@memberjunction/core-entities-server 6.1.0-edge.2 → 6.1.0-edge.4

package/dist/engines/IdentityClaimEngineServer.js

@@ -0,0 +1,555 @@
+/**
+ * @fileoverview Server-side Identity Claim Engine
+ *
+ * Implements server-only identity claim lifecycle operations:
+ * - Claim creation and persistence
+ * - Automatic claimant email notification via MJ Communications Framework
+ * - Magic link verification and driver OnClaim execution
+ * - Claim revocation and expiration handling
+ *
+ * @module @memberjunction/core-entities-server/IdentityClaimEngineServer
+ */
+import * as crypto from 'crypto';
+import { BaseSingleton, EscapeSQLString, UUIDsEqual } from '@memberjunction/global';
+import { LogError, LogStatus, Metadata, RunView } from '@memberjunction/core';
+import { IdentityClaimEngine } from '@memberjunction/core-entities';
+import { UserCache } from '@memberjunction/generic-database-provider';
+import { CommunicationEngine } from '@memberjunction/communication-engine';
+import { Message } from '@memberjunction/communication-types';
+import { TemplateEngineServer } from '@memberjunction/templates';
+/**
+ * Server-side Identity Claim engine — the ONLY place the claim lifecycle is implemented.
+ *
+ * Uses containment rather than inheritance, the same split as `AIEngine` / `AIEngineBase`: an
+ * instance of the client+server `IdentityClaimEngine` is held via {@link Base} and its cached
+ * members (claim types, lookups, driver resolution, email normalization) are proxied below, so
+ * `IdentityClaimEngineServer.Instance.X` reaches the whole surface. When a public member is added
+ * to `IdentityClaimEngine`, add a proxy here.
+ *
+ * Creation, redemption and revocation live here and nowhere else, because each depends on
+ * something a browser cannot do: `crypto.randomBytes` token generation and SHA-256 hashing,
+ * `timingSafeEqual` comparison, an atomic compare-and-swap issued as raw SQL, and email dispatch
+ * via MJ Communications.
+ *
+ * @description ONLY USE ON SERVER-SIDE. For claim-type metadata only, use `IdentityClaimEngine`,
+ * which is safe in any host.
+ */
+export class IdentityClaimEngineServer extends BaseSingleton {
+    constructor() {
+        super();
+        this._provider = null;
+    }
+    static get Instance() {
+        return super.getInstance();
+    }
+    // ------------------------------------------------------------------
+    // Contained base engine + proxied members
+    // ------------------------------------------------------------------
+    /**
+     * The contained client+server engine that owns all cached claim-type metadata.
+     */
+    get Base() {
+        return IdentityClaimEngine.Instance;
+    }
+    /**
+     * The metadata provider this engine operates under.
+     *
+     * This class is a process-wide singleton (`BaseSingleton` keys on class name), so it cannot
+     * own a provider the way a `BaseEngine` subclass does — one instance serves every connection
+     * in the process. Callers that have a request-scoped provider should pass it explicitly to
+     * the method they are calling; this settable accessor exists for hosts that bind one at
+     * startup, and falls back to the global default only when nothing has been supplied.
+     *
+     * Same shape as `AIEngine.Provider` — which `QueryEngineServer` and `ComponentMetadataEngineServer`
+     * both cite as the pattern to follow — and structurally exempt from the multi-provider
+     * compliance scanner, so it needs no `global-provider-ok` suppression.
+     */
+    get Provider() {
+        return this._provider ?? new Metadata();
+    }
+    set Provider(value) {
+        this._provider = value;
+    }
+    /**
+     * Ensures metadata is configured and loaded
+     */
+    async Config(forceRefresh, contextUser, provider) {
+        if (provider) {
+            this._provider = provider;
+        }
+        await this.Base.Config(forceRefresh, contextUser, provider);
+    }
+    /** All loaded Identity Claim Types */
+    get ClaimTypes() {
+        return this.Base.ClaimTypes;
+    }
+    /** Finds a claim type by name (case-insensitive) */
+    GetClaimTypeByName(name) {
+        return this.Base.GetClaimTypeByName(name);
+    }
+    /** Finds a claim type by ID */
+    GetClaimTypeByID(id) {
+        return this.Base.GetClaimTypeByID(id);
+    }
+    /** Resolves the concrete BaseIdentityClaimDriver instance for a given claim type */
+    GetDriverInstance(claimType) {
+        return this.Base.GetDriverInstance(claimType);
+    }
+    /** Normalizes email address (trimmed, lowercase) */
+    NormalizeEmail(email) {
+        return this.Base.NormalizeEmail(email);
+    }
+    /** Parses a claim type's Configuration JSON into the engine-recognized shape */
+    GetClaimTypeConfiguration(claimType) {
+        return this.Base.GetClaimTypeConfiguration(claimType);
+    }
+    escapeHtml(str) {
+        return str
+            .replace(/&/g, '&')
+            .replace(/</g, '&lt;')
+            .replace(/>/g, '&gt;')
+            .replace(/"/g, '&quot;')
+            .replace(/'/g, '&#039;');
+    }
+    /**
+     * Creates and saves an IdentityClaim record, sends an email notification via the MJ Communications
+     * framework if configured, and executes the driver's OnCreate lifecycle method.
+     */
+    async CreateClaim(params, contextUser, provider) {
+        const normalizedEmail = this.NormalizeEmail(params.NormalizedEmail);
+        if (!normalizedEmail) {
+            throw new Error('NormalizedEmail is required to create an IdentityClaim');
+        }
+        let claimType;
+        if (params.ClaimTypeID) {
+            claimType = this.GetClaimTypeByID(params.ClaimTypeID);
+        }
+        else if (params.ClaimTypeName) {
+            claimType = this.GetClaimTypeByName(params.ClaimTypeName);
+        }
+        if (!claimType) {
+            throw new Error(`IdentityClaimType not found for ${params.ClaimTypeName ?? params.ClaimTypeID}`);
+        }
+        if (!claimType.IsActive) {
+            throw new Error(`IdentityClaimType '${claimType.Name}' is inactive and cannot issue new claims`);
+        }
+        const md = provider ?? this.Provider;
+        // 2.2 Accept and normalize EntityID or EntityName
+        let resolvedEntityID = null;
+        if (params.EntityID) {
+            const isGuid = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(params.EntityID);
+            if (isGuid) {
+                resolvedEntityID = params.EntityID;
+            }
+            else {
+                const matchedEntity = md.Entities.find(e => e.Name.toLowerCase() === params.EntityID?.toLowerCase());
+                if (!matchedEntity) {
+                    throw new Error(`Invalid or unrecognized Entity name/ID: ${params.EntityID}`);
+                }
+                resolvedEntityID = matchedEntity.ID;
+            }
+        }
+        // 3.2 High-entropy token generation & hashing-at-rest
+        let rawToken = params.VerificationToken;
+        if (!rawToken && !params.MagicLinkInviteID) {
+            rawToken = crypto.randomBytes(32).toString('base64url');
+        }
+        let tokenHash = null;
+        if (rawToken) {
+            tokenHash = crypto.createHash('sha256').update(rawToken).digest('base64url');
+        }
+        const metadataObj = params.Metadata ? { ...params.Metadata } : {};
+        if (tokenHash) {
+            metadataObj.TokenHash = tokenHash;
+        }
+        const claim = await md.GetEntityObject('MJ: Identity Claims', contextUser);
+        claim.NewRecord();
+        claim.ClaimTypeID = claimType.ID;
+        claim.NormalizedEmail = normalizedEmail;
+        claim.EntityID = resolvedEntityID;
+        claim.RecordID = params.RecordID ?? null;
+        claim.PayloadJSON = params.Payload ? JSON.stringify(params.Payload) : null;
+        claim.Status = 'Pending';
+        const days = params.ExpiresInDays ?? claimType.DefaultExpirationDays ?? 30;
+        const expiresAt = new Date();
+        expiresAt.setDate(expiresAt.getDate() + days);
+        claim.ExpiresAt = expiresAt;
+        claim.MagicLinkInviteID = params.MagicLinkInviteID ?? null;
+        claim.MetadataJSON = Object.keys(metadataObj).length > 0 ? JSON.stringify(metadataObj) : null;
+        const saved = await claim.Save();
+        if (!saved) {
+            throw new Error(`Failed to save IdentityClaim: ${claim.LatestResult?.Message ?? 'Unknown error'}`);
