@memberjunction/core-entities-server 6.2.0-edge.2 → 6.2.0-edge.4

package/dist/custom/MJComponentEntityServer.server.js

@@ -4,27 +4,70 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
     else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
     return c > 3 && r && Object.defineProperty(target, key, r), r;
 };
-import { BaseEntity } from "@memberjunction/core";
+import { BaseEntity, } from "@memberjunction/core";
 import { RegisterClass } from "@memberjunction/global";
 import { MJComponentEntityExtended } from "@memberjunction/core-entities";
 import { EmbedTextLocalHelper } from "./util.js";
+import { FormScopeRefusalResult } from "./FormScopeGuard.js";
+import { ComponentGuardRefusal } from "./FormComponentGuard.js";
+/**
+ * Server-side `MJ: Components` entity.
+ *
+ * Generates the `FunctionalRequirements` and `TechnicalDesign` embeddings on save.
+ *
+ * Also guards the component behind a full custom form or panel (`ComponentGuardRefusal`). A form
+ * or panel draws the component its row points at, and a form's spec can load a component by name,
+ * so a change to a component can change what other people's forms draw:
+ * - without the `Manage Form Defaults` grant, any update, whatever columns it changes, and a
+ *   delete are allowed only for a component of the caller's own (`IsCallersOwnComponent`): used
+ *   by at least one row and only by the caller's own personal rows, or used by no row and created
+ *   by the caller;
+ * - with the grant, a delete, or an update that changes the specification, status, name,
+ *   namespace or type, is allowed unless another user's personal row uses the component.
+ * Without the grant, a created or renamed component also may not share its name with another
+ * component that is not the caller's own. A save or delete with no caller (a trusted server
+ * context) is not checked.
+ *
+ * The rows, the stored columns and the creator are read in one batch as the caller. The creator is
+ * the component's `Create` record in `MJ: Record Changes` with `Source` 'Internal', which the
+ * platform writes with every insert and which a caller cannot create through the API. The changed columns are
+ * found by comparing with the stored row, not with the values as loaded. When a read fails, the
+ * write is refused. The check needs a query and `Validate()` is synchronous, so it runs in `Save()`
+ * (an ordinary save and a `ReplayOnly` save alike) and in `Delete()`, before the write.
+ */
 let MJComponentEntityServer = class MJComponentEntityServer extends MJComponentEntityExtended {
     async Save(options) {
+        const operation = this.IsSaved ? 'update' : 'create';
+        const refusal = await ComponentGuardRefusal(this.guardedRow, operation);
+        if (refusal) {
+            this.RegisterResultHistoryEntry(FormScopeRefusalResult(operation, refusal));
+            return false;
+        }
         await this.GenerateEmbeddingsByFieldName([
             {
                 fieldName: "FunctionalRequirements",
                 vectorFieldName: "FunctionalRequirementsVector",
-                modelFieldName: "FunctionalRequirementsVectorEmbeddingModelID"
+                modelFieldName: "FunctionalRequirementsVectorEmbeddingModelID",
+                binaryVectorFieldName: "FunctionalRequirementsVectorBinary"
             },
             {
                 fieldName: "TechnicalDesign",
                 vectorFieldName: "TechnicalDesignVector",
-                modelFieldName: "TechnicalDesignVectorEmbeddingModelID"
+                modelFieldName: "TechnicalDesignVectorEmbeddingModelID",
+                binaryVectorFieldName: "TechnicalDesignVectorBinary"
             }
         ]);
         const saveResult = await super.Save(options);
         return saveResult;
     }
+    async Delete(options) {
+        const refusal = await ComponentGuardRefusal(this.guardedRow, 'delete');
+        if (refusal) {
+            this.RegisterResultHistoryEntry(FormScopeRefusalResult('delete', refusal));
+            return false;
+        }
+        return super.Delete(options);
+    }
     /**
      * Simple proxy to local helper method for embeddings. Needed for BaseEntity sub-classes that want to use embeddings built into BaseEntity
      * @param textToEmbed
@@ -33,6 +76,22 @@ let MJComponentEntityServer = class MJComponentEntityServer extends MJComponentE
     async EmbedTextLocal(textToEmbed) {
         return EmbedTextLocalHelper(this, textToEmbed);
     }
+    /** This component as the guard reads it. Built here because `ActiveUser` is protected on `BaseEntity`. */
+    get guardedRow() {
+        return {
+            ActiveUser: this.ActiveUser,
+            ID: this.ID,
+            Values: {
+                Specification: this.Specification,
+                Status: this.Status,
+                Name: this.Name,
+                Type: this.Type,
+                Namespace: this.Namespace,
+            },
+            RunViewProvider: this.RunViewProviderToUse,
+            MetadataProvider: this.ProviderToUse,
+        };
+    }
 };
 MJComponentEntityServer = __decorate([
     RegisterClass(BaseEntity, 'MJ: Components')

