@memberjunction/core-entities-server 6.2.0-edge.5 → 6.2.0-edge.6

package/dist/custom/MJAIAgentSessionEntityServer.server.d.ts

@@ -1,14 +1,19 @@
-import { EntitySaveOptions, ValidationResult } from '@memberjunction/core';
+import { ValidationResult } from '@memberjunction/core';
 import { MJAIAgentSessionEntity } from '@memberjunction/core-entities';
 /**
  * Server-side `MJ: AI Agent Sessions` entity.
  *
  * It keeps the **server-authoritative keys** inside `Config` (the janitor's
- * `maxSessionDeadlineIso`, the `identityVerification` state) out of the session owner's reach, and it
- * keeps every save from writing back the **recording ledger's columns** (see {@link Save}). The
+ * `maxSessionDeadlineIso`, the `identityVerification` state) out of the session owner's reach, and keeps an
+ * anonymous visitor from re-pointing an existing session's `ConversationID` (the anonymous ownership key —
+ * see `CheckAnonymousOwnershipKeyChange`). The
  * owner can legitimately write the row — the `UI` and `Widget Guest` roles hold `CanUpdate` on their
  * own sessions — so the protection has to live at the entity, where the generated CRUD mutations,
- * `StartAgentSession(configJson)` and every other path converge on `Save()`.
+ * `StartAgentSession(configJson)` and every other path converge on `Save`.
+ *
+ * The recording ledger's columns need no subclass: they are protected in metadata
+ * (`AllowUpdateAPI=false`, #6010), so an entity save cannot write them and only the ledger's stored
+ * procedures do.
  *
  * See {@link FindProtectedSessionConfigChanges} for what is protected and why, and
  * `RunWithTrustedSessionConfigWrites` for how server code opts in.
@@ -18,28 +23,6 @@ import { MJAIAgentSessionEntity } from '@memberjunction/core-entities';
  * out of is not a guard.
  */
 export declare class MJAIAgentSessionEntityServer extends MJAIAgentSessionEntity {
-    /**
-     * Columns the client-direct recording ledger's stored procedures own (#5294). They change under a live
-     * session (shard inserts, terminal stamps, assembly claims and finishes) without going through this
-     * entity.
-     */
-    private static readonly recordingLedgerFields;
-    /**
-     * Saves without writing back the recording ledger's columns the caller did not change.
-     *
-     * An update writes every loaded column, so a session loaded before a ledger procedure ran and saved
-     * after it (a heartbeat, the close, a delegated tool call that rolls `Config` forward, a verification
-     * step) would put the stale recording state back: rewind the assembly version and status (a running
-     * assembly then loses its fence and a superseded one can win it) or clear `RecordingFileID` (a later
-     * re-assembly then has no file to reuse and writes silence over audio it can no longer recover).
-     * Marking those fields not-loaded makes the save leave them out of the update procedure, whose
-     * `ISNULL` keeps the stored values. A field the caller set explicitly (the legacy whole-call upload
-     * stamps `RecordingFileID`) is dirty and is still saved; an insert takes every column.
-     *
-     * `MarkNotLoaded` is the hydration paths' tool; this entity uses it for the same meaning — "this copy
-     * of the value is not the database's" — at the one place every server-side save converges.
-     */
-    Save(options?: EntitySaveOptions): Promise<boolean>;
     Validate(): ValidationResult;
     /** Returns a refusal when an untrusted save changes a protected `Config` key, else null. */
     private checkProtectedConfigKeys;

package/dist/custom/MJAIAgentSessionEntityServer.server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"MJAIAgentSessionEntityServer.server.d.ts","sourceRoot":"","sources":["../../src/custom/MJAIAgentSessionEntityServer.server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,iBAAiB,EAA4C,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAEjI,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AAGvE;;;;;;;;;;;;;;;;GAgBG;AACH,qBACa,4BAA6B,SAAQ,sBAAsB;IACpE;;;;OAIG;IACH,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,qBAAqB,CAG3C;IAEF;;;;;;;;;;;;;;OAcG;IACmB,IAAI,CAAC,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC;IAYzD,QAAQ,IAAI,gBAAgB;IAU5C,4FAA4F;IAC5F,OAAO,CAAC,wBAAwB;CAyBnC"}
+{"version":3,"file":"MJAIAgentSessionEntityServer.server.d.ts","sourceRoot":"","sources":["../../src/custom/MJAIAgentSessionEntityServer.server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAwD,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAE9G,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AAIvE;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,qBACa,4BAA6B,SAAQ,sBAAsB;IACpD,QAAQ,IAAI,gBAAgB;IAa5C,4FAA4F;IAC5F,OAAO,CAAC,wBAAwB;CAmCnC"}

