@saasicat/nest 1.0.0-rc.2 → 1.0.0-rc.21

package/dist/catalog/index.d.ts

@@ -1,8 +1,8 @@
-export { B as BundlesService, C as CatalogEntriesService, a as CatalogServiceConfig, M as MarketingProjectionsService, b as MarketingSettingsService, P as PlanVersionsService, c as PlansService, d as PromotionsService, e as PublicMarketingCatalogService } from '../plan-versions.service-DChhbK6h.js';
+export { B as BundlesService, C as CatalogEntriesService, a as CatalogServiceConfig, M as MarketingProjectionsService, b as MarketingSettingsService, P as PlanVersionsService, c as PlansService, d as PromotionsService } from '../plan-versions.service-C0N-Em2W.js';
 import { Type, CanActivate } from '@nestjs/common';
-export { C as CatalogControllerConfig, a as CatalogModule, b as CatalogModuleOptions } from '../catalog.module-BTnMsE6u.js';
+export { a as CatalogControllerConfig, b as CatalogModule, C as CatalogModuleOptions, N as NewPaymentMethodsSource, P as PublicMarketingCatalogOptions, c as PublicMarketingCatalogService } from '../catalog.module-C9O7BxRq.js';
 import { StrictModeWarningCode, StrictModeWarning, DiscoverySnapshot, ApprovedCatalogKeys, DiscoveredQuota, CatalogEntryRepository, PlanVersionRow, BundleVersionRow, DiscoveryStatus, CatalogEntryI18n, PromotionType, PromotionValue, PromotionTargetType, PromotionBillingCycle, PromotionI18n } from '@saasicat/core';
-import '../discovery.scanner-9cMqF95o.js';
+import '../discovery.scanner-DXKc6JkV.js';
 import '@nestjs/core';
 import '../di-CcNeq9v-.js';
 
@@ -12,7 +12,7 @@ declare function buildPromotionsController(guards: Array<Type<CanActivate>>): Ty
 
 declare function buildMarketingSettingsController(guards: Array<Type<CanActivate>>): Type;
 
-declare function buildPublicMarketingCatalogController(guards: Array<Type<CanActivate>>, projectKey: string, currency: string, vatRate: number): Type;
+declare function buildPublicMarketingCatalogController(guards: Array<Type<CanActivate>>, currency: string, vatRate: number): Type;
 
 /**
  * Builds the controller class at boot time with the guards configured by the
@@ -68,6 +68,13 @@ declare const CATALOG_SERVICE_CONFIG_TOKEN: unique symbol;
  * is namespaced accordingly so the two never collide.
  */
 declare const CATALOG_FEATURE_UI_REGISTRY_TOKEN: unique symbol;
+/**
+ * Where the public catalogue reads what a new payment method is taken with —
+ * `PaymentGatewayRegistry` where the application wired payments, and `null`
+ * where it did not. Always provided, so a catalogue that answers the question
+ * cannot be wired without an answer to it.
+ */
+declare const NEW_PAYMENT_METHODS_SOURCE_TOKEN: unique symbol;
 
 /**
  * Advisory warnings (#35): they inform but never block — not even in
@@ -164,7 +171,7 @@ declare function featureApprovalSignature(featureKey: string, snapshot: Discover
  */
 declare function quotaApprovalSignature(quota: DiscoveredQuota): string;
 
-declare function loadApprovedCatalogKeys(repo: CatalogEntryRepository | null, projectKey: string): Promise<ApprovedCatalogKeys | null>;
+declare function loadApprovedCatalogKeys(repo: CatalogEntryRepository | null): Promise<ApprovedCatalogKeys | null>;
 
 interface PreflightInput {
     snapshot: DiscoverySnapshot;
@@ -288,8 +295,41 @@ interface SeedGateRunOptions {
  */
 declare function runSeedGateFromFile(options: SeedGateRunOptions): SeedGateReport | null;
 
