@memberjunction/core-entities-server 5.48.0 → 5.50.0

package/dist/custom/MJConversationDetailEntityServer.server.d.ts

@@ -5,7 +5,13 @@ import { MJConversationDetailEntity } from "@memberjunction/core-entities";
  * when the original message content has been modified.
  *
  * When a user edits their message after initial creation, the OriginalMessageChanged
- * flag is set to true, allowing the UI to display an "(Edited)" indicator.
+ * flag is set to true, allowing the UI to display an "(Edited)" indicator. This is
+ * also the edit signal for cross-turn conversation compaction
+ * (plans/agent-conversation-compaction.md §6): a row edited after it was folded into
+ * a persisted summary keeps the flag, Record Changes already holds the diff, and the
+ * UI can derive "edited after summarization" from the flag plus the row's Sequence
+ * being below the current summary boundary — no summary regeneration required (the
+ * summary is explicitly lossy; agents page in exact rows via the retrieval tools).
  */
 export declare class MJConversationDetailEntityServer extends MJConversationDetailEntity {
     /**
@@ -13,5 +19,18 @@ export declare class MJConversationDetailEntityServer extends MJConversationDeta
      * This is done as pre-processing before calling super.Save() to ensure it's a single DB round trip.
      */
     Save(options?: EntitySaveOptions): Promise<boolean>;
+    /**
+     * True when this save is a genuine Message EDIT on an existing record — not one of
+     * the framework's own Message rewrites:
+     * - New records never qualify (also covers the agent-response placeholder INSERT).
+     * - Agent progress updates rewrite Message while the row's Status is 'In-Progress' — skipped.
+     * - The run's finalization save rewrites Message together with a Status transition — a
+     *   dirty Status marks the save as lifecycle, not an edit — skipped.
+     *
+     * Note: the original implementation inverted the IsSaved check (`!this.IsSaved`
+     * selects NEW records), which combined with the OldValue guard meant the flag could
+     * never be set — fixed as part of the compaction edit-handling work.
+     */
+    ShouldFlagOriginalMessageChanged(): boolean;
 }
 //# sourceMappingURL=MJConversationDetailEntityServer.server.d.ts.map

package/dist/custom/MJConversationDetailEntityServer.server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"MJConversationDetailEntityServer.server.d.ts","sourceRoot":"","sources":["../../src/custom/MJConversationDetailEntityServer.server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAErE,OAAO,EAAE,0BAA0B,EAAE,MAAM,+BAA+B,CAAC;AAE3E;;;;;;GAMG;AACH,qBACa,gCAAiC,SAAQ,0BAA0B;IAC5E;;;OAGG;IACY,IAAI,CAAC,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC;CAarE"}
+{"version":3,"file":"MJConversationDetailEntityServer.server.d.ts","sourceRoot":"","sources":["../../src/custom/MJConversationDetailEntityServer.server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAErE,OAAO,EAAE,0BAA0B,EAAE,MAAM,+BAA+B,CAAC;AAE3E;;;;;;;;;;;;GAYG;AACH,qBACa,gCAAiC,SAAQ,0BAA0B;IAC5E;;;OAGG;IACY,IAAI,CAAC,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC;IAQlE;;;;;;;;;;;OAWG;IACI,gCAAgC,IAAI,OAAO;CAiBrD"}

package/dist/custom/MJConversationDetailEntityServer.server.js

@@ -12,7 +12,13 @@ import { MJConversationDetailEntity } from "@memberjunction/core-entities";
  * when the original message content has been modified.
  *
  * When a user edits their message after initial creation, the OriginalMessageChanged
- * flag is set to true, allowing the UI to display an "(Edited)" indicator.
+ * flag is set to true, allowing the UI to display an "(Edited)" indicator. This is
+ * also the edit signal for cross-turn conversation compaction
+ * (plans/agent-conversation-compaction.md §6): a row edited after it was folded into
+ * a persisted summary keeps the flag, Record Changes already holds the diff, and the
+ * UI can derive "edited after summarization" from the flag plus the row's Sequence
+ * being below the current summary boundary — no summary regeneration required (the
+ * summary is explicitly lossy; agents page in exact rows via the retrieval tools).
  */
 let MJConversationDetailEntityServer = class MJConversationDetailEntityServer extends MJConversationDetailEntity {
     /**
@@ -20,17 +26,40 @@ let MJConversationDetailEntityServer = class MJConversationDetailEntityServer ex
      * This is done as pre-processing before calling super.Save() to ensure it's a single DB round trip.
      */
     async Save(options) {
-        // Only check for message changes on existing records (not new records)
-        if (!this.IsSaved) {
-            // Check if the Message field is dirty (has been modified)
-            const messageField = this.GetFieldByName('Message');
-            if (messageField && messageField.Dirty && messageField.OldValue !== undefined) {
-                // Message has been changed on an existing record - set the flag
-                this.OriginalMessageChanged = true;
-            }
+        if (this.ShouldFlagOriginalMessageChanged()) {
+            this.OriginalMessageChanged = true;
         }
         return super.Save(options);
     }
+    /**
+     * True when this save is a genuine Message EDIT on an existing record — not one of
+     * the framework's own Message rewrites:
+     * - New records never qualify (also covers the agent-response placeholder INSERT).
+     * - Agent progress updates rewrite Message while the row's Status is 'In-Progress' — skipped.
+     * - The run's finalization save rewrites Message together with a Status transition — a
+     *   dirty Status marks the save as lifecycle, not an edit — skipped.
+     *
+     * Note: the original implementation inverted the IsSaved check (`!this.IsSaved`
+     * selects NEW records), which combined with the OldValue guard meant the flag could
+     * never be set — fixed as part of the compaction edit-handling work.
+     */
+    ShouldFlagOriginalMessageChanged() {
+        if (!this.IsSaved) {
+            return false;
+        }
+        const messageField = this.GetFieldByName('Message');
+        if (!messageField || !messageField.Dirty || messageField.OldValue === undefined) {
+            return false;
+        }
+        if (this.Status === 'In-Progress') {
+            return false;
+        }
+        const statusField = this.GetFieldByName('Status');
+        if (statusField?.Dirty) {
+            return false;
+        }
+        return true;
+    }
 };
 MJConversationDetailEntityServer = __decorate([
     RegisterClass(BaseEntity, "MJ: Conversation Details")

