@memberjunction/server 5.38.0 → 5.40.0

package/dist/rest/SignatureWebhookHandler.js

@@ -0,0 +1,86 @@
+/**
+ * @fileoverview Inbound eSignature webhook handler (DocuSign Connect, Adobe events, …).
+ *
+ * Unauthenticated by design — external signature providers call this endpoint without an MJ bearer
+ * token. Payload authenticity is verified by the provider DRIVER's `ParseWebhookEvent` (HMAC /
+ * signature), not by MJ auth. Must be registered BEFORE the unified auth middleware.
+ *
+ * Endpoint:
+ *   - POST /esignature/webhook/:driverKey
+ *
+ * @module @memberjunction/server/rest/SignatureWebhookHandler
+ */
+import express from 'express';
+import BodyParser from 'body-parser';
+import { LogError, LogStatus } from '@memberjunction/core';
+import { UserCache } from '@memberjunction/sqlserver-dataprovider';
+import { SignatureEngine } from '@memberjunction/esignature/server';
+/**
+ * Build an Express router exposing the eSignature webhook. Mount it unauthenticated:
+ * `app.use('/esignature', createSignatureWebhookHandler())`.
+ */
+export function createSignatureWebhookHandler() {
+    const router = express.Router();
+    // Capture the raw body so drivers that HMAC-verify over the exact bytes can do so.
+    router.post('/webhook/:driverKey', BodyParser.json({ limit: '25mb', verify: captureRawBody }), async (req, res) => {
+        await handleWebhook(req, res);
+    });
+    return router;
+}
+/** Stash the raw request bytes on the request for signature verification by the driver. */
+function captureRawBody(req, _res, buf) {
+    req.rawBody = buf;
+}
+async function handleWebhook(req, res) {
+    const driverKey = req.params.driverKey;
+    if (!driverKey) {
+        res.status(400).json({ error: 'Missing driver key in path.' });
+        return;
+    }
+    const contextUser = getSystemUser();
+    if (!contextUser) {
+        LogError('[eSignature webhook] No system user available; cannot process webhook.');
+        res.status(503).json({ error: 'Server not ready to process webhooks.' });
+        return;
+    }
+    try {
+        await SignatureEngine.Instance.Config(false, contextUser);
+        const headers = normalizeHeaders(req.headers);
+        const rawBody = req.rawBody;
+        const result = await SignatureEngine.Instance.RecordWebhookEvent(driverKey, req.body, headers, contextUser, rawBody);
+        if (!result.Success) {
+            // 202: we received it but couldn't act (e.g. unrecognized payload / no matching envelope).
+            // Returning 2xx prevents most providers from aggressively retrying a payload we'll never match.
+            LogStatus(`[eSignature webhook] ${driverKey}: not actioned — ${result.ErrorMessage}`);
+            res.status(202).json({ received: true, actioned: false, message: result.ErrorMessage });
+            return;
+        }
+        res.status(200).json({ received: true, actioned: true, status: result.event?.status });
+    }
+    catch (e) {
+        LogError(`[eSignature webhook] ${driverKey}: ${e instanceof Error ? e.message : String(e)}`);
+        res.status(500).json({ error: 'Failed to process webhook.' });
+    }
+}
+/** Flatten Express header values to a simple string map for the driver. */
+function normalizeHeaders(headers) {
+    const out = {};
+    for (const [key, value] of Object.entries(headers)) {
+        if (typeof value === 'string') {
+            out[key] = value;
+        }
+        else if (Array.isArray(value)) {
+            out[key] = value.join(', ');
+        }
+    }
+    return out;
+}
+function getSystemUser() {
+    try {
+        return UserCache.Instance.GetSystemUser() ?? null;
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=SignatureWebhookHandler.js.map

package/dist/rest/SignatureWebhookHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SignatureWebhookHandler.js","sourceRoot":"","sources":["../../src/rest/SignatureWebhookHandler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,UAAU,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAY,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAAE,SAAS,EAAE,MAAM,wCAAwC,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AAEpE;;;GAGG;AACH,MAAM,UAAU,6BAA6B;IACzC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAEhC,mFAAmF;IACnF,MAAM,CAAC,IAAI,CACP,qBAAqB,EACrB,UAAU,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,EAC1D,KAAK,EAAE,GAAoB,EAAE,GAAqB,EAAE,EAAE;QAClD,MAAM,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAClC,CAAC,CACJ,CAAC;IAEF,OAAO,MAAM,CAAC;AAClB,CAAC;AAED,2FAA2F;AAC3F,SAAS,cAAc,CAAC,GAAoB,EAAE,IAAsB,EAAE,GAAW;IAC5E,GAAsB,CAAC,OAAO,GAAG,GAAG,CAAC;AAC1C,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,GAAoB,EAAE,GAAqB;IACpE,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC;IACvC,IAAI,CAAC,SAAS,EAAE,CAAC;QACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC,CAAC;QAC/D,OAAO;IACX,CAAC;IAED,MAAM,WAAW,GAAG,aAAa,EAAE,CAAC;IACpC,IAAI,CAAC,WAAW,EAAE,CAAC;QACf,QAAQ,CAAC,wEAAwE,CAAC,CAAC;QACnF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uCAAuC,EAAE,CAAC,CAAC;QACzE,OAAO;IACX,CAAC;IAED,IAAI,CAAC;QACD,MAAM,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QAC1D,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,OAAO,GAAI,GAAsB,CAAC,OAAO,CAAC;QAChD,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,QAAQ,CAAC,kBAAkB,CAAC,SAAS,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;QAErH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAClB,2FAA2F;YAC3F,gGAAgG;YAChG,SAAS,CAAC,wBAAwB,SAAS,oBAAoB,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;YACtF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;YACxF,OAAO;QACX,CAAC;QAED,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IAC3F,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACT,QAAQ,CAAC,wBAAwB,SAAS,KAAK,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC7F,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC,CAAC;IAClE,CAAC;AACL,CAAC;AAED,2EAA2E;AAC3E,SAAS,gBAAgB,CAAC,OAAmC;IACzD,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACjD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC5B,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACrB,CAAC;aAAM,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9B,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACf,CAAC;AAED,SAAS,aAAa;IAClB,IAAI,CAAC;QACD,OAAO,SAAS,CAAC,QAAQ,CAAC,aAAa,EAAE,IAAI,IAAI,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,IAAI,CAAC;IAChB,CAAC;AACL,CAAC"}

package/dist/services/ScheduledJobsService.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ScheduledJobsService.d.ts","sourceRoot":"","sources":["../../src/services/ScheduledJobsService.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAEnD;;;GAGG;AACH,qBAAa,oBAAoB;IAC7B,OAAO,CAAC,MAAM,CAAmB;IACjC,OAAO,CAAC,UAAU,CAAyB;IAC3C,OAAO,CAAC,SAAS,CAAkB;IACnC,OAAO,CAAC,MAAM,CAAsB;gBAExB,MAAM,EAAE,mBAAmB;IAKvC;;;OAGG;IACU,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAsBxC;;OAEG;IACU,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAwCnC;;OAEG;IACU,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAgBlC;;;OAGG;YACW,aAAa;IAgB3B;;OAEG;IACI,SAAS,IAAI;QAChB,OAAO,EAAE,OAAO,CAAC;QACjB,OAAO,EAAE,OAAO,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;QACnB,eAAe,EAAE,MAAM,CAAC;KAC3B;IASD;;OAEG;IACH,IAAW,SAAS,IAAI,OAAO,CAE9B;IAED;;OAEG;IACH,IAAW,SAAS,IAAI,OAAO,CAE9B;CACJ"}
+{"version":3,"file":"ScheduledJobsService.d.ts","sourceRoot":"","sources":["../../src/services/ScheduledJobsService.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAEnD;;;GAGG;AACH,qBAAa,oBAAoB;IAC7B,OAAO,CAAC,MAAM,CAAmB;IACjC,OAAO,CAAC,UAAU,CAAyB;IAC3C,OAAO,CAAC,SAAS,CAAkB;IACnC,OAAO,CAAC,MAAM,CAAsB;gBAExB,MAAM,EAAE,mBAAmB;IAKvC;;;OAGG;IACU,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAsBxC;;OAEG;IACU,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAmDnC;;OAEG;IACU,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAkBlC;;;OAGG;YACW,aAAa;IAgB3B;;OAEG;IACI,SAAS,IAAI;QAChB,OAAO,EAAE,OAAO,CAAC;QACjB,OAAO,EAAE,OAAO,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;QACnB,eAAe,EAAE,MAAM,CAAC;KAC3B;IASD;;OAEG;IACH,IAAW,SAAS,IAAI,OAAO,CAE9B;IAED;;OAEG;IACH,IAAW,SAAS,IAAI,OAAO,CAE9B;CACJ"}

package/dist/services/ScheduledJobsService.js

@@ -54,7 +54,17 @@ export class ScheduledJobsService {
             throw new Error('Service not initialized - call Initialize() first');
         }
         try {
-            this.engine.StartPolling(this.systemUser);
+            // Wire engine tunables from MJServer's scheduledJobs config block.
+            // Both fields have schema defaults (maxConcurrentJobs=5, defaultLockTimeout=600000ms),
+            // but apply explicitly so the values are visible in startup logs and
+            // a future config change is picked up without an engine code change.
+            if (this.config.maxConcurrentJobs != null) {
+                this.engine.MaxConcurrentJobs = this.config.maxConcurrentJobs;
+            }
+            if (this.config.defaultLockTimeout != null) {
+                this.engine.LeaseTimeoutMs = this.config.defaultLockTimeout;
+            }
+            await this.engine.StartPolling(this.systemUser);
             this.isRunning = true;
             // Single consolidated console message
             const jobCount = this.engine.ScheduledJobs.length;
@@ -89,7 +99,9 @@ export class ScheduledJobsService {
         }
         try {
             LogStatus('[ScheduledJobsService] Stopping scheduled job polling');
-            this.engine.StopPolling();
+            // Graceful shutdown: wait for in-flight dispatched jobs to settle,
+            // bounded by 30s so a zombie can't hang the shutdown indefinitely.
