@rytass/bpm-core-nestjs-module 0.13.2 → 0.13.4

package/src/lib/bpm/bpm-root.module.d.ts

@@ -1,67 +1,70 @@
 import { DynamicModule, InjectionToken, Provider } from '@nestjs/common';
 import { ModuleMetadata } from '@nestjs/common/interfaces';
-import { BPMRootAttachmentOptions } from '../attachment/attachment-options';
 import { AttachmentStorage } from '../attachment/attachment-storage.token';
 import { BPMResolverMetadataFactory } from '../bpm-auth/bpm-resolver-metadata';
-import { BPMAuthModuleOptions } from '../bpm-auth/bpm-auth.options';
 import { BPMBusinessCalendar } from '../calendar/business-calendar.token';
 import { BPMFormDataSourceRegistry } from '../form-data-source';
-import { BPMRootIdentityOptions } from '../identity/identity-options';
 import { BPMMemberResolver } from '../identity/member-resolver.interface';
-import { BPMRootNotificationOptions } from '../notification/notification-options';
-import { BPMRootSignatureOptions } from '../signature/signature-options';
+import { BPMWorkflowWebhookRegistry } from '../workflow-webhook/workflow-webhook.types';
 import { BPMWorkflowServiceTaskDispatcher } from '../workflow-engine/workflow-service-task-dispatcher.token';
-export interface BPMRootModuleOptions extends Pick<ModuleMetadata, 'imports'>, BPMRootAttachmentOptions, BPMRootIdentityOptions, BPMRootNotificationOptions, BPMRootSignatureOptions {
+import { BPMRootRuntimeOptions } from './bpm-root-options';
+/**
+ * Wiring-time options common to `forRoot` and `forRootAsync`.
+ *
+ * Everything here is a Nest `Provider` or a routing/schema decision, i.e. a
+ * value Nest must have while it builds the module graph, before any async
+ * factory runs. Every one of them is optional, and each has a runtime twin on
+ * {@link BPMRootRuntimeOptions} that a `forRootAsync` factory can supply
+ * instead — prefer the runtime twin whenever the value needs a secret.
+ */
+interface BPMRootModuleWiringOptions extends Pick<ModuleMetadata, 'imports'> {
     /**
-     * Host-provided storage adapter for BPM attachments.
+     * Host-provided storage adapter for BPM attachments, as a Nest provider.
      *
-     * When omitted, BPM stores attachments through the local
-     * `@rytass/storages-adapter-local` adapter under `.storage/attachments`.
-     * Hosts can replace this provider with any `@rytass/storages` compatible
-     * adapter such as MinIO, S3, or GCS.
+     * Runtime twin: {@link BPMRootRuntimeOptions.attachmentStorage}. When
+     * neither is given, BPM stores attachments through
+     * `@rytass/storages-adapter-local` under `.storage/attachments`.
      */
     readonly attachmentStorageProvider?: Provider<AttachmentStorage>;
-    /**
-     * Factory that resolves the current BPM auth context from NestJS execution
-     * context.
-     *
-     * BPM guards, GraphQL decorators, and domain services use this callback to
-     * identify the current member and organization context. When omitted, BPM
-     * operations that require authentication will not receive a host session.
-     */
-    readonly authContextFactory?: BPMAuthModuleOptions['contextFactory'];
     /**
      * Host-provided business calendar used by workflow nodes whose SLA opts into
-     * `BUSINESS_DAY`.
+     * `BUSINESS_DAY`, as a Nest provider.
      *
-     * BPMCore ships no national holiday data. When omitted, BPM falls back to a
-     * Monday–Friday calendar (see `notificationSlaBusinessCalendarTimeZone`);
-     * hosts that need national holidays or make-up working days register their
-     * own `BPM_BUSINESS_CALENDAR` provider here.
+     * Runtime twin: {@link BPMRootRuntimeOptions.businessCalendar}, which is the
+     * safer of the two — the modules listed in `imports` are also given to BPM's
+     * `CalendarModule`, so a provider whose dependency chain reaches **back into
+     * BPM** produces a DI cycle that Nest never reports. See
+     * `CalendarModuleOptions.businessCalendarProvider` for what that failure
+     * looks like.
      *
-     * The modules listed in `imports` are also given to BPM's `CalendarModule`
-     * so this provider can reach host services. A provider whose dependency
-     * chain reaches **back into BPM** therefore produces a DI cycle that Nest
-     * never reports — see `CalendarModuleOptions.businessCalendarProvider` for
-     * what that failure looks like.
+     * When neither is given, BPM falls back to a Monday–Friday calendar (see
+     * `notificationSlaBusinessCalendarTimeZone`).
      */
     readonly businessCalendarProvider?: Provider<BPMBusinessCalendar>;
     /**
-     * Host-provided registry containing versioned form option DataSources.
+     * Host-provided registry containing versioned form option DataSources, as a
+     * Nest provider.
      *
-     * The registry is a single provider so a published form reference always
-     * resolves against one coherent catalog. When omitted, BPM exposes an
-     * empty catalog and keeps existing hosts bootstrap-compatible.
+     * Runtime twin: {@link BPMRootRuntimeOptions.formDataSourceRegistry}. When
+     * neither is given, BPM exposes an empty catalog.
