@memberjunction/core-entities 6.2.0-edge.4 → 6.2.0-edge.6

package/dist/custom/ConversationWriteAccess.d.ts

@@ -6,6 +6,11 @@ export interface ConversationWriteDecision {
     Reason: string | null;
     /** True only when the conversation loaded and the user is its owner. */
     IsOwner: boolean;
+    /**
+     * True when the conversation loaded for the user. A conversation that did not load is `Allowed` whether it is
+     * missing or hidden from the user by a row filter, so a caller that must tell those apart checks this.
+     */
+    Loaded: boolean;
 }
 /**
  * Whether a user may write rows that belong to a conversation: the owner, or a user with

package/dist/custom/ConversationWriteAccess.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ConversationWriteAccess.d.ts","sourceRoot":"","sources":["../../src/custom/ConversationWriteAccess.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAKnE,4EAA4E;AAC5E,eAAO,MAAM,8BAA8B,yCAAyC,CAAC;AAErF,MAAM,WAAW,yBAAyB;IACtC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,wEAAwE;IACxE,OAAO,EAAE,OAAO,CAAC;CACpB;AAED;;;;GAIG;AACH,wBAAsB,wBAAwB,CAC1C,QAAQ,EAAE,iBAAiB,EAC3B,IAAI,EAAE,QAAQ,GAAG,IAAI,GAAG,SAAS,EACjC,cAAc,EAAE,MAAM,GACvB,OAAO,CAAC,yBAAyB,CAAC,CAuBpC"}
+{"version":3,"file":"ConversationWriteAccess.d.ts","sourceRoot":"","sources":["../../src/custom/ConversationWriteAccess.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAKnE,4EAA4E;AAC5E,eAAO,MAAM,8BAA8B,yCAAyC,CAAC;AAErF,MAAM,WAAW,yBAAyB;IACtC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,wEAAwE;IACxE,OAAO,EAAE,OAAO,CAAC;IACjB;;;OAGG;IACH,MAAM,EAAE,OAAO,CAAC;CACnB;AAED;;;;GAIG;AACH,wBAAsB,wBAAwB,CAC1C,QAAQ,EAAE,iBAAiB,EAC3B,IAAI,EAAE,QAAQ,GAAG,IAAI,GAAG,SAAS,EACjC,cAAc,EAAE,MAAM,GACvB,OAAO,CAAC,yBAAyB,CAAC,CAuBpC"}

package/dist/custom/ConversationWriteAccess.js

@@ -9,14 +9,14 @@ export const CONVERSATIONS_RESOURCE_TYPE_ID = '81D4BC3D-9FEB-EF11-B01A-286B35C04
  */
 export async function UserMayWriteConversation(provider, user, conversationId) {
     if (provider?.ProviderType !== 'Database' || !user) {
-        return { Allowed: true, Reason: null, IsOwner: false };
+        return { Allowed: true, Reason: null, IsOwner: false, Loaded: false };
     }
     const conversation = await provider.GetEntityObject('MJ: Conversations', user);
     if (!(await conversation.Load(conversationId))) {
-        return { Allowed: true, Reason: null, IsOwner: false };
+        return { Allowed: true, Reason: null, IsOwner: false, Loaded: false };
     }
     if (conversation.UserID && UUIDsEqual(conversation.UserID, user.ID)) {
-        return { Allowed: true, Reason: null, IsOwner: true };
+        return { Allowed: true, Reason: null, IsOwner: true, Loaded: true };
     }
     const engine = ResourcePermissionEngine.GetProviderInstance(provider, ResourcePermissionEngine);
     await engine.Config(false, user);
@@ -24,11 +24,11 @@ export async function UserMayWriteConversation(provider, user, conversationId) {
         .GetUserAvailableResources(user, CONVERSATIONS_RESOURCE_TYPE_ID)
         .find((p) => UUIDsEqual(p.ResourceRecordID, conversationId));
     if (!grant) {
-        return { Allowed: false, Reason: 'You do not have access to this conversation.', IsOwner: false };
+        return { Allowed: false, Reason: 'You do not have access to this conversation.', IsOwner: false, Loaded: true };
     }
     if (grant.PermissionLevel === 'Edit' || grant.PermissionLevel === 'Owner') {
-        return { Allowed: true, Reason: null, IsOwner: false };
+        return { Allowed: true, Reason: null, IsOwner: false, Loaded: true };
     }
-    return { Allowed: false, Reason: 'You have view-only access to this conversation.', IsOwner: false };
+    return { Allowed: false, Reason: 'You have view-only access to this conversation.', IsOwner: false, Loaded: true };
 }
 //# sourceMappingURL=ConversationWriteAccess.js.map

package/dist/custom/ConversationWriteAccess.js.map

@@ -1 +1 @@
-{"version":3,"file":"ConversationWriteAccess.js","sourceRoot":"","sources":["../../src/custom/ConversationWriteAccess.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAEpD,OAAO,EAAE,wBAAwB,EAAE,MAAM,gDAAgD,CAAC;AAE1F,4EAA4E;AAC5E,MAAM,CAAC,MAAM,8BAA8B,GAAG,sCAAsC,CAAC;AASrF;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC1C,QAA2B,EAC3B,IAAiC,EACjC,cAAsB;IAEtB,IAAI,QAAQ,EAAE,YAAY,KAAK,UAAU,IAAI,CAAC,IAAI,EAAE,CAAC;QACjD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC3D,CAAC;IACD,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,eAAe,CAAuB,mBAAmB,EAAE,IAAI,CAAC,CAAC;IACrG,IAAI,CAAC,CAAC,MAAM,YAAY,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC;QAC7C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC3D,CAAC;IACD,IAAI,YAAY,CAAC,MAAM,IAAI,UAAU,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QAClE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC1D,CAAC;IACD,MAAM,MAAM,GAAG,wBAAwB,CAAC,mBAAmB,CAA2B,QAAQ,EAAE,wBAAwB,CAA6B,CAAC;IACtJ,MAAM,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,MAAM;SACf,yBAAyB,CAAC,IAAI,EAAE,8BAA8B,CAAC;SAC/D,IAAI,CAAC,CAAC,CAA6B,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC;IAC7F,IAAI,CAAC,KAAK,EAAE,CAAC;QACT,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,8CAA8C,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACtG,CAAC;IACD,IAAI,KAAK,CAAC,eAAe,KAAK,MAAM,IAAI,KAAK,CAAC,eAAe,KAAK,OAAO,EAAE,CAAC;QACxE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC3D,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,iDAAiD,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AACzG,CAAC"}
+{"version":3,"file":"ConversationWriteAccess.js","sourceRoot":"","sources":["../../src/custom/ConversationWriteAccess.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAEpD,OAAO,EAAE,wBAAwB,EAAE,MAAM,gDAAgD,CAAC;AAE1F,4EAA4E;AAC5E,MAAM,CAAC,MAAM,8BAA8B,GAAG,sCAAsC,CAAC;AAcrF;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC1C,QAA2B,EAC3B,IAAiC,EACjC,cAAsB;IAEtB,IAAI,QAAQ,EAAE,YAAY,KAAK,UAAU,IAAI,CAAC,IAAI,EAAE,CAAC;QACjD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC1E,CAAC;IACD,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,eAAe,CAAuB,mBAAmB,EAAE,IAAI,CAAC,CAAC;IACrG,IAAI,CAAC,CAAC,MAAM,YAAY,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC;QAC7C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC1E,CAAC;IACD,IAAI,YAAY,CAAC,MAAM,IAAI,UAAU,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QAClE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACxE,CAAC;IACD,MAAM,MAAM,GAAG,wBAAwB,CAAC,mBAAmB,CAA2B,QAAQ,EAAE,wBAAwB,CAA6B,CAAC;IACtJ,MAAM,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,MAAM;SACf,yBAAyB,CAAC,IAAI,EAAE,8BAA8B,CAAC;SAC/D,IAAI,CAAC,CAAC,CAA6B,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC;IAC7F,IAAI,CAAC,KAAK,EAAE,CAAC;QACT,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,8CAA8C,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACpH,CAAC;IACD,IAAI,KAAK,CAAC,eAAe,KAAK,MAAM,IAAI,KAAK,CAAC,eAAe,KAAK,OAAO,EAAE,CAAC;QACxE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACzE,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,iDAAiD,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AACvH,CAAC"}

