@memberjunction/core-entities-server 6.2.0-edge.4 → 6.2.0-edge.6

package/dist/custom/MJEntityFieldPermissionEntityServer.server.js

@@ -5,10 +5,15 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
     return c > 3 && r && Object.defineProperty(target, key, r), r;
 };
 var MJEntityFieldPermissionEntityServer_1;
-import { BaseEntity, BaseEntityResult, FieldPermissionAccess, IsRestrictingFieldRule, LogError, RunView, ValidationErrorInfo, ValidationErrorType, } from '@memberjunction/core';
+import { BaseEntity, BaseEntityResult, FieldPermissionAccess, LogError, RunView, ValidationErrorInfo, ValidationErrorType, } from '@memberjunction/core';
 import { RegisterClass, UUIDsEqual } from '@memberjunction/global';
 import { MJEntityFieldPermissionEntity } from '@memberjunction/core-entities';
-import { SystemUserFieldAccessLossReason, SystemUserHoldsRole, UserCache } from '@memberjunction/generic-database-provider';
+import { SystemUserFieldAccessLossReason, UserCache } from '@memberjunction/generic-database-provider';
+import { FieldPermissionAccessIs, FieldPermissionAccessVerbs, IsRestrictingFieldRuleAnyCase, NormalizeFieldPermissionAccess, } from './fieldPermissionAccess.js';
+import { GuardedTransactionGroupRefusal, LoadStoredSystemUser, ReleaseGuardedTransactionGroupWrite, ReserveGuardedTransactionGroupWrite, UserHoldsRole, } from './systemUserGuardState.js';
+const UNDETERMINED_PRIOR_BINDING_MESSAGE = 'Could not determine which role and field this permission rule was bound to before the edit, so the ' +
+    "change cannot be checked against the MJ system user's access on the target it is leaving. Refusing to " +
+    'save rather than risk removing access the server depends on. Reload the record and try again.';
 /**
  * Server-side `MJ: Entity Field Permissions` entity — the save-time half of the
  * unrestrictable-target guard for field-level security.
@@ -40,6 +45,11 @@ import { SystemUserFieldAccessLossReason, SystemUserHoldsRole, UserCache } from
  * confidentiality cannot ship with a role that quietly reads everything.
  */
 let MJEntityFieldPermissionEntityServer = MJEntityFieldPermissionEntityServer_1 = class MJEntityFieldPermissionEntityServer extends MJEntityFieldPermissionEntity {
+    constructor() {
+        super(...arguments);
+        /** This write's place in its transaction group, held from the group check until the write enrols. */
+        this.pendingGroupWrite = null;
+    }
     Validate() {
         const result = super.Validate();
         const target = this.resolveTarget();
@@ -68,12 +78,18 @@ let MJEntityFieldPermissionEntityServer = MJEntityFieldPermissionEntityServer_1
         return result;
     }
     /**
-     * Refuses an EDIT that would strip the MJ system user's last `Allow` on a field.
+     * Normalizes Access spellings, then refuses an EDIT that would strip the MJ system user's last
+     * `Allow` on a field.
+     *
+     * **Normalization.** The Access columns' CHECK constraint is case-insensitive, so `'deny'` or
+     * `'ALLOW'` would otherwise persist and read one way while enforcing another. Rewriting them to
+     * the canonical value-list spelling keeps the stored data honest; the guards compare
+     * case-insensitively regardless, so normalization is not the only line of defence.
      *
-     * Not in `Validate()` for two reasons. It needs the field's rules as they stand in the
-     * DATABASE — loaded metadata lags recent writes, and reading a stale sibling row as `Allow` is
-     * exactly how three individually-innocent `No Access` edits get through one at a time. And
-     * loading them is asynchronous, which `Validate()` is not.
+     * **The access-loss guard** is not in `Validate()` for two reasons. It needs the field's rules
+     * as they stand in the DATABASE — loaded metadata lags recent writes, and reading a stale
+     * sibling row as `Allow` is exactly how three individually-innocent `No Access` edits get
+     * through one at a time. And loading them is asynchronous, which `Validate()` is not.
      *
      * Inserts are deliberately not checked: adding a rule can only add access, never remove an
      * existing `Allow`, so the `Deny` check in `Validate()` covers them completely. It has to —
@@ -81,28 +97,125 @@ let MJEntityFieldPermissionEntityServer = MJEntityFieldPermissionEntityServer_1
      * the half-built state.
      */
     async Save(options) {
-        if (this.IsSaved) {
-            const rejection = await this.systemUserAccessLossReason(false);
+        this.normalizeAccessSpellings();
+        let saved = false;
+        try {
+            const rejection = await this.systemUserSaveRejection();
             if (rejection) {
                 return this.refuse(rejection, 'save');
             }
+            saved = await super.Save(options);
+            return saved;
+        }
+        finally {
+            this.settleGroupWrite(saved);
+        }
+    }
+    /**
+     * Ends this write's hold on its reserved group place: kept when the write enrolled, given back
+     * when it was refused, returned false or threw, so a retry is not counted as a second write.
+     */
+    settleGroupWrite(enrolled) {
+        const pending = this.pendingGroupWrite;
+        this.pendingGroupWrite = null;
+        if (!enrolled) {
+            ReleaseGuardedTransactionGroupWrite(pending);
+        }
+    }
+    /**
+     * The transaction-group rule for this write. When it passes, the write's place in the group is
+     * reserved in the same step, so a second guarded write in flight at once sees it.
+     */
+    groupRefusal(concernsSystemUser) {
+        const refusal = GuardedTransactionGroupRefusal(this.TransactionGroup, concernsSystemUser);
+        if (!refusal) {
+            this.pendingGroupWrite = ReserveGuardedTransactionGroupWrite(this.TransactionGroup, concernsSystemUser);
+        }
+        return refusal;
+    }
+    /**
+     * The system-user checks for a save, on the role set as stored in the database (the cached one
+     * lags a role assigned a moment ago): a `Deny` on a role the system user holds; an edit that
+     * strips its last `Allow`; and a transaction group holding this and another guarded write that
+     * concerns it. An insert that restricts nothing needs none of these and reads nothing, which
+     * keeps reconciliation's bulk inserts free. A read that fails refuses the save.
+     */
+    async systemUserSaveRejection() {
+        this.pendingGroupWrite = null;
+        const restricting = IsRestrictingFieldRuleAnyCase(this);
+        if (!this.IsSaved && !restricting) {
+            return null;
+        }
+        try {
+            const systemUser = await LoadStoredSystemUser(this.RunViewProviderToUse);
+            const prior = this.IsSaved ? this.priorBinding() : null;
+            const concerns = UserHoldsRole(systemUser, this.RoleID) || (prior === null && this.IsSaved) || UserHoldsRole(systemUser, prior?.RoleID);
+            const groupRefusal = this.groupRefusal(concerns);
+            if (groupRefusal) {
+                return groupRefusal;
+            }
+            if (restricting && UserHoldsRole(systemUser, this.RoleID)) {
+                return MJEntityFieldPermissionEntityServer_1.SystemUserRoleRejectionReason(this.RoleID, this, systemUser);
+            }
+            return this.IsSaved ? await this.systemUserEditLossReason(systemUser) : null;
+        }
+        catch (e) {
+            return MJEntityFieldPermissionEntityServer_1.unverifiableMessage(e);
         }
-        return super.Save(options);
+    }
+    /** The refusal when the system user's field access cannot be checked because a read failed. */
+    static unverifiableMessage(error) {
+        const detail = error instanceof Error ? error.message : String(error);
+        return `Could not check this field rule against the MJ system user's field access, so it was not saved. ${detail}`;
     }
     /**
      * Refuses a DELETE that would strip the MJ system user's last `Allow` on a field — the other
      * way, besides editing one to `No Access`, to remove access without writing a `Deny`.
