@saasicat/core 1.0.0-rc.21 → 1.0.0-rc.23

package/dist/index.d.cts

@@ -643,12 +643,19 @@ interface PaymentGateway {
     /**
      * Opens the gateway's form for a payment method. Nothing is confirmed until
      * the gateway says so through `readCallback`.
+     *
+     * A failure is thrown as the provider reported it: the platform answers the
+     * person with `PAYMENT_GATEWAY_FAILED` and keeps what the error carries —
+     * its kind, code, status and request id — in the server log.
      */
     startPaymentMethodSetup(input: StartPaymentMethodSetupInput): Promise<PaymentMethodSetupSession>;
     /**
      * Verifies a callback with the account's secret and translates it.
      * Throws `PaymentCallbackRejectedError` for anything the gateway did not
-     * send, before a single field of it is trusted.
+     * send, before a single field of it is trusted. Any other failure is
+     * answered with `PAYMENT_GATEWAY_FAILED` and 502, like one of
+     * `startPaymentMethodSetup` — to the gateway's webhook, or to the person
+     * an `immediateCallback` is read for.
      */
     readCallback(callback: PaymentGatewayCallback): Promise<PaymentGatewayEvent>;
 }
@@ -1103,7 +1110,7 @@ interface SubscriptionBundleRecord {
      * or on one whose plan has no period; readers fall back to the plan's
      * cycle, which is what every booking used before.
      */
-    billingCycle: string | null;
+    billingCycle: BillingCycle | null;
     currentPeriodStart: Date | null;
     currentPeriodEnd: Date | null;
     createdAt: Date;
@@ -1137,7 +1144,7 @@ interface CreateSubscriptionBundleData {
     /** Null unless a commitment was configured or asked for. */
     minimumTermEndsAt?: Date | null;
     /** The rhythm and window worked out above this port. */
-    billingCycle?: string | null;
+    billingCycle?: BillingCycle | null;
     currentPeriodStart?: Date | null;
     currentPeriodEnd?: Date | null;
 }
@@ -1507,7 +1514,7 @@ interface AdminManifest {
         actions?: AuditActionDef[];
     };
 }
-type StandardPageKey = 'dashboard' | 'tenants' | 'subscriptions' | 'promoCodes' | 'plans' | 'audit' | 'users' | 'pilots' | 'discovery' | 'bundles' | 'marketingCatalog' | 'platformEmail' | 'platformEmailHistory' | 'settings';
+type StandardPageKey = 'dashboard' | 'tenants' | 'subscriptions' | 'promoCodes' | 'plans' | 'audit' | 'users' | 'pilots' | 'discovery' | 'bundles' | 'marketingCatalog' | 'platformEmail' | 'platformEmailHistory' | 'settings' | 'maintenance';
 interface StandardPageDef {
     enabled: boolean;
     requiredCapability?: CapabilityKey;
@@ -2206,6 +2213,16 @@ interface EffectiveLimitsSnapshot {
     plan: string;
     quotas: Record<string, number>;
     features: string[];
+    /**
+     * The add-ons a contract left out of these entitlements because their
+     * cancellation was already declared when it was written. Each is granted by
+     * its booking until its effective date, and by this snapshot never.
+     *
+     * Absent where nothing was left out — and on a snapshot written by an
+     * application, or before the platform left anything out, which then counts
+     * every add-on it names as its own.
+     */
+    leftOutBundleVersionIds?: string[];
 }
 
 interface FeatureUiMeta {
@@ -2426,6 +2443,177 @@ interface SettingsDifference {
     after: unknown;
 }
 
+/** One window, as a store reads it back. */
+interface MaintenanceWindowRecord {
+    id: string;
+    /** The announced start; null for a window locked without being announced first. */
+    startsAt: Date | null;
+    /** The announced, expected end; null where nobody said. */
+    endsAt: Date | null;
+    /** The operator's words to the tenants, shown as written; null for none. */
+    message: string | null;
+    /** When the window was recorded — announced, or locked at once. */
+    createdAt: Date;
+    /** Who recorded it, as the audit log tags an actor. */
+    createdBy: string;
+    /** When the lock began; null while the window is only announced. */
+    lockedAt: Date | null;
+    lockedBy: string | null;
+    /** When the window was over — unlocked, or cancelled before it locked. */
+    endedAt: Date | null;
+    endedBy: string | null;
+}
+/** A window to record: it is open, so it has not ended. */
+type NewMaintenanceWindow = Omit<MaintenanceWindowRecord, 'id' | 'endedAt' | 'endedBy'>;
+/**
+ * Where an open window stands. A write names the stage it expects, so that it
+ * cannot move a window that moved on in the meantime — one that another
+ * operator locked, unlocked or cancelled a moment earlier.
+ */
+type MaintenanceWindowStage = 'announced' | 'locked';
+/** What a write may change about an open window. */
+type MaintenanceWindowChanges = Partial<Pick<MaintenanceWindowRecord, 'startsAt' | 'endsAt' | 'message' | 'lockedAt' | 'lockedBy' | 'endedAt' | 'endedBy'>>;
+/**
+ * What became of a window, read off its record. `cancelled` is a window that
+ * ended without ever locking anybody out.
+ */
+type MaintenanceWindowStatus = 'announced' | 'locked' | 'ended' | 'cancelled';
+/**
+ * What SaaSiCat tells the application about a window, so that it can write to
+ * its own users — in its own words, from its own sender, in their language.
+ * The lock itself is not among them: tenants see it in the application.
+ */
+type MaintenanceWindowEvent = {
+    kind: 'announced';
+    window: MaintenanceWindowRecord;
+} | {
+    kind: 'rescheduled';
+    window: MaintenanceWindowRecord;
+    /** The window as it was announced before this change. */
+    previous: MaintenanceWindowRecord;
+} | {
+    kind: 'cancelled';
+    window: MaintenanceWindowRecord;
+};
+/** The longest message a window carries; the operator's words, not a document. */
+declare const MAINTENANCE_MESSAGE_MAX_LENGTH = 500;
+/**
+ * How long a process may go on reading a lock state it read before. Every
+ * request asks, so each process keeps the answer this long rather than asking
+ * the database per request; the command that locks waits this long before it
+ * returns, so that every process has seen the lock by then.
+ *
+ * Part of the contract between two versions of an application: the command
+ * that locks comes from the release being deployed, while the processes it
+ * waits for may still run the one before. It is safe only while the figure it
+ * waits by is at least theirs, so a later release may raise it and never lower
+ * it.
+ */
+declare const MAINTENANCE_STATE_MAX_AGE_SECONDS = 5;
+/**
+ * The manifest capability that announces the maintenance screen. The platform
+ * sets it where it keeps maintenance windows, and the administration offers the
+ * screen — and its lock banner — only where it is set.
+ */
+declare const MAINTENANCE_CAPABILITY = "maintenance.manage";
+/**
+ * What a tenant's page is told: nothing, a window ahead, or a lock. Dates are
+ * ISO strings, and `overrun` is the server's answer rather than the browser's,
+ * whose clock is not the one the window was announced by.
+ */
+type MaintenanceStatusView = {
+    state: 'none';
+} | {
+    state: 'announced';
+    startsAt: string;
+    endsAt: string;
+    message: string | null;
+} | {
+    state: 'locked';
+    lockedAt: string;
+    /** The announced end; null where nobody said. */
+    endsAt: string | null;
+    message: string | null;
+    /** The announced end has passed, and the lock still holds. */
+    overrun: boolean;
+};
+/** A window as the administration shows it. */
+interface MaintenanceWindowView {
+    id: string;
+    status: MaintenanceWindowStatus;
+    startsAt: string | null;
+    endsAt: string | null;
+    message: string | null;
+    createdAt: string;
+    createdBy: string;
+    lockedAt: string | null;
+    lockedBy: string | null;
+    endedAt: string | null;
+    endedBy: string | null;
+    /** Locked, and past its announced end. */
+    overrun: boolean;
+    /** Announced, never locked, and past its announced end: tenants no longer see it. */
+    lapsed: boolean;
+}
+/** `GET /admin/maintenance`: the open window, if any, and the ones before it. */
+interface MaintenanceOverview {
+    open: MaintenanceWindowView | null;
+    /** Newest first, the open one included. */
+    recent: MaintenanceWindowView[];
+    /** How long a lock takes to reach every process. */
+    takesEffectWithinSeconds: number;
+}
+/** `POST /admin/maintenance/lock`: the locked window, and whether it was locked before. */
+interface MaintenanceLockView {
+    window: MaintenanceWindowView;
+    /** The lock already held; nothing was changed. */
+    alreadyLocked: boolean;
+    /** How long the lock takes to reach every process. */
+    takesEffectWithinSeconds: number;
+}
+/** `POST /admin/maintenance/unlock`: the window it ended, or the open one it left alone. */
+interface MaintenanceUnlockView {
+    window: MaintenanceWindowView | null;
+    /** Whether a lock held and was ended by this call. */
+    wasLocked: boolean;
+}
+
+/** A `maintenance_windows` row as either adapter reads it back. */
+type CanonicalMaintenanceWindowRow = MaintenanceWindowRecord;
+/**
+ * Reads a row back as a record, naming each column rather than spreading the
+ * row: a column a later release adds is not handed to the platform by accident,
+ * and a version reading the table a later release extended reads what it knows.
