@rytass/bpm-core-nestjs-module 0.1.3 → 0.1.5

package/src/lib/identity/identity-options.js

@@ -0,0 +1,20 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_BPM_IDENTITY_OPTIONS = exports.BPM_IDENTITY_OPTIONS = void 0;
+exports.resolveBPMIdentityOptions = resolveBPMIdentityOptions;
+exports.BPM_IDENTITY_OPTIONS = Symbol('BPM_IDENTITY_OPTIONS');
+exports.DEFAULT_BPM_IDENTITY_OPTIONS = {
+    memberMetadataCacheTtlMs: 5 * 60 * 1000,
+};
+function resolveBPMIdentityOptions(options = {}) {
+    return {
+        memberMetadataCacheTtlMs: normalizePositiveInteger(options.identityMemberMetadataCacheTtlMs, exports.DEFAULT_BPM_IDENTITY_OPTIONS.memberMetadataCacheTtlMs),
+    };
+}
+function normalizePositiveInteger(value, fallback) {
+    if (typeof value !== 'number' || !Number.isInteger(value) || value <= 0) {
+        return fallback;
+    }
+    return value;
+}
+//# sourceMappingURL=identity-options.js.map

package/src/lib/identity/identity-options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-options.js","sourceRoot":"","sources":["../../../../../../libs/bpm-core/src/lib/identity/identity-options.ts"],"names":[],"mappings":";;;AAoBA,8DASC;AAhBY,QAAA,oBAAoB,GAC/B,MAAM,CAAC,sBAAsB,CAAC,CAAC;AAEpB,QAAA,4BAA4B,GAA+B;IACtE,wBAAwB,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI;CACxC,CAAC;AAEF,SAAgB,yBAAyB,CACvC,UAAkC,EAAE;IAEpC,OAAO;QACL,wBAAwB,EAAE,wBAAwB,CAChD,OAAO,CAAC,gCAAgC,EACxC,oCAA4B,CAAC,wBAAwB,CACtD;KACF,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAC/B,KAAyB,EACzB,QAAgB;IAEhB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QACxE,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}

package/src/lib/identity/identity.module.d.ts

@@ -0,0 +1,17 @@
+import { DynamicModule, InjectionToken, Provider } from '@nestjs/common';
+import { ModuleMetadata } from '@nestjs/common/interfaces';
+import { BPMMemberResolver } from './member-resolver.interface';
+import { BPMRootIdentityOptions } from './identity-options';
+export interface IdentityModuleOptions extends BPMRootIdentityOptions {
+    readonly imports?: ModuleMetadata['imports'];
+    readonly memberResolverProvider: Provider<BPMMemberResolver>;
+}
+export interface IdentityModuleAsyncOptions extends Pick<ModuleMetadata, 'imports'> {
+    readonly inject?: readonly InjectionToken[];
+    readonly memberResolverProvider: Provider<BPMMemberResolver>;
+    readonly useFactory: (...args: readonly unknown[]) => BPMRootIdentityOptions | Promise<BPMRootIdentityOptions>;
+}
+export declare class IdentityModule {
+    static forRoot(options: IdentityModuleOptions): DynamicModule;
+    static forRootAsync(options: IdentityModuleAsyncOptions): DynamicModule;
+}

package/src/lib/identity/identity.module.js

@@ -0,0 +1,65 @@
+"use strict";
+var IdentityModule_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.IdentityModule = void 0;
+const tslib_1 = require("tslib");
+const common_1 = require("@nestjs/common");
+const typeorm_1 = require("@nestjs/typeorm");
+const identity_queries_1 = require("./identity.queries");
+const identity_service_1 = require("./identity.service");
+const member_metadata_cache_entity_1 = require("./member-metadata-cache.entity");
+const identity_options_1 = require("./identity-options");
+let IdentityModule = IdentityModule_1 = class IdentityModule {
+    static forRoot(options) {
+        const resolverProviders = createMemberResolverProviders(options);
+        return {
+            exports: [identity_service_1.IdentityService],
+            imports: [
+                ...(options.imports ?? []),
+                typeorm_1.TypeOrmModule.forFeature([member_metadata_cache_entity_1.MemberMetadataCacheEntity]),
+            ],
+            module: IdentityModule_1,
+            providers: [
+                identity_queries_1.IdentityQueries,
+                identity_service_1.IdentityService,
+                ...resolverProviders,
+                createIdentityOptionsProvider(options),
+            ],
+        };
+    }
+    static forRootAsync(options) {
+        const resolverProviders = createMemberResolverProviders(options);
+        return {
+            exports: [identity_service_1.IdentityService],
+            imports: [
+                ...(options.imports ?? []),
+                typeorm_1.TypeOrmModule.forFeature([member_metadata_cache_entity_1.MemberMetadataCacheEntity]),
+            ],
+            module: IdentityModule_1,
+            providers: [
+                identity_queries_1.IdentityQueries,
+                identity_service_1.IdentityService,
+                ...resolverProviders,
+                {
+                    inject: [...(options.inject ?? [])],
+                    provide: identity_options_1.BPM_IDENTITY_OPTIONS,
+                    useFactory: async (...args) => (0, identity_options_1.resolveBPMIdentityOptions)(await options.useFactory(...args)),
+                },
+            ],
+        };
+    }
+};
+exports.IdentityModule = IdentityModule;
+exports.IdentityModule = IdentityModule = IdentityModule_1 = tslib_1.__decorate([
+    (0, common_1.Module)({})
+], IdentityModule);
+function createMemberResolverProviders(options) {
+    return [options.memberResolverProvider];
+}
+function createIdentityOptionsProvider(options = {}) {
+    return {
+        provide: identity_options_1.BPM_IDENTITY_OPTIONS,
+        useValue: (0, identity_options_1.resolveBPMIdentityOptions)(options),
+    };
+}
+//# sourceMappingURL=identity.module.js.map

