@saasicat/nest 0.26.0 → 0.27.0

package/dist/{saas-platform.module-D1mUZPrz.d.ts → module-options-ByJL7FZm.d.ts}

@@ -2,13 +2,13 @@ import { Type, DynamicModule, ForwardReference, Provider, CanActivate, FactoryPr
 import { SuperAdminProvisioningPort, PlanCatalog, SaasicatPersistenceAdapter, MfaPort, AuditPort, RlsBypassPort, PlanCatalogReadSink, SubscriptionRepository, PlanVersionRepository, TransactionRunner, QuotaProvider, FeatureUiRegistry, SubscriptionUsagePort, UsageSnapshotPort, TenantSubscriptionWritePort, AdminResourcesPort, FirstTimeCustomerCheck } from '@saasicat/types';
 import { P as ProviderSpec } from './di-CcNeq9v-.js';
 import { b as AdminManifestConfig, d as AdminResourcesModuleOptions, g as AdminStatsModuleOptions } from './admin-resources.module-BY5r_1MG.js';
+import { t as TenantBillingModuleOptions, p as SubscriptionBundleModuleOptions, n as SubscriptionBundleControllerOptions } from './tenant-billing.module-B0stLoJn.js';
+import { b as CatalogModuleOptions } from './catalog.module-CQr1FpkI.js';
+import { b as DiscoveryAppInfo } from './discovery.scanner-DLgEvuoy.js';
 import { E as EntitlementResolutionConfig } from './plan-resolution-CFCoUkrE.js';
-import { a as SubscriptionContractModuleOptions } from './subscription-contract.module-edyhBr4n.js';
 import { a as PromoCodesModuleOptions } from './module-BE17XFLg.js';
-import { b as DiscoveryAppInfo } from './discovery.scanner-DLgEvuoy.js';
-import { b as CatalogModuleOptions } from './catalog.module-CQr1FpkI.js';
 import { b as CheckoutOfferModuleOptions } from './checkout-offer.module-Ca3_TieR.js';
-import { t as TenantBillingModuleOptions, p as SubscriptionBundleModuleOptions, n as SubscriptionBundleControllerOptions } from './subscription-bundles.module-BDbODWvA.js';
+import { a as SubscriptionContractModuleOptions } from './subscription-contract.module-edyhBr4n.js';
 
 interface SetupModuleOptions {
     /**
@@ -178,6 +178,23 @@ interface SaasPlatformCheckoutOfferOptions extends Omit<CheckoutOfferModuleOptio
 interface SaasPlatformSubscriptionContractOptions extends Omit<SubscriptionContractModuleOptions, 'subscriptionContractRepository' | 'global'> {
     subscriptionContractRepository?: SubscriptionContractModuleOptions['subscriptionContractRepository'];
 }
+/**
+ * What `SaaSiCatModule.forRoot()` composes.
+ *
+ * One subsystem is deliberately absent: **self-registration**. A prospect
+ * signing themselves up — mail address, OTP, plan choice, payment, activation —
+ * is `RegistrationModule` from `@saasicat/nest/registration`, and it is
+ * hand-wired: ten required ports, none of which a persistence bundle supplies.
+ *
+ * That is a decision with a reason and a plan, not an omission: the ten ports
+ * have no executable contract yet (`@saasicat/persistence-testing` covers the
+ * catalogue, subscription, promo and audit ports and none of these), and
+ * folding unverified ports into a bundle would move the problem rather than
+ * check it. See `docs/self-registration.md`.
+ *
+ * Everything else — an operator creating tenants through the SuperAdmin UI, a
+ * CLI, or your own onboarding form — is composed here.
+ */
 interface SaasPlatformModuleOptions {
     /**
      * Plan catalog. Either as an already-loaded object (quickstart, comes
@@ -366,28 +383,24 @@ interface SaasPlatformModuleOptions {
      * authenticated request.
      */
     globalFeatureGuard?: boolean;
-}
-/**
- * Bundles the complete standard SaaSiCat backend stack into a single
- * `forRoot({...})` call. Reduces AppModule boilerplate and eliminates the
- * ordering trap.
