@memberjunction/core-entities-server 5.49.0 → 5.50.0

package/dist/custom/MJListDetailEntityServer.server.d.ts

@@ -0,0 +1,31 @@
+import { EntityDeleteOptions } from '@memberjunction/core';
+import { MJListDetailEntityExtended } from '@memberjunction/core-entities';
+/**
+ * Server-side List Details entity. Enforces the SAME row-level DELETE authorization as
+ * {@link MJListEntityServer}, but scoped through the parent List's owner: a user may delete a
+ * List Detail only if they own the List it belongs to, UNLESS they hold the Developer or Integration
+ * role (who may delete any). The rule itself lives once in {@link MJListEntityExtended.UserCanDelete}
+ * and is shared with the Lists entity and the UI — a single source of truth for "who can delete".
+ *
+ * Why this is needed: the `EntityPermission` migration grants the UI role entity-wide Delete on BOTH
+ * Lists AND List Details (so users can manage their own lists). Lists get owner-scoping in
+ * `MJListEntityServer`; without this parallel override a UI user could delete the membership rows of
+ * lists they DON'T own, because a List Detail carries no owner of its own — only a `ListID`.
+ *
+ * The owner is resolved by looking up the parent List's `UserID`. If the parent List can't be found
+ * (an orphaned detail, or the parent already deleted during list teardown — `spDeleteList` does not
+ * cascade, so details are removed while the parent still exists in the normal path) the rule
+ * fails OPEN: there is no owner to protect and the coarse entity permission still applies. Enforcement
+ * only bites when a parent List genuinely exists and is owned by someone else.
+ */
+export declare class MJListDetailEntityServer extends MJListDetailEntityExtended {
+    Delete(options?: EntityDeleteOptions): Promise<boolean>;
+    /**
+     * Looks up the `UserID` (owner) of this detail's parent List. Returns `null` when it can't be
+     * positively determined (no `ListID`, parent not found, or the lookup failed) so the caller can
+     * fail open rather than block a legitimate/cascade delete. A read-only `simple` RunView limited to
+     * the single `UserID` field keeps this cheap.
+     */
+    private resolveParentListOwnerUserID;
+}
+//# sourceMappingURL=MJListDetailEntityServer.server.d.ts.map

package/dist/custom/MJListDetailEntityServer.server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"MJListDetailEntityServer.server.d.ts","sourceRoot":"","sources":["../../src/custom/MJListDetailEntityServer.server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgC,mBAAmB,EAAY,MAAM,sBAAsB,CAAC;AAEnG,OAAO,EAAE,0BAA0B,EAAwB,MAAM,+BAA+B,CAAC;AAEjG;;;;;;;;;;;;;;;;;GAiBG;AACH,qBACa,wBAAyB,SAAQ,0BAA0B;IAC9C,MAAM,CAAC,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,OAAO,CAAC;IAoB7E;;;;;OAKG;YACW,4BAA4B;CA2B7C"}

