@saasicat/adapter-drizzle 1.0.0-rc.2 → 1.0.0-rc.21

package/dist/index.js

@@ -6,16 +6,14 @@ var __export = (target, all) => {
 };
 
 // src/client.ts
+import { readQuotaRecord } from "@saasicat/core";
 var DRIZZLE_DB_TOKEN = /* @__PURE__ */ Symbol.for("saasicat/adapter-drizzle/DrizzleDb");
 function resolveDb(client, tx) {
   return tx ?? client;
 }
 __name(resolveDb, "resolveDb");
 function toQuotaMap(value) {
-  if (value !== null && typeof value === "object" && !Array.isArray(value)) {
-    return value;
-  }
-  return {};
+  return readQuotaRecord(value);
 }
 __name(toQuotaMap, "toQuotaMap");
 function toStringArray(value) {
@@ -30,9 +28,9 @@ __name(escapeLikePattern, "escapeLikePattern");
 // src/async-local-rls-bypass.adapter.ts
 import { Injectable } from "@nestjs/common";
 import { AsyncLocalStorage } from "node:async_hooks";
-function _ts_decorate(decorators, target, key, desc4) {
-  var c = arguments.length, r = c < 3 ? target : desc4 === null ? desc4 = Object.getOwnPropertyDescriptor(target, key) : desc4, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc4);
+function _ts_decorate(decorators, target, key, desc10) {
+  var c = arguments.length, r = c < 3 ? target : desc10 === null ? desc10 = Object.getOwnPropertyDescriptor(target, key) : desc10, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc10);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
@@ -56,25 +54,40 @@ AsyncLocalRlsBypassAdapter = _ts_decorate([
   Injectable()
 ], AsyncLocalRlsBypassAdapter);
 
-// src/drizzle-audit.adapter.ts
+// src/drizzle-applied-settings.repository.ts
 import { randomUUID } from "node:crypto";
 import { Inject, Injectable as Injectable2 } from "@nestjs/common";
+import { and, desc, eq, isNotNull, isNull } from "drizzle-orm";
 
 // src/schema.ts
 var schema_exports = {};
 __export(schema_exports, {
+  appliedSettings: () => appliedSettings,
   auditLogs: () => auditLogs,
+  bundleVersions: () => bundleVersions,
+  bundles: () => bundles,
+  contractLineItems: () => contractLineItems,
   featureCatalogEntries: () => featureCatalogEntries,
+  paymentEventLog: () => paymentEventLog,
   planVersions: () => planVersions,
   plans: () => plans,
+  promoCodeHolds: () => promoCodeHolds,
   promoCodeRedemptions: () => promoCodeRedemptions,
   promoCodeValidationLogs: () => promoCodeValidationLogs,
   promoCodes: () => promoCodes,
+  settingsChanges: () => settingsChanges,
+  subscriberCorrections: () => subscriberCorrections,
+  subscriberPaymentMethodSetups: () => subscriberPaymentMethodSetups,
+  subscriberPaymentMethods: () => subscriberPaymentMethods,
+  subscriberTenants: () => subscriberTenants,
+  subscribers: () => subscribers,
+  subscriptionBundles: () => subscriptionBundles,
+  subscriptionContracts: () => subscriptionContracts,
   subscriptions: () => subscriptions,
   superAdminMfa: () => superAdminMfa,
   superAdminUsers: () => superAdminUsers
 });
-import { boolean, integer, jsonb, numeric, pgTable, text, timestamp } from "drizzle-orm/pg-core";
+import { bigint, boolean, integer, jsonb, numeric, pgTable, serial, text, timestamp } from "drizzle-orm/pg-core";
 var ts = /* @__PURE__ */ __name((name) => timestamp(name, {
   precision: 3,
   mode: "date"
@@ -93,6 +106,42 @@ var subscriptions = pgTable("subscriptions", {
   pendingPlanVersionId: text("pendingPlanVersionId"),
   isPilot: boolean("isPilot").notNull().default(false),
   startedAt: ts("startedAt"),
+  // Entitlement resolution ends a subscription by reading these two, so the
+  // query map has to describe them: a column this file omits is a column the
+  // repository cannot return, and the platform then treats a subscription
+  // that ended last January as running.
+  canceledAt: ts("canceledAt"),
+  canceledEffectiveAt: ts("canceledEffectiveAt"),
+  // The billing window, the commitment and the day it is billed on. Omitted
+  // until 2026-08-27, and a column this file omits is one the repositories
+  // cannot return — which is why the renewal, plan-change and cancellation
+  // paths could not be served from this adapter at all.
+  trialEndsAt: ts("trialEndsAt"),
+  currentPeriodStart: ts("currentPeriodStart"),
+  currentPeriodEnd: ts("currentPeriodEnd"),
+  minimumTermUntil: ts("minimumTermUntil"),
+  billingAnchorDay: integer("billingAnchorDay"),
+  // A pending version change and how far it has got: announced, reminded
+  // about, accepted, and the date it lands.
+  pendingPlanVersionEffectiveAt: ts("pendingPlanVersionEffectiveAt"),
+  pendingPlanVersionAccepted: boolean("pendingPlanVersionAccepted").notNull().default(false),
+  pendingPlanVersionAcceptedAt: ts("pendingPlanVersionAcceptedAt"),
+  pendingPlanVersionAcceptedByUserId: text("pendingPlanVersionAcceptedByUserId"),
+  pendingPlanVersionNotifiedAt: ts("pendingPlanVersionNotifiedAt"),
+  pendingPlanVersionReminderSentAt: ts("pendingPlanVersionReminderSentAt"),
+  postTrialPlan: text("postTrialPlan"),
+  pendingBillingCycle: text("pendingBillingCycle"),
+  // A negotiated price and the note that explains it, a pilot window, the
+  // offer this subscription came from, and the package as it was sold.
+  customMonthlyNet: numeric("customMonthlyNet", {
+    precision: 10,
+    scale: 2
+  }),
+  customNote: text("customNote"),
+  pilotEndsAt: ts("pilotEndsAt"),
+  pilotNote: text("pilotNote"),
+  checkoutOfferId: text("checkoutOfferId"),
+  packageSnapshot: jsonb("packageSnapshot"),
   createdAt: ts("createdAt").notNull().defaultNow(),
   updatedAt: ts("updatedAt").notNull()
 });
@@ -117,6 +166,12 @@ var planVersions = pgTable("plan_versions", {
   publishedChanges: jsonb("publishedChanges"),
   changeNote: text("changeNote").notNull(),
   nonRegressive: boolean("nonRegressive").notNull().default(true),
+  // The booking window for new subscriptions, and the day the plan itself
+  // stops. All three nullable, so a schema that predates them stays valid and
+  // an adapter that does not maintain them says so rather than writing them.
+  validFrom: ts("validFrom"),
+  validUntil: ts("validUntil"),
+  endsAt: ts("endsAt"),
   createdByUserId: text("createdByUserId"),
   publishedByUserId: text("publishedByUserId"),
   createdAt: ts("createdAt").notNull().defaultNow(),
@@ -124,7 +179,6 @@ var planVersions = pgTable("plan_versions", {
 });
 var plans = pgTable("plans", {
   id: text("id").primaryKey(),
-  projectKey: text("projectKey").notNull(),
   planKey: text("planKey").notNull(),
   label: text("label").notNull(),
   description: text("description"),
@@ -134,9 +188,66 @@ var plans = pgTable("plans", {
   updatedAt: ts("updatedAt").notNull(),
   deletedAt: ts("deletedAt")
 });
+var subscriptionContracts = pgTable("subscription_contracts", {
+  id: text("id").primaryKey(),
+  tenantId: text("tenantId").notNull(),
+  // Postgres enum, declared as text: parameterized values are coerced and
+  // reads come back as strings, which is what the records expect.
+  status: text("status").notNull().default("active"),
+  effectiveFrom: ts("effectiveFrom").notNull(),
+  effectiveUntil: ts("effectiveUntil"),
+  originalOfferId: text("originalOfferId"),
+  originalPlanVersionId: text("originalPlanVersionId"),
+  originalBundleVersionIds: jsonb("originalBundleVersionIds").notNull(),
+  entitlementSnapshot: jsonb("entitlementSnapshot"),
+  priceSnapshot: jsonb("priceSnapshot").notNull(),
+  promotionSnapshots: jsonb("promotionSnapshots").notNull(),
+  promoCodeSnapshots: jsonb("promoCodeSnapshots").notNull(),
+  termsSnapshot: jsonb("termsSnapshot"),
+  // Who the contract is between, copied when it was concluded.
+  subscriberId: text("subscriberId").notNull(),
+  subscriberSnapshot: jsonb("subscriberSnapshot").notNull(),
+  issuerSnapshot: jsonb("issuerSnapshot"),
+  partiesMigrated: boolean("partiesMigrated").notNull().default(false),
+  createdAt: ts("createdAt").notNull().defaultNow(),
+  updatedAt: ts("updatedAt").notNull()
+});
+var contractLineItems = pgTable("contract_line_items", {
+  id: text("id").primaryKey(),
+  contractId: text("contractId").notNull(),
+  kind: text("kind").notNull(),
+  sourceKey: text("sourceKey").notNull(),
+  sourceVersionId: text("sourceVersionId"),
+  titleSnapshot: text("titleSnapshot").notNull(),
+  descriptionSnapshot: text("descriptionSnapshot"),
+  quantity: integer("quantity").notNull().default(1),
+  unit: text("unit"),
+  priceNet: numeric("priceNet", {
+    precision: 10,
+    scale: 2
+  }).notNull(),
+  priceGross: numeric("priceGross", {
+    precision: 10,
+    scale: 2
+  }).notNull(),
+  billingCycle: text("billingCycle").notNull(),
+  currency: text("currency").notNull(),
+  taxRate: numeric("taxRate", {
+    precision: 5,
+    scale: 2
+  }).notNull(),
+  taxAmount: numeric("taxAmount", {
+    precision: 10,
+    scale: 2
+  }).notNull(),
+  minimumTermUntil: ts("minimumTermUntil"),
+  featuresSnapshot: jsonb("featuresSnapshot").notNull(),
+  quotaEffectsSnapshot: jsonb("quotaEffectsSnapshot").notNull(),
+  metadata: jsonb("metadata"),
+  createdAt: ts("createdAt").notNull().defaultNow()
+});
 var featureCatalogEntries = pgTable("feature_catalog_entries", {
   id: text("id").primaryKey(),
-  projectKey: text("projectKey").notNull(),
   featureKey: text("featureKey").notNull(),
   label: text("label").notNull(),
   description: text("description"),
@@ -173,6 +284,7 @@ var promoCodes = pgTable("promo_codes", {
   validUntil: ts("validUntil"),
   maxRedemptions: integer("maxRedemptions"),
   redemptionsCount: integer("redemptionsCount").notNull().default(0),
+  heldCount: integer("heldCount").notNull().default(0),
   appliesToPlans: text("appliesToPlans").array(),
   appliesToBilling: text("appliesToBilling"),
   firstTimeCustomersOnly: boolean("firstTimeCustomersOnly").notNull().default(true),
@@ -208,6 +320,16 @@ var promoCodeRedemptions = pgTable("promo_code_redemptions", {
   redeemedAt: ts("redeemedAt").notNull().defaultNow(),
   reversedAt: ts("reversedAt")
 });
+var promoCodeHolds = pgTable("promo_code_holds", {
+  id: text("id").primaryKey(),
+  promoCodeId: text("promoCodeId").notNull(),
+  checkoutOfferId: text("checkoutOfferId").notNull(),
+  expiresAt: ts("expiresAt").notNull(),
+  handedOverTx: bigint("handedOverTx", {
+    mode: "bigint"
+  }),
+  createdAt: ts("createdAt").notNull().defaultNow()
+});
 var promoCodeValidationLogs = pgTable("promo_code_validation_logs", {
   id: text("id").primaryKey(),
   promoCodeId: text("promoCodeId"),
@@ -249,11 +371,166 @@ var superAdminMfa = pgTable("super_admin_mfa", {
   enabledAt: ts("enabledAt"),
   updatedAt: ts("updatedAt").notNull()
 });
+var bundles = pgTable("bundles", {
+  id: text("id").primaryKey(),
+  bundleKey: text("bundleKey").notNull(),
+  label: text("label").notNull(),
+  description: text("description"),
+  icon: text("icon"),
+  sortOrder: integer("sortOrder").notNull().default(0),
+  i18n: jsonb("i18n").notNull(),
+  createdAt: ts("createdAt").notNull().defaultNow(),
+  updatedAt: ts("updatedAt").notNull(),
+  deletedAt: ts("deletedAt")
+});
+var bundleVersions = pgTable("bundle_versions", {
+  id: text("id").primaryKey(),
+  bundleId: text("bundleId").notNull(),
+  version: integer("version").notNull(),
+  baseVersionId: text("baseVersionId"),
+  features: jsonb("features").notNull(),
+  quotas: jsonb("quotas").notNull(),
+  compatibility: jsonb("compatibility").notNull(),
+  pricingOverrides: jsonb("pricingOverrides").notNull(),
+  // Nullable, unlike a plan version's: a bundle may carry no base price and
+  // resolve one per plan through `pricingOverrides` instead.
+  monthlyNet: numeric("monthlyNet", {
+    precision: 10,
+    scale: 2
+  }),
+  yearlyNet: numeric("yearlyNet", {
+    precision: 10,
+    scale: 2
+  }),
+  marketed: boolean("marketed").notNull().default(true),
+  publishedAt: ts("publishedAt"),
+  supersededAt: ts("supersededAt"),
+  publishedChanges: jsonb("publishedChanges"),
+  changeNote: text("changeNote").notNull(),
+  nonRegressive: boolean("nonRegressive").notNull().default(true),
+  validFrom: ts("validFrom"),
+  validUntil: ts("validUntil"),
+  createdByUserId: text("createdByUserId"),
+  publishedByUserId: text("publishedByUserId"),
+  createdAt: ts("createdAt").notNull().defaultNow(),
+  updatedAt: ts("updatedAt").notNull()
+});
+var subscriptionBundles = pgTable("subscription_bundles", {
+  id: text("id").primaryKey(),
+  subscriptionId: text("subscriptionId").notNull(),
+  bundleVersionId: text("bundleVersionId").notNull(),
+  startedAt: ts("startedAt").notNull(),
+  minimumTermEndsAt: ts("minimumTermEndsAt"),
+  // The rhythm this booking is billed in and the window it is billed for. A
+  // bundle's periods end on the day the plan's do; all three are null on a
+  // booking made before these columns existed, and on one whose plan had no
+  // period to align to — a trial, or a subscription awaiting sales.
+  billingCycle: text("billingCycle"),
+  currentPeriodStart: ts("currentPeriodStart"),
+  currentPeriodEnd: ts("currentPeriodEnd"),
+  canceledAt: ts("canceledAt"),
+  canceledEffectiveAt: ts("canceledEffectiveAt"),
+  createdAt: ts("createdAt").notNull().defaultNow(),
+  updatedAt: ts("updatedAt").notNull()
+});
+var appliedSettings = pgTable("applied_settings", {
+  id: text("id").primaryKey().default("installation"),
+  fingerprint: text("fingerprint").notNull(),
+  settings: jsonb("settings").notNull(),
+  source: text("source").notNull(),
+  appliedAt: ts("appliedAt").notNull()
+});
+var settingsChanges = pgTable("settings_changes", {
+  id: text("id").primaryKey(),
+  // Numbered by the database at the write that recorded the change, and the
+  // order the list is read in. Never set by the adapter.
+  seq: serial("seq").notNull(),
+  noticedAt: ts("noticedAt").notNull(),
+  source: text("source").notNull(),
+  previous: jsonb("previous").notNull(),
+  current: jsonb("current").notNull(),
+  acknowledgedAt: ts("acknowledgedAt"),
+  acknowledgedBy: text("acknowledgedBy")
+});
+var subscribers = pgTable("subscribers", {
+  id: text("id").primaryKey(),
+  // Counted by the database, from where `constraints.postgres.sql` starts it.
+  // Never set by the adapter.
+  customerSequence: serial("customerSequence").notNull(),
+  customerNumberPrefix: text("customerNumberPrefix").notNull().default(""),
+  legalName: text("legalName").notNull(),
+  vatId: text("vatId"),
+  taxNumber: text("taxNumber"),
+  addressLine1: text("addressLine1"),
+  addressLine2: text("addressLine2"),
+  postalCode: text("postalCode"),
+  city: text("city"),
+  country: text("country"),
+  invoiceEmail: text("invoiceEmail"),
+  migrated: boolean("migrated").notNull().default(false),
+  createdAt: ts("createdAt").notNull().defaultNow(),
+  updatedAt: ts("updatedAt").notNull()
+});
+var subscriberTenants = pgTable("subscriber_tenants", {
+  id: text("id").primaryKey(),
+  subscriberId: text("subscriberId").notNull(),
+  tenantId: text("tenantId").notNull(),
+  linkedAt: ts("linkedAt").notNull().defaultNow(),
+  unlinkedAt: ts("unlinkedAt")
+});
+var subscriberCorrections = pgTable("subscriber_corrections", {
+  id: text("id").primaryKey(),
+  subscriberId: text("subscriberId").notNull(),
+  previous: jsonb("previous").notNull(),
+  corrected: jsonb("corrected").notNull(),
+  reason: text("reason").notNull(),
+  correctedBy: text("correctedBy").notNull(),
+  correctedAt: ts("correctedAt").notNull()
+});
+var subscriberPaymentMethodSetups = pgTable("subscriber_payment_method_setups", {
+  id: text("id").primaryKey(),
+  subscriberId: text("subscriberId").notNull(),
+  gatewayAccount: text("gatewayAccount").notNull(),
+  sessionRef: text("sessionRef").notNull(),
+  customerRef: text("customerRef").notNull(),
+  startedAt: ts("startedAt").notNull().defaultNow(),
+  completedAt: ts("completedAt")
+});
+var paymentEventLog = pgTable("PaymentEventLog", {
+  id: text("id").primaryKey(),
+  gatewayAccount: text("gatewayAccount").notNull(),
+  eventId: text("eventId").notNull(),
+  provider: text("provider").notNull(),
+  sessionId: text("sessionId"),
+  status: text("status").notNull(),
+  payload: jsonb("payload"),
+  processedAt: ts("processedAt").notNull().defaultNow()
+});
+var subscriberPaymentMethods = pgTable("subscriber_payment_methods", {
+  id: text("id").primaryKey(),
+  subscriberId: text("subscriberId").notNull(),
+  gatewayAccount: text("gatewayAccount").notNull(),
+  provider: text("provider").notNull(),
+  customerRef: text("customerRef").notNull(),
+  paymentMethodRef: text("paymentMethodRef").notNull(),
+  type: text("type").notNull(),
+  brand: text("brand"),
+  last4: text("last4").notNull(),
+  expiryMonth: integer("expiryMonth"),
+  expiryYear: integer("expiryYear"),
+  country: text("country"),
+  bankCode: text("bankCode"),
+  mandateReference: text("mandateReference"),
+  status: text("status").notNull().default("ACTIVE"),
+  confirmedAt: ts("confirmedAt").notNull(),
+  replacedAt: ts("replacedAt"),
+  createdAt: ts("createdAt").notNull().defaultNow()
+});
 
