@memberjunction/server 6.1.0-edge.6 → 6.1.0-edge.7

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@memberjunction/server",
-  "version": "6.1.0-edge.6",
+  "version": "6.1.0-edge.7",
   "description": "MemberJunction: This project provides API access via GraphQL to the common data store.",
   "main": "./dist/index.js",
   "types": "./src/index.ts",
@@ -19,97 +19,97 @@
     "@as-integrations/express5": "^1.0.0",
     "@graphql-tools/schema": "^10.0.38",
     "@graphql-tools/utils": "^11.0.0",
-    "@memberjunction/actions": "6.1.0-edge.6",
-    "@memberjunction/actions-apollo": "6.1.0-edge.6",
-    "@memberjunction/actions-base": "6.1.0-edge.6",
-    "@memberjunction/actions-bizapps-accounting": "6.1.0-edge.6",
-    "@memberjunction/actions-bizapps-crm": "6.1.0-edge.6",
-    "@memberjunction/actions-bizapps-formbuilders": "6.1.0-edge.6",
-    "@memberjunction/actions-bizapps-lms": "6.1.0-edge.6",
-    "@memberjunction/actions-bizapps-social": "6.1.0-edge.6",
-    "@memberjunction/ai": "6.1.0-edge.6",
-    "@memberjunction/ai-agent-manager": "6.1.0-edge.6",
-    "@memberjunction/ai-agent-manager-actions": "6.1.0-edge.6",
-    "@memberjunction/ai-agents": "6.1.0-edge.6",
-    "@memberjunction/ai-bridge-base": "6.1.0-edge.6",
-    "@memberjunction/ai-bridge-ringcentral": "6.1.0-edge.6",
-    "@memberjunction/ai-bridge-server": "6.1.0-edge.6",
-    "@memberjunction/ai-bridge-teams": "6.1.0-edge.6",
-    "@memberjunction/ai-bridge-twilio": "6.1.0-edge.6",
-    "@memberjunction/ai-bridge-vonage": "6.1.0-edge.6",
-    "@memberjunction/ai-core-plus": "6.1.0-edge.6",
-    "@memberjunction/ai-engine-base": "6.1.0-edge.6",
-    "@memberjunction/ai-mcp-client": "6.1.0-edge.6",
-    "@memberjunction/ai-prompts": "6.1.0-edge.6",
-    "@memberjunction/ai-provider-bundle": "6.1.0-edge.6",
-    "@memberjunction/ai-vector-sync": "6.1.0-edge.6",
-    "@memberjunction/ai-vectordb": "6.1.0-edge.6",
-    "@memberjunction/ai-vectors-pinecone": "6.1.0-edge.6",
-    "@memberjunction/aiengine": "6.1.0-edge.6",
-    "@memberjunction/api-keys": "6.1.0-edge.6",
-    "@memberjunction/auth-providers": "6.1.0-edge.6",
-    "@memberjunction/clustering-engine": "6.1.0-edge.6",
-    "@memberjunction/codegen-lib": "6.1.0-edge.6",
-    "@memberjunction/communication-engine": "6.1.0-edge.6",
-    "@memberjunction/communication-ms-graph": "6.1.0-edge.6",
-    "@memberjunction/communication-sendgrid": "6.1.0-edge.6",
-    "@memberjunction/communication-types": "6.1.0-edge.6",
-    "@memberjunction/component-registry-client-sdk": "6.1.0-edge.6",
-    "@memberjunction/computer-use": "6.1.0-edge.6",
-    "@memberjunction/computer-use-engine": "6.1.0-edge.6",
-    "@memberjunction/config": "6.1.0-edge.6",
-    "@memberjunction/core": "6.1.0-edge.6",
-    "@memberjunction/core-actions": "6.1.0-edge.6",
-    "@memberjunction/core-entities": "6.1.0-edge.6",
-    "@memberjunction/core-entities-server": "6.1.0-edge.6",
-    "@memberjunction/credentials": "6.1.0-edge.6",
-    "@memberjunction/data-context": "6.1.0-edge.6",
-    "@memberjunction/data-context-server": "6.1.0-edge.6",
-    "@memberjunction/doc-utils": "6.1.0-edge.6",
-    "@memberjunction/encryption": "6.1.0-edge.6",
-    "@memberjunction/entity-communications-base": "6.1.0-edge.6",
-    "@memberjunction/entity-communications-server": "6.1.0-edge.6",
-    "@memberjunction/esignature": "6.1.0-edge.6",
-    "@memberjunction/external-change-detection": "6.1.0-edge.6",
