@memberjunction/search-engine 5.32.0 → 5.34.0

package/dist/permissions/SearchScopePermissionResolver.d.ts

@@ -0,0 +1,109 @@
+import { UserInfo } from '@memberjunction/core';
+import type { MJSearchScopePermissionEntity, MJAIAgentEntity } from '@memberjunction/core-entities';
+/**
+ * Permission level granted on a SearchScope. None is an explicit deny that
+ * overrides role grants for that scope/principal pair. The resolver collapses
+ * multiple grants into the highest level (Manage > Search > Read > None).
+ */
+export type SearchScopePermissionLevel = 'None' | 'Read' | 'Search' | 'Manage';
+/**
+ * Where the resolver picked up the effective permission. Used for audit
+ * logging and explanatory error messages.
+ */
+export type SearchScopePermissionSource = 'DirectGrant' | 'RoleGrant' | 'AgentUnscopedAll' | 'AgentNone' | 'AgentAssignedNotListed' | 'NoGrant';
+export interface EffectivePermission {
+    /** True when the principal can at least read the scope's metadata. */
+    readonly Allowed: boolean;
+    /** Highest level granted, or 'None' when no grant applies. */
+    readonly Level: SearchScopePermissionLevel;
+    /** Where the decision came from. */
+    readonly Source: SearchScopePermissionSource;
+    /** Human-readable explanation suitable for audit logs and error messages. */
+    readonly Reason: string;
+    /**
+     * Renders the effective permission as a SQL predicate fragment that can
+     * be ANDed into a provider's WHERE clause. Returns '1=1' when the
+     * permission allows unrestricted access for this scope, '1=0' when it
+     * rejects entirely. Providers that translate to non-SQL DSLs should
+     * inspect Allowed/Level instead — the predicate is for SQL Server-backed
+     * providers and is intentionally trivial today; richer per-scope filters
+     * live in the SearchScope.ScopeConfig template.
+     */
+    toSqlPredicate(): string;
+}
+/**
+ * Inputs required to resolve a permission. The resolver is server-side only
+ * and never reaches into request context — caller passes the identities it
+ * has already established.
+ */
+export interface ResolvePermissionInput {
+    /**
+     * The acting user. Required even when an agent is invoking the search,
+     * because agent-mediated calls still authenticate as a user and any
+     * direct/role grants on that user ID still apply.
+     */
+    User: UserInfo;
+    /** The SearchScope being authorized. */
+    SearchScopeID: string;
+    /**
+     * The agent on whose behalf the search runs, or null for human-driven
+     * searches. When set, the agent's SearchScopeAccess column gates the
+     * fallback paths.
+     */
+    Agent: MJAIAgentEntity | null;
+    /**
+     * Optional ContextUser for RunView calls. Server-side code must always
+     * pass this to enforce data isolation; it is the same UserInfo as `User`
+     * unless the caller is impersonating.
+     */
+    ContextUser?: UserInfo;
+}
+/**
+ * Resolves the effective SearchScope permission for a (user, scope, agent)
+ * triple.
+ *
+ * Resolution order (later steps only run if the earlier did not produce a
+ * definitive answer):
+ *
+ *   1. Agent.SearchScopeAccess === 'None' → reject (explicit agent-side deny).
+ *   2. Direct grant: a SearchScopePermission row with UserID = user.ID and
+ *      SearchScopeID = scope.ID. PermissionLevel = 'None' is an explicit
+ *      deny that short-circuits and rejects regardless of role grants.
+ *   3. Role grants: SearchScopePermission rows where RoleID is in the
+ *      user's UserRoles. The highest non-None level wins. None entries are
+ *      ignored at the role level (see comment below).
+ *   4. Agent.SearchScopeAccess === 'All' → allow at Search level (lets
+ *      trusted agents act across all scopes when no user-side grant exists).
+ *   5. No grant → reject.
+ *
+ * The user-direct-None rule (step 2) is intentional: an admin who explicitly
+ * denies a user on a scope should not have that decision overridden by a
+ * role membership the user happens to also hold. Role-level None entries
+ * are not authoritative because they are usually authored as a placeholder
+ * (e.g., to make a row exist before granting it later) and would create
+ * surprising lockouts when a user joins a role.
+ */
+export declare class SearchScopePermissionResolver {
+    /**
+     * Resolves the effective permission. All UUID comparisons go through
+     * UUIDsEqual to remain case-insensitive across SQL Server / PostgreSQL.
+     */
+    ResolveEffectivePermission(input: ResolvePermissionInput): Promise<EffectivePermission>;
+    /**
+     * Checks whether the given scope is in the agent's assigned-scope list
+     * via __mj.AIAgentSearchScope. Used to enforce the SearchScopeAccess='Assigned'
+     * deny-list rule. Returns true when at least one matching row exists with
+     * Status='Active'; false otherwise.
+     */
+    protected isScopeAssignedToAgent(agentID: string, searchScopeID: string, contextUser: UserInfo): Promise<boolean>;
+    /**
+     * Loads all SearchScopePermission rows scoped to the given SearchScope.
+     * Caller-supplied ContextUser ensures the RunView runs under the same
+     * identity the rest of the request is using.
+     */
+    protected loadPermissionsForScope(searchScopeID: string, contextUser: UserInfo): Promise<MJSearchScopePermissionEntity[]>;
+    /** Bundles the result fields together with a closure-bound toSqlPredicate. */
+    private buildResult;
+}
+export declare const DefaultSearchScopePermissionResolver: SearchScopePermissionResolver;
+//# sourceMappingURL=SearchScopePermissionResolver.d.ts.map

