feat: bridge entitlements and admin portal from native SDKs (2.1.0)

[dianaKhortiuk-frontegg]

Summary

• Bumps FronteggSwift 1.2.76 → 1.3.6 and com.frontegg.sdk:android 1.3.18 → 1.3.31, which is where the entitlements API and the embedded admin portal landed on the native side.
• Adds a thin Capacitor bridge so JS callers can use both features without touching native code.
• Version → 2.1.0.

New JS surface on FronteggService

loadEntitlements(forceRefresh = false): Promise<{ success: boolean }>
getFeatureEntitlement(key: string): Promise<Entitlement>
getPermissionEntitlement(key: string): Promise<Entitlement>
showAdminPortal(): Promise<void>            // Beta

Entitlement is { isEntitled: boolean; justification?: string | null } where justification is one of ENTITLEMENTS_DISABLED, ENTITLEMENTS_NOT_LOADED, MISSING_FEATURE, MISSING_PERMISSION, or NOT_AUTHENTICATED (iOS).

Why now

A customer (Electronic Technologies, Vue + Capacitor) needs both features. The native SDKs have them merged on master; the Capacitor pin was just behind. This is the smallest bridge that unblocks them.

Native entry points used

• iOS — FronteggAuth.loadEntitlements(forceRefresh:completion:), getFeatureEntitlements(featureKey:), getPermissionEntitlements(permissionKey:), AdminPortalView() presented in a UIHostingController sheet over bridge.viewController.
• Android — FronteggAuth.loadEntitlements(forceRefresh, completion), getFeatureEntitlements(key, null), getPermissionEntitlements(key, null), AdminPortalActivity.open(activity). The <activity> is declared in the Android SDK manifest, so host apps need no manifest change.

Test plan

• CI: npm run verify (web + iOS pod install/xcodebuild + Android gradle build) passes against the new native pins.
• Example app: call loadEntitlements() after login and after switchTenant(), then getFeatureEntitlement('beta-dashboard') on a tenant that holds the feature and one that does not — confirm justification values.
• Example app: tap "Open Admin Portal" on iOS — sheet presents, dismisses via swipe and via the portal's X button. Then on Android — AdminPortalActivity launches and back/X both close.
• E2E (follow-up): extend the Android/iOS suites added in E2E: P0 login/logout (Android Espresso + iOS XCUITest) #77 with a happy-path admin-portal open/close test.

Notes

• Admin portal is flagged Beta in docs to match the upstream warning on AdminPortalActivity and AdminPortalView.
• Local npm run build + npm run lint are green. Native verifies require a Capacitor host app (cap sync wires :capacitor-android and runs pod install), so CI is the source of truth for those.

🤖 Generated with Claude Code