@classytic/mongokit 3.11.1 → 3.12.0

package/README.md

@@ -9,7 +9,7 @@ Production-grade MongoDB repository pattern for Node.js. Zero runtime deps — M
 npm install @classytic/mongokit @classytic/repo-core mongoose
 ```
 
-Requires Mongoose `>=9.4.1`, `@classytic/repo-core` `>=0.1.0`, Node.js `>=22`.
+Requires Mongoose `>=9.4.1`, `@classytic/repo-core` `>=0.3.0`, Node.js `>=22`.
 
 > **Swap-able with sqlitekit.** Mongokit implements the `StandardRepo<TDoc>` contract from `@classytic/repo-core/repository`. Controller code written against the contract runs unchanged on [@classytic/sqlitekit](https://www.npmjs.com/package/@classytic/sqlitekit) — both kits share an identical conformance suite.
 
@@ -180,7 +180,7 @@ Sketch:
 ```ts
 // host: src/outbox/wire.ts
 import { wireOutbox, MongoOutboxStore } from './outbox-recipe.js';
-import { RedisEventTransport } from '@classytic/arc/events';
+import { RedisEventTransport } from '@classytic/arc/events/redis';
 
 const store = new MongoOutboxStore({ connection: mongoose.connection, name: 'outbox' });
 const transport = new RedisEventTransport({ url: process.env.REDIS_URL });

package/dist/{PaginationEngine-CvDFfVXT.mjs → PaginationEngine-BDaAsyPn.mjs}

@@ -1,4 +1,4 @@
-import { r as warn } from "./logger-DJ7egMnd.mjs";
+import { r as warn } from "./logger-8-VS1za6.mjs";
 import { t as createError } from "./error-B00pI7dV.mjs";
 import { n as encodeCursor, r as resolveCursorFilter } from "./cursor-J84rR6wG.mjs";
 import { r as validateKeysetSort, t as getPrimaryField } from "./sort-CrZjTK25.mjs";

package/dist/actions/index.d.mts

@@ -1,2 +1,2 @@
-import { a as create_d_exports, i as delete_d_exports, n as update_d_exports, o as aggregate_d_exports, r as read_d_exports } from "../index-dNTmpgK8.mjs";
+import { a as create_d_exports, i as delete_d_exports, n as update_d_exports, o as aggregate_d_exports, r as read_d_exports } from "../index-D9cORR-o.mjs";
 export { aggregate_d_exports as aggregate, create_d_exports as create, delete_d_exports as deleteActions, read_d_exports as read, update_d_exports as update };

package/dist/actions/index.mjs

@@ -1,5 +1,5 @@
 import { t as __exportAll } from "../chunk-CfYAbeIz.mjs";
-import { g as create_exports, i as update_exports, p as delete_exports, u as read_exports, v as aggregate_exports } from "../update-DEJYcgfV.mjs";
+import { g as create_exports, i as update_exports, p as delete_exports, u as read_exports, v as aggregate_exports } from "../update-CDxPtpsk.mjs";
 //#region src/actions/index.ts
 var actions_exports = /* @__PURE__ */ __exportAll({
 	aggregate: () => aggregate_exports,

package/dist/ai/index.d.mts

@@ -1,4 +1,4 @@
-import { q as Plugin } from "../types-Dc2aDVUi.mjs";
+import { W as Plugin } from "../types-DXscZnLu.mjs";
 import { PipelineStage } from "mongoose";
 
 //#region src/ai/types.d.ts

package/dist/ai/index.mjs

@@ -1,4 +1,4 @@
-import { r as warn } from "../logger-DJ7egMnd.mjs";
+import { r as warn } from "../logger-8-VS1za6.mjs";
 //#region src/ai/url-policy.ts
 /**
 * URL policy helpers for the vector plugin media pipeline.
@@ -45,7 +45,7 @@ function matchesOriginEntry(origin, entry, url) {
 	if (wildcardMatch) {
 		const [, entryProtocol, suffix] = wildcardMatch;
 		if (url.protocol.toLowerCase() !== entryProtocol.toLowerCase()) return false;
-		return url.hostname.toLowerCase().endsWith("." + suffix.toLowerCase());
+		return url.hostname.toLowerCase().endsWith(`.${suffix.toLowerCase()}`);
 	}
 	return false;
 }
@@ -137,7 +137,7 @@ async function withVectorErrorHints(op, ctx) {
 	} catch (err) {
 		const hint = classifyVectorSearchError(err, ctx);
 		if (hint.code === "UNKNOWN") throw err;
-		const message = `[mongokit:vector] ${hint.summary}\n` + hint.hints.map((h) => `  • ${h}`).join("\n");
+		const message = `[mongokit:vector] ${hint.summary}\n${hint.hints.map((h) => `  • ${h}`).join("\n")}`;
 		const wrapped = new Error(message, { cause: err });
 		wrapped.code = hint.code;
 		throw wrapped;

package/dist/{index-dNTmpgK8.d.mts → index-D9cORR-o.d.mts}

@@ -1,4 +1,4 @@
-import { $ as ReadPreferenceType, B as ObjectId, D as GroupResult, E as FindOneAndUpdateOptions, R as MinMaxResult, U as OperationOptions, X as PopulateSpec, a as AnyDocument, b as DeleteResult, ft as SortSpec, g as CreateOptions, gt as UpdateOptions, ht as UpdateManyResult, kt as LookupOptions, ot as SelectSpec, vt as UpdateWithValidationResult } from "./types-Dc2aDVUi.mjs";
+import { D as FindOneAndUpdateOptions, Dt as LookupOptions, L as MinMaxResult, O as GroupResult, V as OperationOptions, X as ReadPreferenceType, ft as UpdateManyResult, g as CreateOptions, ht as UpdateWithValidationResult, i as AnyDocument, lt as SortSpec, pt as UpdateOptions, q as PopulateSpec, rt as SelectSpec, x as DeleteResult, z as ObjectId } from "./types-DXscZnLu.mjs";
 import { Model, PipelineStage } from "mongoose";
 
