@saasicat/nest 0.8.0 → 0.10.0

package/dist/admin/index.d.cts

@@ -1,143 +1,24 @@
-import { CanActivate, ExecutionContext, NestInterceptor, CallHandler, DynamicModule, FactoryProvider, Type, ForwardReference, Provider } from '@nestjs/common';
-import { Reflector } from '@nestjs/core';
-import { MfaPort, RlsBypassPort, AuditPort, PublicBootResponse, ManifestContribution, SubscriptionStatsPort, PromoCodeStatsPort, AuditStatsPort, SubscriptionStatsSnapshot, PromoCodeStatsSnapshot, AuditStatsSnapshot } from '@saasicat/types';
+import { h as AdminStatsService, i as AdminStatsSnapshot } from '../admin-stats.module-v4SVvWzj.cjs';
+export { A as AdminBypassRlsInterceptor, a as AdminManifestModule, b as AdminManifestModuleOptions, c as AdminManifestService, d as AdminModule, e as AdminModuleOptions, f as AdminStatsModule, g as AdminStatsModuleOptions, M as MfaGuard, j as MfaService, P as PLATFORM_CORE_CONTRIBUTION_TOKEN, R as REQUIRE_MFA_KEY, k as RequireMfa, S as SuperAdminGuard, T as TotpSetupResult, V as VerifyTotpInput } from '../admin-stats.module-v4SVvWzj.cjs';
 export { A as AdminAuditService } from '../admin-audit.service-9IqXMlZm.cjs';
-import { Observable } from 'rxjs';
-import { P as ProviderSpec } from '../di-CcNeq9v-.cjs';
-import { A as AdminManifestConfig } from '../admin-manifest.config-DyrQNT7M.cjs';
-export { a as ADMIN_MANIFEST_CONFIG } from '../admin-manifest.config-DyrQNT7M.cjs';
-export { A as AdminManifestService, P as PLATFORM_CORE_CONTRIBUTION_TOKEN } from '../admin-manifest.service-Cp6uwvmt.cjs';
+import { b as AdminManifestConfig } from '../admin-resources.module-BZN_yBFj.cjs';
+export { A as ADMIN_MANIFEST_CONFIG, a as ADMIN_RESOURCES_PORT_TOKEN, c as AdminResourcesModule, d as AdminResourcesModuleOptions, e as AdminResourcesService, S as SuspendTenantDto } from '../admin-resources.module-BZN_yBFj.cjs';
+import { PublicBootResponse, ManifestContribution } from '@saasicat/types';
+import '@nestjs/common';
+import '@nestjs/core';
+import 'rxjs';
+import '../di-CcNeq9v-.cjs';
 
 declare const MFA_PORT_TOKEN: unique symbol;
 declare const AUDIT_PORT_TOKEN: unique symbol;
 declare const RLS_BYPASS_PORT_TOKEN: unique symbol;
 
