@mj-biz-apps/marketing-actions 0.0.0 → 0.2.0

package/LICENSE

@@ -0,0 +1,183 @@
+Business Source License 1.1
+
+License text copyright (c) 2024 MariaDB plc, All Rights Reserved.
+"Business Source License" is a trademark of MariaDB plc.
+
+-----------------------------------------------------------------------------
+
+Parameters
+
+Licensor:             Blue Cypress, Inc.
+
+Licensed Work:        MemberJunction.
+                      The Licensed Work is (c) 2023-2026 Blue Cypress, Inc.
+
+Additional Use Grant: Subject to the terms of this License, Licensor grants
+                      you the following additional rights to make Production
+                      Use of the Licensed Work.
+
+                      1. Internal Use
+
+                      You may make production use of the Licensed Work for
+                      your own internal business or organizational operations.
+
+                      2. Nonprofit Use
+
+                      If you are a Nonprofit, you may make production use of
+                      the Licensed Work for the operations and activities of
+                      your Organizational Family.
+
+                      3. MemberJunction Certified Program Use
+
+                      If you are authorized by Licensor under the
+                      MemberJunction Certified Program to provide professional
+                      services using the Licensed Work, you may make
+                      production use of the Licensed Work in providing such
+                      professional services to a client, provided that:
+
+                      (a) the Licensed Work is deployed in, and the applicable
+                      production use occurs within, an environment owned,
+                      leased, licensed, subscribed to, or otherwise controlled
+                      by that client; and
+
+                      (b) the production use is for that client's own internal
+                      business or organizational operations or is otherwise
+                      independently permitted to that client under this
+                      Additional Use Grant.
+
+                      4. Definitions Applicable to the Additional Use Grant
+
+                      "Affiliate" means, with respect to a specified Person,
+                      any other Person that directly or indirectly Controls,
+                      is Controlled by, or is under common Control with such
+                      specified Person.
+
+                      "Control" (including the terms "Controls," "Controlled
+                      by," and "under common Control with") means the direct
+                      or indirect possession of the power to direct or cause
+                      the direction of the management and policies of a
+                      Person, whether through ownership of voting interests,
+                      by contract, or otherwise.
+
+                      "Organizational Family" means, with respect to a Person,
+                      (a) such Person and its Affiliates, and (b) any
+                      nonprofit organization, governmental entity, chapter,
+                      division, local affiliate, regional affiliate, state
+                      affiliate, national affiliate, or other entity that is
+                      formally affiliated with such Person through governing
+                      documents, a charter, bylaws, a membership agreement, or
+                      another written organizational instrument, and is
+                      recognized under such documents as part of the same
+                      organizational structure.
+
+                      "Nonprofit" means a Person recognized by the Internal
+                      Revenue Service as exempt from federal income taxation
+                      under Section 501(c)(3), 501(c)(4), 501(c)(5), or
+                      501(c)(6) of the Internal Revenue Code, or a foreign
+                      organization recognized under substantially equivalent
+                      laws.
+
+                      A Person claiming eligibility as a Nonprofit shall, upon
+                      Licensor's reasonable request, provide documentation
+                      reasonably sufficient to demonstrate that it qualifies
+                      as a Nonprofit. If such Person materially misrepresents,
+                      or is unable to demonstrate, its qualification as a
+                      Nonprofit, the rights granted to such Person under
+                      Section 2 of this Additional Use Grant shall terminate.
+
+                      "MemberJunction Certified Program" means Licensor's
+                      then-current program for certifying and authorizing a
+                      Person to provide professional services using the
+                      Licensed Work.
+
+                      "Person" means any individual, corporation, limited
+                      liability company, partnership, association, nonprofit
+                      organization, governmental entity, or other legal or
+                      organizational entity.
+
+Change Date:          Four (4) years from the date the Licensed Work is first
+                      made available.
+
+Change License:       MIT License.
+
+For information about alternative licensing arrangements for the Licensed
+Work, please contact Blue Cypress, Inc.
+
+-----------------------------------------------------------------------------
+
+Terms
+
+The Licensor hereby grants you the right to copy, modify, create derivative
+works, redistribute, and make non-production use of the Licensed Work. The
+Licensor may make an Additional Use Grant, above, permitting limited
+production use.
+
+Effective on the Change Date, or the fourth anniversary of the first publicly
+available distribution of a specific version of the Licensed Work under this
+License, whichever comes first, the Licensor hereby grants you rights under
+the terms of the Change License, and the rights granted in the paragraph
+above terminate.
+
+If your use of the Licensed Work does not comply with the requirements
+currently in effect as described in this License, you must purchase a
+commercial license from the Licensor, its affiliated entities, or authorized
+resellers, or you must refrain from using the Licensed Work.
+
+All copies of the original and modified Licensed Work, and derivative works
+of the Licensed Work, are subject to this License. This License applies
+separately for each version of the Licensed Work and the Change Date may vary
+for each version of the Licensed Work released by Licensor.
+
+You must conspicuously display this License on each original or modified copy
+of the Licensed Work. If you receive the Licensed Work in original or
+modified form from a third party, the terms and conditions set forth in this
+License apply to your use of that work.
+
+Any use of the Licensed Work in violation of this License will automatically
+terminate your rights under this License for the current and all other
+versions of the Licensed Work.
+
+This License does not grant you any right in any trademark or logo of
+Licensor or its affiliates (provided that you may use a trademark or logo of
+Licensor as expressly required by this License).
+
+TO THE EXTENT PERMITTED BY APPLICABLE LAW, THE LICENSED WORK IS PROVIDED ON
+AN "AS IS" BASIS. LICENSOR HEREBY DISCLAIMS ALL WARRANTIES AND CONDITIONS,
+EXPRESS OR IMPLIED, INCLUDING (WITHOUT LIMITATION) WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, AND
+TITLE.
+
+MariaDB hereby grants you permission to use this License's text to license
+your works, and to refer to it using the trademark "Business Source License",
+as long as you comply with the Covenants of Licensor below.
+
+-----------------------------------------------------------------------------
+
+Covenants of Licensor
+
+In consideration of the right to use this License's text and the "Business
+Source License" name and trademark, Licensor covenants to MariaDB, and to all
+other recipients of the licensed work to be provided by Licensor:
+
+1. To specify as the Change License the GPL Version 2.0 or any later version,
+   or a license that is compatible with GPL Version 2.0 or a later version,
+   where "compatible" means that software provided under the Change License
+   can be included in a program with software provided under GPL Version 2.0
+   or a later version. Licensor may specify additional Change Licenses without
+   limitation.
+
+2. To either: (a) specify an additional grant of rights to use that does not
+   impose any additional restriction on the right granted in this License, as
+   the Additional Use Grant; or (b) insert the text "None".
+
+3. To specify a Change Date.
+
+4. Not to modify this License in any other way.
+
+-----------------------------------------------------------------------------
+
+Notice
+
+The Business Source License (this document, or the "License") is not an Open
+Source license. However, the Licensed Work will eventually be made available
+under an Open Source License, as stated in this License.