-// src/drizzle-audit.adapter.ts
-function _ts_decorate2(decorators, target, key, desc4) {
-  var c = arguments.length, r = c < 3 ? target : desc4 === null ? desc4 = Object.getOwnPropertyDescriptor(target, key) : desc4, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc4);
+// src/drizzle-applied-settings.repository.ts
+function _ts_decorate2(decorators, target, key, desc10) {
+  var c = arguments.length, r = c < 3 ? target : desc10 === null ? desc10 = Object.getOwnPropertyDescriptor(target, key) : desc10, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc10);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
@@ -268,6 +545,126 @@ function _ts_param(paramIndex, decorator) {
   };
 }
 __name(_ts_param, "_ts_param");
+var INSTALLATION_ROW_ID = "installation";
+var DrizzleAppliedSettingsRepository = class {
+  static {
+    __name(this, "DrizzleAppliedSettingsRepository");
+  }
+  db;
+  constructor(db) {
+    this.db = db;
+  }
+  async readApplied() {
+    const rows = await this.db.select().from(appliedSettings).where(eq(appliedSettings.id, INSTALLATION_ROW_ID)).limit(1);
+    const row = rows[0];
+    if (!row) return null;
+    return {
+      fingerprint: row.fingerprint,
+      settings: toValues(row.settings),
+      source: row.source,
+      appliedAt: row.appliedAt
+    };
+  }
+  async writeApplied(record, expectedFingerprint) {
+    return replaceRecord(this.db, record, expectedFingerprint);
+  }
+  async recordChange(change, record, expectedFingerprint) {
+    return this.db.transaction(async (tx) => {
+      const db = tx;
+      if (!await replaceRecord(db, record, expectedFingerprint)) return null;
+      const row = {
+        id: randomUUID(),
+        noticedAt: change.noticedAt,
+        source: change.source,
+        previous: change.previous,
+        current: change.current,
+        acknowledgedAt: null,
+        acknowledgedBy: null
+      };
+      await db.insert(settingsChanges).values(row);
+      return toChangeRecord(row);
+    });
+  }
+  async listChanges(filter = {}) {
+    const acknowledgement = filter.acknowledged === void 0 ? void 0 : filter.acknowledged ? isNotNull(settingsChanges.acknowledgedAt) : isNull(settingsChanges.acknowledgedAt);
+    const query = this.db.select().from(settingsChanges).where(acknowledgement).orderBy(desc(settingsChanges.seq));
+    const rows = filter.limit === void 0 ? await query : await query.limit(filter.limit);
+    return rows.map(toChangeRecord);
+  }
+  async acknowledgeChange(id, acknowledgedBy, acknowledgedAt) {
+    await this.db.update(settingsChanges).set({
+      acknowledgedAt,
+      acknowledgedBy
+    }).where(and(eq(settingsChanges.id, id), isNull(settingsChanges.acknowledgedAt)));
+    const rows = await this.db.select().from(settingsChanges).where(eq(settingsChanges.id, id)).limit(1);
+    return rows[0] ? toChangeRecord(rows[0]) : null;
+  }
+};
+DrizzleAppliedSettingsRepository = _ts_decorate2([
+  Injectable2(),
+  _ts_param(0, Inject(DRIZZLE_DB_TOKEN)),
+  _ts_metadata("design:type", Function),
+  _ts_metadata("design:paramtypes", [
+    typeof DrizzleClient === "undefined" ? Object : DrizzleClient
+  ])
+], DrizzleAppliedSettingsRepository);
+async function replaceRecord(db, record, expectedFingerprint) {
+  const values = {
+    fingerprint: record.fingerprint,
+    settings: record.settings,
+    source: record.source,
+    appliedAt: record.appliedAt
+  };
+  const written = expectedFingerprint === null ? await db.insert(appliedSettings).values({
+    id: INSTALLATION_ROW_ID,
+    ...values
+  }).onConflictDoNothing({
+    target: appliedSettings.id
+  }).returning({
+    id: appliedSettings.id
+  }) : await db.update(appliedSettings).set(values).where(and(eq(appliedSettings.id, INSTALLATION_ROW_ID), eq(appliedSettings.fingerprint, expectedFingerprint))).returning({
+    id: appliedSettings.id
+  });
+  return written.length === 1;
+}
+__name(replaceRecord, "replaceRecord");
+function toChangeRecord(row) {
+  return {
+    id: row.id,
+    noticedAt: row.noticedAt,
+    source: row.source,
+    previous: toValues(row.previous),
+    current: toValues(row.current),
+    acknowledgedAt: row.acknowledgedAt,
+    acknowledgedBy: row.acknowledgedBy
+  };
+}
+__name(toChangeRecord, "toChangeRecord");
+function toValues(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value) ? value : {};
+}
+__name(toValues, "toValues");
+
+// src/drizzle-audit.adapter.ts
+import { randomUUID as randomUUID2 } from "node:crypto";
+import { Inject as Inject2, Injectable as Injectable3 } from "@nestjs/common";
+function _ts_decorate3(decorators, target, key, desc10) {
+  var c = arguments.length, r = c < 3 ? target : desc10 === null ? desc10 = Object.getOwnPropertyDescriptor(target, key) : desc10, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc10);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate3, "_ts_decorate");
+function _ts_metadata2(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata2, "_ts_metadata");
+function _ts_param2(paramIndex, decorator) {
+  return function(target, key) {
+    decorator(target, key, paramIndex);
+  };
+}
+__name(_ts_param2, "_ts_param");
 function buildActorTag(actor) {
   return `${actor.source}:${actor.email}:${actor.context}`;
 }
@@ -282,7 +679,7 @@ var DrizzleAuditAdapter = class {
   }
   async write(input) {
     await this.db.insert(auditLogs).values({
-      id: randomUUID(),
+      id: randomUUID2(),
       tenantId: null,
       userId: input.actor.userId,
       entity: input.entity,
@@ -293,35 +690,35 @@ var DrizzleAuditAdapter = class {
     });
   }
 };
-DrizzleAuditAdapter = _ts_decorate2([
-  Injectable2(),
-  _ts_param(0, Inject(DRIZZLE_DB_TOKEN)),
-  _ts_metadata("design:type", Function),
-  _ts_metadata("design:paramtypes", [
+DrizzleAuditAdapter = _ts_decorate3([
+  Injectable3(),
+  _ts_param2(0, Inject2(DRIZZLE_DB_TOKEN)),
+  _ts_metadata2("design:type", Function),
+  _ts_metadata2("design:paramtypes", [
     typeof DrizzleClient === "undefined" ? Object : DrizzleClient
   ])
 ], DrizzleAuditAdapter);
 
 // src/drizzle-audit-query.adapter.ts
-import { Inject as Inject2, Injectable as Injectable3 } from "@nestjs/common";
-import { and, desc, eq, gte, like, lte } from "drizzle-orm";
-function _ts_decorate3(decorators, target, key, desc4) {
-  var c = arguments.length, r = c < 3 ? target : desc4 === null ? desc4 = Object.getOwnPropertyDescriptor(target, key) : desc4, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc4);
+import { Inject as Inject3, Injectable as Injectable4 } from "@nestjs/common";
+import { and as and2, desc as desc2, eq as eq2, gte, like, lte } from "drizzle-orm";
+function _ts_decorate4(decorators, target, key, desc10) {
+  var c = arguments.length, r = c < 3 ? target : desc10 === null ? desc10 = Object.getOwnPropertyDescriptor(target, key) : desc10, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc10);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate3, "_ts_decorate");
-function _ts_metadata2(k, v) {
+__name(_ts_decorate4, "_ts_decorate");
+function _ts_metadata3(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata2, "_ts_metadata");
-function _ts_param2(paramIndex, decorator) {
+__name(_ts_metadata3, "_ts_metadata");
+function _ts_param3(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param2, "_ts_param");
+__name(_ts_param3, "_ts_param");
 var DEFAULT_PAGE_SIZE = 50;
 var MAX_PAGE_SIZE = 200;
 var DrizzleAuditQueryAdapter = class {
@@ -336,24 +733,24 @@ var DrizzleAuditQueryAdapter = class {
     const page = Math.max(filter.page ?? 1, 1);
     const pageSize = Math.min(Math.max(filter.pageSize ?? DEFAULT_PAGE_SIZE, 1), MAX_PAGE_SIZE);
     const conditions = [
-      filter.tenantId ? eq(auditLogs.tenantId, filter.tenantId) : void 0,
-      filter.userId ? eq(auditLogs.userId, filter.userId) : void 0,
-      filter.entity ? eq(auditLogs.entity, filter.entity) : void 0,
-      filter.entityId ? eq(auditLogs.entityId, filter.entityId) : void 0,
-      filter.action ? eq(auditLogs.action, filter.action) : void 0,
+      filter.tenantId ? eq2(auditLogs.tenantId, filter.tenantId) : void 0,
+      filter.userId ? eq2(auditLogs.userId, filter.userId) : void 0,
+      filter.entity ? eq2(auditLogs.entity, filter.entity) : void 0,
+      filter.entityId ? eq2(auditLogs.entityId, filter.entityId) : void 0,
+      filter.action ? eq2(auditLogs.action, filter.action) : void 0,
       toActorTagCondition(filter.actorTag),
       filter.from ? gte(auditLogs.createdAt, new Date(filter.from)) : void 0,
       filter.to ? lte(auditLogs.createdAt, new Date(filter.to)) : void 0
     ];
-    const rows = await this.db.select().from(auditLogs).where(and(...conditions)).orderBy(desc(auditLogs.createdAt)).limit(pageSize).offset((page - 1) * pageSize);
+    const rows = await this.db.select().from(auditLogs).where(and2(...conditions)).orderBy(desc2(auditLogs.createdAt)).limit(pageSize).offset((page - 1) * pageSize);
     return rows.map(toAuditEntry);
   }
 };
-DrizzleAuditQueryAdapter = _ts_decorate3([
-  Injectable3(),
-  _ts_param2(0, Inject2(DRIZZLE_DB_TOKEN)),
-  _ts_metadata2("design:type", Function),
-  _ts_metadata2("design:paramtypes", [
+DrizzleAuditQueryAdapter = _ts_decorate4([
+  Injectable4(),
+  _ts_param3(0, Inject3(DRIZZLE_DB_TOKEN)),
+  _ts_metadata3("design:type", Function),
+  _ts_metadata3("design:paramtypes", [
     typeof DrizzleClient === "undefined" ? Object : DrizzleClient
   ])
 ], DrizzleAuditQueryAdapter);
@@ -362,7 +759,7 @@ function toActorTagCondition(actorTag) {
   if (actorTag.endsWith("*")) {
     return like(auditLogs.actorTag, `${escapeLikePattern(actorTag.slice(0, -1))}%`);
   }
-  return eq(auditLogs.actorTag, actorTag);
+  return eq2(auditLogs.actorTag, actorTag);
 }
 __name(toActorTagCondition, "toActorTagCondition");
 function toAuditEntry(row) {
@@ -385,25 +782,25 @@ function toAuditEntry(row) {
 __name(toAuditEntry, "toAuditEntry");
 
 // src/drizzle-audit-stats.adapter.ts
-import { Inject as Inject3, Injectable as Injectable4 } from "@nestjs/common";
+import { Inject as Inject4, Injectable as Injectable5 } from "@nestjs/common";
 import { count, gte as gte2 } from "drizzle-orm";
-function _ts_decorate4(decorators, target, key, desc4) {
-  var c = arguments.length, r = c < 3 ? target : desc4 === null ? desc4 = Object.getOwnPropertyDescriptor(target, key) : desc4, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc4);
+function _ts_decorate5(decorators, target, key, desc10) {
+  var c = arguments.length, r = c < 3 ? target : desc10 === null ? desc10 = Object.getOwnPropertyDescriptor(target, key) : desc10, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc10);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate4, "_ts_decorate");
-function _ts_metadata3(k, v) {
+__name(_ts_decorate5, "_ts_decorate");
+function _ts_metadata4(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata3, "_ts_metadata");
-function _ts_param3(paramIndex, decorator) {
+__name(_ts_metadata4, "_ts_metadata");
+function _ts_param4(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param3, "_ts_param");
+__name(_ts_param4, "_ts_param");
 var DrizzleAuditStatsAdapter = class {
   static {
     __name(this, "DrizzleAuditStatsAdapter");
@@ -419,35 +816,35 @@ var DrizzleAuditStatsAdapter = class {
     return rows[0]?.value ?? 0;
   }
 };
-DrizzleAuditStatsAdapter = _ts_decorate4([
-  Injectable4(),
-  _ts_param3(0, Inject3(DRIZZLE_DB_TOKEN)),
-  _ts_metadata3("design:type", Function),
-  _ts_metadata3("design:paramtypes", [
+DrizzleAuditStatsAdapter = _ts_decorate5([
+  Injectable5(),
+  _ts_param4(0, Inject4(DRIZZLE_DB_TOKEN)),
+  _ts_metadata4("design:type", Function),
+  _ts_metadata4("design:paramtypes", [
     typeof DrizzleClient === "undefined" ? Object : DrizzleClient
   ])
 ], DrizzleAuditStatsAdapter);
 
 // src/drizzle-mfa.adapter.ts
-import { Inject as Inject4, Injectable as Injectable5 } from "@nestjs/common";
-import { eq as eq2 } from "drizzle-orm";
-function _ts_decorate5(decorators, target, key, desc4) {
-  var c = arguments.length, r = c < 3 ? target : desc4 === null ? desc4 = Object.getOwnPropertyDescriptor(target, key) : desc4, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc4);
+import { Inject as Inject5, Injectable as Injectable6 } from "@nestjs/common";
+import { eq as eq3 } from "drizzle-orm";
+function _ts_decorate6(decorators, target, key, desc10) {
+  var c = arguments.length, r = c < 3 ? target : desc10 === null ? desc10 = Object.getOwnPropertyDescriptor(target, key) : desc10, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc10);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate5, "_ts_decorate");
-function _ts_metadata4(k, v) {
+__name(_ts_decorate6, "_ts_decorate");
+function _ts_metadata5(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata4, "_ts_metadata");
-function _ts_param4(paramIndex, decorator) {
+__name(_ts_metadata5, "_ts_metadata");
+function _ts_param5(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param4, "_ts_param");
+__name(_ts_param5, "_ts_param");
 var DrizzleMfaAdapter = class {
   static {
     __name(this, "DrizzleMfaAdapter");
@@ -457,7 +854,7 @@ var DrizzleMfaAdapter = class {
     this.db = db;
   }
   async getSecret(userId) {
-    const rows = await this.db.select().from(superAdminMfa).where(eq2(superAdminMfa.userId, userId)).limit(1);
+    const rows = await this.db.select().from(superAdminMfa).where(eq3(superAdminMfa.userId, userId)).limit(1);
     return rows[0]?.secret ?? null;
   }
   async setSecret(userId, secret) {
@@ -477,41 +874,41 @@ var DrizzleMfaAdapter = class {
     });
   }
   async isEnabled(userId) {
-    const rows = await this.db.select().from(superAdminMfa).where(eq2(superAdminMfa.userId, userId)).limit(1);
+    const rows = await this.db.select().from(superAdminMfa).where(eq3(superAdminMfa.userId, userId)).limit(1);
     const row = rows[0];
     return !!row?.secret && !!row?.enabledAt;
   }
 };
-DrizzleMfaAdapter = _ts_decorate5([
-  Injectable5(),
-  _ts_param4(0, Inject4(DRIZZLE_DB_TOKEN)),
-  _ts_metadata4("design:type", Function),
-  _ts_metadata4("design:paramtypes", [
+DrizzleMfaAdapter = _ts_decorate6([
+  Injectable6(),
+  _ts_param5(0, Inject5(DRIZZLE_DB_TOKEN)),
+  _ts_metadata5("design:type", Function),
+  _ts_metadata5("design:paramtypes", [
     typeof DrizzleClient === "undefined" ? Object : DrizzleClient
   ])
 ], DrizzleMfaAdapter);
 
 // src/drizzle-plan-catalog-import-sink.adapter.ts
-import { randomUUID as randomUUID2 } from "node:crypto";
-import { Inject as Inject5, Injectable as Injectable6 } from "@nestjs/common";
-import { and as and2, eq as eq3, isNotNull, isNull, lt } from "drizzle-orm";
-function _ts_decorate6(decorators, target, key, desc4) {
-  var c = arguments.length, r = c < 3 ? target : desc4 === null ? desc4 = Object.getOwnPropertyDescriptor(target, key) : desc4, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc4);
+import { randomUUID as randomUUID3 } from "node:crypto";
+import { Inject as Inject6, Injectable as Injectable7 } from "@nestjs/common";
+import { and as and3, eq as eq4, isNotNull as isNotNull2, isNull as isNull2, lt } from "drizzle-orm";
+function _ts_decorate7(decorators, target, key, desc10) {
+  var c = arguments.length, r = c < 3 ? target : desc10 === null ? desc10 = Object.getOwnPropertyDescriptor(target, key) : desc10, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc10);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate6, "_ts_decorate");
-function _ts_metadata5(k, v) {
+__name(_ts_decorate7, "_ts_decorate");
+function _ts_metadata6(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata5, "_ts_metadata");
-function _ts_param5(paramIndex, decorator) {
+__name(_ts_metadata6, "_ts_metadata");
+function _ts_param6(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param5, "_ts_param");
+__name(_ts_param6, "_ts_param");
 var DrizzlePlanCatalogImportSink = class {
   static {
     __name(this, "DrizzlePlanCatalogImportSink");
@@ -523,14 +920,13 @@ var DrizzlePlanCatalogImportSink = class {
   async upsertPlan(input) {
     const existing = await this.db.select({
       id: plans.id
-    }).from(plans).where(and2(eq3(plans.projectKey, input.projectKey), eq3(plans.planKey, input.planKey))).limit(1);
+    }).from(plans).where(eq4(plans.planKey, input.planKey)).limit(1);
     if (existing[0]) return {
       created: false,
       skipReason: "exists"
     };
     await this.db.insert(plans).values({
-      id: randomUUID2(),
-      projectKey: input.projectKey,
+      id: randomUUID3(),
       planKey: input.planKey,
       label: input.label,
       description: input.description ?? null,
@@ -544,7 +940,7 @@ var DrizzlePlanCatalogImportSink = class {
   async upsertPlanVersion(input) {
     const existing = await this.db.select({
       id: planVersions.id
-    }).from(planVersions).where(and2(eq3(planVersions.planId, input.planKey), eq3(planVersions.version, input.version))).limit(1);
+    }).from(planVersions).where(and3(eq4(planVersions.planId, input.planKey), eq4(planVersions.version, input.version))).limit(1);
     if (existing[0]) return {
       created: false,
       skipReason: "exists"
@@ -554,10 +950,10 @@ var DrizzlePlanCatalogImportSink = class {
       await this.db.update(planVersions).set({
         supersededAt: now,
         updatedAt: now
-      }).where(and2(eq3(planVersions.planId, input.planKey), isNotNull(planVersions.publishedAt), isNull(planVersions.supersededAt), lt(planVersions.version, input.version)));
+      }).where(and3(eq4(planVersions.planId, input.planKey), isNotNull2(planVersions.publishedAt), isNull2(planVersions.supersededAt), lt(planVersions.version, input.version)));
     }
     await this.db.insert(planVersions).values({
-      id: randomUUID2(),
+      id: randomUUID3(),
       planId: input.planKey,
       version: input.version,
       features: input.features,
@@ -576,14 +972,13 @@ var DrizzlePlanCatalogImportSink = class {
   async upsertFeatureCatalogEntry(input) {
     const existing = await this.db.select({
       id: featureCatalogEntries.id
-    }).from(featureCatalogEntries).where(and2(eq3(featureCatalogEntries.projectKey, input.projectKey), eq3(featureCatalogEntries.featureKey, input.featureKey))).limit(1);
+    }).from(featureCatalogEntries).where(and3(eq4(featureCatalogEntries.featureKey, input.featureKey))).limit(1);
     if (existing[0]) return {
       created: false,
       skipReason: "exists"
     };
     await this.db.insert(featureCatalogEntries).values({
-      id: randomUUID2(),
-      projectKey: input.projectKey,
+      id: randomUUID3(),
       featureKey: input.featureKey,
       label: input.label ?? input.featureKey,
       icon: input.icon ?? null,
@@ -597,35 +992,40 @@ var DrizzlePlanCatalogImportSink = class {
     };
   }
 };
-DrizzlePlanCatalogImportSink = _ts_decorate6([
-  Injectable6(),
-  _ts_param5(0, Inject5(DRIZZLE_DB_TOKEN)),
-  _ts_metadata5("design:type", Function),
-  _ts_metadata5("design:paramtypes", [
+DrizzlePlanCatalogImportSink = _ts_decorate7([
+  Injectable7(),
+  _ts_param6(0, Inject6(DRIZZLE_DB_TOKEN)),
+  _ts_metadata6("design:type", Function),
+  _ts_metadata6("design:paramtypes", [
     typeof DrizzleClient === "undefined" ? Object : DrizzleClient
   ])
 ], DrizzlePlanCatalogImportSink);
 
 // src/drizzle-plan-catalog-read-sink.adapter.ts
-import { Inject as Inject6, Injectable as Injectable7 } from "@nestjs/common";
-import { and as and3, asc, eq as eq4, inArray, isNotNull as isNotNull2, isNull as isNull2 } from "drizzle-orm";
-function _ts_decorate7(decorators, target, key, desc4) {
-  var c = arguments.length, r = c < 3 ? target : desc4 === null ? desc4 = Object.getOwnPropertyDescriptor(target, key) : desc4, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc4);
+import { Inject as Inject7, Injectable as Injectable8 } from "@nestjs/common";
+import { and as and4, asc, inArray, isNotNull as isNotNull3, isNull as isNull3 } from "drizzle-orm";
+import { toPlanRow, toPlanVersionRow } from "@saasicat/core";
+function _ts_decorate8(decorators, target, key, desc10) {
+  var c = arguments.length, r = c < 3 ? target : desc10 === null ? desc10 = Object.getOwnPropertyDescriptor(target, key) : desc10, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc10);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate7, "_ts_decorate");
-function _ts_metadata6(k, v) {
+__name(_ts_decorate8, "_ts_decorate");
+function _ts_metadata7(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata6, "_ts_metadata");
-function _ts_param6(paramIndex, decorator) {
+__name(_ts_metadata7, "_ts_metadata");
+function _ts_param7(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param6, "_ts_param");
+__name(_ts_param7, "_ts_param");
+var CATALOG_VERSION_FIELDS = {
+  validityWindows: false,
+  endsAt: false
+};
 var DrizzlePlanCatalogReadSink = class {
   static {
     __name(this, "DrizzlePlanCatalogReadSink");
@@ -634,70 +1034,29 @@ var DrizzlePlanCatalogReadSink = class {
   constructor(db) {
     this.db = db;
   }
-  async loadSnapshot(projectKey) {
-    const planRows = await this.db.select().from(plans).where(and3(eq4(plans.projectKey, projectKey), isNull2(plans.deletedAt))).orderBy(asc(plans.sortOrder));
+  async loadSnapshot() {
+    const planRows = await this.db.select().from(plans).where(isNull3(plans.deletedAt)).orderBy(asc(plans.sortOrder));
     const planKeys = planRows.map((plan) => plan.planKey);
-    const liveVersionRows = planKeys.length === 0 ? [] : await this.db.select().from(planVersions).where(and3(inArray(planVersions.planId, planKeys), isNotNull2(planVersions.publishedAt), isNull2(planVersions.supersededAt)));
-    const featureRows = await this.db.select().from(featureCatalogEntries).where(and3(eq4(featureCatalogEntries.projectKey, projectKey), isNull2(featureCatalogEntries.deletedAt))).orderBy(asc(featureCatalogEntries.sortOrder));
+    const liveVersionRows = planKeys.length === 0 ? [] : await this.db.select().from(planVersions).where(and4(inArray(planVersions.planId, planKeys), isNotNull3(planVersions.publishedAt), isNull3(planVersions.supersededAt)));
+    const featureRows = await this.db.select().from(featureCatalogEntries).where(isNull3(featureCatalogEntries.deletedAt)).orderBy(asc(featureCatalogEntries.sortOrder));
     return {
-      plans: planRows.map(toPlanRow),
-      livePlanVersions: liveVersionRows.map(toPlanVersionRow),
+      plans: planRows.map((row) => toPlanRow(row)),
+      livePlanVersions: liveVersionRows.map((row) => toPlanVersionRow(row, row.planId, CATALOG_VERSION_FIELDS)),
       featureEntries: featureRows.map(toFeatureCatalogEntryRow)
     };
   }
 };
-DrizzlePlanCatalogReadSink = _ts_decorate7([
-  Injectable7(),
-  _ts_param6(0, Inject6(DRIZZLE_DB_TOKEN)),
-  _ts_metadata6("design:type", Function),
-  _ts_metadata6("design:paramtypes", [
-    typeof DrizzleClient === "undefined" ? Object : DrizzleClient
+DrizzlePlanCatalogReadSink = _ts_decorate8([
+  Injectable8(),
+  _ts_param7(0, Inject7(DRIZZLE_DB_TOKEN)),
+  _ts_metadata7("design:type", Function),
+  _ts_metadata7("design:paramtypes", [
+    typeof DrizzleClient === "undefined" ? Object : DrizzleClient
   ])
 ], DrizzlePlanCatalogReadSink);
-function toPlanRow(row) {
-  return {
-    id: row.id,
-    projectKey: row.projectKey,
-    planKey: row.planKey,
-    label: row.label,
-    description: row.description,
-    icon: row.icon,
-    sortOrder: row.sortOrder,
-    createdAt: row.createdAt.toISOString(),
-    updatedAt: row.updatedAt.toISOString(),
-    deletedAt: row.deletedAt ? row.deletedAt.toISOString() : null
-  };
-}
-__name(toPlanRow, "toPlanRow");
-function toPlanVersionRow(row) {
-  return {
-    id: row.id,
-    planId: row.planId,
-    version: row.version,
-    baseVersionId: row.baseVersionId,
-    publishedAt: row.publishedAt ? row.publishedAt.toISOString() : null,
-    supersededAt: row.supersededAt ? row.supersededAt.toISOString() : null,
-    publishedChanges: row.publishedChanges ?? null,
-    changeNote: row.changeNote,
-    nonRegressive: row.nonRegressive,
-    validFrom: null,
-    validUntil: null,
-    createdByUserId: row.createdByUserId,
-    publishedByUserId: row.publishedByUserId,
-    createdAt: row.createdAt.toISOString(),
-    updatedAt: row.updatedAt.toISOString(),
-    features: toStringArray(row.features),
-    quotas: toQuotaMap(row.quotas),
-    monthlyNet: String(row.monthlyNet),
-    yearlyNet: String(row.yearlyNet),
-    marketed: row.marketed
-  };
-}
-__name(toPlanVersionRow, "toPlanVersionRow");
 function toFeatureCatalogEntryRow(row) {
   return {
     id: row.id,
-    projectKey: row.projectKey,
     featureKey: row.featureKey,
     label: row.label,
     description: row.description,
@@ -723,26 +1082,84 @@ function toFeatureCatalogEntryRow(row) {
 }
 __name(toFeatureCatalogEntryRow, "toFeatureCatalogEntryRow");
 
