@memberjunction/core-entities-server 6.2.0-edge.4 → 6.2.0-edge.6

package/dist/custom/MJAIAgentSessionEntityServer.server.d.ts

@@ -3,11 +3,17 @@ import { MJAIAgentSessionEntity } from '@memberjunction/core-entities';
 /**
  * Server-side `MJ: AI Agent Sessions` entity.
  *
- * Its single job is to keep the **server-authoritative keys** inside `Config` (the janitor's
- * `maxSessionDeadlineIso`, the `identityVerification` state) out of the session owner's reach. The
+ * It keeps the **server-authoritative keys** inside `Config` (the janitor's
+ * `maxSessionDeadlineIso`, the `identityVerification` state) out of the session owner's reach, and keeps an
+ * anonymous visitor from re-pointing an existing session's `ConversationID` (the anonymous ownership key —
+ * see `CheckAnonymousOwnershipKeyChange`). The
  * owner can legitimately write the row — the `UI` and `Widget Guest` roles hold `CanUpdate` on their
  * own sessions — so the protection has to live at the entity, where the generated CRUD mutations,
- * `StartAgentSession(configJson)` and every other path converge on `Save()`.
+ * `StartAgentSession(configJson)` and every other path converge on `Save`.
+ *
+ * The recording ledger's columns need no subclass: they are protected in metadata
+ * (`AllowUpdateAPI=false`, #6010), so an entity save cannot write them and only the ledger's stored
+ * procedures do.
  *
  * See {@link FindProtectedSessionConfigChanges} for what is protected and why, and
  * `RunWithTrustedSessionConfigWrites` for how server code opts in.

package/dist/custom/MJAIAgentSessionEntityServer.server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"MJAIAgentSessionEntityServer.server.d.ts","sourceRoot":"","sources":["../../src/custom/MJAIAgentSessionEntityServer.server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAwD,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAE9G,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AAGvE;;;;;;;;;;;;;;;GAeG;AACH,qBACa,4BAA6B,SAAQ,sBAAsB;IACpD,QAAQ,IAAI,gBAAgB;IAU5C,4FAA4F;IAC5F,OAAO,CAAC,wBAAwB;CAyBnC"}
+{"version":3,"file":"MJAIAgentSessionEntityServer.server.d.ts","sourceRoot":"","sources":["../../src/custom/MJAIAgentSessionEntityServer.server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAwD,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAE9G,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AAIvE;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,qBACa,4BAA6B,SAAQ,sBAAsB;IACpD,QAAQ,IAAI,gBAAgB;IAa5C,4FAA4F;IAC5F,OAAO,CAAC,wBAAwB;CAmCnC"}

package/dist/custom/MJAIAgentSessionEntityServer.server.js

@@ -8,14 +8,21 @@ import { BaseEntity, ValidationErrorInfo, ValidationErrorType } from '@memberjun
 import { RegisterClass } from '@memberjunction/global';
 import { MJAIAgentSessionEntity } from '@memberjunction/core-entities';
 import { FindProtectedSessionConfigChanges, IsTrustedSessionConfigWriteActive } from './sessionConfigGuard.js';
+import { CheckAnonymousOwnershipKeyChange, IsSetByTransactionVariable } from './anonymousOwnershipKeyGuard.js';
 /**
  * Server-side `MJ: AI Agent Sessions` entity.
  *
- * Its single job is to keep the **server-authoritative keys** inside `Config` (the janitor's
- * `maxSessionDeadlineIso`, the `identityVerification` state) out of the session owner's reach. The
+ * It keeps the **server-authoritative keys** inside `Config` (the janitor's
+ * `maxSessionDeadlineIso`, the `identityVerification` state) out of the session owner's reach, and keeps an
+ * anonymous visitor from re-pointing an existing session's `ConversationID` (the anonymous ownership key —
+ * see `CheckAnonymousOwnershipKeyChange`). The
  * owner can legitimately write the row — the `UI` and `Widget Guest` roles hold `CanUpdate` on their
  * own sessions — so the protection has to live at the entity, where the generated CRUD mutations,
- * `StartAgentSession(configJson)` and every other path converge on `Save()`.
+ * `StartAgentSession(configJson)` and every other path converge on `Save`.
+ *
+ * The recording ledger's columns need no subclass: they are protected in metadata
+ * (`AllowUpdateAPI=false`, #6010), so an entity save cannot write them and only the ledger's stored
+ * procedures do.
  *
  * See {@link FindProtectedSessionConfigChanges} for what is protected and why, and
  * `RunWithTrustedSessionConfigWrites` for how server code opts in.
@@ -27,9 +34,12 @@ import { FindProtectedSessionConfigChanges, IsTrustedSessionConfigWriteActive }
 let MJAIAgentSessionEntityServer = class MJAIAgentSessionEntityServer extends MJAIAgentSessionEntity {
     Validate() {
         const result = super.Validate();
-        const violation = this.checkProtectedConfigKeys();
-        if (violation) {
-            result.Errors.push(violation);
+        const violations = [
+            this.checkProtectedConfigKeys(),
+            CheckAnonymousOwnershipKeyChange(this, 'ConversationID'),
+        ].filter((v) => v !== null);
+        if (violations.length > 0) {
+            result.Errors.push(...violations);
             result.Success = false;
         }
         return result;
@@ -43,6 +53,11 @@ let MJAIAgentSessionEntityServer = class MJAIAgentSessionEntityServer extends MJ
         if (!configField) {
             return null;
         }
+        // A 'Use' transaction variable writes its field at submit, after this comparison: on Config its value is unknown
+        // here, and on ID the update (and this Config) lands on another session than the one compared against.
+        if (IsSetByTransactionVariable(this, ['Config', 'ID'])) {
+            return new ValidationErrorInfo('Config', 'Config is server-managed in part, so neither it nor the row it is written to can come from a transaction variable.', null, ValidationErrorType.Failure);
+        }
         // A saved record is compared against what was loaded; a new record against nothing. For a
         // saved record whose Config was not touched there is nothing to compare.
         if (this.IsSaved && !configField.Dirty) {

