@saasicat/nest 0.2.1 → 0.4.0

package/dist/{discovery.scanner-CUYLKlYT.d.cts → discovery.scanner-DLgEvuoy.d.cts}

@@ -56,4 +56,4 @@ declare class DiscoveryScanner implements OnApplicationBootstrap {
  */
 declare function computeSnapshotHash(snapshot: Omit<DiscoverySnapshot, 'hash'>): string;
 
-export { type DiscoveryAppInfo as D, DISCOVERY_APP_INFO_TOKEN as a, DISCOVERY_SNAPSHOT_PATH_TOKEN as b, DiscoveryScanner as c, computeSnapshotHash as d };
+export { DISCOVERY_APP_INFO_TOKEN as D, DISCOVERY_SNAPSHOT_PATH_TOKEN as a, type DiscoveryAppInfo as b, DiscoveryScanner as c, computeSnapshotHash as d };

package/dist/{discovery.scanner-CUYLKlYT.d.ts → discovery.scanner-DLgEvuoy.d.ts}

@@ -56,4 +56,4 @@ declare class DiscoveryScanner implements OnApplicationBootstrap {
  */
 declare function computeSnapshotHash(snapshot: Omit<DiscoverySnapshot, 'hash'>): string;
 
-export { type DiscoveryAppInfo as D, DISCOVERY_APP_INFO_TOKEN as a, DISCOVERY_SNAPSHOT_PATH_TOKEN as b, DiscoveryScanner as c, computeSnapshotHash as d };
+export { DISCOVERY_APP_INFO_TOKEN as D, DISCOVERY_SNAPSHOT_PATH_TOKEN as a, type DiscoveryAppInfo as b, DiscoveryScanner as c, computeSnapshotHash as d };

package/dist/{saas-platform.module-DT9TnCzk.d.ts → enforce-quota.interceptor-3HmbeHTM.d.ts}

@@ -1,9 +1,11 @@
-import { Type, CanActivate, DynamicModule, ForwardReference, FactoryProvider } from '@nestjs/common';
-import { MfaPort, AuditPort, RlsBypassPort, PlanCatalogReadSink, SubscriptionRepository, PlanVersionRepository, TransactionRunner, PlanCatalog, QuotaProvider } from '@saasicat/types';
+import { Type, CanActivate, DynamicModule, ForwardReference, FactoryProvider, ExecutionContext, NestInterceptor, CallHandler } from '@nestjs/common';
+import { MfaPort, AuditPort, RlsBypassPort, PlanCatalogReadSink, SubscriptionRepository, PlanVersionRepository, TransactionRunner, PlanCatalog, SaasicatPersistenceAdapter, QuotaProvider } from '@saasicat/types';
 import { P as ProviderSpec } from './di-CcNeq9v-.js';
-import { A as AdminManifestConfig } from './admin-manifest.config-DyrQNT7M.js';
-import { D as DiscoveryAppInfo } from './discovery.scanner-CUYLKlYT.js';
+import { a as AdminManifestConfig } from './admin-manifest.config-DxTfZ8-L.js';
+import { b as DiscoveryAppInfo } from './discovery.scanner-DLgEvuoy.js';
 import { E as EntitlementResolutionConfig } from './plan-resolution-CFCoUkrE.js';
+import { Reflector } from '@nestjs/core';
+import { Observable } from 'rxjs';
 