+ */
+declare function toMaintenanceWindowRecord(row: CanonicalMaintenanceWindowRow): MaintenanceWindowRecord;
+
+/** What became of a window. */
+declare function maintenanceWindowStatusOf(window: MaintenanceWindowRecord): MaintenanceWindowStatus;
+/** Whether the lock still holds after the end it announced. */
+declare function isMaintenanceOverrun(window: MaintenanceWindowRecord, now: Date): boolean;
+/**
+ * Whether an announcement has lapsed: never locked, and its announced end has
+ * passed. Tenants are no longer shown it — past information is noise — while
+ * the operator is, because it still stands in the way of the next one.
+ */
+declare function isMaintenanceAnnouncementLapsed(window: MaintenanceWindowRecord, now: Date): boolean;
+/** What a tenant's page is told, given the open window — or none. */
+declare function maintenanceStatusOf(open: MaintenanceWindowRecord | null, now: Date): MaintenanceStatusView;
+/** A window as the administration shows it. */
+declare function maintenanceWindowViewOf(window: MaintenanceWindowRecord, now: Date): MaintenanceWindowView;
+/**
+ * Seconds until the announced end, for the `Retry-After` of a refused request.
+ * Never less than one: a client told zero would retry at once, in a loop.
+ */
+declare function maintenanceRetryAfterSeconds(window: MaintenanceWindowRecord, now: Date): number;
+
+/**
+ * The moment an ISO 8601 date and time names, provided it states its zone —
+ * `2026-10-02T22:00+02:00` or `2026-10-02T20:00Z`. Null for anything else: a
+ * date without a time, a time without a zone, or text that is not a date.
+ */
+declare function parseZonedInstant(text: string): Date | null;
+
 /**
  * The top-level blocks of `config/saas.yaml` that are the catalogue rather than
  * the configuration, and the format marker.
@@ -3339,6 +3527,13 @@ interface CreateSubscriptionContractData {
 /** What a repository writes: the contract as asked for, with the parties the platform copied. */
 interface NewSubscriptionContractData extends CreateSubscriptionContractData {
     parties: SubscriptionContractParties;
+    /**
+     * The parties are a copy the migration made rather than what was agreed —
+     * set where a successor takes them over from a contract that says so, so
+     * that the copy is not passed off as agreed one contract later. Absent
+     * means `false`.
+     */
+    partiesMigrated?: boolean;
 }
 interface TerminateSubscriptionContractData {
     effectiveUntil: Date;
@@ -3357,6 +3552,19 @@ interface TerminateSubscriptionContractData {
      */
     status: Extract<SubscriptionContractStatus, 'terminated' | 'superseded'> | null;
 }
+/**
+ * Ends a contract because a successor takes its place — on the condition that
+ * it is still as the caller read it.
+ */
+interface SupersedeSubscriptionContractData {
+    /** When the successor takes over; written as the contract's `effectiveUntil`. */
+    at: Date;
+    /**
+     * The `effectiveUntil` the caller read. A contract whose end moved since —
+     * a cancellation capped it, or ended it — is not superseded.
+     */
+    readEffectiveUntil: Date | null;
+}
 interface SubscriptionContractFilter {
     tenantId?: string;
     status?: SubscriptionContractStatus;
@@ -3511,6 +3719,128 @@ interface SubscriberCorrectionResult {
     correction: SubscriberCorrectionRecord | null;
 }
 
+/**
+ * What made the charge arise. activation: the first period of a subscription. renewal: a later period. planChange: what an immediate plan change adds. bundleBooking: the first, short period of an add-on. credit: a decision that reduces what is owed. correction: a counter-entry reversing an earlier charge, which is how the append-only journal answers a mistake.
+ */
+type SubscriberChargeOrigin = 'activation' | 'renewal' | 'planChange' | 'bundleBooking' | 'credit' | 'correction';
+/**
+ * Which kind of contract line the charge realises.
+ */
+type SubscriberChargeSource = 'plan' | 'bundle' | 'discount';
+/**
+ * One charge in a subscriber's account: an amount that became due for a period, derived from a line of the contract in force. The journal is append-only — a charge is never updated, and a mistake is answered with a counter-entry rather than an edit, so the account says what happened rather than what somebody thinks today. A charge is net: the tax is decided by the tax adapter when the charge is invoiced, from the subscriber's origin on that day, and computed once per rate on the invoice.
+ */
+interface SubscriberCharge {
+    /**
+     * The charge's own identifier. Never shown to a customer as an invoice number: invoice numbering is sequential, gapless and legally constrained per country, and an identifier somebody has already seen on a screen cannot become one later without confusion.
+     */
+    id: string;
+    /**
+     * The party the contract is concluded with, whose account this is. It outlives the tenant.
+     */
+    subscriberId: string;
+    /**
+     * The tenant the subscription belonged to when the charge arose.
+     */
+    tenantId: string;
+    /**
+     * The subscription the charge arose on. Part of the natural key.
+     */
+    subscriptionId: string;
+    /**
+     * The contract whose line the charge realises.
+     */
+    contractId: string;
+    /**
+     * The contract line the charge came from, so that every invoice line can be traced back to what was agreed.
+     */
+    contractLineItemId: string;
+    origin: SubscriberChargeOrigin;
+    source: SubscriberChargeSource;
+    /**
+     * Which thing of its source the charge is for, stable across contracts: the subscription id for the plan, the booking id for an add-on, the discount's key for a discount. Part of the natural key (subscriptionId, source, sourceRef, periodStart, origin), which is unique — a charge derived twice is written once.
+     */
+    sourceRef: string;
+    /**
+     * The start of the period the charge belongs to — the grouping key for an invoice.
+     */
+    periodStart: string;
+    periodEnd: string;
+    /**
+     * ISO 4217, as the contract line records it — recorded per charge so that a charge written in 2026 still means what it meant after the configured currency changes.
+     */
+    currency: string;
+    /**
+     * Net, rounded to the currency's decimal places once, when the charge is written; the written figure is the truth from then on. Negative for a discount.
+     */
+    amountNet: number;
+    /**
+     * When the amount became due. The account is ordered by this, not by when the row was written.
+     */
+    bookedAt: string;
+    createdAt: string;
+}
+
+/** A charge as a store reads it back: the wire format, with its dates as dates. */
+interface SubscriberChargeRecord {
+    id: string;
+    subscriberId: string;
+    tenantId: string;
+    subscriptionId: string;
+    contractId: string;
+    contractLineItemId: string;
+    origin: SubscriberChargeOrigin;
+    source: SubscriberChargeSource;
+    /** The subscription id for the plan, the booking id for an add-on, the discount's key. */
+    sourceRef: string;
+    periodStart: Date;
+    periodEnd: Date;
+    currency: string;
+    /** Net, rounded to the cent when written. Negative for a discount. */
+    amountNet: number;
+    /** When the amount became due. */
+    bookedAt: Date;
+    createdAt: Date;
+}
+/** A charge to write: everything but what the store assigns. */
+type NewSubscriberCharge = Omit<SubscriberChargeRecord, 'id' | 'createdAt'>;
+/**
+ * The manifest capability that announces the operator's view of an account.
+ * The platform sets it where it serves the view, and the admin UI shows the
+ * view only where it is set.
+ */
+declare const SUBSCRIBER_ACCOUNT_CAPABILITY = "charges.read";
+/** Whose account it is, as the operator is shown it. */
+interface AdminAccountHolder {
+    id: string;
+    /** What the customer quotes, and what an invoice will carry. */
+    customerNumber: string;
+    legalName: string;
+}
+/** One charge of an account, with the name its contract line gives it. */
+interface AdminAccountEntry {
+    /** The charge as the journal holds it. */
+    charge: SubscriberCharge;
+    /**
+     * The contract line's own title, as it was when the contract was
+     * concluded, or `null` where that line cannot be read.
+     */
+    title: string | null;
+}
+/**
+ * A tenant's account as the operator reads it: the charges of the subscription
+ * it holds, newest first — by when each became due, then by its period, then
+ * the plan before its add-ons before its discounts.
+ *
+ * No total: without invoices and payments, a sum would be what was charged so
+ * far, and it would be read as what is owed.
