@memberjunction/core-entities 6.2.0-edge.3 → 6.2.0-edge.5

package/dist/custom/ConversationForkAccess.d.ts

@@ -0,0 +1,15 @@
+import { type IMetadataProvider, type UserInfo } from '@memberjunction/core';
+/** The MJ Authorization that lets a person start a fork of a conversation (Fork from here, Edit or Regenerate as a fork). */
+export declare const CONVERSATIONS_FORK_AUTHORIZATION = "Conversations: Fork";
+/**
+ * True when `user` holds {@link CONVERSATIONS_FORK_AUTHORIZATION} through a role: an Allow grant and
+ * no Deny on any of the user's roles (a grant of a parent authorization counts). False without a user
+ * or a provider, and when the authorization is missing from the provider's metadata or inactive, so a
+ * deployment that has not synced it fails closed.
+ */
+export declare function UserCanFork(user: UserInfo | null | undefined, provider: IMetadataProvider | null | undefined): boolean;
+/** The `MJ: User Settings` key of a person's forking switch; the value `off` turns forking off for them. */
+export declare const CONVERSATIONS_FORKING_SETTING_KEY = "mj.conversations.forking.v1";
+/** True unless the stored forking setting is `off`: no setting, an empty one or `on` mean forking is on. */
+export declare function IsForkingSettingOn(value: string | null | undefined): boolean;
+//# sourceMappingURL=ConversationForkAccess.d.ts.map

package/dist/custom/ConversationForkAccess.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ConversationForkAccess.d.ts","sourceRoot":"","sources":["../../src/custom/ConversationForkAccess.ts"],"names":[],"mappings":"AAAA,OAAO,EAA0B,KAAK,iBAAiB,EAAE,KAAK,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAErG,6HAA6H;AAC7H,eAAO,MAAM,gCAAgC,wBAAwB,CAAC;AAEtE;;;;;GAKG;AACH,wBAAgB,WAAW,CACvB,IAAI,EAAE,QAAQ,GAAG,IAAI,GAAG,SAAS,EACjC,QAAQ,EAAE,iBAAiB,GAAG,IAAI,GAAG,SAAS,GAC/C,OAAO,CAWT;AAED,4GAA4G;AAC5G,eAAO,MAAM,iCAAiC,gCAAgC,CAAC;AAE/E,4GAA4G;AAC5G,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAE5E"}

package/dist/custom/ConversationForkAccess.js

@@ -0,0 +1,28 @@
+import { AuthorizationEvaluator } from '@memberjunction/core';
+/** The MJ Authorization that lets a person start a fork of a conversation (Fork from here, Edit or Regenerate as a fork). */
+export const CONVERSATIONS_FORK_AUTHORIZATION = 'Conversations: Fork';
+/**
+ * True when `user` holds {@link CONVERSATIONS_FORK_AUTHORIZATION} through a role: an Allow grant and
+ * no Deny on any of the user's roles (a grant of a parent authorization counts). False without a user
+ * or a provider, and when the authorization is missing from the provider's metadata or inactive, so a
+ * deployment that has not synced it fails closed.
+ */
+export function UserCanFork(user, provider) {
+    if (!user || !provider) {
+        return false;
+    }
+    const authorizations = provider.Authorizations ?? [];
+    const wanted = CONVERSATIONS_FORK_AUTHORIZATION.toLowerCase();
+    const grant = authorizations.find((a) => a.Name?.trim().toLowerCase() === wanted);
+    if (!grant) {
+        return false;
+    }
+    return new AuthorizationEvaluator().UserCanExecuteWithAncestors(grant, user, authorizations);
+}
+/** The `MJ: User Settings` key of a person's forking switch; the value `off` turns forking off for them. */
+export const CONVERSATIONS_FORKING_SETTING_KEY = 'mj.conversations.forking.v1';
+/** True unless the stored forking setting is `off`: no setting, an empty one or `on` mean forking is on. */
+export function IsForkingSettingOn(value) {
+    return (value ?? '').trim().toLowerCase() !== 'off';
+}
+//# sourceMappingURL=ConversationForkAccess.js.map