+/** What a caller may say about a version's window when publishing it. */
+interface ValidityWindowInput {
+    validFrom?: string | null;
+    validUntil?: string | null;
+}
+/** The predecessor this version succeeds, or `null` for the first one. */
+interface PreviousWindow {
+    validFrom?: string | null;
+    validUntil?: string | null;
+}
+/** The five refusals, named per entity so the caller keeps its own codes. */
+interface ValidityWindowCodes {
+    readonly validFromRequired: string;
+    readonly validFromInvalid: string;
+    readonly validFromNotAfterPrevious: string;
+    readonly validFromNotGapless: string;
+    readonly validUntilInvalid: string;
+    readonly validUntilBeforeFrom: string;
+}
+declare const PLAN_VERSION_WINDOW_CODES: ValidityWindowCodes;
+declare const BUNDLE_VERSION_WINDOW_CODES: ValidityWindowCodes;
+/**
+ * Resolves the window a version is published with, or refuses the publish.
+ *
+ * `publishMeta` and `draft` are read differently on purpose. A start falls back
+ * to the draft's when the call does not carry one, but an END does so only when
+ * the call is SILENT about it: an explicit `null` there means "unbounded", and
+ * `??` would read that as "no answer" and take the draft's end instead.
+ */
+declare function resolveValidityWindow(publishMeta: ValidityWindowInput, draft: ValidityWindowInput, previous: PreviousWindow | null, codes: ValidityWindowCodes): {
+    validFrom: Date;
+    validUntil: Date | null;
+};
+
 declare class CreateBundleDto {
-    projectKey: string;
     bundleKey: string;
     label: string;
     description?: string;
@@ -312,43 +352,45 @@ declare class UpdateBundleDto {
         description?: string;
     }>;
 }
-declare class CreateBundleVersionDraftDto {
-    features: string[];
-    quotas?: Record<string, number>;
-    compatibility?: {
-        planIds?: string[];
-    };
-    pricingOverrides?: Array<{
-        planId?: string;
-        monthlyNet?: string | null;
-        yearlyNet?: string | null;
-    }>;
+/** One plan's own price for a bundle version, in `pricingOverrides`. */
+declare class BundlePricingOverrideDto {
+    planId?: string;
     monthlyNet?: string | null;
     yearlyNet?: string | null;
-    marketed?: boolean;
-    changeNote?: string;
-    baseVersionId?: string | null;
-    validFrom?: string | null;
-    validUntil?: string | null;
 }
-declare class UpdateBundleVersionDraftDto {
-    features?: string[];
+/**
+ * Everything a version draft may carry apart from its feature list.
+ *
+ * A base class rather than two copies, and the split is where the pair actually
+ * differs: a create needs features, an update may leave them alone. Everything
+ * else — quotas, compatibility, prices, the window — is optional on both, and
+ * was written out twice.
+ *
+ * `features` is deliberately NOT here. Declared in the base as optional, the
+ * inherited `@IsOptional()` would follow into the create DTO and make the one
+ * required field of that request optional again; class-validator reads the
+ * whole prototype chain.
+ */
+declare class BundleVersionDraftFieldsDto {
     quotas?: Record<string, number>;
     compatibility?: {
         planIds?: string[];
     };
-    pricingOverrides?: Array<{
-        planId?: string;
-        monthlyNet?: string | null;
-        yearlyNet?: string | null;
-    }>;
+    pricingOverrides?: BundlePricingOverrideDto[];
     monthlyNet?: string | null;
     yearlyNet?: string | null;
     marketed?: boolean;
     changeNote?: string;
+    baseVersionId?: string | null;
     validFrom?: string | null;
     validUntil?: string | null;
 }
+declare class CreateBundleVersionDraftDto extends BundleVersionDraftFieldsDto {
+    features: string[];
+}
+declare class UpdateBundleVersionDraftDto extends BundleVersionDraftFieldsDto {
+    features?: string[];
+}
 declare class PublishBundleVersionDto {
     forceRegressive?: boolean;
     /**
@@ -375,7 +417,6 @@ declare class MarketingTopFeatureDto {
     strong: string;
 }
 declare class CreateMarketingProjectionDto {
-    projectKey: string;
     targetType: 'PLAN' | 'BUNDLE';
     targetVersionId: string;
     locale?: string;
@@ -405,14 +446,12 @@ declare class UpdateMarketingProjectionDto {
     highlight?: boolean;
 }
 declare class ListMarketingProjectionsQueryDto {
-    projectKey: string;
     targetType?: 'PLAN' | 'BUNDLE';
     targetVersionId?: string;
     locale?: string;
 }
 
 declare class ListCatalogEntriesQueryDto {
-    projectKey: string;
     /** Filter for features/quotas (approval lifecycle). */
     discoveryStatus?: string;
     /** Filter for capabilities (read-only code facts). */
@@ -431,19 +470,14 @@ declare class UpdateCatalogEntryI18nDto {
 }
 /**
  * Body of `POST …/discovery/sync` — the discovery snapshot the UI
- * previously loaded from `GET /admin/discovery`. Validated by the service
- * against `projectKey`; deep validation is not needed because the
- * SuperAdmin guard secures the source.
+ * previously loaded from `GET /admin/discovery`. Deep validation is not needed
+ * because the SuperAdmin guard secures the source.
  */
 declare class SyncDiscoveryDto {
     snapshot: DiscoverySnapshot;
 }
 
