@vritti/api-sdk 0.2.10 → 0.3.2

package/dist/catalog-resolver.cjs

@@ -0,0 +1,364 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/catalog-resolver/index.ts
+var catalog_resolver_exports = {};
+__export(catalog_resolver_exports, {
+  PLATFORMS: () => PLATFORMS,
+  SNAPSHOT_SCHEMA_VERSION: () => SNAPSHOT_SCHEMA_VERSION,
+  buildBuCatalog: () => buildBuCatalog,
+  buildBuMatrix: () => buildBuMatrix,
+  buildBuRoles: () => buildBuRoles,
+  composeRoleGrants: () => composeRoleGrants,
+  isBuLockedOnPlatform: () => isBuLockedOnPlatform,
+  isPlanMember: () => isPlanMember,
+  pickRouteForPlatform: () => pickRouteForPlatform,
+  resolveUserFeatures: () => resolveUserFeatures
+});
+module.exports = __toCommonJS(catalog_resolver_exports);
+
+// src/catalog-resolver/catalog.builder.ts
+function buildBuCatalog(snapshot, businessCode, planCode, buLocks, bucket) {
+  if (!businessCode) return [];
+  const business = snapshot.businesses?.[businessCode];
+  if (!business) return [];
+  const plan = planCode ? business.plans?.[planCode] : void 0;
+  const plans = business.plans ?? {};
+  const catalog = [];
+  for (const app of business.apps) {
+    const businessAppFeatures = app.features.map((code) => snapshot.features?.[code]).filter((f) => !!f && !!(f.microfrontends?.web || f.microfrontends?.mobile));
+    if (businessAppFeatures.length === 0) continue;
+    for (const feature of businessAppFeatures) {
+      const membership = plan?.unlockedPermissions?.[feature.code];
+      const web = feature.microfrontends?.web;
+      const mobile = feature.microfrontends?.mobile;
+      const permissions = buildPermissions(feature, businessCode, membership, buLocks, plans, bucket);
+      const memberOnBucket = membership?.[bucket] !== void 0;
+      const buPlatformLocked = buLocks?.[feature.code]?.[bucket] === null;
+      const locked = !memberOnBucket || buPlatformLocked;
+      const lockReason = !memberOnBucket ? "PLAN" : buPlatformLocked ? "BU" : null;
+      const unlockPlans = lockReason === "PLAN" ? plansIncludingFeature(plans, feature.code, bucket) : [];
+      catalog.push({
+        code: feature.code,
+        name: feature.name,
+        lucideIcon: feature.lucideIcon ?? null,
+        sfSymbol: feature.sfSymbol ?? "square",
+        materialSymbol: feature.materialSymbol ?? "square",
+        web: web ? {
+          remoteEntry: web.remoteEntry ?? "",
+          exposedModule: web.exposedModule ?? "",
+          routePrefix: web.routePrefix ?? ""
+        } : null,
+        mobile: mobile ? {
+          remoteEntryAndroid: mobile.remoteEntryAndroid ?? "",
+          remoteEntryIos: mobile.remoteEntryIos ?? "",
+          exposedModule: mobile.exposedModule ?? "",
+          routePrefix: mobile.routePrefix ?? ""
+        } : null,
+        appCode: app.code,
+        appName: app.name,
+        appIcon: app.icon ?? null,
+        appSortOrder: app.sortOrder ?? 0,
+        locked,
+        lockReason,
+        unlockPlans,
+        permissions
+      });
+    }
+  }
+  return catalog;
+}
+__name(buildBuCatalog, "buildBuCatalog");
+function isPlanMember(entry) {
+  return !!entry && (entry.web !== void 0 || entry.mobile !== void 0);
+}
+__name(isPlanMember, "isPlanMember");
+function isBuLockedOnPlatform(entry, platform, code) {
+  const locks = entry?.[platform];
+  return locks === null || (locks?.includes(code) ?? false);
+}
+__name(isBuLockedOnPlatform, "isBuLockedOnPlatform");
+function buildPermissions(feature, businessCode, planMembership, buLocks, plans, bucket) {
+  const planUnlocked = new Set(planMembership?.[bucket] ?? []);
+  const lockEntry = buLocks?.[feature.code];
+  return (feature.permissions ?? []).filter((p) => p.isGlobal || p.businesses.includes(businessCode)).map((p) => {
+    const planAllows = planUnlocked.has(p.code);
+    const buAllows = !isBuLockedOnPlatform(lockEntry, bucket, p.code);
+    const locked = !planAllows || !buAllows;
+    const lockReason = !planAllows ? "PLAN" : !buAllows ? "BU" : null;
+    const unlockPlans = lockReason === "PLAN" ? plansUnlockingPermission(plans, feature.code, p.code, bucket) : [];
+    return {
+      code: p.code,
+      locked,
+      lockReason,
+      unlockPlans
+    };
+  });
+}
+__name(buildPermissions, "buildPermissions");
+function plansUnlockingPermission(plans, featureCode, permCode, bucket) {
+  const result = [];
+  for (const [code, plan] of Object.entries(plans)) {
+    if (plan.unlockedPermissions?.[featureCode]?.[bucket]?.includes(permCode)) result.push(code);
+  }
+  return result;
+}
+__name(plansUnlockingPermission, "plansUnlockingPermission");
+function plansIncludingFeature(plans, featureCode, bucket) {
+  const result = [];
+  for (const [code, plan] of Object.entries(plans)) {
+    if (plan.unlockedPermissions?.[featureCode]?.[bucket] !== void 0) result.push(code);
+  }
+  return result;
+}
+__name(plansIncludingFeature, "plansIncludingFeature");
+function buildBuRoles(snapshot, businessCode) {
+  if (!businessCode) return [];
+  const business = snapshot.businesses?.[businessCode];
+  if (!business) return [];
+  return Object.values(business.roleTemplates ?? {});
+}
+__name(buildBuRoles, "buildBuRoles");
+
+// src/catalog-resolver/types.ts
+var PLATFORMS = [
+  "web",
+  "mobile"
+];
+var SNAPSHOT_SCHEMA_VERSION = 1;
+
+// src/catalog-resolver/bu-matrix.builder.ts
+function buildBuMatrix(snapshot, businessCode, planCode, buLocks) {
+  const business = businessCode ? snapshot.businesses?.[businessCode] : void 0;
+  const plans = business?.plans ?? {};
+  const plan = planCode ? plans[planCode] : void 0;
+  const planMeta = {
+    code: planCode ?? "",
+    name: plan?.name ?? planCode ?? ""
+  };
+  const locks = buLocks ?? {};
+  if (!business || !plan) return {
+    plan: planMeta,
+    apps: [],
+    locks
+  };
+  const apps = [];
+  for (const app of business.apps) {
+    let unlockedCount = 0;
+    let totalCount = 0;
+    const features = [];
+    for (const code of app.features) {
+      const feature = snapshot.features?.[code];
+      if (!feature) continue;
+      const platforms = PLATFORMS.filter((p) => !!feature.microfrontends?.[p]);
+      if (platforms.length === 0) continue;
+      const membership = plan.unlockedPermissions?.[code];
+      const featureInPlan = isPlanMember(membership);
+      const buEntry = buLocks?.[code];
+      const permissions = (feature.permissions ?? []).filter((p) => p.isGlobal || p.businesses.includes(businessCode ?? "")).map((p) => {
+        const cell = /* @__PURE__ */ __name((plat) => {
+          if (!platforms.includes(plat)) return null;
+          const planCodes = membership?.[plat];
+          const inPlan = featureInPlan && planCodes !== void 0 && planCodes.includes(p.code);
+          const selected = inPlan && !isBuLockedOnPlatform(buEntry, plat, p.code);
+          const availableIn = inPlan ? [] : plansUnlockingPerm(plans, code, p.code, plat, planCode);
+          totalCount += 1;
+          if (inPlan) unlockedCount += 1;
+          return {
+            inPlan,
+            selected,
+            availableIn
+          };
+        }, "cell");
+        return {
+          code: p.code,
+          label: p.label,
+          web: cell("web"),
+          mobile: cell("mobile")
+        };
+      });
+      features.push({
+        code: feature.code,
+        name: feature.name,
+        icon: feature.lucideIcon ?? null,
+        platforms,
+        inPlan: featureInPlan,
+        availableIn: featureInPlan ? [] : plansIncludingFeature2(plans, code, planCode),