+            await this.engine.StopPolling({ waitForInflight: true, maxWaitMs: 30_000 });
             this.isRunning = false;
             LogStatus('[ScheduledJobsService] Polling stopped successfully');
         }

package/dist/services/ScheduledJobsService.js.map

@@ -1 +1 @@
-{"version":3,"file":"ScheduledJobsService.js","sourceRoot":"","sources":["../../src/services/ScheduledJobsService.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAY,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAAE,SAAS,EAAE,MAAM,wCAAwC,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AAGrE;;;GAGG;AACH,MAAM,OAAO,oBAAoB;IAM7B,YAAY,MAA2B;QAJ/B,eAAU,GAAoB,IAAI,CAAC;QACnC,cAAS,GAAY,KAAK,CAAC;QAI/B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,MAAM,GAAG,gBAAgB,CAAC,QAAQ,CAAC;IAC5C,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,UAAU;QACnB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACvB,SAAS,CAAC,qEAAqE,CAAC,CAAC;YACjF,OAAO;QACX,CAAC;QAED,IAAI,CAAC;YACD,oCAAoC;YACpC,IAAI,CAAC,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;YAE7C,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;gBACnB,MAAM,IAAI,KAAK,CAAC,qCAAqC,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC;YACxF,CAAC;YAED,0BAA0B;YAC1B,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QACrD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,QAAQ,CAAC,6CAA6C,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;YAC1E,MAAM,KAAK,CAAC;QAChB,CAAC;IACL,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,KAAK;QACd,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACvB,OAAO;QACX,CAAC;QAED,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACjB,SAAS,CAAC,wCAAwC,CAAC,CAAC;YACpD,OAAO;QACX,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACzE,CAAC;QAED,IAAI,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC1C,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;YAEtB,sCAAsC;YACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC;YAClD,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;gBACjB,OAAO,CAAC,GAAG,CAAC,4FAA4F,CAAC,CAAC;YAC9G,CAAC;iBAAM,CAAC;gBACJ,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC;gBACnD,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;oBACpB,MAAM,eAAe,GAAG,QAAQ,IAAI,KAAK;wBACrC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,KAAK,CAAC,YAAY;wBAC7C,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC;oBACjD,OAAO,CAAC,GAAG,CAAC,sBAAsB,QAAQ,iCAAiC,eAAe,EAAE,CAAC,CAAC;gBAClG,CAAC;qBAAM,CAAC;oBACJ,kEAAkE;oBAClE,OAAO,CAAC,GAAG,CAAC,sBAAsB,QAAQ,0CAA0C,CAAC,CAAC;gBAC1F,CAAC;YACL,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,QAAQ,CAAC,gDAAgD,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;YAC7E,MAAM,KAAK,CAAC;QAChB,CAAC;IACL,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,IAAI;QACb,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAClB,OAAO;QACX,CAAC;QAED,IAAI,CAAC;YACD,SAAS,CAAC,uDAAuD,CAAC,CAAC;YACnE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAC1B,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;YACvB,SAAS,CAAC,qDAAqD,CAAC,CAAC;QACrE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,QAAQ,CAAC,+CAA+C,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;YAC5E,MAAM,KAAK,CAAC;QAChB,CAAC;IACL,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,aAAa;QACvB,MAAM,eAAe,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC;QAEpD,mCAAmC;QACnC,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAClC,CAAC,CAAC,KAAK,EAAE,WAAW,EAAE,KAAK,eAAe,CAAC,WAAW,EAAE,CAC3D,CAAC;QAEF,IAAI,IAAI,EAAE,CAAC;YACP,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,QAAQ,CAAC,4DAA4D,eAAe,EAAE,CAAC,CAAC;QACxF,OAAO,IAAI,CAAC;IAChB,CAAC;IAED;;OAEG;IACI,SAAS;QAMZ,OAAO;YACH,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;YAC5B,OAAO,EAAE,IAAI,CAAC,SAAS;YACvB,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,IAAI,CAAC;YACnD,eAAe,EAAE,IAAI,CAAC,MAAM,EAAE,qBAAqB,IAAI,CAAC;SAC3D,CAAC;IACN,CAAC;IAED;;OAEG;IACH,IAAW,SAAS;QAChB,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,IAAW,SAAS;QAChB,OAAO,IAAI,CAAC,SAAS,CAAC;IAC1B,CAAC;CACJ"}