-declare class SuperAdminGuard implements CanActivate {
-    canActivate(context: ExecutionContext): boolean;
-}
-
-interface TotpSetupResult {
-    /** Base32-encoded TOTP secret (persisted in the MfaPort). */
-    secret: string;
-    /** otpauth:// URI for the QR code generator (authenticator app). */
-    otpauthUri: string;
-}
-interface VerifyTotpInput {
-    userId: string;
-    code: string;
-}
-declare class MfaService {
-    private readonly mfa;
-    private readonly logger;
-    constructor(mfa: MfaPort);
-    /**
-     * Generates a new TOTP secret, persists it via `MfaPort.setSecret`
-     * and returns the secret + the otpauth URI for the QR code.
-     *
-     * `issuer` and `label` shape the display in the authenticator (e.g.
-     * "DemoApp:taci@example.com").
-     */
-    setup(userId: string, label: string, issuer: string): Promise<TotpSetupResult>;
-    /**
-     * Verifies the entered code against the stored secret,
-     * clock-drift-tolerant by ±1 time step.
-     */
-    verify(input: VerifyTotpInput): Promise<boolean>;
-    /**
-     * Deletes a user's secret — used by `ahp admin mfa-reset`.
-     */
-    disable(userId: string): Promise<void>;
-    /** Delegates to `MfaPort.isEnabled`. */
-    isEnabled(userId: string): Promise<boolean>;
-}
-
-declare const REQUIRE_MFA_KEY = "saas-platform/require-mfa";
-/**
- * Marks an endpoint as MFA-required. The frontend sends the TOTP code
- * in the `X-Mfa-Code` header.
- */
-declare const RequireMfa: () => MethodDecorator & ClassDecorator;
-declare class MfaGuard implements CanActivate {
-    private readonly reflector;
-    private readonly mfaService;
-    private readonly logger;
-    constructor(reflector: Reflector, mfaService: MfaService);
-    canActivate(context: ExecutionContext): Promise<boolean>;
-}
-
-declare class AdminBypassRlsInterceptor implements NestInterceptor {
-    private readonly port;
-    constructor(port: RlsBypassPort);
-    intercept(_context: ExecutionContext, next: CallHandler): Observable<unknown>;
-}
-
-interface AdminModuleOptions {
-    mfaPort: ProviderSpec<MfaPort>;
-    auditPort: ProviderSpec<AuditPort>;
-    rlsBypassPort: ProviderSpec<RlsBypassPort>;
-    /** Register the module globally — default `false`. */
-    global?: boolean;
-}
-declare class AdminModule {
-    static forRoot(options: AdminModuleOptions): DynamicModule;
-}
-
 declare class AdminPublicBootController {
     private readonly config;
     constructor(config: AdminManifestConfig);
     getBoot(): PublicBootResponse;
 }
 
-type ConfigSpec = AdminManifestConfig | Pick<FactoryProvider<AdminManifestConfig>, 'useFactory' | 'inject'>;
-interface AdminManifestModuleOptions {
-    /** AdminManifestConfig as a value or via a factory (e.g. with a PLAN_CATALOG_TOKEN inject). */
-    config: ConfigSpec;
-    /**
-     * Default `true`. Set to `false` when the consumer registers its own
-     * manifest controller with app-specific guards entirely on its own.
-     */
-    includeManifestController?: boolean;
-    /**
-     * Class-level guards for GET /admin/manifest and POST /admin/manifest/reload,
-     * when `includeManifestController === true`. REQUIRED — otherwise
-     * `forRoot()` throws at boot.
-     *
-     * Pass `[]` explicitly when the endpoint should intentionally be auth-free
-     * (e.g. CI smoke tests, public demo). This makes the choice visible in the
-     * code rather than a silent default.
-     */
-    guards?: Array<Type<CanActivate>>;
-    /**
-     * Additional guards that apply ONLY to POST /admin/manifest/reload
-     * (typically `MfaGuard`). Placed after `guards` in the chain. Must be made
-     * available by the consumer as a provider.
-     */
-    reloadGuards?: Array<Type<CanActivate>>;
-    /**
-     * Default `true`. When active, the module automatically hooks
-     * `PLATFORM_CORE_MANIFEST_CONTRIBUTION` (StandardPage spine, generic tenant
-     * actions, platform audit action labels) into the `AdminManifestService` —
-     * before all app `register()` calls from `onModuleInit`. Consumers without
-     * a SuperAdmin need set this to `false`.
-     */
-    registerPlatformCore?: boolean;
-    /**
-     * Modules whose providers must be visible in the DI scope of this
-     * DynamicModule — typically: the app module that registers the
-     * factory-inject provider (e.g. `AdminManifestConfigFactory`). Without this
-     * entry, NestJS 11.1.19 cannot resolve the `inject:[...]` of the config
-     * factory (UnknownDependenciesException for ADMIN_MANIFEST_CONFIG).
-     */
-    imports?: Array<Type<unknown> | DynamicModule | Promise<DynamicModule> | ForwardReference>;
-    /** Additional providers that are registered in the DynamicModule itself. */
-    extraProviders?: Provider[];
-    /** Register the module globally — default `false`. */
-    global?: boolean;
-}
-declare class AdminManifestModule {
-    static forRoot(options: AdminManifestModuleOptions): DynamicModule;
-}
-
 declare const PLATFORM_CORE_MANIFEST_CONTRIBUTION: ManifestContribution;
 
 declare const SUBSCRIPTION_STATS_PORT_TOKEN: unique symbol;
@@ -146,52 +27,10 @@ declare const AUDIT_STATS_PORT_TOKEN: unique symbol;
 /** Default audit window in days for the dashboard KPI. Override via forRoot. */
 declare const ADMIN_STATS_AUDIT_WINDOW_DAYS_TOKEN: unique symbol;
 
