@saasicat/nest 0.21.0 → 0.22.1

package/dist/_entries.cjs

@@ -771,7 +771,7 @@ var PLATFORM_CORE_MANIFEST_CONTRIBUTION = {
         enabled: true,
         requiredCapability: "dashboard.read"
       },
-      // SPEC_V2 §3.3 — discovery snapshot of the running backend.
+      // — discovery snapshot of the running backend.
       // Apps must set `discovery.read` in their manifest capabilities
       // to `true` so that the NavBuilder wires the page into the
       // sidebar; otherwise it is filtered out automatically.
@@ -779,7 +779,7 @@ var PLATFORM_CORE_MANIFEST_CONTRIBUTION = {
         enabled: true,
         requiredCapability: "discovery.read"
       },
-      // SPEC_V2 §11.1 M3 — Bundle editor in SuperAdmin.
+      // — Bundle editor in SuperAdmin.
       // Apps with a DB-driven catalog set `bundles.read = true`.
       bundles: {
         enabled: true,
@@ -789,7 +789,7 @@ var PLATFORM_CORE_MANIFEST_CONTRIBUTION = {
         enabled: true,
         requiredCapability: "plans.read"
       },
-      // SPEC_V2 §11.1 M3 — marketing catalog (locale pivot).
+      // — marketing catalog (locale pivot).
       // Apps that market a public catalog set
       // `marketingProjections.read = true`.
       marketingCatalog: {
@@ -1631,6 +1631,7 @@ __export(billing_exports, {
   ComposedTenantAuthGuard: () => ComposedTenantAuthGuard,
   ConfiguratorCatalogBuilder: () => ConfiguratorCatalogBuilder,
   FEATURE_GUARD_CONFIG_TOKEN: () => FEATURE_GUARD_CONFIG_TOKEN,
+  FEATURE_GUARD_MARKER: () => FEATURE_GUARD_MARKER,
   FEATURE_UI_REGISTRY_TOKEN: () => FEATURE_UI_REGISTRY_TOKEN2,
   FeatureGuard: () => FeatureGuard,
   LimitExceededFilter: () => LimitExceededFilter,
@@ -1700,6 +1701,7 @@ __export(billing_exports, {
   initialPeriodWindow: () => initialPeriodWindow,
   isFeatureInPlan: () => isFeatureInPlan,
   isFeaturePlannedOnly: () => isFeaturePlannedOnly,
+  isPlatformFeatureGuard: () => isPlatformFeatureGuard,
   loadPlanCatalogFromFile: () => loadPlanCatalogFromFile,
   loadPlanCatalogFromString: () => loadPlanCatalogFromString,
   periodEndAfter: () => periodEndAfter,
@@ -1829,6 +1831,16 @@ function computeNextPeriod(sub, now) {
 }
 __name(computeNextPeriod, "computeNextPeriod");
 
+// src/billing/feature-guard-marker.ts
+var FEATURE_GUARD_MARKER = /* @__PURE__ */ Symbol.for("saasicat/nest/feature-guard");
+function isPlatformFeatureGuard(target) {
+  if (target === null || typeof target !== "function" && typeof target !== "object") {
+    return false;
+  }
+  return target[FEATURE_GUARD_MARKER] === true;
+}
+__name(isPlatformFeatureGuard, "isPlatformFeatureGuard");
+
 // src/billing/require-feature.decorator.ts
 var import_common15 = require("@nestjs/common");
 var REQUIRE_FEATURE_KEY = "require-feature";
@@ -2539,7 +2551,7 @@ var EntitlementService = class {
   // ---------------------------------------------------------------------
   /**
    * Plan fallback for TRIAL/PENDING_SALES: returns the PlanVersion active
-   * as of `asOf` (SPEC_V2 §4.2). If the repo does not implement
+   * as of `asOf`. If the repo does not implement
    * `findActive`, we fall back to `findLatestLive` (backward compat for
    * adapters without `validFrom` columns).
    */
@@ -2642,6 +2654,8 @@ var FeatureGuard = class _FeatureGuard {
   entitlements;
   config;
   upsellResolver;
+  /** Lets `FeatureGuardCoverageCheck` recognise this guard across CJS entries. */
+  static [FEATURE_GUARD_MARKER] = true;
   logger = new import_common18.Logger(_FeatureGuard.name);
   constructor(reflector, entitlements, config = null, upsellResolver = null) {
     this.reflector = reflector;
@@ -3002,7 +3016,7 @@ function _ts_param14(paramIndex, decorator) {
 }
 __name(_ts_param14, "_ts_param");
 var PLAN_CATALOG_IMPORT_SINK_TOKEN = /* @__PURE__ */ Symbol.for("saas-platform/PlanCatalogImportSink");
-var IMPORT_CHANGE_NOTE = "Initial import from saas.yaml (SPEC_V2 \xA711.1 M6 Pack 2c)";
+var IMPORT_CHANGE_NOTE = "Initial import from saas.yaml";
 var PlanCatalogImporterService = class {
   static {
     __name(this, "PlanCatalogImporterService");
@@ -3293,7 +3307,7 @@ var PublicCatalogController = class {
     return merged;
   }
   /**
-   * SPEC_V2 §11.1 M6 Pack 2c — public catalog endpoint for bundles
+   * — public catalog endpoint for bundles
    * (stem list with live versions). If a `MarketingProjection` with
    * `targetType=BUNDLE` + matching locale exists, it is merged in.
    */
@@ -7840,7 +7854,7 @@ var BundlesService = class _BundlesService {
    * Publishes a draft version atomically. Steps:
    * 1. Strict check on the draft definition (warn-only or blocking)
    * 2. Enforce validFrom requirement + ordering against the predecessor
-   *    (SPEC_V2 §4.2 + §11.1 M6 Pack 2c, analogous to PlanVersion)
+   *    (analogous to PlanVersion)
    * 3. Compute the diff against the predecessor version (latest live) →
    *    `publishedChanges` + `nonRegressive` via `classifyBundleVersionDiff`
    * 4. Call Repository.publishDraft with the diff result + validity dates
@@ -7889,7 +7903,7 @@ var BundlesService = class _BundlesService {
     if (!validFromInput) {
       throw new import_common43.UnprocessableEntityException({
         code: import_types20.CATALOG_ERROR_CODES.BUNDLE_VERSION_VALID_FROM_REQUIRED,
-        message: "validFrom must be set when publishing (on the draft or the publish call). SPEC_V2 \xA74.2."
+        message: "validFrom must be set when publishing (on the draft or the publish call).."
       });
     }
     const validFrom = new Date(validFromInput);
@@ -10125,7 +10139,7 @@ function buildPublicMarketingCatalogController(guards, projectKey, currency, vat
       this.service = service;
     }
     /**
-     * `?lang=de|tr|en` — alias `locale` accepted (SPEC_V2 §9).
+     * `?lang=de|tr|en` — alias `locale` accepted.
      * `?asOf=YYYY-MM-DD` — preview of a future or past catalog variant.
      *   Default = today. Returns the PlanVersion whose `validFrom`/`validUntil`
      *   span `asOf` inclusively by day (the validUntil day still counts,
@@ -10636,7 +10650,7 @@ var PlanVersionsService = class _PlanVersionsService {
     if (!validFromInput) {
       throw new import_common55.UnprocessableEntityException({
         code: import_types26.CATALOG_ERROR_CODES.PLAN_VERSION_VALID_FROM_REQUIRED,
-        message: "validFrom must be set when publishing (on the draft or the publish call). SPEC_V2 \xA74.2."
+        message: "validFrom must be set when publishing (on the draft or the publish call).."
       });
     }
     const validFrom = new Date(validFromInput);
@@ -11153,7 +11167,7 @@ var PublishBundleVersionDto = class {
   allowZeroPrice;
   /**
    * Required on publish if the draft carries no `validFrom`
-   * (SPEC_V2 §4.2 + §11.1 M6 Pack 2c, analogous to PublishPlanVersionDto).
+   * (analogous to PublishPlanVersionDto).
    * Service strictly checks > `validFrom` of the predecessor version.
    */
   validFrom;
@@ -11939,7 +11953,7 @@ var CreatePlanVersionDraftDto = class {
   marketed;
   changeNote;
   baseVersionId;
-  /** Optional in the draft (required at publish). ISO date string. SPEC_V2 §4.2. */
+  /** Optional in the draft (required at publish). ISO date string.. */
   validFrom;
   /** Optional; null = unlimited. ISO date string. */
   validUntil;
@@ -12114,7 +12128,7 @@ var PublishPlanVersionDto = class {
   allowZeroPrice;
   /**
    * Required at publish (on the DTO or draft). The service strictly checks
-   * `validFrom > predecessor.validFrom`. SPEC_V2 §4.2.
+   * `validFrom > predecessor.validFrom`..
    */
   validFrom;
   validUntil;
@@ -13684,6 +13698,7 @@ __export(platform_exports, {
   DiscoveryScanner: () => DiscoveryScanner,
   EnforceQuotaInterceptor: () => EnforceQuotaInterceptor,
   EntitlementService: () => EntitlementService,
+  FeatureGuardCoverageCheck: () => FeatureGuardCoverageCheck,
   MarketingProjectionsService: () => MarketingProjectionsService,
   MarketingSettingsService: () => MarketingSettingsService,
   MfaGuard: () => MfaGuard,
@@ -13724,8 +13739,8 @@ __export(platform_exports, {
 });
 
