@memberjunction/core-entities 5.24.0 → 5.25.0

package/dist/engines/InstanceConfigEngine.js

@@ -0,0 +1,198 @@
+import { BaseEngine } from "@memberjunction/core";
+/**
+ * InstanceConfigEngine provides centralized, cached access to instance-level feature configuration.
+ * It loads all MJ: Instance Configurations records into memory and provides typed getters
+ * for boolean, number, string, and JSON values by FeatureKey.
+ *
+ * Uses BaseEngine for automatic caching and entity-event-based auto-refresh so that
+ * configuration changes are reflected without requiring a manual reload.
+ *
+ * Usage:
+ * ```typescript
+ * const engine = InstanceConfigEngine.Instance;
+ * await engine.Config(false, contextUser);
+ *
+ * // Read a boolean flag
+ * const searchEnabled = engine.GetBoolean('Shell.SearchBar.Enabled');
+ *
+ * // Read a number with a custom default
+ * const maxResults = engine.GetNumber('Search.MaxResults', 50);
+ *
+ * // Read a JSON object
+ * const uiConfig = engine.GetJSON<{ theme: string }>('UI.DefaultConfig');
+ *
+ * // Admin: update a setting
+ * await engine.Set('Shell.SearchBar.Enabled', 'true', contextUser);
+ * ```
+ */
+export class InstanceConfigEngine extends BaseEngine {
+    constructor() {
+        super(...arguments);
+        this._configs = [];
+    }
+    /**
+     * Returns the global instance of the class. This is a singleton class, so there
+     * is only one instance of it in the application. Do not directly create new instances
+     * of it, always use this method to get the instance.
+     */
+    static get Instance() {
+        return super.getInstance();
+    }
+    /**
+     * Configures the engine by loading all instance configuration records from the database.
+     * @param forceRefresh - If true, forces a refresh from the database even if data is cached
+     * @param contextUser - Optional user context for server-side operations
+     * @param provider - Optional metadata provider
+     */
+    async Config(forceRefresh, contextUser, provider) {
+        const configs = [
+            {
+                Type: 'entity',
+                EntityName: 'MJ: Instance Configurations',
+                PropertyName: '_configs',
+                CacheLocal: true
+            }
+        ];
+        await this.Load(configs, provider, forceRefresh, contextUser);
+    }
+    // ================================================================
+    // Cached data getter
+    // ================================================================
+    /** All instance configuration records */
+    get InstanceConfigs() {
+        return this._configs || [];
+    }
+    // ================================================================
+    // Lookup helpers
+    // ================================================================
+    /**
+     * Find a configuration record by its FeatureKey.
+     * @param featureKey - The dot-notation feature key (e.g. 'Shell.SearchBar.Enabled')
+     * @returns The configuration entity, or undefined if not found
+     */
+    GetConfigByKey(featureKey) {
+        if (!featureKey)
+            return undefined;
+        return this._configs.find(c => c.FeatureKey === featureKey);
+    }
+    /**
+     * Get all configuration records for a given category.
+     * @param category - The category to filter by (e.g. 'General', 'Search')
+     * @returns Array of matching configuration entities
+     */
+    GetConfigsByCategory(category) {
+        if (!category)
+            return [];
+        const lower = category.trim().toLowerCase();
+        return this._configs.filter(c => c.Category?.trim().toLowerCase() === lower);
+    }
+    // ================================================================
+    // Typed value getters
+    // ================================================================
+    /**
+     * Get the raw string value for a feature key. Returns the record's Value if non-empty,
+     * otherwise falls back to DefaultValue, then to undefined.
+     * @param featureKey - The dot-notation feature key
+     * @returns The value string, or undefined if the key is not found
+     */
+    Get(featureKey) {
+        const config = this.GetConfigByKey(featureKey);
+        if (!config)
+            return undefined;
+        return this.ResolveValue(config);
+    }
+    /**
+     * Get a boolean value for a feature key. Interprets 'true' (case-insensitive) as true,
+     * everything else as false. Returns the provided default if the key is not found.
+     * @param featureKey - The dot-notation feature key
+     * @param defaultValue - Value to return if the key is not found (defaults to true)
+     */
+    GetBoolean(featureKey, defaultValue = true) {
+        const raw = this.Get(featureKey);
+        if (raw === undefined)
+            return defaultValue;
+        return raw.trim().toLowerCase() === 'true';
+    }
+    /**
+     * Get a numeric value for a feature key. Returns the provided default if the key
+     * is not found or the value cannot be parsed as a number.
+     * @param featureKey - The dot-notation feature key
+     * @param defaultValue - Value to return if the key is not found or unparseable (defaults to 0)
+     */
+    GetNumber(featureKey, defaultValue = 0) {
+        const raw = this.Get(featureKey);
+        if (raw === undefined)
+            return defaultValue;
+        const parsed = Number(raw);
+        return Number.isNaN(parsed) ? defaultValue : parsed;
+    }
+    /**
+     * Get a JSON-parsed value for a feature key. Returns the provided default if the key
+     * is not found or the value cannot be parsed as JSON.
+     * @param featureKey - The dot-notation feature key
+     * @param defaultValue - Value to return if the key is not found or unparseable
+     */
+    GetJSON(featureKey, defaultValue) {
+        const raw = this.Get(featureKey);
+        if (raw === undefined)
+            return defaultValue;
+        try {
+            return JSON.parse(raw);
+        }
+        catch {
+            return defaultValue;
+        }
+    }
+    // ================================================================
+    // Admin setter
+    // ================================================================
+    /**
+     * Update the Value of an existing configuration record. This method updates the
+     * record in the database and refreshes the local cache entry.
+     *
+     * Note: This only updates existing records. To create new configuration entries,
+     * use the standard entity creation workflow.
