@mj-biz-apps/common-server 5.41.0 → 5.43.0

package/dist/custom/graph-transport-factory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"graph-transport-factory.d.ts","sourceRoot":"","sources":["../../src/custom/graph-transport-factory.ts"],"names":[],"mappings":"AAoBA,OAAO,EACH,4BAA4B,EAI5B,KAAK,wBAAwB,EAC7B,KAAK,wBAAwB,EAEhC,MAAM,mCAAmC,CAAC;AAK3C;;;;;;;;;;;;GAYG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,wBAAwB,GAAG,wBAAwB,GAAG,IAAI,CAiBxG;AAgDD;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,IAAI,IAAI,CAEhD;AAED,8EAA8E;AAC9E,OAAO,EAAE,4BAA4B,EAAE,CAAC"}
+{"version":3,"file":"graph-transport-factory.d.ts","sourceRoot":"","sources":["../../src/custom/graph-transport-factory.ts"],"names":[],"mappings":"AAoBA,OAAO,EACH,4BAA4B,EAM5B,KAAK,wBAAwB,EAC7B,KAAK,wBAAwB,EAGhC,MAAM,mCAAmC,CAAC;AAO3C;;;;;;;;;;;;GAYG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,wBAAwB,GAAG,wBAAwB,GAAG,IAAI,CAoCxG;AA2DD;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,IAAI,IAAI,CAEhD;AAED,8EAA8E;AAC9E,OAAO,EAAE,4BAA4B,EAAE,CAAC"}

package/dist/custom/graph-transport-factory.js

@@ -17,9 +17,11 @@
 import { BaseCommunicationProvider } from '@memberjunction/communication-types';
 import { CredentialEngine } from '@memberjunction/credentials';
 import { MJGlobal } from '@memberjunction/global';
-import { GRAPH_COMMUNICATION_PROVIDER, GraphCommunicationTransport, MJGraphTransportDeps, RegisterActivityTransportFactory, } from '@mj-biz-apps/common-activity-sync';
-/** The `ActivitySyncProviderType.DriverClass` this factory serves. It serves exactly one. */
+import { GRAPH_COMMUNICATION_PROVIDER, GraphCalendarTransport, GraphCommunicationTransport, MJGraphCalendarTransportDeps, MJGraphTransportDeps, RegisterActivityTransportFactory, } from '@mj-biz-apps/common-activity-sync';
+/** `ActivitySyncProviderType.DriverClass` — the mail surface. */
 const MICROSOFT_365 = 'Microsoft365';
+/** `ActivitySyncProviderType.CalendarDriverClass` — the calendar surface of the same connection. */
+const MICROSOFT_365_CALENDAR = 'Microsoft365.Calendar';
 /**
  * Build a live Graph transport for one connection, or null when this factory cannot serve it.
  *
@@ -34,17 +36,32 @@ const MICROSOFT_365 = 'Microsoft365';
  * Anything else is a wiring fault and is left to throw.
  */
 export function GraphTransportFactory(context) {
-    if (context.DriverClass !== MICROSOFT_365) {
+    const isMail = context.DriverClass === MICROSOFT_365;
+    const isCalendar = context.DriverClass === MICROSOFT_365_CALENDAR;
+    if (!isMail && !isCalendar) {
         return null;
     }
     const credentialName = (context.CredentialsRef ?? '').trim();
     if (!credentialName) {
         return null;
     }
-    return new GraphCommunicationTransport(MJGraphTransportDeps({
+    // ONE FACTORY, TWO SURFACES, ONE CREDENTIAL. A connection configures a single CredentialsRef and
+    // both of its surfaces resolve through it — the same app registration holds Mail.Read and
+    // Calendars.Read, and the same Exchange policy scopes both. Separate factories would let a
+    // connection end up reading mail as one principal and calendar as another.
+    const shared = {
         CredentialName: credentialName,
         ContextUser: context.ContextUser,
         GetCredentialEngine: () => CredentialLoader(context.ContextUser),
+    };
+    if (isCalendar) {
+        return new GraphCalendarTransport(MJGraphCalendarTransportDeps({
+            ...shared,
+            GetCommunicationProvider: ResolveCommunicationProviderForEvents,
+        }));
+    }
+    return new GraphCommunicationTransport(MJGraphTransportDeps({
+        ...shared,
         GetCommunicationProvider: ResolveCommunicationProvider,
     }));
 }
@@ -89,6 +106,16 @@ function ResolveCommunicationProvider(name) {
     }
     return instance;
 }
+/**
+ * The same registered provider, viewed as an event reader.
+ *
+ * Delegates rather than duplicating the base-class check: `ClassFactory.CreateInstance` returns an
+ * instance of the BASE class when no registration matches, so a missing provider comes back truthy
+ * and answers nothing usefully. That check is load-bearing and must not exist in two places.
+ */
+function ResolveCommunicationProviderForEvents(name) {
+    return ResolveCommunicationProvider(name);
+}
 /**
  * Register this host's factory. Called once from the package bootstrap.
  *