package/dist/custom/ConversationForkAccess.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ConversationForkAccess.js","sourceRoot":"","sources":["../../src/custom/ConversationForkAccess.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAyC,MAAM,sBAAsB,CAAC;AAErG,6HAA6H;AAC7H,MAAM,CAAC,MAAM,gCAAgC,GAAG,qBAAqB,CAAC;AAEtE;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CACvB,IAAiC,EACjC,QAA8C;IAE9C,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QACrB,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,MAAM,cAAc,GAAG,QAAQ,CAAC,cAAc,IAAI,EAAE,CAAC;IACrD,MAAM,MAAM,GAAG,gCAAgC,CAAC,WAAW,EAAE,CAAC;IAC9D,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,CAAC;IAClF,IAAI,CAAC,KAAK,EAAE,CAAC;QACT,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,OAAO,IAAI,sBAAsB,EAAE,CAAC,2BAA2B,CAAC,KAAK,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;AACjG,CAAC;AAED,4GAA4G;AAC5G,MAAM,CAAC,MAAM,iCAAiC,GAAG,6BAA6B,CAAC;AAE/E,4GAA4G;AAC5G,MAAM,UAAU,kBAAkB,CAAC,KAAgC;IAC/D,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC;AACxD,CAAC"}

package/dist/custom/ConversationWriteAccess.d.ts

@@ -0,0 +1,21 @@
+import { IMetadataProvider, UserInfo } from '@memberjunction/core';
+/** Resource type ID for conversations in the resource permission system. */
+export declare const CONVERSATIONS_RESOURCE_TYPE_ID = "81D4BC3D-9FEB-EF11-B01A-286B35C04427";
+export interface ConversationWriteDecision {
+    Allowed: boolean;
+    Reason: string | null;
+    /** True only when the conversation loaded and the user is its owner. */
+    IsOwner: boolean;
+    /**
+     * True when the conversation loaded for the user. A conversation that did not load is `Allowed` whether it is
+     * missing or hidden from the user by a row filter, so a caller that must tell those apart checks this.
+     */
+    Loaded: boolean;
+}
+/**
+ * Whether a user may write rows that belong to a conversation: the owner, or a user with
+ * an Edit or Owner grant. Server-side only; a non-database provider trusts the enforcement
+ * that already ran upstream.
+ */
+export declare function UserMayWriteConversation(provider: IMetadataProvider, user: UserInfo | null | undefined, conversationId: string): Promise<ConversationWriteDecision>;
+//# sourceMappingURL=ConversationWriteAccess.d.ts.map

package/dist/custom/ConversationWriteAccess.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ConversationWriteAccess.d.ts","sourceRoot":"","sources":["../../src/custom/ConversationWriteAccess.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAKnE,4EAA4E;AAC5E,eAAO,MAAM,8BAA8B,yCAAyC,CAAC;AAErF,MAAM,WAAW,yBAAyB;IACtC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,wEAAwE;IACxE,OAAO,EAAE,OAAO,CAAC;IACjB;;;OAGG;IACH,MAAM,EAAE,OAAO,CAAC;CACnB;AAED;;;;GAIG;AACH,wBAAsB,wBAAwB,CAC1C,QAAQ,EAAE,iBAAiB,EAC3B,IAAI,EAAE,QAAQ,GAAG,IAAI,GAAG,SAAS,EACjC,cAAc,EAAE,MAAM,GACvB,OAAO,CAAC,yBAAyB,CAAC,CAuBpC"}

