@saasicat/nest 0.26.1 → 1.0.0-rc.0

package/dist/{saas-platform.module-CgalxzcT.d.cts → module-options-DgwBKVpC.d.cts}

@@ -1,14 +1,14 @@
 import { Type, DynamicModule, ForwardReference, Provider, CanActivate, FactoryProvider } from '@nestjs/common';
-import { SuperAdminProvisioningPort, PlanCatalog, SaasicatPersistenceAdapter, MfaPort, AuditPort, RlsBypassPort, PlanCatalogReadSink, SubscriptionRepository, PlanVersionRepository, TransactionRunner, QuotaProvider, FeatureUiRegistry, SubscriptionUsagePort, UsageSnapshotPort, TenantSubscriptionWritePort, AdminResourcesPort, FirstTimeCustomerCheck } from '@saasicat/types';
+import { SuperAdminProvisioningPort, MfaPort, AuditPort, RlsBypassPort, PlanCatalogReadSink, SubscriptionRepository, PlanVersionRepository, TransactionRunner, AdminResourcesPort, FeatureUiRegistry, PlanCatalog, SaaSiCatPersistenceAdapter, QuotaProvider, SubscriptionUsagePort, UsageSnapshotPort, TenantSubscriptionWritePort, FirstTimeCustomerCheck } from '@saasicat/types';
 import { P as ProviderSpec } from './di-CcNeq9v-.cjs';
-import { b as AdminManifestConfig, d as AdminResourcesModuleOptions, g as AdminStatsModuleOptions } from './admin-resources.module-DGgGSdzN.cjs';
-import { E as EntitlementResolutionConfig } from './plan-resolution-CFCoUkrE.cjs';
-import { a as SubscriptionContractModuleOptions } from './subscription-contract.module-B2uNvUJL.cjs';
-import { a as PromoCodesModuleOptions } from './module-CHMIyWlf.cjs';
-import { b as DiscoveryAppInfo } from './discovery.scanner-DLgEvuoy.cjs';
+import { d as AdminResourcesModuleOptions, g as AdminStatsModuleOptions, b as AdminManifestConfig } from './admin-resources.module-DGgGSdzN.cjs';
+import { t as TenantBillingModuleOptions, p as SubscriptionBundleModuleOptions, n as SubscriptionBundleControllerOptions } from './tenant-billing.module-BxJS6fX4.cjs';
 import { b as CatalogModuleOptions } from './catalog.module-D-_pQDNA.cjs';
+import { b as DiscoveryAppInfo } from './discovery.scanner-DLgEvuoy.cjs';
+import { E as EntitlementResolutionConfig } from './plan-resolution-CFCoUkrE.cjs';
+import { a as PromoCodesModuleOptions } from './promo.module-DokmUGmm.cjs';
 import { b as CheckoutOfferModuleOptions } from './checkout-offer.module-DmlpPevf.cjs';
-import { t as TenantBillingModuleOptions, p as SubscriptionBundleModuleOptions, n as SubscriptionBundleControllerOptions } from './subscription-bundles.module-Cfi-lFWF.cjs';
+import { a as SubscriptionContractModuleOptions } from './subscription-contract.module-B2uNvUJL.cjs';
 
 interface SetupModuleOptions {
     /**
@@ -46,7 +46,7 @@ interface PlanResolverPort {
  * for local development and for apps that do not yet have a contract concept.
  *
  * The quickstart path uses this implicitly when `adapters.planResolver` is
- * not set and `defaultPlanId` was provided in SaasPlatformModule.forRoot().
+ * not set and `defaultPlanId` was provided in SaaSiCatModule.forRoot().
  */
 declare class StaticPlanResolver implements PlanResolverPort {
     private readonly planId;
@@ -78,7 +78,7 @@ declare function buildTenantManifestController(options: TenantManifestController
  * when wiring adapters without a bundle. The module validates that each port
  * ends up provided by exactly one of the two paths.
