@memberjunction/core-entities-server 6.1.0-edge.5 → 6.1.0-edge.7

package/dist/custom/fieldPermissionDelta.js

@@ -0,0 +1,196 @@
+import { FieldPermissionAccess } from '@memberjunction/core';
+/**
+ * Computes the field-permission rows an entity is missing and the ones it should no longer
+ * have. Pure — no I/O, no entity objects, no provider. Everything comes off `EntityInfo`.
+ *
+ * **Snapshot defaults mirror entity-level permissions**, so enabling field security on an
+ * entity changes no behavior until an administrator tightens a specific field. A role that can
+ * read the entity gets `ReadAccess = 'Allow'`; its Update and Create follow the entity-level
+ * grants, defaulting to `No Access`.
+ *
+ * **A role without entity-level read gets no rows at all.** The entity-level gate already
+ * excludes it, so rows would be noise — and a row granting Update without Read would violate
+ * the Read-required CHECK constraint anyway.
+ *
+ * **Unrestrictable fields (primary keys, `__mj_` columns) get no rows.** They are forced open
+ * in the aggregation regardless, so rows for them are clutter that would also trip the
+ * save-time guard.
+ *
+ * **No role is excluded — including the ones the MJ system user holds.** Those rows are what
+ * keeps the system user working now that the aggregation has no bypass for it: it holds the
+ * standard roles (UI, Developer, Integration), which carry entity read on essentially
+ * everything, so the snapshot grants them `Allow` here and the save-time guards refuse any
+ * later `Deny` aimed at them. Access the server relies on is therefore visible in the data
+ * rather than implied by an exemption in code.
+ */
+export function ComputeFieldPermissionDelta(entity) {
+    const accessByRoleID = buildRoleEntityAccessMap(entity);
+    const rolesWithEntityPermission = buildRolesWithAnyEntityPermission(entity);
+    const restrictableFields = entity.Fields.filter(isRestrictable);
+    // The two halves ask DIFFERENT questions of the same permission rows, and must not share an
+    // answer. Creating a snapshot row is a grant, so it is offered only to roles that can actually
+    // READ the entity (`accessByRoleID`). Deleting a row destroys an administrator's configuration,
+    // so it is justified only when the row can no longer influence any decision — which turns on
+    // whether the role relates to the entity at all, never on the strength of that relationship.
+    return {
+        ToInsert: computeMissingRows(restrictableFields, accessByRoleID),
+        ToDelete: computeOrphanRowIDs(entity, rolesWithEntityPermission),
+    };
+}
+/**
+ * A field is restrictable when field security could meaningfully apply to it. Primary keys and
+ * `__mj_` system columns are not, and neither is any field on the security-configuration or
+ * identity entities.
+ */
+function isRestrictable(field) {
+    return !field.IsUnrestrictableField && !field.IsOnUnrestrictableEntity;
+}
+/**
+ * Every role holding ANY entity-permission row for this entity, whatever it grants and whichever
+ * `Type` it carries.
+ *
+ * This is the orphan test's criterion, and it is deliberately weaker than
+ * {@link buildRoleEntityAccessMap}. A field rule bound to a role is live at runtime purely on ROLE
+ * MEMBERSHIP — `EntityFieldInfo.AggregateFieldRulesForUser` matches on
+ * `user.UserRoles.find(...)` and never consults that role's entity-level access. So a role that
+ * grants nothing at entity level still contributes its field rules to the aggregate of any user who
+ * holds it AND gets entity access from a different role. Judging such a row inert because its own
+ * role cannot read the entity confuses a per-role fact with a per-user one, and deleting it on that
+ * basis destroys a `Deny` that was fully in force — turning "a Deny always wins" into
+ * "a Deny wins until reconciliation runs".
+ *
+ * Membership of this set is what `MJEntityFieldPermissionEntityServer.Validate()` requires before a
+ * field rule may be written at all, so the rule reconciliation enforces on cleanup is the same one
+ * authoring enforces on write.
+ */
+function buildRolesWithAnyEntityPermission(entity) {
+    const roleIDs = new Set();
+    for (const permission of entity.Permissions) {
+        const roleID = normalizeID(permission.RoleID);
+        if (roleID) {
+            roleIDs.add(roleID);
+        }
+    }
+    return roleIDs;
+}
+/**
+ * Each role's effective entity-level access, aggregating its own Allow/Deny rows the same way
+ * `EntityInfo.GetUserPermisions` does one level up: a Deny beats an Allow for the same action.
+ *
+ * Roles resolving to no read access are omitted entirely, so callers can treat presence in the
+ * map as "this role should have rows."
+ */
+function buildRoleEntityAccessMap(entity) {
+    const allow = new Map();
+    const deny = new Map();
+    for (const permission of entity.Permissions) {
+        const roleID = normalizeID(permission.RoleID);
+        if (!roleID) {
+            continue;
+        }
+        const bucket = isDenyPermission(permission) ? deny : allow;
+        foldPermissionInto(bucket, roleID, permission);
+    }
+    const effective = new Map();
+    for (const [roleID, granted] of allow) {
+        const blocked = deny.get(roleID) ?? { CanRead: false, CanUpdate: false, CanCreate: false };
+        const access = {
+            CanRead: granted.CanRead && !blocked.CanRead,
+            CanUpdate: granted.CanUpdate && !blocked.CanUpdate,
+            CanCreate: granted.CanCreate && !blocked.CanCreate,
+        };
+        if (access.CanRead) {
+            effective.set(roleID, access);
+        }
+    }
+    return effective;
+}
+function isDenyPermission(permission) {
+    return (permission.Type ?? 'Allow').trim().toLowerCase() === 'deny';
+}
+function foldPermissionInto(bucket, roleID, permission) {
+    const current = bucket.get(roleID) ?? { CanRead: false, CanUpdate: false, CanCreate: false };
+    current.CanRead = current.CanRead || !!permission.CanRead;
+    current.CanUpdate = current.CanUpdate || !!permission.CanUpdate;
+    current.CanCreate = current.CanCreate || !!permission.CanCreate;
+    bucket.set(roleID, current);
+}
+/**
+ * Every (restrictable field × qualifying role) pair that has no row yet, at snapshot defaults.