 declare const PLAN_RESOLVER_PORT_TOKEN: unique symbol;
 interface PlanResolverPort {
@@ -75,14 +77,38 @@ interface SaasPlatformAdapters {
 interface SaasPlatformModuleOptions {
     /**
      * Plan catalog. Either as an already-loaded object (quickstart, comes
-     * directly from `loadPlanCatalogFromFile('config/saas.yaml')`) or as a
-     * sink reference in `adapters.planCatalogReadSink` for DB hydration.
+     * directly from `loadPlanCatalogFromFile('config/saas.yaml')`) or via DB
+     * hydration: a sink reference in `adapters.planCatalogReadSink` /
+     * `persistence.planCatalogReadSink` **plus** the `dbCatalog` identity.
      */
     planCatalog?: PlanCatalog;
     /**
-     * Adapter bindings.
+     * App identity for the DB-hydration path — required when `planCatalog`
+     * is omitted. The read sink only loads plans/features (filtered by
+     * `projectKey`); branding, currency and VAT cannot come from the
+     * database and must be supplied here.
      */
-    adapters: SaasPlatformAdapters;
+    dbCatalog?: {
+        projectKey: string;
+        currency: string;
+        vatRate: number;
+        app?: PlanCatalog['app'];
+        marketing?: PlanCatalog['marketing'];
+    };
+    /**
+     * Aggregate persistence bundle from an adapter package (e.g.
+     * `prismaPersistence({ client: PrismaService })` from
+     * `@saasicat/adapter-prisma`). Fills every port the bundle ships;
+     * individual `adapters` entries override bundle slices. The declared
+     * `capabilities` are validated fail-fast against the enabled feature set
+     * (e.g. `entitlement: true` requires transactions + pessimistic locking).
+     */
+    persistence?: SaasicatPersistenceAdapter;
+    /**
+     * Individual adapter bindings. Optional when `persistence` provides the
+     * respective port; explicit entries take precedence over the bundle.
+     */
+    adapters?: SaasPlatformAdapters;
     /**
      * Class-level guards for the platform controllers (`GET /admin/discovery`
      * and `GET /admin/manifest`). REQUIRED — otherwise the platform throws at
@@ -158,23 +184,75 @@ interface SaasPlatformModuleOptions {
  * Entitlement) into a single `forRoot({...})` call. Reduces AppModule
  * boilerplate and eliminates the ordering trap.
  *
- * Quickstart path:
+ * Quickstart path (Prisma + PostgreSQL on the canonical schema):
  *
  * ```ts
  * SaasPlatformModule.forRoot({
  *     planCatalog: loadPlanCatalogFromFile({ path: 'config/saas.yaml' }),
  *     controller: { guards: [JwtAuthGuard] },
  *     imports: [AuthModule],
- *     adapters: {
- *         mfa: PrismaMfaAdapter,           // from @saasicat/prisma
- *         audit: PrismaAuditAdapter,
- *         rlsBypass: AsyncLocalRlsBypassAdapter,
- *     },
+ *     persistence: prismaPersistence({ client: PrismaService }), // @saasicat/adapter-prisma
  * })
  * ```
+ *
+ * Individual `adapters` entries stay supported (custom schema / other ORM)
+ * and override bundle slices field by field.
  */
 declare class SaasPlatformModule {
     static forRoot(options: SaasPlatformModuleOptions): DynamicModule;
 }
 
-export { type PlanResolverPort as P, type SaasPlatformModuleOptions as S, type TenantManifestControllerOptions as T, PLAN_RESOLVER_PORT_TOKEN as a, type SaasPlatformAdapters as b, SaasPlatformModule as c, StaticPlanResolver as d, buildTenantManifestController as e };
+interface StaticEntitlementSnapshot {
+    planId: string | null;
+    features: readonly string[];
+    /** quotaKey → limit (`-1` = unlimited). */
+    quotas: Readonly<Record<string, number>>;
+}
+declare class StaticEntitlementService {
+    private readonly catalog;
+    private readonly resolver;
+    constructor(catalog: PlanCatalog, resolver: PlanResolverPort);
+    /**
+     * Returns the effective features + quotas of a tenant from the
+     * plan catalog. When the plan is missing: an empty snapshot (no feature,
+     * all quotas at 0).
+     */
+    snapshot(tenantId: string): Promise<StaticEntitlementSnapshot>;
+    /** Convenience helper for tests / synchronous checks in the UI manifest. */
+    hasFeature(tenantId: string, featureKey: string): Promise<boolean>;
+    quotaLimit(tenantId: string, quotaKey: string): Promise<number | null>;
+    private findPlan;
+}
+
+declare const STATIC_FEATURE_GUARD_CONFIG_TOKEN: unique symbol;
+interface StaticFeatureGuardConfig {
+    /**
+     * Resolver for the user role (e.g. `(user) => user.platformRole`).
+     * SUPER_ADMIN gets a bypass.
+     */
+    userRoleResolver?: (user: unknown) => string | undefined;
+    /**
+     * Resolver for the tenant ID from the request. Default:
+     * `request.tenantId ?? request.user?.tenantId`.
+     */
+    tenantIdResolver?: (request: unknown) => string | undefined;
+}
+declare class StaticFeatureGuard implements CanActivate {
+    private readonly reflector;
+    private readonly entitlements;
+    private readonly config;
+    constructor(reflector: Reflector, entitlements: StaticEntitlementService, config?: StaticFeatureGuardConfig | null);
+    canActivate(context: ExecutionContext): Promise<boolean>;
+}
+
+declare const QUOTA_PROVIDERS_TOKEN: unique symbol;
+declare class EnforceQuotaInterceptor implements NestInterceptor {
+    private readonly reflector;
+    private readonly entitlements;
+    private readonly providers;
+    constructor(reflector: Reflector, entitlements: StaticEntitlementService, providers?: ReadonlyArray<QuotaProvider> | null);
+    intercept(context: ExecutionContext, next: CallHandler): Observable<unknown>;
+    private check;
+}
+
+export { EnforceQuotaInterceptor as E, PLAN_RESOLVER_PORT_TOKEN as P, QUOTA_PROVIDERS_TOKEN as Q, StaticEntitlementService as S, type TenantManifestControllerOptions as T, type PlanResolverPort as a, STATIC_FEATURE_GUARD_CONFIG_TOKEN as b, type SaasPlatformAdapters as c, SaasPlatformModule as d, type SaasPlatformModuleOptions as e, type StaticEntitlementSnapshot as f, StaticFeatureGuard as g, type StaticFeatureGuardConfig as h, StaticPlanResolver as i, buildTenantManifestController as j };

package/dist/{saas-platform.module-CgZ2omgg.d.cts → enforce-quota.interceptor-HmdZFg41.d.cts}

