@rytass/bpm-core-nestjs-module 0.5.0 → 0.5.1

package/src/lib/identity/member-base.adapter.d.ts

@@ -0,0 +1,123 @@
+import { InjectionToken, Provider } from '@nestjs/common';
+import { MemberMetadata } from '@rytass/bpm-core-shared';
+import { BPMAuthContext } from '../bpm-auth';
+import { BPMMemberResolver, BPMMemberSearchPage, BPMMemberSearchPageOptions } from './member-resolver.interface';
+/**
+ * Structural contract a host identity backend should implement (or a thin
+ * adapter wrap) so BPM can be plugged into any `member-base`-style
+ * directory without coupling `@rytass/bpm-core-nestjs-module` to a
+ * specific identity package.
+ *
+ * `TMember` is the host's own member shape; the adapter walks it through
+ * {@link BPMMemberBaseAdapterOptions} field readers.
+ */
+export interface BPMMemberBaseDirectory<TMember> {
+    readonly resolveMember: (memberId: string) => Promise<TMember | null>;
+    readonly resolveMembers?: (memberIds: readonly string[]) => Promise<readonly TMember[]>;
+    readonly searchMembers?: (searchText: string) => Promise<readonly TMember[]>;
+    /**
+     * Optional paged directory search. Implement this (in addition to, or
+     * instead of, `searchMembers`) to let BPM page through a directory
+     * larger than `searchMembers`' member-picker cap and report an
+     * accurate total on the admin members list. `page` is 1-based and
+     * already normalized/clamped by BPM. Return the requested slice as
+     * `items` and the full match count as `total`. When omitted, the
+     * adapter's `searchPaged` stays `undefined` and BPM falls back to the
+     * `searchMembers`-and-slice path.
+     */
+    readonly searchMembersPaged?: (searchText: string, options: BPMMemberSearchPageOptions) => Promise<BPMMemberBaseSearchPage<TMember>>;
+}
+/**
+ * Host-shaped page returned by
+ * {@link BPMMemberBaseDirectory.searchMembersPaged}. The adapter maps
+ * each `TMember` in `items` through the field readers into
+ * {@link MemberMetadata} and forwards `total` unchanged.
+ */
+export interface BPMMemberBaseSearchPage<TMember> {
+    readonly items: readonly TMember[];
+    readonly total: number;
+}
+/**
+ * Per-host field readers that tell the adapter how to extract canonical
+ * BPM fields out of the host's `TMember`. Each reader is optional;
+ * sensible defaults are inferred when the host uses common conventions
+ * (`memberId` / `id` / `sub` for the member id, `email` for the email,
+ * `name` / `displayName` for the name, etc.).
+ *
+ * Provide `readPermissions` and `readRoles` if you want BPM's
+ * `BPMAdminGuard` / `BPMDesignerGuard` to receive the host's RBAC
+ * strings; otherwise the resolved `BPMAuthContext` will carry empty
+ * arrays.
+ */
+export interface BPMMemberBaseAdapterOptions<TMember> {
+    readonly readCustomFields?: (member: TMember) => Readonly<Record<string, unknown>>;
+    readonly readEmail?: (member: TMember) => string | null;
+    readonly readMemberId?: (member: TMember) => string | null;
+    readonly readName?: (member: TMember) => string | null;
+    readonly readPermissions?: (member: TMember) => readonly string[];
