@vritti/api-sdk 0.4.1 → 0.4.2

package/dist/catalog-resolver.cjs

@@ -43,7 +43,6 @@ __export(catalog_resolver_exports, {
   isApiBucket: () => isApiBucket,
   isPlanMember: () => isPlanMember,
   isSiteLockedOnPlatform: () => isSiteLockedOnPlatform,
-  normalizeApiBuckets: () => normalizeApiBuckets,
   pickRouteForPlatform: () => pickRouteForPlatform,
   prereqClosure: () => prereqClosure,
   resolveUserFeatures: () => resolveUserFeatures,
@@ -165,78 +164,40 @@ function snapshotFeatureKey(code, scope) {
   return `${scope}.${code}`;
 }
 __name(snapshotFeatureKey, "snapshotFeatureKey");
-var SNAPSHOT_SCHEMA_VERSION = 4;
+var SNAPSHOT_SCHEMA_VERSION = 5;
 
 // src/catalog-resolver/catalog.builder.ts
-function normalizeApiBuckets(doc) {
-  if (!doc) return doc;
-  let changed = false;
-  const next = {};
-  for (const [code, entry] of Object.entries(doc)) {
-    const legacy = entry.app;
-    if (legacy === void 0 || entry.graphql !== void 0 && entry.http !== void 0) {
-      next[code] = entry;
-      continue;
-    }
-    changed = true;
-    next[code] = {
-      ...entry,
-      ...entry.graphql === void 0 ? {
-        graphql: legacy
-      } : {},
-      ...entry.http === void 0 ? {
-        http: legacy
-      } : {}
-    };
-  }
-  return changed ? next : doc;
-}
-__name(normalizeApiBuckets, "normalizeApiBuckets");
-function normalizePlans(plans) {
-  let changed = false;
-  const next = {};
-  for (const [code, plan] of Object.entries(plans)) {
-    const unlockedPermissions = normalizeApiBuckets(plan.unlockedPermissions) ?? {};
-    if (unlockedPermissions !== plan.unlockedPermissions) changed = true;
-    next[code] = unlockedPermissions === plan.unlockedPermissions ? plan : {
-      ...plan,
-      unlockedPermissions
-    };
-  }
-  return changed ? next : plans;
-}
-__name(normalizePlans, "normalizePlans");
 function featureAppliesAtNode(applicableSiteTypes, siteType) {
   return applicableSiteTypes.includes(siteType);
 }
 __name(featureAppliesAtNode, "featureAppliesAtNode");
 function findFeatureByCode(snapshot, code) {
-  for (const feature of Object.values(snapshot.features ?? {})) {
-    if (feature?.code === code) return feature;
+  for (const feature of Object.values(snapshot.features)) {
+    if (feature.code === code) return feature;
   }
   return void 0;
 }
 __name(findFeatureByCode, "findFeatureByCode");
 function buildSiteCatalog(snapshot, businessCode, planCode, siteLocks, bucket, siteType, scope, availableServices = []) {
   if (!businessCode) return [];
-  const business = snapshot.businesses?.[businessCode];
+  const business = snapshot.businesses[businessCode];
   if (!business) return [];
-  const plans = normalizePlans(business.plans ?? {});
+  const plans = business.plans;
   const plan = planCode ? plans[planCode] : void 0;
-  const locks = normalizeApiBuckets(siteLocks);
+  const locks = siteLocks;
   const catalog = [];
   const sortedApps = [
     ...business.apps
   ].sort((a, b) => a.name.localeCompare(b.name));
   for (const app of sortedApps) {
-    const businessAppFeatures = app.features.filter((ref) => scope === void 0 || ref.scope === scope).map((ref) => snapshot.features?.[snapshotFeatureKey(ref.code, ref.scope)]).filter((f) => !!f && // A UI bucket needs something to render, so a feature shipping no microfrontend is dropped.
+    const businessAppFeatures = app.features.filter((ref) => scope === void 0 || ref.scope === scope).map((ref) => snapshot.features[snapshotFeatureKey(ref.code, ref.scope)]).filter((f) => !!f && // A UI bucket needs something to render, so a feature shipping no microfrontend is dropped.
