@rotorsoft/act 1.23.15 → 1.23.16

package/dist/index.js

@@ -2607,7 +2607,15 @@ var DrainController = class {
 };
 
 // src/internal/projection-fold.ts
-function make_fold_handler(me, flush, config2, patch_fn = bare_patch) {
+function make_fold_handler(me, flush, config2, patch_fn = bare_patch, sensitive_fields) {
+  const load_me = {
+    ...me,
+    view: (raw, actor) => {
+      const viewed = me.view(raw, actor);
+      const fields = sensitive_fields(viewed.name);
+      return fields.length ? pii_strip(viewed, fields) : viewed;
+    }
+  };
   const cache2 = /* @__PURE__ */ new Map();
   const row = ({ dirty: _, ...row2 }) => row2;
   const flush_dirty = async () => {
@@ -2637,7 +2645,7 @@ function make_fold_handler(me, flush, config2, patch_fn = bare_patch) {
           if (evictee.dirty) await flush([row(evictee)]);
           cache2.delete(oldest);
         }
-        const snapshot = await load(me, { stream }, void 0, patch_fn);
+        const snapshot = await load(load_me, { stream }, void 0, patch_fn);
         fold = {
           stream,
           state: snapshot.state,
@@ -4357,7 +4365,16 @@ function act() {
             );
           batch_handlers.set(
             proj.target,
-            make_fold_handler(merged, fold.flush, fold.config, patch_fn)
+            make_fold_handler(
+              merged,
+              fold.flush,
+              fold.config,
+              patch_fn,
+              // Head loads strip sensitive keys like the warm path (#1320).
+              // `_sf` is populated in the events pass below; read lazily at
+              // fold time, by when the map is complete.
+              (event_name) => _sf.get(event_name) ?? []
+            )
           );
         }
         finalize_deprecations();