+    readonly readRoles?: (member: TMember) => readonly string[];
+}
+export interface BPMMemberBaseResolverProviderOptions<TMember> {
+    readonly adapterOptions?: BPMMemberBaseAdapterOptions<TMember>;
+    readonly directoryToken: InjectionToken<BPMMemberBaseDirectory<TMember>>;
+    readonly provide: InjectionToken<BPMMemberResolver>;
+}
+export declare class BPMMemberBaseResolverAdapter<TMember> implements BPMMemberResolver {
+    private readonly directory;
+    private readonly options;
+    /**
+     * Present only when the wrapped directory implements
+     * `searchMembersPaged`. Left `undefined` otherwise so `IdentityService`
+     * capability detection falls back to the `search`-and-slice path,
+     * preserving pre-0.5.0 behavior.
+     */
+    readonly searchPaged?: (searchText: string, options: BPMMemberSearchPageOptions) => Promise<BPMMemberSearchPage>;
+    constructor(directory: BPMMemberBaseDirectory<TMember>, options?: BPMMemberBaseAdapterOptions<TMember>);
+    resolve(memberId: string): Promise<MemberMetadata>;
+    resolveMany(memberIds: readonly string[]): Promise<ReadonlyMap<string, MemberMetadata>>;
+    search(searchText: string): Promise<readonly MemberMetadata[]>;
+}
+/**
+ * Helper for hosts that already hold an authenticated `TMember` (for
+ * example from `@rytass/member-base-nestjs-module`) and want to project it
+ * into a {@link BPMAuthContext} without writing the boilerplate by hand.
+ *
+ * Returns `null` when the input is nullish or when the member is missing
+ * an id — never throws. Pair this with `BPMRootModuleOptions.authContextFactory`
+ * so BPM resolvers receive the projected context on every request.
+ *
+ * @example
+ * ```ts
+ * const bpmAuth = createBPMAuthContextFromMemberBaseMember(memberBaseUser, {
+ *   readRoles: (m) => m.roles,
+ *   readPermissions: (m) => m.permissions,
+ *   readCustomFields: (m) => ({ tenantId: m.tenantId }),
+ * });
+ * ```
+ */
+export declare function createBPMAuthContextFromMemberBaseMember<TMember>(member: TMember | null | undefined, options?: BPMMemberBaseAdapterOptions<TMember>): BPMAuthContext | null;
+/**
+ * Builds a Nest `Provider` that adapts a host-provided
+ * {@link BPMMemberBaseDirectory} into a {@link BPMMemberResolver}, then
+ * registers it under the host-chosen injection token (typically
+ * {@link BPM_MEMBER_RESOLVER}).
+ *
+ * Pass the result inside `BPMRootModuleOptions.memberResolverProvider`.
+ *
+ * @example
+ * ```ts
+ * BPMRootModule.forRoot({
+ *   memberResolverProvider: createBPMMemberBaseResolverProvider({
+ *     provide: BPM_MEMBER_RESOLVER,
+ *     directoryToken: HOST_MEMBER_DIRECTORY,
+ *     adapterOptions: {
+ *       readEmail: (m) => m.email,
+ *       readName: (m) => m.name,
+ *     },
+ *   }),
+ *   // ...
+ * });
+ * ```
+ */
+export declare function createBPMMemberBaseResolverProvider<TMember>({ adapterOptions, directoryToken, provide, }: BPMMemberBaseResolverProviderOptions<TMember>): Provider<BPMMemberResolver>;
+export declare function readMemberMetadataFromMemberBaseMember<TMember>(member: TMember, options?: BPMMemberBaseAdapterOptions<TMember>): MemberMetadata;

