@memberjunction/core-entities-server 6.2.0-edge.4 → 6.2.0-edge.6

package/dist/custom/MJVectorIndexEntityServer.server.js

@@ -10,7 +10,13 @@ import { RegisterClass, MJGlobal } from "@memberjunction/global";
 import { MJVectorIndexEntity } from "@memberjunction/core-entities";
 import { VectorDBBase } from "@memberjunction/ai-vectordb";
 import { GetAIAPIKey } from "@memberjunction/ai";
+import { AIEmbeddingRunner } from "@memberjunction/ai-prompts";
 import { AIEngineBase } from "@memberjunction/ai-engine-base";
+/** The distance metrics a provider index can be created with. */
+const VALID_METRICS = ['cosine', 'euclidean', 'dotproduct'];
+/** Raised by {@link MJVectorIndexEntityServer.withTimeout}, so a hung provider is told apart from one that refused. */
+class ProvisionTimeoutError extends Error {
+}
 /**
  * Server-side VectorIndex entity that syncs with the vector database provider.
  * On create: calls vectorDB.CreateIndex() to provision the index in the provider (e.g., Pinecone).
@@ -18,21 +24,30 @@ import { AIEngineBase } from "@memberjunction/ai-engine-base";
  *
  * Provisioning is DETACHED from the save that triggers it: the save returns once the metadata row is
  * written, and the provider call runs afterwards (see {@link Save}). That call is bounded by
- * {@link CREATE_INDEX_TIMEOUT_MS}: past it the hook stops waiting, logs, and skips the metadata
- * write-back. The provider call itself is abandoned, not cancelled (there is no cancellation handle),
- * so the bound limits how long this record's provisioning stays open, not the provider's work.
+ * {@link CREATE_INDEX_TIMEOUT_MS}: past it the hook stops waiting and records `timed-out`. The provider
+ * call itself is abandoned, not cancelled (there is no cancellation handle), so the bound limits how
+ * long this record's provisioning stays open, not the provider's work.
  * Pinecone's createIndex returns as soon as the request is accepted (we never pass waitUntilReady),
  * so the bound only ever trips on a hung connection, not on a slow index build.
+ *
+ * Whatever the outcome, it is written onto the row's `ProviderConfig` as a {@link VectorIndexProvisionState}.
  */
 let MJVectorIndexEntityServer = class MJVectorIndexEntityServer extends MJVectorIndexEntity {
     static { MJVectorIndexEntityServer_1 = this; }
     /** Upper bound on one provider CreateIndex call. */
     static { this.CREATE_INDEX_TIMEOUT_MS = 60_000; }
+    /** Upper bound on the one embedding call that learns a model's width (see resolveDimensions). */
+    static { this.DIMENSION_PROBE_TIMEOUT_MS = 30_000; }
+    /** Width used only when the record has none and the probe cannot answer (OpenAI text-embedding-3-small). */
+    static { this.DEFAULT_DIMENSIONS = 1536; }
+    /** The one string embedded to learn a model's width; its content is irrelevant, only the vector's length is read. */
+    static { this.DIMENSION_PROBE_TEXT = 'dimension probe'; }
     /**
      * After saving, if this is a new record, create the index in the provider.
      * The provider call is deliberately NOT awaited: the client only needs the metadata row, and the
      * request that triggered the save (an "Auto" index from the UI, or the Config page) must not wait
-     * on the provider. Failures are logged; the record keeps its metadata row either way.
+     * on the provider. Save() never throws over provisioning; the outcome is recorded on the row's
+     * `ProviderConfig` instead (see {@link createIndexInProvider}).
      */
     async Save(options) {
         const isNew = this.IsSaved === false;
@@ -76,13 +91,74 @@ let MJVectorIndexEntityServer = class MJVectorIndexEntityServer extends MJVector
         return sanitized;
     }
     /**
-     * Create the index in the vector database provider.
+     * The detached half of {@link Save}: provision, then write the outcome onto the row.
+     *
+     * Before this, a provider that refused (`success: false`), threw, or never answered reached only
+     * the server log, and the committed row looked exactly like one with an index behind it. The
+     * row's `ProviderConfig` now says which of the {@link VectorIndexProvisionState}s it is in.
+     *
+     * Keep this name: the integration suite's content-vectorization fixture stubs it by name to keep
+     * the provider out of the run.
      */
     async createIndexInProvider() {
+        let outcome;
+        try {
+            outcome = await this.provisionIndexInProvider();
+        }
+        catch (error) {
+            const reason = error instanceof Error ? error.message : String(error);
+            // A driver that throws rather than returning `success: false` is the same verdict; a call
+            // that outlived the bound is not, because the provider may still finish it.
+            outcome = { state: error instanceof ProvisionTimeoutError ? 'timed-out' : 'failed', reason };
+        }
+        await this.recordProvisionState(outcome);
+        switch (outcome.state) {
+            case 'failed':
+                LogError(`Vector index "${this.Name}" was NOT created in the vector database provider: ` +
+                    `${outcome.reason ?? 'the provider reported a failure with no message'}. ` +
+                    `Recorded provisionState "failed" on the record; delete it and recreate it once the provider is reachable.`);
+                break;
+            case 'timed-out':
+                LogError(`Vector index "${this.Name}": ${outcome.reason ?? 'the provider did not answer in time'}. ` +
+                    `Recorded provisionState "timed-out" on the record.`);
+                break;
+            case 'unprovisioned':
+            case 'not-applicable':
+            case 'adopted':
+                LogStatus(`Vector index "${this.Name}": provisionState "${outcome.state}" (${outcome.reason ?? 'no detail'})`);
+                break;
+        }
+    }
+    /**
+     * Create the index in the vector database provider and report what happened.
+     *
+     * Returns rather than logs, so {@link createIndexInProvider} records every outcome the same way.
+     * Throws only when the driver throws or the call times out; the caller classifies both.
+     */
+    async provisionIndexInProvider() {
+        // A row created with ExternalID already set addresses an index that exists on the provider
+        // (an Open App's shipped index, or one made outside MJ). Creating one from Name instead would
+        // leave an empty index behind and point the row at it, away from the vectors it names.
+        const adoptedIndex = this.ExternalID?.trim();
+        if (adoptedIndex) {
+            return {
+                state: 'adopted',
+                reason: `ExternalID "${adoptedIndex}" names an existing provider index; nothing was created`,
+            };
+        }
         const vectorDB = await this.getVectorDBInstance();
         if (!vectorDB) {
-            LogError(`Cannot create index: no VectorDB instance for database ${this.VectorDatabaseID}`);
-            return;
+            // getVectorDBInstance() has already logged the specific reason.
