@memberjunction/server 6.1.3 → 6.1.5

package/dist/services/TaskGraphActionRunner.js

@@ -70,26 +70,27 @@ export class TaskGraphActionRunner {
         return output;
     }
     /**
-     * Rebuilds the action's parameters from the task's stored payload.
+     * Rebuilds the action's parameters from the task's input, one parameter per key.
      *
-     * **The values here have been through redaction**, because `Task.InputPayload` is persistent,
-     * user-visible storage and nothing writes a raw `ActionParam[]` there. A parameter the binding
-     * marked as not-logged therefore arrives absent rather than secret — the action sees a missing
-     * value, which is the honest consequence of choosing not to persist it, and the reason durable
-     * dispatch is opt-in per binding rather than the default.
+     * For a **durable entity-action** graph the input was written by `RedactParamsToRecord`
+     * (`@memberjunction/actions-base`) at deferral time, so its values have been through redaction:
+     * a parameter the binding marked as not-logged arrives absent rather than secret — the action
+     * sees a missing value, which is the honest consequence of choosing not to persist it, and the
+     * reason durable dispatch is opt-in per binding rather than the default. Every other graph's
+     * input is whatever its spec authored. This method re-applies no redaction rule in either case.
      *
-     * Dependency outputs are merged underneath the task's own input so a node's explicit parameters
-     * always win over an upstream node that happened to emit the same key.
+     * `InputPayload` already carries the dependency outputs: the dispatcher merges them underneath
+     * the task's own input (`mergedPayload`) before calling this runner, so a node's explicit
+     * parameters win and a step with an input mapping gets exactly the parameters it declared.
+     * `DependencyOutputs` is keyed by upstream task ID, not by parameter name, so it is deliberately
+     * not read here — spreading it would hand the action one extra parameter per dependency, named
+     * by a GUID and holding that task's whole output.
      */
     buildParams(params) {
-        const merged = {};
-        for (const [name, value] of params.DependencyOutputs) {
-            merged[name] = value;
+        if (!params.InputPayload || typeof params.InputPayload !== 'object') {
+            return [];
         }
-        if (params.InputPayload && typeof params.InputPayload === 'object') {
-            Object.assign(merged, params.InputPayload);
-        }
-        return Object.entries(merged).map(([Name, Value]) => ({ Name, Value, Type: 'Input' }));
+        return Object.entries(params.InputPayload).map(([Name, Value]) => ({ Name, Value, Type: 'Input' }));
     }
 }
 //# sourceMappingURL=TaskGraphActionRunner.js.map