     // An API bucket renders nothing — there a feature is admitted by the surfaces it declares
     // instead, so a GRAPHQL credential never resolves an HTTP-only feature. A surface-excluded
     // feature vanishes from the catalog entirely, which is what makes resolution fail closed.
     (isApiBucket(bucket) ? surfaceAllows(f.apiSurfaces, SURFACE_BY_BUCKET[bucket]) : !!(f.microfrontends?.web || f.microfrontends?.mobile)) && (siteType === void 0 || featureAppliesAtNode(f.applicableSiteTypes, siteType)));
     if (businessAppFeatures.length === 0) continue;
     for (const feature of businessAppFeatures) {
-      const membership = plan?.unlockedPermissions?.[feature.code];
+      const membership = plan?.unlockedPermissions[feature.code];
       const web = feature.microfrontends?.web;
       const mobile = feature.microfrontends?.mobile;
       const memberOnBucket = membership?.[bucket] !== void 0;
@@ -280,11 +241,11 @@ function buildSiteCatalog(snapshot, businessCode, planCode, siteLocks, bucket, s
 __name(buildSiteCatalog, "buildSiteCatalog");
 function isPlanMember(entry) {
   if (!entry) return false;
-  return PLATFORMS.some((platform) => entry[platform] !== void 0) || entry.app !== void 0;
+  return PLATFORMS.some((platform) => entry[platform] !== void 0);
 }
 __name(isPlanMember, "isPlanMember");
 function surfaceAllows(surfaces, surface) {
-  return surface === void 0 || surfaces === void 0 || surfaces.includes(surface);
+  return surface === void 0 || surfaces.includes(surface);
 }
 __name(surfaceAllows, "surfaceAllows");
 function resolveLockReason(planLocked, siteLocked, missingServices) {
@@ -295,7 +256,7 @@ function resolveLockReason(planLocked, siteLocked, missingServices) {
 }
 __name(resolveLockReason, "resolveLockReason");
 function unmetServices(feature, availableServices) {
-  return (feature.requiredServices ?? []).filter((service) => !availableServices.includes(service));
+  return feature.requiredServices.filter((service) => !availableServices.includes(service));
 }
 __name(unmetServices, "unmetServices");
 function isSiteLockedOnPlatform(entry, platform, code) {
@@ -306,7 +267,7 @@ __name(isSiteLockedOnPlatform, "isSiteLockedOnPlatform");
 function buildPermissions(feature, businessCode, planMembership, siteLocks, plans, bucket, missingServices = []) {
   const planUnlocked = new Set(planMembership?.[bucket] ?? []);
   const lockEntry = siteLocks?.[feature.code];
-  const perms = (feature.permissions ?? []).filter((p) => p.isGlobal || p.businesses.includes(businessCode));
+  const perms = feature.permissions.filter((p) => p.isGlobal || p.businesses.includes(businessCode)).filter((p) => p.platforms.includes(bucket));
   const deps = buildDependsMap(perms);
   const codes = perms.map((p) => p.code);
   const directlyPlanLocked = /* @__PURE__ */ new Set();
@@ -344,7 +305,7 @@ __name(buildPermissions, "buildPermissions");
 function plansUnlockingClosure(plans, featureCode, closure, bucket) {
   const result = [];
   for (const [code, plan] of Object.entries(plans)) {
-    const unlocked = plan.unlockedPermissions?.[featureCode]?.[bucket];
+    const unlocked = plan.unlockedPermissions[featureCode]?.[bucket];
     if (unlocked && closure.every((c) => unlocked.includes(c))) result.push(code);
   }
   return result;
@@ -353,16 +314,16 @@ __name(plansUnlockingClosure, "plansUnlockingClosure");
 function plansIncludingFeature(plans, featureCode, bucket) {
   const result = [];
   for (const [code, plan] of Object.entries(plans)) {
-    if (plan.unlockedPermissions?.[featureCode]?.[bucket] !== void 0) result.push(code);
+    if (plan.unlockedPermissions[featureCode]?.[bucket] !== void 0) result.push(code);
   }
   return result;