package/dist/custom/MJComponentEntityServer.server.js.map

@@ -1 +1 @@
-{"version":3,"file":"MJComponentEntityServer.server.js","sourceRoot":"","sources":["../../src/custom/MJComponentEntityServer.server.ts"],"names":[],"mappings":";;;;;;AAAA,OAAO,EAAE,UAAU,EAA4C,MAAM,sBAAsB,CAAC;AAC5F,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,EAAE,oBAAoB,EAAE,MAAM,QAAQ,CAAC;AAGvC,IAAM,uBAAuB,GAA7B,MAAM,uBAAwB,SAAQ,yBAAyB;IAClD,KAAK,CAAC,IAAI,CAAC,OAA2B;QAClD,MAAM,IAAI,CAAC,6BAA6B,CAAC;YACrC;gBACI,SAAS,EAAE,wBAAwB;gBACnC,eAAe,EAAE,8BAA8B;gBAC/C,cAAc,EAAE,8CAA8C;aACjE;YACD;gBACI,SAAS,EAAE,iBAAiB;gBAC5B,eAAe,EAAE,uBAAuB;gBACxC,cAAc,EAAE,uCAAuC;aAC1D;SACJ,CAAC,CAAC;QACH,MAAM,UAAU,GAAY,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtD,OAAO,UAAU,CAAC;IACtB,CAAC;IAED;;;;OAIG;IACgB,KAAK,CAAC,cAAc,CAAC,WAAmB;QACvD,OAAO,oBAAoB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACnD,CAAC;CACJ,CAAA;AA1BY,uBAAuB;IADnC,aAAa,CAAC,UAAU,EAAE,gBAAgB,CAAC;GAC/B,uBAAuB,CA0BnC"}
+{"version":3,"file":"MJComponentEntityServer.server.js","sourceRoot":"","sources":["../../src/custom/MJComponentEntityServer.server.ts"],"names":[],"mappings":";;;;;;AAAA,OAAO,EACH,UAAU,GAKb,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,EAAE,oBAAoB,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EAAE,qBAAqB,EAA4B,MAAM,sBAAsB,CAAC;AAEvF;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEI,IAAM,uBAAuB,GAA7B,MAAM,uBAAwB,SAAQ,yBAAyB;IAClD,KAAK,CAAC,IAAI,CAAC,OAA2B;QAClD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;QACrD,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QACxE,IAAI,OAAO,EAAE,CAAC;YACV,IAAI,CAAC,0BAA0B,CAAC,sBAAsB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;YAC5E,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,MAAM,IAAI,CAAC,6BAA6B,CAAC;YACrC;gBACI,SAAS,EAAE,wBAAwB;gBACnC,eAAe,EAAE,8BAA8B;gBAC/C,cAAc,EAAE,8CAA8C;gBAC9D,qBAAqB,EAAE,oCAAoC;aAC9D;YACD;gBACI,SAAS,EAAE,iBAAiB;gBAC5B,eAAe,EAAE,uBAAuB;gBACxC,cAAc,EAAE,uCAAuC;gBACvD,qBAAqB,EAAE,6BAA6B;aACvD;SACJ,CAAC,CAAC;QACH,MAAM,UAAU,GAAY,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtD,OAAO,UAAU,CAAC;IACtB,CAAC;IAEe,KAAK,CAAC,MAAM,CAAC,OAA6B;QACtD,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QACvE,IAAI,OAAO,EAAE,CAAC;YACV,IAAI,CAAC,0BAA0B,CAAC,sBAAsB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;YAC3E,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,OAAO,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC;IAED;;;;OAIG;IACgB,KAAK,CAAC,cAAc,CAAC,WAAmB;QACvD,OAAO,oBAAoB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACnD,CAAC;IAED,0GAA0G;IAC1G,IAAY,UAAU;QAClB,OAAO;YACH,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,MAAM,EAAE;gBACJ,aAAa,EAAE,IAAI,CAAC,aAAa;gBACjC,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,SAAS,EAAE,IAAI,CAAC,SAAS;aAC5B;YACD,eAAe,EAAE,IAAI,CAAC,oBAAoB;YAC1C,gBAAgB,EAAE,IAAI,CAAC,aAA6C;SACvE,CAAC;IACN,CAAC;CACJ,CAAA;AA5DY,uBAAuB;IADnC,aAAa,CAAC,UAAU,EAAE,gBAAgB,CAAC;GAC/B,uBAAuB,CA4DnC"}

package/dist/custom/MJConversationDetailEntityServer.server.d.ts

@@ -2,7 +2,8 @@ import { EntitySaveOptions } from "@memberjunction/core";
 import { MJConversationDetailEntityExtended } from "@memberjunction/core-entities";
 /**
  * Server-side subclass of MJConversationDetailEntity that automatically tracks
- * when the original message content has been modified.
+ * when the original message content has been modified, and checks the fork of
+ * each new message.
  *
  * When a user edits their message after initial creation, the OriginalMessageChanged
  * flag is set to true, allowing the UI to display an "(Edited)" indicator. This is
@@ -24,13 +25,25 @@ import { MJConversationDetailEntityExtended } from "@memberjunction/core-entitie
  * run server-side (`ProviderType === 'Database'`), which is exactly where it was being
  * shadowed out. Inheriting composes the two behaviors instead: this class flags the edit,
  * then delegates to the permission gate via `super.Save`.
+ *
+ * A new row keeps the `BranchID` its writer set (null is Main). On create, a non-null `BranchID`
+ * must name a fork of the same conversation; otherwise `Save` returns `false` with a result
+ * entry and nothing is written.
  */
 export declare class MJConversationDetailEntityServer extends MJConversationDetailEntityExtended {
     /**
-     * Override Save to detect message changes and set the OriginalMessageChanged flag.
-     * This is done as pre-processing before calling super.Save() to ensure it's a single DB round trip.
+     * Sets the OriginalMessageChanged flag on a genuine message edit, checks a new row's fork,
+     * then calls super.Save(). Returns `false` without saving when the fork check fails.
      */
     Save(options?: EntitySaveOptions): Promise<boolean>;
+    /**
+     * On create, a non-null BranchID must name a fork of the same conversation. Returns why the save
+     * must fail, or null when it may go on. An existing row, a Main row (null BranchID), a row with no
+     * ConversationID and a save with no context user are not checked.
+     */
+    CheckBranchOnCreate(): Promise<string | null>;
+    /** Records a failed create in the result history, so callers see why nothing was written. */
+    private recordCreateFailure;
     /**
      * True when this save is a genuine Message EDIT on an existing record — not one of
      * the framework's own Message rewrites:

package/dist/custom/MJConversationDetailEntityServer.server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"MJConversationDetailEntityServer.server.d.ts","sourceRoot":"","sources":["../../src/custom/MJConversationDetailEntityServer.server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAErE,OAAO,EAAE,kCAAkC,EAAE,MAAM,+BAA+B,CAAC;AAEnF;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,qBACa,gCAAiC,SAAQ,kCAAkC;IACpF;;;OAGG;IACY,IAAI,CAAC,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC;IAQlE;;;;;;;;;;;OAWG;IACI,gCAAgC,IAAI,OAAO;CAiBrD"}
+{"version":3,"file":"MJConversationDetailEntityServer.server.d.ts","sourceRoot":"","sources":["../../src/custom/MJConversationDetailEntityServer.server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgC,iBAAiB,EAAwC,MAAM,sBAAsB,CAAC;AAE7H,OAAO,EAAE,kCAAkC,EAAE,MAAM,+BAA+B,CAAC;AAEnF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,qBACa,gCAAiC,SAAQ,kCAAkC;IACpF;;;OAGG;IACY,IAAI,CAAC,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC;IAYlE;;;;OAIG;IACU,mBAAmB,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAgC1D,6FAA6F;IAC7F,OAAO,CAAC,mBAAmB;IAU3B;;;;;;;;;;;OAWG;IACI,gCAAgC,IAAI,OAAO;CAiBrD"}

package/dist/custom/MJConversationDetailEntityServer.server.js

@@ -4,12 +4,13 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
     else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
     return c > 3 && r && Object.defineProperty(target, key, r), r;
 };
-import { BaseEntity } from "@memberjunction/core";
-import { RegisterClass } from "@memberjunction/global";
+import { BaseEntity, BaseEntityResult, LogError, RunView } from "@memberjunction/core";
+import { EscapeSQLString, RegisterClass, UUIDsEqual } from "@memberjunction/global";
 import { MJConversationDetailEntityExtended } from "@memberjunction/core-entities";
 /**
  * Server-side subclass of MJConversationDetailEntity that automatically tracks
- * when the original message content has been modified.
+ * when the original message content has been modified, and checks the fork of
+ * each new message.
  *
  * When a user edits their message after initial creation, the OriginalMessageChanged
  * flag is set to true, allowing the UI to display an "(Edited)" indicator. This is
@@ -31,18 +32,74 @@ import { MJConversationDetailEntityExtended } from "@memberjunction/core-entitie
  * run server-side (`ProviderType === 'Database'`), which is exactly where it was being
  * shadowed out. Inheriting composes the two behaviors instead: this class flags the edit,
  * then delegates to the permission gate via `super.Save`.
+ *
+ * A new row keeps the `BranchID` its writer set (null is Main). On create, a non-null `BranchID`
+ * must name a fork of the same conversation; otherwise `Save` returns `false` with a result
+ * entry and nothing is written.
  */
 let MJConversationDetailEntityServer = class MJConversationDetailEntityServer extends MJConversationDetailEntityExtended {
     /**
-     * Override Save to detect message changes and set the OriginalMessageChanged flag.
-     * This is done as pre-processing before calling super.Save() to ensure it's a single DB round trip.
+     * Sets the OriginalMessageChanged flag on a genuine message edit, checks a new row's fork,
+     * then calls super.Save(). Returns `false` without saving when the fork check fails.
      */
     async Save(options) {
         if (this.ShouldFlagOriginalMessageChanged()) {
             this.OriginalMessageChanged = true;
         }
+        const problem = await this.CheckBranchOnCreate();
+        if (problem) {
+            this.recordCreateFailure(problem);
+            return false;
+        }
         return super.Save(options);
     }
+    /**
+     * On create, a non-null BranchID must name a fork of the same conversation. Returns why the save
+     * must fail, or null when it may go on. An existing row, a Main row (null BranchID), a row with no
+     * ConversationID and a save with no context user are not checked.
+     */
+    async CheckBranchOnCreate() {
+        if (this.IsSaved || this.BranchID == null || !this.ConversationID) {
+            return null;
+        }
+        const user = this.ContextCurrentUser;
+        if (!user) {
+            return null;
+        }
+        const branchId = this.BranchID;
+        try {
+            const rv = RunView.FromMetadataProvider(this.ProviderToUse);
+            const result = await rv.RunView({
+                EntityName: 'MJ: Conversation Branches',
+                ExtraFilter: `ID='${EscapeSQLString(branchId)}'`,
+                Fields: ['ID', 'ConversationID'],
+                ResultType: 'simple',
+            }, user);
+            if (!result.Success) {
+                LogError(`MJConversationDetailEntityServer: could not read fork ${branchId}: ${result.ErrorMessage}`);
+                return 'Unable to check the fork of this message.';
+            }
+            const fork = result.Results?.[0];
+            if (!fork || !UUIDsEqual(fork.ConversationID, this.ConversationID)) {
+                return `Fork ${branchId} does not belong to conversation ${this.ConversationID}.`;
+            }
+            return null;
+        }
+        catch (error) {
+            LogError(`MJConversationDetailEntityServer: could not read fork ${branchId}: ${error instanceof Error ? error.message : String(error)}`);
+            return 'Unable to check the fork of this message.';
+        }
+    }
+    /** Records a failed create in the result history, so callers see why nothing was written. */
+    recordCreateFailure(message) {
+        const result = new BaseEntityResult();
+        result.Success = false;
+        result.Type = 'create';
+        result.Message = message;
+        result.StartedAt = new Date();
+        result.EndedAt = new Date();
+        this.RegisterResultHistoryEntry(result);
+    }
     /**
      * True when this save is a genuine Message EDIT on an existing record — not one of
      * the framework's own Message rewrites:

package/dist/custom/MJConversationDetailEntityServer.server.js.map

@@ -1 +1 @@
-{"version":3,"file":"MJConversationDetailEntityServer.server.js","sourceRoot":"","sources":["../../src/custom/MJConversationDetailEntityServer.server.ts"],"names":[],"mappings":";;;;;;AAAA,OAAO,EAAE,UAAU,EAAqB,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,kCAAkC,EAAE,MAAM,+BAA+B,CAAC;AAEnF;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEI,IAAM,gCAAgC,GAAtC,MAAM,gCAAiC,SAAQ,kCAAkC;IACpF;;;OAGG;IACM,KAAK,CAAC,IAAI,CAAC,OAA2B;QAC3C,IAAI,IAAI,CAAC,gCAAgC,EAAE,EAAE,CAAC;YAC1C,IAAI,CAAC,sBAAsB,GAAG,IAAI,CAAC;QACvC,CAAC;QAED,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IAED;;;;;;;;;;;OAWG;IACI,gCAAgC;QACnC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAChB,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,MAAM,YAAY,GAAG,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;QACpD,IAAI,CAAC,YAAY,IAAI,CAAC,YAAY,CAAC,KAAK,IAAI,YAAY,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC9E,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;YAChC,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,WAAW,EAAE,KAAK,EAAE,CAAC;YACrB,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;CACJ,CAAA;AA1CY,gCAAgC;IAD5C,aAAa,CAAC,UAAU,EAAE,0BAA0B,CAAC;GACzC,gCAAgC,CA0C5C"}
+{"version":3,"file":"MJConversationDetailEntityServer.server.js","sourceRoot":"","sources":["../../src/custom/MJConversationDetailEntityServer.server.ts"],"names":[],"mappings":";;;;;;AAAA,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAwC,QAAQ,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAC7H,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpF,OAAO,EAAE,kCAAkC,EAAE,MAAM,+BAA+B,CAAC;AAEnF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEI,IAAM,gCAAgC,GAAtC,MAAM,gCAAiC,SAAQ,kCAAkC;IACpF;;;OAGG;IACM,KAAK,CAAC,IAAI,CAAC,OAA2B;QAC3C,IAAI,IAAI,CAAC,gCAAgC,EAAE,EAAE,CAAC;YAC1C,IAAI,CAAC,sBAAsB,GAAG,IAAI,CAAC;QACvC,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACjD,IAAI,OAAO,EAAE,CAAC;YACV,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;YAClC,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IAED;;;;OAIG;IACI,KAAK,CAAC,mBAAmB;QAC5B,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YAChE,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,kBAAkB,CAAC;QACrC,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC/B,IAAI,CAAC;YACD,MAAM,EAAE,GAAG,OAAO,CAAC,oBAAoB,CAAC,IAAI,CAAC,aAA6C,CAAC,CAAC;YAC5F,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAAyC;gBACpE,UAAU,EAAE,2BAA2B;gBACvC,WAAW,EAAE,OAAO,eAAe,CAAC,QAAQ,CAAC,GAAG;gBAChD,MAAM,EAAE,CAAC,IAAI,EAAE,gBAAgB,CAAC;gBAChC,UAAU,EAAE,QAAQ;aACvB,EAAE,IAAI,CAAC,CAAC;YACT,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAClB,QAAQ,CAAC,yDAAyD,QAAQ,KAAK,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;gBACtG,OAAO,2CAA2C,CAAC;YACvD,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;YACjC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;gBACjE,OAAO,QAAQ,QAAQ,oCAAoC,IAAI,CAAC,cAAc,GAAG,CAAC;YACtF,CAAC;YACD,OAAO,IAAI,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,QAAQ,CAAC,yDAAyD,QAAQ,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACzI,OAAO,2CAA2C,CAAC;QACvD,CAAC;IACL,CAAC;IAED,6FAA6F;IACrF,mBAAmB,CAAC,OAAe;QACvC,MAAM,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;QACtC,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC;QACvB,MAAM,CAAC,IAAI,GAAG,QAAQ,CAAC;QACvB,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;QACzB,MAAM,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAC9B,MAAM,CAAC,OAAO,GAAG,IAAI,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC;IAC5C,CAAC;IAED;;;;;;;;;;;OAWG;IACI,gCAAgC;QACnC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAChB,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,MAAM,YAAY,GAAG,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;QACpD,IAAI,CAAC,YAAY,IAAI,CAAC,YAAY,CAAC,KAAK,IAAI,YAAY,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC9E,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;YAChC,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,WAAW,EAAE,KAAK,EAAE,CAAC;YACrB,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;CACJ,CAAA;AA9FY,gCAAgC;IAD5C,aAAa,CAAC,UAAU,EAAE,0BAA0B,CAAC;GACzC,gCAAgC,CA8F5C"}

package/dist/custom/MJEntityFormContributionEntityServer.server.d.ts

@@ -0,0 +1,37 @@
+import { type EntityDeleteOptions, type EntitySaveOptions, type ValidationResult } from '@memberjunction/core';
+import { MJEntityFormContributionEntity } from '@memberjunction/core-entities';
+/**
+ * Server-side `MJ: Entity Form Contributions` entity, enforcing who may write a panel at which scope.
+ *
+ * Anyone may manage their own personal panels. Creating, changing or removing one for a role
+ * or for everyone — and moving one between scopes in either direction — needs the
+ * `Manage Form Defaults` authorization. The rule lives in `@memberjunction/core-entities`
+ * (`FormScopeWriteRefusal`), shared with the browser, so this class only feeds it.
+ *
+ * All three write entry points are overridden, following `MJUserRoleEntityServer`:
+ * `Validate()` runs inside every normal `Save()`; `Save()` is overridden because a `ReplayOnly`
+ * save skips `Validate()` while still writing; and `Delete()` never calls `Validate()` at all.
+ * Anything less leaves a path around the rule.
+ *
+ * `Save()` also checks the component the row points at, on create or when `ComponentID` changes
+ * (`FormRowComponentGuardRefusal`). Without the grant the component must be the caller's own: used
+ * by at least one row and only by the caller's own personal rows, or used by no row and created by
+ * the caller, read from its Internal `Create` record change. With the grant, a component another
+ * user's personal row uses is refused for everyone, an Owner included, and any other is allowed.
+ * That check needs a query, so it runs in `Save()` rather than `Validate()`.
+ */
+export declare class MJEntityFormContributionEntityServer extends MJEntityFormContributionEntity {
+    Validate(): ValidationResult;
+    Save(options?: EntitySaveOptions): Promise<boolean>;
+    Delete(options?: EntityDeleteOptions): Promise<boolean>;
+    /**
+     * This row as the scope guard reads it. Built here because `ActiveUser` is protected on
+     * `BaseEntity`, so only the subclass itself can hand it over.
+     */
+    private get scopeRow();
+    /** This row as the component check reads it. */
+    private get componentRow();
+    /** The provider the caller's authorizations are read from. */
+    private get scopeProvider();
+}
+//# sourceMappingURL=MJEntityFormContributionEntityServer.server.d.ts.map