package/dist/custom/MJConversationDetailEntityExtended.d.ts

@@ -15,6 +15,28 @@ import { MJConversationDetailEntity } from '../generated/entity_subclasses.js';
  * owner-only — even users with `Edit`-level grants on the conversation are
  * blocked from changing them, because the storage is a single value per
  * message (it represents the owner's evaluation, not per-grantee opinions).
+ *
+ * **Who a message is from** (A19, the rules for people's messages). For a `Role='User'` message, the owner and
+ * grantees alike:
+ *  - post only as themselves: a new message naming another person's `UserID` is refused, and a grantee's message
+ *    with no `UserID` gets the grantee's (an empty one reads as the conversation's owner). The owner's stays empty,
+ *    since it already means them;
+ *  - change who wrote it and what it says ({@link AUTHORED_FIELDS}) only when they wrote it, and never its role;
+ *  - never move it to another conversation or fork ({@link PLACEMENT_FIELDS});
+ *  - delete it only when they wrote it, or own the conversation.
+ *
+ * The system user is exempt from these authorship rules, since server code writes on people's behalf, but it still
+ * needs to own the conversation or hold a grant on it, as before: some server paths elevate an anonymous visitor to
+ * the system user (MJ#4791), and this gate keeps those paths out of other people's conversations, so no transaction
+ * variable may set the row or conversation it writes ({@link ACCESS_GATED_FIELDS}) for it either.
+ *
+ * **Only the server writes an agent's reply** (A19, second half). A reply (`Role` `AI` or `Error`) is created, and
+ * what it says ({@link REPLY_FIELDS}) changed, only on an instance server code marked with
+ * {@link MarkServerAuthoredReply}. The marker is not a field: no GraphQL input, `OldValues___` or transaction
+ * variable reaches it, so a person's save of a reply is refused whatever its user, and so is an unmarked save as the
+ * system user. A marked write still needs its context user (the person the reply is for, or whoever runs a
+ * host-driven turn) to own the conversation or hold a grant on it, so being the system user grants nothing new.
+ * Pinning, hiding, the owner's rating and other bookkeeping keep the conversation-level rules.
  * MJ's permissions engine has no native primitive for per-field row-conditional
  * write rules, so this gate lives here rather than in `MJ: Entity Permissions`.
  *
@@ -24,15 +46,59 @@ import { MJConversationDetailEntity } from '../generated/entity_subclasses.js';
  * round trips for permission lookups.
  */
 export declare class MJConversationDetailEntityExtended extends MJConversationDetailEntity {
+    private serverAuthoredReply;
+    /**
+     * Marks this instance as server code writing an agent's reply, so it may create a reply (`Role` `AI` or `Error`)
+     * and change what one says. Call it before `Save()`; it stays on the instance for every later save, like
+     * `SetCloneContext()`. The context user still needs to own the conversation or hold a grant on it.
+     *
+     * It is not a field: no GraphQL input, `OldValues___` or transaction variable can set it, and the browser's copy of
+     * this class never sends it. It has no effect on a person's message.
+     */
+    MarkServerAuthoredReply(): void;
+    /** Whether {@link MarkServerAuthoredReply} was called on this instance. */
+    get IsServerAuthoredReply(): boolean;
     Save(options?: EntitySaveOptions): Promise<boolean>;
     Delete(options?: EntityDeleteOptions): Promise<boolean>;
     private currentUserMayWrite;
     /**
-     * Names of the rating/feedback fields that are dirty on this save.
-     * Used by `currentUserMayWrite` to detect attempts by non-owners to
-     * modify the owner-only fields and surface a specific denial message.
+     * Why the user may not write to this message's conversation at all, or `null` when they may. The owner may. Anyone
+     * else may not change the rating fields, which are the owner's alone, and needs an `Edit` or `Owner` grant. A
+     * conversation that does not load for the user is hidden from them when it exists (a row filter), and they may not
+     * write to it; when no one can find it, it is missing or being created in this same transaction, and the foreign
+     * key and the base save decide, as before.
+     */
+    private accessRefusal;
+    /**
+     * Why this write would put words in an agent's mouth, or `null` when it does not: an unmarked save that creates a
+     * reply, turns a message into one, or changes what one says ({@link REPLY_FIELDS}). Applies to every user, the
+     * system user included. Deleting a reply keeps the conversation-level rules.
+     */
+    private replyRefusal;
+    /**
+     * Why this write breaks the rules for people's messages (see the class doc), or `null` when it does not. On a new
+     * message from a grantee with no `UserID`, fills in the grantee's.
+     */
+    private authorshipRefusal;
+    /** A new person's message names its author as the poster, or names no one (filled in for a grantee). */
+    private postRefusal;
+    /**
+     * An existing person's message: only its author changes who wrote it and what it says, no one its role (to or
+     * from `User`), and no one moves it to another conversation or fork. A message with no `UserID` is the owner's.
+     */
+    private changeRefusal;
+    /** A person's message is deleted by its author or by the conversation's owner (whose it is with no `UserID`). */
+    private deleteRefusal;
+    /** Whether the conversation exists, read as the system user; false when there is no system user to ask. */
+    private conversationExists;
+    /**
+     * Whether a transaction variable of this message's group sets one of `fields` on it. The field is resolved the way
+     * `Set` resolves it at submit (trimmed, any case).
      */
-    private dirtyRatingFieldNames;
+    private fieldSetByTransactionVariable;
+    private isFieldDirty;
+    /** A field's value as loaded, before this save's changes; `null` when it was empty or is not text. */
+    private originalFieldText;
     /**
      * Records WHY the write was refused as a NEW `ResultHistory` entry, so callers that read
      * `LatestResult.CompleteMessage` see the reason (issue #4791).

