@saasicat/nest 0.8.0 → 0.10.0

package/dist/plan-versions.service-BB36Q1bg.d.ts

@@ -0,0 +1,329 @@
+import { BundleRepository, DiscoverySnapshot, SubscriptionRepository, PlanRepository, CatalogEntryRepository, BundleRow, BundleVersionRow, CreateBundleData, UpdateBundleData, CreateBundleVersionDraftData, BundleVersionMutationResult, UpdateBundleVersionDraftData, PublishBundleVersionData, MarketingProjectionRepository, MarketingProjectionFilter, MarketingProjectionRow, CreateMarketingProjectionData, UpdateMarketingProjectionData, FeatureUiRegistry, CapabilityCatalogEntryRow, FeatureCatalogEntryRow, QuotaCatalogEntryRow, ReviewCatalogEntryData, CatalogEntryI18n, UpdateCatalogEntryBaseData, SyncDiscoveryResult, PromotionRepository, PromotionRow, CreatePromotionData, UpdatePromotionData, MarketingSettingsRepository, MarketingSettingsRow, UpdateMarketingSettingsData, PublicMarketingCatalogResponse, PlanRow, CreatePlanData, UpdatePlanData, PlanVersionRow, CreatePlanVersionDraftData, PlanVersionMutationResult, UpdatePlanVersionDraftData, PublishPlanVersionData } from '@saasicat/types';
+import { OnApplicationBootstrap } from '@nestjs/common';
+import { c as DiscoveryScanner } from './discovery.scanner-DLgEvuoy.js';
+
+/**
+ * Configuration for the mutating operations.
+ */
+interface CatalogServiceConfig {
+    /** Active mode for the strict-mode check. Default `'blocking'` (#12). */
+    strictModeCheckMode?: 'warn-only' | 'blocking';
+    /**
+     * Discovery→Catalog auto-sync at boot (#12). Default `true` — runs when a
+     * `DiscoverySnapshot` is available. Set to `false` to disable the boot
+     * sync; the manual `POST /admin/catalog/discovery/sync` is unaffected.
+     */
+    autoSyncDiscoveryAtBoot?: boolean;
+    /**
+     * Feature keys the catalog is deliberately allowed to carry WITHOUT them
+     * existing in the discovery snapshot (= in code via @ImplementsCapability) —
+     * marketed non-code features such as support SLAs (e.g. PRIORITY_SUPPORT).
+     * The strict-mode check does NOT report them as BUNDLE_/PLAN_FEATURE_UNKNOWN.
+     * Use sparingly: this is the only legitimate exception to "code is the
+     * source of truth"; not-yet-built features do NOT belong here but should be
+     * removed from the catalog until they are implemented.
+     */
+    marketedOnlyFeatures?: string[];
+}
+declare class BundlesService {
+    private readonly repo;
+    private readonly snapshot;
+    private readonly subscriptions;
+    private readonly planRepo;
+    private readonly scanner;
+    private readonly catalogEntries;
+    private readonly logger;
+    private mode;
+    private readonly marketedOnly;
+    constructor(repo: BundleRepository, snapshot?: DiscoverySnapshot | null, config?: CatalogServiceConfig, subscriptions?: SubscriptionRepository | null, planRepo?: PlanRepository | null, scanner?: DiscoveryScanner | null, catalogEntries?: CatalogEntryRepository | null);
+    listBundles(projectKey: string): Promise<BundleRow[]>;
+    getBundle(bundleId: string): Promise<{
+        bundle: BundleRow;
+        versions: BundleVersionRow[];
+    }>;
+    createBundle(data: CreateBundleData): Promise<BundleRow>;
+    updateBundle(bundleId: string, data: UpdateBundleData): Promise<BundleRow>;
+    softDeleteBundle(bundleId: string): Promise<void>;
+    /**
+     * Hard-deletes a draft BundleVersion (`publishedAt === null`) from the
+     * DB. Published versions stay immutable (contract-protection P1) — the
+     * service throws 422 with code `BUNDLE_VERSION_ALREADY_PUBLISHED`.
+     */
+    discardBundleDraft(versionId: string): Promise<void>;
+    listBundleVersions(bundleId: string): Promise<BundleVersionRow[]>;
+    getBundleVersion(versionId: string): Promise<BundleVersionRow>;
+    /**
+     * Annotates each BundleVersion with `isLatestInChain` (highest version
+     * number in the chain) + `subscriptionCount` so that UI and backend make
+     * the same editability decision. `subscriptionCount` stays `undefined`
+     * when no SubscriptionRepository is registered or the method was not
+     * implemented — `isVersionEditable` interprets that fail-closed
+     * (= frozen).
+     */
+    private annotateEditability;
+    /**
+     * Creates a new draft BundleVersion. Throws when a draft already exists
+     * for the same bundle (repository constraint).
