@memberjunction/core-entities-server 6.2.0-edge.5 → 6.2.0-edge.6

package/dist/custom/MJUserRoleEntityServer.server.d.ts

@@ -75,7 +75,7 @@ import { MJUserRoleEntity } from '@memberjunction/core-entities';
  * `CloneUserForSessionContext` carries it onto the per-session clone.)
  *
  * NOT COVERED, deliberately: a magic-link session's SYNTHESIZED roles (`context.ts`
- * `buildMagicLinkSessionUser`) count as roles held, so a scope-limited principal is measured by the
+ * `BuildMagicLinkSessionUser`) count as roles held, so a scope-limited principal is measured by the
  * same rule as any other caller. Narrowing scope-limited principals further is a magic-link concern,
  * not a role-elevation one — `IsScopeLimitedPrincipal` lives in MJServer, which this package cannot
  * import, and duplicating its predicate here would put one decision in two places. Such a session
@@ -110,6 +110,9 @@ import { MJUserRoleEntity } from '@memberjunction/core-entities';
  *   short of its entity-level access. Removal is the opposite shape: it drops rules OUT of the
  *   aggregate, so what matters is not what the departing role said but whether an `Allow` survives
  *   without it.
+ * - **Re-pointing** ({@link Save}) — an UPDATE that changes `UserID` or `RoleID` on an existing
+ *   row takes its OLD (user, role) pair apart exactly as a delete would, so the removal check runs
+ *   against the pair being vacated. `Validate()` already checks the new pair as an assignment.
  *
  * Why the system user must stay unrestricted: the server runs background work as that account.
  * It pre-warms the shared engine caches at startup, and in task mode — which job and agent
@@ -119,14 +122,20 @@ import { MJUserRoleEntity } from '@memberjunction/core-entities';
  * cache that everyone reads afterward, with nothing at the point of failure pointing back at
  * the role assignment that caused it.
  *
- * Unlike guard A, guard B reads cached metadata (`Metadata.Entities`, the provider, `UserCache`).
- * It still performs no database I/O, but it is not state-free, and it needs those caches populated
- * to have an opinion — a cold `UserCache` skips the check rather than blocking an administrator.
+ * Unlike guard A, guard B is not pure. `Validate()` checks an assignment against cached metadata
+ * so a form can show the reason early, but the deciding checks run in `Save()` and `Delete()` on
+ * the system user's role set and field rules as stored in the database (`systemUserGuardState`),
+ * because the caches lag a write made a moment before. They run for a `ReplayOnly` save too. A
+ * transaction group holding this and another guarded write that concerns the system user is
+ * refused, since neither check could see the other's change. A cold `UserCache` (no system user
+ * to identify) skips the check rather than blocking an administrator.
  *
  * This restricts CONFIGURATION only. There is no user who is exempt from a Deny at runtime —
  * not even the system user, whose access comes from the same rows as everyone else's.
  */
 export declare class MJUserRoleEntityServer extends MJUserRoleEntity {
+    /** This write's place in its transaction group, held from guard B's group check until the write enrols. */
+    private pendingGroupWrite;
     Validate(): ValidationResult;
     /**
      * Refuses a `ReplayOnly` save by a non-Owner caller — invariant 4. `ReplayOnly` force-passes
@@ -136,6 +145,51 @@ export declare class MJUserRoleEntityServer extends MJUserRoleEntity {
      * `MJUserEntityServer.Save()`, including its reasoning for refusing rather than re-validating.
      */
     Save(options?: EntitySaveOptions): Promise<boolean>;
+    /**
+     * Ends this write's hold on the group place guard B reserved: kept when the write enrolled,
+     * given back when it was refused, returned false or threw, so a retry is not counted twice.
+     */
+    private settleGroupWrite;
+    /**
+     * Guard B for a save, judged on the database rather than the caches: a transaction group
+     * holding this and another guarded write that concerns the system user is refused; an update
+     * that re-points the row is checked as a removal of the pair it leaves; and an assignment of
+     * a role to the system user is refused when that role carries a stored `Deny`. A read that
+     * fails refuses the save.
+     */
+    private systemUserSaveRejection;
+    /**
+     * Why assigning this row's role to the system user is refused on the rules as stored now, or
+     * null. Only a create or a re-point assigns; an update that keeps the pair assigns nothing new.
+     */
+    private storedAssignmentRejectionReason;
+    /** Whether this update moves the row to a different (user, role) pair. Unknown prior values count as a move. */
+    private isRepoint;
+    /** Names of the entities owning the given fields, from loaded metadata, each once. */
+    private static entityNamesForFieldIDs;
+    /** The refusal when the system user's field access cannot be checked because a read failed. */
+    private static unverifiableMessage;
+    /**
+     * Why re-pointing this assignment away from its stored (user, role) pair would cost the MJ
+     * system user field access, or null when it would not.
+     *
+     * Evaluated as a removal of the OLD pair with nothing added in its place. When `RoleID` moves
+     * between two roles on the system user that is conservative — the incoming role might hold the
+     * very `Allow` the outgoing one is taking away — but assigning the new role first and then
+     * deleting the old one reaches the same state through checks that can each see the whole
+     * picture.
+     *
+     * A re-pointed column whose prior value cannot be established fails CLOSED while there is a
+     * system user to protect: the vacated pair might be one of its roles.
+     */
+    private vacatedPairRemovalReason;
+    /**
+     * Why removing this row's STORED (user, role) pair would cost the system user field access,
+     * or null. Shared by the delete path and the re-point path, which take the same pair apart.
+     */
+    private storedPairRemovalReason;
+    /** A column's stored value; undefined when it is dirty and its old value is not a usable ID. */
+    private priorValue;
     /**
      * Enforces both guards on the delete path.
      *
@@ -159,6 +213,13 @@ export declare class MJUserRoleEntityServer extends MJUserRoleEntity {
      * Owner, so it is exempt from guard A and never sees that refusal on a default install.
      */
     Delete(options?: EntityDeleteOptions): Promise<boolean>;
+    /**
+     * Guard B's transaction-group rule for this write. When it passes, the write's place in the
+     * group is reserved in the same step, so a second guarded write in flight at once sees it.
+     */
+    private groupRefusal;
+    /** Guard B for a delete: the transaction-group rule, then the removal check on stored state. */
+    private systemUserDeleteRejection;
     /**
      * Invariants 1 and 2's forward half — the role being assigned must be one the caller holds.
      * Attributed to `RoleID` because that IS the field whose value is refused, so a form highlights
@@ -205,8 +266,11 @@ export declare class MJUserRoleEntityServer extends MJUserRoleEntity {
      */
     private callerIsOwner;
     /**
-     * Why this role may not be taken off this user, or null when it may.
-     * Only ever rejects for the system user; every other user is unaffected.
+     * Why taking `roleID` off `userID` would cost the system user field access, or null when it
+     * would not. Only ever rejects for the system user; every other user is unaffected.
