@saasicat/adapter-drizzle 1.0.0-rc.2 → 1.0.0-rc.21

package/dist/index.cjs

@@ -8,11 +8,11 @@ var __export = (target, all) => {
   for (var name in all)
     __defProp(target, name, { get: all[name], enumerable: true });
 };
-var __copyProps = (to, from, except, desc4) => {
+var __copyProps = (to, from, except, desc10) => {
   if (from && typeof from === "object" || typeof from === "function") {
     for (let key of __getOwnPropNames(from))
       if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc4 = __getOwnPropDesc(from, key)) || desc4.enumerable });
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc10 = __getOwnPropDesc(from, key)) || desc10.enumerable });
   }
   return to;
 };
@@ -23,19 +23,30 @@ var index_exports = {};
 __export(index_exports, {
   AsyncLocalRlsBypassAdapter: () => AsyncLocalRlsBypassAdapter,
   DRIZZLE_DB_TOKEN: () => DRIZZLE_DB_TOKEN,
+  DrizzleAppliedSettingsRepository: () => DrizzleAppliedSettingsRepository,
   DrizzleAuditAdapter: () => DrizzleAuditAdapter,
   DrizzleAuditQueryAdapter: () => DrizzleAuditQueryAdapter,
   DrizzleAuditStatsAdapter: () => DrizzleAuditStatsAdapter,
+  DrizzleBundleRepository: () => DrizzleBundleRepository,
   DrizzleMfaAdapter: () => DrizzleMfaAdapter,
+  DrizzlePaymentEventLog: () => DrizzlePaymentEventLog,
   DrizzlePlanCatalogImportSink: () => DrizzlePlanCatalogImportSink,
   DrizzlePlanCatalogReadSink: () => DrizzlePlanCatalogReadSink,
+  DrizzlePlanRepository: () => DrizzlePlanRepository,
   DrizzlePlanVersionRepository: () => DrizzlePlanVersionRepository,
+  DrizzlePromoCodeHoldRepository: () => DrizzlePromoCodeHoldRepository,
   DrizzlePromoCodeRedemptionRepository: () => DrizzlePromoCodeRedemptionRepository,
   DrizzlePromoCodeRepository: () => DrizzlePromoCodeRepository,
   DrizzlePromoCodeValidationLogRepository: () => DrizzlePromoCodeValidationLogRepository,
   DrizzlePromoSubscriptionLookup: () => DrizzlePromoSubscriptionLookup,
+  DrizzleSubscriberPaymentMethodRepository: () => DrizzleSubscriberPaymentMethodRepository,
+  DrizzleSubscriberRepository: () => DrizzleSubscriberRepository,
+  DrizzleSubscriptionBundleRepository: () => DrizzleSubscriptionBundleRepository,
+  DrizzleSubscriptionContractRepository: () => DrizzleSubscriptionContractRepository,
   DrizzleSubscriptionRepository: () => DrizzleSubscriptionRepository,
+  DrizzleSubscriptionUsageAdapter: () => DrizzleSubscriptionUsageAdapter,
   DrizzleSuperAdminBootstrapAdapter: () => DrizzleSuperAdminBootstrapAdapter,
+  DrizzleTenantSubscriptionWrite: () => DrizzleTenantSubscriptionWrite,
   DrizzleTransactionRunner: () => DrizzleTransactionRunner,
   PASSWORD_HASHER_TOKEN: () => PASSWORD_HASHER_TOKEN,
   ZeroPromoRevenueDeductionAggregator: () => ZeroPromoRevenueDeductionAggregator,
@@ -46,16 +57,14 @@ __export(index_exports, {
 module.exports = __toCommonJS(index_exports);
 
 // src/client.ts
+var import_core = require("@saasicat/core");
 var DRIZZLE_DB_TOKEN = /* @__PURE__ */ Symbol.for("saasicat/adapter-drizzle/DrizzleDb");
 function resolveDb(client, tx) {
   return tx ?? client;
 }
 __name(resolveDb, "resolveDb");
 function toQuotaMap(value) {
-  if (value !== null && typeof value === "object" && !Array.isArray(value)) {
-    return value;
-  }
-  return {};
+  return (0, import_core.readQuotaRecord)(value);
 }
 __name(toQuotaMap, "toQuotaMap");
 function toStringArray(value) {
@@ -70,9 +79,9 @@ __name(escapeLikePattern, "escapeLikePattern");
 // src/async-local-rls-bypass.adapter.ts
 var import_common = require("@nestjs/common");
 var import_node_async_hooks = require("node:async_hooks");
-function _ts_decorate(decorators, target, key, desc4) {
-  var c = arguments.length, r = c < 3 ? target : desc4 === null ? desc4 = Object.getOwnPropertyDescriptor(target, key) : desc4, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc4);
+function _ts_decorate(decorators, target, key, desc10) {
+  var c = arguments.length, r = c < 3 ? target : desc10 === null ? desc10 = Object.getOwnPropertyDescriptor(target, key) : desc10, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc10);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
@@ -96,20 +105,35 @@ AsyncLocalRlsBypassAdapter = _ts_decorate([
   (0, import_common.Injectable)()
 ], AsyncLocalRlsBypassAdapter);
 
-// src/drizzle-audit.adapter.ts
+// src/drizzle-applied-settings.repository.ts
 var import_node_crypto = require("node:crypto");
 var import_common2 = require("@nestjs/common");
+var import_drizzle_orm = require("drizzle-orm");
 
 // src/schema.ts
 var schema_exports = {};
 __export(schema_exports, {
+  appliedSettings: () => appliedSettings,
   auditLogs: () => auditLogs,
+  bundleVersions: () => bundleVersions,
+  bundles: () => bundles,
+  contractLineItems: () => contractLineItems,
   featureCatalogEntries: () => featureCatalogEntries,
+  paymentEventLog: () => paymentEventLog,
   planVersions: () => planVersions,
   plans: () => plans,
+  promoCodeHolds: () => promoCodeHolds,
   promoCodeRedemptions: () => promoCodeRedemptions,
   promoCodeValidationLogs: () => promoCodeValidationLogs,
   promoCodes: () => promoCodes,
+  settingsChanges: () => settingsChanges,
+  subscriberCorrections: () => subscriberCorrections,
+  subscriberPaymentMethodSetups: () => subscriberPaymentMethodSetups,
+  subscriberPaymentMethods: () => subscriberPaymentMethods,
+  subscriberTenants: () => subscriberTenants,
+  subscribers: () => subscribers,
+  subscriptionBundles: () => subscriptionBundles,
+  subscriptionContracts: () => subscriptionContracts,
   subscriptions: () => subscriptions,
   superAdminMfa: () => superAdminMfa,
   superAdminUsers: () => superAdminUsers
@@ -133,6 +157,42 @@ var subscriptions = (0, import_pg_core.pgTable)("subscriptions", {
   pendingPlanVersionId: (0, import_pg_core.text)("pendingPlanVersionId"),
   isPilot: (0, import_pg_core.boolean)("isPilot").notNull().default(false),
   startedAt: ts("startedAt"),
+  // Entitlement resolution ends a subscription by reading these two, so the
+  // query map has to describe them: a column this file omits is a column the
+  // repository cannot return, and the platform then treats a subscription
+  // that ended last January as running.
+  canceledAt: ts("canceledAt"),
+  canceledEffectiveAt: ts("canceledEffectiveAt"),
+  // The billing window, the commitment and the day it is billed on. Omitted
+  // until 2026-08-27, and a column this file omits is one the repositories
+  // cannot return — which is why the renewal, plan-change and cancellation
+  // paths could not be served from this adapter at all.
+  trialEndsAt: ts("trialEndsAt"),
+  currentPeriodStart: ts("currentPeriodStart"),
+  currentPeriodEnd: ts("currentPeriodEnd"),
+  minimumTermUntil: ts("minimumTermUntil"),
+  billingAnchorDay: (0, import_pg_core.integer)("billingAnchorDay"),
+  // A pending version change and how far it has got: announced, reminded
+  // about, accepted, and the date it lands.
+  pendingPlanVersionEffectiveAt: ts("pendingPlanVersionEffectiveAt"),
+  pendingPlanVersionAccepted: (0, import_pg_core.boolean)("pendingPlanVersionAccepted").notNull().default(false),
+  pendingPlanVersionAcceptedAt: ts("pendingPlanVersionAcceptedAt"),
+  pendingPlanVersionAcceptedByUserId: (0, import_pg_core.text)("pendingPlanVersionAcceptedByUserId"),
+  pendingPlanVersionNotifiedAt: ts("pendingPlanVersionNotifiedAt"),
+  pendingPlanVersionReminderSentAt: ts("pendingPlanVersionReminderSentAt"),
+  postTrialPlan: (0, import_pg_core.text)("postTrialPlan"),
+  pendingBillingCycle: (0, import_pg_core.text)("pendingBillingCycle"),
+  // A negotiated price and the note that explains it, a pilot window, the
+  // offer this subscription came from, and the package as it was sold.
+  customMonthlyNet: (0, import_pg_core.numeric)("customMonthlyNet", {
+    precision: 10,
+    scale: 2
+  }),
+  customNote: (0, import_pg_core.text)("customNote"),
+  pilotEndsAt: ts("pilotEndsAt"),
+  pilotNote: (0, import_pg_core.text)("pilotNote"),
+  checkoutOfferId: (0, import_pg_core.text)("checkoutOfferId"),
+  packageSnapshot: (0, import_pg_core.jsonb)("packageSnapshot"),
   createdAt: ts("createdAt").notNull().defaultNow(),
   updatedAt: ts("updatedAt").notNull()
 });
@@ -157,6 +217,12 @@ var planVersions = (0, import_pg_core.pgTable)("plan_versions", {
   publishedChanges: (0, import_pg_core.jsonb)("publishedChanges"),
   changeNote: (0, import_pg_core.text)("changeNote").notNull(),
   nonRegressive: (0, import_pg_core.boolean)("nonRegressive").notNull().default(true),
+  // The booking window for new subscriptions, and the day the plan itself
+  // stops. All three nullable, so a schema that predates them stays valid and
+  // an adapter that does not maintain them says so rather than writing them.
+  validFrom: ts("validFrom"),
+  validUntil: ts("validUntil"),
+  endsAt: ts("endsAt"),
   createdByUserId: (0, import_pg_core.text)("createdByUserId"),
   publishedByUserId: (0, import_pg_core.text)("publishedByUserId"),
   createdAt: ts("createdAt").notNull().defaultNow(),
@@ -164,7 +230,6 @@ var planVersions = (0, import_pg_core.pgTable)("plan_versions", {
 });
 var plans = (0, import_pg_core.pgTable)("plans", {
   id: (0, import_pg_core.text)("id").primaryKey(),
-  projectKey: (0, import_pg_core.text)("projectKey").notNull(),
   planKey: (0, import_pg_core.text)("planKey").notNull(),
   label: (0, import_pg_core.text)("label").notNull(),
   description: (0, import_pg_core.text)("description"),
@@ -174,9 +239,66 @@ var plans = (0, import_pg_core.pgTable)("plans", {
   updatedAt: ts("updatedAt").notNull(),
   deletedAt: ts("deletedAt")
 });
+var subscriptionContracts = (0, import_pg_core.pgTable)("subscription_contracts", {
+  id: (0, import_pg_core.text)("id").primaryKey(),
+  tenantId: (0, import_pg_core.text)("tenantId").notNull(),
+  // Postgres enum, declared as text: parameterized values are coerced and
+  // reads come back as strings, which is what the records expect.
+  status: (0, import_pg_core.text)("status").notNull().default("active"),
+  effectiveFrom: ts("effectiveFrom").notNull(),
+  effectiveUntil: ts("effectiveUntil"),
+  originalOfferId: (0, import_pg_core.text)("originalOfferId"),
+  originalPlanVersionId: (0, import_pg_core.text)("originalPlanVersionId"),
+  originalBundleVersionIds: (0, import_pg_core.jsonb)("originalBundleVersionIds").notNull(),
+  entitlementSnapshot: (0, import_pg_core.jsonb)("entitlementSnapshot"),
+  priceSnapshot: (0, import_pg_core.jsonb)("priceSnapshot").notNull(),
+  promotionSnapshots: (0, import_pg_core.jsonb)("promotionSnapshots").notNull(),
+  promoCodeSnapshots: (0, import_pg_core.jsonb)("promoCodeSnapshots").notNull(),
+  termsSnapshot: (0, import_pg_core.jsonb)("termsSnapshot"),
+  // Who the contract is between, copied when it was concluded.
+  subscriberId: (0, import_pg_core.text)("subscriberId").notNull(),
+  subscriberSnapshot: (0, import_pg_core.jsonb)("subscriberSnapshot").notNull(),
+  issuerSnapshot: (0, import_pg_core.jsonb)("issuerSnapshot"),
+  partiesMigrated: (0, import_pg_core.boolean)("partiesMigrated").notNull().default(false),
+  createdAt: ts("createdAt").notNull().defaultNow(),
+  updatedAt: ts("updatedAt").notNull()
+});
+var contractLineItems = (0, import_pg_core.pgTable)("contract_line_items", {
+  id: (0, import_pg_core.text)("id").primaryKey(),
+  contractId: (0, import_pg_core.text)("contractId").notNull(),
+  kind: (0, import_pg_core.text)("kind").notNull(),
+  sourceKey: (0, import_pg_core.text)("sourceKey").notNull(),
+  sourceVersionId: (0, import_pg_core.text)("sourceVersionId"),
+  titleSnapshot: (0, import_pg_core.text)("titleSnapshot").notNull(),
+  descriptionSnapshot: (0, import_pg_core.text)("descriptionSnapshot"),
+  quantity: (0, import_pg_core.integer)("quantity").notNull().default(1),
+  unit: (0, import_pg_core.text)("unit"),
+  priceNet: (0, import_pg_core.numeric)("priceNet", {
+    precision: 10,
+    scale: 2
+  }).notNull(),
+  priceGross: (0, import_pg_core.numeric)("priceGross", {
+    precision: 10,
+    scale: 2
+  }).notNull(),
+  billingCycle: (0, import_pg_core.text)("billingCycle").notNull(),
+  currency: (0, import_pg_core.text)("currency").notNull(),
+  taxRate: (0, import_pg_core.numeric)("taxRate", {
+    precision: 5,
+    scale: 2
+  }).notNull(),
+  taxAmount: (0, import_pg_core.numeric)("taxAmount", {
+    precision: 10,
+    scale: 2
+  }).notNull(),
+  minimumTermUntil: ts("minimumTermUntil"),
+  featuresSnapshot: (0, import_pg_core.jsonb)("featuresSnapshot").notNull(),
+  quotaEffectsSnapshot: (0, import_pg_core.jsonb)("quotaEffectsSnapshot").notNull(),
+  metadata: (0, import_pg_core.jsonb)("metadata"),
+  createdAt: ts("createdAt").notNull().defaultNow()
+});
 var featureCatalogEntries = (0, import_pg_core.pgTable)("feature_catalog_entries", {
   id: (0, import_pg_core.text)("id").primaryKey(),
-  projectKey: (0, import_pg_core.text)("projectKey").notNull(),
   featureKey: (0, import_pg_core.text)("featureKey").notNull(),
   label: (0, import_pg_core.text)("label").notNull(),
   description: (0, import_pg_core.text)("description"),
@@ -213,6 +335,7 @@ var promoCodes = (0, import_pg_core.pgTable)("promo_codes", {
   validUntil: ts("validUntil"),
   maxRedemptions: (0, import_pg_core.integer)("maxRedemptions"),
   redemptionsCount: (0, import_pg_core.integer)("redemptionsCount").notNull().default(0),
+  heldCount: (0, import_pg_core.integer)("heldCount").notNull().default(0),
   appliesToPlans: (0, import_pg_core.text)("appliesToPlans").array(),
   appliesToBilling: (0, import_pg_core.text)("appliesToBilling"),
   firstTimeCustomersOnly: (0, import_pg_core.boolean)("firstTimeCustomersOnly").notNull().default(true),
@@ -248,6 +371,16 @@ var promoCodeRedemptions = (0, import_pg_core.pgTable)("promo_code_redemptions",
   redeemedAt: ts("redeemedAt").notNull().defaultNow(),
   reversedAt: ts("reversedAt")
 });
+var promoCodeHolds = (0, import_pg_core.pgTable)("promo_code_holds", {
+  id: (0, import_pg_core.text)("id").primaryKey(),
+  promoCodeId: (0, import_pg_core.text)("promoCodeId").notNull(),
+  checkoutOfferId: (0, import_pg_core.text)("checkoutOfferId").notNull(),
+  expiresAt: ts("expiresAt").notNull(),
+  handedOverTx: (0, import_pg_core.bigint)("handedOverTx", {
+    mode: "bigint"
+  }),
+  createdAt: ts("createdAt").notNull().defaultNow()
+});
 var promoCodeValidationLogs = (0, import_pg_core.pgTable)("promo_code_validation_logs", {
   id: (0, import_pg_core.text)("id").primaryKey(),
   promoCodeId: (0, import_pg_core.text)("promoCodeId"),
@@ -289,11 +422,166 @@ var superAdminMfa = (0, import_pg_core.pgTable)("super_admin_mfa", {
   enabledAt: ts("enabledAt"),
   updatedAt: ts("updatedAt").notNull()
 });
+var bundles = (0, import_pg_core.pgTable)("bundles", {
+  id: (0, import_pg_core.text)("id").primaryKey(),
+  bundleKey: (0, import_pg_core.text)("bundleKey").notNull(),
+  label: (0, import_pg_core.text)("label").notNull(),
+  description: (0, import_pg_core.text)("description"),
+  icon: (0, import_pg_core.text)("icon"),
+  sortOrder: (0, import_pg_core.integer)("sortOrder").notNull().default(0),
+  i18n: (0, import_pg_core.jsonb)("i18n").notNull(),
+  createdAt: ts("createdAt").notNull().defaultNow(),
+  updatedAt: ts("updatedAt").notNull(),
+  deletedAt: ts("deletedAt")
+});
+var bundleVersions = (0, import_pg_core.pgTable)("bundle_versions", {
+  id: (0, import_pg_core.text)("id").primaryKey(),
+  bundleId: (0, import_pg_core.text)("bundleId").notNull(),
+  version: (0, import_pg_core.integer)("version").notNull(),
+  baseVersionId: (0, import_pg_core.text)("baseVersionId"),
+  features: (0, import_pg_core.jsonb)("features").notNull(),
+  quotas: (0, import_pg_core.jsonb)("quotas").notNull(),
+  compatibility: (0, import_pg_core.jsonb)("compatibility").notNull(),
+  pricingOverrides: (0, import_pg_core.jsonb)("pricingOverrides").notNull(),
+  // Nullable, unlike a plan version's: a bundle may carry no base price and
+  // resolve one per plan through `pricingOverrides` instead.
+  monthlyNet: (0, import_pg_core.numeric)("monthlyNet", {
+    precision: 10,
+    scale: 2
+  }),
+  yearlyNet: (0, import_pg_core.numeric)("yearlyNet", {
+    precision: 10,
+    scale: 2
+  }),
+  marketed: (0, import_pg_core.boolean)("marketed").notNull().default(true),
+  publishedAt: ts("publishedAt"),
+  supersededAt: ts("supersededAt"),
+  publishedChanges: (0, import_pg_core.jsonb)("publishedChanges"),
+  changeNote: (0, import_pg_core.text)("changeNote").notNull(),
+  nonRegressive: (0, import_pg_core.boolean)("nonRegressive").notNull().default(true),
+  validFrom: ts("validFrom"),
+  validUntil: ts("validUntil"),
+  createdByUserId: (0, import_pg_core.text)("createdByUserId"),
+  publishedByUserId: (0, import_pg_core.text)("publishedByUserId"),
+  createdAt: ts("createdAt").notNull().defaultNow(),
+  updatedAt: ts("updatedAt").notNull()
+});
+var subscriptionBundles = (0, import_pg_core.pgTable)("subscription_bundles", {
+  id: (0, import_pg_core.text)("id").primaryKey(),
+  subscriptionId: (0, import_pg_core.text)("subscriptionId").notNull(),
+  bundleVersionId: (0, import_pg_core.text)("bundleVersionId").notNull(),
+  startedAt: ts("startedAt").notNull(),
+  minimumTermEndsAt: ts("minimumTermEndsAt"),
+  // The rhythm this booking is billed in and the window it is billed for. A
+  // bundle's periods end on the day the plan's do; all three are null on a
+  // booking made before these columns existed, and on one whose plan had no
+  // period to align to — a trial, or a subscription awaiting sales.
+  billingCycle: (0, import_pg_core.text)("billingCycle"),
+  currentPeriodStart: ts("currentPeriodStart"),
+  currentPeriodEnd: ts("currentPeriodEnd"),
+  canceledAt: ts("canceledAt"),
+  canceledEffectiveAt: ts("canceledEffectiveAt"),
+  createdAt: ts("createdAt").notNull().defaultNow(),
+  updatedAt: ts("updatedAt").notNull()
+});
+var appliedSettings = (0, import_pg_core.pgTable)("applied_settings", {
+  id: (0, import_pg_core.text)("id").primaryKey().default("installation"),
+  fingerprint: (0, import_pg_core.text)("fingerprint").notNull(),
+  settings: (0, import_pg_core.jsonb)("settings").notNull(),
+  source: (0, import_pg_core.text)("source").notNull(),
+  appliedAt: ts("appliedAt").notNull()
+});
+var settingsChanges = (0, import_pg_core.pgTable)("settings_changes", {
+  id: (0, import_pg_core.text)("id").primaryKey(),
+  // Numbered by the database at the write that recorded the change, and the
+  // order the list is read in. Never set by the adapter.
+  seq: (0, import_pg_core.serial)("seq").notNull(),
+  noticedAt: ts("noticedAt").notNull(),
+  source: (0, import_pg_core.text)("source").notNull(),
+  previous: (0, import_pg_core.jsonb)("previous").notNull(),
+  current: (0, import_pg_core.jsonb)("current").notNull(),
+  acknowledgedAt: ts("acknowledgedAt"),
+  acknowledgedBy: (0, import_pg_core.text)("acknowledgedBy")
+});
+var subscribers = (0, import_pg_core.pgTable)("subscribers", {
+  id: (0, import_pg_core.text)("id").primaryKey(),
+  // Counted by the database, from where `constraints.postgres.sql` starts it.
+  // Never set by the adapter.
+  customerSequence: (0, import_pg_core.serial)("customerSequence").notNull(),
+  customerNumberPrefix: (0, import_pg_core.text)("customerNumberPrefix").notNull().default(""),
+  legalName: (0, import_pg_core.text)("legalName").notNull(),
+  vatId: (0, import_pg_core.text)("vatId"),
+  taxNumber: (0, import_pg_core.text)("taxNumber"),
+  addressLine1: (0, import_pg_core.text)("addressLine1"),
+  addressLine2: (0, import_pg_core.text)("addressLine2"),
+  postalCode: (0, import_pg_core.text)("postalCode"),
+  city: (0, import_pg_core.text)("city"),
+  country: (0, import_pg_core.text)("country"),
+  invoiceEmail: (0, import_pg_core.text)("invoiceEmail"),
+  migrated: (0, import_pg_core.boolean)("migrated").notNull().default(false),
+  createdAt: ts("createdAt").notNull().defaultNow(),
+  updatedAt: ts("updatedAt").notNull()
+});
+var subscriberTenants = (0, import_pg_core.pgTable)("subscriber_tenants", {
+  id: (0, import_pg_core.text)("id").primaryKey(),
+  subscriberId: (0, import_pg_core.text)("subscriberId").notNull(),
+  tenantId: (0, import_pg_core.text)("tenantId").notNull(),
+  linkedAt: ts("linkedAt").notNull().defaultNow(),
+  unlinkedAt: ts("unlinkedAt")
+});
+var subscriberCorrections = (0, import_pg_core.pgTable)("subscriber_corrections", {
+  id: (0, import_pg_core.text)("id").primaryKey(),
+  subscriberId: (0, import_pg_core.text)("subscriberId").notNull(),
+  previous: (0, import_pg_core.jsonb)("previous").notNull(),
+  corrected: (0, import_pg_core.jsonb)("corrected").notNull(),
+  reason: (0, import_pg_core.text)("reason").notNull(),
+  correctedBy: (0, import_pg_core.text)("correctedBy").notNull(),
+  correctedAt: ts("correctedAt").notNull()
+});
+var subscriberPaymentMethodSetups = (0, import_pg_core.pgTable)("subscriber_payment_method_setups", {
+  id: (0, import_pg_core.text)("id").primaryKey(),
+  subscriberId: (0, import_pg_core.text)("subscriberId").notNull(),
+  gatewayAccount: (0, import_pg_core.text)("gatewayAccount").notNull(),
+  sessionRef: (0, import_pg_core.text)("sessionRef").notNull(),
+  customerRef: (0, import_pg_core.text)("customerRef").notNull(),
+  startedAt: ts("startedAt").notNull().defaultNow(),
+  completedAt: ts("completedAt")
+});
+var paymentEventLog = (0, import_pg_core.pgTable)("PaymentEventLog", {
+  id: (0, import_pg_core.text)("id").primaryKey(),
+  gatewayAccount: (0, import_pg_core.text)("gatewayAccount").notNull(),
+  eventId: (0, import_pg_core.text)("eventId").notNull(),
+  provider: (0, import_pg_core.text)("provider").notNull(),
+  sessionId: (0, import_pg_core.text)("sessionId"),
+  status: (0, import_pg_core.text)("status").notNull(),
+  payload: (0, import_pg_core.jsonb)("payload"),
+  processedAt: ts("processedAt").notNull().defaultNow()
+});
+var subscriberPaymentMethods = (0, import_pg_core.pgTable)("subscriber_payment_methods", {
+  id: (0, import_pg_core.text)("id").primaryKey(),
+  subscriberId: (0, import_pg_core.text)("subscriberId").notNull(),
+  gatewayAccount: (0, import_pg_core.text)("gatewayAccount").notNull(),
+  provider: (0, import_pg_core.text)("provider").notNull(),
+  customerRef: (0, import_pg_core.text)("customerRef").notNull(),
+  paymentMethodRef: (0, import_pg_core.text)("paymentMethodRef").notNull(),
+  type: (0, import_pg_core.text)("type").notNull(),
+  brand: (0, import_pg_core.text)("brand"),
+  last4: (0, import_pg_core.text)("last4").notNull(),
+  expiryMonth: (0, import_pg_core.integer)("expiryMonth"),
+  expiryYear: (0, import_pg_core.integer)("expiryYear"),
+  country: (0, import_pg_core.text)("country"),
+  bankCode: (0, import_pg_core.text)("bankCode"),
+  mandateReference: (0, import_pg_core.text)("mandateReference"),
+  status: (0, import_pg_core.text)("status").notNull().default("ACTIVE"),
+  confirmedAt: ts("confirmedAt").notNull(),
+  replacedAt: ts("replacedAt"),
+  createdAt: ts("createdAt").notNull().defaultNow()
+});
 
