@memberjunction/core-entities-server 6.2.0-edge.7 → 6.2.0-edge.8

package/dist/custom/AnchoredConversationReadSecurityHook.d.ts

@@ -0,0 +1,22 @@
+import { PostRunViewHook } from '@memberjunction/core';
+/**
+ * Server-side `PostRunView` data hook enforcing Row-Level Security (RLS) and Field-Level Security (FLS)
+ * on anchored conversations (`MJ: Conversations` where `AnchorType IS NOT NULL`) and their comment
+ * messages (`MJ: Conversation Details`).
+ *
+ * Guarantees that even a raw `RunView` call over GraphQL, REST, or server code cannot return:
+ * - Anchored conversation threads (`MJ: Conversations`) attached to a linked record that `contextUser`
+ *   cannot read (entity permissions + RLS), or anchored/stamped with restricted fields (`AnchorKey` /
+ *   `AnchorMetadata.restrictedFields`) that `contextUser` is denied Read access to (FLS).
+ * - Comment messages (`MJ: Conversation Details`) belonging to any such anchored conversation thread.
+ *
+ * Never mutates `results.Results` in place (safe with frozen cache entries); returns a replacement
+ * `RunViewResult` whenever rows are filtered out.
+ */
+export declare const AnchoredConversationPostRunViewHook: PostRunViewHook;
+/**
+ * Ensures {@link AnchoredConversationPostRunViewHook} is registered in the global `PostRunView`
+ * data hooks store. Safe to call multiple times (idempotent).
+ */
+export declare function EnsureAnchoredConversationReadHookRegistered(): void;
+//# sourceMappingURL=AnchoredConversationReadSecurityHook.d.ts.map

package/dist/custom/AnchoredConversationReadSecurityHook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AnchoredConversationReadSecurityHook.d.ts","sourceRoot":"","sources":["../../src/custom/AnchoredConversationReadSecurityHook.ts"],"names":[],"mappings":"AAAA,OAAO,EAMH,eAAe,EAOlB,MAAM,sBAAsB,CAAC;AAmE9B;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,mCAAmC,EAAE,eA0CjD,CAAC;AA4SF;;;GAGG;AACH,wBAAgB,4CAA4C,IAAI,IAAI,CAKnE"}

