@chevre/domain 22.11.0-alpha.8 → 22.11.0

package/example/src/idaas/auth0/getTokenByPrivateKeyJWT.ts

@@ -0,0 +1,84 @@
+// tslint:disable:no-implicit-dependencies no-console
+import * as crypto from 'crypto';
+import { readFileSync } from 'fs';
+import { SignJWT } from 'jose';
+import * as uuid from 'uuid';
+
+const PRIVATE_KEY_FILE_PATH = `${__dirname}/../../samplePrivateKey.pem`;
+
+interface IAuth0Config {
+    auth0Domain: string;
+    clientId: string;
+    privateKeyContent: string; // PEM形式の秘密鍵の内容 (例: fs.readFileSync('private_key.pem', 'utf8'))
+    audience: string;
+}
+
+// 環境変数から機密情報を取得することを強く推奨します
+const auth0config: IAuth0Config = {
+    auth0Domain: String(process.env.AUTH0_DOMAIN),
+    clientId: String(process.env.AUTH0_CLIENT_ID),
+    // keyId: 'xxx',
+    privateKeyContent: readFileSync(PRIVATE_KEY_FILE_PATH, 'utf8'), // 秘密鍵の内容を読み込む
+    audience: String(process.env.AUTH0_AUDIENCE)
+    // scopes: process.env.OKTA_SCOPES || 'api_access_scope openid', // 必要なスコープを指定
+    // authServerId: 'aussd9v86wlIar3cX697', // デフォルト承認サーバーを使用する場合はコメントアウトまたは指定しない
+};
+
+async function generateJwtAssertion(config: IAuth0Config) {
+    const privateKeyPEM = crypto.createPrivateKey(readFileSync(PRIVATE_KEY_FILE_PATH, 'utf8'));
+
+    return new SignJWT({})
+        .setProtectedHeader({
+            alg: 'RS256' // or RS384 or PS256
+            // kid: '(OPTIONAL) KID_GENERATED_BY_AUTH0'
+        })
+        .setIssuedAt()
+        .setIssuer(config.clientId)
+        .setSubject(config.clientId)
+        .setAudience(`https://${config.auth0Domain}/`)
+        .setExpirationTime('1m')
+        .setJti(uuid.v4())
+        .sign(privateKeyPEM);
+}
+
+async function getToken() {
+    try {
+        const jwtAssertion = await generateJwtAssertion(auth0config);
+        console.log('jwtAssertion:', jwtAssertion);
+
+        const body = new URLSearchParams({
+            grant_type: 'client_credentials',
+            client_assertion_type: 'urn:ietf:params:oauth:client-assertion-type:jwt-bearer',
+            client_assertion: jwtAssertion,
+            audience: auth0config.audience
+            // scope: config.scopes,
+        }).toString();
+        const response = await fetch(
+            `https://${auth0config.auth0Domain}/oauth/token`,
+            {
+                method: 'POST',
+                headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+                body: body
+            });
+
+        if (!response.ok) {
+            console.log(await response.json());
+            throw new Error('Network response was not ok');
+        }
+
+        const data = await response.json();
+        console.log(data);
+
+        return data;
+    } catch (error) {
+        console.error('Error fetching token:', error);
+    }
+}
+
+export async function main() {
+    const token = await getToken();
+    console.log(token);
+}
+
+main()
+    .catch(console.error);

package/example/src/regex.ts

@@ -0,0 +1,31 @@
+// tslint:disable:no-console
+const projectIdMustBe = /^[0-9a-z-]+$/; // 記号はhyphenのみ許可
+
+let projectId: string;
+
+projectId = 'projectId';
+console.log(projectId, ':', projectIdMustBe.test(projectId));
+
+projectId = 'projectid';
+console.log(projectId, ':', projectIdMustBe.test(projectId));
+
+projectId = 'abcd1234-test';
+console.log(projectId, ':', projectIdMustBe.test(projectId));
+
+projectId = 'a-z';
+console.log(projectId, ':', projectIdMustBe.test(projectId));
+
+projectId = '0-9';
+console.log(projectId, ':', projectIdMustBe.test(projectId));
+
+projectId = '---';
+console.log(projectId, ':', projectIdMustBe.test(projectId));
+
+projectId = '-';
+console.log(projectId, ':', projectIdMustBe.test(projectId));
+
+projectId = '&';
+console.log(projectId, ':', projectIdMustBe.test(projectId));
+
+projectId = 'A';
+console.log(projectId, ':', projectIdMustBe.test(projectId));