package/dist/custom/MJConversationDetailEntityExtended.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"MJConversationDetailEntityExtended.d.ts","sourceRoot":"","sources":["../../src/custom/MJConversationDetailEntityExtended.ts"],"names":[],"mappings":"AAAA,OAAO,EAGH,mBAAmB,EACnB,iBAAiB,EAGpB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,0BAA0B,EAAE,MAAM,gCAAgC,CAAC;AAW5E;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,qBACa,kCAAmC,SAAQ,0BAA0B;IAC/D,IAAI,CAAC,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC;IAOnD,MAAM,CAAC,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,OAAO,CAAC;YAOxD,mBAAmB;IA2DjC;;;;OAIG;IACH,OAAO,CAAC,qBAAqB;IAS7B;;;;;;;;OAQG;IACH,OAAO,CAAC,YAAY;CASvB;AAED,6FAA6F;AAC7F,wBAAgB,sCAAsC,IAAI,IAAI,CAE7D"}
+{"version":3,"file":"MJConversationDetailEntityExtended.d.ts","sourceRoot":"","sources":["../../src/custom/MJConversationDetailEntityExtended.ts"],"names":[],"mappings":"AAAA,OAAO,EAGH,mBAAmB,EAEnB,iBAAiB,EAKpB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,0BAA0B,EAAwB,MAAM,gCAAgC,CAAC;AAuFlG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AACH,qBACa,kCAAmC,SAAQ,0BAA0B;IAC9E,OAAO,CAAC,mBAAmB,CAAS;IAEpC;;;;;;;OAOG;IACI,uBAAuB,IAAI,IAAI;IAItC,2EAA2E;IAC3E,IAAW,qBAAqB,IAAI,OAAO,CAE1C;IAEc,IAAI,CAAC,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC;IAYnD,MAAM,CAAC,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,OAAO,CAAC;YAOxD,mBAAmB;IA2DjC;;;;;;OAMG;YACW,aAAa;IAoB3B;;;;OAIG;IACH,OAAO,CAAC,YAAY;IAWpB;;;OAGG;IACH,OAAO,CAAC,iBAAiB;IAOzB,wGAAwG;IACxG,OAAO,CAAC,WAAW;IAgBnB;;;OAGG;IACH,OAAO,CAAC,aAAa;IA2BrB,iHAAiH;IACjH,OAAO,CAAC,aAAa;IASrB,2GAA2G;YAC7F,kBAAkB;IAahC;;;OAGG;IACH,OAAO,CAAC,6BAA6B;IAOrC,OAAO,CAAC,YAAY;IAIpB,sGAAsG;IACtG,OAAO,CAAC,iBAAiB;IAKzB;;;;;;;;OAQG;IACH,OAAO,CAAC,YAAY;CASvB;AAED,6FAA6F;AAC7F,wBAAgB,sCAAsC,IAAI,IAAI,CAE7D"}