 //#region src/actions/aggregate.d.ts

package/dist/index.d.mts

@@ -1,15 +1,16 @@
-import { $ as ReadPreferenceType, A as InferDocument, B as ObjectId, C as EventPayload, Ct as WithTransactionOptions, D as GroupResult, Dt as IResponseFormatter, E as FindOneAndUpdateOptions, Et as IRequestContext, F as Logger, G as PaginationResult, H as OffsetPaginationResult, I as LookupPopulateOptions, J as PluginFunction, K as PartialBy, L as LookupPopulateResult, M as KeysOfType, N as KeysetPaginationOptions, O as HookMode, Ot as LookupBuilder, P as KeysetPaginationResult, Q as ReadOptions, R as MinMaxResult, S as EventHandlers, St as WithPlugins, T as FieldPreset, Tt as IControllerResponse, U as OperationOptions, V as OffsetPaginationOptions, W as PaginationConfig, X as PopulateSpec, Y as PluginType, Z as PrioritizedHook, _ as DecodedCursor, _t as UpdatePatch, a as AnyDocument, at as RequiredBy, b as DeleteResult, bt as ValidationChainOptions, c as CacheOperationOptions, ct as SoftDeleteFilterMode, d as CacheableOptions, dt as SortDirection, et as RepositoryContext, f as CascadeOptions, ft as SortSpec, g as CreateOptions, gt as UpdateOptions, h as CreateInput, ht as UpdateManyResult, i as AllPluginMethods, it as RepositoryOptions, j as InferRawDoc, k as HttpError, kt as LookupOptions, l as CacheOptions, lt as SoftDeleteOptions, m as CollationOptions, mt as UpdateInput, n as AggregatePaginationOptions, nt as RepositoryInstance, o as AnyModel, ot as SelectSpec, p as CascadeRelation, pt as Strict, q as Plugin, r as AggregatePaginationResult, rt as RepositoryOperation, s as CacheAdapter, st as SessionOptions, t as AggregateOptions, tt as RepositoryEvent, u as CacheStats, ut as SoftDeleteRepository, v as DeepPartial, vt as UpdateWithValidationResult, w as EventPhase, wt as IController, x as DocField, xt as ValidatorDefinition, y as DeleteManyResult, yt as UserContext, z as NonNullableFields } from "./types-Dc2aDVUi.mjs";
-import { t as index_d_exports } from "./index-dNTmpgK8.mjs";
+import { $ as RepositoryInstance, A as InferDocument, B as OffsetPaginationOptions, C as EventHandlers, Ct as IControllerResponse, D as FindOneAndUpdateOptions, Dt as LookupOptions, E as FieldPreset, Et as LookupBuilder, F as LookupPopulateOptions, G as PluginFunction, H as PaginationConfig, I as LookupPopulateResult, J as PrioritizedHook, K as PluginType, L as MinMaxResult, M as KeysOfType, N as KeysetPaginationOptions, O as GroupResult, P as Logger, Q as RepositoryEvent, R as NonNullableFields, S as DocField, St as IController, T as EventPhase, Tt as IResponseFormatter, U as PartialBy, V as OperationOptions, W as Plugin, X as ReadPreferenceType, Y as ReadOptions, Z as RepositoryContext, _ as CursorPayload, _t as ValidationChainOptions, a as AnyModel, at as SoftDeleteFilterMode, b as DeleteManyResult, bt as WithPlugins, c as CacheOperationOptions, ct as SortDirection, d as CacheableOptions, dt as UpdateInput, et as RepositoryOperation, f as CascadeOptions, ft as UpdateManyResult, g as CreateOptions, gt as UserContext, h as CreateInput, ht as UpdateWithValidationResult, i as AnyDocument, it as SessionOptions, j as InferRawDoc, k as HookMode, l as CacheOptions, lt as SortSpec, m as CollationOptions, mt as UpdatePatch, n as AggregatePaginationOptions, nt as RequiredBy, o as BasePaginationOptions, ot as SoftDeleteOptions, p as CascadeRelation, pt as UpdateOptions, q as PopulateSpec, r as AllPluginMethods, rt as SelectSpec, s as CacheAdapter, st as SoftDeleteRepository, t as AggregateOptions, tt as RepositoryOptions, u as CacheStats, ut as Strict, v as DecodedCursor, vt as ValidatorDefinition, w as EventPayload, wt as IRequestContext, x as DeleteResult, xt as WithTransactionOptions, y as DeepPartial, yt as ValueType, z as ObjectId } from "./types-DXscZnLu.mjs";
+import { t as index_d_exports } from "./index-D9cORR-o.mjs";
 import { PaginationEngine } from "./pagination/PaginationEngine.mjs";
-import { $ as aggregateHelpersPlugin, A as PrefixedIdOptions, B as BatchOperationsMethods, C as methodRegistryPlugin, D as CustomIdOptions, E as elasticSearchPlugin, F as prefixedId, G as AuditQueryOptions, H as batchOperationsPlugin, I as sequentialId, J as AuditTrailOptions, K as AuditQueryResult, L as cascadePlugin, M as customIdPlugin, N as dateSequentialId, O as DateSequentialIdOptions, P as getNextSequence, Q as AggregateHelpersMethods, R as CacheMethods, T as ElasticSearchOptions, U as AuditEntry, V as BulkWriteResult, W as AuditOperation, X as auditTrailPlugin, Y as AuditTrailQuery, Z as auditLogPlugin, _ as observabilityPlugin, a as uniqueField, b as MongoOperationsMethods, c as TenantContext, d as SubdocumentMethods, f as subdocumentPlugin, g as OperationMetric, h as ObservabilityOptions, i as requireField, j as SequentialIdOptions, k as IdGenerator, l as TenantStore, m as softDeletePlugin, n as blockIf, o as validationChainPlugin, p as SoftDeleteMethods, q as AuditTrailMethods, r as immutableField, s as timestampPlugin, t as autoInject, u as createTenantContext, v as MultiTenantOptions, w as fieldFilterPlugin, x as mongoOperationsPlugin, y as multiTenantPlugin, z as cachePlugin } from "./validation-chain.plugin-B0VSdcwa.mjs";
+import { $ as aggregateHelpersPlugin, A as PrefixedIdOptions, B as BatchOperationsMethods, C as methodRegistryPlugin, D as CustomIdOptions, E as elasticSearchPlugin, F as prefixedId, G as AuditQueryOptions, H as batchOperationsPlugin, I as sequentialId, J as AuditTrailOptions, K as AuditQueryResult, L as cascadePlugin, M as customIdPlugin, N as dateSequentialId, O as DateSequentialIdOptions, P as getNextSequence, Q as AggregateHelpersMethods, R as CacheMethods, T as ElasticSearchOptions, U as AuditEntry, V as BulkWriteResult, W as AuditOperation, X as auditTrailPlugin, Y as AuditTrailQuery, Z as auditLogPlugin, _ as observabilityPlugin, a as uniqueField, b as MongoOperationsMethods, c as TenantContext, d as SubdocumentMethods, f as subdocumentPlugin, g as OperationMetric, h as ObservabilityOptions, i as requireField, j as SequentialIdOptions, k as IdGenerator, l as TenantStore, m as softDeletePlugin, n as blockIf, o as validationChainPlugin, p as SoftDeleteMethods, q as AuditTrailMethods, r as immutableField, s as timestampPlugin, t as autoInject, u as createTenantContext, v as MultiTenantOptions, w as fieldFilterPlugin, x as mongoOperationsPlugin, y as multiTenantPlugin, z as cachePlugin } from "./validation-chain.plugin-CH-xPoKM.mjs";
 import { n as SchemaPathsLike, t as FieldType$1 } from "./coercion-oM8G4b6m.mjs";
 import { n as SchemaIndexes } from "./indexes-C26GNZRU.mjs";
-import { a as createFieldPreset, c as getMongooseProjection, d as parseDuplicateKeyError, i as configureLogger, l as createError, n as buildCrudSchemasFromMongooseSchema, o as filterResponseData, r as createMemoryCache, s as getFieldsForUser, t as buildCrudSchemasFromModel, u as isDuplicateKeyError } from "./mongooseToJsonSchema-DXxjFkLB.mjs";
+import { a as createFieldPreset, c as getMongooseProjection, d as parseDuplicateKeyError, i as configureLogger, l as createError, n as buildCrudSchemasFromMongooseSchema, o as filterResponseData, r as createMemoryCache, s as getFieldsForUser, t as buildCrudSchemasFromModel, u as isDuplicateKeyError } from "./mongooseToJsonSchema-rtkdbBhf.mjs";
 import * as _$mongoose from "mongoose";
 import { ClientSession, Expression, Model, PipelineStage, PopulateOptions } from "mongoose";
 import { AggPaginationRequest, AggRequest, AggResult, RepositoryBase } from "@classytic/repo-core/repository";
 import { UpdateInput as UpdateInput$1 } from "@classytic/repo-core/update";
-import { OffsetPaginationResultCore } from "@classytic/repo-core/pagination";
+import { AggregatePaginationResult, KeysetPaginationResult, OffsetPaginationResult, OffsetPaginationResultCore } from "@classytic/repo-core/pagination";
+import { HttpError } from "@classytic/repo-core/errors";
 