package/lib/chevre/eventEmitter/task.d.ts

@@ -12,30 +12,53 @@ interface IExecuteSettings {
      */
     redisClient?: RedisClientType;
 }
-type IOperationExecute<T> = (settings: IExecuteSettings) => Promise<T>;
-type INextFunction = (task: Pick<factory.task.ITask<factory.taskName>, 'id'>) => IOperationExecute<void>;
 interface IReadyTask {
     id: string;
     name?: factory.taskName;
     status: factory.taskStatus.Ready;
+    remainingNumberOfTries?: never;
     expires?: Date;
     executionResult?: never;
 }
+/**
+ * タスク名不明の遅延実行中タスク
+ */
 interface IRunningTask {
     id: string;
     status: factory.taskStatus.Running;
     name?: never;
+    remainingNumberOfTries?: never;
+    expires?: never;
+    executionResult?: never;
+}
+/**
+ * タスク名指定での遅延実行中タスク
+ */
+interface IRunningTaskByName {
+    id: string;
+    status: factory.taskStatus.Running;
+    name: factory.taskName;
+    remainingNumberOfTries?: never;
     expires?: never;
     executionResult?: never;
 }
+/**
+ * 実行後タスクイベント
+ */
 interface IExecutedTask {
     id: string;
-    status: factory.taskStatus;
+    status: factory.taskStatus.Executed | factory.taskStatus.Running | factory.taskStatus.Aborted;
+    name: factory.taskName;
     executionResult: factory.task.IExecutionResult;
-    name?: never;
+    /**
+     * 実行されたタスクの残り試行回数
+     */
+    remainingNumberOfTries: number;
     expires?: never;
 }
-type IChangedTask = IReadyTask | IRunningTask | IExecutedTask;
+type IChangedTask = IReadyTask | IRunningTask | IRunningTaskByName | IExecutedTask;
+type IOperationExecute<T> = (settings: IExecuteSettings) => Promise<T>;
+type INextFunction = (task: IExecutedTask) => IOperationExecute<void>;
 type IOnTaskStatusChangedListener = (task: IChangedTask, next?: INextFunction) => void;
 /**
  * タスクイベントエミッター
@@ -45,4 +68,4 @@ declare class TaskEventEmitter extends EventEmitter {
     emitTaskStatusChanged(task: IChangedTask, next?: INextFunction): void;
 }
 declare const taskEventEmitter: TaskEventEmitter;
-export { IChangedTask, IReadyTask, IRunningTask, IExecutedTask, IExecuteSettings, INextFunction, IOnTaskStatusChangedListener, taskEventEmitter };
+export { IChangedTask, IReadyTask, IRunningTask, IRunningTaskByName, IExecutedTask, IExecuteSettings, INextFunction, IOnTaskStatusChangedListener, taskEventEmitter };

package/lib/chevre/index.d.ts

@@ -3,7 +3,6 @@
  */
 import type * as COAService from '@motionpicture/coa-service';
 import type * as GMOService from '@motionpicture/gmo-service';
-import type * as AdminAuth from './adminAuth';
 import type * as Pecorinoapi from './pecorinoapi';
 import { credentials } from './credentials';
 import * as errorHandler from './errorHandler';
@@ -13,7 +12,6 @@ import * as repository from './repository';
 import * as service from './service';
 import * as settings from './settings';
 export { credentials, errorHandler, eventEmitter, factory, repository, service, settings };
-export declare function loadAdminAuth(): Promise<typeof AdminAuth>;
 export declare function loadPecorinoapi(): Promise<typeof Pecorinoapi>;
 export type COA = typeof COAService;
 export declare function loadCOA(): Promise<typeof COAService>;

