@memberjunction/core 6.2.0-edge.5 → 6.2.0-edge.7

package/dist/generic/baseRemotableOperation.d.ts

@@ -1,9 +1,60 @@
 import { UserInfo } from "./securityInfo.js";
 import { IMetadataProvider, RemoteOpExecMode, RemoteOpInvokeOptions, RemoteOpProgress, RemoteOpResult } from "./interfaces.js";
+/**
+ * Structured logical failure that a {@link BaseRemotableOperation.InternalExecute} or
+ * {@link BaseRemotableOperation.Authorize} implementation can throw to return a specific
+ * machine-readable {@link ResultCode} (instead of the generic `'EXECUTION_ERROR'`) without
+ * changing `InternalExecute`'s typed `TOutput` return signature.
+ */
+export declare class RemoteOperationError extends Error {
+    /** Machine-readable outcome code surfaced on {@link RemoteOpResult.ResultCode}. */
+    readonly ResultCode: string;
+    constructor(resultCode: string, message: string);
+}
+/**
+ * Structural input/output contract fields used to compute a deterministic wire fingerprint for a
+ * Remote Operation (both at CodeGen emit time and at server runtime via `RemoteOperationEngineBase`).
+ */
+export interface RemoteOperationContractSpec {
+    OperationKey: string;
+    ExecutionMode?: RemoteOpExecMode | string | null;
+    InputTypeName?: string | null;
+    InputTypeDefinition?: string | null;
+    InputTypeIsArray?: boolean | null;
+    OutputTypeName?: string | null;
+    OutputTypeDefinition?: string | null;
+    OutputTypeIsArray?: boolean | null;
+}
+/**
+ * Computes a deterministic, browser-safe 64-bit FNV-1a contract fingerprint (`ro_fp_<16-hex>`)
+ * from an operation's structural contract metadata. Whitespace runs inside type definitions are
+ * collapsed so CRLF vs LF formatting differences never trigger false mismatches.
+ */
+export declare function ComputeRemoteOperationContractFingerprint(spec: RemoteOperationContractSpec): string;
+/**
+ * JSON-Schema-compatible primitive/nested value type for opt-in Agent / MCP tool input schemas.
+ */
+export type RemoteOpToolSchemaValue = string | number | boolean | null | RemoteOpToolSchemaValue[] | {
+    [key: string]: RemoteOpToolSchemaValue;
+};
+/**
+ * Descriptor returned by {@link BaseRemotableOperation.GetExposedToolOperations} for operations
+ * that opt into automatic AI Agent tool or MCP tool discovery.
+ */
+export interface ExposedRemoteOperationToolDescriptor {
+    OperationKey: string;
+    ExposeAsAgentTool: boolean;
+    ExposeAsMCPTool: boolean;
+    Description?: string;
+    InputSchema?: Record<string, RemoteOpToolSchemaValue>;
+    RequiredScope?: string;
+    RequiresSystemUser?: boolean;
+    ExecutionMode: RemoteOpExecMode;
+}
 /**
  * Server-side execution context handed to {@link BaseRemotableOperation.ExecuteServer} (and through
- * it to `InternalExecute`) when a Remote Operation runs in-process on the server. It carries
- * everything a server implementation needs without coupling the operation to any transport.
+ * it to `Authorize` and `InternalExecute`) when a Remote Operation runs in-process on the server.
+ * It carries everything a server implementation needs without coupling the operation to any transport.
  */
 export interface RemoteOpServerContext {
     /** The provider that owns this execution (use this for data access — never `new Metadata()`). */
@@ -14,6 +65,21 @@ export interface RemoteOpServerContext {
     emitProgress: (progress: RemoteOpProgress) => void;
     /** Opaque handle for the backing run (e.g. a `ProcessRunID`), when one has been created. */
     handle?: string;
+    /**
+     * Normalized HTTP `Origin` header (`scheme://host[:port]`, lowercased, no trailing slash)
+     * when the operation arrived over HTTP/GraphQL. Undefined for in-process calls or requests
+     * lacking an `Origin` header — origin allowlist checks must fail closed on `undefined`.
+     */
+    requestOrigin?: string;
+    /**
+     * Caller's network IP address (`req.ip`) when invoked over HTTP/GraphQL. Suitable for abuse
+     * rate-limiting and forensic audit logging; never use as an identity check.
+     */
+    clientIp?: string;
+    /** Caller's authenticated session ID when available from the server transport. */
+    sessionId?: string;
+    /** SHA-256 hash of the caller's MJ API key when invoked via `mj_sk_*` API key / MCP. */
+    apiKeyHash?: string;
 }
 /**
  * Base class for a **typed, provider-routed Remote Operation** — the typed peer of `BaseEntity`
@@ -49,6 +115,28 @@ export declare abstract class BaseRemotableOperation<TInput = unknown, TOutput =
     readonly RequiresSystemUser?: boolean;
     /** Whether this operation is a plain `Sync` request/response or a `LongRunning` run. */
     readonly ExecutionMode: RemoteOpExecMode;
+    /**
+     * Optional structural contract fingerprint emitted by CodeGen (or set by a hand-authored
+     * operation). Automatically forwarded on {@link Execute} when the caller didn't override
+     * `options.contractFingerprint`, allowing the server resolver to detect stale client bundles.
