@saasicat/nest 0.13.0 → 0.15.0

package/dist/platform/index.d.cts

@@ -1,18 +1,21 @@
-import { d as SaasPlatformModuleOptions, e as PlanResolverPort, a as StaticEntitlementService } from '../enforce-quota.interceptor-Dse3jSpU.cjs';
-export { E as EnforceQuotaInterceptor, P as PLAN_RESOLVER_PORT_TOKEN, Q as QUOTA_PROVIDERS_TOKEN, f as STATIC_FEATURE_GUARD_CONFIG_TOKEN, g as SaaSiCatModule, S as SaasPlatformAdapters, h as SaasPlatformAdminResourcesOptions, i as SaasPlatformCatalogOptions, g as SaasPlatformModule, j as SaasPlatformPromoCodesOptions, k as SaasPlatformSubscriptionBundlesOptions, l as SaasPlatformTenantAuthGuards, m as SaasPlatformTenantBillingOptions, n as StaticEntitlementSnapshot, b as StaticFeatureGuard, o as StaticFeatureGuardConfig, c as StaticPlanResolver, T as TenantManifestControllerOptions, p as buildTenantManifestController } from '../enforce-quota.interceptor-Dse3jSpU.cjs';
+import { p as PlanResolverPort } from '../saas-platform.module-D3rUTiho.cjs';
+export { P as PLAN_RESOLVER_PORT_TOKEN, S as SaaSiCatModule, a as SaasPlatformAdapters, b as SaasPlatformAdminResourcesOptions, c as SaasPlatformAdminStatsOptions, d as SaasPlatformCatalogOptions, e as SaasPlatformCheckoutOfferOptions, S as SaasPlatformModule, f as SaasPlatformModuleOptions, g as SaasPlatformPromoCodesOptions, h as SaasPlatformSetupOptions, i as SaasPlatformSubscriptionBundlesOptions, j as SaasPlatformSubscriptionContractOptions, k as SaasPlatformTenantAuthGuards, l as SaasPlatformTenantBillingOptions, m as SetupModule, n as SetupModuleOptions, o as StaticPlanResolver, T as TenantManifestControllerOptions, q as buildTenantManifestController } from '../saas-platform.module-D3rUTiho.cjs';
+export { a as SAASICAT_PUBLIC_ROUTE_KEY, d as SaaSiCatPublicRoute, S as SetupService, f as defineSaaSiCat, i as isSaaSiCatPublicRoute } from '../define-saasicat-CeDBX9ji.cjs';
 import { SubscriptionRepository, UsageSnapshotPort, QuotaProvider } from '@saasicat/types';
-export { A as AdminBypassRlsInterceptor, a as AdminManifestModule, b as AdminManifestModuleOptions, c as AdminManifestService, d as AdminModule, e as AdminModuleOptions, f as AdminStatsModule, g as AdminStatsModuleOptions, h as AdminStatsService, M as MfaGuard, j as MfaService, S as SuperAdminGuard } from '../admin-stats.module-v4SVvWzj.cjs';
+import { S as StaticEntitlementService } from '../enforce-quota.interceptor-DMw-bPyk.cjs';
+export { E as EnforceQuotaInterceptor, Q as QUOTA_PROVIDERS_TOKEN, b as STATIC_FEATURE_GUARD_CONFIG_TOKEN, c as StaticEntitlementSnapshot, a as StaticFeatureGuard, d as StaticFeatureGuardConfig } from '../enforce-quota.interceptor-DMw-bPyk.cjs';
+export { A as AdminBypassRlsInterceptor, a as AdminManifestModule, b as AdminManifestModuleOptions, c as AdminManifestService, d as AdminModule, e as AdminModuleOptions, f as AdminStatsService, M as MfaGuard, h as MfaService, S as SuperAdminGuard } from '../admin-stats.service-HUZIU448.cjs';
 export { A as AdminAuditService } from '../admin-audit.service-9IqXMlZm.cjs';
-export { e as AdminResourcesService } from '../admin-resources.module-BZN_yBFj.cjs';
-export { c as EntitlementService } from '../aggregation-CfI0bOsQ.cjs';
-export { d as ComposedTenantAuthGuard, P as PendingPlanMaterializationService, h as PlanChangePreviewService, r as SubscriptionBundlePreviewService, s as SubscriptionBundlesService, T as TenantAdminGuard, t as TenantBillingController } from '../subscription-bundle-preview.service-BkJXHAeP.cjs';
+export { e as AdminResourcesService, f as AdminStatsModule, g as AdminStatsModuleOptions } from '../admin-resources.module-DGgGSdzN.cjs';
+export { c as EntitlementService } from '../aggregation-SKfXu09x.cjs';
+export { d as ComposedTenantAuthGuard, P as PendingPlanMaterializationService, h as PlanChangePreviewService, r as SubscriptionBundlePreviewService, s as SubscriptionBundlesService, T as TenantAdminGuard, t as TenantBillingController } from '../tenant-billing.controller-CG4CaFUP.cjs';
 export { B as BundlesService, C as CatalogEntriesService, M as MarketingProjectionsService, b as MarketingSettingsService, P as PlanVersionsService, c as PlansService, d as PromotionsService, e as PublicMarketingCatalogService } from '../plan-versions.service-CUR2Whyr.cjs';
 export { c as DiscoveryScanner } from '../discovery.scanner-DLgEvuoy.cjs';
 export { P as PromoCodeRateLimitGuard } from '../rate-limit.guard-dntqAlfZ.cjs';
 export { f as PromoCodesService } from '../service-DX8KbGXl.cjs';
-export { d as SetupModule, e as SetupModuleOptions, S as SetupService } from '../setup.service-BPwJ7My_.cjs';
-export { a as CheckoutOfferModule, b as CheckoutOfferModuleOptions, c as CheckoutOfferService } from '../checkout-offer.module-ZYF5IsDY.cjs';
-export { S as SubscriptionContractModule, a as SubscriptionContractModuleOptions } from '../subscription-contract.module-CG9fPKAr.cjs';
+export { a as CheckoutOfferModule, b as CheckoutOfferModuleOptions } from '../checkout-offer.module-DmlpPevf.cjs';
+export { C as CheckoutOfferService } from '../checkout-offer.service-BX51dljL.cjs';
+export { S as SubscriptionContractModule, a as SubscriptionContractModuleOptions } from '../subscription-contract.module-B2uNvUJL.cjs';
 export { S as SubscriptionContractService } from '../subscription-contract.service--cm47ZJJ.cjs';
 import '@nestjs/common';
 import '../di-CcNeq9v-.cjs';
@@ -23,13 +26,6 @@ import '../subscription-bundles.module-DCpV-Pb5.cjs';
 import '@nestjs/core';
 import 'rxjs';
 
