@memberjunction/server 6.2.0-edge.0 → 6.2.0-edge.1

package/src/generic/RunViewResolver.ts

@@ -45,13 +45,13 @@ export class AggregateExpressionInput {
   @Field(() => String, {
     description: 'SQL expression for the aggregate (e.g., "SUM(OrderTotal)", "COUNT(*)", "AVG(Price)")'
   })
-  expression: string;
+  expression: string;  // case-violation-ok-legacy-back-compat: the property name is the GraphQL schema field name — renaming it breaks every client query
 
   @Field(() => String, {
     nullable: true,
     description: 'Optional alias for the result (used in error messages and debugging)'
   })
-  alias?: string;
+  alias?: string;  // case-violation-ok-legacy-back-compat: the property name is the GraphQL schema field name — renaming it breaks every client query
 }
 
 /**
@@ -60,22 +60,22 @@ export class AggregateExpressionInput {
 @ObjectType()
 export class AggregateResultOutput {
   @Field(() => String, { description: 'The expression that was calculated' })
-  expression: string;
+  expression: string;  // case-violation-ok-legacy-back-compat: the property name is the GraphQL schema field name — renaming it breaks every client query
 
   @Field(() => String, { description: 'The alias (or expression if no alias provided)' })
-  alias: string;
+  alias: string;  // case-violation-ok-legacy-back-compat: the property name is the GraphQL schema field name — renaming it breaks every client query
 
   @Field(() => String, {
     nullable: true,
     description: 'The calculated value as a JSON string (preserves type information)'
   })
-  value?: string;
+  value?: string;  // case-violation-ok-legacy-back-compat: the property name is the GraphQL schema field name — renaming it breaks every client query
 
   @Field(() => String, {
     nullable: true,
     description: 'Error message if calculation failed'
   })
-  error?: string;
+  error?: string;  // case-violation-ok-legacy-back-compat: the property name is the GraphQL schema field name — renaming it breaks every client query
 }
 
 //****************************************************************************
@@ -573,22 +573,22 @@ export class RunViewGenericInput {
 @InputType()
 export class RunViewCacheStatusInput {
   @Field(() => String, { description: 'The maximum __mj_UpdatedAt value from cached results' })
-  maxUpdatedAt: string;
+  maxUpdatedAt: string;  // case-violation-ok-legacy-back-compat: the property name is the GraphQL schema field name — renaming it breaks every client query
 
   @Field(() => Int, { description: 'The number of rows in cached results' })
-  rowCount: number;
+  rowCount: number;  // case-violation-ok-legacy-back-compat: the property name is the GraphQL schema field name — renaming it breaks every client query
 }
 
 @InputType()
 export class RunViewWithCacheCheckInput {
   @Field(() => RunDynamicViewInput, { description: 'The RunView parameters' })
-  params: RunDynamicViewInput;
+  params: RunDynamicViewInput;  // case-violation-ok-legacy-back-compat: the property name is the GraphQL schema field name — renaming it breaks every client query
 
   @Field(() => RunViewCacheStatusInput, {
     nullable: true,
     description: 'Optional cache status - if provided, server will check if cache is current'
   })
-  cacheStatus?: RunViewCacheStatusInput;
+  cacheStatus?: RunViewCacheStatusInput;  // case-violation-ok-legacy-back-compat: the property name is the GraphQL schema field name — renaming it breaks every client query
 }
 
 @ObjectType()
@@ -596,21 +596,21 @@ export class DifferentialDataOutput {
   @Field(() => [RunViewGenericResultRow], {
     description: 'Records that have been created or updated since the client\'s maxUpdatedAt'
   })
-  updatedRows: RunViewGenericResultRow[];
+  updatedRows: RunViewGenericResultRow[];  // case-violation-ok-legacy-back-compat: the property name is the GraphQL schema field name — renaming it breaks every client query
 
   @Field(() => [String], {
     description: 'Primary key values (as concatenated strings) of records that have been deleted'
   })
-  deletedRecordIDs: string[];
+  deletedRecordIDs: string[];  // case-violation-ok-legacy-back-compat: the property name is the GraphQL schema field name — renaming it breaks every client query
 }
 