@@ -1,9 +1,11 @@
-import { Type, CanActivate, DynamicModule, ForwardReference, FactoryProvider } from '@nestjs/common';
-import { MfaPort, AuditPort, RlsBypassPort, PlanCatalogReadSink, SubscriptionRepository, PlanVersionRepository, TransactionRunner, PlanCatalog, QuotaProvider } from '@saasicat/types';
+import { Type, CanActivate, DynamicModule, ForwardReference, FactoryProvider, ExecutionContext, NestInterceptor, CallHandler } from '@nestjs/common';
+import { MfaPort, AuditPort, RlsBypassPort, PlanCatalogReadSink, SubscriptionRepository, PlanVersionRepository, TransactionRunner, PlanCatalog, SaasicatPersistenceAdapter, QuotaProvider } from '@saasicat/types';
 import { P as ProviderSpec } from './di-CcNeq9v-.cjs';
-import { A as AdminManifestConfig } from './admin-manifest.config-DyrQNT7M.cjs';
-import { D as DiscoveryAppInfo } from './discovery.scanner-CUYLKlYT.cjs';
+import { a as AdminManifestConfig } from './admin-manifest.config-DxTfZ8-L.cjs';
+import { b as DiscoveryAppInfo } from './discovery.scanner-DLgEvuoy.cjs';
 import { E as EntitlementResolutionConfig } from './plan-resolution-CFCoUkrE.cjs';
+import { Reflector } from '@nestjs/core';
+import { Observable } from 'rxjs';
 
 declare const PLAN_RESOLVER_PORT_TOKEN: unique symbol;
 interface PlanResolverPort {
@@ -75,14 +77,38 @@ interface SaasPlatformAdapters {
 interface SaasPlatformModuleOptions {
     /**
      * Plan catalog. Either as an already-loaded object (quickstart, comes
-     * directly from `loadPlanCatalogFromFile('config/saas.yaml')`) or as a
-     * sink reference in `adapters.planCatalogReadSink` for DB hydration.
+     * directly from `loadPlanCatalogFromFile('config/saas.yaml')`) or via DB
+     * hydration: a sink reference in `adapters.planCatalogReadSink` /
+     * `persistence.planCatalogReadSink` **plus** the `dbCatalog` identity.
      */
     planCatalog?: PlanCatalog;
     /**
-     * Adapter bindings.
+     * App identity for the DB-hydration path — required when `planCatalog`
+     * is omitted. The read sink only loads plans/features (filtered by
+     * `projectKey`); branding, currency and VAT cannot come from the
+     * database and must be supplied here.
      */
-    adapters: SaasPlatformAdapters;
+    dbCatalog?: {
+        projectKey: string;
+        currency: string;
+        vatRate: number;
+        app?: PlanCatalog['app'];
+        marketing?: PlanCatalog['marketing'];
+    };
+    /**
+     * Aggregate persistence bundle from an adapter package (e.g.
+     * `prismaPersistence({ client: PrismaService })` from
+     * `@saasicat/adapter-prisma`). Fills every port the bundle ships;
+     * individual `adapters` entries override bundle slices. The declared
+     * `capabilities` are validated fail-fast against the enabled feature set
+     * (e.g. `entitlement: true` requires transactions + pessimistic locking).
+     */
+    persistence?: SaasicatPersistenceAdapter;
+    /**
+     * Individual adapter bindings. Optional when `persistence` provides the
+     * respective port; explicit entries take precedence over the bundle.
+     */
+    adapters?: SaasPlatformAdapters;
     /**
      * Class-level guards for the platform controllers (`GET /admin/discovery`
      * and `GET /admin/manifest`). REQUIRED — otherwise the platform throws at
@@ -158,23 +184,75 @@ interface SaasPlatformModuleOptions {
  * Entitlement) into a single `forRoot({...})` call. Reduces AppModule
  * boilerplate and eliminates the ordering trap.
  *
- * Quickstart path:
+ * Quickstart path (Prisma + PostgreSQL on the canonical schema):
  *
  * ```ts
  * SaasPlatformModule.forRoot({
  *     planCatalog: loadPlanCatalogFromFile({ path: 'config/saas.yaml' }),
  *     controller: { guards: [JwtAuthGuard] },
  *     imports: [AuthModule],
- *     adapters: {
- *         mfa: PrismaMfaAdapter,           // from @saasicat/prisma
- *         audit: PrismaAuditAdapter,
- *         rlsBypass: AsyncLocalRlsBypassAdapter,
- *     },
+ *     persistence: prismaPersistence({ client: PrismaService }), // @saasicat/adapter-prisma
  * })
  * ```
+ *
+ * Individual `adapters` entries stay supported (custom schema / other ORM)
+ * and override bundle slices field by field.
  */
 declare class SaasPlatformModule {
     static forRoot(options: SaasPlatformModuleOptions): DynamicModule;
 }
 