package/dist/permissions/SearchScopePermissionResolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SearchScopePermissionResolver.d.ts","sourceRoot":"","sources":["../../src/permissions/SearchScopePermissionResolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAqB,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAEnE,OAAO,KAAK,EAAE,6BAA6B,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAEpG;;;;GAIG;AACH,MAAM,MAAM,0BAA0B,GAAG,MAAM,GAAG,MAAM,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAE/E;;;GAGG;AACH,MAAM,MAAM,2BAA2B,GACjC,aAAa,GACb,WAAW,GACX,kBAAkB,GAClB,WAAW,GACX,wBAAwB,GACxB,SAAS,CAAC;AAEhB,MAAM,WAAW,mBAAmB;IAChC,sEAAsE;IACtE,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,8DAA8D;IAC9D,QAAQ,CAAC,KAAK,EAAE,0BAA0B,CAAC;IAC3C,oCAAoC;IACpC,QAAQ,CAAC,MAAM,EAAE,2BAA2B,CAAC;IAC7C,6EAA6E;IAC7E,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB;;;;;;;;OAQG;IACH,cAAc,IAAI,MAAM,CAAC;CAC5B;AAED;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACnC;;;;OAIG;IACH,IAAI,EAAE,QAAQ,CAAC;IACf,wCAAwC;IACxC,aAAa,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,KAAK,EAAE,eAAe,GAAG,IAAI,CAAC;IAC9B;;;;OAIG;IACH,WAAW,CAAC,EAAE,QAAQ,CAAC;CAC1B;AAmBD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,qBAAa,6BAA6B;IACtC;;;OAGG;IACU,0BAA0B,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAmEpG;;;;;OAKG;cACa,sBAAsB,CAClC,OAAO,EAAE,MAAM,EACf,aAAa,EAAE,MAAM,EACrB,WAAW,EAAE,QAAQ,GACtB,OAAO,CAAC,OAAO,CAAC;IAmBnB;;;;OAIG;cACa,uBAAuB,CACnC,aAAa,EAAE,MAAM,EACrB,WAAW,EAAE,QAAQ,GACtB,OAAO,CAAC,6BAA6B,EAAE,CAAC;IAqB3C,8EAA8E;IAC9E,OAAO,CAAC,WAAW;CActB;AAID,eAAO,MAAM,oCAAoC,+BAAsC,CAAC"}