package/dist/custom/MJConversationDetailEntityServer.server.js.map

@@ -1 +1 @@
-{"version":3,"file":"MJConversationDetailEntityServer.server.js","sourceRoot":"","sources":["../../src/custom/MJConversationDetailEntityServer.server.ts"],"names":[],"mappings":";;;;;;AAAA,OAAO,EAAE,UAAU,EAAqB,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,0BAA0B,EAAE,MAAM,+BAA+B,CAAC;AAE3E;;;;;;GAMG;AAEI,IAAM,gCAAgC,GAAtC,MAAM,gCAAiC,SAAQ,0BAA0B;IAC5E;;;OAGG;IACM,KAAK,CAAC,IAAI,CAAC,OAA2B;QAC3C,uEAAuE;QACvE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAChB,0DAA0D;YAC1D,MAAM,YAAY,GAAG,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;YACpD,IAAI,YAAY,IAAI,YAAY,CAAC,KAAK,IAAI,YAAY,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC5E,gEAAgE;gBAChE,IAAI,CAAC,sBAAsB,GAAG,IAAI,CAAC;YACvC,CAAC;QACL,CAAC;QAED,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;CACJ,CAAA;AAlBY,gCAAgC;IAD5C,aAAa,CAAC,UAAU,EAAE,0BAA0B,CAAC;GACzC,gCAAgC,CAkB5C"}
+{"version":3,"file":"MJConversationDetailEntityServer.server.js","sourceRoot":"","sources":["../../src/custom/MJConversationDetailEntityServer.server.ts"],"names":[],"mappings":";;;;;;AAAA,OAAO,EAAE,UAAU,EAAqB,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,0BAA0B,EAAE,MAAM,+BAA+B,CAAC;AAE3E;;;;;;;;;;;;GAYG;AAEI,IAAM,gCAAgC,GAAtC,MAAM,gCAAiC,SAAQ,0BAA0B;IAC5E;;;OAGG;IACM,KAAK,CAAC,IAAI,CAAC,OAA2B;QAC3C,IAAI,IAAI,CAAC,gCAAgC,EAAE,EAAE,CAAC;YAC1C,IAAI,CAAC,sBAAsB,GAAG,IAAI,CAAC;QACvC,CAAC;QAED,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IAED;;;;;;;;;;;OAWG;IACI,gCAAgC;QACnC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAChB,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,MAAM,YAAY,GAAG,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;QACpD,IAAI,CAAC,YAAY,IAAI,CAAC,YAAY,CAAC,KAAK,IAAI,YAAY,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC9E,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;YAChC,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,WAAW,EAAE,KAAK,EAAE,CAAC;YACrB,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;CACJ,CAAA;AA1CY,gCAAgC;IAD5C,aAAa,CAAC,UAAU,EAAE,0BAA0B,CAAC;GACzC,gCAAgC,CA0C5C"}

package/dist/custom/MJListDetailEntityServer.server.d.ts

@@ -0,0 +1,31 @@
+import { EntityDeleteOptions } from '@memberjunction/core';
+import { MJListDetailEntityExtended } from '@memberjunction/core-entities';
+/**
+ * Server-side List Details entity. Enforces the SAME row-level DELETE authorization as
+ * {@link MJListEntityServer}, but scoped through the parent List's owner: a user may delete a
+ * List Detail only if they own the List it belongs to, UNLESS they hold the Developer or Integration
+ * role (who may delete any). The rule itself lives once in {@link MJListEntityExtended.UserCanDelete}
+ * and is shared with the Lists entity and the UI — a single source of truth for "who can delete".
+ *
+ * Why this is needed: the `EntityPermission` migration grants the UI role entity-wide Delete on BOTH
+ * Lists AND List Details (so users can manage their own lists). Lists get owner-scoping in
+ * `MJListEntityServer`; without this parallel override a UI user could delete the membership rows of
+ * lists they DON'T own, because a List Detail carries no owner of its own — only a `ListID`.
+ *
+ * The owner is resolved by looking up the parent List's `UserID`. If the parent List can't be found
+ * (an orphaned detail, or the parent already deleted during list teardown — `spDeleteList` does not
+ * cascade, so details are removed while the parent still exists in the normal path) the rule
+ * fails OPEN: there is no owner to protect and the coarse entity permission still applies. Enforcement
+ * only bites when a parent List genuinely exists and is owned by someone else.
+ */
+export declare class MJListDetailEntityServer extends MJListDetailEntityExtended {
+    Delete(options?: EntityDeleteOptions): Promise<boolean>;
+    /**
+     * Looks up the `UserID` (owner) of this detail's parent List. Returns `null` when it can't be
+     * positively determined (no `ListID`, parent not found, or the lookup failed) so the caller can
+     * fail open rather than block a legitimate/cascade delete. A read-only `simple` RunView limited to
+     * the single `UserID` field keeps this cheap.
+     */
+    private resolveParentListOwnerUserID;
+}
+//# sourceMappingURL=MJListDetailEntityServer.server.d.ts.map

package/dist/custom/MJListDetailEntityServer.server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"MJListDetailEntityServer.server.d.ts","sourceRoot":"","sources":["../../src/custom/MJListDetailEntityServer.server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgC,mBAAmB,EAAY,MAAM,sBAAsB,CAAC;AAEnG,OAAO,EAAE,0BAA0B,EAAwB,MAAM,+BAA+B,CAAC;AAEjG;;;;;;;;;;;;;;;;;GAiBG;AACH,qBACa,wBAAyB,SAAQ,0BAA0B;IAC9C,MAAM,CAAC,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,OAAO,CAAC;IAoB7E;;;;;OAKG;YACW,4BAA4B;CA2B7C"}