package/src/lib/identity/identity.module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.module.js","sourceRoot":"","sources":["../../../../../../libs/bpm-core/src/lib/identity/identity.module.ts"],"names":[],"mappings":";;;;;AAAA,2CAKwB;AAExB,6CAAgD;AAChD,yDAAqD;AACrD,yDAAqD;AACrD,iFAA2E;AAE3E,yDAI4B;AAmBrB,IAAM,cAAc,sBAApB,MAAM,cAAc;IACzB,MAAM,CAAC,OAAO,CAAC,OAA8B;QAC3C,MAAM,iBAAiB,GAAG,6BAA6B,CAAC,OAAO,CAAC,CAAC;QAEjE,OAAO;YACL,OAAO,EAAE,CAAC,kCAAe,CAAC;YAC1B,OAAO,EAAE;gBACP,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;gBAC1B,uBAAa,CAAC,UAAU,CAAC,CAAC,wDAAyB,CAAC,CAAC;aACtD;YACD,MAAM,EAAE,gBAAc;YACtB,SAAS,EAAE;gBACT,kCAAe;gBACf,kCAAe;gBACf,GAAG,iBAAiB;gBACpB,6BAA6B,CAAC,OAAO,CAAC;aACvC;SACF,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,YAAY,CAAC,OAAmC;QACrD,MAAM,iBAAiB,GAAG,6BAA6B,CAAC,OAAO,CAAC,CAAC;QAEjE,OAAO;YACL,OAAO,EAAE,CAAC,kCAAe,CAAC;YAC1B,OAAO,EAAE;gBACP,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;gBAC1B,uBAAa,CAAC,UAAU,CAAC,CAAC,wDAAyB,CAAC,CAAC;aACtD;YACD,MAAM,EAAE,gBAAc;YACtB,SAAS,EAAE;gBACT,kCAAe;gBACf,kCAAe;gBACf,GAAG,iBAAiB;gBACpB;oBACE,MAAM,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;oBACnC,OAAO,EAAE,uCAAoB;oBAC7B,UAAU,EAAE,KAAK,EACf,GAAG,IAAwB,EAC4B,EAAE,CACzD,IAAA,4CAAyB,EAAC,MAAM,OAAO,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC;iBAC/D;aACF;SACF,CAAC;IACJ,CAAC;CACF,CAAA;AA7CY,wCAAc;yBAAd,cAAc;IAD1B,IAAA,eAAM,EAAC,EAAE,CAAC;GACE,cAAc,CA6C1B;AAED,SAAS,6BAA6B,CACpC,OAA8B;IAE9B,OAAO,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,6BAA6B,CACpC,UAAkC,EAAE;IAEpC,OAAO;QACL,OAAO,EAAE,uCAAoB;QAC7B,QAAQ,EAAE,IAAA,4CAAyB,EAAC,OAAO,CAAC;KAC7C,CAAC;AACJ,CAAC"}

package/src/lib/identity/identity.queries.d.ts

@@ -0,0 +1,12 @@
+import { IdentityService } from './identity.service';
+import { MemberMetadataCacheEntity } from './member-metadata-cache.entity';
+import { MemberProfileObject } from './member-profile.object';
+export declare class IdentityQueries {
+    private readonly identityService;
+    constructor(identityService: IdentityService);
+    member(memberId: string): Promise<MemberProfileObject>;
+    members(memberIds: readonly string[]): Promise<readonly MemberProfileObject[]>;
+    cachedMembers(): Promise<readonly MemberMetadataCacheEntity[]>;
+    searchMembers(searchText: string, page?: number | null, pageSize?: number | null): Promise<readonly MemberProfileObject[]>;
+    memberCount(searchText?: string | null): Promise<number>;
+}

package/src/lib/identity/identity.queries.js

@@ -0,0 +1,79 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.IdentityQueries = void 0;
+const tslib_1 = require("tslib");
+const graphql_1 = require("@nestjs/graphql");
+const bpm_auth_1 = require("../bpm-auth");
+const identity_service_1 = require("./identity.service");
+const member_metadata_cache_entity_1 = require("./member-metadata-cache.entity");
+const member_profile_object_1 = require("./member-profile.object");
+let IdentityQueries = class IdentityQueries {
+    constructor(identityService) {
+        this.identityService = identityService;
+    }
+    async member(memberId) {
+        const metadata = await this.identityService.resolveMember(memberId);
+        return (0, member_profile_object_1.toMemberProfileObject)(metadata);
+    }
+    async members(memberIds) {
+        const metadataList = await this.identityService.resolveMembers(memberIds);
+        return metadataList.map(member_profile_object_1.toMemberProfileObject);
+    }
+    async cachedMembers() {
+        return this.identityService.listCachedMembers();
+    }
+    async searchMembers(searchText, page, pageSize) {
+        const metadataList = await this.identityService.searchMembers(searchText, {
+            page: page ?? undefined,
+            pageSize: pageSize ?? undefined,
+        });
+        return metadataList.map(member_profile_object_1.toMemberProfileObject);
+    }
+    async memberCount(searchText) {
+        return this.identityService.countMembers(searchText ?? '');
+    }
+};
+exports.IdentityQueries = IdentityQueries;
+tslib_1.__decorate([
+    (0, graphql_1.Query)(() => member_profile_object_1.MemberProfileObject),
+    tslib_1.__param(0, (0, graphql_1.Args)('memberId', { type: () => String })),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [String]),
+    tslib_1.__metadata("design:returntype", Promise)
+], IdentityQueries.prototype, "member", null);
+tslib_1.__decorate([
+    (0, graphql_1.Query)(() => [member_profile_object_1.MemberProfileObject]),
+    tslib_1.__param(0, (0, graphql_1.Args)('memberIds', { type: () => [String] })),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [Array]),
+    tslib_1.__metadata("design:returntype", Promise)
+], IdentityQueries.prototype, "members", null);
+tslib_1.__decorate([
+    (0, graphql_1.Query)(() => [member_metadata_cache_entity_1.MemberMetadataCacheEntity]),
+    (0, bpm_auth_1.BPMAdminOnly)(),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", []),
+    tslib_1.__metadata("design:returntype", Promise)
+], IdentityQueries.prototype, "cachedMembers", null);
+tslib_1.__decorate([
+    (0, graphql_1.Query)(() => [member_profile_object_1.MemberProfileObject]),
+    tslib_1.__param(0, (0, graphql_1.Args)('searchText', { type: () => String })),
+    tslib_1.__param(1, (0, graphql_1.Args)('page', { nullable: true, type: () => graphql_1.Int })),
+    tslib_1.__param(2, (0, graphql_1.Args)('pageSize', { nullable: true, type: () => graphql_1.Int })),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [String, Object, Object]),
+    tslib_1.__metadata("design:returntype", Promise)
+], IdentityQueries.prototype, "searchMembers", null);
+tslib_1.__decorate([
+    (0, graphql_1.Query)(() => graphql_1.Int),
+    tslib_1.__param(0, (0, graphql_1.Args)('searchText', { nullable: true, type: () => String })),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [Object]),
+    tslib_1.__metadata("design:returntype", Promise)
+], IdentityQueries.prototype, "memberCount", null);
+exports.IdentityQueries = IdentityQueries = tslib_1.__decorate([
+    (0, graphql_1.Resolver)(),
+    (0, bpm_auth_1.BPMAuthenticated)(),
+    tslib_1.__metadata("design:paramtypes", [identity_service_1.IdentityService])
+], IdentityQueries);
+//# sourceMappingURL=identity.queries.js.map

