json-rest-api 1.0.22 → 1.0.23

package/audit/evidence/code/critical-pass1/json-rest-schema__src__Schema.js.txt

@@ -1,242 +0,0 @@
-     1	/**
-     2	 * @file Defines the Schema class, which contains the core validation engine.
-     3	 */
-     4	
-     5	/**
-     6	 * @typedef {object} ValidationError
-     7	 * @property {string} field - The name of the field that failed validation.
-     8	 * @property {string} code - A stable, machine-readable error code (e.g., 'MIN_LENGTH').
-     9	 * @property {string} message - The human-readable error message.
-    10	 * @property {object} [params] - A key-value object with context about the error (e.g., { min: 3, actual: 2 }).
-    11	 */
-    12	
-    13	/**
-    14	 * @typedef {object} ValidationContext
-    15	 * @property {Schema} schema - The current schema instance.
-    16	 * @property {object} definition - The schema definition for the specific field.
-    17	 * @property {any} value - The current value of the field being processed.
-    18	 * @property {string} fieldName - The name of the field.
-    19	 * @property {object} object - The full object being validated (with modifications).
-    20	 * @property {object} objectBeforeCast - The original, unmodified input object.
-    21	 * @property {any} valueBeforeCast - The original value of the field.
-    22	 * @property {object} options - The global validation options.
-    23	 * @property {{nullable: boolean, nullOnEmpty: boolean}} computedOptions - Calculated options.
-    24	 * @property {string} [parameterName] - The name of the validator parameter being processed.
-    25	 * @property {any} [parameterValue] - The value of the validator parameter.
-    26	 * @property {function(): void} throwTypeError - Throws a standardized type casting error.
-    27	 * @property {function(string, string, object=): void} throwParamError - Throws a standardized parameter validation error.
-    28	 */
-    29	
-    30	/**
-    31	 * Represents an instance of a schema that can validate objects against a structure.
-    32	 * This class is instantiated by the createSchema factory function.
-    33	 */
-    34	export class Schema {
-    35	  /**
-    36	   * @param {object} structure The schema definition.
-    37	   * @param {object} types The globally registered type handlers.
-    38	   * @param {object} validators The globally registered validator handlers.
-    39	   */
-    40	  constructor (structure, types, validators) {
-    41	    this.structure = structure
-    42	    this.types = types // Now passed in directly
-    43	    this.validators = validators // Now passed in directly
-    44	  }
-    45	
-    46	  // --- Private Helpers ---
-    47	
-    48	  /** @private */
-    49	  _typeError (field) {
-    50	    return this._paramError(field, 'TYPE_CAST_FAILED', 'Value could not be cast to the required type.')
-    51	  }
-    52	
-    53	  /** @private */
-    54	  _paramError (field, code, message, params = {}) {
-    55	    const e = new Error(message)
-    56	    e.errorObject = { field, code, message, params }
-    57	    return e
-    58	  }
-    59	
-    60	  /** @private */
-    61	  _paramToBeSkipped (parameterName, skipParams, fieldName) {
-    62	    if (typeof skipParams !== 'object' || skipParams === null) return false
-    63	    if (Array.isArray(skipParams[fieldName]) && skipParams[fieldName].includes(parameterName)) return true
-    64	    return false
-    65	  }
-    66	
-    67	  /**
-    68	   * Processes a single field through the entire validation pipeline (pre-checks, casting, validators).
-    69	   * This is the heart of the validation logic for an individual field.
-    70	   * @private
-    71	   * @param {string} fieldName - The name of the field to validate.
-    72	   * @param {object} object - The original input object.
-    73	   * @param {object} validatedObject - The object being built with validated data.
-    74	   * @param {object} options - The global validation options.
-    75	   * @returns {Promise<ValidationError|null>} An error object if validation fails, otherwise null.
-    76	   */
-    77	  async _validateField (fieldName, object, validatedObject, options) {
-    78	    const definition = this.structure[fieldName]
-    79	    if (!definition) return null
-    80	
-    81	    // --- 1. Pre-validation Checks ---
-    82	    if (Array.isArray(options.skipFields) && options.skipFields.includes(fieldName)) return null
-    83	
-    84	    if (definition.required && object[fieldName] === undefined) {
-    85	      if (!this._paramToBeSkipped('required', options.skipParams, fieldName)) {
-    86	        return { field: fieldName, code: 'REQUIRED', message: 'Field is required', params: {} }
-    87	      }
-    88	    }
-    89	
-    90	    if (object[fieldName] === undefined) {
-    91	      // It's not required and it's not present, so we can stop processing this field.
-    92	      // The 'defaultTo' value will be applied in the main `validate` loop's post-processing step.