package/dist/custom/MJEntityFormContributionEntityServer.server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"MJEntityFormContributionEntityServer.server.d.ts","sourceRoot":"","sources":["../../src/custom/MJEntityFormContributionEntityServer.server.ts"],"names":[],"mappings":"AAAA,OAAO,EAEH,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EAEtB,KAAK,gBAAgB,EACxB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,8BAA8B,EAAE,MAAM,+BAA+B,CAAC;AAU/E;;;;;;;;;;;;;;;;;;;GAmBG;AACH,qBACa,oCAAqC,SAAQ,8BAA8B;IACpE,QAAQ,IAAI,gBAAgB;IAMtB,IAAI,CAAC,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC;IAUnD,MAAM,CAAC,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,OAAO,CAAC;IAS7E;;;OAGG;IACH,OAAO,KAAK,QAAQ,GAQnB;IAED,gDAAgD;IAChD,OAAO,KAAK,YAAY,GAUvB;IAED,8DAA8D;IAC9D,OAAO,KAAK,aAAa,GAExB;CACJ"}

package/dist/custom/MJEntityFormContributionEntityServer.server.js

@@ -0,0 +1,89 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+import { BaseEntity, } from '@memberjunction/core';
+import { RegisterClass } from '@memberjunction/global';
+import { MJEntityFormContributionEntity } from '@memberjunction/core-entities';
+import { ApplyFormScopeValidation, FormScopeDeleteRefusal, FormScopeRefusalResult, FormScopeReplayRefusal, } from './FormScopeGuard.js';
+import { FormRowComponentGuardRefusal } from './FormComponentGuard.js';
+/**
+ * Server-side `MJ: Entity Form Contributions` entity, enforcing who may write a panel at which scope.
+ *
+ * Anyone may manage their own personal panels. Creating, changing or removing one for a role
+ * or for everyone — and moving one between scopes in either direction — needs the
+ * `Manage Form Defaults` authorization. The rule lives in `@memberjunction/core-entities`
+ * (`FormScopeWriteRefusal`), shared with the browser, so this class only feeds it.
+ *
+ * All three write entry points are overridden, following `MJUserRoleEntityServer`:
+ * `Validate()` runs inside every normal `Save()`; `Save()` is overridden because a `ReplayOnly`
+ * save skips `Validate()` while still writing; and `Delete()` never calls `Validate()` at all.
+ * Anything less leaves a path around the rule.
+ *
+ * `Save()` also checks the component the row points at, on create or when `ComponentID` changes
+ * (`FormRowComponentGuardRefusal`). Without the grant the component must be the caller's own: used
+ * by at least one row and only by the caller's own personal rows, or used by no row and created by
+ * the caller, read from its Internal `Create` record change. With the grant, a component another
+ * user's personal row uses is refused for everyone, an Owner included, and any other is allowed.
+ * That check needs a query, so it runs in `Save()` rather than `Validate()`.
+ */
+let MJEntityFormContributionEntityServer = class MJEntityFormContributionEntityServer extends MJEntityFormContributionEntity {
+    Validate() {
+        const result = super.Validate();
+        ApplyFormScopeValidation(this.scopeRow, this.scopeProvider, result);
+        return result;
+    }
+    async Save(options) {
+        const refusal = FormScopeReplayRefusal(this.scopeRow, this.scopeProvider, options)
+            ?? await FormRowComponentGuardRefusal(this.componentRow);
+        if (refusal) {
+            this.RegisterResultHistoryEntry(FormScopeRefusalResult(this.IsSaved ? 'update' : 'create', refusal));
+            return false;
+        }
+        return super.Save(options);
+    }
+    async Delete(options) {
+        const refusal = FormScopeDeleteRefusal(this.scopeRow, this.scopeProvider);
+        if (refusal) {
+            this.RegisterResultHistoryEntry(FormScopeRefusalResult('delete', refusal));
+            return false;
+        }
+        return super.Delete(options);
+    }
+    /**
+     * This row as the scope guard reads it. Built here because `ActiveUser` is protected on
+     * `BaseEntity`, so only the subclass itself can hand it over.
+     */
+    get scopeRow() {
+        return {
+            IsSaved: this.IsSaved,
+            ActiveUser: this.ActiveUser,
+            Scope: this.Scope,
+            UserID: this.UserID,
+            GetFieldByName: (name) => this.GetFieldByName(name),
+        };
+    }
+    /** This row as the component check reads it. */
+    get componentRow() {
+        return {
+            IsSaved: this.IsSaved,
+            ActiveUser: this.ActiveUser,
+            ID: this.ID,
+            ComponentID: this.ComponentID,
+            GetFieldByName: (name) => this.GetFieldByName(name),
+            RunViewProvider: this.RunViewProviderToUse,
+            MetadataProvider: this.scopeProvider,
+        };
+    }
+    /** The provider the caller's authorizations are read from. */
+    get scopeProvider() {
+        return this.ProviderToUse;
+    }
+};
+MJEntityFormContributionEntityServer = __decorate([
+    RegisterClass(BaseEntity, 'MJ: Entity Form Contributions')
+], MJEntityFormContributionEntityServer);
+export { MJEntityFormContributionEntityServer };
+//# sourceMappingURL=MJEntityFormContributionEntityServer.server.js.map

