@saasicat/nest 1.0.0-rc.2 → 1.0.0-rc.21

package/dist/chunk-QPVDCKYS.js

@@ -0,0 +1,702 @@
+import {
+  PAYMENT_EVENT_LOG_TOKEN,
+  PAYMENT_GATEWAYS_TOKEN,
+  PAYMENT_TRANSACTION_RUNNER_TOKEN,
+  PaymentCallbackService,
+  PaymentGatewayRegistry,
+  SUBSCRIBER_PAYMENT_METHOD_REPOSITORY_TOKEN,
+  refuseForeignReturnUrls
+} from "./chunk-7NJKVC5X.js";
+import {
+  BillingPermissionGuard,
+  ComposedTenantAuthGuard
+} from "./chunk-5CKC7O52.js";
+import {
+  BILLING_PERMISSION_GUARDS_TOKEN,
+  TENANT_AUTH_GUARDS_TOKEN,
+  TENANT_ID_RESOLVER_TOKEN,
+  USER_EMAIL_RESOLVER_TOKEN
+} from "./chunk-GPQWGA6B.js";
+import {
+  RLS_BYPASS_PORT_TOKEN
+} from "./chunk-SZ7RFPXA.js";
+import {
+  subscriberProviders
+} from "./chunk-WOEJ6K7M.js";
+import {
+  SubscriberService
+} from "./chunk-LF6J4YYN.js";
+import {
+  SaaSiCatPublicRoute
+} from "./chunk-YSC46BGM.js";
+import {
+  asProvider,
+  codedError
+} from "./chunk-J7NJRK3K.js";
+import {
+  __name
+} from "./chunk-SHUYVCID.js";
+
+// src/payments/payment-webhook.controller.ts
+import { BadRequestException, Controller, HttpCode, Param, Post, Req } from "@nestjs/common";
+import { PAYMENT_ERROR_CODES } from "@saasicat/core";
+function _ts_decorate(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate, "_ts_decorate");
+function _ts_metadata(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata, "_ts_metadata");
+function _ts_param(paramIndex, decorator) {
+  return function(target, key) {
+    decorator(target, key, paramIndex);
+  };
+}
+__name(_ts_param, "_ts_param");
+var PARSED_BODY_TYPES = [
+  "application/json",
+  "application/x-www-form-urlencoded"
+];
+function carriesAParsedBody(contentType) {
+  const header = Array.isArray(contentType) ? contentType[0] : contentType;
+  const mediaType = (header ?? "").split(";")[0].trim().toLowerCase();
+  return PARSED_BODY_TYPES.includes(mediaType);
+}
+__name(carriesAParsedBody, "carriesAParsedBody");
+var PaymentWebhookController = class {
+  static {
+    __name(this, "PaymentWebhookController");
+  }
+  callbacks;
+  constructor(callbacks) {
+    this.callbacks = callbacks;
+  }
+  async receive(account, request) {
+    if (!request.rawBody) {
+      if (!carriesAParsedBody(request.headers["content-type"])) {
+        throw new BadRequestException(codedError(PAYMENT_ERROR_CODES.PAYMENT_CALLBACK_REJECTED));
+      }
+      throw new Error("A payment callback arrived without its raw body, and its signature cannot be verified against a body parsed and serialised again. Create the application with `NestFactory.create(AppModule, { rawBody: true })`.");
+    }
+    await this.callbacks.handle(account, {
+      body: request.rawBody,
+      headers: request.headers
+    });
+    return {
+      received: true
+    };
+  }
+};
+_ts_decorate([
+  Post(":account"),
+  HttpCode(200),
+  _ts_param(0, Param("account")),
+  _ts_param(1, Req()),
+  _ts_metadata("design:type", Function),
+  _ts_metadata("design:paramtypes", [
+    String,
+    typeof RawBodyRequest === "undefined" ? Object : RawBodyRequest
+  ]),
+  _ts_metadata("design:returntype", Promise)
+], PaymentWebhookController.prototype, "receive", null);
+PaymentWebhookController = _ts_decorate([
+  Controller("webhooks/payment"),
+  SaaSiCatPublicRoute(),
+  _ts_metadata("design:type", Function),
+  _ts_metadata("design:paramtypes", [
+    typeof PaymentCallbackService === "undefined" ? Object : PaymentCallbackService
+  ])
+], PaymentWebhookController);
+
+// src/payments/subscriber-payment-method.service.ts
+import { ConflictException, Inject, Injectable, Logger } from "@nestjs/common";
+import { PAYMENT_ERROR_CODES as PAYMENT_ERROR_CODES2 } from "@saasicat/core";
+function _ts_decorate2(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate2, "_ts_decorate");
+function _ts_metadata2(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata2, "_ts_metadata");
+function _ts_param2(paramIndex, decorator) {
+  return function(target, key) {
+    decorator(target, key, paramIndex);
+  };
+}
+__name(_ts_param2, "_ts_param");
+var SubscriberPaymentMethodService = class _SubscriberPaymentMethodService {
+  static {
+    __name(this, "SubscriberPaymentMethodService");
+  }
+  methods;
+  subscribers;
+  registry;
+  callbacks;
+  logger = new Logger(_SubscriberPaymentMethodService.name);
+  constructor(methods, subscribers, registry, callbacks) {
+    this.methods = methods;
+    this.subscribers = subscribers;
+    this.registry = registry;
+    this.callbacks = callbacks;
+  }
+  onModuleInit() {
+    this.callbacks.handleSetupsOf("subscriber", {
+      confirmed: /* @__PURE__ */ __name((event, context) => this.recordConfirmed(event, context), "confirmed"),
+      // Nothing was recorded for the setup, so a failed one changes nothing:
+      // the payment method in use stays, and the claim keeps the event.
