@saasicat/nest 0.19.0 → 0.22.0

package/dist/admin/index.js

@@ -25,7 +25,7 @@ import {
   SuperAdminGuard,
   SuspendTenantDto,
   buildAdminStatsController
-} from "../chunk-7JIHG53V.js";
+} from "../chunk-SN5UOC43.js";
 import {
   AUDIT_PORT_TOKEN,
   AdminAuditService,
@@ -33,6 +33,7 @@ import {
   RLS_BYPASS_PORT_TOKEN
 } from "../chunk-E56W4U2P.js";
 import "../chunk-YSC46BGM.js";
+import "../chunk-EBJJNTW6.js";
 import "../chunk-SABTXESR.js";
 import "../chunk-SHUYVCID.js";
 export {

package/dist/{aggregation-o0LMenvl.d.ts → aggregation-DP5zfKbU.d.ts}

@@ -16,7 +16,7 @@ interface PlanVersionSnapshot {
 }
 /**
  * Snapshot of an active SubscriptionBundle booking (P11.7.3 +
- * SPEC_V2 §11.1 M6 Pack 2e). Resolved by the EntitlementService from the
+ *). Resolved by the EntitlementService from the
  * `subscription_bundles` junction + BundleRepository.findVersionById and
  * passed to `aggregateLimits`.
  *
@@ -158,7 +158,7 @@ declare class EntitlementService {
     enforceLimit<T>(input: EnforceLimitInput<T>): Promise<T>;
     /**
      * Plan fallback for TRIAL/PENDING_SALES: returns the PlanVersion active
-     * as of `asOf` (SPEC_V2 §4.2). If the repo does not implement
+     * as of `asOf`. If the repo does not implement
      * `findActive`, we fall back to `findLatestLive` (backward compat for
      * adapters without `validFrom` columns).
      */
@@ -172,7 +172,7 @@ declare class EntitlementService {
  * point in time. Active = `canceledEffectiveAt === null` or
  * `canceledEffectiveAt > now`.
  *
- * Spec: SPEC_V2 §11.1 M6 Pack 2e + P11.7.3.
+ * Spec:
  */
 declare function filterActiveSubscriptionBundles(bundles: readonly SubscriptionBundleSnapshot[], now: Date): SubscriptionBundleSnapshot[];
 /**

package/dist/{aggregation-SKfXu09x.d.cts → aggregation-mZ7WZROK.d.cts}

@@ -16,7 +16,7 @@ interface PlanVersionSnapshot {
 }
 /**
  * Snapshot of an active SubscriptionBundle booking (P11.7.3 +
- * SPEC_V2 §11.1 M6 Pack 2e). Resolved by the EntitlementService from the
+ *). Resolved by the EntitlementService from the
  * `subscription_bundles` junction + BundleRepository.findVersionById and
  * passed to `aggregateLimits`.
  *
@@ -158,7 +158,7 @@ declare class EntitlementService {
     enforceLimit<T>(input: EnforceLimitInput<T>): Promise<T>;
     /**
      * Plan fallback for TRIAL/PENDING_SALES: returns the PlanVersion active
-     * as of `asOf` (SPEC_V2 §4.2). If the repo does not implement
+     * as of `asOf`. If the repo does not implement
      * `findActive`, we fall back to `findLatestLive` (backward compat for
      * adapters without `validFrom` columns).
      */
@@ -172,7 +172,7 @@ declare class EntitlementService {
  * point in time. Active = `canceledEffectiveAt === null` or
  * `canceledEffectiveAt > now`.
  *
- * Spec: SPEC_V2 §11.1 M6 Pack 2e + P11.7.3.
+ * Spec:
  */
 declare function filterActiveSubscriptionBundles(bundles: readonly SubscriptionBundleSnapshot[], now: Date): SubscriptionBundleSnapshot[];
 /**