package/dist/custom/MJEntityFormContributionEntityServer.server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MJEntityFormContributionEntityServer.server.js","sourceRoot":"","sources":["../../src/custom/MJEntityFormContributionEntityServer.server.ts"],"names":[],"mappings":";;;;;;AAAA,OAAO,EACH,UAAU,GAKb,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,8BAA8B,EAAE,MAAM,+BAA+B,CAAC;AAC/E,OAAO,EACH,wBAAwB,EACxB,sBAAsB,EACtB,sBAAsB,EACtB,sBAAsB,GAEzB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,4BAA4B,EAAgC,MAAM,sBAAsB,CAAC;AAElG;;;;;;;;;;;;;;;;;;;GAmBG;AAEI,IAAM,oCAAoC,GAA1C,MAAM,oCAAqC,SAAQ,8BAA8B;IACpE,QAAQ;QACpB,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;QAChC,wBAAwB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;QACpE,OAAO,MAAM,CAAC;IAClB,CAAC;IAEe,KAAK,CAAC,IAAI,CAAC,OAA2B;QAClD,MAAM,OAAO,GAAG,sBAAsB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC;eAC3E,MAAM,4BAA4B,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC7D,IAAI,OAAO,EAAE,CAAC;YACV,IAAI,CAAC,0BAA0B,CAAC,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;YACrG,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IAEe,KAAK,CAAC,MAAM,CAAC,OAA6B;QACtD,MAAM,OAAO,GAAG,sBAAsB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;QAC1E,IAAI,OAAO,EAAE,CAAC;YACV,IAAI,CAAC,0BAA0B,CAAC,sBAAsB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;YAC3E,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,OAAO,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC;IAED;;;OAGG;IACH,IAAY,QAAQ;QAChB,OAAO;YACH,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,cAAc,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC;SAC9D,CAAC;IACN,CAAC;IAED,gDAAgD;IAChD,IAAY,YAAY;QACpB,OAAO;YACH,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,cAAc,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC;YAC3D,eAAe,EAAE,IAAI,CAAC,oBAAoB;YAC1C,gBAAgB,EAAE,IAAI,CAAC,aAAa;SACvC,CAAC;IACN,CAAC;IAED,8DAA8D;IAC9D,IAAY,aAAa;QACrB,OAAO,IAAI,CAAC,aAA6C,CAAC;IAC9D,CAAC;CACJ,CAAA;AAzDY,oCAAoC;IADhD,aAAa,CAAC,UAAU,EAAE,+BAA+B,CAAC;GAC9C,oCAAoC,CAyDhD"}

package/dist/custom/MJEntityFormOverrideEntityServer.server.d.ts

@@ -0,0 +1,37 @@
+import { type EntityDeleteOptions, type EntitySaveOptions, type ValidationResult } from '@memberjunction/core';
+import { MJEntityFormOverrideEntity } from '@memberjunction/core-entities';
+/**
+ * Server-side `MJ: Entity Form Overrides` entity, enforcing who may write a full custom form at which scope.
+ *
+ * Anyone may manage their own personal forms. Creating, changing or removing one for a role
+ * or for everyone — and moving one between scopes in either direction — needs the
+ * `Manage Form Defaults` authorization. The rule lives in `@memberjunction/core-entities`
+ * (`FormScopeWriteRefusal`), shared with the browser, so this class only feeds it.
+ *
+ * All three write entry points are overridden, following `MJUserRoleEntityServer`:
+ * `Validate()` runs inside every normal `Save()`; `Save()` is overridden because a `ReplayOnly`
+ * save skips `Validate()` while still writing; and `Delete()` never calls `Validate()` at all.
+ * Anything less leaves a path around the rule.
+ *
+ * `Save()` also checks the component the row points at, on create or when `ComponentID` changes
+ * (`FormRowComponentGuardRefusal`). Without the grant the component must be the caller's own: used
+ * by at least one row and only by the caller's own personal rows, or used by no row and created by
+ * the caller, read from its Internal `Create` record change. With the grant, a component another
+ * user's personal row uses is refused for everyone, an Owner included, and any other is allowed.
+ * That check needs a query, so it runs in `Save()` rather than `Validate()`.
+ */
+export declare class MJEntityFormOverrideEntityServer extends MJEntityFormOverrideEntity {
+    Validate(): ValidationResult;
+    Save(options?: EntitySaveOptions): Promise<boolean>;
+    Delete(options?: EntityDeleteOptions): Promise<boolean>;
+    /**
+     * This row as the scope guard reads it. Built here because `ActiveUser` is protected on
+     * `BaseEntity`, so only the subclass itself can hand it over.
+     */
+    private get scopeRow();
+    /** This row as the component check reads it. */
+    private get componentRow();
+    /** The provider the caller's authorizations are read from. */
+    private get scopeProvider();
+}
+//# sourceMappingURL=MJEntityFormOverrideEntityServer.server.d.ts.map

package/dist/custom/MJEntityFormOverrideEntityServer.server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"MJEntityFormOverrideEntityServer.server.d.ts","sourceRoot":"","sources":["../../src/custom/MJEntityFormOverrideEntityServer.server.ts"],"names":[],"mappings":"AAAA,OAAO,EAEH,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EAEtB,KAAK,gBAAgB,EACxB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,0BAA0B,EAAE,MAAM,+BAA+B,CAAC;AAU3E;;;;;;;;;;;;;;;;;;;GAmBG;AACH,qBACa,gCAAiC,SAAQ,0BAA0B;IAC5D,QAAQ,IAAI,gBAAgB;IAMtB,IAAI,CAAC,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC;IAUnD,MAAM,CAAC,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,OAAO,CAAC;IAS7E;;;OAGG;IACH,OAAO,KAAK,QAAQ,GAQnB;IAED,gDAAgD;IAChD,OAAO,KAAK,YAAY,GAUvB;IAED,8DAA8D;IAC9D,OAAO,KAAK,aAAa,GAExB;CACJ"}