package/dist/permissions/SearchScopePermissionResolver.js

@@ -0,0 +1,159 @@
+import { RunView } from '@memberjunction/core';
+import { UUIDsEqual } from '@memberjunction/global';
+const LEVEL_RANK = {
+    None: 0,
+    Read: 1,
+    Search: 2,
+    Manage: 3,
+};
+/**
+ * Picks the highest level between two grants. None is treated as the lowest
+ * (a None row from a role does not deny when a Read row exists for the user
+ * directly — the explicit deny is only authoritative when it is the user's
+ * own direct grant; see resolution-order rules below).
+ */
+function highestLevel(a, b) {
+    return LEVEL_RANK[a] >= LEVEL_RANK[b] ? a : b;
+}
+/**
+ * Resolves the effective SearchScope permission for a (user, scope, agent)
+ * triple.
+ *
+ * Resolution order (later steps only run if the earlier did not produce a
+ * definitive answer):
+ *
+ *   1. Agent.SearchScopeAccess === 'None' → reject (explicit agent-side deny).
+ *   2. Direct grant: a SearchScopePermission row with UserID = user.ID and
+ *      SearchScopeID = scope.ID. PermissionLevel = 'None' is an explicit
+ *      deny that short-circuits and rejects regardless of role grants.
+ *   3. Role grants: SearchScopePermission rows where RoleID is in the
+ *      user's UserRoles. The highest non-None level wins. None entries are
+ *      ignored at the role level (see comment below).
+ *   4. Agent.SearchScopeAccess === 'All' → allow at Search level (lets
+ *      trusted agents act across all scopes when no user-side grant exists).
+ *   5. No grant → reject.
+ *
+ * The user-direct-None rule (step 2) is intentional: an admin who explicitly
+ * denies a user on a scope should not have that decision overridden by a
+ * role membership the user happens to also hold. Role-level None entries
+ * are not authoritative because they are usually authored as a placeholder
+ * (e.g., to make a row exist before granting it later) and would create
+ * surprising lockouts when a user joins a role.
+ */
+export class SearchScopePermissionResolver {
+    /**
+     * Resolves the effective permission. All UUID comparisons go through
+     * UUIDsEqual to remain case-insensitive across SQL Server / PostgreSQL.
+     */
+    async ResolveEffectivePermission(input) {
+        const { User, SearchScopeID, Agent } = input;
+        const contextUser = input.ContextUser ?? User;
+        // Step 1: agent-side explicit deny short-circuits everything.
+        if (Agent && Agent.SearchScopeAccess === 'None') {
+            return this.buildResult(false, 'None', 'AgentNone', `Agent '${Agent.Name}' has SearchScopeAccess='None'; refused without consulting per-scope grants.`);
+        }
+        // Step 1b: agent-side Assigned restriction. When SearchScopeAccess='Assigned'
+        // the agent can ONLY use scopes listed in __mj.AIAgentSearchScope for
+        // this agent. If the scope isn't in that list, deny early before
+        // consulting per-user grants — this is a deny-list, not a grant.
+        if (Agent && Agent.SearchScopeAccess === 'Assigned') {
+            const isListed = await this.isScopeAssignedToAgent(Agent.ID, SearchScopeID, contextUser);
+            if (!isListed) {
+                return this.buildResult(false, 'None', 'AgentAssignedNotListed', `Agent '${Agent.Name}' has SearchScopeAccess='Assigned' and this scope is not in its assigned scope list; refused with ACCESS_DENIED.`);
+            }
+            // Falls through to user/role checks; Assigned restricts but does
+            // not grant — the user must still have a per-scope grant.
+        }
+        // Load all SearchScopePermission rows for this scope. We pull the
+        // whole set (typically small per scope) and filter in JS so we can
+        // apply the user-direct-None short-circuit deterministically.
+        const rows = await this.loadPermissionsForScope(SearchScopeID, contextUser);
+        // Step 2: direct grant for this user (highest priority).
+        const userGrants = rows.filter(r => r.UserID && UUIDsEqual(r.UserID, User.ID));
+        if (userGrants.length > 0) {
+            // If any user-direct row is None, that is an explicit deny.
+            if (userGrants.some(r => r.PermissionLevel === 'None')) {
+                return this.buildResult(false, 'None', 'DirectGrant', `User '${User.Name}' has an explicit None grant on this scope; refused.`);
+            }
+            const level = userGrants.reduce((acc, r) => highestLevel(acc, r.PermissionLevel), 'None');
+            return this.buildResult(true, level, 'DirectGrant', `User '${User.Name}' has a direct grant at level '${level}' on this scope.`);
+        }
+        // Step 3: role grants. Match any of the user's roles to a row's RoleID.
+        const userRoleIds = User.UserRoles?.map(ur => ur.RoleID) ?? [];
+        const roleGrants = rows.filter(r => r.RoleID
+            && userRoleIds.some(uid => UUIDsEqual(uid, r.RoleID))
+            && r.PermissionLevel !== 'None');
+        if (roleGrants.length > 0) {
+            const level = roleGrants.reduce((acc, r) => highestLevel(acc, r.PermissionLevel), 'None');
+            return this.buildResult(true, level, 'RoleGrant', `User '${User.Name}' inherits level '${level}' on this scope through role membership.`);
+        }
+        // Step 4: agent fallback. SearchScopeAccess='All' lets trusted agents
+        // operate across scopes when the user has no per-scope grant.
+        if (Agent && Agent.SearchScopeAccess === 'All') {
+            return this.buildResult(true, 'Search', 'AgentUnscopedAll', `Agent '${Agent.Name}' has SearchScopeAccess='All'; granting 'Search' as a fallback for this scope.`);
+        }
+        // Step 5: no grant.
+        return this.buildResult(false, 'None', 'NoGrant', `User '${User.Name}' has no direct grant, no qualifying role grant, and no agent-side fallback for this scope.`);
+    }
+    /**
+     * Checks whether the given scope is in the agent's assigned-scope list
+     * via __mj.AIAgentSearchScope. Used to enforce the SearchScopeAccess='Assigned'
+     * deny-list rule. Returns true when at least one matching row exists with
+     * Status='Active'; false otherwise.
+     */
+    async isScopeAssignedToAgent(agentID, searchScopeID, contextUser) {
+        const rv = new RunView();
+        const result = await rv.RunView({
+            EntityName: 'MJ: AI Agent Search Scopes',
+            ExtraFilter: `AgentID='${agentID}' AND SearchScopeID='${searchScopeID}' AND Status='Active'`,
+            Fields: ['ID'],
+            ResultType: 'simple',
+            // Same fail-closed semantics as loadPermissionsForScope: a stale
+            // cache must never let an Assigned-mode agent reach a scope it
+            // shouldn't.
+            BypassCache: true,
+        }, contextUser);
+        if (!result.Success) {
+            throw new Error(`SearchScopePermissionResolver: failed to load AIAgentSearchScope rows for agent ${agentID}, scope ${searchScopeID}: ${result.ErrorMessage}`);
+        }
+        return (result.Results?.length ?? 0) > 0;
+    }
+    /**
+     * Loads all SearchScopePermission rows scoped to the given SearchScope.
+     * Caller-supplied ContextUser ensures the RunView runs under the same
+     * identity the rest of the request is using.
+     */
+    async loadPermissionsForScope(searchScopeID, contextUser) {
+        const rv = new RunView();
+        const result = await rv.RunView({
+            EntityName: 'MJ: Search Scope Permissions',
+            ExtraFilter: `SearchScopeID='${searchScopeID}'`,
+            ResultType: 'simple',
+            // Permission decisions must NEVER read stale cache — a freshly-revoked grant
+            // or a freshly-granted permission must take effect immediately. Skipping
+            // the server-side RunView cache adds one DB query per resolver call but
+            // eliminates the security-correctness risk of a delayed permission update.
+            BypassCache: true,
+        }, contextUser);
+        if (!result.Success) {
+            // Fail closed: an unreadable permissions table cannot be treated
+            // as "no permissions exist".
+            throw new Error(`SearchScopePermissionResolver: failed to load permissions for scope ${searchScopeID}: ${result.ErrorMessage}`);
+        }
+        return result.Results ?? [];
+    }
+    /** Bundles the result fields together with a closure-bound toSqlPredicate. */
+    buildResult(allowed, level, source, reason) {
+        return {
+            Allowed: allowed,
+            Level: level,
+            Source: source,
+            Reason: reason,
+            toSqlPredicate: () => allowed ? '1=1' : '1=0',
+        };
+    }
+}
+// Hint to consumers: keep one resolver per request unless you genuinely
+// need a different policy. The class is stateless; instantiation is cheap.
+export const DefaultSearchScopePermissionResolver = new SearchScopePermissionResolver();
+//# sourceMappingURL=SearchScopePermissionResolver.js.map

