fix: add virtual System Java actions to ListJavaActions and catalog

System Java actions (System.VerifyPassword, etc.) are built-in and not
stored in the MPR SQLite database, so ListJavaActions() and
ListJavaActionsFull() returned empty results for them. This caused
mxcli check --references to flag calls to System.VerifyPassword as
unknown Java actions.

Adds system_java_actions.go with:
- systemJavaActions table (sourced from mx dump-mpr --module-names=System
  against Mendix 11.9.0 — same extraction approach as system_module.go
  entities)
- BuildSystemJavaActions() for the lightweight types.JavaAction path used
  by executor reference validation
- BuildSystemJavaActionsFull() for the javaactions.JavaAction path used
  by the catalog builder

Both ListJavaActions() and ListJavaActionsFull() now append the virtual
System actions, following the same pattern as ListModules() and
ListDomainModels() for the System module and domain model.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: ako

sdk/mpr/parser_javaactions.go

@@ -509,7 +509,7 @@ func parseInnerParameterType(raw map[string]any) javaactions.CodeActionParameter
 	return nil
 }
 
-// ListJavaActionsFull returns all Java actions with full details.
+// ListJavaActionsFull returns all Java actions with full details, including virtual System module actions.
 func (r *Reader) ListJavaActionsFull() ([]*javaactions.JavaAction, error) {
 	units, err := r.listUnitsByType("JavaActions$JavaAction")
 	if err != nil {
@@ -525,6 +525,9 @@ func (r *Reader) ListJavaActionsFull() ([]*javaactions.JavaAction, error) {
 		result = append(result, ja)
 	}
 
+	// Append virtual System module Java actions (not stored in the MPR database)
+	result = append(result, BuildSystemJavaActionsFull()...)
+
 	return result, nil
 }
 

sdk/mpr/parser_javaactions_test.go

@@ -8,6 +8,52 @@ import (
 	"github.com/mendixlabs/mxcli/sdk/javaactions"
 )
 
+func TestBuildSystemJavaActions_VerifyPassword(t *testing.T) {
+	actions := BuildSystemJavaActions()
+
+	var found bool
+	for _, a := range actions {
+		if a.Name == "VerifyPassword" && string(a.ContainerID) == SystemModuleID {
+			found = true
+			break
+		}
+	}
+	if !found {
+		t.Error("BuildSystemJavaActions: System.VerifyPassword not present")
+	}
+}
+
+func TestBuildSystemJavaActionsFull_VerifyPassword(t *testing.T) {
+	actions := BuildSystemJavaActionsFull()
+
+	var found bool
+	for _, a := range actions {
+		if a.Name != "VerifyPassword" || string(a.ContainerID) != SystemModuleID {
+			continue
+		}
+		found = true
+		if len(a.Parameters) != 2 {
+			t.Errorf("VerifyPassword: want 2 parameters, got %d", len(a.Parameters))
+		}
+		if _, ok := a.ReturnType.(*javaactions.BooleanType); !ok {
+			t.Errorf("VerifyPassword: want BooleanType return, got %T", a.ReturnType)
+		}
+	}
+	if !found {
+		t.Error("BuildSystemJavaActionsFull: System.VerifyPassword not present")
+	}
+}
+
+func TestBuildSystemJavaActions_DeterministicIDs(t *testing.T) {
+	a1 := BuildSystemJavaActions()
+	a2 := BuildSystemJavaActions()
+	for i := range a1 {
+		if a1[i].ID != a2[i].ID {
+			t.Errorf("non-deterministic ID for %s", a1[i].Name)
+		}
+	}
+}
+
 func TestParseCodeActionParameterType_JavaActionMicroflowParameter(t *testing.T) {
 	value := parseCodeActionParameterType(map[string]any{
 		"$ID":   "type-1",

sdk/mpr/reader_types.go

@@ -34,7 +34,7 @@ type (
 	ProjectVersion     = types.ProjectVersion
 )
 
-// ListJavaActions returns all Java actions in the project.
+// ListJavaActions returns all Java actions in the project, including virtual System module actions.
 func (r *Reader) ListJavaActions() ([]*types.JavaAction, error) {
 	units, err := r.listUnitsByType("JavaActions$JavaAction")
 	if err != nil {
@@ -50,6 +50,9 @@ func (r *Reader) ListJavaActions() ([]*types.JavaAction, error) {
 		result = append(result, ja)
 	}
 