+        permissions
+      });
+    }
+    apps.push({
+      code: app.code,
+      name: app.name,
+      icon: app.icon ?? null,
+      unlockedCount,
+      totalCount,
+      features
+    });
+  }
+  return {
+    plan: planMeta,
+    apps,
+    locks
+  };
+}
+__name(buildBuMatrix, "buildBuMatrix");
+function plansUnlockingPerm(plans, featureCode, permCode, platform, excludeCode) {
+  const names = [];
+  for (const [code, p] of Object.entries(plans)) {
+    if (code === excludeCode) continue;
+    if ((p.unlockedPermissions?.[featureCode]?.[platform] ?? []).includes(permCode)) names.push(p.name);
+  }
+  return names;
+}
+__name(plansUnlockingPerm, "plansUnlockingPerm");
+function plansIncludingFeature2(plans, featureCode, excludeCode) {
+  const names = [];
+  for (const [code, p] of Object.entries(plans)) {
+    if (code === excludeCode) continue;
+    if (isPlanMember(p.unlockedPermissions?.[featureCode])) names.push(p.name);
+  }
+  return names;
+}
+__name(plansIncludingFeature2, "plansIncludingFeature");
+
+// src/catalog-resolver/compose-role-grants.ts
+function unionBucket(base, add) {
+  if (base === void 0 && add === void 0) return void 0;
+  return [
+    .../* @__PURE__ */ new Set([
+      ...base ?? [],
+      ...add ?? []
+    ])
+  ];
+}
+__name(unionBucket, "unionBucket");
+function composeRoleGrants(params) {
+  const { baseFeatures, additions, revoked } = params;
+  const result = {};
+  const featureCodes = /* @__PURE__ */ new Set([
+    ...Object.keys(baseFeatures ?? {}),
+    ...Object.keys(additions ?? {})
+  ]);
+  for (const code of featureCodes) {
+    const base = baseFeatures?.[code] ?? {};
+    const add = additions?.[code] ?? {};
+    const revokes = revoked?.[code];
+    const composed = {};
+    for (const bucket of PLATFORMS) {
+      const merged = unionBucket(base[bucket], add[bucket]);
+      if (merged === void 0) continue;
+      const revoke = revokes?.[bucket];
+      if (revoke === null) continue;
+      composed[bucket] = revoke === void 0 ? merged : merged.filter((c) => !revoke.includes(c));
+    }
+    if (composed.web === void 0 && composed.mobile === void 0) continue;
+    result[code] = composed;
+  }
+  return result;
+}
+__name(composeRoleGrants, "composeRoleGrants");
+
+// src/catalog-resolver/resolve-user-features.ts
+function resolveUserFeatures(params) {
+  const { snapshot, businessCode, planCode, buLocks, roleFeatures, platform } = params;
+  const bucket = platform === "web" ? "web" : "mobile";
+  const catalog = buildBuCatalog(snapshot, businessCode, planCode, buLocks, bucket);
+  const catalogMap = new Map(catalog.map((f) => [
+    f.code,
+    f
+  ]));
+  const grantedFeatures = /* @__PURE__ */ new Map();
+  for (const [code, grant] of Object.entries(roleFeatures ?? {})) {
+    const granted = grant?.[bucket];
+    if (granted === void 0) continue;
+    if (!grantedFeatures.has(code)) grantedFeatures.set(code, /* @__PURE__ */ new Set());
+    for (const perm of granted) grantedFeatures.get(code)?.add(perm);
+  }
+  const features = [];
+  for (const [code, permsSet] of grantedFeatures) {
+    const catalogEntry = catalogMap.get(code);
+    if (!catalogEntry) continue;
+    const route = pickRouteForPlatform(catalogEntry, platform);
+    if (!route) continue;
+    const permByCode = new Map((catalogEntry.permissions ?? []).map((p) => [
+      p.code,
+      p
+    ]));
+    const grantedPerms = [
+      ...permsSet
+    ];
+    const lockedPermissions = grantedPerms.map((c) => permByCode.get(c)).filter((p) => !!p?.locked).map((p) => ({
+      code: p.code,
+      reason: p.lockReason ?? null,
+      unlockPlans: p.unlockPlans ?? []
+    }));
+    features.push({
+      code,
+      name: catalogEntry.name,
+      lucideIcon: catalogEntry.lucideIcon,
+      sfSymbol: catalogEntry.sfSymbol,
+      materialSymbol: catalogEntry.materialSymbol,
+      permissions: grantedPerms,
+      locked: catalogEntry.locked ?? false,
+      lockReason: catalogEntry.lockReason ?? null,
+      unlockPlans: catalogEntry.unlockPlans ?? [],
+      lockedPermissions,
+      route,
+      appCode: catalogEntry.appCode,
+      appName: catalogEntry.appName,
+      appIcon: catalogEntry.appIcon,
+      appSortOrder: catalogEntry.appSortOrder
+    });
+  }
+  return features;
+}
+__name(resolveUserFeatures, "resolveUserFeatures");
+function pickRouteForPlatform(entry, platform) {
+  if (platform === "ios" || platform === "android") {
+    if (!entry.mobile) return null;
+    return {
+      remoteEntry: platform === "ios" ? entry.mobile.remoteEntryIos : entry.mobile.remoteEntryAndroid,
+      exposedModule: entry.mobile.exposedModule,
+      routePrefix: entry.mobile.routePrefix
+    };
+  }
+  if (!entry.web) return null;
+  return {
+    remoteEntry: entry.web.remoteEntry,
+    exposedModule: entry.web.exposedModule,
+    routePrefix: entry.web.routePrefix
+  };
+}
+__name(pickRouteForPlatform, "pickRouteForPlatform");
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  PLATFORMS,
+  SNAPSHOT_SCHEMA_VERSION,
+  buildBuCatalog,
+  buildBuMatrix,
+  buildBuRoles,
+  composeRoleGrants,
+  isBuLockedOnPlatform,
+  isPlanMember,
+  pickRouteForPlatform,
+  resolveUserFeatures
+});
+//# sourceMappingURL=catalog-resolver.cjs.map

package/dist/catalog-resolver.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/catalog-resolver/index.ts","../src/catalog-resolver/catalog.builder.ts","../src/catalog-resolver/types.ts","../src/catalog-resolver/bu-matrix.builder.ts","../src/catalog-resolver/compose-role-grants.ts","../src/catalog-resolver/resolve-user-features.ts"],"sourcesContent":["// Catalog resolver — the single shared implementation of snapshot resolution (BU catalog, BU matrix, user features)\nexport {\n  type BuMatrix,\n  type BuMatrixApp,\n  type BuMatrixCell,\n  type BuMatrixFeature,\n  type BuMatrixPermission,\n  buildBuMatrix,\n} from './bu-matrix.builder';\nexport { buildBuCatalog, buildBuRoles, isBuLockedOnPlatform, isPlanMember } from './catalog.builder';\nexport { type ComposeRoleGrantsParams, composeRoleGrants, type RevokedGrants } from './compose-role-grants';\nexport {\n  type ClientPlatform,\n  type LockedPermission,\n  type PermissionFeature,\n  pickRouteForPlatform,\n  type ResolveUserFeaturesParams,\n  resolveUserFeatures,\n} from './resolve-user-features';\nexport {\n  type BuFeatureLocks,\n  type CatalogPermission,\n  type FeatureCatalogEntry,\n  type FeatureUnlocks,\n  type LockReason,\n  PLATFORMS,\n  type PlatformBucket,\n  type PlatformCodes,\n  type PlatformDenyCodes,\n  type RoleItem,\n  SNAPSHOT_SCHEMA_VERSION,\n  type SnapshotApp,\n  type SnapshotBusiness,\n  type SnapshotFeature,\n  type SnapshotMicrofrontendMobile,\n  type SnapshotMicrofrontends,\n  type SnapshotMicrofrontendWeb,\n  type SnapshotPermission,\n  type SnapshotPlan,\n  type SnapshotRoleTemplate,\n  type VersionSnapshot,\n} from './types';\n","import type {\n  BuFeatureLocks,\n  CatalogPermission,\n  FeatureCatalogEntry,\n  LockReason,\n  PlatformBucket,\n  PlatformCodes,\n  RoleItem,\n  SnapshotFeature,\n  SnapshotPlan,\n  VersionSnapshot,\n} from './types';\n\n// Builds the per-BU catalog for ONE platform bucket. The plan is the ceiling (membership + unlocks); buLocks is a\n// deny-list within the plan (undefined or absent entries ⇒ fully available). Each permission carries\n// locked + lockReason + unlockPlans, all evaluated against the requested bucket only.