+     */
+    readonly ContractFingerprint?: string;
+    /** When true, exposes this operation for automatic discovery by MJ AI Agent tool adapters. */
+    readonly ExposeAsAgentTool?: boolean;
+    /** When true, exposes this operation for automatic discovery by MJ MCP server tool adapters. */
+    readonly ExposeAsMCPTool?: boolean;
+    /** Human/LLM-readable description when exposed as an Agent or MCP tool. */
+    readonly ToolDescription?: string;
+    /** Optional JSON-Schema object describing `TInput` when exposed as an Agent or MCP tool. */
+    readonly ToolInputSchema?: Record<string, RemoteOpToolSchemaValue>;
+    /**
+     * Discovers all ClassFactory-registered {@link BaseRemotableOperation} subclasses that opt into
+     * AI Agent (`ExposeAsAgentTool`) and/or MCP (`ExposeAsMCPTool`) tool exposure.
+     */
+    static GetExposedToolOperations(filter?: {
+        agentOnly?: boolean;
+        mcpOnly?: boolean;
+    }): ExposedRemoteOperationToolDescriptor[];
     /**
      * The universal entry point — identical on client and server. Routes the operation through the
      * active (or explicitly supplied) provider's {@link IRemoteOperationProvider.RouteOperation}.
@@ -65,7 +153,7 @@ export declare abstract class BaseRemotableOperation<TInput = unknown, TOutput =
      * and then {@link InternalExecute}, wrapping the outcome in a {@link RemoteOpResult}.
      *
      * @param input - The typed input payload.
-     * @param context - The server execution context (provider, acting user, progress emitter).
+     * @param context - The server execution context (provider, acting user, progress emitter, HTTP metadata).
      * @returns The wrapped result; logical failures are returned, not thrown.
      */
     ExecuteServer(input: TInput, context: RemoteOpServerContext): Promise<RemoteOpResult<TOutput>>;
@@ -78,19 +166,20 @@ export declare abstract class BaseRemotableOperation<TInput = unknown, TOutput =
      * @param _input - The typed input payload.
      * @param _provider - The owning provider for data access.
      * @param _user - The acting user.
-     * @param _context - The full server execution context (provider, user, progress emitter, handle).
+     * @param _context - The full server execution context (provider, user, progress emitter, handle, origin, IP).
      * @returns The typed output payload.
      */
     protected InternalExecute(_input: TInput, _provider: IMetadataProvider, _user: UserInfo, _context: RemoteOpServerContext): Promise<TOutput>;
     /**
      * Per-operation authorization hook, composed with (and applied after) the framework gates that
      * the server resolver runs. Returns true by default. Override to enforce operation-specific
-     * rules against the input and acting user.
+     * rules against the input, acting user, and server transport context (e.g. `context.requestOrigin`).
      *
      * @param _input - The typed input payload.
      * @param _user - The acting user.
+     * @param _context - Optional server execution context (always supplied by {@link ExecuteServer}).
      * @returns True if the operation may proceed.
      */
-    protected Authorize(_input: TInput, _user: UserInfo): Promise<boolean>;
+    protected Authorize(_input: TInput, _user: UserInfo, _context?: RemoteOpServerContext): Promise<boolean>;
 }
 //# sourceMappingURL=baseRemotableOperation.d.ts.map

package/dist/generic/baseRemotableOperation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"baseRemotableOperation.d.ts","sourceRoot":"","sources":["../../src/generic/baseRemotableOperation.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EACH,iBAAiB,EAEjB,gBAAgB,EAChB,qBAAqB,EACrB,gBAAgB,EAChB,cAAc,EACjB,MAAM,cAAc,CAAC;AAEtB;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IAClC,iGAAiG;IACjG,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,gEAAgE;IAChE,IAAI,EAAE,QAAQ,CAAC;IACf,yFAAyF;IACzF,YAAY,EAAE,CAAC,QAAQ,EAAE,gBAAgB,KAAK,IAAI,CAAC;IACnD,4FAA4F;IAC5F,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,8BAAsB,sBAAsB,CAAC,MAAM,GAAG,OAAO,EAAE,OAAO,GAAG,OAAO;IAC5E,2FAA2F;IAC3F,kBAAyB,YAAY,EAAE,MAAM,CAAC;IAE9C;;;;OAIG;IACH,SAAgB,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvC,mFAAmF;IACnF,SAAgB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAE7C,wFAAwF;IACxF,SAAgB,aAAa,EAAE,gBAAgB,CAAU;IAEzD;;;;;;;OAOG;IACU,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,GAAE,qBAA0B,GAAG,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;IAkB1G;;;;;;;;;OASG;IACU,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;IAqB3G;;;;;;;;;;;OAWG;IACH,SAAS,CAAC,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,iBAAiB,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,qBAAqB,GAAG,OAAO,CAAC,OAAO,CAAC;IAO3I;;;;;;;;OAQG;cACa,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;CAG/E"}
