@wildo-ai/saas-backend-lib 1.0.1

package/dist/esm/notifications/webhooks/services/webhook-handler.backend.service.js

@@ -0,0 +1,396 @@
+/**
+ * Webhook Handler Backend Service
+ *
+ * Generic pipeline that processes incoming webhook events through:
+ * 1. Signature verification (via capability adapter)
+ * 2. Event parsing (via capability adapter)
+ * 3. Idempotency check (Redis)
+ * 4. Declarative scope resolution (via Hook_EndpointScopeBinding config)
+ * 5. WEBHOOK_CALLBACK ExecutionContext creation
+ *
+ * The pipeline is provider-agnostic. Provider-specific logic is injected via:
+ * - WebhookCapabilityAdapter (verify + parse)
+ * - Hook_EndpointScopeBinding configuration (declarative scope resolution)
+ * - Hook_ScopeResolverStrategy (optional escape hatch)
+ *
+ * @see hook-protocol-webhook-callback.md
+ */
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+import { injectable, inject } from 'inversify';
+import { ExternalProvider_ExchangeProtocol_Kind, } from '@wildo-ai/external-connectors-models';
+import { ErrorType, CoreResourceOperation } from '@wildo-ai/saas-models';
+import { SAAS_SERVICE_TYPES } from '../../../inject/models/service-types.js';
+// =====================================================
+// Constants
+// =====================================================
+/** Default idempotency TTL: 24 hours */
+const DEFAULT_IDEMPOTENCY_TTL_SECONDS = 24 * 60 * 60;
+const IDEMPOTENCY_KEY_PREFIX = 'webhook:';
+// =====================================================
+// Service
+// =====================================================
+let WebhookHandlerBackendService = class WebhookHandlerBackendService {
+    logger;
+    redisService;
+    errorBuilder;
+    executionContextCreator;
+    repositoriesRegistry;
+    providerRegistry;
+    appConfigService;
+    polymorphicLookup;
+    logDebug;
+    /** Capability adapters keyed by "providerRef:endpointKey" */
+    adapters = new Map();
+    /** Custom scope resolvers (escape hatch), keyed by "providerRef:endpointKey" */
+    customResolvers = new Map();
+    constructor(logger, redisService, errorBuilder, executionContextCreator, repositoriesRegistry, providerRegistry, appConfigService, polymorphicLookup) {
+        this.logger = logger;
+        this.redisService = redisService;
+        this.errorBuilder = errorBuilder;
+        this.executionContextCreator = executionContextCreator;
+        this.repositoriesRegistry = repositoriesRegistry;
+        this.providerRegistry = providerRegistry;
+        this.appConfigService = appConfigService;
+        this.polymorphicLookup = polymorphicLookup;
+        this.logDebug = this.logger.debugByType('WebhookHandler');
+        this.logger.setDebugTypeLogging('WebhookHandler', false);
+    }
+    // ════════════════════════════════════════════════════════════
+    // Registration
+    // ════════════════════════════════════════════════════════════
+    /**
+     * Register a capability adapter for a specific provider endpoint.
+     * Called at startup by capability modules (e.g., billing module).
+     */
+    registerAdapter(providerRef, endpointKey, adapter) {
+        const key = `${providerRef}:${endpointKey}`;
+        this.adapters.set(key, adapter);
+        this.logDebug(`Registered webhook adapter for ${key}`);
+    }
+    /**
+     * Register a custom scope resolver to override declarative scope resolution.
+     * This is an escape hatch for complex cases where Hook_EndpointScopeBinding is insufficient.
+     */
+    registerCustomScopeResolver(resolver) {
+        const key = `${resolver.providerRef}:${resolver.endpointKey}`;
+        this.customResolvers.set(key, resolver);
+        this.logDebug(`Registered custom scope resolver for ${key}`);
+    }
+    // ════════════════════════════════════════════════════════════
+    // Main Pipeline
+    // ════════════════════════════════════════════════════════════
+    /**
+     * Process a raw webhook through the full pipeline.
+     * Called by WebhookAutoControllerBackendService's auto-registered routes.
+     *
+     * Returns null if the event was already processed (idempotent) or unparseable (acknowledged).
+     * Throws on signature failure, scope extraction failure, or handler errors.
+     */
+    async processWebhook(params) {
+        const { providerRef, endpointKey, endpoint, rawBody, headers } = params;
+        const adapterKey = `${providerRef}:${endpointKey}`;
+        const adapter = this.adapters.get(adapterKey);
+        if (!adapter) {
+            throw this.errorBuilder.buildError(ErrorType.INTERNAL, undefined, { context: { message: `No webhook adapter registered for ${adapterKey}` } });
+        }
+        // 1. Resolve webhook secret from app configuration
+        const secret = await this.resolveWebhookSecret(providerRef, endpointKey);
+        // 2. Verify signature via capability adapter
+        const signatureHeader = headers[endpoint.signatureConfig.headerName] ?? '';
+        try {
+            const isValid = await adapter.verifySignature(rawBody, signatureHeader, secret);
+            if (!isValid) {
+                throw this.errorBuilder.buildError(ErrorType.AUTHORIZATION, undefined, { context: { message: 'Invalid webhook signature' } });
+            }
+        }
+        catch (error) {
+            if (error?.errorType === ErrorType.AUTHORIZATION)
+                throw error;
+            this.logger.error('Webhook signature verification error', { error: error.message, providerRef, endpointKey });
+            throw this.errorBuilder.buildError(ErrorType.AUTHORIZATION, undefined, { context: { message: 'Webhook signature verification failed' } });
+        }
+        // 3. Parse event via capability adapter → StandardHook_ParsedEvent
+        const parsedEvent = adapter.parseEvent(rawBody, headers);
+        if (!parsedEvent) {
+            // Unknown event type — acknowledge to stop retries
+            this.logDebug('Unparseable/unknown webhook event — acknowledging', { providerRef, endpointKey });
+            return null;
+        }
+        // Enrich with endpoint key
+        parsedEvent.endpointKey = endpointKey;
+        // 4. Idempotency check (Redis)
+        try {
+            const idempotencyKey = `${IDEMPOTENCY_KEY_PREFIX}${providerRef}:${endpointKey}:${parsedEvent.eventId}`;
+            const alreadyProcessed = await this.redisService.get(idempotencyKey);
+            if (alreadyProcessed) {
+                this.logDebug('Duplicate webhook event — idempotent skip', { eventId: parsedEvent.eventId });
+                return null;
+            }
+            await this.redisService.set(idempotencyKey, '1', { ttl: DEFAULT_IDEMPOTENCY_TTL_SECONDS });
+        }
+        catch (redisError) {
+            // Graceful degradation — process without idempotency
+            this.logger.error('Redis unavailable for webhook idempotency check — processing without', {
+                error: redisError.message,
+            });
+        }
+        // 5. Resolve scope (declarative or custom)
+        const resolvedScope = await this.resolveScope(providerRef, endpointKey, endpoint, parsedEvent);
+        // 6. Create WEBHOOK_CALLBACK ExecutionContext
+        const executionContext = await this.executionContextCreator.createForWebhookCallback(resolvedScope, parsedEvent);
+        this.logger.info('Webhook event processed', {
+            providerRef,
+            endpointKey,
+            eventId: parsedEvent.eventId,
+            eventType: parsedEvent.eventType,
+            resolvedScope: {
+                organizationId: resolvedScope.organizationId,
+                userId: resolvedScope.userId,
+            },
+        });
+        return { executionContext, parsedEvent };
+    }
+    // ════════════════════════════════════════════════════════════
+    // Declarative Scope Resolution
+    // ════════════════════════════════════════════════════════════
+    /**
+     * Resolve the engine scope from a webhook event.
+     *
+     * Priority:
+     * 1. Custom resolver (escape hatch) if registered for this endpoint
+     * 2. Declarative resolution via Hook_EndpointScopeBinding config
+     */
+    async resolveScope(providerRef, endpointKey, endpoint, parsedEvent) {
+        // Check custom resolver first (escape hatch)
+        const customResolver = this.customResolvers.get(`${providerRef}:${endpointKey}`);
+        if (customResolver) {
+            return customResolver.resolveScope(parsedEvent);
+        }
+        const applicationId = this.appConfigService.applicationId;
+        const binding = endpoint.scopeBinding;
+        // APPLICATION scope — no lookup needed
+        if ('primaryScope' in binding && binding.primaryScope === 'APPLICATION') {
+            return { applicationId };
+        }
+        // Check scope-exempt events (e.g., product.updated → APPLICATION scope)
+        if ('scopeExemptEventTypes' in binding && binding.scopeExemptEventTypes?.includes(parsedEvent.providerEventType)) {
+            this.logDebug('Scope-exempt event type — using APPLICATION scope', {
+                eventType: parsedEvent.providerEventType,
+            });
+            return { applicationId };
+        }
+        // ─── Polymorphic mode ───
+        // Queries N variant collections and resolves scope from whichever variant matches.
+        if ('mode' in binding && binding.mode === 'polymorphic') {
+            return this.resolvePolymorphicScope(binding, parsedEvent, applicationId);
+        }
+        // ─── Single-scope mode ───
+        // After APPLICATION and polymorphic early returns, narrow to single-scope binding.