      */
     readonly formDataSourceRegistryProvider?: Provider<BPMFormDataSourceRegistry>;
     /**
-     * Host-provided member resolver provider.
+     * Host-registered NOTIFY webhook endpoint catalog, as a Nest provider.
      *
-     * BPM uses this provider to resolve member metadata, organization identity,
-     * display names, and approver candidates without coupling
-     * `@rytass/bpm-core-nestjs-module` to a specific external identity system.
+     * Runtime twin: {@link BPMRootRuntimeOptions.workflowWebhookRegistry}. When
+     * both are given this provider wins, as `formDataSourceRegistryProvider`
+     * does; when neither is given, the catalog is empty.
      */
-    readonly memberResolverProvider: Provider<BPMMemberResolver>;
+    readonly workflowWebhookRegistryProvider?: Provider<BPMWorkflowWebhookRegistry>;
+    /**
+     * Host-provided member resolver, as a Nest provider.
+     *
+     * Runtime twin: {@link BPMRootRuntimeOptions.memberResolver}. When neither
+     * is given, BPM resolves every member to its own id
+     * (`DefaultBPMMemberResolver`) so the application still boots.
+     */
+    readonly memberResolverProvider?: Provider<BPMMemberResolver>;
     /**
      * Host-supplied factory that stamps the host's own route metadata onto every
      * BPM GraphQL handler.
@@ -74,31 +77,42 @@ export interface BPMRootModuleOptions extends Pick<ModuleMetadata, 'imports'>, B
      *
      * The factory is called once per handler at module wiring time, receives the
      * authority BPM itself requires (`admin`, `designer`, `authenticated`) plus
-     * the resolver and method names, and returns the metadata to write. See
-     * `BPMResolverMetadataFactory`.
+     * the resolver and method names, and returns the metadata to write. It has
+     * no runtime twin: Nest writes handler metadata before any factory runs.
      */
     readonly resolverMetadataFactory?: BPMResolverMetadataFactory;
     /**
-     * Host-provided dispatcher for executable workflow service tasks.
+     * Host-provided dispatcher for executable workflow service tasks, as a Nest
+     * provider.
      *
-     * When omitted, BPM sends WEBHOOK service tasks with the built-in `fetch`
-     * dispatcher. Wrapper apps can replace this provider to add auth headers,
-     * request signing, retry queues, or an outbound integration bus.
+     * Runtime twin: {@link BPMRootRuntimeOptions.workflowServiceTaskDispatcher}.
+     * When neither is given, BPM sends WEBHOOK service tasks with the built-in
+     * `fetch` dispatcher.
      */
     readonly workflowServiceTaskDispatcherProvider?: Provider<BPMWorkflowServiceTaskDispatcher>;
 }
-export interface BPMRootModuleAsyncFactoryOptions extends BPMRootAttachmentOptions, BPMRootIdentityOptions, BPMRootNotificationOptions, BPMRootSignatureOptions {
-    /**
-     * Factory that resolves the current BPM auth context from NestJS execution
-     * context.
-     *
-     * BPM guards, GraphQL decorators, and domain services use this callback to
-     * identify the current member and organization context. When omitted, BPM
-     * operations that require authentication will not receive a host session.
-     */
-    readonly authContextFactory?: BPMAuthModuleOptions['contextFactory'];
+/**
+ * Synchronous configuration for {@link BPMRootModule.forRoot}.
+ *
+ * Every field is optional: `BPMRootModule.forRoot()` boots a working BPM with
+ * local attachment storage, an id-passthrough member resolver, a Monday–Friday
+ * calendar, an empty form DataSource catalog, in-app notifications on, and
+ * email, webhooks and both schedulers off. Features are opted in from there.
+ */
+export interface BPMRootModuleOptions extends BPMRootModuleWiringOptions, BPMRootRuntimeOptions {
 }
-export interface BPMRootModuleAsyncOptions extends Pick<ModuleMetadata, 'imports'> {
+/**
+ * Asynchronous configuration for {@link BPMRootModule.forRootAsync}.
+ *
+ * `useFactory` supplies every runtime setting — secrets included — and is
+ * resolved **exactly once** per application, then shared with all BPM modules
+ * through {@link BPM_ROOT_OPTIONS}. The wiring-time fields inherited from
+ * {@link BPMRootModuleWiringOptions}, plus `attachmentRoutePrefix` and
+ * `identityRegisterResolvers` below, are the only ones that cannot come from
+ * the factory; each of them either registers a Nest provider or decides a
+ * route/schema shape that Nest reads before the factory runs.
+ */
+export interface BPMRootModuleAsyncOptions extends BPMRootModuleWiringOptions {
     /**
      * Controller mount path used by the BPM attachment endpoints.
      *
@@ -108,38 +122,13 @@ export interface BPMRootModuleAsyncOptions extends Pick<ModuleMetadata, 'imports
      * `/attachments`.
      */
     readonly attachmentRoutePrefix?: string | null;
-    /**
-     * Host-provided storage adapter for BPM attachments.
-     *
-     * This provider is static at module wiring time. If secrets are required,
-     * use a Nest provider with `useFactory` / `inject` here.
-     */
-    readonly attachmentStorageProvider?: Provider<AttachmentStorage>;
-    /**
-     * Host-provided business calendar for `BUSINESS_DAY` SLAs.