package/dist/services/TaskGraphActionRunner.js.map

@@ -1 +1 @@
-{"version":3,"file":"TaskGraphActionRunner.js","sourceRoot":"","sources":["../../src/services/TaskGraphActionRunner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAE7D,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAGpD,MAAM,OAAO,qBAAqB;IACvB,KAAK,CAAC,gBAAgB,CAAC,MAA2B;QACrD,IAAI,CAAC;YACD,MAAM,kBAAkB,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;YACpE,MAAM,MAAM,GAAG,kBAAkB,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;YAClG,IAAI,CAAC,MAAM,EAAE,CAAC;gBACV,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,UAAU,MAAM,CAAC,QAAQ,mCAAmC,EAAE,CAAC;YAC1G,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,QAAQ,CAAC,SAAS,CAAC;gBACvD,MAAM,EAAE,MAAM;gBACd,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC;gBAChC,oFAAoF;gBACpF,qFAAqF;gBACrF,4EAA4E;gBAC5E,iFAAiF;gBACjF,OAAO,EAAE,EAAE;aACd,CAAC,CAAC;YAEH,OAAO;gBACH,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC;gBACvC,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO;gBACzD,sFAAsF;gBACtF,kFAAkF;gBAClF,iEAAiE;gBACjE,WAAW,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE;aACnC,CAAC;QACN,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,MAAM,OAAO,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAC3D,QAAQ,CAAC,gCAAgC,MAAM,CAAC,MAAM,YAAY,OAAO,EAAE,CAAC,CAAC;YAC7E,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC;QACrD,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACK,WAAW,CAAC,YAA2B;QAC3C,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,KAAK,MAAM,CAAC,IAAI,YAAY,IAAI,EAAE,EAAE,CAAC;YACjC,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM;gBAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC;QAC3E,CAAC;QACD,OAAO,MAAM,CAAC;IAClB,CAAC;IAED;;;;;;;;;;;OAWG;IACK,WAAW,CAAC,MAA2B;QAC3C,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;YACnD,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QACzB,CAAC;QACD,IAAI,MAAM,CAAC,YAAY,IAAI,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;YACjE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,YAAuC,CAAC,CAAC;QAC1E,CAAC;QACD,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;IAC3F,CAAC;CACJ"}
+{"version":3,"file":"TaskGraphActionRunner.js","sourceRoot":"","sources":["../../src/services/TaskGraphActionRunner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAE7D,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAGpD,MAAM,OAAO,qBAAqB;IACvB,KAAK,CAAC,gBAAgB,CAAC,MAA2B;QACrD,IAAI,CAAC;YACD,MAAM,kBAAkB,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;YACpE,MAAM,MAAM,GAAG,kBAAkB,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;YAClG,IAAI,CAAC,MAAM,EAAE,CAAC;gBACV,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,UAAU,MAAM,CAAC,QAAQ,mCAAmC,EAAE,CAAC;YAC1G,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,QAAQ,CAAC,SAAS,CAAC;gBACvD,MAAM,EAAE,MAAM;gBACd,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC;gBAChC,oFAAoF;gBACpF,qFAAqF;gBACrF,4EAA4E;gBAC5E,iFAAiF;gBACjF,OAAO,EAAE,EAAE;aACd,CAAC,CAAC;YAEH,OAAO;gBACH,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC;gBACvC,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO;gBACzD,sFAAsF;gBACtF,kFAAkF;gBAClF,iEAAiE;gBACjE,WAAW,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE;aACnC,CAAC;QACN,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,MAAM,OAAO,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAC3D,QAAQ,CAAC,gCAAgC,MAAM,CAAC,MAAM,YAAY,OAAO,EAAE,CAAC,CAAC;YAC7E,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC;QACrD,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACK,WAAW,CAAC,YAA2B;QAC3C,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,KAAK,MAAM,CAAC,IAAI,YAAY,IAAI,EAAE,EAAE,CAAC;YACjC,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM;gBAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC;QAC3E,CAAC;QACD,OAAO,MAAM,CAAC;IAClB,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACK,WAAW,CAAC,MAA2B;QAC3C,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;YAClE,OAAO,EAAE,CAAC;QACd,CAAC;QACD,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,YAAuC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;IACnI,CAAC;CACJ"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@memberjunction/server",
-  "version": "6.1.3",
+  "version": "6.1.5",
   "description": "MemberJunction: This project provides API access via GraphQL to the common data store.",
   "main": "./dist/index.js",
   "types": "./src/index.ts",
@@ -19,97 +19,97 @@
     "@as-integrations/express5": "^1.0.0",
     "@graphql-tools/schema": "^10.0.38",
     "@graphql-tools/utils": "^11.0.0",
-    "@memberjunction/actions": "6.1.3",
