@saasicat/nest 0.22.0 → 0.22.2

package/dist/index.js

@@ -1,44 +1,4 @@
-import "./chunk-HWGIMNWR.js";
-import {
-  ACTIVATION_ORCHESTRATOR_TOKEN,
-  BaseIpRateLimitGuard,
-  ContinueRegistrationDto,
-  CronExpression,
-  PASSWORD_HASHER_TOKEN,
-  PAYMENT_EVENT_LOG_TOKEN,
-  PAYMENT_PROVIDER_TOKEN,
-  PENDING_REGISTRATION_REPOSITORY_TOKEN,
-  PLAN_CATALOG_LOOKUP_TOKEN,
-  PaymentWebhookDto,
-  PendingRegistrationService,
-  PreviewRegistrationPromoDto,
-  REGISTRATION_AUDIT_LOGGER_TOKEN,
-  REGISTRATION_CONFIGURATOR_LOOKUP_TOKEN,
-  REGISTRATION_CONFIG_TOKEN,
-  REGISTRATION_OTP_DELIVERY_TOKEN,
-  REGISTRATION_PROMO_PREVIEW_TOKEN,
-  REGISTRATION_RESUME_BASE_URL_TOKEN,
-  REGISTRATION_RESUME_DELIVERY_TOKEN,
-  REGISTRATION_RESUME_TOKEN_SIGNER_TOKEN,
-  RegisterStartDto,
-  RegistrationCleanupCron,
-  RegistrationModule,
-  ResendRegistrationOtpDto,
-  SLUG_AVAILABILITY_CHECK_TOKEN,
-  SaveRegistrationConfigDto,
-  SaveRegistrationConfigSelectionDto,
-  SelectRegistrationPlanDto,
-  StartRegistrationCheckoutDto,
-  USER_ACCOUNT_LOOKUP_TOKEN,
-  VerifyRegistrationOtpDto,
-  computeBreakdown,
-  generateOtpCode,
-  hashOtpCode,
-  resolveModel,
-  slugify,
-  verifyOtpCode
-} from "./chunk-MJ32VNZD.js";
-import "./chunk-UF53DWWR.js";
+import "./chunk-DBZGV3HC.js";
 import {
   formatPreflightReport,
   formatSeedGateReport,
@@ -47,8 +7,8 @@ import {
   runSeedGateFromFile,
   seedGateExitCode,
   validateSeedAgainstSnapshot
-} from "./chunk-7ZPFQXHM.js";
-import "./chunk-DBZGV3HC.js";
+} from "./chunk-UOWK2HYG.js";
+import "./chunk-UF53DWWR.js";
 import {
   DefinesQuota,
   EnforceQuota,
@@ -62,7 +22,7 @@ import {
 } from "./chunk-74SCJ4HF.js";
 import {
   defineSaaSiCat
-} from "./chunk-EWPF57AG.js";
+} from "./chunk-FY4EJTV4.js";
 import {
   SETUP_CONFIG_TOKEN,
   SETUP_PROVISIONING_PORT_TOKEN,
@@ -70,46 +30,7 @@ import {
   SetupController,
   SetupModule,
   SetupService
-} from "./chunk-UFS344JD.js";
-import {
-  CreatePromoCodeDto,
-  PreviewPromoCodeDto,
-  PromoCodeExpirer,
-  PromoCodePublicController,
-  PromoCodeRateLimitGuard,
-  PromoCodesModule,
-  UpdatePromoCodeDto,
-  buildPromoCodeAdminController,
-  hashIp,
-  ipFingerprint
-} from "./chunk-4O6R6ARQ.js";
-import {
-  ADMIN_MANIFEST_CONFIG,
-  ADMIN_RESOURCES_PORT_TOKEN,
-  ADMIN_STATS_AUDIT_WINDOW_DAYS_TOKEN,
-  AUDIT_STATS_PORT_TOKEN,
-  AdminBypassRlsInterceptor,
-  AdminManifestModule,
-  AdminManifestService,
-  AdminModule,
-  AdminPublicBootController,
-  AdminResourcesModule,
-  AdminResourcesService,
-  AdminStatsController,
-  AdminStatsModule,
-  AdminStatsService,
-  MfaGuard,
-  MfaService,
-  PLATFORM_CORE_CONTRIBUTION_TOKEN,
-  PLATFORM_CORE_MANIFEST_CONTRIBUTION,
-  PROMO_CODE_STATS_PORT_TOKEN,