package/dist/custom/ConversationWriteAccess.js

@@ -0,0 +1,34 @@
+import { UUIDsEqual } from '@memberjunction/global';
+import { ResourcePermissionEngine } from './ResourcePermissions/ResourcePermissionEngine.js';
+/** Resource type ID for conversations in the resource permission system. */
+export const CONVERSATIONS_RESOURCE_TYPE_ID = '81D4BC3D-9FEB-EF11-B01A-286B35C04427';
+/**
+ * Whether a user may write rows that belong to a conversation: the owner, or a user with
+ * an Edit or Owner grant. Server-side only; a non-database provider trusts the enforcement
+ * that already ran upstream.
+ */
+export async function UserMayWriteConversation(provider, user, conversationId) {
+    if (provider?.ProviderType !== 'Database' || !user) {
+        return { Allowed: true, Reason: null, IsOwner: false, Loaded: false };
+    }
+    const conversation = await provider.GetEntityObject('MJ: Conversations', user);
+    if (!(await conversation.Load(conversationId))) {
+        return { Allowed: true, Reason: null, IsOwner: false, Loaded: false };
+    }
+    if (conversation.UserID && UUIDsEqual(conversation.UserID, user.ID)) {
+        return { Allowed: true, Reason: null, IsOwner: true, Loaded: true };
+    }
+    const engine = ResourcePermissionEngine.GetProviderInstance(provider, ResourcePermissionEngine);
+    await engine.Config(false, user);
+    const grant = engine
+        .GetUserAvailableResources(user, CONVERSATIONS_RESOURCE_TYPE_ID)
+        .find((p) => UUIDsEqual(p.ResourceRecordID, conversationId));
+    if (!grant) {
+        return { Allowed: false, Reason: 'You do not have access to this conversation.', IsOwner: false, Loaded: true };
+    }
+    if (grant.PermissionLevel === 'Edit' || grant.PermissionLevel === 'Owner') {
+        return { Allowed: true, Reason: null, IsOwner: false, Loaded: true };
+    }
+    return { Allowed: false, Reason: 'You have view-only access to this conversation.', IsOwner: false, Loaded: true };
+}
+//# sourceMappingURL=ConversationWriteAccess.js.map

package/dist/custom/ConversationWriteAccess.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ConversationWriteAccess.js","sourceRoot":"","sources":["../../src/custom/ConversationWriteAccess.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAEpD,OAAO,EAAE,wBAAwB,EAAE,MAAM,gDAAgD,CAAC;AAE1F,4EAA4E;AAC5E,MAAM,CAAC,MAAM,8BAA8B,GAAG,sCAAsC,CAAC;AAcrF;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC1C,QAA2B,EAC3B,IAAiC,EACjC,cAAsB;IAEtB,IAAI,QAAQ,EAAE,YAAY,KAAK,UAAU,IAAI,CAAC,IAAI,EAAE,CAAC;QACjD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC1E,CAAC;IACD,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,eAAe,CAAuB,mBAAmB,EAAE,IAAI,CAAC,CAAC;IACrG,IAAI,CAAC,CAAC,MAAM,YAAY,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC;QAC7C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC1E,CAAC;IACD,IAAI,YAAY,CAAC,MAAM,IAAI,UAAU,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QAClE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACxE,CAAC;IACD,MAAM,MAAM,GAAG,wBAAwB,CAAC,mBAAmB,CAA2B,QAAQ,EAAE,wBAAwB,CAA6B,CAAC;IACtJ,MAAM,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,MAAM;SACf,yBAAyB,CAAC,IAAI,EAAE,8BAA8B,CAAC;SAC/D,IAAI,CAAC,CAAC,CAA6B,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC;IAC7F,IAAI,CAAC,KAAK,EAAE,CAAC;QACT,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,8CAA8C,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACpH,CAAC;IACD,IAAI,KAAK,CAAC,eAAe,KAAK,MAAM,IAAI,KAAK,CAAC,eAAe,KAAK,OAAO,EAAE,CAAC;QACxE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACzE,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,iDAAiD,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AACvH,CAAC"}