-/**
- * Platform stats for the SuperAdmin dashboard page.
- *
- * Contains subscription/promo/audit aggregates that are equally meaningful
- * across all consuming apps. App-specific KPIs (e.g. DATEV or Bundles/Members)
- * remain extra endpoints in the respective app.
- */
-interface AdminStatsSnapshot {
-    subscriptions: SubscriptionStatsSnapshot;
-    promos: PromoCodeStatsSnapshot;
-    audit: AuditStatsSnapshot;
-}
-declare class AdminStatsService {
-    private readonly subscriptions;
-    private readonly promos;
-    private readonly audit;
-    private readonly auditWindowDays;
-    constructor(subscriptions: SubscriptionStatsPort, promos: PromoCodeStatsPort, audit: AuditStatsPort, auditWindowDays?: number);
-    getSnapshot(): Promise<AdminStatsSnapshot>;
-}
-
 declare class AdminStatsController {
     private readonly stats;
     constructor(stats: AdminStatsService);
     getDashboardSnapshot(): Promise<AdminStatsSnapshot>;
 }
 
-interface AdminStatsModuleOptions {
-    subscriptionStatsPort: ProviderSpec<SubscriptionStatsPort>;
-    promoCodeStatsPort: ProviderSpec<PromoCodeStatsPort>;
-    auditStatsPort: ProviderSpec<AuditStatsPort>;
-    /** Audit window in days for the "last N days" KPI. Default 7. */
-    auditWindowDays?: number;
-    /**
-     * Modules whose providers must be visible in the DI scope of this
-     * DynamicModule — e.g. the app module that registers the adapter classes
-     * referenced by the factory `inject` lists.
-     */
-    imports?: Array<Type<unknown> | DynamicModule | Promise<DynamicModule> | ForwardReference>;
-    /** Additional providers registered in the DynamicModule itself. */
-    extraProviders?: Provider[];
-    /** Register the module globally — default `false`. */
-    global?: boolean;
-}
-declare class AdminStatsModule {
-    static forRoot(options: AdminStatsModuleOptions): DynamicModule;
-}
-
-export { ADMIN_STATS_AUDIT_WINDOW_DAYS_TOKEN, AUDIT_PORT_TOKEN, AUDIT_STATS_PORT_TOKEN, AdminBypassRlsInterceptor, AdminManifestConfig, AdminManifestModule, type AdminManifestModuleOptions, AdminModule, type AdminModuleOptions, AdminPublicBootController, AdminStatsController, AdminStatsModule, type AdminStatsModuleOptions, AdminStatsService, type AdminStatsSnapshot, MFA_PORT_TOKEN, MfaGuard, MfaService, PLATFORM_CORE_MANIFEST_CONTRIBUTION, PROMO_CODE_STATS_PORT_TOKEN, REQUIRE_MFA_KEY, RLS_BYPASS_PORT_TOKEN, RequireMfa, SUBSCRIPTION_STATS_PORT_TOKEN, SuperAdminGuard, type TotpSetupResult, type VerifyTotpInput };
+export { ADMIN_STATS_AUDIT_WINDOW_DAYS_TOKEN, AUDIT_PORT_TOKEN, AUDIT_STATS_PORT_TOKEN, AdminManifestConfig, AdminPublicBootController, AdminStatsController, AdminStatsService, AdminStatsSnapshot, MFA_PORT_TOKEN, PLATFORM_CORE_MANIFEST_CONTRIBUTION, PROMO_CODE_STATS_PORT_TOKEN, RLS_BYPASS_PORT_TOKEN, SUBSCRIPTION_STATS_PORT_TOKEN };