+ */
+interface AdminSubscriberAccount {
+    /** `null` for a tenant that has no subscriber. */
+    holder: AdminAccountHolder | null;
+    entries: AdminAccountEntry[];
+}
+
 /**
  * Snapshot form of a `Subscription` row for the EntitlementService
  * computation. The consumer maps its Prisma structure onto this form.
@@ -3687,6 +4017,22 @@ interface SubscriptionContractRepository {
      */
     findByOriginalOfferId(offerId: string, tx?: TransactionContext): Promise<SubscriptionContractRecord | null>;
     terminate(contractId: string, data: TerminateSubscriptionContractData): Promise<SubscriptionContractRecord>;
+    /**
+     * Ends a contract at `data.at` with the status `superseded`, where it is
+     * still as the caller read it: `active` or `scheduled`, and ending when it
+     * ended then. `null`, with nothing written, where it has moved since —
+     * another successor took its place, or a cancellation capped or ended it.
+     *
+     * The condition belongs to the write rather than to a read before it. Two
+     * callers superseding one contract at once — a plan change and an
+     * operator's refresh, say — then end with one successor: the second write
+     * finds the status the first one left and changes nothing, where a read
+     * followed by a plain update would give the tenant two contracts in force.
+     *
+     * With `tx`, written on that transaction and undone with it, so that the
+     * successor written beside it lands with it or not at all.
+     */
+    supersede(contractId: string, data: SupersedeSubscriptionContractData, tx?: TransactionContext): Promise<SubscriptionContractRecord | null>;
     /**
      * The contracts concluded and not yet over, with the issuer each was
      * concluded under: how many there are, and the first `limit` of them,
@@ -3758,6 +4104,27 @@ interface SubscriberRepository {
     /** Every correction of this subscriber, the latest first. */
     listCorrections(subscriberId: string): Promise<SubscriberCorrectionRecord[]>;
 }
+/**
+ * The subscriber's account: the charges that became due, one per contract line
+ * and period. Append-only — nothing here updates or deletes a charge, and a
+ * mistake is answered with a counter-entry (`SC-PRIC-020`).
+ *
+ * Owned by the subscriber rather than the tenant, so that it outlives the
+ * tenant it arose for (ADR 0012).
+ */
+interface SubscriberLedgerRepository {
+    /**
+     * Writes the charges that are not there yet and returns them.
+     *
+     * A charge whose natural key — subscription, source, source reference,
+     * period start and origin — is already written is left as it is and not
+     * returned, however often it is derived and whoever derives it at the same
+     * time: the unique index decides, not a read before the write.
+     */
+    recordCharges(charges: readonly NewSubscriberCharge[], tx?: TransactionContext): Promise<SubscriberChargeRecord[]>;
+    /** Every charge of one subscription, oldest period first. */
+    listBySubscription(subscriptionId: string, tx?: TransactionContext): Promise<SubscriberChargeRecord[]>;
+}
 /**
  * Display form of a subscription for the tenant self-service UI.
  * Richer than `SubscriptionRecord` (which is only the aggregation form); contains
@@ -5014,6 +5381,49 @@ interface AppliedSettingsPort {
     acknowledgeChange(id: string, acknowledgedBy: string, acknowledgedAt: Date): Promise<SettingsChangeRecord | null>;
 }
 
+/**
+ * Keeps the maintenance windows, in the application's own database.
+ *
+ * Every running version of the application reads this table while the lock
+ * holds — the one being replaced as well as the one replacing it — so its shape
+ * is part of the contract between two releases: it gains columns, and never in
+ * a deploy the lock protects.
+ *
+ * An adapter translates. It does not decide whether a window may be locked or
+ * moved; it makes each write conditional on what the caller read, so that two
+ * operators acting at once cannot both succeed.
+ */
+interface MaintenanceWindowPort {
+    /** The open window — announced or locked, not yet over — or null. There is at most one. */
+    findOpen(): Promise<MaintenanceWindowRecord | null>;
+    /** The most recently recorded windows first, open or over; at most `limit` of them. */
+    listRecent(limit: number): Promise<MaintenanceWindowRecord[]>;
+    /**
+     * Records a new open window and returns it as stored — the id is the
+     * adapter's to assign. Returns null where a window is already open: the
+     * database holds an installation to one, so of two concurrent calls exactly
+     * one lands.
+     */
+    open(window: NewMaintenanceWindow): Promise<MaintenanceWindowRecord | null>;
+    /**
+     * Applies `changes` to window `id`, provided it is still open and at
+     * `stage`. Returns the window as stored, or null where it is not: it ended,
+     * it was locked in the meantime, or no window has that id.
+     */
+    update(id: string, stage: MaintenanceWindowStage, changes: MaintenanceWindowChanges): Promise<MaintenanceWindowRecord | null>;
+}
+/**
+ * Hears when a window is announced, moved or cancelled, so the application can
+ * write to its users. Optional: without it tenants learn of a window from the
+ * banner alone.
+ *
+ * Called after the change is recorded, and never waited on by the operator: a
+ * notification that fails is logged, and the window stands as recorded.
+ */
+interface MaintenanceNotificationPort {
+    windowChanged(event: MaintenanceWindowEvent): Promise<void>;
+}
+
 /** Class reference usable as a DI token (e.g. the consumer's `PrismaService`). */
 type PersistenceClassRef = abstract new (...args: never[]) => unknown;
 /** DI token forms a persistence bundle may reference in `inject`. */
@@ -5077,6 +5487,13 @@ interface SaaSiCatPersistenceCore {
      * platform says once at boot that it is not recording.
      */
     appliedSettings?: PersistenceProvider<AppliedSettingsPort>;
+    /**
+     * Where maintenance windows are kept (`maintenance` in
+     * `SaaSiCatModule.forRoot`). Optional so an adapter written before it
+     * existed keeps working; an installation that turns maintenance on without
+     * one is refused at start-up.
+     */
+    maintenanceWindows?: PersistenceProvider<MaintenanceWindowPort>;
 }
 /** Repositories for the entitlement/contract loop (`EntitlementModule`). */
 interface SaaSiCatPersistenceEntitlement {
@@ -5085,6 +5502,8 @@ interface SaaSiCatPersistenceEntitlement {
     subscriptionContractRepository?: PersistenceProvider<SubscriptionContractRepository>;
     /** The parties contracts are concluded with; required wherever contracts are written. */
     subscriberRepository?: PersistenceProvider<SubscriberRepository>;
+    /** The charges a subscriber's contracts give rise to (`tenantBilling.chargeJournal`). */
+    subscriberLedgerRepository?: PersistenceProvider<SubscriberLedgerRepository>;
     subscriptionBundleRepository?: PersistenceProvider<SubscriptionBundleRepository>;
     bundleRepository?: PersistenceProvider<BundleRepository>;
 }
@@ -5422,6 +5841,14 @@ declare const CONTRACT_ERROR_CODES: {
     readonly SUBSCRIPTION_CONTRACT_NOT_FOUND: "SUBSCRIPTION_CONTRACT_NOT_FOUND";
     readonly NO_ACTIVE_SUBSCRIPTION_CONTRACT: "NO_ACTIVE_SUBSCRIPTION_CONTRACT";
     readonly SUBSCRIPTION_CONTRACT_ALREADY_CLOSED: "SUBSCRIPTION_CONTRACT_ALREADY_CLOSED";
+    /**
+     * A successor would run beside another contract of the tenant: the
+     * contract in force moved while it was being written — another successor
+     * took its place, or a cancellation capped it — and kept moving on a
+     * second attempt, or a contract begins after the moment the successor
+     * would take effect. Nothing was written.
+     */
+    readonly SUBSCRIPTION_CONTRACT_CHANGED: "SUBSCRIPTION_CONTRACT_CHANGED";
 };
 type ContractErrorCode = (typeof CONTRACT_ERROR_CODES)[keyof typeof CONTRACT_ERROR_CODES];
 /** The parties contracts are concluded with (`SubscriberService`), and their absence. */
@@ -5530,6 +5957,13 @@ declare const PAYMENT_ERROR_CODES: {
      * does not name. Carries `field`.
      */
     readonly PAYMENT_RETURN_URL_NOT_ALLOWED: "PAYMENT_RETURN_URL_NOT_ALLOWED";
+    /**
+     * The gateway failed — unreachable, refusing the account's keys, or
+     * answering with an error — while opening its form or reading a callback
+     * back. Answered with 502; what the gateway answered stays in the server
+     * log.