-     *
-     * This provider is static at module wiring time. If secrets or a repository
-     * are required, use a Nest provider with `useFactory` / `inject` here.
-     *
-     * Its dependency chain must not reach back into BPM: the modules listed in
-     * `imports` are forwarded to BPM's `CalendarModule`, and a cycle there stops
-     * the application booting with no exception and exit code `0`. See
-     * `CalendarModuleOptions.businessCalendarProvider`.
-     */
-    readonly businessCalendarProvider?: Provider<BPMBusinessCalendar>;
-    /**
-     * Host-provided versioned form option DataSource registry. This provider is
-     * static at module wiring time; secrets and repositories can be injected
-     * through its Nest `useFactory`, `useClass`, or `useExisting` definition.
-     */
-    readonly formDataSourceRegistryProvider?: Provider<BPMFormDataSourceRegistry>;
     /**
      * Whether BPM registers its identity GraphQL queries. See
      * `BPMRootIdentityOptions.identityRegisterResolvers`.
      *
      * Set at module wiring time, like `attachmentRoutePrefix`, because Nest
-     * collects resolver providers while building the schema — before the
-     * `useFactory` below has run.
+     * collects resolver providers while building the schema — before
+     * `useFactory` has run. Defaults to registering them.
      */
     readonly identityRegisterResolvers?: boolean;
     /**
@@ -150,37 +139,17 @@ export interface BPMRootModuleAsyncOptions extends Pick<ModuleMetadata, 'imports
      */
     readonly inject?: readonly InjectionToken[];
     /**
-     * Host-provided member resolver provider.
-     *
-     * BPM uses this provider to resolve member metadata, organization identity,
-     * display names, and approver candidates without coupling
-     * `@rytass/bpm-core-nestjs-module` to a specific external identity system.
-     */
-    readonly memberResolverProvider: Provider<BPMMemberResolver>;
-    /**
-     * Host-supplied factory that stamps the host's own route metadata onto every
-     * BPM GraphQL handler. See
-     * `BPMRootModuleOptions.resolverMetadataFactory`.
-     *
-     * Read at module wiring time rather than from `useFactory`, because Nest
-     * builds the resolver metadata before any async factory has run.
-     */
-    readonly resolverMetadataFactory?: BPMResolverMetadataFactory;
-    /**
-     * Host-provided dispatcher for executable workflow service tasks.
-     *
-     * This provider is static at module wiring time. If secrets are required,
-     * use a Nest provider with `useFactory` / `inject` here.
-     */
-    readonly workflowServiceTaskDispatcherProvider?: Provider<BPMWorkflowServiceTaskDispatcher>;
-    /**
-     * Async factory returning BPM root options.
+     * Async factory returning BPM runtime options.
      *
      * The returned object intentionally keeps all BPM settings flat at the root
      * level, for example `authContextFactory`, `notificationEmailSmtpHost`, and
-     * `notificationSlaSchedulerEnabled`.
+     * `notificationSlaSchedulerEnabled`, alongside ready instances such as
+     * `memberResolver` and `attachmentStorage`.
+     *
+     * Optional: a host that wants BPM's defaults and configures nothing can call
+     * `BPMRootModule.forRootAsync()` with no arguments at all.
      */
-    readonly useFactory: (...args: readonly unknown[]) => BPMRootModuleAsyncFactoryOptions | Promise<BPMRootModuleAsyncFactoryOptions>;
+    readonly useFactory?: (...args: readonly unknown[]) => BPMRootRuntimeOptions | Promise<BPMRootRuntimeOptions>;
 }
 /**
  * Aggregate entry point that wires every BPM domain module
@@ -191,44 +160,39 @@ export interface BPMRootModuleAsyncOptions extends Pick<ModuleMetadata, 'imports
  *
  * Hosts call `forRoot` or `forRootAsync` once from their root `AppModule`.
  * BPMCore does **not** own login, GraphQL setup, TypeORM bootstrap, or
- * Vault loading — those remain the host's responsibility. See the
- * package README sections "Embedding & auth", "Organization data
- * ownership", and "Consumer quickstart" for the full contract.
- *
- * The host must avoid Nest's `app.setGlobalPrefix(...)`; BPM controllers
- * mount at relative paths driven by their respective options (notably
- * `attachmentRoutePrefix`).
+ * a user table; the host supplies those. Every BPM option has a default, so
+ * the smallest working wiring is `BPMRootModule.forRoot()`.
  *
- * @example
  * ```ts
- * BPMRootModule.forRoot({
- *   authContextFactory: readBPMAuthContextFromGqlContext,
- *   memberResolverProvider: {
- *     provide: BPM_MEMBER_RESOLVER,
- *     useClass: HostMemberResolver,
- *   },
- *   attachmentPublicBaseUrl: process.env.BPM_PUBLIC_BASE_URL,
- *   attachmentSignedUrlSecret: process.env.BPM_ATTACHMENT_SIGNING_SECRET,
- * });
+ * BPMRootModule.forRootAsync({
+ *   imports: [VaultModule],
+ *   inject: [VaultService],
+ *   useFactory: async (vault: VaultService) => ({
+ *     attachmentSignedUrlSecret: await vault.get('BPM_ATTACHMENT_SIGNING_SECRET'),
+ *     authContextFactory: buildAuthContext,
+ *     memberResolver: new HostMemberResolver(await vault.get('DIRECTORY_URL')),
+ *   }),
+ * })
  * ```
  */
 export declare class BPMRootModule {
     /**
-     * Static configuration. Use this when all BPM options are known at module
+     * Synchronous configuration. Use this when every BPM option is known at
      * wiring time (no async secret loading needed).