package/src/lib/identity/identity.queries.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.queries.js","sourceRoot":"","sources":["../../../../../../libs/bpm-core/src/lib/identity/identity.queries.ts"],"names":[],"mappings":";;;;AAAA,6CAA6D;AAC7D,0CAA6D;AAC7D,yDAAqD;AACrD,iFAA2E;AAC3E,mEAGiC;AAI1B,IAAM,eAAe,GAArB,MAAM,eAAe;IAC1B,YAA6B,eAAgC;QAAhC,oBAAe,GAAf,eAAe,CAAiB;IAAG,CAAC;IAG3D,AAAN,KAAK,CAAC,MAAM,CACgC,QAAgB;QAE1D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAEpE,OAAO,IAAA,6CAAqB,EAAC,QAAQ,CAAC,CAAC;IACzC,CAAC;IAGK,AAAN,KAAK,CAAC,OAAO,CACkC,SAA4B;QAEzE,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;QAE1E,OAAO,YAAY,CAAC,GAAG,CAAC,6CAAqB,CAAC,CAAC;IACjD,CAAC;IAIK,AAAN,KAAK,CAAC,aAAa;QACjB,OAAO,IAAI,CAAC,eAAe,CAAC,iBAAiB,EAAE,CAAC;IAClD,CAAC;IAGK,AAAN,KAAK,CAAC,aAAa,CAC2B,UAAkB,EACX,IAAoB,EAEvE,QAAwB;QAExB,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,aAAa,CAAC,UAAU,EAAE;YACxE,IAAI,EAAE,IAAI,IAAI,SAAS;YACvB,QAAQ,EAAE,QAAQ,IAAI,SAAS;SAChC,CAAC,CAAC;QAEH,OAAO,YAAY,CAAC,GAAG,CAAC,6CAAqB,CAAC,CAAC;IACjD,CAAC;IAGK,AAAN,KAAK,CAAC,WAAW,CAEf,UAA0B;QAE1B,OAAO,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;IAC7D,CAAC;CACF,CAAA;AAjDY,0CAAe;AAIpB;IADL,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,2CAAmB,CAAC;IAE9B,mBAAA,IAAA,cAAI,EAAC,UAAU,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,CAAA;;;;6CAK1C;AAGK;IADL,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,CAAC,2CAAmB,CAAC,CAAC;IAEhC,mBAAA,IAAA,cAAI,EAAC,WAAW,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;;;;8CAK7C;AAIK;IAFL,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,CAAC,wDAAyB,CAAC,CAAC;IACxC,IAAA,uBAAY,GAAE;;;;oDAGd;AAGK;IADL,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,CAAC,2CAAmB,CAAC,CAAC;IAEhC,mBAAA,IAAA,cAAI,EAAC,YAAY,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,CAAA;IAC1C,mBAAA,IAAA,cAAI,EAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,aAAG,EAAE,CAAC,CAAA;IACjD,mBAAA,IAAA,cAAI,EAAC,UAAU,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,aAAG,EAAE,CAAC,CAAA;;;;oDASvD;AAGK;IADL,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,aAAG,CAAC;IAEd,mBAAA,IAAA,cAAI,EAAC,YAAY,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,CAAA;;;;kDAI5D;0BAhDU,eAAe;IAF3B,IAAA,kBAAQ,GAAE;IACV,IAAA,2BAAgB,GAAE;6CAE6B,kCAAe;GADlD,eAAe,CAiD3B"}

package/src/lib/identity/identity.service.d.ts

@@ -0,0 +1,22 @@
+import { Repository } from 'typeorm';
+import { MemberMetadata } from '@rytass/bpm-core-shared';
+import { BPMResolvedIdentityOptions } from './identity-options';
+import { MemberMetadataCacheEntity } from './member-metadata-cache.entity';
+import { MemberResolver } from './member-resolver.interface';
+interface SearchMembersOptions {
+    readonly page?: number;
+    readonly pageSize?: number;
+}
+export declare class IdentityService {
+    private readonly cacheRepository;
+    private readonly memberResolver;
+    private readonly identityOptions;
+    constructor(cacheRepository: Repository<MemberMetadataCacheEntity>, memberResolver: MemberResolver, identityOptions?: BPMResolvedIdentityOptions);
+    resolveMember(memberId: string): Promise<MemberMetadata>;
+    resolveMembers(memberIds: readonly string[]): Promise<readonly MemberMetadata[]>;
+    listCachedMembers(): Promise<readonly MemberMetadataCacheEntity[]>;
+    countMembers(searchText: string): Promise<number>;
+    searchMembers(searchText: string, options?: SearchMembersOptions): Promise<readonly MemberMetadata[]>;
+    private searchAllMembers;
+}
+export {};

