@mj-biz-apps/common-server 5.43.0 → 5.45.0

package/dist/custom/activity-content-cipher.d.ts

@@ -0,0 +1,63 @@
+/**
+ * The cipher this host protects captured content with.
+ *
+ * WHAT IT IS FOR. `ActivitySyncRunDetail.CapturedContent` holds content from messages the engine
+ * deliberately declined to ingest, kept so an auditor asking "what was in the message you did not
+ * file?" has an answer. Its own description settles how: *"Ciphertext, always — never plaintext,
+ * whatever the policy... Encrypted through MJ's EncryptionEngine against an MJ: Encryption Keys row;
+ * this app never implements its own crypto."*
+ *
+ * WHY IT LIVES HERE. `common-activity-sync` holds to the second half of that sentence by taking no
+ * runtime dependency on the Encryption engine and asking a host for a cipher instead. This package
+ * already depends on MJ's engines, already runs at MJAPI startup, and already fills the other two
+ * seams the same way — so it fills this one too.
+ *
+ * That last part is the whole point. A seam nothing implements is the defect this subsystem keeps
+ * being cleaned of: `ActivityFileSink` is exported, documented and registered, and its `Store()` has
+ * no caller on any real path. This interface ships WITH its implementation so it never reaches that
+ * state.
+ *
+ * @module @mj-biz-apps/common-server
+ */
+import type { UserInfo } from '@memberjunction/core';
+import { type ActivityContentCipher } from '@mj-biz-apps/common-activity-sync';
+/**
+ * Encrypts through MJ, and does nothing else.
+ *
+ * NO DECRYPTION, deliberately. `ActivityContentCipher` has one method because the sync engine never
+ * needs to read captured content back — that is an audit action performed by a person holding the
+ * key. An engine that cannot decrypt cannot leak, and keeping the interface to one direction means
+ * the capability is not sitting there to be misused later.
+ */
+export declare class MJActivityContentCipher implements ActivityContentCipher {
+    /**
+     * The user is forwarded because the SEAM carries it, not because this engine needs it.
+     *
+     * `Encrypt` only consults `contextUser` when the engine has not been configured, and by the time
+     * any capture runs it always has: `setupSQLServerClient` calls `StartupManager.Startup()`, which
+     * configures this engine with a system user. That holds even when key validation FAILS — `Loaded`
+     * means the metadata loaded, and the key-material check is a separate step. Measured in a fresh
+     * process against a host with no usable key: with and without a user, `Encrypt` returns the same
+     * error either way.
+     *
+     * So this forwards an argument MJ does not presently read. It is still right to forward: MJ's own
+     * `ResolverBase` passes the user at both of its call sites rather than trusting startup, and the
+     * interface's contract is written for hosts whose cipher must reach key material as somebody.
+     *
+     * @throws whatever `EncryptionEngine` throws for a missing or unusable key. Throwing is correct:
+     *         the engine records the failure as a run issue and saves the decision without content.
+     *         The alternative — returning the plaintext, or an empty string — would put unprotected
+     *         content in a column whose contract is "ciphertext, always".
+     */
+    Encrypt(plaintext: string, encryptionKeyID: string, contextUser: UserInfo): Promise<string>;
+}
+/**
+ * Register it. Called from `LoadBizAppsCommonServer` at MJAPI startup.
+ *
+ * Unconditional, and cheap to be so: registering a cipher does not turn retention on. Retention is
+ * off unless a provider type or connection sets `SkippedContentPolicy` above `None`, and the engine
+ * refuses to run at all if a policy asks for capture that this host cannot encrypt. Registering
+ * always means that refusal is about the POLICY being wrong, never about the host being half-wired.
+ */
+export declare function LoadActivityContentCipher(): void;
+//# sourceMappingURL=activity-content-cipher.d.ts.map

package/dist/custom/activity-content-cipher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"activity-content-cipher.d.ts","sourceRoot":"","sources":["../../src/custom/activity-content-cipher.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAErD,OAAO,EAAiC,KAAK,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AAE9G;;;;;;;GAOG;AACH,qBAAa,uBAAwB,YAAW,qBAAqB;IACjE;;;;;;;;;;;;;;;;;;OAkBG;IACU,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC;CAG3G;AAED;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,IAAI,IAAI,CAEhD"}

