@memberjunction/server 6.2.0-edge.6 → 6.2.0-edge.7

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@memberjunction/server",
-  "version": "6.2.0-edge.6",
+  "version": "6.2.0-edge.7",
   "description": "MemberJunction: This project provides API access via GraphQL to the common data store.",
   "main": "./dist/index.js",
   "types": "./src/index.ts",
@@ -19,101 +19,101 @@
     "@as-integrations/express5": "^1.0.0",
     "@graphql-tools/schema": "^10.0.38",
     "@graphql-tools/utils": "^11.0.0",
-    "@memberjunction/actions": "6.2.0-edge.6",
-    "@memberjunction/actions-apollo": "6.2.0-edge.6",
-    "@memberjunction/actions-base": "6.2.0-edge.6",
-    "@memberjunction/actions-bizapps-accounting": "6.2.0-edge.6",
-    "@memberjunction/actions-bizapps-crm": "6.2.0-edge.6",
-    "@memberjunction/actions-bizapps-formbuilders": "6.2.0-edge.6",
-    "@memberjunction/actions-bizapps-lms": "6.2.0-edge.6",
-    "@memberjunction/actions-bizapps-social": "6.2.0-edge.6",
-    "@memberjunction/actions-peopledatalabs": "6.2.0-edge.6",
-    "@memberjunction/ai": "6.2.0-edge.6",
-    "@memberjunction/ai-agent-manager": "6.2.0-edge.6",
-    "@memberjunction/ai-agent-manager-actions": "6.2.0-edge.6",
-    "@memberjunction/ai-agents": "6.2.0-edge.6",
-    "@memberjunction/ai-bridge-base": "6.2.0-edge.6",
-    "@memberjunction/ai-bridge-ringcentral": "6.2.0-edge.6",
-    "@memberjunction/ai-bridge-server": "6.2.0-edge.6",
-    "@memberjunction/ai-bridge-teams": "6.2.0-edge.6",
-    "@memberjunction/ai-bridge-twilio": "6.2.0-edge.6",
-    "@memberjunction/ai-bridge-vonage": "6.2.0-edge.6",
-    "@memberjunction/ai-core-plus": "6.2.0-edge.6",
-    "@memberjunction/ai-engine-base": "6.2.0-edge.6",
-    "@memberjunction/ai-mcp-client": "6.2.0-edge.6",
-    "@memberjunction/ai-prompts": "6.2.0-edge.6",
-    "@memberjunction/ai-provider-bundle": "6.2.0-edge.6",
-    "@memberjunction/ai-vector-dupe": "6.2.0-edge.6",
-    "@memberjunction/ai-vector-sync": "6.2.0-edge.6",
-    "@memberjunction/ai-vectordb": "6.2.0-edge.6",
-    "@memberjunction/ai-vectors-pinecone": "6.2.0-edge.6",
-    "@memberjunction/aiengine": "6.2.0-edge.6",
-    "@memberjunction/api-keys": "6.2.0-edge.6",
-    "@memberjunction/auth-providers": "6.2.0-edge.6",
-    "@memberjunction/clustering-engine": "6.2.0-edge.6",
-    "@memberjunction/codegen-lib": "6.2.0-edge.6",
-    "@memberjunction/communication-engine": "6.2.0-edge.6",
-    "@memberjunction/communication-ms-graph": "6.2.0-edge.6",
-    "@memberjunction/communication-sendgrid": "6.2.0-edge.6",
-    "@memberjunction/communication-types": "6.2.0-edge.6",
-    "@memberjunction/component-registry-client-sdk": "6.2.0-edge.6",
-    "@memberjunction/computer-use": "6.2.0-edge.6",
-    "@memberjunction/computer-use-engine": "6.2.0-edge.6",
-    "@memberjunction/config": "6.2.0-edge.6",
-    "@memberjunction/core": "6.2.0-edge.6",
-    "@memberjunction/core-actions": "6.2.0-edge.6",
-    "@memberjunction/core-entities": "6.2.0-edge.6",
-    "@memberjunction/core-entities-server": "6.2.0-edge.6",
-    "@memberjunction/credentials": "6.2.0-edge.6",
-    "@memberjunction/data-context": "6.2.0-edge.6",
-    "@memberjunction/data-context-server": "6.2.0-edge.6",
-    "@memberjunction/doc-utils": "6.2.0-edge.6",
-    "@memberjunction/encryption": "6.2.0-edge.6",
-    "@memberjunction/entity-communications-base": "6.2.0-edge.6",
-    "@memberjunction/entity-communications-server": "6.2.0-edge.6",
-    "@memberjunction/esignature": "6.2.0-edge.6",
-    "@memberjunction/external-change-detection": "6.2.0-edge.6",
-    "@memberjunction/generic-database-provider": "6.2.0-edge.6",
-    "@memberjunction/global": "6.2.0-edge.6",
-    "@memberjunction/graphql-dataprovider": "6.2.0-edge.6",
-    "@memberjunction/integration-engine": "6.2.0-edge.6",
-    "@memberjunction/integration-engine-base": "6.2.0-edge.6",
-    "@memberjunction/integration-progress-artifacts": "6.2.0-edge.6",