 // src/platform/saas-platform.module.ts
-var import_common79 = require("@nestjs/common");
-var import_core9 = require("@nestjs/core");
+var import_common80 = require("@nestjs/common");
+var import_core10 = require("@nestjs/core");
 var import_types31 = require("@saasicat/types");
 
 // src/promo/module.ts
@@ -14863,10 +14878,9 @@ StaticEntitlementService = _ts_decorate84([
   ])
 ], StaticEntitlementService);
 
-// src/platform/static-feature.guard.ts
+// src/platform/feature-guard-coverage.check.ts
 var import_common75 = require("@nestjs/common");
 var import_core7 = require("@nestjs/core");
-var import_types30 = require("@saasicat/types");
 function _ts_decorate85(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
@@ -14884,6 +14898,115 @@ function _ts_param53(paramIndex, decorator) {
   };
 }
 __name(_ts_param53, "_ts_param");
+var GUARDS_METADATA = "__guards__";
+var METHOD_METADATA = "method";
+var FeatureGuardCoverageCheck = class {
+  static {
+    __name(this, "FeatureGuardCoverageCheck");
+  }
+  discoveryService;
+  metadataScanner;
+  logger = new import_common75.Logger("SaaSiCat");
+  constructor(discoveryService, metadataScanner) {
+    this.discoveryService = discoveryService;
+    this.metadataScanner = metadataScanner;
+  }
+  onApplicationBootstrap() {
+    const uncovered = this.findUncoveredRoutes();
+    if (uncovered.length === 0) return;
+    const list = uncovered.map((r) => `  ${r.controller}.${r.handler} \u2014 requires ${r.features.join(" or ")}`).join("\n");
+    this.logger.warn(`globalFeatureGuard is off and ${uncovered.length} annotated route(s) have no feature guard in front of them, so they serve unlicensed traffic:
+${list}
+Bind one behind your auth guard \u2014 @UseGuards(JwtAuthGuard, StaticFeatureGuard), or FeatureGuard from @saasicat/nest/billing on the V3 entitlement path. A guard of your own that wraps either one is not recognised here; if that is what these routes use, they are covered.`);
+  }
+  /**
+   * Annotated handlers whose own guards and whose controller's guards contain
+   * no recognisable feature guard.
+   *
+   * Deliberately conservative in one direction only: an unrecognised wrapper
+   * is reported (and the message says so) rather than assumed safe, because
+   * the named route is cheap to check. The reverse — staying silent about a
+   * route with no guard at all — is the failure this exists to prevent.
+   */
+  findUncoveredRoutes() {
+    const uncovered = [];
+    for (const wrapper of this.discoveryService.getControllers()) {
+      const instance = wrapper.instance;
+      if (!instance || typeof instance !== "object") continue;
+      const ctor = instance.constructor;
+      if (!ctor) continue;
+      const classGuards = readGuards(ctor);
+      const prototype = Object.getPrototypeOf(instance);
+      for (const method of this.metadataScanner.getAllMethodNames(prototype)) {
+        const handler = instance[method];
+        if (typeof handler !== "function") continue;
+        if (Reflect.getMetadata(METHOD_METADATA, handler) === void 0) continue;
+        const features = readFeatures(handler) ?? readFeatures(ctor) ?? /* not annotated */
+        null;
+        if (!features || features.length === 0) continue;
+        const guards = [
+          ...classGuards,
+          ...readGuards(handler)
+        ];
+        if (guards.some(isPlatformFeatureGuard)) continue;
+        uncovered.push({
+          controller: ctor.name,
+          handler: method,
+          features
+        });
+      }
+    }
+    return uncovered;
+  }
+};
+FeatureGuardCoverageCheck = _ts_decorate85([
+  (0, import_common75.Injectable)(),
+  _ts_param53(0, (0, import_common75.Inject)(import_core7.DiscoveryService)),
+  _ts_param53(1, (0, import_common75.Inject)(import_core7.MetadataScanner)),
+  _ts_metadata66("design:type", Function),
+  _ts_metadata66("design:paramtypes", [
+    typeof import_core7.DiscoveryService === "undefined" ? Object : import_core7.DiscoveryService,
+    typeof import_core7.MetadataScanner === "undefined" ? Object : import_core7.MetadataScanner
+  ])
+], FeatureGuardCoverageCheck);
+function readFeatures(target) {
+  const value = Reflect.getMetadata(REQUIRE_FEATURE_KEY, target);
+  return Array.isArray(value) ? value : null;
+}
+__name(readFeatures, "readFeatures");
+function readGuards(target) {
+  const value = Reflect.getMetadata(GUARDS_METADATA, target);
+  if (!Array.isArray(value)) return [];
+  return value.flatMap((guard) => typeof guard === "function" ? [
+    guard
+  ] : [
+    guard,
+    guard?.constructor
+  ]);
+}
+__name(readGuards, "readGuards");
+
+// src/platform/static-feature.guard.ts
+var import_common76 = require("@nestjs/common");
+var import_core8 = require("@nestjs/core");
+var import_types30 = require("@saasicat/types");
+function _ts_decorate86(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate86, "_ts_decorate");
+function _ts_metadata67(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata67, "_ts_metadata");
+function _ts_param54(paramIndex, decorator) {
+  return function(target, key) {
+    decorator(target, key, paramIndex);
+  };
+}
+__name(_ts_param54, "_ts_param");
 var STATIC_FEATURE_GUARD_CONFIG_TOKEN = /* @__PURE__ */ Symbol.for("saas-platform-nest/StaticFeatureGuardConfig");
 var StaticFeatureGuard = class {
   static {
@@ -14892,6 +15015,8 @@ var StaticFeatureGuard = class {
   reflector;
   entitlements;
   config;
+  /** Lets `FeatureGuardCoverageCheck` recognise this guard across CJS entries. */
+  static [FEATURE_GUARD_MARKER] = true;
   constructor(reflector, entitlements, config = null) {
     this.reflector = reflector;
     this.entitlements = entitlements;
@@ -14906,7 +15031,7 @@ var StaticFeatureGuard = class {
     const request = context.switchToHttp().getRequest();
     const user = request.user;
     if (!user) {
-      throw new import_common75.ForbiddenException({
+      throw new import_common76.ForbiddenException({
         code: import_types30.AUTH_ERROR_CODES.NOT_AUTHENTICATED,
         message: "Not authenticated"
       });
@@ -14915,7 +15040,7 @@ var StaticFeatureGuard = class {
     if (role === "SUPER_ADMIN") return true;
     const tenantId = this.config?.tenantIdResolver ? this.config.tenantIdResolver(request) : request.tenantId ?? user.tenantId;
     if (!tenantId) {
-      throw new import_common75.ForbiddenException({
+      throw new import_common76.ForbiddenException({
         code: import_types30.AUTH_ERROR_CODES.NO_TENANT_ASSIGNED,
         message: "No tenant assigned"
       });
@@ -14930,47 +15055,47 @@ var StaticFeatureGuard = class {
         offers: [],
         message: `Feature ${required.join(" / ")} is not included in the current plan.`
       };
-      throw new import_common75.ForbiddenException(body);
+      throw new import_common76.ForbiddenException(body);
     }
     return true;
   }
 };
-StaticFeatureGuard = _ts_decorate85([
-  (0, import_common75.Injectable)(),
-  _ts_param53(0, (0, import_common75.Inject)(import_core7.Reflector)),
-  _ts_param53(1, (0, import_common75.Inject)(StaticEntitlementService)),
-  _ts_param53(2, (0, import_common75.Optional)()),
-  _ts_param53(2, (0, import_common75.Inject)(STATIC_FEATURE_GUARD_CONFIG_TOKEN)),
-  _ts_metadata66("design:type", Function),
-  _ts_metadata66("design:paramtypes", [
-    typeof import_core7.Reflector === "undefined" ? Object : import_core7.Reflector,
+StaticFeatureGuard = _ts_decorate86([
+  (0, import_common76.Injectable)(),
+  _ts_param54(0, (0, import_common76.Inject)(import_core8.Reflector)),
+  _ts_param54(1, (0, import_common76.Inject)(StaticEntitlementService)),
+  _ts_param54(2, (0, import_common76.Optional)()),
+  _ts_param54(2, (0, import_common76.Inject)(STATIC_FEATURE_GUARD_CONFIG_TOKEN)),
+  _ts_metadata67("design:type", Function),
+  _ts_metadata67("design:paramtypes", [
+    typeof import_core8.Reflector === "undefined" ? Object : import_core8.Reflector,
     typeof StaticEntitlementService === "undefined" ? Object : StaticEntitlementService,
     Object
   ])
 ], StaticFeatureGuard);
 
