@rytass/bpm-core-nestjs-module 0.1.0

package/src/lib/identity/member-base.adapter.js

@@ -0,0 +1,137 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BPMMemberBaseResolverAdapter = void 0;
+exports.createBPMAuthContextFromMemberBaseMember = createBPMAuthContextFromMemberBaseMember;
+exports.createBPMMemberBaseResolverProvider = createBPMMemberBaseResolverProvider;
+exports.readMemberMetadataFromMemberBaseMember = readMemberMetadataFromMemberBaseMember;
+class BPMMemberBaseResolverAdapter {
+    constructor(directory, options = {}) {
+        this.directory = directory;
+        this.options = options;
+    }
+    async resolve(memberId) {
+        const member = await this.directory.resolveMember(memberId);
+        if (!member) {
+            throw new Error(`member-base member ${memberId} was not found`);
+        }
+        return readMemberMetadataFromMemberBaseMember(member, this.options);
+    }
+    async resolveMany(memberIds) {
+        const members = this.directory.resolveMembers
+            ? await this.directory.resolveMembers(memberIds)
+            : await Promise.all(memberIds.map((memberId) => this.directory.resolveMember(memberId)));
+        return members
+            .filter((member) => Boolean(member))
+            .map((member) => readMemberMetadataFromMemberBaseMember(member, this.options))
+            .reduce((metadataByMemberId, metadata) => new Map(metadataByMemberId).set(metadata.memberId, metadata), new Map());
+    }
+    async search(searchText) {
+        if (!this.directory.searchMembers) {
+            return [];
+        }
+        return (await this.directory.searchMembers(searchText)).map((member) => readMemberMetadataFromMemberBaseMember(member, this.options));
+    }
+}
+exports.BPMMemberBaseResolverAdapter = BPMMemberBaseResolverAdapter;
+/**
+ * Helper for hosts that already hold an authenticated `TMember` (for
+ * example from `@rytass/member-base-nestjs-module`) and want to project it
+ * into a {@link BPMAuthContext} without writing the boilerplate by hand.
+ *
+ * Returns `null` when the input is nullish or when the member is missing
+ * an id — never throws. Pair this with `BPMRootModuleOptions.authContextFactory`
+ * so BPM resolvers receive the projected context on every request.
+ *
+ * @example
+ * ```ts
+ * const bpmAuth = createBPMAuthContextFromMemberBaseMember(memberBaseUser, {
+ *   readRoles: (m) => m.roles,
+ *   readPermissions: (m) => m.permissions,
+ *   readCustomFields: (m) => ({ tenantId: m.tenantId }),
+ * });
+ * ```
+ */
+function createBPMAuthContextFromMemberBaseMember(member, options = {}) {
+    if (!member) {
+        return null;
+    }
+    const memberId = readMemberId(member, options);
+    return memberId
+        ? {
+            memberId,
+            metadata: options.readCustomFields?.(member) ?? {},
+            permissions: options.readPermissions?.(member) ?? [],
+            roles: options.readRoles?.(member) ?? [],
+        }
+        : null;
+}
+/**
+ * Builds a Nest `Provider` that adapts a host-provided
+ * {@link BPMMemberBaseDirectory} into a {@link BPMMemberResolver}, then
+ * registers it under the host-chosen injection token (typically
+ * {@link BPM_MEMBER_RESOLVER}).
+ *
+ * Pass the result inside `BPMRootModuleOptions.memberResolverProvider`.
+ *
+ * @example
+ * ```ts
+ * BPMRootModule.forRoot({
+ *   memberResolverProvider: createBPMMemberBaseResolverProvider({
+ *     provide: BPM_MEMBER_RESOLVER,
+ *     directoryToken: HOST_MEMBER_DIRECTORY,
+ *     adapterOptions: {
+ *       readEmail: (m) => m.email,
+ *       readName: (m) => m.name,
+ *     },
+ *   }),
+ *   // ...
+ * });
+ * ```
+ */
+function createBPMMemberBaseResolverProvider({ adapterOptions, directoryToken, provide, }) {
+    return {
+        inject: [directoryToken],
+        provide,
+        useFactory: (directory) => new BPMMemberBaseResolverAdapter(directory, adapterOptions),
+    };
+}
+function readMemberMetadataFromMemberBaseMember(member, options = {}) {
+    const memberId = readMemberId(member, options);
+    if (!memberId) {
+        throw new Error('member-base member id is required for BPM integration');
+    }
+    return {
+        customFields: options.readCustomFields?.(member) ?? {},
+        email: readMemberEmail(member, options) ?? '',
+        memberId,
+        name: readMemberName(member, options) ?? memberId,
+    };
+}
+function readMemberId(member, options) {
+    return (normalizeText(options.readMemberId?.(member)) ??
+        readStringProperty(member, 'memberId') ??
+        readStringProperty(member, 'id') ??
+        readStringProperty(member, 'sub'));
+}
+function readMemberEmail(member, options) {
+    return normalizeText(options.readEmail?.(member)) ?? readStringProperty(member, 'email');
+}
+function readMemberName(member, options) {
+    return (normalizeText(options.readName?.(member)) ??
+        readStringProperty(member, 'name') ??
+        readStringProperty(member, 'displayName') ??
+        readMemberEmail(member, options));
+}
+function readStringProperty(value, key) {
+    if (!isRecord(value)) {
+        return null;
+    }
+    return normalizeText(value[key]);
+}
+function normalizeText(value) {
+    return typeof value === 'string' && value.trim() ? value.trim() : null;
+}
+function isRecord(value) {
+    return typeof value === 'object' && value !== null;
+}
+//# sourceMappingURL=member-base.adapter.js.map