-// src/drizzle-audit.adapter.ts
-function _ts_decorate2(decorators, target, key, desc4) {
-  var c = arguments.length, r = c < 3 ? target : desc4 === null ? desc4 = Object.getOwnPropertyDescriptor(target, key) : desc4, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc4);
+// src/drizzle-applied-settings.repository.ts
+function _ts_decorate2(decorators, target, key, desc10) {
+  var c = arguments.length, r = c < 3 ? target : desc10 === null ? desc10 = Object.getOwnPropertyDescriptor(target, key) : desc10, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc10);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
@@ -308,6 +596,126 @@ function _ts_param(paramIndex, decorator) {
   };
 }
 __name(_ts_param, "_ts_param");
+var INSTALLATION_ROW_ID = "installation";
+var DrizzleAppliedSettingsRepository = class {
+  static {
+    __name(this, "DrizzleAppliedSettingsRepository");
+  }
+  db;
+  constructor(db) {
+    this.db = db;
+  }
+  async readApplied() {
+    const rows = await this.db.select().from(appliedSettings).where((0, import_drizzle_orm.eq)(appliedSettings.id, INSTALLATION_ROW_ID)).limit(1);
+    const row = rows[0];
+    if (!row) return null;
+    return {
+      fingerprint: row.fingerprint,
+      settings: toValues(row.settings),
+      source: row.source,
+      appliedAt: row.appliedAt
+    };
+  }
+  async writeApplied(record, expectedFingerprint) {
+    return replaceRecord(this.db, record, expectedFingerprint);
+  }
+  async recordChange(change, record, expectedFingerprint) {
+    return this.db.transaction(async (tx) => {
+      const db = tx;
+      if (!await replaceRecord(db, record, expectedFingerprint)) return null;
+      const row = {
+        id: (0, import_node_crypto.randomUUID)(),
+        noticedAt: change.noticedAt,
+        source: change.source,
+        previous: change.previous,
+        current: change.current,
+        acknowledgedAt: null,
+        acknowledgedBy: null
+      };
+      await db.insert(settingsChanges).values(row);
+      return toChangeRecord(row);
+    });
+  }
+  async listChanges(filter = {}) {
+    const acknowledgement = filter.acknowledged === void 0 ? void 0 : filter.acknowledged ? (0, import_drizzle_orm.isNotNull)(settingsChanges.acknowledgedAt) : (0, import_drizzle_orm.isNull)(settingsChanges.acknowledgedAt);
+    const query = this.db.select().from(settingsChanges).where(acknowledgement).orderBy((0, import_drizzle_orm.desc)(settingsChanges.seq));
+    const rows = filter.limit === void 0 ? await query : await query.limit(filter.limit);
+    return rows.map(toChangeRecord);
+  }
+  async acknowledgeChange(id, acknowledgedBy, acknowledgedAt) {
+    await this.db.update(settingsChanges).set({
+      acknowledgedAt,
+      acknowledgedBy
+    }).where((0, import_drizzle_orm.and)((0, import_drizzle_orm.eq)(settingsChanges.id, id), (0, import_drizzle_orm.isNull)(settingsChanges.acknowledgedAt)));
+    const rows = await this.db.select().from(settingsChanges).where((0, import_drizzle_orm.eq)(settingsChanges.id, id)).limit(1);
+    return rows[0] ? toChangeRecord(rows[0]) : null;
+  }
+};
+DrizzleAppliedSettingsRepository = _ts_decorate2([
+  (0, import_common2.Injectable)(),
+  _ts_param(0, (0, import_common2.Inject)(DRIZZLE_DB_TOKEN)),
+  _ts_metadata("design:type", Function),
+  _ts_metadata("design:paramtypes", [
+    typeof DrizzleClient === "undefined" ? Object : DrizzleClient
+  ])
+], DrizzleAppliedSettingsRepository);
+async function replaceRecord(db, record, expectedFingerprint) {
+  const values = {
+    fingerprint: record.fingerprint,
+    settings: record.settings,
+    source: record.source,
+    appliedAt: record.appliedAt
+  };
+  const written = expectedFingerprint === null ? await db.insert(appliedSettings).values({
+    id: INSTALLATION_ROW_ID,
+    ...values
+  }).onConflictDoNothing({
+    target: appliedSettings.id
+  }).returning({
+    id: appliedSettings.id
+  }) : await db.update(appliedSettings).set(values).where((0, import_drizzle_orm.and)((0, import_drizzle_orm.eq)(appliedSettings.id, INSTALLATION_ROW_ID), (0, import_drizzle_orm.eq)(appliedSettings.fingerprint, expectedFingerprint))).returning({
+    id: appliedSettings.id
+  });
+  return written.length === 1;
+}
+__name(replaceRecord, "replaceRecord");
+function toChangeRecord(row) {
+  return {
+    id: row.id,
+    noticedAt: row.noticedAt,
+    source: row.source,
+    previous: toValues(row.previous),
+    current: toValues(row.current),
+    acknowledgedAt: row.acknowledgedAt,
+    acknowledgedBy: row.acknowledgedBy
+  };
+}
+__name(toChangeRecord, "toChangeRecord");
+function toValues(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value) ? value : {};
+}
+__name(toValues, "toValues");
+
+// src/drizzle-audit.adapter.ts
+var import_node_crypto2 = require("node:crypto");
+var import_common3 = require("@nestjs/common");
+function _ts_decorate3(decorators, target, key, desc10) {
+  var c = arguments.length, r = c < 3 ? target : desc10 === null ? desc10 = Object.getOwnPropertyDescriptor(target, key) : desc10, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc10);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate3, "_ts_decorate");
+function _ts_metadata2(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata2, "_ts_metadata");
+function _ts_param2(paramIndex, decorator) {
+  return function(target, key) {
+    decorator(target, key, paramIndex);
+  };
+}
+__name(_ts_param2, "_ts_param");
 function buildActorTag(actor) {
   return `${actor.source}:${actor.email}:${actor.context}`;
 }
@@ -322,7 +730,7 @@ var DrizzleAuditAdapter = class {
   }
   async write(input) {
     await this.db.insert(auditLogs).values({
-      id: (0, import_node_crypto.randomUUID)(),
+      id: (0, import_node_crypto2.randomUUID)(),
       tenantId: null,
       userId: input.actor.userId,
       entity: input.entity,
@@ -333,35 +741,35 @@ var DrizzleAuditAdapter = class {
     });
   }
 };
-DrizzleAuditAdapter = _ts_decorate2([
-  (0, import_common2.Injectable)(),
-  _ts_param(0, (0, import_common2.Inject)(DRIZZLE_DB_TOKEN)),
-  _ts_metadata("design:type", Function),
-  _ts_metadata("design:paramtypes", [
+DrizzleAuditAdapter = _ts_decorate3([
+  (0, import_common3.Injectable)(),
+  _ts_param2(0, (0, import_common3.Inject)(DRIZZLE_DB_TOKEN)),
+  _ts_metadata2("design:type", Function),
+  _ts_metadata2("design:paramtypes", [
     typeof DrizzleClient === "undefined" ? Object : DrizzleClient
   ])
 ], DrizzleAuditAdapter);
 
 // src/drizzle-audit-query.adapter.ts
-var import_common3 = require("@nestjs/common");
-var import_drizzle_orm = require("drizzle-orm");
-function _ts_decorate3(decorators, target, key, desc4) {
-  var c = arguments.length, r = c < 3 ? target : desc4 === null ? desc4 = Object.getOwnPropertyDescriptor(target, key) : desc4, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc4);
+var import_common4 = require("@nestjs/common");
+var import_drizzle_orm2 = require("drizzle-orm");
+function _ts_decorate4(decorators, target, key, desc10) {
+  var c = arguments.length, r = c < 3 ? target : desc10 === null ? desc10 = Object.getOwnPropertyDescriptor(target, key) : desc10, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc10);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate3, "_ts_decorate");
-function _ts_metadata2(k, v) {
+__name(_ts_decorate4, "_ts_decorate");
+function _ts_metadata3(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata2, "_ts_metadata");
-function _ts_param2(paramIndex, decorator) {
+__name(_ts_metadata3, "_ts_metadata");
+function _ts_param3(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param2, "_ts_param");
+__name(_ts_param3, "_ts_param");
 var DEFAULT_PAGE_SIZE = 50;
 var MAX_PAGE_SIZE = 200;
 var DrizzleAuditQueryAdapter = class {
@@ -376,33 +784,33 @@ var DrizzleAuditQueryAdapter = class {
     const page = Math.max(filter.page ?? 1, 1);
     const pageSize = Math.min(Math.max(filter.pageSize ?? DEFAULT_PAGE_SIZE, 1), MAX_PAGE_SIZE);
     const conditions = [
-      filter.tenantId ? (0, import_drizzle_orm.eq)(auditLogs.tenantId, filter.tenantId) : void 0,
-      filter.userId ? (0, import_drizzle_orm.eq)(auditLogs.userId, filter.userId) : void 0,
-      filter.entity ? (0, import_drizzle_orm.eq)(auditLogs.entity, filter.entity) : void 0,
-      filter.entityId ? (0, import_drizzle_orm.eq)(auditLogs.entityId, filter.entityId) : void 0,
-      filter.action ? (0, import_drizzle_orm.eq)(auditLogs.action, filter.action) : void 0,
+      filter.tenantId ? (0, import_drizzle_orm2.eq)(auditLogs.tenantId, filter.tenantId) : void 0,
+      filter.userId ? (0, import_drizzle_orm2.eq)(auditLogs.userId, filter.userId) : void 0,
+      filter.entity ? (0, import_drizzle_orm2.eq)(auditLogs.entity, filter.entity) : void 0,
+      filter.entityId ? (0, import_drizzle_orm2.eq)(auditLogs.entityId, filter.entityId) : void 0,
+      filter.action ? (0, import_drizzle_orm2.eq)(auditLogs.action, filter.action) : void 0,
       toActorTagCondition(filter.actorTag),
-      filter.from ? (0, import_drizzle_orm.gte)(auditLogs.createdAt, new Date(filter.from)) : void 0,
-      filter.to ? (0, import_drizzle_orm.lte)(auditLogs.createdAt, new Date(filter.to)) : void 0
+      filter.from ? (0, import_drizzle_orm2.gte)(auditLogs.createdAt, new Date(filter.from)) : void 0,
+      filter.to ? (0, import_drizzle_orm2.lte)(auditLogs.createdAt, new Date(filter.to)) : void 0
     ];
-    const rows = await this.db.select().from(auditLogs).where((0, import_drizzle_orm.and)(...conditions)).orderBy((0, import_drizzle_orm.desc)(auditLogs.createdAt)).limit(pageSize).offset((page - 1) * pageSize);
+    const rows = await this.db.select().from(auditLogs).where((0, import_drizzle_orm2.and)(...conditions)).orderBy((0, import_drizzle_orm2.desc)(auditLogs.createdAt)).limit(pageSize).offset((page - 1) * pageSize);
     return rows.map(toAuditEntry);
   }
 };
-DrizzleAuditQueryAdapter = _ts_decorate3([
-  (0, import_common3.Injectable)(),
-  _ts_param2(0, (0, import_common3.Inject)(DRIZZLE_DB_TOKEN)),
-  _ts_metadata2("design:type", Function),
-  _ts_metadata2("design:paramtypes", [
+DrizzleAuditQueryAdapter = _ts_decorate4([
+  (0, import_common4.Injectable)(),
+  _ts_param3(0, (0, import_common4.Inject)(DRIZZLE_DB_TOKEN)),
+  _ts_metadata3("design:type", Function),
+  _ts_metadata3("design:paramtypes", [
     typeof DrizzleClient === "undefined" ? Object : DrizzleClient
   ])
 ], DrizzleAuditQueryAdapter);
 function toActorTagCondition(actorTag) {
   if (!actorTag) return void 0;
   if (actorTag.endsWith("*")) {
-    return (0, import_drizzle_orm.like)(auditLogs.actorTag, `${escapeLikePattern(actorTag.slice(0, -1))}%`);
+    return (0, import_drizzle_orm2.like)(auditLogs.actorTag, `${escapeLikePattern(actorTag.slice(0, -1))}%`);
   }
-  return (0, import_drizzle_orm.eq)(auditLogs.actorTag, actorTag);
+  return (0, import_drizzle_orm2.eq)(auditLogs.actorTag, actorTag);
 }
 __name(toActorTagCondition, "toActorTagCondition");
 function toAuditEntry(row) {
@@ -425,25 +833,25 @@ function toAuditEntry(row) {
 __name(toAuditEntry, "toAuditEntry");
 
 // src/drizzle-audit-stats.adapter.ts
-var import_common4 = require("@nestjs/common");
-var import_drizzle_orm2 = require("drizzle-orm");
-function _ts_decorate4(decorators, target, key, desc4) {
-  var c = arguments.length, r = c < 3 ? target : desc4 === null ? desc4 = Object.getOwnPropertyDescriptor(target, key) : desc4, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc4);
+var import_common5 = require("@nestjs/common");
+var import_drizzle_orm3 = require("drizzle-orm");
+function _ts_decorate5(decorators, target, key, desc10) {
+  var c = arguments.length, r = c < 3 ? target : desc10 === null ? desc10 = Object.getOwnPropertyDescriptor(target, key) : desc10, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc10);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate4, "_ts_decorate");
-function _ts_metadata3(k, v) {
+__name(_ts_decorate5, "_ts_decorate");
+function _ts_metadata4(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata3, "_ts_metadata");
-function _ts_param3(paramIndex, decorator) {
+__name(_ts_metadata4, "_ts_metadata");
+function _ts_param4(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param3, "_ts_param");
+__name(_ts_param4, "_ts_param");
 var DrizzleAuditStatsAdapter = class {
   static {
     __name(this, "DrizzleAuditStatsAdapter");
@@ -454,40 +862,40 @@ var DrizzleAuditStatsAdapter = class {
   }
   async countSince(since) {
     const rows = await this.db.select({
-      value: (0, import_drizzle_orm2.count)()
-    }).from(auditLogs).where((0, import_drizzle_orm2.gte)(auditLogs.createdAt, since));
+      value: (0, import_drizzle_orm3.count)()
+    }).from(auditLogs).where((0, import_drizzle_orm3.gte)(auditLogs.createdAt, since));
     return rows[0]?.value ?? 0;
   }
 };
-DrizzleAuditStatsAdapter = _ts_decorate4([
-  (0, import_common4.Injectable)(),
-  _ts_param3(0, (0, import_common4.Inject)(DRIZZLE_DB_TOKEN)),
-  _ts_metadata3("design:type", Function),
-  _ts_metadata3("design:paramtypes", [
+DrizzleAuditStatsAdapter = _ts_decorate5([
+  (0, import_common5.Injectable)(),
+  _ts_param4(0, (0, import_common5.Inject)(DRIZZLE_DB_TOKEN)),
+  _ts_metadata4("design:type", Function),
+  _ts_metadata4("design:paramtypes", [
     typeof DrizzleClient === "undefined" ? Object : DrizzleClient
   ])
 ], DrizzleAuditStatsAdapter);
 
 // src/drizzle-mfa.adapter.ts
-var import_common5 = require("@nestjs/common");
-var import_drizzle_orm3 = require("drizzle-orm");
-function _ts_decorate5(decorators, target, key, desc4) {
-  var c = arguments.length, r = c < 3 ? target : desc4 === null ? desc4 = Object.getOwnPropertyDescriptor(target, key) : desc4, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc4);
+var import_common6 = require("@nestjs/common");
+var import_drizzle_orm4 = require("drizzle-orm");
+function _ts_decorate6(decorators, target, key, desc10) {
+  var c = arguments.length, r = c < 3 ? target : desc10 === null ? desc10 = Object.getOwnPropertyDescriptor(target, key) : desc10, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc10);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate5, "_ts_decorate");
-function _ts_metadata4(k, v) {
+__name(_ts_decorate6, "_ts_decorate");
+function _ts_metadata5(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata4, "_ts_metadata");
-function _ts_param4(paramIndex, decorator) {
+__name(_ts_metadata5, "_ts_metadata");
+function _ts_param5(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param4, "_ts_param");
+__name(_ts_param5, "_ts_param");
 var DrizzleMfaAdapter = class {
   static {
     __name(this, "DrizzleMfaAdapter");
@@ -497,7 +905,7 @@ var DrizzleMfaAdapter = class {
     this.db = db;
   }
   async getSecret(userId) {
-    const rows = await this.db.select().from(superAdminMfa).where((0, import_drizzle_orm3.eq)(superAdminMfa.userId, userId)).limit(1);
+    const rows = await this.db.select().from(superAdminMfa).where((0, import_drizzle_orm4.eq)(superAdminMfa.userId, userId)).limit(1);
     return rows[0]?.secret ?? null;
   }
   async setSecret(userId, secret) {
@@ -517,41 +925,41 @@ var DrizzleMfaAdapter = class {
     });
   }
   async isEnabled(userId) {
-    const rows = await this.db.select().from(superAdminMfa).where((0, import_drizzle_orm3.eq)(superAdminMfa.userId, userId)).limit(1);
+    const rows = await this.db.select().from(superAdminMfa).where((0, import_drizzle_orm4.eq)(superAdminMfa.userId, userId)).limit(1);
     const row = rows[0];
     return !!row?.secret && !!row?.enabledAt;
   }
 };
-DrizzleMfaAdapter = _ts_decorate5([
-  (0, import_common5.Injectable)(),
-  _ts_param4(0, (0, import_common5.Inject)(DRIZZLE_DB_TOKEN)),
-  _ts_metadata4("design:type", Function),
-  _ts_metadata4("design:paramtypes", [
+DrizzleMfaAdapter = _ts_decorate6([
+  (0, import_common6.Injectable)(),
+  _ts_param5(0, (0, import_common6.Inject)(DRIZZLE_DB_TOKEN)),
+  _ts_metadata5("design:type", Function),
+  _ts_metadata5("design:paramtypes", [
     typeof DrizzleClient === "undefined" ? Object : DrizzleClient
   ])
 ], DrizzleMfaAdapter);
 
 // src/drizzle-plan-catalog-import-sink.adapter.ts
-var import_node_crypto2 = require("node:crypto");
-var import_common6 = require("@nestjs/common");
-var import_drizzle_orm4 = require("drizzle-orm");
-function _ts_decorate6(decorators, target, key, desc4) {
-  var c = arguments.length, r = c < 3 ? target : desc4 === null ? desc4 = Object.getOwnPropertyDescriptor(target, key) : desc4, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc4);
+var import_node_crypto3 = require("node:crypto");
+var import_common7 = require("@nestjs/common");
+var import_drizzle_orm5 = require("drizzle-orm");
+function _ts_decorate7(decorators, target, key, desc10) {
+  var c = arguments.length, r = c < 3 ? target : desc10 === null ? desc10 = Object.getOwnPropertyDescriptor(target, key) : desc10, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc10);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate6, "_ts_decorate");
-function _ts_metadata5(k, v) {
+__name(_ts_decorate7, "_ts_decorate");
+function _ts_metadata6(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata5, "_ts_metadata");
-function _ts_param5(paramIndex, decorator) {
+__name(_ts_metadata6, "_ts_metadata");
+function _ts_param6(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param5, "_ts_param");
+__name(_ts_param6, "_ts_param");
 var DrizzlePlanCatalogImportSink = class {
   static {
     __name(this, "DrizzlePlanCatalogImportSink");
@@ -563,14 +971,13 @@ var DrizzlePlanCatalogImportSink = class {
   async upsertPlan(input) {
     const existing = await this.db.select({
       id: plans.id
-    }).from(plans).where((0, import_drizzle_orm4.and)((0, import_drizzle_orm4.eq)(plans.projectKey, input.projectKey), (0, import_drizzle_orm4.eq)(plans.planKey, input.planKey))).limit(1);
+    }).from(plans).where((0, import_drizzle_orm5.eq)(plans.planKey, input.planKey)).limit(1);
     if (existing[0]) return {
       created: false,
       skipReason: "exists"
     };
     await this.db.insert(plans).values({
-      id: (0, import_node_crypto2.randomUUID)(),
-      projectKey: input.projectKey,
+      id: (0, import_node_crypto3.randomUUID)(),
       planKey: input.planKey,
       label: input.label,
       description: input.description ?? null,
@@ -584,7 +991,7 @@ var DrizzlePlanCatalogImportSink = class {
   async upsertPlanVersion(input) {
     const existing = await this.db.select({
       id: planVersions.id
-    }).from(planVersions).where((0, import_drizzle_orm4.and)((0, import_drizzle_orm4.eq)(planVersions.planId, input.planKey), (0, import_drizzle_orm4.eq)(planVersions.version, input.version))).limit(1);
+    }).from(planVersions).where((0, import_drizzle_orm5.and)((0, import_drizzle_orm5.eq)(planVersions.planId, input.planKey), (0, import_drizzle_orm5.eq)(planVersions.version, input.version))).limit(1);
     if (existing[0]) return {
       created: false,
       skipReason: "exists"
@@ -594,10 +1001,10 @@ var DrizzlePlanCatalogImportSink = class {
       await this.db.update(planVersions).set({
         supersededAt: now,
         updatedAt: now
-      }).where((0, import_drizzle_orm4.and)((0, import_drizzle_orm4.eq)(planVersions.planId, input.planKey), (0, import_drizzle_orm4.isNotNull)(planVersions.publishedAt), (0, import_drizzle_orm4.isNull)(planVersions.supersededAt), (0, import_drizzle_orm4.lt)(planVersions.version, input.version)));
+      }).where((0, import_drizzle_orm5.and)((0, import_drizzle_orm5.eq)(planVersions.planId, input.planKey), (0, import_drizzle_orm5.isNotNull)(planVersions.publishedAt), (0, import_drizzle_orm5.isNull)(planVersions.supersededAt), (0, import_drizzle_orm5.lt)(planVersions.version, input.version)));
     }
     await this.db.insert(planVersions).values({
-      id: (0, import_node_crypto2.randomUUID)(),
+      id: (0, import_node_crypto3.randomUUID)(),
       planId: input.planKey,
       version: input.version,
       features: input.features,
@@ -616,14 +1023,13 @@ var DrizzlePlanCatalogImportSink = class {
   async upsertFeatureCatalogEntry(input) {
     const existing = await this.db.select({
       id: featureCatalogEntries.id
-    }).from(featureCatalogEntries).where((0, import_drizzle_orm4.and)((0, import_drizzle_orm4.eq)(featureCatalogEntries.projectKey, input.projectKey), (0, import_drizzle_orm4.eq)(featureCatalogEntries.featureKey, input.featureKey))).limit(1);
+    }).from(featureCatalogEntries).where((0, import_drizzle_orm5.and)((0, import_drizzle_orm5.eq)(featureCatalogEntries.featureKey, input.featureKey))).limit(1);
     if (existing[0]) return {
       created: false,
       skipReason: "exists"
     };
     await this.db.insert(featureCatalogEntries).values({
-      id: (0, import_node_crypto2.randomUUID)(),
-      projectKey: input.projectKey,
+      id: (0, import_node_crypto3.randomUUID)(),
       featureKey: input.featureKey,
       label: input.label ?? input.featureKey,
       icon: input.icon ?? null,
@@ -637,35 +1043,40 @@ var DrizzlePlanCatalogImportSink = class {
     };
   }
 };
-DrizzlePlanCatalogImportSink = _ts_decorate6([
-  (0, import_common6.Injectable)(),
-  _ts_param5(0, (0, import_common6.Inject)(DRIZZLE_DB_TOKEN)),
-  _ts_metadata5("design:type", Function),
-  _ts_metadata5("design:paramtypes", [
+DrizzlePlanCatalogImportSink = _ts_decorate7([
+  (0, import_common7.Injectable)(),
+  _ts_param6(0, (0, import_common7.Inject)(DRIZZLE_DB_TOKEN)),
+  _ts_metadata6("design:type", Function),
+  _ts_metadata6("design:paramtypes", [
     typeof DrizzleClient === "undefined" ? Object : DrizzleClient
   ])
 ], DrizzlePlanCatalogImportSink);
 