-declare class ListPromotionsQueryDto {
-    projectKey: string;
-}
 declare class CreatePromotionDto {
-    projectKey: string;
     internalLabel: string;
     type: PromotionType;
     /** Type-dependent: number | { price, months }. */
@@ -477,17 +511,12 @@ declare class UpdatePromotionDto {
     i18n?: PromotionI18n;
 }
 
-declare class ListMarketingSettingsQueryDto {
-    projectKey: string;
-}
 /** Body of `PUT /admin/catalog/marketing-settings`. */
 declare class UpdateMarketingSettingsDto {
-    projectKey: string;
     activeLocales: string[];
 }
 
 declare class CreatePlanDto {
-    projectKey: string;
     planKey: string;
     label: string;
     description?: string;
@@ -547,4 +576,4 @@ declare class PublishPlanVersionDto {
     validUntil?: string | null;
 }
 
-export { ADVISORY_STRICT_MODE_CODES, BUNDLE_REPOSITORY_TOKEN, CATALOG_ENTRY_REPOSITORY_TOKEN, CATALOG_FEATURE_UI_REGISTRY_TOKEN, CATALOG_SERVICE_CONFIG_TOKEN, CreateBundleDto, CreateBundleVersionDraftDto, CreateMarketingProjectionDto, CreatePlanDto, CreatePlanVersionDraftDto, CreatePromotionDto, ListCatalogEntriesQueryDto, ListMarketingProjectionsQueryDto, ListMarketingSettingsQueryDto, ListPromotionsQueryDto, MARKETING_PROJECTION_REPOSITORY_TOKEN, MARKETING_SETTINGS_REPOSITORY_TOKEN, PLAN_REPOSITORY_TOKEN, PROMOTION_REPOSITORY_TOKEN, type PreflightFinding, type PreflightInput, type PreflightReport, PublishBundleVersionDto, PublishPlanVersionDto, ReviewCatalogEntryDto, type SeedBundleDraft, type SeedGateFinding, type SeedGateInput, type SeedGateMode, type SeedGateReport, type SeedGateRunOptions, type SeedPlanDraft, SyncDiscoveryDto, UpdateBundleDto, UpdateBundleVersionDraftDto, UpdateCatalogEntryI18nDto, UpdateMarketingProjectionDto, UpdateMarketingSettingsDto, UpdatePlanDto, UpdatePlanVersionDraftDto, UpdatePromotionDto, blockingStrictModeWarnings, buildBundleVersionsController, buildBundlesController, buildCatalogEntriesController, buildMarketingProjectionsController, buildMarketingSettingsController, buildPlanVersionsController, buildPlansController, buildPromotionsController, buildPublicMarketingCatalogController, featureApprovalSignature, formatPreflightReport, formatSeedGateReport, loadApprovedCatalogKeys, preflightExitCode, quotaApprovalSignature, runPreflight, runSeedGateFromFile, seedGateExitCode, validateBundleDraft, validatePlanDraft, validateSeedAgainstSnapshot };
+export { ADVISORY_STRICT_MODE_CODES, BUNDLE_REPOSITORY_TOKEN, BUNDLE_VERSION_WINDOW_CODES, CATALOG_ENTRY_REPOSITORY_TOKEN, CATALOG_FEATURE_UI_REGISTRY_TOKEN, CATALOG_SERVICE_CONFIG_TOKEN, CreateBundleDto, CreateBundleVersionDraftDto, CreateMarketingProjectionDto, CreatePlanDto, CreatePlanVersionDraftDto, CreatePromotionDto, ListCatalogEntriesQueryDto, ListMarketingProjectionsQueryDto, MARKETING_PROJECTION_REPOSITORY_TOKEN, MARKETING_SETTINGS_REPOSITORY_TOKEN, NEW_PAYMENT_METHODS_SOURCE_TOKEN, PLAN_REPOSITORY_TOKEN, PLAN_VERSION_WINDOW_CODES, PROMOTION_REPOSITORY_TOKEN, type PreflightFinding, type PreflightInput, type PreflightReport, type PreviousWindow, PublishBundleVersionDto, PublishPlanVersionDto, ReviewCatalogEntryDto, type SeedBundleDraft, type SeedGateFinding, type SeedGateInput, type SeedGateMode, type SeedGateReport, type SeedGateRunOptions, type SeedPlanDraft, SyncDiscoveryDto, UpdateBundleDto, UpdateBundleVersionDraftDto, UpdateCatalogEntryI18nDto, UpdateMarketingProjectionDto, UpdateMarketingSettingsDto, UpdatePlanDto, UpdatePlanVersionDraftDto, UpdatePromotionDto, type ValidityWindowCodes, type ValidityWindowInput, blockingStrictModeWarnings, buildBundleVersionsController, buildBundlesController, buildCatalogEntriesController, buildMarketingProjectionsController, buildMarketingSettingsController, buildPlanVersionsController, buildPlansController, buildPromotionsController, buildPublicMarketingCatalogController, featureApprovalSignature, formatPreflightReport, formatSeedGateReport, loadApprovedCatalogKeys, preflightExitCode, quotaApprovalSignature, resolveValidityWindow, runPreflight, runSeedGateFromFile, seedGateExitCode, validateBundleDraft, validatePlanDraft, validateSeedAgainstSnapshot };

