@i4e/invest4edu-access-core 0.17.0 → 0.17.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@i4e/invest4edu-access-core",
-  "version": "0.17.0",
+  "version": "0.17.1",
   "description": "Shared access-control primitives for NeoFindesk: tenant keystone, role capabilities, reportee tree, feature flags, and the unified access engine (registry schema, snapshot resolver, visibleWhen).",
   "type": "module",
   "exports": {

package/src/entitlement.js

@@ -93,7 +93,20 @@ export function resolveEntitlementRow(rows = [], featureCode, now = new Date())
 
 /** Apply a per-firm override on top of the plan row. Concessions live on the subscription. */
 function withOverride(row, overrides = [], featureCode) {
-  const o = (overrides || []).find((x) => x && x.feature_code === featureCode);
+  /**
+   * Two shapes in the wild, and getting this wrong is silent AND total.
+   *
+   * Everything that WRITES an override — the model, the admin API, the Subscribers view — uses an
+   * object map keyed by feature code. This function only understood an array, so `.find` on the
+   * object threw, `resolveEntitlement` failed open, and the subscriber stopped being metered
+   * altogether. Setting a per-customer allowance therefore disabled that customer's counting —
+   * the opposite of the intent, with no error anywhere.
+   *
+   * Both shapes are accepted now. The map is the canonical one.
+   */
+  const o = Array.isArray(overrides)
+    ? overrides.find((x) => x && x.feature_code === featureCode)
+    : (overrides && typeof overrides === "object" ? overrides[featureCode] : null);
   if (!o) return row;
   const merged = { ...row };
   for (const k of ["unlocked", "quota", "period_granularity", "quota_scope", "overage_policy", "single_usage_price"]) {