- *
- * Quickstart path (Prisma + PostgreSQL on the canonical schema):
- *
- * ```ts
- * SaasPlatformModule.forRoot({
- *     planCatalog: loadPlanCatalogFromFile({ path: 'config/saas.yaml' }),
- *     controller: { guards: [JwtAuthGuard] },
- *     imports: [AuthModule],
- *     persistence: prismaPersistence({ client: PrismaService }), // @saasicat/adapter-prisma
- * })
- * ```
- *
- * Individual `adapters` entries stay supported (custom schema / other ORM)
- * and override bundle slices field by field.
- */
-declare class SaasPlatformModule {
-    static forRoot(options: SaasPlatformModuleOptions): DynamicModule;
+    /**
+     * Run the enforcement-chain check at bootstrap. Default `true`.
+     *
+     * It refuses to start an application whose `@RequireFeature` routes have
+     * nothing enforcing them — the failure that otherwise shows up as a
+     * customer using a feature they never bought.
+     *
+     * Two shapes it cannot recognise, and they are the reason this switch
+     * exists rather than being an argument about the check: a feature guard of
+     * your own that WRAPS ours without carrying `FEATURE_GUARD_MARKER`, and one
+     * you bind globally as an `APP_GUARD` instead of per controller. Both are
+     * correctly enforced and both look uncovered from here.
+     *
+     * Turning it off buys silence, not safety: those routes are then unchecked
+     * by anything, and whether they are covered is back to being something you
+     * know rather than something the boot verifies.
+     */
+    enforcementChainCheck?: boolean;
 }
 
-export { PLAN_RESOLVER_PORT_TOKEN as P, SaasPlatformModule as S, type TenantManifestControllerOptions as T, type SaasPlatformAdapters as a, type SaasPlatformAdminResourcesOptions as b, type SaasPlatformAdminStatsOptions as c, type SaasPlatformCatalogOptions as d, type SaasPlatformCheckoutOfferOptions as e, type SaasPlatformModuleOptions as f, type SaasPlatformPromoCodesOptions as g, type SaasPlatformSetupOptions as h, type SaasPlatformSubscriptionBundlesOptions as i, type SaasPlatformSubscriptionContractOptions as j, type SaasPlatformTenantAuthGuards as k, type SaasPlatformTenantBillingOptions as l, SetupModule as m, type SetupModuleOptions as n, StaticPlanResolver as o, type PlanResolverPort as p, buildTenantManifestController as q };
+export { PLAN_RESOLVER_PORT_TOKEN as P, type SaasPlatformAdapters as S, type TenantManifestControllerOptions as T, type SaasPlatformAdminResourcesOptions as a, type SaasPlatformAdminStatsOptions as b, type SaasPlatformCatalogOptions as c, type SaasPlatformCheckoutOfferOptions as d, type SaasPlatformModuleOptions as e, type SaasPlatformPromoCodesOptions as f, type SaasPlatformSetupOptions as g, type SaasPlatformSubscriptionBundlesOptions as h, type SaasPlatformSubscriptionContractOptions as i, type SaasPlatformTenantAuthGuards as j, type SaasPlatformTenantBillingOptions as k, SetupModule as l, type SetupModuleOptions as m, StaticPlanResolver as n, type PlanResolverPort as o, buildTenantManifestController as p };

package/dist/{saas-platform.module-CgalxzcT.d.cts → module-options-klrPnWGF.d.cts}

@@ -2,13 +2,13 @@ import { Type, DynamicModule, ForwardReference, Provider, CanActivate, FactoryPr
 import { SuperAdminProvisioningPort, PlanCatalog, SaasicatPersistenceAdapter, MfaPort, AuditPort, RlsBypassPort, PlanCatalogReadSink, SubscriptionRepository, PlanVersionRepository, TransactionRunner, QuotaProvider, FeatureUiRegistry, SubscriptionUsagePort, UsageSnapshotPort, TenantSubscriptionWritePort, AdminResourcesPort, FirstTimeCustomerCheck } from '@saasicat/types';
 import { P as ProviderSpec } from './di-CcNeq9v-.cjs';