package/dist/permissions/SearchScopePermissionResolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SearchScopePermissionResolver.js","sourceRoot":"","sources":["../../src/permissions/SearchScopePermissionResolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAY,OAAO,EAAY,MAAM,sBAAsB,CAAC;AACnE,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAuEpD,MAAM,UAAU,GAA+C;IAC3D,IAAI,EAAE,CAAC;IACP,IAAI,EAAE,CAAC;IACP,MAAM,EAAE,CAAC;IACT,MAAM,EAAE,CAAC;CACZ,CAAC;AAEF;;;;;GAKG;AACH,SAAS,YAAY,CAAC,CAA6B,EAAE,CAA6B;IAC9E,OAAO,UAAU,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAClD,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,OAAO,6BAA6B;IACtC;;;OAGG;IACI,KAAK,CAAC,0BAA0B,CAAC,KAA6B;QACjE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;QAC7C,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,IAAI,IAAI,CAAC;QAE9C,8DAA8D;QAC9D,IAAI,KAAK,IAAI,KAAK,CAAC,iBAAiB,KAAK,MAAM,EAAE,CAAC;YAC9C,OAAO,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,EAC9C,UAAU,KAAK,CAAC,IAAI,8EAA8E,CAAC,CAAC;QAC5G,CAAC;QAED,8EAA8E;QAC9E,sEAAsE;QACtE,iEAAiE;QACjE,iEAAiE;QACjE,IAAI,KAAK,IAAI,KAAK,CAAC,iBAAiB,KAAK,UAAU,EAAE,CAAC;YAClD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,EAAE,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC;YACzF,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACZ,OAAO,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,wBAAwB,EAC3D,UAAU,KAAK,CAAC,IAAI,kHAAkH,CAAC,CAAC;YAChJ,CAAC;YACD,iEAAiE;YACjE,0DAA0D;QAC9D,CAAC;QAED,kEAAkE;QAClE,mEAAmE;QACnE,8DAA8D;QAC9D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;QAE5E,yDAAyD;QACzD,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,UAAU,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAC/E,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,4DAA4D;YAC5D,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,eAAe,KAAK,MAAM,CAAC,EAAE,CAAC;gBACrD,OAAO,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,aAAa,EAChD,SAAS,IAAI,CAAC,IAAI,sDAAsD,CAAC,CAAC;YAClF,CAAC;YACD,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAC3B,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC,eAA6C,CAAC,EAAE,MAAM,CAAC,CAAC;YAC5F,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,aAAa,EAC9C,SAAS,IAAI,CAAC,IAAI,kCAAkC,KAAK,kBAAkB,CAAC,CAAC;QACrF,CAAC;QAED,wEAAwE;QACxE,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC/D,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM;eACrC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC,MAAO,CAAC,CAAC;eACnD,CAAC,CAAC,eAAe,KAAK,MAAM,CAAC,CAAC;QACrC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAC3B,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC,eAA6C,CAAC,EAAE,MAAM,CAAC,CAAC;YAC5F,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,WAAW,EAC5C,SAAS,IAAI,CAAC,IAAI,qBAAqB,KAAK,0CAA0C,CAAC,CAAC;QAChG,CAAC;QAED,sEAAsE;QACtE,8DAA8D;QAC9D,IAAI,KAAK,IAAI,KAAK,CAAC,iBAAiB,KAAK,KAAK,EAAE,CAAC;YAC7C,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,kBAAkB,EACtD,UAAU,KAAK,CAAC,IAAI,gFAAgF,CAAC,CAAC;QAC9G,CAAC;QAED,oBAAoB;QACpB,OAAO,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAC5C,SAAS,IAAI,CAAC,IAAI,6FAA6F,CAAC,CAAC;IACzH,CAAC;IAED;;;;;OAKG;IACO,KAAK,CAAC,sBAAsB,CAClC,OAAe,EACf,aAAqB,EACrB,WAAqB;QAErB,MAAM,EAAE,GAAG,IAAI,OAAO,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAAiB;YAC5C,UAAU,EAAE,4BAA4B;YACxC,WAAW,EAAE,YAAY,OAAO,wBAAwB,aAAa,uBAAuB;YAC5F,MAAM,EAAE,CAAC,IAAI,CAAC;YACd,UAAU,EAAE,QAAQ;YACpB,iEAAiE;YACjE,+DAA+D;YAC/D,aAAa;YACb,WAAW,EAAE,IAAI;SACpB,EAAE,WAAW,CAAC,CAAC;QAChB,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CACX,mFAAmF,OAAO,WAAW,aAAa,KAAK,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;QACtJ,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAC7C,CAAC;IAED;;;;OAIG;IACO,KAAK,CAAC,uBAAuB,CACnC,aAAqB,EACrB,WAAqB;QAErB,MAAM,EAAE,GAAG,IAAI,OAAO,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAAgC;YAC3D,UAAU,EAAE,8BAA8B;YAC1C,WAAW,EAAE,kBAAkB,aAAa,GAAG;YAC/C,UAAU,EAAE,QAAQ;YACpB,6EAA6E;YAC7E,yEAAyE;YACzE,wEAAwE;YACxE,2EAA2E;YAC3E,WAAW,EAAE,IAAI;SACpB,EAAE,WAAW,CAAC,CAAC;QAChB,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAClB,iEAAiE;YACjE,6BAA6B;YAC7B,MAAM,IAAI,KAAK,CACX,uEAAuE,aAAa,KAAK,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;QACxH,CAAC;QACD,OAAO,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;IAChC,CAAC;IAED,8EAA8E;IACtE,WAAW,CACf,OAAgB,EAChB,KAAiC,EACjC,MAAmC,EACnC,MAAc;QAEd,OAAO;YACH,OAAO,EAAE,OAAO;YAChB,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,MAAM;YACd,cAAc,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK;SAChD,CAAC;IACN,CAAC;CACJ;AAED,wEAAwE;AACxE,2EAA2E;AAC3E,MAAM,CAAC,MAAM,oCAAoC,GAAG,IAAI,6BAA6B,EAAE,CAAC"}