package/src/lib/identity/identity.service.js

@@ -0,0 +1,141 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.IdentityService = void 0;
+const tslib_1 = require("tslib");
+const common_1 = require("@nestjs/common");
+const typeorm_1 = require("@nestjs/typeorm");
+const typeorm_2 = require("typeorm");
+const identity_options_1 = require("./identity-options");
+const member_metadata_cache_entity_1 = require("./member-metadata-cache.entity");
+const member_resolver_interface_1 = require("./member-resolver.interface");
+const DEFAULT_MEMBER_PAGE = 1;
+const DEFAULT_MEMBER_PAGE_SIZE = 10;
+const MAX_MEMBER_PAGE_SIZE = 100;
+const normalizePage = (page) => Number.isInteger(page) && page !== undefined && page > 0
+    ? page
+    : DEFAULT_MEMBER_PAGE;
+const normalizePageSize = (pageSize) => {
+    if (!Number.isInteger(pageSize) || pageSize === undefined || pageSize <= 0) {
+        return DEFAULT_MEMBER_PAGE_SIZE;
+    }
+    return Math.min(pageSize, MAX_MEMBER_PAGE_SIZE);
+};
+const paginateMembers = (members, options) => {
+    const page = normalizePage(options.page);
+    const pageSize = normalizePageSize(options.pageSize);
+    const offset = (page - 1) * pageSize;
+    return members.slice(offset, offset + pageSize);
+};
+let IdentityService = class IdentityService {
+    constructor(cacheRepository, memberResolver, identityOptions = identity_options_1.DEFAULT_BPM_IDENTITY_OPTIONS) {
+        this.cacheRepository = cacheRepository;
+        this.memberResolver = memberResolver;
+        this.identityOptions = identityOptions;
+    }
+    async resolveMember(memberId) {
+        const now = new Date();
+        const cached = await this.cacheRepository.findOne({ where: { memberId } });
+        if (cached && cached.expiresAt > now) {
+            return cached.metadata;
+        }
+        const metadata = await this.memberResolver.resolve(memberId);
+        const fetchedAt = now;
+        const expiresAt = new Date(now.getTime() + this.identityOptions.memberMetadataCacheTtlMs);
+        const cacheEntity = cached ?? new member_metadata_cache_entity_1.MemberMetadataCacheEntity();
+        cacheEntity.fetchedAt = fetchedAt;
+        cacheEntity.expiresAt = expiresAt;
+        cacheEntity.memberId = memberId;
+        cacheEntity.metadata = metadata;
+        await this.cacheRepository.save(cacheEntity);
+        return metadata;
+    }
+    async resolveMembers(memberIds) {
+        const uniqueMemberIds = [...new Set(memberIds)].filter((memberId) => memberId.length > 0);
+        if (uniqueMemberIds.length === 0) {
+            return [];
+        }
+        const now = new Date();
+        const cachedRows = await this.cacheRepository.find({
+            where: { memberId: (0, typeorm_2.In)([...uniqueMemberIds]) },
+        });
+        const cacheEntityByMemberId = new Map(cachedRows.map((row) => [
+            row.memberId,
+            row,
+        ]));
+        const metadataByMemberId = new Map();
+        const staleMemberIds = [];
+        for (const memberId of uniqueMemberIds) {
+            const cached = cacheEntityByMemberId.get(memberId);
+            if (cached && cached.expiresAt > now) {
+                metadataByMemberId.set(memberId, cached.metadata);
+            }
+            else {
+                staleMemberIds.push(memberId);
+            }
+        }
+        if (staleMemberIds.length > 0) {
+            const resolvedMap = await this.memberResolver.resolveMany(staleMemberIds);
+            const expiresAt = new Date(now.getTime() + this.identityOptions.memberMetadataCacheTtlMs);
+            const entitiesToSave = [];
+            for (const memberId of staleMemberIds) {
+                const metadata = resolvedMap.get(memberId);
+                if (!metadata) {
+                    continue;
+                }
+                const cacheEntity = cacheEntityByMemberId.get(memberId) ??
+                    new member_metadata_cache_entity_1.MemberMetadataCacheEntity();
+                cacheEntity.memberId = memberId;
+                cacheEntity.metadata = metadata;
+                cacheEntity.fetchedAt = now;
+                cacheEntity.expiresAt = expiresAt;
+                entitiesToSave.push(cacheEntity);
+                metadataByMemberId.set(memberId, metadata);
+            }
+            if (entitiesToSave.length > 0) {
+                await this.cacheRepository.save(entitiesToSave);
+            }
+        }
+        return memberIds
+            .map((memberId) => metadataByMemberId.get(memberId))
+            .filter((metadata) => Boolean(metadata));
+    }
+    async listCachedMembers() {
+        return this.cacheRepository.find({ order: { memberId: 'ASC' } });
+    }
+    async countMembers(searchText) {
+        const members = await this.searchAllMembers(searchText);
+        return members.length;
+    }
+    async searchMembers(searchText, options = {}) {
+        const members = await this.searchAllMembers(searchText);
+        if (options.page === undefined && options.pageSize === undefined) {
+            return members;
+        }
+        return paginateMembers(members, options);
+    }
+    async searchAllMembers(searchText) {
+        if (this.memberResolver.search) {
+            return this.memberResolver.search(searchText);
+        }
+        const normalizedSearchText = searchText.trim().toLocaleLowerCase();
+        const cachedMembers = await this.listCachedMembers();
+        return cachedMembers
+            .map((member) => member.metadata)
+            .filter((metadata) => {
+            if (!normalizedSearchText) {
+                return true;
+            }
+            return [metadata.email, metadata.memberId, metadata.name].some((value) => value.toLocaleLowerCase().includes(normalizedSearchText));
+        });
+    }
+};
+exports.IdentityService = IdentityService;
+exports.IdentityService = IdentityService = tslib_1.__decorate([
+    (0, common_1.Injectable)(),
+    tslib_1.__param(0, (0, typeorm_1.InjectRepository)(member_metadata_cache_entity_1.MemberMetadataCacheEntity)),
+    tslib_1.__param(1, (0, common_1.Inject)(member_resolver_interface_1.MEMBER_RESOLVER)),
+    tslib_1.__param(2, (0, common_1.Optional)()),
+    tslib_1.__param(2, (0, common_1.Inject)(identity_options_1.BPM_IDENTITY_OPTIONS)),
+    tslib_1.__metadata("design:paramtypes", [typeorm_2.Repository, Object, Object])
+], IdentityService);
+//# sourceMappingURL=identity.service.js.map

