@rytass/bpm-core-nestjs-module 0.13.2 → 0.13.4

package/CHANGELOG.md

@@ -1,3 +1,56 @@
+## 0.13.4 (2026-09-17)
+
+### 🚀 Features
+
+- **admin:** add the webhook endpoints page ([ac03c59](https://github.com/Rytass/BPMCore/commit/ac03c59))
+- **client:** add webhook endpoint administration API ([0fa9c2a](https://github.com/Rytass/BPMCore/commit/0fa9c2a))
+- **workflow-webhook:** manage notify webhook endpoints in the database ([63e2f95](https://github.com/Rytass/BPMCore/commit/63e2f95))
+- **client:** add the webhook endpoint catalog query ([9e2c927](https://github.com/Rytass/BPMCore/commit/9e2c927))
+- **instance-detail:** show webhook deliveries to administrators ([4e1e3c1](https://github.com/Rytass/BPMCore/commit/4e1e3c1))
+- **client:** add webhook delivery listing and retry ([89387ae](https://github.com/Rytass/BPMCore/commit/89387ae))
+- **workflow-webhook:** let administrators inspect and retry deliveries ([4a6128b](https://github.com/Rytass/BPMCore/commit/4a6128b))
+- **workflow-webhook:** deliver notify webhooks through a transactional outbox ([cbb277f](https://github.com/Rytass/BPMCore/commit/cbb277f))
+- **template:** check webhook endpoints and bindings before publishing ([8c40553](https://github.com/Rytass/BPMCore/commit/8c40553))
+- **bpm:** wire the webhook endpoint registry into BPMRootModule ([0009643](https://github.com/Rytass/BPMCore/commit/0009643))
+- **workflow-webhook:** add the endpoint registry, catalog and allowlist ([82afe97](https://github.com/Rytass/BPMCore/commit/82afe97))
+- **template:** lint notify webhooks when publishing a template ([b6f75ec](https://github.com/Rytass/BPMCore/commit/b6f75ec))
+- **workflow:** add the notify webhook contract to the shared lib ([e240632](https://github.com/Rytass/BPMCore/commit/e240632))
+- **bpm:** make every BPMRootModule option optional and async-loadable ([0966edb](https://github.com/Rytass/BPMCore/commit/0966edb))
+- **workflow:** make a multi-person ad-hoc countersign need everyone ([f13e227](https://github.com/Rytass/BPMCore/commit/f13e227))
+
+### 🩹 Fixes
+
+- **workflow-engine:** end dry-run branches at notify nodes ([6850920](https://github.com/Rytass/BPMCore/commit/6850920))
+- **workflow-webhook:** harden the P1 catalog after independent review ([0ea9790](https://github.com/Rytass/BPMCore/commit/0ea9790))
+- **workflow-engine:** let a webhook-only notify node run ([2e2813a](https://github.com/Rytass/BPMCore/commit/2e2813a))
+- **workflow:** let the engine pick its service task dispatcher ([21bcde4](https://github.com/Rytass/BPMCore/commit/21bcde4))
+- **workflow:** keep a cast vote visible while the countersign waits ([a2a6f21](https://github.com/Rytass/BPMCore/commit/a2a6f21))
+- **workflow:** drop a task from the inbox once that member has decided it ([187d38d](https://github.com/Rytass/BPMCore/commit/187d38d))
+- **workflow:** guard the completion against an active task too ([3ae69e7](https://github.com/Rytass/BPMCore/commit/3ae69e7))
+- **workflow:** stop an end node completing the case twice ([e4b1931](https://github.com/Rytass/BPMCore/commit/e4b1931))
+- **workflow:** report the state a submit actually committed ([67da905](https://github.com/Rytass/BPMCore/commit/67da905))
+- **notification:** hand back an entity from the preference mutation ([3a9ab2c](https://github.com/Rytass/BPMCore/commit/3a9ab2c))
+- **delegation:** hand back an entity from the rule mutations ([02acc1b](https://github.com/Rytass/BPMCore/commit/02acc1b))
+- **workflow:** keep cancelled rows as entities so their GraphQL getters resolve ([746fdb3](https://github.com/Rytass/BPMCore/commit/746fdb3))
+
+### ❤️ Thank You
+
+- Chia Yu Pai @fantasywind
+- Claude Opus 5
+- Claude Opus 5 (1M context)
+- Kai-Chieh Yang
+
+## 0.13.3 (2026-09-04)
+
+### 🩹 Fixes
+
+- **attachment:** validate the signing secret at bootstrap, not at import ([d07f996](https://github.com/Rytass/BPMCore/commit/d07f996))
+
+### ❤️ Thank You
+
+- Chia Yu Pai @fantasywind
+- Claude Opus 5
+
 ## 0.13.2 (2026-09-04)
 