+ */
+function computeMissingRows(fields, accessByRoleID) {
+    const missing = [];
+    for (const field of fields) {
+        const existingRoleIDs = new Set(field.FieldPermissions.map(fp => normalizeID(fp.RoleID)).filter(Boolean));
+        for (const [roleID, access] of accessByRoleID) {
+            if (existingRoleIDs.has(roleID)) {
+                continue;
+            }
+            // A read-only field cannot be written through the API by anyone — it is excluded from
+            // the generated create input and from the update SET list — so an Update or Create
+            // verb on it can never decide anything. Writing `Allow` there would author a rule
+            // that reads as a granted permission and is in fact inert, on ~1,000 fields x every
+            // qualifying role. Read stays meaningful and is untouched: restricting a foreign-key
+            // display column ("who does this record belong to") is a legitimate and common use.
+            const writable = !field.ReadOnly;
+            missing.push({
+                EntityFieldID: field.ID,
+                RoleID: roleID,
+                // Read is Allow by construction — buildRoleEntityAccessMap omits roles without
+                // it — which is what keeps these rows on the right side of the Read-required
+                // CHECK constraint no matter what Update and Create resolve to.
+                ReadAccess: FieldPermissionAccess.Allow,
+                UpdateAccess: writable && access.CanUpdate ? FieldPermissionAccess.Allow : FieldPermissionAccess.NoAccess,
+                CreateAccess: writable && access.CanCreate ? FieldPermissionAccess.Allow : FieldPermissionAccess.NoAccess,
+            });
+        }
+    }
+    return missing;
+}
+/**
+ * Rows that should no longer exist. Two ways a row becomes an orphan:
+ *
+ *  - its field is no longer restrictable (a column was made a primary key, or the entity joined
+ *    the unrestrictable list), so the aggregation returns fully-open for it regardless of any rule;
+ *  - its role holds no entity-permission row for this entity at all, so no user can carry the rule
+ *    into an aggregate through this entity — which also covers a role that no longer exists.
+ *
+ * A row whose FIELD was dropped disappears with the field's cascade, so it never reaches this
+ * walk — `entity.Fields` is the live set.
+ *
+ * **A role's entity-level ACCESS is deliberately not part of this test**, and an earlier version of
+ * this function that used it was wrong. It reasoned that a role without entity read is excluded by
+ * the entity gate, so its field rules cannot matter. But `EntityInfo.GetUserPermisions` aggregates
+ * the entity gate across ALL of a user's roles, exactly as the field aggregation does — so a user
+ * reading the entity through role S still carries role R's field rules, whatever R grants on its
+ * own. Deleting them silently restored access an administrator had explicitly denied, and
+ * `computeMissingRows` only ever writes `Allow`, so it never came back.
+ */
+function computeOrphanRowIDs(entity, rolesWithEntityPermission) {
+    const orphans = [];
+    for (const field of entity.Fields) {
+        const fieldIsRestrictable = isRestrictable(field);
+        for (const permission of field.FieldPermissions) {
+            const roleID = normalizeID(permission.RoleID);
+            if (!fieldIsRestrictable || !roleID || !rolesWithEntityPermission.has(roleID)) {
+                orphans.push(permission.ID);
+            }
+        }
+    }
+    return orphans;
+}
+/**
+ * Lowercased ID for map keys. UUIDs arrive with different casing depending on their source, so
+ * normalize once here rather than scanning with a comparator on every lookup.
+ */
+function normalizeID(id) {
+    return (id ?? '').trim().toLowerCase();
+}
+/**
+ * True when the delta would change nothing, so callers can skip opening a transaction at all.
+ * Reconciliation runs on ordinary saves, and the overwhelmingly common answer is "nothing to do".