 // src/drizzle-plan-catalog-read-sink.adapter.ts
-var import_common7 = require("@nestjs/common");
-var import_drizzle_orm5 = require("drizzle-orm");
-function _ts_decorate7(decorators, target, key, desc4) {
-  var c = arguments.length, r = c < 3 ? target : desc4 === null ? desc4 = Object.getOwnPropertyDescriptor(target, key) : desc4, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc4);
+var import_common8 = require("@nestjs/common");
+var import_drizzle_orm6 = require("drizzle-orm");
+var import_core2 = require("@saasicat/core");
+function _ts_decorate8(decorators, target, key, desc10) {
+  var c = arguments.length, r = c < 3 ? target : desc10 === null ? desc10 = Object.getOwnPropertyDescriptor(target, key) : desc10, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc10);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate7, "_ts_decorate");
-function _ts_metadata6(k, v) {
+__name(_ts_decorate8, "_ts_decorate");
+function _ts_metadata7(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata6, "_ts_metadata");
-function _ts_param6(paramIndex, decorator) {
+__name(_ts_metadata7, "_ts_metadata");
+function _ts_param7(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param6, "_ts_param");
+__name(_ts_param7, "_ts_param");
+var CATALOG_VERSION_FIELDS = {
+  validityWindows: false,
+  endsAt: false
+};
 var DrizzlePlanCatalogReadSink = class {
   static {
     __name(this, "DrizzlePlanCatalogReadSink");
@@ -674,70 +1085,29 @@ var DrizzlePlanCatalogReadSink = class {
   constructor(db) {
     this.db = db;
   }
-  async loadSnapshot(projectKey) {
-    const planRows = await this.db.select().from(plans).where((0, import_drizzle_orm5.and)((0, import_drizzle_orm5.eq)(plans.projectKey, projectKey), (0, import_drizzle_orm5.isNull)(plans.deletedAt))).orderBy((0, import_drizzle_orm5.asc)(plans.sortOrder));
+  async loadSnapshot() {
+    const planRows = await this.db.select().from(plans).where((0, import_drizzle_orm6.isNull)(plans.deletedAt)).orderBy((0, import_drizzle_orm6.asc)(plans.sortOrder));
     const planKeys = planRows.map((plan) => plan.planKey);
-    const liveVersionRows = planKeys.length === 0 ? [] : await this.db.select().from(planVersions).where((0, import_drizzle_orm5.and)((0, import_drizzle_orm5.inArray)(planVersions.planId, planKeys), (0, import_drizzle_orm5.isNotNull)(planVersions.publishedAt), (0, import_drizzle_orm5.isNull)(planVersions.supersededAt)));
-    const featureRows = await this.db.select().from(featureCatalogEntries).where((0, import_drizzle_orm5.and)((0, import_drizzle_orm5.eq)(featureCatalogEntries.projectKey, projectKey), (0, import_drizzle_orm5.isNull)(featureCatalogEntries.deletedAt))).orderBy((0, import_drizzle_orm5.asc)(featureCatalogEntries.sortOrder));
+    const liveVersionRows = planKeys.length === 0 ? [] : await this.db.select().from(planVersions).where((0, import_drizzle_orm6.and)((0, import_drizzle_orm6.inArray)(planVersions.planId, planKeys), (0, import_drizzle_orm6.isNotNull)(planVersions.publishedAt), (0, import_drizzle_orm6.isNull)(planVersions.supersededAt)));
+    const featureRows = await this.db.select().from(featureCatalogEntries).where((0, import_drizzle_orm6.isNull)(featureCatalogEntries.deletedAt)).orderBy((0, import_drizzle_orm6.asc)(featureCatalogEntries.sortOrder));
     return {
-      plans: planRows.map(toPlanRow),
-      livePlanVersions: liveVersionRows.map(toPlanVersionRow),
+      plans: planRows.map((row) => (0, import_core2.toPlanRow)(row)),
+      livePlanVersions: liveVersionRows.map((row) => (0, import_core2.toPlanVersionRow)(row, row.planId, CATALOG_VERSION_FIELDS)),
       featureEntries: featureRows.map(toFeatureCatalogEntryRow)
     };
   }
 };
-DrizzlePlanCatalogReadSink = _ts_decorate7([
-  (0, import_common7.Injectable)(),
-  _ts_param6(0, (0, import_common7.Inject)(DRIZZLE_DB_TOKEN)),
-  _ts_metadata6("design:type", Function),
-  _ts_metadata6("design:paramtypes", [
+DrizzlePlanCatalogReadSink = _ts_decorate8([
+  (0, import_common8.Injectable)(),
+  _ts_param7(0, (0, import_common8.Inject)(DRIZZLE_DB_TOKEN)),
+  _ts_metadata7("design:type", Function),
+  _ts_metadata7("design:paramtypes", [
     typeof DrizzleClient === "undefined" ? Object : DrizzleClient
   ])
 ], DrizzlePlanCatalogReadSink);
-function toPlanRow(row) {
-  return {
-    id: row.id,
-    projectKey: row.projectKey,
-    planKey: row.planKey,
-    label: row.label,
-    description: row.description,
-    icon: row.icon,
-    sortOrder: row.sortOrder,
-    createdAt: row.createdAt.toISOString(),
-    updatedAt: row.updatedAt.toISOString(),
-    deletedAt: row.deletedAt ? row.deletedAt.toISOString() : null
-  };
-}
-__name(toPlanRow, "toPlanRow");
-function toPlanVersionRow(row) {
-  return {
-    id: row.id,
-    planId: row.planId,
-    version: row.version,
-    baseVersionId: row.baseVersionId,
-    publishedAt: row.publishedAt ? row.publishedAt.toISOString() : null,
-    supersededAt: row.supersededAt ? row.supersededAt.toISOString() : null,
-    publishedChanges: row.publishedChanges ?? null,
-    changeNote: row.changeNote,
-    nonRegressive: row.nonRegressive,
-    validFrom: null,
-    validUntil: null,
-    createdByUserId: row.createdByUserId,
-    publishedByUserId: row.publishedByUserId,
-    createdAt: row.createdAt.toISOString(),
-    updatedAt: row.updatedAt.toISOString(),
-    features: toStringArray(row.features),
-    quotas: toQuotaMap(row.quotas),
-    monthlyNet: String(row.monthlyNet),
-    yearlyNet: String(row.yearlyNet),
-    marketed: row.marketed
-  };
-}
-__name(toPlanVersionRow, "toPlanVersionRow");
 function toFeatureCatalogEntryRow(row) {
   return {
     id: row.id,
-    projectKey: row.projectKey,
     featureKey: row.featureKey,
     label: row.label,
     description: row.description,
@@ -763,26 +1133,84 @@ function toFeatureCatalogEntryRow(row) {
 }
 __name(toFeatureCatalogEntryRow, "toFeatureCatalogEntryRow");
 
+// src/drizzle-payment-event-log.adapter.ts
+var import_node_crypto4 = require("node:crypto");
+var import_drizzle_orm7 = require("drizzle-orm");
+var import_common9 = require("@nestjs/common");
+function _ts_decorate9(decorators, target, key, desc10) {
+  var c = arguments.length, r = c < 3 ? target : desc10 === null ? desc10 = Object.getOwnPropertyDescriptor(target, key) : desc10, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc10);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate9, "_ts_decorate");
+function _ts_metadata8(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata8, "_ts_metadata");
+function _ts_param8(paramIndex, decorator) {
+  return function(target, key) {
+    decorator(target, key, paramIndex);
+  };
+}
+__name(_ts_param8, "_ts_param");
+var DrizzlePaymentEventLog = class {
+  static {
+    __name(this, "DrizzlePaymentEventLog");
+  }
+  db;
+  constructor(db) {
+    this.db = db;
+  }
+  async claim(claim, tx) {
+    const inserted = await resolveDb(this.db, tx).insert(paymentEventLog).values({
+      id: (0, import_node_crypto4.randomUUID)(),
+      gatewayAccount: claim.gatewayAccount,
+      eventId: claim.eventId,
+      provider: claim.provider,
+      sessionId: claim.sessionId,
+      status: claim.kind,
+      payload: claim.summary
+    }).onConflictDoNothing().returning({
+      id: paymentEventLog.id
+    });
+    return inserted.length === 1;
+  }
+  async releaseSession(gatewayAccount, eventId, tx) {
+    await resolveDb(this.db, tx).update(paymentEventLog).set({
+      sessionId: null
+    }).where((0, import_drizzle_orm7.and)((0, import_drizzle_orm7.eq)(paymentEventLog.gatewayAccount, gatewayAccount), (0, import_drizzle_orm7.eq)(paymentEventLog.eventId, eventId)));
+  }
+};
+DrizzlePaymentEventLog = _ts_decorate9([
+  (0, import_common9.Injectable)(),
+  _ts_param8(0, (0, import_common9.Inject)(DRIZZLE_DB_TOKEN)),
+  _ts_metadata8("design:type", Function),
+  _ts_metadata8("design:paramtypes", [
+    typeof DrizzleClient === "undefined" ? Object : DrizzleClient
+  ])
+], DrizzlePaymentEventLog);
+
 // src/drizzle-plan-version.repository.ts
-var import_common8 = require("@nestjs/common");
-var import_drizzle_orm6 = require("drizzle-orm");
-function _ts_decorate8(decorators, target, key, desc4) {
-  var c = arguments.length, r = c < 3 ? target : desc4 === null ? desc4 = Object.getOwnPropertyDescriptor(target, key) : desc4, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc4);
+var import_common10 = require("@nestjs/common");
+var import_drizzle_orm8 = require("drizzle-orm");
+function _ts_decorate10(decorators, target, key, desc10) {
+  var c = arguments.length, r = c < 3 ? target : desc10 === null ? desc10 = Object.getOwnPropertyDescriptor(target, key) : desc10, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc10);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate8, "_ts_decorate");
-function _ts_metadata7(k, v) {
+__name(_ts_decorate10, "_ts_decorate");
+function _ts_metadata9(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata7, "_ts_metadata");
-function _ts_param7(paramIndex, decorator) {
+__name(_ts_metadata9, "_ts_metadata");
+function _ts_param9(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param7, "_ts_param");
+__name(_ts_param9, "_ts_param");
 var DrizzlePlanVersionRepository = class {
   static {
     __name(this, "DrizzlePlanVersionRepository");
@@ -793,7 +1221,7 @@ var DrizzlePlanVersionRepository = class {
   }
   async findLatestLive(planId, tx) {
     const db = resolveDb(this.db, tx);
-    const rows = await db.select().from(planVersions).where((0, import_drizzle_orm6.and)((0, import_drizzle_orm6.eq)(planVersions.planId, planId), (0, import_drizzle_orm6.isNotNull)(planVersions.publishedAt), (0, import_drizzle_orm6.isNull)(planVersions.supersededAt))).orderBy((0, import_drizzle_orm6.desc)(planVersions.version)).limit(1);
+    const rows = await db.select().from(planVersions).where((0, import_drizzle_orm8.and)((0, import_drizzle_orm8.eq)(planVersions.planId, planId), (0, import_drizzle_orm8.isNotNull)(planVersions.publishedAt), (0, import_drizzle_orm8.isNull)(planVersions.supersededAt))).orderBy((0, import_drizzle_orm8.desc)(planVersions.version)).limit(1);
     const row = rows[0];
     if (!row) return null;
     return {
@@ -803,319 +1231,1992 @@ var DrizzlePlanVersionRepository = class {
     };
   }
 };
-DrizzlePlanVersionRepository = _ts_decorate8([
-  (0, import_common8.Injectable)(),
-  _ts_param7(0, (0, import_common8.Inject)(DRIZZLE_DB_TOKEN)),
-  _ts_metadata7("design:type", Function),
-  _ts_metadata7("design:paramtypes", [
+DrizzlePlanVersionRepository = _ts_decorate10([
+  (0, import_common10.Injectable)(),
+  _ts_param9(0, (0, import_common10.Inject)(DRIZZLE_DB_TOKEN)),
+  _ts_metadata9("design:type", Function),
+  _ts_metadata9("design:paramtypes", [
     typeof DrizzleClient === "undefined" ? Object : DrizzleClient
   ])
 ], DrizzlePlanVersionRepository);
 
