@jini-ai/user-management 0.6.15-rc.2 → 0.6.16

package/dist/server/seed.d.ts

@@ -1,5 +1,6 @@
 import type { Clock, IdGenerator, UUID } from "@jini-ai/core/primitives";
-import type { IdentityRepos, PasswordHasherPort } from "../core/ports.js";
+import type { IdentityRepos, PasswordHasherPort, PrincipalRepoPort } from "../core/ports.js";
+import { type PrincipalRecord } from "../core/types.js";
 export interface SeedIdentityDeps {
     repos: IdentityRepos;
     hasher: PasswordHasherPort;
@@ -56,4 +57,19 @@ export declare function seedIdentity(required: {
     deps: SeedIdentityDeps;
     input: SeedIdentityInput;
 }, optional?: SeedIdentityOptions): Promise<SeedIdentityResult>;
+/**
+ * Ensure a credential-free user principal, using externalId as its stable principal ID.
+ * @param required Repository and caller identity; strings are trimmed and limited to 255 characters.
+ * @param optional Workspace scope (defaults to "local" for single-owner hosts) and clock.
+ * @returns The inserted or existing row, preserving existing names and disabled status.
+ * @throws IdentityValidationError for invalid input or an adapter without atomic insertion.
+ */
+export declare function ensurePrincipal(required: {
+    principalRepo: PrincipalRepoPort;
+    externalId: string;
+    displayName: string;
+}, optional?: {
+    workspaceId?: UUID;
+    clock?: Clock;
+}): Promise<PrincipalRecord>;
 //# sourceMappingURL=seed.d.ts.map