package/dist/admin/index.d.ts

@@ -1,143 +1,24 @@
-import { CanActivate, ExecutionContext, NestInterceptor, CallHandler, DynamicModule, FactoryProvider, Type, ForwardReference, Provider } from '@nestjs/common';
-import { Reflector } from '@nestjs/core';
-import { MfaPort, RlsBypassPort, AuditPort, PublicBootResponse, ManifestContribution, SubscriptionStatsPort, PromoCodeStatsPort, AuditStatsPort, SubscriptionStatsSnapshot, PromoCodeStatsSnapshot, AuditStatsSnapshot } from '@saasicat/types';
+import { h as AdminStatsService, i as AdminStatsSnapshot } from '../admin-stats.module-15ac5KY3.js';
+export { A as AdminBypassRlsInterceptor, a as AdminManifestModule, b as AdminManifestModuleOptions, c as AdminManifestService, d as AdminModule, e as AdminModuleOptions, f as AdminStatsModule, g as AdminStatsModuleOptions, M as MfaGuard, j as MfaService, P as PLATFORM_CORE_CONTRIBUTION_TOKEN, R as REQUIRE_MFA_KEY, k as RequireMfa, S as SuperAdminGuard, T as TotpSetupResult, V as VerifyTotpInput } from '../admin-stats.module-15ac5KY3.js';
 export { A as AdminAuditService } from '../admin-audit.service-9IqXMlZm.js';
-import { Observable } from 'rxjs';
-import { P as ProviderSpec } from '../di-CcNeq9v-.js';
-import { A as AdminManifestConfig } from '../admin-manifest.config-DyrQNT7M.js';
-export { a as ADMIN_MANIFEST_CONFIG } from '../admin-manifest.config-DyrQNT7M.js';
-export { A as AdminManifestService, P as PLATFORM_CORE_CONTRIBUTION_TOKEN } from '../admin-manifest.service-UGgzR1x-.js';
+import { b as AdminManifestConfig } from '../admin-resources.module-Cms8MY6h.js';
+export { A as ADMIN_MANIFEST_CONFIG, a as ADMIN_RESOURCES_PORT_TOKEN, c as AdminResourcesModule, d as AdminResourcesModuleOptions, e as AdminResourcesService, S as SuspendTenantDto } from '../admin-resources.module-Cms8MY6h.js';
+import { PublicBootResponse, ManifestContribution } from '@saasicat/types';
+import '@nestjs/common';
+import '@nestjs/core';
+import 'rxjs';
+import '../di-CcNeq9v-.js';
 
 declare const MFA_PORT_TOKEN: unique symbol;
 declare const AUDIT_PORT_TOKEN: unique symbol;
 declare const RLS_BYPASS_PORT_TOKEN: unique symbol;
 