+     */
+    readonly PAYMENT_GATEWAY_FAILED: "PAYMENT_GATEWAY_FAILED";
 };
 type PaymentErrorCode = (typeof PAYMENT_ERROR_CODES)[keyof typeof PAYMENT_ERROR_CODES];
 /** Codes of the settings record (`GET /admin/settings`, the acknowledgement). */
@@ -5538,6 +5972,26 @@ declare const SETTINGS_ERROR_CODES: {
     readonly SETTINGS_CHANGE_NOT_FOUND: "SETTINGS_CHANGE_NOT_FOUND";
 };
 type SettingsErrorCode = (typeof SETTINGS_ERROR_CODES)[keyof typeof SETTINGS_ERROR_CODES];
+/** Codes of maintenance windows: the lock's refusal, and the operator's routes. */
+declare const MAINTENANCE_ERROR_CODES: {
+    /** The application is locked for maintenance; the body carries the window. */
+    readonly MAINTENANCE: "MAINTENANCE";
+    /** A window is already open: move or cancel it before announcing another. */
+    readonly MAINTENANCE_WINDOW_ALREADY_OPEN: "MAINTENANCE_WINDOW_ALREADY_OPEN";
+    /** No open window has this id — it ended, or it never existed. */
+    readonly MAINTENANCE_WINDOW_NOT_OPEN: "MAINTENANCE_WINDOW_NOT_OPEN";
+    /** The window is locked: its start is history, and unlocking is what ends it. */
+    readonly MAINTENANCE_WINDOW_LOCKED: "MAINTENANCE_WINDOW_LOCKED";
+    /** The announced end is not after the announced start. */
+    readonly MAINTENANCE_WINDOW_END_NOT_AFTER_START: "MAINTENANCE_WINDOW_END_NOT_AFTER_START";
+    /** The announced end has already passed. */
+    readonly MAINTENANCE_WINDOW_END_IN_PAST: "MAINTENANCE_WINDOW_END_IN_PAST";
+    /** A time without its zone, or not a date and time at all; `field` names which. */
+    readonly MAINTENANCE_TIME_INVALID: "MAINTENANCE_TIME_INVALID";
+    /** The message is longer than `MAINTENANCE_MESSAGE_MAX_LENGTH`. */
+    readonly MAINTENANCE_MESSAGE_TOO_LONG: "MAINTENANCE_MESSAGE_TOO_LONG";
+};
+type MaintenanceErrorCode = (typeof MAINTENANCE_ERROR_CODES)[keyof typeof MAINTENANCE_ERROR_CODES];
 /**
  * Every exception code the platform emits, in one object.
  *
@@ -5546,6 +6000,22 @@ type SettingsErrorCode = (typeof SETTINGS_ERROR_CODES)[keyof typeof SETTINGS_ERR
  * removing one may not.
  */
 declare const PLATFORM_ERROR_CODES: {
+    /** The application is locked for maintenance; the body carries the window. */
+    readonly MAINTENANCE: "MAINTENANCE";
+    /** A window is already open: move or cancel it before announcing another. */
+    readonly MAINTENANCE_WINDOW_ALREADY_OPEN: "MAINTENANCE_WINDOW_ALREADY_OPEN";
+    /** No open window has this id — it ended, or it never existed. */
+    readonly MAINTENANCE_WINDOW_NOT_OPEN: "MAINTENANCE_WINDOW_NOT_OPEN";
+    /** The window is locked: its start is history, and unlocking is what ends it. */
+    readonly MAINTENANCE_WINDOW_LOCKED: "MAINTENANCE_WINDOW_LOCKED";
+    /** The announced end is not after the announced start. */
+    readonly MAINTENANCE_WINDOW_END_NOT_AFTER_START: "MAINTENANCE_WINDOW_END_NOT_AFTER_START";
+    /** The announced end has already passed. */
+    readonly MAINTENANCE_WINDOW_END_IN_PAST: "MAINTENANCE_WINDOW_END_IN_PAST";
+    /** A time without its zone, or not a date and time at all; `field` names which. */
+    readonly MAINTENANCE_TIME_INVALID: "MAINTENANCE_TIME_INVALID";
+    /** The message is longer than `MAINTENANCE_MESSAGE_MAX_LENGTH`. */
+    readonly MAINTENANCE_MESSAGE_TOO_LONG: "MAINTENANCE_MESSAGE_TOO_LONG";
     /** No recorded change has this id, or the installation keeps no record at all. */
     readonly SETTINGS_CHANGE_NOT_FOUND: "SETTINGS_CHANGE_NOT_FOUND";
     /**
@@ -5562,6 +6032,13 @@ declare const PLATFORM_ERROR_CODES: {
      * does not name. Carries `field`.
      */
     readonly PAYMENT_RETURN_URL_NOT_ALLOWED: "PAYMENT_RETURN_URL_NOT_ALLOWED";
+    /**
+     * The gateway failed — unreachable, refusing the account's keys, or
+     * answering with an error — while opening its form or reading a callback
+     * back. Answered with 502; what the gateway answered stays in the server
+     * log.
+     */
+    readonly PAYMENT_GATEWAY_FAILED: "PAYMENT_GATEWAY_FAILED";
     readonly PENDING_REGISTRATION_NOT_FOUND: "PENDING_REGISTRATION_NOT_FOUND";
     readonly PENDING_REGISTRATION_EXPIRED: "PENDING_REGISTRATION_EXPIRED";
     readonly INVALID_REGISTRATION_STATE: "INVALID_REGISTRATION_STATE";
@@ -5636,6 +6113,14 @@ declare const PLATFORM_ERROR_CODES: {
     readonly SUBSCRIPTION_CONTRACT_NOT_FOUND: "SUBSCRIPTION_CONTRACT_NOT_FOUND";
     readonly NO_ACTIVE_SUBSCRIPTION_CONTRACT: "NO_ACTIVE_SUBSCRIPTION_CONTRACT";
     readonly SUBSCRIPTION_CONTRACT_ALREADY_CLOSED: "SUBSCRIPTION_CONTRACT_ALREADY_CLOSED";
+    /**
+     * A successor would run beside another contract of the tenant: the
+     * contract in force moved while it was being written — another successor
+     * took its place, or a cancellation capped it — and kept moving on a
+     * second attempt, or a contract begins after the moment the successor
+     * would take effect. Nothing was written.
+     */
+    readonly SUBSCRIPTION_CONTRACT_CHANGED: "SUBSCRIPTION_CONTRACT_CHANGED";
     /**
      * Feature not covered by the plan. Defined in `upsell.types.ts` because the
      * upsell body type is built around it; re-exported here so an exhaustive
@@ -5858,7 +6343,7 @@ declare const PLATFORM_ERROR_CODES: {
     /** Email already taken (mapped from `PlatformUserExistsError`). */
     readonly EMAIL_EXISTS: "EMAIL_EXISTS";
 };
-type PlatformErrorCode = SetupErrorCode | AuthErrorCode | PromoErrorCode | CatalogErrorCode | BillingErrorCode | ContractErrorCode | SubscriberErrorCode | RegistrationErrorCode | PaymentErrorCode | SettingsErrorCode;
+type PlatformErrorCode = SetupErrorCode | AuthErrorCode | PromoErrorCode | CatalogErrorCode | BillingErrorCode | ContractErrorCode | SubscriberErrorCode | RegistrationErrorCode | PaymentErrorCode | SettingsErrorCode | MaintenanceErrorCode;
 /**
  * Shape of a coded error response.
  *
@@ -6779,6 +7264,47 @@ type IssuerIdentityChange =
  */
 declare function classifyIssuerChange(recorded: LegalIdentity | null, issuer: PlanCatalogIssuer | undefined): IssuerIdentityChange;
 
+/**
+ * A `subscriber_ledger_entries` row as either adapter reads it back. The amount
+ * is `unknown` because a Prisma row carries a `Decimal` where a Drizzle row
+ * carries a numeric string.
+ */
+interface CanonicalSubscriberChargeRow {
+    id: string;
+    subscriberId: string;
+    tenantId: string;
+    subscriptionId: string;
+    contractId: string;
+    contractLineItemId: string;
+    origin: string;
+    source: string;
+    sourceRef: string;
+    periodStart: Date;
+    periodEnd: Date;
+    currency: string;
+    amountNet: unknown;
+    bookedAt: Date;
+    createdAt: Date;
+}
+/**
+ * Reads a row back as a record. The origin and the source are checked rather
+ * than cast: a value written by hand or by a later release would otherwise
+ * reach an invoice as a charge nobody knows how to read.
+ */
+declare function toSubscriberChargeRecord(row: CanonicalSubscriberChargeRow): SubscriberChargeRecord;
+/**
+ * The columns a charge is written with. The amount goes as a decimal string of
+ * two places, which both a Prisma `Decimal` and a PostgreSQL `numeric` take
+ * exactly — a JavaScript number on its way to either is where a cent is lost.