      *
-     * Reconciliation's own orphan deletes are unaffected: it only removes rows whose role has lost
-     * entity-level read (so the system user is already denied one level up and the guard stands
-     * down) or whose field became unrestrictable (forced open regardless).
+     * Judged against the row's STORED binding: a delete removes the row by ID, so an unsaved
+     * re-point on this object does not change which target loses it.
+     *
+     * Reconciliation's orphan deletes usually clear this guard — a row whose field became
+     * unrestrictable is forced open regardless — but not always: an orphaned row can be the system
+     * user's last `Allow` on a field while another of its roles still reads the entity. The
+     * reconciler logs and skips such a refusal rather than aborting.
      */
     async Delete(options) {
-        const rejection = await this.systemUserAccessLossReason(true);
-        if (rejection) {
-            return this.refuse(rejection, 'delete');
+        let deleted = false;
+        try {
+            const rejection = await this.systemUserDeleteRejection();
+            if (rejection) {
+                return this.refuse(rejection, 'delete');
+            }
+            deleted = await super.Delete(options);
+            return deleted;
+        }
+        finally {
+            this.settleGroupWrite(deleted);
+        }
+    }
+    /** The system-user checks for a delete, on the role set as stored in the database. */
+    async systemUserDeleteRejection() {
+        this.pendingGroupWrite = null;
+        try {
+            const systemUser = await LoadStoredSystemUser(this.RunViewProviderToUse);
+            const prior = this.priorBinding();
+            const concerns = prior === null || UserHoldsRole(systemUser, prior.RoleID);
+            const groupRefusal = this.groupRefusal(concerns);
+            return groupRefusal ?? (await this.systemUserDeleteLossReason(systemUser));
+        }
+        catch (e) {
+            return MJEntityFieldPermissionEntityServer_1.unverifiableMessage(e);
+        }
+    }
+    /** Rewrites each Access value to its canonical spelling; unrecognized values are left for validation to report. */
+    normalizeAccessSpellings() {
+        for (const verb of FieldPermissionAccessVerbs) {
+            const canonical = NormalizeFieldPermissionAccess(this[verb]);
+            if (canonical && canonical !== this[verb]) {
+                this[verb] = canonical;
+            }
         }
-        return super.Delete(options);
     }
     /**
      * Records a refusal on the result history so `LatestResult.CompleteMessage` explains it, and
@@ -119,36 +232,99 @@ let MJEntityFieldPermissionEntityServer = MJEntityFieldPermissionEntityServer_1
         return false;
     }
     /**
-     * Why the pending change would leave the system user short of its entity-level access, or null.
+     * Why the pending EDIT would leave the system user short of its entity-level access, or null.
+     *
+     * An edit that changes `RoleID` or `EntityFieldID` MOVES the rule: it is a delete from the
+     * target it leaves as well as an insert into the one it joins. Judging only the destination
+     * let a sequence of saves strip the system user's last `Allow` without writing a `Deny` —
+     * re-point that row at a role the system user does not hold, and the cheap exit on the NEW
+     * role waved it through. So both targets are evaluated:
      *
-     * @param removing true when this row is being deleted rather than edited
+     * - **the destination field**, with this row's new values projected in, whenever the system
+     *   user holds the new role — or, when the field is unchanged, the old one (the row's old
+     *   binding drops out of that same field's aggregate);
+     * - **the vacated field**, with this row removed, whenever the field itself changed and the
+     *   system user holds the old role.
+     *
+     * The cheap exits are what keep the queries off ordinary permission administration: the
+     * aggregation only consults rules bound to roles the user holds, so a change touching no such
+     * role cannot move the system user's access at all.
      */
-    async systemUserAccessLossReason(removing) {
-        // Cheap exit first: the aggregation only ever consults rules bound to a role the user
-        // holds, so a change to any other role's rule cannot move the system user's access at all.
-        // This is what keeps the query below off the path of ordinary permission administration —
-        // it runs only for edits to the handful of roles the server's own account holds.
-        if (!SystemUserHoldsRole(this.RoleID)) {
+    async systemUserEditLossReason(systemUser) {
+        const prior = this.priorBinding();
+        if (!prior) {
+            return UNDETERMINED_PRIOR_BINDING_MESSAGE;
+        }
+        const holds = (roleID) => UserHoldsRole(systemUser, roleID);
+        const fieldMoved = !UUIDsEqual(prior.EntityFieldID, this.EntityFieldID);
+        const touchesDestination = holds(this.RoleID) || (!fieldMoved && holds(prior.RoleID));
+        if (touchesDestination) {
+            const rejection = await this.projectedLossReason(this.EntityFieldID, true, systemUser);
+            if (rejection) {
+                return rejection;
+            }
+        }
+        if (fieldMoved && holds(prior.RoleID)) {
+            return this.projectedLossReason(prior.EntityFieldID, false, systemUser);
+        }
+        return null;
+    }
+    /** Why deleting this row would leave the system user short of its entity-level access, or null. */
+    async systemUserDeleteLossReason(systemUser) {
+        const prior = this.priorBinding();
+        if (!prior) {
+            return UNDETERMINED_PRIOR_BINDING_MESSAGE;
+        }
+        if (!UserHoldsRole(systemUser, prior.RoleID)) {
             return null;
         }
-        const target = this.resolveTarget();
+        return this.projectedLossReason(prior.EntityFieldID, false, systemUser);
+    }
+    /**
+     * Projects one field's stored rules with this row's change applied and asks whether the
+     * system user keeps its access there.
+     *
+     * @param entityFieldID the field whose aggregate to evaluate
+     * @param includeThisRow true to project this row in with its CURRENT values (it is on this
+     *                       field after the change); false to project it out (it is leaving)
+     * @param systemUser the system user with its role set as stored
+     */
+    async projectedLossReason(entityFieldID, includeThisRow, systemUser) {
+        const target = this.resolveTargetByFieldID(entityFieldID);
         if (!target) {
             return null;
         }
         const current = await this.loadCurrentRules(target.Field.ID);
-        const others = current.filter(r => !UUIDsEqual(r.ID, this.ID));
-        const projected = removing
-            ? others
-            : [
+        const others = current.filter((r) => !UUIDsEqual(r.ID, this.ID));
+        const projected = includeThisRow
+            ? [
                 ...others,
-                {
-                    RoleID: this.RoleID,
-                    ReadAccess: this.ReadAccess,
-                    UpdateAccess: this.UpdateAccess,
-                    CreateAccess: this.CreateAccess,
-                },
-            ];
-        return SystemUserFieldAccessLossReason(target.Entity, target.Field, projected);
+                { RoleID: this.RoleID, ReadAccess: this.ReadAccess, UpdateAccess: this.UpdateAccess, CreateAccess: this.CreateAccess },
+            ]
+            : others;
+        return SystemUserFieldAccessLossReason(target.Entity, target.Field, projected, systemUser);
+    }
+    /**
+     * The (role, field) pair this row occupies in the database — the dirty fields' old values,
+     * otherwise their current ones. Null when a re-pointed field's prior value cannot be
+     * established, which callers treat as a refusal: an unknown vacated target cannot be shown safe.
+     */
+    priorBinding() {
+        const roleID = this.priorValue('RoleID', this.RoleID);
+        const entityFieldID = this.priorValue('EntityFieldID', this.EntityFieldID);
+        if (roleID === undefined || entityFieldID === undefined) {
+            return null;
+        }
+        return { RoleID: roleID, EntityFieldID: entityFieldID };
+    }
+    /** A column's stored value; undefined when it is dirty and its old value is not a usable ID. */
+    priorValue(fieldName, current) {
+        const field = this.GetFieldByName(fieldName);
+        if (!field?.Dirty) {
+            return current;
+        }
+        const old = field.OldValue;
+        return typeof old === 'string' && old.length > 0 ? old : undefined;
     }
     /**
      * Every rule currently stored against this field, straight from the database.