package/dist/providers/AzureAISearchProvider.d.ts

@@ -0,0 +1,37 @@
+/**
+ * @fileoverview Azure AI Search provider for the SearchEngine (P5.3).
+ *
+ * Calls Azure AI Search's `docs/search` REST endpoint directly via fetch.
+ * Azure AI Search's filter syntax is OData ($filter), passed through as a
+ * pre-rendered string from the scope's `MetadataFilter`. Permission /
+ * tenant push-down lives entirely in that filter — no post-fusion filtering.
+ *
+ * **Connection options** (from `SearchProviderConfig.ProviderConfig`):
+ *   - `serviceName` — Azure AI Search service short name (combined with
+ *     `.search.windows.net`); OR
+ *   - `endpoint` — full HTTPS endpoint URL (e.g. `https://my.search.windows.net`)
+ *   - `apiKey` — query or admin key (sent via `api-key` header)
+ *   - `apiVersion` — API version, default `2024-07-01`
+ *   - `defaultIndex` — fallback index when no scope ExternalIndexes
+ *   - `defaultSearchFields` — comma-separated `searchFields` (when omitted,
+ *     Azure searches all searchable fields)
+ *
+ * @module @memberjunction/search-engine
+ */
+import { UserInfo } from '@memberjunction/core';
+import { BaseSearchProvider, SearchProviderConfig } from '../generic/ISearchProvider.js';
+import { SearchSource, SearchFilters, SearchResultItem, ScopeConstraints } from '../generic/search.types.js';
+export declare class AzureAISearchProvider extends BaseSearchProvider {
+    readonly SourceType: SearchSource;
+    private parsedConfig;
+    private available;
+    Initialize(config: SearchProviderConfig, contextUser: UserInfo): Promise<void>;
+    CheckAvailability(_contextUser: UserInfo): Promise<void>;
+    IsAvailable(): boolean;
+    Search(query: string, topK: number, _filters: SearchFilters | undefined, _contextUser: UserInfo, scopeConstraints?: ScopeConstraints): Promise<SearchResultItem[]>;
+    /** Resolve the Azure search service base URL from the parsed config. */
+    private resolveEndpoint;
+}
+/** Tree-shake prevention helper. */
+export declare function LoadAzureAISearchProvider(): void;
+//# sourceMappingURL=AzureAISearchProvider.d.ts.map

package/dist/providers/AzureAISearchProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AzureAISearchProvider.d.ts","sourceRoot":"","sources":["../../src/providers/AzureAISearchProvider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAY,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAE1D,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AACtF,OAAO,EACH,YAAY,EACZ,aAAa,EACb,gBAAgB,EAChB,gBAAgB,EACnB,MAAM,yBAAyB,CAAC;AAoBjC,qBACa,qBAAsB,SAAQ,kBAAkB;IACzD,SAAgB,UAAU,EAAE,YAAY,CAAc;IAEtD,OAAO,CAAC,YAAY,CAAoC;IACxD,OAAO,CAAC,SAAS,CAAS;IAEJ,UAAU,CAAC,MAAM,EAAE,oBAAoB,EAAE,WAAW,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IAS9E,iBAAiB,CAAC,YAAY,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IAsB9D,WAAW,IAAI,OAAO;IAIzB,MAAM,CACf,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,aAAa,GAAG,SAAS,EACnC,YAAY,EAAE,QAAQ,EACtB,gBAAgB,CAAC,EAAE,gBAAgB,GACpC,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAsF9B,wEAAwE;IACxE,OAAO,CAAC,eAAe;CAS1B;AAED,oCAAoC;AACpC,wBAAgB,yBAAyB,IAAI,IAAI,CAGhD"}