-  REQUIRE_MFA_KEY,
-  RequireMfa,
-  SUBSCRIPTION_STATS_PORT_TOKEN,
-  SuperAdminGuard,
-  SuspendTenantDto,
-  buildAdminStatsController
-} from "./chunk-SN5UOC43.js";
+} from "./chunk-FPEQPHJE.js";
 import {
   CONTRACT_FREEZE_PORT_TOKEN,
   CONTRACT_FREEZE_PROJECT_KEY_TOKEN,
@@ -121,6 +42,7 @@ import {
   ComposedTenantAuthGuard,
   ConfiguratorCatalogBuilder,
   FEATURE_GUARD_CONFIG_TOKEN,
+  FEATURE_GUARD_MARKER,
   FEATURE_UI_REGISTRY_TOKEN,
   FeatureGuard,
   LimitExceededFilter,
@@ -164,36 +86,22 @@ import {
   computeProration,
   decideRenewal,
   initialPeriodWindow,
+  isPlatformFeatureGuard,
   loadPlanCatalogFromFile,
   loadPlanCatalogFromString,
   periodEndAfter,
   periodEndWithMinLead,
   resolveBundleCancelEffectiveAt,
   resolveBundlePriceNet
-} from "./chunk-UO64MK3Q.js";
-import {
-  PROMO_CODE_REDEMPTION_REPOSITORY_TOKEN,
-  PROMO_CODE_REPOSITORY_TOKEN,
-  PROMO_CODE_VALIDATION_LOG_REPOSITORY_TOKEN,
-  PROMO_FIRST_TIME_CUSTOMER_CHECK_TOKEN,
-  PROMO_REVENUE_DEDUCTION_AGGREGATOR_TOKEN,
-  PROMO_SERVICE_CONFIG_TOKEN,
-  PROMO_SUBSCRIPTION_LOOKUP_TOKEN,
-  PROMO_TRANSACTION_RUNNER_TOKEN,
-  PromoCodesService,
-  addCycles,
-  buildLabel,
-  computeDiscountGross,
-  computeDiscountedGross,
-  computeRegularStartsAt
-} from "./chunk-VQQWF7MW.js";
+} from "./chunk-4BSSMDLL.js";
 import {
-  SubscriptionContractModule,
-  SubscriptionContractService,
-  contractLineItemToInvoiceLineItem,
-  sortContractLineItemsForInvoice,
-  subscriptionContractToInvoiceSnapshot
-} from "./chunk-B7NRY2LV.js";
+  CHECKOUT_OFFER_REPOSITORY_TOKEN,
+  CheckoutOfferModule,
+  CheckoutOfferService,
+  CreateCheckoutOfferDto,
+  UpdateCheckoutOfferDto,
+  buildCheckoutOfferController
+} from "./chunk-ES5AN53A.js";
 import {
   ADVISORY_STRICT_MODE_CODES,
   BundlesService,
@@ -242,7 +150,7 @@ import {
   quotaApprovalSignature,
   validateBundleDraft,
   validatePlanDraft
-} from "./chunk-7X5MSAIL.js";
+} from "./chunk-QB7MICKQ.js";
 import {
   AUDIT_CONTEXT_RESOLVER_TOKEN,
   PENDING_PLAN_QUERY_PORT_TOKEN,
@@ -258,25 +166,32 @@ import {
   classifyPlanDiff
 } from "./chunk-WPUVJRIN.js";
 import {
-  AUDIT_PORT_TOKEN,
-  AdminAuditService,
-  MFA_PORT_TOKEN,
-  RLS_BYPASS_PORT_TOKEN
-} from "./chunk-E56W4U2P.js";
-import {
-  CHECKOUT_OFFER_REPOSITORY_TOKEN,
-  CheckoutOfferModule,
-  CheckoutOfferService,
-  CreateCheckoutOfferDto,
-  UpdateCheckoutOfferDto,
-  buildCheckoutOfferController
-} from "./chunk-XTVAFJ3P.js";
-import "./chunk-BSK6YBLI.js";
-import {
-  SAASICAT_PUBLIC_ROUTE_KEY,
-  SaaSiCatPublicRoute,
-  isSaaSiCatPublicRoute
-} from "./chunk-YSC46BGM.js";
+  ADMIN_MANIFEST_CONFIG,
+  ADMIN_RESOURCES_PORT_TOKEN,
+  ADMIN_STATS_AUDIT_WINDOW_DAYS_TOKEN,