 @ObjectType()
 export class RunViewWithCacheCheckResultOutput {
   @Field(() => Int, { description: 'The index of this view in the batch request' })
-  viewIndex: number;
+  viewIndex: number;  // case-violation-ok-legacy-back-compat: the property name is the GraphQL schema field name — renaming it breaks every client query
 
   @Field(() => String, { description: "'current', 'differential', 'stale', or 'error'" })
-  status: string;
+  status: string;  // case-violation-ok-legacy-back-compat: the property name is the GraphQL schema field name — renaming it breaks every client query
 
   @Field(() => [RunViewGenericResultRow], {
     nullable: true,
@@ -622,34 +622,34 @@ export class RunViewWithCacheCheckResultOutput {
     nullable: true,
     description: 'Differential update data - only populated when status is differential'
   })
-  differentialData?: DifferentialDataOutput;
+  differentialData?: DifferentialDataOutput;  // case-violation-ok-legacy-back-compat: the property name is the GraphQL schema field name — renaming it breaks every client query
 
   @Field(() => String, { nullable: true, description: 'Max __mj_UpdatedAt from results when stale or differential' })
-  maxUpdatedAt?: string;
+  maxUpdatedAt?: string;  // case-violation-ok-legacy-back-compat: the property name is the GraphQL schema field name — renaming it breaks every client query
 
   @Field(() => Int, { nullable: true, description: 'Row count of results when stale or differential (total after applying delta)' })
-  rowCount?: number;
+  rowCount?: number;  // case-violation-ok-legacy-back-compat: the property name is the GraphQL schema field name — renaming it breaks every client query
 
   @Field(() => String, { nullable: true, description: 'Error message if status is error' })
-  errorMessage?: string;
+  errorMessage?: string;  // case-violation-ok-legacy-back-compat: the property name is the GraphQL schema field name — renaming it breaks every client query
 
   @Field(() => [AggregateResultOutput], {
     nullable: true,
     description: 'Aggregate results when status is stale and aggregates were requested (B40 — previously never marshalled, so CacheLocal callers got no aggregates at all)'
   })
-  aggregateResults?: AggregateResultOutput[];
+  aggregateResults?: AggregateResultOutput[];  // case-violation-ok-legacy-back-compat: the property name is the GraphQL schema field name — renaming it breaks every client query
 }
 
 @ObjectType()
 export class RunViewsWithCacheCheckOutput {
   @Field(() => Boolean, { description: 'Whether the overall operation succeeded' })
-  success: boolean;
+  success: boolean;  // case-violation-ok-legacy-back-compat: the property name is the GraphQL schema field name — renaming it breaks every client query
 
   @Field(() => [RunViewWithCacheCheckResultOutput], { description: 'Results for each view in the batch' })
-  results: RunViewWithCacheCheckResultOutput[];
+  results: RunViewWithCacheCheckResultOutput[];  // case-violation-ok-legacy-back-compat: the property name is the GraphQL schema field name — renaming it breaks every client query
 
   @Field(() => String, { nullable: true, description: 'Overall error message if success is false' })
-  errorMessage?: string;
+  errorMessage?: string;  // case-violation-ok-legacy-back-compat: the property name is the GraphQL schema field name — renaming it breaks every client query
 }
 
 //****************************************************************************

package/src/generic/__tests__/FireAndForgetHeartbeat.test.ts

@@ -2,7 +2,7 @@ import 'reflect-metadata';
 import { describe, it, expect, vi, beforeEach, afterEach } from 'vitest';
 import { PubSubEngine } from 'type-graphql';
 import {
-    startLivenessPulse,
+    StartLivenessPulse,
     DEFAULT_PULSE_INTERVAL_MS,
     HEARTBEAT_MESSAGE_TYPE,
 } from '../FireAndForgetHeartbeat';
@@ -31,14 +31,14 @@ describe('startLivenessPulse', () => {
 
     it('does not publish before the first interval elapses', () => {
         const pubSub = makePubSub();
-        startLivenessPulse({ pubSub, sessionId: 's1', resolver: 'TestResolver' });
+        StartLivenessPulse({ pubSub, sessionId: 's1', resolver: 'TestResolver' });
         vi.advanceTimersByTime(DEFAULT_PULSE_INTERVAL_MS - 1);
         expect(pubSub.publish).not.toHaveBeenCalled();
     });
 
     it('publishes a heartbeat on the push-status topic each interval', () => {
         const pubSub = makePubSub();
-        startLivenessPulse({ pubSub, sessionId: 's1', resolver: 'TestResolver', intervalMs: 1000 });
+        StartLivenessPulse({ pubSub, sessionId: 's1', resolver: 'TestResolver', intervalMs: 1000 });
 
         vi.advanceTimersByTime(3000);
 