  */
-interface SaasPlatformAdapters {
+interface SaaSiCatAdapters {
     mfa?: ProviderSpec<MfaPort>;
     audit?: ProviderSpec<AuditPort>;
     rlsBypass?: ProviderSpec<RlsBypassPort>;
@@ -105,7 +105,7 @@ interface SaasPlatformAdapters {
     transactionRunner?: ProviderSpec<TransactionRunner>;
 }
 type PlatformImports = Array<Type<unknown> | DynamicModule | Promise<DynamicModule> | ForwardReference>;
-interface SaasPlatformCatalogOptions extends Pick<CatalogModuleOptions, 'strictModeCheckMode' | 'autoSyncDiscoveryAtBoot' | 'marketedOnlyFeatures' | 'publicMarketingCatalog' | 'extraProviders'> {
+interface SaaSiCatCatalogOptions extends Pick<CatalogModuleOptions, 'strictModeCheckMode' | 'autoSyncDiscoveryAtBoot' | 'marketedOnlyFeatures' | 'publicMarketingCatalog' | 'extraProviders'> {
     /** Labels/icons used by discovery review and the public catalog. */
     featureUiRegistry: FeatureUiRegistry;
     /** Mount the SuperAdmin catalog controllers. Default `true`. */
@@ -115,31 +115,31 @@ interface SaasPlatformCatalogOptions extends Pick<CatalogModuleOptions, 'strictM
     /** Override the top-level module imports for catalog adapter factories. */
     imports?: PlatformImports;
 }
-type SaasPlatformTenantAuthGuards = Array<Type<CanActivate>> | ProviderSpec<ReadonlyArray<CanActivate>>;
-interface SaasPlatformTenantBillingOptions extends Omit<TenantBillingModuleOptions, 'authGuards' | 'subscriptionUsagePort' | 'usageSnapshotPort' | 'subscriptionWritePort' | 'global'> {
+type SaaSiCatTenantAuthGuards = Array<Type<CanActivate>> | ProviderSpec<ReadonlyArray<CanActivate>>;
+interface SaaSiCatTenantBillingOptions extends Omit<TenantBillingModuleOptions, 'authGuards' | 'subscriptionUsagePort' | 'usageSnapshotPort' | 'subscriptionWritePort' | 'global'> {
     /**
      * Tenant guards as classes (the common path) or as a custom provider
      * factory. Guard classes are resolved from `imports`.
      */
-    authGuards: SaasPlatformTenantAuthGuards;
+    authGuards: SaaSiCatTenantAuthGuards;
     /** Optional overrides; otherwise the persistence bundle supplies them. */
     subscriptionUsagePort?: ProviderSpec<SubscriptionUsagePort>;
     usageSnapshotPort?: ProviderSpec<UsageSnapshotPort>;
     subscriptionWritePort?: ProviderSpec<TenantSubscriptionWritePort>;
 }
-interface SaasPlatformSubscriptionBundlesOptions extends Omit<SubscriptionBundleModuleOptions, 'subscriptionBundleRepository' | 'bundleRepository' | 'controller' | 'imports' | 'extraProviders' | 'global'> {
+interface SaaSiCatSubscriptionBundlesOptions extends Omit<SubscriptionBundleModuleOptions, 'subscriptionBundleRepository' | 'bundleRepository' | 'controller' | 'imports' | 'extraProviders' | 'global'> {
     /** Default mounts the tenant controller and reuses tenant-billing auth. */
     controller?: false | Omit<SubscriptionBundleControllerOptions, 'authGuards' | 'subscriptionUsagePort'>;
     imports?: PlatformImports;
     extraProviders?: Provider[];
 }
-interface SaasPlatformAdminResourcesOptions extends Omit<AdminResourcesModuleOptions, 'resources' | 'guards' | 'global'> {
+interface SaaSiCatAdminResourcesOptions extends Omit<AdminResourcesModuleOptions, 'resources' | 'guards' | 'global'> {
     /** Override the default controller guards + `SuperAdminGuard` chain. */
     guards?: Array<Type<CanActivate>>;
     /** Custom schema override; the persistence bundle supplies the default. */
     resources?: ProviderSpec<AdminResourcesPort>;
 }
-interface SaasPlatformPromoCodesOptions extends Omit<PromoCodesModuleOptions, 'promoCodeRepository' | 'redemptionRepository' | 'validationLogRepository' | 'subscriptionLookup' | 'revenueAggregator' | 'transactionRunner' | 'firstTimeCustomerCheck' | 'adminController' | 'global'> {
+interface SaaSiCatPromoCodesOptions extends Omit<PromoCodesModuleOptions, 'promoCodeRepository' | 'redemptionRepository' | 'validationLogRepository' | 'subscriptionLookup' | 'revenueAggregator' | 'transactionRunner' | 'firstTimeCustomerCheck' | 'adminController' | 'global'> {
     /**
      * Required when the public preview/redeem flow is enabled. Admin-only
      * setups do not need an app-specific customer-history check.
@@ -158,27 +158,44 @@ interface SaasPlatformPromoCodesOptions extends Omit<PromoCodesModuleOptions, 'p
     adminController?: false;
 }
 /** First-run setup, deriving the provisioning adapter from persistence by default. */
-interface SaasPlatformSetupOptions extends Omit<SetupModuleOptions, 'provisioningPort' | 'global'> {
+interface SaaSiCatSetupOptions extends Omit<SetupModuleOptions, 'provisioningPort' | 'global'> {
     provisioningPort?: SetupModuleOptions['provisioningPort'];
 }
 /** Admin dashboard statistics; the audit port can come from persistence. */
-interface SaasPlatformAdminStatsOptions extends Omit<AdminStatsModuleOptions, 'auditStatsPort' | 'global'> {
+interface SaaSiCatAdminStatsOptions extends Omit<AdminStatsModuleOptions, 'auditStatsPort' | 'global'> {
     auditStatsPort?: AdminStatsModuleOptions['auditStatsPort'];
 }
 /**
  * Public checkout-offer flow. Catalog repositories default to the persistence
  * bundle, while the app still supplies its checkout-offer repository.