package/dist/custom/graph-transport-factory.js.map

@@ -1 +1 @@
-{"version":3,"file":"graph-transport-factory.js","sourceRoot":"","sources":["../../src/custom/graph-transport-factory.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAE,yBAAyB,EAAE,MAAM,qCAAqC,CAAC;AAChF,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAE/D,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAClD,OAAO,EACH,4BAA4B,EAC5B,2BAA2B,EAC3B,oBAAoB,EACpB,gCAAgC,GAInC,MAAM,mCAAmC,CAAC;AAE3C,6FAA6F;AAC7F,MAAM,aAAa,GAAG,cAAc,CAAC;AAErC;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAiC;IACnE,IAAI,OAAO,CAAC,WAAW,KAAK,aAAa,EAAE,CAAC;QACxC,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,MAAM,cAAc,GAAG,CAAC,OAAO,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7D,IAAI,CAAC,cAAc,EAAE,CAAC;QAClB,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,OAAO,IAAI,2BAA2B,CAClC,oBAAoB,CAAC;QACjB,cAAc,EAAE,cAAc;QAC9B,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,mBAAmB,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,OAAO,CAAC,WAAW,CAAC;QAChE,wBAAwB,EAAE,4BAA4B;KACzD,CAAC,CACL,CAAC;AACN,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,gBAAgB,CAAC,WAAsB;IAC5C,OAAO;QACH,KAAK,CAAC,aAAa,CAAI,IAAY,EAAE,OAAiC;YAClE,MAAM,IAAI,GAAI,OAAO,EAAE,WAAoC,IAAI,WAAW,CAAC;YAC3E,MAAM,gBAAgB,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;YACnD,OAAO,gBAAgB,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,EAAE;gBACjD,WAAW,EAAE,IAAI;gBACjB,SAAS,EAAE,6BAA6B;aAC3C,CAAsC,CAAC;QAC5C,CAAC;KACJ,CAAC;AACN,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAS,4BAA4B,CAAC,IAAY;IAC9C,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,cAAc,CAC1D,yBAAyB,EACzB,IAAI,CACP,CAAC;IACF,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,WAAW,CAAC,IAAI,KAAK,2BAA2B,EAAE,CAAC;QACzE,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,OAAO,QAAyC,CAAC;AACrD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,yBAAyB;IACrC,gCAAgC,CAAC,qBAAqB,CAAC,CAAC;AAC5D,CAAC;AAED,8EAA8E;AAC9E,OAAO,EAAE,4BAA4B,EAAE,CAAC"}
+{"version":3,"file":"graph-transport-factory.js","sourceRoot":"","sources":["../../src/custom/graph-transport-factory.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAE,yBAAyB,EAAE,MAAM,qCAAqC,CAAC;AAChF,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAE/D,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAClD,OAAO,EACH,4BAA4B,EAC5B,sBAAsB,EACtB,2BAA2B,EAC3B,4BAA4B,EAC5B,oBAAoB,EACpB,gCAAgC,GAKnC,MAAM,mCAAmC,CAAC;AAE3C,iEAAiE;AACjE,MAAM,aAAa,GAAG,cAAc,CAAC;AACrC,oGAAoG;AACpG,MAAM,sBAAsB,GAAG,uBAAuB,CAAC;AAEvD;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAiC;IACnE,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,KAAK,aAAa,CAAC;IACrD,MAAM,UAAU,GAAG,OAAO,CAAC,WAAW,KAAK,sBAAsB,CAAC;IAClE,IAAI,CAAC,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,MAAM,cAAc,GAAG,CAAC,OAAO,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7D,IAAI,CAAC,cAAc,EAAE,CAAC;QAClB,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,iGAAiG;IACjG,0FAA0F;IAC1F,2FAA2F;IAC3F,2EAA2E;IAC3E,MAAM,MAAM,GAAG;QACX,cAAc,EAAE,cAAc;QAC9B,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,mBAAmB,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,OAAO,CAAC,WAAW,CAAC;KACnE,CAAC;IAEF,IAAI,UAAU,EAAE,CAAC;QACb,OAAO,IAAI,sBAAsB,CAC7B,4BAA4B,CAAC;YACzB,GAAG,MAAM;YACT,wBAAwB,EAAE,qCAAqC;SAClE,CAAC,CACL,CAAC;IACN,CAAC;IAED,OAAO,IAAI,2BAA2B,CAClC,oBAAoB,CAAC;QACjB,GAAG,MAAM;QACT,wBAAwB,EAAE,4BAA4B;KACzD,CAAC,CACL,CAAC;AACN,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,gBAAgB,CAAC,WAAsB;IAC5C,OAAO;QACH,KAAK,CAAC,aAAa,CAAI,IAAY,EAAE,OAAiC;YAClE,MAAM,IAAI,GAAI,OAAO,EAAE,WAAoC,IAAI,WAAW,CAAC;YAC3E,MAAM,gBAAgB,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;YACnD,OAAO,gBAAgB,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,EAAE;gBACjD,WAAW,EAAE,IAAI;gBACjB,SAAS,EAAE,6BAA6B;aAC3C,CAAsC,CAAC;QAC5C,CAAC;KACJ,CAAC;AACN,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAS,4BAA4B,CAAC,IAAY;IAC9C,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,cAAc,CAC1D,yBAAyB,EACzB,IAAI,CACP,CAAC;IACF,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,WAAW,CAAC,IAAI,KAAK,2BAA2B,EAAE,CAAC;QACzE,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,OAAO,QAAyC,CAAC;AACrD,CAAC;AAED;;;;;;GAMG;AACH,SAAS,qCAAqC,CAAC,IAAY;IACvD,OAAO,4BAA4B,CAAC,IAAI,CAAuC,CAAC;AACpF,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,yBAAyB;IACrC,gCAAgC,CAAC,qBAAqB,CAAC,CAAC;AAC5D,CAAC;AAED,8EAA8E;AAC9E,OAAO,EAAE,4BAA4B,EAAE,CAAC"}