package/dist/custom/MJListDetailEntityServer.server.js

@@ -0,0 +1,85 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+import { BaseEntity, BaseEntityResult, LogError } from '@memberjunction/core';
+import { RegisterClass } from '@memberjunction/global';
+import { MJListDetailEntityExtended, MJListEntityExtended } from '@memberjunction/core-entities';
+/**
+ * Server-side List Details entity. Enforces the SAME row-level DELETE authorization as
+ * {@link MJListEntityServer}, but scoped through the parent List's owner: a user may delete a
+ * List Detail only if they own the List it belongs to, UNLESS they hold the Developer or Integration
+ * role (who may delete any). The rule itself lives once in {@link MJListEntityExtended.UserCanDelete}
+ * and is shared with the Lists entity and the UI — a single source of truth for "who can delete".
+ *
+ * Why this is needed: the `EntityPermission` migration grants the UI role entity-wide Delete on BOTH
+ * Lists AND List Details (so users can manage their own lists). Lists get owner-scoping in
+ * `MJListEntityServer`; without this parallel override a UI user could delete the membership rows of
+ * lists they DON'T own, because a List Detail carries no owner of its own — only a `ListID`.
+ *
+ * The owner is resolved by looking up the parent List's `UserID`. If the parent List can't be found
+ * (an orphaned detail, or the parent already deleted during list teardown — `spDeleteList` does not
+ * cascade, so details are removed while the parent still exists in the normal path) the rule
+ * fails OPEN: there is no owner to protect and the coarse entity permission still applies. Enforcement
+ * only bites when a parent List genuinely exists and is owned by someone else.
+ */
+let MJListDetailEntityServer = class MJListDetailEntityServer extends MJListDetailEntityExtended {
+    async Delete(options) {
+        const ownerUserID = await this.resolveParentListOwnerUserID();
+        // Only enforce when we could positively identify the owning user. A null owner means the
+        // parent List wasn't found (orphan / already-deleted parent) — nothing to protect, fall open.
+        if (ownerUserID != null &&
+            !MJListEntityExtended.UserCanDelete(ownerUserID, this.ContextCurrentUser)) {
+            const result = new BaseEntityResult();
+            result.StartedAt = new Date();
+            result.Success = false;
+            result.Type = 'delete';
+            result.Message = 'You do not have permission to delete this List item. Only the owner of ' +
+                'the parent List, or a user in the Developer or Integration role, may delete it.';
+            result.EndedAt = new Date();
+            this.RegisterResultHistoryEntry(result);
+            return false;
+        }
+        return super.Delete(options);
+    }
+    /**
+     * Looks up the `UserID` (owner) of this detail's parent List. Returns `null` when it can't be
+     * positively determined (no `ListID`, parent not found, or the lookup failed) so the caller can
+     * fail open rather than block a legitimate/cascade delete. A read-only `simple` RunView limited to
+     * the single `UserID` field keeps this cheap.
+     */
+    async resolveParentListOwnerUserID() {
+        if (!this.ListID) {
+            return null;
+        }
+        try {
+            // Use the provider bound to THIS entity instance (not the global default) so the lookup
+            // targets the correct server/tenant in multi-provider setups — mirrors the sibling
+            // MJListDetailEntityExtended.Save() and CLAUDE.md's per-provider rule.
+            const rv = this.RunViewProviderToUse;
+            const result = await rv.RunView({
+                EntityName: 'MJ: Lists',
+                ExtraFilter: `ID = '${this.ListID}'`,
+                Fields: ['ID', 'UserID'],
+                MaxRows: 1,
+                ResultType: 'simple'
+            }, this.ContextCurrentUser);
+            if (result.Success && result.Results && result.Results.length > 0) {
+                return result.Results[0].UserID ?? null;
+            }
+        }
+        catch (e) {
+            // Fail open on a lookup error — don't block deletes on a transient read failure. The
+            // security-relevant case (parent exists, owned by someone else) resolves normally.
+            LogError(`MJListDetailEntityServer: failed to resolve parent List owner for ListID '${this.ListID}': ${e}`);
+        }
+        return null;
+    }
+};
+MJListDetailEntityServer = __decorate([
+    RegisterClass(BaseEntity, 'MJ: List Details')
+], MJListDetailEntityServer);
+export { MJListDetailEntityServer };
+//# sourceMappingURL=MJListDetailEntityServer.server.js.map

package/dist/custom/MJListDetailEntityServer.server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MJListDetailEntityServer.server.js","sourceRoot":"","sources":["../../src/custom/MJListDetailEntityServer.server.ts"],"names":[],"mappings":";;;;;;AAAA,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAuB,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AACnG,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,0BAA0B,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAEjG;;;;;;;;;;;;;;;;;GAiBG;AAEI,IAAM,wBAAwB,GAA9B,MAAM,wBAAyB,SAAQ,0BAA0B;IACpD,KAAK,CAAC,MAAM,CAAC,OAA6B;QACtD,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,4BAA4B,EAAE,CAAC;QAE9D,yFAAyF;QACzF,8FAA8F;QAC9F,IAAI,WAAW,IAAI,IAAI;YACnB,CAAC,oBAAoB,CAAC,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC;YAC5E,MAAM,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;YACtC,MAAM,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;YAC9B,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC;YACvB,MAAM,CAAC,IAAI,GAAG,QAAQ,CAAC;YACvB,MAAM,CAAC,OAAO,GAAG,yEAAyE;gBACtF,iFAAiF,CAAC;YACtF,MAAM,CAAC,OAAO,GAAG,IAAI,IAAI,EAAE,CAAC;YAC5B,IAAI,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC;YACxC,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,OAAO,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,4BAA4B;QACtC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACf,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,IAAI,CAAC;YACD,wFAAwF;YACxF,mFAAmF;YACnF,uEAAuE;YACvE,MAAM,EAAE,GAAG,IAAI,CAAC,oBAAoB,CAAC;YACrC,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAAiC;gBAC5D,UAAU,EAAE,WAAW;gBACvB,WAAW,EAAE,SAAS,IAAI,CAAC,MAAM,GAAG;gBACpC,MAAM,EAAE,CAAC,IAAI,EAAE,QAAQ,CAAC;gBACxB,OAAO,EAAE,CAAC;gBACV,UAAU,EAAE,QAAQ;aACvB,EAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC;YAE5B,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAChE,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC;YAC5C,CAAC;QACL,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,qFAAqF;YACrF,mFAAmF;YACnF,QAAQ,CAAC,6EAA6E,IAAI,CAAC,MAAM,MAAM,CAAC,EAAE,CAAC,CAAC;QAChH,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;CACJ,CAAA;AAtDY,wBAAwB;IADpC,aAAa,CAAC,UAAU,EAAE,kBAAkB,CAAC;GACjC,wBAAwB,CAsDpC"}