package/dist/custom/MJAIAgentSessionEntityServer.server.js.map

@@ -1 +1 @@
-{"version":3,"file":"MJAIAgentSessionEntityServer.server.js","sourceRoot":"","sources":["../../src/custom/MJAIAgentSessionEntityServer.server.ts"],"names":[],"mappings":";;;;;;AAAA,OAAO,EAAE,UAAU,EAAE,mBAAmB,EAAE,mBAAmB,EAAoB,MAAM,sBAAsB,CAAC;AAC9G,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,EAAE,iCAAiC,EAAE,iCAAiC,EAAE,MAAM,sBAAsB,CAAC;AAE5G;;;;;;;;;;;;;;;GAeG;AAEI,IAAM,4BAA4B,GAAlC,MAAM,4BAA6B,SAAQ,sBAAsB;IACpD,QAAQ;QACpB,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;QAChC,MAAM,SAAS,GAAG,IAAI,CAAC,wBAAwB,EAAE,CAAC;QAClD,IAAI,SAAS,EAAE,CAAC;YACZ,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC9B,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC;QAC3B,CAAC;QACD,OAAO,MAAM,CAAC;IAClB,CAAC;IAED,4FAA4F;IACpF,wBAAwB;QAC5B,IAAI,iCAAiC,EAAE,EAAE,CAAC;YACtC,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,CAAC,WAAW,EAAE,CAAC;YACf,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,0FAA0F;QAC1F,yEAAyE;QACzE,IAAI,IAAI,CAAC,OAAO,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;YACrC,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,IAAI,OAAO,WAAW,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;QACxG,MAAM,OAAO,GAAG,iCAAiC,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1E,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,OAAO,IAAI,mBAAmB,CAC1B,QAAQ,EACR,gBAAgB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,8DAA8D,EAChG,IAAI,EACJ,mBAAmB,CAAC,OAAO,CAC9B,CAAC;IACN,CAAC;CACJ,CAAA;AArCY,4BAA4B;IADxC,aAAa,CAAC,UAAU,EAAE,uBAAuB,CAAC;GACtC,4BAA4B,CAqCxC"}
+{"version":3,"file":"MJAIAgentSessionEntityServer.server.js","sourceRoot":"","sources":["../../src/custom/MJAIAgentSessionEntityServer.server.ts"],"names":[],"mappings":";;;;;;AAAA,OAAO,EAAE,UAAU,EAAE,mBAAmB,EAAE,mBAAmB,EAAoB,MAAM,sBAAsB,CAAC;AAC9G,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,EAAE,iCAAiC,EAAE,iCAAiC,EAAE,MAAM,sBAAsB,CAAC;AAC5G,OAAO,EAAE,gCAAgC,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAE5G;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEI,IAAM,4BAA4B,GAAlC,MAAM,4BAA6B,SAAQ,sBAAsB;IACpD,QAAQ;QACpB,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;QAChC,MAAM,UAAU,GAAG;YACf,IAAI,CAAC,wBAAwB,EAAE;YAC/B,gCAAgC,CAAC,IAAI,EAAE,gBAAgB,CAAC;SAC3D,CAAC,MAAM,CAAC,CAAC,CAAC,EAA4B,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;QACtD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,CAAC;YAClC,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC;QAC3B,CAAC;QACD,OAAO,MAAM,CAAC;IAClB,CAAC;IAED,4FAA4F;IACpF,wBAAwB;QAC5B,IAAI,iCAAiC,EAAE,EAAE,CAAC;YACtC,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,CAAC,WAAW,EAAE,CAAC;YACf,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,iHAAiH;QACjH,uGAAuG;QACvG,IAAI,0BAA0B,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;YACrD,OAAO,IAAI,mBAAmB,CAC1B,QAAQ,EACR,oHAAoH,EACpH,IAAI,EACJ,mBAAmB,CAAC,OAAO,CAC9B,CAAC;QACN,CAAC;QACD,0FAA0F;QAC1F,yEAAyE;QACzE,IAAI,IAAI,CAAC,OAAO,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;YACrC,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,IAAI,OAAO,WAAW,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;QACxG,MAAM,OAAO,GAAG,iCAAiC,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1E,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,OAAO,IAAI,mBAAmB,CAC1B,QAAQ,EACR,gBAAgB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,8DAA8D,EAChG,IAAI,EACJ,mBAAmB,CAAC,OAAO,CAC9B,CAAC;IACN,CAAC;CACJ,CAAA;AAlDY,4BAA4B;IADxC,aAAa,CAAC,UAAU,EAAE,uBAAuB,CAAC;GACtC,4BAA4B,CAkDxC"}

package/dist/custom/MJComponentEntityServer.server.d.ts

@@ -24,9 +24,18 @@ import { MJComponentEntityExtended } from "@memberjunction/core-entities";
  * found by comparing with the stored row, not with the values as loaded. When a read fails, the
  * write is refused. The check needs a query and `Validate()` is synchronous, so it runs in `Save()`
  * (an ordinary save and a `ReplayOnly` save alike) and in `Delete()`, before the write.
+ *
+ * Approval (`ApprovalStatus`) is a server act: a save that moves it to Approved records the context
+ * user, the time and the fingerprint of this version's specification (`ApplyApprovalRulesAsync`).
  */
 export declare class MJComponentEntityServer extends MJComponentEntityExtended {
     Save(options?: EntitySaveOptions): Promise<boolean>;
+    /**
+     * Applies the approval rules. Nothing in this save derives the specification or version, so an
+     * approving save stamps the fingerprint now and writes it with the row.
+     * @returns false when the save was refused (the reason is in `LatestResult`)
+     */
+    private applyApprovalAsync;
     Delete(options?: EntityDeleteOptions): Promise<boolean>;
     /**
      * Simple proxy to local helper method for embeddings. Needed for BaseEntity sub-classes that want to use embeddings built into BaseEntity