+        const singleBinding = binding;
+        // Extract scope ID from payload using configured dot-path
+        const scopeId = this.extractFromPayload(parsedEvent.rawPayload, singleBinding.payloadScopeIdPath);
+        if (!scopeId) {
+            throw this.errorBuilder.buildError(ErrorType.INTERNAL, undefined, {
+                context: {
+                    message: `Webhook scope resolution failed: no value at path '${singleBinding.payloadScopeIdPath}' in event ${parsedEvent.eventId}`,
+                },
+            });
+        }
+        // Lookup resource to find the scope entity ID.
+        const internalCtx = await this.executionContextCreator.createForInternalSystemOperation();
+        const repository = this.repositoriesRegistry.getRepository(singleBinding.lookupResourceType);
+        if (!repository) {
+            this.logger.warn('Webhook scope resolution: repository not found', {
+                lookupResourceType: singleBinding.lookupResourceType,
+                eventId: parsedEvent.eventId,
+            });
+            return { applicationId };
+        }
+        let resource;
+        try {
+            const results = await repository.doByPath({ resourceIdentifier: singleBinding.lookupResourceType, operationIdentifier: CoreResourceOperation.LIST }, internalCtx, { [singleBinding.lookupField]: scopeId });
+            resource = Array.isArray(results) ? results[0] : results;
+        }
+        catch (lookupError) {
+            this.logger.warn('Webhook scope resolution: lookup failed', {
+                lookupResourceType: singleBinding.lookupResourceType,
+                lookupField: singleBinding.lookupField,
+                scopeId,
+                eventId: parsedEvent.eventId,
+                error: lookupError.message,
+            });
+            return { applicationId };
+        }
+        if (!resource) {
+            this.logger.warn('Webhook scope resolution: resource not found', {
+                lookupResourceType: singleBinding.lookupResourceType,
+                lookupField: singleBinding.lookupField,
+                scopeId,
+                eventId: parsedEvent.eventId,
+            });
+            return { applicationId };
+        }
+        // Extract scope entity ID
+        const scopeEntityIdField = singleBinding.scopeEntityIdField ?? this.defaultScopeField(singleBinding.primaryScope);
+        const resolvedEntityId = resource[scopeEntityIdField];
+        if (!resolvedEntityId) {
+            this.logger.warn('Webhook scope resolution: entity ID field empty on resource', {
+                scopeEntityIdField,
+                lookupResourceType: singleBinding.lookupResourceType,
+                eventId: parsedEvent.eventId,
+            });
+            return { applicationId };
+        }
+        // Map to engine scope
+        const scope = {
+            applicationId,
+            providerScopeIds: { [singleBinding.lookupField]: scopeId },
+        };
+        switch (singleBinding.primaryScope) {
+            case 'ORGANIZATIONS':
+                scope.organizationId = resolvedEntityId;
+                break;
+            case 'USER_SELF':
+                scope.userId = resolvedEntityId;
+                break;
+        }
+        return scope;
+    }
+    /**
+     * Resolve scope using polymorphic lookup — queries N variant collections.
+     * Delegates to PolymorphicLookupBackendService for the multi-collection query,
+     * then maps the result to the engine scope.
+     */
+    async resolvePolymorphicScope(binding, parsedEvent, applicationId) {
+        // Resolve the payload path — check per-event-type override first, then fall back to default
+        const effectiveScopeIdPath = binding.eventTypeOverrides?.[parsedEvent.providerEventType]?.payloadScopeIdPath
+            ?? binding.payloadScopeIdPath;
+        // Extract lookup value from payload
+        const lookupValue = this.extractFromPayload(parsedEvent.rawPayload, effectiveScopeIdPath);
+        if (!lookupValue) {
+            throw this.errorBuilder.buildError(ErrorType.INTERNAL, undefined, {
+                context: {
+                    message: `Webhook polymorphic scope resolution failed: no value at path '${effectiveScopeIdPath}' in event ${parsedEvent.eventId}`,
+                },
+            });
+        }
+        // Query across all variant collections (pass the internal context to avoid redundant creation)
+        const internalCtx = await this.executionContextCreator.createForInternalSystemOperation();
+        const result = await this.polymorphicLookup.lookupAcrossVariants(binding.variants, binding.lookupField, lookupValue, internalCtx);
+        if (!result) {
+            this.logger.warn('Webhook polymorphic scope resolution: no match in any variant', {
+                lookupField: binding.lookupField,
+                lookupValue,
+                variantCount: binding.variants.length,
+                eventId: parsedEvent.eventId,
+            });
+            return { applicationId };
+        }
+        // Read the scope entity ID from the matched document
+        const resolvedEntityId = result.document[result.parentFieldIdentifier];
+        if (!resolvedEntityId) {
+            this.logger.warn('Webhook polymorphic scope resolution: entity ID field empty on document', {
+                parentFieldIdentifier: result.parentFieldIdentifier,
+                resourceType: result.resourceType,
+                eventId: parsedEvent.eventId,
+            });
+            return { applicationId };
+        }
+        // Map to engine scope based on the parent field identifier
+        const scope = {
+            applicationId,
+            providerScopeIds: { [binding.lookupField]: lookupValue },
+        };
+        switch (result.parentFieldIdentifier) {
+            case 'organizationId':
+                scope.organizationId = resolvedEntityId;
+                break;
+            case 'userId':
+                scope.userId = resolvedEntityId;
+                break;
+            default:
+                this.logger.warn('Webhook polymorphic scope resolution: unknown parent field identifier', {
+                    parentFieldIdentifier: result.parentFieldIdentifier,
+                    resourceType: result.resourceType,
+                    eventId: parsedEvent.eventId,
+                });
+                break;
+        }
+        this.logDebug('Polymorphic scope resolved', {
+            resourceType: result.resourceType,
+            parentFieldIdentifier: result.parentFieldIdentifier,
+            resolvedEntityId,
+        });
+        return scope;
+    }
+    // ════════════════════════════════════════════════════════════
+    // Helpers
+    // ════════════════════════════════════════════════════════════
+    /** Extract a value from a nested object using dot-notation path */
+    extractFromPayload(payload, dotPath) {
+        try {
+            const result = dotPath.split('.').reduce((obj, key) => {
+                if (obj && typeof obj === 'object' && key in obj) {
+                    return obj[key];
+                }
+                return undefined;
+            }, payload);
+            return typeof result === 'string' ? result : result != null ? String(result) : null;
+        }
+        catch {
+            return null;
+        }
+    }
+    /** Resolve webhook secret from app configuration (per-endpoint or fallback) */
+    async resolveWebhookSecret(providerRef, endpointKey) {
+        const protocol = await this.providerRegistry.getProtocol(providerRef, ExternalProvider_ExchangeProtocol_Kind.WEBHOOK_ORIGINATOR);
+        if (!protocol) {
+            this.logger.warn(`No WEBHOOK_ORIGINATOR protocol found for provider ${providerRef}`);
+            return '';
+        }
+        const config = protocol.defaultConfiguration;
+        return config.endpointSecrets?.[endpointKey] ?? config.webhookSecret ?? '';
+    }
+    /** Default scope field name based on primary scope */
+    defaultScopeField(primaryScope) {
+        switch (primaryScope) {
+            case 'ORGANIZATIONS': return 'organizationId';
+            case 'USER_SELF': return 'userId';
+            default: return 'organizationId';
+        }
+    }
+    /**
+     * Admin method: clear idempotency for forced reprocessing.
+     * Use during debugging or when an event needs to be reprocessed.
+     */
+    async clearIdempotency(providerRef, endpointKey, eventId) {
+        const key = `${IDEMPOTENCY_KEY_PREFIX}${providerRef}:${endpointKey}:${eventId}`;
+        await this.redisService.del(key);
+        this.logger.info(`Cleared webhook idempotency for ${key}`);
+    }
+};
+WebhookHandlerBackendService = __decorate([
+    injectable(),
+    __param(0, inject(SAAS_SERVICE_TYPES.Logger)),
+    __param(1, inject(SAAS_SERVICE_TYPES.RedisService)),
+    __param(2, inject(SAAS_SERVICE_TYPES.ErrorBuilderService)),
+    __param(3, inject(SAAS_SERVICE_TYPES.ExecutionContextCreatorBackendService)),
+    __param(4, inject(SAAS_SERVICE_TYPES.RepositoriesRegistryHandlerService)),
+    __param(5, inject(SAAS_SERVICE_TYPES.LazyProviderRegistryService)),
+    __param(6, inject(SAAS_SERVICE_TYPES.AppConfigService)),
+    __param(7, inject(SAAS_SERVICE_TYPES.PolymorphicLookupService)),
+    __metadata("design:paramtypes", [Function, Function, Function, Function, Function, Function, Function, Function])
+], WebhookHandlerBackendService);
+export { WebhookHandlerBackendService };
+//# sourceMappingURL=webhook-handler.backend.service.js.map