 ### 🩹 Fixes

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rytass/bpm-core-nestjs-module",
-  "version": "0.13.2",
+  "version": "0.13.4",
   "description": "Embeddable NestJS BPM approval workflow module: workflow engine, approval templates, forms, organization/member contracts, attachments, signatures, notifications, delegation, and TypeORM migrations.",
   "keywords": [
     "bpm",
@@ -80,6 +80,9 @@
       ],
       "workflow-engine": [
         "./src/lib/workflow-engine/index.d.ts"
+      ],
+      "workflow-webhook": [
+        "./src/lib/workflow-webhook/index.d.ts"
       ]
     }
   },
@@ -148,6 +151,10 @@
     "./workflow-engine": {
       "types": "./src/lib/workflow-engine/index.d.ts",
       "default": "./src/lib/workflow-engine/index.js"
+    },
+    "./workflow-webhook": {
+      "types": "./src/lib/workflow-webhook/index.d.ts",
+      "default": "./src/lib/workflow-webhook/index.js"
     }
   },
   "peerDependencies": {
@@ -155,7 +162,7 @@
     "@nestjs/core": ">=10.0.0",
     "@nestjs/graphql": ">=12.0.0",
     "@nestjs/typeorm": ">=10.0.0",
-    "@rytass/bpm-core-shared": "^0.13.2",
+    "@rytass/bpm-core-shared": "^0.13.4",
     "@rytass/secret-adapter-vault-nestjs": ">=0.4.5",
     "express": ">=4.0.0",
     "graphql": ">=16.0.0",
@@ -171,13 +178,13 @@
     }
   },
   "dependencies": {
-    "@rytass/storages": "^0.2.6",
-    "@rytass/storages-adapter-local": "^0.2.9",
+    "@rytass/storages": "^0.2.7",
+    "@rytass/storages-adapter-local": "^0.2.10",
     "cel-js": "^0.8.2",
     "class-transformer": "^0.5.1",
     "class-validator": "^0.15.1",
     "handlebars": "^4.7.9",
-    "nodemailer": "^9.0.1",
-    "tslib": "^2.3.0"
+    "nodemailer": "^9.1.1",
+    "tslib": "^2.8.1"
   }
 }

package/src/index.d.ts

@@ -14,3 +14,4 @@ export * from './lib/organization';
 export * from './lib/signature';
 export * from './lib/template';
 export * from './lib/workflow-engine';
+export * from './lib/workflow-webhook';

package/src/index.js

@@ -17,4 +17,5 @@ tslib_1.__exportStar(require("./lib/organization"), exports);
 tslib_1.__exportStar(require("./lib/signature"), exports);
 tslib_1.__exportStar(require("./lib/template"), exports);
 tslib_1.__exportStar(require("./lib/workflow-engine"), exports);
+tslib_1.__exportStar(require("./lib/workflow-webhook"), exports);
 //# sourceMappingURL=index.js.map

package/src/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../libs/bpm-core/src/index.ts"],"names":[],"mappings":";;;AAAA,2DAAiC;AACjC,oDAA0B;AAC1B,yDAA+B;AAC/B,yDAA+B;AAC/B,uDAA6B;AAC7B,0DAAgC;AAChC,yDAA+B;AAC/B,2DAAiC;AACjC,qDAA2B;AAC3B,iEAAuC;AACvC,yDAA+B;AAC/B,6DAAmC;AACnC,6DAAmC;AACnC,0DAAgC;AAChC,yDAA+B;AAC/B,gEAAsC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../libs/bpm-core/src/index.ts"],"names":[],"mappings":";;;AAAA,2DAAiC;AACjC,oDAA0B;AAC1B,yDAA+B;AAC/B,yDAA+B;AAC/B,uDAA6B;AAC7B,0DAAgC;AAChC,yDAA+B;AAC/B,2DAAiC;AACjC,qDAA2B;AAC3B,iEAAuC;AACvC,yDAA+B;AAC/B,6DAAmC;AACnC,6DAAmC;AACnC,0DAAgC;AAChC,yDAA+B;AAC/B,gEAAsC;AACtC,iEAAuC"}

package/src/lib/attachment/attachment-storage.provider.d.ts

@@ -1,4 +1,15 @@
 import { Provider } from '@nestjs/common';
 import { AttachmentStorage } from './attachment-storage.token';
+/**
+ * Default attachment storage used when the host registers none.
+ *
+ * Prefers a storage adapter handed to `BPMRootModule` as a runtime value
+ * (`attachmentStorage`, which a `forRootAsync` factory can build once its
+ * credentials are in hand) and otherwise writes to `.storage/attachments`
+ * through `@rytass/storages-adapter-local`.
+ *
+ * `BPM_ROOT_OPTIONS` is injected optionally so `AttachmentModule` still
+ * resolves when it is used on its own, outside `BPMRootModule`.
+ */
 export declare const attachmentStorageProvider: Provider<AttachmentStorage>;
 export declare function createLocalAttachmentStorage(directory: string): AttachmentStorage;