package/src/lib/identity/member-base.adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"member-base.adapter.js","sourceRoot":"","sources":["../../../../../../libs/bpm-core/src/lib/identity/member-base.adapter.ts"],"names":[],"mappings":";;;AA0HA,4FAkBC;AAyBD,kFAaC;AAED,wFAgBC;AAjJD,MAAa,4BAA4B;IAGvC,YACmB,SAA0C,EAC1C,UAAgD,EAAE;QADlD,cAAS,GAAT,SAAS,CAAiC;QAC1C,YAAO,GAAP,OAAO,CAA2C;IAClE,CAAC;IAEJ,KAAK,CAAC,OAAO,CAAC,QAAgB;QAC5B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAE5D,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,sBAAsB,QAAQ,gBAAgB,CAAC,CAAC;QAClE,CAAC;QAED,OAAO,sCAAsC,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACtE,CAAC;IAED,KAAK,CAAC,WAAW,CACf,SAA4B;QAE5B,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,cAAc;YAC3C,CAAC,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,SAAS,CAAC;YAChD,CAAC,CAAC,MAAM,OAAO,CAAC,GAAG,CACf,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAA2B,EAAE,CAClD,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,QAAQ,CAAC,CACvC,CACF,CAAC;QAEN,OAAO,OAAO;aACX,MAAM,CAAC,CAAC,MAAM,EAAqB,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;aACtD,GAAG,CAAC,CAAC,MAAM,EAAkB,EAAE,CAC9B,sCAAsC,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,CAC7D;aACA,MAAM,CACL,CAAC,kBAAkB,EAAE,QAAQ,EAAuC,EAAE,CACpE,IAAI,GAAG,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAC9D,IAAI,GAAG,EAAE,CACV,CAAC;IACN,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,UAAkB;QAC7B,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,CAAC;YAClC,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,OAAO,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CACzD,CAAC,MAAM,EAAkB,EAAE,CACzB,sCAAsC,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,CAC/D,CAAC;IACJ,CAAC;CACF;AAnDD,oEAmDC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,SAAgB,wCAAwC,CACtD,MAAkC,EAClC,UAAgD,EAAE;IAElD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAE/C,OAAO,QAAQ;QACb,CAAC,CAAC;YACE,QAAQ;YACR,QAAQ,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE;YAClD,WAAW,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE;YACpD,KAAK,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE;SACzC;QACH,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,SAAgB,mCAAmC,CAAU,EAC3D,cAAc,EACd,cAAc,EACd,OAAO,GACuC;IAC9C,OAAO;QACL,MAAM,EAAE,CAAC,cAAc,CAAC;QACxB,OAAO;QACP,UAAU,EAAE,CACV,SAA0C,EACvB,EAAE,CACrB,IAAI,4BAA4B,CAAC,SAAS,EAAE,cAAc,CAAC;KAC9D,CAAC;AACJ,CAAC;AAED,SAAgB,sCAAsC,CACpD,MAAe,EACf,UAAgD,EAAE;IAElD,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAE/C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IAED,OAAO;QACL,YAAY,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE;QACtD,KAAK,EAAE,eAAe,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE;QAC7C,QAAQ;QACR,IAAI,EAAE,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,QAAQ;KAClD,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CACnB,MAAe,EACf,OAA6C;IAE7C,OAAO,CACL,aAAa,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,MAAM,CAAC,CAAC;QAC7C,kBAAkB,CAAC,MAAM,EAAE,UAAU,CAAC;QACtC,kBAAkB,CAAC,MAAM,EAAE,IAAI,CAAC;QAChC,kBAAkB,CAAC,MAAM,EAAE,KAAK,CAAC,CAClC,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CACtB,MAAe,EACf,OAA6C;IAE7C,OAAO,aAAa,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAC3F,CAAC;AAED,SAAS,cAAc,CACrB,MAAe,EACf,OAA6C;IAE7C,OAAO,CACL,aAAa,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,CAAC;QACzC,kBAAkB,CAAC,MAAM,EAAE,MAAM,CAAC;QAClC,kBAAkB,CAAC,MAAM,EAAE,aAAa,CAAC;QACzC,eAAe,CAAC,MAAM,EAAE,OAAO,CAAC,CACjC,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc,EAAE,GAAW;IACrD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACzE,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC;AACrD,CAAC"}