package/dist/custom/MJListDetailEntityServer.server.js

@@ -0,0 +1,85 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+import { BaseEntity, BaseEntityResult, LogError } from '@memberjunction/core';
+import { RegisterClass } from '@memberjunction/global';
+import { MJListDetailEntityExtended, MJListEntityExtended } from '@memberjunction/core-entities';
+/**
+ * Server-side List Details entity. Enforces the SAME row-level DELETE authorization as
+ * {@link MJListEntityServer}, but scoped through the parent List's owner: a user may delete a
+ * List Detail only if they own the List it belongs to, UNLESS they hold the Developer or Integration
+ * role (who may delete any). The rule itself lives once in {@link MJListEntityExtended.UserCanDelete}
+ * and is shared with the Lists entity and the UI — a single source of truth for "who can delete".
+ *
+ * Why this is needed: the `EntityPermission` migration grants the UI role entity-wide Delete on BOTH
+ * Lists AND List Details (so users can manage their own lists). Lists get owner-scoping in
+ * `MJListEntityServer`; without this parallel override a UI user could delete the membership rows of
+ * lists they DON'T own, because a List Detail carries no owner of its own — only a `ListID`.
+ *
+ * The owner is resolved by looking up the parent List's `UserID`. If the parent List can't be found
+ * (an orphaned detail, or the parent already deleted during list teardown — `spDeleteList` does not
+ * cascade, so details are removed while the parent still exists in the normal path) the rule
+ * fails OPEN: there is no owner to protect and the coarse entity permission still applies. Enforcement
+ * only bites when a parent List genuinely exists and is owned by someone else.
+ */
+let MJListDetailEntityServer = class MJListDetailEntityServer extends MJListDetailEntityExtended {
+    async Delete(options) {
+        const ownerUserID = await this.resolveParentListOwnerUserID();
+        // Only enforce when we could positively identify the owning user. A null owner means the
+        // parent List wasn't found (orphan / already-deleted parent) — nothing to protect, fall open.
+        if (ownerUserID != null &&
+            !MJListEntityExtended.UserCanDelete(ownerUserID, this.ContextCurrentUser)) {
+            const result = new BaseEntityResult();
+            result.StartedAt = new Date();
+            result.Success = false;
+            result.Type = 'delete';
+            result.Message = 'You do not have permission to delete this List item. Only the owner of ' +
+                'the parent List, or a user in the Developer or Integration role, may delete it.';
+            result.EndedAt = new Date();
+            this.RegisterResultHistoryEntry(result);
+            return false;
+        }
+        return super.Delete(options);
+    }
+    /**
+     * Looks up the `UserID` (owner) of this detail's parent List. Returns `null` when it can't be
+     * positively determined (no `ListID`, parent not found, or the lookup failed) so the caller can
+     * fail open rather than block a legitimate/cascade delete. A read-only `simple` RunView limited to
+     * the single `UserID` field keeps this cheap.
+     */
+    async resolveParentListOwnerUserID() {
+        if (!this.ListID) {
+            return null;
+        }
+        try {
+            // Use the provider bound to THIS entity instance (not the global default) so the lookup
+            // targets the correct server/tenant in multi-provider setups — mirrors the sibling
+            // MJListDetailEntityExtended.Save() and CLAUDE.md's per-provider rule.
+            const rv = this.RunViewProviderToUse;
+            const result = await rv.RunView({
+                EntityName: 'MJ: Lists',
+                ExtraFilter: `ID = '${this.ListID}'`,
+                Fields: ['ID', 'UserID'],
+                MaxRows: 1,
+                ResultType: 'simple'
+            }, this.ContextCurrentUser);
+            if (result.Success && result.Results && result.Results.length > 0) {
+                return result.Results[0].UserID ?? null;
+            }
+        }
+        catch (e) {
+            // Fail open on a lookup error — don't block deletes on a transient read failure. The
+            // security-relevant case (parent exists, owned by someone else) resolves normally.
+            LogError(`MJListDetailEntityServer: failed to resolve parent List owner for ListID '${this.ListID}': ${e}`);
+        }
+        return null;
+    }
+};
+MJListDetailEntityServer = __decorate([
+    RegisterClass(BaseEntity, 'MJ: List Details')
+], MJListDetailEntityServer);
+export { MJListDetailEntityServer };
+//# sourceMappingURL=MJListDetailEntityServer.server.js.map