+  AUDIT_STATS_PORT_TOKEN,
+  AdminBypassRlsInterceptor,
+  AdminManifestModule,
+  AdminManifestService,
+  AdminModule,
+  AdminPublicBootController,
+  AdminResourcesModule,
+  AdminResourcesService,
+  AdminStatsController,
+  AdminStatsModule,
+  AdminStatsService,
+  MfaGuard,
+  MfaService,
+  PLATFORM_CORE_CONTRIBUTION_TOKEN,
+  PLATFORM_CORE_MANIFEST_CONTRIBUTION,
+  PROMO_CODE_STATS_PORT_TOKEN,
+  REQUIRE_MFA_KEY,
+  RequireMfa,
+  SUBSCRIPTION_STATS_PORT_TOKEN,
+  SuperAdminGuard,
+  SuspendTenantDto,
+  buildAdminStatsController
+} from "./chunk-SN5UOC43.js";
 import {
   DiscoveryModule,
   buildDiscoveryController
@@ -310,7 +225,70 @@ import {
   mergeSubscriptionBundlesIntoLimits,
   resolveEntitlementPlan,
   toEffectiveLimitsSnapshot
-} from "./chunk-NNNXXUPT.js";
+} from "./chunk-NXD7763W.js";
+import {
+  ENTITLEMENT_RESOLUTION_CONFIG_TOKEN,
+  ENTITLEMENT_SERVICE_TOKEN,
+  PLAN_VERSION_REPOSITORY_TOKEN,
+  SUBSCRIPTION_REPOSITORY_TOKEN,
+  TRANSACTION_RUNNER_TOKEN
+} from "./chunk-WKVBNTYC.js";
+import {
+  BUNDLE_REPOSITORY_TOKEN,
+  CATALOG_ENTRY_REPOSITORY_TOKEN,
+  CATALOG_SERVICE_CONFIG_TOKEN,
+  MARKETING_PROJECTION_REPOSITORY_TOKEN,
+  MARKETING_SETTINGS_REPOSITORY_TOKEN,
+  PLAN_REPOSITORY_TOKEN,
+  PROMOTION_REPOSITORY_TOKEN
+} from "./chunk-L4KTQ6CL.js";
+import {
+  DEFINES_QUOTA_KEY,
+  DISCOVERY_SNAPSHOT_TOKEN,
+  ENFORCE_QUOTA_KEY,
+  IMPLEMENTS_CAPABILITY_KEY,
+  REQUIRES_CAPABILITY_KEY
+} from "./chunk-L4SUWH5B.js";
+import "./chunk-HWGIMNWR.js";
+import {
+  CreatePromoCodeDto,
+  PreviewPromoCodeDto,
+  PromoCodeExpirer,
+  PromoCodePublicController,
+  PromoCodeRateLimitGuard,
+  PromoCodesModule,
+  UpdatePromoCodeDto,
+  buildPromoCodeAdminController,
+  hashIp,
+  ipFingerprint
+} from "./chunk-4O6R6ARQ.js";
+import {
+  PROMO_CODE_REDEMPTION_REPOSITORY_TOKEN,
+  PROMO_CODE_REPOSITORY_TOKEN,
+  PROMO_CODE_VALIDATION_LOG_REPOSITORY_TOKEN,
+  PROMO_FIRST_TIME_CUSTOMER_CHECK_TOKEN,
+  PROMO_REVENUE_DEDUCTION_AGGREGATOR_TOKEN,
+  PROMO_SERVICE_CONFIG_TOKEN,
+  PROMO_SUBSCRIPTION_LOOKUP_TOKEN,
+  PROMO_TRANSACTION_RUNNER_TOKEN,
+  PromoCodesService,
+  addCycles,
+  buildLabel,
+  computeDiscountGross,
+  computeDiscountedGross,
+  computeRegularStartsAt
+} from "./chunk-VQQWF7MW.js";
+import {
+  AUDIT_PORT_TOKEN,
+  AdminAuditService,
+  MFA_PORT_TOKEN,
+  RLS_BYPASS_PORT_TOKEN
+} from "./chunk-E56W4U2P.js";
+import {
+  SAASICAT_PUBLIC_ROUTE_KEY,
+  SaaSiCatPublicRoute,
+  isSaaSiCatPublicRoute
+} from "./chunk-YSC46BGM.js";
 import {
   PLAN_CATALOG_READ_SINK_TOKEN,
   PLAN_CATALOG_TOKEN,
@@ -330,37 +308,61 @@ import {
   round2
 } from "./chunk-DQKCK7DX.js";
 import {
-  SUBSCRIPTION_CONTRACT_REPOSITORY_TOKEN