-    "@memberjunction/actions-apollo": "6.1.3",
-    "@memberjunction/actions-base": "6.1.3",
-    "@memberjunction/actions-bizapps-accounting": "6.1.3",
-    "@memberjunction/actions-bizapps-crm": "6.1.3",
-    "@memberjunction/actions-bizapps-formbuilders": "6.1.3",
-    "@memberjunction/actions-bizapps-lms": "6.1.3",
-    "@memberjunction/actions-bizapps-social": "6.1.3",
-    "@memberjunction/ai": "6.1.3",
-    "@memberjunction/ai-agent-manager": "6.1.3",
-    "@memberjunction/ai-agent-manager-actions": "6.1.3",
-    "@memberjunction/ai-agents": "6.1.3",
-    "@memberjunction/ai-bridge-base": "6.1.3",
-    "@memberjunction/ai-bridge-ringcentral": "6.1.3",
-    "@memberjunction/ai-bridge-server": "6.1.3",
-    "@memberjunction/ai-bridge-teams": "6.1.3",
-    "@memberjunction/ai-bridge-twilio": "6.1.3",
-    "@memberjunction/ai-bridge-vonage": "6.1.3",
-    "@memberjunction/ai-core-plus": "6.1.3",
-    "@memberjunction/ai-engine-base": "6.1.3",
-    "@memberjunction/ai-mcp-client": "6.1.3",
-    "@memberjunction/ai-prompts": "6.1.3",
-    "@memberjunction/ai-provider-bundle": "6.1.3",
-    "@memberjunction/ai-vector-sync": "6.1.3",
-    "@memberjunction/ai-vectordb": "6.1.3",
-    "@memberjunction/ai-vectors-pinecone": "6.1.3",
-    "@memberjunction/aiengine": "6.1.3",
-    "@memberjunction/api-keys": "6.1.3",
-    "@memberjunction/auth-providers": "6.1.3",
-    "@memberjunction/clustering-engine": "6.1.3",
-    "@memberjunction/codegen-lib": "6.1.3",
-    "@memberjunction/communication-engine": "6.1.3",
-    "@memberjunction/communication-ms-graph": "6.1.3",
-    "@memberjunction/communication-sendgrid": "6.1.3",
-    "@memberjunction/communication-types": "6.1.3",
-    "@memberjunction/component-registry-client-sdk": "6.1.3",
-    "@memberjunction/computer-use": "6.1.3",
-    "@memberjunction/computer-use-engine": "6.1.3",
-    "@memberjunction/config": "6.1.3",
-    "@memberjunction/core": "6.1.3",
-    "@memberjunction/core-actions": "6.1.3",
-    "@memberjunction/core-entities": "6.1.3",
-    "@memberjunction/core-entities-server": "6.1.3",
-    "@memberjunction/credentials": "6.1.3",
-    "@memberjunction/data-context": "6.1.3",
-    "@memberjunction/data-context-server": "6.1.3",
-    "@memberjunction/doc-utils": "6.1.3",
-    "@memberjunction/encryption": "6.1.3",
-    "@memberjunction/entity-communications-base": "6.1.3",
-    "@memberjunction/entity-communications-server": "6.1.3",
-    "@memberjunction/esignature": "6.1.3",
-    "@memberjunction/external-change-detection": "6.1.3",
-    "@memberjunction/generic-database-provider": "6.1.3",
-    "@memberjunction/global": "6.1.3",
-    "@memberjunction/graphql-dataprovider": "6.1.3",
-    "@memberjunction/integration-engine": "6.1.3",
-    "@memberjunction/integration-engine-base": "6.1.3",
-    "@memberjunction/integration-progress-artifacts": "6.1.3",
-    "@memberjunction/integration-schema-builder": "6.1.3",
-    "@memberjunction/interactive-component-types": "6.1.3",
-    "@memberjunction/lists": "6.1.3",
-    "@memberjunction/lists-base": "6.1.3",
-    "@memberjunction/livekit-room-server": "6.1.3",
-    "@memberjunction/network-utils": "6.1.3",
-    "@memberjunction/notifications": "6.1.3",
-    "@memberjunction/postgresql-dataprovider": "6.1.3",
-    "@memberjunction/queue": "6.1.3",
-    "@memberjunction/record-comparison": "6.1.3",
-    "@memberjunction/redis-provider": "6.1.3",
-    "@memberjunction/remote-browser-base": "6.1.3",
-    "@memberjunction/remote-browser-cdp": "6.1.3",
-    "@memberjunction/remote-browser-selfhost": "6.1.3",
-    "@memberjunction/remote-browser-server": "6.1.3",
-    "@memberjunction/scheduling-actions": "6.1.3",
-    "@memberjunction/scheduling-base-types": "6.1.3",
-    "@memberjunction/scheduling-engine": "6.1.3",
-    "@memberjunction/scheduling-engine-base": "6.1.3",
-    "@memberjunction/schema-engine": "6.1.3",
-    "@memberjunction/search-engine": "6.1.3",
-    "@memberjunction/server-extensions-core": "6.1.3",
-    "@memberjunction/sql-dialect": "6.1.3",
-    "@memberjunction/sql-parser": "6.1.3",
-    "@memberjunction/sqlserver-dataprovider": "6.1.3",
-    "@memberjunction/storage": "6.1.3",
-    "@memberjunction/tag-engine": "6.1.3",
-    "@memberjunction/tag-engine-base": "6.1.3",
-    "@memberjunction/task-graph": "6.1.3",
-    "@memberjunction/templates": "6.1.3",
-    "@memberjunction/testing-engine": "6.1.3",
-    "@memberjunction/testing-engine-base": "6.1.3",
-    "@memberjunction/version-history": "6.1.3",
+    "@memberjunction/actions": "6.1.5",