\nexport function buildBuCatalog(\n  snapshot: VersionSnapshot,\n  businessCode: string | undefined,\n  planCode: string | undefined,\n  buLocks: BuFeatureLocks | undefined,\n  bucket: PlatformBucket,\n): FeatureCatalogEntry[] {\n  if (!businessCode) return [];\n  const business = snapshot.businesses?.[businessCode];\n  if (!business) return [];\n  const plan = planCode ? business.plans?.[planCode] : undefined;\n  const plans = business.plans ?? {};\n\n  const catalog: FeatureCatalogEntry[] = [];\n  for (const app of business.apps) {\n    // The app's renderable features (each feature pins to exactly one app)\n    const businessAppFeatures = app.features\n      .map((code) => snapshot.features?.[code])\n      .filter((f): f is SnapshotFeature => !!f && !!(f.microfrontends?.web || f.microfrontends?.mobile));\n\n    if (businessAppFeatures.length === 0) continue;\n\n    // Emit EVERY business feature so a role's grant on a plan-omitted feature still resolves (rendered as a locked\n    // tile with an upsell) instead of vanishing. Core filters the catalog down to what the user's role grants.\n    for (const feature of businessAppFeatures) {\n      const membership = plan?.unlockedPermissions?.[feature.code];\n      // Routes are exposed wherever the feature SHIPS — membership never hides them. A role grant on a\n      // plan-omitted (feature or platform) still resolves as a locked tile with an upsell instead of vanishing.\n      const web = feature.microfrontends?.web;\n      const mobile = feature.microfrontends?.mobile;\n\n      const permissions = buildPermissions(feature, businessCode, membership, buLocks, plans, bucket);\n      // Feature-level lock is EXPLICIT, never derived from permission locks: the plan must include the feature\n      // on this bucket (membership) and the BU must not null-lock the platform. Permission-code locks only\n      // disable individual actions — the feature still renders (sidebar/tile stays enabled).\n      const memberOnBucket = membership?.[bucket] !== undefined;\n      const buPlatformLocked = buLocks?.[feature.code]?.[bucket] === null;\n      const locked = !memberOnBucket || buPlatformLocked;\n      const lockReason: LockReason | null = !memberOnBucket ? 'PLAN' : buPlatformLocked ? 'BU' : null;\n      const unlockPlans = lockReason === 'PLAN' ? plansIncludingFeature(plans, feature.code, bucket) : [];\n\n      catalog.push({\n        code: feature.code,\n        name: feature.name,\n        lucideIcon: feature.lucideIcon ?? null,\n        sfSymbol: feature.sfSymbol ?? 'square',\n        materialSymbol: feature.materialSymbol ?? 'square',\n        web: web\n          ? {\n              remoteEntry: web.remoteEntry ?? '',\n              exposedModule: web.exposedModule ?? '',\n              routePrefix: web.routePrefix ?? '',\n            }\n          : null,\n        mobile: mobile\n          ? {\n              remoteEntryAndroid: mobile.remoteEntryAndroid ?? '',\n              remoteEntryIos: mobile.remoteEntryIos ?? '',\n              exposedModule: mobile.exposedModule ?? '',\n              routePrefix: mobile.routePrefix ?? '',\n            }\n          : null,\n        appCode: app.code,\n        appName: app.name,\n        appIcon: app.icon ?? null,\n        appSortOrder: app.sortOrder ?? 0,\n        locked,\n        lockReason,\n        unlockPlans,\n        permissions,\n      });\n    }\n  }\n  return catalog;\n}\n\n// A feature is a plan member when its unlock entry exists on at least one platform (even with zero actions)\nexport function isPlanMember(entry: PlatformCodes | undefined): boolean {\n  return !!entry && (entry.web !== undefined || entry.mobile !== undefined);\n}\n\n// Per-platform BU-lock primitive: platform null locks the whole feature there; string[] locks those codes;\n// entry/platform absent ⇒ not locked\nexport function isBuLockedOnPlatform(\n  entry: BuFeatureLocks[string] | undefined,\n  platform: PlatformBucket,\n  code: string,\n): boolean {\n  const locks = entry?.[platform];\n  return locks === null || (locks?.includes(code) ?? false);\n}\n\n// A feature's business-scoped permissions, each tagged with locked + reason against the plan and the BU deny-list.\n// Everything is bucket-scoped: a web resolution ignores mobile unlocks and mobile locks entirely.\nfunction buildPermissions(\n  feature: SnapshotFeature,\n  businessCode: string,\n  planMembership: PlatformCodes | undefined,\n  buLocks: BuFeatureLocks | undefined,\n  plans: Record<string, SnapshotPlan>,\n  bucket: PlatformBucket,\n): CatalogPermission[] {\n  const planUnlocked = new Set(planMembership?.[bucket] ?? []);\n  const lockEntry = buLocks?.[feature.code];\n\n  return (feature.permissions ?? [])\n    .filter((p) => p.isGlobal || p.businesses.includes(businessCode))\n    .map((p) => {\n      const planAllows = planUnlocked.has(p.code);\n      const buAllows = !isBuLockedOnPlatform(lockEntry, bucket, p.code);\n      const locked = !planAllows || !buAllows;\n      // Plan is the ceiling, so a plan-lock wins over a BU-lock when reporting the reason\n      const lockReason: LockReason | null = !planAllows ? 'PLAN' : !buAllows ? 'BU' : null;\n      const unlockPlans = lockReason === 'PLAN' ? plansUnlockingPermission(plans, feature.code, p.code, bucket) : [];\n      return { code: p.code, locked, lockReason, unlockPlans };\n    });\n}\n\n// Plan codes (in the business) whose unlocked set includes this feature+permission on the bucket — upsell targets\nfunction plansUnlockingPermission(\n  plans: Record<string, SnapshotPlan>,\n  featureCode: string,\n  permCode: string,\n  bucket: PlatformBucket,\n): string[] {\n  const result: string[] = [];\n  for (const [code, plan] of Object.entries(plans)) {\n    if (plan.unlockedPermissions?.[featureCode]?.[bucket]?.includes(permCode)) result.push(code);\n  }\n  return result;\n}\n\n// Plan codes (in the business) that include this feature on the bucket — the feature-level upsell targets\nfunction plansIncludingFeature(\n  plans: Record<string, SnapshotPlan>,\n  featureCode: string,\n  bucket: PlatformBucket,\n): string[] {\n  const result: string[] = [];\n  for (const [code, plan] of Object.entries(plans)) {\n    if (plan.unlockedPermissions?.[featureCode]?.[bucket] !== undefined) result.push(code);\n  }\n  return result;\n}\n\n// The business's role templates as provisionable role items for core (identical shapes)\nexport function buildBuRoles(snapshot: VersionSnapshot, businessCode: string | undefined): RoleItem[] {\n  if (!businessCode) return [];\n  const business = snapshot.businesses?.[businessCode];\n  if (!business) return [];\n  return Object.values(business.roleTemplates ?? {});\n}\n","// ——— Platform algebra ———\n// Everything in this domain (plan unlocks, role grants, BU locks) is stored per UI platform bucket.\n\nexport type PlatformBucket = 'web' | 'mobile';\n\nexport const PLATFORMS: PlatformBucket[] = ['web', 'mobile'];\n\n// Allow entry: a bucket key present (even []) = membership on that platform; the array holds permission codes\nexport interface PlatformCodes {\n  web?: string[];\n  mobile?: string[];\n}\n\n// Deny entry: null locks/revokes the whole bucket, string[] the listed codes, absent = untouched\nexport interface PlatformDenyCodes {\n  web?: string[] | null;\n  mobile?: string[] | null;\n}\n\n// Code-keyed allow-list — plan unlocks, role grants, and matrix selections all share this exact shape\nexport type FeatureUnlocks = Record<string, PlatformCodes>;\n\n// BU deny-list overlay (same shape as role revokes) — feature absent = fully available within the plan\nexport type BuFeatureLocks = Record<string, PlatformDenyCodes>;\n\n// ——— Snapshot document shape — what gets stored in versions.snapshot and signed into the catalog license ———\n\nexport interface SnapshotPermission {\n  code: string;\n  label: string;\n  isGlobal: boolean;\n  businesses: string[];\n}\n// WEB microfrontend route — a single remote entry. All non-null: a WEB microfrontend row is\n// CHECK-constrained to have remoteEntry set, and the feature↔MF link's module/route are NOT NULL.