+            return {
+                state: 'unprovisioned',
+                reason: `No vector DB driver instance could be built for VectorDatabaseID ${this.VectorDatabaseID} in this process`,
+            };
+        }
+        if (vectorDB.ManagesIndexes === false) {
+            return {
+                state: 'not-applicable',
+                reason: 'This vector database driver owns no index objects; this record is the whole index definition',
+            };
         }
         // Sanitize the index name for the provider (e.g., Pinecone requires lowercase, no spaces)
         const sanitizedName = this.sanitizeIndexName(this.Name);
@@ -91,8 +167,8 @@ let MJVectorIndexEntityServer = class MJVectorIndexEntityServer extends MJVector
         }
         const params = {
             id: sanitizedName,
-            dimension: this.resolveDimensions(),
-            metric: 'cosine',
+            dimension: await this.resolveDimensions(),
+            metric: this.resolveMetric(),
             additionalParams: {
                 serverless: {
                     cloud: 'aws',
@@ -101,29 +177,33 @@ let MJVectorIndexEntityServer = class MJVectorIndexEntityServer extends MJVector
             }
         };
         LogStatus(`Creating index "${sanitizedName}" in vector DB provider...`);
-        try {
-            const result = await MJVectorIndexEntityServer_1.withTimeout(vectorDB.CreateIndex(params), MJVectorIndexEntityServer_1.CREATE_INDEX_TIMEOUT_MS, `CreateIndex("${sanitizedName}")`);
-            if (result.success) {
-                LogStatus(`Index "${sanitizedName}" created successfully in provider`);
-                await this.saveProviderMetadata(result.data, params, sanitizedName);
-            }
-            else {
-                LogError(`Provider returned error creating index "${sanitizedName}": ${result.message}`);
-            }
-        }
-        catch (error) {
-            LogError(`Exception while creating index "${sanitizedName}" in vector DB provider`, undefined, error);
+        const result = await MJVectorIndexEntityServer_1.withTimeout(vectorDB.CreateIndex(params), MJVectorIndexEntityServer_1.CREATE_INDEX_TIMEOUT_MS, `CreateIndex("${sanitizedName}")`);
+        if (!result.success) {
+            return { state: 'failed', reason: result.message || 'the provider reported a failure with no message' };
         }
+        LogStatus(`Index "${sanitizedName}" created successfully in provider`);
+        await this.saveProviderMetadata(result.data, params, sanitizedName);
+        return { state: 'provisioned' };
     }
     /**
      * Delete the index from the vector database provider.
      */
     async deleteIndexFromProvider() {
+        if (this.readProvisionState() === 'adopted') {
+            // MJ never created this index, and other rows or apps may still use it.
+            LogStatus(`Vector index "${this.Name}" adopted an existing provider index; leaving it in place`);
+            return;
+        }
         const vectorDB = await this.getVectorDBInstance();
         if (!vectorDB) {
             LogError(`Cannot delete index: no VectorDB instance for database ${this.VectorDatabaseID}`);
             return;
         }
+        if (vectorDB.ManagesIndexes === false) {
+            // Nothing was ever provisioned, so there is nothing to remove. Asking anyway just
+            // produces an "unsupported" error log on every delete.
+            return;
+        }
         // Same rule every read path uses to address the index on its provider (ExternalID, else Name).
         // An index provisioned through Save() above always has ExternalID set to its sanitized name.
         const providerIndexName = AIEngineBase.Instance.GetProviderIndexName(this);
@@ -184,15 +264,82 @@ let MJVectorIndexEntityServer = class MJVectorIndexEntityServer extends MJVector
      * Resolve the embedding dimensions to create the provider index at.
      *
      * Prefers this index's own `Dimensions` column, which is where the operator states it and what the
-     * embedding call already honors. Falling straight through to 1536 ignored that column entirely, so
-     * an index for any other model was created at the wrong width — harmless with providers that don't
-     * enforce it, and fatal with ones that do: a colocated SQL Server index is a `VECTOR(n)` column, and
-     * inserting 384-dimension vectors into a `VECTOR(1536)` is rejected outright.
+     * embedding call already honors. When the record carries none (every index created from the UI:
+     * the Config page's Create Index and the "Vector Index: Auto" path both leave it null, and
+     * `MJ: AI Models` has no width column to copy from), the width is learned by embedding one short
+     * string with the index's own model and reading the vector's length. Every provider fixes the width
+     * at create time, so guessing it wrong gives an index the sync can never write to: a 384-dimension
+     * model's vectors are rejected by a `VECTOR(1536)` column or a 1536-wide Pinecone index outright.
      *
-     * 1536 (OpenAI text-embedding-3-small) remains the fallback for records that never set it.
+     * 1536 (OpenAI text-embedding-3-small) remains the fallback only when the probe cannot run or
+     * fails, and the failure is logged so the width can be set by hand. A wrong fallback does not go
+     * unnoticed: the vectorize pipeline compares every returned vector against the index's width and
+     * refuses the batch before upserting it.
+     */
+    async resolveDimensions() {
+        if (this.Dimensions) {
+            return this.Dimensions;
+        }
+        const probed = await this.probeModelDimensions();
+        if (probed === null) {
+            LogError(`Vector index "${this.Name}": could not learn the embedding width; creating the provider index at the ${MJVectorIndexEntityServer_1.DEFAULT_DIMENSIONS} fallback. Set Dimensions on the record if the model's width differs.`);
+            return MJVectorIndexEntityServer_1.DEFAULT_DIMENSIONS;
+        }
+        return probed;
+    }
+    /**
+     * Embed one short string with this index's embedding model and return the vector's length, or null
+     * when there is no model, no user context, or the call fails. `ModelID` is pinned so the answer
+     * comes from the model the index is for; the run row is skipped since this is not a real workload.
      */
-    resolveDimensions() {
-        return this.Dimensions ?? 1536;
+    async probeModelDimensions() {
+        if (!this.EmbeddingModelID) {
+            LogError(`Vector index "${this.Name}" has no EmbeddingModelID; cannot probe its embedding width`);
+            return null;
+        }
+        if (!this.ContextCurrentUser) {
+            LogError(`Vector index "${this.Name}" has no context user; cannot probe its embedding width`);
+            return null;
+        }
+        try {
+            const result = await MJVectorIndexEntityServer_1.withTimeout(new AIEmbeddingRunner().RunEmbedding({
+                Texts: [MJVectorIndexEntityServer_1.DIMENSION_PROBE_TEXT],
+                ModelID: this.EmbeddingModelID,
+                ContextUser: this.ContextCurrentUser,
+                // The entity's data provider is the same object as its metadata provider; this is
+                // the cast BaseEntity itself uses wherever it needs the metadata view of it.
+                Provider: this.ProviderToUse,
+                SkipRunRecord: true,
+                Description: `Vector index "${this.Name}" dimension probe`,
+            }), MJVectorIndexEntityServer_1.DIMENSION_PROBE_TIMEOUT_MS, `Dimension probe for vector index "${this.Name}"`);
+            const width = result.Success ? result.Vectors?.[0]?.length ?? 0 : 0;
+            if (width <= 0) {
+                LogError(`Dimension probe for vector index "${this.Name}" returned no vector: ${result.ErrorMessage ?? 'empty result'}`);
+                return null;
+            }
+            LogStatus(`Vector index "${this.Name}": embedding width ${width} learned from model ${result.ModelName ?? this.EmbeddingModelID}`);
+            return width;
+        }
+        catch (error) {
+            LogError(`Dimension probe for vector index "${this.Name}" failed`, undefined, error);
+            return null;
+        }
+    }
+    /**
+     * Resolve the distance metric to request the provider index be created with.
+     *
+     * `Metric` on this row is what the operator asked for; `cosine` is the fallback. This used to be
+     * hardcoded to `cosine` at the call site, which made the `Metric` write-back a tautology: the
+     * column simply echoed a constant this file had chosen, so it could never disagree with the
+     * provider and could never tell you the provider had done something else.
+     */
+    resolveMetric() {
+        const stated = this.Metric?.trim().toLowerCase();
+        const match = VALID_METRICS.find((m) => m === stated);
+        if (stated && !match) {
+            LogError(`Vector index "${this.Name}" declares an unrecognized Metric "${this.Metric}"; requesting "cosine" instead. Valid values: ${VALID_METRICS.join(', ')}.`);
+        }
+        return match ?? 'cosine';
     }
     /**
      * Resolve `work` or reject after `timeoutMs`, whichever comes first. The timer is cleared when the
@@ -202,46 +349,142 @@ let MJVectorIndexEntityServer = class MJVectorIndexEntityServer extends MJVector
     static withTimeout(work, timeoutMs, label) {
         return new Promise((resolve, reject) => {
             const timer = setTimeout(() => {
-                reject(new Error(`${label} timed out after ${timeoutMs}ms; the provider may still finish creating the index, ` +
-                    `but its metadata was not written back to the record`));
+                reject(new ProvisionTimeoutError(`${label} timed out after ${timeoutMs}ms; the provider may still finish on its side, ` +
+                    `but nothing it returns will be written back to the record`));
             }, timeoutMs);
             Promise.resolve(work).then((value) => { clearTimeout(timer); resolve(value); }, (error) => { clearTimeout(timer); reject(error); });
         });
     }
     /**
      * After provider creates the index, save the returned metadata back to our record.