+        }
+        // Send email notification via MJ Communications Framework if enabled
+        if (params.SendEmail !== false) {
+            try {
+                await this.sendClaimEmail(claim, claimType, params, rawToken, contextUser);
+            }
+            catch (err) {
+                const msg = err instanceof Error ? err.message : String(err);
+                LogError(`[IdentityClaimEngineServer] Failed to dispatch claim email to ${normalizedEmail}: ${msg}`);
+            }
+        }
+        // Invoke driver OnCreate
+        const driver = this.GetDriverInstance(claimType);
+        if (driver) {
+            await driver.OnCreate({ Claim: claim, User: contextUser });
+        }
+        return claim;
+    }
+    /**
+     * Sends a claimant email notification using CommunicationEngine and TemplateEngineServer
+     */
+    async sendClaimEmail(claim, claimType, params, rawToken, contextUser) {
+        try {
+            const commEngine = CommunicationEngine.Instance;
+            await commEngine.Config(false, contextUser);
+            const templateEngine = TemplateEngineServer.Instance;
+            await templateEngine.Config(false, contextUser);
+            const message = new Message();
+            message.From = process.env.CLAIM_FROM_EMAIL || process.env.NOTIFICATION_FROM_EMAIL || 'notifications@memberjunction.com';
+            message.To = claim.NormalizedEmail;
+            // Generate claim / magic link URL with token
+            const baseUrl = params.ClaimBaseURL || process.env.PORTAL_BASE_URL || 'https://app.memberjunction.com';
+            const tokenParam = rawToken ? `&token=${encodeURIComponent(rawToken)}` : '';
+            const claimUrl = `${baseUrl.replace(/\/$/, '')}/claims/redeem?id=${claim.ID}${tokenParam}`;
+            message.Subject = params.EmailSubject || `You have a new ${claimType.Name} access claim`;
+            // If a template ID is provided or configured on ClaimType, render via template
+            const templateId = params.EmailTemplateID;
+            const templateEntity = templateId ? templateEngine.Templates.find(t => UUIDsEqual(t.ID, templateId)) : null;
+            if (templateEntity) {
+                message.HTMLBodyTemplate = templateEntity;
+                message.ContextData = {
+                    Claim: claim,
+                    ClaimType: claimType,
+                    ClaimURL: claimUrl,
+                    RecipientEmail: claim.NormalizedEmail,
+                    ExpiresAt: claim.ExpiresAt,
+                    Payload: params.Payload ?? {},
+                    ...(params.TemplateData ?? {})
+                };
+            }
+            else {
+                // 3.4 Clean default responsive email body with escaped HTML
+                message.Body = `
+                    <div style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif; max-width: 600px; margin: 0 auto; padding: 24px; color: #1e293b;">
+                        <h2 style="color: #0f172a; margin-bottom: 16px;">Claim Your ${this.escapeHtml(claimType.Name)}</h2>
+                        <p style="font-size: 15px; line-height: 1.6; margin-bottom: 24px;">
+                            An item or entitlement has been issued to <strong>${this.escapeHtml(claim.NormalizedEmail)}</strong>. Click the link below to access or link it to your account:
+                        </p>
+                        <div style="margin-bottom: 28px;">
+                            <a href="${claimUrl}" style="background-color: #0284c7; color: #ffffff; padding: 12px 24px; text-decoration: none; border-radius: 6px; font-weight: 600; display: inline-block;">
+                                View & Redeem Claim
+                            </a>
+                        </div>
+                        <p style="font-size: 13px; color: #64748b;">
+                            This claim link is valid until ${claim.ExpiresAt.toLocaleDateString()}. If you did not expect this, you can safely ignore this email.
+                        </p>
+                    </div>
+                `;
+            }
+            LogStatus(`[IdentityClaimEngineServer] Dispatching claim notification to ${claim.NormalizedEmail}`);
+            // 3.5 Make email provider configurable via env
+            const commProvider = process.env.CLAIM_EMAIL_PROVIDER || 'SendGrid';
+            const sendResult = await commEngine.SendSingleMessage(commProvider, 'Email', message, undefined, false);
+            return sendResult?.Success === true;
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            LogError(`[IdentityClaimEngineServer] sendClaimEmail error: ${msg}`);
+            return false;
+        }
+    }
+    /**
+     * Fetches all pending, unexpired claims for a normalized email address.
+     */
+    async GetPendingClaimsForEmail(email, contextUser, provider) {
+        const normalizedEmail = this.NormalizeEmail(email);
+        if (!normalizedEmail)
+            return [];
+        // Reads must come from the same provider as everything else on this call path; a bare
+        // `new RunView()` resolves the SEPARATE global RunView provider slot, which the
+        // multi-provider compliance scanner does not even cover.
+        const rv = new RunView((provider ?? this.Provider));
+        const escaped = EscapeSQLString(normalizedEmail);
+        // An ISO-8601 literal compares correctly on both SQL Server (DATETIMEOFFSET) and
+        // PostgreSQL — GETUTCDATE() would break the PG path the CAS statements already handle.
+        const nowUtc = new Date().toISOString();
+        const result = await rv.RunView({
+            EntityName: 'MJ: Identity Claims',
+            ExtraFilter: `NormalizedEmail = '${escaped}' AND Status = 'Pending' AND ExpiresAt > '${nowUtc}'`,
+            ResultType: 'entity_object'
+        }, contextUser);
+        if (result.Success && result.Results) {
+            return result.Results;
+        }
+        return [];
+    }
+    /**
+     * Redeems a claim for an authenticated user, running the driver's OnClaim implementation.
+     *
+     * Authorization is email match OR verified token. The email-match path is additionally
+     * gated by {@link RedeemClaimOptions.EmailVerified} and the claim type's
+     * `Configuration` (`RequireVerifiedEmail` / `RequireToken`) — see {@link RedeemClaimOptions}.
+     */
+    async RedeemClaim(claimID, contextUser, provider, token, options) {
+        if (!claimID) {
+            return { Success: false, ErrorMessage: 'ClaimID is required' };
+        }
+        if (!contextUser || !contextUser.ID) {
+            return { Success: false, ErrorMessage: 'Authenticated User is required to redeem a claim' };
+        }
+        if (!provider) {
+            return { Success: false, ErrorMessage: 'A metadata provider is required to redeem a claim' };
+        }
+        // `provider` is REQUIRED here, unlike the other methods on this engine, and deliberately
+        // so. Redemption reads a claim, reads a magic-link invite, and executes a raw CAS UPDATE —
+        // three operations that must all run against the SAME database. Accepting an optional
+        // provider would let a caller thread one into the entity reads while the CAS silently fell
+        // back to the process global, which is the bug this signature exists to make impossible.
+        const md = provider;
+        // Read the claim under the system user rather than `contextUser`.
+        //
+        // Authorization for redemption is enforced below: the caller must either own the
+        // claim's email or present a token whose SHA-256 matches the stored hash. That check
+        // IS the boundary — the entity read grant was never doing security work here.
+        //
+        // Loading under `contextUser` also breaks the feature now that UI reads are row-scoped.
+        // The row filter is applied to single-record loads, not just RunView (the provider
+        // appends GetEffectiveRowFilterWhereClause to the primary-key WHERE), so workflow #3
+        // from this entity's migration header — "purchase email differs from the login account
+        // email, a verification token confirms ownership" — could never load the very claim it
+        // exists to redeem. `contextUser` still drives everything else, including the save.
