@saasicat/nest 0.22.0 → 0.22.2

package/dist/_entries.cjs

@@ -1631,6 +1631,7 @@ __export(billing_exports, {
   ComposedTenantAuthGuard: () => ComposedTenantAuthGuard,
   ConfiguratorCatalogBuilder: () => ConfiguratorCatalogBuilder,
   FEATURE_GUARD_CONFIG_TOKEN: () => FEATURE_GUARD_CONFIG_TOKEN,
+  FEATURE_GUARD_MARKER: () => FEATURE_GUARD_MARKER,
   FEATURE_UI_REGISTRY_TOKEN: () => FEATURE_UI_REGISTRY_TOKEN2,
   FeatureGuard: () => FeatureGuard,
   LimitExceededFilter: () => LimitExceededFilter,
@@ -1700,6 +1701,7 @@ __export(billing_exports, {
   initialPeriodWindow: () => initialPeriodWindow,
   isFeatureInPlan: () => isFeatureInPlan,
   isFeaturePlannedOnly: () => isFeaturePlannedOnly,
+  isPlatformFeatureGuard: () => isPlatformFeatureGuard,
   loadPlanCatalogFromFile: () => loadPlanCatalogFromFile,
   loadPlanCatalogFromString: () => loadPlanCatalogFromString,
   periodEndAfter: () => periodEndAfter,
@@ -1829,6 +1831,16 @@ function computeNextPeriod(sub, now) {
 }
 __name(computeNextPeriod, "computeNextPeriod");
 
+// src/billing/feature-guard-marker.ts
+var FEATURE_GUARD_MARKER = /* @__PURE__ */ Symbol.for("saasicat/nest/feature-guard");
+function isPlatformFeatureGuard(target) {
+  if (target === null || typeof target !== "function" && typeof target !== "object") {
+    return false;
+  }
+  return target[FEATURE_GUARD_MARKER] === true;
+}
+__name(isPlatformFeatureGuard, "isPlatformFeatureGuard");
+
 // src/billing/require-feature.decorator.ts
 var import_common15 = require("@nestjs/common");
 var REQUIRE_FEATURE_KEY = "require-feature";
@@ -2642,6 +2654,8 @@ var FeatureGuard = class _FeatureGuard {
   entitlements;
   config;
   upsellResolver;
+  /** Lets `FeatureGuardCoverageCheck` recognise this guard across CJS entries. */
+  static [FEATURE_GUARD_MARKER] = true;
   logger = new import_common18.Logger(_FeatureGuard.name);
   constructor(reflector, entitlements, config = null, upsellResolver = null) {
     this.reflector = reflector;
@@ -13684,6 +13698,7 @@ __export(platform_exports, {
   DiscoveryScanner: () => DiscoveryScanner,
   EnforceQuotaInterceptor: () => EnforceQuotaInterceptor,
   EntitlementService: () => EntitlementService,
+  FeatureGuardCoverageCheck: () => FeatureGuardCoverageCheck,
   MarketingProjectionsService: () => MarketingProjectionsService,
   MarketingSettingsService: () => MarketingSettingsService,
   MfaGuard: () => MfaGuard,
@@ -13724,8 +13739,8 @@ __export(platform_exports, {
 });
 
 // src/platform/saas-platform.module.ts
-var import_common79 = require("@nestjs/common");
-var import_core9 = require("@nestjs/core");
+var import_common80 = require("@nestjs/common");
+var import_core10 = require("@nestjs/core");
 var import_types31 = require("@saasicat/types");
 
 // src/promo/module.ts
@@ -14863,10 +14878,12 @@ StaticEntitlementService = _ts_decorate84([
   ])
 ], StaticEntitlementService);
 
-// src/platform/static-feature.guard.ts
+// src/platform/saas-platform.module.ts
+var import_core11 = require("@nestjs/core");
+
+// src/platform/feature-guard-coverage.check.ts
 var import_common75 = require("@nestjs/common");
 var import_core7 = require("@nestjs/core");
-var import_types30 = require("@saasicat/types");
 function _ts_decorate85(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
@@ -14884,6 +14901,115 @@ function _ts_param53(paramIndex, decorator) {
   };
 }
 __name(_ts_param53, "_ts_param");
+var GUARDS_METADATA = "__guards__";
+var METHOD_METADATA = "method";
+var FeatureGuardCoverageCheck = class {
+  static {
+    __name(this, "FeatureGuardCoverageCheck");
+  }
+  discoveryService;
+  metadataScanner;
+  logger = new import_common75.Logger("SaaSiCat");
+  constructor(discoveryService, metadataScanner) {
+    this.discoveryService = discoveryService;
+    this.metadataScanner = metadataScanner;
+  }
+  onApplicationBootstrap() {
+    const uncovered = this.findUncoveredRoutes();
+    if (uncovered.length === 0) return;
+    const list = uncovered.map((r) => `  ${r.controller}.${r.handler} \u2014 requires ${r.features.join(" or ")}`).join("\n");
+    this.logger.warn(`globalFeatureGuard is off and ${uncovered.length} annotated route(s) have no feature guard in front of them, so they serve unlicensed traffic:
+${list}
+Bind one behind your auth guard \u2014 @UseGuards(JwtAuthGuard, StaticFeatureGuard), or FeatureGuard from @saasicat/nest/billing on the V3 entitlement path. A guard of your own that wraps either one is not recognised here; if that is what these routes use, they are covered.`);
+  }
+  /**
+   * Annotated handlers whose own guards and whose controller's guards contain
+   * no recognisable feature guard.
+   *
+   * Deliberately conservative in one direction only: an unrecognised wrapper
+   * is reported (and the message says so) rather than assumed safe, because
+   * the named route is cheap to check. The reverse — staying silent about a
+   * route with no guard at all — is the failure this exists to prevent.
+   */
+  findUncoveredRoutes() {
+    const uncovered = [];
+    for (const wrapper of this.discoveryService.getControllers()) {
+      const instance = wrapper.instance;
+      if (!instance || typeof instance !== "object") continue;
+      const ctor = instance.constructor;
+      if (!ctor) continue;
+      const classGuards = readGuards(ctor);
+      const prototype = Object.getPrototypeOf(instance);
+      for (const method of this.metadataScanner.getAllMethodNames(prototype)) {
+        const handler = instance[method];
+        if (typeof handler !== "function") continue;
+        if (Reflect.getMetadata(METHOD_METADATA, handler) === void 0) continue;
+        const features = readFeatures(handler) ?? readFeatures(ctor) ?? /* not annotated */
+        null;
+        if (!features || features.length === 0) continue;
+        const guards = [
+          ...classGuards,
+          ...readGuards(handler)
+        ];
+        if (guards.some(isPlatformFeatureGuard)) continue;
+        uncovered.push({
+          controller: ctor.name,
+          handler: method,
+          features
+        });
+      }
+    }
+    return uncovered;
+  }
+};
+FeatureGuardCoverageCheck = _ts_decorate85([
+  (0, import_common75.Injectable)(),
+  _ts_param53(0, (0, import_common75.Inject)(import_core7.DiscoveryService)),
+  _ts_param53(1, (0, import_common75.Inject)(import_core7.MetadataScanner)),
+  _ts_metadata66("design:type", Function),
+  _ts_metadata66("design:paramtypes", [
+    typeof import_core7.DiscoveryService === "undefined" ? Object : import_core7.DiscoveryService,
+    typeof import_core7.MetadataScanner === "undefined" ? Object : import_core7.MetadataScanner
+  ])
+], FeatureGuardCoverageCheck);
+function readFeatures(target) {
+  const value = Reflect.getMetadata(REQUIRE_FEATURE_KEY, target);
+  return Array.isArray(value) ? value : null;
+}
+__name(readFeatures, "readFeatures");
+function readGuards(target) {
+  const value = Reflect.getMetadata(GUARDS_METADATA, target);
+  if (!Array.isArray(value)) return [];
+  return value.flatMap((guard) => typeof guard === "function" ? [
+    guard
+  ] : [
+    guard,
+    guard?.constructor
+  ]);
+}
+__name(readGuards, "readGuards");
+
+// src/platform/static-feature.guard.ts
+var import_common76 = require("@nestjs/common");
+var import_core8 = require("@nestjs/core");
+var import_types30 = require("@saasicat/types");
+function _ts_decorate86(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate86, "_ts_decorate");
+function _ts_metadata67(k, v) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+__name(_ts_metadata67, "_ts_metadata");
+function _ts_param54(paramIndex, decorator) {
+  return function(target, key) {
+    decorator(target, key, paramIndex);
+  };
+}
+__name(_ts_param54, "_ts_param");
 var STATIC_FEATURE_GUARD_CONFIG_TOKEN = /* @__PURE__ */ Symbol.for("saas-platform-nest/StaticFeatureGuardConfig");
 var StaticFeatureGuard = class {
   static {
@@ -14892,6 +15018,8 @@ var StaticFeatureGuard = class {
   reflector;
   entitlements;
   config;
+  /** Lets `FeatureGuardCoverageCheck` recognise this guard across CJS entries. */
+  static [FEATURE_GUARD_MARKER] = true;
   constructor(reflector, entitlements, config = null) {
     this.reflector = reflector;
     this.entitlements = entitlements;
@@ -14906,7 +15034,7 @@ var StaticFeatureGuard = class {
     const request = context.switchToHttp().getRequest();
     const user = request.user;
     if (!user) {
-      throw new import_common75.ForbiddenException({
+      throw new import_common76.ForbiddenException({
         code: import_types30.AUTH_ERROR_CODES.NOT_AUTHENTICATED,
         message: "Not authenticated"
       });
@@ -14915,7 +15043,7 @@ var StaticFeatureGuard = class {
     if (role === "SUPER_ADMIN") return true;
     const tenantId = this.config?.tenantIdResolver ? this.config.tenantIdResolver(request) : request.tenantId ?? user.tenantId;
     if (!tenantId) {
-      throw new import_common75.ForbiddenException({
+      throw new import_common76.ForbiddenException({
         code: import_types30.AUTH_ERROR_CODES.NO_TENANT_ASSIGNED,
         message: "No tenant assigned"
       });
@@ -14930,47 +15058,47 @@ var StaticFeatureGuard = class {
         offers: [],
         message: `Feature ${required.join(" / ")} is not included in the current plan.`
       };
-      throw new import_common75.ForbiddenException(body);
+      throw new import_common76.ForbiddenException(body);
     }
     return true;
   }
 };
-StaticFeatureGuard = _ts_decorate85([
-  (0, import_common75.Injectable)(),
-  _ts_param53(0, (0, import_common75.Inject)(import_core7.Reflector)),
-  _ts_param53(1, (0, import_common75.Inject)(StaticEntitlementService)),
-  _ts_param53(2, (0, import_common75.Optional)()),
-  _ts_param53(2, (0, import_common75.Inject)(STATIC_FEATURE_GUARD_CONFIG_TOKEN)),
-  _ts_metadata66("design:type", Function),
-  _ts_metadata66("design:paramtypes", [
-    typeof import_core7.Reflector === "undefined" ? Object : import_core7.Reflector,
+StaticFeatureGuard = _ts_decorate86([
+  (0, import_common76.Injectable)(),
+  _ts_param54(0, (0, import_common76.Inject)(import_core8.Reflector)),
+  _ts_param54(1, (0, import_common76.Inject)(StaticEntitlementService)),
+  _ts_param54(2, (0, import_common76.Optional)()),
+  _ts_param54(2, (0, import_common76.Inject)(STATIC_FEATURE_GUARD_CONFIG_TOKEN)),
+  _ts_metadata67("design:type", Function),
+  _ts_metadata67("design:paramtypes", [
+    typeof import_core8.Reflector === "undefined" ? Object : import_core8.Reflector,
     typeof StaticEntitlementService === "undefined" ? Object : StaticEntitlementService,
     Object
   ])
 ], StaticFeatureGuard);
 