package/dist/custom/MJAIAgentSessionEntityServer.server.js

@@ -4,20 +4,25 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
     else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
     return c > 3 && r && Object.defineProperty(target, key, r), r;
 };
-var MJAIAgentSessionEntityServer_1;
 import { BaseEntity, ValidationErrorInfo, ValidationErrorType } from '@memberjunction/core';
 import { RegisterClass } from '@memberjunction/global';
 import { MJAIAgentSessionEntity } from '@memberjunction/core-entities';
 import { FindProtectedSessionConfigChanges, IsTrustedSessionConfigWriteActive } from './sessionConfigGuard.js';
+import { CheckAnonymousOwnershipKeyChange, IsSetByTransactionVariable } from './anonymousOwnershipKeyGuard.js';
 /**
  * Server-side `MJ: AI Agent Sessions` entity.
  *
  * It keeps the **server-authoritative keys** inside `Config` (the janitor's
- * `maxSessionDeadlineIso`, the `identityVerification` state) out of the session owner's reach, and it
- * keeps every save from writing back the **recording ledger's columns** (see {@link Save}). The
+ * `maxSessionDeadlineIso`, the `identityVerification` state) out of the session owner's reach, and keeps an
+ * anonymous visitor from re-pointing an existing session's `ConversationID` (the anonymous ownership key —
+ * see `CheckAnonymousOwnershipKeyChange`). The
  * owner can legitimately write the row — the `UI` and `Widget Guest` roles hold `CanUpdate` on their
  * own sessions — so the protection has to live at the entity, where the generated CRUD mutations,
- * `StartAgentSession(configJson)` and every other path converge on `Save()`.
+ * `StartAgentSession(configJson)` and every other path converge on `Save`.
+ *
+ * The recording ledger's columns need no subclass: they are protected in metadata
+ * (`AllowUpdateAPI=false`, #6010), so an entity save cannot write them and only the ledger's stored
+ * procedures do.
  *
  * See {@link FindProtectedSessionConfigChanges} for what is protected and why, and
  * `RunWithTrustedSessionConfigWrites` for how server code opts in.
@@ -27,47 +32,14 @@ import { FindProtectedSessionConfigChanges, IsTrustedSessionConfigWriteActive }
  * out of is not a guard.
  */
 let MJAIAgentSessionEntityServer = class MJAIAgentSessionEntityServer extends MJAIAgentSessionEntity {
-    static { MJAIAgentSessionEntityServer_1 = this; }
-    /**
-     * Columns the client-direct recording ledger's stored procedures own (#5294). They change under a live
-     * session (shard inserts, terminal stamps, assembly claims and finishes) without going through this
-     * entity.
-     */
-    static { this.recordingLedgerFields = [
-        'RecordingStatus', 'RecordingExpectedShards', 'RecordingCapturedSamples', 'RecordingGaps',
-        'RecordingAssemblyVersion', 'RecordingFileID', 'RecordingMedia',
-    ]; }
-    /**
-     * Saves without writing back the recording ledger's columns the caller did not change.
-     *
-     * An update writes every loaded column, so a session loaded before a ledger procedure ran and saved
-     * after it (a heartbeat, the close, a delegated tool call that rolls `Config` forward, a verification
-     * step) would put the stale recording state back: rewind the assembly version and status (a running
-     * assembly then loses its fence and a superseded one can win it) or clear `RecordingFileID` (a later
-     * re-assembly then has no file to reuse and writes silence over audio it can no longer recover).
-     * Marking those fields not-loaded makes the save leave them out of the update procedure, whose
-     * `ISNULL` keeps the stored values. A field the caller set explicitly (the legacy whole-call upload
-     * stamps `RecordingFileID`) is dirty and is still saved; an insert takes every column.
-     *
-     * `MarkNotLoaded` is the hydration paths' tool; this entity uses it for the same meaning — "this copy
-     * of the value is not the database's" — at the one place every server-side save converges.
-     */
-    async Save(options) {
-        if (this.IsSaved) {
-            for (const name of MJAIAgentSessionEntityServer_1.recordingLedgerFields) {
-                const field = this.GetFieldByName(name);
-                if (field && !field.Dirty) {
-                    field.MarkNotLoaded();
-                }
-            }
-        }
-        return super.Save(options);
-    }
     Validate() {
         const result = super.Validate();
-        const violation = this.checkProtectedConfigKeys();
-        if (violation) {
-            result.Errors.push(violation);
+        const violations = [
+            this.checkProtectedConfigKeys(),
+            CheckAnonymousOwnershipKeyChange(this, 'ConversationID'),
+        ].filter((v) => v !== null);
+        if (violations.length > 0) {
+            result.Errors.push(...violations);
             result.Success = false;
         }
         return result;
@@ -81,6 +53,11 @@ let MJAIAgentSessionEntityServer = class MJAIAgentSessionEntityServer extends MJ
         if (!configField) {
             return null;
         }
+        // A 'Use' transaction variable writes its field at submit, after this comparison: on Config its value is unknown
+        // here, and on ID the update (and this Config) lands on another session than the one compared against.
+        if (IsSetByTransactionVariable(this, ['Config', 'ID'])) {
+            return new ValidationErrorInfo('Config', 'Config is server-managed in part, so neither it nor the row it is written to can come from a transaction variable.', null, ValidationErrorType.Failure);
+        }
         // A saved record is compared against what was loaded; a new record against nothing. For a
         // saved record whose Config was not touched there is nothing to compare.
         if (this.IsSaved && !configField.Dirty) {
@@ -94,7 +71,7 @@ let MJAIAgentSessionEntityServer = class MJAIAgentSessionEntityServer extends MJ
         return new ValidationErrorInfo('Config', `Config keys [${changed.join(', ')}] are server-managed and cannot be set by the session owner.`, null, ValidationErrorType.Failure);
     }
 };
-MJAIAgentSessionEntityServer = MJAIAgentSessionEntityServer_1 = __decorate([
+MJAIAgentSessionEntityServer = __decorate([
     RegisterClass(BaseEntity, 'MJ: AI Agent Sessions')
 ], MJAIAgentSessionEntityServer);
 export { MJAIAgentSessionEntityServer };