 // src/platform/enforce-quota.interceptor.ts
-var import_common76 = require("@nestjs/common");
-var import_core8 = require("@nestjs/core");
+var import_common77 = require("@nestjs/common");
+var import_core9 = require("@nestjs/core");
 var import_rxjs2 = require("rxjs");
 var import_operators2 = require("rxjs/operators");
-function _ts_decorate86(decorators, target, key, desc) {
+function _ts_decorate87(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate86, "_ts_decorate");
-function _ts_metadata67(k, v) {
+__name(_ts_decorate87, "_ts_decorate");
+function _ts_metadata68(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata67, "_ts_metadata");
-function _ts_param54(paramIndex, decorator) {
+__name(_ts_metadata68, "_ts_metadata");
+function _ts_param55(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param54, "_ts_param");
+__name(_ts_param55, "_ts_param");
 var QUOTA_PROVIDERS_TOKEN = /* @__PURE__ */ Symbol.for("saas-platform-nest/QuotaProviders");
 var EnforceQuotaInterceptor = class {
   static {
@@ -15013,15 +15138,15 @@ var EnforceQuotaInterceptor = class {
     }
   }
 };
-EnforceQuotaInterceptor = _ts_decorate86([
-  (0, import_common76.Injectable)(),
-  _ts_param54(0, (0, import_common76.Inject)(import_core8.Reflector)),
-  _ts_param54(1, (0, import_common76.Inject)(StaticEntitlementService)),
-  _ts_param54(2, (0, import_common76.Optional)()),
-  _ts_param54(2, (0, import_common76.Inject)(QUOTA_PROVIDERS_TOKEN)),
-  _ts_metadata67("design:type", Function),
-  _ts_metadata67("design:paramtypes", [
-    typeof import_core8.Reflector === "undefined" ? Object : import_core8.Reflector,
+EnforceQuotaInterceptor = _ts_decorate87([
+  (0, import_common77.Injectable)(),
+  _ts_param55(0, (0, import_common77.Inject)(import_core9.Reflector)),
+  _ts_param55(1, (0, import_common77.Inject)(StaticEntitlementService)),
+  _ts_param55(2, (0, import_common77.Optional)()),
+  _ts_param55(2, (0, import_common77.Inject)(QUOTA_PROVIDERS_TOKEN)),
+  _ts_metadata68("design:type", Function),
+  _ts_metadata68("design:paramtypes", [
+    typeof import_core9.Reflector === "undefined" ? Object : import_core9.Reflector,
     typeof StaticEntitlementService === "undefined" ? Object : StaticEntitlementService,
     Object
   ])
@@ -15068,18 +15193,18 @@ var SubscriptionPlanResolver = class {
 };
 
 // src/platform/tenant-manifest.service.ts
-var import_common77 = require("@nestjs/common");
-function _ts_decorate87(decorators, target, key, desc) {
+var import_common78 = require("@nestjs/common");
+function _ts_decorate88(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate87, "_ts_decorate");
-function _ts_metadata68(k, v) {
+__name(_ts_decorate88, "_ts_decorate");
+function _ts_metadata69(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata68, "_ts_metadata");
+__name(_ts_metadata69, "_ts_metadata");
 var TenantManifestService = class {
   static {
     __name(this, "TenantManifestService");
@@ -15125,10 +15250,10 @@ var TenantManifestService = class {
     };
   }
 };
-TenantManifestService = _ts_decorate87([
-  (0, import_common77.Injectable)(),
-  _ts_metadata68("design:type", Function),
-  _ts_metadata68("design:paramtypes", [
+TenantManifestService = _ts_decorate88([
+  (0, import_common78.Injectable)(),
+  _ts_metadata69("design:type", Function),
+  _ts_metadata69("design:paramtypes", [
     typeof StaticEntitlementService === "undefined" ? Object : StaticEntitlementService
   ])
 ], TenantManifestService);
@@ -15142,24 +15267,24 @@ function isVisible(item, features) {
 __name(isVisible, "isVisible");
 
 // src/platform/tenant-manifest.controller.ts
-var import_common78 = require("@nestjs/common");
-function _ts_decorate88(decorators, target, key, desc) {
+var import_common79 = require("@nestjs/common");
+function _ts_decorate89(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate88, "_ts_decorate");
-function _ts_metadata69(k, v) {
+__name(_ts_decorate89, "_ts_decorate");
+function _ts_metadata70(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata69, "_ts_metadata");
-function _ts_param55(paramIndex, decorator) {
+__name(_ts_metadata70, "_ts_metadata");
+function _ts_param56(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param55, "_ts_param");
+__name(_ts_param56, "_ts_param");
 function buildTenantManifestController(options) {
   const path = options.path ?? "tenant/manifest";
   let GeneratedTenantManifestController = class GeneratedTenantManifestController {
@@ -15178,21 +15303,21 @@ function buildTenantManifestController(options) {
       return this.svc.getManifest(tenantId);
     }
   };
-  _ts_decorate88([
-    (0, import_common78.Get)(),
-    _ts_param55(0, (0, import_common78.Req)()),
-    _ts_metadata69("design:type", Function),
-    _ts_metadata69("design:paramtypes", [
+  _ts_decorate89([
+    (0, import_common79.Get)(),
+    _ts_param56(0, (0, import_common79.Req)()),
+    _ts_metadata70("design:type", Function),
+    _ts_metadata70("design:paramtypes", [
       typeof RequestWithUser === "undefined" ? Object : RequestWithUser
     ]),
-    _ts_metadata69("design:returntype", Promise)
+    _ts_metadata70("design:returntype", Promise)
   ], GeneratedTenantManifestController.prototype, "get", null);
-  GeneratedTenantManifestController = _ts_decorate88([
-    (0, import_common78.Controller)(path),
-    (0, import_common78.UseGuards)(...options.guards),
-    _ts_param55(0, (0, import_common78.Inject)(TenantManifestService)),
-    _ts_metadata69("design:type", Function),
-    _ts_metadata69("design:paramtypes", [
+  GeneratedTenantManifestController = _ts_decorate89([
+    (0, import_common79.Controller)(path),
+    (0, import_common79.UseGuards)(...options.guards),
+    _ts_param56(0, (0, import_common79.Inject)(TenantManifestService)),
+    _ts_metadata70("design:type", Function),
+    _ts_metadata70("design:paramtypes", [
       typeof TenantManifestService === "undefined" ? Object : TenantManifestService
     ])
   ], GeneratedTenantManifestController);
@@ -15201,13 +15326,14 @@ function buildTenantManifestController(options) {
 __name(buildTenantManifestController, "buildTenantManifestController");
 
 // src/platform/saas-platform.module.ts
-function _ts_decorate89(decorators, target, key, desc) {
+function _ts_decorate90(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate89, "_ts_decorate");
+__name(_ts_decorate90, "_ts_decorate");
+var PLATFORM_LOGGER = new import_common80.Logger("SaaSiCat");
 var PLATFORM_SUBSCRIPTION_REPOSITORY_TOKEN = /* @__PURE__ */ Symbol.for("saas-platform-nest/PlatformSubscriptionRepository");
 var STANDARD_MANIFEST_REGISTRATION_TOKEN = /* @__PURE__ */ Symbol.for("saas-platform-nest/StandardManifestRegistration");
 function buildStandardManifestContribution(catalog, adminResources, promoCodes) {
@@ -15664,14 +15790,19 @@ var SaasPlatformModule = class _SaasPlatformModule {
         inject: options.quotaProviders ?? []
       }, ...options.globalFeatureGuard === false ? [] : [
         {
-          provide: import_core9.APP_GUARD,
+          provide: import_core10.APP_GUARD,
           useExisting: StaticFeatureGuard
         }
       ], {
-        provide: import_core9.APP_INTERCEPTOR,
+        provide: import_core10.APP_INTERCEPTOR,
         useExisting: EnforceQuotaInterceptor
       });
       lightweightExports.push(PLAN_RESOLVER_PORT_TOKEN, StaticEntitlementService, StaticFeatureGuard, EnforceQuotaInterceptor, QUOTA_PROVIDERS_TOKEN);
+      if (options.globalFeatureGuard === false) {
+        lightweightProviders.push(FeatureGuardCoverageCheck);
+      }
+    } else {
+      PLATFORM_LOGGER.warn("No plan resolver configured \u2014 @RequireFeature and @EnforceQuota are INERT. The platform registered neither StaticFeatureGuard nor EnforceQuotaInterceptor, so every annotated route serves unlicensed traffic and every quota is unlimited. Set one of: adapters.planResolver, defaultPlanId, or tenantBilling.");
     }
     const tenantControllers = [];
     if (options.tenantManifest) {
@@ -15733,8 +15864,8 @@ var SaasPlatformModule = class _SaasPlatformModule {
     };
   }
 };
-SaasPlatformModule = _ts_decorate89([
-  (0, import_common79.Module)({})
+SaasPlatformModule = _ts_decorate90([
+  (0, import_common80.Module)({})
 ], SaasPlatformModule);
 