package/dist/custom/MJEntityFormOverrideEntityServer.server.js

@@ -0,0 +1,89 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+import { BaseEntity, } from '@memberjunction/core';
+import { RegisterClass } from '@memberjunction/global';
+import { MJEntityFormOverrideEntity } from '@memberjunction/core-entities';
+import { ApplyFormScopeValidation, FormScopeDeleteRefusal, FormScopeRefusalResult, FormScopeReplayRefusal, } from './FormScopeGuard.js';
+import { FormRowComponentGuardRefusal } from './FormComponentGuard.js';
+/**
+ * Server-side `MJ: Entity Form Overrides` entity, enforcing who may write a full custom form at which scope.
+ *
+ * Anyone may manage their own personal forms. Creating, changing or removing one for a role
+ * or for everyone — and moving one between scopes in either direction — needs the
+ * `Manage Form Defaults` authorization. The rule lives in `@memberjunction/core-entities`
+ * (`FormScopeWriteRefusal`), shared with the browser, so this class only feeds it.
+ *
+ * All three write entry points are overridden, following `MJUserRoleEntityServer`:
+ * `Validate()` runs inside every normal `Save()`; `Save()` is overridden because a `ReplayOnly`
+ * save skips `Validate()` while still writing; and `Delete()` never calls `Validate()` at all.
+ * Anything less leaves a path around the rule.
+ *
+ * `Save()` also checks the component the row points at, on create or when `ComponentID` changes
+ * (`FormRowComponentGuardRefusal`). Without the grant the component must be the caller's own: used
+ * by at least one row and only by the caller's own personal rows, or used by no row and created by
+ * the caller, read from its Internal `Create` record change. With the grant, a component another
+ * user's personal row uses is refused for everyone, an Owner included, and any other is allowed.
+ * That check needs a query, so it runs in `Save()` rather than `Validate()`.
+ */
+let MJEntityFormOverrideEntityServer = class MJEntityFormOverrideEntityServer extends MJEntityFormOverrideEntity {
+    Validate() {
+        const result = super.Validate();
+        ApplyFormScopeValidation(this.scopeRow, this.scopeProvider, result);
+        return result;
+    }
+    async Save(options) {
+        const refusal = FormScopeReplayRefusal(this.scopeRow, this.scopeProvider, options)
+            ?? await FormRowComponentGuardRefusal(this.componentRow);
+        if (refusal) {
+            this.RegisterResultHistoryEntry(FormScopeRefusalResult(this.IsSaved ? 'update' : 'create', refusal));
+            return false;
+        }
+        return super.Save(options);
+    }
+    async Delete(options) {
+        const refusal = FormScopeDeleteRefusal(this.scopeRow, this.scopeProvider);
+        if (refusal) {
+            this.RegisterResultHistoryEntry(FormScopeRefusalResult('delete', refusal));
+            return false;
+        }
+        return super.Delete(options);
+    }
+    /**
+     * This row as the scope guard reads it. Built here because `ActiveUser` is protected on
+     * `BaseEntity`, so only the subclass itself can hand it over.
+     */
+    get scopeRow() {
+        return {
+            IsSaved: this.IsSaved,
+            ActiveUser: this.ActiveUser,
+            Scope: this.Scope,
+            UserID: this.UserID,
+            GetFieldByName: (name) => this.GetFieldByName(name),
+        };
+    }
+    /** This row as the component check reads it. */
+    get componentRow() {
+        return {
+            IsSaved: this.IsSaved,
+            ActiveUser: this.ActiveUser,
+            ID: this.ID,
+            ComponentID: this.ComponentID,
+            GetFieldByName: (name) => this.GetFieldByName(name),
+            RunViewProvider: this.RunViewProviderToUse,
+            MetadataProvider: this.scopeProvider,
+        };
+    }
+    /** The provider the caller's authorizations are read from. */
+    get scopeProvider() {
+        return this.ProviderToUse;
+    }
+};
+MJEntityFormOverrideEntityServer = __decorate([
+    RegisterClass(BaseEntity, 'MJ: Entity Form Overrides')
+], MJEntityFormOverrideEntityServer);
+export { MJEntityFormOverrideEntityServer };
+//# sourceMappingURL=MJEntityFormOverrideEntityServer.server.js.map

package/dist/custom/MJEntityFormOverrideEntityServer.server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MJEntityFormOverrideEntityServer.server.js","sourceRoot":"","sources":["../../src/custom/MJEntityFormOverrideEntityServer.server.ts"],"names":[],"mappings":";;;;;;AAAA,OAAO,EACH,UAAU,GAKb,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,0BAA0B,EAAE,MAAM,+BAA+B,CAAC;AAC3E,OAAO,EACH,wBAAwB,EACxB,sBAAsB,EACtB,sBAAsB,EACtB,sBAAsB,GAEzB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,4BAA4B,EAAgC,MAAM,sBAAsB,CAAC;AAElG;;;;;;;;;;;;;;;;;;;GAmBG;AAEI,IAAM,gCAAgC,GAAtC,MAAM,gCAAiC,SAAQ,0BAA0B;IAC5D,QAAQ;QACpB,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;QAChC,wBAAwB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;QACpE,OAAO,MAAM,CAAC;IAClB,CAAC;IAEe,KAAK,CAAC,IAAI,CAAC,OAA2B;QAClD,MAAM,OAAO,GAAG,sBAAsB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC;eAC3E,MAAM,4BAA4B,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC7D,IAAI,OAAO,EAAE,CAAC;YACV,IAAI,CAAC,0BAA0B,CAAC,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;YACrG,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IAEe,KAAK,CAAC,MAAM,CAAC,OAA6B;QACtD,MAAM,OAAO,GAAG,sBAAsB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;QAC1E,IAAI,OAAO,EAAE,CAAC;YACV,IAAI,CAAC,0BAA0B,CAAC,sBAAsB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;YAC3E,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,OAAO,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC;IAED;;;OAGG;IACH,IAAY,QAAQ;QAChB,OAAO;YACH,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,cAAc,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC;SAC9D,CAAC;IACN,CAAC;IAED,gDAAgD;IAChD,IAAY,YAAY;QACpB,OAAO;YACH,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,cAAc,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC;YAC3D,eAAe,EAAE,IAAI,CAAC,oBAAoB;YAC1C,gBAAgB,EAAE,IAAI,CAAC,aAAa;SACvC,CAAC;IACN,CAAC;IAED,8DAA8D;IAC9D,IAAY,aAAa;QACrB,OAAO,IAAI,CAAC,aAA6C,CAAC;IAC9D,CAAC;CACJ,CAAA;AAzDY,gCAAgC;IAD5C,aAAa,CAAC,UAAU,EAAE,2BAA2B,CAAC;GAC1C,gCAAgC,CAyD5C"}