package/dist/custom/MJAIAgentSessionEntityServer.server.js.map

@@ -1 +1 @@
-{"version":3,"file":"MJAIAgentSessionEntityServer.server.js","sourceRoot":"","sources":["../../src/custom/MJAIAgentSessionEntityServer.server.ts"],"names":[],"mappings":";;;;;;;AAAA,OAAO,EAAE,UAAU,EAAqB,mBAAmB,EAAE,mBAAmB,EAAoB,MAAM,sBAAsB,CAAC;AACjI,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,EAAE,iCAAiC,EAAE,iCAAiC,EAAE,MAAM,sBAAsB,CAAC;AAE5G;;;;;;;;;;;;;;;;GAgBG;AAEI,IAAM,4BAA4B,GAAlC,MAAM,4BAA6B,SAAQ,sBAAsB;;IACpE;;;;OAIG;aACqB,0BAAqB,GAA8C;QACvF,iBAAiB,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,eAAe;QACzF,0BAA0B,EAAE,iBAAiB,EAAE,gBAAgB;KAClE,AAH4C,CAG3C;IAEF;;;;;;;;;;;;;;OAcG;IACa,KAAK,CAAC,IAAI,CAAC,OAA2B;QAClD,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACf,KAAK,MAAM,IAAI,IAAI,8BAA4B,CAAC,qBAAqB,EAAE,CAAC;gBACpE,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;gBACxC,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;oBACxB,KAAK,CAAC,aAAa,EAAE,CAAC;gBAC1B,CAAC;YACL,CAAC;QACL,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IAEe,QAAQ;QACpB,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;QAChC,MAAM,SAAS,GAAG,IAAI,CAAC,wBAAwB,EAAE,CAAC;QAClD,IAAI,SAAS,EAAE,CAAC;YACZ,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC9B,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC;QAC3B,CAAC;QACD,OAAO,MAAM,CAAC;IAClB,CAAC;IAED,4FAA4F;IACpF,wBAAwB;QAC5B,IAAI,iCAAiC,EAAE,EAAE,CAAC;YACtC,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,CAAC,WAAW,EAAE,CAAC;YACf,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,0FAA0F;QAC1F,yEAAyE;QACzE,IAAI,IAAI,CAAC,OAAO,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;YACrC,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,IAAI,OAAO,WAAW,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;QACxG,MAAM,OAAO,GAAG,iCAAiC,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1E,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,OAAO,IAAI,mBAAmB,CAC1B,QAAQ,EACR,gBAAgB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,8DAA8D,EAChG,IAAI,EACJ,mBAAmB,CAAC,OAAO,CAC9B,CAAC;IACN,CAAC;;AAzEQ,4BAA4B;IADxC,aAAa,CAAC,UAAU,EAAE,uBAAuB,CAAC;GACtC,4BAA4B,CA0ExC"}
+{"version":3,"file":"MJAIAgentSessionEntityServer.server.js","sourceRoot":"","sources":["../../src/custom/MJAIAgentSessionEntityServer.server.ts"],"names":[],"mappings":";;;;;;AAAA,OAAO,EAAE,UAAU,EAAE,mBAAmB,EAAE,mBAAmB,EAAoB,MAAM,sBAAsB,CAAC;AAC9G,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,EAAE,iCAAiC,EAAE,iCAAiC,EAAE,MAAM,sBAAsB,CAAC;AAC5G,OAAO,EAAE,gCAAgC,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAE5G;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEI,IAAM,4BAA4B,GAAlC,MAAM,4BAA6B,SAAQ,sBAAsB;IACpD,QAAQ;QACpB,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;QAChC,MAAM,UAAU,GAAG;YACf,IAAI,CAAC,wBAAwB,EAAE;YAC/B,gCAAgC,CAAC,IAAI,EAAE,gBAAgB,CAAC;SAC3D,CAAC,MAAM,CAAC,CAAC,CAAC,EAA4B,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;QACtD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,CAAC;YAClC,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC;QAC3B,CAAC;QACD,OAAO,MAAM,CAAC;IAClB,CAAC;IAED,4FAA4F;IACpF,wBAAwB;QAC5B,IAAI,iCAAiC,EAAE,EAAE,CAAC;YACtC,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,CAAC,WAAW,EAAE,CAAC;YACf,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,iHAAiH;QACjH,uGAAuG;QACvG,IAAI,0BAA0B,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;YACrD,OAAO,IAAI,mBAAmB,CAC1B,QAAQ,EACR,oHAAoH,EACpH,IAAI,EACJ,mBAAmB,CAAC,OAAO,CAC9B,CAAC;QACN,CAAC;QACD,0FAA0F;QAC1F,yEAAyE;QACzE,IAAI,IAAI,CAAC,OAAO,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;YACrC,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,IAAI,OAAO,WAAW,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;QACxG,MAAM,OAAO,GAAG,iCAAiC,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1E,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,OAAO,IAAI,mBAAmB,CAC1B,QAAQ,EACR,gBAAgB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,8DAA8D,EAChG,IAAI,EACJ,mBAAmB,CAAC,OAAO,CAC9B,CAAC;IACN,CAAC;CACJ,CAAA;AAlDY,4BAA4B;IADxC,aAAa,CAAC,UAAU,EAAE,uBAAuB,CAAC;GACtC,4BAA4B,CAkDxC"}