-declare class SuperAdminGuard implements CanActivate {
-    canActivate(context: ExecutionContext): boolean;
-}
-
-interface TotpSetupResult {
-    /** Base32-encoded TOTP secret (persisted in the MfaPort). */
-    secret: string;
-    /** otpauth:// URI for the QR code generator (authenticator app). */
-    otpauthUri: string;
-}
-interface VerifyTotpInput {
-    userId: string;
-    code: string;
-}
-declare class MfaService {
-    private readonly mfa;
-    private readonly logger;
-    constructor(mfa: MfaPort);
-    /**
-     * Generates a new TOTP secret, persists it via `MfaPort.setSecret`
-     * and returns the secret + the otpauth URI for the QR code.
-     *
-     * `issuer` and `label` shape the display in the authenticator (e.g.
-     * "DemoApp:taci@example.com").
-     */
-    setup(userId: string, label: string, issuer: string): Promise<TotpSetupResult>;
-    /**
-     * Verifies the entered code against the stored secret,
-     * clock-drift-tolerant by ±1 time step.
-     */
-    verify(input: VerifyTotpInput): Promise<boolean>;
-    /**
-     * Deletes a user's secret — used by `ahp admin mfa-reset`.
-     */
-    disable(userId: string): Promise<void>;
-    /** Delegates to `MfaPort.isEnabled`. */
-    isEnabled(userId: string): Promise<boolean>;
-}
-
-declare const REQUIRE_MFA_KEY = "saas-platform/require-mfa";
-/**
- * Marks an endpoint as MFA-required. The frontend sends the TOTP code
- * in the `X-Mfa-Code` header.
- */
-declare const RequireMfa: () => MethodDecorator & ClassDecorator;
-declare class MfaGuard implements CanActivate {
-    private readonly reflector;
-    private readonly mfaService;
-    private readonly logger;
-    constructor(reflector: Reflector, mfaService: MfaService);
-    canActivate(context: ExecutionContext): Promise<boolean>;
-}
-
-declare class AdminBypassRlsInterceptor implements NestInterceptor {
-    private readonly port;
-    constructor(port: RlsBypassPort);
-    intercept(_context: ExecutionContext, next: CallHandler): Observable<unknown>;
-}
-
-interface AdminModuleOptions {
-    mfaPort: ProviderSpec<MfaPort>;
-    auditPort: ProviderSpec<AuditPort>;
-    rlsBypassPort: ProviderSpec<RlsBypassPort>;
-    /** Register the module globally — default `false`. */
-    global?: boolean;
-}
-declare class AdminModule {
-    static forRoot(options: AdminModuleOptions): DynamicModule;
-}
-
 declare class AdminPublicBootController {
     private readonly config;
     constructor(config: AdminManifestConfig);
     getBoot(): PublicBootResponse;
 }
 
-type ConfigSpec = AdminManifestConfig | Pick<FactoryProvider<AdminManifestConfig>, 'useFactory' | 'inject'>;
-interface AdminManifestModuleOptions {
-    /** AdminManifestConfig as a value or via a factory (e.g. with a PLAN_CATALOG_TOKEN inject). */
-    config: ConfigSpec;
-    /**
-     * Default `true`. Set to `false` when the consumer registers its own
-     * manifest controller with app-specific guards entirely on its own.
-     */
-    includeManifestController?: boolean;
-    /**
-     * Class-level guards for GET /admin/manifest and POST /admin/manifest/reload,
-     * when `includeManifestController === true`. REQUIRED — otherwise
-     * `forRoot()` throws at boot.
-     *
-     * Pass `[]` explicitly when the endpoint should intentionally be auth-free
-     * (e.g. CI smoke tests, public demo). This makes the choice visible in the
-     * code rather than a silent default.
-     */
-    guards?: Array<Type<CanActivate>>;
-    /**
-     * Additional guards that apply ONLY to POST /admin/manifest/reload
-     * (typically `MfaGuard`). Placed after `guards` in the chain. Must be made
-     * available by the consumer as a provider.
-     */
-    reloadGuards?: Array<Type<CanActivate>>;
-    /**
-     * Default `true`. When active, the module automatically hooks
-     * `PLATFORM_CORE_MANIFEST_CONTRIBUTION` (StandardPage spine, generic tenant
-     * actions, platform audit action labels) into the `AdminManifestService` —
-     * before all app `register()` calls from `onModuleInit`. Consumers without
-     * a SuperAdmin need set this to `false`.
-     */
-    registerPlatformCore?: boolean;
-    /**
-     * Modules whose providers must be visible in the DI scope of this
-     * DynamicModule — typically: the app module that registers the
-     * factory-inject provider (e.g. `AdminManifestConfigFactory`). Without this
-     * entry, NestJS 11.1.19 cannot resolve the `inject:[...]` of the config
-     * factory (UnknownDependenciesException for ADMIN_MANIFEST_CONFIG).
-     */
-    imports?: Array<Type<unknown> | DynamicModule | Promise<DynamicModule> | ForwardReference>;
-    /** Additional providers that are registered in the DynamicModule itself. */
-    extraProviders?: Provider[];
-    /** Register the module globally — default `false`. */
-    global?: boolean;
-}
-declare class AdminManifestModule {
-    static forRoot(options: AdminManifestModuleOptions): DynamicModule;
-}
-
 declare const PLATFORM_CORE_MANIFEST_CONTRIBUTION: ManifestContribution;
 
 declare const SUBSCRIPTION_STATS_PORT_TOKEN: unique symbol;
@@ -146,52 +27,10 @@ declare const AUDIT_STATS_PORT_TOKEN: unique symbol;
 /** Default audit window in days for the dashboard KPI. Override via forRoot. */
 declare const ADMIN_STATS_AUDIT_WINDOW_DAYS_TOKEN: unique symbol;
 