-     * Stores ExternalID, Dimensions, Metric, and full provider config as JSON.
+     * Stores ExternalID, Dimensions, Metric, the provisioning state, and provider config as JSON.
+     *
+     * **Provider truth beats our request.** `Dimensions` and `Metric` are read off the provider's
+     * own response when it reports them, and only fall back to what we asked for. A provider is
+     * free to round, clamp or ignore a requested dimension, and the whole point of these two
+     * columns is to be checkable against the embeddings we later generate; a column that can
+     * only ever repeat our own request is not a check.
+     *
+     * A failed write-back is logged rather than recorded: the index exists, and the only way to
+     * record anything on the row is the same save that just failed.
      */
     async saveProviderMetadata(providerResult, params, sanitizedName) {
         try {
-            // Save what we know from our params + whatever the provider returned
             this.ExternalID = sanitizedName; // The sanitized name used in the provider
-            this.Dimensions = params.dimension;
-            this.Metric = params.metric;
-            // Store full provider response + our spec as JSON config
-            const config = {};
+            this.Dimensions = this.readProviderDimension(providerResult) ?? params.dimension;
+            this.Metric = this.readProviderMetric(providerResult) ?? params.metric;
+            // Store full provider response + our spec as JSON config while preserving existing keys (e.g. namespaceField)
+            const extra = {};
             if (params.additionalParams) {
-                config['spec'] = params.additionalParams;
+                extra['spec'] = params.additionalParams;
             }
             if (providerResult && typeof providerResult === 'object') {
                 // Extract useful provider metadata (host, status, etc.)
                 if ('host' in providerResult)
-                    config['host'] = providerResult['host'];
+                    extra['host'] = providerResult['host'];
                 if ('status' in providerResult)
-                    config['status'] = providerResult['status'];
+                    extra['status'] = providerResult['status'];
             }
-            this.ProviderConfig = JSON.stringify(config);
+            this.ProviderConfig = this.buildProviderConfig({ state: 'provisioned' }, extra);
             const saved = await super.Save();
             if (saved) {
                 LogStatus(`Saved provider metadata for index "${this.Name}"`);
             }
             else {
-                LogError(`Failed to save provider metadata for index "${this.Name}": ${this.LatestResult?.CompleteMessage}`);
+                LogError(this.writeBackFailureMessage(sanitizedName, this.LatestResult?.CompleteMessage ?? 'the record save returned false with no message'));
             }
         }
         catch (error) {
-            LogError(`Error saving provider metadata for index "${this.Name}"`, undefined, error);
+            LogError(this.writeBackFailureMessage(sanitizedName, error instanceof Error ? error.message : String(error)), undefined, error);
+        }
+    }
+    writeBackFailureMessage(sanitizedName, reason) {
+        return `Vector index "${this.Name}" WAS created in the vector database provider as "${sanitizedName}", but its ` +
+            `provider metadata could not be written back to the record: ${reason}. The index exists and the record ` +
+            `does not yet address it; set ExternalID to "${sanitizedName}" to reconcile them.`;
+    }
+    /** The provider's own dimension, when it reported a usable one. */
+    readProviderDimension(providerResult) {
+        const raw = providerResult?.['dimension'];
+        const value = typeof raw === 'number' ? raw : typeof raw === 'string' ? Number(raw) : NaN;
+        return Number.isFinite(value) && value > 0 ? value : null;
+    }
+    /** The provider's own metric, when it reported a recognized one. */
+    readProviderMetric(providerResult) {
+        const raw = providerResult?.['metric'];
+        if (typeof raw !== 'string') {
+            return null;
+        }
+        const normalized = raw.trim().toLowerCase();
+        return VALID_METRICS.find((m) => m === normalized) ?? null;
+    }
+    /**
+     * Write the provisioning outcome onto the row, so a row that has no index behind it says so
+     * instead of looking identical to one that does.
+     *
+     * Best-effort by construction: this runs after the caller's save has already returned, and a
+     * second failure here must not replace the original diagnosis with a save error.
+     */
+    async recordProvisionState(outcome) {
+        if (outcome.state === 'provisioned') {
+            return; // saveProviderMetadata already stamped it, along with the provider's values
+        }
+        try {
+            this.ProviderConfig = this.buildProviderConfig(outcome);
+            const saved = await super.Save();
+            if (!saved) {
+                LogError(`Could not record provisioning state "${outcome.state}" on vector index "${this.Name}": ${this.LatestResult?.CompleteMessage ?? 'save returned false'}`);
+            }
+        }
+        catch (error) {
+            LogError(`Could not record provisioning state "${outcome.state}" on vector index "${this.Name}"`, undefined, error);
+        }
+    }
+    /** The `provisionState` recorded on `ProviderConfig`, or undefined when there is none or it cannot be read. */
+    readProvisionState() {
+        if (!this.ProviderConfig) {
+            return undefined;
+        }
+        try {
+            const parsed = JSON.parse(this.ProviderConfig);
+            if (parsed && typeof parsed === 'object' && !Array.isArray(parsed)) {
+                const state = parsed['provisionState'];
+                return typeof state === 'string' ? state : undefined;
+            }
+        }
+        catch {
+            // An unreadable ProviderConfig carries no provisioning state.
+        }
+        return undefined;
+    }
+    /**
+     * Merge the provisioning outcome into the existing `ProviderConfig` JSON bag, preserving any
+     * driver-specific keys already there (e.g. Pinecone's `namespaceField`).
+     */
+    buildProviderConfig(outcome, extra) {
+        let existing = {};
+        if (this.ProviderConfig) {
+            try {
+                const parsed = JSON.parse(this.ProviderConfig);
+                if (parsed && typeof parsed === 'object' && !Array.isArray(parsed)) {
+                    existing = parsed;
+                }
+            }
+            catch {
+                // A ProviderConfig we cannot parse is not something to preserve silently.