package/dist/custom/MJInteractionEventEntityServer.server.d.ts

@@ -0,0 +1,23 @@
+import { EntityDeleteOptions, EntityPermissionType, EntitySaveOptions, ValidationResult } from '@memberjunction/core';
+import { MJInteractionEventEntity } from '@memberjunction/core-entities';
+/**
+ * Server subclass for `MJ: Interaction Events`.
+ *
+ * Implements the append-only lifecycle log invariant:
+ * Interaction events are strictly append-only. Once an event is inserted,
+ * any update or deletion attempt is prohibited to ensure audit trail integrity.
+ */
+export declare class MJInteractionEventEntityServer extends MJInteractionEventEntity {
+    static readonly APPEND_ONLY_UPDATE_MESSAGE = "Interaction Events are append-only: updates are prohibited.";
+    static readonly APPEND_ONLY_DELETE_MESSAGE = "Interaction Events are append-only: deletes are prohibited.";
+    CheckPermissions(type: EntityPermissionType, throwError: boolean): boolean;
+    Validate(): ValidationResult;
+    Save(options?: EntitySaveOptions): Promise<boolean>;
+    Delete(_options?: EntityDeleteOptions): Promise<boolean>;
+    private refuse;
+}
+/**
+ * Loader stub — prevents the class from being tree-shaken out of the bundle.
+ */
+export declare function LoadMJInteractionEventEntityServer(): void;
+//# sourceMappingURL=MJInteractionEventEntityServer.server.d.ts.map

package/dist/custom/MJInteractionEventEntityServer.server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"MJInteractionEventEntityServer.server.d.ts","sourceRoot":"","sources":["../../src/custom/MJInteractionEventEntityServer.server.ts"],"names":[],"mappings":"AAAA,OAAO,EAGH,mBAAmB,EACnB,oBAAoB,EACpB,iBAAiB,EAGjB,gBAAgB,EACnB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAEzE;;;;;;GAMG;AACH,qBACa,8BAA+B,SAAQ,wBAAwB;IACxE,gBAAuB,0BAA0B,iEAAiE;IAClH,gBAAuB,0BAA0B,iEAAiE;IAElG,gBAAgB,CAAC,IAAI,EAAE,oBAAoB,EAAE,UAAU,EAAE,OAAO,GAAG,OAAO;IAW1E,QAAQ,IAAI,gBAAgB;IAgBtB,IAAI,CAAC,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC;IAOnD,MAAM,CAAC,QAAQ,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,OAAO,CAAC;IAI9E,OAAO,CAAC,MAAM;CAUjB;AAED;;GAEG;AACH,wBAAgB,kCAAkC,IAAI,IAAI,CAEzD"}

package/dist/custom/MJInteractionEventEntityServer.server.js

@@ -0,0 +1,70 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var MJInteractionEventEntityServer_1;
+import { BaseEntity, BaseEntityResult, EntityPermissionType, ValidationErrorInfo, ValidationErrorType, } from '@memberjunction/core';
+import { RegisterClass } from '@memberjunction/global';
+import { MJInteractionEventEntity } from '@memberjunction/core-entities';
+/**
+ * Server subclass for `MJ: Interaction Events`.
+ *
+ * Implements the append-only lifecycle log invariant:
+ * Interaction events are strictly append-only. Once an event is inserted,
+ * any update or deletion attempt is prohibited to ensure audit trail integrity.
+ */
+let MJInteractionEventEntityServer = class MJInteractionEventEntityServer extends MJInteractionEventEntity {
+    static { MJInteractionEventEntityServer_1 = this; }
+    static { this.APPEND_ONLY_UPDATE_MESSAGE = 'Interaction Events are append-only: updates are prohibited.'; }
+    static { this.APPEND_ONLY_DELETE_MESSAGE = 'Interaction Events are append-only: deletes are prohibited.'; }
+    CheckPermissions(type, throwError) {
+        if (type === EntityPermissionType.Update || type === EntityPermissionType.Delete) {
+            const msg = `Interaction Events are append-only: updates and deletes are prohibited.`;
+            if (throwError) {
+                throw new Error(msg);
+            }
+            return false;
+        }
+        return super.CheckPermissions(type, throwError);
+    }
+    Validate() {
+        const result = super.Validate();
+        if (this.IsSaved) {
+            result.Success = false;
+            result.Errors.push(new ValidationErrorInfo('ID', MJInteractionEventEntityServer_1.APPEND_ONLY_UPDATE_MESSAGE, this.ID, ValidationErrorType.Failure));
+        }
+        return result;
+    }
+    async Save(options) {
+        if (this.IsSaved) {
+            return this.refuse('update', MJInteractionEventEntityServer_1.APPEND_ONLY_UPDATE_MESSAGE);
+        }
+        return super.Save(options);
+    }
+    async Delete(_options) {
+        return this.refuse('delete', MJInteractionEventEntityServer_1.APPEND_ONLY_DELETE_MESSAGE);
+    }
+    refuse(type, message) {
+        const result = new BaseEntityResult();
+        result.Success = false;
+        result.Type = type;
+        result.Message = message;
+        result.StartedAt = new Date();
+        result.EndedAt = new Date();
+        this.RegisterResultHistoryEntry(result);
+        return false;
+    }
+};
+MJInteractionEventEntityServer = MJInteractionEventEntityServer_1 = __decorate([
+    RegisterClass(BaseEntity, 'MJ: Interaction Events')
+], MJInteractionEventEntityServer);
+export { MJInteractionEventEntityServer };
+/**
+ * Loader stub — prevents the class from being tree-shaken out of the bundle.
+ */
+export function LoadMJInteractionEventEntityServer() {
+    void MJInteractionEventEntityServer;
+}
+//# sourceMappingURL=MJInteractionEventEntityServer.server.js.map