@saasicat/nest 1.0.0-rc.2 → 1.0.0-rc.21

package/dist/payments/index.js

@@ -0,0 +1,141 @@
+import {
+  ChangeBillingDetailsDto,
+  PaymentWebhookController,
+  PaymentsModule,
+  StartPaymentMethodSetupDto,
+  SubscriberPaymentMethodService,
+  TenantBillingDetailsController,
+  TenantPaymentMethodController
+} from "../chunk-QPVDCKYS.js";
+import {
+  PAYMENT_EVENT_LOG_TOKEN,
+  PAYMENT_GATEWAYS_TOKEN,
+  PAYMENT_TRANSACTION_RUNNER_TOKEN,
+  PaymentCallbackService,
+  PaymentGatewayRegistry,
+  SUBSCRIBER_PAYMENT_METHOD_REPOSITORY_TOKEN
+} from "../chunk-7NJKVC5X.js";
+import "../chunk-5CKC7O52.js";
+import "../chunk-GPQWGA6B.js";
+import "../chunk-SZ7RFPXA.js";
+import "../chunk-WOEJ6K7M.js";
+import "../chunk-LF6J4YYN.js";
+import "../chunk-YSC46BGM.js";
+import "../chunk-FEQZCWUL.js";
+import "../chunk-J7NJRK3K.js";
+import {
+  __name
+} from "../chunk-SHUYVCID.js";
+
+// src/payments/dev-payment-gateway.ts
+import { createHmac, randomBytes, randomUUID, timingSafeEqual } from "crypto";
+import { PaymentCallbackRejectedError } from "@saasicat/core";
+var SIGNATURE_HEADER = "x-saasicat-dev-signature";
+var DEV_PAYMENT_PROVIDER = "dev";
+var DevPaymentGateway = class {
+  static {
+    __name(this, "DevPaymentGateway");
+  }
+  provider = DEV_PAYMENT_PROVIDER;
+  key = randomBytes(32);
+  constructor() {
+    if (process.env.NODE_ENV === "production") {
+      throw new Error("DevPaymentGateway confirms every payment method without taking one, and refuses to run with NODE_ENV=production. Bind a gateway adapter such as @saasicat/payment-stripe.");
+    }
+  }
+  async startPaymentMethodSetup(input) {
+    const sessionRef = `dev_cs_${randomUUID()}`;
+    const customerRef = input.holder.customerRef ?? `dev_cus_${randomUUID()}`;
+    const confirmation = {
+      eventId: `dev_evt_${randomUUID()}`,
+      occurredAt: (/* @__PURE__ */ new Date()).toISOString(),
+      sessionRef,
+      subject: input.subject,
+      paymentMethod: {
+        ...maskedDetailsOf(input.methods[0] ?? "card"),
+        customerRef,
+        paymentMethodRef: `dev_pm_${randomUUID()}`
+      }
+    };
+    const body = JSON.stringify(confirmation);
+    return {
+      sessionRef,
+      redirectUrl: input.successUrl,
+      customerRef,
+      // Confirmed on the spot: there is no form left to complete later.
+      confirmableUntil: null,
+      immediateCallback: {
+        body,
+        headers: {
+          [SIGNATURE_HEADER]: this.sign(body)
+        }
+      }
+    };
+  }
+  async readCallback(callback) {
+    const body = typeof callback.body === "string" ? callback.body : Buffer.from(callback.body).toString("utf8");
+    const signature = callback.headers[SIGNATURE_HEADER];
+    if (typeof signature !== "string" || !this.verify(body, signature)) {
+      throw new PaymentCallbackRejectedError("the development signature does not verify");
+    }
+    const confirmation = JSON.parse(body);
+    return {
+      kind: "payment-method-confirmed",
+      eventId: confirmation.eventId,
+      occurredAt: new Date(confirmation.occurredAt),
+      sessionRef: confirmation.sessionRef,
+      subject: confirmation.subject,
+      paymentMethod: confirmation.paymentMethod
+    };
+  }
+  sign(body) {
+    return createHmac("sha256", this.key).update(body).digest("hex");
+  }
+  verify(body, signature) {
+    const expected = Buffer.from(this.sign(body), "hex");
+    const given = Buffer.from(signature, "hex");
+    return given.length === expected.length && timingSafeEqual(given, expected);
+  }
+};
+function maskedDetailsOf(type) {
+  if (type === "sepa_debit") {
+    return {
+      type,
+      brand: null,
+      last4: "3000",
+      expiryMonth: null,
+      expiryYear: null,
+      country: "DE",
+      bankCode: "37040044",
+      mandateReference: `DEV-${randomUUID().slice(0, 8).toUpperCase()}`
+    };
+  }
+  return {
+    type,
+    brand: "visa",
+    last4: "4242",
+    expiryMonth: 12,
+    expiryYear: (/* @__PURE__ */ new Date()).getUTCFullYear() + 3,
+    country: null,
+    bankCode: null,
+    mandateReference: null
+  };
+}
+__name(maskedDetailsOf, "maskedDetailsOf");
+export {
+  ChangeBillingDetailsDto,
+  DEV_PAYMENT_PROVIDER,
+  DevPaymentGateway,
+  PAYMENT_EVENT_LOG_TOKEN,
+  PAYMENT_GATEWAYS_TOKEN,
+  PAYMENT_TRANSACTION_RUNNER_TOKEN,
+  PaymentCallbackService,
+  PaymentGatewayRegistry,
+  PaymentWebhookController,
+  PaymentsModule,
+  SUBSCRIBER_PAYMENT_METHOD_REPOSITORY_TOKEN,
+  StartPaymentMethodSetupDto,
+  SubscriberPaymentMethodService,
+  TenantBillingDetailsController,
+  TenantPaymentMethodController
+};