 }
 __name(plansIncludingFeature, "plansIncludingFeature");
 function buildSiteRoles(snapshot, businessCode) {
   if (!businessCode) return [];
-  const business = snapshot.businesses?.[businessCode];
+  const business = snapshot.businesses[businessCode];
   if (!business) return [];
-  return Object.values(business.roleTemplates ?? {});
+  return Object.values(business.roleTemplates);
 }
 __name(buildSiteRoles, "buildSiteRoles");
 
@@ -382,11 +343,11 @@ function composeRoleGrants(params) {
   const result = {};
   const featureCodes = /* @__PURE__ */ new Set([
     ...Object.keys(baseFeatures ?? {}),
-    ...Object.keys(additions ?? {})
+    ...Object.keys(additions)
   ]);
   for (const code of featureCodes) {
     const base = baseFeatures?.[code] ?? {};
-    const add = additions?.[code] ?? {};
+    const add = additions[code] ?? {};
     const revokes = revoked?.[code];
     const composed = {};
     for (const bucket of PLATFORMS) {
@@ -419,32 +380,26 @@ var EMPTY_ROUTE = {
 function resolveUserFeatures(params) {
   const { snapshot, businessCode, planCode, siteLocks, platform, siteType, scope, availableServices } = params;
   const bucket = BUCKET_BY_CLIENT[platform];
-  const roleFeatures = normalizeApiBuckets(params.roleFeatures) ?? {};
-  const featureByCode = /* @__PURE__ */ __name((code) => scope ? snapshot.features?.[snapshotFeatureKey(code, scope)] : findFeatureByCode(snapshot, code), "featureByCode");
+  const roleFeatures = params.roleFeatures;
+  const featureByCode = /* @__PURE__ */ __name((code) => scope ? snapshot.features[snapshotFeatureKey(code, scope)] : findFeatureByCode(snapshot, code), "featureByCode");
   const catalog = buildSiteCatalog(snapshot, businessCode, planCode, siteLocks, bucket, siteType, scope, availableServices);
   const catalogMap = new Map(catalog.map((f) => [
     f.code,
     f
   ]));
-  const businessPlans = Object.fromEntries(Object.entries(snapshot.businesses[businessCode]?.plans ?? {}).map(([code, plan]) => [
-    code,
-    {
-      ...plan,
-      unlockedPermissions: normalizeApiBuckets(plan.unlockedPermissions) ?? {}
-    }
-  ]));
+  const businessPlans = snapshot.businesses[businessCode]?.plans ?? {};
   const currentUnlockedCodes = /* @__PURE__ */ new Set();
   if (planCode && businessPlans[planCode]) {
-    for (const [featureCode, platforms] of Object.entries(businessPlans[planCode].unlockedPermissions ?? {})) {
-      if (platforms?.[bucket] !== void 0) currentUnlockedCodes.add(featureCode);
+    for (const [featureCode, platforms] of Object.entries(businessPlans[planCode].unlockedPermissions)) {
+      if (platforms[bucket] !== void 0) currentUnlockedCodes.add(featureCode);
     }
   }
   const planAdds = /* @__PURE__ */ new Map();
   for (const [planKey, plan] of Object.entries(businessPlans)) {
     if (planKey === planCode) continue;
     const adds = [];
-    for (const [featureCode, platforms] of Object.entries(plan.unlockedPermissions ?? {})) {
-      if (platforms?.[bucket] === void 0 || currentUnlockedCodes.has(featureCode)) continue;
+    for (const [featureCode, platforms] of Object.entries(plan.unlockedPermissions)) {
+      if (platforms[bucket] === void 0 || currentUnlockedCodes.has(featureCode)) continue;
       const name = featureByCode(featureCode)?.name;
       if (name) adds.push({
         code: featureCode,
@@ -454,8 +409,8 @@ function resolveUserFeatures(params) {
     planAdds.set(planKey, adds);
   }
   const grantedFeatures = /* @__PURE__ */ new Map();
-  for (const [code, grant] of Object.entries(roleFeatures ?? {})) {
-    const granted = grant?.[bucket];
+  for (const [code, grant] of Object.entries(roleFeatures)) {
+    const granted = grant[bucket];