package/dist/catalog/index.js

@@ -6,10 +6,10 @@ import {
   runSeedGateFromFile,
   seedGateExitCode,
   validateSeedAgainstSnapshot
-} from "../chunk-NA6O63B7.js";
-import "../chunk-74SCJ4HF.js";
+} from "../chunk-F5X66HF5.js";
 import {
   ADVISORY_STRICT_MODE_CODES,
+  BUNDLE_VERSION_WINDOW_CODES,
   BundlesService,
   CatalogEntriesService,
   CatalogModule,
@@ -21,10 +21,9 @@ import {
   CreatePromotionDto,
   ListCatalogEntriesQueryDto,
   ListMarketingProjectionsQueryDto,
-  ListMarketingSettingsQueryDto,
-  ListPromotionsQueryDto,
   MarketingProjectionsService,
   MarketingSettingsService,
+  PLAN_VERSION_WINDOW_CODES,
   PlanVersionsService,
   PlansService,
   PromotionsService,
@@ -54,12 +53,16 @@ import {
   featureApprovalSignature,
   loadApprovedCatalogKeys,
   quotaApprovalSignature,
+  resolveValidityWindow,
   validateBundleDraft,
   validatePlanDraft
-} from "../chunk-WOVQPXV4.js";
-import "../chunk-N3L3AICU.js";
-import "../chunk-O2J2HDXA.js";
-import "../chunk-YSC46BGM.js";
+} from "../chunk-CQ2ZZMTD.js";
+import "../chunk-GZTL64QK.js";
+import "../chunk-34XVPR6P.js";
+import "../chunk-OOTEXP47.js";
+import "../chunk-KPEMTBOP.js";
+import "../chunk-74SCJ4HF.js";
+import "../chunk-JVAEKTJ4.js";
 import "../chunk-OUDSQ3PU.js";
 import {
   BUNDLE_REPOSITORY_TOKEN,
@@ -68,16 +71,20 @@ import {
   CATALOG_SERVICE_CONFIG_TOKEN,
   MARKETING_PROJECTION_REPOSITORY_TOKEN,
   MARKETING_SETTINGS_REPOSITORY_TOKEN,
+  NEW_PAYMENT_METHODS_SOURCE_TOKEN,
   PLAN_REPOSITORY_TOKEN,
   PROMOTION_REPOSITORY_TOKEN
-} from "../chunk-AOQJEYOL.js";
-import "../chunk-SABTXESR.js";
-import "../chunk-WXYJHZCN.js";
+} from "../chunk-3QVGA6JX.js";
 import "../chunk-QUZU2M33.js";
+import "../chunk-GPQWGA6B.js";
+import "../chunk-SZ7RFPXA.js";
+import "../chunk-YSC46BGM.js";
+import "../chunk-J7NJRK3K.js";
 import "../chunk-SHUYVCID.js";
 export {
   ADVISORY_STRICT_MODE_CODES,
   BUNDLE_REPOSITORY_TOKEN,
+  BUNDLE_VERSION_WINDOW_CODES,
   BundlesService,
   CATALOG_ENTRY_REPOSITORY_TOKEN,
   CATALOG_FEATURE_UI_REGISTRY_TOKEN,
@@ -92,13 +99,13 @@ export {
   CreatePromotionDto,
   ListCatalogEntriesQueryDto,
   ListMarketingProjectionsQueryDto,
-  ListMarketingSettingsQueryDto,
-  ListPromotionsQueryDto,
   MARKETING_PROJECTION_REPOSITORY_TOKEN,
   MARKETING_SETTINGS_REPOSITORY_TOKEN,
   MarketingProjectionsService,
   MarketingSettingsService,
+  NEW_PAYMENT_METHODS_SOURCE_TOKEN,
   PLAN_REPOSITORY_TOKEN,
+  PLAN_VERSION_WINDOW_CODES,
   PROMOTION_REPOSITORY_TOKEN,
   PlanVersionsService,
   PlansService,
@@ -132,6 +139,7 @@ export {
   loadApprovedCatalogKeys,
   preflightExitCode,
   quotaApprovalSignature,
+  resolveValidityWindow,
   runPreflight,
   runSeedGateFromFile,
   seedGateExitCode,