package/dist/custom/AnchoredConversationReadSecurityHook.js

@@ -0,0 +1,293 @@
+import { BaseEntity, GetDataHooks, LogError, Metadata, RegisterDataHook, RunView, WellKnownUserSource } from '@memberjunction/core';
+import { EscapeSQLString, NormalizeUUID } from '@memberjunction/global';
+import { FilterAnchoredConversationsForUser } from '@memberjunction/core-entities';
+const INTERNAL_SECURITY_QUERY_PARAMS = new WeakSet();
+/**
+ * Resolves the entity name targeted by `params` without additional I/O.
+ */
+function resolveTargetEntityName(params) {
+    if (typeof params.EntityName === 'string' && params.EntityName.trim().length > 0) {
+        return params.EntityName.trim();
+    }
+    const viewEntityName = params.ViewEntity?.Get('Entity');
+    if (typeof viewEntityName === 'string' && viewEntityName.trim().length > 0) {
+        return viewEntityName.trim();
+    }
+    return '';
+}
+function resolveProviderForUser(contextUser) {
+    return (contextUser.OwningProvider ??
+        Metadata.Provider ?? // global-provider-ok: fallback when UserInfo was constructed without an OwningProvider
+        null);
+}
+function readRowField(row, fieldName) {
+    if (!row || typeof row !== 'object') {
+        return undefined;
+    }
+    if (row instanceof BaseEntity) {
+        return row.Get(fieldName);
+    }
+    return row[fieldName];
+}
+function hasOwnOrEntityField(row, fieldName) {
+    if (!row || typeof row !== 'object') {
+        return false;
+    }
+    if (row instanceof BaseEntity) {
+        return true;
+    }
+    return Object.prototype.hasOwnProperty.call(row, fieldName);
+}
+/**
+ * Server-side `PostRunView` data hook enforcing Row-Level Security (RLS) and Field-Level Security (FLS)
+ * on anchored conversations (`MJ: Conversations` where `AnchorType IS NOT NULL`) and their comment
+ * messages (`MJ: Conversation Details`).
+ *
+ * Guarantees that even a raw `RunView` call over GraphQL, REST, or server code cannot return:
+ * - Anchored conversation threads (`MJ: Conversations`) attached to a linked record that `contextUser`
+ *   cannot read (entity permissions + RLS), or anchored/stamped with restricted fields (`AnchorKey` /
+ *   `AnchorMetadata.restrictedFields`) that `contextUser` is denied Read access to (FLS).
+ * - Comment messages (`MJ: Conversation Details`) belonging to any such anchored conversation thread.
+ *
+ * Never mutates `results.Results` in place (safe with frozen cache entries); returns a replacement
+ * `RunViewResult` whenever rows are filtered out.
+ */
+export const AnchoredConversationPostRunViewHook = async (params, results, contextUser) => {
+    if (!results?.Success ||
+        !Array.isArray(results.Results) ||
+        results.Results.length === 0 ||
+        !contextUser ||
+        INTERNAL_SECURITY_QUERY_PARAMS.has(params)) {
+        return results;
+    }
+    const entityName = resolveTargetEntityName(params);
+    if (entityName !== 'MJ: Conversations' && entityName !== 'MJ: Conversation Details') {
+        return results;
+    }
+    const provider = resolveProviderForUser(contextUser);
+    if (!provider || provider.ProviderType !== 'Database') {
+        return results;
+    }
+    if (WellKnownUserSource.Instance.IsSystemUser(contextUser)) {
+        return results;
+    }
+    try {
+        if (entityName === 'MJ: Conversations') {
+            return await filterConversationsRunViewResult(provider, contextUser, results);
+        }
+        return await filterConversationDetailsRunViewResult(provider, contextUser, results);
+    }
+    catch (error) {
+        LogError(`AnchoredConversationPostRunViewHook failed on ${entityName}: ${error instanceof Error ? error.message : String(error)}`);
+        return results;
+    }
+};
+async function filterConversationsRunViewResult(provider, contextUser, results) {
+    const rows = results.Results;
+    // Check if any row is missing security columns due to a narrow `Fields` projection
+    const missingMetadataIds = [];
+    for (const row of rows) {
+        const hasSecurityCols = hasOwnOrEntityField(row, 'AnchorType') &&
+            hasOwnOrEntityField(row, 'LinkedEntityID') &&
+            hasOwnOrEntityField(row, 'LinkedRecordID') &&
+            hasOwnOrEntityField(row, 'AnchorKey') &&
+            hasOwnOrEntityField(row, 'AnchorMetadata');
+        if (!hasSecurityCols) {
+            const id = String(readRowField(row, 'ID') ?? '').trim();
+            if (id) {
+                missingMetadataIds.push(id);
+            }
+        }
+    }
+    const hydratedById = new Map();
+    if (missingMetadataIds.length > 0) {
+        const fetched = await fetchConversationsSecurityMetadataByIds(provider, contextUser, missingMetadataIds, false);
+        for (const item of fetched) {
+            if (item.ID) {
+                hydratedById.set(NormalizeUUID(item.ID), item);
+            }
+        }
+    }
+    // Collect anchored candidates
+    const anchoredCandidates = [];
+    for (let i = 0; i < rows.length; i++) {
+        const row = rows[i];
+        const rowId = String(readRowField(row, 'ID') ?? '').trim();
+        const hydrated = rowId ? hydratedById.get(NormalizeUUID(rowId)) : undefined;
+        const anchorType = (hydrated ? hydrated.AnchorType : readRowField(row, 'AnchorType'));
+        const linkedEntityId = (hydrated ? hydrated.LinkedEntityID : readRowField(row, 'LinkedEntityID'));
+        const linkedRecordId = (hydrated ? hydrated.LinkedRecordID : readRowField(row, 'LinkedRecordID'));
+        if (!anchorType && (!linkedEntityId || !linkedRecordId)) {
+            continue;
+        }
+        // Only filter anchored comment threads (or conversations linked to a record that carry an anchor)
+        if (!anchorType) {
+            continue;
+        }
+        const anchorKey = (hydrated ? hydrated.AnchorKey : readRowField(row, 'AnchorKey'));
+        const anchorMetadata = (hydrated ? hydrated.AnchorMetadata : readRowField(row, 'AnchorMetadata'));
+        const anchorMetadataObject = (hydrated ? hydrated.AnchorMetadataObject : readRowField(row, 'AnchorMetadataObject'));
+        anchoredCandidates.push({
+            __rowIndex: i,
+            ID: rowId || undefined,
+            LinkedEntityID: linkedEntityId ?? null,
+            LinkedRecordID: linkedRecordId ?? null,
+            AnchorType: anchorType,
+            AnchorKey: anchorKey ?? null,
+            AnchorMetadata: anchorMetadata ?? null,
+            AnchorMetadataObject: anchorMetadataObject ?? null
+        });
+    }
+    if (anchoredCandidates.length === 0) {
+        return results;
+    }
+    const allowedAnchored = await FilterAnchoredConversationsForUser(provider, contextUser, anchoredCandidates);
+    if (allowedAnchored.length === anchoredCandidates.length) {
+        return results;
+    }
+    const allowedRowIndexes = new Set(allowedAnchored.map((c) => c.__rowIndex));
+    const anchoredRowIndexes = new Set(anchoredCandidates.map((c) => c.__rowIndex));
+    const filteredRows = rows.filter((_row, index) => !anchoredRowIndexes.has(index) || allowedRowIndexes.has(index));
+    const removedCount = rows.length - filteredRows.length;
+    return {
+        ...results,
+        Results: filteredRows,
+        RowCount: filteredRows.length,
+        TotalRowCount: Math.max(filteredRows.length, (results.TotalRowCount ?? results.RowCount ?? rows.length) - removedCount)
+    };
+}
+async function filterConversationDetailsRunViewResult(provider, contextUser, results) {
+    const rows = results.Results;
+    const missingConvIdDetailIds = [];
+    for (const row of rows) {
+        if (!hasOwnOrEntityField(row, 'ConversationID')) {
+            const detailId = String(readRowField(row, 'ID') ?? '').trim();
+            if (detailId) {
+                missingConvIdDetailIds.push(detailId);
+            }
+        }
+    }
+    const convIdByDetailId = new Map();
+    if (missingConvIdDetailIds.length > 0) {
+        const fetchedDetails = await fetchDetailConversationIdsByIds(provider, contextUser, missingConvIdDetailIds);
+        for (const d of fetchedDetails) {
+            if (d.ID && d.ConversationID) {
+                convIdByDetailId.set(NormalizeUUID(d.ID), d.ConversationID);
+            }
+        }
+    }
+    const conversationIdsByNorm = new Map();
+    const rowConvNormByIndex = new Map();
+    for (let i = 0; i < rows.length; i++) {
+        const row = rows[i];
+        let convId = String(readRowField(row, 'ConversationID') ?? '').trim();
+        if (!convId) {
+            const detailId = String(readRowField(row, 'ID') ?? '').trim();
+            if (detailId) {
+                convId = convIdByDetailId.get(NormalizeUUID(detailId)) ?? '';
+            }
+        }
+        if (convId) {
+            const norm = NormalizeUUID(convId);
+            conversationIdsByNorm.set(norm, convId);
+            rowConvNormByIndex.set(i, norm);
+        }
+    }
+    if (conversationIdsByNorm.size === 0) {
+        return results;
+    }
+    // Fetch only parent conversations that are anchored (`AnchorType IS NOT NULL`)
+    const anchoredParents = await fetchConversationsSecurityMetadataByIds(provider, contextUser, [...conversationIdsByNorm.values()], true);
+    if (anchoredParents.length === 0) {
+        return results;
+    }
+    const allowedParents = await FilterAnchoredConversationsForUser(provider, contextUser, anchoredParents);
+    if (allowedParents.length === anchoredParents.length) {
+        return results;
+    }
+    const allowedNormIds = new Set(allowedParents.map((c) => NormalizeUUID(String(c.ID ?? ''))));
+    const deniedNormIds = new Set();
+    for (const parent of anchoredParents) {
+        const norm = NormalizeUUID(String(parent.ID ?? ''));
+        if (norm && !allowedNormIds.has(norm)) {
+            deniedNormIds.add(norm);
+        }
+    }
+    if (deniedNormIds.size === 0) {
+        return results;
+    }
+    const filteredRows = rows.filter((_row, index) => {
+        const convNorm = rowConvNormByIndex.get(index);
+        return !convNorm || !deniedNormIds.has(convNorm);
+    });
+    const removedCount = rows.length - filteredRows.length;
+    return {
+        ...results,
+        Results: filteredRows,
+        RowCount: filteredRows.length,
+        TotalRowCount: Math.max(filteredRows.length, (results.TotalRowCount ?? results.RowCount ?? rows.length) - removedCount)
+    };
+}
+async function fetchConversationsSecurityMetadataByIds(provider, contextUser, conversationIds, anchoredOnly) {
+    const uniqueEscaped = Array.from(new Set(conversationIds
+        .map((id) => id.trim())
+        .filter((id) => id.length > 0)
+        .map((id) => `'${EscapeSQLString(id)}'`)));
+    if (uniqueEscaped.length === 0) {
+        return [];
+    }
+    const systemUser = (await WellKnownUserSource.Instance.GetSystemUser(provider)) ?? contextUser;
+    const rv = RunView.FromMetadataProvider(provider);
+    const filterClauses = [`ID IN (${uniqueEscaped.join(',')})`];
+    if (anchoredOnly) {
+        filterClauses.push(`AnchorType IS NOT NULL`);
+    }
+    const params = {
+        EntityName: 'MJ: Conversations',
+        ExtraFilter: filterClauses.join(' AND '),
+        Fields: ['ID', 'LinkedEntityID', 'LinkedRecordID', 'AnchorType', 'AnchorKey', 'AnchorMetadata'],
+        ResultType: 'simple'
+    };
+    INTERNAL_SECURITY_QUERY_PARAMS.add(params);
+    const res = await rv.RunView(params, systemUser);
+    if (!res?.Success || !Array.isArray(res.Results)) {
+        return [];
+    }
+    return res.Results;
+}
+async function fetchDetailConversationIdsByIds(provider, contextUser, detailIds) {
+    const uniqueEscaped = Array.from(new Set(detailIds
+        .map((id) => id.trim())
+        .filter((id) => id.length > 0)
+        .map((id) => `'${EscapeSQLString(id)}'`)));
+    if (uniqueEscaped.length === 0) {
+        return [];
+    }
+    const systemUser = (await WellKnownUserSource.Instance.GetSystemUser(provider)) ?? contextUser;
+    const rv = RunView.FromMetadataProvider(provider);
+    const params = {
+        EntityName: 'MJ: Conversation Details',
+        ExtraFilter: `ID IN (${uniqueEscaped.join(',')})`,
+        Fields: ['ID', 'ConversationID'],
+        ResultType: 'simple'
+    };
+    INTERNAL_SECURITY_QUERY_PARAMS.add(params);
+    const res = await rv.RunView(params, systemUser);
+    if (!res?.Success || !Array.isArray(res.Results)) {
+        return [];
+    }
+    return res.Results;
+}
+/**
+ * Ensures {@link AnchoredConversationPostRunViewHook} is registered in the global `PostRunView`
+ * data hooks store. Safe to call multiple times (idempotent).
+ */
+export function EnsureAnchoredConversationReadHookRegistered() {
+    const existing = GetDataHooks('PostRunView');
+    if (!existing.includes(AnchoredConversationPostRunViewHook)) {
+        RegisterDataHook('PostRunView', AnchoredConversationPostRunViewHook);
+    }
+}
+// Auto-register when @memberjunction/core-entities-server is loaded
+EnsureAnchoredConversationReadHookRegistered();
+//# sourceMappingURL=AnchoredConversationReadSecurityHook.js.map