package/dist/custom/MJComponentEntityServer.server.d.ts

@@ -24,9 +24,18 @@ import { MJComponentEntityExtended } from "@memberjunction/core-entities";
  * found by comparing with the stored row, not with the values as loaded. When a read fails, the
  * write is refused. The check needs a query and `Validate()` is synchronous, so it runs in `Save()`
  * (an ordinary save and a `ReplayOnly` save alike) and in `Delete()`, before the write.
+ *
+ * Approval (`ApprovalStatus`) is a server act: a save that moves it to Approved records the context
+ * user, the time and the fingerprint of this version's specification (`ApplyApprovalRulesAsync`).
  */
 export declare class MJComponentEntityServer extends MJComponentEntityExtended {
     Save(options?: EntitySaveOptions): Promise<boolean>;
+    /**
+     * Applies the approval rules. Nothing in this save derives the specification or version, so an
+     * approving save stamps the fingerprint now and writes it with the row.
+     * @returns false when the save was refused (the reason is in `LatestResult`)
+     */
+    private applyApprovalAsync;
     Delete(options?: EntityDeleteOptions): Promise<boolean>;
     /**
      * Simple proxy to local helper method for embeddings. Needed for BaseEntity sub-classes that want to use embeddings built into BaseEntity

package/dist/custom/MJComponentEntityServer.server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"MJComponentEntityServer.server.d.ts","sourceRoot":"","sources":["../../src/custom/MJComponentEntityServer.server.ts"],"names":[],"mappings":"AAAA,OAAO,EAEH,mBAAmB,EACnB,iBAAiB,EACjB,qBAAqB,EAExB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAK1E;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,qBACa,uBAAwB,SAAQ,yBAAyB;IAC5C,IAAI,CAAC,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC;IAyBnD,MAAM,CAAC,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,OAAO,CAAC;IAS7E;;;;OAIG;cACsB,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAI5F,0GAA0G;IAC1G,OAAO,KAAK,UAAU,GAcrB;CACJ"}
+{"version":3,"file":"MJComponentEntityServer.server.d.ts","sourceRoot":"","sources":["../../src/custom/MJComponentEntityServer.server.ts"],"names":[],"mappings":"AAAA,OAAO,EAEH,mBAAmB,EACnB,iBAAiB,EACjB,qBAAqB,EAExB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAoC,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAM5G;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,qBACa,uBAAwB,SAAQ,yBAAyB;IAC5C,IAAI,CAAC,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC;IA4BzE;;;;OAIG;YACW,kBAAkB;IAYV,MAAM,CAAC,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,OAAO,CAAC;IAS7E;;;;OAIG;cACsB,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAI5F,0GAA0G;IAC1G,OAAO,KAAK,UAAU,GAcrB;CACJ"}

package/dist/custom/MJComponentEntityServer.server.js

@@ -6,10 +6,11 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 };
 import { BaseEntity, } from "@memberjunction/core";
 import { RegisterClass } from "@memberjunction/global";
-import { MJComponentEntityExtended } from "@memberjunction/core-entities";
+import { ComputeComponentFingerprintAsync, MJComponentEntityExtended } from "@memberjunction/core-entities";
 import { EmbedTextLocalHelper } from "./util.js";
 import { FormScopeRefusalResult } from "./FormScopeGuard.js";
 import { ComponentGuardRefusal } from "./FormComponentGuard.js";
+import { ApplyApprovalRulesAsync, ApprovalRefusalResult } from "./approvalStamp.js";
 /**
  * Server-side `MJ: Components` entity.
  *
@@ -34,6 +35,9 @@ import { ComponentGuardRefusal } from "./FormComponentGuard.js";
  * found by comparing with the stored row, not with the values as loaded. When a read fails, the
  * write is refused. The check needs a query and `Validate()` is synchronous, so it runs in `Save()`
  * (an ordinary save and a `ReplayOnly` save alike) and in `Delete()`, before the write.
+ *
+ * Approval (`ApprovalStatus`) is a server act: a save that moves it to Approved records the context
+ * user, the time and the fingerprint of this version's specification (`ApplyApprovalRulesAsync`).
  */
 let MJComponentEntityServer = class MJComponentEntityServer extends MJComponentEntityExtended {
     async Save(options) {
@@ -43,6 +47,9 @@ let MJComponentEntityServer = class MJComponentEntityServer extends MJComponentE
             this.RegisterResultHistoryEntry(FormScopeRefusalResult(operation, refusal));
             return false;
         }
+        if (!await this.applyApprovalAsync(options)) {
+            return false;
+        }
         await this.GenerateEmbeddingsByFieldName([
             {
                 fieldName: "FunctionalRequirements",
@@ -60,6 +67,23 @@ let MJComponentEntityServer = class MJComponentEntityServer extends MJComponentE
         const saveResult = await super.Save(options);
         return saveResult;
     }
+    /**
+     * Applies the approval rules. Nothing in this save derives the specification or version, so an
+     * approving save stamps the fingerprint now and writes it with the row.
+     * @returns false when the save was refused (the reason is in `LatestResult`)
+     */
+    async applyApprovalAsync(options) {
+        try {
+            if (!options?.ReplayOnly && await ApplyApprovalRulesAsync(this, 'ApprovalStatus', this.ApprovalStatus)) {
+                this.ApprovedFingerprint = await ComputeComponentFingerprintAsync(this);
+            }
+            return true;
+        }
+        catch (e) {
+            this.RegisterResultHistoryEntry(ApprovalRefusalResult(this, e));
+            return false;
+        }
+    }
     async Delete(options) {
         const refusal = await ComponentGuardRefusal(this.guardedRow, 'delete');
         if (refusal) {

