HF-307 PR 4/4: describe only the functions the license grants

[marcin-kordas-hoc]

Last of four. Stacks on hf-307-entitlement-gating-pr3 (#1730) — merge that first. Tests: handsontable/hyperformula-tests#33.

Context

HF-307, decision D2.

getAvailableFunctions() and getFunctionDetails() read straight from the function registry with no license filter, while the interpreter gates the same functions per call. A restricted key therefore advertised functions that return #LIC! when called — precisely the failure #1724 (HF-349) removed the static variants to prevent:

the static one invites a function picker to advertise functions that then fail on evaluation, and nothing errors at integration time

That PR removed the static methods on the rationale that "an instance knows its license key, so it can answer for the engine the caller actually holds". The instance methods never learned to read it. This finishes the job.

The change

Both methods now filter through licenseListsFunction, which shares one licenseAllowsFunction rule with the interpreter rather than spelling the same condition out twice, and canonicalises aliases the same way. Extracting that rule is the point of the PR as much as the filter is: two copies would drift, and the drift is invisible until a customer's function picker offers something that fails.

The one decision worth reviewing

The filter reads gate B only — never the key's validity state.

A missing, invalid or expired key resolves to an unrestricted entitlement (the invariant PR 3 documents), so it reaches the filter with unrestricted set and keeps the whole catalogue. That falls out of the invariant rather than being a second decision — but it is a deliberate one, and the alternative is defensible, so it is worth an explicit look.

I chose it because narrowing on gate A would return two functions (the protected built-ins) to anyone who calls the API before configuring a key — an empty function picker with no clue why, for the exact integrator still wiring things up. A key problem is already reported on the console and by #LIC! in cells. The list narrows only for a valid key that genuinely excludes a function, which is when the answer is useful.

Pinned by tests in both directions; folding gate A into the filter fails 3 of them.

Also

• types-of-errors.md described #LIC! as only ever meaning a key problem. It now also means "not in your package".
• CHANGELOG — the feature's first user-visible entry. PRs 1–3 were internals by design and deliberately carry none.
• The guide documents the mechanism, not the package contents. HF-306 is still in review with six open questions, so publishing the function lists now would put moving targets in the public docs.

How did you test your changes?

• full suite with the private tests attached: 512 suites, 6323 tests passing, 3 skipped, 0 failures
• npx tsc --noEmit: clean. npm run lint: 0 errors
• npm run docs:generate-function-docs: succeeds, and the generated reference still documents BITAND / VLOOKUP / XIRR — the generator builds with gpl-v3, so the published docs do not narrow to a tier
• mutation-tested three ways: removing the list filter fails 4 tests, dropping the custom-function exemption fails 2, folding gate A into the filter fails 3

Not run here: npm run test:browser (Karma needs Firefox, unavailable in this environment). No Jest-only matcher forms were used.

Types of changes

• Breaking change
• New feature or improvement
• Bug fix
• Additional language file
• Change to the documentation

Not marked breaking: the narrowing only happens for a valid restricted key, and no such key can exist for a released version yet.

Related issues

1. HF-307 — Implement feature packages and add-ons in HF (decision D2)
2. Remove the static function metadata API (HF-349) #1724 / HF-349 — removed the static metadata API on the rationale this PR delivers
3. Companion test PR: handsontable/hyperformula-tests#33

Checklist

• I have reviewed the guidelines about Contributing to HyperFormula
• I have signed the Contributor License Agreement
• My change is compliant with the OpenDocument standard
• My change is compatible with Microsoft Excel
• My change is compatible with Google Sheets
• I described my changes in the CHANGELOG.md file
• My changes require a documentation update

The three compatibility boxes are left unticked as not applicable: this change touches no formula semantics.

Found while working on this, NOT fixed here

=OFFSET() with no arguments throws a TypeError out of the parser instead of returning an error value — handleOffsetHeuristic (src/parser/FormulaParser.ts:764) reads args[0].type with no arity check. Pre-existing, unrelated to licensing, and out of scope; flagging it for a separate issue.

---

Note

Medium Risk
Changes public API surface for restricted keys and reshuffles which built-ins belong to each package tier; behavior for invalid keys is intentionally unchanged for listing but still fails in formulas.

Overview
getAvailableFunctions() and getFunctionDetails() now list only functions the instance’s license can evaluate, so a function picker built from them won’t advertise ids that return #LIC!.

Both paths filter through licenseListsFunction, which uses the same licenseAllowsFunction rule and alias canonicalization as the interpreter’s gate-B check. licenseAllowsFunction is extracted in CapabilityRegistry so the metadata API and interpreter can’t drift.

Gate B only: a missing, invalid, or expired key does not shorten the catalogue (unrestricted entitlement); cells still get #LIC!, but integrators can build pickers before a key is configured. Custom registered functions stay listed.

Docs and CHANGELOG cover feature packages, #LIC! semantics, and the updated function-to-package lists in capabilities.ts (aligned with Kuba’s packaging doc).

^{Reviewed by Cursor Bugbot for commit 5d67b5d. Bugbot is set up for automated code reviews on this repo. Configure here.}

[qunabu]

Task linked: HOT-15413 Pick function sets for each HF product package
Task linked: HF-307 Implement feature packages and add-ons in HF
Task linked: HF-349 Static methods cannot read functions granted by license key

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	hyperformula-docs	5d67b5d	Commit Preview URL Branch Preview URL	Aug 17 2026, 06:20 AM

[github-actions]

Performance comparison of head (5d67b5d) vs base (05882e1)

                                     testName |    base |    head | change
--------------------------------------------------------------------------
                                      Sheet A |  399.68 |  406.95 | +1.82%
                                      Sheet B |  135.57 |   135.5 | -0.05%
                                      Sheet T |  115.35 |  117.88 | +2.19%
                                Column ranges |  425.74 |  427.99 | +0.53%
                                Sorted lookup | 12965.6 | 12554.9 | -3.17%
Sheet A:  change value, add/remove row/column |   14.84 |    16.2 | +9.16%
 Sheet B: change value, add/remove row/column |  132.38 |  131.53 | -0.64%
                   Column ranges - add column |  141.29 |  145.05 | +2.66%
                Column ranges - without batch |  428.37 |  438.99 | +2.48%
                        Column ranges - batch |   107.3 |  111.86 | +4.25%

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 97.38%. Comparing base (05882e1) to head (5d67b5d).

Additional details and impacted files

@@                      Coverage Diff                       @@
##           hf-307-entitlement-gating-pr3    #1731   +/-   ##
==============================================================
  Coverage                          97.38%   97.38%           
==============================================================
  Files                                204      204           
  Lines                              16194    16208   +14     
  Branches                            3482     3486    +4     
==============================================================
+ Hits                               15770    15784   +14     
  Misses                               424      424           

Files with missing lines	Coverage Δ
src/HyperFormula.ts	99.76% <100.00%> (+<0.01%)	⬆️
src/interpreter/Interpreter.ts	95.49% <100.00%> (-0.02%)	⬇️
src/license/CapabilityRegistry.ts	100.00% <100.00%> (ø)
src/license/capabilities.ts	100.00% <ø> (ø)

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.