package/dist/custom/live-mailbox-policy.d.ts

@@ -0,0 +1,31 @@
+/**
+ * The mail-enabled security group the Exchange assignment names — when the app IS restricted.
+ *
+ * Set this OR `ACTIVITY_SYNC_MAILBOX_POLICY_ACCEPTED_RISK`, never both. They record the two decisions
+ * an organisation actually makes, and claiming both would say the app is simultaneously restricted
+ * and knowingly unrestricted.
+ */
+export declare const ENV_GROUP = "ACTIVITY_SYNC_MAILBOX_POLICY_GROUP";
+/**
+ * A sentence saying what is being accepted — when the tenant-wide grant is accepted as-is.
+ *
+ * Adding an API permission in Entra and creating an Exchange RBAC assignment are different jobs owned
+ * by different people, and plenty of deployments will do the first and not the second. That is a
+ * legitimate outcome; refusing to model it would leave those deployments inventing a group name or
+ * bypassing the gate, and both destroy the record this exists to keep.
+ */
+export declare const ENV_ACCEPTED_RISK = "ACTIVITY_SYNC_MAILBOX_POLICY_ACCEPTED_RISK";
+/** Who verified the policy exists. A person — the decision needs an owner. */
+export declare const ENV_CONFIRMED_BY = "ACTIVITY_SYNC_MAILBOX_POLICY_CONFIRMED_BY";
+/** When they verified it, as an ISO-8601 date. Policies get deleted; staleness should be visible. */
+export declare const ENV_CONFIRMED_AT = "ACTIVITY_SYNC_MAILBOX_POLICY_CONFIRMED_AT";
+/**
+ * Read the attestation from the environment and register it, if this host has one.
+ *
+ * Returns true when live fetch was enabled, false when the host is not configured for it. Throws
+ * only on a configuration that is present but wrong — see "set all three or none" above.
+ *
+ * @param env the environment to read; injected so this is testable without mutating process.env.
+ */
+export declare function LoadLiveMailboxPolicyFromEnv(env?: NodeJS.ProcessEnv): boolean;
+//# sourceMappingURL=live-mailbox-policy.d.ts.map