+    "@memberjunction/actions-apollo": "6.1.5",
+    "@memberjunction/actions-base": "6.1.5",
+    "@memberjunction/actions-bizapps-accounting": "6.1.5",
+    "@memberjunction/actions-bizapps-crm": "6.1.5",
+    "@memberjunction/actions-bizapps-formbuilders": "6.1.5",
+    "@memberjunction/actions-bizapps-lms": "6.1.5",
+    "@memberjunction/actions-bizapps-social": "6.1.5",
+    "@memberjunction/ai": "6.1.5",
+    "@memberjunction/ai-agent-manager": "6.1.5",
+    "@memberjunction/ai-agent-manager-actions": "6.1.5",
+    "@memberjunction/ai-agents": "6.1.5",
+    "@memberjunction/ai-bridge-base": "6.1.5",
+    "@memberjunction/ai-bridge-ringcentral": "6.1.5",
+    "@memberjunction/ai-bridge-server": "6.1.5",
+    "@memberjunction/ai-bridge-teams": "6.1.5",
+    "@memberjunction/ai-bridge-twilio": "6.1.5",
+    "@memberjunction/ai-bridge-vonage": "6.1.5",
+    "@memberjunction/ai-core-plus": "6.1.5",
+    "@memberjunction/ai-engine-base": "6.1.5",
+    "@memberjunction/ai-mcp-client": "6.1.5",
+    "@memberjunction/ai-prompts": "6.1.5",
+    "@memberjunction/ai-provider-bundle": "6.1.5",
+    "@memberjunction/ai-vector-sync": "6.1.5",
+    "@memberjunction/ai-vectordb": "6.1.5",
+    "@memberjunction/ai-vectors-pinecone": "6.1.5",
+    "@memberjunction/aiengine": "6.1.5",
+    "@memberjunction/api-keys": "6.1.5",
+    "@memberjunction/auth-providers": "6.1.5",
+    "@memberjunction/clustering-engine": "6.1.5",
+    "@memberjunction/codegen-lib": "6.1.5",
+    "@memberjunction/communication-engine": "6.1.5",
+    "@memberjunction/communication-ms-graph": "6.1.5",
+    "@memberjunction/communication-sendgrid": "6.1.5",
+    "@memberjunction/communication-types": "6.1.5",
+    "@memberjunction/component-registry-client-sdk": "6.1.5",
+    "@memberjunction/computer-use": "6.1.5",
+    "@memberjunction/computer-use-engine": "6.1.5",
+    "@memberjunction/config": "6.1.5",
+    "@memberjunction/core": "6.1.5",
+    "@memberjunction/core-actions": "6.1.5",
+    "@memberjunction/core-entities": "6.1.5",
+    "@memberjunction/core-entities-server": "6.1.5",
+    "@memberjunction/credentials": "6.1.5",
+    "@memberjunction/data-context": "6.1.5",
+    "@memberjunction/data-context-server": "6.1.5",
+    "@memberjunction/doc-utils": "6.1.5",
+    "@memberjunction/encryption": "6.1.5",
+    "@memberjunction/entity-communications-base": "6.1.5",
+    "@memberjunction/entity-communications-server": "6.1.5",
+    "@memberjunction/esignature": "6.1.5",
+    "@memberjunction/external-change-detection": "6.1.5",
+    "@memberjunction/generic-database-provider": "6.1.5",
+    "@memberjunction/global": "6.1.5",
+    "@memberjunction/graphql-dataprovider": "6.1.5",
+    "@memberjunction/integration-engine": "6.1.5",
+    "@memberjunction/integration-engine-base": "6.1.5",
+    "@memberjunction/integration-progress-artifacts": "6.1.5",
+    "@memberjunction/integration-schema-builder": "6.1.5",
+    "@memberjunction/interactive-component-types": "6.1.5",
+    "@memberjunction/lists": "6.1.5",
+    "@memberjunction/lists-base": "6.1.5",
+    "@memberjunction/livekit-room-server": "6.1.5",
+    "@memberjunction/network-utils": "6.1.5",
+    "@memberjunction/notifications": "6.1.5",
+    "@memberjunction/postgresql-dataprovider": "6.1.5",
+    "@memberjunction/queue": "6.1.5",
+    "@memberjunction/record-comparison": "6.1.5",
+    "@memberjunction/redis-provider": "6.1.5",
+    "@memberjunction/remote-browser-base": "6.1.5",
+    "@memberjunction/remote-browser-cdp": "6.1.5",
+    "@memberjunction/remote-browser-selfhost": "6.1.5",
+    "@memberjunction/remote-browser-server": "6.1.5",
+    "@memberjunction/scheduling-actions": "6.1.5",
+    "@memberjunction/scheduling-base-types": "6.1.5",
+    "@memberjunction/scheduling-engine": "6.1.5",
+    "@memberjunction/scheduling-engine-base": "6.1.5",
+    "@memberjunction/schema-engine": "6.1.5",
+    "@memberjunction/search-engine": "6.1.5",
+    "@memberjunction/server-extensions-core": "6.1.5",
+    "@memberjunction/sql-dialect": "6.1.5",
+    "@memberjunction/sql-parser": "6.1.5",
+    "@memberjunction/sqlserver-dataprovider": "6.1.5",
+    "@memberjunction/storage": "6.1.5",
+    "@memberjunction/tag-engine": "6.1.5",
+    "@memberjunction/tag-engine-base": "6.1.5",
+    "@memberjunction/task-graph": "6.1.5",
+    "@memberjunction/templates": "6.1.5",
+    "@memberjunction/testing-engine": "6.1.5",
+    "@memberjunction/testing-engine-base": "6.1.5",
+    "@memberjunction/version-history": "6.1.5",
     "@octokit/auth-app": "^7.1.5",
     "@octokit/rest": "^21.1.1",
     "@types/compression": "^1.8.1",