-    93	      return null
-    94	    }
-    95	
-    96	    const nullable = definition.nullable === true || options.nullable === true
-    97	    const nullOnEmpty = definition.nullOnEmpty === true || options.nullOnEmpty === true
-    98	
-    99	    if (object[fieldName] === null) {
-   100	      return nullable ? null : { field: fieldName, code: 'NOT_NULLABLE', message: 'Field cannot be null', params: {} }
-   101	    }
-   102	
-   103	    if (String(object[fieldName]) === '' && nullOnEmpty) {
-   104	      validatedObject[fieldName] = null
-   105	      return null
-   106	    }
-   107	
-   108	    /** @type {ValidationContext} */
-   109	    const context = {
-   110	      schema: this,
-   111	      definition,
-   112	      value: validatedObject[fieldName],
-   113	      fieldName,
-   114	      object: validatedObject,
-   115	      objectBeforeCast: object,
-   116	      valueBeforeCast: object[fieldName],
-   117	      options,
-   118	      computedOptions: { nullable: nullable || nullOnEmpty, nullOnEmpty },
-   119	
-   120	      // NEW: Public API for throwing standardized errors from within plugins/handlers
-   121	      throwTypeError: () => {
-   122	        throw this._typeError(fieldName)
-   123	      },
-   124	      throwParamError: (code, message, params) => {
-   125	        throw this._paramError(fieldName, code, message, params)
-   126	      }
-   127	    }
-   128	
-   129	    // --- 2. Type Casting ---
-   130	    const typeHandler = this.types[definition.type]
-   131	    if (!typeHandler) throw new Error(`No casting function for type: ${definition.type}`)
-   132	
-   133	    try {
-   134	      const castResult = await typeHandler(context)
-   135	      if (castResult !== undefined) {
-   136	        validatedObject[fieldName] = castResult
-   137	        context.value = castResult // Update context for subsequent validators.
-   138	      }
-   139	    } catch (e) {
-   140	      if (e.errorObject) return e.errorObject // It's a validation error.
-   141	      throw e // It's an unexpected system error, re-throw it.
-   142	    }
-   143	
-   144	    // --- 3. Parameter Validators ---
-   145	    for (const paramName in definition) {
-   146	      if (paramName === 'type') continue
-   147	      if (this._paramToBeSkipped(paramName, options.skipParams, fieldName)) continue
-   148	
-   149	      const validatorHandler = this.validators[paramName]
-   150	      if (validatorHandler) {
-   151	        try {
-   152	          context.parameterName = paramName
-   153	          context.parameterValue = definition[paramName]
-   154	          const validatorResult = await validatorHandler(context)
-   155	          if (validatorResult !== undefined) {
-   156	            validatedObject[fieldName] = validatorResult
-   157	            context.value = validatorResult // Update context value for the next validator.
-   158	          }
-   159	        } catch (e) {
-   160	          if (e.errorObject) return e.errorObject // It's a validation error.
-   161	          throw e // It's an unexpected system error.
-   162	        }
-   163	      }
-   164	    }
-   165	    return null // Field is valid
-   166	  }
-   167	
-   168	  // --- Public API ---
-   169	
-   170	  /**
-   171	   * Validates an object against the schema structure.
-   172	   * This method orchestrates the validation process.
-   173	   * @param {object} object - The input object to validate.
-   174	   * @param {object} [options={}] - Validation options.
-   175	   * @returns {Promise<{validatedObject: object, errors: Object.<string, ValidationError>}>}
-   176	   */
-   177	  async validate (object, options = {}) {
-   178	    const errors = {}
-   179	    const validatedObject = { ...object }
-   180	    const validationPromises = []
-   181	
-   182	    // Step 1: Check for fields in the input that are not in the schema.
-   183	    for (const fieldName in object) {
-   184	      if (this.structure[fieldName] === undefined) {
-   185	        errors[fieldName] = { field: fieldName, code: 'FIELD_NOT_ALLOWED', message: 'Field not allowed', params: {} }
-   186	      }
-   187	    }
-   188	
-   189	    // Step 2: Determine which fields to iterate over for validation.
-   190	    const targetFields = options.onlyObjectValues ? Object.keys(object) : Object.keys(this.structure)
-   191	
-   192	    // Step 3: Concurrently validate all fields.
-   193	    for (const fieldName of targetFields) {
-   194	      validationPromises.push(
-   195	        this._validateField(fieldName, object, validatedObject, options)
-   196	      )
-   197	    }
-   198	
-   199	    // Step 4: Collect results from all validation pipelines.
-   200	    const results = await Promise.all(validationPromises)
-   201	    for (const error of results) {
-   202	      if (error) {
-   203	        errors[error.field] = error
-   204	      }
-   205	    }
-   206	
-   207	    // Step 5: Post-process for defaultTo on fields that were not present in the input.
-   208	    // For full validation (!onlyObjectValues), ensure all schema fields are present.
-   209	    if (!options.onlyObjectValues) {
-   210	      for (const fieldName in this.structure) {
-   211	        // Only process fields that were not in the original input
-   212	        if (!(fieldName in object) && validatedObject[fieldName] === undefined) {
-   213	          if (this.structure[fieldName].defaultTo !== undefined) {
-   214	            const def = this.structure[fieldName].defaultTo
-   215	            validatedObject[fieldName] = typeof def === 'function' ? def() : def
-   216	          } else {
-   217	            // Set fields not in input to null for complete PUT-like records
-   218	            validatedObject[fieldName] = null
-   219	          }
-   220	        }
-   221	      }
-   222	    }
-   223	
-   224	    return { validatedObject, errors }
-   225	  }
-   226	
-   227	  /**
-   228	   * Utility to filter an object, keeping only fields that have a specific parameter.