package/dist/custom/live-mailbox-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"live-mailbox-policy.d.ts","sourceRoot":"","sources":["../../src/custom/live-mailbox-policy.ts"],"names":[],"mappings":"AAyBA;;;;;;GAMG;AACH,eAAO,MAAM,SAAS,uCAAuC,CAAC;AAE9D;;;;;;;GAOG;AACH,eAAO,MAAM,iBAAiB,+CAA+C,CAAC;AAC9E,8EAA8E;AAC9E,eAAO,MAAM,gBAAgB,8CAA8C,CAAC;AAC5E,qGAAqG;AACrG,eAAO,MAAM,gBAAgB,8CAA8C,CAAC;AAO5E;;;;;;;GAOG;AACH,wBAAgB,4BAA4B,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAmE1F"}

package/dist/custom/live-mailbox-policy.js

@@ -0,0 +1,107 @@
+/**
+ * How THIS host says it is scoped to read real mailboxes.
+ *
+ * WHAT IT IS PROTECTING. `MSGraphProvider` authenticates app-only, so the `Mail.Read` APPLICATION
+ * permission is granted against the tenant, not against a mailbox: it reads EVERY mailbox in the
+ * organisation. The `Mailbox` column on a connection narrows what we ASK for, not what we are
+ * ALLOWED to read. Only an Exchange Application Access Policy, binding the app registration to a
+ * mail-enabled security group, narrows the grant itself.
+ *
+ * WHY ENVIRONMENT AND NOT A DATABASE ROW. `ActivitySyncConnection` is an ordinary editable entity.
+ * If the opt-in lived there, anyone who could edit a row could turn on tenant-wide mail reading from
+ * a form. Deployment configuration is the right altitude: changing it needs access to the host, and
+ * it is reviewed and deployed rather than typed. This is the same reasoning the package already
+ * applies to the transport itself — "a database row should not be able to reach in and swap it".
+ *
+ * SET ALL THREE OR NONE. A partial configuration THROWS rather than quietly staying off. Silently
+ * ignoring a half-filled opt-in is the failure this codebase keeps being written against: an
+ * operator who set two of three variables would see refusals, believe the policy was wrong, and go
+ * looking in Exchange for a fault that is in their .env.
+ *
+ * @module @mj-biz-apps/common-server
+ */
+import { LogStatus } from '@memberjunction/core';
+import { AllowLiveMailboxFetch } from '@mj-biz-apps/common-activity-sync';
+/**
+ * The mail-enabled security group the Exchange assignment names — when the app IS restricted.
+ *
+ * Set this OR `ACTIVITY_SYNC_MAILBOX_POLICY_ACCEPTED_RISK`, never both. They record the two decisions
+ * an organisation actually makes, and claiming both would say the app is simultaneously restricted
+ * and knowingly unrestricted.
+ */
+export const ENV_GROUP = 'ACTIVITY_SYNC_MAILBOX_POLICY_GROUP';
+/**
+ * A sentence saying what is being accepted — when the tenant-wide grant is accepted as-is.
+ *
+ * Adding an API permission in Entra and creating an Exchange RBAC assignment are different jobs owned
+ * by different people, and plenty of deployments will do the first and not the second. That is a
+ * legitimate outcome; refusing to model it would leave those deployments inventing a group name or
+ * bypassing the gate, and both destroy the record this exists to keep.
+ */
+export const ENV_ACCEPTED_RISK = 'ACTIVITY_SYNC_MAILBOX_POLICY_ACCEPTED_RISK';
+/** Who verified the policy exists. A person — the decision needs an owner. */
+export const ENV_CONFIRMED_BY = 'ACTIVITY_SYNC_MAILBOX_POLICY_CONFIRMED_BY';
+/** When they verified it, as an ISO-8601 date. Policies get deleted; staleness should be visible. */
+export const ENV_CONFIRMED_AT = 'ACTIVITY_SYNC_MAILBOX_POLICY_CONFIRMED_AT';
+/** Required whichever decision was made. */
+const ALWAYS = [ENV_CONFIRMED_BY, ENV_CONFIRMED_AT];
+/** Exactly one of these says WHICH decision it was. */
+const EITHER = [ENV_GROUP, ENV_ACCEPTED_RISK];