package/dist/esm/notifications/webhooks/services/webhook-handler.backend.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-handler.backend.service.js","sourceRoot":"","sources":["../../../../../src/notifications/webhooks/services/webhook-handler.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;;;;;;;;;;;;;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EACL,sCAAsC,GAQvC,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAEzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AAWpF,wDAAwD;AACxD,YAAY;AACZ,wDAAwD;AAExD,wCAAwC;AACxC,MAAM,+BAA+B,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AACrD,MAAM,sBAAsB,GAAG,UAAU,CAAC;AAE1C,wDAAwD;AACxD,UAAU;AACV,wDAAwD;AAGjD,IAAM,4BAA4B,GAAlC,MAAM,4BAA4B;IAWe;IACM;IACO;IACkB;IACH;IACP;IACX;IACQ;IAhBvD,QAAQ,CAA+D;IAExF,6DAA6D;IACrD,QAAQ,GAAG,IAAI,GAAG,EAAoC,CAAC;IAE/D,gFAAgF;IACxE,eAAe,GAAG,IAAI,GAAG,EAAsC,CAAC;IAExE,YACsD,MAAqB,EACf,YAA0B,EACnB,YAAwC,EACtB,uBAA8D,EACjE,oBAA+D,EACtE,gBAAoD,EAC/D,gBAAyC,EACjC,iBAAkD;QAPpE,WAAM,GAAN,MAAM,CAAe;QACf,iBAAY,GAAZ,YAAY,CAAc;QACnB,iBAAY,GAAZ,YAAY,CAA4B;QACtB,4BAAuB,GAAvB,uBAAuB,CAAuC;QACjE,yBAAoB,GAApB,oBAAoB,CAA2C;QACtE,qBAAgB,GAAhB,gBAAgB,CAAoC;QAC/D,qBAAgB,GAAhB,gBAAgB,CAAyB;QACjC,sBAAiB,GAAjB,iBAAiB,CAAiC;QAExH,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC;QAC1D,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC;IAC3D,CAAC;IAED,+DAA+D;IAC/D,eAAe;IACf,+DAA+D;IAE/D;;;OAGG;IACH,eAAe,CAAC,WAAmB,EAAE,WAAmB,EAAE,OAAiC;QACzF,MAAM,GAAG,GAAG,GAAG,WAAW,IAAI,WAAW,EAAE,CAAC;QAC5C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAChC,IAAI,CAAC,QAAQ,CAAC,kCAAkC,GAAG,EAAE,CAAC,CAAC;IACzD,CAAC;IAED;;;OAGG;IACH,2BAA2B,CAAC,QAAoC;QAC9D,MAAM,GAAG,GAAG,GAAG,QAAQ,CAAC,WAAW,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;QAC9D,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACxC,IAAI,CAAC,QAAQ,CAAC,wCAAwC,GAAG,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED,+DAA+D;IAC/D,gBAAgB;IAChB,+DAA+D;IAE/D;;;;;;OAMG;IACH,KAAK,CAAC,cAAc,CAAC,MAMpB;QACC,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;QACxE,MAAM,UAAU,GAAG,GAAG,WAAW,IAAI,WAAW,EAAE,CAAC;QACnD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAE9C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAChC,SAAS,CAAC,QAAQ,EAClB,SAAS,EACT,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,qCAAqC,UAAU,EAAE,EAAE,EAAE,CAC5E,CAAC;QACJ,CAAC;QAED,mDAAmD;QACnD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;QAEzE,6CAA6C;QAC7C,MAAM,eAAe,GAAG,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;QAC3E,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC,OAAO,EAAE,eAAe,EAAE,MAAM,CAAC,CAAC;YAChF,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAChC,SAAS,CAAC,aAAa,EACvB,SAAS,EACT,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,2BAA2B,EAAE,EAAE,CACtD,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAAa,EAAE,SAAS,KAAK,SAAS,CAAC,aAAa;gBAAE,MAAM,KAAK,CAAC;YACvE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,EAAE,EAAE,KAAK,EAAG,KAAe,CAAC,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC,CAAC;YACzH,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAChC,SAAS,CAAC,aAAa,EACvB,SAAS,EACT,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,uCAAuC,EAAE,EAAE,CAClE,CAAC;QACJ,CAAC;QAED,mEAAmE;QACnE,MAAM,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACzD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,mDAAmD;YACnD,IAAI,CAAC,QAAQ,CAAC,mDAAmD,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC,CAAC;YACjG,OAAO,IAAI,CAAC;QACd,CAAC;QACD,2BAA2B;QAC3B,WAAW,CAAC,WAAW,GAAG,WAAW,CAAC;QAEtC,+BAA+B;QAC/B,IAAI,CAAC;YACH,MAAM,cAAc,GAAG,GAAG,sBAAsB,GAAG,WAAW,IAAI,WAAW,IAAI,WAAW,CAAC,OAAO,EAAE,CAAC;YACvG,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YACrE,IAAI,gBAAgB,EAAE,CAAC;gBACrB,IAAI,CAAC,QAAQ,CAAC,2CAA2C,EAAE,EAAE,OAAO,EAAE,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC;gBAC7F,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,+BAA+B,EAAE,CAAC,CAAC;QAC7F,CAAC;QAAC,OAAO,UAAU,EAAE,CAAC;YACpB,qDAAqD;YACrD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sEAAsE,EAAE;gBACxF,KAAK,EAAG,UAAoB,CAAC,OAAO;aACrC,CAAC,CAAC;QACL,CAAC;QAED,2CAA2C;QAC3C,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;QAE/F,8CAA8C;QAC9C,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,wBAAwB,CAClF,aAAa,EACb,WAAW,CACZ,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE;YAC1C,WAAW;YACX,WAAW;YACX,OAAO,EAAE,WAAW,CAAC,OAAO;YAC5B,SAAS,EAAE,WAAW,CAAC,SAAS;YAChC,aAAa,EAAE;gBACb,cAAc,EAAE,aAAa,CAAC,cAAc;gBAC5C,MAAM,EAAE,aAAa,CAAC,MAAM;aAC7B;SACF,CAAC,CAAC;QAEH,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,CAAC;IAC3C,CAAC;IAED,+DAA+D;IAC/D,+BAA+B;IAC/B,+DAA+D;IAE/D;;;;;;OAMG;IACK,KAAK,CAAC,YAAY,CACxB,WAAmB,EACnB,WAAmB,EACnB,QAAuB,EACvB,WAAqC;QAErC,6CAA6C;QAC7C,MAAM,cAAc,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,WAAW,IAAI,WAAW,EAAE,CAAC,CAAC;QACjF,IAAI,cAAc,EAAE,CAAC;YACnB,OAAO,cAAc,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;QAClD,CAAC;QAED,MAAM,aAAa,GAAG,IAAI,CAAC,gBAAgB,CAAC,aAAa,CAAC;QAC1D,MAAM,OAAO,GAAG,QAAQ,CAAC,YAAY,CAAC;QAEtC,uCAAuC;QACvC,IAAI,cAAc,IAAI,OAAO,IAAI,OAAO,CAAC,YAAY,KAAK,aAAa,EAAE,CAAC;YACxE,OAAO,EAAE,aAAa,EAAE,CAAC;QAC3B,CAAC;QAED,wEAAwE;QACxE,IAAI,uBAAuB,IAAI,OAAO,IAAI,OAAO,CAAC,qBAAqB,EAAE,QAAQ,CAAC,WAAW,CAAC,iBAAiB,CAAC,EAAE,CAAC;YACjH,IAAI,CAAC,QAAQ,CAAC,mDAAmD,EAAE;gBACjE,SAAS,EAAE,WAAW,CAAC,iBAAiB;aACzC,CAAC,CAAC;YACH,OAAO,EAAE,aAAa,EAAE,CAAC;QAC3B,CAAC;QAED,2BAA2B;QAC3B,mFAAmF;QACnF,IAAI,MAAM,IAAI,OAAO,IAAI,OAAO,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YACxD,OAAO,IAAI,CAAC,uBAAuB,CAAC,OAAO,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC;QAC3E,CAAC;QAED,4BAA4B;QAC5B,mFAAmF;QACnF,MAAM,aAAa,GAAG,OAA6E,CAAC;QAEpG,0DAA0D;QAC1D,MAAM,OAAO,GAAG,IAAI,CAAC,kBAAkB,CAAC,WAAW,CAAC,UAAU,EAAE,aAAa,CAAC,kBAAkB,CAAC,CAAC;QAClG,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAChC,SAAS,CAAC,QAAQ,EAClB,SAAS,EACT;gBACE,OAAO,EAAE;oBACP,OAAO,EAAE,sDAAsD,aAAa,CAAC,kBAAkB,cAAc,WAAW,CAAC,OAAO,EAAE;iBACnI;aACF,CACF,CAAC;QACJ,CAAC;QAED,+CAA+C;QAC/C,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,gCAAgC,EAAE,CAAC;QAC1F,MAAM,UAAU,GAAG,IAAI,CAAC,oBAAoB,CAAC,aAAa,CAAC,aAAa,CAAC,kBAAkB,CAAC,CAAC;QAC7F,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gDAAgD,EAAE;gBACjE,kBAAkB,EAAE,aAAa,CAAC,kBAAkB;gBACpD,OAAO,EAAE,WAAW,CAAC,OAAO;aAC7B,CAAC,CAAC;YACH,OAAO,EAAE,aAAa,EAAE,CAAC;QAC3B,CAAC;QAED,IAAI,QAAa,CAAC;QAClB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,QAAQ,CACvC,EAAE,kBAAkB,EAAE,aAAa,CAAC,kBAAkB,EAAE,mBAAmB,EAAE,qBAAqB,CAAC,IAAI,EAAE,EACzG,WAAW,EACX,EAAE,CAAC,aAAa,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,CACzC,CAAC;YACF,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QAC3D,CAAC;QAAC,OAAO,WAAW,EAAE,CAAC;YACrB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,yCAAyC,EAAE;gBAC1D,kBAAkB,EAAE,aAAa,CAAC,kBAAkB;gBACpD,WAAW,EAAE,aAAa,CAAC,WAAW;gBACtC,OAAO;gBACP,OAAO,EAAE,WAAW,CAAC,OAAO;gBAC5B,KAAK,EAAG,WAAqB,CAAC,OAAO;aACtC,CAAC,CAAC;YACH,OAAO,EAAE,aAAa,EAAE,CAAC;QAC3B,CAAC;QAED,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,8CAA8C,EAAE;gBAC/D,kBAAkB,EAAE,aAAa,CAAC,kBAAkB;gBACpD,WAAW,EAAE,aAAa,CAAC,WAAW;gBACtC,OAAO;gBACP,OAAO,EAAE,WAAW,CAAC,OAAO;aAC7B,CAAC,CAAC;YACH,OAAO,EAAE,aAAa,EAAE,CAAC;QAC3B,CAAC;QAED,0BAA0B;QAC1B,MAAM,kBAAkB,GAAG,aAAa,CAAC,kBAAkB,IAAI,IAAI,CAAC,iBAAiB,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;QAClH,MAAM,gBAAgB,GAAG,QAAQ,CAAC,kBAAkB,CAAC,CAAC;QAEtD,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACtB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,6DAA6D,EAAE;gBAC9E,kBAAkB;gBAClB,kBAAkB,EAAE,aAAa,CAAC,kBAAkB;gBACpD,OAAO,EAAE,WAAW,CAAC,OAAO;aAC7B,CAAC,CAAC;YACH,OAAO,EAAE,aAAa,EAAE,CAAC;QAC3B,CAAC;QAED,sBAAsB;QACtB,MAAM,KAAK,GAA+B;YACxC,aAAa;YACb,gBAAgB,EAAE,EAAE,CAAC,aAAa,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE;SAC3D,CAAC;QACF,QAAQ,aAAa,CAAC,YAAY,EAAE,CAAC;YACnC,KAAK,eAAe;gBAClB,KAAK,CAAC,cAAc,GAAG,gBAAgB,CAAC;gBACxC,MAAM;YACR,KAAK,WAAW;gBACd,KAAK,CAAC,MAAM,GAAG,gBAAgB,CAAC;gBAChC,MAAM;QACV,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,uBAAuB,CACnC,OAAoE,EACpE,WAAqC,EACrC,aAAqB;QAErB,4FAA4F;QAC5F,MAAM,oBAAoB,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC,WAAW,CAAC,iBAAiB,CAAC,EAAE,kBAAkB;eACvG,OAAO,CAAC,kBAAkB,CAAC;QAEhC,oCAAoC;QACpC,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB,CAAC,WAAW,CAAC,UAAU,EAAE,oBAAoB,CAAC,CAAC;QAC1F,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAChC,SAAS,CAAC,QAAQ,EAClB,SAAS,EACT;gBACE,OAAO,EAAE;oBACP,OAAO,EAAE,kEAAkE,oBAAoB,cAAc,WAAW,CAAC,OAAO,EAAE;iBACnI;aACF,CACF,CAAC;QACJ,CAAC;QAED,+FAA+F;QAC/F,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,gCAAgC,EAAE,CAAC;QAC1F,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,oBAAoB,CAC9D,OAAO,CAAC,QAAQ,EAChB,OAAO,CAAC,WAAW,EACnB,WAAW,EACX,WAAW,CACZ,CAAC;QAEF,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+DAA+D,EAAE;gBAChF,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,WAAW;gBACX,YAAY,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM;gBACrC,OAAO,EAAE,WAAW,CAAC,OAAO;aAC7B,CAAC,CAAC;YACH,OAAO,EAAE,aAAa,EAAE,CAAC;QAC3B,CAAC;QAED,qDAAqD;QACrD,MAAM,gBAAgB,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;QACvE,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACtB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,yEAAyE,EAAE;gBAC1F,qBAAqB,EAAE,MAAM,CAAC,qBAAqB;gBACnD,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,OAAO,EAAE,WAAW,CAAC,OAAO;aAC7B,CAAC,CAAC;YACH,OAAO,EAAE,aAAa,EAAE,CAAC;QAC3B,CAAC;QAED,2DAA2D;QAC3D,MAAM,KAAK,GAA+B;YACxC,aAAa;YACb,gBAAgB,EAAE,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,WAAW,EAAE;SACzD,CAAC;QACF,QAAQ,MAAM,CAAC,qBAAqB,EAAE,CAAC;YACrC,KAAK,gBAAgB;gBACnB,KAAK,CAAC,cAAc,GAAG,gBAAgB,CAAC;gBACxC,MAAM;YACR,KAAK,QAAQ;gBACX,KAAK,CAAC,MAAM,GAAG,gBAAgB,CAAC;gBAChC,MAAM;YACR;gBACE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uEAAuE,EAAE;oBACxF,qBAAqB,EAAE,MAAM,CAAC,qBAAqB;oBACnD,YAAY,EAAE,MAAM,CAAC,YAAY;oBACjC,OAAO,EAAE,WAAW,CAAC,OAAO;iBAC7B,CAAC,CAAC;gBACH,MAAM;QACV,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,4BAA4B,EAAE;YAC1C,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,qBAAqB,EAAE,MAAM,CAAC,qBAAqB;YACnD,gBAAgB;SACjB,CAAC,CAAC;QAEH,OAAO,KAAK,CAAC;IACf,CAAC;IAED,+DAA+D;IAC/D,UAAU;IACV,+DAA+D;IAE/D,mEAAmE;IAC3D,kBAAkB,CAAC,OAAgB,EAAE,OAAe;QAC1D,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAU,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;gBAC7D,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,IAAK,GAA+B,EAAE,CAAC;oBAC9E,OAAQ,GAA+B,CAAC,GAAG,CAAC,CAAC;gBAC/C,CAAC;gBACD,OAAO,SAAS,CAAC;YACnB,CAAC,EAAE,OAAO,CAAC,CAAC;YACZ,OAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACtF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,+EAA+E;IACvE,KAAK,CAAC,oBAAoB,CAAC,WAAmB,EAAE,WAAmB;QACzE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,WAAW,CACtD,WAAW,EACX,sCAAsC,CAAC,kBAAkB,CAC1D,CAAC;QAEF,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,qDAAqD,WAAW,EAAE,CAAC,CAAC;YACrF,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,MAAM,GAAG,QAAQ,CAAC,oBAA2D,CAAC;QACpF,OAAO,MAAM,CAAC,eAAe,EAAE,CAAC,WAAW,CAAC,IAAI,MAAM,CAAC,aAAa,IAAI,EAAE,CAAC;IAC7E,CAAC;IAED,sDAAsD;IAC9C,iBAAiB,CAAC,YAAoB;QAC5C,QAAQ,YAAY,EAAE,CAAC;YACrB,KAAK,eAAe,CAAC,CAAC,OAAO,gBAAgB,CAAC;YAC9C,KAAK,WAAW,CAAC,CAAC,OAAO,QAAQ,CAAC;YAClC,OAAO,CAAC,CAAC,OAAO,gBAAgB,CAAC;QACnC,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,gBAAgB,CAAC,WAAmB,EAAE,WAAmB,EAAE,OAAe;QAC9E,MAAM,GAAG,GAAG,GAAG,sBAAsB,GAAG,WAAW,IAAI,WAAW,IAAI,OAAO,EAAE,CAAC;QAChF,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mCAAmC,GAAG,EAAE,CAAC,CAAC;IAC7D,CAAC;CACF,CAAA;AAzaY,4BAA4B;IADxC,UAAU,EAAE;IAYR,WAAA,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAA;IACjC,WAAA,MAAM,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAA;IACvC,WAAA,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAA;IAC9C,WAAA,MAAM,CAAC,kBAAkB,CAAC,qCAAqC,CAAC,CAAA;IAChE,WAAA,MAAM,CAAC,kBAAkB,CAAC,kCAAkC,CAAC,CAAA;IAC7D,WAAA,MAAM,CAAC,kBAAkB,CAAC,2BAA2B,CAAC,CAAA;IACtD,WAAA,MAAM,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAA;IAC3C,WAAA,MAAM,CAAC,kBAAkB,CAAC,wBAAwB,CAAC,CAAA;;GAlB3C,4BAA4B,CAyaxC"}