package/dist/billing/index.d.cts

@@ -4,14 +4,14 @@ import * as _nestjs_common from '@nestjs/common';
 import { CanActivate, ExecutionContext, ArgumentsHost, Type, DynamicModule, ForwardReference, Provider } from '@nestjs/common';
 export { Type as NestType } from '@nestjs/common';
 import { Reflector, BaseExceptionFilter } from '@nestjs/core';
-import { c as EntitlementService } from '../aggregation-SKfXu09x.cjs';
+import { c as EntitlementService } from '../aggregation-mZ7WZROK.cjs';
 import { P as ProviderSpec } from '../di-CcNeq9v-.cjs';
 import { f as ContractFreezePort, g as ContractFreezeSourcePort } from '../subscription-bundles.module-DCpV-Pb5.cjs';
 export { A as AUDIT_CONTEXT_RESOLVER_TOKEN, a as AuditContextResolver, b as AuthGuardList, C as CONTRACT_FREEZE_PORT_TOKEN, c as CONTRACT_FREEZE_PROJECT_KEY_TOKEN, d as CONTRACT_FREEZE_SOURCE_PORT_TOKEN, e as ContractFreezeBundleSnapshot, D as DuePendingPlanChange, P as PENDING_PLAN_QUERY_PORT_TOKEN, h as PendingPlanQueryPort, S as SELF_SERVICE_BLOCKED_BUNDLES_TOKEN, i as SELF_SERVICE_BLOCKED_PLANS_TOKEN, j as SUBSCRIPTION_USAGE_PORT_TOKEN, k as SUBSCRIPTION_WRITE_PORT_TOKEN, l as SelfServiceBlockedBundles, m as SelfServiceBlockedPlans, n as SubscriptionBundleControllerOptions, o as SubscriptionBundleModule, p as SubscriptionBundleModuleOptions, T as TENANT_AUTH_GUARDS_TOKEN, q as TENANT_ID_RESOLVER_TOKEN, r as TRIAL_PROJECTION_PORT_TOKEN, s as TenantBillingModule, t as TenantBillingModuleOptions, u as TenantIdResolver, v as TrialProjectionInput, w as TrialProjectionPort, U as USAGE_SNAPSHOT_PORT_TOKEN, x as USER_EMAIL_RESOLVER_TOKEN, y as USER_ID_RESOLVER_TOKEN, z as UserEmailResolver, B as UserIdResolver } from '../subscription-bundles.module-DCpV-Pb5.cjs';
-export { A as AddBundleToSubscriptionInput, B as BundlePreviewSnapshot, C as CancelBundleFromSubscriptionInput, a as CancelSubscriptionDto, b as ChangePlanDto, c as CompleteOnboardingSubscriptionDto, d as ComposedTenantAuthGuard, L as LimitsCheckRow, P as PendingPlanMaterializationService, e as PlanChangeContext, f as PlanChangePreviewDto, g as PlanChangePreviewIssue, h as PlanChangePreviewService, i as PlanChangeType, j as PlanSnapshotDto, k as PreviewPlanChangeDto, l as ProrationDto, m as ProrationInput, R as RedundantFeatureHint, S as SubscriptionBundleAddPreviewDto, n as SubscriptionBundleCancelPreviewDto, o as SubscriptionBundleConfig, p as SubscriptionBundlePreviewContext, q as SubscriptionBundlePreviewIssue, r as SubscriptionBundlePreviewService, s as SubscriptionBundlesService, T as TenantAdminGuard, t as TenantBillingController, U as UsageResponse, u as addMonths, v as computeProration, w as resolveBundleCancelEffectiveAt, x as resolveBundlePriceNet } from '../tenant-billing.controller-m42YQ_Ei.cjs';
+export { A as AddBundleToSubscriptionInput, B as BundlePreviewSnapshot, C as CancelBundleFromSubscriptionInput, a as CancelSubscriptionDto, b as ChangePlanDto, c as CompleteOnboardingSubscriptionDto, d as ComposedTenantAuthGuard, L as LimitsCheckRow, P as PendingPlanMaterializationService, e as PlanChangeContext, f as PlanChangePreviewDto, g as PlanChangePreviewIssue, h as PlanChangePreviewService, i as PlanChangeType, j as PlanSnapshotDto, k as PreviewPlanChangeDto, l as ProrationDto, m as ProrationInput, R as RedundantFeatureHint, S as SubscriptionBundleAddPreviewDto, n as SubscriptionBundleCancelPreviewDto, o as SubscriptionBundleConfig, p as SubscriptionBundlePreviewContext, q as SubscriptionBundlePreviewIssue, r as SubscriptionBundlePreviewService, s as SubscriptionBundlesService, T as TenantAdminGuard, t as TenantBillingController, U as UsageResponse, u as addMonths, v as computeProration, w as resolveBundleCancelEffectiveAt, x as resolveBundlePriceNet } from '../tenant-billing.controller-DubP6-Md.cjs';
 import { S as SubscriptionContractService } from '../subscription-contract.service--cm47ZJJ.cjs';
 import '../plan-resolution-CFCoUkrE.cjs';
-import '../service-DPZ2W1E-.cjs';
+import '../service-D48clObR.cjs';
 import '../admin-audit.service-9IqXMlZm.cjs';
 