+     *
+     * Parameterized because the delete path and the re-point path both ask about the pair as
+     * STORED, which on a re-point is only available from the dirty fields' old values.
      */
     private systemUserRoleRemovalReason;
     /**
@@ -214,9 +278,12 @@ export declare class MJUserRoleEntityServer extends MJUserRoleEntity {
      * Only ever rejects for the system user; every other user is unaffected.
      */
     static SystemUserRejectionReason(userID: string | null, roleID: string | null, provider?: IMetadataProvider): string | null;
+    /** The refusal for assigning the system user a role that denies a field on the named entities. */
+    private static assignmentRejectionMessage;
     /**
      * Names of entities where this role carries at least one RESTRICTING field rule — a `Deny`
-     * on any verb. Walks cached metadata only — no database access. Runs only when the system
+     * on any verb, under any spelling (the column's collation stores `'deny'` too, and enforcement
+     * honors it). Walks cached metadata only — no database access. Runs only when the system
      * user is the save target, which is rare.
      *
      * Grants and neutrals are ignored, and must be: the system user holds the standard roles

package/dist/custom/MJUserRoleEntityServer.server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"MJUserRoleEntityServer.server.d.ts","sourceRoot":"","sources":["../../src/custom/MJUserRoleEntityServer.server.ts"],"names":[],"mappings":"AAAA,OAAO,EAGH,mBAAmB,EAEnB,iBAAiB,EACjB,iBAAiB,EAMjB,gBAAgB,EACnB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAGjE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6HG;AACH,qBACa,sBAAuB,SAAQ,gBAAgB;IACxC,QAAQ,IAAI,gBAAgB;IAgC5C;;;;;;OAMG;IACmB,IAAI,CAAC,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC;IAWzE;;;;;;;;;;;;;;;;;;;;;OAqBG;IACmB,MAAM,CAAC,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,OAAO,CAAC;IAiB7E;;;;OAIG;IACH,OAAO,CAAC,gBAAgB;IAOxB;;;;;;;;;OASG;IACH,OAAO,CAAC,qBAAqB;IAqB7B,4GAA4G;IAC5G,OAAO,CAAC,MAAM;IAWd;;;;;;;OAOG;IACH,OAAO,CAAC,eAAe;IAQvB;;;;;;;;;;;;;;;OAeG;IACH,OAAO,CAAC,aAAa;IAQrB;;;OAGG;IACH,OAAO,CAAC,2BAA2B;IAqBnC;;;OAGG;WACW,yBAAyB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,EAAE,QAAQ,CAAC,EAAE,iBAAiB,GAAG,MAAM,GAAG,IAAI;IAyBlI;;;;;;;;;;;;;;;;;;OAkBG;IACH,OAAO,CAAC,MAAM,CAAC,wCAAwC;CAe1D;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,IAAI,IAAI,CAEjD"}
+{"version":3,"file":"MJUserRoleEntityServer.server.d.ts","sourceRoot":"","sources":["../../src/custom/MJUserRoleEntityServer.server.ts"],"names":[],"mappings":"AAAA,OAAO,EAGH,mBAAmB,EAEnB,iBAAiB,EACjB,iBAAiB,EAKjB,gBAAgB,EACnB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAkBjE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoIG;AACH,qBACa,sBAAuB,SAAQ,gBAAgB;IACxD,2GAA2G;IAC3G,OAAO,CAAC,iBAAiB,CAAyC;IAElD,QAAQ,IAAI,gBAAgB;IAgC5C;;;;;;OAMG;IACmB,IAAI,CAAC,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC;IAuBzE;;;OAGG;IACH,OAAO,CAAC,gBAAgB;IAQxB;;;;;;OAMG;YACW,uBAAuB;IAerC;;;OAGG;YACW,+BAA+B;IAS7C,gHAAgH;IAChH,OAAO,CAAC,SAAS;IASjB,sFAAsF;IACtF,OAAO,CAAC,MAAM,CAAC,sBAAsB;IAYrC,+FAA+F;IAC/F,OAAO,CAAC,MAAM,CAAC,mBAAmB;IAKlC;;;;;;;;;;;;OAYG;YACW,wBAAwB;IAOtC;;;OAGG;YACW,uBAAuB;IASrC,gGAAgG;IAChG,OAAO,CAAC,UAAU;IASlB;;;;;;;;;;;;;;;;;;;;;OAqBG;IACmB,MAAM,CAAC,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,OAAO,CAAC;IAwB7E;;;OAGG;IACH,OAAO,CAAC,YAAY;IASpB,gGAAgG;YAClF,yBAAyB;IAcvC;;;;OAIG;IACH,OAAO,CAAC,gBAAgB;IAOxB;;;;;;;;;OASG;IACH,OAAO,CAAC,qBAAqB;IAqB7B,4GAA4G;IAC5G,OAAO,CAAC,MAAM;IAWd;;;;;;;OAOG;IACH,OAAO,CAAC,eAAe;IAQvB;;;;;;;;;;;;;;;OAeG;IACH,OAAO,CAAC,aAAa;IAQrB;;;;;;OAMG;YACW,2BAA2B;IAsBzC;;;OAGG;WACW,yBAAyB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,EAAE,QAAQ,CAAC,EAAE,iBAAiB,GAAG,MAAM,GAAG,IAAI;IAkBlI,kGAAkG;IAClG,OAAO,CAAC,MAAM,CAAC,0BAA0B;IAWzC;;;;;;;;;;;;;;;;;;;OAmBG;IACH,OAAO,CAAC,MAAM,CAAC,wCAAwC;CAe1D;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,IAAI,IAAI,CAEjD"}

package/dist/custom/MJUserRoleEntityServer.server.js

@@ -5,10 +5,15 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
     return c > 3 && r && Object.defineProperty(target, key, r), r;
 };
 var MJUserRoleEntityServer_1;
-import { BaseEntity, BaseEntityResult, IsRestrictingFieldRule, Metadata, ValidationErrorInfo, ValidationErrorType, } from '@memberjunction/core';
-import { RegisterClass, UUIDsEqual } from '@memberjunction/global';
+import { BaseEntity, BaseEntityResult, Metadata, ValidationErrorInfo, ValidationErrorType, } from '@memberjunction/core';
+import { RegisterClass, UUIDSet, UUIDsEqual } from '@memberjunction/global';
 import { MJUserRoleEntity } from '@memberjunction/core-entities';
-import { FindSystemUserFieldAccessViolations, UserCache } from '@memberjunction/generic-database-provider';
+import { UserCache } from '@memberjunction/generic-database-provider';
+import { IsRestrictingFieldRuleAnyCase } from './fieldPermissionAccess.js';
+import { GuardedTransactionGroupRefusal, IsSystemUserID, ReleaseGuardedTransactionGroupWrite, ReserveGuardedTransactionGroupWrite, StoredRestrictingFieldIDsForRole, StoredRoleRemovalViolations, } from './systemUserGuardState.js';
+const UNDETERMINED_PRIOR_ASSIGNMENT_MESSAGE = 'Could not determine which user and role this assignment granted before the edit, so the change cannot be ' +
+    "checked against the MJ system user's field access. Refusing to save rather than risk removing a role the " +
+    'server depends on. Reload the record and try again.';
 /**
  * Server-side `MJ: User Roles` entity. It carries TWO independent guards that happen to protect the
  * same table from opposite directions. They share no state and no helpers, and every write path
@@ -84,7 +89,7 @@ import { FindSystemUserFieldAccessViolations, UserCache } from '@memberjunction/
  * `CloneUserForSessionContext` carries it onto the per-session clone.)