-    "@memberjunction/generic-database-provider": "6.1.0-edge.6",
-    "@memberjunction/global": "6.1.0-edge.6",
-    "@memberjunction/graphql-dataprovider": "6.1.0-edge.6",
-    "@memberjunction/integration-engine": "6.1.0-edge.6",
-    "@memberjunction/integration-engine-base": "6.1.0-edge.6",
-    "@memberjunction/integration-progress-artifacts": "6.1.0-edge.6",
-    "@memberjunction/integration-schema-builder": "6.1.0-edge.6",
-    "@memberjunction/interactive-component-types": "6.1.0-edge.6",
-    "@memberjunction/lists": "6.1.0-edge.6",
-    "@memberjunction/lists-base": "6.1.0-edge.6",
-    "@memberjunction/livekit-room-server": "6.1.0-edge.6",
-    "@memberjunction/network-utils": "6.1.0-edge.6",
-    "@memberjunction/notifications": "6.1.0-edge.6",
-    "@memberjunction/postgresql-dataprovider": "6.1.0-edge.6",
-    "@memberjunction/queue": "6.1.0-edge.6",
-    "@memberjunction/record-comparison": "6.1.0-edge.6",
-    "@memberjunction/redis-provider": "6.1.0-edge.6",
-    "@memberjunction/remote-browser-base": "6.1.0-edge.6",
-    "@memberjunction/remote-browser-cdp": "6.1.0-edge.6",
-    "@memberjunction/remote-browser-selfhost": "6.1.0-edge.6",
-    "@memberjunction/remote-browser-server": "6.1.0-edge.6",
-    "@memberjunction/scheduling-actions": "6.1.0-edge.6",
-    "@memberjunction/scheduling-base-types": "6.1.0-edge.6",
-    "@memberjunction/scheduling-engine": "6.1.0-edge.6",
-    "@memberjunction/scheduling-engine-base": "6.1.0-edge.6",
-    "@memberjunction/schema-engine": "6.1.0-edge.6",
-    "@memberjunction/search-engine": "6.1.0-edge.6",
-    "@memberjunction/server-extensions-core": "6.1.0-edge.6",
-    "@memberjunction/sql-dialect": "6.1.0-edge.6",
-    "@memberjunction/sql-parser": "6.1.0-edge.6",
-    "@memberjunction/sqlserver-dataprovider": "6.1.0-edge.6",
-    "@memberjunction/storage": "6.1.0-edge.6",
-    "@memberjunction/tag-engine": "6.1.0-edge.6",
-    "@memberjunction/tag-engine-base": "6.1.0-edge.6",
-    "@memberjunction/task-graph": "6.1.0-edge.6",
-    "@memberjunction/templates": "6.1.0-edge.6",
-    "@memberjunction/testing-engine": "6.1.0-edge.6",
-    "@memberjunction/testing-engine-base": "6.1.0-edge.6",
-    "@memberjunction/version-history": "6.1.0-edge.6",
+    "@memberjunction/actions": "6.1.0-edge.7",
+    "@memberjunction/actions-apollo": "6.1.0-edge.7",
+    "@memberjunction/actions-base": "6.1.0-edge.7",
+    "@memberjunction/actions-bizapps-accounting": "6.1.0-edge.7",
+    "@memberjunction/actions-bizapps-crm": "6.1.0-edge.7",
+    "@memberjunction/actions-bizapps-formbuilders": "6.1.0-edge.7",
+    "@memberjunction/actions-bizapps-lms": "6.1.0-edge.7",
+    "@memberjunction/actions-bizapps-social": "6.1.0-edge.7",
+    "@memberjunction/ai": "6.1.0-edge.7",
+    "@memberjunction/ai-agent-manager": "6.1.0-edge.7",
+    "@memberjunction/ai-agent-manager-actions": "6.1.0-edge.7",
+    "@memberjunction/ai-agents": "6.1.0-edge.7",
+    "@memberjunction/ai-bridge-base": "6.1.0-edge.7",
+    "@memberjunction/ai-bridge-ringcentral": "6.1.0-edge.7",
+    "@memberjunction/ai-bridge-server": "6.1.0-edge.7",
+    "@memberjunction/ai-bridge-teams": "6.1.0-edge.7",
+    "@memberjunction/ai-bridge-twilio": "6.1.0-edge.7",
+    "@memberjunction/ai-bridge-vonage": "6.1.0-edge.7",
+    "@memberjunction/ai-core-plus": "6.1.0-edge.7",
+    "@memberjunction/ai-engine-base": "6.1.0-edge.7",