 /**
@@ -197,10 +197,11 @@ declare class FeatureGuard implements CanActivate {
     constructor(reflector: Reflector, entitlements: EntitlementService, config?: FeatureGuardConfig | null, upsellResolver?: UpsellOfferResolver | null);
     canActivate(context: ExecutionContext): Promise<boolean>;
     /**
-     * Upsell response (#36): with a registered `UpsellOfferResolver` the 403
-     * becomes machine-readable (`FeatureNotLicensedBody`), so consumer UIs can
-     * render a purchase offer. Without a resolver the body carries the same
-     * `code` but no offers.
+     * Upsell response (#36): the 403 body is always the full
+     * `FeatureNotLicensedBody`, so a consumer that matches on `code` can read
+     * `featureKey`/`offers` unconditionally. Without a registered
+     * `UpsellOfferResolver` there is simply nothing to offer — `offers` is
+     * empty, the same degradation a failing resolver produces.
      *
      * Deliberately 403 + `code` field instead of 402 — rationale in
      * `@saasicat/types` upsell.types.ts (402 is reserved / inconsistently
@@ -303,7 +304,7 @@ interface PlanCatalogModuleOptions {
     currency: string;
     vatRate: number;
     /**
-     * App-wide marketing configuration (SPEC_V2 §6.5) — including the
+     * App-wide marketing configuration — including the
      * `availableLocales` pool. Flows into `PLAN_CATALOG_TOKEN.marketing`
      * and from there into the admin manifest (`project.availableLocales`).
      */
@@ -333,7 +334,7 @@ interface PlanCatalogBuildSettings {
     app?: PlanCatalog['app'];
     currency: string;
     vatRate: number;
-    /** App-wide marketing configuration (SPEC_V2 §6.5). Optional. */
+    /** App-wide marketing configuration. Optional. */
     marketing?: PlanCatalog['marketing'];
 }
 declare function buildPlanCatalogFromSnapshot(settings: PlanCatalogBuildSettings, snapshot: PlanCatalogReadSnapshot): PlanCatalog;
@@ -466,7 +467,7 @@ interface PlanResponseEntry {
     popular: boolean;
     quotas: Record<string, number>;
     features: string[];
-    /** SPEC_V2 §11.1 M6 — optional, present if a MarketingProjection exists. */
+    /** — optional, present if a MarketingProjection exists. */
     marketing?: MarketingFields;
 }
 interface PublicBundleEntry {
@@ -499,7 +500,7 @@ declare class PublicCatalogController {
     listPlans(lang?: string, localeParam?: string): Promise<PlanResponseEntry[]>;
     listFeatureRegistry(): Promise<FeatureUiRegistry>;
     /**
-     * SPEC_V2 §11.1 M6 Pack 2c — public catalog endpoint for bundles
+     * — public catalog endpoint for bundles
      * (stem list with live versions). If a `MarketingProjection` with
      * `targetType=BUNDLE` + matching locale exists, it is merged in.
      */
@@ -519,7 +520,7 @@ interface PublicCatalogModuleOptions {
     /** Required: consumer-specific FeatureUiRegistry. */
     featureUiRegistry: FeatureUiRegistry;
     /**
-     * SPEC_V2 §11.1 M6 Pack 2c — app identity (e.g. "clubapp"). Used
+     * — app identity (e.g. "clubapp"). Used
      * for marketing lookups + bundle filters.
      * Optional; if omitted, the new endpoints return empty lists.
      */

package/dist/billing/index.d.ts

@@ -4,14 +4,14 @@ import * as _nestjs_common from '@nestjs/common';
 import { CanActivate, ExecutionContext, ArgumentsHost, Type, DynamicModule, ForwardReference, Provider } from '@nestjs/common';
 export { Type as NestType } from '@nestjs/common';
 import { Reflector, BaseExceptionFilter } from '@nestjs/core';
-import { c as EntitlementService } from '../aggregation-o0LMenvl.js';
+import { c as EntitlementService } from '../aggregation-DP5zfKbU.js';
 import { P as ProviderSpec } from '../di-CcNeq9v-.js';
 import { f as ContractFreezePort, g as ContractFreezeSourcePort } from '../subscription-bundles.module-BQmoozm5.js';
 export { A as AUDIT_CONTEXT_RESOLVER_TOKEN, a as AuditContextResolver, b as AuthGuardList, C as CONTRACT_FREEZE_PORT_TOKEN, c as CONTRACT_FREEZE_PROJECT_KEY_TOKEN, d as CONTRACT_FREEZE_SOURCE_PORT_TOKEN, e as ContractFreezeBundleSnapshot, D as DuePendingPlanChange, P as PENDING_PLAN_QUERY_PORT_TOKEN, h as PendingPlanQueryPort, S as SELF_SERVICE_BLOCKED_BUNDLES_TOKEN, i as SELF_SERVICE_BLOCKED_PLANS_TOKEN, j as SUBSCRIPTION_USAGE_PORT_TOKEN, k as SUBSCRIPTION_WRITE_PORT_TOKEN, l as SelfServiceBlockedBundles, m as SelfServiceBlockedPlans, n as SubscriptionBundleControllerOptions, o as SubscriptionBundleModule, p as SubscriptionBundleModuleOptions, T as TENANT_AUTH_GUARDS_TOKEN, q as TENANT_ID_RESOLVER_TOKEN, r as TRIAL_PROJECTION_PORT_TOKEN, s as TenantBillingModule, t as TenantBillingModuleOptions, u as TenantIdResolver, v as TrialProjectionInput, w as TrialProjectionPort, U as USAGE_SNAPSHOT_PORT_TOKEN, x as USER_EMAIL_RESOLVER_TOKEN, y as USER_ID_RESOLVER_TOKEN, z as UserEmailResolver, B as UserIdResolver } from '../subscription-bundles.module-BQmoozm5.js';
-export { A as AddBundleToSubscriptionInput, B as BundlePreviewSnapshot, C as CancelBundleFromSubscriptionInput, a as CancelSubscriptionDto, b as ChangePlanDto, c as CompleteOnboardingSubscriptionDto, d as ComposedTenantAuthGuard, L as LimitsCheckRow, P as PendingPlanMaterializationService, e as PlanChangeContext, f as PlanChangePreviewDto, g as PlanChangePreviewIssue, h as PlanChangePreviewService, i as PlanChangeType, j as PlanSnapshotDto, k as PreviewPlanChangeDto, l as ProrationDto, m as ProrationInput, R as RedundantFeatureHint, S as SubscriptionBundleAddPreviewDto, n as SubscriptionBundleCancelPreviewDto, o as SubscriptionBundleConfig, p as SubscriptionBundlePreviewContext, q as SubscriptionBundlePreviewIssue, r as SubscriptionBundlePreviewService, s as SubscriptionBundlesService, T as TenantAdminGuard, t as TenantBillingController, U as UsageResponse, u as addMonths, v as computeProration, w as resolveBundleCancelEffectiveAt, x as resolveBundlePriceNet } from '../tenant-billing.controller-b1G1yB09.js';
+export { A as AddBundleToSubscriptionInput, B as BundlePreviewSnapshot, C as CancelBundleFromSubscriptionInput, a as CancelSubscriptionDto, b as ChangePlanDto, c as CompleteOnboardingSubscriptionDto, d as ComposedTenantAuthGuard, L as LimitsCheckRow, P as PendingPlanMaterializationService, e as PlanChangeContext, f as PlanChangePreviewDto, g as PlanChangePreviewIssue, h as PlanChangePreviewService, i as PlanChangeType, j as PlanSnapshotDto, k as PreviewPlanChangeDto, l as ProrationDto, m as ProrationInput, R as RedundantFeatureHint, S as SubscriptionBundleAddPreviewDto, n as SubscriptionBundleCancelPreviewDto, o as SubscriptionBundleConfig, p as SubscriptionBundlePreviewContext, q as SubscriptionBundlePreviewIssue, r as SubscriptionBundlePreviewService, s as SubscriptionBundlesService, T as TenantAdminGuard, t as TenantBillingController, U as UsageResponse, u as addMonths, v as computeProration, w as resolveBundleCancelEffectiveAt, x as resolveBundlePriceNet } from '../tenant-billing.controller-7o4ObzGs.js';
 import { S as SubscriptionContractService } from '../subscription-contract.service--cm47ZJJ.js';
 import '../plan-resolution-CFCoUkrE.js';
-import '../service-DPZ2W1E-.js';
+import '../service-D48clObR.js';
 import '../admin-audit.service-9IqXMlZm.js';
 