@@ -208,17 +384,20 @@ let MJEntityFieldPermissionEntityServer = MJEntityFieldPermissionEntityServer_1
      * @param roleID the role the rule targets
      * @param rule the rule's three verbs; omitted only by callers that are pre-checking a role
      *             rather than a specific rule, which are answered as though the rule denied
+     * @param storedSystemUser the system user with its role set as stored in the database;
+     *             defaults to the user cache's system user
      */
-    static SystemUserRoleRejectionReason(roleID, rule) {
+    static SystemUserRoleRejectionReason(roleID, rule, storedSystemUser) {
         if (!roleID) {
             return null;
         }
-        if (rule && !IsRestrictingFieldRule(rule)) {
+        if (rule && !IsRestrictingFieldRuleAnyCase(rule)) {
             return null; // grants and neutrals are exactly what keep the system user working
         }
         // UserCache is populated on the server; a client-side save (or a cold cache) simply
-        // skips the check rather than blocking an administrator on missing state.
-        const systemUser = UserCache.Instance?.GetSystemUser?.();
+        // skips the check rather than blocking an administrator on missing state. `Save()` passes
+        // the system user with its role set as stored, which the cache may not show yet.
+        const systemUser = storedSystemUser ?? UserCache.Instance?.GetSystemUser?.();
         if (!systemUser?.UserRoles?.length) {
             return null;
         }
@@ -254,10 +433,11 @@ let MJEntityFieldPermissionEntityServer = MJEntityFieldPermissionEntityServer_1
         if (!field.ReadOnly) {
             return null;
         }
+        // Compared case-insensitively: the column's collation stores 'no access' as the same value.
         const offending = [];
-        if (rule.UpdateAccess !== FieldPermissionAccess.NoAccess)
+        if (!FieldPermissionAccessIs(rule.UpdateAccess, FieldPermissionAccess.NoAccess))
             offending.push('Update');
-        if (rule.CreateAccess !== FieldPermissionAccess.NoAccess)
+        if (!FieldPermissionAccessIs(rule.CreateAccess, FieldPermissionAccess.NoAccess))
             offending.push('Create');
         if (offending.length === 0) {
             return null;
@@ -285,15 +465,6 @@ let MJEntityFieldPermissionEntityServer = MJEntityFieldPermissionEntityServer_1
         }
         return null;
     }
-    /**
-     * Resolves `EntityFieldID` to its {@link EntityFieldInfo} from loaded metadata.
-     *
-     * Returns null when metadata cannot resolve it — for instance immediately after a schema
-     * change, before the metadata cache has refreshed. That case passes validation rather than
-     * blocking the administrator: the foreign key already guarantees the row points at a real
-     * field, and the runtime aggregation guards hold regardless of what is stored here. Failing
-     * closed would trade a real, recurring workflow block for no additional protection.
-     */
     /**
      * Why this role may not carry a field rule on this entity, or null when it may.
      *
@@ -326,13 +497,26 @@ let MJEntityFieldPermissionEntityServer = MJEntityFieldPermissionEntityServer_1
             `permission on '${entity.Name}' first (one that grants nothing is fine, and is how a deny-only ` +
             `carve-out is expressed), then set the field rule.`);
     }
+    /**
+     * Resolves `EntityFieldID` to its {@link EntityFieldInfo} from loaded metadata.
+     *
+     * Returns null when metadata cannot resolve it — for instance immediately after a schema
+     * change, before the metadata cache has refreshed. That case passes validation rather than
+     * blocking the administrator: the foreign key already guarantees the row points at a real
+     * field, and the runtime aggregation guards hold regardless of what is stored here. Failing
+     * closed would trade a real, recurring workflow block for no additional protection.
+     */
     resolveTarget() {
-        if (!this.EntityFieldID) {
+        return this.resolveTargetByFieldID(this.EntityFieldID);
+    }
+    /** The field a given `EntityFieldID` names, so the re-point guard can resolve a row's OLD field too. */
+    resolveTargetByFieldID(entityFieldID) {
+        if (!entityFieldID) {
             return null; // the NOT NULL column is the base class's problem to report, not ours
         }
         const md = this.ProviderToUse;
         for (const entity of md?.Entities ?? []) {
-            const match = entity.Fields.find((f) => UUIDsEqual(f.ID, this.EntityFieldID));
+            const match = entity.Fields.find((f) => UUIDsEqual(f.ID, entityFieldID));
             if (match) {
                 return { Entity: entity, Field: match };
             }

package/dist/custom/MJEntityFieldPermissionEntityServer.server.js.map

@@ -1 +1 @@
-{"version":3,"file":"MJEntityFieldPermissionEntityServer.server.js","sourceRoot":"","sources":["../../src/custom/MJEntityFieldPermissionEntityServer.server.ts"],"names":[],"mappings":";;;;;;;AAAA,OAAO,EACH,UAAU,EACV,gBAAgB,EAKhB,qBAAqB,EAIrB,sBAAsB,EACtB,QAAQ,EACR,OAAO,EACP,mBAAmB,EACnB,mBAAmB,GAEtB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACnE,OAAO,EAAE,6BAA6B,EAAE,MAAM,+BAA+B,CAAC;AAC9E,OAAO,EAAE,+BAA+B,EAAE,mBAAmB,EAAE,SAAS,EAAE,MAAM,2CAA2C,CAAC;AAE5H;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEI,IAAM,mCAAmC,2CAAzC,MAAM,mCAAoC,SAAQ,6BAA6B;IAClE,QAAQ;QACpB,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;QAEhC,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACpC,IAAI,MAAM,EAAE,CAAC;YACT,MAAM,yBAAyB,GAAG,qCAAmC,CAAC,uCAAuC,CACzG,MAAM,CAAC,MAAM,EACb,IAAI,CAAC,MAAM,CACd,CAAC;YACF,IAAI,yBAAyB,EAAE,CAAC;gBAC5B,MAAM,CAAC,MAAM,CAAC,IAAI,CACd,IAAI,mBAAmB,CAAC,QAAQ,EAAE,yBAAyB,EAAE,IAAI,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,CAAC,CACzG,CAAC;YACN,CAAC;QACL,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,EAAE,KAAK,CAAC;QAClC,IAAI,WAAW,EAAE,CAAC;YACd,MAAM,SAAS,GAAG,qCAAmC,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;YACnF,IAAI,SAAS,EAAE,CAAC;gBACZ,MAAM,CAAC,MAAM,CAAC,IAAI,CACd,IAAI,mBAAmB,CAAC,eAAe,EAAE,SAAS,EAAE,IAAI,CAAC,aAAa,EAAE,mBAAmB,CAAC,OAAO,CAAC,CACvG,CAAC;YACN,CAAC;YACD,MAAM,kBAAkB,GAAG,qCAAmC,CAAC,wBAAwB,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;YAC3G,IAAI,kBAAkB,EAAE,CAAC;gBACrB,MAAM,CAAC,MAAM,CAAC,IAAI,CACd,IAAI,mBAAmB,CAAC,eAAe,EAAE,kBAAkB,EAAE,IAAI,CAAC,aAAa,EAAE,mBAAmB,CAAC,OAAO,CAAC,CAChH,CAAC;YACN,CAAC;QACL,CAAC;QAED,MAAM,aAAa,GAAG,qCAAmC,CAAC,6BAA6B,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC3G,IAAI,aAAa,EAAE,CAAC;YAChB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,mBAAmB,CAAC,QAAQ,EAAE,aAAa,EAAE,IAAI,