 import { b as AdminManifestConfig, d as AdminResourcesModuleOptions, g as AdminStatsModuleOptions } from './admin-resources.module-DGgGSdzN.cjs';
+import { t as TenantBillingModuleOptions, p as SubscriptionBundleModuleOptions, n as SubscriptionBundleControllerOptions } from './tenant-billing.module-BxJS6fX4.cjs';
+import { b as CatalogModuleOptions } from './catalog.module-D-_pQDNA.cjs';
+import { b as DiscoveryAppInfo } from './discovery.scanner-DLgEvuoy.cjs';
 import { E as EntitlementResolutionConfig } from './plan-resolution-CFCoUkrE.cjs';
-import { a as SubscriptionContractModuleOptions } from './subscription-contract.module-B2uNvUJL.cjs';
 import { a as PromoCodesModuleOptions } from './module-CHMIyWlf.cjs';
-import { b as DiscoveryAppInfo } from './discovery.scanner-DLgEvuoy.cjs';
-import { b as CatalogModuleOptions } from './catalog.module-D-_pQDNA.cjs';
 import { b as CheckoutOfferModuleOptions } from './checkout-offer.module-DmlpPevf.cjs';
-import { t as TenantBillingModuleOptions, p as SubscriptionBundleModuleOptions, n as SubscriptionBundleControllerOptions } from './subscription-bundles.module-Cfi-lFWF.cjs';
+import { a as SubscriptionContractModuleOptions } from './subscription-contract.module-B2uNvUJL.cjs';
 
 interface SetupModuleOptions {
     /**
@@ -178,6 +178,23 @@ interface SaasPlatformCheckoutOfferOptions extends Omit<CheckoutOfferModuleOptio
 interface SaasPlatformSubscriptionContractOptions extends Omit<SubscriptionContractModuleOptions, 'subscriptionContractRepository' | 'global'> {
     subscriptionContractRepository?: SubscriptionContractModuleOptions['subscriptionContractRepository'];
 }
+/**
+ * What `SaaSiCatModule.forRoot()` composes.
+ *
+ * One subsystem is deliberately absent: **self-registration**. A prospect
+ * signing themselves up — mail address, OTP, plan choice, payment, activation —
+ * is `RegistrationModule` from `@saasicat/nest/registration`, and it is
+ * hand-wired: ten required ports, none of which a persistence bundle supplies.
+ *
+ * That is a decision with a reason and a plan, not an omission: the ten ports
+ * have no executable contract yet (`@saasicat/persistence-testing` covers the
+ * catalogue, subscription, promo and audit ports and none of these), and
+ * folding unverified ports into a bundle would move the problem rather than
+ * check it. See `docs/self-registration.md`.
+ *
+ * Everything else — an operator creating tenants through the SuperAdmin UI, a
+ * CLI, or your own onboarding form — is composed here.
+ */
 interface SaasPlatformModuleOptions {
     /**
      * Plan catalog. Either as an already-loaded object (quickstart, comes
@@ -366,28 +383,24 @@ interface SaasPlatformModuleOptions {
      * authenticated request.
      */
     globalFeatureGuard?: boolean;
-}
-/**
- * Bundles the complete standard SaaSiCat backend stack into a single
- * `forRoot({...})` call. Reduces AppModule boilerplate and eliminates the
- * ordering trap.
- *
- * Quickstart path (Prisma + PostgreSQL on the canonical schema):
- *
- * ```ts
- * SaasPlatformModule.forRoot({
- *     planCatalog: loadPlanCatalogFromFile({ path: 'config/saas.yaml' }),
- *     controller: { guards: [JwtAuthGuard] },
- *     imports: [AuthModule],
- *     persistence: prismaPersistence({ client: PrismaService }), // @saasicat/adapter-prisma
- * })
- * ```
- *
- * Individual `adapters` entries stay supported (custom schema / other ORM)
- * and override bundle slices field by field.
- */
-declare class SaasPlatformModule {
-    static forRoot(options: SaasPlatformModuleOptions): DynamicModule;
+    /**
+     * Run the enforcement-chain check at bootstrap. Default `true`.