 /**
@@ -197,10 +197,11 @@ declare class FeatureGuard implements CanActivate {
     constructor(reflector: Reflector, entitlements: EntitlementService, config?: FeatureGuardConfig | null, upsellResolver?: UpsellOfferResolver | null);
     canActivate(context: ExecutionContext): Promise<boolean>;
     /**
-     * Upsell response (#36): with a registered `UpsellOfferResolver` the 403
-     * becomes machine-readable (`FeatureNotLicensedBody`), so consumer UIs can
-     * render a purchase offer. Without a resolver the body carries the same
-     * `code` but no offers.
+     * Upsell response (#36): the 403 body is always the full
+     * `FeatureNotLicensedBody`, so a consumer that matches on `code` can read
+     * `featureKey`/`offers` unconditionally. Without a registered
+     * `UpsellOfferResolver` there is simply nothing to offer — `offers` is
+     * empty, the same degradation a failing resolver produces.
      *
      * Deliberately 403 + `code` field instead of 402 — rationale in
      * `@saasicat/types` upsell.types.ts (402 is reserved / inconsistently
@@ -303,7 +304,7 @@ interface PlanCatalogModuleOptions {
     currency: string;
     vatRate: number;
     /**
-     * App-wide marketing configuration (SPEC_V2 §6.5) — including the
+     * App-wide marketing configuration — including the
      * `availableLocales` pool. Flows into `PLAN_CATALOG_TOKEN.marketing`
      * and from there into the admin manifest (`project.availableLocales`).
      */
@@ -333,7 +334,7 @@ interface PlanCatalogBuildSettings {
     app?: PlanCatalog['app'];
     currency: string;
     vatRate: number;
-    /** App-wide marketing configuration (SPEC_V2 §6.5). Optional. */
+    /** App-wide marketing configuration. Optional. */
     marketing?: PlanCatalog['marketing'];
 }
 declare function buildPlanCatalogFromSnapshot(settings: PlanCatalogBuildSettings, snapshot: PlanCatalogReadSnapshot): PlanCatalog;
@@ -466,7 +467,7 @@ interface PlanResponseEntry {
     popular: boolean;
     quotas: Record<string, number>;
     features: string[];
-    /** SPEC_V2 §11.1 M6 — optional, present if a MarketingProjection exists. */
+    /** — optional, present if a MarketingProjection exists. */
     marketing?: MarketingFields;
 }
 interface PublicBundleEntry {
@@ -499,7 +500,7 @@ declare class PublicCatalogController {
     listPlans(lang?: string, localeParam?: string): Promise<PlanResponseEntry[]>;
     listFeatureRegistry(): Promise<FeatureUiRegistry>;
     /**
-     * SPEC_V2 §11.1 M6 Pack 2c — public catalog endpoint for bundles
+     * — public catalog endpoint for bundles
      * (stem list with live versions). If a `MarketingProjection` with
      * `targetType=BUNDLE` + matching locale exists, it is merged in.
      */
@@ -519,7 +520,7 @@ interface PublicCatalogModuleOptions {
     /** Required: consumer-specific FeatureUiRegistry. */
     featureUiRegistry: FeatureUiRegistry;
     /**
-     * SPEC_V2 §11.1 M6 Pack 2c — app identity (e.g. "clubapp"). Used
+     * — app identity (e.g. "clubapp"). Used
      * for marketing lookups + bundle filters.
      * Optional; if omitted, the new endpoints return empty lists.
      */