package/dist/catalog.module-C9O7BxRq.d.ts

@@ -0,0 +1,180 @@
+import { Type, CanActivate, DynamicModule, ForwardReference, Provider } from '@nestjs/common';
+import { PaymentMethodType, PlanRepository, MarketingProjectionRepository, PromotionRepository, CatalogEntryRepository, BundleRepository, PublicMarketingCatalogResponse, MarketingSettingsRepository, FeatureUiRegistry } from '@saasicat/core';
+import { P as ProviderSpec } from './di-CcNeq9v-.js';
+
+/**
+ * What the catalogue needs of whatever knows the payment accounts: the account
+ * new payment methods are taken at, or `null` where none takes them.
+ * `PaymentGatewayRegistry` satisfies it; the shape keeps this module free of a
+ * dependency on the payments module.
+ */
+interface NewPaymentMethodsSource {
+    forNewPaymentMethods(): {
+        methods: readonly PaymentMethodType[];
+    } | null;
+}
+declare class PublicMarketingCatalogService {
+    private readonly planRepo;
+    private readonly marketingRepo;
+    private readonly promotionRepo;
+    private readonly catalogEntryRepo;
+    private readonly bundleRepo;
+    private readonly newPaymentMethodsSource;
+    constructor(planRepo: PlanRepository, marketingRepo: MarketingProjectionRepository, promotionRepo: PromotionRepository, catalogEntryRepo: (CatalogEntryRepository | null) | undefined, bundleRepo: (BundleRepository | null) | undefined, newPaymentMethodsSource: NewPaymentMethodsSource | null);
+    /** What a new payment method is taken with here, for the page that offers the plans. */
+    private newPaymentMethods;
+    getCatalog(locale: string, currency: string, vatRate: number, asOf?: Date): Promise<PublicMarketingCatalogResponse>;
+    /**
+     * Loads all published-and-live bundle versions and filters on
+     * `marketed === true`. Without a registered `BundleRepository` (apps
+     * without the SuperAdmin bundle editor) the list is empty — the public
+     * catalog stays plan-only.
+     */
+    private loadMarketedBundles;
+    /**
+     * Maps BundleVersionRow → PublicMarketingBundle. Locale resolution
+     * runs via `MarketingProjectionRepository.findByTarget('BUNDLE',
+     * bundleVersionId, locale)` — on a miss it falls back to
+     * `DEFAULT_LOCALE`. If the fallback is missing too, label/description
+     * come directly from the bundle root (denormalized in `BundleVersionRow`).
+     *
+     * If the marketing projection is `visible === false`, the bundle is
+     * hidden from the public response (preparation phase).
+     */
+    private toPublicBundle;
+    /**
+     * Labels for bundle features ∪ their requires (#48): `comparison.features`
+     * only covers the plan-feature union — bundle-only features would
+     * otherwise get no label in the public payload. Curated keys only;
+     * without a CatalogEntryRepository the map stays empty (frontends fall
+     * back to the key).
+     */
+    private resolveBundleFeatureLabels;
+    /** Loads the translated feature/quota labels (+ sortOrder) for a locale. */
+    private loadLabelMeta;
+    /**
+     * Resolves the displayed label of a top feature: the `label` override
+     * wins; otherwise the translated label of the referenced `key`.
+     */
+    private resolveTopFeature;
+    /** Row definitions of the comparison matrix (feature/quota union + labels). */
+    private buildComparison;
+    private resolvePromo;
+}
+
+/** What the auth-free pricing-page endpoint is mounted with. */
+interface PublicMarketingCatalogOptions {
+    guards: Array<Type<CanActivate>>;
+    currency: string;
+    vatRate: number;
+    /**
+     * Where the catalogue reads what a new payment method is taken with —
+     * `PaymentGatewayRegistry` from `@saasicat/nest/payments` where the
+     * application wired payments, and `null` where nothing takes them.
+     *
+     * Required and nullable rather than optional, because leaving it out is not
+     * silence: the endpoint would publish that no payment method is taken,
+     * which is a claim, and an application whose form takes one would publish
+     * the opposite of what it does. `SaaSiCatModule` fills it from `payments`.
+     */
+    newPaymentMethodsFrom: Type<NewPaymentMethodsSource> | null;
+}
+interface CatalogControllerConfig {
+    /**
+     * Class-level guards for `BundlesController` and `BundleVersionsController`.
+     * REQUIRED — otherwise `forRoot()` throws at boot. Pass `[]` explicitly
+     * if the endpoints should intentionally be auth-free.
+     *
