@memberjunction/server 5.40.2 → 5.42.0

package/dist/resolvers/AgentSessionResolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AgentSessionResolver.d.ts","sourceRoot":"","sources":["../../src/resolvers/AgentSessionResolver.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAIzC,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAI1D,gEAAgE;AAChE,qBACa,uBAAuB;IAChC,uCAAuC;IAEvC,cAAc,EAAE,MAAM,CAAC;IAEvB,+EAA+E;IAE/E,MAAM,EAAE,MAAM,CAAC;IAEf,uFAAuF;IAEvF,cAAc,EAAE,MAAM,CAAC;CAC1B;AAED;;;;GAIG;AACH,qBACa,oBAAqB,SAAQ,YAAY;IAClD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAwB;IAEvD;;;OAGG;IAEG,iBAAiB,CACH,OAAO,EAAE,MAAM,EACxB,EAAE,WAAW,EAAE,SAAS,EAAE,EAAE,UAAU,EACF,cAAc,CAAC,EAAE,MAAM,EACxB,aAAa,CAAC,EAAE,MAAM,EACzB,UAAU,CAAC,EAAE,MAAM,GAC3D,OAAO,CAAC,uBAAuB,CAAC;IAkBnC;;;OAGG;IAEG,iBAAiB,CACI,cAAc,EAAE,MAAM,EACtC,EAAE,WAAW,EAAE,SAAS,EAAE,EAAE,UAAU,GAC9C,OAAO,CAAC,OAAO,CAAC;IAMnB;;;OAGG;IAEG,qBAAqB,CACA,cAAc,EAAE,MAAM,EACtC,EAAE,WAAW,EAAE,SAAS,EAAE,EAAE,UAAU,GAC9C,OAAO,CAAC,OAAO,CAAC;IAQnB,iGAAiG;IACjG,OAAO,CAAC,sBAAsB;IAW9B;;;OAGG;YACW,eAAe;CAehC"}

package/dist/resolvers/AgentSessionResolver.js

@@ -0,0 +1,152 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+/**
+ * @fileoverview GraphQL resolver for the AI Agent Session record lifecycle.
+ *
+ * Exposes start / close / heartbeat mutations over {@link SessionManager}, each running under the
+ * request's `contextUser` + request-scoped `IMetadataProvider`. Enforces two authorization gates:
+ * - **Open**: `CanRun` on the target agent (delegated to {@link SessionManager.CreateSession}).
+ * - **Close / Heartbeat**: inbound ownership — the session's `UserID` must equal `contextUser.ID`.
+ *
+ * The audio/media transport and the long-lived realtime run are out of scope here (P5); this
+ * resolver only manipulates the durable session record.
+ *
+ * @module @memberjunction/server
+ */
+import { Resolver, Mutation, Arg, Ctx, ObjectType, Field } from 'type-graphql';
+import { LogError } from '@memberjunction/core';
+import { UUIDsEqual } from '@memberjunction/global';
+import { ResolverBase } from '../generic/ResolverBase.js';
+import { GetReadWriteProvider } from '../util.js';
+import { SessionManager, SessionAuthorizationError } from '../agentSessions/index.js';
+/** Result of {@link AgentSessionResolver.StartAgentSession}. */
+let StartAgentSessionResult = class StartAgentSessionResult {
+};
+__decorate([
+    Field(),
+    __metadata("design:type", String)
+], StartAgentSessionResult.prototype, "agentSessionId", void 0);
+__decorate([
+    Field(),
+    __metadata("design:type", String)
+], StartAgentSessionResult.prototype, "status", void 0);
+__decorate([
+    Field(),
+    __metadata("design:type", String)
+], StartAgentSessionResult.prototype, "conversationId", void 0);
+StartAgentSessionResult = __decorate([
+    ObjectType()
+], StartAgentSessionResult);
+export { StartAgentSessionResult };
+/**
+ * Resolver for the AI Agent Session record lifecycle. A single {@link SessionManager} instance is
+ * shared across requests — it holds no per-user/provider state (only heartbeat-coalescing
+ * timestamps), and every method is passed the request `contextUser` + provider explicitly.
+ */
+let AgentSessionResolver = class AgentSessionResolver extends ResolverBase {
+    constructor() {
+        super(...arguments);
+        this.sessionManager = new SessionManager();
+    }
+    /**
+     * Open a new session for an agent. Authorization (`CanRun`) is enforced inside
+     * {@link SessionManager.CreateSession}; a denial surfaces as a thrown error and no row is written.
+     */
+    async StartAgentSession(agentId, { userPayload, providers }, conversationId, lastSessionId, configJson) {
+        const { contextUser, provider } = this.requireUserAndProvider(userPayload, providers);
+        try {
+            const session = await this.sessionManager.CreateSession({ agentID: agentId, userID: contextUser.ID, conversationID: conversationId, lastSessionID: lastSessionId, config: configJson }, contextUser, provider);
+            return { agentSessionId: session.ID, status: session.Status, conversationId: session.ConversationID ?? '' };
+        }
+        catch (err) {
+            if (err instanceof SessionAuthorizationError) {
+                throw new Error(err.message); // authorization denial — no session created
+            }
+            throw err;
+        }
+    }
+    /**
+     * Close a session. Rejects unless the caller owns it. Returns `true` on a successful (or
+     * idempotent) close, `false` if the session can't be loaded.
+     */
+    async CloseAgentSession(agentSessionId, { userPayload, providers }) {
+        const { contextUser, provider } = this.requireUserAndProvider(userPayload, providers);
+        await this.assertOwnership(agentSessionId, contextUser, provider);
+        return this.sessionManager.CloseSession(agentSessionId, contextUser, provider);
+    }
+    /**
+     * Record activity on a session (coalesced). Rejects unless the caller owns it. Returns `true`
+     * when the heartbeat was accepted (written or coalesced), `false` if the session is gone/closed.
+     */
+    async AgentSessionHeartbeat(agentSessionId, { userPayload, providers }) {
+        const { contextUser, provider } = this.requireUserAndProvider(userPayload, providers);
+        await this.assertOwnership(agentSessionId, contextUser, provider);
+        return this.sessionManager.Heartbeat(agentSessionId, contextUser, provider);
+    }
+    // ----- internals -------------------------------------------------------------------------
+    /** Resolve the request user + read-write provider, throwing a clear error if unauthenticated. */
+    requireUserAndProvider(userPayload, providers) {
+        const contextUser = this.GetUserFromPayload(userPayload);
+        if (!contextUser) {
+            throw new Error('Not authenticated: no user context for agent session operation');
+        }
+        return { contextUser, provider: GetReadWriteProvider(providers) };
+    }
+    /**
+     * Inbound ownership gate (the one genuinely new session-authz primitive): the session's `UserID`
+     * must equal the caller's. Throws on mismatch or when the session can't be loaded.
+     */
+    async assertOwnership(agentSessionId, contextUser, provider) {
+        const session = await provider.GetEntityObject('MJ: AI Agent Sessions', contextUser);
+        const loaded = await session.Load(agentSessionId);
+        if (!loaded) {
+            throw new Error(`Agent session ${agentSessionId} not found`);
+        }
+        if (!UUIDsEqual(session.UserID, contextUser.ID)) {
+            LogError(`AgentSessionResolver: ownership check failed — user ${contextUser.ID} attempted to operate on session ${agentSessionId} owned by ${session.UserID}`);
+            throw new Error('Not authorized: you do not own this agent session');
+        }
+    }
+};
+__decorate([
+    Mutation(() => StartAgentSessionResult),
+    __param(0, Arg('agentId')),
+    __param(1, Ctx()),
+    __param(2, Arg('conversationId', { nullable: true })),
+    __param(3, Arg('lastSessionId', { nullable: true })),
+    __param(4, Arg('configJson', { nullable: true })),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object, String, String, String]),
+    __metadata("design:returntype", Promise)
+], AgentSessionResolver.prototype, "StartAgentSession", null);
+__decorate([
+    Mutation(() => Boolean),
+    __param(0, Arg('agentSessionId')),
+    __param(1, Ctx()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object]),
+    __metadata("design:returntype", Promise)
+], AgentSessionResolver.prototype, "CloseAgentSession", null);
+__decorate([
+    Mutation(() => Boolean),
+    __param(0, Arg('agentSessionId')),
+    __param(1, Ctx()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object]),
+    __metadata("design:returntype", Promise)
+], AgentSessionResolver.prototype, "AgentSessionHeartbeat", null);
+AgentSessionResolver = __decorate([
+    Resolver()
+], AgentSessionResolver);
+export { AgentSessionResolver };
+//# sourceMappingURL=AgentSessionResolver.js.map