+     *
+     * It refuses to start an application whose `@RequireFeature` routes have
+     * nothing enforcing them — the failure that otherwise shows up as a
+     * customer using a feature they never bought.
+     *
+     * Two shapes it cannot recognise, and they are the reason this switch
+     * exists rather than being an argument about the check: a feature guard of
+     * your own that WRAPS ours without carrying `FEATURE_GUARD_MARKER`, and one
+     * you bind globally as an `APP_GUARD` instead of per controller. Both are
+     * correctly enforced and both look uncovered from here.
+     *
+     * Turning it off buys silence, not safety: those routes are then unchecked
+     * by anything, and whether they are covered is back to being something you
+     * know rather than something the boot verifies.
+     */
+    enforcementChainCheck?: boolean;
 }
 
-export { PLAN_RESOLVER_PORT_TOKEN as P, SaasPlatformModule as S, type TenantManifestControllerOptions as T, type SaasPlatformAdapters as a, type SaasPlatformAdminResourcesOptions as b, type SaasPlatformAdminStatsOptions as c, type SaasPlatformCatalogOptions as d, type SaasPlatformCheckoutOfferOptions as e, type SaasPlatformModuleOptions as f, type SaasPlatformPromoCodesOptions as g, type SaasPlatformSetupOptions as h, type SaasPlatformSubscriptionBundlesOptions as i, type SaasPlatformSubscriptionContractOptions as j, type SaasPlatformTenantAuthGuards as k, type SaasPlatformTenantBillingOptions as l, SetupModule as m, type SetupModuleOptions as n, StaticPlanResolver as o, type PlanResolverPort as p, buildTenantManifestController as q };
+export { PLAN_RESOLVER_PORT_TOKEN as P, type SaasPlatformAdapters as S, type TenantManifestControllerOptions as T, type SaasPlatformAdminResourcesOptions as a, type SaasPlatformAdminStatsOptions as b, type SaasPlatformCatalogOptions as c, type SaasPlatformCheckoutOfferOptions as d, type SaasPlatformModuleOptions as e, type SaasPlatformPromoCodesOptions as f, type SaasPlatformSetupOptions as g, type SaasPlatformSubscriptionBundlesOptions as h, type SaasPlatformSubscriptionContractOptions as i, type SaasPlatformTenantAuthGuards as j, type SaasPlatformTenantBillingOptions as k, SetupModule as l, type SetupModuleOptions as m, StaticPlanResolver as n, type PlanResolverPort as o, buildTenantManifestController as p };

package/dist/platform/index.d.cts

@@ -1,31 +1,179 @@
-import { p as PlanResolverPort } from '../saas-platform.module-CgalxzcT.cjs';
-export { P as PLAN_RESOLVER_PORT_TOKEN, S as SaaSiCatModule, a as SaasPlatformAdapters, b as SaasPlatformAdminResourcesOptions, c as SaasPlatformAdminStatsOptions, d as SaasPlatformCatalogOptions, e as SaasPlatformCheckoutOfferOptions, S as SaasPlatformModule, f as SaasPlatformModuleOptions, g as SaasPlatformPromoCodesOptions, h as SaasPlatformSetupOptions, i as SaasPlatformSubscriptionBundlesOptions, j as SaasPlatformSubscriptionContractOptions, k as SaasPlatformTenantAuthGuards, l as SaasPlatformTenantBillingOptions, m as SetupModule, n as SetupModuleOptions, o as StaticPlanResolver, T as TenantManifestControllerOptions, q as buildTenantManifestController } from '../saas-platform.module-CgalxzcT.cjs';
-export { a as SAASICAT_PUBLIC_ROUTE_KEY, d as SaaSiCatPublicRoute, S as SetupService, f as defineSaaSiCat, i as isSaaSiCatPublicRoute } from '../define-saasicat-D30I-WET.cjs';
-import { SubscriptionRepository, UsageSnapshotPort, QuotaProvider } from '@saasicat/types';
-import { S as StaticEntitlementService } from '../enforce-quota.interceptor-DY6CLjoP.cjs';