+        // `GetSystemUser()` is typed `UserInfo` but returns undefined when the cache has not been
+        // refreshed (see its own doc comment — callers are expected to guard). Fall back to
+        // `contextUser` so an unpopulated cache degrades to the previous behaviour rather than
+        // passing undefined down into the provider.
+        const readUser = UserCache.Instance.GetSystemUser() ?? contextUser;
+        const claim = await md.GetEntityObject('MJ: Identity Claims', readUser);
+        const loaded = await claim.Load(claimID);
+        if (!loaded) {
+            return { Success: false, ErrorMessage: `IdentityClaim not found for ID ${claimID}` };
+        }
+        if (claim.Status !== 'Pending') {
+            return { Success: false, ErrorMessage: `Claim is no longer pending (current status: ${claim.Status})` };
+        }
+        if (new Date(claim.ExpiresAt).getTime() < Date.now()) {
+            claim.Status = 'Expired';
+            await claim.Save();
+            return { Success: false, ErrorMessage: 'Claim has expired' };
+        }
+        // Claim type is resolved BEFORE the authorization gate so IsActive and the type's
+        // Configuration (RequireToken / RequireVerifiedEmail) can participate in it.
+        const claimType = this.GetClaimTypeByID(claim.ClaimTypeID);
+        if (!claimType) {
+            return { Success: false, ErrorMessage: `Claim type ${claim.ClaimTypeID} not found` };
+        }
+        if (!claimType.IsActive) {
+            return { Success: false, ErrorMessage: `Claim type '${claimType.Name}' is inactive; this claim cannot be redeemed` };
+        }
+        const typeConfig = this.GetClaimTypeConfiguration(claimType);
+        // 3.1 & 3.2 Security verification: Email match OR verified bearer token required.
+        // Email-match is refused when the IdP explicitly asserted the email as unverified,
+        // or when the claim type demands positive verification / a token.
+        let userEmailMatch = Boolean(contextUser.Email && this.NormalizeEmail(contextUser.Email) === claim.NormalizedEmail);
+        if (userEmailMatch) {
+            if (typeConfig.RequireToken === true) {
+                userEmailMatch = false; // this type never redeems on email match alone
+            }
+            else if (options?.EmailVerified === false) {
+                userEmailMatch = false; // IdP said the email is unverified — do not trust the match
+            }
+            else if (typeConfig.RequireVerifiedEmail === true && options?.EmailVerified !== true) {
+                userEmailMatch = false; // this type demands a positive IdP assertion
+            }
+        }
+        let tokenValid = false;
+        if (token) {
+            const computedHash = crypto.createHash('sha256').update(token).digest('base64url');
+            if (claim.MagicLinkInviteID) {
+                // Same rationale as the claim read above: this row is being fetched purely to
+                // compare its TokenHash against the presented token, which is itself the
+                // authorization check. A redeemer whose email differs from the purchase email
+                // has no read grant on the invite, and scoping this to them would defeat the
+                // token flow rather than protect it.
+                const invite = await md.GetEntityObject('MJ: Magic Link Invites', readUser);
+                const inviteLoaded = await invite.Load(claim.MagicLinkInviteID);
+                if (!inviteLoaded) {
+                    return { Success: false, ErrorMessage: 'Associated magic link invite could not be verified' };
+                }
+                if (invite.TokenHash) {
+                    const expectedBuf = Buffer.from(invite.TokenHash, 'utf8');
+                    const actualBuf = Buffer.from(computedHash, 'utf8');
+                    if (expectedBuf.length === actualBuf.length && crypto.timingSafeEqual(expectedBuf, actualBuf)) {
+                        tokenValid = true;
+                    }
+                }
+            }
+            else if (claim.MetadataJSON) {
+                try {
+                    const metadata = JSON.parse(claim.MetadataJSON);
+                    if (metadata && typeof metadata.TokenHash === 'string') {
+                        const expectedBuf = Buffer.from(metadata.TokenHash, 'utf8');
+                        const actualBuf = Buffer.from(computedHash, 'utf8');
+                        if (expectedBuf.length === actualBuf.length && crypto.timingSafeEqual(expectedBuf, actualBuf)) {
+                            tokenValid = true;
+                        }
+                    }
+                }
+                catch {
+                    // Ignore metadata parsing error
+                }
+            }
+        }
+        if (!userEmailMatch && !tokenValid) {
+            return {
+                Success: false,
+                ErrorMessage: 'This claim requires either a matching verified email on the signed-in account or the verification token from the claim email'
+            };
+        }
+        const driver = this.GetDriverInstance(claimType);
+        if (!driver) {
+            return { Success: false, ErrorMessage: `Claim driver not configured for type ${claimType.Name}` };
+        }
+        // 3.3 Atomic Compare-And-Swap (CAS) state transition:
+        // Sets Status = 'Claimed' iff Status is currently 'Pending' and not expired.
+        const casSuccess = await this.consumeClaimAtomic(claim.ID, contextUser.ID, md, contextUser);
+        if (!casSuccess) {
+            return {
+                Success: false,
+                ErrorMessage: 'Claim is no longer pending or was concurrently claimed'
+            };
+        }
+        claim.Status = 'Claimed';
+        claim.ClaimedAt = new Date();
+        claim.ClaimedByUserID = contextUser.ID;
+        const redeemContext = {
+            Claim: claim,
+            User: contextUser,
+            RedemptionToken: token
+        };
+        let result;
+        try {
+            result = await driver.OnClaim(redeemContext);
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            LogError(`[IdentityClaimEngineServer] driver.OnClaim threw exception for claim ${claim.ID}: ${msg}`);
+            result = { Success: false, ErrorMessage: `Claim driver execution failed: ${msg}` };
+        }
+        // If driver failed, un-consume the claim back to 'Pending' so transient failure doesn't permanently burn the claim
+        if (!result.Success) {
+            await this.revertClaimAtomic(claim.ID, md, contextUser);
+        }
+        return result;
+    }
+    /**
+     * Discovers every pending claim addressed to the authenticated user's email and redeems each
+     * one. This is workflow #2 from the entity's migration header — "Automatic Claim on Login".
+     *
+     * Server-only, and deliberately so: it runs through `RedeemClaim`, so each redemption still
+     * passes the full gate (email match or verified token, atomic CAS, driver exception handling).
+     * The email filter used to find the claims is a lookup convenience, not the security boundary.
+     */
+    async AutoClaimForUser(user, provider, options) {
+        if (!user || !user.Email)
+            return [];
+        const claims = await this.GetPendingClaimsForEmail(user.Email, user, provider);
+        const results = [];
+        for (const claim of claims) {
+            // Skip types that opted out of auto-claim or that never redeem on email match alone
+            // (RequireToken) — auto-claim has no token to present, so attempting them is noise.
+            const claimType = this.GetClaimTypeByID(claim.ClaimTypeID);
+            const typeConfig = this.GetClaimTypeConfiguration(claimType);
+            if (typeConfig.AutoClaim === false || typeConfig.RequireToken === true) {
+                continue;
+            }
+            results.push(await this.RedeemClaim(claim.ID, user, provider, undefined, options));
+        }
+        return results;
+    }
+    /**
+     * Executes atomic single-use Compare-And-Swap (CAS) state transition on the IdentityClaim record
+     * from 'Pending' to 'Claimed'. Returns true iff this execution successfully transitioned the record.
+     */
+    async consumeClaimAtomic(claimID, userID, md, contextUser) {
+        try {
+            // Metadata (schema/table names) and SQL execution MUST come from the same provider.
+            // Previously the schema was resolved off `md` while ExecuteSQL was taken from the
+            // process global — identical objects in a single-provider process, but the moment a
+            // caller threads a provider the statement would be built for one database and run
+            // against another.