-    "@memberjunction/integration-schema-builder": "6.2.0-edge.6",
-    "@memberjunction/interactive-component-types": "6.2.0-edge.6",
-    "@memberjunction/lists": "6.2.0-edge.6",
-    "@memberjunction/lists-base": "6.2.0-edge.6",
-    "@memberjunction/livekit-room-server": "6.2.0-edge.6",
-    "@memberjunction/network-utils": "6.2.0-edge.6",
-    "@memberjunction/notifications": "6.2.0-edge.6",
-    "@memberjunction/postgresql-dataprovider": "6.2.0-edge.6",
-    "@memberjunction/queue": "6.2.0-edge.6",
-    "@memberjunction/record-cloning": "6.2.0-edge.6",
-    "@memberjunction/record-comparison": "6.2.0-edge.6",
-    "@memberjunction/redis-provider": "6.2.0-edge.6",
-    "@memberjunction/remote-browser-base": "6.2.0-edge.6",
-    "@memberjunction/remote-browser-cdp": "6.2.0-edge.6",
-    "@memberjunction/remote-browser-selfhost": "6.2.0-edge.6",
-    "@memberjunction/remote-browser-server": "6.2.0-edge.6",
-    "@memberjunction/scheduling-actions": "6.2.0-edge.6",
-    "@memberjunction/scheduling-base-types": "6.2.0-edge.6",
-    "@memberjunction/scheduling-engine": "6.2.0-edge.6",
-    "@memberjunction/scheduling-engine-base": "6.2.0-edge.6",
-    "@memberjunction/schema-engine": "6.2.0-edge.6",
-    "@memberjunction/search-engine": "6.2.0-edge.6",
-    "@memberjunction/server-extensions-core": "6.2.0-edge.6",
-    "@memberjunction/sql-dialect": "6.2.0-edge.6",
-    "@memberjunction/sql-parser": "6.2.0-edge.6",
-    "@memberjunction/sqlserver-dataprovider": "6.2.0-edge.6",
-    "@memberjunction/storage": "6.2.0-edge.6",
-    "@memberjunction/tag-engine": "6.2.0-edge.6",
-    "@memberjunction/tag-engine-base": "6.2.0-edge.6",
-    "@memberjunction/task-graph": "6.2.0-edge.6",
-    "@memberjunction/templates": "6.2.0-edge.6",
-    "@memberjunction/testing-engine": "6.2.0-edge.6",
-    "@memberjunction/testing-engine-base": "6.2.0-edge.6",
-    "@memberjunction/version-history": "6.2.0-edge.6",
-    "@memberjunction/work-queue-engine": "6.2.0-edge.6",
+    "@memberjunction/actions": "6.2.0-edge.7",
+    "@memberjunction/actions-apollo": "6.2.0-edge.7",
+    "@memberjunction/actions-base": "6.2.0-edge.7",
+    "@memberjunction/actions-bizapps-accounting": "6.2.0-edge.7",
+    "@memberjunction/actions-bizapps-crm": "6.2.0-edge.7",
+    "@memberjunction/actions-bizapps-formbuilders": "6.2.0-edge.7",
+    "@memberjunction/actions-bizapps-lms": "6.2.0-edge.7",
+    "@memberjunction/actions-bizapps-social": "6.2.0-edge.7",
+    "@memberjunction/actions-peopledatalabs": "6.2.0-edge.7",
+    "@memberjunction/ai": "6.2.0-edge.7",
+    "@memberjunction/ai-agent-manager": "6.2.0-edge.7",
+    "@memberjunction/ai-agent-manager-actions": "6.2.0-edge.7",
+    "@memberjunction/ai-agents": "6.2.0-edge.7",
+    "@memberjunction/ai-bridge-base": "6.2.0-edge.7",
+    "@memberjunction/ai-bridge-ringcentral": "6.2.0-edge.7",
+    "@memberjunction/ai-bridge-server": "6.2.0-edge.7",
+    "@memberjunction/ai-bridge-teams": "6.2.0-edge.7",
+    "@memberjunction/ai-bridge-twilio": "6.2.0-edge.7",
+    "@memberjunction/ai-bridge-vonage": "6.2.0-edge.7",
+    "@memberjunction/ai-core-plus": "6.2.0-edge.7",
+    "@memberjunction/ai-engine-base": "6.2.0-edge.7",
+    "@memberjunction/ai-mcp-client": "6.2.0-edge.7",
+    "@memberjunction/ai-prompts": "6.2.0-edge.7",
+    "@memberjunction/ai-provider-bundle": "6.2.0-edge.7",
+    "@memberjunction/ai-vector-dupe": "6.2.0-edge.7",
+    "@memberjunction/ai-vector-sync": "6.2.0-edge.7",
+    "@memberjunction/ai-vectordb": "6.2.0-edge.7",
+    "@memberjunction/ai-vectors-pinecone": "6.2.0-edge.7",
+    "@memberjunction/aiengine": "6.2.0-edge.7",
+    "@memberjunction/api-keys": "6.2.0-edge.7",
+    "@memberjunction/auth-providers": "6.2.0-edge.7",
+    "@memberjunction/clustering-engine": "6.2.0-edge.7",
+    "@memberjunction/codegen-lib": "6.2.0-edge.7",
+    "@memberjunction/communication-engine": "6.2.0-edge.7",
+    "@memberjunction/communication-ms-graph": "6.2.0-edge.7",
