@saasicat/nest 0.9.0 → 0.10.0

package/dist/index.js

@@ -37,16 +37,8 @@ import {
   resolveModel,
   slugify,
   verifyOtpCode
-} from "./chunk-CK54YKVK.js";
-import {
-  ADMIN_STATS_AUDIT_WINDOW_DAYS_TOKEN,
-  AUDIT_STATS_PORT_TOKEN,
-  AdminStatsController,
-  AdminStatsModule,
-  AdminStatsService,
-  PROMO_CODE_STATS_PORT_TOKEN,
-  SUBSCRIPTION_STATS_PORT_TOKEN
-} from "./chunk-WGVTXSYW.js";
+} from "./chunk-75JABGZK.js";
+import "./chunk-UF53DWWR.js";
 import {
   formatPreflightReport,
   formatSeedGateReport,
@@ -55,26 +47,26 @@ import {
   runSeedGateFromFile,
   seedGateExitCode,
   validateSeedAgainstSnapshot
-} from "./chunk-7K5PT2LX.js";
-import {
-  CHECKOUT_OFFER_REPOSITORY_TOKEN,
-  CheckoutOfferModule,
-  CheckoutOfferService,
-  CreateCheckoutOfferDto,
-  UpdateCheckoutOfferDto,
-  buildCheckoutOfferController
-} from "./chunk-K3OPNVFR.js";
+} from "./chunk-TXDH4FUA.js";
+import "./chunk-DBZGV3HC.js";
 import {
   DefinesQuota,
   EnforceQuota,
   ImplementsCapability,
   RequiresCapability,
   runHeadlessDiscoveryScan
-} from "./chunk-HRU3CP57.js";
+} from "./chunk-BOADBIGB.js";
 import {
   DiscoverySnapshotNotFoundError,
   loadDiscoverySnapshotFromFile
 } from "./chunk-ABB2CRAS.js";
+import {
+  SETUP_CONFIG_TOKEN,
+  SETUP_PROVISIONING_PORT_TOKEN,
+  SetupController,
+  SetupModule,
+  SetupService
+} from "./chunk-WJ6BMDL3.js";
 import {
   CreatePromoCodeDto,
   PreviewPromoCodeDto,
@@ -86,7 +78,16 @@ import {
   buildPromoCodeAdminController,
   hashIp,
   ipFingerprint
-} from "./chunk-OFBDEO45.js";
+} from "./chunk-IRWZC3GC.js";
+import {
+  ADMIN_STATS_AUDIT_WINDOW_DAYS_TOKEN,
+  AUDIT_STATS_PORT_TOKEN,
+  AdminStatsController,
+  AdminStatsModule,
+  AdminStatsService,
+  PROMO_CODE_STATS_PORT_TOKEN,
+  SUBSCRIPTION_STATS_PORT_TOKEN
+} from "./chunk-LZHLGUQI.js";
 import {
   ADMIN_MANIFEST_CONFIG,
   ADMIN_RESOURCES_PORT_TOKEN,
@@ -105,7 +106,7 @@ import {
   RequireMfa,
   SuperAdminGuard,
   SuspendTenantDto
-} from "./chunk-3M6VLT5N.js";
+} from "./chunk-FVT7KTUI.js";
 import {
   CONTRACT_FREEZE_PORT_TOKEN,
   CONTRACT_FREEZE_PROJECT_KEY_TOKEN,
@@ -166,7 +167,7 @@ import {
   periodEndWithMinLead,
   resolveBundleCancelEffectiveAt,
   resolveBundlePriceNet
-} from "./chunk-HXAWPPFW.js";
+} from "./chunk-F3VV6EXG.js";
 import {
   PROMO_CODE_REDEMPTION_REPOSITORY_TOKEN,
   PROMO_CODE_REPOSITORY_TOKEN,
@@ -182,7 +183,7 @@ import {
   computeDiscountGross,
   computeDiscountedGross,
   computeRegularStartsAt
-} from "./chunk-ZLUGQE5D.js";
+} from "./chunk-E7AJ42AB.js";
 import {
   SubscriptionContractModule,
   SubscriptionContractService,
@@ -238,7 +239,7 @@ import {
   quotaApprovalSignature,
   validateBundleDraft,
   validatePlanDraft
-} from "./chunk-PBQRPDO2.js";
+} from "./chunk-33TP26MR.js";
 import {
   AUDIT_CONTEXT_RESOLVER_TOKEN,
   PENDING_PLAN_QUERY_PORT_TOKEN,
@@ -259,17 +260,25 @@ import {
   MFA_PORT_TOKEN,
   RLS_BYPASS_PORT_TOKEN
 } from "./chunk-E56W4U2P.js";
+import {
+  CHECKOUT_OFFER_REPOSITORY_TOKEN,
+  CheckoutOfferModule,
+  CheckoutOfferService,
+  CreateCheckoutOfferDto,
+  UpdateCheckoutOfferDto,
+  buildCheckoutOfferController
+} from "./chunk-HBFU5AN3.js";
 import "./chunk-MDIZUVIK.js";
 import {
   DiscoveryModule,
   buildDiscoveryController
-} from "./chunk-AJ3EPELS.js";
+} from "./chunk-V34AA7C7.js";
 import {
   DISCOVERY_APP_INFO_TOKEN,
   DISCOVERY_SNAPSHOT_PATH_TOKEN,
   DiscoveryScanner,
   computeSnapshotHash
-} from "./chunk-M6CZQYPY.js";
+} from "./chunk-Z3FWN3HJ.js";
 import {
   EntitlementModule,
   EntitlementService,
@@ -290,7 +299,7 @@ import {
   isLimitExceededError,
   resolveEntitlementPlan,
   toEffectiveLimitsSnapshot
-} from "./chunk-GW2I3JZD.js";
+} from "./chunk-GBDUH6DO.js";
 import {
   PLAN_CATALOG_READ_SINK_TOKEN,
   PLAN_CATALOG_TOKEN,
@@ -327,7 +336,7 @@ import {
   MARKETING_SETTINGS_REPOSITORY_TOKEN,
   PLAN_REPOSITORY_TOKEN,
   PROMOTION_REPOSITORY_TOKEN
-} from "./chunk-N3WANKSA.js";
+} from "./chunk-L4KTQ6CL.js";
 import {
   asProvider
 } from "./chunk-SABTXESR.js";
@@ -338,311 +347,7 @@ import {
   IMPLEMENTS_CAPABILITY_KEY,
   REQUIRES_CAPABILITY_KEY
 } from "./chunk-L4SUWH5B.js";
-import {
-  __name
-} from "./chunk-SHUYVCID.js";
-
-// src/setup/setup.module.ts
-import { Module } from "@nestjs/common";
-
-// src/setup/setup.controller.ts