package/dist/billing/index.js

@@ -58,8 +58,8 @@ import {
   periodEndWithMinLead,
   resolveBundleCancelEffectiveAt,
   resolveBundlePriceNet
-} from "../chunk-I77VS3YH.js";
-import "../chunk-QLJHIIOY.js";
+} from "../chunk-UO64MK3Q.js";
+import "../chunk-VQQWF7MW.js";
 import "../chunk-B7NRY2LV.js";
 import {
   AUDIT_CONTEXT_RESOLVER_TOKEN,
@@ -81,7 +81,7 @@ import "../chunk-YSC46BGM.js";
 import {
   SUBSCRIPTION_BUNDLE_CONFIG_TOKEN,
   SUBSCRIPTION_BUNDLE_REPOSITORY_TOKEN
-} from "../chunk-F6DCLVBB.js";
+} from "../chunk-NNNXXUPT.js";
 import {
   PLAN_CATALOG_READ_SINK_TOKEN,
   PLAN_CATALOG_TOKEN,
@@ -98,6 +98,7 @@ import {
   isFeaturePlannedOnly
 } from "../chunk-DQKCK7DX.js";
 import "../chunk-NYLON2VC.js";
+import "../chunk-EBJJNTW6.js";
 import "../chunk-WKVBNTYC.js";
 import "../chunk-L4KTQ6CL.js";
 import "../chunk-SABTXESR.js";

package/dist/catalog/index.d.cts

@@ -1,6 +1,6 @@
-export { B as BundlesService, C as CatalogEntriesService, a as CatalogServiceConfig, M as MarketingProjectionsService, b as MarketingSettingsService, P as PlanVersionsService, c as PlansService, d as PromotionsService, e as PublicMarketingCatalogService } from '../plan-versions.service-CUR2Whyr.cjs';
+export { B as BundlesService, C as CatalogEntriesService, a as CatalogServiceConfig, M as MarketingProjectionsService, b as MarketingSettingsService, P as PlanVersionsService, c as PlansService, d as PromotionsService, e as PublicMarketingCatalogService } from '../plan-versions.service-_saKzb50.cjs';
 import { Type, CanActivate } from '@nestjs/common';
-export { C as CatalogControllerConfig, a as CatalogModule, b as CatalogModuleOptions } from '../catalog.module-Dw2Hrbyu.cjs';
+export { C as CatalogControllerConfig, a as CatalogModule, b as CatalogModuleOptions } from '../catalog.module-D-_pQDNA.cjs';
 import { StrictModeWarningCode, StrictModeWarning, DiscoverySnapshot, ApprovedCatalogKeys, DiscoveredQuota, CatalogEntryRepository, PlanVersionRow, BundleVersionRow, DiscoveryStatus, CatalogEntryI18n, PromotionType, PromotionValue, PromotionTargetType, PromotionBillingCycle, PromotionI18n } from '@saasicat/types';
 import '../discovery.scanner-DLgEvuoy.cjs';
 import '@nestjs/core';
@@ -36,7 +36,7 @@ declare function buildPlansController(guards: Array<Type<CanActivate>>): Type;
  */
 declare function buildPlanVersionsController(guards: Array<Type<CanActivate>>): Type;
 