-export { type PlanResolverPort as P, type SaasPlatformModuleOptions as S, type TenantManifestControllerOptions as T, PLAN_RESOLVER_PORT_TOKEN as a, type SaasPlatformAdapters as b, SaasPlatformModule as c, StaticPlanResolver as d, buildTenantManifestController as e };
+interface StaticEntitlementSnapshot {
+    planId: string | null;
+    features: readonly string[];
+    /** quotaKey → limit (`-1` = unlimited). */
+    quotas: Readonly<Record<string, number>>;
+}
+declare class StaticEntitlementService {
+    private readonly catalog;
+    private readonly resolver;
+    constructor(catalog: PlanCatalog, resolver: PlanResolverPort);
+    /**
+     * Returns the effective features + quotas of a tenant from the
+     * plan catalog. When the plan is missing: an empty snapshot (no feature,
+     * all quotas at 0).
+     */
+    snapshot(tenantId: string): Promise<StaticEntitlementSnapshot>;
+    /** Convenience helper for tests / synchronous checks in the UI manifest. */
+    hasFeature(tenantId: string, featureKey: string): Promise<boolean>;
+    quotaLimit(tenantId: string, quotaKey: string): Promise<number | null>;
+    private findPlan;
+}
+
+declare const STATIC_FEATURE_GUARD_CONFIG_TOKEN: unique symbol;
+interface StaticFeatureGuardConfig {
+    /**
+     * Resolver for the user role (e.g. `(user) => user.platformRole`).
+     * SUPER_ADMIN gets a bypass.
+     */
+    userRoleResolver?: (user: unknown) => string | undefined;
+    /**
+     * Resolver for the tenant ID from the request. Default:
+     * `request.tenantId ?? request.user?.tenantId`.
+     */
+    tenantIdResolver?: (request: unknown) => string | undefined;
+}
+declare class StaticFeatureGuard implements CanActivate {
+    private readonly reflector;
+    private readonly entitlements;
+    private readonly config;
+    constructor(reflector: Reflector, entitlements: StaticEntitlementService, config?: StaticFeatureGuardConfig | null);
+    canActivate(context: ExecutionContext): Promise<boolean>;
+}
+
+declare const QUOTA_PROVIDERS_TOKEN: unique symbol;
+declare class EnforceQuotaInterceptor implements NestInterceptor {
+    private readonly reflector;
+    private readonly entitlements;
+    private readonly providers;
+    constructor(reflector: Reflector, entitlements: StaticEntitlementService, providers?: ReadonlyArray<QuotaProvider> | null);
+    intercept(context: ExecutionContext, next: CallHandler): Observable<unknown>;
+    private check;
+}
+
+export { EnforceQuotaInterceptor as E, PLAN_RESOLVER_PORT_TOKEN as P, QUOTA_PROVIDERS_TOKEN as Q, StaticEntitlementService as S, type TenantManifestControllerOptions as T, type PlanResolverPort as a, STATIC_FEATURE_GUARD_CONFIG_TOKEN as b, type SaasPlatformAdapters as c, SaasPlatformModule as d, type SaasPlatformModuleOptions as e, type StaticEntitlementSnapshot as f, StaticFeatureGuard as g, type StaticFeatureGuardConfig as h, StaticPlanResolver as i, buildTenantManifestController as j };

package/dist/entitlement/index.cjs

@@ -41,6 +41,7 @@ __export(entitlement_exports, {
   filterPlannedOnlyFeatures: () => filterPlannedOnlyFeatures,
   hasAnyFeature: () => hasAnyFeature,
   hasFeature: () => hasFeature,
+  isLimitExceededError: () => isLimitExceededError,
   resolveEntitlementPlan: () => resolveEntitlementPlan,
   toEffectiveLimitsSnapshot: () => toEffectiveLimitsSnapshot
 });
@@ -304,6 +305,7 @@ function resolveEntitlementPlan(input, config, now) {
 __name(resolveEntitlementPlan, "resolveEntitlementPlan");
 
 // src/entitlement/limit-exceeded-error.ts
+var LIMIT_EXCEEDED = "LIMIT_EXCEEDED";
 var LimitExceededError = class extends Error {
   static {
     __name(this, "LimitExceededError");
@@ -311,11 +313,16 @@ var LimitExceededError = class extends Error {
   dimension;
   max;
   used;
+  code = LIMIT_EXCEEDED;
   constructor(dimension, max, used) {
     super(`Limit f\xFCr ${dimension} erreicht: ${used}/${max}.`), this.dimension = dimension, this.max = max, this.used = used;
     this.name = "LimitExceededError";
   }
 };
+function isLimitExceededError(err) {
+  return err instanceof Error && err.code === LIMIT_EXCEEDED;
+}
+__name(isLimitExceededError, "isLimitExceededError");
 
