@harperfast/harper 5.2.0-beta.4 → 5.2.1

package/package.json

@@ -1,7 +1,7 @@
 {
 	"name": "@harperfast/harper",
 	"description": "Harper is an open-source Node.js performance platform that unifies database, cache, application, and messaging layers into one in-memory process.",
-	"version": "5.2.0-beta.4",
+	"version": "5.2.1",
 	"license": "Apache-2.0",
 	"homepage": "https://harper.fast",
 	"bugs": {
@@ -63,6 +63,7 @@
 		"lint:fix": "npm run lint -- --fix",
 		"format:check": "prettier --check .",
 		"format:write": "prettier --write .",
+		"test:bench": "node --test \"benchmarks/**/*.test.mts\"",
 		"test:integration": "harper-integration-test-run",
 		"test:integration:all": "npm run test:integration -- \"integrationTests/**/*.test.ts\" \"integrationTests/**/*.test.mjs\"",
 		"test:integration:mcp": "npm run test:integration -- \"integrationTests/mcp/**/*.test.ts\"",
@@ -79,6 +80,7 @@
 		"test:unit:logging": "mocha \"unitTests/utility/logging/*.js\"",
 		"test:unit:security": "mocha \"unitTests/security/**/*.js\"",
 		"test:unit:dataLayer": "mocha \"unitTests/dataLayer/**/*.js\" --exclude \"unitTests/dataLayer/harperBridge/**/*\"",
+		"test:unit:backup": "mocha \"unitTests/dataLayer/rocksdbBackup.test.js\" \"unitTests/dataLayer/blobBackup.test.js\" \"unitTests/dataLayer/restoreMarker.test.js\" \"unitTests/bin/backup.test.js\"",
 		"test:unit:utility": "mocha \"unitTests/utility/**/*.js\" --exclude \"unitTests/utility/logging/**/*\"",
 		"test:unit:server": "mocha \"unitTests/server/**/*.js\"",
 		"test:unit:config": "mocha \"unitTests/config/**/*.js\"",
@@ -129,7 +131,7 @@
 	},
 	"devDependencies": {
 		"@harperfast/code-guidelines": "^0.1.2",
-		"@harperfast/integration-testing": "^0.6.2",
+		"@harperfast/integration-testing": "^0.7.0",
 		"@modelcontextprotocol/sdk": "^1.29.0",
 		"@types/busboy": "^1.5.4",
 		"@types/fs-extra": "^11.0.4",
@@ -142,6 +144,7 @@
 		"@types/properties-reader": "^2.1.3",
 		"@types/sinon": "^22.0.0",
 		"@types/tar-fs": "^2.0.4",
+		"@types/tar-stream": "^3.1.4",
 		"@typescript-eslint/parser": "^8.48.1",
 		"axios": "1.18.1",
 		"chai": "^6.2.0",
@@ -153,6 +156,7 @@
 		"mkcert": "^3.2.0",
 		"mocha": "^11.7.5",
 		"mqtt": "^5.15.1",
+		"openai": "^6.45.0",
 		"oxlint": "^1.31.0",
 		"prettier": "~3.9.0",
 		"rewire": "^9.0.1",
@@ -168,14 +172,14 @@
 	},
 	"dependencies": {
 		"@aws-sdk/client-s3": "^3.1012.0",
-		"@aws-sdk/lib-storage": "3.1090.0",
+		"@aws-sdk/lib-storage": "3.1096.0",
 		"@endo/static-module-record": "^1.1.2",
 		"@fastify/autoload": "^6.3.1",
 		"@fastify/compress": "^8.3.1",
 		"@fastify/cors": "^11.2.0",
 		"@fastify/static": "^9.1.3",
 		"@harperfast/extended-iterable": "^1.0.1",
-		"@harperfast/rocksdb-js": "^2.5.0",
+		"@harperfast/rocksdb-js": "^2.7.1",
 		"@harperfast/skills": "^1.10.8",
 		"@turf/area": "6.5.0",
 		"@turf/boolean-contains": "6.5.0",
@@ -201,7 +205,7 @@
 		"fast-glob": "3.3.3",
 		"fastify": "^5.8.2",
 		"fastify-plugin": "^5.1.0",
-		"fs-extra": "11.3.6",
+		"fs-extra": "11.4.0",
 		"graphql": "^16.10.0",
 		"graphql-http": "^1.22.4",
 		"gunzip-maybe": "1.4.2",
@@ -219,10 +223,10 @@
 		"minimist": "1.2.8",
 		"moment": "2.30.1",
 		"mqtt-packet": "~9.0.1",
-		"msgpackr": "^2.0.4",
+		"msgpackr": "^2.0.5",
 		"needle": "3.5.0",
 		"node-forge": "^1.3.1",
-		"node-stream-zip": "1.15.0",
+		"node-stream-zip": "1.16.0",
 		"normalize-path": "^3.0.0",
 		"ora": "8.2.0",
 		"ordered-binary": "1.6.1",
@@ -243,6 +247,7 @@
 		"structon": "^1.0.7",
 		"systeminformation": "^5.31.4",
 		"tar-fs": "^3.1.2",
+		"tar-stream": "^3.1.8",
 		"ulidx": "0.5.0",
 		"uuid": "11.1.1",
 		"validate.js": "0.13.1",

package/resources/DESIGN.md

@@ -169,6 +169,8 @@ Tests: `../unitTests/resources/defineResource.test.js`, `../unitTests/resources/
 - **Overriding a static entry point takes over its whole contract.** Assigning `static post`/`put`/`patch` on a subclass shadows the `transactional()`-wrapped static, so none of that wrapper runs — including the `when(data, ...)` that resolves `data` and the `allowCreate`/`allowUpdate` gate. That is by design (it is how `login.ts` implements a deliberately pre-authentication endpoint), and it means an override owns two obligations the wrapper would otherwise have met:
   - **`data` is a `MaybePromise` — `await` it.** Protocol callers pass `request.data` through unresolved; over REST that is the streaming deserializer's pending promise (`server/REST.ts` → `getDeserializer(…, true)`). A promise has no own enumerable properties, so skipping the `await` fails silently rather than loudly: `JSON.stringify(body) === '{}'` and every field reads `undefined`.
   - **The override makes the access-control decision.** No `allow*` predicate runs for it. An override that is not meant to be public must check authorization itself.
+- **FK-side relationship accessors (`relationship.from`) are a synchronous contract** (v4 parity). The resolvers built in `Table.updatedAttributes` must read through `getSync`/`getEntry` (which block on a RocksDB block-cache miss, like v4's LMDB page faults) — never `get()`, whose `async: true` path returns a Promise on a cache miss and would leak an intermittent value-or-Promise to `record.<relation>` in user code. Pinned by the "relationship property access is synchronous" test in `../unitTests/resources/query.test.js`, which stubs `store.get` to throw.
+  - **Known gap, not covered by that test:** the `.to` side (one-to-many/many-to-many, resolved via `relatedTable.search(...).asArray`) is synchronous for a local read, but `asArray` can still hand back a Promise when the search lands on a **caching** table whose row needs source revalidation — `transformEntryForSelect` returns `loadingFromSource.then(transform)` for an expired/invalidated entry. Same bug class this PR closes on the FK side; not yet fixed here.
 - When adding a new early-return path inside a commit handler in `_writeUpdate`, follow the blob-cleanup protocol documented in `../DESIGN.md` ("Blob orphan cleanup").
 - If you add a new top-level section to `Table.ts`, drop a `// #section: <name>` marker at its start and add a row to the section map above.
 - Tests for this layer live in `../unitTests/resources/`.