package/lib/chevre/index.js

@@ -10,7 +10,6 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.settings = exports.service = exports.repository = exports.factory = exports.eventEmitter = exports.errorHandler = exports.credentials = void 0;
-exports.loadAdminAuth = loadAdminAuth;
 exports.loadPecorinoapi = loadPecorinoapi;
 exports.loadCOA = loadCOA;
 exports.loadGMO = loadGMO;
@@ -28,15 +27,6 @@ const service = require("./service");
 exports.service = service;
 const settings = require("./settings");
 exports.settings = settings;
-let adminAuth;
-function loadAdminAuth() {
-    return __awaiter(this, void 0, void 0, function* () {
-        if (adminAuth === undefined) {
-            adminAuth = yield Promise.resolve().then(() => require('./adminAuth'));
-        }
-        return adminAuth;
-    });
-}
 let pecorinoapi;
 function loadPecorinoapi() {
     return __awaiter(this, void 0, void 0, function* () {

package/lib/chevre/repo/identity.d.ts

@@ -1,6 +1,8 @@
 import { Connection, FilterQuery, QueryOptions } from 'mongoose';
 import * as factory from '../factory';
-export type ISavingIdentity = Pick<factory.creativeWork.certification.webApplication.ICertification, 'about' | 'project' | 'typeOf'> & {
+type ISavingSoftwareApplicationIdentity = Pick<factory.creativeWork.certification.softwareApplication.ICertification, 'about' | 'project' | 'typeOf'>;
+type ISavingWebApplicationIdentity = Pick<factory.creativeWork.certification.webApplication.ICertification, 'about' | 'project' | 'typeOf'>;
+export type ISavingIdentity = (ISavingSoftwareApplicationIdentity | ISavingWebApplicationIdentity) & {
     id?: never;
     dateCreated?: never;
     dateModified?: never;
@@ -11,7 +13,7 @@ interface IUnset {
         [key: string]: 1;
     };
 }
-type IIdentityWithId = factory.creativeWork.certification.webApplication.ICertification & {
+type IIdentityWithId = (factory.creativeWork.certification.softwareApplication.ICertification | factory.creativeWork.certification.webApplication.ICertification) & {
     id: string;
 };
 type IKeyOfProjection = keyof factory.creativeWork.certification.webApplication.ICertification;
@@ -35,39 +37,15 @@ export declare class IdentityRepo {
             id: string;
         };
     }): Promise<void>;
-    getCursor(conditions: any, projection: any): import("mongoose").Cursor<import("mongoose").Document<unknown, {}, {
-        project: Pick<factory.project.IProject, "id" | "typeOf">;
-        typeOf: factory.creativeWorkType.Certification;
-        about: import("@chevre/factory/lib/creativeWork/certification/webApplication").IAbout;
-        dateCreated?: Date | undefined;
-        dateModified?: Date | undefined;
-        issuedBy: import("@chevre/factory/lib/creativeWork/certification/webApplication").IIssuedBy | import("@chevre/factory/lib/creativeWork/certification/webApplication").IIssuedBy[];
-    }> & {
-        project: Pick<factory.project.IProject, "id" | "typeOf">;
-        typeOf: factory.creativeWorkType.Certification;
-        about: import("@chevre/factory/lib/creativeWork/certification/webApplication").IAbout;
-        dateCreated?: Date | undefined;
-        dateModified?: Date | undefined;
-        issuedBy: import("@chevre/factory/lib/creativeWork/certification/webApplication").IIssuedBy | import("@chevre/factory/lib/creativeWork/certification/webApplication").IIssuedBy[];
-    } & {
+    getCursor(conditions: any, projection: any): import("mongoose").Cursor<import("mongoose").Document<unknown, {}, Omit<import("@chevre/factory/lib/creativeWork/certification/softwareApplication").ICertification, "id"> | Omit<import("@chevre/factory/lib/creativeWork/certification/webApplication").ICertification, "id">> & ((Omit<import("@chevre/factory/lib/creativeWork/certification/softwareApplication").ICertification, "id"> & {
         _id: import("mongoose").Types.ObjectId;
-    }, QueryOptions<import("mongoose").Document<unknown, {}, {
-        project: Pick<factory.project.IProject, "id" | "typeOf">;
-        typeOf: factory.creativeWorkType.Certification;
-        about: import("@chevre/factory/lib/creativeWork/certification/webApplication").IAbout;
-        dateCreated?: Date | undefined;
-        dateModified?: Date | undefined;
-        issuedBy: import("@chevre/factory/lib/creativeWork/certification/webApplication").IIssuedBy | import("@chevre/factory/lib/creativeWork/certification/webApplication").IIssuedBy[];
-    }> & {
-        project: Pick<factory.project.IProject, "id" | "typeOf">;
-        typeOf: factory.creativeWorkType.Certification;
-        about: import("@chevre/factory/lib/creativeWork/certification/webApplication").IAbout;
-        dateCreated?: Date | undefined;
-        dateModified?: Date | undefined;
-        issuedBy: import("@chevre/factory/lib/creativeWork/certification/webApplication").IIssuedBy | import("@chevre/factory/lib/creativeWork/certification/webApplication").IIssuedBy[];
-    } & {
+    }) | (Omit<import("@chevre/factory/lib/creativeWork/certification/webApplication").ICertification, "id"> & {
         _id: import("mongoose").Types.ObjectId;
-    }>>;
+    })), QueryOptions<import("mongoose").Document<unknown, {}, Omit<import("@chevre/factory/lib/creativeWork/certification/softwareApplication").ICertification, "id"> | Omit<import("@chevre/factory/lib/creativeWork/certification/webApplication").ICertification, "id">> & ((Omit<import("@chevre/factory/lib/creativeWork/certification/softwareApplication").ICertification, "id"> & {
+        _id: import("mongoose").Types.ObjectId;
+    }) | (Omit<import("@chevre/factory/lib/creativeWork/certification/webApplication").ICertification, "id"> & {
+        _id: import("mongoose").Types.ObjectId;
+    }))>>;
     updateIssuedBy2array(params: Pick<ISavingIdentity, 'issuedBy'> & {
         id: string;
     }): Promise<void>;