 // src/platform/enforce-quota.interceptor.ts
-var import_common76 = require("@nestjs/common");
-var import_core8 = require("@nestjs/core");
+var import_common77 = require("@nestjs/common");
+var import_core9 = require("@nestjs/core");
 var import_rxjs2 = require("rxjs");
 var import_operators2 = require("rxjs/operators");
-function _ts_decorate86(decorators, target, key, desc) {
+function _ts_decorate87(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate86, "_ts_decorate");
-function _ts_metadata67(k, v) {
+__name(_ts_decorate87, "_ts_decorate");
+function _ts_metadata68(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata67, "_ts_metadata");
-function _ts_param54(paramIndex, decorator) {
+__name(_ts_metadata68, "_ts_metadata");
+function _ts_param55(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param54, "_ts_param");
+__name(_ts_param55, "_ts_param");
 var QUOTA_PROVIDERS_TOKEN = /* @__PURE__ */ Symbol.for("saas-platform-nest/QuotaProviders");
 var EnforceQuotaInterceptor = class {
   static {
@@ -15013,15 +15141,15 @@ var EnforceQuotaInterceptor = class {
     }
   }
 };
-EnforceQuotaInterceptor = _ts_decorate86([
-  (0, import_common76.Injectable)(),
-  _ts_param54(0, (0, import_common76.Inject)(import_core8.Reflector)),
-  _ts_param54(1, (0, import_common76.Inject)(StaticEntitlementService)),
-  _ts_param54(2, (0, import_common76.Optional)()),
-  _ts_param54(2, (0, import_common76.Inject)(QUOTA_PROVIDERS_TOKEN)),
-  _ts_metadata67("design:type", Function),
-  _ts_metadata67("design:paramtypes", [
-    typeof import_core8.Reflector === "undefined" ? Object : import_core8.Reflector,
+EnforceQuotaInterceptor = _ts_decorate87([
+  (0, import_common77.Injectable)(),
+  _ts_param55(0, (0, import_common77.Inject)(import_core9.Reflector)),
+  _ts_param55(1, (0, import_common77.Inject)(StaticEntitlementService)),
+  _ts_param55(2, (0, import_common77.Optional)()),
+  _ts_param55(2, (0, import_common77.Inject)(QUOTA_PROVIDERS_TOKEN)),
+  _ts_metadata68("design:type", Function),
+  _ts_metadata68("design:paramtypes", [
+    typeof import_core9.Reflector === "undefined" ? Object : import_core9.Reflector,
     typeof StaticEntitlementService === "undefined" ? Object : StaticEntitlementService,
     Object
   ])
@@ -15068,18 +15196,18 @@ var SubscriptionPlanResolver = class {
 };
 
 // src/platform/tenant-manifest.service.ts
-var import_common77 = require("@nestjs/common");
-function _ts_decorate87(decorators, target, key, desc) {
+var import_common78 = require("@nestjs/common");
+function _ts_decorate88(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate87, "_ts_decorate");
-function _ts_metadata68(k, v) {
+__name(_ts_decorate88, "_ts_decorate");
+function _ts_metadata69(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata68, "_ts_metadata");
+__name(_ts_metadata69, "_ts_metadata");
 var TenantManifestService = class {
   static {
     __name(this, "TenantManifestService");
@@ -15125,10 +15253,10 @@ var TenantManifestService = class {
     };
   }
 };
-TenantManifestService = _ts_decorate87([
-  (0, import_common77.Injectable)(),
-  _ts_metadata68("design:type", Function),
-  _ts_metadata68("design:paramtypes", [
+TenantManifestService = _ts_decorate88([
+  (0, import_common78.Injectable)(),
+  _ts_metadata69("design:type", Function),
+  _ts_metadata69("design:paramtypes", [
     typeof StaticEntitlementService === "undefined" ? Object : StaticEntitlementService
   ])
 ], TenantManifestService);
@@ -15142,24 +15270,24 @@ function isVisible(item, features) {
 __name(isVisible, "isVisible");
 
