test(service-automation): get_record's empty-fields case pins the engine's refusal the node now carries

The engine refuses an empty projection (#27008), so a get_record node
authored with fields: [] fails with that refusal instead of reading the
whole row. The control for an absent fields stays; the crud-nodes
comment says what the empty list now meets.

Claude-Session: https://claude.ai/code/session_01FEkQ5mbUpy4ebfWUHxAv87
Co-authored-by: Claude <noreply@anthropic.com>

Author: claude

packages/services/service-automation/src/builtin/crud-nodes.ts

@@ -307,9 +307,10 @@ async function serveFamilyRead<A>(
  * node's `outputVariable` agrees with `{<node>.id}`; it is not taken back off,
  * which would be a second projection layer over the engine's answer.
  *
- * Only a non-empty projection is touched: no `fields`, or an empty list, is a
- * whole-row read already, and a projection that names `id` is handed over as
- * written. The `find` branch (`limit > 1`) answers rows only, with no
+ * Only a non-empty projection is touched: no `fields` is a whole-row read
+ * already, an empty list is handed over as written for the engine to refuse
+ * (#27008: an empty projection is never read as the whole row), and a
+ * projection that names `id` is handed over as written. The `find` branch (`limit > 1`) answers rows only, with no
  * top-level `id`, and does not come through here.
  */
 function projectionNamingId(fields: string[] | undefined): string[] | undefined {

packages/services/service-automation/src/builtin/get-record-id-projection.integration.test.ts

@@ -14,8 +14,9 @@
  * engine on that branch, and only there:
  *  - a projection that already names `id` is handed over as written (no
  *    second `id`);
- *  - no projection, or an empty one, stays a whole-row read (no projection is
- *    invented);
+ *  - no projection stays a whole-row read (no projection is invented);
+ *  - an empty projection is handed over as written, and the engine refuses it
+ *    (#27008): the node fails with that refusal carried, never a whole-row read;
  *  - the `find` branch (`limit > 1`) declares no top-level `id` and is not
  *    touched.
  *
@@ -152,15 +153,27 @@ describe('get_record answers the row id as output.id whatever its fields project
     expect(result.output.record).toEqual({ id: rowId, title: 'alpha' });
   });
 
-  for (const [label, config] of [['no fields', {}], ['empty fields', { fields: [] }]] as const) {
-    it(`control, ${label}: the whole row is read and the output is the engine's own answer`, async () => {
-      const whole: any = await ql.findOne(OBJECT.name, { where: { title: 'alpha' }, context: SYS });
-      expect(whole.status, 'control: a whole-row read carries the unnamed columns').toBe('open');
-      const { result, fields } = await readOne(config);
-      expect(fields, 'no projection is invented').toEqual((config as { fields?: unknown }).fields);
-      expect(result.output).toEqual({ record: whole, id: rowId, object: OBJECT.name });
-    });
-  }
+  it("control, no fields: the whole row is read and the output is the engine's own answer", async () => {
+    const whole: any = await ql.findOne(OBJECT.name, { where: { title: 'alpha' }, context: SYS });
+    expect(whole.status, 'control: a whole-row read carries the unnamed columns').toBe('open');
+    const { result, fields } = await readOne({});
+    expect(fields, 'no projection is invented').toBeUndefined();
+    expect(result.output).toEqual({ record: whole, id: rowId, object: OBJECT.name });
+  });
+
+  it("empty fields: handed to the engine as written, and the node fails with the engine's refusal carried (#27008)", async () => {
+    handed.length = 0;
+    const result = await getRecord.execute(
+      { id: 'read', type: 'get_record', config: { objectName: OBJECT.name, filter: { title: 'alpha' }, fields: [] } },
+      new Map(),
+      { runAs: 'system', flowName: 'pin_get_record_id' },
+    );
+    expect(handed, 'the node hands the empty projection over unchanged, once').toEqual([{ method: 'findOne', fields: [] }]);
+    expect(result.success, 'an empty projection is refused, never read as the whole row').toBe(false);
+    expect(result.output).toBeUndefined();
+    expect(result.innerRefusal).toMatchObject({ code: 'VALIDATION_ERROR' });
+    expect(result.error).toMatch(/^get_record\(pin_get_record_id\) failed: ObjectQL\.findOne\('pin_get_record_id'\) names no field in 'fields'/);
+  });
 
   it('a downstream update_record filtering on read.id updates the row the narrowed get_record read', async () => {
     await ql.insert(OBJECT.name, { title: 'beta', status: 'open' }, { context: SYS });