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC;QACnH,CAAC;QAED,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC;QAC9D,OAAO,MAAM,CAAC;IAClB,CAAC;IAED;;;;;;;;;;;;OAYG;IACa,KAAK,CAAC,IAAI,CAAC,OAA2B;QAClD,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACf,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,0BAA0B,CAAC,KAAK,CAAC,CAAC;YAC/D,IAAI,SAAS,EAAE,CAAC;gBACZ,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAC1C,CAAC;QACL,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IAED;;;;;;;OAOG;IACa,KAAK,CAAC,MAAM,CAAC,OAA6B;QACtD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,CAAC;QAC9D,IAAI,SAAS,EAAE,CAAC;YACZ,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC;IAED;;;OAGG;IACK,MAAM,CAAC,OAAe,EAAE,IAAuB;QACnD,MAAM,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;QACtC,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC;QACvB,MAAM,CAAC,IAAI,GAAG,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;QAChF,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;QACzB,MAAM,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAC9B,MAAM,CAAC,OAAO,GAAG,IAAI,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAChC,OAAO,KAAK,CAAC;IACjB,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,0BAA0B,CAAC,QAAiB;QACtD,sFAAsF;QACtF,2FAA2F;QAC3F,0FAA0F;QAC1F,iFAAiF;QACjF,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACpC,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACpC,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAC/D,MAAM,SAAS,GAAiC,QAAQ;YACpD,CAAC,CAAC,MAAM;YACR,CAAC,CAAC;gBACI,GAAG,MAAM;gBACT;oBACI,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,UAAU,EAAE,IAAI,CAAC,UAAU;oBAC3B,YAAY,EAAE,IAAI,CAAC,YAAY;oBAC/B,YAAY,EAAE,IAAI,CAAC,YAAY;iBAClC;aACJ,CAAC;QACR,OAAO,+BAA+B,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IACnF,CAAC;IAED;;;;;;;OAOG;IACK,KAAK,CAAC,gBAAgB,CAAC,aAAqB;QAChD,MAAM,EAAE,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAC3B;YACI,UAAU,EAAE,8BAA8B;YAC1C,WAAW,EAAE,oBAAoB,aAAa,GAAG;YACjD,MAAM,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,cAAc,EAAE,cAAc,CAAC;YACtE,UAAU,EAAE,QAAQ;YACpB,WAAW,EAAE,IAAI;SACpB,EACD,IAAI,CAAC,kBAAkB,CAC1B,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAClB,sFAAsF;YACtF,uFAAuF;YACvF,+DAA+D;YAC/D,QAAQ,CACJ,0DAA0D,aAAa,IAAI;gBAC3E,6CAA6C,MAAM,CAAC,YAAY,EAAE,CACrE,CAAC;YACF,OAAO,EAAE,CAAC;QACd,CAAC;QACD,OAAO,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;IAChC,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA+BG;IACI,MAAM,CAAC,6BAA6B,CAAC,MAAqB,EAAE,IAA+B;QAC9F,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,IAAI,IAAI,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,EAAE,CAAC;YACxC,OAAO,IAAI,CAAC,CAAC,oEAAoE;QACrF,CAAC;QACD,oFAAoF;QACpF,0EAA0E;QAC1E,MAAM,UAAU,GAAG,SAAS,CAAC,QAAQ,EAAE,aAAa,EAAE,EAAE,CAAC;QACzD,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,MAAM,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QACjF,IAAI,CAAC,SAAS,EAAE,CAAC;YACb,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,MAAM,QAAQ,GAAG,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EAAE,IAAI,IAAI,MAAM,CAAC;QAChG,OAAO,CACH,SAAS,QAAQ,2EAA2E;YAC5F,iGAAiG;YACjG,oEAAoE;YACpE,qFAAqF,CACxF,CAAC;IACN,CAAC;IAED;;;;;;;;;;;;;;;;;OAiBG;IACI,MAAM,CAAC,wBAAwB,CAAC,KAAsB,EAAE,IAA8B;QACzF,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;YAClB,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,MAAM,SAAS,GAAa,EAAE,CAAC;QAC/B,IAAI,IAAI,CAAC,YAAY,KAAK,qBAAqB,CAAC,QAAQ;YAAE,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACnF,IAAI,IAAI,CAAC,YAAY,KAAK,qBAAqB,CAAC,QAAQ;YAAE,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACnF,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,OAAO,CACH,UAAU,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,0BAA0B,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG;YACxF,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,gBAAgB,2CAA2C;YAC1G,oCAAoC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,mBAAmB;YAC3F,uDAAuD,CAC1D,CAAC;IACN,CAAC;IAED;;;OAGG;IACI,MAAM,CAAC,eAAe,CAAC,KAAsB;QAChD,IAAI,KAAK,CAAC,qBAAqB,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,iBAAiB,CAAC;YAClG,OAAO,CACH,UAAU,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,QAAQ,MAAM,qDAAqD;gBACvG,yGAAyG;gBACzG,+GAA+G,CAClH,CAAC;QACN,CAAC;QAED,IAAI,KAAK,CAAC,wBAAwB,EAAE,CAAC;YACjC,OAAO,CACH,WAAW,KAAK,CAAC,MAAM,8EAA8E;gBACrG,sGAAsG;gBACtG,oGAAoG,CACvG,CAAC;QACN,CAAC;QAED,OAAO,IAAI,CAAC;IAChB,CAAC;IAED;;;;;;;;OAQG;IACH;;;;;;;;;;;;;;;;;;;OAmBG;IACI,MAAM,CAAC,uCAAuC,CAAC,MAAkB,EAAE,MAAqB;QAC3F,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,OAAO,IAAI,CAAC,CAAC,sEAAsE;QACvF,CAAC;QACD,IAAI,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;YAC/D,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,OAAO,CACH,0CAA0C,MAAM,CAAC,IAAI,kDAAkD;YACvG,oGAAoG;YACpG,kBAAkB,MAAM,CAAC,IAAI,mEAAmE;YAChG,mDAAmD,CACtD,CAAC;IACN,CAAC;IAEO,aAAa;QACjB,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC,CAAC,sEAAsE;QACvF,CAAC;QACD,MAAM,EAAE,GAAG,IAAI,CAAC,aAA6C,CAAC;QAC9D,KAAK,MAAM,MAAM,IAAI,EAAE,EAAE,QAAQ,IAAI,EAAE,EAAE,CAAC;YACtC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;YAC9E,IAAI,KAAK,EAAE,CAAC;gBACR,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;YAC5C,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;CACJ,CAAA;AAnVY,mCAAmC;IAD/C,aAAa,CAAC,UAAU,EAAE,8BAA8B,CAAC;GAC7C,mCAAmC,CAmV/C"}
+{"version":3,"file":"MJEntityFieldPermissionEntityServer.server.js","sourceRoot":"","sources":["../../src/custom/MJEntityFieldPermissionEntityServer.server.ts"],"names":[],"mappings":";;;;;;;AAAA,OAAO,EACH,UAAU,EACV,gBAAgB,EAKhB,qBAAqB,EAIrB,QAAQ,EACR,OAAO,EAEP,mBAAmB,EACnB,mBAAmB,GAEtB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACnE,OAAO,EAAE,6BAA6B,EAAE,MAAM,+BAA+B,CAAC;AAC9E,OAAO,EAAE,+BAA+B,EAAE,SAAS,EAAE,MAAM,2CAA2C,CAAC;AACvG,OAAO,EACH,uBAAuB,EACvB,0BAA0B,EAC1B,6BAA6B,EAC7B,8BAA8B,GACjC,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACH,8BAA8B,EAC9B,oBAAoB,EAEpB,mCAAmC,EACnC,mCAAmC,EACnC,aAAa,GAChB,MAAM,wBAAwB,CAAC;AAQhC,MAAM,kCAAkC,GACpC,qGAAqG;IACrG,wGAAwG;IACxG,+FAA+F,CAAC;AAEpG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEI,IAAM,mCAAmC,2CAAzC,MAAM,mCAAoC,SAAQ,6BAA6B;IAA/E;;QACH,qGAAqG;QAC7F,sBAAiB,GAAoC,IAAI,CAAC;IAwgBtE,CAAC;IAtgBmB,QAAQ;QACpB,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;QAEhC,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACpC,IAAI,MAAM,EAAE,CAAC;YACT,MAAM,yBAAyB,GAAG,qCAAmC,CAAC,uCAAuC,CACzG,MAAM,CAAC,MAAM,EACb,IAAI,CAAC,MAAM,CACd,CAAC;YACF,IAAI,yBAAyB,EAAE,CAAC;gBAC5B,MAAM,CAAC,MAAM,CAAC,IAAI,CACd,IAAI,mBAAmB,CAAC,QAAQ,EAAE,yBAAyB,EAAE,IAAI,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,CAAC,CACzG,CAAC;YACN,CAAC;QACL,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,EAAE,KAAK,CAAC;QAClC,IAAI,WAAW,EAAE,CAAC;YACd,MAAM,SAAS,GAAG,qCAAmC,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;YACnF,IAAI,SAAS,EAAE,CAAC;gBACZ,MAAM,CAAC,MAAM,CAAC,IAAI,CACd,IAAI,mBAAmB,CAAC,eAAe,EAAE,SAAS,EAAE,IAAI,CAAC,aAAa,EAAE,mBAAmB,CAAC,OAAO,CAAC,CACvG,CAAC;YACN,CAAC;YACD,MAAM,kBAAkB,GAAG,qCAAmC,CAAC,wBAAwB,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;YAC3G,IAAI,kBAAkB,EAAE,CAAC;gBACrB,MAAM,CAAC,MAAM,CAAC,IAAI,CACd,IAAI,mBAAmB,CAAC,eAAe,EAAE,kBAAkB,EAAE,IAAI,CAAC,aAAa,EAAE,mBAAmB,CAAC,OAAO,CAAC,CAChH,CAAC;YACN,CAAC;QACL,CAAC;QAED,MAAM,aAAa,GAAG,qCAAmC,CAAC,6BAA6B,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC3G,IAAI,aAAa,EAAE,CAAC;YAChB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,mBAAmB,CAAC,QAAQ,EAAE,aAAa,EAAE,IAAI,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC;QACnH,CAAC;QAED,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC;QAC9D,OAAO,MAAM,CAAC;IAClB,CAAC;IAED;;;;;;;;;;;;;;;;;;OAkBG;IACa,KAAK,CAAC,IAAI,CAAC,OAA2B;QAClD,IAAI,CAAC,wBAAwB,EAAE,CAAC;QAChC,IAAI,KAAK,GAAG,KAAK,CAAC;QAClB,IAAI,CAAC;YACD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,uBAAuB,EAAE,CAAC;YACvD,IAAI,SAAS,EAAE,CAAC;gBACZ,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAC1C,CAAC;YACD,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAClC,OAAO,KAAK,CAAC;QACjB,CAAC;gBAAS,CAAC;YACP,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;IACL,CAAC;IAED;;;OAGG;IACK,gBAAgB,CAAC,QAAiB;QACtC,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAC;QACvC,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;QAC9B,IAAI,CAAC,QAAQ,EAAE,CAAC;YACZ,mCAAmC,CAAC,OAAO,CAAC,CAAC;QACjD,CAAC;IACL,CAAC;IAED;;;OAGG;IACK,YAAY,CAAC,kBAA2B;QAC5C,MAAM,OAAO,GAAG,8BAA8B,CAAC,IAAI,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;QAC1F,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,IAAI,CAAC,iBAAiB,GAAG,mCAAmC,CAAC,IAAI,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;QAC5G,CAAC;QACD,OAAO,OAAO,CAAC;IACnB,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,uBAAuB;QACjC,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;QAC9B,MAAM,WAAW,GAAG,6BAA6B,CAAC,IAAI,CAAC,CAAC;QACxD,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;YAChC,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,IAAI,CAAC;YACD,MAAM,UAAU,GAAG,MAAM,oBAAoB,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;YACzE,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YACxD,MAAM,QAAQ,GAAG,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,KAAK,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,aAAa,CAAC,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;YACxI,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;YACjD,IAAI,YAAY,EAAE,CAAC;gBACf,OAAO,YAAY,CAAC;YACxB,CAAC;YACD,IAAI,WAAW,IAAI,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBACxD,OAAO,qCAAmC,CAAC,6BAA6B,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;YAC5G,CAAC;YACD,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,wBAAwB,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACjF,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,OAAO,qCAAmC,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC;QACtE,CAAC;IACL,CAAC;IAED,+FAA+F;IACvF,MAAM,CAAC,mBAAmB,CAAC,KAAc;QAC7C,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACtE,OAAO,mGAAmG,MAAM,EAAE,CAAC;IACvH,CAAC;IAED;;;;;;;;;;;OAWG;IACa,KAAK,CAAC,MAAM,CAAC,OAA6B;QACtD,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC;YACD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,yBAAyB,EAAE,CAAC;YACzD,IAAI,SAAS,EAAE,CAAC;gBACZ,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YAC5C,CAAC;YACD,OAAO,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACtC,OAAO,OAAO,CAAC;QACnB,CAAC;gBAAS,CAAC;YACP,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACnC,CAAC;IACL,CAAC;IAED,sFAAsF;IAC9E,KAAK,CAAC,yBAAyB;QACnC,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;QAC9B,IAAI,CAAC;YACD,MAAM,UAAU,GAAG,MAAM,oBAAoB,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;YACzE,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;YAClC,MAAM,QAAQ,GAAG,KAAK,KAAK,IAAI,IAAI,aAAa,CAAC,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;YAC3E,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;YACjD,OAAO,YAAY,IAAI,CAAC,MAAM,IAAI,CAAC,0BAA0B,CAAC,UAAU,CAAC,CAAC,CAAC;QAC/E,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,OAAO,qCAAmC,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC;QACtE,CAAC;IACL,CAAC;IAED,mHAAmH;IAC3G,wBAAwB;QAC5B,KAAK,MAAM,IAAI,IAAI,0BAA0B,EAAE,CAAC;YAC5C,MAAM,SAAS,GAAG,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YAC7D,IAAI,SAAS,IAAI,SAAS,KAAK,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACxC,IAAI,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC;YAC3B,CAAC;QACL,CAAC;IACL,CAAC;IAED;;;OAGG;IACK,MAAM,CAAC,OAAe,EAAE,IAAuB;QACnD,MAAM,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;QACtC,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC;QACvB,MAAM,CAAC,IAAI,GAAG,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;QAChF,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;QACzB,MAAM,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAC9B,MAAM,CAAC,OAAO,GAAG,IAAI,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAChC,OAAO,KAAK,CAAC;IACjB,CAAC;IAED;;;;;;;;;;;;;;;;;;OAkBG;IACK,KAAK,CAAC,wBAAwB,CAAC,UAA2B;QAC9D,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QAClC,IAAI,CAAC,KAAK,EAAE,CAAC;YACT,OAAO,kCAAkC,CAAC;QAC9C,CAAC;QACD,MAAM,KAAK,GAAG,CAAC,MAAqB,EAAE,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAC3E,MAAM,UAAU,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,aAAa,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;QACxE,MAAM,kBAAkB,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,UAAU,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QACtF,IAAI,kBAAkB,EAAE,CAAC;YACrB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;YACvF,IAAI,SAAS,EAAE,CAAC;gBACZ,OAAO,SAAS,CAAC;YACrB,CAAC;QACL,CAAC;QACD,IAAI,UAAU,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YACpC,OAAO,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,aAAa,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;QAC5E,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,mGAAmG;IAC3F,KAAK,CAAC,0BAA0B,CAAC,UAA2B;QAChE,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QAClC,IAAI,CAAC,KAAK,EAAE,CAAC;YACT,OAAO,kCAAkC,CAAC;QAC9C,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3C,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,OAAO,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,aAAa,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;IAC5E,CAAC;IAED;;;;;;;;OAQG;IACK,KAAK,CAAC,mBAAmB,CAAC,aAA4B,EAAE,cAAuB,EAAE,UAA2B;QAChH,MAAM,MAAM,GAAG,IAAI,CAAC,sBAAsB,CAAC,aAAa,CAAC,CAAC;QAC1D,