-/**
- * Platform stats for the SuperAdmin dashboard page.
- *
- * Contains subscription/promo/audit aggregates that are equally meaningful
- * across all consuming apps. App-specific KPIs (e.g. DATEV or Bundles/Members)
- * remain extra endpoints in the respective app.
- */
-interface AdminStatsSnapshot {
-    subscriptions: SubscriptionStatsSnapshot;
-    promos: PromoCodeStatsSnapshot;
-    audit: AuditStatsSnapshot;
-}
-declare class AdminStatsService {
-    private readonly subscriptions;
-    private readonly promos;
-    private readonly audit;
-    private readonly auditWindowDays;
-    constructor(subscriptions: SubscriptionStatsPort, promos: PromoCodeStatsPort, audit: AuditStatsPort, auditWindowDays?: number);
-    getSnapshot(): Promise<AdminStatsSnapshot>;
-}
-
 declare class AdminStatsController {
     private readonly stats;
     constructor(stats: AdminStatsService);
     getDashboardSnapshot(): Promise<AdminStatsSnapshot>;
 }
 
-interface AdminStatsModuleOptions {
-    subscriptionStatsPort: ProviderSpec<SubscriptionStatsPort>;
-    promoCodeStatsPort: ProviderSpec<PromoCodeStatsPort>;
-    auditStatsPort: ProviderSpec<AuditStatsPort>;
-    /** Audit window in days for the "last N days" KPI. Default 7. */
-    auditWindowDays?: number;
-    /**
-     * Modules whose providers must be visible in the DI scope of this
-     * DynamicModule — e.g. the app module that registers the adapter classes
-     * referenced by the factory `inject` lists.
-     */
-    imports?: Array<Type<unknown> | DynamicModule | Promise<DynamicModule> | ForwardReference>;
-    /** Additional providers registered in the DynamicModule itself. */
-    extraProviders?: Provider[];
-    /** Register the module globally — default `false`. */
-    global?: boolean;
-}
-declare class AdminStatsModule {
-    static forRoot(options: AdminStatsModuleOptions): DynamicModule;
-}
-
-export { ADMIN_STATS_AUDIT_WINDOW_DAYS_TOKEN, AUDIT_PORT_TOKEN, AUDIT_STATS_PORT_TOKEN, AdminBypassRlsInterceptor, AdminManifestConfig, AdminManifestModule, type AdminManifestModuleOptions, AdminModule, type AdminModuleOptions, AdminPublicBootController, AdminStatsController, AdminStatsModule, type AdminStatsModuleOptions, AdminStatsService, type AdminStatsSnapshot, MFA_PORT_TOKEN, MfaGuard, MfaService, PLATFORM_CORE_MANIFEST_CONTRIBUTION, PROMO_CODE_STATS_PORT_TOKEN, REQUIRE_MFA_KEY, RLS_BYPASS_PORT_TOKEN, RequireMfa, SUBSCRIPTION_STATS_PORT_TOKEN, SuperAdminGuard, type TotpSetupResult, type VerifyTotpInput };
+export { ADMIN_STATS_AUDIT_WINDOW_DAYS_TOKEN, AUDIT_PORT_TOKEN, AUDIT_STATS_PORT_TOKEN, AdminManifestConfig, AdminPublicBootController, AdminStatsController, AdminStatsService, AdminStatsSnapshot, MFA_PORT_TOKEN, PLATFORM_CORE_MANIFEST_CONTRIBUTION, PROMO_CODE_STATS_PORT_TOKEN, RLS_BYPASS_PORT_TOKEN, SUBSCRIPTION_STATS_PORT_TOKEN };