package/dist/custom/MJConversationBranchEntityExtended.d.ts

@@ -0,0 +1,30 @@
+import { EntityDeleteOptions, EntitySaveOptions } from '@memberjunction/core';
+import { MJConversationBranchEntity } from '../generated/entity_subclasses.js';
+/**
+ * Branch rows (forks) follow the message write rule: owner or Edit/Owner grant. Creating one on the
+ * server also needs the `Conversations: Fork` authorization; a save with no context user is trusted.
+ *
+ * Delete is refused while the fork still has its own `ConversationDetail` rows or child forks: the
+ * generated delete procedure clears `BranchID` on those rows and `ParentBranchID` on those children,
+ * which would move them into Main. Deleting a conversation does not use this class; its delete
+ * procedure removes the forks and rows in SQL.
+ */
+export declare class MJConversationBranchEntityExtended extends MJConversationBranchEntity {
+    Save(options?: EntitySaveOptions): Promise<boolean>;
+    Delete(options?: EntityDeleteOptions): Promise<boolean>;
+    /**
+     * True when this save may create a fork. On a database provider with a context user, that user must
+     * hold `Conversations: Fork`; records the refusal otherwise. Other providers leave the check to the
+     * server, and a save with no context user is trusted.
+     */
+    private contextUserMayFork;
+    private currentUserMayWrite;
+    /**
+     * True when no `ConversationDetail` row is on this fork and no fork names it as its parent.
+     * Records the refusal and returns false otherwise, and when either count cannot be read.
+     */
+    private hasNoRowsOrChildBranches;
+    private recordDenied;
+}
+export declare function LoadMJConversationBranchEntityExtended(): void;
+//# sourceMappingURL=MJConversationBranchEntityExtended.d.ts.map

package/dist/custom/MJConversationBranchEntityExtended.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"MJConversationBranchEntityExtended.d.ts","sourceRoot":"","sources":["../../src/custom/MJConversationBranchEntityExtended.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgC,mBAAmB,EAAE,iBAAiB,EAAwC,MAAM,sBAAsB,CAAC;AAElJ,OAAO,EAAE,0BAA0B,EAAE,MAAM,gCAAgC,CAAC;AAa5E;;;;;;;;GAQG;AACH,qBACa,kCAAmC,SAAQ,0BAA0B;IAC/D,IAAI,CAAC,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC;IAUnD,MAAM,CAAC,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,OAAO,CAAC;IAUtE;;;;OAIG;IACH,OAAO,CAAC,kBAAkB;YAaZ,mBAAmB;IAkBjC;;;OAGG;YACW,wBAAwB;IA2BtC,OAAO,CAAC,YAAY;CASvB;AAED,wBAAgB,sCAAsC,IAAI,IAAI,CAAG"}

