@rytass/bpm-core-nestjs-module 0.5.0 → 0.5.1

package/src/lib/bpm-auth/bpm-auth.module.js

@@ -0,0 +1,69 @@
+"use strict";
+var BPMAuthModule_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BPMAuthModule = void 0;
+const tslib_1 = require("tslib");
+const common_1 = require("@nestjs/common");
+const bpm_auth_context_1 = require("./bpm-auth-context");
+const bpm_auth_guard_1 = require("./bpm-auth.guard");
+const bpm_auth_authorization_1 = require("./bpm-auth.authorization");
+const configurable_bpm_auth_context_accessor_1 = require("./configurable-bpm-auth-context.accessor");
+let BPMAuthModule = BPMAuthModule_1 = class BPMAuthModule {
+    static forRoot(options = {}) {
+        return {
+            exports: [
+                bpm_auth_context_1.BPM_AUTH_CONTEXT_ACCESSOR,
+                bpm_auth_authorization_1.BPMAdminGuard,
+                bpm_auth_authorization_1.BPMDesignerGuard,
+                bpm_auth_guard_1.BPMAuthenticatedGuard,
+            ],
+            global: true,
+            module: BPMAuthModule_1,
+            providers: [
+                {
+                    provide: bpm_auth_context_1.BPM_AUTH_MODULE_OPTIONS,
+                    useValue: options,
+                },
+                {
+                    provide: bpm_auth_context_1.BPM_AUTH_CONTEXT_ACCESSOR,
+                    useClass: configurable_bpm_auth_context_accessor_1.ConfigurableBPMAuthContextAccessor,
+                },
+                bpm_auth_authorization_1.BPMAdminGuard,
+                bpm_auth_authorization_1.BPMDesignerGuard,
+                bpm_auth_guard_1.BPMAuthenticatedGuard,
+            ],
+        };
+    }
+    static forRootAsync(options) {
+        return {
+            exports: [
+                bpm_auth_context_1.BPM_AUTH_CONTEXT_ACCESSOR,
+                bpm_auth_authorization_1.BPMAdminGuard,
+                bpm_auth_authorization_1.BPMDesignerGuard,
+                bpm_auth_guard_1.BPMAuthenticatedGuard,
+            ],
+            global: true,
+            imports: options.imports,
+            module: BPMAuthModule_1,
+            providers: [
+                {
+                    inject: [...(options.inject ?? [])],
+                    provide: bpm_auth_context_1.BPM_AUTH_MODULE_OPTIONS,
+                    useFactory: options.useFactory,
+                },
+                {
+                    provide: bpm_auth_context_1.BPM_AUTH_CONTEXT_ACCESSOR,
+                    useClass: configurable_bpm_auth_context_accessor_1.ConfigurableBPMAuthContextAccessor,
+                },
+                bpm_auth_authorization_1.BPMAdminGuard,
+                bpm_auth_authorization_1.BPMDesignerGuard,
+                bpm_auth_guard_1.BPMAuthenticatedGuard,
+            ],
+        };
+    }
+};
+exports.BPMAuthModule = BPMAuthModule;
+exports.BPMAuthModule = BPMAuthModule = BPMAuthModule_1 = tslib_1.__decorate([
+    (0, common_1.Module)({})
+], BPMAuthModule);
+//# sourceMappingURL=bpm-auth.module.js.map

package/src/lib/bpm-auth/bpm-auth.module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bpm-auth.module.js","sourceRoot":"","sources":["../../../../../../libs/bpm-core/src/lib/bpm-auth/bpm-auth.module.ts"],"names":[],"mappings":";;;;;AAAA,2CAAuD;AACvD,yDAG4B;AAK5B,qDAAyD;AACzD,qEAA2E;AAC3E,qGAA8F;AAGvF,IAAM,aAAa,qBAAnB,MAAM,aAAa;IACxB,MAAM,CAAC,OAAO,CAAC,UAAgC,EAAE;QAC/C,OAAO;YACL,OAAO,EAAE;gBACP,4CAAyB;gBACzB,sCAAa;gBACb,yCAAgB;gBAChB,sCAAqB;aACtB;YACD,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,eAAa;YACrB,SAAS,EAAE;gBACT;oBACE,OAAO,EAAE,0CAAuB;oBAChC,QAAQ,EAAE,OAAO;iBAClB;gBACD;oBACE,OAAO,EAAE,4CAAyB;oBAClC,QAAQ,EAAE,2EAAkC;iBAC7C;gBACD,sCAAa;gBACb,yCAAgB;gBAChB,sCAAqB;aACtB;SACF,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,YAAY,CAAC,OAAkC;QACpD,OAAO;YACL,OAAO,EAAE;gBACP,4CAAyB;gBACzB,sCAAa;gBACb,yCAAgB;gBAChB,sCAAqB;aACtB;YACD,MAAM,EAAE,IAAI;YACZ,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,MAAM,EAAE,eAAa;YACrB,SAAS,EAAE;gBACT;oBACE,MAAM,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;oBACnC,OAAO,EAAE,0CAAuB;oBAChC,UAAU,EAAE,OAAO,CAAC,UAAU;iBAC/B;gBACD;oBACE,OAAO,EAAE,4CAAyB;oBAClC,QAAQ,EAAE,2EAAkC;iBAC7C;gBACD,sCAAa;gBACb,yCAAgB;gBAChB,sCAAqB;aACtB;SACF,CAAC;IACJ,CAAC;CACF,CAAA;AAtDY,sCAAa;wBAAb,aAAa;IADzB,IAAA,eAAM,EAAC,EAAE,CAAC;GACE,aAAa,CAsDzB"}