package/dist/custom/MJListDetailEntityServer.server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MJListDetailEntityServer.server.js","sourceRoot":"","sources":["../../src/custom/MJListDetailEntityServer.server.ts"],"names":[],"mappings":";;;;;;AAAA,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAuB,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AACnG,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,0BAA0B,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAEjG;;;;;;;;;;;;;;;;;GAiBG;AAEI,IAAM,wBAAwB,GAA9B,MAAM,wBAAyB,SAAQ,0BAA0B;IACpD,KAAK,CAAC,MAAM,CAAC,OAA6B;QACtD,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,4BAA4B,EAAE,CAAC;QAE9D,yFAAyF;QACzF,8FAA8F;QAC9F,IAAI,WAAW,IAAI,IAAI;YACnB,CAAC,oBAAoB,CAAC,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC;YAC5E,MAAM,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;YACtC,MAAM,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;YAC9B,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC;YACvB,MAAM,CAAC,IAAI,GAAG,QAAQ,CAAC;YACvB,MAAM,CAAC,OAAO,GAAG,yEAAyE;gBACtF,iFAAiF,CAAC;YACtF,MAAM,CAAC,OAAO,GAAG,IAAI,IAAI,EAAE,CAAC;YAC5B,IAAI,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC;YACxC,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,OAAO,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,4BAA4B;QACtC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACf,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,IAAI,CAAC;YACD,wFAAwF;YACxF,mFAAmF;YACnF,uEAAuE;YACvE,MAAM,EAAE,GAAG,IAAI,CAAC,oBAAoB,CAAC;YACrC,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAAiC;gBAC5D,UAAU,EAAE,WAAW;gBACvB,WAAW,EAAE,SAAS,IAAI,CAAC,MAAM,GAAG;gBACpC,MAAM,EAAE,CAAC,IAAI,EAAE,QAAQ,CAAC;gBACxB,OAAO,EAAE,CAAC;gBACV,UAAU,EAAE,QAAQ;aACvB,EAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC;YAE5B,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAChE,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC;YAC5C,CAAC;QACL,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,qFAAqF;YACrF,mFAAmF;YACnF,QAAQ,CAAC,6EAA6E,IAAI,CAAC,MAAM,MAAM,CAAC,EAAE,CAAC,CAAC;QAChH,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;CACJ,CAAA;AAtDY,wBAAwB;IADpC,aAAa,CAAC,UAAU,EAAE,kBAAkB,CAAC;GACjC,wBAAwB,CAsDpC"}

package/dist/custom/MJListEntityServer.server.d.ts

@@ -0,0 +1,18 @@
+import { EntityDeleteOptions } from '@memberjunction/core';
+import { MJListEntityExtended } from '@memberjunction/core-entities';
+/**
+ * Server-side Lists entity. Enforces row-level DELETE authorization: a user may delete a List only
+ * if they own it, UNLESS they hold the Developer or Integration role (who may delete any List). The
+ * rule itself lives once in {@link MJListEntityExtended.UserCanDelete} and is shared with the UI.
+ *
+ * This is the security-critical enforcement point. The `EntityPermission` migration grants the UI
+ * role entity-wide Delete permission on Lists (so standard users can delete their own); this override
+ * narrows that back down to owner-or-privileged at the application layer, since coarse entity
+ * permissions can't express row-level ownership. On denial it returns `false` and records a
+ * `BaseEntityResult` so callers get `LatestResult.CompleteMessage` (Delete does not throw on a
+ * logical rejection — see the CLAUDE.md Save/Delete error-handling contract).
+ */
+export declare class MJListEntityServer extends MJListEntityExtended {
+    Delete(options?: EntityDeleteOptions): Promise<boolean>;
+}
+//# sourceMappingURL=MJListEntityServer.server.d.ts.map

package/dist/custom/MJListEntityServer.server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"MJListEntityServer.server.d.ts","sourceRoot":"","sources":["../../src/custom/MJListEntityServer.server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgC,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAEzF,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAErE;;;;;;;;;;;GAWG;AACH,qBACa,kBAAmB,SAAQ,oBAAoB;IAClC,MAAM,CAAC,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,OAAO,CAAC;CAchF"}