-} from "./chunk-NYLON2VC.js";
+  ACTIVATION_ORCHESTRATOR_TOKEN,
+  BaseIpRateLimitGuard,
+  ContinueRegistrationDto,
+  CronExpression,
+  PASSWORD_HASHER_TOKEN,
+  PAYMENT_EVENT_LOG_TOKEN,
+  PAYMENT_PROVIDER_TOKEN,
+  PENDING_REGISTRATION_REPOSITORY_TOKEN,
+  PLAN_CATALOG_LOOKUP_TOKEN,
+  PaymentWebhookDto,
+  PendingRegistrationService,
+  PreviewRegistrationPromoDto,
+  REGISTRATION_AUDIT_LOGGER_TOKEN,
+  REGISTRATION_CONFIGURATOR_LOOKUP_TOKEN,
+  REGISTRATION_CONFIG_TOKEN,
+  REGISTRATION_OTP_DELIVERY_TOKEN,
+  REGISTRATION_PROMO_PREVIEW_TOKEN,
+  REGISTRATION_RESUME_BASE_URL_TOKEN,
+  REGISTRATION_RESUME_DELIVERY_TOKEN,
+  REGISTRATION_RESUME_TOKEN_SIGNER_TOKEN,
+  RegisterStartDto,
+  RegistrationCleanupCron,
+  RegistrationModule,
+  ResendRegistrationOtpDto,
+  SLUG_AVAILABILITY_CHECK_TOKEN,
+  SaveRegistrationConfigDto,
+  SaveRegistrationConfigSelectionDto,
+  SelectRegistrationPlanDto,
+  StartRegistrationCheckoutDto,
+  USER_ACCOUNT_LOOKUP_TOKEN,
+  VerifyRegistrationOtpDto,
+  computeBreakdown,
+  generateOtpCode,
+  hashOtpCode,
+  resolveModel,
+  slugify,
+  verifyOtpCode
+} from "./chunk-MJ32VNZD.js";
 import {
   codedError
 } from "./chunk-EBJJNTW6.js";
 import {
-  ENTITLEMENT_RESOLUTION_CONFIG_TOKEN,
-  ENTITLEMENT_SERVICE_TOKEN,
-  PLAN_VERSION_REPOSITORY_TOKEN,
-  SUBSCRIPTION_REPOSITORY_TOKEN,
-  TRANSACTION_RUNNER_TOKEN
-} from "./chunk-WKVBNTYC.js";
+  SubscriptionContractModule,
+  SubscriptionContractService,
+  contractLineItemToInvoiceLineItem,
+  sortContractLineItemsForInvoice,
+  subscriptionContractToInvoiceSnapshot
+} from "./chunk-B7NRY2LV.js";
+import "./chunk-BSK6YBLI.js";
 import {
-  BUNDLE_REPOSITORY_TOKEN,
-  CATALOG_ENTRY_REPOSITORY_TOKEN,
-  CATALOG_SERVICE_CONFIG_TOKEN,
-  MARKETING_PROJECTION_REPOSITORY_TOKEN,
-  MARKETING_SETTINGS_REPOSITORY_TOKEN,
-  PLAN_REPOSITORY_TOKEN,
-  PROMOTION_REPOSITORY_TOKEN
-} from "./chunk-L4KTQ6CL.js";
+  SUBSCRIPTION_CONTRACT_REPOSITORY_TOKEN
+} from "./chunk-NYLON2VC.js";
 import {
   asProvider
 } from "./chunk-SABTXESR.js";
-import {
-  DEFINES_QUOTA_KEY,
-  DISCOVERY_SNAPSHOT_TOKEN,
-  ENFORCE_QUOTA_KEY,
-  IMPLEMENTS_CAPABILITY_KEY,
-  REQUIRES_CAPABILITY_KEY
-} from "./chunk-L4SUWH5B.js";
 import "./chunk-SHUYVCID.js";
 export {
   ACTIVATION_ORCHESTRATOR_TOKEN,
@@ -426,6 +428,7 @@ export {
   EntitlementModule,
   EntitlementService,
   FEATURE_GUARD_CONFIG_TOKEN,
+  FEATURE_GUARD_MARKER,
   FEATURE_UI_REGISTRY_TOKEN,
   FeatureGuard,
   IMPLEMENTS_CAPABILITY_KEY,
@@ -644,6 +647,7 @@ export {
   isFeatureInPlan,
   isFeaturePlannedOnly,
   isLimitExceededError,
+  isPlatformFeatureGuard,
   isSaaSiCatPublicRoute,
   loadApprovedCatalogKeys,
   loadDiscoverySnapshotFromFile,