package/dist/MarketingBaseAction.d.ts

@@ -0,0 +1,61 @@
+import { ActionResultSimple, RunActionParams } from "@memberjunction/actions-base";
+import { BaseAction } from "@memberjunction/actions";
+import { UserInfo } from "@memberjunction/core";
+import { RoleTier } from "@mj-biz-apps/marketing-core";
+/**
+ * Base class for every Marketing-domain action.
+ *
+ * Wraps {@link BaseAction.Run} with a permission gate (issue #916) and an
+ * optional role gate (issue #938): before the action's `InternalRunAction`
+ * runs, asserts the contextUser is authorized for the action's `BrandID`
+ * parameter via {@link assertMarketingAccess} (or
+ * {@link assertMarketingRole} when {@link RequiredRole} is non-null).
+ * Returns ResultCode 'ACCESS_DENIED' instead of executing when the user is
+ * not authorized.
+ *
+ * **All marketing actions must extend this class, not `BaseAction` directly.**
+ * The exception is utility actions that don't operate on tenant data —
+ * those override {@link RequiresBrandAccess} to return false.
+ *
+ * The gate is a backstop. The primary enforcement is RowLevelSecurityFilter
+ * on Marketing entities. See migration V202604281203 and the RLS migration
+ * for the entity-layer gate.
+ */
+export declare abstract class MarketingBaseAction extends BaseAction {
+    /**
+     * Whether this action requires the caller to be authorized for the
+     * action's BrandID. Default true. Override and return false on
+     * utility actions that don't read or write brand-scoped data
+     * (e.g. ExtractUrlContent, TranscribeAudio).
+     */
+    protected get RequiresBrandAccess(): boolean;
+    /**
+     * Required role tier for this action (issue #938). Default null = any
+     * authorized user passes (matches v1 behavior). Override on actions that
+     * require Operator or Admin tier — e.g. content approval is Operator+,
+     * strategy approval is Admin+. Has no effect when
+     * {@link RequiresBrandAccess} is false.
+     */
+    protected get RequiredRole(): RoleTier | null;
+    Run(params: RunActionParams): Promise<ActionResultSimple>;
+    /**
+     * Role gate for actions that set {@link RequiresBrandAccess}=false because
+     * they key off a *record* (a binding/view they load) rather than an input
+     * BrandID — so the Run() gate above is skipped. Call this from
+     * InternalRunAction AFTER resolving the record's BrandID. Returns an
+     * ACCESS_DENIED result to return-early on denial, or null to proceed.
+     *
+     * This is the compensating control that makes a non-null {@link RequiredRole}
+     * actually enforce on these actions (issue #938) instead of being dead code.
+     */
+    protected assertRoleForBrand(contextUser: UserInfo | null | undefined, brandId: string | null | undefined, requiredRole: RoleTier): Promise<ActionResultSimple | null>;
+    /**
+     * Brand-agnostic variant of {@link assertRoleForBrand} for actions with
+     * no brand context at all (e.g. Save/Preview Contact View — views are
+     * global definitions over the Contacts entity). Confines the action to
+     * callers holding >= requiredRole on at least one brand. Returns an
+     * ACCESS_DENIED result on denial, or null to proceed.
+     */
+    protected assertRoleAnyBrand(contextUser: UserInfo | null | undefined, requiredRole: RoleTier): Promise<ActionResultSimple | null>;
+}
+//# sourceMappingURL=MarketingBaseAction.d.ts.map

