pi-kiosk-shared 2.1.87 → 2.1.89

package/dist/tenant-entitlements/catalog.js

@@ -0,0 +1,347 @@
+import { ENTITLEMENT_BLOCK_KEYS, TENANT_ENTITLEMENT_BLOCK_COUNT, TENANT_ENTITLEMENT_CATALOG_VERSION, } from './types.js';
+const ALWAYS_ON_IMMUTABLE = {
+    runtimeMode: 'ALWAYS_ON',
+    visibilityMode: 'VISIBLE',
+    mutationMode: 'READ_ONLY',
+};
+const PAYMENT_RECONCILIATION_DEFAULT_STRATEGY = {
+    allowedModes: ['MODE_1', 'MODE_2'],
+};
+export const TENANT_ENTITLEMENT_BLOCK_CATALOG = [
+    {
+        blockKey: 'platform_core',
+        blockClass: 'CORE_IMMUTABLE',
+        parentKeys: [],
+        immutableDefaults: {
+            runtimeMode: 'ALWAYS_ON',
+            visibilityMode: 'HIDDEN',
+            mutationMode: 'READ_ONLY',
+        },
+        notes: 'Internal resolver health',
+    },
+    {
+        blockKey: 'dev_entitlement_policy_editor',
+        blockClass: 'CORE_IMMUTABLE',
+        parentKeys: [],
+        immutableDefaults: ALWAYS_ON_IMMUTABLE,
+        notes: 'DEV catalog GET/PUT; cross_tenant_dev exempt',
+    },
+    {
+        blockKey: 'transactions',
+        blockClass: 'CORE_REQUIRED',
+        parentKeys: [],
+        adminNavSectionId: 'transactions',
+        notes: 'transactionRoutes',
+    },
+    {
+        blockKey: 'sales_point_management',
+        blockClass: 'CORE_REQUIRED',
+        parentKeys: [],
+        adminNavSectionId: 'kiosks',
+        notes: 'DEV may HIDDEN+READ_ONLY (D-ENT-26)',
+    },
+    {
+        blockKey: 'catalog_administration',
+        blockClass: 'CONDITIONAL',
+        parentKeys: ['product_vending'],
+        notes: 'DONATION_ONLY → deny reads; SIMPLE Off → allow GET; HARD_OFF BLOCK_ALL → deny reads',
+    },
+    {
+        blockKey: 'audit_event_collection',
+        blockClass: 'CORE_IMMUTABLE',
+        parentKeys: [],
+        immutableDefaults: {
+            runtimeMode: 'ALWAYS_ON',
+            visibilityMode: 'HIDDEN',
+            mutationMode: 'BLOCK_ALL',
+        },
+        notes: 'Workers always collect; mutation BLOCK_ALL',
+    },
+    {
+        blockKey: 'audit_logs_admin_ui',
+        blockClass: 'CORE_IMMUTABLE',
+        parentKeys: [],
+        adminNavSectionId: 'audit-logs',
+        capabilityHint: 'system:logs:read',
+        immutableDefaults: ALWAYS_ON_IMMUTABLE,
+        notes: 'DEV visibility toggle',
+    },
+    {
+        blockKey: 'gdpr_consent_admin_ui',
+        blockClass: 'CORE_IMMUTABLE',
+        parentKeys: [],
+        adminNavSectionId: 'consent-management',
+        capabilityHint: 'system:pii:read',
+        immutableDefaults: ALWAYS_ON_IMMUTABLE,
+        notes: 'Not compliance_fiscal_modules',
+    },
+    {
+        blockKey: 'incident_centre_ui',
+        blockClass: 'CORE_IMMUTABLE',
+        parentKeys: [],
+        routeSuffix: 'success-incident-centre',
+        immutableDefaults: ALWAYS_ON_IMMUTABLE,
+        notes: 'DEV visibility toggle',
+    },
+    {
+        blockKey: 'payment_processing_runtime',
+        blockClass: 'CORE_IMMUTABLE',
+        parentKeys: [],
+        immutableDefaults: {
+            runtimeMode: 'ALWAYS_ON',
+            visibilityMode: 'HIDDEN',
+            mutationMode: 'ALLOW_WRITES',
+        },
+        notes: 'Webhooks; never 403 in-flight',
+    },
+    {
+        blockKey: 'outbox_runtime',
+        blockClass: 'CORE_IMMUTABLE',
+        parentKeys: [],
+        immutableDefaults: {
+            runtimeMode: 'ALWAYS_ON',
+            visibilityMode: 'HIDDEN',
+            mutationMode: 'ALLOW_WRITES',
+        },
+        notes: 'Workers always run',
+    },
+    {
+        blockKey: 'product_vending',
+        blockClass: 'CONDITIONAL',
+        parentKeys: ['sales_point_management'],
+        adminNavSectionId: 'products',
+        capabilityHint: 'ops:products:read',
+    },
+    {
+        blockKey: 'donation',
+        blockClass: 'CONDITIONAL',
+        parentKeys: ['sales_point_management'],
+        adminNavSectionId: 'donation-projects',
+        capabilityHint: 'ops:donation-projects:read',
+    },
+    {
+        blockKey: 'inventory_management',
+        blockClass: 'CONDITIONAL',
+        parentKeys: ['product_vending', 'sales_point_management'],
+        parentOperator: 'AND',
+        adminNavSectionId: 'inventory',
+        capabilityHint: 'ops:inventory:read',
+    },
+    {
+        blockKey: 'loyalty_program',
+        blockClass: 'CONDITIONAL',
+        parentKeys: ['product_vending'],
+        capabilityHint: 'loyalty:coupons:read',
+        notes: 'Parent product_vending only; RETAIN ALL data on disable (§6.5)',
+    },
+    {
+        blockKey: 'payment_rails_strategy',
+        blockClass: 'STRATEGY',
+        parentKeys: ['sales_point_management'],
+        notes: 'Bank/rails; which channels exist',
+    },
+    {
+        blockKey: 'payment_reconciliation',
+        blockClass: 'STRATEGY',
+        parentKeys: ['payment_rails_strategy'],
+        defaultStrategy: PAYMENT_RECONCILIATION_DEFAULT_STRATEGY,
+        notes: 'allowedModes MODE_1/MODE_2 (§7.5)',
+    },
+    {
+        blockKey: 'payments_hub_ui',
+        blockClass: 'CONDITIONAL',
+        parentKeys: ['payment_reconciliation'],
+        adminNavSectionId: 'payments-hub',
+        capabilityHint: 'tenant.reconciliation.read',
+        notes: 'paymentsHub section — UI shell',
+    },
+    {
+        blockKey: 'stripe_integration_strategy',
+        blockClass: 'STRATEGY',
+        parentKeys: [],
+        notes: 'Mirrors Tenant.stripeIntegrationMode',
+    },
+    {
+        blockKey: 'fulfillment_queue',
+        blockClass: 'CONDITIONAL',
+        parentKeys: ['order_pickup_infrastructure'],
+        adminNavSectionId: 'fulfillment',
+        capabilityHint: 'tenant.orders.fulfill.*',
+        notes: 'fulfillment + orders sections',
+    },
+    {
+        blockKey: 'order_pickup_infrastructure',
+        blockClass: 'CONDITIONAL',