package/dist/custom/MJComponentEntityServer.server.js.map

@@ -1 +1 @@
-{"version":3,"file":"MJComponentEntityServer.server.js","sourceRoot":"","sources":["../../src/custom/MJComponentEntityServer.server.ts"],"names":[],"mappings":";;;;;;AAAA,OAAO,EACH,UAAU,GAKb,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,EAAE,oBAAoB,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EAAE,qBAAqB,EAA4B,MAAM,sBAAsB,CAAC;AAEvF;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEI,IAAM,uBAAuB,GAA7B,MAAM,uBAAwB,SAAQ,yBAAyB;IAClD,KAAK,CAAC,IAAI,CAAC,OAA2B;QAClD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;QACrD,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QACxE,IAAI,OAAO,EAAE,CAAC;YACV,IAAI,CAAC,0BAA0B,CAAC,sBAAsB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;YAC5E,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,MAAM,IAAI,CAAC,6BAA6B,CAAC;YACrC;gBACI,SAAS,EAAE,wBAAwB;gBACnC,eAAe,EAAE,8BAA8B;gBAC/C,cAAc,EAAE,8CAA8C;gBAC9D,qBAAqB,EAAE,oCAAoC;aAC9D;YACD;gBACI,SAAS,EAAE,iBAAiB;gBAC5B,eAAe,EAAE,uBAAuB;gBACxC,cAAc,EAAE,uCAAuC;gBACvD,qBAAqB,EAAE,6BAA6B;aACvD;SACJ,CAAC,CAAC;QACH,MAAM,UAAU,GAAY,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtD,OAAO,UAAU,CAAC;IACtB,CAAC;IAEe,KAAK,CAAC,MAAM,CAAC,OAA6B;QACtD,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QACvE,IAAI,OAAO,EAAE,CAAC;YACV,IAAI,CAAC,0BAA0B,CAAC,sBAAsB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;YAC3E,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,OAAO,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC;IAED;;;;OAIG;IACgB,KAAK,CAAC,cAAc,CAAC,WAAmB;QACvD,OAAO,oBAAoB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACnD,CAAC;IAED,0GAA0G;IAC1G,IAAY,UAAU;QAClB,OAAO;YACH,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,MAAM,EAAE;gBACJ,aAAa,EAAE,IAAI,CAAC,aAAa;gBACjC,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,SAAS,EAAE,IAAI,CAAC,SAAS;aAC5B;YACD,eAAe,EAAE,IAAI,CAAC,oBAAoB;YAC1C,gBAAgB,EAAE,IAAI,CAAC,aAA6C;SACvE,CAAC;IACN,CAAC;CACJ,CAAA;AA5DY,uBAAuB;IADnC,aAAa,CAAC,UAAU,EAAE,gBAAgB,CAAC;GAC/B,uBAAuB,CA4DnC"}
+{"version":3,"file":"MJComponentEntityServer.server.js","sourceRoot":"","sources":["../../src/custom/MJComponentEntityServer.server.ts"],"names":[],"mappings":";;;;;;AAAA,OAAO,EACH,UAAU,GAKb,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,gCAAgC,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAC5G,OAAO,EAAE,oBAAoB,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EAAE,qBAAqB,EAA4B,MAAM,sBAAsB,CAAC;AACvF,OAAO,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAEjF;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEI,IAAM,uBAAuB,GAA7B,MAAM,uBAAwB,SAAQ,yBAAyB;IAClD,KAAK,CAAC,IAAI,CAAC,OAA2B;QAClD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;QACrD,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QACxE,IAAI,OAAO,EAAE,CAAC;YACV,IAAI,CAAC,0BAA0B,CAAC,sBAAsB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;YAC5E,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,IAAI,CAAC,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1C,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,MAAM,IAAI,CAAC,6BAA6B,CAAC;YACrC;gBACI,SAAS,EAAE,wBAAwB;gBACnC,eAAe,EAAE,8BAA8B;gBAC/C,cAAc,EAAE,8CAA8C;gBAC9D,qBAAqB,EAAE,oCAAoC;aAC9D;YACD;gBACI,SAAS,EAAE,iBAAiB;gBAC5B,eAAe,EAAE,uBAAuB;gBACxC,cAAc,EAAE,uCAAuC;gBACvD,qBAAqB,EAAE,6BAA6B;aACvD;SACJ,CAAC,CAAC;QACH,MAAM,UAAU,GAAY,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtD,OAAO,UAAU,CAAC;IACtB,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,kBAAkB,CAAC,OAA2B;QACxD,IAAI,CAAC;YACD,IAAI,CAAC,OAAO,EAAE,UAAU,IAAI,MAAM,uBAAuB,CAAC,IAAI,EAAE,gBAAgB,EAAE,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;gBACrG,IAAI,CAAC,mBAAmB,GAAG,MAAM,gCAAgC,CAAC,IAAI,CAAC,CAAC;YAC5E,CAAC;YACD,OAAO,IAAI,CAAC;QAChB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,IAAI,CAAC,0BAA0B,CAAC,qBAAqB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAChE,OAAO,KAAK,CAAC;QACjB,CAAC;IACL,CAAC;IAEe,KAAK,CAAC,MAAM,CAAC,OAA6B;QACtD,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QACvE,IAAI,OAAO,EAAE,CAAC;YACV,IAAI,CAAC,0BAA0B,CAAC,sBAAsB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;YAC3E,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,OAAO,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC;IAED;;;;OAIG;IACgB,KAAK,CAAC,cAAc,CAAC,WAAmB;QACvD,OAAO,oBAAoB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACnD,CAAC;IAED,0GAA0G;IAC1G,IAAY,UAAU;QAClB,OAAO;YACH,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,MAAM,EAAE;gBACJ,aAAa,EAAE,IAAI,CAAC,aAAa;gBACjC,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,SAAS,EAAE,IAAI,CAAC,SAAS;aAC5B;YACD,eAAe,EAAE,IAAI,CAAC,oBAAoB;YAC1C,gBAAgB,EAAE,IAAI,CAAC,aAA6C;SACvE,CAAC;IACN,CAAC;CACJ,CAAA;AAhFY,uBAAuB;IADnC,aAAa,CAAC,UAAU,EAAE,gBAAgB,CAAC;GAC/B,uBAAuB,CAgFnC"}