-/**
- * Typed identity helper for the high-level SaaSiCat configuration. It keeps
- * literal types and gives editors one place for completion without adding
- * runtime behavior.
- */
-declare function defineSaaSiCat<const T extends SaasPlatformModuleOptions>(options: T): T;
-
 /**
  * Standard `tenantId → planId` resolver backed by the canonical subscription
  * repository. This removes the identical resolver class most applications
@@ -105,4 +101,4 @@ declare class TenantManifestService {
     getManifest(tenantId: string): Promise<TenantManifest>;
 }
 
-export { PlanResolverPort, QuotaProvidersUsageSnapshot, SaasPlatformModuleOptions, StaticEntitlementService, SubscriptionPlanResolver, type TenantManifest, TenantManifestService, type TenantNavItem, defineSaaSiCat };
+export { PlanResolverPort, QuotaProvidersUsageSnapshot, StaticEntitlementService, SubscriptionPlanResolver, type TenantManifest, TenantManifestService, type TenantNavItem };

package/dist/platform/index.d.ts

@@ -1,18 +1,21 @@
-import { d as SaasPlatformModuleOptions, e as PlanResolverPort, a as StaticEntitlementService } from '../enforce-quota.interceptor-DMEvL-bE.js';
-export { E as EnforceQuotaInterceptor, P as PLAN_RESOLVER_PORT_TOKEN, Q as QUOTA_PROVIDERS_TOKEN, f as STATIC_FEATURE_GUARD_CONFIG_TOKEN, g as SaaSiCatModule, S as SaasPlatformAdapters, h as SaasPlatformAdminResourcesOptions, i as SaasPlatformCatalogOptions, g as SaasPlatformModule, j as SaasPlatformPromoCodesOptions, k as SaasPlatformSubscriptionBundlesOptions, l as SaasPlatformTenantAuthGuards, m as SaasPlatformTenantBillingOptions, n as StaticEntitlementSnapshot, b as StaticFeatureGuard, o as StaticFeatureGuardConfig, c as StaticPlanResolver, T as TenantManifestControllerOptions, p as buildTenantManifestController } from '../enforce-quota.interceptor-DMEvL-bE.js';
+import { p as PlanResolverPort } from '../saas-platform.module-DLhoqKNA.js';
+export { P as PLAN_RESOLVER_PORT_TOKEN, S as SaaSiCatModule, a as SaasPlatformAdapters, b as SaasPlatformAdminResourcesOptions, c as SaasPlatformAdminStatsOptions, d as SaasPlatformCatalogOptions, e as SaasPlatformCheckoutOfferOptions, S as SaasPlatformModule, f as SaasPlatformModuleOptions, g as SaasPlatformPromoCodesOptions, h as SaasPlatformSetupOptions, i as SaasPlatformSubscriptionBundlesOptions, j as SaasPlatformSubscriptionContractOptions, k as SaasPlatformTenantAuthGuards, l as SaasPlatformTenantBillingOptions, m as SetupModule, n as SetupModuleOptions, o as StaticPlanResolver, T as TenantManifestControllerOptions, q as buildTenantManifestController } from '../saas-platform.module-DLhoqKNA.js';
+export { a as SAASICAT_PUBLIC_ROUTE_KEY, d as SaaSiCatPublicRoute, S as SetupService, f as defineSaaSiCat, i as isSaaSiCatPublicRoute } from '../define-saasicat-Rc0rXrYG.js';
 import { SubscriptionRepository, UsageSnapshotPort, QuotaProvider } from '@saasicat/types';
-export { A as AdminBypassRlsInterceptor, a as AdminManifestModule, b as AdminManifestModuleOptions, c as AdminManifestService, d as AdminModule, e as AdminModuleOptions, f as AdminStatsModule, g as AdminStatsModuleOptions, h as AdminStatsService, M as MfaGuard, j as MfaService, S as SuperAdminGuard } from '../admin-stats.module-15ac5KY3.js';
+import { S as StaticEntitlementService } from '../enforce-quota.interceptor-CmbWX39L.js';
+export { E as EnforceQuotaInterceptor, Q as QUOTA_PROVIDERS_TOKEN, b as STATIC_FEATURE_GUARD_CONFIG_TOKEN, c as StaticEntitlementSnapshot, a as StaticFeatureGuard, d as StaticFeatureGuardConfig } from '../enforce-quota.interceptor-CmbWX39L.js';
+export { A as AdminBypassRlsInterceptor, a as AdminManifestModule, b as AdminManifestModuleOptions, c as AdminManifestService, d as AdminModule, e as AdminModuleOptions, f as AdminStatsService, M as MfaGuard, h as MfaService, S as SuperAdminGuard } from '../admin-stats.service-Db2exT_d.js';
 export { A as AdminAuditService } from '../admin-audit.service-9IqXMlZm.js';
-export { e as AdminResourcesService } from '../admin-resources.module-Cms8MY6h.js';
-export { c as EntitlementService } from '../aggregation-BibpEO0t.js';
-export { d as ComposedTenantAuthGuard, P as PendingPlanMaterializationService, h as PlanChangePreviewService, r as SubscriptionBundlePreviewService, s as SubscriptionBundlesService, T as TenantAdminGuard, t as TenantBillingController } from '../subscription-bundle-preview.service-DBbrE_cw.js';
+export { e as AdminResourcesService, f as AdminStatsModule, g as AdminStatsModuleOptions } from '../admin-resources.module-BY5r_1MG.js';
+export { c as EntitlementService } from '../aggregation-o0LMenvl.js';
+export { d as ComposedTenantAuthGuard, P as PendingPlanMaterializationService, h as PlanChangePreviewService, r as SubscriptionBundlePreviewService, s as SubscriptionBundlesService, T as TenantAdminGuard, t as TenantBillingController } from '../tenant-billing.controller-BwZRnJ3q.js';
 export { B as BundlesService, C as CatalogEntriesService, M as MarketingProjectionsService, b as MarketingSettingsService, P as PlanVersionsService, c as PlansService, d as PromotionsService, e as PublicMarketingCatalogService } from '../plan-versions.service-BB36Q1bg.js';
 export { c as DiscoveryScanner } from '../discovery.scanner-DLgEvuoy.js';
 export { P as PromoCodeRateLimitGuard } from '../rate-limit.guard-dntqAlfZ.js';
 export { f as PromoCodesService } from '../service-DX8KbGXl.js';
-export { d as SetupModule, e as SetupModuleOptions, S as SetupService } from '../setup.service-D2mrdDDB.js';
-export { a as CheckoutOfferModule, b as CheckoutOfferModuleOptions, c as CheckoutOfferService } from '../checkout-offer.module-Y0hDOVrq.js';
-export { S as SubscriptionContractModule, a as SubscriptionContractModuleOptions } from '../subscription-contract.module-CVebZzHR.js';
+export { a as CheckoutOfferModule, b as CheckoutOfferModuleOptions } from '../checkout-offer.module-Ca3_TieR.js';
+export { C as CheckoutOfferService } from '../checkout-offer.service-BX51dljL.js';
+export { S as SubscriptionContractModule, a as SubscriptionContractModuleOptions } from '../subscription-contract.module-edyhBr4n.js';
 export { S as SubscriptionContractService } from '../subscription-contract.service--cm47ZJJ.js';
 import '@nestjs/common';
 import '../di-CcNeq9v-.js';
@@ -23,13 +26,6 @@ import '../subscription-bundles.module-BQmoozm5.js';
 import '@nestjs/core';
 import 'rxjs';
 