+{"version":3,"file":"baseRemotableOperation.d.ts","sourceRoot":"","sources":["../../src/generic/baseRemotableOperation.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EACH,iBAAiB,EAEjB,gBAAgB,EAChB,qBAAqB,EACrB,gBAAgB,EAChB,cAAc,EACjB,MAAM,cAAc,CAAC;AAEtB;;;;;GAKG;AACH,qBAAa,oBAAqB,SAAQ,KAAK;IAC3C,mFAAmF;IACnF,SAAgB,UAAU,EAAE,MAAM,CAAC;gBAEvB,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAKlD;AAED;;;GAGG;AACH,MAAM,WAAW,2BAA2B;IACxC,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,gBAAgB,GAAG,MAAM,GAAG,IAAI,CAAC;IACjD,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,gBAAgB,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IAClC,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,iBAAiB,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;CACtC;AAED;;;;GAIG;AACH,wBAAgB,yCAAyC,CAAC,IAAI,EAAE,2BAA2B,GAAG,MAAM,CA0BnG;AAED;;GAEG;AACH,MAAM,MAAM,uBAAuB,GAC7B,MAAM,GACN,MAAM,GACN,OAAO,GACP,IAAI,GACJ,uBAAuB,EAAE,GACzB;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,uBAAuB,CAAA;CAAE,CAAC;AAEjD;;;GAGG;AACH,MAAM,WAAW,oCAAoC;IACjD,YAAY,EAAE,MAAM,CAAC;IACrB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,eAAe,EAAE,OAAO,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;IACtD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,aAAa,EAAE,gBAAgB,CAAC;CACnC;AAED;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IAClC,iGAAiG;IACjG,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,gEAAgE;IAChE,IAAI,EAAE,QAAQ,CAAC;IACf,yFAAyF;IACzF,YAAY,EAAE,CAAC,QAAQ,EAAE,gBAAgB,KAAK,IAAI,CAAC;IACnD,4FAA4F;IAC5F,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kFAAkF;IAClF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,wFAAwF;IACxF,UAAU,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,8BAAsB,sBAAsB,CAAC,MAAM,GAAG,OAAO,EAAE,OAAO,GAAG,OAAO;IAC5E,2FAA2F;IAC3F,kBAAyB,YAAY,EAAE,MAAM,CAAC;IAE9C;;;;OAIG;IACH,SAAgB,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvC,mFAAmF;IACnF,SAAgB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAE7C,wFAAwF;IACxF,SAAgB,aAAa,EAAE,gBAAgB,CAAU;IAEzD;;;;OAIG;IACH,SAAgB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAE7C,8FAA8F;IAC9F,SAAgB,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAE5C,gGAAgG;IAChG,SAAgB,eAAe,CAAC,EAAE,OAAO,CAAC;IAE1C,2EAA2E;IAC3E,SAAgB,eAAe,CAAC,EAAE,MAAM,CAAC;IAEzC,4FAA4F;IAC5F,SAAgB,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;IAE1E;;;OAGG;WACW,wBAAwB,CAAC,MAAM,CAAC,EAAE;QAC5C,SAAS,CAAC,EAAE,OAAO,CAAC;QACpB,OAAO,CAAC,EAAE,OAAO,CAAC;KACrB,GAAG,oCAAoC,EAAE;IA+C1C;;;;;;;OAOG;IACU,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,GAAE,qBAA0B,GAAG,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;IA0B1G;;;;;;;;;OASG;IACU,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;IA4B3G;;;;;;;;;;;OAWG;IACH,SAAS,CAAC,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,iBAAiB,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,qBAAqB,GAAG,OAAO,CAAC,OAAO,CAAC;IAO3I;;;;;;;;;OASG;cACa,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAAC,OAAO,CAAC;CAGjH"}

package/dist/generic/baseRemotableOperation.js

@@ -1,4 +1,49 @@
+import { MJGlobal } from "@memberjunction/global";
 import { Metadata } from "./metadata.js";
+/**
+ * Structured logical failure that a {@link BaseRemotableOperation.InternalExecute} or
+ * {@link BaseRemotableOperation.Authorize} implementation can throw to return a specific
+ * machine-readable {@link ResultCode} (instead of the generic `'EXECUTION_ERROR'`) without
+ * changing `InternalExecute`'s typed `TOutput` return signature.
+ */
+export class RemoteOperationError extends Error {
+    constructor(resultCode, message) {
+        super(message);
+        this.name = 'RemoteOperationError';
+        this.ResultCode = resultCode;
+    }
+}
+/**
+ * Computes a deterministic, browser-safe 64-bit FNV-1a contract fingerprint (`ro_fp_<16-hex>`)
+ * from an operation's structural contract metadata. Whitespace runs inside type definitions are
+ * collapsed so CRLF vs LF formatting differences never trigger false mismatches.
+ */
+export function ComputeRemoteOperationContractFingerprint(spec) {
+    const collapseWs = (s) => (s ?? '').trim().replace(/\s+/g, ' ');
+    const canonical = [
+        (spec.OperationKey ?? '').trim(),
+        (spec.ExecutionMode ?? 'Sync').trim(),
+        (spec.InputTypeName ?? '').trim(),
+        spec.InputTypeIsArray ? '1' : '0',
+        collapseWs(spec.InputTypeDefinition),
+        (spec.OutputTypeName ?? '').trim(),
+        spec.OutputTypeIsArray ? '1' : '0',
+        collapseWs(spec.OutputTypeDefinition),
+    ].join('|');
+    // Dual 32-bit FNV-1a lanes combined into 16 hex digits (browser-safe, zero BigInt/crypto overhead).
+    let h1 = 0x811c9dc5;
+    let h2 = 0x01000193;
+    for (let i = 0; i < canonical.length; i++) {
+        const c = canonical.charCodeAt(i);
+        h1 ^= c;
+        h1 = Math.imul(h1, 0x01000193);
+        h2 ^= c ^ (i & 0xff);
+        h2 = Math.imul(h2, 0x811c9dc5);
+    }
+    const hex1 = (h1 >>> 0).toString(16).padStart(8, '0');
+    const hex2 = (h2 >>> 0).toString(16).padStart(8, '0');
+    return `ro_fp_${hex1}${hex2}`;
+}
 /**
  * Base class for a **typed, provider-routed Remote Operation** — the typed peer of `BaseEntity`
  * (record CRUD) and `RunView` (set reads) for arbitrary server capabilities.