package/dist/custom/MJComponentEntityServer.server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"MJComponentEntityServer.server.d.ts","sourceRoot":"","sources":["../../src/custom/MJComponentEntityServer.server.ts"],"names":[],"mappings":"AAAA,OAAO,EAEH,mBAAmB,EACnB,iBAAiB,EACjB,qBAAqB,EAExB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAK1E;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,qBACa,uBAAwB,SAAQ,yBAAyB;IAC5C,IAAI,CAAC,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC;IAyBnD,MAAM,CAAC,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,OAAO,CAAC;IAS7E;;;;OAIG;cACsB,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAI5F,0GAA0G;IAC1G,OAAO,KAAK,UAAU,GAcrB;CACJ"}
+{"version":3,"file":"MJComponentEntityServer.server.d.ts","sourceRoot":"","sources":["../../src/custom/MJComponentEntityServer.server.ts"],"names":[],"mappings":"AAAA,OAAO,EAEH,mBAAmB,EACnB,iBAAiB,EACjB,qBAAqB,EAExB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAoC,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAM5G;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,qBACa,uBAAwB,SAAQ,yBAAyB;IAC5C,IAAI,CAAC,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC;IA4BzE;;;;OAIG;YACW,kBAAkB;IAYV,MAAM,CAAC,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,OAAO,CAAC;IAS7E;;;;OAIG;cACsB,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAI5F,0GAA0G;IAC1G,OAAO,KAAK,UAAU,GAcrB;CACJ"}

package/dist/custom/MJComponentEntityServer.server.js

@@ -6,10 +6,11 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 };
 import { BaseEntity, } from "@memberjunction/core";
 import { RegisterClass } from "@memberjunction/global";
-import { MJComponentEntityExtended } from "@memberjunction/core-entities";
+import { ComputeComponentFingerprintAsync, MJComponentEntityExtended } from "@memberjunction/core-entities";
 import { EmbedTextLocalHelper } from "./util.js";
 import { FormScopeRefusalResult } from "./FormScopeGuard.js";
 import { ComponentGuardRefusal } from "./FormComponentGuard.js";
+import { ApplyApprovalRulesAsync, ApprovalRefusalResult } from "./approvalStamp.js";
 /**
  * Server-side `MJ: Components` entity.
  *
@@ -34,6 +35,9 @@ import { ComponentGuardRefusal } from "./FormComponentGuard.js";
  * found by comparing with the stored row, not with the values as loaded. When a read fails, the
  * write is refused. The check needs a query and `Validate()` is synchronous, so it runs in `Save()`
  * (an ordinary save and a `ReplayOnly` save alike) and in `Delete()`, before the write.
+ *
+ * Approval (`ApprovalStatus`) is a server act: a save that moves it to Approved records the context
+ * user, the time and the fingerprint of this version's specification (`ApplyApprovalRulesAsync`).
  */
 let MJComponentEntityServer = class MJComponentEntityServer extends MJComponentEntityExtended {
     async Save(options) {
@@ -43,6 +47,9 @@ let MJComponentEntityServer = class MJComponentEntityServer extends MJComponentE
             this.RegisterResultHistoryEntry(FormScopeRefusalResult(operation, refusal));
             return false;
         }
+        if (!await this.applyApprovalAsync(options)) {
+            return false;
+        }
         await this.GenerateEmbeddingsByFieldName([
             {
                 fieldName: "FunctionalRequirements",
@@ -60,6 +67,23 @@ let MJComponentEntityServer = class MJComponentEntityServer extends MJComponentE
         const saveResult = await super.Save(options);
         return saveResult;
     }
+    /**
+     * Applies the approval rules. Nothing in this save derives the specification or version, so an
+     * approving save stamps the fingerprint now and writes it with the row.
+     * @returns false when the save was refused (the reason is in `LatestResult`)
+     */
+    async applyApprovalAsync(options) {
+        try {
+            if (!options?.ReplayOnly && await ApplyApprovalRulesAsync(this, 'ApprovalStatus', this.ApprovalStatus)) {
+                this.ApprovedFingerprint = await ComputeComponentFingerprintAsync(this);
+            }
+            return true;
+        }
+        catch (e) {
+            this.RegisterResultHistoryEntry(ApprovalRefusalResult(this, e));
+            return false;
+        }
+    }
     async Delete(options) {
         const refusal = await ComponentGuardRefusal(this.guardedRow, 'delete');
         if (refusal) {