@@ -52,7 +52,7 @@ describe('startLivenessPulse', () => {
 
     it('includes the enriched status snapshot from readStatus', () => {
         const pubSub = makePubSub();
-        startLivenessPulse({
+        StartLivenessPulse({
             pubSub,
             sessionId: 's1',
             resolver: 'RunAIAgentResolver',
@@ -68,7 +68,7 @@ describe('startLivenessPulse', () => {
 
     it('publishes an empty data object when readStatus throws (loop survives)', () => {
         const pubSub = makePubSub();
-        startLivenessPulse({
+        StartLivenessPulse({
             pubSub,
             sessionId: 's1',
             resolver: 'RunAIAgentResolver',
@@ -87,12 +87,12 @@ describe('startLivenessPulse', () => {
 
     it('stops publishing after stop() is called', () => {
         const pubSub = makePubSub();
-        const handle = startLivenessPulse({ pubSub, sessionId: 's1', resolver: 'TestResolver', intervalMs: 1000 });
+        const handle = StartLivenessPulse({ pubSub, sessionId: 's1', resolver: 'TestResolver', intervalMs: 1000 });
 
         vi.advanceTimersByTime(2000);
         expect(pubSub.publish).toHaveBeenCalledTimes(2);
 
-        handle.stop();
+        handle.Stop();
         vi.advanceTimersByTime(5000);
         expect(pubSub.publish).toHaveBeenCalledTimes(2);
     });

package/src/index.ts

@@ -32,7 +32,7 @@ import { RealtimeProxyServer } from './realtimeProxy/RealtimeProxyServer.js';
 import buildApolloServer from './apolloServer/index.js';
 import { configInfo, configFilePath, dbDatabase, dbHost, dbPort, dbUsername, graphqlPort, graphqlRootPath, mj_core_schema, websiteRunFromPackage, RESTApiOptions } from './config.js';
 import { default as jwt } from 'jsonwebtoken';
-import { contextFunction, createUnifiedAuthMiddleware, getUserPayload } from './context.js';
+import { contextFunction, CreateUnifiedAuthMiddleware, getUserPayload } from './context.js';
 import { UserPayload } from './types.js';
 import { requireSystemUserDirective, publicDirective } from './directives/index.js';
 import { variablesLoggingMiddleware } from './logging/variablesLoggingMiddleware.js';
@@ -69,7 +69,7 @@ import { SessionJanitor } from './agentSessions/index.js';
 import { StartTaskGraphDispatcher } from './services/StartTaskGraphDispatcher.js';
 import { GetAttachmentService } from '@memberjunction/aiengine';
 import { MJStorageBlobStore } from './services/MJStorageBlobStore.js';
-import { CACHE_INVALIDATION_TOPIC } from './generic/CacheInvalidationResolver.js';
+import { CACHE_INVALIDATION_TOPIC, MayBroadcastRecordData, ConfigureRecordDataBroadcast } from './generic/CacheInvalidationResolver.js';
 import { ConnectorFactory, IntegrationEngine, IntegrationSyncOptions } from '@memberjunction/integration-engine';
 import { CronExpressionHelper } from '@memberjunction/scheduling-engine';
 import {
@@ -82,6 +82,7 @@ import {
 import { ServerExtensionLoader, ServerExtensionConfig, mergeServerExtensionConfigs, prepareServerExtensionConfigs, describeServerExtensionMount, InstallMediaUpgradeDispatcher, IsGraphQLWsPath } from '@memberjunction/server-extensions-core';
 import { coreReservedServerExtensionRoots } from './serverExtensionReservedRoots.js';
 import { MetadataCacheRefreshIntervalSeconds } from './providerConfigUnits.js';
+import { CreateMetadataRefreshSignalHandler, METADATA_REFRESH_SIGNAL } from './metadataRefreshSignal.js';
 
 const cacheRefreshInterval = configInfo.databaseSettings.metadataCacheRefreshInterval;
 
