@saasicat/core 1.0.0-rc.20 → 1.0.0-rc.21

package/dist/index.d.cts

@@ -564,6 +564,15 @@ interface PaymentMethodSetupSession {
     redirectUrl: string;
     /** The customer the payment method is set up for, created if none was given. */
     customerRef: string;
+    /**
+     * The last moment a confirmation of this session can still arrive: the end
+     * of its form, after which nobody can complete it, plus the time the
+     * gateway goes on retrying a confirmation it could not deliver. `null` for
+     * a gateway that states neither. A sign-up's promo code slot is held until
+     * then, so a form paid shortly before its end still finds its slot when the
+     * confirmation arrives late, and an abandoned form gives it back.
+     */
+    confirmableUntil: Date | null;
     /**
      * A confirmation the gateway already holds when the session starts, to be
      * handled like any callback. Only a gateway without a form of its own has
@@ -915,6 +924,11 @@ interface PromoCode {
     validUntil: string | null;
     maxRedemptions: number | null;
     redemptionsCount: number;
+    /**
+     * Slots held for checkouts that started and have not concluded. A code has
+     * a free slot while `redemptionsCount + heldCount` is below `maxRedemptions`.
+     */
+    heldCount: number;
     appliesToPlans: PlanId[];
     appliesToBilling: BillingCycle | null;
     firstTimeCustomersOnly: boolean;
@@ -1729,8 +1743,35 @@ type PromotionResult = {
     original: number;
     months: number;
 };
-/** Applies the promotion math to a base price. */
+/**
+ * Applies the promotion math to a base price, or `null` where the promotion
+ * takes nothing off it.
+ *
+ * The discounted price stays between 0 and the base price, whatever the
+ * promotion states: a promotion lowers the price of what it is on and nothing
+ * else. Creating one refuses a value no price could make sense of, but whether
+ * an intro price or an amount fits depends on the price it meets — which
+ * differs per plan and rhythm and moves when a new version is published — so
+ * the bound is held here, where every place that resolves a promotion reads it:
+ * the public catalogue, a checkout offer, the operator's preview.
+ */
 declare function applyPromo(promo: PromotionRow | null, basePrice: number | null): PromotionResult | null;
+/** A promotion on a price, and what it makes of that price. */
+interface PromotionOnPrice {
+    promotion: PromotionRow;
+    result: PromotionResult;
+}
+/**
+ * The promotion a price carries: the one `pickActivePromo` selects for the key,
+ * language and rhythm, where `applyPromo` finds that it lowers the price at
+ * all — or `null`.
+ *
+ * One question, asked the same way by every place that shows or charges a
+ * promotion: the public catalogue, a checkout offer, and the operator's
+ * preview. A promotion that lowers nothing is no promotion there, so it carries
+ * no badge and takes nothing off.
+ */
+declare function promotionOnPrice(promotions: PromotionRow[], targetKey: string, locale: string, cycle: 'monthly' | 'yearly', basePrice: number | null, today?: Date, targetType?: PromotionTargetType): PromotionOnPrice | null;
 
 type CheckoutOfferLineItemKind = 'plan' | 'bundle' | 'discount';
 /** Frozen billable line item in the offer. */
@@ -2015,12 +2056,32 @@ interface PublicComparisonRow {
     /** Quotas only: display unit. */
     unit?: string;
 }
+/**
+ * What this installation takes a new payment method with, so a page offering the
+ * plans can say it before anybody reaches the form.
+ *
+ * It is the account `config/saas.yaml#payments.newPaymentMethods` names, with the
+ * gateway bound for it — the same account a sign-up's payment step and a tenant's
+ * own change both go to. Whether an installation runs sign-ups at all is not part
+ * of it: that is the application's own wiring, and the application knows it.
+ *
+ * Which account it is and who keeps the payment method stay inside: a prospect is
+ * told that a card or a direct debit will be asked for, not where it is kept.
+ */
+interface PublicNewPaymentMethods {
+    /** Whether a new payment method is taken here at all. */
+    taken: boolean;
+    /** The methods the form offers, in the order the installation names them; empty where none is taken. */
+    methods: PaymentMethodType[];
+}
 /** Response of `GET /public/marketing-catalog`. */
 interface PublicMarketingCatalogResponse {
     locale: string;
     currency: string;
     /** VAT rate in percent — for the CheckoutOffer price breakdown. */
     vatRate: number;
+    /** What a new payment method is taken with here, if one is taken. */
+    newPaymentMethods: PublicNewPaymentMethods;
     /** Visible, marketed plans — sorted by `priority` DESC. */
     plans: PublicMarketingPlan[];
     /**
@@ -2390,7 +2451,7 @@ declare const CATALOGUE_KEYS: ReadonlySet<keyof PlanCatalog>;
  */
 declare function planCatalogSettingsOf(catalog: PlanCatalog): PlanCatalogSettings;
 /** Everything in the catalogue that is configuration, as it was resolved. */
-declare function settingsSubtreeOf(catalog: PlanCatalog): AppliedSettingsValues;
+declare function settingsSubtreeOf(catalog: PlanCatalog | PlanCatalogSettings): AppliedSettingsValues;
 /**
  * `JSON.stringify` with object keys in sorted order at every depth, so that two
  * documents saying the same thing in a different order serialise identically.
@@ -2858,6 +2919,11 @@ interface PromoCodeRecord {
     validUntil: Date | null;
     maxRedemptions: number | null;
     redemptionsCount: number;
+    /**
+     * Slots held for checkouts that started and have not concluded
+     * (`PromoCodeHoldRepository`). An adapter without holds reports 0.
+     */
+    heldCount: number;
     appliesToPlans: string[];
     appliesToBilling: BillingCycle | null;
     firstTimeCustomersOnly: boolean;
@@ -2947,7 +3013,7 @@ interface PromoCodeRedemptionListItem extends PromoCodeRedemptionRecord {
 /**
  * Adapter for PromoCode persistence. Atomic slot reservation lives in the
  * adapter because it is DB-specific (Postgres `UPDATE ... WHERE ... AND
- * (maxRedemptions IS NULL OR redemptionsCount < maxRedemptions)`).
+ * (maxRedemptions IS NULL OR redemptionsCount + heldCount < maxRedemptions)`).
  */
 interface PromoCodeRepository {
     findById(id: string): Promise<PromoCodeRecord | null>;
@@ -2958,12 +3024,17 @@ interface PromoCodeRepository {
     softDelete(id: string): Promise<void>;
     /**
      * Atomic slot reservation: increments `redemptionsCount` and checks
-     * `status === 'ACTIVE' && (maxRedemptions IS NULL || redemptionsCount < maxRedemptions)`.
+     * `status === 'ACTIVE' && (maxRedemptions IS NULL || redemptionsCount + heldCount < maxRedemptions)`.
      * Returns true if the slot was reserved, false if EXHAUSTED
-     * or the status is not ACTIVE.
+     * or the status is not ACTIVE. A slot held for a checkout is not free, so
+     * an adapter that keeps holds counts `heldCount` here.
      */
     claimSlot(id: string, tx?: TransactionContext): Promise<boolean>;
-    /** Sets the status to `EXHAUSTED` when `redemptionsCount >= maxRedemptions`. */
+    /**
+     * Sets the status to `EXHAUSTED` when `redemptionsCount >= maxRedemptions`.
+     * Holds do not count: a code full only because of held slots stays ACTIVE,
+     * and gets its slots back when the holds end.