 //#region src/operations.d.ts
 /**
@@ -1210,12 +1211,16 @@ declare class Repository<TDoc = unknown> extends RepositoryBase {
    * Merge policy-hook-injected filters (multi-tenant scope,
    * soft-delete) into the pre-aggregate `filter` slot of the request.
    * Plugins speak mongo-query shape (`context.query` / `context.filters`);
-   * we merge those with the portable `req.filter` using `$and`.
+   * the caller's `req.filter` may be either Filter IR or a mongo query.
    *
-   * When the caller's filter is a Filter IR node we don't unwrap it —
-   * the pipeline compiler does Filter→mongo translation. Merging here
-   * as a mongo-shaped `$and` is safe because `compileFilterToMongo`
-   * passes through already-mongo queries unchanged.
+   * Each part is compiled through `compileFilterToMongo` BEFORE the
+   * `$and` merge — otherwise an IR node like `eq('status', 'paid')`
+   * (`{ op, field, value }`) gets nested inside `$and` as a literal,
+   * `compileFilterToMongo` of the merged value finds no top-level `op`
+   * (so `isFilter` is false), and Mongo receives the IR object as a
+   * raw query clause that matches no real document. Symptom: aggregates
+   * silently return 0 rows whenever a callerpasses IR + a policy
+   * plugin is installed.
    */
   private _injectPolicyScopeIntoAgg;
   /**
@@ -1472,4 +1477,4 @@ declare function isTransactionUnsupported(error: Error): boolean;
  */
 declare function createRepository<TDoc>(Model: _$mongoose.Model<TDoc, any, any, any>, plugins?: PluginType[], paginationConfig?: PaginationConfig, options?: RepositoryOptions): Repository<TDoc>;
 //#endregion
-export { ALL_OPERATIONS, type AggregateHelpersMethods, type AggregateOptions, type AggregatePaginationOptions, type AggregatePaginationResult, AggregationBuilder, type AllPluginMethods, type AnyDocument, type AnyModel, type AuditEntry, type AuditOperation, type AuditQueryOptions, type AuditQueryResult, type AuditTrailMethods, type AuditTrailOptions, AuditTrailQuery, type BatchOperationsMethods, type BulkWriteResult, type CacheAdapter, type CacheMethods, type CacheOperationOptions, type CacheOptions, type CacheStats, type CacheableOptions, type CascadeOptions, type CascadeRelation, type CollationOptions, type CreateInput, type CreateOptions, type CustomIdOptions, type DateSequentialIdOptions, type DecodedCursor, type DeepPartial, type DeleteResult, type DocField, type ElasticSearchOptions, type EventHandlers, type EventPayload, type EventPhase, type FieldPreset, type FieldType, type FilterQuery, type FindOneAndUpdateOptions, type GroupResult, HOOK_PRIORITY, type HookMode, type HttpError, type IController, type IControllerResponse, type IRequestContext, type IResponseFormatter, type IdGenerator, type InferDocument, type InferRawDoc, type KeysOfType, type KeysetPaginationOptions, type KeysetPaginationResult, type Logger, LookupBuilder, type LookupOptions, type LookupPopulateOptions, type LookupPopulateResult, MUTATING_OPERATIONS, type MinMaxResult, type MongoOperationsMethods, type MultiTenantOptions, type NonNullableFields, OP_REGISTRY, type ObjectId, type ObservabilityOptions, type OffsetPaginationOptions, type OffsetPaginationResult, type OperationDescriptor, type OperationMetric, type OperationOptions, type PaginationConfig, PaginationEngine, type PaginationResult, type ParsedQuery, type PartialBy, type Plugin, type PluginFunction, type PluginType, type PolicyKey, type PopulateOption, type PopulateSpec, type PrefixedIdOptions, QueryParser, type QueryParserOptions, READ_OPERATIONS, type ReadOptions, type ReadPreferenceType, Repository, Repository as default, type RepositoryContext, type RepositoryEvent, type RepositoryInstance, type RepositoryOperation, type RepositoryOptions, type RequiredBy, type SchemaLike, type SearchMode, type SelectSpec, type SequentialIdOptions, type SessionOptions, type SoftDeleteFilterMode, type SoftDeleteMethods, type SoftDeleteOptions, type SoftDeleteRepository, type SortDirection, type SortSpec, type Strict, type SubdocumentMethods, type TenantContext, type TenantStore, type UpdateInput, type UpdateManyResult, type UpdateOptions, type UpdatePatch, type UpdateWithValidationResult, type UserContext, type ValidationChainOptions, type ValidatorDefinition, type WithPlugins, type WithTransactionOptions, index_d_exports as actions, aggregateHelpersPlugin, auditLogPlugin, auditTrailPlugin, autoInject, batchOperationsPlugin, blockIf, buildCrudSchemasFromModel, buildCrudSchemasFromMongooseSchema, cachePlugin, cascadePlugin, configureLogger, createError, createFieldPreset, createMemoryCache, createRepository, createTenantContext, customIdPlugin, dateSequentialId, elasticSearchPlugin, fieldFilterPlugin, filterResponseData, getFieldsForUser, getMongooseProjection, getNextSequence, immutableField, isDuplicateKeyError, isTransactionUnsupported, methodRegistryPlugin, mongoOperationsPlugin, multiTenantPlugin, observabilityPlugin, operationsByPolicyKey, parseDuplicateKeyError, prefixedId, requireField, sequentialId, softDeletePlugin, subdocumentPlugin, timestampPlugin, uniqueField, validationChainPlugin, withTransaction };
+export { ALL_OPERATIONS, type AggregateHelpersMethods, type AggregateOptions, type AggregatePaginationOptions, AggregationBuilder, type AllPluginMethods, type AnyDocument, type AnyModel, type AuditEntry, type AuditOperation, type AuditQueryOptions, type AuditQueryResult, type AuditTrailMethods, type AuditTrailOptions, AuditTrailQuery, type BasePaginationOptions, type BatchOperationsMethods, type BulkWriteResult, type CacheAdapter, type CacheMethods, type CacheOperationOptions, type CacheOptions, type CacheStats, type CacheableOptions, type CascadeOptions, type CascadeRelation, type CollationOptions, type CreateInput, type CreateOptions, type CursorPayload, type CustomIdOptions, type DateSequentialIdOptions, type DecodedCursor, type DeepPartial, type DeleteResult, type DocField, type ElasticSearchOptions, type EventHandlers, type EventPayload, type EventPhase, type FieldPreset, type FieldType, type FilterQuery, type FindOneAndUpdateOptions, type GroupResult, HOOK_PRIORITY, type HookMode, type IController, type IControllerResponse, type IRequestContext, type IResponseFormatter, type IdGenerator, type InferDocument, type InferRawDoc, type KeysOfType, type KeysetPaginationOptions, type Logger, LookupBuilder, type LookupOptions, type LookupPopulateOptions, type LookupPopulateResult, MUTATING_OPERATIONS, type MinMaxResult, type MongoOperationsMethods, type MultiTenantOptions, type NonNullableFields, OP_REGISTRY, type ObjectId, type ObservabilityOptions, type OffsetPaginationOptions, type OperationDescriptor, type OperationMetric, type OperationOptions, type PaginationConfig, PaginationEngine, type ParsedQuery, type PartialBy, type Plugin, type PluginFunction, type PluginType, type PolicyKey, type PopulateOption, type PopulateSpec, type PrefixedIdOptions, type PrioritizedHook, QueryParser, type QueryParserOptions, READ_OPERATIONS, type ReadOptions, type ReadPreferenceType, Repository, Repository as default, type RepositoryContext, type RepositoryEvent, type RepositoryInstance, type RepositoryOperation, type RepositoryOptions, type RequiredBy, type SchemaLike, type SearchMode, type SelectSpec, type SequentialIdOptions, type SessionOptions, type SoftDeleteFilterMode, type SoftDeleteMethods, type SoftDeleteOptions, type SoftDeleteRepository, type SortDirection, type SortSpec, type Strict, type SubdocumentMethods, type TenantContext, type TenantStore, type UpdateInput, type UpdateManyResult, type UpdateOptions, type UpdatePatch, type UpdateWithValidationResult, type UserContext, type ValidationChainOptions, type ValidatorDefinition, type ValueType, type WithPlugins, type WithTransactionOptions, index_d_exports as actions, aggregateHelpersPlugin, auditLogPlugin, auditTrailPlugin, autoInject, batchOperationsPlugin, blockIf, buildCrudSchemasFromModel, buildCrudSchemasFromMongooseSchema, cachePlugin, cascadePlugin, configureLogger, createError, createFieldPreset, createMemoryCache, createRepository, createTenantContext, customIdPlugin, dateSequentialId, elasticSearchPlugin, fieldFilterPlugin, filterResponseData, getFieldsForUser, getMongooseProjection, getNextSequence, immutableField, isDuplicateKeyError, isTransactionUnsupported, methodRegistryPlugin, mongoOperationsPlugin, multiTenantPlugin, observabilityPlugin, operationsByPolicyKey, parseDuplicateKeyError, prefixedId, requireField, sequentialId, softDeletePlugin, subdocumentPlugin, timestampPlugin, uniqueField, validationChainPlugin, withTransaction };