package/dist/custom/activity-content-cipher.js

@@ -0,0 +1,46 @@
+import { EncryptionEngine } from '@memberjunction/encryption';
+import { RegisterActivityContentCipher } from '@mj-biz-apps/common-activity-sync';
+/**
+ * Encrypts through MJ, and does nothing else.
+ *
+ * NO DECRYPTION, deliberately. `ActivityContentCipher` has one method because the sync engine never
+ * needs to read captured content back — that is an audit action performed by a person holding the
+ * key. An engine that cannot decrypt cannot leak, and keeping the interface to one direction means
+ * the capability is not sitting there to be misused later.
+ */
+export class MJActivityContentCipher {
+    /**
+     * The user is forwarded because the SEAM carries it, not because this engine needs it.
+     *
+     * `Encrypt` only consults `contextUser` when the engine has not been configured, and by the time
+     * any capture runs it always has: `setupSQLServerClient` calls `StartupManager.Startup()`, which
+     * configures this engine with a system user. That holds even when key validation FAILS — `Loaded`
+     * means the metadata loaded, and the key-material check is a separate step. Measured in a fresh
+     * process against a host with no usable key: with and without a user, `Encrypt` returns the same
+     * error either way.
+     *
+     * So this forwards an argument MJ does not presently read. It is still right to forward: MJ's own
+     * `ResolverBase` passes the user at both of its call sites rather than trusting startup, and the
+     * interface's contract is written for hosts whose cipher must reach key material as somebody.
+     *
+     * @throws whatever `EncryptionEngine` throws for a missing or unusable key. Throwing is correct:
+     *         the engine records the failure as a run issue and saves the decision without content.
+     *         The alternative — returning the plaintext, or an empty string — would put unprotected
+     *         content in a column whose contract is "ciphertext, always".
+     */
+    async Encrypt(plaintext, encryptionKeyID, contextUser) {
+        return EncryptionEngine.Instance.Encrypt(plaintext, encryptionKeyID, contextUser);
+    }
+}
+/**
+ * Register it. Called from `LoadBizAppsCommonServer` at MJAPI startup.
+ *
+ * Unconditional, and cheap to be so: registering a cipher does not turn retention on. Retention is
+ * off unless a provider type or connection sets `SkippedContentPolicy` above `None`, and the engine
+ * refuses to run at all if a policy asks for capture that this host cannot encrypt. Registering
+ * always means that refusal is about the POLICY being wrong, never about the host being half-wired.
+ */
+export function LoadActivityContentCipher() {
+    RegisterActivityContentCipher(new MJActivityContentCipher());
+}
+//# sourceMappingURL=activity-content-cipher.js.map

package/dist/custom/activity-content-cipher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"activity-content-cipher.js","sourceRoot":"","sources":["../../src/custom/activity-content-cipher.ts"],"names":[],"mappings":"AAsBA,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAC9D,OAAO,EAAE,6BAA6B,EAA8B,MAAM,mCAAmC,CAAC;AAE9G;;;;;;;GAOG;AACH,MAAM,OAAO,uBAAuB;IAChC;;;;;;;;;;;;;;;;;;OAkBG;IACI,KAAK,CAAC,OAAO,CAAC,SAAiB,EAAE,eAAuB,EAAE,WAAqB;QAClF,OAAO,gBAAgB,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,eAAe,EAAE,WAAW,CAAC,CAAC;IACtF,CAAC;CACJ;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,yBAAyB;IACrC,6BAA6B,CAAC,IAAI,uBAAuB,EAAE,CAAC,CAAC;AACjE,CAAC"}