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAiC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAC/F,MAAM,SAAS,GAAG,cAAc;YAC5B,CAAC,CAAC;gBACI,GAAG,MAAM;gBACT,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE;aACzH;YACH,CAAC,CAAC,MAAM,CAAC;QACb,OAAO,+BAA+B,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;IAC/F,CAAC;IAED;;;;OAIG;IACK,YAAY;QAChB,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACtD,MAAM,aAAa,GAAG,IAAI,CAAC,UAAU,CAAC,eAAe,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;QAC3E,IAAI,MAAM,KAAK,SAAS,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YACtD,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,aAAa,EAAE,CAAC;IAC5D,CAAC;IAED,gGAAgG;IACxF,UAAU,CAAC,SAAqC,EAAE,OAAsB;QAC5E,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC;YAChB,OAAO,OAAO,CAAC;QACnB,CAAC;QACD,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC;QAC3B,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;IACvE,CAAC;IAED;;;;;;;OAOG;IACK,KAAK,CAAC,gBAAgB,CAAC,aAAqB;QAChD,MAAM,EAAE,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAC3B;YACI,UAAU,EAAE,8BAA8B;YAC1C,WAAW,EAAE,oBAAoB,aAAa,GAAG;YACjD,MAAM,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,cAAc,EAAE,cAAc,CAAC;YACtE,UAAU,EAAE,QAAQ;YACpB,WAAW,EAAE,IAAI;SACpB,EACD,IAAI,CAAC,kBAAkB,CAC1B,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAClB,sFAAsF;YACtF,uFAAuF;YACvF,+DAA+D;YAC/D,QAAQ,CACJ,0DAA0D,aAAa,IAAI;gBAC3E,6CAA6C,MAAM,CAAC,YAAY,EAAE,CACrE,CAAC;YACF,OAAO,EAAE,CAAC;QACd,CAAC;QACD,OAAO,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;IAChC,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAiCG;IACI,MAAM,CAAC,6BAA6B,CAAC,MAAqB,EAAE,IAA+B,EAAE,gBAAkC;QAClI,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,IAAI,IAAI,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/C,OAAO,IAAI,CAAC,CAAC,oEAAoE;QACrF,CAAC;QACD,oFAAoF;QACpF,0FAA0F;QAC1F,iFAAiF;QACjF,MAAM,UAAU,GAAG,gBAAgB,IAAI,SAAS,CAAC,QAAQ,EAAE,aAAa,EAAE,EAAE,CAAC;QAC7E,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,MAAM,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QACjF,IAAI,CAAC,SAAS,EAAE,CAAC;YACb,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,MAAM,QAAQ,GAAG,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EAAE,IAAI,IAAI,MAAM,CAAC;QAChG,OAAO,CACH,SAAS,QAAQ,2EAA2E;YAC5F,iGAAiG;YACjG,oEAAoE;YACpE,qFAAqF,CACxF,CAAC;IACN,CAAC;IAED;;;;;;;;;;;;;;;;;OAiBG;IACI,MAAM,CAAC,wBAAwB,CAAC,KAAsB,EAAE,IAA8B;QACzF,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;YAClB,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,4FAA4F;QAC5F,MAAM,SAAS,GAAa,EAAE,CAAC;QAC/B,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,YAAY,EAAE,qBAAqB,CAAC,QAAQ,CAAC;YAAE,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1G,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,YAAY,EAAE,qBAAqB,CAAC,QAAQ,CAAC;YAAE,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1G,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,OAAO,CACH,UAAU,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,0BAA0B,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG;YACxF,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,gBAAgB,2CAA2C;YAC1G,oCAAoC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,mBAAmB;YAC3F,uDAAuD,CAC1D,CAAC;IACN,CAAC;IAED;;;OAGG;IACI,MAAM,CAAC,eAAe,CAAC,KAAsB;QAChD,IAAI,KAAK,CAAC,qBAAqB,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,iBAAiB,CAAC;YAClG,OAAO,CACH,UAAU,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,QAAQ,MAAM,qDAAqD;gBACvG,yGAAyG;gBACzG,+GAA+G,CAClH,CAAC;QACN,CAAC;QAED,IAAI,KAAK,CAAC,wBAAwB,EAAE,CAAC;YACjC,OAAO,CACH,WAAW,KAAK,CAAC,MAAM,8EAA8E;gBACrG,sGAAsG;gBACtG,oGAAoG,CACvG,CAAC;QACN,CAAC;QAED,OAAO,IAAI,CAAC;IAChB,CAAC;IAED;;;;;;;;;;;;;;;;;;;OAmBG;IACI,MAAM,CAAC,uCAAuC,CAAC,MAAkB,EAAE,MAAqB;QAC3F,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,OAAO,IAAI,CAAC,CAAC,sEAAsE;QACvF,CAAC;QACD,IAAI,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;YAC/D,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,OAAO,CACH,0CAA0C,MAAM,CAAC,IAAI,kDAAkD;YACvG,oGAAoG;YACpG,kBAAkB,MAAM,CAAC,IAAI,mEAAmE;YAChG,mDAAmD,CACtD,CAAC;IACN,CAAC;IAED;;;;;;;;OAQG;IACK,aAAa;QACjB,OAAO,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC3D,CAAC;IAED,wGAAwG;IAChG,sBAAsB,CAAC,aAA4B;QACvD,IAAI,CAAC,aAAa,EAAE,CAAC;YACjB,OAAO,IAAI,CAAC,CAAC,sEAAsE;QACvF,CAAC;QACD,MAAM,EAAE,GAAG,IAAI,CAAC,aAA6C,CAAC;QAC9D,KAAK,MAAM,MAAM,IAAI,EAAE,EAAE,QAAQ,IAAI,EAAE,EAAE,CAAC;YACtC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,aAAa,CAAC,CAAC,CAAC;YACzE,IAAI,KAAK,EAAE,CAAC;gBACR,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;YAC5C,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;CACJ,CAAA;AA1gBY,mCAAmC;IAD/C,aAAa,CAAC,UAAU,EAAE,8BAA8B,CAAC;GAC7C,mCAAmC,CA0gB/C"}

package/dist/custom/MJFileEntityServer.server.d.ts

@@ -0,0 +1,45 @@
+import { EntitySaveOptions, ValidationResult } from '@memberjunction/core';
+import { MJFileEntity } from '@memberjunction/core-entities';
+/**
+ * Server-side `MJ: Files` entity: once a row exists, WHERE its bytes live is server-owned.
+ *
+ * `ProviderID` and `ProviderKey` decide which storage provider (and so which account) and which object every
+ * file-ID route — `DownloadUrl`, `GetFileContents`, `CreateMediaAccessToken`, `DeleteFile`, the artifact download URL,
+ * the agent file handler — reads, signs or deletes. A client that could re-point an existing row could make a row other
+ * users trust (an attachment, an artifact's file) serve, or delete, a different object. So a save that changes either
+ * field on an existing row is refused, unless trusted server code that chose the new location itself sets
+ * {@link AllowStorageLocationChange} first — the same opt-in pattern `MJRubricEvaluationScoreEntityServer` uses for
+ * server-computed rows. A GraphQL save never sets it.
+ *
+ * **What this does not cover — a new row.** A client may still create a row with a `ProviderKey` of its choosing, and
+ * `Name` (the object key when `ProviderKey` is empty) is client-writable on every row. Refusing a client-supplied
+ * `ProviderKey` on create would break Explorer's direct-upload path, which registers the object it just uploaded through
+ * a client save, and would not stop aliasing anyway (`Name` is the fallback key). MJStorage's `UploadFile` sets the field
+ * from a package that cannot reach this class. The guarantee for a new row comes from the routes instead: each one
+ * resolves the row through the storage gate (`FileStorageEngine.ResolveFileObject`), which requires the caller's access
+ * to the account and refuses an object any other `MJ: Files` row tracks when the caller cannot read that row. Closing the
+ * create path needs a server-side registration mutation for the direct-upload flow — a follow-up.