+    "@memberjunction/communication-sendgrid": "6.2.0-edge.7",
+    "@memberjunction/communication-types": "6.2.0-edge.7",
+    "@memberjunction/component-registry-client-sdk": "6.2.0-edge.7",
+    "@memberjunction/computer-use": "6.2.0-edge.7",
+    "@memberjunction/computer-use-engine": "6.2.0-edge.7",
+    "@memberjunction/config": "6.2.0-edge.7",
+    "@memberjunction/core": "6.2.0-edge.7",
+    "@memberjunction/core-actions": "6.2.0-edge.7",
+    "@memberjunction/core-entities": "6.2.0-edge.7",
+    "@memberjunction/core-entities-server": "6.2.0-edge.7",
+    "@memberjunction/credentials": "6.2.0-edge.7",
+    "@memberjunction/data-context": "6.2.0-edge.7",
+    "@memberjunction/data-context-server": "6.2.0-edge.7",
+    "@memberjunction/doc-utils": "6.2.0-edge.7",
+    "@memberjunction/encryption": "6.2.0-edge.7",
+    "@memberjunction/entity-communications-base": "6.2.0-edge.7",
+    "@memberjunction/entity-communications-server": "6.2.0-edge.7",
+    "@memberjunction/esignature": "6.2.0-edge.7",
+    "@memberjunction/external-change-detection": "6.2.0-edge.7",
+    "@memberjunction/generic-database-provider": "6.2.0-edge.7",
+    "@memberjunction/global": "6.2.0-edge.7",
+    "@memberjunction/graphql-dataprovider": "6.2.0-edge.7",
+    "@memberjunction/integration-engine": "6.2.0-edge.7",
+    "@memberjunction/integration-engine-base": "6.2.0-edge.7",
+    "@memberjunction/integration-progress-artifacts": "6.2.0-edge.7",
+    "@memberjunction/integration-schema-builder": "6.2.0-edge.7",
+    "@memberjunction/interactive-component-types": "6.2.0-edge.7",
+    "@memberjunction/lists": "6.2.0-edge.7",
+    "@memberjunction/lists-base": "6.2.0-edge.7",
+    "@memberjunction/livekit-room-server": "6.2.0-edge.7",
+    "@memberjunction/network-utils": "6.2.0-edge.7",
+    "@memberjunction/notifications": "6.2.0-edge.7",
+    "@memberjunction/postgresql-dataprovider": "6.2.0-edge.7",
+    "@memberjunction/queue": "6.2.0-edge.7",
+    "@memberjunction/record-cloning": "6.2.0-edge.7",
+    "@memberjunction/record-comparison": "6.2.0-edge.7",
+    "@memberjunction/redis-provider": "6.2.0-edge.7",
+    "@memberjunction/remote-browser-base": "6.2.0-edge.7",
+    "@memberjunction/remote-browser-cdp": "6.2.0-edge.7",
+    "@memberjunction/remote-browser-selfhost": "6.2.0-edge.7",
+    "@memberjunction/remote-browser-server": "6.2.0-edge.7",
+    "@memberjunction/scheduling-actions": "6.2.0-edge.7",
+    "@memberjunction/scheduling-base-types": "6.2.0-edge.7",
+    "@memberjunction/scheduling-engine": "6.2.0-edge.7",
+    "@memberjunction/scheduling-engine-base": "6.2.0-edge.7",
+    "@memberjunction/schema-engine": "6.2.0-edge.7",
+    "@memberjunction/search-engine": "6.2.0-edge.7",
+    "@memberjunction/server-extensions-core": "6.2.0-edge.7",
+    "@memberjunction/sql-dialect": "6.2.0-edge.7",
+    "@memberjunction/sql-parser": "6.2.0-edge.7",
+    "@memberjunction/sqlserver-dataprovider": "6.2.0-edge.7",
+    "@memberjunction/storage": "6.2.0-edge.7",
+    "@memberjunction/tag-engine": "6.2.0-edge.7",
+    "@memberjunction/tag-engine-base": "6.2.0-edge.7",
+    "@memberjunction/task-graph": "6.2.0-edge.7",
+    "@memberjunction/templates": "6.2.0-edge.7",
+    "@memberjunction/testing-engine": "6.2.0-edge.7",
+    "@memberjunction/testing-engine-base": "6.2.0-edge.7",
+    "@memberjunction/version-history": "6.2.0-edge.7",
+    "@memberjunction/work-queue-engine": "6.2.0-edge.7",
     "@octokit/auth-app": "^7.1.5",
     "@octokit/rest": "^21.1.1",
     "@types/compression": "^1.8.1",
@@ -150,10 +150,10 @@
     "uuid": "^13.0.0",
     "ws": "^8.19.0",
     "zod": "^3.25.0",
-    "@memberjunction/theme-engine": "6.2.0-edge.6"
+    "@memberjunction/theme-engine": "6.2.0-edge.7"
   },
   "devDependencies": {
-    "@memberjunction/conversations-runtime": "6.2.0-edge.6",
+    "@memberjunction/conversations-runtime": "6.2.0-edge.7",
     "@types/express": "^5.0.6",
     "pkgroll": "2.23.0",
     "rimraf": "6.1.2",