package/src/lib/identity/member-metadata-cache.entity.d.ts

@@ -0,0 +1,8 @@
+import { MemberMetadata } from '@rytass/bpm-core-shared';
+export declare class MemberMetadataCacheEntity {
+    id: string;
+    memberId: string;
+    metadata: MemberMetadata;
+    fetchedAt: Date;
+    expiresAt: Date;
+}

package/src/lib/identity/member-metadata-cache.entity.js

@@ -0,0 +1,39 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MemberMetadataCacheEntity = void 0;
+const tslib_1 = require("tslib");
+const graphql_1 = require("@nestjs/graphql");
+const typeorm_1 = require("typeorm");
+let MemberMetadataCacheEntity = class MemberMetadataCacheEntity {
+};
+exports.MemberMetadataCacheEntity = MemberMetadataCacheEntity;
+tslib_1.__decorate([
+    (0, typeorm_1.PrimaryGeneratedColumn)('uuid'),
+    (0, graphql_1.Field)(() => graphql_1.ID),
+    tslib_1.__metadata("design:type", String)
+], MemberMetadataCacheEntity.prototype, "id", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.Column)('text', { name: 'member_id' }),
+    (0, graphql_1.Field)(),
+    tslib_1.__metadata("design:type", String)
+], MemberMetadataCacheEntity.prototype, "memberId", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.Column)('jsonb'),
+    tslib_1.__metadata("design:type", Object)
+], MemberMetadataCacheEntity.prototype, "metadata", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.Column)('timestamptz', { name: 'fetched_at' }),
+    (0, graphql_1.Field)(),
+    tslib_1.__metadata("design:type", Date)
+], MemberMetadataCacheEntity.prototype, "fetchedAt", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.Column)('timestamptz', { name: 'expires_at' }),
+    (0, graphql_1.Field)(),
+    tslib_1.__metadata("design:type", Date)
+], MemberMetadataCacheEntity.prototype, "expiresAt", void 0);
+exports.MemberMetadataCacheEntity = MemberMetadataCacheEntity = tslib_1.__decorate([
+    (0, typeorm_1.Entity)('member_metadata_cache'),
+    (0, typeorm_1.Unique)(['memberId']),
+    (0, graphql_1.ObjectType)('MemberMetadataCache')
+], MemberMetadataCacheEntity);
+//# sourceMappingURL=member-metadata-cache.entity.js.map

package/src/lib/identity/member-metadata-cache.entity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"member-metadata-cache.entity.js","sourceRoot":"","sources":["../../../../../../libs/bpm-core/src/lib/identity/member-metadata-cache.entity.ts"],"names":[],"mappings":";;;;AAAA,6CAAwD;AACxD,qCAAyE;AAMlE,IAAM,yBAAyB,GAA/B,MAAM,yBAAyB;CAmBrC,CAAA;AAnBY,8DAAyB;AAGpC;IAFC,IAAA,gCAAsB,EAAC,MAAM,CAAC;IAC9B,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,YAAE,CAAC;;qDACJ;AAIZ;IAFC,IAAA,gBAAM,EAAC,MAAM,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IACrC,IAAA,eAAK,GAAE;;2DACU;AAGlB;IADC,IAAA,gBAAM,EAAC,OAAO,CAAC;;2DACU;AAI1B;IAFC,IAAA,gBAAM,EAAC,aAAa,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;IAC7C,IAAA,eAAK,GAAE;sCACI,IAAI;4DAAC;AAIjB;IAFC,IAAA,gBAAM,EAAC,aAAa,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;IAC7C,IAAA,eAAK,GAAE;sCACI,IAAI;4DAAC;oCAlBN,yBAAyB;IAHrC,IAAA,gBAAM,EAAC,uBAAuB,CAAC;IAC/B,IAAA,gBAAM,EAAC,CAAC,UAAU,CAAC,CAAC;IACpB,IAAA,oBAAU,EAAC,qBAAqB,CAAC;GACrB,yBAAyB,CAmBrC"}

package/src/lib/identity/member-profile.object.d.ts

@@ -0,0 +1,8 @@
+import { MemberMetadata } from '@rytass/bpm-core-shared';
+export declare class MemberProfileObject {
+    memberId: string;
+    name: string;
+    email: string;
+    customFieldsJson: string;
+}
+export declare function toMemberProfileObject(metadata: MemberMetadata): MemberProfileObject;