package/dist/platform/index.d.cts

@@ -1,14 +1,16 @@
-import { p as PlanResolverPort } from '../saas-platform.module-HCDNZTiE.cjs';
-export { P as PLAN_RESOLVER_PORT_TOKEN, S as SaaSiCatModule, a as SaasPlatformAdapters, b as SaasPlatformAdminResourcesOptions, c as SaasPlatformAdminStatsOptions, d as SaasPlatformCatalogOptions, e as SaasPlatformCheckoutOfferOptions, S as SaasPlatformModule, f as SaasPlatformModuleOptions, g as SaasPlatformPromoCodesOptions, h as SaasPlatformSetupOptions, i as SaasPlatformSubscriptionBundlesOptions, j as SaasPlatformSubscriptionContractOptions, k as SaasPlatformTenantAuthGuards, l as SaasPlatformTenantBillingOptions, m as SetupModule, n as SetupModuleOptions, o as StaticPlanResolver, T as TenantManifestControllerOptions, q as buildTenantManifestController } from '../saas-platform.module-HCDNZTiE.cjs';
-export { a as SAASICAT_PUBLIC_ROUTE_KEY, d as SaaSiCatPublicRoute, S as SetupService, f as defineSaaSiCat, i as isSaaSiCatPublicRoute } from '../define-saasicat-ByPjtKPy.cjs';
+import { p as PlanResolverPort } from '../saas-platform.module-CgalxzcT.cjs';
+export { P as PLAN_RESOLVER_PORT_TOKEN, S as SaaSiCatModule, a as SaasPlatformAdapters, b as SaasPlatformAdminResourcesOptions, c as SaasPlatformAdminStatsOptions, d as SaasPlatformCatalogOptions, e as SaasPlatformCheckoutOfferOptions, S as SaasPlatformModule, f as SaasPlatformModuleOptions, g as SaasPlatformPromoCodesOptions, h as SaasPlatformSetupOptions, i as SaasPlatformSubscriptionBundlesOptions, j as SaasPlatformSubscriptionContractOptions, k as SaasPlatformTenantAuthGuards, l as SaasPlatformTenantBillingOptions, m as SetupModule, n as SetupModuleOptions, o as StaticPlanResolver, T as TenantManifestControllerOptions, q as buildTenantManifestController } from '../saas-platform.module-CgalxzcT.cjs';
+export { a as SAASICAT_PUBLIC_ROUTE_KEY, d as SaaSiCatPublicRoute, S as SetupService, f as defineSaaSiCat, i as isSaaSiCatPublicRoute } from '../define-saasicat-D30I-WET.cjs';
 import { SubscriptionRepository, UsageSnapshotPort, QuotaProvider } from '@saasicat/types';
-import { S as StaticEntitlementService } from '../enforce-quota.interceptor-BrsU1UYJ.cjs';
-export { E as EnforceQuotaInterceptor, Q as QUOTA_PROVIDERS_TOKEN, b as STATIC_FEATURE_GUARD_CONFIG_TOKEN, c as StaticEntitlementSnapshot, a as StaticFeatureGuard, d as StaticFeatureGuardConfig } from '../enforce-quota.interceptor-BrsU1UYJ.cjs';
+import { S as StaticEntitlementService } from '../enforce-quota.interceptor-DY6CLjoP.cjs';
+export { E as EnforceQuotaInterceptor, Q as QUOTA_PROVIDERS_TOKEN, b as STATIC_FEATURE_GUARD_CONFIG_TOKEN, c as StaticEntitlementSnapshot, a as StaticFeatureGuard, d as StaticFeatureGuardConfig } from '../enforce-quota.interceptor-DY6CLjoP.cjs';
+import { OnApplicationBootstrap } from '@nestjs/common';
+import { DiscoveryService, MetadataScanner } from '@nestjs/core';
 export { A as AdminBypassRlsInterceptor, a as AdminManifestModule, b as AdminManifestModuleOptions, c as AdminManifestService, d as AdminModule, e as AdminModuleOptions, f as AdminStatsService, M as MfaGuard, h as MfaService, S as SuperAdminGuard } from '../admin-stats.service-HUZIU448.cjs';
 export { A as AdminAuditService } from '../admin-audit.service-9IqXMlZm.cjs';
 export { e as AdminResourcesService, f as AdminStatsModule, g as AdminStatsModuleOptions } from '../admin-resources.module-DGgGSdzN.cjs';
 export { c as EntitlementService } from '../aggregation-mZ7WZROK.cjs';
-export { d as ComposedTenantAuthGuard, P as PendingPlanMaterializationService, h as PlanChangePreviewService, r as SubscriptionBundlePreviewService, s as SubscriptionBundlesService, T as TenantAdminGuard, t as TenantBillingController } from '../tenant-billing.controller-DubP6-Md.cjs';
+export { d as ComposedTenantAuthGuard, P as PendingPlanMaterializationService, h as PlanChangePreviewService, r as SubscriptionBundlePreviewService, s as SubscriptionBundlesService, T as TenantAdminGuard, t as TenantBillingController } from '../tenant-billing.controller-DHSUrT_N.cjs';
 export { B as BundlesService, C as CatalogEntriesService, M as MarketingProjectionsService, b as MarketingSettingsService, P as PlanVersionsService, c as PlansService, d as PromotionsService, e as PublicMarketingCatalogService } from '../plan-versions.service-_saKzb50.cjs';
 export { c as DiscoveryScanner } from '../discovery.scanner-DLgEvuoy.cjs';
 export { P as PromoCodeRateLimitGuard } from '../rate-limit.guard-dntqAlfZ.cjs';
@@ -17,13 +19,11 @@ export { a as CheckoutOfferModule, b as CheckoutOfferModuleOptions } from '../ch
 export { C as CheckoutOfferService } from '../checkout-offer.service-BX51dljL.cjs';
 export { S as SubscriptionContractModule, a as SubscriptionContractModuleOptions } from '../subscription-contract.module-B2uNvUJL.cjs';
 export { S as SubscriptionContractService } from '../subscription-contract.service--cm47ZJJ.cjs';
-import '@nestjs/common';
 import '../di-CcNeq9v-.cjs';
 import '../plan-resolution-CFCoUkrE.cjs';
 import '../module-CHMIyWlf.cjs';
 import '../catalog.module-D-_pQDNA.cjs';
-import '../subscription-bundles.module-DCpV-Pb5.cjs';
-import '@nestjs/core';
+import '../subscription-bundles.module-Cfi-lFWF.cjs';
 import 'rxjs';
 
 /**
@@ -48,6 +48,24 @@ declare class QuotaProvidersUsageSnapshot implements UsageSnapshotPort {
     snapshot(tenantId: string): Promise<Record<string, number>>;
 }
 