package/dist/custom/MJConversationBranchEntityExtended.js

@@ -0,0 +1,120 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+import { BaseEntity, BaseEntityResult, LogError, RunView } from '@memberjunction/core';
+import { EscapeSQLString, RegisterClass } from '@memberjunction/global';
+import { MJConversationBranchEntity } from '../generated/entity_subclasses.js';
+import { UserMayWriteConversation } from './ConversationWriteAccess.js';
+import { UserCanFork } from './ConversationForkAccess.js';
+/** The refusal recorded when a person without the `Conversations: Fork` authorization creates a fork. */
+const FORK_CREATE_REFUSED_MESSAGE = 'You do not have permission to fork conversations.';
+/** The refusal recorded when a fork that still has messages or child forks is deleted. */
+const FORK_DELETE_REFUSED_MESSAGE = 'A fork that has messages or forks under it cannot be deleted.';
+/** The refusal recorded when the delete guard cannot read the fork's messages or child forks. */
+const FORK_DELETE_CHECK_FAILED_MESSAGE = 'Unable to check whether the fork has messages or forks under it.';
+/**
+ * Branch rows (forks) follow the message write rule: owner or Edit/Owner grant. Creating one on the
+ * server also needs the `Conversations: Fork` authorization; a save with no context user is trusted.
+ *
+ * Delete is refused while the fork still has its own `ConversationDetail` rows or child forks: the
+ * generated delete procedure clears `BranchID` on those rows and `ParentBranchID` on those children,
+ * which would move them into Main. Deleting a conversation does not use this class; its delete
+ * procedure removes the forks and rows in SQL.
+ */
+let MJConversationBranchEntityExtended = class MJConversationBranchEntityExtended extends MJConversationBranchEntity {
+    async Save(options) {
+        if (!this.IsSaved && !this.contextUserMayFork()) {
+            return false;
+        }
+        if (!(await this.currentUserMayWrite(this.IsSaved ? 'update' : 'create'))) {
+            return false;
+        }
+        return super.Save(options);
+    }
+    async Delete(options) {
+        if (!(await this.currentUserMayWrite('delete'))) {
+            return false;
+        }
+        if (!(await this.hasNoRowsOrChildBranches())) {
+            return false;
+        }
+        return super.Delete(options);
+    }
+    /**
+     * True when this save may create a fork. On a database provider with a context user, that user must
+     * hold `Conversations: Fork`; records the refusal otherwise. Other providers leave the check to the
+     * server, and a save with no context user is trusted.
+     */
+    contextUserMayFork() {
+        const provider = this.ProviderToUse;
+        const user = this.ContextCurrentUser;
+        if (provider?.ProviderType !== 'Database' || !user) {
+            return true;
+        }
+        if (UserCanFork(user, provider)) {
+            return true;
+        }
+        this.recordDenied(FORK_CREATE_REFUSED_MESSAGE, 'create');
+        return false;
+    }
+    async currentUserMayWrite(resultType) {
+        try {
+            const decision = await UserMayWriteConversation(this.ProviderToUse, this.ContextCurrentUser, this.ConversationID);
+            if (!decision.Allowed) {
+                this.recordDenied(decision.Reason ?? 'Permission denied.', resultType);
+            }
+            return decision.Allowed;
+        }
+        catch (error) {
+            LogError(`MJConversationBranchEntityExtended: permission check failed for conversation ${this.ConversationID}: ${error instanceof Error ? error.message : String(error)}`);
+            this.recordDenied('Unable to verify conversation permissions.', resultType);
+            return false;
+        }
+    }
+    /**
+     * True when no `ConversationDetail` row is on this fork and no fork names it as its parent.
+     * Records the refusal and returns false otherwise, and when either count cannot be read.
+     */
+    async hasNoRowsOrChildBranches() {
+        const id = EscapeSQLString(this.ID);
+        try {
+            const [rows, children] = await new RunView(this.RunViewProviderToUse).RunViews([
+                { EntityName: 'MJ: Conversation Details', ExtraFilter: `BranchID='${id}'`, ResultType: 'count_only' },
+                { EntityName: 'MJ: Conversation Branches', ExtraFilter: `ParentBranchID='${id}'`, ResultType: 'count_only' },
+            ], this.ContextCurrentUser);
+            if (!rows?.Success || !children?.Success) {
+                LogError(`MJConversationBranchEntityExtended: delete check failed for fork ${this.ID}: ${rows?.ErrorMessage ?? ''} ${children?.ErrorMessage ?? ''}`.trim());
+                this.recordDenied(FORK_DELETE_CHECK_FAILED_MESSAGE, 'delete');
+                return false;
+            }
+            if (rows.TotalRowCount > 0 || children.TotalRowCount > 0) {
+                this.recordDenied(FORK_DELETE_REFUSED_MESSAGE, 'delete');
+                return false;
+            }
+            return true;
+        }
+        catch (error) {
+            LogError(`MJConversationBranchEntityExtended: delete check failed for fork ${this.ID}: ${error instanceof Error ? error.message : String(error)}`);
+            this.recordDenied(FORK_DELETE_CHECK_FAILED_MESSAGE, 'delete');
+            return false;
+        }
+    }
+    recordDenied(message, resultType) {
+        const result = new BaseEntityResult();
+        result.Success = false;
+        result.Type = resultType;
+        result.Message = message;
+        result.StartedAt = new Date();
+        result.EndedAt = new Date();
+        this.RegisterResultHistoryEntry(result);
+    }
+};
+MJConversationBranchEntityExtended = __decorate([
+    RegisterClass(BaseEntity, 'MJ: Conversation Branches')
+], MJConversationBranchEntityExtended);
+export { MJConversationBranchEntityExtended };
+export function LoadMJConversationBranchEntityExtended() { }
+//# sourceMappingURL=MJConversationBranchEntityExtended.js.map