-/**
- * Typed identity helper for the high-level SaaSiCat configuration. It keeps
- * literal types and gives editors one place for completion without adding
- * runtime behavior.
- */
-declare function defineSaaSiCat<const T extends SaasPlatformModuleOptions>(options: T): T;
-
 /**
  * Standard `tenantId → planId` resolver backed by the canonical subscription
  * repository. This removes the identical resolver class most applications
@@ -105,4 +101,4 @@ declare class TenantManifestService {
     getManifest(tenantId: string): Promise<TenantManifest>;
 }
 
-export { PlanResolverPort, QuotaProvidersUsageSnapshot, SaasPlatformModuleOptions, StaticEntitlementService, SubscriptionPlanResolver, type TenantManifest, TenantManifestService, type TenantNavItem, defineSaaSiCat };
+export { PlanResolverPort, QuotaProvidersUsageSnapshot, StaticEntitlementService, SubscriptionPlanResolver, type TenantManifest, TenantManifestService, type TenantNavItem };

package/dist/platform/index.js

@@ -1,3 +1,6 @@
+import {
+  defineSaaSiCat
+} from "../chunk-EWPF57AG.js";
 import {
   EnforceQuotaInterceptor,
   PLAN_RESOLVER_PORT_TOKEN,
@@ -5,34 +8,30 @@ import {
   QuotaProvidersUsageSnapshot,
   STATIC_FEATURE_GUARD_CONFIG_TOKEN,
   SaasPlatformModule,
+  SetupModule,
+  SetupService,
   StaticEntitlementService,
   StaticFeatureGuard,
   StaticPlanResolver,
   SubscriptionPlanResolver,
   TenantManifestService,
   buildTenantManifestController
-} from "../chunk-J3BMIR4W.js";
-import {
-  SetupModule,
-  SetupService
-} from "../chunk-WJ6BMDL3.js";
+} from "../chunk-YITTE646.js";
 import {
   PromoCodeRateLimitGuard
-} from "../chunk-IRWZC3GC.js";
-import {
-  AdminStatsModule,
-  AdminStatsService
-} from "../chunk-LZHLGUQI.js";
+} from "../chunk-GLLCB4BP.js";
 import {
   AdminBypassRlsInterceptor,
   AdminManifestModule,
   AdminManifestService,
   AdminModule,
   AdminResourcesService,
+  AdminStatsModule,
+  AdminStatsService,
   MfaGuard,
   MfaService,
   SuperAdminGuard
-} from "../chunk-FVT7KTUI.js";
+} from "../chunk-PLJEAUFU.js";
 import {
   ComposedTenantAuthGuard,
   PendingPlanMaterializationService,
@@ -41,14 +40,14 @@ import {
   SubscriptionBundlesService,
   TenantAdminGuard,
   TenantBillingController
-} from "../chunk-DVFPKVLO.js";
+} from "../chunk-5KH2O4SF.js";
 import {
   PromoCodesService
 } from "../chunk-E7AJ42AB.js";
 import {
   SubscriptionContractModule,
   SubscriptionContractService
-} from "../chunk-2PNX2QL2.js";
+} from "../chunk-32EMXPU2.js";
 import {
   BundlesService,
   CatalogEntriesService,
@@ -58,7 +57,7 @@ import {
   PlansService,
   PromotionsService,
   PublicMarketingCatalogService
-} from "../chunk-33TP26MR.js";
+} from "../chunk-P3DP6GJE.js";
 import "../chunk-WPUVJRIN.js";
 import {
   AdminAuditService
@@ -66,30 +65,27 @@ import {
 import {
   CheckoutOfferModule,
   CheckoutOfferService
-} from "../chunk-HBFU5AN3.js";
+} from "../chunk-GJBXOCRZ.js";
 import "../chunk-MDIZUVIK.js";
+import {
+  SAASICAT_PUBLIC_ROUTE_KEY,
+  SaaSiCatPublicRoute,
+  isSaaSiCatPublicRoute
+} from "../chunk-YSC46BGM.js";
 import "../chunk-V34AA7C7.js";
 import {
   DiscoveryScanner
 } from "../chunk-Z3FWN3HJ.js";
 import {
   EntitlementService
-} from "../chunk-2WNM5THV.js";
+} from "../chunk-EXOLOJFZ.js";
 import "../chunk-R2QOSVAA.js";
 import "../chunk-NYLON2VC.js";
 import "../chunk-WKVBNTYC.js";
 import "../chunk-L4KTQ6CL.js";
 import "../chunk-SABTXESR.js";
 import "../chunk-L4SUWH5B.js";
-import {
-  __name
-} from "../chunk-SHUYVCID.js";
-
-// src/platform/define-saasicat.ts
-function defineSaaSiCat(options) {
-  return options;
-}
-__name(defineSaaSiCat, "defineSaaSiCat");
+import "../chunk-SHUYVCID.js";
 export {
   AdminAuditService,
   AdminBypassRlsInterceptor,
@@ -122,8 +118,10 @@ export {
   PublicMarketingCatalogService,
   QUOTA_PROVIDERS_TOKEN,
   QuotaProvidersUsageSnapshot,
+  SAASICAT_PUBLIC_ROUTE_KEY,
   STATIC_FEATURE_GUARD_CONFIG_TOKEN,
   SaasPlatformModule as SaaSiCatModule,
+  SaaSiCatPublicRoute,
   SaasPlatformModule,
   SetupModule,
   SetupService,
@@ -140,5 +138,6 @@ export {
   TenantBillingController,
   TenantManifestService,
   buildTenantManifestController,
-  defineSaaSiCat
+  defineSaaSiCat,
+  isSaaSiCatPublicRoute
 };