package/dist/custom/get-party-signals.action.d.ts

@@ -0,0 +1,21 @@
+/**
+ * `Common.GetPartySignals` — the server-side union of every `Party Signals` query.
+ *
+ * Explorer's party pickers use the client store, which does this in the browser. This action is
+ * the same answer for everything that is not Angular: Skip, agents, MCP, and any report or script
+ * that needs to know which organizations and people are customers. One definition of "customer",
+ * discovered from metadata rather than hard-coded, so the two can never drift.
+ *
+ * Runs every query as the CALLING user, so the roster a caller gets back is the one their
+ * permissions allow. A query the user cannot read contributes nothing and is named in `Warnings`
+ * — a missing signal degrades ranking, it does not fail the call.
+ */
+import { BaseAction } from '@memberjunction/actions';
+import type { ActionResultSimple, RunActionParams } from '@memberjunction/actions-base';
+export declare class GetPartySignalsAction extends BaseAction {
+    protected InternalRunAction(params: RunActionParams): Promise<ActionResultSimple>;
+    private union;
+    private runSource;
+}
+export declare function LoadGetPartySignalsAction(): void;
+//# sourceMappingURL=get-party-signals.action.d.ts.map

package/dist/custom/get-party-signals.action.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-party-signals.action.d.ts","sourceRoot":"","sources":["../../src/custom/get-party-signals.action.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,KAAK,EAAe,kBAAkB,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAsBrG,qBACa,qBAAsB,SAAQ,UAAU;cACjC,iBAAiB,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,kBAAkB,CAAC;YAezE,KAAK;YAkBL,SAAS;CAoB1B;AAMD,wBAAgB,yBAAyB,IAAI,IAAI,CAEhD"}

package/dist/custom/get-party-signals.action.js

@@ -0,0 +1,91 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+/**
+ * `Common.GetPartySignals` — the server-side union of every `Party Signals` query.
+ *
+ * Explorer's party pickers use the client store, which does this in the browser. This action is
+ * the same answer for everything that is not Angular: Skip, agents, MCP, and any report or script
+ * that needs to know which organizations and people are customers. One definition of "customer",
+ * discovered from metadata rather than hard-coded, so the two can never drift.
+ *
+ * Runs every query as the CALLING user, so the roster a caller gets back is the one their
+ * permissions allow. A query the user cannot read contributes nothing and is named in `Warnings`
+ * — a missing signal degrades ranking, it does not fail the call.
+ */
+import { BaseAction } from '@memberjunction/actions';
+import { RunQuery } from '@memberjunction/core';
+import { QueryEngine } from '@memberjunction/core-entities';
+import { RegisterClass } from '@memberjunction/global';
+import { MergePartySignalRows, ParseSignalNouns, PARTY_SIGNALS_CATEGORY, } from '@mj-biz-apps/common-entities';
+function setOutput(params, name, value) {
+    const existing = params.Params?.find((p) => p.Name?.toLowerCase() === name.toLowerCase());
+    if (existing) {
+        existing.Value = value;
+        return;
+    }
+    params.Params = params.Params ?? [];
+    params.Params.push({ Name: name, Value: value, Type: 'Output' });
+}
+let GetPartySignalsAction = class GetPartySignalsAction extends BaseAction {
+    async InternalRunAction(params) {
+        if (!params.ContextUser) {
+            return { Success: false, ResultCode: 'VALIDATION_ERROR', Message: 'ContextUser is required.' };
+        }
+        try {
+            return await this.union(params, params.ContextUser);
+        }
+        catch (error) {
+            return {
+                Success: false,
+                ResultCode: 'ERROR',
+                Message: `GetPartySignals failed: ${messageOf(error)}`,
+            };
+        }
+    }
+    async union(params, user) {
+        const warnings = [];
+        await QueryEngine.Instance.Config(false, user);
+        const queries = QueryEngine.Instance.Queries.filter((query) => query.Category === PARTY_SIGNALS_CATEGORY);
+        const sources = await Promise.all(queries.map((query) => this.runSource(query.ID, query.Name, query.Description, user, warnings)));
+        const roster = MergePartySignalRows(sources);
+        setOutput(params, 'Roster', JSON.stringify(roster));
+        setOutput(params, 'Warnings', JSON.stringify(warnings));
+        return {
+            Success: true,
+            ResultCode: 'SUCCESS',
+            Message: `${roster.length} part${roster.length === 1 ? 'y' : 'ies'} from ${sources.length} signal quer${sources.length === 1 ? 'y' : 'ies'}`
+                + `${warnings.length > 0 ? `, ${warnings.length} unavailable` : ''}.`,
+        };
+    }
+    async runSource(id, name, description, user, warnings) {
+        const source = { QueryKey: name, ...ParseSignalNouns(description), Rows: [] };
+        try {
+            const result = await new RunQuery().RunQuery({ QueryID: id }, user);
+            if (result.Success) {
+                source.Rows = result.Results ?? [];
+            }
+            else {
+                warnings.push(`${name}: ${result.ErrorMessage ?? 'failed'}`);
+            }
+        }
+        catch (error) {
+            warnings.push(`${name}: ${messageOf(error)}`);
+        }
+        return source;
+    }
+};
+GetPartySignalsAction = __decorate([
+    RegisterClass(BaseAction, 'Common.GetPartySignals')
+], GetPartySignalsAction);
+export { GetPartySignalsAction };
+function messageOf(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+export function LoadGetPartySignalsAction() {
+    void GetPartySignalsAction;
+}
+//# sourceMappingURL=get-party-signals.action.js.map