      */
-    static forRoot(options: BPMRootModuleOptions): DynamicModule;
+    static forRoot(options?: BPMRootModuleOptions): DynamicModule;
     /**
      * Async configuration. Use this when BPM options must be resolved at
-     * runtime — typically when SMTP, webhook, or signature secrets are
+     * runtime — typically when SMTP, webhook, signature, or identity secrets are
      * loaded from Vault / KMS / a host `ConfigService`.
      *
-     * Routing-time decisions such as `attachmentRoutePrefix`,
-     * `memberResolverProvider`, `attachmentStorageProvider`, and
-     * `workflowServiceTaskDispatcherProvider` are read from the top-level
-     * options object (not from the `useFactory` return value), because
-     * Nest reads controller path metadata and provider tokens synchronously
-     * during application bootstrap.
+     * Routing- and schema-time decisions such as `attachmentRoutePrefix`,
+     * `identityRegisterResolvers`, `resolverMetadataFactory` and the `*Provider`
+     * fields are read from the top-level options object (not from the
+     * `useFactory` return value), because Nest reads controller path metadata,
+     * resolver metadata and provider tokens synchronously during application
+     * bootstrap. Everything else belongs in `useFactory`.
      */
-    static forRootAsync(options: BPMRootModuleAsyncOptions): DynamicModule;
+    static forRootAsync(options?: BPMRootModuleAsyncOptions): DynamicModule;
 }
+export {};

package/src/lib/bpm/bpm-root.module.js

@@ -14,10 +14,13 @@ const form_data_source_1 = require("../form-data-source");
 const identity_module_1 = require("../identity/identity.module");
 const notification_module_1 = require("../notification/notification.module");
 const notification_options_module_1 = require("../notification/notification-options.module");
+const workflow_webhook_options_module_1 = require("../workflow-webhook/workflow-webhook-options.module");
+const workflow_webhook_module_1 = require("../workflow-webhook/workflow-webhook.module");
 const organization_module_1 = require("../organization/organization.module");
 const signature_module_1 = require("../signature/signature.module");
 const template_module_1 = require("../template/template.module");
 const workflow_engine_module_1 = require("../workflow-engine/workflow-engine.module");
+const bpm_root_options_1 = require("./bpm-root-options");
 /**
  * Aggregate entry point that wires every BPM domain module
  * (`BPMAuthModule`, `IdentityModule`, `OrganizationModule`, `FormModule`,
@@ -27,37 +30,34 @@ const workflow_engine_module_1 = require("../workflow-engine/workflow-engine.mod
  *
  * Hosts call `forRoot` or `forRootAsync` once from their root `AppModule`.
  * BPMCore does **not** own login, GraphQL setup, TypeORM bootstrap, or
- * Vault loading — those remain the host's responsibility. See the
- * package README sections "Embedding & auth", "Organization data
- * ownership", and "Consumer quickstart" for the full contract.
+ * a user table; the host supplies those. Every BPM option has a default, so
+ * the smallest working wiring is `BPMRootModule.forRoot()`.
  *
- * The host must avoid Nest's `app.setGlobalPrefix(...)`; BPM controllers
- * mount at relative paths driven by their respective options (notably
- * `attachmentRoutePrefix`).
- *
- * @example
  * ```ts
- * BPMRootModule.forRoot({
- *   authContextFactory: readBPMAuthContextFromGqlContext,
- *   memberResolverProvider: {
- *     provide: BPM_MEMBER_RESOLVER,
- *     useClass: HostMemberResolver,
- *   },
- *   attachmentPublicBaseUrl: process.env.BPM_PUBLIC_BASE_URL,
- *   attachmentSignedUrlSecret: process.env.BPM_ATTACHMENT_SIGNING_SECRET,
- * });
+ * BPMRootModule.forRootAsync({
+ *   imports: [VaultModule],
+ *   inject: [VaultService],
+ *   useFactory: async (vault: VaultService) => ({
+ *     attachmentSignedUrlSecret: await vault.get('BPM_ATTACHMENT_SIGNING_SECRET'),
+ *     authContextFactory: buildAuthContext,
+ *     memberResolver: new HostMemberResolver(await vault.get('DIRECTORY_URL')),
+ *   }),
+ * })
  * ```
  */
 let BPMRootModule = BPMRootModule_1 = class BPMRootModule {
     /**
-     * Static configuration. Use this when all BPM options are known at module
+     * Synchronous configuration. Use this when every BPM option is known at
      * wiring time (no async secret loading needed).
      */
-    static forRoot(options) {
+    static forRoot(options = {}) {
         if (options.resolverMetadataFactory) {
             (0, bpm_resolver_metadata_1.applyBPMResolverMetadata)(options.resolverMetadataFactory);
         }
-        const featureModules = createBPMFeatureModules(options);
+        const featureModules = createBPMFeatureModules({
+            ...options,
+            optionsModule: bpm_root_options_1.BPMRootOptionsModule.forRoot(options),
+        });
         return {
             exports: [...featureModules],
             imports: [...(options.imports ?? []), ...featureModules],
@@ -66,88 +66,31 @@ let BPMRootModule = BPMRootModule_1 = class BPMRootModule {
     }
     /**
      * Async configuration. Use this when BPM options must be resolved at
-     * runtime — typically when SMTP, webhook, or signature secrets are
+     * runtime — typically when SMTP, webhook, signature, or identity secrets are
      * loaded from Vault / KMS / a host `ConfigService`.