package/src/lib/attachment/attachment-storage.provider.js

@@ -4,10 +4,24 @@ exports.attachmentStorageProvider = void 0;
 exports.createLocalAttachmentStorage = createLocalAttachmentStorage;
 const promises_1 = require("fs/promises");
 const path_1 = require("path");
+const bpm_root_options_1 = require("../bpm/bpm-root-options");
 const attachment_storage_token_1 = require("./attachment-storage.token");
+/**
+ * Default attachment storage used when the host registers none.
+ *
+ * Prefers a storage adapter handed to `BPMRootModule` as a runtime value
+ * (`attachmentStorage`, which a `forRootAsync` factory can build once its
+ * credentials are in hand) and otherwise writes to `.storage/attachments`
+ * through `@rytass/storages-adapter-local`.
+ *
+ * `BPM_ROOT_OPTIONS` is injected optionally so `AttachmentModule` still
+ * resolves when it is used on its own, outside `BPMRootModule`.
+ */
 exports.attachmentStorageProvider = {
+    inject: [{ optional: true, token: bpm_root_options_1.BPM_ROOT_OPTIONS }],
     provide: attachment_storage_token_1.ATTACHMENT_STORAGE,
-    useFactory: () => createLocalAttachmentStorage((0, path_1.resolve)(process.cwd(), '.storage', 'attachments')),
+    useFactory: (rootOptions) => rootOptions?.attachmentStorage ??
+        createLocalAttachmentStorage((0, path_1.resolve)(process.cwd(), '.storage', 'attachments')),
 };
 function createLocalAttachmentStorage(directory) {
     const storageDirectory = (0, path_1.resolve)(directory);

package/src/lib/attachment/attachment-storage.provider.js.map

@@ -1 +1 @@
-{"version":3,"file":"attachment-storage.provider.js","sourceRoot":"","sources":["../../../../../../libs/bpm-core/src/lib/attachment/attachment-storage.provider.ts"],"names":[],"mappings":";;;AA2BA,oEA0BC;AApDD,0CAAoC;AACpC,+BAAwC;AACxC,yEAGoC;AAavB,QAAA,yBAAyB,GAAgC;IACpE,OAAO,EAAE,6CAAkB;IAC3B,UAAU,EAAE,GAAsB,EAAE,CAClC,4BAA4B,CAC1B,IAAA,cAAO,EAAC,OAAO,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,aAAa,CAAC,CAClD;CACJ,CAAC;AAEF,SAAgB,4BAA4B,CAC1C,SAAiB;IAEjB,MAAM,gBAAgB,GAAG,IAAA,cAAO,EAAC,SAAS,CAAC,CAAC;IAC5C,MAAM,YAAY,GAAG,2BAA2B,EAAE,CAAC;IACnD,MAAM,YAAY,GAAG,IAAI,YAAY,CAAC;QACpC,SAAS,EAAE,IAAI;QACf,SAAS,EAAE,gBAAgB;KAC5B,CAAC,CAAC;IACH,MAAM,KAAK,GAA+B,KAAK,EAC7C,IAAI,EACJ,OAAO,EACiC,EAAE;QAC1C,IAAI,OAAO,EAAE,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAA,gBAAK,EAAC,IAAA,cAAO,EAAC,IAAA,cAAO,EAAC,gBAAgB,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE;gBAChE,SAAS,EAAE,IAAI;aAChB,CAAC,CAAC;QACL,CAAC;QAED,OAAO,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC3C,CAAC,CAAC;IAEF,OAAO,IAAI,KAAK,CAAC,YAAY,EAAE;QAC7B,GAAG,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAW,EAAE,CAC3C,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC;KACzE,CAAsB,CAAC;AAC1B,CAAC;AAED,SAAS,2BAA2B;IAClC,MAAM,OAAO,GAAG,OAAO,CAAC,gCAAgC,CAAuB,CAAC;IAEhF,OAAO,OAAO,CAAC,YAAY,CAAC;AAC9B,CAAC"}
+{"version":3,"file":"attachment-storage.provider.js","sourceRoot":"","sources":["../../../../../../libs/bpm-core/src/lib/attachment/attachment-storage.provider.ts"],"names":[],"mappings":";;;AA8CA,oEA0BC;AAvED,0CAAoC;AACpC,+BAAwC;AACxC,8DAGiC;AACjC,yEAGoC;AAapC;;;;;;;;;;GAUG;AACU,QAAA,yBAAyB,GAAgC;IACpE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,mCAAgB,EAAE,CAAC;IACrD,OAAO,EAAE,6CAAkB;IAC3B,UAAU,EAAE,CACV,WAA8C,EAC3B,EAAE,CACrB,WAAW,EAAE,iBAAiB;QAC9B,4BAA4B,CAC1B,IAAA,cAAO,EAAC,OAAO,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,aAAa,CAAC,CAClD;CACJ,CAAC;AAEF,SAAgB,4BAA4B,CAC1C,SAAiB;IAEjB,MAAM,gBAAgB,GAAG,IAAA,cAAO,EAAC,SAAS,CAAC,CAAC;IAC5C,MAAM,YAAY,GAAG,2BAA2B,EAAE,CAAC;IACnD,MAAM,YAAY,GAAG,IAAI,YAAY,CAAC;QACpC,SAAS,EAAE,IAAI;QACf,SAAS,EAAE,gBAAgB;KAC5B,CAAC,CAAC;IACH,MAAM,KAAK,GAA+B,KAAK,EAC7C,IAAI,EACJ,OAAO,EACiC,EAAE;QAC1C,IAAI,OAAO,EAAE,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAA,gBAAK,EAAC,IAAA,cAAO,EAAC,IAAA,cAAO,EAAC,gBAAgB,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE;gBAChE,SAAS,EAAE,IAAI;aAChB,CAAC,CAAC;QACL,CAAC;QAED,OAAO,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC3C,CAAC,CAAC;IAEF,OAAO,IAAI,KAAK,CAAC,YAAY,EAAE;QAC7B,GAAG,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAW,EAAE,CAC3C,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC;KACzE,CAAsB,CAAC;AAC1B,CAAC;AAED,SAAS,2BAA2B;IAClC,MAAM,OAAO,GAAG,OAAO,CAAC,gCAAgC,CAAuB,CAAC;IAEhF,OAAO,OAAO,CAAC,YAAY,CAAC;AAC9B,CAAC"}