package/src/lib/bpm-auth/bpm-auth.options.d.ts

@@ -0,0 +1,11 @@
+import { ExecutionContext, InjectionToken } from '@nestjs/common';
+import type { ModuleMetadata } from '@nestjs/common/interfaces';
+import { BPMAuthContext } from './bpm-auth-context';
+export type BPMAuthContextFactory = (context?: ExecutionContext) => BPMAuthContext | null | Promise<BPMAuthContext | null>;
+export interface BPMAuthModuleOptions {
+    readonly contextFactory?: BPMAuthContextFactory;
+}
+export interface BPMAuthModuleAsyncOptions extends Pick<ModuleMetadata, 'imports'> {
+    readonly inject?: readonly InjectionToken[];
+    readonly useFactory: (...args: readonly unknown[]) => BPMAuthModuleOptions | Promise<BPMAuthModuleOptions>;
+}

package/src/lib/bpm-auth/bpm-auth.options.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=bpm-auth.options.js.map

package/src/lib/bpm-auth/bpm-auth.options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bpm-auth.options.js","sourceRoot":"","sources":["../../../../../../libs/bpm-core/src/lib/bpm-auth/bpm-auth.options.ts"],"names":[],"mappings":""}

package/src/lib/bpm-auth/configurable-bpm-auth-context.accessor.d.ts

@@ -0,0 +1,10 @@
+import { ExecutionContext } from '@nestjs/common';
+import { BPMAuthContext, BPMAuthContextAccessor } from './bpm-auth-context';
+import { BPMAuthModuleOptions } from './bpm-auth.options';
+export declare class ConfigurableBPMAuthContextAccessor implements BPMAuthContextAccessor {
+    private readonly options;
+    constructor(options: BPMAuthModuleOptions);
+    assertAuthenticated(context?: ExecutionContext): Promise<BPMAuthContext>;
+    getCurrentContext(context?: ExecutionContext): Promise<BPMAuthContext | null>;
+    getCurrentMemberId(context?: ExecutionContext): Promise<string>;
+}

package/src/lib/bpm-auth/configurable-bpm-auth-context.accessor.js

@@ -0,0 +1,40 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ConfigurableBPMAuthContextAccessor = void 0;
+const tslib_1 = require("tslib");
+const common_1 = require("@nestjs/common");
+const bpm_auth_context_1 = require("./bpm-auth-context");
+const bpm_auth_context_extractor_1 = require("./bpm-auth-context.extractor");
+let ConfigurableBPMAuthContextAccessor = class ConfigurableBPMAuthContextAccessor {
+    constructor(options) {
+        this.options = options;
+    }
+    async assertAuthenticated(context) {
+        const authContext = await this.getCurrentContext(context);
+        if (!authContext?.memberId.trim()) {
+            throw new common_1.UnauthorizedException('BPM authentication is required');
+        }
+        return authContext;
+    }
+    async getCurrentContext(context) {
+        const extractedContext = (0, bpm_auth_context_extractor_1.extractBPMAuthContext)(context);
+        if (extractedContext) {
+            return extractedContext;
+        }
+        if (this.options.contextFactory) {
+            return this.options.contextFactory(context);
+        }
+        return null;
+    }
+    async getCurrentMemberId(context) {
+        const authContext = await this.assertAuthenticated(context);
+        return authContext.memberId;
+    }
+};
+exports.ConfigurableBPMAuthContextAccessor = ConfigurableBPMAuthContextAccessor;
+exports.ConfigurableBPMAuthContextAccessor = ConfigurableBPMAuthContextAccessor = tslib_1.__decorate([
+    (0, common_1.Injectable)(),
+    tslib_1.__param(0, (0, common_1.Inject)(bpm_auth_context_1.BPM_AUTH_MODULE_OPTIONS)),
+    tslib_1.__metadata("design:paramtypes", [Object])
+], ConfigurableBPMAuthContextAccessor);
+//# sourceMappingURL=configurable-bpm-auth-context.accessor.js.map

package/src/lib/bpm-auth/configurable-bpm-auth-context.accessor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"configurable-bpm-auth-context.accessor.js","sourceRoot":"","sources":["../../../../../../libs/bpm-core/src/lib/bpm-auth/configurable-bpm-auth-context.accessor.ts"],"names":[],"mappings":";;;;AAAA,2CAKwB;AACxB,yDAI4B;AAC5B,6EAAqE;AAI9D,IAAM,kCAAkC,GAAxC,MAAM,kCAAkC;IAC7C,YAEmB,OAA6B;QAA7B,YAAO,GAAP,OAAO,CAAsB;IAC7C,CAAC;IAEJ,KAAK,CAAC,mBAAmB,CACvB,OAA0B;QAE1B,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAE1D,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;YAClC,MAAM,IAAI,8BAAqB,CAAC,gCAAgC,CAAC,CAAC;QACpE,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,iBAAiB,CACrB,OAA0B;QAE1B,MAAM,gBAAgB,GAAG,IAAA,kDAAqB,EAAC,OAAO,CAAC,CAAC;QAExD,IAAI,gBAAgB,EAAE,CAAC;YACrB,OAAO,gBAAgB,CAAC;QAC1B,CAAC;QAED,IAAI,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;YAChC,OAAO,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QAC9C,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,OAA0B;QACjD,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;QAE5D,OAAO,WAAW,CAAC,QAAQ,CAAC;IAC9B,CAAC;CACF,CAAA;AAvCY,gFAAkC;6CAAlC,kCAAkC;IAD9C,IAAA,mBAAU,GAAE;IAGR,mBAAA,IAAA,eAAM,EAAC,0CAAuB,CAAC,CAAA;;GAFvB,kCAAkC,CAuC9C"}