package/dist/custom/MJConversationDetailEntityExtended.js

@@ -4,8 +4,8 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
     else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
     return c > 3 && r && Object.defineProperty(target, key, r), r;
 };
-import { BaseEntity, BaseEntityResult, LogError } from '@memberjunction/core';
-import { RegisterClass } from '@memberjunction/global';
+import { BaseEntity, BaseEntityResult, EntityFieldInfo, LogError, WellKnownUserSource } from '@memberjunction/core';
+import { RegisterClass, UUIDsEqual } from '@memberjunction/global';
 import { MJConversationDetailEntity } from '../generated/entity_subclasses.js';
 import { UserMayWriteConversation } from './ConversationWriteAccess.js';
 /**
@@ -15,6 +15,74 @@ import { UserMayWriteConversation } from './ConversationWriteAccess.js';
  * the parent conversation cannot retroactively rewrite the owner's rating.
  */
 const OWNER_ONLY_RATING_FIELDS = ['UserRating', 'UserFeedback'];
+/**
+ * The fields of a person's (`Role='User'`) message that say who wrote it and what it says: its author, its role, its
+ * text, its attachment, its media type and where it sits in a thread. Only its author may change them, except
+ * `Role`, which no one may change. Other fields (pinning, hiding, bookkeeping the server writes) keep the
+ * conversation-level rules.
+ */
+const AUTHORED_FIELDS = ['UserID', 'Role', 'Message', 'ArtifactID', 'ArtifactVersionID', 'MediaType', 'ParentID'];
+/**
+ * Where a message sits: its conversation and its fork (`BranchID`, null is Main). No one moves a person's message,
+ * its author included: moving it takes it out of the thread it was written in.
+ */
+const PLACEMENT_FIELDS = ['ConversationID', 'BranchID'];
+/**
+ * The fields the access and reply-authorship rules, which hold for everyone (including the system user unless
+ * explicitly marked), decide on: which row is written (`ID`; an update's SQL is rebuilt with the variable's value at
+ * submit, so it would write another row), its conversation, its role (`Role` — a transaction variable setting `AI` or
+ * `Error` at submit would bypass the unmarked reply check), and the owner's rating. A transaction variable sets its
+ * field at submit, after the gate has run, so none of these may take its value from one.
+ */
+const ACCESS_GATED_FIELDS = ['ID', 'ConversationID', 'Role', ...OWNER_ONLY_RATING_FIELDS];
+/**
+ * {@link ACCESS_GATED_FIELDS} plus `BranchID` (placement on a fork) and the remaining {@link AUTHORED_FIELDS}
+ * (`Role` is already in {@link ACCESS_GATED_FIELDS}), which the authorship rules decide on and the system user skips.
+ */
+const GATED_FIELDS = [
+    ...ACCESS_GATED_FIELDS,
+    'BranchID',
+    ...AUTHORED_FIELDS.filter(field => field !== 'Role')
+];
+/**
+ * The fields of an agent's reply (`Role` `AI` or `Error`) that say what the agent said, who said it, and where it sits:
+ * the authored fields ({@link AUTHORED_FIELDS}: `UserID`, `Role`, `Message`, `ArtifactID`, `ArtifactVersionID`,
+ * `MediaType`, `ParentID`), plus its conversation (`ConversationID`) and fork (`BranchID`), its agent (`AgentID`),
+ * its status (`Status`) and error (`Error`), the form (`ResponseForm`), commands (`ActionableCommands`,
+ * `AutomaticCommands`), suggested replies (`SuggestedResponses`) and reflection (`ReflectionInsights`) it offers, and
+ * the turn timing and external reference (`CompletionTime`, `ExternalID`). Only a server write marked with
+ * {@link MJConversationDetailEntityExtended.MarkServerAuthoredReply} changes them. Pinning, hiding, the owner's rating
+ * and the other bookkeeping keep the conversation-level rules.
+ */
+const REPLY_FIELDS = [
+    ...AUTHORED_FIELDS,
+    'ConversationID',
+    'BranchID',
+    'AgentID',
+    'Status',
+    'Error',
+    'ResponseForm',
+    'ActionableCommands',
+    'AutomaticCommands',
+    'SuggestedResponses',
+    'ReflectionInsights',
+    'CompletionTime',
+    'ExternalID'
+];
+/** The refusal for a write that would put words in an agent's mouth. */
+const REPLY_REFUSAL = "Only the server writes an agent's reply.";
+/**
+ * Whether a `Role` value is a person's message. Compared the way validation and the database's CHECK constraint
+ * compare it (trimmed, any case), so `'user'` or `'User '`, which both store, cannot slip past these rules.
+ */
+function isPersonRole(role) {
+    return role != null && EntityFieldInfo.NormalizeValueListValue(role) === 'user';
+}
+/** Whether a `Role` value is an agent's reply (`AI` or `Error`), compared as {@link isPersonRole} compares. */
+function isReplyRole(role) {
+    const normalized = role == null ? null : EntityFieldInfo.NormalizeValueListValue(role);
+    return normalized === 'ai' || normalized === 'error';
+}
 /**
  * Server-side defense-in-depth for conversation sharing. The Angular chat UI
  * disables the message input when the current user only holds `View` access,
@@ -30,6 +98,28 @@ const OWNER_ONLY_RATING_FIELDS = ['UserRating', 'UserFeedback'];
  * owner-only — even users with `Edit`-level grants on the conversation are
  * blocked from changing them, because the storage is a single value per
  * message (it represents the owner's evaluation, not per-grantee opinions).
+ *
+ * **Who a message is from** (A19, the rules for people's messages). For a `Role='User'` message, the owner and
+ * grantees alike:
+ *  - post only as themselves: a new message naming another person's `UserID` is refused, and a grantee's message
+ *    with no `UserID` gets the grantee's (an empty one reads as the conversation's owner). The owner's stays empty,
+ *    since it already means them;
+ *  - change who wrote it and what it says ({@link AUTHORED_FIELDS}) only when they wrote it, and never its role;
+ *  - never move it to another conversation or fork ({@link PLACEMENT_FIELDS});
+ *  - delete it only when they wrote it, or own the conversation.
+ *
+ * The system user is exempt from these authorship rules, since server code writes on people's behalf, but it still
+ * needs to own the conversation or hold a grant on it, as before: some server paths elevate an anonymous visitor to
+ * the system user (MJ#4791), and this gate keeps those paths out of other people's conversations, so no transaction
+ * variable may set the row or conversation it writes ({@link ACCESS_GATED_FIELDS}) for it either.
+ *
+ * **Only the server writes an agent's reply** (A19, second half). A reply (`Role` `AI` or `Error`) is created, and
+ * what it says ({@link REPLY_FIELDS}) changed, only on an instance server code marked with
+ * {@link MarkServerAuthoredReply}. The marker is not a field: no GraphQL input, `OldValues___` or transaction
+ * variable reaches it, so a person's save of a reply is refused whatever its user, and so is an unmarked save as the
+ * system user. A marked write still needs its context user (the person the reply is for, or whoever runs a
+ * host-driven turn) to own the conversation or hold a grant on it, so being the system user grants nothing new.
+ * Pinning, hiding, the owner's rating and other bookkeeping keep the conversation-level rules.
  * MJ's permissions engine has no native primitive for per-field row-conditional
  * write rules, so this gate lives here rather than in `MJ: Entity Permissions`.
  *
@@ -39,11 +129,35 @@ const OWNER_ONLY_RATING_FIELDS = ['UserRating', 'UserFeedback'];
  * round trips for permission lookups.
  */
 let MJConversationDetailEntityExtended = class MJConversationDetailEntityExtended extends MJConversationDetailEntity {
+    constructor() {
+        super(...arguments);
+        this.serverAuthoredReply = false;
+    }
+    /**
+     * Marks this instance as server code writing an agent's reply, so it may create a reply (`Role` `AI` or `Error`)
+     * and change what one says. Call it before `Save()`; it stays on the instance for every later save, like
+     * `SetCloneContext()`. The context user still needs to own the conversation or hold a grant on it.
+     *
+     * It is not a field: no GraphQL input, `OldValues___` or transaction variable can set it, and the browser's copy of
+     * this class never sends it. It has no effect on a person's message.
+     */
+    MarkServerAuthoredReply() {
+        this.serverAuthoredReply = true;
+    }
+    /** Whether {@link MarkServerAuthoredReply} was called on this instance. */
+    get IsServerAuthoredReply() {
+        return this.serverAuthoredReply;
+    }
     async Save(options) {
+        const callerUserID = this.UserID; // the gate may fill in a grantee's; a save that fails keeps the caller's
         if (!(await this.currentUserMayWrite('save'))) {
             return false;
         }
-        return super.Save(options);
+        const saved = await super.Save(options);
+        if (!saved) {
+            this.UserID = callerUserID;
+        }
+        return saved;
     }
     async Delete(options) {
         if (!(await this.currentUserMayWrite('delete'))) {
@@ -63,6 +177,19 @@ let MJConversationDetailEntityExtended = class MJConversationDetailEntityExtende
             // No user context on a server save = system operation; allow.
             return true;
         }
+        // The system user skips the authorship rules (server code writes on people's behalf) but, like anyone, must own
+        // the conversation or hold a grant on it: some server paths elevate an anonymous visitor to the system user
+        // (MJ#4791), and this gate is what keeps those paths out of other people's conversations.
+        const isSystemUser = WellKnownUserSource.Instance.IsSystemUser(user);
+        const variableGated = isSystemUser ? ACCESS_GATED_FIELDS : GATED_FIELDS;
+        const touchesReply = isReplyRole(this.Role) || isReplyRole(this.originalFieldText('Role'));
+        if (operation === 'save' && this.fieldSetByTransactionVariable(touchesReply && !this.serverAuthoredReply ? [...variableGated, ...REPLY_FIELDS] : variableGated)) {