package/src/__tests__/APIKeyScopeAuth.test.ts

@@ -155,18 +155,14 @@ describe('CheckAPIKeyScope', () => {
             expect(result).toEqual({ Allowed: false, Checked: true, Reason: 'API key not found' });
         });
 
-        it('KNOWN GAP: the apiKeyId is interpolated verbatim into the RunView ExtraFilter', async () => {
-            // The apiKeyId originates server-side (context.userPayload.apiKeyId, set only
-            // after key validation), so the trust boundary is upstream — but this layer
-            // performs no escaping of its own. Pinned so that if the call site ever
-            // starts accepting client-supplied IDs, this assertion is the reminder.
+        it('escapes single quotes in apiKeyId before interpolating into the RunView ExtraFilter', async () => {
             const hostile = "abc' OR '1'='1";
             keyLookup = { Success: true, Results: [] };
 
             await CheckAPIKeyScope(hostile, 'view:run', makeUser(), { throwOnDenied: false });
 
             expect(capturedRunViewParams[0].EntityName).toBe('MJ: API Keys');
-            expect(capturedRunViewParams[0].ExtraFilter).toBe(`ID='abc' OR '1'='1'`);
+            expect(capturedRunViewParams[0].ExtraFilter).toBe(`ID='abc'' OR ''1''=''1'`);
         });
     });
 
@@ -206,7 +202,7 @@ describe('CheckAPIKeyScope', () => {
             expect(result).toEqual({ Allowed: false, Checked: true, Reason: 'Application is not active: MJAPI' });
         });
 
-        it('KNOWN GAP: the applicationName option is interpolated verbatim into the application filter', async () => {
+        it('escapes single quotes in applicationName before interpolating into the application filter', async () => {
             appLookup = { Success: true, Results: [] };
             const hostile = "MJAPI' OR Name<>'";
 