@@ -99,10 +100,15 @@ export { MetadataCacheRefreshIntervalSeconds } from './providerConfigUnits.js';
  * CodeGenLib). This wrapper keeps the public `getDbType()` symbol that
  * MJServer consumers (and the broader stack) already import.
  */
-export function getDbType(): DatabasePlatform {
+export function GetDbType(): DatabasePlatform {
     return resolveDbPlatformFromEnv() ?? 'sqlserver';
 }
 
+/** @deprecated Use {@link GetDbType}. */
+export function getDbType(): DatabasePlatform {
+  return GetDbType();
+}
+
 export { MaxLength } from 'class-validator';
 export * from 'type-graphql';
 // Named re-export so Open App generated resolvers get a live ESM binding for
@@ -263,7 +269,10 @@ const localPath = (p: string) => {
   return resolvedPath;
 };
 
-export const createApp = (): Application => express();
+export const CreateApp = (): Application => express();
+
+/** @deprecated Use {@link CreateApp}. */
+export const createApp = CreateApp;
 
 /**
  * Resolves the MJServer package version for the startup summary header.
@@ -294,7 +303,7 @@ function resolveServerVersion(): string | undefined {
 // there is no ordering hazard in binding this early.
 GetAttachmentService().BlobStore = new MJStorageBlobStore();
 
-export const serve = async (resolverPaths: Array<string>, app: Application = createApp(), options?: MJServerOptions): Promise<void> => {
+export const Serve = async (resolverPaths: Array<string>, app: Application = CreateApp(), options?: MJServerOptions): Promise<void> => {
   const t0 = performance.now();
   // Level-gated startup logger. Resolves verbosity from telemetry.level (single
   // operator knob). At `standard` (default), per-phase timings are collapsed into
@@ -321,7 +330,7 @@ export const serve = async (resolverPaths: Array<string>, app: Application = cre
   }
 
 const setupComplete$ = new ReplaySubject(1);
-  const dbType = getDbType();
+  const dbType = GetDbType();
   const dataSources: DataSourceInfo[] = [];
 
   if (dbType === 'postgresql') {
@@ -909,6 +918,11 @@ const setupComplete$ = new ReplaySubject(1);
   // publish hook above so the first RSU event also reaches live subscribers.
   RegisterRSUProgressBridge();
 
+  // Hand the resolver its allowlist before anything can publish. It cannot read configInfo itself:
+  // config.ts loads and validates at module scope, so importing it there would pull full config
+  // validation into every import chain that touches the resolver, unit tests included.
+  ConfigureRecordDataBroadcast(configInfo.cacheSettings?.recordDataBroadcastEntities);
+
   // Global listener: broadcast CACHE_INVALIDATION to all browser clients whenever
   // ANY BaseEntity save/delete occurs on this server — regardless of whether it
   // originated from a GraphQL mutation or internal server-side code (agents, actions,
@@ -918,14 +932,21 @@ const setupComplete$ = new ReplaySubject(1);
     if (event.event === MJEventType.ComponentEvent && event.eventCode === BaseEntity.BaseEventCode) {
       const beEvent = event.args as BaseEntityEvent;
       if (beEvent.type === 'save' || beEvent.type === 'delete') {
+        const entityName = beEvent.baseEntity.EntityInfo.Name;
         PubSubManager.Instance.Publish(CACHE_INVALIDATION_TOPIC, {
-          entityName: beEvent.baseEntity.EntityInfo.Name,
+          entityName,
           primaryKeyValues: JSON.stringify(beEvent.baseEntity.PrimaryKey.KeyValuePairs),
           action: beEvent.type,
           sourceServerId: MJGlobal.Instance.ProcessUUID,
           timestamp: new Date(),
           originSessionId: null,
-          recordData: beEvent.type === 'save' ? JSON.stringify(beEvent.baseEntity.GetAll()) : undefined,
+          // Opt-in only: this event reaches every connected client unfiltered, and this listener
+          // fires for server-internal saves too (agents, actions, orchestrator), which are exactly
+          // the ones no browser session asked for.
+          recordData:
+            beEvent.type === 'save' && MayBroadcastRecordData(entityName)
+              ? JSON.stringify(beEvent.baseEntity.GetAll())
+              : undefined,
         });
       }
     }
@@ -1378,7 +1399,7 @@ const setupComplete$ = new ReplaySubject(1);
   startupLog.LogIf('verbose', `[Auth] Public provider catalog registered at ${AUTH_CATALOG_MOUNT_PATH}/providers`);
 