-// src/drizzle-promo-code-redemption.repository.ts
-var import_node_crypto3 = require("node:crypto");
-var import_common9 = require("@nestjs/common");
-var import_drizzle_orm7 = require("drizzle-orm");
-function _ts_decorate9(decorators, target, key, desc4) {
-  var c = arguments.length, r = c < 3 ? target : desc4 === null ? desc4 = Object.getOwnPropertyDescriptor(target, key) : desc4, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc4);
+// src/drizzle-promo-code-hold.repository.ts
+var import_node_crypto6 = require("node:crypto");
+var import_common12 = require("@nestjs/common");
+var import_drizzle_orm10 = require("drizzle-orm");
+
+// src/drizzle-promo-code.repository.ts
+var import_node_crypto5 = require("node:crypto");
+var import_common11 = require("@nestjs/common");
+var import_drizzle_orm9 = require("drizzle-orm");
+function _ts_decorate11(decorators, target, key, desc10) {
+  var c = arguments.length, r = c < 3 ? target : desc10 === null ? desc10 = Object.getOwnPropertyDescriptor(target, key) : desc10, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc10);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate9, "_ts_decorate");
-function _ts_metadata8(k, v) {
+__name(_ts_decorate11, "_ts_decorate");
+function _ts_metadata10(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata8, "_ts_metadata");
-function _ts_param8(paramIndex, decorator) {
+__name(_ts_metadata10, "_ts_metadata");
+function _ts_param10(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param8, "_ts_param");
-var DrizzlePromoCodeRedemptionRepository = class {
+__name(_ts_param10, "_ts_param");
+var DrizzlePromoCodeRepository = class {
   static {
-    __name(this, "DrizzlePromoCodeRedemptionRepository");
+    __name(this, "DrizzlePromoCodeRepository");
   }
   db;
   constructor(db) {
     this.db = db;
   }
-  async findBySubscription(subscriptionId, tx) {
-    const db = resolveDb(this.db, tx);
-    const rows = await db.select().from(promoCodeRedemptions).where((0, import_drizzle_orm7.eq)(promoCodeRedemptions.subscriptionId, subscriptionId)).limit(1);
+  async findById(id) {
+    const rows = await this.db.select().from(promoCodes).where((0, import_drizzle_orm9.eq)(promoCodes.id, id)).limit(1);
     const row = rows[0];
     return row ? toRecord(row) : null;
   }
-  async create(data, tx) {
+  async findByCode(code, tx) {
     const db = resolveDb(this.db, tx);
-    const rows = await db.insert(promoCodeRedemptions).values({
-      id: (0, import_node_crypto3.randomUUID)(),
-      promoCodeId: data.promoCodeId,
-      subscriptionId: data.subscriptionId,
-      tenantId: data.tenantId,
-      appliedValueType: data.appliedValueType,
-      appliedValue: data.appliedValue,
-      appliedDurationType: data.appliedDurationType,
-      appliedDurationValue: data.appliedDurationValue,
-      startsAt: data.startsAt,
-      endsAt: data.endsAt
+    const rows = await db.select().from(promoCodes).where((0, import_drizzle_orm9.eq)(promoCodes.code, normalizeCode(code))).limit(1);
+    const row = rows[0];
+    if (!row || row.deletedAt) return null;
+    return toRecord(row);
+  }
+  async findMany(filter) {
+    const conditions = [
+      (0, import_drizzle_orm9.isNull)(promoCodes.deletedAt),
+      filter.status ? (0, import_drizzle_orm9.eq)(promoCodes.status, filter.status) : void 0,
+      filter.campaignTag ? (0, import_drizzle_orm9.eq)(promoCodes.campaignTag, filter.campaignTag) : void 0,
+      filter.search ? (0, import_drizzle_orm9.like)(promoCodes.code, `%${escapeLikePattern(normalizeCode(filter.search))}%`) : void 0
+    ];
+    const rows = await this.db.select().from(promoCodes).where((0, import_drizzle_orm9.and)(...conditions)).orderBy(import_drizzle_orm9.sql`${promoCodes.createdAt} DESC`);
+    return rows.map(toRecord);
+  }
+  async create(data) {
+    const rows = await this.db.insert(promoCodes).values({
+      id: (0, import_node_crypto5.randomUUID)(),
+      code: normalizeCode(data.code),
+      valueType: data.valueType,
+      value: data.value.toFixed(2),
+      durationType: data.durationType,
+      durationValue: data.durationValue ?? null,
+      validFrom: data.validFrom ?? null,
+      validUntil: data.validUntil ?? null,
+      maxRedemptions: data.maxRedemptions ?? null,
+      appliesToPlans: data.appliesToPlans ?? [],
+      appliesToBilling: data.appliesToBilling ?? null,
+      firstTimeCustomersOnly: data.firstTimeCustomersOnly ?? true,
+      minimumPlanAmountGross: data.minimumPlanAmountGross?.toFixed(2) ?? null,
+      allowZeroInvoice: data.allowZeroInvoice ?? false,
+      description: data.description ?? null,
+      campaignTag: data.campaignTag ?? null,
+      revenueDeductionAccount: data.revenueDeductionAccount ?? null,
+      createdById: data.createdById,
+      updatedAt: /* @__PURE__ */ new Date()
     }).returning();
     return toRecord(rows[0]);
   }
-  async setReversed(id, tx) {
-    const db = resolveDb(this.db, tx);
-    const rows = await db.update(promoCodeRedemptions).set({
-      status: "REVERSED",
-      reversedAt: /* @__PURE__ */ new Date()
-    }).where((0, import_drizzle_orm7.eq)(promoCodeRedemptions.id, id)).returning();
-    const row = rows[0];
-    if (!row) {
-      throw new Error(`PromoCodeRedemption ${id} not found.`);
+  async update(id, data) {
+    const rows = await this.db.update(promoCodes).set({
+      status: data.status,
+      description: data.description,
+      validUntil: data.validUntil,
+      maxRedemptions: data.maxRedemptions,
+      updatedAt: /* @__PURE__ */ new Date()
+    }).where((0, import_drizzle_orm9.eq)(promoCodes.id, id)).returning();
+    const row = rows[0];
+    if (!row) {
+      throw new Error(`PromoCode ${id} not found.`);
+    }
+    return toRecord(row);
+  }
+  async softDelete(id) {
+    await this.db.update(promoCodes).set({
+      deletedAt: /* @__PURE__ */ new Date(),
+      updatedAt: /* @__PURE__ */ new Date()
+    }).where((0, import_drizzle_orm9.eq)(promoCodes.id, id));
+  }
+  async claimSlot(id, tx) {
+    const db = resolveDb(this.db, tx);
+    const claimed = await db.update(promoCodes).set({
+      redemptionsCount: import_drizzle_orm9.sql`${promoCodes.redemptionsCount} + 1`,
+      updatedAt: /* @__PURE__ */ new Date()
+    }).where(hasFreeSlot(id)).returning({
+      id: promoCodes.id
+    });
+    return claimed.length === 1;
+  }
+  async markExhaustedIfFull(id, tx) {
+    const db = resolveDb(this.db, tx);
+    await db.update(promoCodes).set({
+      status: "EXHAUSTED",
+      updatedAt: /* @__PURE__ */ new Date()
+    }).where((0, import_drizzle_orm9.and)((0, import_drizzle_orm9.eq)(promoCodes.id, id), (0, import_drizzle_orm9.eq)(promoCodes.status, "ACTIVE"), (0, import_drizzle_orm9.isNotNull)(promoCodes.maxRedemptions), (0, import_drizzle_orm9.gte)(promoCodes.redemptionsCount, promoCodes.maxRedemptions)));
+  }
+  async releaseSlot(id, tx) {
+    const db = resolveDb(this.db, tx);
+    await db.update(promoCodes).set({
+      redemptionsCount: import_drizzle_orm9.sql`GREATEST(${promoCodes.redemptionsCount} - 1, 0)`,
+      status: import_drizzle_orm9.sql`CASE WHEN ${promoCodes.status} = 'EXHAUSTED' THEN 'ACTIVE' ELSE ${promoCodes.status} END`,
+      updatedAt: /* @__PURE__ */ new Date()
+    }).where((0, import_drizzle_orm9.eq)(promoCodes.id, id));
+  }
+  async expireDueCodes(now) {
+    const expired = await this.db.update(promoCodes).set({
+      status: "EXPIRED",
+      updatedAt: /* @__PURE__ */ new Date()
+    }).where((0, import_drizzle_orm9.and)((0, import_drizzle_orm9.inArray)(promoCodes.status, [
+      "ACTIVE",
+      "PAUSED"
+    ]), (0, import_drizzle_orm9.lt)(promoCodes.validUntil, now))).returning({
+      id: promoCodes.id
+    });
+    return expired.length;
+  }
+};
+DrizzlePromoCodeRepository = _ts_decorate11([
+  (0, import_common11.Injectable)(),
+  _ts_param10(0, (0, import_common11.Inject)(DRIZZLE_DB_TOKEN)),
+  _ts_metadata10("design:type", Function),
+  _ts_metadata10("design:paramtypes", [
+    typeof DrizzleClient === "undefined" ? Object : DrizzleClient
+  ])
+], DrizzlePromoCodeRepository);
+function hasFreeSlot(id) {
+  return (0, import_drizzle_orm9.and)((0, import_drizzle_orm9.eq)(promoCodes.id, id), (0, import_drizzle_orm9.eq)(promoCodes.status, "ACTIVE"), (0, import_drizzle_orm9.isNull)(promoCodes.deletedAt), (0, import_drizzle_orm9.or)((0, import_drizzle_orm9.isNull)(promoCodes.maxRedemptions), import_drizzle_orm9.sql`${promoCodes.redemptionsCount} + ${promoCodes.heldCount} < ${promoCodes.maxRedemptions}`));
+}
+__name(hasFreeSlot, "hasFreeSlot");
+function normalizeCode(code) {
+  return code.trim().toUpperCase();
+}
+__name(normalizeCode, "normalizeCode");
+function toRecord(row) {
+  return {
+    id: row.id,
+    code: row.code,
+    valueType: row.valueType,
+    value: String(row.value),
+    durationType: row.durationType,
+    durationValue: row.durationValue,
+    validFrom: row.validFrom,
+    validUntil: row.validUntil,
+    maxRedemptions: row.maxRedemptions,
+    redemptionsCount: row.redemptionsCount,
+    heldCount: row.heldCount,
+    appliesToPlans: row.appliesToPlans ?? [],
+    appliesToBilling: row.appliesToBilling ?? null,
+    firstTimeCustomersOnly: row.firstTimeCustomersOnly,
+    minimumPlanAmountGross: row.minimumPlanAmountGross === null ? null : String(row.minimumPlanAmountGross),
+    allowZeroInvoice: row.allowZeroInvoice,
+    status: row.status,
+    description: row.description,
+    campaignTag: row.campaignTag,
+    revenueDeductionAccount: row.revenueDeductionAccount,
+    createdById: row.createdById,
+    createdAt: row.createdAt,
+    updatedAt: row.updatedAt,
+    deletedAt: row.deletedAt
+  };
+}
+__name(toRecord, "toRecord");
+
+// src/drizzle-promo-code-hold.repository.ts
+function _ts_decorate12(decorators, target, key, desc10) {
+  var c = arguments.length, r = c < 3 ? target : desc10 === null ? desc10 = Object.getOwnPropertyDescriptor(target, key) : desc10, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc10);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate12, "_ts_decorate");
+function _ts_metadata11(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata11, "_ts_metadata");
+function _ts_param11(paramIndex, decorator) {
+  return function(target, key) {
+    decorator(target, key, paramIndex);
+  };
+}
+__name(_ts_param11, "_ts_param");
+var HOLD_FIELDS = {
+  id: promoCodeHolds.id,
+  promoCodeId: promoCodeHolds.promoCodeId,
+  checkoutOfferId: promoCodeHolds.checkoutOfferId,
+  expiresAt: promoCodeHolds.expiresAt,
+  createdAt: promoCodeHolds.createdAt
+};
+var CURRENT_TRANSACTION = import_drizzle_orm10.sql`txid_current()`;
+var atExpiry = /* @__PURE__ */ __name((expiresAt) => import_drizzle_orm10.sql.param(expiresAt, promoCodeHolds.expiresAt), "atExpiry");
+var DrizzlePromoCodeHoldRepository = class {
+  static {
+    __name(this, "DrizzlePromoCodeHoldRepository");
+  }
+  db;
+  constructor(db) {
+    this.db = db;
+  }
+  async findByCheckoutOffer(checkoutOfferId, tx) {
+    const rows = await resolveDb(this.db, tx).select(HOLD_FIELDS).from(promoCodeHolds).where((0, import_drizzle_orm10.eq)(promoCodeHolds.checkoutOfferId, checkoutOfferId)).limit(1);
+    return rows[0] ?? null;
+  }
+  async take(hold) {
+    return this.onTransaction(void 0, async (db) => {
+      const code = await db.select({
+        id: promoCodes.id
+      }).from(promoCodes).where((0, import_drizzle_orm10.eq)(promoCodes.id, hold.promoCodeId)).for("update");
+      if (code.length === 0) return {
+        outcome: "no-slot"
+      };
+      const held = await db.select({
+        id: promoCodeHolds.id
+      }).from(promoCodeHolds).where((0, import_drizzle_orm10.eq)(promoCodeHolds.checkoutOfferId, hold.checkoutOfferId)).limit(1);
+      if (held.length > 0) return {
+        outcome: "offer-holds-one"
+      };
+      const counted = await db.update(promoCodes).set({
+        heldCount: import_drizzle_orm10.sql`${promoCodes.heldCount} + 1`,
+        updatedAt: /* @__PURE__ */ new Date()
+      }).where(hasFreeSlot(hold.promoCodeId)).returning({
+        id: promoCodes.id
+      });
+      if (counted.length === 0) return {
+        outcome: "no-slot"
+      };
+      const [created] = await db.insert(promoCodeHolds).values({
+        id: (0, import_node_crypto6.randomUUID)(),
+        ...hold
+      }).returning(HOLD_FIELDS);
+      return {
+        outcome: "taken",
+        hold: created
+      };
+    });
+  }
+  async extend(checkoutOfferId, promoCodeId, expiresAt) {
+    const extended = await this.db.update(promoCodeHolds).set({
+      expiresAt: import_drizzle_orm10.sql`GREATEST(${promoCodeHolds.expiresAt}, ${atExpiry(expiresAt)})`
+    }).where((0, import_drizzle_orm10.and)((0, import_drizzle_orm10.eq)(promoCodeHolds.checkoutOfferId, checkoutOfferId), (0, import_drizzle_orm10.eq)(promoCodeHolds.promoCodeId, promoCodeId))).returning({
+      id: promoCodeHolds.id
+    });
+    return extended.length === 1;
+  }
+  async release(checkoutOfferId, tx) {
+    return this.releaseWhere((0, import_drizzle_orm10.eq)(promoCodeHolds.checkoutOfferId, checkoutOfferId), tx);
+  }
+  async releaseIfUnmoved(checkoutOfferId, expiresAt) {
+    return this.releaseWhere((0, import_drizzle_orm10.and)((0, import_drizzle_orm10.eq)(promoCodeHolds.checkoutOfferId, checkoutOfferId), (0, import_drizzle_orm10.eq)(promoCodeHolds.expiresAt, expiresAt)));
+  }
+  async handOver(checkoutOfferId, now, tx) {
+    const marked = await resolveDb(this.db, tx).update(promoCodeHolds).set({
+      handedOverTx: CURRENT_TRANSACTION
+    }).where((0, import_drizzle_orm10.and)((0, import_drizzle_orm10.eq)(promoCodeHolds.checkoutOfferId, checkoutOfferId), (0, import_drizzle_orm10.gt)(promoCodeHolds.expiresAt, now))).returning({
+      id: promoCodeHolds.id
+    });
+    return marked.length === 1;
+  }
+  async convertHandedOver(promoCodeId, tx) {
+    const db = resolveDb(this.db, tx);
+    const handedOver = await db.select({
+      id: promoCodeHolds.id
+    }).from(promoCodeHolds).where((0, import_drizzle_orm10.and)((0, import_drizzle_orm10.eq)(promoCodeHolds.promoCodeId, promoCodeId), (0, import_drizzle_orm10.eq)(promoCodeHolds.handedOverTx, CURRENT_TRANSACTION))).limit(1);
+    if (handedOver.length === 0) return false;
+    const gone = await db.delete(promoCodeHolds).where((0, import_drizzle_orm10.eq)(promoCodeHolds.id, handedOver[0].id)).returning({
+      promoCodeId: promoCodeHolds.promoCodeId
+    });
+    await giveBack(db, gone, {
+      redeemed: true
+    });
+    return gone.length === 1;
+  }
+  async expireDue(now, promoCodeId, tx) {
+    return this.onTransaction(tx, async (db) => {
+      const gone = await db.delete(promoCodeHolds).where((0, import_drizzle_orm10.and)((0, import_drizzle_orm10.lte)(promoCodeHolds.expiresAt, now), import_drizzle_orm10.sql`${promoCodeHolds.handedOverTx} IS DISTINCT FROM ${CURRENT_TRANSACTION}`, promoCodeId ? (0, import_drizzle_orm10.eq)(promoCodeHolds.promoCodeId, promoCodeId) : void 0)).returning({
+        promoCodeId: promoCodeHolds.promoCodeId
+      });
+      await giveBack(db, gone, {
+        redeemed: false
+      });
+      return gone.length;
+    });
+  }
+  /** Deletes the holds `where` matches and gives their slots back. */
+  releaseWhere(where, tx) {
+    return this.onTransaction(tx, async (db) => {
+      const gone = await db.delete(promoCodeHolds).where(where).returning({
+        promoCodeId: promoCodeHolds.promoCodeId
+      });
+      await giveBack(db, gone, {
+        redeemed: false
+      });
+      return gone.length === 1;
+    });
+  }
+  /** Runs `work` on a transaction of its own, a savepoint where the caller has one. */
+  onTransaction(tx, work) {
+    return resolveDb(this.db, tx).transaction((transaction) => work(transaction));
+  }
+};
+DrizzlePromoCodeHoldRepository = _ts_decorate12([
+  (0, import_common12.Injectable)(),
+  _ts_param11(0, (0, import_common12.Inject)(DRIZZLE_DB_TOKEN)),
+  _ts_metadata11("design:type", Function),
+  _ts_metadata11("design:paramtypes", [
+    typeof DrizzleClient === "undefined" ? Object : DrizzleClient
+  ])
+], DrizzlePromoCodeHoldRepository);
+async function giveBack(db, ended, { redeemed }) {
+  const perCode = /* @__PURE__ */ new Map();
+  for (const { promoCodeId } of ended) {
+    perCode.set(promoCodeId, (perCode.get(promoCodeId) ?? 0) + 1);
+  }
+  for (const promoCodeId of [
+    ...perCode.keys()
+  ].sort()) {
+    const count4 = perCode.get(promoCodeId) ?? 0;
+    await db.update(promoCodes).set({
+      heldCount: import_drizzle_orm10.sql`GREATEST(${promoCodes.heldCount} - ${count4}, 0)`,
+      ...redeemed ? {
+        redemptionsCount: import_drizzle_orm10.sql`${promoCodes.redemptionsCount} + ${count4}`
+      } : {},
+      updatedAt: /* @__PURE__ */ new Date()
+    }).where((0, import_drizzle_orm10.eq)(promoCodes.id, promoCodeId));
+  }
+}
+__name(giveBack, "giveBack");
+
+// src/drizzle-promo-code-redemption.repository.ts
+var import_node_crypto7 = require("node:crypto");
+var import_common13 = require("@nestjs/common");
+var import_drizzle_orm11 = require("drizzle-orm");
+function _ts_decorate13(decorators, target, key, desc10) {
+  var c = arguments.length, r = c < 3 ? target : desc10 === null ? desc10 = Object.getOwnPropertyDescriptor(target, key) : desc10, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc10);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate13, "_ts_decorate");
+function _ts_metadata12(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata12, "_ts_metadata");
+function _ts_param12(paramIndex, decorator) {
+  return function(target, key) {
+    decorator(target, key, paramIndex);
+  };
+}
+__name(_ts_param12, "_ts_param");
+var DrizzlePromoCodeRedemptionRepository = class {
+  static {
+    __name(this, "DrizzlePromoCodeRedemptionRepository");
+  }
+  db;
+  constructor(db) {
+    this.db = db;
+  }
+  async findBySubscription(subscriptionId, tx) {
+    const db = resolveDb(this.db, tx);
+    const rows = await db.select().from(promoCodeRedemptions).where((0, import_drizzle_orm11.eq)(promoCodeRedemptions.subscriptionId, subscriptionId)).limit(1);
+    const row = rows[0];
+    return row ? toRecord2(row) : null;
+  }
+  async create(data, tx) {
+    const db = resolveDb(this.db, tx);
+    const rows = await db.insert(promoCodeRedemptions).values({
+      id: (0, import_node_crypto7.randomUUID)(),
+      promoCodeId: data.promoCodeId,
+      subscriptionId: data.subscriptionId,
+      tenantId: data.tenantId,
+      appliedValueType: data.appliedValueType,
+      appliedValue: data.appliedValue,
+      appliedDurationType: data.appliedDurationType,
+      appliedDurationValue: data.appliedDurationValue,
+      startsAt: data.startsAt,
+      endsAt: data.endsAt
+    }).returning();
+    return toRecord2(rows[0]);
+  }
+  async setReversed(id, tx) {
+    const db = resolveDb(this.db, tx);
+    const rows = await db.update(promoCodeRedemptions).set({
+      status: "REVERSED",
+      reversedAt: /* @__PURE__ */ new Date()
+    }).where((0, import_drizzle_orm11.eq)(promoCodeRedemptions.id, id)).returning();
+    const row = rows[0];
+    if (!row) {
+      throw new Error(`PromoCodeRedemption ${id} not found.`);
+    }
+    return toRecord2(row);
+  }
+  async countByPromoCode(promoCodeId, status) {
+    const rows = await this.db.select({
+      id: promoCodeRedemptions.id
+    }).from(promoCodeRedemptions).where((0, import_drizzle_orm11.and)((0, import_drizzle_orm11.eq)(promoCodeRedemptions.promoCodeId, promoCodeId), status ? (0, import_drizzle_orm11.eq)(promoCodeRedemptions.status, status) : void 0));
+    return rows.length;
+  }
+  async listByPromoCode(promoCodeId) {
+    const rows = await this.db.select().from(promoCodeRedemptions).where((0, import_drizzle_orm11.eq)(promoCodeRedemptions.promoCodeId, promoCodeId)).orderBy((0, import_drizzle_orm11.desc)(promoCodeRedemptions.redeemedAt));
+    return rows.map(toRecord2);
+  }
+  async expireDueRedemptions(now) {
+    const expired = await this.db.update(promoCodeRedemptions).set({
+      status: "EXPIRED"
+    }).where((0, import_drizzle_orm11.and)((0, import_drizzle_orm11.eq)(promoCodeRedemptions.status, "ACTIVE"), (0, import_drizzle_orm11.lt)(promoCodeRedemptions.endsAt, now))).returning({
+      id: promoCodeRedemptions.id
+    });
+    return expired.length;
+  }
+};
+DrizzlePromoCodeRedemptionRepository = _ts_decorate13([
+  (0, import_common13.Injectable)(),
+  _ts_param12(0, (0, import_common13.Inject)(DRIZZLE_DB_TOKEN)),
+  _ts_metadata12("design:type", Function),
+  _ts_metadata12("design:paramtypes", [
+    typeof DrizzleClient === "undefined" ? Object : DrizzleClient
+  ])
+], DrizzlePromoCodeRedemptionRepository);
+function toRecord2(row) {
+  return {
+    id: row.id,
+    promoCodeId: row.promoCodeId,
+    subscriptionId: row.subscriptionId,
+    tenantId: row.tenantId,
+    appliedValueType: row.appliedValueType,
+    appliedValue: String(row.appliedValue),
+    appliedDurationType: row.appliedDurationType,
+    appliedDurationValue: row.appliedDurationValue,
+    startsAt: row.startsAt,
+    endsAt: row.endsAt,
+    status: row.status,
+    redeemedAt: row.redeemedAt,
+    reversedAt: row.reversedAt
+  };
+}
+__name(toRecord2, "toRecord");
+
+// src/drizzle-bundle.repository.ts
+var import_node_crypto8 = require("node:crypto");
+var import_common14 = require("@nestjs/common");
+var import_drizzle_orm12 = require("drizzle-orm");
+var import_core3 = require("@saasicat/core");
+function _ts_decorate14(decorators, target, key, desc10) {
+  var c = arguments.length, r = c < 3 ? target : desc10 === null ? desc10 = Object.getOwnPropertyDescriptor(target, key) : desc10, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc10);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate14, "_ts_decorate");
+function _ts_metadata13(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata13, "_ts_metadata");
+function _ts_param13(paramIndex, decorator) {
+  return function(target, key) {
+    decorator(target, key, paramIndex);
+  };
+}
+__name(_ts_param13, "_ts_param");
+var DrizzleBundleRepository = class {
+  static {
+    __name(this, "DrizzleBundleRepository");
+  }
+  db;
+  validityWindows;
+  constructor(db, options = {}) {
+    this.db = db;
+    this.validityWindows = options.validityWindows ?? false;
+    if (this.validityWindows) {
+      this.findActiveBundleVersion = (bundleId, asOf, tx) => this.activeVersionAt(bundleId, asOf ?? /* @__PURE__ */ new Date(), tx);
+    }
+  }
+  findActiveBundleVersion;
+  // ─── Stems ───
+  async list(filter) {
+    const excludeDeleted = filter.excludeDeleted ?? true;
+    const rows = await this.db.select().from(bundles).where(excludeDeleted ? (0, import_drizzle_orm12.isNull)(bundles.deletedAt) : void 0).orderBy((0, import_drizzle_orm12.asc)(bundles.sortOrder), (0, import_drizzle_orm12.asc)(bundles.bundleKey));
+    return rows.map(import_core3.toBundleStemRow);
+  }
+  async findById(bundleId) {
+    const rows = await this.db.select().from(bundles).where((0, import_drizzle_orm12.eq)(bundles.id, bundleId)).limit(1);
+    return rows[0] ? (0, import_core3.toBundleStemRow)(rows[0]) : null;
+  }
+  /**
+   * Whether this project already uses this bundle key — **including retired
+   * bundles**.
+   *
+   * Its one caller is the duplicate check in `createBundle`, and the question
+   * it asks is the database's: `bundles_bundleKey_key` is an
+   * unconditional unique index, so a soft-deleted bundle still occupies its
+   * key. Excluding retired rows here makes the check pass and the insert then
+   * fail on the constraint — a 500 where the service had
+   * `BUNDLE_ALREADY_EXISTS` ready.
+   *
+   * Two review rounds landed on this line from opposite sides, which is what
+   * finally settled it: there is no caller that wants the active-catalogue
+   * reading. `list` is that lookup, and it excludes retired rows by default.
+   */
+  async findByKey(bundleKey) {
+    const rows = await this.db.select().from(bundles).where((0, import_drizzle_orm12.eq)(bundles.bundleKey, bundleKey)).limit(1);
+    return rows[0] ? (0, import_core3.toBundleStemRow)(rows[0]) : null;
+  }
+  async create(data) {
+    const now = /* @__PURE__ */ new Date();
+    const rows = await this.db.insert(bundles).values({
+      id: (0, import_node_crypto8.randomUUID)(),
+      ...(0, import_core3.bundleStemDefaults)(data),
+      updatedAt: now
+    }).returning();
+    return (0, import_core3.toBundleStemRow)(rows[0]);
+  }
+  async update(bundleId, data) {
+    const patch = {
+      updatedAt: /* @__PURE__ */ new Date()
+    };
+    if (data.label !== void 0) patch.label = data.label;
+    if (data.description !== void 0) patch.description = data.description;
+    if (data.icon !== void 0) patch.icon = data.icon;
+    if (data.sortOrder !== void 0) patch.sortOrder = data.sortOrder;
+    if (data.i18n !== void 0) patch.i18n = data.i18n;
+    const rows = await this.db.update(bundles).set(patch).where((0, import_drizzle_orm12.eq)(bundles.id, bundleId)).returning();
+    if (!rows[0]) throw new Error(`Bundle '${bundleId}' not found.`);
+    return (0, import_core3.toBundleStemRow)(rows[0]);
+  }
+  async softDelete(bundleId) {
+    await this.db.update(bundles).set({
+      deletedAt: /* @__PURE__ */ new Date(),
+      updatedAt: /* @__PURE__ */ new Date()
+    }).where((0, import_drizzle_orm12.eq)(bundles.id, bundleId));
+  }
+  // ─── Versions ───
+  async listVersions(bundleId) {
+    const rows = await this.db.select().from(bundleVersions).where((0, import_drizzle_orm12.eq)(bundleVersions.bundleId, bundleId)).orderBy((0, import_drizzle_orm12.asc)(bundleVersions.version));
+    const stem = await this.findById(bundleId);
+    return rows.map((row) => this.toVersionRow(row, stem));
+  }
+  async findVersionById(versionId, tx) {
+    const rows = await resolveDb(this.db, tx).select().from(bundleVersions).where((0, import_drizzle_orm12.eq)(bundleVersions.id, versionId)).limit(1);
+    if (!rows[0]) return null;
+    return this.toVersionRow(rows[0], await this.stemOn(resolveDb(this.db, tx), rows[0].bundleId));
+  }
+  async findCurrentDraft(bundleId) {
+    const rows = await this.db.select().from(bundleVersions).where((0, import_drizzle_orm12.and)((0, import_drizzle_orm12.eq)(bundleVersions.bundleId, bundleId), (0, import_drizzle_orm12.isNull)(bundleVersions.publishedAt))).limit(1);
+    if (!rows[0]) return null;
+    return this.toVersionRow(rows[0], await this.findById(bundleId));
+  }
+  async findLatestLive(bundleId, tx) {
+    const rows = await resolveDb(this.db, tx).select().from(bundleVersions).where((0, import_drizzle_orm12.and)((0, import_drizzle_orm12.eq)(bundleVersions.bundleId, bundleId), import_drizzle_orm12.sql`${bundleVersions.publishedAt} IS NOT NULL`, (0, import_drizzle_orm12.isNull)(bundleVersions.supersededAt))).orderBy((0, import_drizzle_orm12.desc)(bundleVersions.version)).limit(1);
+    return this.withStem(rows[0], bundleId, tx);
+  }
+  /**
+   * The version bookable at `asOf`: published, inside its validity window.
+   *
+   * Deliberately not filtered by `supersededAt` — a superseded predecessor is
+   * still the bookable one until its window closes, which is the whole point
+   * of auto-succession. `validUntil` is day-inclusive, so a version is active
+   * throughout its last day.
+   */
+  async activeVersionAt(bundleId, asOf, tx) {
+    const dayStart = new Date(asOf);
+    dayStart.setUTCHours(0, 0, 0, 0);
+    const rows = await resolveDb(this.db, tx).select().from(bundleVersions).where((0, import_drizzle_orm12.and)((0, import_drizzle_orm12.eq)(bundleVersions.bundleId, bundleId), import_drizzle_orm12.sql`${bundleVersions.publishedAt} IS NOT NULL`, (0, import_drizzle_orm12.or)((0, import_drizzle_orm12.isNull)(bundleVersions.validFrom), (0, import_drizzle_orm12.lte)(bundleVersions.validFrom, asOf)), (0, import_drizzle_orm12.or)((0, import_drizzle_orm12.isNull)(bundleVersions.validUntil), (0, import_drizzle_orm12.gte)(bundleVersions.validUntil, dayStart)))).orderBy(import_drizzle_orm12.sql`"validFrom" DESC NULLS LAST`, (0, import_drizzle_orm12.desc)(bundleVersions.version)).limit(1);
+    return this.withStem(rows[0], bundleId, tx);
+  }
+  async createDraft(data) {
+    const existingDraft = await this.findCurrentDraft(data.bundleId);
+    if (existingDraft) {
+      throw new Error(`Bundle '${data.bundleId}' already has a draft version (v${existingDraft.version}); only one draft per bundle is allowed.`);
+    }
+    const latest = await this.db.select({
+      version: bundleVersions.version
+    }).from(bundleVersions).where((0, import_drizzle_orm12.eq)(bundleVersions.bundleId, data.bundleId)).orderBy((0, import_drizzle_orm12.desc)(bundleVersions.version)).limit(1);
+    const now = /* @__PURE__ */ new Date();
+    const rows = await this.db.insert(bundleVersions).values({
+      id: (0, import_node_crypto8.randomUUID)(),
+      bundleId: data.bundleId,
+      version: latest[0] ? latest[0].version + 1 : 1,
+      ...(0, import_core3.bundleDraftDefaults)(data),
+      validFrom: this.validityWindows ? toNullableDate(data.validFrom) : null,
+      validUntil: this.validityWindows ? toNullableDate(data.validUntil) : null,
+      updatedAt: now
+    }).returning();
+    return this.toVersionRow(rows[0], await this.findById(data.bundleId));
+  }
+  async updateDraft(versionId, data) {
+    const patch = {
+      updatedAt: /* @__PURE__ */ new Date()
+    };
+    if (data.features !== void 0) patch.features = data.features;
+    if (data.quotas !== void 0) patch.quotas = data.quotas;
+    if (data.compatibility !== void 0) patch.compatibility = data.compatibility;
+    if (data.pricingOverrides !== void 0) patch.pricingOverrides = data.pricingOverrides;
+    if (data.monthlyNet !== void 0) patch.monthlyNet = data.monthlyNet;
+    if (data.yearlyNet !== void 0) patch.yearlyNet = data.yearlyNet;
+    if (data.marketed !== void 0) patch.marketed = data.marketed;
+    if (data.changeNote !== void 0) patch.changeNote = data.changeNote;
+    if (this.validityWindows) {
+      if (data.validFrom !== void 0) patch.validFrom = toNullableDate(data.validFrom);
+      if (data.validUntil !== void 0) patch.validUntil = toNullableDate(data.validUntil);
+    }
+    const rows = await this.db.update(bundleVersions).set(patch).where((0, import_drizzle_orm12.eq)(bundleVersions.id, versionId)).returning();
+    if (!rows[0]) throw new Error(`BundleVersion '${versionId}' not found.`);
+    return this.toVersionRow(rows[0], await this.findById(rows[0].bundleId));
+  }
+  async publishDraft(versionId, publishMeta, tx) {
+    if (tx !== void 0) return this.publishWithin(resolveDb(this.db, tx), versionId, publishMeta);
+    return this.db.transaction((transaction) => this.publishWithin(transaction, versionId, publishMeta));
+  }
+  async publishWithin(db, versionId, publishMeta) {
+    const now = /* @__PURE__ */ new Date();
+    const publishedRows = await db.update(bundleVersions).set({
+      publishedAt: now,
+      publishedByUserId: publishMeta.publishedByUserId,
+      publishedChanges: publishMeta.publishedChanges,
+      nonRegressive: publishMeta.nonRegressive,
+      updatedAt: now,
+      ...this.validityWindows ? {
+        validFrom: publishMeta.validFrom,
+        validUntil: publishMeta.validUntil
+      } : {}
+    }).where((0, import_drizzle_orm12.and)((0, import_drizzle_orm12.eq)(bundleVersions.id, versionId), (0, import_drizzle_orm12.isNull)(bundleVersions.publishedAt))).returning();
+    if (!publishedRows[0]) {
+      throw new Error(`BundleVersion '${versionId}' not found or already published.`);
+    }
+    const draft = publishedRows[0];
+    await db.update(bundleVersions).set(this.validityWindows ? {
+      supersededAt: now,
+      validUntil: (0, import_core3.previousUtcDay)(publishMeta.validFrom)
+    } : {
+      supersededAt: now
+    }).where((0, import_drizzle_orm12.and)((0, import_drizzle_orm12.eq)(bundleVersions.bundleId, draft.bundleId), import_drizzle_orm12.sql`${bundleVersions.publishedAt} IS NOT NULL`, (0, import_drizzle_orm12.isNull)(bundleVersions.supersededAt), (0, import_drizzle_orm12.ne)(bundleVersions.id, versionId)));
+    const stemRows = await db.select().from(bundles).where((0, import_drizzle_orm12.eq)(bundles.id, draft.bundleId)).limit(1);
+    return this.toVersionRow(publishedRows[0], stemRows[0] ? (0, import_core3.toBundleStemRow)(stemRows[0]) : null);
+  }
+  async deleteDraft(versionId) {
+    const deleted = await this.db.delete(bundleVersions).where((0, import_drizzle_orm12.and)((0, import_drizzle_orm12.eq)(bundleVersions.id, versionId), (0, import_drizzle_orm12.isNull)(bundleVersions.publishedAt))).returning({
+      id: bundleVersions.id
+    });
+    if (deleted.length > 0) return;
+    const remaining = await this.db.select({
+      publishedAt: bundleVersions.publishedAt
+    }).from(bundleVersions).where((0, import_drizzle_orm12.eq)(bundleVersions.id, versionId)).limit(1);
+    if (!remaining[0]) return;
+    throw new Error(`BundleVersion '${versionId}' is already published and cannot be discarded (published versions are immutable \u2014 contract protection P1).`);
+  }
+  /**
+   * One version row plus its stem, or null — the tail every version lookup
+   * ends with, and the reason it is here rather than written out each time:
+   * the stem has to be read on the caller's connection, and a copy that
+   * forgets that is the deadlock this class already had once.
+   */
+  async withStem(row, bundleId, tx) {
+    if (!row) return null;
+    return this.toVersionRow(row, await this.stemOn(resolveDb(this.db, tx), bundleId));
+  }
+  /**
+   * The stem, read on the connection the caller is already holding.
+   *
+   * `this.db` would take a second one from the pool. Inside a transaction —
+   * which is where `enforceLimit()` calls this, holding a row lock — that
+   * second connection can only be released when the transaction ends, and the
+   * transaction cannot end until this query returns. With a small pool, or
+   * enough concurrent checks to occupy it, entitlement resolution stops
+   * dead. A version query that honours `tx` and a stem query beside it that
+   * does not is the shape that hides it: the deadlock needs load to appear.
+   */
+  async stemOn(db, bundleId) {
+    const rows = await db.select().from(bundles).where((0, import_drizzle_orm12.eq)(bundles.id, bundleId)).limit(1);
+    return rows[0] ? (0, import_core3.toBundleStemRow)(rows[0]) : null;
+  }
+  toVersionRow(row, stem) {
+    return {
+      id: row.id,
+      bundleId: row.bundleId,
+      bundleKey: stem?.bundleKey ?? "",
+      label: stem?.label ?? "",
+      version: row.version,
+      baseVersionId: row.baseVersionId,
+      features: row.features ?? [],
+      quotas: row.quotas ?? {},
+      compatibility: row.compatibility ?? {},
+      pricingOverrides: row.pricingOverrides ?? [],
+      monthlyNet: row.monthlyNet,
+      yearlyNet: row.yearlyNet,
+      marketed: row.marketed,
+      publishedAt: toIso(row.publishedAt),
+      supersededAt: toIso(row.supersededAt),
+      publishedChanges: Array.isArray(row.publishedChanges) ? row.publishedChanges : null,
+      changeNote: row.changeNote,
+      nonRegressive: row.nonRegressive,
+      // Null rather than the stored value where the adapter does not
+      // promise windows: returning a date it does not maintain would
+      // invite a caller to trust it.
+      validFrom: this.validityWindows ? toIso(row.validFrom) : null,
+      validUntil: this.validityWindows ? toIso(row.validUntil) : null,
+      createdByUserId: row.createdByUserId,
+      publishedByUserId: row.publishedByUserId,
+      createdAt: row.createdAt.toISOString(),
+      updatedAt: row.updatedAt.toISOString()
+    };
+  }
+};
+DrizzleBundleRepository = _ts_decorate14([
+  (0, import_common14.Injectable)(),
+  _ts_param13(0, (0, import_common14.Inject)(DRIZZLE_DB_TOKEN)),
+  _ts_param13(1, (0, import_common14.Optional)()),
+  _ts_metadata13("design:type", Function),
+  _ts_metadata13("design:paramtypes", [
+    typeof DrizzleClient === "undefined" ? Object : DrizzleClient,
+    typeof DrizzleBundleRepositoryOptions === "undefined" ? Object : DrizzleBundleRepositoryOptions
+  ])
+], DrizzleBundleRepository);
+function toIso(value) {
+  return value ? value.toISOString() : null;
+}
+__name(toIso, "toIso");
+function toNullableDate(value) {
+  return value ? new Date(value) : null;
+}
+__name(toNullableDate, "toNullableDate");
+
+// src/drizzle-plan.repository.ts
+var import_node_crypto9 = require("node:crypto");
+var import_common15 = require("@nestjs/common");
+var import_drizzle_orm13 = require("drizzle-orm");
+var import_core4 = require("@saasicat/core");
+function _ts_decorate15(decorators, target, key, desc10) {
+  var c = arguments.length, r = c < 3 ? target : desc10 === null ? desc10 = Object.getOwnPropertyDescriptor(target, key) : desc10, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc10);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate15, "_ts_decorate");
+function _ts_metadata14(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata14, "_ts_metadata");
+function _ts_param14(paramIndex, decorator) {
+  return function(target, key) {
+    decorator(target, key, paramIndex);
+  };
+}
+__name(_ts_param14, "_ts_param");
+var DrizzlePlanRepository = class {
+  static {
+    __name(this, "DrizzlePlanRepository");
+  }
+  db;
+  validityWindows;
+  constructor(db, options = {}) {
+    this.db = db;
+    this.validityWindows = options.validityWindows ?? false;
+    if (this.validityWindows) {
+      this.findActivePlanVersion = (planKey, asOf, tx) => this.activeVersionAt(planKey, asOf ?? /* @__PURE__ */ new Date(), tx);
+    }
+  }
+  findActivePlanVersion;
+  // ─── Stem operations ───
+  async list(filter) {
+    const excludeDeleted = filter.excludeDeleted ?? true;
+    const stems = await this.db.select().from(plans).where((0, import_drizzle_orm13.and)(...excludeDeleted ? [
+      (0, import_drizzle_orm13.isNull)(plans.deletedAt)
+    ] : [])).orderBy((0, import_drizzle_orm13.asc)(plans.sortOrder), (0, import_drizzle_orm13.asc)(plans.planKey));
+    if (!filter.onlyPublished) return stems.map(import_core4.toPlanRow);
+    if (stems.length === 0) return [];
+    const candidateKeys = [
+      ...new Set(stems.map((stem) => stem.planKey))
+    ];
+    const live = await this.db.select({
+      planId: planVersions.planId
+    }).from(planVersions).where((0, import_drizzle_orm13.and)((0, import_drizzle_orm13.inArray)(planVersions.planId, candidateKeys), import_drizzle_orm13.sql`${planVersions.publishedAt} IS NOT NULL`, (0, import_drizzle_orm13.isNull)(planVersions.supersededAt)));
+    const publishedKeys = new Set(live.map((row) => row.planId));
+    return stems.filter((stem) => publishedKeys.has(stem.planKey)).map(import_core4.toPlanRow);
+  }
+  async findById(planId) {
+    const rows = await this.db.select().from(plans).where((0, import_drizzle_orm13.eq)(plans.id, planId)).limit(1);
+    return rows[0] ? (0, import_core4.toPlanRow)(rows[0]) : null;
+  }
+  /**
+   * Whether this installation already uses this plan key — **including
+   * retired plans**.
+   *
+   * `plans_planKey_key` is unconditional, so a soft delete does not free the
+   * key, and the duplicate check in `createPlan` needs the database's answer
+   * rather than the active catalogue's. `list` is that other lookup.
+   */
+  async findByKey(planKey) {
+    const rows = await this.db.select().from(plans).where((0, import_drizzle_orm13.eq)(plans.planKey, planKey)).limit(1);
+    return rows[0] ? (0, import_core4.toPlanRow)(rows[0]) : null;
+  }
+  async create(data) {
+    const now = /* @__PURE__ */ new Date();
+    const rows = await this.db.insert(plans).values({
+      id: (0, import_node_crypto9.randomUUID)(),
+      planKey: data.planKey,
+      label: data.label,
+      description: data.description ?? null,
+      icon: data.icon ?? null,
+      sortOrder: data.sortOrder ?? 0,
+      createdAt: now,
+      updatedAt: now
+    }).returning();
+    return (0, import_core4.toPlanRow)(rows[0]);
+  }
+  async update(planId, data) {
+    const rows = await this.db.update(plans).set({
+      ...data.label !== void 0 ? {
+        label: data.label
+      } : {},
+      ...data.description !== void 0 ? {
+        description: data.description
+      } : {},
+      ...data.icon !== void 0 ? {
+        icon: data.icon
+      } : {},
+      ...data.sortOrder !== void 0 ? {
+        sortOrder: data.sortOrder
+      } : {},
+      updatedAt: /* @__PURE__ */ new Date()
+    }).where((0, import_drizzle_orm13.eq)(plans.id, planId)).returning();
+    if (!rows[0]) throw new Error(`Plan '${planId}' not found.`);
+    return (0, import_core4.toPlanRow)(rows[0]);
+  }
+  async softDelete(planId) {
+    const now = /* @__PURE__ */ new Date();
+    await this.db.update(plans).set({
+      deletedAt: now,
+      updatedAt: now
+    }).where((0, import_drizzle_orm13.eq)(plans.id, planId));
+  }
+  async hardDelete(planId) {
+    await this.db.delete(plans).where((0, import_drizzle_orm13.eq)(plans.id, planId));
+  }
+  // ─── Version lifecycle — keyed by plan key ───
+  async listVersions(planKey) {
+    const rows = await this.db.select().from(planVersions).where((0, import_drizzle_orm13.eq)(planVersions.planId, planKey)).orderBy((0, import_drizzle_orm13.asc)(planVersions.version));
+    return rows.map((row) => this.versionRow(row));
+  }
+  /**
+   * `tx` is beyond what the port asks for, and is what keeps a caller already
+   * inside a transaction on its own connection: drawing a second one waits
+   * for a connection that transaction is itself holding, which on a
+   * one-connection pool never returns.
+   */
+  async findVersionById(versionId, tx) {
+    const rows = await resolveDb(this.db, tx).select().from(planVersions).where((0, import_drizzle_orm13.eq)(planVersions.id, versionId)).limit(1);
+    return rows[0] ? this.versionRow(rows[0]) : null;
+  }
+  async findCurrentDraft(planKey) {
+    const rows = await this.db.select().from(planVersions).where((0, import_drizzle_orm13.and)((0, import_drizzle_orm13.eq)(planVersions.planId, planKey), (0, import_drizzle_orm13.isNull)(planVersions.publishedAt))).orderBy((0, import_drizzle_orm13.desc)(planVersions.version)).limit(1);
+    return rows[0] ? this.versionRow(rows[0]) : null;
+  }
+  async findLatestLivePlanVersion(planKey, tx) {
+    const rows = await resolveDb(this.db, tx).select().from(planVersions).where((0, import_drizzle_orm13.and)(
+      (0, import_drizzle_orm13.eq)(planVersions.planId, planKey),
+      import_drizzle_orm13.sql`${planVersions.publishedAt} IS NOT NULL`,
+      (0, import_drizzle_orm13.isNull)(planVersions.supersededAt),
+      // A version the operator terminated is not live, whatever
+      // its supersession says: `terminate` sets `endsAt` without
+      // a successor to supersede it.
+      (0, import_drizzle_orm13.or)((0, import_drizzle_orm13.isNull)(planVersions.endsAt), import_drizzle_orm13.sql`${planVersions.endsAt} > NOW()`)
+    )).orderBy((0, import_drizzle_orm13.desc)(planVersions.version)).limit(1);
+    return rows[0] ? this.versionRow(rows[0]) : null;
+  }
+  /**
+   * The version bookable at `asOf`: published, inside its validity window,
+   * not terminated.
+   *
+   * `validUntil` is day-inclusive — a window that closes on the 28th is still
+   * open at 23:59 on the 28th — which is why the comparison is against
+   * `startOfUtcDay(asOf)` and not against `asOf`. The reading half of the
+   * rule `previousUtcDay` writes in `publishWithin`; both come from
+   * `@saasicat/core` so the two halves cannot drift apart.
+   */
+  async activeVersionAt(planKey, asOf, tx) {
+    const rows = await resolveDb(this.db, tx).select().from(planVersions).where((0, import_drizzle_orm13.and)((0, import_drizzle_orm13.eq)(planVersions.planId, planKey), import_drizzle_orm13.sql`${planVersions.publishedAt} IS NOT NULL`, (0, import_drizzle_orm13.or)((0, import_drizzle_orm13.isNull)(planVersions.validFrom), (0, import_drizzle_orm13.lte)(planVersions.validFrom, asOf)), (0, import_drizzle_orm13.or)((0, import_drizzle_orm13.isNull)(planVersions.validUntil), (0, import_drizzle_orm13.gte)(planVersions.validUntil, (0, import_core4.startOfUtcDay)(asOf))), (0, import_drizzle_orm13.or)((0, import_drizzle_orm13.isNull)(planVersions.endsAt), import_drizzle_orm13.sql`${planVersions.endsAt} > ${asOf}`))).orderBy(import_drizzle_orm13.sql`"validFrom" DESC NULLS LAST`, (0, import_drizzle_orm13.desc)(planVersions.version)).limit(1);
+    return rows[0] ? this.versionRow(rows[0]) : null;
+  }
+  async createPlanVersionDraft(data) {
+    const now = /* @__PURE__ */ new Date();
+    const latest = await this.db.select({
+      version: planVersions.version
+    }).from(planVersions).where((0, import_drizzle_orm13.eq)(planVersions.planId, data.planId)).orderBy((0, import_drizzle_orm13.desc)(planVersions.version)).limit(1);
+    const rows = await this.db.insert(planVersions).values({
+      id: (0, import_node_crypto9.randomUUID)(),
+      planId: data.planId,
+      version: (latest[0]?.version ?? 0) + 1,
+      baseVersionId: data.baseVersionId ?? null,
+      features: data.features,
+      quotas: data.quotas,
+      monthlyNet: data.monthlyNet,
+      yearlyNet: data.yearlyNet,
+      marketed: data.marketed ?? true,
+      changeNote: data.changeNote ?? "",
+      createdByUserId: data.createdByUserId ?? null,
+      createdAt: now,
+      updatedAt: now,
+      // publishedAt stays null — this is a draft. `bundles` is
+      // app-specific and has no column here, as in adapter-prisma.
+      ...this.validityWindows ? {
+        validFrom: toNullableDate2(data.validFrom),
+        validUntil: toNullableDate2(data.validUntil)
+      } : {}
+    }).returning();
+    return this.versionRow(rows[0]);
+  }
+  async updatePlanVersionDraft(versionId, data) {
+    const rows = await this.db.update(planVersions).set({
+      ...data.features !== void 0 ? {
+        features: data.features
+      } : {},
+      ...data.quotas !== void 0 ? {
+        quotas: data.quotas
+      } : {},
+      ...data.monthlyNet !== void 0 ? {
+        monthlyNet: data.monthlyNet
+      } : {},
+      ...data.yearlyNet !== void 0 ? {
+        yearlyNet: data.yearlyNet
+      } : {},
+      ...data.marketed !== void 0 ? {
+        marketed: data.marketed
+      } : {},
+      ...data.changeNote !== void 0 ? {
+        changeNote: data.changeNote
+      } : {},
+      ...this.validityWindows && data.validFrom !== void 0 ? {
+        validFrom: toNullableDate2(data.validFrom)
+      } : {},
+      ...this.validityWindows && data.validUntil !== void 0 ? {
+        validUntil: toNullableDate2(data.validUntil)
+      } : {},
+      updatedAt: /* @__PURE__ */ new Date()
+    }).where((0, import_drizzle_orm13.eq)(planVersions.id, versionId)).returning();
+    if (!rows[0]) {
+      throw new Error(`PlanVersion '${versionId}' not found.`);
+    }
+    return this.versionRow(rows[0]);
+  }
+  async publishPlanVersionDraft(versionId, publishMeta, tx) {
+    if (tx !== void 0) return this.publishWithin(resolveDb(this.db, tx), versionId, publishMeta);
+    return this.db.transaction((transaction) => this.publishWithin(transaction, versionId, publishMeta));
+  }
+  async publishWithin(db, versionId, publishMeta) {
+    const now = /* @__PURE__ */ new Date();
+    const publishedRows = await db.update(planVersions).set({
+      publishedAt: now,
+      publishedByUserId: publishMeta.publishedByUserId,
+      publishedChanges: publishMeta.publishedChanges,
+      nonRegressive: publishMeta.nonRegressive,
+      updatedAt: now,
+      ...this.validityWindows ? {
+        validFrom: publishMeta.validFrom,
+        validUntil: publishMeta.validUntil
+      } : {}
+    }).where((0, import_drizzle_orm13.and)((0, import_drizzle_orm13.eq)(planVersions.id, versionId), (0, import_drizzle_orm13.isNull)(planVersions.publishedAt))).returning();
+    if (!publishedRows[0]) {
+      throw new Error(`PlanVersion '${versionId}' not found or already published.`);
+    }
+    await db.update(planVersions).set(this.validityWindows ? {
+      supersededAt: now,
+      validUntil: (0, import_core4.previousUtcDay)(publishMeta.validFrom),
+      updatedAt: now
+    } : {
+      supersededAt: now,
+      updatedAt: now
+    }).where((0, import_drizzle_orm13.and)((0, import_drizzle_orm13.eq)(planVersions.planId, publishedRows[0].planId), import_drizzle_orm13.sql`${planVersions.publishedAt} IS NOT NULL`, (0, import_drizzle_orm13.isNull)(planVersions.supersededAt), (0, import_drizzle_orm13.ne)(planVersions.id, versionId)));
+    return this.versionRow(publishedRows[0]);
+  }
+  async deletePlanVersionDraft(versionId) {
+    const deleted = await this.db.delete(planVersions).where((0, import_drizzle_orm13.and)((0, import_drizzle_orm13.eq)(planVersions.id, versionId), (0, import_drizzle_orm13.isNull)(planVersions.publishedAt))).returning({
+      id: planVersions.id
+    });
+    if (deleted.length > 0) return;
+    const existing = await this.db.select({
+      publishedAt: planVersions.publishedAt
+    }).from(planVersions).where((0, import_drizzle_orm13.eq)(planVersions.id, versionId)).limit(1);
+    if (existing[0]) {
+      throw new Error(`PlanVersion '${versionId}' is already published and cannot be discarded (published versions are immutable \u2014 contract protection P1).`);
+    }
+  }
+  async terminate(versionId, endsAt) {
+    const rows = await this.db.update(planVersions).set({
+      endsAt,
+      updatedAt: /* @__PURE__ */ new Date()
+    }).where((0, import_drizzle_orm13.eq)(planVersions.id, versionId)).returning();
+    if (!rows[0]) throw new Error(`PlanVersion '${versionId}' not found.`);
+    return this.versionRow(rows[0]);
+  }
+  versionRow(row) {
+    return (0, import_core4.toPlanVersionRow)(row, row.planId, {
+      validityWindows: this.validityWindows,
+      // The canonical schema always has the column, so this adapter can
+      // always answer the question — unlike a Prisma consumer whose
+      // schema may predate it.
+      endsAt: true
+    });
+  }
+};
+DrizzlePlanRepository = _ts_decorate15([
+  (0, import_common15.Injectable)(),
+  _ts_param14(0, (0, import_common15.Inject)(DRIZZLE_DB_TOKEN)),
+  _ts_param14(1, (0, import_common15.Optional)()),
+  _ts_metadata14("design:type", Function),
+  _ts_metadata14("design:paramtypes", [
+    typeof DrizzleClient === "undefined" ? Object : DrizzleClient,
+    typeof DrizzlePlanRepositoryOptions === "undefined" ? Object : DrizzlePlanRepositoryOptions
+  ])
+], DrizzlePlanRepository);
+function toNullableDate2(value) {
+  return value ? new Date(value) : null;
+}
+__name(toNullableDate2, "toNullableDate");
+
+// src/drizzle-subscription-contract.repository.ts
+var import_node_crypto10 = require("node:crypto");
+var import_common16 = require("@nestjs/common");
+var import_drizzle_orm14 = require("drizzle-orm");
+var import_core5 = require("@saasicat/core");
+function _ts_decorate16(decorators, target, key, desc10) {
+  var c = arguments.length, r = c < 3 ? target : desc10 === null ? desc10 = Object.getOwnPropertyDescriptor(target, key) : desc10, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc10);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate16, "_ts_decorate");
+function _ts_metadata15(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata15, "_ts_metadata");
+function _ts_param15(paramIndex, decorator) {
+  return function(target, key) {
+    decorator(target, key, paramIndex);
+  };
+}
+__name(_ts_param15, "_ts_param");
+var DrizzleSubscriptionContractRepository = class {
+  static {
+    __name(this, "DrizzleSubscriptionContractRepository");
+  }
+  db;
+  constructor(db) {
+    this.db = db;
+  }
+  async list(filter) {
+    const rows = await this.db.select().from(subscriptionContracts).where((0, import_drizzle_orm14.and)(...filter.tenantId ? [
+      (0, import_drizzle_orm14.eq)(subscriptionContracts.tenantId, filter.tenantId)
+    ] : [], ...filter.status ? [
+      (0, import_drizzle_orm14.eq)(subscriptionContracts.status, filter.status)
+    ] : [], ...filter.asOf ? [
+      inWindowAt(filter.asOf)
+    ] : [])).orderBy((0, import_drizzle_orm14.desc)(subscriptionContracts.effectiveFrom), (0, import_drizzle_orm14.desc)(subscriptionContracts.createdAt));
+    return this.withLineItems(this.db, rows);
+  }
+  async findById(contractId) {
+    const rows = await this.db.select().from(subscriptionContracts).where((0, import_drizzle_orm14.eq)(subscriptionContracts.id, contractId)).limit(1);
+    return (await this.withLineItems(this.db, rows))[0] ?? null;
+  }
+  async findActiveByTenantId(tenantId, asOf = /* @__PURE__ */ new Date(), tx) {
+    const db = resolveDb(this.db, tx);
+    const rows = await db.select().from(subscriptionContracts).where((0, import_drizzle_orm14.and)((0, import_drizzle_orm14.eq)(subscriptionContracts.tenantId, tenantId), (0, import_drizzle_orm14.inArray)(subscriptionContracts.status, [
+      ...import_core5.ACTIVE_SUBSCRIPTION_CONTRACT_STATUSES
+    ]), inWindowAt(asOf))).orderBy((0, import_drizzle_orm14.desc)(subscriptionContracts.effectiveFrom), (0, import_drizzle_orm14.desc)(subscriptionContracts.createdAt)).limit(1);
+    return (await this.withLineItems(db, rows))[0] ?? null;
+  }
+  async findByOriginalOfferId(offerId, tx) {
+    const db = resolveDb(this.db, tx);
+    const rows = await db.select().from(subscriptionContracts).where((0, import_drizzle_orm14.eq)(subscriptionContracts.originalOfferId, offerId)).orderBy((0, import_drizzle_orm14.asc)(subscriptionContracts.createdAt), (0, import_drizzle_orm14.asc)(subscriptionContracts.id)).limit(1);
+    return (await this.withLineItems(db, rows))[0] ?? null;
+  }
+  async create(data, tx) {
+    const now = /* @__PURE__ */ new Date();
+    const contractId = (0, import_node_crypto10.randomUUID)();
+    return resolveDb(this.db, tx).transaction(async (transaction) => {
+      const db = transaction;
+      const rows = await db.insert(subscriptionContracts).values({
+        id: contractId,
+        tenantId: data.tenantId,
+        status: data.status ?? "active",
+        effectiveFrom: data.effectiveFrom,
+        effectiveUntil: data.effectiveUntil ?? null,
+        originalOfferId: data.originalOfferId ?? null,
+        originalPlanVersionId: data.originalPlanVersionId ?? null,
+        originalBundleVersionIds: data.originalBundleVersionIds ?? [],
+        entitlementSnapshot: data.entitlementSnapshot ?? null,
+        priceSnapshot: data.priceSnapshot,
+        promotionSnapshots: data.promotionSnapshots ?? [],
+        promoCodeSnapshots: data.promoCodeSnapshots ?? [],
+        termsSnapshot: data.termsSnapshot ?? null,
+        subscriberId: data.parties.subscriberId,
+        subscriberSnapshot: data.parties.subscriber,
+        issuerSnapshot: data.parties.issuer,
+        createdAt: now,
+        updatedAt: now
+      }).returning();
+      const lineRows = data.lineItems.length === 0 ? [] : await db.insert(contractLineItems).values(data.lineItems.map((item) => toLineItemInsert(item, contractId, now))).returning();
+      return (0, import_core5.toSubscriptionContractRecord)(rows[0], lineRows);
+    });
+  }
+  async listRunningIssuers(limit, asOf = /* @__PURE__ */ new Date()) {
+    const running = (0, import_drizzle_orm14.and)((0, import_drizzle_orm14.inArray)(subscriptionContracts.status, [
+      ...import_core5.ACTIVE_SUBSCRIPTION_CONTRACT_STATUSES
+    ]), (0, import_drizzle_orm14.or)((0, import_drizzle_orm14.isNull)(subscriptionContracts.effectiveUntil), (0, import_drizzle_orm14.gt)(subscriptionContracts.effectiveUntil, asOf)));
+    const [totals, rows] = await Promise.all([
+      this.db.select({
+        value: (0, import_drizzle_orm14.count)()
+      }).from(subscriptionContracts).where(running),
+      // Oldest first, and `id` last so two contracts that start in the
+      // same moment are still listed in one order — a refusal that names
+      // a different pair on every restart is one an operator cannot act
+      // on.
+      this.db.select({
+        id: subscriptionContracts.id,
+        tenantId: subscriptionContracts.tenantId,
+        issuerSnapshot: subscriptionContracts.issuerSnapshot,
+        effectiveFrom: subscriptionContracts.effectiveFrom
+      }).from(subscriptionContracts).where(running).orderBy((0, import_drizzle_orm14.asc)(subscriptionContracts.effectiveFrom), (0, import_drizzle_orm14.asc)(subscriptionContracts.createdAt), (0, import_drizzle_orm14.asc)(subscriptionContracts.id)).limit(limit)
+    ]);
+    return {
+      total: totals[0]?.value ?? 0,
+      contracts: rows.map(import_core5.toRunningContractIssuer)
+    };
+  }
+  async terminate(contractId, data) {
+    const rows = await this.db.update(subscriptionContracts).set({
+      effectiveUntil: data.effectiveUntil,
+      // A null status leaves the column alone: the contract keeps
+      // whatever it had — `active`, usually — and the new
+      // `effectiveUntil` is what takes it out of the active lookup
+      // once that moment arrives.
+      ...data.status === null ? {} : {
+        status: data.status
+      },
+      updatedAt: /* @__PURE__ */ new Date()
+    }).where((0, import_drizzle_orm14.eq)(subscriptionContracts.id, contractId)).returning();
+    if (!rows[0]) throw new Error(`SubscriptionContract '${contractId}' not found.`);
+    return (await this.withLineItems(this.db, rows))[0];
+  }
+  /**
+   * The lines for a batch of contracts in one query rather than one per
+   * contract: `list` is the operator's contract history and would otherwise
+   * be an N+1 over a table that only grows.
+   */
+  async withLineItems(db, rows) {
+    if (rows.length === 0) return [];
+    const lines = await db.select().from(contractLineItems).where((0, import_drizzle_orm14.inArray)(contractLineItems.contractId, rows.map((row) => row.id)));
+    const byContract = /* @__PURE__ */ new Map();
+    for (const line of lines) {
+      const bucket = byContract.get(line.contractId);
+      if (bucket) bucket.push(line);
+      else byContract.set(line.contractId, [
+        line
+      ]);
+    }
+    return rows.map((row) => (0, import_core5.toSubscriptionContractRecord)(row, byContract.get(row.id) ?? []));
+  }
+};
+DrizzleSubscriptionContractRepository = _ts_decorate16([
+  (0, import_common16.Injectable)(),
+  _ts_param15(0, (0, import_common16.Inject)(DRIZZLE_DB_TOKEN)),
+  _ts_metadata15("design:type", Function),
+  _ts_metadata15("design:paramtypes", [
+    typeof DrizzleClient === "undefined" ? Object : DrizzleClient
+  ])
+], DrizzleSubscriptionContractRepository);
+function inWindowAt(asOf) {
+  return (0, import_drizzle_orm14.and)((0, import_drizzle_orm14.lte)(subscriptionContracts.effectiveFrom, asOf), (0, import_drizzle_orm14.or)((0, import_drizzle_orm14.isNull)(subscriptionContracts.effectiveUntil), (0, import_drizzle_orm14.gt)(subscriptionContracts.effectiveUntil, asOf)));
+}
+__name(inWindowAt, "inWindowAt");
+function toLineItemInsert(item, contractId, createdAt) {
+  return {
+    id: (0, import_node_crypto10.randomUUID)(),
+    contractId,
+    kind: item.kind,
+    sourceKey: item.sourceKey,
+    sourceVersionId: item.sourceVersionId ?? null,
+    titleSnapshot: item.titleSnapshot,
+    descriptionSnapshot: item.descriptionSnapshot ?? null,
+    quantity: item.quantity,
+    unit: item.unit ?? null,
+    // Money as a decimal string all the way to the column: passing a JS
+    // number here would round it on the way in, before anybody could
+    // notice.
+    priceNet: item.priceNet.toFixed(2),
+    priceGross: item.priceGross.toFixed(2),
+    billingCycle: item.billingCycle,
+    currency: item.currency,
+    taxRate: item.taxRate.toFixed(2),
+    taxAmount: item.taxAmount.toFixed(2),
+    minimumTermUntil: item.minimumTermUntil ?? null,
+    featuresSnapshot: item.featuresSnapshot,
+    quotaEffectsSnapshot: item.quotaEffectsSnapshot,
+    metadata: item.metadata ?? null,
+    createdAt
+  };
+}
+__name(toLineItemInsert, "toLineItemInsert");
+
+// src/drizzle-subscriber-payment-method.repository.ts
+var import_node_crypto11 = require("node:crypto");
+var import_common17 = require("@nestjs/common");
+var import_drizzle_orm15 = require("drizzle-orm");
+var import_core6 = require("@saasicat/core");
+function _ts_decorate17(decorators, target, key, desc10) {
+  var c = arguments.length, r = c < 3 ? target : desc10 === null ? desc10 = Object.getOwnPropertyDescriptor(target, key) : desc10, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc10);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate17, "_ts_decorate");
+function _ts_metadata16(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata16, "_ts_metadata");
+function _ts_param16(paramIndex, decorator) {
+  return function(target, key) {
+    decorator(target, key, paramIndex);
+  };
+}
+__name(_ts_param16, "_ts_param");
+var DrizzleSubscriberPaymentMethodRepository = class {
+  static {
+    __name(this, "DrizzleSubscriberPaymentMethodRepository");
+  }
+  db;
+  constructor(db) {
+    this.db = db;
+  }
+  async recordConfirmed(data, tx) {
+    return resolveDb(this.db, tx).transaction(async (transaction) => {
+      const db = transaction;
+      const locked = await db.select({
+        id: subscribers.id
+      }).from(subscribers).where((0, import_drizzle_orm15.eq)(subscribers.id, data.subscriberId)).for("update").limit(1);
+      if (locked.length === 0) {
+        throw new Error(`Subscriber '${data.subscriberId}' does not exist; its payment method cannot be recorded.`);
+      }
+      const [recorded] = await db.select().from(subscriberPaymentMethods).where(this.byReference(data.gatewayAccount, data.paymentMethodRef)).limit(1);
+      if (recorded) {
+        (0, import_core6.refuseForeignPaymentMethodReference)(recorded, data.subscriberId);
+        return {
+          method: (0, import_core6.toSubscriberPaymentMethodRecord)(recorded),
+          outcome: "already-recorded"
+        };
+      }
+      const [active] = await db.select().from(subscriberPaymentMethods).where(this.activeOf(data.subscriberId)).limit(1);
+      const replacedOnArrival = active && active.confirmedAt.getTime() > data.confirmedAt.getTime() ? active.confirmedAt : null;
+      const claimed = await this.claimReference(db, {
+        ...(0, import_core6.subscriberPaymentMethodColumns)(data),
+        id: (0, import_node_crypto11.randomUUID)(),
+        status: "REPLACED",
+        replacedAt: replacedOnArrival ?? data.confirmedAt
+      });
+      if (replacedOnArrival) {
+        return {
+          method: (0, import_core6.toSubscriberPaymentMethodRecord)(claimed),
+          outcome: "superseded"
+        };
+      }
+      if (active) {
+        await db.update(subscriberPaymentMethods).set({
+          status: "REPLACED",
+          replacedAt: data.confirmedAt
+        }).where((0, import_drizzle_orm15.eq)(subscriberPaymentMethods.id, active.id));
+      }
+      const [inUse] = await db.update(subscriberPaymentMethods).set({
+        status: "ACTIVE",
+        replacedAt: null
+      }).where((0, import_drizzle_orm15.eq)(subscriberPaymentMethods.id, claimed.id)).returning();
+      return {
+        method: (0, import_core6.toSubscriberPaymentMethodRecord)(inUse),
+        outcome: "activated"
+      };
+    });
+  }
+  /**
+   * Takes the reference for this subscriber, or refuses it to them.
+   *
+   * The first write of the three, and the only one that can be refused — so a
+   * refusal leaves the caller's transaction as it found it, whichever way the
+   * caller opened it. `onConflictDoNothing` on the reference's own columns is
+   * what answers: the row the read above could not see, because the
+   * transaction holding it had not committed, is waited for here rather than
+   * raised as a driver error, which every driver spells differently.
+   *
+   * It is written `REPLACED` because the seat a subscriber's one `ACTIVE`
+   * payment method occupies may still be taken; `recordConfirmed` gives it
+   * the status it keeps once the seat is free. Nothing outside the
+   * transaction sees the difference.
+   */
+  async claimReference(db, values) {
+    const [claimed] = await db.insert(subscriberPaymentMethods).values(values).onConflictDoNothing({
+      target: [
+        subscriberPaymentMethods.gatewayAccount,
+        subscriberPaymentMethods.paymentMethodRef
+      ]
+    }).returning();
+    if (!claimed) {
+      throw new import_core6.ForeignPaymentMethodReferenceError(values.gatewayAccount, values.paymentMethodRef);
+    }
+    return claimed;
+  }
+  async findActive(subscriberId, tx) {
+    const [row] = await resolveDb(this.db, tx).select().from(subscriberPaymentMethods).where(this.activeOf(subscriberId)).limit(1);
+    return row ? (0, import_core6.toSubscriberPaymentMethodRecord)(row) : null;
+  }
+  async findByReference(reference, tx) {
+    const [row] = await resolveDb(this.db, tx).select().from(subscriberPaymentMethods).where((0, import_drizzle_orm15.and)((0, import_drizzle_orm15.eq)(subscriberPaymentMethods.subscriberId, reference.subscriberId), this.byReference(reference.gatewayAccount, reference.paymentMethodRef))).limit(1);
+    return row ? (0, import_core6.toSubscriberPaymentMethodRecord)(row) : null;
+  }
+  async accountsInUse() {
+    const rows = await this.db.selectDistinct({
+      gatewayAccount: subscriberPaymentMethods.gatewayAccount
+    }).from(subscriberPaymentMethods).where((0, import_drizzle_orm15.eq)(subscriberPaymentMethods.status, "ACTIVE")).orderBy((0, import_drizzle_orm15.asc)(subscriberPaymentMethods.gatewayAccount));
+    return rows.map((row) => row.gatewayAccount);
+  }
+  async recordSetup(data, tx) {
+    await resolveDb(this.db, tx).insert(subscriberPaymentMethodSetups).values({
+      id: (0, import_node_crypto11.randomUUID)(),
+      subscriberId: data.subscriberId,
+      gatewayAccount: data.gatewayAccount,
+      sessionRef: data.sessionRef,
+      customerRef: data.customerRef,
+      startedAt: data.startedAt
+    });
+  }
+  async completeSetup(match, completedAt, tx) {
+    const completed = await resolveDb(this.db, tx).update(subscriberPaymentMethodSetups).set({
+      completedAt
+    }).where((0, import_drizzle_orm15.and)((0, import_drizzle_orm15.eq)(subscriberPaymentMethodSetups.gatewayAccount, match.gatewayAccount), (0, import_drizzle_orm15.eq)(subscriberPaymentMethodSetups.sessionRef, match.sessionRef), (0, import_drizzle_orm15.eq)(subscriberPaymentMethodSetups.subscriberId, match.subscriberId), (0, import_drizzle_orm15.isNull)(subscriberPaymentMethodSetups.completedAt))).returning({
+      id: subscriberPaymentMethodSetups.id
+    });
+    return completed.length === 1;
+  }
+  activeOf(subscriberId) {
+    return (0, import_drizzle_orm15.and)((0, import_drizzle_orm15.eq)(subscriberPaymentMethods.subscriberId, subscriberId), (0, import_drizzle_orm15.eq)(subscriberPaymentMethods.status, "ACTIVE"));
+  }
+  byReference(gatewayAccount, paymentMethodRef) {
+    return (0, import_drizzle_orm15.and)((0, import_drizzle_orm15.eq)(subscriberPaymentMethods.gatewayAccount, gatewayAccount), (0, import_drizzle_orm15.eq)(subscriberPaymentMethods.paymentMethodRef, paymentMethodRef));
+  }
+};
+DrizzleSubscriberPaymentMethodRepository = _ts_decorate17([
+  (0, import_common17.Injectable)(),
+  _ts_param16(0, (0, import_common17.Inject)(DRIZZLE_DB_TOKEN)),
+  _ts_metadata16("design:type", Function),
+  _ts_metadata16("design:paramtypes", [
+    typeof DrizzleClient === "undefined" ? Object : DrizzleClient
+  ])
+], DrizzleSubscriberPaymentMethodRepository);
+
+// src/drizzle-subscriber.repository.ts
+var import_node_crypto12 = require("node:crypto");
+var import_common18 = require("@nestjs/common");
+var import_drizzle_orm16 = require("drizzle-orm");
+var import_core7 = require("@saasicat/core");
+function _ts_decorate18(decorators, target, key, desc10) {
+  var c = arguments.length, r = c < 3 ? target : desc10 === null ? desc10 = Object.getOwnPropertyDescriptor(target, key) : desc10, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc10);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate18, "_ts_decorate");
+function _ts_metadata17(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata17, "_ts_metadata");
+function _ts_param17(paramIndex, decorator) {
+  return function(target, key) {
+    decorator(target, key, paramIndex);
+  };
+}
+__name(_ts_param17, "_ts_param");
+var DrizzleSubscriberRepository = class {
+  static {
+    __name(this, "DrizzleSubscriberRepository");
+  }
+  db;
+  constructor(db) {
+    this.db = db;
+  }
+  async createForTenant(data, tx) {
+    const { tenantId, ...details } = data;
+    const now = /* @__PURE__ */ new Date();
+    const subscriberId = (0, import_node_crypto12.randomUUID)();
+    return resolveDb(this.db, tx).transaction(async (transaction) => {
+      const db = transaction;
+      const [created] = await db.insert(subscribers).values({
+        ...details,
+        id: subscriberId,
+        createdAt: now,
+        updatedAt: now
+      }).returning();
+      const linked = await db.insert(subscriberTenants).values({
+        id: (0, import_node_crypto12.randomUUID)(),
+        subscriberId,
+        tenantId,
+        linkedAt: now
+      }).onConflictDoNothing().returning();
+      if (linked.length === 0) {
+        await db.delete(subscribers).where((0, import_drizzle_orm16.eq)(subscribers.id, subscriberId));
+        return null;
+      }
+      return (0, import_core7.toSubscriberRecord)(created, tenantId);
+    });
+  }
+  async findById(subscriberId, tx) {
+    const db = resolveDb(this.db, tx);
+    const rows = await db.select().from(subscribers).where((0, import_drizzle_orm16.eq)(subscribers.id, subscriberId)).limit(1);
+    return rows[0] ? this.withLiveTenant(db, rows[0]) : null;
+  }
+  async findByTenantId(tenantId, tx) {
+    const db = resolveDb(this.db, tx);
+    const rows = await db.select({
+      subscriber: subscribers
+    }).from(subscriberTenants).innerJoin(subscribers, (0, import_drizzle_orm16.eq)(subscribers.id, subscriberTenants.subscriberId)).where((0, import_drizzle_orm16.and)((0, import_drizzle_orm16.eq)(subscriberTenants.tenantId, tenantId), (0, import_drizzle_orm16.isNull)(subscriberTenants.unlinkedAt))).limit(1);
+    return rows[0] ? (0, import_core7.toSubscriberRecord)(rows[0].subscriber, tenantId) : null;
+  }
+  async updateContact(subscriberId, change, tx) {
+    const db = resolveDb(this.db, tx);
+    const rows = await db.update(subscribers).set({
+      ...change,
+      updatedAt: /* @__PURE__ */ new Date()
+    }).where((0, import_drizzle_orm16.eq)(subscribers.id, subscriberId)).returning();
+    return rows[0] ? this.withLiveTenant(db, rows[0]) : null;
+  }
+  async correctIdentity(subscriberId, data, tx) {
+    return resolveDb(this.db, tx).transaction(async (transaction) => {
+      const db = transaction;
+      const [current] = await db.select().from(subscribers).where((0, import_drizzle_orm16.eq)(subscribers.id, subscriberId)).for("update").limit(1);
+      if (!current) return null;
+      const delta = (0, import_core7.identityCorrectionDelta)(current, data.corrected);
+      if (Object.keys(delta.corrected).length === 0) {
+        return {
+          subscriber: await this.withLiveTenant(db, current),
+          correction: null
+        };
+      }
+      const [updated] = await db.update(subscribers).set({
+        ...delta.corrected,
+        updatedAt: /* @__PURE__ */ new Date()
+      }).where((0, import_drizzle_orm16.eq)(subscribers.id, subscriberId)).returning();
+      const [correction] = await db.insert(subscriberCorrections).values({
+        id: (0, import_node_crypto12.randomUUID)(),
+        subscriberId,
+        previous: delta.previous,
+        corrected: delta.corrected,
+        reason: data.reason,
+        correctedBy: data.correctedBy,
+        correctedAt: data.correctedAt
+      }).returning();
+      return {
+        subscriber: await this.withLiveTenant(db, updated),
+        correction: (0, import_core7.toSubscriberCorrectionRecord)(correction)
+      };
+    });
+  }
+  async listCorrections(subscriberId) {
+    const rows = await this.db.select().from(subscriberCorrections).where((0, import_drizzle_orm16.eq)(subscriberCorrections.subscriberId, subscriberId)).orderBy((0, import_drizzle_orm16.desc)(subscriberCorrections.correctedAt), (0, import_drizzle_orm16.desc)(subscriberCorrections.id));
+    return rows.map(import_core7.toSubscriberCorrectionRecord);
+  }
+  async withLiveTenant(db, row) {
+    const links = await db.select({
+      tenantId: subscriberTenants.tenantId
+    }).from(subscriberTenants).where((0, import_drizzle_orm16.and)((0, import_drizzle_orm16.eq)(subscriberTenants.subscriberId, row.id), (0, import_drizzle_orm16.isNull)(subscriberTenants.unlinkedAt))).limit(1);
+    return (0, import_core7.toSubscriberRecord)(row, links[0]?.tenantId ?? null);
+  }
+};
+DrizzleSubscriberRepository = _ts_decorate18([
+  (0, import_common18.Injectable)(),
+  _ts_param17(0, (0, import_common18.Inject)(DRIZZLE_DB_TOKEN)),
+  _ts_metadata17("design:type", Function),
+  _ts_metadata17("design:paramtypes", [
+    typeof DrizzleClient === "undefined" ? Object : DrizzleClient
+  ])
+], DrizzleSubscriberRepository);
+
+// src/drizzle-subscription-usage.adapter.ts
+var import_common19 = require("@nestjs/common");
+var import_drizzle_orm17 = require("drizzle-orm");
+function _ts_decorate19(decorators, target, key, desc10) {
+  var c = arguments.length, r = c < 3 ? target : desc10 === null ? desc10 = Object.getOwnPropertyDescriptor(target, key) : desc10, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc10);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate19, "_ts_decorate");
+function _ts_metadata18(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata18, "_ts_metadata");
+function _ts_param18(paramIndex, decorator) {
+  return function(target, key) {
+    decorator(target, key, paramIndex);
+  };
+}
+__name(_ts_param18, "_ts_param");
+var DrizzleSubscriptionUsageAdapter = class {
+  static {
+    __name(this, "DrizzleSubscriptionUsageAdapter");
+  }
+  db;
+  constructor(db) {
+    this.db = db;
+  }
+  async findForTenant(tenantId) {
+    const [subscription] = await this.db.select().from(subscriptions).where((0, import_drizzle_orm17.eq)(subscriptions.tenantId, tenantId)).limit(1);
+    if (!subscription) return null;
+    const [planVersion] = await this.db.select().from(planVersions).where((0, import_drizzle_orm17.eq)(planVersions.id, subscription.planVersionId)).limit(1);
+    if (!planVersion) {
+      throw new Error(`Subscription ${subscription.id} references missing PlanVersion ${subscription.planVersionId}.`);
+    }
+    const [pendingPlanVersion] = subscription.pendingPlanVersionId ? await this.db.select().from(planVersions).where((0, import_drizzle_orm17.eq)(planVersions.id, subscription.pendingPlanVersionId)).limit(1) : [];
+    return {
+      id: subscription.id,
+      plan: planVersion.planId,
+      billingCycle: subscription.billingCycle,
+      status: subscription.status,
+      isPilot: subscription.isPilot,
+      pilotEndsAt: subscription.pilotEndsAt,
+      trialEndsAt: subscription.trialEndsAt,
+      startedAt: subscription.startedAt,
+      currentPeriodStart: subscription.currentPeriodStart,
+      currentPeriodEnd: subscription.currentPeriodEnd,
+      minimumTermUntil: subscription.minimumTermUntil,
+      canceledAt: subscription.canceledAt,
+      canceledEffectiveAt: subscription.canceledEffectiveAt,
+      billingAnchorDay: subscription.billingAnchorDay,
+      pendingPlan: subscription.pendingPlan,
+      pendingBillingCycle: subscription.pendingBillingCycle,
+      pendingEffectiveAt: subscription.pendingEffectiveAt,
+      planVersion: toUsagePlanVersion(planVersion),
+      pendingPlanVersion: pendingPlanVersion ? {
+        ...toUsagePlanVersion(pendingPlanVersion),
+        // The two fields a tenant is shown before accepting: does
+        // the change take anything away, and what changed.
+        nonRegressive: pendingPlanVersion.nonRegressive,
+        publishedChanges: pendingPlanVersion.publishedChanges
+      } : null,
+      pendingPlanVersionEffectiveAt: subscription.pendingPlanVersionEffectiveAt,
+      pendingPlanVersionAccepted: subscription.pendingPlanVersionAccepted,
+      pendingPlanVersionAcceptedAt: subscription.pendingPlanVersionAcceptedAt,
+      packageSnapshot: subscription.packageSnapshot,
+      checkoutOfferId: subscription.checkoutOfferId
+    };
+  }
+};
+DrizzleSubscriptionUsageAdapter = _ts_decorate19([
+  (0, import_common19.Injectable)(),
+  _ts_param18(0, (0, import_common19.Inject)(DRIZZLE_DB_TOKEN)),
+  _ts_metadata18("design:type", Function),
+  _ts_metadata18("design:paramtypes", [
+    typeof DrizzleClient === "undefined" ? Object : DrizzleClient
+  ])
+], DrizzleSubscriptionUsageAdapter);
+function toUsagePlanVersion(row) {
+  return {
+    id: row.id,
+    // The canonical schema stores the plan key here, which is what the
+    // record's `planId` means too.
+    planId: row.planId,
+    version: row.version,
+    publishedAt: row.publishedAt,
+    supersededAt: row.supersededAt,
+    changeNote: row.changeNote
+  };
+}
+__name(toUsagePlanVersion, "toUsagePlanVersion");
+
+// src/drizzle-tenant-subscription-write.adapter.ts
+var import_common20 = require("@nestjs/common");
+var import_drizzle_orm18 = require("drizzle-orm");
+function _ts_decorate20(decorators, target, key, desc10) {
+  var c = arguments.length, r = c < 3 ? target : desc10 === null ? desc10 = Object.getOwnPropertyDescriptor(target, key) : desc10, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc10);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate20, "_ts_decorate");
+function _ts_metadata19(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata19, "_ts_metadata");
+function _ts_param19(paramIndex, decorator) {
+  return function(target, key) {
+    decorator(target, key, paramIndex);
+  };
+}
+__name(_ts_param19, "_ts_param");
+var DrizzleTenantSubscriptionWrite = class {
+  static {
+    __name(this, "DrizzleTenantSubscriptionWrite");
+  }
+  db;
+  /** Both plan-changing writes bind the version they sell; there is no opt-out here. */
+  bindsPlanVersion = true;
+  plans;
+  constructor(db) {
+    this.db = db;
+    this.plans = new DrizzlePlanRepository(this.db, {
+      validityWindows: true
+    });
+  }
+  async changePlanImmediate(tenantId, input) {
+    return this.db.transaction(async (tx) => {
+      const db = tx;
+      const current = await this.requireSubscription(db, tenantId, {
+        lock: true
+      });
+      const planVersionId = await this.activeVersionId(input.planId, input.periodStart ?? /* @__PURE__ */ new Date(), tx);
+      const pendingMovedAway = await this.pendingVersionBelongsToAnotherPlan(tx, current.pendingPlanVersionId, input.planId);
+      const claimed = await this.claim(db, tenantId, input.expectedCanceledAt, {
+        plan: input.planId,
+        billingCycle: input.cycle,
+        planVersionId,
+        pendingPlan: null,
+        pendingBillingCycle: null,
+        pendingEffectiveAt: null,
+        ...input.nextStatus ? {
+          status: input.nextStatus
+        } : {},
+        ...periodFields(input.periodStart, input.periodEnd),
+        // Null and undefined both mean "leave the trial as it is" — the
+        // platform passes a carried-over end date or nothing at all.
+        ...input.trialEndsAt ? {
+          trialEndsAt: input.trialEndsAt
+        } : {},
+        ...pendingMovedAway ? clearedPendingVersion() : {}
+      });
+      const after = await this.requireSubscription(db, tenantId);
+      return {
+        plan: after.plan,
+        billingCycle: after.billingCycle,
+        claimed: claimed > 0
+      };
+    });
+  }
+  async schedulePlanChange(tenantId, input) {
+    const claimed = await this.claim(this.db, tenantId, input.expectedCanceledAt, {
+      pendingPlan: input.pendingPlan,
+      pendingBillingCycle: input.pendingBillingCycle,
+      pendingEffectiveAt: input.pendingEffectiveAt
+    });
+    return {
+      claimed: claimed > 0
+    };
+  }
+  async acceptPendingPlanVersion(tenantId, userId, now) {
+    const sub = await this.requireSubscription(this.db, tenantId);
+    if (!sub.pendingPlanVersionId) {
+      throw new Error(`No pending PlanVersion for tenant ${tenantId}.`);
     }
-    return toRecord(row);
+    const pendingPlanVersionId = sub.pendingPlanVersionId;
+    const claimed = await this.db.update(subscriptions).set({
+      pendingPlanVersionAccepted: true,
+      pendingPlanVersionAcceptedAt: now,
+      pendingPlanVersionAcceptedByUserId: userId,
+      updatedAt: now
+    }).where((0, import_drizzle_orm18.and)((0, import_drizzle_orm18.eq)(subscriptions.id, sub.id), (0, import_drizzle_orm18.eq)(subscriptions.pendingPlanVersionId, pendingPlanVersionId), (0, import_drizzle_orm18.eq)(subscriptions.pendingPlanVersionAccepted, false))).returning({
+      id: subscriptions.id
+    });
+    const updated = await this.requireSubscription(this.db, tenantId);
+    if (claimed.length === 0 && (updated.pendingPlanVersionId !== pendingPlanVersionId || !updated.pendingPlanVersionAccepted)) {
+      throw new Error(`Pending PlanVersion changed while accepting it for tenant ${tenantId}.`);
+    }
+    return {
+      accepted: true,
+      acceptedAt: updated.pendingPlanVersionAcceptedAt,
+      effectiveAt: updated.pendingPlanVersionEffectiveAt,
+      alreadyAccepted: claimed.length === 0
+    };
   }
-  async countByPromoCode(promoCodeId, status) {
-    const rows = await this.db.select({
-      id: promoCodeRedemptions.id
-    }).from(promoCodeRedemptions).where((0, import_drizzle_orm7.and)((0, import_drizzle_orm7.eq)(promoCodeRedemptions.promoCodeId, promoCodeId), status ? (0, import_drizzle_orm7.eq)(promoCodeRedemptions.status, status) : void 0));
-    return rows.length;
+  async cancelSubscription(tenantId, input) {
+    const now = /* @__PURE__ */ new Date();
+    const claimed = await this.db.update(subscriptions).set({
+      canceledAt: input.canceledAt,
+      canceledEffectiveAt: input.effectiveAt,
+      // Absent means unchanged rather than null: an ordinary
+      // cancellation does not touch the commitment it was measured
+      // against, and writing the field on every call would erase a
+      // term that is still running.
+      ...input.minimumTermUntil ? {
+        minimumTermUntil: input.minimumTermUntil
+      } : {},
+      // Written only when the cancellation is already effective.
+      // Restating the status this call read would undo whatever
+      // changed it in between — a trial going live between the read
+      // and the write came back as `TRIAL`, entitlements and all.
+      // An ordinary cancellation records dates; it has no opinion
+      // about the status.
+      ...input.terminateNow ? {
+        status: "CANCELED"
+      } : {},
+      updatedAt: now
+    }).where((0, import_drizzle_orm18.and)((0, import_drizzle_orm18.eq)(subscriptions.tenantId, tenantId), (0, import_drizzle_orm18.isNull)(subscriptions.canceledAt), (0, import_drizzle_orm18.isNull)(subscriptions.canceledEffectiveAt))).returning({
+      id: subscriptions.id
+    });
+    const current = await this.requireSubscription(this.db, tenantId);
+    return {
+      canceledAt: current.canceledAt ?? null,
+      canceledEffectiveAt: current.canceledEffectiveAt ?? null,
+      status: current.status,
+      alreadyCanceled: claimed.length === 0
+    };
   }
-  async listByPromoCode(promoCodeId) {
-    const rows = await this.db.select().from(promoCodeRedemptions).where((0, import_drizzle_orm7.eq)(promoCodeRedemptions.promoCodeId, promoCodeId)).orderBy((0, import_drizzle_orm7.desc)(promoCodeRedemptions.redeemedAt));
-    return rows.map(toRecord);
+  async applyOnboardingSelection(tenantId, input, redeemPromo) {
+    return this.db.transaction(async (tx) => {
+      const db = tx;
+      const planVersionId = await this.activeVersionId(input.planId, input.periodStart ?? /* @__PURE__ */ new Date(), tx);
+      const claimed = await this.claim(db, tenantId, input.expectedCanceledAt, {
+        plan: input.planId,
+        billingCycle: input.cycle,
+        planVersionId,
+        pendingPlan: null,
+        pendingBillingCycle: null,
+        pendingEffectiveAt: null,
+        ...clearedPendingVersion(),
+        ...input.nextStatus ? {
+          status: input.nextStatus
+        } : {},
+        ...periodFields(input.periodStart, input.periodEnd)
+      });
+      const updated = await this.requireSubscription(db, tenantId);
+      if (claimed === 0) {
+        return {
+          plan: updated.plan,
+          billingCycle: updated.billingCycle,
+          subscriptionId: updated.id,
+          promoRedemption: null,
+          claimed: false
+        };
+      }
+      let promoRedemption = null;
+      if (redeemPromo) {
+        promoRedemption = await redeemPromo(tx, updated.id);
+      }
+      return {
+        plan: updated.plan,
+        billingCycle: updated.billingCycle,
+        subscriptionId: updated.id,
+        promoRedemption,
+        claimed: true
+      };
+    });
   }
-  async expireDueRedemptions(now) {
-    const expired = await this.db.update(promoCodeRedemptions).set({
-      status: "EXPIRED"
-    }).where((0, import_drizzle_orm7.and)((0, import_drizzle_orm7.eq)(promoCodeRedemptions.status, "ACTIVE"), (0, import_drizzle_orm7.lt)(promoCodeRedemptions.endsAt, now))).returning({
-      id: promoCodeRedemptions.id
+  /**
+   * One `UPDATE` naming the cancellation state the caller decided against,
+   * answering with how many rows it took. Reading first and updating by
+   * tenant alone would leave the window this closes.
+   */
+  async claim(db, tenantId, expectedCanceledAt, values) {
+    const claimed = await db.update(subscriptions).set({
+      ...values,
+      updatedAt: /* @__PURE__ */ new Date()
+    }).where((0, import_drizzle_orm18.and)((0, import_drizzle_orm18.eq)(subscriptions.tenantId, tenantId), canceledAtIs(expectedCanceledAt))).returning({
+      id: subscriptions.id
     });
-    return expired.length;
+    return claimed.length;
+  }
+  /**
+   * `lock: true` takes the row for the rest of the transaction, so a caller
+   * deciding from what it read cannot have the ground move underneath it. It
+   * is only meaningful inside a transaction — outside one the lock is
+   * released with the statement.
+   */
+  async requireSubscription(db, tenantId, options = {}) {
+    const query = db.select().from(subscriptions).where((0, import_drizzle_orm18.eq)(subscriptions.tenantId, tenantId));
+    const rows = await (options.lock ? query.for("update") : query).limit(1);
+    if (!rows[0]) throw new Error(`No subscription for tenant ${tenantId}.`);
+    return rows[0];
+  }
+  async activeVersionId(planKey, asOf, tx) {
+    const active = await this.plans.findActivePlanVersion?.(planKey, asOf, tx);
+    if (!active) throw new Error(`No active PlanVersion for plan '${planKey}'.`);
+    return active.id;
+  }
+  /**
+   * On the caller's transaction, not beside it. The change already holds a
+   * connection for its whole length; asking for a second one waits for the
+   * connection this transaction is holding, and a one-connection pool then
+   * never gets past here.
+   */
+  async pendingVersionBelongsToAnotherPlan(tx, pendingPlanVersionId, targetPlanKey) {
+    if (!pendingPlanVersionId) return false;
+    const pending = await this.plans.findVersionById(pendingPlanVersionId, tx);
+    return !pending || pending.planId !== targetPlanKey;
   }
 };
-DrizzlePromoCodeRedemptionRepository = _ts_decorate9([
-  (0, import_common9.Injectable)(),
-  _ts_param8(0, (0, import_common9.Inject)(DRIZZLE_DB_TOKEN)),
-  _ts_metadata8("design:type", Function),
-  _ts_metadata8("design:paramtypes", [
+DrizzleTenantSubscriptionWrite = _ts_decorate20([
+  (0, import_common20.Injectable)(),
+  _ts_param19(0, (0, import_common20.Inject)(DRIZZLE_DB_TOKEN)),
+  _ts_metadata19("design:type", Function),
+  _ts_metadata19("design:paramtypes", [
     typeof DrizzleClient === "undefined" ? Object : DrizzleClient
   ])
-], DrizzlePromoCodeRedemptionRepository);
-function toRecord(row) {
+], DrizzleTenantSubscriptionWrite);
+function periodFields(periodStart, periodEnd) {
+  if (!periodStart || !periodEnd) return {};
   return {
-    id: row.id,
-    promoCodeId: row.promoCodeId,
-    subscriptionId: row.subscriptionId,
-    tenantId: row.tenantId,
-    appliedValueType: row.appliedValueType,
-    appliedValue: String(row.appliedValue),
-    appliedDurationType: row.appliedDurationType,
-    appliedDurationValue: row.appliedDurationValue,
-    startsAt: row.startsAt,
-    endsAt: row.endsAt,
-    status: row.status,
-    redeemedAt: row.redeemedAt,
-    reversedAt: row.reversedAt
+    currentPeriodStart: periodStart,
+    currentPeriodEnd: periodEnd,
+    billingAnchorDay: periodStart.getUTCDate()
   };
 }
-__name(toRecord, "toRecord");
+__name(periodFields, "periodFields");
+function clearedPendingVersion() {
+  return {
+    pendingPlanVersionId: null,
+    pendingPlanVersionEffectiveAt: null,
+    pendingPlanVersionAccepted: false,
+    pendingPlanVersionAcceptedAt: null,
+    pendingPlanVersionAcceptedByUserId: null,
+    pendingPlanVersionNotifiedAt: null,
+    pendingPlanVersionReminderSentAt: null
+  };
+}
+__name(clearedPendingVersion, "clearedPendingVersion");
+function canceledAtIs(expected) {
+  return expected === null ? (0, import_drizzle_orm18.isNull)(subscriptions.canceledAt) : (0, import_drizzle_orm18.eq)(subscriptions.canceledAt, expected);
+}
+__name(canceledAtIs, "canceledAtIs");
 