package/dist/payments.module-BdUq9ot_.d.cts

@@ -0,0 +1,57 @@
+import { CanActivate, Type, DynamicModule, ForwardReference, Provider } from '@nestjs/common';
+import { PaymentGateway, PaymentEventLog, SubscriberPaymentMethodRepository, SubscriberRepository, TransactionRunner } from '@saasicat/core';
+import { T as TenantIdResolver, U as UserEmailResolver } from './tenant-billing.tokens-G-1xOlMr.cjs';
+import { P as ProviderSpec } from './di-CcNeq9v-.cjs';
+
+/** The tenant's routes for its payment method. */
+interface PaymentsTenantRoutesOptions {
+    /** The application's authentication guards, as `TenantBillingModule.forRoot.authGuards`. */
+    authGuards: ProviderSpec<ReadonlyArray<CanActivate>>;
+    /**
+     * Who holds the billing permission. Without guards, the tenant's
+     * administrator (`TENANT_ADMIN`, `SUPER_ADMIN`) does.
+     */
+    billingPermissionGuards?: ProviderSpec<ReadonlyArray<CanActivate>>;
+    /** Default: `req.user.tenantId`. */
+    tenantIdResolver?: TenantIdResolver;
+    /** Default: `req.user.email` — handed to the gateway when the subscriber has no invoice email. */
+    userEmailResolver?: UserEmailResolver;
+}
+interface PaymentsModuleOptions {
+    /**
+     * One adapter per account in `config/saas.yaml#payments.accounts`, by that
+     * account's name — each built with its keys from the environment.
+     */
+    gateways: ProviderSpec<Readonly<Record<string, PaymentGateway>>>;
+    paymentEventLog: ProviderSpec<PaymentEventLog>;
+    subscriberPaymentMethodRepository: ProviderSpec<SubscriberPaymentMethodRepository>;
+    subscriberRepository: ProviderSpec<SubscriberRepository>;
+    /** The runner of the same persistence adapter the two stores above come from. */
+    transactionRunner: ProviderSpec<TransactionRunner>;
+    /**
+     * Mounts the tenant's billing area: `GET /billing/payment-method`,
+     * `POST /billing/payment-method/setup`, and `GET` and `PATCH /billing/details`.
+     */
+    tenantRoutes?: PaymentsTenantRoutesOptions;
+    imports?: Array<Type<unknown> | DynamicModule | Promise<DynamicModule> | ForwardReference>;
+    extraProviders?: Provider[];
+    /**
+     * Default `true`: self-registration, wired in a module of its own, starts
+     * its setups through the registry and hands its confirmations to the
+     * callback service.
+     */
+    global?: boolean;
+}
+/**
+ * Payment methods through a payment gateway: the webhook route every account's
+ * callbacks arrive at, the registry of configured accounts, and — with
+ * `tenantRoutes` — the tenant's view of its payment method.
+ *
+ * Reads `config/saas.yaml#payments` from `PLAN_CATALOG_SETTINGS_TOKEN`, which
+ * `SaaSiCatModule.forRoot` provides globally.
+ */
+declare class PaymentsModule {
+    static forRoot(options: PaymentsModuleOptions): DynamicModule;
+}
+
+export { type PaymentsModuleOptions as P, type PaymentsTenantRoutesOptions as a, PaymentsModule as b };