package/dist/custom/MJListEntityServer.server.js

@@ -0,0 +1,42 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+import { BaseEntity, BaseEntityResult } from '@memberjunction/core';
+import { RegisterClass } from '@memberjunction/global';
+import { MJListEntityExtended } from '@memberjunction/core-entities';
+/**
+ * Server-side Lists entity. Enforces row-level DELETE authorization: a user may delete a List only
+ * if they own it, UNLESS they hold the Developer or Integration role (who may delete any List). The
+ * rule itself lives once in {@link MJListEntityExtended.UserCanDelete} and is shared with the UI.
+ *
+ * This is the security-critical enforcement point. The `EntityPermission` migration grants the UI
+ * role entity-wide Delete permission on Lists (so standard users can delete their own); this override
+ * narrows that back down to owner-or-privileged at the application layer, since coarse entity
+ * permissions can't express row-level ownership. On denial it returns `false` and records a
+ * `BaseEntityResult` so callers get `LatestResult.CompleteMessage` (Delete does not throw on a
+ * logical rejection — see the CLAUDE.md Save/Delete error-handling contract).
+ */
+let MJListEntityServer = class MJListEntityServer extends MJListEntityExtended {
+    async Delete(options) {
+        if (!MJListEntityExtended.UserCanDelete(this.UserID, this.ContextCurrentUser)) {
+            const result = new BaseEntityResult();
+            result.StartedAt = new Date();
+            result.Success = false;
+            result.Type = 'delete';
+            result.Message = 'You do not have permission to delete this List. Only the List owner, ' +
+                'or a user in the Developer or Integration role, may delete it.';
+            result.EndedAt = new Date();
+            this.RegisterResultHistoryEntry(result);
+            return false;
+        }
+        return super.Delete(options);
+    }
+};
+MJListEntityServer = __decorate([
+    RegisterClass(BaseEntity, 'MJ: Lists')
+], MJListEntityServer);
+export { MJListEntityServer };
+//# sourceMappingURL=MJListEntityServer.server.js.map

package/dist/custom/MJListEntityServer.server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MJListEntityServer.server.js","sourceRoot":"","sources":["../../src/custom/MJListEntityServer.server.ts"],"names":[],"mappings":";;;;;;AAAA,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAuB,MAAM,sBAAsB,CAAC;AACzF,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAErE;;;;;;;;;;;GAWG;AAEI,IAAM,kBAAkB,GAAxB,MAAM,kBAAmB,SAAQ,oBAAoB;IACxC,KAAK,CAAC,MAAM,CAAC,OAA6B;QACtD,IAAI,CAAC,oBAAoB,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC;YAC5E,MAAM,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;YACtC,MAAM,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;YAC9B,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC;YACvB,MAAM,CAAC,IAAI,GAAG,QAAQ,CAAC;YACvB,MAAM,CAAC,OAAO,GAAG,uEAAuE;gBACpF,gEAAgE,CAAC;YACrE,MAAM,CAAC,OAAO,GAAG,IAAI,IAAI,EAAE,CAAC;YAC5B,IAAI,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC;YACxC,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,OAAO,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC;CACJ,CAAA;AAfY,kBAAkB;IAD9B,aAAa,CAAC,UAAU,EAAE,WAAW,CAAC;GAC1B,kBAAkB,CAe9B"}