+                LogError(`Vector index "${this.Name}" has an unparseable ProviderConfig; it is being replaced.`);
+            }
+        }
+        const merged = { ...existing, ...(extra ?? {}) };
+        merged['provisionState'] = outcome.state;
+        merged['provisionCheckedAt'] = new Date().toISOString();
+        if (outcome.reason) {
+            merged['provisionMessage'] = outcome.reason;
+        }
+        else {
+            delete merged['provisionMessage'];
         }
+        return JSON.stringify(merged);
     }
 };
 MJVectorIndexEntityServer = MJVectorIndexEntityServer_1 = __decorate([

package/dist/custom/MJVectorIndexEntityServer.server.js.map

@@ -1 +1 @@
-{"version":3,"file":"MJVectorIndexEntityServer.server.js","sourceRoot":"","sources":["../../src/custom/MJVectorIndexEntityServer.server.ts"],"names":[],"mappings":";;;;;;;AAAA,OAAO,EAAE,UAAU,EAAqB,QAAQ,EAAE,SAAS,EAAY,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAC7G,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,mBAAmB,EAA0B,MAAM,+BAA+B,CAAC;AAC5F,OAAO,EAAE,YAAY,EAA2C,MAAM,6BAA6B,CAAC;AACpG,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAE9D;;;;;;;;;;;;GAYG;AAEI,IAAM,yBAAyB,GAA/B,MAAM,yBAA0B,SAAQ,mBAAmB;;IAC9D,oDAAoD;aAC7B,4BAAuB,GAAG,MAAM,AAAT,CAAU;IAExD;;;;;OAKG;IACa,KAAK,CAAC,IAAI,CAAC,OAA2B;QAClD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC;QACrC,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAE7C,IAAI,UAAU,IAAI,KAAK,EAAE,CAAC;YACtB,IAAI,CAAC,qBAAqB,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;gBACzC,QAAQ,CAAC,2BAA2B,IAAI,CAAC,IAAI,yBAAyB,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;YAC9F,CAAC,CAAC,CAAC;QACP,CAAC;QAED,OAAO,UAAU,CAAC;IACtB,CAAC;IAED;;OAEG;IACa,KAAK,CAAC,MAAM;QACxB,oFAAoF;QACpF,MAAM,IAAI,CAAC,uBAAuB,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YACjD,QAAQ,CAAC,2BAA2B,IAAI,CAAC,IAAI,6DAA6D,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;QAClI,CAAC,CAAC,CAAC;QAEH,OAAO,KAAK,CAAC,MAAM,EAAE,CAAC;IAC1B,CAAC;IAED;;;;OAIG;IACK,iBAAiB,CAAC,IAAY;QAClC,iGAAiG;QACjG,IAAI,SAAS,GAAG,IAAI;aACf,WAAW,EAAE;aACb,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC;aACvB,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC;aAC1B,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAO,4BAA4B;aACtD,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAK,gCAAgC;QAEhE,IAAI,SAAS,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YACxB,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC7D,CAAC;QAED,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,eAAe,IAAI,kGAAkG,CAAC,CAAC;QAC3I,CAAC;QAED,OAAO,SAAS,CAAC;IACrB,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,qBAAqB;QAC/B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAClD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACZ,QAAQ,CAAC,0DAA0D,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC;YAC5F,OAAO;QACX,CAAC;QAED,0FAA0F;QAC1F,MAAM,aAAa,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxD,IAAI,aAAa,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;YAC9B,SAAS,CAAC,8BAA8B,IAAI,CAAC,IAAI,SAAS,aAAa,wCAAwC,CAAC,CAAC;QACrH,CAAC;QAED,MAAM,MAAM,GAAsB;YAC9B,EAAE,EAAE,aAAa;YACjB,SAAS,EAAE,IAAI,CAAC,iBAAiB,EAAE;YACnC,MAAM,EAAE,QAAgC;YACxC,gBAAgB,EAAE;gBACd,UAAU,EAAE;oBACR,KAAK,EAAE,KAAK;oBACZ,MAAM,EAAE,WAAW;iBACtB;aACJ;SACJ,CAAC;QAEF,SAAS,CAAC,mBAAmB,aAAa,4BAA4B,CAAC,CAAC;QACxE,IAAI,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,2BAAyB,CAAC,WAAW,CACtD,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,EAC5B,2BAAyB,CAAC,uBAAuB,EACjD,gBAAgB,aAAa,IAAI,CACpC,CAAC;YACF,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACjB,SAAS,CAAC,UAAU,aAAa,oCAAoC,CAAC,CAAC;gBACvE,MAAM,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;YACxE,CAAC;iBAAM,CAAC;gBACJ,QAAQ,CAAC,2CAA2C,aAAa,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;YAC7F,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,QAAQ,CAAC,mCAAmC,aAAa,yBAAyB,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;QAC1G,CAAC;IACL,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,uBAAuB;QACjC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAClD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACZ,QAAQ,CAAC,0DAA0D,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC;YAC5F,OAAO;QACX,CAAC;QAED,+FAA+F;QAC/F,6FAA6F;QAC7F,MAAM,iBAAiB,GAAG,YAAY,CAAC,QAAQ,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;QAC3E,SAAS,CAAC,mBAAmB,iBAAiB,8BAA8B,CAAC,CAAC;QAC9E,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,EAAE,EAAE,EAAE,iBAAiB,EAAE,CAAC,CAAC;QACrE,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,SAAS,CAAC,UAAU,iBAAiB,yBAAyB,CAAC,CAAC;QACpE,CAAC;aAAM,CAAC;YACJ,QAAQ,CAAC,2CAA2C,iBAAiB,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QACjG,CAAC;IACL,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,mBAAmB;QAC7B,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACzB,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,MAAM,EAAE,GAAG,IAAI,OAAO,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAAyB;YACpD,UAAU,EAAE,sBAAsB;YAClC,WAAW,EAAE,OAAO,IAAI,CAAC,gBAAgB,GAAG;YAC5C,UAAU,EAAE,eAAe;SAC9B,EAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAE5B,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjD,QAAQ,CAAC,0BAA0B,IAAI,CAAC,gBAAgB,YAAY,CAAC,CAAC;YACtE,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACnC,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC;QACnC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACZ,QAAQ,CAAC,mBAAmB,QAAQ,CAAC,IAAI,8BAA8B,CAAC,CAAC;YACzE,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,4FAA4F;QAC5F,sFAAsF;QACtF,4FAA4F;QAC5F,4FAA4F;QAC5F,gEAAgE;QAChE,4FAA4F;QAC5F,mFAAmF;QACnF,MAAM,MAAM,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,cAAc,CAC1D,YAAY,EAAE,QAAQ,EAAE,MAAM,IAAI,WAAW,CAChD,CAAC;QACF,IAAI,CAAC,QAAQ,EAAE,CAAC;YACZ,QAAQ,CAAC,4CAA4C,QAAQ,GAAG,CAAC,CAAC;YAClE,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,QAAQ,CAAC,oBAAoB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAClD,IAAI,CAAC,QAAQ,CAAC,sBAAsB,IAAI,QAAQ,CAAC,cAAc,IAAI,CAAC,MAAM,EAAE,CAAC;YACzE,QAAQ,CAAC,4CAA4C,QAAQ,GAAG,CAAC,CAAC;YAClE,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,OAAO,QAAQ,CAAC;IACpB,CAAC;IAED;;;;;