+    "@memberjunction/ai-mcp-client": "6.1.0-edge.7",
+    "@memberjunction/ai-prompts": "6.1.0-edge.7",
+    "@memberjunction/ai-provider-bundle": "6.1.0-edge.7",
+    "@memberjunction/ai-vector-sync": "6.1.0-edge.7",
+    "@memberjunction/ai-vectordb": "6.1.0-edge.7",
+    "@memberjunction/ai-vectors-pinecone": "6.1.0-edge.7",
+    "@memberjunction/aiengine": "6.1.0-edge.7",
+    "@memberjunction/api-keys": "6.1.0-edge.7",
+    "@memberjunction/auth-providers": "6.1.0-edge.7",
+    "@memberjunction/clustering-engine": "6.1.0-edge.7",
+    "@memberjunction/codegen-lib": "6.1.0-edge.7",
+    "@memberjunction/communication-engine": "6.1.0-edge.7",
+    "@memberjunction/communication-ms-graph": "6.1.0-edge.7",
+    "@memberjunction/communication-sendgrid": "6.1.0-edge.7",
+    "@memberjunction/communication-types": "6.1.0-edge.7",
+    "@memberjunction/component-registry-client-sdk": "6.1.0-edge.7",
+    "@memberjunction/computer-use": "6.1.0-edge.7",
+    "@memberjunction/computer-use-engine": "6.1.0-edge.7",
+    "@memberjunction/config": "6.1.0-edge.7",
+    "@memberjunction/core": "6.1.0-edge.7",
+    "@memberjunction/core-actions": "6.1.0-edge.7",
+    "@memberjunction/core-entities": "6.1.0-edge.7",
+    "@memberjunction/core-entities-server": "6.1.0-edge.7",
+    "@memberjunction/credentials": "6.1.0-edge.7",
+    "@memberjunction/data-context": "6.1.0-edge.7",
+    "@memberjunction/data-context-server": "6.1.0-edge.7",
+    "@memberjunction/doc-utils": "6.1.0-edge.7",
+    "@memberjunction/encryption": "6.1.0-edge.7",
+    "@memberjunction/entity-communications-base": "6.1.0-edge.7",
+    "@memberjunction/entity-communications-server": "6.1.0-edge.7",
+    "@memberjunction/esignature": "6.1.0-edge.7",
+    "@memberjunction/external-change-detection": "6.1.0-edge.7",
+    "@memberjunction/generic-database-provider": "6.1.0-edge.7",
+    "@memberjunction/global": "6.1.0-edge.7",
+    "@memberjunction/graphql-dataprovider": "6.1.0-edge.7",
+    "@memberjunction/integration-engine": "6.1.0-edge.7",
+    "@memberjunction/integration-engine-base": "6.1.0-edge.7",
+    "@memberjunction/integration-progress-artifacts": "6.1.0-edge.7",
+    "@memberjunction/integration-schema-builder": "6.1.0-edge.7",
+    "@memberjunction/interactive-component-types": "6.1.0-edge.7",
+    "@memberjunction/lists": "6.1.0-edge.7",
+    "@memberjunction/lists-base": "6.1.0-edge.7",
+    "@memberjunction/livekit-room-server": "6.1.0-edge.7",
+    "@memberjunction/network-utils": "6.1.0-edge.7",
+    "@memberjunction/notifications": "6.1.0-edge.7",
+    "@memberjunction/postgresql-dataprovider": "6.1.0-edge.7",
+    "@memberjunction/queue": "6.1.0-edge.7",
+    "@memberjunction/record-comparison": "6.1.0-edge.7",
+    "@memberjunction/redis-provider": "6.1.0-edge.7",
+    "@memberjunction/remote-browser-base": "6.1.0-edge.7",
+    "@memberjunction/remote-browser-cdp": "6.1.0-edge.7",
+    "@memberjunction/remote-browser-selfhost": "6.1.0-edge.7",
+    "@memberjunction/remote-browser-server": "6.1.0-edge.7",
+    "@memberjunction/scheduling-actions": "6.1.0-edge.7",
+    "@memberjunction/scheduling-base-types": "6.1.0-edge.7",
+    "@memberjunction/scheduling-engine": "6.1.0-edge.7",
+    "@memberjunction/scheduling-engine-base": "6.1.0-edge.7",
+    "@memberjunction/schema-engine": "6.1.0-edge.7",
+    "@memberjunction/search-engine": "6.1.0-edge.7",
+    "@memberjunction/server-extensions-core": "6.1.0-edge.7",