package/src/lib/identity/member-profile.object.js

@@ -0,0 +1,37 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MemberProfileObject = void 0;
+exports.toMemberProfileObject = toMemberProfileObject;
+const tslib_1 = require("tslib");
+const graphql_1 = require("@nestjs/graphql");
+let MemberProfileObject = class MemberProfileObject {
+};
+exports.MemberProfileObject = MemberProfileObject;
+tslib_1.__decorate([
+    (0, graphql_1.Field)(() => graphql_1.ID),
+    tslib_1.__metadata("design:type", String)
+], MemberProfileObject.prototype, "memberId", void 0);
+tslib_1.__decorate([
+    (0, graphql_1.Field)(),
+    tslib_1.__metadata("design:type", String)
+], MemberProfileObject.prototype, "name", void 0);
+tslib_1.__decorate([
+    (0, graphql_1.Field)(),
+    tslib_1.__metadata("design:type", String)
+], MemberProfileObject.prototype, "email", void 0);
+tslib_1.__decorate([
+    (0, graphql_1.Field)(),
+    tslib_1.__metadata("design:type", String)
+], MemberProfileObject.prototype, "customFieldsJson", void 0);
+exports.MemberProfileObject = MemberProfileObject = tslib_1.__decorate([
+    (0, graphql_1.ObjectType)('MemberProfile')
+], MemberProfileObject);
+function toMemberProfileObject(metadata) {
+    return {
+        customFieldsJson: JSON.stringify(metadata.customFields),
+        email: metadata.email,
+        memberId: metadata.memberId,
+        name: metadata.name,
+    };
+}
+//# sourceMappingURL=member-profile.object.js.map

package/src/lib/identity/member-profile.object.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"member-profile.object.js","sourceRoot":"","sources":["../../../../../../libs/bpm-core/src/lib/identity/member-profile.object.ts"],"names":[],"mappings":";;;AAkBA,sDASC;;AA3BD,6CAAwD;AAIjD,IAAM,mBAAmB,GAAzB,MAAM,mBAAmB;CAY/B,CAAA;AAZY,kDAAmB;AAE9B;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,YAAE,CAAC;;qDACE;AAGlB;IADC,IAAA,eAAK,GAAE;;iDACM;AAGd;IADC,IAAA,eAAK,GAAE;;kDACO;AAGf;IADC,IAAA,eAAK,GAAE;;6DACkB;8BAXf,mBAAmB;IAD/B,IAAA,oBAAU,EAAC,eAAe,CAAC;GACf,mBAAmB,CAY/B;AAED,SAAgB,qBAAqB,CACnC,QAAwB;IAExB,OAAO;QACL,gBAAgB,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,YAAY,CAAC;QACvD,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,IAAI,EAAE,QAAQ,CAAC,IAAI;KACpB,CAAC;AACJ,CAAC"}

package/src/lib/identity/member-resolver.interface.d.ts

@@ -0,0 +1,41 @@
+import { MemberMetadata } from '@rytass/bpm-core-shared';
+/**
+ * Injection token for the host-provided `BPMMemberResolver`.
+ *
+ * Hosts must register a provider under this token through
+ * `BPMRootModuleOptions.memberResolverProvider`. BPM resolvers and
+ * services look up display names, emails, and approver candidates via
+ * this token without coupling to any specific identity backend.
+ */
+export declare const BPM_MEMBER_RESOLVER: unique symbol;
+/**
+ * @deprecated Use {@link BPM_MEMBER_RESOLVER}. Kept as a backwards-compatible
+ * alias for hosts that adopted the original name. To be removed in a future
+ * major release.
+ */
+export declare const MEMBER_RESOLVER: symbol;
+/**
+ * Contract host applications must implement so BPM can resolve member
+ * profiles, approver candidates, and search results.
+ *
+ * BPM never reads the host's user table directly — it only knows
+ * `memberId` strings and asks this resolver for any additional information.
+ *
+ * - `resolve` is called per missing id; throwing here surfaces as a BPM
+ *   GraphQL error.
+ * - `resolveMany` is the batched form BPM prefers when many ids are needed.
+ *   Implementations may de-duplicate / cache as they see fit; missing ids
+ *   should be omitted from the result `Map`.
+ * - `search` is optional. When omitted, BPM's `searchMembers` GraphQL
+ *   query simply returns an empty array.
+ */
+export interface BPMMemberResolver {
+    resolve(memberId: string): Promise<MemberMetadata>;
+    resolveMany(memberIds: readonly string[]): Promise<ReadonlyMap<string, MemberMetadata>>;
+    search?(searchText: string): Promise<readonly MemberMetadata[]>;
+}
+/**
+ * @deprecated Use {@link BPMMemberResolver}. Kept as a backwards-compatible
+ * alias.
+ */
+export type MemberResolver = BPMMemberResolver;