+            const provider = md;
+            if (!provider || typeof provider.ExecuteSQL !== 'function') {
+                LogError('consumeClaimAtomic: provider or ExecuteSQL not available for atomic CAS');
+                return false;
+            }
+            const entityInfo = md.Entities?.find(e => e.Name === 'MJ: Identity Claims');
+            const schemaName = entityInfo?.SchemaName ?? '__mj';
+            const tableName = entityInfo?.BaseTable ?? 'IdentityClaim';
+            const isPg = provider.PlatformKey === 'postgresql';
+            const table = isPg ? `${schemaName}.${tableName}` : `[${schemaName}].[${tableName}]`;
+            const sql = isPg
+                ? `UPDATE ${table} SET "Status" = 'Claimed', "ClaimedAt" = (now() AT TIME ZONE 'utc'), "ClaimedByUserID" = $2 WHERE "ID" = $1 AND "Status" = 'Pending' AND ("ExpiresAt" IS NULL OR "ExpiresAt" > (now() AT TIME ZONE 'utc')) RETURNING "ID";`
+                : `DECLARE @consumed TABLE (ID UNIQUEIDENTIFIER); UPDATE ${table} SET [Status] = 'Claimed', [ClaimedAt] = SYSUTCDATETIME(), [ClaimedByUserID] = @p1 OUTPUT INSERTED.ID INTO @consumed WHERE [ID] = @p0 AND [Status] = 'Pending' AND ([ExpiresAt] IS NULL OR [ExpiresAt] > SYSUTCDATETIME()); SELECT ID FROM @consumed;`;
+            const rows = await provider.ExecuteSQL(sql, [claimID, userID], { isMutation: true }, contextUser);
+            return Array.isArray(rows) && rows.length === 1;
+        }
+        catch {
+            return false;
+        }
+    }
+    /**
+     * Reverts an atomically consumed claim from 'Claimed' back to 'Pending' if driver execution fails.
+     */
+    async revertClaimAtomic(claimID, md, contextUser) {
+        try {
+            // Same single-provider requirement as consumeClaimAtomic above.
+            const provider = md;
+            if (!provider || typeof provider.ExecuteSQL !== 'function') {
+                return false;
+            }
+            const entityInfo = md.Entities?.find(e => e.Name === 'MJ: Identity Claims');
+            const schemaName = entityInfo?.SchemaName ?? '__mj';
+            const tableName = entityInfo?.BaseTable ?? 'IdentityClaim';
+            const isPg = provider.PlatformKey === 'postgresql';
+            const table = isPg ? `${schemaName}.${tableName}` : `[${schemaName}].[${tableName}]`;
+            const sql = isPg
+                ? `UPDATE ${table} SET "Status" = 'Pending', "ClaimedAt" = NULL, "ClaimedByUserID" = NULL WHERE "ID" = $1 AND "Status" = 'Claimed' RETURNING "ID";`
+                : `DECLARE @reverted TABLE (ID UNIQUEIDENTIFIER); UPDATE ${table} SET [Status] = 'Pending', [ClaimedAt] = NULL, [ClaimedByUserID] = NULL OUTPUT INSERTED.ID INTO @reverted WHERE [ID] = @p0 AND [Status] = 'Claimed'; SELECT ID FROM @reverted;`;
+            const rows = await provider.ExecuteSQL(sql, [claimID], { isMutation: true }, contextUser);
+            return Array.isArray(rows) && rows.length === 1;
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            LogError(`[IdentityClaimEngineServer] revertClaimAtomic failed for claim ${claimID}: ${msg}`);
+            return false;
+        }
+    }
+    /**
+     * Revokes a pending claim and invokes the driver's OnRevoke lifecycle method.
+     */
+    async RevokeClaim(claimID, contextUser, provider) {
+        if (!claimID)
+            return;
+        const md = provider ?? this.Provider;
+        const claim = await md.GetEntityObject('MJ: Identity Claims', contextUser);
+        const loaded = await claim.Load(claimID);
+        if (!loaded || claim.Status === 'Revoked')
+            return;
+        claim.Status = 'Revoked';
+        const saved = await claim.Save();
+        if (!saved) {
+            LogError(`[IdentityClaimEngineServer] RevokeClaim failed to save claim ${claimID}: ${claim.LatestResult?.CompleteMessage ?? 'unknown error'}`);
+            return; // do not run the driver's OnRevoke against a claim that is still live
+        }
+        const claimType = this.GetClaimTypeByID(claim.ClaimTypeID);
+        if (claimType) {
+            const driver = this.GetDriverInstance(claimType);
+            if (driver) {
+                await driver.OnRevoke({ Claim: claim, User: contextUser });
+            }
+        }
+    }
+}
+//# sourceMappingURL=IdentityClaimEngineServer.js.map

package/dist/engines/IdentityClaimEngineServer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"IdentityClaimEngineServer.js","sourceRoot":"","sources":["../../src/engines/IdentityClaimEngineServer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,eAAe,EAAY,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAC9F,OAAO,EAAuC,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAY,MAAM,sBAAsB,CAAC;AAC7H,OAAO,EACH,mBAAmB,EAUtB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,SAAS,EAAE,MAAM,2CAA2C,CAAC;AACtE,OAAO,EAAE,mBAAmB,EAAE,MAAM,sCAAsC,CAAC;AAC3E,OAAO,EAAE,OAAO,EAAE,MAAM,qCAAqC,CAAC;AAC9D,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAmCjE;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,OAAO,yBAA0B,SAAQ,aAAwC;IACnF;QACI,KAAK,EAAE,CAAC;QAkBJ,cAAS,GAA6B,IAAI,CAAC;IAjBnD,CAAC;IAEM,MAAM,KAAK,QAAQ;QACtB,OAAO,KAAK,CAAC,WAAW,EAA6B,CAAC;IAC1D,CAAC;IAED,qEAAqE;IACrE,0CAA0C;IAC1C,qEAAqE;IAErE;;OAEG;IACH,IAAc,IAAI;QACd,OAAO,mBAAmB,CAAC,QAAQ,CAAC;IACxC,CAAC;IAID;;;;;;;;;;;;OAYG;IACH,IAAW,QAAQ;QACf,OAAO,IAAI,CAAC,SAAS,IAAK,IAAI,QAAQ,EAAmC,CAAC;IAC9E,CAAC;IACD,IAAW,QAAQ,CAAC,KAAwB;QACxC,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;IAC3B,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,MAAM,CAAC,YAAsB,EAAE,WAAsB,EAAE,QAA4B;QAC5F,IAAI,QAAQ,EAAE,CAAC;YACX,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;QAC9B,CAAC;QACD,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