+{"version":3,"file":"ScheduledJobsService.js","sourceRoot":"","sources":["../../src/services/ScheduledJobsService.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAY,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAAE,SAAS,EAAE,MAAM,wCAAwC,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AAGrE;;;GAGG;AACH,MAAM,OAAO,oBAAoB;IAM7B,YAAY,MAA2B;QAJ/B,eAAU,GAAoB,IAAI,CAAC;QACnC,cAAS,GAAY,KAAK,CAAC;QAI/B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,MAAM,GAAG,gBAAgB,CAAC,QAAQ,CAAC;IAC5C,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,UAAU;QACnB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACvB,SAAS,CAAC,qEAAqE,CAAC,CAAC;YACjF,OAAO;QACX,CAAC;QAED,IAAI,CAAC;YACD,oCAAoC;YACpC,IAAI,CAAC,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;YAE7C,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;gBACnB,MAAM,IAAI,KAAK,CAAC,qCAAqC,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC;YACxF,CAAC;YAED,0BAA0B;YAC1B,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QACrD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,QAAQ,CAAC,6CAA6C,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;YAC1E,MAAM,KAAK,CAAC;QAChB,CAAC;IACL,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,KAAK;QACd,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACvB,OAAO;QACX,CAAC;QAED,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACjB,SAAS,CAAC,wCAAwC,CAAC,CAAC;YACpD,OAAO;QACX,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACzE,CAAC;QAED,IAAI,CAAC;YACD,mEAAmE;YACnE,uFAAuF;YACvF,qEAAqE;YACrE,qEAAqE;YACrE,IAAI,IAAI,CAAC,MAAM,CAAC,iBAAiB,IAAI,IAAI,EAAE,CAAC;gBACxC,IAAI,CAAC,MAAM,CAAC,iBAAiB,GAAG,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC;YAClE,CAAC;YACD,IAAI,IAAI,CAAC,MAAM,CAAC,kBAAkB,IAAI,IAAI,EAAE,CAAC;gBACzC,IAAI,CAAC,MAAM,CAAC,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC;YAChE,CAAC;YAED,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAChD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;YAEtB,sCAAsC;YACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC;YAClD,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;gBACjB,OAAO,CAAC,GAAG,CAAC,4FAA4F,CAAC,CAAC;YAC9G,CAAC;iBAAM,CAAC;gBACJ,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC;gBACnD,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;oBACpB,MAAM,eAAe,GAAG,QAAQ,IAAI,KAAK;wBACrC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,KAAK,CAAC,YAAY;wBAC7C,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC;oBACjD,OAAO,CAAC,GAAG,CAAC,sBAAsB,QAAQ,iCAAiC,eAAe,EAAE,CAAC,CAAC;gBAClG,CAAC;qBAAM,CAAC;oBACJ,kEAAkE;oBAClE,OAAO,CAAC,GAAG,CAAC,sBAAsB,QAAQ,0CAA0C,CAAC,CAAC;gBAC1F,CAAC;YACL,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,QAAQ,CAAC,gDAAgD,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;YAC7E,MAAM,KAAK,CAAC;QAChB,CAAC;IACL,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,IAAI;QACb,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAClB,OAAO;QACX,CAAC;QAED,IAAI,CAAC;YACD,SAAS,CAAC,uDAAuD,CAAC,CAAC;YACnE,mEAAmE;YACnE,mEAAmE;YACnE,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;YAC5E,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;YACvB,SAAS,CAAC,qDAAqD,CAAC,CAAC;QACrE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,QAAQ,CAAC,+CAA+C,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;YAC5E,MAAM,KAAK,CAAC;QAChB,CAAC;IACL,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,aAAa;QACvB,MAAM,eAAe,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC;QAEpD,mCAAmC;QACnC,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAClC,CAAC,CAAC,KAAK,EAAE,WAAW,EAAE,KAAK,eAAe,CAAC,WAAW,EAAE,CAC3D,CAAC;QAEF,IAAI,IAAI,EAAE,CAAC;YACP,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,QAAQ,CAAC,4DAA4D,eAAe,EAAE,CAAC,CAAC;QACxF,OAAO,IAAI,CAAC;IAChB,CAAC;IAED;;OAEG;IACI,SAAS;QAMZ,OAAO;YACH,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;YAC5B,OAAO,EAAE,IAAI,CAAC,SAAS;YACvB,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,IAAI,CAAC;YACnD,eAAe,EAAE,IAAI,CAAC,MAAM,EAAE,qBAAqB,IAAI,CAAC;SAC3D,CAAC;IACN,CAAC;IAED;;OAEG;IACH,IAAW,SAAS;QAChB,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,IAAW,SAAS;QAChB,OAAO,IAAI,CAAC,SAAS,CAAC;IAC1B,CAAC;CACJ"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@memberjunction/server",
-  "version": "5.38.0",
+  "version": "5.40.0",
   "description": "MemberJunction: This project provides API access via GraphQL to the common data store.",
   "main": "./dist/index.js",
   "types": "./src/index.ts",
@@ -27,75 +27,81 @@
     "@as-integrations/express5": "^1.0.0",
     "@graphql-tools/schema": "latest",
     "@graphql-tools/utils": "^11.0.0",
-    "@memberjunction/actions": "5.38.0",
-    "@memberjunction/actions-apollo": "5.38.0",
-    "@memberjunction/actions-base": "5.38.0",