+     */
     markExhaustedIfFull(id: string, tx?: TransactionContext): Promise<void>;
     /** Decrements `redemptionsCount` by 1 (min 0); EXHAUSTED → ACTIVE. */
     releaseSlot(id: string, tx?: TransactionContext): Promise<void>;
@@ -2973,6 +3044,98 @@ interface PromoCodeRepository {
      */
     expireDueCodes(now: Date): Promise<number>;
 }
+/**
+ * A slot of a code kept for a checkout offer, from the start of its checkout
+ * until the checkout concludes, the offer's code changes, or `expiresAt`
+ * passes, whichever comes first. For a sign-up, `expiresAt` is the last moment
+ * a confirmation of its payment form can arrive
+ * (`PaymentMethodSetupSession.confirmableUntil`), not the checkout's lifetime.
+ */
+interface PromoCodeHoldRecord {
+    id: string;
+    promoCodeId: string;
+    checkoutOfferId: string;
+    expiresAt: Date;
+    createdAt: Date;
+}
+/** What `PromoCodeHoldRepository.take` did. */
+type PromoCodeHoldTaken = {
+    outcome: 'taken';
+    hold: PromoCodeHoldRecord;
+}
+/** The code is not ACTIVE, is deleted, or has no free slot. */
+ | {
+    outcome: 'no-slot';
+}
+/** The offer holds a slot already, perhaps taken by a concurrent call. */
+ | {
+    outcome: 'offer-holds-one';
+};
+/**
+ * Adapter for the slots a code keeps for checkouts. Every method that ends a
+ * hold deletes its row and gives its slot back in one statement, so a hold is
+ * counted in `PromoCodeRecord.heldCount` exactly as long as its row exists.
+ *
+ * Optional in the promo module: an adapter that has no holds leaves
+ * `heldCount` at 0, and taking a hold then refuses to start rather than
+ * quietly holding nothing.
+ */
+interface PromoCodeHoldRepository {
+    /** The offer's hold, live or past its expiry and not yet given back. */
+    findByCheckoutOffer(checkoutOfferId: string, tx?: TransactionContext): Promise<PromoCodeHoldRecord | null>;
+    /**
+     * Takes a slot of an ACTIVE, undeleted code for the offer, atomically with
+     * `claimSlot`'s rule: `maxRedemptions IS NULL OR redemptionsCount +
+     * heldCount < maxRedemptions`. An offer holds one slot at most. Runs on a
+     * transaction of its own: a checkout starts outside any other, and the
+     * slot is committed before the gateway's form opens.
+     */
+    take(hold: {
+        promoCodeId: string;
+        checkoutOfferId: string;
+        expiresAt: Date;
+    }): Promise<PromoCodeHoldTaken>;
+    /**
+     * Moves the expiry of the offer's hold on that code to `expiresAt`, and
+     * never earlier than it stands: the later of the two is written in the one
+     * statement, so a start of the same checkout that asks for less cannot
+     * shorten the slot a form opened by another start relies on, however the
+     * two interleave. False when the offer holds no slot of it any more — it
+     * ended in the meantime.
+     */
+    extend(checkoutOfferId: string, promoCodeId: string, expiresAt: Date): Promise<boolean>;
+    /** Ends the offer's hold and gives its slot back. False when it had none. */
+    release(checkoutOfferId: string, tx?: TransactionContext): Promise<boolean>;
+    /**
+     * Ends the offer's hold and gives its slot back only while it still expires
+     * at `expiresAt` — the hold as the caller wrote it. A hold another start
+     * moved since stays, and so does its slot, in the same statement. False when
+     * nothing was given back.
+     */
+    releaseIfUnmoved(checkoutOfferId: string, expiresAt: Date): Promise<boolean>;
+    /**
+     * Marks the offer's hold, if it is live at `now`, as the slot of the
+     * redemption that runs on `tx`. The mark never outlives the transaction: the
+     * redemption turns the hold into its slot (`convertHandedOver`), or the
+     * caller releases it before committing. False when the offer has no live
+     * hold.
+     */
+    handOver(checkoutOfferId: string, now: Date, tx: TransactionContext): Promise<boolean>;
+    /**
+     * Turns the hold of that code handed over on `tx` into a redemption's slot:
+     * the row goes, `heldCount` drops by one and `redemptionsCount` rises by one,
+     * whatever the code's status. False when nothing was handed over on `tx`.
+     */
+    convertHandedOver(promoCodeId: string, tx: TransactionContext): Promise<boolean>;
+    /**
+     * Ends every hold past its expiry at `now` — of one code when `promoCodeId`
+     * is given — and gives the slots back. A hold handed over on `tx` is left
+     * to the conclusion running there; one handed over on another running
+     * transaction is waited for, and is gone once that transaction ends.
+     * Returns how many ended.
+     */
+    expireDue(now: Date, promoCodeId?: string, tx?: TransactionContext): Promise<number>;
+}
 /** Adapter for PromoCodeRedemption persistence. */
 interface PromoCodeRedemptionRepository {
     findBySubscription(subscriptionId: string, tx?: TransactionContext): Promise<PromoCodeRedemptionRecord | null>;
@@ -3054,7 +3217,14 @@ interface ContractLineItemRecord {
     descriptionSnapshot: string | null;
     quantity: number;
     unit: string | null;
+    /**
+     * What the line costs over one of its billing periods, `quantity` already
+     * in it — not a unit price. A contract's totals take its lines as they
+     * stand, each counted as often as it falls due in one period of the
+     * contract, and are refused where they do not add up.
+     */
     priceNet: number;
+    /** `priceNet` with the line's share of the tax its rhythm owes. */
     priceGross: number;
     billingCycle: 'monthly' | 'yearly';
     /**
@@ -3832,6 +4002,14 @@ interface CancelSubscriptionResult {
     alreadyCanceled: boolean;
 }
 interface TenantSubscriptionWritePort {
+    /**
+     * Whether the writes that change a plan — the immediate change and the
+     * onboarding selection — bind the subscription's `planVersionId` to the
+     * version they sell. A contract freeze records the bound version, so it
+     * refuses to start beside a write that says `false`. Left out, it is taken
+     * on trust: the platform cannot see into a write it did not ship.
+     */
+    readonly bindsPlanVersion?: boolean;
     /** Immediate change: set plan + cycle, clear pending fields, optionally reset the period. */
     changePlanImmediate(tenantId: string, input: ImmediatePlanChangeInput): Promise<{
         plan: string;
@@ -4110,13 +4288,14 @@ interface AdminResourcesPort {
 }
 /**
  * Read adapter for the current AdminManifest. The consumer implementation
- * delegates to its `AdminManifestService.getManifest()`. The platform CLI
- * uses this for `<app> manifest dump|hash|check` etc.
+ * delegates to its `AdminManifestService.getManifest()`, which reads the plan
+ * catalogue on every call and therefore answers asynchronously. The platform
+ * CLI uses this for `<app> manifest dump|hash|check` etc.
  */
 interface ManifestAccessPort {
-    getManifest(): AdminManifest;
+    getManifest(): Promise<AdminManifest>;
     /** Optional: forces a rebuild from the contributions (e.g. after code reload). */
-    rebuild?(): AdminManifest;
+    rebuild?(): Promise<AdminManifest>;
 }
 /**
  * Adapter for the RLS bypass context. Platform code calls `runWithBypass`,
@@ -4606,6 +4785,26 @@ interface SubscriberPaymentMethodSetupMatch {
     sessionRef: string;
     subscriberId: string;
 }
+/**
+ * Which payment method a read by reference asks about.