-   229	   * @param {object} object - The object to clean.
-   230	   * @param {string} parameterName - The schema parameter to look for.
-   231	   * @returns {object} A new object with only the matching fields.
-   232	   */
-   233	  cleanup (object, parameterName) {
-   234	    const newObject = {}
-   235	    for (const k in object) {
-   236	      if (this.structure[k] && this.structure[k][parameterName]) {
-   237	        newObject[k] = object[k]
-   238	      }
-   239	    }
-   240	    return newObject
-   241	  }
-   242	}

package/audit/evidence/code/critical-pass1/json-rest-schema__src__index.js.txt

@@ -1,77 +0,0 @@
-     1	/**
-     2	 * @file Main entry point for the schema library.
-     3	 * Assembles and exports the `createSchema` factory function and related utilities.
-     4	 */
-     5	
-     6	import { Schema } from './Schema.js'
-     7	import CorePlugin from './CorePlugin.js'
-     8	
-     9	/**
-    10	 * @type {Object.<string, Function>}
-    11	 * Stores all registered type handlers. This is now a directly managed object.
-    12	 */
-    13	const globalTypes = {}
-    14	
-    15	/**
-    16	 * @type {Object.<string, Function>}
-    17	 * Stores all registered validator handlers. This is now a directly managed object.
-    18	 */
-    19	const globalValidators = {}
-    20	
-    21	/**
-    22	 * Registers a new type handler.
-    23	 * @param {string} name - The name of the type (e.g., 'string', 'email').
-    24	 * @param {Function} handler - The function to handle the type casting.
-    25	 */
-    26	export function addType (name, handler) {
-    27	  if (typeof handler !== 'function') {
-    28	    throw new Error(`Type handler for '${name}' must be a function.`)
-    29	  }
-    30	  globalTypes[name] = handler
-    31	}
-    32	
-    33	/**
-    34	 * Registers a new validator handler.
-    35	 * @param {string} name - The name of the validator (e.g., 'min', 'required').
-    36	 * @param {Function} handler - The function to handle the validation logic.
-    37	 */
-    38	export function addValidator (name, handler) {
-    39	  if (typeof handler !== 'function') {
-    40	    throw new Error(`Validator handler for '${name}' must be a function.`)
-    41	  }
-    42	  globalValidators[name] = handler
-    43	}
-    44	
-    45	/**
-    46	 * Installs a plugin by calling its `install` method.
-    47	 * @param {{install: Function}} plugin - A plugin object with an `install` method.
-    48	 * @returns {void}
-    49	 */
-    50	export function use (plugin) {
-    51	  if (typeof plugin.install !== 'function') {
-    52	    throw new Error('Plugin must have an install method.')
-    53	  }
-    54	  // Pass the addType and addValidator functions directly to the plugin
-    55	  plugin.install({ addType, addValidator })
-    56	}
-    57	
-    58	/**
-    59	 * The main factory function for creating new schema instances.
-    60	 * Each created schema will use the currently registered global types and validators.
-    61	 * @param {object} structure - The schema definition object.
-    62	 * @returns {import('./Schema').Schema} A new schema instance.
-    63	 */
-    64	const createSchema = (structure) => new Schema(structure, globalTypes, globalValidators)
-    65	
-    66	// Attach the registration methods directly to the factory function for convenience.
-    67	// This maintains the existing public API from the original code.
-    68	createSchema.addType = addType
-    69	createSchema.addValidator = addValidator
-    70	createSchema.use = use
-    71	
-    72	// Automatically install the core plugin to provide out-of-the-box functionality.
-    73	createSchema.use(CorePlugin)
-    74	
-    75	// Export all functions as named exports
-    76	export { createSchema }
-    77	// export { createKnexTable, generateKnexMigration } from './createKnexTable.js';

package/audit/evidence/code/critical-pass1-risk-keywords.txt

@@ -1,238 +0,0 @@
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__connectors__express-plugin.js.txt:28:    28	      async ({ api }) => {} // TODO: Anything to do here?