      *
-     * Routing-time decisions such as `attachmentRoutePrefix`,
-     * `memberResolverProvider`, `attachmentStorageProvider`, and
-     * `workflowServiceTaskDispatcherProvider` are read from the top-level
-     * options object (not from the `useFactory` return value), because
-     * Nest reads controller path metadata and provider tokens synchronously
-     * during application bootstrap.
+     * Routing- and schema-time decisions such as `attachmentRoutePrefix`,
+     * `identityRegisterResolvers`, `resolverMetadataFactory` and the `*Provider`
+     * fields are read from the top-level options object (not from the
+     * `useFactory` return value), because Nest reads controller path metadata,
+     * resolver metadata and provider tokens synchronously during application
+     * bootstrap. Everything else belongs in `useFactory`.
      */
-    static forRootAsync(options) {
+    static forRootAsync(options = {}) {
         if (options.resolverMetadataFactory) {
             (0, bpm_resolver_metadata_1.applyBPMResolverMetadata)(options.resolverMetadataFactory);
         }
-        const authOptions = {
-            imports: options.imports,
-            inject: options.inject,
-            useFactory: async (...args) => {
-                const rootOptions = await options.useFactory(...args);
-                return createBPMAuthModuleOptions(rootOptions);
-            },
-        };
+        const featureModules = createBPMFeatureModules({
+            ...options,
+            optionsModule: bpm_root_options_1.BPMRootOptionsModule.forRootAsync({
+                imports: options.imports,
+                inject: options.inject,
+                useFactory: options.useFactory,
+            }),
+        });
         return {
-            exports: [
-                notification_options_module_1.NotificationOptionsModule,
-                calendar_module_1.CalendarModule,
-                bpm_auth_module_1.BPMAuthModule,
-                identity_module_1.IdentityModule,
-                organization_module_1.OrganizationModule,
-                attachment_module_1.AttachmentModule,
-                form_module_1.FormModule,
-                form_data_source_1.FormDataSourceModule,
-                template_module_1.TemplateModule,
-                delegation_module_1.DelegationModule,
-                notification_module_1.NotificationModule,
-                signature_module_1.SignatureModule,
-                workflow_engine_module_1.WorkflowEngineModule,
-            ],
-            imports: [
-                notification_options_module_1.NotificationOptionsModule.forRootAsync({
-                    imports: options.imports,
-                    inject: options.inject,
-                    useFactory: options.useFactory,
-                }),
-                calendar_module_1.CalendarModule.forRoot({
-                    businessCalendarProvider: options.businessCalendarProvider,
-                    imports: options.imports,
-                }),
-                bpm_auth_module_1.BPMAuthModule.forRootAsync(authOptions),
-                identity_module_1.IdentityModule.forRootAsync({
-                    identityRegisterResolvers: options.identityRegisterResolvers,
-                    imports: options.imports,
-                    inject: options.inject,
-                    memberResolverProvider: options.memberResolverProvider,
-                    useFactory: options.useFactory,
-                }),
-                organization_module_1.OrganizationModule,
-                attachment_module_1.AttachmentModule.forRootAsync({
-                    attachmentRoutePrefix: options.attachmentRoutePrefix,
-                    imports: options.imports,
-                    inject: options.inject,
-                    storageProvider: options.attachmentStorageProvider,
-                    useFactory: options.useFactory,
-                }),
-                form_module_1.FormModule,
-                form_data_source_1.FormDataSourceModule.forRoot({
-                    imports: options.imports,
-                    registryProvider: options.formDataSourceRegistryProvider,
-                }),
-                template_module_1.TemplateModule,
-                delegation_module_1.DelegationModule,
-                notification_module_1.NotificationModule,
-                signature_module_1.SignatureModule.forRootAsync({
-                    imports: options.imports,
-                    inject: options.inject,
-                    useFactory: options.useFactory,
-                }),
-                workflow_engine_module_1.WorkflowEngineModule.forRoot({
-                    imports: options.imports,
-                    serviceTaskDispatcherProvider: options.workflowServiceTaskDispatcherProvider,
-                }),
-            ],
+            exports: [...featureModules],
+            imports: [...(options.imports ?? []), ...featureModules],
             module: BPMRootModule_1,
         };
     }
@@ -156,43 +99,65 @@ exports.BPMRootModule = BPMRootModule;
 exports.BPMRootModule = BPMRootModule = BPMRootModule_1 = tslib_1.__decorate([
     (0, common_1.Module)({})
 ], BPMRootModule);
-function createBPMFeatureModules(options) {
+/**
+ * Builds the BPM feature module graph.
+ *
+ * `forRoot` and `forRootAsync` share this single path: both publish
+ * {@link BPM_ROOT_OPTIONS} first (eagerly or from the host factory) and every
+ * option-consuming sub-module then injects that one token. Before this, each
+ * sub-module took the host's `useFactory` and called it itself — five times
+ * per boot — so a factory that *constructed* something handed a different
+ * instance to each consumer.
