@memberjunction/server 6.2.0-edge.5 → 6.2.0-edge.6

package/dist/types.d.ts

@@ -1,4 +1,4 @@
-import { AggregateExpression, CompositeKey, DatabaseProviderBase, UserInfo } from '@memberjunction/core';
+import { AggregateExpression, CompositeKey, DatabaseProviderBase, UserInfo, ViewPropertyValues } from '@memberjunction/core';
 import { MJUserViewEntityExtended } from '@memberjunction/core-entities';
 import { GraphQLSchema } from 'graphql';
 import sql from 'mssql';
@@ -29,6 +29,18 @@ export type UserPayload = {
      * redemption; do not treat `undefined` as `false`.
      */
     emailVerified?: boolean;
+    /**
+     * Set only on a payload elevated by `ElevateUserPayload`: the principal the elevated user stands in for (a public
+     * widget guest). The run's own records are written as `userRecord`, but the guest's conversation is written as
+     * this user, because only a conversation's owner (or a grantee) may write its messages (MJ#4791).
+     */
+    ElevatedFrom?: UserInfo;
+    /**
+     * The caller's IANA time zone, from the request's `x-mj-timezone` header, when it names a zone
+     * this runtime knows. Undefined when the header is absent or invalid; callers then use UTC. The
+     * view and query resolvers pass it on as `RunViewParams.TimeZone` / `RunQueryParams.TimeZone`.
+     */
+    TimeZone?: string;
 };
 /**
  * AppContext is the context object that is passed to all resolvers.
@@ -121,6 +133,16 @@ export type RunViewGenericParams = {
      * Propagated to `RunViewParams.IncludeBinaryFields`.
      */
     includeBinaryFields?: boolean;
+    /**
+     * Optional registered Alternate Base View logical Name (from `EntityAlternateBaseView.Name`)
+     * for this entity. Propagated to `RunViewParams.AlternateBaseView`.
+     */
+    alternateBaseView?: string;
+    /**
+     * The client's values for a stored view's properties. Propagated to `RunViewParams.Properties`.
+     * There is deliberately no server-properties field: those are set only by server code.
+     */
+    properties?: ViewPropertyValues;
 };
 export declare class MJServerEvent {
     type: 'setupComplete' | 'requestReceived' | 'requestCompleted' | 'requestFailed';

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,YAAY,EAAE,oBAAoB,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AACzG,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AACzE,OAAO,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxC,OAAO,GAAG,MAAM,OAAO,CAAC;AAIxB;;GAEG;AACH,OAAO,QAAQ,SAAS,CAAC;IACvB,UAAU,OAAO;QACf,yEAAyE;QACzE,WAAW,CAAC,EAAE,WAAW,CAAC;KAC3B;CACF;AAED,MAAM,MAAM,WAAW,GAAG;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,GAAG,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oFAAoF;IACpF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oEAAoE;IACpE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;;;OAMG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,UAAU,GAAG;IACvB;;OAEG;IACH,UAAU,EAAE,GAAG,CAAC,cAAc,CAAC;IAC/B,WAAW,EAAE,WAAW,CAAC;IACzB,WAAW,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC;IAC1B;;OAEG;IACH,WAAW,EAAE,cAAc,EAAE,CAAC;IAE9B;;OAEG;IACH,SAAS,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IAE/B;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,qBAAa,YAAY;IACvB,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,IAAI,EAAE,OAAO,GAAG,YAAY,GAAG,WAAW,GAAG,OAAO,CAAC;CACtD;AAED,qBAAa,cAAc;IACzB,UAAU,EAAE,GAAG,CAAC,cAAc,CAAC;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,OAAO,GAAG,YAAY,GAAG,WAAW,GAAG,OAAO,CAAC;gBAEzC,IAAI,EAAE;QAAC,UAAU,EAAE,GAAG,CAAC,cAAc,CAAC;QAAC,IAAI,EAAE,OAAO,GAAG,YAAY,GAAG,WAAW,GAAG,OAAO,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAC;CAQzK;AAED,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,CAAC,MAAM,EAAE,aAAa,KAAK,aAAa,CAAC;CACvD,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,QAAQ,EAAE,wBAAwB,CAAC;IACnC,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,gBAAgB,EAAE,MAAM,CAAC;IACzB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;OAGG;IACH,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB,+BAA+B,CAAC,EAAE,OAAO,CAAC;IAC1C,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,UAAU,CAAC,EAAE,mBAAmB,EAAE,CAAC;IACnC;;;;OAIG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,GAAG,cAAc,CAAC;IACrC;;;OAGG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC/B,CAAC;AAGF,qBAAa,aAAa;IACxB,IAAI,EAAE,eAAe,GAAG,iBAAiB,GAAG,kBAAkB,GAAG,eAAe,CAAC;IACjF,WAAW,EAAE,cAAc,EAAE,CAAC;IAC9B,WAAW,EAAE,WAAW,CAAC;IACzB,UAAU,EAAE,QAAQ,CAAC;CACtB;AAED,eAAO,MAAM,oBAAoB,oBAAoB,CAAC;AAEtD,wBAAsB,UAAU,CAAC,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,cAAc,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,CAAC,EAAE,GAAG,iBAarI;AAED,0CAA0C;AAC1C,wBAAsB,UAAU,CAAC,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,cAAc,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,CAAC,EAAE,GAAG,iBAErI"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,YAAY,EAAE,oBAAoB,EAAE,QAAQ,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC7H,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AACzE,OAAO,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxC,OAAO,GAAG,MAAM,OAAO,CAAC;AAIxB;;GAEG;AACH,OAAO,QAAQ,SAAS,CAAC;IACvB,UAAU,OAAO;QACf,yEAAyE;QACzE,WAAW,CAAC,EAAE,WAAW,CAAC;KAC3B;CACF;AAED,MAAM,MAAM,WAAW,GAAG;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,GAAG,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oFAAoF;IACpF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oEAAoE;IACpE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;;;OAMG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB;;;;OAIG;IACH,YAAY,CAAC,EAAE,QAAQ,CAAC;IACxB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,UAAU,GAAG;IACvB;;OAEG;IACH,UAAU,EAAE,GAAG,CAAC,cAAc,CAAC;IAC/B,WAAW,EAAE,WAAW,CAAC;IACzB,WAAW,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC;IAC1B;;OAEG;IACH,WAAW,EAAE,cAAc,EAAE,CAAC;IAE9B;;OAEG;IACH,SAAS,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IAE/B;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,qBAAa,YAAY;IACvB,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,IAAI,EAAE,OAAO,GAAG,YAAY,GAAG,WAAW,GAAG,OAAO,CAAC;CACtD;AAED,qBAAa,cAAc;IACzB,UAAU,EAAE,GAAG,CAAC,cAAc,CAAC;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,OAAO,GAAG,YAAY,GAAG,WAAW,GAAG,OAAO,CAAC;gBAEzC,IAAI,EAAE;QAAC,UAAU,EAAE,GAAG,CAAC,cAAc,CAAC;QAAC,IAAI,EAAE,OAAO,GAAG,YAAY,GAAG,WAAW,GAAG,OAAO,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAC;CAQzK;AAED,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,CAAC,MAAM,EAAE,aAAa,KAAK,aAAa,CAAC;CACvD,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,QAAQ,EAAE,wBAAwB,CAAC;IACnC,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,gBAAgB,EAAE,MAAM,CAAC;IACzB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;OAGG;IACH,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB,+BAA+B,CAAC,EAAE,OAAO,CAAC;IAC1C,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,UAAU,CAAC,EAAE,mBAAmB,EAAE,CAAC;IACnC;;;;OAIG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,GAAG,cAAc,CAAC;IACrC;;;OAGG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B;;;OAGG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;;;OAGG;IACH,UAAU,CAAC,EAAE,kBAAkB,CAAC;CACjC,CAAC;AAGF,qBAAa,aAAa;IACxB,IAAI,EAAE,eAAe,GAAG,iBAAiB,GAAG,kBAAkB,GAAG,eAAe,CAAC;IACjF,WAAW,EAAE,cAAc,EAAE,CAAC;IAC9B,WAAW,EAAE,WAAW,CAAC;IACzB,UAAU,EAAE,QAAQ,CAAC;CACtB;AAED,eAAO,MAAM,oBAAoB,oBAAoB,CAAC;AAEtD,wBAAsB,UAAU,CAAC,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,cAAc,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,CAAC,EAAE,GAAG,iBAarI;AAED,0CAA0C;AAC1C,wBAAsB,UAAU,CAAC,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,cAAc,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,CAAC,EAAE,GAAG,iBAErI"}

package/dist/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AA4DxE,MAAM,OAAO,YAAY;CAGxB;AAED,MAAM,OAAO,cAAc;IASzB,YAAY,IAA4J;QACtK,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QAClC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACtB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACtB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACxB,CAAC;CACF;AAAA,CAAC;AAmDF,MAAM,OAAO,aAAa;CAKzB;AAED,MAAM,CAAC,MAAM,oBAAoB,GAAG,iBAAiB,CAAC;AAEtD,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAA2B,EAAE,WAA6B,EAAE,WAAwB,EAAE,SAAe;IACpI,MAAM,KAAK,GAAG,IAAI,aAAa,EAAE,CAAC;IAClC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC;IAClB,KAAK,CAAC,WAAW,GAAG,WAAW,CAAC;IAChC,KAAK,CAAC,WAAW,GAAG,WAAW,CAAC;IAChC,KAAK,CAAC,UAAU,GAAG,MAAM,aAAa,EAAE,CAAC;IAEzC,MAAM,GAAG,GAAG,IAAI,OAAO,EAAE,CAAC;IAC1B,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC;IACjB,GAAG,CAAC,SAAS,GAAG,SAAS,CAAC;IAC1B,GAAG,CAAC,KAAK,GAAG,WAAW,CAAC,cAAc,CAAC;IACvC,GAAG,CAAC,SAAS,GAAG,oBAAoB,CAAC;IACrC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;AACpC,CAAC;AAED,0CAA0C;AAC1C,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAA2B,EAAE,WAA6B,EAAE,WAAwB,EAAE,SAAe;IACpI,OAAO,UAAU,CAAC,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;AAC/D,CAAC"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAwExE,MAAM,OAAO,YAAY;CAGxB;AAED,MAAM,OAAO,cAAc;IASzB,YAAY,IAA4J;QACtK,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QAClC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACtB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACtB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACxB,CAAC;CACF;AAAA,CAAC;AA6DF,MAAM,OAAO,aAAa;CAKzB;AAED,MAAM,CAAC,MAAM,oBAAoB,GAAG,iBAAiB,CAAC;AAEtD,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAA2B,EAAE,WAA6B,EAAE,WAAwB,EAAE,SAAe;IACpI,MAAM,KAAK,GAAG,IAAI,aAAa,EAAE,CAAC;IAClC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC;IAClB,KAAK,CAAC,WAAW,GAAG,WAAW,CAAC;IAChC,KAAK,CAAC,WAAW,GAAG,WAAW,CAAC;IAChC,KAAK,CAAC,UAAU,GAAG,MAAM,aAAa,EAAE,CAAC;IAEzC,MAAM,GAAG,GAAG,IAAI,OAAO,EAAE,CAAC;IAC1B,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC;IACjB,GAAG,CAAC,SAAS,GAAG,SAAS,CAAC;IAC1B,GAAG,CAAC,KAAK,GAAG,WAAW,CAAC,cAAc,CAAC;IACvC,GAAG,CAAC,SAAS,GAAG,oBAAoB,CAAC;IACrC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;AACpC,CAAC;AAED,0CAA0C;AAC1C,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAA2B,EAAE,WAA6B,EAAE,WAAwB,EAAE,SAAe;IACpI,OAAO,UAAU,CAAC,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;AAC/D,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@memberjunction/server",
-  "version": "6.2.0-edge.5",
+  "version": "6.2.0-edge.6",
   "description": "MemberJunction: This project provides API access via GraphQL to the common data store.",
   "main": "./dist/index.js",
   "types": "./src/index.ts",
@@ -19,101 +19,101 @@
     "@as-integrations/express5": "^1.0.0",
     "@graphql-tools/schema": "^10.0.38",
     "@graphql-tools/utils": "^11.0.0",
-    "@memberjunction/actions": "6.2.0-edge.5",
-    "@memberjunction/actions-apollo": "6.2.0-edge.5",
-    "@memberjunction/actions-base": "6.2.0-edge.5",
-    "@memberjunction/actions-bizapps-accounting": "6.2.0-edge.5",
-    "@memberjunction/actions-bizapps-crm": "6.2.0-edge.5",
-    "@memberjunction/actions-bizapps-formbuilders": "6.2.0-edge.5",
-    "@memberjunction/actions-bizapps-lms": "6.2.0-edge.5",
-    "@memberjunction/actions-bizapps-social": "6.2.0-edge.5",
-    "@memberjunction/actions-peopledatalabs": "6.2.0-edge.5",
-    "@memberjunction/ai": "6.2.0-edge.5",
-    "@memberjunction/ai-agent-manager": "6.2.0-edge.5",
-    "@memberjunction/ai-agent-manager-actions": "6.2.0-edge.5",
-    "@memberjunction/ai-agents": "6.2.0-edge.5",
-    "@memberjunction/ai-bridge-base": "6.2.0-edge.5",
-    "@memberjunction/ai-bridge-ringcentral": "6.2.0-edge.5",
-    "@memberjunction/ai-bridge-server": "6.2.0-edge.5",
-    "@memberjunction/ai-bridge-teams": "6.2.0-edge.5",
-    "@memberjunction/ai-bridge-twilio": "6.2.0-edge.5",
-    "@memberjunction/ai-bridge-vonage": "6.2.0-edge.5",
-    "@memberjunction/ai-core-plus": "6.2.0-edge.5",
-    "@memberjunction/ai-engine-base": "6.2.0-edge.5",
-    "@memberjunction/ai-mcp-client": "6.2.0-edge.5",
-    "@memberjunction/ai-prompts": "6.2.0-edge.5",
-    "@memberjunction/ai-provider-bundle": "6.2.0-edge.5",
-    "@memberjunction/ai-vector-dupe": "6.2.0-edge.5",
-    "@memberjunction/ai-vector-sync": "6.2.0-edge.5",
-    "@memberjunction/ai-vectordb": "6.2.0-edge.5",
-    "@memberjunction/ai-vectors-pinecone": "6.2.0-edge.5",
-    "@memberjunction/aiengine": "6.2.0-edge.5",
-    "@memberjunction/api-keys": "6.2.0-edge.5",
-    "@memberjunction/auth-providers": "6.2.0-edge.5",
-    "@memberjunction/clustering-engine": "6.2.0-edge.5",
-    "@memberjunction/codegen-lib": "6.2.0-edge.5",
-    "@memberjunction/communication-engine": "6.2.0-edge.5",
-    "@memberjunction/communication-ms-graph": "6.2.0-edge.5",
-    "@memberjunction/communication-sendgrid": "6.2.0-edge.5",
-    "@memberjunction/communication-types": "6.2.0-edge.5",
-    "@memberjunction/component-registry-client-sdk": "6.2.0-edge.5",
-    "@memberjunction/computer-use": "6.2.0-edge.5",
-    "@memberjunction/computer-use-engine": "6.2.0-edge.5",