   // ─── Unified auth middleware (replaces both REST authMiddleware and contextFunction auth) ─────
-  app.use(createUnifiedAuthMiddleware(dataSources));
+  app.use(CreateUnifiedAuthMiddleware(dataSources));
 
   // ─── Post-auth middleware from BaseServerMiddleware plugins ─────
   // Middleware here has access to the authenticated user via req.userPayload.
@@ -1667,6 +1688,8 @@ const setupComplete$ = new ReplaySubject(1);
 
   process.on('SIGTERM', () => gracefulShutdown('SIGTERM'));
   process.on('SIGINT', () => gracefulShutdown('SIGINT'));
+  // Operator control: `kill -HUP <pid>` hard-reloads metadata from the DB — see metadataRefreshSignal.ts
+  process.on(METADATA_REFRESH_SIGNAL, CreateMetadataRefreshSignalHandler(() => Metadata.Provider.Refresh())); // global-provider-ok: operator-triggered refresh of the global cache that per-request providers adopt from
 
   // Handle unhandled promise rejections to prevent server crashes
   process.on('unhandledRejection', (reason, promise) => {
@@ -1677,6 +1700,9 @@ const setupComplete$ = new ReplaySubject(1);
   });
 };
 
+/** @deprecated Use {@link Serve}. */
+export const serve = Serve;
+
 /**
  * Age at which an unprocessed `MJ: RSU Pending Works` row is reported as stranded.
  * A row older than this survived at least one full restart cycle without being completed.

package/src/integration/CustomColumnPromoter.ts

@@ -133,7 +133,7 @@ interface WorkItem {
 }
 
 /** Registers the post-sync custom-column promotion hook on the IntegrationEngine singleton. */
-export function registerIntegrationCustomColumnPromoter(): void {
+export function RegisterIntegrationCustomColumnPromoter(): void {
     IntegrationEngine.Instance.SetPostSyncSchemaPromotionCallback(async (ctx) => {
         const user = ctx.ContextUser as UserInfo;
         const provider = ctx.Provider as IMetadataProvider | undefined;
@@ -164,6 +164,11 @@ export function registerIntegrationCustomColumnPromoter(): void {
     LogStatusEx({ message: '[CustomColumnPromoter] Registered post-sync custom-column promotion hook (auto-promote opt-in, default OFF).', verboseOnly: true });
 }
 
+/** @deprecated Use {@link RegisterIntegrationCustomColumnPromoter}. */
+export function registerIntegrationCustomColumnPromoter(): void {
+    return RegisterIntegrationCustomColumnPromoter();
+}
+
 /** Reads the per-connection `autoPromoteCustomColumns` flag (default false = capture-only, on-demand promotion). */
 async function readAutoPromoteFlag(companyIntegrationID: string, user: UserInfo, provider?: IMetadataProvider): Promise<boolean> {
     try {

package/src/integration/EntityMapLifecycle.ts

@@ -242,7 +242,7 @@ export interface SelectableSourceField {
  * `null`/`undefined` selection means "all fields", which is not the same as an EMPTY selection —
  * an empty array is a real (if unusual) choice, and still yields the keys.
  */
-export function selectFieldsToMap<T extends SelectableSourceField>(
+export function SelectFieldsToMap<T extends SelectableSourceField>(
     allFields: readonly T[],
     selectedFieldNames: readonly string[] | null | undefined,
 ): T[] {
@@ -251,6 +251,14 @@ export function selectFieldsToMap<T extends SelectableSourceField>(
     return allFields.filter(f => selected.has(f.Name.toLowerCase()) || f.IsPrimaryKey === true);
 }
 