+     *
+     * The strict-mode check runs on the input; in `warn-only` warnings are
+     * returned, in `blocking` the service throws HTTP 422.
+     */
+    createBundleDraft(data: CreateBundleVersionDraftData): Promise<BundleVersionMutationResult>;
+    /**
+     * Updates a draft version or — as a deliberate relaxation of
+     * contract-protection P1 — a published-but-future BundleVersion that is
+     * latest-in-chain and does not yet bind any subscription. Once
+     * `validFrom` is reached or a booking references it, the version freezes
+     * again. The concrete decision is made by the `isVersionEditable` helper,
+     * which is mirrored by the UI.
+     */
+    updateBundleDraft(versionId: string, data: UpdateBundleVersionDraftData): Promise<BundleVersionMutationResult>;
+    /**
+     * Publishes a draft version atomically. Steps:
+     * 1. Strict check on the draft definition (warn-only or blocking)
+     * 2. Enforce validFrom requirement + ordering against the predecessor
+     *    (SPEC_V2 §4.2 + §11.1 M6 Pack 2c, analogous to PlanVersion)
+     * 3. Compute the diff against the predecessor version (latest live) →
+     *    `publishedChanges` + `nonRegressive` via `classifyBundleVersionDiff`
+     * 4. Call Repository.publishDraft with the diff result + validity dates
+     *    (transaction; auto-succession sets the previous validUntil)
+     */
+    publishBundleVersion(versionId: string, publishMeta: PublishBundleVersionData): Promise<BundleVersionMutationResult>;
+    private runStrictCheck;
+    private gateOrPass;
+    private assertBundleVersionWindowUpdate;
+    private findPreviousBundleVersion;
+    private parseOptionalBundleDate;
+    private parseRequiredBundleDate;
+}
+
+declare class MarketingProjectionsService {
+    private readonly repo;
+    constructor(repo: MarketingProjectionRepository);
+    list(filter: MarketingProjectionFilter): Promise<MarketingProjectionRow[]>;
+    getById(id: string): Promise<MarketingProjectionRow>;
+    create(data: CreateMarketingProjectionData): Promise<MarketingProjectionRow>;
+    update(id: string, data: UpdateMarketingProjectionData): Promise<MarketingProjectionRow>;
+    delete(id: string): Promise<void>;
+}
+
+declare class CatalogEntriesService implements OnApplicationBootstrap {
+    private readonly repo;
+    private readonly snapshot;
+    private readonly scanner;
+    private readonly featureUiRegistry;
+    private readonly logger;
+    private readonly autoSyncAtBoot;
+    constructor(repo: CatalogEntryRepository, snapshot?: DiscoverySnapshot | null, config?: CatalogServiceConfig, scanner?: DiscoveryScanner | null, featureUiRegistry?: FeatureUiRegistry | null);
+    /**
+     * Mirrors the discovery snapshot into the catalog entries at boot
+     * (discovery-as-SSOT, #12). Runs only when a snapshot is available and
+     * the kill switch `autoSyncDiscoveryAtBoot` is not set to `false`. A
+     * sync error deliberately does not abort the boot — the manual endpoint
+     * `POST /admin/catalog/discovery/sync` remains as a fallback.
+     */
+    onApplicationBootstrap(): Promise<void>;
+    listCapabilities(projectKey: string, codeStatus?: string): Promise<CapabilityCatalogEntryRow[]>;
+    listFeatures(projectKey: string, discoveryStatus?: string): Promise<FeatureCatalogEntryRow[]>;
+    listQuotas(projectKey: string, discoveryStatus?: string): Promise<QuotaCatalogEntryRow[]>;
+    /**
+     * Approval transition of a feature (#20). Validates the state machine;
+     * `approved` persists the approval signature from the current
+     * snapshot, `pending` (revoke/reactivate) deletes it, `outdated`/
+     * `obsolete` keep the last approval as history.
+     */
+    reviewFeature(projectKey: string, featureKey: string, data: ReviewCatalogEntryData, reviewedBy: string | null): Promise<FeatureCatalogEntryRow>;
+    /** Approval transition of a quota — same state machine as features (#20). */
+    reviewQuota(projectKey: string, quotaKey: string, data: ReviewCatalogEntryData, reviewedBy: string | null): Promise<QuotaCatalogEntryRow>;
+    private resolveReviewUpdate;
+    setFeatureI18n(projectKey: string, featureKey: string, i18n: CatalogEntryI18n): Promise<FeatureCatalogEntryRow>;
+    setQuotaI18n(projectKey: string, quotaKey: string, i18n: CatalogEntryI18n): Promise<QuotaCatalogEntryRow>;
+    /** Sets the editable default-locale label/description of a feature. */
+    setFeatureBase(projectKey: string, featureKey: string, data: UpdateCatalogEntryBaseData): Promise<FeatureCatalogEntryRow>;
+    /** Sets the editable default-locale label/description of a quota. */
+    setQuotaBase(projectKey: string, quotaKey: string, data: UpdateCatalogEntryBaseData): Promise<QuotaCatalogEntryRow>;
+    /**
+     * Synchronizes the catalog entries from a discovery snapshot.