-    "@memberjunction/config": "6.2.0-edge.5",
-    "@memberjunction/core": "6.2.0-edge.5",
-    "@memberjunction/core-actions": "6.2.0-edge.5",
-    "@memberjunction/core-entities": "6.2.0-edge.5",
-    "@memberjunction/core-entities-server": "6.2.0-edge.5",
-    "@memberjunction/credentials": "6.2.0-edge.5",
-    "@memberjunction/data-context": "6.2.0-edge.5",
-    "@memberjunction/data-context-server": "6.2.0-edge.5",
-    "@memberjunction/doc-utils": "6.2.0-edge.5",
-    "@memberjunction/encryption": "6.2.0-edge.5",
-    "@memberjunction/entity-communications-base": "6.2.0-edge.5",
-    "@memberjunction/entity-communications-server": "6.2.0-edge.5",
-    "@memberjunction/esignature": "6.2.0-edge.5",
-    "@memberjunction/external-change-detection": "6.2.0-edge.5",
-    "@memberjunction/generic-database-provider": "6.2.0-edge.5",
-    "@memberjunction/global": "6.2.0-edge.5",
-    "@memberjunction/graphql-dataprovider": "6.2.0-edge.5",
-    "@memberjunction/integration-engine": "6.2.0-edge.5",
-    "@memberjunction/integration-engine-base": "6.2.0-edge.5",
-    "@memberjunction/integration-progress-artifacts": "6.2.0-edge.5",
-    "@memberjunction/integration-schema-builder": "6.2.0-edge.5",
-    "@memberjunction/interactive-component-types": "6.2.0-edge.5",
-    "@memberjunction/lists": "6.2.0-edge.5",
-    "@memberjunction/lists-base": "6.2.0-edge.5",
-    "@memberjunction/livekit-room-server": "6.2.0-edge.5",
-    "@memberjunction/network-utils": "6.2.0-edge.5",
-    "@memberjunction/notifications": "6.2.0-edge.5",
-    "@memberjunction/postgresql-dataprovider": "6.2.0-edge.5",
-    "@memberjunction/queue": "6.2.0-edge.5",
-    "@memberjunction/record-cloning": "6.2.0-edge.5",
-    "@memberjunction/record-comparison": "6.2.0-edge.5",
-    "@memberjunction/redis-provider": "6.2.0-edge.5",
-    "@memberjunction/remote-browser-base": "6.2.0-edge.5",
-    "@memberjunction/remote-browser-cdp": "6.2.0-edge.5",
-    "@memberjunction/remote-browser-selfhost": "6.2.0-edge.5",
-    "@memberjunction/remote-browser-server": "6.2.0-edge.5",
-    "@memberjunction/scheduling-actions": "6.2.0-edge.5",
-    "@memberjunction/scheduling-base-types": "6.2.0-edge.5",
-    "@memberjunction/scheduling-engine": "6.2.0-edge.5",
-    "@memberjunction/scheduling-engine-base": "6.2.0-edge.5",
-    "@memberjunction/schema-engine": "6.2.0-edge.5",
-    "@memberjunction/search-engine": "6.2.0-edge.5",
-    "@memberjunction/server-extensions-core": "6.2.0-edge.5",
-    "@memberjunction/sql-dialect": "6.2.0-edge.5",
-    "@memberjunction/sql-parser": "6.2.0-edge.5",
-    "@memberjunction/sqlserver-dataprovider": "6.2.0-edge.5",
-    "@memberjunction/storage": "6.2.0-edge.5",
-    "@memberjunction/tag-engine": "6.2.0-edge.5",
-    "@memberjunction/tag-engine-base": "6.2.0-edge.5",
-    "@memberjunction/task-graph": "6.2.0-edge.5",
-    "@memberjunction/templates": "6.2.0-edge.5",
-    "@memberjunction/testing-engine": "6.2.0-edge.5",
-    "@memberjunction/testing-engine-base": "6.2.0-edge.5",
-    "@memberjunction/version-history": "6.2.0-edge.5",
-    "@memberjunction/work-queue-engine": "6.2.0-edge.5",
+    "@memberjunction/actions": "6.2.0-edge.6",
+    "@memberjunction/actions-apollo": "6.2.0-edge.6",
+    "@memberjunction/actions-base": "6.2.0-edge.6",
+    "@memberjunction/actions-bizapps-accounting": "6.2.0-edge.6",
+    "@memberjunction/actions-bizapps-crm": "6.2.0-edge.6",
+    "@memberjunction/actions-bizapps-formbuilders": "6.2.0-edge.6",
+    "@memberjunction/actions-bizapps-lms": "6.2.0-edge.6",
+    "@memberjunction/actions-bizapps-social": "6.2.0-edge.6",
+    "@memberjunction/actions-peopledatalabs": "6.2.0-edge.6",
+    "@memberjunction/ai": "6.2.0-edge.6",
+    "@memberjunction/ai-agent-manager": "6.2.0-edge.6",
+    "@memberjunction/ai-agent-manager-actions": "6.2.0-edge.6",
+    "@memberjunction/ai-agents": "6.2.0-edge.6",
+    "@memberjunction/ai-bridge-base": "6.2.0-edge.6",
+    "@memberjunction/ai-bridge-ringcentral": "6.2.0-edge.6",
+    "@memberjunction/ai-bridge-server": "6.2.0-edge.6",
+    "@memberjunction/ai-bridge-teams": "6.2.0-edge.6",
+    "@memberjunction/ai-bridge-twilio": "6.2.0-edge.6",
+    "@memberjunction/ai-bridge-vonage": "6.2.0-edge.6",
+    "@memberjunction/ai-core-plus": "6.2.0-edge.6",
+    "@memberjunction/ai-engine-base": "6.2.0-edge.6",