-// src/drizzle-promo-code.repository.ts
-var import_node_crypto4 = require("node:crypto");
-var import_common10 = require("@nestjs/common");
-var import_drizzle_orm8 = require("drizzle-orm");
-function _ts_decorate10(decorators, target, key, desc4) {
-  var c = arguments.length, r = c < 3 ? target : desc4 === null ? desc4 = Object.getOwnPropertyDescriptor(target, key) : desc4, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc4);
+// src/drizzle-subscription-bundle.repository.ts
+var import_node_crypto13 = require("node:crypto");
+var import_common21 = require("@nestjs/common");
+var import_drizzle_orm19 = require("drizzle-orm");
+function _ts_decorate21(decorators, target, key, desc10) {
+  var c = arguments.length, r = c < 3 ? target : desc10 === null ? desc10 = Object.getOwnPropertyDescriptor(target, key) : desc10, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc10);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate10, "_ts_decorate");
-function _ts_metadata9(k, v) {
+__name(_ts_decorate21, "_ts_decorate");
+function _ts_metadata20(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata9, "_ts_metadata");
-function _ts_param9(paramIndex, decorator) {
+__name(_ts_metadata20, "_ts_metadata");
+function _ts_param20(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param9, "_ts_param");
-var DrizzlePromoCodeRepository = class {
+__name(_ts_param20, "_ts_param");
+var DrizzleSubscriptionBundleRepository = class {
   static {
-    __name(this, "DrizzlePromoCodeRepository");
+    __name(this, "DrizzleSubscriptionBundleRepository");
   }
   db;
   constructor(db) {
     this.db = db;
   }
-  async findById(id) {
-    const rows = await this.db.select().from(promoCodes).where((0, import_drizzle_orm8.eq)(promoCodes.id, id)).limit(1);
-    const row = rows[0];
-    return row ? toRecord2(row) : null;
+  async listBySubscription(subscriptionId) {
+    const rows = await this.db.select().from(subscriptionBundles).where((0, import_drizzle_orm19.eq)(subscriptionBundles.subscriptionId, subscriptionId)).orderBy((0, import_drizzle_orm19.desc)(subscriptionBundles.startedAt));
+    return rows.map(toRecord3);
   }
-  async findByCode(code, tx) {
-    const db = resolveDb(this.db, tx);
-    const rows = await db.select().from(promoCodes).where((0, import_drizzle_orm8.eq)(promoCodes.code, normalizeCode(code))).limit(1);
-    const row = rows[0];
-    if (!row || row.deletedAt) return null;
-    return toRecord2(row);
+  async findById(subscriptionBundleId) {
+    const rows = await this.db.select().from(subscriptionBundles).where((0, import_drizzle_orm19.eq)(subscriptionBundles.id, subscriptionBundleId)).limit(1);
+    return rows[0] ? toRecord3(rows[0]) : null;
   }
-  async findMany(filter) {
-    const conditions = [
-      (0, import_drizzle_orm8.isNull)(promoCodes.deletedAt),
-      filter.status ? (0, import_drizzle_orm8.eq)(promoCodes.status, filter.status) : void 0,
-      filter.campaignTag ? (0, import_drizzle_orm8.eq)(promoCodes.campaignTag, filter.campaignTag) : void 0,
-      filter.search ? (0, import_drizzle_orm8.like)(promoCodes.code, `%${escapeLikePattern(normalizeCode(filter.search))}%`) : void 0
-    ];
-    const rows = await this.db.select().from(promoCodes).where((0, import_drizzle_orm8.and)(...conditions)).orderBy(import_drizzle_orm8.sql`${promoCodes.createdAt} DESC`);
-    return rows.map(toRecord2);
+  async listActiveBySubscription(subscriptionId, asOf = /* @__PURE__ */ new Date(), tx) {
+    const rows = await resolveDb(this.db, tx).select().from(subscriptionBundles).where((0, import_drizzle_orm19.and)((0, import_drizzle_orm19.eq)(subscriptionBundles.subscriptionId, subscriptionId), stillActive(asOf)));
+    return rows.map(toRecord3);
   }
-  async create(data) {
-    const rows = await this.db.insert(promoCodes).values({
-      id: (0, import_node_crypto4.randomUUID)(),
-      code: normalizeCode(data.code),
-      valueType: data.valueType,
-      value: data.value.toFixed(2),
-      durationType: data.durationType,
-      durationValue: data.durationValue ?? null,
-      validFrom: data.validFrom ?? null,
-      validUntil: data.validUntil ?? null,
-      maxRedemptions: data.maxRedemptions ?? null,
-      appliesToPlans: data.appliesToPlans ?? [],
-      appliesToBilling: data.appliesToBilling ?? null,
-      firstTimeCustomersOnly: data.firstTimeCustomersOnly ?? true,
-      minimumPlanAmountGross: data.minimumPlanAmountGross?.toFixed(2) ?? null,
-      allowZeroInvoice: data.allowZeroInvoice ?? false,
-      description: data.description ?? null,
-      campaignTag: data.campaignTag ?? null,
-      revenueDeductionAccount: data.revenueDeductionAccount ?? null,
-      createdById: data.createdById,
-      updatedAt: /* @__PURE__ */ new Date()
+  async add(data) {
+    const now = /* @__PURE__ */ new Date();
+    const rows = await this.db.insert(subscriptionBundles).values({
+      id: (0, import_node_crypto13.randomUUID)(),
+      subscriptionId: data.subscriptionId,
+      bundleVersionId: data.bundleVersionId,
+      startedAt: data.startedAt ?? now,
+      minimumTermEndsAt: data.minimumTermEndsAt ?? null,
+      billingCycle: data.billingCycle ?? null,
+      currentPeriodStart: data.currentPeriodStart ?? null,
+      currentPeriodEnd: data.currentPeriodEnd ?? null,
+      canceledAt: null,
+      canceledEffectiveAt: null,
+      updatedAt: now
     }).returning();
-    return toRecord2(rows[0]);
+    return toRecord3(rows[0]);
   }
-  async update(id, data) {
-    const rows = await this.db.update(promoCodes).set({
-      status: data.status,
-      description: data.description,
-      validUntil: data.validUntil,
-      maxRedemptions: data.maxRedemptions,
+  async cancel(subscriptionBundleId, data) {
+    const rows = await this.db.update(subscriptionBundles).set({
+      canceledAt: data.canceledAt,
+      canceledEffectiveAt: data.canceledEffectiveAt,
       updatedAt: /* @__PURE__ */ new Date()
-    }).where((0, import_drizzle_orm8.eq)(promoCodes.id, id)).returning();
-    const row = rows[0];
-    if (!row) {
-      throw new Error(`PromoCode ${id} not found.`);
+    }).where((0, import_drizzle_orm19.and)((0, import_drizzle_orm19.eq)(subscriptionBundles.id, subscriptionBundleId), (0, import_drizzle_orm19.isNull)(subscriptionBundles.canceledAt))).returning();
+    if (!rows[0]) {
+      throw new Error(`SubscriptionBundle '${subscriptionBundleId}' not found or already cancelled`);
     }
-    return toRecord2(row);
-  }
-  async softDelete(id) {
-    await this.db.update(promoCodes).set({
-      deletedAt: /* @__PURE__ */ new Date(),
-      updatedAt: /* @__PURE__ */ new Date()
-    }).where((0, import_drizzle_orm8.eq)(promoCodes.id, id));
-  }
-  async claimSlot(id, tx) {
-    const db = resolveDb(this.db, tx);
-    const claimed = await db.update(promoCodes).set({
-      redemptionsCount: import_drizzle_orm8.sql`${promoCodes.redemptionsCount} + 1`,
-      updatedAt: /* @__PURE__ */ new Date()
-    }).where((0, import_drizzle_orm8.and)((0, import_drizzle_orm8.eq)(promoCodes.id, id), (0, import_drizzle_orm8.eq)(promoCodes.status, "ACTIVE"), (0, import_drizzle_orm8.isNull)(promoCodes.deletedAt), (0, import_drizzle_orm8.or)((0, import_drizzle_orm8.isNull)(promoCodes.maxRedemptions), (0, import_drizzle_orm8.lt)(promoCodes.redemptionsCount, promoCodes.maxRedemptions)))).returning({
-      id: promoCodes.id
-    });
-    return claimed.length === 1;
-  }
-  async markExhaustedIfFull(id, tx) {
-    const db = resolveDb(this.db, tx);
-    await db.update(promoCodes).set({
-      status: "EXHAUSTED",
-      updatedAt: /* @__PURE__ */ new Date()
-    }).where((0, import_drizzle_orm8.and)((0, import_drizzle_orm8.eq)(promoCodes.id, id), (0, import_drizzle_orm8.eq)(promoCodes.status, "ACTIVE"), (0, import_drizzle_orm8.isNotNull)(promoCodes.maxRedemptions), (0, import_drizzle_orm8.gte)(promoCodes.redemptionsCount, promoCodes.maxRedemptions)));
+    return toRecord3(rows[0]);
   }
-  async releaseSlot(id, tx) {
-    const db = resolveDb(this.db, tx);
-    await db.update(promoCodes).set({
-      redemptionsCount: import_drizzle_orm8.sql`GREATEST(${promoCodes.redemptionsCount} - 1, 0)`,
-      status: import_drizzle_orm8.sql`CASE WHEN ${promoCodes.status} = 'EXHAUSTED' THEN 'ACTIVE' ELSE ${promoCodes.status} END`,
+  async reactivate(subscriptionBundleId) {
+    const rows = await this.db.update(subscriptionBundles).set({
+      canceledAt: null,
+      canceledEffectiveAt: null,
       updatedAt: /* @__PURE__ */ new Date()
-    }).where((0, import_drizzle_orm8.eq)(promoCodes.id, id));
+    }).where((0, import_drizzle_orm19.eq)(subscriptionBundles.id, subscriptionBundleId)).returning();
+    if (!rows[0]) throw new Error(`SubscriptionBundle '${subscriptionBundleId}' not found`);
+    return toRecord3(rows[0]);
   }
-  async expireDueCodes(now) {
-    const expired = await this.db.update(promoCodes).set({
-      status: "EXPIRED",
-      updatedAt: /* @__PURE__ */ new Date()
-    }).where((0, import_drizzle_orm8.and)((0, import_drizzle_orm8.inArray)(promoCodes.status, [
-      "ACTIVE",
-      "PAUSED"
-    ]), (0, import_drizzle_orm8.lt)(promoCodes.validUntil, now))).returning({
-      id: promoCodes.id
-    });
-    return expired.length;
+  async countActiveByBundleVersionId(bundleVersionId, asOf = /* @__PURE__ */ new Date()) {
+    const rows = await this.db.select({
+      id: subscriptionBundles.id
+    }).from(subscriptionBundles).where((0, import_drizzle_orm19.and)((0, import_drizzle_orm19.eq)(subscriptionBundles.bundleVersionId, bundleVersionId), stillActive(asOf)));
+    return rows.length;
   }
 };
-DrizzlePromoCodeRepository = _ts_decorate10([
-  (0, import_common10.Injectable)(),
-  _ts_param9(0, (0, import_common10.Inject)(DRIZZLE_DB_TOKEN)),
-  _ts_metadata9("design:type", Function),
-  _ts_metadata9("design:paramtypes", [
+DrizzleSubscriptionBundleRepository = _ts_decorate21([
+  (0, import_common21.Injectable)(),
+  _ts_param20(0, (0, import_common21.Inject)(DRIZZLE_DB_TOKEN)),
+  _ts_metadata20("design:type", Function),
+  _ts_metadata20("design:paramtypes", [
     typeof DrizzleClient === "undefined" ? Object : DrizzleClient
   ])
-], DrizzlePromoCodeRepository);
-function normalizeCode(code) {
-  return code.trim().toUpperCase();
+], DrizzleSubscriptionBundleRepository);
+function stillActive(asOf) {
+  return (0, import_drizzle_orm19.or)((0, import_drizzle_orm19.isNull)(subscriptionBundles.canceledAt), (0, import_drizzle_orm19.gt)(subscriptionBundles.canceledEffectiveAt, asOf));
 }
-__name(normalizeCode, "normalizeCode");
-function toRecord2(row) {
+__name(stillActive, "stillActive");
+function toRecord3(row) {
   return {
     id: row.id,
-    code: row.code,
-    valueType: row.valueType,
-    value: String(row.value),
-    durationType: row.durationType,
-    durationValue: row.durationValue,
-    validFrom: row.validFrom,
-    validUntil: row.validUntil,
-    maxRedemptions: row.maxRedemptions,
-    redemptionsCount: row.redemptionsCount,
-    appliesToPlans: row.appliesToPlans ?? [],
-    appliesToBilling: row.appliesToBilling ?? null,
-    firstTimeCustomersOnly: row.firstTimeCustomersOnly,
-    minimumPlanAmountGross: row.minimumPlanAmountGross === null ? null : String(row.minimumPlanAmountGross),
-    allowZeroInvoice: row.allowZeroInvoice,
-    status: row.status,
-    description: row.description,
-    campaignTag: row.campaignTag,
-    revenueDeductionAccount: row.revenueDeductionAccount,
-    createdById: row.createdById,
+    subscriptionId: row.subscriptionId,
+    bundleVersionId: row.bundleVersionId,
+    startedAt: row.startedAt,
+    minimumTermEndsAt: row.minimumTermEndsAt,
+    billingCycle: row.billingCycle,
+    currentPeriodStart: row.currentPeriodStart,
+    currentPeriodEnd: row.currentPeriodEnd,
+    canceledAt: row.canceledAt,
+    canceledEffectiveAt: row.canceledEffectiveAt,
     createdAt: row.createdAt,
-    updatedAt: row.updatedAt,
-    deletedAt: row.deletedAt
+    updatedAt: row.updatedAt
   };
 }
-__name(toRecord2, "toRecord");
+__name(toRecord3, "toRecord");
 