 // src/platform/tenant-manifest.controller.ts
-var import_common78 = require("@nestjs/common");
-function _ts_decorate88(decorators, target, key, desc) {
+var import_common79 = require("@nestjs/common");
+function _ts_decorate89(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate88, "_ts_decorate");
-function _ts_metadata69(k, v) {
+__name(_ts_decorate89, "_ts_decorate");
+function _ts_metadata70(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata69, "_ts_metadata");
-function _ts_param55(paramIndex, decorator) {
+__name(_ts_metadata70, "_ts_metadata");
+function _ts_param56(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param55, "_ts_param");
+__name(_ts_param56, "_ts_param");
 function buildTenantManifestController(options) {
   const path = options.path ?? "tenant/manifest";
   let GeneratedTenantManifestController = class GeneratedTenantManifestController {
@@ -15178,21 +15306,21 @@ function buildTenantManifestController(options) {
       return this.svc.getManifest(tenantId);
     }
   };
-  _ts_decorate88([
-    (0, import_common78.Get)(),
-    _ts_param55(0, (0, import_common78.Req)()),
-    _ts_metadata69("design:type", Function),
-    _ts_metadata69("design:paramtypes", [
+  _ts_decorate89([
+    (0, import_common79.Get)(),
+    _ts_param56(0, (0, import_common79.Req)()),
+    _ts_metadata70("design:type", Function),
+    _ts_metadata70("design:paramtypes", [
       typeof RequestWithUser === "undefined" ? Object : RequestWithUser
     ]),
-    _ts_metadata69("design:returntype", Promise)
+    _ts_metadata70("design:returntype", Promise)
   ], GeneratedTenantManifestController.prototype, "get", null);
-  GeneratedTenantManifestController = _ts_decorate88([
-    (0, import_common78.Controller)(path),
-    (0, import_common78.UseGuards)(...options.guards),
-    _ts_param55(0, (0, import_common78.Inject)(TenantManifestService)),
-    _ts_metadata69("design:type", Function),
-    _ts_metadata69("design:paramtypes", [
+  GeneratedTenantManifestController = _ts_decorate89([
+    (0, import_common79.Controller)(path),
+    (0, import_common79.UseGuards)(...options.guards),
+    _ts_param56(0, (0, import_common79.Inject)(TenantManifestService)),
+    _ts_metadata70("design:type", Function),
+    _ts_metadata70("design:paramtypes", [
       typeof TenantManifestService === "undefined" ? Object : TenantManifestService
     ])
   ], GeneratedTenantManifestController);
@@ -15201,14 +15329,14 @@ function buildTenantManifestController(options) {
 __name(buildTenantManifestController, "buildTenantManifestController");
 
 // src/platform/saas-platform.module.ts
-function _ts_decorate89(decorators, target, key, desc) {
+function _ts_decorate90(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate89, "_ts_decorate");
-var PLATFORM_LOGGER = new import_common79.Logger("SaaSiCat");
+__name(_ts_decorate90, "_ts_decorate");
+var PLATFORM_LOGGER = new import_common80.Logger("SaaSiCat");
 var PLATFORM_SUBSCRIPTION_REPOSITORY_TOKEN = /* @__PURE__ */ Symbol.for("saas-platform-nest/PlatformSubscriptionRepository");
 var STANDARD_MANIFEST_REGISTRATION_TOKEN = /* @__PURE__ */ Symbol.for("saas-platform-nest/StandardManifestRegistration");
 function buildStandardManifestContribution(catalog, adminResources, promoCodes) {
@@ -15665,16 +15793,17 @@ var SaasPlatformModule = class _SaasPlatformModule {
         inject: options.quotaProviders ?? []
       }, ...options.globalFeatureGuard === false ? [] : [
         {
-          provide: import_core9.APP_GUARD,
+          provide: import_core10.APP_GUARD,
           useExisting: StaticFeatureGuard
         }
       ], {
-        provide: import_core9.APP_INTERCEPTOR,
+        provide: import_core10.APP_INTERCEPTOR,
         useExisting: EnforceQuotaInterceptor
       });
       lightweightExports.push(PLAN_RESOLVER_PORT_TOKEN, StaticEntitlementService, StaticFeatureGuard, EnforceQuotaInterceptor, QUOTA_PROVIDERS_TOKEN);
       if (options.globalFeatureGuard === false) {
-        PLATFORM_LOGGER.warn("globalFeatureGuard is off \u2014 the platform did NOT bind StaticFeatureGuard as an APP_GUARD. @RequireFeature only blocks on routes where you bound a feature guard yourself, behind your auth guard: @UseGuards(JwtAuthGuard, StaticFeatureGuard), or FeatureGuard from @saasicat/nest/billing on the V3 entitlement path. Any annotated route without one serves unlicensed traffic.");
+        lightweightProviders.push(FeatureGuardCoverageCheck);
+        imports.push(import_core11.DiscoveryModule);
       }
     } else {
       PLATFORM_LOGGER.warn("No plan resolver configured \u2014 @RequireFeature and @EnforceQuota are INERT. The platform registered neither StaticFeatureGuard nor EnforceQuotaInterceptor, so every annotated route serves unlicensed traffic and every quota is unlimited. Set one of: adapters.planResolver, defaultPlanId, or tenantBilling.");
@@ -15739,8 +15868,8 @@ var SaasPlatformModule = class _SaasPlatformModule {
     };
   }
 };
-SaasPlatformModule = _ts_decorate89([
-  (0, import_common79.Module)({})
+SaasPlatformModule = _ts_decorate90([
+  (0, import_common80.Module)({})
 ], SaasPlatformModule);
 
 // src/platform/define-saasicat.ts
@@ -15871,7 +16000,7 @@ var REGISTRATION_PROMO_PREVIEW_TOKEN = /* @__PURE__ */ Symbol.for("saas-platform
 var REGISTRATION_CONFIG_TOKEN = /* @__PURE__ */ Symbol.for("saas-platform/RegistrationConfig");
 
 // src/registration/pending-registration.service.ts
-var import_common80 = require("@nestjs/common");
+var import_common81 = require("@nestjs/common");
 var import_types32 = require("@saasicat/types");
 var import_types33 = require("@saasicat/types");
 
@@ -15927,23 +16056,23 @@ function resolveModel(catalog, modelId) {
 __name(resolveModel, "resolveModel");
 