-    "@memberjunction/actions-bizapps-accounting": "5.38.0",
-    "@memberjunction/actions-bizapps-crm": "5.38.0",
-    "@memberjunction/actions-bizapps-formbuilders": "5.38.0",
-    "@memberjunction/actions-bizapps-lms": "5.38.0",
-    "@memberjunction/actions-bizapps-social": "5.38.0",
-    "@memberjunction/ai": "5.38.0",
-    "@memberjunction/ai-agent-manager": "5.38.0",
-    "@memberjunction/ai-agent-manager-actions": "5.38.0",
-    "@memberjunction/ai-agents": "5.38.0",
-    "@memberjunction/ai-core-plus": "5.38.0",
-    "@memberjunction/ai-mcp-client": "5.38.0",
-    "@memberjunction/ai-prompts": "5.38.0",
-    "@memberjunction/ai-provider-bundle": "5.38.0",
-    "@memberjunction/ai-vector-sync": "5.38.0",
-    "@memberjunction/ai-vectordb": "5.38.0",
-    "@memberjunction/ai-vectors-pinecone": "5.38.0",
-    "@memberjunction/aiengine": "5.38.0",
-    "@memberjunction/api-keys": "5.38.0",
-    "@memberjunction/auth-providers": "5.38.0",
-    "@memberjunction/codegen-lib": "5.38.0",
-    "@memberjunction/communication-ms-graph": "5.38.0",
-    "@memberjunction/communication-sendgrid": "5.38.0",
-    "@memberjunction/communication-types": "5.38.0",
-    "@memberjunction/component-registry-client-sdk": "5.38.0",
-    "@memberjunction/computer-use-engine": "5.38.0",
-    "@memberjunction/config": "5.38.0",
-    "@memberjunction/core": "5.38.0",
-    "@memberjunction/core-actions": "5.38.0",
-    "@memberjunction/core-entities": "5.38.0",
-    "@memberjunction/core-entities-server": "5.38.0",
-    "@memberjunction/data-context": "5.38.0",
-    "@memberjunction/data-context-server": "5.38.0",
-    "@memberjunction/doc-utils": "5.38.0",
-    "@memberjunction/encryption": "5.38.0",
-    "@memberjunction/entity-communications-base": "5.38.0",
-    "@memberjunction/entity-communications-server": "5.38.0",
-    "@memberjunction/external-change-detection": "5.38.0",
-    "@memberjunction/generic-database-provider": "5.38.0",
-    "@memberjunction/global": "5.38.0",
-    "@memberjunction/graphql-dataprovider": "5.38.0",
-    "@memberjunction/integration-engine": "5.38.0",
-    "@memberjunction/integration-schema-builder": "5.38.0",
-    "@memberjunction/interactive-component-types": "5.38.0",
-    "@memberjunction/lists": "5.38.0",
-    "@memberjunction/lists-base": "5.38.0",
-    "@memberjunction/notifications": "5.38.0",
-    "@memberjunction/postgresql-dataprovider": "5.38.0",
-    "@memberjunction/queue": "5.38.0",
-    "@memberjunction/redis-provider": "5.38.0",
-    "@memberjunction/scheduling-actions": "5.38.0",
-    "@memberjunction/scheduling-base-types": "5.38.0",
-    "@memberjunction/scheduling-engine": "5.38.0",
-    "@memberjunction/scheduling-engine-base": "5.38.0",
-    "@memberjunction/schema-engine": "5.38.0",
-    "@memberjunction/search-engine": "5.38.0",
-    "@memberjunction/server-extensions-core": "5.38.0",
-    "@memberjunction/skip-types": "5.38.0",
-    "@memberjunction/sql-dialect": "5.38.0",
-    "@memberjunction/sqlserver-dataprovider": "5.38.0",
-    "@memberjunction/storage": "5.38.0",
-    "@memberjunction/tag-engine": "5.38.0",
-    "@memberjunction/tag-engine-base": "5.38.0",
-    "@memberjunction/templates": "5.38.0",
-    "@memberjunction/testing-engine": "5.38.0",
-    "@memberjunction/testing-engine-base": "5.38.0",
-    "@memberjunction/version-history": "5.38.0",
+    "@memberjunction/actions": "5.40.0",
+    "@memberjunction/actions-apollo": "5.40.0",
+    "@memberjunction/actions-base": "5.40.0",
+    "@memberjunction/actions-bizapps-accounting": "5.40.0",
+    "@memberjunction/actions-bizapps-crm": "5.40.0",
+    "@memberjunction/actions-bizapps-formbuilders": "5.40.0",
+    "@memberjunction/actions-bizapps-lms": "5.40.0",
+    "@memberjunction/actions-bizapps-social": "5.40.0",
+    "@memberjunction/ai": "5.40.0",
+    "@memberjunction/ai-agent-manager": "5.40.0",
+    "@memberjunction/ai-agent-manager-actions": "5.40.0",
+    "@memberjunction/ai-agents": "5.40.0",
+    "@memberjunction/ai-core-plus": "5.40.0",
+    "@memberjunction/ai-mcp-client": "5.40.0",
+    "@memberjunction/ai-prompts": "5.40.0",
+    "@memberjunction/ai-provider-bundle": "5.40.0",
+    "@memberjunction/ai-vector-sync": "5.40.0",
+    "@memberjunction/ai-vectordb": "5.40.0",
+    "@memberjunction/ai-vectors-pinecone": "5.40.0",
+    "@memberjunction/aiengine": "5.40.0",