package/dist/payments.module-CQGv_VG7.d.ts

@@ -0,0 +1,57 @@
+import { CanActivate, Type, DynamicModule, ForwardReference, Provider } from '@nestjs/common';
+import { PaymentGateway, PaymentEventLog, SubscriberPaymentMethodRepository, SubscriberRepository, TransactionRunner } from '@saasicat/core';
+import { T as TenantIdResolver, U as UserEmailResolver } from './tenant-billing.tokens-G-1xOlMr.js';
+import { P as ProviderSpec } from './di-CcNeq9v-.js';
+
+/** The tenant's routes for its payment method. */
+interface PaymentsTenantRoutesOptions {
+    /** The application's authentication guards, as `TenantBillingModule.forRoot.authGuards`. */
+    authGuards: ProviderSpec<ReadonlyArray<CanActivate>>;
+    /**
+     * Who holds the billing permission. Without guards, the tenant's
+     * administrator (`TENANT_ADMIN`, `SUPER_ADMIN`) does.
+     */
+    billingPermissionGuards?: ProviderSpec<ReadonlyArray<CanActivate>>;
+    /** Default: `req.user.tenantId`. */
+    tenantIdResolver?: TenantIdResolver;
+    /** Default: `req.user.email` — handed to the gateway when the subscriber has no invoice email. */
+    userEmailResolver?: UserEmailResolver;
+}
+interface PaymentsModuleOptions {
+    /**
+     * One adapter per account in `config/saas.yaml#payments.accounts`, by that
+     * account's name — each built with its keys from the environment.
+     */
+    gateways: ProviderSpec<Readonly<Record<string, PaymentGateway>>>;
+    paymentEventLog: ProviderSpec<PaymentEventLog>;
+    subscriberPaymentMethodRepository: ProviderSpec<SubscriberPaymentMethodRepository>;
+    subscriberRepository: ProviderSpec<SubscriberRepository>;
+    /** The runner of the same persistence adapter the two stores above come from. */
+    transactionRunner: ProviderSpec<TransactionRunner>;
+    /**
+     * Mounts the tenant's billing area: `GET /billing/payment-method`,
+     * `POST /billing/payment-method/setup`, and `GET` and `PATCH /billing/details`.
+     */
+    tenantRoutes?: PaymentsTenantRoutesOptions;
+    imports?: Array<Type<unknown> | DynamicModule | Promise<DynamicModule> | ForwardReference>;
+    extraProviders?: Provider[];
+    /**
+     * Default `true`: self-registration, wired in a module of its own, starts
+     * its setups through the registry and hands its confirmations to the
+     * callback service.
+     */
+    global?: boolean;
+}
+/**
+ * Payment methods through a payment gateway: the webhook route every account's
+ * callbacks arrive at, the registry of configured accounts, and — with
+ * `tenantRoutes` — the tenant's view of its payment method.
+ *
+ * Reads `config/saas.yaml#payments` from `PLAN_CATALOG_SETTINGS_TOKEN`, which
+ * `SaaSiCatModule.forRoot` provides globally.
+ */
+declare class PaymentsModule {
+    static forRoot(options: PaymentsModuleOptions): DynamicModule;
+}
+
+export { type PaymentsModuleOptions as P, type PaymentsTenantRoutesOptions as a, PaymentsModule as b };