+// src/drizzle-payment-event-log.adapter.ts
+import { randomUUID as randomUUID4 } from "node:crypto";
+import { and as and5, eq as eq5 } from "drizzle-orm";
+import { Inject as Inject8, Injectable as Injectable9 } from "@nestjs/common";
+function _ts_decorate9(decorators, target, key, desc10) {
+  var c = arguments.length, r = c < 3 ? target : desc10 === null ? desc10 = Object.getOwnPropertyDescriptor(target, key) : desc10, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc10);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate9, "_ts_decorate");
+function _ts_metadata8(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata8, "_ts_metadata");
+function _ts_param8(paramIndex, decorator) {
+  return function(target, key) {
+    decorator(target, key, paramIndex);
+  };
+}
+__name(_ts_param8, "_ts_param");
+var DrizzlePaymentEventLog = class {
+  static {
+    __name(this, "DrizzlePaymentEventLog");
+  }
+  db;
+  constructor(db) {
+    this.db = db;
+  }
+  async claim(claim, tx) {
+    const inserted = await resolveDb(this.db, tx).insert(paymentEventLog).values({
+      id: randomUUID4(),
+      gatewayAccount: claim.gatewayAccount,
+      eventId: claim.eventId,
+      provider: claim.provider,
+      sessionId: claim.sessionId,
+      status: claim.kind,
+      payload: claim.summary
+    }).onConflictDoNothing().returning({
+      id: paymentEventLog.id
+    });
+    return inserted.length === 1;
+  }
+  async releaseSession(gatewayAccount, eventId, tx) {
+    await resolveDb(this.db, tx).update(paymentEventLog).set({
+      sessionId: null
+    }).where(and5(eq5(paymentEventLog.gatewayAccount, gatewayAccount), eq5(paymentEventLog.eventId, eventId)));
+  }
+};
+DrizzlePaymentEventLog = _ts_decorate9([
+  Injectable9(),
+  _ts_param8(0, Inject8(DRIZZLE_DB_TOKEN)),
+  _ts_metadata8("design:type", Function),
+  _ts_metadata8("design:paramtypes", [
+    typeof DrizzleClient === "undefined" ? Object : DrizzleClient
+  ])
+], DrizzlePaymentEventLog);
+
 // src/drizzle-plan-version.repository.ts
-import { Inject as Inject7, Injectable as Injectable8 } from "@nestjs/common";
-import { and as and4, desc as desc2, eq as eq5, isNotNull as isNotNull3, isNull as isNull3 } from "drizzle-orm";
-function _ts_decorate8(decorators, target, key, desc4) {
-  var c = arguments.length, r = c < 3 ? target : desc4 === null ? desc4 = Object.getOwnPropertyDescriptor(target, key) : desc4, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc4);
+import { Inject as Inject9, Injectable as Injectable10 } from "@nestjs/common";
+import { and as and6, desc as desc3, eq as eq6, isNotNull as isNotNull4, isNull as isNull4 } from "drizzle-orm";
+function _ts_decorate10(decorators, target, key, desc10) {
+  var c = arguments.length, r = c < 3 ? target : desc10 === null ? desc10 = Object.getOwnPropertyDescriptor(target, key) : desc10, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc10);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate8, "_ts_decorate");
-function _ts_metadata7(k, v) {
+__name(_ts_decorate10, "_ts_decorate");
+function _ts_metadata9(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata7, "_ts_metadata");
-function _ts_param7(paramIndex, decorator) {
+__name(_ts_metadata9, "_ts_metadata");
+function _ts_param9(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param7, "_ts_param");
+__name(_ts_param9, "_ts_param");
 var DrizzlePlanVersionRepository = class {
   static {
     __name(this, "DrizzlePlanVersionRepository");
@@ -753,7 +1170,7 @@ var DrizzlePlanVersionRepository = class {
   }
   async findLatestLive(planId, tx) {
     const db = resolveDb(this.db, tx);
-    const rows = await db.select().from(planVersions).where(and4(eq5(planVersions.planId, planId), isNotNull3(planVersions.publishedAt), isNull3(planVersions.supersededAt))).orderBy(desc2(planVersions.version)).limit(1);
+    const rows = await db.select().from(planVersions).where(and6(eq6(planVersions.planId, planId), isNotNull4(planVersions.publishedAt), isNull4(planVersions.supersededAt))).orderBy(desc3(planVersions.version)).limit(1);
     const row = rows[0];
     if (!row) return null;
     return {
@@ -763,319 +1180,1992 @@ var DrizzlePlanVersionRepository = class {
     };
   }
 };
-DrizzlePlanVersionRepository = _ts_decorate8([
-  Injectable8(),
-  _ts_param7(0, Inject7(DRIZZLE_DB_TOKEN)),
-  _ts_metadata7("design:type", Function),
-  _ts_metadata7("design:paramtypes", [
+DrizzlePlanVersionRepository = _ts_decorate10([
+  Injectable10(),
+  _ts_param9(0, Inject9(DRIZZLE_DB_TOKEN)),
+  _ts_metadata9("design:type", Function),
+  _ts_metadata9("design:paramtypes", [
     typeof DrizzleClient === "undefined" ? Object : DrizzleClient
   ])
 ], DrizzlePlanVersionRepository);
 