package/dist/index.mjs

@@ -1,14 +1,14 @@
-import { r as warn, t as configureLogger } from "./logger-DJ7egMnd.mjs";
-import { b as LookupBuilder } from "./update-DEJYcgfV.mjs";
+import { b as LookupBuilder } from "./update-CDxPtpsk.mjs";
+import { r as warn, t as configureLogger } from "./logger-8-VS1za6.mjs";
 import { n as isDuplicateKeyError, r as parseDuplicateKeyError, t as createError } from "./error-B00pI7dV.mjs";
 import { t as actions_exports } from "./actions/index.mjs";
-import { A as AuditTrailQuery, C as cachePlugin, D as withTransaction, E as isTransactionUnsupported, F as MUTATING_OPERATIONS, I as OP_REGISTRY, L as READ_OPERATIONS, M as auditLogPlugin, N as aggregateHelpersPlugin, O as AggregationBuilder, P as ALL_OPERATIONS, R as operationsByPolicyKey, S as cascadePlugin, T as Repository, _ as customIdPlugin, a as uniqueField, b as prefixedId, c as createTenantContext, d as observabilityPlugin, f as multiTenantPlugin, g as elasticSearchPlugin, h as fieldFilterPlugin, i as requireField, j as auditTrailPlugin, k as batchOperationsPlugin, l as subdocumentPlugin, m as methodRegistryPlugin, n as blockIf, o as validationChainPlugin, p as mongoOperationsPlugin, r as immutableField, s as timestampPlugin, t as autoInject, u as softDeletePlugin, v as dateSequentialId, w as HOOK_PRIORITY, x as sequentialId, y as getNextSequence } from "./validation-chain.plugin-Dllv-cml.mjs";
-import { t as PaginationEngine } from "./PaginationEngine-CvDFfVXT.mjs";
+import { A as AuditTrailQuery, C as cachePlugin, D as withTransaction, E as isTransactionUnsupported, F as MUTATING_OPERATIONS, I as OP_REGISTRY, L as READ_OPERATIONS, M as auditLogPlugin, N as aggregateHelpersPlugin, O as AggregationBuilder, P as ALL_OPERATIONS, R as operationsByPolicyKey, S as cascadePlugin, T as Repository, _ as customIdPlugin, a as uniqueField, b as prefixedId, c as createTenantContext, d as observabilityPlugin, f as multiTenantPlugin, g as elasticSearchPlugin, h as fieldFilterPlugin, i as requireField, j as auditTrailPlugin, k as batchOperationsPlugin, l as subdocumentPlugin, m as methodRegistryPlugin, n as blockIf, o as validationChainPlugin, p as mongoOperationsPlugin, r as immutableField, s as timestampPlugin, t as autoInject, u as softDeletePlugin, v as dateSequentialId, w as HOOK_PRIORITY, x as sequentialId, y as getNextSequence } from "./validation-chain.plugin-BicIgzzt.mjs";
+import { t as PaginationEngine } from "./PaginationEngine-BDaAsyPn.mjs";
 import { isGeoOperator, parseGeoFilter } from "./query/primitives/geo.mjs";
 import { i as getMongooseProjection, n as filterResponseData, r as getFieldsForUser, t as createFieldPreset } from "./field-selection-dI0m4RBs.mjs";
 import { buildFieldTypeMap, coerceFieldValue, coerceHeuristic } from "./query/primitives/coercion.mjs";
 import { extractSchemaIndexes } from "./query/primitives/indexes.mjs";
-import { n as buildCrudSchemasFromMongooseSchema, r as createMemoryCache, t as buildCrudSchemasFromModel } from "./mongooseToJsonSchema-D1sdCOmj.mjs";
+import { n as buildCrudSchemasFromMongooseSchema, r as createMemoryCache, t as buildCrudSchemasFromModel } from "./mongooseToJsonSchema-B187ufOP.mjs";
 //#region src/query/QueryParser.ts
 /**
 * Top-level query parameters that mongokit handles outside the filter

package/dist/{mongooseToJsonSchema-D1sdCOmj.mjs → mongooseToJsonSchema-B187ufOP.mjs}

@@ -110,9 +110,11 @@ function isObjectIdType(t) {
 */
 function buildCrudSchemasFromMongooseSchema(mongooseSchema, options = {}) {
 	const jsonCreate = buildJsonSchemaFromPaths(mongooseSchema, options);
+	const jsonUpdate = buildJsonSchemaForUpdate(jsonCreate, options);
+	const jsonResponse = buildJsonSchemaForResponse(mongooseSchema, options);
 	return {
 		createBody: jsonCreate,
-		updateBody: buildJsonSchemaForUpdate(jsonCreate, options),
+		updateBody: jsonUpdate,
 		params: {
 			type: "object",
 			properties: { id: {
@@ -121,11 +123,18 @@ function buildCrudSchemasFromMongooseSchema(mongooseSchema, options = {}) {
 			} },
 			required: ["id"]
 		},
-		listQuery: buildJsonSchemaForQuery(mongooseSchema?.obj || {}, options)
+		listQuery: buildJsonSchemaForQuery(mongooseSchema?.obj || {}, options),
+		response: jsonResponse
 	};
 }
 /**
-* Build CRUD schemas from Mongoose model
+* Build CRUD schemas from Mongoose model.
+*
+* Satisfies the canonical `SchemaGenerator<Model<unknown>>` contract from
+* `@classytic/repo-core/schema`, so arc's `MongooseAdapter.schemaGenerator`
+* field accepts this function directly with no glue. Future Mongo-shaped
+* kits implementing the same contract are interchangeable at the adapter
+* boundary.
 */
 function buildCrudSchemasFromModel(mongooseModel, options = {}) {
 	if (!mongooseModel?.schema) throw new Error("Invalid mongoose model");
@@ -249,10 +258,7 @@ function introspectArrayItems(schemaType, options = {}) {
 	const declaredType = schemaType?.options?.type;
 	if (Array.isArray(declaredType) && declaredType.length > 0) {
 		const inner = declaredType[0];
-		if (inner === mongoose.Schema.Types.Mixed) return {
-			type: "object",
-			additionalProperties: true
-		};
+		if (inner === mongoose.Schema.Types.Mixed) return { additionalProperties: true };
 		return jsonTypeFor(inner, options, /* @__PURE__ */ new WeakSet());
 	}
 	return {
@@ -328,6 +334,7 @@ function schemaTypeToJsonSchema(schemaType, builderOptions = {}) {
 		if (ofDef !== void 0 && ofDef !== null) result.additionalProperties = jsonTypeFor(ofDef, {}, /* @__PURE__ */ new WeakSet());
 		else result.additionalProperties = true;
 	} else if (hasInnerSchema(schemaType)) return subSchemaToJsonSchema(schemaType.schema, builderOptions);
+	else if (instance === "Mixed") result.additionalProperties = true;
 	else {
 		result.type = "object";
 		result.additionalProperties = true;
@@ -335,6 +342,7 @@ function schemaTypeToJsonSchema(schemaType, builderOptions = {}) {
 	if (options.default === null && typeof result.type === "string") {
 		result.type = [result.type, "null"];
 		result.default = null;
+		if (Array.isArray(result.enum) && !result.enum.includes(null)) result.enum = [...result.enum, null];
 	}
 	if (typeof options.description === "string" && options.description.length > 0) result.description = options.description;
 	if (typeof options.title === "string" && options.title.length > 0) result.title = options.title;
@@ -348,10 +356,7 @@ function jsonTypeFor(def, options, seen) {
 	if (Array.isArray(def)) {
 		if (def[0] === mongoose.Schema.Types.Mixed) return {
 			type: "array",
-			items: {
-				type: "object",
-				additionalProperties: true
-			}
+			items: { additionalProperties: true }
 		};
 		return {
 			type: "array",
@@ -368,10 +373,7 @@ function jsonTypeFor(def, options, seen) {
 			const inner = typedDef.type[0] !== void 0 ? typedDef.type[0] : String;
 			if (inner === mongoose.Schema.Types.Mixed) return {
 				type: "array",
-				items: {
-					type: "object",
-					additionalProperties: true
-				}
+				items: { additionalProperties: true }
 			};
 			return {
 				type: "array",
@@ -407,10 +409,7 @@ function jsonTypeFor(def, options, seen) {
 			type: "object",
 			additionalProperties: jsonTypeFor(typedDef.of || String, options, seen)
 		};
-		if (typedDef.type === mongoose.Schema.Types.Mixed) return {
-			type: "object",
-			additionalProperties: true
-		};
+		if (typedDef.type === mongoose.Schema.Types.Mixed) return { additionalProperties: true };
 		if (typedDef.type === Object) {
 			if (isPlainObject(typedDef) && Object.keys(typedDef).some((k) => k !== "type")) {
 				const nested = {};
@@ -514,6 +513,55 @@ function buildJsonSchemaForUpdate(createJson, options) {
 	if (options?.update?.requireAtLeastOne === true) clone.minProperties = 1;
 	return clone;
 }
+/**
+* Build the response-shape JSON Schema.
+*
+* Walks every schema path INCLUDING server-set fields (`createdAt`,
+* `updatedAt`, `_id`, immutable / readonly fields) because those ARE
+* returned to clients. Only `fieldRules[field].hidden: true` fields are
+* stripped — passwords, secrets, internal scoring.
+*
+* `additionalProperties: true` so virtuals, computed fields, and any
+* non-schema-declared keys flow through. Strict response validation is
+* opt-in via `options.strictAdditionalProperties` (rare; most hosts want
+* lean responses but don't want to break virtuals).
+*
+* No `required` array — response schemas are *documentation* of what
+* MAY be returned. Marking fields required would force every endpoint
+* that occasionally returns sparse data (lookup-by-id with selected
+* fields, partial projections) to fail validation.
+*/
+function buildJsonSchemaForResponse(mongooseSchema, options) {
+	const fullSchema = buildJsonSchemaFromPaths(mongooseSchema, options);
+	const responseSchema = buildJsonSchemaFromPaths(mongooseSchema, {
+		...options,
+		fieldRules: stripCreateOnlyFieldRulesForResponse(options.fieldRules),
+		create: void 0
+	});
+	applyFieldRules(responseSchema, collectFieldsToOmit(options, "response"), options);
+	responseSchema.required = void 0;
+	if (options?.strictAdditionalProperties !== true) responseSchema.additionalProperties = true;
+	if (fullSchema.title && !responseSchema.title) responseSchema.title = fullSchema.title;
+	return responseSchema;
+}
+/**
+* Strip request-side-only field-rule flags (`systemManaged`, `immutable`,
+* `immutableAfterCreate`, `optional`) from a fieldRules map so the
+* response builder doesn't accidentally hide server-set fields.
+*
+* Keeps `hidden` (response-relevant), `nullable`, `description`,
+* constraint flags (`minLength`/`maxLength`/`min`/`max`/`pattern`/`enum`)
+* — they all describe response shape, not request acceptance.
+*/
+function stripCreateOnlyFieldRulesForResponse(rules) {
+	if (!rules) return rules;
+	const result = {};
+	for (const [field, rule] of Object.entries(rules)) {
+		const { systemManaged: _sm, immutable: _i, immutableAfterCreate: _iac, optional: _o, ...rest } = rule;
+		result[field] = rest;
+	}
+	return result;
+}
 function buildJsonSchemaForQuery(_tree, options) {
 	const basePagination = {
 		type: "object",