package/dist/custom/MJListEntityServer.server.d.ts

@@ -0,0 +1,18 @@
+import { EntityDeleteOptions } from '@memberjunction/core';
+import { MJListEntityExtended } from '@memberjunction/core-entities';
+/**
+ * Server-side Lists entity. Enforces row-level DELETE authorization: a user may delete a List only
+ * if they own it, UNLESS they hold the Developer or Integration role (who may delete any List). The
+ * rule itself lives once in {@link MJListEntityExtended.UserCanDelete} and is shared with the UI.
+ *
+ * This is the security-critical enforcement point. The `EntityPermission` migration grants the UI
+ * role entity-wide Delete permission on Lists (so standard users can delete their own); this override
+ * narrows that back down to owner-or-privileged at the application layer, since coarse entity
+ * permissions can't express row-level ownership. On denial it returns `false` and records a
+ * `BaseEntityResult` so callers get `LatestResult.CompleteMessage` (Delete does not throw on a
+ * logical rejection — see the CLAUDE.md Save/Delete error-handling contract).
+ */
+export declare class MJListEntityServer extends MJListEntityExtended {
+    Delete(options?: EntityDeleteOptions): Promise<boolean>;
+}
+//# sourceMappingURL=MJListEntityServer.server.d.ts.map

package/dist/custom/MJListEntityServer.server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"MJListEntityServer.server.d.ts","sourceRoot":"","sources":["../../src/custom/MJListEntityServer.server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgC,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAEzF,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAErE;;;;;;;;;;;GAWG;AACH,qBACa,kBAAmB,SAAQ,oBAAoB;IAClC,MAAM,CAAC,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,OAAO,CAAC;CAchF"}

package/dist/custom/MJListEntityServer.server.js

@@ -0,0 +1,42 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+import { BaseEntity, BaseEntityResult } from '@memberjunction/core';
+import { RegisterClass } from '@memberjunction/global';
+import { MJListEntityExtended } from '@memberjunction/core-entities';
+/**
+ * Server-side Lists entity. Enforces row-level DELETE authorization: a user may delete a List only
+ * if they own it, UNLESS they hold the Developer or Integration role (who may delete any List). The
+ * rule itself lives once in {@link MJListEntityExtended.UserCanDelete} and is shared with the UI.
+ *
+ * This is the security-critical enforcement point. The `EntityPermission` migration grants the UI
+ * role entity-wide Delete permission on Lists (so standard users can delete their own); this override
+ * narrows that back down to owner-or-privileged at the application layer, since coarse entity
+ * permissions can't express row-level ownership. On denial it returns `false` and records a
+ * `BaseEntityResult` so callers get `LatestResult.CompleteMessage` (Delete does not throw on a
+ * logical rejection — see the CLAUDE.md Save/Delete error-handling contract).
+ */
+let MJListEntityServer = class MJListEntityServer extends MJListEntityExtended {
+    async Delete(options) {
+        if (!MJListEntityExtended.UserCanDelete(this.UserID, this.ContextCurrentUser)) {
+            const result = new BaseEntityResult();
+            result.StartedAt = new Date();
+            result.Success = false;
+            result.Type = 'delete';
+            result.Message = 'You do not have permission to delete this List. Only the List owner, ' +
+                'or a user in the Developer or Integration role, may delete it.';
+            result.EndedAt = new Date();
+            this.RegisterResultHistoryEntry(result);
+            return false;
+        }
+        return super.Delete(options);
+    }
+};
+MJListEntityServer = __decorate([
+    RegisterClass(BaseEntity, 'MJ: Lists')
+], MJListEntityServer);
+export { MJListEntityServer };
+//# sourceMappingURL=MJListEntityServer.server.js.map

package/dist/custom/MJListEntityServer.server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MJListEntityServer.server.js","sourceRoot":"","sources":["../../src/custom/MJListEntityServer.server.ts"],"names":[],"mappings":";;;;;;AAAA,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAuB,MAAM,sBAAsB,CAAC;AACzF,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAErE;;;;;;;;;;;GAWG;AAEI,IAAM,kBAAkB,GAAxB,MAAM,kBAAmB,SAAQ,oBAAoB;IACxC,KAAK,CAAC,MAAM,CAAC,OAA6B;QACtD,IAAI,CAAC,oBAAoB,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC;YAC5E,MAAM,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;YACtC,MAAM,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;YAC9B,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC;YACvB,MAAM,CAAC,IAAI,GAAG,QAAQ,CAAC;YACvB,MAAM,CAAC,OAAO,GAAG,uEAAuE;gBACpF,gEAAgE,CAAC;YACrE,MAAM,CAAC,OAAO,GAAG,IAAI,IAAI,EAAE,CAAC;YAC5B,IAAI,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC;YACxC,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,OAAO,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC;CACJ,CAAA;AAfY,kBAAkB;IAD9B,aAAa,CAAC,UAAU,EAAE,WAAW,CAAC;GAC1B,kBAAkB,CAe9B"}