package/dist/custom/MJConversationEntityServer.server.d.ts

@@ -0,0 +1,13 @@
+import { ValidationResult } from '@memberjunction/core';
+import { MJConversationEntity } from '@memberjunction/core-entities';
+/**
+ * Server-side `MJ: Conversations` entity.
+ *
+ * Keeps `ExternalID` — the scope identity an anonymous visitor's realtime session is owned through — out
+ * of an anonymous visitor's reach once the conversation exists. See {@link CheckAnonymousOwnershipKeyChange}.
+ * Uses the synchronous `Validate()` so the rule runs on every save, like `MJAIAgentSessionEntityServer`.
+ */
+export declare class MJConversationEntityServer extends MJConversationEntity {
+    Validate(): ValidationResult;
+}
+//# sourceMappingURL=MJConversationEntityServer.server.d.ts.map

package/dist/custom/MJConversationEntityServer.server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"MJConversationEntityServer.server.d.ts","sourceRoot":"","sources":["../../src/custom/MJConversationEntityServer.server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAEpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAGrE;;;;;;GAMG;AACH,qBACa,0BAA2B,SAAQ,oBAAoB;IAChD,QAAQ,IAAI,gBAAgB;CAS/C"}

package/dist/custom/MJConversationEntityServer.server.js

@@ -0,0 +1,33 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+import { BaseEntity } from '@memberjunction/core';
+import { RegisterClass } from '@memberjunction/global';
+import { MJConversationEntity } from '@memberjunction/core-entities';
+import { CheckAnonymousOwnershipKeyChange } from './anonymousOwnershipKeyGuard.js';
+/**
+ * Server-side `MJ: Conversations` entity.
+ *
+ * Keeps `ExternalID` — the scope identity an anonymous visitor's realtime session is owned through — out
+ * of an anonymous visitor's reach once the conversation exists. See {@link CheckAnonymousOwnershipKeyChange}.
+ * Uses the synchronous `Validate()` so the rule runs on every save, like `MJAIAgentSessionEntityServer`.
+ */
+let MJConversationEntityServer = class MJConversationEntityServer extends MJConversationEntity {
+    Validate() {
+        const result = super.Validate();
+        const violation = CheckAnonymousOwnershipKeyChange(this, 'ExternalID');
+        if (violation) {
+            result.Errors.push(violation);
+            result.Success = false;
+        }
+        return result;
+    }
+};
+MJConversationEntityServer = __decorate([
+    RegisterClass(BaseEntity, 'MJ: Conversations')
+], MJConversationEntityServer);
+export { MJConversationEntityServer };
+//# sourceMappingURL=MJConversationEntityServer.server.js.map