+ */
+function createBPMFeatureModules(wiring) {
+    const inject = [bpm_root_options_1.BPM_ROOT_OPTIONS];
+    const useFactory = (options) => options;
     return [
-        notification_options_module_1.NotificationOptionsModule.forRoot(options),
+        wiring.optionsModule,
+        notification_options_module_1.NotificationOptionsModule.forRootAsync({ inject, useFactory }),
+        workflow_webhook_options_module_1.WorkflowWebhookOptionsModule.forRootAsync({ inject, useFactory }),
         calendar_module_1.CalendarModule.forRoot({
-            businessCalendarProvider: options.businessCalendarProvider,
-            imports: options.imports,
+            businessCalendarProvider: wiring.businessCalendarProvider,
+            imports: wiring.imports,
         }),
-        bpm_auth_module_1.BPMAuthModule.forRoot(createBPMAuthModuleOptions(options)),
-        identity_module_1.IdentityModule.forRoot({
-            ...options,
-            imports: options.imports,
-            memberResolverProvider: options.memberResolverProvider,
+        bpm_auth_module_1.BPMAuthModule.forRootAsync({
+            inject,
+            useFactory: (options) => ({
+                contextFactory: options.authContextFactory,
+            }),
+        }),
+        identity_module_1.IdentityModule.forRootAsync({
+            identityRegisterResolvers: wiring.identityRegisterResolvers,
+            imports: wiring.imports,
+            inject,
+            memberResolverProvider: wiring.memberResolverProvider,
+            useFactory,
         }),
         organization_module_1.OrganizationModule,
-        attachment_module_1.AttachmentModule.forRoot({
-            ...options,
-            imports: options.imports,
-            storageProvider: options.attachmentStorageProvider,
+        attachment_module_1.AttachmentModule.forRootAsync({
+            attachmentRoutePrefix: wiring.attachmentRoutePrefix,
+            imports: wiring.imports,
+            inject,
+            storageProvider: wiring.attachmentStorageProvider,
+            useFactory,
         }),
         form_module_1.FormModule,
         form_data_source_1.FormDataSourceModule.forRoot({
-            imports: options.imports,
-            registryProvider: options.formDataSourceRegistryProvider,
+            imports: wiring.imports,
+            registryProvider: wiring.formDataSourceRegistryProvider,
         }),
         template_module_1.TemplateModule,
         delegation_module_1.DelegationModule,
         notification_module_1.NotificationModule,
-        signature_module_1.SignatureModule.forRoot(options),
+        signature_module_1.SignatureModule.forRootAsync({ inject, useFactory }),
         workflow_engine_module_1.WorkflowEngineModule.forRoot({
-            imports: options.imports,
-            serviceTaskDispatcherProvider: options.workflowServiceTaskDispatcherProvider,
+            imports: wiring.imports,
+            serviceTaskDispatcherProvider: wiring.workflowServiceTaskDispatcherProvider,
+        }),
+        workflow_webhook_module_1.WorkflowWebhookModule.forRoot({
+            imports: wiring.imports,
+            registryProvider: wiring.workflowWebhookRegistryProvider,
         }),
     ];
 }
-function createBPMAuthModuleOptions(options) {
-    return {
-        contextFactory: options.authContextFactory,
-    };
-}
 //# sourceMappingURL=bpm-root.module.js.map

package/src/lib/bpm/bpm-root.module.js.map

@@ -1 +1 @@