+     *
+     * @param featureKey - The dot-notation feature key to update
+     * @param value - The new value string
+     * @param contextUser - Optional user context (required on server-side)
+     * @returns true if the save succeeded, false otherwise
+     */
+    async Set(featureKey, value, contextUser) {
+        const config = this.GetConfigByKey(featureKey);
+        if (!config) {
+            console.error(`InstanceConfigEngine.Set: FeatureKey '${featureKey}' not found`);
+            return false;
+        }
+        try {
+            config.Value = value;
+            const saved = await config.Save();
+            if (saved) {
+                return true;
+            }
+            else {
+                console.error('InstanceConfigEngine.Set: Failed to save:', config.LatestResult?.Message);
+                return false;
+            }
+        }
+        catch (error) {
+            console.error('InstanceConfigEngine.Set: Error:', error instanceof Error ? error.message : String(error));
+            return false;
+        }
+    }
+    // ================================================================
+    // Private helpers
+    // ================================================================
+    /**
+     * Resolve the effective value for a configuration record. Returns Value if
+     * it is non-empty, otherwise falls back to DefaultValue.
+     */
+    ResolveValue(config) {
+        const val = config.Value;
+        if (val != null && val.trim().length > 0) {
+            return val;
+        }
+        return config.DefaultValue;
+    }
+}
+//# sourceMappingURL=InstanceConfigEngine.js.map

package/dist/engines/InstanceConfigEngine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"InstanceConfigEngine.js","sourceRoot":"","sources":["../../src/engines/InstanceConfigEngine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAyD,MAAM,sBAAsB,CAAC;AAGzG;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,OAAO,oBAAqB,SAAQ,UAAgC;IAA1E;;QAUY,aAAQ,GAAoC,EAAE,CAAC;IAoK3D,CAAC;IA7KG;;;;OAIG;IACI,MAAM,KAAK,QAAQ;QACtB,OAAO,KAAK,CAAC,WAAW,EAAwB,CAAC;IACrD,CAAC;IAID;;;;;OAKG;IACI,KAAK,CAAC,MAAM,CAAC,YAAsB,EAAE,WAAsB,EAAE,QAA4B;QAC5F,MAAM,OAAO,GAAwC;YACjD;gBACI,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE,6BAA6B;gBACzC,YAAY,EAAE,UAAU;gBACxB,UAAU,EAAE,IAAI;aACnB;SACJ,CAAC;QACF,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;IAClE,CAAC;IAED,mEAAmE;IACnE,qBAAqB;IACrB,mEAAmE;IAEnE,yCAAyC;IACzC,IAAW,eAAe;QACtB,OAAO,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;IAC/B,CAAC;IAED,mEAAmE;IACnE,iBAAiB;IACjB,mEAAmE;IAEnE;;;;OAIG;IACI,cAAc,CAAC,UAAkB;QACpC,IAAI,CAAC,UAAU;YAAE,OAAO,SAAS,CAAC;QAClC,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,UAAU,CAAC,CAAC;IAChE,CAAC;IAED;;;;OAIG;IACI,oBAAoB,CAAC,QAAgB;QACxC,IAAI,CAAC,QAAQ;YAAE,OAAO,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC5C,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,CAAC;IACjF,CAAC;IAED,mEAAmE;IACnE,sBAAsB;IACtB,mEAAmE;IAEnE;;;;;OAKG;IACI,GAAG,CAAC,UAAkB;QACzB,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM;YAAE,OAAO,SAAS,CAAC;QAC9B,OAAO,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;IAED;;;;;OAKG;IACI,UAAU,CAAC,UAAkB,EAAE,eAAwB,IAAI;QAC9D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACjC,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO,YAAY,CAAC;QAC3C,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC;IAC/C,CAAC;IAED;;;;;OAKG;IACI,SAAS,CAAC,UAAkB,EAAE,eAAuB,CAAC;QACzD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACjC,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO,YAAY,CAAC;QAC3C,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAC3B,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC;IACxD,CAAC;IAED;;;;;OAKG;IACI,OAAO,CAAI,UAAkB,EAAE,YAAgB;QAClD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACjC,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO,YAAY,CAAC;QAC3C,IAAI,CAAC;YACD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAM,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,YAAY,CAAC;QACxB,CAAC;IACL,CAAC;IAED,mEAAmE;IACnE,eAAe;IACf,mEAAmE;IAEnE;;;;;;;;;;;OAWG;IACI,KAAK,CAAC,GAAG,CAAC,UAAkB,EAAE,KAAa,EAAE,WAAsB;QACtE,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,OAAO,CAAC,KAAK,CAAC,yCAAyC,UAAU,aAAa,CAAC,CAAC;YAChF,OAAO,KAAK,CAAC;QACjB,CAAC;QAED,IAAI,CAAC;YACD,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC;YACrB,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAClC,IAAI,KAAK,EAAE,CAAC;gBACR,OAAO,IAAI,CAAC;YAChB,CAAC;iBAAM,CAAC;gBACJ,OAAO,CAAC,KAAK,CAAC,2CAA2C,EAAE,MAAM,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;gBACzF,OAAO,KAAK,CAAC;YACjB,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,kCAAkC,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAC1G,OAAO,KAAK,CAAC;QACjB,CAAC;IACL,CAAC;IAED,mEAAmE;IACnE,kBAAkB;IAClB,mEAAmE;IAEnE;;;OAGG;IACK,YAAY,CAAC,MAAqC;QACtD,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC;QACzB,IAAI,GAAG,IAAI,IAAI,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvC,OAAO,GAAG,CAAC;QACf,CAAC;QACD,OAAO,MAAM,CAAC,YAAY,CAAC;IAC/B,CAAC;CACJ"}

package/dist/engines/SearchEngineBase.d.ts

@@ -0,0 +1,76 @@
+import { BaseEngine, IMetadataProvider, UserInfo } from "@memberjunction/core";
+import { MJSearchProviderEntity } from "../generated/entity_subclasses.js";
+/**
+ * SearchEngineBase provides cached access to SearchProvider metadata.