package/dist/custom/MJMLTrainingPipelineEntityServer.server.d.ts

@@ -0,0 +1,62 @@
+import { ValidationResult } from '@memberjunction/core';
+import { MJMLTrainingPipelineEntity } from '@memberjunction/core-entities';
+/**
+ * Server-side ML Training Pipeline entity. Its job is to make the leakage guard
+ * impossible to disarm by accident.
+ *
+ * The guard's `DenyFields` list keeps target-leaking columns out of the feature
+ * matrix. Its worst failure mode is silent: a deny entry that matches no column
+ * looks exactly like a deny entry that is armed, so training "succeeds" on leaked
+ * features and the model looks brilliant. That is precisely what happened when a
+ * user pasted a bracketed list into the editor and got
+ * `DenyFields: ["[CheckInTime", ..., "Status]"]` — the two most dangerous columns
+ * were left completely unguarded, and the save was accepted.
+ *
+ * So this is the authoritative gate: nothing malformed, and nothing that matches
+ * no real column, reaches the database. The rules themselves live in
+ * `@memberjunction/predictive-studio-core` so the editor can apply the identical
+ * checks at input time without the two ever drifting apart.
+ */
+export declare class MJMLTrainingPipelineEntityServer extends MJMLTrainingPipelineEntity {
+    get DefaultSkipAsyncValidation(): boolean;
+    ValidateAsync(): Promise<ValidationResult>;
+    /**
+     * Whether the leakage guard needs re-checking on this save. It does on insert,
+     * and whenever the guard or the source bindings it is validated against change.
+     */
+    private needsLeakageGuardCheck;
+    /**
+     * Parse the `LeakageGuard` JSON column. A null/blank guard is legitimate (no
+     * deny-list configured) and yields an empty guard rather than an error;
+     * malformed JSON is a hard failure, because a guard we cannot read is a guard
+     * we cannot enforce.
+     *
+     * @returns the parsed guard, or `null` when a parse error was recorded on `result`
+     */
+    private parseLeakageGuard;
+    /**
+     * Collect the columns a deny entry could legitimately name, across the target
+     * entity and every bound source.
+     *
+     * `ColumnsFullyResolved` is the important part. Only `Entity` sources expose an
+     * enumerable column list; a Query, external entity, vector set, or upstream
+     * feature pipeline does not. If any such source is bound we cannot prove a deny
+     * entry matches nothing, so the semantic check must stand down — otherwise a
+     * perfectly valid entry naming a column on that source would be wrongly rejected.
+     * The structural check still runs either way, and that is what catches the
+     * pasted-list bug.
+     */
+    private buildValidationContext;
+    /** Field names of an entity, which are the column names a deny entry may name. */
+    private columnsOf;
+    /** Parse the `SourceBindings` JSON column, tolerating null/blank/garbage. */
+    private parseSourceBindings;
+    /** Fold guard issues into the entity's ValidationResult. */
+    private applyIssues;
+}
+/**
+ * Tree-shaking guard — dynamic ClassFactory instantiation is invisible to the
+ * bundler, so this keeps the registration alive.
+ */
+export declare function LoadMJMLTrainingPipelineEntityServer(): void;
+//# sourceMappingURL=MJMLTrainingPipelineEntityServer.server.d.ts.map

package/dist/custom/MJMLTrainingPipelineEntityServer.server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"MJMLTrainingPipelineEntityServer.server.d.ts","sourceRoot":"","sources":["../../src/custom/MJMLTrainingPipelineEntityServer.server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAuF,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAE7I,OAAO,EAAE,0BAA0B,EAAE,MAAM,+BAA+B,CAAC;AAU3E;;;;;;;;;;;;;;;;GAgBG;AACH,qBACa,gCAAiC,SAAQ,0BAA0B;IAE5E,IAAoB,0BAA0B,IAAI,OAAO,CAExD;IAEqB,aAAa,IAAI,OAAO,CAAC,gBAAgB,CAAC;IAkBhE;;;OAGG;IACH,OAAO,CAAC,sBAAsB;IAQ9B;;;;;;;OAOG;IACH,OAAO,CAAC,iBAAiB;IA4BzB;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,sBAAsB;IAkC9B,kFAAkF;IAClF,OAAO,CAAC,SAAS;IAIjB,6EAA6E;IAC7E,OAAO,CAAC,mBAAmB;IAe3B,4DAA4D;IAC5D,OAAO,CAAC,WAAW;CAStB;AAED;;;GAGG;AACH,wBAAgB,oCAAoC,IAAI,IAAI,CAE3D"}