@@ -25,6 +70,50 @@ export class BaseRemotableOperation {
         /** Whether this operation is a plain `Sync` request/response or a `LongRunning` run. */
         this.ExecutionMode = 'Sync';
     }
+    /**
+     * Discovers all ClassFactory-registered {@link BaseRemotableOperation} subclasses that opt into
+     * AI Agent (`ExposeAsAgentTool`) and/or MCP (`ExposeAsMCPTool`) tool exposure.
+     */
+    static GetExposedToolOperations(filter) {
+        const registrations = MJGlobal.Instance.ClassFactory.GetAllRegistrations(BaseRemotableOperation);
+        const seenKeys = new Set();
+        const descriptors = [];
+        // Walk in reverse registration order so the highest-priority / latest subclass override wins per key.
+        for (let i = registrations.length - 1; i >= 0; i--) {
+            const reg = registrations[i];
+            const key = reg.Key;
+            if (!key || seenKeys.has(key)) {
+                continue;
+            }
+            seenKeys.add(key);
+            const instance = MJGlobal.Instance.ClassFactory.CreateInstance(BaseRemotableOperation, key);
+            if (!instance) {
+                continue;
+            }
+            const asAgent = instance.ExposeAsAgentTool === true;
+            const asMcp = instance.ExposeAsMCPTool === true;
+            if (!asAgent && !asMcp) {
+                continue;
+            }
+            if (filter?.agentOnly && !asAgent) {
+                continue;
+            }
+            if (filter?.mcpOnly && !asMcp) {
+                continue;
+            }
+            descriptors.push({
+                OperationKey: instance.OperationKey,
+                ExposeAsAgentTool: asAgent,
+                ExposeAsMCPTool: asMcp,
+                Description: instance.ToolDescription,
+                InputSchema: instance.ToolInputSchema,
+                RequiredScope: instance.RequiredScope,
+                RequiresSystemUser: instance.RequiresSystemUser,
+                ExecutionMode: instance.ExecutionMode,
+            });
+        }
+        return descriptors.sort((a, b) => (a.OperationKey < b.OperationKey ? -1 : a.OperationKey > b.OperationKey ? 1 : 0));
+    }
     /**
      * The universal entry point — identical on client and server. Routes the operation through the
      * active (or explicitly supplied) provider's {@link IRemoteOperationProvider.RouteOperation}.
@@ -35,12 +124,16 @@ export class BaseRemotableOperation {
      */
     async Execute(input, options = {}) {
         let provider;
+        let candidateProvider;
         try {
-            provider = (options.provider ?? Metadata.Provider);
+            candidateProvider = options.provider ?? Metadata.Provider;
         }
         catch {
             // Metadata.Provider throws when no global provider has been configured — treat as "no provider".
-            provider = undefined;
+            candidateProvider = undefined;
+        }
+        if (candidateProvider && 'RouteOperation' in candidateProvider) {
+            provider = candidateProvider;
         }
         if (!provider || typeof provider.RouteOperation !== 'function') {
             return {
@@ -49,7 +142,10 @@ export class BaseRemotableOperation {
                 ErrorMessage: 'No remote-operation-capable provider is available to route this operation',
             };
         }
-        return provider.RouteOperation(this.OperationKey, input, options);
+        const effectiveOptions = this.ContractFingerprint && options.contractFingerprint === undefined
+            ? { ...options, contractFingerprint: this.ContractFingerprint }
+            : options;
+        return provider.RouteOperation(this.OperationKey, input, effectiveOptions);
     }
     /**
      * Server-side execution entry point, invoked **in-process** by a server provider / resolver
@@ -58,12 +154,12 @@ export class BaseRemotableOperation {
      * and then {@link InternalExecute}, wrapping the outcome in a {@link RemoteOpResult}.
      *
      * @param input - The typed input payload.
-     * @param context - The server execution context (provider, acting user, progress emitter).
+     * @param context - The server execution context (provider, acting user, progress emitter, HTTP metadata).
      * @returns The wrapped result; logical failures are returned, not thrown.
      */
     async ExecuteServer(input, context) {
         try {
-            const authorized = await this.Authorize(input, context.user);
+            const authorized = await this.Authorize(input, context.user, context);
             if (!authorized) {
                 return {
                     Success: false,
@@ -75,6 +171,13 @@ export class BaseRemotableOperation {
             return { Success: true, ResultCode: 'SUCCESS', Output: output };
         }
         catch (e) {
+            if (e instanceof RemoteOperationError) {
+                return {
+                    Success: false,
+                    ResultCode: e.ResultCode,
+                    ErrorMessage: e.message,
+                };
+            }
             return {
                 Success: false,
                 ResultCode: 'EXECUTION_ERROR',
@@ -91,7 +194,7 @@ export class BaseRemotableOperation {
      * @param _input - The typed input payload.
      * @param _provider - The owning provider for data access.
      * @param _user - The acting user.
-     * @param _context - The full server execution context (provider, user, progress emitter, handle).
+     * @param _context - The full server execution context (provider, user, progress emitter, handle, origin, IP).
      * @returns The typed output payload.
      */
     InternalExecute(_input, _provider, _user, _context) {
@@ -101,13 +204,14 @@ export class BaseRemotableOperation {
     /**
      * Per-operation authorization hook, composed with (and applied after) the framework gates that
      * the server resolver runs. Returns true by default. Override to enforce operation-specific
-     * rules against the input and acting user.