  */
-interface SaasPlatformCheckoutOfferOptions extends Omit<CheckoutOfferModuleOptions, 'bundleRepository' | 'planRepository' | 'catalogEntryRepository' | 'global'> {
+interface SaaSiCatCheckoutOfferOptions extends Omit<CheckoutOfferModuleOptions, 'bundleRepository' | 'planRepository' | 'catalogEntryRepository' | 'global'> {
     bundleRepository?: CheckoutOfferModuleOptions['bundleRepository'];
     planRepository?: CheckoutOfferModuleOptions['planRepository'];
     catalogEntryRepository?: CheckoutOfferModuleOptions['catalogEntryRepository'];
 }
 /** Subscription-contract service, deriving its repository from persistence by default. */
-interface SaasPlatformSubscriptionContractOptions extends Omit<SubscriptionContractModuleOptions, 'subscriptionContractRepository' | 'global'> {
+interface SaaSiCatSubscriptionContractOptions extends Omit<SubscriptionContractModuleOptions, 'subscriptionContractRepository' | 'global'> {
     subscriptionContractRepository?: SubscriptionContractModuleOptions['subscriptionContractRepository'];
 }
-interface SaasPlatformModuleOptions {
+/**
+ * What `SaaSiCatModule.forRoot()` composes.
+ *
+ * One subsystem is deliberately absent: **self-registration**. A prospect
+ * signing themselves up — mail address, OTP, plan choice, payment, activation —
+ * is `RegistrationModule` from `@saasicat/nest/registration`, and it is
+ * hand-wired: ten required ports, none of which a persistence bundle supplies.
+ *
+ * That is a decision with a reason and a plan, not an omission: the ten ports
+ * have no executable contract yet (`@saasicat/persistence-testing` covers the
+ * catalogue, subscription, promo and audit ports and none of these), and
+ * folding unverified ports into a bundle would move the problem rather than
+ * check it. See `docs/self-registration.md`.
+ *
+ * Everything else — an operator creating tenants through the SuperAdmin UI, a
+ * CLI, or your own onboarding form — is composed here.
+ */
+interface SaaSiCatModuleOptions {
     /**
      * Plan catalog. Either as an already-loaded object (quickstart, comes
      * directly from `loadPlanCatalogFromFile('config/saas.yaml')`) or via DB
@@ -207,12 +224,12 @@ interface SaasPlatformModuleOptions {
      * `capabilities` are validated fail-fast against the enabled feature set
      * (e.g. `entitlement: true` requires transactions + pessimistic locking).
      */
-    persistence?: SaasicatPersistenceAdapter;
+    persistence?: SaaSiCatPersistenceAdapter;
     /**
      * Individual adapter bindings. Optional when `persistence` provides the
      * respective port; explicit entries take precedence over the bundle.
      */
-    adapters?: SaasPlatformAdapters;
+    adapters?: SaaSiCatAdapters;
     /**
      * Class-level guards for the platform controllers (`GET /admin/discovery`
      * and `GET /admin/manifest`). REQUIRED — otherwise the platform throws at
@@ -299,43 +316,43 @@ interface SaasPlatformModuleOptions {
      * Standard DB-backed catalog stack. Repositories are taken from
      * `persistence.catalog`; no consumer forwarding module is needed.
      */
-    catalog?: false | SaasPlatformCatalogOptions;
+    catalog?: false | SaaSiCatCatalogOptions;
     /**
      * Standard tenant self-service stack. Subscription read/write adapters
      * come from `persistence.tenantBilling`; usage is derived from
      * `quotaProviders` unless explicitly overridden.
      */
-    tenantBilling?: false | SaasPlatformTenantBillingOptions;
+    tenantBilling?: false | SaaSiCatTenantBillingOptions;
     /**
      * Add-on bundle service and tenant controller. `true` uses defaults and
      * reuses tenant-billing auth/usage; an object customizes policy.
      */
-    subscriptionBundles?: false | true | SaasPlatformSubscriptionBundlesOptions;
+    subscriptionBundles?: false | true | SaaSiCatSubscriptionBundlesOptions;
     /**
      * Standard SuperAdmin Tenant/User/Audit/Subscription endpoints. `true`
      * uses `persistence.adminResources` and the standard guard chain.