package/dist/resolvers/AgentSessionResolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AgentSessionResolver.js","sourceRoot":"","sources":["../../src/resolvers/AgentSessionResolver.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AAE/E,OAAO,EAA+B,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAC7E,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAEpD,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAEtF,gEAAgE;AAEzD,IAAM,uBAAuB,GAA7B,MAAM,uBAAuB;CAYnC,CAAA;AATG;IADC,KAAK,EAAE;;+DACe;AAIvB;IADC,KAAK,EAAE;;uDACO;AAIf;IADC,KAAK,EAAE;;+DACe;AAXd,uBAAuB;IADnC,UAAU,EAAE;GACA,uBAAuB,CAYnC;;AAED;;;;GAIG;AAEI,IAAM,oBAAoB,GAA1B,MAAM,oBAAqB,SAAQ,YAAY;IAA/C;;QACc,mBAAc,GAAG,IAAI,cAAc,EAAE,CAAC;IA4F3D,CAAC;IA1FG;;;OAGG;IAEG,AAAN,KAAK,CAAC,iBAAiB,CACH,OAAe,EACxB,EAAE,WAAW,EAAE,SAAS,EAAc,EACF,cAAuB,EACxB,aAAsB,EACzB,UAAmB;QAE1D,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,sBAAsB,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QAEtF,IAAI,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,CACnD,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,EAAE,cAAc,EAAE,cAAc,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,EAAE,UAAU,EAAE,EAC9H,WAAW,EACX,QAAQ,CACX,CAAC;YACF,OAAO,EAAE,cAAc,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,IAAI,EAAE,EAAE,CAAC;QAChH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,IAAI,GAAG,YAAY,yBAAyB,EAAE,CAAC;gBAC3C,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,4CAA4C;YAC9E,CAAC;YACD,MAAM,GAAG,CAAC;QACd,CAAC;IACL,CAAC;IAED;;;OAGG;IAEG,AAAN,KAAK,CAAC,iBAAiB,CACI,cAAsB,EACtC,EAAE,WAAW,EAAE,SAAS,EAAc;QAE7C,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,sBAAsB,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QACtF,MAAM,IAAI,CAAC,eAAe,CAAC,cAAc,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;QAClE,OAAO,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC,cAAc,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;IACnF,CAAC;IAED;;;OAGG;IAEG,AAAN,KAAK,CAAC,qBAAqB,CACA,cAAsB,EACtC,EAAE,WAAW,EAAE,SAAS,EAAc;QAE7C,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,sBAAsB,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QACtF,MAAM,IAAI,CAAC,eAAe,CAAC,cAAc,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;QAClE,OAAO,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,cAAc,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;IAChF,CAAC;IAED,4FAA4F;IAE5F,iGAAiG;IACzF,sBAAsB,CAC1B,WAAsC,EACtC,SAAkC;QAElC,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB,CAAC,WAAW,CAAC,CAAC;QACzD,IAAI,CAAC,WAAW,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;QACtF,CAAC;QACD,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,oBAAoB,CAAC,SAAS,CAAC,EAAE,CAAC;IACtE,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,eAAe,CACzB,cAAsB,EACtB,WAAqB,EACrB,QAA2B;QAE3B,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,eAAe,CAAyB,uBAAuB,EAAE,WAAW,CAAC,CAAC;QAC7G,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAClD,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CAAC,iBAAiB,cAAc,YAAY,CAAC,CAAC;QACjE,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,CAAC,EAAE,CAAC;YAC9C,QAAQ,CAAC,uDAAuD,WAAW,CAAC,EAAE,oCAAoC,cAAc,aAAa,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;YAC/J,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACzE,CAAC;IACL,CAAC;CACJ,CAAA;AArFS;IADL,QAAQ,CAAC,GAAG,EAAE,CAAC,uBAAuB,CAAC;IAEnC,WAAA,GAAG,CAAC,SAAS,CAAC,CAAA;IACd,WAAA,GAAG,EAAE,CAAA;IACL,WAAA,GAAG,CAAC,gBAAgB,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAA;IACzC,WAAA,GAAG,CAAC,eAAe,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAA;IACxC,WAAA,GAAG,CAAC,YAAY,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAA;;;;6DAiBzC;AAOK;IADL,QAAQ,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC;IAEnB,WAAA,GAAG,CAAC,gBAAgB,CAAC,CAAA;IACrB,WAAA,GAAG,EAAE,CAAA;;;;6DAKT;AAOK;IADL,QAAQ,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC;IAEnB,WAAA,GAAG,CAAC,gBAAgB,CAAC,CAAA;IACrB,WAAA,GAAG,EAAE,CAAA;;;;iEAKT;AA1DQ,oBAAoB;IADhC,QAAQ,EAAE;GACE,oBAAoB,CA6FhC"}