+     * Idempotent — can run against the same snapshot any number of times.
+     */
+    syncFromSnapshot(snapshot: DiscoverySnapshot): Promise<SyncDiscoveryResult>;
+    /**
+     * `replaced` semantics (#39): if a key disappears from the snapshot AND
+     * another snapshot key claims it via `replaces`, the old entry gets
+     * the successor pointer — `obsolete` (from `retireMissing`)
+     * + `successorKey` instead of a bare `obsolete`. If a key reappears in
+     * the code, an existing pointer is deleted. A missing key
+     * without a claimant remains untouched (deleted without replacement).
+     */
+    private applySuccessorPointers;
+}
+
+declare class PromotionsService {
+    private readonly repo;
+    constructor(repo: PromotionRepository);
+    list(projectKey: string): Promise<PromotionRow[]>;
+    getById(id: string): Promise<PromotionRow>;
+    create(data: CreatePromotionData): Promise<PromotionRow>;
+    update(id: string, data: UpdatePromotionData): Promise<PromotionRow>;
+    delete(id: string): Promise<void>;
+}
+
+declare class MarketingSettingsService {
+    private readonly repo;
+    constructor(repo: MarketingSettingsRepository);
+    /** Returns the stored config or `null` (in which case the full pool applies). */
+    get(projectKey: string): Promise<MarketingSettingsRow | null>;
+    upsert(projectKey: string, data: UpdateMarketingSettingsData): Promise<MarketingSettingsRow>;
+}
+
+declare class PublicMarketingCatalogService {
+    private readonly planRepo;
+    private readonly marketingRepo;
+    private readonly promotionRepo;
+    private readonly catalogEntryRepo;
+    private readonly bundleRepo;
+    constructor(planRepo: PlanRepository, marketingRepo: MarketingProjectionRepository, promotionRepo: PromotionRepository, catalogEntryRepo?: CatalogEntryRepository | null, bundleRepo?: BundleRepository | null);
+    getCatalog(projectKey: string, locale: string, currency: string, vatRate: number, asOf?: Date): Promise<PublicMarketingCatalogResponse>;
+    /**
+     * Loads all published-and-live bundle versions for a project and
+     * filters on `marketed === true`. Without a registered
+     * `BundleRepository` (apps without the SuperAdmin bundle editor) the
+     * list is empty — the public catalog stays plan-only.
+     */
+    private loadMarketedBundles;
+    /**
+     * Maps BundleVersionRow → PublicMarketingBundle. Locale resolution
+     * runs via `MarketingProjectionRepository.findByTarget('BUNDLE',
+     * bundleVersionId, locale)` — on a miss it falls back to
+     * `DEFAULT_LOCALE`. If the fallback is missing too, label/description
+     * come directly from the bundle root (denormalized in `BundleVersionRow`).
+     *
+     * If the marketing projection is `visible === false`, the bundle is
+     * hidden from the public response (preparation phase).
+     */
+    private toPublicBundle;
+    /**
+     * Labels for bundle features ∪ their requires (#48): `comparison.features`
+     * only covers the plan-feature union — bundle-only features would
+     * otherwise get no label in the public payload. Curated keys only;
+     * without a CatalogEntryRepository the map stays empty (frontends fall
+     * back to the key).
+     */
+    private resolveBundleFeatureLabels;
+    /** Loads the translated feature/quota labels (+ sortOrder) for a locale. */
+    private loadLabelMeta;
+    /**
+     * Resolves the displayed label of a top feature: the `label` override
+     * wins; otherwise the translated label of the referenced `key`.
+     */
+    private resolveTopFeature;
+    /** Row definitions of the comparison matrix (feature/quota union + labels). */
+    private buildComparison;
+    private resolvePromo;
+}
+
+declare class PlansService {
+    private readonly repo;
+    private readonly subscriptions;
+    constructor(repo: PlanRepository, subscriptions?: SubscriptionRepository | null);
+    /**
+     * Platform-wide count of active (ACTIVE/TRIAL) subscriptions per `planKey`,
+     * across versions and across all tenants (RLS-exempt). Plans without a
+     * subscription are absent from the map. Returns `{}` when no
+     * `SubscriptionRepository` is registered or it does not implement
+     * `countActiveByPlanKey`.