-// src/drizzle-promo-code-redemption.repository.ts
-import { randomUUID as randomUUID3 } from "node:crypto";
-import { Inject as Inject8, Injectable as Injectable9 } from "@nestjs/common";
-import { and as and5, desc as desc3, eq as eq6, lt as lt2 } from "drizzle-orm";
-function _ts_decorate9(decorators, target, key, desc4) {
-  var c = arguments.length, r = c < 3 ? target : desc4 === null ? desc4 = Object.getOwnPropertyDescriptor(target, key) : desc4, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc4);
+// src/drizzle-promo-code-hold.repository.ts
+import { randomUUID as randomUUID6 } from "node:crypto";
+import { Inject as Inject11, Injectable as Injectable12 } from "@nestjs/common";
+import { and as and8, eq as eq8, gt, lte as lte2, sql as sql2 } from "drizzle-orm";
+
+// src/drizzle-promo-code.repository.ts
+import { randomUUID as randomUUID5 } from "node:crypto";
+import { Inject as Inject10, Injectable as Injectable11 } from "@nestjs/common";
+import { and as and7, eq as eq7, gte as gte3, inArray as inArray2, isNotNull as isNotNull5, isNull as isNull5, like as like2, lt as lt2, or, sql } from "drizzle-orm";
+function _ts_decorate11(decorators, target, key, desc10) {
+  var c = arguments.length, r = c < 3 ? target : desc10 === null ? desc10 = Object.getOwnPropertyDescriptor(target, key) : desc10, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc10);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate9, "_ts_decorate");
-function _ts_metadata8(k, v) {
+__name(_ts_decorate11, "_ts_decorate");
+function _ts_metadata10(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata8, "_ts_metadata");
-function _ts_param8(paramIndex, decorator) {
+__name(_ts_metadata10, "_ts_metadata");
+function _ts_param10(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param8, "_ts_param");
-var DrizzlePromoCodeRedemptionRepository = class {
+__name(_ts_param10, "_ts_param");
+var DrizzlePromoCodeRepository = class {
   static {
-    __name(this, "DrizzlePromoCodeRedemptionRepository");
+    __name(this, "DrizzlePromoCodeRepository");
   }
   db;
   constructor(db) {
     this.db = db;
   }
-  async findBySubscription(subscriptionId, tx) {
-    const db = resolveDb(this.db, tx);
-    const rows = await db.select().from(promoCodeRedemptions).where(eq6(promoCodeRedemptions.subscriptionId, subscriptionId)).limit(1);
+  async findById(id) {
+    const rows = await this.db.select().from(promoCodes).where(eq7(promoCodes.id, id)).limit(1);
     const row = rows[0];
     return row ? toRecord(row) : null;
   }
-  async create(data, tx) {
+  async findByCode(code, tx) {
     const db = resolveDb(this.db, tx);
-    const rows = await db.insert(promoCodeRedemptions).values({
-      id: randomUUID3(),
-      promoCodeId: data.promoCodeId,
-      subscriptionId: data.subscriptionId,
-      tenantId: data.tenantId,
-      appliedValueType: data.appliedValueType,
-      appliedValue: data.appliedValue,
-      appliedDurationType: data.appliedDurationType,
-      appliedDurationValue: data.appliedDurationValue,
-      startsAt: data.startsAt,
-      endsAt: data.endsAt
+    const rows = await db.select().from(promoCodes).where(eq7(promoCodes.code, normalizeCode(code))).limit(1);
+    const row = rows[0];
+    if (!row || row.deletedAt) return null;
+    return toRecord(row);
+  }
+  async findMany(filter) {
+    const conditions = [
+      isNull5(promoCodes.deletedAt),
+      filter.status ? eq7(promoCodes.status, filter.status) : void 0,
+      filter.campaignTag ? eq7(promoCodes.campaignTag, filter.campaignTag) : void 0,
+      filter.search ? like2(promoCodes.code, `%${escapeLikePattern(normalizeCode(filter.search))}%`) : void 0
+    ];
+    const rows = await this.db.select().from(promoCodes).where(and7(...conditions)).orderBy(sql`${promoCodes.createdAt} DESC`);
+    return rows.map(toRecord);
+  }
+  async create(data) {
+    const rows = await this.db.insert(promoCodes).values({
+      id: randomUUID5(),
+      code: normalizeCode(data.code),
+      valueType: data.valueType,
+      value: data.value.toFixed(2),
+      durationType: data.durationType,
+      durationValue: data.durationValue ?? null,
+      validFrom: data.validFrom ?? null,
+      validUntil: data.validUntil ?? null,
+      maxRedemptions: data.maxRedemptions ?? null,
+      appliesToPlans: data.appliesToPlans ?? [],
+      appliesToBilling: data.appliesToBilling ?? null,
+      firstTimeCustomersOnly: data.firstTimeCustomersOnly ?? true,
+      minimumPlanAmountGross: data.minimumPlanAmountGross?.toFixed(2) ?? null,
+      allowZeroInvoice: data.allowZeroInvoice ?? false,
+      description: data.description ?? null,
+      campaignTag: data.campaignTag ?? null,
+      revenueDeductionAccount: data.revenueDeductionAccount ?? null,
+      createdById: data.createdById,
+      updatedAt: /* @__PURE__ */ new Date()
     }).returning();
     return toRecord(rows[0]);
   }
-  async setReversed(id, tx) {
-    const db = resolveDb(this.db, tx);
-    const rows = await db.update(promoCodeRedemptions).set({
-      status: "REVERSED",
-      reversedAt: /* @__PURE__ */ new Date()
-    }).where(eq6(promoCodeRedemptions.id, id)).returning();
-    const row = rows[0];
-    if (!row) {
-      throw new Error(`PromoCodeRedemption ${id} not found.`);
+  async update(id, data) {
+    const rows = await this.db.update(promoCodes).set({
+      status: data.status,
+      description: data.description,
+      validUntil: data.validUntil,
+      maxRedemptions: data.maxRedemptions,
+      updatedAt: /* @__PURE__ */ new Date()
+    }).where(eq7(promoCodes.id, id)).returning();
+    const row = rows[0];
+    if (!row) {
+      throw new Error(`PromoCode ${id} not found.`);
+    }
+    return toRecord(row);
+  }
+  async softDelete(id) {
+    await this.db.update(promoCodes).set({
+      deletedAt: /* @__PURE__ */ new Date(),
+      updatedAt: /* @__PURE__ */ new Date()
+    }).where(eq7(promoCodes.id, id));
+  }
+  async claimSlot(id, tx) {
+    const db = resolveDb(this.db, tx);
+    const claimed = await db.update(promoCodes).set({
+      redemptionsCount: sql`${promoCodes.redemptionsCount} + 1`,
+      updatedAt: /* @__PURE__ */ new Date()
+    }).where(hasFreeSlot(id)).returning({
+      id: promoCodes.id
+    });
+    return claimed.length === 1;
+  }
+  async markExhaustedIfFull(id, tx) {
+    const db = resolveDb(this.db, tx);
+    await db.update(promoCodes).set({
+      status: "EXHAUSTED",
+      updatedAt: /* @__PURE__ */ new Date()
+    }).where(and7(eq7(promoCodes.id, id), eq7(promoCodes.status, "ACTIVE"), isNotNull5(promoCodes.maxRedemptions), gte3(promoCodes.redemptionsCount, promoCodes.maxRedemptions)));
+  }
+  async releaseSlot(id, tx) {
+    const db = resolveDb(this.db, tx);
+    await db.update(promoCodes).set({
+      redemptionsCount: sql`GREATEST(${promoCodes.redemptionsCount} - 1, 0)`,
+      status: sql`CASE WHEN ${promoCodes.status} = 'EXHAUSTED' THEN 'ACTIVE' ELSE ${promoCodes.status} END`,
+      updatedAt: /* @__PURE__ */ new Date()
+    }).where(eq7(promoCodes.id, id));
+  }
+  async expireDueCodes(now) {
+    const expired = await this.db.update(promoCodes).set({
+      status: "EXPIRED",
+      updatedAt: /* @__PURE__ */ new Date()
+    }).where(and7(inArray2(promoCodes.status, [
+      "ACTIVE",
+      "PAUSED"
+    ]), lt2(promoCodes.validUntil, now))).returning({
+      id: promoCodes.id
+    });
+    return expired.length;
+  }
+};
+DrizzlePromoCodeRepository = _ts_decorate11([
+  Injectable11(),
+  _ts_param10(0, Inject10(DRIZZLE_DB_TOKEN)),
+  _ts_metadata10("design:type", Function),
+  _ts_metadata10("design:paramtypes", [
+    typeof DrizzleClient === "undefined" ? Object : DrizzleClient
+  ])
+], DrizzlePromoCodeRepository);
+function hasFreeSlot(id) {
+  return and7(eq7(promoCodes.id, id), eq7(promoCodes.status, "ACTIVE"), isNull5(promoCodes.deletedAt), or(isNull5(promoCodes.maxRedemptions), sql`${promoCodes.redemptionsCount} + ${promoCodes.heldCount} < ${promoCodes.maxRedemptions}`));
+}
+__name(hasFreeSlot, "hasFreeSlot");
+function normalizeCode(code) {
+  return code.trim().toUpperCase();
+}
+__name(normalizeCode, "normalizeCode");
+function toRecord(row) {
+  return {
+    id: row.id,
+    code: row.code,
+    valueType: row.valueType,
+    value: String(row.value),
+    durationType: row.durationType,
+    durationValue: row.durationValue,
+    validFrom: row.validFrom,
+    validUntil: row.validUntil,
+    maxRedemptions: row.maxRedemptions,
+    redemptionsCount: row.redemptionsCount,
+    heldCount: row.heldCount,
+    appliesToPlans: row.appliesToPlans ?? [],
+    appliesToBilling: row.appliesToBilling ?? null,
+    firstTimeCustomersOnly: row.firstTimeCustomersOnly,
+    minimumPlanAmountGross: row.minimumPlanAmountGross === null ? null : String(row.minimumPlanAmountGross),
+    allowZeroInvoice: row.allowZeroInvoice,
+    status: row.status,
+    description: row.description,
+    campaignTag: row.campaignTag,
+    revenueDeductionAccount: row.revenueDeductionAccount,
+    createdById: row.createdById,
+    createdAt: row.createdAt,
+    updatedAt: row.updatedAt,
+    deletedAt: row.deletedAt
+  };
+}
+__name(toRecord, "toRecord");
+
+// src/drizzle-promo-code-hold.repository.ts
+function _ts_decorate12(decorators, target, key, desc10) {
+  var c = arguments.length, r = c < 3 ? target : desc10 === null ? desc10 = Object.getOwnPropertyDescriptor(target, key) : desc10, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc10);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate12, "_ts_decorate");
+function _ts_metadata11(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata11, "_ts_metadata");
+function _ts_param11(paramIndex, decorator) {
+  return function(target, key) {
+    decorator(target, key, paramIndex);
+  };
+}
+__name(_ts_param11, "_ts_param");
+var HOLD_FIELDS = {
+  id: promoCodeHolds.id,
+  promoCodeId: promoCodeHolds.promoCodeId,
+  checkoutOfferId: promoCodeHolds.checkoutOfferId,
+  expiresAt: promoCodeHolds.expiresAt,
+  createdAt: promoCodeHolds.createdAt
+};
+var CURRENT_TRANSACTION = sql2`txid_current()`;
+var atExpiry = /* @__PURE__ */ __name((expiresAt) => sql2.param(expiresAt, promoCodeHolds.expiresAt), "atExpiry");
+var DrizzlePromoCodeHoldRepository = class {
+  static {
+    __name(this, "DrizzlePromoCodeHoldRepository");
+  }
+  db;
+  constructor(db) {
+    this.db = db;
+  }
+  async findByCheckoutOffer(checkoutOfferId, tx) {
+    const rows = await resolveDb(this.db, tx).select(HOLD_FIELDS).from(promoCodeHolds).where(eq8(promoCodeHolds.checkoutOfferId, checkoutOfferId)).limit(1);
+    return rows[0] ?? null;
+  }
+  async take(hold) {
+    return this.onTransaction(void 0, async (db) => {
+      const code = await db.select({
+        id: promoCodes.id
+      }).from(promoCodes).where(eq8(promoCodes.id, hold.promoCodeId)).for("update");
+      if (code.length === 0) return {
+        outcome: "no-slot"
+      };
+      const held = await db.select({
+        id: promoCodeHolds.id
+      }).from(promoCodeHolds).where(eq8(promoCodeHolds.checkoutOfferId, hold.checkoutOfferId)).limit(1);
+      if (held.length > 0) return {
+        outcome: "offer-holds-one"
+      };
+      const counted = await db.update(promoCodes).set({
+        heldCount: sql2`${promoCodes.heldCount} + 1`,
+        updatedAt: /* @__PURE__ */ new Date()
+      }).where(hasFreeSlot(hold.promoCodeId)).returning({
+        id: promoCodes.id
+      });
+      if (counted.length === 0) return {
+        outcome: "no-slot"
+      };
+      const [created] = await db.insert(promoCodeHolds).values({
+        id: randomUUID6(),
+        ...hold
+      }).returning(HOLD_FIELDS);
+      return {
+        outcome: "taken",
+        hold: created
+      };
+    });
+  }
+  async extend(checkoutOfferId, promoCodeId, expiresAt) {
+    const extended = await this.db.update(promoCodeHolds).set({
+      expiresAt: sql2`GREATEST(${promoCodeHolds.expiresAt}, ${atExpiry(expiresAt)})`
+    }).where(and8(eq8(promoCodeHolds.checkoutOfferId, checkoutOfferId), eq8(promoCodeHolds.promoCodeId, promoCodeId))).returning({
+      id: promoCodeHolds.id
+    });
+    return extended.length === 1;
+  }
+  async release(checkoutOfferId, tx) {
+    return this.releaseWhere(eq8(promoCodeHolds.checkoutOfferId, checkoutOfferId), tx);
+  }
+  async releaseIfUnmoved(checkoutOfferId, expiresAt) {
+    return this.releaseWhere(and8(eq8(promoCodeHolds.checkoutOfferId, checkoutOfferId), eq8(promoCodeHolds.expiresAt, expiresAt)));
+  }
+  async handOver(checkoutOfferId, now, tx) {
+    const marked = await resolveDb(this.db, tx).update(promoCodeHolds).set({
+      handedOverTx: CURRENT_TRANSACTION
+    }).where(and8(eq8(promoCodeHolds.checkoutOfferId, checkoutOfferId), gt(promoCodeHolds.expiresAt, now))).returning({
+      id: promoCodeHolds.id
+    });
+    return marked.length === 1;
+  }
+  async convertHandedOver(promoCodeId, tx) {
+    const db = resolveDb(this.db, tx);
+    const handedOver = await db.select({
+      id: promoCodeHolds.id
+    }).from(promoCodeHolds).where(and8(eq8(promoCodeHolds.promoCodeId, promoCodeId), eq8(promoCodeHolds.handedOverTx, CURRENT_TRANSACTION))).limit(1);
+    if (handedOver.length === 0) return false;
+    const gone = await db.delete(promoCodeHolds).where(eq8(promoCodeHolds.id, handedOver[0].id)).returning({
+      promoCodeId: promoCodeHolds.promoCodeId
+    });
+    await giveBack(db, gone, {
+      redeemed: true
+    });
+    return gone.length === 1;
+  }
+  async expireDue(now, promoCodeId, tx) {
+    return this.onTransaction(tx, async (db) => {
+      const gone = await db.delete(promoCodeHolds).where(and8(lte2(promoCodeHolds.expiresAt, now), sql2`${promoCodeHolds.handedOverTx} IS DISTINCT FROM ${CURRENT_TRANSACTION}`, promoCodeId ? eq8(promoCodeHolds.promoCodeId, promoCodeId) : void 0)).returning({
+        promoCodeId: promoCodeHolds.promoCodeId
+      });
+      await giveBack(db, gone, {
+        redeemed: false
+      });
+      return gone.length;
+    });
+  }
+  /** Deletes the holds `where` matches and gives their slots back. */
+  releaseWhere(where, tx) {
+    return this.onTransaction(tx, async (db) => {
+      const gone = await db.delete(promoCodeHolds).where(where).returning({
+        promoCodeId: promoCodeHolds.promoCodeId
+      });
+      await giveBack(db, gone, {
+        redeemed: false
+      });
+      return gone.length === 1;
+    });
+  }
+  /** Runs `work` on a transaction of its own, a savepoint where the caller has one. */
+  onTransaction(tx, work) {
+    return resolveDb(this.db, tx).transaction((transaction) => work(transaction));
+  }
+};
+DrizzlePromoCodeHoldRepository = _ts_decorate12([
+  Injectable12(),
+  _ts_param11(0, Inject11(DRIZZLE_DB_TOKEN)),
+  _ts_metadata11("design:type", Function),
+  _ts_metadata11("design:paramtypes", [
+    typeof DrizzleClient === "undefined" ? Object : DrizzleClient
+  ])
+], DrizzlePromoCodeHoldRepository);
+async function giveBack(db, ended, { redeemed }) {
+  const perCode = /* @__PURE__ */ new Map();
+  for (const { promoCodeId } of ended) {
+    perCode.set(promoCodeId, (perCode.get(promoCodeId) ?? 0) + 1);
+  }
+  for (const promoCodeId of [
+    ...perCode.keys()
+  ].sort()) {
+    const count4 = perCode.get(promoCodeId) ?? 0;
+    await db.update(promoCodes).set({
+      heldCount: sql2`GREATEST(${promoCodes.heldCount} - ${count4}, 0)`,
+      ...redeemed ? {
+        redemptionsCount: sql2`${promoCodes.redemptionsCount} + ${count4}`
+      } : {},
+      updatedAt: /* @__PURE__ */ new Date()
+    }).where(eq8(promoCodes.id, promoCodeId));
+  }
+}
+__name(giveBack, "giveBack");
+
+// src/drizzle-promo-code-redemption.repository.ts
+import { randomUUID as randomUUID7 } from "node:crypto";
+import { Inject as Inject12, Injectable as Injectable13 } from "@nestjs/common";
+import { and as and9, desc as desc4, eq as eq9, lt as lt3 } from "drizzle-orm";
+function _ts_decorate13(decorators, target, key, desc10) {
+  var c = arguments.length, r = c < 3 ? target : desc10 === null ? desc10 = Object.getOwnPropertyDescriptor(target, key) : desc10, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc10);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate13, "_ts_decorate");
+function _ts_metadata12(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata12, "_ts_metadata");
+function _ts_param12(paramIndex, decorator) {
+  return function(target, key) {
+    decorator(target, key, paramIndex);
+  };
+}
+__name(_ts_param12, "_ts_param");
+var DrizzlePromoCodeRedemptionRepository = class {
+  static {
+    __name(this, "DrizzlePromoCodeRedemptionRepository");
+  }
+  db;
+  constructor(db) {
+    this.db = db;
+  }
+  async findBySubscription(subscriptionId, tx) {
+    const db = resolveDb(this.db, tx);
+    const rows = await db.select().from(promoCodeRedemptions).where(eq9(promoCodeRedemptions.subscriptionId, subscriptionId)).limit(1);
+    const row = rows[0];
+    return row ? toRecord2(row) : null;
+  }
+  async create(data, tx) {
+    const db = resolveDb(this.db, tx);
+    const rows = await db.insert(promoCodeRedemptions).values({
+      id: randomUUID7(),
+      promoCodeId: data.promoCodeId,
+      subscriptionId: data.subscriptionId,
+      tenantId: data.tenantId,
+      appliedValueType: data.appliedValueType,
+      appliedValue: data.appliedValue,
+      appliedDurationType: data.appliedDurationType,
+      appliedDurationValue: data.appliedDurationValue,
+      startsAt: data.startsAt,
+      endsAt: data.endsAt
+    }).returning();
+    return toRecord2(rows[0]);
+  }
+  async setReversed(id, tx) {
+    const db = resolveDb(this.db, tx);
+    const rows = await db.update(promoCodeRedemptions).set({
+      status: "REVERSED",
+      reversedAt: /* @__PURE__ */ new Date()
+    }).where(eq9(promoCodeRedemptions.id, id)).returning();
+    const row = rows[0];
+    if (!row) {
+      throw new Error(`PromoCodeRedemption ${id} not found.`);
+    }
+    return toRecord2(row);
+  }
+  async countByPromoCode(promoCodeId, status) {
+    const rows = await this.db.select({
+      id: promoCodeRedemptions.id
+    }).from(promoCodeRedemptions).where(and9(eq9(promoCodeRedemptions.promoCodeId, promoCodeId), status ? eq9(promoCodeRedemptions.status, status) : void 0));
+    return rows.length;
+  }
+  async listByPromoCode(promoCodeId) {
+    const rows = await this.db.select().from(promoCodeRedemptions).where(eq9(promoCodeRedemptions.promoCodeId, promoCodeId)).orderBy(desc4(promoCodeRedemptions.redeemedAt));
+    return rows.map(toRecord2);
+  }
+  async expireDueRedemptions(now) {
+    const expired = await this.db.update(promoCodeRedemptions).set({
+      status: "EXPIRED"
+    }).where(and9(eq9(promoCodeRedemptions.status, "ACTIVE"), lt3(promoCodeRedemptions.endsAt, now))).returning({
+      id: promoCodeRedemptions.id
+    });
+    return expired.length;
+  }
+};
+DrizzlePromoCodeRedemptionRepository = _ts_decorate13([
+  Injectable13(),
+  _ts_param12(0, Inject12(DRIZZLE_DB_TOKEN)),
+  _ts_metadata12("design:type", Function),
+  _ts_metadata12("design:paramtypes", [
+    typeof DrizzleClient === "undefined" ? Object : DrizzleClient
+  ])
+], DrizzlePromoCodeRedemptionRepository);
+function toRecord2(row) {
+  return {
+    id: row.id,
+    promoCodeId: row.promoCodeId,
+    subscriptionId: row.subscriptionId,
+    tenantId: row.tenantId,
+    appliedValueType: row.appliedValueType,
+    appliedValue: String(row.appliedValue),
+    appliedDurationType: row.appliedDurationType,
+    appliedDurationValue: row.appliedDurationValue,
+    startsAt: row.startsAt,
+    endsAt: row.endsAt,
+    status: row.status,
+    redeemedAt: row.redeemedAt,
+    reversedAt: row.reversedAt
+  };
+}
+__name(toRecord2, "toRecord");
+
+// src/drizzle-bundle.repository.ts
+import { randomUUID as randomUUID8 } from "node:crypto";
+import { Inject as Inject13, Injectable as Injectable14, Optional } from "@nestjs/common";
+import { and as and10, asc as asc2, desc as desc5, eq as eq10, gte as gte4, isNull as isNull6, lte as lte3, ne, or as or2, sql as sql3 } from "drizzle-orm";
+import { bundleDraftDefaults, bundleStemDefaults, previousUtcDay, toBundleStemRow } from "@saasicat/core";
+function _ts_decorate14(decorators, target, key, desc10) {
+  var c = arguments.length, r = c < 3 ? target : desc10 === null ? desc10 = Object.getOwnPropertyDescriptor(target, key) : desc10, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc10);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate14, "_ts_decorate");
+function _ts_metadata13(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata13, "_ts_metadata");
+function _ts_param13(paramIndex, decorator) {
+  return function(target, key) {
+    decorator(target, key, paramIndex);
+  };
+}
+__name(_ts_param13, "_ts_param");
+var DrizzleBundleRepository = class {
+  static {
+    __name(this, "DrizzleBundleRepository");
+  }
+  db;
+  validityWindows;
+  constructor(db, options = {}) {
+    this.db = db;
+    this.validityWindows = options.validityWindows ?? false;
+    if (this.validityWindows) {
+      this.findActiveBundleVersion = (bundleId, asOf, tx) => this.activeVersionAt(bundleId, asOf ?? /* @__PURE__ */ new Date(), tx);
+    }
+  }
+  findActiveBundleVersion;
+  // ─── Stems ───
+  async list(filter) {
+    const excludeDeleted = filter.excludeDeleted ?? true;
+    const rows = await this.db.select().from(bundles).where(excludeDeleted ? isNull6(bundles.deletedAt) : void 0).orderBy(asc2(bundles.sortOrder), asc2(bundles.bundleKey));
+    return rows.map(toBundleStemRow);
+  }
+  async findById(bundleId) {
+    const rows = await this.db.select().from(bundles).where(eq10(bundles.id, bundleId)).limit(1);
+    return rows[0] ? toBundleStemRow(rows[0]) : null;
+  }
+  /**
+   * Whether this project already uses this bundle key — **including retired
+   * bundles**.
+   *
+   * Its one caller is the duplicate check in `createBundle`, and the question
+   * it asks is the database's: `bundles_bundleKey_key` is an
+   * unconditional unique index, so a soft-deleted bundle still occupies its
+   * key. Excluding retired rows here makes the check pass and the insert then
+   * fail on the constraint — a 500 where the service had
+   * `BUNDLE_ALREADY_EXISTS` ready.
+   *
+   * Two review rounds landed on this line from opposite sides, which is what
+   * finally settled it: there is no caller that wants the active-catalogue
+   * reading. `list` is that lookup, and it excludes retired rows by default.
+   */
+  async findByKey(bundleKey) {
+    const rows = await this.db.select().from(bundles).where(eq10(bundles.bundleKey, bundleKey)).limit(1);
+    return rows[0] ? toBundleStemRow(rows[0]) : null;
+  }
+  async create(data) {
+    const now = /* @__PURE__ */ new Date();
+    const rows = await this.db.insert(bundles).values({
+      id: randomUUID8(),
+      ...bundleStemDefaults(data),
+      updatedAt: now
+    }).returning();
+    return toBundleStemRow(rows[0]);
+  }
+  async update(bundleId, data) {
+    const patch = {
+      updatedAt: /* @__PURE__ */ new Date()
+    };
+    if (data.label !== void 0) patch.label = data.label;
+    if (data.description !== void 0) patch.description = data.description;
+    if (data.icon !== void 0) patch.icon = data.icon;
+    if (data.sortOrder !== void 0) patch.sortOrder = data.sortOrder;
+    if (data.i18n !== void 0) patch.i18n = data.i18n;
+    const rows = await this.db.update(bundles).set(patch).where(eq10(bundles.id, bundleId)).returning();
+    if (!rows[0]) throw new Error(`Bundle '${bundleId}' not found.`);
+    return toBundleStemRow(rows[0]);
+  }
+  async softDelete(bundleId) {
+    await this.db.update(bundles).set({
+      deletedAt: /* @__PURE__ */ new Date(),
+      updatedAt: /* @__PURE__ */ new Date()
+    }).where(eq10(bundles.id, bundleId));
+  }
+  // ─── Versions ───
+  async listVersions(bundleId) {
+    const rows = await this.db.select().from(bundleVersions).where(eq10(bundleVersions.bundleId, bundleId)).orderBy(asc2(bundleVersions.version));
+    const stem = await this.findById(bundleId);
+    return rows.map((row) => this.toVersionRow(row, stem));
+  }
+  async findVersionById(versionId, tx) {
+    const rows = await resolveDb(this.db, tx).select().from(bundleVersions).where(eq10(bundleVersions.id, versionId)).limit(1);
+    if (!rows[0]) return null;
+    return this.toVersionRow(rows[0], await this.stemOn(resolveDb(this.db, tx), rows[0].bundleId));
+  }
+  async findCurrentDraft(bundleId) {
+    const rows = await this.db.select().from(bundleVersions).where(and10(eq10(bundleVersions.bundleId, bundleId), isNull6(bundleVersions.publishedAt))).limit(1);
+    if (!rows[0]) return null;
+    return this.toVersionRow(rows[0], await this.findById(bundleId));
+  }
+  async findLatestLive(bundleId, tx) {
+    const rows = await resolveDb(this.db, tx).select().from(bundleVersions).where(and10(eq10(bundleVersions.bundleId, bundleId), sql3`${bundleVersions.publishedAt} IS NOT NULL`, isNull6(bundleVersions.supersededAt))).orderBy(desc5(bundleVersions.version)).limit(1);
+    return this.withStem(rows[0], bundleId, tx);
+  }
+  /**
+   * The version bookable at `asOf`: published, inside its validity window.
+   *
+   * Deliberately not filtered by `supersededAt` — a superseded predecessor is
+   * still the bookable one until its window closes, which is the whole point
+   * of auto-succession. `validUntil` is day-inclusive, so a version is active
+   * throughout its last day.
+   */
+  async activeVersionAt(bundleId, asOf, tx) {
+    const dayStart = new Date(asOf);
+    dayStart.setUTCHours(0, 0, 0, 0);
+    const rows = await resolveDb(this.db, tx).select().from(bundleVersions).where(and10(eq10(bundleVersions.bundleId, bundleId), sql3`${bundleVersions.publishedAt} IS NOT NULL`, or2(isNull6(bundleVersions.validFrom), lte3(bundleVersions.validFrom, asOf)), or2(isNull6(bundleVersions.validUntil), gte4(bundleVersions.validUntil, dayStart)))).orderBy(sql3`"validFrom" DESC NULLS LAST`, desc5(bundleVersions.version)).limit(1);
+    return this.withStem(rows[0], bundleId, tx);
+  }
+  async createDraft(data) {
+    const existingDraft = await this.findCurrentDraft(data.bundleId);
+    if (existingDraft) {
+      throw new Error(`Bundle '${data.bundleId}' already has a draft version (v${existingDraft.version}); only one draft per bundle is allowed.`);
+    }
+    const latest = await this.db.select({
+      version: bundleVersions.version
+    }).from(bundleVersions).where(eq10(bundleVersions.bundleId, data.bundleId)).orderBy(desc5(bundleVersions.version)).limit(1);
+    const now = /* @__PURE__ */ new Date();
+    const rows = await this.db.insert(bundleVersions).values({
+      id: randomUUID8(),
+      bundleId: data.bundleId,
+      version: latest[0] ? latest[0].version + 1 : 1,
+      ...bundleDraftDefaults(data),
+      validFrom: this.validityWindows ? toNullableDate(data.validFrom) : null,
+      validUntil: this.validityWindows ? toNullableDate(data.validUntil) : null,
+      updatedAt: now
+    }).returning();
+    return this.toVersionRow(rows[0], await this.findById(data.bundleId));
+  }
+  async updateDraft(versionId, data) {
+    const patch = {
+      updatedAt: /* @__PURE__ */ new Date()
+    };
+    if (data.features !== void 0) patch.features = data.features;
+    if (data.quotas !== void 0) patch.quotas = data.quotas;
+    if (data.compatibility !== void 0) patch.compatibility = data.compatibility;
+    if (data.pricingOverrides !== void 0) patch.pricingOverrides = data.pricingOverrides;
+    if (data.monthlyNet !== void 0) patch.monthlyNet = data.monthlyNet;
+    if (data.yearlyNet !== void 0) patch.yearlyNet = data.yearlyNet;
+    if (data.marketed !== void 0) patch.marketed = data.marketed;
+    if (data.changeNote !== void 0) patch.changeNote = data.changeNote;
+    if (this.validityWindows) {
+      if (data.validFrom !== void 0) patch.validFrom = toNullableDate(data.validFrom);
+      if (data.validUntil !== void 0) patch.validUntil = toNullableDate(data.validUntil);
+    }
+    const rows = await this.db.update(bundleVersions).set(patch).where(eq10(bundleVersions.id, versionId)).returning();
+    if (!rows[0]) throw new Error(`BundleVersion '${versionId}' not found.`);
+    return this.toVersionRow(rows[0], await this.findById(rows[0].bundleId));
+  }
+  async publishDraft(versionId, publishMeta, tx) {
+    if (tx !== void 0) return this.publishWithin(resolveDb(this.db, tx), versionId, publishMeta);
+    return this.db.transaction((transaction) => this.publishWithin(transaction, versionId, publishMeta));
+  }
+  async publishWithin(db, versionId, publishMeta) {
+    const now = /* @__PURE__ */ new Date();
+    const publishedRows = await db.update(bundleVersions).set({
+      publishedAt: now,
+      publishedByUserId: publishMeta.publishedByUserId,
+      publishedChanges: publishMeta.publishedChanges,
+      nonRegressive: publishMeta.nonRegressive,
+      updatedAt: now,
+      ...this.validityWindows ? {
+        validFrom: publishMeta.validFrom,
+        validUntil: publishMeta.validUntil
+      } : {}
+    }).where(and10(eq10(bundleVersions.id, versionId), isNull6(bundleVersions.publishedAt))).returning();
+    if (!publishedRows[0]) {
+      throw new Error(`BundleVersion '${versionId}' not found or already published.`);
+    }
+    const draft = publishedRows[0];
+    await db.update(bundleVersions).set(this.validityWindows ? {
+      supersededAt: now,
+      validUntil: previousUtcDay(publishMeta.validFrom)
+    } : {
+      supersededAt: now
+    }).where(and10(eq10(bundleVersions.bundleId, draft.bundleId), sql3`${bundleVersions.publishedAt} IS NOT NULL`, isNull6(bundleVersions.supersededAt), ne(bundleVersions.id, versionId)));
+    const stemRows = await db.select().from(bundles).where(eq10(bundles.id, draft.bundleId)).limit(1);
+    return this.toVersionRow(publishedRows[0], stemRows[0] ? toBundleStemRow(stemRows[0]) : null);
+  }
+  async deleteDraft(versionId) {
+    const deleted = await this.db.delete(bundleVersions).where(and10(eq10(bundleVersions.id, versionId), isNull6(bundleVersions.publishedAt))).returning({
+      id: bundleVersions.id
+    });
+    if (deleted.length > 0) return;
+    const remaining = await this.db.select({
+      publishedAt: bundleVersions.publishedAt
+    }).from(bundleVersions).where(eq10(bundleVersions.id, versionId)).limit(1);
+    if (!remaining[0]) return;
+    throw new Error(`BundleVersion '${versionId}' is already published and cannot be discarded (published versions are immutable \u2014 contract protection P1).`);
+  }
+  /**
+   * One version row plus its stem, or null — the tail every version lookup
+   * ends with, and the reason it is here rather than written out each time:
+   * the stem has to be read on the caller's connection, and a copy that
+   * forgets that is the deadlock this class already had once.
+   */
+  async withStem(row, bundleId, tx) {
+    if (!row) return null;
+    return this.toVersionRow(row, await this.stemOn(resolveDb(this.db, tx), bundleId));
+  }
+  /**
+   * The stem, read on the connection the caller is already holding.
+   *
+   * `this.db` would take a second one from the pool. Inside a transaction —
+   * which is where `enforceLimit()` calls this, holding a row lock — that
+   * second connection can only be released when the transaction ends, and the
+   * transaction cannot end until this query returns. With a small pool, or
+   * enough concurrent checks to occupy it, entitlement resolution stops
+   * dead. A version query that honours `tx` and a stem query beside it that
+   * does not is the shape that hides it: the deadlock needs load to appear.
+   */
+  async stemOn(db, bundleId) {
+    const rows = await db.select().from(bundles).where(eq10(bundles.id, bundleId)).limit(1);
+    return rows[0] ? toBundleStemRow(rows[0]) : null;
+  }
+  toVersionRow(row, stem) {
+    return {
+      id: row.id,
+      bundleId: row.bundleId,
+      bundleKey: stem?.bundleKey ?? "",
+      label: stem?.label ?? "",
+      version: row.version,
+      baseVersionId: row.baseVersionId,
+      features: row.features ?? [],
+      quotas: row.quotas ?? {},
+      compatibility: row.compatibility ?? {},
+      pricingOverrides: row.pricingOverrides ?? [],
+      monthlyNet: row.monthlyNet,
+      yearlyNet: row.yearlyNet,
+      marketed: row.marketed,
+      publishedAt: toIso(row.publishedAt),
+      supersededAt: toIso(row.supersededAt),
+      publishedChanges: Array.isArray(row.publishedChanges) ? row.publishedChanges : null,
+      changeNote: row.changeNote,
+      nonRegressive: row.nonRegressive,
+      // Null rather than the stored value where the adapter does not
+      // promise windows: returning a date it does not maintain would
+      // invite a caller to trust it.
+      validFrom: this.validityWindows ? toIso(row.validFrom) : null,
+      validUntil: this.validityWindows ? toIso(row.validUntil) : null,
+      createdByUserId: row.createdByUserId,
+      publishedByUserId: row.publishedByUserId,
+      createdAt: row.createdAt.toISOString(),
+      updatedAt: row.updatedAt.toISOString()
+    };
+  }
+};
+DrizzleBundleRepository = _ts_decorate14([
+  Injectable14(),
+  _ts_param13(0, Inject13(DRIZZLE_DB_TOKEN)),
+  _ts_param13(1, Optional()),
+  _ts_metadata13("design:type", Function),
+  _ts_metadata13("design:paramtypes", [
+    typeof DrizzleClient === "undefined" ? Object : DrizzleClient,
+    typeof DrizzleBundleRepositoryOptions === "undefined" ? Object : DrizzleBundleRepositoryOptions
+  ])
+], DrizzleBundleRepository);
+function toIso(value) {
+  return value ? value.toISOString() : null;
+}
+__name(toIso, "toIso");
+function toNullableDate(value) {
+  return value ? new Date(value) : null;
+}
+__name(toNullableDate, "toNullableDate");
+
+// src/drizzle-plan.repository.ts
+import { randomUUID as randomUUID9 } from "node:crypto";
+import { Inject as Inject14, Injectable as Injectable15, Optional as Optional2 } from "@nestjs/common";
+import { and as and11, asc as asc3, desc as desc6, eq as eq11, gte as gte5, inArray as inArray3, isNull as isNull7, lte as lte4, ne as ne2, or as or3, sql as sql4 } from "drizzle-orm";
+import { previousUtcDay as previousUtcDay2, startOfUtcDay, toPlanRow as toPlanRow2, toPlanVersionRow as toPlanVersionRow2 } from "@saasicat/core";
+function _ts_decorate15(decorators, target, key, desc10) {
+  var c = arguments.length, r = c < 3 ? target : desc10 === null ? desc10 = Object.getOwnPropertyDescriptor(target, key) : desc10, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc10);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate15, "_ts_decorate");
+function _ts_metadata14(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata14, "_ts_metadata");
+function _ts_param14(paramIndex, decorator) {
+  return function(target, key) {
+    decorator(target, key, paramIndex);
+  };
+}
+__name(_ts_param14, "_ts_param");
+var DrizzlePlanRepository = class {
+  static {
+    __name(this, "DrizzlePlanRepository");
+  }
+  db;
+  validityWindows;
+  constructor(db, options = {}) {
+    this.db = db;
+    this.validityWindows = options.validityWindows ?? false;
+    if (this.validityWindows) {
+      this.findActivePlanVersion = (planKey, asOf, tx) => this.activeVersionAt(planKey, asOf ?? /* @__PURE__ */ new Date(), tx);
+    }
+  }
+  findActivePlanVersion;
+  // ─── Stem operations ───
+  async list(filter) {
+    const excludeDeleted = filter.excludeDeleted ?? true;
+    const stems = await this.db.select().from(plans).where(and11(...excludeDeleted ? [
+      isNull7(plans.deletedAt)
+    ] : [])).orderBy(asc3(plans.sortOrder), asc3(plans.planKey));
+    if (!filter.onlyPublished) return stems.map(toPlanRow2);
+    if (stems.length === 0) return [];
+    const candidateKeys = [
+      ...new Set(stems.map((stem) => stem.planKey))
+    ];
+    const live = await this.db.select({
+      planId: planVersions.planId
+    }).from(planVersions).where(and11(inArray3(planVersions.planId, candidateKeys), sql4`${planVersions.publishedAt} IS NOT NULL`, isNull7(planVersions.supersededAt)));
+    const publishedKeys = new Set(live.map((row) => row.planId));
+    return stems.filter((stem) => publishedKeys.has(stem.planKey)).map(toPlanRow2);
+  }
+  async findById(planId) {
+    const rows = await this.db.select().from(plans).where(eq11(plans.id, planId)).limit(1);
+    return rows[0] ? toPlanRow2(rows[0]) : null;
+  }
+  /**
+   * Whether this installation already uses this plan key — **including
+   * retired plans**.
+   *
+   * `plans_planKey_key` is unconditional, so a soft delete does not free the
+   * key, and the duplicate check in `createPlan` needs the database's answer
+   * rather than the active catalogue's. `list` is that other lookup.
+   */
+  async findByKey(planKey) {
+    const rows = await this.db.select().from(plans).where(eq11(plans.planKey, planKey)).limit(1);
+    return rows[0] ? toPlanRow2(rows[0]) : null;
+  }
+  async create(data) {
+    const now = /* @__PURE__ */ new Date();
+    const rows = await this.db.insert(plans).values({
+      id: randomUUID9(),
+      planKey: data.planKey,
+      label: data.label,
+      description: data.description ?? null,
+      icon: data.icon ?? null,
+      sortOrder: data.sortOrder ?? 0,
+      createdAt: now,
+      updatedAt: now
+    }).returning();
+    return toPlanRow2(rows[0]);
+  }
+  async update(planId, data) {
+    const rows = await this.db.update(plans).set({
+      ...data.label !== void 0 ? {
+        label: data.label
+      } : {},
+      ...data.description !== void 0 ? {
+        description: data.description
+      } : {},
+      ...data.icon !== void 0 ? {
+        icon: data.icon
+      } : {},
+      ...data.sortOrder !== void 0 ? {
+        sortOrder: data.sortOrder
+      } : {},
+      updatedAt: /* @__PURE__ */ new Date()
+    }).where(eq11(plans.id, planId)).returning();
+    if (!rows[0]) throw new Error(`Plan '${planId}' not found.`);
+    return toPlanRow2(rows[0]);
+  }
+  async softDelete(planId) {
+    const now = /* @__PURE__ */ new Date();
+    await this.db.update(plans).set({
+      deletedAt: now,
+      updatedAt: now
+    }).where(eq11(plans.id, planId));
+  }
+  async hardDelete(planId) {
+    await this.db.delete(plans).where(eq11(plans.id, planId));
+  }
+  // ─── Version lifecycle — keyed by plan key ───
+  async listVersions(planKey) {
+    const rows = await this.db.select().from(planVersions).where(eq11(planVersions.planId, planKey)).orderBy(asc3(planVersions.version));
+    return rows.map((row) => this.versionRow(row));
+  }
+  /**
+   * `tx` is beyond what the port asks for, and is what keeps a caller already
+   * inside a transaction on its own connection: drawing a second one waits
+   * for a connection that transaction is itself holding, which on a
+   * one-connection pool never returns.
+   */
+  async findVersionById(versionId, tx) {
+    const rows = await resolveDb(this.db, tx).select().from(planVersions).where(eq11(planVersions.id, versionId)).limit(1);
+    return rows[0] ? this.versionRow(rows[0]) : null;
+  }
+  async findCurrentDraft(planKey) {
+    const rows = await this.db.select().from(planVersions).where(and11(eq11(planVersions.planId, planKey), isNull7(planVersions.publishedAt))).orderBy(desc6(planVersions.version)).limit(1);
+    return rows[0] ? this.versionRow(rows[0]) : null;
+  }
+  async findLatestLivePlanVersion(planKey, tx) {
+    const rows = await resolveDb(this.db, tx).select().from(planVersions).where(and11(
+      eq11(planVersions.planId, planKey),
+      sql4`${planVersions.publishedAt} IS NOT NULL`,
+      isNull7(planVersions.supersededAt),
+      // A version the operator terminated is not live, whatever
+      // its supersession says: `terminate` sets `endsAt` without
+      // a successor to supersede it.
+      or3(isNull7(planVersions.endsAt), sql4`${planVersions.endsAt} > NOW()`)
+    )).orderBy(desc6(planVersions.version)).limit(1);
+    return rows[0] ? this.versionRow(rows[0]) : null;
+  }
+  /**
+   * The version bookable at `asOf`: published, inside its validity window,
+   * not terminated.
+   *
+   * `validUntil` is day-inclusive — a window that closes on the 28th is still
+   * open at 23:59 on the 28th — which is why the comparison is against
+   * `startOfUtcDay(asOf)` and not against `asOf`. The reading half of the
+   * rule `previousUtcDay` writes in `publishWithin`; both come from
+   * `@saasicat/core` so the two halves cannot drift apart.
+   */
+  async activeVersionAt(planKey, asOf, tx) {
+    const rows = await resolveDb(this.db, tx).select().from(planVersions).where(and11(eq11(planVersions.planId, planKey), sql4`${planVersions.publishedAt} IS NOT NULL`, or3(isNull7(planVersions.validFrom), lte4(planVersions.validFrom, asOf)), or3(isNull7(planVersions.validUntil), gte5(planVersions.validUntil, startOfUtcDay(asOf))), or3(isNull7(planVersions.endsAt), sql4`${planVersions.endsAt} > ${asOf}`))).orderBy(sql4`"validFrom" DESC NULLS LAST`, desc6(planVersions.version)).limit(1);
+    return rows[0] ? this.versionRow(rows[0]) : null;
+  }
+  async createPlanVersionDraft(data) {
+    const now = /* @__PURE__ */ new Date();
+    const latest = await this.db.select({
+      version: planVersions.version
+    }).from(planVersions).where(eq11(planVersions.planId, data.planId)).orderBy(desc6(planVersions.version)).limit(1);
+    const rows = await this.db.insert(planVersions).values({
+      id: randomUUID9(),
+      planId: data.planId,
+      version: (latest[0]?.version ?? 0) + 1,
+      baseVersionId: data.baseVersionId ?? null,
+      features: data.features,
+      quotas: data.quotas,
+      monthlyNet: data.monthlyNet,
+      yearlyNet: data.yearlyNet,
+      marketed: data.marketed ?? true,
+      changeNote: data.changeNote ?? "",
+      createdByUserId: data.createdByUserId ?? null,
+      createdAt: now,
+      updatedAt: now,
+      // publishedAt stays null — this is a draft. `bundles` is
+      // app-specific and has no column here, as in adapter-prisma.
+      ...this.validityWindows ? {
+        validFrom: toNullableDate2(data.validFrom),
+        validUntil: toNullableDate2(data.validUntil)
+      } : {}
+    }).returning();
+    return this.versionRow(rows[0]);
+  }
+  async updatePlanVersionDraft(versionId, data) {
+    const rows = await this.db.update(planVersions).set({
+      ...data.features !== void 0 ? {
+        features: data.features
+      } : {},
+      ...data.quotas !== void 0 ? {
+        quotas: data.quotas
+      } : {},
+      ...data.monthlyNet !== void 0 ? {
+        monthlyNet: data.monthlyNet
+      } : {},
+      ...data.yearlyNet !== void 0 ? {
+        yearlyNet: data.yearlyNet
+      } : {},
+      ...data.marketed !== void 0 ? {
+        marketed: data.marketed
+      } : {},
+      ...data.changeNote !== void 0 ? {
+        changeNote: data.changeNote
+      } : {},
+      ...this.validityWindows && data.validFrom !== void 0 ? {
+        validFrom: toNullableDate2(data.validFrom)
+      } : {},
+      ...this.validityWindows && data.validUntil !== void 0 ? {
+        validUntil: toNullableDate2(data.validUntil)
+      } : {},
+      updatedAt: /* @__PURE__ */ new Date()
+    }).where(eq11(planVersions.id, versionId)).returning();
+    if (!rows[0]) {
+      throw new Error(`PlanVersion '${versionId}' not found.`);
+    }
+    return this.versionRow(rows[0]);
+  }
+  async publishPlanVersionDraft(versionId, publishMeta, tx) {
+    if (tx !== void 0) return this.publishWithin(resolveDb(this.db, tx), versionId, publishMeta);
+    return this.db.transaction((transaction) => this.publishWithin(transaction, versionId, publishMeta));
+  }
+  async publishWithin(db, versionId, publishMeta) {
+    const now = /* @__PURE__ */ new Date();
+    const publishedRows = await db.update(planVersions).set({
+      publishedAt: now,
+      publishedByUserId: publishMeta.publishedByUserId,
+      publishedChanges: publishMeta.publishedChanges,
+      nonRegressive: publishMeta.nonRegressive,
+      updatedAt: now,
+      ...this.validityWindows ? {
+        validFrom: publishMeta.validFrom,
+        validUntil: publishMeta.validUntil
+      } : {}
+    }).where(and11(eq11(planVersions.id, versionId), isNull7(planVersions.publishedAt))).returning();
+    if (!publishedRows[0]) {
+      throw new Error(`PlanVersion '${versionId}' not found or already published.`);
+    }
+    await db.update(planVersions).set(this.validityWindows ? {
+      supersededAt: now,
+      validUntil: previousUtcDay2(publishMeta.validFrom),
+      updatedAt: now
+    } : {
+      supersededAt: now,
+      updatedAt: now
+    }).where(and11(eq11(planVersions.planId, publishedRows[0].planId), sql4`${planVersions.publishedAt} IS NOT NULL`, isNull7(planVersions.supersededAt), ne2(planVersions.id, versionId)));
+    return this.versionRow(publishedRows[0]);
+  }
+  async deletePlanVersionDraft(versionId) {
+    const deleted = await this.db.delete(planVersions).where(and11(eq11(planVersions.id, versionId), isNull7(planVersions.publishedAt))).returning({
+      id: planVersions.id
+    });
+    if (deleted.length > 0) return;
+    const existing = await this.db.select({
+      publishedAt: planVersions.publishedAt
+    }).from(planVersions).where(eq11(planVersions.id, versionId)).limit(1);
+    if (existing[0]) {
+      throw new Error(`PlanVersion '${versionId}' is already published and cannot be discarded (published versions are immutable \u2014 contract protection P1).`);
+    }
+  }
+  async terminate(versionId, endsAt) {
+    const rows = await this.db.update(planVersions).set({
+      endsAt,
+      updatedAt: /* @__PURE__ */ new Date()
+    }).where(eq11(planVersions.id, versionId)).returning();
+    if (!rows[0]) throw new Error(`PlanVersion '${versionId}' not found.`);
+    return this.versionRow(rows[0]);
+  }
+  versionRow(row) {
+    return toPlanVersionRow2(row, row.planId, {
+      validityWindows: this.validityWindows,
+      // The canonical schema always has the column, so this adapter can
+      // always answer the question — unlike a Prisma consumer whose
+      // schema may predate it.
+      endsAt: true
+    });
+  }
+};
+DrizzlePlanRepository = _ts_decorate15([
+  Injectable15(),
+  _ts_param14(0, Inject14(DRIZZLE_DB_TOKEN)),
+  _ts_param14(1, Optional2()),
+  _ts_metadata14("design:type", Function),
+  _ts_metadata14("design:paramtypes", [
+    typeof DrizzleClient === "undefined" ? Object : DrizzleClient,
+    typeof DrizzlePlanRepositoryOptions === "undefined" ? Object : DrizzlePlanRepositoryOptions
+  ])
+], DrizzlePlanRepository);
+function toNullableDate2(value) {
+  return value ? new Date(value) : null;
+}
+__name(toNullableDate2, "toNullableDate");
+
+// src/drizzle-subscription-contract.repository.ts
+import { randomUUID as randomUUID10 } from "node:crypto";
+import { Inject as Inject15, Injectable as Injectable16 } from "@nestjs/common";
+import { and as and12, asc as asc4, count as count2, desc as desc7, eq as eq12, gt as gt2, inArray as inArray4, isNull as isNull8, lte as lte5, or as or4 } from "drizzle-orm";
+import { ACTIVE_SUBSCRIPTION_CONTRACT_STATUSES, toRunningContractIssuer, toSubscriptionContractRecord } from "@saasicat/core";
+function _ts_decorate16(decorators, target, key, desc10) {
+  var c = arguments.length, r = c < 3 ? target : desc10 === null ? desc10 = Object.getOwnPropertyDescriptor(target, key) : desc10, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc10);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate16, "_ts_decorate");
+function _ts_metadata15(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata15, "_ts_metadata");
+function _ts_param15(paramIndex, decorator) {
+  return function(target, key) {
+    decorator(target, key, paramIndex);
+  };
+}
+__name(_ts_param15, "_ts_param");
+var DrizzleSubscriptionContractRepository = class {
+  static {
+    __name(this, "DrizzleSubscriptionContractRepository");
+  }
+  db;
+  constructor(db) {
+    this.db = db;
+  }
+  async list(filter) {
+    const rows = await this.db.select().from(subscriptionContracts).where(and12(...filter.tenantId ? [
+      eq12(subscriptionContracts.tenantId, filter.tenantId)
+    ] : [], ...filter.status ? [
+      eq12(subscriptionContracts.status, filter.status)
+    ] : [], ...filter.asOf ? [
+      inWindowAt(filter.asOf)
+    ] : [])).orderBy(desc7(subscriptionContracts.effectiveFrom), desc7(subscriptionContracts.createdAt));
+    return this.withLineItems(this.db, rows);
+  }
+  async findById(contractId) {
+    const rows = await this.db.select().from(subscriptionContracts).where(eq12(subscriptionContracts.id, contractId)).limit(1);
+    return (await this.withLineItems(this.db, rows))[0] ?? null;
+  }
+  async findActiveByTenantId(tenantId, asOf = /* @__PURE__ */ new Date(), tx) {
+    const db = resolveDb(this.db, tx);
+    const rows = await db.select().from(subscriptionContracts).where(and12(eq12(subscriptionContracts.tenantId, tenantId), inArray4(subscriptionContracts.status, [
+      ...ACTIVE_SUBSCRIPTION_CONTRACT_STATUSES
+    ]), inWindowAt(asOf))).orderBy(desc7(subscriptionContracts.effectiveFrom), desc7(subscriptionContracts.createdAt)).limit(1);
+    return (await this.withLineItems(db, rows))[0] ?? null;
+  }
+  async findByOriginalOfferId(offerId, tx) {
+    const db = resolveDb(this.db, tx);
+    const rows = await db.select().from(subscriptionContracts).where(eq12(subscriptionContracts.originalOfferId, offerId)).orderBy(asc4(subscriptionContracts.createdAt), asc4(subscriptionContracts.id)).limit(1);
+    return (await this.withLineItems(db, rows))[0] ?? null;
+  }
+  async create(data, tx) {
+    const now = /* @__PURE__ */ new Date();
+    const contractId = randomUUID10();
+    return resolveDb(this.db, tx).transaction(async (transaction) => {
+      const db = transaction;
+      const rows = await db.insert(subscriptionContracts).values({
+        id: contractId,
+        tenantId: data.tenantId,
+        status: data.status ?? "active",
+        effectiveFrom: data.effectiveFrom,
+        effectiveUntil: data.effectiveUntil ?? null,
+        originalOfferId: data.originalOfferId ?? null,
+        originalPlanVersionId: data.originalPlanVersionId ?? null,
+        originalBundleVersionIds: data.originalBundleVersionIds ?? [],
+        entitlementSnapshot: data.entitlementSnapshot ?? null,
+        priceSnapshot: data.priceSnapshot,
+        promotionSnapshots: data.promotionSnapshots ?? [],
+        promoCodeSnapshots: data.promoCodeSnapshots ?? [],
+        termsSnapshot: data.termsSnapshot ?? null,
+        subscriberId: data.parties.subscriberId,
+        subscriberSnapshot: data.parties.subscriber,
+        issuerSnapshot: data.parties.issuer,
+        createdAt: now,
+        updatedAt: now
+      }).returning();
+      const lineRows = data.lineItems.length === 0 ? [] : await db.insert(contractLineItems).values(data.lineItems.map((item) => toLineItemInsert(item, contractId, now))).returning();
+      return toSubscriptionContractRecord(rows[0], lineRows);
+    });
+  }
+  async listRunningIssuers(limit, asOf = /* @__PURE__ */ new Date()) {
+    const running = and12(inArray4(subscriptionContracts.status, [
+      ...ACTIVE_SUBSCRIPTION_CONTRACT_STATUSES
+    ]), or4(isNull8(subscriptionContracts.effectiveUntil), gt2(subscriptionContracts.effectiveUntil, asOf)));
+    const [totals, rows] = await Promise.all([
+      this.db.select({
+        value: count2()
+      }).from(subscriptionContracts).where(running),
+      // Oldest first, and `id` last so two contracts that start in the
+      // same moment are still listed in one order — a refusal that names
+      // a different pair on every restart is one an operator cannot act
+      // on.
+      this.db.select({
+        id: subscriptionContracts.id,
+        tenantId: subscriptionContracts.tenantId,
+        issuerSnapshot: subscriptionContracts.issuerSnapshot,
+        effectiveFrom: subscriptionContracts.effectiveFrom
+      }).from(subscriptionContracts).where(running).orderBy(asc4(subscriptionContracts.effectiveFrom), asc4(subscriptionContracts.createdAt), asc4(subscriptionContracts.id)).limit(limit)
+    ]);
+    return {
+      total: totals[0]?.value ?? 0,
+      contracts: rows.map(toRunningContractIssuer)
+    };
+  }
+  async terminate(contractId, data) {
+    const rows = await this.db.update(subscriptionContracts).set({
+      effectiveUntil: data.effectiveUntil,
+      // A null status leaves the column alone: the contract keeps
+      // whatever it had — `active`, usually — and the new
+      // `effectiveUntil` is what takes it out of the active lookup
+      // once that moment arrives.
+      ...data.status === null ? {} : {
+        status: data.status
+      },
+      updatedAt: /* @__PURE__ */ new Date()
+    }).where(eq12(subscriptionContracts.id, contractId)).returning();
+    if (!rows[0]) throw new Error(`SubscriptionContract '${contractId}' not found.`);
+    return (await this.withLineItems(this.db, rows))[0];
+  }
+  /**
+   * The lines for a batch of contracts in one query rather than one per
+   * contract: `list` is the operator's contract history and would otherwise
+   * be an N+1 over a table that only grows.
+   */
+  async withLineItems(db, rows) {
+    if (rows.length === 0) return [];
+    const lines = await db.select().from(contractLineItems).where(inArray4(contractLineItems.contractId, rows.map((row) => row.id)));
+    const byContract = /* @__PURE__ */ new Map();
+    for (const line of lines) {
+      const bucket = byContract.get(line.contractId);
+      if (bucket) bucket.push(line);
+      else byContract.set(line.contractId, [
+        line
+      ]);
+    }
+    return rows.map((row) => toSubscriptionContractRecord(row, byContract.get(row.id) ?? []));
+  }
+};
+DrizzleSubscriptionContractRepository = _ts_decorate16([
+  Injectable16(),
+  _ts_param15(0, Inject15(DRIZZLE_DB_TOKEN)),
+  _ts_metadata15("design:type", Function),
+  _ts_metadata15("design:paramtypes", [
+    typeof DrizzleClient === "undefined" ? Object : DrizzleClient
+  ])
+], DrizzleSubscriptionContractRepository);
+function inWindowAt(asOf) {
+  return and12(lte5(subscriptionContracts.effectiveFrom, asOf), or4(isNull8(subscriptionContracts.effectiveUntil), gt2(subscriptionContracts.effectiveUntil, asOf)));
+}
+__name(inWindowAt, "inWindowAt");
+function toLineItemInsert(item, contractId, createdAt) {
+  return {
+    id: randomUUID10(),
+    contractId,
+    kind: item.kind,
+    sourceKey: item.sourceKey,
+    sourceVersionId: item.sourceVersionId ?? null,
+    titleSnapshot: item.titleSnapshot,
+    descriptionSnapshot: item.descriptionSnapshot ?? null,
+    quantity: item.quantity,
+    unit: item.unit ?? null,
+    // Money as a decimal string all the way to the column: passing a JS
+    // number here would round it on the way in, before anybody could
+    // notice.
+    priceNet: item.priceNet.toFixed(2),
+    priceGross: item.priceGross.toFixed(2),
+    billingCycle: item.billingCycle,
+    currency: item.currency,
+    taxRate: item.taxRate.toFixed(2),
+    taxAmount: item.taxAmount.toFixed(2),
+    minimumTermUntil: item.minimumTermUntil ?? null,
+    featuresSnapshot: item.featuresSnapshot,
+    quotaEffectsSnapshot: item.quotaEffectsSnapshot,
+    metadata: item.metadata ?? null,
+    createdAt
+  };
+}
+__name(toLineItemInsert, "toLineItemInsert");
+
+// src/drizzle-subscriber-payment-method.repository.ts
+import { randomUUID as randomUUID11 } from "node:crypto";
+import { Inject as Inject16, Injectable as Injectable17 } from "@nestjs/common";
+import { and as and13, asc as asc5, eq as eq13, isNull as isNull9 } from "drizzle-orm";
+import { ForeignPaymentMethodReferenceError, refuseForeignPaymentMethodReference, subscriberPaymentMethodColumns, toSubscriberPaymentMethodRecord } from "@saasicat/core";
+function _ts_decorate17(decorators, target, key, desc10) {
+  var c = arguments.length, r = c < 3 ? target : desc10 === null ? desc10 = Object.getOwnPropertyDescriptor(target, key) : desc10, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc10);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate17, "_ts_decorate");
+function _ts_metadata16(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata16, "_ts_metadata");
+function _ts_param16(paramIndex, decorator) {
+  return function(target, key) {
+    decorator(target, key, paramIndex);
+  };
+}
+__name(_ts_param16, "_ts_param");
+var DrizzleSubscriberPaymentMethodRepository = class {
+  static {
+    __name(this, "DrizzleSubscriberPaymentMethodRepository");
+  }
+  db;
+  constructor(db) {
+    this.db = db;
+  }
+  async recordConfirmed(data, tx) {
+    return resolveDb(this.db, tx).transaction(async (transaction) => {
+      const db = transaction;
+      const locked = await db.select({
+        id: subscribers.id
+      }).from(subscribers).where(eq13(subscribers.id, data.subscriberId)).for("update").limit(1);
+      if (locked.length === 0) {
+        throw new Error(`Subscriber '${data.subscriberId}' does not exist; its payment method cannot be recorded.`);
+      }
+      const [recorded] = await db.select().from(subscriberPaymentMethods).where(this.byReference(data.gatewayAccount, data.paymentMethodRef)).limit(1);
+      if (recorded) {
+        refuseForeignPaymentMethodReference(recorded, data.subscriberId);
+        return {
+          method: toSubscriberPaymentMethodRecord(recorded),
+          outcome: "already-recorded"
+        };
+      }
+      const [active] = await db.select().from(subscriberPaymentMethods).where(this.activeOf(data.subscriberId)).limit(1);
+      const replacedOnArrival = active && active.confirmedAt.getTime() > data.confirmedAt.getTime() ? active.confirmedAt : null;
+      const claimed = await this.claimReference(db, {
+        ...subscriberPaymentMethodColumns(data),
+        id: randomUUID11(),
+        status: "REPLACED",
+        replacedAt: replacedOnArrival ?? data.confirmedAt
+      });
+      if (replacedOnArrival) {
+        return {
+          method: toSubscriberPaymentMethodRecord(claimed),
+          outcome: "superseded"
+        };
+      }
+      if (active) {
+        await db.update(subscriberPaymentMethods).set({
+          status: "REPLACED",
+          replacedAt: data.confirmedAt
+        }).where(eq13(subscriberPaymentMethods.id, active.id));
+      }
+      const [inUse] = await db.update(subscriberPaymentMethods).set({
+        status: "ACTIVE",
+        replacedAt: null
+      }).where(eq13(subscriberPaymentMethods.id, claimed.id)).returning();
+      return {
+        method: toSubscriberPaymentMethodRecord(inUse),
+        outcome: "activated"
+      };
+    });
+  }
+  /**
+   * Takes the reference for this subscriber, or refuses it to them.
+   *
+   * The first write of the three, and the only one that can be refused — so a
+   * refusal leaves the caller's transaction as it found it, whichever way the
+   * caller opened it. `onConflictDoNothing` on the reference's own columns is
+   * what answers: the row the read above could not see, because the
+   * transaction holding it had not committed, is waited for here rather than
+   * raised as a driver error, which every driver spells differently.
+   *
+   * It is written `REPLACED` because the seat a subscriber's one `ACTIVE`
+   * payment method occupies may still be taken; `recordConfirmed` gives it
+   * the status it keeps once the seat is free. Nothing outside the
+   * transaction sees the difference.
+   */
+  async claimReference(db, values) {
+    const [claimed] = await db.insert(subscriberPaymentMethods).values(values).onConflictDoNothing({
+      target: [
+        subscriberPaymentMethods.gatewayAccount,
+        subscriberPaymentMethods.paymentMethodRef
+      ]
+    }).returning();
+    if (!claimed) {
+      throw new ForeignPaymentMethodReferenceError(values.gatewayAccount, values.paymentMethodRef);
+    }
+    return claimed;
+  }
+  async findActive(subscriberId, tx) {
+    const [row] = await resolveDb(this.db, tx).select().from(subscriberPaymentMethods).where(this.activeOf(subscriberId)).limit(1);
+    return row ? toSubscriberPaymentMethodRecord(row) : null;
+  }
+  async findByReference(reference, tx) {
+    const [row] = await resolveDb(this.db, tx).select().from(subscriberPaymentMethods).where(and13(eq13(subscriberPaymentMethods.subscriberId, reference.subscriberId), this.byReference(reference.gatewayAccount, reference.paymentMethodRef))).limit(1);
+    return row ? toSubscriberPaymentMethodRecord(row) : null;
+  }
+  async accountsInUse() {
+    const rows = await this.db.selectDistinct({
+      gatewayAccount: subscriberPaymentMethods.gatewayAccount
+    }).from(subscriberPaymentMethods).where(eq13(subscriberPaymentMethods.status, "ACTIVE")).orderBy(asc5(subscriberPaymentMethods.gatewayAccount));
+    return rows.map((row) => row.gatewayAccount);
+  }
+  async recordSetup(data, tx) {
+    await resolveDb(this.db, tx).insert(subscriberPaymentMethodSetups).values({
+      id: randomUUID11(),
+      subscriberId: data.subscriberId,
+      gatewayAccount: data.gatewayAccount,
+      sessionRef: data.sessionRef,
+      customerRef: data.customerRef,
+      startedAt: data.startedAt
+    });
+  }
+  async completeSetup(match, completedAt, tx) {
+    const completed = await resolveDb(this.db, tx).update(subscriberPaymentMethodSetups).set({
+      completedAt
+    }).where(and13(eq13(subscriberPaymentMethodSetups.gatewayAccount, match.gatewayAccount), eq13(subscriberPaymentMethodSetups.sessionRef, match.sessionRef), eq13(subscriberPaymentMethodSetups.subscriberId, match.subscriberId), isNull9(subscriberPaymentMethodSetups.completedAt))).returning({
+      id: subscriberPaymentMethodSetups.id
+    });
+    return completed.length === 1;
+  }
+  activeOf(subscriberId) {
+    return and13(eq13(subscriberPaymentMethods.subscriberId, subscriberId), eq13(subscriberPaymentMethods.status, "ACTIVE"));
+  }
+  byReference(gatewayAccount, paymentMethodRef) {
+    return and13(eq13(subscriberPaymentMethods.gatewayAccount, gatewayAccount), eq13(subscriberPaymentMethods.paymentMethodRef, paymentMethodRef));
+  }
+};
+DrizzleSubscriberPaymentMethodRepository = _ts_decorate17([
+  Injectable17(),
+  _ts_param16(0, Inject16(DRIZZLE_DB_TOKEN)),
+  _ts_metadata16("design:type", Function),
+  _ts_metadata16("design:paramtypes", [
+    typeof DrizzleClient === "undefined" ? Object : DrizzleClient
+  ])
+], DrizzleSubscriberPaymentMethodRepository);
+
+// src/drizzle-subscriber.repository.ts
+import { randomUUID as randomUUID12 } from "node:crypto";
+import { Inject as Inject17, Injectable as Injectable18 } from "@nestjs/common";
+import { and as and14, desc as desc8, eq as eq14, isNull as isNull10 } from "drizzle-orm";
+import { identityCorrectionDelta, toSubscriberCorrectionRecord, toSubscriberRecord } from "@saasicat/core";
+function _ts_decorate18(decorators, target, key, desc10) {
+  var c = arguments.length, r = c < 3 ? target : desc10 === null ? desc10 = Object.getOwnPropertyDescriptor(target, key) : desc10, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc10);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate18, "_ts_decorate");
+function _ts_metadata17(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata17, "_ts_metadata");
+function _ts_param17(paramIndex, decorator) {
+  return function(target, key) {
+    decorator(target, key, paramIndex);
+  };
+}
+__name(_ts_param17, "_ts_param");
+var DrizzleSubscriberRepository = class {
+  static {
+    __name(this, "DrizzleSubscriberRepository");
+  }
+  db;
+  constructor(db) {
+    this.db = db;
+  }
+  async createForTenant(data, tx) {
+    const { tenantId, ...details } = data;
+    const now = /* @__PURE__ */ new Date();
+    const subscriberId = randomUUID12();
+    return resolveDb(this.db, tx).transaction(async (transaction) => {
+      const db = transaction;
+      const [created] = await db.insert(subscribers).values({
+        ...details,
+        id: subscriberId,
+        createdAt: now,
+        updatedAt: now
+      }).returning();
+      const linked = await db.insert(subscriberTenants).values({
+        id: randomUUID12(),
+        subscriberId,
+        tenantId,
+        linkedAt: now
+      }).onConflictDoNothing().returning();
+      if (linked.length === 0) {
+        await db.delete(subscribers).where(eq14(subscribers.id, subscriberId));
+        return null;
+      }
+      return toSubscriberRecord(created, tenantId);
+    });
+  }
+  async findById(subscriberId, tx) {
+    const db = resolveDb(this.db, tx);
+    const rows = await db.select().from(subscribers).where(eq14(subscribers.id, subscriberId)).limit(1);
+    return rows[0] ? this.withLiveTenant(db, rows[0]) : null;
+  }
+  async findByTenantId(tenantId, tx) {
+    const db = resolveDb(this.db, tx);
+    const rows = await db.select({
+      subscriber: subscribers
+    }).from(subscriberTenants).innerJoin(subscribers, eq14(subscribers.id, subscriberTenants.subscriberId)).where(and14(eq14(subscriberTenants.tenantId, tenantId), isNull10(subscriberTenants.unlinkedAt))).limit(1);
+    return rows[0] ? toSubscriberRecord(rows[0].subscriber, tenantId) : null;
+  }
+  async updateContact(subscriberId, change, tx) {
+    const db = resolveDb(this.db, tx);
+    const rows = await db.update(subscribers).set({
+      ...change,
+      updatedAt: /* @__PURE__ */ new Date()
+    }).where(eq14(subscribers.id, subscriberId)).returning();
+    return rows[0] ? this.withLiveTenant(db, rows[0]) : null;
+  }
+  async correctIdentity(subscriberId, data, tx) {
+    return resolveDb(this.db, tx).transaction(async (transaction) => {
+      const db = transaction;
+      const [current] = await db.select().from(subscribers).where(eq14(subscribers.id, subscriberId)).for("update").limit(1);
+      if (!current) return null;
+      const delta = identityCorrectionDelta(current, data.corrected);
+      if (Object.keys(delta.corrected).length === 0) {
+        return {
+          subscriber: await this.withLiveTenant(db, current),
+          correction: null
+        };
+      }
+      const [updated] = await db.update(subscribers).set({
+        ...delta.corrected,
+        updatedAt: /* @__PURE__ */ new Date()
+      }).where(eq14(subscribers.id, subscriberId)).returning();
+      const [correction] = await db.insert(subscriberCorrections).values({
+        id: randomUUID12(),
+        subscriberId,
+        previous: delta.previous,
+        corrected: delta.corrected,
+        reason: data.reason,
+        correctedBy: data.correctedBy,
+        correctedAt: data.correctedAt
+      }).returning();
+      return {
+        subscriber: await this.withLiveTenant(db, updated),
+        correction: toSubscriberCorrectionRecord(correction)
+      };
+    });
+  }
+  async listCorrections(subscriberId) {
+    const rows = await this.db.select().from(subscriberCorrections).where(eq14(subscriberCorrections.subscriberId, subscriberId)).orderBy(desc8(subscriberCorrections.correctedAt), desc8(subscriberCorrections.id));
+    return rows.map(toSubscriberCorrectionRecord);
+  }
+  async withLiveTenant(db, row) {
+    const links = await db.select({
+      tenantId: subscriberTenants.tenantId
+    }).from(subscriberTenants).where(and14(eq14(subscriberTenants.subscriberId, row.id), isNull10(subscriberTenants.unlinkedAt))).limit(1);
+    return toSubscriberRecord(row, links[0]?.tenantId ?? null);
+  }
+};
+DrizzleSubscriberRepository = _ts_decorate18([
+  Injectable18(),
+  _ts_param17(0, Inject17(DRIZZLE_DB_TOKEN)),
+  _ts_metadata17("design:type", Function),
+  _ts_metadata17("design:paramtypes", [
+    typeof DrizzleClient === "undefined" ? Object : DrizzleClient
+  ])
+], DrizzleSubscriberRepository);
+
+// src/drizzle-subscription-usage.adapter.ts
+import { Inject as Inject18, Injectable as Injectable19 } from "@nestjs/common";
+import { eq as eq15 } from "drizzle-orm";
+function _ts_decorate19(decorators, target, key, desc10) {
+  var c = arguments.length, r = c < 3 ? target : desc10 === null ? desc10 = Object.getOwnPropertyDescriptor(target, key) : desc10, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc10);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate19, "_ts_decorate");
+function _ts_metadata18(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata18, "_ts_metadata");
+function _ts_param18(paramIndex, decorator) {
+  return function(target, key) {
+    decorator(target, key, paramIndex);
+  };
+}
+__name(_ts_param18, "_ts_param");
+var DrizzleSubscriptionUsageAdapter = class {
+  static {
+    __name(this, "DrizzleSubscriptionUsageAdapter");
+  }
+  db;
+  constructor(db) {
+    this.db = db;
+  }
+  async findForTenant(tenantId) {
+    const [subscription] = await this.db.select().from(subscriptions).where(eq15(subscriptions.tenantId, tenantId)).limit(1);
+    if (!subscription) return null;
+    const [planVersion] = await this.db.select().from(planVersions).where(eq15(planVersions.id, subscription.planVersionId)).limit(1);
+    if (!planVersion) {
+      throw new Error(`Subscription ${subscription.id} references missing PlanVersion ${subscription.planVersionId}.`);
+    }
+    const [pendingPlanVersion] = subscription.pendingPlanVersionId ? await this.db.select().from(planVersions).where(eq15(planVersions.id, subscription.pendingPlanVersionId)).limit(1) : [];
+    return {
+      id: subscription.id,
+      plan: planVersion.planId,
+      billingCycle: subscription.billingCycle,
+      status: subscription.status,
+      isPilot: subscription.isPilot,
+      pilotEndsAt: subscription.pilotEndsAt,
+      trialEndsAt: subscription.trialEndsAt,
+      startedAt: subscription.startedAt,
+      currentPeriodStart: subscription.currentPeriodStart,
+      currentPeriodEnd: subscription.currentPeriodEnd,
+      minimumTermUntil: subscription.minimumTermUntil,
+      canceledAt: subscription.canceledAt,
+      canceledEffectiveAt: subscription.canceledEffectiveAt,
+      billingAnchorDay: subscription.billingAnchorDay,
+      pendingPlan: subscription.pendingPlan,
+      pendingBillingCycle: subscription.pendingBillingCycle,
+      pendingEffectiveAt: subscription.pendingEffectiveAt,
+      planVersion: toUsagePlanVersion(planVersion),
+      pendingPlanVersion: pendingPlanVersion ? {
+        ...toUsagePlanVersion(pendingPlanVersion),
+        // The two fields a tenant is shown before accepting: does
+        // the change take anything away, and what changed.
+        nonRegressive: pendingPlanVersion.nonRegressive,
+        publishedChanges: pendingPlanVersion.publishedChanges
+      } : null,
+      pendingPlanVersionEffectiveAt: subscription.pendingPlanVersionEffectiveAt,
+      pendingPlanVersionAccepted: subscription.pendingPlanVersionAccepted,
+      pendingPlanVersionAcceptedAt: subscription.pendingPlanVersionAcceptedAt,
+      packageSnapshot: subscription.packageSnapshot,
+      checkoutOfferId: subscription.checkoutOfferId
+    };
+  }
+};
+DrizzleSubscriptionUsageAdapter = _ts_decorate19([
+  Injectable19(),
+  _ts_param18(0, Inject18(DRIZZLE_DB_TOKEN)),
+  _ts_metadata18("design:type", Function),
+  _ts_metadata18("design:paramtypes", [
+    typeof DrizzleClient === "undefined" ? Object : DrizzleClient
+  ])
+], DrizzleSubscriptionUsageAdapter);
+function toUsagePlanVersion(row) {
+  return {
+    id: row.id,
+    // The canonical schema stores the plan key here, which is what the
+    // record's `planId` means too.
+    planId: row.planId,
+    version: row.version,
+    publishedAt: row.publishedAt,
+    supersededAt: row.supersededAt,
+    changeNote: row.changeNote
+  };
+}
+__name(toUsagePlanVersion, "toUsagePlanVersion");
+
+// src/drizzle-tenant-subscription-write.adapter.ts
+import { Inject as Inject19, Injectable as Injectable20 } from "@nestjs/common";
+import { and as and15, eq as eq16, isNull as isNull11 } from "drizzle-orm";
+function _ts_decorate20(decorators, target, key, desc10) {
+  var c = arguments.length, r = c < 3 ? target : desc10 === null ? desc10 = Object.getOwnPropertyDescriptor(target, key) : desc10, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc10);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate20, "_ts_decorate");
+function _ts_metadata19(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata19, "_ts_metadata");
+function _ts_param19(paramIndex, decorator) {
+  return function(target, key) {
+    decorator(target, key, paramIndex);
+  };
+}
+__name(_ts_param19, "_ts_param");
+var DrizzleTenantSubscriptionWrite = class {
+  static {
+    __name(this, "DrizzleTenantSubscriptionWrite");
+  }
+  db;
+  /** Both plan-changing writes bind the version they sell; there is no opt-out here. */
+  bindsPlanVersion = true;
+  plans;
+  constructor(db) {
+    this.db = db;
+    this.plans = new DrizzlePlanRepository(this.db, {
+      validityWindows: true
+    });
+  }
+  async changePlanImmediate(tenantId, input) {
+    return this.db.transaction(async (tx) => {
+      const db = tx;
+      const current = await this.requireSubscription(db, tenantId, {
+        lock: true
+      });
+      const planVersionId = await this.activeVersionId(input.planId, input.periodStart ?? /* @__PURE__ */ new Date(), tx);
+      const pendingMovedAway = await this.pendingVersionBelongsToAnotherPlan(tx, current.pendingPlanVersionId, input.planId);
+      const claimed = await this.claim(db, tenantId, input.expectedCanceledAt, {
+        plan: input.planId,
+        billingCycle: input.cycle,
+        planVersionId,
+        pendingPlan: null,
+        pendingBillingCycle: null,
+        pendingEffectiveAt: null,
+        ...input.nextStatus ? {
+          status: input.nextStatus
+        } : {},
+        ...periodFields(input.periodStart, input.periodEnd),
+        // Null and undefined both mean "leave the trial as it is" — the
+        // platform passes a carried-over end date or nothing at all.
+        ...input.trialEndsAt ? {
+          trialEndsAt: input.trialEndsAt
+        } : {},
+        ...pendingMovedAway ? clearedPendingVersion() : {}
+      });
+      const after = await this.requireSubscription(db, tenantId);
+      return {
+        plan: after.plan,
+        billingCycle: after.billingCycle,
+        claimed: claimed > 0
+      };
+    });
+  }
+  async schedulePlanChange(tenantId, input) {
+    const claimed = await this.claim(this.db, tenantId, input.expectedCanceledAt, {
+      pendingPlan: input.pendingPlan,
+      pendingBillingCycle: input.pendingBillingCycle,
+      pendingEffectiveAt: input.pendingEffectiveAt
+    });
+    return {
+      claimed: claimed > 0
+    };
+  }
+  async acceptPendingPlanVersion(tenantId, userId, now) {
+    const sub = await this.requireSubscription(this.db, tenantId);
+    if (!sub.pendingPlanVersionId) {
+      throw new Error(`No pending PlanVersion for tenant ${tenantId}.`);
     }
-    return toRecord(row);
+    const pendingPlanVersionId = sub.pendingPlanVersionId;
+    const claimed = await this.db.update(subscriptions).set({
+      pendingPlanVersionAccepted: true,
+      pendingPlanVersionAcceptedAt: now,
+      pendingPlanVersionAcceptedByUserId: userId,
+      updatedAt: now
+    }).where(and15(eq16(subscriptions.id, sub.id), eq16(subscriptions.pendingPlanVersionId, pendingPlanVersionId), eq16(subscriptions.pendingPlanVersionAccepted, false))).returning({
+      id: subscriptions.id
+    });
+    const updated = await this.requireSubscription(this.db, tenantId);
+    if (claimed.length === 0 && (updated.pendingPlanVersionId !== pendingPlanVersionId || !updated.pendingPlanVersionAccepted)) {
+      throw new Error(`Pending PlanVersion changed while accepting it for tenant ${tenantId}.`);
+    }
+    return {
+      accepted: true,
+      acceptedAt: updated.pendingPlanVersionAcceptedAt,
+      effectiveAt: updated.pendingPlanVersionEffectiveAt,
+      alreadyAccepted: claimed.length === 0
+    };
   }
-  async countByPromoCode(promoCodeId, status) {
-    const rows = await this.db.select({
-      id: promoCodeRedemptions.id
-    }).from(promoCodeRedemptions).where(and5(eq6(promoCodeRedemptions.promoCodeId, promoCodeId), status ? eq6(promoCodeRedemptions.status, status) : void 0));
-    return rows.length;
+  async cancelSubscription(tenantId, input) {
+    const now = /* @__PURE__ */ new Date();
+    const claimed = await this.db.update(subscriptions).set({
+      canceledAt: input.canceledAt,
+      canceledEffectiveAt: input.effectiveAt,
+      // Absent means unchanged rather than null: an ordinary
+      // cancellation does not touch the commitment it was measured
+      // against, and writing the field on every call would erase a
+      // term that is still running.
+      ...input.minimumTermUntil ? {
+        minimumTermUntil: input.minimumTermUntil
+      } : {},
+      // Written only when the cancellation is already effective.
+      // Restating the status this call read would undo whatever
+      // changed it in between — a trial going live between the read
+      // and the write came back as `TRIAL`, entitlements and all.
+      // An ordinary cancellation records dates; it has no opinion
+      // about the status.
+      ...input.terminateNow ? {
+        status: "CANCELED"
+      } : {},
+      updatedAt: now
+    }).where(and15(eq16(subscriptions.tenantId, tenantId), isNull11(subscriptions.canceledAt), isNull11(subscriptions.canceledEffectiveAt))).returning({
+      id: subscriptions.id
+    });
+    const current = await this.requireSubscription(this.db, tenantId);
+    return {
+      canceledAt: current.canceledAt ?? null,
+      canceledEffectiveAt: current.canceledEffectiveAt ?? null,
+      status: current.status,
+      alreadyCanceled: claimed.length === 0
+    };
   }
-  async listByPromoCode(promoCodeId) {
-    const rows = await this.db.select().from(promoCodeRedemptions).where(eq6(promoCodeRedemptions.promoCodeId, promoCodeId)).orderBy(desc3(promoCodeRedemptions.redeemedAt));
-    return rows.map(toRecord);
+  async applyOnboardingSelection(tenantId, input, redeemPromo) {
+    return this.db.transaction(async (tx) => {
+      const db = tx;
+      const planVersionId = await this.activeVersionId(input.planId, input.periodStart ?? /* @__PURE__ */ new Date(), tx);
+      const claimed = await this.claim(db, tenantId, input.expectedCanceledAt, {
+        plan: input.planId,
+        billingCycle: input.cycle,
+        planVersionId,
+        pendingPlan: null,
+        pendingBillingCycle: null,
+        pendingEffectiveAt: null,
+        ...clearedPendingVersion(),
+        ...input.nextStatus ? {
+          status: input.nextStatus
+        } : {},
+        ...periodFields(input.periodStart, input.periodEnd)
+      });
+      const updated = await this.requireSubscription(db, tenantId);
+      if (claimed === 0) {
+        return {
+          plan: updated.plan,
+          billingCycle: updated.billingCycle,
+          subscriptionId: updated.id,
+          promoRedemption: null,
+          claimed: false
+        };
+      }
+      let promoRedemption = null;
+      if (redeemPromo) {
+        promoRedemption = await redeemPromo(tx, updated.id);
+      }
+      return {
+        plan: updated.plan,
+        billingCycle: updated.billingCycle,
+        subscriptionId: updated.id,
+        promoRedemption,
+        claimed: true
+      };
+    });
   }
-  async expireDueRedemptions(now) {
-    const expired = await this.db.update(promoCodeRedemptions).set({
-      status: "EXPIRED"
-    }).where(and5(eq6(promoCodeRedemptions.status, "ACTIVE"), lt2(promoCodeRedemptions.endsAt, now))).returning({
-      id: promoCodeRedemptions.id
+  /**
+   * One `UPDATE` naming the cancellation state the caller decided against,
+   * answering with how many rows it took. Reading first and updating by
+   * tenant alone would leave the window this closes.
+   */
+  async claim(db, tenantId, expectedCanceledAt, values) {
+    const claimed = await db.update(subscriptions).set({
+      ...values,
+      updatedAt: /* @__PURE__ */ new Date()
+    }).where(and15(eq16(subscriptions.tenantId, tenantId), canceledAtIs(expectedCanceledAt))).returning({
+      id: subscriptions.id
     });
-    return expired.length;
+    return claimed.length;
+  }
+  /**
+   * `lock: true` takes the row for the rest of the transaction, so a caller
+   * deciding from what it read cannot have the ground move underneath it. It
+   * is only meaningful inside a transaction — outside one the lock is
+   * released with the statement.
+   */
+  async requireSubscription(db, tenantId, options = {}) {
+    const query = db.select().from(subscriptions).where(eq16(subscriptions.tenantId, tenantId));
+    const rows = await (options.lock ? query.for("update") : query).limit(1);
+    if (!rows[0]) throw new Error(`No subscription for tenant ${tenantId}.`);
+    return rows[0];
+  }
+  async activeVersionId(planKey, asOf, tx) {
+    const active = await this.plans.findActivePlanVersion?.(planKey, asOf, tx);
+    if (!active) throw new Error(`No active PlanVersion for plan '${planKey}'.`);
+    return active.id;
+  }
+  /**
+   * On the caller's transaction, not beside it. The change already holds a
+   * connection for its whole length; asking for a second one waits for the
+   * connection this transaction is holding, and a one-connection pool then
+   * never gets past here.
+   */
+  async pendingVersionBelongsToAnotherPlan(tx, pendingPlanVersionId, targetPlanKey) {
+    if (!pendingPlanVersionId) return false;
+    const pending = await this.plans.findVersionById(pendingPlanVersionId, tx);
+    return !pending || pending.planId !== targetPlanKey;
   }
 };
-DrizzlePromoCodeRedemptionRepository = _ts_decorate9([
-  Injectable9(),
-  _ts_param8(0, Inject8(DRIZZLE_DB_TOKEN)),
-  _ts_metadata8("design:type", Function),
-  _ts_metadata8("design:paramtypes", [
+DrizzleTenantSubscriptionWrite = _ts_decorate20([
+  Injectable20(),
+  _ts_param19(0, Inject19(DRIZZLE_DB_TOKEN)),
+  _ts_metadata19("design:type", Function),
+  _ts_metadata19("design:paramtypes", [
     typeof DrizzleClient === "undefined" ? Object : DrizzleClient
   ])
-], DrizzlePromoCodeRedemptionRepository);
-function toRecord(row) {
+], DrizzleTenantSubscriptionWrite);
+function periodFields(periodStart, periodEnd) {
+  if (!periodStart || !periodEnd) return {};
   return {
-    id: row.id,
-    promoCodeId: row.promoCodeId,
-    subscriptionId: row.subscriptionId,
-    tenantId: row.tenantId,
-    appliedValueType: row.appliedValueType,
-    appliedValue: String(row.appliedValue),
-    appliedDurationType: row.appliedDurationType,
-    appliedDurationValue: row.appliedDurationValue,
-    startsAt: row.startsAt,
-    endsAt: row.endsAt,
-    status: row.status,
-    redeemedAt: row.redeemedAt,
-    reversedAt: row.reversedAt
+    currentPeriodStart: periodStart,
+    currentPeriodEnd: periodEnd,
+    billingAnchorDay: periodStart.getUTCDate()
   };
 }
-__name(toRecord, "toRecord");
+__name(periodFields, "periodFields");
+function clearedPendingVersion() {
+  return {
+    pendingPlanVersionId: null,
+    pendingPlanVersionEffectiveAt: null,
+    pendingPlanVersionAccepted: false,
+    pendingPlanVersionAcceptedAt: null,
+    pendingPlanVersionAcceptedByUserId: null,
+    pendingPlanVersionNotifiedAt: null,
+    pendingPlanVersionReminderSentAt: null
+  };
+}
+__name(clearedPendingVersion, "clearedPendingVersion");
+function canceledAtIs(expected) {
+  return expected === null ? isNull11(subscriptions.canceledAt) : eq16(subscriptions.canceledAt, expected);
+}
+__name(canceledAtIs, "canceledAtIs");
 
