fix: narrow internal key skip list to only system-managed keys

abnegate · claude · abnegate · commit a55ef9d30146 · 2026-03-25T14:29:15.000+13:00
$updatedAt, $createdAt, $id, $version can be user-controlled and must
be compared for change detection. Only skip $internalId, $collection,
$tenant, $sequence which are strictly system-managed.

Co-Authored-By: Claude Opus 4.6 (1M context) &lt;noreply@anthropic.com&gt;
diff --git a/src/Database/Traits/Documents.php b/src/Database/Traits/Documents.php
@@ -659,7 +659,7 @@ public function updateDocument(string $collection, string $id, Document $documen
                     }
                 }
 
-                $internalKeys = ['$id', '$internalId', '$collection', '$createdAt', '$updatedAt', '$tenant', '$sequence', '$version'];
+                $internalKeys = ['$internalId', '$collection', '$tenant', '$sequence'];
 
                 // Compare if the document has any changes
                 foreach ($document as $key => $value) {

Original file line number	Diff line number	Diff line change
`@@ -659,7 +659,7 @@ public function updateDocument(string $collection, string $id, Document $documen`
`659`	`659`	`}`
`660`	`660`	`}`
`661`	`661`
`662`		`- $internalKeys = ['$id', '$internalId', '$collection', '$createdAt', '$updatedAt', '$tenant', '$sequence', '$version'];`
	`662`	`+ $internalKeys = ['$internalId', '$collection', '$tenant', '$sequence'];`
`663`	`663`
`664`	`664`	`// Compare if the document has any changes`
`665`	`665`	`foreach ($document as $key => $value) {`