package/dist/resolvers/EntityPermissionResolver.d.ts

@@ -0,0 +1,16 @@
+import { AppContext } from '../types.js';
+import { ResolverBase } from '../generic/ResolverBase.js';
+declare class EntityPermissionResult {
+    EntityName: string;
+    CanRead: boolean;
+}
+declare class CheckEntityPermissionsResult {
+    Success: boolean;
+    Results: EntityPermissionResult[];
+    ErrorMessage?: string;
+}
+export declare class EntityPermissionResolver extends ResolverBase {
+    CheckEntityPermissionsSystemUser(entityNames: string[], userEmail: string, context: AppContext): Promise<CheckEntityPermissionsResult>;
+}
+export {};
+//# sourceMappingURL=EntityPermissionResolver.d.ts.map

package/dist/resolvers/EntityPermissionResolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"EntityPermissionResolver.d.ts","sourceRoot":"","sources":["../../src/resolvers/EntityPermissionResolver.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAK1D,cACM,sBAAsB;IAEhB,UAAU,EAAE,MAAM,CAAC;IAGnB,OAAO,EAAE,OAAO,CAAC;CAC5B;AAED,cACM,4BAA4B;IAEtB,OAAO,EAAE,OAAO,CAAC;IAGjB,OAAO,EAAE,sBAAsB,EAAE,CAAC;IAG1C,YAAY,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,qBACa,wBAAyB,SAAQ,YAAY;IAIhD,gCAAgC,CACE,WAAW,EAAE,MAAM,EAAE,EACzB,SAAS,EAAE,MAAM,EAC1C,OAAO,EAAE,UAAU,GAC3B,OAAO,CAAC,4BAA4B,CAAC;CAkC3C"}