+ *
+ * All three together, because `(gatewayAccount, paymentMethodRef)` is unique
+ * account-wide rather than per subscriber: without the subscriber the question
+ * has no answer that is this caller's.
+ *
+ * One argument rather than three strings in a row, for the reason
+ * `SubscriberPaymentMethodSetupMatch` is one — at a call site three strings of
+ * the same type can be swapped with nothing saying so — and for a second that
+ * is specific to a port. `TransactionContext` is `unknown`, so it accepts a
+ * string: against a positional signature, an implementation whose parameters
+ * are offset by one typechecks and then reads the account out of the
+ * subscriber's place. Against an object it does not.
+ */
+interface SubscriberPaymentMethodReference {
+    subscriberId: string;
+    gatewayAccount: string;
+    paymentMethodRef: string;
+}
 interface RecordSubscriberPaymentMethodResult {
     method: SubscriberPaymentMethodRecord;
     outcome: RecordSubscriberPaymentMethodOutcome;
@@ -4666,24 +4865,66 @@ interface PaymentEventLog {
  *
  * A subscriber has at most one `ACTIVE` payment method; the database holds
  * that, so two confirmations recorded at once for one subscriber end with one.
+ *
+ * **Within an account, a reference belongs to exactly one subscriber**, and
+ * keeps belonging to it once a newer payment method has replaced it. Every
+ * method that reaches a payment method therefore names the subscriber it is
+ * about, and an implementation answers about that one only. `accountsInUse` is
+ * the exception and says so at itself: it counts accounts rather than handing
+ * out a row.
+ *
+ * That matters on a gateway callback, which is where these are reached: it
+ * arrives without a session, so an installation that keeps its tenants apart
+ * with a policy lifts that policy for it, and what the question names is then
+ * all that bounds it.
  */
 interface SubscriberPaymentMethodRepository {
     /**
      * Records a confirmed payment method for its subscriber, under a lock on the
      * subscriber so two confirmations take turns. See
      * `RecordSubscriberPaymentMethodOutcome` for the three outcomes.
+     *
+     * A confirmation carrying a reference **another** subscriber holds is a
+     * fourth case and has no outcome: it is refused with
+     * `ForeignPaymentMethodReferenceError`, because the account's reference is
+     * that subscriber's and answering `already-recorded` would hand its payment
+     * method to a caller acting for somebody else.
+     *
+     * Two subscribers can reach that reference at the same time: the lock is on
+     * the subscriber, so confirmations for two of them do not take turns, and a
+     * read sees nothing of a row the other has not committed. Reading is
+     * therefore not enough to decide it. **Claim the reference with the first
+     * write, conflict-free** — `ON CONFLICT DO NOTHING` on its unique key, or
+     * whatever the store spells that as — and refuse when the claim takes no
+     * row. Both shipped adapters do exactly that, and it is what lets the
+     * refusal say the same thing everywhere: the key decides, not an error
+     * whose shape belongs to one driver.
+     *
+     * The order is part of the contract, not an implementation detail. Because
+     * the claim is the first write, a refusal leaves the caller's transaction
+     * as it found it — nothing to undo, and nothing that makes it unusable.
+     * An implementation that writes before it claims cannot promise that.
      */
     recordConfirmed(data: RecordSubscriberPaymentMethodData, tx?: TransactionContext): Promise<RecordSubscriberPaymentMethodResult>;
     /** The subscriber's payment method in use, or `null` when it has none. */
     findActive(subscriberId: string, tx?: TransactionContext): Promise<SubscriberPaymentMethodRecord | null>;
     /**
-     * The payment method an account's reference names, whatever its status.
+     * The payment method the reference names, whatever its status — and `null`
+     * when that subscriber holds none under it, which includes the case of
+     * another subscriber holding the reference.
      *
      * The one read that reaches a payment method a newer one replaced, which is
      * how `@saasicat/persistence-testing` verifies that an implementation keeps
      * the history rather than overwriting the row (`SC-PRIC-030`).
+     *
+     * The subscriber is what bounds the read. Without it an implementation
+     * would have only the account's reference to go on, which is unique
+     * account-wide: inside a tenant's context a policy would answer `null` and
+     * on a gateway callback, where that policy is lifted, the same call would
+     * answer with somebody else's row. One question, two answers by where it
+     * was asked, is what naming the subscriber removes.
      */
-    findByReference(gatewayAccount: string, paymentMethodRef: string, tx?: TransactionContext): Promise<SubscriberPaymentMethodRecord | null>;
+    findByReference(reference: SubscriberPaymentMethodReference, tx?: TransactionContext): Promise<SubscriberPaymentMethodRecord | null>;
     /**
      * Every account that holds a payment method in use, each once.
      *
@@ -4895,6 +5136,8 @@ interface SaaSiCatPersistencePromo {
     validationLogRepository: PersistenceProvider<PromoCodeValidationLogRepository>;
     subscriptionLookup: PersistenceProvider<PromoSubscriptionLookup>;
     revenueAggregator: PersistenceProvider<PromoRevenueDeductionAggregator>;
+    /** The slots a code keeps for checkouts; left out, no checkout holds one. */
+    holdRepository?: PersistenceProvider<PromoCodeHoldRepository>;
 }
 /**
  * Aggregate persistence bundle. Produced by adapter factories such as
@@ -5006,6 +5249,12 @@ declare const CATALOG_ERROR_CODES: {
     readonly FEATURE_NOT_FOUND: "FEATURE_NOT_FOUND";
     readonly QUOTA_NOT_FOUND: "QUOTA_NOT_FOUND";
     readonly PROMOTION_NOT_FOUND: "PROMOTION_NOT_FOUND";
+    /**
+     * A promotion's value is not one its type takes: a percentage above 0 and
+     * at most 100, an amount above 0, an intro price of at least 0 for a whole
+     * number of months, or a whole number of free months.
+     */
+    readonly PROMOTION_VALUE_INVALID: "PROMOTION_VALUE_INVALID";
     readonly MARKETING_PROJECTION_NOT_FOUND: "MARKETING_PROJECTION_NOT_FOUND";
     readonly PLAN_ALREADY_EXISTS: "PLAN_ALREADY_EXISTS";
     readonly BUNDLE_ALREADY_EXISTS: "BUNDLE_ALREADY_EXISTS";
@@ -5152,6 +5401,13 @@ declare const CONTRACT_ERROR_CODES: {
     readonly SUBSCRIPTION_CONTRACT_LINE_ITEM_TAX_MISMATCH: "SUBSCRIPTION_CONTRACT_LINE_ITEM_TAX_MISMATCH";
     readonly SUBSCRIPTION_CONTRACT_TAX_RATE_NOT_PERCENT: "SUBSCRIPTION_CONTRACT_TAX_RATE_NOT_PERCENT";
     readonly SUBSCRIPTION_CONTRACT_LINE_ITEM_CURRENCY_MISMATCH: "SUBSCRIPTION_CONTRACT_LINE_ITEM_CURRENCY_MISMATCH";
+    /**
+     * The lines do not add up to a total the contract states, counted as often
+     * as each falls due in one period. `field` names the total.