;;;;;OAUG;IACK,iBAAiB;QACrB,OAAO,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC;IACnC,CAAC;IAED;;;;OAIG;IACK,MAAM,CAAC,WAAW,CAAI,IAAoB,EAAE,SAAiB,EAAE,KAAa;QAChF,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACtC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC1B,MAAM,CAAC,IAAI,KAAK,CACZ,GAAG,KAAK,oBAAoB,SAAS,wDAAwD;oBAC7F,qDAAqD,CACxD,CAAC,CAAC;YACP,CAAC,EAAE,SAAS,CAAC,CAAC;YACd,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CACtB,CAAC,KAAK,EAAE,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EACnD,CAAC,KAAK,EAAE,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CACrD,CAAC;QACN,CAAC,CAAC,CAAC;IACP,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,oBAAoB,CAC9B,cAAmD,EACnD,MAAyB,EACzB,aAAqB;QAErB,IAAI,CAAC;YACD,qEAAqE;YACrE,IAAI,CAAC,UAAU,GAAG,aAAa,CAAC,CAAC,0CAA0C;YAC3E,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,SAAS,CAAC;YACnC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;YAE5B,yDAAyD;YACzD,MAAM,MAAM,GAA4B,EAAE,CAAC;YAC3C,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;gBAC1B,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,gBAAgB,CAAC;YAC7C,CAAC;YACD,IAAI,cAAc,IAAI,OAAO,cAAc,KAAK,QAAQ,EAAE,CAAC;gBACvD,wDAAwD;gBACxD,IAAI,MAAM,IAAI,cAAc;oBAAE,MAAM,CAAC,MAAM,CAAC,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;gBACtE,IAAI,QAAQ,IAAI,cAAc;oBAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;YAChF,CAAC;YACD,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YAE7C,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;YACjC,IAAI,KAAK,EAAE,CAAC;gBACR,SAAS,CAAC,sCAAsC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC;YAClE,CAAC;iBAAM,CAAC;gBACJ,QAAQ,CAAC,+CAA+C,IAAI,CAAC,IAAI,MAAM,IAAI,CAAC,YAAY,EAAE,eAAe,EAAE,CAAC,CAAC;YACjH,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,QAAQ,CAAC,6CAA6C,IAAI,CAAC,IAAI,GAAG,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;QAC1F,CAAC;IACL,CAAC;;AA3PQ,yBAAyB;IADrC,aAAa,CAAC,UAAU,EAAE,oBAAoB,CAAC;GACnC,yBAAyB,CA4PrC"}
+{"version":3,"file":"MJVectorIndexEntityServer.server.js","sourceRoot":"","sources":["../../src/custom/MJVectorIndexEntityServer.server.ts"],"names":[],"mappings":";;;;;;;AAAA,OAAO,EAAE,UAAU,EAAwC,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AACtH,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,mBAAmB,EAA0B,MAAM,+BAA+B,CAAC;AAC5F,OAAO,EAAE,YAAY,EAA2C,MAAM,6BAA6B,CAAC;AACpG,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAC/D,OAAO,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAE9D,iEAAiE;AACjE,MAAM,aAAa,GAAwC,CAAC,QAAQ,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;AAgCjG,uHAAuH;AACvH,MAAM,qBAAsB,SAAQ,KAAK;CAAG;AAE5C;;;;;;;;;;;;;;GAcG;AAEI,IAAM,yBAAyB,GAA/B,MAAM,yBAA0B,SAAQ,mBAAmB;;IAC9D,oDAAoD;aAC7B,4BAAuB,GAAG,MAAM,AAAT,CAAU;IACxD,iGAAiG;aAC1E,+BAA0B,GAAG,MAAM,AAAT,CAAU;IAC3D,4GAA4G;aACrF,uBAAkB,GAAG,IAAI,AAAP,CAAQ;IACjD,qHAAqH;aAC7F,yBAAoB,GAAG,iBAAiB,AAApB,CAAqB;IAEjE;;;;;;OAMG;IACa,KAAK,CAAC,IAAI,CAAC,OAA2B;QAClD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC;QACrC,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAE7C,IAAI,UAAU,IAAI,KAAK,EAAE,CAAC;YACtB,IAAI,CAAC,qBAAqB,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;gBACzC,QAAQ,CAAC,2BAA2B,IAAI,CAAC,IAAI,yBAAyB,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;YAC9F,CAAC,CAAC,CAAC;QACP,CAAC;QAED,OAAO,UAAU,CAAC;IACtB,CAAC;IAED;;OAEG;IACa,KAAK,CAAC,MAAM;QACxB,oFAAoF;QACpF,MAAM,IAAI,CAAC,uBAAuB,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YACjD,QAAQ,CAAC,2BAA2B,IAAI,CAAC,IAAI,6DAA6D,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;QAClI,CAAC,CAAC,CAAC;QAEH,OAAO,KAAK,CAAC,MAAM,EAAE,CAAC;IAC1B,CAAC;IAED;;;;OAIG;IACK,iBAAiB,CAAC,IAAY;QAClC,iGAAiG;QACjG,IAAI,SAAS,GAAG,IAAI;aACf,WAAW,EAAE;aACb,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC;aACvB,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC;aAC1B,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAO,4BAA4B;aACtD,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAK,gCAAgC;QAEhE,IAAI,SAAS,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YACxB,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC7D,CAAC;QAED,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,eAAe,IAAI,kGAAkG,CAAC,CAAC;QAC3I,CAAC;QAED,OAAO,SAAS,CAAC;IACrB,CAAC;IAED;;;;;;;;;OASG;IACK,KAAK,CAAC,qBAAqB;QAC/B,IAAI,OAAwB,CAAC;QAC7B,IAAI,CAAC;YACD,OAAO,GAAG,MAAM,IAAI,CAAC,wBAAwB,EAAE,CAAC;QACpD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACtE,0FAA0F;YAC1F,4EAA4E;YAC5E,OAAO,GAAG,EAAE,KAAK,EAAE,KAAK,YAAY,qBAAqB,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;QACjG,CAAC;QAED,MAAM,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;QAEzC,QAAQ,OAAO,CAAC,KAAK,EAAE,CAAC;YACpB,KAAK,QAAQ;gBACT,QAAQ,CACJ,iBAAiB,IAAI,CAAC,IAAI,qDAAqD;oBAC/E,GAAG,OAAO,CAAC,MAAM,IAAI,iDAAiD,IAAI;oBAC1E,2GAA2G,CAC9G,CAAC;gBACF,MAAM;YACV,KAAK,WAAW;gBACZ,QAAQ,CACJ,iBAAiB,IAAI,CAAC,IAAI,MAAM,OAAO,CAAC,MAAM,IAAI,qCAAqC,IAAI;oBAC3F,oDAAoD,CACvD,CAAC;gBACF,MAAM;YACV,KAAK,eAAe,CAAC;YACrB,KAAK,gBAAgB,CAAC;YACtB,KAAK,SAAS;gBACV,SAAS,CAAC,iBAAiB,IAAI,CAAC,IAAI,sBAAsB,OAAO,CAAC,KAAK,MAAM,OAAO,CAAC,MAAM,IAAI,WAAW,GAAG,CAAC,CAAC;gBAC/G,MAAM;QACd,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,wBAAwB;QAClC,2FAA2F;QAC3F,8FAA8F;QAC9F,uFAAuF;QACvF,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC;QAC7C,IAAI,YAAY,EAAE,CAAC;YACf,OAAO;gBACH,KAAK,EAAE,SAAS;gBAChB,MAAM,EAAE,eAAe,YAAY,yDAAyD;aAC/F,CAAC;QACN,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAClD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACZ,gEAAgE;YAChE,OAAO;gBACH,KAAK,EAAE,eAAe;gBACtB,MAAM,EAAE,oEAAoE,IAAI,CAAC,gBAAgB,kBAAkB;aACtH,CAAC;QACN,CAAC;QAED,IAAI,QAAQ,CAAC,cAAc,KAAK,KAAK,EAAE,CAAC;YACpC,OAAO;gBACH,KAAK,EAAE,gBAAgB;gBACvB,MAAM,EAAE,8FAA8F;aACzG,CAAC;QACN,CAAC;QAED,0FAA0F;QAC1F,MAAM,aAAa,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxD,IAAI,aAAa,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;YAC9B,SAAS,CAAC,8BAA8B,IAAI,CAAC,IAAI,SAAS,aAAa,wCAAwC,CAAC,CAAC;QACrH,CAAC;QAED,MAAM,MAAM,GAAsB;YAC9B,EAAE,EAAE,aAAa;YACjB,SAAS,EAAE,MAAM,IAAI,CAAC,iBAAiB,EAAE;YACzC,MAAM,EAAE,IAAI,CAAC,aAAa,EAAE;YAC5B,gBAAgB,EAAE;gBACd,UAAU,EAAE;oBACR,KAAK,EAAE,KAAK;oBACZ,MAAM,EAAE,WAAW;iBACtB;aACJ;SACJ,CAAC;QAEF,SAAS,CAAC