+declare class FeatureGuardCoverageCheck implements OnApplicationBootstrap {
+    private readonly discoveryService;
+    private readonly metadataScanner;
+    private readonly logger;
+    constructor(discoveryService: DiscoveryService, metadataScanner: MetadataScanner);
+    onApplicationBootstrap(): void;
+    /**
+     * Annotated handlers whose own guards and whose controller's guards contain
+     * no recognisable feature guard.
+     *
+     * Deliberately conservative in one direction only: an unrecognised wrapper
+     * is reported (and the message says so) rather than assumed safe, because
+     * the named route is cheap to check. The reverse — staying silent about a
+     * route with no guard at all — is the failure this exists to prevent.
+     */
+    private findUncoveredRoutes;
+}
+
 interface TenantNavItem {
     /** Unique slug, e.g. "notes", "billing", "settings". */
     id: string;
@@ -101,4 +119,4 @@ declare class TenantManifestService {
     getManifest(tenantId: string): Promise<TenantManifest>;
 }
 
-export { PlanResolverPort, QuotaProvidersUsageSnapshot, StaticEntitlementService, SubscriptionPlanResolver, type TenantManifest, TenantManifestService, type TenantNavItem };
+export { FeatureGuardCoverageCheck, PlanResolverPort, QuotaProvidersUsageSnapshot, StaticEntitlementService, SubscriptionPlanResolver, type TenantManifest, TenantManifestService, type TenantNavItem };

package/dist/platform/index.d.ts

@@ -1,14 +1,16 @@
-import { p as PlanResolverPort } from '../saas-platform.module-DolE41YY.js';
-export { P as PLAN_RESOLVER_PORT_TOKEN, S as SaaSiCatModule, a as SaasPlatformAdapters, b as SaasPlatformAdminResourcesOptions, c as SaasPlatformAdminStatsOptions, d as SaasPlatformCatalogOptions, e as SaasPlatformCheckoutOfferOptions, S as SaasPlatformModule, f as SaasPlatformModuleOptions, g as SaasPlatformPromoCodesOptions, h as SaasPlatformSetupOptions, i as SaasPlatformSubscriptionBundlesOptions, j as SaasPlatformSubscriptionContractOptions, k as SaasPlatformTenantAuthGuards, l as SaasPlatformTenantBillingOptions, m as SetupModule, n as SetupModuleOptions, o as StaticPlanResolver, T as TenantManifestControllerOptions, q as buildTenantManifestController } from '../saas-platform.module-DolE41YY.js';
-export { a as SAASICAT_PUBLIC_ROUTE_KEY, d as SaaSiCatPublicRoute, S as SetupService, f as defineSaaSiCat, i as isSaaSiCatPublicRoute } from '../define-saasicat-C99hWAUK.js';
+import { p as PlanResolverPort } from '../saas-platform.module-D1mUZPrz.js';
+export { P as PLAN_RESOLVER_PORT_TOKEN, S as SaaSiCatModule, a as SaasPlatformAdapters, b as SaasPlatformAdminResourcesOptions, c as SaasPlatformAdminStatsOptions, d as SaasPlatformCatalogOptions, e as SaasPlatformCheckoutOfferOptions, S as SaasPlatformModule, f as SaasPlatformModuleOptions, g as SaasPlatformPromoCodesOptions, h as SaasPlatformSetupOptions, i as SaasPlatformSubscriptionBundlesOptions, j as SaasPlatformSubscriptionContractOptions, k as SaasPlatformTenantAuthGuards, l as SaasPlatformTenantBillingOptions, m as SetupModule, n as SetupModuleOptions, o as StaticPlanResolver, T as TenantManifestControllerOptions, q as buildTenantManifestController } from '../saas-platform.module-D1mUZPrz.js';
+export { a as SAASICAT_PUBLIC_ROUTE_KEY, d as SaaSiCatPublicRoute, S as SetupService, f as defineSaaSiCat, i as isSaaSiCatPublicRoute } from '../define-saasicat-BK6RRWWG.js';
 import { SubscriptionRepository, UsageSnapshotPort, QuotaProvider } from '@saasicat/types';
-import { S as StaticEntitlementService } from '../enforce-quota.interceptor-reO-i71U.js';
-export { E as EnforceQuotaInterceptor, Q as QUOTA_PROVIDERS_TOKEN, b as STATIC_FEATURE_GUARD_CONFIG_TOKEN, c as StaticEntitlementSnapshot, a as StaticFeatureGuard, d as StaticFeatureGuardConfig } from '../enforce-quota.interceptor-reO-i71U.js';
+import { S as StaticEntitlementService } from '../enforce-quota.interceptor-B9QueAFf.js';
+export { E as EnforceQuotaInterceptor, Q as QUOTA_PROVIDERS_TOKEN, b as STATIC_FEATURE_GUARD_CONFIG_TOKEN, c as StaticEntitlementSnapshot, a as StaticFeatureGuard, d as StaticFeatureGuardConfig } from '../enforce-quota.interceptor-B9QueAFf.js';
+import { OnApplicationBootstrap } from '@nestjs/common';
+import { DiscoveryService, MetadataScanner } from '@nestjs/core';
 export { A as AdminBypassRlsInterceptor, a as AdminManifestModule, b as AdminManifestModuleOptions, c as AdminManifestService, d as AdminModule, e as AdminModuleOptions, f as AdminStatsService, M as MfaGuard, h as MfaService, S as SuperAdminGuard } from '../admin-stats.service-Db2exT_d.js';
 export { A as AdminAuditService } from '../admin-audit.service-9IqXMlZm.js';
 export { e as AdminResourcesService, f as AdminStatsModule, g as AdminStatsModuleOptions } from '../admin-resources.module-BY5r_1MG.js';
 export { c as EntitlementService } from '../aggregation-DP5zfKbU.js';
-export { d as ComposedTenantAuthGuard, P as PendingPlanMaterializationService, h as PlanChangePreviewService, r as SubscriptionBundlePreviewService, s as SubscriptionBundlesService, T as TenantAdminGuard, t as TenantBillingController } from '../tenant-billing.controller-7o4ObzGs.js';
+export { d as ComposedTenantAuthGuard, P as PendingPlanMaterializationService, h as PlanChangePreviewService, r as SubscriptionBundlePreviewService, s as SubscriptionBundlesService, T as TenantAdminGuard, t as TenantBillingController } from '../tenant-billing.controller-BSlpFqVA.js';
 export { B as BundlesService, C as CatalogEntriesService, M as MarketingProjectionsService, b as MarketingSettingsService, P as PlanVersionsService, c as PlansService, d as PromotionsService, e as PublicMarketingCatalogService } from '../plan-versions.service-B-YoE4SZ.js';
 export { c as DiscoveryScanner } from '../discovery.scanner-DLgEvuoy.js';
 export { P as PromoCodeRateLimitGuard } from '../rate-limit.guard-dntqAlfZ.js';
@@ -17,13 +19,11 @@ export { a as CheckoutOfferModule, b as CheckoutOfferModuleOptions } from '../ch
 export { C as CheckoutOfferService } from '../checkout-offer.service-BX51dljL.js';
 export { S as SubscriptionContractModule, a as SubscriptionContractModuleOptions } from '../subscription-contract.module-edyhBr4n.js';
 export { S as SubscriptionContractService } from '../subscription-contract.service--cm47ZJJ.js';
-import '@nestjs/common';
 import '../di-CcNeq9v-.js';
 import '../plan-resolution-CFCoUkrE.js';
 import '../module-BE17XFLg.js';
 import '../catalog.module-CQr1FpkI.js';
-import '../subscription-bundles.module-BQmoozm5.js';
-import '@nestjs/core';
+import '../subscription-bundles.module-BDbODWvA.js';
 import 'rxjs';
 