package/src/__tests__/AdhocQueryResolver.bugs.test.ts

@@ -60,20 +60,13 @@ function stubMetadata(): void {
 
 describe('AdhocQueryResolver source-shape contract', () => {
 
-    it('Bug #2: AdhocQueryResolver must import RenderPipeline (currently does not)', () => {
+    it('Bug #2: AdhocQueryResolver must hand the SQL to the provider ad-hoc path, which renders it', () => {
         const src = readResolverSource();
-        // After the fix, the resolver should delegate composition + Nunjucks +
-        // MaxRows handling to the canonical pipeline rather than re-implementing
-        // a partial subset.
-        const importsRenderPipeline =
-            /import\s*\{[^}]*\bRenderPipeline\b[^}]*\}\s*from\s*['"]@memberjunction\/generic-database-provider['"]/.test(src);
-        expect(importsRenderPipeline).toBe(true);
-    });
-
-    it('Bug #2: AdhocQueryResolver must call RenderPipeline.Run() somewhere (currently does not)', () => {
-        const src = readResolverSource();
-        const callsRenderPipelineRun = /\bRenderPipeline\.Run\s*\(/.test(src);
-        expect(callsRenderPipelineRun).toBe(true);
+        // Composition, comment removal, the single-read rule and the row cap all happen in the
+        // provider's ad-hoc path (RenderPipeline), shared with in-process callers. The resolver must
+        // delegate there rather than re-implement a partial subset.
+        expect(/\.RunQuery\(\{[\s\S]*SQL: input\.SQL/.test(src)).toBe(true);
+        expect(/\bRenderPipeline\b/.test(src)).toBe(false);
     });
 