package/dist/custom/AnchoredConversationReadSecurityHook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AnchoredConversationReadSecurityHook.js","sourceRoot":"","sources":["../../src/custom/AnchoredConversationReadSecurityHook.ts"],"names":[],"mappings":"AAAA,OAAO,EACH,UAAU,EACV,YAAY,EAEZ,QAAQ,EACR,QAAQ,EAER,gBAAgB,EAChB,OAAO,EAIP,mBAAmB,EACtB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACxE,OAAO,EAEH,kCAAkC,EAErC,MAAM,+BAA+B,CAAC;AAEvC,MAAM,8BAA8B,GAAG,IAAI,OAAO,EAAU,CAAC;AAiB7D;;GAEG;AACH,SAAS,uBAAuB,CAAC,MAAqB;IAClD,IAAI,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/E,OAAO,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;IACpC,CAAC;IACD,MAAM,cAAc,GAAG,MAAM,CAAC,UAAU,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;IACxD,IAAI,OAAO,cAAc,KAAK,QAAQ,IAAI,cAAc,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzE,OAAO,cAAc,CAAC,IAAI,EAAE,CAAC;IACjC,CAAC;IACD,OAAO,EAAE,CAAC;AACd,CAAC;AAED,SAAS,sBAAsB,CAAC,WAAqB;IACjD,OAAO,CACH,WAAW,CAAC,cAAc;QAC1B,QAAQ,CAAC,QAAQ,IAAI,uFAAuF;QAC5G,IAAI,CACP,CAAC;AACN,CAAC;AAED,SAAS,YAAY,CAAC,GAAY,EAAE,SAAiB;IACjD,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAClC,OAAO,SAAS,CAAC;IACrB,CAAC;IACD,IAAI,GAAG,YAAY,UAAU,EAAE,CAAC;QAC5B,OAAO,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC9B,CAAC;IACD,OAAQ,GAA+B,CAAC,SAAS,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAY,EAAE,SAAiB;IACxD,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAClC,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,IAAI,GAAG,YAAY,UAAU,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,OAAO,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;AAChE,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAAoB,KAAK,EACrE,MAAqB,EACrB,OAAsB,EACtB,WAAiC,EACX,EAAE;IACxB,IACI,CAAC,OAAO,EAAE,OAAO;QACjB,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC;QAC/B,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;QAC5B,CAAC,WAAW;QACZ,8BAA8B,CAAC,GAAG,CAAC,MAAM,CAAC,EAC5C,CAAC;QACC,OAAO,OAAO,CAAC;IACnB,CAAC;IAED,MAAM,UAAU,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;IACnD,IAAI,UAAU,KAAK,mBAAmB,IAAI,UAAU,KAAK,0BAA0B,EAAE,CAAC;QAClF,OAAO,OAAO,CAAC;IACnB,CAAC;IAED,MAAM,QAAQ,GAAG,sBAAsB,CAAC,WAAW,CAAC,CAAC;IACrD,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,YAAY,KAAK,UAAU,EAAE,CAAC;QACpD,OAAO,OAAO,CAAC;IACnB,CAAC;IAED,IAAI,mBAAmB,CAAC,QAAQ,CAAC,YAAY,CAAC,WAAW,CAAC,EAAE,CAAC;QACzD,OAAO,OAAO,CAAC;IACnB,CAAC;IAED,IAAI,CAAC;QACD,IAAI,UAAU,KAAK,mBAAmB,EAAE,CAAC;YACrC,OAAO,MAAM,gCAAgC,CAAC,QAAQ,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;QAClF,CAAC;QACD,OAAO,MAAM,sCAAsC,CAAC,QAAQ,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;IACxF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,QAAQ,CACJ,iDAAiD,UAAU,KACvD,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACzD,EAAE,CACL,CAAC;QACF,OAAO,OAAO,CAAC;IACnB,CAAC;AACL,CAAC,CAAC;AAEF,KAAK,UAAU,gCAAgC,CAC3C,QAA2B,EAC3B,WAAqB,EACrB,OAAsB;IAEtB,MAAM,IAAI,GAAG,OAAO,CAAC,OAAoB,CAAC;IAE1C,mFAAmF;IACnF,MAAM,kBAAkB,GAAa,EAAE,CAAC;IACxC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,eAAe,GACjB,mBAAmB,CAAC,GAAG,EAAE,YAAY,CAAC;YACtC,mBAAmB,CAAC,GAAG,EAAE,gBAAgB,CAAC;YAC1C,mBAAmB,CAAC,GAAG,EAAE,gBAAgB,CAAC;YAC1C,mBAAmB,CAAC,GAAG,EAAE,WAAW,CAAC;YACrC,mBAAmB,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;QAC/C,IAAI,CAAC,eAAe,EAAE,CAAC;YACnB,MAAM,EAAE,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACxD,IAAI,EAAE,EAAE,CAAC;gBACL,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAChC,CAAC;QACL,CAAC;IACL,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,GAAG,EAAqC,CAAC;IAClE,IAAI,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,MAAM,uCAAuC,CACzD,QAAQ,EACR,WAAW,EACX,kBAAkB,EAClB,KAAK,CACR,CAAC;QACF,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;YACzB,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;gBACV,YAAY,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;YACnD,CAAC;QACL,CAAC;IACL,CAAC;IAED,8BAA8B;IAC9B,MAAM,kBAAkB,GAAkE,EAAE,CAAC;IAC7F,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,MAAM,KAAK,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3D,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAE5E,MAAM,UAAU,GAAG,CACf,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,EAAE,YAAY,CAAC,CAC7B,CAAC;QACxC,MAAM,cAAc,GAAG,CACnB,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAC9C,CAAC;QAC/B,MAAM,cAAc,GAAG,CACnB,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAC9C,CAAC;QAE/B,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,cAAc,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;YACtD,SAAS;QACb,CAAC;QACD,kGAAkG;QAClG,IAAI,CAAC,UAAU,EAAE,CAAC;YACd,SAAS;QACb,CAAC;QAED,MAAM,SAAS,GAAG,CACd,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,EAAE,WAAW,CAAC,CACpC,CAAC;QAC/B,MAAM,cAAc,GAAG,CACnB,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAC9C,CAAC;QAC/B,MAAM,oBAAoB,GAAG,CACzB,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,EAAE,sBAAsB,CAAC,CACvC,CAAC;QAElD,kBAAkB,CAAC,IAAI,CAAC;YACpB,UAAU,EAAE,CAAC;YACb,EAAE,EAAE,KAAK,IAAI,SAAS;YACtB,cAAc,EAAE,cAAc,IAAI,IAAI;YACtC,cAAc,EAAE,cAAc,IAAI,IAAI;YACtC,UAAU,EAAE,UAAU;YACtB,SAAS,EAAE,SAAS,IAAI,IAAI;YAC5B,cAAc,EAAE,cAAc,IAAI,IAAI;YACtC,oBAAoB,EAAE,oBAAoB,IAAI,IAAI;SACrD,CAAC,CAAC;IACP,CAAC;IAED,IAAI,kBAAkB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClC,OAAO,OAAO,CAAC;IACnB,CAAC;IAED,MAAM,eAAe,GAAG,MAAM,kCAAkC,CAC5D,QAAQ,EACR,WAAW,EACX,kBAAkB,CACrB,CAAC;IACF,IAAI,eAAe,CAAC,MAAM,KAAK,kBAAkB,CAAC,MAAM,EAAE,CAAC;QACvD,OAAO,OAAO,CAAC;IACnB,CAAC;IAED,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAS,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;IACpF,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAS,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;IAExF,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAC5B,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,CAClF,CAAC;IACF,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC;IAEvD,OAAO;QACH,GAAG,OAAO;QACV,OAAO,EAAE,YAAY;QACrB,QAAQ,EAAE,YAAY,CAAC,MAAM;QAC7B,aAAa,EAAE,IAAI,CAAC,GAAG,CACnB,YAAY,CAAC,MAAM,EACnB,CAAC,OAAO,CAAC,aAAa,IAAI,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,YAAY,CAC5E;KACJ,CAAC;AACN,CAAC;AAED,KAAK,UAAU,sCAAsC,CACjD,QAA2B,EAC3B,WAAqB,EACrB,OAAsB;IAEtB,MAAM,IAAI,GAAG,OAAO,CAAC,OAAoB,CAAC;IAE1C,MAAM,sBAAsB,GAAa,EAAE,CAAC;IAC5C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACrB,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,gBAAgB,CAAC,EAAE,CAAC;YAC9C,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAC9D,IAAI,QAAQ,EAAE,CAAC;gBACX,sBAAsB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC1C,CAAC;QACL,CAAC;IACL,CAAC;IAED,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAkB,CAAC;IACnD,IAAI,sBAAsB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpC,MAAM,cAAc,GAAG,MAAM,+BAA+B,CACxD,QAAQ,EACR,WAAW,EACX,sBAAsB,CACzB,CAAC;QACF,KAAK,MAAM,CAAC,IAAI,cAAc,EAAE,CAAC;YAC7B,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,cAAc,EAAE,CAAC;gBAC3B,gBAAgB,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,cAAc,CAAC,CAAC;YAChE,CAAC;QACL,CAAC;IACL,CAAC;IAED,MAAM,qBAAqB,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxD,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAkB,CAAC;IAErD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,MAAM,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,gBAAgB,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACtE,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAC9D,IAAI,QAAQ,EAAE,CAAC;gBACX,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;YACjE,CAAC;QACL,CAAC;QACD,IAAI,MAAM,EAAE,CAAC;YACT,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;YACnC,qBAAqB,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACxC,kBAAkB,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QACpC,CAAC;IACL,CAAC;IAED,IAAI,qBAAqB,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACnC,OAAO,OAAO,CAAC;IACnB,CAAC;IAED,+EAA+E;IAC/E,MAAM,eAAe,GAAG,MAAM,uCAAuC,CACjE,QAAQ,EACR,WAAW,EACX,CAAC,GAAG,qBAAqB,CAAC,MAAM,EAAE,CAAC,EACnC,IAAI,CACP,CAAC;IACF,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,OAAO,CAAC;IACnB,CAAC;IAED,MAAM,cAAc,GAAG,MAAM,kCAAkC,CAC3D,QAAQ,EACR,WAAW,EACX,eAAe,CAClB,CAAC;IACF,IAAI,cAAc,CAAC,MAAM,KAAK,eAAe,CAAC,MAAM,EAAE,CAAC;QACnD,OAAO,OAAO,CAAC;IACnB,CAAC;IAED,MAAM,cAAc,GAAG,IAAI,GAAG,CAC1B,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAC/D,CAAC;IACF,MAAM,aAAa,GAAG,IAAI,GAAG,EAAU,CAAC;IACxC,KAAK,MAAM,MAAM,IAAI,eAAe,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACpD,IAAI,IAAI,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACpC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;IACL,CAAC;IAED,IAAI,aAAa,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,OAAO,CAAC;IACnB,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAC7C,MAAM,QAAQ,GAAG,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC/C,OAAO,CAAC,QAAQ,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IACH,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC;IAEvD,OAAO;QACH,GAAG,OAAO;QACV,OAAO,EAAE,YAAY;QACrB,QAAQ,EAAE,YAAY,CAAC,MAAM;QAC7B,aAAa,EAAE,IAAI,CAAC,GAAG,CACnB,YAAY,CAAC,MAAM,EACnB,CAAC,OAAO,CAAC,aAAa,IAAI,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,YAAY,CAC5E;KACJ,CAAC;AACN,CAAC;AAED,KAAK,UAAU,uCAAuC,CAClD,QAA2B,EAC3B,WAAqB,EACrB,eAAkC,EAClC,YAAqB;IAErB,MAAM,aAAa,GAAG,KAAK,CAAC,IAAI,CAC5B,IAAI,GAAG,CACH,eAAe;SACV,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;SACtB,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;SAC7B,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,eAAe,CAAC,EAAE,CAAC,GAAG,CAAC,CAC/C,CACJ,CAAC;IACF,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,EAAE,CAAC;IACd,CAAC;IAED,MAAM,UAAU,GAAG,CAAC,MAAM,mBAAmB,CAAC,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,IAAI,WAAW,CAAC;IAC/F,MAAM,EAAE,GAAG,OAAO,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAClD,MAAM,aAAa,GAAG,CAAC,UAAU,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC7D,IAAI,YAAY,EAAE,CAAC;QACf,aAAa,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IACjD,CAAC;IAED,MAAM,MAAM,GAAkB;QAC1B,UAAU,EAAE,mBAAmB;QAC/B,WAAW,EAAE,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC;QACxC,MAAM,EAAE,CAAC,IAAI,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,YAAY,EAAE,WAAW,EAAE,gBAAgB,CAAC;QAC/F,UAAU,EAAE,QAAQ;KACvB,CAAC;IACF,8BAA8B,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAE3C,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,OAAO,CAA4B,MAAM,EAAE,UAAU,CAAC,CAAC;IAC5E,IAAI,CAAC,GAAG,EAAE,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/C,OAAO,EAAE,CAAC;IACd,CAAC;IACD,OAAO,GAAG,CAAC,OAAO,CAAC;AACvB,CAAC;AAED,KAAK,UAAU,+BAA+B,CAC1C,QAA2B,EAC3B,WAAqB,EACrB,SAA4B;IAE5B,MAAM,aAAa,GAAG,KAAK,CAAC,IAAI,CAC5B,IAAI,GAAG,CACH,SAAS;SACJ,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;SACtB,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;SAC7B,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,eAAe,CAAC,EAAE,CAAC,GAAG,CAAC,CAC/C,CACJ,CAAC;IACF,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,EAAE,CAAC;IACd,CAAC;IAED,MAAM,UAAU,GAAG,CAAC,MAAM,mBAAmB,CAAC,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,IAAI,WAAW,CAAC;IAC/F,MAAM,EAAE,GAAG,OAAO,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAClD,MAAM,MAAM,GAAkB;QAC1B,UAAU,EAAE,0BAA0B;QACtC,WAAW,EAAE,UAAU,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG;QACjD,MAAM,EAAE,CAAC,IAAI,EAAE,gBAAgB,CAAC;QAChC,UAAU,EAAE,QAAQ;KACvB,CAAC;IACF,8BAA8B,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAE3C,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,OAAO,CAAkC,MAAM,EAAE,UAAU,CAAC,CAAC;IAClF,IAAI,CAAC,GAAG,EAAE,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/C,OAAO,EAAE,CAAC;IACd,CAAC;IACD,OAAO,GAAG,CAAC,OAAO,CAAC;AACvB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,4CAA4C;IACxD,MAAM,QAAQ,GAAG,YAAY,CAAkB,aAAa,CAAC,CAAC;IAC9D,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,mCAAmC,CAAC,EAAE,CAAC;QAC1D,gBAAgB,CAAC,aAAa,EAAE,mCAAmC,CAAC,CAAC;IACzE,CAAC;AACL,CAAC;AAED,oEAAoE;AACpE,4CAA4C,EAAE,CAAC"}