-/** Repository for `plans` (SPEC_V2 §11.1 M6 — Plan master CRUD). */
+/** Repository for `plans` (Plan master CRUD). */
 declare const PLAN_REPOSITORY_TOKEN: unique symbol;
 /** Repository for `bundles` + `bundle_versions`. */
 declare const BUNDLE_REPOSITORY_TOKEN: unique symbol;
@@ -44,12 +44,12 @@ declare const BUNDLE_REPOSITORY_TOKEN: unique symbol;
 declare const MARKETING_PROJECTION_REPOSITORY_TOKEN: unique symbol;
 /**
  * Repository for `capability_catalog_entries`, `feature_catalog_entries`
- * and `quota_catalog_entries` (Discovery review, SPEC_V2 §6.3).
+ * and `quota_catalog_entries` (Discovery review).
  */
 declare const CATALOG_ENTRY_REPOSITORY_TOKEN: unique symbol;
-/** Repository for `promotions` (time-scheduled price campaigns, SPEC_V2 §9a). */
+/** Repository for `promotions` (time-scheduled price campaigns). */
 declare const PROMOTION_REPOSITORY_TOKEN: unique symbol;
-/** Repository for `marketing_settings` (activeLocales, SPEC_V2 §6.5). */
+/** Repository for `marketing_settings` (activeLocales). */
 declare const MARKETING_SETTINGS_REPOSITORY_TOKEN: unique symbol;
 /**
  * Service configuration: current app identity, strict mode.
@@ -105,7 +105,7 @@ declare function validateBundleDraft(draft: {
 }, snapshot: DiscoverySnapshot, knownPlanKeys?: Set<string> | null, marketedOnlyFeatures?: ReadonlySet<string>, approved?: ApprovedCatalogKeys | null): StrictModeWarning[];
 /**
  * Validates a PlanVersion draft definition against the discovery snapshot
- * (SPEC_V2 §8.2 Pack 3a). Returns a (possibly empty) list of
+ *. Returns a (possibly empty) list of
  * warnings.
  *
  * Checked:
@@ -347,7 +347,7 @@ declare class PublishBundleVersionDto {
     allowZeroPrice?: boolean;
     /**
      * Required on publish if the draft carries no `validFrom`
-     * (SPEC_V2 §4.2 + §11.1 M6 Pack 2c, analogous to PublishPlanVersionDto).
+     * (analogous to PublishPlanVersionDto).
      * Service strictly checks > `validFrom` of the predecessor version.
      */
     validFrom?: string | null;
@@ -502,7 +502,7 @@ declare class CreatePlanVersionDraftDto {
     marketed?: boolean;
     changeNote?: string;
     baseVersionId?: string | null;
-    /** Optional in the draft (required at publish). ISO date string. SPEC_V2 §4.2. */
+    /** Optional in the draft (required at publish). ISO date string.. */
     validFrom?: string | null;
     /** Optional; null = unlimited. ISO date string. */
     validUntil?: string | null;
@@ -529,7 +529,7 @@ declare class PublishPlanVersionDto {
     allowZeroPrice?: boolean;
     /**
      * Required at publish (on the DTO or draft). The service strictly checks
-     * `validFrom > predecessor.validFrom`. SPEC_V2 §4.2.
+     * `validFrom > predecessor.validFrom`..
      */
     validFrom?: string | null;
     validUntil?: string | null;

package/dist/catalog/index.d.ts

@@ -1,6 +1,6 @@
-export { B as BundlesService, C as CatalogEntriesService, a as CatalogServiceConfig, M as MarketingProjectionsService, b as MarketingSettingsService, P as PlanVersionsService, c as PlansService, d as PromotionsService, e as PublicMarketingCatalogService } from '../plan-versions.service-BB36Q1bg.js';
+export { B as BundlesService, C as CatalogEntriesService, a as CatalogServiceConfig, M as MarketingProjectionsService, b as MarketingSettingsService, P as PlanVersionsService, c as PlansService, d as PromotionsService, e as PublicMarketingCatalogService } from '../plan-versions.service-B-YoE4SZ.js';
 import { Type, CanActivate } from '@nestjs/common';
-export { C as CatalogControllerConfig, a as CatalogModule, b as CatalogModuleOptions } from '../catalog.module-BKObceo0.js';
+export { C as CatalogControllerConfig, a as CatalogModule, b as CatalogModuleOptions } from '../catalog.module-CQr1FpkI.js';
 import { StrictModeWarningCode, StrictModeWarning, DiscoverySnapshot, ApprovedCatalogKeys, DiscoveredQuota, CatalogEntryRepository, PlanVersionRow, BundleVersionRow, DiscoveryStatus, CatalogEntryI18n, PromotionType, PromotionValue, PromotionTargetType, PromotionBillingCycle, PromotionI18n } from '@saasicat/types';
 import '../discovery.scanner-DLgEvuoy.js';
 import '@nestjs/core';
@@ -36,7 +36,7 @@ declare function buildPlansController(guards: Array<Type<CanActivate>>): Type;
  */
 declare function buildPlanVersionsController(guards: Array<Type<CanActivate>>): Type;
 