package/dist/providers/AzureAISearchProvider.js

@@ -0,0 +1,180 @@
+/**
+ * @fileoverview Azure AI Search provider for the SearchEngine (P5.3).
+ *
+ * Calls Azure AI Search's `docs/search` REST endpoint directly via fetch.
+ * Azure AI Search's filter syntax is OData ($filter), passed through as a
+ * pre-rendered string from the scope's `MetadataFilter`. Permission /
+ * tenant push-down lives entirely in that filter — no post-fusion filtering.
+ *
+ * **Connection options** (from `SearchProviderConfig.ProviderConfig`):
+ *   - `serviceName` — Azure AI Search service short name (combined with
+ *     `.search.windows.net`); OR
+ *   - `endpoint` — full HTTPS endpoint URL (e.g. `https://my.search.windows.net`)
+ *   - `apiKey` — query or admin key (sent via `api-key` header)
+ *   - `apiVersion` — API version, default `2024-07-01`
+ *   - `defaultIndex` — fallback index when no scope ExternalIndexes
+ *   - `defaultSearchFields` — comma-separated `searchFields` (when omitted,
+ *     Azure searches all searchable fields)
+ *
+ * @module @memberjunction/search-engine
+ */
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+import { LogError } from '@memberjunction/core';
+import { RegisterClass } from '@memberjunction/global';
+import { BaseSearchProvider } from '../generic/ISearchProvider.js';
+let AzureAISearchProvider = class AzureAISearchProvider extends BaseSearchProvider {
+    constructor() {
+        super(...arguments);
+        this.SourceType = 'fulltext';
+        this.parsedConfig = null;
+        this.available = false;
+    }
+    async Initialize(config, contextUser) {
+        await super.Initialize(config, contextUser);
+        this.parsedConfig = config.ProviderConfig ?? null;
+        if (!this.parsedConfig?.apiKey || (!this.parsedConfig.endpoint && !this.parsedConfig.serviceName)) {
+            LogError('AzureAISearchProvider: ProviderConfig must include apiKey and either endpoint or serviceName.');
+            return;
+        }
+    }
+    async CheckAvailability(_contextUser) {
+        if (!this.parsedConfig?.apiKey) {
+            this.available = false;
+            return;
+        }
+        const endpoint = this.resolveEndpoint();
+        if (!endpoint) {
+            this.available = false;
+            return;
+        }
+        try {
+            // Probe the service-level endpoint with the api-version param. A 200/401 both
+            // confirm the host is reachable; we treat any HTTP response as "service is up
+            // and credential is at least the right shape" — Azure returns 401 if the key
+            // is wrong, which IS reachable.
+            const url = `${endpoint}/?api-version=${encodeURIComponent(this.parsedConfig.apiVersion ?? '2024-07-01')}`;
+            const response = await fetch(url, { method: 'GET', headers: { 'api-key': this.parsedConfig.apiKey } });
+            this.available = response.ok || response.status === 401;
+            if (!this.available) {
+                LogError(`AzureAISearchProvider: probe returned ${response.status}`);
+            }
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            LogError(`AzureAISearchProvider: probe failed — ${msg}`);
+            this.available = false;
+        }
+    }
+    IsAvailable() {
+        return this.available;
+    }
+    async Search(query, topK, _filters, _contextUser, scopeConstraints) {
+        if (!this.parsedConfig?.apiKey)
+            return [];
+        const endpoint = this.resolveEndpoint();
+        if (!endpoint)
+            return [];
+        const effectiveQuery = scopeConstraints?.QueryTransforms?.[this.SourceType] ?? query;
+        const apiVersion = this.parsedConfig.apiVersion ?? '2024-07-01';
+        const scopedAzureRows = scopeConstraints?.ExternalIndexes
+            ?.filter(r => r.IndexType === 'AzureAISearch' && r.ExternalIndexName) ?? [];
+        const targets = scopedAzureRows.length > 0
+            ? scopedAzureRows
+            : (this.parsedConfig.defaultIndex
+                ? [{
+                        IndexType: 'AzureAISearch',
+                        ExternalIndexName: this.parsedConfig.defaultIndex,
+                        MetadataFilter: undefined,
+                    }]
+                : []);
+        if (targets.length === 0)
+            return [];
+        const requests = targets.map(async (idx) => {
+            const url = `${endpoint}/indexes/${encodeURIComponent(idx.ExternalIndexName)}/docs/search?api-version=${encodeURIComponent(apiVersion)}`;
+            const body = {
+                search: effectiveQuery,
+                top: topK,
+            };
+            if (this.parsedConfig?.defaultSearchFields) {
+                body.searchFields = this.parsedConfig.defaultSearchFields;
+            }
+            if (idx.MetadataFilter && typeof idx.MetadataFilter === 'string') {
+                body.filter = idx.MetadataFilter;
+            }
+            try {
+                const response = await fetch(url, {
+                    method: 'POST',
+                    headers: { 'api-key': this.parsedConfig.apiKey, 'Content-Type': 'application/json' },
+                    body: JSON.stringify(body),
+                });
+                if (!response.ok) {
+                    const text = await response.text().catch(() => '');
+                    LogError(`AzureAISearchProvider: ${idx.ExternalIndexName} returned ${response.status}: ${text || response.statusText}`);
+                    return { index: idx.ExternalIndexName, hits: [] };
+                }
+                const json = await response.json();
+                return { index: idx.ExternalIndexName, hits: json.value ?? [] };
+            }
+            catch (err) {
+                const msg = err instanceof Error ? err.message : String(err);
+                LogError(`AzureAISearchProvider: ${idx.ExternalIndexName} fetch failed — ${msg}`);
+                return { index: idx.ExternalIndexName, hits: [] };
+            }
+        });
+        const results = await Promise.all(requests);
+        const merged = results.flatMap(r => r.hits.map(h => ({ index: r.index, hit: h })));
+        if (merged.length === 0)
+            return [];
+        const topScore = Math.max(1, ...merged.map(m => m.hit['@search.score']));
+        return merged
+            .sort((a, b) => b.hit['@search.score'] - a.hit['@search.score'])
+            .slice(0, topK)
+            .map((m) => {
+            const id = String(m.hit['id'] ?? m.hit['Id'] ?? m.hit['ID'] ?? '');
+            const title = String(m.hit['title'] ?? m.hit['name'] ?? m.hit['Name'] ?? id);
+            const snippet = String(m.hit['content'] ?? m.hit['description'] ?? '');
+            const normalized = m.hit['@search.score'] / topScore;
+            return {
+                ID: `azs-${m.index}-${id}`,
+                EntityName: m.index,
+                RecordID: id,
+                SourceType: this.SourceType,
+                ResultType: 'entity-record',
+                Title: title.slice(0, 200),
+                Snippet: snippet.slice(0, 500),
+                Score: normalized,
+                ScoreBreakdown: { FullText: normalized },
+                Tags: [],
+                MatchedAt: new Date(),
+                EntityIcon: 'fa-solid fa-cloud',
+                RecordName: title.slice(0, 200),
+                RawMetadata: JSON.stringify({ index: m.index, id, _rawScore: m.hit['@search.score'] }),
+            };
+        });
+    }
+    /** Resolve the Azure search service base URL from the parsed config. */
+    resolveEndpoint() {
+        if (this.parsedConfig?.endpoint) {
+            return this.parsedConfig.endpoint.replace(/\/$/, '');
+        }
+        if (this.parsedConfig?.serviceName) {
+            return `https://${this.parsedConfig.serviceName}.search.windows.net`;
+        }
+        return null;
+    }
+};
+AzureAISearchProvider = __decorate([
+    RegisterClass(BaseSearchProvider, 'AzureAISearchProvider')
+], AzureAISearchProvider);
+export { AzureAISearchProvider };
+/** Tree-shake prevention helper. */
+export function LoadAzureAISearchProvider() {
+    // eslint-disable-next-line @typescript-eslint/no-unused-vars
+    const _ref = AzureAISearchProvider;
+}
+//# sourceMappingURL=AzureAISearchProvider.js.map