 // src/registration/pending-registration.service.ts
-function _ts_decorate90(decorators, target, key, desc) {
+function _ts_decorate91(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate90, "_ts_decorate");
-function _ts_metadata70(k, v) {
+__name(_ts_decorate91, "_ts_decorate");
+function _ts_metadata71(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata70, "_ts_metadata");
-function _ts_param56(paramIndex, decorator) {
+__name(_ts_metadata71, "_ts_metadata");
+function _ts_param57(paramIndex, decorator) {
   return function(target, key) {
     decorator(target, key, paramIndex);
   };
 }
-__name(_ts_param56, "_ts_param");
+__name(_ts_param57, "_ts_param");
 var PendingRegistrationService = class _PendingRegistrationService {
   static {
     __name(this, "PendingRegistrationService");
@@ -15963,7 +16092,7 @@ var PendingRegistrationService = class _PendingRegistrationService {
   resumeBaseUrl;
   configuratorLookup;
   promoPreview;
-  logger = new import_common80.Logger(_PendingRegistrationService.name);
+  logger = new import_common81.Logger(_PendingRegistrationService.name);
   constructor(repo, otpDelivery, userLookup, slugCheck, passwordHasher, planCatalog, paymentProvider, paymentEventLog, activationOrchestrator, audit, resumeTokenSigner, resumeDelivery, resumeBaseUrl, configuratorLookup, promoPreview) {
     this.repo = repo;
     this.otpDelivery = otpDelivery;
@@ -16001,17 +16130,17 @@ var PendingRegistrationService = class _PendingRegistrationService {
   async selectPlan(input, context) {
     const pending = await this.repo.findById(input.pendingRegistrationId);
     if (!pending) {
-      throw new import_common80.NotFoundException(codedError(import_types32.REGISTRATION_ERROR_CODES.PENDING_REGISTRATION_NOT_FOUND));
+      throw new import_common81.NotFoundException(codedError(import_types32.REGISTRATION_ERROR_CODES.PENDING_REGISTRATION_NOT_FOUND));
     }
     if (pending.expiresAt.getTime() < Date.now()) {
-      throw new import_common80.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.PENDING_REGISTRATION_EXPIRED));
+      throw new import_common81.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.PENDING_REGISTRATION_EXPIRED));
     }
     if (pending.status !== "EMAIL_VERIFIED" && pending.status !== "PLAN_SELECTED" && pending.status !== "CHECKOUT_STARTED") {
-      throw new import_common80.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.INVALID_REGISTRATION_STATE));
+      throw new import_common81.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.INVALID_REGISTRATION_STATE));
     }
     const plan = await this.planCatalog.findPublicSignupPlan(input.planId);
     if (!plan) {
-      throw new import_common80.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.PLAN_NOT_AVAILABLE));
+      throw new import_common81.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.PLAN_NOT_AVAILABLE));
     }
     const now = /* @__PURE__ */ new Date();
     const expiresAt = new Date(now.getTime() + import_types33.PENDING_ONBOARDING_TTL_DAYS * 24 * 60 * 60 * 1e3);
@@ -16034,20 +16163,20 @@ var PendingRegistrationService = class _PendingRegistrationService {
   async startCheckout(input, context) {
     const pending = await this.repo.findById(input.pendingRegistrationId);
     if (!pending) {
-      throw new import_common80.NotFoundException(codedError(import_types32.REGISTRATION_ERROR_CODES.PENDING_REGISTRATION_NOT_FOUND));
+      throw new import_common81.NotFoundException(codedError(import_types32.REGISTRATION_ERROR_CODES.PENDING_REGISTRATION_NOT_FOUND));
     }
     if (pending.expiresAt.getTime() < Date.now()) {
-      throw new import_common80.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.PENDING_REGISTRATION_EXPIRED));
+      throw new import_common81.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.PENDING_REGISTRATION_EXPIRED));
     }
     if (pending.status !== "PLAN_SELECTED" && pending.status !== "CHECKOUT_STARTED") {
-      throw new import_common80.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.PLAN_NOT_SELECTED));
+      throw new import_common81.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.PLAN_NOT_SELECTED));
     }
     if (!pending.selectedPlanId) {
-      throw new import_common80.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.PLAN_NOT_SELECTED));
+      throw new import_common81.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.PLAN_NOT_SELECTED));
     }
     const plan = await this.planCatalog.findPublicSignupPlan(pending.selectedPlanId);
     if (!plan) {
-      throw new import_common80.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.PLAN_NOT_AVAILABLE));
+      throw new import_common81.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.PLAN_NOT_AVAILABLE));
     }
     const session = await this.paymentProvider.createCheckoutSession({
       pendingRegistrationId: pending.id,
@@ -16256,7 +16385,7 @@ var PendingRegistrationService = class _PendingRegistrationService {
       await this.record("OTP_VERIFY_FAILED", null, context, {
         reason: "unknown_email"
       });
-      throw new import_common80.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.OTP_INVALID));
+      throw new import_common81.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.OTP_INVALID));
     }
     if (pending.status !== "PENDING_EMAIL_VERIFICATION") {
       return {
@@ -16269,33 +16398,33 @@ var PendingRegistrationService = class _PendingRegistrationService {
       await this.record("OTP_VERIFY_FAILED", pending.id, context, {
         reason: "no_otp_set"
       });
-      throw new import_common80.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.OTP_INVALID));
+      throw new import_common81.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.OTP_INVALID));
     }
     if (pending.otpExpiresAt.getTime() < Date.now()) {
       await this.record("OTP_VERIFY_FAILED", pending.id, context, {
         reason: "expired"
       });
-      throw new import_common80.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.OTP_EXPIRED));
+      throw new import_common81.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.OTP_EXPIRED));
     }
     const maxAttempts = resolveOtpVerifyMaxAttempts();
     if (pending.otpAttemptCount >= maxAttempts) {
       await this.record("OTP_VERIFY_FAILED", pending.id, context, {
         reason: "locked"
       });
-      throw new import_common80.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.OTP_LOCKED));
+      throw new import_common81.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.OTP_LOCKED));
     }
     const attemptCount = await this.repo.incrementOtpAttemptCount(pending.id);
     if (attemptCount > maxAttempts) {
       await this.record("OTP_VERIFY_FAILED", pending.id, context, {
         reason: "locked"
       });
-      throw new import_common80.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.OTP_LOCKED));
+      throw new import_common81.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.OTP_LOCKED));
     }
     if (!verifyOtpCode(pending.otpHash, code)) {
       await this.record("OTP_VERIFY_FAILED", pending.id, context, {
         reason: "wrong_code"
       });
-      throw new import_common80.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.OTP_INVALID));
+      throw new import_common81.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.OTP_INVALID));
     }
     const now = /* @__PURE__ */ new Date();
     const updated = await this.repo.update(pending.id, {
@@ -16406,20 +16535,20 @@ var PendingRegistrationService = class _PendingRegistrationService {
    */
   async resumeWithToken(input, context) {
     if (!this.resumeTokenSigner) {
-      throw new import_common80.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.RESUME_NOT_CONFIGURED));
+      throw new import_common81.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.RESUME_NOT_CONFIGURED));
     }
     let decoded;
     try {
       decoded = await this.resumeTokenSigner.verify(input.token);
     } catch {
-      throw new import_common80.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.RESUME_TOKEN_INVALID));
+      throw new import_common81.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.RESUME_TOKEN_INVALID));
     }
     const pending = await this.repo.findById(decoded.pendingRegistrationId);
     if (!pending) {
-      throw new import_common80.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.RESUME_TOKEN_INVALID));
+      throw new import_common81.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.RESUME_TOKEN_INVALID));
     }
     if (pending.expiresAt.getTime() < Date.now()) {
-      throw new import_common80.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.PENDING_REGISTRATION_EXPIRED));
+      throw new import_common81.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.PENDING_REGISTRATION_EXPIRED));
     }
     await this.record("REGISTRATION_NEUTRAL_REPLAY", pending.id, context, {
       via: "resume_token",
@@ -16447,7 +16576,7 @@ var PendingRegistrationService = class _PendingRegistrationService {
   /** Returns the (app-specific) configurator catalog. */
   async getConfiguratorCatalog() {
     if (!this.configuratorLookup) {
-      throw new import_common80.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.CONFIGURATOR_NOT_CONFIGURED));
+      throw new import_common81.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.CONFIGURATOR_NOT_CONFIGURED));
     }
     return this.configuratorLookup.getCatalog();
   }
@@ -16464,22 +16593,22 @@ var PendingRegistrationService = class _PendingRegistrationService {
    */
   async saveConfiguration(input, context) {
     if (!this.configuratorLookup) {
-      throw new import_common80.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.CONFIGURATOR_NOT_CONFIGURED));
+      throw new import_common81.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.CONFIGURATOR_NOT_CONFIGURED));
     }
     const pending = await this.repo.findById(input.pendingRegistrationId);
     if (!pending) {
-      throw new import_common80.NotFoundException(codedError(import_types32.REGISTRATION_ERROR_CODES.PENDING_REGISTRATION_NOT_FOUND));
+      throw new import_common81.NotFoundException(codedError(import_types32.REGISTRATION_ERROR_CODES.PENDING_REGISTRATION_NOT_FOUND));
     }
     if (pending.expiresAt.getTime() < Date.now()) {
-      throw new import_common80.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.PENDING_REGISTRATION_EXPIRED));
+      throw new import_common81.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.PENDING_REGISTRATION_EXPIRED));
     }
     if (pending.status !== "EMAIL_VERIFIED" && pending.status !== "PLAN_SELECTED" && pending.status !== "CHECKOUT_STARTED") {
-      throw new import_common80.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.INVALID_REGISTRATION_STATE));
+      throw new import_common81.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.INVALID_REGISTRATION_STATE));
     }
     const catalog = await this.configuratorLookup.getCatalog();
     const model = catalog.models.find((m) => m.id === input.selection.modelId);
     if (!model) {
-      throw new import_common80.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.MODEL_NOT_AVAILABLE));
+      throw new import_common81.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.MODEL_NOT_AVAILABLE));
     }
     let promoEval;
     if (input.selection.appliedPromoCode && this.promoPreview) {
@@ -16543,20 +16672,20 @@ var PendingRegistrationService = class _PendingRegistrationService {
    */
   async previewConfigPromo(pendingRegistrationId, code) {
     if (!this.configuratorLookup) {
-      throw new import_common80.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.CONFIGURATOR_NOT_CONFIGURED));
+      throw new import_common81.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.CONFIGURATOR_NOT_CONFIGURED));
     }
     const pending = await this.repo.findById(pendingRegistrationId);
     if (!pending) {
-      throw new import_common80.NotFoundException(codedError(import_types32.REGISTRATION_ERROR_CODES.PENDING_REGISTRATION_NOT_FOUND));
+      throw new import_common81.NotFoundException(codedError(import_types32.REGISTRATION_ERROR_CODES.PENDING_REGISTRATION_NOT_FOUND));
     }
     const config = pending.configJson;
     if (!config) {
-      throw new import_common80.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.CONFIG_NOT_SAVED));
+      throw new import_common81.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.CONFIG_NOT_SAVED));
     }
     const catalog = await this.configuratorLookup.getCatalog();
     const model = catalog.models.find((m) => m.id === config.modelId);
     if (!model) {
-      throw new import_common80.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.MODEL_NOT_AVAILABLE));
+      throw new import_common81.BadRequestException(codedError(import_types32.REGISTRATION_ERROR_CODES.MODEL_NOT_AVAILABLE));
     }
     let promoEval;
     if (code && this.promoPreview) {
@@ -16617,30 +16746,30 @@ var PendingRegistrationService = class _PendingRegistrationService {
     throw new Error(`Could not find a free slug for "${tenantName}".`);
   }
 };
-PendingRegistrationService = _ts_decorate90([
-  (0, import_common80.Injectable)(),
-  _ts_param56(0, (0, import_common80.Inject)(PENDING_REGISTRATION_REPOSITORY_TOKEN)),
-  _ts_param56(1, (0, import_common80.Inject)(REGISTRATION_OTP_DELIVERY_TOKEN)),
-  _ts_param56(2, (0, import_common80.Inject)(USER_ACCOUNT_LOOKUP_TOKEN)),
-  _ts_param56(3, (0, import_common80.Inject)(SLUG_AVAILABILITY_CHECK_TOKEN)),
-  _ts_param56(4, (0, import_common80.Inject)(PASSWORD_HASHER_TOKEN)),
-  _ts_param56(5, (0, import_common80.Inject)(PLAN_CATALOG_LOOKUP_TOKEN)),
-  _ts_param56(6, (0, import_common80.Inject)(PAYMENT_PROVIDER_TOKEN)),
-  _ts_param56(7, (0, import_common80.Inject)(PAYMENT_EVENT_LOG_TOKEN)),
-  _ts_param56(8, (0, import_common80.Inject)(ACTIVATION_ORCHESTRATOR_TOKEN)),
-  _ts_param56(9, (0, import_common80.Inject)(REGISTRATION_AUDIT_LOGGER_TOKEN)),
-  _ts_param56(10, (0, import_common80.Optional)()),
-  _ts_param56(10, (0, import_common80.Inject)(REGISTRATION_RESUME_TOKEN_SIGNER_TOKEN)),
-  _ts_param56(11, (0, import_common80.Optional)()),
-  _ts_param56(11, (0, import_common80.Inject)(REGISTRATION_RESUME_DELIVERY_TOKEN)),
-  _ts_param56(12, (0, import_common80.Optional)()),
-  _ts_param56(12, (0, import_common80.Inject)(REGISTRATION_RESUME_BASE_URL_TOKEN)),
-  _ts_param56(13, (0, import_common80.Optional)()),
-  _ts_param56(13, (0, import_common80.Inject)(REGISTRATION_CONFIGURATOR_LOOKUP_TOKEN)),
-  _ts_param56(14, (0, import_common80.Optional)()),
-  _ts_param56(14, (0, import_common80.Inject)(REGISTRATION_PROMO_PREVIEW_TOKEN)),
-  _ts_metadata70("design:type", Function),
-  _ts_metadata70("design:paramtypes", [
+PendingRegistrationService = _ts_decorate91([
+  (0, import_common81.Injectable)(),
+  _ts_param57(0, (0, import_common81.Inject)(PENDING_REGISTRATION_REPOSITORY_TOKEN)),
+  _ts_param57(1, (0, import_common81.Inject)(REGISTRATION_OTP_DELIVERY_TOKEN)),
+  _ts_param57(2, (0, import_common81.Inject)(USER_ACCOUNT_LOOKUP_TOKEN)),
+  _ts_param57(3, (0, import_common81.Inject)(SLUG_AVAILABILITY_CHECK_TOKEN)),
+  _ts_param57(4, (0, import_common81.Inject)(PASSWORD_HASHER_TOKEN)),
+  _ts_param57(5, (0, import_common81.Inject)(PLAN_CATALOG_LOOKUP_TOKEN)),
+  _ts_param57(6, (0, import_common81.Inject)(PAYMENT_PROVIDER_TOKEN)),
+  _ts_param57(7, (0, import_common81.Inject)(PAYMENT_EVENT_LOG_TOKEN)),
+  _ts_param57(8, (0, import_common81.Inject)(ACTIVATION_ORCHESTRATOR_TOKEN)),
+  _ts_param57(9, (0, import_common81.Inject)(REGISTRATION_AUDIT_LOGGER_TOKEN)),
+  _ts_param57(10, (0, import_common81.Optional)()),
+  _ts_param57(10, (0, import_common81.Inject)(REGISTRATION_RESUME_TOKEN_SIGNER_TOKEN)),
+  _ts_param57(11, (0, import_common81.Optional)()),
+  _ts_param57(11, (0, import_common81.Inject)(REGISTRATION_RESUME_DELIVERY_TOKEN)),
+  _ts_param57(12, (0, import_common81.Optional)()),
+  _ts_param57(12, (0, import_common81.Inject)(REGISTRATION_RESUME_BASE_URL_TOKEN)),
+  _ts_param57(13, (0, import_common81.Optional)()),
+  _ts_param57(13, (0, import_common81.Inject)(REGISTRATION_CONFIGURATOR_LOOKUP_TOKEN)),
+  _ts_param57(14, (0, import_common81.Optional)()),
+  _ts_param57(14, (0, import_common81.Inject)(REGISTRATION_PROMO_PREVIEW_TOKEN)),
+  _ts_metadata71("design:type", Function),
+  _ts_metadata71("design:paramtypes", [
     typeof PendingRegistrationRepository === "undefined" ? Object : PendingRegistrationRepository,
     typeof RegistrationOtpDelivery === "undefined" ? Object : RegistrationOtpDelivery,
     typeof UserAccountLookup === "undefined" ? Object : UserAccountLookup,
@@ -16696,25 +16825,25 @@ function nullable(value) {
 __name(nullable, "nullable");
 