+    "@memberjunction/sql-dialect": "6.1.0-edge.7",
+    "@memberjunction/sql-parser": "6.1.0-edge.7",
+    "@memberjunction/sqlserver-dataprovider": "6.1.0-edge.7",
+    "@memberjunction/storage": "6.1.0-edge.7",
+    "@memberjunction/tag-engine": "6.1.0-edge.7",
+    "@memberjunction/tag-engine-base": "6.1.0-edge.7",
+    "@memberjunction/task-graph": "6.1.0-edge.7",
+    "@memberjunction/templates": "6.1.0-edge.7",
+    "@memberjunction/testing-engine": "6.1.0-edge.7",
+    "@memberjunction/testing-engine-base": "6.1.0-edge.7",
+    "@memberjunction/version-history": "6.1.0-edge.7",
     "@octokit/auth-app": "^7.1.5",
     "@octokit/rest": "^21.1.1",
     "@types/compression": "^1.8.1",

package/src/__tests__/EntityRecordNameResolver.fieldSecurity.test.ts

@@ -0,0 +1,118 @@
+// ResolverBase transitively pulls in type-graphql decorators, which need the
+// Reflect.metadata polyfill at import time.
+import 'reflect-metadata';
+import { describe, it, expect, vi } from 'vitest';
+import { CompositeKey } from '@memberjunction/core';
+import type { DatabaseProviderBase, EntityInfo, UserInfo } from '@memberjunction/core';
+import { EntityRecordNameResolver } from '../resolvers/EntityRecordNameResolver.js';
+
+/**
+ * `GetEntityRecordName` must not hand back a name the caller cannot READ.
+ *
+ * This resolver predates field-level security and took no user context at all, which made it an
+ * open side channel: the name never travelled through `MapFieldNamesToCodeNames`, the boundary
+ * that strips denied fields, so a caller denied READ on an entity's name field could still obtain
+ * that name from here.
+ *
+ * FLS turned the latent gap into a live bypass, and the shape of it is worth remembering: the
+ * form-field FK control falls through to this query PRECISELY WHEN the joined display column is
+ * denied. The fallback that exists to handle a denial was the thing that defeated it. Found in
+ * manual Phase 5 testing — a Contract form showed its Client's name while the grid, correctly,
+ * did not.
+ */
+
+const DENIED_USER = { ID: 'u-1', Email: 'restricted@test' } as unknown as UserInfo;
+
+/** An entity whose name field is denied or allowed, per the flag. */
+function entityInfo(opts: { fls: boolean; deniedNames?: string[]; nameField?: string }): EntityInfo {
+    const nameFieldName = opts.nameField ?? 'Name';
+    return {
+        Name: 'Clients',
+        EnableFieldLevelSecurity: opts.fls,
+        Fields: [
+            { Name: 'ID', IsNameField: false },
+            { Name: nameFieldName, IsNameField: true },
+            { Name: 'Industry', IsNameField: false },
+        ],
+        GetDeniedReadFields: () => new Set(opts.deniedNames ?? []),
+    } as unknown as EntityInfo;
+}
+
+/** A provider that would happily return the name — the resolver must decide not to ask. */
+function providerWith(entity: EntityInfo, getName = vi.fn().mockResolvedValue('Acme Manufacturing')) {
+    return {
+        Entities: [entity],
+        GetEntityRecordName: getName,
+    } as unknown as DatabaseProviderBase & { GetEntityRecordName: typeof getName };
+}
+
+/** Exposes the inner method so the test does not need a GraphQL context. */
+class Probe extends EntityRecordNameResolver {
+    public Inner(md: DatabaseProviderBase, entityName: string, pk: CompositeKey, user?: UserInfo) {
+        // The resolver resolves the acting user from the payload; supply it directly.
