gdc-common-utils-ts 2.5.2 → 2.5.4

package/dist/utils/organization-employee-lifecycle.js

@@ -0,0 +1,125 @@
+import { ClaimsIndividualProductSchemaorg, ClaimsPersonSchemaorg } from '../constants/schemaorg.js';
+import { DeviceBindingStatuses } from '../constants/device.js';
+import { EmployeeDirectoryStatuses } from '../constants/employee-lifecycle.js';
+import { IdentityAuthRequestFields, IdentityAuthResponseEntryTypes, } from '../constants/identity-auth.js';
+import { DEFAULT_LICENSE_DEVICE_ALLOWANCE } from './license.js';
+/** Builds the exact identity/auth revoke request body from a typed target. */
+export function buildEmployeeDeviceRevocationBody(target) {
+    return Object.freeze({
+        [IdentityAuthRequestFields.LicenseId]: target.licenseId,
+        [IdentityAuthRequestFields.ClientId]: target.clientId,
+    });
+}
+/** Reads an employee activation credential from canonical and legacy GW envelopes. */
+export function readEmployeeActivationCode(value) {
+    for (const candidate of listNestedRecords(value)) {
+        if (candidate.type === IdentityAuthResponseEntryTypes.LicenseIssued) {
+            const issuedId = text(candidate.id);
+            if (issuedId)
+                return issuedId;
+        }
+        const claims = record(candidate.claims) || record(record(candidate.meta)?.claims);
+        const serial = text(claims?.[ClaimsIndividualProductSchemaorg.serialNumber]);
+        if (serial)
+            return serial;
+    }
+    return '';
+}
+/** Extracts GW search rows regardless of async job envelope depth. */
+export function extractGwSearchResources(value) {
+    for (const candidate of listNestedRecords(value)) {
+        const data = record(candidate.resource)?.data || candidate.data;
+        if (Array.isArray(data))
+            return data.map(record).filter(isRecord);
+    }
+    return [];
+}
+/** Combines employee directory and license search results into one typed view. */
+export function projectOrganizationEmployeeLifecycle(input) {
+    const licenses = extractGwSearchResources(input.licenseResponse);
+    return extractGwSearchResources(input.employeeResponse).map((employee) => {
+        const claims = record(employee.claims) || record(record(employee.meta)?.claims) || {};
+        const resourceId = text(employee.id);
+        const employeeDid = text(claims[ClaimsPersonSchemaorg.identifier]);
+        const license = licenses.find((candidate) => {
+            const meta = record(candidate.meta) || {};
+            const subjectId = text(meta.subjectId);
+            return subjectId === resourceId || subjectId === employeeDid;
+        });
+        const status = normalizeEmployeeDirectoryStatus(text(employee.status) || text(record(employee.meta)?.status));
+        if (!license)
+            return {
+                resourceId,
+                email: text(claims[ClaimsPersonSchemaorg.email]),
+                roleCode: text(claims[ClaimsPersonSchemaorg.hasOccupationalRoleValue]),
+                employeeDid,
+                status,
+            };
+        const meta = record(license.meta) || {};
+        const bindings = Array.isArray(meta.deviceBindings) ? meta.deviceBindings.map(record).filter(isRecord) : [];
+        const devices = bindings.map((binding) => {
+            const info = record(binding.deviceInfo) || {};
+            const clientId = text(binding.clientId);
+            return {
+                clientId,
+                name: text(info.model) || text(info.clientInstanceId) || clientId,
+                status: binding.status === DeviceBindingStatuses.Revoked
+                    ? DeviceBindingStatuses.Revoked
+                    : DeviceBindingStatuses.Active,
+            };
+        }).filter((device) => Boolean(device.clientId));
+        return {
+            resourceId,
+            email: text(claims[ClaimsPersonSchemaorg.email]),
+            roleCode: text(claims[ClaimsPersonSchemaorg.hasOccupationalRoleValue]),
+            employeeDid,
+            status,
+            license: {
+                id: text(license.id),
+                status: text(meta.status),
+                maxDevices: positiveInteger(meta.maxDevices) || DEFAULT_LICENSE_DEVICE_ALLOWANCE,
+                activeDevices: devices.filter((device) => device.status === DeviceBindingStatuses.Active).length,
+                devices,
+            },
+        };
+    }).filter((employee) => Boolean(employee.resourceId));
+}
+function normalizeEmployeeDirectoryStatus(value) {
+    return Object.values(EmployeeDirectoryStatuses).includes(value)
+        ? value
+        : EmployeeDirectoryStatuses.Unknown;
+}
+function listNestedRecords(root) {
+    const result = [];
+    const pending = [root];
+    const visited = new Set();
+    while (pending.length > 0) {
+        const value = pending.shift();
+        if (!value || typeof value !== 'object' || visited.has(value))
+            continue;
+        visited.add(value);
+        if (Array.isArray(value)) {
+            pending.push(...value);
+            continue;
+        }
+        const item = value;
+        result.push(item);
+        pending.push(...Object.values(item));
+    }
+    return result;
+}
+function record(value) {
+    return value && typeof value === 'object' && !Array.isArray(value)
+        ? value
+        : undefined;
+}
+function isRecord(value) {
+    return Boolean(value);
+}
+function text(value) {
+    return typeof value === 'string' ? value.trim() : '';
+}
+function positiveInteger(value) {
+    const parsed = Number(value);
+    return Number.isInteger(parsed) && parsed > 0 ? parsed : undefined;
+}