+	// Append virtual System module Java actions (not stored in the MPR database)
+	result = append(result, BuildSystemJavaActions()...)
+
 	return result, nil
 }
 

sdk/mpr/system_java_actions.go

@@ -0,0 +1,118 @@
+// SPDX-License-Identifier: Apache-2.0
+
+package mpr
+
+import (
+	"github.com/mendixlabs/mxcli/mdl/types"
+	"github.com/mendixlabs/mxcli/model"
+	"github.com/mendixlabs/mxcli/sdk/javaactions"
+)
+
+// systemJavaParamDef defines a parameter of a System Java action.
+type systemJavaParamDef struct {
+	Name string
+	Type string // "String", "Boolean", "Integer", "Long", "Decimal", "DateTime"
+}
+
+// systemJavaActionDef defines a Java action in the System module.
+type systemJavaActionDef struct {
+	Name          string
+	Documentation string
+	ReturnType    string // "Boolean", "String", "Integer", "Long", "Decimal", "DateTime", "Void"
+	Parameters    []systemJavaParamDef
+}
+
+// systemJavaActions lists all Java actions in the System module.
+// Extracted from Mendix Studio Pro 11.9.0 via mx dump-mpr --module-names=System --unit-type=JavaActions$JavaAction.
+var systemJavaActions = []systemJavaActionDef{
+	{
+		Name:          "VerifyPassword",
+		Documentation: "Verifies that the specified user name/password combination is valid.",
+		ReturnType:    "Boolean",
+		Parameters: []systemJavaParamDef{
+			{Name: "userName", Type: "String"},
+			{Name: "password", Type: "String"},
+		},
+	},
+}
+
+// BuildSystemJavaActions returns lightweight types.JavaAction entries for the System module.
+// These are built-in Java actions not stored in the MPR SQLite database.
+// Used by ListJavaActions() for executor reference validation.
+func BuildSystemJavaActions() []*types.JavaAction {
+	result := make([]*types.JavaAction, 0, len(systemJavaActions))
+	for _, def := range systemJavaActions {
+		ja := &types.JavaAction{
+			ContainerID:   model.ID(SystemModuleID),
+			Name:          def.Name,
+			Documentation: def.Documentation,
+		}
+		ja.ID = model.ID(GenerateDeterministicID("System." + def.Name))
+		result = append(result, ja)
+	}
+	return result
+}
+
+// BuildSystemJavaActionsFull returns fully-typed javaactions.JavaAction entries for the System module.
+// These are built-in Java actions not stored in the MPR SQLite database.
+// Used by ListJavaActionsFull() for catalog insertion.
+func BuildSystemJavaActionsFull() []*javaactions.JavaAction {
+	result := make([]*javaactions.JavaAction, 0, len(systemJavaActions))
+	for _, def := range systemJavaActions {
+		ja := &javaactions.JavaAction{
+			ContainerID:   model.ID(SystemModuleID),
+			Name:          def.Name,
+			Documentation: def.Documentation,
+			ExportLevel:   "Hidden",
+		}
+		ja.ID = model.ID(GenerateDeterministicID("System." + def.Name))
+		ja.ReturnType = buildSystemReturnType(def.ReturnType)
+		for _, p := range def.Parameters {
+			param := &javaactions.JavaActionParameter{
+				Name:       p.Name,
+				IsRequired: true,
+			}
+			param.ID = model.ID(GenerateDeterministicID("System." + def.Name + "." + p.Name))
+			param.ParameterType = buildSystemParamType(p.Type)
+			ja.Parameters = append(ja.Parameters, param)
+		}
+		result = append(result, ja)
+	}
+	return result
+}
+
+func buildSystemReturnType(t string) javaactions.CodeActionReturnType {
+	switch t {
+	case "Boolean":
+		return &javaactions.BooleanType{}
+	case "String":
+		return &javaactions.StringType{}
+	case "Integer":
+		return &javaactions.IntegerType{}
+	case "Long":
+		return &javaactions.LongType{}
+	case "Decimal":
+		return &javaactions.DecimalType{}
+	case "DateTime":
+		return &javaactions.DateTimeType{}
+	default:
+		return &javaactions.VoidType{}
+	}
+}
+
+func buildSystemParamType(t string) javaactions.CodeActionParameterType {
+	switch t {
+	case "Boolean":
+		return &javaactions.BooleanType{}
+	case "Integer":
+		return &javaactions.IntegerType{}
+	case "Long":
+		return &javaactions.LongType{}
+	case "Decimal":
+		return &javaactions.DecimalType{}
+	case "DateTime":
+		return &javaactions.DateTimeType{}
+	default:
+		return &javaactions.StringType{}
+	}
+}