package/lib/chevre/repo/identity.js

@@ -8,17 +8,6 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
         step((generator = generator.apply(thisArg, _arguments || [])).next());
     });
 };
-var __rest = (this && this.__rest) || function (s, e) {
-    var t = {};
-    for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p) && e.indexOf(p) < 0)
-        t[p] = s[p];
-    if (s != null && typeof Object.getOwnPropertySymbols === "function")
-        for (var i = 0, p = Object.getOwnPropertySymbols(s); i < p.length; i++) {
-            if (e.indexOf(p[i]) < 0 && Object.prototype.propertyIsEnumerable.call(s, p[i]))
-                t[p[i]] = s[p[i]];
-        }
-    return t;
-};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.IdentityRepo = void 0;
 const factory = require("../factory");
@@ -76,12 +65,15 @@ class IdentityRepo {
                     throw new factory.errors.ArgumentNull('id');
                 }
                 // issuedByのみ更新可能
-                const _c = params.attributes, { id, dateCreated, about, project, typeOf, $unset } = _c, updateFields = __rest(_c, ["id", "dateCreated", "about", "project", "typeOf", "$unset"]);
+                const { project, $unset, issuedBy } = params.attributes;
                 const filter = {
                     _id: { $eq: savingId },
                     'project.id': { $eq: project.id }
                 };
-                const update = Object.assign({ $set: Object.assign(Object.assign({}, updateFields), { dateModified: new Date() }) }, ($unset !== undefined && $unset !== null) ? { $unset } : undefined);
+                const update = Object.assign({ $set: {
+                        issuedBy,
+                        dateModified: new Date()
+                    } }, ($unset !== undefined && $unset !== null) ? { $unset } : undefined);
                 const options = {
                     upsert: false,
                     new: true,
@@ -96,8 +88,11 @@ class IdentityRepo {
                 savedId = savingId;
             }
             else {
-                const _d = params.attributes, { $unset, id, dateModified } = _d, createParams = __rest(_d, ["$unset", "id", "dateModified"]);
-                const result = yield this.identityModel.insertMany(Object.assign(Object.assign({}, createParams), { dateCreated: new Date() }), { rawResult: true });
+                const { typeOf, about, project, issuedBy } = params.attributes;
+                const result = yield this.identityModel.insertMany({
+                    typeOf, about, project, issuedBy,
+                    dateCreated: new Date()
+                }, { rawResult: true });
                 const insertedId = (_b = (_a = result.insertedIds) === null || _a === void 0 ? void 0 : _a[0]) === null || _b === void 0 ? void 0 : _b.toHexString();
                 if (typeof insertedId !== 'string') {
                     throw new factory.errors.Internal(`seller not saved unexpectedly. result:${JSON.stringify(result)}`);