+    "@memberjunction/clustering-engine": "5.40.0",
+    "@memberjunction/api-keys": "5.40.0",
+    "@memberjunction/auth-providers": "5.40.0",
+    "@memberjunction/codegen-lib": "5.40.0",
+    "@memberjunction/communication-engine": "5.40.0",
+    "@memberjunction/communication-ms-graph": "5.40.0",
+    "@memberjunction/communication-sendgrid": "5.40.0",
+    "@memberjunction/communication-types": "5.40.0",
+    "@memberjunction/component-registry-client-sdk": "5.40.0",
+    "@memberjunction/computer-use-engine": "5.40.0",
+    "@memberjunction/config": "5.40.0",
+    "@memberjunction/core": "5.40.0",
+    "@memberjunction/core-actions": "5.40.0",
+    "@memberjunction/core-entities": "5.40.0",
+    "@memberjunction/core-entities-server": "5.40.0",
+    "@memberjunction/data-context": "5.40.0",
+    "@memberjunction/esignature": "5.40.0",
+    "@memberjunction/data-context-server": "5.40.0",
+    "@memberjunction/doc-utils": "5.40.0",
+    "@memberjunction/encryption": "5.40.0",
+    "@memberjunction/entity-communications-base": "5.40.0",
+    "@memberjunction/entity-communications-server": "5.40.0",
+    "@memberjunction/external-change-detection": "5.40.0",
+    "@memberjunction/generic-database-provider": "5.40.0",
+    "@memberjunction/global": "5.40.0",
+    "@memberjunction/graphql-dataprovider": "5.40.0",
+    "@memberjunction/integration-engine": "5.40.0",
+    "@memberjunction/integration-progress-artifacts": "5.40.0",
+    "@memberjunction/integration-schema-builder": "5.40.0",
+    "@memberjunction/interactive-component-types": "5.40.0",
+    "@memberjunction/lists": "5.40.0",
+    "@memberjunction/lists-base": "5.40.0",
+    "@memberjunction/notifications": "5.40.0",
+    "@memberjunction/postgresql-dataprovider": "5.40.0",
+    "@memberjunction/queue": "5.40.0",
+    "@memberjunction/redis-provider": "5.40.0",
+    "@memberjunction/scheduling-actions": "5.40.0",
+    "@memberjunction/scheduling-base-types": "5.40.0",
+    "@memberjunction/scheduling-engine": "5.40.0",
+    "@memberjunction/scheduling-engine-base": "5.40.0",
+    "@memberjunction/schema-engine": "5.40.0",
+    "@memberjunction/search-engine": "5.40.0",
+    "@memberjunction/server-extensions-core": "5.40.0",
+    "@memberjunction/skip-types": "5.40.0",
+    "@memberjunction/sql-dialect": "5.40.0",
+    "@memberjunction/sqlserver-dataprovider": "5.40.0",
+    "@memberjunction/storage": "5.40.0",
+    "@memberjunction/tag-engine": "5.40.0",
+    "@memberjunction/tag-engine-base": "5.40.0",
+    "@memberjunction/templates": "5.40.0",
+    "@memberjunction/testing-engine": "5.40.0",
+    "@memberjunction/testing-engine-base": "5.40.0",
+    "@memberjunction/version-history": "5.40.0",
+    "@octokit/auth-app": "^7.1.5",
+    "@octokit/rest": "^21.1.1",
     "@types/compression": "^1.8.1",
     "@types/cors": "^2.8.19",
     "@types/jsonwebtoken": "9.0.10",
@@ -111,6 +117,7 @@
     "cosmiconfig": "9.0.0",
     "dotenv": "^17.2.4",
     "express": "^5.2.1",
+    "express-rate-limit": "^8.2.1",
     "fast-glob": "^3.3.3",
     "graphql": "^16.12.0",
     "graphql-scalars": "^1.25.0",
@@ -128,14 +135,12 @@
     "typedi": "^0.10.0",
     "uuid": "^13.0.0",
     "ws": "^8.19.0",
-    "@octokit/auth-app": "^7.1.5",
-    "@octokit/rest": "^21.1.1",
     "zod": "~3.24.4"
   },
   "devDependencies": {
     "pkgroll": "2.23.0",
-    "vitest": "^3.1.1",
-    "typescript": "^5.9.3"
+    "typescript": "^5.9.3",
+    "vitest": "^3.1.1"
   },
   "repository": {
     "type": "git",

package/src/__tests__/NoLog.test.ts

@@ -0,0 +1,76 @@
+import 'reflect-metadata';
+import { describe, it, expect } from 'vitest';
+import { NoLog, hasNoLogParameter, getNoLogFields } from '../logging/NoLog.js';
+
+describe('NoLog decorator', () => {
+  it('marks a resolver method parameter (3-arg call) and is readable via hasNoLogParameter', () => {
+    class MyResolver {
+      doThing(_safeArg: string, _secret: string): void {
+        // method body irrelevant; decorators applied below
+      }
+    }
+    NoLog(MyResolver.prototype, 'doThing', 1);
+
+    expect(hasNoLogParameter(MyResolver, 'doThing', 1)).toBe(true);
+    expect(hasNoLogParameter(MyResolver, 'doThing', 0)).toBe(false);
+    expect(hasNoLogParameter(MyResolver, 'unknownMethod', 0)).toBe(false);
+  });
+
+  it('marks a field on an input class (2-arg call) and is readable via getNoLogFields', () => {