package/dist/MarketingBaseAction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"MarketingBaseAction.d.ts","sourceRoot":"","sources":["../src/MarketingBaseAction.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AACnF,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAKH,QAAQ,EACX,MAAM,6BAA6B,CAAC;AAIrC;;;;;;;;;;;;;;;;;;GAkBG;AACH,8BAAsB,mBAAoB,SAAQ,UAAU;IACxD;;;;;OAKG;IACH,SAAS,KAAK,mBAAmB,IAAI,OAAO,CAE3C;IAED;;;;;;OAMG;IACH,SAAS,KAAK,YAAY,IAAI,QAAQ,GAAG,IAAI,CAE5C;IAEY,GAAG,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAqCtE;;;;;;;;;OASG;cACa,kBAAkB,CAC9B,WAAW,EAAE,QAAQ,GAAG,IAAI,GAAG,SAAS,EACxC,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAClC,YAAY,EAAE,QAAQ,GACvB,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAYrC;;;;;;OAMG;cACa,kBAAkB,CAC9B,WAAW,EAAE,QAAQ,GAAG,IAAI,GAAG,SAAS,EACxC,YAAY,EAAE,QAAQ,GACvB,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;CAWxC"}

package/dist/MarketingBaseAction.js

@@ -0,0 +1,124 @@
+import { BaseAction } from "@memberjunction/actions";
+import { assertMarketingAccess, assertMarketingRole, assertMarketingRoleAnyBrand, MarketingAccessDeniedError, } from "@mj-biz-apps/marketing-core";
+import { getParam } from "@mj-biz-apps/marketing-core";
+import { isUuid } from "@mj-biz-apps/marketing-core";
+/**
+ * Base class for every Marketing-domain action.
+ *
+ * Wraps {@link BaseAction.Run} with a permission gate (issue #916) and an
+ * optional role gate (issue #938): before the action's `InternalRunAction`
+ * runs, asserts the contextUser is authorized for the action's `BrandID`
+ * parameter via {@link assertMarketingAccess} (or
+ * {@link assertMarketingRole} when {@link RequiredRole} is non-null).
+ * Returns ResultCode 'ACCESS_DENIED' instead of executing when the user is
+ * not authorized.
+ *
+ * **All marketing actions must extend this class, not `BaseAction` directly.**
+ * The exception is utility actions that don't operate on tenant data —
+ * those override {@link RequiresBrandAccess} to return false.
+ *
+ * The gate is a backstop. The primary enforcement is RowLevelSecurityFilter
+ * on Marketing entities. See migration V202604281203 and the RLS migration
+ * for the entity-layer gate.
+ */
+export class MarketingBaseAction extends BaseAction {
+    /**
+     * Whether this action requires the caller to be authorized for the
+     * action's BrandID. Default true. Override and return false on
+     * utility actions that don't read or write brand-scoped data
+     * (e.g. ExtractUrlContent, TranscribeAudio).
+     */
+    get RequiresBrandAccess() {
+        return true;
+    }
+    /**
+     * Required role tier for this action (issue #938). Default null = any
+     * authorized user passes (matches v1 behavior). Override on actions that
+     * require Operator or Admin tier — e.g. content approval is Operator+,
+     * strategy approval is Admin+. Has no effect when
+     * {@link RequiresBrandAccess} is false.
+     */
+    get RequiredRole() {
+        return null;
+    }
+    async Run(params) {
+        if (this.RequiresBrandAccess) {
+            const brandId = getParam(params, 'BrandID');
+            // Reject a present-but-malformed BrandID before it is interpolated
+            // into the authorization query's ExtraFilter. This is the single
+            // chokepoint every gated action passes through, so it closes the
+            // SQL-injection vector for the gate query itself, not just each
+            // action's own filters. A missing BrandID is left to the gate
+            // below, which returns ACCESS_DENIED ('missing BrandID').
+            if (brandId != null && brandId !== '' && !isUuid(brandId)) {
+                return {
+                    Success: false,
+                    Message: 'BrandID must be a valid UUID',
+                    ResultCode: 'VALIDATION_ERROR',
+                };
+            }
+            const requiredRole = this.RequiredRole;
+            try {
+                if (requiredRole !== null) {
+                    await assertMarketingRole(params.ContextUser, brandId, requiredRole);
+                }
+                else {
+                    await assertMarketingAccess(params.ContextUser, brandId);
+                }
+            }
+            catch (error) {
+                if (error instanceof MarketingAccessDeniedError) {
+                    return {
+                        Success: false,
+                        Message: error.message,
+                        ResultCode: 'ACCESS_DENIED',
+                    };
+                }
+                throw error;
+            }
+        }
+        return await this.InternalRunAction(params);
+    }
+    /**
+     * Role gate for actions that set {@link RequiresBrandAccess}=false because
+     * they key off a *record* (a binding/view they load) rather than an input
+     * BrandID — so the Run() gate above is skipped. Call this from
+     * InternalRunAction AFTER resolving the record's BrandID. Returns an
+     * ACCESS_DENIED result to return-early on denial, or null to proceed.
+     *
+     * This is the compensating control that makes a non-null {@link RequiredRole}
+     * actually enforce on these actions (issue #938) instead of being dead code.
+     */
+    async assertRoleForBrand(contextUser, brandId, requiredRole) {
+        try {
+            await assertMarketingRole(contextUser, brandId, requiredRole);
+            return null;
+        }
+        catch (error) {
+            if (error instanceof MarketingAccessDeniedError) {
+                return { Success: false, Message: error.message, ResultCode: 'ACCESS_DENIED' };
+            }
+            throw error;
+        }
+    }
+    /**
+     * Brand-agnostic variant of {@link assertRoleForBrand} for actions with
+     * no brand context at all (e.g. Save/Preview Contact View — views are
+     * global definitions over the Contacts entity). Confines the action to
+     * callers holding >= requiredRole on at least one brand. Returns an
+     * ACCESS_DENIED result on denial, or null to proceed.
+     */
+    async assertRoleAnyBrand(contextUser, requiredRole) {
+        try {
+            await assertMarketingRoleAnyBrand(contextUser, requiredRole);
+            return null;
+        }
+        catch (error) {
+            if (error instanceof MarketingAccessDeniedError) {
+                return { Success: false, Message: error.message, ResultCode: 'ACCESS_DENIED' };
+            }
+            throw error;
+        }
+    }
+}
+//# sourceMappingURL=MarketingBaseAction.js.map