package/dist/providers/AzureAISearchProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AzureAISearchProvider.js","sourceRoot":"","sources":["../../src/providers/AzureAISearchProvider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;;;;;;;AAEH,OAAO,EAAE,QAAQ,EAAY,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,kBAAkB,EAAwB,MAAM,4BAA4B,CAAC;AA2B/E,IAAM,qBAAqB,GAA3B,MAAM,qBAAsB,SAAQ,kBAAkB;IAAtD;;QACa,eAAU,GAAiB,UAAU,CAAC;QAE9C,iBAAY,GAA+B,IAAI,CAAC;QAChD,cAAS,GAAG,KAAK,CAAC;IA2I9B,CAAC;IAzImB,KAAK,CAAC,UAAU,CAAC,MAA4B,EAAE,WAAqB;QAChF,MAAM,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAC5C,IAAI,CAAC,YAAY,GAAI,MAAM,CAAC,cAA6C,IAAI,IAAI,CAAC;QAClF,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,IAAI,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,EAAE,CAAC;YAChG,QAAQ,CAAC,+FAA+F,CAAC,CAAC;YAC1G,OAAO;QACX,CAAC;IACL,CAAC;IAEe,KAAK,CAAC,iBAAiB,CAAC,YAAsB;QAC1D,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,EAAE,CAAC;YAAC,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;YAAC,OAAO;QAAC,CAAC;QACnE,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;QACxC,IAAI,CAAC,QAAQ,EAAE,CAAC;YAAC,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;YAAC,OAAO;QAAC,CAAC;QAClD,IAAI,CAAC;YACD,8EAA8E;YAC9E,8EAA8E;YAC9E,6EAA6E;YAC7E,gCAAgC;YAChC,MAAM,GAAG,GAAG,GAAG,QAAQ,iBAAiB,kBAAkB,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,IAAI,YAAY,CAAC,EAAE,CAAC;YAC3G,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YACvG,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC;YACxD,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;gBAClB,QAAQ,CAAC,yCAAyC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YACzE,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,QAAQ,CAAC,yCAAyC,GAAG,EAAE,CAAC,CAAC;YACzD,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QAC3B,CAAC;IACL,CAAC;IAEe,WAAW;QACvB,OAAO,IAAI,CAAC,SAAS,CAAC;IAC1B,CAAC;IAEM,KAAK,CAAC,MAAM,CACf,KAAa,EACb,IAAY,EACZ,QAAmC,EACnC,YAAsB,EACtB,gBAAmC;QAEnC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM;YAAE,OAAO,EAAE,CAAC;QAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;QACxC,IAAI,CAAC,QAAQ;YAAE,OAAO,EAAE,CAAC;QAEzB,MAAM,cAAc,GAAG,gBAAgB,EAAE,eAAe,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC;QACrF,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,CAAC,UAAU,IAAI,YAAY,CAAC;QAEhE,MAAM,eAAe,GAAG,gBAAgB,EAAE,eAAe;YACrD,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,eAAe,IAAI,CAAC,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAAC;QAChF,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,GAAG,CAAC;YACtC,CAAC,CAAC,eAAe;YACjB,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,YAAY;gBAC7B,CAAC,CAAC,CAAC;wBACC,SAAS,EAAE,eAAwB;wBACnC,iBAAiB,EAAE,IAAI,CAAC,YAAY,CAAC,YAAY;wBACjD,cAAc,EAAE,SAAoB;qBACvC,CAAC;gBACF,CAAC,CAAC,EAAE,CAAC,CAAC;QACd,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAEpC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACvC,MAAM,GAAG,GAAG,GAAG,QAAQ,YAAY,kBAAkB,CAAC,GAAG,CAAC,iBAA2B,CAAC,4BAA4B,kBAAkB,CAAC,UAAU,CAAC,EAAE,CAAC;YACnJ,MAAM,IAAI,GAA4B;gBAClC,MAAM,EAAE,cAAc;gBACtB,GAAG,EAAE,IAAI;aACZ,CAAC;YACF,IAAI,IAAI,CAAC,YAAY,EAAE,mBAAmB,EAAE,CAAC;gBACzC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,mBAAmB,CAAC;YAC9D,CAAC;YACD,IAAI,GAAG,CAAC,cAAc,IAAI,OAAO,GAAG,CAAC,cAAc,KAAK,QAAQ,EAAE,CAAC;gBAC/D,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,cAAc,CAAC;YACrC,CAAC;YACD,IAAI,CAAC;gBACD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;oBAC9B,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,YAAa,CAAC,MAAgB,EAAE,cAAc,EAAE,kBAAkB,EAAE;oBAC/F,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;iBAC7B,CAAC,CAAC;gBACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACf,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;oBACnD,QAAQ,CAAC,0BAA0B,GAAG,CAAC,iBAAiB,aAAa,QAAQ,CAAC,MAAM,KAAK,IAAI,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;oBACxH,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,iBAA2B,EAAE,IAAI,EAAE,EAAsB,EAAE,CAAC;gBACpF,CAAC;gBACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAyB,CAAC;gBAC1D,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,iBAA2B,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;YAC9E,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACX,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC7D,QAAQ,CAAC,0BAA0B,GAAG,CAAC,iBAAiB,mBAAmB,GAAG,EAAE,CAAC,CAAC;gBAClF,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,iBAA2B,EAAE,IAAI,EAAE,EAAsB,EAAE,CAAC;YACpF,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACnF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAEnC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAEzE,OAAO,MAAM;aACR,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;aAC/D,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC;aACd,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACP,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YACnE,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YAC7E,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC;YACvE,MAAM,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,GAAG,QAAQ,CAAC;YACrD,OAAO;gBACH,EAAE,EAAE,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,EAAE;gBAC1B,UAAU,EAAE,CAAC,CAAC,KAAK;gBACnB,QAAQ,EAAE,EAAE;gBACZ,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,UAAU,EAAE,eAAe;gBAC3B,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;gBAC1B,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;gBAC9B,KAAK,EAAE,UAAU;gBACjB,cAAc,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE;gBACxC,IAAI,EAAE,EAAE;gBACR,SAAS,EAAE,IAAI,IAAI,EAAE;gBACrB,UAAU,EAAE,mBAAmB;gBAC/B,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;gBAC/B,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC;aACzF,CAAC;QACN,CAAC,CAAC,CAAC;IACX,CAAC;IAED,wEAAwE;IAChE,eAAe;QACnB,IAAI,IAAI,CAAC,YAAY,EAAE,QAAQ,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,IAAI,CAAC,YAAY,EAAE,WAAW,EAAE,CAAC;YACjC,OAAO,WAAW,IAAI,CAAC,YAAY,CAAC,WAAW,qBAAqB,CAAC;QACzE,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;CACJ,CAAA;AA/IY,qBAAqB;IADjC,aAAa,CAAC,kBAAkB,EAAE,uBAAuB,CAAC;GAC9C,qBAAqB,CA+IjC;;AAED,oCAAoC;AACpC,MAAM,UAAU,yBAAyB;IACrC,6DAA6D;IAC7D,MAAM,IAAI,GAAG,qBAAqB,CAAC;AACvC,CAAC"}