package/dist/{mongooseToJsonSchema-DXxjFkLB.d.mts → mongooseToJsonSchema-rtkdbBhf.d.mts}

@@ -1,6 +1,7 @@
-import { T as FieldPreset, k as HttpError, s as CacheAdapter, yt as UserContext } from "./types-Dc2aDVUi.mjs";
+import { E as FieldPreset, gt as UserContext, s as CacheAdapter } from "./types-DXscZnLu.mjs";
 import mongoose, { Schema } from "mongoose";
 import { CrudSchemas, SchemaBuilderOptions } from "@classytic/repo-core/schema";
+import { HttpError } from "@classytic/repo-core/errors";
 
 //#region src/utils/error.d.ts
 /** Optional structured fields for createError. */
@@ -205,7 +206,13 @@ type CrudSchemasFramework = CrudSchemas & Record<string, unknown>;
  */
 declare function buildCrudSchemasFromMongooseSchema(mongooseSchema: Schema, options?: SchemaBuilderOptions): CrudSchemasFramework;
 /**
- * Build CRUD schemas from Mongoose model
+ * Build CRUD schemas from Mongoose model.
+ *
+ * Satisfies the canonical `SchemaGenerator<Model<unknown>>` contract from
+ * `@classytic/repo-core/schema`, so arc's `MongooseAdapter.schemaGenerator`
+ * field accepts this function directly with no glue. Future Mongo-shaped
+ * kits implementing the same contract are interchangeable at the adapter
+ * boundary.
  */
 declare function buildCrudSchemasFromModel(mongooseModel: mongoose.Model<unknown>, options?: SchemaBuilderOptions): CrudSchemasFramework;
 //#endregion

package/dist/pagination/PaginationEngine.d.mts

@@ -1,5 +1,6 @@
-import { H as OffsetPaginationResult, N as KeysetPaginationOptions, P as KeysetPaginationResult, V as OffsetPaginationOptions, W as PaginationConfig, a as AnyDocument, n as AggregatePaginationOptions, r as AggregatePaginationResult } from "../types-Dc2aDVUi.mjs";
+import { B as OffsetPaginationOptions, H as PaginationConfig, N as KeysetPaginationOptions, i as AnyDocument, n as AggregatePaginationOptions } from "../types-DXscZnLu.mjs";
 import { Model } from "mongoose";
+import { AggregatePaginationResult, KeysetPaginationResult, OffsetPaginationResult } from "@classytic/repo-core/pagination";
 
 //#region src/pagination/PaginationEngine.d.ts
 /**

package/dist/pagination/PaginationEngine.mjs

@@ -1,2 +1,2 @@
-import { t as PaginationEngine } from "../PaginationEngine-CvDFfVXT.mjs";
+import { t as PaginationEngine } from "../PaginationEngine-BDaAsyPn.mjs";
 export { PaginationEngine };