package/dist/admin/index.js

@@ -1,3 +1,4 @@
+import "../chunk-UF53DWWR.js";
 import {
   ADMIN_STATS_AUDIT_WINDOW_DAYS_TOKEN,
   AUDIT_STATS_PORT_TOKEN,
@@ -6,22 +7,26 @@ import {
   AdminStatsService,
   PROMO_CODE_STATS_PORT_TOKEN,
   SUBSCRIPTION_STATS_PORT_TOKEN
-} from "../chunk-T5SXXAKG.js";
+} from "../chunk-LZHLGUQI.js";
 import {
   ADMIN_MANIFEST_CONFIG,
+  ADMIN_RESOURCES_PORT_TOKEN,
   AdminBypassRlsInterceptor,
   AdminManifestModule,
   AdminManifestService,
   AdminModule,
   AdminPublicBootController,
+  AdminResourcesModule,
+  AdminResourcesService,
   MfaGuard,
   MfaService,
   PLATFORM_CORE_CONTRIBUTION_TOKEN,
   PLATFORM_CORE_MANIFEST_CONTRIBUTION,
   REQUIRE_MFA_KEY,
   RequireMfa,
-  SuperAdminGuard
-} from "../chunk-PLDHI6NA.js";
+  SuperAdminGuard,
+  SuspendTenantDto
+} from "../chunk-FVT7KTUI.js";
 import {
   AUDIT_PORT_TOKEN,
   AdminAuditService,
@@ -32,6 +37,7 @@ import "../chunk-SABTXESR.js";
 import "../chunk-SHUYVCID.js";
 export {
   ADMIN_MANIFEST_CONFIG,
+  ADMIN_RESOURCES_PORT_TOKEN,
   ADMIN_STATS_AUDIT_WINDOW_DAYS_TOKEN,
   AUDIT_PORT_TOKEN,
   AUDIT_STATS_PORT_TOKEN,
@@ -41,6 +47,8 @@ export {
   AdminManifestService,
   AdminModule,
   AdminPublicBootController,
+  AdminResourcesModule,
+  AdminResourcesService,
   AdminStatsController,
   AdminStatsModule,
   AdminStatsService,
@@ -54,5 +62,6 @@ export {
   RLS_BYPASS_PORT_TOKEN,
   RequireMfa,
   SUBSCRIPTION_STATS_PORT_TOKEN,
-  SuperAdminGuard
+  SuperAdminGuard,
+  SuspendTenantDto
 };

package/dist/admin-resources.module-BZN_yBFj.d.cts

@@ -0,0 +1,40 @@
+import { AdminManifest, AdminResourcesPort, AdminTenantListFilter, AdminTenantListRow, AdminTenantDetail, AdminUserListFilter, AdminUserListRow, AdminAuditListFilter, AuditEntry, AdminSubscriptionListRow, AdminActor, AdminTenantStateResult } from '@saasicat/types';
+import { Type, CanActivate, DynamicModule, ForwardReference } from '@nestjs/common';
+import { P as ProviderSpec } from './di-CcNeq9v-.cjs';
+import { A as AdminAuditService } from './admin-audit.service-9IqXMlZm.cjs';
+
+declare const ADMIN_MANIFEST_CONFIG: unique symbol;
+interface AdminManifestConfig {
+    project: AdminManifest['project'];
+    build: Omit<AdminManifest['build'], 'manifestHash'>;
+    planCatalogSnapshot: AdminManifest['planCatalogSnapshot'];
+}
+
+declare const ADMIN_RESOURCES_PORT_TOKEN: unique symbol;
+declare class SuspendTenantDto {
+    reason?: string;
+}
+declare class AdminResourcesService {
+    private readonly resources;
+    private readonly audit;
+    constructor(resources: AdminResourcesPort, audit: AdminAuditService);
+    listTenants(filter: AdminTenantListFilter): Promise<AdminTenantListRow[]>;
+    getTenantDetail(slug: string): Promise<AdminTenantDetail>;
+    listUsers(filter: AdminUserListFilter): Promise<AdminUserListRow[]>;
+    listAudit(filter: AdminAuditListFilter): Promise<AuditEntry[]>;
+    listSubscriptions(): Promise<AdminSubscriptionListRow[]>;
+    suspendTenant(slug: string, reason: string | undefined, actor: AdminActor): Promise<AdminTenantStateResult>;
+    reactivateTenant(slug: string, actor: AdminActor): Promise<AdminTenantStateResult>;
+    private setTenantActive;
+}
+interface AdminResourcesModuleOptions {
+    resources: ProviderSpec<AdminResourcesPort>;
+    guards: Array<Type<CanActivate>>;
+    imports?: Array<Type<unknown> | DynamicModule | Promise<DynamicModule> | ForwardReference>;
+    global?: boolean;
+}
+declare class AdminResourcesModule {
+    static forRoot(options: AdminResourcesModuleOptions): DynamicModule;
+}
+
+export { ADMIN_MANIFEST_CONFIG as A, SuspendTenantDto as S, ADMIN_RESOURCES_PORT_TOKEN as a, type AdminManifestConfig as b, AdminResourcesModule as c, type AdminResourcesModuleOptions as d, AdminResourcesService as e };