\nexport interface SnapshotMicrofrontendWeb {\n  code: string;\n  name: string;\n  remoteEntry: string;\n  exposedModule: string;\n  routePrefix: string;\n}\n// MOBILE microfrontend route — per-OS remote entries (android + ios). All non-null: a MOBILE row is\n// CHECK-constrained to have both android + ios set, and the link's module/route are NOT NULL.\nexport interface SnapshotMicrofrontendMobile {\n  code: string;\n  name: string;\n  remoteEntryAndroid: string;\n  remoteEntryIos: string;\n  exposedModule: string;\n  routePrefix: string;\n}\n// Per-platform microfrontend routes — mirrors the PlatformCodes {web?, mobile?} bucket shape\nexport interface SnapshotMicrofrontends {\n  web?: SnapshotMicrofrontendWeb;\n  mobile?: SnapshotMicrofrontendMobile;\n}\nexport interface SnapshotFeature {\n  code: string;\n  name: string;\n  lucideIcon: string;\n  sfSymbol: string;\n  materialSymbol: string;\n  permissions: SnapshotPermission[];\n  microfrontends: SnapshotMicrofrontends;\n}\nexport interface SnapshotApp {\n  code: string;\n  name: string;\n  icon: string;\n  sortOrder: number;\n  features: string[];\n}\n// Also the shape provisioned to core as a role stub (the template's code is the durable org-role link)\nexport interface SnapshotRoleTemplate {\n  name: string;\n  code: string;\n  // featureCode -> per-platform granted permission codes\n  features: FeatureUnlocks;\n}\n// A plan is a lock overlay: the feature-permissions it UNLOCKS per platform (everything else renders locked).\n// Apps are derived from these.\nexport interface SnapshotPlan {\n  code: string;\n  name: string;\n  isCustom: boolean;\n  maxBusinessUnits: number | null;\n  unlockedPermissions: FeatureUnlocks;\n}\nexport interface SnapshotBusiness {\n  name: string;\n  apps: SnapshotApp[];\n  // Keyed by template code — the same key org roles link to\n  roleTemplates: Record<string, SnapshotRoleTemplate>;\n  plans: Record<string, SnapshotPlan>;\n}\nexport interface VersionSnapshot {\n  // Shape revision hook for future migrations (absent = pre-versioned snapshots)\n  schemaVersion?: number;\n  features: Record<string, SnapshotFeature>;\n  businesses: Record<string, SnapshotBusiness>;\n}\n\n// The current snapshot shape revision written by the cloud snapshot builder\nexport const SNAPSHOT_SCHEMA_VERSION = 1;\n\n// Why a permission/feature is locked: PLAN (org's plan doesn't unlock it) or BU (this BU restricts it)\nexport type LockReason = 'PLAN' | 'BU';\n\n// A catalog permission: its lock state + reason + (when plan-locked) the plans that would unlock it (upsell)\nexport interface CatalogPermission {\n  code: string;\n  locked: boolean;\n  lockReason: LockReason | null;\n  unlockPlans: string[];\n}\n\n// One resolved feature of the per-BU catalog\nexport interface FeatureCatalogEntry {\n  code: string;\n  name: string;\n  lucideIcon: string | null;\n  sfSymbol: string;\n  materialSymbol: string;\n  // Per-platform MF route — symmetric { web?, mobile? }; null when the feature has no MF for that platform.\n  web: {\n    remoteEntry: string;\n    exposedModule: string;\n    routePrefix: string;\n  } | null;\n  mobile: {\n    remoteEntryAndroid: string;\n    remoteEntryIos: string;\n    exposedModule: string;\n    routePrefix: string;\n  } | null;\n  appCode: string;\n  appName: string;\n  appIcon: string | null;\n  appSortOrder: number;\n  // Feature-level lock is explicit — plan non-membership or a BU whole-platform lock (never derived from\n  // permission-code locks, which only disable individual actions)\n  locked: boolean;\n  lockReason: LockReason | null;\n  // Plans (in the business) that would unlock the feature when it's plan-locked — for upsell\n  unlockPlans: string[];\n  permissions: CatalogPermission[];\n}\n\n// Role template pushed to core for provisioning — identical to the snapshot template shape\nexport type RoleItem = SnapshotRoleTemplate;\n","import { isBuLockedOnPlatform, isPlanMember } from './catalog.builder';\nimport { type BuFeatureLocks, PLATFORMS, type PlatformBucket, type SnapshotPlan, type VersionSnapshot } from './types';\n\n// A single (permission, platform) cell. null ⇒ the feature doesn't ship on that platform.\nexport interface BuMatrixCell {\n  inPlan: boolean; // the org's plan unlocks this (feature, platform, permission)\n  selected: boolean; // the BU currently has it enabled (never true when !inPlan)\n  availableIn: string[]; // other plan names that unlock it — upsell; only when !inPlan\n}\n\nexport interface BuMatrixPermission {\n  code: string;\n  label: string;\n  web: BuMatrixCell | null;\n  mobile: BuMatrixCell | null;\n}\n\nexport interface BuMatrixFeature {\n  code: string;\n  name: string;\n  icon: string | null;\n  platforms: PlatformBucket[]; // platforms the feature ships on\n  inPlan: boolean; // FEATURE-level: is this feature a member of the org's plan at all?\n  availableIn: string[]; // plans that include the feature — upsell when !inPlan\n  permissions: BuMatrixPermission[];\n}\n\nexport interface BuMatrixApp {\n  code: string;\n  name: string;\n  icon: string | null;\n  unlockedCount: number; // (feature × platform × permission) cells the plan unlocks\n  totalCount: number; // all possible cells in this app\n  features: BuMatrixFeature[];\n}\n\nexport interface BuMatrix {\n  plan: { code: string; name: string };\n  apps: BuMatrixApp[];\n  // The stored BU deny-list verbatim — lock editors seed from this, never from derived selected flags\n  locks: BuFeatureLocks;\n}\n\n// Builds the full apps/features/permissions matrix from the version snapshot — NOT filtered to plan members.\n// Every app/feature/permission renders; plan-locked items carry inPlan=false + availableIn (the upsell plans).\n// buLocks layers the BU's deny-list within the plan (undefined or absent entries ⇒ the full plan is selected).\nexport function buildBuMatrix(\n  snapshot: VersionSnapshot,\n  businessCode: string | undefined,\n  planCode: string | undefined,\n  buLocks: BuFeatureLocks | undefined,\n): BuMatrix {\n  const business = businessCode ? snapshot.businesses?.[businessCode] : undefined;\n  const plans = business?.plans ?? {};\n  const plan = planCode ? plans[planCode] : undefined;\n  const planMeta = { code: planCode ?? '', name: plan?.name ?? planCode ?? '' };\n  const locks = buLocks ?? {};\n  if (!business || !plan) return { plan: planMeta, apps: [], locks };\n\n  const apps: BuMatrixApp[] = [];\n  for (const app of business.apps) {\n    let unlockedCount = 0;\n    let totalCount = 0;\n    const features: BuMatrixFeature[] = [];\n\n    for (const code of app.features) {\n      const feature = snapshot.features?.[code];\n      if (!feature) continue;\n      const platforms = PLATFORMS.filter((p) => !!feature.microfrontends?.[p]);\n      if (platforms.length === 0) continue;\n\n      const membership = plan.unlockedPermissions?.[code];\n      const featureInPlan = isPlanMember(membership);\n      const buEntry = buLocks?.