 // src/entitlement/service.ts
 var import_common2 = require("@nestjs/common");
@@ -800,6 +807,7 @@ EntitlementModule = _ts_decorate3([
   filterPlannedOnlyFeatures,
   hasAnyFeature,
   hasFeature,
+  isLimitExceededError,
   resolveEntitlementPlan,
   toEffectiveLimitsSnapshot
 });

package/dist/entitlement/index.d.cts

@@ -1,4 +1,4 @@
-export { B as BundleVersionSnapshot, a as BusinessTypeVersionSnapshot, C as CustomLimitsShape, E as EffectiveLimits, b as EffectiveLimitsSnapshot, c as EnforceLimitInput, d as EntitlementService, L as LimitExceededError, P as PlanVersionSnapshot, S as SubscriptionBundleSnapshot, e as SubscriptionLimitsInput, f as aggregateBusinessTypeQuotas, g as aggregateContractLineItemEntitlements, h as aggregateLimits, i as aggregateSubscriptionBundleQuotas, j as applyCustomLimits, k as collectBusinessTypeFeatures, l as collectSubscriptionBundleFeatures, m as filterActiveSubscriptionBundles, n as filterPlannedOnlyFeatures, o as hasAnyFeature, p as hasFeature, t as toEffectiveLimitsSnapshot } from '../aggregation-CJ3qQf92.cjs';
+export { B as BundleVersionSnapshot, a as BusinessTypeVersionSnapshot, C as CustomLimitsShape, E as EffectiveLimits, b as EffectiveLimitsSnapshot, c as EnforceLimitInput, d as EntitlementService, P as PlanVersionSnapshot, S as SubscriptionBundleSnapshot, e as SubscriptionLimitsInput, f as aggregateBusinessTypeQuotas, g as aggregateContractLineItemEntitlements, h as aggregateLimits, i as aggregateSubscriptionBundleQuotas, j as applyCustomLimits, k as collectBusinessTypeFeatures, l as collectSubscriptionBundleFeatures, m as filterActiveSubscriptionBundles, n as filterPlannedOnlyFeatures, o as hasAnyFeature, p as hasFeature, t as toEffectiveLimitsSnapshot } from '../aggregation-Bt1i_whS.cjs';
 import { DiscoveredFeature, SubscriptionRepository, PlanVersionRepository, TransactionRunner, SubscriptionContractRepository, SubscriptionBundleRepository, BundleRepository } from '@saasicat/types';
 import { E as EntitlementResolutionConfig } from '../plan-resolution-CFCoUkrE.cjs';
 export { a as EntitlementResolutionInput, r as resolveEntitlementPlan } from '../plan-resolution-CFCoUkrE.cjs';
@@ -24,6 +24,22 @@ declare function buildReplacedByIndex(features: readonly FeatureReplacesSource[]
  */
 declare function expandReplacedFeatures(granted: ReadonlySet<string>, index: ReplacedByIndex): Set<string>;
 
+declare class LimitExceededError extends Error {
+    readonly dimension: string;
+    readonly max: number;
+    readonly used: number;
+    readonly code = "LIMIT_EXCEEDED";
+    constructor(dimension: string, max: number, used: number);
+}
+/**
+ * Realm-safe type guard (checks `code` instead of `instanceof`). The tsup
+ * multi-entry build duplicates this class into every sub-bundle
+ * (platform/billing/entitlement), so an `instanceof` between thrower and
+ * catcher from different entries is false — same hazard the token registry
+ * solves with `Symbol.for` and `isPlatformUserExistsError` solves for types.
+ */
+declare function isLimitExceededError(err: unknown): err is LimitExceededError;
+
 interface EntitlementModuleOptions {
     /** Consumer implementation of the `SubscriptionRepository` interface. */
     subscriptionRepository: ProviderSpec<SubscriptionRepository>;
@@ -57,4 +73,4 @@ declare const PLAN_VERSION_REPOSITORY_TOKEN: unique symbol;
 declare const TRANSACTION_RUNNER_TOKEN: unique symbol;
 declare const ENTITLEMENT_RESOLUTION_CONFIG_TOKEN: unique symbol;
 