@@ -216,7 +212,7 @@ describe('CheckAPIKeyScope', () => {
             });
 
             expect(capturedRunViewParams[1].EntityName).toBe('MJ: API Applications');
-            expect(capturedRunViewParams[1].ExtraFilter).toBe(`Name='MJAPI' OR Name<>''`);
+            expect(capturedRunViewParams[1].ExtraFilter).toBe(`Name='MJAPI'' OR Name<>'''`);
         });
     });
 

package/src/__tests__/ActiveOperations.test.ts

@@ -0,0 +1,68 @@
+/**
+ * plan.md: "In the UI for the integration ... there shouldbe an area that shows thigns that are
+ * running actively, this can be syncs, rsu, discovery, etc." and, crucially, "Let us say i clear
+ * browser cache and then i go to that integration page, i should see the same steps i mentioned
+ * hapepning there to". Everything here is derived server-side for exactly that reason.
+ *
+ * A surface previously had to fan out to four queries and stitch them, and each got the
+ * attribution wrong in its own way. The two rules that kept breaking are pinned below.
+ */
+import { describe, it, expect } from 'vitest';
+import { readFileSync } from 'node:fs';
+import { join } from 'node:path';
+
+const SRC = readFileSync(join(__dirname, '..', 'resolvers', 'IntegrationDiscoveryResolver.ts'), 'utf-8');
+
+function methodBody(name: string): string {
+  const i = SRC.indexOf(`async ${name}(`);
+  expect(i, `${name} not found`).toBeGreaterThan(-1);
+  const rest = SRC.slice(i);
+  const end = rest.search(/\n    @(Query|Mutation)\(/);
+  return end === -1 ? rest : rest.slice(0, end);
+}
+
+describe('IntegrationGetActiveOperations', () => {
+  const body = () => methodBody('IntegrationGetActiveOperations');
+
+  it('exists and is authorized per connection', () => {
+    expect(SRC).toMatch(/@Query\(\(\) => ActiveOperationsOutput\)/);
+    expect(body()).toMatch(/userCanReadCompanyIntegration\(/);
+  });
+
+  it('covers sync, in-flight runs and RSU in ONE call', () => {
+    const b = body();
+    expect(b).toMatch(/GetSyncProgressAsync\(/);
+    expect(b).toMatch(/ListRuns\(/);
+    expect(b).toMatch(/RuntimeSchemaManager\.Instance\.GetStatus\(\)/);
+  });
+
+  it('never narrates a ConnectorCreation run as a sync', () => {
+    // it fetches nothing; calling it a sync made first-time setup claim record counts it never had
+    const b = body();
+    expect(b).toMatch(/kind === 'SyncRun'/);
+    expect(b).not.toMatch(/Kind: 'sync'[\s\S]{0,200}ConnectorCreation/);
+  });
+
+  it('labels a process-wide RSU as workspace scope, not this connection', () => {
+    const b = body();
+    expect(b).toMatch(/rsuNamesThisConnection/);
+    expect(b).toMatch(/Scope: 'workspace'/);
+  });
+
+  it('only reports the process RSU when no artifact tied one to this connection', () => {
+    expect(body()).toMatch(/rsu\?\.Running && !rsuNamesThisConnection/);
+  });
+
+  it('marks only the sync cancellable', () => {
+    const b = body();
+    const syncBlock = b.slice(b.indexOf("Kind: 'sync'"), b.indexOf("Kind: 'sync'") + 700);
+    expect(syncBlock).toMatch(/Cancellable: true/);
+    const rsuBlock = b.slice(b.indexOf("Scope: 'workspace'"));
+    expect(rsuBlock).toMatch(/Cancellable: false/);
+  });
+
+  it('surfaces the maintenance lock reason, so a refusal can say why', () => {
+    expect(body()).toMatch(/GetMaintenanceLock\(/);
+    expect(body()).toMatch(/MaintenanceLockReason/);
+  });
+});

package/src/__tests__/AgentSessionResolver.ownership.test.ts

@@ -128,6 +128,19 @@ describe('CloseAgentSession close reason (MJ#6013)', () => {
         expect(closeSessionMock).toHaveBeenCalledWith(SESSION, expect.anything(), provider, 'Explicit');
     });
 
+    it('a client may stamp TimeLimit (CloseSession verifies it); Janitor, Shutdown and Idle are still refused', async () => {
+        const resolver = new AgentSessionResolver();
+        const provider = makeProvider(true, 'visitor-1');
+        const ctx = makeCtx(guest('visitor-1'), provider);
+        await expect(resolver.CloseAgentSession(SESSION, ctx, 'TimeLimit')).resolves.toBe(true);
+        expect(closeSessionMock).toHaveBeenCalledWith(SESSION, expect.anything(), provider, 'TimeLimit');
+        closeSessionMock.mockClear();
+        for (const reason of ['Janitor', 'Shutdown', 'Idle']) {
+            await expect(resolver.CloseAgentSession(SESSION, ctx, reason)).rejects.toThrow(/Unsupported close reason/);
+        }
+        expect(closeSessionMock).not.toHaveBeenCalled();
+    });
+
     it('refuses a reason only the server may stamp', async () => {
         const resolver = new AgentSessionResolver();
         const provider = makeProvider(true, 'visitor-1');