package/dist/plan-catalog-source-DWe-BGY1.d.cts

@@ -0,0 +1,21 @@
+import { PlanCatalog } from '@saasicat/core';
+
+/** Where the plans and features of a `PlanCatalogSource` come from. */
+type PlanCatalogOrigin = 'database' | 'given';
+/**
+ * The plan catalogue as it stands now.
+ *
+ * Read it once per operation and hand that value on. Every check the operation
+ * makes then sees the same plans, so a version published halfway through
+ * cannot price one step at the old figure and the next at the new one.
+ */
+interface PlanCatalogSource {
+    /** `database` for the plans an operator publishes, `given` for a fixed catalogue. */
+    readonly origin: PlanCatalogOrigin;
+    /** The settings of the file, with the plans and features as they stand at this moment. */
+    current(): Promise<PlanCatalog>;
+}
+/** A catalogue that does not move: the one given at start, for tests and in-memory setups. */
+declare function givenPlanCatalogSource(catalog: PlanCatalog): PlanCatalogSource;
+
+export { type PlanCatalogSource as P, type PlanCatalogOrigin as a, givenPlanCatalogSource as g };

package/dist/plan-catalog-source-DWe-BGY1.d.ts

@@ -0,0 +1,21 @@
+import { PlanCatalog } from '@saasicat/core';
+
+/** Where the plans and features of a `PlanCatalogSource` come from. */
+type PlanCatalogOrigin = 'database' | 'given';
+/**
+ * The plan catalogue as it stands now.
+ *
+ * Read it once per operation and hand that value on. Every check the operation
+ * makes then sees the same plans, so a version published halfway through
+ * cannot price one step at the old figure and the next at the new one.
+ */
+interface PlanCatalogSource {
+    /** `database` for the plans an operator publishes, `given` for a fixed catalogue. */
+    readonly origin: PlanCatalogOrigin;
+    /** The settings of the file, with the plans and features as they stand at this moment. */
+    current(): Promise<PlanCatalog>;
+}
+/** A catalogue that does not move: the one given at start, for tests and in-memory setups. */
+declare function givenPlanCatalogSource(catalog: PlanCatalog): PlanCatalogSource;
+
+export { type PlanCatalogSource as P, type PlanCatalogOrigin as a, givenPlanCatalogSource as g };

package/dist/{plan-resolution-Cgo_TR1H.d.cts → plan-resolution-CwUy_OqC.d.cts}

@@ -23,6 +23,20 @@ interface EntitlementResolutionConfig {
      * If the subscription sets a `trialEntitlementPlan`, that one wins.
      */
     defaultTrialEntitlementPlan?: PlanId;
+    /**
+     * What a subscription keeps once its cancellation has taken effect.
+     *
+     * Undefined — the default — means nothing: no features, no quotas. That is
+     * what ending a contract means, and it is the answer an installation should
+     * leave in place unless it has decided otherwise.
+     *
+     * Set it to keep a floor after the end: a read-only tier that lets a former
+     * customer export their data, or a free plan they fall back to. The plan is
+     * resolved through the catalog like any other, so it needs an active
+     * version; bundle bookings and custom limits are NOT added to it, because
+     * those belonged to the subscription that ended.
+     */
+    canceledEntitlementPlan?: PlanId;
 }
 /**
  * Resolves the effective plan of a subscription for limit aggregation.

package/dist/{plan-resolution-Cgo_TR1H.d.ts → plan-resolution-CwUy_OqC.d.ts}

@@ -23,6 +23,20 @@ interface EntitlementResolutionConfig {
      * If the subscription sets a `trialEntitlementPlan`, that one wins.
      */
     defaultTrialEntitlementPlan?: PlanId;
+    /**
+     * What a subscription keeps once its cancellation has taken effect.
+     *
+     * Undefined — the default — means nothing: no features, no quotas. That is
+     * what ending a contract means, and it is the answer an installation should
+     * leave in place unless it has decided otherwise.
+     *
+     * Set it to keep a floor after the end: a read-only tier that lets a former
+     * customer export their data, or a free plan they fall back to. The plan is
+     * resolved through the catalog like any other, so it needs an active
+     * version; bundle bookings and custom limits are NOT added to it, because
+     * those belonged to the subscription that ended.
+     */
+    canceledEntitlementPlan?: PlanId;
 }
 /**
  * Resolves the effective plan of a subscription for limit aggregation.