package/dist/MarketingBaseAction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MarketingBaseAction.js","sourceRoot":"","sources":["../src/MarketingBaseAction.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAErD,OAAO,EACH,qBAAqB,EACrB,mBAAmB,EACnB,2BAA2B,EAC3B,0BAA0B,GAE7B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AACvD,OAAO,EAAE,MAAM,EAAE,MAAM,6BAA6B,CAAC;AAErD;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,OAAgB,mBAAoB,SAAQ,UAAU;IACxD;;;;;OAKG;IACH,IAAc,mBAAmB;QAC7B,OAAO,IAAI,CAAC;IAChB,CAAC;IAED;;;;;;OAMG;IACH,IAAc,YAAY;QACtB,OAAO,IAAI,CAAC;IAChB,CAAC;IAEM,KAAK,CAAC,GAAG,CAAC,MAAuB;QACpC,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YAC5C,mEAAmE;YACnE,iEAAiE;YACjE,iEAAiE;YACjE,gEAAgE;YAChE,8DAA8D;YAC9D,0DAA0D;YAC1D,IAAI,OAAO,IAAI,IAAI,IAAI,OAAO,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;gBACxD,OAAO;oBACH,OAAO,EAAE,KAAK;oBACd,OAAO,EAAE,8BAA8B;oBACvC,UAAU,EAAE,kBAAkB;iBACjC,CAAC;YACN,CAAC;YACD,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;YACvC,IAAI,CAAC;gBACD,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;oBACxB,MAAM,mBAAmB,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC;gBACzE,CAAC;qBAAM,CAAC;oBACJ,MAAM,qBAAqB,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;gBAC7D,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACb,IAAI,KAAK,YAAY,0BAA0B,EAAE,CAAC;oBAC9C,OAAO;wBACH,OAAO,EAAE,KAAK;wBACd,OAAO,EAAE,KAAK,CAAC,OAAO;wBACtB,UAAU,EAAE,eAAe;qBAC9B,CAAC;gBACN,CAAC;gBACD,MAAM,KAAK,CAAC;YAChB,CAAC;QACL,CAAC;QACD,OAAO,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAChD,CAAC;IAED;;;;;;;;;OASG;IACO,KAAK,CAAC,kBAAkB,CAC9B,WAAwC,EACxC,OAAkC,EAClC,YAAsB;QAEtB,IAAI,CAAC;YACD,MAAM,mBAAmB,CAAC,WAAW,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC;YAC9D,OAAO,IAAI,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,KAAK,YAAY,0BAA0B,EAAE,CAAC;gBAC9C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,CAAC;YACnF,CAAC;YACD,MAAM,KAAK,CAAC;QAChB,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACO,KAAK,CAAC,kBAAkB,CAC9B,WAAwC,EACxC,YAAsB;QAEtB,IAAI,CAAC;YACD,MAAM,2BAA2B,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;YAC7D,OAAO,IAAI,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,KAAK,YAAY,0BAA0B,EAAE,CAAC;gBAC9C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,CAAC;YACnF,CAAC;YACD,MAAM,KAAK,CAAC;QAChB,CAAC;IACL,CAAC;CACJ"}

package/dist/__tests__/approveContent.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=approveContent.test.d.ts.map

package/dist/__tests__/approveContent.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approveContent.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/approveContent.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/approveContent.test.js