+ * Loads all MJ: Search Providers records via BaseEngine and provides
+ * typed getters and lookups for use anywhere (client or server).
+ *
+ * The server-side SearchEngine class uses SearchEngineBase.Instance to
+ * access cached provider metadata instead of loading directly via RunView.
+ *
+ * Uses BaseEngine for automatic caching and entity-event-based auto-refresh
+ * so that provider configuration changes are reflected without manual reload.
+ *
+ * Usage:
+ * ```typescript
+ * const base = SearchEngineBase.Instance;
+ * await base.Config(false, contextUser);
+ *
+ * // Get all active providers
+ * const activeProviders = base.ActiveProviders;
+ *
+ * // Find a provider by driver class
+ * const vectorProvider = base.GetProviderByDriverClass('VectorSearchProvider');
+ * ```
+ */
+export declare class SearchEngineBase extends BaseEngine<SearchEngineBase> {
+    /**
+     * Returns the global singleton instance.
+     */
+    static get Instance(): SearchEngineBase;
+    private _providers;
+    /**
+     * Configures the engine by loading all search provider records from the database.
+     * @param forceRefresh - If true, forces a refresh from the database even if data is cached
+     * @param contextUser - Optional user context for server-side operations
+     * @param provider - Optional metadata provider
+     */
+    Config(forceRefresh?: boolean, contextUser?: UserInfo, provider?: IMetadataProvider): Promise<void>;
+    /** All search provider records (any status) */
+    get Providers(): MJSearchProviderEntity[];
+    /** Only active search providers, sorted by Priority ascending */
+    get ActiveProviders(): MJSearchProviderEntity[];
+    /** Active providers that support preview/autocomplete searches */
+    get PreviewProviders(): MJSearchProviderEntity[];
+    /**
+     * Find a provider by its DriverClass key.
+     * @param driverClass - The DriverClass value (e.g., 'VectorSearchProvider')
+     * @returns The provider entity, or undefined if not found
+     */
+    GetProviderByDriverClass(driverClass: string): MJSearchProviderEntity | undefined;
+    /**
+     * Find a provider by its Name.
+     * @param name - The provider name (e.g., 'Semantic')
+     * @returns The provider entity, or undefined if not found
+     */
+    GetProviderByName(name: string): MJSearchProviderEntity | undefined;
+    /**
+     * Find a provider by its ID.
+     * @param id - The provider record ID
+     * @returns The provider entity, or undefined if not found
+     */
+    GetProviderById(id: string): MJSearchProviderEntity | undefined;
+    /**
+     * Get the display label for a source type, resolving from provider metadata.
+     * Falls back to the source type string if no provider matches.
+     * @param sourceType - The source type key (e.g., 'vector', 'entity')
+     */
+    GetDisplayNameForSourceType(sourceType: string): string;
+    /**
+     * Get the icon for a source type, resolving from provider metadata.
+     * Falls back to a generic icon if no provider matches.
+     * @param sourceType - The source type key (e.g., 'vector', 'entity')
+     */
+    GetIconForSourceType(sourceType: string): string;
+}
+//# sourceMappingURL=SearchEngineBase.d.ts.map

package/dist/engines/SearchEngineBase.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SearchEngineBase.d.ts","sourceRoot":"","sources":["../../src/engines/SearchEngineBase.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAA4B,iBAAiB,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAGzG,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAExE;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,qBACa,gBAAiB,SAAQ,UAAU,CAAC,gBAAgB,CAAC;IAC9D;;OAEG;IACH,WAAkB,QAAQ,IAAI,gBAAgB,CAE7C;IAED,OAAO,CAAC,UAAU,CAAgC;IAElD;;;;;OAKG;IACU,MAAM,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAgBhH,+CAA+C;IAC/C,IAAW,SAAS,IAAI,sBAAsB,EAAE,CAE/C;IAED,iEAAiE;IACjE,IAAW,eAAe,IAAI,sBAAsB,EAAE,CAIrD;IAED,kEAAkE;IAClE,IAAW,gBAAgB,IAAI,sBAAsB,EAAE,CAEtD;IAMD;;;;OAIG;IACI,wBAAwB,CAAC,WAAW,EAAE,MAAM,GAAG,sBAAsB,GAAG,SAAS;IAKxF;;;;OAIG;IACI,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,sBAAsB,GAAG,SAAS;IAM1E;;;;OAIG;IACI,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,sBAAsB,GAAG,SAAS;IAKtE;;;;OAIG;IACI,2BAA2B,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM;IAQ9D;;;;OAIG;IACI,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM;CAO1D"}

package/dist/engines/SearchEngineBase.js

@@ -0,0 +1,141 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+import { BaseEngine } from "@memberjunction/core";
+import { RegisterForStartup } from "@memberjunction/core";
+import { UUIDsEqual } from "@memberjunction/global";
+/**
+ * SearchEngineBase provides cached access to SearchProvider metadata.
+ * Loads all MJ: Search Providers records via BaseEngine and provides
+ * typed getters and lookups for use anywhere (client or server).
+ *
+ * The server-side SearchEngine class uses SearchEngineBase.Instance to
+ * access cached provider metadata instead of loading directly via RunView.
+ *
+ * Uses BaseEngine for automatic caching and entity-event-based auto-refresh
+ * so that provider configuration changes are reflected without manual reload.