package/src/__tests__/AssertTargetConfigs.test.ts

@@ -0,0 +1,75 @@
+/**
+ * An apply whose selected objects all drop out of buildTargetConfigs must fail, not run RSU on
+ * nothing (PropFuel, 2026-10-29). A selection that produces even one table must still apply.
+ */
+import { describe, it, expect } from 'vitest';
+import { readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import type { TargetTableConfig } from '@memberjunction/integration-schema-builder';
+import { AssertTargetConfigs, NewTargetConfigDrops, SampleNames } from '../integration/TargetConfigGuard.js';
+
+const selected = [{ SourceObjectName: 'clicks' }, { SourceObjectName: 'sends' }, { SourceObjectName: 'opens' }];
+const oneTable = [{ SchemaName: 'propfuel', TableName: 'clicks' } as TargetTableConfig];
+
+describe('AssertTargetConfigs', () => {
+    it('refuses a selection none of whose objects produced a table, naming what was asked for', () => {
+        expect(() => AssertTargetConfigs(selected, [], 'PropFuel')).toThrow(
+            /NO_TARGET_TABLES: none of the 3 selected object\(s\) for PropFuel produced a target table \(clicks, sends, opens\)/
+        );
+    });
+
+    it('names why each object was dropped, so a caller does not need the server log', () => {
+        const drops = NewTargetConfigDrops();
+        drops.NotInSchema.push('clicks', 'sends');
+        drops.NoPrimaryKey.push('opens');
+        expect(() => AssertTargetConfigs(selected, [], 'PropFuel', drops)).toThrow(
+            'Dropped as not in the source schema: clicks, sends; no primary key: opens.'
+        );
+    });
+
+    it('says nothing was applied by default, and what was already committed when the caller says so', () => {
+        expect(() => AssertTargetConfigs(selected, [], 'PropFuel')).toThrow('Nothing was applied.');
+        expect(() => AssertTargetConfigs(selected, [], 'PropFuel', undefined, 'The catalog had already been saved.'))
+            .toThrow(/The catalog had already been saved\. Re-run discovery/);
+    });
+
+    it('caps the names it lists, so a large selection cannot make a multi-KB error', () => {
+        const many = Array.from({ length: 168 }, (_v, i) => ({ SourceObjectName: `obj${i}` }));
+        expect(() => AssertTargetConfigs(many, [], 'NetForum')).toThrow('(obj0, obj1, obj2, obj3, obj4 and 163 more)');
+        expect(SampleNames(['a', 'b'])).toBe('a, b');
+    });
+
+    it('lets a selection through when at least one object produced a table', () => {
+        expect(() => AssertTargetConfigs(selected, oneTable, 'PropFuel')).not.toThrow();
+    });
+
+    it('lets an empty selection through — there was nothing to refuse', () => {
+        expect(() => AssertTargetConfigs([], [], 'PropFuel')).not.toThrow();
+    });
+});
+
+/**
+ * Read from source: the call sites are resolver mutations that need a provider, a connector and an
+ * RSU pipeline to run.
+ */
+describe('the guard\'s callers', () => {
+    const SRC = readFileSync(join(__dirname, '..', 'resolvers', 'IntegrationDiscoveryResolver.ts'), 'utf-8');
+
+    it('IntegrationApplySchema filters on names whose casing resolveObjectInputs has corrected', () => {
+        // A filter built from the raw input is case-sensitive: `Clicks` for a stored `clicks` selected
+        // nothing, and the guard then told the caller to re-run discovery, which cannot fix casing.
+        const start = SRC.indexOf('async IntegrationApplySchema(');
+        const body = SRC.slice(start, SRC.indexOf('AssertTargetConfigs(', start));
+        const resolve = body.indexOf('await this.resolveObjectInputs(objects, sourceSchema, user);');
+        const names = body.indexOf('const resolvedNames = new Set(objects.map(o => o.SourceObjectName));');
+        expect(resolve).toBeGreaterThan(-1);
+        expect(names).toBeGreaterThan(resolve);
+        expect(body).toMatch(/sourceSchema\.Objects\.filter\(o => resolvedNames\.has\(o\.ExternalName\)\)/);
+    });
+
+    it('every call passes the drop reasons, and schema evolution says what it had already committed', () => {
+        const calls = [...SRC.matchAll(/AssertTargetConfigs\(objects, targetConfigs, companyIntegration\.Integration, drops([\s\S]*?)\);/g)];
+        expect(calls).toHaveLength(3);
+        expect(calls.filter(c => /already been saved/.test(c[1]))).toHaveLength(1);
+    });
+});