      */
-    adminResources?: false | true | SaasPlatformAdminResourcesOptions;
+    adminResources?: false | true | SaaSiCatAdminResourcesOptions;
     /**
      * Promo-code domain and SuperAdmin CRUD. `true` enables the admin API
      * without the public preview endpoint; pass an object to enable preview.
      */
-    promoCodes?: false | true | SaasPlatformPromoCodesOptions;
+    promoCodes?: false | true | SaaSiCatPromoCodesOptions;
     /**
      * First-run SuperAdmin setup. `true` uses
      * `persistence.core.superAdminProvisioning`; an object customizes it or
      * supplies an app-specific provisioning adapter.
      */
-    setup?: false | true | SaasPlatformSetupOptions;
+    setup?: false | true | SaaSiCatSetupOptions;
     /** SuperAdmin dashboard statistics with app-specific subscription/promo ports. */
-    adminStats?: false | SaasPlatformAdminStatsOptions;
+    adminStats?: false | SaaSiCatAdminStatsOptions;
     /** Public checkout-offer flow; catalog repositories reuse `persistence.catalog`. */
-    checkoutOffer?: false | SaasPlatformCheckoutOfferOptions;
+    checkoutOffer?: false | SaaSiCatCheckoutOfferOptions;
     /**
      * Subscription-contract service. `true` reuses
      * `persistence.entitlement.subscriptionContractRepository`.
      */
-    subscriptionContract?: false | true | SaasPlatformSubscriptionContractOptions;
+    subscriptionContract?: false | true | SaaSiCatSubscriptionContractOptions;
     /**
      * Enable the tenant manifest — the app UI gets a filtered manifest per
      * tenant with features, quotas and visible navigation. Requires that
@@ -366,28 +383,24 @@ interface SaasPlatformModuleOptions {
      * authenticated request.
      */
     globalFeatureGuard?: boolean;
-}
-/**
- * Bundles the complete standard SaaSiCat backend stack into a single
- * `forRoot({...})` call. Reduces AppModule boilerplate and eliminates the
- * ordering trap.
- *
- * Quickstart path (Prisma + PostgreSQL on the canonical schema):
- *
- * ```ts
- * SaasPlatformModule.forRoot({
- *     planCatalog: loadPlanCatalogFromFile({ path: 'config/saas.yaml' }),
- *     controller: { guards: [JwtAuthGuard] },
- *     imports: [AuthModule],
- *     persistence: prismaPersistence({ client: PrismaService }), // @saasicat/adapter-prisma
- * })
- * ```
- *
- * Individual `adapters` entries stay supported (custom schema / other ORM)
- * and override bundle slices field by field.
- */
-declare class SaasPlatformModule {
-    static forRoot(options: SaasPlatformModuleOptions): DynamicModule;
+    /**
+     * Run the enforcement-chain check at bootstrap. Default `true`.
+     *
+     * It refuses to start an application whose `@RequireFeature` routes have
+     * nothing enforcing them — the failure that otherwise shows up as a
+     * customer using a feature they never bought.
+     *
+     * Two shapes it cannot recognise, and they are the reason this switch
+     * exists rather than being an argument about the check: a feature guard of
+     * your own that WRAPS ours without carrying `FEATURE_GUARD_MARKER`, and one
+     * you bind globally as an `APP_GUARD` instead of per controller. Both are
+     * correctly enforced and both look uncovered from here.
+     *
+     * Turning it off buys silence, not safety: those routes are then unchecked
+     * by anything, and whether they are covered is back to being something you
+     * know rather than something the boot verifies.