+     * rules against the input, acting user, and server transport context (e.g. `context.requestOrigin`).
      *
      * @param _input - The typed input payload.
      * @param _user - The acting user.
+     * @param _context - Optional server execution context (always supplied by {@link ExecuteServer}).
      * @returns True if the operation may proceed.
      */
-    async Authorize(_input, _user) {
+    async Authorize(_input, _user, _context) {
         return true;
     }
 }

package/dist/generic/baseRemotableOperation.js.map

@@ -1 +1 @@
-{"version":3,"file":"baseRemotableOperation.js","sourceRoot":"","sources":["../../src/generic/baseRemotableOperation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AA2BtC;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,OAAgB,sBAAsB;IAA5C;QAcI,wFAAwF;QACxE,kBAAa,GAAqB,MAAM,CAAC;IA0F7D,CAAC;IAxFG;;;;;;;OAOG;IACI,KAAK,CAAC,OAAO,CAAC,KAAa,EAAE,UAAiC,EAAE;QACnE,IAAI,QAA8C,CAAC;QACnD,IAAI,CAAC;YACD,QAAQ,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAoD,CAAC;QAC1G,CAAC;QAAC,MAAM,CAAC;YACL,iGAAiG;YACjG,QAAQ,GAAG,SAAS,CAAC;QACzB,CAAC;QACD,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,CAAC,cAAc,KAAK,UAAU,EAAE,CAAC;YAC7D,OAAO;gBACH,OAAO,EAAE,KAAK;gBACd,UAAU,EAAE,aAAa;gBACzB,YAAY,EAAE,2EAA2E;aAC5F,CAAC;QACN,CAAC;QACD,OAAO,QAAQ,CAAC,cAAc,CAAkB,IAAI,CAAC,YAAY,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IACvF,CAAC;IAED;;;;;;;;;OASG;IACI,KAAK,CAAC,aAAa,CAAC,KAAa,EAAE,OAA8B;QACpE,IAAI,CAAC;YACD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YAC7D,IAAI,CAAC,UAAU,EAAE,CAAC;gBACd,OAAO;oBACH,OAAO,EAAE,KAAK;oBACd,UAAU,EAAE,WAAW;oBACvB,YAAY,EAAE,oCAAoC,IAAI,CAAC,YAAY,GAAG;iBACzE,CAAC;YACN,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC1F,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QACpE,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,OAAO;gBACH,OAAO,EAAE,KAAK;gBACd,UAAU,EAAE,iBAAiB;gBAC7B,YAAY,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;aAC3D,CAAC;QACN,CAAC;IACL,CAAC;IAED;;;;;;;;;;;OAWG;IACO,eAAe,CAAC,MAAc,EAAE,SAA4B,EAAE,KAAe,EAAE,QAA+B;QACpH,MAAM,IAAI,KAAK,CACX,qBAAqB,IAAI,CAAC,YAAY,kCAAkC;YACxE,8EAA8E,CACjF,CAAC;IACN,CAAC;IAED;;;;;;;;OAQG;IACO,KAAK,CAAC,SAAS,CAAC,MAAc,EAAE,KAAe;QACrD,OAAO,IAAI,CAAC;IAChB,CAAC;CACJ"}
+{"version":3,"file":"baseRemotableOperation.js","sourceRoot":"","sources":["../../src/generic/baseRemotableOperation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAClD,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAWtC;;;;;GAKG;AACH,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAI3C,YAAY,UAAkB,EAAE,OAAe;QAC3C,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;QACnC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IACjC,CAAC;CACJ;AAiBD;;;;GAIG;AACH,MAAM,UAAU,yCAAyC,CAAC,IAAiC;IACvF,MAAM,UAAU,GAAG,CAAC,CAA4B,EAAU,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACnG,MAAM,SAAS,GAAG;QACd,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;QAChC,CAAC,IAAI,CAAC,aAAa,IAAI,MAAM,CAAC,CAAC,IAAI,EAAE;QACrC,CAAC,IAAI,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;QACjC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;QACjC,UAAU,CAAC,IAAI,CAAC,mBAAmB,CAAC;QACpC,CAAC,IAAI,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;QAClC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;QAClC,UAAU,CAAC,IAAI,CAAC,oBAAoB,CAAC;KACxC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAEZ,oGAAoG;IACpG,IAAI,EAAE,GAAG,UAAU,CAAC;IACpB,IAAI,EAAE,GAAG,UAAU,CAAC;IACpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,MAAM,CAAC,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAClC,EAAE,IAAI,CAAC,CAAC;QACR,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;QAC/B,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QACrB,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;IACnC,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACtD,OAAO,SAAS,IAAI,GAAG,IAAI,EAAE,CAAC;AAClC,CAAC;AA2DD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,OAAgB,sBAAsB;IAA5C;QAcI,wFAAwF;QACxE,kBAAa,GAAqB,MAAM,CAAC;IAmL7D,CAAC;IA9JG;