+     */
+    readonly SUBSCRIPTION_CONTRACT_LINES_DO_NOT_ADD_UP: "SUBSCRIPTION_CONTRACT_LINES_DO_NOT_ADD_UP";
+    /** Something that takes money off states a negative amount. */
+    readonly SUBSCRIPTION_CONTRACT_DISCOUNT_NEGATIVE: "SUBSCRIPTION_CONTRACT_DISCOUNT_NEGATIVE";
     readonly SUBSCRIPTION_CONTRACT_TERMINATION_BEFORE_START: "SUBSCRIPTION_CONTRACT_TERMINATION_BEFORE_START";
     readonly CHECKOUT_OFFER_NOT_FOUND: "CHECKOUT_OFFER_NOT_FOUND";
     readonly CHECKOUT_OFFER_EXPIRED: "CHECKOUT_OFFER_EXPIRED";
@@ -5359,6 +5615,13 @@ declare const PLATFORM_ERROR_CODES: {
     readonly SUBSCRIPTION_CONTRACT_LINE_ITEM_TAX_MISMATCH: "SUBSCRIPTION_CONTRACT_LINE_ITEM_TAX_MISMATCH";
     readonly SUBSCRIPTION_CONTRACT_TAX_RATE_NOT_PERCENT: "SUBSCRIPTION_CONTRACT_TAX_RATE_NOT_PERCENT";
     readonly SUBSCRIPTION_CONTRACT_LINE_ITEM_CURRENCY_MISMATCH: "SUBSCRIPTION_CONTRACT_LINE_ITEM_CURRENCY_MISMATCH";
+    /**
+     * The lines do not add up to a total the contract states, counted as often
+     * as each falls due in one period. `field` names the total.
+     */
+    readonly SUBSCRIPTION_CONTRACT_LINES_DO_NOT_ADD_UP: "SUBSCRIPTION_CONTRACT_LINES_DO_NOT_ADD_UP";
+    /** Something that takes money off states a negative amount. */
+    readonly SUBSCRIPTION_CONTRACT_DISCOUNT_NEGATIVE: "SUBSCRIPTION_CONTRACT_DISCOUNT_NEGATIVE";
     readonly SUBSCRIPTION_CONTRACT_TERMINATION_BEFORE_START: "SUBSCRIPTION_CONTRACT_TERMINATION_BEFORE_START";
     readonly CHECKOUT_OFFER_NOT_FOUND: "CHECKOUT_OFFER_NOT_FOUND";
     readonly CHECKOUT_OFFER_EXPIRED: "CHECKOUT_OFFER_EXPIRED";
@@ -5527,6 +5790,12 @@ declare const PLATFORM_ERROR_CODES: {
     readonly FEATURE_NOT_FOUND: "FEATURE_NOT_FOUND";
     readonly QUOTA_NOT_FOUND: "QUOTA_NOT_FOUND";
     readonly PROMOTION_NOT_FOUND: "PROMOTION_NOT_FOUND";
+    /**
+     * A promotion's value is not one its type takes: a percentage above 0 and
+     * at most 100, an amount above 0, an intro price of at least 0 for a whole
+     * number of months, or a whole number of free months.
+     */
+    readonly PROMOTION_VALUE_INVALID: "PROMOTION_VALUE_INVALID";
     readonly MARKETING_PROJECTION_NOT_FOUND: "MARKETING_PROJECTION_NOT_FOUND";
     readonly PLAN_ALREADY_EXISTS: "PLAN_ALREADY_EXISTS";
     readonly BUNDLE_ALREADY_EXISTS: "BUNDLE_ALREADY_EXISTS";
@@ -6310,6 +6579,16 @@ interface StartCheckoutInput {
     successUrl: string;
     /** Where the gateway's form sends the person who leaves it. */
     cancelUrl: string;
+    /**
+     * The checkout offer the sign-up concludes on activation. When it carries a
+     * promo code, a slot of that code is held for it from this step until a
+     * confirmation of the gateway's form can no longer arrive
+     * (`PaymentMethodSetupSession.confirmableUntil`), so the code cannot run
+     * out between this step and the payment confirmation; a code that cannot
+     * be held refuses the step before the gateway's form opens. Left out,
+     * nothing is held.
+     */
+    checkoutOfferId?: string | null;
 }
 interface StartCheckoutResult {
     pendingRegistrationId: string;
@@ -6589,6 +6868,44 @@ interface CanonicalSubscriberPaymentMethodRow {
 declare function toSubscriberPaymentMethodRecord(row: CanonicalSubscriberPaymentMethodRow): SubscriberPaymentMethodRecord;
 /** The columns a confirmed payment method is written with, and nothing a caller added beside them. */
 declare function subscriberPaymentMethodColumns(data: RecordSubscriberPaymentMethodData): Omit<CanonicalSubscriberPaymentMethodRow, 'id' | 'status' | 'replacedAt' | 'createdAt'>;
+/**
+ * A confirmation naming a reference that belongs to another subscriber.
+ *
+ * `(gatewayAccount, paymentMethodRef)` is unique account-wide rather than per
+ * subscriber, and that is what makes the reference one subscriber's for good:
+ * the second row cannot be written. This is the same boundary drawn for the
+ * caller, so that a confirmation is refused rather than answered as the
+ * duplicate of a payment method that is not this subscriber's — on a gateway
+ * callback, which arrives without a session and with the tenant policy lifted,
+ * so nothing else there bounds the question.
+ *
+ * That a provider issues a reference once per payer is a property of that
+ * provider and no promise of this platform's, which is why the condition is
+ * checked rather than assumed.
+ *
+ * It names neither the subscriber that holds the reference nor the tenant
+ * behind it: whoever reads the log of the refused confirmation is on the other
+ * side of the boundary this refusal draws. The account and the reference are
+ * carried as fields so that a caller can say which confirmation was refused
+ * without taking the sentence apart.
+ */
+declare class ForeignPaymentMethodReferenceError extends Error {
+    readonly gatewayAccount: string;
+    readonly paymentMethodRef: string;
+    readonly code = "FOREIGN_PAYMENT_METHOD_REFERENCE";
+    constructor(gatewayAccount: string, paymentMethodRef: string);
+}
+/** Realm-safe type guard, like `isPaymentCallbackRejectedError`. */
+declare function isForeignPaymentMethodReferenceError(error: unknown): error is ForeignPaymentMethodReferenceError;
+/**
+ * Refuses a reference of `gatewayAccount` that another subscriber already
+ * holds, where the row could be read.
+ *
+ * A write cannot rely on this alone: a read does not see a row a concurrent
+ * transaction has not committed. What the reference's unique key refuses is
+ * refused with the same error — see `SubscriberPaymentMethodRepository`.