package/dist/{plan-versions.service-DChhbK6h.d.ts → plan-versions.service-C0N-Em2W.d.ts}

@@ -1,6 +1,6 @@
-import { BundleRepository, DiscoverySnapshot, SubscriptionRepository, PlanRepository, CatalogEntryRepository, BundleRow, BundleVersionRow, CreateBundleData, UpdateBundleData, CreateBundleVersionDraftData, BundleVersionMutationResult, UpdateBundleVersionDraftData, PublishBundleVersionData, MarketingProjectionRepository, MarketingProjectionFilter, MarketingProjectionRow, CreateMarketingProjectionData, UpdateMarketingProjectionData, FeatureUiRegistry, CapabilityCatalogEntryRow, FeatureCatalogEntryRow, QuotaCatalogEntryRow, ReviewCatalogEntryData, CatalogEntryI18n, UpdateCatalogEntryBaseData, SyncDiscoveryResult, PromotionRepository, PromotionRow, CreatePromotionData, UpdatePromotionData, MarketingSettingsRepository, MarketingSettingsRow, UpdateMarketingSettingsData, PublicMarketingCatalogResponse, PlanRow, CreatePlanData, UpdatePlanData, PlanVersionRow, CreatePlanVersionDraftData, PlanVersionMutationResult, UpdatePlanVersionDraftData, PublishPlanVersionData } from '@saasicat/core';
+import { BundleRepository, DiscoverySnapshot, SubscriptionRepository, PlanRepository, CatalogEntryRepository, BundleRow, BundleVersionRow, CreateBundleData, UpdateBundleData, CreateBundleVersionDraftData, BundleVersionMutationResult, UpdateBundleVersionDraftData, PublishBundleVersionData, MarketingProjectionRepository, MarketingProjectionFilter, MarketingProjectionRow, CreateMarketingProjectionData, UpdateMarketingProjectionData, FeatureUiRegistry, CapabilityCatalogEntryRow, FeatureCatalogEntryRow, QuotaCatalogEntryRow, ReviewCatalogEntryData, CatalogEntryI18n, UpdateCatalogEntryBaseData, SyncDiscoveryResult, PromotionRepository, PromotionRow, CreatePromotionData, UpdatePromotionData, MarketingSettingsRepository, MarketingSettingsRow, UpdateMarketingSettingsData, PlanRow, CreatePlanData, UpdatePlanData, PlanVersionRow, CreatePlanVersionDraftData, PlanVersionMutationResult, UpdatePlanVersionDraftData, PublishPlanVersionData } from '@saasicat/core';
 import { OnApplicationBootstrap } from '@nestjs/common';
-import { c as DiscoveryScanner } from './discovery.scanner-9cMqF95o.js';
+import { a as DiscoveryScanner } from './discovery.scanner-DXKc6JkV.js';
 