package/dist/promo/index.js

@@ -10,7 +10,7 @@ import {
   buildPromoCodeAdminController,
   hashIp,
   ipFingerprint
-} from "../chunk-IRWZC3GC.js";
+} from "../chunk-GLLCB4BP.js";
 import {
   PROMO_CODE_REDEMPTION_REPOSITORY_TOKEN,
   PROMO_CODE_REPOSITORY_TOKEN,
@@ -28,6 +28,7 @@ import {
   computeRegularStartsAt
 } from "../chunk-E7AJ42AB.js";
 import "../chunk-E56W4U2P.js";
+import "../chunk-YSC46BGM.js";
 import {
   computeIncludedVat,
   grossFromNet,

package/dist/{enforce-quota.interceptor-Dse3jSpU.d.cts → saas-platform.module-D3rUTiho.d.cts}

@@ -1,14 +1,36 @@
-import { Type, CanActivate, DynamicModule, ForwardReference, FactoryProvider, Provider, ExecutionContext, NestInterceptor, CallHandler } from '@nestjs/common';
-import { PlanCatalog, SaasicatPersistenceAdapter, MfaPort, AuditPort, RlsBypassPort, PlanCatalogReadSink, SubscriptionRepository, PlanVersionRepository, TransactionRunner, QuotaProvider, FeatureUiRegistry, SubscriptionUsagePort, UsageSnapshotPort, TenantSubscriptionWritePort, AdminResourcesPort, FirstTimeCustomerCheck } from '@saasicat/types';
+import { Type, DynamicModule, ForwardReference, Provider, CanActivate, FactoryProvider } from '@nestjs/common';
+import { SuperAdminProvisioningPort, PlanCatalog, SaasicatPersistenceAdapter, MfaPort, AuditPort, RlsBypassPort, PlanCatalogReadSink, SubscriptionRepository, PlanVersionRepository, TransactionRunner, QuotaProvider, FeatureUiRegistry, SubscriptionUsagePort, UsageSnapshotPort, TenantSubscriptionWritePort, AdminResourcesPort, FirstTimeCustomerCheck } from '@saasicat/types';
 import { P as ProviderSpec } from './di-CcNeq9v-.cjs';
-import { b as AdminManifestConfig, d as AdminResourcesModuleOptions } from './admin-resources.module-BZN_yBFj.cjs';
+import { b as AdminManifestConfig, d as AdminResourcesModuleOptions, g as AdminStatsModuleOptions } from './admin-resources.module-DGgGSdzN.cjs';
 import { E as EntitlementResolutionConfig } from './plan-resolution-CFCoUkrE.cjs';
+import { a as SubscriptionContractModuleOptions } from './subscription-contract.module-B2uNvUJL.cjs';
 import { a as PromoCodesModuleOptions } from './module-CSN8j8Tp.cjs';
 import { b as DiscoveryAppInfo } from './discovery.scanner-DLgEvuoy.cjs';
 import { b as CatalogModuleOptions } from './catalog.module-Dw2Hrbyu.cjs';
+import { b as CheckoutOfferModuleOptions } from './checkout-offer.module-DmlpPevf.cjs';
 import { t as TenantBillingModuleOptions, p as SubscriptionBundleModuleOptions, n as SubscriptionBundleControllerOptions } from './subscription-bundles.module-DCpV-Pb5.cjs';
-import { Reflector } from '@nestjs/core';
-import { Observable } from 'rxjs';
+
+interface SetupModuleOptions {
+    /**
+     * App adapter for the existence check + creation of the first SUPER_ADMIN. A
+     * full `UserManagementPort` adapter (CLI) satisfies this contract as well, so
+     * it can be reused.
+     */
+    provisioningPort: ProviderSpec<SuperAdminProvisioningPort>;
+    /** Env-var name of the setup token. Default `SETUP_TOKEN`. */
+    setupTokenEnvVar?: string;
+    /** Authenticator issuer for MFA enrollment. Default `SuperAdmin`. */
+    mfaIssuer?: string;
+    /** Modules that provide dependencies used by `provisioningPort`. */
+    imports?: Array<Type<unknown> | DynamicModule | Promise<DynamicModule> | ForwardReference>;
+    /** Additional providers registered in the DynamicModule itself. */
+    extraProviders?: Provider[];
+    /** Register the module globally — default `false`. */
+    global?: boolean;
+}
+declare class SetupModule {
+    static forRoot(options: SetupModuleOptions): DynamicModule;
+}
 