package/src/lib/identity/member-resolver.interface.js

@@ -0,0 +1,19 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MEMBER_RESOLVER = exports.BPM_MEMBER_RESOLVER = void 0;
+/**
+ * Injection token for the host-provided `BPMMemberResolver`.
+ *
+ * Hosts must register a provider under this token through
+ * `BPMRootModuleOptions.memberResolverProvider`. BPM resolvers and
+ * services look up display names, emails, and approver candidates via
+ * this token without coupling to any specific identity backend.
+ */
+exports.BPM_MEMBER_RESOLVER = Symbol('BPM_MEMBER_RESOLVER');
+/**
+ * @deprecated Use {@link BPM_MEMBER_RESOLVER}. Kept as a backwards-compatible
+ * alias for hosts that adopted the original name. To be removed in a future
+ * major release.
+ */
+exports.MEMBER_RESOLVER = exports.BPM_MEMBER_RESOLVER;
+//# sourceMappingURL=member-resolver.interface.js.map

package/src/lib/identity/member-resolver.interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"member-resolver.interface.js","sourceRoot":"","sources":["../../../../../../libs/bpm-core/src/lib/identity/member-resolver.interface.ts"],"names":[],"mappings":";;;AAEA;;;;;;;GAOG;AACU,QAAA,mBAAmB,GAAG,MAAM,CAAC,qBAAqB,CAAC,CAAC;AAEjE;;;;GAIG;AACU,QAAA,eAAe,GAAG,2BAAmB,CAAC"}

package/src/lib/migrations/0000000000000-enable-postgres-extensions.d.ts

@@ -0,0 +1,6 @@
+import { MigrationInterface, QueryRunner } from 'typeorm';
+export declare class EnablePostgresExtensions2026043000000 implements MigrationInterface {
+    readonly name = "EnablePostgresExtensions2026043000000";
+    up(queryRunner: QueryRunner): Promise<void>;
+    down(queryRunner: QueryRunner): Promise<void>;
+}

package/src/lib/migrations/0000000000000-enable-postgres-extensions.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EnablePostgresExtensions2026043000000 = void 0;
+class EnablePostgresExtensions2026043000000 {
+    constructor() {
+        this.name = 'EnablePostgresExtensions2026043000000';
+    }
+    async up(queryRunner) {
+        await queryRunner.query('CREATE EXTENSION IF NOT EXISTS "uuid-ossp"');
+        await queryRunner.query('CREATE EXTENSION IF NOT EXISTS "ltree"');
+    }
+    async down(queryRunner) {
+        await queryRunner.query('DROP EXTENSION IF EXISTS "ltree"');
+    }
+}
+exports.EnablePostgresExtensions2026043000000 = EnablePostgresExtensions2026043000000;
+//# sourceMappingURL=0000000000000-enable-postgres-extensions.js.map

package/src/lib/migrations/0000000000000-enable-postgres-extensions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"0000000000000-enable-postgres-extensions.js","sourceRoot":"","sources":["../../../../../../libs/bpm-core/src/lib/migrations/0000000000000-enable-postgres-extensions.ts"],"names":[],"mappings":";;;AAEA,MAAa,qCAAqC;IAAlD;QACW,SAAI,GAAG,uCAAuC,CAAC;IAU1D,CAAC;IARC,KAAK,CAAC,EAAE,CAAC,WAAwB;QAC/B,MAAM,WAAW,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAC;QACtE,MAAM,WAAW,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAC;IACpE,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,WAAwB;QACjC,MAAM,WAAW,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;IAC9D,CAAC;CACF;AAXD,sFAWC"}

package/src/lib/migrations/0000000001000-identity-organization-foundation.d.ts

@@ -0,0 +1,6 @@
+import { MigrationInterface, QueryRunner } from 'typeorm';
+export declare class IdentityOrganizationFoundation2026043001000 implements MigrationInterface {
+    readonly name = "IdentityOrganizationFoundation2026043001000";
+    up(queryRunner: QueryRunner): Promise<void>;
+    down(queryRunner: QueryRunner): Promise<void>;
+}