[code];\n\n      const permissions: BuMatrixPermission[] = (feature.permissions ?? [])\n        .filter((p) => p.isGlobal || p.businesses.includes(businessCode ?? ''))\n        .map((p) => {\n          const cell = (plat: PlatformBucket): BuMatrixCell | null => {\n            if (!platforms.includes(plat)) return null;\n            const planCodes = membership?.[plat];\n            const inPlan = featureInPlan && planCodes !== undefined && planCodes.includes(p.code);\n            // Deny-list: an in-plan cell is selected unless the BU locks it on this platform\n            const selected = inPlan && !isBuLockedOnPlatform(buEntry, plat, p.code);\n            const availableIn = inPlan ? [] : plansUnlockingPerm(plans, code, p.code, plat, planCode);\n            totalCount += 1;\n            if (inPlan) unlockedCount += 1;\n            return { inPlan, selected, availableIn };\n          };\n          return { code: p.code, label: p.label, web: cell('web'), mobile: cell('mobile') };\n        });\n\n      features.push({\n        code: feature.code,\n        name: feature.name,\n        icon: feature.lucideIcon ?? null,\n        platforms,\n        inPlan: featureInPlan,\n        availableIn: featureInPlan ? [] : plansIncludingFeature(plans, code, planCode),\n        permissions,\n      });\n    }\n\n    apps.push({ code: app.code, name: app.name, icon: app.icon ?? null, unlockedCount, totalCount, features });\n  }\n\n  return { plan: planMeta, apps, locks };\n}\n\n// Names of other plans (excluding the org's own) that unlock this feature+permission on the given platform\nfunction plansUnlockingPerm(\n  plans: Record<string, SnapshotPlan>,\n  featureCode: string,\n  permCode: string,\n  platform: PlatformBucket,\n  excludeCode: string | undefined,\n): string[] {\n  const names: string[] = [];\n  for (const [code, p] of Object.entries(plans)) {\n    if (code === excludeCode) continue;\n    if ((p.unlockedPermissions?.[featureCode]?.[platform] ?? []).includes(permCode)) names.push(p.name);\n  }\n  return names;\n}\n\n// Names of other plans (excluding the org's own) that include this feature at all (membership) — feature-level upsell\nfunction plansIncludingFeature(\n  plans: Record<string, SnapshotPlan>,\n  featureCode: string,\n  excludeCode: string | undefined,\n): string[] {\n  const names: string[] = [];\n  for (const [code, p] of Object.entries(plans)) {\n    if (code === excludeCode) continue;\n    if (isPlanMember(p.unlockedPermissions?.[featureCode])) names.push(p.name);\n  }\n  return names;\n}\n","import { type FeatureUnlocks, PLATFORMS, type PlatformCodes, type PlatformDenyCodes } from './types';\n\n// Grants removed from a base template — same deny algebra as BU locks\nexport type RevokedGrants = Record<string, PlatformDenyCodes>;\n\nexport interface ComposeRoleGrantsParams {\n  baseFeatures: FeatureUnlocks | undefined;\n  additions: FeatureUnlocks;\n  revoked: RevokedGrants | undefined;\n}\n\n// Deduped union of two optional code lists — undefined on both sides means no platform membership\nfunction unionBucket(base: string[] | undefined, add: string[] | undefined): string[] | undefined {\n  if (base === undefined && add === undefined) return undefined;\n  return [...new Set([...(base ?? []), ...(add ?? [])])];\n}\n\n// Composes a based custom role's effective grants: merge(base ∪ additions) − revoked (design doc §10).\n// Platform membership survives a code revoke (may leave [] = view-only); a null revoke removes the\n// platform entirely; a feature with no surviving platform disappears. Inputs are never mutated.\nexport function composeRoleGrants(params: ComposeRoleGrantsParams): FeatureUnlocks {\n  const { baseFeatures, additions, revoked } = params;\n\n  const result: FeatureUnlocks = {};\n  const featureCodes = new Set([...Object.keys(baseFeatures ?? {}), ...Object.keys(additions ?? {})]);\n\n  for (const code of featureCodes) {\n    const base = baseFeatures?.[code] ?? {};\n    const add = additions?.[code] ?? {};\n    const revokes = revoked?.[code];\n\n    const composed: PlatformCodes = {};\n    for (const bucket of PLATFORMS) {\n      const merged = unionBucket(base[bucket], add[bucket]);\n      if (merged === undefined) continue;\n      const revoke = revokes?.[bucket];\n      // null revokes the whole platform (membership + all codes); string[] subtracts codes but keeps membership\n      if (revoke === null) continue;\n      composed[bucket] = revoke === undefined ? merged : merged.filter((c) => !revoke.includes(c));\n    }\n\n    // A feature with no surviving platform membership disappears from the effective set\n    if (composed.web === undefined && composed.mobile === undefined) continue;\n    result[code] = composed;\n  }\n\n  return result;\n}\n","import { buildBuCatalog } from './catalog.builder';\nimport type { BuFeatureLocks, FeatureUnlocks, LockReason, PlatformBucket, VersionSnapshot } from './types';\n\n// Client surface requesting resolution — web picks the WEB route block, ios/android pick the MOBILE block per-OS\nexport type ClientPlatform = 'web' | 'ios' | 'android';\n\n// A granted permission that is locked, with why and which plans would unlock it (for upsell)\nexport interface LockedPermission {\n  code: string;\n  reason: LockReason | null;\n  unlockPlans: string[];\n}\n\nexport interface PermissionFeature {\n  code: string;\n  name: string;\n  lucideIcon: string | null;\n  sfSymbol: string;\n  materialSymbol: string;\n  permissions: string[];\n  // Lock overlay (for upsell): feature-level locked + reason + unlock plans, and the granted-but-locked permissions\n  locked: boolean;\n  lockReason: LockReason | null;\n  unlockPlans: string[];\n  lockedPermissions: LockedPermission[];\n  route: {\n    remoteEntry: string;\n    exposedModule: string;\n    routePrefix: string;\n  };\n  appCode: string;\n  appName: string;\n  appIcon: string | null;\n  appSortOrder: number;\n}\n\nexport interface ResolveUserFeaturesParams {\n  snapshot: VersionSnapshot;\n  businessCode: string;\n  planCode: string | undefined;\n  // undefined = nothing BU-locked (the full plan is available)\n  buLocks: BuFeatureLocks | undefined;\n  // The user's composed role grants: featureCode -> { web?: [permCode…], mobile?: [permCode…] }\n  roleFeatures: FeatureUnlocks;\n  platform: ClientPlatform;\n}\n\n// Resolves the features + MF config a user sees at a BU: plan ∧ BU catalog intersected with the role's grants.\n// platform picks which microfrontend block flows into PermissionFeature.route:\n//   'web'     → WEB block (remoteEntry + exposedModule + routePrefix)\n//   'ios'     → MOBILE block, remoteEntry = remoteEntryIos\n//   'android' → MOBILE block, remoteEntry = remoteEntryAndroid\n// Features missing the requested platform's block are filtered out.\nexport function resolveUserFeatures(params: ResolveUserFeaturesParams): PermissionFeature[] {\n  const { snapshot, businessCode, planCode, buLocks, roleFeatures, platform } = params;\n\n  // Plan unlocks, BU locks, and role grants are all stored per platform; resolve only the requesting\n  // surface's bucket. web → 'web'; ios/android → 'mobile'. (platform still drives the per-OS route below.)\n  const bucket: PlatformBucket = platform === 'web' ? 'web' : 'mobile';\n\n  // Plan ∧ BU overlay for this bucket — emits EVERY business feature (plan non-members come out fully locked)\n  const catalog = buildBuCatalog(snapshot, businessCode, planCode, buLocks, bucket);\n  const catalogMap = new Map(catalog.map((f) => [f.code, f]));\n\n  // Granted permission set per feature, taking only this platform's grants\n  const grantedFeatures = new Map<string, Set<string>>();\n  for (const [code, grant] of Object.entries(roleFeatures ?? {})) {\n    // Membership is the gate: undefined = not a member on this platform; [] = member with no actions (view-only)\n    const granted = grant?.