package/src/lib/bpm-auth/index.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const tslib_1 = require("tslib");
+tslib_1.__exportStar(require("./bpm-auth-context"), exports);
+tslib_1.__exportStar(require("./bpm-auth.authorization"), exports);
+tslib_1.__exportStar(require("./bpm-auth.decorators"), exports);
+tslib_1.__exportStar(require("./bpm-auth.guard"), exports);
+tslib_1.__exportStar(require("./bpm-auth.module"), exports);
+tslib_1.__exportStar(require("./bpm-auth.options"), exports);
+//# sourceMappingURL=index.js.map

package/src/lib/bpm-auth/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../libs/bpm-core/src/lib/bpm-auth/index.ts"],"names":[],"mappings":";;;AAAA,6DAAmC;AACnC,mEAAyC;AACzC,gEAAsC;AACtC,2DAAiC;AACjC,4DAAkC;AAClC,6DAAmC"}

package/src/lib/common/filters/all-exceptions.filter.d.ts

@@ -0,0 +1,25 @@
+import { ArgumentsHost, ExceptionFilter } from '@nestjs/common';
+/**
+ * Global Nest exception filter that normalizes both HTTP and GraphQL error
+ * responses into a consistent JSON body with `statusCode`, `error`,
+ * `message`, `path`, and `timestamp`.
+ *
+ * Wire it from your bootstrap:
+ *
+ * ```ts
+ * import { AllExceptionsFilter } from '@rytass/bpm-core-nestjs-module';
+ *
+ * app.useGlobalFilters(new AllExceptionsFilter());
+ * ```
+ *
+ * Hosts that already have a custom global filter can keep their own; this
+ * filter is provided as a convenience and is not required by BPM.
+ */
+export declare class AllExceptionsFilter implements ExceptionFilter {
+    private readonly logger;
+    catch(exception: unknown, host: ArgumentsHost): void;
+    private isWritableHttpResponse;
+    private resolveMessage;
+    private hasMessage;
+    private hasMessageArray;
+}

package/src/lib/common/filters/all-exceptions.filter.js

@@ -0,0 +1,93 @@
+"use strict";
+var AllExceptionsFilter_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AllExceptionsFilter = void 0;
+const tslib_1 = require("tslib");
+const common_1 = require("@nestjs/common");
+/**
+ * Global Nest exception filter that normalizes both HTTP and GraphQL error
+ * responses into a consistent JSON body with `statusCode`, `error`,
+ * `message`, `path`, and `timestamp`.
+ *
+ * Wire it from your bootstrap:
+ *
+ * ```ts
+ * import { AllExceptionsFilter } from '@rytass/bpm-core-nestjs-module';
+ *
+ * app.useGlobalFilters(new AllExceptionsFilter());
+ * ```
+ *
+ * Hosts that already have a custom global filter can keep their own; this
+ * filter is provided as a convenience and is not required by BPM.
+ */
+let AllExceptionsFilter = AllExceptionsFilter_1 = class AllExceptionsFilter {
+    constructor() {
+        this.logger = new common_1.Logger(AllExceptionsFilter_1.name);
+    }
+    catch(exception, host) {
+        const context = host.switchToHttp();
+        const response = context.getResponse();
+        const request = context.getRequest();
+        if (!this.isWritableHttpResponse(response)) {
+            throw exception;
+        }
+        const statusCode = exception instanceof common_1.HttpException
+            ? exception.getStatus()
+            : common_1.HttpStatus.INTERNAL_SERVER_ERROR;
+        const message = this.resolveMessage(exception);
+        const body = {
+            error: statusCode === common_1.HttpStatus.INTERNAL_SERVER_ERROR
+                ? 'Internal Server Error'
+                : 'Request Error',
+            message,
+            path: request?.url ?? host.getType(),
+            statusCode,
+            timestamp: new Date().toISOString(),
+        };
+        if (statusCode === common_1.HttpStatus.INTERNAL_SERVER_ERROR) {
+            this.logger.error(message, exception instanceof Error ? exception.stack : undefined);
+        }
+        response.status(statusCode).json(body);
+    }
+    isWritableHttpResponse(response) {
+        const candidate = response;
+        return (typeof candidate?.status === 'function' &&
+            typeof candidate.json === 'function');
+    }
+    resolveMessage(exception) {
+        if (exception instanceof common_1.HttpException) {
+            const response = exception.getResponse();
+            if (typeof response === 'string') {
+                return response;
+            }
+            if (this.hasMessageArray(response)) {
+                return response.message.join(', ');
+            }
+            if (this.hasMessage(response)) {
+                return response.message;
+            }
+        }
+        if (exception instanceof Error) {
+            return exception.message;
+        }
+        return 'Unexpected error';
+    }
+    hasMessage(value) {
+        return (typeof value === 'object' &&
+            value !== null &&
+            'message' in value &&
+            typeof value.message === 'string');
+    }
+    hasMessageArray(value) {
+        return (typeof value === 'object' &&
+            value !== null &&
+            'message' in value &&
+            Array.isArray(value.message) &&
+            value.message.every((item) => typeof item === 'string'));
+    }
+};
+exports.AllExceptionsFilter = AllExceptionsFilter;
+exports.AllExceptionsFilter = AllExceptionsFilter = AllExceptionsFilter_1 = tslib_1.__decorate([
+    (0, common_1.Catch)()
+], AllExceptionsFilter);
+//# sourceMappingURL=all-exceptions.filter.js.map