package/src/lib/identity/identity.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.service.js","sourceRoot":"","sources":["../../../../../../libs/bpm-core/src/lib/identity/identity.service.ts"],"names":[],"mappings":";;;;AAAA,2CAA8D;AAC9D,6CAAmD;AACnD,qCAAyC;AAEzC,yDAI4B;AAC5B,iFAA2E;AAC3E,2EAA8E;AAE9E,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAC9B,MAAM,wBAAwB,GAAG,EAAE,CAAC;AACpC,MAAM,oBAAoB,GAAG,GAAG,CAAC;AAOjC,MAAM,aAAa,GAAG,CAAC,IAAa,EAAU,EAAE,CAC9C,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,GAAG,CAAC;IACtD,CAAC,CAAC,IAAI;IACN,CAAC,CAAC,mBAAmB,CAAC;AAE1B,MAAM,iBAAiB,GAAG,CAAC,QAAiB,EAAU,EAAE;IACtD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,IAAI,CAAC,EAAE,CAAC;QAC3E,OAAO,wBAAwB,CAAC;IAClC,CAAC;IAED,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CAAC;AAClD,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,CACtB,OAAkC,EAClC,OAA6B,EACF,EAAE;IAC7B,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,QAAQ,CAAC;IAErC,OAAO,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,QAAQ,CAAC,CAAC;AAClD,CAAC,CAAC;AAGK,IAAM,eAAe,GAArB,MAAM,eAAe;IAC1B,YAEmB,eAAsD,EAEtD,cAA8B,EAG9B,kBAA8C,+CAA4B;QAL1E,oBAAe,GAAf,eAAe,CAAuC;QAEtD,mBAAc,GAAd,cAAc,CAAgB;QAG9B,oBAAe,GAAf,eAAe,CAA2D;IAC1F,CAAC;IAEJ,KAAK,CAAC,aAAa,CAAC,QAAgB;QAClC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QAE3E,IAAI,MAAM,IAAI,MAAM,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC;YACrC,OAAO,MAAM,CAAC,QAAQ,CAAC;QACzB,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC7D,MAAM,SAAS,GAAG,GAAG,CAAC;QACtB,MAAM,SAAS,GAAG,IAAI,IAAI,CACxB,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,eAAe,CAAC,wBAAwB,CAC9D,CAAC;QAEF,MAAM,WAAW,GAAG,MAAM,IAAI,IAAI,wDAAyB,EAAE,CAAC;QAC9D,WAAW,CAAC,SAAS,GAAG,SAAS,CAAC;QAClC,WAAW,CAAC,SAAS,GAAG,SAAS,CAAC;QAClC,WAAW,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAChC,WAAW,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAEhC,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAE7C,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,SAA4B;QAE5B,MAAM,eAAe,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CACpD,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAClC,CAAC;QAEF,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjC,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC;YACjD,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAA,YAAE,EAAC,CAAC,GAAG,eAAe,CAAC,CAAC,EAAE;SAC9C,CAAC,CAAC;QACH,MAAM,qBAAqB,GAAG,IAAI,GAAG,CACnC,UAAU,CAAC,GAAG,CAAC,CAAC,GAAG,EAAgD,EAAE,CAAC;YACpE,GAAG,CAAC,QAAQ;YACZ,GAAG;SACJ,CAAC,CACH,CAAC;QACF,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAA0B,CAAC;QAC7D,MAAM,cAAc,GAAa,EAAE,CAAC;QAEpC,KAAK,MAAM,QAAQ,IAAI,eAAe,EAAE,CAAC;YACvC,MAAM,MAAM,GAAG,qBAAqB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAEnD,IAAI,MAAM,IAAI,MAAM,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC;gBACrC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;YACpD,CAAC;iBAAM,CAAC;gBACN,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;QAED,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,WAAW,GACf,MAAM,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC;YACxD,MAAM,SAAS,GAAG,IAAI,IAAI,CACxB,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,eAAe,CAAC,wBAAwB,CAC9D,CAAC;YACF,MAAM,cAAc,GAAgC,EAAE,CAAC;YAEvD,KAAK,MAAM,QAAQ,IAAI,cAAc,EAAE,CAAC;gBACtC,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBAE3C,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,SAAS;gBACX,CAAC;gBAED,MAAM,WAAW,GACf,qBAAqB,CAAC,GAAG,CAAC,QAAQ,CAAC;oBACnC,IAAI,wDAAyB,EAAE,CAAC;gBAElC,WAAW,CAAC,QAAQ,GAAG,QAAQ,CAAC;gBAChC,WAAW,CAAC,QAAQ,GAAG,QAAQ,CAAC;gBAChC,WAAW,CAAC,SAAS,GAAG,GAAG,CAAC;gBAC5B,WAAW,CAAC,SAAS,GAAG,SAAS,CAAC;gBAElC,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBACjC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YAC7C,CAAC;YAED,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC9B,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;QAED,OAAO,SAAS;aACb,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;aACnD,MAAM,CAAC,CAAC,QAAQ,EAA8B,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IACzE,CAAC;IAED,KAAK,CAAC,iBAAiB;QACrB,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;IACnE,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,UAAkB;QACnC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAExD,OAAO,OAAO,CAAC,MAAM,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,UAAkB,EAClB,UAAgC,EAAE;QAElC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAExD,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YACjE,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,OAAO,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC3C,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAC5B,UAAkB;QAElB,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAChD,CAAC;QAED,MAAM,oBAAoB,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC,iBAAiB,EAAE,CAAC;QACnE,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAErD,OAAO,aAAa;aACjB,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC;aAChC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE;YACnB,IAAI,CAAC,oBAAoB,EAAE,CAAC;gBAC1B,OAAO,IAAI,CAAC;YACd,CAAC;YAED,OAAO,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAC5D,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,iBAAiB,EAAE,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CACpE,CAAC;QACJ,CAAC,CAAC,CAAC;IACP,CAAC;CACF,CAAA;AAzJY,0CAAe;0BAAf,eAAe;IAD3B,IAAA,mBAAU,GAAE;IAGR,mBAAA,IAAA,0BAAgB,EAAC,wDAAyB,CAAC,CAAA;IAE3C,mBAAA,IAAA,eAAM,EAAC,2CAAe,CAAC,CAAA;IAEvB,mBAAA,IAAA,iBAAQ,GAAE,CAAA;IACV,mBAAA,IAAA,eAAM,EAAC,uCAAoB,CAAC,CAAA;6CAJK,oBAAU;GAHnC,eAAe,CAyJ3B"}