+/** @deprecated Use {@link SelectFieldsToMap}. */
+export function selectFieldsToMap<T extends SelectableSourceField>(
+    allFields: readonly T[],
+    selectedFieldNames: readonly string[] | null | undefined,
+): T[] {
+    return SelectFieldsToMap(allFields, selectedFieldNames);
+}
+
 /** One existing field map, reduced to what the reconciliation decision needs. */
 export interface ExistingFieldMapRead {
     SourceFieldName: string | null;
@@ -289,7 +297,7 @@ export interface FieldMapReconcilePlan {
  *    stopped reporting the column, so it returns to the state it had.
  *  - **Vanished column → `Inactive`, never deleted.** Retiring is reversible by the branch above.
  */
-export function decideFieldMapReconcile(
+export function DecideFieldMapReconcile(
     activeFieldNames: readonly string[],
     existing: readonly ExistingFieldMapRead[],
     mapEnabled: boolean,
@@ -320,3 +328,13 @@ export function decideFieldMapReconcile(
     }
     return plan;
 }
+
+/** @deprecated Use {@link DecideFieldMapReconcile}. */
+export function decideFieldMapReconcile(
+    activeFieldNames: readonly string[],
+    existing: readonly ExistingFieldMapRead[],
+    mapEnabled: boolean,
+    autoEnableNewColumns = true,
+): FieldMapReconcilePlan {
+    return DecideFieldMapReconcile(activeFieldNames, existing, mapEnabled, autoEnableNewColumns);
+}

package/src/logging/NoLog.ts

@@ -64,7 +64,7 @@ export function NoLog(target: object, propertyKey?: string | symbol, parameterIn
  * Pass the resolver class itself (e.g. `MyResolver`) — the function reads from the
  * prototype internally to match how type-graphql stores resolver metadata.
  */
-export function hasNoLogParameter(
+export function HasNoLogParameter(
   resolverClass: Function,
   methodName: string,
   parameterIndex: number,
@@ -74,6 +74,15 @@ export function hasNoLogParameter(
   return marks !== undefined && marks.has(parameterIndex);
 }
 
+/** @deprecated Use {@link HasNoLogParameter}. */
+export function hasNoLogParameter(
+  resolverClass: Function,
+  methodName: string,
+  parameterIndex: number,
+): boolean {
+  return HasNoLogParameter(resolverClass, methodName, parameterIndex);
+}
+
 /**
  * Returns the set of field names decorated `@NoLog` on the given input class. Empty set
  * if none were marked.
@@ -81,8 +90,13 @@ export function hasNoLogParameter(
  * Pass the input class itself (e.g. `GetDataInputType`) — the function reads from the
  * prototype internally.
  */
-export function getNoLogFields(inputTypeClass: Function): ReadonlySet<string> {
+export function GetNoLogFields(inputTypeClass: Function): ReadonlySet<string> {
   const target = inputTypeClass.prototype as object;
   const marks = Reflect.getMetadata(NO_LOG_FIELD_KEY, target) as Set<string> | undefined;
   return marks ?? new Set<string>();
 }
+
+/** @deprecated Use {@link GetNoLogFields}. */
+export function getNoLogFields(inputTypeClass: Function): ReadonlySet<string> {
+  return GetNoLogFields(inputTypeClass);
+}

package/src/logging/StartupLogger.ts

@@ -117,7 +117,7 @@ export class StartupLogger {
    * operator knob governs both telemetry and server logging. Defaults to
    * `standard` when unset or unrecognized.
    */
-  public static resolveLevelFromConfig(): ServerLogLevel {
+  public static ResolveLevelFromConfig(): ServerLogLevel {
     const raw = configInfo.telemetry?.level;
     if (raw === 'minimal' || raw === 'standard' || raw === 'verbose' || raw === 'debug') {
       return raw;
@@ -125,6 +125,11 @@ export class StartupLogger {
     return 'standard';
   }
 
+  /** @deprecated Use {@link ResolveLevelFromConfig}. */
+  public static resolveLevelFromConfig(): ServerLogLevel {
+    return this.ResolveLevelFromConfig();
+  }
+
   /**
    * True when the active level is at least `minLevel` (using the ascending
    * `minimal < standard < verbose < debug` ordering).

package/src/logging/bootAudit.ts

@@ -1,6 +1,6 @@
 import { getMetadataStorage } from 'type-graphql';
 import { configInfo } from '../config.js';
-import { hasNoLogParameter } from './NoLog.js';
+import { HasNoLogParameter } from './NoLog.js';
 