+        parentKeys: ['surface_kiosk', 'surface_customer'],
+        parentOperator: 'OR',
+        notes: 'OR-parent §7.3; syncs Tenant PWA/pickup knobs',
+    },
+    {
+        blockKey: 'pickup_points',
+        blockClass: 'CONDITIONAL',
+        parentKeys: ['order_pickup_infrastructure'],
+        adminNavSectionId: 'pickup-points',
+        capabilityHint: 'ops:sales-points:read',
+        notes: 'Default ENABLED when parent on; auto-mirror (D-ENT-04)',
+    },
+    {
+        blockKey: 'immediate_self_pickup',
+        blockClass: 'CONDITIONAL',
+        parentKeys: ['order_pickup_infrastructure'],
+        notes: 'Mirror mode; syncs Tenant.immediatePickupGraceMinutes',
+    },
+    {
+        blockKey: 'customer_self_collect',
+        blockClass: 'CONDITIONAL',
+        parentKeys: ['immediate_self_pickup'],
+        notes: 'Customer collect flows',
+    },
+    {
+        blockKey: 'scheduled_pickup',
+        blockClass: 'CONDITIONAL',
+        parentKeys: ['order_pickup_infrastructure'],
+        notes: 'Syncs Tenant.scheduledPickup* fields',
+    },
+    {
+        blockKey: 'staff_pickup_scan',
+        blockClass: 'CONDITIONAL',
+        parentKeys: ['pickup_points'],
+        parentOperator: 'OR',
+        notes: 'Pickup staff app; pickup_points OR mirror mode (resolved ENT-PR-03)',
+    },
+    {
+        blockKey: 'surface_kiosk',
+        blockClass: 'CONDITIONAL',
+        parentKeys: [],
+        notes: 'Kiosk bootstrap',
+    },
+    {
+        blockKey: 'surface_customer',
+        blockClass: 'CONDITIONAL',
+        parentKeys: [],
+        notes: 'Customer PWA',
+    },
+    {
+        blockKey: 'realtime_device_transport',
+        blockClass: 'CONDITIONAL',
+        parentKeys: ['surface_kiosk'],
+        notes: 'WS/SSE',
+    },
+    {
+        blockKey: 'customer_auth_pwa',
+        blockClass: 'CONDITIONAL',
+        parentKeys: ['surface_customer'],
+        notes: 'Account routes',
+    },
+    {
+        blockKey: 'analytics',
+        blockClass: 'CONDITIONAL',
+        parentKeys: [],
+        notes: 'Parent umbrella',
+    },
+    {
+        blockKey: 'analytics_summary',
+        blockClass: 'CONDITIONAL',
+        parentKeys: ['analytics'],
+        adminNavSectionId: 'analytics',
+        capabilityHint: 'analytics:summary:read',
+        notes: 'Summary tab',
+    },
+    {
+        blockKey: 'analytics_detailed',
+        blockClass: 'CONDITIONAL',
+        parentKeys: ['analytics'],
+        notes: 'Advanced explore',
+    },
+    {
+        blockKey: 'analytics_pii',
+        blockClass: 'CONDITIONAL',
+        parentKeys: ['analytics_detailed'],
+        capabilityHint: 'analytics:pii:read',
+        notes: 'Legacy customer-explore redirect',
+    },
+    {
+        blockKey: 'customer_behavior_funnels',
+        blockClass: 'CONDITIONAL',
+        parentKeys: ['analytics_detailed'],
+        notes: 'Ingest tier ANALYTICS per CONSENT_TIER_MATRIX',
+    },
+    {
+        blockKey: 'analytics_benchmark',
+        blockClass: 'CONDITIONAL',
+        parentKeys: ['analytics'],
+        notes: 'Absorbs analytics_benchmark_enabled flag',
+    },
+    {
+        blockKey: 'tax_management',
+        blockClass: 'CONDITIONAL',
+        parentKeys: [],
+        adminNavSectionId: 'tax-management',
+        capabilityHint: 'config:pricing:read',
+    },
+    {
+        blockKey: 'compliance_fiscal_modules',
+        blockClass: 'CONDITIONAL',
+        parentKeys: ['tax_management'],
+        optionalParentKeys: ['tax_management'],
+        notes: 'EET only — EnableComplianceModuleForTenantUseCase; tax optional',
+    },
+    {
+        blockKey: 'comms_governance',
+        blockClass: 'CONDITIONAL',
+        parentKeys: [],
+        notes: 'DEV comms-governance tab',
+    },
+    {
+        blockKey: 'permission_management_rbac',
+        blockClass: 'CONDITIONAL',
+        parentKeys: [],
+        adminNavSectionId: 'capabilities',
+        capabilityHint: 'users:admins:create',
+    },
+    {
+        blockKey: 'tenant_ops_settings',
+        blockClass: 'CONDITIONAL',
+        parentKeys: [],
+        adminNavSectionId: 'account-settings',
+        notes: 'account-settings + ops-settings tab',
+    },
+    {
+        blockKey: 'bank_account_administration',
+        blockClass: 'CONDITIONAL',
+        parentKeys: ['payment_rails_strategy'],
+        notes: 'Bank CRUD APIs',
+    },
+    {
+        blockKey: 'receipt_delivery',
+        blockClass: 'CONDITIONAL',
+        parentKeys: ['comms_governance'],
+        notes: 'Receipt provider overrides',
+    },
+    {
+        blockKey: 'bank_inbox_claims_api',
+        blockClass: 'CONDITIONAL',
+        parentKeys: ['payment_reconciliation'],
+        notes: 'bank-inbox + payment-claims APIs (distinct from payments_hub_ui)',
+    },
+];
+const CATALOG_BY_KEY = new Map(TENANT_ENTITLEMENT_BLOCK_CATALOG.map((entry) => [entry.blockKey, entry]));
+if (TENANT_ENTITLEMENT_BLOCK_CATALOG.length !== TENANT_ENTITLEMENT_BLOCK_COUNT) {
+    throw new Error(`Tenant entitlement catalog must contain ${TENANT_ENTITLEMENT_BLOCK_COUNT} blocks; got ${TENANT_ENTITLEMENT_BLOCK_CATALOG.length}`);
+}
+if (TENANT_ENTITLEMENT_BLOCK_CATALOG.length !== ENTITLEMENT_BLOCK_KEYS.length ||
+    !ENTITLEMENT_BLOCK_KEYS.every((key, index) => TENANT_ENTITLEMENT_BLOCK_CATALOG[index]?.blockKey === key)) {
+    throw new Error('Tenant entitlement catalog blockKey order must match ENTITLEMENT_BLOCK_KEYS');
+}
+export function isEntitlementBlockKey(value) {
+    return CATALOG_BY_KEY.has(value);
+}
+export function getEntitlementBlockCatalogEntry(blockKey) {
+    const entry = CATALOG_BY_KEY.get(blockKey);
+    if (entry === undefined) {
+        throw new Error(`Unknown entitlement blockKey: ${blockKey}`);
+    }
+    return entry;
+}
+export { TENANT_ENTITLEMENT_CATALOG_VERSION, TENANT_ENTITLEMENT_BLOCK_COUNT, ENTITLEMENT_BLOCK_KEYS, };
+//# sourceMappingURL=catalog.js.map