@@ -0,0 +1,107 @@
+import { beforeEach, describe, expect, it, vi } from 'vitest';
+/**
+ * Approve Content (CE-6 / CE-10 / CE-11): the decision is a durable record BEFORE it is a
+ * status flip, a rejection needs notes, a rejected Blog leaves the notes in its revision
+ * history, and nothing here publishes.
+ */
+const answerMock = vi.fn();
+const assertRoleMock = vi.fn(async () => undefined);
+const runViewMock = vi.fn();
+const blogSaveMock = vi.fn(async () => true);
+const revisionSaveMock = vi.fn(async () => true);
+const newRevision = { ID: 'REV-NEW', BlogID: '', RevisionNumber: 0, Feedback: '', NewRecord() { }, Save: revisionSaveMock, LatestResult: null };
+vi.mock('@memberjunction/core', async (importOriginal) => {
+    const original = await importOriginal();
+    class RunViewStub {
+        RunView(opts) { return runViewMock(opts); }
+    }
+    class MetadataStub {
+        async GetEntityObject() { return newRevision; }
+    }
+    return { ...original, RunView: RunViewStub, Metadata: MetadataStub };
+});
+vi.mock('@mj-biz-apps/marketing-core', async (importOriginal) => {
+    const original = await importOriginal();
+    return {
+        ...original,
+        assertMarketingRole: () => assertRoleMock(),
+        answerContentReview: (opts) => answerMock(opts),
+        lookupBlogStatusId: async (name) => `STATUS-${name}`,
+        lookupContentStatusId: async (name) => `CSTATUS-${name}`,
+    };
+});
+import { ApproveContentAction } from '../writes/ApproveContentAction.js';
+const BRAND = 'AAAAAAAA-0000-4000-8000-000000000001';
+const BLOG_TYPE = 'CT-BLOG';
+const USER = { ID: 'U-REVIEWER', Email: 'reviewer@example.test' };
+const blogRow = { ID: 'B1', StatusID: 'STATUS-Draft', Save: blogSaveMock, LatestResult: null };
+function params(inputs) {
+    return {
+        Action: { Name: 'Approve Content' },
+        ContextUser: USER,
+        Filters: [],
+        Params: Object.entries(inputs).map(([Name, Value]) => ({ Name, Type: 'Input', Value })),
+    };
+}
+beforeEach(() => {
+    vi.clearAllMocks();
+    blogRow.StatusID = 'STATUS-Draft';
+    runViewMock.mockImplementation(async ({ EntityName }) => {
+        if (EntityName.endsWith('Content Types'))
+            return { Success: true, Results: [{ ID: BLOG_TYPE, Name: 'Blog' }] };
+        if (EntityName.endsWith('Blogs'))
+            return { Success: true, Results: [blogRow] };
+        if (EntityName.endsWith('Blog Revisions'))
+            return { Success: true, Results: [{ RevisionNumber: 2 }] };
+        return { Success: true, Results: [] };
+    });
+    answerMock.mockResolvedValue({ requestId: 'REQ-1', createdRetroactively: false });
+});
+describe('Approve Content — durable decision, then the status flip', () => {
+    it('refuses a rejection without notes BEFORE recording or moving anything', async () => {
+        const r = await new ApproveContentAction().Run(params({ ContentTypeID: BLOG_TYPE, ContentID: 'B1', Decision: 'Rejected', BrandID: BRAND }));
+        expect(r.Success).toBe(false);
+        expect(r.ResultCode).toBe('VALIDATION_ERROR');
+        expect(answerMock).not.toHaveBeenCalled();
+        expect(blogSaveMock).not.toHaveBeenCalled();
+    });
+    it('approving answers the review request with the notes, then moves the Blog to Ready', async () => {
+        const r = await new ApproveContentAction().Run(params({ ContentTypeID: BLOG_TYPE, ContentID: 'B1', Decision: 'Approved', BrandID: BRAND, ReviewerNotes: 'Good to go' }));
+        expect(r.Success).toBe(true);
+        expect(answerMock).toHaveBeenCalledTimes(1);
+        expect(answerMock.mock.calls[0][0]).toMatchObject({ decision: 'Approved', notes: 'Good to go', contentId: 'B1' });
+        expect(blogRow.StatusID).toBe('STATUS-Ready');
+        expect(blogSaveMock).toHaveBeenCalledTimes(1);
+        expect(r.Params?.find(p => p.Name === 'ReviewRequestID')?.Value).toBe('REQ-1');
+        expect(revisionSaveMock).not.toHaveBeenCalled();
+    });
+    it('"Approved with Edits" is an approval', async () => {
+        const r = await new ApproveContentAction().Run(params({ ContentTypeID: BLOG_TYPE, ContentID: 'B1', Decision: 'Approved with Edits', BrandID: BRAND }));
+        expect(r.Success).toBe(true);
+        expect(answerMock.mock.calls[0][0].decision).toBe('Approved');
+        expect(blogRow.StatusID).toBe('STATUS-Ready');
+    });
+    it('rejecting a Blog records the request, returns it to Draft, and files the notes as a feedback-only revision', async () => {
+        blogRow.StatusID = 'STATUS-Ready';
+        const r = await new ApproveContentAction().Run(params({ ContentTypeID: BLOG_TYPE, ContentID: 'B1', Decision: 'Rejected', BrandID: BRAND, ReviewerNotes: 'Lede buries the point' }));
+        expect(r.Success).toBe(true);
+        expect(answerMock.mock.calls[0][0]).toMatchObject({ decision: 'Rejected', notes: 'Lede buries the point' });
+        expect(blogRow.StatusID).toBe('STATUS-Draft');
+        expect(revisionSaveMock).toHaveBeenCalledTimes(1);
+        expect(newRevision.RevisionNumber).toBe(3);
+        expect(newRevision.Feedback).toBe('[Rejected] Lede buries the point');
+        expect(r.Params?.find(p => p.Name === 'RevisionID')?.Value).toBe('REV-NEW');
+    });
+    it('a failed record-keeping step stops the flip — no status change without its decision row', async () => {
+        answerMock.mockRejectedValue(Object.assign(new Error('request save failed'), { code: 'SAVE_FAILED' }));
+        const r = await new ApproveContentAction().Run(params({ ContentTypeID: BLOG_TYPE, ContentID: 'B1', Decision: 'Approved', BrandID: BRAND }));
+        expect(r.Success).toBe(false);
+        expect(blogSaveMock).not.toHaveBeenCalled();
+    });
+    it('never publishes: the result carries no publish outputs and no CMS call is made', async () => {
+        const r = await new ApproveContentAction().Run(params({ ContentTypeID: BLOG_TYPE, ContentID: 'B1', Decision: 'Approved', BrandID: BRAND }));
+        expect(r.Params?.some(p => p.Name === 'AutoPublished' || p.Name === 'PublishedURL')).toBe(false);
+        expect(r.Message).not.toMatch(/auto-published|published to/i);
+    });
+});
+//# sourceMappingURL=approveContent.test.js.map