+ */
+declare function refuseForeignPaymentMethodReference(recorded: Pick<CanonicalSubscriberPaymentMethodRow, 'subscriberId' | 'gatewayAccount' | 'paymentMethodRef'>, subscriberId: string): void;
 
 /** A `subscription_contracts` row as either adapter reads it back. */
 interface CanonicalContractRow {
@@ -6733,4 +7050,4 @@ declare function resolveErrorMessage(body: ResolvableErrorBody, overrides?: Part
 
 declare const ERROR_MESSAGES_DE: Record<PlatformErrorCode, string>;
 
-export { ACTIVE_SUBSCRIPTION_CONTRACT_STATUSES, AUTH_ERROR_CODES, type ActionKey, type ActivationOrchestrator, type ActivePlanVersionWhere, type ActivePlanVersionWhereWithEndsAt, type ActiveVersionWhere, type ActiveVersionWhereWithEndsAt, type ActorTag, type AdminActor, type AdminAuditListFilter, type AdminManifest, type AdminResourcesPort, type AdminSubscriptionListRow, type AdminTenantDetail, type AdminTenantListFilter, type AdminTenantListRow, type AdminTenantStateResult, type AdminUserListFilter, type AdminUserListRow, type AppliedSettingsPort, type AppliedSettingsRecord, type AppliedSettingsValues, type ApplyOnboardingSelectionInput, type ApplyOnboardingSelectionResult, type ApprovedCatalogKeys, type AuditActionDef, type AuditEntry, type AuditPort, type AuditQuery, type AuditQueryPort, type AuditStatsPort, type AuditStatsSnapshot, type AuthErrorCode, BILLING_ERROR_CODES, BUNDLE_PRICE_LOOKUP_LIMIT, type BillingCycle, type BillingErrorCode, type BundleAvailabilityState, type BundleCompatibility, type BundleFeatureShape, type BundleListFilter, type BundlePricingOverride, type BundleRepository, type BundleRow, type BundleVersionFields, type BundleVersionMutationResult, type BundleVersionRow, CATALOGUE_KEYS, CATALOG_ERROR_CODES, CONTRACT_ERROR_CODES, type CancelSubscriptionBundleData, type CancelSubscriptionInput, type CancelSubscriptionResult, type CancellationNoticePeriods, type CanonicalContractLineItemRow, type CanonicalContractRow, type CanonicalPlanRow, type CanonicalPlanVersionRow, type CanonicalRunningContractRow, type CanonicalSubscriberCorrectionRow, type CanonicalSubscriberPaymentMethodRow, type CanonicalSubscriberRow, type CapabilityCatalogEntryRow, type CapabilityCodeStatus, type CapabilityKey, type CapabilityKind, type CatalogEntryFilter, type CatalogEntryI18n, type CatalogEntryI18nFields, type CatalogEntryRepository, type CatalogErrorCode, type ChangeDirection, type CheckoutOfferFilter, type CheckoutOfferLineItem, type CheckoutOfferLineItemKind, type CheckoutOfferPriceBreakdown, type CheckoutOfferPromoCodeSnapshot, type CheckoutOfferPromotionSnapshot, type CheckoutOfferRepository, type CheckoutOfferRow, type CheckoutOfferSelection, type CheckoutOfferSelectionUpdate, type CheckoutOfferStatus, type CleanupResult, type CliUserRow, type ComponentKey, type ConfiguratorCatalog, type ConfiguratorMarketingProvider, type ConfiguratorModel, type ConfiguratorPlanMarketing, type ConfiguratorPlanVersionRow, type ConfiguratorPriceBreakdown, type ConfiguratorSourcesLookup, type ConfirmedPaymentMethod, type ContractErrorCode, type ContractIssuerParty, type ContractLineItemKind, type ContractLineItemRecord, type ContractSubscriberParty, type CreateBundleData, type CreateBundleVersionDraftData, type CreateCheckoutOfferData, type CreateMarketingProjectionData, type CreatePlanData, type CreatePlanVersionDraftData, type CreatePromoCodeData, type CreatePromoCodeRequest, type CreatePromotionData, type CreateSubscriberData, type CreateSubscriptionBundleData, type CreateSubscriptionContractData, type CreateSuperAdminCliInput, type CreateTenantInput, type DiffResult, type DiscoveredCapability, type DiscoveredFeature, type DiscoveredQuota, type DiscoveredQuotaPolicy, type DiscoveryCodeStatus, type DiscoverySnapshot, type DiscoveryStatus, ERROR_MESSAGES_DE, ERROR_MESSAGES_EN, type EffectiveLimitsSnapshot, type EmailPort, type ErrorMessageParams, FEATURE_NOT_LICENSED, type FeatureCatalogEntryRow, type FeatureDef, type FeatureKey, type FeatureNotLicensedBody, type FeatureRequiresIndex, type FeatureTier, type FeatureUiMeta, type FeatureUiRegistry, type FinalActivationResult, type FirstTimeCustomerCheck, type ImmediatePlanChangeInput, type InvoiceLineItemSnapshot, type IssuerCorrectionFault, type IssuerIdentityChange, type KpiCardDef, type KpiDisplayHint, LEGAL_IDENTITY_FIELDS, type LegalIdentity, type LegalIdentityField, MARKETING_PRIORITY_MAX, MARKETING_PRIORITY_MIN, type ManifestAccessPort, type ManifestContribution, type MarketingProjectionFilter, type MarketingProjectionRepository, type MarketingProjectionRow, type MarketingSettingsRepository, type MarketingSettingsRow, type MarketingTargetType, type MarketingTopFeature, type MaskedPaymentMethod, type MfaPort, type NewContractLineItemData, type NewSettingsChange, type NewSubscriberDetails, type NewSubscriptionContractData, OTP_RATE_LIMIT_MAX_SENDS, OTP_RATE_LIMIT_WINDOW_MINUTES, OTP_TTL_MINUTES, OTP_VERIFY_MAX_ATTEMPTS, type OnboardingPromoRedemption, type OnboardingSelectionRequest, type OnboardingSelectionResponse, PASSWORD_RESET_TTL_MINUTES, PAYMENT_ERROR_CODES, PAYMENT_METHOD_TYPES, PENDING_CHECKOUT_TTL_DAYS, PENDING_EMAIL_TTL_HOURS, PENDING_ONBOARDING_TTL_DAYS, PLATFORM_ERROR_CODES, PROMO_ERROR_CODES, type Paginated, type PartyAddress, type PasswordHasher, type PasswordResetCliResult, PaymentCallbackRejectedError, type PaymentErrorCode, type PaymentEventClaim, type PaymentEventLog, type PaymentGateway, type PaymentGatewayCallback, type PaymentGatewayEvent, type PaymentMethodHolder, type PaymentMethodSetupSession, type PaymentMethodSetupSubject, type PaymentMethodType, type PendingRegistration, type PendingRegistrationCreateInput, type PendingRegistrationRepository, type PendingRegistrationSnapshot, type PendingRegistrationUpdateInput, type PersistenceCapabilities, PersistenceCapabilityError, type PersistenceClassRef, type PersistenceInjectionToken, type PersistenceProvider, type PlanCatalog, type PlanCatalogApp, type PlanCatalogImportReport, type PlanCatalogImportSink, type PlanCatalogIssuer, type PlanCatalogIssuerCorrection, type PlanCatalogLookup, type PlanCatalogMarketing, type PlanCatalogNotifications, type PlanCatalogPaymentAccount, type PlanCatalogPayments, type PlanCatalogReadSink, type PlanCatalogReadSnapshot, type PlanCatalogSettings, type PlanCatalogSubscribers, type PlanCatalogTenantBilling, type PlanDef, type PlanId, type PlanListFilter, type PlanRepository, type PlanRow, type PlanVersion, type PlanVersionFields, type PlanVersionMappingFields, type PlanVersionMutationResult, type PlanVersionRecord, type PlanVersionRepository, type PlanVersionRow, type PlatformErrorBody, type PlatformErrorCode, type PlatformRole, type PlatformUserDto, PlatformUserExistsError, type