+ *
+ * Usage:
+ * ```typescript
+ * const base = SearchEngineBase.Instance;
+ * await base.Config(false, contextUser);
+ *
+ * // Get all active providers
+ * const activeProviders = base.ActiveProviders;
+ *
+ * // Find a provider by driver class
+ * const vectorProvider = base.GetProviderByDriverClass('VectorSearchProvider');
+ * ```
+ */
+let SearchEngineBase = class SearchEngineBase extends BaseEngine {
+    constructor() {
+        super(...arguments);
+        this._providers = [];
+    }
+    /**
+     * Returns the global singleton instance.
+     */
+    static get Instance() {
+        return super.getInstance();
+    }
+    /**
+     * Configures the engine by loading all search provider records from the database.
+     * @param forceRefresh - If true, forces a refresh from the database even if data is cached
+     * @param contextUser - Optional user context for server-side operations
+     * @param provider - Optional metadata provider
+     */
+    async Config(forceRefresh, contextUser, provider) {
+        const configs = [
+            {
+                Type: 'entity',
+                EntityName: 'MJ: Search Providers',
+                PropertyName: '_providers',
+                CacheLocal: true,
+            }
+        ];
+        await this.Load(configs, provider, forceRefresh, contextUser);
+    }
+    // ================================================================
+    // Cached data getters
+    // ================================================================
+    /** All search provider records (any status) */
+    get Providers() {
+        return this._providers || [];
+    }
+    /** Only active search providers, sorted by Priority ascending */
+    get ActiveProviders() {
+        return this.Providers
+            .filter(p => p.Status === 'Active')
+            .sort((a, b) => a.Priority - b.Priority);
+    }
+    /** Active providers that support preview/autocomplete searches */
+    get PreviewProviders() {
+        return this.ActiveProviders.filter(p => p.SupportsPreview);
+    }
+    // ================================================================
+    // Lookup helpers
+    // ================================================================
+    /**
+     * Find a provider by its DriverClass key.
+     * @param driverClass - The DriverClass value (e.g., 'VectorSearchProvider')
+     * @returns The provider entity, or undefined if not found
+     */
+    GetProviderByDriverClass(driverClass) {
+        if (!driverClass)
+            return undefined;
+        return this._providers.find(p => p.DriverClass === driverClass);
+    }
+    /**
+     * Find a provider by its Name.
+     * @param name - The provider name (e.g., 'Semantic')
+     * @returns The provider entity, or undefined if not found
+     */
+    GetProviderByName(name) {
+        if (!name)
+            return undefined;
+        const lower = name.trim().toLowerCase();
+        return this._providers.find(p => p.Name.trim().toLowerCase() === lower);
+    }
+    /**
+     * Find a provider by its ID.
+     * @param id - The provider record ID
+     * @returns The provider entity, or undefined if not found
+     */
+    GetProviderById(id) {
+        if (!id)
+            return undefined;
+        return this._providers.find(p => UUIDsEqual(p.ID, id));
+    }
+    /**
+     * Get the display label for a source type, resolving from provider metadata.
+     * Falls back to the source type string if no provider matches.
+     * @param sourceType - The source type key (e.g., 'vector', 'entity')
+     */
+    GetDisplayNameForSourceType(sourceType) {
+        const provider = this.ActiveProviders.find(p => {
+            const driverLower = p.DriverClass.toLowerCase();
+            return driverLower.startsWith(sourceType.toLowerCase());
+        });
+        return provider?.DisplayName ?? provider?.Name ?? sourceType;
+    }
+    /**
+     * Get the icon for a source type, resolving from provider metadata.
+     * Falls back to a generic icon if no provider matches.
+     * @param sourceType - The source type key (e.g., 'vector', 'entity')
+     */
+    GetIconForSourceType(sourceType) {
+        const provider = this.ActiveProviders.find(p => {
+            const driverLower = p.DriverClass.toLowerCase();
+            return driverLower.startsWith(sourceType.toLowerCase());
+        });
+        return provider?.Icon ?? 'fa-solid fa-circle';
+    }
+};
+SearchEngineBase = __decorate([
+    RegisterForStartup()
+], SearchEngineBase);
+export { SearchEngineBase };
+//# sourceMappingURL=SearchEngineBase.js.map