package/src/lib/identity/member-base.adapter.js

@@ -0,0 +1,147 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BPMMemberBaseResolverAdapter = void 0;
+exports.createBPMAuthContextFromMemberBaseMember = createBPMAuthContextFromMemberBaseMember;
+exports.createBPMMemberBaseResolverProvider = createBPMMemberBaseResolverProvider;
+exports.readMemberMetadataFromMemberBaseMember = readMemberMetadataFromMemberBaseMember;
+class BPMMemberBaseResolverAdapter {
+    constructor(directory, options = {}) {
+        this.directory = directory;
+        this.options = options;
+        const searchMembersPaged = directory.searchMembersPaged;
+        if (searchMembersPaged) {
+            this.searchPaged = async (searchText, pageOptions) => {
+                const page = await searchMembersPaged(searchText, pageOptions);
+                return {
+                    items: page.items.map((member) => readMemberMetadataFromMemberBaseMember(member, this.options)),
+                    total: page.total,
+                };
+            };
+        }
+    }
+    async resolve(memberId) {
+        const member = await this.directory.resolveMember(memberId);
+        if (!member) {
+            throw new Error(`member-base member ${memberId} was not found`);
+        }
+        return readMemberMetadataFromMemberBaseMember(member, this.options);
+    }
+    async resolveMany(memberIds) {
+        const members = this.directory.resolveMembers
+            ? await this.directory.resolveMembers(memberIds)
+            : await Promise.all(memberIds.map((memberId) => this.directory.resolveMember(memberId)));
+        return members
+            .filter((member) => Boolean(member))
+            .map((member) => readMemberMetadataFromMemberBaseMember(member, this.options))
+            .reduce((metadataByMemberId, metadata) => new Map(metadataByMemberId).set(metadata.memberId, metadata), new Map());
+    }
+    async search(searchText) {
+        if (!this.directory.searchMembers) {
+            return [];
+        }
+        return (await this.directory.searchMembers(searchText)).map((member) => readMemberMetadataFromMemberBaseMember(member, this.options));
+    }
+}
+exports.BPMMemberBaseResolverAdapter = BPMMemberBaseResolverAdapter;
+/**
+ * Helper for hosts that already hold an authenticated `TMember` (for
+ * example from `@rytass/member-base-nestjs-module`) and want to project it
+ * into a {@link BPMAuthContext} without writing the boilerplate by hand.
+ *
+ * Returns `null` when the input is nullish or when the member is missing
+ * an id — never throws. Pair this with `BPMRootModuleOptions.authContextFactory`
+ * so BPM resolvers receive the projected context on every request.
+ *
+ * @example
+ * ```ts
+ * const bpmAuth = createBPMAuthContextFromMemberBaseMember(memberBaseUser, {
+ *   readRoles: (m) => m.roles,
+ *   readPermissions: (m) => m.permissions,
+ *   readCustomFields: (m) => ({ tenantId: m.tenantId }),
+ * });
+ * ```
+ */
+function createBPMAuthContextFromMemberBaseMember(member, options = {}) {
+    if (!member) {
+        return null;
+    }
+    const memberId = readMemberId(member, options);
+    return memberId
+        ? {
+            memberId,
+            metadata: options.readCustomFields?.(member) ?? {},
+            permissions: options.readPermissions?.(member) ?? [],
+            roles: options.readRoles?.(member) ?? [],
+        }
+        : null;
+}
+/**
+ * Builds a Nest `Provider` that adapts a host-provided
+ * {@link BPMMemberBaseDirectory} into a {@link BPMMemberResolver}, then
+ * registers it under the host-chosen injection token (typically
+ * {@link BPM_MEMBER_RESOLVER}).
+ *
+ * Pass the result inside `BPMRootModuleOptions.memberResolverProvider`.
+ *
+ * @example
+ * ```ts
+ * BPMRootModule.forRoot({
+ *   memberResolverProvider: createBPMMemberBaseResolverProvider({
+ *     provide: BPM_MEMBER_RESOLVER,
+ *     directoryToken: HOST_MEMBER_DIRECTORY,
+ *     adapterOptions: {
+ *       readEmail: (m) => m.email,
+ *       readName: (m) => m.name,
+ *     },
+ *   }),
+ *   // ...
+ * });
+ * ```
+ */
+function createBPMMemberBaseResolverProvider({ adapterOptions, directoryToken, provide, }) {
+    return {
+        inject: [directoryToken],
+        provide,
+        useFactory: (directory) => new BPMMemberBaseResolverAdapter(directory, adapterOptions),
+    };
+}
+function readMemberMetadataFromMemberBaseMember(member, options = {}) {
+    const memberId = readMemberId(member, options);
+    if (!memberId) {
+        throw new Error('member-base member id is required for BPM integration');
+    }
+    return {
+        customFields: options.readCustomFields?.(member) ?? {},
+        email: readMemberEmail(member, options) ?? '',
+        memberId,
+        name: readMemberName(member, options) ?? memberId,
+    };
+}
+function readMemberId(member, options) {
+    return (normalizeText(options.readMemberId?.(member)) ??
+        readStringProperty(member, 'memberId') ??
+        readStringProperty(member, 'id') ??
+        readStringProperty(member, 'sub'));
+}
+function readMemberEmail(member, options) {
+    return normalizeText(options.readEmail?.(member)) ?? readStringProperty(member, 'email');
+}
+function readMemberName(member, options) {
+    return (normalizeText(options.readName?.(member)) ??
+        readStringProperty(member, 'name') ??
+        readStringProperty(member, 'displayName') ??
+        readMemberEmail(member, options));
+}
+function readStringProperty(value, key) {
+    if (!isRecord(value)) {
+        return null;
+    }
+    return normalizeText(value[key]);
+}
+function normalizeText(value) {
+    return typeof value === 'string' && value.trim() ? value.trim() : null;
+}
+function isRecord(value) {
+    return typeof value === 'object' && value !== null;
+}
+//# sourceMappingURL=member-base.adapter.js.map