package/src/lib/migrations/0000000001000-identity-organization-foundation.js

@@ -0,0 +1,97 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.IdentityOrganizationFoundation2026043001000 = void 0;
+class IdentityOrganizationFoundation2026043001000 {
+    constructor() {
+        this.name = 'IdentityOrganizationFoundation2026043001000';
+    }
+    async up(queryRunner) {
+        await queryRunner.query(`
+      CREATE TABLE IF NOT EXISTS member_metadata_cache (
+        id uuid PRIMARY KEY DEFAULT uuid_generate_v4(),
+        member_id text NOT NULL UNIQUE,
+        metadata jsonb NOT NULL,
+        fetched_at timestamptz NOT NULL,
+        expires_at timestamptz NOT NULL
+      )
+    `);
+        await queryRunner.query(`
+      CREATE TABLE IF NOT EXISTS org_units (
+        id uuid PRIMARY KEY DEFAULT uuid_generate_v4(),
+        parent_id uuid NULL REFERENCES org_units(id),
+        code text NOT NULL UNIQUE,
+        name text NOT NULL,
+        type text NOT NULL,
+        path ltree NOT NULL,
+        metadata jsonb NOT NULL DEFAULT '{}'::jsonb,
+        deleted_at timestamptz NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now()
+      )
+    `);
+        await queryRunner.query('CREATE INDEX IF NOT EXISTS idx_org_units_parent_id ON org_units(parent_id)');
+        await queryRunner.query('CREATE INDEX IF NOT EXISTS idx_org_units_path_gist ON org_units USING gist(path)');
+        await queryRunner.query(`
+      CREATE INDEX IF NOT EXISTS idx_org_units_not_deleted
+      ON org_units(deleted_at)
+      WHERE deleted_at IS NULL
+    `);
+        await queryRunner.query(`
+      CREATE TABLE IF NOT EXISTS positions (
+        id uuid PRIMARY KEY DEFAULT uuid_generate_v4(),
+        code text NOT NULL UNIQUE,
+        name text NOT NULL,
+        level int NOT NULL,
+        metadata jsonb NOT NULL DEFAULT '{}'::jsonb,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now()
+      )
+    `);
+        await queryRunner.query(`
+      CREATE TABLE IF NOT EXISTS memberships (
+        id uuid PRIMARY KEY DEFAULT uuid_generate_v4(),
+        member_id text NOT NULL,
+        org_unit_id uuid NOT NULL REFERENCES org_units(id),
+        position_id uuid NULL REFERENCES positions(id),
+        is_primary boolean NOT NULL DEFAULT false,
+        effective_from date NOT NULL,
+        effective_to date NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        CONSTRAINT uq_memberships_effective UNIQUE (
+          member_id,
+          org_unit_id,
+          position_id,
+          effective_from
+        )
+      )
+    `);
+        await queryRunner.query('CREATE INDEX IF NOT EXISTS idx_memberships_member_id ON memberships(member_id)');
+        await queryRunner.query('CREATE INDEX IF NOT EXISTS idx_memberships_org_unit_id ON memberships(org_unit_id)');
+        await queryRunner.query(`
+      CREATE TABLE IF NOT EXISTS manager_resolutions (
+        id uuid PRIMARY KEY DEFAULT uuid_generate_v4(),
+        scope_type text NOT NULL,
+        scope_id text NOT NULL,
+        manager_member_id text NOT NULL,
+        priority int NOT NULL DEFAULT 0,
+        effective_from date NOT NULL,
+        effective_to date NULL,
+        created_at timestamptz NOT NULL DEFAULT now()
+      )
+    `);
+        await queryRunner.query(`
+      CREATE INDEX IF NOT EXISTS idx_manager_resolutions_scope
+      ON manager_resolutions(scope_type, scope_id)
+    `);
+    }
+    async down(queryRunner) {
+        await queryRunner.query('DROP TABLE IF EXISTS manager_resolutions');
+        await queryRunner.query('DROP TABLE IF EXISTS memberships');
+        await queryRunner.query('DROP TABLE IF EXISTS positions');
+        await queryRunner.query('DROP TABLE IF EXISTS org_units');
+        await queryRunner.query('DROP TABLE IF EXISTS member_metadata_cache');
+    }
+}
+exports.IdentityOrganizationFoundation2026043001000 = IdentityOrganizationFoundation2026043001000;
+//# sourceMappingURL=0000000001000-identity-organization-foundation.js.map

package/src/lib/migrations/0000000001000-identity-organization-foundation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"0000000001000-identity-organization-foundation.js","sourceRoot":"","sources":["../../../../../../libs/bpm-core/src/lib/migrations/0000000001000-identity-organization-foundation.ts"],"names":[],"mappings":";;;AAEA,MAAa,2CAA2C;IAAxD;QACW,SAAI,GAAG,6CAA6C,CAAC;IAsGhE,CAAC;IApGC,KAAK,CAAC,EAAE,CAAC,WAAwB;QAC/B,MAAM,WAAW,CAAC,KAAK,CAAC;;;;;;;;KAQvB,CAAC,CAAC;QAEH,MAAM,WAAW,CAAC,KAAK,CAAC;;;;;;;;;;;;;KAavB,CAAC,CAAC;QACH,MAAM,WAAW,CAAC,KAAK,CACrB,4EAA4E,CAC7E,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACrB,kFAAkF,CACnF,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CAAC;;;;KAIvB,CAAC,CAAC;QAEH,MAAM,WAAW,CAAC,KAAK,CAAC;;;;;;;;;;KAUvB,CAAC,CAAC;QAEH,MAAM,WAAW,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;KAkBvB,CAAC,CAAC;QACH,MAAM,WAAW,CAAC,KAAK,CACrB,gFAAgF,CACjF,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACrB,oFAAoF,CACrF,CAAC;QAEF,MAAM,WAAW,CAAC,KAAK,CAAC;;;;;;;;;;;KAWvB,CAAC,CAAC;QACH,MAAM,WAAW,CAAC,KAAK,CAAC;;;KAGvB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,WAAwB;QACjC,MAAM,WAAW,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC;QACpE,MAAM,WAAW,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;QAC5D,MAAM,WAAW,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAC1D,MAAM,WAAW,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAC1D,MAAM,WAAW,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAC;IACxE,CAAC;CACF;AAvGD,kGAuGC"}