package/dist/providers/ElasticsearchSearchProvider.d.ts

@@ -0,0 +1,43 @@
+/**
+ * @fileoverview Elasticsearch search provider for the SearchEngine (P5.1).
+ *
+ * Translates a query plus a SearchScope's `ExternalIndexes` constraint into an
+ * Elasticsearch search request. Each `MJ: Search Scope External Indexes` row
+ * with `IndexType='Elasticsearch'` and a non-empty `ExternalIndexName` becomes
+ * a target index in the request. The scope's rendered `MetadataFilter` (a JSON
+ * object the scope author authored as ES filter DSL) is composed into the
+ * top-level `bool.filter` so permission predicates and tenant-scoping push down
+ * to the engine — no post-fusion filtering.
+ *
+ * **Connection.** Reads from `SearchProviderConfig.ProviderConfig`:
+ *   - `node` — Elasticsearch node URL (e.g. `https://es.example.internal:9200`)
+ *   - `apiKey` — base64-encoded API key (preferred)
+ *   - `username` + `password` — basic auth fallback
+ *   - `cloudId` — Elastic Cloud deployment ID, when used in place of `node`
+ *   - `defaultField` — field to match against when the scope/provider doesn't
+ *     specify one (default: `content`)
+ *
+ * **Optional peer dep.** `@elastic/elasticsearch` is in `optionalDependencies`
+ * and loaded via dynamic import per CLAUDE.md rule #8 case 2 — consumers who
+ * don't use Elasticsearch don't pay the bundle cost.
+ *
+ * @module @memberjunction/search-engine
+ */
+import { UserInfo } from '@memberjunction/core';
+import { BaseSearchProvider, SearchProviderConfig } from '../generic/ISearchProvider.js';
+import { SearchSource, SearchFilters, SearchResultItem, ScopeConstraints } from '../generic/search.types.js';
+export declare class ElasticsearchSearchProvider extends BaseSearchProvider {
+    readonly SourceType: SearchSource;
+    private client;
+    private available;
+    private parsedConfig;
+    Initialize(config: SearchProviderConfig, contextUser: UserInfo): Promise<void>;
+    CheckAvailability(_contextUser: UserInfo): Promise<void>;
+    IsAvailable(): boolean;
+    Search(query: string, topK: number, _filters: SearchFilters | undefined, _contextUser: UserInfo, scopeConstraints?: ScopeConstraints): Promise<SearchResultItem[]>;
+}
+/** Tree-shake prevention helper. */
+export declare function LoadElasticsearchSearchProvider(): void;
+/** Test-only: clear the memoized SDK loader so each test installs its own mock. */
+export declare function __resetElasticsearchClientLoaderForTests(): void;
+//# sourceMappingURL=ElasticsearchSearchProvider.d.ts.map

package/dist/providers/ElasticsearchSearchProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ElasticsearchSearchProvider.d.ts","sourceRoot":"","sources":["../../src/providers/ElasticsearchSearchProvider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAuB,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAErE,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AACtF,OAAO,EACH,YAAY,EACZ,aAAa,EACb,gBAAgB,EAChB,gBAAgB,EACnB,MAAM,yBAAyB,CAAC;AA8DjC,qBACa,2BAA4B,SAAQ,kBAAkB;IAC/D,SAAgB,UAAU,EAAE,YAAY,CAAc;IAEtD,OAAO,CAAC,MAAM,CAAwC;IACtD,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,YAAY,CAA4C;IAE1C,UAAU,CAAC,MAAM,EAAE,oBAAoB,EAAE,WAAW,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IA6B9E,iBAAiB,CAAC,YAAY,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IAe9D,WAAW,IAAI,OAAO;IAIzB,MAAM,CACf,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,aAAa,GAAG,SAAS,EACnC,YAAY,EAAE,QAAQ,EACtB,gBAAgB,CAAC,EAAE,gBAAgB,GACpC,OAAO,CAAC,gBAAgB,EAAE,CAAC;CAiFjC;AAED,oCAAoC;AACpC,wBAAgB,+BAA+B,IAAI,IAAI,CAGtD;AAED,mFAAmF;AACnF,wBAAgB,wCAAwC,IAAI,IAAI,CAE/D"}