package/dist/custom/get-party-signals.action.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-party-signals.action.js","sourceRoot":"","sources":["../../src/custom/get-party-signals.action.ts"],"names":[],"mappings":";;;;;;AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAErD,OAAO,EAAE,QAAQ,EAAiB,MAAM,sBAAsB,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EACH,oBAAoB,EACpB,gBAAgB,EAChB,sBAAsB,GAGzB,MAAM,8BAA8B,CAAC;AAEtC,SAAS,SAAS,CAAC,MAAuB,EAAE,IAAY,EAAE,KAAc;IACpE,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IAC1F,IAAI,QAAQ,EAAE,CAAC;QACX,QAAQ,CAAC,KAAK,GAAG,KAAK,CAAC;QACvB,OAAO;IACX,CAAC;IACD,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;IACpC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAiB,CAAC,CAAC;AACpF,CAAC;AAGM,IAAM,qBAAqB,GAA3B,MAAM,qBAAsB,SAAQ,UAAU;IACvC,KAAK,CAAC,iBAAiB,CAAC,MAAuB;QACrD,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YACtB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,kBAAkB,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC;QACnG,CAAC;QACD,IAAI,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;QACxD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,OAAO;gBACH,OAAO,EAAE,KAAK;gBACd,UAAU,EAAE,OAAO;gBACnB,OAAO,EAAE,2BAA2B,SAAS,CAAC,KAAK,CAAC,EAAE;aACzD,CAAC;QACN,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,KAAK,CAAC,MAAuB,EAAE,IAAc;QACvD,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,MAAM,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC/C,MAAM,OAAO,GAAG,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,sBAAsB,CAAC,CAAC;QAC1G,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;QAEnI,MAAM,MAAM,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;QAC7C,SAAS,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QACpD,SAAS,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;QAExD,OAAO;YACH,OAAO,EAAE,IAAI;YACb,UAAU,EAAE,SAAS;YACrB,OAAO,EAAE,GAAG,MAAM,CAAC,MAAM,QAAQ,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,SAAS,OAAO,CAAC,MAAM,eAAe,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE;kBACtI,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,MAAM,cAAc,CAAC,CAAC,CAAC,EAAE,GAAG;SAC5E,CAAC;IACN,CAAC;IAEO,KAAK,CAAC,SAAS,CACnB,EAAU,EACV,IAAY,EACZ,WAA0B,EAC1B,IAAc,EACd,QAAkB;QAElB,MAAM,MAAM,GAAsB,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,gBAAgB,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QACjG,IAAI,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,IAAI,QAAQ,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;YACpE,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACjB,MAAM,CAAC,IAAI,GAAI,MAAM,CAAC,OAA4B,IAAI,EAAE,CAAC;YAC7D,CAAC;iBAAM,CAAC;gBACJ,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,KAAK,MAAM,CAAC,YAAY,IAAI,QAAQ,EAAE,CAAC,CAAC;YACjE,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,KAAK,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAClD,CAAC;QACD,OAAO,MAAM,CAAC;IAClB,CAAC;CACJ,CAAA;AAtDY,qBAAqB;IADjC,aAAa,CAAC,UAAU,EAAE,wBAAwB,CAAC;GACvC,qBAAqB,CAsDjC;;AAED,SAAS,SAAS,CAAC,KAAc;IAC7B,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,yBAAyB;IACrC,KAAK,qBAAqB,CAAC;AAC/B,CAAC"}