 /**
  * Configuration for the mutating operations.
@@ -36,7 +36,7 @@ declare class BundlesService {
     private mode;
     private readonly marketedOnly;
     constructor(repo: BundleRepository, snapshot?: DiscoverySnapshot | null, config?: CatalogServiceConfig, subscriptions?: SubscriptionRepository | null, planRepo?: PlanRepository | null, scanner?: DiscoveryScanner | null, catalogEntries?: CatalogEntryRepository | null);
-    listBundles(projectKey: string): Promise<BundleRow[]>;
+    listBundles(): Promise<BundleRow[]>;
     getBundle(bundleId: string): Promise<{
         bundle: BundleRow;
         versions: BundleVersionRow[];
@@ -90,6 +90,26 @@ declare class BundlesService {
      */
     publishBundleVersion(versionId: string, publishMeta: PublishBundleVersionData): Promise<BundleVersionMutationResult>;
     private runStrictCheck;
+    /**
+     * Refuses a version that a plan it is offered to could not actually buy.
+     *
+     * "Some price resolves" is not the same as "this plan, in the rhythm it is
+     * sold in, resolves one". A bundle priced monthly only, offered to a plan
+     * that is sold yearly, passes the first test and fails the second — and the
+     * failure surfaces at a tenant's checkout rather than at the operator's
+     * desk, which is the wrong end of the mistake.
+     *
+     * The expectation comes from the catalog, not from a list: the plans are
+     * whichever the compatibility declares (empty = every plan), and the cycles
+     * are whichever each plan version carries a price for. Add a third cycle to
+     * the catalog one day and this asks about it without being told.
+     *
+     * Skipped where no plan repository is bound — a consumer without one has no
+     * catalog to derive from, and guessing would refuse valid bundles.
+     */
+    private refuseUnsellableToACompatiblePlan;
+    /** The live version of a plan, or null where the port cannot answer. */
+    private liveVersionOf;
     private gateOrPass;
     private assertBundleVersionWindowUpdate;
     private findPreviousBundleVersion;
@@ -123,25 +143,25 @@ declare class CatalogEntriesService implements OnApplicationBootstrap {
      * `POST /admin/catalog/discovery/sync` remains as a fallback.
      */
     onApplicationBootstrap(): Promise<void>;
-    listCapabilities(projectKey: string, codeStatus?: string): Promise<CapabilityCatalogEntryRow[]>;
-    listFeatures(projectKey: string, discoveryStatus?: string): Promise<FeatureCatalogEntryRow[]>;
-    listQuotas(projectKey: string, discoveryStatus?: string): Promise<QuotaCatalogEntryRow[]>;
+    listCapabilities(codeStatus?: string): Promise<CapabilityCatalogEntryRow[]>;
+    listFeatures(discoveryStatus?: string): Promise<FeatureCatalogEntryRow[]>;
+    listQuotas(discoveryStatus?: string): Promise<QuotaCatalogEntryRow[]>;
     /**
      * Approval transition of a feature (#20). Validates the state machine;
      * `approved` persists the approval signature from the current
      * snapshot, `pending` (revoke/reactivate) deletes it, `outdated`/
      * `obsolete` keep the last approval as history.
      */
-    reviewFeature(projectKey: string, featureKey: string, data: ReviewCatalogEntryData, reviewedBy: string | null): Promise<FeatureCatalogEntryRow>;
+    reviewFeature(featureKey: string, data: ReviewCatalogEntryData, reviewedBy: string | null): Promise<FeatureCatalogEntryRow>;
     /** Approval transition of a quota — same state machine as features (#20). */
-    reviewQuota(projectKey: string, quotaKey: string, data: ReviewCatalogEntryData, reviewedBy: string | null): Promise<QuotaCatalogEntryRow>;
+    reviewQuota(quotaKey: string, data: ReviewCatalogEntryData, reviewedBy: string | null): Promise<QuotaCatalogEntryRow>;
     private resolveReviewUpdate;
-    setFeatureI18n(projectKey: string, featureKey: string, i18n: CatalogEntryI18n): Promise<FeatureCatalogEntryRow>;
-    setQuotaI18n(projectKey: string, quotaKey: string, i18n: CatalogEntryI18n): Promise<QuotaCatalogEntryRow>;
+    setFeatureI18n(featureKey: string, i18n: CatalogEntryI18n): Promise<FeatureCatalogEntryRow>;
+    setQuotaI18n(quotaKey: string, i18n: CatalogEntryI18n): Promise<QuotaCatalogEntryRow>;
     /** Sets the editable default-locale label/description of a feature. */
-    setFeatureBase(projectKey: string, featureKey: string, data: UpdateCatalogEntryBaseData): Promise<FeatureCatalogEntryRow>;
+    setFeatureBase(featureKey: string, data: UpdateCatalogEntryBaseData): Promise<FeatureCatalogEntryRow>;
     /** Sets the editable default-locale label/description of a quota. */
-    setQuotaBase(projectKey: string, quotaKey: string, data: UpdateCatalogEntryBaseData): Promise<QuotaCatalogEntryRow>;