+/**
+ * Read the attestation from the environment and register it, if this host has one.
+ *
+ * Returns true when live fetch was enabled, false when the host is not configured for it. Throws
+ * only on a configuration that is present but wrong — see "set all three or none" above.
+ *
+ * @param env the environment to read; injected so this is testable without mutating process.env.
+ */
+export function LoadLiveMailboxPolicyFromEnv(env = process.env) {
+    const set = (k) => (env[k] ?? '').trim();
+    const present = [...ALWAYS, ...EITHER].filter((k) => set(k).length > 0);
+    if (present.length === 0) {
+        // The ordinary case for every host that has not opted in. Not an error, and not logged as
+        // one — the provider's own refusal already explains what is off and how to turn it on.
+        return false;
+    }
+    const missingAlways = ALWAYS.filter((k) => !set(k));
+    if (missingAlways.length > 0) {
+        throw new Error(`Live mailbox fetch is partially configured: ${missingAlways.join(', ')} missing. Whichever ` +
+            'decision was made, it needs a name and a date — a partial opt-in stays OFF, and silently ' +
+            'doing so would send you looking for an Exchange fault that is not there.');
+    }
+    const group = set(ENV_GROUP);
+    const acceptedRisk = set(ENV_ACCEPTED_RISK);
+    // EXACTLY ONE. Both would claim the app is restricted AND knowingly unrestricted; neither leaves
+    // the decision unstated while the other variables imply one was made.
+    if (group && acceptedRisk) {
+        throw new Error(`Set ${ENV_GROUP} or ${ENV_ACCEPTED_RISK}, not both. The first says the app is restricted to ` +
+            'a group; the second says the tenant-wide grant was accepted as-is. They cannot both be true.');
+    }
+    if (!group && !acceptedRisk) {
+        throw new Error(`Set ${ENV_GROUP} when an Exchange assignment restricts the app to a security group, or ` +
+            `${ENV_ACCEPTED_RISK} to record that the tenant-wide grant was accepted and why. Live fetch ` +
+            'stays off until one of them says which.');
+    }
+    const confirmedAt = new Date(set(ENV_CONFIRMED_AT));
+    if (Number.isNaN(confirmedAt.getTime())) {
+        throw new Error(`${ENV_CONFIRMED_AT} is not a valid date: "${env[ENV_CONFIRMED_AT]}". Use ISO-8601.`);
+    }
+    const common = { Confirmed: true, ConfirmedBy: set(ENV_CONFIRMED_BY), ConfirmedAt: confirmedAt };
+    AllowLiveMailboxFetch(group
+        ? { ...common, Scope: 'RestrictedToGroup', ScopedToGroup: group }
+        : { ...common, Scope: 'TenantWideAccepted', AcceptedRisk: acceptedRisk });
+    /**
+     * Say it out loud, once, at bootstrap.
+     *
+     * Without this the attestation is written and never read by anything: `ConfirmedAt` in particular
+     * exists because "policies get deleted; staleness should be visible", and nothing was making it
+     * visible — it was reachable only through `HostLiveMailboxPolicy()`, which has no callers. A
+     * recorded decision nobody surfaces is the same silent shape this package is being cleaned of.
+     *
+     * It also puts the fact in the host log at the moment it starts mattering: this line is the
+     * difference between an operator discovering that a host reads real mailboxes, and not.
+     */
+    LogStatus(`Activity Sync: LIVE mailbox fetch ENABLED — ${group ? `restricted to group "${group}"` : `tenant-wide grant accepted ("${acceptedRisk}")`}, confirmed by ${set(ENV_CONFIRMED_BY)} on ${confirmedAt.toISOString().slice(0, 10)}.`);
+    return true;
+}
+//# sourceMappingURL=live-mailbox-policy.js.map