+ *
+ * An amount that is not already a whole number of cents is refused rather than
+ * rounded: a charge is rounded once, where it is derived, and a second rounding
+ * here would make the written figure differ from the one that was computed.
+ */
+declare function subscriberChargeColumns(charge: NewSubscriberCharge): Omit<CanonicalSubscriberChargeRow, 'id' | 'createdAt' | 'amountNet'> & {
+    amountNet: string;
+};
+
 /** A `subscribers` row as either adapter reads it back. */
 interface CanonicalSubscriberRow {
     id: string;
@@ -6907,6 +7433,37 @@ declare function isForeignPaymentMethodReferenceError(error: unknown): error is
  */
 declare function refuseForeignPaymentMethodReference(recorded: Pick<CanonicalSubscriberPaymentMethodRow, 'subscriberId' | 'gatewayAccount' | 'paymentMethodRef'>, subscriberId: string): void;
 
+/**
+ * A `subscription_bundles` row as either adapter reads it back.
+ *
+ * The three billing columns are optional because a Prisma client generated from
+ * a schema that predates them returns a row without them; an absent column
+ * reads as null, the same as a booking made before they existed.
+ */
+interface CanonicalSubscriptionBundleRow {
+    id: string;
+    subscriptionId: string;
+    bundleVersionId: string;
+    startedAt: Date;
+    minimumTermEndsAt: Date | null;
+    billingCycle?: string | null;
+    currentPeriodStart?: Date | null;
+    currentPeriodEnd?: Date | null;
+    canceledAt: Date | null;
+    canceledEffectiveAt: Date | null;
+    createdAt: Date;
+    updatedAt: Date;
+}
+/**
+ * Reads a row back as a record.
+ *
+ * `billingCycle` is a text column the platform only ever writes as `MONTHLY` or
+ * `YEARLY`, and a price is chosen by asking whether it is `YEARLY` — so any
+ * other value would be billed monthly without a word. It is checked rather than
+ * cast, and a value outside the two stops the read.
+ */
+declare function toSubscriptionBundleRecord(row: CanonicalSubscriptionBundleRow): SubscriptionBundleRecord;
+
 /** A `subscription_contracts` row as either adapter reads it back. */
 interface CanonicalContractRow {
     id: string;
@@ -7050,4 +7607,4 @@ declare function resolveErrorMessage(body: ResolvableErrorBody, overrides?: Part
 
 declare const ERROR_MESSAGES_DE: Record<PlatformErrorCode, string>;
 
-export { ACTIVE_SUBSCRIPTION_CONTRACT_STATUSES, AUTH_ERROR_CODES, type ActionKey, type ActivationOrchestrator, type ActivePlanVersionWhere, type ActivePlanVersionWhereWithEndsAt, type ActiveVersionWhere, type ActiveVersionWhereWithEndsAt, type ActorTag, type AdminActor, type AdminAuditListFilter, type AdminManifest, type AdminResourcesPort, type AdminSubscriptionListRow, type AdminTenantDetail, type AdminTenantListFilter, type AdminTenantListRow, type AdminTenantStateResult, type AdminUserListFilter, type AdminUserListRow, type AppliedSettingsPort, type AppliedSettingsRecord, type AppliedSettingsValues, type ApplyOnboardingSelectionInput, type ApplyOnboardingSelectionResult, type ApprovedCatalogKeys, type AuditActionDef, type AuditEntry, type AuditPort, type AuditQuery, type AuditQueryPort, type AuditStatsPort, type AuditStatsSnapshot, type AuthErrorCode, BILLING_ERROR_CODES, BUNDLE_PRICE_LOOKUP_LIMIT, type BillingCycle, type BillingErrorCode, type BundleAvailabilityState, type BundleCompatibility, type BundleFeatureShape, type BundleListFilter, type BundlePricingOverride, type BundleRepository, type BundleRow, type BundleVersionFields, type BundleVersionMutationResult, type BundleVersionRow, CATALOGUE_KEYS, CATALOG_ERROR_CODES, CONTRACT_ERROR_CODES, type CancelSubscriptionBundleData, type CancelSubscriptionInput, type CancelSubscriptionResult, type CancellationNoticePeriods, type CanonicalContractLineItemRow, type CanonicalContractRow, type CanonicalPlanRow, type CanonicalPlanVersionRow, type CanonicalRunningContractRow, type CanonicalSubscriberCorrectionRow, type CanonicalSubscriberPaymentMethodRow, type CanonicalSubscriberRow, type CapabilityCatalogEntryRow, type CapabilityCodeStatus, type CapabilityKey, type CapabilityKind, type CatalogEntryFilter, type CatalogEntryI18n, type CatalogEntryI18nFields, type CatalogEntryRepository, type CatalogErrorCode, type ChangeDirection, type CheckoutOfferFilter, type CheckoutOfferLineItem, type CheckoutOfferLineItemKind, type CheckoutOfferPriceBreakdown, type CheckoutOfferPromoCodeSnapshot, type CheckoutOfferPromotionSnapshot, type CheckoutOfferRepository, type CheckoutOfferRow, type CheckoutOfferSelection, type CheckoutOfferSelectionUpdate, type CheckoutOfferStatus, type CleanupResult, type CliUserRow, type ComponentKey, type ConfiguratorCatalog, type ConfiguratorMarketingProvider, type ConfiguratorModel, type ConfiguratorPlanMarketing, type ConfiguratorPlanVersionRow, type ConfiguratorPriceBreakdown, type ConfiguratorSourcesLookup, type ConfirmedPaymentMethod, type ContractErrorCode, type ContractIssuerParty, type ContractLineItemKind, type ContractLineItemRecord, type ContractSubscriberParty, type CreateBundleData, type CreateBundleVersionDraftData, type CreateCheckoutOfferData, type CreateMarketingProjectionData, type CreatePlanData, type CreatePlanVersionDraftData, type CreatePromoCodeData, type CreatePromoCodeRequest, type CreatePromotionData, type CreateSubscriberData, type CreateSubscriptionBundleData, type CreateSubscriptionContractData, type CreateSuperAdminCliInput, type CreateTenantInput, type DiffResult, type DiscoveredCapability, type DiscoveredFeature, type DiscoveredQuota, type DiscoveredQuotaPolicy, type DiscoveryCodeStatus, type DiscoverySnapshot, type DiscoveryStatus, ERROR_MESSAGES_DE, ERROR_MESSAGES_EN, type EffectiveLimitsSnapshot, type EmailPort, type ErrorMessageParams, FEATURE_NOT_LICENSED, type FeatureCatalogEntryRow, type FeatureDef, type FeatureKey, type FeatureNotLicensedBody, type FeatureRequiresIndex, type FeatureTier, type FeatureUiMeta, type FeatureUiRegistry, type FinalActivationResult, type FirstTimeCustomerCheck, ForeignPaymentMethodReferenceError, type ImmediatePlanChangeInput, type InvoiceLineItemSnapshot, type IssuerCorrectionFault, type IssuerIdentityChange, type KpiCardDef, type KpiDisplayHint, LEGAL_IDENTITY_FIELDS, type LegalIdentity, type LegalIdentityField, MARKETING_PRIORITY_MAX, MARKETING_PRIORITY_MIN, type ManifestAccessPort, type ManifestContribution, type MarketingProjectionFilter, type MarketingProjectionRepository, type MarketingProjectionRow, type MarketingSettingsRepository, type MarketingSettingsRow, type MarketingTargetType, type MarketingTopFeature, type MaskedPaymentMethod, type MfaPort, type NewContractLineItemData, type NewSettingsChange, type NewSubscriberDetails, type NewSubscriptionContractData, OTP_RATE_LIMIT_MAX_SENDS, OTP_RATE_LIMIT_WINDOW_MINUTES, OTP_TTL_MINUTES, OTP_VERIFY_MAX_ATTEMPTS, type OnboardingPromoRedemption, type OnboardingSelectionRequest, type OnboardingSelectionResponse, PASSWORD_RESET_TTL_MINUTES, PAYMENT_ERROR_CODES, PAYMENT_METHOD_TYPES, PENDING_CHECKOUT_TTL_DAYS, PENDING_EMAIL_TTL_HOURS, PENDING_ONBOARDING_TTL_DAYS, PLATFORM_ERROR_CODES, PROMO_ERROR_CODES, type Paginated, type PartyAddress, type PasswordHasher, type PasswordResetCliResult, PaymentCallbackRejectedError, type PaymentErrorCode, type PaymentEventClaim, type PaymentEventLog, type PaymentGateway, type PaymentGatewayCallback, type PaymentGatewayEvent, type PaymentMethodHolder, type PaymentMethodSetupSession, type PaymentMethodSetupSubject, type PaymentMethodType, type PendingRegistration, type PendingRegistrationCreateInput, type PendingRegistrationRepository, type