package/dist/plugins/index.d.mts

@@ -1,2 +1,2 @@
-import { $ as aggregateHelpersPlugin, A as PrefixedIdOptions, B as BatchOperationsMethods, C as methodRegistryPlugin, D as CustomIdOptions, E as elasticSearchPlugin, F as prefixedId, G as AuditQueryOptions, H as batchOperationsPlugin, I as sequentialId, J as AuditTrailOptions, K as AuditQueryResult, L as cascadePlugin, M as customIdPlugin, N as dateSequentialId, O as DateSequentialIdOptions, P as getNextSequence, Q as AggregateHelpersMethods, R as CacheMethods, S as MethodRegistryRepository, T as ElasticSearchOptions, U as AuditEntry, W as AuditOperation, X as auditTrailPlugin, Y as AuditTrailQuery, Z as auditLogPlugin, _ as observabilityPlugin, a as uniqueField, b as MongoOperationsMethods, c as TenantContext, d as SubdocumentMethods, f as subdocumentPlugin, g as OperationMetric, h as ObservabilityOptions, i as requireField, j as SequentialIdOptions, k as IdGenerator, l as TenantStore, m as softDeletePlugin, n as blockIf, o as validationChainPlugin, p as SoftDeleteMethods, q as AuditTrailMethods, r as immutableField, s as timestampPlugin, t as autoInject, u as createTenantContext, v as MultiTenantOptions, w as fieldFilterPlugin, x as mongoOperationsPlugin, y as multiTenantPlugin, z as cachePlugin } from "../validation-chain.plugin-B0VSdcwa.mjs";
+import { $ as aggregateHelpersPlugin, A as PrefixedIdOptions, B as BatchOperationsMethods, C as methodRegistryPlugin, D as CustomIdOptions, E as elasticSearchPlugin, F as prefixedId, G as AuditQueryOptions, H as batchOperationsPlugin, I as sequentialId, J as AuditTrailOptions, K as AuditQueryResult, L as cascadePlugin, M as customIdPlugin, N as dateSequentialId, O as DateSequentialIdOptions, P as getNextSequence, Q as AggregateHelpersMethods, R as CacheMethods, S as MethodRegistryRepository, T as ElasticSearchOptions, U as AuditEntry, W as AuditOperation, X as auditTrailPlugin, Y as AuditTrailQuery, Z as auditLogPlugin, _ as observabilityPlugin, a as uniqueField, b as MongoOperationsMethods, c as TenantContext, d as SubdocumentMethods, f as subdocumentPlugin, g as OperationMetric, h as ObservabilityOptions, i as requireField, j as SequentialIdOptions, k as IdGenerator, l as TenantStore, m as softDeletePlugin, n as blockIf, o as validationChainPlugin, p as SoftDeleteMethods, q as AuditTrailMethods, r as immutableField, s as timestampPlugin, t as autoInject, u as createTenantContext, v as MultiTenantOptions, w as fieldFilterPlugin, x as mongoOperationsPlugin, y as multiTenantPlugin, z as cachePlugin } from "../validation-chain.plugin-CH-xPoKM.mjs";
 export { type AggregateHelpersMethods, type AuditEntry, type AuditOperation, type AuditQueryOptions, type AuditQueryResult, type AuditTrailMethods, type AuditTrailOptions, AuditTrailQuery, type BatchOperationsMethods, type CacheMethods, type CustomIdOptions, type DateSequentialIdOptions, type ElasticSearchOptions, type IdGenerator, type MethodRegistryRepository, type MongoOperationsMethods, type MultiTenantOptions, type ObservabilityOptions, type OperationMetric, type PrefixedIdOptions, type SequentialIdOptions, type SoftDeleteMethods, type SubdocumentMethods, type TenantContext, type TenantStore, aggregateHelpersPlugin, auditLogPlugin, auditTrailPlugin, autoInject, batchOperationsPlugin, blockIf, cachePlugin, cascadePlugin, createTenantContext, customIdPlugin, dateSequentialId, elasticSearchPlugin, fieldFilterPlugin, getNextSequence, immutableField, methodRegistryPlugin, mongoOperationsPlugin, multiTenantPlugin, observabilityPlugin, prefixedId, requireField, sequentialId, softDeletePlugin, subdocumentPlugin, timestampPlugin, uniqueField, validationChainPlugin };

package/dist/plugins/index.mjs

@@ -1,2 +1,2 @@
-import { A as AuditTrailQuery, C as cachePlugin, M as auditLogPlugin, N as aggregateHelpersPlugin, S as cascadePlugin, _ as customIdPlugin, a as uniqueField, b as prefixedId, c as createTenantContext, d as observabilityPlugin, f as multiTenantPlugin, g as elasticSearchPlugin, h as fieldFilterPlugin, i as requireField, j as auditTrailPlugin, k as batchOperationsPlugin, l as subdocumentPlugin, m as methodRegistryPlugin, n as blockIf, o as validationChainPlugin, p as mongoOperationsPlugin, r as immutableField, s as timestampPlugin, t as autoInject, u as softDeletePlugin, v as dateSequentialId, x as sequentialId, y as getNextSequence } from "../validation-chain.plugin-Dllv-cml.mjs";
+import { A as AuditTrailQuery, C as cachePlugin, M as auditLogPlugin, N as aggregateHelpersPlugin, S as cascadePlugin, _ as customIdPlugin, a as uniqueField, b as prefixedId, c as createTenantContext, d as observabilityPlugin, f as multiTenantPlugin, g as elasticSearchPlugin, h as fieldFilterPlugin, i as requireField, j as auditTrailPlugin, k as batchOperationsPlugin, l as subdocumentPlugin, m as methodRegistryPlugin, n as blockIf, o as validationChainPlugin, p as mongoOperationsPlugin, r as immutableField, s as timestampPlugin, t as autoInject, u as softDeletePlugin, v as dateSequentialId, x as sequentialId, y as getNextSequence } from "../validation-chain.plugin-BicIgzzt.mjs";
 export { AuditTrailQuery, aggregateHelpersPlugin, auditLogPlugin, auditTrailPlugin, autoInject, batchOperationsPlugin, blockIf, cachePlugin, cascadePlugin, createTenantContext, customIdPlugin, dateSequentialId, elasticSearchPlugin, fieldFilterPlugin, getNextSequence, immutableField, methodRegistryPlugin, mongoOperationsPlugin, multiTenantPlugin, observabilityPlugin, prefixedId, requireField, sequentialId, softDeletePlugin, subdocumentPlugin, timestampPlugin, uniqueField, validationChainPlugin };

package/dist/{types-Dc2aDVUi.d.mts → types-DXscZnLu.d.mts}

@@ -1,9 +1,12 @@
+import * as _$_classytic_repo_core_filter0 from "@classytic/repo-core/filter";
+import { Filter } from "@classytic/repo-core/filter";
 import * as _$mongoose from "mongoose";
 import { Document, Model, PipelineStage, PopulateOptions, Types } from "mongoose";
-import * as _$_classytic_repo_core_filter0 from "@classytic/repo-core/filter";
 import * as _$_classytic_repo_core_repository0 from "@classytic/repo-core/repository";
 import { DeleteManyResult, DeleteResult, LookupPopulateResult, UpdateManyResult } from "@classytic/repo-core/repository";
 import { ValidationResult } from "@classytic/repo-core/schema";
+import { AnyPaginationResult, OffsetPaginationResult } from "@classytic/repo-core/pagination";
+import { HttpError } from "@classytic/repo-core/errors";
 