package/dist/index.d.ts

@@ -20,6 +20,8 @@ export declare const RESOLVER_PATHS: string[];
 export declare function LoadBizAppsCommonServer(): void;
 export { SyncActivitiesAction, LoadSyncActivitiesAction } from './custom/sync-activities.action.js';
 export { LogActivityAction, LoadLogActivityAction } from './custom/log-activity.action.js';
+export { GetPartySignalsAction, LoadGetPartySignalsAction } from './custom/get-party-signals.action.js';
 export { GraphTransportFactory, LoadGraphTransportFactory } from './custom/graph-transport-factory.js';
+export { MJActivityContentCipher, LoadActivityContentCipher } from './custom/activity-content-cipher.js';
 export { LoadLiveMailboxPolicyFromEnv, ENV_GROUP, ENV_ACCEPTED_RISK, ENV_CONFIRMED_BY, ENV_CONFIRMED_AT, } from './custom/live-mailbox-policy.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,8BAA8B,CAAC;AACtC,OAAO,6BAA6B,CAAC;AAIrC,OAAO,0CAA0C,CAAC;AAQlD,OAAO,0BAA0B,CAAC;AAMlC,OAAO,EAAE,mBAAmB,EAAE,MAAM,6CAA6C,CAAC;AAOlF,oFAAoF;AACpF,eAAO,MAAM,cAAc,UAAsD,CAAC;AAElF;;;;GAIG;AACH,wBAAgB,uBAAuB,IAAI,IAAI,CAa9C;AAED,OAAO,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,MAAM,oCAAoC,CAAC;AACpG,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AAC3F,OAAO,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,MAAM,qCAAqC,CAAC;AACvG,OAAO,EACH,4BAA4B,EAC5B,SAAS,EACT,iBAAiB,EACjB,gBAAgB,EAChB,gBAAgB,GACnB,MAAM,iCAAiC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,8BAA8B,CAAC;AACtC,OAAO,6BAA6B,CAAC;AAIrC,OAAO,0CAA0C,CAAC;AAUlD,OAAO,0BAA0B,CAAC;AAMlC,OAAO,EAAE,mBAAmB,EAAE,MAAM,6CAA6C,CAAC;AAOlF,oFAAoF;AACpF,eAAO,MAAM,cAAc,UAAsD,CAAC;AAElF;;;;GAIG;AACH,wBAAgB,uBAAuB,IAAI,IAAI,CAsB9C;AAED,OAAO,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,MAAM,oCAAoC,CAAC;AACpG,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AAC3F,OAAO,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,MAAM,sCAAsC,CAAC;AACxG,OAAO,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,MAAM,qCAAqC,CAAC;AACvG,OAAO,EAAE,uBAAuB,EAAE,yBAAyB,EAAE,MAAM,qCAAqC,CAAC;AACzG,OAAO,EACH,4BAA4B,EAC5B,SAAS,EACT,iBAAiB,EACjB,gBAAgB,EAChB,gBAAgB,GACnB,MAAM,iCAAiC,CAAC"}