package/src/lib/identity/index.js

@@ -0,0 +1,7 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const tslib_1 = require("tslib");
+tslib_1.__exportStar(require("./identity-options"), exports);
+tslib_1.__exportStar(require("./member-base.adapter"), exports);
+tslib_1.__exportStar(require("./member-resolver.interface"), exports);
+//# sourceMappingURL=index.js.map

package/src/lib/identity/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../libs/bpm-core/src/lib/identity/index.ts"],"names":[],"mappings":";;;AAAA,6DAAmC;AACnC,gEAAsC;AACtC,sEAA4C"}

package/src/lib/identity/member-base.adapter.d.ts

@@ -0,0 +1,95 @@
+import { InjectionToken, Provider } from '@nestjs/common';
+import { MemberMetadata } from '@rytass/bpm-core-shared';
+import { BPMAuthContext } from '../bpm-auth';
+import { BPMMemberResolver } from './member-resolver.interface';
+/**
+ * Structural contract a host identity backend should implement (or a thin
+ * adapter wrap) so BPM can be plugged into any `member-base`-style
+ * directory without coupling `@rytass/bpm-core-nestjs-module` to a
+ * specific identity package.
+ *
+ * `TMember` is the host's own member shape; the adapter walks it through
+ * {@link BPMMemberBaseAdapterOptions} field readers.
+ */
+export interface BPMMemberBaseDirectory<TMember> {
+    readonly resolveMember: (memberId: string) => Promise<TMember | null>;
+    readonly resolveMembers?: (memberIds: readonly string[]) => Promise<readonly TMember[]>;
+    readonly searchMembers?: (searchText: string) => Promise<readonly TMember[]>;
+}
+/**
+ * Per-host field readers that tell the adapter how to extract canonical
+ * BPM fields out of the host's `TMember`. Each reader is optional;
+ * sensible defaults are inferred when the host uses common conventions
+ * (`memberId` / `id` / `sub` for the member id, `email` for the email,
+ * `name` / `displayName` for the name, etc.).
+ *
+ * Provide `readPermissions` and `readRoles` if you want BPM's
+ * `BPMAdminGuard` / `BPMDesignerGuard` to receive the host's RBAC
+ * strings; otherwise the resolved `BPMAuthContext` will carry empty
+ * arrays.
+ */
+export interface BPMMemberBaseAdapterOptions<TMember> {
+    readonly readCustomFields?: (member: TMember) => Readonly<Record<string, unknown>>;
+    readonly readEmail?: (member: TMember) => string | null;
+    readonly readMemberId?: (member: TMember) => string | null;
+    readonly readName?: (member: TMember) => string | null;
+    readonly readPermissions?: (member: TMember) => readonly string[];
+    readonly readRoles?: (member: TMember) => readonly string[];
+}
+export interface BPMMemberBaseResolverProviderOptions<TMember> {
+    readonly adapterOptions?: BPMMemberBaseAdapterOptions<TMember>;
+    readonly directoryToken: InjectionToken<BPMMemberBaseDirectory<TMember>>;
+    readonly provide: InjectionToken<BPMMemberResolver>;
+}
+export declare class BPMMemberBaseResolverAdapter<TMember> implements BPMMemberResolver {
+    private readonly directory;
+    private readonly options;
+    constructor(directory: BPMMemberBaseDirectory<TMember>, options?: BPMMemberBaseAdapterOptions<TMember>);
+    resolve(memberId: string): Promise<MemberMetadata>;
+    resolveMany(memberIds: readonly string[]): Promise<ReadonlyMap<string, MemberMetadata>>;
+    search(searchText: string): Promise<readonly MemberMetadata[]>;
+}
+/**
+ * Helper for hosts that already hold an authenticated `TMember` (for
+ * example from `@rytass/member-base-nestjs-module`) and want to project it
+ * into a {@link BPMAuthContext} without writing the boilerplate by hand.
+ *
+ * Returns `null` when the input is nullish or when the member is missing
+ * an id — never throws. Pair this with `BPMRootModuleOptions.authContextFactory`
+ * so BPM resolvers receive the projected context on every request.
+ *
+ * @example
+ * ```ts
+ * const bpmAuth = createBPMAuthContextFromMemberBaseMember(memberBaseUser, {
+ *   readRoles: (m) => m.roles,
+ *   readPermissions: (m) => m.permissions,
+ *   readCustomFields: (m) => ({ tenantId: m.tenantId }),
+ * });
+ * ```
+ */
+export declare function createBPMAuthContextFromMemberBaseMember<TMember>(member: TMember | null | undefined, options?: BPMMemberBaseAdapterOptions<TMember>): BPMAuthContext | null;
+/**
+ * Builds a Nest `Provider` that adapts a host-provided
+ * {@link BPMMemberBaseDirectory} into a {@link BPMMemberResolver}, then
+ * registers it under the host-chosen injection token (typically
+ * {@link BPM_MEMBER_RESOLVER}).
+ *
+ * Pass the result inside `BPMRootModuleOptions.memberResolverProvider`.
+ *
+ * @example
+ * ```ts
+ * BPMRootModule.forRoot({
+ *   memberResolverProvider: createBPMMemberBaseResolverProvider({
+ *     provide: BPM_MEMBER_RESOLVER,
+ *     directoryToken: HOST_MEMBER_DIRECTORY,
+ *     adapterOptions: {
+ *       readEmail: (m) => m.email,
+ *       readName: (m) => m.name,
+ *     },
+ *   }),
+ *   // ...
+ * });
+ * ```
+ */
+export declare function createBPMMemberBaseResolverProvider<TMember>({ adapterOptions, directoryToken, provide, }: BPMMemberBaseResolverProviderOptions<TMember>): Provider<BPMMemberResolver>;
+export declare function readMemberMetadataFromMemberBaseMember<TMember>(member: TMember, options?: BPMMemberBaseAdapterOptions<TMember>): MemberMetadata;