+            // A transaction variable sets its field after this check has passed, at submit, to any value an earlier
+            // item in the group produced: a message would be checked as one row, author or conversation and saved as
+            // another, and an unmarked save could rewrite what an agent's reply says.
+            this.recordDenied('A conversation message cannot take its values from a transaction variable.', resultType);
+            return false;
+        }
         // A message created by the record-cloning engine, as part of copying a conversation into a
         // new user's account. The engine has already authorized that copy (Owner-only, the clone
         // authorization, and conversations are copyable only from a template user), and the
@@ -72,20 +199,12 @@ let MJConversationDetailEntityExtended = class MJConversationDetailEntityExtende
             return true;
         }
         try {
-            const decision = await UserMayWriteConversation(provider, user, this.ConversationID);
-            if (decision.IsOwner) {
-                return true;
-            }
-            // Non-owners are *never* allowed to touch the rating fields, even
-            // when they hold Edit/Owner grants on the conversation. UserRating
-            // and UserFeedback represent the owner's evaluation of an AI
-            // message and there is no per-user storage to overwrite.
-            if (this.dirtyRatingFieldNames().length > 0) {
-                this.recordDenied('Only the conversation owner can set or change the rating and feedback on this message.', resultType);
-                return false;
-            }
-            if (!decision.Allowed) {
-                this.recordDenied(decision.Reason ?? 'Permission denied.', resultType);
+            const access = await UserMayWriteConversation(provider, user, this.ConversationID);
+            const refusal = (await this.accessRefusal(provider, access))
+                ?? (isSystemUser ? null : this.authorshipRefusal(operation, user, access.IsOwner))
+                ?? this.replyRefusal(operation);
+            if (refusal) {
+                this.recordDenied(refusal, resultType);
                 return false;
             }
             return true;
@@ -100,18 +219,139 @@ let MJConversationDetailEntityExtended = class MJConversationDetailEntityExtende
         }
     }
     /**
-     * Names of the rating/feedback fields that are dirty on this save.
-     * Used by `currentUserMayWrite` to detect attempts by non-owners to
-     * modify the owner-only fields and surface a specific denial message.
+     * Why the user may not write to this message's conversation at all, or `null` when they may. The owner may. Anyone
+     * else may not change the rating fields, which are the owner's alone, and needs an `Edit` or `Owner` grant. A
+     * conversation that does not load for the user is hidden from them when it exists (a row filter), and they may not
+     * write to it; when no one can find it, it is missing or being created in this same transaction, and the foreign
+     * key and the base save decide, as before.
      */
-    dirtyRatingFieldNames() {
-        const matches = [];
-        for (const name of OWNER_ONLY_RATING_FIELDS) {
-            const field = this.Fields.find((f) => f.Name === name);
-            if (field?.Dirty)
-                matches.push(name);
-        }
-        return matches;
+    async accessRefusal(provider, access) {
+        if (access.IsOwner) {
+            return null;
+        }
+        // Non-owners are *never* allowed to touch the rating fields, even
+        // when they hold Edit/Owner grants on the conversation. UserRating
+        // and UserFeedback represent the owner's evaluation of an AI
+        // message and there is no per-user storage to overwrite.
+        if (OWNER_ONLY_RATING_FIELDS.some((name) => this.isFieldDirty(name))) {
+            return 'Only the conversation owner can set or change the rating and feedback on this message.';
+        }
+        if (!access.Allowed) {
+            return access.Reason ?? 'Permission denied.';
+        }
+        if (!access.Loaded && (await this.conversationExists(provider))) {
+            return 'You do not have access to this conversation.';
+        }
+        return null;
+    }
+    /**
+     * Why this write would put words in an agent's mouth, or `null` when it does not: an unmarked save that creates a
+     * reply, turns a message into one, or changes what one says ({@link REPLY_FIELDS}). Applies to every user, the
+     * system user included. Deleting a reply keeps the conversation-level rules.
+     */
+    replyRefusal(operation) {
+        if (operation === 'delete' || this.serverAuthoredReply) {
+            return null;
+        }
+        if (!this.IsSaved) {
+            return isReplyRole(this.Role) ? REPLY_REFUSAL : null;
+        }
+        const touchesReply = isReplyRole(this.originalFieldText('Role')) || isReplyRole(this.Role);
+        return touchesReply && REPLY_FIELDS.some((name) => this.isFieldDirty(name)) ? REPLY_REFUSAL : null;
+    }
+    /**
+     * Why this write breaks the rules for people's messages (see the class doc), or `null` when it does not. On a new
+     * message from a grantee with no `UserID`, fills in the grantee's.
+     */
+    authorshipRefusal(operation, user, isOwner) {
+        if (operation === 'delete') {
+            return this.deleteRefusal(user, isOwner);
+        }
+        return this.IsSaved ? this.changeRefusal(user, isOwner) : this.postRefusal(user, isOwner);
+    }
+    /** A new person's message names its author as the poster, or names no one (filled in for a grantee). */
+    postRefusal(user, isOwner) {
+        if (!isPersonRole(this.Role)) {
+            return null;
+        }
+        if (!this.UserID) {
+            // An empty UserID reads as the conversation's owner. A grantee's message gets the grantee's ID; the
+            // owner's stays empty, so server code writing as the owner (a room transcript of what other people said)
+            // is not stamped with the owner's ID.
+            if (!isOwner) {
+                this.UserID = user.ID;
+            }
+            return null;
+        }
+        return UUIDsEqual(this.UserID, user.ID) ? null : 'You can post a message only as yourself.';
+    }
+    /**
+     * An existing person's message: only its author changes who wrote it and what it says, no one its role (to or
+     * from `User`), and no one moves it to another conversation or fork. A message with no `UserID` is the owner's.
+     */
+    changeRefusal(user, isOwner) {
+        const wasPerson = isPersonRole(this.originalFieldText('Role'));
+        if (this.isFieldDirty('Role') && (wasPerson || isPersonRole(this.Role))) {
+            return "A message's role cannot be changed.";
+        }
+        if (!wasPerson) {
+            return null;
+        }
+        if (PLACEMENT_FIELDS.some((name) => this.isFieldDirty(name))) {
+            // Moving it would take it out of the thread it was written in (a delete) and put it in one its author never
+            // wrote in, and, with no UserID, make it read as another conversation's owner's.
+            return 'A message cannot be moved to another conversation or fork.';
+        }
+        const changed = AUTHORED_FIELDS.filter((name) => this.isFieldDirty(name));
+        if (changed.length === 0) {
+            return null;
+        }
+        const author = this.originalFieldText('UserID') ?? (isOwner ? user.ID : null);
+        if (!author || !UUIDsEqual(author, user.ID)) {
+            return 'Only the person who wrote this message can change it.';
+        }
+        if (changed.includes('UserID') && !(this.UserID && UUIDsEqual(this.UserID, user.ID))) {
+            return 'You can post a message only as yourself.';
+        }
+        return null;
+    }
+    /** A person's message is deleted by its author or by the conversation's owner (whose it is with no `UserID`). */
+    deleteRefusal(user, isOwner) {
+        if (!isPersonRole(this.Role) || isOwner) {
+            return null;
+        }
+        return this.UserID && UUIDsEqual(this.UserID, user.ID)
+            ? null
+            : "Only the message's author or the conversation's owner can delete it.";
+    }
+    /** Whether the conversation exists, read as the system user; false when there is no system user to ask. */
+    async conversationExists(provider) {
+        const systemUser = await WellKnownUserSource.Instance.GetSystemUser(provider);
+        if (!systemUser) {
+            LogError(`MJConversationDetailEntityExtended: no system user to check whether conversation ${this.ConversationID} ` +
+                'exists; treating it as missing.');
+            return false;
+        }
+        const conversation = await provider.GetEntityObject('MJ: Conversations', systemUser);
+        return conversation.Load(this.ConversationID);
+    }
+    /**
+     * Whether a transaction variable of this message's group sets one of `fields` on it. The field is resolved the way
+     * `Set` resolves it at submit (trimmed, any case).
+     */
+    fieldSetByTransactionVariable(fields) {
+        return !!this.TransactionGroup?.Variables.some((v) => {
+            const name = v.EntityObject === this && v.Type === 'Use' ? this.GetFieldByName(v.FieldName)?.Name : null;
+            return !!name && fields.includes(name);
+        });
+    }
+    isFieldDirty(name) {
+        return !!this.GetFieldByName(name)?.Dirty;
+    }
+    /** A field's value as loaded, before this save's changes; `null` when it was empty or is not text. */
+    originalFieldText(name) {
+        const original = this.GetFieldByName(name)?.OldValue;
+        return typeof original === 'string' && original.length > 0 ? original : null;
     }
     /**
      * Records WHY the write was refused as a NEW `ResultHistory` entry, so callers that read

