
+  async setTenantActive(slug, active, subscriptionStatus, actor, audit) {
+    const result = await this.resources.setTenantActive(slug, active, subscriptionStatus);
+    if (!result) throw new NotFoundException(`Tenant ${slug} not found`);
+    await this.audit.log({
+      actor,
+      entity: "Tenant",
+      entityId: result.id,
+      action: audit.action,
+      changes: {
+        slug,
+        reason: audit.reason
+      }
+    });
+    return result;
+  }
+};
+AdminResourcesService = _ts_decorate9([
+  Injectable6(),
+  _ts_param7(0, Inject7(ADMIN_RESOURCES_PORT_TOKEN)),
+  _ts_param7(1, Inject7(AdminAuditService)),
+  _ts_metadata7("design:type", Function),
+  _ts_metadata7("design:paramtypes", [
+    typeof AdminResourcesPort === "undefined" ? Object : AdminResourcesPort,
+    typeof AdminAuditService === "undefined" ? Object : AdminAuditService
+  ])
+], AdminResourcesService);
+function actorFromRequest(request) {
+  const userId = request.user?.id ?? request.user?.userId ?? "unknown";
+  return {
+    userId,
+    email: request.user?.email ?? `${userId}@unknown`,
+    source: "web",
+    context: request.user?.sessionId ?? "unknown"
+  };
+}
+__name(actorFromRequest, "actorFromRequest");
+function buildAdminResourcesController(guards) {
+  let GeneratedAdminResourcesController = class GeneratedAdminResourcesController {
+    static {
+      __name(this, "GeneratedAdminResourcesController");
+    }
+    resources;
+    constructor(resources) {
+      this.resources = resources;
+    }
+    listTenants(query) {
+      return this.resources.listTenants(query);
+    }
+    getTenant(slug) {
+      return this.resources.getTenantDetail(slug);
+    }
+    suspendTenant(request, slug, dto) {
+      return this.resources.suspendTenant(slug, dto.reason, actorFromRequest(request));
+    }
+    reactivateTenant(request, slug) {
+      return this.resources.reactivateTenant(slug, actorFromRequest(request));
+    }
+    listUsers(query) {
+      return this.resources.listUsers(query);
+    }
+    listAudit(query) {
+      return this.resources.listAudit({
+        actor: query.actor,
+        action: query.action,
+        entity: query.entity,
+        since: query.since,
+        limit: query.limit ? Number.parseInt(query.limit, 10) : void 0
+      });
+    }
+    listSubscriptions() {
+      return this.resources.listSubscriptions();
+    }
+  };
+  _ts_decorate9([
+    Get3("tenants"),
+    _ts_param7(0, Query()),
+    _ts_metadata7("design:type", Function),
+    _ts_metadata7("design:paramtypes", [
+      Object
+    ]),
+    _ts_metadata7("design:returntype", typeof Promise === "undefined" ? Object : Promise)
+  ], GeneratedAdminResourcesController.prototype, "listTenants", null);
+  _ts_decorate9([
+    Get3("tenants/:slug"),
+    _ts_param7(0, Param("slug")),
+    _ts_metadata7("design:type", Function),
+    _ts_metadata7("design:paramtypes", [
+      String
+    ]),
+    _ts_metadata7("design:returntype", typeof Promise === "undefined" ? Object : Promise)
+  ], GeneratedAdminResourcesController.prototype, "getTenant", null);
+  _ts_decorate9([
+    Post2("tenants/:slug/suspend"),
+    _ts_param7(0, Req()),
+    _ts_param7(1, Param("slug")),
+    _ts_param7(2, Body()),
+    _ts_metadata7("design:type", Function),
+    _ts_metadata7("design:paramtypes", [
+      typeof AdminRequest === "undefined" ? Object : AdminRequest,
+      String,
+      typeof SuspendTenantDto === "undefined" ? Object : SuspendTenantDto
+    ]),
+    _ts_metadata7("design:returntype", typeof Promise === "undefined" ? Object : Promise)
+  ], GeneratedAdminResourcesController.prototype, "suspendTenant", null);
+  _ts_decorate9([
+    Post2("tenants/:slug/reactivate"),
+    _ts_param7(0, Req()),
+    _ts_param7(1, Param("slug")),
+    _ts_metadata7("design:type", Function),
+    _ts_metadata7("design:paramtypes", [
+      typeof AdminRequest === "undefined" ? Object : AdminRequest,
+      String
+    ]),
+    _ts_metadata7("design:returntype", typeof Promise === "undefined" ? Object : Promise)
+  ], GeneratedAdminResourcesController.prototype, "reactivateTenant", null);
+  _ts_decorate9([
+    Get3("users"),
+    _ts_param7(0, Query()),
+    _ts_metadata7("design:type", Function),
+    _ts_metadata7("design:paramtypes", [
+      Object
+    ]),
+    _ts_metadata7("design:returntype", typeof Promise === "undefined" ? Object : Promise)
+  ], GeneratedAdminResourcesController.prototype, "listUsers", null);
+  _ts_decorate9([
+    Get3("audit"),
+    _ts_param7(0, Query()),
+    _ts_metadata7("design:type", Function),
+    _ts_metadata7("design:paramtypes", [
+      Object
+    ]),
+    _ts_metadata7("design:returntype", typeof Promise === "undefined" ? Object : Promise)
+  ], GeneratedAdminResourcesController.prototype, "listAudit", null);
+  _ts_decorate9([
+    Get3("subscriptions"),
+    _ts_metadata7("design:type", Function),
+    _ts_metadata7("design:paramtypes", []),
+    _ts_metadata7("design:returntype", typeof Promise === "undefined" ? Object : Promise)
+  ], GeneratedAdminResourcesController.prototype, "listSubscriptions", null);
+  GeneratedAdminResourcesController = _ts_decorate9([
+    Controller3("admin"),
+    UseGuards2(...guards),
+    _ts_param7(0, Inject7(AdminResourcesService)),
+    _ts_metadata7("design:type", Function),
+    _ts_metadata7("design:paramtypes", [
+      typeof AdminResourcesService === "undefined" ? Object : AdminResourcesService
+    ])
+  ], GeneratedAdminResourcesController);
+  return GeneratedAdminResourcesController;
+}
+__name(buildAdminResourcesController, "buildAdminResourcesController");
+var AdminResourcesModule = class _AdminResourcesModule {
+  static {
+    __name(this, "AdminResourcesModule");
+  }
+  static forRoot(options) {
+    return {
+      module: _AdminResourcesModule,
+      global: options.global ?? false,
+      imports: options.imports ?? [],
+      controllers: [
+        buildAdminResourcesController(options.guards)
+      ],
+      providers: [
+        asProvider(ADMIN_RESOURCES_PORT_TOKEN, options.resources),
+        AdminResourcesService
+      ],
+      exports: [
+        ADMIN_RESOURCES_PORT_TOKEN,
+        AdminResourcesService
+      ]
+    };
+  }
+};
+AdminResourcesModule = _ts_decorate9([
+  Module3({})
+], AdminResourcesModule);
+
 export {
   SuperAdminGuard,
   MfaService,
@@ -942,5 +1189,9 @@ export {
   AdminManifestService,
   AdminPublicBootController,
   PLATFORM_CORE_MANIFEST_CONTRIBUTION,
-  AdminManifestModule
+  AdminManifestModule,
+  ADMIN_RESOURCES_PORT_TOKEN,
+  SuspendTenantDto,
+  AdminResourcesService,
+  AdminResourcesModule
 };