package/dist/esm/organizations/services/org-creation-on-registration.backend.utils.d.ts

@@ -0,0 +1,39 @@
+/**
+ * W5.4/W5.5/W5.6: Auto-create organization on user registration.
+ *
+ * When a user registers with a userType that matches an org type's
+ * `creationPolicy.createOnUserTypeRegistration[]`, auto-create an org of that type
+ * and make the user an owner-role member.
+ *
+ * orgNameSource strategies:
+ * - 'ask'  → uses the organizationName provided during registration (W5.5)
+ * - 'auto' → generates a default name from user email/name (W5.6)
+ * - 'onboarding' → defers org creation to guidance flow (W5.7, returns pending flag)
+ */
+import type { ExecutionContext } from '../../runtime/models/execution-context.backend.schemas.js';
+import type { ServicesRegistryHandlerBackendService } from '../../base-classes/services/services/services-registry-handler.backend.service.js';
+type OrgCreationPolicyDef = {
+    createOnUserTypeRegistration: string[];
+    orgNameSource: 'ask' | 'auto' | 'onboarding';
+    defaultOwnerRole?: string;
+};
+type OrgTypeDef = {
+    creationPolicy?: OrgCreationPolicyDef;
+};
+export interface OrgCreationOnRegistrationResult {
+    created: boolean;
+    organizationId?: string;
+    orgType?: string;
+    /** When orgNameSource is 'onboarding', org creation is deferred. */
+    pendingOnboarding?: boolean;
+}
+export declare function createOrgOnRegistration(ec: ExecutionContext<any>, params: {
+    userId: string;
+    userEmail: string;
+    activeUserType: string;
+    organizationName?: string;
+    organizationTypes: Record<string, OrgTypeDef> | undefined;
+    servicesRegistryHandler: ServicesRegistryHandlerBackendService;
+}): Promise<OrgCreationOnRegistrationResult>;
+export {};
+//# sourceMappingURL=org-creation-on-registration.backend.utils.d.ts.map