package/dist/utils/vp-token.d.ts

@@ -103,12 +103,14 @@ export declare function getOrganizationCredentialFromVpToken(vpToken: string): V
  */
 export declare function getLegalRepresentativeCredentialFromVpToken(vpToken: string): VpCredential | undefined;
 /**
- * Extracts the organization-controller service credential from a VP token
+ * Extracts the service-controller credential from a VP token
  * when present. It never substitutes a legal-representative credential.
  *
  * @param vpToken Compact VP token or raw JSON string.
  */
 export declare function getOrganizationControllerCredentialFromVpToken(vpToken: string): VpCredential | undefined;
+/** Canonical name for `getOrganizationControllerCredentialFromVpToken`. */
+export declare const getServiceControllerCredentialFromVpToken: typeof getOrganizationControllerCredentialFromVpToken;
 /**
  * Appends an organization activation credential after validating its VC type.
  *
@@ -129,6 +131,8 @@ export declare function addLegalRepresentativeCredential(vpPayload: VpTokenPaylo
  * Accepts compact VC strings, raw JSON VC strings, or VC JSON objects.
  */
 export declare function addOrganizationControllerCredential(vpPayload: VpTokenPayload, vc: VpCredentialInput): VpTokenPayload;
+/** Canonical name for `addOrganizationControllerCredential`. */
+export declare const addServiceControllerCredential: typeof addOrganizationControllerCredential;
 export declare function prepareForSignature(header: VpTokenHeader, payload: VpTokenPayload): {
     encodedHeader: string;
     encodedPayload: string;

package/dist/utils/vp-token.js

@@ -190,7 +190,7 @@ export function getLegalRepresentativeCredentialFromVpToken(vpToken) {
     return getVpCredentialByAnyType(vpToken, [...REPRESENTATIVE_ACTIVATION_VC_TYPES]);
 }
 /**
- * Extracts the organization-controller service credential from a VP token
+ * Extracts the service-controller credential from a VP token
  * when present. It never substitutes a legal-representative credential.
  *
  * @param vpToken Compact VP token or raw JSON string.
@@ -198,6 +198,8 @@ export function getLegalRepresentativeCredentialFromVpToken(vpToken) {
 export function getOrganizationControllerCredentialFromVpToken(vpToken) {
     return getVpCredentialByAnyType(vpToken, [...ORGANIZATION_CONTROLLER_ACTIVATION_VC_TYPES]);
 }
+/** Canonical name for `getOrganizationControllerCredentialFromVpToken`. */
+export const getServiceControllerCredentialFromVpToken = getOrganizationControllerCredentialFromVpToken;
 function vcHasAnyType(vcPayload, acceptedTypes) {
     if (!vcPayload)
         return false;
@@ -238,8 +240,10 @@ export function addLegalRepresentativeCredential(vpPayload, vc) {
  * Accepts compact VC strings, raw JSON VC strings, or VC JSON objects.
  */
 export function addOrganizationControllerCredential(vpPayload, vc) {
-    return addTypedVC(vpPayload, vc, [...ORGANIZATION_CONTROLLER_ACTIVATION_VC_TYPES], 'OrganizationController');
+    return addTypedVC(vpPayload, vc, [...ORGANIZATION_CONTROLLER_ACTIVATION_VC_TYPES], 'ServiceController');
 }
+/** Canonical name for `addOrganizationControllerCredential`. */
+export const addServiceControllerCredential = addOrganizationControllerCredential;
 export function prepareForSignature(header, payload) {
     return prepareJwtForSignature(header, payload);
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gdc-common-utils-ts",
-  "version": "2.5.2",
+  "version": "2.5.4",
   "publishConfig": {
     "access": "public"
   },