@silexpert/core 2.0.126-beta.0 → 2.0.126

package/dist/server/index.d.mts

@@ -1,5 +1,5 @@
 import { t as __name } from "../rolldown-runtime-BhWHdk3m.mjs";
-import { FK as ReadCommercialMailTemplate, GJ as EstimateInvoiceType, PK as ReadCommercialDocumentTemplate, aq as CreatePreSaleDocument, kW as IUser, nq as CreateInvoiceDocument, rq as CreateMailHeader } from "../index-CvxgpFhm.mjs";
+import { RW as IUser, UK as ReadCommercialDocumentTemplate, WK as ReadCommercialMailTemplate, dq as CreateInvoiceDocument, eY as EstimateInvoiceType, fq as CreateMailHeader, mq as CreatePreSaleDocument } from "../index-dbXTxwtd.mjs";
 import "dayjs/locale/fr.js";
 //#region ts/utils/email.d.ts
 export declare function getHoraires(user: IUser): "Du lundi au vendredi de 9h à 18h" | "Du lundi au jeudi de 9h à 17h<br/>Le vendredi de 9h à 12h";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@silexpert/core",
-  "version": "2.0.126-beta.0",
+  "version": "2.0.126",
   "description": "Silex Core perform HTTP Request and object binding. Silex core helps developers to retrieve and return formatted object",
   "keywords": [
     "accounting",

package/ts/api/resources/User.ts

@@ -18,6 +18,10 @@ import {
   GetSocietyFromUser,
   RegisterProspectBody,
   RegisterProspectResponse,
+  SignupBody,
+  ResendActivationBody,
+  ActivateAccountBody,
+  ReadActivateAccount,
   QueryGet,
   BasePaginate,
   QueryGetAllUsersPaginated,
@@ -193,6 +197,18 @@ export class User extends Resource {
   registerProspect(body: RegisterProspectBody): Promise<RegisterProspectResponse> {
     return this.axios.$post('users/prospect', body);
   }
+
+  signup(body: SignupBody): Promise<void> {
+    return this.axios.$post('users/signup', body);
+  }
+
+  resendActivation(body: ResendActivationBody): Promise<void> {
+    return this.axios.$post('users/signup/resend-activation', body);
+  }
+
+  activate(body: ActivateAccountBody): Promise<ReadActivateAccount> {
+    return this.axios.$post('users/signup/activate', body);
+  }
   updateCoworkerWorkingSchedules(idUser: number, workingSchedules: IWorkingSchedule[]): Promise<IWorkingSchedule[]> {
     return this.axios.$post(`users/coworker/${idUser}/working-schedules`, workingSchedules);
   }

package/ts/types/Enum/ExternalAuthenticationLinkPurpose.ts

@@ -2,10 +2,12 @@ export enum ExternalAuthenticationLinkPurpose {
   LOGIN = 'LOGIN',
   APPOINTMENT = 'APPOINTMENT',
   RESET_PASSWORD = 'RESET_PASSWORD',
+  ACTIVATION = 'ACTIVATION',
 }
 
 export enum ExternalAuthenticationLinkPurposeExpiration {
   LOGIN = 10, // 10 minutes
   APPOINTMENT = 60 * 24 * 7, // 7 days
   RESET_PASSWORD = 60 * 24 * 3, // 3 days
+  ACTIVATION = 60 * 24 * 7, // 7 days
 }

package/ts/types/Enum/RegistrationSource.ts

@@ -122,6 +122,7 @@ export enum RegistrationSourceAlias {
   RESSOURCES = 'Ressources',
   GO_ENTREPRENEURS_2026 = 'GO Entrepreneurs 2026',
   ACD = 'acd',
+  IN_APP_SIGNUP = 'in-app-signup',
 }
 
 /**

package/ts/types/Enum/Signup.ts

@@ -0,0 +1,19 @@
+/** Who the prospect declares to be when signing up in-app */
+export enum SignupProfile {
+  SOCIETY = 'SOCIETY',
+  ACCOUNTANT = 'ACCOUNTANT',
+}
+
+/**
+ * How the company of the signup was provided: picked from the company search (SIREN / SIRET known), or typed
+ * by the prospect when the company is not found or not registered yet.
+ */
+export enum SignupSocietySource {
+  SEARCH = 'SEARCH',
+  MANUAL = 'MANUAL',
+}
+
+export const SignupProfileDetails = {
+  SOCIETY: { id: SignupProfile.SOCIETY, label: 'Entreprise' },
+  ACCOUNTANT: { id: SignupProfile.ACCOUNTANT, label: 'Expert-comptable' },
+} as const;

package/ts/types/Interface/api/companyMarketingInformation/CompanyMarketingInformationPayload.ts

