fix(catalog): add allow_unknown_fields to all persisted catalog types

zerompk 0.5 in strict map mode rejects unknown keys by default, which
breaks rolling upgrades where a newer node writes a field that an older
reader does not yet recognise. Adding allow_unknown_fields to every
stored catalog struct and event-plane definition type restores the
forward-compatible behaviour that the previous zerompk version provided
implicitly.

Affected types: StoredUser, StoredApiKey, StoredAuditEntry,
StoredAuthUser, StoredIndex, StoredCollection, FieldDefinition,
StoredContinuousAggregate, DatabaseDescriptor, ParentCloneRef,
StoredFunction, StoredProcedure, StoredScope, StoredSequence,
StoredTrigger, L2CleanupEntry, LockoutEntry, StoredMaterializedView,
StoredOidcProvider, StoredOrg, ChangeStreamDef, ScheduleDef.

Author: farhan-syah

nodedb/src/control/security/catalog/auth_types.rs

@@ -4,7 +4,7 @@
 
 /// Serializable user record for redb storage.
 #[derive(zerompk::ToMessagePack, zerompk::FromMessagePack, Debug, Clone)]
-#[msgpack(map)]
+#[msgpack(map, allow_unknown_fields)]
 pub struct StoredUser {
     pub user_id: u64,
     pub username: String,
@@ -49,7 +49,7 @@ pub struct StoredUser {
 
 /// Serializable API key record for redb storage.
 #[derive(zerompk::ToMessagePack, zerompk::FromMessagePack, Debug, Clone)]
-#[msgpack(map)]
+#[msgpack(map, allow_unknown_fields)]
 pub struct StoredApiKey {
     /// Unique key identifier (used as prefix in the token).
     pub key_id: String,
@@ -87,7 +87,7 @@ pub struct StoredTenant {
 
 /// Serializable audit entry for redb storage.
 #[derive(zerompk::ToMessagePack, zerompk::FromMessagePack, Debug, Clone)]
-#[msgpack(map)]
+#[msgpack(map, allow_unknown_fields)]
 pub struct StoredAuditEntry {
     pub seq: u64,
     pub timestamp_us: u64,
@@ -179,7 +179,7 @@ pub struct StoredBlacklistEntry {
 
 /// Serializable JIT-provisioned auth user record for redb storage.
 #[derive(Debug, Clone, zerompk::ToMessagePack, zerompk::FromMessagePack)]
-#[msgpack(map)]
+#[msgpack(map, allow_unknown_fields)]
 pub struct StoredAuthUser {
     /// Unique identifier (from JWT `sub` or `user_id` claim).
     pub id: String,

nodedb/src/control/security/catalog/collection.rs

@@ -32,7 +32,7 @@ pub enum IndexBuildState {
 /// recovery, descriptor-lease invalidation, and DROP cascade all ride the
 /// existing collection-commit pipeline.
 #[derive(zerompk::ToMessagePack, zerompk::FromMessagePack, Debug, Clone)]
-#[msgpack(map)]
+#[msgpack(map, allow_unknown_fields)]
 pub struct StoredIndex {
     /// Index identifier, unique per tenant.
     pub name: String,
@@ -59,7 +59,7 @@ pub struct StoredIndex {
 
 /// Serializable collection metadata for redb storage.
 #[derive(zerompk::ToMessagePack, zerompk::FromMessagePack, Debug, Clone)]
-#[msgpack(map)]
+#[msgpack(map, allow_unknown_fields)]
 pub struct StoredCollection {
     pub tenant_id: u64,
     pub name: String,

nodedb/src/control/security/catalog/collection_constraints.rs

@@ -15,7 +15,7 @@ use crate::bridge::expr_eval::SqlExpr;
 
 /// Extended field definition supporting DEFAULT, VALUE, ASSERT, and TYPE constraints.
 #[derive(Debug, Clone, Serialize, Deserialize, ToMessagePack, FromMessagePack)]
-#[msgpack(map)]
+#[msgpack(map, allow_unknown_fields)]
 pub struct FieldDefinition {
     pub name: String,
     /// Type constraint: "int", "float", "string", etc. Empty = any.