ProjectPageDef, type PromoCode, type PromoCodeDurationType, type PromoCodeFilter, type PromoCodeRecord, type PromoCodeRedemption, type PromoCodeRedemptionListItem, type PromoCodeRedemptionRecord, type PromoCodeRedemptionRepository, type PromoCodeRedemptionStatus, type PromoCodeRepository, type PromoCodeStatsPort, type PromoCodeStatsSnapshot, type PromoCodeStatus, type PromoCodeValidationLog, type PromoCodeValidationLogRepository, type PromoCodeValidationResult, type PromoCodeValueType, type PromoErrorCode, type PromoPreviewInvalidReason, type PromoPreviewRequest, type PromoPreviewResponse, type PromoPreviewValidResponse, type PromoRevenueDeductionAggregator, type PromoSubscriptionLookup, type PromotionBillingCycle, type PromotionI18n, type PromotionI18nFields, type PromotionRepository, type PromotionResult, type PromotionRow, type PromotionStatus, type PromotionTargetType, type PromotionType, type PromotionValue, type PublicBootResponse, type PublicComparisonRow, type PublicMarketingBundle, type PublicMarketingCatalogResponse, type PublicMarketingPlan, type PublicMarketingPromo, type PublicSignupPlan, type PublishBundleVersionData, type PublishBundleVersionMeta, type PublishPlanVersionData, type QuotaCatalogEntryRow, type QuotaEnforcementMode, type QuotaKey, type QuotaProvider, REGISTRATION_ERROR_CODES, REGISTRATION_RESUME_TTL_MINUTES, REGISTRATION_STEP_BY_STATUS, type ReassignTenantAdminCliResult, type RecommendablePlan, type RecordSubscriberPaymentMethodData, type RecordSubscriberPaymentMethodOutcome, type RecordSubscriberPaymentMethodResult, type RedeemPromoInTransactionCallback, type RegistrationActivation, type RegistrationAuditContext, type RegistrationAuditEvent, type RegistrationAuditEventType, type RegistrationAuditLogger, type RegistrationBillingDetails, type RegistrationConfigSelection, type RegistrationConfiguratorLookup, type RegistrationErrorCode, type RegistrationOtpDelivery, type RegistrationPromoPreview, type RegistrationResumeDelivery, type RegistrationResumeTokenSigner, type RegistrationStatus, type RegistrationStep, type RequiredCapabilities, type ResolvableErrorBody, type ResumeRegistrationInput, type ResumeRegistrationResult, type ReviewCatalogEntryData, type RlsBypassPort, type RunningContractIssuer, type RunningContractIssuers, SETTINGS_ERROR_CODES, SETUP_ERROR_CODES, SUBSCRIBER_ERROR_CODES, type SaaSiCatPersistenceAdapter, type SaaSiCatPersistenceAdminResources, type SaaSiCatPersistenceCatalog, type SaaSiCatPersistenceCore, type SaaSiCatPersistenceEntitlement, type SaaSiCatPersistencePayments, type SaaSiCatPersistencePromo, type SaaSiCatPersistenceTenantBilling, type SaveRegistrationConfigInput, type SaveRegistrationConfigResult, type ScheduledPlanChangeInput, type SelectPlanInput, type SelectPlanResult, type SelectableBundleShape, type SelfServiceBlockedPlans, type SetCatalogEntryReviewData, type SettingsChangeFilter, type SettingsChangeRecord, type SettingsDifference, type SettingsErrorCode, type SetupConfirmMfaRequest, type SetupConfirmMfaResponse, type SetupErrorCode, type SetupRequest, type SetupResult, type SetupStatusResponse, type SlugAvailabilityCheck, type StandardPageDef, type StandardPageKey, type StartCheckoutInput, type StartCheckoutResult, type StartPaymentMethodSetupInput, type StartRegistrationInput, type StartRegistrationResult, type StoredBundleStem, type StrictModeWarning, type StrictModeWarningCode, type SubscriberContact, type SubscriberContactChange, type SubscriberCorrectionData, type SubscriberCorrectionRecord, type SubscriberCorrectionResult, type SubscriberDetails, type SubscriberErrorCode, type SubscriberIdentityCorrection, type SubscriberIdentityDelta, type SubscriberIdentityValues, type SubscriberPaymentMethodRecord, type SubscriberPaymentMethodRepository, type SubscriberPaymentMethodSetupData, type SubscriberPaymentMethodSetupMatch, type SubscriberPaymentMethodStatus, type SubscriberRecord, type SubscriberRepository, type Subscription, type SubscriptionBundleRecord, type SubscriptionBundleRepository, type SubscriptionBundleView, type SubscriptionContractFilter, type SubscriptionContractInvoiceSnapshot, type SubscriptionContractParties, type SubscriptionContractPriceSnapshot, type SubscriptionContractRecord, type SubscriptionContractRepository, type SubscriptionContractStatus, type SubscriptionRecord, type SubscriptionRepository, type SubscriptionStatsPort, type SubscriptionStatsSnapshot, type SubscriptionStatus, type SubscriptionUsagePort, type SubscriptionUsageRecord, type SuperAdminProvisioningPort, type SyncDiscoveryResult, type TenantActionDef, type TenantColumnDef, type TenantDto, type TenantListFilter, type TenantPort, type TenantSubscriptionWritePort, type TerminateSubscriptionContractData, type TopPromoCode, type TransactionContext, type TransactionRunner, type UpdateBundleData, type UpdateBundleVersionDraftData, type UpdateCatalogEntryBaseData, type UpdateCatalogEntryI18nData, type UpdateCheckoutOfferData, type UpdateMarketingProjectionData, type UpdateMarketingSettingsData, type UpdatePlanData, type UpdatePlanVersionDraftData, type UpdatePromoCodeData, type UpdatePromoCodeRequest, type UpdatePromotionData, type UpsellOffer, type UpsellOfferResolver, type UpsertCapabilityEntryData, type UpsertFeatureCatalogEntryInput, type UpsertFeatureEntryData, type UpsertPlanInput, type UpsertPlanVersionInput, type UpsertQuotaEntryData, type UpsertResult, type UsageSnapshotPort, type UserAccountLookup, type UserListFilter, type UserManagementPort, type UserPort, type VerifyRegistrationOtpResult, type VersionChange, type VersionChangeDirection, type VersionEditability, type VersionEditableReason, type VersionedEntityBase, applyPromo, assertPersistenceCapabilities, buildActivePlanVersionWhere, buildActiveVersionWhere, buildFeatureRequiresIndex, bundleDraftDefaults, bundleStemDefaults, canonicalJson, classifyBundleVersionDiff, classifyIssuerChange, classifyPlanDiff, collectUnsatisfiedRequires, contractPartiesOf, coverageExcludingSelf, definedFields, diffSettings, formatCustomerNumber, formatErrorMessage, identityCorrectionDelta, isBundleRedundant, isPaymentCallbackRejectedError, isPlatformUserExistsError, isVersionEditable, issuerIdentityOf, keepOneRecommended, missingRequiresFor, movedIdentityFields, pickActivePromo, planCatalogSettingsOf, previousUtcDay, promoStatus, readQuotaRecord, readQuotaValue, recordedIssuerIdentity, resolveBundleAvailability, resolveErrorMessage, sameLegalIdentity, selectChargeableBundles, settingsSubtreeOf, startOfUtcDay, subscriberFromRegistration, subscriberPaymentMethodColumns, toBundleStemRow, toContractLineItemRecord, toPlanRow, toPlanVersionRow, toRunningContractIssuer, toSubscriberCorrectionRecord, toSubscriberPaymentMethodRecord, toSubscriberRecord, toSubscriptionContractRecord };