     it('Bug #3: AdhocQueryResolver must NOT contain the manual `SELECT TOP N * FROM (...)` wrap', () => {
@@ -126,29 +119,13 @@ ORDER BY JoinYear DESC`;
         // success/failure, the resolver should never hand a string containing
         // "{{query:" to SQL Server.
         //
-        // We encode this as a contract on the resolver source: it must call
-        // into RenderPipeline whenever composition tokens are present, OR
-        // reject early with a clear error. Either way, the literal text
-        // "{{query:" must not reach `request.query(...)`.
+        // We encode this as a contract on the resolver source: it must not execute SQL itself.
+        // It hands input.SQL to the read-only provider's ad-hoc path, which renders it through
+        // RenderPipeline (resolving composition tokens) before anything reaches the database.
         const src = readResolverSource();
-
-        // Acceptable post-fix shape: source mentions RenderPipeline.Run and
-        // passes input.SQL through it. We've already asserted the import +
-        // call above; here we additionally require that input.SQL flows
-        // through RenderPipeline.Run rather than directly to request.query.
-        //
-        // The current code contains `request.query(executableSql)` where
-        // `executableSql` is derived from input.SQL via a string concat —
-        // bypassing the pipeline entirely.
-        const directlyExecutesInputSQL = /request\.query\s*\(\s*input\.SQL\s*\)/.test(src);
-        expect(directlyExecutesInputSQL).toBe(false);
-
-        // And — the executable string must be derived from a pipeline result,
-        // not from an inline template literal that just concatenates input.SQL.
-        // Heuristic: the file should reference `FinalSQL` (the pipeline's
-        // output field) somewhere — this is what gets sent to the DB.
-        const referencesFinalSQL = /\bFinalSQL\b/.test(src);
-        expect(referencesFinalSQL).toBe(true);
+        const executesSQLItself = /request\.query\s*\(|\.ExecuteSQL\s*\(|new sql\.Request/.test(src);
+        expect(executesSQLItself).toBe(false);
+        expect(/\.RunQuery\(\{[\s\S]*SQL: input\.SQL/.test(src)).toBe(true);
     });
 });
 

package/src/__tests__/AdhocQueryResolver.pagination.test.ts

@@ -79,9 +79,13 @@ describe('AdhocQueryResolver pagination source-shape contract', () => {
         expect(/TotalRowCount:\s*recordset\.length/.test(src)).toBe(false);
     });
 
-    it('must consume the RenderPipeline PagingResult.CountSQL', () => {
+    it('must page through the read-only provider, passing MaxRows, StartRow and the timeout', () => {
         const src = readResolverSource();
-        expect(/PagingResult\??\.CountSQL/.test(src)).toBe(true);
+        // The provider's ad-hoc path renders, pages in the database and counts; the resolver
+        // must hand it the paging inputs rather than run SQL itself.
+        expect(/GetReadOnlyProvider\(/.test(src)).toBe(true);
+        expect(/\.RunQuery\(\{[\s\S]*SQL: input\.SQL[\s\S]*MaxRows: input\.MaxRows[\s\S]*StartRow: startRow[\s\S]*TimeoutSeconds/.test(src)).toBe(true);
+        expect(/from 'mssql'|new sql\.Request/.test(src)).toBe(false);
     });
 });
 

package/src/__tests__/AdhocQueryResolver.scopeGuard.test.ts

@@ -71,12 +71,12 @@ describe('AdhocQueryResolver scope guard placement', () => {
         expect(/\bIsScopeLimitedPrincipal\s*\(/.test(src)).toBe(true);
     });
 