+      failed: /* @__PURE__ */ __name(async () => void 0, "failed")
+    });
+  }
+  /** The payment method in use for the tenant's subscriber, or `null` when it has none. */
+  async current(tenantId) {
+    const subscriber = await this.subscribers.requireForTenant(tenantId);
+    return this.methods.findActive(subscriber.id);
+  }
+  /**
+   * Opens the gateway's form for a new payment method for the tenant's
+   * subscriber, and returns where to send the person.
+   *
+   * The customer the subscriber has at that account is reused, so the new
+   * payment method sits beside the ones the gateway already holds for it.
+   */
+  async startChange(tenantId, input) {
+    refuseForeignReturnUrls(input, this.registry.returnUrlOrigins());
+    const subscriber = await this.subscribers.requireForTenant(tenantId);
+    const account = this.registry.forNewPaymentMethods();
+    if (!account) {
+      throw new ConflictException(codedError(PAYMENT_ERROR_CODES2.PAYMENTS_NOT_CONFIGURED));
+    }
+    const inUse = await this.methods.findActive(subscriber.id);
+    const session = await account.gateway.startPaymentMethodSetup({
+      subject: {
+        kind: "subscriber",
+        subscriberId: subscriber.id
+      },
+      holder: holderOf(subscriber, input.fallbackEmail, customerAt(inUse, account.name)),
+      methods: account.methods,
+      successUrl: input.successUrl,
+      cancelUrl: input.cancelUrl
+    });
+    await this.methods.recordSetup({
+      subscriberId: subscriber.id,
+      gatewayAccount: account.name,
+      sessionRef: session.sessionRef,
+      customerRef: session.customerRef,
+      startedAt: /* @__PURE__ */ new Date()
+    });
+    if (session.immediateCallback) {
+      await this.callbacks.handle(account.name, session.immediateCallback);
+    }
+    return {
+      redirectUrl: session.redirectUrl
+    };
+  }
+  async recordConfirmed(event, context) {
+    if (event.subject.kind !== "subscriber") return "nothing-to-do";
+    const completed = await this.methods.completeSetup({
+      gatewayAccount: context.gatewayAccount,
+      sessionRef: event.sessionRef,
+      subscriberId: event.subject.subscriberId
+    }, event.occurredAt, context.tx);
+    if (!completed) {
+      this.logger.error(`Payment event ${event.eventId} at '${context.gatewayAccount}' names subscriber ${event.subject.subscriberId} and session ${event.sessionRef}, which no open setup matches; nothing recorded.`);
+      return "nothing-to-do";
+    }
+    await this.methods.recordConfirmed({
+      ...event.paymentMethod,
+      subscriberId: event.subject.subscriberId,
+      gatewayAccount: context.gatewayAccount,
+      provider: context.provider,
+      confirmedAt: event.occurredAt
+    }, context.tx);
+    return "took-effect";
+  }
+};
+SubscriberPaymentMethodService = _ts_decorate2([
+  Injectable(),
+  _ts_param2(0, Inject(SUBSCRIBER_PAYMENT_METHOD_REPOSITORY_TOKEN)),
+  _ts_metadata2("design:type", Function),
+  _ts_metadata2("design:paramtypes", [
+    typeof SubscriberPaymentMethodRepository === "undefined" ? Object : SubscriberPaymentMethodRepository,
+    typeof SubscriberService === "undefined" ? Object : SubscriberService,
+    typeof PaymentGatewayRegistry === "undefined" ? Object : PaymentGatewayRegistry,
+    typeof PaymentCallbackService === "undefined" ? Object : PaymentCallbackService
+  ])
+], SubscriberPaymentMethodService);
+function customerAt(inUse, account) {
+  return inUse?.gatewayAccount === account ? inUse.customerRef : null;
+}
+__name(customerAt, "customerAt");
+function holderOf(subscriber, fallbackEmail, customerRef) {
+  return {
+    name: subscriber.legalName,