-import { Body, Controller, Get, Post } from "@nestjs/common";
-import { IsEmail, IsNotEmpty, IsOptional, IsString, MinLength } from "class-validator";
-
-// src/setup/setup.service.ts
-import { BadRequestException, ConflictException, ForbiddenException, Inject, Injectable, UnauthorizedException } from "@nestjs/common";
-import { isPlatformUserExistsError, SETUP_ERROR_CODES } from "@saasicat/types";
-import { randomBytes, timingSafeEqual } from "crypto";
-import QRCode from "qrcode";
-
-// src/setup/tokens.ts
-var SETUP_PROVISIONING_PORT_TOKEN = /* @__PURE__ */ Symbol.for("saas-platform/SetupProvisioningPort");
-var SETUP_CONFIG_TOKEN = /* @__PURE__ */ Symbol.for("saas-platform/SetupConfig");
-
-// src/setup/setup.service.ts
-function _ts_decorate(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-  return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-__name(_ts_decorate, "_ts_decorate");
-function _ts_metadata(k, v) {
-  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-}
-__name(_ts_metadata, "_ts_metadata");
-function _ts_param(paramIndex, decorator) {
-  return function(target, key) {
-    decorator(target, key, paramIndex);
-  };
-}
-__name(_ts_param, "_ts_param");
-var GENERATED_PASSWORD_BYTES = 12;
-function timingSafeEqualStr(a, b) {
-  const ab = Buffer.from(a, "utf8");
-  const bb = Buffer.from(b, "utf8");
-  if (ab.length !== bb.length) return false;
-  return timingSafeEqual(ab, bb);
-}
-__name(timingSafeEqualStr, "timingSafeEqualStr");
-var SetupService = class {
-  static {
-    __name(this, "SetupService");
-  }
-  users;
-  config;
-  mfa;
-  constructor(users, config, mfa) {
-    this.users = users;
-    this.config = config;
-    this.mfa = mfa;
-  }
-  async status() {
-    return {
-      needsSetup: await this.users.countSuperAdmins() === 0
-    };
-  }
-  async setup(req) {
-    this.assertToken(req.token);
-    await this.assertNoSuperAdmin();
-    const email = req.email.trim().toLowerCase();
-    if (!email.includes("@")) {
-      throw new BadRequestException({
-        code: SETUP_ERROR_CODES.INVALID_EMAIL
-      });
-    }
-    const generated = !req.password;
-    const password = req.password ?? randomBytes(GENERATED_PASSWORD_BYTES).toString("base64url");
-    let user;
-    try {
-      user = await this.users.createSuperAdmin({
-        email,
-        password
-      });
-    } catch (err) {
-      if (isPlatformUserExistsError(err)) {
-        throw new ConflictException({
-          code: SETUP_ERROR_CODES.EMAIL_EXISTS,
-          message: err.message
-        });
-      }
-      throw err;
-    }
-    const totp = await this.mfa.setup(user.id, user.email, this.config.mfaIssuer);
-    const qrDataUrl = await QRCode.toDataURL(totp.otpauthUri, {
-      width: 220,
-      margin: 1
-    });
-    return {
-      userId: user.id,
-      email: user.email,
-      otpauthUri: totp.otpauthUri,
-      qrDataUrl,
-      secret: totp.secret,
-      ...generated ? {
-        generatedPassword: password
-      } : {}
-    };
-  }
-  async confirmMfa(req) {
-    this.assertToken(req.token);
-    const ok = await this.mfa.verify({
-      userId: req.userId,
-      code: req.code
-    });
-    return {
-      ok
-    };
-  }
-  assertToken(token) {
-    const expected = process.env[this.config.setupTokenEnvVar]?.trim();
-    if (!expected) {
-      throw new ForbiddenException({
-        code: SETUP_ERROR_CODES.SETUP_DISABLED,
-        message: `${this.config.setupTokenEnvVar} ist nicht gesetzt \u2014 Setup ist deaktiviert.`
-      });
-    }
-    if (!token || !timingSafeEqualStr(token, expected)) {
-      throw new UnauthorizedException({
-        code: SETUP_ERROR_CODES.INVALID_SETUP_TOKEN
-      });
-    }
-  }
-  async assertNoSuperAdmin() {
-    if (await this.users.countSuperAdmins() > 0) {
-      throw new ConflictException({
-        code: SETUP_ERROR_CODES.SETUP_ALREADY_DONE
-      });
-    }
-  }
-};
-SetupService = _ts_decorate([
-  Injectable(),
-  _ts_param(0, Inject(SETUP_PROVISIONING_PORT_TOKEN)),
-  _ts_param(1, Inject(SETUP_CONFIG_TOKEN)),
-  _ts_metadata("design:type", Function),
-  _ts_metadata("design:paramtypes", [
-    typeof SuperAdminProvisioningPort === "undefined" ? Object : SuperAdminProvisioningPort,
-    typeof SetupConfig === "undefined" ? Object : SetupConfig,
-    typeof MfaService === "undefined" ? Object : MfaService