 // Delete is included alongside Create/Update so codegen DeleteMJ*Input resolvers count as
 // metadata-bound and don't flood the audit with false positives (their args are PK + Options
@@ -13,12 +13,12 @@ const INPUT_TYPE_REGEX = /^(Create|Update|Delete).+Input$/;
  * Used by the audit walker. Mirrors the subset of `ArgParamMetadata` we need.
  */
 export type AuditArgParam = {
-  kind: 'arg';
-  index: number;
-  name: string;
-  target: Function;
-  methodName: string;
-  getType: () => unknown;
+  kind: 'arg';  // case-violation-ok-legacy-back-compat: the old name is also read off a value typed `any`, where a rename would compile and silently return undefined
+  Index: number;
+  name: string;  // case-violation-ok-legacy-back-compat: the old name is also read off a value typed `any`, where a rename would compile and silently return undefined
+  Target: Function;
+  MethodName: string;
+  GetType: () => unknown;
 };
 
 /**
@@ -26,9 +26,9 @@ export type AuditArgParam = {
  * Includes `@Query`, `@Mutation`, `@Subscription` entries.
  */
 export type AuditResolver = {
-  target: Function;
-  methodName: string;
-  params?: ReadonlyArray<{ kind: string; index: number } & Partial<AuditArgParam>>;
+  Target: Function;
+  MethodName: string;
+  params?: ReadonlyArray<{ kind: string; Index: number } & Partial<AuditArgParam>>;  // case-violation-ok-legacy-back-compat: optional, and the old name is also read off a value the checker cannot type; renaming it stays assignable and silently yields undefined
 };
 
 /**
@@ -42,7 +42,7 @@ export type AuditResolver = {
  *
  * Never throws. Boot does not fail on a missed `@NoLog`.
  */
-export function auditResolversForUndecoratedArgs(): void {
+export function AuditResolversForUndecoratedArgs(): void {
   if (!configInfo.loggingSettings.graphql.logVariables) {
     return;
   }
@@ -52,24 +52,34 @@ export function auditResolversForUndecoratedArgs(): void {
     mutations: AuditResolver[];
     subscriptions: AuditResolver[];
   };
-  auditResolverList([
+  AuditResolverList([
     ...storage.queries,
     ...storage.mutations,
     ...storage.subscriptions,
   ]);
 }
 
+/** @deprecated Use {@link AuditResolversForUndecoratedArgs}. */
+export function auditResolversForUndecoratedArgs(): void {
+  return AuditResolversForUndecoratedArgs();
+}
+
 /**
  * Internal helper exported for test injection. Takes a list of resolver metadata directly,
  * skipping the global `getMetadataStorage()` lookup. The boot-time scan uses this after
  * pulling from the global storage; tests pass in a synthetic fixture.
  */
-export function auditResolverList(resolvers: ReadonlyArray<AuditResolver>): void {
+export function AuditResolverList(resolvers: ReadonlyArray<AuditResolver>): void {
   for (const resolver of resolvers) {
     auditResolver(resolver);
   }
 }
 
+/** @deprecated Use {@link AuditResolverList}. */
+export function auditResolverList(resolvers: ReadonlyArray<AuditResolver>): void {
+  return AuditResolverList(resolvers);
+}
+
 function auditResolver(resolver: AuditResolver): void {
   for (const param of resolver.params ?? []) {
     if (param.kind !== 'arg') {
@@ -84,10 +94,10 @@ function auditArg(resolver: AuditResolver, argParam: AuditArgParam): void {
   if (typeName && INPUT_TYPE_REGEX.test(typeName)) {
     return;
   }
-  if (hasNoLogParameter(resolver.target, resolver.methodName, argParam.index)) {
+  if (HasNoLogParameter(resolver.Target, resolver.MethodName, argParam.Index)) {
     return;
   }
-  const resolverName = `${resolver.target.name}.${resolver.methodName}`;
+  const resolverName = `${resolver.Target.name}.${resolver.MethodName}`;
   console.warn(
     `[mj:NoLog audit] Custom resolver ${resolverName} takes argument '${argParam.name}' ` +
     `(type ${typeName ?? 'unknown'}) which is not marked @NoLog. Verify this argument does ` +
@@ -103,7 +113,7 @@ function auditArg(resolver: AuditResolver, argParam: AuditArgParam): void {
  */
 function readArgTypeName(argParam: AuditArgParam): string | undefined {
   try {
-    const type = argParam.getType();
+    const type = argParam.GetType();
     if (typeof type === 'function') {
       return (type as { name?: string }).name;
     }