package/src/lib/identity/member-base.adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"member-base.adapter.js","sourceRoot":"","sources":["../../../../../../libs/bpm-core/src/lib/identity/member-base.adapter.ts"],"names":[],"mappings":";;;AAoLA,4FAkBC;AAyBD,kFAaC;AAED,wFAgBC;AA9KD,MAAa,4BAA4B;IAcvC,YACmB,SAA0C,EAC1C,UAAgD,EAAE;QADlD,cAAS,GAAT,SAAS,CAAiC;QAC1C,YAAO,GAAP,OAAO,CAA2C;QAEnE,MAAM,kBAAkB,GAAG,SAAS,CAAC,kBAAkB,CAAC;QAExD,IAAI,kBAAkB,EAAE,CAAC;YACvB,IAAI,CAAC,WAAW,GAAG,KAAK,EACtB,UAAkB,EAClB,WAAuC,EACT,EAAE;gBAChC,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;gBAE/D,OAAO;oBACL,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,EAAkB,EAAE,CAC/C,sCAAsC,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,CAC7D;oBACD,KAAK,EAAE,IAAI,CAAC,KAAK;iBAClB,CAAC;YACJ,CAAC,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,QAAgB;QAC5B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAE5D,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,sBAAsB,QAAQ,gBAAgB,CAAC,CAAC;QAClE,CAAC;QAED,OAAO,sCAAsC,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACtE,CAAC;IAED,KAAK,CAAC,WAAW,CACf,SAA4B;QAE5B,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,cAAc;YAC3C,CAAC,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,SAAS,CAAC;YAChD,CAAC,CAAC,MAAM,OAAO,CAAC,GAAG,CACf,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAA2B,EAAE,CAClD,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,QAAQ,CAAC,CACvC,CACF,CAAC;QAEN,OAAO,OAAO;aACX,MAAM,CAAC,CAAC,MAAM,EAAqB,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;aACtD,GAAG,CAAC,CAAC,MAAM,EAAkB,EAAE,CAC9B,sCAAsC,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,CAC7D;aACA,MAAM,CACL,CAAC,kBAAkB,EAAE,QAAQ,EAAuC,EAAE,CACpE,IAAI,GAAG,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAC9D,IAAI,GAAG,EAAE,CACV,CAAC;IACN,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,UAAkB;QAC7B,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,CAAC;YAClC,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,OAAO,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CACzD,CAAC,MAAM,EAAkB,EAAE,CACzB,sCAAsC,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,CAC/D,CAAC;IACJ,CAAC;CACF;AAhFD,oEAgFC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,SAAgB,wCAAwC,CACtD,MAAkC,EAClC,UAAgD,EAAE;IAElD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAE/C,OAAO,QAAQ;QACb,CAAC,CAAC;YACE,QAAQ;YACR,QAAQ,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE;YAClD,WAAW,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE;YACpD,KAAK,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE;SACzC;QACH,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,SAAgB,mCAAmC,CAAU,EAC3D,cAAc,EACd,cAAc,EACd,OAAO,GACuC;IAC9C,OAAO;QACL,MAAM,EAAE,CAAC,cAAc,CAAC;QACxB,OAAO;QACP,UAAU,EAAE,CACV,SAA0C,EACvB,EAAE,CACrB,IAAI,4BAA4B,CAAC,SAAS,EAAE,cAAc,CAAC;KAC9D,CAAC;AACJ,CAAC;AAED,SAAgB,sCAAsC,CACpD,MAAe,EACf,UAAgD,EAAE;IAElD,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAE/C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IAED,OAAO;QACL,YAAY,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE;QACtD,KAAK,EAAE,eAAe,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE;QAC7C,QAAQ;QACR,IAAI,EAAE,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,QAAQ;KAClD,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CACnB,MAAe,EACf,OAA6C;IAE7C,OAAO,CACL,aAAa,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,MAAM,CAAC,CAAC;QAC7C,kBAAkB,CAAC,MAAM,EAAE,UAAU,CAAC;QACtC,kBAAkB,CAAC,MAAM,EAAE,IAAI,CAAC;QAChC,kBAAkB,CAAC,MAAM,EAAE,KAAK,CAAC,CAClC,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CACtB,MAAe,EACf,OAA6C;IAE7C,OAAO,aAAa,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAC3F,CAAC;AAED,SAAS,cAAc,CACrB,MAAe,EACf,OAA6C;IAE7C,OAAO,CACL,aAAa,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,CAAC;QACzC,kBAAkB,CAAC,MAAM,EAAE,MAAM,CAAC;QAClC,kBAAkB,CAAC,MAAM,EAAE,aAAa,CAAC;QACzC,eAAe,CAAC,MAAM,EAAE,OAAO,CAAC,CACjC,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc,EAAE,GAAW;IACrD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACzE,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC;AACrD,CAAC"}

package/src/lib/identity/member-metadata-cache.entity.d.ts

@@ -0,0 +1,8 @@
+import { MemberMetadata } from '@rytass/bpm-core-shared';
+export declare class MemberMetadataCacheEntity {
+    id: string;
+    memberId: string;
+    metadata: MemberMetadata;
+    fetchedAt: Date;
+    expiresAt: Date;
+}