 /**
@@ -48,6 +48,24 @@ declare class QuotaProvidersUsageSnapshot implements UsageSnapshotPort {
     snapshot(tenantId: string): Promise<Record<string, number>>;
 }
 
+declare class FeatureGuardCoverageCheck implements OnApplicationBootstrap {
+    private readonly discoveryService;
+    private readonly metadataScanner;
+    private readonly logger;
+    constructor(discoveryService: DiscoveryService, metadataScanner: MetadataScanner);
+    onApplicationBootstrap(): void;
+    /**
+     * Annotated handlers whose own guards and whose controller's guards contain
+     * no recognisable feature guard.
+     *
+     * Deliberately conservative in one direction only: an unrecognised wrapper
+     * is reported (and the message says so) rather than assumed safe, because
+     * the named route is cheap to check. The reverse — staying silent about a
+     * route with no guard at all — is the failure this exists to prevent.
+     */
+    private findUncoveredRoutes;
+}
+
 interface TenantNavItem {
     /** Unique slug, e.g. "notes", "billing", "settings". */
     id: string;
@@ -101,4 +119,4 @@ declare class TenantManifestService {
     getManifest(tenantId: string): Promise<TenantManifest>;
 }
 
-export { PlanResolverPort, QuotaProvidersUsageSnapshot, StaticEntitlementService, SubscriptionPlanResolver, type TenantManifest, TenantManifestService, type TenantNavItem };
+export { FeatureGuardCoverageCheck, PlanResolverPort, QuotaProvidersUsageSnapshot, StaticEntitlementService, SubscriptionPlanResolver, type TenantManifest, TenantManifestService, type TenantNavItem };