,mBAAmB,aAAa,4BAA4B,CAAC,CAAC;QACxE,MAAM,MAAM,GAAG,MAAM,2BAAyB,CAAC,WAAW,CACtD,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,EAC5B,2BAAyB,CAAC,uBAAuB,EACjD,gBAAgB,aAAa,IAAI,CACpC,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAClB,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,IAAI,iDAAiD,EAAE,CAAC;QAC5G,CAAC;QAED,SAAS,CAAC,UAAU,aAAa,oCAAoC,CAAC,CAAC;QACvE,MAAM,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;QACpE,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;IACpC,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,uBAAuB;QACjC,IAAI,IAAI,CAAC,kBAAkB,EAAE,KAAK,SAAS,EAAE,CAAC;YAC1C,wEAAwE;YACxE,SAAS,CAAC,iBAAiB,IAAI,CAAC,IAAI,2DAA2D,CAAC,CAAC;YACjG,OAAO;QACX,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAClD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACZ,QAAQ,CAAC,0DAA0D,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC;YAC5F,OAAO;QACX,CAAC;QAED,IAAI,QAAQ,CAAC,cAAc,KAAK,KAAK,EAAE,CAAC;YACpC,kFAAkF;YAClF,uDAAuD;YACvD,OAAO;QACX,CAAC;QAED,+FAA+F;QAC/F,6FAA6F;QAC7F,MAAM,iBAAiB,GAAG,YAAY,CAAC,QAAQ,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;QAC3E,SAAS,CAAC,mBAAmB,iBAAiB,8BAA8B,CAAC,CAAC;QAC9E,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,EAAE,EAAE,EAAE,iBAAiB,EAAE,CAAC,CAAC;QACrE,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,SAAS,CAAC,UAAU,iBAAiB,yBAAyB,CAAC,CAAC;QACpE,CAAC;aAAM,CAAC;YACJ,QAAQ,CAAC,2CAA2C,iBAAiB,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QACjG,CAAC;IACL,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,mBAAmB;QAC7B,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACzB,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,MAAM,EAAE,GAAG,IAAI,OAAO,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAAyB;YACpD,UAAU,EAAE,sBAAsB;YAClC,WAAW,EAAE,OAAO,IAAI,CAAC,gBAAgB,GAAG;YAC5C,UAAU,EAAE,eAAe;SAC9B,EAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAE5B,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjD,QAAQ,CAAC,0BAA0B,IAAI,CAAC,gBAAgB,YAAY,CAAC,CAAC;YACtE,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACnC,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC;QACnC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACZ,QAAQ,CAAC,mBAAmB,QAAQ,CAAC,IAAI,8BAA8B,CAAC,CAAC;YACzE,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,4FAA4F;QAC5F,sFAAsF;QACtF,4FAA4F;QAC5F,4FAA4F;QAC5F,gEAAgE;QAChE,4FAA4F;QAC5F,mFAAmF;QACnF,MAAM,MAAM,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,cAAc,CAC1D,YAAY,EAAE,QAAQ,EAAE,MAAM,IAAI,WAAW,CAChD,CAAC;QACF,IAAI,CAAC,QAAQ,EAAE,CAAC;YACZ,QAAQ,CAAC,4CAA4C,QAAQ,GAAG,CAAC,CAAC;YAClE,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,QAAQ,CAAC,oBAAoB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAClD,IAAI,CAAC,QAAQ,CAAC,sBAAsB,IAAI,QAAQ,CAAC,cAAc,IAAI,CAAC,MAAM,EAAE,CAAC;YACzE,QAAQ,CAAC,4CAA4C,QAAQ,GAAG,CAAC,CAAC;YAClE,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,OAAO,QAAQ,CAAC;IACpB,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACK,KAAK,CAAC,iBAAiB;QAC3B,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YAClB,OAAO,IAAI,CAAC,UAAU,CAAC;QAC3B,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,oBAAoB,EAAE,CAAC;QACjD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YAClB,QAAQ,CAAC,iBAAiB,IAAI,CAAC,IAAI,8EAA8E,2BAAyB,CAAC,kBAAkB,uEAAuE,CAAC,CAAC;YACtO,OAAO,2BAAyB,CAAC,kBAAkB,CAAC;QACxD,CAAC;QACD,OAAO,MAAM,CAAC;IAClB,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,oBAAoB;QAC9B,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACzB,QAAQ,CAAC,iBAAiB,IAAI,CAAC,IAAI,6DAA6D,CAAC,CAAC;YAClG,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC3B,QAAQ,CAAC,iBAAiB,IAAI,CAAC,IAAI,yDAAyD,CAAC,CAAC;YAC9F,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,IAAI,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,2BAAyB,CAAC,WAAW,CACtD,IAAI,iBAAiB,EAAE,CAAC,YAAY,CAAC;gBACjC,KAAK,EAAE,CAAC,2BAAyB,CAAC,oBAAoB,CAAC;gBACvD,OAAO,EAAE,IAAI,CAAC,gBAAgB;gBAC9B,WAAW,EAAE,IAAI,CAAC,kBAAkB;gBACpC,kFAAkF;gBAClF,6EAA6E;gBAC7E,QAAQ,EAAE,IAAI,CAAC,aAA6C;gBAC5D,aAAa,EAAE,IAAI;gBACnB,WAAW,EAAE,iBAAiB,IAAI,CAAC,IAAI,mBAAmB;aAC7D,CAAC,EACF,2BAAyB,CAAC,0BAA0B,EACpD,qCAAqC,IAAI,CAAC,IAAI,GAAG,CACpD,CAAC;YACF,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACpE,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;gBACb,QAAQ,CAAC,qCAAqC,IAAI,CAAC,IAAI,yBAAyB,MAAM,CAAC,YAAY,IAAI,cAAc,EAAE,CAAC,CAAC;gBACzH,OAAO,IAAI,CAAC;YAChB,CAAC;YACD,SAAS,CAAC,iBAAiB,IAAI,CAAC,IAAI,sBAAsB,KAAK,uBAAuB,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC;YACnI,OAAO,KAAK,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,QAAQ,CAAC,qCAAqC,IAAI,CAAC,IAAI,UAAU,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;YACrF,OAAO,IAAI,CAAC;QAChB,CAAC;IACL,CAAC;IAED;;;;;;;OAOG;IACK,aAAa;QACjB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACjD,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC;QACtD,IAAI,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;YACnB,QAAQ,CAAC,iBAAiB,IAAI,CAAC,IAAI,sCAAsC,IAAI,CAAC,MAAM,iDAAiD,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACtK,CAAC;QACD,OAAO,KAAK,IAAI,QAAQ,CAAC;IAC7B,CAAC;IAED;;;;OAIG;IACK,MAAM,CAAC,WAAW,CAAI,IAAoB,EAAE,SAAiB,EAAE,KAAa;QAChF,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACtC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC1B,MAAM,CAAC,IAAI,qBAAqB,CAC5B,GAAG,KAAK,oBAAoB,SAAS,iDAAiD;oBACtF,2DAA2D,CAC9D,CAAC,CAAC;YACP,CAAC,EAAE,SAAS,CAAC,CAAC;YACd,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CACtB,CAAC,KAAK,EAAE,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EACnD,CAAC,KAAK,EAAE,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CACrD,CAAC;QACN,CAAC,CAAC,CAAC;IACP,CAAC;IAED;;;;;;;;;;;;OAYG;IACK,KAAK,CAAC,oBAAoB,CAC9B,cAAmD,EACnD,MAAyB,EACzB,aAAqB;QAErB,IAAI,CAAC;YACD,IAAI,CAAC,UAAU,GAAG,aAAa,CAAC,CAAC,0CAA0C;YAC3E,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,qBAAqB,CAAC,cAAc,CAAC,IAAI,MAAM,CAAC,SAAS,CAAC;YACjF,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,kBAAkB,CAAC,cAAc,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC;YAEvE,8GAA8G;YAC9G,MAAM,KAAK,GAA4B,EAAE,CAAC;YAC1C,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;gBAC1B,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,gBAAgB,CAAC;YAC5C,CAAC;YACD,IAAI,cAAc,IAAI,OAAO,cAAc,KAAK,QAAQ,EAAE,CAAC;gBACvD,wDAAwD;gBACxD,IAAI,MAAM,IAAI,cAAc;oBAAE,KAAK,CAAC,MAAM,CAAC,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;gBACrE,IAAI,QAAQ,IAAI,cAAc;oBAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;YAC/E,CAAC;YACD,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,mBAAmB,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE,KAAK,CAAC,CAAC;YAEhF,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;YACjC,IAAI,KAAK,EAAE,CAAC;gBACR,SAAS,CAAC,sCAAsC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC;YAClE,CAAC;iBAAM,CAAC;gBACJ,QAAQ,CAAC,IAAI,CAAC,uBAAuB,CAAC,aAAa,EAAE,IAAI,CAAC,YAAY,EAAE,eAAe,IAAI,gDAAgD,CAAC,CAAC,CAAC;YAClJ,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,QAAQ,CAAC,IAAI,CAAC,uBAAuB,CAAC,aAAa,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;QACpI,CAAC;IACL,CAAC;IAEO,uBAAuB,CAAC,aAAqB,EAAE,MAAc;QACjE,OAAO,iBAAiB,IAAI,CAAC,IAAI,qDAAqD,aAAa,aAAa;YAC5G,8DAA8D,MAAM,oCAAoC;YACxG,+CAA+C,aAAa,sBAAsB,CAAC;IAC3F,CAAC;IAED,mEAAmE;IAC3D,qBAAqB,CAAC,cAAmD;QAC7E,MAAM,GAAG,GAAG,cAAc,EAAE,CAAC,WAAW,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QAC1F,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9D,CAAC;IAED,oEAAoE;IAC5D,kBAAkB,CAAC,cAAmD;QAC1E,MAAM,GAAG,GAAG,cAAc,EAAE,CAAC,QAAQ,CAAC,CAAC;QACvC,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC1B,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,MAAM,UAAU,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC5C,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,UAAU,CAAC,IAAI,IAAI,CAAC;IAC/D,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,oBAAoB,CAAC,OAAwB;QACvD,IAAI,OAAO,CAAC,KAAK,KAAK,aAAa,EAAE,CAAC;YAClC,OAAO,CAAC,4EAA4E;QACxF,CAAC;QACD,IAAI,CAAC;YACD,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;YACxD,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;YACjC,IAAI,CAAC,KAAK,EAAE,CAAC;gBACT,QAAQ,CAAC,wCAAwC,OAAO,CAAC,KAAK,sBAAsB,IAAI,CAAC,IAAI,MAAM,IAAI,CAAC,YAAY,EAAE,eAAe,IAAI,qBAAqB,EAAE,CAAC,CAAC;YACtK,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,QAAQ,CAAC,wCAAwC,OAAO,CAAC,KAAK,sBAAsB,IAAI,CAAC,IAAI,GAAG,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;QACxH,CAAC;IACL,CAAC;IAED,+GAA+G;IACvG,kBAAkB;QACtB,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YACvB,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,IAAI,CAAC;YACD,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YACxD,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBACjE,MAAM,KAAK,GAAI,MAAkC,CAAC,gBAAgB,CAAC,CAAC;gBACpE,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YACzD,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACL,8DAA8D;QAClE,CAAC;QACD,OAAO,SAAS,CAAC;IACrB,CAAC;IAED;;;OAGG;IACK,mBAAmB,CAAC,OAAwB,EAAE,KAA+B;QACjF,IAAI,QAAQ,GAA4B,EAAE,CAAC;QAC3C,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACtB,IAAI,CAAC;gBACD,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;gBACxD,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;oBACjE,QAAQ,GAAG,MAAiC,CAAC;gBACjD,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACL,0EAA0E;gBAC1E,QAAQ,CAAC,iBAAiB,IAAI,CAAC,IAAI,4DAA4D,CAAC,CAAC;YACrG,CAAC;QACL,CAAC;QACD,MAAM,MAAM,GAA4B,EAAE,GAAG,QAAQ,EAAE,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;QAC1E,MAAM,CAAC,gBAAgB,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC;QACzC,MAAM,CAAC,oBAAoB,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACxD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,CAAC,kBAAkB,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;QAChD,CAAC;aAAM,CAAC;YACJ,OAAO,MAAM,CAAC,kBAAkB,CAAC,CAAC;QACtC,CAAC;QACD,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;;AA1fQ,yBAAyB;IADrC,aAAa,CAAC,UAAU,EAAE,oBAAoB,CAAC;GACnC,yBAAyB,CA2frC"}

package/dist/custom/anonymousOwnershipKeyGuard.d.ts

@@ -0,0 +1,42 @@
+import { ValidationErrorInfo, type TransactionVariable } from '@memberjunction/core';
+/** The slice of a transaction group the guard reads: its variables. */
+export interface GuardedTransactionGroup {
+    Variables: ReadonlyArray<Pick<TransactionVariable, 'EntityObject' | 'Type' | 'FieldName'>>;
+}
+/**
+ * The slice of a BaseEntity the guard reads: whether the row exists yet, who is saving it, its fields, and the
+ * transaction group it is saved in (if any).
+ */
+export interface OwnershipKeyGuardTarget {
+    IsSaved: boolean;
+    ContextCurrentUser?: {
+        IsMagicLinkAnonymous?: boolean;
+    } | null;
+    GetFieldByName(name: string): {
+        Dirty: boolean;
+    } | null | undefined;
+    TransactionGroup?: GuardedTransactionGroup | null;
+}
+/**
+ * Whether a `'Use'` transaction variable will set one of `fieldNames` on `target` (case-insensitive). Such a variable
+ * sets its field at `Submit()`, after `Validate()` has passed, so a check that reads `Dirty` never sees the value
+ * that is written. `ExecuteTransactionGroup` registers every variable before any item is saved, which is what lets a
+ * `Validate()` see them. The same rule guards `MJ: Conversation Details` (`fieldSetByTransactionVariable`).
+ */
+export declare function IsSetByTransactionVariable(target: Pick<OwnershipKeyGuardTarget, 'TransactionGroup'>, fieldNames: readonly string[]): boolean;
+/**
+ * Refuses an anonymous visitor changing an anonymous-session ownership key on an EXISTING row (#4931).
+ *
+ * An anonymous visitor's realtime session is owned through `AIAgentSession.ConversationID` →
+ * `Conversation.ExternalID` (see `AuthorizeSessionAccess` in `@memberjunction/server`). Every anonymous
+ * visitor shares one Anonymous user, so under a role whose row-level security filters by `UserID` (the
+ * stock `UI` role) one visitor can load another visitor's row and would otherwise rewrite either key to
+ * its own identity and pass the ownership gate. The key is set once, when the row is created — by
+ * `SessionManager` for a server-created session and its conversation, and by the web widget for the
+ * conversation it creates — so an insert is allowed and only a change to a saved row is refused.
+ * Named callers are unaffected.
+ *
+ * @returns a refusal to push into the entity's validation result, or null when the save may proceed.