-  ])
-], SetupService);
-
-// src/setup/setup.controller.ts
-function _ts_decorate2(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-  return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-__name(_ts_decorate2, "_ts_decorate");
-function _ts_metadata2(k, v) {
-  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-}
-__name(_ts_metadata2, "_ts_metadata");
-function _ts_param2(paramIndex, decorator) {
-  return function(target, key) {
-    decorator(target, key, paramIndex);
-  };
-}
-__name(_ts_param2, "_ts_param");
-var SetupDto = class SetupDto2 {
-  static {
-    __name(this, "SetupDto");
-  }
-  token;
-  email;
-  password;
-};
-_ts_decorate2([
-  IsString(),
-  IsNotEmpty(),
-  _ts_metadata2("design:type", String)
-], SetupDto.prototype, "token", void 0);
-_ts_decorate2([
-  IsEmail(),
-  _ts_metadata2("design:type", String)
-], SetupDto.prototype, "email", void 0);
-_ts_decorate2([
-  IsOptional(),
-  IsString(),
-  MinLength(8),
-  _ts_metadata2("design:type", String)
-], SetupDto.prototype, "password", void 0);
-var SetupConfirmMfaDto = class SetupConfirmMfaDto2 {
-  static {
-    __name(this, "SetupConfirmMfaDto");
-  }
-  token;
-  userId;
-  code;
-};
-_ts_decorate2([
-  IsString(),
-  IsNotEmpty(),
-  _ts_metadata2("design:type", String)
-], SetupConfirmMfaDto.prototype, "token", void 0);
-_ts_decorate2([
-  IsString(),
-  IsNotEmpty(),
-  _ts_metadata2("design:type", String)
-], SetupConfirmMfaDto.prototype, "userId", void 0);
-_ts_decorate2([
-  IsString(),
-  IsNotEmpty(),
-  _ts_metadata2("design:type", String)
-], SetupConfirmMfaDto.prototype, "code", void 0);
-var SetupController = class {
-  static {
-    __name(this, "SetupController");
-  }
-  setup;
-  constructor(setup) {
-    this.setup = setup;
-  }
-  status() {
-    return this.setup.status();
-  }
-  run(dto) {
-    return this.setup.setup(dto);
-  }
-  confirm(dto) {
-    return this.setup.confirmMfa(dto);
-  }
-};
-_ts_decorate2([
-  Get("status"),
-  _ts_metadata2("design:type", Function),
-  _ts_metadata2("design:paramtypes", []),
-  _ts_metadata2("design:returntype", typeof Promise === "undefined" ? Object : Promise)
-], SetupController.prototype, "status", null);
-_ts_decorate2([
-  Post(),
-  _ts_param2(0, Body()),
-  _ts_metadata2("design:type", Function),
-  _ts_metadata2("design:paramtypes", [
-    typeof SetupDto === "undefined" ? Object : SetupDto
-  ]),
-  _ts_metadata2("design:returntype", typeof Promise === "undefined" ? Object : Promise)
-], SetupController.prototype, "run", null);
-_ts_decorate2([
-  Post("confirm-mfa"),
-  _ts_param2(0, Body()),
-  _ts_metadata2("design:type", Function),
-  _ts_metadata2("design:paramtypes", [
-    typeof SetupConfirmMfaDto === "undefined" ? Object : SetupConfirmMfaDto
-  ]),
-  _ts_metadata2("design:returntype", typeof Promise === "undefined" ? Object : Promise)
-], SetupController.prototype, "confirm", null);
-SetupController = _ts_decorate2([
-  Controller("admin/setup"),
-  _ts_metadata2("design:type", Function),
-  _ts_metadata2("design:paramtypes", [
-    typeof SetupService === "undefined" ? Object : SetupService
-  ])
-], SetupController);
-
-// src/setup/setup.module.ts
-function _ts_decorate3(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-  return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-__name(_ts_decorate3, "_ts_decorate");
-var DEFAULT_SETUP_TOKEN_ENV_VAR = "SETUP_TOKEN";
-var DEFAULT_MFA_ISSUER = "SuperAdmin";
-var SetupModule = class _SetupModule {
-  static {
-    __name(this, "SetupModule");
-  }
-  static forRoot(options) {
-    return {
-      module: _SetupModule,
-      global: options.global ?? false,
-      controllers: [
-        SetupController
-      ],
-      providers: [
-        asProvider(SETUP_PROVISIONING_PORT_TOKEN, options.provisioningPort),
-        {
-          provide: SETUP_CONFIG_TOKEN,
-          useValue: {
-            setupTokenEnvVar: options.setupTokenEnvVar ?? DEFAULT_SETUP_TOKEN_ENV_VAR,
-            mfaIssuer: options.mfaIssuer ?? DEFAULT_MFA_ISSUER
-          }
-        },
-        SetupService
-      ],
-      exports: [
-        SetupService
-      ]
-    };
-  }
-};
-SetupModule = _ts_decorate3([
-  Module({})
-], SetupModule);
+import "./chunk-SHUYVCID.js";
 export {
   ACTIVATION_ORCHESTRATOR_TOKEN,
   ADMIN_MANIFEST_CONFIG,

