@i4e/invest4edu-access-core 0.2.0 → 0.3.0

package/package.json

@@ -1,13 +1,14 @@
 {
   "name": "@i4e/invest4edu-access-core",
-  "version": "0.2.0",
-  "description": "Shared tenant-isolation / access-control primitives (Track 3 D1 keystone + role capabilities) for NeoFindesk backends.",
+  "version": "0.3.0",
+  "description": "Shared tenant-isolation / access-control primitives (Track 3 D1 keystone + role capabilities + reportee tree) for NeoFindesk backends.",
   "type": "module",
   "exports": {
     ".": "./src/index.js",
     "./tenant-context": "./src/tenant-context.js",
     "./tenant-plugin": "./src/tenant-plugin.js",
-    "./role-capabilities": "./src/role-capabilities.js"
+    "./role-capabilities": "./src/role-capabilities.js",
+    "./reportee-tree": "./src/reportee-tree.js"
   },
   "files": [
     "src",

package/src/index.js

@@ -10,3 +10,4 @@ export {
   buildCapabilityMap,
   resolveCapabilities,
 } from "./role-capabilities.js";
+export { resolveReporteeUserIds } from "./reportee-tree.js";

package/src/reportee-tree.js

@@ -0,0 +1,35 @@
+/**
+ * Reportee-tree DFS — @i4e/invest4edu-access-core (Track 3 G3 shared primitive).
+ *
+ * The one canonical "self + all reportees" traversal, shared by both backends so v1 and v2
+ * compose the SAME hierarchy scope. Pure + data-source agnostic: the caller passes a flat
+ * employees list `[{ user_id, reporting_manager }]` (v1 feeds the Redis snapshot, v2 the
+ * `employees` collection) and one-or-more root user ids (delegation passes `[self, ...givers]`).
+ *
+ * @param {string|string[]} roots  root user id(s)
+ * @param {Array<{user_id:*, reporting_manager:*}>} employees  flat employee list
+ * @returns {string[]}  de-duplicated reachable set (roots + all reportees) as STRING ids
+ */
+export function resolveReporteeUserIds(roots, employees) {
+  const rootIds = (Array.isArray(roots) ? roots : [roots]).filter((id) => id != null).map(String);
+
+  const byManager = new Map();
+  for (const emp of employees || []) {
+    if (!emp || !emp.user_id) continue;
+    const managerId = String(emp.reporting_manager);
+    if (!byManager.has(managerId)) byManager.set(managerId, []);
+    byManager.get(managerId).push(String(emp.user_id));
+  }
+
+  const visited = new Set();
+  const result = new Set();
+  const stack = [...rootIds];
+  while (stack.length) {
+    const id = stack.pop();
+    if (!id || visited.has(id)) continue;
+    visited.add(id);
+    result.add(id);
+    for (const rep of byManager.get(id) || []) stack.push(rep);
+  }
+  return [...result];
+}