package/dist/__tests__/approveContent.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approveContent.test.js","sourceRoot":"","sources":["../../src/__tests__/approveContent.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAK9D;;;;GAIG;AAEH,MAAM,UAAU,GAAG,EAAE,CAAC,EAAE,EAAmI,CAAC;AAC5J,MAAM,cAAc,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,SAAS,CAAC,CAAC;AACpD,MAAM,WAAW,GAAG,EAAE,CAAC,EAAE,EAA4E,CAAC;AACtG,MAAM,YAAY,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC;AAC7C,MAAM,gBAAgB,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC;AACjD,MAAM,WAAW,GAAG,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,cAAc,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,KAAI,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;AAE/I,EAAE,CAAC,IAAI,CAAC,sBAAsB,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE;IACrD,MAAM,QAAQ,GAAG,MAAM,cAAc,EAAyC,CAAC;IAC/E,MAAM,WAAW;QAAU,OAAO,CAAC,IAA4B,IAAI,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;KAAE;IAChG,MAAM,YAAY;QAAU,KAAK,CAAC,eAAe,KAAK,OAAO,WAAW,CAAC,CAAC,CAAC;KAAE;IAC7E,OAAO,EAAE,GAAG,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;AACzE,CAAC,CAAC,CAAC;AAEH,EAAE,CAAC,IAAI,CAAC,6BAA6B,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE;IAC5D,MAAM,QAAQ,GAAG,MAAM,cAAc,EAAgD,CAAC;IACtF,OAAO;QACH,GAAG,QAAQ;QACX,mBAAmB,EAAE,GAAG,EAAE,CAAC,cAAc,EAAE;QAC3C,mBAAmB,EAAE,CAAC,IAA4D,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;QACvG,kBAAkB,EAAE,KAAK,EAAE,IAAY,EAAE,EAAE,CAAC,UAAU,IAAI,EAAE;QAC5D,qBAAqB,EAAE,KAAK,EAAE,IAAY,EAAE,EAAE,CAAC,WAAW,IAAI,EAAE;KACnE,CAAC;AACN,CAAC,CAAC,CAAC;AAEH,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AAEzE,MAAM,KAAK,GAAG,sCAAsC,CAAC;AACrD,MAAM,SAAS,GAAG,SAAS,CAAC;AAC5B,MAAM,IAAI,GAAG,EAAE,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,uBAAuB,EAAc,CAAC;AAC9E,MAAM,OAAO,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,cAAc,EAAE,IAAI,EAAE,YAAY,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;AAE/F,SAAS,MAAM,CAAC,MAA8B;IAC1C,OAAO;QACH,MAAM,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAoB;QACrD,WAAW,EAAE,IAAI;QACjB,OAAO,EAAE,EAAE;QACX,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAgB,EAAE,KAAK,EAAE,CAAC,CAAC;KAChF,CAAC;AACzB,CAAC;AAED,UAAU,CAAC,GAAG,EAAE;IACZ,EAAE,CAAC,aAAa,EAAE,CAAC;IACnB,OAAO,CAAC,QAAQ,GAAG,cAAc,CAAC;IAClC,WAAW,CAAC,kBAAkB,CAAC,KAAK,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE;QACpD,IAAI,UAAU,CAAC,QAAQ,CAAC,eAAe,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QAC/G,IAAI,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/E,IAAI,UAAU,CAAC,QAAQ,CAAC,gBAAgB,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;QACtG,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAC1C,CAAC,CAAC,CAAC;IACH,UAAU,CAAC,iBAAiB,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAAC,CAAC;AACtF,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,0DAA0D,EAAE,GAAG,EAAE;IACtE,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,CAAC,GAAG,MAAM,IAAI,oBAAoB,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QAC5I,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAC9C,MAAM,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAC1C,MAAM,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mFAAmF,EAAE,KAAK,IAAI,EAAE;QAC/F,MAAM,CAAC,GAAG,MAAM,IAAI,oBAAoB,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC;QACzK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,CAAC,UAAU,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC5C,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAClH,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC9C,MAAM,CAAC,YAAY,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC9C,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,iBAAiB,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC/E,MAAM,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;QAClD,MAAM,CAAC,GAAG,MAAM,IAAI,oBAAoB,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,qBAAqB,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QACvJ,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC9D,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4GAA4G,EAAE,KAAK,IAAI,EAAE;QACxH,OAAO,CAAC,QAAQ,GAAG,cAAc,CAAC;QAClC,MAAM,CAAC,GAAG,MAAM,IAAI,oBAAoB,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,uBAAuB,EAAE,CAAC,CAAC,CAAC;QACpL,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;QAC5G,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC9C,MAAM,CAAC,gBAAgB,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAClD,MAAM,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC3C,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;QACtE,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yFAAyF,EAAE,KAAK,IAAI,EAAE;QACrG,UAAU,CAAC,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,qBAAqB,CAAC,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC;QACvG,MAAM,CAAC,GAAG,MAAM,IAAI,oBAAoB,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QAC5I,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,MAAM,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gFAAgF,EAAE,KAAK,IAAI,EAAE;QAC5F,MAAM,CAAC,GAAG,MAAM,IAAI,oBAAoB,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QAC5I,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,eAAe,IAAI,CAAC,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjG,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,8BAA8B,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}

package/dist/__tests__/createBrand.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=createBrand.test.d.ts.map

package/dist/__tests__/createBrand.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"createBrand.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/createBrand.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/createBrand.test.js