+ */
+export function IsEmptyFieldPermissionDelta(delta) {
+    return delta.ToInsert.length === 0 && delta.ToDelete.length === 0;
+}
+//# sourceMappingURL=fieldPermissionDelta.js.map

package/dist/custom/fieldPermissionDelta.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fieldPermissionDelta.js","sourceRoot":"","sources":["../../src/custom/fieldPermissionDelta.ts"],"names":[],"mappings":"AAAA,OAAO,EAAqD,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAgDhH;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,UAAU,2BAA2B,CAAC,MAAkB;IAC1D,MAAM,cAAc,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAC;IACxD,MAAM,yBAAyB,GAAG,iCAAiC,CAAC,MAAM,CAAC,CAAC;IAC5E,MAAM,kBAAkB,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IAEhE,4FAA4F;IAC5F,+FAA+F;IAC/F,gGAAgG;IAChG,6FAA6F;IAC7F,6FAA6F;IAC7F,OAAO;QACH,QAAQ,EAAE,kBAAkB,CAAC,kBAAkB,EAAE,cAAc,CAAC;QAChE,QAAQ,EAAE,mBAAmB,CAAC,MAAM,EAAE,yBAAyB,CAAC;KACnE,CAAC;AACN,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CAAC,KAAsB;IAC1C,OAAO,CAAC,KAAK,CAAC,qBAAqB,IAAI,CAAC,KAAK,CAAC,wBAAwB,CAAC;AAC3E,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,SAAS,iCAAiC,CAAC,MAAkB;IACzD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,KAAK,MAAM,UAAU,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAG,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAC9C,IAAI,MAAM,EAAE,CAAC;YACT,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACxB,CAAC;IACL,CAAC;IACD,OAAO,OAAO,CAAC;AACnB,CAAC;AAED;;;;;;GAMG;AACH,SAAS,wBAAwB,CAAC,MAAkB;IAChD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAyC,CAAC;IAC/D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAyC,CAAC;IAE9D,KAAK,MAAM,UAAU,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAG,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,SAAS;QACb,CAAC;QACD,MAAM,MAAM,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;QAC3D,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;IACnD,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,GAAG,EAAyC,CAAC;IACnE,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,KAAK,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QAC3F,MAAM,MAAM,GAAkC;YAC1C,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO;YAC5C,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC,SAAS;YAClD,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC,SAAS;SACrD,CAAC;QACF,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAClC,CAAC;IACL,CAAC;IACD,OAAO,SAAS,CAAC;AACrB,CAAC;AAED,SAAS,gBAAgB,CAAC,UAAgC;IACtD,OAAO,CAAC,UAAU,CAAC,IAAI,IAAI,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC;AACxE,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAkD,EAAE,MAAc,EAAE,UAAgC;IAC5H,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAC7F,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC;IAC1D,OAAO,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC;IAChE,OAAO,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC;IAChE,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAChC,CAAC;AAED;;GAEG;AACH,SAAS,kBAAkB,CACvB,MAAyB,EACzB,cAA0D;IAE1D,MAAM,OAAO,GAAiC,EAAE,CAAC;IACjD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QACzB,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;QAC1G,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,cAAc,EAAE,CAAC;YAC5C,IAAI,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC9B,SAAS;YACb,CAAC;YACD,sFAAsF;YACtF,mFAAmF;YACnF,kFAAkF;YAClF,oFAAoF;YACpF,qFAAqF;YACrF,oFAAoF;YACpF,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC;YACjC,OAAO,CAAC,IAAI,CAAC;gBACT,aAAa,EAAE,KAAK,CAAC,EAAE;gBACvB,MAAM,EAAE,MAAM;gBACd,+EAA+E;gBAC/E,6EAA6E;gBAC7E,gEAAgE;gBAChE,UAAU,EAAE,qBAAqB,CAAC,KAAK;gBACvC,YAAY,EAAE,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC,qBAAqB,CAAC,QAAQ;gBACzG,YAAY,EAAE,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC,qBAAqB,CAAC,QAAQ;aAC5G,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IACD,OAAO,OAAO,CAAC;AACnB,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,SAAS,mBAAmB,CAAC,MAAkB,EAAE,yBAAsC;IACnF,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAChC,MAAM,mBAAmB,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;QAClD,KAAK,MAAM,UAAU,IAAI,KAAK,CAAC,gBAAgB,EAAE,CAAC;YAC9C,MAAM,MAAM,GAAG,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YAC9C,IAAI,CAAC,mBAAmB,IAAI,CAAC,MAAM,IAAI,CAAC,yBAAyB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC5E,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;YAChC,CAAC;QACL,CAAC;IACL,CAAC;IACD,OAAO,OAAO,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,SAAS,WAAW,CAAC,EAA6B;IAC9C,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AAC3C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,2BAA2B,CAAC,KAA2B;IACnE,OAAO,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC;AACtE,CAAC"}

package/dist/custom/fieldPermissionReconciler.d.ts

@@ -0,0 +1,34 @@
+import { EntityInfo, IMetadataProvider, UserInfo } from '@memberjunction/core';
+/** What a reconciliation run actually wrote. */
+export type FieldPermissionReconcileResult = {
+    Inserted: number;
+    Deleted: number;
+};
+/**
+ * Brings an entity's field-permission rows in line with its fields and entity-level
+ * permissions, writing the whole delta in one transaction.
+ *
+ * Every row goes through `BaseEntity.Save()` / `.Delete()` rather than direct SQL, so the
+ * save-time target guard, validation and entity actions all run — the delta function and the
+ * guard agree instead of one bypassing the other. `AllowDirectSQLInsert` stays off.
+ *
+ * Returns immediately when there is nothing to do, which is the overwhelmingly common case:
+ * reconciliation is triggered from ordinary saves, and a transaction opened to write zero rows
+ * is pure cost.
+ *
+ * @param entity the entity to reconcile — its `Fields` and `Permissions` are the desired state
+ * @param provider the provider to transact on and to build entity objects from
+ * @param contextUser the user the writes are attributed to
+ */
+export declare function ReconcileFieldPermissions(entity: EntityInfo, provider: IMetadataProvider, contextUser: UserInfo): Promise<FieldPermissionReconcileResult>;
+/**
+ * Runs {@link ReconcileFieldPermissions} and swallows failures into a logged error.
+ *
+ * For the adapters that reconcile as a SIDE EFFECT of some other save — a role being granted
+ * entity access, say. The triggering save has already committed by then, so throwing would
+ * report a failure for work that succeeded. The rows stay missing until the next reconciliation,
+ * which is a visible loss of access rather than a silent loss of protection: a field with no row
+ * on an enabled entity is denied.