 // src/platform/define-saasicat.ts
@@ -15865,7 +15996,7 @@ var REGISTRATION_PROMO_PREVIEW_TOKEN = /* @__PURE__ */ Symbol.for("saas-platform
 var REGISTRATION_CONFIG_TOKEN = /* @__PURE__ */ Symbol.for("saas-platform/RegistrationConfig");
 
 // src/registration/pending-registration.service.ts
-var import_common80 = require("@nestjs/common");
+var import_common81 = require("@nestjs/common");
 var import_types32 = require("@saasicat/types");
 var import_types33 = require("@saasicat/types");
 
@@ -15921,23 +16052,23 @@ function resolveModel(catalog, modelId) {
 __name(resolveModel, "resolveModel");
 
 // src/registration/pending-registration.service.ts
-function _ts_decorate90(decorators, target, key, desc) {
+function _ts_decorate91(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate90, "_ts_decorate");
-function _ts_metadata70(k, v) {
+__name(_ts_decorate91, "_ts_decorate");
+function _ts_metadata71(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata70, "_ts_metadata");
-function _ts_param56(paramIndex, decorator) {
+__name(_ts_metadata71, "_ts_metadata");
+function _ts_param57(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param56, "_ts_param");
+__name(_ts_param57, "_ts_param");
 var PendingRegistrationService = class _PendingRegistrationService {
   static {
     __name(this, "PendingRegistrationService");
@@ -15957,7 +16088,7 @@ var PendingRegistrationService = class _PendingRegistrationService {
   resumeBaseUrl;
   configuratorLookup;
   promoPreview;
-  logger = new import_common80.Logger(_PendingRegistrationService.name);
+  logger = new import_common81.Logger(_PendingRegistrationService.name);
   constructor(repo, otpDelivery, userLookup, slugCheck, passwordHasher, planCatalog, paymentProvider, paymentEventLog, activationOrchestrator, audit, resumeTokenSigner, resumeDelivery, resumeBaseUrl, configuratorLookup, promoPreview) {
     this.repo = repo;
     this.otpDelivery = otpDelivery;
@@ -15995,17 +16126,17 @@ var PendingRegistrationService = class _PendingRegistrationService {
   async selectPlan(input, context) {
     const pending = await this.repo.findById(input.pendingRegistrationId);
     if (!pending) {
-      throw new import_common80.NotFoundException(codedError(import_types32.REGISTRATION_ERROR_CODES.PENDING_REGISTRATION_NOT_FOUND));
+      throw new import_common81.NotFoundException(codedError(import_types32.REGISTRATION_ERROR_CODES.PENDING_REGISTRATION_NOT_FOUND));
     }
     if (pending.expiresAt.getTime() < Date.now()) {
-      throw new import_common80.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.PENDING_REGISTRATION_EXPIRED));
+      throw new import_common81.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.PENDING_REGISTRATION_EXPIRED));
     }
     if (pending.status !== "EMAIL_VERIFIED" && pending.status !== "PLAN_SELECTED" && pending.status !== "CHECKOUT_STARTED") {
-      throw new import_common80.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.INVALID_REGISTRATION_STATE));
+      throw new import_common81.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.INVALID_REGISTRATION_STATE));
     }
     const plan = await this.planCatalog.findPublicSignupPlan(input.planId);
     if (!plan) {
-      throw new import_common80.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.PLAN_NOT_AVAILABLE));
+      throw new import_common81.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.PLAN_NOT_AVAILABLE));
     }
     const now = /* @__PURE__ */ new Date();
     const expiresAt = new Date(now.getTime() + import_types33.PENDING_ONBOARDING_TTL_DAYS * 24 * 60 * 60 * 1e3);
@@ -16028,20 +16159,20 @@ var PendingRegistrationService = class _PendingRegistrationService {
   async startCheckout(input, context) {
     const pending = await this.repo.findById(input.pendingRegistrationId);
     if (!pending) {
-      throw new import_common80.NotFoundException(codedError(import_types32.REGISTRATION_ERROR_CODES.PENDING_REGISTRATION_NOT_FOUND));
+      throw new import_common81.NotFoundException(codedError(import_types32.REGISTRATION_ERROR_CODES.PENDING_REGISTRATION_NOT_FOUND));
     }
     if (pending.expiresAt.getTime() < Date.now()) {
-      throw new import_common80.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.PENDING_REGISTRATION_EXPIRED));
+      throw new import_common81.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.PENDING_REGISTRATION_EXPIRED));
     }
     if (pending.status !== "PLAN_SELECTED" && pending.status !== "CHECKOUT_STARTED") {
-      throw new import_common80.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.PLAN_NOT_SELECTED));
+      throw new import_common81.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.PLAN_NOT_SELECTED));
     }
     if (!pending.selectedPlanId) {
-      throw new import_common80.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.PLAN_NOT_SELECTED));
+      throw new import_common81.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.PLAN_NOT_SELECTED));
     }
     const plan = await this.planCatalog.findPublicSignupPlan(pending.selectedPlanId);
     if (!plan) {
-      throw new import_common80.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.PLAN_NOT_AVAILABLE));
+      throw new import_common81.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.PLAN_NOT_AVAILABLE));
     }
     const session = await this.paymentProvider.createCheckoutSession({
       pendingRegistrationId: pending.id,
@@ -16250,7 +16381,7 @@ var PendingRegistrationService = class _PendingRegistrationService {
       await this.record("OTP_VERIFY_FAILED", null, context, {
         reason: "unknown_email"
       });
-      throw new import_common80.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.OTP_INVALID));
+      throw new import_common81.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.OTP_INVALID));
     }
     if (pending.status !== "PENDING_EMAIL_VERIFICATION") {
       return {
@@ -16263,33 +16394,33 @@ var PendingRegistrationService = class _PendingRegistrationService {
       await this.record("OTP_VERIFY_FAILED", pending.id, context, {
         reason: "no_otp_set"
       });
-      throw new import_common80.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.OTP_INVALID));
+      throw new import_common81.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.OTP_INVALID));
     }
     if (pending.otpExpiresAt.getTime() < Date.now()) {
       await this.record("OTP_VERIFY_FAILED", pending.id, context, {
         reason: "expired"
       });
-      throw new import_common80.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.OTP_EXPIRED));
+      throw new import_common81.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.OTP_EXPIRED));
     }
     const maxAttempts = resolveOtpVerifyMaxAttempts();
     if (pending.otpAttemptCount >= maxAttempts) {
       await this.record("OTP_VERIFY_FAILED", pending.id, context, {
         reason: "locked"
       });
-      throw new import_common80.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.OTP_LOCKED));
+      throw new import_common81.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.OTP_LOCKED));
     }
     const attemptCount = await this.repo.incrementOtpAttemptCount(pending.id);
     if (attemptCount > maxAttempts) {
       await this.record("OTP_VERIFY_FAILED", pending.id, context, {
         reason: "locked"
       });
-      throw new import_common80.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.OTP_LOCKED));
+      throw new import_common81.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.OTP_LOCKED));
     }
     if (!verifyOtpCode(pending.otpHash, code)) {
       await this.record("OTP_VERIFY_FAILED", pending.id, context, {
         reason: "wrong_code"
       });
-      throw new import_common80.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.OTP_INVALID));
+      throw new import_common81.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.OTP_INVALID));
     }
     const now = /* @__PURE__ */ new Date();
     const updated = await this.repo.update(pending.id, {
@@ -16400,20 +16531,20 @@ var PendingRegistrationService = class _PendingRegistrationService {
    */
   async resumeWithToken(input, context) {
     if (!this.resumeTokenSigner) {
-      throw new import_common80.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.RESUME_NOT_CONFIGURED));
+      throw new import_common81.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.RESUME_NOT_CONFIGURED));
     }
     let decoded;
     try {
       decoded = await this.resumeTokenSigner.verify(input.token);
     } catch {
-      throw new import_common80.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.RESUME_TOKEN_INVALID));