package/dist/server/seed.js

@@ -1,6 +1,6 @@
-import { nowIso as kernelNowIso } from "@jini-ai/core/primitives";
+import { createSystemClock, nowIso as kernelNowIso } from "@jini-ai/core/primitives";
 import { normalizeUsername } from "./username.js";
-import { IdentityNotFoundError } from "../core/types.js";
+import { IdentityNotFoundError, IdentityValidationError } from "../core/types.js";
 /**
  * @file First-boot identity seed (state.spec `SEED_FIRST_BOOT`).
  *
@@ -462,4 +462,27 @@ export async function seedIdentity(required, optional = {}) {
     });
     return { ownerPrincipalId, systemPrincipalId };
 }
+/**
+ * Ensure a credential-free user principal, using externalId as its stable principal ID.
+ * @param required Repository and caller identity; strings are trimmed and limited to 255 characters.
+ * @param optional Workspace scope (defaults to "local" for single-owner hosts) and clock.
+ * @returns The inserted or existing row, preserving existing names and disabled status.
+ * @throws IdentityValidationError for invalid input or an adapter without atomic insertion.
+ */
+export async function ensurePrincipal(required, optional = {}) {
+    const { principalRepo, externalId, displayName } = required;
+    const { workspaceId = "local", clock = createSystemClock() } = optional;
+    for (const [name, value] of Object.entries({ externalId, displayName, workspaceId })) {
+        if (typeof value !== "string" || !value.trim() || value.trim().length > 255) {
+            throw new IdentityValidationError({ message: `${name} must contain 1–255 trimmed characters` });
+        }
+    }
+    if (!principalRepo.insertIfAbsent) {
+        throw new IdentityValidationError({ message: "ensurePrincipal requires atomic principalRepo.insertIfAbsent" });
+    }
+    return principalRepo.insertIfAbsent({ record: {
+            id: externalId.trim(), workspaceId: workspaceId.trim(), kind: "user",
+            displayName: displayName.trim(), status: "active", createdAt: kernelNowIso({ clock }),
+        } });
+}
 //# sourceMappingURL=seed.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jini-ai/user-management",
-  "version": "0.6.15-rc.2",
+  "version": "0.6.16",
   "description": "Runtime-separated user management contracts and Node authentication, authorization, and administration services.",
   "license": "Apache-2.0",
   "repository": {
@@ -22,6 +22,15 @@
       "./admin/adapters/http": "universal",
       "./admin/adapters/memory": "universal",
       "./admin/conformance": "universal"
+    },
+    "optionalPeers": {
+      "argon2": "opt-in: argon2 password hashing; import @jini-ai/user-management/server — Argon2 password hashing could not load argon2. Install argon2 to enable this feature, or check its installed version and native binaries.",
+      "@jini-ai/ui": "opt-in: ui integrations; import @jini-ai/user-management/react — UI integrations could not load @jini-ai/ui. Install @jini-ai/ui to enable this feature, or check its installed version and native binaries.",
+      "@jini-ai/admin": "opt-in: admin modules; import @jini-ai/user-management/react — Admin modules could not load @jini-ai/admin. Install @jini-ai/admin to enable this feature, or check its installed version and native binaries.",
+      "@jini-ai/agentic": "opt-in: agent-aware ui and protocols; import @jini-ai/user-management/react — Agent-aware UI and protocols could not load @jini-ai/agentic. Install @jini-ai/agentic to enable this feature, or check its installed version and native binaries.",
+      "@jini-ai/ui-kit": "opt-in: ui kit integrations; import @jini-ai/user-management/react — UI kit integrations could not load @jini-ai/ui-kit. Install @jini-ai/ui-kit to enable this feature, or check its installed version and native binaries.",
+      "react": "opt-in: react user-management ui; import @jini-ai/user-management/react — React user-management UI could not load react. Install react to enable this feature, or check its installed version.",
+      "react-dom": "opt-in: react user-management ui; import @jini-ai/user-management/react — React user-management UI could not load react-dom. Install react-dom to enable this feature, or check its installed version."
     }
   },
   "type": "module",
@@ -87,27 +96,41 @@
     "registry": "https://registry.npmjs.org"
   },
   "dependencies": {
-    "@jini-ai/core": "^0.6.15-rc.2"
+    "@jini-ai/core": "^0.6.16"
   },
   "peerDependencies": {
     "argon2": "^0.44.0",
     "react": "^18.3.0 || ^19.0.0",
     "react-dom": "^18.3.0 || ^19.0.0",
-    "@jini-ai/ui": "^0.6.15-rc.2",
-    "@jini-ai/admin": "^0.6.15-rc.2",
-    "@jini-ai/agentic": "^0.6.15-rc.2",
-    "@jini-ai/ui-kit": "^0.6.15-rc.2"
+    "@jini-ai/ui": "^0.6.10",
+    "@jini-ai/admin": "^0.6.10",
+    "@jini-ai/agentic": "^0.6.10",
+    "@jini-ai/ui-kit": "^0.6.10"
+  },
+  "devDependencies": {
+    "vitest": "^2.1.0",
+    "typescript": "^5.6.0",
+    "@types/node": "^24.0.0",
+    "argon2": "^0.44.0",
+    "react": "^19.2.0",
+    "react-dom": "^19.2.0",
+    "@types/react": "^19.2.0",
+    "@types/react-dom": "^19.2.0",
+    "@testing-library/react": "^16.3.0",
+    "@testing-library/user-event": "^14.5.0",
+    "@testing-library/jest-dom": "^6.6.3",
+    "jsdom": "^25.0.1",
+    "@jini-ai/core": "^0.6.16",
+    "@jini-ai/ui-kit": "^0.6.16",
+    "@jini-ai/ui": "0.6.16",
+    "@jini-ai/agentic": "0.6.16",
+    "@jini-ai/admin": "0.6.16",
+    "@jini-ai/cms": "0.6.16"
   },
   "peerDependenciesMeta": {
     "argon2": {
       "optional": true
     },
-    "react": {
-      "optional": true
-    },
-    "react-dom": {
-      "optional": true
-    },
     "@jini-ai/ui": {
       "optional": true
     },
@@ -119,28 +142,14 @@
     },
     "@jini-ai/ui-kit": {
       "optional": true
+    },
+    "react": {
+      "optional": true
+    },
+    "react-dom": {
+      "optional": true
     }
   },
-  "devDependencies": {
-    "vitest": "^2.1.0",
-    "typescript": "^5.6.0",
-    "@types/node": "^24.0.0",
-    "argon2": "^0.44.0",
-    "react": "^19.2.0",
-    "react-dom": "^19.2.0",
-    "@types/react": "^19.2.0",
-    "@types/react-dom": "^19.2.0",
-    "@testing-library/react": "^16.3.0",
-    "@testing-library/user-event": "^14.5.0",
-    "@testing-library/jest-dom": "^6.6.3",
-    "jsdom": "^25.0.1",
-    "@jini-ai/admin": "0.6.15-rc.2",
-    "@jini-ai/cms": "0.6.15-rc.2",
-    "@jini-ai/ui": "0.6.15-rc.2",
-    "@jini-ai/agentic": "0.6.15-rc.2",
-    "@jini-ai/core": "^0.6.15-rc.2",
-    "@jini-ai/ui-kit": "^0.6.15-rc.2"
-  },
   "scripts": {
     "build": "tsc -p tsconfig.json",
     "typecheck": "tsc -p tsconfig.json --noEmit",