package/dist/custom/live-mailbox-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"live-mailbox-policy.js","sourceRoot":"","sources":["../../src/custom/live-mailbox-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AAE1E;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,oCAAoC,CAAC;AAE9D;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,4CAA4C,CAAC;AAC9E,8EAA8E;AAC9E,MAAM,CAAC,MAAM,gBAAgB,GAAG,2CAA2C,CAAC;AAC5E,qGAAqG;AACrG,MAAM,CAAC,MAAM,gBAAgB,GAAG,2CAA2C,CAAC;AAE5E,4CAA4C;AAC5C,MAAM,MAAM,GAAG,CAAC,gBAAgB,EAAE,gBAAgB,CAAU,CAAC;AAC7D,uDAAuD;AACvD,MAAM,MAAM,GAAG,CAAC,SAAS,EAAE,iBAAiB,CAAU,CAAC;AAEvD;;;;;;;GAOG;AACH,MAAM,UAAU,4BAA4B,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC7E,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACjD,MAAM,OAAO,GAAG,CAAC,GAAG,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAExE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,0FAA0F;QAC1F,uFAAuF;QACvF,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CACX,+CAA+C,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,sBAAsB;YACzF,2FAA2F;YAC3F,0EAA0E,CACjF,CAAC;IACN,CAAC;IAED,MAAM,KAAK,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC;IAC7B,MAAM,YAAY,GAAG,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAE5C,iGAAiG;IACjG,sEAAsE;IACtE,IAAI,KAAK,IAAI,YAAY,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACX,OAAO,SAAS,OAAO,iBAAiB,sDAAsD;YAC1F,8FAA8F,CACrG,CAAC;IACN,CAAC;IACD,IAAI,CAAC,KAAK,IAAI,CAAC,YAAY,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CACX,OAAO,SAAS,yEAAyE;YACrF,GAAG,iBAAiB,yEAAyE;YAC7F,yCAAyC,CAChD,CAAC;IACN,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACpD,IAAI,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,GAAG,gBAAgB,0BAA0B,GAAG,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,CAAC;IAC1G,CAAC;IAED,MAAM,MAAM,GAAG,EAAE,SAAS,EAAE,IAAa,EAAE,WAAW,EAAE,GAAG,CAAC,gBAAgB,CAAC,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC;IAC1G,qBAAqB,CACjB,KAAK;QACD,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,mBAAmB,EAAE,aAAa,EAAE,KAAK,EAAE;QACjE,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,oBAAoB,EAAE,YAAY,EAAE,YAAY,EAAE,CAC/E,CAAC;IAEF;;;;;;;;;;OAUG;IACH,SAAS,CACL,+CACI,KAAK,CAAC,CAAC,CAAC,wBAAwB,KAAK,GAAG,CAAC,CAAC,CAAC,gCAAgC,YAAY,IAC3F,kBAAkB,GAAG,CAAC,gBAAgB,CAAC,OAAO,WAAW,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAC1F,CAAC;IACF,OAAO,IAAI,CAAC;AAChB,CAAC"}

package/dist/index.d.ts

@@ -21,4 +21,5 @@ export declare function LoadBizAppsCommonServer(): void;
 export { SyncActivitiesAction, LoadSyncActivitiesAction } from './custom/sync-activities.action.js';
 export { LogActivityAction, LoadLogActivityAction } from './custom/log-activity.action.js';
 export { GraphTransportFactory, LoadGraphTransportFactory } from './custom/graph-transport-factory.js';
+export { LoadLiveMailboxPolicyFromEnv, ENV_GROUP, ENV_ACCEPTED_RISK, ENV_CONFIRMED_BY, ENV_CONFIRMED_AT, } from './custom/live-mailbox-policy.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,8BAA8B,CAAC;AACtC,OAAO,6BAA6B,CAAC;AAIrC,OAAO,0CAA0C,CAAC;AAOlD,OAAO,0BAA0B,CAAC;AAMlC,OAAO,EAAE,mBAAmB,EAAE,MAAM,6CAA6C,CAAC;AAOlF,oFAAoF;AACpF,eAAO,MAAM,cAAc,UAAsD,CAAC;AAElF;;;;GAIG;AACH,wBAAgB,uBAAuB,IAAI,IAAI,CAS9C;AAED,OAAO,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,MAAM,oCAAoC,CAAC;AACpG,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AAC3F,OAAO,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,MAAM,qCAAqC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,8BAA8B,CAAC;AACtC,OAAO,6BAA6B,CAAC;AAIrC,OAAO,0CAA0C,CAAC;AAQlD,OAAO,0BAA0B,CAAC;AAMlC,OAAO,EAAE,mBAAmB,EAAE,MAAM,6CAA6C,CAAC;AAOlF,oFAAoF;AACpF,eAAO,MAAM,cAAc,UAAsD,CAAC;AAElF;;;;GAIG;AACH,wBAAgB,uBAAuB,IAAI,IAAI,CAa9C;AAED,OAAO,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,MAAM,oCAAoC,CAAC;AACpG,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AAC3F,OAAO,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,MAAM,qCAAqC,CAAC;AACvG,OAAO,EACH,4BAA4B,EAC5B,SAAS,EACT,iBAAiB,EACjB,gBAAgB,EAChB,gBAAgB,GACnB,MAAM,iCAAiC,CAAC"}