+     */
+    enforcementChainCheck?: boolean;
 }
 
-export { PLAN_RESOLVER_PORT_TOKEN as P, SaasPlatformModule as S, type TenantManifestControllerOptions as T, type SaasPlatformAdapters as a, type SaasPlatformAdminResourcesOptions as b, type SaasPlatformAdminStatsOptions as c, type SaasPlatformCatalogOptions as d, type SaasPlatformCheckoutOfferOptions as e, type SaasPlatformModuleOptions as f, type SaasPlatformPromoCodesOptions as g, type SaasPlatformSetupOptions as h, type SaasPlatformSubscriptionBundlesOptions as i, type SaasPlatformSubscriptionContractOptions as j, type SaasPlatformTenantAuthGuards as k, type SaasPlatformTenantBillingOptions as l, SetupModule as m, type SetupModuleOptions as n, StaticPlanResolver as o, type PlanResolverPort as p, buildTenantManifestController as q };
+export { PLAN_RESOLVER_PORT_TOKEN as P, type SaaSiCatAdapters as S, type TenantManifestControllerOptions as T, type SaaSiCatAdminResourcesOptions as a, type SaaSiCatAdminStatsOptions as b, type SaaSiCatCatalogOptions as c, type SaaSiCatCheckoutOfferOptions as d, type SaaSiCatModuleOptions as e, type SaaSiCatPromoCodesOptions as f, type SaaSiCatSetupOptions as g, type SaaSiCatSubscriptionBundlesOptions as h, type SaaSiCatSubscriptionContractOptions as i, type SaaSiCatTenantAuthGuards as j, type SaaSiCatTenantBillingOptions as k, SetupModule as l, type SetupModuleOptions as m, StaticPlanResolver as n, type PlanResolverPort as o, buildTenantManifestController as p };

package/dist/platform/index.d.cts

@@ -1,31 +1,179 @@
-import { p as PlanResolverPort } from '../saas-platform.module-CgalxzcT.cjs';
-export { P as PLAN_RESOLVER_PORT_TOKEN, S as SaaSiCatModule, a as SaasPlatformAdapters, b as SaasPlatformAdminResourcesOptions, c as SaasPlatformAdminStatsOptions, d as SaasPlatformCatalogOptions, e as SaasPlatformCheckoutOfferOptions, S as SaasPlatformModule, f as SaasPlatformModuleOptions, g as SaasPlatformPromoCodesOptions, h as SaasPlatformSetupOptions, i as SaasPlatformSubscriptionBundlesOptions, j as SaasPlatformSubscriptionContractOptions, k as SaasPlatformTenantAuthGuards, l as SaasPlatformTenantBillingOptions, m as SetupModule, n as SetupModuleOptions, o as StaticPlanResolver, T as TenantManifestControllerOptions, q as buildTenantManifestController } from '../saas-platform.module-CgalxzcT.cjs';
-export { a as SAASICAT_PUBLIC_ROUTE_KEY, d as SaaSiCatPublicRoute, S as SetupService, f as defineSaaSiCat, i as isSaaSiCatPublicRoute } from '../define-saasicat-D30I-WET.cjs';
-import { SubscriptionRepository, UsageSnapshotPort, QuotaProvider } from '@saasicat/types';
-import { S as StaticEntitlementService } from '../enforce-quota.interceptor-DY6CLjoP.cjs';
-export { E as EnforceQuotaInterceptor, Q as QUOTA_PROVIDERS_TOKEN, b as STATIC_FEATURE_GUARD_CONFIG_TOKEN, c as StaticEntitlementSnapshot, a as StaticFeatureGuard, d as StaticFeatureGuardConfig } from '../enforce-quota.interceptor-DY6CLjoP.cjs';
-import { OnApplicationBootstrap } from '@nestjs/common';
+export { a as SAASICAT_PUBLIC_ROUTE_KEY, d as SaaSiCatModule, e as SaaSiCatPublicRoute, S as SetupService, g as defineSaaSiCat, i as isSaaSiCatPublicRoute } from '../define-saasicat-CNUWjfNK.cjs';
+import { CanActivate, DynamicModule, OnApplicationBootstrap } from '@nestjs/common';
+import { SaaSiCatPersistenceAdapter, SubscriptionUsagePort, SubscriptionRepository, UsageSnapshotPort, QuotaProvider } from '@saasicat/types';
+import { P as ProviderSpec } from '../di-CcNeq9v-.cjs';
+import { b as DiscoveryAppInfo } from '../discovery.scanner-DLgEvuoy.cjs';
+export { c as DiscoveryScanner } from '../discovery.scanner-DLgEvuoy.cjs';
+import { e as SaaSiCatModuleOptions, S as SaaSiCatAdapters, o as PlanResolverPort } from '../module-options-DgwBKVpC.cjs';
+export { P as PLAN_RESOLVER_PORT_TOKEN, a as SaaSiCatAdminResourcesOptions, b as SaaSiCatAdminStatsOptions, c as SaaSiCatCatalogOptions, d as SaaSiCatCheckoutOfferOptions, f as SaaSiCatPromoCodesOptions, g as SaaSiCatSetupOptions, h as SaaSiCatSubscriptionBundlesOptions, i as SaaSiCatSubscriptionContractOptions, j as SaaSiCatTenantAuthGuards, k as SaaSiCatTenantBillingOptions, l as SetupModule, m as SetupModuleOptions, n as StaticPlanResolver, T as TenantManifestControllerOptions, p as buildTenantManifestController } from '../module-options-DgwBKVpC.cjs';