@@ -0,0 +1,108 @@
+import { beforeEach, describe, expect, it, vi } from 'vitest';
+/**
+ * Create Brand (D-20 §3.2, later brands): company Admins only, no Company creation, no grant,
+ * duplicate names refused, IsDefault only when the company had no active brand, one transaction.
+ */
+const runViewMock = vi.fn();
+const transactionMock = vi.fn();
+const companyAdminMock = vi.fn();
+const created = [];
+function fakeEntity(name) {
+    const fields = {};
+    const e = new Proxy({}, {
+        get(_t, prop) {
+            if (prop === 'EntityName')
+                return name;
+            if (prop === 'Fields')
+                return fields;
+            if (prop === 'ID')
+                return fields['ID'];
+            if (prop === 'NewRecord')
+                return () => { fields['ID'] = `${name.replace(/[^A-Z]/gi, '').toUpperCase()}-${created.length + 1}`; };
+            if (prop === 'LatestResult')
+                return { CompleteMessage: `refused: ${name}` };
+            if (prop === 'Save')
+                return async () => { created.push(e); return true; };
+            return fields[prop];
+        },
+        set(_t, prop, value) { fields[prop] = value; return true; },
+    });
+    return e;
+}
+vi.mock('@memberjunction/core', async (importOriginal) => {
+    const original = await importOriginal();
+    class RunViewStub {
+        RunView(opts) { return runViewMock(opts); }
+    }
+    class MetadataStub {
+        static { this.Provider = { SupportsEntityTransactions: true }; }
+        async GetEntityObject(name) { return fakeEntity(name); }
+    }
+    return { ...original, RunView: RunViewStub, Metadata: MetadataStub, RunInEntityTransaction: (p, w) => transactionMock(p, w), LogError: vi.fn(), LogStatus: vi.fn() };
+});
+vi.mock('@mj-biz-apps/marketing-core', async (importOriginal) => {
+    const original = await importOriginal();
+    return { ...original, hasCompanyAdminGrant: (u, c) => companyAdminMock(u, c) };
+});
+import { CreateBrandAction } from '../writes/CreateBrandAction.js';
+const ADMIN = { ID: 'U-ADMIN', Email: 'admin@example.test', Type: 'User' };
+const COMPANY = 'C0000000-0000-4000-8000-000000000001';
+let siblings = [];
+function run(inputs) {
+    const params = {
+        Action: { Name: 'Create Brand' }, ContextUser: ADMIN, Filters: [],
+        Params: Object.entries(inputs).map(([Name, Value]) => ({ Name, Type: 'Input', Value })),
+    };
+    return new CreateBrandAction().Run(params).then(r => ({ r, params }));
+}
+const names = () => created.map(e => e.EntityName);
+beforeEach(() => {
+    vi.clearAllMocks();
+    created.length = 0;
+    siblings = [{ ID: 'B-1', BrandName: 'Sidecar' }];
+    companyAdminMock.mockResolvedValue(true);
+    transactionMock.mockImplementation(async (_p, work) => work());
+    runViewMock.mockImplementation(async ({ EntityName }) => {
+        if (EntityName.endsWith('Brands'))
+            return { Success: true, Results: siblings };
+        if (EntityName.endsWith('Brand Jobs'))
+            return { Success: true, Results: [{ ID: 'J1' }] };
+        return { Success: true, Results: [] };
+    });
+});
+describe('Create Brand', () => {
+    it('requires a company Admin', async () => {
+        companyAdminMock.mockResolvedValue(false);
+        const { r } = await run({ CompanyID: COMPANY, BrandName: 'Izzy' });
+        expect(r.ResultCode).toBe('ACCESS_DENIED');
+        expect(transactionMock).not.toHaveBeenCalled();
+    });
+    it('refuses a duplicate name within the company, case-insensitively', async () => {
+        const { r } = await run({ CompanyID: COMPANY, BrandName: 'sidecar' });
+        expect(r.ResultCode).toBe('DUPLICATE_NAME');
+        expect(transactionMock).not.toHaveBeenCalled();
+    });
+    it('writes organization, brand, defaults in one transaction — no Company, no grant, not default', async () => {
+        const { r, params } = await run({ CompanyID: COMPANY, BrandName: 'Izzy', Website: 'https://izzy.test' });
+        expect(r.Success).toBe(true);
+        expect(transactionMock).toHaveBeenCalledTimes(1);
+        expect(names()).toEqual([
+            'MJ_BizApps_Common: Organizations',
+            'MJ_BizApps_Marketing: Brands',
+            'MJ_BizApps_Marketing: Attribution Configs',
+            'MJ_BizApps_Marketing: Source Entity Maps',
+            'MJ_BizApps_Marketing: Source Entity Maps',
+            'MJ_BizApps_Marketing: Source Entity Maps',
+        ]);
+        const brand = created[1];
+        expect(brand.Fields).toMatchObject({ CompanyID: COMPANY, BrandName: 'Izzy', IsDefault: false, IsActive: true });
+        const out = Object.fromEntries(params.Params.filter(p => p.Type === 'Output').map(p => [p.Name, p.Value]));
+        expect(out).toMatchObject({ BrandID: brand.ID, ResolvedOrganizationID: created[0].ID, JobsStamped: 1 });
+    });
+    it('becomes the default brand when the company had none', async () => {
+        siblings = [];
+        await run({ CompanyID: COMPANY, BrandName: 'Only' });
+        expect(created[1].Fields.IsDefault).toBe(true);
+    });
+});
+//# sourceMappingURL=createBrand.test.js.map