+ */
+export declare function ReconcileFieldPermissionsQuietly(entity: EntityInfo, provider: IMetadataProvider, contextUser: UserInfo): Promise<FieldPermissionReconcileResult>;
+//# sourceMappingURL=fieldPermissionReconciler.d.ts.map

package/dist/custom/fieldPermissionReconciler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fieldPermissionReconciler.d.ts","sourceRoot":"","sources":["../../src/custom/fieldPermissionReconciler.ts"],"names":[],"mappings":"AAAA,OAAO,EACH,UAAU,EACV,iBAAiB,EAIjB,QAAQ,EACX,MAAM,sBAAsB,CAAC;AAI9B,gDAAgD;AAChD,MAAM,MAAM,8BAA8B,GAAG;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;CACnB,CAAC;AAIF;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,yBAAyB,CAC3C,MAAM,EAAE,UAAU,EAClB,QAAQ,EAAE,iBAAiB,EAC3B,WAAW,EAAE,QAAQ,GACtB,OAAO,CAAC,8BAA8B,CAAC,CAmBzC;AAuDD;;;;;;;;GAQG;AACH,wBAAsB,gCAAgC,CAClD,MAAM,EAAE,UAAU,EAClB,QAAQ,EAAE,iBAAiB,EAC3B,WAAW,EAAE,QAAQ,GACtB,OAAO,CAAC,8BAA8B,CAAC,CAOzC"}

package/dist/custom/fieldPermissionReconciler.js

@@ -0,0 +1,96 @@
+import { LogDebug, LogError, RunInEntityTransaction, } from '@memberjunction/core';
+import { ComputeFieldPermissionDelta, IsEmptyFieldPermissionDelta } from './fieldPermissionDelta.js';
+const NOTHING_DONE = { Inserted: 0, Deleted: 0 };
+/**
+ * Brings an entity's field-permission rows in line with its fields and entity-level
+ * permissions, writing the whole delta in one transaction.
+ *
+ * Every row goes through `BaseEntity.Save()` / `.Delete()` rather than direct SQL, so the
+ * save-time target guard, validation and entity actions all run — the delta function and the
+ * guard agree instead of one bypassing the other. `AllowDirectSQLInsert` stays off.
+ *
+ * Returns immediately when there is nothing to do, which is the overwhelmingly common case:
+ * reconciliation is triggered from ordinary saves, and a transaction opened to write zero rows
+ * is pure cost.
+ *
+ * @param entity the entity to reconcile — its `Fields` and `Permissions` are the desired state
+ * @param provider the provider to transact on and to build entity objects from
+ * @param contextUser the user the writes are attributed to
+ */
+export async function ReconcileFieldPermissions(entity, provider, contextUser) {
+    if (!entity || !provider) {
+        return NOTHING_DONE;
+    }
+    const delta = ComputeFieldPermissionDelta(entity);
+    if (IsEmptyFieldPermissionDelta(delta)) {
+        return NOTHING_DONE;
+    }
+    LogDebug(`[FieldSecurity] Reconciling '${entity.Name}': ` +
+        `${delta.ToInsert.length} row(s) to add, ${delta.ToDelete.length} to remove`);
+    return RunInEntityTransaction(provider, async () => {
+        const deleted = await deleteRows(delta.ToDelete, provider, contextUser);
+        const inserted = await insertRows(delta.ToInsert, provider, contextUser, entity);
+        return { Inserted: inserted, Deleted: deleted };
+    });
+}
+/**
+ * Deletes happen BEFORE inserts. A row can be an orphan for one (field, role) while the same
+ * pair needs a fresh row at snapshot defaults — doing it the other way round would collide on
+ * the (EntityFieldID, RoleID) uniqueness constraint.
+ */
+async function deleteRows(ids, provider, contextUser) {
+    let deleted = 0;
+    for (const id of ids) {
+        const row = await provider.GetEntityObject('MJ: Entity Field Permissions', contextUser);
+        if (!(await row.Load(id))) {
+            // Already gone — another reconciliation, or a cascade from a dropped field.
+            continue;
+        }
+        if (await row.Delete()) {
+            deleted++;
+        }
+        else {
+            throw new Error(`Field-permission reconciliation could not remove row '${id}': ` +
+                `${row.LatestResult?.CompleteMessage ?? 'no error reported'}`);
+        }
+    }
+    return deleted;
+}
+async function insertRows(rows, provider, contextUser, entity) {
+    let inserted = 0;
+    for (const spec of rows) {
+        const row = await provider.GetEntityObject('MJ: Entity Field Permissions', contextUser);
+        row.NewRecord();
+        row.EntityFieldID = spec.EntityFieldID;
+        row.RoleID = spec.RoleID;
+        row.ReadAccess = spec.ReadAccess;
+        row.UpdateAccess = spec.UpdateAccess;
+        row.CreateAccess = spec.CreateAccess;
+        if (!(await row.Save())) {
+            throw new Error(`Field-permission reconciliation could not add a row for '${entity.Name}' ` +
+                `(field ${spec.EntityFieldID}, role ${spec.RoleID}): ` +
+                `${row.LatestResult?.CompleteMessage ?? 'no error reported'}`);
+        }
+        inserted++;
+    }
+    return inserted;
+}
+/**
+ * Runs {@link ReconcileFieldPermissions} and swallows failures into a logged error.
+ *
+ * For the adapters that reconcile as a SIDE EFFECT of some other save — a role being granted
+ * entity access, say. The triggering save has already committed by then, so throwing would
+ * report a failure for work that succeeded. The rows stay missing until the next reconciliation,
+ * which is a visible loss of access rather than a silent loss of protection: a field with no row
+ * on an enabled entity is denied.