package/src/lib/attachment/attachment.module.js

@@ -94,10 +94,25 @@ exports.AttachmentModule = AttachmentModule = AttachmentModule_1 = tslib_1.__dec
         exports: ATTACHMENT_MODULE_EXPORTS,
     })
 ], AttachmentModule);
+/**
+ * Resolves the attachment options lazily.
+ *
+ * A `useValue` here would run `resolveBPMAttachmentOptions` while the `@Module`
+ * decorator argument above is being evaluated — that is, when this file is
+ * *imported*. The production secret check would then fire at `require()` time,
+ * before any host could pass a secret through `forRoot` / `forRootAsync`, and
+ * even for a host that never mounts attachments at all. That is exactly what
+ * made 0.13.2 impossible to load under `NODE_ENV=production`.
+ *
+ * As a factory the check happens when Nest instantiates the provider, i.e. at
+ * application bootstrap — still fail-fast, but after the host has had its say.
+ * When `forRoot` / `forRootAsync` registers the same token, this provider is
+ * replaced and never instantiated.
+ */
 function createAttachmentOptionsProvider(options = {}) {
     return {
         provide: attachment_options_1.BPM_ATTACHMENT_OPTIONS,
-        useValue: (0, attachment_options_1.resolveBPMAttachmentOptions)(options),
+        useFactory: () => (0, attachment_options_1.resolveBPMAttachmentOptions)(options),
     };
 }
 //# sourceMappingURL=attachment.module.js.map