package/dist/custom/MJConversationEntityServer.server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MJConversationEntityServer.server.js","sourceRoot":"","sources":["../../src/custom/MJConversationEntityServer.server.ts"],"names":[],"mappings":";;;;;;AAAA,OAAO,EAAE,UAAU,EAAoB,MAAM,sBAAsB,CAAC;AACpE,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EAAE,gCAAgC,EAAE,MAAM,8BAA8B,CAAC;AAEhF;;;;;;GAMG;AAEI,IAAM,0BAA0B,GAAhC,MAAM,0BAA2B,SAAQ,oBAAoB;IAChD,QAAQ;QACpB,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;QAChC,MAAM,SAAS,GAAG,gCAAgC,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QACvE,IAAI,SAAS,EAAE,CAAC;YACZ,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC9B,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC;QAC3B,CAAC;QACD,OAAO,MAAM,CAAC;IAClB,CAAC;CACJ,CAAA;AAVY,0BAA0B;IADtC,aAAa,CAAC,UAAU,EAAE,mBAAmB,CAAC;GAClC,0BAA0B,CAUtC"}

package/dist/custom/MJDashboardEntityServer.server.d.ts

@@ -0,0 +1,14 @@
+import { EntitySaveOptions } from "@memberjunction/core";
+import { MJDashboardEntityExtended } from "@memberjunction/core-entities";
+/**
+ * Server-side `MJ: Dashboards` entity.
+ *
+ * Approval (`ApprovalStatus`) is a server act: a save that moves it to Approved records the context
+ * user, the time and the fingerprint of the dashboard's definition (type, configuration, code and
+ * driver class); values a client sends for those columns are ignored (`ApplyApprovalRulesAsync`).
+ * Who may approve is whoever may edit the dashboard.
+ */
+export declare class MJDashboardEntityServer extends MJDashboardEntityExtended {
+    Save(options?: EntitySaveOptions): Promise<boolean>;
+}
+//# sourceMappingURL=MJDashboardEntityServer.server.d.ts.map

package/dist/custom/MJDashboardEntityServer.server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"MJDashboardEntityServer.server.d.ts","sourceRoot":"","sources":["../../src/custom/MJDashboardEntityServer.server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAErE,OAAO,EAAoC,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAG5G;;;;;;;GAOG;AACH,qBACa,uBAAwB,SAAQ,yBAAyB;IAC5C,IAAI,CAAC,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC;CAY5E"}

package/dist/custom/MJDashboardEntityServer.server.js

@@ -0,0 +1,38 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+import { BaseEntity } from "@memberjunction/core";
+import { RegisterClass } from "@memberjunction/global";
+import { ComputeDashboardFingerprintAsync, MJDashboardEntityExtended } from "@memberjunction/core-entities";
+import { ApplyApprovalRulesAsync, ApprovalRefusalResult } from "./approvalStamp.js";
+/**
+ * Server-side `MJ: Dashboards` entity.
+ *
+ * Approval (`ApprovalStatus`) is a server act: a save that moves it to Approved records the context
+ * user, the time and the fingerprint of the dashboard's definition (type, configuration, code and
+ * driver class); values a client sends for those columns are ignored (`ApplyApprovalRulesAsync`).
+ * Who may approve is whoever may edit the dashboard.
+ */
+let MJDashboardEntityServer = class MJDashboardEntityServer extends MJDashboardEntityExtended {
+    async Save(options) {
+        try {
+            // Nothing in this save derives the definition, so the fingerprint is stamped now and written with the row.
+            if (!options?.ReplayOnly && await ApplyApprovalRulesAsync(this, 'ApprovalStatus', this.ApprovalStatus)) {
+                this.ApprovedFingerprint = await ComputeDashboardFingerprintAsync(this);
+            }
+        }
+        catch (e) {
+            this.RegisterResultHistoryEntry(ApprovalRefusalResult(this, e));
+            return false;
+        }
+        return super.Save(options);
+    }
+};
+MJDashboardEntityServer = __decorate([
+    RegisterClass(BaseEntity, 'MJ: Dashboards')
+], MJDashboardEntityServer);
+export { MJDashboardEntityServer };
+//# sourceMappingURL=MJDashboardEntityServer.server.js.map

package/dist/custom/MJDashboardEntityServer.server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MJDashboardEntityServer.server.js","sourceRoot":"","sources":["../../src/custom/MJDashboardEntityServer.server.ts"],"names":[],"mappings":";;;;;;AAAA,OAAO,EAAE,UAAU,EAAqB,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,gCAAgC,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAC5G,OAAO,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAEjF;;;;;;;GAOG;AAEI,IAAM,uBAAuB,GAA7B,MAAM,uBAAwB,SAAQ,yBAAyB;IAClD,KAAK,CAAC,IAAI,CAAC,OAA2B;QAClD,IAAI,CAAC;YACD,2GAA2G;YAC3G,IAAI,CAAC,OAAO,EAAE,UAAU,IAAI,MAAM,uBAAuB,CAAC,IAAI,EAAE,gBAAgB,EAAE,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;gBACrG,IAAI,CAAC,mBAAmB,GAAG,MAAM,gCAAgC,CAAC,IAAI,CAAC,CAAC;YAC5E,CAAC;QACL,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,IAAI,CAAC,0BAA0B,CAAC,qBAAqB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAChE,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;CACJ,CAAA;AAbY,uBAAuB;IADnC,aAAa,CAAC,UAAU,EAAE,gBAAgB,CAAC;GAC/B,uBAAuB,CAanC"}