package/dist/tenant-entitlements/catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog.js","sourceRoot":"","sources":["../../src/tenant-entitlements/catalog.ts"],"names":[],"mappings":"AASA,OAAO,EACL,sBAAsB,EACtB,8BAA8B,EAC9B,kCAAkC,GACnC,MAAM,YAAY,CAAC;AAEpB,MAAM,mBAAmB,GAAG;IAC1B,WAAW,EAAE,WAAW;IACxB,cAAc,EAAE,SAAS;IACzB,YAAY,EAAE,WAAW;CACjB,CAAC;AAEX,MAAM,uCAAuC,GAAkC;IAC7E,YAAY,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC;CACnC,CAAC;AAEF,MAAM,CAAC,MAAM,gCAAgC,GAA4C;IACvF;QACE,QAAQ,EAAE,eAAe;QACzB,UAAU,EAAE,gBAAgB;QAC5B,UAAU,EAAE,EAAE;QACd,iBAAiB,EAAE;YACjB,WAAW,EAAE,WAAW;YACxB,cAAc,EAAE,QAAQ;YACxB,YAAY,EAAE,WAAW;SAC1B;QACD,KAAK,EAAE,0BAA0B;KAClC;IACD;QACE,QAAQ,EAAE,+BAA+B;QACzC,UAAU,EAAE,gBAAgB;QAC5B,UAAU,EAAE,EAAE;QACd,iBAAiB,EAAE,mBAAmB;QACtC,KAAK,EAAE,8CAA8C;KACtD;IACD;QACE,QAAQ,EAAE,cAAc;QACxB,UAAU,EAAE,eAAe;QAC3B,UAAU,EAAE,EAAE;QACd,iBAAiB,EAAE,cAAc;QACjC,KAAK,EAAE,mBAAmB;KAC3B;IACD;QACE,QAAQ,EAAE,wBAAwB;QAClC,UAAU,EAAE,eAAe;QAC3B,UAAU,EAAE,EAAE;QACd,iBAAiB,EAAE,QAAQ;QAC3B,KAAK,EAAE,qCAAqC;KAC7C;IACD;QACE,QAAQ,EAAE,wBAAwB;QAClC,UAAU,EAAE,aAAa;QACzB,UAAU,EAAE,CAAC,iBAAiB,CAAC;QAC/B,KAAK,EACH,qFAAqF;KACxF;IACD;QACE,QAAQ,EAAE,wBAAwB;QAClC,UAAU,EAAE,gBAAgB;QAC5B,UAAU,EAAE,EAAE;QACd,iBAAiB,EAAE;YACjB,WAAW,EAAE,WAAW;YACxB,cAAc,EAAE,QAAQ;YACxB,YAAY,EAAE,WAAW;SAC1B;QACD,KAAK,EAAE,4CAA4C;KACpD;IACD;QACE,QAAQ,EAAE,qBAAqB;QAC/B,UAAU,EAAE,gBAAgB;QAC5B,UAAU,EAAE,EAAE;QACd,iBAAiB,EAAE,YAAY;QAC/B,cAAc,EAAE,kBAAkB;QAClC,iBAAiB,EAAE,mBAAmB;QACtC,KAAK,EAAE,uBAAuB;KAC/B;IACD;QACE,QAAQ,EAAE,uBAAuB;QACjC,UAAU,EAAE,gBAAgB;QAC5B,UAAU,EAAE,EAAE;QACd,iBAAiB,EAAE,oBAAoB;QACvC,cAAc,EAAE,iBAAiB;QACjC,iBAAiB,EAAE,mBAAmB;QACtC,KAAK,EAAE,+BAA+B;KACvC;IACD;QACE,QAAQ,EAAE,oBAAoB;QAC9B,UAAU,EAAE,gBAAgB;QAC5B,UAAU,EAAE,EAAE;QACd,WAAW,EAAE,yBAAyB;QACtC,iBAAiB,EAAE,mBAAmB;QACtC,KAAK,EAAE,uBAAuB;KAC/B;IACD;QACE,QAAQ,EAAE,4BAA4B;QACtC,UAAU,EAAE,gBAAgB;QAC5B,UAAU,EAAE,EAAE;QACd,iBAAiB,EAAE;YACjB,WAAW,EAAE,WAAW;YACxB,cAAc,EAAE,QAAQ;YACxB,YAAY,EAAE,cAAc;SAC7B;QACD,KAAK,EAAE,+BAA+B;KACvC;IACD;QACE,QAAQ,EAAE,gBAAgB;QAC1B,UAAU,EAAE,gBAAgB;QAC5B,UAAU,EAAE,EAAE;QACd,iBAAiB,EAAE;YACjB,WAAW,EAAE,WAAW;YACxB,cAAc,EAAE,QAAQ;YACxB,YAAY,EAAE,cAAc;SAC7B;QACD,KAAK,EAAE,oBAAoB;KAC5B;IACD;QACE,QAAQ,EAAE,iBAAiB;QAC3B,UAAU,EAAE,aAAa;QACzB,UAAU,EAAE,CAAC,wBAAwB,CAAC;QACtC,iBAAiB,EAAE,UAAU;QAC7B,cAAc,EAAE,mBAAmB;KACpC;IACD;QACE,QAAQ,EAAE,UAAU;QACpB,UAAU,EAAE,aAAa;QACzB,UAAU,EAAE,CAAC,wBAAwB,CAAC;QACtC,iBAAiB,EAAE,mBAAmB;QACtC,cAAc,EAAE,4BAA4B;KAC7C;IACD;QACE,QAAQ,EAAE,sBAAsB;QAChC,UAAU,EAAE,aAAa;QACzB,UAAU,EAAE,CAAC,iBAAiB,EAAE,wBAAwB,CAAC;QACzD,cAAc,EAAE,KAAK;QACrB,iBAAiB,EAAE,WAAW;QAC9B,cAAc,EAAE,oBAAoB;KACrC;IACD;QACE,QAAQ,EAAE,iBAAiB;QAC3B,UAAU,EAAE,aAAa;QACzB,UAAU,EAAE,CAAC,iBAAiB,CAAC;QAC/B,cAAc,EAAE,sBAAsB;QACtC,KAAK,EAAE,gEAAgE;KACxE;IACD;QACE,QAAQ,EAAE,wBAAwB;QAClC,UAAU,EAAE,UAAU;QACtB,UAAU,EAAE,CAAC,wBAAwB,CAAC;QACtC,KAAK,EAAE,kCAAkC;KAC1C;IACD;QACE,QAAQ,EAAE,wBAAwB;QAClC,UAAU,EAAE,UAAU;QACtB,UAAU,EAAE,CAAC,wBAAwB,CAAC;QACtC,eAAe,EAAE,uCAAuC;QACxD,KAAK,EAAE,mCAAmC;KAC3C;IACD;QACE,QAAQ,EAAE,iBAAiB;QAC3B,UAAU,EAAE,aAAa;QACzB,UAAU,EAAE,CAAC,wBAAwB,CAAC;QACtC,iBAAiB,EAAE,cAAc;QACjC,cAAc,EAAE,4BAA4B;QAC5C,KAAK,EAAE,gCAAgC;KACxC;IACD;QACE,QAAQ,EAAE,6BAA6B;QACvC,UAAU,EAAE,UAAU;QACtB,UAAU,EAAE,EAAE;QACd,KAAK,EAAE,sCAAsC;KAC9C;IACD;QACE,QAAQ,EAAE,mBAAmB;QAC7B,UAAU,EAAE,aAAa;QACzB,UAAU,EAAE,CAAC,6BAA6B,CAAC;QAC3C,iBAAiB,EAAE,aAAa;QAChC,cAAc,EAAE,yBAAyB;QACzC,KAAK,EAAE,+BAA+B;KACvC;IACD;QACE,QAAQ,EAAE,6BAA6B;QACvC,UAAU,EAAE,aAAa;QACzB,UAAU,EAAE,CAAC,eAAe,EAAE,kBAAkB,CAAC;QACjD,cAAc,EAAE,IAAI;QACpB,KAAK,EAAE,+CAA+C;KACvD;IACD;QACE,QAAQ,EAAE,eAAe;QACzB,UAAU,EAAE,aAAa;QACzB,UAAU,EAAE,CAAC,6BAA6B,CAAC;QAC3C,iBAAiB,EAAE,eAAe;QAClC,cAAc,EAAE,uBAAuB;QACvC,KAAK,EAAE,wDAAwD;KAChE;IACD;QACE,QAAQ,EAAE,uBAAuB;QACjC,UAAU,EAAE,aAAa;QACzB,UAAU,EAAE,CAAC,6BAA6B,CAAC;QAC3C,KAAK,EAAE,uDAAuD;KAC/D;IACD;QACE,QAAQ,EAAE,uBAAuB;QACjC,UAAU,EAAE,aAAa;QACzB,UAAU,EAAE,CAAC,uBAAuB,CAAC;QACrC,KAAK,EAAE,wBAAwB;KAChC;IACD;QACE,QAAQ,EAAE,kBAAkB;QAC5B,UAAU,EAAE,aAAa;QACzB,UAAU,EAAE,CAAC,6BAA6B,CAAC;QAC3C,KAAK,EAAE,sCAAsC;KAC9C;IACD;QACE,QAAQ,EAAE,mBAAmB;QAC7B,UAAU,EAAE,aAAa;QACzB,UAAU,EAAE,CAAC,eAAe,CAAC;QAC7B,cAAc,EAAE,IAAI;QACpB,KAAK,EAAE,qEAAqE;KAC7E;IACD;QACE,QAAQ,EAAE,eAAe;QACzB,UAAU,EAAE,aAAa;QACzB,UAAU,EAAE,EAAE;QACd,KAAK,EAAE,iBAAiB;KACzB;IACD;QACE,QAAQ,EAAE,kBAAkB;QAC5B,UAAU,EAAE,aAAa;QACzB,UAAU,EAAE,EAAE;QACd,KAAK,EAAE,cAAc;KACtB;IACD;QACE,QAAQ,EAAE,2BAA2B;QACrC,UAAU,EAAE,aAAa;QACzB,UAAU,EAAE,CAAC,eAAe,CAAC;QAC7B,KAAK,EAAE,QAAQ;KAChB;IACD;QACE,QAAQ,EAAE,mBAAmB;QAC7B,UAAU,EAAE,aAAa;QACzB,UAAU,EAAE,CAAC,kBAAkB,CAAC;QAChC,KAAK,EAAE,gBAAgB;KACxB;IACD;QACE,QAAQ,EAAE,WAAW;QACrB,UAAU,EAAE,aAAa;QACzB,UAAU,EAAE,EAAE;QACd,KAAK,EAAE,iBAAiB;KACzB;IACD;QACE,QAAQ,EAAE,mBAAmB;QAC7B,UAAU,EAAE,aAAa;QACzB,UAAU,EAAE,CAAC,WAAW,CAAC;QACzB,iBAAiB,EAAE,WAAW;QAC9B,cAAc,EAAE,wBAAwB;QACxC,KAAK,EAAE,aAAa;KACrB;IACD;QACE,QAAQ,EAAE,oBAAoB;QAC9B,UAAU,EAAE,aAAa;QACzB,UAAU,EAAE,CAAC,WAAW,CAAC;QACzB,KAAK,EAAE,kBAAkB;KAC1B;IACD;QACE,QAAQ,EAAE,eAAe;QACzB,UAAU,EAAE,aAAa;QACzB,UAAU,EAAE,CAAC,oBAAoB,CAAC;QAClC,cAAc,EAAE,oBAAoB;QACpC,KAAK,EAAE,kCAAkC;KAC1C;IACD;QACE,QAAQ,EAAE,2BAA2B;QACrC,UAAU,EAAE,aAAa;QACzB,UAAU,EAAE,CAAC,oBAAoB,CAAC;QAClC,KAAK,EAAE,+CAA+C;KACvD;IACD;QACE,QAAQ,EAAE,qBAAqB;QAC/B,UAAU,EAAE,aAAa;QACzB,UAAU,EAAE,CAAC,WAAW,CAAC;QACzB,KAAK,EAAE,0CAA0C;KAClD;IACD;QACE,QAAQ,EAAE,gBAAgB;QAC1B,UAAU,EAAE,aAAa;QACzB,UAAU,EAAE,EAAE;QACd,iBAAiB,EAAE,gBAAgB;QACnC,cAAc,EAAE,qBAAqB;KACtC;IACD;QACE,QAAQ,EAAE,2BAA2B;QACrC,UAAU,EAAE,aAAa;QACzB,UAAU,EAAE,CAAC,gBAAgB,CAAC;QAC9B,kBAAkB,EAAE,CAAC,gBAAgB,CAAC;QACtC,KAAK,EAAE,iEAAiE;KACzE;IACD;QACE,QAAQ,EAAE,kBAAkB;QAC5B,UAAU,EAAE,aAAa;QACzB,UAAU,EAAE,EAAE;QACd,KAAK,EAAE,0BAA0B;KAClC;IACD;QACE,QAAQ,EAAE,4BAA4B;QACtC,UAAU,EAAE,aAAa;QACzB,UAAU,EAAE,EAAE;QACd,iBAAiB,EAAE,cAAc;QACjC,cAAc,EAAE,qBAAqB;KACtC;IACD;QACE,QAAQ,EAAE,qBAAqB;QAC/B,UAAU,EAAE,aAAa;QACzB,UAAU,EAAE,EAAE;QACd,iBAAiB,EAAE,kBAAkB;QACrC,KAAK,EAAE,qCAAqC;KAC7C;IACD;QACE,QAAQ,EAAE,6BAA6B;QACvC,UAAU,EAAE,aAAa;QACzB,UAAU,EAAE,CAAC,wBAAwB,CAAC;QACtC,KAAK,EAAE,gBAAgB;KACxB;IACD;QACE,QAAQ,EAAE,kBAAkB;QAC5B,UAAU,EAAE,aAAa;QACzB,UAAU,EAAE,CAAC,kBAAkB,CAAC;QAChC,KAAK,EAAE,4BAA4B;KACpC;IACD;QACE,QAAQ,EAAE,uBAAuB;QACjC,UAAU,EAAE,aAAa;QACzB,UAAU,EAAE,CAAC,wBAAwB,CAAC;QACtC,KAAK,EAAE,kEAAkE;KAC1E;CACO,CAAC;AAEX,MAAM,cAAc,GAAG,IAAI,GAAG,CAC5B,gCAAgC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CACzE,CAAC;AAEF,IAAI,gCAAgC,CAAC,MAAM,KAAK,8BAA8B,EAAE,CAAC;IAC/E,MAAM,IAAI,KAAK,CACb,2CAA2C,8BAA8B,gBAAgB,gCAAgC,CAAC,MAAM,EAAE,CACnI,CAAC;AACJ,CAAC;AAED,IACE,gCAAgC,CAAC,MAAM,KAAK,sBAAsB,CAAC,MAAM;IACzE,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,gCAAgC,CAAC,KAAK,CAAC,EAAE,QAAQ,KAAK,GAAG,CAAC,EACxG,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC,CAAC;AACjG,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAa;IACjD,OAAO,cAAc,CAAC,GAAG,CAAC,KAA4B,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,+BAA+B,CAC7C,QAA6B;IAE7B,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC3C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,iCAAiC,QAAQ,EAAE,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,OAAO,EACL,kCAAkC,EAClC,8BAA8B,EAC9B,sBAAsB,GACvB,CAAC"}