 // src/registration/cleanup.cron.ts
-var import_common81 = require("@nestjs/common");
+var import_common82 = require("@nestjs/common");
 var import_schedule2 = require("@nestjs/schedule");
-function _ts_decorate91(decorators, target, key, desc) {
+function _ts_decorate92(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate91, "_ts_decorate");
-function _ts_metadata71(k, v) {
+__name(_ts_decorate92, "_ts_decorate");
+function _ts_metadata72(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata71, "_ts_metadata");
+__name(_ts_metadata72, "_ts_metadata");
 var RegistrationCleanupCron = class _RegistrationCleanupCron {
   static {
     __name(this, "RegistrationCleanupCron");
   }
   service;
-  logger = new import_common81.Logger(_RegistrationCleanupCron.name);
+  logger = new import_common82.Logger(_RegistrationCleanupCron.name);
   constructor(service) {
     this.service = service;
   }
@@ -16743,36 +16872,36 @@ var RegistrationCleanupCron = class _RegistrationCleanupCron {
     }
   }
 };
-_ts_decorate91([
+_ts_decorate92([
   (0, import_schedule2.Cron)("15 4 * * *", {
     timeZone: "Europe/Berlin"
   }),
-  _ts_metadata71("design:type", Function),
-  _ts_metadata71("design:paramtypes", []),
-  _ts_metadata71("design:returntype", Promise)
+  _ts_metadata72("design:type", Function),
+  _ts_metadata72("design:paramtypes", []),
+  _ts_metadata72("design:returntype", Promise)
 ], RegistrationCleanupCron.prototype, "runDaily", null);
-RegistrationCleanupCron = _ts_decorate91([
-  (0, import_common81.Injectable)(),
-  _ts_metadata71("design:type", Function),
-  _ts_metadata71("design:paramtypes", [
+RegistrationCleanupCron = _ts_decorate92([
+  (0, import_common82.Injectable)(),
+  _ts_metadata72("design:type", Function),
+  _ts_metadata72("design:paramtypes", [
     typeof PendingRegistrationService === "undefined" ? Object : PendingRegistrationService
   ])
 ], RegistrationCleanupCron);
 