+      throw new import_common81.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.RESUME_TOKEN_INVALID));
     }
     const pending = await this.repo.findById(decoded.pendingRegistrationId);
     if (!pending) {
-      throw new import_common80.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.RESUME_TOKEN_INVALID));
+      throw new import_common81.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.RESUME_TOKEN_INVALID));
     }
     if (pending.expiresAt.getTime() < Date.now()) {
-      throw new import_common80.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.PENDING_REGISTRATION_EXPIRED));
+      throw new import_common81.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.PENDING_REGISTRATION_EXPIRED));
     }
     await this.record("REGISTRATION_NEUTRAL_REPLAY", pending.id, context, {
       via: "resume_token",
@@ -16441,7 +16572,7 @@ var PendingRegistrationService = class _PendingRegistrationService {
   /** Returns the (app-specific) configurator catalog. */
   async getConfiguratorCatalog() {
     if (!this.configuratorLookup) {
-      throw new import_common80.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.CONFIGURATOR_NOT_CONFIGURED));
+      throw new import_common81.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.CONFIGURATOR_NOT_CONFIGURED));
     }
     return this.configuratorLookup.getCatalog();
   }
@@ -16458,22 +16589,22 @@ var PendingRegistrationService = class _PendingRegistrationService {
    */
   async saveConfiguration(input, context) {
     if (!this.configuratorLookup) {
-      throw new import_common80.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.CONFIGURATOR_NOT_CONFIGURED));
+      throw new import_common81.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.CONFIGURATOR_NOT_CONFIGURED));
     }
     const pending = await this.repo.findById(input.pendingRegistrationId);
     if (!pending) {
-      throw new import_common80.NotFoundException(codedError(import_types32.REGISTRATION_ERROR_CODES.PENDING_REGISTRATION_NOT_FOUND));
+      throw new import_common81.NotFoundException(codedError(import_types32.REGISTRATION_ERROR_CODES.PENDING_REGISTRATION_NOT_FOUND));
     }
     if (pending.expiresAt.getTime() < Date.now()) {
-      throw new import_common80.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.PENDING_REGISTRATION_EXPIRED));
+      throw new import_common81.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.PENDING_REGISTRATION_EXPIRED));
     }
     if (pending.status !== "EMAIL_VERIFIED" && pending.status !== "PLAN_SELECTED" && pending.status !== "CHECKOUT_STARTED") {
-      throw new import_common80.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.INVALID_REGISTRATION_STATE));
+      throw new import_common81.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.INVALID_REGISTRATION_STATE));
     }
     const catalog = await this.configuratorLookup.getCatalog();
     const model = catalog.models.find((m) => m.id === input.selection.modelId);
     if (!model) {
-      throw new import_common80.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.MODEL_NOT_AVAILABLE));
+      throw new import_common81.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.MODEL_NOT_AVAILABLE));
     }
     let promoEval;
     if (input.selection.appliedPromoCode && this.promoPreview) {
@@ -16537,20 +16668,20 @@ var PendingRegistrationService = class _PendingRegistrationService {
    */
   async previewConfigPromo(pendingRegistrationId, code) {
     if (!this.configuratorLookup) {
-      throw new import_common80.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.CONFIGURATOR_NOT_CONFIGURED));
+      throw new import_common81.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.CONFIGURATOR_NOT_CONFIGURED));
     }
     const pending = await this.repo.findById(pendingRegistrationId);
     if (!pending) {
-      throw new import_common80.NotFoundException(codedError(import_types32.REGISTRATION_ERROR_CODES.PENDING_REGISTRATION_NOT_FOUND));
+      throw new import_common81.NotFoundException(codedError(import_types32.REGISTRATION_ERROR_CODES.PENDING_REGISTRATION_NOT_FOUND));
     }
     const config = pending.configJson;
     if (!config) {
-      throw new import_common80.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.CONFIG_NOT_SAVED));
+      throw new import_common81.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.CONFIG_NOT_SAVED));
     }
     const catalog = await this.configuratorLookup.getCatalog();
     const model = catalog.models.find((m) => m.id === config.modelId);
     if (!model) {
-      throw new import_common80.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.MODEL_NOT_AVAILABLE));
+      throw new import_common81.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.MODEL_NOT_AVAILABLE));
     }
     let promoEval;
     if (code && this.promoPreview) {
@@ -16611,30 +16742,30 @@ var PendingRegistrationService = class _PendingRegistrationService {
     throw new Error(`Could not find a free slug for "${tenantName}".`);
   }
 };
-PendingRegistrationService = _ts_decorate90([
-  (0, import_common80.Injectable)(),
-  _ts_param56(0, (0, import_common80.Inject)(PENDING_REGISTRATION_REPOSITORY_TOKEN)),
-  _ts_param56(1, (0, import_common80.Inject)(REGISTRATION_OTP_DELIVERY_TOKEN)),
-  _ts_param56(2, (0, import_common80.Inject)(USER_ACCOUNT_LOOKUP_TOKEN)),
-  _ts_param56(3, (0, import_common80.Inject)(SLUG_AVAILABILITY_CHECK_TOKEN)),
-  _ts_param56(4, (0, import_common80.Inject)(PASSWORD_HASHER_TOKEN)),
-  _ts_param56(5, (0, import_common80.Inject)(PLAN_CATALOG_LOOKUP_TOKEN)),
-  _ts_param56(6, (0, import_common80.Inject)(PAYMENT_PROVIDER_TOKEN)),
-  _ts_param56(7, (0, import_common80.Inject)(PAYMENT_EVENT_LOG_TOKEN)),
-  _ts_param56(8, (0, import_common80.Inject)(ACTIVATION_ORCHESTRATOR_TOKEN)),
-  _ts_param56(9, (0, import_common80.Inject)(REGISTRATION_AUDIT_LOGGER_TOKEN)),
-  _ts_param56(10, (0, import_common80.Optional)()),
-  _ts_param56(10, (0, import_common80.Inject)(REGISTRATION_RESUME_TOKEN_SIGNER_TOKEN)),
-  _ts_param56(11, (0, import_common80.Optional)()),
-  _ts_param56(11, (0, import_common80.Inject)(REGISTRATION_RESUME_DELIVERY_TOKEN)),
-  _ts_param56(12, (0, import_common80.Optional)()),
-  _ts_param56(12, (0, import_common80.Inject)(REGISTRATION_RESUME_BASE_URL_TOKEN)),
-  _ts_param56(13, (0, import_common80.Optional)()),
-  _ts_param56(13, (0, import_common80.Inject)(REGISTRATION_CONFIGURATOR_LOOKUP_TOKEN)),
-  _ts_param56(14, (0, import_common80.Optional)()),
-  _ts_param56(14, (0, import_common80.Inject)(REGISTRATION_PROMO_PREVIEW_TOKEN)),
-  _ts_metadata70("design:type", Function),
-  _ts_metadata70("design:paramtypes", [
+PendingRegistrationService = _ts_decorate91([
+  (0, import_common81.Injectable)(),
+  _ts_param57(0, (0, import_common81.Inject)(PENDING_REGISTRATION_REPOSITORY_TOKEN)),
+  _ts_param57(1, (0, import_common81.Inject)(REGISTRATION_OTP_DELIVERY_TOKEN)),
+  _ts_param57(2, (0, import_common81.Inject)(USER_ACCOUNT_LOOKUP_TOKEN)),
+  _ts_param57(3, (0, import_common81.Inject)(SLUG_AVAILABILITY_CHECK_TOKEN)),
+  _ts_param57(4, (0, import_common81.Inject)(PASSWORD_HASHER_TOKEN)),
+  _ts_param57(5, (0, import_common81.Inject)(PLAN_CATALOG_LOOKUP_TOKEN)),
+  _ts_param57(6, (0, import_common81.Inject)(PAYMENT_PROVIDER_TOKEN)),
+  _ts_param57(7, (0, import_common81.Inject)(PAYMENT_EVENT_LOG_TOKEN)),
+  _ts_param57(8, (0, import_common81.Inject)(ACTIVATION_ORCHESTRATOR_TOKEN)),
+  _ts_param57(9, (0, import_common81.Inject)(REGISTRATION_AUDIT_LOGGER_TOKEN)),
+  _ts_param57(10, (0, import_common81.Optional)()),
+  _ts_param57(10, (0, import_common81.Inject)(REGISTRATION_RESUME_TOKEN_SIGNER_TOKEN)),
+  _ts_param57(11, (0, import_common81.Optional)()),
+  _ts_param57(11, (0, import_common81.Inject)(REGISTRATION_RESUME_DELIVERY_TOKEN)),
+  _ts_param57(12, (0, import_common81.Optional)()),
+  _ts_param57(12, (0, import_common81.Inject)(REGISTRATION_RESUME_BASE_URL_TOKEN)),
+  _ts_param57(13, (0, import_common81.Optional)()),
+  _ts_param57(13, (0, import_common81.Inject)(REGISTRATION_CONFIGURATOR_LOOKUP_TOKEN)),
+  _ts_param57(14, (0, import_common81.Optional)()),
+  _ts_param57(14, (0, import_common81.Inject)(REGISTRATION_PROMO_PREVIEW_TOKEN)),
+  _ts_metadata71("design:type", Function),
+  _ts_metadata71("design:paramtypes", [
     typeof PendingRegistrationRepository === "undefined" ? Object : PendingRegistrationRepository,
     typeof RegistrationOtpDelivery === "undefined" ? Object : RegistrationOtpDelivery,
     typeof UserAccountLookup === "undefined" ? Object : UserAccountLookup,
@@ -16690,25 +16821,25 @@ function nullable(value) {
 __name(nullable, "nullable");
 