package/dist/tenant-entitlements/evaluateNavEntitlement.d.ts

@@ -0,0 +1,14 @@
+import type { EntitlementBlockAxes } from './types.js';
+export interface EvaluateNavEntitlementInput {
+    readonly blockAxes: EntitlementBlockAxes;
+    readonly grants: readonly string[];
+    readonly requiredCapability: string;
+}
+export interface EvaluateNavEntitlementFromVisibleInput {
+    readonly entitlementVisible: boolean;
+    readonly grants: readonly string[];
+    readonly requiredCapability: string;
+}
+export declare function evaluateNavEntitlementFromVisible(input: EvaluateNavEntitlementFromVisibleInput): boolean;
+export declare function evaluateNavEntitlement(input: EvaluateNavEntitlementInput): boolean;
+//# sourceMappingURL=evaluateNavEntitlement.d.ts.map

package/dist/tenant-entitlements/evaluateNavEntitlement.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evaluateNavEntitlement.d.ts","sourceRoot":"","sources":["../../src/tenant-entitlements/evaluateNavEntitlement.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAGvD,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,SAAS,EAAE,oBAAoB,CAAC;IACzC,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;CACrC;AAED,MAAM,WAAW,sCAAsC;IACrD,QAAQ,CAAC,kBAAkB,EAAE,OAAO,CAAC;IACrC,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;CACrC;AAED,wBAAgB,iCAAiC,CAC/C,KAAK,EAAE,sCAAsC,GAC5C,OAAO,CAKT;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,2BAA2B,GAAG,OAAO,CAMlF"}

package/dist/tenant-entitlements/evaluateNavEntitlement.js

@@ -0,0 +1,19 @@
+/**
+ * Admin nav entitlement ∩ RBAC evaluation (§11.0).
+ *
+ * effectiveNavVisible = entitlement.visible(block) AND rbacHasCap(item.cap)
+ */
+import { hasEffectiveCapability } from '../permissions/effectiveCapabilities.js';
+import { isEntitlementVisible } from './evaluatePosture.js';
+export function evaluateNavEntitlementFromVisible(input) {
+    return (input.entitlementVisible &&
+        hasEffectiveCapability(input.grants, input.requiredCapability));
+}
+export function evaluateNavEntitlement(input) {
+    return evaluateNavEntitlementFromVisible({
+        entitlementVisible: isEntitlementVisible(input.blockAxes),
+        grants: input.grants,
+        requiredCapability: input.requiredCapability,
+    });
+}
+//# sourceMappingURL=evaluateNavEntitlement.js.map

package/dist/tenant-entitlements/evaluateNavEntitlement.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evaluateNavEntitlement.js","sourceRoot":"","sources":["../../src/tenant-entitlements/evaluateNavEntitlement.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,sBAAsB,EAAE,MAAM,yCAAyC,CAAC;AAEjF,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAc5D,MAAM,UAAU,iCAAiC,CAC/C,KAA6C;IAE7C,OAAO,CACL,KAAK,CAAC,kBAAkB;QACxB,sBAAsB,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,kBAAkB,CAAC,CAC/D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAkC;IACvE,OAAO,iCAAiC,CAAC;QACvC,kBAAkB,EAAE,oBAAoB,CAAC,KAAK,CAAC,SAAS,CAAC;QACzD,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;KAC7C,CAAC,CAAC;AACL,CAAC"}