package/dist/engines/SearchEngineBase.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SearchEngineBase.js","sourceRoot":"","sources":["../../src/engines/SearchEngineBase.ts"],"names":[],"mappings":";;;;;;AAAA,OAAO,EAAE,UAAU,EAAyD,MAAM,sBAAsB,CAAC;AACzG,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAGpD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEI,IAAM,gBAAgB,GAAtB,MAAM,gBAAiB,SAAQ,UAA4B;IAA3D;;QAQK,eAAU,GAA6B,EAAE,CAAC;IAqGtD,CAAC;IA5GG;;OAEG;IACI,MAAM,KAAK,QAAQ;QACtB,OAAO,KAAK,CAAC,WAAW,EAAoB,CAAC;IACjD,CAAC;IAID;;;;;OAKG;IACI,KAAK,CAAC,MAAM,CAAC,YAAsB,EAAE,WAAsB,EAAE,QAA4B;QAC5F,MAAM,OAAO,GAAwC;YACjD;gBACI,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE,sBAAsB;gBAClC,YAAY,EAAE,YAAY;gBAC1B,UAAU,EAAE,IAAI;aACnB;SACJ,CAAC;QACF,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;IAClE,CAAC;IAED,mEAAmE;IACnE,sBAAsB;IACtB,mEAAmE;IAEnE,+CAA+C;IAC/C,IAAW,SAAS;QAChB,OAAO,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC;IACjC,CAAC;IAED,iEAAiE;IACjE,IAAW,eAAe;QACtB,OAAO,IAAI,CAAC,SAAS;aAChB,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC;aAClC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;IACjD,CAAC;IAED,kEAAkE;IAClE,IAAW,gBAAgB;QACvB,OAAO,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;IAC/D,CAAC;IAED,mEAAmE;IACnE,iBAAiB;IACjB,mEAAmE;IAEnE;;;;OAIG;IACI,wBAAwB,CAAC,WAAmB;QAC/C,IAAI,CAAC,WAAW;YAAE,OAAO,SAAS,CAAC;QACnC,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,WAAW,CAAC,CAAC;IACpE,CAAC;IAED;;;;OAIG;IACI,iBAAiB,CAAC,IAAY;QACjC,IAAI,CAAC,IAAI;YAAE,OAAO,SAAS,CAAC;QAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACxC,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,CAAC;IAC5E,CAAC;IAED;;;;OAIG;IACI,eAAe,CAAC,EAAU;QAC7B,IAAI,CAAC,EAAE;YAAE,OAAO,SAAS,CAAC;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IAC3D,CAAC;IAED;;;;OAIG;IACI,2BAA2B,CAAC,UAAkB;QACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;YAC3C,MAAM,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC;YAChD,OAAO,WAAW,CAAC,UAAU,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC;QAC5D,CAAC,CAAC,CAAC;QACH,OAAO,QAAQ,EAAE,WAAW,IAAI,QAAQ,EAAE,IAAI,IAAI,UAAU,CAAC;IACjE,CAAC;IAED;;;;OAIG;IACI,oBAAoB,CAAC,UAAkB;QAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;YAC3C,MAAM,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC;YAChD,OAAO,WAAW,CAAC,UAAU,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC;QAC5D,CAAC,CAAC,CAAC;QACH,OAAO,QAAQ,EAAE,IAAI,IAAI,oBAAoB,CAAC;IAClD,CAAC;CACJ,CAAA;AA7GY,gBAAgB;IAD5B,kBAAkB,EAAE;GACR,gBAAgB,CA6G5B"}

package/dist/engines/UserInfoEngine.d.ts

@@ -4,8 +4,9 @@ import { ApplicationInfo, BaseEngine, IMetadataProvider, UserInfo } from '@membe
  * - 'installed_active': User has UserApplication record with IsActive=true
  * - 'installed_inactive': User has UserApplication record with IsActive=false
  * - 'not_installed': User has no UserApplication record for this app
+ * - 'not_authorized': User's roles do not grant access to the application
  */
-export type UserApplicationAccessStatus = 'installed_active' | 'installed_inactive' | 'not_installed';
+export type UserApplicationAccessStatus = 'installed_active' | 'installed_inactive' | 'not_installed' | 'not_authorized';
 import { MJUserNotificationEntity, MJUserNotificationTypeEntity, MJWorkspaceEntity, MJUserApplicationEntity, MJUserFavoriteEntity, MJUserRecordLogEntity, MJUserSettingEntity, MJUserNotificationPreferenceEntity } from '../generated/entity_subclasses.js';
 /**
  * UserInfoEngine is a singleton engine that provides centralized access to user-specific data
@@ -42,6 +43,7 @@ export declare class UserInfoEngine extends BaseEngine<UserInfoEngine> {
     private _UserSettings;
     private _NotificationTypes;
     private _UserNotificationPreferences;
+    private _applicationRoles;
     private _loadedForUserId;
     private _createDefaultAppsPromise;
     /**
@@ -231,10 +233,22 @@ export declare class UserInfoEngine extends BaseEngine<UserInfoEngine> {
     get LoadedForUserId(): string | null;
     /**
      * Check the user's access status for an application.
+     * First checks role-based authorization (ApplicationRole records), then installation status.
      * @param applicationId - The application ID to check
      * @returns The user's access status for this application
      */
     CheckUserApplicationAccess(applicationId: string): UserApplicationAccessStatus;
+    /**
+     * Checks if the current user's roles grant access to the application.
+     * If no ApplicationRole records exist for the app, access is open (backwards compatible).
+     * If records exist, user must have at least one role with CanAccess=1.
+     */
+    UserHasApplicationAccess(applicationId: string): boolean;
+    /**
+     * Checks if the current user can administer a specific application.
+     * Requires an explicit ApplicationRole record with CanAdmin=1.
+     */
+    UserCanAdminApplication(applicationId: string): boolean;
     /**
      * Check if an application is inactive in the system metadata.