-export { ENTITLEMENT_RESOLUTION_CONFIG_TOKEN, EntitlementModule, type EntitlementModuleOptions, EntitlementResolutionConfig, PLAN_VERSION_REPOSITORY_TOKEN, type ReplacedByIndex, SUBSCRIPTION_REPOSITORY_TOKEN, TRANSACTION_RUNNER_TOKEN, buildReplacedByIndex, expandReplacedFeatures };
+export { ENTITLEMENT_RESOLUTION_CONFIG_TOKEN, EntitlementModule, type EntitlementModuleOptions, EntitlementResolutionConfig, LimitExceededError, PLAN_VERSION_REPOSITORY_TOKEN, type ReplacedByIndex, SUBSCRIPTION_REPOSITORY_TOKEN, TRANSACTION_RUNNER_TOKEN, buildReplacedByIndex, expandReplacedFeatures, isLimitExceededError };

package/dist/entitlement/index.d.ts

@@ -1,4 +1,4 @@
-export { B as BundleVersionSnapshot, a as BusinessTypeVersionSnapshot, C as CustomLimitsShape, E as EffectiveLimits, b as EffectiveLimitsSnapshot, c as EnforceLimitInput, d as EntitlementService, L as LimitExceededError, P as PlanVersionSnapshot, S as SubscriptionBundleSnapshot, e as SubscriptionLimitsInput, f as aggregateBusinessTypeQuotas, g as aggregateContractLineItemEntitlements, h as aggregateLimits, i as aggregateSubscriptionBundleQuotas, j as applyCustomLimits, k as collectBusinessTypeFeatures, l as collectSubscriptionBundleFeatures, m as filterActiveSubscriptionBundles, n as filterPlannedOnlyFeatures, o as hasAnyFeature, p as hasFeature, t as toEffectiveLimitsSnapshot } from '../aggregation-Dvz9e8X2.js';
+export { B as BundleVersionSnapshot, a as BusinessTypeVersionSnapshot, C as CustomLimitsShape, E as EffectiveLimits, b as EffectiveLimitsSnapshot, c as EnforceLimitInput, d as EntitlementService, P as PlanVersionSnapshot, S as SubscriptionBundleSnapshot, e as SubscriptionLimitsInput, f as aggregateBusinessTypeQuotas, g as aggregateContractLineItemEntitlements, h as aggregateLimits, i as aggregateSubscriptionBundleQuotas, j as applyCustomLimits, k as collectBusinessTypeFeatures, l as collectSubscriptionBundleFeatures, m as filterActiveSubscriptionBundles, n as filterPlannedOnlyFeatures, o as hasAnyFeature, p as hasFeature, t as toEffectiveLimitsSnapshot } from '../aggregation-DGCyoN5d.js';
 import { DiscoveredFeature, SubscriptionRepository, PlanVersionRepository, TransactionRunner, SubscriptionContractRepository, SubscriptionBundleRepository, BundleRepository } from '@saasicat/types';
 import { E as EntitlementResolutionConfig } from '../plan-resolution-CFCoUkrE.js';
 export { a as EntitlementResolutionInput, r as resolveEntitlementPlan } from '../plan-resolution-CFCoUkrE.js';
@@ -24,6 +24,22 @@ declare function buildReplacedByIndex(features: readonly FeatureReplacesSource[]
  */
 declare function expandReplacedFeatures(granted: ReadonlySet<string>, index: ReplacedByIndex): Set<string>;
 
+declare class LimitExceededError extends Error {
+    readonly dimension: string;
+    readonly max: number;
+    readonly used: number;
+    readonly code = "LIMIT_EXCEEDED";
+    constructor(dimension: string, max: number, used: number);
+}
+/**
+ * Realm-safe type guard (checks `code` instead of `instanceof`). The tsup
+ * multi-entry build duplicates this class into every sub-bundle
+ * (platform/billing/entitlement), so an `instanceof` between thrower and
+ * catcher from different entries is false — same hazard the token registry
+ * solves with `Symbol.for` and `isPlatformUserExistsError` solves for types.
+ */
+declare function isLimitExceededError(err: unknown): err is LimitExceededError;
+
 interface EntitlementModuleOptions {
     /** Consumer implementation of the `SubscriptionRepository` interface. */
     subscriptionRepository: ProviderSpec<SubscriptionRepository>;
@@ -57,4 +73,4 @@ declare const PLAN_VERSION_REPOSITORY_TOKEN: unique symbol;
 declare const TRANSACTION_RUNNER_TOKEN: unique symbol;
 declare const ENTITLEMENT_RESOLUTION_CONFIG_TOKEN: unique symbol;
 