  *
  * NOT COVERED, deliberately: a magic-link session's SYNTHESIZED roles (`context.ts`
- * `buildMagicLinkSessionUser`) count as roles held, so a scope-limited principal is measured by the
+ * `BuildMagicLinkSessionUser`) count as roles held, so a scope-limited principal is measured by the
  * same rule as any other caller. Narrowing scope-limited principals further is a magic-link concern,
  * not a role-elevation one — `IsScopeLimitedPrincipal` lives in MJServer, which this package cannot
  * import, and duplicating its predicate here would put one decision in two places. Such a session
@@ -119,6 +124,9 @@ import { FindSystemUserFieldAccessViolations, UserCache } from '@memberjunction/
  *   short of its entity-level access. Removal is the opposite shape: it drops rules OUT of the
  *   aggregate, so what matters is not what the departing role said but whether an `Allow` survives
  *   without it.
+ * - **Re-pointing** ({@link Save}) — an UPDATE that changes `UserID` or `RoleID` on an existing
+ *   row takes its OLD (user, role) pair apart exactly as a delete would, so the removal check runs
+ *   against the pair being vacated. `Validate()` already checks the new pair as an assignment.
  *
  * Why the system user must stay unrestricted: the server runs background work as that account.
  * It pre-warms the shared engine caches at startup, and in task mode — which job and agent
@@ -128,14 +136,23 @@ import { FindSystemUserFieldAccessViolations, UserCache } from '@memberjunction/
  * cache that everyone reads afterward, with nothing at the point of failure pointing back at
  * the role assignment that caused it.
  *
- * Unlike guard A, guard B reads cached metadata (`Metadata.Entities`, the provider, `UserCache`).
- * It still performs no database I/O, but it is not state-free, and it needs those caches populated
- * to have an opinion — a cold `UserCache` skips the check rather than blocking an administrator.
+ * Unlike guard A, guard B is not pure. `Validate()` checks an assignment against cached metadata
+ * so a form can show the reason early, but the deciding checks run in `Save()` and `Delete()` on
+ * the system user's role set and field rules as stored in the database (`systemUserGuardState`),
+ * because the caches lag a write made a moment before. They run for a `ReplayOnly` save too. A
+ * transaction group holding this and another guarded write that concerns the system user is
+ * refused, since neither check could see the other's change. A cold `UserCache` (no system user
+ * to identify) skips the check rather than blocking an administrator.
  *
  * This restricts CONFIGURATION only. There is no user who is exempt from a Deny at runtime —
  * not even the system user, whose access comes from the same rows as everyone else's.
  */
 let MJUserRoleEntityServer = MJUserRoleEntityServer_1 = class MJUserRoleEntityServer extends MJUserRoleEntity {
+    constructor() {
+        super(...arguments);
+        /** This write's place in its transaction group, held from guard B's group check until the write enrols. */
+        this.pendingGroupWrite = null;
+    }
     Validate() {
         const result = super.Validate();
         // Guard A — the caller may only assign/move a role they hold themselves.
@@ -168,7 +185,131 @@ let MJUserRoleEntityServer = MJUserRoleEntityServer_1 = class MJUserRoleEntitySe
             return this.refuse(this.IsSaved ? 'update' : 'create', 'Only an Owner may perform a ReplayOnly save on a user-role assignment. ReplayOnly bypasses ' +
                 'validation, which is where this entity\'s role-elevation invariants are enforced.');
         }
-        return super.Save(options);
+        // Guard B on the save path. Not only in Validate(): a ReplayOnly save skips Validate(), and
+        // an Owner may replay — this check has no Owner exemption, so it must run either way.
+        let saved = false;
+        try {
+            const rejection = await this.systemUserSaveRejection();
+            if (rejection) {
+                return this.refuse(this.IsSaved ? 'update' : 'create', rejection);
+            }
+            saved = await super.Save(options);
+            return saved;
+        }
+        finally {
+            this.settleGroupWrite(saved);
+        }
+    }
+    /**
+     * Ends this write's hold on the group place guard B reserved: kept when the write enrolled,
+     * given back when it was refused, returned false or threw, so a retry is not counted twice.
+     */
+    settleGroupWrite(enrolled) {
+        const pending = this.pendingGroupWrite;
+        this.pendingGroupWrite = null;
+        if (!enrolled) {
+            ReleaseGuardedTransactionGroupWrite(pending);
+        }
+    }
+    /**
+     * Guard B for a save, judged on the database rather than the caches: a transaction group
+     * holding this and another guarded write that concerns the system user is refused; an update
+     * that re-points the row is checked as a removal of the pair it leaves; and an assignment of
+     * a role to the system user is refused when that role carries a stored `Deny`. A read that
+     * fails refuses the save.
+     */
+    async systemUserSaveRejection() {
+        const priorUserID = this.priorValue('UserID', this.UserID);
+        const concernsSystemUser = IsSystemUserID(this.UserID) || priorUserID === undefined || IsSystemUserID(priorUserID);
+        const groupRefusal = this.groupRefusal(concernsSystemUser);
+        if (groupRefusal || !concernsSystemUser) {
+            return groupRefusal;
+        }
+        try {
+            const removal = this.IsSaved ? await this.vacatedPairRemovalReason() : null;
+            return removal ?? (await this.storedAssignmentRejectionReason());
+        }
+        catch (e) {
+            return MJUserRoleEntityServer_1.unverifiableMessage(e);
+        }
+    }
+    /**
+     * Why assigning this row's role to the system user is refused on the rules as stored now, or
+     * null. Only a create or a re-point assigns; an update that keeps the pair assigns nothing new.