package/dist/resolvers/EntityPermissionResolver.js

@@ -0,0 +1,95 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+import { Arg, Ctx, Field, ObjectType, Query, Resolver } from 'type-graphql';
+import { LogError } from '@memberjunction/core';
+import { ResolverBase } from '../generic/ResolverBase.js';
+import { RequireSystemUser } from '../directives/RequireSystemUser.js';
+import { GetReadOnlyProvider } from '../util.js';
+import { UserCache } from '@memberjunction/sqlserver-dataprovider';
+let EntityPermissionResult = class EntityPermissionResult {
+};
+__decorate([
+    Field(() => String),
+    __metadata("design:type", String)
+], EntityPermissionResult.prototype, "EntityName", void 0);
+__decorate([
+    Field(() => Boolean),
+    __metadata("design:type", Boolean)
+], EntityPermissionResult.prototype, "CanRead", void 0);
+EntityPermissionResult = __decorate([
+    ObjectType()
+], EntityPermissionResult);
+let CheckEntityPermissionsResult = class CheckEntityPermissionsResult {
+};
+__decorate([
+    Field(() => Boolean),
+    __metadata("design:type", Boolean)
+], CheckEntityPermissionsResult.prototype, "Success", void 0);
+__decorate([
+    Field(() => [EntityPermissionResult]),
+    __metadata("design:type", Array)
+], CheckEntityPermissionsResult.prototype, "Results", void 0);
+__decorate([
+    Field(() => String, { nullable: true }),
+    __metadata("design:type", String)
+], CheckEntityPermissionsResult.prototype, "ErrorMessage", void 0);
+CheckEntityPermissionsResult = __decorate([
+    ObjectType()
+], CheckEntityPermissionsResult);
+let EntityPermissionResolver = class EntityPermissionResolver extends ResolverBase {
+    async CheckEntityPermissionsSystemUser(entityNames, userEmail, context) {
+        try {
+            const user = UserCache.Instance.Users.find(u => u.Email.toLowerCase().trim() === userEmail.toLowerCase().trim());
+            if (!user) {
+                return { Success: false, Results: [], ErrorMessage: `User not found: ${userEmail}` };
+            }
+            // Use the per-request provider (not the global default) so entity metadata + permission
+            // evaluation resolve against the connection servicing THIS request.
+            const md = GetReadOnlyProvider(context.providers, { allowFallbackToReadWrite: true });
+            const results = [];
+            for (const name of entityNames) {
+                const entityInfo = md.EntityByName(name);
+                if (!entityInfo) {
+                    results.push({ EntityName: name, CanRead: false });
+                    continue;
+                }
+                const perms = entityInfo.GetUserPermisions(user);
+                results.push({ EntityName: name, CanRead: perms?.CanRead ?? false });
+            }
+            return { Success: true, Results: results };
+        }
+        catch (err) {
+            LogError(err);
+            return {
+                Success: false,
+                Results: [],
+                ErrorMessage: `EntityPermissionResolver::CheckEntityPermissionsSystemUser --- ${err instanceof Error ? err.message : String(err)}`
+            };
+        }
+    }
+};
+__decorate([
+    RequireSystemUser(),
+    Query(() => CheckEntityPermissionsResult),
+    __param(0, Arg('EntityNames', () => [String])),
+    __param(1, Arg('UserEmail', () => String)),
+    __param(2, Ctx()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Array, String, Object]),
+    __metadata("design:returntype", Promise)
+], EntityPermissionResolver.prototype, "CheckEntityPermissionsSystemUser", null);
+EntityPermissionResolver = __decorate([
+    Resolver()
+], EntityPermissionResolver);
+export { EntityPermissionResolver };
+//# sourceMappingURL=EntityPermissionResolver.js.map

package/dist/resolvers/EntityPermissionResolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"EntityPermissionResolver.js","sourceRoot":"","sources":["../../src/resolvers/EntityPermissionResolver.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAC5E,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAEhD,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,wCAAwC,CAAC;AAGnE,IAAM,sBAAsB,GAA5B,MAAM,sBAAsB;CAM3B,CAAA;AAJW;IADP,KAAK,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC;;0DACO;AAGnB;IADP,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC;;uDACI;AALvB,sBAAsB;IAD3B,UAAU,EAAE;GACP,sBAAsB,CAM3B;AAGD,IAAM,4BAA4B,GAAlC,MAAM,4BAA4B;CASjC,CAAA;AAPW;IADP,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC;;6DACI;AAGjB;IADP,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,sBAAsB,CAAC,CAAC;;6DACI;AAG1C;IADC,KAAK,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;kEAClB;AARpB,4BAA4B;IADjC,UAAU,EAAE;GACP,4BAA4B,CASjC;AAGM,IAAM,wBAAwB,GAA9B,MAAM,wBAAyB,SAAQ,YAAY;IAIhD,AAAN,KAAK,CAAC,gCAAgC,CACE,WAAqB,EACzB,SAAiB,EAC1C,OAAmB;QAE1B,IAAI,CAAC;YACD,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CACtC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,KAAK,SAAS,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CACvE,CAAC;YACF,IAAI,CAAC,IAAI,EAAE,CAAC;gBACR,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,YAAY,EAAE,mBAAmB,SAAS,EAAE,EAAE,CAAC;YACzF,CAAC;YAED,wFAAwF;YACxF,oEAAoE;YACpE,MAAM,EAAE,GAAG,mBAAmB,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,wBAAwB,EAAE,IAAI,EAAE,CAAC,CAAC;YACtF,MAAM,OAAO,GAA6B,EAAE,CAAC;YAE7C,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;gBAC7B,MAAM,UAAU,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;gBACzC,IAAI,CAAC,UAAU,EAAE,CAAC;oBACd,OAAO,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;oBACnD,SAAS;gBACb,CAAC;gBACD,MAAM,KAAK,GAAG,UAAU,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;gBACjD,OAAO,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,IAAI,KAAK,EAAE,CAAC,CAAC;YACzE,CAAC;YAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;QAC/C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,QAAQ,CAAC,GAAG,CAAC,CAAC;YACd,OAAO;gBACH,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,EAAE;gBACX,YAAY,EAAE,kEAAkE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;aACrI,CAAC;QACN,CAAC;IACL,CAAC;CACJ,CAAA;AAtCS;IAFL,iBAAiB,EAAE;IACnB,KAAK,CAAC,GAAG,EAAE,CAAC,4BAA4B,CAAC;IAErC,WAAA,GAAG,CAAC,aAAa,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAA;IAClC,WAAA,GAAG,CAAC,WAAW,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,CAAA;IAC9B,WAAA,GAAG,EAAE,CAAA;;;;gFAkCT;AAzCQ,wBAAwB;IADpC,QAAQ,EAAE;GACE,wBAAwB,CA0CpC"}