      * @param applicationId - The application ID to check

package/dist/engines/UserInfoEngine.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"UserInfoEngine.d.ts","sourceRoot":"","sources":["../../src/engines/UserInfoEngine.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EACf,UAAU,EAEV,iBAAiB,EAGjB,QAAQ,EACT,MAAM,sBAAsB,CAAC;AAG9B;;;;;GAKG;AACH,MAAM,MAAM,2BAA2B,GAAG,kBAAkB,GAAG,oBAAoB,GAAG,eAAe,CAAC;AACtG,OAAO,EACL,wBAAwB,EACxB,4BAA4B,EAC5B,iBAAiB,EACjB,uBAAuB,EACvB,oBAAoB,EACpB,qBAAqB,EACrB,mBAAmB,EACnB,kCAAkC,EACnC,MAAM,gCAAgC,CAAC;AAExC;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,qBACa,cAAe,SAAQ,UAAU,CAAC,cAAc,CAAC;IAC5D;;;OAGG;IACH,WAAkB,QAAQ,IAAI,cAAc,CAE3C;IAGD,OAAO,CAAC,kBAAkB,CAAkC;IAC5D,OAAO,CAAC,WAAW,CAA2B;IAC9C,OAAO,CAAC,iBAAiB,CAAiC;IAC1D,OAAO,CAAC,cAAc,CAA8B;IACpD,OAAO,CAAC,eAAe,CAA+B;IACtD,OAAO,CAAC,aAAa,CAA6B;IAGlD,OAAO,CAAC,kBAAkB,CAAsC;IAEhE,OAAO,CAAC,4BAA4B,CAA4C;IAGhF,OAAO,CAAC,gBAAgB,CAAuB;IAG/C,OAAO,CAAC,yBAAyB,CAAmD;IAMpF;;;OAGG;IACH,OAAO,CAAC,mBAAmB,CAAe;IAE1C;;;OAGG;IACH,OAAO,CAAC,gBAAgB,CAAwF;IAEhH;;OAEG;IACH,OAAO,CAAC,sBAAsB,CAA8C;IAE5E;;;OAGG;IACH,OAAO,CAAC,aAAa,CAA8B;IAEnD;;;;;;;OAOG;IACU,MAAM,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IA8EhH;;OAEG;IACH,IAAW,iBAAiB,IAAI,wBAAwB,EAAE,CAKzD;IAED;;OAEG;IACH,IAAW,YAAY,IAAI,mBAAmB,EAAE,CAG/C;IAED;;;;OAIG;IACI,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAKzD;;;;OAIG;IACI,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,mBAAmB,GAAG,SAAS;IAI5E;;;;;;OAMG;IACU,UAAU,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;IA0CpG;;;;OAIG;IACU,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IA+BhE;;OAEG;IACH,IAAW,kBAAkB,IAAI,MAAM,CAEtC;IAED;;;;OAIG;IACH,IAAW,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAO1C;IAED;;;;;;;;;;;OAWG;IACI,mBAAmB,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,QAAQ,GAAG,IAAI;IAkB3F;;;;;;OAMG;IACU,oBAAoB,IAAI,OAAO,CAAC,IAAI,CAAC;IAoClD;;;OAGG;YACW,eAAe;IAiB7B;;OAEG;IACH,IAAW,kBAAkB,IAAI,OAAO,CAEvC;IAED;;OAEG;IACH,IAAW,oBAAoB,IAAI,MAAM,CAExC;IAED;;OAEG;IACH,IAAW,mBAAmB,IAAI,wBAAwB,EAAE,CAE3D;IAED;;OAEG;IACH,IAAW,uBAAuB,IAAI,MAAM,CAE3C;IAED;;OAEG;IACH,IAAW,UAAU,IAAI,iBAAiB,EAAE,CAG3C;IAED;;OAEG;IACH,IAAW,gBAAgB,IAAI,iBAAiB,GAAG,IAAI,CAGtD;IAED;;OAEG;IACH,IAAW,gBAAgB,IAAI,uBAAuB,EAAE,CAWvD;IAED;;OAEG;IACH,IAAW,aAAa,IAAI,oBAAoB,EAAE,CAKjD;IAED;;OAEG;IACH,IAAW,cAAc,IAAI,qBAAqB,EAAE,CAKnD;IAMD;;;OAGG;IACH,IAAW,gBAAgB,IAAI,wBAAwB,EAAE,CAExD;IAED;;;OAGG;IACH,IAAW,mBAAmB,IAAI,uBAAuB,EAAE,CAE1D;IAED;;;OAGG;IACI,uBAAuB,CAAC,MAAM,EAAE,MAAM,GAAG,wBAAwB,EAAE;IAM1E;;;OAGG;IACI,0BAA0B,CAAC,MAAM,EAAE,MAAM,GAAG,uBAAuB,EAAE;IAe5E;;;OAGG;IACI,mBAAmB,CAAC,cAAc,EAAE,MAAM,GAAG,wBAAwB,GAAG,SAAS;IAIxF;;;OAGG;IACI,yBAAyB,CAAC,aAAa,EAAE,MAAM,GAAG,uBAAuB,GAAG,SAAS;IAI5F;;;OAGG;IACI,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,oBAAoB,EAAE;IAItE;;;;OAIG;IACI,yBAAyB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,GAAE,MAAW,GAAG,qBAAqB,EAAE;IAIlG;;;;OAIG;IACI,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO;IAIpE;;OAEG;IACH,IAAW,eAAe,IAAI,MAAM,GAAG,IAAI,CAE1C;IAMD;;;;OAIG;IACI,0BAA0B,CAAC,aAAa,EAAE,MAAM,GAAG,2BAA2B;IAUrF;;;OAGG;IACI,qBAAqB,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO;IAM5D;;;OAGG;IACI,kBAAkB,CAAC,aAAa,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS;IAK7E;;;OAGG;IACI,2BAA2B,CAAC,UAAU,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS;IAcnF;;;OAGG;IACU,OAAO,CAAC,WAAW,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ3D;;OAEG;IACH,IAAW,sBAAsB,IAAI,uBAAuB,EAAE,CAE7D;IAED;;;OAGG;IACI,cAAc,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO;IAIrD;;;OAGG;IACI,oBAAoB,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO;IAK3D;;;;;;OAMG;IACU,kBAAkB,CAAC,aAAa,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC;IA4DvH;;;;;OAKG;IACU,iBAAiB,CAAC,aAAa,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;IA6B/F;;;;;;OAMG;IACU,kBAAkB,CAAC,aAAa,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;IA6BhG;;;;;OAKG;IACU,oBAAoB,CAAC,aAAa,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;IA4BlG;;;;;;;;;OASG;IACU,yBAAyB,CAAC,WAAW,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC,uBAAuB,EAAE,CAAC;IAkBlG;;;OAGG;YACW,2BAA2B;IAuDzC;;OAEG;IACH,IAAW,uBAAuB,IAAI,kCAAkC,EAAE,CAGzE;IAEM,wBAAwB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,kCAAkC,GAAG,SAAS;IAI/G;;OAEG;IACI,+BAA+B,CAAC,MAAM,EAAE,MAAM,GAAG,kCAAkC,GAAG,SAAS;IAKtG;;;OAGG;IACH,IAAW,iBAAiB,IAAI,4BAA4B,EAAE,CAE7D;CACF"}