 //#region src/query/LookupBuilder.d.ts
 interface LookupOptions {
@@ -17,8 +20,15 @@ interface LookupOptions {
   as?: string;
   /** Whether to unwrap array to single object */
   single?: boolean;
-  /** Field selection on the joined collection (shorthand for $project pipeline) */
-  select?: string | Record<string, 0 | 1>;
+  /**
+   * Field selection on the joined collection (shorthand for `$project`).
+   * Three accepted shapes — all map to a single `$project` stage:
+   *   - `string` — CSV form (`'name,price'`); leading `-` marks an exclusion.
+   *   - `readonly string[]` — array form (`['name', 'price']` / `['-status']`);
+   *     mirrors `repo-core/lookup` `LookupSpec.select` for cross-kit parity.
+   *   - `Record<string, 0 | 1>` — explicit Mongo projection map.
+   */
+  select?: string | readonly string[] | Record<string, 0 | 1>;
   /** Additional pipeline to run on the joined collection */
   pipeline?: PipelineStage[];
   /** Optional let variables for pipeline */
@@ -31,6 +41,18 @@ interface LookupOptions {
   };
   /** Sanitize pipeline stages (default: true). Set false only for trusted server-side pipelines */
   sanitize?: boolean;
+  /**
+   * Joined-side filter, compiled into a `$match` stage inside the lookup
+   * pipeline AFTER the auto-generated join correlation. Mirrors
+   * `repo-core/lookup/types.ts#LookupSpec.where` and sqlitekit's
+   * predicate-on-the-JOIN behavior, so cross-kit code that narrows the
+   * foreign side (`where: eq('status', 'active')`) gets identical rows
+   * from both backends.
+   *
+   * Accepts Filter IR or a plain mongo query — `compileFilterToMongo`
+   * routes each correctly.
+   */
+  where?: Filter | Record<string, unknown>;
 }
 /**
  * Fluent builder for MongoDB $lookup aggregation stage
@@ -307,7 +329,7 @@ interface IController<TDoc> {
    * }
    * ```
    */
-  list(context: IRequestContext): Promise<IControllerResponse<PaginationResult<TDoc>>>;
+  list(context: IRequestContext): Promise<IControllerResponse<AnyPaginationResult<TDoc>>>;
   /**
    * Get single resource by ID
    *
@@ -457,7 +479,7 @@ interface IResponseFormatter {
    * Format paginated response
    * @param result - Pagination result from Repository.getAll()
    */
-  paginated<T>(result: PaginationResult<T>): IControllerResponse<PaginationResult<T>>;
+  paginated<T>(result: AnyPaginationResult<T>): IControllerResponse<AnyPaginationResult<T>>;
 }
 //#endregion
 //#region src/types.d.ts
@@ -732,63 +754,6 @@ interface AggregatePaginationOptions {
   /** Read preference for replica sets (e.g. 'secondaryPreferred') */
   readPreference?: ReadPreferenceType;
 }
-/** Offset pagination result */
-interface OffsetPaginationResult<T = unknown> {
-  /** Pagination method used */
-  method: 'offset';
-  /** Array of documents */
-  docs: T[];
-  /** Current page number */
-  page: number;
-  /** Documents per page */
-  limit: number;
-  /** Total document count */
-  total: number;
-  /** Total page count */
-  pages: number;
-  /** Whether next page exists */
-  hasNext: boolean;
-  /** Whether previous page exists */
-  hasPrev: boolean;
-  /** Performance warning for deep pagination */
-  warning?: string;
-}
-/** Keyset pagination result */
-interface KeysetPaginationResult<T = unknown> {
-  /** Pagination method used */
-  method: 'keyset';
-  /** Array of documents */
-  docs: T[];
-  /** Documents per page */
-  limit: number;
-  /** Whether more documents exist */
-  hasMore: boolean;
-  /** Cursor token for next page */
-  next: string | null;
-}
-/** Aggregate pagination result */
-interface AggregatePaginationResult<T = unknown> {
-  /** Pagination method used */
-  method: 'aggregate';
-  /** Array of documents */
-  docs: T[];
-  /** Current page number */
-  page: number;
-  /** Documents per page */
-  limit: number;
-  /** Total document count */
-  total: number;
-  /** Total page count */
-  pages: number;
-  /** Whether next page exists */
-  hasNext: boolean;
-  /** Whether previous page exists */
-  hasPrev: boolean;
-  /** Performance warning for deep pagination */
-  warning?: string;
-}
-/** Union type for all pagination results */
-type PaginationResult<T = unknown> = OffsetPaginationResult<T> | KeysetPaginationResult<T> | AggregatePaginationResult<T>;
 /** Session-only options — shared base for lightweight operations */
 interface SessionOptions {
   /** MongoDB session for transactions */
@@ -1136,6 +1101,27 @@ interface FieldPreset {
   /** Additional fields for admins */
   admin?: string[];
 }
+/** Value type identifier for cursor serialization */
+type ValueType = 'date' | 'objectid' | 'boolean' | 'number' | 'string' | 'null' | 'unknown';
+/** Cursor payload */
+interface CursorPayload {
+  /** Primary sort field value (legacy single-field) */
+  v: string | number | boolean | null;
+  /** Value type identifier (legacy single-field) */
+  t: ValueType;
+  /** Document ID */
+  id: string;
+  /** ID type identifier */
+  idType: ValueType;
+  /** Sort specification */
+  sort: SortSpec;
+  /** Cursor version */
+  ver: number;
+  /** Compound sort field values (multi-field keyset) */
+  vals?: Record<string, string | number | boolean | null>;
+  /** Compound sort value types */
+  types?: Record<string, ValueType>;
+}
 /** Decoded cursor */
 interface DecodedCursor {
   /** Primary sort field value (rehydrated) — legacy compat */
@@ -1349,37 +1335,6 @@ interface CascadeOptions {
   /** Logger for cascade operations */
   logger?: Logger;
 }
-/** HTTP Error with status code */
-interface HttpError extends Error {
-  status: number;
-  /**
-   * Stable machine-readable error code. Hosts can switch on this in catch
-   * blocks instead of grepping the message string. Currently emitted for:
-   * - `SEARCH_NOT_CONFIGURED` — search requested on a repo with no text
-   *   index AND no `searchMode: 'regex' | 'auto'` + `searchFields` config.
-   */
-  code?: string;
-  /**
-   * Free-form structured metadata for diagnostics. Pairs with `code` so
-   * hosts can render a clearer message in their own UI without parsing
-   * the human-readable `message` string. Safe for logs.
-   */
-  meta?: Record<string, unknown>;
-  validationErrors?: Array<{
-    validator: string;
-    error: string;
-  }>;
-  /**
-   * Structured metadata for duplicate-key (E11000) errors. Safe to surface in
-   * logs/audit. Includes the offending field names and a boolean-only mirror
-   * of whether each field had a duplicate value — never the value itself
-   * unless `parseDuplicateKeyError` was called with `{ exposeValues: true }`.
-   */
-  duplicate?: {
-    fields: string[]; /** Only populated when parseDuplicateKeyError was called with exposeValues:true. */
-    values?: Record<string, unknown>;
-  };
-}
 /**
  * Combines all plugin method types into a single type
  * Useful when you're using all plugins and want full type safety
@@ -1510,4 +1465,4 @@ type AllPluginMethods<TDoc> = {
  */
 type WithPlugins<TDoc, TRepo extends RepositoryInstance = RepositoryInstance> = TRepo & AllPluginMethods<TDoc>;
 //#endregion
-export { ReadPreferenceType as $, InferDocument as A, ObjectId as B, EventPayload as C, WithTransactionOptions as Ct, GroupResult as D, IResponseFormatter as Dt, FindOneAndUpdateOptions as E, IRequestContext as Et, Logger as F, PaginationResult as G, OffsetPaginationResult as H, LookupPopulateOptions as I, PluginFunction as J, PartialBy as K, LookupPopulateResult as L, KeysOfType as M, KeysetPaginationOptions as N, HookMode as O, LookupBuilder as Ot, KeysetPaginationResult as P, ReadOptions as Q, MinMaxResult as R, EventHandlers as S, WithPlugins as St, FieldPreset as T, IControllerResponse as Tt, OperationOptions as U, OffsetPaginationOptions as V, PaginationConfig as W, PopulateSpec as X, PluginType as Y, PrioritizedHook as Z, DecodedCursor as _, UpdatePatch as _t, AnyDocument as a, RequiredBy as at, DeleteResult as b, ValidationChainOptions as bt, CacheOperationOptions as c, SoftDeleteFilterMode as ct, CacheableOptions as d, SortDirection as dt, RepositoryContext as et, CascadeOptions as f, SortSpec as ft, CreateOptions as g, UpdateOptions as gt, CreateInput as h, UpdateManyResult as ht, AllPluginMethods as i, RepositoryOptions as it, InferRawDoc as j, HttpError as k, LookupOptions as kt, CacheOptions as l, SoftDeleteOptions as lt, CollationOptions as m, UpdateInput as mt, AggregatePaginationOptions as n, RepositoryInstance as nt, AnyModel as o, SelectSpec as ot, CascadeRelation as p, Strict as pt, Plugin as q, AggregatePaginationResult as r, RepositoryOperation as rt, CacheAdapter as s, SessionOptions as st, AggregateOptions as t, RepositoryEvent as tt, CacheStats as u, SoftDeleteRepository as ut, DeepPartial as v, UpdateWithValidationResult as vt, EventPhase as w, IController as wt, DocField as x, ValidatorDefinition as xt, DeleteManyResult as y, UserContext as yt, NonNullableFields as z };
+export { RepositoryInstance as $, InferDocument as A, OffsetPaginationOptions as B, EventHandlers as C, IControllerResponse as Ct, FindOneAndUpdateOptions as D, LookupOptions as Dt, FieldPreset as E, LookupBuilder as Et, LookupPopulateOptions as F, PluginFunction as G, PaginationConfig as H, LookupPopulateResult as I, PrioritizedHook as J, PluginType as K, MinMaxResult as L, KeysOfType as M, KeysetPaginationOptions as N, GroupResult as O, Logger as P, RepositoryEvent as Q, NonNullableFields as R, DocField as S, IController as St, EventPhase as T, IResponseFormatter as Tt, PartialBy as U, OperationOptions as V, Plugin as W, ReadPreferenceType as X, ReadOptions as Y, RepositoryContext as Z, CursorPayload as _, ValidationChainOptions as _t, AnyModel as a, SoftDeleteFilterMode as at, DeleteManyResult as b, WithPlugins as bt, CacheOperationOptions as c, SortDirection as ct, CacheableOptions as d, UpdateInput as dt, RepositoryOperation as et, CascadeOptions as f, UpdateManyResult as ft, CreateOptions as g, UserContext as gt, CreateInput as h, UpdateWithValidationResult as ht, AnyDocument as i, SessionOptions as it, InferRawDoc as j, HookMode as k, CacheOptions as l, SortSpec as lt, CollationOptions as m, UpdatePatch as mt, AggregatePaginationOptions as n, RequiredBy as nt, BasePaginationOptions as o, SoftDeleteOptions as ot, CascadeRelation as p, UpdateOptions as pt, PopulateSpec as q, AllPluginMethods as r, SelectSpec as rt, CacheAdapter as s, SoftDeleteRepository as st, AggregateOptions as t, RepositoryOptions as tt, CacheStats as u, Strict as ut, DecodedCursor as v, ValidatorDefinition as vt, EventPayload as w, IRequestContext as wt, DeleteResult as x, WithTransactionOptions as xt, DeepPartial as y, ValueType as yt, ObjectId as z };