package/dist/resolvers/ExecuteRemoteOperationResolver.d.ts

@@ -0,0 +1,27 @@
+import { ResolverBase } from '../generic/ResolverBase.js';
+import { AppContext } from '../types.js';
+/** Input for the generic Remote Operation transport mutation. */
+export declare class ExecuteRemoteOperationInput {
+    operationKey: string;
+    inputJSON: string;
+    invokeMode: string;
+}
+/** Result of the generic Remote Operation transport mutation. */
+export declare class ExecuteRemoteOperationResultType {
+    success: boolean;
+    resultCode?: string;
+    outputJSON?: string;
+    handle?: string;
+    errorMessage?: string;
+}
+/**
+ * The single generic server entry point for Remote Operations. Resolves the operation by key,
+ * applies the framework authorization gates (API-key scope, system-user, then the operation's own
+ * `Authorize`), and routes the operation through the per-request provider — which executes it
+ * in-process. Only registered, active operations are reachable, so the public `RouteOperation`
+ * power-tool is safe by construction.
+ */
+export declare class ExecuteRemoteOperationResolver extends ResolverBase {
+    ExecuteRemoteOperation(input: ExecuteRemoteOperationInput, ctx: AppContext): Promise<ExecuteRemoteOperationResultType>;
+}
+//# sourceMappingURL=ExecuteRemoteOperationResolver.d.ts.map

package/dist/resolvers/ExecuteRemoteOperationResolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ExecuteRemoteOperationResolver.d.ts","sourceRoot":"","sources":["../../src/resolvers/ExecuteRemoteOperationResolver.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,iEAAiE;AACjE,qBACa,2BAA2B;IAEpC,YAAY,EAAE,MAAM,CAAC;IAGrB,SAAS,EAAE,MAAM,CAAC;IAGlB,UAAU,EAAE,MAAM,CAAC;CACtB;AAED,iEAAiE;AACjE,qBACa,gCAAgC;IAEzC,OAAO,EAAE,OAAO,CAAC;IAGjB,UAAU,CAAC,EAAE,MAAM,CAAC;IAGpB,UAAU,CAAC,EAAE,MAAM,CAAC;IAGpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAGhB,YAAY,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;GAMG;AACH,qBACa,8BAA+B,SAAQ,YAAY;IAEtD,sBAAsB,CACV,KAAK,EAAE,2BAA2B,EACzC,GAAG,EAAE,UAAU,GACvB,OAAO,CAAC,gCAAgC,CAAC;CAkD/C"}