package/dist/tenant-entitlements/evaluatePosture.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Derives read/write posture from entitlement block axes (§6.1).
+ */
+import type { EntitlementBlockAxes, EntitlementMutationMode, EntitlementVisibilityMode, EvaluatedEntitlementPosture } from './types.js';
+/** Nav/API visibility — true when block is not hidden from admin nav (§11.0). */
+export declare function isEntitlementVisible(axes: EntitlementBlockAxes): boolean;
+export declare function allowReadsForMutationMode(mutationMode: EntitlementMutationMode): boolean;
+export declare function allowWritesForMutationMode(mutationMode: EntitlementMutationMode): boolean;
+export declare function evaluatePosture(axes: EntitlementBlockAxes): EvaluatedEntitlementPosture;
+export declare function isVisibleForVisibilityMode(visibilityMode: EntitlementVisibilityMode): boolean;
+//# sourceMappingURL=evaluatePosture.d.ts.map

package/dist/tenant-entitlements/evaluatePosture.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evaluatePosture.d.ts","sourceRoot":"","sources":["../../src/tenant-entitlements/evaluatePosture.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,KAAK,EACV,oBAAoB,EACpB,uBAAuB,EACvB,yBAAyB,EACzB,2BAA2B,EAC5B,MAAM,YAAY,CAAC;AAEpB,iFAAiF;AACjF,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAExE;AAED,wBAAgB,yBAAyB,CAAC,YAAY,EAAE,uBAAuB,GAAG,OAAO,CAExF;AAED,wBAAgB,0BAA0B,CAAC,YAAY,EAAE,uBAAuB,GAAG,OAAO,CAEzF;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,oBAAoB,GAAG,2BAA2B,CAMvF;AAED,wBAAgB,0BAA0B,CAAC,cAAc,EAAE,yBAAyB,GAAG,OAAO,CAE7F"}

package/dist/tenant-entitlements/evaluatePosture.js

@@ -0,0 +1,21 @@
+/** Nav/API visibility — true when block is not hidden from admin nav (§11.0). */
+export function isEntitlementVisible(axes) {
+    return axes.visibilityMode === 'VISIBLE';
+}
+export function allowReadsForMutationMode(mutationMode) {
+    return mutationMode !== 'BLOCK_ALL';
+}
+export function allowWritesForMutationMode(mutationMode) {
+    return mutationMode === 'ALLOW_WRITES';
+}
+export function evaluatePosture(axes) {
+    return {
+        visible: isEntitlementVisible(axes),
+        allowReads: allowReadsForMutationMode(axes.mutationMode),
+        allowWrites: allowWritesForMutationMode(axes.mutationMode),
+    };
+}
+export function isVisibleForVisibilityMode(visibilityMode) {
+    return visibilityMode === 'VISIBLE';
+}
+//# sourceMappingURL=evaluatePosture.js.map

package/dist/tenant-entitlements/evaluatePosture.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evaluatePosture.js","sourceRoot":"","sources":["../../src/tenant-entitlements/evaluatePosture.ts"],"names":[],"mappings":"AAUA,iFAAiF;AACjF,MAAM,UAAU,oBAAoB,CAAC,IAA0B;IAC7D,OAAO,IAAI,CAAC,cAAc,KAAK,SAAS,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,YAAqC;IAC7E,OAAO,YAAY,KAAK,WAAW,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,YAAqC;IAC9E,OAAO,YAAY,KAAK,cAAc,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAA0B;IACxD,OAAO;QACL,OAAO,EAAE,oBAAoB,CAAC,IAAI,CAAC;QACnC,UAAU,EAAE,yBAAyB,CAAC,IAAI,CAAC,YAAY,CAAC;QACxD,WAAW,EAAE,0BAA0B,CAAC,IAAI,CAAC,YAAY,CAAC;KAC3D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,cAAyC;IAClF,OAAO,cAAc,KAAK,SAAS,CAAC;AACtC,CAAC"}

package/dist/tenant-entitlements/index.d.ts

@@ -0,0 +1,10 @@
+export { TENANT_ENTITLEMENT_BLOCK_CATALOG, TENANT_ENTITLEMENT_CATALOG_VERSION, TENANT_ENTITLEMENT_BLOCK_COUNT, ENTITLEMENT_BLOCK_KEYS, getEntitlementBlockCatalogEntry, isEntitlementBlockKey, } from './catalog.js';
+export { ENTITLEMENT_BLOCK_CLASSES, ENTITLEMENT_MUTATION_MODES, ENTITLEMENT_PARENT_OPERATORS, ENTITLEMENT_RUNTIME_MODES, ENTITLEMENT_VISIBILITY_MODES, RECONCILIATION_MODES, SIMPLE_ENTITLEMENT_STATES, TENANT_SURFACE_PRESET_IDS, simpleEntitlementStateToAxes, } from './types.js';
+export { applySimpleStateDependencyImplications } from './applySimpleStateDependencyImplications.js';
+export type { EntitlementBlockAxes, EntitlementBlockCatalogEntry, EntitlementBlockClass, EntitlementBlockKey, EntitlementMutationMode, EntitlementParentOperator, EntitlementRuntimeMode, EntitlementStrategyJson, EntitlementVisibilityMode, EvaluatedEntitlementPosture, PaymentReconciliationStrategy, ReconciliationMode, SimpleEntitlementState, StripeIntegrationStrategy, TenantSurfacePresetId, } from './types.js';
+export { allowReadsForMutationMode, allowWritesForMutationMode, evaluatePosture, isEntitlementVisible, isVisibleForVisibilityMode, } from './evaluatePosture.js';
+export { evaluateNavEntitlement, evaluateNavEntitlementFromVisible, } from './evaluateNavEntitlement.js';
+export type { EvaluateNavEntitlementFromVisibleInput, EvaluateNavEntitlementInput, } from './evaluateNavEntitlement.js';
+export { resolveSalesPointEntitlementCeiling, DEFAULT_ENTITLED_PUBLIC_POSTURE, ENTITLEMENT_SURFACE_DISABLED_CODE, } from '../sales-point/salesPointPublicConfig.js';
+export type { SalesPointPublicEntitlementBlockPosture, SalesPointPublicEntitlementCeiling, } from '../sales-point/salesPointPublicConfig.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/tenant-entitlements/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/tenant-entitlements/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gCAAgC,EAChC,kCAAkC,EAClC,8BAA8B,EAC9B,sBAAsB,EACtB,+BAA+B,EAC/B,qBAAqB,GACtB,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,yBAAyB,EACzB,0BAA0B,EAC1B,4BAA4B,EAC5B,yBAAyB,EACzB,4BAA4B,EAC5B,oBAAoB,EACpB,yBAAyB,EACzB,yBAAyB,EACzB,4BAA4B,GAC7B,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,sCAAsC,EAAE,MAAM,6CAA6C,CAAC;AAErG,YAAY,EACV,oBAAoB,EACpB,4BAA4B,EAC5B,qBAAqB,EACrB,mBAAmB,EACnB,uBAAuB,EACvB,yBAAyB,EACzB,sBAAsB,EACtB,uBAAuB,EACvB,yBAAyB,EACzB,2BAA2B,EAC3B,6BAA6B,EAC7B,kBAAkB,EAClB,sBAAsB,EACtB,yBAAyB,EACzB,qBAAqB,GACtB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,yBAAyB,EACzB,0BAA0B,EAC1B,eAAe,EACf,oBAAoB,EACpB,0BAA0B,GAC3B,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,sBAAsB,EACtB,iCAAiC,GAClC,MAAM,6BAA6B,CAAC;AAErC,YAAY,EACV,sCAAsC,EACtC,2BAA2B,GAC5B,MAAM,6BAA6B,CAAC;AAErC,OAAO,EACL,mCAAmC,EACnC,+BAA+B,EAC/B,iCAAiC,GAClC,MAAM,0CAA0C,CAAC;AAElD,YAAY,EACV,uCAAuC,EACvC,kCAAkC,GACnC,MAAM,0CAA0C,CAAC"}