+ */
+export async function ReconcileFieldPermissionsQuietly(entity, provider, contextUser) {
+    try {
+        return await ReconcileFieldPermissions(entity, provider, contextUser);
+    }
+    catch (e) {
+        LogError(`[FieldSecurity] Reconciliation of '${entity?.Name}' failed`, undefined, e);
+        return NOTHING_DONE;
+    }
+}
+//# sourceMappingURL=fieldPermissionReconciler.js.map

package/dist/custom/fieldPermissionReconciler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fieldPermissionReconciler.js","sourceRoot":"","sources":["../../src/custom/fieldPermissionReconciler.ts"],"names":[],"mappings":"AAAA,OAAO,EAGH,QAAQ,EACR,QAAQ,EACR,sBAAsB,GAEzB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,2BAA2B,EAAE,2BAA2B,EAAE,MAAM,wBAAwB,CAAC;AAQlG,MAAM,YAAY,GAAmC,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;AAEjF;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC3C,MAAkB,EAClB,QAA2B,EAC3B,WAAqB;IAErB,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACvB,OAAO,YAAY,CAAC;IACxB,CAAC;IACD,MAAM,KAAK,GAAG,2BAA2B,CAAC,MAAM,CAAC,CAAC;IAClD,IAAI,2BAA2B,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,OAAO,YAAY,CAAC;IACxB,CAAC;IAED,QAAQ,CACJ,gCAAgC,MAAM,CAAC,IAAI,KAAK;QAChD,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,mBAAmB,KAAK,CAAC,QAAQ,CAAC,MAAM,YAAY,CAC/E,CAAC;IAEF,OAAO,sBAAsB,CAAC,QAAmE,EAAE,KAAK,IAAI,EAAE;QAC1G,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;QACxE,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;QACjF,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IACpD,CAAC,CAAC,CAAC;AACP,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,UAAU,CAAC,GAAa,EAAE,QAA2B,EAAE,WAAqB;IACvF,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;QACnB,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,eAAe,CAAgC,8BAA8B,EAAE,WAAW,CAAC,CAAC;QACvH,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;YACxB,4EAA4E;YAC5E,SAAS;QACb,CAAC;QACD,IAAI,MAAM,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;YACrB,OAAO,EAAE,CAAC;QACd,CAAC;aAAM,CAAC;YACJ,MAAM,IAAI,KAAK,CACX,yDAAyD,EAAE,KAAK;gBAChE,GAAG,GAAG,CAAC,YAAY,EAAE,eAAe,IAAI,mBAAmB,EAAE,CAChE,CAAC;QACN,CAAC;IACL,CAAC;IACD,OAAO,OAAO,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,UAAU,CACrB,IAAgE,EAChE,QAA2B,EAC3B,WAAqB,EACrB,MAAkB;IAElB,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,eAAe,CAAgC,8BAA8B,EAAE,WAAW,CAAC,CAAC;QACvH,GAAG,CAAC,SAAS,EAAE,CAAC;QAChB,GAAG,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC;QACvC,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QACzB,GAAG,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QACjC,GAAG,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;QACrC,GAAG,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;QAErC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CACX,4DAA4D,MAAM,CAAC,IAAI,IAAI;gBAC3E,UAAU,IAAI,CAAC,aAAa,UAAU,IAAI,CAAC,MAAM,KAAK;gBACtD,GAAG,GAAG,CAAC,YAAY,EAAE,eAAe,IAAI,mBAAmB,EAAE,CAChE,CAAC;QACN,CAAC;QACD,QAAQ,EAAE,CAAC;IACf,CAAC;IACD,OAAO,QAAQ,CAAC;AACpB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,gCAAgC,CAClD,MAAkB,EAClB,QAA2B,EAC3B,WAAqB;IAErB,IAAI,CAAC;QACD,OAAO,MAAM,yBAAyB,CAAC,MAAM,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;IAC1E,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACT,QAAQ,CAAC,sCAAsC,MAAM,EAAE,IAAI,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;QACrF,OAAO,YAAY,CAAC;IACxB,CAAC;AACL,CAAC"}

package/dist/index.d.ts

@@ -35,11 +35,18 @@ export * from './custom/MJMaterializedResultEntityServer.server.js';
 export * from './custom/MJAISkillPermissionEntityServer.server.js';
 export * from './custom/MJAISkillEntityServer.server.js';
 export * from './custom/MJMLTrainingPipelineEntityServer.server.js';