package/src/__tests__/BatchApplyParity.test.ts

@@ -0,0 +1,109 @@
+/**
+ * The two apply paths must agree, because the shared connector surface collapses onto the batch
+ * one. Two defects made them differ, and both are invisible until a surface migrates:
+ *
+ *  - MJ-APPLY-12: the batch never made the first-apply full-sync determination, and its input
+ *    declared `defaultValue: false` for FullSync, which made the null-coalesce dead code. A
+ *    re-apply the caller left unspecified therefore ran INCREMENTAL against objects whose
+ *    watermark the schema change had just reset. everything.txt: "for the very first RSU of a
+ *    connector, the sync afterwards should be chosen to be full/incremental, but always full
+ *    generally as the default."
+ *  - MJ-APPLY-13: the batch's skipRestart branch never applied remove-as-disable, so
+ *    UnselectedAction was a silent no-op and a deselected table kept syncing.
+ *
+ * Read from source: both live in a resolver that needs a provider, a connector and an RSU
+ * pipeline to invoke, and the property under test is a one-line policy, not a behaviour worth
+ * standing all that up to observe.
+ */
+import { describe, it, expect } from 'vitest';
+import { readFileSync } from 'node:fs';
+import { join } from 'node:path';
+
+const SRC = readFileSync(
+  join(__dirname, '..', 'resolvers', 'IntegrationDiscoveryResolver.ts'),
+  'utf-8',
+);
+
+/** The body of a named input class, up to its closing brace. */
+function classBody(name: string): string {
+  const start = SRC.indexOf(`class ${name} {`);
+  expect(start, `${name} not found`).toBeGreaterThan(-1);
+  const rest = SRC.slice(start);
+  const end = rest.indexOf('\n}');
+  return end === -1 ? rest : rest.slice(0, end);
+}
+
+/** The body of a named resolver method, up to the next method at the same indent. */
+function methodBody(name: string): string {
+  const start = SRC.indexOf(`async ${name}(`);
+  expect(start, `${name} not found`).toBeGreaterThan(-1);
+  const rest = SRC.slice(start);
+  const end = rest.search(/\n    @(Query|Mutation)\(/);
+  return end === -1 ? rest : rest.slice(0, end);
+}
+
+describe('MJ-APPLY-12 first-apply full sync', () => {
+  it('the batch resolves FullSync from prior maps, not from a bare false', () => {
+    const body = methodBody('IntegrationApplyAllBatch');
+    expect(body).toMatch(/const fullSync = input\.FullSync\s*\?\?\s*!hadPriorMaps;/);
+    expect(body).toMatch(/FullSync:\s*fullSync,/);
+    expect(body).not.toMatch(/input\.FullSync\s*\?\?\s*false/);
+  });
+
+  it('ApplyAllBatchInput.FullSync has NO defaultValue, or the coalesce is dead again', () => {
+    // Scope to the CLASS. There are several `FullSync?: boolean` fields in this file and a bare
+    // find() picks ApplyAllInput's, which would pass no matter what the batch input declared.
+    const body = classBody('ApplyAllBatchInput');
+    const line = body.split('\n').find(l => l.includes('FullSync?: boolean') && l.includes('@Field'));
+    expect(line, 'ApplyAllBatchInput.FullSync not found').toBeDefined();
+    expect(line!).not.toMatch(/defaultValue/);
+  });
+
+  it('the single-connector path still does the same thing', () => {
+    expect(methodBody('IntegrationApplyAll')).toMatch(/input\.FullSync\s*\?\?\s*!hadPriorMaps/);
+  });
+
+  it('the prior-maps read UUID-validates the connection id, like every other caller-supplied id', () => {
+    // The batch takes its CompanyIntegrationIDs from the caller. The rest of this resolver refuses a
+    // non-UUID id with sqlUuid before it reaches an ExtraFilter; quote-doubling is not that check.
+    const body = methodBody('IntegrationApplyAllBatch');
+    expect(body).toMatch(/CompanyIntegrationID='\$\{sqlUuid\(connInput\.CompanyIntegrationID, 'CompanyIntegrationID'\)\}'/);
+    expect(body).not.toMatch(/connInput\.CompanyIntegrationID\.replace\(/);
+  });
+
+  it('the skipRestart branch starts its sync with the RESOLVED FullSync, as the restart path queues it', () => {
+    // The restart path carries the coalesced value in its PendingWork; the skipRestart branch starts
+    // the sync itself. Passing the raw input there means an omitted FullSync is undefined, which
+    // startSyncAfterApply reads as incremental — against tables the apply just created.
+    const body = methodBody('IntegrationApplyAllBatch');
+    const call = body.match(/this\.startSyncAfterApply\(build\.connInput\.CompanyIntegrationID,[^)]*\)/);
+    expect(call, 'skipRestart sync start not found').not.toBeNull();
+    expect(call![0]).not.toMatch(/input\.FullSync/);
+    expect(call![0]).toMatch(/build\.fullSync\)$/);
+    expect(body).toMatch(/^\s*fullSync,$/m);
+  });
+
+  it('the prior-maps probe skips the row count, as the single path does', () => {
+    // MaxRows: 1 is an existence probe; without SkipTotalRowCount the provider follows every hit
+    // with a COUNT(*) over the connection's maps.
+    const body = methodBody('IntegrationApplyAllBatch');
+    const probe = body.slice(body.indexOf('const priorMapsResult'), body.indexOf('const hadPriorMaps'));
+    expect(probe).toMatch(/MaxRows:\s*1,/);
+    expect(probe).toMatch(/SkipTotalRowCount:\s*true/);
+  });
+});
+
+describe('MJ-APPLY-13 remove-as-disable', () => {
+  it('the batch skipRestart branch disables unselected maps', () => {
+    const body = methodBody('IntegrationApplyAllBatch');
+    expect(body).toMatch(/UnselectedAction\s*\?\?\s*'disable'\)\s*!==\s*'ignore'/);
+    expect(body).toMatch(/DisableUnselectedEntityMaps\(/);
+  });
+
+  it('and honours the ignore opt-out rather than always disabling', () => {
+    const body = methodBody('IntegrationApplyAllBatch');
+    const at = body.indexOf('DisableUnselectedEntityMaps(');
+    // the guard must precede the call, not follow it
+    expect(body.lastIndexOf("!== 'ignore'", at)).toBeGreaterThan(-1);
+  });
+});