+import { S as StaticEntitlementService } from '../enforce-quota.interceptor-BxIR63Wn.cjs';
+export { E as EnforceQuotaInterceptor, Q as QUOTA_PROVIDERS_TOKEN, b as STATIC_FEATURE_GUARD_CONFIG_TOKEN, c as StaticEntitlementSnapshot, a as StaticFeatureGuard, d as StaticFeatureGuardConfig } from '../enforce-quota.interceptor-BxIR63Wn.cjs';
 import { DiscoveryService, MetadataScanner } from '@nestjs/core';
-export { A as AdminBypassRlsInterceptor, a as AdminManifestModule, b as AdminManifestModuleOptions, c as AdminManifestService, d as AdminModule, e as AdminModuleOptions, f as AdminStatsService, M as MfaGuard, h as MfaService, S as SuperAdminGuard } from '../admin-stats.service-HUZIU448.cjs';
+export { A as AdminBypassRlsInterceptor, a as AdminManifestModule, b as AdminManifestModuleOptions, c as AdminManifestService, d as AdminModule, e as AdminModuleOptions, f as AdminStatsService, M as MfaGuard, h as MfaService, S as SuperAdminGuard } from '../admin-stats.service-BroyovpL.cjs';
 export { A as AdminAuditService } from '../admin-audit.service-9IqXMlZm.cjs';
 export { e as AdminResourcesService, f as AdminStatsModule, g as AdminStatsModuleOptions } from '../admin-resources.module-DGgGSdzN.cjs';
 export { c as EntitlementService } from '../aggregation-mZ7WZROK.cjs';
-export { d as ComposedTenantAuthGuard, P as PendingPlanMaterializationService, h as PlanChangePreviewService, r as SubscriptionBundlePreviewService, s as SubscriptionBundlesService, T as TenantAdminGuard, t as TenantBillingController } from '../tenant-billing.controller-DHSUrT_N.cjs';
+export { d as ComposedTenantAuthGuard, P as PendingPlanMaterializationService, h as PlanChangePreviewService, r as SubscriptionBundlePreviewService, s as SubscriptionBundlesService, T as TenantAdminGuard, t as TenantBillingController } from '../tenant-billing.controller-CODIYzlI.cjs';
 export { B as BundlesService, C as CatalogEntriesService, M as MarketingProjectionsService, b as MarketingSettingsService, P as PlanVersionsService, c as PlansService, d as PromotionsService, e as PublicMarketingCatalogService } from '../plan-versions.service-_saKzb50.cjs';
-export { c as DiscoveryScanner } from '../discovery.scanner-DLgEvuoy.cjs';
 export { P as PromoCodeRateLimitGuard } from '../rate-limit.guard-dntqAlfZ.cjs';
-export { g as PromoCodesService } from '../service-D48clObR.cjs';
+export { g as PromoCodesService } from '../promo.service-D48clObR.cjs';
 export { a as CheckoutOfferModule, b as CheckoutOfferModuleOptions } from '../checkout-offer.module-DmlpPevf.cjs';
 export { C as CheckoutOfferService } from '../checkout-offer.service-BX51dljL.cjs';
 export { S as SubscriptionContractModule, a as SubscriptionContractModuleOptions } from '../subscription-contract.module-B2uNvUJL.cjs';
 export { S as SubscriptionContractService } from '../subscription-contract.service--cm47ZJJ.cjs';
-import '../di-CcNeq9v-.cjs';
-import '../plan-resolution-CFCoUkrE.cjs';
-import '../module-CHMIyWlf.cjs';
+import '../tenant-billing.module-BxJS6fX4.cjs';
 import '../catalog.module-D-_pQDNA.cjs';
-import '../subscription-bundles.module-Cfi-lFWF.cjs';
+import '../plan-resolution-CFCoUkrE.cjs';
+import '../promo.module-DokmUGmm.cjs';
 import 'rxjs';
 
+/**
+ * What `tenantBilling` resolved and its two dependants need.
+ *
+ * Mutable, and the only mutable thing here: `composeTenantBilling` writes it,
+ * `composeSubscriptionBundles` and the entitlement runtime read it. A composer
+ * that runs before tenant billing sees the initial values, which is correct —
+ * there was no tenant billing to resolve anything.
+ */
+interface SharedTenantBinding {
+    /** Normalised `authGuards`, shared with the bundle controller. */
+    authGuards?: ProviderSpec<ReadonlyArray<CanActivate>>;
+    /** The usage port both controllers report against. */
+    subscriptionUsagePort?: ProviderSpec<SubscriptionUsagePort>;
+    /**
+     * Whether the tenant-billing module already registered the app's quota
+     * providers.
+     *
+     * It registers them as its own providers and exports, so the entitlement
+     * runtime must not register them a second time — two instances of a
+     * `QuotaProvider` are two counters over the same rows.