+{"version":3,"file":"UserInfoEngine.d.ts","sourceRoot":"","sources":["../../src/engines/UserInfoEngine.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EACf,UAAU,EAEV,iBAAiB,EAGjB,QAAQ,EACT,MAAM,sBAAsB,CAAC;AAG9B;;;;;;GAMG;AACH,MAAM,MAAM,2BAA2B,GAAG,kBAAkB,GAAG,oBAAoB,GAAG,eAAe,GAAG,gBAAgB,CAAC;AAEzH,OAAO,EAEL,wBAAwB,EACxB,4BAA4B,EAC5B,iBAAiB,EACjB,uBAAuB,EACvB,oBAAoB,EACpB,qBAAqB,EACrB,mBAAmB,EACnB,kCAAkC,EACnC,MAAM,gCAAgC,CAAC;AAExC;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,qBACa,cAAe,SAAQ,UAAU,CAAC,cAAc,CAAC;IAC5D;;;OAGG;IACH,WAAkB,QAAQ,IAAI,cAAc,CAE3C;IAGD,OAAO,CAAC,kBAAkB,CAAkC;IAC5D,OAAO,CAAC,WAAW,CAA2B;IAC9C,OAAO,CAAC,iBAAiB,CAAiC;IAC1D,OAAO,CAAC,cAAc,CAA8B;IACpD,OAAO,CAAC,eAAe,CAA+B;IACtD,OAAO,CAAC,aAAa,CAA6B;IAGlD,OAAO,CAAC,kBAAkB,CAAsC;IAEhE,OAAO,CAAC,4BAA4B,CAA4C;IAEhF,OAAO,CAAC,iBAAiB,CAAiC;IAG1D,OAAO,CAAC,gBAAgB,CAAuB;IAG/C,OAAO,CAAC,yBAAyB,CAAmD;IAMpF;;;OAGG;IACH,OAAO,CAAC,mBAAmB,CAAe;IAE1C;;;OAGG;IACH,OAAO,CAAC,gBAAgB,CAAwF;IAEhH;;OAEG;IACH,OAAO,CAAC,sBAAsB,CAA8C;IAE5E;;;OAGG;IACH,OAAO,CAAC,aAAa,CAA8B;IAEnD;;;;;;;OAOG;IACU,MAAM,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAoFhH;;OAEG;IACH,IAAW,iBAAiB,IAAI,wBAAwB,EAAE,CAKzD;IAED;;OAEG;IACH,IAAW,YAAY,IAAI,mBAAmB,EAAE,CAG/C;IAED;;;;OAIG;IACI,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAKzD;;;;OAIG;IACI,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,mBAAmB,GAAG,SAAS;IAI5E;;;;;;OAMG;IACU,UAAU,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;IA0CpG;;;;OAIG;IACU,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IA+BhE;;OAEG;IACH,IAAW,kBAAkB,IAAI,MAAM,CAEtC;IAED;;;;OAIG;IACH,IAAW,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAO1C;IAED;;;;;;;;;;;OAWG;IACI,mBAAmB,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,QAAQ,GAAG,IAAI;IAkB3F;;;;;;OAMG;IACU,oBAAoB,IAAI,OAAO,CAAC,IAAI,CAAC;IAoClD;;;OAGG;YACW,eAAe;IAiB7B;;OAEG;IACH,IAAW,kBAAkB,IAAI,OAAO,CAEvC;IAED;;OAEG;IACH,IAAW,oBAAoB,IAAI,MAAM,CAExC;IAED;;OAEG;IACH,IAAW,mBAAmB,IAAI,wBAAwB,EAAE,CAE3D;IAED;;OAEG;IACH,IAAW,uBAAuB,IAAI,MAAM,CAE3C;IAED;;OAEG;IACH,IAAW,UAAU,IAAI,iBAAiB,EAAE,CAG3C;IAED;;OAEG;IACH,IAAW,gBAAgB,IAAI,iBAAiB,GAAG,IAAI,CAGtD;IAED;;OAEG;IACH,IAAW,gBAAgB,IAAI,uBAAuB,EAAE,CAWvD;IAED;;OAEG;IACH,IAAW,aAAa,IAAI,oBAAoB,EAAE,CAKjD;IAED;;OAEG;IACH,IAAW,cAAc,IAAI,qBAAqB,EAAE,CAKnD;IAMD;;;OAGG;IACH,IAAW,gBAAgB,IAAI,wBAAwB,EAAE,CAExD;IAED;;;OAGG;IACH,IAAW,mBAAmB,IAAI,uBAAuB,EAAE,CAE1D;IAED;;;OAGG;IACI,uBAAuB,CAAC,MAAM,EAAE,MAAM,GAAG,wBAAwB,EAAE;IAM1E;;;OAGG;IACI,0BAA0B,CAAC,MAAM,EAAE,MAAM,GAAG,uBAAuB,EAAE;IAe5E;;;OAGG;IACI,mBAAmB,CAAC,cAAc,EAAE,MAAM,GAAG,wBAAwB,GAAG,SAAS;IAIxF;;;OAGG;IACI,yBAAyB,CAAC,aAAa,EAAE,MAAM,GAAG,uBAAuB,GAAG,SAAS;IAI5F;;;OAGG;IACI,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,oBAAoB,EAAE;IAItE;;;;OAIG;IACI,yBAAyB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,GAAE,MAAW,GAAG,qBAAqB,EAAE;IAIlG;;;;OAIG;IACI,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO;IAIpE;;OAEG;IACH,IAAW,eAAe,IAAI,MAAM,GAAG,IAAI,CAE1C;IAMD;;;;;OAKG;IACI,0BAA0B,CAAC,aAAa,EAAE,MAAM,GAAG,2BAA2B;IAgBrF;;;;OAIG;IACI,wBAAwB,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO;IAoB/D;;;OAGG;IACI,uBAAuB,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO;IAiB9D;;;OAGG;IACI,qBAAqB,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO;IAM5D;;;OAGG;IACI,kBAAkB,CAAC,aAAa,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS;IAK7E;;;OAGG;IACI,2BAA2B,CAAC,UAAU,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS;IAcnF;;;OAGG;IACU,OAAO,CAAC,WAAW,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ3D;;OAEG;IACH,IAAW,sBAAsB,IAAI,uBAAuB,EAAE,CAE7D;IAED;;;OAGG;IACI,cAAc,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO;IAIrD;;;OAGG;IACI,oBAAoB,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO;IAK3D;;;;;;OAMG;IACU,kBAAkB,CAAC,aAAa,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC;IA4DvH;;;;;OAKG;IACU,iBAAiB,CAAC,aAAa,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;IA6B/F;;;;;;OAMG;IACU,kBAAkB,CAAC,aAAa,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;IA6BhG;;;;;OAKG;IACU,oBAAoB,CAAC,aAAa,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;IA4BlG;;;;;;;;;OASG;IACU,yBAAyB,CAAC,WAAW,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC,uBAAuB,EAAE,CAAC;IAkBlG;;;OAGG;YACW,2BAA2B;IAuDzC;;OAEG;IACH,IAAW,uBAAuB,IAAI,kCAAkC,EAAE,CAGzE;IAEM,wBAAwB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,kCAAkC,GAAG,SAAS;IAI/G;;OAEG;IACI,+BAA+B,CAAC,MAAM,EAAE,MAAM,GAAG,kCAAkC,GAAG,SAAS;IAKtG;;;OAGG;IACH,IAAW,iBAAiB,IAAI,4BAA4B,EAAE,CAE7D;CACF"}

