gdc-sdk-node-ts 2.4.13 → 2.4.15

package/dist/node-runtime-client.js

@@ -371,6 +371,7 @@ export class HttpRuntimeClient {
     async provisionOrganizationEmployee(ctx, input) {
         return provisionOrganizationEmployeeWithDeps(ctx, input, {
             createEmployee: (routeContext, creation) => this.createOrganizationEmployee(routeContext, creation),
+            confirmLicenseOrder: (routeContext, licenseOrder) => this.confirmOrganizationLicenseOrder(routeContext, licenseOrder),
             issueLicense: (routeContext, invitation) => this.issueOrganizationEmployeeLicense(routeContext, invitation),
         });
     }

package/dist/organization-employee-lifecycle.d.ts

@@ -1,25 +1,38 @@
 import { type EmployeeActivationGrant, type OrganizationEmployeeLifecycleRecord } from 'gdc-common-utils-ts';
 import type { RouteContext } from './individual-onboarding.js';
 import type { SubmitAndPollResult } from './orchestration/client-port.js';
+import type { OrganizationLicenseOrderConfirmInput } from './organization-license-order.js';
 import type { ServerProfileEnrollmentInput, ServerProfileRecord } from './server-profile-session.js';
 import type { LicenseListRuntimeSearchInput, OrganizationEmployeeCreationInput, OrganizationEmployeeLicenseInvitationInput, OrganizationEmployeeSearchInput } from './resource-operations.js';
-/** Input for the atomic controller-facing create plus seat issuance workflow. */
+/**
+ * Input for atomic interactive provisioning. Every current employee create is
+ * seat-required. Supplying `licenseOrder` authorizes the SDK to close a
+ * GW-issued Offer before retrying creation and issuing the activation
+ * credential. A future batch import requires a separate explicit operation.
+ */
 export type OrganizationEmployeeProvisioningInput = Readonly<{
     creation: OrganizationEmployeeCreationInput;
     invitation: OrganizationEmployeeLicenseInvitationInput;
+    licenseOrder?: Omit<OrganizationLicenseOrderConfirmInput, 'offerId'>;
 }>;
 /** Results required by a portal to persist routing and display the credential once. */
 export type OrganizationEmployeeProvisioningResult = Readonly<{
     employee: SubmitAndPollResult;
     license: SubmitAndPollResult;
+    licenseOrder?: SubmitAndPollResult;
     activationCode: string;
 }>;
 /** Shared dependencies for the create plus seat issuance workflow. */
 export type OrganizationEmployeeProvisioningDeps = Readonly<{
     createEmployee(routeContext: RouteContext, input: OrganizationEmployeeCreationInput): Promise<SubmitAndPollResult>;
     issueLicense(routeContext: RouteContext, input: OrganizationEmployeeLicenseInvitationInput): Promise<SubmitAndPollResult>;
+    confirmLicenseOrder?(routeContext: RouteContext, input: OrganizationLicenseOrderConfirmInput): Promise<SubmitAndPollResult>;
 }>;
-/** Creates the employee, reserves its seat and returns the exact GW credential. */
+/**
+ * Creates the employee, closing Offer/Order first when the strict request has
+ * no available seat, then reserves that seat through `License/_issue` and
+ * returns the exact GW activation credential.
+ */
 export declare function provisionOrganizationEmployeeWithDeps(routeContext: RouteContext, input: OrganizationEmployeeProvisioningInput, deps: OrganizationEmployeeProvisioningDeps): Promise<OrganizationEmployeeProvisioningResult>;
 /**
  * Rejects failed outer HTTP responses and failed entries hidden inside a

package/dist/organization-employee-lifecycle.js

@@ -2,17 +2,52 @@
 import { createHash } from 'node:crypto';
 import { ActorKinds, EmployeeActivationGrantVersions, projectOrganizationEmployeeLifecycle, readEmployeeActivationCode, } from 'gdc-common-utils-ts';
 import { buildStableActorIdentifier } from 'gdc-common-utils-ts/utils/actor-identifier';
-/** Creates the employee, reserves its seat and returns the exact GW credential. */
+import { ClaimsOfferSchemaorg } from 'gdc-common-utils-ts/constants/schemaorg';
+/**
+ * Creates the employee, closing Offer/Order first when the strict request has
+ * no available seat, then reserves that seat through `License/_issue` and
+ * returns the exact GW activation credential.
+ */
 export async function provisionOrganizationEmployeeWithDeps(routeContext, input, deps) {
-    const employee = await deps.createEmployee(routeContext, input.creation);
+    const creation = input.creation;
+    let employee = await deps.createEmployee(routeContext, creation);
     assertSuccessfulEmployeeOperation('employee creation', employee);
+    let licenseOrder;
+    const offerId = readEmployeeLicenseOfferId(employee.poll.body);
+    if (offerId) {
+        if (!input.licenseOrder || !deps.confirmLicenseOrder) {
+            throw new Error('provisionOrganizationEmployee: employee creation requires Offer/Order confirmation before licence issue.');
+        }
+        licenseOrder = await deps.confirmLicenseOrder(routeContext, {
+            ...input.licenseOrder,
+            offerId,
+        });
+        assertSuccessfulEmployeeOperation('licence order confirmation', licenseOrder);
+        employee = await deps.createEmployee(routeContext, creation);
+        assertSuccessfulEmployeeOperation('employee creation retry', employee);
+        if (readEmployeeLicenseOfferId(employee.poll.body)) {
+            throw new Error('provisionOrganizationEmployee: employee creation still requires a licence after Order confirmation.');
+        }
+    }
     const license = await deps.issueLicense(routeContext, input.invitation);
     assertSuccessfulEmployeeOperation('licence issue', license);
     const activationCode = readEmployeeActivationCode(license.poll.body);
     if (!activationCode) {
         throw new Error('provisionOrganizationEmployee: GW response did not contain an employee activation credential.');
     }
-    return { employee, license, activationCode };
+    return { employee, license, licenseOrder, activationCode };
+}
+function readEmployeeLicenseOfferId(value) {
+    for (const candidate of nestedRecords(value)) {
+        if (candidate.type !== 'Employee-license-offer-v1.0')
+            continue;
+        const meta = record(candidate.meta);
+        const claims = record(meta?.claims);
+        const offerId = String(claims?.[ClaimsOfferSchemaorg.identifier] || '').trim();
+        if (offerId)
+            return offerId;
+    }
+    return undefined;
 }
 /**
  * Rejects failed outer HTTP responses and failed entries hidden inside a

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gdc-sdk-node-ts",
-  "version": "2.4.13",
+  "version": "2.4.15",
   "description": "Next-generation Node runtime package for the GDC SDK family",
   "license": "Apache-2.0",
   "author": "Antifraud Services Inc.",
@@ -12,6 +12,7 @@
   ],
   "scripts": {
     "build": "tsc -p tsconfig.json",
+    "prepare": "npm run build",
     "type-check": "tsc -p tsconfig.json --noEmit",
     "check:product-neutrality": "node scripts/check-product-neutrality.mjs",
     "prepublishOnly": "npm run check:product-neutrality && npm run type-check && npm test",
@@ -37,7 +38,7 @@
     "test:e2e:live-gw:clean": "bash ./scripts/run-live-gw-clean.sh"
   },
   "dependencies": {
-    "gdc-common-utils-ts": "2.5.7",
+    "gdc-common-utils-ts": "2.5.11",
     "gdc-sdk-core-ts": "~2.3.18"
   },
   "devDependencies": {