package/dist/tenant-entitlements/index.js

@@ -0,0 +1,7 @@
+export { TENANT_ENTITLEMENT_BLOCK_CATALOG, TENANT_ENTITLEMENT_CATALOG_VERSION, TENANT_ENTITLEMENT_BLOCK_COUNT, ENTITLEMENT_BLOCK_KEYS, getEntitlementBlockCatalogEntry, isEntitlementBlockKey, } from './catalog.js';
+export { ENTITLEMENT_BLOCK_CLASSES, ENTITLEMENT_MUTATION_MODES, ENTITLEMENT_PARENT_OPERATORS, ENTITLEMENT_RUNTIME_MODES, ENTITLEMENT_VISIBILITY_MODES, RECONCILIATION_MODES, SIMPLE_ENTITLEMENT_STATES, TENANT_SURFACE_PRESET_IDS, simpleEntitlementStateToAxes, } from './types.js';
+export { applySimpleStateDependencyImplications } from './applySimpleStateDependencyImplications.js';
+export { allowReadsForMutationMode, allowWritesForMutationMode, evaluatePosture, isEntitlementVisible, isVisibleForVisibilityMode, } from './evaluatePosture.js';
+export { evaluateNavEntitlement, evaluateNavEntitlementFromVisible, } from './evaluateNavEntitlement.js';
+export { resolveSalesPointEntitlementCeiling, DEFAULT_ENTITLED_PUBLIC_POSTURE, ENTITLEMENT_SURFACE_DISABLED_CODE, } from '../sales-point/salesPointPublicConfig.js';
+//# sourceMappingURL=index.js.map

package/dist/tenant-entitlements/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/tenant-entitlements/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gCAAgC,EAChC,kCAAkC,EAClC,8BAA8B,EAC9B,sBAAsB,EACtB,+BAA+B,EAC/B,qBAAqB,GACtB,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,yBAAyB,EACzB,0BAA0B,EAC1B,4BAA4B,EAC5B,yBAAyB,EACzB,4BAA4B,EAC5B,oBAAoB,EACpB,yBAAyB,EACzB,yBAAyB,EACzB,4BAA4B,GAC7B,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,sCAAsC,EAAE,MAAM,6CAA6C,CAAC;AAoBrG,OAAO,EACL,yBAAyB,EACzB,0BAA0B,EAC1B,eAAe,EACf,oBAAoB,EACpB,0BAA0B,GAC3B,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,sBAAsB,EACtB,iCAAiC,GAClC,MAAM,6BAA6B,CAAC;AAOrC,OAAO,EACL,mCAAmC,EACnC,+BAA+B,EAC/B,iCAAiC,GAClC,MAAM,0CAA0C,CAAC"}