package/dist/platform/index.js

@@ -1,8 +1,9 @@
 import {
   defineSaaSiCat
-} from "../chunk-EWPF57AG.js";
+} from "../chunk-FY4EJTV4.js";
 import {
   EnforceQuotaInterceptor,
+  FeatureGuardCoverageCheck,
   PLAN_RESOLVER_PORT_TOKEN,
   QUOTA_PROVIDERS_TOKEN,
   QuotaProvidersUsageSnapshot,
@@ -16,22 +17,7 @@ import {
   SubscriptionPlanResolver,
   TenantManifestService,
   buildTenantManifestController
-} from "../chunk-UFS344JD.js";
-import {
-  PromoCodeRateLimitGuard
-} from "../chunk-4O6R6ARQ.js";
-import {
-  AdminBypassRlsInterceptor,
-  AdminManifestModule,
-  AdminManifestService,
-  AdminModule,
-  AdminResourcesService,
-  AdminStatsModule,
-  AdminStatsService,
-  MfaGuard,
-  MfaService,
-  SuperAdminGuard
-} from "../chunk-SN5UOC43.js";
+} from "../chunk-FPEQPHJE.js";
 import {
   ComposedTenantAuthGuard,
   PendingPlanMaterializationService,
@@ -40,14 +26,11 @@ import {
   SubscriptionBundlesService,
   TenantAdminGuard,
   TenantBillingController
-} from "../chunk-UO64MK3Q.js";
-import {
-  PromoCodesService
-} from "../chunk-VQQWF7MW.js";
+} from "../chunk-4BSSMDLL.js";
 import {
-  SubscriptionContractModule,
-  SubscriptionContractService
-} from "../chunk-B7NRY2LV.js";
+  CheckoutOfferModule,
+  CheckoutOfferService
+} from "../chunk-ES5AN53A.js";
 import {
   BundlesService,
   CatalogEntriesService,
@@ -57,35 +40,53 @@ import {
   PlansService,
   PromotionsService,
   PublicMarketingCatalogService
-} from "../chunk-7X5MSAIL.js";
+} from "../chunk-QB7MICKQ.js";
 import "../chunk-WPUVJRIN.js";
+import {
+  AdminBypassRlsInterceptor,
+  AdminManifestModule,
+  AdminManifestService,
+  AdminModule,
+  AdminResourcesService,
+  AdminStatsModule,
+  AdminStatsService,
+  MfaGuard,
+  MfaService,
+  SuperAdminGuard
+} from "../chunk-SN5UOC43.js";
+import "../chunk-6WL6VQ7Z.js";
+import {
+  DiscoveryScanner
+} from "../chunk-5ZXBXYXU.js";
+import {
+  EntitlementService
+} from "../chunk-NXD7763W.js";
+import "../chunk-WKVBNTYC.js";
+import "../chunk-L4KTQ6CL.js";
+import "../chunk-L4SUWH5B.js";
+import {
+  PromoCodeRateLimitGuard
+} from "../chunk-4O6R6ARQ.js";
+import {
+  PromoCodesService
+} from "../chunk-VQQWF7MW.js";
 import {
   AdminAuditService
 } from "../chunk-E56W4U2P.js";
-import {
-  CheckoutOfferModule,
-  CheckoutOfferService
-} from "../chunk-XTVAFJ3P.js";
-import "../chunk-BSK6YBLI.js";
 import {
   SAASICAT_PUBLIC_ROUTE_KEY,
   SaaSiCatPublicRoute,
   isSaaSiCatPublicRoute
 } from "../chunk-YSC46BGM.js";
-import "../chunk-6WL6VQ7Z.js";
-import {
-  DiscoveryScanner
-} from "../chunk-5ZXBXYXU.js";
-import {
-  EntitlementService
-} from "../chunk-NNNXXUPT.js";
 import "../chunk-DQKCK7DX.js";
-import "../chunk-NYLON2VC.js";
 import "../chunk-EBJJNTW6.js";
-import "../chunk-WKVBNTYC.js";
-import "../chunk-L4KTQ6CL.js";
+import {
+  SubscriptionContractModule,
+  SubscriptionContractService
+} from "../chunk-B7NRY2LV.js";
+import "../chunk-BSK6YBLI.js";
+import "../chunk-NYLON2VC.js";
 import "../chunk-SABTXESR.js";
-import "../chunk-L4SUWH5B.js";
 import "../chunk-SHUYVCID.js";
 export {
   AdminAuditService,
@@ -104,6 +105,7 @@ export {
   DiscoveryScanner,
   EnforceQuotaInterceptor,
   EntitlementService,
+  FeatureGuardCoverageCheck,
   MarketingProjectionsService,
   MarketingSettingsService,
   MfaGuard,

package/dist/{saas-platform.module-HCDNZTiE.d.cts → saas-platform.module-CgalxzcT.d.cts}

@@ -8,7 +8,7 @@ import { a as PromoCodesModuleOptions } from './module-CHMIyWlf.cjs';
 import { b as DiscoveryAppInfo } from './discovery.scanner-DLgEvuoy.cjs';
 import { b as CatalogModuleOptions } from './catalog.module-D-_pQDNA.cjs';
 import { b as CheckoutOfferModuleOptions } from './checkout-offer.module-DmlpPevf.cjs';
-import { t as TenantBillingModuleOptions, p as SubscriptionBundleModuleOptions, n as SubscriptionBundleControllerOptions } from './subscription-bundles.module-DCpV-Pb5.cjs';
+import { t as TenantBillingModuleOptions, p as SubscriptionBundleModuleOptions, n as SubscriptionBundleControllerOptions } from './subscription-bundles.module-Cfi-lFWF.cjs';
 
 interface SetupModuleOptions {
     /**