package/dist/custom/MJConversationBranchEntityExtended.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MJConversationBranchEntityExtended.js","sourceRoot":"","sources":["../../src/custom/MJConversationBranchEntityExtended.ts"],"names":[],"mappings":";;;;;;AAAA,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAA6D,QAAQ,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAClJ,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACxE,OAAO,EAAE,0BAA0B,EAAE,MAAM,gCAAgC,CAAC;AAC5E,OAAO,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AACrE,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAEvD,yGAAyG;AACzG,MAAM,2BAA2B,GAAG,mDAAmD,CAAC;AAExF,0FAA0F;AAC1F,MAAM,2BAA2B,GAAG,+DAA+D,CAAC;AAEpG,iGAAiG;AACjG,MAAM,gCAAgC,GAAG,kEAAkE,CAAC;AAE5G;;;;;;;;GAQG;AAEI,IAAM,kCAAkC,GAAxC,MAAM,kCAAmC,SAAQ,0BAA0B;IACrE,KAAK,CAAC,IAAI,CAAC,OAA2B;QAC3C,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,CAAC;YAC9C,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;YACxE,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IAEQ,KAAK,CAAC,MAAM,CAAC,OAA6B;QAC/C,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;YAC9C,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,wBAAwB,EAAE,CAAC,EAAE,CAAC;YAC3C,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,OAAO,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC;IAED;;;;OAIG;IACK,kBAAkB;QACtB,MAAM,QAAQ,GAAG,IAAI,CAAC,aAA6C,CAAC;QACpE,MAAM,IAAI,GAAG,IAAI,CAAC,kBAAkB,CAAC;QACrC,IAAI,QAAQ,EAAE,YAAY,KAAK,UAAU,IAAI,CAAC,IAAI,EAAE,CAAC;YACjD,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,IAAI,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,2BAA2B,EAAE,QAAQ,CAAC,CAAC;QACzD,OAAO,KAAK,CAAC;IACjB,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAAC,UAA0C;QACxE,IAAI,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAC3C,IAAI,CAAC,aAA6C,EAClD,IAAI,CAAC,kBAAkB,EACvB,IAAI,CAAC,cAAc,CACtB,CAAC;YACF,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;gBACpB,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,IAAI,oBAAoB,EAAE,UAAU,CAAC,CAAC;YAC3E,CAAC;YACD,OAAO,QAAQ,CAAC,OAAO,CAAC;QAC5B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,QAAQ,CAAC,gFAAgF,IAAI,CAAC,cAAc,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC3K,IAAI,CAAC,YAAY,CAAC,4CAA4C,EAAE,UAAU,CAAC,CAAC;YAC5E,OAAO,KAAK,CAAC;QACjB,CAAC;IACL,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,wBAAwB;QAClC,MAAM,EAAE,GAAG,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACpC,IAAI,CAAC;YACD,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,GAAG,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,QAAQ,CAC1E;gBACI,EAAE,UAAU,EAAE,0BAA0B,EAAE,WAAW,EAAE,aAAa,EAAE,GAAG,EAAE,UAAU,EAAE,YAAY,EAAE;gBACrG,EAAE,UAAU,EAAE,2BAA2B,EAAE,WAAW,EAAE,mBAAmB,EAAE,GAAG,EAAE,UAAU,EAAE,YAAY,EAAE;aAC/G,EACD,IAAI,CAAC,kBAAkB,CAC1B,CAAC;YACF,IAAI,CAAC,IAAI,EAAE,OAAO,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC;gBACvC,QAAQ,CAAC,oEAAoE,IAAI,CAAC,EAAE,KAAK,IAAI,EAAE,YAAY,IAAI,EAAE,IAAI,QAAQ,EAAE,YAAY,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC5J,IAAI,CAAC,YAAY,CAAC,gCAAgC,EAAE,QAAQ,CAAC,CAAC;gBAC9D,OAAO,KAAK,CAAC;YACjB,CAAC;YACD,IAAI,IAAI,CAAC,aAAa,GAAG,CAAC,IAAI,QAAQ,CAAC,aAAa,GAAG,CAAC,EAAE,CAAC;gBACvD,IAAI,CAAC,YAAY,CAAC,2BAA2B,EAAE,QAAQ,CAAC,CAAC;gBACzD,OAAO,KAAK,CAAC;YACjB,CAAC;YACD,OAAO,IAAI,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,QAAQ,CAAC,oEAAoE,IAAI,CAAC,EAAE,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACnJ,IAAI,CAAC,YAAY,CAAC,gCAAgC,EAAE,QAAQ,CAAC,CAAC;YAC9D,OAAO,KAAK,CAAC;QACjB,CAAC;IACL,CAAC;IAEO,YAAY,CAAC,OAAe,EAAE,UAA0C;QAC5E,MAAM,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;QACtC,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC;QACvB,MAAM,CAAC,IAAI,GAAG,UAAU,CAAC;QACzB,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;QACzB,MAAM,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAC9B,MAAM,CAAC,OAAO,GAAG,IAAI,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC;IAC5C,CAAC;CACJ,CAAA;AAjGY,kCAAkC;IAD9C,aAAa,CAAC,UAAU,EAAE,2BAA2B,CAAC;GAC1C,kCAAkC,CAiG9C;;AAED,MAAM,UAAU,sCAAsC,KAAU,CAAC"}