package/lib/chevre/repo/member.d.ts

@@ -1,11 +1,13 @@
 import type { Connection, FilterQuery } from 'mongoose';
 import * as factory from '../factory';
+import { IGlobalMember } from './mongoose/schemas/member/global';
 type IKeyOfProjection = keyof factory.iam.IMember;
 export type ICustomerMember = Pick<factory.iam.IMemberOfRole, 'hasRole' | 'id' | 'name' | 'memberOf'>;
 /**
  * IAMメンバーリポジトリ
  */
 export declare class MemberRepo {
+    private readonly globalMemberModel;
     private readonly memberModel;
     constructor(connection: Connection);
     static CREATE_MONGO_CONDITIONS(params: factory.iam.ISearchConditions): FilterQuery<factory.iam.IMember>[];
@@ -37,7 +39,10 @@ export declare class MemberRepo {
     }): Promise<{
         member: ICustomerMember;
     }[]>;
-    aggregateRoleNames(params: {
+    /**
+     * distinctコマンドを使用して、プロジェクトメンバーのロールを検索する
+     */
+    findRoleNamesByMember(params: {
         project: {
             id: {
                 $eq: string;
@@ -56,9 +61,7 @@ export declare class MemberRepo {
                 };
             };
         };
-    }): Promise<{
-        roleName: string;
-    }[]>;
+    }): Promise<string[]>;
     deleteByProject(params: {
         project: {
             id: string;
@@ -163,6 +166,21 @@ export declare class MemberRepo {
         filter: any;
         $unset: any;
     }): Promise<import("mongoose").UpdateWriteOpResult>;
+    /**
+     * グローバルメンバー作成
+     * 2025-07-21~
+     */
+    createGlobalMember(params: IGlobalMember[]): Promise<void>;
+    /**
+     * distinctコマンドを使用して、グローバルメンバーのロールを検索する
+     */
+    findGlobalRoleNamesByMember(params: {
+        member: {
+            id: {
+                $eq: string;
+            };
+        };
+    }): Promise<string[]>;
     private projectFields;
 }
 export {};