+     */
+    getTenantCounts(projectKey: string): Promise<Record<string, number>>;
+    listPlans(projectKey: string, opts?: {
+        onlyPublished?: boolean;
+    }): Promise<PlanRow[]>;
+    getPlan(planId: string): Promise<PlanRow>;
+    createPlan(data: CreatePlanData): Promise<PlanRow>;
+    updatePlan(planId: string, data: UpdatePlanData): Promise<PlanRow>;
+    softDeletePlan(planId: string): Promise<void>;
+    /**
+     * Hard-deletes the plan master record. Only allowed for plans without
+     * `PlanVersion` entries — published versions are immutable under
+     * contract protection P1 (existing subscriptions reference them). The
+     * caller must discard drafts beforehand via `DELETE plan-versions/:id`.
+     *
+     * If the repository does not implement `hardDelete`, the endpoint
+     * responds with 422 `PLAN_HARD_DELETE_NOT_IMPLEMENTED` — consumers can
+     * then fall back to `softDelete`.
+     */
+    hardDeletePlan(planId: string): Promise<void>;
+    /**
+     * Platform invariant (contract protection P1): once a plan has ever had a
+     * published version, its plan master record is retained — regardless of
+     * whether the version has since been superseded. Subscriptions still
+     * reference it via the version, and the audit log must be able to resolve
+     * the plan.
+     */
+    private assertNoPublishedVersions;
+    private assertNoDrafts;
+}
+
+declare class PlanVersionsService {
+    private readonly repo;
+    private readonly snapshot;
+    private readonly subscriptions;
+    private readonly scanner;
+    private readonly catalogEntries;
+    private readonly logger;
+    private mode;
+    private readonly marketedOnly;
+    constructor(repo: PlanRepository, snapshot?: DiscoverySnapshot | null, config?: CatalogServiceConfig, subscriptions?: SubscriptionRepository | null, scanner?: DiscoveryScanner | null, catalogEntries?: CatalogEntryRepository | null);
+    /**
+     * Discards a draft version. Allowed only while the version has not yet
+     * been published — published versions are preserved immutably,
+     * because existing subscriptions reference them (contract protection P1).
+     *
+     * If the repository does not implement the method, the endpoint
+     * responds with 501 Not Implemented (consumers without the editor stack
+     * should not register `PlanVersionsService` anyway).
+     */
+    discardPlanDraft(versionId: string): Promise<void>;
+    /**
+     * @param planUuid UUID of the plan root (Plan.id) — resolved to planKey
+     *   before the repo call (lifecycle methods work with planKey because
+     *   PlanVersion.planId is a string in the schema).
+     */
+    listPlanVersions(planUuid: string): Promise<PlanVersionRow[]>;
+    getPlanVersion(versionId: string): Promise<PlanVersionRow>;
+    /**
+     * Annotates each version with `isLatestInChain` (highest version number
+     * in the root) + `subscriptionCount` so that UI and backend make the same
+     * editability decision. `subscriptionCount` stays
+     * `undefined` when no SubscriptionRepository is registered —
+     * `isVersionEditable` interprets that fail-closed (= frozen).
+     */
+    private annotateEditability;
+    /**
+     * @param data.planId — the plan UUID from the controller. Resolved to
+     *   planKey before the repo call.
+     */
+    createPlanDraft(data: CreatePlanVersionDraftData): Promise<PlanVersionMutationResult>;
+    updatePlanDraft(versionId: string, data: UpdatePlanVersionDraftData): Promise<PlanVersionMutationResult>;
+    publishPlanVersion(versionId: string, publishMeta: PublishPlanVersionData): Promise<PlanVersionMutationResult>;
+    /**
+     * Terminates a **live** PlanVersion by setting `endsAt`.
+     * Unlike auto-succession (validUntil), this is an explicit
+     * user action: the version is not replaced by a successor version
+     * but expires on the chosen date. Existing subscriptions
+     * (P1) stay bound — this only affects new bookings.
+     *
+     * Idempotent — a second call with a different date overwrites.
+     *
+     * Preconditions:
+     *   - Version must be live (`publishedAt != null && supersededAt == null`).
+     *   - `endsAt` must lie in the future (`endsAt > now`).
+     *
+     * If the repository does not implement the method, the endpoint
+     * responds with 422 `PLAN_TERMINATE_NOT_IMPLEMENTED`.