package/dist/resolvers/ExecuteRemoteOperationResolver.js

@@ -0,0 +1,136 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+import { Arg, Ctx, Field, InputType, Mutation, ObjectType, Resolver } from 'type-graphql';
+import { MJGlobal } from '@memberjunction/global';
+import { BaseRemotableOperation } from '@memberjunction/core';
+import { ResolverBase } from '../generic/ResolverBase.js';
+import { GetReadWriteProvider } from '../util.js';
+/** Input for the generic Remote Operation transport mutation. */
+let ExecuteRemoteOperationInput = class ExecuteRemoteOperationInput {
+};
+__decorate([
+    Field(),
+    __metadata("design:type", String)
+], ExecuteRemoteOperationInput.prototype, "operationKey", void 0);
+__decorate([
+    Field(),
+    __metadata("design:type", String)
+], ExecuteRemoteOperationInput.prototype, "inputJSON", void 0);
+__decorate([
+    Field(),
+    __metadata("design:type", String)
+], ExecuteRemoteOperationInput.prototype, "invokeMode", void 0);
+ExecuteRemoteOperationInput = __decorate([
+    InputType()
+], ExecuteRemoteOperationInput);
+export { ExecuteRemoteOperationInput };
+/** Result of the generic Remote Operation transport mutation. */
+let ExecuteRemoteOperationResultType = class ExecuteRemoteOperationResultType {
+};
+__decorate([
+    Field(() => Boolean),
+    __metadata("design:type", Boolean)
+], ExecuteRemoteOperationResultType.prototype, "success", void 0);
+__decorate([
+    Field(() => String, { nullable: true }),
+    __metadata("design:type", String)
+], ExecuteRemoteOperationResultType.prototype, "resultCode", void 0);
+__decorate([
+    Field(() => String, { nullable: true }),
+    __metadata("design:type", String)
+], ExecuteRemoteOperationResultType.prototype, "outputJSON", void 0);
+__decorate([
+    Field(() => String, { nullable: true }),
+    __metadata("design:type", String)
+], ExecuteRemoteOperationResultType.prototype, "handle", void 0);
+__decorate([
+    Field(() => String, { nullable: true }),
+    __metadata("design:type", String)
+], ExecuteRemoteOperationResultType.prototype, "errorMessage", void 0);
+ExecuteRemoteOperationResultType = __decorate([
+    ObjectType()
+], ExecuteRemoteOperationResultType);
+export { ExecuteRemoteOperationResultType };
+/**
+ * The single generic server entry point for Remote Operations. Resolves the operation by key,
+ * applies the framework authorization gates (API-key scope, system-user, then the operation's own
+ * `Authorize`), and routes the operation through the per-request provider — which executes it
+ * in-process. Only registered, active operations are reachable, so the public `RouteOperation`
+ * power-tool is safe by construction.
+ */
+let ExecuteRemoteOperationResolver = class ExecuteRemoteOperationResolver extends ResolverBase {
+    async ExecuteRemoteOperation(input, ctx) {
+        try {
+            const key = input.operationKey?.trim();
+            if (!key) {
+                return fail('INVALID_OPERATION_KEY', 'operationKey is required');
+            }
+            // Resolve the operation's declaration so we can apply its scope / system-user gates.
+            const registration = MJGlobal.Instance.ClassFactory.GetRegistration(BaseRemotableOperation, key);
+            if (!registration) {
+                return fail('UNKNOWN_OPERATION', `Remote operation '${key}' is not registered`);
+            }
+            const opDecl = MJGlobal.Instance.ClassFactory.CreateInstance(BaseRemotableOperation, key);
+            // (1) API-key scope gate — a no-op for interactive OAuth/JWT users.
+            if (opDecl?.RequiredScope) {
+                await this.CheckAPIKeyScopeAuthorization(opDecl.RequiredScope, key, ctx.userPayload);
+            }
+            // (2) System-user gate.
+            if (opDecl?.RequiresSystemUser && !ctx.userPayload.isSystemUser) {
+                return fail('FORBIDDEN', `Operation '${key}' may only be invoked by the system user`);
+            }
+            // (3) Resolve the acting user (works for OAuth/JWT and API-key sessions alike).
+            const user = this.GetUserFromPayload(ctx.userPayload);
+            if (!user) {
+                return fail('NO_USER', 'Not authenticated');
+            }
+            let parsedInput;
+            try {
+                parsedInput = input.inputJSON ? JSON.parse(input.inputJSON) : {};
+            }
+            catch (e) {
+                return fail('INVALID_INPUT_JSON', `Invalid input JSON: ${e instanceof Error ? e.message : String(e)}`);
+            }
+            // Route through the per-request provider (server in-process path; runs the op's Authorize + InternalExecute).
+            const provider = GetReadWriteProvider(ctx.providers);
+            const result = await provider.RouteOperation(key, parsedInput, { user, mode: input.invokeMode });
+            return {
+                success: result.Success,
+                resultCode: result.ResultCode,
+                outputJSON: result.Output !== undefined ? JSON.stringify(result.Output) : undefined,
+                handle: result.Handle,
+                errorMessage: result.ErrorMessage,
+            };
+        }
+        catch (e) {
+            return fail('ERROR', e instanceof Error ? e.message : String(e));
+        }
+    }
+};
+__decorate([
+    Mutation(() => ExecuteRemoteOperationResultType),
+    __param(0, Arg('input')),
+    __param(1, Ctx()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [ExecuteRemoteOperationInput, Object]),
+    __metadata("design:returntype", Promise)
+], ExecuteRemoteOperationResolver.prototype, "ExecuteRemoteOperation", null);
+ExecuteRemoteOperationResolver = __decorate([
+    Resolver()
+], ExecuteRemoteOperationResolver);
+export { ExecuteRemoteOperationResolver };
+/** Builds a failed result. */
+function fail(resultCode, errorMessage) {
+    return { success: false, resultCode, errorMessage };
+}
+//# sourceMappingURL=ExecuteRemoteOperationResolver.js.map