package/dist/custom/MJComponentEntityServer.server.js.map

@@ -1 +1 @@
-{"version":3,"file":"MJComponentEntityServer.server.js","sourceRoot":"","sources":["../../src/custom/MJComponentEntityServer.server.ts"],"names":[],"mappings":";;;;;;AAAA,OAAO,EACH,UAAU,GAKb,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,EAAE,oBAAoB,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EAAE,qBAAqB,EAA4B,MAAM,sBAAsB,CAAC;AAEvF;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEI,IAAM,uBAAuB,GAA7B,MAAM,uBAAwB,SAAQ,yBAAyB;IAClD,KAAK,CAAC,IAAI,CAAC,OAA2B;QAClD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;QACrD,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QACxE,IAAI,OAAO,EAAE,CAAC;YACV,IAAI,CAAC,0BAA0B,CAAC,sBAAsB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;YAC5E,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,MAAM,IAAI,CAAC,6BAA6B,CAAC;YACrC;gBACI,SAAS,EAAE,wBAAwB;gBACnC,eAAe,EAAE,8BAA8B;gBAC/C,cAAc,EAAE,8CAA8C;gBAC9D,qBAAqB,EAAE,oCAAoC;aAC9D;YACD;gBACI,SAAS,EAAE,iBAAiB;gBAC5B,eAAe,EAAE,uBAAuB;gBACxC,cAAc,EAAE,uCAAuC;gBACvD,qBAAqB,EAAE,6BAA6B;aACvD;SACJ,CAAC,CAAC;QACH,MAAM,UAAU,GAAY,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtD,OAAO,UAAU,CAAC;IACtB,CAAC;IAEe,KAAK,CAAC,MAAM,CAAC,OAA6B;QACtD,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QACvE,IAAI,OAAO,EAAE,CAAC;YACV,IAAI,CAAC,0BAA0B,CAAC,sBAAsB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;YAC3E,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,OAAO,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC;IAED;;;;OAIG;IACgB,KAAK,CAAC,cAAc,CAAC,WAAmB;QACvD,OAAO,oBAAoB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACnD,CAAC;IAED,0GAA0G;IAC1G,IAAY,UAAU;QAClB,OAAO;YACH,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,MAAM,EAAE;gBACJ,aAAa,EAAE,IAAI,CAAC,aAAa;gBACjC,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,SAAS,EAAE,IAAI,CAAC,SAAS;aAC5B;YACD,eAAe,EAAE,IAAI,CAAC,oBAAoB;YAC1C,gBAAgB,EAAE,IAAI,CAAC,aAA6C;SACvE,CAAC;IACN,CAAC;CACJ,CAAA;AA5DY,uBAAuB;IADnC,aAAa,CAAC,UAAU,EAAE,gBAAgB,CAAC;GAC/B,uBAAuB,CA4DnC"}
+{"version":3,"file":"MJComponentEntityServer.server.js","sourceRoot":"","sources":["../../src/custom/MJComponentEntityServer.server.ts"],"names":[],"mappings":";;;;;;AAAA,OAAO,EACH,UAAU,GAKb,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,gCAAgC,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAC5G,OAAO,EAAE,oBAAoB,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EAAE,qBAAqB,EAA4B,MAAM,sBAAsB,CAAC;AACvF,OAAO,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAEjF;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEI,IAAM,uBAAuB,GAA7B,MAAM,uBAAwB,SAAQ,yBAAyB;IAClD,KAAK,CAAC,IAAI,CAAC,OAA2B;QAClD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;QACrD,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QACxE,IAAI,OAAO,EAAE,CAAC;YACV,IAAI,CAAC,0BAA0B,CAAC,sBAAsB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;YAC5E,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,IAAI,CAAC,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1C,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,MAAM,IAAI,CAAC,6BAA6B,CAAC;YACrC;gBACI,SAAS,EAAE,wBAAwB;gBACnC,eAAe,EAAE,8BAA8B;gBAC/C,cAAc,EAAE,8CAA8C;gBAC9D,qBAAqB,EAAE,oCAAoC;aAC9D;YACD;gBACI,SAAS,EAAE,iBAAiB;gBAC5B,eAAe,EAAE,uBAAuB;gBACxC,cAAc,EAAE,uCAAuC;gBACvD,qBAAqB,EAAE,6BAA6B;aACvD;SACJ,CAAC,CAAC;QACH,MAAM,UAAU,GAAY,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtD,OAAO,UAAU,CAAC;IACtB,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,kBAAkB,CAAC,OAA2B;QACxD,IAAI,CAAC;YACD,IAAI,CAAC,OAAO,EAAE,UAAU,IAAI,MAAM,uBAAuB,CAAC,IAAI,EAAE,gBAAgB,EAAE,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;gBACrG,IAAI,CAAC,mBAAmB,GAAG,MAAM,gCAAgC,CAAC,IAAI,CAAC,CAAC;YAC5E,CAAC;YACD,OAAO,IAAI,CAAC;QAChB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,IAAI,CAAC,0BAA0B,CAAC,qBAAqB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAChE,OAAO,KAAK,CAAC;QACjB,CAAC;IACL,CAAC;IAEe,KAAK,CAAC,MAAM,CAAC,OAA6B;QACtD,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QACvE,IAAI,OAAO,EAAE,CAAC;YACV,IAAI,CAAC,0BAA0B,CAAC,sBAAsB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;YAC3E,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,OAAO,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC;IAED;;;;OAIG;IACgB,KAAK,CAAC,cAAc,CAAC,WAAmB;QACvD,OAAO,oBAAoB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACnD,CAAC;IAED,0GAA0G;IAC1G,IAAY,UAAU;QAClB,OAAO;YACH,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,MAAM,EAAE;gBACJ,aAAa,EAAE,IAAI,CAAC,aAAa;gBACjC,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,SAAS,EAAE,IAAI,CAAC,SAAS;aAC5B;YACD,eAAe,EAAE,IAAI,CAAC,oBAAoB;YAC1C,gBAAgB,EAAE,IAAI,CAAC,aAA6C;SACvE,CAAC;IACN,CAAC;CACJ,CAAA;AAhFY,uBAAuB;IADnC,aAAa,CAAC,UAAU,EAAE,gBAAgB,CAAC;GAC/B,uBAAuB,CAgFnC"}