package/dist/index.js

@@ -14,8 +14,10 @@ import '@mj-biz-apps/common-core-entities-server';
 import { LoadActivitySyncEngine } from '@mj-biz-apps/common-core-entities-server';
 import { LoadSyncActivitiesAction } from './custom/sync-activities.action.js';
 import { LoadLogActivityAction } from './custom/log-activity.action.js';
+import { LoadGetPartySignalsAction } from './custom/get-party-signals.action.js';
 import { LoadGraphTransportFactory } from './custom/graph-transport-factory.js';
 import { LoadLiveMailboxPolicyFromEnv } from './custom/live-mailbox-policy.js';
+import { LoadActivityContentCipher } from './custom/activity-content-cipher.js';
 // Import generated GraphQL resolvers
 import './generated/generated.js';
 // Re-export the manifest for consumers
@@ -36,6 +38,10 @@ export function LoadBizAppsCommonServer() {
     LoadActivitySyncEngine();
     LoadSyncActivitiesAction();
     LoadLogActivityAction();
+    // The one server-side answer to "which organizations and people are our customers", unioned
+    // from every query apps ship in the Party Signals category. Explorer uses the client store;
+    // Skip, agents, MCP and reports come through here so the two definitions cannot drift.
+    LoadGetPartySignalsAction();
     // Registers the seam that turns a connection's CredentialsRef into a live Graph transport.
     // Nothing about this enables a live read on its own — the provider still refuses until this
     // host attests that its app registration is scoped.
@@ -43,9 +49,16 @@ export function LoadBizAppsCommonServer() {
     // And that attestation, when this deployment has one. Absent, every live read stays refused;
     // partially configured, this THROWS during bootstrap rather than leaving a misleading refusal.
     LoadLiveMailboxPolicyFromEnv();
+    // And the cipher that protects content captured from messages the engine declined to ingest.
+    // Registering it turns nothing on: retention is off unless a policy asks for it. What it does is
+    // make the engine's refusal, when a policy DOES ask, be about the policy rather than about this
+    // host being half-wired.
+    LoadActivityContentCipher();
 }
 export { SyncActivitiesAction, LoadSyncActivitiesAction } from './custom/sync-activities.action.js';
 export { LogActivityAction, LoadLogActivityAction } from './custom/log-activity.action.js';
+export { GetPartySignalsAction, LoadGetPartySignalsAction } from './custom/get-party-signals.action.js';
 export { GraphTransportFactory, LoadGraphTransportFactory } from './custom/graph-transport-factory.js';
+export { MJActivityContentCipher, LoadActivityContentCipher } from './custom/activity-content-cipher.js';
 export { LoadLiveMailboxPolicyFromEnv, ENV_GROUP, ENV_ACCEPTED_RISK, ENV_CONFIRMED_BY, ENV_CONFIRMED_AT, } from './custom/live-mailbox-policy.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,yEAAyE;AACzE,OAAO,8BAA8B,CAAC;AACtC,OAAO,6BAA6B,CAAC;AAErC,qEAAqE;AACrE,4DAA4D;AAC5D,OAAO,0CAA0C,CAAC;AAClD,OAAO,EAAE,sBAAsB,EAAE,MAAM,0CAA0C,CAAC;AAClF,OAAO,EAAE,wBAAwB,EAAE,MAAM,oCAAoC,CAAC;AAC9E,OAAO,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AACxE,OAAO,EAAE,yBAAyB,EAAE,MAAM,qCAAqC,CAAC;AAChF,OAAO,EAAE,4BAA4B,EAAE,MAAM,iCAAiC,CAAC;AAE/E,qCAAqC;AACrC,OAAO,0BAA0B,CAAC;AAKlC,uCAAuC;AACvC,OAAO,EAAE,mBAAmB,EAAE,MAAM,6CAA6C,CAAC;AAElF,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAE/D,oFAAoF;AACpF,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,6BAA6B,CAAC,CAAC,CAAC;AAElF;;;;GAIG;AACH,