 // src/registration/ip-rate-limit.guard.ts
-var import_common82 = require("@nestjs/common");
+var import_common83 = require("@nestjs/common");
 var import_types34 = require("@saasicat/types");
-function _ts_decorate92(decorators, target, key, desc) {
+function _ts_decorate93(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate92, "_ts_decorate");
-function _ts_metadata72(k, v) {
+__name(_ts_decorate93, "_ts_decorate");
+function _ts_metadata73(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata72, "_ts_metadata");
+__name(_ts_metadata73, "_ts_metadata");
 var BaseIpRateLimitGuard = class {
   static {
     __name(this, "BaseIpRateLimitGuard");
@@ -16789,7 +16918,7 @@ var BaseIpRateLimitGuard = class {
     const req = context.switchToHttp().getRequest();
     const key = ipFingerprint2(req);
     if (this.exceeded(key)) {
-      throw new import_common82.HttpException({
+      throw new import_common83.HttpException({
         ...codedError(import_types34.REGISTRATION_ERROR_CODES.RATE_LIMITED, {
           retryAfterSeconds: Math.ceil(this.options.windowMs / 1e3)
         }),
@@ -16798,7 +16927,7 @@ var BaseIpRateLimitGuard = class {
         // not the code — the two emitters of RATE_LIMITED disagree
         // on what `reason` means, which is why it is going away.
         reason: this.options.name
-      }, import_common82.HttpStatus.TOO_MANY_REQUESTS);
+      }, import_common83.HttpStatus.TOO_MANY_REQUESTS);
     }
     return true;
   }
@@ -16816,10 +16945,10 @@ var BaseIpRateLimitGuard = class {
     return bucket.count > this.options.limit;
   }
 };
-BaseIpRateLimitGuard = _ts_decorate92([
-  (0, import_common82.Injectable)(),
-  _ts_metadata72("design:type", Function),
-  _ts_metadata72("design:paramtypes", [
+BaseIpRateLimitGuard = _ts_decorate93([
+  (0, import_common83.Injectable)(),
+  _ts_metadata73("design:type", Function),
+  _ts_metadata73("design:paramtypes", [
     Object
   ])
 ], BaseIpRateLimitGuard);
@@ -16831,14 +16960,14 @@ function ipFingerprint2(req) {
 __name(ipFingerprint2, "ipFingerprint");
 
 // src/registration/module.ts
-var import_common83 = require("@nestjs/common");
-function _ts_decorate93(decorators, target, key, desc) {
+var import_common84 = require("@nestjs/common");
+function _ts_decorate94(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate93, "_ts_decorate");
+__name(_ts_decorate94, "_ts_decorate");
 var RegistrationModule = class _RegistrationModule {
   static {
     __name(this, "RegistrationModule");
@@ -16894,23 +17023,23 @@ var RegistrationModule = class _RegistrationModule {
     };
   }
 };
-RegistrationModule = _ts_decorate93([
-  (0, import_common83.Module)({})
+RegistrationModule = _ts_decorate94([
+  (0, import_common84.Module)({})
 ], RegistrationModule);
 
 // src/registration/dto/register-start.dto.ts
 var import_class_validator17 = require("class-validator");
-function _ts_decorate94(decorators, target, key, desc) {
+function _ts_decorate95(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate94, "_ts_decorate");
-function _ts_metadata73(k, v) {
+__name(_ts_decorate95, "_ts_decorate");
+function _ts_metadata74(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata73, "_ts_metadata");
+__name(_ts_metadata74, "_ts_metadata");
 var RegisterStartDto = class {
   static {
     __name(this, "RegisterStartDto");
@@ -16929,78 +17058,78 @@ var RegisterStartDto = class {
   termsAccepted;
   locale;
 };
-_ts_decorate94([
+_ts_decorate95([
   (0, import_class_validator17.IsString)(),
   (0, import_class_validator17.MinLength)(2),
   (0, import_class_validator17.MaxLength)(120),
-  _ts_metadata73("design:type", String)
+  _ts_metadata74("design:type", String)
 ], RegisterStartDto.prototype, "tenantName", void 0);
-_ts_decorate94([
+_ts_decorate95([
   (0, import_class_validator17.IsOptional)(),
   (0, import_class_validator17.IsString)(),
   (0, import_class_validator17.Matches)(/^[a-z0-9-]+$/, {
     message: "tenantSlug may only contain lower-case letters, digits and hyphens."
   }),
   (0, import_class_validator17.MaxLength)(60),
-  _ts_metadata73("design:type", String)
+  _ts_metadata74("design:type", String)
 ], RegisterStartDto.prototype, "tenantSlug", void 0);
-_ts_decorate94([
+_ts_decorate95([
   (0, import_class_validator17.IsOptional)(),
   (0, import_class_validator17.IsString)(),
   (0, import_class_validator17.MaxLength)(40),
-  _ts_metadata73("design:type", String)
+  _ts_metadata74("design:type", String)
 ], RegisterStartDto.prototype, "salutation", void 0);
-_ts_decorate94([
+_ts_decorate95([
   (0, import_class_validator17.IsString)(),
   (0, import_class_validator17.MinLength)(1),
   (0, import_class_validator17.MaxLength)(60),
-  _ts_metadata73("design:type", String)
+  _ts_metadata74("design:type", String)
 ], RegisterStartDto.prototype, "firstName", void 0);
-_ts_decorate94([
+_ts_decorate95([
   (0, import_class_validator17.IsString)(),
   (0, import_class_validator17.MinLength)(1),
   (0, import_class_validator17.MaxLength)(60),
-  _ts_metadata73("design:type", String)
+  _ts_metadata74("design:type", String)
 ], RegisterStartDto.prototype, "lastName", void 0);
-_ts_decorate94([
+_ts_decorate95([
   (0, import_class_validator17.IsEmail)(),
   (0, import_class_validator17.MaxLength)(160),
-  _ts_metadata73("design:type", String)
+  _ts_metadata74("design:type", String)
 ], RegisterStartDto.prototype, "email", void 0);
-_ts_decorate94([
+_ts_decorate95([
   (0, import_class_validator17.IsString)(),
   (0, import_class_validator17.MinLength)(8),
   (0, import_class_validator17.MaxLength)(160),
-  _ts_metadata73("design:type", String)
+  _ts_metadata74("design:type", String)
 ], RegisterStartDto.prototype, "password", void 0);
-_ts_decorate94([
+_ts_decorate95([
   (0, import_class_validator17.Equals)(true, {
     message: "The terms of service, privacy policy and data processing agreement must be accepted."
   }),
-  _ts_metadata73("design:type", Boolean)
+  _ts_metadata74("design:type", Boolean)
 ], RegisterStartDto.prototype, "termsAccepted", void 0);
-_ts_decorate94([
+_ts_decorate95([
   (0, import_class_validator17.IsOptional)(),
   (0, import_class_validator17.IsIn)([
     "de",
     "tr"
   ]),
-  _ts_metadata73("design:type", String)
+  _ts_metadata74("design:type", String)
 ], RegisterStartDto.prototype, "locale", void 0);
 