-    it('refuses the principal BEFORE acquiring a data source', () => {
+    it('refuses the principal BEFORE acquiring the read-only provider', () => {
         // Authorization must gate the work, not run alongside it: if the guard landed after
-        // the pool were acquired (or the SQL executed), a scope-limited caller would already
+        // the provider were acquired (or the SQL executed), a scope-limited caller would already
         // have reached the database.
         const guardAt = src.indexOf('IsScopeLimitedPrincipal(');
-        const dataSourceAt = src.indexOf('GetReadOnlyDataSource(');
+        const dataSourceAt = src.indexOf('GetReadOnlyProvider(');
         expect(guardAt).toBeGreaterThan(-1);
         expect(dataSourceAt).toBeGreaterThan(-1);
         expect(guardAt).toBeLessThan(dataSourceAt);

package/src/__tests__/DeleteOptionsInput.wireShape.test.ts

@@ -0,0 +1,62 @@
+/**
+ * `DeleteOptionsInput.SkipRecordChanges` is optional on the wire.
+ *
+ * The field arrived in 6.1.0 as `Boolean!`. 5.51.x clients spell out every delete option in
+ * `options___`, and none of them knows this field, so on 6.1.0 to 6.1.3 every such delete failed
+ * schema validation with `Field "DeleteOptionsInput.SkipRecordChanges" of required type
+ * "Boolean!" was not provided` (Izzy, 6.1 certification gate 5). The server never honours the
+ * flag from the wire anyway (see SanitizeFromWire), so absent and `false` are the same request.
+ *
+ * These tests pin the built schema type, which is what a client's validation runs against, and the
+ * sanitizer's behaviour on a 5.51-shaped request that omits the field entirely.
+ */
+import 'reflect-metadata';
+import { describe, it, expect } from 'vitest';
+import { Arg, buildSchema, Mutation, Query, Resolver } from 'type-graphql';
+import type { GraphQLInputObjectType } from 'graphql';
+import { DeleteOptionsInput } from '../generic/DeleteOptionsInput.js';
+
+@Resolver()
+class ProbeResolver {
+    // type-graphql refuses a schema with no Query type; the probe only needs the mutation.
+    @Query(() => Boolean)
+    Ping(): boolean {
+        return true;
+    }
+
+    @Mutation(() => Boolean)
+    Probe(@Arg('options___', () => DeleteOptionsInput) options: DeleteOptionsInput): boolean {
+        return options.SkipRecordChanges === true;
+    }
+}
+
+describe('DeleteOptionsInput wire shape', () => {
+    it('builds SkipRecordChanges as optional with a false default, every other field required', async () => {
+        const schema = await buildSchema({ resolvers: [ProbeResolver], validate: false });
+        // Read the built type directly rather than printing the schema: printSchema runs
+        // instanceOf checks that fail when type-graphql and the test resolve separate copies
+        // of `graphql`, and the field objects carry everything the assertion needs.
+        const input = schema.getType('DeleteOptionsInput') as GraphQLInputObjectType;
+        expect(input).toBeDefined();
+        const fields = input.getFields();
+        expect(String(fields['SkipRecordChanges'].type)).toBe('Boolean');
+        expect(fields['SkipRecordChanges'].defaultValue).toBe(false);
+        for (const required of ['SkipEntityAIActions', 'SkipEntityActions', 'ReplayOnly', 'IsParentEntityDelete']) {
+            expect(String(fields[required].type), required).toBe('Boolean!');
+            expect(fields[required].defaultValue, required).toBeUndefined();
+        }
+    });
+
+    it('sanitizer treats a 5.51-shaped request that omits the field as the ordinary case', () => {
+        const legacy = {
+            SkipEntityAIActions: false,
+            SkipEntityActions: true,
+            ReplayOnly: false,
+            IsParentEntityDelete: false,
+        } as DeleteOptionsInput;
+        const sanitized = DeleteOptionsInput.SanitizeFromWire(legacy, 'Customers', 'user@example.test');
+        expect(sanitized).toBe(legacy);
+        expect(sanitized.SkipRecordChanges).toBeUndefined();
+        expect(sanitized.SkipEntityActions).toBe(true);
+    });
+});