package/lib/chevre/repo/member.js

@@ -13,16 +13,19 @@ exports.MemberRepo = void 0;
 const factory = require("../factory");
 const settings_1 = require("../settings");
 const member_1 = require("./mongoose/schemas/member");
+const global_1 = require("./mongoose/schemas/member/global");
 const AVAILABLE_PROJECT_FIELDS = [
     'project',
     'typeOf',
     'member'
 ];
+const ANY_PROJECT_ID = '*';
 /**
  * IAMメンバーリポジトリ
  */
 class MemberRepo {
     constructor(connection) {
+        this.globalMemberModel = connection.model(global_1.modelName, (0, global_1.createSchema)());
         this.memberModel = connection.model(member_1.modelName, (0, member_1.createSchema)());
     }
     // tslint:disable-next-line:cyclomatic-complexity max-func-body-length
@@ -112,7 +115,7 @@ class MemberRepo {
                 throw new factory.errors.ArgumentNull('project.id');
             }
             const filterQueries = MemberRepo.CREATE_MONGO_CONDITIONS({
-                project: { id: { $in: [params.project.id, '*'] } }, // 全プロジェクトで利用可能なクライアントを考慮(2025-01-11~)
+                project: { id: { $in: [params.project.id, ANY_PROJECT_ID] } }, // 全プロジェクトで利用可能なクライアントを考慮(2025-01-11~)
                 member: {
                     typeOf: { $eq: factory.creativeWorkType.WebApplication },
                     memberOf: { typeOf: { $eq: factory.organizationType.Project } }, // プロジェクトメンバーのはず
@@ -163,32 +166,55 @@ class MemberRepo {
                 .exec();
         });
     }
-    aggregateRoleNames(params) {
+    // migrate to findRoleNamesByMember(2025-07-21~)
+    // public async aggregateRoleNames(params: {
+    //     project: { id: { $eq: string } };
+    //     member: {
+    //         id: { $eq: string };
+    //         memberOf: {
+    //             id: { $eq: string };
+    //             typeOf: { $eq: factory.organizationType.Corporation | factory.organizationType.Project };
+    //         };
+    //     };
+    // }): Promise<{ roleName: string }[]> {
+    //     const matchStages: IMatchStage[] = [
+    //         { $match: { 'project.id': { $eq: params.project.id.$eq } } },
+    //         { $match: { 'member.id': { $eq: params.member.id.$eq } } },
+    //         { $match: { 'member.memberOf.id': { $eq: params.member.memberOf.id.$eq } } },
+    //         { $match: { 'member.memberOf.typeOf': { $eq: params.member.memberOf.typeOf.$eq } } }
+    //     ];
+    //     const aggregate = this.memberModel.aggregate([
+    //         // ...(typeof params.sort?.productID === 'number')
+    //         //     ? [{ $sort: { productID: params.sort.productID } }]
+    //         //     : [],
+    //         ...matchStages,
+    //         {
+    //             $unwind: {
+    //                 path: '$member.hasRole'
+    //             }
+    //         },
+    //         {
+    //             $project: {
+    //                 _id: 0,
+    //                 roleName: '$member.hasRole.roleName'
+    //             }
+    //         }
+    //     ]);
+    //     return aggregate.option({ maxTimeMS: MONGO_MAX_TIME_MS })
+    //         .exec();
+    // }
+    /**
+     * distinctコマンドを使用して、プロジェクトメンバーのロールを検索する
+     */
+    findRoleNamesByMember(params) {
         return __awaiter(this, void 0, void 0, function* () {
-            const matchStages = [
-                { $match: { 'project.id': { $eq: params.project.id.$eq } } },
-                { $match: { 'member.id': { $eq: params.member.id.$eq } } },
-                { $match: { 'member.memberOf.id': { $eq: params.member.memberOf.id.$eq } } },
-                { $match: { 'member.memberOf.typeOf': { $eq: params.member.memberOf.typeOf.$eq } } }
-            ];
-            const aggregate = this.memberModel.aggregate([
-                // ...(typeof params.sort?.productID === 'number')
-                //     ? [{ $sort: { productID: params.sort.productID } }]
-                //     : [],
-                ...matchStages,
-                {
-                    $unwind: {
-                        path: '$member.hasRole'
-                    }
-                },
-                {
-                    $project: {
-                        _id: 0,
-                        roleName: '$member.hasRole.roleName'
-                    }
-                }
-            ]);
-            return aggregate.option({ maxTimeMS: settings_1.MONGO_MAX_TIME_MS })
+            return this.memberModel.distinct('member.hasRole.roleName', {
+                'project.id': { $eq: params.project.id.$eq },
+                'member.id': { $eq: params.member.id.$eq },
+                'member.memberOf.id': { $eq: params.member.memberOf.id.$eq },
+                'member.memberOf.typeOf': { $eq: params.member.memberOf.typeOf.$eq }
+            })
+                .setOptions({ maxTimeMS: settings_1.MONGO_MAX_TIME_MS })
                 .exec();
         });
     }
@@ -293,7 +319,9 @@ class MemberRepo {
             if (typeof params.page !== 'number') {
                 throw new factory.errors.ArgumentNull('page');
             }
-            const matchStages = [{ $match: { 'member.id': { $eq: params.member.id } } }];
+            const matchStages = [
+                { $match: { 'member.id': { $eq: params.member.id } } }
+            ];
             if (typeof ((_b = (_a = params.project) === null || _a === void 0 ? void 0 : _a.id) === null || _b === void 0 ? void 0 : _b.$eq) === 'string') {
                 matchStages.push({ $match: { 'project.id': { $eq: params.project.id.$eq } } });
             }
@@ -343,6 +371,32 @@ class MemberRepo {
                 .exec();
         });
     }
+    /**
+     * グローバルメンバー作成
+     * 2025-07-21~
+     */
+    createGlobalMember(params) {
+        return __awaiter(this, void 0, void 0, function* () {
+            if (params.length > 0) {
+                yield this.globalMemberModel.insertMany(params.map(({ typeOf, member }) => ({ typeOf, member })));
+            }
+            else {
+                // no op
+            }
+        });
+    }
+    /**
+     * distinctコマンドを使用して、グローバルメンバーのロールを検索する
+     */
+    findGlobalRoleNamesByMember(params) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return this.globalMemberModel.distinct('member.hasRole.roleName', {
+                'member.id': { $eq: params.member.id.$eq }
+            })
+                .setOptions({ maxTimeMS: settings_1.MONGO_MAX_TIME_MS })
+                .exec();
+        });
+    }
     projectFields(params, inclusion) {
         return __awaiter(this, void 0, void 0, function* () {
             const conditions = MemberRepo.CREATE_MONGO_CONDITIONS(params);