package/src/__tests__/BridgeHostInstance.test.ts

@@ -230,3 +230,45 @@ describe('StartBridgeOrphanReconciliation', () => {
         expect(runView.mock.calls[0][1]).toBe(user);
     });
 });
+
+describe('StartBridgeOrphanReconciliation with agentSessions.bridgeReconciler settings', () => {
+    const HOUR = 60 * 60_000;
+    afterEach(() => {
+        vi.restoreAllMocks();
+        vi.useRealTimers();
+    });
+
+    it('enabled: reconciles now, then on the configured interval', async () => {
+        vi.useFakeTimers();
+        const reconcile = vi.spyOn(AIBridgeEngine.Instance, 'ReconcileOrphans').mockResolvedValue(0);
+        const { provider } = bridgeTable([]);
+
+        StartBridgeOrphanReconciliation(provider, user, { enabled: true, sweepIntervalMs: 120_000 });
+        await vi.advanceTimersByTimeAsync(6 * 60_000);
+
+        expect(reconcile).toHaveBeenCalledTimes(4); // now + every 2 minutes
+    });
+
+    it('disabled: reconciles once now and never again', async () => {
+        vi.useFakeTimers();
+        const reconcile = vi.spyOn(AIBridgeEngine.Instance, 'ReconcileOrphans').mockResolvedValue(0);
+        const { provider } = bridgeTable([]);
+
+        StartBridgeOrphanReconciliation(provider, user, { enabled: false, sweepIntervalMs: 600_000 });
+        await vi.advanceTimersByTimeAsync(HOUR);
+
+        expect(reconcile).toHaveBeenCalledTimes(1);
+        expect(reconcile.mock.calls[0][0]).toBe(user);
+    });
+
+    it('with no settings keeps the shipped 10-minute repeat', async () => {
+        vi.useFakeTimers();
+        const reconcile = vi.spyOn(AIBridgeEngine.Instance, 'ReconcileOrphans').mockResolvedValue(0);
+        const { provider } = bridgeTable([]);
+
+        StartBridgeOrphanReconciliation(provider, user);
+        await vi.advanceTimersByTimeAsync(HOUR);
+
+        expect(reconcile).toHaveBeenCalledTimes(7);
+    });
+});