+     */
+    terminatePlanVersion(versionId: string, endsAt: Date): Promise<PlanVersionRow>;
+    private runStrictCheck;
+    private gateOrPass;
+}
+
+export { BundlesService as B, CatalogEntriesService as C, MarketingProjectionsService as M, PlanVersionsService as P, type CatalogServiceConfig as a, MarketingSettingsService as b, PlansService as c, PromotionsService as d, PublicMarketingCatalogService as e };

package/dist/plan-versions.service-CUR2Whyr.d.cts

@@ -0,0 +1,329 @@
+import { BundleRepository, DiscoverySnapshot, SubscriptionRepository, PlanRepository, CatalogEntryRepository, BundleRow, BundleVersionRow, CreateBundleData, UpdateBundleData, CreateBundleVersionDraftData, BundleVersionMutationResult, UpdateBundleVersionDraftData, PublishBundleVersionData, MarketingProjectionRepository, MarketingProjectionFilter, MarketingProjectionRow, CreateMarketingProjectionData, UpdateMarketingProjectionData, FeatureUiRegistry, CapabilityCatalogEntryRow, FeatureCatalogEntryRow, QuotaCatalogEntryRow, ReviewCatalogEntryData, CatalogEntryI18n, UpdateCatalogEntryBaseData, SyncDiscoveryResult, PromotionRepository, PromotionRow, CreatePromotionData, UpdatePromotionData, MarketingSettingsRepository, MarketingSettingsRow, UpdateMarketingSettingsData, PublicMarketingCatalogResponse, PlanRow, CreatePlanData, UpdatePlanData, PlanVersionRow, CreatePlanVersionDraftData, PlanVersionMutationResult, UpdatePlanVersionDraftData, PublishPlanVersionData } from '@saasicat/types';
+import { OnApplicationBootstrap } from '@nestjs/common';
+import { c as DiscoveryScanner } from './discovery.scanner-DLgEvuoy.cjs';
+
+/**
+ * Configuration for the mutating operations.
+ */
+interface CatalogServiceConfig {
+    /** Active mode for the strict-mode check. Default `'blocking'` (#12). */
+    strictModeCheckMode?: 'warn-only' | 'blocking';
+    /**
+     * Discovery→Catalog auto-sync at boot (#12). Default `true` — runs when a
+     * `DiscoverySnapshot` is available. Set to `false` to disable the boot
+     * sync; the manual `POST /admin/catalog/discovery/sync` is unaffected.
+     */
+    autoSyncDiscoveryAtBoot?: boolean;
+    /**
+     * Feature keys the catalog is deliberately allowed to carry WITHOUT them
+     * existing in the discovery snapshot (= in code via @ImplementsCapability) —
+     * marketed non-code features such as support SLAs (e.g. PRIORITY_SUPPORT).
+     * The strict-mode check does NOT report them as BUNDLE_/PLAN_FEATURE_UNKNOWN.
+     * Use sparingly: this is the only legitimate exception to "code is the
+     * source of truth"; not-yet-built features do NOT belong here but should be
+     * removed from the catalog until they are implemented.
+     */
+    marketedOnlyFeatures?: string[];
+}
+declare class BundlesService {
+    private readonly repo;
+    private readonly snapshot;
+    private readonly subscriptions;
+    private readonly planRepo;
+    private readonly scanner;
+    private readonly catalogEntries;
+    private readonly logger;
+    private mode;
+    private readonly marketedOnly;
+    constructor(repo: BundleRepository, snapshot?: DiscoverySnapshot | null, config?: CatalogServiceConfig, subscriptions?: SubscriptionRepository | null, planRepo?: PlanRepository | null, scanner?: DiscoveryScanner | null, catalogEntries?: CatalogEntryRepository | null);
+    listBundles(projectKey: string): Promise<BundleRow[]>;
+    getBundle(bundleId: string): Promise<{
+        bundle: BundleRow;
+        versions: BundleVersionRow[];
+    }>;
+    createBundle(data: CreateBundleData): Promise<BundleRow>;
+    updateBundle(bundleId: string, data: UpdateBundleData): Promise<BundleRow>;
+    softDeleteBundle(bundleId: string): Promise<void>;
+    /**
+     * Hard-deletes a draft BundleVersion (`publishedAt === null`) from the
+     * DB. Published versions stay immutable (contract-protection P1) — the
+     * service throws 422 with code `BUNDLE_VERSION_ALREADY_PUBLISHED`.
+     */
+    discardBundleDraft(versionId: string): Promise<void>;
+    listBundleVersions(bundleId: string): Promise<BundleVersionRow[]>;
+    getBundleVersion(versionId: string): Promise<BundleVersionRow>;
+    /**
+     * Annotates each BundleVersion with `isLatestInChain` (highest version
+     * number in the chain) + `subscriptionCount` so that UI and backend make
+     * the same editability decision. `subscriptionCount` stays `undefined`
+     * when no SubscriptionRepository is registered or the method was not
+     * implemented — `isVersionEditable` interprets that fail-closed
+     * (= frozen).
+     */
+    private annotateEditability;
+    /**
+     * Creates a new draft BundleVersion. Throws when a draft already exists
+     * for the same bundle (repository constraint).