-export { ENTITLEMENT_RESOLUTION_CONFIG_TOKEN, EntitlementModule, type EntitlementModuleOptions, EntitlementResolutionConfig, PLAN_VERSION_REPOSITORY_TOKEN, type ReplacedByIndex, SUBSCRIPTION_REPOSITORY_TOKEN, TRANSACTION_RUNNER_TOKEN, buildReplacedByIndex, expandReplacedFeatures };
+export { ENTITLEMENT_RESOLUTION_CONFIG_TOKEN, EntitlementModule, type EntitlementModuleOptions, EntitlementResolutionConfig, LimitExceededError, PLAN_VERSION_REPOSITORY_TOKEN, type ReplacedByIndex, SUBSCRIPTION_REPOSITORY_TOKEN, TRANSACTION_RUNNER_TOKEN, buildReplacedByIndex, expandReplacedFeatures, isLimitExceededError };

package/dist/entitlement/index.js

@@ -16,10 +16,10 @@ import {
   filterPlannedOnlyFeatures,
   hasAnyFeature,
   hasFeature,
+  isLimitExceededError,
   resolveEntitlementPlan,
   toEffectiveLimitsSnapshot
-} from "../chunk-YXGHPILG.js";
-import "../chunk-MV6LW5UB.js";
+} from "../chunk-K42EQPBB.js";
 import "../chunk-NYLON2VC.js";
 import {
   ENTITLEMENT_RESOLUTION_CONFIG_TOKEN,
@@ -28,8 +28,9 @@ import {
   TRANSACTION_RUNNER_TOKEN
 } from "../chunk-7MLGHWKO.js";
 import "../chunk-XCZ3TTFK.js";
-import "../chunk-SABTXESR.js";
 import "../chunk-L4SUWH5B.js";
+import "../chunk-MV6LW5UB.js";
+import "../chunk-SABTXESR.js";
 import "../chunk-SHUYVCID.js";
 export {
   ENTITLEMENT_RESOLUTION_CONFIG_TOKEN,
@@ -52,6 +53,7 @@ export {
   filterPlannedOnlyFeatures,
   hasAnyFeature,
   hasFeature,
+  isLimitExceededError,
   resolveEntitlementPlan,
   toEffectiveLimitsSnapshot
 };

package/dist/index.cjs

@@ -308,6 +308,7 @@ __export(index_exports, {
   ipFingerprint: () => ipFingerprint,
   isFeatureInPlan: () => isFeatureInPlan,
   isFeaturePlannedOnly: () => isFeaturePlannedOnly,
+  isLimitExceededError: () => isLimitExceededError,
   loadApprovedCatalogKeys: () => loadApprovedCatalogKeys,
   loadDiscoverySnapshotFromFile: () => loadDiscoverySnapshotFromFile,
   loadPlanCatalogFromFile: () => loadPlanCatalogFromFile,
@@ -1683,6 +1684,7 @@ function assertNoReplacesCycle(index) {
 __name(assertNoReplacesCycle, "assertNoReplacesCycle");
 
 // src/entitlement/limit-exceeded-error.ts
+var LIMIT_EXCEEDED = "LIMIT_EXCEEDED";
 var LimitExceededError = class extends Error {
   static {
     __name(this, "LimitExceededError");
@@ -1690,11 +1692,16 @@ var LimitExceededError = class extends Error {
   dimension;
   max;
   used;
+  code = LIMIT_EXCEEDED;
   constructor(dimension, max, used) {
     super(`Limit f\xFCr ${dimension} erreicht: ${used}/${max}.`), this.dimension = dimension, this.max = max, this.used = used;
     this.name = "LimitExceededError";
   }
 };
+function isLimitExceededError(err) {
+  return err instanceof Error && err.code === LIMIT_EXCEEDED;
+}
+__name(isLimitExceededError, "isLimitExceededError");
 
 // src/entitlement/plan-resolution.ts
 function resolveEntitlementPlan(input, config, now) {
@@ -2209,6 +2216,7 @@ __name(compareRankedOffers, "compareRankedOffers");
 
 // src/billing/limit-exceeded.filter.ts
 var import_common11 = require("@nestjs/common");
+var import_core2 = require("@nestjs/core");
 function _ts_decorate11(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
@@ -2216,12 +2224,16 @@ function _ts_decorate11(decorators, target, key, desc) {
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
 __name(_ts_decorate11, "_ts_decorate");
-var LimitExceededFilter = class _LimitExceededFilter {
+var LimitExceededFilter = class _LimitExceededFilter extends import_core2.BaseExceptionFilter {
   static {
     __name(this, "LimitExceededFilter");
   }
   logger = new import_common11.Logger(_LimitExceededFilter.name);
   catch(exception, host) {
+    if (!isLimitExceededError(exception)) {
+      super.catch(exception, host);
+      return;
+    }
     const ctx = host.switchToHttp();
     const response = ctx.getResponse();
     const request = ctx.getRequest();
@@ -2238,7 +2250,7 @@ var LimitExceededFilter = class _LimitExceededFilter {
   }
 };
 LimitExceededFilter = _ts_decorate11([
-  (0, import_common11.Catch)(LimitExceededError)
+  (0, import_common11.Catch)()
 ], LimitExceededFilter);
 
 // src/billing/plan-catalog-loader.ts
@@ -5681,7 +5693,7 @@ SuperAdminGuard = _ts_decorate36([
 
 // src/admin/mfa.guard.ts
 var import_common35 = require("@nestjs/common");
-var import_core2 = require("@nestjs/core");
+var import_core3 = require("@nestjs/core");
 