package/dist/custom/MJConversationEntityServer.server.d.ts

@@ -0,0 +1,13 @@
+import { ValidationResult } from '@memberjunction/core';
+import { MJConversationEntity } from '@memberjunction/core-entities';
+/**
+ * Server-side `MJ: Conversations` entity.
+ *
+ * Keeps `ExternalID` — the scope identity an anonymous visitor's realtime session is owned through — out
+ * of an anonymous visitor's reach once the conversation exists. See {@link CheckAnonymousOwnershipKeyChange}.
+ * Uses the synchronous `Validate()` so the rule runs on every save, like `MJAIAgentSessionEntityServer`.
+ */
+export declare class MJConversationEntityServer extends MJConversationEntity {
+    Validate(): ValidationResult;
+}
+//# sourceMappingURL=MJConversationEntityServer.server.d.ts.map

package/dist/custom/MJConversationEntityServer.server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"MJConversationEntityServer.server.d.ts","sourceRoot":"","sources":["../../src/custom/MJConversationEntityServer.server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAEpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAGrE;;;;;;GAMG;AACH,qBACa,0BAA2B,SAAQ,oBAAoB;IAChD,QAAQ,IAAI,gBAAgB;CAS/C"}

package/dist/custom/MJConversationEntityServer.server.js

@@ -0,0 +1,33 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+import { BaseEntity } from '@memberjunction/core';
+import { RegisterClass } from '@memberjunction/global';
+import { MJConversationEntity } from '@memberjunction/core-entities';
+import { CheckAnonymousOwnershipKeyChange } from './anonymousOwnershipKeyGuard.js';
+/**
+ * Server-side `MJ: Conversations` entity.
+ *
+ * Keeps `ExternalID` — the scope identity an anonymous visitor's realtime session is owned through — out
+ * of an anonymous visitor's reach once the conversation exists. See {@link CheckAnonymousOwnershipKeyChange}.
+ * Uses the synchronous `Validate()` so the rule runs on every save, like `MJAIAgentSessionEntityServer`.
+ */
+let MJConversationEntityServer = class MJConversationEntityServer extends MJConversationEntity {
+    Validate() {
+        const result = super.Validate();
+        const violation = CheckAnonymousOwnershipKeyChange(this, 'ExternalID');
+        if (violation) {
+            result.Errors.push(violation);
+            result.Success = false;
+        }
+        return result;
+    }
+};
+MJConversationEntityServer = __decorate([
+    RegisterClass(BaseEntity, 'MJ: Conversations')
+], MJConversationEntityServer);
+export { MJConversationEntityServer };
+//# sourceMappingURL=MJConversationEntityServer.server.js.map

package/dist/custom/MJConversationEntityServer.server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MJConversationEntityServer.server.js","sourceRoot":"","sources":["../../src/custom/MJConversationEntityServer.server.ts"],"names":[],"mappings":";;;;;;AAAA,OAAO,EAAE,UAAU,EAAoB,MAAM,sBAAsB,CAAC;AACpE,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EAAE,gCAAgC,EAAE,MAAM,8BAA8B,CAAC;AAEhF;;;;;;GAMG;AAEI,IAAM,0BAA0B,GAAhC,MAAM,0BAA2B,SAAQ,oBAAoB;IAChD,QAAQ;QACpB,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;QAChC,MAAM,SAAS,GAAG,gCAAgC,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QACvE,IAAI,SAAS,EAAE,CAAC;YACZ,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC9B,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC;QAC3B,CAAC;QACD,OAAO,MAAM,CAAC;IAClB,CAAC;CACJ,CAAA;AAVY,0BAA0B;IADtC,aAAa,CAAC,UAAU,EAAE,mBAAmB,CAAC;GAClC,0BAA0B,CAUtC"}

package/dist/custom/MJDashboardEntityServer.server.d.ts

@@ -0,0 +1,14 @@
+import { EntitySaveOptions } from "@memberjunction/core";
+import { MJDashboardEntityExtended } from "@memberjunction/core-entities";
+/**
+ * Server-side `MJ: Dashboards` entity.
+ *
+ * Approval (`ApprovalStatus`) is a server act: a save that moves it to Approved records the context
+ * user, the time and the fingerprint of the dashboard's definition (type, configuration, code and
+ * driver class); values a client sends for those columns are ignored (`ApplyApprovalRulesAsync`).
+ * Who may approve is whoever may edit the dashboard.
+ */
+export declare class MJDashboardEntityServer extends MJDashboardEntityExtended {
+    Save(options?: EntitySaveOptions): Promise<boolean>;
+}
+//# sourceMappingURL=MJDashboardEntityServer.server.d.ts.map

package/dist/custom/MJDashboardEntityServer.server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"MJDashboardEntityServer.server.d.ts","sourceRoot":"","sources":["../../src/custom/MJDashboardEntityServer.server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAErE,OAAO,EAAoC,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAG5G;;;;;;;GAOG;AACH,qBACa,uBAAwB,SAAQ,yBAAyB;IAC5C,IAAI,CAAC,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC;CAY5E"}

package/dist/custom/MJDashboardEntityServer.server.js

@@ -0,0 +1,38 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+import { BaseEntity } from "@memberjunction/core";
+import { RegisterClass } from "@memberjunction/global";
+import { ComputeDashboardFingerprintAsync, MJDashboardEntityExtended } from "@memberjunction/core-entities";
+import { ApplyApprovalRulesAsync, ApprovalRefusalResult } from "./approvalStamp.js";
+/**
+ * Server-side `MJ: Dashboards` entity.
+ *
+ * Approval (`ApprovalStatus`) is a server act: a save that moves it to Approved records the context
+ * user, the time and the fingerprint of the dashboard's definition (type, configuration, code and
+ * driver class); values a client sends for those columns are ignored (`ApplyApprovalRulesAsync`).
+ * Who may approve is whoever may edit the dashboard.
+ */
+let MJDashboardEntityServer = class MJDashboardEntityServer extends MJDashboardEntityExtended {
+    async Save(options) {
+        try {
+            // Nothing in this save derives the definition, so the fingerprint is stamped now and written with the row.
+            if (!options?.ReplayOnly && await ApplyApprovalRulesAsync(this, 'ApprovalStatus', this.ApprovalStatus)) {
+                this.ApprovedFingerprint = await ComputeDashboardFingerprintAsync(this);
+            }
+        }
+        catch (e) {
+            this.RegisterResultHistoryEntry(ApprovalRefusalResult(this, e));
+            return false;
+        }
+        return super.Save(options);
+    }
+};
+MJDashboardEntityServer = __decorate([
+    RegisterClass(BaseEntity, 'MJ: Dashboards')
+], MJDashboardEntityServer);
+export { MJDashboardEntityServer };
+//# sourceMappingURL=MJDashboardEntityServer.server.js.map