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__connectors__express-plugin.js.txt:35:    35	    } catch (e) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__connectors__express-plugin.js.txt:77:    77	        } catch (e) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__connectors__express-plugin.js.txt:78:    78	          log.warn('Busboy not installed. Install with: npm install busboy')
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__connectors__express-plugin.js.txt:84:    84	        } catch (e) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__connectors__express-plugin.js.txt:85:    85	          log.warn('Formidable not installed. Install with: npm install formidable')
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__connectors__express-plugin.js.txt:370:   370	          } catch (error) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__connectors__express-plugin.js.txt:433:   433	      } catch (routeError) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__connectors__express-plugin.js.txt:434:   434	        log.error('[EXPRESS DEBUG] Error creating route:', {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__bulk-operations-plugin.js.txt:78:    78	            } catch (error) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__bulk-operations-plugin.js.txt:115:   115	      } catch (error) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__bulk-operations-plugin.js.txt:212:   212	          } catch (error) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__bulk-operations-plugin.js.txt:245:   245	      } catch (error) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__bulk-operations-plugin.js.txt:305:   305	          } catch (error) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__bulk-operations-plugin.js.txt:338:   338	      } catch (error) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__bulk-operations-plugin.js.txt:387:   387	          } catch (error) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__bulk-operations-plugin.js.txt:470:   470	          } catch (error) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__bulk-operations-plugin.js.txt:472:   472	            log.warn('Optimized bulk insert failed, falling back to default', { error: error.message })
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-access.js.txt:201:   201	          throw new Error(`Cannot operate on ${scopeName} without authentication`)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-access.js.txt:255:   255	        throw new Error('AccessPlugin: knexQuery must provide query and tableName for ownership filtering')
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-access.js.txt:261:   261	          throw new Error(`Cannot query ${scopeName} without authentication`)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-access.js.txt:300:   300	        throw new Error(`Operation '${operation}' not allowed on resource '${scopeName}'`)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-access.js.txt:312:   312	            throw new Error(`Unknown auth rule: ${rule}`)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-access.js.txt:327:   327	        } catch (error) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-access.js.txt:408:   408	          throw new Error(`Resource does not have ownership field '${field}'`)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-access.js.txt:415:   415	          throw new Error(`Resource does not have ownership field '${field}'`)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-access.js.txt:418:   418	        throw new Error('No resource or user ID provided for ownership check')
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying-writing__compile-schemas.js.txt:143:   143	        throw new Error(`Computed field '${fieldName}' in scope '${scopeName}' must have a type`)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying-writing__compile-schemas.js.txt:147:   147	        throw new Error(`Computed field '${fieldName}' in scope '${scopeName}' has invalid compute function`)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying-writing__compile-schemas.js.txt:238:   238	      throw new Error(
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying-writing__compile-schemas.js.txt:263:   263	            throw new Error(
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying-writing__compile-schemas.js.txt:277:   277	    } catch (error) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying-writing__compile-schemas.js.txt:278:   278	      throw new Error(`Invalid getter dependencies in ${scopeName}: ${error.message}`)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying-writing__compile-schemas.js.txt:299:   299	            throw new Error(
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying-writing__compile-schemas.js.txt:313:   313	    } catch (error) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying-writing__compile-schemas.js.txt:314:   314	      throw new Error(`Invalid setter dependencies in ${scopeName}: ${error.message}`)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-plugin-hooks__validate-include-configurations.js.txt:19:    19	        throw new Error(
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-plugin-hooks__validate-include-configurations.js.txt:26:    26	        throw new Error(
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-plugin-hooks__validate-include-configurations.js.txt:34:    34	      throw new Error(
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying__knex-process-includes.js.txt:109:   109	      throw new Error('scopeName is undefined in context')
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying__knex-process-includes.js.txt:146:   146	  } catch (error) {
-audit/evidence/code/critical-pass1/json-rest-schema__src__index.js.txt:28:    28	    throw new Error(`Type handler for '${name}' must be a function.`)
-audit/evidence/code/critical-pass1/json-rest-schema__src__index.js.txt:40:    40	    throw new Error(`Validator handler for '${name}' must be a function.`)
-audit/evidence/code/critical-pass1/json-rest-schema__src__index.js.txt:52:    52	    throw new Error('Plugin must have an install method.')
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-plugin-hooks__turn-scope-init-into-vars.js.txt:31:    31	      throw new Error(
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-plugin-hooks__turn-scope-init-into-vars.js.txt:42:    42	        throw new Error(
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-plugin-methods__get-related.js.txt:273:   273	      throw new Error('Missing foreignKey or otherKey in many-to-many relationship')
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__fractional-positioning.js.txt:6:     6	} catch (e) {
-audit/evidence/code/critical-pass1/json-rest-schema__src__Schema.js.txt:131:   131	    if (!typeHandler) throw new Error(`No casting function for type: ${definition.type}`)
-audit/evidence/code/critical-pass1/json-rest-schema__src__Schema.js.txt:139:   139	    } catch (e) {