+ */
+export declare class MJFileEntityServer extends MJFileEntity {
+    /**
+     * Set by trusted server code, before `Save()`, when it re-points an existing row to a storage location it chose
+     * itself. A client save leaves this false, so a change to `ProviderID` or `ProviderKey` on an existing row is refused.
+     */
+    AllowStorageLocationChange: boolean;
+    /** Adds the storage-location rule to the generated validation. */
+    Validate(): ValidationResult;
+    /**
+     * Applies the rule to a `ReplayOnly` save too: `ReplayOnly` skips `Validate()` but still writes, so without this the
+     * rule would be one save option away from off.
+     */
+    Save(options?: EntitySaveOptions): Promise<boolean>;
+    /** The location fields this save would change on an existing row without the trusted opt-in. */
+    private refusedLocationChanges;
+    /** Whether `field` holds a different value from the one loaded (`ProviderID` compared as a UUID). */
+    private locationFieldChanged;
+    /** Records a refused save on the result history (so `LatestResult.CompleteMessage` carries why) and returns false. */
+    private refuse;
+    /** The refusal for a client change to a storage-location field. */
+    private static locationChangeMessage;
+}
+//# sourceMappingURL=MJFileEntityServer.server.d.ts.map

package/dist/custom/MJFileEntityServer.server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"MJFileEntityServer.server.d.ts","sourceRoot":"","sources":["../../src/custom/MJFileEntityServer.server.ts"],"names":[],"mappings":"AAAA,OAAO,EAGH,iBAAiB,EAGjB,gBAAgB,EACnB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAK7D;;;;;;;;;;;;;;;;;;;GAmBG;AACH,qBACa,kBAAmB,SAAQ,YAAY;IAChD;;;OAGG;IACI,0BAA0B,UAAS;IAE1C,kEAAkE;IAClD,QAAQ,IAAI,gBAAgB;IAc5C;;;OAGG;IACmB,IAAI,CAAC,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC;IAQzE,gGAAgG;IAChG,OAAO,CAAC,sBAAsB;IAQ9B,qGAAqG;IACrG,OAAO,CAAC,oBAAoB;IAa5B,sHAAsH;IACtH,OAAO,CAAC,MAAM;IAWd,mEAAmE;IACnE,OAAO,CAAC,MAAM,CAAC,qBAAqB;CAGvC"}

package/dist/custom/MJFileEntityServer.server.js

@@ -0,0 +1,101 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var MJFileEntityServer_1;
+import { BaseEntity, BaseEntityResult, ValidationErrorInfo, ValidationErrorType, } from '@memberjunction/core';
+import { RegisterClass, UUIDsEqual } from '@memberjunction/global';
+import { MJFileEntity } from '@memberjunction/core-entities';
+/**
+ * Server-side `MJ: Files` entity: once a row exists, WHERE its bytes live is server-owned.
+ *
+ * `ProviderID` and `ProviderKey` decide which storage provider (and so which account) and which object every
+ * file-ID route — `DownloadUrl`, `GetFileContents`, `CreateMediaAccessToken`, `DeleteFile`, the artifact download URL,
+ * the agent file handler — reads, signs or deletes. A client that could re-point an existing row could make a row other
+ * users trust (an attachment, an artifact's file) serve, or delete, a different object. So a save that changes either
+ * field on an existing row is refused, unless trusted server code that chose the new location itself sets
+ * {@link AllowStorageLocationChange} first — the same opt-in pattern `MJRubricEvaluationScoreEntityServer` uses for
+ * server-computed rows. A GraphQL save never sets it.
+ *
+ * **What this does not cover — a new row.** A client may still create a row with a `ProviderKey` of its choosing, and
+ * `Name` (the object key when `ProviderKey` is empty) is client-writable on every row. Refusing a client-supplied
+ * `ProviderKey` on create would break Explorer's direct-upload path, which registers the object it just uploaded through
+ * a client save, and would not stop aliasing anyway (`Name` is the fallback key). MJStorage's `UploadFile` sets the field
+ * from a package that cannot reach this class. The guarantee for a new row comes from the routes instead: each one
+ * resolves the row through the storage gate (`FileStorageEngine.ResolveFileObject`), which requires the caller's access
+ * to the account and refuses an object any other `MJ: Files` row tracks when the caller cannot read that row. Closing the
+ * create path needs a server-side registration mutation for the direct-upload flow — a follow-up.
+ */
+let MJFileEntityServer = MJFileEntityServer_1 = class MJFileEntityServer extends MJFileEntity {
+    constructor() {
+        super(...arguments);
+        /**
+         * Set by trusted server code, before `Save()`, when it re-points an existing row to a storage location it chose
+         * itself. A client save leaves this false, so a change to `ProviderID` or `ProviderKey` on an existing row is refused.
+         */
+        this.AllowStorageLocationChange = false;
+    }
+    /** Adds the storage-location rule to the generated validation. */
+    Validate() {
+        const result = super.Validate();
+        for (const field of this.refusedLocationChanges()) {
+            result.Errors.push(new ValidationErrorInfo(field, MJFileEntityServer_1.locationChangeMessage(field), this.GetFieldByName(field)?.Value, ValidationErrorType.Failure));
+        }
+        result.Success = result.Success && result.Errors.length === 0;
+        return result;
+    }
+    /**
+     * Applies the rule to a `ReplayOnly` save too: `ReplayOnly` skips `Validate()` but still writes, so without this the
+     * rule would be one save option away from off.
+     */
+    async Save(options) {
+        const refused = options?.ReplayOnly ? this.refusedLocationChanges() : [];
+        if (refused.length > 0) {
+            return this.refuse(MJFileEntityServer_1.locationChangeMessage(refused[0]));
+        }
+        return super.Save(options);
+    }
+    /** The location fields this save would change on an existing row without the trusted opt-in. */
+    refusedLocationChanges() {
+        if (!this.IsSaved || this.AllowStorageLocationChange) {
+            return [];
+        }
+        const fields = ['ProviderID', 'ProviderKey'];
+        return fields.filter(field => this.locationFieldChanged(field));
+    }
+    /** Whether `field` holds a different value from the one loaded (`ProviderID` compared as a UUID). */
+    locationFieldChanged(field) {
+        const info = this.GetFieldByName(field);
+        if (!info?.Dirty) {
+            return false;
+        }
+        const before = info.OldValue;
+        const after = info.Value;
+        if (field === 'ProviderID') {
+            return !(before && after ? UUIDsEqual(before, after) : before === after);
+        }
+        return (before ?? null) !== (after ?? null);
+    }
+    /** Records a refused save on the result history (so `LatestResult.CompleteMessage` carries why) and returns false. */
+    refuse(message) {
+        const result = new BaseEntityResult();
+        result.Success = false;
+        result.Type = 'update';
+        result.Message = message;
+        result.StartedAt = new Date();
+        result.EndedAt = new Date();
+        this.RegisterResultHistoryEntry(result);
+        return false;
+    }
+    /** The refusal for a client change to a storage-location field. */
+    static locationChangeMessage(field) {