package/dist/custom/MJDashboardEntityServer.server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MJDashboardEntityServer.server.js","sourceRoot":"","sources":["../../src/custom/MJDashboardEntityServer.server.ts"],"names":[],"mappings":";;;;;;AAAA,OAAO,EAAE,UAAU,EAAqB,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,gCAAgC,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAC5G,OAAO,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAEjF;;;;;;;GAOG;AAEI,IAAM,uBAAuB,GAA7B,MAAM,uBAAwB,SAAQ,yBAAyB;IAClD,KAAK,CAAC,IAAI,CAAC,OAA2B;QAClD,IAAI,CAAC;YACD,2GAA2G;YAC3G,IAAI,CAAC,OAAO,EAAE,UAAU,IAAI,MAAM,uBAAuB,CAAC,IAAI,EAAE,gBAAgB,EAAE,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;gBACrG,IAAI,CAAC,mBAAmB,GAAG,MAAM,gCAAgC,CAAC,IAAI,CAAC,CAAC;YAC5E,CAAC;QACL,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,IAAI,CAAC,0BAA0B,CAAC,qBAAqB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAChE,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;CACJ,CAAA;AAbY,uBAAuB;IADnC,aAAa,CAAC,UAAU,EAAE,gBAAgB,CAAC;GAC/B,uBAAuB,CAanC"}

package/dist/custom/MJDataContextItemEntityServer.server.d.ts

@@ -0,0 +1,33 @@
+import { EntitySaveOptions, ValidationResult } from '@memberjunction/core';
+import { MJDataContextItemEntity } from '@memberjunction/core-entities';
+/**
+ * Server-side `MJ: Data Context Items` entity. The SQL of a `sql` item runs when its data context is
+ * loaded, so only an administrator (Owner-type user) may save an item that is a SQL item or holds SQL
+ * text: creating it, changing any of its fields, or moving it to another data context. Other items
+ * stay writable as before.
+ *
+ * The rule reads the item's values, not which fields changed, because this entity does not track
+ * record changes and a client's `OldValues___` can decide what looks changed. A non-Owner's save of an
+ * existing item whose `Type` or `SQL` was not loaded is refused as well: those columns keep their
+ * stored values on save, and the stored item may be a SQL item.
+ */
+export declare class MJDataContextItemEntityServer extends MJDataContextItemEntity {
+    private static readonly SQL_WRITE_REFUSED;
+    private static readonly SQL_NOT_LOADED_REFUSED;
+    /** The columns that decide whether an item holds SQL. */
+    private static readonly SQL_COLUMNS;
+    Validate(): ValidationResult;
+    /** Applies the same rule to a `ReplayOnly` save, which skips `Validate()`. */
+    Save(options?: EntitySaveOptions): Promise<boolean>;
+    /** Returns why the acting user may not save this item, or null when they may. */
+    private saveRefusal;
+    /** True when this is an existing item whose `Type` or `SQL` was not loaded. */
+    private sqlColumnsNotLoaded;
+    /** True when the item, as loaded and changed, is a SQL item or holds SQL text. */
+    private holdsSQL;
+    /** True when the acting user is an Owner-type user. */
+    private callerIsOwner;
+    /** Records the refusal so `LatestResult.CompleteMessage` carries it, and returns false. */
+    private refuseSave;
+}
+//# sourceMappingURL=MJDataContextItemEntityServer.server.d.ts.map

package/dist/custom/MJDataContextItemEntityServer.server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"MJDataContextItemEntityServer.server.d.ts","sourceRoot":"","sources":["../../src/custom/MJDataContextItemEntityServer.server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgC,iBAAiB,EAAsD,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAE7J,OAAO,EAAE,uBAAuB,EAA+B,MAAM,+BAA+B,CAAC;AAErG;;;;;;;;;;GAUG;AACH,qBACa,6BAA8B,SAAQ,uBAAuB;IACtE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAC8F;IAEvI,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,sBAAsB,CACuG;IAErJ,yDAAyD;IACzD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAqE;IAExF,QAAQ,IAAI,gBAAgB;IAU5C,8EAA8E;IACxD,IAAI,CAAC,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC;IAQzE,iFAAiF;IACjF,OAAO,CAAC,WAAW;IAUnB,+EAA+E;IAC/E,OAAO,CAAC,mBAAmB;IAI3B,kFAAkF;IAClF,OAAO,CAAC,QAAQ;IAIhB,uDAAuD;IACvD,OAAO,CAAC,aAAa;IAKrB,2FAA2F;IAC3F,OAAO,CAAC,UAAU;CAUrB"}