+     * Publishing a plan or bundle version, ending a plan version and purging a
+     * plan require the second factor whatever this list holds: the check sits
+     * on those handlers, so `MfaService` has to be resolvable — through
+     * `AdminModule`, which `SaaSiCatModule.forRoot` always registers.
+     */
+    guards: Array<Type<CanActivate>>;
+}
+interface CatalogModuleOptions {
+    /** Adapter for `bundles` + `bundle_versions` persistence. */
+    bundleRepository: ProviderSpec<BundleRepository>;
+    /**
+     * Adapter for `marketing_projections` persistence. Optional — if
+     * omitted, MarketingProjectionsService + controller are not
+     * registered.
+     */
+    marketingProjectionRepository?: ProviderSpec<MarketingProjectionRepository>;
+    /**
+     * Adapter for `capability_/feature_/quota_catalog_entries` persistence
+     * (discovery review). Optional — if omitted,
+     * CatalogEntriesService + controller are not registered.
+     */
+    catalogEntryRepository?: ProviderSpec<CatalogEntryRepository>;
+    /**
+     * Adapter for `promotions` persistence. Optional — if
+     * omitted, PromotionsService + controller are not registered.
+     */
+    promotionRepository?: ProviderSpec<PromotionRepository>;
+    /**
+     * Adapter for `marketing_settings` persistence (
+     * `activeLocales`). Optional.
+     */
+    marketingSettingsRepository?: ProviderSpec<MarketingSettingsRepository>;
+    /**
+     * Auth-free pricing-page endpoint `GET /public/marketing-catalog`
+     *. Registered only when plan-, marketingProjection-
+     * and promotionRepository are set. `guards` is usually `[]`.
+     */
+    publicMarketingCatalog?: PublicMarketingCatalogOptions;
+    /**
+     * — adapter for `plans` master-record persistence.
+     * Optional; if omitted, PlansService + controller are not
+     * registered (apps without a need for the plan editor stay unchanged).
+     */
+    planRepository?: ProviderSpec<PlanRepository>;
+    /**
+     * Controller mount for `/admin/catalog/bundles` + `/admin/catalog/bundle-versions`.
+     * If omitted, the endpoints are not registered — but the services remain usable via DI.
+     */
+    controller?: CatalogControllerConfig;
+    /**
+     * Strict-mode mode. `blocking` (default, #12) throws HTTP 422 on
+     * violations and requires a DiscoverySnapshot; `warn-only` returns them
+     * only as a warning (transition until 100% discovery coverage).
+     */
+    strictModeCheckMode?: 'warn-only' | 'blocking';
+    /**
+     * Discovery→catalog auto-sync at boot (#12). Default `true` — as soon as a
+     * `catalogEntryRepository` is wired and a DiscoverySnapshot is available,
+     * `CatalogEntriesService` mirrors the discovery into the DB at startup. `false`
+     * disables the boot sync; the manual sync endpoint remains usable.
+     */
+    autoSyncDiscoveryAtBoot?: boolean;
+    /**
+     * Feature keys the catalog is deliberately allowed to carry without them
+     * existing in the discovery snapshot (marketed non-code features such as
+     * support SLAs, e.g. `['PRIORITY_SUPPORT']`). The strict-mode check excludes
+     * them from BUNDLE_/PLAN_FEATURE_UNKNOWN. Use sparingly.
+     */
+    marketedOnlyFeatures?: string[];
+    /**
+     * Optional consumer-curated FeatureUiRegistry (label/description/icon
+     * per feature — the same one passed to `PublicCatalogModule.forRoot`). The
+     * discovery auto-sync seeds EMPTY `FeatureCatalogEntry` fields
+     * (label/description/icon) from it at boot; SuperAdmin edits stay untouched. This
+     * makes `FeatureCatalogEntry` the SSOT for UI metadata.
+     */
+    featureUiRegistry?: FeatureUiRegistry;
+    /**
+     * Modules whose providers must be visible in the DI scope of this
+     * DynamicModule — typically: `AuthModule`/`PlatformAdminModule`, because the
+     * controller guards come from there.
+     */
+    imports?: Array<Type<unknown> | DynamicModule | Promise<DynamicModule> | ForwardReference>;
+    /** Additional providers registered in the DynamicModule itself. */
+    extraProviders?: Provider[];
+    /** Register the module globally — default `false`. */
+    global?: boolean;
+}
+declare class CatalogModule {
+    static forRoot(options: CatalogModuleOptions): DynamicModule;
+}
+
+export { type CatalogModuleOptions as C, type NewPaymentMethodsSource as N, type PublicMarketingCatalogOptions as P, type CatalogControllerConfig as a, CatalogModule as b, PublicMarketingCatalogService as c };