-// src/drizzle-promo-code.repository.ts
-import { randomUUID as randomUUID4 } from "node:crypto";
-import { Inject as Inject9, Injectable as Injectable10 } from "@nestjs/common";
-import { and as and6, eq as eq7, gte as gte3, inArray as inArray2, isNotNull as isNotNull4, isNull as isNull4, like as like2, lt as lt3, or, sql } from "drizzle-orm";
-function _ts_decorate10(decorators, target, key, desc4) {
-  var c = arguments.length, r = c < 3 ? target : desc4 === null ? desc4 = Object.getOwnPropertyDescriptor(target, key) : desc4, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc4);
+// src/drizzle-subscription-bundle.repository.ts
+import { randomUUID as randomUUID13 } from "node:crypto";
+import { Inject as Inject20, Injectable as Injectable21 } from "@nestjs/common";
+import { and as and16, desc as desc9, eq as eq17, gt as gt3, isNull as isNull12, or as or5 } from "drizzle-orm";
+function _ts_decorate21(decorators, target, key, desc10) {
+  var c = arguments.length, r = c < 3 ? target : desc10 === null ? desc10 = Object.getOwnPropertyDescriptor(target, key) : desc10, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc10);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate10, "_ts_decorate");
-function _ts_metadata9(k, v) {
+__name(_ts_decorate21, "_ts_decorate");
+function _ts_metadata20(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata9, "_ts_metadata");
-function _ts_param9(paramIndex, decorator) {
+__name(_ts_metadata20, "_ts_metadata");
+function _ts_param20(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param9, "_ts_param");
-var DrizzlePromoCodeRepository = class {
+__name(_ts_param20, "_ts_param");
+var DrizzleSubscriptionBundleRepository = class {
   static {
-    __name(this, "DrizzlePromoCodeRepository");
+    __name(this, "DrizzleSubscriptionBundleRepository");
   }
   db;
   constructor(db) {
     this.db = db;
   }
-  async findById(id) {
-    const rows = await this.db.select().from(promoCodes).where(eq7(promoCodes.id, id)).limit(1);
-    const row = rows[0];
-    return row ? toRecord2(row) : null;
+  async listBySubscription(subscriptionId) {
+    const rows = await this.db.select().from(subscriptionBundles).where(eq17(subscriptionBundles.subscriptionId, subscriptionId)).orderBy(desc9(subscriptionBundles.startedAt));
+    return rows.map(toRecord3);
   }
-  async findByCode(code, tx) {
-    const db = resolveDb(this.db, tx);
-    const rows = await db.select().from(promoCodes).where(eq7(promoCodes.code, normalizeCode(code))).limit(1);
-    const row = rows[0];
-    if (!row || row.deletedAt) return null;
-    return toRecord2(row);
+  async findById(subscriptionBundleId) {
+    const rows = await this.db.select().from(subscriptionBundles).where(eq17(subscriptionBundles.id, subscriptionBundleId)).limit(1);
+    return rows[0] ? toRecord3(rows[0]) : null;
   }
-  async findMany(filter) {
-    const conditions = [
-      isNull4(promoCodes.deletedAt),
-      filter.status ? eq7(promoCodes.status, filter.status) : void 0,
-      filter.campaignTag ? eq7(promoCodes.campaignTag, filter.campaignTag) : void 0,
-      filter.search ? like2(promoCodes.code, `%${escapeLikePattern(normalizeCode(filter.search))}%`) : void 0
-    ];
-    const rows = await this.db.select().from(promoCodes).where(and6(...conditions)).orderBy(sql`${promoCodes.createdAt} DESC`);
-    return rows.map(toRecord2);
+  async listActiveBySubscription(subscriptionId, asOf = /* @__PURE__ */ new Date(), tx) {
+    const rows = await resolveDb(this.db, tx).select().from(subscriptionBundles).where(and16(eq17(subscriptionBundles.subscriptionId, subscriptionId), stillActive(asOf)));
+    return rows.map(toRecord3);
   }
-  async create(data) {
-    const rows = await this.db.insert(promoCodes).values({
-      id: randomUUID4(),
-      code: normalizeCode(data.code),
-      valueType: data.valueType,
-      value: data.value.toFixed(2),
-      durationType: data.durationType,
-      durationValue: data.durationValue ?? null,
-      validFrom: data.validFrom ?? null,
-      validUntil: data.validUntil ?? null,
-      maxRedemptions: data.maxRedemptions ?? null,
-      appliesToPlans: data.appliesToPlans ?? [],
-      appliesToBilling: data.appliesToBilling ?? null,
-      firstTimeCustomersOnly: data.firstTimeCustomersOnly ?? true,
-      minimumPlanAmountGross: data.minimumPlanAmountGross?.toFixed(2) ?? null,
-      allowZeroInvoice: data.allowZeroInvoice ?? false,
-      description: data.description ?? null,
-      campaignTag: data.campaignTag ?? null,
-      revenueDeductionAccount: data.revenueDeductionAccount ?? null,
-      createdById: data.createdById,
-      updatedAt: /* @__PURE__ */ new Date()
+  async add(data) {
+    const now = /* @__PURE__ */ new Date();
+    const rows = await this.db.insert(subscriptionBundles).values({
+      id: randomUUID13(),
+      subscriptionId: data.subscriptionId,
+      bundleVersionId: data.bundleVersionId,
+      startedAt: data.startedAt ?? now,
+      minimumTermEndsAt: data.minimumTermEndsAt ?? null,
+      billingCycle: data.billingCycle ?? null,
+      currentPeriodStart: data.currentPeriodStart ?? null,
+      currentPeriodEnd: data.currentPeriodEnd ?? null,
+      canceledAt: null,
+      canceledEffectiveAt: null,
+      updatedAt: now
     }).returning();
-    return toRecord2(rows[0]);
+    return toRecord3(rows[0]);
   }
-  async update(id, data) {
-    const rows = await this.db.update(promoCodes).set({
-      status: data.status,
-      description: data.description,
-      validUntil: data.validUntil,
-      maxRedemptions: data.maxRedemptions,
+  async cancel(subscriptionBundleId, data) {
+    const rows = await this.db.update(subscriptionBundles).set({
+      canceledAt: data.canceledAt,
+      canceledEffectiveAt: data.canceledEffectiveAt,
       updatedAt: /* @__PURE__ */ new Date()
-    }).where(eq7(promoCodes.id, id)).returning();
-    const row = rows[0];
-    if (!row) {
-      throw new Error(`PromoCode ${id} not found.`);
+    }).where(and16(eq17(subscriptionBundles.id, subscriptionBundleId), isNull12(subscriptionBundles.canceledAt))).returning();
+    if (!rows[0]) {
+      throw new Error(`SubscriptionBundle '${subscriptionBundleId}' not found or already cancelled`);
     }
-    return toRecord2(row);
-  }
-  async softDelete(id) {
-    await this.db.update(promoCodes).set({
-      deletedAt: /* @__PURE__ */ new Date(),
-      updatedAt: /* @__PURE__ */ new Date()
-    }).where(eq7(promoCodes.id, id));
-  }
-  async claimSlot(id, tx) {
-    const db = resolveDb(this.db, tx);
-    const claimed = await db.update(promoCodes).set({
-      redemptionsCount: sql`${promoCodes.redemptionsCount} + 1`,
-      updatedAt: /* @__PURE__ */ new Date()
-    }).where(and6(eq7(promoCodes.id, id), eq7(promoCodes.status, "ACTIVE"), isNull4(promoCodes.deletedAt), or(isNull4(promoCodes.maxRedemptions), lt3(promoCodes.redemptionsCount, promoCodes.maxRedemptions)))).returning({
-      id: promoCodes.id
-    });
-    return claimed.length === 1;
-  }
-  async markExhaustedIfFull(id, tx) {
-    const db = resolveDb(this.db, tx);
-    await db.update(promoCodes).set({
-      status: "EXHAUSTED",
-      updatedAt: /* @__PURE__ */ new Date()
-    }).where(and6(eq7(promoCodes.id, id), eq7(promoCodes.status, "ACTIVE"), isNotNull4(promoCodes.maxRedemptions), gte3(promoCodes.redemptionsCount, promoCodes.maxRedemptions)));
+    return toRecord3(rows[0]);
   }
-  async releaseSlot(id, tx) {
-    const db = resolveDb(this.db, tx);
-    await db.update(promoCodes).set({
-      redemptionsCount: sql`GREATEST(${promoCodes.redemptionsCount} - 1, 0)`,
-      status: sql`CASE WHEN ${promoCodes.status} = 'EXHAUSTED' THEN 'ACTIVE' ELSE ${promoCodes.status} END`,
+  async reactivate(subscriptionBundleId) {
+    const rows = await this.db.update(subscriptionBundles).set({
+      canceledAt: null,
+      canceledEffectiveAt: null,
       updatedAt: /* @__PURE__ */ new Date()
-    }).where(eq7(promoCodes.id, id));
+    }).where(eq17(subscriptionBundles.id, subscriptionBundleId)).returning();
+    if (!rows[0]) throw new Error(`SubscriptionBundle '${subscriptionBundleId}' not found`);
+    return toRecord3(rows[0]);
   }
-  async expireDueCodes(now) {
-    const expired = await this.db.update(promoCodes).set({
-      status: "EXPIRED",
-      updatedAt: /* @__PURE__ */ new Date()
-    }).where(and6(inArray2(promoCodes.status, [
-      "ACTIVE",
-      "PAUSED"
-    ]), lt3(promoCodes.validUntil, now))).returning({
-      id: promoCodes.id
-    });
-    return expired.length;
+  async countActiveByBundleVersionId(bundleVersionId, asOf = /* @__PURE__ */ new Date()) {
+    const rows = await this.db.select({
+      id: subscriptionBundles.id
+    }).from(subscriptionBundles).where(and16(eq17(subscriptionBundles.bundleVersionId, bundleVersionId), stillActive(asOf)));
+    return rows.length;
   }
 };
-DrizzlePromoCodeRepository = _ts_decorate10([
-  Injectable10(),
-  _ts_param9(0, Inject9(DRIZZLE_DB_TOKEN)),
-  _ts_metadata9("design:type", Function),
-  _ts_metadata9("design:paramtypes", [
+DrizzleSubscriptionBundleRepository = _ts_decorate21([
+  Injectable21(),
+  _ts_param20(0, Inject20(DRIZZLE_DB_TOKEN)),
+  _ts_metadata20("design:type", Function),
+  _ts_metadata20("design:paramtypes", [
     typeof DrizzleClient === "undefined" ? Object : DrizzleClient
   ])
-], DrizzlePromoCodeRepository);
-function normalizeCode(code) {
-  return code.trim().toUpperCase();
+], DrizzleSubscriptionBundleRepository);
+function stillActive(asOf) {
+  return or5(isNull12(subscriptionBundles.canceledAt), gt3(subscriptionBundles.canceledEffectiveAt, asOf));
 }
-__name(normalizeCode, "normalizeCode");
-function toRecord2(row) {
+__name(stillActive, "stillActive");
+function toRecord3(row) {
   return {
     id: row.id,
-    code: row.code,
-    valueType: row.valueType,
-    value: String(row.value),
-    durationType: row.durationType,
-    durationValue: row.durationValue,
-    validFrom: row.validFrom,
-    validUntil: row.validUntil,
-    maxRedemptions: row.maxRedemptions,
-    redemptionsCount: row.redemptionsCount,
-    appliesToPlans: row.appliesToPlans ?? [],
-    appliesToBilling: row.appliesToBilling ?? null,
-    firstTimeCustomersOnly: row.firstTimeCustomersOnly,
-    minimumPlanAmountGross: row.minimumPlanAmountGross === null ? null : String(row.minimumPlanAmountGross),
-    allowZeroInvoice: row.allowZeroInvoice,
-    status: row.status,
-    description: row.description,
-    campaignTag: row.campaignTag,
-    revenueDeductionAccount: row.revenueDeductionAccount,
-    createdById: row.createdById,
+    subscriptionId: row.subscriptionId,
+    bundleVersionId: row.bundleVersionId,
+    startedAt: row.startedAt,
+    minimumTermEndsAt: row.minimumTermEndsAt,
+    billingCycle: row.billingCycle,
+    currentPeriodStart: row.currentPeriodStart,
+    currentPeriodEnd: row.currentPeriodEnd,
+    canceledAt: row.canceledAt,
+    canceledEffectiveAt: row.canceledEffectiveAt,
     createdAt: row.createdAt,
-    updatedAt: row.updatedAt,
-    deletedAt: row.deletedAt
+    updatedAt: row.updatedAt
   };
 }
-__name(toRecord2, "toRecord");
+__name(toRecord3, "toRecord");
 