-{"version":3,"file":"bpm-root.module.js","sourceRoot":"","sources":["../../../../../../libs/bpm-core/src/lib/bpm/bpm-root.module.ts"],"names":[],"mappings":";;;;;AAAA,2CAMwB;AAGxB,uEAAmE;AAEnE,iEAA4D;AAC5D,6EAG2C;AAM3C,iEAA6D;AAC7D,uEAAmE;AACnE,qDAAiD;AACjD,0DAI6B;AAE7B,iEAA6D;AAE7D,6EAAyE;AACzE,6FAAwF;AAExF,6EAAyE;AAEzE,oEAAgE;AAChE,iEAA6D;AAC7D,sFAAiF;AAoNjF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEI,IAAM,aAAa,qBAAnB,MAAM,aAAa;IACxB;;;OAGG;IACH,MAAM,CAAC,OAAO,CAAC,OAA6B;QAC1C,IAAI,OAAO,CAAC,uBAAuB,EAAE,CAAC;YACpC,IAAA,gDAAwB,EAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,cAAc,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;QAExD,OAAO;YACL,OAAO,EAAE,CAAC,GAAG,cAAc,CAAC;YAC5B,OAAO,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,GAAG,cAAc,CAAC;YACxD,MAAM,EAAE,eAAa;SACtB,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;OAWG;IACH,MAAM,CAAC,YAAY,CAAC,OAAkC;QACpD,IAAI,OAAO,CAAC,uBAAuB,EAAE,CAAC;YACpC,IAAA,gDAAwB,EAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,WAAW,GAA8B;YAC7C,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,UAAU,EAAE,KAAK,EACf,GAAG,IAAwB,EACI,EAAE;gBACjC,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC;gBAEtD,OAAO,0BAA0B,CAAC,WAAW,CAAC,CAAC;YACjD,CAAC;SACF,CAAC;QAEF,OAAO;YACL,OAAO,EAAE;gBACP,uDAAyB;gBACzB,gCAAc;gBACd,+BAAa;gBACb,gCAAc;gBACd,wCAAkB;gBAClB,oCAAgB;gBAChB,wBAAU;gBACV,uCAAoB;gBACpB,gCAAc;gBACd,oCAAgB;gBAChB,wCAAkB;gBAClB,kCAAe;gBACf,6CAAoB;aACrB;YACD,OAAO,EAAE;gBACP,uDAAyB,CAAC,YAAY,CAAC;oBACrC,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,UAAU,EAAE,OAAO,CAAC,UAAU;iBAC/B,CAAC;gBACF,gCAAc,CAAC,OAAO,CAAC;oBACrB,wBAAwB,EAAE,OAAO,CAAC,wBAAwB;oBAC1D,OAAO,EAAE,OAAO,CAAC,OAAO;iBACzB,CAAC;gBACF,+BAAa,CAAC,YAAY,CAAC,WAAW,CAAC;gBACvC,gCAAc,CAAC,YAAY,CAAC;oBAC1B,yBAAyB,EAAE,OAAO,CAAC,yBAAyB;oBAC5D,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,sBAAsB,EAAE,OAAO,CAAC,sBAAsB;oBACtD,UAAU,EAAE,OAAO,CAAC,UAAU;iBAC/B,CAAC;gBACF,wCAAkB;gBAClB,oCAAgB,CAAC,YAAY,CAAC;oBAC5B,qBAAqB,EAAE,OAAO,CAAC,qBAAqB;oBACpD,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,eAAe,EAAE,OAAO,CAAC,yBAAyB;oBAClD,UAAU,EAAE,OAAO,CAAC,UAAU;iBAC/B,CAAC;gBACF,wBAAU;gBACV,uCAAoB,CAAC,OAAO,CAAC;oBAC3B,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,gBAAgB,EAAE,OAAO,CAAC,8BAA8B;iBACnB,CAAC;gBACxC,gCAAc;gBACd,oCAAgB;gBAChB,wCAAkB;gBAClB,kCAAe,CAAC,YAAY,CAAC;oBAC3B,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,UAAU,EAAE,OAAO,CAAC,UAAU;iBAC/B,CAAC;gBACF,6CAAoB,CAAC,OAAO,CAAC;oBAC3B,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,6BAA6B,EAC3B,OAAO,CAAC,qCAAqC;iBAChD,CAAC;aACH;YACD,MAAM,EAAE,eAAa;SACtB,CAAC;IACJ,CAAC;CACF,CAAA;AAhHY,sCAAa;wBAAb,aAAa;IADzB,IAAA,eAAM,EAAC,EAAE,CAAC;GACE,aAAa,CAgHzB;AAED,SAAS,uBAAuB,CAC9B,OAA6B;IAE7B,OAAO;QACL,uDAAyB,CAAC,OAAO,CAAC,OAAO,CAAC;QAC1C,gCAAc,CAAC,OAAO,CAAC;YACrB,wBAAwB,EAAE,OAAO,CAAC,wBAAwB;YAC1D,OAAO,EAAE,OAAO,CAAC,OAAO;SACzB,CAAC;QACF,+BAAa,CAAC,OAAO,CAAC,0BAA0B,CAAC,OAAO,CAAC,CAAC;QAC1D,gCAAc,CAAC,OAAO,CAAC;YACrB,GAAG,OAAO;YACV,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,sBAAsB,EAAE,OAAO,CAAC,sBAAsB;SACvD,CAAC;QACF,wCAAkB;QAClB,oCAAgB,CAAC,OAAO,CAAC;YACvB,GAAG,OAAO;YACV,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,eAAe,EAAE,OAAO,CAAC,yBAAyB;SACnD,CAAC;QACF,wBAAU;QACV,uCAAoB,CAAC,OAAO,CAAC;YAC3B,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,gBAAgB,EAAE,OAAO,CAAC,8BAA8B;SACnB,CAAC;QACxC,gCAAc;QACd,oCAAgB;QAChB,wCAAkB;QAClB,kCAAe,CAAC,OAAO,CAAC,OAAO,CAAC;QAChC,6CAAoB,CAAC,OAAO,CAAC;YAC3B,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,6BAA6B,EAC3B,OAAO,CAAC,qCAAqC;SAChD,CAAC;KACH,CAAC;AACJ,CAAC;AAED,SAAS,0BAA0B,CACjC,OAAgE;IAEhE,OAAO;QACL,cAAc,EAAE,OAAO,CAAC,kBAAkB;KAC3C,CAAC;AACJ,CAAC"}