[bucket];\n    if (granted === undefined) continue;\n    if (!grantedFeatures.has(code)) grantedFeatures.set(code, new Set());\n    for (const perm of granted) grantedFeatures.get(code)?.add(perm);\n  }\n\n  // Cross-reference the granted features with the catalog to build the response\n  const features: PermissionFeature[] = [];\n  for (const [code, permsSet] of grantedFeatures) {\n    const catalogEntry = catalogMap.get(code);\n    if (!catalogEntry) continue;\n\n    const route = pickRouteForPlatform(catalogEntry, platform);\n    // Feature isn't published to this platform — omit so client doesn't see an unloadable tile.\n    if (!route) continue;\n\n    // Plan/BU lock a subset of permissions; surface which GRANTED ones are locked + why + how to unlock (upsell)\n    const permByCode = new Map((catalogEntry.permissions ?? []).map((p) => [p.code, p]));\n    const grantedPerms = [...permsSet];\n    const lockedPermissions: LockedPermission[] = grantedPerms\n      .map((c) => permByCode.get(c))\n      .filter((p): p is NonNullable<typeof p> => !!p?.locked)\n      .map((p) => ({ code: p.code, reason: p.lockReason ?? null, unlockPlans: p.unlockPlans ?? [] }));\n\n    features.push({\n      code,\n      name: catalogEntry.name,\n      lucideIcon: catalogEntry.lucideIcon,\n      sfSymbol: catalogEntry.sfSymbol,\n      materialSymbol: catalogEntry.materialSymbol,\n      permissions: grantedPerms,\n      locked: catalogEntry.locked ?? false,\n      lockReason: catalogEntry.lockReason ?? null,\n      unlockPlans: catalogEntry.unlockPlans ?? [],\n      lockedPermissions,\n      route,\n      appCode: catalogEntry.appCode,\n      appName: catalogEntry.appName,\n      appIcon: catalogEntry.appIcon,\n      appSortOrder: catalogEntry.appSortOrder,\n    });\n  }\n\n  return features;\n}\n\n// Selects the route block from a catalog entry for the requested platform.\n// Returns null when the catalog entry doesn't publish to that platform.\nexport function pickRouteForPlatform(\n  entry: {\n    web: {\n      remoteEntry: string;\n      exposedModule: string;\n      routePrefix: string;\n    } | null;\n    mobile: {\n      remoteEntryAndroid: string;\n      remoteEntryIos: string;\n      exposedModule: string;\n      routePrefix: string;\n    } | null;\n  },\n  platform: ClientPlatform,\n): { remoteEntry: string; exposedModule: string; routePrefix: string } | null {\n  if (platform === 'ios' || platform === 'android') {\n    if (!entry.mobile) return null;\n    return {\n      remoteEntry: platform === 'ios' ? entry.mobile.remoteEntryIos : entry.mobile.remoteEntryAndroid,\n      exposedModule: entry.mobile.exposedModule,\n      routePrefix: entry.mobile.routePrefix,\n    };\n  }\n  // Web\n  if (!entry.web) return null;\n  return {\n    remoteEntry: entry.web.remoteEntry,\n    exposedModule: entry.web.exposedModule,\n    routePrefix: entry.web.routePrefix,\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAAA;;;;;;;;;;;;;;;;ACgBO,SAASA,eACdC,UACAC,cACAC,UACAC,SACAC,QAAsB;AAEtB,MAAI,CAACH,aAAc,QAAO,CAAA;AAC1B,QAAMI,WAAWL,SAASM,aAAaL,YAAAA;AACvC,MAAI,CAACI,SAAU,QAAO,CAAA;AACtB,QAAME,OAAOL,WAAWG,SAASG,QAAQN,QAAAA,IAAYO;AACrD,QAAMD,QAAQH,SAASG,SAAS,CAAC;AAEjC,QAAME,UAAiC,CAAA;AACvC,aAAWC,OAAON,SAASO,MAAM;AAE/B,UAAMC,sBAAsBF,IAAIG,SAC7BC,IAAI,CAACC,SAAShB,SAASc,WAAWE,IAAAA,CAAK,EACvCC,OAAO,CAACC,MAA4B,CAAC,CAACA,KAAK,CAAC,EAAEA,EAAEC,gBAAgBC,OAAOF,EAAEC,gBAAgBE,OAAK;AAEjG,QAAIR,oBAAoBS,WAAW,EAAG;AAItC,eAAWC,WAAWV,qBAAqB;AACzC,YAAMW,aAAajB,MAAMkB,sBAAsBF,QAAQP,IAAI;AAG3D,YAAMI,MAAMG,QAAQJ,gBAAgBC;AACpC,YAAMC,SAASE,QAAQJ,gBAAgBE;AAEvC,YAAMK,cAAcC,iBAAiBJ,SAAStB,cAAcuB,YAAYrB,SAASK,OAAOJ,MAAAA;AAIxF,YAAMwB,iBAAiBJ,aAAapB,MAAAA,MAAYK;AAChD,YAAMoB,mBAAmB1B,UAAUoB,QAAQP,IAAI,IAAIZ,MAAAA,MAAY;AAC/D,YAAM0B,SAAS,CAACF,kBAAkBC;AAClC,YAAME,aAAgC,CAACH,iBAAiB,SAASC,mBAAmB,OAAO;AAC3F,YAAMG,cAAcD,eAAe,SAASE,sBAAsBzB,OAAOe,QAAQP,MAAMZ,MAAAA,IAAU,CAAA;AAEjGM,cAAQwB,KAAK;QACXlB,MAAMO,QAAQP;QACdmB,MAAMZ,QAAQY;QACdC,YAAYb,QAAQa,cAAc;QAClCC,UAAUd,QAAQc,YAAY;QAC9BC,gBAAgBf,QAAQe,kBAAkB;QAC1ClB,KAAKA,MACD;UACEmB,aAAanB,IAAImB,eAAe;UAChCC,eAAepB,IAAIoB,iBAAiB;UACpCC,aAAarB,IAAIqB,eAAe;QAClC,IACA;QACJpB,QAAQA,SACJ;UACEqB,oBAAoBrB,OAAOqB,sBAAsB;UACjDC,gBAAgBtB,OAAOsB,kBAAkB;UACzCH,eAAenB,OAAOmB,iBAAiB;UACvCC,aAAapB,OAAOoB,eAAe;QACrC,IACA;QACJG,SAASjC,IAAIK;QACb6B,SAASlC,IAAIwB;QACbW,SAASnC,IAAIoC,QAAQ;QACrBC,cAAcrC,IAAIsC,aAAa;QAC/BnB;QACAC;QACAC;QACAN;MACF,CAAA;IACF;EACF;AACA,SAAOhB;AACT;AA1EgBX;AA6ET,SAASmD,aAAaC,OAAgC;AAC3D,SAAO,CAAC,CAACA,UAAUA,MAAM/B,QAAQX,UAAa0C,MAAM9B,WAAWZ;AACjE;AAFgByC;AAMT,SAASE,qBACdD,OACAE,UACArC,MAAY;AAEZ,QAAMsC,QAAQH,QAAQE,QAAAA;AACtB,SAAOC,UAAU,SAASA,OAAOC,SAASvC,IAAAA,KAAS;AACrD;AAPgBoC;AAWhB,SAASzB,iBACPJ,SACAtB,cACAuD,gBACArD,SACAK,OACAJ,QAAsB;AAEtB,QAAMqD,eAAe,IAAIC,IAAIF,iBAAiBpD,MAAAA,KAAW,CAAA,CAAE;AAC3D,QAAMuD,YAAYxD,UAAUoB,QAAQP,IAAI;AAExC,UAAQO,QAAQG,eAAe,CAAA,GAC5BT,OAAO,CAAC2C,MAAMA,EAAEC,YAAYD,EAAEtD,WAAWiD,SAAStD,YAAAA,CAAAA,EAClDc,IAAI,CAAC6C,MAAAA;AACJ,UAAME,aAAaL,aAAaM,IAAIH,EAAE5C,IAAI;AAC1C,UAAMgD,WAAW,CAACZ,qBAAqBO,WAAWvD,QAAQwD,EAAE5C,IAAI;AAChE,UAAMc,SAAS,CAACgC,cAAc,CAACE;AAE/B,UAAMjC,aAAgC,CAAC+B,aAAa,SAAS,CAACE,WAAW,OAAO;AAChF,UAAMhC,cAAcD,eAAe,SAASkC,yBAAyBzD,OAAOe,QAAQP,MAAM4C,EAAE5C,MAAMZ,MAAAA,IAAU,CAAA;AAC5G,WAAO;MAAEY,MAAM4C,EAAE5C;MAAMc;MAAQC;MAAYC;IAAY;EACzD,CAAA;AACJ;AAtBSL;AAyBT,SAASsC,yBACPzD,OACA0D,aACAC,UACA/D,QAAsB;AAEtB,QAAMgE,SAAmB,CAAA;AACzB,aAAW,CAACpD,MAAMT,IAAAA,KAAS8D,OAAOC,QAAQ9D,KAAAA,GAAQ;AAChD,QAAID,KAAKkB,sBAAsByC,WAAAA,IAAe9D,MAAAA,GAASmD,SAASY,QAAAA,EAAWC,QAAOlC,KAAKlB,IAAAA;EACzF;AACA,SAAOoD;AACT;AAXSH;AAcT,SAAShC,sBACPzB,OACA0D,aACA9D,QAAsB;AAEtB,QAAMgE,SAAmB,CAAA;AACzB,aAAW,CAACpD,MAAMT,IAAAA,KAAS8D,OAAOC,QAAQ9D,KAAAA,GAAQ;AAChD,QAAID,KAAKkB,sBAAsByC,WAAAA,IAAe9D,MAAAA,MAAYK,OAAW2D,QAAOlC,KAAKlB,IAAAA;EACnF;AACA,SAAOoD;AACT;AAVSnC;AAaF,SAASsC,aAAavE,UAA2BC,cAAgC;AACtF,MAAI,CAACA,aAAc,QAAO,CAAA;AAC1B,QAAMI,WAAWL,SAASM,aAAaL,YAAAA;AACvC,MAAI,CAACI,SAAU,QAAO,CAAA;AACtB,SAAOgE,OAAOG,OAAOnE,SAASoE,iBAAiB,CAAC,CAAA;AAClD;AALgBF;;;AC7JT,IAAMG,YAA8B;EAAC;EAAO;;AAmG5C,IAAMC,0BAA0B;;;AC1DhC,SAASC,cACdC,UACAC,cACAC,UACAC,SAAmC;AAEnC,QAAMC,WAAWH,eAAeD,SAASK,aAAaJ,YAAAA,IAAgBK;AACtE,QAAMC,QAAQH,UAAUG,SAAS,CAAC;AAClC,QAAMC,OAAON,WAAWK,MAAML,QAAAA,IAAYI;AAC1C,QAAMG,WAAW;IAAEC,MAAMR,YAAY;IAAIS,MAAMH,MAAMG,QAAQT,YAAY;EAAG;AAC5E,QAAMU,QAAQT,WAAW,CAAC;AAC1B,MAAI,CAACC,YAAY,CAACI,KAAM,QAAO;IAAEA,MAAMC;IAAUI,MAAM,CAAA;IAAID;EAAM;AAEjE,QAAMC,OAAsB,CAAA;AAC5B,aAAWC,OAAOV,SAASS,MAAM;AAC/B,QAAIE,gBAAgB;AACpB,QAAIC,aAAa;AACjB,UAAMC,WAA8B,CAAA;AAEpC,eAAWP,QAAQI,IAAIG,UAAU;AAC/B,YAAMC,UAAUlB,SAASiB,WAAWP,IAAAA;AACpC,UAAI,CAACQ,QAAS;AACd,YAAMC,YAAYC,UAAUC,OAAO,CAACC,MAAM,CAAC,CAACJ,QAAQK,iBAAiBD,CAAAA,CAAE;AACvE,UAAIH,UAAUK,WAAW,EAAG;AAE5B,YAAMC,aAAajB,KAAKkB,sBAAsBhB,IAAAA;AAC9C,YAAMiB,gBAAgBC,aAAaH,UAAAA;AACnC,YAAMI,UAAU1B,UAAUO,IAAAA;AAE1B,YAAMoB,eAAqCZ,QAAQY,eAAe,CAAA,GAC/DT,OAAO,CAACC,MAAMA,EAAES,YAAYT,EAAEjB,WAAW2B,SAAS/B,gBAAgB,EAAA,CAAA,EAClEgC,IAAI,CAACX,MAAAA;AACJ,cAAMY,OAAO,wBAACC,SAAAA;AACZ,cAAI,CAAChB,UAAUa,SAASG,IAAAA,EAAO,QAAO;AACtC,gBAAMC,YAAYX,aAAaU,IAAAA;AAC/B,gBAAME,SAASV,iBAAiBS,cAAc9B,UAAa8B,UAAUJ,SAASV,EAAEZ,IAAI;AAEpF,gBAAM4B,WAAWD,UAAU,CAACE,qBAAqBV,SAASM,MAAMb,EAAEZ,IAAI;AACtE,gBAAM8B,cAAcH,SAAS,CAAA,IAAKI,mBAAmBlC,OAAOG,MAAMY,EAAEZ,MAAMyB,MAAMjC,QAAAA;AAChFc,wBAAc;AACd,cAAIqB,OAAQtB,kBAAiB;AAC7B,iBAAO;YAAEsB;YAAQC;YAAUE;UAAY;QACzC,GAVa;AAWb,eAAO;UAAE9B,MAAMY,EAAEZ;