 // src/drizzle-promo-code-validation-log.repository.ts
-var import_node_crypto5 = require("node:crypto");
-var import_common11 = require("@nestjs/common");
-var import_drizzle_orm9 = require("drizzle-orm");
-function _ts_decorate11(decorators, target, key, desc4) {
-  var c = arguments.length, r = c < 3 ? target : desc4 === null ? desc4 = Object.getOwnPropertyDescriptor(target, key) : desc4, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc4);
+var import_node_crypto14 = require("node:crypto");
+var import_common22 = require("@nestjs/common");
+var import_drizzle_orm20 = require("drizzle-orm");
+function _ts_decorate22(decorators, target, key, desc10) {
+  var c = arguments.length, r = c < 3 ? target : desc10 === null ? desc10 = Object.getOwnPropertyDescriptor(target, key) : desc10, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc10);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate11, "_ts_decorate");
-function _ts_metadata10(k, v) {
+__name(_ts_decorate22, "_ts_decorate");
+function _ts_metadata21(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata10, "_ts_metadata");
-function _ts_param10(paramIndex, decorator) {
+__name(_ts_metadata21, "_ts_metadata");
+function _ts_param21(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param10, "_ts_param");
+__name(_ts_param21, "_ts_param");
 var DrizzlePromoCodeValidationLogRepository = class {
   static {
     __name(this, "DrizzlePromoCodeValidationLogRepository");
@@ -1126,7 +3227,7 @@ var DrizzlePromoCodeValidationLogRepository = class {
   }
   async log(args) {
     await this.db.insert(promoCodeValidationLogs).values({
-      id: (0, import_node_crypto5.randomUUID)(),
+      id: (0, import_node_crypto14.randomUUID)(),
       promoCodeId: args.promoCodeId,
       codeAttempt: args.codeAttempt.trim().toUpperCase(),
       result: args.result,
@@ -1137,39 +3238,39 @@ var DrizzlePromoCodeValidationLogRepository = class {
   async countValid(promoCodeId) {
     const rows = await this.db.select({
       id: promoCodeValidationLogs.id
-    }).from(promoCodeValidationLogs).where((0, import_drizzle_orm9.and)((0, import_drizzle_orm9.eq)(promoCodeValidationLogs.promoCodeId, promoCodeId), (0, import_drizzle_orm9.eq)(promoCodeValidationLogs.result, "VALID")));
+    }).from(promoCodeValidationLogs).where((0, import_drizzle_orm20.and)((0, import_drizzle_orm20.eq)(promoCodeValidationLogs.promoCodeId, promoCodeId), (0, import_drizzle_orm20.eq)(promoCodeValidationLogs.result, "VALID")));
     return rows.length;
   }
 };
-DrizzlePromoCodeValidationLogRepository = _ts_decorate11([
-  (0, import_common11.Injectable)(),
-  _ts_param10(0, (0, import_common11.Inject)(DRIZZLE_DB_TOKEN)),
-  _ts_metadata10("design:type", Function),
-  _ts_metadata10("design:paramtypes", [
+DrizzlePromoCodeValidationLogRepository = _ts_decorate22([
+  (0, import_common22.Injectable)(),
+  _ts_param21(0, (0, import_common22.Inject)(DRIZZLE_DB_TOKEN)),
+  _ts_metadata21("design:type", Function),
+  _ts_metadata21("design:paramtypes", [
     typeof DrizzleClient === "undefined" ? Object : DrizzleClient
   ])
 ], DrizzlePromoCodeValidationLogRepository);
 