package/dist/esm/organizations/services/org-creation-on-registration.backend.utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"org-creation-on-registration.backend.utils.d.ts","sourceRoot":"","sources":["../../../../src/organizations/services/org-creation-on-registration.backend.utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qEAAqE,CAAC;AAC5G,OAAO,KAAK,EAAE,qCAAqC,EAAE,MAAM,6FAA6F,CAAC;AAEzJ,KAAK,oBAAoB,GAAG;IAC1B,4BAA4B,EAAE,MAAM,EAAE,CAAC;IACvC,aAAa,EAAE,KAAK,GAAG,MAAM,GAAG,YAAY,CAAC;IAC7C,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B,CAAC;AAEF,KAAK,UAAU,GAAG;IAChB,cAAc,CAAC,EAAE,oBAAoB,CAAC;CACvC,CAAC;AAEF,MAAM,WAAW,+BAA+B;IAC9C,OAAO,EAAE,OAAO,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oEAAoE;IACpE,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B;AA0BD,wBAAsB,uBAAuB,CAC3C,EAAE,EAAE,gBAAgB,CAAC,GAAG,CAAC,EACzB,MAAM,EAAE;IACN,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,GAAG,SAAS,CAAC;IAC1D,uBAAuB,EAAE,qCAAqC,CAAC;CAChE,GACA,OAAO,CAAC,+BAA+B,CAAC,CAgD1C"}

package/dist/esm/organizations/services/org-creation-on-registration.backend.utils.js

