@i4e/invest4edu-access-core 0.8.0 → 0.9.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@i4e/invest4edu-access-core",
-  "version": "0.8.0",
+  "version": "0.9.0",
   "description": "Shared access-control primitives for NeoFindesk: tenant keystone, role capabilities, reportee tree, feature flags, and the unified access engine (registry schema, snapshot resolver, visibleWhen).",
   "type": "module",
   "exports": {

package/src/access-resolver.js

@@ -12,7 +12,7 @@
  * Design: TDD-unified-access-and-subscription.md §4
  */
 
-import { parentCodeOf } from "./access-schema.js";
+import { parentCodeOf, PRODUCT_UI_MODES } from "./access-schema.js";
 
 /** Reasons a feature can be locked, surfaced so the UI can distinguish upsell from hard-deny. */
 export const ENTITLEMENT_REASONS = Object.freeze({
@@ -219,6 +219,12 @@ export function resolveAccessSnapshot({
       actions: [],
       entitlement,
       tracking: !!f.tracking_enabled,
+      // How this SCREEN should present product-keyed things it renders — distinct from
+      // `products` above, which is *reachability* ("this screen exists only for these
+      // products"). The two are independent: Open Orders is product-agnostic yet renders
+      // product tabs that must be filtered, so the behaviour cannot be derived from the
+      // constraint. Default 'none' keeps every existing screen rendering exactly as today.
+      product_ui: PRODUCT_UI_MODES.includes(f.product_ui) ? f.product_ui : "none",
     };
 
     if (f.feature_type === "screen") allowedScreens.push(f);

package/src/access-schema.js

@@ -23,6 +23,27 @@ export const REGISTRY_STATUSES = Object.freeze(["active", "dormant", "retired"])
 /** Per-feature enforcement ladder (mirrors the platform's off→warn→enforce doctrine). */
 export const ROLLOUT_MODES = Object.freeze(["off", "warn", "enforce"]);
 
+/**
+ * How a SCREEN presents the product-keyed things it renders — product tiles, product tabs, the
+ * product column on Add Order, scheme lists.
+ *
+ * Deliberately separate from `products[]` on the same feature, which is *reachability* ("this
+ * screen exists only for these products"). The two are independent and neither implies the other:
+ * Open Orders is product-agnostic (`products: []`, it serves every product) yet renders product
+ * tabs that must be filtered; Product Setup is equally agnostic and should hide nothing. Same
+ * reachability, opposite presentation — so this cannot be derived, it has to be declared.
+ *
+ *   none      render everything. The default, so every existing screen is unchanged.
+ *   filter    hide product-keyed items outside the caller's scope. For transactional screens.
+ *   readonly  show everything, but out-of-scope items are not interactive. For configuration
+ *             screens, where hiding a product reads as "the catalogue is broken" rather than as
+ *             "you may not touch this".
+ *
+ * This is presentation only. The server-side gate is what actually refuses a write — hiding a
+ * tile has never stopped a POST.
+ */
+export const PRODUCT_UI_MODES = Object.freeze(["none", "filter", "readonly"]);
+
 /** Grant effect. `deny` at the user level replaces the old `revoked_pages`. */
 export const GRANT_EFFECTS = Object.freeze(["allow", "deny"]);
 
@@ -96,6 +117,7 @@ export const ACCESS_FEATURE_DEF = Object.freeze({
     status: { type: "String", enum: REGISTRY_STATUSES, default: "active", index: true },
     kill_switch: { type: "String", enum: ["on", "off"], default: "off" },
     rollout_mode: { type: "String", enum: ROLLOUT_MODES, default: "off" },
+    product_ui: { type: "String", enum: PRODUCT_UI_MODES, default: "none" },
 
     // Survives an entitlement block (login, billing/checkout, profile) — see design §7.4.
     always_available: { type: "Boolean", default: false },
@@ -139,6 +161,7 @@ export default {
   FEATURE_TYPES,
   REGISTRY_STATUSES,
   ROLLOUT_MODES,
+  PRODUCT_UI_MODES,
   GRANT_EFFECTS,
   GRANT_SUBJECTS,
   FEATURE_CODE_PATTERN,