+     */
+    async storedAssignmentRejectionReason() {
+        if (!IsSystemUserID(this.UserID) || !this.RoleID || (this.IsSaved && !this.isRepoint())) {
+            return null;
+        }
+        const fieldIDs = await StoredRestrictingFieldIDsForRole(this.RunViewProviderToUse, this.RoleID);
+        const entities = MJUserRoleEntityServer_1.entityNamesForFieldIDs(fieldIDs, this.ProviderToUse);
+        return entities.length > 0 ? MJUserRoleEntityServer_1.assignmentRejectionMessage(entities) : null;
+    }
+    /** Whether this update moves the row to a different (user, role) pair. Unknown prior values count as a move. */
+    isRepoint() {
+        const priorUserID = this.priorValue('UserID', this.UserID);
+        const priorRoleID = this.priorValue('RoleID', this.RoleID);
+        if (priorUserID === undefined || priorRoleID === undefined) {
+            return true;
+        }
+        return !UUIDsEqual(priorUserID, this.UserID) || !UUIDsEqual(priorRoleID, this.RoleID);
+    }
+    /** Names of the entities owning the given fields, from loaded metadata, each once. */
+    static entityNamesForFieldIDs(fieldIDs, provider) {
+        const md = provider ?? new Metadata();
+        const ids = new UUIDSet(fieldIDs);
+        const names = new Set();
+        for (const entity of md.Entities) {
+            if (entity.Fields.some((f) => ids.Has(f.ID))) {
+                names.add(entity.Name);
+            }
+        }
+        return [...names];
+    }
+    /** The refusal when the system user's field access cannot be checked because a read failed. */
+    static unverifiableMessage(error) {
+        const detail = error instanceof Error ? error.message : String(error);
+        return `Could not check this change against the MJ system user's field access, so it was not saved. ${detail}`;
+    }
+    /**
+     * Why re-pointing this assignment away from its stored (user, role) pair would cost the MJ
+     * system user field access, or null when it would not.
+     *
+     * Evaluated as a removal of the OLD pair with nothing added in its place. When `RoleID` moves
+     * between two roles on the system user that is conservative — the incoming role might hold the
+     * very `Allow` the outgoing one is taking away — but assigning the new role first and then
+     * deleting the old one reaches the same state through checks that can each see the whole
+     * picture.
+     *
+     * A re-pointed column whose prior value cannot be established fails CLOSED while there is a
+     * system user to protect: the vacated pair might be one of its roles.
+     */
+    async vacatedPairRemovalReason() {
+        if (!this.isRepoint()) {
+            return null; // not a re-point — at most a change of casing
+        }
+        return this.storedPairRemovalReason();
+    }
+    /**
+     * Why removing this row's STORED (user, role) pair would cost the system user field access,
+     * or null. Shared by the delete path and the re-point path, which take the same pair apart.
+     */
+    async storedPairRemovalReason() {
+        const priorUserID = this.priorValue('UserID', this.UserID);
+        const priorRoleID = this.priorValue('RoleID', this.RoleID);
+        if (priorUserID === undefined || priorRoleID === undefined) {
+            return UserCache.Instance?.GetSystemUser?.() ? UNDETERMINED_PRIOR_ASSIGNMENT_MESSAGE : null;
+        }
+        return this.systemUserRoleRemovalReason(priorUserID, priorRoleID);
+    }
+    /** A column's stored value; undefined when it is dirty and its old value is not a usable ID. */
+    priorValue(fieldName, current) {
+        const field = this.GetFieldByName(fieldName);
+        if (!field?.Dirty) {
+            return current;
+        }
+        const old = field.OldValue;
+        return typeof old === 'string' && old.length > 0 ? old : undefined;
     }
     /**
      * Enforces both guards on the delete path.
@@ -197,11 +338,47 @@ let MJUserRoleEntityServer = MJUserRoleEntityServer_1 = class MJUserRoleEntitySe
             return this.refuse('delete', 'You may only revoke a role that you hold yourself. Revoking a role you do not hold would let you ' +
                 'strip authority you were never granted. Ask an Owner to make this change.');
         }
-        const rejection = this.systemUserRoleRemovalReason();
-        if (rejection) {
-            return this.refuse('delete', rejection);
+        // Judged against the STORED pair: a delete removes the row by ID, whatever unsaved edits
+        // this object carries.
+        let deleted = false;
+        try {
+            const rejection = await this.systemUserDeleteRejection();
+            if (rejection) {
+                return this.refuse('delete', rejection);
+            }
+            deleted = await super.Delete(options);
+            return deleted;
+        }
+        finally {
+            this.settleGroupWrite(deleted);
+        }
+    }
+    /**
+     * Guard B's transaction-group rule for this write. When it passes, the write's place in the
+     * group is reserved in the same step, so a second guarded write in flight at once sees it.
+     */
+    groupRefusal(concernsSystemUser) {
+        this.pendingGroupWrite = null;
+        const refusal = GuardedTransactionGroupRefusal(this.TransactionGroup, concernsSystemUser);
+        if (!refusal) {
+            this.pendingGroupWrite = ReserveGuardedTransactionGroupWrite(this.TransactionGroup, concernsSystemUser);
+        }
+        return refusal;
+    }
+    /** Guard B for a delete: the transaction-group rule, then the removal check on stored state. */
+    async systemUserDeleteRejection() {
+        const priorUserID = this.priorValue('UserID', this.UserID);
+        const concernsSystemUser = priorUserID === undefined || IsSystemUserID(priorUserID);
+        const groupRefusal = this.groupRefusal(concernsSystemUser);
+        if (groupRefusal) {
+            return groupRefusal;
+        }
+        try {
+            return await this.storedPairRemovalReason();
+        }
+        catch (e) {
+            return MJUserRoleEntityServer_1.unverifiableMessage(e);
         }
-        return super.Delete(options);
     }
     /**
      * Invariants 1 and 2's forward half — the role being assigned must be one the caller holds.
@@ -285,16 +462,20 @@ let MJUserRoleEntityServer = MJUserRoleEntityServer_1 = class MJUserRoleEntitySe
         return caller.Type?.trim().toLowerCase() === 'owner';
     }
     /**
-     * Why this role may not be taken off this user, or null when it may.
-     * Only ever rejects for the system user; every other user is unaffected.
+     * Why taking `roleID` off `userID` would cost the system user field access, or null when it
+     * would not. Only ever rejects for the system user; every other user is unaffected.
+     *
+     * Parameterized because the delete path and the re-point path both ask about the pair as
+     * STORED, which on a re-point is only available from the dirty fields' old values.
      */
-    systemUserRoleRemovalReason() {
-        const systemUser = UserCache.Instance?.GetSystemUser?.();
-        if (!systemUser || !this.UserID || !this.RoleID || !UUIDsEqual(systemUser.ID, this.UserID)) {
+    async systemUserRoleRemovalReason(userID, roleID) {
+        if (!roleID || !IsSystemUserID(userID)) {
             return null; // not the system user — nothing to guard
         }
+        // The role set and the rules as stored now: the caches may not yet show a role assigned or
+        // removed, or a rule edited, a moment ago.
         const provider = this.ProviderToUse;
-        const lost = FindSystemUserFieldAccessViolations(provider, systemUser, { WithoutRoleID: this.RoleID });
+        const lost = await StoredRoleRemovalViolations(this.RunViewProviderToUse, provider, roleID);
         if (lost.length === 0) {
             return null;
         }
@@ -323,6 +504,10 @@ let MJUserRoleEntityServer = MJUserRoleEntityServer_1 = class MJUserRoleEntitySe
         if (restricted.length === 0) {
             return null;
         }
+        return MJUserRoleEntityServer_1.assignmentRejectionMessage(restricted);
+    }
+    /** The refusal for assigning the system user a role that denies a field on the named entities. */
+    static assignmentRejectionMessage(restricted) {
         const shown = restricted.slice(0, 3).join(', ');
         const more = restricted.length > 3 ? `, and ${restricted.length - 3} more` : '';
         return (`This role denies access to at least one field (on ${shown}${more}), so it cannot be assigned to the MJ system user. ` +
@@ -332,7 +517,8 @@ let MJUserRoleEntityServer = MJUserRoleEntityServer_1 = class MJUserRoleEntitySe
     }
     /**
      * Names of entities where this role carries at least one RESTRICTING field rule — a `Deny`
-     * on any verb. Walks cached metadata only — no database access. Runs only when the system
+     * on any verb, under any spelling (the column's collation stores `'deny'` too, and enforcement
+     * honors it). Walks cached metadata only — no database access. Runs only when the system
      * user is the save target, which is rare.