@@ -0,0 +1,73 @@
+/**
+ * W5.4/W5.5/W5.6: Auto-create organization on user registration.
+ *
+ * When a user registers with a userType that matches an org type's
+ * `creationPolicy.createOnUserTypeRegistration[]`, auto-create an org of that type
+ * and make the user an owner-role member.
+ *
+ * orgNameSource strategies:
+ * - 'ask'  → uses the organizationName provided during registration (W5.5)
+ * - 'auto' → generates a default name from user email/name (W5.6)
+ * - 'onboarding' → defers org creation to guidance flow (W5.7, returns pending flag)
+ */
+import { CoreResourceType } from '@wildo-ai/saas-models';
+/**
+ * Generates a URL-safe slug from an org name.
+ * Lowercases, replaces non-alphanumeric runs with hyphens, trims hyphens,
+ * truncates to 50 chars, and appends a short random suffix for uniqueness.
+ */
+function generateSlug(name) {
+    const base = name
+        .toLowerCase()
+        .replace(/[^a-z0-9]+/g, '-')
+        .replace(/^-+|-+$/g, '')
+        .slice(0, 42);
+    const suffix = Math.random().toString(36).slice(2, 8);
+    return base ? `${base}-${suffix}` : suffix;
+}
+/**
+ * Generates a default org name for 'auto' orgNameSource.
+ */
+function generateAutoOrgName(userEmail) {
+    const localPart = userEmail.split('@')[0] ?? 'user';
+    return `${localPart}'s Organization`;
+}
+export async function createOrgOnRegistration(ec, params) {
+    const { userId, userEmail, activeUserType, organizationName, organizationTypes, servicesRegistryHandler } = params;
+    if (!organizationTypes || Object.keys(organizationTypes).length === 0) {
+        return { created: false };
+    }
+    const matchingOrgType = Object.entries(organizationTypes).find(([, def]) => def.creationPolicy?.createOnUserTypeRegistration?.includes(activeUserType));
+    if (!matchingOrgType) {
+        return { created: false };
+    }
+    const [orgTypeName, orgTypeDef] = matchingOrgType;
+    const policy = orgTypeDef.creationPolicy;
+    if (policy.orgNameSource === 'onboarding') {
+        return { created: false, orgType: orgTypeName, pendingOnboarding: true };
+    }
+    let resolvedOrgName;
+    if (policy.orgNameSource === 'ask') {
+        if (!organizationName || organizationName.trim() === '') {
+            return { created: false };
+        }
+        resolvedOrgName = organizationName.trim();
+    }
+    else {
+        resolvedOrgName = generateAutoOrgName(userEmail);
+    }
+    const ownerRole = policy.defaultOwnerRole ?? 'org_owner';
+    const slug = generateSlug(resolvedOrgName);
+    const org = await servicesRegistryHandler.create(CoreResourceType.ORGANIZATIONS, ec, {
+        name: resolvedOrgName,
+        type: orgTypeName,
+        slug,
+    });
+    await servicesRegistryHandler.create(CoreResourceType.ORGANIZATION_MEMBERS, ec, {
+        userId,
+        organizationId: org._id,
+        roles: [ownerRole],
+    });
+    return { created: true, organizationId: org._id, orgType: orgTypeName };
+}
+//# sourceMappingURL=org-creation-on-registration.backend.utils.js.map

package/dist/esm/organizations/services/org-creation-on-registration.backend.utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"org-creation-on-registration.backend.utils.js","sourceRoot":"","sources":["../../../../src/organizations/services/org-creation-on-registration.backend.utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAuBzD;;;;GAIG;AACH,SAAS,YAAY,CAAC,IAAY;IAChC,MAAM,IAAI,GAAG,IAAI;SACd,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;SACvB,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAEhB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACtD,OAAO,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;AAC7C,CAAC;AAED;;GAEG;AACH,SAAS,mBAAmB,CAAC,SAAiB;IAC5C,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC;IACpD,OAAO,GAAG,SAAS,iBAAiB,CAAC;AACvC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,EAAyB,EACzB,MAOC;IAED,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,GAAG,MAAM,CAAC;IAEnH,IAAI,CAAC,iBAAiB,IAAI,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5B,CAAC;IAED,MAAM,eAAe,GAAG,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,CACzE,GAAG,CAAC,cAAc,EAAE,4BAA4B,EAAE,QAAQ,CAAC,cAAc,CAAC,CAC3E,CAAC;IAEF,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5B,CAAC;IAED,MAAM,CAAC,WAAW,EAAE,UAAU,CAAC,GAAG,eAAe,CAAC;IAClD,MAAM,MAAM,GAAG,UAAU,CAAC,cAAe,CAAC;IAE1C,IAAI,MAAM,CAAC,aAAa,KAAK,YAAY,EAAE,CAAC;QAC1C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC;IAC3E,CAAC;IAED,IAAI,eAAuB,CAAC;IAC5B,IAAI,MAAM,CAAC,aAAa,KAAK,KAAK,EAAE,CAAC;QACnC,IAAI,CAAC,gBAAgB,IAAI,gBAAgB,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACxD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC5B,CAAC;QACD,eAAe,GAAG,gBAAgB,CAAC,IAAI,EAAE,CAAC;IAC5C,CAAC;SAAM,CAAC;QACN,eAAe,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;IACnD,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,gBAAgB,IAAI,WAAW,CAAC;IACzD,MAAM,IAAI,GAAG,YAAY,CAAC,eAAe,CAAC,CAAC;IAE3C,MAAM,GAAG,GAAG,MAAM,uBAAuB,CAAC,MAAM,CAAe,gBAAgB,CAAC,aAAa,EAAE,EAAE,EAAE;QACjG,IAAI,EAAE,eAAe;QACrB,IAAI,EAAE,WAAW;QACjB,IAAI;KACL,CAAC,CAAC;IAEH,MAAM,uBAAuB,CAAC,MAAM,CAAC,gBAAgB,CAAC,oBAAoB,EAAE,EAAE,EAAE;QAC9E,MAAM;QACN,cAAc,EAAE,GAAG,CAAC,GAAG;QACvB,KAAK,EAAE,CAAC,SAAS,CAAC;KACnB,CAAC,CAAC;IAEH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;AAC1E,CAAC"}

package/dist/esm/organizations/services/org-member-roles-validation.backend.utils.d.ts