package/dist/custom/MJMLTrainingPipelineEntityServer.server.js

@@ -0,0 +1,174 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+import { BaseEntity, ValidationErrorInfo, ValidationErrorType } from '@memberjunction/core';
+import { RegisterClass } from '@memberjunction/global';
+import { MJMLTrainingPipelineEntity } from '@memberjunction/core-entities';
+import { validateLeakageGuard, DOMINANCE_THRESHOLD_DEFAULT, } from '@memberjunction/predictive-studio-core';
+/**
+ * Server-side ML Training Pipeline entity. Its job is to make the leakage guard
+ * impossible to disarm by accident.
+ *
+ * The guard's `DenyFields` list keeps target-leaking columns out of the feature
+ * matrix. Its worst failure mode is silent: a deny entry that matches no column
+ * looks exactly like a deny entry that is armed, so training "succeeds" on leaked
+ * features and the model looks brilliant. That is precisely what happened when a
+ * user pasted a bracketed list into the editor and got
+ * `DenyFields: ["[CheckInTime", ..., "Status]"]` — the two most dangerous columns
+ * were left completely unguarded, and the save was accepted.
+ *
+ * So this is the authoritative gate: nothing malformed, and nothing that matches
+ * no real column, reaches the database. The rules themselves live in
+ * `@memberjunction/predictive-studio-core` so the editor can apply the identical
+ * checks at input time without the two ever drifting apart.
+ */
+let MJMLTrainingPipelineEntityServer = class MJMLTrainingPipelineEntityServer extends MJMLTrainingPipelineEntity {
+    get DefaultSkipAsyncValidation() {
+        return false;
+    }
+    async ValidateAsync() {
+        const result = await super.ValidateAsync();
+        if (!result.Success)
+            return result;
+        // Fast-path: the guard can only become newly unsound when the guard itself,
+        // or the sources its entries are checked against, are being changed.
+        if (!this.needsLeakageGuardCheck())
+            return result;
+        const guard = this.parseLeakageGuard(result);
+        if (guard === null)
+            return result; // parse failure already recorded
+        const context = this.buildValidationContext();
+        const issues = validateLeakageGuard(guard, context);
+        this.applyIssues(result, issues);
+        return result;
+    }
+    /**
+     * Whether the leakage guard needs re-checking on this save. It does on insert,
+     * and whenever the guard or the source bindings it is validated against change.
+     */
+    needsLeakageGuardCheck() {
+        if (!this.IsSaved)
+            return true;
+        const guardDirty = this.GetFieldByName('LeakageGuard')?.Dirty ?? false;
+        const bindingsDirty = this.GetFieldByName('SourceBindings')?.Dirty ?? false;
+        const targetDirty = this.GetFieldByName('TargetEntityID')?.Dirty ?? false;
+        return guardDirty || bindingsDirty || targetDirty;
+    }
+    /**
+     * Parse the `LeakageGuard` JSON column. A null/blank guard is legitimate (no
+     * deny-list configured) and yields an empty guard rather than an error;
+     * malformed JSON is a hard failure, because a guard we cannot read is a guard
+     * we cannot enforce.
+     *
+     * @returns the parsed guard, or `null` when a parse error was recorded on `result`
+     */
+    parseLeakageGuard(result) {
+        const raw = this.LeakageGuard;
+        if (raw == null || raw.trim().length === 0) {
+            return { DenyFields: [], SingleFeatureDominanceThreshold: DOMINANCE_THRESHOLD_DEFAULT };
+        }
+        try {
+            const parsed = JSON.parse(raw);
+            return {
+                DenyFields: parsed.DenyFields ?? [],
+                DenySources: parsed.DenySources,
+                SingleFeatureDominanceThreshold: parsed.SingleFeatureDominanceThreshold ?? DOMINANCE_THRESHOLD_DEFAULT,
+            };
+        }
+        catch (e) {
+            const message = e instanceof Error ? e.message : String(e);
+            result.Errors.push(new ValidationErrorInfo('LeakageGuard', `LeakageGuard is not valid JSON (${message}). A guard that cannot be read cannot be enforced, ` +
+                `so the pipeline would train with no leakage protection at all.`, raw, ValidationErrorType.Failure));
+            result.Success = false;
+            return null;
+        }
+    }
+    /**
+     * Collect the columns a deny entry could legitimately name, across the target
+     * entity and every bound source.
+     *
+     * `ColumnsFullyResolved` is the important part. Only `Entity` sources expose an
+     * enumerable column list; a Query, external entity, vector set, or upstream
+     * feature pipeline does not. If any such source is bound we cannot prove a deny
+     * entry matches nothing, so the semantic check must stand down — otherwise a
+     * perfectly valid entry naming a column on that source would be wrongly rejected.
+     * The structural check still runs either way, and that is what catches the
+     * pasted-list bug.
+     */
+    buildValidationContext() {
+        const bindings = this.parseSourceBindings();
+        const provider = this.ProviderToUse;
+        const columns = [];
+        let fullyResolved = true;
+        const targetEntity = this.TargetEntityID ? provider?.EntityByID(this.TargetEntityID) : undefined;
+        if (targetEntity) {
+            columns.push(...this.columnsOf(targetEntity));
+        }
+        else if (this.TargetEntityID) {
+            fullyResolved = false; // target entity is set but unresolvable
+        }
+        for (const binding of bindings) {
+            if (binding.Kind !== 'Entity') {
+                fullyResolved = false; // columns of non-entity sources aren't enumerable here
+                continue;
+            }
+            const entity = provider?.EntityByName(binding.Ref);
+            if (!entity) {
+                fullyResolved = false;
+                continue;
+            }
+            columns.push(...this.columnsOf(entity));
+        }
+        return {
+            KnownColumns: columns,
+            KnownSources: bindings.map((b) => b.Ref),
+            ColumnsFullyResolved: fullyResolved,
+        };
+    }
+    /** Field names of an entity, which are the column names a deny entry may name. */
+    columnsOf(entity) {
+        return entity.Fields.map((f) => f.Name);
+    }
+    /** Parse the `SourceBindings` JSON column, tolerating null/blank/garbage. */
+    parseSourceBindings() {
+        const raw = this.SourceBindings;
+        if (raw == null || raw.trim().length === 0)
+            return [];
+        try {
+            const parsed = JSON.parse(raw);
+            return Array.isArray(parsed) ? parsed : [];
+        }
+        catch {
+            // A malformed SourceBindings column is not this validator's problem to
+            // report, but it does mean we cannot enumerate columns — treat as none,
+            // which makes the context not-fully-resolved and stands the semantic
+            // check down rather than producing bogus "matches no column" errors.
+            return [];
+        }
+    }
+    /** Fold guard issues into the entity's ValidationResult. */
+    applyIssues(result, issues) {
+        for (const issue of issues) {
+            const type = issue.Severity === 'Failure' ? ValidationErrorType.Failure : ValidationErrorType.Warning;
+            result.Errors.push(new ValidationErrorInfo('LeakageGuard', issue.Message, issue.Value, type));
+            if (issue.Severity === 'Failure') {
+                result.Success = false;
+            }
+        }
+    }
+};
+MJMLTrainingPipelineEntityServer = __decorate([
+    RegisterClass(BaseEntity, 'MJ: ML Training Pipelines')
+], MJMLTrainingPipelineEntityServer);
+export { MJMLTrainingPipelineEntityServer };
+/**
+ * Tree-shaking guard — dynamic ClassFactory instantiation is invisible to the
+ * bundler, so this keeps the registration alive.
+ */
+export function LoadMJMLTrainingPipelineEntityServer() {
+    // no-op
+}
+//# sourceMappingURL=MJMLTrainingPipelineEntityServer.server.js.map