      *
      * Grants and neutrals are ignored, and must be: the system user holds the standard roles
@@ -354,7 +540,7 @@ let MJUserRoleEntityServer = MJUserRoleEntityServer_1 = class MJUserRoleEntitySe
         const names = [];
         for (const entity of md.Entities) {
             const hit = entity.Fields.some(f => f.HasFieldPermissions &&
-                f.FieldPermissions.some(fp => UUIDsEqual(fp.RoleID, roleID) && IsRestrictingFieldRule(fp)));
+                f.FieldPermissions.some(fp => UUIDsEqual(fp.RoleID, roleID) && IsRestrictingFieldRuleAnyCase(fp)));
             if (hit) {
                 names.push(entity.Name);
             }

package/dist/custom/MJUserRoleEntityServer.server.js.map

@@ -1 +1 @@
-{"version":3,"file":"MJUserRoleEntityServer.server.js","sourceRoot":"","sources":["../../src/custom/MJUserRoleEntityServer.server.ts"],"names":[],"mappings":";;;;;;;AAAA,OAAO,EACH,UAAU,EACV,gBAAgB,EAKhB,sBAAsB,EACtB,QAAQ,EAER,mBAAmB,EACnB,mBAAmB,GAEtB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,EAAE,mCAAmC,EAAE,SAAS,EAAE,MAAM,2CAA2C,CAAC;AAE3G;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6HG;AAEI,IAAM,sBAAsB,8BAA5B,MAAM,sBAAuB,SAAQ,gBAAgB;IACxC,QAAQ;QACpB,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;QAEhC,yEAAyE;QACzE,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;YACxB,IAAI,CAAC,gBAAgB,CACjB,MAAM,EACN,IAAI,CAAC,MAAM,EACX,4FAA4F;gBAC5F,2EAA2E,CAC9E,CAAC;YACF,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBACf,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC;YACvC,CAAC;QACL,CAAC;QAED,6FAA6F;QAC7F,8FAA8F;QAC9F,yEAAyE;QACzE,MAAM,SAAS,GAAG,wBAAsB,CAAC,yBAAyB,CAC9D,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,aAA6C,CACrD,CAAC;QACF,IAAI,SAAS,EAAE,CAAC;YACZ,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,mBAAmB,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC;QAC/G,CAAC;QAED,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC;QAC9D,OAAO,MAAM,CAAC;IAClB,CAAC;IAED;;;;;;OAMG;IACa,KAAK,CAAC,IAAI,CAAC,OAA2B;QAClD,IAAI,OAAO,EAAE,UAAU,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;YAC/C,OAAO,IAAI,CAAC,MAAM,CACd,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAClC,6FAA6F;gBAC7F,mFAAmF,CACtF,CAAC;QACN,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;OAqBG;IACa,KAAK,CAAC,MAAM,CAAC,OAA6B;QACtD,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9D,OAAO,IAAI,CAAC,MAAM,CACd,QAAQ,EACR,mGAAmG;gBACnG,2EAA2E,CAC9E,CAAC;QACN,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,2BAA2B,EAAE,CAAC;QACrD,IAAI,SAAS,EAAE,CAAC;YACZ,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC5C,CAAC;QAED,OAAO,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC;IAED;;;;OAIG;IACK,gBAAgB,CAAC,MAAwB,EAAE,MAAiC,EAAE,OAAe;QACjG,IAAI,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/B,OAAO;QACX,CAAC;QACD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,mBAAmB,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,IAAI,IAAI,EAAE,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC;IAChH,CAAC;IAED;;;;;;;;;OASG;IACK,qBAAqB,CAAC,MAAwB;QAClD,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,QAAqC,CAAC;QACzF,IAAI,CAAC,WAAW,EAAE,CAAC;YACf,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,mBAAmB,CACtC,QAAQ,EACR,6FAA6F;gBAC7F,0FAA0F;gBAC1F,qBAAqB,EACrB,WAAW,IAAI,IAAI,EACnB,mBAAmB,CAAC,OAAO,CAC9B,CAAC,CAAC;YACH,OAAO;QACX,CAAC;QACD,IAAI,CAAC,gBAAgB,CACjB,MAAM,EACN,WAAW,EACX,uGAAuG;YACvG,uFAAuF,CAC1F,CAAC;IACN,CAAC;IAED,4GAA4G;IACpG,MAAM,CAAC,IAAoC,EAAE,OAAe;QAChE,MAAM,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;QACtC,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC;QACvB,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC;QACnB,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;QACzB,MAAM,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAC9B,MAAM,CAAC,OAAO,GAAG,IAAI,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC;QACxC,OAAO,KAAK,CAAC;IACjB,CAAC;IAED;;;;;;;OAOG;IACK,eAAe,CAAC,MAAiC;QACrD,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC;QAC/B,OAAO,CAAC,MAAM,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC7F,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACK,aAAa;QACjB,MAAM,MAAM,GAAoB,IAAI,CAAC,UAAU,CAAC;QAChD,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC;IACzD,CAAC;IAED;;;OAGG;IACK,2BAA2B;QAC/B,MAAM,UAAU,GAAG,SAAS,CAAC,QAAQ,EAAE,aAAa,EAAE,EAAE,CAAC;QACzD,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACzF,OAAO,IAAI,CAAC,CAAC,yCAAyC;QAC1D,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,aAA6C,CAAC;QACpE,MAAM,IAAI,GAAG,mCAAmC,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE,aAAa,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACvG,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpB,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrF,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,OAAO,CACH,2EAA2E,IAAI,CAAC,MAAM,YAAY;YAClG,IAAI,KAAK,GAAG,IAAI,wFAAwF;YACxG,wGAAwG;YACxG,+EAA+E,CAClF,CAAC;IACN,CAAC;IAED;;;OAGG;IACI,MAAM,CAAC,yBAAyB,CAAC,MAAqB,EAAE,MAAqB,EAAE,QAA4B;QAC9G,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;YACrB,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,iFAAiF;QACjF,8CAA8C;QAC9C,MAAM,UAAU,GAAG,SAAS,CAAC,QAAQ,EAAE,aAAa,EAAE,EAAE,CAAC;QACzD,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC;YACpD,OAAO,IAAI,CAAC,CAAC,yCAAyC;QAC1D,CAAC;QAED,MAAM,UAAU,GAAG,wBAAsB,CAAC,wCAAwC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACrG,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChD,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,UAAU,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,OAAO,CACH,qDAAqD,KAAK,GAAG,IAAI,qDAAqD;YACtH,iGAAiG;YACjG,oEAAoE;YACpE,4EAA4E,CAC/E,CAAC;IACN,CAAC;IAED;;;;;;;;;;;;;;;;;;OAkBG;IACK,MAAM,CAAC,wCAAwC,CAAC,MAAc,EAAE,QAA4B;QAChG,MAAM,EAAE,GAAG,QAAQ,IAAI,IAAI,QAAQ,EAAE,CAAC;QACtC,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,MAAM,MAAM,IAAI,EAAE,CAAC,QAAwB,EAAE,CAAC;YAC/C,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAC1B,CAAC,CAAC,EAAE,CACA,CAAC,CAAC,mBAAmB;gBACrB,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,sBAAsB,CAAC,EAAE,CAAC,CAAC,CACjG,CAAC;YACF,IAAI,GAAG,EAAE,CAAC;gBACN,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC5B,CAAC;QACL,CAAC;QACD,OAAO,KAAK,CAAC;IACjB,CAAC;CACJ,CAAA;AAjRY,sBAAsB;IADlC,aAAa,CAAC,UAAU,EAAE,gBAAgB,CAAC;GAC/B,sBAAsB,CAiRlC;;AAED;;;GAGG;AACH,MAAM,UAAU,0BAA0B;IACtC,QAAQ;AACZ,CAAC"}