+export { ACTIVE_SUBSCRIPTION_CONTRACT_STATUSES, AUTH_ERROR_CODES, type ActionKey, type ActivationOrchestrator, type ActivePlanVersionWhere, type ActivePlanVersionWhereWithEndsAt, type ActiveVersionWhere, type ActiveVersionWhereWithEndsAt, type ActorTag, type AdminActor, type AdminAuditListFilter, type AdminManifest, type AdminResourcesPort, type AdminSubscriptionListRow, type AdminTenantDetail, type AdminTenantListFilter, type AdminTenantListRow, type AdminTenantStateResult, type AdminUserListFilter, type AdminUserListRow, type AppliedSettingsPort, type AppliedSettingsRecord, type AppliedSettingsValues, type ApplyOnboardingSelectionInput, type ApplyOnboardingSelectionResult, type ApprovedCatalogKeys, type AuditActionDef, type AuditEntry, type AuditPort, type AuditQuery, type AuditQueryPort, type AuditStatsPort, type AuditStatsSnapshot, type AuthErrorCode, BILLING_ERROR_CODES, BUNDLE_PRICE_LOOKUP_LIMIT, type BillingCycle, type BillingErrorCode, type BundleAvailabilityState, type BundleCompatibility, type BundleFeatureShape, type BundleListFilter, type BundlePricingOverride, type BundleRepository, type BundleRow, type BundleVersionFields, type BundleVersionMutationResult, type BundleVersionRow, CATALOGUE_KEYS, CATALOG_ERROR_CODES, CONTRACT_ERROR_CODES, type CancelSubscriptionBundleData, type CancelSubscriptionInput, type CancelSubscriptionResult, type CancellationNoticePeriods, type CanonicalContractLineItemRow, type CanonicalContractRow, type CanonicalPlanRow, type CanonicalPlanVersionRow, type CanonicalRunningContractRow, type CanonicalSubscriberCorrectionRow, type CanonicalSubscriberPaymentMethodRow, type CanonicalSubscriberRow, type CapabilityCatalogEntryRow, type CapabilityCodeStatus, type CapabilityKey, type CapabilityKind, type CatalogEntryFilter, type CatalogEntryI18n, type CatalogEntryI18nFields, type CatalogEntryRepository, type CatalogErrorCode, type ChangeDirection, type CheckoutOfferFilter, type CheckoutOfferLineItem, type CheckoutOfferLineItemKind, type CheckoutOfferPriceBreakdown, type CheckoutOfferPromoCodeSnapshot, type CheckoutOfferPromotionSnapshot, type CheckoutOfferRepository, type CheckoutOfferRow, type CheckoutOfferSelection, type CheckoutOfferSelectionUpdate, type CheckoutOfferStatus, type CleanupResult, type CliUserRow, type ComponentKey, type ConfiguratorCatalog, type ConfiguratorMarketingProvider, type ConfiguratorModel, type ConfiguratorPlanMarketing, type ConfiguratorPlanVersionRow, type ConfiguratorPriceBreakdown, type ConfiguratorSourcesLookup, type ConfirmedPaymentMethod, type ContractErrorCode, type ContractIssuerParty, type ContractLineItemKind, type ContractLineItemRecord, type ContractSubscriberParty, type CreateBundleData, type CreateBundleVersionDraftData, type CreateCheckoutOfferData, type CreateMarketingProjectionData, type CreatePlanData, type CreatePlanVersionDraftData, type CreatePromoCodeData, type CreatePromoCodeRequest, type CreatePromotionData, type CreateSubscriberData, type CreateSubscriptionBundleData, type CreateSubscriptionContractData, type CreateSuperAdminCliInput, type CreateTenantInput, type DiffResult, type DiscoveredCapability, type DiscoveredFeature, type DiscoveredQuota, type DiscoveredQuotaPolicy, type DiscoveryCodeStatus, type DiscoverySnapshot, type DiscoveryStatus, ERROR_MESSAGES_DE, ERROR_MESSAGES_EN, type EffectiveLimitsSnapshot, type EmailPort, type ErrorMessageParams, FEATURE_NOT_LICENSED, type FeatureCatalogEntryRow, type FeatureDef, type FeatureKey, type FeatureNotLicensedBody, type FeatureRequiresIndex, type FeatureTier, type FeatureUiMeta, type FeatureUiRegistry, type FinalActivationResult, type FirstTimeCustomerCheck, ForeignPaymentMethodReferenceError, type ImmediatePlanChangeInput, type InvoiceLineItemSnapshot, type IssuerCorrectionFault, type IssuerIdentityChange, type KpiCardDef, type KpiDisplayHint, LEGAL_IDENTITY_FIELDS, type LegalIdentity, type LegalIdentityField, MARKETING_PRIORITY_MAX, MARKETING_PRIORITY_MIN, type ManifestAccessPort, type ManifestContribution, type MarketingProjectionFilter, type MarketingProjectionRepository, type MarketingProjectionRow, type MarketingSettingsRepository, type MarketingSettingsRow, type MarketingTargetType, type MarketingTopFeature, type MaskedPaymentMethod, type MfaPort, type NewContractLineItemData, type NewSettingsChange, type NewSubscriberDetails, type NewSubscriptionContractData, OTP_RATE_LIMIT_MAX_SENDS, OTP_RATE_LIMIT_WINDOW_MINUTES, OTP_TTL_MINUTES, OTP_VERIFY_MAX_ATTEMPTS, type OnboardingPromoRedemption, type OnboardingSelectionRequest, type OnboardingSelectionResponse, PASSWORD_RESET_TTL_MINUTES, PAYMENT_ERROR_CODES, PAYMENT_METHOD_TYPES, PENDING_CHECKOUT_TTL_DAYS, PENDING_EMAIL_TTL_HOURS, PENDING_ONBOARDING_TTL_DAYS, PLATFORM_ERROR_CODES, PROMO_ERROR_CODES, type Paginated, type PartyAddress, type PasswordHasher, type PasswordResetCliResult, PaymentCallbackRejectedError, type PaymentErrorCode, type PaymentEventClaim, type PaymentEventLog, type PaymentGateway, type PaymentGatewayCallback, type PaymentGatewayEvent, type PaymentMethodHolder, type PaymentMethodSetupSession, type PaymentMethodSetupSubject, type PaymentMethodType, type PendingRegistration, type PendingRegistrationCreateInput, type PendingRegistrationRepository, type PendingRegistrationSnapshot, type PendingRegistrationUpdateInput, type PersistenceCapabilities, PersistenceCapabilityError, type PersistenceClassRef, type PersistenceInjectionToken, type PersistenceProvider, type PlanCatalog, type PlanCatalogApp, type PlanCatalogImportReport, type PlanCatalogImportSink, type PlanCatalogIssuer, type PlanCatalogIssuerCorrection, type PlanCatalogLookup, type PlanCatalogMarketing, type PlanCatalogNotifications, type PlanCatalogPaymentAccount, type PlanCatalogPayments, type PlanCatalogReadSink, type PlanCatalogReadSnapshot, type PlanCatalogSettings, type PlanCatalogSubscribers, type PlanCatalogTenantBilling, type PlanDef, type PlanId, type PlanListFilter, type PlanRepository, type PlanRow, type PlanVersion, type PlanVersionFields, type PlanVersionMappingFields, type PlanVersionMutationResult, type PlanVersionRecord, type PlanVersionRepository, type PlanVersionRow, type PlatformErrorBody, type PlatformErrorCode, type PlatformRole, type PlatformUserDto, PlatformUserExistsError, type ProjectPageDef, type PromoCode, type PromoCodeDurationType, type PromoCodeFilter, type PromoCodeHoldRecord, type PromoCodeHoldRepository, type PromoCodeHoldTaken, type PromoCodeRecord, type PromoCodeRedemption, type PromoCodeRedemptionListItem, type PromoCodeRedemptionRecord, type PromoCodeRedemptionRepository, type PromoCodeRedemptionStatus, type