+    email: subscriber.invoiceEmail ?? fallbackEmail,
+    address: {
+      addressLine1: subscriber.addressLine1,
+      addressLine2: subscriber.addressLine2,
+      postalCode: subscriber.postalCode,
+      city: subscriber.city,
+      country: subscriber.country
+    },
+    customerRef
+  };
+}
+__name(holderOf, "holderOf");
+
+// src/payments/dto/change-billing-details.dto.ts
+import { IsOptional, IsString, MaxLength, ValidateIf } from "class-validator";
+function _ts_decorate3(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate3, "_ts_decorate");
+function _ts_metadata3(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata3, "_ts_metadata");
+var present = /* @__PURE__ */ __name((_, value) => value !== null && value !== void 0, "present");
+var ChangeBillingDetailsDto = class {
+  static {
+    __name(this, "ChangeBillingDetailsDto");
+  }
+  addressLine1;
+  addressLine2;
+  postalCode;
+  city;
+  /** ISO 3166-1 alpha-2, e.g. `DE`; its form is checked where every detail is settled. */
+  country;
+  invoiceEmail;
+  legalName;
+  vatId;
+  taxNumber;
+};
+_ts_decorate3([
+  ValidateIf(present),
+  IsString(),
+  MaxLength(200),
+  _ts_metadata3("design:type", Object)
+], ChangeBillingDetailsDto.prototype, "addressLine1", void 0);
+_ts_decorate3([
+  ValidateIf(present),
+  IsString(),
+  MaxLength(200),
+  _ts_metadata3("design:type", Object)
+], ChangeBillingDetailsDto.prototype, "addressLine2", void 0);
+_ts_decorate3([
+  ValidateIf(present),
+  IsString(),
+  MaxLength(20),
+  _ts_metadata3("design:type", Object)
+], ChangeBillingDetailsDto.prototype, "postalCode", void 0);
+_ts_decorate3([
+  ValidateIf(present),
+  IsString(),
+  MaxLength(100),
+  _ts_metadata3("design:type", Object)
+], ChangeBillingDetailsDto.prototype, "city", void 0);
+_ts_decorate3([
+  ValidateIf(present),
+  IsString(),
+  MaxLength(2),
+  _ts_metadata3("design:type", Object)
+], ChangeBillingDetailsDto.prototype, "country", void 0);
+_ts_decorate3([
+  ValidateIf(present),
+  IsString(),
+  MaxLength(254),
+  _ts_metadata3("design:type", Object)
+], ChangeBillingDetailsDto.prototype, "invoiceEmail", void 0);
+_ts_decorate3([
+  IsOptional(),
+  _ts_metadata3("design:type", Object)
+], ChangeBillingDetailsDto.prototype, "legalName", void 0);
+_ts_decorate3([
+  IsOptional(),
+  _ts_metadata3("design:type", Object)
+], ChangeBillingDetailsDto.prototype, "vatId", void 0);
+_ts_decorate3([
+  IsOptional(),
+  _ts_metadata3("design:type", Object)
+], ChangeBillingDetailsDto.prototype, "taxNumber", void 0);
+
+// src/payments/tenant-billing-details.controller.ts
+import { Body, Controller as Controller2, Get, Inject as Inject2, NotFoundException, Patch, Req as Req2, UseGuards } from "@nestjs/common";
+import { AUTH_ERROR_CODES } from "@saasicat/core";
+function _ts_decorate4(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate4, "_ts_decorate");
+function _ts_metadata4(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata4, "_ts_metadata");
+function _ts_param3(paramIndex, decorator) {
+  return function(target, key) {
+    decorator(target, key, paramIndex);
+  };
+}
+__name(_ts_param3, "_ts_param");
+var TenantBillingDetailsController = class {
+  static {
+    __name(this, "TenantBillingDetailsController");
+  }
+  subscribers;
+  tenantIdResolver;
+  constructor(subscribers, tenantIdResolver) {
+    this.subscribers = subscribers;
+    this.tenantIdResolver = tenantIdResolver;
+  }
+  async current(request) {
+    const subscriber = await this.subscribers.requireForTenant(this.tenantOf(request));
+    return {
+      details: viewOf(subscriber)
+    };
+  }
+  async change(request, body) {