     if (granted === void 0) continue;
     if (!grantedFeatures.has(code)) grantedFeatures.set(code, /* @__PURE__ */ new Set());
     for (const perm of granted) grantedFeatures.get(code)?.add(perm);
@@ -467,20 +422,20 @@ function resolveUserFeatures(params) {
     const route = isApiBucket(bucket) ? EMPTY_ROUTE : pickRouteForPlatform(catalogEntry, platform);
     if (!route) continue;
     const featureDeps = buildDependsMap(featureByCode(code)?.permissions ?? []);
-    const permByCode = new Map((catalogEntry.permissions ?? []).map((p) => [
+    const permByCode = new Map(catalogEntry.permissions.map((p) => [
       p.code,
       p
     ]));
     const grantedPerms = [
       ...filterGrantedByDeps(permsSet, featureDeps)
-    ];
+    ].filter((c) => permByCode.has(c));
     const lockedPermissions = grantedPerms.map((c) => permByCode.get(c)).filter((p) => !!p?.locked).map((p) => ({
       code: p.code,
       reason: p.lockReason ?? null,
-      unlockPlans: p.unlockPlans ?? [],
-      missingServices: p.missingServices ?? []
+      unlockPlans: p.unlockPlans,
+      missingServices: p.missingServices
     }));
-    const upsell = catalogEntry.locked && catalogEntry.lockReason === "PLAN" ? (catalogEntry.unlockPlans ?? []).map((plan) => ({
+    const upsell = catalogEntry.locked && catalogEntry.lockReason === "PLAN" ? catalogEntry.unlockPlans.map((plan) => ({
       plan,
       features: (planAdds.get(plan) ?? []).filter((f) => f.code !== code).map((f) => f.name)
     })).filter((group) => group.features.length > 0) : [];
@@ -493,8 +448,8 @@ function resolveUserFeatures(params) {
       permissions: grantedPerms,
       locked: catalogEntry.locked ?? false,
       lockReason: catalogEntry.lockReason ?? null,
-      unlockPlans: catalogEntry.unlockPlans ?? [],
-      missingServices: catalogEntry.missingServices ?? [],
+      unlockPlans: catalogEntry.unlockPlans,
+      missingServices: catalogEntry.missingServices,
       lockedPermissions,
       upsell,
       route,
@@ -537,21 +492,14 @@ function buildPlanMatrix(snapshot, businessCode, planCode, siteLocks) {
 }
 __name(buildPlanMatrix, "buildPlanMatrix");
 function buildMatrix(snapshot, businessCode, planCode, siteLocks, allScopes, siteType) {
-  const business = businessCode ? snapshot.businesses?.[businessCode] : void 0;
-  const plans = Object.fromEntries(Object.entries(business?.plans ?? {}).map(([code, p]) => [
-    code,
-    {
-      ...p,
-      unlockedPermissions: normalizeApiBuckets(p.unlockedPermissions) ?? {}
-    }
-  ]));
+  const business = businessCode ? snapshot.businesses[businessCode] : void 0;
+  const plans = business?.plans ?? {};
   const plan = planCode ? plans[planCode] : void 0;
   const planMeta = {
     code: planCode ?? "",
     name: plan?.name ?? planCode ?? ""
   };
-  const normalizedLocks = normalizeApiBuckets(siteLocks);
-  const locks = normalizedLocks ?? {};
+  const locks = siteLocks ?? {};
   if (!business || !plan) return {
     plan: planMeta,
     apps: [],
@@ -559,31 +507,51 @@ function buildMatrix(snapshot, businessCode, planCode, siteLocks, allScopes, sit
   };
   const apps = [];
   for (const app of business.apps) {
-    let unlockedCount = 0;
-    let totalCount = 0;
+    const counts = {
+      web: {
+        unlocked: 0,
+        total: 0
+      },
+      mobile: {
+        unlocked: 0,
+        total: 0
+      },
+      graphql: {
+        unlocked: 0,
+        total: 0
+      },
+      http: {
+        unlocked: 0,
+        total: 0
+      }
+    };
     const features = [];
     for (const ref of app.features) {
       if (!allScopes && ref.scope !== "SITE") continue;
       const code = ref.code;
-      const feature = snapshot.features?.[snapshotFeatureKey(code, ref.scope)];