package/dist/custom/MJDataContextItemEntityServer.server.js

@@ -0,0 +1,84 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var MJDataContextItemEntityServer_1;
+import { BaseEntity, BaseEntityResult, ValidationErrorInfo, ValidationErrorType } from '@memberjunction/core';
+import { RegisterClass } from '@memberjunction/global';
+import { MJDataContextItemEntity } from '@memberjunction/core-entities';
+/**
+ * Server-side `MJ: Data Context Items` entity. The SQL of a `sql` item runs when its data context is
+ * loaded, so only an administrator (Owner-type user) may save an item that is a SQL item or holds SQL
+ * text: creating it, changing any of its fields, or moving it to another data context. Other items
+ * stay writable as before.
+ *
+ * The rule reads the item's values, not which fields changed, because this entity does not track
+ * record changes and a client's `OldValues___` can decide what looks changed. A non-Owner's save of an
+ * existing item whose `Type` or `SQL` was not loaded is refused as well: those columns keep their
+ * stored values on save, and the stored item may be a SQL item.
+ */
+let MJDataContextItemEntityServer = class MJDataContextItemEntityServer extends MJDataContextItemEntity {
+    static { MJDataContextItemEntityServer_1 = this; }
+    static { this.SQL_WRITE_REFUSED = 'Only an administrator (Owner-type user) may save a data context item that holds SQL, because that SQL runs against the database.'; }
+    static { this.SQL_NOT_LOADED_REFUSED = 'Only an administrator (Owner-type user) may save a data context item whose Type and SQL were not loaded, because the stored item may hold SQL.'; }
+    /** The columns that decide whether an item holds SQL. */
+    static { this.SQL_COLUMNS = ['Type', 'SQL']; }
+    Validate() {
+        const result = super.Validate();
+        const refusal = this.saveRefusal();
+        if (refusal) {
+            result.Errors.push(new ValidationErrorInfo('SQL', refusal, this.SQL, ValidationErrorType.Failure));
+        }
+        result.Success = result.Success && result.Errors.length === 0;
+        return result;
+    }
+    /** Applies the same rule to a `ReplayOnly` save, which skips `Validate()`. */
+    async Save(options) {
+        const refusal = options?.ReplayOnly ? this.saveRefusal() : null;
+        if (refusal) {
+            return this.refuseSave(refusal);
+        }
+        return super.Save(options);
+    }
+    /** Returns why the acting user may not save this item, or null when they may. */
+    saveRefusal() {
+        if (this.callerIsOwner()) {
+            return null;
+        }
+        if (this.sqlColumnsNotLoaded()) {
+            return MJDataContextItemEntityServer_1.SQL_NOT_LOADED_REFUSED;
+        }
+        return this.holdsSQL() ? MJDataContextItemEntityServer_1.SQL_WRITE_REFUSED : null;
+    }
+    /** True when this is an existing item whose `Type` or `SQL` was not loaded. */
+    sqlColumnsNotLoaded() {
+        return this.IsSaved && MJDataContextItemEntityServer_1.SQL_COLUMNS.some((name) => this.GetFieldByName(name)?.NotLoaded === true);
+    }
+    /** True when the item, as loaded and changed, is a SQL item or holds SQL text. */
+    holdsSQL() {
+        return this.Type === 'sql' || !!this.SQL?.trim();
+    }
+    /** True when the acting user is an Owner-type user. */
+    callerIsOwner() {
+        const caller = this.ActiveUser;
+        return caller?.Type?.trim().toLowerCase() === 'owner';
+    }
+    /** Records the refusal so `LatestResult.CompleteMessage` carries it, and returns false. */
+    refuseSave(message) {
+        const result = new BaseEntityResult();
+        result.Success = false;
+        result.Type = this.IsSaved ? 'update' : 'create';
+        result.Message = message;
+        result.StartedAt = new Date();
+        result.EndedAt = new Date();
+        this.RegisterResultHistoryEntry(result);
+        return false;
+    }
+};
+MJDataContextItemEntityServer = MJDataContextItemEntityServer_1 = __decorate([
+    RegisterClass(BaseEntity, 'MJ: Data Context Items')
+], MJDataContextItemEntityServer);
+export { MJDataContextItemEntityServer };
+//# sourceMappingURL=MJDataContextItemEntityServer.server.js.map

package/dist/custom/MJDataContextItemEntityServer.server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MJDataContextItemEntityServer.server.js","sourceRoot":"","sources":["../../src/custom/MJDataContextItemEntityServer.server.ts"],"names":[],"mappings":";;;;;;;AAAA,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAA+B,mBAAmB,EAAE,mBAAmB,EAAoB,MAAM,sBAAsB,CAAC;AAC7J,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,uBAAuB,EAA+B,MAAM,+BAA+B,CAAC;AAErG;;;;;;;;;;GAUG;AAEI,IAAM,6BAA6B,GAAnC,MAAM,6BAA8B,SAAQ,uBAAuB;;aAC9C,sBAAiB,GACrC,kIAAkI,AAD7F,CAC8F;aAE/G,2BAAsB,GAC1C,gJAAgJ,AADtG,CACuG;IAErJ,yDAAyD;aACjC,gBAAW,GAAqD,CAAC,MAAM,EAAE,KAAK,CAAC,AAApE,CAAqE;IAExF,QAAQ;QACpB,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACnC,IAAI,OAAO,EAAE,CAAC;YACV,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,mBAAmB,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC;QACvG,CAAC;QACD,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC;QAC9D,OAAO,MAAM,CAAC;IAClB,CAAC;IAED,8EAA8E;IAC9D,KAAK,CAAC,IAAI,CAAC,OAA2B;QAClD,MAAM,OAAO,GAAG,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAChE,IAAI,OAAO,EAAE,CAAC;YACV,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IAED,iFAAiF;IACzE,WAAW;QACf,IAAI,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,IAAI,IAAI,CAAC,mBAAmB,EAAE,EAAE,CAAC;YAC7B,OAAO,+BAA6B,CAAC,sBAAsB,CAAC;QAChE,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,+BAA6B,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC;IACpF,CAAC;IAED,+EAA+E;IACvE,mBAAmB;QACvB,OAAO,IAAI,CAAC,OAAO,IAAI,+BAA6B,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,SAAS,KAAK,IAAI,CAAC,CAAC;IACnI,CAAC;IAED,kFAAkF;IAC1E,QAAQ;QACZ,OAAO,IAAI,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;IACrD,CAAC;IAED,uDAAuD;IAC/C,aAAa;QACjB,MAAM,MAAM,GAAoB,IAAI,CAAC,UAAU,CAAC;QAChD,OAAO,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC;IAC1D,CAAC;IAED,2FAA2F;IACnF,UAAU,CAAC,OAAe;QAC9B,MAAM,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;QACtC,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC;QACvB,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;QACjD,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;QACzB,MAAM,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAC9B,MAAM,CAAC,OAAO,GAAG,IAAI,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC;QACxC,OAAO,KAAK,CAAC;IACjB,CAAC;;AAlEQ,6BAA6B;IADzC,aAAa,CAAC,UAAU,EAAE,wBAAwB,CAAC;GACvC,6BAA6B,CAmEzC"}