+    const subscriber = await this.subscribers.changeContactOfTenant(this.tenantOf(request), body);
+    return {
+      details: viewOf(subscriber)
+    };
+  }
+  tenantOf(request) {
+    const tenantId = this.tenantIdResolver(request);
+    if (!tenantId) throw new NotFoundException(codedError(AUTH_ERROR_CODES.TENANT_CONTEXT_MISSING));
+    return tenantId;
+  }
+};
+_ts_decorate4([
+  Get(),
+  _ts_param3(0, Req2()),
+  _ts_metadata4("design:type", Function),
+  _ts_metadata4("design:paramtypes", [
+    Object
+  ]),
+  _ts_metadata4("design:returntype", Promise)
+], TenantBillingDetailsController.prototype, "current", null);
+_ts_decorate4([
+  Patch(),
+  _ts_param3(0, Req2()),
+  _ts_param3(1, Body()),
+  _ts_metadata4("design:type", Function),
+  _ts_metadata4("design:paramtypes", [
+    Object,
+    typeof ChangeBillingDetailsDto === "undefined" ? Object : ChangeBillingDetailsDto
+  ]),
+  _ts_metadata4("design:returntype", Promise)
+], TenantBillingDetailsController.prototype, "change", null);
+TenantBillingDetailsController = _ts_decorate4([
+  Controller2("billing/details"),
+  UseGuards(ComposedTenantAuthGuard, BillingPermissionGuard),
+  _ts_param3(0, Inject2(SubscriberService)),
+  _ts_param3(1, Inject2(TENANT_ID_RESOLVER_TOKEN)),
+  _ts_metadata4("design:type", Function),
+  _ts_metadata4("design:paramtypes", [
+    typeof SubscriberService === "undefined" ? Object : SubscriberService,
+    typeof TenantIdResolver === "undefined" ? Object : TenantIdResolver
+  ])
+], TenantBillingDetailsController);
+function viewOf(subscriber) {
+  return {
+    customerNumber: subscriber.customerNumber,
+    legalName: subscriber.legalName,
+    vatId: subscriber.vatId,
+    taxNumber: subscriber.taxNumber,
+    addressLine1: subscriber.addressLine1,
+    addressLine2: subscriber.addressLine2,
+    postalCode: subscriber.postalCode,
+    city: subscriber.city,
+    country: subscriber.country,
+    invoiceEmail: subscriber.invoiceEmail
+  };
+}
+__name(viewOf, "viewOf");
+
+// src/payments/dto/start-payment-method-setup.dto.ts
+import { IsUrl, MaxLength as MaxLength2 } from "class-validator";
+function _ts_decorate5(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate5, "_ts_decorate");
+function _ts_metadata5(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata5, "_ts_metadata");
+var StartPaymentMethodSetupDto = class {
+  static {
+    __name(this, "StartPaymentMethodSetupDto");
+  }
+  successUrl;
+  cancelUrl;
+};
+_ts_decorate5([
+  IsUrl({
+    require_tld: false,
+    require_protocol: true,
+    protocols: [
+      "https",
+      "http"
+    ]
+  }),
+  MaxLength2(500),
+  _ts_metadata5("design:type", String)
+], StartPaymentMethodSetupDto.prototype, "successUrl", void 0);
+_ts_decorate5([
+  IsUrl({
+    require_tld: false,
+    require_protocol: true,
+    protocols: [
+      "https",
+      "http"
+    ]
+  }),
+  MaxLength2(500),
+  _ts_metadata5("design:type", String)
+], StartPaymentMethodSetupDto.prototype, "cancelUrl", void 0);
+
+// src/payments/tenant-payment-method.controller.ts
+import { Body as Body2, Controller as Controller3, Get as Get2, HttpCode as HttpCode2, Inject as Inject3, NotFoundException as NotFoundException2, Optional, Post as Post2, Req as Req3, UseGuards as UseGuards2 } from "@nestjs/common";
+import { AUTH_ERROR_CODES as AUTH_ERROR_CODES2 } from "@saasicat/core";
+function _ts_decorate6(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate6, "_ts_decorate");
+function _ts_metadata6(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata6, "_ts_metadata");
+function _ts_param4(paramIndex, decorator) {
+  return function(target, key) {