 // src/admin/mfa.ts
 var import_common34 = require("@nestjs/common");
@@ -5860,10 +5872,10 @@ var MfaGuard = class _MfaGuard {
 };
 MfaGuard = _ts_decorate38([
   (0, import_common35.Injectable)(),
-  _ts_param21(0, (0, import_common35.Inject)(import_core2.Reflector)),
+  _ts_param21(0, (0, import_common35.Inject)(import_core3.Reflector)),
   _ts_metadata25("design:type", Function),
   _ts_metadata25("design:paramtypes", [
-    typeof import_core2.Reflector === "undefined" ? Object : import_core2.Reflector,
+    typeof import_core3.Reflector === "undefined" ? Object : import_core3.Reflector,
     typeof MfaService === "undefined" ? Object : MfaService
   ])
 ], MfaGuard);
@@ -8636,7 +8648,7 @@ var import_node_crypto4 = require("crypto");
 var import_node_fs2 = require("fs");
 var import_node_path2 = require("path");
 var import_common52 = require("@nestjs/common");
-var import_core3 = require("@nestjs/core");
+var import_core4 = require("@nestjs/core");
 function _ts_decorate63(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
@@ -8821,18 +8833,18 @@ var DiscoveryScanner = class _DiscoveryScanner {
 };
 DiscoveryScanner = _ts_decorate63([
   (0, import_common52.Injectable)(),
-  _ts_param31(0, (0, import_common52.Inject)(import_core3.DiscoveryService)),
-  _ts_param31(1, (0, import_common52.Inject)(import_core3.MetadataScanner)),
-  _ts_param31(2, (0, import_common52.Inject)(import_core3.Reflector)),
+  _ts_param31(0, (0, import_common52.Inject)(import_core4.DiscoveryService)),
+  _ts_param31(1, (0, import_common52.Inject)(import_core4.MetadataScanner)),
+  _ts_param31(2, (0, import_common52.Inject)(import_core4.Reflector)),
   _ts_param31(3, (0, import_common52.Optional)()),
   _ts_param31(3, (0, import_common52.Inject)(DISCOVERY_APP_INFO_TOKEN)),
   _ts_param31(4, (0, import_common52.Optional)()),
   _ts_param31(4, (0, import_common52.Inject)(DISCOVERY_SNAPSHOT_PATH_TOKEN)),
   _ts_metadata46("design:type", Function),
   _ts_metadata46("design:paramtypes", [
-    typeof import_core3.DiscoveryService === "undefined" ? Object : import_core3.DiscoveryService,
-    typeof import_core3.MetadataScanner === "undefined" ? Object : import_core3.MetadataScanner,
-    typeof import_core3.Reflector === "undefined" ? Object : import_core3.Reflector,
+    typeof import_core4.DiscoveryService === "undefined" ? Object : import_core4.DiscoveryService,
+    typeof import_core4.MetadataScanner === "undefined" ? Object : import_core4.MetadataScanner,
+    typeof import_core4.Reflector === "undefined" ? Object : import_core4.Reflector,
     typeof DiscoveryAppInfo === "undefined" ? Object : DiscoveryAppInfo,
     Object
   ])
@@ -8932,7 +8944,7 @@ __name(canonicalStringify, "canonicalStringify");
 
 // src/discovery/discovery.module.ts
 var import_common54 = require("@nestjs/common");
-var import_core4 = require("@nestjs/core");
+var import_core5 = require("@nestjs/core");
 
 // src/discovery/discovery.controller.ts
 var import_common53 = require("@nestjs/common");
@@ -9056,7 +9068,7 @@ var DiscoveryModule = class _DiscoveryModule {
     return {
       module: _DiscoveryModule,
       imports: [
-        import_core4.DiscoveryModule,
+        import_core5.DiscoveryModule,
         ...options.imports ?? []
       ],
       controllers,
@@ -9097,11 +9109,11 @@ function loadDiscoverySnapshotFromFile(path) {
 __name(loadDiscoverySnapshotFromFile, "loadDiscoverySnapshotFromFile");
 
 // src/discovery/headless-scan.ts
-var import_core5 = require("@nestjs/core");
+var import_core6 = require("@nestjs/core");
 async function runHeadlessDiscoveryScan(appModule, options = {}) {
   const exit = options.exit ?? ((code) => process.exit(code));
   try {
-    const app = await import_core5.NestFactory.createApplicationContext(appModule, {
+    const app = await import_core6.NestFactory.createApplicationContext(appModule, {
       logger: options.logger ?? [
         "error",
         "warn",
@@ -15889,6 +15901,7 @@ CheckoutOfferModule = _ts_decorate96([
   ipFingerprint,
   isFeatureInPlan,
   isFeaturePlannedOnly,
+  isLimitExceededError,
   loadApprovedCatalogKeys,
   loadDiscoverySnapshotFromFile,
   loadPlanCatalogFromFile,