+{"version":3,"file":"MJUserRoleEntityServer.server.js","sourceRoot":"","sources":["../../src/custom/MJUserRoleEntityServer.server.ts"],"names":[],"mappings":";;;;;;;AAAA,OAAO,EACH,UAAU,EACV,gBAAgB,EAKhB,QAAQ,EAER,mBAAmB,EACnB,mBAAmB,GAEtB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAC5E,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,EAAE,SAAS,EAAE,MAAM,2CAA2C,CAAC;AACtE,OAAO,EAAE,6BAA6B,EAAE,MAAM,yBAAyB,CAAC;AACxE,OAAO,EACH,8BAA8B,EAC9B,cAAc,EAEd,mCAAmC,EACnC,mCAAmC,EACnC,gCAAgC,EAChC,2BAA2B,GAC9B,MAAM,wBAAwB,CAAC;AAEhC,MAAM,qCAAqC,GACvC,2GAA2G;IAC3G,2GAA2G;IAC3G,qDAAqD,CAAC;AAE1D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoIG;AAEI,IAAM,sBAAsB,8BAA5B,MAAM,sBAAuB,SAAQ,gBAAgB;IAArD;;QACH,2GAA2G;QACnG,sBAAiB,GAAoC,IAAI,CAAC;IAkctE,CAAC;IAhcmB,QAAQ;QACpB,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;QAEhC,yEAAyE;QACzE,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;YACxB,IAAI,CAAC,gBAAgB,CACjB,MAAM,EACN,IAAI,CAAC,MAAM,EACX,4FAA4F;gBAC5F,2EAA2E,CAC9E,CAAC;YACF,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBACf,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC;YACvC,CAAC;QACL,CAAC;QAED,6FAA6F;QAC7F,8FAA8F;QAC9F,yEAAyE;QACzE,MAAM,SAAS,GAAG,wBAAsB,CAAC,yBAAyB,CAC9D,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,aAA6C,CACrD,CAAC;QACF,IAAI,SAAS,EAAE,CAAC;YACZ,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,mBAAmB,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC;QAC/G,CAAC;QAED,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC;QAC9D,OAAO,MAAM,CAAC;IAClB,CAAC;IAED;;;;;;OAMG;IACa,KAAK,CAAC,IAAI,CAAC,OAA2B;QAClD,IAAI,OAAO,EAAE,UAAU,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;YAC/C,OAAO,IAAI,CAAC,MAAM,CACd,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAClC,6FAA6F;gBAC7F,mFAAmF,CACtF,CAAC;QACN,CAAC;QACD,4FAA4F;QAC5F,sFAAsF;QACtF,IAAI,KAAK,GAAG,KAAK,CAAC;QAClB,IAAI,CAAC;YACD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,uBAAuB,EAAE,CAAC;YACvD,IAAI,SAAS,EAAE,CAAC;gBACZ,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;YACtE,CAAC;YACD,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAClC,OAAO,KAAK,CAAC;QACjB,CAAC;gBAAS,CAAC;YACP,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;IACL,CAAC;IAED;;;OAGG;IACK,gBAAgB,CAAC,QAAiB;QACtC,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAC;QACvC,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;QAC9B,IAAI,CAAC,QAAQ,EAAE,CAAC;YACZ,mCAAmC,CAAC,OAAO,CAAC,CAAC;QACjD,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,uBAAuB;QACjC,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3D,MAAM,kBAAkB,GAAG,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,WAAW,KAAK,SAAS,IAAI,cAAc,CAAC,WAAW,CAAC,CAAC;QACnH,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,CAAC;QAC3D,IAAI,YAAY,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACtC,OAAO,YAAY,CAAC;QACxB,CAAC;QACD,IAAI,CAAC;YACD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,wBAAwB,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YAC5E,OAAO,OAAO,IAAI,CAAC,MAAM,IAAI,CAAC,+BAA+B,EAAE,CAAC,CAAC;QACrE,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,OAAO,wBAAsB,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC;QACzD,CAAC;IACL,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,+BAA+B;QACzC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC;YACtF,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,gCAAgC,CAAC,IAAI,CAAC,oBAAoB,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAChG,MAAM,QAAQ,GAAG,wBAAsB,CAAC,sBAAsB,CAAC,QAAQ,EAAE,IAAI,CAAC,aAA6C,CAAC,CAAC;QAC7H,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,wBAAsB,CAAC,0BAA0B,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACpG,CAAC;IAED,gHAAgH;IACxG,SAAS;QACb,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3D,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3D,IAAI,WAAW,KAAK,SAAS,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YACzD,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,OAAO,CAAC,UAAU,CAAC,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1F,CAAC;IAED,sFAAsF;IAC9E,MAAM,CAAC,sBAAsB,CAAC,QAAkB,EAAE,QAA4B;QAClF,MAAM,EAAE,GAAG,QAAQ,IAAI,IAAI,QAAQ,EAAE,CAAC;QACtC,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC,CAAC;QAClC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;QAChC,KAAK,MAAM,MAAM,IAAI,EAAE,CAAC,QAAwB,EAAE,CAAC;YAC/C,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;gBAC3C,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC3B,CAAC;QACL,CAAC;QACD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;IACtB,CAAC;IAED,+FAA+F;IACvF,MAAM,CAAC,mBAAmB,CAAC,KAAc;QAC7C,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACtE,OAAO,+FAA+F,MAAM,EAAE,CAAC;IACnH,CAAC;IAED;;;;;;;;;;;;OAYG;IACK,KAAK,CAAC,wBAAwB;QAClC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;YACpB,OAAO,IAAI,CAAC,CAAC,8CAA8C;QAC/D,CAAC;QACD,OAAO,IAAI,CAAC,uBAAuB,EAAE,CAAC;IAC1C,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,uBAAuB;QACjC,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3D,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3D,IAAI,WAAW,KAAK,SAAS,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YACzD,OAAO,SAAS,CAAC,QAAQ,EAAE,aAAa,EAAE,EAAE,CAAC,CAAC,CAAC,qCAAqC,CAAC,CAAC,CAAC,IAAI,CAAC;QAChG,CAAC;QACD,OAAO,IAAI,CAAC,2BAA2B,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;IACtE,CAAC;IAED,gGAAgG;IACxF,UAAU,CAAC,SAA8B,EAAE,OAAsB;QACrE,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC;YAChB,OAAO,OAAO,CAAC;QACnB,CAAC;QACD,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC;QAC3B,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;IACvE,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;OAqBG;IACa,KAAK,CAAC,MAAM,CAAC,OAA6B;QACtD,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9D,OAAO,IAAI,CAAC,MAAM,CACd,QAAQ,EACR,mGAAmG;gBACnG,2EAA2E,CAC9E,CAAC;QACN,CAAC;QAED,yFAAyF;QACzF,uBAAuB;QACvB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC;YACD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,yBAAyB,EAAE,CAAC;YACzD,IAAI,SAAS,EAAE,CAAC;gBACZ,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;YAC5C,CAAC;YACD,OAAO,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACtC,OAAO,OAAO,CAAC;QACnB,CAAC;gBAAS,CAAC;YACP,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACnC,CAAC;IACL,CAAC;IAED;;;OAGG;IACK,YAAY,CAAC,kBAA2B;QAC5C,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;QAC9B,MAAM,OAAO,GAAG,8BAA8B,CAAC,IAAI,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;QAC1F,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,IAAI,CAAC,iBAAiB,GAAG,mCAAmC,CAAC,IAAI,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;QAC5G,CAAC;QACD,OAAO,OAAO,CAAC;IACnB,CAAC;IAED,gGAAgG;IACxF,KAAK,CAAC,yBAAyB;QACnC,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3D,MAAM,kBAAkB,GAAG,WAAW,KAAK,SAAS,IAAI,cAAc,CAAC,WAAW,CAAC,CAAC;QACpF,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,CAAC;QAC3D,IAAI,YAAY,EAAE,CAAC;YACf,OAAO,YAAY,CAAC;QACxB,CAAC;QACD,IAAI,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,uBAAuB,EAAE,CAAC;QAChD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,OAAO,wBAAsB,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC;QACzD,CAAC;IACL,CAAC;IAED;;;;OAIG;IACK,gBAAgB,CAAC,MAAwB,EAAE,MAAiC,EAAE,OAAe;QACjG,IAAI,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/B,OAAO;QACX,CAAC;QACD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,mBAAmB,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,IAAI,IAAI,EAAE,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC;IAChH,CAAC;IAED;;;;;;;;;OASG;IACK,qBAAqB,CAAC,MAAwB;QAClD,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,QAAqC,CAAC;QACzF,IAAI,CAAC,WAAW,EAAE,CAAC;YACf,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,mBAAmB,CACtC,QAAQ,EACR,6FAA6F;gBAC7F,0FAA0F;gBAC1F,qBAAqB,EACrB,WAAW,IAAI,IAAI,EACnB,mBAAmB,CAAC,OAAO,CAC9B,CAAC,CAAC;YACH,OAAO;QACX,CAAC;QACD,IAAI,CAAC,gBAAgB,CACjB,MAAM,EACN,WAAW,EACX,uGAAuG;YACvG,uFAAuF,CAC1F,CAAC;IACN,CAAC;IAED,4GAA4G;IACpG,MAAM,CAAC,IAAoC,EAAE,OAAe;QAChE,MAAM,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;QACtC,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC;QACvB,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC;QACnB,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;QACzB,MAAM,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAC9B,MAAM,CAAC,OAAO,GAAG,IAAI,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC;QACxC,OAAO,KAAK,CAAC;IACjB,CAAC;IAED;;;;;;;OAOG;IACK,eAAe,CAAC,MAAiC;QACrD,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC;QAC/B,OAAO,CAAC,MAAM,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC7F,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACK,aAAa;QACjB,MAAM,MAAM,GAAoB,IAAI,CAAC,UAAU,CAAC;QAChD,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC;IACzD,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,2BAA2B,CAAC,MAAqB,EAAE,MAAqB;QAClF,IAAI,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;YACrC,OAAO,IAAI,CAAC,CAAC,yCAAyC;QAC1D,CAAC;QAED,2FAA2F;QAC3F,2CAA2C;QAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,aAA6C,CAAC;QACpE,MAAM,IAAI,GAAG,MAAM,2BAA2B,CAAC,IAAI,CAAC,oBAAoB,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC5F,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpB,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrF,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,OAAO,CACH,2EAA2E,IAAI,CAAC,MAAM,YAAY;YAClG,IAAI,KAAK,GAAG,IAAI,wFAAwF;YACxG,wGAAwG;YACxG,+EAA+E,CAClF,CAAC;IACN,CAAC;IAED;;;OAGG;IACI,MAAM,CAAC,yBAAyB,CAAC,MAAqB,EAAE,MAAqB,EAAE,QAA4B;QAC9G,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;YACrB,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,iFAAiF;QACjF,8CAA8C;QAC9C,MAAM,UAAU,GAAG,SAAS,CAAC,QAAQ,EAAE,aAAa,EAAE,EAAE,CAAC;QACzD,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC;YACpD,OAAO,IAAI,CAAC,CAAC,yCAAyC;QAC1D,CAAC;QAED,MAAM,UAAU,GAAG,wBAAsB,CAAC,wCAAwC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACrG,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,OAAO,wBAAsB,CAAC,0BAA0B,CAAC,UAAU,CAAC,CAAC;IACzE,CAAC;IAED,kGAAkG;IAC1F,MAAM,CAAC,0BAA0B,CAAC,UAAoB;QAC1D,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChD,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,UAAU,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,OAAO,CACH,qDAAqD,KAAK,GAAG,IAAI,qDAAqD;YACtH,iGAAiG;YACjG,oEAAoE;YACpE,4EAA4E,CAC/E,CAAC;IACN,CAAC;IAED;;;;;;;;;;;;;;;;;;;OAmBG;IACK,MAAM,CAAC,wCAAwC,CAAC,MAAc,EAAE,QAA4B;QAChG,MAAM,EAAE,GAAG,QAAQ,IAAI,IAAI,QAAQ,EAAE,CAAC;QACtC,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,MAAM,MAAM,IAAI,EAAE,CAAC,QAAwB,EAAE,CAAC;YAC/C,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAC1B,CAAC,CAAC,EAAE,CACA,CAAC,CAAC,mBAAmB;gBACrB,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,6BAA6B,CAAC,EAAE,CAAC,CAAC,CACxG,CAAC;YACF,IAAI,GAAG,EAAE,CAAC;gBACN,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC5B,CAAC;QACL,CAAC;QACD,OAAO,KAAK,CAAC;IACjB,CAAC;CACJ,CAAA;AApcY,sBAAsB;IADlC,aAAa,CAAC,UAAU,EAAE,gBAAgB,CAAC;GAC/B,sBAAsB,CAoclC;;AAED;;;GAGG;AACH,MAAM,UAAU,0BAA0B;IACtC,QAAQ;AACZ,CAAC"}

package/dist/custom/MJUserViewEntityServer.server.d.ts

@@ -1,4 +1,4 @@
-import { EntityInfo, IMetadataProvider, ValidationResult } from "@memberjunction/core";
+import { EntityInfo, EntitySaveOptions, IMetadataProvider, ValidationResult } from "@memberjunction/core";
 import { MJUserViewEntityExtended } from '@memberjunction/core-entities';
 /**
  * Template data passed to the Smart Filter Generation Nunjucks prompt.