package/src/lib/migrations/0000000002000-form-builder-foundation.d.ts

@@ -0,0 +1,6 @@
+import { MigrationInterface, QueryRunner } from 'typeorm';
+export declare class FormBuilderFoundation2026050202000 implements MigrationInterface {
+    readonly name = "FormBuilderFoundation2026050202000";
+    up(queryRunner: QueryRunner): Promise<void>;
+    down(queryRunner: QueryRunner): Promise<void>;
+}

package/src/lib/migrations/0000000002000-form-builder-foundation.js

@@ -0,0 +1,66 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FormBuilderFoundation2026050202000 = void 0;
+class FormBuilderFoundation2026050202000 {
+    constructor() {
+        this.name = 'FormBuilderFoundation2026050202000';
+    }
+    async up(queryRunner) {
+        await queryRunner.query(`
+      CREATE TABLE IF NOT EXISTS form_definitions (
+        id uuid PRIMARY KEY DEFAULT uuid_generate_v4(),
+        name text NOT NULL,
+        description text NULL,
+        current_version_id uuid NULL,
+        deleted_at timestamptz NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        created_by_member_id text NULL
+      )
+    `);
+        await queryRunner.query(`
+      CREATE TABLE IF NOT EXISTS form_definition_versions (
+        id uuid PRIMARY KEY DEFAULT uuid_generate_v4(),
+        form_definition_id uuid NOT NULL REFERENCES form_definitions(id),
+        version int NOT NULL,
+        status text NOT NULL,
+        schema jsonb NOT NULL,
+        ui_schema jsonb NOT NULL,
+        published_at timestamptz NULL,
+        published_by_member_id text NULL,
+        archived_at timestamptz NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        CONSTRAINT uq_form_definition_versions_version UNIQUE (
+          form_definition_id,
+          version
+        )
+      )
+    `);
+        await queryRunner.query(`
+      ALTER TABLE form_definitions
+      ADD CONSTRAINT fk_form_definitions_current_version
+      FOREIGN KEY (current_version_id)
+      REFERENCES form_definition_versions(id)
+    `);
+        await queryRunner.query(`
+      CREATE INDEX IF NOT EXISTS idx_form_definition_versions_definition_status
+      ON form_definition_versions(form_definition_id, status)
+    `);
+        await queryRunner.query(`
+      CREATE INDEX IF NOT EXISTS idx_form_definitions_not_deleted
+      ON form_definitions(deleted_at)
+      WHERE deleted_at IS NULL
+    `);
+    }
+    async down(queryRunner) {
+        await queryRunner.query(`
+      ALTER TABLE form_definitions
+      DROP CONSTRAINT IF EXISTS fk_form_definitions_current_version
+    `);
+        await queryRunner.query('DROP TABLE IF EXISTS form_definition_versions');
+        await queryRunner.query('DROP TABLE IF EXISTS form_definitions');
+    }
+}
+exports.FormBuilderFoundation2026050202000 = FormBuilderFoundation2026050202000;
+//# sourceMappingURL=0000000002000-form-builder-foundation.js.map

package/src/lib/migrations/0000000002000-form-builder-foundation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"0000000002000-form-builder-foundation.js","sourceRoot":"","sources":["../../../../../../libs/bpm-core/src/lib/migrations/0000000002000-form-builder-foundation.ts"],"names":[],"mappings":";;;AAEA,MAAa,kCAAkC;IAA/C;QACW,SAAI,GAAG,oCAAoC,CAAC;IA+DvD,CAAC;IA7DC,KAAK,CAAC,EAAE,CAAC,WAAwB;QAC/B,MAAM,WAAW,CAAC,KAAK,CAAC;;;;;;;;;;;KAWvB,CAAC,CAAC;QAEH,MAAM,WAAW,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;KAkBvB,CAAC,CAAC;QAEH,MAAM,WAAW,CAAC,KAAK,CAAC;;;;;KAKvB,CAAC,CAAC;QAEH,MAAM,WAAW,CAAC,KAAK,CAAC;;;KAGvB,CAAC,CAAC;QAEH,MAAM,WAAW,CAAC,KAAK,CAAC;;;;KAIvB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,WAAwB;QACjC,MAAM,WAAW,CAAC,KAAK,CAAC;;;KAGvB,CAAC,CAAC;QACH,MAAM,WAAW,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACzE,MAAM,WAAW,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;IACnE,CAAC;CACF;AAhED,gFAgEC"}

package/src/lib/migrations/0000000003000-approval-template-foundation.d.ts

@@ -0,0 +1,6 @@
+import { MigrationInterface, QueryRunner } from 'typeorm';
+export declare class ApprovalTemplateFoundation2026050403000 implements MigrationInterface {
+    readonly name = "ApprovalTemplateFoundation2026050403000";
+    up(queryRunner: QueryRunner): Promise<void>;
+    down(queryRunner: QueryRunner): Promise<void>;
+}