+        vi.spyOn(this as never, 'GetUserFromPayload').mockReturnValue(user as never);
+        return this.InnerGetEntityRecordName(md, entityName, pk, { email: 'restricted@test' } as never);
+    }
+}
+
+const KEY = new CompositeKey([{ FieldName: 'ID', Value: 'c-1' }]);
+
+describe('GetEntityRecordName — field-security gate', () => {
+    it('withholds the name when the name field is read-denied', async () => {
+        const getName = vi.fn().mockResolvedValue('Acme Manufacturing');
+        const md = providerWith(entityInfo({ fls: true, deniedNames: ['name'] }), getName);
+
+        const result = await new Probe().Inner(md, 'Clients', KEY, DENIED_USER);
+
+        expect(result.Success).toBe(false);
+        expect(result.RecordName).toBeUndefined();
+        // Not merely filtered after the fact — the lookup must not run at all. The provider's
+        // record-name cache is keyed by entity + primary key and NOT by user, so a name fetched
+        // here would be visible to any later caller.
+        expect(getName).not.toHaveBeenCalled();
+    });
+
+    it('returns the name when the user may read the name field', async () => {
+        const md = providerWith(entityInfo({ fls: true, deniedNames: ['industry'] }));
+
+        const result = await new Probe().Inner(md, 'Clients', KEY, DENIED_USER);
+
+        expect(result.Success).toBe(true);
+        expect(result.RecordName).toBe('Acme Manufacturing');
+    });
+
+    it('is inert when the entity has field security switched off', async () => {
+        // Nearly every entity. A denial set that would otherwise match must not apply.
+        const md = providerWith(entityInfo({ fls: false, deniedNames: ['name'] }));
+
+        const result = await new Probe().Inner(md, 'Clients', KEY, DENIED_USER);
+
+        expect(result.Success).toBe(true);
+        expect(result.RecordName).toBe('Acme Manufacturing');
+    });
+
+    it('honours a designated name field that is not literally called "Name"', async () => {
+        const md = providerWith(entityInfo({ fls: true, nameField: 'Title', deniedNames: ['title'] }));
+
+        const result = await new Probe().Inner(md, 'Clients', KEY, DENIED_USER);
+
+        expect(result.Success).toBe(false);
+    });
+
+    it('passes the acting user to the provider so row-level security has an identity', async () => {
+        const getName = vi.fn().mockResolvedValue('Acme Manufacturing');
+        const md = providerWith(entityInfo({ fls: true }), getName);
+
+        await new Probe().Inner(md, 'Clients', KEY, DENIED_USER);
+
+        expect(getName).toHaveBeenCalledWith('Clients', expect.anything(), DENIED_USER);
+    });
+
+    it('does not disclose which of "missing" or "restricted" applies', async () => {
+        // The denial status must read the same as a genuine not-found, so the query cannot be
+        // used to probe for which entities carry restricted name fields.
+        const denied = await new Probe().Inner(
+            providerWith(entityInfo({ fls: true, deniedNames: ['name'] })), 'Clients', KEY, DENIED_USER);
+        expect(denied.Status).not.toMatch(/denied|permission|restricted|field.security/i);
+    });
+});

package/src/__tests__/RealtimeClientSessionResolver.test.ts

@@ -2769,6 +2769,26 @@ describe('RealtimeClientSessionResolver — app awareness (applicationId / appCo
         const relayArg = executeRelayedToolMock.mock.calls[0][0] as { AllowedAgents?: Array<{ agentId: string }> };
         expect(relayArg.AllowedAgents?.map(a => a.agentId)).toEqual(['skip-1']);
     });
+
+    it('passes the persisted directActions from the session config into ExecuteRelayedTool', async () => {
+        currentProvider = makeProvider(() =>
+            makeSessionEntity({
+                Config_: JSON.stringify({
+                    targetAgentID: 'lead-1',
+                    directActions: { enabled: true, actionNames: ['SendEmail'] },
+                }),
+            }),
+        );
+        executeRelayedToolMock.mockResolvedValue({ ResultJson: '{"ok":true}', Success: true });
+        const resolver = makeResolver();
+
+        await resolver.ExecuteRealtimeSessionTool(