+        return `${field} cannot be changed on an existing file: where a file's bytes live is set by the server when the file is stored.`;
+    }
+};
+MJFileEntityServer = MJFileEntityServer_1 = __decorate([
+    RegisterClass(BaseEntity, 'MJ: Files')
+], MJFileEntityServer);
+export { MJFileEntityServer };
+//# sourceMappingURL=MJFileEntityServer.server.js.map

package/dist/custom/MJFileEntityServer.server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MJFileEntityServer.server.js","sourceRoot":"","sources":["../../src/custom/MJFileEntityServer.server.ts"],"names":[],"mappings":";;;;;;;AAAA,OAAO,EACH,UAAU,EACV,gBAAgB,EAEhB,mBAAmB,EACnB,mBAAmB,GAEtB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACnE,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAK7D;;;;;;;;;;;;;;;;;;;GAmBG;AAEI,IAAM,kBAAkB,0BAAxB,MAAM,kBAAmB,SAAQ,YAAY;IAA7C;;QACH;;;WAGG;QACI,+BAA0B,GAAG,KAAK,CAAC;IAoE9C,CAAC;IAlEG,kEAAkE;IAClD,QAAQ;QACpB,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;QAChC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,sBAAsB,EAAE,EAAE,CAAC;YAChD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,mBAAmB,CACtC,KAAK,EACL,oBAAkB,CAAC,qBAAqB,CAAC,KAAK,CAAC,EAC/C,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,KAAK,EACjC,mBAAmB,CAAC,OAAO,CAC9B,CAAC,CAAC;QACP,CAAC;QACD,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC;QAC9D,OAAO,MAAM,CAAC;IAClB,CAAC;IAED;;;OAGG;IACa,KAAK,CAAC,IAAI,CAAC,OAA2B;QAClD,MAAM,OAAO,GAAG,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,sBAAsB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,OAAO,IAAI,CAAC,MAAM,CAAC,oBAAkB,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7E,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IAED,gGAAgG;IACxF,sBAAsB;QAC1B,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,0BAA0B,EAAE,CAAC;YACnD,OAAO,EAAE,CAAC;QACd,CAAC;QACD,MAAM,MAAM,GAA2B,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;QACrE,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC,CAAC;IACpE,CAAC;IAED,qGAAqG;IAC7F,oBAAoB,CAAC,KAA2B;QACpD,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;YACf,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,QAAqC,CAAC;QAC1D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAkC,CAAC;QACtD,IAAI,KAAK,KAAK,YAAY,EAAE,CAAC;YACzB,OAAO,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC;QAC7E,CAAC;QACD,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC;IAChD,CAAC;IAED,sHAAsH;IAC9G,MAAM,CAAC,OAAe;QAC1B,MAAM,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;QACtC,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC;QACvB,MAAM,CAAC,IAAI,GAAG,QAAQ,CAAC;QACvB,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;QACzB,MAAM,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAC9B,MAAM,CAAC,OAAO,GAAG,IAAI,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC;QACxC,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,mEAAmE;IAC3D,MAAM,CAAC,qBAAqB,CAAC,KAA2B;QAC5D,OAAO,GAAG,KAAK,iHAAiH,CAAC;IACrI,CAAC;CACJ,CAAA;AAzEY,kBAAkB;IAD9B,aAAa,CAAC,UAAU,EAAE,WAAW,CAAC;GAC1B,kBAAkB,CAyE9B"}

package/dist/custom/MJQueryEntityServer.server.d.ts

@@ -29,6 +29,14 @@ export declare class MJQueryEntityServer extends MJQueryEntityExtended {
     /** Clears the stored vector (both forms) and the model it was computed with. */
     private clearEmbedding;
     Save(options?: EntitySaveOptions): Promise<boolean>;
+    /**
+     * Stores the fingerprint of the definition just approved: this row's SQL, template flag and
+     * external source, with its dialect and parameter rows read back from the database. Until this
+     * write lands the approval is not current, so a failure here fails closed.
+     */
+    private stampApprovalFingerprintAsync;
+    /** This query's dialect and parameter rows as stored, bypassing every cache. */
+    private loadDefinitionRowsAsync;
     Delete(options?: EntitySaveOptions): Promise<boolean>;
     /**
      * Returns the database platform of the connected database.
@@ -67,11 +75,15 @@ export declare class MJQueryEntityServer extends MJQueryEntityExtended {
      * when a dialect variant matching the current platform is saved — this handles
      * the timing issue where the parent Query is saved before its QuerySQL children
      * exist in the cache.
+     *
+     * @param skipAIEnrichment Skip the LLM enrichment stage, as `SkipEntityAIActions` does for Save.
      */
-    RerunExtraction(): Promise<void>;
+    RerunExtraction(skipAIEnrichment?: boolean): Promise<void>;
     /**
      * Runs the extraction pipeline and saves the UsesTemplate flag.
      * On error, sets UsesTemplate=false and attempts to save so the query remains usable.
+     *
+     * @param skipAIEnrichment Skip the LLM enrichment stage (the save asked to skip AI actions).
      */
     private extractAndSyncDataAsync;
     /**

package/dist/custom/MJQueryEntityServer.server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"MJQueryEntityServer.server.d.ts","sourceRoot":"","sources":["../../src/custom/MJQueryEntityServer.server.ts"],"names":[],"mappings":"AAAA,OAAO,EAEH,iBAAiB,EAGjB,qBAAqB,EAExB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAoB,qBAAqB,EAAmC,MAAM,+BAA+B,CAAC;AAazH;;;;GAIG;AACH,qBACa,mBAAoB,SAAQ,qBAAqB;IAC1D;;;yEAGqE;IAC9D,cAAc,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAI5C;;OAEG;cACsB,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAI5F;;;;;;;;;OASG;cACa,0BAA0B,IAAI,OAAO,CAAC,IAAI,CAAC;IA2B3D,gFAAgF;IAChF,OAAO,CAAC,cAAc;IAQP,IAAI,CAAC,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC;IAyCnD,MAAM,CAAC,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC;IAgBpE;;;OAGG;IACH,OAAO,KAAK,eAAe,GAE1B;IAED;;;;;;;;;;OAUG;IACH,OAAO,CAAC,oBAAoB;IAmB5B;;;;;;;;OAQG;IACH,OAAO,CAAC,4BAA4B;IAgBpC;;;OAGG;IACH,OAAO,CAAC,gBAAgB;IAcxB;;;;;OAKG;IACU,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC;IAI7C;;;OAGG;YACW,uBAAuB;IAsBrC;;OAEG;YACW,sBAAsB;IAmBpC;;;OAGG;YACW,wBAAwB;IAiCtC;;OAEG;YACW,sBAAsB;IA4BpC;;OAEG;YACW,oBAAoB;IA4BlC;;OAEG;YACW,6BAA6B;CAgB9C"}
+{"version":3,"file":"MJQueryEntityServer.server.d.ts","sourceRoot":"","sources":["../../src/custom/MJQueryEntityServer.server.ts"],"names":[],"mappings":"AAAA,OAAO,EAEH,iBAAiB,EAGjB,qBAAqB,EAExB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAIH,qBAAqB,EAIxB,MAAM,+BAA+B,CAAC;AAcvC;;;;GAIG;AACH,qBACa,mBAAoB,SAAQ,qBAAqB;IAC1D;;;yEAGqE;IAC9D,cAAc,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAI5C;;OAEG;cACsB,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAI5F;;;;;;;;;OASG;cACa,0BAA0B,IAAI,OAAO,CAAC,IAAI,CAAC;IA2B3D,gFAAgF;IAChF,OAAO,CAAC,cAAc;IAQP,IAAI,CAAC,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC;IAuDlE;;;;OAIG;YACW,6BAA6B;IAW3C,gFAAgF;YAClE,uBAAuB;IActB,MAAM,CAAC,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC;IAgBpE;;;OAGG;IACH,OAAO,KAAK,eAAe,GAE1B;IAED;;;;;;;;;;OAUG;IACH,OAAO,CAAC,oBAAoB;IAmB5B;;;;;;;;OAQG;IACH,OAAO,CAAC,4BAA4B;IAgBpC;;;OAGG;IACH,OAAO,CAAC,gBAAgB;IAexB;;;;;;;OAOG;IACU,eAAe,CAAC,gBAAgB,UAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IAIrE;;;;;OAKG;YACW,uBAAuB;IAsBrC;;OAEG;YACW,sBAAsB;IAmBpC;;;OAGG;YACW,wBAAwB;IAiCtC;;OAEG;YACW,sBAAsB;IA4BpC;;OAEG;YACW,oBAAoB;IA4BlC;;OAEG;YACW,6BAA6B;CAgB9C"}