-audit/evidence/code/critical-pass1/json-rest-schema__src__Schema.js.txt:159:   159	        } catch (e) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-plugin-methods__query.js.txt:145:   145	  } catch (e) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-plugin-methods__enrich-attributes.js.txt:65:    65	      } catch (error) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-plugin-methods__enrich-attributes.js.txt:141:   141	      } catch (error) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying-writing__knex-field-helpers.js.txt:203:   203	      if (!fieldDef) throw new Error(`Unknown sparse field '${field}' requested for '${scopeName}'`)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying-writing__knex-field-helpers.js.txt:310:   310	  } catch (e) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-plugin-methods__put.js.txt:250:   250	  } catch (error) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__writing__many-to-many-manipulations.js.txt:111:   111	    throw new Error(`Pivot table resource '${relDef.through}' not found`)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__writing__many-to-many-manipulations.js.txt:139:   139	      } catch (error) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__writing__many-to-many-manipulations.js.txt:217:   217	 * } catch (error) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__writing__many-to-many-manipulations.js.txt:265:   265	    throw new Error(`Pivot table resource '${relDef.through}' not found`)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__writing__many-to-many-manipulations.js.txt:279:   279	      } catch (error) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying__knex-json-api-transformers-querying.js.txt:201:   201	  } catch (e) {
-audit/evidence/code/critical-pass1/json-rest-schema__src__CorePlugin.js.txt:158:   158	      } catch (e) {
-audit/evidence/code/critical-pass1/json-rest-schema__src__CorePlugin.js.txt:175:   175	      } catch (e) {
-audit/evidence/code/critical-pass1/json-rest-schema__src__CorePlugin.js.txt:179:   179	        } catch (e2) {
-audit/evidence/code/critical-pass1/json-rest-schema__src__CorePlugin.js.txt:230:   230	        throw new Error(`Validator for ${context.fieldName} must be a function.`)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying__knex-pagination-helpers.js.txt:53:    53	    throw new Error('Page size must be greater than 0')
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying__knex-pagination-helpers.js.txt:56:    56	    throw new Error('Page number must be greater than 0')
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying__knex-pagination-helpers.js.txt:303:   303	 * } catch (e) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying__knex-pagination-helpers.js.txt:328:   328	      throw new Error('Empty cursor')
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying__knex-pagination-helpers.js.txt:336:   336	        throw new Error('Invalid cursor format: missing colon separator')
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying__knex-pagination-helpers.js.txt:343:   343	        throw new Error('Invalid cursor format: empty field name')
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying__knex-pagination-helpers.js.txt:350:   350	  } catch (e) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying__knex-pagination-helpers.js.txt:351:   351	    throw new Error(`Invalid cursor format: ${e.message}`)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-plugin-methods__delete.js.txt:101:   101	  } catch (error) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__storage__storage-adapter.js.txt:152:   152	    throw new Error('createStorageAdapter requires schemaInfo')
-audit/evidence/code/critical-pass1/json-rest-api__plugins__storage__s3-storage.js.txt:35:    35	      throw new Error('S3Storage requires a bucket name')
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-plugin-methods__post.js.txt:165:   165	  } catch (error) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-plugin-methods__post-relationship.js.txt:107:   107	  } catch (error) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-plugin-methods__patch.js.txt:188:   188	  } catch (error) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-plugin-methods__delete-relationship.js.txt:114:   114	  } catch (error) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__storage__local-storage.js.txt:33:    33	        throw new Error(`File extension '${originalExt}' is not allowed`)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__storage__local-storage.js.txt:62:    62	          throw new Error('nameGenerator function required for custom strategy')
-audit/evidence/code/critical-pass1/json-rest-api__plugins__storage__local-storage.js.txt:68:    68	        throw new Error(`Unknown name strategy: ${this.nameStrategy}`)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__storage__local-storage.js.txt:126:   126	    } catch (error) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__storage__local-storage.js.txt:180:   180	      throw new Error('Invalid file path')
-audit/evidence/code/critical-pass1/json-rest-api__plugins__storage__local-storage.js.txt:189:   189	      throw new Error('File has no data or filepath')
-audit/evidence/code/critical-pass1/json-rest-api__plugins__storage__local-storage.js.txt:207:   207	      throw new Error('Invalid file path')
-audit/evidence/code/critical-pass1/json-rest-api__plugins__storage__local-storage.js.txt:212:   212	    } catch (error) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-multihome-plugin.js.txt:7:     7	      throw new Error('Multihome plugin requires a storage plugin with knex support (rest-api-knex or rest-api-anyapi-knex)')
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-multihome-plugin.js.txt:79:    79	        log.warn('No multihome ID found in request', {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-multihome-plugin.js.txt:100:   100	          log.warn(`Resource ${scopeName} missing ${vars.multihome.field} field - multihome filtering disabled for this 
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-multihome-plugin.js.txt:103:   103	          throw new Error(
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-multihome-plugin.js.txt:125:   125	          throw new Error('No multihome context available - cannot execute query')
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-multihome-plugin.js.txt:145:   145	          throw new Error(`Resource ${scopeName} missing required ${vars.multihome.field} field`)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-multihome-plugin.js.txt:191:   191	          throw new Error('Cannot create record without multihome context')
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-multihome-plugin.js.txt:202:   202	          throw new Error(`Resource ${scopeName} missing required ${vars.multihome.field} field`)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-multihome-plugin.js.txt:223:   223	          throw new Error(
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-multihome-plugin.js.txt:246:   246	          throw new Error('No multihome context available')
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__socketio-plugin.js.txt:145:   145	      throw new Error('Authentication required')