+     *
+     * The strict-mode check runs on the input; in `warn-only` warnings are
+     * returned, in `blocking` the service throws HTTP 422.
+     */
+    createBundleDraft(data: CreateBundleVersionDraftData): Promise<BundleVersionMutationResult>;
+    /**
+     * Updates a draft version or — as a deliberate relaxation of
+     * contract-protection P1 — a published-but-future BundleVersion that is
+     * latest-in-chain and does not yet bind any subscription. Once
+     * `validFrom` is reached or a booking references it, the version freezes
+     * again. The concrete decision is made by the `isVersionEditable` helper,
+     * which is mirrored by the UI.
+     */
+    updateBundleDraft(versionId: string, data: UpdateBundleVersionDraftData): Promise<BundleVersionMutationResult>;
+    /**
+     * Publishes a draft version atomically. Steps:
+     * 1. Strict check on the draft definition (warn-only or blocking)
+     * 2. Enforce validFrom requirement + ordering against the predecessor
+     *    (SPEC_V2 §4.2 + §11.1 M6 Pack 2c, analogous to PlanVersion)
+     * 3. Compute the diff against the predecessor version (latest live) →
+     *    `publishedChanges` + `nonRegressive` via `classifyBundleVersionDiff`
+     * 4. Call Repository.publishDraft with the diff result + validity dates
+     *    (transaction; auto-succession sets the previous validUntil)
+     */
+    publishBundleVersion(versionId: string, publishMeta: PublishBundleVersionData): Promise<BundleVersionMutationResult>;
+    private runStrictCheck;
+    private gateOrPass;
+    private assertBundleVersionWindowUpdate;
+    private findPreviousBundleVersion;
+    private parseOptionalBundleDate;
+    private parseRequiredBundleDate;
+}
+
+declare class MarketingProjectionsService {
+    private readonly repo;
+    constructor(repo: MarketingProjectionRepository);
+    list(filter: MarketingProjectionFilter): Promise<MarketingProjectionRow[]>;
+    getById(id: string): Promise<MarketingProjectionRow>;
+    create(data: CreateMarketingProjectionData): Promise<MarketingProjectionRow>;
+    update(id: string, data: UpdateMarketingProjectionData): Promise<MarketingProjectionRow>;
+    delete(id: string): Promise<void>;
+}
+
+declare class CatalogEntriesService implements OnApplicationBootstrap {
+    private readonly repo;
+    private readonly snapshot;
+    private readonly scanner;
+    private readonly featureUiRegistry;
+    private readonly logger;
+    private readonly autoSyncAtBoot;
+    constructor(repo: CatalogEntryRepository, snapshot?: DiscoverySnapshot | null, config?: CatalogServiceConfig, scanner?: DiscoveryScanner | null, featureUiRegistry?: FeatureUiRegistry | null);
+    /**
+     * Mirrors the discovery snapshot into the catalog entries at boot
+     * (discovery-as-SSOT, #12). Runs only when a snapshot is available and
+     * the kill switch `autoSyncDiscoveryAtBoot` is not set to `false`. A
+     * sync error deliberately does not abort the boot — the manual endpoint
+     * `POST /admin/catalog/discovery/sync` remains as a fallback.
+     */
+    onApplicationBootstrap(): Promise<void>;
+    listCapabilities(projectKey: string, codeStatus?: string): Promise<CapabilityCatalogEntryRow[]>;
+    listFeatures(projectKey: string, discoveryStatus?: string): Promise<FeatureCatalogEntryRow[]>;
+    listQuotas(projectKey: string, discoveryStatus?: string): Promise<QuotaCatalogEntryRow[]>;
+    /**
+     * Approval transition of a feature (#20). Validates the state machine;
+     * `approved` persists the approval signature from the current
+     * snapshot, `pending` (revoke/reactivate) deletes it, `outdated`/
+     * `obsolete` keep the last approval as history.
+     */
+    reviewFeature(projectKey: string, featureKey: string, data: ReviewCatalogEntryData, reviewedBy: string | null): Promise<FeatureCatalogEntryRow>;
+    /** Approval transition of a quota — same state machine as features (#20). */
+    reviewQuota(projectKey: string, quotaKey: string, data: ReviewCatalogEntryData, reviewedBy: string | null): Promise<QuotaCatalogEntryRow>;
+    private resolveReviewUpdate;
+    setFeatureI18n(projectKey: string, featureKey: string, i18n: CatalogEntryI18n): Promise<FeatureCatalogEntryRow>;
+    setQuotaI18n(projectKey: string, quotaKey: string, i18n: CatalogEntryI18n): Promise<QuotaCatalogEntryRow>;
+    /** Sets the editable default-locale label/description of a feature. */
+    setFeatureBase(projectKey: string, featureKey: string, data: UpdateCatalogEntryBaseData): Promise<FeatureCatalogEntryRow>;
+    /** Sets the editable default-locale label/description of a quota. */
+    setQuotaBase(projectKey: string, quotaKey: string, data: UpdateCatalogEntryBaseData): Promise<QuotaCatalogEntryRow>;
+    /**
+     * Synchronizes the catalog entries from a discovery snapshot.