package/src/lib/attachment/attachment.module.js.map

@@ -1 +1 @@
-{"version":3,"file":"attachment.module.js","sourceRoot":"","sources":["../../../../../../libs/bpm-core/src/lib/attachment/attachment.module.ts"],"names":[],"mappings":";;;;;AAAA,2CAMwB;AACxB,wDAAyD;AAEzD,6CAAgD;AAChD,0FAAqF;AACrF,oFAA+E;AAC/E,kFAA6E;AAC7E,gEAA4D;AAC5D,mEAA+D;AAC/D,2DAAuD;AACvD,iEAA6D;AAC7D,6DAAyD;AACzD,+EAA0E;AAE1E,6DAAyD;AACzD,6DAK8B;AA4B9B;;;;;;;;GAQG;AACH,SAAS,6BAA6B,CACpC,qBAAgD;IAEhD,MAAM,cAAc,GAAG,IAAA,oDAA+B,EAAC,qBAAqB,CAAC,CAAC;IAE9E,OAAO,CAAC,cAAc,CAAC,yBAAa,EAAE,cAAc,EAAE,4CAAoB,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,yBAAyB,GAAG;IAChC,uBAAa,CAAC,UAAU,CAAC;QACvB,iDAAsB;QACtB,oCAAgB;QAChB,2CAAmB;QACnB,yCAAkB;QAClB,wBAAU;KACX,CAAC;CACH,CAAC;AAEF,MAAM,6BAA6B,GAAG,CAAC,4CAAoB,CAAC,CAAC;AAC7D,MAAM,2BAA2B,GAAG;IAClC,0CAAmB;IACnB,sCAAiB;IACjB,sCAAiB;CAClB,CAAC;AACF,MAAM,yBAAyB,GAAG,CAAC,sCAAiB,CAAC,CAAC;AAa/C,IAAM,gBAAgB,wBAAtB,MAAM,gBAAgB;IAC3B,MAAM,CAAC,OAAO,CAAC,UAAmC,EAAE;QAClD,6BAA6B,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;QAE7D,OAAO;YACL,WAAW,EAAE,6BAA6B;YAC1C,OAAO,EAAE,yBAAyB;YAClC,OAAO,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,GAAG,yBAAyB,CAAC;YACnE,MAAM,EAAE,kBAAgB;YACxB,SAAS,EAAE;gBACT,GAAG,2BAA2B;gBAC9B,OAAO,CAAC,eAAe,IAAI,uDAAyB;gBACpD,+BAA+B,CAAC,OAAO,CAAC;aACzC;SACF,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,YAAY,CAAC,OAAqC;QACvD,6BAA6B,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;QAE7D,OAAO;YACL,WAAW,EAAE,6BAA6B;YAC1C,OAAO,EAAE,yBAAyB;YAClC,OAAO,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,GAAG,yBAAyB,CAAC;YACnE,MAAM,EAAE,kBAAgB;YACxB,SAAS,EAAE;gBACT,GAAG,2BAA2B;gBAC9B,OAAO,CAAC,eAAe,IAAI,uDAAyB;gBACpD;oBACE,MAAM,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;oBACnC,OAAO,EAAE,2CAAsB;oBAC/B,UAAU,EAAE,KAAK,EACf,GAAG,IAAwB,EAC8B,EAAE,CAC3D,IAAA,gDAA2B,EAAC,MAAM,OAAO,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC;iBACjE;aACF;SACF,CAAC;IACJ,CAAC;CACF,CAAA;AAvCY,4CAAgB;2BAAhB,gBAAgB;IAX5B,IAAA,eAAM,GAAE;IACR,IAAA,eAAM,EAAC;QACN,OAAO,EAAE,yBAAyB;QAClC,WAAW,EAAE,6BAA6B;QAC1C,SAAS,EAAE;YACT,GAAG,2BAA2B;YAC9B,uDAAyB;YACzB,+BAA+B,EAAE;SAClC;QACD,OAAO,EAAE,yBAAyB;KACnC,CAAC;GACW,gBAAgB,CAuC5B;AAED,SAAS,+BAA+B,CACtC,UAAoC,EAAE;IAEtC,OAAO;QACL,OAAO,EAAE,2CAAsB;QAC/B,QAAQ,EAAE,IAAA,gDAA2B,EAAC,OAAO,CAAC;KAC/C,CAAC;AACJ,CAAC"}