package/src/lib/identity/member-metadata-cache.entity.js

@@ -0,0 +1,39 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MemberMetadataCacheEntity = void 0;
+const tslib_1 = require("tslib");
+const graphql_1 = require("@nestjs/graphql");
+const typeorm_1 = require("typeorm");
+let MemberMetadataCacheEntity = class MemberMetadataCacheEntity {
+};
+exports.MemberMetadataCacheEntity = MemberMetadataCacheEntity;
+tslib_1.__decorate([
+    (0, typeorm_1.PrimaryGeneratedColumn)('uuid'),
+    (0, graphql_1.Field)(() => graphql_1.ID),
+    tslib_1.__metadata("design:type", String)
+], MemberMetadataCacheEntity.prototype, "id", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.Column)('text', { name: 'member_id' }),
+    (0, graphql_1.Field)(),
+    tslib_1.__metadata("design:type", String)
+], MemberMetadataCacheEntity.prototype, "memberId", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.Column)('jsonb'),
+    tslib_1.__metadata("design:type", Object)
+], MemberMetadataCacheEntity.prototype, "metadata", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.Column)('timestamptz', { name: 'fetched_at' }),
+    (0, graphql_1.Field)(),
+    tslib_1.__metadata("design:type", Date)
+], MemberMetadataCacheEntity.prototype, "fetchedAt", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.Column)('timestamptz', { name: 'expires_at' }),
+    (0, graphql_1.Field)(),
+    tslib_1.__metadata("design:type", Date)
+], MemberMetadataCacheEntity.prototype, "expiresAt", void 0);
+exports.MemberMetadataCacheEntity = MemberMetadataCacheEntity = tslib_1.__decorate([
+    (0, typeorm_1.Entity)('member_metadata_cache'),
+    (0, typeorm_1.Unique)(['memberId']),
+    (0, graphql_1.ObjectType)('MemberMetadataCache')
+], MemberMetadataCacheEntity);
+//# sourceMappingURL=member-metadata-cache.entity.js.map

package/src/lib/identity/member-metadata-cache.entity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"member-metadata-cache.entity.js","sourceRoot":"","sources":["../../../../../../libs/bpm-core/src/lib/identity/member-metadata-cache.entity.ts"],"names":[],"mappings":";;;;AAAA,6CAAwD;AACxD,qCAAyE;AAMlE,IAAM,yBAAyB,GAA/B,MAAM,yBAAyB;CAmBrC,CAAA;AAnBY,8DAAyB;AAGpC;IAFC,IAAA,gCAAsB,EAAC,MAAM,CAAC;IAC9B,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,YAAE,CAAC;;qDACJ;AAIZ;IAFC,IAAA,gBAAM,EAAC,MAAM,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IACrC,IAAA,eAAK,GAAE;;2DACU;AAGlB;IADC,IAAA,gBAAM,EAAC,OAAO,CAAC;;2DACU;AAI1B;IAFC,IAAA,gBAAM,EAAC,aAAa,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;IAC7C,IAAA,eAAK,GAAE;sCACI,IAAI;4DAAC;AAIjB;IAFC,IAAA,gBAAM,EAAC,aAAa,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;IAC7C,IAAA,eAAK,GAAE;sCACI,IAAI;4DAAC;oCAlBN,yBAAyB;IAHrC,IAAA,gBAAM,EAAC,uBAAuB,CAAC;IAC/B,IAAA,gBAAM,EAAC,CAAC,UAAU,CAAC,CAAC;IACpB,IAAA,oBAAU,EAAC,qBAAqB,CAAC;GACrB,yBAAyB,CAmBrC"}

package/src/lib/identity/{member-not-found.exception.ts → member-not-found.exception.d.ts}

@@ -12,12 +12,7 @@
  * Hosts may throw any `Error` subclass; this class is provided as a
  * recommended default so error messages stay consistent in BPM's logs.
  */
-export class MemberNotFoundException extends Error {
-  readonly memberId: string;
-
-  constructor(memberId: string, message?: string) {
-    super(message ?? `BPM member not found: ${memberId}`);
-    this.name = 'MemberNotFoundException';
-    this.memberId = memberId;
-  }
+export declare class MemberNotFoundException extends Error {
+    readonly memberId: string;
+    constructor(memberId: string, message?: string);
 }

package/src/lib/identity/member-not-found.exception.js

@@ -0,0 +1,26 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MemberNotFoundException = void 0;
+/**
+ * Thrown by `BPMMemberResolver.resolve(memberId)` when the host's user
+ * directory has no entry for the requested id. BPM surfaces the error
+ * as a GraphQL `errors[]` entry on whichever query triggered the
+ * lookup; the caller receives a structured response rather than a
+ * synthetic placeholder member.
+ *
+ * Note: `BPMMemberResolver.resolveMany(ids)` has the **opposite**
+ * contract — unknown ids are silently omitted from the returned `Map`.
+ * Use this exception only inside the single-id `resolve` path.
+ *
+ * Hosts may throw any `Error` subclass; this class is provided as a
+ * recommended default so error messages stay consistent in BPM's logs.
+ */
+class MemberNotFoundException extends Error {
+    constructor(memberId, message) {
+        super(message ?? `BPM member not found: ${memberId}`);
+        this.name = 'MemberNotFoundException';
+        this.memberId = memberId;
+    }
+}
+exports.MemberNotFoundException = MemberNotFoundException;
+//# sourceMappingURL=member-not-found.exception.js.map

