@jini-ai/user-management 0.6.15-rc.2 → 0.6.15

package/dist/server/seed.js

@@ -1,6 +1,6 @@
-import { nowIso as kernelNowIso } from "@jini-ai/core/primitives";
+import { createSystemClock, nowIso as kernelNowIso } from "@jini-ai/core/primitives";
 import { normalizeUsername } from "./username.js";
-import { IdentityNotFoundError } from "../core/types.js";
+import { IdentityNotFoundError, IdentityValidationError } from "../core/types.js";
 /**
  * @file First-boot identity seed (state.spec `SEED_FIRST_BOOT`).
  *
@@ -462,4 +462,27 @@ export async function seedIdentity(required, optional = {}) {
     });
     return { ownerPrincipalId, systemPrincipalId };
 }
+/**
+ * Ensure a credential-free user principal, using externalId as its stable principal ID.
+ * @param required Repository and caller identity; strings are trimmed and limited to 255 characters.
+ * @param optional Workspace scope (defaults to "local" for single-owner hosts) and clock.
+ * @returns The inserted or existing row, preserving existing names and disabled status.
+ * @throws IdentityValidationError for invalid input or an adapter without atomic insertion.
+ */
+export async function ensurePrincipal(required, optional = {}) {
+    const { principalRepo, externalId, displayName } = required;
+    const { workspaceId = "local", clock = createSystemClock() } = optional;
+    for (const [name, value] of Object.entries({ externalId, displayName, workspaceId })) {
+        if (typeof value !== "string" || !value.trim() || value.trim().length > 255) {
+            throw new IdentityValidationError({ message: `${name} must contain 1–255 trimmed characters` });
+        }
+    }
+    if (!principalRepo.insertIfAbsent) {
+        throw new IdentityValidationError({ message: "ensurePrincipal requires atomic principalRepo.insertIfAbsent" });
+    }
+    return principalRepo.insertIfAbsent({ record: {
+            id: externalId.trim(), workspaceId: workspaceId.trim(), kind: "user",
+            displayName: displayName.trim(), status: "active", createdAt: kernelNowIso({ clock }),
+        } });
+}
 //# sourceMappingURL=seed.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jini-ai/user-management",
-  "version": "0.6.15-rc.2",
+  "version": "0.6.15",
   "description": "Runtime-separated user management contracts and Node authentication, authorization, and administration services.",
   "license": "Apache-2.0",
   "repository": {
@@ -87,16 +87,16 @@
     "registry": "https://registry.npmjs.org"
   },
   "dependencies": {
-    "@jini-ai/core": "^0.6.15-rc.2"
+    "@jini-ai/core": "^0.6.15"
   },
   "peerDependencies": {
     "argon2": "^0.44.0",
     "react": "^18.3.0 || ^19.0.0",
     "react-dom": "^18.3.0 || ^19.0.0",
-    "@jini-ai/ui": "^0.6.15-rc.2",
-    "@jini-ai/admin": "^0.6.15-rc.2",
-    "@jini-ai/agentic": "^0.6.15-rc.2",
-    "@jini-ai/ui-kit": "^0.6.15-rc.2"
+    "@jini-ai/ui": "^0.6.10",
+    "@jini-ai/admin": "^0.6.10",
+    "@jini-ai/agentic": "^0.6.10",
+    "@jini-ai/ui-kit": "^0.6.10"
   },
   "peerDependenciesMeta": {
     "argon2": {
@@ -134,12 +134,12 @@
     "@testing-library/user-event": "^14.5.0",
     "@testing-library/jest-dom": "^6.6.3",
     "jsdom": "^25.0.1",
-    "@jini-ai/admin": "0.6.15-rc.2",
-    "@jini-ai/cms": "0.6.15-rc.2",
-    "@jini-ai/ui": "0.6.15-rc.2",
-    "@jini-ai/agentic": "0.6.15-rc.2",
-    "@jini-ai/core": "^0.6.15-rc.2",
-    "@jini-ai/ui-kit": "^0.6.15-rc.2"
+    "@jini-ai/agentic": "0.6.15",
+    "@jini-ai/ui": "0.6.15",
+    "@jini-ai/cms": "0.6.15",
+    "@jini-ai/ui-kit": "^0.6.15",
+    "@jini-ai/core": "^0.6.15",
+    "@jini-ai/admin": "0.6.15"
   },
   "scripts": {
     "build": "tsc -p tsconfig.json",