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__socketio-plugin.js.txt:149:   149	  } catch (error) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__socketio-plugin.js.txt:153:   153	      } catch (hookError) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__socketio-plugin.js.txt:305:   305	    } catch (error) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__socketio-plugin.js.txt:328:   328	    log.warn(`Socket.IO broadcast skipped: unknown resource ${scopeName}`)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__socketio-plugin.js.txt:388:   388	    } catch (error) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__socketio-plugin.js.txt:420:   420	        } catch (error) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__socketio-plugin.js.txt:427:   427	        } catch (error) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__socketio-plugin.js.txt:452:   452	        } catch (error) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__socketio-plugin.js.txt:453:   453	          log.warn('Socket.IO authentication failed', error)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__socketio-plugin.js.txt:481:   481	          } catch (error) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__socketio-plugin.js.txt:519:   519	          } catch (error) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__socketio-plugin.js.txt:551:   551	          } catch (error) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-plugin-methods__common.js.txt:321:   321	    console.warn(`Computed fields [${fieldNames}] were sent in input for resource '${context.scopeName}' but will be ignored as they are output-only`)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-plugin-methods__common.js.txt:436:   436	        throw new Error(`Unknown resource type: ${item.type}`)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-plugin-methods__common.js.txt:457:   457	        throw new Error(`Cannot create relationship to non-existent ${item.type} with id ${item.id}`)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-plugin-methods__common.js.txt:515:   515	      } catch (error) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-plugin-methods__common.js.txt:516:   516	        console.warn(`Setter for field '${fieldName}' failed:`, error)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-plugin-methods__common.js.txt:563:   563	    } catch (error) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-plugin-methods__common.js.txt:564:   564	      enhancedLog.warn(`Could not fetch minimal record after ${context.method} operation`, { error, id: context.id })
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-plugin-methods__common.js.txt:621:   621	  throw new Error(`Invalid returnMode: ${returnMode}`)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying__knex-cross-table-search.js.txt:27:    27	   * } catch (error) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying__knex-cross-table-search.js.txt:51:    51	    throw new Error(`Circular reference detected: ${targetScopeName} -> ${Array.from(searchedScopes).join(' -> ')}`)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying__knex-cross-table-search.js.txt:59:    59	  } catch (error) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying__knex-cross-table-search.js.txt:61:    61	    throw new Error(`Target scope '${targetScopeName}' not found`)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying__knex-cross-table-search.js.txt:66:    66	    throw new Error(`Target scope '${targetScopeName}' has no schema`)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying__knex-cross-table-search.js.txt:72:    72	    throw new Error(`Field '${fieldName}' not found in scope '${targetScopeName}'`)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying__knex-cross-table-search.js.txt:77:    77	    throw new Error(`Field '${targetScopeName}.${fieldName}' is not indexed. Add 'indexed: true' to allow cross-table search`)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying__knex-cross-table-search.js.txt:183:   183	    throw new Error(`Invalid cross-table path '${targetPath}'. Must contain at least 'scope.field'`)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying__knex-cross-table-search.js.txt:200:   200	      throw new Error(`Circular reference detected in path: ${Array.from(searchedScopes).join(' -> ')} -> ${currentScope}`)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying__knex-cross-table-search.js.txt:257:   257	            throw new Error(`Missing foreignKey in hasMany relationship '${relName}' for scope '${currentScope}'`)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying__knex-cross-table-search.js.txt:280:   280	      throw new Error(
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying__knex-cross-table-search.js.txt:357:   357	    throw new Error(`Invalid path '${targetPath}': no relationships to traverse`)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying__knex-cross-table-search.js.txt:559:   559	    } catch (error) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying__knex-cross-table-search.js.txt:560:   560	      log.warn(`Failed to create index on ${tableName}.${field}:`, error.message)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__file-handling-plugin.js.txt:58:    58	        throw new Error('File detector must have name, detect(), and parse() properties')
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__file-handling-plugin.js.txt:130:   130	        } catch (error) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__file-handling-plugin.js.txt:131:   131	          log.warn(`Detector '${detector.name}' failed:`, error)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__file-handling-plugin.js.txt:221:   221	          throw new Error(`No storage configured for file field '${fieldConfig.field}'`)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__file-handling-plugin.js.txt:228:   228	        } catch (error) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__file-handling-plugin.js.txt:233:   233	            } catch (cleanupError) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__file-handling-plugin.js.txt:234:   234	              log.warn('Failed to cleanup file after upload error:', cleanupError)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__file-handling-plugin.js.txt:270:   270	          } catch (error) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__file-handling-plugin.js.txt:271:   271	            log.warn('Failed to cleanup temp file:', error)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__file-handling-plugin.js.txt:313:   313	    throw new Error(`Invalid size format: ${size}`)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__file-handling-plugin.js.txt:320:   320	    throw new Error(`Unknown size unit: ${unit}`)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying-writing__simplified-helpers.js.txt:245:   245	              rule: 'deprecated_foreign_key',
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying-writing__default-data-helpers.js.txt:13:    13	 * } catch (error) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying-writing__default-data-helpers.js.txt:42:    42	    throw new Error('No storage implementation for exists. Install a storage plugin.')
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying-writing__default-data-helpers.js.txt:46:    46	    throw new Error('No storage implementation for get. Install a storage plugin.')
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying-writing__default-data-helpers.js.txt:50:    50	    throw new Error('No storage implementation for getMinimal. Install a storage plugin.')