PromoCodeRepository, type PromoCodeStatsPort, type PromoCodeStatsSnapshot, type PromoCodeStatus, type PromoCodeValidationLog, type PromoCodeValidationLogRepository, type PromoCodeValidationResult, type PromoCodeValueType, type PromoErrorCode, type PromoPreviewInvalidReason, type PromoPreviewRequest, type PromoPreviewResponse, type PromoPreviewValidResponse, type PromoRevenueDeductionAggregator, type PromoSubscriptionLookup, type PromotionBillingCycle, type PromotionI18n, type PromotionI18nFields, type PromotionOnPrice, type PromotionRepository, type PromotionResult, type PromotionRow, type PromotionStatus, type PromotionTargetType, type PromotionType, type PromotionValue, type PublicBootResponse, type PublicComparisonRow, type PublicMarketingBundle, type PublicMarketingCatalogResponse, type PublicMarketingPlan, type PublicMarketingPromo, type PublicNewPaymentMethods, type PublicSignupPlan, type PublishBundleVersionData, type PublishBundleVersionMeta, type PublishPlanVersionData, type QuotaCatalogEntryRow, type QuotaEnforcementMode, type QuotaKey, type QuotaProvider, REGISTRATION_ERROR_CODES, REGISTRATION_RESUME_TTL_MINUTES, REGISTRATION_STEP_BY_STATUS, type ReassignTenantAdminCliResult, type RecommendablePlan, type RecordSubscriberPaymentMethodData, type RecordSubscriberPaymentMethodOutcome, type RecordSubscriberPaymentMethodResult, type RedeemPromoInTransactionCallback, type RegistrationActivation, type RegistrationAuditContext, type RegistrationAuditEvent, type RegistrationAuditEventType, type RegistrationAuditLogger, type RegistrationBillingDetails, type RegistrationConfigSelection, type RegistrationConfiguratorLookup, type RegistrationErrorCode, type RegistrationOtpDelivery, type RegistrationPromoPreview, type RegistrationResumeDelivery, type RegistrationResumeTokenSigner, type RegistrationStatus, type RegistrationStep, type RequiredCapabilities, type ResolvableErrorBody, type ResumeRegistrationInput, type ResumeRegistrationResult, type ReviewCatalogEntryData, type RlsBypassPort, type RunningContractIssuer, type RunningContractIssuers, SETTINGS_ERROR_CODES, SETUP_ERROR_CODES, SUBSCRIBER_ERROR_CODES, type SaaSiCatPersistenceAdapter, type SaaSiCatPersistenceAdminResources, type SaaSiCatPersistenceCatalog, type SaaSiCatPersistenceCore, type SaaSiCatPersistenceEntitlement, type SaaSiCatPersistencePayments, type SaaSiCatPersistencePromo, type SaaSiCatPersistenceTenantBilling, type SaveRegistrationConfigInput, type SaveRegistrationConfigResult, type ScheduledPlanChangeInput, type SelectPlanInput, type SelectPlanResult, type SelectableBundleShape, type SelfServiceBlockedPlans, type SetCatalogEntryReviewData, type SettingsChangeFilter, type SettingsChangeRecord, type SettingsDifference, type SettingsErrorCode, type SetupConfirmMfaRequest, type SetupConfirmMfaResponse, type SetupErrorCode, type SetupRequest, type SetupResult, type SetupStatusResponse, type SlugAvailabilityCheck, type StandardPageDef, type StandardPageKey, type StartCheckoutInput, type StartCheckoutResult, type StartPaymentMethodSetupInput, type StartRegistrationInput, type StartRegistrationResult, type StoredBundleStem, type StrictModeWarning, type StrictModeWarningCode, type SubscriberContact, type SubscriberContactChange, type SubscriberCorrectionData, type SubscriberCorrectionRecord, type SubscriberCorrectionResult, type SubscriberDetails, type SubscriberErrorCode, type SubscriberIdentityCorrection, type SubscriberIdentityDelta, type SubscriberIdentityValues, type SubscriberPaymentMethodRecord, type SubscriberPaymentMethodReference, type SubscriberPaymentMethodRepository, type SubscriberPaymentMethodSetupData, type SubscriberPaymentMethodSetupMatch, type SubscriberPaymentMethodStatus, type SubscriberRecord, type SubscriberRepository, type Subscription, type SubscriptionBundleRecord, type SubscriptionBundleRepository, type SubscriptionBundleView, type SubscriptionContractFilter, type SubscriptionContractInvoiceSnapshot, type SubscriptionContractParties, type SubscriptionContractPriceSnapshot, type SubscriptionContractRecord, type SubscriptionContractRepository, type SubscriptionContractStatus, type SubscriptionRecord, type SubscriptionRepository, type SubscriptionStatsPort, type SubscriptionStatsSnapshot, type SubscriptionStatus, type SubscriptionUsagePort, type SubscriptionUsageRecord, type SuperAdminProvisioningPort, type SyncDiscoveryResult, type TenantActionDef, type TenantColumnDef, type TenantDto, type TenantListFilter, type TenantPort, type TenantSubscriptionWritePort, type TerminateSubscriptionContractData, type TopPromoCode, type TransactionContext, type TransactionRunner, type UpdateBundleData, type UpdateBundleVersionDraftData, type UpdateCatalogEntryBaseData, type UpdateCatalogEntryI18nData, type UpdateCheckoutOfferData, type UpdateMarketingProjectionData, type UpdateMarketingSettingsData, type UpdatePlanData, type UpdatePlanVersionDraftData, type UpdatePromoCodeData, type UpdatePromoCodeRequest, type UpdatePromotionData, type UpsellOffer, type UpsellOfferResolver, type UpsertCapabilityEntryData, type UpsertFeatureCatalogEntryInput, type UpsertFeatureEntryData, type UpsertPlanInput, type UpsertPlanVersionInput, type UpsertQuotaEntryData, type UpsertResult, type UsageSnapshotPort, type UserAccountLookup, type UserListFilter, type UserManagementPort, type UserPort, type VerifyRegistrationOtpResult, type VersionChange, type VersionChangeDirection, type VersionEditability, type VersionEditableReason, type VersionedEntityBase, applyPromo, assertPersistenceCapabilities, buildActivePlanVersionWhere, buildActiveVersionWhere, buildFeatureRequiresIndex, bundleDraftDefaults, bundleStemDefaults, canonicalJson, classifyBundleVersionDiff, classifyIssuerChange, classifyPlanDiff, collectUnsatisfiedRequires, contractPartiesOf, coverageExcludingSelf, definedFields, diffSettings, formatCustomerNumber, formatErrorMessage, identityCorrectionDelta, isBundleRedundant, isForeignPaymentMethodReferenceError, isPaymentCallbackRejectedError, isPlatformUserExistsError, isVersionEditable, issuerIdentityOf, keepOneRecommended, missingRequiresFor, movedIdentityFields, pickActivePromo, planCatalogSettingsOf, previousUtcDay, promoStatus, promotionOnPrice, readQuotaRecord, readQuotaValue, recordedIssuerIdentity, refuseForeignPaymentMethodReference, resolveBundleAvailability, resolveErrorMessage, sameLegalIdentity, selectChargeableBundles, settingsSubtreeOf, startOfUtcDay, subscriberFromRegistration, subscriberPaymentMethodColumns, toBundleStemRow, toContractLineItemRecord, toPlanRow, toPlanVersionRow, toRunningContractIssuer, toSubscriberCorrectionRecord, toSubscriberPaymentMethodRecord, toSubscriberRecord, toSubscriptionContractRecord };