 // src/drizzle-promo-subscription-lookup.adapter.ts
-var import_common12 = require("@nestjs/common");
-var import_drizzle_orm10 = require("drizzle-orm");
-function _ts_decorate12(decorators, target, key, desc4) {
-  var c = arguments.length, r = c < 3 ? target : desc4 === null ? desc4 = Object.getOwnPropertyDescriptor(target, key) : desc4, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc4);
+var import_common23 = require("@nestjs/common");
+var import_drizzle_orm21 = require("drizzle-orm");
+function _ts_decorate23(decorators, target, key, desc10) {
+  var c = arguments.length, r = c < 3 ? target : desc10 === null ? desc10 = Object.getOwnPropertyDescriptor(target, key) : desc10, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc10);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate12, "_ts_decorate");
-function _ts_metadata11(k, v) {
+__name(_ts_decorate23, "_ts_decorate");
+function _ts_metadata22(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata11, "_ts_metadata");
-function _ts_param11(paramIndex, decorator) {
+__name(_ts_metadata22, "_ts_metadata");
+function _ts_param22(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param11, "_ts_param");
+__name(_ts_param22, "_ts_param");
 var DrizzlePromoSubscriptionLookup = class {
   static {
     __name(this, "DrizzlePromoSubscriptionLookup");
@@ -1186,7 +3287,7 @@ var DrizzlePromoSubscriptionLookup = class {
       plan: subscriptions.plan,
       billingCycle: subscriptions.billingCycle,
       startedAt: subscriptions.startedAt
-    }).from(subscriptions).where((0, import_drizzle_orm10.eq)(subscriptions.id, subscriptionId)).limit(1);
+    }).from(subscriptions).where((0, import_drizzle_orm21.eq)(subscriptions.id, subscriptionId)).limit(1);
     const row = rows[0];
     if (!row) return null;
     return {
@@ -1198,35 +3299,35 @@ var DrizzlePromoSubscriptionLookup = class {
     };
   }
 };
-DrizzlePromoSubscriptionLookup = _ts_decorate12([
-  (0, import_common12.Injectable)(),
-  _ts_param11(0, (0, import_common12.Inject)(DRIZZLE_DB_TOKEN)),
-  _ts_metadata11("design:type", Function),
-  _ts_metadata11("design:paramtypes", [
+DrizzlePromoSubscriptionLookup = _ts_decorate23([
+  (0, import_common23.Injectable)(),
+  _ts_param22(0, (0, import_common23.Inject)(DRIZZLE_DB_TOKEN)),
+  _ts_metadata22("design:type", Function),
+  _ts_metadata22("design:paramtypes", [
     typeof DrizzleClient === "undefined" ? Object : DrizzleClient
   ])
 ], DrizzlePromoSubscriptionLookup);
 