package/src/lib/common/filters/all-exceptions.filter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"all-exceptions.filter.js","sourceRoot":"","sources":["../../../../../../../libs/bpm-core/src/lib/common/filters/all-exceptions.filter.ts"],"names":[],"mappings":";;;;;AAAA,2CAOwB;AAoBxB;;;;;;;;;;;;;;;GAeG;AAEI,IAAM,mBAAmB,2BAAzB,MAAM,mBAAmB;IAAzB;QACY,WAAM,GAAG,IAAI,eAAM,CAAC,qBAAmB,CAAC,IAAI,CAAC,CAAC;IA4FjE,CAAC;IA1FC,KAAK,CAAC,SAAkB,EAAE,IAAmB;QAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QACpC,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAW,EAAwB,CAAC;QAC7D,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,EAA+B,CAAC;QAElE,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3C,MAAM,SAAS,CAAC;QAClB,CAAC;QAED,MAAM,UAAU,GACd,SAAS,YAAY,sBAAa;YAChC,CAAC,CAAC,SAAS,CAAC,SAAS,EAAE;YACvB,CAAC,CAAC,mBAAU,CAAC,qBAAqB,CAAC;QACvC,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;QAC/C,MAAM,IAAI,GAAsB;YAC9B,KAAK,EACH,UAAU,KAAK,mBAAU,CAAC,qBAAqB;gBAC7C,CAAC,CAAC,uBAAuB;gBACzB,CAAC,CAAC,eAAe;YACrB,OAAO;YACP,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC,OAAO,EAAU;YAC5C,UAAU;YACV,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;QAEF,IAAI,UAAU,KAAK,mBAAU,CAAC,qBAAqB,EAAE,CAAC;YACpD,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,OAAO,EACP,SAAS,YAAY,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CACzD,CAAC;QACJ,CAAC;QAED,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC;IAEO,sBAAsB,CAC5B,QAA8B;QAE9B,MAAM,SAAS,GAAG,QAAwC,CAAC;QAE3D,OAAO,CACL,OAAO,SAAS,EAAE,MAAM,KAAK,UAAU;YACvC,OAAO,SAAS,CAAC,IAAI,KAAK,UAAU,CACrC,CAAC;IACJ,CAAC;IAEO,cAAc,CAAC,SAAkB;QACvC,IAAI,SAAS,YAAY,sBAAa,EAAE,CAAC;YACvC,MAAM,QAAQ,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;YAEzC,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBACjC,OAAO,QAAQ,CAAC;YAClB,CAAC;YAED,IAAI,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACnC,OAAO,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrC,CAAC;YAED,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC9B,OAAO,QAAQ,CAAC,OAAO,CAAC;YAC1B,CAAC;QACH,CAAC;QAED,IAAI,SAAS,YAAY,KAAK,EAAE,CAAC;YAC/B,OAAO,SAAS,CAAC,OAAO,CAAC;QAC3B,CAAC;QAED,OAAO,kBAAkB,CAAC;IAC5B,CAAC;IAEO,UAAU,CAAC,KAAc;QAC/B,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;YACzB,KAAK,KAAK,IAAI;YACd,SAAS,IAAI,KAAK;YAClB,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAClC,CAAC;IACJ,CAAC;IAEO,eAAe,CACrB,KAAc;QAEd,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;YACzB,KAAK,KAAK,IAAI;YACd,SAAS,IAAI,KAAK;YAClB,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;YAC5B,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CACxD,CAAC;IACJ,CAAC;CACF,CAAA;AA7FY,kDAAmB;8BAAnB,mBAAmB;IAD/B,IAAA,cAAK,GAAE;GACK,mBAAmB,CA6F/B"}

package/src/lib/common/index.js

@@ -0,0 +1,5 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const tslib_1 = require("tslib");
+tslib_1.__exportStar(require("./filters/all-exceptions.filter"), exports);
+//# sourceMappingURL=index.js.map

package/src/lib/common/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../libs/bpm-core/src/lib/common/index.ts"],"names":[],"mappings":";;;AAAA,0EAAgD"}

package/src/lib/common/iso-duration.d.ts

@@ -0,0 +1 @@
+export declare function parseIsoDurationToMilliseconds(value: string): number | null;