package/dist/custom/MJMLTrainingPipelineEntityServer.server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MJMLTrainingPipelineEntityServer.server.js","sourceRoot":"","sources":["../../src/custom/MJMLTrainingPipelineEntityServer.server.ts"],"names":[],"mappings":";;;;;;AAAA,OAAO,EAAE,UAAU,EAAiC,mBAAmB,EAAE,mBAAmB,EAAoB,MAAM,sBAAsB,CAAC;AAC7I,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,0BAA0B,EAAE,MAAM,+BAA+B,CAAC;AAC3E,OAAO,EACH,oBAAoB,EACpB,2BAA2B,GAK9B,MAAM,wCAAwC,CAAC;AAEhD;;;;;;;;;;;;;;;;GAgBG;AAEI,IAAM,gCAAgC,GAAtC,MAAM,gCAAiC,SAAQ,0BAA0B;IAE5E,IAAoB,0BAA0B;QAC1C,OAAO,KAAK,CAAC;IACjB,CAAC;IAEe,KAAK,CAAC,aAAa;QAC/B,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,aAAa,EAAE,CAAC;QAC3C,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,MAAM,CAAC;QAEnC,4EAA4E;QAC5E,qEAAqE;QACrE,IAAI,CAAC,IAAI,CAAC,sBAAsB,EAAE;YAAE,OAAO,MAAM,CAAC;QAElD,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAC7C,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,MAAM,CAAC,CAAG,iCAAiC;QAEtE,MAAM,OAAO,GAAG,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAC9C,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACpD,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAEjC,OAAO,MAAM,CAAC;IAClB,CAAC;IAED;;;OAGG;IACK,sBAAsB;QAC1B,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAC/B,MAAM,UAAU,GAAG,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,EAAE,KAAK,IAAI,KAAK,CAAC;QACvE,MAAM,aAAa,GAAG,IAAI,CAAC,cAAc,CAAC,gBAAgB,CAAC,EAAE,KAAK,IAAI,KAAK,CAAC;QAC5E,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,gBAAgB,CAAC,EAAE,KAAK,IAAI,KAAK,CAAC;QAC1E,OAAO,UAAU,IAAI,aAAa,IAAI,WAAW,CAAC;IACtD,CAAC;IAED;;;;;;;OAOG;IACK,iBAAiB,CAAC,MAAwB;QAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC;QAC9B,IAAI,GAAG,IAAI,IAAI,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzC,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,+BAA+B,EAAE,2BAA2B,EAAE,CAAC;QAC5F,CAAC;QAED,IAAI,CAAC;YACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA0B,CAAC;YACxD,OAAO;gBACH,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,EAAE;gBACnC,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,+BAA+B,EAC3B,MAAM,CAAC,+BAA+B,IAAI,2BAA2B;aAC5E,CAAC;QACN,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,MAAM,OAAO,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAC3D,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,mBAAmB,CACtC,cAAc,EACd,mCAAmC,OAAO,qDAAqD;gBAC/F,gEAAgE,EAChE,GAAG,EACH,mBAAmB,CAAC,OAAO,CAC9B,CAAC,CAAC;YACH,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC;YACvB,OAAO,IAAI,CAAC;QAChB,CAAC;IACL,CAAC;IAED;;;;;;;;;;;OAWG;IACK,sBAAsB;QAC1B,MAAM,QAAQ,GAAG,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,aAA6C,CAAC;QAEpE,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,IAAI,aAAa,GAAG,IAAI,CAAC;QAEzB,MAAM,YAAY,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACjG,IAAI,YAAY,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC;QAClD,CAAC;aAAM,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YAC7B,aAAa,GAAG,KAAK,CAAC,CAAG,wCAAwC;QACrE,CAAC;QAED,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC7B,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC5B,aAAa,GAAG,KAAK,CAAC,CAAG,uDAAuD;gBAChF,SAAS;YACb,CAAC;YACD,MAAM,MAAM,GAAG,QAAQ,EAAE,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACnD,IAAI,CAAC,MAAM,EAAE,CAAC;gBACV,aAAa,GAAG,KAAK,CAAC;gBACtB,SAAS;YACb,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5C,CAAC;QAED,OAAO;YACH,YAAY,EAAE,OAAO;YACrB,YAAY,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;YACxC,oBAAoB,EAAE,aAAa;SACtC,CAAC;IACN,CAAC;IAED,kFAAkF;IAC1E,SAAS,CAAC,MAAkB;QAChC,OAAO,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC5C,CAAC;IAED,6EAA6E;IACrE,mBAAmB;QACvB,MAAM,GAAG,GAAG,IAAI,CAAC,cAAc,CAAC;QAChC,IAAI,GAAG,IAAI,IAAI,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QACtD,IAAI,CAAC;YACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAoB,CAAC;YAClD,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACL,uEAAuE;YACvE,wEAAwE;YACxE,qEAAqE;YACrE,qEAAqE;YACrE,OAAO,EAAE,CAAC;QACd,CAAC;IACL,CAAC;IAED,4DAA4D;IACpD,WAAW,CAAC,MAAwB,EAAE,MAA2B;QACrE,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC,mBAAmB,CAAC,OAAO,CAAC;YACtG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,mBAAmB,CAAC,cAAc,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;YAC9F,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC/B,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC;YAC3B,CAAC;QACL,CAAC;IACL,CAAC;CACJ,CAAA;AArJY,gCAAgC;IAD5C,aAAa,CAAC,UAAU,EAAE,2BAA2B,CAAC;GAC1C,gCAAgC,CAqJ5C;;AAED;;;GAGG;AACH,MAAM,UAAU,oCAAoC;IAChD,QAAQ;AACZ,CAAC"}