@@ -0,0 +1,22 @@
+/**
+ * W5.3: Validate org member roles against org type.
+ *
+ * OrganizationMember.roles must be a subset of organizationTypes[org.type].availableOrgRoles.
+ * Throws VALIDATION error if any role is invalid.
+ * No-op when organizationTypes is absent, org has no type, or no roles to validate.
+ */
+import type { ErrorBuilderBackendService } from '../../errors/services/error-builder.backend.service.js';
+import type { ExecutionContext } from '../../runtime/models/execution-context.backend.schemas.js';
+import type { ServicesRegistryHandlerBackendService } from '../../base-classes/services/services/services-registry-handler.backend.service.js';
+type OrgTypeDef = {
+    availableOrgRoles?: (string | unknown)[];
+};
+export declare function validateOrgMemberRoles(ec: ExecutionContext<any>, params: {
+    organizationId: string;
+    roles: string[];
+    organizationTypes: Record<string, OrgTypeDef> | undefined;
+    servicesRegistryHandler: ServicesRegistryHandlerBackendService;
+    errorBuilder: ErrorBuilderBackendService;
+}): Promise<void>;
+export {};
+//# sourceMappingURL=org-member-roles-validation.backend.utils.d.ts.map

package/dist/esm/organizations/services/org-member-roles-validation.backend.utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"org-member-roles-validation.backend.utils.d.ts","sourceRoot":"","sources":["../../../../src/organizations/services/org-member-roles-validation.backend.utils.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AACnH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qEAAqE,CAAC;AAC5G,OAAO,KAAK,EAAE,qCAAqC,EAAE,MAAM,6FAA6F,CAAC;AAEzJ,KAAK,UAAU,GAAG;IAAE,iBAAiB,CAAC,EAAE,CAAC,MAAM,GAAG,OAAO,CAAC,EAAE,CAAA;CAAE,CAAC;AAE/D,wBAAsB,sBAAsB,CAC1C,EAAE,EAAE,gBAAgB,CAAC,GAAG,CAAC,EACzB,MAAM,EAAE;IACN,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,GAAG,SAAS,CAAC;IAC1D,uBAAuB,EAAE,qCAAqC,CAAC;IAC/D,YAAY,EAAE,0BAA0B,CAAC;CAC1C,GACA,OAAO,CAAC,IAAI,CAAC,CAyBf"}

package/dist/esm/organizations/services/org-member-roles-validation.backend.utils.js

@@ -0,0 +1,35 @@
+/**
+ * W5.3: Validate org member roles against org type.
+ *
+ * OrganizationMember.roles must be a subset of organizationTypes[org.type].availableOrgRoles.
+ * Throws VALIDATION error if any role is invalid.
+ * No-op when organizationTypes is absent, org has no type, or no roles to validate.
+ */
+import { CoreResourceType, ErrorType, ErrorCustomMessageReference } from '@wildo-ai/saas-models';
+export async function validateOrgMemberRoles(ec, params) {
+    const { organizationId, roles, organizationTypes, servicesRegistryHandler, errorBuilder } = params;
+    if (!roles || roles.length === 0)
+        return;
+    if (!organizationTypes || Object.keys(organizationTypes).length === 0)
+        return;
+    const org = await servicesRegistryHandler.read(CoreResourceType.ORGANIZATIONS, ec, { _id: organizationId });
+    if (!org || !org.type || org.type.trim() === '')
+        return;
+    const orgTypeDef = organizationTypes[org.type];
+    if (!orgTypeDef?.availableOrgRoles || orgTypeDef.availableOrgRoles.length === 0)
+        return;
+    const allowedRoles = orgTypeDef.availableOrgRoles.map((r) => String(r));
+    const invalidRoles = roles.filter((r) => !allowedRoles.includes(r));
+    if (invalidRoles.length === 0)
+        return;
+    throw errorBuilder.buildError(ErrorType.VALIDATION, ec, {
+        customMessageReference: ErrorCustomMessageReference.SERVICE_RESOURCE_VALIDATION_FAILED,
+        context: {
+            reason: 'invalid_org_member_roles',
+            invalidRoles,
+            organizationType: org.type,
+            allowedRoles,
+        },
+    });
+}
+//# sourceMappingURL=org-member-roles-validation.backend.utils.js.map

package/dist/esm/organizations/services/org-member-roles-validation.backend.utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"org-member-roles-validation.backend.utils.js","sourceRoot":"","sources":["../../../../src/organizations/services/org-member-roles-validation.backend.utils.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,2BAA2B,EAAE,MAAM,uBAAuB,CAAC;AAQjG,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,EAAyB,EACzB,MAMC;IAED,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,YAAY,EAAE,GAAG,MAAM,CAAC;IAEnG,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACzC,IAAI,CAAC,iBAAiB,IAAI,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAE9E,MAAM,GAAG,GAAG,MAAM,uBAAuB,CAAC,IAAI,CAAe,gBAAgB,CAAC,aAAa,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,cAAc,EAAE,CAAC,CAAC;IAC1H,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO;IAExD,MAAM,UAAU,GAAG,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC/C,IAAI,CAAC,UAAU,EAAE,iBAAiB,IAAI,UAAU,CAAC,iBAAiB,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAExF,MAAM,YAAY,GAAG,UAAU,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IACxE,MAAM,YAAY,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IACpE,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAEtC,MAAM,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,EAAE;QACtD,sBAAsB,EAAE,2BAA2B,CAAC,kCAAkC;QACtF,OAAO,EAAE;YACP,MAAM,EAAE,0BAA0B;YAClC,YAAY;YACZ,gBAAgB,EAAE,GAAG,CAAC,IAAI;YAC1B,YAAY;SACb;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/esm/organizations/services/organization-custom-implementation.backend.service.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Organization Custom Implementations
+ *
+ * W5.1: Org type validation on creation.
+ * When organizationTypes config exists, validate Organization.type is a valid key.
+ * Rejects invalid types with VALIDATION error.
+ */
+import { type ResourceCustomServiceImplementationFactory } from '../../base-classes/services/services/resource-operation-custom-implementation.factory.backend.js';
+export declare function createOrganizationCreateFactories(): ResourceCustomServiceImplementationFactory[];
+//# sourceMappingURL=organization-custom-implementation.backend.service.d.ts.map

package/dist/esm/organizations/services/organization-custom-implementation.backend.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"organization-custom-implementation.backend.service.d.ts","sourceRoot":"","sources":["../../../../src/organizations/services/organization-custom-implementation.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AASH,OAAO,EAEL,KAAK,0CAA0C,EAChD,MAAM,4GAA4G,CAAC;AAgDpH,wBAAgB,iCAAiC,IAAI,0CAA0C,EAAE,CAuChG"}