 // src/registration/dto/verify-registration-otp.dto.ts
 var import_class_validator18 = require("class-validator");
-function _ts_decorate95(decorators, target, key, desc) {
+function _ts_decorate96(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate95, "_ts_decorate");
-function _ts_metadata74(k, v) {
+__name(_ts_decorate96, "_ts_decorate");
+function _ts_metadata75(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata74, "_ts_metadata");
+__name(_ts_metadata75, "_ts_metadata");
 var VerifyRegistrationOtpDto = class {
   static {
     __name(this, "VerifyRegistrationOtpDto");
@@ -17008,55 +17137,55 @@ var VerifyRegistrationOtpDto = class {
   email;
   otp;
 };
-_ts_decorate95([
+_ts_decorate96([
   (0, import_class_validator18.IsEmail)(),
-  _ts_metadata74("design:type", String)
+  _ts_metadata75("design:type", String)
 ], VerifyRegistrationOtpDto.prototype, "email", void 0);
-_ts_decorate95([
+_ts_decorate96([
   (0, import_class_validator18.IsString)(),
   (0, import_class_validator18.Matches)(/^\d{6}$/, {
     message: "The OTP must be 6 digits."
   }),
-  _ts_metadata74("design:type", String)
+  _ts_metadata75("design:type", String)
 ], VerifyRegistrationOtpDto.prototype, "otp", void 0);
 
 // src/registration/dto/resend-registration-otp.dto.ts
 var import_class_validator19 = require("class-validator");
-function _ts_decorate96(decorators, target, key, desc) {
+function _ts_decorate97(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate96, "_ts_decorate");
-function _ts_metadata75(k, v) {
+__name(_ts_decorate97, "_ts_decorate");
+function _ts_metadata76(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata75, "_ts_metadata");
+__name(_ts_metadata76, "_ts_metadata");
 var ResendRegistrationOtpDto = class {
   static {
     __name(this, "ResendRegistrationOtpDto");
   }
   email;
 };
-_ts_decorate96([
+_ts_decorate97([
   (0, import_class_validator19.IsEmail)(),
-  _ts_metadata75("design:type", String)
+  _ts_metadata76("design:type", String)
 ], ResendRegistrationOtpDto.prototype, "email", void 0);
 
 // src/registration/dto/select-plan.dto.ts
 var import_class_validator20 = require("class-validator");
-function _ts_decorate97(decorators, target, key, desc) {
+function _ts_decorate98(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate97, "_ts_decorate");
-function _ts_metadata76(k, v) {
+__name(_ts_decorate98, "_ts_decorate");
+function _ts_metadata77(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata76, "_ts_metadata");
+__name(_ts_metadata77, "_ts_metadata");
 var SelectRegistrationPlanDto = class {
   static {
     __name(this, "SelectRegistrationPlanDto");
@@ -17064,32 +17193,32 @@ var SelectRegistrationPlanDto = class {
   pendingRegistrationId;
   planId;
 };
-_ts_decorate97([
+_ts_decorate98([
   (0, import_class_validator20.IsString)(),
   (0, import_class_validator20.MinLength)(1),
   (0, import_class_validator20.MaxLength)(80),
-  _ts_metadata76("design:type", String)
+  _ts_metadata77("design:type", String)
 ], SelectRegistrationPlanDto.prototype, "pendingRegistrationId", void 0);
-_ts_decorate97([
+_ts_decorate98([
   (0, import_class_validator20.IsString)(),
   (0, import_class_validator20.MinLength)(1),
   (0, import_class_validator20.MaxLength)(40),
-  _ts_metadata76("design:type", String)
+  _ts_metadata77("design:type", String)
 ], SelectRegistrationPlanDto.prototype, "planId", void 0);
 
 // src/registration/dto/start-checkout.dto.ts
 var import_class_validator21 = require("class-validator");
-function _ts_decorate98(decorators, target, key, desc) {
+function _ts_decorate99(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate98, "_ts_decorate");
-function _ts_metadata77(k, v) {
+__name(_ts_decorate99, "_ts_decorate");
+function _ts_metadata78(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata77, "_ts_metadata");
+__name(_ts_metadata78, "_ts_metadata");
 var StartRegistrationCheckoutDto = class {
   static {
     __name(this, "StartRegistrationCheckoutDto");
@@ -17098,40 +17227,40 @@ var StartRegistrationCheckoutDto = class {
   successUrl;
   cancelUrl;
 };
-_ts_decorate98([
+_ts_decorate99([
   (0, import_class_validator21.IsString)(),
   (0, import_class_validator21.MinLength)(1),
   (0, import_class_validator21.MaxLength)(80),
-  _ts_metadata77("design:type", String)
+  _ts_metadata78("design:type", String)
 ], StartRegistrationCheckoutDto.prototype, "pendingRegistrationId", void 0);
-_ts_decorate98([
+_ts_decorate99([
   (0, import_class_validator21.IsUrl)({
     require_tld: false
   }),
   (0, import_class_validator21.MaxLength)(500),
-  _ts_metadata77("design:type", String)
+  _ts_metadata78("design:type", String)
 ], StartRegistrationCheckoutDto.prototype, "successUrl", void 0);
-_ts_decorate98([
+_ts_decorate99([
   (0, import_class_validator21.IsUrl)({
     require_tld: false
   }),
   (0, import_class_validator21.MaxLength)(500),
-  _ts_metadata77("design:type", String)
+  _ts_metadata78("design:type", String)
 ], StartRegistrationCheckoutDto.prototype, "cancelUrl", void 0);
 
 // src/registration/dto/payment-webhook.dto.ts
 var import_class_validator22 = require("class-validator");
-function _ts_decorate99(decorators, target, key, desc) {
+function _ts_decorate100(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate99, "_ts_decorate");
-function _ts_metadata78(k, v) {
+__name(_ts_decorate100, "_ts_decorate");
+function _ts_metadata79(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata78, "_ts_metadata");
+__name(_ts_metadata79, "_ts_metadata");
 var PaymentWebhookDto = class {
   static {
     __name(this, "PaymentWebhookDto");
@@ -17142,76 +17271,76 @@ var PaymentWebhookDto = class {
   status;
   payload;
 };
-_ts_decorate99([
+_ts_decorate100([
   (0, import_class_validator22.IsString)(),
   (0, import_class_validator22.MinLength)(1),
   (0, import_class_validator22.MaxLength)(120),
-  _ts_metadata78("design:type", String)
+  _ts_metadata79("design:type", String)
 ], PaymentWebhookDto.prototype, "eventId", void 0);
-_ts_decorate99([
+_ts_decorate100([
   (0, import_class_validator22.IsOptional)(),
   (0, import_class_validator22.IsString)(),
   (0, import_class_validator22.MaxLength)(120),
-  _ts_metadata78("design:type", String)
+  _ts_metadata79("design:type", String)
 ], PaymentWebhookDto.prototype, "sessionId", void 0);
-_ts_decorate99([
+_ts_decorate100([
   (0, import_class_validator22.IsString)(),
   (0, import_class_validator22.MaxLength)(40),
-  _ts_metadata78("design:type", String)
+  _ts_metadata79("design:type", String)
 ], PaymentWebhookDto.prototype, "provider", void 0);
-_ts_decorate99([
+_ts_decorate100([
   (0, import_class_validator22.IsIn)([
     "SUCCEEDED",
     "FAILED"
   ]),
-  _ts_metadata78("design:type", String)
+  _ts_metadata79("design:type", String)
 ], PaymentWebhookDto.prototype, "status", void 0);
-_ts_decorate99([
+_ts_decorate100([
   (0, import_class_validator22.IsOptional)(),
   (0, import_class_validator22.IsObject)(),
-  _ts_metadata78("design:type", typeof Record === "undefined" ? Object : Record)
+  _ts_metadata79("design:type", typeof Record === "undefined" ? Object : Record)
 ], PaymentWebhookDto.prototype, "payload", void 0);
 