package/dist/index.js

@@ -15,6 +15,7 @@ import { LoadActivitySyncEngine } from '@mj-biz-apps/common-core-entities-server
 import { LoadSyncActivitiesAction } from './custom/sync-activities.action.js';
 import { LoadLogActivityAction } from './custom/log-activity.action.js';
 import { LoadGraphTransportFactory } from './custom/graph-transport-factory.js';
+import { LoadLiveMailboxPolicyFromEnv } from './custom/live-mailbox-policy.js';
 // Import generated GraphQL resolvers
 import './generated/generated.js';
 // Re-export the manifest for consumers
@@ -36,10 +37,15 @@ export function LoadBizAppsCommonServer() {
     LoadSyncActivitiesAction();
     LoadLogActivityAction();
     // Registers the seam that turns a connection's CredentialsRef into a live Graph transport.
-    // Nothing about this enables a live read on its own — AllowLiveFetch still defaults false.
+    // Nothing about this enables a live read on its own — the provider still refuses until this
+    // host attests that its app registration is scoped.
     LoadGraphTransportFactory();
+    // And that attestation, when this deployment has one. Absent, every live read stays refused;
+    // partially configured, this THROWS during bootstrap rather than leaving a misleading refusal.
+    LoadLiveMailboxPolicyFromEnv();
 }
 export { SyncActivitiesAction, LoadSyncActivitiesAction } from './custom/sync-activities.action.js';
 export { LogActivityAction, LoadLogActivityAction } from './custom/log-activity.action.js';
 export { GraphTransportFactory, LoadGraphTransportFactory } from './custom/graph-transport-factory.js';
+export { LoadLiveMailboxPolicyFromEnv, ENV_GROUP, ENV_ACCEPTED_RISK, ENV_CONFIRMED_BY, ENV_CONFIRMED_AT, } from './custom/live-mailbox-policy.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,yEAAyE;AACzE,OAAO,8BAA8B,CAAC;AACtC,OAAO,6BAA6B,CAAC;AAErC,qEAAqE;AACrE,4DAA4D;AAC5D,OAAO,0CAA0C,CAAC;AAClD,OAAO,EAAE,sBAAsB,EAAE,MAAM,0CAA0C,CAAC;AAClF,OAAO,EAAE,wBAAwB,EAAE,MAAM,oCAAoC,CAAC;AAC9E,OAAO,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AACxE,OAAO,EAAE,yBAAyB,EAAE,MAAM,qCAAqC,CAAC;AAEhF,qCAAqC;AACrC,OAAO,0BAA0B,CAAC;AAKlC,uCAAuC;AACvC,OAAO,EAAE,mBAAmB,EAAE,MAAM,6CAA6C,CAAC;AAElF,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAE/D,oFAAoF;AACpF,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,6BAA6B,CAAC,CAAC,CAAC;AAElF;;;;GAIG;AACH,MAAM,UAAU,uBAAuB;IACnC,0DAA0D;IAC1D,kFAAkF;IAClF,sBAAsB,EAAE,CAAC;IACzB,wBAAwB,EAAE,CAAC;IAC3B,qBAAqB,EAAE,CAAC;IACxB,2FAA2F;IAC3F,2FAA2F;IAC3F,yBAAyB,EAAE,CAAC;AAChC,CAAC;AAED,OAAO,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,MAAM,oCAAoC,CAAC;AACpG,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AAC3F,OAAO,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,MAAM,qCAAqC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,yEAAyE;AACzE,OAAO,8BAA8B,CAAC;AACtC,OAAO,6BAA6B,CAAC;AAErC,qEAAqE;AACrE,4DAA4D;AAC5D,OAAO,0CAA0C,CAAC;AAClD,OAAO,EAAE,sBAAsB,EAAE,MAAM,0CAA0C,CAAC;AAClF,OAAO,EAAE,wBAAwB,EAAE,