-export { E as EnforceQuotaInterceptor, Q as QUOTA_PROVIDERS_TOKEN, b as STATIC_FEATURE_GUARD_CONFIG_TOKEN, c as StaticEntitlementSnapshot, a as StaticFeatureGuard, d as StaticFeatureGuardConfig } from '../enforce-quota.interceptor-DY6CLjoP.cjs';
-import { OnApplicationBootstrap } from '@nestjs/common';
+export { a as SAASICAT_PUBLIC_ROUTE_KEY, d as SaaSiCatModule, e as SaaSiCatPublicRoute, d as SaasPlatformModule, S as SetupService, g as defineSaaSiCat, i as isSaaSiCatPublicRoute } from '../define-saasicat-CFxut1VR.cjs';
+import { CanActivate, DynamicModule, OnApplicationBootstrap } from '@nestjs/common';
+import { SaasicatPersistenceAdapter, SubscriptionUsagePort, SubscriptionRepository, UsageSnapshotPort, QuotaProvider } from '@saasicat/types';
+import { P as ProviderSpec } from '../di-CcNeq9v-.cjs';
+import { b as DiscoveryAppInfo } from '../discovery.scanner-DLgEvuoy.cjs';
+export { c as DiscoveryScanner } from '../discovery.scanner-DLgEvuoy.cjs';
+import { e as SaasPlatformModuleOptions, S as SaasPlatformAdapters, o as PlanResolverPort } from '../module-options-klrPnWGF.cjs';
+export { P as PLAN_RESOLVER_PORT_TOKEN, a as SaasPlatformAdminResourcesOptions, b as SaasPlatformAdminStatsOptions, c as SaasPlatformCatalogOptions, d as SaasPlatformCheckoutOfferOptions, f as SaasPlatformPromoCodesOptions, g as SaasPlatformSetupOptions, h as SaasPlatformSubscriptionBundlesOptions, i as SaasPlatformSubscriptionContractOptions, j as SaasPlatformTenantAuthGuards, k as SaasPlatformTenantBillingOptions, l as SetupModule, m as SetupModuleOptions, n as StaticPlanResolver, T as TenantManifestControllerOptions, p as buildTenantManifestController } from '../module-options-klrPnWGF.cjs';
+import { S as StaticEntitlementService } from '../enforce-quota.interceptor-N80KC34N.cjs';
+export { E as EnforceQuotaInterceptor, Q as QUOTA_PROVIDERS_TOKEN, b as STATIC_FEATURE_GUARD_CONFIG_TOKEN, c as StaticEntitlementSnapshot, a as StaticFeatureGuard, d as StaticFeatureGuardConfig } from '../enforce-quota.interceptor-N80KC34N.cjs';
 import { DiscoveryService, MetadataScanner } from '@nestjs/core';
 export { A as AdminBypassRlsInterceptor, a as AdminManifestModule, b as AdminManifestModuleOptions, c as AdminManifestService, d as AdminModule, e as AdminModuleOptions, f as AdminStatsService, M as MfaGuard, h as MfaService, S as SuperAdminGuard } from '../admin-stats.service-HUZIU448.cjs';
 export { A as AdminAuditService } from '../admin-audit.service-9IqXMlZm.cjs';
 export { e as AdminResourcesService, f as AdminStatsModule, g as AdminStatsModuleOptions } from '../admin-resources.module-DGgGSdzN.cjs';
 export { c as EntitlementService } from '../aggregation-mZ7WZROK.cjs';
-export { d as ComposedTenantAuthGuard, P as PendingPlanMaterializationService, h as PlanChangePreviewService, r as SubscriptionBundlePreviewService, s as SubscriptionBundlesService, T as TenantAdminGuard, t as TenantBillingController } from '../tenant-billing.controller-DHSUrT_N.cjs';
+export { d as ComposedTenantAuthGuard, P as PendingPlanMaterializationService, h as PlanChangePreviewService, r as SubscriptionBundlePreviewService, s as SubscriptionBundlesService, T as TenantAdminGuard, t as TenantBillingController } from '../tenant-billing.controller-CAMMdfn1.cjs';
 export { B as BundlesService, C as CatalogEntriesService, M as MarketingProjectionsService, b as MarketingSettingsService, P as PlanVersionsService, c as PlansService, d as PromotionsService, e as PublicMarketingCatalogService } from '../plan-versions.service-_saKzb50.cjs';