PendingRegistrationSnapshot, type PendingRegistrationUpdateInput, type PersistenceCapabilities, PersistenceCapabilityError, type PersistenceClassRef, type PersistenceInjectionToken, type PersistenceProvider, type PlanCatalog, type PlanCatalogApp, type PlanCatalogImportReport, type PlanCatalogImportSink, type PlanCatalogIssuer, type PlanCatalogIssuerCorrection, type PlanCatalogLookup, type PlanCatalogMarketing, type PlanCatalogNotifications, type PlanCatalogPaymentAccount, type PlanCatalogPayments, type PlanCatalogReadSink, type PlanCatalogReadSnapshot, type PlanCatalogSettings, type PlanCatalogSubscribers, type PlanCatalogTenantBilling, type PlanDef, type PlanId, type PlanListFilter, type PlanRepository, type PlanRow, type PlanVersion, type PlanVersionFields, type PlanVersionMappingFields, type PlanVersionMutationResult, type PlanVersionRecord, type PlanVersionRepository, type PlanVersionRow, type PlatformErrorBody, type PlatformErrorCode, type PlatformRole, type PlatformUserDto, PlatformUserExistsError, type ProjectPageDef, type PromoCode, type PromoCodeDurationType, type PromoCodeFilter, type PromoCodeHoldRecord, type PromoCodeHoldRepository, type PromoCodeHoldTaken, type PromoCodeRecord, type PromoCodeRedemption, type PromoCodeRedemptionListItem, type PromoCodeRedemptionRecord, type PromoCodeRedemptionRepository, type PromoCodeRedemptionStatus, type PromoCodeRepository, type PromoCodeStatsPort, type PromoCodeStatsSnapshot, type PromoCodeStatus, type PromoCodeValidationLog, type PromoCodeValidationLogRepository, type PromoCodeValidationResult, type PromoCodeValueType, type PromoErrorCode, type PromoPreviewInvalidReason, type PromoPreviewRequest, type PromoPreviewResponse, type PromoPreviewValidResponse, type PromoRevenueDeductionAggregator, type PromoSubscriptionLookup, type PromotionBillingCycle, type PromotionI18n, type PromotionI18nFields, type PromotionOnPrice, type PromotionRepository, type PromotionResult, type PromotionRow, type PromotionStatus, type PromotionTargetType, type PromotionType, type PromotionValue, type PublicBootResponse, type PublicComparisonRow, type PublicMarketingBundle, type PublicMarketingCatalogResponse, type PublicMarketingPlan, type PublicMarketingPromo, type PublicNewPaymentMethods, type PublicSignupPlan, type PublishBundleVersionData, type PublishBundleVersionMeta, type PublishPlanVersionData, type QuotaCatalogEntryRow, type QuotaEnforcementMode, type QuotaKey, type QuotaProvider, REGISTRATION_ERROR_CODES, REGISTRATION_RESUME_TTL_MINUTES, REGISTRATION_STEP_BY_STATUS, type ReassignTenantAdminCliResult, type RecommendablePlan, type RecordSubscriberPaymentMethodData, type RecordSubscriberPaymentMethodOutcome, type RecordSubscriberPaymentMethodResult, type RedeemPromoInTransactionCallback, type RegistrationActivation, type RegistrationAuditContext, type RegistrationAuditEvent, type RegistrationAuditEventType, type RegistrationAuditLogger, type RegistrationBillingDetails, type RegistrationConfigSelection, type RegistrationConfiguratorLookup, type RegistrationErrorCode, type RegistrationOtpDelivery, type RegistrationPromoPreview, type RegistrationResumeDelivery, type RegistrationResumeTokenSigner, type RegistrationStatus, type RegistrationStep, type RequiredCapabilities, type ResolvableErrorBody, type ResumeRegistrationInput, type ResumeRegistrationResult, type ReviewCatalogEntryData, type RlsBypassPort, type RunningContractIssuer, type RunningContractIssuers, SETTINGS_ERROR_CODES, SETUP_ERROR_CODES, SUBSCRIBER_ERROR_CODES, type SaaSiCatPersistenceAdapter, type SaaSiCatPersistenceAdminResources, type SaaSiCatPersistenceCatalog, type SaaSiCatPersistenceCore, type SaaSiCatPersistenceEntitlement, type SaaSiCatPersistencePayments, type SaaSiCatPersistencePromo, type SaaSiCatPersistenceTenantBilling, type SaveRegistrationConfigInput, type SaveRegistrationConfigResult, type ScheduledPlanChangeInput, type SelectPlanInput, type SelectPlanResult, type SelectableBundleShape, type SelfServiceBlockedPlans, type SetCatalogEntryReviewData, type SettingsChangeFilter, type SettingsChangeRecord, type SettingsDifference, type SettingsErrorCode, type SetupConfirmMfaRequest, type SetupConfirmMfaResponse, type SetupErrorCode, type SetupRequest, type SetupResult, type SetupStatusResponse, type SlugAvailabilityCheck, type StandardPageDef, type StandardPageKey, type StartCheckoutInput, type StartCheckoutResult, type StartPaymentMethodSetupInput, type StartRegistrationInput, type StartRegistrationResult, type StoredBundleStem, type StrictModeWarning, type StrictModeWarningCode, type SubscriberContact, type SubscriberContactChange, type SubscriberCorrectionData, type SubscriberCorrectionRecord, type SubscriberCorrectionResult, type SubscriberDetails, type SubscriberErrorCode, type SubscriberIdentityCorrection, type SubscriberIdentityDelta, type SubscriberIdentityValues, type SubscriberPaymentMethodRecord, type SubscriberPaymentMethodReference, type SubscriberPaymentMethodRepository, type SubscriberPaymentMethodSetupData, type SubscriberPaymentMethodSetupMatch, type SubscriberPaymentMethodStatus, type SubscriberRecord, type SubscriberRepository, type Subscription, type SubscriptionBundleRecord, type SubscriptionBundleRepository, type SubscriptionBundleView, type SubscriptionContractFilter, type SubscriptionContractInvoiceSnapshot, type SubscriptionContractParties, type SubscriptionContractPriceSnapshot, type SubscriptionContractRecord, type SubscriptionContractRepository, type SubscriptionContractStatus, type SubscriptionRecord, type SubscriptionRepository, type SubscriptionStatsPort, type SubscriptionStatsSnapshot, type SubscriptionStatus, type SubscriptionUsagePort, type SubscriptionUsageRecord, type SuperAdminProvisioningPort, type SyncDiscoveryResult, type TenantActionDef, type TenantColumnDef, type TenantDto, type TenantListFilter, type TenantPort, type TenantSubscriptionWritePort, type TerminateSubscriptionContractData, type TopPromoCode, type TransactionContext, type TransactionRunner, type UpdateBundleData, type UpdateBundleVersionDraftData, type UpdateCatalogEntryBaseData, type UpdateCatalogEntryI18nData, type UpdateCheckoutOfferData, type UpdateMarketingProjectionData, type UpdateMarketingSettingsData, type UpdatePlanData, type UpdatePlanVersionDraftData, type UpdatePromoCodeData, type UpdatePromoCodeRequest, type UpdatePromotionData, type UpsellOffer, type UpsellOfferResolver, type UpsertCapabilityEntryData, type UpsertFeatureCatalogEntryInput, type UpsertFeatureEntryData, type UpsertPlanInput, type UpsertPlanVersionInput, type UpsertQuotaEntryData, type UpsertResult, type UsageSnapshotPort, type UserAccountLookup, type UserListFilter, type UserManagementPort, type UserPort, type VerifyRegistrationOtpResult, type VersionChange, type VersionChangeDirection, type VersionEditability, type VersionEditableReason, type VersionedEntityBase, applyPromo, assertPersistenceCapabilities, buildActivePlanVersionWhere, buildActiveVersionWhere, buildFeatureRequiresIndex, bundleDraftDefaults, bundleStemDefaults, canonicalJson, classifyBundleVersionDiff, classifyIssuerChange, classifyPlanDiff, collectUnsatisfiedRequires, contractPartiesOf, coverageExcludingSelf, definedFields, diffSettings, formatCustomerNumber, formatErrorMessage, identityCorrectionDelta, isBundleRedundant, isForeignPaymentMethodReferenceError, isPaymentCallbackRejectedError, isPlatformUserExistsError, isVersionEditable, issuerIdentityOf, keepOneRecommended, missingRequiresFor, movedIdentityFields, pickActivePromo, planCatalogSettingsOf, previousUtcDay, promoStatus, promotionOnPrice, readQuotaRecord, readQuotaValue, recordedIssuerIdentity, refuseForeignPaymentMethodReference, resolveBundleAvailability, resolveErrorMessage, sameLegalIdentity, selectChargeableBundles, settingsSubtreeOf, startOfUtcDay, subscriberFromRegistration, subscriberPaymentMethodColumns, toBundleStemRow, toContractLineItemRecord, toPlanRow, toPlanVersionRow, toRunningContractIssuer, toSubscriberCorrectionRecord, toSubscriberPaymentMethodRecord, toSubscriberRecord, toSubscriptionContractRecord };