+            'session-1', 'call-1', 'SendEmail', '{"To":"user@test.com"}', makeCtx(), makePubSub(),
+        );
+
+        const relayArg = executeRelayedToolMock.mock.calls[0][0] as { DirectActions?: { enabled: boolean; actionNames: string[] } };
+        expect(relayArg.DirectActions).toEqual({ enabled: true, actionNames: ['SendEmail'] });
+    });
 });
 
 describe('RealtimeClientSessionResolver — scoped-anonymous elevation (issue #3371)', () => {

package/src/__tests__/RealtimeSdpBrokerHandler.test.ts

@@ -0,0 +1,191 @@
+import { describe, it, expect, beforeEach, vi } from 'vitest';
+import type { Request, Response, NextFunction } from 'express';
+import { MJGlobal, RegisterClass } from '@memberjunction/global';
+import { BaseRealtimeModel, RealtimeProxyRegistry, IRealtimeSession, RealtimeSessionParams } from '@memberjunction/ai';
+import { createRealtimeSdpBrokerRouter, createOpenAILiveBrokerRouter, requireTicket } from '../rest/RealtimeSdpBrokerHandler.js';
+
+@RegisterClass(BaseRealtimeModel, 'MockOpenAILiveForBrokerTest', 10)
+class MockOpenAILiveForBrokerTest extends BaseRealtimeModel {
+    public static LastSessionConfig: Record<string, unknown> | undefined;
+
+    public override async StartSession(_params: RealtimeSessionParams): Promise<IRealtimeSession> {
+        throw new Error('Not needed in broker test');
+    }
+
+    public override async ExchangeWebRtcSdp(
+        offerSdp: string,
+        sessionConfig?: Record<string, unknown>
+    ): Promise<{ answerSdp: string; sessionId: string; prebillSeconds: number }> {
+        MockOpenAILiveForBrokerTest.LastSessionConfig = sessionConfig;
+        if (offerSdp === 'trigger_error') {
+            throw new Error('Upstream OpenAI internal error details');
+        }
+        return {
+            answerSdp: `mock_answer_for_${offerSdp}`,
+            sessionId: 'sess_mock_123',
+            prebillSeconds: 15,
+        };
+    }
+}
+
+function makeMockReqRes(query: Record<string, string>, body: unknown): {
+    req: Request;
+    res: Response;
+    getStatus: () => number;
+    getJson: () => Record<string, unknown>;
+} {
+    let statusCode = 200;
+    let jsonBody: Record<string, unknown> = {};
+
+    const res = {
+        locals: {} as Record<string, unknown>,
+        status(code: number): Response {
+            statusCode = code;
+            return res as unknown as Response;
+        },
+        json(data: Record<string, unknown>): Response {
+            jsonBody = data;
+            return res as unknown as Response;
+        },
+    };
+
+    const req = {
+        method: 'POST',
+        url: '/',
+        query,
+        body,
+        headers: {},
+        _body: true,
+    };
+
+    return {
+        req: req as unknown as Request,
+        res: res as unknown as Response,
+        getStatus: () => statusCode,
+        getJson: () => jsonBody,
+    };
+}
+
+describe('RealtimeSdpBrokerHandler', () => {
+    let router: ReturnType<typeof createRealtimeSdpBrokerRouter>;
+
+    beforeEach(() => {
+        router = createRealtimeSdpBrokerRouter();
+    });
+
+    it('createOpenAILiveBrokerRouter is backwards-compatible alias', () => {
+        expect(createOpenAILiveBrokerRouter).toBe(createRealtimeSdpBrokerRouter);
+    });
+
+    it('requireTicket middleware rejects missing ticket without calling next()', () => {
+        const { req, res, getStatus, getJson } = makeMockReqRes({}, {});
+        const next = vi.fn();
+        requireTicket(req, res, next as NextFunction);
+        expect(getStatus()).toBe(401);
+        expect(getJson().error).toContain('missing ticket');
+        expect(next).not.toHaveBeenCalled();
+    });
+
+    it('requireTicket middleware rejects invalid ticket without calling next()', () => {
+        const { req, res, getStatus, getJson } = makeMockReqRes({ ticket: 'non-existent-ticket' }, {});
+        const next = vi.fn();
+        requireTicket(req, res, next as NextFunction);
+        expect(getStatus()).toBe(401);
+        expect(getJson().error).toContain('invalid or expired ticket');
+        expect(next).not.toHaveBeenCalled();
+    });
+