MAAM,UAAU,uBAAuB;IACnC,0DAA0D;IAC1D,kFAAkF;IAClF,sBAAsB,EAAE,CAAC;IACzB,wBAAwB,EAAE,CAAC;IAC3B,qBAAqB,EAAE,CAAC;IACxB,2FAA2F;IAC3F,4FAA4F;IAC5F,oDAAoD;IACpD,yBAAyB,EAAE,CAAC;IAC5B,6FAA6F;IAC7F,+FAA+F;IAC/F,4BAA4B,EAAE,CAAC;AACnC,CAAC;AAED,OAAO,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,MAAM,oCAAoC,CAAC;AACpG,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AAC3F,OAAO,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,MAAM,qCAAqC,CAAC;AACvG,OAAO,EACH,4BAA4B,EAC5B,SAAS,EACT,iBAAiB,EACjB,gBAAgB,EAChB,gBAAgB,GACnB,MAAM,iCAAiC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,yEAAyE;AACzE,OAAO,8BAA8B,CAAC;AACtC,OAAO,6BAA6B,CAAC;AAErC,qEAAqE;AACrE,4DAA4D;AAC5D,OAAO,0CAA0C,CAAC;AAClD,OAAO,EAAE,sBAAsB,EAAE,MAAM,0CAA0C,CAAC;AAClF,OAAO,EAAE,wBAAwB,EAAE,MAAM,oCAAoC,CAAC;AAC9E,OAAO,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AACxE,OAAO,EAAE,yBAAyB,EAAE,MAAM,sCAAsC,CAAC;AACjF,OAAO,EAAE,yBAAyB,EAAE,MAAM,qCAAqC,CAAC;AAChF,OAAO,EAAE,4BAA4B,EAAE,MAAM,iCAAiC,CAAC;AAC/E,OAAO,EAAE,yBAAyB,EAAE,MAAM,qCAAqC,CAAC;AAEhF,qCAAqC;AACrC,OAAO,0BAA0B,CAAC;AAKlC,uCAAuC;AACvC,OAAO,EAAE,mBAAmB,EAAE,MAAM,6CAA6C,CAAC;AAElF,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAE/D,oFAAoF;AACpF,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,6BAA6B,CAAC,CAAC,CAAC;AAElF;;;;GAIG;AACH,MAAM,UAAU,uBAAuB;IACnC,0DAA0D;IAC1D,kFAAkF;IAClF,sBAAsB,EAAE,CAAC;IACzB,wBAAwB,EAAE,CAAC;IAC3B,qBAAqB,EAAE,CAAC;IACxB,4FAA4F;IAC5F,4FAA4F;IAC5F,uFAAuF;IACvF,yBAAyB,EAAE,CAAC;IAC5B,2FAA2F;IAC3F,4FAA4F;IAC5F,oDAAoD;IACpD,yBAAyB,EAAE,CAAC;IAC5B,6FAA6F;IAC7F,+FAA+F;IAC/F,4BAA4B,EAAE,CAAC;IAC/B,6FAA6F;IAC7F,iGAAiG;IACjG,gGAAgG;IAChG,yBAAyB;IACzB,yBAAyB,EAAE,CAAC;AAChC,CAAC;AAED,OAAO,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,MAAM,oCAAoC,CAAC;AACpG,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AAC3F,OAAO,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,MAAM,sCAAsC,CAAC;AACxG,OAAO,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,MAAM,qCAAqC,CAAC;AACvG,OAAO,EAAE,uBAAuB,EAAE,yBAAyB,EAAE,MAAM,qCAAqC,CAAC;AACzG,OAAO,EACH,4BAA4B,EAC5B,SAAS,EACT,iBAAiB,EACjB,gBAAgB,EAChB,gBAAgB,GACnB,MAAM,iCAAiC,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@mj-biz-apps/common-server",
   "type": "module",
-  "version": "5.43.0",
+  "version": "5.45.0",
   "description": "BizApps Common server bootstrap - GraphQL resolvers and class registrations for the Common business entities Open App",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -18,10 +18,10 @@
     "vitest": "^3.2.4"
   },
   "dependencies": {
-    "@mj-biz-apps/common-activity-sync": "5.43.0",
-    "@mj-biz-apps/common-core-entities-server": "5.43.0",
-    "@mj-biz-apps/common-entities": "5.43.0",
-    "@mj-biz-apps/common-actions": "5.43.0",
+    "@mj-biz-apps/common-activity-sync": "5.45.0",
+    "@mj-biz-apps/common-core-entities-server": "5.45.0",
+    "@mj-biz-apps/common-entities": "5.45.0",
+    "@mj-biz-apps/common-actions": "5.45.0",
     "class-validator": "^0.14.3"
   },
   "peerDependencies": {
@@ -29,7 +29,9 @@
     "@memberjunction/actions-base": "^6.1.0-edge.6",
     "@memberjunction/communication-types": "^6.1.0-edge.6",
     "@memberjunction/core": "^6.1.0-edge.6",
+    "@memberjunction/core-entities": "^6.1.0-edge.6",
     "@memberjunction/credentials": "^6.1.0-edge.6",
+    "@memberjunction/encryption": "^6.1.0-edge.6",
     "@memberjunction/global": "^6.1.0-edge.6",
     "@memberjunction/server": "^6.1.0-edge.6",
     "@memberjunction/sqlserver-dataprovider": "^6.1.0-edge.6"