package/dist/custom/MJConversationDetailEntityServer.server.d.ts

@@ -1,48 +1,38 @@
 import { EntitySaveOptions } from "@memberjunction/core";
 import { MJConversationDetailEntityExtended } from "@memberjunction/core-entities";
 /**
- * Server-side subclass of MJConversationDetailEntity that automatically tracks
- * when the original message content has been modified, and checks the fork of
- * each new message.
- *
- * When a user edits their message after initial creation, the OriginalMessageChanged
- * flag is set to true, allowing the UI to display an "(Edited)" indicator. This is
- * also the edit signal for cross-turn conversation compaction
- * (plans/agent-conversation-compaction.md §6): a row edited after it was folded into
- * a persisted summary keeps the flag, Record Changes already holds the diff, and the
- * UI can derive "edited after summarization" from the flag plus the row's Sequence
- * being below the current summary boundary — no summary regeneration required (the
- * summary is explicitly lossy; agents page in exact rows via the retrieval tools).
- *
- * Extends {@link MJConversationDetailEntityExtended} rather than the generated entity
- * directly. Both classes register for `BaseEntity` under the key
- * `'MJ: Conversation Details'`, and `@RegisterClass` passes `priority = 0`, which routes
- * to the auto-increment branch — so whichever registers LAST wins outright. On the server
- * this package loads after `@memberjunction/core-entities`, which meant this class replaced
- * the Extended one and its `Save`/`Delete` permission gate never ran. That gate is the check
- * that only a conversation's owner may set `UserRating` / `UserFeedback`, and that a
- * non-owner without a resource grant cannot write at all — and it is explicitly designed to
- * run server-side (`ProviderType === 'Database'`), which is exactly where it was being
- * shadowed out. Inheriting composes the two behaviors instead: this class flags the edit,
- * then delegates to the permission gate via `super.Save`.
- *
- * A new row keeps the `BranchID` its writer set (null is Main). On create, a non-null `BranchID`
- * must name a fork of the same conversation; otherwise `Save` returns `false` with a result
- * entry and nothing is written.
+ * Server-side subclass of MJConversationDetailEntity that:
+ * 1. Automatically tracks when the original message content has been modified (`OriginalMessageChanged`).
+ * 2. Checks the fork (`BranchID`) of each new message on create.
+ * 3. Inspects comments posted on anchored conversations (`LinkedEntityID` + `LinkedRecordID`)
+ *    when the target entity has `FieldLevelSecurityApplies === true`:
+ *    - Runs two-stage restricted-field detection (deterministic field/label/value matching + semantic LLM classifier).
+ *    - Refuses the save if the authoring user is denied Read access on a restricted field referenced by their comment.
+ *    - Stamps any detected restricted field names into the parent conversation's
+ *      `AnchorMetadataObject.restrictedFields` so all subsequent reads filter deterministically in 0ms.
+ * 4. Delegates to {@link MJConversationDetailEntityExtended} for write-access, authorship,
+ *    server-authored reply validation, and `@mention` notification dispatch.
  */
 export declare class MJConversationDetailEntityServer extends MJConversationDetailEntityExtended {
     /**
      * Sets the OriginalMessageChanged flag on a genuine message edit, checks a new row's fork,
-     * then calls super.Save(). Returns `false` without saving when the fork check fails.
+     * runs FLS restricted-field inspection for anchored conversations, then calls super.Save().
      */
     Save(options?: EntitySaveOptions): Promise<boolean>;
+    /**
+     * When saving a message in an anchored conversation (`LinkedEntityID` + `LinkedRecordID`) whose
+     * target entity has `FieldLevelSecurityApplies === true`, runs {@link InspectAndStampRestrictedFieldsForComment}
+     * to block restricted-field probing by unauthorized authors and stamp `restrictedFields` onto the
+     * parent conversation's `AnchorMetadataObject`.
+     */
+    CheckAndStampAnchoredRestrictedFields(): Promise<string | null>;
     /**
      * On create, a non-null BranchID must name a fork of the same conversation. Returns why the save
      * must fail, or null when it may go on. An existing row, a Main row (null BranchID), a row with no
      * ConversationID and a save with no context user are not checked.
      */
     CheckBranchOnCreate(): Promise<string | null>;
-    /** Records a failed create in the result history, so callers see why nothing was written. */
+    /** Records a failed create/save in the result history, so callers see why nothing was written. */
     private recordCreateFailure;
     /**
      * True when this save is a genuine Message EDIT on an existing record — not one of

package/dist/custom/MJConversationDetailEntityServer.server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"MJConversationDetailEntityServer.server.d.ts","sourceRoot":"","sources":["../../src/custom/MJConversationDetailEntityServer.server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgC,iBAAiB,EAAwC,MAAM,sBAAsB,CAAC;AAE7H,OAAO,EAAE,kCAAkC,EAAE,MAAM,+BAA+B,CAAC;AAEnF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,qBACa,gCAAiC,SAAQ,kCAAkC;IACpF;;;OAGG;IACY,IAAI,CAAC,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC;IAYlE;;;;OAIG;IACU,mBAAmB,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAgC1D,6FAA6F;IAC7F,OAAO,CAAC,mBAAmB;IAU3B;;;;;;;;;;;OAWG;IACI,gCAAgC,IAAI,OAAO;CAiBrD"}
+{"version":3,"file":"MJConversationDetailEntityServer.server.d.ts","sourceRoot":"","sources":["../../src/custom/MJConversationDetailEntityServer.server.ts"],"names":[],"mappings":"AAAA,OAAO,EAGH,iBAAiB,EAKpB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,kCAAkC,EAAwB,MAAM,+BAA+B,CAAC;AAGzG;;;;;;;;;;;;GAYG;AACH,qBACa,gCAAiC,SAAQ,kCAAkC;IACpF;;;OAGG;IACY,IAAI,CAAC,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC;IAoBlE;;;;;OAKG;IACU,qCAAqC,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAsE5E;;;;OAIG;IACU,mBAAmB,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAgC1D,kGAAkG;IAClG,OAAO,CAAC,mBAAmB;IAU3B;;;;;;;;;;;OAWG;IACI,gCAAgC,IAAI,OAAO;CAiBrD"}