+    "@memberjunction/ai-mcp-client": "6.2.0-edge.6",
+    "@memberjunction/ai-prompts": "6.2.0-edge.6",
+    "@memberjunction/ai-provider-bundle": "6.2.0-edge.6",
+    "@memberjunction/ai-vector-dupe": "6.2.0-edge.6",
+    "@memberjunction/ai-vector-sync": "6.2.0-edge.6",
+    "@memberjunction/ai-vectordb": "6.2.0-edge.6",
+    "@memberjunction/ai-vectors-pinecone": "6.2.0-edge.6",
+    "@memberjunction/aiengine": "6.2.0-edge.6",
+    "@memberjunction/api-keys": "6.2.0-edge.6",
+    "@memberjunction/auth-providers": "6.2.0-edge.6",
+    "@memberjunction/clustering-engine": "6.2.0-edge.6",
+    "@memberjunction/codegen-lib": "6.2.0-edge.6",
+    "@memberjunction/communication-engine": "6.2.0-edge.6",
+    "@memberjunction/communication-ms-graph": "6.2.0-edge.6",
+    "@memberjunction/communication-sendgrid": "6.2.0-edge.6",
+    "@memberjunction/communication-types": "6.2.0-edge.6",
+    "@memberjunction/component-registry-client-sdk": "6.2.0-edge.6",
+    "@memberjunction/computer-use": "6.2.0-edge.6",
+    "@memberjunction/computer-use-engine": "6.2.0-edge.6",
+    "@memberjunction/config": "6.2.0-edge.6",
+    "@memberjunction/core": "6.2.0-edge.6",
+    "@memberjunction/core-actions": "6.2.0-edge.6",
+    "@memberjunction/core-entities": "6.2.0-edge.6",
+    "@memberjunction/core-entities-server": "6.2.0-edge.6",
+    "@memberjunction/credentials": "6.2.0-edge.6",
+    "@memberjunction/data-context": "6.2.0-edge.6",
+    "@memberjunction/data-context-server": "6.2.0-edge.6",
+    "@memberjunction/doc-utils": "6.2.0-edge.6",
+    "@memberjunction/encryption": "6.2.0-edge.6",
+    "@memberjunction/entity-communications-base": "6.2.0-edge.6",
+    "@memberjunction/entity-communications-server": "6.2.0-edge.6",
+    "@memberjunction/esignature": "6.2.0-edge.6",
+    "@memberjunction/external-change-detection": "6.2.0-edge.6",
+    "@memberjunction/generic-database-provider": "6.2.0-edge.6",
+    "@memberjunction/global": "6.2.0-edge.6",
+    "@memberjunction/graphql-dataprovider": "6.2.0-edge.6",
+    "@memberjunction/integration-engine": "6.2.0-edge.6",
+    "@memberjunction/integration-engine-base": "6.2.0-edge.6",
+    "@memberjunction/integration-progress-artifacts": "6.2.0-edge.6",
+    "@memberjunction/integration-schema-builder": "6.2.0-edge.6",
+    "@memberjunction/interactive-component-types": "6.2.0-edge.6",
+    "@memberjunction/lists": "6.2.0-edge.6",
+    "@memberjunction/lists-base": "6.2.0-edge.6",
+    "@memberjunction/livekit-room-server": "6.2.0-edge.6",
+    "@memberjunction/network-utils": "6.2.0-edge.6",
+    "@memberjunction/notifications": "6.2.0-edge.6",
+    "@memberjunction/postgresql-dataprovider": "6.2.0-edge.6",
+    "@memberjunction/queue": "6.2.0-edge.6",
+    "@memberjunction/record-cloning": "6.2.0-edge.6",
+    "@memberjunction/record-comparison": "6.2.0-edge.6",
+    "@memberjunction/redis-provider": "6.2.0-edge.6",
+    "@memberjunction/remote-browser-base": "6.2.0-edge.6",
+    "@memberjunction/remote-browser-cdp": "6.2.0-edge.6",
+    "@memberjunction/remote-browser-selfhost": "6.2.0-edge.6",
+    "@memberjunction/remote-browser-server": "6.2.0-edge.6",
+    "@memberjunction/scheduling-actions": "6.2.0-edge.6",
+    "@memberjunction/scheduling-base-types": "6.2.0-edge.6",
+    "@memberjunction/scheduling-engine": "6.2.0-edge.6",
+    "@memberjunction/scheduling-engine-base": "6.2.0-edge.6",
+    "@memberjunction/schema-engine": "6.2.0-edge.6",
+    "@memberjunction/search-engine": "6.2.0-edge.6",
+    "@memberjunction/server-extensions-core": "6.2.0-edge.6",
+    "@memberjunction/sql-dialect": "6.2.0-edge.6",
+    "@memberjunction/sql-parser": "6.2.0-edge.6",
+    "@memberjunction/sqlserver-dataprovider": "6.2.0-edge.6",
+    "@memberjunction/storage": "6.2.0-edge.6",
+    "@memberjunction/tag-engine": "6.2.0-edge.6",
+    "@memberjunction/tag-engine-base": "6.2.0-edge.6",
+    "@memberjunction/task-graph": "6.2.0-edge.6",
+    "@memberjunction/templates": "6.2.0-edge.6",
+    "@memberjunction/testing-engine": "6.2.0-edge.6",
+    "@memberjunction/testing-engine-base": "6.2.0-edge.6",
+    "@memberjunction/version-history": "6.2.0-edge.6",
+    "@memberjunction/work-queue-engine": "6.2.0-edge.6",
     "@octokit/auth-app": "^7.1.5",
     "@octokit/rest": "^21.1.1",
     "@types/compression": "^1.8.1",