 // src/drizzle-subscription.repository.ts
-var import_common13 = require("@nestjs/common");
-var import_drizzle_orm11 = require("drizzle-orm");
-function _ts_decorate13(decorators, target, key, desc4) {
-  var c = arguments.length, r = c < 3 ? target : desc4 === null ? desc4 = Object.getOwnPropertyDescriptor(target, key) : desc4, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc4);
+var import_common24 = require("@nestjs/common");
+var import_drizzle_orm22 = require("drizzle-orm");
+function _ts_decorate24(decorators, target, key, desc10) {
+  var c = arguments.length, r = c < 3 ? target : desc10 === null ? desc10 = Object.getOwnPropertyDescriptor(target, key) : desc10, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc10);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate13, "_ts_decorate");
-function _ts_metadata12(k, v) {
+__name(_ts_decorate24, "_ts_decorate");
+function _ts_metadata23(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata12, "_ts_metadata");
-function _ts_param12(paramIndex, decorator) {
+__name(_ts_metadata23, "_ts_metadata");
+function _ts_param23(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param12, "_ts_param");
+__name(_ts_param23, "_ts_param");
 var ACTIVE_STATUSES = [
   "ACTIVE",
   "TRIAL"
@@ -1246,19 +3347,28 @@ var DrizzleSubscriptionRepository = class {
     const db = resolveDb(this.db, tx);
     await db.select({
       id: subscriptions.id
-    }).from(subscriptions).where((0, import_drizzle_orm11.eq)(subscriptions.tenantId, tenantId)).for("update");
+    }).from(subscriptions).where((0, import_drizzle_orm22.eq)(subscriptions.tenantId, tenantId)).for("update");
     return this.loadByTenantId(db, tenantId);
   }
   async countByPlanVersionId(planVersionId) {
     const rows = await this.db.select({
       id: subscriptions.id
-    }).from(subscriptions).where((0, import_drizzle_orm11.or)((0, import_drizzle_orm11.eq)(subscriptions.planVersionId, planVersionId), (0, import_drizzle_orm11.eq)(subscriptions.pendingPlanVersionId, planVersionId)));
+    }).from(subscriptions).where((0, import_drizzle_orm22.or)((0, import_drizzle_orm22.eq)(subscriptions.planVersionId, planVersionId), (0, import_drizzle_orm22.eq)(subscriptions.pendingPlanVersionId, planVersionId)));
     return rows.length;
   }
-  async countActiveByPlanKey(_projectKey) {
+  async countActiveByPlanKey() {
+    const now = /* @__PURE__ */ new Date();
     const rows = await this.db.select({
       plan: subscriptions.plan
-    }).from(subscriptions).where((0, import_drizzle_orm11.inArray)(subscriptions.status, ACTIVE_STATUSES));
+    }).from(subscriptions).where((0, import_drizzle_orm22.and)((0, import_drizzle_orm22.inArray)(subscriptions.status, ACTIVE_STATUSES), (0, import_drizzle_orm22.or)(
+      (0, import_drizzle_orm22.isNull)(subscriptions.canceledAt),
+      (0, import_drizzle_orm22.gt)(subscriptions.canceledEffectiveAt, now),
+      // The pre-split row keeps its effective date in the
+      // first column; reading only the second drops that
+      // customer on the day they declare rather than the day
+      // they leave.
+      (0, import_drizzle_orm22.and)((0, import_drizzle_orm22.isNull)(subscriptions.canceledEffectiveAt), (0, import_drizzle_orm22.gt)(subscriptions.canceledAt, now))
+    )));
     const counts = {};
     for (const row of rows) {
       counts[row.plan] = (counts[row.plan] ?? 0) + 1;
@@ -1266,13 +3376,13 @@ var DrizzleSubscriptionRepository = class {
     return counts;
   }
   async loadByTenantId(db, tenantId) {
-    const rows = await db.select().from(subscriptions).where((0, import_drizzle_orm11.eq)(subscriptions.tenantId, tenantId)).limit(1);
+    const rows = await db.select().from(subscriptions).where((0, import_drizzle_orm22.eq)(subscriptions.tenantId, tenantId)).limit(1);
     const row = rows[0];
     if (!row) return null;
     return this.toRecord(db, row);
   }
   async toRecord(db, row) {
-    const versionRows = await db.select().from(planVersions).where((0, import_drizzle_orm11.eq)(planVersions.id, row.planVersionId)).limit(1);
+    const versionRows = await db.select().from(planVersions).where((0, import_drizzle_orm22.eq)(planVersions.id, row.planVersionId)).limit(1);
     const planVersion = versionRows[0];
     if (!planVersion) {
       throw new Error(`Subscription ${row.id} references missing PlanVersion ${row.planVersionId}.`);
@@ -1287,6 +3397,8 @@ var DrizzleSubscriptionRepository = class {
       pendingPlan: row.pendingPlan,
       pendingEffectiveAt: row.pendingEffectiveAt,
       customLimits: row.customLimits ?? null,
+      canceledAt: row.canceledAt ?? null,
+      canceledEffectiveAt: row.canceledEffectiveAt ?? null,
       planVersionId: row.planVersionId,
       planVersion: {
         planId: planVersion.planId,
@@ -1296,37 +3408,37 @@ var DrizzleSubscriptionRepository = class {
     };
   }
 };
-DrizzleSubscriptionRepository = _ts_decorate13([
-  (0, import_common13.Injectable)(),
-  _ts_param12(0, (0, import_common13.Inject)(DRIZZLE_DB_TOKEN)),
-  _ts_metadata12("design:type", Function),
-  _ts_metadata12("design:paramtypes", [
+DrizzleSubscriptionRepository = _ts_decorate24([
+  (0, import_common24.Injectable)(),
+  _ts_param23(0, (0, import_common24.Inject)(DRIZZLE_DB_TOKEN)),
+  _ts_metadata23("design:type", Function),
+  _ts_metadata23("design:paramtypes", [
     typeof DrizzleClient === "undefined" ? Object : DrizzleClient
   ])
 ], DrizzleSubscriptionRepository);
 
 // src/drizzle-super-admin-bootstrap.adapter.ts
-var import_node_crypto6 = require("node:crypto");
-var import_common14 = require("@nestjs/common");
-var import_drizzle_orm12 = require("drizzle-orm");
-var import_core = require("@saasicat/core");
-function _ts_decorate14(decorators, target, key, desc4) {
-  var c = arguments.length, r = c < 3 ? target : desc4 === null ? desc4 = Object.getOwnPropertyDescriptor(target, key) : desc4, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc4);
+var import_node_crypto15 = require("node:crypto");
+var import_common25 = require("@nestjs/common");
+var import_drizzle_orm23 = require("drizzle-orm");
+var import_core8 = require("@saasicat/core");
+function _ts_decorate25(decorators, target, key, desc10) {
+  var c = arguments.length, r = c < 3 ? target : desc10 === null ? desc10 = Object.getOwnPropertyDescriptor(target, key) : desc10, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc10);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate14, "_ts_decorate");
-function _ts_metadata13(k, v) {
+__name(_ts_decorate25, "_ts_decorate");
+function _ts_metadata24(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata13, "_ts_metadata");
-function _ts_param13(paramIndex, decorator) {
+__name(_ts_metadata24, "_ts_metadata");
+function _ts_param24(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param13, "_ts_param");
+__name(_ts_param24, "_ts_param");
 var PASSWORD_HASHER_TOKEN = /* @__PURE__ */ Symbol.for("saasicat/adapter-drizzle/PasswordHasher");
 var DrizzleSuperAdminBootstrapAdapter = class {
   static {
@@ -1340,18 +3452,18 @@ var DrizzleSuperAdminBootstrapAdapter = class {
   }
   async countSuperAdmins() {
     const rows = await this.db.select({
-      value: (0, import_drizzle_orm12.count)()
-    }).from(superAdminUsers).where((0, import_drizzle_orm12.and)((0, import_drizzle_orm12.eq)(superAdminUsers.isActive, true), (0, import_drizzle_orm12.isNull)(superAdminUsers.deletedAt)));
+      value: (0, import_drizzle_orm23.count)()
+    }).from(superAdminUsers).where((0, import_drizzle_orm23.and)((0, import_drizzle_orm23.eq)(superAdminUsers.isActive, true), (0, import_drizzle_orm23.isNull)(superAdminUsers.deletedAt)));
     return rows[0]?.value ?? 0;
   }
   async createSuperAdmin(input) {
     const email = input.email.trim().toLowerCase();
-    const existing = await this.db.select().from(superAdminUsers).where((0, import_drizzle_orm12.eq)(superAdminUsers.email, email)).limit(1);
+    const existing = await this.db.select().from(superAdminUsers).where((0, import_drizzle_orm23.eq)(superAdminUsers.email, email)).limit(1);
     if (existing[0]) {
-      throw new import_core.PlatformUserExistsError(email, existing[0].platformRole);
+      throw new import_core8.PlatformUserExistsError(email, existing[0].platformRole);
     }
     const rows = await this.db.insert(superAdminUsers).values({
-      id: (0, import_node_crypto6.randomUUID)(),
+      id: (0, import_node_crypto15.randomUUID)(),
       email,
       passwordHash: await this.passwordHasher.hash(input.password),
       firstName: input.firstName ?? null,
@@ -1371,36 +3483,36 @@ var DrizzleSuperAdminBootstrapAdapter = class {
     };
   }
 };
-DrizzleSuperAdminBootstrapAdapter = _ts_decorate14([
-  (0, import_common14.Injectable)(),
-  _ts_param13(0, (0, import_common14.Inject)(DRIZZLE_DB_TOKEN)),
-  _ts_param13(1, (0, import_common14.Inject)(PASSWORD_HASHER_TOKEN)),
-  _ts_metadata13("design:type", Function),
-  _ts_metadata13("design:paramtypes", [
+DrizzleSuperAdminBootstrapAdapter = _ts_decorate25([
+  (0, import_common25.Injectable)(),
+  _ts_param24(0, (0, import_common25.Inject)(DRIZZLE_DB_TOKEN)),
+  _ts_param24(1, (0, import_common25.Inject)(PASSWORD_HASHER_TOKEN)),
+  _ts_metadata24("design:type", Function),
+  _ts_metadata24("design:paramtypes", [
     typeof DrizzleClient === "undefined" ? Object : DrizzleClient,
     typeof PasswordHasher === "undefined" ? Object : PasswordHasher
   ])
 ], DrizzleSuperAdminBootstrapAdapter);
 
 // src/drizzle-transaction-runner.adapter.ts
-var import_common15 = require("@nestjs/common");
-function _ts_decorate15(decorators, target, key, desc4) {
-  var c = arguments.length, r = c < 3 ? target : desc4 === null ? desc4 = Object.getOwnPropertyDescriptor(target, key) : desc4, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc4);
+var import_common26 = require("@nestjs/common");
+function _ts_decorate26(decorators, target, key, desc10) {
+  var c = arguments.length, r = c < 3 ? target : desc10 === null ? desc10 = Object.getOwnPropertyDescriptor(target, key) : desc10, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc10);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate15, "_ts_decorate");
-function _ts_metadata14(k, v) {
+__name(_ts_decorate26, "_ts_decorate");
+function _ts_metadata25(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata14, "_ts_metadata");
-function _ts_param14(paramIndex, decorator) {
+__name(_ts_metadata25, "_ts_metadata");
+function _ts_param25(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param14, "_ts_param");
+__name(_ts_param25, "_ts_param");
 var DrizzleTransactionRunner = class {
   static {
     __name(this, "DrizzleTransactionRunner");
@@ -1413,24 +3525,24 @@ var DrizzleTransactionRunner = class {
     return this.db.transaction((tx) => fn(tx));
   }
 };
-DrizzleTransactionRunner = _ts_decorate15([
-  (0, import_common15.Injectable)(),
-  _ts_param14(0, (0, import_common15.Inject)(DRIZZLE_DB_TOKEN)),
-  _ts_metadata14("design:type", Function),
-  _ts_metadata14("design:paramtypes", [
+DrizzleTransactionRunner = _ts_decorate26([
+  (0, import_common26.Injectable)(),
+  _ts_param25(0, (0, import_common26.Inject)(DRIZZLE_DB_TOKEN)),
+  _ts_metadata25("design:type", Function),
+  _ts_metadata25("design:paramtypes", [
     typeof DrizzleClient === "undefined" ? Object : DrizzleClient
   ])
 ], DrizzleTransactionRunner);
 
 // src/zero-promo-revenue-aggregator.adapter.ts
-var import_common16 = require("@nestjs/common");
-function _ts_decorate16(decorators, target, key, desc4) {
-  var c = arguments.length, r = c < 3 ? target : desc4 === null ? desc4 = Object.getOwnPropertyDescriptor(target, key) : desc4, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc4);
+var import_common27 = require("@nestjs/common");
+function _ts_decorate27(decorators, target, key, desc10) {
+  var c = arguments.length, r = c < 3 ? target : desc10 === null ? desc10 = Object.getOwnPropertyDescriptor(target, key) : desc10, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc10);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate16, "_ts_decorate");
+__name(_ts_decorate27, "_ts_decorate");
 var ZeroPromoRevenueDeductionAggregator = class {
   static {
     __name(this, "ZeroPromoRevenueDeductionAggregator");
@@ -1439,8 +3551,8 @@ var ZeroPromoRevenueDeductionAggregator = class {
     return "0.00";
   }
 };
-ZeroPromoRevenueDeductionAggregator = _ts_decorate16([
-  (0, import_common16.Injectable)()
+ZeroPromoRevenueDeductionAggregator = _ts_decorate27([
+  (0, import_common27.Injectable)()
 ], ZeroPromoRevenueDeductionAggregator);
 
 // src/drizzle-persistence.ts
@@ -1466,18 +3578,55 @@ function drizzlePersistence(options) {
       transactionRunner: provide((client) => new DrizzleTransactionRunner(client)),
       auditQuery: provide((client) => new DrizzleAuditQueryAdapter(client)),
       auditStats: provide((client) => new DrizzleAuditStatsAdapter(client)),
-      superAdminProvisioning: buildProvisioning(db, options.passwordHasher)
+      superAdminProvisioning: buildProvisioning(db, options.passwordHasher),
+      appliedSettings: provide((client) => new DrizzleAppliedSettingsRepository(client))
     },
     entitlement: {
       subscriptionRepository: provide((client) => new DrizzleSubscriptionRepository(client)),
-      planVersionRepository: provide((client) => new DrizzlePlanVersionRepository(client))
+      planVersionRepository: provide((client) => new DrizzlePlanVersionRepository(client)),
+      // Entitlement reads the bookings as well as the plan: a tenant's
+      // effective features are the union of the plan and the bundles
+      // booked on top of it, so an adapter that omits this grants less
+      // than the tenant paid for.
+      subscriptionBundleRepository: provide((client) => new DrizzleSubscriptionBundleRepository(client)),
+      // What the tenant actually agreed to, frozen at signing. Entitlement
+      // prefers it over the live catalogue where it exists, which is what
+      // makes a price change stop at the contracts already signed.
+      subscriptionContractRepository: provide((client) => new DrizzleSubscriptionContractRepository(client)),
+      // The party each of those contracts is concluded with.
+      subscriberRepository: provide((client) => new DrizzleSubscriberRepository(client)),
+      // The catalogue behind those bookings: entitlement resolves a
+      // booking's features by reading the pinned version.
+      bundleRepository: provide((client) => new DrizzleBundleRepository(client, options.bundle))
+    },
+    // The editable catalogue: which plans a project sells and in which
+    // versions. Present since 2026-08-27 — before that this adapter could
+    // read a plan version but not author one, so a Drizzle consumer had to
+    // bring their own `CatalogModule` wiring for a slice the adapter was
+    // otherwise complete for.
+    catalog: {
+      planRepository: provide((client) => new DrizzlePlanRepository(client, options.plan)),
+      bundleRepository: provide((client) => new DrizzleBundleRepository(client, options.bundle))
+    },
+    // The tenant's own billing page and the writes behind its buttons.
+    // Both members are required, and until 2026-08-27 neither existed —
+    // which left `DrizzleTenantSubscriptionWrite` unreachable through the
+    // documented `drizzlePersistence({ db })` path however complete it was.
+    tenantBilling: {
+      subscriptionUsagePort: provide((client) => new DrizzleSubscriptionUsageAdapter(client)),
+      subscriptionWritePort: provide((client) => new DrizzleTenantSubscriptionWrite(client))
     },
     promo: {
       promoCodeRepository: provide((client) => new DrizzlePromoCodeRepository(client)),
       redemptionRepository: provide((client) => new DrizzlePromoCodeRedemptionRepository(client)),
       validationLogRepository: provide((client) => new DrizzlePromoCodeValidationLogRepository(client)),
       subscriptionLookup: provide((client) => new DrizzlePromoSubscriptionLookup(client)),
-      revenueAggregator: new ZeroPromoRevenueDeductionAggregator()
+      revenueAggregator: new ZeroPromoRevenueDeductionAggregator(),
+      holdRepository: provide((client) => new DrizzlePromoCodeHoldRepository(client))
+    },
+    payments: {
+      paymentEventLog: provide((client) => new DrizzlePaymentEventLog(client)),
+      subscriberPaymentMethodRepository: provide((client) => new DrizzleSubscriberPaymentMethodRepository(client))
     },
     planCatalogReadSink: provide((client) => new DrizzlePlanCatalogReadSink(client)),
     planCatalogImportSink: provide((client) => new DrizzlePlanCatalogImportSink(client))
@@ -1524,19 +3673,30 @@ __name(buildProvisioning, "buildProvisioning");
 0 && (module.exports = {
   AsyncLocalRlsBypassAdapter,
   DRIZZLE_DB_TOKEN,
+  DrizzleAppliedSettingsRepository,
   DrizzleAuditAdapter,
   DrizzleAuditQueryAdapter,
   DrizzleAuditStatsAdapter,
+  DrizzleBundleRepository,
   DrizzleMfaAdapter,
+  DrizzlePaymentEventLog,
   DrizzlePlanCatalogImportSink,
   DrizzlePlanCatalogReadSink,
+  DrizzlePlanRepository,
   DrizzlePlanVersionRepository,
+  DrizzlePromoCodeHoldRepository,
   DrizzlePromoCodeRedemptionRepository,
   DrizzlePromoCodeRepository,
   DrizzlePromoCodeValidationLogRepository,
   DrizzlePromoSubscriptionLookup,
+  DrizzleSubscriberPaymentMethodRepository,
+  DrizzleSubscriberRepository,
+  DrizzleSubscriptionBundleRepository,
+  DrizzleSubscriptionContractRepository,
   DrizzleSubscriptionRepository,
+  DrizzleSubscriptionUsageAdapter,
   DrizzleSuperAdminBootstrapAdapter,
+  DrizzleTenantSubscriptionWrite,
   DrizzleTransactionRunner,
   PASSWORD_HASHER_TOKEN,
   ZeroPromoRevenueDeductionAggregator,