package/dist/custom/MJDuplicateRunEntityServer.server.d.ts

@@ -1,12 +1,44 @@
 import { EntitySaveOptions } from "@memberjunction/core";
-import { MJDuplicateRunEntity } from "@memberjunction/core-entities";
+import { MJDuplicateRunEntity, MJEntityDocumentEntity } from "@memberjunction/core-entities";
+/**
+ * Chooses the default entity document for a new duplicate run that was created without one, from
+ * the entity's active documents ordered newest-updated first. A 'Record Duplicate' document wins
+ * over any other type: an entity can also have a Search document (MJ ships one for several core
+ * entities), whose template and vectors are built for search, not for matching records. Without a
+ * 'Record Duplicate' document, the newest active document is used.
+ *
+ * Only callers that name no document get this default; the Duplicates tab always names the one
+ * the user picked.
+ *
+ * @param activeDocuments the entity's active documents, newest `__mj_UpdatedAt` first
+ * @returns the document to use, or null when there is none
+ */
+export declare function PickDuplicateDetectionDocument<T extends Pick<MJEntityDocumentEntity, 'Type'>>(activeDocuments: T[]): T | null;
+/**
+ * Checks that the entity document a run names belongs to the run's entity.
+ *
+ * @param entityDocument the run's document
+ * @param entityID the run's EntityID
+ * @returns why the document cannot be used, or null when it can
+ */
+export declare function CheckRunEntityDocument(entityDocument: Pick<MJEntityDocumentEntity, 'EntityID' | 'Name'>, entityID: string): string | null;
 export declare class MJDuplicateRunEntityServer extends MJDuplicateRunEntity {
     Save(options?: EntitySaveOptions): Promise<boolean>;
     /**
      * Run duplicate detection asynchronously. On failure, updates the run's
-     * ProcessingStatus to 'Error' so the UI can surface the problem.
+     * ProcessingStatus to 'Failed' with ProcessingErrorMessage so the UI can surface the problem.
      */
     private runDetectionAsync;
+    /**
+     * The entity's default duplicate-detection document (see {@link PickDuplicateDetectionDocument}),
+     * or null when the entity has no active document.
+     */
+    private findDefaultEntityDocument;
+    /**
+     * Loads the entity document this run names. Throws when it is missing or belongs to another
+     * entity, which fails the run with that message.
+     */
+    private loadRunEntityDocument;
     /**
      * Convert a DuplicateDetectionProgress callback into a PipelineProgress notification.
      */

package/dist/custom/MJDuplicateRunEntityServer.server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"MJDuplicateRunEntityServer.server.d.ts","sourceRoot":"","sources":["../../src/custom/MJDuplicateRunEntityServer.server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAqE,iBAAiB,EAA8E,MAAM,sBAAsB,CAAC;AAExM,OAAO,EAAE,oBAAoB,EAA0B,MAAM,+BAA+B,CAAC;AA4C7F,qBACa,0BAA2B,SAAQ,oBAAoB;IAC1C,IAAI,CAAC,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC;IAuBzE;;;OAGG;YACW,iBAAiB;IAuE/B;;OAEG;IACH,OAAO,CAAC,eAAe;IAgBvB;;;;OAIG;IACH;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAO1B,OAAO,CAAC,2BAA2B;CA8BtC"}
+{"version":3,"file":"MJDuplicateRunEntityServer.server.d.ts","sourceRoot":"","sources":["../../src/custom/MJDuplicateRunEntityServer.server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAqE,iBAAiB,EAA8E,MAAM,sBAAsB,CAAC;AAExM,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AAQ7F;;;;;;;;;;;;GAYG;AACH,wBAAgB,8BAA8B,CAAC,CAAC,SAAS,IAAI,CAAC,sBAAsB,EAAE,MAAM,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE,GAAG,CAAC,GAAG,IAAI,CAG7H;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAClC,cAAc,EAAE,IAAI,CAAC,sBAAsB,EAAE,UAAU,GAAG,MAAM,CAAC,EACjE,QAAQ,EAAE,MAAM,GACjB,MAAM,GAAG,IAAI,CAKf;AAyCD,qBACa,0BAA2B,SAAQ,oBAAoB;IAC1C,IAAI,CAAC,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC;IAgCzE;;;OAGG;YACW,iBAAiB;IAqE/B;;;OAGG;YACW,yBAAyB;IAevC;;;OAGG;YACW,qBAAqB;IAqBnC;;OAEG;IACH,OAAO,CAAC,eAAe;IAgBvB;;;;OAIG;IACH;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAO1B,OAAO,CAAC,2BAA2B;CA8BtC"}