@@ -150,10 +150,10 @@
     "uuid": "^13.0.0",
     "ws": "^8.19.0",
     "zod": "^3.25.0",
-    "@memberjunction/theme-engine": "6.2.0-edge.5"
+    "@memberjunction/theme-engine": "6.2.0-edge.6"
   },
   "devDependencies": {
-    "@memberjunction/conversations-runtime": "6.2.0-edge.5",
+    "@memberjunction/conversations-runtime": "6.2.0-edge.6",
     "@types/express": "^5.0.6",
     "pkgroll": "2.23.0",
     "rimraf": "6.1.2",

package/src/__tests__/ActionResolver.fieldSecurity.test.ts

@@ -0,0 +1,237 @@
+// type-graphql decorators call `Reflect.getMetadata`; the polyfill must load before the resolver.
+import 'reflect-metadata';
+
+/**
+ * Field-level security and identity on `RunEntityAction`.
+ *
+ * - **Identity.** The record an entity action runs on is loaded for the CALLER. Loaded with no
+ *   user, it fell back to the provider's current user (the system user on a server), which is
+ *   full width and ignores the caller's row-level security as well.
+ * - **Output.** `ResultData` echoes the run's parameters back to the caller. The record bound as
+ *   `'Entity Object Data'` (a plain copy of its field values) and any entity object among the
+ *   parameters are projected for the caller; values of unknown shape are left alone.
+ *
+ * `RunAction` output gets the same backstop: entity objects are sent as their values projected for
+ * the caller, and plain objects shaped like a row of a field-secured entity lose the caller's
+ * denied keys.
+ */
+import { describe, it, expect, vi, beforeEach } from 'vitest';
+
+vi.mock('type-graphql', () => {
+    const noopDecorator = () => () => undefined;
+    return {
+        Resolver: noopDecorator, Mutation: noopDecorator, Query: noopDecorator, Subscription: noopDecorator,
+        ObjectType: noopDecorator, InputType: noopDecorator, Field: noopDecorator, Arg: noopDecorator,
+        Args: noopDecorator, Ctx: noopDecorator, PubSub: noopDecorator, Root: noopDecorator,
+        Directive: noopDecorator, Authorized: noopDecorator, UseMiddleware: noopDecorator,
+        createUnionType: () => class {},
+        AuthorizationError: class AuthorizationError extends Error {},
+        Float: class {}, Int: class {}, ID: class {},
+    };
+});
+
+const hoisted = vi.hoisted(() => ({
+    runEntityAction: vi.fn(),
+    runAction: vi.fn(),
+    entityActions: [] as unknown[],
+    actionParams: [] as unknown[],
+}));
+
+vi.mock('@memberjunction/actions', () => ({
+    ActionEngineServer: {
+        Instance: {
+            get ActionParams() { return hoisted.actionParams; },
+            Actions: [{ ID: 'AC000000-0000-4000-8000-000000000001', Name: 'Return Rows' }],
+            Config: vi.fn(async () => undefined),
+            RunAction: hoisted.runAction,
+        },
+    },
+    EntityActionEngineServer: {
+        Instance: {
+            Config: vi.fn(async () => undefined),
+            get EntityActions() { return hoisted.entityActions; },
+            RunEntityAction: hoisted.runEntityAction,
+        },
+    },
+}));
+
+import { BaseEntity, EntityInfo, UserInfo } from '@memberjunction/core';
+import { ActionResolver, type EntityActionInput, type RunActionInput } from '../resolvers/ActionResolver.js';
+import type { AppContext } from '../types.js';
+import { EMPLOYEES_ENTITY_ID, EmployeeEntity, FullWidthEmployeeRow, HRUser, INTERN_ROLE_ID, Intern, SECRET_SALARY } from './fieldSecurityFixtures.js';
+
+const ENTITY_ACTION_ID = 'EA000000-0000-4000-8000-000000000001';
+const RECORD_PARAM_ID = 'AP000000-0000-4000-8000-000000000001';
+
+class EmployeeObject extends BaseEntity {}
+
+/** An entity object holding every column: what a load with no user produces on a server. */
+async function fullWidthEntityObject(entityInfo: EntityInfo): Promise<BaseEntity> {
+    const entity = new EmployeeObject(entityInfo);
+    await entity.LoadFromData(FullWidthEmployeeRow());
+    return entity;
+}
+
+function context(entityInfo: EntityInfo, getEntityObject: ReturnType<typeof vi.fn>): AppContext {
+    const provider = { Entities: [entityInfo], EntityByID: () => undefined, GetEntityObject: getEntityObject };
+    return {
+        providers: [{ type: 'Read-Only', provider }],
+        userPayload: { userRecord: Intern(), email: 'intern-1@test.com' },
+    } as unknown as AppContext;
+}
+