;IAChE,CAAC;IAED,sCAAsC;IACtC,IAAW,UAAU;QACjB,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC;IAChC,CAAC;IAED,oDAAoD;IAC7C,kBAAkB,CAAC,IAAY;QAClC,OAAO,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAC9C,CAAC;IAED,+BAA+B;IACxB,gBAAgB,CAAC,EAAU;QAC9B,OAAO,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;IAC1C,CAAC;IAED,oFAAoF;IAC7E,iBAAiB,CAAC,SAAoC;QACzD,OAAO,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAClD,CAAC;IAED,oDAAoD;IAC7C,cAAc,CAAC,KAAa;QAC/B,OAAO,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC3C,CAAC;IAED,gFAAgF;IACzE,yBAAyB,CAAC,SAAgD;QAC7E,OAAO,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC,SAAS,CAAC,CAAC;IAC1D,CAAC;IAEO,UAAU,CAAC,GAAW;QAC1B,OAAO,GAAG;aACL,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;aACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;aACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;aACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;aACvB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACjC,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,WAAW,CAAC,MAA+B,EAAE,WAAsB,EAAE,QAA4B;QAC1G,MAAM,eAAe,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QACpE,IAAI,CAAC,eAAe,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;QAC9E,CAAC;QAED,IAAI,SAAgD,CAAC;QACrD,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACrB,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC1D,CAAC;aAAM,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YAC9B,SAAS,GAAG,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAC9D,CAAC;QAED,IAAI,CAAC,SAAS,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,mCAAmC,MAAM,CAAC,aAAa,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;QACrG,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,sBAAsB,SAAS,CAAC,IAAI,2CAA2C,CAAC,CAAC;QACrG,CAAC;QAED,MAAM,EAAE,GAAG,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC;QAErC,kDAAkD;QAClD,IAAI,gBAAgB,GAAkB,IAAI,CAAC;QAC3C,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YAClB,MAAM,MAAM,GAAG,iEAAiE,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YACvG,IAAI,MAAM,EAAE,CAAC;gBACT,gBAAgB,GAAG,MAAM,CAAC,QAAQ,CAAC;YACvC,CAAC;iBAAM,CAAC;gBACJ,MAAM,aAAa,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC;gBACrG,IAAI,CAAC,aAAa,EAAE,CAAC;oBACjB,MAAM,IAAI,KAAK,CAAC,2CAA2C,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;gBAClF,CAAC;gBACD,gBAAgB,GAAG,aAAa,CAAC,EAAE,CAAC;YACxC,CAAC;QACL,CAAC;QAED,sDAAsD;QACtD,IAAI,QAAQ,GAAG,MAAM,CAAC,iBAAiB,CAAC;QACxC,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;YACzC,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC5D,CAAC;QAED,IAAI,SAAS,GAAkB,IAAI,CAAC;QACpC,IAAI,QAAQ,EAAE,CAAC;YACX,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACjF,CAAC;QAED,MAAM,WAAW,GAA4B,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3F,IAAI,SAAS,EAAE,CAAC;YACZ,WAAW,CAAC,SAAS,GAAG,SAAS,CAAC;QACtC,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,eAAe,CAAwB,qBAAqB,EAAE,WAAW,CAAC,CAAC;QAClG,KAAK,CAAC,SAAS,EAAE,CAAC;QAClB,KAAK,CAAC,WAAW,GAAG,SAAS,CAAC,EAAE,CAAC;QACjC,KAAK,CAAC,eAAe,GAAG,eAAe,CAAC;QACxC,KAAK,CAAC,QAAQ,GAAG,gBAAgB,CAAC;QAClC,KAAK,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,IAAI,CAAC;QACzC,KAAK,CAAC,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC3E,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC;QAEzB,MAAM,IAAI,GAAG,MAAM,CAAC,aAAa,IAAI,SAAS,CAAC,qBAAqB,IAAI,EAAE,CAAC;QAC3E,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAC7B,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;QAC9C,KAAK,CAAC,SAAS,GAAG,SAAS,CAAC;QAE5B,KAAK,CAAC,iBAAiB,GAAG,MAAM,CAAC,iBAAiB,IAAI,IAAI,CAAC;QAC3D,KAAK,CAAC,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAE9F,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;QACjC,IAAI,CAAC,KAAK,EAAE,CAAC;YACT,MAAM,IAAI,KAAK,CAAC,iCAAiC,KAAK,CAAC,YAAY,EAAE,OAAO,IAAI,eAAe,EAAE,CAAC,CAAC;QACvG,CAAC;QAED,qEAAqE;QACrE,IAAI,MAAM,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACD,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;YAC/E,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACX,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC7D,QAAQ,CAAC,iEAAiE,eAAe,KAAK,GAAG,EAAE,CAAC,CAAC;YACzG,CAAC;QACL,CAAC;QAED,yBAAyB;QACzB,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;QACjD,IAAI,MAAM,EAAE,CAAC;YACT,MAAM,MAAM,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;QAC/D,CAAC;QAED,OAAO,KAAK,CAAC;IACjB,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,cAAc,CACxB,KAA4B,EAC5B,SAAoC,EACpC,MAA+B,EAC/B,QAAiB,EACjB,WAAsB;QAEtB,IAAI,CAAC;YACD,MAAM,UAAU,GAAG,mBAAmB,CAAC,QAAQ,CAAC;YAChD,MAAM,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;YAE5C,MAAM,cAAc,GAAG,oBAAoB,CAAC,QAAQ,CAAC;YACrD,MAAM,cAAc,CAAC,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;YAEhD,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;YAC9B,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,kCAAkC,CAAC;YACzH,OAAO,CAAC,EAAE,GAAG,KAAK,CAAC,eAAe,CAAC;YAEnC,6CAA6C;YAC7C,MAAM,OAAO,GAAG,MAAM,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,gCAAgC,CAAC;YACvG,MAAM,UAAU,GAAG,QAAQ,CAAC,CAAC,CAAC,UAAU,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5E,MAAM,QAAQ,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,qBAAqB,KAAK,CAAC,EAAE,GAAG,UAAU,EAAE,CAAC;YAE3F,OAAO,CAAC,OAAO,GAAG,MAAM,CAAC,YAAY,IAAI,kBAAkB,SAAS,CAAC,IAAI,eAAe,CAAC;YAEzF,+EAA+E;YAC/E,MAAM,UAAU,GAAG,MAAM,CAAC,eAAe,CAAC;YAC1C,MAAM,cAAc,GAAG,UAAU,CAAC,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAE5G,IAAI,cAAc,EAAE,CAAC;gBACjB,OAAO,CAAC,gBAAgB,GAAG,cAAc,CAAC;gBAC1C,OAAO,CAAC,WAAW,GAAG;oBAClB,KAAK,EAAE,KAAK;oBACZ,SAAS,EAAE,SAAS;oBACpB,QAAQ,EAAE,QAAQ;oBAClB,cAAc,EAAE,KAAK,CAAC,eAAe;oBACrC,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,EAAE;oBAC7B,GAAG,