package/dist/custom/MJConversationDetailEntityServer.server.js

@@ -4,43 +4,28 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
     else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
     return c > 3 && r && Object.defineProperty(target, key, r), r;
 };
-import { BaseEntity, BaseEntityResult, LogError, RunView } from "@memberjunction/core";
+var MJConversationDetailEntityServer_1;
+import { BaseEntity, BaseEntityResult, LogError, RunView, WellKnownUserSource } from "@memberjunction/core";
 import { EscapeSQLString, RegisterClass, UUIDsEqual } from "@memberjunction/global";
 import { MJConversationDetailEntityExtended } from "@memberjunction/core-entities";
+import { InspectAndStampRestrictedFieldsForComment } from "./RestrictedFieldCommentClassifier.js";
 /**
- * Server-side subclass of MJConversationDetailEntity that automatically tracks
- * when the original message content has been modified, and checks the fork of
- * each new message.
- *
- * When a user edits their message after initial creation, the OriginalMessageChanged
- * flag is set to true, allowing the UI to display an "(Edited)" indicator. This is
- * also the edit signal for cross-turn conversation compaction
- * (plans/agent-conversation-compaction.md §6): a row edited after it was folded into
- * a persisted summary keeps the flag, Record Changes already holds the diff, and the
- * UI can derive "edited after summarization" from the flag plus the row's Sequence
- * being below the current summary boundary — no summary regeneration required (the
- * summary is explicitly lossy; agents page in exact rows via the retrieval tools).
- *
- * Extends {@link MJConversationDetailEntityExtended} rather than the generated entity
- * directly. Both classes register for `BaseEntity` under the key
- * `'MJ: Conversation Details'`, and `@RegisterClass` passes `priority = 0`, which routes
- * to the auto-increment branch — so whichever registers LAST wins outright. On the server
- * this package loads after `@memberjunction/core-entities`, which meant this class replaced
- * the Extended one and its `Save`/`Delete` permission gate never ran. That gate is the check
- * that only a conversation's owner may set `UserRating` / `UserFeedback`, and that a
- * non-owner without a resource grant cannot write at all — and it is explicitly designed to
- * run server-side (`ProviderType === 'Database'`), which is exactly where it was being
- * shadowed out. Inheriting composes the two behaviors instead: this class flags the edit,
- * then delegates to the permission gate via `super.Save`.
- *
- * A new row keeps the `BranchID` its writer set (null is Main). On create, a non-null `BranchID`
- * must name a fork of the same conversation; otherwise `Save` returns `false` with a result
- * entry and nothing is written.
+ * Server-side subclass of MJConversationDetailEntity that:
+ * 1. Automatically tracks when the original message content has been modified (`OriginalMessageChanged`).
+ * 2. Checks the fork (`BranchID`) of each new message on create.
+ * 3. Inspects comments posted on anchored conversations (`LinkedEntityID` + `LinkedRecordID`)
+ *    when the target entity has `FieldLevelSecurityApplies === true`:
+ *    - Runs two-stage restricted-field detection (deterministic field/label/value matching + semantic LLM classifier).
+ *    - Refuses the save if the authoring user is denied Read access on a restricted field referenced by their comment.
+ *    - Stamps any detected restricted field names into the parent conversation's
+ *      `AnchorMetadataObject.restrictedFields` so all subsequent reads filter deterministically in 0ms.
+ * 4. Delegates to {@link MJConversationDetailEntityExtended} for write-access, authorship,
+ *    server-authored reply validation, and `@mention` notification dispatch.
  */
-let MJConversationDetailEntityServer = class MJConversationDetailEntityServer extends MJConversationDetailEntityExtended {
+let MJConversationDetailEntityServer = MJConversationDetailEntityServer_1 = class MJConversationDetailEntityServer extends MJConversationDetailEntityExtended {
     /**
      * Sets the OriginalMessageChanged flag on a genuine message edit, checks a new row's fork,
-     * then calls super.Save(). Returns `false` without saving when the fork check fails.
+     * runs FLS restricted-field inspection for anchored conversations, then calls super.Save().
      */
     async Save(options) {
         if (this.ShouldFlagOriginalMessageChanged()) {
@@ -51,8 +36,77 @@ let MJConversationDetailEntityServer = class MJConversationDetailEntityServer ex
             this.recordCreateFailure(problem);
             return false;
         }
+        const checkFls = this.CheckAndStampAnchoredRestrictedFields ??
+            MJConversationDetailEntityServer_1.prototype.CheckAndStampAnchoredRestrictedFields;
+        const flsRefusal = await checkFls.call(this);
+        if (flsRefusal) {
+            this.recordCreateFailure(flsRefusal, this.IsSaved ? 'update' : 'create');
+            return false;
+        }
         return super.Save(options);
     }
+    /**
+     * When saving a message in an anchored conversation (`LinkedEntityID` + `LinkedRecordID`) whose
+     * target entity has `FieldLevelSecurityApplies === true`, runs {@link InspectAndStampRestrictedFieldsForComment}
+     * to block restricted-field probing by unauthorized authors and stamp `restrictedFields` onto the
+     * parent conversation's `AnchorMetadataObject`.
+     */
+    async CheckAndStampAnchoredRestrictedFields() {
+        const provider = this.ProviderToUse;
+        if (provider?.ProviderType !== 'Database') {
+            return null;
+        }
+        const user = this.ContextCurrentUser;
+        if (!user || !this.ConversationID) {
+            return null;
+        }
+        // Only inspect on new messages or when Message text is being modified
+        if (this.IsSaved && !this.GetFieldByName('Message')?.Dirty) {
+            return null;
+        }
+        try {
+            const systemUser = (await WellKnownUserSource.Instance.GetSystemUser(provider)) ?? user;
+            const conversation = await provider.GetEntityObject('MJ: Conversations', systemUser);
+            const loaded = await conversation.Load(this.ConversationID);
+            if (!loaded || !conversation.AnchorType || !conversation.LinkedEntityID || !conversation.LinkedRecordID) {
+                return null;
+            }
+            const entityInfo = (typeof provider.EntityByID === 'function'
+                ? provider.EntityByID(conversation.LinkedEntityID)
+                : undefined) ??
+                provider.Entities?.find((e) => UUIDsEqual(e.ID, conversation.LinkedEntityID)) ??
+                null;
+            if (!entityInfo) {
+                return null;
+            }
+            if (!WellKnownUserSource.Instance.IsSystemUser(user)) {
+                if (entityInfo.AllowRecordComments === false) {
+                    return `Record commenting is disabled for ${entityInfo.DisplayNameOrName}.`;
+                }
+                if (typeof entityInfo.CanUserComment === 'function' && !entityInfo.CanUserComment(user)) {
+                    return `You do not have permission to post comments on ${entityInfo.DisplayNameOrName} records.`;
+                }
+            }
+            if (!entityInfo.FieldLevelSecurityApplies) {
+                return null;
+            }
+            const inspection = await InspectAndStampRestrictedFieldsForComment({
+                Provider: provider,
+                ContextUser: user,
+                Conversation: conversation,
+                EntityInfo: entityInfo,
+                MessageText: this.Message
+            });
+            if (!inspection.Allowed) {
+                return inspection.Reason ?? 'You do not have permission to comment on this restricted field.';
+            }
+            return null;
+        }
+        catch (error) {
+            LogError(`MJConversationDetailEntityServer.CheckAndStampAnchoredRestrictedFields failed on conversation ${this.ConversationID}: ${error instanceof Error ? error.message : String(error)}`);
+            return null;
+        }
+    }
     /**
      * On create, a non-null BranchID must name a fork of the same conversation. Returns why the save
      * must fail, or null when it may go on. An existing row, a Main row (null BranchID), a row with no
@@ -90,11 +144,11 @@ let MJConversationDetailEntityServer = class MJConversationDetailEntityServer ex
             return 'Unable to check the fork of this message.';
         }
     }
-    /** Records a failed create in the result history, so callers see why nothing was written. */
-    recordCreateFailure(message) {
+    /** Records a failed create/save in the result history, so callers see why nothing was written. */
+    recordCreateFailure(message, type = 'create') {
         const result = new BaseEntityResult();
         result.Success = false;
-        result.Type = 'create';
+        result.Type = type;
         result.Message = message;
         result.StartedAt = new Date();
         result.EndedAt = new Date();
@@ -130,7 +184,7 @@ let MJConversationDetailEntityServer = class MJConversationDetailEntityServer ex
         return true;
     }
 };
-MJConversationDetailEntityServer = __decorate([
+MJConversationDetailEntityServer = MJConversationDetailEntityServer_1 = __decorate([
     RegisterClass(BaseEntity, "MJ: Conversation Details")
 ], MJConversationDetailEntityServer);
 export { MJConversationDetailEntityServer };