package/dist/resolvers/ExecuteRemoteOperationResolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ExecuteRemoteOperationResolver.js","sourceRoot":"","sources":["../../src/resolvers/ExecuteRemoteOperationResolver.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAC1F,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAClD,OAAO,EAAE,sBAAsB,EAAsB,MAAM,sBAAsB,CAAC;AAClF,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAE1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAElD,iEAAiE;AAE1D,IAAM,2BAA2B,GAAjC,MAAM,2BAA2B;CASvC,CAAA;AAPG;IADC,KAAK,EAAE;;iEACa;AAGrB;IADC,KAAK,EAAE;;8DACU;AAGlB;IADC,KAAK,EAAE;;+DACW;AARV,2BAA2B;IADvC,SAAS,EAAE;GACC,2BAA2B,CASvC;;AAED,iEAAiE;AAE1D,IAAM,gCAAgC,GAAtC,MAAM,gCAAgC;CAe5C,CAAA;AAbG;IADC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC;;iEACJ;AAGjB;IADC,KAAK,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;oEACpB;AAGpB;IADC,KAAK,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;oEACpB;AAGpB;IADC,KAAK,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;gEACxB;AAGhB;IADC,KAAK,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;sEAClB;AAdb,gCAAgC;IAD5C,UAAU,EAAE;GACA,gCAAgC,CAe5C;;AAED;;;;;;GAMG;AAEI,IAAM,8BAA8B,GAApC,MAAM,8BAA+B,SAAQ,YAAY;IAEtD,AAAN,KAAK,CAAC,sBAAsB,CACV,KAAkC,EACzC,GAAe;QAEtB,IAAI,CAAC;YACD,MAAM,GAAG,GAAG,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC;YACvC,IAAI,CAAC,GAAG,EAAE,CAAC;gBACP,OAAO,IAAI,CAAC,uBAAuB,EAAE,0BAA0B,CAAC,CAAC;YACrE,CAAC;YAED,qFAAqF;YACrF,MAAM,YAAY,GAAG,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,eAAe,CAAC,sBAAsB,EAAE,GAAG,CAAC,CAAC;YACjG,IAAI,CAAC,YAAY,EAAE,CAAC;gBAChB,OAAO,IAAI,CAAC,mBAAmB,EAAE,qBAAqB,GAAG,qBAAqB,CAAC,CAAC;YACpF,CAAC;YACD,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,cAAc,CAAyB,sBAAsB,EAAE,GAAG,CAAC,CAAC;YAElH,oEAAoE;YACpE,IAAI,MAAM,EAAE,aAAa,EAAE,CAAC;gBACxB,MAAM,IAAI,CAAC,6BAA6B,CAAC,MAAM,CAAC,aAAa,EAAE,GAAG,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;YACzF,CAAC;YACD,wBAAwB;YACxB,IAAI,MAAM,EAAE,kBAAkB,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,YAAY,EAAE,CAAC;gBAC9D,OAAO,IAAI,CAAC,WAAW,EAAE,cAAc,GAAG,0CAA0C,CAAC,CAAC;YAC1F,CAAC;YACD,gFAAgF;YAChF,MAAM,IAAI,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACtD,IAAI,CAAC,IAAI,EAAE,CAAC;gBACR,OAAO,IAAI,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;YAChD,CAAC;YAED,IAAI,WAAoB,CAAC;YACzB,IAAI,CAAC;gBACD,WAAW,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACrE,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACT,OAAO,IAAI,CAAC,oBAAoB,EAAE,uBAAuB,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC3G,CAAC;YAED,8GAA8G;YAC9G,MAAM,QAAQ,GAAG,oBAAoB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACrD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,cAAc,CAAC,GAAG,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,UAAgC,EAAE,CAAC,CAAC;YAEvH,OAAO;gBACH,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,UAAU,EAAE,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;gBACnF,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,YAAY,EAAE,MAAM,CAAC,YAAY;aACpC,CAAC;QACN,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QACrE,CAAC;IACL,CAAC;CACJ,CAAA;AArDS;IADL,QAAQ,CAAC,GAAG,EAAE,CAAC,gCAAgC,CAAC;IAE5C,WAAA,GAAG,CAAC,OAAO,CAAC,CAAA;IACZ,WAAA,GAAG,EAAE,CAAA;;qCADe,2BAA2B;;4EAmDnD;AAtDQ,8BAA8B;IAD1C,QAAQ,EAAE;GACE,8BAA8B,CAuD1C;;AAED,8BAA8B;AAC9B,SAAS,IAAI,CAAC,UAAkB,EAAE,YAAoB;IAClD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC;AACxD,CAAC"}