+{"version":3,"file":"attachment.module.js","sourceRoot":"","sources":["../../../../../../libs/bpm-core/src/lib/attachment/attachment.module.ts"],"names":[],"mappings":";;;;;AAAA,2CAMwB;AACxB,wDAAyD;AAEzD,6CAAgD;AAChD,0FAAqF;AACrF,oFAA+E;AAC/E,kFAA6E;AAC7E,gEAA4D;AAC5D,mEAA+D;AAC/D,2DAAuD;AACvD,iEAA6D;AAC7D,6DAAyD;AACzD,+EAA0E;AAE1E,6DAAyD;AACzD,6DAM8B;AA4B9B;;;;;;;;GAQG;AACH,SAAS,6BAA6B,CACpC,qBAAgD;IAEhD,MAAM,cAAc,GAAG,IAAA,oDAA+B,EAAC,qBAAqB,CAAC,CAAC;IAE9E,OAAO,CAAC,cAAc,CAAC,yBAAa,EAAE,cAAc,EAAE,4CAAoB,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,yBAAyB,GAAG;IAChC,uBAAa,CAAC,UAAU,CAAC;QACvB,iDAAsB;QACtB,oCAAgB;QAChB,2CAAmB;QACnB,yCAAkB;QAClB,wBAAU;KACX,CAAC;CACH,CAAC;AAEF,MAAM,6BAA6B,GAAG,CAAC,4CAAoB,CAAC,CAAC;AAC7D,MAAM,2BAA2B,GAAG;IAClC,0CAAmB;IACnB,sCAAiB;IACjB,sCAAiB;CAClB,CAAC;AACF,MAAM,yBAAyB,GAAG,CAAC,sCAAiB,CAAC,CAAC;AAa/C,IAAM,gBAAgB,wBAAtB,MAAM,gBAAgB;IAC3B,MAAM,CAAC,OAAO,CAAC,UAAmC,EAAE;QAClD,6BAA6B,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;QAE7D,OAAO;YACL,WAAW,EAAE,6BAA6B;YAC1C,OAAO,EAAE,yBAAyB;YAClC,OAAO,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,GAAG,yBAAyB,CAAC;YACnE,MAAM,EAAE,kBAAgB;YACxB,SAAS,EAAE;gBACT,GAAG,2BAA2B;gBAC9B,OAAO,CAAC,eAAe,IAAI,uDAAyB;gBACpD,+BAA+B,CAAC,OAAO,CAAC;aACzC;SACF,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,YAAY,CAAC,OAAqC;QACvD,6BAA6B,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;QAE7D,OAAO;YACL,WAAW,EAAE,6BAA6B;YAC1C,OAAO,EAAE,yBAAyB;YAClC,OAAO,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,GAAG,yBAAyB,CAAC;YACnE,MAAM,EAAE,kBAAgB;YACxB,SAAS,EAAE;gBACT,GAAG,2BAA2B;gBAC9B,OAAO,CAAC,eAAe,IAAI,uDAAyB;gBACpD;oBACE,MAAM,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;oBACnC,OAAO,EAAE,2CAAsB;oBAC/B,UAAU,EAAE,KAAK,EACf,GAAG,IAAwB,EAC8B,EAAE,CAC3D,IAAA,gDAA2B,EAAC,MAAM,OAAO,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC;iBACjE;aACF;SACF,CAAC;IACJ,CAAC;CACF,CAAA;AAvCY,4CAAgB;2BAAhB,gBAAgB;IAX5B,IAAA,eAAM,GAAE;IACR,IAAA,eAAM,EAAC;QACN,OAAO,EAAE,yBAAyB;QAClC,WAAW,EAAE,6BAA6B;QAC1C,SAAS,EAAE;YACT,GAAG,2BAA2B;YAC9B,uDAAyB;YACzB,+BAA+B,EAAE;SAClC;QACD,OAAO,EAAE,yBAAyB;KACnC,CAAC;GACW,gBAAgB,CAuC5B;AAED;;;;;;;;;;;;;;GAcG;AACH,SAAS,+BAA+B,CACtC,UAAoC,EAAE;IAEtC,OAAO;QACL,OAAO,EAAE,2CAAsB;QAC/B,UAAU,EAAE,GAAiC,EAAE,CAC7C,IAAA,gDAA2B,EAAC,OAAO,CAAC;KACvC,CAAC;AACJ,CAAC"}