package/dist/engines/UserInfoEngine.js

@@ -41,6 +41,8 @@ let UserInfoEngine = class UserInfoEngine extends BaseEngine {
         this._NotificationTypes = [];
         // User notification preferences (user-specific)
         this._UserNotificationPreferences = [];
+        // Application role assignments (global - not user-specific)
+        this._applicationRoles = [];
         // Track the user ID we loaded data for
         this._loadedForUserId = null;
         // Track in-progress CreateDefaultApplications call to prevent duplicate execution
@@ -148,6 +150,12 @@ let UserInfoEngine = class UserInfoEngine extends BaseEngine {
                 PropertyName: '_UserNotificationPreferences',
                 CacheLocal: true,
             },
+            {
+                Type: 'entity',
+                EntityName: 'MJ: Application Roles',
+                PropertyName: '_applicationRoles',
+                CacheLocal: true,
+            },
         ];
         await super.Load(configs, provider, forceRefresh, contextUser);
         this._loadedForUserId = userId;
@@ -536,16 +544,53 @@ let UserInfoEngine = class UserInfoEngine extends BaseEngine {
     // ========================================================================
     /**
      * Check the user's access status for an application.
+     * First checks role-based authorization (ApplicationRole records), then installation status.
      * @param applicationId - The application ID to check
      * @returns The user's access status for this application
      */
     CheckUserApplicationAccess(applicationId) {
+        // Step 1: Check role-based authorization first
+        if (!this.UserHasApplicationAccess(applicationId)) {
+            return 'not_authorized';
+        }
+        // Step 2: Then check installation status (existing logic)
         const userApp = this.GetUserApplicationByAppId(applicationId);
         if (!userApp) {
             return 'not_installed';
         }
         return userApp.IsActive ? 'installed_active' : 'installed_inactive';
     }
+    /**
+     * Checks if the current user's roles grant access to the application.
+     * If no ApplicationRole records exist for the app, access is open (backwards compatible).
+     * If records exist, user must have at least one role with CanAccess=1.
+     */
+    UserHasApplicationAccess(applicationId) {
+        const appRoles = this._applicationRoles.filter(ar => UUIDsEqual(ar.ApplicationID, applicationId));
+        // No role records = open access (backwards compatible)
+        if (appRoles.length === 0)
+            return true;
+        // Check if any of the user's roles have CanAccess=1
+        const md = new Metadata();
+        const user = md.CurrentUser;
+        if (!user || !user.UserRoles)
+            return false;
+        return user.UserRoles.some(ur => appRoles.some(ar => UUIDsEqual(ar.RoleID, ur.RoleID) && ar.CanAccess));
+    }
+    /**
+     * Checks if the current user can administer a specific application.
+     * Requires an explicit ApplicationRole record with CanAdmin=1.
+     */
+    UserCanAdminApplication(applicationId) {
+        const appRoles = this._applicationRoles.filter(ar => UUIDsEqual(ar.ApplicationID, applicationId));
+        if (appRoles.length === 0)
+            return false; // No admin without explicit grant
+        const md = new Metadata();
+        const user = md.CurrentUser;
+        if (!user || !user.UserRoles)
+            return false;
+        return user.UserRoles.some(ur => appRoles.some(ar => UUIDsEqual(ar.RoleID, ur.RoleID) && ar.CanAdmin));
+    }
     /**
      * Check if an application is inactive in the system metadata.
      * @param applicationId - The application ID to check