package/lib/chevre/repo/mongoose/schemas/identity.d.ts

@@ -1,6 +1,6 @@
 import { IndexDefinition, IndexOptions, Model, Schema, SchemaDefinition } from 'mongoose';
 import * as factory from '../../../factory';
-type IDocType = Omit<factory.creativeWork.certification.webApplication.ICertification, 'id'>;
+type IDocType = Omit<factory.creativeWork.certification.softwareApplication.ICertification, 'id'> | Omit<factory.creativeWork.certification.webApplication.ICertification, 'id'>;
 type IModel = Model<IDocType>;
 type ISchemaDefinition = SchemaDefinition<IDocType>;
 type ISchema = Schema<IDocType, IModel, {}, {}, {}, {}, ISchemaDefinition, IDocType>;

package/lib/chevre/repo/mongoose/schemas/member/global.d.ts

@@ -0,0 +1,14 @@
+import { IndexDefinition, IndexOptions, Model, Schema, SchemaDefinition } from 'mongoose';
+import * as factory from '../../../../factory';
+type IMemberOfRole = Pick<factory.iam.IMemberOfRole, 'hasRole' | 'id' | 'image' | 'name' | 'typeOf' | 'username'>;
+type IGlobalMember = Pick<factory.iam.IMember, 'typeOf'> & {
+    member: IMemberOfRole;
+};
+type IDocType = IGlobalMember;
+type IModel = Model<IDocType>;
+type ISchemaDefinition = SchemaDefinition<IDocType>;
+type ISchema = Schema<IDocType, IModel, {}, {}, {}, {}, ISchemaDefinition, IDocType>;
+declare const modelName = "Member.Global";
+declare const indexes: [d: IndexDefinition, o: IndexOptions][];
+declare function createSchema(): ISchema;
+export { createSchema, IGlobalMember, IModel, indexes, modelName };

package/lib/chevre/repo/mongoose/schemas/member/global.js

@@ -0,0 +1,82 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.modelName = exports.indexes = void 0;
+exports.createSchema = createSchema;
+const mongoose_1 = require("mongoose");
+const writeConcern_1 = require("../../writeConcern");
+const settings_1 = require("../../../../settings");
+const modelName = 'Member.Global';
+exports.modelName = modelName;
+const schemaDefinition = {
+    // globalロール管理なのでprojectは不要
+    // project: {
+    //     type: SchemaTypes.Mixed,
+    //     required: true
+    // },
+    typeOf: {
+        type: String,
+        required: true
+    },
+    member: {
+        type: mongoose_1.SchemaTypes.Mixed,
+        required: true
+    }
+};
+const schemaOptions = {
+    autoIndex: settings_1.MONGO_AUTO_INDEX,
+    autoCreate: false,
+    collection: 'members.global',
+    id: true,
+    read: settings_1.MONGO_READ_PREFERENCE,
+    writeConcern: writeConcern_1.writeConcern,
+    strict: true,
+    strictQuery: false,
+    timestamps: false,
+    versionKey: false,
+    toJSON: {
+        getters: false,
+        virtuals: false,
+        minimize: false,
+        versionKey: false
+    },
+    toObject: {
+        getters: false,
+        virtuals: true,
+        minimize: false,
+        versionKey: false
+    }
+};
+const indexes = [
+    [
+        { 'member.id': 1 },
+        {
+            name: 'uniqueIAMMember',
+            unique: true
+        }
+    ],
+    [
+        { 'member.hasRole.roleName': 1, 'member.id': 1 },
+        {
+            name: 'searchByMemberHasRoleRoleName',
+            partialFilterExpression: {
+                'member.hasRole.roleName': { $exists: true }
+            }
+        }
+    ]
+];
+exports.indexes = indexes;
+/**
+ * グロバールIAMメンバースキーマ
+ */
+let schema;
+function createSchema() {
+    if (schema === undefined) {
+        schema = new mongoose_1.Schema(schemaDefinition, schemaOptions);
+        if (settings_1.MONGO_AUTO_INDEX) {
+            indexes.forEach((indexParams) => {
+                schema === null || schema === void 0 ? void 0 : schema.index(...indexParams);
+            });
+        }
+    }
+    return schema;
+}