@@ -1,4 +1,8 @@
+import { SignupProfile } from '../../../Enum/Signup.js';
+
 export class CompanyMarketingInformationPayload {
+  /* Profile declared at the in-app signup */
+  declaredProfile?: SignupProfile | null;
   /* Comment nous a-t-il connu ? */
   findUs?: number | null; // 0 = Autre | 1 = Pub internet | 2 = Bouche à oreille | 3 = Presse | 4 = a cherché "expert comptable" ou un terme similaire sur un moteur de recherche et a trouvé notre site | 5 = Réseaux sociaux
   findUsDetails?: string | null;

package/ts/types/Interface/api/registration/CreateRegistration.ts

@@ -130,12 +130,6 @@ export class UpdateOrCreateVatRegistration {
   @ToBoolean()
   @IsOptional()
   isManuallyRegistered?: boolean;
-
-  // Base64-encoded PDF note; validated so non-string values are rejected instead of failing later in Buffer.from
-  @ApiPropertyOptional()
-  @IsString()
-  @IsOptional()
-  base64Note?: string | null;
 }
 
 export class CreateRegistrationDetail {

package/ts/types/Interface/api/user/RegisterProspect.ts

@@ -174,7 +174,7 @@ class ReferalProgramBody implements ReferalProgram {
   lastname: string;
 }
 
-class AnalyticsUtmBody implements Omit<Partial<IAnalyticsUtm>, 'idSociety'> {
+export class AnalyticsUtmBody implements Omit<Partial<IAnalyticsUtm>, 'idSociety'> {
   @ApiPropertyOptional()
   @IsOptional()
   @IsNumber()

package/ts/types/Interface/api/user/Signup.ts

@@ -0,0 +1,185 @@
+import { ApiProperty, ApiPropertyOptional } from '@nestjs/swagger';
+import {
+  IsEmail,
+  IsEnum,
+  IsNotEmpty,
+  IsOptional,
+  IsString,
+  Matches,
+  MaxLength,
+  Validate,
+  ValidateIf,
+  ValidateNested,
+} from 'class-validator';
+import { IsE164PhoneNumber } from '../../../../utils/decorators/isE164PhoneNumber.decorator.js';
+import { LegalFormTypeEnum } from '../../../Enum/LegalForm.js';
+import { SignupProfile, SignupSocietySource } from '../../../Enum/Signup.js';
+import { AnalyticsUtmBody } from './RegisterProspect.js';
+
+const SIREN_REGEX = /^\d{9}$/;
+const SIRET_REGEX = /^\d{14}$/;
+const NAME_MAX_LENGTH = 100;
+const EMAIL_MAX_LENGTH = 255;
+const SOCIETY_FIELD_MAX_LENGTH = 255;
+const PASSWORD_MAX_LENGTH = 128;
+const ZIP_CODE_REGEX = /^\d{5}$/;
+const GCLID_MAX_LENGTH = 255;
+
+const isSearchedSociety = (society: SignupSocietyBody): boolean => society.source === SignupSocietySource.SEARCH;
+
+/**
+ * The company of the signup, either picked from the company search (`SEARCH`: SIREN or SIRET required, the API
+ * verifies and enriches it through Sirene when available) or typed by the prospect (`MANUAL`: a company not found
+ * or not registered yet, no identifier required). The descriptive fields are the snapshot the API falls back to
+ * when Sirene has no answer, so `name` is always required. `@IsOptional()` is intentionally not used on `siren`
+ * / `siret`: it would skip the validation when both are missing in `SEARCH` mode.
+ */
+export class SignupSocietyBody {
+  @ApiProperty({ enum: SignupSocietySource, description: 'Entreprise issue de la recherche ou saisie manuellement' })
+  @IsEnum(SignupSocietySource)
+  source: SignupSocietySource;
+
+  @ApiPropertyOptional({ description: 'SIREN (9 chiffres). Requis en mode SEARCH si le SIRET est absent.' })
+  @ValidateIf(
+    (society: SignupSocietyBody) => society.siren != null || (isSearchedSociety(society) && society.siret == null),
+  )
+  @IsString()
+  @Matches(SIREN_REGEX, { message: 'Le SIREN doit comporter 9 chiffres' })
+  siren?: string;
+
+  @ApiPropertyOptional({ description: 'SIRET (14 chiffres). Requis en mode SEARCH si le SIREN est absent.' })
+  @ValidateIf(
+    (society: SignupSocietyBody) => society.siret != null || (isSearchedSociety(society) && society.siren == null),
+  )
+  @IsString()
+  @Matches(SIRET_REGEX, { message: 'Le SIRET doit comporter 14 chiffres' })
+  siret?: string;
+
+  @ApiProperty({ description: 'Raison sociale' })
+  @IsString()
+  @IsNotEmpty()
+  @MaxLength(SOCIETY_FIELD_MAX_LENGTH)
+  name: string;
+
+  @ApiPropertyOptional({ enum: LegalFormTypeEnum, description: 'Forme juridique. Requise en mode MANUAL.' })
+  @ValidateIf((society: SignupSocietyBody) => society.idLegalForm != null || !isSearchedSociety(society))
+  @IsEnum(LegalFormTypeEnum)
+  idLegalForm?: LegalFormTypeEnum;
+
+  @ApiPropertyOptional()
+  @IsOptional()
+  @IsString()
+  @MaxLength(SOCIETY_FIELD_MAX_LENGTH)
+  address?: string;
+
+  @ApiPropertyOptional()
+  @IsOptional()
+  @IsString()
+  @Matches(ZIP_CODE_REGEX, { message: 'Le code postal doit comporter 5 chiffres' })
+  zipCode?: string;
+
+  @ApiPropertyOptional()
+  @IsOptional()
+  @IsString()
+  @MaxLength(SOCIETY_FIELD_MAX_LENGTH)
+  city?: string;
+}
+
+export class SignupBody {
+  @ApiProperty()
+  @IsString()
+  @IsNotEmpty()
+  @MaxLength(NAME_MAX_LENGTH)
+  firstname: string;
+
+  @ApiProperty()
+  @IsString()
+  @IsNotEmpty()
+  @MaxLength(NAME_MAX_LENGTH)
+  lastname: string;
+
+  @ApiProperty()
+  @IsString()
+  @IsEmail()
+  @MaxLength(EMAIL_MAX_LENGTH)
+  email: string;
+
+  @ApiProperty({ description: 'Numéro au format international E.164 (ex. +33612345678)' })
+  @IsString()
+  @Validate(IsE164PhoneNumber, { message: "Le numéro de téléphone n'est pas valide" })
+  phone: string;
+
+  @ApiProperty({ enum: SignupProfile, description: 'Entreprise ou expert-comptable' })
+  @IsEnum(SignupProfile)
+  profile: SignupProfile;
+
+  @ApiProperty()
+  @IsString()
+  @IsNotEmpty()
+  @MaxLength(PASSWORD_MAX_LENGTH)
+  password: string;
+
+  @ApiProperty({ type: SignupSocietyBody })
+  @ValidateNested()
+  society: SignupSocietyBody;
+
+  @ApiProperty()
+  @IsString()
+  recaptcha: string;
+
+  @ApiPropertyOptional({ description: 'Cookie HubSpot `hubspotutk`' })
+  @IsOptional()
+  @IsString()
+  hutk?: string;
+
+  @ApiPropertyOptional({ type: AnalyticsUtmBody })
+  @IsOptional()
+  @ValidateNested()
+  utm?: AnalyticsUtmBody;
+
+  /** Google Ads click id, forwarded to HubSpot as `utm_gclid`; it is not stored on the society */
+  @ApiPropertyOptional({ description: 'Identifiant de clic Google Ads (`gclid`)' })
+  @IsOptional()
+  @IsString()
+  @MaxLength(GCLID_MAX_LENGTH)
+  gclid?: string;
+}
+
+export class ResendActivationBody {
+  @ApiProperty()
+  @IsString()
+  @IsEmail()
+  @MaxLength(EMAIL_MAX_LENGTH)
+  email: string;
+
+  @ApiProperty()
+  @IsString()
+  recaptcha: string;
+}
+
+/**
+ * The password chosen at signup is required again: the activation link alone proves ownership of the
+ * email, not of the signup request. It prevents a pending account created with someone else's email from
+ * being activated (and then used with the password the author chose) by the email owner clicking the link.
+ */
+export class ActivateAccountBody {
+  @ApiProperty()
+  @IsString()
+  @IsNotEmpty()
+  token: string;
+
+  @ApiProperty()
+  @IsString()
+  @IsNotEmpty()
+  @MaxLength(PASSWORD_MAX_LENGTH)
+  password: string;
+}
+
+export interface ReadActivateAccount {
+  idUser: number;
+  idSociety: number;
+  societyName: string;
+  idTypeBrand: number;
+  /** `bearer <jwt>`, same shape as `POST /authenticate/external/exchange` */
+  token: string;
+}