package/dist/custom/MJQueryEntityServer.server.d.ts

@@ -22,10 +22,45 @@ export declare class MJQueryEntityServer extends MJQueryEntityExtended {
     protected GenerateCompositeEmbedding(): Promise<void>;
     Save(options?: EntitySaveOptions): Promise<boolean>;
     Delete(options?: EntitySaveOptions): Promise<boolean>;
+    /**
+     * Returns the database platform of the connected database.
+     * Uses the DB_PLATFORM env var (same source as MJServer's provider selection).
+     */
+    private get CurrentPlatform();
+    /**
+     * Resolves the SQL to use for extraction based on the current database platform.
+     *
+     * Resolution order:
+     *   1. MJ: Query SQLs record matching the current platform's dialect → use that SQL
+     *   2. Base Query.SQL field → fall back if no dialect variant exists
+     *
+     * After resolution, validates the SQL is compatible with the current platform's
+     * dialect by attempting a parse. Logs a warning if the SQL appears to be for a
+     * different dialect (e.g., T-SQL bracket identifiers on a PostgreSQL database).
+     */
+    private resolveExtractionSQL;
+    /**
+     * Best-effort dialect validation: attempts to parse the SQL with the current platform's
+     * dialect. If parsing throws, logs a warning — the SQL may be for a different dialect.
+     *
+     * This is a heuristic, not a guarantee: node-sql-parser is permissive on many
+     * dialect-specific functions (ISNULL, GETDATE pass in both dialects), so a passing
+     * parse does not prove the SQL is correct for this dialect. But a failing parse is a
+     * strong signal of incompatibility.
+     */
+    private validateDialectCompatibility;
     /**
      * Builds the QuerySyncContext from this entity instance for use by the extraction pipeline.
+     * Resolves the SQL to the appropriate dialect variant for the connected database.
      */
     private buildSyncContext;
+    /**
+     * Re-runs the extraction pipeline on this query. Called by MJQuerySQLEntityServer
+     * when a dialect variant matching the current platform is saved — this handles
+     * the timing issue where the parent Query is saved before its QuerySQL children
+     * exist in the cache.
+     */
+    RerunExtraction(): Promise<void>;
     /**
      * Runs the extraction pipeline and saves the UsesTemplate flag.
      * On error, sets UsesTemplate=false and attempts to save so the query remains usable.

package/dist/custom/MJQueryEntityServer.server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"MJQueryEntityServer.server.d.ts","sourceRoot":"","sources":["../../src/custom/MJQueryEntityServer.server.ts"],"names":[],"mappings":"AAAA,OAAO,EAEH,iBAAiB,EAGjB,qBAAqB,EACxB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAoB,qBAAqB,EAAmC,MAAM,+BAA+B,CAAC;AAUzH;;;;GAIG;AACH,qBACa,mBAAoB,SAAQ,qBAAqB;IAC1D;;;yEAGqE;IAC9D,cAAc,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAI5C;;OAEG;cACsB,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAI5F;;;OAGG;cACa,0BAA0B,IAAI,OAAO,CAAC,IAAI,CAAC;IAuB5C,IAAI,CAAC,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC;IAwCnD,MAAM,CAAC,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC;IAgBpE;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAaxB;;;OAGG;YACW,uBAAuB;IAsBrC;;OAEG;YACW,sBAAsB;IAmBpC;;;OAGG;YACW,wBAAwB;IAiCtC;;OAEG;YACW,sBAAsB;IA4BpC;;OAEG;YACW,oBAAoB;IA4BlC;;OAEG;YACW,6BAA6B;CAgB9C"}
+{"version":3,"file":"MJQueryEntityServer.server.d.ts","sourceRoot":"","sources":["../../src/custom/MJQueryEntityServer.server.ts"],"names":[],"mappings":"AAAA,OAAO,EAEH,iBAAiB,EAGjB,qBAAqB,EAExB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAoB,qBAAqB,EAAmC,MAAM,+BAA+B,CAAC;AAazH;;;;GAIG;AACH,qBACa,mBAAoB,SAAQ,qBAAqB;IAC1D;;;yEAGqE;IAC9D,cAAc,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAI5C;;OAEG;cACsB,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAI5F;;;OAGG;cACa,0BAA0B,IAAI,OAAO,CAAC,IAAI,CAAC;IAuB5C,IAAI,CAAC,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC;IAwCnD,MAAM,CAAC,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC;IAgBpE;;;OAGG;IACH,OAAO,KAAK,eAAe,GAE1B;IAED;;;;;;;;;;OAUG;IACH,OAAO,CAAC,oBAAoB;IAmB5B;;;;;;;;OAQG;IACH,OAAO,CAAC,4BAA4B;IAgBpC;;;OAGG;IACH,OAAO,CAAC,gBAAgB;IAcxB;;;;;OAKG;IACU,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC;IAI7C;;;OAGG;YACW,uBAAuB;IAsBrC;;OAEG;YACW,sBAAsB;IAmBpC;;;OAGG;YACW,wBAAwB;IAiCtC;;OAEG;YACW,sBAAsB;IA4BpC;;OAEG;YACW,oBAAoB;IA4BlC;;OAEG;YACW,6BAA6B;CAgB9C"}