+{"version":3,"file":"bpm-root.module.js","sourceRoot":"","sources":["../../../../../../libs/bpm-core/src/lib/bpm/bpm-root.module.ts"],"names":[],"mappings":";;;;;AAAA,2CAMwB;AAExB,uEAAmE;AAEnE,iEAA4D;AAC5D,6EAG2C;AAG3C,iEAA6D;AAC7D,uEAAmE;AACnE,qDAAiD;AACjD,0DAI6B;AAC7B,iEAA6D;AAE7D,6EAAyE;AACzE,6FAAwF;AACxF,yGAAmG;AACnG,yFAGqD;AAErD,6EAAyE;AACzE,oEAAgE;AAChE,iEAA6D;AAC7D,sFAAiF;AAEjF,yDAI4B;AAiK5B;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEI,IAAM,aAAa,qBAAnB,MAAM,aAAa;IACxB;;;OAGG;IACH,MAAM,CAAC,OAAO,CAAC,UAAgC,EAAE;QAC/C,IAAI,OAAO,CAAC,uBAAuB,EAAE,CAAC;YACpC,IAAA,gDAAwB,EAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,cAAc,GAAG,uBAAuB,CAAC;YAC7C,GAAG,OAAO;YACV,aAAa,EAAE,uCAAoB,CAAC,OAAO,CAAC,OAAO,CAAC;SACrD,CAAC,CAAC;QAEH,OAAO;YACL,OAAO,EAAE,CAAC,GAAG,cAAc,CAAC;YAC5B,OAAO,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,GAAG,cAAc,CAAC;YACxD,MAAM,EAAE,eAAa;SACtB,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;OAWG;IACH,MAAM,CAAC,YAAY,CAAC,UAAqC,EAAE;QACzD,IAAI,OAAO,CAAC,uBAAuB,EAAE,CAAC;YACpC,IAAA,gDAAwB,EAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,cAAc,GAAG,uBAAuB,CAAC;YAC7C,GAAG,OAAO;YACV,aAAa,EAAE,uCAAoB,CAAC,YAAY,CAAC;gBAC/C,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,UAAU,EAAE,OAAO,CAAC,UAAU;aAC/B,CAAC;SACH,CAAC,CAAC;QAEH,OAAO;YACL,OAAO,EAAE,CAAC,GAAG,cAAc,CAAC;YAC5B,OAAO,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,GAAG,cAAc,CAAC;YACxD,MAAM,EAAE,eAAa;SACtB,CAAC;IACJ,CAAC;CACF,CAAA;AAtDY,sCAAa;wBAAb,aAAa;IADzB,IAAA,eAAM,EAAC,EAAE,CAAC;GACE,aAAa,CAsDzB;AAeD;;;;;;;;;GASG;AACH,SAAS,uBAAuB,CAAC,MAAqB;IACpD,MAAM,MAAM,GAA8B,CAAC,mCAAgB,CAAC,CAAC;IAC7D,MAAM,UAAU,GAAG,CAAC,OAA8B,EAAyB,EAAE,CAC3E,OAAO,CAAC;IAEV,OAAO;QACL,MAAM,CAAC,aAAa;QACpB,uDAAyB,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;QAC9D,8DAA4B,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;QACjE,gCAAc,CAAC,OAAO,CAAC;YACrB,wBAAwB,EAAE,MAAM,CAAC,wBAAwB;YACzD,OAAO,EAAE,MAAM,CAAC,OAAO;SACxB,CAAC;QACF,+BAAa,CAAC,YAAY,CAAC;YACzB,MAAM;YACN,UAAU,EAAE,CAAC,OAA8B,EAAwB,EAAE,CAAC,CAAC;gBACrE,cAAc,EAAE,OAAO,CAAC,kBAAkB;aAC3C,CAAC;SACH,CAAC;QACF,gCAAc,CAAC,YAAY,CAAC;YAC1B,yBAAyB,EAAE,MAAM,CAAC,yBAAyB;YAC3D,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,MAAM;YACN,sBAAsB,EAAE,MAAM,CAAC,sBAAsB;YACrD,UAAU;SACX,CAAC;QACF,wCAAkB;QAClB,oCAAgB,CAAC,YAAY,CAAC;YAC5B,qBAAqB,EAAE,MAAM,CAAC,qBAAqB;YACnD,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,MAAM;YACN,eAAe,EAAE,MAAM,CAAC,yBAAyB;YACjD,UAAU;SACX,CAAC;QACF,wBAAU;QACV,uCAAoB,CAAC,OAAO,CAAC;YAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,gBAAgB,EAAE,MAAM,CAAC,8BAA8B;SAClB,CAAC;QACxC,gCAAc;QACd,oCAAgB;QAChB,wCAAkB;QAClB,kCAAe,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;QACpD,6CAAoB,CAAC,OAAO,CAAC;YAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,6BAA6B,EAAE,MAAM,CAAC,qCAAqC;SAC5E,CAAC;QACF,+CAAqB,CAAC,OAAO,CAAC;YAC5B,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,gBAAgB,EAAE,MAAM,CAAC,+BAA+B;SAClB,CAAC;KAC1C,CAAC;AACJ,CAAC"}

package/src/lib/bpm/index.d.ts

@@ -1 +1,2 @@
+export * from './bpm-root-options';
 export * from './bpm-root.module';

package/src/lib/bpm/index.js

@@ -1,5 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 const tslib_1 = require("tslib");
+tslib_1.__exportStar(require("./bpm-root-options"), exports);
 tslib_1.__exportStar(require("./bpm-root.module"), exports);
 //# sourceMappingURL=index.js.map

package/src/lib/bpm/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../libs/bpm-core/src/lib/bpm/index.ts"],"names":[],"mappings":";;;AAAA,4DAAkC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../libs/bpm-core/src/lib/bpm/index.ts"],"names":[],"mappings":";;;AAAA,6DAAmC;AACnC,4DAAkC"}