-export { c as DiscoveryScanner } from '../discovery.scanner-DLgEvuoy.cjs';
 export { P as PromoCodeRateLimitGuard } from '../rate-limit.guard-dntqAlfZ.cjs';
 export { g as PromoCodesService } from '../service-D48clObR.cjs';
 export { a as CheckoutOfferModule, b as CheckoutOfferModuleOptions } from '../checkout-offer.module-DmlpPevf.cjs';
 export { C as CheckoutOfferService } from '../checkout-offer.service-BX51dljL.cjs';
 export { S as SubscriptionContractModule, a as SubscriptionContractModuleOptions } from '../subscription-contract.module-B2uNvUJL.cjs';
 export { S as SubscriptionContractService } from '../subscription-contract.service--cm47ZJJ.cjs';
-import '../di-CcNeq9v-.cjs';
+import '../tenant-billing.module-BxJS6fX4.cjs';
+import '../catalog.module-D-_pQDNA.cjs';
 import '../plan-resolution-CFCoUkrE.cjs';
 import '../module-CHMIyWlf.cjs';
-import '../catalog.module-D-_pQDNA.cjs';
-import '../subscription-bundles.module-Cfi-lFWF.cjs';
 import 'rxjs';
 
+/**
+ * What `tenantBilling` resolved and its two dependants need.
+ *
+ * Mutable, and the only mutable thing here: `composeTenantBilling` writes it,
+ * `composeSubscriptionBundles` and the entitlement runtime read it. A composer
+ * that runs before tenant billing sees the initial values, which is correct —
+ * there was no tenant billing to resolve anything.
+ */
+interface SharedTenantBinding {
+    /** Normalised `authGuards`, shared with the bundle controller. */
+    authGuards?: ProviderSpec<ReadonlyArray<CanActivate>>;
+    /** The usage port both controllers report against. */
+    subscriptionUsagePort?: ProviderSpec<SubscriptionUsagePort>;
+    /**
+     * Whether the tenant-billing module already registered the app's quota
+     * providers.
+     *
+     * It registers them as its own providers and exports, so the entitlement
+     * runtime must not register them a second time — two instances of a
+     * `QuotaProvider` are two counters over the same rows.
+     */
+    quotaProvidersHostedByTenantBilling: boolean;
+}
+interface CompositionContext {
+    readonly options: SaasPlatformModuleOptions;
+    /** After the bundle slices and the explicit entries have been merged. */
+    readonly adapters: SaasPlatformAdapters;
+    readonly persistence: SaasicatPersistenceAdapter | undefined;
+    /** App key and version, for discovery and the public catalogue. */
+    readonly appInfo: DiscoveryAppInfo;
+    /** Entitlement is needed directly, or by tenant billing / bundles. */
+    readonly requiresFullEntitlement: boolean;
+    readonly shared: SharedTenantBinding;
+}
+
+/** One feature's contribution: the modules it adds, or none. */
+type Composer = (ctx: CompositionContext) => DynamicModule[];
+declare const FEATURE_COMPOSERS: readonly Composer[];
+/** Every module the enabled features contribute, in composer order. */
+declare function composeFeatures(ctx: CompositionContext): DynamicModule[];
+
+/**
+ * Mounted on purpose and deliberately not re-exported.
+ *
+ * Declared here rather than left as an absence, because the guard in
+ * `tests/platform-composition.test.js` otherwise reports it every time and the
+ * next person has to re-derive whether it is a bug.
+ *
+ * `PublicCatalogModule` is a controller and one token, `FEATURE_UI_REGISTRY` —
+ * which the APP supplies through `catalog: { featureUiRegistry }` rather than
+ * injects. Re-exporting it would also collide with the identically named token
+ * from `billing`, which means something else (see CONTRIBUTING, "One bundle,
+ * many entries").