package/dist/resolvers/IntegrationDiscoveryResolver.d.ts

@@ -300,6 +300,60 @@ declare class MutationResultOutput {
     Success: boolean;
     Message: string;
 }
+declare class IntegrationSyncConfigInput {
+    SyncConcurrency?: number;
+    MaxConcurrency?: number;
+    RateLimitTokensPerSec?: number;
+    RateLimitBurst?: number;
+    CrossLayerPipeline?: boolean;
+    PartitionReconcile?: boolean;
+    DiscoveryTimeBudgetMs?: number;
+    DiscoveryBatchSize?: number;
+    DiscoveryMaxRecords?: number;
+    DeactivateAbsent?: boolean;
+}
+declare class IntegrationSyncConfigOutput {
+    Success: boolean;
+    Message: string;
+    SyncConcurrency?: number;
+    MaxConcurrency?: number;
+    RateLimitTokensPerSec?: number;
+    RateLimitBurst?: number;
+    CrossLayerPipeline?: boolean;
+    PartitionReconcile?: boolean;
+    DiscoveryTimeBudgetMs?: number;
+    DiscoveryBatchSize?: number;
+    DiscoveryMaxRecords?: number;
+    DeactivateAbsent?: boolean;
+}
+declare class CustomColumnCandidate {
+    EntityName: string;
+    /** The source field key as captured in the overflow column. */
+    SourceKey: string;
+    /** The sanitized, collision-resolved column name that would be created. */
+    ColumnName: string;
+    /** Inferred schema-field type family ('string' | 'number' | 'boolean' | 'datetime'). */
+    InferredType: string;
+    /** true = the real column does not exist yet (ADD COLUMN); false = recovery (column exists, mapping missing). */
+    NeedsColumn: boolean;
+}
+declare class CustomColumnCandidatesOutput {
+    Success: boolean;
+    Message: string;
+    Candidates: CustomColumnCandidate[];
+}
+declare class PromotedColumn {
+    EntityName: string;
+    ColumnName: string;
+}
+declare class PromoteCustomColumnsOutput {
+    Success: boolean;
+    Message: string;
+    Promoted: boolean;
+    ColumnsAdded: PromotedColumn[];
+    /** true when an RSU schema change ran (a server restart may be pending to expose the new columns). */
+    SchemaUpdatePending: boolean;
+}
 declare class FieldMapInput {
     SourceFieldName: string;
     DestinationFieldName: string;
@@ -345,6 +399,10 @@ declare class CreateScheduleInput {
     Description?: string;
     SyncDirection?: string;
     FullSync?: boolean;
+    /** §13 — 'sync' (default; moves data via RunSync) or 'discovery' (schema-only RefreshConnectorSchema on cron, evolving the IO/IOF catalog — no RSU, no data sync). */
+    JobKind?: string;
+    /** Discovery-job only: deactivate objects/fields absent from an authoritative refresh (reversible). Default true. */
+    DeactivateAbsent?: boolean;
 }
 declare class CreateScheduleOutput {
     Success: boolean;
@@ -598,7 +656,7 @@ export declare class IntegrationDiscoveryResolver extends ResolverBase {
      * both on stdout (visible in the MJAPI log file) and in a per-run
      * `<cwd>/logs/integration-runs/<runID>/progress.jsonl` artifact.
      */
-    IntegrationRefreshConnectorSchema(companyIntegrationID: string, universalPKConvention: string | undefined, ctx: AppContext): Promise<RefreshConnectorSchemaOutput>;
+    IntegrationRefreshConnectorSchema(companyIntegrationID: string, universalPKConvention: string | undefined, deactivateAbsent: boolean | undefined, ctx: AppContext): Promise<RefreshConnectorSchemaOutput>;
     /**
      * Generates + persists strongly-typed Action metadata on demand for an
      * integration object. When `verb` is supplied, a single Action is generated
@@ -838,6 +896,37 @@ export declare class IntegrationDiscoveryResolver extends ResolverBase {
      * Updates credential values and/or configuration on an existing CompanyIntegration.
      */
     IntegrationUpdateConnection(companyIntegrationID: string, credentialValues: string, configuration: string, externalSystemID: string, testConnection: boolean, runSchemaRefresh: boolean, universalPKConvention: string | undefined, ctx: AppContext): Promise<MutationResultOutput>;
+    /**
+     * Sets the per-connection sync tuning (rate limit, concurrency, time budget, pipeline flags) as
+     * STRUCTURED typed fields, merged into CompanyIntegration.Configuration (other keys preserved).
+     * These are the exact keys the IntegrationEngine reads at runtime, so they become customizable
+     * via the API instead of hidden code constants. Returns the merged config typed.
+     */
+    IntegrationSetSyncConfig(companyIntegrationID: string, config: IntegrationSyncConfigInput, ctx: AppContext): Promise<IntegrationSyncConfigOutput>;
+    /** Reads the per-connection sync tuning back as STRUCTURED typed fields. */
+    IntegrationGetSyncConfig(companyIntegrationID: string, ctx: AppContext): Promise<IntegrationSyncConfigOutput>;
+    /** Reads a single boolean key from a CompanyIntegration.Configuration JSON string (undefined if absent/malformed). */
+    private readConfigBool;
+    /** Extracts the typed sync-config fields from a parsed Configuration object (type-guarded). */
+    private readSyncConfig;
+    /** The MJ entity names this connection has entity maps for (for whole-connection scope). */
+    private getMappedEntityNames;
+    /**
+     * Lists the custom-column CANDIDATES captured in the overflow column awaiting promotion — the "new
+     * columns found" for a connection. READ-ONLY (no schema change, no RSU). Scope to one entity via
+     * entityName, or omit to list across all the connection's mapped entities. Computed live (overflow keys
+     * minus already-mapped/already-a-column), so it is inherently deduped against anything a concurrent
+     * discovery already promoted.
+     */
+    IntegrationListCustomColumnCandidates(companyIntegrationID: string, entityName: string | undefined, ctx: AppContext): Promise<CustomColumnCandidatesOutput>;
+    /**
+     * On-demand promotion of captured custom columns: runs RSU (ADD COLUMN + register EntityField + field map),
+     * which may require a server restart to expose them over GraphQL. This is the USER-ACCEPTED trigger — by
+     * default a sync only CAPTURES to the overflow column (auto-promote is opt-in per connection via
+     * Configuration.autoPromoteCustomColumns). Scope via entityNames, or omit to promote across all mapped
+     * entities. Idempotent: already-promoted/mapped keys are skipped (safe to re-run / run alongside discovery).
+     */
+    IntegrationPromoteCustomColumns(companyIntegrationID: string, entityNames: string[] | undefined, ctx: AppContext): Promise<PromoteCustomColumnsOutput>;
     /**
      * Soft-deletes a CompanyIntegration by setting IsActive=false.
      */
@@ -895,6 +984,17 @@ export declare class IntegrationDiscoveryResolver extends ResolverBase {
      * Build schema artifacts for a single connector's objects.
      * Shared by IntegrationApplySchema (single) and IntegrationApplySchemaBatch (batch).
      */
+    /**
+     * §B — enforce OPTIONAL table/column caps at the create-tables (RSU) gate. These are OPERATOR
+     * (deployment) guardrails read from ENV — `MJ_INTEGRATION_MAX_TABLES` / `MJ_INTEGRATION_MAX_COLUMNS_PER_TABLE`
+     * (absent or ≤0 = unbounded, the common case). They are DELIBERATELY env-only, NOT per-connection
+     * `Configuration`/GraphQL: a guardrail a user can raise via the same API they apply with is toothless.
+     * THROWS a clear error when the selection exceeds a cap so NOTHING partial is created — the caller surfaces
+     * it and the user narrows the selection (the cap itself is an operator concern). NEVER truncates. Discovery
+     * still surfaces every object/field; only materialization is capped. Per-table column count = the selected
+     * field subset, or the object's full discovered field count when all fields are selected.
+     */
+    private enforceSchemaLimits;
     private buildSchemaForConnector;
     /**
      * Starts an async integration sync. Returns immediately with the run ID.