+export { ACTIVE_SUBSCRIPTION_CONTRACT_STATUSES, AUTH_ERROR_CODES, type ActionKey, type ActivationOrchestrator, type ActivePlanVersionWhere, type ActivePlanVersionWhereWithEndsAt, type ActiveVersionWhere, type ActiveVersionWhereWithEndsAt, type ActorTag, type AdminAccountEntry, type AdminAccountHolder, type AdminActor, type AdminAuditListFilter, type AdminManifest, type AdminResourcesPort, type AdminSubscriberAccount, type AdminSubscriptionListRow, type AdminTenantDetail, type AdminTenantListFilter, type AdminTenantListRow, type AdminTenantStateResult, type AdminUserListFilter, type AdminUserListRow, type AppliedSettingsPort, type AppliedSettingsRecord, type AppliedSettingsValues, type ApplyOnboardingSelectionInput, type ApplyOnboardingSelectionResult, type ApprovedCatalogKeys, type AuditActionDef, type AuditEntry, type AuditPort, type AuditQuery, type AuditQueryPort, type AuditStatsPort, type AuditStatsSnapshot, type AuthErrorCode, BILLING_ERROR_CODES, BUNDLE_PRICE_LOOKUP_LIMIT, type BillingCycle, type BillingErrorCode, type BundleAvailabilityState, type BundleCompatibility, type BundleFeatureShape, type BundleListFilter, type BundlePricingOverride, type BundleRepository, type BundleRow, type BundleVersionFields, type BundleVersionMutationResult, type BundleVersionRow, CATALOGUE_KEYS, CATALOG_ERROR_CODES, CONTRACT_ERROR_CODES, type CancelSubscriptionBundleData, type CancelSubscriptionInput, type CancelSubscriptionResult, type CancellationNoticePeriods, type CanonicalContractLineItemRow, type CanonicalContractRow, type CanonicalMaintenanceWindowRow, type CanonicalPlanRow, type CanonicalPlanVersionRow, type CanonicalRunningContractRow, type CanonicalSubscriberChargeRow, type CanonicalSubscriberCorrectionRow, type CanonicalSubscriberPaymentMethodRow, type CanonicalSubscriberRow, type CanonicalSubscriptionBundleRow, type CapabilityCatalogEntryRow, type CapabilityCodeStatus, type CapabilityKey, type CapabilityKind, type CatalogEntryFilter, type CatalogEntryI18n, type CatalogEntryI18nFields, type CatalogEntryRepository, type CatalogErrorCode, type ChangeDirection, type CheckoutOfferFilter, type CheckoutOfferLineItem, type CheckoutOfferLineItemKind, type CheckoutOfferPriceBreakdown, type CheckoutOfferPromoCodeSnapshot, type CheckoutOfferPromotionSnapshot, type CheckoutOfferRepository, type CheckoutOfferRow, type CheckoutOfferSelection, type CheckoutOfferSelectionUpdate, type CheckoutOfferStatus, type CleanupResult, type CliUserRow, type ComponentKey, type ConfiguratorCatalog, type ConfiguratorMarketingProvider, type ConfiguratorModel, type ConfiguratorPlanMarketing, type ConfiguratorPlanVersionRow, type ConfiguratorPriceBreakdown, type ConfiguratorSourcesLookup, type ConfirmedPaymentMethod, type ContractErrorCode, type ContractIssuerParty, type ContractLineItemKind, type ContractLineItemRecord, type ContractSubscriberParty, type CreateBundleData, type CreateBundleVersionDraftData, type CreateCheckoutOfferData, type CreateMarketingProjectionData, type CreatePlanData, type CreatePlanVersionDraftData, type CreatePromoCodeData, type CreatePromoCodeRequest, type CreatePromotionData, type CreateSubscriberData, type CreateSubscriptionBundleData, type CreateSubscriptionContractData, type CreateSuperAdminCliInput, type CreateTenantInput, type DiffResult, type DiscoveredCapability, type DiscoveredFeature, type DiscoveredQuota, type DiscoveredQuotaPolicy, type DiscoveryCodeStatus, type DiscoverySnapshot, type DiscoveryStatus, ERROR_MESSAGES_DE, ERROR_MESSAGES_EN, type EffectiveLimitsSnapshot, type EmailPort, type ErrorMessageParams, FEATURE_NOT_LICENSED, type FeatureCatalogEntryRow, type FeatureDef, type FeatureKey, type FeatureNotLicensedBody, type FeatureRequiresIndex, type FeatureTier, type FeatureUiMeta, type FeatureUiRegistry, type FinalActivationResult, type FirstTimeCustomerCheck, ForeignPaymentMethodReferenceError, type ImmediatePlanChangeInput, type InvoiceLineItemSnapshot, type IssuerCorrectionFault, type IssuerIdentityChange, type KpiCardDef, type KpiDisplayHint, LEGAL_IDENTITY_FIELDS, type LegalIdentity, type LegalIdentityField, MAINTENANCE_CAPABILITY, MAINTENANCE_ERROR_CODES, MAINTENANCE_MESSAGE_MAX_LENGTH, MAINTENANCE_STATE_MAX_AGE_SECONDS, MARKETING_PRIORITY_MAX, MARKETING_PRIORITY_MIN, type MaintenanceErrorCode, type MaintenanceLockView, type MaintenanceNotificationPort, type MaintenanceOverview, type MaintenanceStatusView, type MaintenanceUnlockView, type MaintenanceWindowChanges, type MaintenanceWindowEvent, type MaintenanceWindowPort, type MaintenanceWindowRecord, type MaintenanceWindowStage, type MaintenanceWindowStatus, type MaintenanceWindowView, type ManifestAccessPort, type ManifestContribution, type MarketingProjectionFilter, type MarketingProjectionRepository, type MarketingProjectionRow, type MarketingSettingsRepository, type MarketingSettingsRow, type MarketingTargetType, type MarketingTopFeature, type MaskedPaymentMethod, type MfaPort, type NewContractLineItemData, type NewMaintenanceWindow, type NewSettingsChange, type NewSubscriberCharge, type NewSubscriberDetails, type NewSubscriptionContractData, OTP_RATE_LIMIT_MAX_SENDS, OTP_RATE_LIMIT_WINDOW_MINUTES, OTP_TTL_MINUTES, OTP_VERIFY_MAX_ATTEMPTS, type OnboardingPromoRedemption, type OnboardingSelectionRequest, type OnboardingSelectionResponse, PASSWORD_RESET_TTL_MINUTES, PAYMENT_ERROR_CODES, PAYMENT_METHOD_TYPES, PENDING_CHECKOUT_TTL_DAYS, PENDING_EMAIL_TTL_HOURS, PENDING_ONBOARDING_TTL_DAYS, PLATFORM_ERROR_CODES, PROMO_ERROR_CODES, type Paginated, type PartyAddress, type PasswordHasher, type PasswordResetCliResult, PaymentCallbackRejectedError, type PaymentErrorCode, type PaymentEventClaim, type PaymentEventLog, type PaymentGateway, type PaymentGatewayCallback, type PaymentGatewayEvent, type PaymentMethodHolder, type PaymentMethodSetupSession, type PaymentMethodSetupSubject, type PaymentMethodType, type PendingRegistration, type PendingRegistrationCreateInput, type PendingRegistrationRepository, type PendingRegistrationSnapshot, type PendingRegistrationUpdateInput, type PersistenceCapabilities, PersistenceCapabilityError, type PersistenceClassRef, type PersistenceInjectionToken, type PersistenceProvider, type PlanCatalog, type PlanCatalogApp, type PlanCatalogImportReport, type PlanCatalogImportSink, type PlanCatalogIssuer, type PlanCatalogIssuerCorrection, type PlanCatalogLookup, type PlanCatalogMarketing, type PlanCatalogNotifications, type PlanCatalogPaymentAccount, type PlanCatalogPayments, type PlanCatalogReadSink, type PlanCatalogReadSnapshot, type PlanCatalogSettings, type PlanCatalogSubscribers, type PlanCatalogTenantBilling, type PlanDef, type PlanId, type PlanListFilter, type PlanRepository, type PlanRow, type PlanVersion, type PlanVersionFields, type PlanVersionMappingFields, type PlanVersionMutationResult, type PlanVersionRecord, type PlanVersionRepository, type PlanVersionRow, type PlatformErrorBody, type PlatformErrorCode, type PlatformRole, type PlatformUserDto, PlatformUserExistsError, type