package/src/lib/common/iso-duration.js

@@ -0,0 +1,27 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseIsoDurationToMilliseconds = parseIsoDurationToMilliseconds;
+const ISO_DURATION_PATTERN = /^P(?:(\d+)D)?(?:T(?:(\d+)H)?(?:(\d+)M)?(?:(\d+)S)?)?$/u;
+const MS_PER_SECOND = 1000;
+const SECONDS_PER_MINUTE = 60;
+const MINUTES_PER_HOUR = 60;
+const HOURS_PER_DAY = 24;
+function parseIsoDurationToMilliseconds(value) {
+    const match = ISO_DURATION_PATTERN.exec(value.trim());
+    if (!match) {
+        return null;
+    }
+    const days = readDurationUnit(match[1]);
+    const hours = readDurationUnit(match[2]);
+    const minutes = readDurationUnit(match[3]);
+    const seconds = readDurationUnit(match[4]);
+    const totalSeconds = seconds +
+        minutes * SECONDS_PER_MINUTE +
+        hours * MINUTES_PER_HOUR * SECONDS_PER_MINUTE +
+        days * HOURS_PER_DAY * MINUTES_PER_HOUR * SECONDS_PER_MINUTE;
+    return totalSeconds > 0 ? totalSeconds * MS_PER_SECOND : null;
+}
+function readDurationUnit(value) {
+    return value ? Number(value) : 0;
+}
+//# sourceMappingURL=iso-duration.js.map

package/src/lib/common/iso-duration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"iso-duration.js","sourceRoot":"","sources":["../../../../../../libs/bpm-core/src/lib/common/iso-duration.ts"],"names":[],"mappings":";;AAQA,wEAkBC;AA1BD,MAAM,oBAAoB,GACxB,wDAAwD,CAAC;AAE3D,MAAM,aAAa,GAAG,IAAI,CAAC;AAC3B,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAC9B,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAC5B,MAAM,aAAa,GAAG,EAAE,CAAC;AAEzB,SAAgB,8BAA8B,CAAC,KAAa;IAC1D,MAAM,KAAK,GAAG,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAEtD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,IAAI,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3C,MAAM,YAAY,GAChB,OAAO;QACP,OAAO,GAAG,kBAAkB;QAC5B,KAAK,GAAG,gBAAgB,GAAG,kBAAkB;QAC7C,IAAI,GAAG,aAAa,GAAG,gBAAgB,GAAG,kBAAkB,CAAC;IAE/D,OAAO,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,GAAG,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC;AAChE,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAyB;IACjD,OAAO,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACnC,CAAC"}

package/src/lib/condition/condition.module.d.ts

@@ -0,0 +1,2 @@
+export declare class ConditionModule {
+}

package/src/lib/condition/condition.module.js

@@ -0,0 +1,16 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ConditionModule = void 0;
+const tslib_1 = require("tslib");
+const common_1 = require("@nestjs/common");
+const condition_service_1 = require("./condition.service");
+let ConditionModule = class ConditionModule {
+};
+exports.ConditionModule = ConditionModule;
+exports.ConditionModule = ConditionModule = tslib_1.__decorate([
+    (0, common_1.Module)({
+        providers: [condition_service_1.ConditionService],
+        exports: [condition_service_1.ConditionService],
+    })
+], ConditionModule);
+//# sourceMappingURL=condition.module.js.map

package/src/lib/condition/condition.module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"condition.module.js","sourceRoot":"","sources":["../../../../../../libs/bpm-core/src/lib/condition/condition.module.ts"],"names":[],"mappings":";;;;AAAA,2CAAwC;AACxC,2DAAuD;AAMhD,IAAM,eAAe,GAArB,MAAM,eAAe;CAAG,CAAA;AAAlB,0CAAe;0BAAf,eAAe;IAJ3B,IAAA,eAAM,EAAC;QACN,SAAS,EAAE,CAAC,oCAAgB,CAAC;QAC7B,OAAO,EAAE,CAAC,oCAAgB,CAAC;KAC5B,CAAC;GACW,eAAe,CAAG"}

package/src/lib/condition/condition.service.d.ts

@@ -0,0 +1,16 @@
+interface ConditionExpression {
+    readonly expression: string | null | undefined;
+    readonly label: string;
+}
+interface ConditionLintOptions {
+    readonly allowedRootIdentifiers?: readonly string[];
+    readonly maxExpressionLength?: number;
+}
+export type CelEvaluationContext = Readonly<Record<string, unknown>>;
+export declare class ConditionService {
+    lintExpressions(expressions: readonly ConditionExpression[], options?: ConditionLintOptions): readonly string[];
+    lintExpression(expression: string | null | undefined, label: string, options?: ConditionLintOptions): readonly string[];
+    evaluateBoolean(expression: string | null | undefined, context: CelEvaluationContext, label: string): boolean;
+    evaluateValue(expression: string, context: CelEvaluationContext, label: string): unknown;
+}
+export {};