 declare const PLAN_RESOLVER_PORT_TOKEN: unique symbol;
 interface PlanResolverPort {
@@ -135,6 +157,27 @@ interface SaasPlatformPromoCodesOptions extends Omit<PromoCodesModuleOptions, 'p
      */
     adminController?: false;
 }
+/** First-run setup, deriving the provisioning adapter from persistence by default. */
+interface SaasPlatformSetupOptions extends Omit<SetupModuleOptions, 'provisioningPort' | 'global'> {
+    provisioningPort?: SetupModuleOptions['provisioningPort'];
+}
+/** Admin dashboard statistics; the audit port can come from persistence. */
+interface SaasPlatformAdminStatsOptions extends Omit<AdminStatsModuleOptions, 'auditStatsPort' | 'global'> {
+    auditStatsPort?: AdminStatsModuleOptions['auditStatsPort'];
+}
+/**
+ * Public checkout-offer flow. Catalog repositories default to the persistence
+ * bundle, while the app still supplies its checkout-offer repository.
+ */
+interface SaasPlatformCheckoutOfferOptions extends Omit<CheckoutOfferModuleOptions, 'bundleRepository' | 'planRepository' | 'catalogEntryRepository' | 'global'> {
+    bundleRepository?: CheckoutOfferModuleOptions['bundleRepository'];
+    planRepository?: CheckoutOfferModuleOptions['planRepository'];
+    catalogEntryRepository?: CheckoutOfferModuleOptions['catalogEntryRepository'];
+}
+/** Subscription-contract service, deriving its repository from persistence by default. */
+interface SaasPlatformSubscriptionContractOptions extends Omit<SubscriptionContractModuleOptions, 'subscriptionContractRepository' | 'global'> {
+    subscriptionContractRepository?: SubscriptionContractModuleOptions['subscriptionContractRepository'];
+}
 interface SaasPlatformModuleOptions {
     /**
      * Plan catalog. Either as an already-loaded object (quickstart, comes
@@ -219,6 +262,8 @@ interface SaasPlatformModuleOptions {
      * factory.
      */
     adminManifestConfig?: AdminManifestConfig | Pick<FactoryProvider<AdminManifestConfig>, 'useFactory' | 'inject'>;
+    /** Providers required by `adminManifestConfig` when it uses a factory. */
+    adminManifestExtraProviders?: Provider[];
     /**
      * Infer manifest capabilities for platform endpoints mounted by this
      * module. Default `true`; set `false` only when the app owns the complete
@@ -276,6 +321,21 @@ interface SaasPlatformModuleOptions {
      * without the public preview endpoint; pass an object to enable preview.
      */
     promoCodes?: false | true | SaasPlatformPromoCodesOptions;
+    /**
+     * First-run SuperAdmin setup. `true` uses
+     * `persistence.core.superAdminProvisioning`; an object customizes it or
+     * supplies an app-specific provisioning adapter.
+     */
+    setup?: false | true | SaasPlatformSetupOptions;
+    /** SuperAdmin dashboard statistics with app-specific subscription/promo ports. */
+    adminStats?: false | SaasPlatformAdminStatsOptions;
+    /** Public checkout-offer flow; catalog repositories reuse `persistence.catalog`. */
+    checkoutOffer?: false | SaasPlatformCheckoutOfferOptions;
+    /**
+     * Subscription-contract service. `true` reuses
+     * `persistence.entitlement.subscriptionContractRepository`.
+     */
+    subscriptionContract?: false | true | SaasPlatformSubscriptionContractOptions;
     /**
      * Enable the tenant manifest — the app UI gets a filtered manifest per
      * tenant with features, quotas and visible navigation. Requires that
@@ -308,9 +368,9 @@ interface SaasPlatformModuleOptions {
     globalFeatureGuard?: boolean;
 }
 /**
- * Bundles PlanCatalog + Discovery + Admin + AdminManifest (+ optionally
- * Entitlement) into a single `forRoot({...})` call. Reduces AppModule
- * boilerplate and eliminates the ordering trap.
+ * Bundles the complete standard SaaSiCat backend stack into a single
+ * `forRoot({...})` call. Reduces AppModule boilerplate and eliminates the
+ * ordering trap.
  *
  * Quickstart path (Prisma + PostgreSQL on the canonical schema):
  *
@@ -330,57 +390,4 @@ declare class SaasPlatformModule {
     static forRoot(options: SaasPlatformModuleOptions): DynamicModule;
 }
 