 // src/drizzle-promo-code-validation-log.repository.ts
-import { randomUUID as randomUUID5 } from "node:crypto";
-import { Inject as Inject10, Injectable as Injectable11 } from "@nestjs/common";
-import { and as and7, eq as eq8 } from "drizzle-orm";
-function _ts_decorate11(decorators, target, key, desc4) {
-  var c = arguments.length, r = c < 3 ? target : desc4 === null ? desc4 = Object.getOwnPropertyDescriptor(target, key) : desc4, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc4);
+import { randomUUID as randomUUID14 } from "node:crypto";
+import { Inject as Inject21, Injectable as Injectable22 } from "@nestjs/common";
+import { and as and17, eq as eq18 } from "drizzle-orm";
+function _ts_decorate22(decorators, target, key, desc10) {
+  var c = arguments.length, r = c < 3 ? target : desc10 === null ? desc10 = Object.getOwnPropertyDescriptor(target, key) : desc10, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc10);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate11, "_ts_decorate");
-function _ts_metadata10(k, v) {
+__name(_ts_decorate22, "_ts_decorate");
+function _ts_metadata21(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata10, "_ts_metadata");
-function _ts_param10(paramIndex, decorator) {
+__name(_ts_metadata21, "_ts_metadata");
+function _ts_param21(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param10, "_ts_param");
+__name(_ts_param21, "_ts_param");
 var DrizzlePromoCodeValidationLogRepository = class {
   static {
     __name(this, "DrizzlePromoCodeValidationLogRepository");
@@ -1086,7 +3176,7 @@ var DrizzlePromoCodeValidationLogRepository = class {
   }
   async log(args) {
     await this.db.insert(promoCodeValidationLogs).values({
-      id: randomUUID5(),
+      id: randomUUID14(),
       promoCodeId: args.promoCodeId,
       codeAttempt: args.codeAttempt.trim().toUpperCase(),
       result: args.result,
@@ -1097,39 +3187,39 @@ var DrizzlePromoCodeValidationLogRepository = class {
   async countValid(promoCodeId) {
     const rows = await this.db.select({
       id: promoCodeValidationLogs.id
-    }).from(promoCodeValidationLogs).where(and7(eq8(promoCodeValidationLogs.promoCodeId, promoCodeId), eq8(promoCodeValidationLogs.result, "VALID")));
+    }).from(promoCodeValidationLogs).where(and17(eq18(promoCodeValidationLogs.promoCodeId, promoCodeId), eq18(promoCodeValidationLogs.result, "VALID")));
     return rows.length;
   }
 };
-DrizzlePromoCodeValidationLogRepository = _ts_decorate11([
-  Injectable11(),
-  _ts_param10(0, Inject10(DRIZZLE_DB_TOKEN)),
-  _ts_metadata10("design:type", Function),
-  _ts_metadata10("design:paramtypes", [
+DrizzlePromoCodeValidationLogRepository = _ts_decorate22([
+  Injectable22(),
+  _ts_param21(0, Inject21(DRIZZLE_DB_TOKEN)),
+  _ts_metadata21("design:type", Function),
+  _ts_metadata21("design:paramtypes", [
     typeof DrizzleClient === "undefined" ? Object : DrizzleClient
   ])
 ], DrizzlePromoCodeValidationLogRepository);
 