+    it('rejects missing ticket with 401', async () => {
+        const { req, res, getStatus, getJson } = makeMockReqRes({}, { sdp: 'v=0...' });
+        // @ts-expect-error reaching the route handler directly
+        await router.handle(req, res, () => {});
+        expect(getStatus()).toBe(401);
+        expect(getJson().error).toContain('missing ticket');
+    });
+
+    it('rejects invalid or expired ticket with 401', async () => {
+        const { req, res, getStatus, getJson } = makeMockReqRes({ ticket: 'non-existent-ticket' }, { sdp: 'v=0...' });
+        // @ts-expect-error reaching the route handler directly
+        await router.handle(req, res, () => {});
+        expect(getStatus()).toBe(401);
+        expect(getJson().error).toContain('invalid or expired ticket');
+    });
+
+    it('rejects missing sdp in request body with 400', async () => {
+        const ticket = RealtimeProxyRegistry.Instance.Issue({
+            UpstreamUrl: 'https://api.openai.com/v1/live/sessions',
+            UpstreamAuthHeader: 'test-key',
+            DriverClass: 'MockOpenAILiveForBrokerTest',
+            TTLSeconds: 60,
+        });
+
+        const { req, res, getStatus, getJson } = makeMockReqRes({ ticket: ticket.ID }, {});
+        // @ts-expect-error reaching the route handler directly
+        await router.handle(req, res, () => {});
+        expect(getStatus()).toBe(400);
+        expect(getJson().error).toContain('Missing or invalid sdp');
+    });
+
+    it('exchanges SDP offer for answer with a valid ticket and consumes the ticket', async () => {
+        const serverConfig = { model: 'gpt-live-1', authoritative: true };
+        const ticket = RealtimeProxyRegistry.Instance.Issue({
+            UpstreamUrl: 'https://api.openai.com/v1/live/sessions',
+            UpstreamAuthHeader: 'test-key',
+            DriverClass: 'MockOpenAILiveForBrokerTest',
+            SessionConfig: serverConfig,
+            TTLSeconds: 60,
+        });
+
+        // Client attempts to pass its own session config
+        const clientAttemptedSession = { model: 'tampered-model' };
+        const { req, res, getStatus, getJson } = makeMockReqRes(
+            { ticket: ticket.ID },
+            { sdp: 'offer_123', session: clientAttemptedSession }
+        );
+        // @ts-expect-error reaching the route handler directly
+        await router.handle(req, res, () => {});
+
+        expect(getStatus()).toBe(200);
+        const json = getJson();
+        expect(json.answerSdp).toBe('mock_answer_for_offer_123');
+        expect(json.sessionId).toBe('sess_mock_123');
+        expect(json.prebillSeconds).toBe(15);
+        // Verify server's authoritative session config was passed, not the client's
+        expect(MockOpenAILiveForBrokerTest.LastSessionConfig).toEqual(serverConfig);
+
+        // Ticket is single-use: consuming again should fail
+        const reused = makeMockReqRes({ ticket: ticket.ID }, { sdp: 'offer_123' });
+        // @ts-expect-error reaching the route handler directly
+        await router.handle(reused.req, reused.res, () => {});
+        expect(reused.getStatus()).toBe(401);
+    });
+
+    it('rejects ticket without upstream auth header with 500', async () => {
+        const ticket = RealtimeProxyRegistry.Instance.Issue({
+            UpstreamUrl: 'https://api.openai.com/v1/live/sessions',
+            DriverClass: 'MockOpenAILiveForBrokerTest',
+            TTLSeconds: 60,
+        });
+
+        const { req, res, getStatus, getJson } = makeMockReqRes({ ticket: ticket.ID }, { sdp: 'offer_123' });
+        // @ts-expect-error reaching the route handler directly
+        await router.handle(req, res, () => {});
+        expect(getStatus()).toBe(500);
+        expect(getJson().error).toContain('missing upstream credentials');
+    });
+
+    it('sanitizes 502 error when upstream exchange throws without leaking internal error', async () => {
+        const ticket = RealtimeProxyRegistry.Instance.Issue({
+            UpstreamUrl: 'https://api.openai.com/v1/live/sessions',
+            UpstreamAuthHeader: 'test-key',
+            DriverClass: 'MockOpenAILiveForBrokerTest',
+            TTLSeconds: 60,