-/** Repository for `plans` (SPEC_V2 §11.1 M6 — Plan master CRUD). */
+/** Repository for `plans` (Plan master CRUD). */
 declare const PLAN_REPOSITORY_TOKEN: unique symbol;
 /** Repository for `bundles` + `bundle_versions`. */
 declare const BUNDLE_REPOSITORY_TOKEN: unique symbol;
@@ -44,12 +44,12 @@ declare const BUNDLE_REPOSITORY_TOKEN: unique symbol;
 declare const MARKETING_PROJECTION_REPOSITORY_TOKEN: unique symbol;
 /**
  * Repository for `capability_catalog_entries`, `feature_catalog_entries`
- * and `quota_catalog_entries` (Discovery review, SPEC_V2 §6.3).
+ * and `quota_catalog_entries` (Discovery review).
  */
 declare const CATALOG_ENTRY_REPOSITORY_TOKEN: unique symbol;
-/** Repository for `promotions` (time-scheduled price campaigns, SPEC_V2 §9a). */
+/** Repository for `promotions` (time-scheduled price campaigns). */
 declare const PROMOTION_REPOSITORY_TOKEN: unique symbol;
-/** Repository for `marketing_settings` (activeLocales, SPEC_V2 §6.5). */
+/** Repository for `marketing_settings` (activeLocales). */
 declare const MARKETING_SETTINGS_REPOSITORY_TOKEN: unique symbol;
 /**
  * Service configuration: current app identity, strict mode.
@@ -105,7 +105,7 @@ declare function validateBundleDraft(draft: {
 }, snapshot: DiscoverySnapshot, knownPlanKeys?: Set<string> | null, marketedOnlyFeatures?: ReadonlySet<string>, approved?: ApprovedCatalogKeys | null): StrictModeWarning[];
 /**
  * Validates a PlanVersion draft definition against the discovery snapshot
- * (SPEC_V2 §8.2 Pack 3a). Returns a (possibly empty) list of
+ *. Returns a (possibly empty) list of
  * warnings.
  *
  * Checked:
@@ -347,7 +347,7 @@ declare class PublishBundleVersionDto {
     allowZeroPrice?: boolean;
     /**
      * Required on publish if the draft carries no `validFrom`
-     * (SPEC_V2 §4.2 + §11.1 M6 Pack 2c, analogous to PublishPlanVersionDto).
+     * (analogous to PublishPlanVersionDto).
      * Service strictly checks > `validFrom` of the predecessor version.
      */
     validFrom?: string | null;
@@ -502,7 +502,7 @@ declare class CreatePlanVersionDraftDto {
     marketed?: boolean;
     changeNote?: string;
     baseVersionId?: string | null;
-    /** Optional in the draft (required at publish). ISO date string. SPEC_V2 §4.2. */
+    /** Optional in the draft (required at publish). ISO date string.. */
     validFrom?: string | null;
     /** Optional; null = unlimited. ISO date string. */
     validUntil?: string | null;
@@ -529,7 +529,7 @@ declare class PublishPlanVersionDto {
     allowZeroPrice?: boolean;
     /**
      * Required at publish (on the DTO or draft). The service strictly checks
-     * `validFrom > predecessor.validFrom`. SPEC_V2 §4.2.
+     * `validFrom > predecessor.validFrom`..
      */
     validFrom?: string | null;
     validUntil?: string | null;

package/dist/catalog/index.js

@@ -6,7 +6,7 @@ import {
   runSeedGateFromFile,
   seedGateExitCode,
   validateSeedAgainstSnapshot
-} from "../chunk-AFK2IE2L.js";
+} from "../chunk-7ZPFQXHM.js";
 import "../chunk-74SCJ4HF.js";
 import {
   ADVISORY_STRICT_MODE_CODES,
@@ -56,7 +56,7 @@ import {
   quotaApprovalSignature,
   validateBundleDraft,
   validatePlanDraft
-} from "../chunk-LXUBCLRK.js";
+} from "../chunk-7X5MSAIL.js";
 import "../chunk-WPUVJRIN.js";
 import "../chunk-E56W4U2P.js";
 import "../chunk-YSC46BGM.js";

package/dist/{catalog.module-BKObceo0.d.ts → catalog.module-CQr1FpkI.d.ts}

@@ -21,23 +21,23 @@ interface CatalogModuleOptions {
     marketingProjectionRepository?: ProviderSpec<MarketingProjectionRepository>;
     /**
      * Adapter for `capability_/feature_/quota_catalog_entries` persistence
-     * (discovery review, SPEC_V2 §6.3). Optional — if omitted,
+     * (discovery review). Optional — if omitted,
      * CatalogEntriesService + controller are not registered.
      */
     catalogEntryRepository?: ProviderSpec<CatalogEntryRepository>;
     /**
-     * Adapter for `promotions` persistence (SPEC_V2 §9a). Optional — if
+     * Adapter for `promotions` persistence. Optional — if
      * omitted, PromotionsService + controller are not registered.
      */
     promotionRepository?: ProviderSpec<PromotionRepository>;
     /**
-     * Adapter for `marketing_settings` persistence (SPEC_V2 §6.5 —
+     * Adapter for `marketing_settings` persistence (
      * `activeLocales`). Optional.
      */
     marketingSettingsRepository?: ProviderSpec<MarketingSettingsRepository>;
     /**
      * Auth-free pricing-page endpoint `GET /public/marketing-catalog`
-     * (SPEC_V2 §9). Registered only when plan-, marketingProjection-
+     *. Registered only when plan-, marketingProjection-
      * and promotionRepository are set. `guards` is usually `[]`.
      */
     publicMarketingCatalog?: {
@@ -47,7 +47,7 @@ interface CatalogModuleOptions {
         vatRate: number;
     };
     /**
-     * SPEC_V2 §11.1 M6 (Pack 1) — adapter for `plans` master-record persistence.
+     * — adapter for `plans` master-record persistence.
      * Optional; if omitted, PlansService + controller are not
      * registered (apps without a need for the plan editor stay unchanged).
      */
@@ -82,7 +82,7 @@ interface CatalogModuleOptions {
      * per feature — the same one passed to `PublicCatalogModule.forRoot`). The
      * discovery auto-sync seeds EMPTY `FeatureCatalogEntry` fields
      * (label/description/icon) from it at boot; SuperAdmin edits stay untouched. This
-     * makes `FeatureCatalogEntry` the SSOT for UI metadata (SPEC_V2 §6.3 / #12).
+     * makes `FeatureCatalogEntry` the SSOT for UI metadata.
      */
     featureUiRegistry?: FeatureUiRegistry;
     /**