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC;iBACjC,CAAC;YACN,CAAC;iBAAM,CAAC;gBACJ,4DAA4D;gBAC5D,OAAO,CAAC,IAAI,GAAG;;sFAEuD,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC;;gFAErC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,eAAe,CAAC;;;uCAG/E,QAAQ;;;;;6DAKc,KAAK,CAAC,SAAS,CAAC,kBAAkB,EAAE;;;iBAGhF,CAAC;YACN,CAAC;YAED,SAAS,CAAC,iEAAiE,KAAK,CAAC,eAAe,EAAE,CAAC,CAAC;YACpG,+CAA+C;YAC/C,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,UAAU,CAAC;YACpE,MAAM,UAAU,GAAG,MAAM,UAAU,CAAC,iBAAiB,CAAC,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;YACxG,OAAO,UAAU,EAAE,OAAO,KAAK,IAAI,CAAC;QACxC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,QAAQ,CAAC,qDAAqD,GAAG,EAAE,CAAC,CAAC;YACrE,OAAO,KAAK,CAAC;QACjB,CAAC;IACL,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,wBAAwB,CAAC,KAAa,EAAE,WAAsB,EAAE,QAA4B;QACrG,MAAM,eAAe,GAAG,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QACnD,IAAI,CAAC,eAAe;YAAE,OAAO,EAAE,CAAC;QAEhC,sFAAsF;QACtF,gFAAgF;QAChF,yDAAyD;QACzD,MAAM,EAAE,GAAG,IAAI,OAAO,CAAC,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAgC,CAAC,CAAC;QACnF,MAAM,OAAO,GAAG,eAAe,CAAC,eAAe,CAAC,CAAC;QACjD,iFAAiF;QACjF,uFAAuF;QACvF,MAAM,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAAwB;YACnD,UAAU,EAAE,qBAAqB;YACjC,WAAW,EAAE,sBAAsB,OAAO,6CAA6C,MAAM,GAAG;YAChG,UAAU,EAAE,eAAe;SAC9B,EAAE,WAAW,CAAC,CAAC;QAEhB,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnC,OAAO,MAAM,CAAC,OAAO,CAAC;QAC1B,CAAC;QACD,OAAO,EAAE,CAAC;IACd,CAAC;IAED;;;;;;OAMG;IACI,KAAK,CAAC,WAAW,CAAC,OAAe,EAAE,WAAqB,EAAE,QAA2B,EAAE,KAAc,EAAE,OAA4B;QACtI,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,qBAAqB,EAAE,CAAC;QACnE,CAAC;QACD,IAAI,CAAC,WAAW,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC;YAClC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,kDAAkD,EAAE,CAAC;QAChG,CAAC;QACD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACZ,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,mDAAmD,EAAE,CAAC;QACjG,CAAC;QAED,yFAAyF;QACzF,2FAA2F;QAC3F,sFAAsF;QACtF,2FAA2F;QAC3F,yFAAyF;QACzF,MAAM,EAAE,GAAG,QAAQ,CAAC;QACpB,kEAAkE;QAClE,EAAE;QACF,iFAAiF;QACjF,qFAAqF;QACrF,8EAA8E;QAC9E,EAAE;QACF,wFAAwF;QACxF,mFAAmF;QACnF,qFAAqF;QACrF,uFAAuF;QACvF,uFAAuF;QACvF,oFAAoF;QACpF,0FAA0F;QAC1F,oFAAoF;QACpF,uFAAuF;QACvF,4CAA4C;QAC5C,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC,aAAa,EAAE,IAAI,WAAW,CAAC;QACnE,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,eAAe,CAAwB,qBAAqB,EAAE,QAAQ,CAAC,CAAC;QAC/F,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACzC,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,kCAAkC,OAAO,EAAE,EAAE,CAAC;QACzF,CAAC;QAED,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC7B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,+CAA+C,KAAK,CAAC,MAAM,GAAG,EAAE,CAAC;QAC5G,CAAC;QAED,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACnD,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC;YACzB,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;YACnB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,mBAAmB,EAAE,CAAC;QACjE,CAAC;QAED,kFAAkF;QAClF,6EAA6E;QAC7E,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC3D,IAAI,CAAC,SAAS,EAAE,CAAC;YACb,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,cAAc,KAAK,CAAC,WAAW,YAAY,EAAE,CAAC;QACzF,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC;YACtB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,eAAe,SAAS,CAAC,IAAI,8CAA8C,EAAE,CAAC;QACzH,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,CAAC,yBAAyB,CAAC,SAAS,CAAC,CAAC;QAE7D,kFAAkF;QAClF,mFAAmF;QACnF,kEAAkE;QAClE,IAAI,cAAc,GAAG,OAAO,CAAC,WAAW,CAAC,KAAK,IAAI,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,eAAe,CAAC,CAAC;QACpH,IAAI,cAAc,EAAE,CAAC;YACjB,IAAI,UAAU,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;gBACnC,cAAc,GAAG,KAAK,CAAC,CAAC,+CAA+C;YAC3E,CAAC;iBAAM,IAAI,OAAO,EAAE,aAAa,KAAK,KAAK,EAAE,CAAC;gBAC1C,cAAc,GAAG,KAAK,CAAC,CAAC,4DAA4D;YACxF,CAAC;iBAAM,IAAI,UAAU,CAAC,oBAAoB,KAAK,IAAI,IAAI,OAAO,EAAE,aAAa,KAAK,IAAI,EAAE,CAAC;gBACrF,cAAc,GAAG,KAAK,CAAC,CAAC,6CAA6C;YACzE,CAAC;QACL,CAAC;QACD,IAAI,UAAU,GAAG,KAAK,CAAC;QAEvB,IAAI,KAAK,EAAE,CAAC;YACR,MAAM,YAAY,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YAEnF,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;gBAC1B,8EAA8E;gBAC9E,yEAAyE;gBACzE,8EAA8E;gBAC9E,6EAA6E;gBAC7E,qCAAqC;gBACrC,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,eAAe,CAA0B,wBAAwB,EAAE,QAAQ,CAAC,CAAC;gBACrG,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;gBAChE,IAAI,CAAC,YAAY,EAAE,CAAC;oBAChB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,oDAAoD,EAAE,CAAC;gBAClG,CAAC;gBACD,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;oBACnB,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;oBAC1D,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;oBACpD,IAAI,WAAW,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM,IAAI,MAAM,CAAC,eAAe,CAAC,WAAW,EAAE,SAAS,CAAC,EAAE,CAAC;wBAC5F,UAAU,GAAG,IAAI,CAAC;oBACtB,CAAC;gBACL,CAAC;YACL,CAAC;iBAAM,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;gBAC5B,IAAI,CAAC;oBACD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;oBAChD,IAAI,QAAQ,IAAI,OAAO,QAAQ,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;wBACrD,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;wBAC5D,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;wBACpD,IAAI,WAAW,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM,IAAI,MAAM,CAAC,eAAe,CAAC,WAAW,EAAE,SAAS,CAAC,EAAE,CAAC;4BAC5F,UAAU,GAAG,IAAI,CAAC;wBACtB,CAAC;oBACL,CAAC;gBACL,CAAC;gBAAC,MAAM,CAAC;oBACL,gCAAgC;gBACpC,CAAC;YACL,CAAC;QACL,CAAC;QAED,IAAI,CAAC,cAAc,IAAI,CAAC,UAAU,EAAE,CAAC;YACjC,OAAO;gBACH,OAAO,EAAE,KAAK;gBACd,YAAY,EAAE,8HAA8H;aAC/I,CAAC;QACN,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,wCAAwC,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