-interface StaticEntitlementSnapshot {
-    planId: string | null;
-    features: readonly string[];
-    /** quotaKey → limit (`-1` = unlimited). */
-    quotas: Readonly<Record<string, number>>;
-}
-declare class StaticEntitlementService {
-    private readonly catalog;
-    private readonly resolver;
-    constructor(catalog: PlanCatalog, resolver: PlanResolverPort);
-    /**
-     * Returns the effective features + quotas of a tenant from the
-     * plan catalog. When the plan is missing: an empty snapshot (no feature,
-     * all quotas at 0).
-     */
-    snapshot(tenantId: string): Promise<StaticEntitlementSnapshot>;
-    /** Convenience helper for tests / synchronous checks in the UI manifest. */
-    hasFeature(tenantId: string, featureKey: string): Promise<boolean>;
-    quotaLimit(tenantId: string, quotaKey: string): Promise<number | null>;
-    private findPlan;
-}
-
-declare const STATIC_FEATURE_GUARD_CONFIG_TOKEN: unique symbol;
-interface StaticFeatureGuardConfig {
-    /**
-     * Resolver for the user role (e.g. `(user) => user.platformRole`).
-     * SUPER_ADMIN gets a bypass.
-     */
-    userRoleResolver?: (user: unknown) => string | undefined;
-    /**
-     * Resolver for the tenant ID from the request. Default:
-     * `request.tenantId ?? request.user?.tenantId`.
-     */
-    tenantIdResolver?: (request: unknown) => string | undefined;
-}
-declare class StaticFeatureGuard implements CanActivate {
-    private readonly reflector;
-    private readonly entitlements;
-    private readonly config;
-    constructor(reflector: Reflector, entitlements: StaticEntitlementService, config?: StaticFeatureGuardConfig | null);
-    canActivate(context: ExecutionContext): Promise<boolean>;
-}
-
-declare const QUOTA_PROVIDERS_TOKEN: unique symbol;
-declare class EnforceQuotaInterceptor implements NestInterceptor {
-    private readonly reflector;
-    private readonly entitlements;
-    private readonly providers;
-    constructor(reflector: Reflector, entitlements: StaticEntitlementService, providers?: ReadonlyArray<QuotaProvider> | null);
-    intercept(context: ExecutionContext, next: CallHandler): Observable<unknown>;
-    private check;
-}
-
-export { EnforceQuotaInterceptor as E, PLAN_RESOLVER_PORT_TOKEN as P, QUOTA_PROVIDERS_TOKEN as Q, type SaasPlatformAdapters as S, type TenantManifestControllerOptions as T, StaticEntitlementService as a, StaticFeatureGuard as b, StaticPlanResolver as c, type SaasPlatformModuleOptions as d, type PlanResolverPort as e, STATIC_FEATURE_GUARD_CONFIG_TOKEN as f, SaasPlatformModule as g, type SaasPlatformAdminResourcesOptions as h, type SaasPlatformCatalogOptions as i, type SaasPlatformPromoCodesOptions as j, type SaasPlatformSubscriptionBundlesOptions as k, type SaasPlatformTenantAuthGuards as l, type SaasPlatformTenantBillingOptions as m, type StaticEntitlementSnapshot as n, type StaticFeatureGuardConfig as o, buildTenantManifestController as p };
+export { PLAN_RESOLVER_PORT_TOKEN as P, SaasPlatformModule as S, type TenantManifestControllerOptions as T, type SaasPlatformAdapters as a, type SaasPlatformAdminResourcesOptions as b, type SaasPlatformAdminStatsOptions as c, type SaasPlatformCatalogOptions as d, type SaasPlatformCheckoutOfferOptions as e, type SaasPlatformModuleOptions as f, type SaasPlatformPromoCodesOptions as g, type SaasPlatformSetupOptions as h, type SaasPlatformSubscriptionBundlesOptions as i, type SaasPlatformSubscriptionContractOptions as j, type SaasPlatformTenantAuthGuards as k, type SaasPlatformTenantBillingOptions as l, SetupModule as m, type SetupModuleOptions as n, StaticPlanResolver as o, type PlanResolverPort as p, buildTenantManifestController as q };

package/dist/{enforce-quota.interceptor-DMEvL-bE.d.ts → saas-platform.module-DLhoqKNA.d.ts}

@@ -1,14 +1,36 @@
-import { Type, CanActivate, DynamicModule, ForwardReference, FactoryProvider, Provider, ExecutionContext, NestInterceptor, CallHandler } from '@nestjs/common';
-import { PlanCatalog, SaasicatPersistenceAdapter, MfaPort, AuditPort, RlsBypassPort, PlanCatalogReadSink, SubscriptionRepository, PlanVersionRepository, TransactionRunner, QuotaProvider, FeatureUiRegistry, SubscriptionUsagePort, UsageSnapshotPort, TenantSubscriptionWritePort, AdminResourcesPort, FirstTimeCustomerCheck } from '@saasicat/types';
+import { Type, DynamicModule, ForwardReference, Provider, CanActivate, FactoryProvider } from '@nestjs/common';
+import { SuperAdminProvisioningPort, PlanCatalog, SaasicatPersistenceAdapter, MfaPort, AuditPort, RlsBypassPort, PlanCatalogReadSink, SubscriptionRepository, PlanVersionRepository, TransactionRunner, QuotaProvider, FeatureUiRegistry, SubscriptionUsagePort, UsageSnapshotPort, TenantSubscriptionWritePort, AdminResourcesPort, FirstTimeCustomerCheck } from '@saasicat/types';
 import { P as ProviderSpec } from './di-CcNeq9v-.js';
-import { b as AdminManifestConfig, d as AdminResourcesModuleOptions } from './admin-resources.module-Cms8MY6h.js';
+import { b as AdminManifestConfig, d as AdminResourcesModuleOptions, g as AdminStatsModuleOptions } from './admin-resources.module-BY5r_1MG.js';
 import { E as EntitlementResolutionConfig } from './plan-resolution-CFCoUkrE.js';
+import { a as SubscriptionContractModuleOptions } from './subscription-contract.module-edyhBr4n.js';
 import { a as PromoCodesModuleOptions } from './module-DgYJur6f.js';
 import { b as DiscoveryAppInfo } from './discovery.scanner-DLgEvuoy.js';
 import { b as CatalogModuleOptions } from './catalog.module-BKObceo0.js';
+import { b as CheckoutOfferModuleOptions } from './checkout-offer.module-Ca3_TieR.js';
 import { t as TenantBillingModuleOptions, p as SubscriptionBundleModuleOptions, n as SubscriptionBundleControllerOptions } from './subscription-bundles.module-BQmoozm5.js';
-import { Reflector } from '@nestjs/core';
-import { Observable } from 'rxjs';
+
+interface SetupModuleOptions {
+    /**
+     * App adapter for the existence check + creation of the first SUPER_ADMIN. A
+     * full `UserManagementPort` adapter (CLI) satisfies this contract as well, so
+     * it can be reused.
+     */
+    provisioningPort: ProviderSpec<SuperAdminProvisioningPort>;
+    /** Env-var name of the setup token. Default `SETUP_TOKEN`. */
+    setupTokenEnvVar?: string;
+    /** Authenticator issuer for MFA enrollment. Default `SuperAdmin`. */
+    mfaIssuer?: string;
+    /** Modules that provide dependencies used by `provisioningPort`. */
+    imports?: Array<Type<unknown> | DynamicModule | Promise<DynamicModule> | ForwardReference>;
+    /** Additional providers registered in the DynamicModule itself. */
+    extraProviders?: Provider[];
+    /** Register the module globally — default `false`. */
+    global?: boolean;
+}
+declare class SetupModule {
+    static forRoot(options: SetupModuleOptions): DynamicModule;
+}
 