ProjectPageDef, type PromoCode, type PromoCodeDurationType, type PromoCodeFilter, type PromoCodeHoldRecord, type PromoCodeHoldRepository, type PromoCodeHoldTaken, type PromoCodeRecord, type PromoCodeRedemption, type PromoCodeRedemptionListItem, type PromoCodeRedemptionRecord, type PromoCodeRedemptionRepository, type PromoCodeRedemptionStatus, type PromoCodeRepository, type PromoCodeStatsPort, type PromoCodeStatsSnapshot, type PromoCodeStatus, type PromoCodeValidationLog, type PromoCodeValidationLogRepository, type PromoCodeValidationResult, type PromoCodeValueType, type PromoErrorCode, type PromoPreviewInvalidReason, type PromoPreviewRequest, type PromoPreviewResponse, type PromoPreviewValidResponse, type PromoRevenueDeductionAggregator, type PromoSubscriptionLookup, type PromotionBillingCycle, type PromotionI18n, type PromotionI18nFields, type PromotionOnPrice, type PromotionRepository, type PromotionResult, type PromotionRow, type PromotionStatus, type PromotionTargetType, type PromotionType, type PromotionValue, type PublicBootResponse, type PublicComparisonRow, type PublicMarketingBundle, type PublicMarketingCatalogResponse, type PublicMarketingPlan, type PublicMarketingPromo, type PublicNewPaymentMethods, type PublicSignupPlan, type PublishBundleVersionData, type PublishBundleVersionMeta, type PublishPlanVersionData, type QuotaCatalogEntryRow, type QuotaEnforcementMode, type QuotaKey, type QuotaProvider, REGISTRATION_ERROR_CODES, REGISTRATION_RESUME_TTL_MINUTES, REGISTRATION_STEP_BY_STATUS, type ReassignTenantAdminCliResult, type RecommendablePlan, type RecordSubscriberPaymentMethodData, type RecordSubscriberPaymentMethodOutcome, type RecordSubscriberPaymentMethodResult, type RedeemPromoInTransactionCallback, type RegistrationActivation, type RegistrationAuditContext, type RegistrationAuditEvent, type RegistrationAuditEventType, type RegistrationAuditLogger, type RegistrationBillingDetails, type RegistrationConfigSelection, type RegistrationConfiguratorLookup, type RegistrationErrorCode, type RegistrationOtpDelivery, type RegistrationPromoPreview, type RegistrationResumeDelivery, type RegistrationResumeTokenSigner, type RegistrationStatus, type RegistrationStep, type RequiredCapabilities, type ResolvableErrorBody, type ResumeRegistrationInput, type ResumeRegistrationResult, type ReviewCatalogEntryData, type RlsBypassPort, type RunningContractIssuer, type RunningContractIssuers, SETTINGS_ERROR_CODES, SETUP_ERROR_CODES, SUBSCRIBER_ACCOUNT_CAPABILITY, SUBSCRIBER_ERROR_CODES, type SaaSiCatPersistenceAdapter, type SaaSiCatPersistenceAdminResources, type SaaSiCatPersistenceCatalog, type SaaSiCatPersistenceCore, type SaaSiCatPersistenceEntitlement, type SaaSiCatPersistencePayments, type SaaSiCatPersistencePromo, type SaaSiCatPersistenceTenantBilling, type SaveRegistrationConfigInput, type SaveRegistrationConfigResult, type ScheduledPlanChangeInput, type SelectPlanInput, type SelectPlanResult, type SelectableBundleShape, type SelfServiceBlockedPlans, type SetCatalogEntryReviewData, type SettingsChangeFilter, type SettingsChangeRecord, type SettingsDifference, type SettingsErrorCode, type SetupConfirmMfaRequest, type SetupConfirmMfaResponse, type SetupErrorCode, type SetupRequest, type SetupResult, type SetupStatusResponse, type SlugAvailabilityCheck, type StandardPageDef, type StandardPageKey, type StartCheckoutInput, type StartCheckoutResult, type StartPaymentMethodSetupInput, type StartRegistrationInput, type StartRegistrationResult, type StoredBundleStem, type StrictModeWarning, type StrictModeWarningCode, type SubscriberCharge, type SubscriberChargeOrigin, type SubscriberChargeRecord, type SubscriberChargeSource, type SubscriberContact, type SubscriberContactChange, type SubscriberCorrectionData, type SubscriberCorrectionRecord, type SubscriberCorrectionResult, type SubscriberDetails, type SubscriberErrorCode, type SubscriberIdentityCorrection, type SubscriberIdentityDelta, type SubscriberIdentityValues, type SubscriberLedgerRepository, type SubscriberPaymentMethodRecord, type SubscriberPaymentMethodReference, type SubscriberPaymentMethodRepository, type SubscriberPaymentMethodSetupData, type SubscriberPaymentMethodSetupMatch, type SubscriberPaymentMethodStatus, type SubscriberRecord, type SubscriberRepository, type Subscription, type SubscriptionBundleRecord, type SubscriptionBundleRepository, type SubscriptionBundleView, type SubscriptionContractFilter, type SubscriptionContractInvoiceSnapshot, type SubscriptionContractParties, type SubscriptionContractPriceSnapshot, type SubscriptionContractRecord, type SubscriptionContractRepository, type SubscriptionContractStatus, type SubscriptionRecord, type SubscriptionRepository, type SubscriptionStatsPort, type SubscriptionStatsSnapshot, type SubscriptionStatus, type SubscriptionUsagePort, type SubscriptionUsageRecord, type SuperAdminProvisioningPort, type SupersedeSubscriptionContractData, type SyncDiscoveryResult, type TenantActionDef, type TenantColumnDef, type TenantDto, type TenantListFilter, type TenantPort, type TenantSubscriptionWritePort, type TerminateSubscriptionContractData, type TopPromoCode, type TransactionContext, type TransactionRunner, type UpdateBundleData, type UpdateBundleVersionDraftData, type UpdateCatalogEntryBaseData, type UpdateCatalogEntryI18nData, type UpdateCheckoutOfferData, type UpdateMarketingProjectionData, type UpdateMarketingSettingsData, type UpdatePlanData, type UpdatePlanVersionDraftData, type UpdatePromoCodeData, type UpdatePromoCodeRequest, type UpdatePromotionData, type UpsellOffer, type UpsellOfferResolver, type UpsertCapabilityEntryData, type UpsertFeatureCatalogEntryInput, type UpsertFeatureEntryData, type UpsertPlanInput, type UpsertPlanVersionInput, type UpsertQuotaEntryData, type UpsertResult, type UsageSnapshotPort, type UserAccountLookup, type UserListFilter, type UserManagementPort, type UserPort, type VerifyRegistrationOtpResult, type VersionChange, type VersionChangeDirection, type VersionEditability, type VersionEditableReason, type VersionedEntityBase, applyPromo, assertPersistenceCapabilities, buildActivePlanVersionWhere, buildActiveVersionWhere, buildFeatureRequiresIndex, bundleDraftDefaults, bundleStemDefaults, canonicalJson, classifyBundleVersionDiff, classifyIssuerChange, classifyPlanDiff, collectUnsatisfiedRequires, contractPartiesOf, coverageExcludingSelf, definedFields, diffSettings, formatCustomerNumber, formatErrorMessage, identityCorrectionDelta, isBundleRedundant, isForeignPaymentMethodReferenceError, isMaintenanceAnnouncementLapsed, isMaintenanceOverrun, isPaymentCallbackRejectedError, isPlatformUserExistsError, isVersionEditable, issuerIdentityOf, keepOneRecommended, maintenanceRetryAfterSeconds, maintenanceStatusOf, maintenanceWindowStatusOf, maintenanceWindowViewOf, missingRequiresFor, movedIdentityFields, parseZonedInstant, pickActivePromo, planCatalogSettingsOf, previousUtcDay, promoStatus, promotionOnPrice, readQuotaRecord, readQuotaValue, recordedIssuerIdentity, refuseForeignPaymentMethodReference, resolveBundleAvailability, resolveErrorMessage, sameLegalIdentity, selectChargeableBundles, settingsSubtreeOf, startOfUtcDay, subscriberChargeColumns, subscriberFromRegistration, subscriberPaymentMethodColumns, toBundleStemRow, toContractLineItemRecord, toMaintenanceWindowRecord, toPlanRow, toPlanVersionRow, toRunningContractIssuer, toSubscriberChargeRecord, toSubscriberCorrectionRecord, toSubscriberPaymentMethodRecord, toSubscriberRecord, toSubscriptionBundleRecord, toSubscriptionContractRecord };