+     * Idempotent — can run against the same snapshot any number of times.
+     */
+    syncFromSnapshot(snapshot: DiscoverySnapshot): Promise<SyncDiscoveryResult>;
+    /**
+     * `replaced` semantics (#39): if a key disappears from the snapshot AND
+     * another snapshot key claims it via `replaces`, the old entry gets
+     * the successor pointer — `obsolete` (from `retireMissing`)
+     * + `successorKey` instead of a bare `obsolete`. If a key reappears in
+     * the code, an existing pointer is deleted. A missing key
+     * without a claimant remains untouched (deleted without replacement).
+     */
+    private applySuccessorPointers;
+}
+
+declare class PromotionsService {
+    private readonly repo;
+    constructor(repo: PromotionRepository);
+    list(projectKey: string): Promise<PromotionRow[]>;
+    getById(id: string): Promise<PromotionRow>;
+    create(data: CreatePromotionData): Promise<PromotionRow>;
+    update(id: string, data: UpdatePromotionData): Promise<PromotionRow>;
+    delete(id: string): Promise<void>;
+}
+
+declare class MarketingSettingsService {
+    private readonly repo;
+    constructor(repo: MarketingSettingsRepository);
+    /** Returns the stored config or `null` (in which case the full pool applies). */
+    get(projectKey: string): Promise<MarketingSettingsRow | null>;
+    upsert(projectKey: string, data: UpdateMarketingSettingsData): Promise<MarketingSettingsRow>;
+}
+
+declare class PublicMarketingCatalogService {
+    private readonly planRepo;
+    private readonly marketingRepo;
+    private readonly promotionRepo;
+    private readonly catalogEntryRepo;
+    private readonly bundleRepo;
+    constructor(planRepo: PlanRepository, marketingRepo: MarketingProjectionRepository, promotionRepo: PromotionRepository, catalogEntryRepo?: CatalogEntryRepository | null, bundleRepo?: BundleRepository | null);
+    getCatalog(projectKey: string, locale: string, currency: string, vatRate: number, asOf?: Date): Promise<PublicMarketingCatalogResponse>;
+    /**
+     * Loads all published-and-live bundle versions for a project and
+     * filters on `marketed === true`. Without a registered
+     * `BundleRepository` (apps without the SuperAdmin bundle editor) the
+     * list is empty — the public catalog stays plan-only.
+     */
+    private loadMarketedBundles;
+    /**
+     * Maps BundleVersionRow → PublicMarketingBundle. Locale resolution
+     * runs via `MarketingProjectionRepository.findByTarget('BUNDLE',
+     * bundleVersionId, locale)` — on a miss it falls back to
+     * `DEFAULT_LOCALE`. If the fallback is missing too, label/description
+     * come directly from the bundle root (denormalized in `BundleVersionRow`).
+     *
+     * If the marketing projection is `visible === false`, the bundle is
+     * hidden from the public response (preparation phase).
+     */
+    private toPublicBundle;
+    /**
+     * Labels for bundle features ∪ their requires (#48): `comparison.features`
+     * only covers the plan-feature union — bundle-only features would
+     * otherwise get no label in the public payload. Curated keys only;
+     * without a CatalogEntryRepository the map stays empty (frontends fall
+     * back to the key).
+     */
+    private resolveBundleFeatureLabels;
+    /** Loads the translated feature/quota labels (+ sortOrder) for a locale. */
+    private loadLabelMeta;
+    /**
+     * Resolves the displayed label of a top feature: the `label` override
+     * wins; otherwise the translated label of the referenced `key`.
+     */
+    private resolveTopFeature;
+    /** Row definitions of the comparison matrix (feature/quota union + labels). */
+    private buildComparison;
+    private resolvePromo;
+}
+
+declare class PlansService {
+    private readonly repo;
+    private readonly subscriptions;
+    constructor(repo: PlanRepository, subscriptions?: SubscriptionRepository | null);
+    /**
+     * Platform-wide count of active (ACTIVE/TRIAL) subscriptions per `planKey`,
+     * across versions and across all tenants (RLS-exempt). Plans without a
+     * subscription are absent from the map. Returns `{}` when no
+     * `SubscriptionRepository` is registered or it does not implement
+     * `countActiveByPlanKey`.