;QACtG,CAAC;QAED,sDAAsD;QACtD,6EAA6E;QAC7E,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,EAAE,EAAE,WAAW,CAAC,EAAE,EAAE,EAAE,EAAE,WAAW,CAAC,CAAC;QAC5F,IAAI,CAAC,UAAU,EAAE,CAAC;YACd,OAAO;gBACH,OAAO,EAAE,KAAK;gBACd,YAAY,EAAE,wDAAwD;aACzE,CAAC;QACN,CAAC;QAED,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC;QACzB,KAAK,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAC7B,KAAK,CAAC,eAAe,GAAG,WAAW,CAAC,EAAE,CAAC;QAEvC,MAAM,aAAa,GAAuB;YACtC,KAAK,EAAE,KAAK;YACZ,IAAI,EAAE,WAAW;YACjB,eAAe,EAAE,KAAK;SACzB,CAAC;QAEF,IAAI,MAAmB,CAAC;QACxB,IAAI,CAAC;YACD,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACjD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,QAAQ,CAAC,wEAAwE,KAAK,CAAC,EAAE,KAAK,GAAG,EAAE,CAAC,CAAC;YACrG,MAAM,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,kCAAkC,GAAG,EAAE,EAAE,CAAC;QACvF,CAAC;QAED,mHAAmH;QACnH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAClB,MAAM,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,EAAE,WAAW,CAAC,CAAC;QAC5D,CAAC;QAED,OAAO,MAAM,CAAC;IAClB,CAAC;IAED;;;;;;;OAOG;IACI,KAAK,CAAC,gBAAgB,CAAC,IAAc,EAAE,QAA2B,EAAE,OAA4B;QACnG,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC/E,MAAM,OAAO,GAAkB,EAAE,CAAC;QAClC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YACzB,oFAAoF;YACpF,oFAAoF;YACpF,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YAC3D,MAAM,UAAU,GAAG,IAAI,CAAC,yBAAyB,CAAC,SAAS,CAAC,CAAC;YAC7D,IAAI,UAAU,CAAC,SAAS,KAAK,KAAK,IAAI,UAAU,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;gBACrE,SAAS;YACb,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;QACvF,CAAC;QACD,OAAO,OAAO,CAAC;IACnB,CAAC;IAGD;;;OAGG;IACK,KAAK,CAAC,kBAAkB,CAAC,OAAe,EAAE,MAAc,EAAE,EAAqB,EAAE,WAAsB;QAC3G,IAAI,CAAC;YACD,oFAAoF;YACpF,kFAAkF;YAClF,oFAAoF;YACpF,kFAAkF;YAClF,mBAAmB;YACnB,MAAM,QAAQ,GAAG,EAA0J,CAAC;YAC5K,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;gBACzD,QAAQ,CAAC,yEAAyE,CAAC,CAAC;gBACpF,OAAO,KAAK,CAAC;YACjB,CAAC;YAED,MAAM,UAAU,GAAG,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,qBAAqB,CAAC,CAAC;YAC5E,MAAM,UAAU,GAAG,UAAU,EAAE,UAAU,IAAI,MAAM,CAAC;YACpD,MAAM,SAAS,GAAG,UAAU,EAAE,SAAS,IAAI,eAAe,CAAC;YAE3D,MAAM,IAAI,GAAG,QAAQ,CAAC,WAAW,KAAK,YAAY,CAAC;YACnD,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,UAAU,IAAI,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,UAAU,MAAM,SAAS,GAAG,CAAC;YAErF,MAAM,GAAG,GAAG,IAAI;gBACZ,CAAC,CAAC,UAAU,KAAK,4NAA4N;gBAC7O,CAAC,CAAC,yDAAyD,KAAK,uPAAuP,CAAC;YAE5T,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAiB,GAAG,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,WAAW,CAAC,CAAC;YAClH,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,KAAK,CAAC;QACjB,CAAC;IACL,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,iBAAiB,CAAC,OAAe,EAAE,EAAqB,EAAE,WAAsB;QAC1F,IAAI,CAAC;YACD,gEAAgE;YAChE,MAAM,QAAQ,GAAG,EAA0J,CAAC;YAC5K,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;gBACzD,OAAO,KAAK,CAAC;YACjB,CAAC;YAED,MAAM,UAAU,GAAG,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,qBAAqB,CAAC,CAAC;YAC5E,MAAM,UAAU,GAAG,UAAU,EAAE,UAAU,IAAI,MAAM,CAAC;YACpD,MAAM,SAAS,GAAG,UAAU,EAAE,SAAS,IAAI,eAAe,CAAC;YAE3D,MAAM,IAAI,GAAG,QAAQ,CAAC,WAAW,KAAK,YAAY,CAAC;YACnD,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,UAAU,IAAI,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,UAAU,MAAM,SAAS,GAAG,CAAC;YAErF,MAAM,GAAG,GAAG,IAAI;gBACZ,CAAC,CAAC,UAAU,KAAK,kIAAkI;gBACnJ,CAAC,CAAC,yDAAyD,KAAK,gLAAgL,CAAC;YAErP,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAiB,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,WAAW,CAAC,CAAC;YAC1G,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,QAAQ,CAAC,kEAAkE,OAAO,KAAK,GAAG,EAAE,CAAC,CAAC;YAC9F,OAAO,KAAK,CAAC;QACjB,CAAC;IACL,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,WAAW,CAAC,OAAe,EAAE,WAAsB,EAAE,QAA4B;QAC1F,IAAI,CAAC,OAAO;YAAE,OAAO;QAErB,MAAM,EAAE,GAAG,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC;QACrC,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,eAAe,CAAwB,qBAAqB,EAAE,WAAW,CAAC,CAAC;QAClG,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACzC,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO;QAElD,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC;QACzB,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;QACjC,IAAI,CAAC,KAAK,EAAE,CAAC;YACT,QAAQ,CAAC,gEAAgE,OAAO,KAAK,KAAK,CAAC,YAAY,EAAE,eAAe,IAAI,eAAe,EAAE,CAAC,CAAC;YAC/I,OAAO,CAAC,sEAAsE;QAClF,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC3D,IAAI,SAAS,EAAE,CAAC;YACZ,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;YACjD,IAAI,MAAM,EAAE,CAAC;gBACT,MAAM,MAAM,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;YAC/D,CAAC;QACL,CAAC;IACL,CAAC;CACJ"}

package/dist/index.d.ts

@@ -31,6 +31,7 @@ export * from './custom/MJAIBridgeProviderChannelEntityServer.server.js';
 export * from './custom/MJAIAgentSessionBridgeEntityServer.server.js';
 export * from './custom/MJAIAgentSessionBridgeParticipantEntityServer.server.js';
 export * from './custom/MJAIRemoteBrowserProviderEntityServer.server.js';
+export * from './custom/MJMaterializedResultEntityServer.server.js';
 export * from './custom/MJAISkillPermissionEntityServer.server.js';
 export * from './custom/MJAISkillEntityServer.server.js';
 export * from './custom/MJMLTrainingPipelineEntityServer.server.js';
@@ -46,5 +47,6 @@ export * from './custom/util.js';
 export * from './engines/QueryEngineServer.js';
 export * from './engines/QueryMatchResult.js';
 export * from './engines/ComponentMetadataEngineServer.js';
+export * from './engines/IdentityClaimEngineServer.js';