package/dist/tenant-entitlements/types.d.ts

@@ -0,0 +1,63 @@
+/**
+ * Tenant entitlement policy — shared axis types and strategy shapes (ENT-PR-00).
+ * Authoritative block list lives in catalog.ts (§6.3, 44 blocks).
+ */
+export declare const ENTITLEMENT_RUNTIME_MODES: readonly ["ALWAYS_ON", "ENABLED", "DISABLED"];
+export type EntitlementRuntimeMode = (typeof ENTITLEMENT_RUNTIME_MODES)[number];
+export declare const ENTITLEMENT_VISIBILITY_MODES: readonly ["VISIBLE", "HIDDEN"];
+export type EntitlementVisibilityMode = (typeof ENTITLEMENT_VISIBILITY_MODES)[number];
+export declare const ENTITLEMENT_MUTATION_MODES: readonly ["ALLOW_WRITES", "READ_ONLY", "BLOCK_ALL"];
+export type EntitlementMutationMode = (typeof ENTITLEMENT_MUTATION_MODES)[number];
+export declare const ENTITLEMENT_BLOCK_CLASSES: readonly ["CORE_IMMUTABLE", "CORE_REQUIRED", "CONDITIONAL", "STRATEGY"];
+export type EntitlementBlockClass = (typeof ENTITLEMENT_BLOCK_CLASSES)[number];
+export declare const ENTITLEMENT_PARENT_OPERATORS: readonly ["AND", "OR"];
+export type EntitlementParentOperator = (typeof ENTITLEMENT_PARENT_OPERATORS)[number];
+/** SIMPLE profile → three-axis mapping (§6.4). */
+export declare const SIMPLE_ENTITLEMENT_STATES: readonly ["on", "softOffVisible", "softOffHidden", "off", "hardOff"];
+export type SimpleEntitlementState = (typeof SIMPLE_ENTITLEMENT_STATES)[number];
+export declare const RECONCILIATION_MODES: readonly ["MODE_1", "MODE_2"];
+export type ReconciliationMode = (typeof RECONCILIATION_MODES)[number];
+/** STRATEGY block: payment_reconciliation allowedModes (§7.5). */
+export interface PaymentReconciliationStrategy {
+    readonly allowedModes: readonly ReconciliationMode[];
+}
+/** STRATEGY block: stripe_integration_strategy mirrors Tenant.stripeIntegrationMode. */
+export interface StripeIntegrationStrategy {
+    readonly integrationMode: string;
+}
+export type EntitlementStrategyJson = PaymentReconciliationStrategy | StripeIntegrationStrategy | Record<string, unknown>;
+/** Per-block three-axis posture stored on tenant policy rows. */
+export interface EntitlementBlockAxes {
+    readonly runtimeMode: EntitlementRuntimeMode;
+    readonly visibilityMode: EntitlementVisibilityMode;
+    readonly mutationMode: EntitlementMutationMode;
+}
+/** Read/write + nav visibility derived from axes (§6.1, §11.0). */
+export interface EvaluatedEntitlementPosture {
+    readonly visible: boolean;
+    readonly allowReads: boolean;
+    readonly allowWrites: boolean;
+}
+export interface EntitlementBlockCatalogEntry {
+    readonly blockKey: EntitlementBlockKey;
+    readonly blockClass: EntitlementBlockClass;
+    readonly parentKeys: readonly EntitlementBlockKey[];
+    readonly parentOperator?: EntitlementParentOperator;
+    /** Parents that may be absent without blocking entitlement (e.g. tax_management for fiscal). */
+    readonly optionalParentKeys?: readonly EntitlementBlockKey[];
+    readonly adminNavSectionId?: string;
+    readonly routeSuffix?: string;
+    readonly capabilityHint?: string;
+    readonly immutableDefaults?: EntitlementBlockAxes;
+    readonly defaultStrategy?: PaymentReconciliationStrategy;
+    readonly notes?: string;
+}
+export declare const ENTITLEMENT_BLOCK_KEYS: readonly ["platform_core", "dev_entitlement_policy_editor", "transactions", "sales_point_management", "catalog_administration", "audit_event_collection", "audit_logs_admin_ui", "gdpr_consent_admin_ui", "incident_centre_ui", "payment_processing_runtime", "outbox_runtime", "product_vending", "donation", "inventory_management", "loyalty_program", "payment_rails_strategy", "payment_reconciliation", "payments_hub_ui", "stripe_integration_strategy", "fulfillment_queue", "order_pickup_infrastructure", "pickup_points", "immediate_self_pickup", "customer_self_collect", "scheduled_pickup", "staff_pickup_scan", "surface_kiosk", "surface_customer", "realtime_device_transport", "customer_auth_pwa", "analytics", "analytics_summary", "analytics_detailed", "analytics_pii", "customer_behavior_funnels", "analytics_benchmark", "tax_management", "compliance_fiscal_modules", "comms_governance", "permission_management_rbac", "tenant_ops_settings", "bank_account_administration", "receipt_delivery", "bank_inbox_claims_api"];
+export type EntitlementBlockKey = (typeof ENTITLEMENT_BLOCK_KEYS)[number];
+export declare const TENANT_ENTITLEMENT_CATALOG_VERSION: 1;
+export declare const TENANT_ENTITLEMENT_BLOCK_COUNT: 44;
+export declare const TENANT_SURFACE_PRESET_IDS: readonly ["KIOSK_ONLY", "CUSTOMER_ONLY", "BOTH_SURFACES", "DONATION_ONLY", "VENDING_ONLY"];
+export type TenantSurfacePresetId = (typeof TENANT_SURFACE_PRESET_IDS)[number];
+/** Maps SIMPLE UI state to three-axis posture (§6.4). */
+export declare function simpleEntitlementStateToAxes(state: SimpleEntitlementState): EntitlementBlockAxes;
+//# sourceMappingURL=types.d.ts.map

package/dist/tenant-entitlements/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/tenant-entitlements/types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,eAAO,MAAM,yBAAyB,+CAAgD,CAAC;AACvF,MAAM,MAAM,sBAAsB,GAAG,CAAC,OAAO,yBAAyB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhF,eAAO,MAAM,4BAA4B,gCAAiC,CAAC;AAC3E,MAAM,MAAM,yBAAyB,GAAG,CAAC,OAAO,4BAA4B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEtF,eAAO,MAAM,0BAA0B,qDAAsD,CAAC;AAC9F,MAAM,MAAM,uBAAuB,GAAG,CAAC,OAAO,0BAA0B,CAAC,CAAC,MAAM,CAAC,CAAC;AAElF,eAAO,MAAM,yBAAyB,yEAK5B,CAAC;AACX,MAAM,MAAM,qBAAqB,GAAG,CAAC,OAAO,yBAAyB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE/E,eAAO,MAAM,4BAA4B,wBAAyB,CAAC;AACnE,MAAM,MAAM,yBAAyB,GAAG,CAAC,OAAO,4BAA4B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEtF,kDAAkD;AAClD,eAAO,MAAM,yBAAyB,sEAM5B,CAAC;AACX,MAAM,MAAM,sBAAsB,GAAG,CAAC,OAAO,yBAAyB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhF,eAAO,MAAM,oBAAoB,+BAAgC,CAAC;AAClE,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvE,kEAAkE;AAClE,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,YAAY,EAAE,SAAS,kBAAkB,EAAE,CAAC;CACtD;AAED,wFAAwF;AACxF,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,MAAM,uBAAuB,GAC/B,6BAA6B,GAC7B,yBAAyB,GACzB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAE5B,iEAAiE;AACjE,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,WAAW,EAAE,sBAAsB,CAAC;IAC7C,QAAQ,CAAC,cAAc,EAAE,yBAAyB,CAAC;IACnD,QAAQ,CAAC,YAAY,EAAE,uBAAuB,CAAC;CAChD;AAED,mEAAmE;AACnE,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;CAC/B;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAC;IACvC,QAAQ,CAAC,UAAU,EAAE,qBAAqB,CAAC;IAC3C,QAAQ,CAAC,UAAU,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACpD,QAAQ,CAAC,cAAc,CAAC,EAAE,yBAAyB,CAAC;IACpD,gGAAgG;IAChG,QAAQ,CAAC,kBAAkB,CAAC,EAAE,SAAS,mBAAmB,EAAE,CAAC;IAC7D,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,oBAAoB,CAAC;IAClD,QAAQ,CAAC,eAAe,CAAC,EAAE,6BAA6B,CAAC;IACzD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,eAAO,MAAM,sBAAsB,y/BA6CzB,CAAC;AAEX,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE1E,eAAO,MAAM,kCAAkC,EAAG,CAAU,CAAC;AAC7D,eAAO,MAAM,8BAA8B,IAAgC,CAAC;AAE5E,eAAO,MAAM,yBAAyB,4FAM5B,CAAC;AACX,MAAM,MAAM,qBAAqB,GAAG,CAAC,OAAO,yBAAyB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE/E,yDAAyD;AACzD,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,sBAAsB,GAC5B,oBAAoB,CAiCtB"}