package/dist/custom/MJConversationDetailEntityServer.server.js.map

@@ -1 +1 @@
-{"version":3,"file":"MJConversationDetailEntityServer.server.js","sourceRoot":"","sources":["../../src/custom/MJConversationDetailEntityServer.server.ts"],"names":[],"mappings":";;;;;;AAAA,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAwC,QAAQ,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAC7H,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpF,OAAO,EAAE,kCAAkC,EAAE,MAAM,+BAA+B,CAAC;AAEnF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEI,IAAM,gCAAgC,GAAtC,MAAM,gCAAiC,SAAQ,kCAAkC;IACpF;;;OAGG;IACM,KAAK,CAAC,IAAI,CAAC,OAA2B;QAC3C,IAAI,IAAI,CAAC,gCAAgC,EAAE,EAAE,CAAC;YAC1C,IAAI,CAAC,sBAAsB,GAAG,IAAI,CAAC;QACvC,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACjD,IAAI,OAAO,EAAE,CAAC;YACV,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;YAClC,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IAED;;;;OAIG;IACI,KAAK,CAAC,mBAAmB;QAC5B,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YAChE,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,kBAAkB,CAAC;QACrC,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC/B,IAAI,CAAC;YACD,MAAM,EAAE,GAAG,OAAO,CAAC,oBAAoB,CAAC,IAAI,CAAC,aAA6C,CAAC,CAAC;YAC5F,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAAyC;gBACpE,UAAU,EAAE,2BAA2B;gBACvC,WAAW,EAAE,OAAO,eAAe,CAAC,QAAQ,CAAC,GAAG;gBAChD,MAAM,EAAE,CAAC,IAAI,EAAE,gBAAgB,CAAC;gBAChC,UAAU,EAAE,QAAQ;aACvB,EAAE,IAAI,CAAC,CAAC;YACT,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAClB,QAAQ,CAAC,yDAAyD,QAAQ,KAAK,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;gBACtG,OAAO,2CAA2C,CAAC;YACvD,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;YACjC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;gBACjE,OAAO,QAAQ,QAAQ,oCAAoC,IAAI,CAAC,cAAc,GAAG,CAAC;YACtF,CAAC;YACD,OAAO,IAAI,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,QAAQ,CAAC,yDAAyD,QAAQ,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACzI,OAAO,2CAA2C,CAAC;QACvD,CAAC;IACL,CAAC;IAED,6FAA6F;IACrF,mBAAmB,CAAC,OAAe;QACvC,MAAM,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;QACtC,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC;QACvB,MAAM,CAAC,IAAI,GAAG,QAAQ,CAAC;QACvB,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;QACzB,MAAM,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAC9B,MAAM,CAAC,OAAO,GAAG,IAAI,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC;IAC5C,CAAC;IAED;;;;;;;;;;;OAWG;IACI,gCAAgC;QACnC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAChB,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,MAAM,YAAY,GAAG,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;QACpD,IAAI,CAAC,YAAY,IAAI,CAAC,YAAY,CAAC,KAAK,IAAI,YAAY,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC9E,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;YAChC,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,WAAW,EAAE,KAAK,EAAE,CAAC;YACrB,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;CACJ,CAAA;AA9FY,gCAAgC;IAD5C,aAAa,CAAC,UAAU,EAAE,0BAA0B,CAAC;GACzC,gCAAgC,CA8F5C"}
+{"version":3,"file":"MJConversationDetailEntityServer.server.js","sourceRoot":"","sources":["../../src/custom/MJConversationDetailEntityServer.server.ts"],"names":[],"mappings":";;;;;;;AAAA,OAAO,EACH,UAAU,EACV,gBAAgB,EAGhB,QAAQ,EACR,OAAO,EACP,mBAAmB,EACtB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpF,OAAO,EAAE,kCAAkC,EAAwB,MAAM,+BAA+B,CAAC;AACzG,OAAO,EAAE,yCAAyC,EAAE,MAAM,oCAAoC,CAAC;AAE/F;;;;;;;;;;;;GAYG;AAEI,IAAM,gCAAgC,wCAAtC,MAAM,gCAAiC,SAAQ,kCAAkC;IACpF;;;OAGG;IACM,KAAK,CAAC,IAAI,CAAC,OAA2B;QAC3C,IAAI,IAAI,CAAC,gCAAgC,EAAE,EAAE,CAAC;YAC1C,IAAI,CAAC,sBAAsB,GAAG,IAAI,CAAC;QACvC,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACjD,IAAI,OAAO,EAAE,CAAC;YACV,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;YAClC,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,MAAM,QAAQ,GACV,IAAI,CAAC,qCAAqC;YAC1C,kCAAgC,CAAC,SAAS,CAAC,qCAAqC,CAAC;QACrF,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,UAAU,EAAE,CAAC;YACb,IAAI,CAAC,mBAAmB,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;YACzE,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IAED;;;;;OAKG;IACI,KAAK,CAAC,qCAAqC;QAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,aAA6C,CAAC;QACpE,IAAI,QAAQ,EAAE,YAAY,KAAK,UAAU,EAAE,CAAC;YACxC,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,kBAAkB,CAAC;QACrC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YAChC,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,sEAAsE;QACtE,IAAI,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC;YACzD,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,IAAI,CAAC;YACD,MAAM,UAAU,GAAG,CAAC,MAAM,mBAAmB,CAAC,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,IAAI,IAAI,CAAC;YACxF,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,eAAe,CAC/C,mBAAmB,EACnB,UAAU,CACb,CAAC;YACF,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAC5D,IAAI,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,IAAI,CAAC,YAAY,CAAC,cAAc,IAAI,CAAC,YAAY,CAAC,cAAc,EAAE,CAAC;gBACtG,OAAO,IAAI,CAAC;YAChB,CAAC;YAED,MAAM,UAAU,GACZ,CAAC,OAAO,QAAQ,CAAC,UAAU,KAAK,UAAU;gBACtC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,YAAY,CAAC,cAAc,CAAC;gBAClD,CAAC,CAAC,SAAS,CAAC;gBAChB,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,YAAY,CAAC,cAAc,CAAC,CAAC;gBAC7E,IAAI,CAAC;YACT,IAAI,CAAC,UAAU,EAAE,CAAC;gBACd,OAAO,IAAI,CAAC;YAChB,CAAC;YAED,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnD,IAAI,UAAU,CAAC,mBAAmB,KAAK,KAAK,EAAE,CAAC;oBAC3C,OAAO,qCAAqC,UAAU,CAAC,iBAAiB,GAAG,CAAC;gBAChF,CAAC;gBACD,IAAI,OAAO,UAAU,CAAC,cAAc,KAAK,UAAU,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;oBACtF,OAAO,kDAAkD,UAAU,CAAC,iBAAiB,WAAW,CAAC;gBACrG,CAAC;YACL,CAAC;YAED,IAAI,CAAC,UAAU,CAAC,yBAAyB,EAAE,CAAC;gBACxC,OAAO,IAAI,CAAC;YAChB,CAAC;YAED,MAAM,UAAU,GAAG,MAAM,yCAAyC,CAAC;gBAC/D,QAAQ,EAAE,QAAQ;gBAClB,WAAW,EAAE,IAAI;gBACjB,YAAY,EAAE,YAAY;gBAC1B,UAAU,EAAE,UAAU;gBACtB,WAAW,EAAE,IAAI,CAAC,OAAO;aAC5B,CAAC,CAAC;YACH,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;gBACtB,OAAO,UAAU,CAAC,MAAM,IAAI,iEAAiE,CAAC;YAClG,CAAC;YACD,OAAO,IAAI,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,QAAQ,CACJ,iGAAiG,IAAI,CAAC,cAAc,KAChH,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACzD,EAAE,CACL,CAAC;YACF,OAAO,IAAI,CAAC;QAChB,CAAC;IACL,CAAC;IAED;;;;OAIG;IACI,KAAK,CAAC,mBAAmB;QAC5B,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YAChE,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,kBAAkB,CAAC;QACrC,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC/B,IAAI,CAAC;YACD,MAAM,EAAE,GAAG,OAAO,CAAC,oBAAoB,CAAC,IAAI,CAAC,aAA6C,CAAC,CAAC;YAC5F,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAAyC;gBACpE,UAAU,EAAE,2BAA2B;gBACvC,WAAW,EAAE,OAAO,eAAe,CAAC,QAAQ,CAAC,GAAG;gBAChD,MAAM,EAAE,CAAC,IAAI,EAAE,gBAAgB,CAAC;gBAChC,UAAU,EAAE,QAAQ;aACvB,EAAE,IAAI,CAAC,CAAC;YACT,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAClB,QAAQ,CAAC,yDAAyD,QAAQ,KAAK,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;gBACtG,OAAO,2CAA2C,CAAC;YACvD,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;YACjC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;gBACjE,OAAO,QAAQ,QAAQ,oCAAoC,IAAI,CAAC,cAAc,GAAG,CAAC;YACtF,CAAC;YACD,OAAO,IAAI,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,QAAQ,CAAC,yDAAyD,QAAQ,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACzI,OAAO,2CAA2C,CAAC;QACvD,CAAC;IACL,CAAC;IAED,kGAAkG;IAC1F,mBAAmB,CAAC,OAAe,EAAE,OAA4B,QAAQ;QAC7E,MAAM,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;QACtC,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC;QACvB,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC;QACnB,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;QACzB,MAAM,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAC9B,MAAM,CAAC,OAAO,GAAG,IAAI,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC;IAC5C,CAAC;IAED;;;;;;;;;;;OAWG;IACI,gCAAgC;QACnC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAChB,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,MAAM,YAAY,GAAG,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;QACpD,IAAI,CAAC,YAAY,IAAI,CAAC,YAAY,CAAC,KAAK,IAAI,YAAY,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC9E,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;YAChC,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,WAAW,EAAE,KAAK,EAAE,CAAC;YACrB,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;CACJ,CAAA;AAlLY,gCAAgC;IAD5C,aAAa,CAAC,UAAU,EAAE,0BAA0B,CAAC;GACzC,gCAAgC,CAkL5C"}

