fix(V2): replace _.snakeCase with digit-safe camelToSnake converter

TheLastCicada · TheLastCicada · commit 8fc59634311a · 2026-05-28T11:46:47.000-07:00
Lodash _.snakeCase splits on letter-to-digit transitions, producing
cad_trust_aef_t_1_submission_id instead of cad_trust_aef_t1_submission_id
for AEF field names. This caused getRecordField to silently miss FK
references on AEF tables, bypassing ownership checks.
diff --git a/src/models/v2/staging-v2.model.js b/src/models/v2/staging-v2.model.js
@@ -196,12 +196,16 @@ class StagingV2 extends Model {
     ];
   }
 
+  static camelToSnake(str) {
+    return str.replace(/([a-z0-9])([A-Z])/g, '$1_$2').toLowerCase();
+  }
+
   static getRecordField(record, fieldName) {
     const plainRecord = typeof record?.get === 'function'
       ? record.get({ plain: true })
       : record?.dataValues ?? record;
 
-    return plainRecord?.[fieldName] ?? plainRecord?.[_.snakeCase(fieldName)];
+    return plainRecord?.[fieldName] ?? plainRecord?.[StagingV2.camelToSnake(fieldName)];
   }
 
   static hasOwnershipFields(record, table) {