+    setQuotaBase(quotaKey: string, data: UpdateCatalogEntryBaseData): Promise<QuotaCatalogEntryRow>;
     /**
      * Synchronizes the catalog entries from a discovery snapshot.
      * Idempotent — can run against the same snapshot any number of times.
@@ -161,7 +181,7 @@ declare class CatalogEntriesService implements OnApplicationBootstrap {
 declare class PromotionsService {
     private readonly repo;
     constructor(repo: PromotionRepository);
-    list(projectKey: string): Promise<PromotionRow[]>;
+    list(): Promise<PromotionRow[]>;
     getById(id: string): Promise<PromotionRow>;
     create(data: CreatePromotionData): Promise<PromotionRow>;
     update(id: string, data: UpdatePromotionData): Promise<PromotionRow>;
@@ -172,54 +192,8 @@ declare class MarketingSettingsService {
     private readonly repo;
     constructor(repo: MarketingSettingsRepository);
     /** Returns the stored config or `null` (in which case the full pool applies). */
-    get(projectKey: string): Promise<MarketingSettingsRow | null>;
-    upsert(projectKey: string, data: UpdateMarketingSettingsData): Promise<MarketingSettingsRow>;
-}
-
-declare class PublicMarketingCatalogService {
-    private readonly planRepo;
-    private readonly marketingRepo;
-    private readonly promotionRepo;
-    private readonly catalogEntryRepo;
-    private readonly bundleRepo;
-    constructor(planRepo: PlanRepository, marketingRepo: MarketingProjectionRepository, promotionRepo: PromotionRepository, catalogEntryRepo?: CatalogEntryRepository | null, bundleRepo?: BundleRepository | null);
-    getCatalog(projectKey: string, locale: string, currency: string, vatRate: number, asOf?: Date): Promise<PublicMarketingCatalogResponse>;
-    /**
-     * Loads all published-and-live bundle versions for a project and
-     * filters on `marketed === true`. Without a registered
-     * `BundleRepository` (apps without the SuperAdmin bundle editor) the
-     * list is empty — the public catalog stays plan-only.
-     */
-    private loadMarketedBundles;
-    /**
-     * Maps BundleVersionRow → PublicMarketingBundle. Locale resolution
-     * runs via `MarketingProjectionRepository.findByTarget('BUNDLE',
-     * bundleVersionId, locale)` — on a miss it falls back to
-     * `DEFAULT_LOCALE`. If the fallback is missing too, label/description
-     * come directly from the bundle root (denormalized in `BundleVersionRow`).
-     *
-     * If the marketing projection is `visible === false`, the bundle is
-     * hidden from the public response (preparation phase).
-     */
-    private toPublicBundle;
-    /**
-     * Labels for bundle features ∪ their requires (#48): `comparison.features`
-     * only covers the plan-feature union — bundle-only features would
-     * otherwise get no label in the public payload. Curated keys only;
-     * without a CatalogEntryRepository the map stays empty (frontends fall
-     * back to the key).
-     */
-    private resolveBundleFeatureLabels;
-    /** Loads the translated feature/quota labels (+ sortOrder) for a locale. */
-    private loadLabelMeta;
-    /**
-     * Resolves the displayed label of a top feature: the `label` override
-     * wins; otherwise the translated label of the referenced `key`.
-     */
-    private resolveTopFeature;
-    /** Row definitions of the comparison matrix (feature/quota union + labels). */
-    private buildComparison;
-    private resolvePromo;
+    get(): Promise<MarketingSettingsRow | null>;
+    upsert(data: UpdateMarketingSettingsData): Promise<MarketingSettingsRow>;
 }
 
 declare class PlansService {
@@ -233,8 +207,8 @@ declare class PlansService {
      * `SubscriptionRepository` is registered or it does not implement
      * `countActiveByPlanKey`.
      */
-    getTenantCounts(projectKey: string): Promise<Record<string, number>>;
-    listPlans(projectKey: string, opts?: {
+    getTenantCounts(): Promise<Record<string, number>>;
+    listPlans(opts?: {
         onlyPublished?: boolean;
     }): Promise<PlanRow[]>;
     getPlan(planId: string): Promise<PlanRow>;
@@ -326,4 +300,4 @@ declare class PlanVersionsService {
     private gateOrPass;
 }
 
-export { BundlesService as B, CatalogEntriesService as C, MarketingProjectionsService as M, PlanVersionsService as P, type CatalogServiceConfig as a, MarketingSettingsService as b, PlansService as c, PromotionsService as d, PublicMarketingCatalogService as e };
+export { BundlesService as B, CatalogEntriesService as C, MarketingProjectionsService as M, PlanVersionsService as P, type CatalogServiceConfig as a, MarketingSettingsService as b, PlansService as c, PromotionsService as d };