 // src/drizzle-promo-subscription-lookup.adapter.ts
-import { Inject as Inject11, Injectable as Injectable12 } from "@nestjs/common";
-import { eq as eq9 } from "drizzle-orm";
-function _ts_decorate12(decorators, target, key, desc4) {
-  var c = arguments.length, r = c < 3 ? target : desc4 === null ? desc4 = Object.getOwnPropertyDescriptor(target, key) : desc4, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc4);
+import { Inject as Inject22, Injectable as Injectable23 } from "@nestjs/common";
+import { eq as eq19 } from "drizzle-orm";
+function _ts_decorate23(decorators, target, key, desc10) {
+  var c = arguments.length, r = c < 3 ? target : desc10 === null ? desc10 = Object.getOwnPropertyDescriptor(target, key) : desc10, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc10);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate12, "_ts_decorate");
-function _ts_metadata11(k, v) {
+__name(_ts_decorate23, "_ts_decorate");
+function _ts_metadata22(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata11, "_ts_metadata");
-function _ts_param11(paramIndex, decorator) {
+__name(_ts_metadata22, "_ts_metadata");
+function _ts_param22(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param11, "_ts_param");
+__name(_ts_param22, "_ts_param");
 var DrizzlePromoSubscriptionLookup = class {
   static {
     __name(this, "DrizzlePromoSubscriptionLookup");
@@ -1146,7 +3236,7 @@ var DrizzlePromoSubscriptionLookup = class {
       plan: subscriptions.plan,
       billingCycle: subscriptions.billingCycle,
       startedAt: subscriptions.startedAt
-    }).from(subscriptions).where(eq9(subscriptions.id, subscriptionId)).limit(1);
+    }).from(subscriptions).where(eq19(subscriptions.id, subscriptionId)).limit(1);
     const row = rows[0];
     if (!row) return null;
     return {
@@ -1158,35 +3248,35 @@ var DrizzlePromoSubscriptionLookup = class {
     };
   }
 };
-DrizzlePromoSubscriptionLookup = _ts_decorate12([
-  Injectable12(),
-  _ts_param11(0, Inject11(DRIZZLE_DB_TOKEN)),
-  _ts_metadata11("design:type", Function),
-  _ts_metadata11("design:paramtypes", [
+DrizzlePromoSubscriptionLookup = _ts_decorate23([
+  Injectable23(),
+  _ts_param22(0, Inject22(DRIZZLE_DB_TOKEN)),
+  _ts_metadata22("design:type", Function),
+  _ts_metadata22("design:paramtypes", [
     typeof DrizzleClient === "undefined" ? Object : DrizzleClient
   ])
 ], DrizzlePromoSubscriptionLookup);
 