+      const feature = snapshot.features[snapshotFeatureKey(code, ref.scope)];
       if (!feature) continue;
       if (siteType !== void 0 && !featureAppliesAtNode(feature.applicableSiteTypes, siteType)) continue;
       const platforms = [
         ...UI_PLATFORMS.filter((p) => !!feature.microfrontends?.[p]),
-        ...API_BUCKETS.filter((b) => feature.apiSurfaces === void 0 || feature.apiSurfaces.includes(SURFACE_BY_BUCKET[b]))
+        ...API_BUCKETS.filter((b) => feature.apiSurfaces.includes(SURFACE_BY_BUCKET[b]))
       ];
-      const membership = plan.unlockedPermissions?.[code];
+      const groupByCode = new Map(feature.permissionGroups.map((g) => [
+        g.code,
+        g
+      ]));
+      const membership = plan.unlockedPermissions[code];
       const featureInPlan = isPlanMember(membership);
-      const siteEntry = normalizedLocks?.[code];
-      const permissions = (feature.permissions ?? []).filter((p) => p.isGlobal || p.businesses.includes(businessCode ?? "")).map((p) => {
+      const siteEntry = siteLocks?.[code];
+      const permissions = feature.permissions.filter((p) => p.isGlobal || p.businesses.includes(businessCode ?? "")).map((p) => {
         const cell = /* @__PURE__ */ __name((plat) => {
-          if (!platforms.includes(plat)) return null;
+          if (!platforms.includes(plat) || !p.platforms.includes(plat)) return null;
           const planCodes = membership?.[plat];
           const inPlan = featureInPlan && planCodes !== void 0 && planCodes.includes(p.code);
           const selected = inPlan && !isSiteLockedOnPlatform(siteEntry, plat, p.code);
           const availableIn = inPlan ? [] : plansUnlockingPerm(plans, code, p.code, plat, planCode);
-          totalCount += 1;
-          if (inPlan) unlockedCount += 1;
+          counts[plat].total += 1;
+          if (inPlan) counts[plat].unlocked += 1;
           return {
             inPlan,
             selected,
@@ -593,7 +561,8 @@ function buildMatrix(snapshot, businessCode, planCode, siteLocks, allScopes, sit
         return {
           code: p.code,
           label: p.label,
-          dependsOn: p.dependsOn ?? [],
+          dependsOn: p.dependsOn,
+          group: p.group ? groupByCode.get(p.group) : void 0,
           web: cell("web"),
           mobile: cell("mobile"),
           graphql: cell("graphql"),
@@ -618,8 +587,7 @@ function buildMatrix(snapshot, businessCode, planCode, siteLocks, allScopes, sit
       code: app.code,
       name: app.name,
       icon: app.icon ?? null,
-      unlockedCount,
-      totalCount,
+      counts,
       features
     });
   }
@@ -635,7 +603,7 @@ function plansUnlockingPerm(plans, featureCode, permCode, platform, excludeCode)
   const names = [];
   for (const [code, p] of Object.entries(plans)) {
     if (code === excludeCode) continue;
-    if ((p.unlockedPermissions?.[featureCode]?.[platform] ?? []).includes(permCode)) names.push(p.name);
+    if ((p.unlockedPermissions[featureCode]?.[platform] ?? []).includes(permCode)) names.push(p.name);
   }
   return names;
 }
@@ -644,7 +612,7 @@ function plansIncludingFeature2(plans, featureCode, excludeCode) {
   const names = [];
   for (const [code, p] of Object.entries(plans)) {
     if (code === excludeCode) continue;
-    if (isPlanMember(p.unlockedPermissions?.[featureCode])) names.push(p.name);
+    if (isPlanMember(p.unlockedPermissions[featureCode])) names.push(p.name);
   }
   return names;
 }
@@ -673,7 +641,6 @@ __name(plansIncludingFeature2, "plansIncludingFeature");
   isApiBucket,
   isPlanMember,
   isSiteLockedOnPlatform,
-  normalizeApiBuckets,
   pickRouteForPlatform,
   prereqClosure,
   resolveUserFeatures,