;;OAGG;IACI,MAAM,CAAC,wBAAwB,CAAC,MAGtC;QACG,MAAM,aAAa,GAAG,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,mBAAmB,CAAC,sBAAsB,CAAC,CAAC;QACjG,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;QACnC,MAAM,WAAW,GAA2C,EAAE,CAAC;QAE/D,sGAAsG;QACtG,KAAK,IAAI,CAAC,GAAG,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YACjD,MAAM,GAAG,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;YAC7B,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC;YACpB,IAAI,CAAC,GAAG,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC5B,SAAS;YACb,CAAC;YACD,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAElB,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,cAAc,CAC1D,sBAAsB,EACtB,GAAG,CACN,CAAC;YACF,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACZ,SAAS;YACb,CAAC;YACD,MAAM,OAAO,GAAG,QAAQ,CAAC,iBAAiB,KAAK,IAAI,CAAC;YACpD,MAAM,KAAK,GAAG,QAAQ,CAAC,eAAe,KAAK,IAAI,CAAC;YAChD,IAAI,CAAC,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC;gBACrB,SAAS;YACb,CAAC;YACD,IAAI,MAAM,EAAE,SAAS,IAAI,CAAC,OAAO,EAAE,CAAC;gBAChC,SAAS;YACb,CAAC;YACD,IAAI,MAAM,EAAE,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC;gBAC5B,SAAS;YACb,CAAC;YACD,WAAW,CAAC,IAAI,CAAC;gBACb,YAAY,EAAE,QAAQ,CAAC,YAAY;gBACnC,iBAAiB,EAAE,OAAO;gBAC1B,eAAe,EAAE,KAAK;gBACtB,WAAW,EAAE,QAAQ,CAAC,eAAe;gBACrC,WAAW,EAAE,QAAQ,CAAC,eAAe;gBACrC,aAAa,EAAE,QAAQ,CAAC,aAAa;gBACrC,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB;gBAC/C,aAAa,EAAE,QAAQ,CAAC,aAAa;aACxC,CAAC,CAAC;QACP,CAAC;QAED,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACxH,CAAC;IAED;;;;;;;OAOG;IACI,KAAK,CAAC,OAAO,CAAC,KAAa,EAAE,UAAiC,EAAE;QACnE,IAAI,QAA8C,CAAC;QACnD,IAAI,iBAAgD,CAAC;QACrD,IAAI,CAAC;YACD,iBAAiB,GAAG,OAAO,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC;QAC9D,CAAC;QAAC,MAAM,CAAC;YACL,iGAAiG;YACjG,iBAAiB,GAAG,SAAS,CAAC;QAClC,CAAC;QACD,IAAI,iBAAiB,IAAI,gBAAgB,IAAI,iBAAiB,EAAE,CAAC;YAC7D,QAAQ,GAAG,iBAAiE,CAAC;QACjF,CAAC;QACD,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,CAAC,cAAc,KAAK,UAAU,EAAE,CAAC;YAC7D,OAAO;gBACH,OAAO,EAAE,KAAK;gBACd,UAAU,EAAE,aAAa;gBACzB,YAAY,EAAE,2EAA2E;aAC5F,CAAC;QACN,CAAC;QACD,MAAM,gBAAgB,GAClB,IAAI,CAAC,mBAAmB,IAAI,OAAO,CAAC,mBAAmB,KAAK,SAAS;YACjE,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,mBAAmB,EAAE,IAAI,CAAC,mBAAmB,EAAE;YAC/D,CAAC,CAAC,OAAO,CAAC;QAClB,OAAO,QAAQ,CAAC,cAAc,CAAkB,IAAI,CAAC,YAAY,EAAE,KAAK,EAAE,gBAAgB,CAAC,CAAC;IAChG,CAAC;IAED;;;;;;;;;OASG;IACI,KAAK,CAAC,aAAa,CAAC,KAAa,EAAE,OAA8B;QACpE,IAAI,CAAC;YACD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACtE,IAAI,CAAC,UAAU,EAAE,CAAC;gBACd,OAAO;oBACH,OAAO,EAAE,KAAK;oBACd,UAAU,EAAE,WAAW;oBACvB,YAAY,EAAE,oCAAoC,IAAI,CAAC,YAAY,GAAG;iBACzE,CAAC;YACN,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC1F,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QACpE,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,IAAI,CAAC,YAAY,oBAAoB,EAAE,CAAC;gBACpC,OAAO;oBACH,OAAO,EAAE,KAAK;oBACd,UAAU,EAAE,CAAC,CAAC,UAAU;oBACxB,YAAY,EAAE,CAAC,CAAC,OAAO;iBAC1B,CAAC;YACN,CAAC;YACD,OAAO;gBACH,OAAO,EAAE,KAAK;gBACd,UAAU,EAAE,iBAAiB;gBAC7B,YAAY,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;aAC3D,CAAC;QACN,CAAC;IACL,CAAC;IAED;;;;;;;;;;;OAWG;IACO,eAAe,CAAC,MAAc,EAAE,SAA4B,EAAE,KAAe,EAAE,QAA+B;QACpH,MAAM,IAAI,KAAK,CACX,qBAAqB,IAAI,CAAC,YAAY,kCAAkC;YACxE,8EAA8E,CACjF,CAAC;IACN,CAAC;IAED;;;;;;;;;OASG;IACO,KAAK,CAAC,SAAS,CAAC,MAAc,EAAE,KAAe,EAAE,QAAgC;QACvF,OAAO,IAAI,CAAC;IAChB,CAAC;CACJ"}

package/dist/generic/contextTokens.d.ts

@@ -0,0 +1,136 @@
+/**
+ * Context tokens and property defaults.
+ *
+ * A property (a User View property, a dashboard property, a query's server-set variable) can
+ * default to a fixed value or to a context token: a name from a closed list, worked out from the
+ * context user and the clock alone. The same resolver runs in the browser and on the server, so
+ * the two can differ only in the time zone they are given.
+ *
+ * - User tokens (`Context.UserID`, `Context.UserEmail`, `Context.UserName`) need a context user;
+ *   without one they throw rather than resolve to a blank.