package/src/lib/bpm/bpm-root-options.d.ts

@@ -0,0 +1,134 @@
+import { DynamicModule, InjectionToken } from '@nestjs/common';
+import { ModuleMetadata } from '@nestjs/common/interfaces';
+import { BPMRootAttachmentOptions } from '../attachment/attachment-options';
+import { AttachmentStorage } from '../attachment/attachment-storage.token';
+import { BPMAuthModuleOptions } from '../bpm-auth/bpm-auth.options';
+import { BPMBusinessCalendar } from '../calendar/business-calendar.token';
+import { BPMFormDataSourceRegistry } from '../form-data-source/form-data-source.types';
+import { BPMRootIdentityOptions } from '../identity/identity-options';
+import { BPMMemberResolver } from '../identity/member-resolver.interface';
+import { BPMRootNotificationOptions } from '../notification/notification-options';
+import { BPMRootSignatureOptions } from '../signature/signature-options';
+import { BPMWorkflowServiceTaskDispatcher } from '../workflow-engine/workflow-service-task-dispatcher.token';
+import { BPMRootWorkflowWebhookOptions } from '../workflow-webhook/workflow-webhook-options';
+import { BPMWorkflowWebhookRegistry } from '../workflow-webhook/workflow-webhook.types';
+/**
+ * Every BPM setting that can be decided at **runtime**, i.e. after the host's
+ * secrets have been read.
+ *
+ * This is exactly what a `BPMRootModule.forRootAsync` `useFactory` returns, and
+ * it is also embedded in the synchronous `BPMRootModuleOptions`, so a host can
+ * move a setting between `forRoot` and `forRootAsync` without reshaping it.
+ *
+ * Every field is optional. A host that supplies none still boots: BPM falls
+ * back to a local attachment store, an id-passthrough member resolver, a
+ * Monday–Friday business calendar, an empty form DataSource catalog, and a
+ * `fetch`-based webhook dispatcher, with in-app notifications on and email,
+ * webhook, and both schedulers off. Features are opted **in** from there.
+ *
+ * Two settings deliberately do **not** live here, because Nest reads them
+ * while building routes and the GraphQL schema — before any async factory has
+ * run: `attachmentRoutePrefix` and `identityRegisterResolvers`. They are
+ * accepted at the top level of the `forRootAsync` options object instead.
+ */
+export interface BPMRootRuntimeOptions extends BPMRootAttachmentOptions, BPMRootIdentityOptions, BPMRootNotificationOptions, BPMRootSignatureOptions, BPMRootWorkflowWebhookOptions {
+    /**
+     * Storage adapter for BPM attachments, as a ready instance.
+     *
+     * Any `@rytass/storages` compatible adapter (MinIO, S3, GCS) fits. Prefer
+     * this over `attachmentStorageProvider` when the adapter needs a secret:
+     * the instance is built inside the async factory, where the secret is
+     * already in hand. When omitted, BPM writes to `.storage/attachments`
+     * through `@rytass/storages-adapter-local`.
+     */
+    readonly attachmentStorage?: AttachmentStorage;
+    /**
+     * Factory that resolves the current BPM auth context from NestJS execution
+     * context.
+     *
+     * BPM guards, GraphQL decorators, and domain services use this callback to
+     * identify the current member and organization context. It is only needed
+     * when the host does **not** already put a `bpmAuthContext` on the
+     * GraphQL/HTTP context — BPM reads that first and falls back to this.
+     */
+    readonly authContextFactory?: BPMAuthModuleOptions['contextFactory'];
+    /**
+     * Business calendar for workflow nodes whose SLA opts into `BUSINESS_DAY`,
+     * as a ready instance.
+     *
+     * BPMCore ships no national holiday data; when omitted, BPM falls back to a
+     * Monday–Friday calendar in `notificationSlaBusinessCalendarTimeZone`.
+     *
+     * Supplying the calendar here rather than through
+     * `businessCalendarProvider` also sidesteps that option's DI-cycle footgun:
+     * the instance is constructed by the host's own factory, so its dependency
+     * chain never runs through BPM's module context.
+     */
+    readonly businessCalendar?: BPMBusinessCalendar;
+    /**
+     * Versioned form option DataSource catalog, as a ready instance. When
+     * omitted, BPM exposes an empty catalog.
+     */
+    readonly formDataSourceRegistry?: BPMFormDataSourceRegistry;
+    /**
+     * Host identity source, as a ready instance.
+     *
+     * When omitted, BPM resolves every member to its own id
+     * (`DefaultBPMMemberResolver`): screens keep working, but display names are
+     * raw ids and member emails are empty.
+     */
+    readonly memberResolver?: BPMMemberResolver;
+    /**
+     * Dispatcher for executable workflow service tasks, as a ready instance.
+     * Replace the default `fetch` dispatcher to add auth headers, request
+     * signing, retry queues, or an outbound integration bus.
+     */
+    readonly workflowServiceTaskDispatcher?: BPMWorkflowServiceTaskDispatcher;
+    /**
+     * Catalog of NOTIFY webhook endpoints registered by host code, as a ready
+     * instance (ADR 18 §3.1). When omitted, BPM exposes an empty catalog and a
+     * template that references any endpoint cannot be published.
+     */
+    readonly workflowWebhookRegistry?: BPMWorkflowWebhookRegistry;
+}
+/**
+ * @deprecated Use {@link BPMRootRuntimeOptions}. Kept as a
+ * backwards-compatible alias for hosts that named the `forRootAsync` factory
+ * return type explicitly.
+ */
+export type BPMRootModuleAsyncFactoryOptions = BPMRootRuntimeOptions;
+/**
+ * Injection token carrying the **resolved** {@link BPMRootRuntimeOptions}.
+ *
+ * BPM resolves the host's `useFactory` exactly once and publishes the result
+ * under this token, so every BPM sub-module reads one coherent object. Before
+ * this token existed each sub-module called the host factory itself — five
+ * times per boot — which made a factory that constructs instances (a member
+ * resolver, a storage adapter) quietly produce a different instance per
+ * consumer.
+ *
+ * Host code may inject it too, but it is primarily BPM's own plumbing.
+ */
+export declare const BPM_ROOT_OPTIONS: InjectionToken<BPMRootRuntimeOptions>;
+export interface BPMRootOptionsModuleAsyncOptions extends Pick<ModuleMetadata, 'imports'> {
+    /**
+     * Providers injected into `useFactory`, typically a Vault or config service.
+     */
+    readonly inject?: readonly InjectionToken[];
+    /**
+     * Async factory returning the flattened BPM runtime options. Optional — a
+     * host that only needs defaults can omit it entirely.
+     */
+    readonly useFactory?: (...args: readonly unknown[]) => BPMRootRuntimeOptions | Promise<BPMRootRuntimeOptions>;
+}
+/**
+ * Publishes the resolved BPM runtime options under {@link BPM_ROOT_OPTIONS}.
+ *
+ * Global so that every BPM sub-module — and any host provider that wants to
+ * read what BPM ended up with — can inject the token without threading an
+ * import through each feature module.
+ */
+export declare class BPMRootOptionsModule {
+    static forRoot(options?: BPMRootRuntimeOptions): DynamicModule;
+    static forRootAsync(options?: BPMRootOptionsModuleAsyncOptions): DynamicModule;
+}