package/src/lib/condition/condition.service.js

@@ -0,0 +1,82 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ConditionService = void 0;
+const tslib_1 = require("tslib");
+const common_1 = require("@nestjs/common");
+const cel_js_1 = require("cel-js");
+const DEFAULT_MAX_EXPRESSION_LENGTH = 2000;
+const CEL_KEYWORDS = new Set(['false', 'has', 'in', 'null', 'true']);
+let ConditionService = class ConditionService {
+    lintExpressions(expressions, options = {}) {
+        return expressions.flatMap(({ expression, label }) => this.lintExpression(expression, label, options));
+    }
+    lintExpression(expression, label, options = {}) {
+        if (typeof expression === 'undefined' || expression === null) {
+            return [];
+        }
+        const trimmedExpression = expression.trim();
+        const maxExpressionLength = options.maxExpressionLength ?? DEFAULT_MAX_EXPRESSION_LENGTH;
+        if (!trimmedExpression) {
+            return [`${label} must not be blank`];
+        }
+        if (trimmedExpression.length > maxExpressionLength) {
+            return [`${label} must be ${maxExpressionLength} characters or fewer`];
+        }
+        const parseResult = (0, cel_js_1.parse)(trimmedExpression);
+        if (isParseFailure(parseResult)) {
+            return parseResult.errors.map((error) => `${label}: ${error}`);
+        }
+        return lintRootIdentifiers(trimmedExpression, label, options);
+    }
+    evaluateBoolean(expression, context, label) {
+        if (typeof expression !== 'string' || !expression.trim()) {
+            return true;
+        }
+        const value = this.evaluateValue(expression, context, label);
+        if (typeof value === 'boolean') {
+            return value;
+        }
+        throw new common_1.BadRequestException(`${label} must evaluate to a boolean`);
+    }
+    evaluateValue(expression, context, label) {
+        const trimmedExpression = expression.trim();
+        const lengthErrors = this.lintExpression(trimmedExpression, label);
+        if (lengthErrors.length) {
+            throw new common_1.BadRequestException(lengthErrors.join('; '));
+        }
+        const parseResult = (0, cel_js_1.parse)(trimmedExpression);
+        if (isParseFailure(parseResult)) {
+            throw new common_1.BadRequestException(parseResult.errors.map((error) => `${label}: ${error}`).join('; '));
+        }
+        try {
+            return (0, cel_js_1.evaluate)(parseResult.cst, { ...context });
+        }
+        catch (error) {
+            throw new common_1.BadRequestException(error instanceof Error ? `${label}: ${error.message}` : label);
+        }
+    }
+};
+exports.ConditionService = ConditionService;
+exports.ConditionService = ConditionService = tslib_1.__decorate([
+    (0, common_1.Injectable)()
+], ConditionService);
+function isParseFailure(parseResult) {
+    return !parseResult.isSuccess;
+}
+function lintRootIdentifiers(expression, label, options) {
+    const allowedRootIdentifiers = options.allowedRootIdentifiers;
+    if (!allowedRootIdentifiers?.length) {
+        return [];
+    }
+    const allowed = new Set([...allowedRootIdentifiers, ...CEL_KEYWORDS]);
+    const sanitizedExpression = stripStringLiterals(expression);
+    const identifiers = Array.from(sanitizedExpression.matchAll(/(^|[^A-Za-z0-9_.])([A-Za-z_][A-Za-z0-9_]*)/gu)).map((match) => match[2]);
+    const unknownIdentifiers = [
+        ...new Set(identifiers.filter((identifier) => !allowed.has(identifier))),
+    ];
+    return unknownIdentifiers.map((identifier) => `${label} references unsupported identifier ${identifier}`);
+}
+function stripStringLiterals(expression) {
+    return expression.replace(/"([^"\\]|\\.)*"|'([^'\\]|\\.)*'/gu, '""');
+}
+//# sourceMappingURL=condition.service.js.map