package/dist/custom/MJConversationDetailEntityExtended.d.ts

@@ -15,6 +15,22 @@ import { MJConversationDetailEntity } from '../generated/entity_subclasses.js';
  * owner-only — even users with `Edit`-level grants on the conversation are
  * blocked from changing them, because the storage is a single value per
  * message (it represents the owner's evaluation, not per-grantee opinions).
+ *
+ * **Who a message is from** (A19, the rules for people's messages). For a `Role='User'` message, the owner and
+ * grantees alike:
+ *  - post only as themselves: a new message naming another person's `UserID` is refused, and a grantee's message
+ *    with no `UserID` gets the grantee's (an empty one reads as the conversation's owner). The owner's stays empty,
+ *    since it already means them;
+ *  - change who wrote it and what it says ({@link AUTHORED_FIELDS}) only when they wrote it, and never its role;
+ *  - never move it to another conversation or fork ({@link PLACEMENT_FIELDS});
+ *  - delete it only when they wrote it, or own the conversation.
+ *
+ * The system user is exempt from these authorship rules, since server code writes on people's behalf, but it still
+ * needs to own the conversation or hold a grant on it, as before: some server paths elevate an anonymous visitor to
+ * the system user (MJ#4791), and this gate keeps those paths out of other people's conversations, so no transaction
+ * variable may set the row or conversation it writes ({@link ACCESS_GATED_FIELDS}) for it either. The plan's "the
+ * system user may write any message" lands with A19's second half, which must design that boundary. Agent replies
+ * (`Role='AI'`/`'Error'`) keep today's rules until MJ's chat stops writing them from the browser.
  * MJ's permissions engine has no native primitive for per-field row-conditional
  * write rules, so this gate lives here rather than in `MJ: Entity Permissions`.
  *
@@ -28,11 +44,37 @@ export declare class MJConversationDetailEntityExtended extends MJConversationDe
     Delete(options?: EntityDeleteOptions): Promise<boolean>;
     private currentUserMayWrite;
     /**
-     * Names of the rating/feedback fields that are dirty on this save.
-     * Used by `currentUserMayWrite` to detect attempts by non-owners to
-     * modify the owner-only fields and surface a specific denial message.
+     * Why the user may not write to this message's conversation at all, or `null` when they may. The owner may. Anyone
+     * else may not change the rating fields, which are the owner's alone, and needs an `Edit` or `Owner` grant. A
+     * conversation that does not load for the user is hidden from them when it exists (a row filter), and they may not
+     * write to it; when no one can find it, it is missing or being created in this same transaction, and the foreign
+     * key and the base save decide, as before.
+     */
+    private accessRefusal;
+    /**
+     * Why this write breaks the rules for people's messages (see the class doc), or `null` when it does not. On a new
+     * message from a grantee with no `UserID`, fills in the grantee's.
+     */
+    private authorshipRefusal;
+    /** A new person's message names its author as the poster, or names no one (filled in for a grantee). */
+    private postRefusal;
+    /**
+     * An existing person's message: only its author changes who wrote it and what it says, no one its role (to or
+     * from `User`), and no one moves it to another conversation or fork. A message with no `UserID` is the owner's.
+     */
+    private changeRefusal;
+    /** A person's message is deleted by its author or by the conversation's owner (whose it is with no `UserID`). */
+    private deleteRefusal;
+    /** Whether the conversation exists, read as the system user; false when there is no system user to ask. */
+    private conversationExists;
+    /**
+     * Whether a transaction variable of this message's group sets one of `fields` on it. The field is resolved the way
+     * `Set` resolves it at submit (trimmed, any case).
      */
-    private dirtyRatingFieldNames;
+    private fieldSetByTransactionVariable;
+    private isFieldDirty;
+    /** A field's value as loaded, before this save's changes; `null` when it was empty or is not text. */
+    private originalFieldText;
     /**
      * Records WHY the write was refused as a NEW `ResultHistory` entry, so callers that read
      * `LatestResult.CompleteMessage` see the reason (issue #4791).