+ * - **WARNING — SQL template escaping (`| sqlString`):** `Context.UserEmail` and `Context.UserName`
+ *   resolve to raw, unescaped strings (for example `O'Brien`) and reach Nunjucks query templates with
+ *   `autoescape: false`. Query templates **must** pipe them through `| sqlString`
+ *   (e.g. `WHERE Email = {{ Context.UserEmail | sqlString }}` or
+ *   `WHERE Name = {{ Context.UserName | sqlString }}`). Rendering `{{ Context.UserEmail }}` or
+ *   `{{ Context.UserName }}` bare produces broken SQL on apostrophes and opens SQL injection.
+ *   (User View properties are escaped automatically by `UserViewPropertyWhereClause`.)
+ * - Date tokens give a `YYYY-MM-DD` date in the given zone (`Context.Today`, `Context.StartOf*`),
+ *   or an ISO 8601 instant (`Context.Now`). Only date tokens take an offset.
+ * - The zone is an IANA name, `'UTC'` when none is given. Weeks start on Monday (ISO 8601) unless
+ *   the context says Sunday.
+ */
+/** Every context token. The list is closed: an app's own context is a property value, never a token. */
+export declare const CONTEXT_TOKENS: readonly ["Context.UserID", "Context.UserEmail", "Context.UserName", "Context.Now", "Context.Today", "Context.StartOfWeek", "Context.StartOfMonth", "Context.StartOfQuarter", "Context.StartOfYear"];
+/** A context token: one of {@link CONTEXT_TOKENS}. */
+export type ContextToken = typeof CONTEXT_TOKENS[number];
+/**
+ * The version of what {@link CONTEXT_TOKENS} means. Approval fingerprints include it, so an approval
+ * given under one meaning is stale under another. Bump it whenever a token is added, removed or
+ * worked out differently (a new week start, a different date format, a different user field).
+ */
+export declare const CONTEXT_TOKEN_CONTRACT_VERSION = 1;
+/** The value types a property can declare. */
+export declare const PROPERTY_VALUE_TYPES: readonly ["string", "number", "boolean", "date", "uuid"];
+/** A property's value type: one of {@link PROPERTY_VALUE_TYPES}. */
+export type PropertyValueType = typeof PROPERTY_VALUE_TYPES[number];
+/** The units an offset can move a date token by. */
+export declare const PROPERTY_OFFSET_UNITS: readonly ["day", "week", "month", "quarter", "year"];
+/** An offset unit: one of {@link PROPERTY_OFFSET_UNITS}. */
+export type PropertyOffsetUnit = typeof PROPERTY_OFFSET_UNITS[number];
+/** Moves a date token: `{ Amount: -30, Unit: 'day' }` is thirty days earlier. */
+export interface PropertyDefaultOffset {
+    /** A whole number; negative moves back. */
+    Amount: number;
+    Unit: PropertyOffsetUnit;
+}
+/** A property value, fixed or resolved. */
+export type PropertyValue = string | number | boolean | null;
+/**
+ * A property's default: a fixed value, or a token worked out when the value is used. Set exactly
+ * one of `Value` and `Token`. This is the shape the `MJ: User Views.Properties` JSON stores.
+ */
+export interface PropertyDefault {
+    /** A fixed value. Set this or Token, not both. */
+    Value?: PropertyValue;
+    /** A context token. Set this or Value, not both. */
+    Token?: ContextToken;
+    /** Moves a date token; refused on a user token and on a fixed value. */
+    Offset?: PropertyDefaultOffset;
+}
+/** The comparison a User View property's value drives. */
+export type UserViewPropertyOperator = '=' | '<>' | 'IN' | '>' | '>=' | '<' | '<=';
+/** The field a User View property filters, and how. */
+export interface UserViewPropertyTarget {
+    /** A field of the view's entity. */
+    Field: string;
+    Operator: UserViewPropertyOperator;
+}
+/**
+ * One declared property of a User View: a named, typed input that adds one predicate on its
+ * target field when a run gives it a value or it has a default. Stored as a JSON array in the
+ * `Properties` column of `MJ: User Views`.
+ */
+export interface UserViewProperty {
+    /** Unique within the view. */
+    Name: string;
+    /** The value's type. A value of another type is refused. */
+    Type: PropertyValueType;
+    /** Shown to whoever sets the property. */
+    Description?: string;
+    /** Used when a run gives no value: a fixed value or a context token. */
+    Default?: PropertyDefault;
+    /** True: a run with no value and no default is refused. */
+    IsRequired?: boolean;
+    /** False: only server code may set it, and a client value is refused. Default true. */
+    AllowOverride?: boolean;
+    /** The predicate the value drives. */
+    Target: UserViewPropertyTarget;
+}
+/** What a token is worked out from. */
+export interface PropertyResolutionContext {
+    /** The context user. Required by the user tokens. `UserInfo` fits. */
+    User?: {
+        ID: string;
+        Email?: string;
+        Name?: string;
+    };
+    /** The clock. Defaults to the current time. */
+    Now?: Date;
+    /** IANA time zone the date tokens are worked out in. Defaults to `'UTC'`. */
+    TimeZone?: string;
+    /** First day of the week for `Context.StartOfWeek`: 1 = Monday (default, ISO 8601), 0 = Sunday. */
+    WeekStartsOn?: 0 | 1;
+}
+/**
+ * The request header that carries the caller's IANA time zone. `GraphQLDataProvider` sends it;
+ * MJServer reads it into `UserPayload.TimeZone`.