package/src/lib/identity/member-not-found.exception.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"member-not-found.exception.js","sourceRoot":"","sources":["../../../../../../libs/bpm-core/src/lib/identity/member-not-found.exception.ts"],"names":[],"mappings":";;;AAAA;;;;;;;;;;;;;GAaG;AACH,MAAa,uBAAwB,SAAQ,KAAK;IAGhD,YAAY,QAAgB,EAAE,OAAgB;QAC5C,KAAK,CAAC,OAAO,IAAI,yBAAyB,QAAQ,EAAE,CAAC,CAAC;QACtD,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;QACtC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;CACF;AARD,0DAQC"}

package/src/lib/identity/member-profile.object.d.ts

@@ -0,0 +1,8 @@
+import { MemberMetadata } from '@rytass/bpm-core-shared';
+export declare class MemberProfileObject {
+    memberId: string;
+    name: string;
+    email: string;
+    customFieldsJson: string;
+}
+export declare function toMemberProfileObject(metadata: MemberMetadata): MemberProfileObject;

package/src/lib/identity/member-profile.object.js

@@ -0,0 +1,37 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MemberProfileObject = void 0;
+exports.toMemberProfileObject = toMemberProfileObject;
+const tslib_1 = require("tslib");
+const graphql_1 = require("@nestjs/graphql");
+let MemberProfileObject = class MemberProfileObject {
+};
+exports.MemberProfileObject = MemberProfileObject;
+tslib_1.__decorate([
+    (0, graphql_1.Field)(() => graphql_1.ID),
+    tslib_1.__metadata("design:type", String)
+], MemberProfileObject.prototype, "memberId", void 0);
+tslib_1.__decorate([
+    (0, graphql_1.Field)(),
+    tslib_1.__metadata("design:type", String)
+], MemberProfileObject.prototype, "name", void 0);
+tslib_1.__decorate([
+    (0, graphql_1.Field)(),
+    tslib_1.__metadata("design:type", String)
+], MemberProfileObject.prototype, "email", void 0);
+tslib_1.__decorate([
+    (0, graphql_1.Field)(),
+    tslib_1.__metadata("design:type", String)
+], MemberProfileObject.prototype, "customFieldsJson", void 0);
+exports.MemberProfileObject = MemberProfileObject = tslib_1.__decorate([
+    (0, graphql_1.ObjectType)('MemberProfile')
+], MemberProfileObject);
+function toMemberProfileObject(metadata) {
+    return {
+        customFieldsJson: JSON.stringify(metadata.customFields),
+        email: metadata.email,
+        memberId: metadata.memberId,
+        name: metadata.name,
+    };
+}
+//# sourceMappingURL=member-profile.object.js.map

package/src/lib/identity/member-profile.object.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"member-profile.object.js","sourceRoot":"","sources":["../../../../../../libs/bpm-core/src/lib/identity/member-profile.object.ts"],"names":[],"mappings":";;;AAkBA,sDASC;;AA3BD,6CAAwD;AAIjD,IAAM,mBAAmB,GAAzB,MAAM,mBAAmB;CAY/B,CAAA;AAZY,kDAAmB;AAE9B;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,YAAE,CAAC;;qDACE;AAGlB;IADC,IAAA,eAAK,GAAE;;iDACM;AAGd;IADC,IAAA,eAAK,GAAE;;kDACO;AAGf;IADC,IAAA,eAAK,GAAE;;6DACkB;8BAXf,mBAAmB;IAD/B,IAAA,oBAAU,EAAC,eAAe,CAAC;GACf,mBAAmB,CAY/B;AAED,SAAgB,qBAAqB,CACnC,QAAwB;IAExB,OAAO;QACL,gBAAgB,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,YAAY,CAAC;QACvD,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,IAAI,EAAE,QAAQ,CAAC,IAAI;KACpB,CAAC;AACJ,CAAC"}

package/src/lib/identity/{member-resolver.interface.ts → member-resolver.interface.d.ts}