+        });
+
+        const { req, res, getStatus, getJson } = makeMockReqRes({ ticket: ticket.ID }, { sdp: 'trigger_error' });
+        // @ts-expect-error reaching the route handler directly
+        await router.handle(req, res, () => {});
+        expect(getStatus()).toBe(502);
+        expect(getJson().error).toBe('Realtime WebRTC handshake failed');
+    });
+});

package/src/__tests__/ResolverBase.filterEscaping.test.ts

@@ -91,6 +91,14 @@ class Probe extends ResolverBase {
     public RunDynamic(input: RunDynamicViewInput, provider: DatabaseProviderBase) {
         return this.RunDynamicViewGeneric(input, provider, fakePayload(), undefined as unknown as PubSubEngine);
     }
+
+    /** The whole boundary screen, as the RunView* entry points call it. */
+    public ScreenAll(
+        clauses: { extraFilter?: string | null; orderBy?: string | null; userSearchString?: string | null; overrideExcludeFilter?: string | null },
+        provider: DatabaseProviderBase,
+    ) {
+        return this.screenClientViewClauses(clauses, provider as unknown as IMetadataProvider);
+    }
 }
 
 describe('ResolverBase.findBy — ExtraFilter escaping', () => {
@@ -251,6 +259,61 @@ describe('ResolverBase — GraphQL-boundary ExtraFilter AST screen', () => {
     });
 });
 
+describe('ResolverBase.screenClientViewClauses — UserSearchString is free text, not a clause (#4392)', () => {
+    // The base-view AST screen wraps its argument as `SELECT 1 FROM x WHERE (<clause>)` and fails
+    // closed when that does not parse. Applied to UserSearchString it rejected everything that
+    // wasn't coincidentally valid SQL — which is most of what people type into a search box.
+    // UserSearchString never reaches SQL as a fragment: createViewUserSearchSQL builds the
+    // predicate and lands the text as an escaped literal, so the screen has nothing to screen.
+
+    const provider = () => fakeProvider({ params: null });
+
+    const searchTerms = [
+        'Marcus Chen',            // a space — parses as nothing
+        "O'Leary",                // unterminated literal
+        "Marcus O'Leary Chen",    // both
+        'Smith, John',            // punctuation
+        '50% off',                // LIKE metacharacter
+        'a_b [c]',                // more LIKE metacharacters
+        'select',                 // a keyword as a term
+        'drop table users',       // keywords with spaces
+        'Union Pacific',          // a real company name
+        "x' OR '1'='1",           // an injection attempt — escaped as a literal downstream
+        '  spaced  out  ',
+        'café ☕',
+    ];
+
+    it.each(searchTerms)('lets %j through the boundary screen', (term) => {
+        expect(() => new Probe().ScreenAll({ userSearchString: term }, provider())).not.toThrow();
+    });
+
+    it('still screens the three real clause fragments alongside it', () => {
+        const p = new Probe();
+        const md = provider();
+
+        expect(() =>
+            p.ScreenAll({ userSearchString: 'Marcus Chen', extraFilter: `EXISTS (SELECT 1 FROM __mj.[User])` }, md)
+        ).toThrow(/entity base view/);
+
+        expect(() =>
+            p.ScreenAll({ userSearchString: 'Marcus Chen', orderBy: '(SELECT COUNT(*) FROM __mj.APIKey)' }, md)
+        ).toThrow(/entity base view/);
+
+        expect(() =>
+            p.ScreenAll({ userSearchString: 'Marcus Chen', overrideExcludeFilter: `EXISTS (SELECT 1 FROM __mj.[User])` }, md)
+        ).toThrow(/entity base view/);
+    });
+
+    it('RunDynamicViewGeneric carries a multi-word search term through to RunView', async () => {
+        const captured: Captured = { params: null };
+        const input = { EntityName: ENTITY_NAME, UserSearchString: "Marcus O'Leary" } as RunDynamicViewInput;
+
+        await new Probe().RunDynamic(input, fakeProvider(captured));
+
+        expect(captured.params?.UserSearchString).toBe("Marcus O'Leary");
+    });
+});
+
 describe('ResolverBase.RunViewByNameGeneric — view-name escaping', () => {
     it('escapes the client-supplied view name', async () => {
         const captured: Captured = { params: null };