@rotorsoft/act 1.37.2 → 1.37.4

package/dist/index.js

@@ -40,7 +40,7 @@ import {
   sleep,
   store,
   validate
-} from "./chunk-SIOPY6HT.js";
+} from "./chunk-FBZY2F5W.js";
 import {
   ActorSchema,
   CausationEventSchema,
@@ -68,10 +68,12 @@ import {
   TargetSchema,
   ValidationError,
   ZodEmpty,
+  def_of,
+  output_of,
   pii_fields,
   pii_schemas,
   sensitive
-} from "./chunk-2H5MBVSQ.js";
+} from "./chunk-CB2OLGJK.js";
 
 // src/signals.ts
 process.once("SIGINT", async (arg) => {
@@ -4414,7 +4416,6 @@ import { z as z4 } from "zod";
 
 // src/internal/date-reviver.ts
 import { z as z3 } from "zod";
-var def_of = (schema) => schema._zod?.def ?? schema.def;
 function variant_schema(schema) {
   const shape = def_of(schema)?.shape;
   if (!shape) {
@@ -4465,6 +4466,8 @@ function date_reviver_schema(schema) {
     }
     case "nullable":
       return inner()?.nullable();
+    case "pipe":
+      return date_reviver_schema(def.out);
     case "optional":
     case "nonoptional":
     case "readonly":
@@ -4492,13 +4495,14 @@ function event_tags(schema) {
   };
   const dated_pii = Object.keys(pii_dates).length > 0;
   return {
-    sensitive: Object.keys(pii),
+    sensitive: pii,
     date_reviver: data_reviver_schema && revive(data_reviver_schema),
     pii_date_reviver: dated_pii ? revive(z4.looseObject(pii_dates)) : void 0
   };
 }
 function make_event_reader(tags, disclosure, predicate = null) {
-  const { sensitive: sensitive2, date_reviver, pii_date_reviver } = tags;
+  const { date_reviver, pii_date_reviver } = tags;
+  const sensitive2 = Object.keys(tags.sensitive);
   if (!date_reviver && sensitive2.length === 0) return void 0;
   const gate = sensitive2.length === 0 ? IDENTITY_GATE : disclosure === "strip" ? ((event) => pii_strip(event, sensitive2)) : make_gate(sensitive2, predicate);
   if (!date_reviver) return gate;
@@ -4540,7 +4544,8 @@ function build_events(registry, states, lanes, owners) {
     }
     const event = event_tags(def.schema);
     tags.set(event_name, event);
-    if (event.sensitive.length > 0) sensitive2.set(event_name, event.sensitive);
+    const fields = Object.keys(event.sensitive);
+    if (fields.length > 0) sensitive2.set(event_name, fields);
     const query_reader = make_event_reader(event, "redact", null);
     if (query_reader) query_readers.set(event_name, query_reader);
     const handler_reader = make_event_reader(event, "strip");
@@ -4556,11 +4561,21 @@ function build_events(registry, states, lanes, owners) {
     }
   }
   if (lane_errors.length > 0) throw new Error(lane_errors[0]);
+  const advised = /* @__PURE__ */ new Set();
   for (const state2 of states.values()) {
+    const shape = state2.state.shape ?? {};
     const state_fields = /* @__PURE__ */ new Map();
     for (const event_name of Object.keys(state2.events)) {
       const fields = sensitive2.get(event_name);
-      if (fields) state_fields.set(event_name, fields);
+      if (!fields) continue;
+      state_fields.set(event_name, fields);
+      const event = tags.get(event_name);
+      for (const field of fields) {
+        if (!reads_as_string(event.sensitive[field]))
+          advised.add(`${event_name}.${field}`);
+        if (shape[field] && !reads_as_string(shape[field]))
+          advised.add(`${state2.name}.${field}`);
+      }
     }
     if (state_fields.size > 0) {
       if (state2.snap)
@@ -4584,7 +4599,12 @@ function build_events(registry, states, lanes, owners) {
     if (readers.size === 0) continue;
     state2.view = (event, actor) => (readers.get(event.name) ?? IDENTITY_GATE)(event, actor);
   }
-  return { sensitive: sensitive2, query_readers, handler_readers };
+  const advisory = advised.size > 0 ? `Act has ${advised.size} sensitive field(s) whose type isn't a string: ${[...advised].join(", ")}. A caller who may not see one reads "[REDACTED]" or "[SHREDDED]" there instead, which its type doesn't allow. Declare sensitive fields as strings. See docs/docs/guides/sensitive-data.md.` : void 0;
+  return { sensitive: sensitive2, advisory, query_readers, handler_readers };
+}
+function reads_as_string(schema) {
+  const type = def_of(output_of(schema))?.type;
+  return type === "string" || type === "transform";
 }
 
 // src/builders/act-builder.ts
@@ -4639,24 +4659,6 @@ function act() {
   const fold_specs = [];
   const lanes = [];
   let _built = false;
-  const advise_pii_types = () => {
-    const fields = /* @__PURE__ */ new Set();
-    for (const state2 of states.values()) {
-      const shape = state2.state.shape ?? {};
-      for (const [event, schema] of Object.entries(state2.events))
-        for (const [field, field_schema] of Object.entries(
-          pii_schemas(schema)
-        )) {
-          if (!reads_as_string(field_schema)) fields.add(`${event}.${field}`);
-          if (shape[field] && !reads_as_string(shape[field]))
-            fields.add(`${state2.name}.${field}`);
-        }
-    }
-    if (fields.size > 0)
-      log().warn(
-        `Act has ${fields.size} sensitive field(s) whose type isn't a string: ${[...fields].join(", ")}. A caller who may not see one reads "[REDACTED]" or "[SHREDDED]" there instead, which its type doesn't allow. Declare sensitive fields as strings. See docs/docs/guides/sensitive-data.md.`
-      );
-  };
   const read_wrap = (original) => {
     const wrapped = async (events, stream) => {
       const read = events.map((e) => _hr.get(e.name)?.(e) ?? e);
@@ -4795,7 +4797,7 @@ function act() {
         for (const [name, gate] of built.query_readers) _qg.set(name, gate);
         for (const [name, gate] of built.handler_readers) _hr.set(name, gate);
         finalize_deprecations();
-        advise_pii_types();
+        if (built.advisory) log().warn(built.advisory);
         for (const state2 of states.values()) {
           if (state2.disclose) _dp.set(state2.name, state2.disclose);
           if (state2.autoclose) _ac.set(state2.name, state2.autoclose);
@@ -4826,12 +4828,6 @@ function act() {
   };
   return builder;
 }
-function reads_as_string(schema) {
-  const def = schema._zod.def;
-  if (def.type === "string" || def.type === "transform") return true;
-  if (def.out) return reads_as_string(def.out);
-  return def.innerType ? reads_as_string(def.innerType) : false;
-}
 
 // src/builders/projection-builder.ts
 function _projection(target) {