package/src/lib/condition/condition.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"condition.service.js","sourceRoot":"","sources":["../../../../../../libs/bpm-core/src/lib/condition/condition.service.ts"],"names":[],"mappings":";;;;AAAA,2CAAiE;AACjE,mCAAyE;AAczE,MAAM,6BAA6B,GAAG,IAAI,CAAC;AAC3C,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAG9D,IAAM,gBAAgB,GAAtB,MAAM,gBAAgB;IAC3B,eAAe,CACb,WAA2C,EAC3C,UAAgC,EAAE;QAElC,OAAO,WAAW,CAAC,OAAO,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,EAAE,CACnD,IAAI,CAAC,cAAc,CAAC,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC,CAChD,CAAC;IACJ,CAAC;IAED,cAAc,CACZ,UAAqC,EACrC,KAAa,EACb,UAAgC,EAAE;QAElC,IAAI,OAAO,UAAU,KAAK,WAAW,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;YAC7D,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,iBAAiB,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC;QAC5C,MAAM,mBAAmB,GACvB,OAAO,CAAC,mBAAmB,IAAI,6BAA6B,CAAC;QAE/D,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;QACxC,CAAC;QAED,IAAI,iBAAiB,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC;YACnD,OAAO,CAAC,GAAG,KAAK,YAAY,mBAAmB,sBAAsB,CAAC,CAAC;QACzE,CAAC;QAED,MAAM,WAAW,GAAG,IAAA,cAAK,EAAC,iBAAiB,CAAC,CAAC;QAE7C,IAAI,cAAc,CAAC,WAAW,CAAC,EAAE,CAAC;YAChC,OAAO,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,KAAK,KAAK,EAAE,CAAC,CAAC;QACjE,CAAC;QAED,OAAO,mBAAmB,CAAC,iBAAiB,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IAChE,CAAC;IAED,eAAe,CACb,UAAqC,EACrC,OAA6B,EAC7B,KAAa;QAEb,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC;YACzD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;QAE7D,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;YAC/B,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,IAAI,4BAAmB,CAAC,GAAG,KAAK,6BAA6B,CAAC,CAAC;IACvE,CAAC;IAED,aAAa,CACX,UAAkB,EAClB,OAA6B,EAC7B,KAAa;QAEb,MAAM,iBAAiB,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC;QAC5C,MAAM,YAAY,GAAG,IAAI,CAAC,cAAc,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC;QAEnE,IAAI,YAAY,CAAC,MAAM,EAAE,CAAC;YACxB,MAAM,IAAI,4BAAmB,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACzD,CAAC;QAED,MAAM,WAAW,GAAG,IAAA,cAAK,EAAC,iBAAiB,CAAC,CAAC;QAE7C,IAAI,cAAc,CAAC,WAAW,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,4BAAmB,CAC3B,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,KAAK,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CACnE,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,OAAO,IAAA,iBAAQ,EAAC,WAAW,CAAC,GAAG,EAAE,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;QACnD,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,MAAM,IAAI,4BAAmB,CAC3B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,KAAK,CAC9D,CAAC;QACJ,CAAC;IACH,CAAC;CACF,CAAA;AAtFY,4CAAgB;2BAAhB,gBAAgB;IAD5B,IAAA,mBAAU,GAAE;GACA,gBAAgB,CAsF5B;AAED,SAAS,cAAc,CAAC,WAAwB;IAC9C,OAAO,CAAC,WAAW,CAAC,SAAS,CAAC;AAChC,CAAC;AAED,SAAS,mBAAmB,CAC1B,UAAkB,EAClB,KAAa,EACb,OAA6B;IAE7B,MAAM,sBAAsB,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAE9D,IAAI,CAAC,sBAAsB,EAAE,MAAM,EAAE,CAAC;QACpC,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,sBAAsB,EAAE,GAAG,YAAY,CAAC,CAAC,CAAC;IACtE,MAAM,mBAAmB,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAC;IAC5D,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAC5B,mBAAmB,CAAC,QAAQ,CAC1B,8CAA8C,CAC/C,CACF,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,kBAAkB,GAAG;QACzB,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;KACzE,CAAC;IAEF,OAAO,kBAAkB,CAAC,GAAG,CAC3B,CAAC,UAAU,EAAE,EAAE,CAAC,GAAG,KAAK,sCAAsC,UAAU,EAAE,CAC3E,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,UAAkB;IAC7C,OAAO,UAAU,CAAC,OAAO,CAAC,mCAAmC,EAAE,IAAI,CAAC,CAAC;AACvE,CAAC"}

package/src/lib/condition/index.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const tslib_1 = require("tslib");
+tslib_1.__exportStar(require("./condition.module"), exports);
+tslib_1.__exportStar(require("./condition.service"), exports);
+//# sourceMappingURL=index.js.map

package/src/lib/condition/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../libs/bpm-core/src/lib/condition/index.ts"],"names":[],"mappings":";;;AAAA,6DAAmC;AACnC,8DAAoC"}

package/src/lib/database/data-source.d.ts

@@ -0,0 +1,4 @@
+import 'reflect-metadata';
+import { DataSource } from 'typeorm';
+declare const _default: Promise<DataSource>;
+export default _default;

package/src/lib/database/data-source.js

@@ -0,0 +1,7 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+require("reflect-metadata");
+const typeorm_1 = require("typeorm");
+const typeorm_config_1 = require("./typeorm.config");
+exports.default = (0, typeorm_config_1.buildDataSourceOptionsFromVaultEnv)(process.env).then((options) => new typeorm_1.DataSource(options));
+//# sourceMappingURL=data-source.js.map

package/src/lib/database/data-source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"data-source.js","sourceRoot":"","sources":["../../../../../../libs/bpm-core/src/lib/database/data-source.ts"],"names":[],"mappings":";;AAAA,4BAA0B;AAC1B,qCAAqC;AACrC,qDAAsE;AAEtE,kBAAe,IAAA,mDAAkC,EAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CACjE,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,oBAAU,CAAC,OAAO,CAAC,CACrC,CAAC"}

package/src/lib/database/index.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const tslib_1 = require("tslib");
+tslib_1.__exportStar(require("./typeorm.config"), exports);
+tslib_1.__exportStar(require("../migrations"), exports);
+//# sourceMappingURL=index.js.map

package/src/lib/database/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../libs/bpm-core/src/lib/database/index.ts"],"names":[],"mappings":";;;AAAA,2DAAiC;AACjC,wDAA8B"}

package/src/lib/database/migration-runner.d.ts

@@ -0,0 +1 @@
+export {};

package/src/lib/database/migration-runner.js

@@ -0,0 +1,25 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const data_source_1 = require("./data-source");
+const reconcile_legacy_migrations_1 = require("./reconcile-legacy-migrations");
+async function run() {
+    const action = process.argv[2] ?? 'run';
+    const source = await data_source_1.default;
+    await source.initialize();
+    try {
+        if (action === 'revert') {
+            await source.undoLastMigration();
+            return;
+        }
+        await (0, reconcile_legacy_migrations_1.reconcileLegacyMigrationNames)(source);
+        await source.runMigrations();
+    }
+    finally {
+        await source.destroy();
+    }
+}
+void run().catch((error) => {
+    console.error(error);
+    process.exit(1);
+});
+//# sourceMappingURL=migration-runner.js.map