package/dist/custom/MJConversationDetailEntityExtended.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"MJConversationDetailEntityExtended.d.ts","sourceRoot":"","sources":["../../src/custom/MJConversationDetailEntityExtended.ts"],"names":[],"mappings":"AAAA,OAAO,EAGH,mBAAmB,EACnB,iBAAiB,EAGpB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACH,0BAA0B,EAG7B,MAAM,gCAAgC,CAAC;AAcxC;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,qBACa,kCAAmC,SAAQ,0BAA0B;IAC/D,IAAI,CAAC,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC;IAOnD,MAAM,CAAC,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,OAAO,CAAC;YAOxD,mBAAmB;IA6EjC;;;;OAIG;IACH,OAAO,CAAC,qBAAqB;IAS7B;;;;;;;;OAQG;IACH,OAAO,CAAC,YAAY;CASvB;AAED,6FAA6F;AAC7F,wBAAgB,sCAAsC,IAAI,IAAI,CAE7D"}
+{"version":3,"file":"MJConversationDetailEntityExtended.d.ts","sourceRoot":"","sources":["../../src/custom/MJConversationDetailEntityExtended.ts"],"names":[],"mappings":"AAAA,OAAO,EAGH,mBAAmB,EAEnB,iBAAiB,EAKpB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,0BAA0B,EAAwB,MAAM,gCAAgC,CAAC;AA4ClG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,qBACa,kCAAmC,SAAQ,0BAA0B;IAC/D,IAAI,CAAC,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC;IAYnD,MAAM,CAAC,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,OAAO,CAAC;YAOxD,mBAAmB;IAwDjC;;;;;;OAMG;YACW,aAAa;IAoB3B;;;OAGG;IACH,OAAO,CAAC,iBAAiB;IAOzB,wGAAwG;IACxG,OAAO,CAAC,WAAW;IAgBnB;;;OAGG;IACH,OAAO,CAAC,aAAa;IA2BrB,iHAAiH;IACjH,OAAO,CAAC,aAAa;IASrB,2GAA2G;YAC7F,kBAAkB;IAahC;;;OAGG;IACH,OAAO,CAAC,6BAA6B;IAOrC,OAAO,CAAC,YAAY;IAIpB,sGAAsG;IACtG,OAAO,CAAC,iBAAiB;IAKzB;;;;;;;;OAQG;IACH,OAAO,CAAC,YAAY;CASvB;AAED,6FAA6F;AAC7F,wBAAgB,sCAAsC,IAAI,IAAI,CAE7D"}