+ */
+declare const MOUNTED_BUT_NOT_EXPORTED: readonly string[];
+/** The `exports` of the assembled module, plus whatever it provides itself. */
+declare function composeModuleExports(ctx: CompositionContext, ownExports: NonNullable<DynamicModule['exports']>): NonNullable<DynamicModule['exports']>;
+
+/** Everything a rule may look at: the options as given, the adapters as resolved. */
+interface PlatformConfiguration {
+    readonly options: SaasPlatformModuleOptions;
+    /** After the bundle slices and the explicit entries have been merged. */
+    readonly adapters: SaasPlatformAdapters;
+}
+interface PlatformRule {
+    /** Stable id — `<area>.<what-it-requires>`. Appears in the boot error. */
+    readonly id: string;
+    /** Whether this rule has anything to say about this configuration. */
+    readonly when: (c: PlatformConfiguration) => boolean;
+    /** True when the configuration satisfies it. */
+    readonly assert: (c: PlatformConfiguration) => boolean;
+    /**
+     * What is wrong and what to do about it.
+     *
+     * A function only where it has to be: several of these name which of a set
+     * is missing, and "adapters are missing: subscriptionRepository,
+     * transactionRunner" is worth more than "adapters are missing". The rest
+     * are the same sentence every time, and a closure that ignores its argument
+     * is one more thing a reader has to check for.
+     */
+    readonly message: string | ((c: PlatformConfiguration) => string);
+    /**
+     * Where the option is documented.
+     *
+     * Derived from the id rather than written beside it — see `docsUrlFor`.
+     */
+    readonly docs: string;
+    /**
+     * The typed error this rule threw before the table existed, when it has
+     * one.
+     *
+     * Used only when this rule is the ONLY violation — and that is not a
+     * compromise, it is the exact set of cases where the typed error was ever
+     * observable. A configuration with two problems used to throw whichever
+     * check ran first and stop, so nothing could catch the second one by type
+     * either. Where a consumer could see `PersistenceCapabilityError`, it still
+     * sees it; where it could not, it now gets the full list instead of one
+     * arbitrary problem.
+     */
+    readonly error?: (c: PlatformConfiguration) => Error;
+}
+/**
+ * GitHub's heading slug for `text`: lowercased, punctuation dropped, spaces
+ * hyphenated.
+ *
+ * Written out because the anchor has to match a heading nobody types — the
+ * page is generated. `tests/options-reference-is-generated.test.js` asserts
+ * every rule's anchor is a heading in the file, so a wrong slug fails the build
+ * rather than producing a link that lands at the top of the page.
+ */
+declare const headingSlug: (text: string) => string;
+/**
+ * The documentation link for a rule.
+ *
+ * Derived from the id, so the two cannot disagree. They did, on the first
+ * attempt: eleven hand-written anchors against headings the generator names
+ * after the ids, and every one of them landed at the top of the page.
+ */
+declare const docsUrlFor: (id: string) => string;
+declare const PLATFORM_RULES: readonly PlatformRule[];
+
+interface PlatformViolation {
+    readonly id: string;
+    readonly message: string;
+    readonly docs: string;
+}
+/** Every rule that applies to this configuration and is not satisfied by it. */
+declare function findViolations(configuration: PlatformConfiguration, rules?: readonly PlatformRule[]): PlatformViolation[];
+/**
+ * The error a misconfigured application boots into.
+ *
+ * Carries the violations as data as well as prose: a consumer's own boot
+ * diagnostics can group them, and the rule ids are stable enough to assert on.
+ */
+declare class SaaSiCatConfigurationError extends Error {
+    readonly violations: readonly PlatformViolation[];
+    constructor(violations: readonly PlatformViolation[]);
+}
+/**
+ * Throws once, naming every problem, or returns.
+ *
+ * A single violation from a rule that owns a typed error raises that error
+ * instead of the aggregate — see `PlatformRule.error` for why that is the
+ * whole of the previous behaviour rather than part of it.