nodedb/src/control/security/catalog/continuous_aggregate.rs

@@ -17,7 +17,7 @@ use nodedb_types::Hlc;
 /// Data Plane's struct layout (the runtime type carries
 /// SIMD/quantization tuning that has no place in the catalog).
 #[derive(zerompk::ToMessagePack, zerompk::FromMessagePack, Debug, Clone)]
-#[msgpack(map)]
+#[msgpack(map, allow_unknown_fields)]
 pub struct StoredContinuousAggregate {
     pub tenant_id: u64,
     pub name: String,

nodedb/src/control/security/catalog/database_types.rs

@@ -42,7 +42,7 @@ pub enum DatabaseStatus {
     serde::Serialize,
     serde::Deserialize,
 )]
-#[msgpack(map)]
+#[msgpack(map, allow_unknown_fields)]
 pub struct DatabaseDescriptor {
     pub id: DatabaseId,
     /// Human-readable name. Mutable via `ALTER DATABASE RENAME`.
@@ -90,7 +90,7 @@ pub struct DatabaseDescriptor {
     serde::Serialize,
     serde::Deserialize,
 )]
-#[msgpack(map)]
+#[msgpack(map, allow_unknown_fields)]
 pub struct ParentCloneRef {
     pub source_db_id: DatabaseId,
     /// WAL LSN at which the clone was taken (the `AS OF` point).

nodedb/src/control/security/catalog/function_types.rs

@@ -97,7 +97,7 @@ impl FunctionLanguage {
 
 /// Serializable user-defined function record for redb storage.
 #[derive(Debug, Clone, zerompk::ToMessagePack, zerompk::FromMessagePack)]
-#[msgpack(map)]
+#[msgpack(map, allow_unknown_fields)]
 pub struct StoredFunction {
     pub tenant_id: u64,
     pub name: String,

nodedb/src/control/security/catalog/l2_cleanup_queue.rs

@@ -21,7 +21,7 @@ use super::types::{L2_CLEANUP_QUEUE, SystemCatalog, catalog_err};
 
 /// One queue entry: "L2 delete for this collection is still owed".
 #[derive(zerompk::ToMessagePack, zerompk::FromMessagePack, Debug, Clone)]
-#[msgpack(map)]
+#[msgpack(map, allow_unknown_fields)]
 pub struct StoredL2CleanupEntry {
     pub tenant_id: u64,
     pub name: String,

nodedb/src/control/security/catalog/lockout.rs

@@ -20,7 +20,7 @@ pub(super) use super::types::LOCKOUT_STATE as LOCKOUT_STATE_TABLE;
 /// in diagnostic queries. A `None` means no IP was available (e.g. in-process
 /// auth paths).
 #[derive(zerompk::ToMessagePack, zerompk::FromMessagePack, Debug, Clone)]
-#[msgpack(map)]
+#[msgpack(map, allow_unknown_fields)]
 pub struct StoredLockoutRecord {
     /// Number of consecutive failed login attempts since the last success.
     pub failed_count: u32,

nodedb/src/control/security/catalog/materialized_view.rs

@@ -6,7 +6,7 @@ use nodedb_types::Hlc;
 
 /// A materialized view: strict → columnar CDC bridge.
 #[derive(zerompk::ToMessagePack, zerompk::FromMessagePack, Debug, Clone)]
-#[msgpack(map)]
+#[msgpack(map, allow_unknown_fields)]
 pub struct StoredMaterializedView {
     pub tenant_id: u64,
     pub name: String,

nodedb/src/control/security/catalog/oidc_providers.rs

@@ -19,7 +19,7 @@ use super::types::{SystemCatalog, catalog_err};
     serde::Serialize,
     serde::Deserialize,
 )]
-#[msgpack(map)]
+#[msgpack(map, allow_unknown_fields)]
 pub struct StoredClaimMappingRule {
     /// Name of the JWT claim to inspect (e.g. `"org_id"`, `"groups"`).
     pub claim_name: String,
@@ -45,7 +45,7 @@ pub struct StoredClaimMappingRule {
     serde::Serialize,
     serde::Deserialize,
 )]
-#[msgpack(map)]
+#[msgpack(map, allow_unknown_fields)]
 pub struct StoredOidcProvider {
     /// Human-readable name; also the catalog key.
     pub provider_name: String,