package/dist/custom/MJConversationEntityServer.server.d.ts

@@ -1,13 +1,28 @@
-import { ValidationResult } from '@memberjunction/core';
+import { EntitySaveOptions, ValidationResult } from '@memberjunction/core';
 import { MJConversationEntity } from '@memberjunction/core-entities';
 /**
  * Server-side `MJ: Conversations` entity.
  *
- * Keeps `ExternalID` — the scope identity an anonymous visitor's realtime session is owned through — out
- * of an anonymous visitor's reach once the conversation exists. See {@link CheckAnonymousOwnershipKeyChange}.
- * Uses the synchronous `Validate()` so the rule runs on every save, like `MJAIAgentSessionEntityServer`.
+ * 1. Keeps `ExternalID` — the scope identity an anonymous visitor's realtime session is owned through — out
+ *    of an anonymous visitor's reach once the conversation exists. See {@link CheckAnonymousOwnershipKeyChange}.
+ * 2. Keeps who a conversation belongs to and who it is shared with in its owner's hands: see
+ *    {@link checkOwnerOnlyChange}. Uses the synchronous `Validate()` so the rules run on every save, like
+ *    `MJAIAgentSessionEntityServer`.
+ * 3. Saves `AdditionalData` as compact JSON when it holds an object, so the stored text always uses the spelling
+ *    the conversation list's SQL filter matches (`INHERIT_FOLDER_ACCESS_SQL_CLAUSE`), and refuses a value the filter
+ *    and the parser would still read differently: see {@link checkInheritanceReadingsAgree}.
+ * 4. Enforces Row-Level Security (RLS) and Field-Level Security (FLS) on anchored conversations
+ *    (`LinkedEntityID` + `LinkedRecordID` / `AnchorType`):
+ *    - Verifies the saving user can read the linked record (`UserCanReadLinkedRecord`).
+ *    - Verifies the saving user is not denied Read access on the anchored field or `restrictedFields`
+ *      (`IsConversationHiddenByFieldSecurity`).
+ *    - When `AnchorType === 'Field'` targets an FLS-governed field (`HasFieldPermissions === true`),
+ *      automatically stamps that canonical field name into `AnchorMetadataObject.restrictedFields`.
  */
 export declare class MJConversationEntityServer extends MJConversationEntity {
     Validate(): ValidationResult;
+    Save(options?: EntitySaveOptions): Promise<boolean>;
+    private checkAnchoredConversationAccessAndStampMetadata;
+    private recordSaveDenied;
 }
 //# sourceMappingURL=MJConversationEntityServer.server.d.ts.map