@@ -1,5 +1,4 @@
 import { MemberMetadata } from '@rytass/bpm-core-shared';
-
 /**
  * Injection token for the host-provided `BPMMemberResolver`.
  *
@@ -8,15 +7,13 @@ import { MemberMetadata } from '@rytass/bpm-core-shared';
  * services look up display names, emails, and approver candidates via
  * this token without coupling to any specific identity backend.
  */
-export const BPM_MEMBER_RESOLVER = Symbol('BPM_MEMBER_RESOLVER');
-
+export declare const BPM_MEMBER_RESOLVER: unique symbol;
 /**
  * @deprecated Use {@link BPM_MEMBER_RESOLVER}. Kept as a backwards-compatible
  * alias for hosts that adopted the original name. To be removed in a future
  * major release.
  */
-export const MEMBER_RESOLVER = BPM_MEMBER_RESOLVER;
-
+export declare const MEMBER_RESOLVER: symbol;
 /**
  * Contract host applications must implement so BPM can resolve member
  * profiles, approver candidates, and search results.
@@ -67,61 +64,51 @@ export const MEMBER_RESOLVER = BPM_MEMBER_RESOLVER;
  * Implementations may de-duplicate within a single call freely.
  */
 export interface BPMMemberResolver {
-  /**
-   * Single-id lookup. **Throw** (e.g. `MemberNotFoundException`) when
-   * the id is unknown — BPM surfaces the error to the caller. Result is
-   * row-cached by BPM with TTL `identityOptions.memberMetadataCacheTtlMs`.
-   */
-  resolve(memberId: string): Promise<MemberMetadata>;
-
-  /**
-   * Batched lookup. **Omit** unknown ids from the returned `Map`
-   * (do not throw) — BPM renders missing entries as deleted/anonymized
-   * members. Cached per-id under the same TTL as `resolve`.
-   */
-  resolveMany(
-    memberIds: readonly string[],
-  ): Promise<ReadonlyMap<string, MemberMetadata>>;
-
-  /**
-   * Optional **member-picker** free-text search. Return up to ~50 best
-   * matches; BPM does not paginate the result. Omit the method entirely
-   * to disable member-picker search. This contract is intentionally
-   * non-paginated — to back a full directory listing page implement
-   * {@link BPMMemberResolver.searchPaged} instead.
-   */
-  search?(searchText: string): Promise<readonly MemberMetadata[]>;
-
-  /**
-   * Optional **directory-listing** paged search. When present, BPM
-   * delegates both pagination and total counting to the host — the
-   * host is expected to page at the source (e.g. DB `LIMIT/OFFSET`) and
-   * return an accurate `total` — bypassing the `search`-and-slice-in-
-   * memory path that caps the listing at `search`'s ~50 rows.
-   *
-   * `page` is 1-based and `pageSize` is the number of rows per page;
-   * BPM normalizes and clamps both before calling (see the identity
-   * service pagination defaults). BPM row-caches the returned `items`
-   * under the same TTL as `resolve`/`resolveMany`, but never caches the
-   * page query itself. Omit the method to keep the pre-0.5.0
-   * `search`-backed behavior.
-   */
-  searchPaged?(
-    searchText: string,
-    options: BPMMemberSearchPageOptions,
-  ): Promise<BPMMemberSearchPage>;
+    /**
+     * Single-id lookup. **Throw** (e.g. `MemberNotFoundException`) when
+     * the id is unknown — BPM surfaces the error to the caller. Result is
+     * row-cached by BPM with TTL `identityOptions.memberMetadataCacheTtlMs`.
+     */
+    resolve(memberId: string): Promise<MemberMetadata>;
+    /**
+     * Batched lookup. **Omit** unknown ids from the returned `Map`
+     * (do not throw) — BPM renders missing entries as deleted/anonymized
+     * members. Cached per-id under the same TTL as `resolve`.
+     */
+    resolveMany(memberIds: readonly string[]): Promise<ReadonlyMap<string, MemberMetadata>>;
+    /**
+     * Optional **member-picker** free-text search. Return up to ~50 best
+     * matches; BPM does not paginate the result. Omit the method entirely
+     * to disable member-picker search. This contract is intentionally
+     * non-paginated — to back a full directory listing page implement
+     * {@link BPMMemberResolver.searchPaged} instead.
+     */
+    search?(searchText: string): Promise<readonly MemberMetadata[]>;
+    /**
+     * Optional **directory-listing** paged search. When present, BPM
+     * delegates both pagination and total counting to the host — the
+     * host is expected to page at the source (e.g. DB `LIMIT/OFFSET`) and
+     * return an accurate `total` — bypassing the `search`-and-slice-in-
+     * memory path that caps the listing at `search`'s ~50 rows.
+     *
+     * `page` is 1-based and `pageSize` is the number of rows per page;
+     * BPM normalizes and clamps both before calling (see the identity
+     * service pagination defaults). BPM row-caches the returned `items`
+     * under the same TTL as `resolve`/`resolveMany`, but never caches the
+     * page query itself. Omit the method to keep the pre-0.5.0
+     * `search`-backed behavior.
+     */
+    searchPaged?(searchText: string, options: BPMMemberSearchPageOptions): Promise<BPMMemberSearchPage>;
 }
-
 /**
  * Pagination request passed to {@link BPMMemberResolver.searchPaged}.
  * `page` is 1-based; `pageSize` is the page length. BPM normalizes both
  * to sane, clamped values before delegating, so hosts can trust them.
  */
 export interface BPMMemberSearchPageOptions {
-  readonly page: number;
-  readonly pageSize: number;
+    readonly page: number;
+    readonly pageSize: number;
 }
-
 /**
  * A single page of member search results returned by
  * {@link BPMMemberResolver.searchPaged}. `items` is the requested slice
@@ -129,10 +116,9 @@ export interface BPMMemberSearchPageOptions {
  * count used by the `memberCount` GraphQL query.
  */
 export interface BPMMemberSearchPage {
-  readonly items: readonly MemberMetadata[];
-  readonly total: number;
+    readonly items: readonly MemberMetadata[];
+    readonly total: number;
 }
-
 /**
  * @deprecated Use {@link BPMMemberResolver}. Kept as a backwards-compatible
  * alias.