+    class MyInput {
+      // eslint-disable-next-line @typescript-eslint/no-inferrable-types
+      Token: string = '';
+      Queries: string[] = [];
+    }
+    NoLog(MyInput.prototype, 'Token');
+
+    const fields = getNoLogFields(MyInput);
+    expect(fields.has('Token')).toBe(true);
+    expect(fields.has('Queries')).toBe(false);
+    expect(fields.size).toBe(1);
+  });
+
+  it('returns empty results when no @NoLog has been applied', () => {
+    class UndecoratedResolver {
+      doNothing(): void {
+        // nothing
+      }
+    }
+    class UndecoratedInput {
+      A: string = '';
+      B: string = '';
+    }
+
+    expect(hasNoLogParameter(UndecoratedResolver, 'doNothing', 0)).toBe(false);
+    expect(getNoLogFields(UndecoratedInput).size).toBe(0);
+  });
+
+  it('supports multiple parameter marks on the same method', () => {
+    class TwoSecrets {
+      handle(_a: string, _b: string, _c: string): void {
+        // marks below
+      }
+    }
+    NoLog(TwoSecrets.prototype, 'handle', 0);
+    NoLog(TwoSecrets.prototype, 'handle', 2);
+
+    expect(hasNoLogParameter(TwoSecrets, 'handle', 0)).toBe(true);
+    expect(hasNoLogParameter(TwoSecrets, 'handle', 1)).toBe(false);
+    expect(hasNoLogParameter(TwoSecrets, 'handle', 2)).toBe(true);
+  });
+
+  it('supports multiple field marks on the same input class', () => {
+    class TwoFieldSecrets {
+      A: string = '';
+      B: string = '';
+      C: string = '';
+    }
+    NoLog(TwoFieldSecrets.prototype, 'A');
+    NoLog(TwoFieldSecrets.prototype, 'C');
+
+    const fields = getNoLogFields(TwoFieldSecrets);
+    expect(fields.has('A')).toBe(true);
+    expect(fields.has('B')).toBe(false);
+    expect(fields.has('C')).toBe(true);
+  });
+});

package/src/__tests__/bootAudit.test.ts

@@ -0,0 +1,188 @@
+import 'reflect-metadata';
+import { describe, it, expect, vi, beforeEach, afterEach } from 'vitest';
+
+// Short-circuits config.ts's loadConfig() so this file loads in any environment, not just one
+// with DB env vars set. bootAudit.ts imports `configInfo` at module-init; without this mock,
+// `loadConfig()` runs and throws "Configuration validation failed" on a clean machine or in
+// sandboxed CI. The audit tests below call `auditResolverList` directly and don't read
+// `logVariables`, but the import chain still pulls in `configInfo`. Mirrors the same shim in
+// subscriptionRedaction.test.ts.
+vi.mock('../config', () => ({
+  configInfo: {
+    loggingSettings: { graphql: { logVariables: true } },
+  },
+}));
+vi.mock('../config.js', () => ({
+  configInfo: {
+    loggingSettings: { graphql: { logVariables: true } },
+  },
+}));
+
+import { auditResolverList } from '../logging/bootAudit.js';
+import type { AuditArgParam, AuditResolver } from '../logging/bootAudit.js';
+import { NoLog } from '../logging/NoLog.js';
+
+// --------------------------------------------------------------------------
+// Synthetic fixture types & helpers
+// --------------------------------------------------------------------------
+
+class CreateMJCredentialInput {}
+class CustomSecretInput {}
+
+function makeArgParam(opts: {
+  target: Function;
+  methodName: string;
+  index: number;
+  name: string;
+  type: Function;
+}): AuditArgParam {
+  return {
+    target: opts.target,
+    methodName: opts.methodName,
+    index: opts.index,
+    kind: 'arg',
+    name: opts.name,
+    getType: () => opts.type,
+  };
+}
+
+function makeResolver(opts: {
+  target: Function;
+  methodName: string;
+  params: AuditArgParam[];
+}): AuditResolver {
+  return {
+    target: opts.target,
+    methodName: opts.methodName,
+    params: opts.params,
+  };
+}
+
+// --------------------------------------------------------------------------
+// Tests
+// --------------------------------------------------------------------------
+
+describe('auditResolverList', () => {
+  let warnSpy: ReturnType<typeof vi.spyOn>;
+
+  beforeEach(() => {
+    warnSpy = vi.spyOn(console, 'warn').mockImplementation(() => {});
+  });
+
+  afterEach(() => {
+    warnSpy.mockRestore();
+  });
+
+  it('does NOT warn for an @Arg whose type matches Create<X>Input', () => {
+    class SafeCrudResolver {
+      doCreate(_input: CreateMJCredentialInput): void {
+        // body
+      }
+    }
+    const resolver = makeResolver({
+      target: SafeCrudResolver,
+      methodName: 'doCreate',