+ */
+export declare const TIME_ZONE_HEADER = "x-mj-timezone";
+/** True when `name` is a time zone this runtime's `Intl` accepts (an IANA name such as `'Europe/Paris'`). */
+export declare function IsValidTimeZone(name: string | null | undefined): boolean;
+/** This runtime's own IANA time zone, or undefined where `Intl` gives none. */
+export declare function GetLocalTimeZone(): string | undefined;
+/** True when `token` is one of {@link CONTEXT_TOKENS}. */
+export declare function IsContextToken(token: string | null | undefined): token is ContextToken;
+/**
+ * Works out a property default: the fixed value, or the token resolved by {@link ResolveContextToken}.
+ * @throws when the default is malformed (see {@link ValidatePropertyDefault}) or the token cannot be resolved
+ */
+export declare function ResolvePropertyDefault(def: PropertyDefault, ctx: PropertyResolutionContext): PropertyValue;
+/**
+ * Works out one context token.
+ * @returns the user's ID, email or name; a `YYYY-MM-DD` date in the context's zone; or, for
+ *   `Context.Now`, an ISO 8601 instant
+ * @throws on an unknown token, a bad offset, an offset on a user token, a user token with no
+ *   context user, or an invalid time zone
+ */
+export declare function ResolveContextToken(token: ContextToken, offset: PropertyDefaultOffset | undefined, ctx: PropertyResolutionContext): string;
+/**
+ * Checks a property default against the property's type, as when the definition is saved.
+ * @returns the problems found; empty when the default is valid
+ */
+export declare function ValidatePropertyDefault(def: PropertyDefault, type: PropertyValueType): string[];
+/** True when a value fits the property type: a finite number, a boolean, a valid UUID or ISO date, or a string. Null fits every type. */
+export declare function IsPropertyValueOfType(value: PropertyValue, type: PropertyValueType): boolean;
+//# sourceMappingURL=contextTokens.d.ts.map

package/dist/generic/contextTokens.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contextTokens.d.ts","sourceRoot":"","sources":["../../src/generic/contextTokens.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAIH,wGAAwG;AACxG,eAAO,MAAM,cAAc,sMAUjB,CAAC;AAEX,sDAAsD;AACtD,MAAM,MAAM,YAAY,GAAG,OAAO,cAAc,CAAC,MAAM,CAAC,CAAC;AAEzD;;;;GAIG;AACH,eAAO,MAAM,8BAA8B,IAAI,CAAC;AAEhD,8CAA8C;AAC9C,eAAO,MAAM,oBAAoB,0DAA2D,CAAC;AAE7F,oEAAoE;AACpE,MAAM,MAAM,iBAAiB,GAAG,OAAO,oBAAoB,CAAC,MAAM,CAAC,CAAC;AAEpE,oDAAoD;AACpD,eAAO,MAAM,qBAAqB,sDAAuD,CAAC;AAE1F,4DAA4D;AAC5D,MAAM,MAAM,kBAAkB,GAAG,OAAO,qBAAqB,CAAC,MAAM,CAAC,CAAC;AAEtE,iFAAiF;AACjF,MAAM,WAAW,qBAAqB;IAClC,2CAA2C;IAC3C,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,kBAAkB,CAAC;CAC5B;AAED,2CAA2C;AAC3C,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC;AAE7D;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC5B,kDAAkD;IAClD,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,oDAAoD;IACpD,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB,wEAAwE;IACxE,MAAM,CAAC,EAAE,qBAAqB,CAAC;CAClC;AAED,0DAA0D;AAC1D,MAAM,MAAM,wBAAwB,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,GAAG,GAAG,GAAG,IAAI,GAAG,GAAG,GAAG,IAAI,CAAC;AAEnF,uDAAuD;AACvD,MAAM,WAAW,sBAAsB;IACnC,oCAAoC;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,wBAAwB,CAAC;CACtC;AAED;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAC7B,8BAA8B;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,4DAA4D;IAC5D,IAAI,EAAE,iBAAiB,CAAC;IACxB,0CAA0C;IAC1C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,wEAAwE;IACxE,OAAO,CAAC,EAAE,eAAe,CAAC;IAC1B,2DAA2D;IAC3D,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,uFAAuF;IACvF,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,sCAAsC;IACtC,MAAM,EAAE,sBAAsB,CAAC;CAClC;AAED,uCAAuC;AACvC,MAAM,WAAW,yBAAyB;IACtC,sEAAsE;IACtE,IAAI,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACrD,+CAA+C;IAC/C,GAAG,CAAC,EAAE,IAAI,CAAC;IACX,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mGAAmG;IACnG,YAAY,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;CACxB;AAED;;;GAGG;AACH,eAAO,MAAM,gBAAgB,kBAAkB,CAAC;AAsChD,6GAA6G;AAC7G,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAUxE;AAED,+EAA+E;AAC/E,wBAAgB,gBAAgB,IAAI,MAAM,GAAG,SAAS,CAOrD;AAED,0DAA0D;AAC1D,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,KAAK,IAAI,YAAY,CAEtF;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,yBAAyB,GAAG,aAAa,CAM1G;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,qBAAqB,GAAG,SAAS,EAAE,GAAG,EAAE,yBAAyB,GAAG,MAAM,CAsB1I;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,eAAe,EAAE,IAAI,EAAE,iBAAiB,GAAG,MAAM,EAAE,CAY/F;AAyDD,yIAAyI;AACzI,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAkB5F"}