package/src/lib/identity/member-resolver.interface.js

@@ -0,0 +1,19 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MEMBER_RESOLVER = exports.BPM_MEMBER_RESOLVER = void 0;
+/**
+ * Injection token for the host-provided `BPMMemberResolver`.
+ *
+ * Hosts must register a provider under this token through
+ * `BPMRootModuleOptions.memberResolverProvider`. BPM resolvers and
+ * services look up display names, emails, and approver candidates via
+ * this token without coupling to any specific identity backend.
+ */
+exports.BPM_MEMBER_RESOLVER = Symbol('BPM_MEMBER_RESOLVER');
+/**
+ * @deprecated Use {@link BPM_MEMBER_RESOLVER}. Kept as a backwards-compatible
+ * alias for hosts that adopted the original name. To be removed in a future
+ * major release.
+ */
+exports.MEMBER_RESOLVER = exports.BPM_MEMBER_RESOLVER;
+//# sourceMappingURL=member-resolver.interface.js.map

package/src/lib/identity/member-resolver.interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"member-resolver.interface.js","sourceRoot":"","sources":["../../../../../../libs/bpm-core/src/lib/identity/member-resolver.interface.ts"],"names":[],"mappings":";;;AAEA;;;;;;;GAOG;AACU,QAAA,mBAAmB,GAAG,MAAM,CAAC,qBAAqB,CAAC,CAAC;AAEjE;;;;GAIG;AACU,QAAA,eAAe,GAAG,2BAAmB,CAAC"}

package/src/lib/migrations/0000000000001-enable-postgres-extensions.d.ts

@@ -0,0 +1,6 @@
+import { MigrationInterface, QueryRunner } from 'typeorm';
+export declare class EnablePostgresExtensions0000000000001 implements MigrationInterface {
+    readonly name = "EnablePostgresExtensions0000000000001";
+    up(queryRunner: QueryRunner): Promise<void>;
+    down(queryRunner: QueryRunner): Promise<void>;
+}

package/src/lib/migrations/0000000000001-enable-postgres-extensions.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EnablePostgresExtensions0000000000001 = void 0;
+class EnablePostgresExtensions0000000000001 {
+    constructor() {
+        this.name = 'EnablePostgresExtensions0000000000001';
+    }
+    async up(queryRunner) {
+        await queryRunner.query('CREATE EXTENSION IF NOT EXISTS "uuid-ossp"');
+        await queryRunner.query('CREATE EXTENSION IF NOT EXISTS "ltree"');
+    }
+    async down(queryRunner) {
+        await queryRunner.query('DROP EXTENSION IF EXISTS "ltree"');
+    }
+}
+exports.EnablePostgresExtensions0000000000001 = EnablePostgresExtensions0000000000001;
+//# sourceMappingURL=0000000000001-enable-postgres-extensions.js.map

package/src/lib/migrations/0000000000001-enable-postgres-extensions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"0000000000001-enable-postgres-extensions.js","sourceRoot":"","sources":["../../../../../../libs/bpm-core/src/lib/migrations/0000000000001-enable-postgres-extensions.ts"],"names":[],"mappings":";;;AAEA,MAAa,qCAAqC;IAAlD;QACW,SAAI,GAAG,uCAAuC,CAAC;IAU1D,CAAC;IARC,KAAK,CAAC,EAAE,CAAC,WAAwB;QAC/B,MAAM,WAAW,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAC;QACtE,MAAM,WAAW,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAC;IACpE,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,WAAwB;QACjC,MAAM,WAAW,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;IAC9D,CAAC;CACF;AAXD,sFAWC"}

package/src/lib/migrations/0000000001000-identity-organization-foundation.d.ts

@@ -0,0 +1,6 @@
+import { MigrationInterface, QueryRunner } from 'typeorm';
+export declare class IdentityOrganizationFoundation0000000001000 implements MigrationInterface {
+    readonly name = "IdentityOrganizationFoundation0000000001000";
+    up(queryRunner: QueryRunner): Promise<void>;
+    down(queryRunner: QueryRunner): Promise<void>;
+}