package/dist/index.d.ts

@@ -8,6 +8,8 @@ export * from './custom/MJQueryEntityServer.server.js';
 export * from './custom/MJQuerySQLEntityServer.server.js';
 export * from './custom/MJTemplateContentEntityServer.server.js';
 export * from './custom/MJUserViewEntityServer.server.js';
+export * from './custom/MJListEntityServer.server.js';
+export * from './custom/MJListDetailEntityServer.server.js';
 export * from './custom/MJActionEntityServer.server.js';
 export * from './custom/MJApplicationEntityServer.server.js';
 export * from './custom/MJComponentEntityServer.server.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,wCAAwC,CAAC;AACvD,cAAc,8CAA8C,CAAC;AAC7D,cAAc,2CAA2C,CAAC;AAC1D,cAAc,kDAAkD,CAAC;AACjE,cAAc,4DAA4D,CAAC;AAC3E,cAAc,4CAA4C,CAAC;AAC3D,cAAc,qCAAqC,CAAC;AACpD,cAAc,wCAAwC,CAAC;AACvD,cAAc,+CAA+C,CAAC;AAC9D,cAAc,wCAAwC,CAAC;AACvD,cAAc,sCAAsC,CAAC;AACrD,cAAc,2CAA2C,CAAC;AAC1D,cAAc,yCAAyC,CAAC;AACxD,cAAc,+CAA+C,CAAC;AAC9D,cAAc,2CAA2C,CAAC;AAC1D,cAAc,8CAA8C,CAAC;AAC7D,cAAc,2CAA2C,CAAC;AAC1D,cAAc,mCAAmC,CAAC;AAClD,cAAc,2CAA2C,CAAC;AAC1D,cAAc,wCAAwC,CAAC;AACvD,cAAc,6CAA6C,CAAC;AAC5D,cAAc,kDAAkD,CAAC;AACjE,cAAc,uCAAuC,CAAC;AACtD,cAAc,8CAA8C,CAAC;AAC7D,cAAc,gDAAgD,CAAC;AAC/D,cAAc,qDAAqD,CAAC;AACpE,cAAc,uDAAuD,CAAC;AACtE,cAAc,oDAAoD,CAAC;AACnE,cAAc,+DAA+D,CAAC;AAC9E,cAAc,uDAAuD,CAAC;AACtE,cAAc,iDAAiD,CAAC;AAChE,cAAc,uCAAuC,CAAC;AACtD,cAAc,kDAAkD,CAAC;AACjE,cAAc,2CAA2C,CAAC;AAC1D,cAAc,oDAAoD,CAAC;AACnE,cAAc,2BAA2B,CAAC;AAC1C,cAAc,mCAAmC,CAAC;AAClD,cAAc,eAAe,CAAC;AAE9B,cAAc,6BAA6B,CAAC;AAC5C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,yCAAyC,CAAC;AAAA,cAAc,+CAA+C,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,wCAAwC,CAAC;AACvD,cAAc,8CAA8C,CAAC;AAC7D,cAAc,2CAA2C,CAAC;AAC1D,cAAc,kDAAkD,CAAC;AACjE,cAAc,4DAA4D,CAAC;AAC3E,cAAc,4CAA4C,CAAC;AAC3D,cAAc,qCAAqC,CAAC;AACpD,cAAc,wCAAwC,CAAC;AACvD,cAAc,+CAA+C,CAAC;AAC9D,cAAc,wCAAwC,CAAC;AACvD,cAAc,oCAAoC,CAAC;AACnD,cAAc,0CAA0C,CAAC;AACzD,cAAc,sCAAsC,CAAC;AACrD,cAAc,2CAA2C,CAAC;AAC1D,cAAc,yCAAyC,CAAC;AACxD,cAAc,+CAA+C,CAAC;AAC9D,cAAc,2CAA2C,CAAC;AAC1D,cAAc,8CAA8C,CAAC;AAC7D,cAAc,2CAA2C,CAAC;AAC1D,cAAc,mCAAmC,CAAC;AAClD,cAAc,2CAA2C,CAAC;AAC1D,cAAc,wCAAwC,CAAC;AACvD,cAAc,6CAA6C,CAAC;AAC5D,cAAc,kDAAkD,CAAC;AACjE,cAAc,uCAAuC,CAAC;AACtD,cAAc,8CAA8C,CAAC;AAC7D,cAAc,gDAAgD,CAAC;AAC/D,cAAc,qDAAqD,CAAC;AACpE,cAAc,uDAAuD,CAAC;AACtE,cAAc,oDAAoD,CAAC;AACnE,cAAc,+DAA+D,CAAC;AAC9E,cAAc,uDAAuD,CAAC;AACtE,cAAc,iDAAiD,CAAC;AAChE,cAAc,uCAAuC,CAAC;AACtD,cAAc,kDAAkD,CAAC;AACjE,cAAc,2CAA2C,CAAC;AAC1D,cAAc,oDAAoD,CAAC;AACnE,cAAc,2BAA2B,CAAC;AAC1C,cAAc,mCAAmC,CAAC;AAClD,cAAc,eAAe,CAAC;AAE9B,cAAc,6BAA6B,CAAC;AAC5C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,yCAAyC,CAAC;AAAA,cAAc,+CAA+C,CAAC"}

package/dist/index.js

@@ -8,6 +8,8 @@ export * from './custom/MJQueryEntityServer.server.js';
 export * from './custom/MJQuerySQLEntityServer.server.js';
 export * from './custom/MJTemplateContentEntityServer.server.js';
 export * from './custom/MJUserViewEntityServer.server.js';
+export * from './custom/MJListEntityServer.server.js';
+export * from './custom/MJListDetailEntityServer.server.js';
 export * from './custom/MJActionEntityServer.server.js';
 export * from './custom/MJApplicationEntityServer.server.js';
 export * from './custom/MJComponentEntityServer.server.js';

