Static ReadonlyAuthorizesTrue when the action authorizes its caller itself, so a public entry point such as the
RunAction mutation may run it for an authenticated user without an MJ: Action Authorizations link. Set it only on an action that either checks an authorization the caller
must hold, or reads and writes only with the caller's own permissions. Leave it false for an
action that acts with more authority than its caller, or that reaches data or sends messages
the caller chooses but could not otherwise reach.
The engine reads the marker only from the class that runs, never from its parent classes. A subclass that overrides a marked action must declare the marker again.
ProtectedaddAppend (or overwrite) an output param on the run params.
ProtectedcreateConstruct the production promotion gate. Overridable so tests inject a mock.
ProtectedfailBuild a failure ActionResultSimple.
ProtectedfindLocate a param by case-insensitive, whitespace-tolerant name.
ProtectedgetRead a boolean param. Accepts native booleans and the usual truthy/falsey
string forms (true/1/yes, false/0/no); falls back to defaultValue.
ProtectedgetRead a JSON-object param. Accepts either an object value or a JSON string that
parses to an object. Returns undefined when missing or not an object.
ProtectedgetRead a numeric param. Returns undefined when missing or non-numeric so the
caller can apply its own default / required check.
ProtectedgetRead a string param (trimmed). Returns undefined when missing/empty so the
caller can branch on required-ness.
ProtectedInternalInternal method that must be implemented by derived action classes. This is where the actual action logic should be implemented.
The action execution parameters including typed context
Promise resolving to the action result
ProtectedleakageCompose the plain-language refusal message for a leakage-flagged model.
ProtectedmapMap the gate outcome to an ActionResultSimple.
ProtectedokBuild a success ActionResultSimple, carrying the (mutated) params back.
ProtectedparseParse + validate the TargetStatus param against the promotable set.
Executes the action with the provided parameters.
The action execution parameters including context
Promise resolving to the action result
ProtectedsignCompose the message when a sign-off override of a leakage-flagged model was requested WITHOUT a justification reason — the override is refused until one is supplied so the audit trail is never empty.
Transitions a model's lifecycle status with the leakage sign-off gate enforced. Output:
Status(the new status string, on success).