package/dist/custom/MJConversationDetailEntityExtended.js.map

@@ -1 +1 @@
-{"version":3,"file":"MJConversationDetailEntityExtended.js","sourceRoot":"","sources":["../../src/custom/MJConversationDetailEntityExtended.ts"],"names":[],"mappings":";;;;;;AAAA,OAAO,EACH,UAAU,EACV,gBAAgB,EAIhB,QAAQ,EACX,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,0BAA0B,EAAE,MAAM,gCAAgC,CAAC;AAC5E,OAAO,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AAErE;;;;;GAKG;AACH,MAAM,wBAAwB,GAAG,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;AAEhE;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEI,IAAM,kCAAkC,GAAxC,MAAM,kCAAmC,SAAQ,0BAA0B;IACrE,KAAK,CAAC,IAAI,CAAC,OAA2B;QAC3C,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;YAC5C,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IAEQ,KAAK,CAAC,MAAM,CAAC,OAA6B;QAC/C,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;YAC9C,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,OAAO,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAAC,SAA4B;QAC1D,MAAM,UAAU,GACZ,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC3E,MAAM,QAAQ,GAAG,IAAI,CAAC,aAA6C,CAAC;QACpE,IAAI,QAAQ,EAAE,YAAY,KAAK,UAAU,EAAE,CAAC;YACxC,sEAAsE;YACtE,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,kBAAkB,CAAC;QACrC,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,8DAA8D;YAC9D,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,2FAA2F;QAC3F,yFAAyF;QACzF,oFAAoF;QACpF,wFAAwF;QACxF,oFAAoF;QACpF,IAAI,UAAU,KAAK,QAAQ,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YAC/C,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,IAAI,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;YACrF,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;gBACnB,OAAO,IAAI,CAAC;YAChB,CAAC;YAED,kEAAkE;YAClE,mEAAmE;YACnE,6DAA6D;YAC7D,yDAAyD;YACzD,IAAI,IAAI,CAAC,qBAAqB,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1C,IAAI,CAAC,YAAY,CACb,wFAAwF,EACxF,UAAU,CACb,CAAC;gBACF,OAAO,KAAK,CAAC;YACjB,CAAC;YAED,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;gBACpB,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,IAAI,oBAAoB,EAAE,UAAU,CAAC,CAAC;gBACvE,OAAO,KAAK,CAAC;YACjB,CAAC;YACD,OAAO,IAAI,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,QAAQ,CACJ,gEAAgE;gBAC5D,IAAI,SAAS,oBAAoB,IAAI,CAAC,cAAc,UAAU,IAAI,CAAC,EAAE,MAAM,OAAO,EAAE,CAC3F,CAAC;YACF,uEAAuE;YACvE,IAAI,CAAC,YAAY,CAAC,4CAA4C,EAAE,UAAU,CAAC,CAAC;YAC5E,OAAO,KAAK,CAAC;QACjB,CAAC;IACL,CAAC;IAED;;;;OAIG;IACK,qBAAqB;QACzB,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,KAAK,MAAM,IAAI,IAAI,wBAAwB,EAAE,CAAC;YAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;YACvD,IAAI,KAAK,EAAE,KAAK;gBAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzC,CAAC;QACD,OAAO,OAAO,CAAC;IACnB,CAAC;IAED;;;;;;;;OAQG;IACK,YAAY,CAAC,OAAe,EAAE,IAAoC;QACtE,MAAM,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;QACtC,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC;QACvB,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC;QACnB,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;QACzB,MAAM,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAC9B,MAAM,CAAC,OAAO,GAAG,IAAI,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC;IAC5C,CAAC;CACJ,CAAA;AA1GY,kCAAkC;IAD9C,aAAa,CAAC,UAAU,EAAE,0BAA0B,CAAC;GACzC,kCAAkC,CA0G9C;;AAED,6FAA6F;AAC7F,MAAM,UAAU,sCAAsC;IAClD,sBAAsB;AAC1B,CAAC"}
+{"version":3,"file":"MJConversationDetailEntityExtended.js","sourceRoot":"","sources":["../../src/custom/MJConversationDetailEntityExtended.ts"],"names":[],"mappings":";;;;;;AAAA,OAAO,EACH,UAAU,EACV,gBAAgB,EAEhB,eAAe,EAGf,QAAQ,EAER,mBAAmB,EACtB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACnE,OAAO,EAAE,0BAA0B,EAAwB,MAAM,gCAAgC,CAAC;AAClG,OAAO,EAA6B,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AAEhG;;;;;GAKG;AACH,MAAM,wBAAwB,GAAG,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;AAEhE;;;;;GAKG;AACH,MAAM,eAAe,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,mBAAmB,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;AAElH;;;GAGG;AACH,MAAM,gBAAgB,GAAG,CAAC,gBAAgB,EAAE,UAAU,CAAC,CAAC;AAExD;;;;;;GAMG;AACH,MAAM,mBAAmB,GAAG,CAAC,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,GAAG,wBAAwB,CAAC,CAAC;AAE1F;;;GAGG;AACH,MAAM,YAAY,GAAG;IACjB,GAAG,mBAAmB;IACtB,UAAU;IACV,GAAG,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,KAAK,MAAM,CAAC;CACvD,CAAC;AAEF;;;;;;;;;GASG;AACH,MAAM,YAAY,GAAG;IACjB,GAAG,eAAe;IAClB,gBAAgB;IAChB,UAAU;IACV,SAAS;IACT,QAAQ;IACR,OAAO;IACP,cAAc;IACd,oBAAoB;IACpB,mBAAmB;IACnB,oBAAoB;IACpB,oBAAoB;IACpB,gBAAgB;IAChB,YAAY;CACf,CAAC;AAEF,wEAAwE;AACxE,MAAM,aAAa,GAAG,0CAA0C,CAAC;AAEjE;;;GAGG;AACH,SAAS,YAAY,CAAC,IAA+B;IACjD,OAAO,IAAI,IAAI,IAAI,IAAI,eAAe,CAAC,uBAAuB,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC;AACpF,CAAC;AAED,+GAA+G;AAC/G,SAAS,WAAW,CAAC,IAA+B;IAChD,MAAM,UAAU,GAAG,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC;IACvF,OAAO,UAAU,KAAK,IAAI,IAAI,UAAU,KAAK,OAAO,CAAC;AACzD,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AAEI,IAAM,kCAAkC,GAAxC,MAAM,kCAAmC,SAAQ,0BAA0B;IAA3E;;QACK,wBAAmB,GAAG,KAAK,CAAC;IAsQxC,CAAC;IApQG;;;;;;;OAOG;IACI,uBAAuB;QAC1B,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC;IACpC,CAAC;IAED,2EAA2E;IAC3E,IAAW,qBAAqB;QAC5B,OAAO,IAAI,CAAC,mBAAmB,CAAC;IACpC,CAAC;IAEQ,KAAK,CAAC,IAAI,CAAC,OAA2B;QAC3C,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,yEAAyE;QAC3G,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;YAC5C,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,CAAC,KAAK,EAAE,CAAC;YACT,IAAI,CAAC,MAAM,GAAG,YAAY,CAAC;QAC/B,CAAC;QACD,OAAO,KAAK,CAAC;IACjB,CAAC;IAEQ,KAAK,CAAC,MAAM,CAAC,OAA6B;QAC/C,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;YAC9C,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,OAAO,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAAC,SAA4B;QAC1D,MAAM,UAAU,GACZ,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC3E,MAAM,QAAQ,GAAG,IAAI,CAAC,aAA6C,CAAC;QACpE,IAAI,QAAQ,EAAE,YAAY,KAAK,UAAU,EAAE,CAAC;YACxC,sEAAsE;YACtE,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,kBAAkB,CAAC;QACrC,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,8DAA8D;YAC9D,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,gHAAgH;QAChH,4GAA4G;QAC5G,0FAA0F;QAC1F,MAAM,YAAY,GAAG,mBAAmB,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QACrE,MAAM,aAAa,GAAG,YAAY,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,YAAY,CAAC;QACxE,MAAM,YAAY,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC;QAC3F,IAAI,SAAS,KAAK,MAAM,IAAI,IAAI,CAAC,6BAA6B,CAAC,YAAY,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,GAAG,aAAa,EAAE,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,CAAC;YAC9J,wGAAwG;YACxG,yGAAyG;YACzG,0EAA0E;YAC1E,IAAI,CAAC,YAAY,CAAC,4EAA4E,EAAE,UAAU,CAAC,CAAC;YAC5G,OAAO,KAAK,CAAC;QACjB,CAAC;QAED,2FAA2F;QAC3F,yFAAyF;QACzF,oFAAoF;QACpF,wFAAwF;QACxF,oFAAoF;QACpF,IAAI,UAAU,KAAK,QAAQ,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YAC/C,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,IAAI,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;YACnF,MAAM,OAAO,GAAG,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;mBACrD,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;mBAC/E,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;YACpC,IAAI,OAAO,EAAE,CAAC;gBACV,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;gBACvC,OAAO,KAAK,CAAC;YACjB,CAAC;YACD,OAAO,IAAI,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,QAAQ,CACJ,gEAAgE;gBAC5D,IAAI,SAAS,oBAAoB,IAAI,CAAC,cAAc,UAAU,IAAI,CAAC,EAAE,MAAM,OAAO,EAAE,CAC3F,CAAC;YACF,uEAAuE;YACvE,IAAI,CAAC,YAAY,CAAC,4CAA4C,EAAE,UAAU,CAAC,CAAC;YAC5E,OAAO,KAAK,CAAC;QACjB,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,aAAa,CAAC,QAA2B,EAAE,MAAiC;QACtF,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,kEAAkE;QAClE,mEAAmE;QACnE,6DAA6D;QAC7D,yDAAyD;QACzD,IAAI,wBAAwB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACnE,OAAO,wFAAwF,CAAC;QACpG,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAClB,OAAO,MAAM,CAAC,MAAM,IAAI,oBAAoB,CAAC;QACjD,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,MAAM,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;YAC9D,OAAO,8CAA8C,CAAC;QAC1D,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;IAED;;;;OAIG;IACK,YAAY,CAAC,SAA4B;QAC7C,IAAI,SAAS,KAAK,QAAQ,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;YACrD,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAChB,OAAO,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC;QACzD,CAAC;QACD,MAAM,YAAY,GAAG,WAAW,CAAC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3F,OAAO,YAAY,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC;IACvG,CAAC;IAED;;;OAGG;IACK,iBAAiB,CAAC,SAA4B,EAAE,IAAc,EAAE,OAAgB;QACpF,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;YACzB,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC7C,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC9F,CAAC;IAED,wGAAwG;IAChG,WAAW,CAAC,IAAc,EAAE,OAAgB;QAChD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACf,oGAAoG;YACpG,yGAAyG;YACzG,sCAAsC;YACtC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACX,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC;YAC1B,CAAC;YACD,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,OAAO,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,0CAA0C,CAAC;IAChG,CAAC;IAED;;;OAGG;IACK,aAAa,CAAC,IAAc,EAAE,OAAgB;QAClD,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/D,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACtE,OAAO,qCAAqC,CAAC;QACjD,CAAC;QACD,IAAI,CAAC,SAAS,EAAE,CAAC;YACb,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YAC3D,4GAA4G;YAC5G,iFAAiF;YACjF,OAAO,4DAA4D,CAAC;QACxE,CAAC;QACD,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1E,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC9E,IAAI,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YAC1C,OAAO,uDAAuD,CAAC;QACnE,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;YACnF,OAAO,0CAA0C,CAAC;QACtD,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,iHAAiH;IACzG,aAAa,CAAC,IAAc,EAAE,OAAgB;QAClD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,OAAO,EAAE,CAAC;YACtC,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;YAClD,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,sEAAsE,CAAC;IACjF,CAAC;IAED,2GAA2G;IACnG,KAAK,CAAC,kBAAkB,CAAC,QAA2B;QACxD,MAAM,UAAU,GAAG,MAAM,mBAAmB,CAAC,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC9E,IAAI,CAAC,UAAU,EAAE,CAAC;YACd,QAAQ,CACJ,oFAAoF,IAAI,CAAC,cAAc,GAAG;gBACtG,iCAAiC,CACxC,CAAC;YACF,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,eAAe,CAAuB,mBAAmB,EAAE,UAAU,CAAC,CAAC;QAC3G,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAClD,CAAC;IAED;;;OAGG;IACK,6BAA6B,CAAC,MAAgB;QAClD,OAAO,CAAC,CAAC,IAAI,CAAC,gBAAgB,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;YACjD,MAAM,IAAI,GAAG,CAAC,CAAC,YAAY,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YACzG,OAAO,CAAC,CAAC,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC3C,CAAC,CAAC,CAAC;IACP,CAAC;IAEO,YAAY,CAAC,IAAY;QAC7B,OAAO,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC;IAC9C,CAAC;IAED,sGAAsG;IAC9F,iBAAiB,CAAC,IAAY;QAClC,MAAM,QAAQ,GAAY,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC;QAC9D,OAAO,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;IACjF,CAAC;IAED;;;;;;;;OAQG;IACK,YAAY,CAAC,OAAe,EAAE,IAAoC;QACtE,MAAM,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;QACtC,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC;QACvB,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC;QACnB,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;QACzB,MAAM,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAC9B,MAAM,CAAC,OAAO,GAAG,IAAI,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC;IAC5C,CAAC;CACJ,CAAA;AAvQY,kCAAkC;IAD9C,aAAa,CAAC,UAAU,EAAE,0BAA0B,CAAC;GACzC,kCAAkC,CAuQ9C;;AAED,6FAA6F;AAC7F,MAAM,UAAU,sCAAsC;IAClD,sBAAsB;AAC1B,CAAC"}