 // src/registration/dto/continue-registration.dto.ts
 var import_class_validator23 = require("class-validator");
-function _ts_decorate100(decorators, target, key, desc) {
+function _ts_decorate101(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate100, "_ts_decorate");
-function _ts_metadata79(k, v) {
+__name(_ts_decorate101, "_ts_decorate");
+function _ts_metadata80(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata79, "_ts_metadata");
+__name(_ts_metadata80, "_ts_metadata");
 var ContinueRegistrationDto = class {
   static {
     __name(this, "ContinueRegistrationDto");
   }
   token;
 };
-_ts_decorate100([
+_ts_decorate101([
   (0, import_class_validator23.IsString)(),
   (0, import_class_validator23.MinLength)(10),
   (0, import_class_validator23.MaxLength)(2e3),
-  _ts_metadata79("design:type", String)
+  _ts_metadata80("design:type", String)
 ], ContinueRegistrationDto.prototype, "token", void 0);
 
 // src/registration/dto/save-configuration.dto.ts
 var import_class_validator24 = require("class-validator");
 var import_class_transformer2 = require("class-transformer");
-function _ts_decorate101(decorators, target, key, desc) {
+function _ts_decorate102(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate101, "_ts_decorate");
-function _ts_metadata80(k, v) {
+__name(_ts_decorate102, "_ts_decorate");
+function _ts_metadata81(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata80, "_ts_metadata");
+__name(_ts_metadata81, "_ts_metadata");
 var SaveRegistrationConfigSelectionDto = class {
   static {
     __name(this, "SaveRegistrationConfigSelectionDto");
@@ -17228,30 +17357,30 @@ var SaveRegistrationConfigSelectionDto = class {
    */
   offerId;
 };
-_ts_decorate101([
+_ts_decorate102([
   (0, import_class_validator24.IsString)(),
   (0, import_class_validator24.MinLength)(1),
   (0, import_class_validator24.MaxLength)(40),
-  _ts_metadata80("design:type", String)
+  _ts_metadata81("design:type", String)
 ], SaveRegistrationConfigSelectionDto.prototype, "modelId", void 0);
-_ts_decorate101([
+_ts_decorate102([
   (0, import_class_validator24.IsIn)([
     "MONTHLY",
     "YEARLY"
   ]),
-  _ts_metadata80("design:type", String)
+  _ts_metadata81("design:type", String)
 ], SaveRegistrationConfigSelectionDto.prototype, "billingCycle", void 0);
-_ts_decorate101([
+_ts_decorate102([
   (0, import_class_validator24.IsOptional)(),
   (0, import_class_validator24.IsString)(),
   (0, import_class_validator24.MaxLength)(60),
-  _ts_metadata80("design:type", Object)
+  _ts_metadata81("design:type", Object)
 ], SaveRegistrationConfigSelectionDto.prototype, "appliedPromoCode", void 0);
-_ts_decorate101([
+_ts_decorate102([
   (0, import_class_validator24.IsOptional)(),
   (0, import_class_validator24.ValidateIf)((_o, value) => value !== null),
   (0, import_class_validator24.IsUUID)(),
-  _ts_metadata80("design:type", Object)
+  _ts_metadata81("design:type", Object)
 ], SaveRegistrationConfigSelectionDto.prototype, "offerId", void 0);
 var SaveRegistrationConfigDto = class {
   static {
@@ -17260,31 +17389,31 @@ var SaveRegistrationConfigDto = class {
   pendingRegistrationId;
   selection;
 };
-_ts_decorate101([
+_ts_decorate102([
   (0, import_class_validator24.IsString)(),
   (0, import_class_validator24.MinLength)(1),
   (0, import_class_validator24.MaxLength)(80),
-  _ts_metadata80("design:type", String)
+  _ts_metadata81("design:type", String)
 ], SaveRegistrationConfigDto.prototype, "pendingRegistrationId", void 0);
-_ts_decorate101([
+_ts_decorate102([
   (0, import_class_validator24.ValidateNested)(),
   (0, import_class_transformer2.Type)(() => SaveRegistrationConfigSelectionDto),
-  _ts_metadata80("design:type", typeof SaveRegistrationConfigSelectionDto === "undefined" ? Object : SaveRegistrationConfigSelectionDto)
+  _ts_metadata81("design:type", typeof SaveRegistrationConfigSelectionDto === "undefined" ? Object : SaveRegistrationConfigSelectionDto)
 ], SaveRegistrationConfigDto.prototype, "selection", void 0);
 
 // src/registration/dto/preview-promo.dto.ts
 var import_class_validator25 = require("class-validator");
-function _ts_decorate102(decorators, target, key, desc) {
+function _ts_decorate103(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate102, "_ts_decorate");
-function _ts_metadata81(k, v) {
+__name(_ts_decorate103, "_ts_decorate");
+function _ts_metadata82(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
-__name(_ts_metadata81, "_ts_metadata");
+__name(_ts_metadata82, "_ts_metadata");
 var PreviewRegistrationPromoDto = class {
   static {
     __name(this, "PreviewRegistrationPromoDto");
@@ -17292,17 +17421,17 @@ var PreviewRegistrationPromoDto = class {
   pendingRegistrationId;
   code;
 };
-_ts_decorate102([
+_ts_decorate103([
   (0, import_class_validator25.IsString)(),
   (0, import_class_validator25.MinLength)(1),
   (0, import_class_validator25.MaxLength)(80),
-  _ts_metadata81("design:type", String)
+  _ts_metadata82("design:type", String)
 ], PreviewRegistrationPromoDto.prototype, "pendingRegistrationId", void 0);
-_ts_decorate102([
+_ts_decorate103([
   (0, import_class_validator25.IsOptional)(),
   (0, import_class_validator25.IsString)(),
   (0, import_class_validator25.MaxLength)(60),
-  _ts_metadata81("design:type", String)
+  _ts_metadata82("design:type", String)
 ], PreviewRegistrationPromoDto.prototype, "code", void 0);
 
 // src/index.ts
@@ -17371,6 +17500,7 @@ __export(src_exports, {
   EntitlementModule: () => EntitlementModule,
   EntitlementService: () => EntitlementService,
   FEATURE_GUARD_CONFIG_TOKEN: () => FEATURE_GUARD_CONFIG_TOKEN,
+  FEATURE_GUARD_MARKER: () => FEATURE_GUARD_MARKER,
   FEATURE_UI_REGISTRY_TOKEN: () => FEATURE_UI_REGISTRY_TOKEN2,
   FeatureGuard: () => FeatureGuard,
   IMPLEMENTS_CAPABILITY_KEY: () => IMPLEMENTS_CAPABILITY_KEY,
@@ -17589,6 +17719,7 @@ __export(src_exports, {
   isFeatureInPlan: () => isFeatureInPlan,
   isFeaturePlannedOnly: () => isFeaturePlannedOnly,
   isLimitExceededError: () => isLimitExceededError,
+  isPlatformFeatureGuard: () => isPlatformFeatureGuard,
   isSaaSiCatPublicRoute: () => isSaaSiCatPublicRoute,
   loadApprovedCatalogKeys: () => loadApprovedCatalogKeys,
   loadDiscoverySnapshotFromFile: () => loadDiscoverySnapshotFromFile,
@@ -18530,14 +18661,14 @@ var FakePlanRepository = class {
 };
 
 // src/testing/create-saas-platform-test-module.ts
-var import_common84 = require("@nestjs/common");
-function _ts_decorate103(decorators, target, key, desc) {
+var import_common85 = require("@nestjs/common");
+function _ts_decorate104(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate103, "_ts_decorate");
+__name(_ts_decorate104, "_ts_decorate");
 var StubMfaPort = class {
   static {
     __name(this, "StubMfaPort");
@@ -18578,8 +18709,8 @@ function createSaasPlatformTestModule(options) {
       __name(this, "SaasPlatformTestHost");
     }
   };
-  SaasPlatformTestHost = _ts_decorate103([
-    (0, import_common84.Module)({
+  SaasPlatformTestHost = _ts_decorate104([
+    (0, import_common85.Module)({
       imports: [
         SaasPlatformModule.forRoot({
           planCatalog: options.planCatalog,