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying-writing__default-data-helpers.js.txt:54:    54	    throw new Error('No storage implementation for query. Install a storage plugin.')
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying-writing__default-data-helpers.js.txt:58:    58	    throw new Error('No storage implementation for post. Install a storage plugin.')
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying-writing__default-data-helpers.js.txt:62:    62	    throw new Error('No storage implementation for patch. Install a storage plugin.')
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying-writing__default-data-helpers.js.txt:66:    66	    throw new Error('No storage implementation for put. Install a storage plugin.')
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying-writing__default-data-helpers.js.txt:70:    70	    throw new Error('No storage implementation for delete. Install a storage plugin.')
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying-writing__scope-validations.js.txt:151:   151	        throw new Error(
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying-writing__scope-validations.js.txt:161:   161	        throw new Error(
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying-writing__scope-validations.js.txt:170:   170	        throw new Error(
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying-writing__scope-validations.js.txt:179:   179	        throw new Error(
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-plugin-methods__patch-relationship.js.txt:52:    52	  } catch (error) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-positioning-plugin.js.txt:18:    18	      throw new Error(
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-positioning-plugin.js.txt:24:    24	      throw new Error('Positioning plugin requires a storage plugin with knex support (rest-api-knex or rest-api-anyapi-knex)')
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-positioning-plugin.js.txt:63:    63	      throw new Error(`Invalid positioning strategy: ${vars.positioning.strategy}. Must be 'fractional' or 'integer'`)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-positioning-plugin.js.txt:67:    67	      throw new Error("Integer positioning strategy not yet implemented. Please use 'fractional'")
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-positioning-plugin.js.txt:104:   104	          log.warn(`Filter field '${filterField}' not found in search schema or resource schema for positioning`)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-positioning-plugin.js.txt:155:   155	        throw new Error(
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-positioning-plugin.js.txt:179:   179	          throw new Error(
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-positioning-plugin.js.txt:251:   251	      } catch (error) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-positioning-plugin.js.txt:252:   252	        log.warn(`Could not create positioning index for ${scopeName}:`, error.message)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-positioning-plugin.js.txt:407:   407	        log.warn('*** Positioning skipped - no storage adapter available', { scopeName })
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-positioning-plugin.js.txt:526:   526	      } catch (error) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-positioning-plugin.js.txt:602:   602	          throw new Error(`Unknown resource: ${scopeName}`)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying-writing__database-value-normalizers.js.txt:116:   116	    console.warn(`Invalid date value for field type '${type}': ${value}`)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__connectors__lib__formidable-detector.js.txt:36:    36	} catch (e) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__connectors__lib__formidable-detector.js.txt:99:    99	        // For now, just take the first file (TODO: handle multiple files per field)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__connectors__lib__formidable-detector.js.txt:118:   118	              } catch (error) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-knex-plugin.js.txt:63:    63	    } catch (e) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-knex-plugin.js.txt:194:   194	        throw new Error('fields parameter is required for alterKnexFields')
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-knex-plugin.js.txt:286:   286	        throw new Error(`Scope '${scopeName}' not found in api.resources`)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-knex-plugin.js.txt:524:   524	            log.warn(`Ignoring non-sortable field: ${field}`)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-knex-plugin.js.txt:593:   593	            } catch (error) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-knex-plugin.js.txt:632:   632	                  log.warn(`Cursor missing value for sort field: ${field}`)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-knex-plugin.js.txt:661:   661	            } catch (error) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-knex-plugin.js.txt:700:   700	                  log.warn(`Cursor missing value for sort field: ${field}`)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-cors-plugin.js.txt:113:   113	        log.warn('CORS origin not allowed', { origin })
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__rest-api-cors-plugin.js.txt:173:   173	        log.warn('CORS origin not allowed for response', {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying-writing__schema-helpers.js.txt:387:   387	      throw new Error(`Circular dependency detected: ${item}`)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying-writing__schema-helpers.js.txt:395:   395	        throw new Error(`Unknown dependency '${dep}' for '${item}'`)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying-writing__schema-helpers.js.txt:482:   482	  } catch (error) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying-writing__schema-helpers.js.txt:484:   484	      throw new Error(`${error.message} in ${dependencyProperty}`)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying__knex-relationship-includes.js.txt:336:   336	  } catch (error) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying__knex-relationship-includes.js.txt:344:   344	    throw new Error(`Failed to load relationship metadata for scope '${scopeName}': ${error.message}`)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying__knex-relationship-includes.js.txt:384:   384	      log.warn('[INCLUDE] Target scope not found:', targetScope)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying__knex-relationship-includes.js.txt:537:   537	  } catch (error) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying__knex-relationship-includes.js.txt:610:   610	        throw new Error(`Missing foreignKey or otherKey in many-to-many