 export * from './custom/MJRemoteOperationEntityServer.server.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,wCAAwC,CAAC;AACvD,cAAc,8CAA8C,CAAC;AAC7D,cAAc,2CAA2C,CAAC;AAC1D,cAAc,kDAAkD,CAAC;AACjE,cAAc,4DAA4D,CAAC;AAC3E,cAAc,4CAA4C,CAAC;AAC3D,cAAc,qCAAqC,CAAC;AACpD,cAAc,wCAAwC,CAAC;AACvD,cAAc,+CAA+C,CAAC;AAC9D,cAAc,wCAAwC,CAAC;AACvD,cAAc,oCAAoC,CAAC;AACnD,cAAc,0CAA0C,CAAC;AACzD,cAAc,sCAAsC,CAAC;AACrD,cAAc,2CAA2C,CAAC;AAC1D,cAAc,yCAAyC,CAAC;AACxD,cAAc,+CAA+C,CAAC;AAC9D,cAAc,2CAA2C,CAAC;AAC1D,cAAc,8CAA8C,CAAC;AAC7D,cAAc,2CAA2C,CAAC;AAC1D,cAAc,mCAAmC,CAAC;AAClD,cAAc,2CAA2C,CAAC;AAC1D,cAAc,wCAAwC,CAAC;AACvD,cAAc,6CAA6C,CAAC;AAC5D,cAAc,0CAA0C,CAAC;AACzD,cAAc,kDAAkD,CAAC;AACjE,cAAc,uCAAuC,CAAC;AACtD,cAAc,8CAA8C,CAAC;AAC7D,cAAc,gDAAgD,CAAC;AAC/D,cAAc,qDAAqD,CAAC;AACpE,cAAc,uDAAuD,CAAC;AACtE,cAAc,oDAAoD,CAAC;AACnE,cAAc,+DAA+D,CAAC;AAC9E,cAAc,uDAAuD,CAAC;AACtE,cAAc,iDAAiD,CAAC;AAChE,cAAc,uCAAuC,CAAC;AACtD,cAAc,kDAAkD,CAAC;AACjE,cAAc,2CAA2C,CAAC;AAC1D,cAAc,oDAAoD,CAAC;AACnE,cAAc,2CAA2C,CAAC;AAC1D,cAAc,mDAAmD,CAAC;AAClE,cAAc,sDAAsD,CAAC;AACrE,cAAc,8BAA8B,CAAC;AAC7C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,mCAAmC,CAAC;AAClD,cAAc,eAAe,CAAC;AAE9B,cAAc,6BAA6B,CAAC;AAC5C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,yCAAyC,CAAC;AAAA,cAAc,+CAA+C,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,wCAAwC,CAAC;AACvD,cAAc,8CAA8C,CAAC;AAC7D,cAAc,2CAA2C,CAAC;AAC1D,cAAc,kDAAkD,CAAC;AACjE,cAAc,4DAA4D,CAAC;AAC3E,cAAc,4CAA4C,CAAC;AAC3D,cAAc,qCAAqC,CAAC;AACpD,cAAc,wCAAwC,CAAC;AACvD,cAAc,+CAA+C,CAAC;AAC9D,cAAc,wCAAwC,CAAC;AACvD,cAAc,oCAAoC,CAAC;AACnD,cAAc,0CAA0C,CAAC;AACzD,cAAc,sCAAsC,CAAC;AACrD,cAAc,2CAA2C,CAAC;AAC1D,cAAc,yCAAyC,CAAC;AACxD,cAAc,+CAA+C,CAAC;AAC9D,cAAc,2CAA2C,CAAC;AAC1D,cAAc,8CAA8C,CAAC;AAC7D,cAAc,2CAA2C,CAAC;AAC1D,cAAc,mCAAmC,CAAC;AAClD,cAAc,2CAA2C,CAAC;AAC1D,cAAc,wCAAwC,CAAC;AACvD,cAAc,6CAA6C,CAAC;AAC5D,cAAc,0CAA0C,CAAC;AACzD,cAAc,kDAAkD,CAAC;AACjE,cAAc,uCAAuC,CAAC;AACtD,cAAc,8CAA8C,CAAC;AAC7D,cAAc,gDAAgD,CAAC;AAC/D,cAAc,qDAAqD,CAAC;AACpE,cAAc,uDAAuD,CAAC;AACtE,cAAc,oDAAoD,CAAC;AACnE,cAAc,+DAA+D,CAAC;AAC9E,cAAc,uDAAuD,CAAC;AACtE,cAAc,kDAAkD,CAAC;AACjE,cAAc,iDAAiD,CAAC;AAChE,cAAc,uCAAuC,CAAC;AACtD,cAAc,kDAAkD,CAAC;AACjE,cAAc,2CAA2C,CAAC;AAC1D,cAAc,oDAAoD,CAAC;AACnE,cAAc,2CAA2C,CAAC;AAC1D,cAAc,mDAAmD,CAAC;AAClE,cAAc,sDAAsD,CAAC;AACrE,cAAc,8BAA8B,CAAC;AAC7C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,mCAAmC,CAAC;AAClD,cAAc,eAAe,CAAC;AAE9B,cAAc,6BAA6B,CAAC;AAC5C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,yCAAyC,CAAC;AACxD,cAAc,qCAAqC,CAAC;AACpD,cAAc,+CAA+C,CAAC"}

package/dist/index.js

@@ -31,6 +31,7 @@ export * from './custom/MJAIBridgeProviderChannelEntityServer.server.js';
 export * from './custom/MJAIAgentSessionBridgeEntityServer.server.js';
 export * from './custom/MJAIAgentSessionBridgeParticipantEntityServer.server.js';
 export * from './custom/MJAIRemoteBrowserProviderEntityServer.server.js';
+export * from './custom/MJMaterializedResultEntityServer.server.js';
 export * from './custom/MJAISkillPermissionEntityServer.server.js';
 export * from './custom/MJAISkillEntityServer.server.js';
 export * from './custom/MJMLTrainingPipelineEntityServer.server.js';
@@ -46,5 +47,6 @@ export * from './custom/util.js';
 export * from './engines/QueryEngineServer.js';
 export * from './engines/QueryMatchResult.js';
 export * from './engines/ComponentMetadataEngineServer.js';
+export * from './engines/IdentityClaimEngineServer.js';
 export * from './custom/MJRemoteOperationEntityServer.server.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,wCAAwC,CAAC;AACvD,cAAc,8CAA8C,CAAC;AAC7D,cAAc,2CAA2C,CAAC;AAC1D,cAAc,kDAAkD,CAAC;AACjE,cAAc,4DAA4D,CAAC;AAC3E,cAAc,4CAA4C,CAAC;AAC3D,cAAc,qCAAqC,CAAC;AACpD,cAAc,wCAAwC,CAAC;AACvD,cAAc,+CAA+C,CAAC;AAC9D,cAAc,wCAAwC,CAAC;AACvD,cAAc,oCAAoC,CAAC;AACnD,cAAc,0CAA0C,CAAC;AACzD,cAAc,sCAAsC,CAAC;AACrD,cAAc,2CAA2C,CAAC;AAC1D,cAAc,yCAAyC,CAAC;AACxD,cAAc,+CAA+C,CAAC;AAC9D,cAAc,2CAA2C,CAAC;AAC1D,cAAc,8CAA8C,CAAC;AAC7D,cAAc,2CAA2C,CAAC;AAC1D,cAAc,mCAAmC,CAAC;AAClD,cAAc,2CAA2C,CAAC;AAC1D,cAAc,wCAAwC,CAAC;AACvD,cAAc,6CAA6C,CAAC;AAC5D,cAAc,0CAA0C,CAAC;AACzD,cAAc,kDAAkD,CAAC;AACjE,cAAc,uCAAuC,CAAC;AACtD,cAAc,8CAA8C,CAAC;AAC7D,cAAc,gDAAgD,CAAC;AAC/D,cAAc,qDAAqD,CAAC;AACpE,cAAc,uDAAuD,CAAC;AACtE,cAAc,oDAAoD,CAAC;AACnE,cAAc,+DAA+D,CAAC;AAC9E,cAAc,uDAAuD,CAAC;AACtE,cAAc,iDAAiD,CAAC;AAChE,cAAc,uCAAuC,CAAC;AACtD,cAAc,kDAAkD,CAAC;AACjE,cAAc,2CAA2C,CAAC;AAC1D,cAAc,oDAAoD,CAAC;AACnE,cAAc,2CAA2C,CAAC;AAC1D,cAAc,mDAAmD,CAAC;AAClE,cAAc,sDAAsD,CAAC;AACrE,cAAc,8BAA8B,CAAC;AAC7C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,mCAAmC,CAAC;AAClD,cAAc,eAAe,CAAC;AAE9B,cAAc,6BAA6B,CAAC;AAC5C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,yCAAyC,CAAC;AAAA,cAAc,+CAA+C,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,wCAAwC,CAAC;AACvD,cAAc,8CAA8C,CAAC;AAC7D,cAAc,2CAA2C,CAAC;AAC1D,cAAc,kDAAkD,CAAC;AACjE,cAAc,4DAA4D,CAAC;AAC3E,cAAc,4CAA4C,CAAC;AAC3D,cAAc,qCAAqC,CAAC;AACpD,cAAc,wCAAwC,CAAC;AACvD,cAAc,+CAA+C,CAAC;AAC9D,cAAc,wCAAwC,CAAC;AACvD,cAAc,oCAAoC,CAAC;AACnD,cAAc,0CAA0C,CAAC;AACzD,cAAc,sCAAsC,CAAC;AACrD,cAAc,2CAA2C,CAAC;AAC1D,cAAc,yCAAyC,CAAC;AACxD,cAAc,+CAA+C,CAAC;AAC9D,cAAc,2CAA2C,CAAC;AAC1D,cAAc,8CAA8C,CAAC;AAC7D,cAAc,2CAA2C,CAAC;AAC1D,cAAc,mCAAmC,CAAC;AAClD,cAAc,2CAA2C,CAAC;AAC1D,cAAc,wCAAwC,CAAC;AACvD,cAAc,6CAA6C,CAAC;AAC5D,cAAc,0CAA0C,CAAC;AACzD,cAAc,kDAAkD,CAAC;AACjE,cAAc,uCAAuC,CAAC;AACtD,cAAc,8CAA8C,CAAC;AAC7D,cAAc,gDAAgD,CAAC;AAC/D,cAAc,qDAAqD,CAAC;AACpE,cAAc,uDAAuD,CAAC;AACtE,cAAc,oDAAoD,CAAC;AACnE,cAAc,+DAA+D,CAAC;AAC9E,cAAc,uDAAuD,CAAC;AACtE,cAAc,kDAAkD,CAAC;AACjE,cAAc,iDAAiD,CAAC;AAChE,cAAc,uCAAuC,CAAC;AACtD,cAAc,kDAAkD,CAAC;AACjE,cAAc,2CAA2C,CAAC;AAC1D,cAAc,oDAAoD,CAAC;AACnE,cAAc,2CAA2C,CAAC;AAC1D,cAAc,mDAAmD,CAAC;AAClE,cAAc,sDAAsD,CAAC;AACrE,cAAc,8BAA8B,CAAC;AAC7C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,mCAAmC,CAAC;AAClD,cAAc,eAAe,CAAC;AAE9B,cAAc,6BAA6B,CAAC;AAC5C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,yCAAyC,CAAC;AACxD,cAAc,qCAAqC,CAAC;AACpD,cAAc,+CAA+C,CAAC"}