bazis 0.109.0 → 0.110.0

package/core/di/module/encapsulation.ts

@@ -199,6 +199,15 @@ export function validateModuleEncapsulation(
       : `which module "${owner.name}" provides but does not export. Add it to the exports of "${owner.name}".`;
   };
 
+  // Whether `record` imports `target`, directly or through other modules. Such a
+  // module cannot be the fix: importing it into `target` would be a cycle, and a
+  // root without exports (AppModule, the kernel root) passes on everything.
+  const importsModule = (record: ModuleGraphRecord, target: ModuleGraphRecord, path = new Set<ModuleGraphRecord>()): boolean => {
+    if (path.has(record)) return false;
+    path.add(record);
+    return record.imports.some((imported) => imported === target || importsModule(imported as ModuleGraphRecord, target, path));
+  };
+
   // A closed token (`IRepository<Product>`) travels with its family export, so
   // the fix is named in family terms and skips unnamed inner modules such as
   // the one `ormBazis` creates.
@@ -208,7 +217,7 @@ export function validateModuleEncapsulation(
     const exportFix = `${family} (or only ${closed})`;
     const sees = (record: ModuleGraphRecord) => visibleFamilies(record).has(familyId) || visibleTokens(record).has(token);
     const passes = (record: ModuleGraphRecord) => exportedFamilies(record).has(familyId) || exportedTokens(record).has(token);
-    const named = (record: ModuleGraphRecord) => !/^module#\d+$/.test(record.name);
+    const named = (record: ModuleGraphRecord) => !/^module#\d+$/.test(record.name) && !importsModule(record, consumer);
     const blocking = consumer.imports.find((imported) => named(imported) && sees(imported) && !passes(imported));
     if (blocking !== undefined) {
       return `which its import "${blocking.name}" receives from its own imports but does not export. Add ${exportFix} to the exports of "${blocking.name}".`;

package/core/http/Authorization/metadata.ts

@@ -1,4 +1,5 @@
 import type { ServiceScope } from "../../di";
+import { HttpSetupError } from "../Errors/HttpError";
 
 // Same one-line polyfill as the rest of the HTTP module: Bun executes TC39
 // decorators natively, but Symbol.metadata may be missing in the runtime.
@@ -46,6 +47,8 @@ interface AuthActionMeta {
   allowAnonymous?: boolean;
   /** Declaration made on this exact class/method metadata object. */
   declaration?: "authorize" | "anonymous";
+  /** Both `@Authorize` and `@AllowAnonymous` were declared here. */
+  conflict?: true;
 }
 
 interface AuthControllerMeta {
@@ -53,6 +56,8 @@ interface AuthControllerMeta {
   allowAnonymous?: boolean;
   /** Declaration made on this exact class metadata object. */
   declaration?: "authorize" | "anonymous";
+  /** Both `@Authorize` and `@AllowAnonymous` were declared on the class. */
+  conflict?: true;
   actions: Map<string | symbol, AuthActionMeta>;
 }
 
@@ -105,8 +110,15 @@ function ownActionMeta(metadata: object, methodName: string | symbol): AuthActio
   return action;
 }
 
+// The other declaration on the same class or method: each would silently undo
+// the other and the decorator order would decide. Reported when routes are built.
+function markConflict(target: { declaration?: "authorize" | "anonymous"; conflict?: true }, declaration: "authorize" | "anonymous"): void {
+  if (target.declaration !== undefined && target.declaration !== declaration) target.conflict = true;
+}
+
 export function setControllerAuthorize(metadata: object, options: AuthorizeOptions): void {
   const meta = ownMeta(metadata);
+  markConflict(meta, "authorize");
   meta.authorize = meta.declaration === "authorize" && meta.authorize
     ? { checks: [...options.checks, ...meta.authorize.checks] }
     : options;
@@ -116,6 +128,7 @@ export function setControllerAuthorize(metadata: object, options: AuthorizeOptio
 
 export function setControllerAllowAnonymous(metadata: object): void {
   const meta = ownMeta(metadata);
+  markConflict(meta, "anonymous");
   meta.allowAnonymous = true;
   meta.declaration = "anonymous";
   delete meta.authorize;
@@ -123,6 +136,7 @@ export function setControllerAllowAnonymous(metadata: object): void {
 