package/dist/catalog.module-T-I5Ricz.d.cts

@@ -0,0 +1,180 @@
+import { Type, CanActivate, DynamicModule, ForwardReference, Provider } from '@nestjs/common';
+import { PaymentMethodType, PlanRepository, MarketingProjectionRepository, PromotionRepository, CatalogEntryRepository, BundleRepository, PublicMarketingCatalogResponse, MarketingSettingsRepository, FeatureUiRegistry } from '@saasicat/core';
+import { P as ProviderSpec } from './di-CcNeq9v-.cjs';
+
+/**
+ * What the catalogue needs of whatever knows the payment accounts: the account
+ * new payment methods are taken at, or `null` where none takes them.
+ * `PaymentGatewayRegistry` satisfies it; the shape keeps this module free of a
+ * dependency on the payments module.
+ */
+interface NewPaymentMethodsSource {
+    forNewPaymentMethods(): {
+        methods: readonly PaymentMethodType[];
+    } | null;
+}
+declare class PublicMarketingCatalogService {
+    private readonly planRepo;
+    private readonly marketingRepo;
+    private readonly promotionRepo;
+    private readonly catalogEntryRepo;
+    private readonly bundleRepo;
+    private readonly newPaymentMethodsSource;
+    constructor(planRepo: PlanRepository, marketingRepo: MarketingProjectionRepository, promotionRepo: PromotionRepository, catalogEntryRepo: (CatalogEntryRepository | null) | undefined, bundleRepo: (BundleRepository | null) | undefined, newPaymentMethodsSource: NewPaymentMethodsSource | null);
+    /** What a new payment method is taken with here, for the page that offers the plans. */
+    private newPaymentMethods;
+    getCatalog(locale: string, currency: string, vatRate: number, asOf?: Date): Promise<PublicMarketingCatalogResponse>;
+    /**
+     * Loads all published-and-live bundle versions and filters on
+     * `marketed === true`. Without a registered `BundleRepository` (apps
+     * without the SuperAdmin bundle editor) the list is empty — the public
+     * catalog stays plan-only.
+     */
+    private loadMarketedBundles;
+    /**
+     * Maps BundleVersionRow → PublicMarketingBundle. Locale resolution
+     * runs via `MarketingProjectionRepository.findByTarget('BUNDLE',
+     * bundleVersionId, locale)` — on a miss it falls back to
+     * `DEFAULT_LOCALE`. If the fallback is missing too, label/description
+     * come directly from the bundle root (denormalized in `BundleVersionRow`).
+     *
+     * If the marketing projection is `visible === false`, the bundle is
+     * hidden from the public response (preparation phase).
+     */
+    private toPublicBundle;
+    /**
+     * Labels for bundle features ∪ their requires (#48): `comparison.features`
+     * only covers the plan-feature union — bundle-only features would
+     * otherwise get no label in the public payload. Curated keys only;
+     * without a CatalogEntryRepository the map stays empty (frontends fall
+     * back to the key).
+     */
+    private resolveBundleFeatureLabels;
+    /** Loads the translated feature/quota labels (+ sortOrder) for a locale. */
+    private loadLabelMeta;
+    /**
+     * Resolves the displayed label of a top feature: the `label` override
+     * wins; otherwise the translated label of the referenced `key`.
+     */
+    private resolveTopFeature;
+    /** Row definitions of the comparison matrix (feature/quota union + labels). */
+    private buildComparison;
+    private resolvePromo;
+}
+
+/** What the auth-free pricing-page endpoint is mounted with. */
+interface PublicMarketingCatalogOptions {
+    guards: Array<Type<CanActivate>>;
+    currency: string;
+    vatRate: number;
+    /**
+     * Where the catalogue reads what a new payment method is taken with —
+     * `PaymentGatewayRegistry` from `@saasicat/nest/payments` where the
+     * application wired payments, and `null` where nothing takes them.
+     *
+     * Required and nullable rather than optional, because leaving it out is not
+     * silence: the endpoint would publish that no payment method is taken,
+     * which is a claim, and an application whose form takes one would publish
+     * the opposite of what it does. `SaaSiCatModule` fills it from `payments`.
+     */
+    newPaymentMethodsFrom: Type<NewPaymentMethodsSource> | null;
+}
+interface CatalogControllerConfig {
+    /**
+     * Class-level guards for `BundlesController` and `BundleVersionsController`.
+     * REQUIRED — otherwise `forRoot()` throws at boot. Pass `[]` explicitly
+     * if the endpoints should intentionally be auth-free.
+     *