UAAMgC,OAAOpB,EAAEoB;UAAOC,KAAKT,KAAK,KAAA;UAAQU,QAAQV,KAAK,QAAA;QAAU;MAClF,CAAA;AAEFjB,eAAS4B,KAAK;QACZnC,MAAMQ,QAAQR;QACdC,MAAMO,QAAQP;QACdmC,MAAM5B,QAAQ6B,cAAc;QAC5B5B;QACAkB,QAAQV;QACRa,aAAab,gBAAgB,CAAA,IAAKqB,uBAAsBzC,OAAOG,MAAMR,QAAAA;QACrE4B;MACF,CAAA;IACF;AAEAjB,SAAKgC,KAAK;MAAEnC,MAAMI,IAAIJ;MAAMC,MAAMG,IAAIH;MAAMmC,MAAMhC,IAAIgC,QAAQ;MAAM/B;MAAeC;MAAYC;IAAS,CAAA;EAC1G;AAEA,SAAO;IAAET,MAAMC;IAAUI;IAAMD;EAAM;AACvC;AA7DgBb;AAgEhB,SAAS0C,mBACPlC,OACA0C,aACAC,UACAC,UACAC,aAA+B;AAE/B,QAAMC,QAAkB,CAAA;AACxB,aAAW,CAAC3C,MAAMY,CAAAA,KAAMgC,OAAOC,QAAQhD,KAAAA,GAAQ;AAC7C,QAAIG,SAAS0C,YAAa;AAC1B,SAAK9B,EAAEI,sBAAsBuB,WAAAA,IAAeE,QAAAA,KAAa,CAAA,GAAInB,SAASkB,QAAAA,EAAWG,OAAMR,KAAKvB,EAAEX,IAAI;EACpG;AACA,SAAO0C;AACT;AAbSZ;AAgBT,SAASO,uBACPzC,OACA0C,aACAG,aAA+B;AAE/B,QAAMC,QAAkB,CAAA;AACxB,aAAW,CAAC3C,MAAMY,CAAAA,KAAMgC,OAAOC,QAAQhD,KAAAA,GAAQ;AAC7C,QAAIG,SAAS0C,YAAa;AAC1B,QAAIxB,aAAaN,EAAEI,sBAAsBuB,WAAAA,CAAY,EAAGI,OAAMR,KAAKvB,EAAEX,IAAI;EAC3E;AACA,SAAO0C;AACT;AAXSL,OAAAA,wBAAAA;;;AClHT,SAASQ,YAAYC,MAA4BC,KAAyB;AACxE,MAAID,SAASE,UAAaD,QAAQC,OAAW,QAAOA;AACpD,SAAO;OAAI,oBAAIC,IAAI;SAAKH,QAAQ,CAAA;SAASC,OAAO,CAAA;KAAI;;AACtD;AAHSF;AAQF,SAASK,kBAAkBC,QAA+B;AAC/D,QAAM,EAAEC,cAAcC,WAAWC,QAAO,IAAKH;AAE7C,QAAMI,SAAyB,CAAC;AAChC,QAAMC,eAAe,oBAAIP,IAAI;OAAIQ,OAAOC,KAAKN,gBAAgB,CAAC,CAAA;OAAOK,OAAOC,KAAKL,aAAa,CAAC,CAAA;GAAG;AAElG,aAAWM,QAAQH,cAAc;AAC/B,UAAMV,OAAOM,eAAeO,IAAAA,KAAS,CAAC;AACtC,UAAMZ,MAAMM,YAAYM,IAAAA,KAAS,CAAC;AAClC,UAAMC,UAAUN,UAAUK,IAAAA;AAE1B,UAAME,WAA0B,CAAC;AACjC,eAAWC,UAAUC,WAAW;AAC9B,YAAMC,SAASnB,YAAYC,KAAKgB,MAAAA,GAASf,IAAIe,MAAAA,CAAO;AACpD,UAAIE,WAAWhB,OAAW;AAC1B,YAAMiB,SAASL,UAAUE,MAAAA;AAEzB,UAAIG,WAAW,KAAM;AACrBJ,eAASC,MAAAA,IAAUG,WAAWjB,SAAYgB,SAASA,OAAOE,OAAO,CAACC,MAAM,CAACF,OAAOG,SAASD,CAAAA,CAAAA;IAC3F;AAGA,QAAIN,SAASQ,QAAQrB,UAAaa,SAASS,WAAWtB,OAAW;AACjEO,WAAOI,IAAAA,IAAQE;EACjB;AAEA,SAAON;AACT;AA3BgBL;;;ACiCT,SAASqB,oBAAoBC,QAAiC;AACnE,QAAM,EAAEC,UAAUC,cAAcC,UAAUC,SAASC,cAAcC,SAAQ,IAAKN;AAI9E,QAAMO,SAAyBD,aAAa,QAAQ,QAAQ;AAG5D,QAAME,UAAUC,eAAeR,UAAUC,cAAcC,UAAUC,SAASG,MAAAA;AAC1E,QAAMG,aAAa,IAAIC,IAAIH,QAAQI,IAAI,CAACC,MAAM;IAACA,EAAEC;IAAMD;GAAE,CAAA;AAGzD,QAAME,kBAAkB,oBAAIJ,IAAAA;AAC5B,aAAW,CAACG,MAAME,KAAAA,KAAUC,OAAOC,QAAQb,gBAAgB,CAAC,CAAA,GAAI;AAE9D,UAAMc,UAAUH,QAAQT,MAAAA;AACxB,QAAIY,YAAYC,OAAW;AAC3B,QAAI,CAACL,gBAAgBM,IAAIP,IAAAA,EAAOC,iBAAgBO,IAAIR,MAAM,oBAAIS,IAAAA,CAAAA;AAC9D,eAAWC,QAAQL,QAASJ,iBAAgBU,IAAIX,IAAAA,GAAOY,IAAIF,IAAAA;EAC7D;AAGA,QAAMG,WAAgC,CAAA;AACtC,aAAW,CAACb,MAAMc,QAAAA,KAAab,iBAAiB;AAC9C,UAAMc,eAAenB,WAAWe,IAAIX,IAAAA;AACpC,QAAI,CAACe,aAAc;AAEnB,UAAMC,QAAQC,qBAAqBF,cAAcvB,QAAAA;AAEjD,QAAI,CAACwB,MAAO;AAGZ,UAAME,aAAa,IAAIrB,KAAKkB,aAAaI,eAAe,CAAA,GAAIrB,IAAI,CAACsB,MAAM;MAACA,EAAEpB;MAAMoB;KAAE,CAAA;AAClF,UAAMC,eAAe;SAAIP;;AACzB,UAAMQ,oBAAwCD,aAC3CvB,IAAI,CAACyB,MAAML,WAAWP,IAAIY,CAAAA,CAAAA,EAC1BC,OAAO,CAACJ,MAAkC,CAAC,CAACA,GAAGK,MAAAA,EAC/C3B,IAAI,CAACsB,OAAO;MAAEpB,MAAMoB,EAAEpB;MAAM0B,QAAQN,EAAEO,cAAc;MAAMC,aAAaR,EAAEQ,eAAe,CAAA;IAAG,EAAA;AAE9Ff,aAASgB,KAAK;MACZ7B;MACA8B,MAAMf,aAAae;MACnBC,YAAYhB,aAAagB;MACzBC,UAAUjB,aAAaiB;MACvBC,gBAAgBlB,aAAakB;MAC7Bd,aAAaE;MACbI,QAAQV,aAAaU,UAAU;MAC/BE,YAAYZ,aAAaY,cAAc;MACvCC,aAAab,aAAaa,eAAe,CAAA;MACzCN;MACAN;MACAkB,SAASnB,aAAamB;MACtBC,SAASpB,aAAaoB;MACtBC,SAASrB,aAAaqB;MACtBC,cAActB,aAAasB;IAC7B,CAAA;EACF;AAEA,SAAOxB;AACT;AA3DgB5B;AA+DT,SAASgC,qBACdqB,OAaA9C,UAAwB;AAExB,MAAIA,aAAa,SAASA,aAAa,WAAW;AAChD,QAAI,CAAC8C,MAAMC,OAAQ,QAAO;AAC1B,WAAO;MACLC,aAAahD,aAAa,QAAQ8C,MAAMC,OAAOE,iBAAiBH,MAAMC,OAAOG;MAC7EC,eAAeL,MAAMC,OAAOI;MAC5BC,aAAaN,MAAMC,OAAOK;IAC5B;EACF;AAEA,MAAI,CAACN,MAAMO,IAAK,QAAO;AACvB,SAAO;IACLL,aAAaF,MAAMO,IAAIL;IACvBG,eAAeL,MAAMO,IAAIF;IACzBC,aAAaN,MAAMO,IAAID;EACzB;AACF;AA/BgB3B;","names":["buildBuCatalog","snapshot","businessCode","planCode","buLocks","bucket","business","businesses","plan","plans","undefined","catalog","app","apps","businessAppFeatures","features","map","code","filter","f","microfrontends","web","mobile","length","feature","membership","unlockedPermissions","permissions","buildPermissions","memberOnBucket","buPlatformLocked","locked","lockReason","unlockPlans","plansIncludingFeature","push","name","lucideIcon","sfSymbol","materialSymbol","remoteEntry","exposedModule","routePrefix","remoteEntryAndroid","remoteEntryIos","appCode","appName","appIcon","icon","appSortOrder","sortOrder","isPlanMember","entry","isBuLockedOnPlatform","platform","locks","includes","planMembership","planUnlocked","Set","lockEntry","p","isGlobal","planAllows","has","buAllows","plansUnlockingPermission","featureCode","permCode","result","Object","entries","buildBuRoles","values","roleTemplates","PLATFORMS","SNAPSHOT_SCHEMA_VERSION","buildBuMatrix","snapshot","businessCode","planCode","buLocks","business","businesses","undefined","plans","plan","planMeta","code","name","locks","apps","app","unlockedCount","totalCount","features","feature","platforms","PLATFORMS","filter","p","microfrontends","length","membership","unlockedPermissions","featureInPlan","isPlanMember","buEntry","permissions","isGlobal","includes","map","cell","plat","planCodes","inPlan","selected","isBuLockedOnPlatform","availableIn","plansUnlockingPerm","label","web","mobile","push","icon","lucideIcon","plansIncludingFeature","featureCode","permCode","platform","excludeCode","names","Object","entries","unionBucket","base","add","undefined","Set","composeRoleGrants","params","baseFeatures","additions","revoked","result","featureCodes","Object","keys","code","revokes","composed","bucket","PLATFORMS","merged","revoke","filter","c","includes","web","mobile","resolveUserFeatures","params","snapshot","businessCode","planCode","buLocks","roleFeatures","platform","bucket","catalog","buildBuCatalog","catalogMap","Map","map","f","code","grantedFeatures","grant","Object","entries","granted","undefined","has","set","Set","perm","get","add","features","permsSet","catalogEntry","route","pickRouteForPlatform","permByCode","permissions","p","grantedPerms","lockedPermissions","c","filter","locked","reason","lockReason","unlockPlans","push","name","lucideIcon","sfSymbol","materialSymbol","appCode","appName","appIcon","appSortOrder","entry","mobile","remoteEntry","remoteEntryIos","remoteEntryAndroid","exposedModule","routePrefix","web"]}

package/dist/catalog-resolver.d.cts

@@ -0,0 +1,109 @@
+import { P as PlatformBucket, B as BuFeatureLocks, V as VersionSnapshot, F as FeatureCatalogEntry, R as RoleItem, a as PlatformCodes, b as FeatureUnlocks, c as PlatformDenyCodes, L as LockReason } from './types-DQRwj5rr.cjs';
+export { C as CatalogPermission, d as PLATFORMS, S as SNAPSHOT_SCHEMA_VERSION, e as SnapshotApp, f as SnapshotBusiness, g as SnapshotFeature, h as SnapshotMicrofrontendMobile, j as SnapshotMicrofrontendWeb, i as SnapshotMicrofrontends, k as SnapshotPermission, l as SnapshotPlan, m as SnapshotRoleTemplate } from './types-DQRwj5rr.cjs';
+
+interface BuMatrixCell {
+    inPlan: boolean;
+    selected: boolean;
+    availableIn: string[];
+}
+interface BuMatrixPermission {
+    code: string;
+    label: string;
+    web: BuMatrixCell | null;
+    mobile: BuMatrixCell | null;
+}
+interface BuMatrixFeature {
+    code: string;
+    name: string;
+    icon: string | null;
+    platforms: PlatformBucket[];
+    inPlan: boolean;
+    availableIn: string[];
+    permissions: BuMatrixPermission[];
+}
+interface BuMatrixApp {
+    code: string;
+    name: string;
+    icon: string | null;
+    unlockedCount: number;
+    totalCount: number;
+    features: BuMatrixFeature[];
+}
+interface BuMatrix {
+    plan: {
+        code: string;
+        name: string;