 // src/drizzle-subscription.repository.ts
-import { Inject as Inject12, Injectable as Injectable13 } from "@nestjs/common";
-import { eq as eq10, inArray as inArray3, or as or2 } from "drizzle-orm";
-function _ts_decorate13(decorators, target, key, desc4) {
-  var c = arguments.length, r = c < 3 ? target : desc4 === null ? desc4 = Object.getOwnPropertyDescriptor(target, key) : desc4, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc4);
+import { Inject as Inject23, Injectable as Injectable24 } from "@nestjs/common";
+import { and as and18, eq as eq20, gt as gt4, inArray as inArray5, isNull as isNull13, or as or6 } from "drizzle-orm";
+function _ts_decorate24(decorators, target, key, desc10) {
+  var c = arguments.length, r = c < 3 ? target : desc10 === null ? desc10 = Object.getOwnPropertyDescriptor(target, key) : desc10, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc10);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate13, "_ts_decorate");
-function _ts_metadata12(k, v) {
+__name(_ts_decorate24, "_ts_decorate");
+function _ts_metadata23(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata12, "_ts_metadata");
-function _ts_param12(paramIndex, decorator) {
+__name(_ts_metadata23, "_ts_metadata");
+function _ts_param23(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param12, "_ts_param");
+__name(_ts_param23, "_ts_param");
 var ACTIVE_STATUSES = [
   "ACTIVE",
   "TRIAL"
@@ -1206,19 +3296,28 @@ var DrizzleSubscriptionRepository = class {
     const db = resolveDb(this.db, tx);
     await db.select({
       id: subscriptions.id
-    }).from(subscriptions).where(eq10(subscriptions.tenantId, tenantId)).for("update");
+    }).from(subscriptions).where(eq20(subscriptions.tenantId, tenantId)).for("update");
     return this.loadByTenantId(db, tenantId);
   }
   async countByPlanVersionId(planVersionId) {
     const rows = await this.db.select({
       id: subscriptions.id
-    }).from(subscriptions).where(or2(eq10(subscriptions.planVersionId, planVersionId), eq10(subscriptions.pendingPlanVersionId, planVersionId)));
+    }).from(subscriptions).where(or6(eq20(subscriptions.planVersionId, planVersionId), eq20(subscriptions.pendingPlanVersionId, planVersionId)));
     return rows.length;
   }
-  async countActiveByPlanKey(_projectKey) {
+  async countActiveByPlanKey() {
+    const now = /* @__PURE__ */ new Date();
     const rows = await this.db.select({
       plan: subscriptions.plan
-    }).from(subscriptions).where(inArray3(subscriptions.status, ACTIVE_STATUSES));
+    }).from(subscriptions).where(and18(inArray5(subscriptions.status, ACTIVE_STATUSES), or6(
+      isNull13(subscriptions.canceledAt),
+      gt4(subscriptions.canceledEffectiveAt, now),
+      // The pre-split row keeps its effective date in the
+      // first column; reading only the second drops that
+      // customer on the day they declare rather than the day
+      // they leave.
+      and18(isNull13(subscriptions.canceledEffectiveAt), gt4(subscriptions.canceledAt, now))
+    )));
     const counts = {};
     for (const row of rows) {
       counts[row.plan] = (counts[row.plan] ?? 0) + 1;
@@ -1226,13 +3325,13 @@ var DrizzleSubscriptionRepository = class {
     return counts;
   }
   async loadByTenantId(db, tenantId) {
-    const rows = await db.select().from(subscriptions).where(eq10(subscriptions.tenantId, tenantId)).limit(1);
+    const rows = await db.select().from(subscriptions).where(eq20(subscriptions.tenantId, tenantId)).limit(1);
     const row = rows[0];
     if (!row) return null;
     return this.toRecord(db, row);
   }
   async toRecord(db, row) {
-    const versionRows = await db.select().from(planVersions).where(eq10(planVersions.id, row.planVersionId)).limit(1);
+    const versionRows = await db.select().from(planVersions).where(eq20(planVersions.id, row.planVersionId)).limit(1);
     const planVersion = versionRows[0];
     if (!planVersion) {
       throw new Error(`Subscription ${row.id} references missing PlanVersion ${row.planVersionId}.`);
@@ -1247,6 +3346,8 @@ var DrizzleSubscriptionRepository = class {
       pendingPlan: row.pendingPlan,
       pendingEffectiveAt: row.pendingEffectiveAt,
       customLimits: row.customLimits ?? null,
+      canceledAt: row.canceledAt ?? null,
+      canceledEffectiveAt: row.canceledEffectiveAt ?? null,
       planVersionId: row.planVersionId,
       planVersion: {
         planId: planVersion.planId,
@@ -1256,37 +3357,37 @@ var DrizzleSubscriptionRepository = class {
     };
   }
 };
-DrizzleSubscriptionRepository = _ts_decorate13([
-  Injectable13(),
-  _ts_param12(0, Inject12(DRIZZLE_DB_TOKEN)),
-  _ts_metadata12("design:type", Function),
-  _ts_metadata12("design:paramtypes", [
+DrizzleSubscriptionRepository = _ts_decorate24([
+  Injectable24(),
+  _ts_param23(0, Inject23(DRIZZLE_DB_TOKEN)),
+  _ts_metadata23("design:type", Function),
+  _ts_metadata23("design:paramtypes", [
     typeof DrizzleClient === "undefined" ? Object : DrizzleClient
   ])
 ], DrizzleSubscriptionRepository);
 
 // src/drizzle-super-admin-bootstrap.adapter.ts
-import { randomUUID as randomUUID6 } from "node:crypto";
-import { Inject as Inject13, Injectable as Injectable14 } from "@nestjs/common";
-import { and as and8, count as count2, eq as eq11, isNull as isNull5 } from "drizzle-orm";
+import { randomUUID as randomUUID15 } from "node:crypto";
+import { Inject as Inject24, Injectable as Injectable25 } from "@nestjs/common";
+import { and as and19, count as count3, eq as eq21, isNull as isNull14 } from "drizzle-orm";
 import { PlatformUserExistsError } from "@saasicat/core";
-function _ts_decorate14(decorators, target, key, desc4) {
-  var c = arguments.length, r = c < 3 ? target : desc4 === null ? desc4 = Object.getOwnPropertyDescriptor(target, key) : desc4, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc4);
+function _ts_decorate25(decorators, target, key, desc10) {
+  var c = arguments.length, r = c < 3 ? target : desc10 === null ? desc10 = Object.getOwnPropertyDescriptor(target, key) : desc10, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc10);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate14, "_ts_decorate");
-function _ts_metadata13(k, v) {
+__name(_ts_decorate25, "_ts_decorate");
+function _ts_metadata24(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata13, "_ts_metadata");
-function _ts_param13(paramIndex, decorator) {
+__name(_ts_metadata24, "_ts_metadata");
+function _ts_param24(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param13, "_ts_param");
+__name(_ts_param24, "_ts_param");
 var PASSWORD_HASHER_TOKEN = /* @__PURE__ */ Symbol.for("saasicat/adapter-drizzle/PasswordHasher");
 var DrizzleSuperAdminBootstrapAdapter = class {
   static {
@@ -1300,18 +3401,18 @@ var DrizzleSuperAdminBootstrapAdapter = class {
   }
   async countSuperAdmins() {
     const rows = await this.db.select({
-      value: count2()
-    }).from(superAdminUsers).where(and8(eq11(superAdminUsers.isActive, true), isNull5(superAdminUsers.deletedAt)));
+      value: count3()
+    }).from(superAdminUsers).where(and19(eq21(superAdminUsers.isActive, true), isNull14(superAdminUsers.deletedAt)));
     return rows[0]?.value ?? 0;
   }
   async createSuperAdmin(input) {
     const email = input.email.trim().toLowerCase();
-    const existing = await this.db.select().from(superAdminUsers).where(eq11(superAdminUsers.email, email)).limit(1);
+    const existing = await this.db.select().from(superAdminUsers).where(eq21(superAdminUsers.email, email)).limit(1);
     if (existing[0]) {
       throw new PlatformUserExistsError(email, existing[0].platformRole);
     }
     const rows = await this.db.insert(superAdminUsers).values({
-      id: randomUUID6(),
+      id: randomUUID15(),
       email,
       passwordHash: await this.passwordHasher.hash(input.password),
       firstName: input.firstName ?? null,
@@ -1331,36 +3432,36 @@ var DrizzleSuperAdminBootstrapAdapter = class {
     };
   }
 };
-DrizzleSuperAdminBootstrapAdapter = _ts_decorate14([
-  Injectable14(),
-  _ts_param13(0, Inject13(DRIZZLE_DB_TOKEN)),
-  _ts_param13(1, Inject13(PASSWORD_HASHER_TOKEN)),
-  _ts_metadata13("design:type", Function),
-  _ts_metadata13("design:paramtypes", [
+DrizzleSuperAdminBootstrapAdapter = _ts_decorate25([
+  Injectable25(),
+  _ts_param24(0, Inject24(DRIZZLE_DB_TOKEN)),
+  _ts_param24(1, Inject24(PASSWORD_HASHER_TOKEN)),
+  _ts_metadata24("design:type", Function),
+  _ts_metadata24("design:paramtypes", [
     typeof DrizzleClient === "undefined" ? Object : DrizzleClient,
     typeof PasswordHasher === "undefined" ? Object : PasswordHasher
   ])
 ], DrizzleSuperAdminBootstrapAdapter);
 
 // src/drizzle-transaction-runner.adapter.ts
-import { Inject as Inject14, Injectable as Injectable15 } from "@nestjs/common";
-function _ts_decorate15(decorators, target, key, desc4) {
-  var c = arguments.length, r = c < 3 ? target : desc4 === null ? desc4 = Object.getOwnPropertyDescriptor(target, key) : desc4, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc4);
+import { Inject as Inject25, Injectable as Injectable26 } from "@nestjs/common";
+function _ts_decorate26(decorators, target, key, desc10) {
+  var c = arguments.length, r = c < 3 ? target : desc10 === null ? desc10 = Object.getOwnPropertyDescriptor(target, key) : desc10, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc10);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate15, "_ts_decorate");
-function _ts_metadata14(k, v) {
+__name(_ts_decorate26, "_ts_decorate");
+function _ts_metadata25(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata14, "_ts_metadata");
-function _ts_param14(paramIndex, decorator) {
+__name(_ts_metadata25, "_ts_metadata");
+function _ts_param25(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param14, "_ts_param");
+__name(_ts_param25, "_ts_param");
 var DrizzleTransactionRunner = class {
   static {
     __name(this, "DrizzleTransactionRunner");
@@ -1373,24 +3474,24 @@ var DrizzleTransactionRunner = class {
     return this.db.transaction((tx) => fn(tx));
   }
 };
-DrizzleTransactionRunner = _ts_decorate15([
-  Injectable15(),
-  _ts_param14(0, Inject14(DRIZZLE_DB_TOKEN)),
-  _ts_metadata14("design:type", Function),
-  _ts_metadata14("design:paramtypes", [
+DrizzleTransactionRunner = _ts_decorate26([
+  Injectable26(),
+  _ts_param25(0, Inject25(DRIZZLE_DB_TOKEN)),
+  _ts_metadata25("design:type", Function),
+  _ts_metadata25("design:paramtypes", [
     typeof DrizzleClient === "undefined" ? Object : DrizzleClient
   ])
 ], DrizzleTransactionRunner);
 
 // src/zero-promo-revenue-aggregator.adapter.ts
-import { Injectable as Injectable16 } from "@nestjs/common";
-function _ts_decorate16(decorators, target, key, desc4) {
-  var c = arguments.length, r = c < 3 ? target : desc4 === null ? desc4 = Object.getOwnPropertyDescriptor(target, key) : desc4, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc4);
+import { Injectable as Injectable27 } from "@nestjs/common";
+function _ts_decorate27(decorators, target, key, desc10) {
+  var c = arguments.length, r = c < 3 ? target : desc10 === null ? desc10 = Object.getOwnPropertyDescriptor(target, key) : desc10, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc10);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate16, "_ts_decorate");
+__name(_ts_decorate27, "_ts_decorate");
 var ZeroPromoRevenueDeductionAggregator = class {
   static {
     __name(this, "ZeroPromoRevenueDeductionAggregator");
@@ -1399,8 +3500,8 @@ var ZeroPromoRevenueDeductionAggregator = class {
     return "0.00";
   }
 };
-ZeroPromoRevenueDeductionAggregator = _ts_decorate16([
-  Injectable16()
+ZeroPromoRevenueDeductionAggregator = _ts_decorate27([
+  Injectable27()
 ], ZeroPromoRevenueDeductionAggregator);
 
 // src/drizzle-persistence.ts
@@ -1426,18 +3527,55 @@ function drizzlePersistence(options) {
       transactionRunner: provide((client) => new DrizzleTransactionRunner(client)),
       auditQuery: provide((client) => new DrizzleAuditQueryAdapter(client)),
       auditStats: provide((client) => new DrizzleAuditStatsAdapter(client)),
-      superAdminProvisioning: buildProvisioning(db, options.passwordHasher)
+      superAdminProvisioning: buildProvisioning(db, options.passwordHasher),
+      appliedSettings: provide((client) => new DrizzleAppliedSettingsRepository(client))
     },
     entitlement: {
       subscriptionRepository: provide((client) => new DrizzleSubscriptionRepository(client)),
-      planVersionRepository: provide((client) => new DrizzlePlanVersionRepository(client))
+      planVersionRepository: provide((client) => new DrizzlePlanVersionRepository(client)),
+      // Entitlement reads the bookings as well as the plan: a tenant's
+      // effective features are the union of the plan and the bundles
+      // booked on top of it, so an adapter that omits this grants less
+      // than the tenant paid for.
+      subscriptionBundleRepository: provide((client) => new DrizzleSubscriptionBundleRepository(client)),
+      // What the tenant actually agreed to, frozen at signing. Entitlement
+      // prefers it over the live catalogue where it exists, which is what
+      // makes a price change stop at the contracts already signed.
+      subscriptionContractRepository: provide((client) => new DrizzleSubscriptionContractRepository(client)),
+      // The party each of those contracts is concluded with.
+      subscriberRepository: provide((client) => new DrizzleSubscriberRepository(client)),
+      // The catalogue behind those bookings: entitlement resolves a
+      // booking's features by reading the pinned version.
+      bundleRepository: provide((client) => new DrizzleBundleRepository(client, options.bundle))
+    },
+    // The editable catalogue: which plans a project sells and in which
+    // versions. Present since 2026-08-27 — before that this adapter could
+    // read a plan version but not author one, so a Drizzle consumer had to
+    // bring their own `CatalogModule` wiring for a slice the adapter was
+    // otherwise complete for.
+    catalog: {
+      planRepository: provide((client) => new DrizzlePlanRepository(client, options.plan)),
+      bundleRepository: provide((client) => new DrizzleBundleRepository(client, options.bundle))
+    },
+    // The tenant's own billing page and the writes behind its buttons.
+    // Both members are required, and until 2026-08-27 neither existed —
+    // which left `DrizzleTenantSubscriptionWrite` unreachable through the
+    // documented `drizzlePersistence({ db })` path however complete it was.
+    tenantBilling: {
+      subscriptionUsagePort: provide((client) => new DrizzleSubscriptionUsageAdapter(client)),
+      subscriptionWritePort: provide((client) => new DrizzleTenantSubscriptionWrite(client))
     },
     promo: {
       promoCodeRepository: provide((client) => new DrizzlePromoCodeRepository(client)),
       redemptionRepository: provide((client) => new DrizzlePromoCodeRedemptionRepository(client)),
       validationLogRepository: provide((client) => new DrizzlePromoCodeValidationLogRepository(client)),
       subscriptionLookup: provide((client) => new DrizzlePromoSubscriptionLookup(client)),
-      revenueAggregator: new ZeroPromoRevenueDeductionAggregator()
+      revenueAggregator: new ZeroPromoRevenueDeductionAggregator(),
+      holdRepository: provide((client) => new DrizzlePromoCodeHoldRepository(client))
+    },
+    payments: {
+      paymentEventLog: provide((client) => new DrizzlePaymentEventLog(client)),
+      subscriberPaymentMethodRepository: provide((client) => new DrizzleSubscriberPaymentMethodRepository(client))
     },
     planCatalogReadSink: provide((client) => new DrizzlePlanCatalogReadSink(client)),
     planCatalogImportSink: provide((client) => new DrizzlePlanCatalogImportSink(client))
@@ -1483,19 +3621,30 @@ __name(buildProvisioning, "buildProvisioning");
 export {
   AsyncLocalRlsBypassAdapter,
   DRIZZLE_DB_TOKEN,
+  DrizzleAppliedSettingsRepository,
   DrizzleAuditAdapter,
   DrizzleAuditQueryAdapter,
   DrizzleAuditStatsAdapter,
+  DrizzleBundleRepository,
   DrizzleMfaAdapter,
+  DrizzlePaymentEventLog,
   DrizzlePlanCatalogImportSink,
   DrizzlePlanCatalogReadSink,
+  DrizzlePlanRepository,
   DrizzlePlanVersionRepository,
+  DrizzlePromoCodeHoldRepository,
   DrizzlePromoCodeRedemptionRepository,
   DrizzlePromoCodeRepository,
   DrizzlePromoCodeValidationLogRepository,
   DrizzlePromoSubscriptionLookup,
+  DrizzleSubscriberPaymentMethodRepository,
+  DrizzleSubscriberRepository,
+  DrizzleSubscriptionBundleRepository,
+  DrizzleSubscriptionContractRepository,
   DrizzleSubscriptionRepository,
+  DrizzleSubscriptionUsageAdapter,
   DrizzleSuperAdminBootstrapAdapter,
+  DrizzleTenantSubscriptionWrite,
   DrizzleTransactionRunner,
   PASSWORD_HASHER_TOKEN,
   ZeroPromoRevenueDeductionAggregator,