 // src/registration/cleanup.cron.ts
-var import_common81 = require("@nestjs/common");
+var import_common82 = require("@nestjs/common");
 var import_schedule2 = require("@nestjs/schedule");
-function _ts_decorate91(decorators, target, key, desc) {
+function _ts_decorate92(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate91, "_ts_decorate");
-function _ts_metadata71(k, v) {
+__name(_ts_decorate92, "_ts_decorate");
+function _ts_metadata72(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata71, "_ts_metadata");
+__name(_ts_metadata72, "_ts_metadata");
 var RegistrationCleanupCron = class _RegistrationCleanupCron {
   static {
     __name(this, "RegistrationCleanupCron");
   }
   service;
-  logger = new import_common81.Logger(_RegistrationCleanupCron.name);
+  logger = new import_common82.Logger(_RegistrationCleanupCron.name);
   constructor(service) {
     this.service = service;
   }
@@ -16737,36 +16868,36 @@ var RegistrationCleanupCron = class _RegistrationCleanupCron {
     }
   }
 };
-_ts_decorate91([
+_ts_decorate92([
   (0, import_schedule2.Cron)("15 4 * * *", {
     timeZone: "Europe/Berlin"
   }),
-  _ts_metadata71("design:type", Function),
-  _ts_metadata71("design:paramtypes", []),
-  _ts_metadata71("design:returntype", Promise)
+  _ts_metadata72("design:type", Function),
+  _ts_metadata72("design:paramtypes", []),
+  _ts_metadata72("design:returntype", Promise)
 ], RegistrationCleanupCron.prototype, "runDaily", null);
-RegistrationCleanupCron = _ts_decorate91([
-  (0, import_common81.Injectable)(),
-  _ts_metadata71("design:type", Function),
-  _ts_metadata71("design:paramtypes", [
+RegistrationCleanupCron = _ts_decorate92([
+  (0, import_common82.Injectable)(),
+  _ts_metadata72("design:type", Function),
+  _ts_metadata72("design:paramtypes", [
     typeof PendingRegistrationService === "undefined" ? Object : PendingRegistrationService
   ])
 ], RegistrationCleanupCron);
 
 // src/registration/ip-rate-limit.guard.ts
-var import_common82 = require("@nestjs/common");
+var import_common83 = require("@nestjs/common");
 var import_types34 = require("@saasicat/types");
-function _ts_decorate92(decorators, target, key, desc) {
+function _ts_decorate93(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate92, "_ts_decorate");
-function _ts_metadata72(k, v) {
+__name(_ts_decorate93, "_ts_decorate");
+function _ts_metadata73(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata72, "_ts_metadata");
+__name(_ts_metadata73, "_ts_metadata");
 var BaseIpRateLimitGuard = class {
   static {
     __name(this, "BaseIpRateLimitGuard");
@@ -16783,7 +16914,7 @@ var BaseIpRateLimitGuard = class {
     const req = context.switchToHttp().getRequest();
     const key = ipFingerprint2(req);
     if (this.exceeded(key)) {
-      throw new import_common82.HttpException({
+      throw new import_common83.HttpException({
         ...codedError(import_types34.REGISTRATION_ERROR_CODES.RATE_LIMITED, {
           retryAfterSeconds: Math.ceil(this.options.windowMs / 1e3)
         }),
@@ -16792,7 +16923,7 @@ var BaseIpRateLimitGuard = class {
         // not the code — the two emitters of RATE_LIMITED disagree
         // on what `reason` means, which is why it is going away.
         reason: this.options.name
-      }, import_common82.HttpStatus.TOO_MANY_REQUESTS);
+      }, import_common83.HttpStatus.TOO_MANY_REQUESTS);
     }
     return true;
   }
@@ -16810,10 +16941,10 @@ var BaseIpRateLimitGuard = class {
     return bucket.count > this.options.limit;
   }
 };
-BaseIpRateLimitGuard = _ts_decorate92([
-  (0, import_common82.Injectable)(),
-  _ts_metadata72("design:type", Function),
-  _ts_metadata72("design:paramtypes", [
+BaseIpRateLimitGuard = _ts_decorate93([
+  (0, import_common83.Injectable)(),
+  _ts_metadata73("design:type", Function),
+  _ts_metadata73("design:paramtypes", [
     Object
   ])
 ], BaseIpRateLimitGuard);
@@ -16825,14 +16956,14 @@ function ipFingerprint2(req) {
 __name(ipFingerprint2, "ipFingerprint");
 
 // src/registration/module.ts
-var import_common83 = require("@nestjs/common");
-function _ts_decorate93(decorators, target, key, desc) {
+var import_common84 = require("@nestjs/common");
+function _ts_decorate94(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate93, "_ts_decorate");
+__name(_ts_decorate94, "_ts_decorate");
 var RegistrationModule = class _RegistrationModule {
   static {
     __name(this, "RegistrationModule");
@@ -16888,23 +17019,23 @@ var RegistrationModule = class _RegistrationModule {
     };
   }
 };
-RegistrationModule = _ts_decorate93([
-  (0, import_common83.Module)({})
+RegistrationModule = _ts_decorate94([
+  (0, import_common84.Module)({})
 ], RegistrationModule);
 
 // src/registration/dto/register-start.dto.ts
 var import_class_validator17 = require("class-validator");
-function _ts_decorate94(decorators, target, key, desc) {
+function _ts_decorate95(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate94, "_ts_decorate");
-function _ts_metadata73(k, v) {
+__name(_ts_decorate95, "_ts_decorate");
+function _ts_metadata74(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata73, "_ts_metadata");
+__name(_ts_metadata74, "_ts_metadata");
 var RegisterStartDto = class {
   static {
     __name(this, "RegisterStartDto");
@@ -16923,78 +17054,78 @@ var RegisterStartDto = class {
   termsAccepted;
   locale;
 };
-_ts_decorate94([
+_ts_decorate95([
   (0, import_class_validator17.IsString)(),
   (0, import_class_validator17.MinLength)(2),
   (0, import_class_validator17.MaxLength)(120),
-  _ts_metadata73("design:type", String)
+  _ts_metadata74("design:type", String)
 ], RegisterStartDto.prototype, "tenantName", void 0);
-_ts_decorate94([
+_ts_decorate95([
   (0, import_class_validator17.IsOptional)(),
   (0, import_class_validator17.IsString)(),
   (0, import_class_validator17.Matches)(/^[a-z0-9-]+$/, {
     message: "tenantSlug may only contain lower-case letters, digits and hyphens."
   }),
   (0, import_class_validator17.MaxLength)(60),
-  _ts_metadata73("design:type", String)
+  _ts_metadata74("design:type", String)
 ], RegisterStartDto.prototype, "tenantSlug", void 0);
-_ts_decorate94([
+_ts_decorate95([
   (0, import_class_validator17.IsOptional)(),
   (0, import_class_validator17.IsString)(),
   (0, import_class_validator17.MaxLength)(40),
-  _ts_metadata73("design:type", String)
+  _ts_metadata74("design:type", String)
 ], RegisterStartDto.prototype, "salutation", void 0);
-_ts_decorate94([
+_ts_decorate95([
   (0, import_class_validator17.IsString)(),
   (0, import_class_validator17.MinLength)(1),
   (0, import_class_validator17.MaxLength)(60),
-  _ts_metadata73("design:type", String)
+  _ts_metadata74("design:type", String)
 ], RegisterStartDto.prototype, "firstName", void 0);
-_ts_decorate94([
+_ts_decorate95([
   (0, import_class_validator17.IsString)(),
   (0, import_class_validator17.MinLength)(1),
   (0, import_class_validator17.MaxLength)(60),
-  _ts_metadata73("design:type", String)
+  _ts_metadata74("design:type", String)
 ], RegisterStartDto.prototype, "lastName", void 0);
-_ts_decorate94([
+_ts_decorate95([
   (0, import_class_validator17.IsEmail)(),
   (0, import_class_validator17.MaxLength)(160),
-  _ts_metadata73("design:type", String)
+  _ts_metadata74("design:type", String)
 ], RegisterStartDto.prototype, "email", void 0);
-_ts_decorate94([
+_ts_decorate95([
   (0, import_class_validator17.IsString)(),
   (0, import_class_validator17.MinLength)(8),
   (0, import_class_validator17.MaxLength)(160),
-  _ts_metadata73("design:type", String)
+  _ts_metadata74("design:type", String)
 ], RegisterStartDto.prototype, "password", void 0);
-_ts_decorate94([
+_ts_decorate95([
   (0, import_class_validator17.Equals)(true, {
     message: "The terms of service, privacy policy and data processing agreement must be accepted."
   }),
-  _ts_metadata73("design:type", Boolean)
+  _ts_metadata74("design:type", Boolean)
 ], RegisterStartDto.prototype, "termsAccepted", void 0);
-_ts_decorate94([
+_ts_decorate95([
   (0, import_class_validator17.IsOptional)(),
   (0, import_class_validator17.IsIn)([
     "de",
     "tr"
   ]),
-  _ts_metadata73("design:type", String)
+  _ts_metadata74("design:type", String)
 ], RegisterStartDto.prototype, "locale", void 0);
 