MAAM,oCAAoC,CAAC;AAC9E,OAAO,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AACxE,OAAO,EAAE,yBAAyB,EAAE,MAAM,qCAAqC,CAAC;AAChF,OAAO,EAAE,4BAA4B,EAAE,MAAM,iCAAiC,CAAC;AAE/E,qCAAqC;AACrC,OAAO,0BAA0B,CAAC;AAKlC,uCAAuC;AACvC,OAAO,EAAE,mBAAmB,EAAE,MAAM,6CAA6C,CAAC;AAElF,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAE/D,oFAAoF;AACpF,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,6BAA6B,CAAC,CAAC,CAAC;AAElF;;;;GAIG;AACH,MAAM,UAAU,uBAAuB;IACnC,0DAA0D;IAC1D,kFAAkF;IAClF,sBAAsB,EAAE,CAAC;IACzB,wBAAwB,EAAE,CAAC;IAC3B,qBAAqB,EAAE,CAAC;IACxB,2FAA2F;IAC3F,4FAA4F;IAC5F,oDAAoD;IACpD,yBAAyB,EAAE,CAAC;IAC5B,6FAA6F;IAC7F,+FAA+F;IAC/F,4BAA4B,EAAE,CAAC;AACnC,CAAC;AAED,OAAO,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,MAAM,oCAAoC,CAAC;AACpG,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AAC3F,OAAO,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,MAAM,qCAAqC,CAAC;AACvG,OAAO,EACH,4BAA4B,EAC5B,SAAS,EACT,iBAAiB,EACjB,gBAAgB,EAChB,gBAAgB,GACnB,MAAM,iCAAiC,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@mj-biz-apps/common-server",
   "type": "module",
-  "version": "5.41.0",
+  "version": "5.43.0",
   "description": "BizApps Common server bootstrap - GraphQL resolvers and class registrations for the Common business entities Open App",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -18,21 +18,21 @@
     "vitest": "^3.2.4"
   },
   "dependencies": {
-    "@mj-biz-apps/common-activity-sync": "5.41.0",
-    "@mj-biz-apps/common-core-entities-server": "5.41.0",
-    "@mj-biz-apps/common-entities": "5.41.0",
-    "@mj-biz-apps/common-actions": "5.41.0",
+    "@mj-biz-apps/common-activity-sync": "5.43.0",
+    "@mj-biz-apps/common-core-entities-server": "5.43.0",
+    "@mj-biz-apps/common-entities": "5.43.0",
+    "@mj-biz-apps/common-actions": "5.43.0",
     "class-validator": "^0.14.3"
   },
   "peerDependencies": {
-    "@memberjunction/actions": "^6.1.0-edge.5",
-    "@memberjunction/actions-base": "^6.1.0-edge.5",
-    "@memberjunction/communication-types": "^6.1.0-edge.5",
-    "@memberjunction/core": "^6.1.0-edge.5",
-    "@memberjunction/credentials": "^6.1.0-edge.5",
-    "@memberjunction/global": "^6.1.0-edge.5",
-    "@memberjunction/server": "^6.1.0-edge.5",
-    "@memberjunction/sqlserver-dataprovider": "^6.1.0-edge.5"
+    "@memberjunction/actions": "^6.1.0-edge.6",
+    "@memberjunction/actions-base": "^6.1.0-edge.6",
+    "@memberjunction/communication-types": "^6.1.0-edge.6",
+    "@memberjunction/core": "^6.1.0-edge.6",
+    "@memberjunction/credentials": "^6.1.0-edge.6",
+    "@memberjunction/global": "^6.1.0-edge.6",
+    "@memberjunction/server": "^6.1.0-edge.6",
+    "@memberjunction/sqlserver-dataprovider": "^6.1.0-edge.6"
   },
   "repository": {
     "type": "git",
@@ -40,6 +40,7 @@
   },
   "scripts": {
     "build": "tsc && tsc-alias -f",
-    "test": "vitest run"
+    "test": "tsc -p tsconfig.typecheck.json && vitest run",
+    "test:mutants": "node test-harnesses/mutate-checks.mjs"
   }
 }