+     */
+    quotaProvidersHostedByTenantBilling: boolean;
+}
+interface CompositionContext {
+    readonly options: SaaSiCatModuleOptions;
+    /** After the bundle slices and the explicit entries have been merged. */
+    readonly adapters: SaaSiCatAdapters;
+    readonly persistence: SaaSiCatPersistenceAdapter | undefined;
+    /** App key and version, for discovery and the public catalogue. */
+    readonly appInfo: DiscoveryAppInfo;
+    /** Entitlement is needed directly, or by tenant billing / bundles. */
+    readonly requiresFullEntitlement: boolean;
+    readonly shared: SharedTenantBinding;
+}
+
+/** One feature's contribution: the modules it adds, or none. */
+type Composer = (ctx: CompositionContext) => DynamicModule[];
+declare const FEATURE_COMPOSERS: readonly Composer[];
+/** Every module the enabled features contribute, in composer order. */
+declare function composeFeatures(ctx: CompositionContext): DynamicModule[];
+
+/**
+ * Mounted on purpose and deliberately not re-exported.
+ *
+ * Declared here rather than left as an absence, because the guard in
+ * `tests/platform-composition.test.js` otherwise reports it every time and the
+ * next person has to re-derive whether it is a bug.
+ *
+ * `PublicCatalogModule` is a controller and one token, `FEATURE_UI_REGISTRY` —
+ * which the APP supplies through `catalog: { featureUiRegistry }` rather than
+ * injects. Re-exporting it would also collide with the identically named token
+ * from `billing`, which means something else (see CONTRIBUTING, "One bundle,
+ * many entries").
+ */
+declare const MOUNTED_BUT_NOT_EXPORTED: readonly string[];
+/** The `exports` of the assembled module, plus whatever it provides itself. */
+declare function composeModuleExports(ctx: CompositionContext, ownExports: NonNullable<DynamicModule['exports']>): NonNullable<DynamicModule['exports']>;
+
+/** Everything a rule may look at: the options as given, the adapters as resolved. */
+interface PlatformConfiguration {
+    readonly options: SaaSiCatModuleOptions;
+    /** After the bundle slices and the explicit entries have been merged. */
+    readonly adapters: SaaSiCatAdapters;
+}
+interface PlatformRule {
+    /** Stable id — `<area>.<what-it-requires>`. Appears in the boot error. */
+    readonly id: string;
+    /** Whether this rule has anything to say about this configuration. */
+    readonly when: (c: PlatformConfiguration) => boolean;
+    /** True when the configuration satisfies it. */
+    readonly assert: (c: PlatformConfiguration) => boolean;
+    /**
+     * What is wrong and what to do about it.
+     *
+     * A function only where it has to be: several of these name which of a set
+     * is missing, and "adapters are missing: subscriptionRepository,
+     * transactionRunner" is worth more than "adapters are missing". The rest
+     * are the same sentence every time, and a closure that ignores its argument
+     * is one more thing a reader has to check for.
+     */
+    readonly message: string | ((c: PlatformConfiguration) => string);
+    /**
+     * Where the option is documented.
+     *
+     * Derived from the id rather than written beside it — see `docsUrlFor`.
+     */
+    readonly docs: string;
+    /**
+     * The typed error this rule threw before the table existed, when it has
+     * one.
+     *
+     * Used only when this rule is the ONLY violation — and that is not a
+     * compromise, it is the exact set of cases where the typed error was ever
+     * observable. A configuration with two problems used to throw whichever
+     * check ran first and stop, so nothing could catch the second one by type
+     * either. Where a consumer could see `PersistenceCapabilityError`, it still
+     * sees it; where it could not, it now gets the full list instead of one
+     * arbitrary problem.
+     */
+    readonly error?: (c: PlatformConfiguration) => Error;
+}
+/**
+ * GitHub's heading slug for `text`: lowercased, punctuation dropped, spaces
+ * hyphenated.
+ *
+ * Written out because the anchor has to match a heading nobody types — the
+ * page is generated. `tests/options-reference-is-generated.test.js` asserts
+ * every rule's anchor is a heading in the file, so a wrong slug fails the build
+ * rather than producing a link that lands at the top of the page.
+ */
+declare const headingSlug: (text: string) => string;
+/**
+ * The documentation link for a rule.
+ *
+ * Derived from the id, so the two cannot disagree. They did, on the first
+ * attempt: eleven hand-written anchors against headings the generator names
+ * after the ids, and every one of them landed at the top of the page.
+ */
+declare const docsUrlFor: (id: string) => string;
+declare const PLATFORM_RULES: readonly PlatformRule[];
+
+interface PlatformViolation {
+    readonly id: string;
+    readonly message: string;
+    readonly docs: string;
+}
+/** Every rule that applies to this configuration and is not satisfied by it. */
+declare function findViolations(configuration: PlatformConfiguration, rules?: readonly PlatformRule[]): PlatformViolation[];
+/**
+ * The error a misconfigured application boots into.
