@happyvertical/smrt-core 0.51.9 → 0.51.11

package/dist/registry/class-registration.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"class-registration.d.ts","sourceRoot":"","sources":["../../src/registry/class-registration.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAUH,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,KAAK,EAKV,qBAAqB,EAGtB,MAAM,qBAAqB,CAAC;AAwC7B,OAAO,KAAK,EACV,eAAe,EACf,eAAe,EACf,iBAAiB,EAElB,MAAM,YAAY,CAAC;AA0dpB,wBAAgB,QAAQ,CACtB,IAAI,EAAE,OAAO,UAAU,EACvB,MAAM,GAAE,iBAAsB,GAC7B,IAAI,CA8zBN;AAyCD,wBAAgB,kBAAkB,CAChC,UAAU,EAAE,MAAM,EAMlB,qBAAqB,EAAE,WAAW,CAAC,eAAe,CAAC,uBAAuB,CAAC,CAAC,GAC3E,IAAI,CAeN;AA+BD,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC,EACpC,kBAAkB,EAAE,eAAe,CAAC,oBAAoB,CAAC,GAAG,SAAS,GACpE,IAAI,CAuCN;AAoHD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,4BAA4B,CAC1C,QAAQ,EAAE,eAAe,EACzB,gBAAgB,CAAC,EAAE;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,GACA,IAAI,CA2CN;AA6JD,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,qBAAqB,EAChC,WAAW,CAAC,EAAE,MAAM,GACnB,IAAI,CA6QN"}
+{"version":3,"file":"class-registration.d.ts","sourceRoot":"","sources":["../../src/registry/class-registration.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAcH,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,KAAK,EAKV,qBAAqB,EAGtB,MAAM,qBAAqB,CAAC;AAwC7B,OAAO,KAAK,EACV,eAAe,EACf,eAAe,EACf,iBAAiB,EAElB,MAAM,YAAY,CAAC;AA2gBpB,wBAAgB,QAAQ,CACtB,IAAI,EAAE,OAAO,UAAU,EACvB,MAAM,GAAE,iBAAsB,GAC7B,IAAI,CAg2BN;AAyCD,wBAAgB,kBAAkB,CAChC,UAAU,EAAE,MAAM,EAMlB,qBAAqB,EAAE,WAAW,CAAC,eAAe,CAAC,uBAAuB,CAAC,CAAC,GAC3E,IAAI,CAeN;AA+BD,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC,EACpC,kBAAkB,EAAE,eAAe,CAAC,oBAAoB,CAAC,GAAG,SAAS,GACpE,IAAI,CAuCN;AAoHD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,4BAA4B,CAC1C,QAAQ,EAAE,eAAe,EACzB,gBAAgB,CAAC,EAAE;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,GACA,IAAI,CA2CN;AA2KD,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,qBAAqB,EAChC,mBAAmB,CAAC,EAAE,MAAM,GAC3B,IAAI,CAoSN"}