+export * from './custom/MJUserEntityServer.server.js';
+export * from './custom/MJRoleEntityServer.server.js';
+export * from './custom/MJUserRoleEntityServer.server.js';
 export * from './custom/MJUserRoutineEntityServer.server.js';
 export * from './custom/MJUserRoutineRecipientEntityServer.server.js';
 export * from './custom/MJAPIKeyScopeEntityServer.server.js';
 export * from './custom/MJAPIApplicationScopeEntityServer.server.js';
 export * from './custom/MJRowLevelSecurityFilterEntityServer.server.js';
+export * from './custom/MJEntityFieldPermissionEntityServer.server.js';
+export * from './custom/MJEntityEntityServer.server.js';
+export * from './custom/fieldPermissionDelta.js';
+export * from './custom/fieldPermissionReconciler.js';
 export * from './custom/rowFilterValidation.js';
 export * from './custom/json-schema-lite.js';
 export * from './custom/IntegrationLLMPKCallback.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,wCAAwC,CAAC;AACvD,cAAc,8CAA8C,CAAC;AAC7D,cAAc,2CAA2C,CAAC;AAC1D,cAAc,kDAAkD,CAAC;AACjE,cAAc,4DAA4D,CAAC;AAC3E,cAAc,4CAA4C,CAAC;AAC3D,cAAc,qCAAqC,CAAC;AACpD,cAAc,wCAAwC,CAAC;AACvD,cAAc,+CAA+C,CAAC;AAC9D,cAAc,wCAAwC,CAAC;AACvD,cAAc,oCAAoC,CAAC;AACnD,cAAc,0CAA0C,CAAC;AACzD,cAAc,sCAAsC,CAAC;AACrD,cAAc,2CAA2C,CAAC;AAC1D,cAAc,yCAAyC,CAAC;AACxD,cAAc,+CAA+C,CAAC;AAC9D,cAAc,2CAA2C,CAAC;AAC1D,cAAc,8CAA8C,CAAC;AAC7D,cAAc,2CAA2C,CAAC;AAC1D,cAAc,mCAAmC,CAAC;AAClD,cAAc,2CAA2C,CAAC;AAC1D,cAAc,wCAAwC,CAAC;AACvD,cAAc,6CAA6C,CAAC;AAC5D,cAAc,0CAA0C,CAAC;AACzD,cAAc,kDAAkD,CAAC;AACjE,cAAc,uCAAuC,CAAC;AACtD,cAAc,8CAA8C,CAAC;AAC7D,cAAc,gDAAgD,CAAC;AAC/D,cAAc,qDAAqD,CAAC;AACpE,cAAc,uDAAuD,CAAC;AACtE,cAAc,oDAAoD,CAAC;AACnE,cAAc,+DAA+D,CAAC;AAC9E,cAAc,uDAAuD,CAAC;AACtE,cAAc,kDAAkD,CAAC;AACjE,cAAc,iDAAiD,CAAC;AAChE,cAAc,uCAAuC,CAAC;AACtD,cAAc,kDAAkD,CAAC;AACjE,cAAc,2CAA2C,CAAC;AAC1D,cAAc,oDAAoD,CAAC;AACnE,cAAc,2CAA2C,CAAC;AAC1D,cAAc,mDAAmD,CAAC;AAClE,cAAc,sDAAsD,CAAC;AACrE,cAAc,8BAA8B,CAAC;AAC7C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,mCAAmC,CAAC;AAClD,cAAc,eAAe,CAAC;AAE9B,cAAc,6BAA6B,CAAC;AAC5C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,yCAAyC,CAAC;AACxD,cAAc,qCAAqC,CAAC;AACpD,cAAc,+CAA+C,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,wCAAwC,CAAC;AACvD,cAAc,8CAA8C,CAAC;AAC7D,cAAc,2CAA2C,CAAC;AAC1D,cAAc,kDAAkD,CAAC;AACjE,cAAc,4DAA4D,CAAC;AAC3E,cAAc,4CAA4C,CAAC;AAC3D,cAAc,qCAAqC,CAAC;AACpD,cAAc,wCAAwC,CAAC;AACvD,cAAc,+CAA+C,CAAC;AAC9D,cAAc,wCAAwC,CAAC;AACvD,cAAc,oCAAoC,CAAC;AACnD,cAAc,0CAA0C,CAAC;AACzD,cAAc,sCAAsC,CAAC;AACrD,cAAc,2CAA2C,CAAC;AAC1D,cAAc,yCAAyC,CAAC;AACxD,cAAc,+CAA+C,CAAC;AAC9D,cAAc,2CAA2C,CAAC;AAC1D,cAAc,8CAA8C,CAAC;AAC7D,cAAc,2CAA2C,CAAC;AAC1D,cAAc,mCAAmC,CAAC;AAClD,cAAc,2CAA2C,CAAC;AAC1D,cAAc,wCAAwC,CAAC;AACvD,cAAc,6CAA6C,CAAC;AAC5D,cAAc,0CAA0C,CAAC;AACzD,cAAc,kDAAkD,CAAC;AACjE,cAAc,uCAAuC,CAAC;AACtD,cAAc,8CAA8C,CAAC;AAC7D,cAAc,gDAAgD,CAAC;AAC/D,cAAc,qDAAqD,CAAC;AACpE,cAAc,uDAAuD,CAAC;AACtE,cAAc,oDAAoD,CAAC;AACnE,cAAc,+DAA+D,CAAC;AAC9E,cAAc,uDAAuD,CAAC;AACtE,cAAc,kDAAkD,CAAC;AACjE,cAAc,iDAAiD,CAAC;AAChE,cAAc,uCAAuC,CAAC;AACtD,cAAc,kDAAkD,CAAC;AACjE,cAAc,oCAAoC,CAAC;AACnD,cAAc,oCAAoC,CAAC;AACnD,cAAc,wCAAwC,CAAC;AACvD,cAAc,2CAA2C,CAAC;AAC1D,cAAc,oDAAoD,CAAC;AACnE,cAAc,2CAA2C,CAAC;AAC1D,cAAc,mDAAmD,CAAC;AAClE,cAAc,sDAAsD,CAAC;AACrE,cAAc,qDAAqD,CAAC;AACpE,cAAc,sCAAsC,CAAC;AACrD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,oCAAoC,CAAC;AACnD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,mCAAmC,CAAC;AAClD,cAAc,eAAe,CAAC;AAE9B,cAAc,6BAA6B,CAAC;AAC5C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,yCAAyC,CAAC;AACxD,cAAc,qCAAqC,CAAC;AACpD,cAAc,+CAA+C,CAAC"}

package/dist/index.js

