@i4e/invest4edu-access-core 0.17.1 → 0.17.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@i4e/invest4edu-access-core",
-  "version": "0.17.1",
+  "version": "0.17.2",
   "description": "Shared access-control primitives for NeoFindesk: tenant keystone, role capabilities, reportee tree, feature flags, and the unified access engine (registry schema, snapshot resolver, visibleWhen).",
   "type": "module",
   "exports": {

package/src/entitlement-store.js

@@ -155,8 +155,20 @@ export function createEntitlementStore({ getDb, toObjectId = (v) => v, logger =
         subscription, entitlementRows: rows, featureCode, feature, used, credits, identity, bypass, now,
       });
 
-      // Carry what consume() needs, so it cannot recompute the period key and count against a
-      // different bucket than the one that was just checked.
+      /**
+       * Carry what consume() needs, so it cannot recompute the period key and count against a
+       * different bucket than the one that was just checked.
+       *
+       * The carried row takes its ceiling from the RESOLVED result, not from the raw plan row —
+       * because a per-subject override changes the decision without changing the row it came
+       * from. Carrying the raw row meant consume guarded on the plan's quota while the check had
+       * already passed on the overridden one: a subject granted 5 was refused at 2, and it
+       * surfaced as a counter that had simply stopped moving.
+       */
+      const effectiveRow = row
+        ? { ...row, quota: result.quota, overage_policy: result.overage_policy || row.overage_policy }
+        : null;
+
       return {
         ...result,
         carriedSubjectType: subjectType,
@@ -164,7 +176,7 @@ export function createEntitlementStore({ getDb, toObjectId = (v) => v, logger =
         carriedSubscriptionId: subscription._id,
         carriedPeriodStart: subscription.period_start || null,
         carriedIdentity: identity,
-        carriedRow: row,
+        carriedRow: effectiveRow,
       };
     } catch (e) {
       logger.warn(`[entitlement] resolve failed for ${featureCode}, allowing through: ${e.message}`);