@@ -12,13 +12,29 @@ interface SmartFilterTemplateData extends Record<string, unknown> {
     listsSchema: string;
     listsFields: string;
     listDetailsFields: string;
+    alternateBaseViewName?: string;
+    alternateBaseViewDescription?: string;
 }
 export declare class MJUserViewEntityServer extends MJUserViewEntityExtended {
     /**
      * This property is hard-coded to true in this class because we DO support smart filters in this class. If you want to disable smart filters for a specific view you can override this property in your subclass and set it to false.
      */
     protected get SmartFilterImplemented(): boolean;
+    /**
+     * Applies the approval rules (see `ApplyApprovalRulesAsync`). The base save regenerates the
+     * WhereClause before it writes, so an approving save stamps the fingerprint after the write,
+     * from the definition as stored, with one more write.
+     */
+    Save(options?: EntitySaveOptions): Promise<boolean>;
     Validate(): ValidationResult;
+    /**
+     * Validates that a pinned `DisplayState.alternateBaseView` (if newly set or changed)
+     * corresponds to a registered, usable alternate base view on the view's target entity.
+     * Existing saved views whose pinned alternate base view did not change are allowed to save
+     * other edits (e.g. renaming or clearing the pin after an admin disabled the alternate view).
+     */
+    private validatePinnedAlternateBaseView;
+    private hasAlternateBaseViewChanged;
     /**
      * SECURITY: screens the SQL this view stores with the clause screen the RunView API applies to
      * client filters — its WhereClause (set directly, compiled from FilterState, or made by a Smart

package/dist/custom/MJUserViewEntityServer.server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"MJUserViewEntityServer.server.d.ts","sourceRoot":"","sources":["../../src/custom/MJUserViewEntityServer.server.ts"],"names":[],"mappings":"AACA,OAAO,EAAc,UAAU,EAAY,iBAAiB,EAAsD,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACjK,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAA;AAexE;;GAEG;AACH,UAAU,uBAAwB,SAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAC7D,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,uBAAuB,EAAE,MAAM,CAAC;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,MAAM,CAAC;CAC7B;AAED,qBACa,sBAAuB,SAAQ,wBAAwB;IAChE;;OAEG;IACH,cAAuB,sBAAsB,IAAI,OAAO,CAEvD;IAEe,QAAQ,IAAI,gBAAgB;IAQ5C;;;;;;;;OAQG;IACH,OAAO,CAAC,qBAAqB;IAc7B;;;OAGG;IACH,OAAO,CAAC,aAAa;IAQrB;;;OAGG;IACH,OAAO,CAAC,kBAAkB;IAoB1B;;;;OAIG;IACH,OAAO,CAAC,MAAM,CAAC,uBAAuB;IAItC;;;;;;;;OAQG;IACH,OAAO,CAAC,sCAAsC;IAyB9C;;;;OAIG;IACU,8BAA8B,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,GAAG,OAAO,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,MAAM,CAAA;KAAC,CAAC;IAkF5I;;;OAGG;IACH,SAAS,CAAC,iBAAiB,CAAC,UAAU,EAAE,UAAU,GAAG,uBAAuB;IAwC5E;;OAEG;IACH,SAAS,CAAC,4BAA4B,CAAC,UAAU,EAAE,UAAU,EAAE,EAAE,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,MAAM;CAoC1H"}
+{"version":3,"file":"MJUserViewEntityServer.server.d.ts","sourceRoot":"","sources":["../../src/custom/MJUserViewEntityServer.server.ts"],"names":[],"mappings":"AACA,OAAO,EAAc,UAAU,EAAE,iBAAiB,EAAsD,iBAAiB,EAAsD,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAC9N,OAAO,EAAmC,wBAAwB,EAAE,MAAM,+BAA+B,CAAA;AAgBzG;;GAEG;AACH,UAAU,uBAAwB,SAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAC7D,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,uBAAuB,EAAE,MAAM,CAAC;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,4BAA4B,CAAC,EAAE,MAAM,CAAC;CACzC;AAED,qBACa,sBAAuB,SAAQ,wBAAwB;IAChE;;OAEG;IACH,cAAuB,sBAAsB,IAAI,OAAO,CAEvD;IAED;;;;OAIG;IACmB,IAAI,CAAC,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC;IAwBzD,QAAQ,IAAI,gBAAgB;IAS5C;;;;;OAKG;IACH,OAAO,CAAC,+BAA+B;IAmCvC,OAAO,CAAC,2BAA2B;IAWnC;;;;;;;;OAQG;IACH,OAAO,CAAC,qBAAqB;IAc7B;;;OAGG;IACH,OAAO,CAAC,aAAa;IAQrB;;;OAGG;IACH,OAAO,CAAC,kBAAkB;IAoB1B;;;;OAIG;IACH,OAAO,CAAC,MAAM,CAAC,uBAAuB;IAItC;;;;;;;;OAQG;IACH,OAAO,CAAC,sCAAsC;IAyB9C;;;;OAIG;IACU,8BAA8B,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,GAAG,OAAO,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,MAAM,CAAA;KAAC,CAAC;IAwF5I;;;OAGG;IACH,SAAS,CAAC,iBAAiB,CAAC,UAAU,EAAE,UAAU,GAAG,uBAAuB;IA2D5E;;OAEG;IACH,SAAS,CAAC,4BAA4B,CAAC,UAAU,EAAE,UAAU,EAAE,EAAE,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,MAAM;CAoC1H"}