package/dist/custom/MJQueryEntityExtended.d.ts

@@ -1,4 +1,5 @@
-import { UserInfo, QueryCacheConfig } from "@memberjunction/core";
+import { UserInfo, QueryCacheConfig, EntityInfo, FieldSecurityViolation } from "@memberjunction/core";
+import { SQLScreeningDialect } from "@memberjunction/global";
 import { MJQueryEntity, MJQueryFieldEntity, MJQueryParameterEntity, MJQueryEntityEntity, MJQueryPermissionEntity, MJQueryDependencyEntity, MJQueryCategoryEntity } from "../generated/entity_subclasses.js";
 import type { DatabasePlatform } from "@memberjunction/core";
 /**
@@ -61,6 +62,41 @@ export declare class MJQueryEntityExtended extends MJQueryEntity {
         canRun: boolean;
         deniedEntities: string[];
     };
+    /**
+     * SECURITY — the run-time half of {@link UserCanRun}: the checks that need the SQL a run will
+     * actually execute, after composition and template rendering. Call it with that SQL in addition
+     * to {@link UserCanRun}, never instead of it.
+     *
+     * 1. A query with `MJ: Query Permissions` rows is authorized by its role list alone: a user who
+     *    holds one of those roles may run it whatever it reads (stored-procedure semantics), and one
+     *    who holds none may not.
+     * 2. Otherwise every entity whose base view or base table the SQL reads as a relation must be
+     *    readable by the user ({@link FieldSecuritySQLGate.RelationEntities}). These come from the
+     *    SQL, so a query whose `QueryEntities` rows are missing or stale is still checked. SQL that
+     *    cannot be read is refused for a user who cannot read every entity in the catalog.
+     * 3. The SQL must not reference a field the user is denied anywhere it could leak one: the
+     *    select list, WHERE, JOIN, GROUP BY, ORDER BY or HAVING, inside expressions and aggregates
+     *    included. A whole-row construct (`SELECT *`, `alias.*`) over an entity the user is denied a
+     *    field on, and SQL that cannot be read, are refused too ({@link FieldSecuritySQLGate.FindViolation}).
+     *    So is a relation that is not a CTE or a catalog entity's base view or base table (a custom
+     *    view, synonym, table-valued function, temp table or cross-database name), whose reads
+     *    cannot be checked. A user denied no field on any entity is not scanned.
+     *
+     * The result never names a denied field, so a refusal says only that the query cannot be run.
+     * `QueryFields` metadata plays no part: it is documentation, not a security source.
+     *
+     * @param user The user the query runs for
+     * @param renderedSQL The SQL the run will execute
+     * @param catalog Every entity the executing provider knows
+     * @param dialect The database dialect the SQL runs under
+     */
+    UserCanRunRenderedSQL(user: UserInfo, renderedSQL: string, catalog: readonly EntityInfo[], dialect: SQLScreeningDialect): {
+        canRun: boolean;
+        deniedEntities: string[];
+        fieldSecurityViolation?: FieldSecurityViolation;
+    };
+    /** The catalog entities this query's `QueryEntities` rows name; stale rows are left out. */
+    private declaredEntities;
     /** Whether this query has been formally approved for production use */
     get IsApproved(): boolean;
     /**