package/src/lib/migrations/0000000003000-approval-template-foundation.js

@@ -0,0 +1,70 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ApprovalTemplateFoundation2026050403000 = void 0;
+class ApprovalTemplateFoundation2026050403000 {
+    constructor() {
+        this.name = 'ApprovalTemplateFoundation2026050403000';
+    }
+    async up(queryRunner) {
+        await queryRunner.query(`
+      CREATE TABLE IF NOT EXISTS approval_templates (
+        id uuid PRIMARY KEY DEFAULT uuid_generate_v4(),
+        name text NOT NULL,
+        description text NULL,
+        category text NULL,
+        current_version_id uuid NULL,
+        deleted_at timestamptz NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        created_by_member_id text NULL
+      )
+    `);
+        await queryRunner.query(`
+      CREATE TABLE IF NOT EXISTS approval_template_versions (
+        id uuid PRIMARY KEY DEFAULT uuid_generate_v4(),
+        template_id uuid NOT NULL REFERENCES approval_templates(id),
+        version int NOT NULL,
+        status text NOT NULL,
+        workflow_definition jsonb NOT NULL,
+        form_definition_version_id uuid NULL REFERENCES form_definition_versions(id),
+        initiator_policy_cel text NULL,
+        notification_config jsonb NULL,
+        sla_defaults jsonb NULL,
+        published_at timestamptz NULL,
+        published_by_member_id text NULL,
+        archived_at timestamptz NULL,
+        created_at timestamptz NOT NULL DEFAULT now(),
+        updated_at timestamptz NOT NULL DEFAULT now(),
+        CONSTRAINT uq_approval_template_versions_version UNIQUE (
+          template_id,
+          version
+        )
+      )
+    `);
+        await queryRunner.query(`
+      ALTER TABLE approval_templates
+      ADD CONSTRAINT fk_approval_templates_current_version
+      FOREIGN KEY (current_version_id)
+      REFERENCES approval_template_versions(id)
+    `);
+        await queryRunner.query(`
+      CREATE INDEX IF NOT EXISTS idx_approval_template_versions_template_status
+      ON approval_template_versions(template_id, status)
+    `);
+        await queryRunner.query(`
+      CREATE INDEX IF NOT EXISTS idx_approval_templates_not_deleted
+      ON approval_templates(deleted_at)
+      WHERE deleted_at IS NULL
+    `);
+    }
+    async down(queryRunner) {
+        await queryRunner.query(`
+      ALTER TABLE approval_templates
+      DROP CONSTRAINT IF EXISTS fk_approval_templates_current_version
+    `);
+        await queryRunner.query('DROP TABLE IF EXISTS approval_template_versions');
+        await queryRunner.query('DROP TABLE IF EXISTS approval_templates');
+    }
+}
+exports.ApprovalTemplateFoundation2026050403000 = ApprovalTemplateFoundation2026050403000;
+//# sourceMappingURL=0000000003000-approval-template-foundation.js.map

package/src/lib/migrations/0000000003000-approval-template-foundation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"0000000003000-approval-template-foundation.js","sourceRoot":"","sources":["../../../../../../libs/bpm-core/src/lib/migrations/0000000003000-approval-template-foundation.ts"],"names":[],"mappings":";;;AAEA,MAAa,uCAAuC;IAApD;QAGW,SAAI,GAAG,yCAAyC,CAAC;IAmE5D,CAAC;IAjEC,KAAK,CAAC,EAAE,CAAC,WAAwB;QAC/B,MAAM,WAAW,CAAC,KAAK,CAAC;;;;;;;;;;;;KAYvB,CAAC,CAAC;QAEH,MAAM,WAAW,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;;;;KAqBvB,CAAC,CAAC;QAEH,MAAM,WAAW,CAAC,KAAK,CAAC;;;;;KAKvB,CAAC,CAAC;QAEH,MAAM,WAAW,CAAC,KAAK,CAAC;;;KAGvB,CAAC,CAAC;QAEH,MAAM,WAAW,CAAC,KAAK,CAAC;;;;KAIvB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,WAAwB;QACjC,MAAM,WAAW,CAAC,KAAK,CAAC;;;KAGvB,CAAC,CAAC;QACH,MAAM,WAAW,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAC;QAC3E,MAAM,WAAW,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC;IACrE,CAAC;CACF;AAtED,0FAsEC"}

package/src/lib/migrations/0000000004000-workflow-engine-foundation.d.ts

@@ -0,0 +1,6 @@
+import { MigrationInterface, QueryRunner } from 'typeorm';
+export declare class WorkflowEngineFoundation2026050404000 implements MigrationInterface {
+    readonly name = "WorkflowEngineFoundation2026050404000";
+    up(queryRunner: QueryRunner): Promise<void>;
+    down(queryRunner: QueryRunner): Promise<void>;
+}