+const input = (): EntityActionInput => ({
+    EntityActionID: ENTITY_ACTION_ID,
+    InvocationType: 'SingleRecord',
+    EntityName: 'Employees',
+    PrimaryKey: { KeyValuePairs: [{ Key: 'ID', Value: 'emp-1' }] },
+} as unknown as EntityActionInput);
+
+let entityInfo: EntityInfo;
+let getEntityObject: ReturnType<typeof vi.fn>;
+
+beforeEach(async () => {
+    vi.clearAllMocks();
+    entityInfo = EmployeeEntity();
+    getEntityObject = vi.fn(async () => ({ InnerLoad: vi.fn(async () => true) }));
+    hoisted.entityActions.length = 0;
+    hoisted.entityActions.push({
+        ID: ENTITY_ACTION_ID,
+        EntityID: EMPLOYEES_ENTITY_ID,
+        Params: [{ ActionParamID: RECORD_PARAM_ID, ValueType: 'Entity Object Data' }],
+    });
+    hoisted.actionParams.length = 0;
+    hoisted.actionParams.push({ ID: RECORD_PARAM_ID, Name: 'Record' });
+    hoisted.runEntityAction.mockResolvedValue({ Success: true, Message: 'ok', Params: [] });
+});
+
+describe('RunEntityAction: the record is loaded for the caller', () => {
+    it('REGRESSION: loads the bound record with the caller as its user', async () => {
+        await new ActionResolver().RunEntityAction(input(), context(entityInfo, getEntityObject));
+        expect(getEntityObject).toHaveBeenCalledWith('Employees', expect.objectContaining({ ID: 'intern-1' }));
+    });
+
+    it('refuses to run on a record the caller cannot load, with no hint whether it exists', async () => {
+        getEntityObject.mockResolvedValue({ InnerLoad: vi.fn(async () => false) });
+        const result = await new ActionResolver().RunEntityAction(input(), context(entityInfo, getEntityObject));
+        expect(result.Success).toBe(false);
+        expect(result.Message).toContain('Record not found or access denied');
+        expect(hoisted.runEntityAction).not.toHaveBeenCalled();
+    });
+});
+
+describe('RunEntityAction: echoed parameters are projected for the caller', () => {
+    it("REGRESSION: the 'Entity Object Data' parameter never carries a denied value", async () => {
+        const params = [{ Name: 'Record', Value: FullWidthEmployeeRow(), Type: 'Input' }];
+        hoisted.runEntityAction.mockResolvedValue({ Success: true, Message: 'ok', Params: params, RunParams: { Params: params } });
+
+        const result = await new ActionResolver().RunEntityAction(input(), context(entityInfo, getEntityObject));
+
+        expect(result.Success).toBe(true);
+        expect(result.ResultData).not.toContain(String(SECRET_SALARY));
+        expect(JSON.parse(result.ResultData!).Params[0].Value).toEqual({ ID: 'emp-1', Name: 'Ada', Notes: 'n' });
+    });
+
+    it('REGRESSION: an entity object among the parameters is sent as its projected field values', async () => {
+        const params = [{ Name: 'Entity', Value: await fullWidthEntityObject(entityInfo), Type: 'Input' }];
+        hoisted.runEntityAction.mockResolvedValue({ Success: true, Message: 'ok', Params: params, RunParams: { Params: params } });
+
+        const result = await new ActionResolver().RunEntityAction(input(), context(entityInfo, getEntityObject));
+
+        expect(result.ResultData).not.toContain(String(SECRET_SALARY));
+        expect(JSON.parse(result.ResultData!).Params[0].Value).toMatchObject({ ID: 'emp-1', Name: 'Ada' });
+    });
+
+    it('REGRESSION: an entity object of an entity the caller cannot read is sent as null, not as its other fields', async () => {
+        const unreadable = EmployeeEntity();
+        unreadable.Permissions.splice(0, unreadable.Permissions.length, ...unreadable.Permissions.filter(p => p.RoleID !== INTERN_ROLE_ID));
+        const object = await fullWidthEntityObject(unreadable);
+        const params = [
+            { Name: 'One', Value: object, Type: 'Output' },
+            { Name: 'Many', Value: [object], Type: 'Output' },
+        ];
+        hoisted.runEntityAction.mockResolvedValue({ Success: true, Message: 'ok', Params: params, RunParams: { Params: params } });
+
+        const result = await new ActionResolver().RunEntityAction(input(), context(entityInfo, getEntityObject));
+
+        const sent = JSON.parse(result.ResultData!) as { Params: { Value: unknown }[]; RunParams: { Params: { Value: unknown }[] } };
+        expect(sent.Params[0].Value).toBeNull();
+        expect(sent.Params[1].Value).toEqual([null]);