package/ts/types/index.ts

@@ -544,6 +544,7 @@ export * from './Enum/UrgencyLevel.js';
 export * from './Enum/Formalism.js';
 export * from './Enum/Kyc.js';
 export * from './Enum/ExternalAuthenticationLinkPurpose.js';
+export * from './Enum/Signup.js';
 
 // Interfaces API
 export * from './Interface/api/accountingTransaction/Create.js';
@@ -1135,6 +1136,7 @@ export * from './Interface/api/config/ConfigType.js';
 export * from './Interface/api/card/Cron.js';
 export * from './Interface/api/user/RegisterProspect.js';
 export * from './Interface/api/user/RegisterWebhook.js';
+export * from './Interface/api/user/Signup.js';
 export * from './Interface/api/stateBankAccount/Query.js';
 export * from './Interface/api/absenceRequest/QueryAbsenceRequest.js';
 export * from './Interface/api/absenceRequest/QueryCalendarAbsenceRequest.js';

package/ts/utils/decorators/isE164PhoneNumber.decorator.ts

@@ -3,7 +3,9 @@ import { parsePhoneNumberFromString } from 'libphonenumber-js';
 
 @ValidatorConstraint({ name: 'isE164Phone', async: false })
 export class IsE164PhoneNumber implements ValidatorConstraintInterface {
-  validate(text: string) {
+  validate(text: unknown): boolean {
+    // class-validator runs every validator of the property: a missing or non-string value must not throw
+    if (typeof text !== 'string') return false;
     const phoneNumber = parsePhoneNumberFromString(text);
     return isDefined(phoneNumber) && phoneNumber.number === text && phoneNumber.isValid();
   }