package/dist/{module-DeH_Jkcq.d.cts → module-CSN8j8Tp.d.cts}

@@ -1,7 +1,7 @@
 import { Type, CanActivate, DynamicModule, ForwardReference } from '@nestjs/common';
 import { PromoCodeRepository, PromoCodeRedemptionRepository, PromoCodeValidationLogRepository, FirstTimeCustomerCheck, PromoSubscriptionLookup, PromoRevenueDeductionAggregator, TransactionRunner } from '@saasicat/types';
 import { P as ProviderSpec } from './di-CcNeq9v-.cjs';
-import { P as PromoServiceConfig } from './service-DlhMnYjW.cjs';
+import { g as PromoServiceConfig } from './service-DX8KbGXl.cjs';
 
 interface PromoCodesModuleOptions {
     promoCodeRepository: ProviderSpec<PromoCodeRepository>;

package/dist/{module-B5m080F0.d.ts → module-DgYJur6f.d.ts}

@@ -1,7 +1,7 @@
 import { Type, CanActivate, DynamicModule, ForwardReference } from '@nestjs/common';
 import { PromoCodeRepository, PromoCodeRedemptionRepository, PromoCodeValidationLogRepository, FirstTimeCustomerCheck, PromoSubscriptionLookup, PromoRevenueDeductionAggregator, TransactionRunner } from '@saasicat/types';
 import { P as ProviderSpec } from './di-CcNeq9v-.js';
-import { P as PromoServiceConfig } from './service-DlhMnYjW.js';
+import { g as PromoServiceConfig } from './service-DX8KbGXl.js';
 
 interface PromoCodesModuleOptions {
     promoCodeRepository: ProviderSpec<PromoCodeRepository>;