package/dist/registry/class-registration.js

@@ -1,5 +1,6 @@
 import { ConfigurationError } from "../errors.js";
 import { toSnakeCase } from "../utils/naming.js";
+import { declareChangeFeedSensitiveTable, setChangeFeedSensitiveClassResolver } from "../change-feed-sensitivity.js";
 import { createQualifiedName, isQualifiedName } from "../utils/qualified-names.js";
 import { cloneManifestSchemaColumns } from "../manifest/store.js";
 import { getClasses, getCollections, getConstructorFieldDecorators, getConstructorIndex, getConstructorTenantScopedDeclarations, getInheritanceCache, getLegacyFieldDecorators, getSourceFileFromStack, getStiSiblingsLoaded, verboseLog } from "./shared-state.js";
@@ -211,6 +212,43 @@ function validateIsolatedRegistrationManifest(manifest, manifestKey, name, packa
 	});
 	return objectDef;
 }
+/**
+* Publish a `@smrt({ sensitive: true })` declaration to the change feed
+* (issue #2937).
+*
+* Declares **every candidate name**, not just one. The name a class declares
+* and the name its rows are recorded under can diverge: a manifest stub
+* derives the name from `decoratorConfig` but installs
+* `objectDef.schema.tableName`, and the merge path can overwrite
+* `existing.schema.tableName`. A declaration landing on a name nothing writes
+* under is a silent fail-open, and the set is monotonic, so a superset is the
+* safe direction. (The STI case — a child declaring `sensitive` while writing
+* to its base class's table — is closed authoritatively at the write path by
+* `isChangeFeedSensitiveWrite`, which sees the real name.)
+*
+* Only `true` is acted on: the sensitive set is one-way by design, so there is
+* nothing here to undo a previous declaration.
+*/
+/**
+* Whether any config source declares the object credential-bearing (#2937).
+*
+* `sensitive` is one-way, so it is combined across sources with OR rather than
+* by spread precedence: only `=== true` carries meaning, and a `false` from any
+* source must never erase a `true` from another.
+*/
+function anySensitive(...configs) {
+	return configs.some((config) => config?.sensitive === true);
+}
+function declareSensitiveTable(config, ...tableNames) {
+	if (config.sensitive !== true) return;
+	for (const tableName of tableNames) if (tableName) declareChangeFeedSensitiveTable(tableName);
+}
+setChangeFeedSensitiveClassResolver((ctor) => {
+	if (typeof ctor !== "function") return false;
+	const key = getConstructorIndex().get(ctor);
+	if (!key) return false;
+	return getClasses().get(key)?.config?.sensitive === true;
+});
 function setSmrtTableName(ctor, tableName) {
 	if (Object.getOwnPropertyDescriptor(ctor, "SMRT_TABLE_NAME")?.value === tableName) return;
 	Object.defineProperty(ctor, "SMRT_TABLE_NAME", {
@@ -272,7 +310,8 @@ function register(ctor, config = {}) {
 		existing.config = {
 			...existing.config,
 			...config,
-			tableName: nextTableName
+			tableName: nextTableName,
+			...anySensitive(existing.config, config) ? { sensitive: true } : {}
 		};
 		if (!existing.schema) existing.schema = {
 			ddl: "",
@@ -287,6 +326,7 @@ function register(ctor, config = {}) {
 		existing.schema.tableName = nextTableName;
 		existing.constructor = ctor;
 		setSmrtTableName(ctor, nextTableName);
+		declareSensitiveTable(existing.config, nextTableName, existing.schema?.tableName);
 		setSmrtQualifiedName(ctor, existing.qualifiedName);
 		if (existingKey !== nextKey) {
 			const classes = getClasses();
@@ -549,8 +589,10 @@ function register(ctor, config = {}) {
 		...promotedRuntimeConfig,
 		...manifestEntry?.decoratorConfig,
 		...config,
-		tableName
+		tableName,
+		...anySensitive(promotedRuntimeConfig, manifestEntry?.decoratorConfig, config) ? { sensitive: true } : {}
 	};
+	declareSensitiveTable(mergedConfig, tableName, schema?.tableName, manifestEntry?.schema?.tableName);
 	const qualifiedName = packageName ? createQualifiedName(packageName, name) : void 0;
 	const visibility = config.visibility || manifestEntry?.visibility || "public";
 	const registrationKey = qualifiedName || name;
@@ -752,8 +794,10 @@ function mergeManifestIntoExistingRegistration(existing, objectDef, packageName)
 	existing.config = {
 		...manifestConfig,
 		...existing.config,
-		tableName: manifestTableName
+		tableName: manifestTableName,
+		...anySensitive(manifestConfig, existing.config) ? { sensitive: true } : {}
 	};
+	declareSensitiveTable(existing.config, manifestTableName, objectDef.schema?.tableName, existing.schema?.tableName);
 	if (objectDef.fields) for (const [fieldName, fd] of Object.entries(objectDef.fields)) {
 		if (!existing.fields.has(fieldName)) {
 			existing.fields.set(fieldName, createFieldFromManifest(fd));
@@ -831,7 +875,8 @@ function mergeManifestIntoExistingRegistration(existing, objectDef, packageName)
 	existing.visibility = objectDef.visibility || manifestConfig.visibility || existing.visibility;
 	invalidateInheritanceEntries(existing);
 }
-function registerFromManifest(name, objectDef, packageName) {
+function registerFromManifest(name, objectDef, manifestPackageName) {
+	const packageName = objectDef.packageName || manifestPackageName;
 	const simpleClassName = objectDef.className || name;
 	const qualifiedNameEarly = packageName ? createQualifiedName(packageName, simpleClassName) : objectDef.qualifiedName;
 	const registrationKey = qualifiedNameEarly || name;
@@ -875,6 +920,7 @@ function registerFromManifest(name, objectDef, packageName) {
 	if (objectDef.methods) for (const [methodName, methodDef] of Object.entries(objectDef.methods)) methods.set(methodName, methodDef);
 	const config = objectDef.decoratorConfig || {};
 	const tableName = config.tableName || tableNameFromClass(stubConstructor);
+	declareSensitiveTable(config, tableName, objectDef.schema?.tableName);
 	let schema;
 	if (objectDef.schema) {
 		schema = {