@@ -35,11 +35,18 @@ export * from './custom/MJMaterializedResultEntityServer.server.js';
 export * from './custom/MJAISkillPermissionEntityServer.server.js';
 export * from './custom/MJAISkillEntityServer.server.js';
 export * from './custom/MJMLTrainingPipelineEntityServer.server.js';
+export * from './custom/MJUserEntityServer.server.js';
+export * from './custom/MJRoleEntityServer.server.js';
+export * from './custom/MJUserRoleEntityServer.server.js';
 export * from './custom/MJUserRoutineEntityServer.server.js';
 export * from './custom/MJUserRoutineRecipientEntityServer.server.js';
 export * from './custom/MJAPIKeyScopeEntityServer.server.js';
 export * from './custom/MJAPIApplicationScopeEntityServer.server.js';
 export * from './custom/MJRowLevelSecurityFilterEntityServer.server.js';
+export * from './custom/MJEntityFieldPermissionEntityServer.server.js';
+export * from './custom/MJEntityEntityServer.server.js';
+export * from './custom/fieldPermissionDelta.js';
+export * from './custom/fieldPermissionReconciler.js';
 export * from './custom/rowFilterValidation.js';
 export * from './custom/json-schema-lite.js';
 export * from './custom/IntegrationLLMPKCallback.js';

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,wCAAwC,CAAC;AACvD,cAAc,8CAA8C,CAAC;AAC7D,cAAc,2CAA2C,CAAC;AAC1D,cAAc,kDAAkD,CAAC;AACjE,cAAc,4DAA4D,CAAC;AAC3E,cAAc,4CAA4C,CAAC;AAC3D,cAAc,qCAAqC,CAAC;AACpD,cAAc,wCAAwC,CAAC;AACvD,cAAc,+CAA+C,CAAC;AAC9D,cAAc,wCAAwC,CAAC;AACvD,cAAc,oCAAoC,CAAC;AACnD,cAAc,0CAA0C,CAAC;AACzD,cAAc,sCAAsC,CAAC;AACrD,cAAc,2CAA2C,CAAC;AAC1D,cAAc,yCAAyC,CAAC;AACxD,cAAc,+CAA+C,CAAC;AAC9D,cAAc,2CAA2C,CAAC;AAC1D,cAAc,8CAA8C,CAAC;AAC7D,cAAc,2CAA2C,CAAC;AAC1D,cAAc,mCAAmC,CAAC;AAClD,cAAc,2CAA2C,CAAC;AAC1D,cAAc,wCAAwC,CAAC;AACvD,cAAc,6CAA6C,CAAC;AAC5D,cAAc,0CAA0C,CAAC;AACzD,cAAc,kDAAkD,CAAC;AACjE,cAAc,uCAAuC,CAAC;AACtD,cAAc,8CAA8C,CAAC;AAC7D,cAAc,gDAAgD,CAAC;AAC/D,cAAc,qDAAqD,CAAC;AACpE,cAAc,uDAAuD,CAAC;AACtE,cAAc,oDAAoD,CAAC;AACnE,cAAc,+DAA+D,CAAC;AAC9E,cAAc,uDAAuD,CAAC;AACtE,cAAc,kDAAkD,CAAC;AACjE,cAAc,iDAAiD,CAAC;AAChE,cAAc,uCAAuC,CAAC;AACtD,cAAc,kDAAkD,CAAC;AACjE,cAAc,2CAA2C,CAAC;AAC1D,cAAc,oDAAoD,CAAC;AACnE,cAAc,2CAA2C,CAAC;AAC1D,cAAc,mDAAmD,CAAC;AAClE,cAAc,sDAAsD,CAAC;AACrE,cAAc,8BAA8B,CAAC;AAC7C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,mCAAmC,CAAC;AAClD,cAAc,eAAe,CAAC;AAE9B,cAAc,6BAA6B,CAAC;AAC5C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,yCAAyC,CAAC;AACxD,cAAc,qCAAqC,CAAC;AACpD,cAAc,+CAA+C,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,wCAAwC,CAAC;AACvD,cAAc,8CAA8C,CAAC;AAC7D,cAAc,2CAA2C,CAAC;AAC1D,cAAc,kDAAkD,CAAC;AACjE,cAAc,4DAA4D,CAAC;AAC3E,cAAc,4CAA4C,CAAC;AAC3D,cAAc,qCAAqC,CAAC;AACpD,cAAc,wCAAwC,CAAC;AACvD,cAAc,+CAA+C,CAAC;AAC9D,cAAc,wCAAwC,CAAC;AACvD,cAAc,oCAAoC,CAAC;AACnD,cAAc,0CAA0C,CAAC;AACzD,cAAc,sCAAsC,CAAC;AACrD,cAAc,2CAA2C,CAAC;AAC1D,cAAc,yCAAyC,CAAC;AACxD,cAAc,+CAA+C,CAAC;AAC9D,cAAc,2CAA2C,CAAC;AAC1D,cAAc,8CAA8C,CAAC;AAC7D,cAAc,2CAA2C,CAAC;AAC1D,cAAc,mCAAmC,CAAC;AAClD,cAAc,2CAA2C,CAAC;AAC1D,cAAc,wCAAwC,CAAC;AACvD,cAAc,6CAA6C,CAAC;AAC5D,cAAc,0CAA0C,CAAC;AACzD,cAAc,kDAAkD,CAAC;AACjE,cAAc,uCAAuC,CAAC;AACtD,cAAc,8CAA8C,CAAC;AAC7D,cAAc,gDAAgD,CAAC;AAC/D,cAAc,qDAAqD,CAAC;AACpE,cAAc,uDAAuD,CAAC;AACtE,cAAc,oDAAoD,CAAC;AACnE,cAAc,+DAA+D,CAAC;AAC9E,cAAc,uDAAuD,CAAC;AACtE,cAAc,kDAAkD,CAAC;AACjE,cAAc,iDAAiD,CAAC;AAChE,cAAc,uCAAuC,CAAC;AACtD,cAAc,kDAAkD,CAAC;AACjE,cAAc,oCAAoC,CAAC;AACnD,cAAc,oCAAoC,CAAC;AACnD,cAAc,wCAAwC,CAAC;AACvD,cAAc,2CAA2C,CAAC;AAC1D,cAAc,oDAAoD,CAAC;AACnE,cAAc,2CAA2C,CAAC;AAC1D,cAAc,mDAAmD,CAAC;AAClE,cAAc,sDAAsD,CAAC;AACrE,cAAc,qDAAqD,CAAC;AACpE,cAAc,sCAAsC,CAAC;AACrD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,oCAAoC,CAAC;AACnD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,mCAAmC,CAAC;AAClD,cAAc,eAAe,CAAC;AAE9B,cAAc,6BAA6B,CAAC;AAC5C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,yCAAyC,CAAC;AACxD,cAAc,qCAAqC,CAAC;AACpD,cAAc,+CAA+C,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@memberjunction/core-entities-server",