+     * Publishing a plan or bundle version, ending a plan version and purging a
+     * plan require the second factor whatever this list holds: the check sits
+     * on those handlers, so `MfaService` has to be resolvable — through
+     * `AdminModule`, which `SaaSiCatModule.forRoot` always registers.
+     */
+    guards: Array<Type<CanActivate>>;
+}
+interface CatalogModuleOptions {
+    /** Adapter for `bundles` + `bundle_versions` persistence. */
+    bundleRepository: ProviderSpec<BundleRepository>;
+    /**
+     * Adapter for `marketing_projections` persistence. Optional — if
+     * omitted, MarketingProjectionsService + controller are not
+     * registered.
+     */
+    marketingProjectionRepository?: ProviderSpec<MarketingProjectionRepository>;
+    /**
+     * Adapter for `capability_/feature_/quota_catalog_entries` persistence
+     * (discovery review). Optional — if omitted,
+     * CatalogEntriesService + controller are not registered.
+     */
+    catalogEntryRepository?: ProviderSpec<CatalogEntryRepository>;
+    /**
+     * Adapter for `promotions` persistence. Optional — if
+     * omitted, PromotionsService + controller are not registered.
+     */
+    promotionRepository?: ProviderSpec<PromotionRepository>;
+    /**
+     * Adapter for `marketing_settings` persistence (
+     * `activeLocales`). Optional.
+     */
+    marketingSettingsRepository?: ProviderSpec<MarketingSettingsRepository>;
+    /**
+     * Auth-free pricing-page endpoint `GET /public/marketing-catalog`
+     *. Registered only when plan-, marketingProjection-
+     * and promotionRepository are set. `guards` is usually `[]`.
+     */
+    publicMarketingCatalog?: PublicMarketingCatalogOptions;
+    /**
+     * — adapter for `plans` master-record persistence.
+     * Optional; if omitted, PlansService + controller are not
+     * registered (apps without a need for the plan editor stay unchanged).
+     */
+    planRepository?: ProviderSpec<PlanRepository>;
+    /**
+     * Controller mount for `/admin/catalog/bundles` + `/admin/catalog/bundle-versions`.
+     * If omitted, the endpoints are not registered — but the services remain usable via DI.
+     */
+    controller?: CatalogControllerConfig;
+    /**
+     * Strict-mode mode. `blocking` (default, #12) throws HTTP 422 on
+     * violations and requires a DiscoverySnapshot; `warn-only` returns them
+     * only as a warning (transition until 100% discovery coverage).
+     */
+    strictModeCheckMode?: 'warn-only' | 'blocking';
+    /**
+     * Discovery→catalog auto-sync at boot (#12). Default `true` — as soon as a
+     * `catalogEntryRepository` is wired and a DiscoverySnapshot is available,
+     * `CatalogEntriesService` mirrors the discovery into the DB at startup. `false`
+     * disables the boot sync; the manual sync endpoint remains usable.
+     */
+    autoSyncDiscoveryAtBoot?: boolean;
+    /**
+     * Feature keys the catalog is deliberately allowed to carry without them
+     * existing in the discovery snapshot (marketed non-code features such as
+     * support SLAs, e.g. `['PRIORITY_SUPPORT']`). The strict-mode check excludes
+     * them from BUNDLE_/PLAN_FEATURE_UNKNOWN. Use sparingly.
+     */
+    marketedOnlyFeatures?: string[];
+    /**
+     * Optional consumer-curated FeatureUiRegistry (label/description/icon
+     * per feature — the same one passed to `PublicCatalogModule.forRoot`). The
+     * discovery auto-sync seeds EMPTY `FeatureCatalogEntry` fields
+     * (label/description/icon) from it at boot; SuperAdmin edits stay untouched. This
+     * makes `FeatureCatalogEntry` the SSOT for UI metadata.
+     */
+    featureUiRegistry?: FeatureUiRegistry;
+    /**
+     * Modules whose providers must be visible in the DI scope of this
+     * DynamicModule — typically: `AuthModule`/`PlatformAdminModule`, because the
+     * controller guards come from there.
+     */
+    imports?: Array<Type<unknown> | DynamicModule | Promise<DynamicModule> | ForwardReference>;
+    /** Additional providers registered in the DynamicModule itself. */
+    extraProviders?: Provider[];
+    /** Register the module globally — default `false`. */
+    global?: boolean;
+}
+declare class CatalogModule {
+    static forRoot(options: CatalogModuleOptions): DynamicModule;
+}
+
+export { type CatalogModuleOptions as C, type NewPaymentMethodsSource as N, type PublicMarketingCatalogOptions as P, type CatalogControllerConfig as a, CatalogModule as b, PublicMarketingCatalogService as c };