+    decorator(target, key, paramIndex);
+  };
+}
+__name(_ts_param4, "_ts_param");
+var TenantPaymentMethodController = class {
+  static {
+    __name(this, "TenantPaymentMethodController");
+  }
+  paymentMethods;
+  tenantIdResolver;
+  userEmailResolver;
+  constructor(paymentMethods, tenantIdResolver, userEmailResolver = null) {
+    this.paymentMethods = paymentMethods;
+    this.tenantIdResolver = tenantIdResolver;
+    this.userEmailResolver = userEmailResolver;
+  }
+  async current(request) {
+    const method = await this.paymentMethods.current(this.tenantOf(request));
+    return {
+      paymentMethod: method ? viewOf2(method) : null
+    };
+  }
+  startSetup(request, body) {
+    return this.paymentMethods.startChange(this.tenantOf(request), {
+      successUrl: body.successUrl,
+      cancelUrl: body.cancelUrl,
+      fallbackEmail: this.emailOf(request)
+    });
+  }
+  tenantOf(request) {
+    const tenantId = this.tenantIdResolver(request);
+    if (!tenantId) throw new NotFoundException2(codedError(AUTH_ERROR_CODES2.TENANT_CONTEXT_MISSING));
+    return tenantId;
+  }
+  emailOf(request) {
+    if (this.userEmailResolver) return this.userEmailResolver(request) ?? null;
+    return request.user?.email ?? null;
+  }
+};
+_ts_decorate6([
+  Get2(),
+  _ts_param4(0, Req3()),
+  _ts_metadata6("design:type", Function),
+  _ts_metadata6("design:paramtypes", [
+    Object
+  ]),
+  _ts_metadata6("design:returntype", Promise)
+], TenantPaymentMethodController.prototype, "current", null);
+_ts_decorate6([
+  Post2("setup"),
+  HttpCode2(200),
+  _ts_param4(0, Req3()),
+  _ts_param4(1, Body2()),
+  _ts_metadata6("design:type", Function),
+  _ts_metadata6("design:paramtypes", [
+    Object,
+    typeof StartPaymentMethodSetupDto === "undefined" ? Object : StartPaymentMethodSetupDto
+  ]),
+  _ts_metadata6("design:returntype", typeof Promise === "undefined" ? Object : Promise)
+], TenantPaymentMethodController.prototype, "startSetup", null);
+TenantPaymentMethodController = _ts_decorate6([
+  Controller3("billing/payment-method"),
+  UseGuards2(ComposedTenantAuthGuard, BillingPermissionGuard),
+  _ts_param4(1, Inject3(TENANT_ID_RESOLVER_TOKEN)),
+  _ts_param4(2, Optional()),
+  _ts_param4(2, Inject3(USER_EMAIL_RESOLVER_TOKEN)),
+  _ts_metadata6("design:type", Function),
+  _ts_metadata6("design:paramtypes", [
+    typeof SubscriberPaymentMethodService === "undefined" ? Object : SubscriberPaymentMethodService,
+    typeof TenantIdResolver === "undefined" ? Object : TenantIdResolver,
+    Object
+  ])
+], TenantPaymentMethodController);
+function viewOf2(method) {
+  return {
+    type: method.type,
+    brand: method.brand,
+    last4: method.last4,
+    expiryMonth: method.expiryMonth,
+    expiryYear: method.expiryYear,
+    country: method.country,
+    mandateReference: method.mandateReference,
+    confirmedAt: method.confirmedAt.toISOString()
+  };
+}
+__name(viewOf2, "viewOf");
+
+// src/payments/payments.module.ts
+import { Module } from "@nestjs/common";
+
+// src/payments/stored-references.check.ts
+import { Inject as Inject4, Injectable as Injectable2, Optional as Optional2 } from "@nestjs/common";
+function _ts_decorate7(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate7, "_ts_decorate");
+function _ts_metadata7(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata7, "_ts_metadata");
+function _ts_param5(paramIndex, decorator) {
+  return function(target, key) {
+    decorator(target, key, paramIndex);
+  };
+}
+__name(_ts_param5, "_ts_param");
+var StoredPaymentReferencesCheck = class {
+  static {
+    __name(this, "StoredPaymentReferencesCheck");
+  }
+  registry;
+  methods;