 // src/registration/dto/verify-registration-otp.dto.ts
 var import_class_validator18 = require("class-validator");
-function _ts_decorate95(decorators, target, key, desc) {
+function _ts_decorate96(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate95, "_ts_decorate");
-function _ts_metadata74(k, v) {
+__name(_ts_decorate96, "_ts_decorate");
+function _ts_metadata75(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata74, "_ts_metadata");
+__name(_ts_metadata75, "_ts_metadata");
 var VerifyRegistrationOtpDto = class {
   static {
     __name(this, "VerifyRegistrationOtpDto");
@@ -17002,55 +17133,55 @@ var VerifyRegistrationOtpDto = class {
   email;
   otp;
 };
-_ts_decorate95([
+_ts_decorate96([
   (0, import_class_validator18.IsEmail)(),
-  _ts_metadata74("design:type", String)
+  _ts_metadata75("design:type", String)
 ], VerifyRegistrationOtpDto.prototype, "email", void 0);
-_ts_decorate95([
+_ts_decorate96([
   (0, import_class_validator18.IsString)(),
   (0, import_class_validator18.Matches)(/^\d{6}$/, {
     message: "The OTP must be 6 digits."
   }),
-  _ts_metadata74("design:type", String)
+  _ts_metadata75("design:type", String)
 ], VerifyRegistrationOtpDto.prototype, "otp", void 0);
 
 // src/registration/dto/resend-registration-otp.dto.ts
 var import_class_validator19 = require("class-validator");
-function _ts_decorate96(decorators, target, key, desc) {
+function _ts_decorate97(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate96, "_ts_decorate");
-function _ts_metadata75(k, v) {
+__name(_ts_decorate97, "_ts_decorate");
+function _ts_metadata76(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata75, "_ts_metadata");
+__name(_ts_metadata76, "_ts_metadata");
 var ResendRegistrationOtpDto = class {
   static {
     __name(this, "ResendRegistrationOtpDto");
   }
   email;
 };
-_ts_decorate96([
+_ts_decorate97([
   (0, import_class_validator19.IsEmail)(),
-  _ts_metadata75("design:type", String)
+  _ts_metadata76("design:type", String)
 ], ResendRegistrationOtpDto.prototype, "email", void 0);
 
 // src/registration/dto/select-plan.dto.ts
 var import_class_validator20 = require("class-validator");
-function _ts_decorate97(decorators, target, key, desc) {
+function _ts_decorate98(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate97, "_ts_decorate");
-function _ts_metadata76(k, v) {
+__name(_ts_decorate98, "_ts_decorate");
+function _ts_metadata77(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata76, "_ts_metadata");
+__name(_ts_metadata77, "_ts_metadata");
 var SelectRegistrationPlanDto = class {
   static {
     __name(this, "SelectRegistrationPlanDto");
@@ -17058,32 +17189,32 @@ var SelectRegistrationPlanDto = class {
   pendingRegistrationId;
   planId;
 };
-_ts_decorate97([
+_ts_decorate98([
   (0, import_class_validator20.IsString)(),
   (0, import_class_validator20.MinLength)(1),
   (0, import_class_validator20.MaxLength)(80),
-  _ts_metadata76("design:type", String)
+  _ts_metadata77("design:type", String)
 ], SelectRegistrationPlanDto.prototype, "pendingRegistrationId", void 0);
-_ts_decorate97([
+_ts_decorate98([
   (0, import_class_validator20.IsString)(),
   (0, import_class_validator20.MinLength)(1),
   (0, import_class_validator20.MaxLength)(40),
-  _ts_metadata76("design:type", String)
+  _ts_metadata77("design:type", String)
 ], SelectRegistrationPlanDto.prototype, "planId", void 0);
 
 // src/registration/dto/start-checkout.dto.ts
 var import_class_validator21 = require("class-validator");
-function _ts_decorate98(decorators, target, key, desc) {
+function _ts_decorate99(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate98, "_ts_decorate");
-function _ts_metadata77(k, v) {
+__name(_ts_decorate99, "_ts_decorate");
+function _ts_metadata78(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata77, "_ts_metadata");
+__name(_ts_metadata78, "_ts_metadata");
 var StartRegistrationCheckoutDto = class {
   static {
     __name(this, "StartRegistrationCheckoutDto");
@@ -17092,40 +17223,40 @@ var StartRegistrationCheckoutDto = class {
   successUrl;
   cancelUrl;
 };
-_ts_decorate98([
+_ts_decorate99([
   (0, import_class_validator21.IsString)(),
   (0, import_class_validator21.MinLength)(1),
   (0, import_class_validator21.MaxLength)(80),
-  _ts_metadata77("design:type", String)
+  _ts_metadata78("design:type", String)
 ], StartRegistrationCheckoutDto.prototype, "pendingRegistrationId", void 0);
-_ts_decorate98([
+_ts_decorate99([
   (0, import_class_validator21.IsUrl)({
     require_tld: false
   }),
   (0, import_class_validator21.MaxLength)(500),
-  _ts_metadata77("design:type", String)
+  _ts_metadata78("design:type", String)
 ], StartRegistrationCheckoutDto.prototype, "successUrl", void 0);
-_ts_decorate98([
+_ts_decorate99([
   (0, import_class_validator21.IsUrl)({
     require_tld: false
   }),
   (0, import_class_validator21.MaxLength)(500),
-  _ts_metadata77("design:type", String)
+  _ts_metadata78("design:type", String)
 ], StartRegistrationCheckoutDto.prototype, "cancelUrl", void 0);
 
 // src/registration/dto/payment-webhook.dto.ts
 var import_class_validator22 = require("class-validator");
-function _ts_decorate99(decorators, target, key, desc) {
+function _ts_decorate100(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate99, "_ts_decorate");
-function _ts_metadata78(k, v) {
+__name(_ts_decorate100, "_ts_decorate");
+function _ts_metadata79(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata78, "_ts_metadata");
+__name(_ts_metadata79, "_ts_metadata");
 var PaymentWebhookDto = class {
   static {
     __name(this, "PaymentWebhookDto");
@@ -17136,76 +17267,76 @@ var PaymentWebhookDto = class {
   status;
   payload;
 };
-_ts_decorate99([
+_ts_decorate100([
   (0, import_class_validator22.IsString)(),
   (0, import_class_validator22.MinLength)(1),
   (0, import_class_validator22.MaxLength)(120),
-  _ts_metadata78("design:type", String)
+  _ts_metadata79("design:type", String)
 ], PaymentWebhookDto.prototype, "eventId", void 0);
-_ts_decorate99([
+_ts_decorate100([
   (0, import_class_validator22.IsOptional)(),
   (0, import_class_validator22.IsString)(),
   (0, import_class_validator22.MaxLength)(120),
-  _ts_metadata78("design:type", String)
+  _ts_metadata79("design:type", String)
 ], PaymentWebhookDto.prototype, "sessionId", void 0);
-_ts_decorate99([
+_ts_decorate100([
   (0, import_class_validator22.IsString)(),
   (0, import_class_validator22.MaxLength)(40),
-  _ts_metadata78("design:type", String)
+  _ts_metadata79("design:type", String)
 ], PaymentWebhookDto.prototype, "provider", void 0);
-_ts_decorate99([
+_ts_decorate100([
   (0, import_class_validator22.IsIn)([
     "SUCCEEDED",
     "FAILED"
   ]),
-  _ts_metadata78("design:type", String)
+  _ts_metadata79("design:type", String)
 ], PaymentWebhookDto.prototype, "status", void 0);
-_ts_decorate99([
+_ts_decorate100([
   (0, import_class_validator22.IsOptional)(),
   (0, import_class_validator22.IsObject)(),
-  _ts_metadata78("design:type", typeof Record === "undefined" ? Object : Record)
+  _ts_metadata79("design:type", typeof Record === "undefined" ? Object : Record)
 ], PaymentWebhookDto.prototype, "payload", void 0);
 