+ */
+declare function assertConfiguration(configuration: PlatformConfiguration, rules?: readonly PlatformRule[]): void;
+
 /**
  * Standard `tenantId → planId` resolver backed by the canonical subscription
  * repository. This removes the identical resolver class most applications
@@ -48,22 +196,56 @@ declare class QuotaProvidersUsageSnapshot implements UsageSnapshotPort {
     snapshot(tenantId: string): Promise<Record<string, number>>;
 }
 
-declare class FeatureGuardCoverageCheck implements OnApplicationBootstrap {
+/** What the module knows at composition time and this check cannot see. */
+interface EnforcementChainState {
+    /**
+     * Whether anything can enforce `@RequireFeature`.
+     *
+     * True on the static path, and also on the V3 path, where the application
+     * binds `FeatureGuard` from `@saasicat/nest/billing` itself.
+     */
+    readonly featureEnforcementActive: boolean;
+    /**
+     * Whether anything can enforce `@EnforceQuota`.
+     *
+     * Narrower than the field above, and the two were one field until an app
+     * on the V3 path with no plan resolver booted with every quota unenforced:
+     * `EnforceQuotaInterceptor` comes from `composeEnforcementRuntime`, which
+     * registers nothing unless a plan resolver exists. A flag named for
+     * "entitlement" answered a question about features and was read as an
+     * answer about quotas.
+     */
+    readonly quotaEnforcementActive: boolean;
+    /** Whether the platform bound its own global feature guard. */
+    readonly globalGuardBound: boolean;
+    /**
+     * Whether `globalFeatureGuard: false` is what unbound it.
+     *
+     * Distinct from `globalGuardBound` because the two have different causes
+     * and the message has to say the true one. On the V3 entitlement path the
+     * platform binds no global guard either — it never registers the static
+     * stack — and naming an option the application did not set sends the reader
+     * to look for a line that is not in their file.
+     */
+    readonly globalGuardOptedOut: boolean;
+}
+declare const ENFORCEMENT_CHAIN_STATE_TOKEN: unique symbol;
+declare class EnforcementChainCheck implements OnApplicationBootstrap {
     private readonly discoveryService;
     private readonly metadataScanner;
-    private readonly logger;
-    constructor(discoveryService: DiscoveryService, metadataScanner: MetadataScanner);
+    private readonly state;
+    constructor(discoveryService: DiscoveryService, metadataScanner: MetadataScanner, state?: EnforcementChainState);
     onApplicationBootstrap(): void;
     /**
-     * Annotated handlers whose own guards and whose controller's guards contain
-     * no recognisable feature guard.
+     * Every route carrying an enforcement annotation, with whether a
+     * recognisable feature guard covers it.
      *
      * Deliberately conservative in one direction only: an unrecognised wrapper
      * is reported (and the message says so) rather than assumed safe, because
      * the named route is cheap to check. The reverse — staying silent about a
      * route with no guard at all — is the failure this exists to prevent.
      */
-    private findUncoveredRoutes;
+    private findAnnotatedRoutes;
 }
 
 interface TenantNavItem {
@@ -119,4 +301,4 @@ declare class TenantManifestService {
     getManifest(tenantId: string): Promise<TenantManifest>;
 }
 
-export { FeatureGuardCoverageCheck, PlanResolverPort, QuotaProvidersUsageSnapshot, StaticEntitlementService, SubscriptionPlanResolver, type TenantManifest, TenantManifestService, type TenantNavItem };
+export { type Composer, type CompositionContext, ENFORCEMENT_CHAIN_STATE_TOKEN, EnforcementChainCheck, type EnforcementChainState, FEATURE_COMPOSERS, MOUNTED_BUT_NOT_EXPORTED, PLATFORM_RULES, PlanResolverPort, type PlatformConfiguration, type PlatformRule, type PlatformViolation, QuotaProvidersUsageSnapshot, SaaSiCatConfigurationError, SaasPlatformAdapters, SaasPlatformModuleOptions, StaticEntitlementService, SubscriptionPlanResolver, type TenantManifest, TenantManifestService, type TenantNavItem, assertConfiguration, composeFeatures, composeModuleExports, docsUrlFor, findViolations, headingSlug };