 declare const PLAN_RESOLVER_PORT_TOKEN: unique symbol;
 interface PlanResolverPort {
@@ -135,6 +157,27 @@ interface SaasPlatformPromoCodesOptions extends Omit<PromoCodesModuleOptions, 'p
      */
     adminController?: false;
 }
+/** First-run setup, deriving the provisioning adapter from persistence by default. */
+interface SaasPlatformSetupOptions extends Omit<SetupModuleOptions, 'provisioningPort' | 'global'> {
+    provisioningPort?: SetupModuleOptions['provisioningPort'];
+}
+/** Admin dashboard statistics; the audit port can come from persistence. */
+interface SaasPlatformAdminStatsOptions extends Omit<AdminStatsModuleOptions, 'auditStatsPort' | 'global'> {
+    auditStatsPort?: AdminStatsModuleOptions['auditStatsPort'];
+}
+/**
+ * Public checkout-offer flow. Catalog repositories default to the persistence
+ * bundle, while the app still supplies its checkout-offer repository.
+ */
+interface SaasPlatformCheckoutOfferOptions extends Omit<CheckoutOfferModuleOptions, 'bundleRepository' | 'planRepository' | 'catalogEntryRepository' | 'global'> {
+    bundleRepository?: CheckoutOfferModuleOptions['bundleRepository'];
+    planRepository?: CheckoutOfferModuleOptions['planRepository'];
+    catalogEntryRepository?: CheckoutOfferModuleOptions['catalogEntryRepository'];
+}
+/** Subscription-contract service, deriving its repository from persistence by default. */
+interface SaasPlatformSubscriptionContractOptions extends Omit<SubscriptionContractModuleOptions, 'subscriptionContractRepository' | 'global'> {
+    subscriptionContractRepository?: SubscriptionContractModuleOptions['subscriptionContractRepository'];
+}
 interface SaasPlatformModuleOptions {
     /**
      * Plan catalog. Either as an already-loaded object (quickstart, comes
@@ -219,6 +262,8 @@ interface SaasPlatformModuleOptions {
      * factory.
      */
     adminManifestConfig?: AdminManifestConfig | Pick<FactoryProvider<AdminManifestConfig>, 'useFactory' | 'inject'>;
+    /** Providers required by `adminManifestConfig` when it uses a factory. */
+    adminManifestExtraProviders?: Provider[];
     /**
      * Infer manifest capabilities for platform endpoints mounted by this
      * module. Default `true`; set `false` only when the app owns the complete
@@ -276,6 +321,21 @@ interface SaasPlatformModuleOptions {
      * without the public preview endpoint; pass an object to enable preview.
      */
     promoCodes?: false | true | SaasPlatformPromoCodesOptions;
+    /**
+     * First-run SuperAdmin setup. `true` uses
+     * `persistence.core.superAdminProvisioning`; an object customizes it or
+     * supplies an app-specific provisioning adapter.
+     */
+    setup?: false | true | SaasPlatformSetupOptions;
+    /** SuperAdmin dashboard statistics with app-specific subscription/promo ports. */
+    adminStats?: false | SaasPlatformAdminStatsOptions;
+    /** Public checkout-offer flow; catalog repositories reuse `persistence.catalog`. */
+    checkoutOffer?: false | SaasPlatformCheckoutOfferOptions;
+    /**
+     * Subscription-contract service. `true` reuses
+     * `persistence.entitlement.subscriptionContractRepository`.
+     */
+    subscriptionContract?: false | true | SaasPlatformSubscriptionContractOptions;
     /**
      * Enable the tenant manifest — the app UI gets a filtered manifest per
      * tenant with features, quotas and visible navigation. Requires that
@@ -308,9 +368,9 @@ interface SaasPlatformModuleOptions {
     globalFeatureGuard?: boolean;
 }
 /**
- * Bundles PlanCatalog + Discovery + Admin + AdminManifest (+ optionally
- * Entitlement) into a single `forRoot({...})` call. Reduces AppModule
- * boilerplate and eliminates the ordering trap.
+ * Bundles the complete standard SaaSiCat backend stack into a single
+ * `forRoot({...})` call. Reduces AppModule boilerplate and eliminates the
+ * ordering trap.
  *
  * Quickstart path (Prisma + PostgreSQL on the canonical schema):
  *
@@ -330,57 +390,4 @@ declare class SaasPlatformModule {
     static forRoot(options: SaasPlatformModuleOptions): DynamicModule;
 }
 