+ *
+ * Carries the violations as data as well as prose: a consumer's own boot
+ * diagnostics can group them, and the rule ids are stable enough to assert on.
+ */
+declare class SaaSiCatConfigurationError extends Error {
+    readonly violations: readonly PlatformViolation[];
+    constructor(violations: readonly PlatformViolation[]);
+}
+/**
+ * Throws once, naming every problem, or returns.
+ *
+ * A single violation from a rule that owns a typed error raises that error
+ * instead of the aggregate — see `PlatformRule.error` for why that is the
+ * whole of the previous behaviour rather than part of it.
+ */
+declare function assertConfiguration(configuration: PlatformConfiguration, rules?: readonly PlatformRule[]): void;
+
 /**
  * Standard `tenantId → planId` resolver backed by the canonical subscription
  * repository. This removes the identical resolver class most applications
@@ -48,22 +196,56 @@ declare class QuotaProvidersUsageSnapshot implements UsageSnapshotPort {
     snapshot(tenantId: string): Promise<Record<string, number>>;
 }
 
-declare class FeatureGuardCoverageCheck implements OnApplicationBootstrap {
+/** What the module knows at composition time and this check cannot see. */
+interface EnforcementChainState {
+    /**
+     * Whether anything can enforce `@RequireFeature`.
+     *
+     * True on the static path, and also on the V3 path, where the application
+     * binds `FeatureGuard` from `@saasicat/nest/billing` itself.
+     */
+    readonly featureEnforcementActive: boolean;
+    /**
+     * Whether anything can enforce `@EnforceQuota`.
+     *
+     * Narrower than the field above, and the two were one field until an app
+     * on the V3 path with no plan resolver booted with every quota unenforced:
+     * `EnforceQuotaInterceptor` comes from `composeEnforcementRuntime`, which
+     * registers nothing unless a plan resolver exists. A flag named for
+     * "entitlement" answered a question about features and was read as an
+     * answer about quotas.
+     */
+    readonly quotaEnforcementActive: boolean;
+    /** Whether the platform bound its own global feature guard. */
+    readonly globalGuardBound: boolean;
+    /**
+     * Whether `globalFeatureGuard: false` is what unbound it.
+     *
+     * Distinct from `globalGuardBound` because the two have different causes
+     * and the message has to say the true one. On the V3 entitlement path the
+     * platform binds no global guard either — it never registers the static
+     * stack — and naming an option the application did not set sends the reader
+     * to look for a line that is not in their file.
+     */
+    readonly globalGuardOptedOut: boolean;
+}
+declare const ENFORCEMENT_CHAIN_STATE_TOKEN: unique symbol;
+declare class EnforcementChainCheck implements OnApplicationBootstrap {
     private readonly discoveryService;
     private readonly metadataScanner;
-    private readonly logger;
-    constructor(discoveryService: DiscoveryService, metadataScanner: MetadataScanner);
+    private readonly state;
+    constructor(discoveryService: DiscoveryService, metadataScanner: MetadataScanner, state?: EnforcementChainState);
     onApplicationBootstrap(): void;
     /**
-     * Annotated handlers whose own guards and whose controller's guards contain
-     * no recognisable feature guard.
+     * Every route carrying an enforcement annotation, with whether a
+     * recognisable feature guard covers it.
      *
      * Deliberately conservative in one direction only: an unrecognised wrapper
      * is reported (and the message says so) rather than assumed safe, because
      * the named route is cheap to check. The reverse — staying silent about a
      * route with no guard at all — is the failure this exists to prevent.
      */
-    private findUncoveredRoutes;
+    private findAnnotatedRoutes;
 }
 
 interface TenantNavItem {
@@ -119,4 +301,4 @@ declare class TenantManifestService {
     getManifest(tenantId: string): Promise<TenantManifest>;
 }
 
-export { FeatureGuardCoverageCheck, PlanResolverPort, QuotaProvidersUsageSnapshot, StaticEntitlementService, SubscriptionPlanResolver, type TenantManifest, TenantManifestService, type TenantNavItem };
+export { type Composer, type CompositionContext, ENFORCEMENT_CHAIN_STATE_TOKEN, EnforcementChainCheck, type EnforcementChainState, FEATURE_COMPOSERS, MOUNTED_BUT_NOT_EXPORTED, PLATFORM_RULES, PlanResolverPort, type PlatformConfiguration, type PlatformRule, type PlatformViolation, QuotaProvidersUsageSnapshot, SaaSiCatAdapters, SaaSiCatConfigurationError, SaaSiCatModuleOptions, StaticEntitlementService, SubscriptionPlanResolver, type TenantManifest, TenantManifestService, type TenantNavItem, assertConfiguration, composeFeatures, composeModuleExports, docsUrlFor, findViolations, headingSlug };