package/dist/admin-resources.module-Cms8MY6h.d.ts

@@ -0,0 +1,40 @@
+import { AdminManifest, AdminResourcesPort, AdminTenantListFilter, AdminTenantListRow, AdminTenantDetail, AdminUserListFilter, AdminUserListRow, AdminAuditListFilter, AuditEntry, AdminSubscriptionListRow, AdminActor, AdminTenantStateResult } from '@saasicat/types';
+import { Type, CanActivate, DynamicModule, ForwardReference } from '@nestjs/common';
+import { P as ProviderSpec } from './di-CcNeq9v-.js';
+import { A as AdminAuditService } from './admin-audit.service-9IqXMlZm.js';
+
+declare const ADMIN_MANIFEST_CONFIG: unique symbol;
+interface AdminManifestConfig {
+    project: AdminManifest['project'];
+    build: Omit<AdminManifest['build'], 'manifestHash'>;
+    planCatalogSnapshot: AdminManifest['planCatalogSnapshot'];
+}
+
+declare const ADMIN_RESOURCES_PORT_TOKEN: unique symbol;
+declare class SuspendTenantDto {
+    reason?: string;
+}
+declare class AdminResourcesService {
+    private readonly resources;
+    private readonly audit;
+    constructor(resources: AdminResourcesPort, audit: AdminAuditService);
+    listTenants(filter: AdminTenantListFilter): Promise<AdminTenantListRow[]>;
+    getTenantDetail(slug: string): Promise<AdminTenantDetail>;
+    listUsers(filter: AdminUserListFilter): Promise<AdminUserListRow[]>;
+    listAudit(filter: AdminAuditListFilter): Promise<AuditEntry[]>;
+    listSubscriptions(): Promise<AdminSubscriptionListRow[]>;
+    suspendTenant(slug: string, reason: string | undefined, actor: AdminActor): Promise<AdminTenantStateResult>;
+    reactivateTenant(slug: string, actor: AdminActor): Promise<AdminTenantStateResult>;
+    private setTenantActive;
+}
+interface AdminResourcesModuleOptions {
+    resources: ProviderSpec<AdminResourcesPort>;
+    guards: Array<Type<CanActivate>>;
+    imports?: Array<Type<unknown> | DynamicModule | Promise<DynamicModule> | ForwardReference>;
+    global?: boolean;
+}
+declare class AdminResourcesModule {
+    static forRoot(options: AdminResourcesModuleOptions): DynamicModule;
+}
+
+export { ADMIN_MANIFEST_CONFIG as A, SuspendTenantDto as S, ADMIN_RESOURCES_PORT_TOKEN as a, type AdminManifestConfig as b, AdminResourcesModule as c, type AdminResourcesModuleOptions as d, AdminResourcesService as e };