package/src/lib/bpm/bpm-root-options.js

@@ -0,0 +1,61 @@
+"use strict";
+var BPMRootOptionsModule_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BPMRootOptionsModule = exports.BPM_ROOT_OPTIONS = void 0;
+const tslib_1 = require("tslib");
+const common_1 = require("@nestjs/common");
+/**
+ * Injection token carrying the **resolved** {@link BPMRootRuntimeOptions}.
+ *
+ * BPM resolves the host's `useFactory` exactly once and publishes the result
+ * under this token, so every BPM sub-module reads one coherent object. Before
+ * this token existed each sub-module called the host factory itself — five
+ * times per boot — which made a factory that constructs instances (a member
+ * resolver, a storage adapter) quietly produce a different instance per
+ * consumer.
+ *
+ * Host code may inject it too, but it is primarily BPM's own plumbing.
+ */
+exports.BPM_ROOT_OPTIONS = Symbol('BPM_ROOT_OPTIONS');
+/**
+ * Publishes the resolved BPM runtime options under {@link BPM_ROOT_OPTIONS}.
+ *
+ * Global so that every BPM sub-module — and any host provider that wants to
+ * read what BPM ended up with — can inject the token without threading an
+ * import through each feature module.
+ */
+let BPMRootOptionsModule = BPMRootOptionsModule_1 = class BPMRootOptionsModule {
+    static forRoot(options = {}) {
+        return {
+            exports: [exports.BPM_ROOT_OPTIONS],
+            module: BPMRootOptionsModule_1,
+            providers: [
+                {
+                    provide: exports.BPM_ROOT_OPTIONS,
+                    useValue: options,
+                },
+            ],
+        };
+    }
+    static forRootAsync(options = {}) {
+        const useFactory = options.useFactory;
+        return {
+            exports: [exports.BPM_ROOT_OPTIONS],
+            imports: options.imports ? [...options.imports] : [],
+            module: BPMRootOptionsModule_1,
+            providers: [
+                {
+                    inject: [...(options.inject ?? [])],
+                    provide: exports.BPM_ROOT_OPTIONS,
+                    useFactory: async (...args) => useFactory ? await useFactory(...args) : {},
+                },
+            ],
+        };
+    }
+};
+exports.BPMRootOptionsModule = BPMRootOptionsModule;
+exports.BPMRootOptionsModule = BPMRootOptionsModule = BPMRootOptionsModule_1 = tslib_1.__decorate([
+    (0, common_1.Global)(),
+    (0, common_1.Module)({})
+], BPMRootOptionsModule);
+//# sourceMappingURL=bpm-root-options.js.map

package/src/lib/bpm/bpm-root-options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bpm-root-options.js","sourceRoot":"","sources":["../../../../../../libs/bpm-core/src/lib/bpm/bpm-root-options.ts"],"names":[],"mappings":";;;;;AAAA,2CAA+E;AAkH/E;;;;;;;;;;;GAWG;AACU,QAAA,gBAAgB,GAA0C,MAAM,CAC3E,kBAAkB,CACnB,CAAC;AAoBF;;;;;;GAMG;AAGI,IAAM,oBAAoB,4BAA1B,MAAM,oBAAoB;IAC/B,MAAM,CAAC,OAAO,CAAC,UAAiC,EAAE;QAChD,OAAO;YACL,OAAO,EAAE,CAAC,wBAAgB,CAAC;YAC3B,MAAM,EAAE,sBAAoB;YAC5B,SAAS,EAAE;gBACT;oBACE,OAAO,EAAE,wBAAgB;oBACzB,QAAQ,EAAE,OAAO;iBAClB;aACF;SACF,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,YAAY,CACjB,UAA4C,EAAE;QAE9C,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QAEtC,OAAO;YACL,OAAO,EAAE,CAAC,wBAAgB,CAAC;YAC3B,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE;YACpD,MAAM,EAAE,sBAAoB;YAC5B,SAAS,EAAE;gBACT;oBACE,MAAM,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;oBACnC,OAAO,EAAE,wBAAgB;oBACzB,UAAU,EAAE,KAAK,EACf,GAAG,IAAwB,EACK,EAAE,CAClC,UAAU,CAAC,CAAC,CAAC,MAAM,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE;iBAC9C;aACF;SACF,CAAC;IACJ,CAAC;CACF,CAAA;AAnCY,oDAAoB;+BAApB,oBAAoB;IAFhC,IAAA,eAAM,GAAE;IACR,IAAA,eAAM,EAAC,EAAE,CAAC;GACE,oBAAoB,CAmChC"}