+        expect(sent.RunParams.Params[0].Value).toBeNull();
+        expect(result.ResultData).not.toContain('Ada');
+    });
+
+    it('leaves a parameter of unknown shape alone', async () => {
+        const params = [{ Name: 'Other', Value: { Salary: 1 }, Type: 'Output' }];
+        hoisted.runEntityAction.mockResolvedValue({ Success: true, Message: 'ok', Params: params });
+
+        const result = await new ActionResolver().RunEntityAction(input(), context(entityInfo, getEntityObject));
+
+        expect(JSON.parse(result.ResultData!).Params[0].Value).toEqual({ Salary: 1 });
+    });
+});
+
+// ─── RunAction: general action output ────────────────────────────────────────
+
+const ACTION_ID = 'AC000000-0000-4000-8000-000000000001';
+
+/** An Owner may run any action, so these tests reach the output without the authorization lookup. */
+function owner(user: UserInfo): UserInfo {
+    user.Type = 'Owner';
+    return user;
+}
+
+function runActionContext(entity: EntityInfo, user: UserInfo): AppContext {
+    const provider = { Entities: [entity], EntityByID: () => undefined };
+    return {
+        providers: [{ type: 'Read-Write', provider }],
+        userPayload: { userRecord: user, email: user.Email },
+    } as unknown as AppContext;
+}
+
+async function runActionReturning(value: unknown, user: UserInfo): Promise<unknown> {
+    hoisted.runAction.mockResolvedValue({ Success: true, Message: 'ok', Params: [{ Name: 'Rows', Type: 'Output', Value: value }] });
+    const result = await new ActionResolver().RunAction({ ActionID: ACTION_ID } as RunActionInput, runActionContext(entityInfo, user));
+    expect(result.Success).toBe(true);
+    return JSON.parse(result.ResultData!)[0].Value;
+}
+
+describe('RunAction: output parameters are projected for the caller', () => {
+    it('REGRESSION: a system-loaded entity object is sent as its projected values to a restricted caller', async () => {
+        const value: BaseEntity = await fullWidthEntityObject(entityInfo);
+        expect(await runActionReturning(value, owner(Intern()))).toEqual({ ID: 'emp-1', Name: 'Ada', Notes: 'n' });
+    });
+
+    it('REGRESSION: the same entity object keeps the field for a caller allowed to read it', async () => {
+        const value: BaseEntity = await fullWidthEntityObject(entityInfo);
+        expect(await runActionReturning(value, owner(HRUser()))).toMatchObject({ ID: 'emp-1', Salary: SECRET_SALARY });
+    });
+
+    it('REGRESSION: a GetAll()-shaped row of a field-secured entity loses the denied field', async () => {
+        const value = await runActionReturning([FullWidthEmployeeRow()], owner(Intern()));
+        expect(value).toEqual([{ ID: 'emp-1', Name: 'Ada', Notes: 'n' }]);
+        expect(JSON.stringify(value)).not.toContain(String(SECRET_SALARY));
+    });
+
+    it('leaves a non-entity-shaped object untouched', async () => {
+        expect(await runActionReturning({ Salary: 1, Total: 2 }, owner(Intern()))).toEqual({ Salary: 1, Total: 2 });
+    });
+
+    it("REGRESSION: an entity object of an entity the caller cannot read is not exposed", async () => {
+        const unreadable = EmployeeEntity();
+        unreadable.Permissions.splice(0, unreadable.Permissions.length, ...unreadable.Permissions.filter(p => p.RoleID !== INTERN_ROLE_ID));
+        const object = await fullWidthEntityObject(unreadable);
+        hoisted.runAction.mockResolvedValue({ Success: true, Message: 'ok', Params: [
+            { Name: 'One', Type: 'Output', Value: object },
+            { Name: 'Many', Type: 'Output', Value: [object] },
+        ] });
+        const result = await new ActionResolver().RunAction({ ActionID: ACTION_ID } as RunActionInput, runActionContext(unreadable, owner(Intern())));
+        // Exactly the shape this output had before entity objects were projected: the single object's
+        // Value dropped, the array's item nulled (and, as ever, the list serialized index-keyed).
+        expect(JSON.parse(result.ResultData!)).toEqual({ 0: { Name: 'One', Type: 'Output' }, 1: { Name: 'Many', Type: 'Output', Value: [null] } });
+    });
+
+    it('sends the full row to a caller denied nothing', async () => {
+        expect(await runActionReturning([FullWidthEmployeeRow()], owner(HRUser()))).toEqual([FullWidthEmployeeRow()]);
+    });
+});