package/dist/custom/MJQueryEntityExtended.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"MJQueryEntityExtended.d.ts","sourceRoot":"","sources":["../../src/custom/MJQueryEntityExtended.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,QAAQ,EAAE,gBAAgB,EAAqB,MAAM,sBAAsB,CAAC;AAEjG,OAAO,EACH,aAAa,EACb,kBAAkB,EAClB,sBAAsB,EACtB,mBAAmB,EACnB,uBAAuB,EACvB,uBAAuB,EACvB,qBAAqB,EACxB,MAAM,gCAAgC,CAAC;AAExC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAE7D;;;;;;;GAOG;AACH,qBACa,qBAAsB,SAAQ,aAAa;IAIpD,2CAA2C;IAC3C,IAAW,WAAW,IAAI,kBAAkB,EAAE,CAE7C;IAED,+CAA+C;IAC/C,IAAW,eAAe,IAAI,sBAAsB,EAAE,CAErD;IAED,6CAA6C;IAC7C,IAAW,aAAa,IAAI,mBAAmB,EAAE,CAEhD;IAED,4CAA4C;IAC5C,IAAW,gBAAgB,IAAI,uBAAuB,EAAE,CAEvD;IAED,oGAAoG;IACpG,IAAW,iBAAiB,IAAI,uBAAuB,EAAE,CAExD;IAED,+EAA+E;IAC/E,IAAW,eAAe,IAAI,uBAAuB,EAAE,CAEtD;IAID,6EAA6E;IAC7E,IAAW,cAAc,IAAI,qBAAqB,GAAG,SAAS,CAG7D;IAED,OAAO,CAAC,aAAa,CAAuB;IAE5C;;;OAGG;IACH,IAAW,YAAY,IAAI,MAAM,CAKhC;IAED;;OAEG;IACI,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM;IAmBpD;;;;;OAKG;IACI,qBAAqB,CAAC,IAAI,EAAE,QAAQ,GAAG,OAAO;IAkBrD;;;;;;;;;;;;;;;OAeG;IACI,UAAU,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG;QAAE,MAAM,EAAE,OAAO,CAAC;QAAC,cAAc,EAAE,MAAM,EAAE,CAAA;KAAE;IAyDxG,uEAAuE;IACvE,IAAW,UAAU,IAAI,OAAO,CAE/B;IAED;;;OAGG;IACH,IAAW,YAAY,IAAI,OAAO,CAEjC;IAID;;;;;OAKG;IACI,cAAc,CAAC,QAAQ,EAAE,gBAAgB,GAAG,MAAM;IAgBzD,OAAO,CAAC,YAAY,CAAiC;IAErD;;;;OAIG;IACH,IAAW,WAAW,IAAI,gBAAgB,CAuBzC;IAED,OAAO,CAAC,uBAAuB;CAqBlC"}
+{"version":3,"file":"MJQueryEntityExtended.d.ts","sourceRoot":"","sources":["../../src/custom/MJQueryEntityExtended.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,QAAQ,EAAE,gBAAgB,EAAqB,UAAU,EAAwB,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC3J,OAAO,EAA0C,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AACrG,OAAO,EACH,aAAa,EACb,kBAAkB,EAClB,sBAAsB,EACtB,mBAAmB,EACnB,uBAAuB,EACvB,uBAAuB,EACvB,qBAAqB,EACxB,MAAM,gCAAgC,CAAC;AAExC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAE7D;;;;;;;GAOG;AACH,qBACa,qBAAsB,SAAQ,aAAa;IAIpD,2CAA2C;IAC3C,IAAW,WAAW,IAAI,kBAAkB,EAAE,CAE7C;IAED,+CAA+C;IAC/C,IAAW,eAAe,IAAI,sBAAsB,EAAE,CAErD;IAED,6CAA6C;IAC7C,IAAW,aAAa,IAAI,mBAAmB,EAAE,CAEhD;IAED,4CAA4C;IAC5C,IAAW,gBAAgB,IAAI,uBAAuB,EAAE,CAEvD;IAED,oGAAoG;IACpG,IAAW,iBAAiB,IAAI,uBAAuB,EAAE,CAExD;IAED,+EAA+E;IAC/E,IAAW,eAAe,IAAI,uBAAuB,EAAE,CAEtD;IAID,6EAA6E;IAC7E,IAAW,cAAc,IAAI,qBAAqB,GAAG,SAAS,CAG7D;IAED,OAAO,CAAC,aAAa,CAAuB;IAE5C;;;OAGG;IACH,IAAW,YAAY,IAAI,MAAM,CAKhC;IAED;;OAEG;IACI,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM;IAmBpD;;;;;OAKG;IACI,qBAAqB,CAAC,IAAI,EAAE,QAAQ,GAAG,OAAO;IAkBrD;;;;;;;;;;;;;;;OAeG;IACI,UAAU,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG;QAAE,MAAM,EAAE,OAAO,CAAC;QAAC,cAAc,EAAE,MAAM,EAAE,CAAA;KAAE;IA2ExG;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2BG;IACI,qBAAqB,CACxB,IAAI,EAAE,QAAQ,EACd,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,SAAS,UAAU,EAAE,EAC9B,OAAO,EAAE,mBAAmB,GAC7B;QAAE,MAAM,EAAE,OAAO,CAAC;QAAC,cAAc,EAAE,MAAM,EAAE,CAAC;QAAC,sBAAsB,CAAC,EAAE,sBAAsB,CAAA;KAAE;IA0BjG,4FAA4F;IAC5F,OAAO,CAAC,gBAAgB;IAcxB,uEAAuE;IACvE,IAAW,UAAU,IAAI,OAAO,CAE/B;IAED;;;OAGG;IACH,IAAW,YAAY,IAAI,OAAO,CAEjC;IAID;;;;;OAKG;IACI,cAAc,CAAC,QAAQ,EAAE,gBAAgB,GAAG,MAAM;IAgBzD,OAAO,CAAC,YAAY,CAAiC;IAErD;;;;OAIG;IACH,IAAW,WAAW,IAAI,gBAAgB,CAuBzC;IAED,OAAO,CAAC,uBAAuB;CAqBlC"}