+    };
+    apps: BuMatrixApp[];
+    locks: BuFeatureLocks;
+}
+declare function buildBuMatrix(snapshot: VersionSnapshot, businessCode: string | undefined, planCode: string | undefined, buLocks: BuFeatureLocks | undefined): BuMatrix;
+
+declare function buildBuCatalog(snapshot: VersionSnapshot, businessCode: string | undefined, planCode: string | undefined, buLocks: BuFeatureLocks | undefined, bucket: PlatformBucket): FeatureCatalogEntry[];
+declare function isPlanMember(entry: PlatformCodes | undefined): boolean;
+declare function isBuLockedOnPlatform(entry: BuFeatureLocks[string] | undefined, platform: PlatformBucket, code: string): boolean;
+declare function buildBuRoles(snapshot: VersionSnapshot, businessCode: string | undefined): RoleItem[];
+
+type RevokedGrants = Record<string, PlatformDenyCodes>;
+interface ComposeRoleGrantsParams {
+    baseFeatures: FeatureUnlocks | undefined;
+    additions: FeatureUnlocks;
+    revoked: RevokedGrants | undefined;
+}
+declare function composeRoleGrants(params: ComposeRoleGrantsParams): FeatureUnlocks;
+
+type ClientPlatform = 'web' | 'ios' | 'android';
+interface LockedPermission {
+    code: string;
+    reason: LockReason | null;
+    unlockPlans: string[];
+}
+interface PermissionFeature {
+    code: string;
+    name: string;
+    lucideIcon: string | null;
+    sfSymbol: string;
+    materialSymbol: string;
+    permissions: string[];
+    locked: boolean;
+    lockReason: LockReason | null;
+    unlockPlans: string[];
+    lockedPermissions: LockedPermission[];
+    route: {
+        remoteEntry: string;
+        exposedModule: string;
+        routePrefix: string;
+    };
+    appCode: string;
+    appName: string;
+    appIcon: string | null;
+    appSortOrder: number;
+}
+interface ResolveUserFeaturesParams {
+    snapshot: VersionSnapshot;
+    businessCode: string;
+    planCode: string | undefined;
+    buLocks: BuFeatureLocks | undefined;
+    roleFeatures: FeatureUnlocks;
+    platform: ClientPlatform;
+}
+declare function resolveUserFeatures(params: ResolveUserFeaturesParams): PermissionFeature[];
+declare function pickRouteForPlatform(entry: {
+    web: {
+        remoteEntry: string;
+        exposedModule: string;
+        routePrefix: string;
+    } | null;
+    mobile: {
+        remoteEntryAndroid: string;
+        remoteEntryIos: string;
+        exposedModule: string;
+        routePrefix: string;
+    } | null;
+}, platform: ClientPlatform): {
+    remoteEntry: string;
+    exposedModule: string;
+    routePrefix: string;
+} | null;
+
+export { BuFeatureLocks, type BuMatrix, type BuMatrixApp, type BuMatrixCell, type BuMatrixFeature, type BuMatrixPermission, type ClientPlatform, type ComposeRoleGrantsParams, FeatureCatalogEntry, FeatureUnlocks, LockReason, type LockedPermission, type PermissionFeature, PlatformBucket, PlatformCodes, PlatformDenyCodes, type ResolveUserFeaturesParams, type RevokedGrants, RoleItem, VersionSnapshot, buildBuCatalog, buildBuMatrix, buildBuRoles, composeRoleGrants, isBuLockedOnPlatform, isPlanMember, pickRouteForPlatform, resolveUserFeatures };

package/dist/catalog-resolver.d.ts

@@ -0,0 +1,109 @@
+import { P as PlatformBucket, B as BuFeatureLocks, V as VersionSnapshot, F as FeatureCatalogEntry, R as RoleItem, a as PlatformCodes, b as FeatureUnlocks, c as PlatformDenyCodes, L as LockReason } from './types-DQRwj5rr.js';
+export { C as CatalogPermission, d as PLATFORMS, S as SNAPSHOT_SCHEMA_VERSION, e as SnapshotApp, f as SnapshotBusiness, g as SnapshotFeature, h as SnapshotMicrofrontendMobile, j as SnapshotMicrofrontendWeb, i as SnapshotMicrofrontends, k as SnapshotPermission, l as SnapshotPlan, m as SnapshotRoleTemplate } from './types-DQRwj5rr.js';
+
+interface BuMatrixCell {
+    inPlan: boolean;
+    selected: boolean;
+    availableIn: string[];
+}
+interface BuMatrixPermission {
+    code: string;
+    label: string;
+    web: BuMatrixCell | null;
+    mobile: BuMatrixCell | null;
+}
+interface BuMatrixFeature {
+    code: string;
+    name: string;
+    icon: string | null;
+    platforms: PlatformBucket[];
+    inPlan: boolean;
+    availableIn: string[];
+    permissions: BuMatrixPermission[];
+}
+interface BuMatrixApp {
+    code: string;
+    name: string;
+    icon: string | null;
+    unlockedCount: number;
+    totalCount: number;
+    features: BuMatrixFeature[];
+}
+interface BuMatrix {
+    plan: {
+        code: string;
+        name: string;
+    };
+    apps: BuMatrixApp[];
+    locks: BuFeatureLocks;
+}
+declare function buildBuMatrix(snapshot: VersionSnapshot, businessCode: string | undefined, planCode: string | undefined, buLocks: BuFeatureLocks | undefined): BuMatrix;
+
+declare function buildBuCatalog(snapshot: VersionSnapshot, businessCode: string | undefined, planCode: string | undefined, buLocks: BuFeatureLocks | undefined, bucket: PlatformBucket): FeatureCatalogEntry[];
+declare function isPlanMember(entry: PlatformCodes | undefined): boolean;
+declare function isBuLockedOnPlatform(entry: BuFeatureLocks[string] | undefined, platform: PlatformBucket, code: string): boolean;
+declare function buildBuRoles(snapshot: VersionSnapshot, businessCode: string | undefined): RoleItem[];
+
+type RevokedGrants = Record<string, PlatformDenyCodes>;
+interface ComposeRoleGrantsParams {
+    baseFeatures: FeatureUnlocks | undefined;
+    additions: FeatureUnlocks;
+    revoked: RevokedGrants | undefined;
+}
+declare function composeRoleGrants(params: ComposeRoleGrantsParams): FeatureUnlocks;
+
+type ClientPlatform = 'web' | 'ios' | 'android';
+interface LockedPermission {
+    code: string;
+    reason: LockReason | null;
+    unlockPlans: string[];
+}
+interface PermissionFeature {
+    code: string;
+    name: string;
+    lucideIcon: string | null;
+    sfSymbol: string;
+    materialSymbol: string;
+    permissions: string[];
+    locked: boolean;
+    lockReason: LockReason | null;
+    unlockPlans: string[];
+    lockedPermissions: LockedPermission[];
+    route: {
+        remoteEntry: string;
+        exposedModule: string;
+        routePrefix: string;
+    };
+    appCode: string;
+    appName: string;
+    appIcon: string | null;
+    appSortOrder: number;
+}
+interface ResolveUserFeaturesParams {
+    snapshot: VersionSnapshot;
+    businessCode: string;
+    planCode: string | undefined;
+    buLocks: BuFeatureLocks | undefined;
+    roleFeatures: FeatureUnlocks;
+    platform: ClientPlatform;
+}
+declare function resolveUserFeatures(params: ResolveUserFeaturesParams): PermissionFeature[];
+declare function pickRouteForPlatform(entry: {
+    web: {
+        remoteEntry: string;
+        exposedModule: string;
+        routePrefix: string;
+    } | null;
+    mobile: {
+        remoteEntryAndroid: string;
+        remoteEntryIos: string;
+        exposedModule: string;
+        routePrefix: string;
+    } | null;
+}, platform: ClientPlatform): {
+    remoteEntry: string;
+    exposedModule: string;
+    routePrefix: string;
+} | null;
+
+export { BuFeatureLocks, type BuMatrix, type BuMatrixApp, type BuMatrixCell, type BuMatrixFeature, type BuMatrixPermission, type ClientPlatform, type ComposeRoleGrantsParams, FeatureCatalogEntry, FeatureUnlocks, LockReason, type LockedPermission, type PermissionFeature, PlatformBucket, PlatformCodes, PlatformDenyCodes, type ResolveUserFeaturesParams, type RevokedGrants, RoleItem, VersionSnapshot, buildBuCatalog, buildBuMatrix, buildBuRoles, composeRoleGrants, isBuLockedOnPlatform, isPlanMember, pickRouteForPlatform, resolveUserFeatures };