package/dist/{catalog.module-Dw2Hrbyu.d.cts → catalog.module-D-_pQDNA.d.cts}

@@ -21,23 +21,23 @@ interface CatalogModuleOptions {
     marketingProjectionRepository?: ProviderSpec<MarketingProjectionRepository>;
     /**
      * Adapter for `capability_/feature_/quota_catalog_entries` persistence
-     * (discovery review, SPEC_V2 §6.3). Optional — if omitted,
+     * (discovery review). Optional — if omitted,
      * CatalogEntriesService + controller are not registered.
      */
     catalogEntryRepository?: ProviderSpec<CatalogEntryRepository>;
     /**
-     * Adapter for `promotions` persistence (SPEC_V2 §9a). Optional — if
+     * Adapter for `promotions` persistence. Optional — if
      * omitted, PromotionsService + controller are not registered.
      */
     promotionRepository?: ProviderSpec<PromotionRepository>;
     /**
-     * Adapter for `marketing_settings` persistence (SPEC_V2 §6.5 —
+     * Adapter for `marketing_settings` persistence (
      * `activeLocales`). Optional.
      */
     marketingSettingsRepository?: ProviderSpec<MarketingSettingsRepository>;
     /**
      * Auth-free pricing-page endpoint `GET /public/marketing-catalog`
-     * (SPEC_V2 §9). Registered only when plan-, marketingProjection-
+     *. Registered only when plan-, marketingProjection-
      * and promotionRepository are set. `guards` is usually `[]`.
      */
     publicMarketingCatalog?: {
@@ -47,7 +47,7 @@ interface CatalogModuleOptions {
         vatRate: number;
     };
     /**
-     * SPEC_V2 §11.1 M6 (Pack 1) — adapter for `plans` master-record persistence.
+     * — adapter for `plans` master-record persistence.
      * Optional; if omitted, PlansService + controller are not
      * registered (apps without a need for the plan editor stay unchanged).
      */
@@ -82,7 +82,7 @@ interface CatalogModuleOptions {
      * per feature — the same one passed to `PublicCatalogModule.forRoot`). The
      * discovery auto-sync seeds EMPTY `FeatureCatalogEntry` fields
      * (label/description/icon) from it at boot; SuperAdmin edits stay untouched. This
-     * makes `FeatureCatalogEntry` the SSOT for UI metadata (SPEC_V2 §6.3 / #12).
+     * makes `FeatureCatalogEntry` the SSOT for UI metadata.
      */
     featureUiRegistry?: FeatureUiRegistry;
     /**

package/dist/checkout-offer/index.js

@@ -6,7 +6,7 @@ import {
   CreateCheckoutOfferDto,
   UpdateCheckoutOfferDto,
   buildCheckoutOfferController
-} from "../chunk-ORWIGSNN.js";
+} from "../chunk-XTVAFJ3P.js";
 import "../chunk-BSK6YBLI.js";
 import "../chunk-YSC46BGM.js";
 import "../chunk-L4KTQ6CL.js";

package/dist/{chunk-EUU3B6NB.js → chunk-4O6R6ARQ.js}

@@ -8,13 +8,16 @@ import {
   PROMO_SUBSCRIPTION_LOOKUP_TOKEN,
   PROMO_TRANSACTION_RUNNER_TOKEN,
   PromoCodesService
-} from "./chunk-QLJHIIOY.js";
+} from "./chunk-VQQWF7MW.js";
 import {
   AdminAuditService
 } from "./chunk-E56W4U2P.js";
 import {
   SaaSiCatPublicRoute
 } from "./chunk-YSC46BGM.js";
+import {
+  codedError
+} from "./chunk-EBJJNTW6.js";
 import {
   asProvider
 } from "./chunk-SABTXESR.js";
@@ -96,12 +99,15 @@ var IP_WINDOW_MS = 6e4;
 var IP_LIMIT = 20;
 var SESSION_WINDOW_MS = 60 * 6e4;
 var SESSION_LIMIT = 50;
-function rateLimited() {
+function rateLimited(windowMs) {
   return new HttpException({
+    ...codedError(REGISTRATION_ERROR_CODES.RATE_LIMITED, {
+      retryAfterSeconds: Math.ceil(windowMs / 1e3)
+    }),
+    retryAfterSeconds: Math.ceil(windowMs / 1e3),
     valid: false,
     // Superseded by `code` — kept until all consumers read `code`.
-    reason: "RATE_LIMITED",
-    code: REGISTRATION_ERROR_CODES.RATE_LIMITED
+    reason: "RATE_LIMITED"
   }, HttpStatus.TOO_MANY_REQUESTS);
 }
 __name(rateLimited, "rateLimited");
@@ -116,10 +122,10 @@ var PromoCodeRateLimitGuard = class {
     const ipKey = ipFingerprint(req);
     const sessionKey = req.user?.id ?? null;
     if (this.exceeded(this.ipBuckets, ipKey, IP_WINDOW_MS, IP_LIMIT)) {
-      throw rateLimited();
+      throw rateLimited(IP_WINDOW_MS);
     }
     if (sessionKey && this.exceeded(this.sessionBuckets, sessionKey, SESSION_WINDOW_MS, SESSION_LIMIT)) {
-      throw rateLimited();
+      throw rateLimited(SESSION_WINDOW_MS);
     }
     return true;
   }