-interface StaticEntitlementSnapshot {
-    planId: string | null;
-    features: readonly string[];
-    /** quotaKey → limit (`-1` = unlimited). */
-    quotas: Readonly<Record<string, number>>;
-}
-declare class StaticEntitlementService {
-    private readonly catalog;
-    private readonly resolver;
-    constructor(catalog: PlanCatalog, resolver: PlanResolverPort);
-    /**
-     * Returns the effective features + quotas of a tenant from the
-     * plan catalog. When the plan is missing: an empty snapshot (no feature,
-     * all quotas at 0).
-     */
-    snapshot(tenantId: string): Promise<StaticEntitlementSnapshot>;
-    /** Convenience helper for tests / synchronous checks in the UI manifest. */
-    hasFeature(tenantId: string, featureKey: string): Promise<boolean>;
-    quotaLimit(tenantId: string, quotaKey: string): Promise<number | null>;
-    private findPlan;
-}
-
-declare const STATIC_FEATURE_GUARD_CONFIG_TOKEN: unique symbol;
-interface StaticFeatureGuardConfig {
-    /**
-     * Resolver for the user role (e.g. `(user) => user.platformRole`).
-     * SUPER_ADMIN gets a bypass.
-     */
-    userRoleResolver?: (user: unknown) => string | undefined;
-    /**
-     * Resolver for the tenant ID from the request. Default:
-     * `request.tenantId ?? request.user?.tenantId`.
-     */
-    tenantIdResolver?: (request: unknown) => string | undefined;
-}
-declare class StaticFeatureGuard implements CanActivate {
-    private readonly reflector;
-    private readonly entitlements;
-    private readonly config;
-    constructor(reflector: Reflector, entitlements: StaticEntitlementService, config?: StaticFeatureGuardConfig | null);
-    canActivate(context: ExecutionContext): Promise<boolean>;
-}
-
-declare const QUOTA_PROVIDERS_TOKEN: unique symbol;
-declare class EnforceQuotaInterceptor implements NestInterceptor {
-    private readonly reflector;
-    private readonly entitlements;
-    private readonly providers;
-    constructor(reflector: Reflector, entitlements: StaticEntitlementService, providers?: ReadonlyArray<QuotaProvider> | null);
-    intercept(context: ExecutionContext, next: CallHandler): Observable<unknown>;
-    private check;
-}
-
-export { EnforceQuotaInterceptor as E, PLAN_RESOLVER_PORT_TOKEN as P, QUOTA_PROVIDERS_TOKEN as Q, type SaasPlatformAdapters as S, type TenantManifestControllerOptions as T, StaticEntitlementService as a, StaticFeatureGuard as b, StaticPlanResolver as c, type SaasPlatformModuleOptions as d, type PlanResolverPort as e, STATIC_FEATURE_GUARD_CONFIG_TOKEN as f, SaasPlatformModule as g, type SaasPlatformAdminResourcesOptions as h, type SaasPlatformCatalogOptions as i, type SaasPlatformPromoCodesOptions as j, type SaasPlatformSubscriptionBundlesOptions as k, type SaasPlatformTenantAuthGuards as l, type SaasPlatformTenantBillingOptions as m, type StaticEntitlementSnapshot as n, type StaticFeatureGuardConfig as o, buildTenantManifestController as p };
+export { PLAN_RESOLVER_PORT_TOKEN as P, SaasPlatformModule as S, type TenantManifestControllerOptions as T, type SaasPlatformAdapters as a, type SaasPlatformAdminResourcesOptions as b, type SaasPlatformAdminStatsOptions as c, type SaasPlatformCatalogOptions as d, type SaasPlatformCheckoutOfferOptions as e, type SaasPlatformModuleOptions as f, type SaasPlatformPromoCodesOptions as g, type SaasPlatformSetupOptions as h, type SaasPlatformSubscriptionBundlesOptions as i, type SaasPlatformSubscriptionContractOptions as j, type SaasPlatformTenantAuthGuards as k, type SaasPlatformTenantBillingOptions as l, SetupModule as m, type SetupModuleOptions as n, StaticPlanResolver as o, type PlanResolverPort as p, buildTenantManifestController as q };

package/dist/subscription-contract/index.d.cts

@@ -1,5 +1,5 @@
 export { C as CreateContractFromOfferOptions, S as SubscriptionContractService, c as contractLineItemToInvoiceLineItem, s as sortContractLineItemsForInvoice, a as subscriptionContractToInvoiceSnapshot } from '../subscription-contract.service--cm47ZJJ.cjs';
-export { S as SubscriptionContractModule, a as SubscriptionContractModuleOptions } from '../subscription-contract.module-CG9fPKAr.cjs';
+export { S as SubscriptionContractModule, a as SubscriptionContractModuleOptions } from '../subscription-contract.module-B2uNvUJL.cjs';
 import '@saasicat/types';
 import '@nestjs/common';
 import '../di-CcNeq9v-.cjs';

package/dist/subscription-contract/index.d.ts

@@ -1,5 +1,5 @@
 export { C as CreateContractFromOfferOptions, S as SubscriptionContractService, c as contractLineItemToInvoiceLineItem, s as sortContractLineItemsForInvoice, a as subscriptionContractToInvoiceSnapshot } from '../subscription-contract.service--cm47ZJJ.js';
-export { S as SubscriptionContractModule, a as SubscriptionContractModuleOptions } from '../subscription-contract.module-CVebZzHR.js';
+export { S as SubscriptionContractModule, a as SubscriptionContractModuleOptions } from '../subscription-contract.module-edyhBr4n.js';
 import '@saasicat/types';
 import '@nestjs/common';
 import '../di-CcNeq9v-.js';

package/dist/subscription-contract/index.js

@@ -4,7 +4,7 @@ import {
   contractLineItemToInvoiceLineItem,
   sortContractLineItemsForInvoice,
   subscriptionContractToInvoiceSnapshot
-} from "../chunk-2PNX2QL2.js";
+} from "../chunk-32EMXPU2.js";
 import "../chunk-MDIZUVIK.js";
 import {
   SUBSCRIPTION_CONTRACT_REPOSITORY_TOKEN