+     */
+    getTenantCounts(projectKey: string): Promise<Record<string, number>>;
+    listPlans(projectKey: string, opts?: {
+        onlyPublished?: boolean;
+    }): Promise<PlanRow[]>;
+    getPlan(planId: string): Promise<PlanRow>;
+    createPlan(data: CreatePlanData): Promise<PlanRow>;
+    updatePlan(planId: string, data: UpdatePlanData): Promise<PlanRow>;
+    softDeletePlan(planId: string): Promise<void>;
+    /**
+     * Hard-deletes the plan master record. Only allowed for plans without
+     * `PlanVersion` entries — published versions are immutable under
+     * contract protection P1 (existing subscriptions reference them). The
+     * caller must discard drafts beforehand via `DELETE plan-versions/:id`.
+     *
+     * If the repository does not implement `hardDelete`, the endpoint
+     * responds with 422 `PLAN_HARD_DELETE_NOT_IMPLEMENTED` — consumers can
+     * then fall back to `softDelete`.
+     */
+    hardDeletePlan(planId: string): Promise<void>;
+    /**
+     * Platform invariant (contract protection P1): once a plan has ever had a
+     * published version, its plan master record is retained — regardless of
+     * whether the version has since been superseded. Subscriptions still
+     * reference it via the version, and the audit log must be able to resolve
+     * the plan.
+     */
+    private assertNoPublishedVersions;
+    private assertNoDrafts;
+}
+
+declare class PlanVersionsService {
+    private readonly repo;
+    private readonly snapshot;
+    private readonly subscriptions;
+    private readonly scanner;
+    private readonly catalogEntries;
+    private readonly logger;
+    private mode;
+    private readonly marketedOnly;
+    constructor(repo: PlanRepository, snapshot?: DiscoverySnapshot | null, config?: CatalogServiceConfig, subscriptions?: SubscriptionRepository | null, scanner?: DiscoveryScanner | null, catalogEntries?: CatalogEntryRepository | null);
+    /**
+     * Discards a draft version. Allowed only while the version has not yet
+     * been published — published versions are preserved immutably,
+     * because existing subscriptions reference them (contract protection P1).
+     *
+     * If the repository does not implement the method, the endpoint
+     * responds with 501 Not Implemented (consumers without the editor stack
+     * should not register `PlanVersionsService` anyway).
+     */
+    discardPlanDraft(versionId: string): Promise<void>;
+    /**
+     * @param planUuid UUID of the plan root (Plan.id) — resolved to planKey
+     *   before the repo call (lifecycle methods work with planKey because
+     *   PlanVersion.planId is a string in the schema).
+     */
+    listPlanVersions(planUuid: string): Promise<PlanVersionRow[]>;
+    getPlanVersion(versionId: string): Promise<PlanVersionRow>;
+    /**
+     * Annotates each version with `isLatestInChain` (highest version number
+     * in the root) + `subscriptionCount` so that UI and backend make the same
+     * editability decision. `subscriptionCount` stays
+     * `undefined` when no SubscriptionRepository is registered —
+     * `isVersionEditable` interprets that fail-closed (= frozen).
+     */
+    private annotateEditability;
+    /**
+     * @param data.planId — the plan UUID from the controller. Resolved to
+     *   planKey before the repo call.
+     */
+    createPlanDraft(data: CreatePlanVersionDraftData): Promise<PlanVersionMutationResult>;
+    updatePlanDraft(versionId: string, data: UpdatePlanVersionDraftData): Promise<PlanVersionMutationResult>;
+    publishPlanVersion(versionId: string, publishMeta: PublishPlanVersionData): Promise<PlanVersionMutationResult>;
+    /**
+     * Terminates a **live** PlanVersion by setting `endsAt`.
+     * Unlike auto-succession (validUntil), this is an explicit
+     * user action: the version is not replaced by a successor version
+     * but expires on the chosen date. Existing subscriptions
+     * (P1) stay bound — this only affects new bookings.
+     *
+     * Idempotent — a second call with a different date overwrites.
+     *
+     * Preconditions:
+     *   - Version must be live (`publishedAt != null && supersededAt == null`).
+     *   - `endsAt` must lie in the future (`endsAt > now`).
+     *
+     * If the repository does not implement the method, the endpoint
+     * responds with 422 `PLAN_TERMINATE_NOT_IMPLEMENTED`.
+     */
+    terminatePlanVersion(versionId: string, endsAt: Date): Promise<PlanVersionRow>;
+    private runStrictCheck;
+    private gateOrPass;
+}
+
+export { BundlesService as B, CatalogEntriesService as C, MarketingProjectionsService as M, PlanVersionsService as P, type CatalogServiceConfig as a, MarketingSettingsService as b, PlansService as c, PromotionsService as d, PublicMarketingCatalogService as e };