package/dist/custom/MJDuplicateRunEntityServer.server.d.ts

@@ -1,12 +1,44 @@
 import { EntitySaveOptions } from "@memberjunction/core";
-import { MJDuplicateRunEntity } from "@memberjunction/core-entities";
+import { MJDuplicateRunEntity, MJEntityDocumentEntity } from "@memberjunction/core-entities";
+/**
+ * Chooses the default entity document for a new duplicate run that was created without one, from
+ * the entity's active documents ordered newest-updated first. A 'Record Duplicate' document wins
+ * over any other type: an entity can also have a Search document (MJ ships one for several core
+ * entities), whose template and vectors are built for search, not for matching records. Without a
+ * 'Record Duplicate' document, the newest active document is used.
+ *
+ * Only callers that name no document get this default; the Duplicates tab always names the one
+ * the user picked.
+ *
+ * @param activeDocuments the entity's active documents, newest `__mj_UpdatedAt` first
+ * @returns the document to use, or null when there is none
+ */
+export declare function PickDuplicateDetectionDocument<T extends Pick<MJEntityDocumentEntity, 'Type'>>(activeDocuments: T[]): T | null;
+/**
+ * Checks that the entity document a run names belongs to the run's entity.
+ *
+ * @param entityDocument the run's document
+ * @param entityID the run's EntityID
+ * @returns why the document cannot be used, or null when it can
+ */
+export declare function CheckRunEntityDocument(entityDocument: Pick<MJEntityDocumentEntity, 'EntityID' | 'Name'>, entityID: string): string | null;
 export declare class MJDuplicateRunEntityServer extends MJDuplicateRunEntity {
     Save(options?: EntitySaveOptions): Promise<boolean>;
     /**
      * Run duplicate detection asynchronously. On failure, updates the run's
-     * ProcessingStatus to 'Error' so the UI can surface the problem.
+     * ProcessingStatus to 'Failed' with ProcessingErrorMessage so the UI can surface the problem.
      */
     private runDetectionAsync;
+    /**
+     * The entity's default duplicate-detection document (see {@link PickDuplicateDetectionDocument}),
+     * or null when the entity has no active document.
+     */
+    private findDefaultEntityDocument;
+    /**
+     * Loads the entity document this run names. Throws when it is missing or belongs to another
+     * entity, which fails the run with that message.
+     */
+    private loadRunEntityDocument;
     /**
      * Convert a DuplicateDetectionProgress callback into a PipelineProgress notification.
      */

package/dist/custom/MJDuplicateRunEntityServer.server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"MJDuplicateRunEntityServer.server.d.ts","sourceRoot":"","sources":["../../src/custom/MJDuplicateRunEntityServer.server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAqE,iBAAiB,EAA8E,MAAM,sBAAsB,CAAC;AAExM,OAAO,EAAE,oBAAoB,EAA0B,MAAM,+BAA+B,CAAC;AA4C7F,qBACa,0BAA2B,SAAQ,oBAAoB;IAC1C,IAAI,CAAC,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC;IAuBzE;;;OAGG;YACW,iBAAiB;IAuE/B;;OAEG;IACH,OAAO,CAAC,eAAe;IAgBvB;;;;OAIG;IACH;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAO1B,OAAO,CAAC,2BAA2B;CA8BtC"}
+{"version":3,"file":"MJDuplicateRunEntityServer.server.d.ts","sourceRoot":"","sources":["../../src/custom/MJDuplicateRunEntityServer.server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAqE,iBAAiB,EAA8E,MAAM,sBAAsB,CAAC;AAExM,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AAQ7F;;;;;;;;;;;;GAYG;AACH,wBAAgB,8BAA8B,CAAC,CAAC,SAAS,IAAI,CAAC,sBAAsB,EAAE,MAAM,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE,GAAG,CAAC,GAAG,IAAI,CAG7H;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAClC,cAAc,EAAE,IAAI,CAAC,sBAAsB,EAAE,UAAU,GAAG,MAAM,CAAC,EACjE,QAAQ,EAAE,MAAM,GACjB,MAAM,GAAG,IAAI,CAKf;AAyCD,qBACa,0BAA2B,SAAQ,oBAAoB;IAC1C,IAAI,CAAC,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC;IAgCzE;;;OAGG;YACW,iBAAiB;IAqE/B;;;OAGG;YACW,yBAAyB;IAevC;;;OAGG;YACW,qBAAqB;IAqBnC;;OAEG;IACH,OAAO,CAAC,eAAe;IAgBvB;;;;OAIG;IACH;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAO1B,OAAO,CAAC,2BAA2B;CA8BtC"}