   "type": "module",
-  "version": "6.1.0-edge.5",
+  "version": "6.1.0-edge.7",
   "description": "Entity subclasses for the metadata layer of MemberJunction that are only used on server side applications like MJAPI, distributed as part of each release of MemberJunction",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -15,33 +15,33 @@
     "typescript": "^5.9.3"
   },
   "dependencies": {
-    "@memberjunction/actions-base": "6.1.0-edge.5",
-    "@memberjunction/ai": "6.1.0-edge.5",
-    "@memberjunction/ai-core-plus": "6.1.0-edge.5",
-    "@memberjunction/ai-engine-base": "6.1.0-edge.5",
-    "@memberjunction/ai-prompts": "6.1.0-edge.5",
-    "@memberjunction/ai-provider-bundle": "6.1.0-edge.5",
-    "@memberjunction/ai-vector-dupe": "6.1.0-edge.5",
-    "@memberjunction/ai-vectordb": "6.1.0-edge.5",
-    "@memberjunction/ai-vectors-memory": "6.1.0-edge.5",
-    "@memberjunction/aiengine": "6.1.0-edge.5",
-    "@memberjunction/core": "6.1.0-edge.5",
-    "@memberjunction/core-entities": "6.1.0-edge.5",
-    "@memberjunction/predictive-studio-core": "6.1.0-edge.5",
-    "@memberjunction/doc-utils": "6.1.0-edge.5",
-    "@memberjunction/generic-database-provider": "6.1.0-edge.5",
-    "@memberjunction/global": "6.1.0-edge.5",
-    "@memberjunction/integration-engine": "6.1.0-edge.5",
-    "@memberjunction/integration-pk-classifier": "6.1.0-edge.5",
-    "@memberjunction/scheduling-engine": "6.1.0-edge.5",
-    "@memberjunction/sql-converter": "6.1.0-edge.5",
-    "@memberjunction/sql-dialect": "6.1.0-edge.5",
-    "@memberjunction/sql-parser": "6.1.0-edge.5",
-    "@memberjunction/sqlserver-dataprovider": "6.1.0-edge.5",
-    "@memberjunction/tag-engine": "6.1.0-edge.5",
-    "@memberjunction/communication-engine": "6.1.0-edge.5",
-    "@memberjunction/communication-types": "6.1.0-edge.5",
-    "@memberjunction/templates": "6.1.0-edge.5",
+    "@memberjunction/actions-base": "6.1.0-edge.7",
+    "@memberjunction/ai": "6.1.0-edge.7",
+    "@memberjunction/ai-core-plus": "6.1.0-edge.7",
+    "@memberjunction/ai-engine-base": "6.1.0-edge.7",
+    "@memberjunction/ai-prompts": "6.1.0-edge.7",
+    "@memberjunction/ai-provider-bundle": "6.1.0-edge.7",
+    "@memberjunction/ai-vector-dupe": "6.1.0-edge.7",
+    "@memberjunction/ai-vectordb": "6.1.0-edge.7",
+    "@memberjunction/ai-vectors-memory": "6.1.0-edge.7",
+    "@memberjunction/aiengine": "6.1.0-edge.7",
+    "@memberjunction/core": "6.1.0-edge.7",
+    "@memberjunction/core-entities": "6.1.0-edge.7",
+    "@memberjunction/predictive-studio-core": "6.1.0-edge.7",
+    "@memberjunction/doc-utils": "6.1.0-edge.7",
+    "@memberjunction/generic-database-provider": "6.1.0-edge.7",
+    "@memberjunction/global": "6.1.0-edge.7",
+    "@memberjunction/integration-engine": "6.1.0-edge.7",
+    "@memberjunction/integration-pk-classifier": "6.1.0-edge.7",
+    "@memberjunction/scheduling-engine": "6.1.0-edge.7",
+    "@memberjunction/sql-converter": "6.1.0-edge.7",
+    "@memberjunction/sql-dialect": "6.1.0-edge.7",
+    "@memberjunction/sql-parser": "6.1.0-edge.7",
+    "@memberjunction/sqlserver-dataprovider": "6.1.0-edge.7",
+    "@memberjunction/tag-engine": "6.1.0-edge.7",
+    "@memberjunction/communication-engine": "6.1.0-edge.7",
+    "@memberjunction/communication-types": "6.1.0-edge.7",
+    "@memberjunction/templates": "6.1.0-edge.7",
     "nunjucks": "3.2.4",
     "rxjs": "~7.8.1",
     "zod": "^3.25.0"