package/src/lib/database/migration-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"migration-runner.js","sourceRoot":"","sources":["../../../../../../libs/bpm-core/src/lib/database/migration-runner.ts"],"names":[],"mappings":";;AAAA,+CAAuC;AACvC,+EAA8E;AAE9E,KAAK,UAAU,GAAG;IAChB,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC;IACxC,MAAM,MAAM,GAAG,MAAM,qBAAU,CAAC;IAEhC,MAAM,MAAM,CAAC,UAAU,EAAE,CAAC;IAE1B,IAAI,CAAC;QACH,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YACxB,MAAM,MAAM,CAAC,iBAAiB,EAAE,CAAC;YACjC,OAAO;QACT,CAAC;QAED,MAAM,IAAA,2DAA6B,EAAC,MAAM,CAAC,CAAC;QAC5C,MAAM,MAAM,CAAC,aAAa,EAAE,CAAC;IAC/B,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;IACzB,CAAC;AACH,CAAC;AAED,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;IAClC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACrB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/src/lib/database/reconcile-legacy-migrations.d.ts

@@ -0,0 +1,13 @@
+import { DataSource } from 'typeorm';
+/**
+ * Rename any legacy-named migration tracking rows to their current class names
+ * so `runMigrations()` recognises them as already applied. Idempotent and safe
+ * on fresh databases (no `migrations` table yet → no-op) and on
+ * already-reconciled databases (target name present → skip).
+ *
+ * MUST be invoked *before* `DataSource.runMigrations()`, since TypeORM freezes
+ * its pending-migration set at the start of that call.
+ *
+ * @returns the number of tracking rows renamed.
+ */
+export declare function reconcileLegacyMigrationNames(dataSource: DataSource): Promise<number>;

package/src/lib/database/reconcile-legacy-migrations.js

@@ -0,0 +1,70 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.reconcileLegacyMigrationNames = reconcileLegacyMigrationNames;
+/**
+ * Legacy (date-stamped) -> current (sequential) migration class names.
+ *
+ * Early BPMCore migrations were named with date-based timestamps
+ * (`...2026050202000`); they were later renamed to a zero-padded sequential
+ * scheme (`...0000000002000`). TypeORM keys idempotency on `migrations.name`,
+ * so any database whose `migrations` table still holds the old names would see
+ * the renamed classes as *pending* and try to re-run their `up()` — failing on
+ * already-existing objects (e.g. duplicate constraints).
+ *
+ * Each pair maps the exact same migration (same already-applied SQL); only the
+ * class name's numeric suffix changed. Reconciling the tracking-table rows is a
+ * metadata-only correction — it changes no schema.
+ */
+const LEGACY_MIGRATION_RENAMES = [
+    [
+        'EnablePostgresExtensions2026043000000',
+        'EnablePostgresExtensions0000000000001',
+    ],
+    [
+        'IdentityOrganizationFoundation2026043001000',
+        'IdentityOrganizationFoundation0000000001000',
+    ],
+    ['FormBuilderFoundation2026050202000', 'FormBuilderFoundation0000000002000'],
+    [
+        'ApprovalTemplateFoundation2026050403000',
+        'ApprovalTemplateFoundation0000000003000',
+    ],
+    [
+        'WorkflowEngineFoundation2026050404000',
+        'WorkflowEngineFoundation0000000004000',
+    ],
+    [
+        'ApprovalTemplateCategories2026051208000',
+        'ApprovalTemplateCategories0000000008000',
+    ],
+    ['TaskCandidates2026051309000', 'TaskCandidates0000000009000'],
+];
+/**
+ * Rename any legacy-named migration tracking rows to their current class names
+ * so `runMigrations()` recognises them as already applied. Idempotent and safe
+ * on fresh databases (no `migrations` table yet → no-op) and on
+ * already-reconciled databases (target name present → skip).
+ *
+ * MUST be invoked *before* `DataSource.runMigrations()`, since TypeORM freezes
+ * its pending-migration set at the start of that call.
+ *
+ * @returns the number of tracking rows renamed.
+ */
+async function reconcileLegacyMigrationNames(dataSource) {
+    const tableProbe = (await dataSource.query(`SELECT to_regclass('migrations') AS migrations_table`));
+    if (!tableProbe[0]?.migrations_table) {
+        return 0;
+    }
+    return dataSource.transaction(async (manager) => {
+        return LEGACY_MIGRATION_RENAMES.reduce(async (countPromise, [legacyName, currentName]) => {
+            const count = await countPromise;
+            const alreadyCurrent = (await manager.query('SELECT 1 FROM migrations WHERE name = $1 LIMIT 1', [currentName]));
+            if (alreadyCurrent.length > 0) {
+                return count;
+            }
+            const result = (await manager.query('UPDATE migrations SET name = $1 WHERE name = $2', [currentName, legacyName]));
+            return count + (Number(result[1]) || 0);
+        }, Promise.resolve(0));
+    });
+}
+//# sourceMappingURL=reconcile-legacy-migrations.js.map