package/src/lib/identity/member-base.adapter.js

@@ -0,0 +1,137 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BPMMemberBaseResolverAdapter = void 0;
+exports.createBPMAuthContextFromMemberBaseMember = createBPMAuthContextFromMemberBaseMember;
+exports.createBPMMemberBaseResolverProvider = createBPMMemberBaseResolverProvider;
+exports.readMemberMetadataFromMemberBaseMember = readMemberMetadataFromMemberBaseMember;
+class BPMMemberBaseResolverAdapter {
+    constructor(directory, options = {}) {
+        this.directory = directory;
+        this.options = options;
+    }
+    async resolve(memberId) {
+        const member = await this.directory.resolveMember(memberId);
+        if (!member) {
+            throw new Error(`member-base member ${memberId} was not found`);
+        }
+        return readMemberMetadataFromMemberBaseMember(member, this.options);
+    }
+    async resolveMany(memberIds) {
+        const members = this.directory.resolveMembers
+            ? await this.directory.resolveMembers(memberIds)
+            : await Promise.all(memberIds.map((memberId) => this.directory.resolveMember(memberId)));
+        return members
+            .filter((member) => Boolean(member))
+            .map((member) => readMemberMetadataFromMemberBaseMember(member, this.options))
+            .reduce((metadataByMemberId, metadata) => new Map(metadataByMemberId).set(metadata.memberId, metadata), new Map());
+    }
+    async search(searchText) {
+        if (!this.directory.searchMembers) {
+            return [];
+        }
+        return (await this.directory.searchMembers(searchText)).map((member) => readMemberMetadataFromMemberBaseMember(member, this.options));
+    }
+}
+exports.BPMMemberBaseResolverAdapter = BPMMemberBaseResolverAdapter;
+/**
+ * Helper for hosts that already hold an authenticated `TMember` (for
+ * example from `@rytass/member-base-nestjs-module`) and want to project it
+ * into a {@link BPMAuthContext} without writing the boilerplate by hand.
+ *
+ * Returns `null` when the input is nullish or when the member is missing
+ * an id — never throws. Pair this with `BPMRootModuleOptions.authContextFactory`
+ * so BPM resolvers receive the projected context on every request.
+ *
+ * @example
+ * ```ts
+ * const bpmAuth = createBPMAuthContextFromMemberBaseMember(memberBaseUser, {
+ *   readRoles: (m) => m.roles,
+ *   readPermissions: (m) => m.permissions,
+ *   readCustomFields: (m) => ({ tenantId: m.tenantId }),
+ * });
+ * ```
+ */
+function createBPMAuthContextFromMemberBaseMember(member, options = {}) {
+    if (!member) {
+        return null;
+    }
+    const memberId = readMemberId(member, options);
+    return memberId
+        ? {
+            memberId,
+            metadata: options.readCustomFields?.(member) ?? {},
+            permissions: options.readPermissions?.(member) ?? [],
+            roles: options.readRoles?.(member) ?? [],
+        }
+        : null;
+}
+/**
+ * Builds a Nest `Provider` that adapts a host-provided
+ * {@link BPMMemberBaseDirectory} into a {@link BPMMemberResolver}, then
+ * registers it under the host-chosen injection token (typically
+ * {@link BPM_MEMBER_RESOLVER}).
+ *
+ * Pass the result inside `BPMRootModuleOptions.memberResolverProvider`.
+ *
+ * @example
+ * ```ts
+ * BPMRootModule.forRoot({
+ *   memberResolverProvider: createBPMMemberBaseResolverProvider({
+ *     provide: BPM_MEMBER_RESOLVER,
+ *     directoryToken: HOST_MEMBER_DIRECTORY,
+ *     adapterOptions: {
+ *       readEmail: (m) => m.email,
+ *       readName: (m) => m.name,
+ *     },
+ *   }),
+ *   // ...
+ * });
+ * ```
+ */
+function createBPMMemberBaseResolverProvider({ adapterOptions, directoryToken, provide, }) {
+    return {
+        inject: [directoryToken],
+        provide,
+        useFactory: (directory) => new BPMMemberBaseResolverAdapter(directory, adapterOptions),
+    };
+}
+function readMemberMetadataFromMemberBaseMember(member, options = {}) {
+    const memberId = readMemberId(member, options);
+    if (!memberId) {
+        throw new Error('member-base member id is required for BPM integration');
+    }
+    return {
+        customFields: options.readCustomFields?.(member) ?? {},
+        email: readMemberEmail(member, options) ?? '',
+        memberId,
+        name: readMemberName(member, options) ?? memberId,
+    };
+}
+function readMemberId(member, options) {
+    return (normalizeText(options.readMemberId?.(member)) ??
+        readStringProperty(member, 'memberId') ??
+        readStringProperty(member, 'id') ??
+        readStringProperty(member, 'sub'));
+}
+function readMemberEmail(member, options) {
+    return normalizeText(options.readEmail?.(member)) ?? readStringProperty(member, 'email');
+}
+function readMemberName(member, options) {
+    return (normalizeText(options.readName?.(member)) ??
+        readStringProperty(member, 'name') ??
+        readStringProperty(member, 'displayName') ??
+        readMemberEmail(member, options));
+}
+function readStringProperty(value, key) {
+    if (!isRecord(value)) {
+        return null;
+    }
+    return normalizeText(value[key]);
+}
+function normalizeText(value) {
+    return typeof value === 'string' && value.trim() ? value.trim() : null;
+}
+function isRecord(value) {
+    return typeof value === 'object' && value !== null;
+}
+//# sourceMappingURL=member-base.adapter.js.map