+      params: [
+        makeArgParam({
+          target: SafeCrudResolver,
+          methodName: 'doCreate',
+          index: 0,
+          name: 'input',
+          type: CreateMJCredentialInput,
+        }),
+      ],
+    });
+
+    auditResolverList([resolver]);
+    expect(warnSpy).not.toHaveBeenCalled();
+  });
+
+  it('WARNS for an @Arg of a custom type without @NoLog', () => {
+    class CustomNoMarkResolver {
+      doCustom(_input: CustomSecretInput): void {
+        // body
+      }
+    }
+    const resolver = makeResolver({
+      target: CustomNoMarkResolver,
+      methodName: 'doCustom',
+      params: [
+        makeArgParam({
+          target: CustomNoMarkResolver,
+          methodName: 'doCustom',
+          index: 0,
+          name: 'input',
+          type: CustomSecretInput,
+        }),
+      ],
+    });
+
+    auditResolverList([resolver]);
+    expect(warnSpy).toHaveBeenCalledTimes(1);
+    const message = warnSpy.mock.calls[0][0];
+    expect(typeof message).toBe('string');
+    expect(message).toContain('CustomNoMarkResolver.doCustom');
+    expect(message).toContain("'input'");
+    expect(message).toContain('CustomSecretInput');
+  });
+
+  it('does NOT warn for an @Arg of a custom type marked @NoLog at parameter level', () => {
+    class CustomMarkedResolver {
+      doCustom(_input: CustomSecretInput): void {
+        // body
+      }
+    }
+    NoLog(CustomMarkedResolver.prototype, 'doCustom', 0);
+
+    const resolver = makeResolver({
+      target: CustomMarkedResolver,
+      methodName: 'doCustom',
+      params: [
+        makeArgParam({
+          target: CustomMarkedResolver,
+          methodName: 'doCustom',
+          index: 0,
+          name: 'input',
+          type: CustomSecretInput,
+        }),
+      ],
+    });
+
+    auditResolverList([resolver]);
+    expect(warnSpy).not.toHaveBeenCalled();
+  });
+
+  it('mixed resolver: warns for the un-decorated custom arg but not the metadata-bound one', () => {
+    class MixedResolver {
+      doMixed(_safe: CreateMJCredentialInput, _custom: CustomSecretInput): void {
+        // body
+      }
+    }
+    const resolver = makeResolver({
+      target: MixedResolver,
+      methodName: 'doMixed',
+      params: [
+        makeArgParam({
+          target: MixedResolver,
+          methodName: 'doMixed',
+          index: 0,
+          name: 'safe',
+          type: CreateMJCredentialInput,
+        }),
+        makeArgParam({
+          target: MixedResolver,
+          methodName: 'doMixed',
+          index: 1,
+          name: 'custom',
+          type: CustomSecretInput,
+        }),
+      ],
+    });
+
+    auditResolverList([resolver]);
+    expect(warnSpy).toHaveBeenCalledTimes(1);
+    const message = warnSpy.mock.calls[0][0];
+    expect(message).toContain("'custom'");
+    expect(message).not.toContain("'safe'");
+  });
+});

package/src/__tests__/boundaryLogPayload.test.ts

@@ -0,0 +1,31 @@
+import { describe, it, expect } from 'vitest';
+import { buildBoundaryLogPayload } from '../logging/boundaryLogPayload.js';
+
+/**
+ * Guards the load-bearing #2638 fix: the always-on GraphQL boundary log line emits the
+ * operation name ONLY and never a `variables` key, in any configuration. A future refactor
+ * that re-adds variables to this line (the original leak) must fail here.
+ *
+ * See docs/adr/0001-graphql-variables-logging-tiered-by-verbose.md.
+ */
+describe('buildBoundaryLogPayload', () => {
+  it('returns operation name only', () => {
+    expect(buildBoundaryLogPayload('CreateMJCredential')).toEqual({ operationName: 'CreateMJCredential' });
+  });
+
+  it('never includes a `variables` key', () => {
+    const payload = buildBoundaryLogPayload('RunViewsWithCacheCheck');
+    expect('variables' in payload).toBe(false);
+  });
+
+  it('serialized form contains no value content — only the operation name', () => {
+    // Even if someone passes a secret-shaped operation name, nothing but the name is emitted.
+    const serialized = JSON.stringify(buildBoundaryLogPayload('SomeOp'));
+    expect(serialized).toBe('{"operationName":"SomeOp"}');
+  });
+
+  it('handles undefined operation name (non-named operations)', () => {
+    expect(buildBoundaryLogPayload(undefined)).toEqual({ operationName: undefined });
+    expect('variables' in buildBoundaryLogPayload(undefined)).toBe(false);
+  });
+});