+ */
+export declare function CheckAnonymousOwnershipKeyChange(target: OwnershipKeyGuardTarget, fieldName: string): ValidationErrorInfo | null;
+//# sourceMappingURL=anonymousOwnershipKeyGuard.d.ts.map

package/dist/custom/anonymousOwnershipKeyGuard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"anonymousOwnershipKeyGuard.d.ts","sourceRoot":"","sources":["../../src/custom/anonymousOwnershipKeyGuard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAuB,KAAK,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAE1G,uEAAuE;AACvE,MAAM,WAAW,uBAAuB;IACpC,SAAS,EAAE,aAAa,CAAC,IAAI,CAAC,mBAAmB,EAAE,cAAc,GAAG,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC;CAC9F;AAED;;;GAGG;AACH,MAAM,WAAW,uBAAuB;IACpC,OAAO,EAAE,OAAO,CAAC;IACjB,kBAAkB,CAAC,EAAE;QAAE,oBAAoB,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,CAAC;IAC/D,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG;QAAE,KAAK,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,GAAG,SAAS,CAAC;IACpE,gBAAgB,CAAC,EAAE,uBAAuB,GAAG,IAAI,CAAC;CACrD;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,IAAI,CAAC,uBAAuB,EAAE,kBAAkB,CAAC,EAAE,UAAU,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAK5I;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,gCAAgC,CAAC,MAAM,EAAE,uBAAuB,EAAE,SAAS,EAAE,MAAM,GAAG,mBAAmB,GAAG,IAAI,CAc/H"}

package/dist/custom/anonymousOwnershipKeyGuard.js

@@ -0,0 +1,36 @@
+import { ValidationErrorInfo, ValidationErrorType } from '@memberjunction/core';
+/**
+ * Whether a `'Use'` transaction variable will set one of `fieldNames` on `target` (case-insensitive). Such a variable
+ * sets its field at `Submit()`, after `Validate()` has passed, so a check that reads `Dirty` never sees the value
+ * that is written. `ExecuteTransactionGroup` registers every variable before any item is saved, which is what lets a
+ * `Validate()` see them. The same rule guards `MJ: Conversation Details` (`fieldSetByTransactionVariable`).
+ */
+export function IsSetByTransactionVariable(target, fieldNames) {
+    const wanted = fieldNames.map((n) => n.toLowerCase());
+    return !!target.TransactionGroup?.Variables.some((v) => v.EntityObject === target && v.Type === 'Use' && wanted.includes(v.FieldName.trim().toLowerCase()));
+}
+/**
+ * Refuses an anonymous visitor changing an anonymous-session ownership key on an EXISTING row (#4931).
+ *
+ * An anonymous visitor's realtime session is owned through `AIAgentSession.ConversationID` →
+ * `Conversation.ExternalID` (see `AuthorizeSessionAccess` in `@memberjunction/server`). Every anonymous
+ * visitor shares one Anonymous user, so under a role whose row-level security filters by `UserID` (the
+ * stock `UI` role) one visitor can load another visitor's row and would otherwise rewrite either key to
+ * its own identity and pass the ownership gate. The key is set once, when the row is created — by
+ * `SessionManager` for a server-created session and its conversation, and by the web widget for the
+ * conversation it creates — so an insert is allowed and only a change to a saved row is refused.
+ * Named callers are unaffected.
+ *
+ * @returns a refusal to push into the entity's validation result, or null when the save may proceed.
+ */
+export function CheckAnonymousOwnershipKeyChange(target, fieldName) {
+    if (!target.IsSaved || !target.ContextCurrentUser?.IsMagicLinkAnonymous) {
+        return null;
+    }
+    // `ID` too: a variable that sets it re-points the update at another row, which then takes this row's key.
+    if (!target.GetFieldByName(fieldName)?.Dirty && !IsSetByTransactionVariable(target, [fieldName, 'ID'])) {
+        return null;
+    }
+    return new ValidationErrorInfo(fieldName, `${fieldName} identifies who owns an anonymous realtime session and cannot be changed by an anonymous visitor.`, null, ValidationErrorType.Failure);
+}
+//# sourceMappingURL=anonymousOwnershipKeyGuard.js.map

package/dist/custom/anonymousOwnershipKeyGuard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"anonymousOwnershipKeyGuard.js","sourceRoot":"","sources":["../../src/custom/anonymousOwnershipKeyGuard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAA4B,MAAM,sBAAsB,CAAC;AAkB1G;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CAAC,MAAyD,EAAE,UAA6B;IAC/H,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IACtD,OAAO,CAAC,CAAC,MAAM,CAAC,gBAAgB,EAAE,SAAS,CAAC,IAAI,CAC5C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAC5G,CAAC;AACN,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,gCAAgC,CAAC,MAA+B,EAAE,SAAiB;IAC/F,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,oBAAoB,EAAE,CAAC;QACtE,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,0GAA0G;IAC1G,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,KAAK,IAAI,CAAC,0BAA0B,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;QACrG,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,OAAO,IAAI,mBAAmB,CAC1B,SAAS,EACT,GAAG,SAAS,mGAAmG,EAC/G,IAAI,EACJ,mBAAmB,CAAC,OAAO,CAC9B,CAAC;AACN,CAAC"}

package/dist/custom/approvalStamp.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Server-side approval stamping for queries, user views, dashboards and components.
+ *
+ * Approving is a server act. A save that moves a record's status to Approved records the context
+ * user as the approver, the time, and — once the definition is stored — the fingerprint of that
+ * definition (`approvals.ts` in `@memberjunction/core-entities`). Values a client sends for those
+ * three columns are never stored. Who may approve is whoever may update the record today.
+ */
+import { BaseEntity, BaseEntityResult } from '@memberjunction/core';
+/** The approval columns every approvable entity carries. */
+export interface ApprovalColumns {
+    ApprovedByUserID: string | null;
+    ApprovedAt: Date | null;
+    ApprovedFingerprint: string | null;
+}
+/** The status column that carries the approval: `Status` on queries, `ApprovalStatus` on the others. */
+export type ApprovalStatusField = 'Status' | 'ApprovalStatus';
+/**
+ * Applies the approval rules to a record about to be saved, and says whether this save approves it.
+ *
+ * - The save approves when the status becomes Approved and the stored status is not Approved (or
+ *   the record is new). The approver is the context user and the time is now; the fingerprint is
+ *   cleared until the caller stamps it from the definition as stored.
+ * - On any other save the three columns keep their stored values (none on a create), so values a
+ *   client sent are ignored. Moving away from Approved clears nothing: the approval stays as history
+ *   and stops being current because the status is no longer Approved.
+ *
+ * The stored values are read from the database rather than the record's old values, which a client
+ * can supply on an update.
+ *
+ * @returns true when this save approves the record
+ * @throws when the stored row cannot be read, or when approving with no context user
+ */
+export declare function ApplyApprovalRulesAsync(record: BaseEntity & ApprovalColumns, statusField: ApprovalStatusField, newStatus: string | null): Promise<boolean>;
+/** A failed save result for a save refused before anything was written. */
+export declare function ApprovalRefusalResult(record: BaseEntity, error: unknown): BaseEntityResult;
+//# sourceMappingURL=approvalStamp.d.ts.map

package/dist/custom/approvalStamp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approvalStamp.d.ts","sourceRoot":"","sources":["../../src/custom/approvalStamp.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAEpE,4DAA4D;AAC5D,MAAM,WAAW,eAAe;IAC5B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,UAAU,EAAE,IAAI,GAAG,IAAI,CAAC;IACxB,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;CACtC;AAED,wGAAwG;AACxG,MAAM,MAAM,mBAAmB,GAAG,QAAQ,GAAG,gBAAgB,CAAC;AAS9D;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,uBAAuB,CACzC,MAAM,EAAE,UAAU,GAAG,eAAe,EACpC,WAAW,EAAE,mBAAmB,EAChC,SAAS,EAAE,MAAM,GAAG,IAAI,GACzB,OAAO,CAAC,OAAO,CAAC,CAgBlB;AAED,2EAA2E;AAC3E,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,GAAG,gBAAgB,CAQ1F"}