package/src/lib/identity/member-base.adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"member-base.adapter.js","sourceRoot":"","sources":["../../../../../../libs/bpm-core/src/lib/identity/member-base.adapter.ts"],"names":[],"mappings":";;;AA0HA,4FAkBC;AAyBD,kFAaC;AAED,wFAgBC;AAjJD,MAAa,4BAA4B;IAGvC,YACmB,SAA0C,EAC1C,UAAgD,EAAE;QADlD,cAAS,GAAT,SAAS,CAAiC;QAC1C,YAAO,GAAP,OAAO,CAA2C;IAClE,CAAC;IAEJ,KAAK,CAAC,OAAO,CAAC,QAAgB;QAC5B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAE5D,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,sBAAsB,QAAQ,gBAAgB,CAAC,CAAC;QAClE,CAAC;QAED,OAAO,sCAAsC,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACtE,CAAC;IAED,KAAK,CAAC,WAAW,CACf,SAA4B;QAE5B,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,cAAc;YAC3C,CAAC,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,SAAS,CAAC;YAChD,CAAC,CAAC,MAAM,OAAO,CAAC,GAAG,CACf,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAA2B,EAAE,CAClD,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,QAAQ,CAAC,CACvC,CACF,CAAC;QAEN,OAAO,OAAO;aACX,MAAM,CAAC,CAAC,MAAM,EAAqB,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;aACtD,GAAG,CAAC,CAAC,MAAM,EAAkB,EAAE,CAC9B,sCAAsC,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,CAC7D;aACA,MAAM,CACL,CAAC,kBAAkB,EAAE,QAAQ,EAAuC,EAAE,CACpE,IAAI,GAAG,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAC9D,IAAI,GAAG,EAAE,CACV,CAAC;IACN,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,UAAkB;QAC7B,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,CAAC;YAClC,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,OAAO,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CACzD,CAAC,MAAM,EAAkB,EAAE,CACzB,sCAAsC,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,CAC/D,CAAC;IACJ,CAAC;CACF;AAnDD,oEAmDC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,SAAgB,wCAAwC,CACtD,MAAkC,EAClC,UAAgD,EAAE;IAElD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAE/C,OAAO,QAAQ;QACb,CAAC,CAAC;YACE,QAAQ;YACR,QAAQ,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE;YAClD,WAAW,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE;YACpD,KAAK,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE;SACzC;QACH,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,SAAgB,mCAAmC,CAAU,EAC3D,cAAc,EACd,cAAc,EACd,OAAO,GACuC;IAC9C,OAAO;QACL,MAAM,EAAE,CAAC,cAAc,CAAC;QACxB,OAAO;QACP,UAAU,EAAE,CACV,SAA0C,EACvB,EAAE,CACrB,IAAI,4BAA4B,CAAC,SAAS,EAAE,cAAc,CAAC;KAC9D,CAAC;AACJ,CAAC;AAED,SAAgB,sCAAsC,CACpD,MAAe,EACf,UAAgD,EAAE;IAElD,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAE/C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IAED,OAAO;QACL,YAAY,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE;QACtD,KAAK,EAAE,eAAe,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE;QAC7C,QAAQ;QACR,IAAI,EAAE,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,QAAQ;KAClD,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CACnB,MAAe,EACf,OAA6C;IAE7C,OAAO,CACL,aAAa,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,MAAM,CAAC,CAAC;QAC7C,kBAAkB,CAAC,MAAM,EAAE,UAAU,CAAC;QACtC,kBAAkB,CAAC,MAAM,EAAE,IAAI,CAAC;QAChC,kBAAkB,CAAC,MAAM,EAAE,KAAK,CAAC,CAClC,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CACtB,MAAe,EACf,OAA6C;IAE7C,OAAO,aAAa,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAC3F,CAAC;AAED,SAAS,cAAc,CACrB,MAAe,EACf,OAA6C;IAE7C,OAAO,CACL,aAAa,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,CAAC;QACzC,kBAAkB,CAAC,MAAM,EAAE,MAAM,CAAC;QAClC,kBAAkB,CAAC,MAAM,EAAE,aAAa,CAAC;QACzC,eAAe,CAAC,MAAM,EAAE,OAAO,CAAC,CACjC,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc,EAAE,GAAW;IACrD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACzE,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC;AACrD,CAAC"}

package/src/lib/identity/member-metadata-cache.entity.d.ts

@@ -0,0 +1,8 @@
+import { MemberMetadata } from '@rytass/bpm-core-shared';
+export declare class MemberMetadataCacheEntity {
+    id: string;
+    memberId: string;
+    metadata: MemberMetadata;
+    fetchedAt: Date;
+    expiresAt: Date;
+}