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,wCAAwC,CAAC;AACvD,cAAc,8CAA8C,CAAC;AAC7D,cAAc,2CAA2C,CAAC;AAC1D,cAAc,kDAAkD,CAAC;AACjE,cAAc,4DAA4D,CAAC;AAC3E,cAAc,4CAA4C,CAAC;AAC3D,cAAc,qCAAqC,CAAC;AACpD,cAAc,wCAAwC,CAAC;AACvD,cAAc,+CAA+C,CAAC;AAC9D,cAAc,wCAAwC,CAAC;AACvD,cAAc,sCAAsC,CAAC;AACrD,cAAc,2CAA2C,CAAC;AAC1D,cAAc,yCAAyC,CAAC;AACxD,cAAc,+CAA+C,CAAC;AAC9D,cAAc,2CAA2C,CAAC;AAC1D,cAAc,8CAA8C,CAAC;AAC7D,cAAc,2CAA2C,CAAC;AAC1D,cAAc,mCAAmC,CAAC;AAClD,cAAc,2CAA2C,CAAC;AAC1D,cAAc,wCAAwC,CAAC;AACvD,cAAc,6CAA6C,CAAC;AAC5D,cAAc,kDAAkD,CAAC;AACjE,cAAc,uCAAuC,CAAC;AACtD,cAAc,8CAA8C,CAAC;AAC7D,cAAc,gDAAgD,CAAC;AAC/D,cAAc,qDAAqD,CAAC;AACpE,cAAc,uDAAuD,CAAC;AACtE,cAAc,oDAAoD,CAAC;AACnE,cAAc,+DAA+D,CAAC;AAC9E,cAAc,uDAAuD,CAAC;AACtE,cAAc,iDAAiD,CAAC;AAChE,cAAc,uCAAuC,CAAC;AACtD,cAAc,kDAAkD,CAAC;AACjE,cAAc,2CAA2C,CAAC;AAC1D,cAAc,oDAAoD,CAAC;AACnE,cAAc,2BAA2B,CAAC;AAC1C,cAAc,mCAAmC,CAAC;AAClD,cAAc,eAAe,CAAC;AAE9B,cAAc,6BAA6B,CAAC;AAC5C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,yCAAyC,CAAC;AAAA,cAAc,+CAA+C,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,wCAAwC,CAAC;AACvD,cAAc,8CAA8C,CAAC;AAC7D,cAAc,2CAA2C,CAAC;AAC1D,cAAc,kDAAkD,CAAC;AACjE,cAAc,4DAA4D,CAAC;AAC3E,cAAc,4CAA4C,CAAC;AAC3D,cAAc,qCAAqC,CAAC;AACpD,cAAc,wCAAwC,CAAC;AACvD,cAAc,+CAA+C,CAAC;AAC9D,cAAc,wCAAwC,CAAC;AACvD,cAAc,oCAAoC,CAAC;AACnD,cAAc,0CAA0C,CAAC;AACzD,cAAc,sCAAsC,CAAC;AACrD,cAAc,2CAA2C,CAAC;AAC1D,cAAc,yCAAyC,CAAC;AACxD,cAAc,+CAA+C,CAAC;AAC9D,cAAc,2CAA2C,CAAC;AAC1D,cAAc,8CAA8C,CAAC;AAC7D,cAAc,2CAA2C,CAAC;AAC1D,cAAc,mCAAmC,CAAC;AAClD,cAAc,2CAA2C,CAAC;AAC1D,cAAc,wCAAwC,CAAC;AACvD,cAAc,6CAA6C,CAAC;AAC5D,cAAc,kDAAkD,CAAC;AACjE,cAAc,uCAAuC,CAAC;AACtD,cAAc,8CAA8C,CAAC;AAC7D,cAAc,gDAAgD,CAAC;AAC/D,cAAc,qDAAqD,CAAC;AACpE,cAAc,uDAAuD,CAAC;AACtE,cAAc,oDAAoD,CAAC;AACnE,cAAc,+DAA+D,CAAC;AAC9E,cAAc,uDAAuD,CAAC;AACtE,cAAc,iDAAiD,CAAC;AAChE,cAAc,uCAAuC,CAAC;AACtD,cAAc,kDAAkD,CAAC;AACjE,cAAc,2CAA2C,CAAC;AAC1D,cAAc,oDAAoD,CAAC;AACnE,cAAc,2BAA2B,CAAC;AAC1C,cAAc,mCAAmC,CAAC;AAClD,cAAc,eAAe,CAAC;AAE9B,cAAc,6BAA6B,CAAC;AAC5C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,yCAAyC,CAAC;AAAA,cAAc,+CAA+C,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@memberjunction/core-entities-server",
   "type": "module",
-  "version": "5.49.0",
+  "version": "5.50.0",
   "description": "Entity subclasses for the metadata layer of MemberJunction that are only used on server side applications like MJAPI, distributed as part of each release of MemberJunction",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -21,33 +21,33 @@