relationship '${relName}' for scope '${scopeName}'`)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying__knex-relationship-includes.js.txt:845:   845	        throw new Error(`Missing foreignKey in hasMany relationship '${relName}' for scope '${scopeName}'`)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying__knex-relationship-includes.js.txt:892:   892	        } catch (error) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying__knex-relationship-includes.js.txt:898:   898	          log.warn('[INCLUDE] Window function query failed, falling back to standard query:', {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying__knex-relationship-includes.js.txt:1018:  1018	  } catch (error) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying__knex-relationship-includes.js.txt:1073:  1073	    throw new Error(`Missing foreignKey in hasOne relationship '${includeName}' for scope '${scopeName}'`)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying__knex-relationship-includes.js.txt:1113:  1113	      log.warn(`[INCLUDE] Multiple records found for hasOne relationship '${includeName}' with ${foreignKey}=${parentId}`)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying__knex-relationship-includes.js.txt:1215:  1215	        log.warn('[INCLUDE] Skipping non-allowed type:', targetType)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying__knex-relationship-includes.js.txt:1360:  1360	  } catch (error) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying__knex-relationship-includes.js.txt:1421:  1421	      log.warn('[INCLUDE] Via relationship not found or not polymorphic:', {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying__knex-relationship-includes.js.txt:1555:  1555	  } catch (error) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying__knex-relationship-includes.js.txt:1614:  1614	      log.warn('[INCLUDE] No schema info for scope:', scopeName)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying__knex-relationship-includes.js.txt:1694:  1694	      } catch (includeError) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying__knex-relationship-includes.js.txt:1707:  1707	        log.warn('[INCLUDE] Unknown relationship:', {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying__knex-relationship-includes.js.txt:1715:  1715	  } catch (error) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying__knex-relationship-includes.js.txt:1818:  1818	  } catch (error) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying__knex-relationship-includes.js.txt:1895:  1895	        throw new Error(`Missing foreignKey in hasMany relationship '${relName}' for scope '${scopeName}'`)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying__knex-relationship-includes.js.txt:1918:  1918	        throw new Error(`Missing foreignKey or otherKey in manyToMany relationship '${relName}' for scope '${scopeName}'`)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying__knex-query-helpers.js.txt:255:   255	      throw new Error(
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying__knex-query-helpers.js.txt:332:   332	                throw new Error(
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying__knex-query-helpers.js.txt:337:   337	              throw new Error(
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying__knex-query-helpers.js.txt:953:   953	  log.trace('[DEBUG basicFiltersHook] Called with:', {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying__knex-query-helpers.js.txt:962:   962	    log.trace('[DEBUG basicFiltersHook] Returning early - no filters')
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying__knex-query-helpers.js.txt:981:   981	        log.trace(`[DEBUG basicFiltersHook] No field definition for filter key: ${filterKey}`)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying__knex-query-helpers.js.txt:984:   984	      log.trace(`[DEBUG basicFiltersHook] Processing filter: ${filterKey} = ${filterValue}, fieldDef:`, fieldDef)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying__knex-query-helpers.js.txt:990:   990	        log.trace(`[DEBUG basicFiltersHook] Skipping filter ${filterKey} - is cross-table or polymorphic`)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying__knex-query-helpers.js.txt:1058:  1058	          log.trace(`[DEBUG basicFiltersHook] Applying filter: ${dbField} ${operator} ${filterValue}`)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying-writing__database-capabilities.js.txt:108:   108	        } catch (dbError) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying-writing__database-capabilities.js.txt:109:   109	          console.warn(`[supportsWindowFunctions] Failed to get MySQL version: ${dbError.message}`)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying-writing__database-capabilities.js.txt:121:   121	        } catch (dbError) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying-writing__database-capabilities.js.txt:122:   122	          console.warn(`[supportsWindowFunctions] Failed to get SQLite version: ${dbError.message}`)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying-writing__database-capabilities.js.txt:146:   146	          } catch (dbError) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying-writing__database-capabilities.js.txt:147:   147	            console.warn(`[supportsWindowFunctions] Failed to get MariaDB version: ${dbError.message}`)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying-writing__database-capabilities.js.txt:153:   153	  } catch (error) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying-writing__database-capabilities.js.txt:223:   223	        } catch (dbError) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying-writing__database-capabilities.js.txt:224:   224	          console.warn(`[getDatabaseInfo] Failed to get MySQL version: ${dbError.message}`)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying-writing__database-capabilities.js.txt:233:   233	        } catch (dbError) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying-writing__database-capabilities.js.txt:234:   234	          console.warn(`[getDatabaseInfo] Failed to get SQLite version: ${dbError.message}`)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying-writing__database-capabilities.js.txt:243:   243	        } catch (dbError) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying-writing__database-capabilities.js.txt:244:   244	          console.warn(`[getDatabaseInfo] Failed to get PostgreSQL version: ${dbError.message}`)
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__lib__querying-writing__database-capabilities.js.txt:251:   251	  } catch (error) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__connectors__lib__busboy-detector.js.txt:32:    32	} catch (e) {
-audit/evidence/code/critical-pass1/json-rest-api__plugins__core__connectors__lib__busboy-detector.js.txt:137:   137	          } catch (error) {