 export function setActionAuthorize(metadata: object, methodName: string | symbol, options: AuthorizeOptions): void {
   const action = ownActionMeta(metadata, methodName);
+  markConflict(action, "authorize");
   action.authorize = action.declaration === "authorize" && action.authorize
     ? { checks: [...options.checks, ...action.authorize.checks] }
     : options;
@@ -132,6 +146,7 @@ export function setActionAuthorize(metadata: object, methodName: string | symbol
 
 export function setActionAllowAnonymous(metadata: object, methodName: string | symbol): void {
   const action = ownActionMeta(metadata, methodName);
+  markConflict(action, "anonymous");
   action.allowAnonymous = true;
   action.declaration = "anonymous";
   delete action.authorize;
@@ -153,6 +168,7 @@ export interface ResolvedAuthorizeMeta {
  *
  * Inheritance is different: a subclass's own class-level declaration replaces
  * the base class's, and an overriding method's declaration replaces the base method's.
+ * Both decorators on the same class or method throw `HttpSetupError`.
  */
 export function resolveAuthorizeMeta(ctor: object, methodName: string | symbol): ResolvedAuthorizeMeta {
   const metadata = (ctor as { [key: symbol]: unknown })[Symbol.metadata as unknown as symbol] as
@@ -163,7 +179,20 @@ export function resolveAuthorizeMeta(ctor: object, methodName: string | symbol):
     return { allowAnonymous: false };
   }
 
+  const owner = (ctor as { readonly name?: string }).name || "Controller";
+  if (meta.conflict) {
+    throw new HttpSetupError(
+      `${owner} has both @AllowAnonymous() and @Authorize(...) on the class: the result would depend on the decorator order. `
+        + "Keep one; to open single methods of a protected class, put @AllowAnonymous() on them.",
+    );
+  }
   const action = meta.actions.get(methodName);
+  if (action?.conflict) {
+    throw new HttpSetupError(
+      `${owner}.${String(methodName)} has both @AllowAnonymous() and @Authorize(...): the result would depend on the decorator order. `
+        + "Keep @Authorize(...) to protect the route, or @AllowAnonymous() to open it.",
+    );
+  }
   if (action?.allowAnonymous) {
     return { allowAnonymous: true };
   }

package/core/infra/connectors/codex/CodexAppServerClient.ts

@@ -232,7 +232,7 @@ export class CodexAppServerClient implements CodexClient {
         if (method === "account/updated") this.modelCache = undefined;
       }, () => { this.clearLogin(); this.modelCache = undefined; });
       const initialized = await client.request("initialize", {
-        clientInfo: { name: "bazis", title: "Bazis", version: "0.109.0" }, capabilities: { experimentalApi: true },
+        clientInfo: { name: "bazis", title: "Bazis", version: "0.110.0" }, capabilities: { experimentalApi: true },
       }, 15_000, signal);
       if (resolve(text(initialized.codexHome, 4096)) !== this.paths.home) throw new CodexError("PROTOCOL_ERROR");
       client.notify("initialized");

package/library/redaction/index.ts

@@ -84,10 +84,25 @@ function redactValue(
   if (depth >= options.maxDepth) {
     return options.replacement;
   }
+  // `seen` holds the objects on the current path only: an object reached
+  // again through another branch is a shared reference, not a cycle.
   if (seen.has(value)) {
     return CIRCULAR;
   }
   seen.add(value);
+  try {
+    return redactObject(value, options, seen, depth);
+  } finally {
+    seen.delete(value);
+  }
+}
+
+function redactObject(
+  value: object,
+  options: NormalizedRedactionOptions,
+  seen: WeakSet<object>,
+  depth: number,
+): unknown {
   if (value instanceof Error) {
     return redactError(value, options, seen, depth);
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "bazis",
-  "version": "0.109.0",
+  "version": "0.110.0",
   "description": "Modular backend framework for Bun in TypeScript: DI wired by codegen, HTTP, a PostgreSQL ORM, JWT, WebSocket, agents and a CLI.",
   "license": "MIT",
   "author": "Alexander Alenin",