 // src/registration/dto/continue-registration.dto.ts
 var import_class_validator23 = require("class-validator");
-function _ts_decorate100(decorators, target, key, desc) {
+function _ts_decorate101(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate100, "_ts_decorate");
-function _ts_metadata79(k, v) {
+__name(_ts_decorate101, "_ts_decorate");
+function _ts_metadata80(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata79, "_ts_metadata");
+__name(_ts_metadata80, "_ts_metadata");
 var ContinueRegistrationDto = class {
   static {
     __name(this, "ContinueRegistrationDto");
   }
   token;
 };
-_ts_decorate100([
+_ts_decorate101([
   (0, import_class_validator23.IsString)(),
   (0, import_class_validator23.MinLength)(10),
   (0, import_class_validator23.MaxLength)(2e3),
-  _ts_metadata79("design:type", String)
+  _ts_metadata80("design:type", String)
 ], ContinueRegistrationDto.prototype, "token", void 0);
 
 // src/registration/dto/save-configuration.dto.ts
 var import_class_validator24 = require("class-validator");
 var import_class_transformer2 = require("class-transformer");
-function _ts_decorate101(decorators, target, key, desc) {
+function _ts_decorate102(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate101, "_ts_decorate");
-function _ts_metadata80(k, v) {
+__name(_ts_decorate102, "_ts_decorate");
+function _ts_metadata81(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata80, "_ts_metadata");
+__name(_ts_metadata81, "_ts_metadata");
 var SaveRegistrationConfigSelectionDto = class {
   static {
     __name(this, "SaveRegistrationConfigSelectionDto");
@@ -17214,7 +17345,7 @@ var SaveRegistrationConfigSelectionDto = class {
   billingCycle;
   appliedPromoCode;
   /**
-   * METAMODELL §17a — Bundle consistency. ID of the `CheckoutOffer` that was
+   * — Bundle consistency. ID of the `CheckoutOffer` that was
    * created on the pricing page (`<app>/register?offer=<id>`). Passed
    * through unchanged in `configJson`; the ActivationOrchestrator freezes it
    * as `packageSnapshot` when the subscription is created and sets the offer
@@ -17222,30 +17353,30 @@ var SaveRegistrationConfigSelectionDto = class {
    */
   offerId;
 };
-_ts_decorate101([
+_ts_decorate102([
   (0, import_class_validator24.IsString)(),
   (0, import_class_validator24.MinLength)(1),
   (0, import_class_validator24.MaxLength)(40),
-  _ts_metadata80("design:type", String)
+  _ts_metadata81("design:type", String)
 ], SaveRegistrationConfigSelectionDto.prototype, "modelId", void 0);
-_ts_decorate101([
+_ts_decorate102([
   (0, import_class_validator24.IsIn)([
     "MONTHLY",
     "YEARLY"
   ]),
-  _ts_metadata80("design:type", String)
+  _ts_metadata81("design:type", String)
 ], SaveRegistrationConfigSelectionDto.prototype, "billingCycle", void 0);
-_ts_decorate101([
+_ts_decorate102([
   (0, import_class_validator24.IsOptional)(),
   (0, import_class_validator24.IsString)(),
   (0, import_class_validator24.MaxLength)(60),
-  _ts_metadata80("design:type", Object)
+  _ts_metadata81("design:type", Object)
 ], SaveRegistrationConfigSelectionDto.prototype, "appliedPromoCode", void 0);
-_ts_decorate101([
+_ts_decorate102([
   (0, import_class_validator24.IsOptional)(),
   (0, import_class_validator24.ValidateIf)((_o, value) => value !== null),
   (0, import_class_validator24.IsUUID)(),
-  _ts_metadata80("design:type", Object)
+  _ts_metadata81("design:type", Object)
 ], SaveRegistrationConfigSelectionDto.prototype, "offerId", void 0);
 var SaveRegistrationConfigDto = class {
   static {
@@ -17254,31 +17385,31 @@ var SaveRegistrationConfigDto = class {
   pendingRegistrationId;
   selection;
 };
-_ts_decorate101([
+_ts_decorate102([
   (0, import_class_validator24.IsString)(),
   (0, import_class_validator24.MinLength)(1),
   (0, import_class_validator24.MaxLength)(80),
-  _ts_metadata80("design:type", String)
+  _ts_metadata81("design:type", String)
 ], SaveRegistrationConfigDto.prototype, "pendingRegistrationId", void 0);
-_ts_decorate101([
+_ts_decorate102([
   (0, import_class_validator24.ValidateNested)(),
   (0, import_class_transformer2.Type)(() => SaveRegistrationConfigSelectionDto),
-  _ts_metadata80("design:type", typeof SaveRegistrationConfigSelectionDto === "undefined" ? Object : SaveRegistrationConfigSelectionDto)
+  _ts_metadata81("design:type", typeof SaveRegistrationConfigSelectionDto === "undefined" ? Object : SaveRegistrationConfigSelectionDto)
 ], SaveRegistrationConfigDto.prototype, "selection", void 0);
 
 // src/registration/dto/preview-promo.dto.ts
 var import_class_validator25 = require("class-validator");
-function _ts_decorate102(decorators, target, key, desc) {
+function _ts_decorate103(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate102, "_ts_decorate");
-function _ts_metadata81(k, v) {
+__name(_ts_decorate103, "_ts_decorate");
+function _ts_metadata82(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata81, "_ts_metadata");
+__name(_ts_metadata82, "_ts_metadata");
 var PreviewRegistrationPromoDto = class {
   static {
     __name(this, "PreviewRegistrationPromoDto");
@@ -17286,17 +17417,17 @@ var PreviewRegistrationPromoDto = class {
   pendingRegistrationId;
   code;
 };
-_ts_decorate102([
+_ts_decorate103([
   (0, import_class_validator25.IsString)(),
   (0, import_class_validator25.MinLength)(1),
   (0, import_class_validator25.MaxLength)(80),
-  _ts_metadata81("design:type", String)
+  _ts_metadata82("design:type", String)
 ], PreviewRegistrationPromoDto.prototype, "pendingRegistrationId", void 0);
-_ts_decorate102([
+_ts_decorate103([
   (0, import_class_validator25.IsOptional)(),
   (0, import_class_validator25.IsString)(),
   (0, import_class_validator25.MaxLength)(60),
-  _ts_metadata81("design:type", String)
+  _ts_metadata82("design:type", String)
 ], PreviewRegistrationPromoDto.prototype, "code", void 0);
 
 // src/index.ts
@@ -17365,6 +17496,7 @@ __export(src_exports, {
   EntitlementModule: () => EntitlementModule,
   EntitlementService: () => EntitlementService,
   FEATURE_GUARD_CONFIG_TOKEN: () => FEATURE_GUARD_CONFIG_TOKEN,
+  FEATURE_GUARD_MARKER: () => FEATURE_GUARD_MARKER,
   FEATURE_UI_REGISTRY_TOKEN: () => FEATURE_UI_REGISTRY_TOKEN2,
   FeatureGuard: () => FeatureGuard,
   IMPLEMENTS_CAPABILITY_KEY: () => IMPLEMENTS_CAPABILITY_KEY,
@@ -17583,6 +17715,7 @@ __export(src_exports, {
   isFeatureInPlan: () => isFeatureInPlan,
   isFeaturePlannedOnly: () => isFeaturePlannedOnly,
   isLimitExceededError: () => isLimitExceededError,
+  isPlatformFeatureGuard: () => isPlatformFeatureGuard,
   isSaaSiCatPublicRoute: () => isSaaSiCatPublicRoute,
   loadApprovedCatalogKeys: () => loadApprovedCatalogKeys,
   loadDiscoverySnapshotFromFile: () => loadDiscoverySnapshotFromFile,
@@ -18354,7 +18487,7 @@ var FakePlanRepository = class {
       if (v.planId === existing.planKey) this.versions.delete(id);
     }
   }
-  // ─── Lifecycle (SPEC_V2 §11.1 M6 Pack 2a) ───
+  // ─── Lifecycle ───
   // Binding Plan ↔ PlanVersion: PlanVersion.planId === Plan.planKey
   // (soft string reference). Lifecycle methods take planKey
   // as input — the service resolves the plan UUID beforehand.
@@ -18524,14 +18657,14 @@ var FakePlanRepository = class {
 };
 
 // src/testing/create-saas-platform-test-module.ts
-var import_common84 = require("@nestjs/common");
-function _ts_decorate103(decorators, target, key, desc) {
+var import_common85 = require("@nestjs/common");
+function _ts_decorate104(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate103, "_ts_decorate");
+__name(_ts_decorate104, "_ts_decorate");
 var StubMfaPort = class {
   static {
     __name(this, "StubMfaPort");
@@ -18572,8 +18705,8 @@ function createSaasPlatformTestModule(options) {
       __name(this, "SaasPlatformTestHost");
     }
   };
-  SaasPlatformTestHost = _ts_decorate103([
-    (0, import_common84.Module)({
+  SaasPlatformTestHost = _ts_decorate104([
+    (0, import_common85.Module)({
       imports: [
         SaasPlatformModule.forRoot({
           planCatalog: options.planCatalog,