package/src/logging/boundaryLogPayload.ts

@@ -12,8 +12,15 @@
  *
  * See docs/adr/0001-graphql-variables-logging-tiered-by-verbose.md.
  */
-export function buildBoundaryLogPayload(
+export function BuildBoundaryLogPayload(
   operationName: string | undefined,
 ): { operationName: string | undefined } {
   return { operationName };
 }
+
+/** @deprecated Use {@link BuildBoundaryLogPayload}. */
+export function buildBoundaryLogPayload(
+  operationName: string | undefined,
+): { operationName: string | undefined } {
+  return BuildBoundaryLogPayload(operationName);
+}

package/src/logging/secretRedactor.ts

@@ -1,5 +1,5 @@
 import type { IMetadataProvider } from '@memberjunction/core';
-import { shortenForLog } from './shortenForLog.js';
+import { ShortenForLog } from './shortenForLog.js';
 
 /**
  * Input to the redactor. Built per `@Arg` per resolver call by the variables-logging middleware.
@@ -15,11 +15,11 @@ import { shortenForLog } from './shortenForLog.js';
  *   this set (decorator-driven) when walking top-level keys.
  */
 export type RedactionContext = {
-  inputTypeName: string;
-  rawValue: unknown;
-  provider: IMetadataProvider;
-  noLogParameter: boolean;
-  noLogFields: ReadonlySet<string>;
+  inputTypeName: string;  // case-violation-ok-legacy-back-compat: renaming it broke a use the checker could not see from the declaration — the compile proved it
+  rawValue: unknown;  // case-violation-ok-legacy-back-compat: renaming it broke a use the checker could not see from the declaration — the compile proved it
+  provider: IMetadataProvider;  // case-violation-ok-legacy-back-compat: the old name is also read off a value typed `any`, where a rename would compile and silently return undefined
+  noLogParameter: boolean;  // case-violation-ok-legacy-back-compat: renaming it broke a use the checker could not see from the declaration — the compile proved it
+  noLogFields: ReadonlySet<string>;  // case-violation-ok-legacy-back-compat: renaming it broke a use the checker could not see from the declaration — the compile proved it
 };
 
 // Delete is included so DeleteMJ*Input resolvers resolve to their entity (yielding an empty
@@ -33,7 +33,7 @@ const INPUT_TYPE_REGEX = /^(Create|Update|Delete)(?<name>.+)Input$/;
 // type-graphql allows @Field({ name: 'overrideName' }) to rename fields at the
 // GraphQL layer; MJ codegen does not use this. A future maintainer renaming an
 // encrypted field at the GraphQL layer would silently miss redaction.
-export function redactArg(ctx: RedactionContext): unknown {
+export function RedactArg(ctx: RedactionContext): unknown {
   if (ctx.noLogParameter) {
     return '<redacted>';
   }
@@ -79,7 +79,7 @@ export function redactArg(ctx: RedactionContext): unknown {
     !Array.isArray(ctx.rawValue);
 
   if (!canWalk) {
-    return shortenForLog(ctx.rawValue);
+    return ShortenForLog(ctx.rawValue);
   }
 
   const result: Record<string, unknown> = {};
@@ -87,12 +87,17 @@ export function redactArg(ctx: RedactionContext): unknown {
     if (encryptedFieldNames.has(key) || ctx.noLogFields.has(key)) {
       result[key] = '<redacted>';
     } else {
-      result[key] = shortenForLog(value);
+      result[key] = ShortenForLog(value);
     }
   }
   return result;
 }
 
+/** @deprecated Use {@link RedactArg}. */
+export function redactArg(ctx: RedactionContext): unknown {
+  return RedactArg(ctx);
+}
+
 const EMPTY_SET: ReadonlySet<string> = new Set<string>();
 
 /**