+  rlsBypass;
+  constructor(registry, methods, rlsBypass = null) {
+    this.registry = registry;
+    this.methods = methods;
+    this.rlsBypass = rlsBypass;
+  }
+  async onApplicationBootstrap() {
+    const read = /* @__PURE__ */ __name(() => this.methods.accountsInUse(), "read");
+    const inUse = await (this.rlsBypass ? this.rlsBypass.runWithBypass(read) : read());
+    const unconfigured = this.registry.unconfigured(inUse);
+    if (unconfigured.length === 0) return;
+    throw new Error(`Payment methods in use are held at ${unconfigured.map((name) => `'${name}'`).join(", ")}, which config/saas.yaml#payments.accounts no longer names. List each account again, with its gateway bound, until its subscribers have a payment method at another one.`);
+  }
+};
+StoredPaymentReferencesCheck = _ts_decorate7([
+  Injectable2(),
+  _ts_param5(1, Inject4(SUBSCRIBER_PAYMENT_METHOD_REPOSITORY_TOKEN)),
+  _ts_param5(2, Optional2()),
+  _ts_param5(2, Inject4(RLS_BYPASS_PORT_TOKEN)),
+  _ts_metadata7("design:type", Function),
+  _ts_metadata7("design:paramtypes", [
+    typeof PaymentGatewayRegistry === "undefined" ? Object : PaymentGatewayRegistry,
+    typeof SubscriberPaymentMethodRepository === "undefined" ? Object : SubscriberPaymentMethodRepository,
+    Object
+  ])
+], StoredPaymentReferencesCheck);
+
+// src/payments/payments.module.ts
+function _ts_decorate8(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate8, "_ts_decorate");
+var PaymentsModule = class _PaymentsModule {
+  static {
+    __name(this, "PaymentsModule");
+  }
+  static forRoot(options) {
+    const providers = [
+      asProvider(PAYMENT_GATEWAYS_TOKEN, options.gateways),
+      asProvider(PAYMENT_EVENT_LOG_TOKEN, options.paymentEventLog),
+      asProvider(SUBSCRIBER_PAYMENT_METHOD_REPOSITORY_TOKEN, options.subscriberPaymentMethodRepository),
+      asProvider(PAYMENT_TRANSACTION_RUNNER_TOKEN, options.transactionRunner),
+      ...subscriberProviders(options.subscriberRepository),
+      PaymentGatewayRegistry,
+      PaymentCallbackService,
+      SubscriberPaymentMethodService,
+      StoredPaymentReferencesCheck,
+      ...options.extraProviders ?? []
+    ];
+    const controllers = [
+      PaymentWebhookController
+    ];
+    const tenant = options.tenantRoutes;
+    if (tenant) {
+      providers.push(asProvider(TENANT_AUTH_GUARDS_TOKEN, tenant.authGuards), ComposedTenantAuthGuard, BillingPermissionGuard, {
+        provide: TENANT_ID_RESOLVER_TOKEN,
+        useValue: tenant.tenantIdResolver ?? ((req) => req.user?.tenantId ?? null)
+      });
+      if (tenant.billingPermissionGuards) {
+        providers.push(asProvider(BILLING_PERMISSION_GUARDS_TOKEN, tenant.billingPermissionGuards));
+      }
+      if (tenant.userEmailResolver) {
+        providers.push({
+          provide: USER_EMAIL_RESOLVER_TOKEN,
+          useValue: tenant.userEmailResolver
+        });
+      }
+      controllers.push(TenantPaymentMethodController, TenantBillingDetailsController);
+    }
+    return {
+      module: _PaymentsModule,
+      global: options.global ?? true,
+      imports: options.imports ?? [],
+      controllers,
+      providers,
+      exports: [
+        PaymentGatewayRegistry,
+        PaymentCallbackService,
+        SubscriberPaymentMethodService,
+        SUBSCRIBER_PAYMENT_METHOD_REPOSITORY_TOKEN
+      ]
+    };
+  }
+};
+PaymentsModule = _ts_decorate8([
+  Module({})
+], PaymentsModule);
+
+export {
+  PaymentWebhookController,
+  SubscriberPaymentMethodService,
+  ChangeBillingDetailsDto,
+  TenantBillingDetailsController,
+  StartPaymentMethodSetupDto,
+  TenantPaymentMethodController,
+  PaymentsModule
+};