feat: add feature flag for analysis tools and extract shared code to library

Author: paustint

apps/api/src/app/db/feature-flags.db.ts

@@ -56,3 +56,15 @@ export async function checkFeatureFlag({ userId, key }: { userId: string; key: F
   const flags = await resolveFeatureFlagsForUser({ userId, teamId });
   return flags[key];
 }
+
+/**
+ * Force a flag on for a single user by upserting a user-scoped override. Intended for test setup so
+ * flag-gated features can be exercised as if rolled out; production rollout is managed via overrides.
+ */
+export async function enableFeatureFlagForUser({ userId, key }: { userId: string; key: FeatureFlagKey }): Promise<void> {
+  await prisma.featureFlagOverride.upsert({
+    where: { uniqueFeatureFlagUser: { key, userId } },
+    create: { key, userId, enabled: true },
+    update: { enabled: true },
+  });
+}

apps/api/src/app/db/subscription.db.ts

@@ -49,6 +49,19 @@ export const updateUserEntitlements = async (customerId: string, entitlementAcce
   });
 };
 
+/**
+ * Force-grant only the Analysis Tools entitlement to a user, leaving the other entitlement flags
+ * untouched. Intended for test setup so the flag-gated, paid-only Analysis Tools render as usable
+ * (unlocked) without provisioning a full paid subscription.
+ */
+export const grantAnalysisToolsEntitlementForUser = async (userId: string): Promise<void> => {
+  await prisma.entitlement.upsert({
+    create: { userId, analysisTools: true },
+    update: { analysisTools: true },
+    where: { userId },
+  });
+};
+
 export const updateTeamEntitlements = async (customerId: string, entitlementAccessUntrusted: EntitlementsAccess) => {
   const entitlementAccess = EntitlementsAccessSchema.parse(entitlementAccessUntrusted);
   const team = await prisma.team.findFirstOrThrow({

apps/api/src/app/routes/test.routes.ts

@@ -4,6 +4,8 @@ import { ApiConnection, getApiRequestFactoryFn } from '@jetstream/salesforce-api
 import { salesforceLoginJwtBearer } from '@jetstream/salesforce-oauth';
 import express, { Router } from 'express';
 import { initConnectionFromOAuthResponse } from '../controllers/oauth.controller';
+import { enableFeatureFlagForUser } from '../db/feature-flags.db';
+import { grantAnalysisToolsEntitlementForUser } from '../db/subscription.db';
 import { NotAllowedError } from '../utils/error-handler';
 import { sendJson } from '../utils/response.handlers';
 
@@ -65,6 +67,12 @@ routes.post('/e2e-integration-org', async (_: express.Request, res: express.Resp
     userId: ENV.EXAMPLE_USER!.id,
   });
 
+  // Exercise the Analysis Tools in E2E as if fully rolled out + entitled: enable the rollout flag (off by
+  // default in code) so the cards/nav render, and grant the paid-only entitlement so they render unlocked
+  // (a locked card renders its links as plain text, which the routing nav tests cannot click).
+  await enableFeatureFlagForUser({ userId: ENV.EXAMPLE_USER!.id, key: 'analysis-tools' });
+  await grantAnalysisToolsEntitlementForUser(ENV.EXAMPLE_USER!.id);
+
   // eslint-disable-next-line @typescript-eslint/no-explicit-any
   sendJson(res as any, salesforceOrg);
 });

libs/features/analysis-shared/eslint.config.js

@@ -0,0 +1,17 @@
+const baseConfig = require('../../../eslint.config.js');
+
+module.exports = [
+  ...baseConfig,
+  {
+    files: ['**/*.ts', '**/*.tsx', '**/*.js', '**/*.jsx'],
+    rules: {},
+  },
+  {
+    files: ['**/*.ts', '**/*.tsx'],
+    rules: {},
+  },
+  {
+    files: ['**/*.js', '**/*.jsx'],
+    rules: {},
+  },
+];

libs/features/analysis-shared/project.json

@@ -0,0 +1,16 @@
+{
+  "name": "features-analysis-shared",
+  "$schema": "../../../node_modules/nx/schemas/project-schema.json",
+  "sourceRoot": "libs/features/analysis-shared/src",
+  "projectType": "library",
+  "tags": ["scope:browser"],
+  "targets": {
+    "test": {
+      "executor": "@nx/vitest:test",
+      "outputs": ["{options.reportsDirectory}"],
+      "options": {
+        "reportsDirectory": "{projectRoot}/../../../coverage/libs/features/analysis-shared"
+      }
+    }
+  }
+}

…_/compute-field-usage-where-used.spec.ts …_/compute-field-usage-where-used.spec.tslibs/features/data-analysis/src/field-usage/__tests__/compute-field-usage-where-used.spec.ts renamed to libs/features/analysis-shared/src/field-usage/__tests__/compute-field-usage-where-used.spec.ts libs/features/data-analysis/src/field-usage/__tests__/compute-field-usage-where-used.spec.ts renamed to libs/features/analysis-shared/src/field-usage/__tests__/compute-field-usage-where-used.spec.ts

@@ -0,0 +1,8 @@
+/**
+ * Pure, UI-free runner logic for the Analysis Tools (Field Usage + Permission Export). Lives in its
+ * own lib so the shared job worker (`ui-core`'s JobWorker) can run analysis jobs without depending on
+ * the feature UI libs — those import UI down from `ui-core`, which would otherwise form a cycle.
+ */
+export * from './field-usage/compute-field-usage-where-used';
+export * from './field-usage/run-field-usage';
+export * from './permission-export';