     "typescript": "^5.9.3"
   },
   "dependencies": {
-    "@memberjunction/actions-base": "5.49.0",
-    "@memberjunction/ai": "5.49.0",
-    "@memberjunction/ai-core-plus": "5.49.0",
-    "@memberjunction/ai-engine-base": "5.49.0",
-    "@memberjunction/ai-prompts": "5.49.0",
-    "@memberjunction/ai-provider-bundle": "5.49.0",
-    "@memberjunction/ai-vector-dupe": "5.49.0",
-    "@memberjunction/ai-vectordb": "5.49.0",
-    "@memberjunction/ai-vectors-memory": "5.49.0",
-    "@memberjunction/aiengine": "5.49.0",
-    "@memberjunction/core": "5.49.0",
-    "@memberjunction/core-entities": "5.49.0",
-    "@memberjunction/predictive-studio-core": "5.49.0",
-    "@memberjunction/doc-utils": "5.49.0",
-    "@memberjunction/generic-database-provider": "5.49.0",
-    "@memberjunction/global": "5.49.0",
-    "@memberjunction/integration-engine": "5.49.0",
-    "@memberjunction/integration-pk-classifier": "5.49.0",
-    "@memberjunction/scheduling-engine": "5.49.0",
-    "@memberjunction/sql-converter": "5.49.0",
-    "@memberjunction/sql-dialect": "5.49.0",
-    "@memberjunction/sql-parser": "5.49.0",
-    "@memberjunction/sqlserver-dataprovider": "5.49.0",
-    "@memberjunction/tag-engine": "5.49.0",
+    "@memberjunction/actions-base": "5.50.0",
+    "@memberjunction/ai": "5.50.0",
+    "@memberjunction/ai-core-plus": "5.50.0",
+    "@memberjunction/ai-engine-base": "5.50.0",
+    "@memberjunction/ai-prompts": "5.50.0",
+    "@memberjunction/ai-provider-bundle": "5.50.0",
+    "@memberjunction/ai-vector-dupe": "5.50.0",
+    "@memberjunction/ai-vectordb": "5.50.0",
+    "@memberjunction/ai-vectors-memory": "5.50.0",
+    "@memberjunction/aiengine": "5.50.0",
+    "@memberjunction/core": "5.50.0",
+    "@memberjunction/core-entities": "5.50.0",
+    "@memberjunction/predictive-studio-core": "5.50.0",
+    "@memberjunction/doc-utils": "5.50.0",
+    "@memberjunction/generic-database-provider": "5.50.0",
+    "@memberjunction/global": "5.50.0",
+    "@memberjunction/integration-engine": "5.50.0",
+    "@memberjunction/integration-pk-classifier": "5.50.0",
+    "@memberjunction/scheduling-engine": "5.50.0",
+    "@memberjunction/sql-converter": "5.50.0",
+    "@memberjunction/sql-dialect": "5.50.0",
+    "@memberjunction/sql-parser": "5.50.0",
+    "@memberjunction/sqlserver-dataprovider": "5.50.0",
+    "@memberjunction/tag-engine": "5.50.0",
     "nunjucks": "3.2.4",
     "rxjs": "~7.8.1",
-    "zod": "~3.24.4"
+    "zod": "^3.25.0"
   },
   "repository": {
     "type": "git",