package/dist/__tests__/createBrand.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createBrand.test.js","sourceRoot":"","sources":["../../src/__tests__/createBrand.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAK9D;;;GAGG;AAEH,MAAM,WAAW,GAAG,EAAE,CAAC,EAAE,EAA4E,CAAC;AACtG,MAAM,eAAe,GAAG,EAAE,CAAC,EAAE,EAAyE,CAAC;AACvG,MAAM,gBAAgB,GAAG,EAAE,CAAC,EAAE,EAA2D,CAAC;AAE1F,MAAM,OAAO,GAAiB,EAAE,CAAC;AACjC,SAAS,UAAU,CAAC,IAAY;IAC5B,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,MAAM,CAAC,GAAG,IAAI,KAAK,CAAC,EAAgB,EAAE;QAClC,GAAG,CAAC,EAAE,EAAE,IAAY;YAChB,IAAI,IAAI,KAAK,YAAY;gBAAE,OAAO,IAAI,CAAC;YACvC,IAAI,IAAI,KAAK,QAAQ;gBAAE,OAAO,MAAM,CAAC;YACrC,IAAI,IAAI,KAAK,IAAI;gBAAE,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;YACvC,IAAI,IAAI,KAAK,WAAW;gBAAE,OAAO,GAAG,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YACjI,IAAI,IAAI,KAAK,cAAc;gBAAE,OAAO,EAAE,eAAe,EAAE,YAAY,IAAI,EAAE,EAAE,CAAC;YAC5E,IAAI,IAAI,KAAK,MAAM;gBAAE,OAAO,KAAK,IAAI,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC;YAC1E,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;QACxB,CAAC;QACD,GAAG,CAAC,EAAE,EAAE,IAAY,EAAE,KAAc,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC;KAC/E,CAAC,CAAC;IACH,OAAO,CAAC,CAAC;AACb,CAAC;AAED,EAAE,CAAC,IAAI,CAAC,sBAAsB,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE;IACrD,MAAM,QAAQ,GAAG,MAAM,cAAc,EAAyC,CAAC;IAC/E,MAAM,WAAW;QAAU,OAAO,CAAC,IAA4B,IAAI,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;KAAE;IAChG,MAAM,YAAY;iBACA,aAAQ,GAAG,EAAE,0BAA0B,EAAE,IAAI,EAAE,CAAC;QACvD,KAAK,CAAC,eAAe,CAAC,IAAY,IAAI,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;;IAE3E,OAAO,EAAE,GAAG,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,YAAY,EAAE,sBAAsB,EAAE,CAAC,CAAU,EAAE,CAAyB,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC;AAC1M,CAAC,CAAC,CAAC;AACH,EAAE,CAAC,IAAI,CAAC,6BAA6B,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE;IAC5D,MAAM,QAAQ,GAAG,MAAM,cAAc,EAAgD,CAAC;IACtF,OAAO,EAAE,GAAG,QAAQ,EAAE,oBAAoB,EAAE,CAAC,CAAW,EAAE,CAAS,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;AACrG,CAAC,CAAC,CAAC;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AAEnE,MAAM,KAAK,GAAG,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,oBAAoB,EAAE,IAAI,EAAE,MAAM,EAAc,CAAC;AACvF,MAAM,OAAO,GAAG,sCAAsC,CAAC;AACvD,IAAI,QAAQ,GAA6C,EAAE,CAAC;AAE5D,SAAS,GAAG,CAAC,MAA8B;IACvC,MAAM,MAAM,GAAG;QACX,MAAM,EAAE,EAAE,IAAI,EAAE,cAAc,EAAoB,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACnF,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAgB,EAAE,KAAK,EAAE,CAAC,CAAC;KAChF,CAAC;IACrB,OAAO,IAAI,iBAAiB,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;AAC1E,CAAC;AACD,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;AAEnD,UAAU,CAAC,GAAG,EAAE;IACZ,EAAE,CAAC,aAAa,EAAE,CAAC;IACnB,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;IACnB,QAAQ,GAAG,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;IACjD,gBAAgB,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACzC,eAAe,CAAC,kBAAkB,CAAC,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;IAC/D,WAAW,CAAC,kBAAkB,CAAC,KAAK,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE;QACpD,IAAI,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;QAC/E,IAAI,UAAU,CAAC,QAAQ,CAAC,YAAY,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QACzF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAC1C,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC1B,EAAE,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;QACtC,gBAAgB,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,EAAE,CAAC,EAAE,GAAG,MAAM,GAAG,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;QACnE,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC3C,MAAM,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC7E,MAAM,EAAE,CAAC,EAAE,GAAG,MAAM,GAAG,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;QACtE,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC5C,MAAM,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6FAA6F,EAAE,KAAK,IAAI,EAAE;QACzG,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC,CAAC;QACzG,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,CAAC,eAAe,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACjD,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC;YACpB,kCAAkC;YAClC,8BAA8B;YAC9B,2CAA2C;YAC3C,0CAA0C;YAC1C,0CAA0C;YAC1C,0CAA0C;SAC7C,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACzB,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,aAAa,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAChH,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC3G,MAAM,CAAC,GAAG,CAAC,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,sBAAsB,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC;IAC5G,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACjE,QAAQ,GAAG,EAAE,CAAC;QACd,MAAM,GAAG,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;QACrD,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}

package/dist/__tests__/createFirstBrand.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=createFirstBrand.test.d.ts.map

package/dist/__tests__/createFirstBrand.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"createFirstBrand.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/createFirstBrand.test.ts"],"names":[],"mappings":""}