package/dist/{update-DEJYcgfV.mjs → update-CDxPtpsk.mjs}

@@ -1,6 +1,103 @@
 import { t as __exportAll } from "./chunk-CfYAbeIz.mjs";
-import { r as warn } from "./logger-DJ7egMnd.mjs";
+import { r as warn } from "./logger-8-VS1za6.mjs";
 import { t as createError } from "./error-B00pI7dV.mjs";
+import { isFilter } from "@classytic/repo-core/filter";
+//#region src/filter/compile.ts
+/**
+* Compile a Filter IR node to a MongoDB query object. Returns `{}`
+* when the node is `TRUE` (or an empty `and`) so callers can merge
+* with other scopes without special-casing.
+*
+* The `input` is typed as `unknown` so callers can pass either a
+* Filter IR node or an already-built Mongo query and we dispatch
+* appropriately. This keeps the portable API ergonomic for apps that
+* write Mongo queries directly today.
+*/
+function compileFilterToMongo(input) {
+	if (!input) return {};
+	if (!isFilter(input)) return input;
+	return compile(input);
+}
+function compile(filter) {
+	switch (filter.op) {
+		case "true": return {};
+		case "false": return { $expr: false };
+		case "eq": return { [filter.field]: filter.value };
+		case "ne": return filter.value === null ? { [filter.field]: { $ne: null } } : { $and: [{ [filter.field]: { $ne: filter.value } }, { [filter.field]: { $ne: null } }] };
+		case "gt": return { [filter.field]: { $gt: filter.value } };
+		case "gte": return { [filter.field]: { $gte: filter.value } };
+		case "lt": return { [filter.field]: { $lt: filter.value } };
+		case "lte": return { [filter.field]: { $lte: filter.value } };
+		case "in":
+			if (filter.values.length === 0) return { $expr: false };
+			return { [filter.field]: { $in: [...filter.values] } };
+		case "nin":
+			if (filter.values.length === 0) return {};
+			return { [filter.field]: { $nin: [...filter.values] } };
+		case "exists": return filter.exists ? { [filter.field]: { $ne: null } } : { [filter.field]: null };
+		case "like": return { [filter.field]: likeToRegex(filter.pattern, filter.caseSensitivity) };
+		case "regex": return { [filter.field]: { $regex: filter.pattern } };
+		case "and": {
+			if (filter.children.length === 0) return {};
+			const parts = filter.children.map(compile);
+			if (parts.length === 1) return parts[0];
+			return { $and: parts };
+		}
+		case "or": {
+			if (filter.children.length === 0) return { $expr: false };
+			const parts = filter.children.map(compile);
+			if (parts.length === 1) return parts[0];
+			return { $or: parts };
+		}
+		case "not": return { $nor: [compile(filter.child)] };
+		case "raw": throw new Error("mongokit/filter: `raw` is a SQL escape hatch and has no safe MongoDB translation. Pass a Mongo query object directly to the filter slot instead.");
+	}
+}
+/**
+* Translate a SQL-style LIKE pattern to a MongoDB regex.
+*
+* SQL semantics:
+*   - `%`  → match zero or more characters (`.*`)
+*   - `_`  → match exactly one character   (`.`)
+*   - `\%` → literal percent  (escape via backslash)
+*   - `\_` → literal underscore
+*   - `\\` → literal backslash
+*   - everything else is literal — regex metacharacters get escaped.
+*
+* The naive implementation `pattern.replace(/%/g, '.*')` is wrong:
+* it also expands escaped `\%` into a wildcard. We walk the pattern
+* char-by-char, honoring backslash escapes, so `like('notes', '50\\% off')`
+* matches the literal string `50% off` instead of `50<anything> off`.
+*
+* Anchored with `^` / `$` so LIKE matches the whole field value, the
+* same way sqlitekit's `LIKE` semantically does.
+*/
+function likeToRegex(pattern, caseSensitivity) {
+	let out = "^";
+	for (let i = 0; i < pattern.length; i++) {
+		const ch = pattern[i];
+		if (ch === "\\" && i + 1 < pattern.length) {
+			const next = pattern[i + 1];
+			if (next === "%" || next === "_" || next === "\\") {
+				out += escapeRegexChar(next);
+				i++;
+				continue;
+			}
+		}
+		if (ch === "%") out += ".*";
+		else if (ch === "_") out += ".";
+		else out += escapeRegexChar(ch);
+	}
+	out += "$";
+	return caseSensitivity === "sensitive" ? { $regex: out } : {
+		$regex: out,
+		$options: "i"
+	};
+}
+function escapeRegexChar(ch) {
+	return /[.*+?^${}()|[\]\\]/.test(ch) ? `\\${ch}` : ch;
+}
+//#endregion
 //#region src/query/LookupBuilder.ts
 /** Stages that are never valid inside a $lookup pipeline */
 const BLOCKED_PIPELINE_STAGES = [
@@ -191,28 +288,24 @@ var LookupBuilder = class LookupBuilder {
 			const builder = new LookupBuilder(lookup.from).localField(lookup.localField).foreignField(lookup.foreignField);
 			if (lookup.as) builder.as(lookup.as);
 			if (lookup.single) builder.single(lookup.single);
-			if (lookup.select) {
-				let projection;
-				if (typeof lookup.select === "string") {
-					projection = {};
-					for (const field of lookup.select.split(",").map((f) => f.trim())) if (field.startsWith("-")) projection[field.substring(1)] = 0;
-					else projection[field] = 1;
-				} else projection = lookup.select;
-				const joinStage = { $match: { $expr: { $eq: [`$${lookup.foreignField}`, "$$lookupJoinVal"] } } };
-				const existing = lookup.pipeline || [];
-				builder.pipeline([
-					joinStage,
-					...existing,
-					{ $project: projection }
-				]);
+			const stages = [];
+			const appendCallerStages = (raw) => {
+				if (raw.length === 0) return;
+				stages.push(...LookupBuilder.sanitizePipeline(raw));
+			};
+			const compiledWhere = lookup.where ? compileFilterToMongo(lookup.where) : void 0;
+			const hasWhere = !!compiledWhere && Object.keys(compiledWhere).length > 0;
+			if (!!(lookup.select || lookup.pipeline || hasWhere)) {
+				stages.push({ $match: { $expr: { $eq: [`$${lookup.foreignField}`, "$$lookupJoinVal"] } } });
+				if (hasWhere && compiledWhere) appendCallerStages([{ $match: compiledWhere }]);
+				if (lookup.pipeline) appendCallerStages(lookup.pipeline);
+				if (lookup.select) stages.push({ $project: compileSelectToProjection(lookup.select) });
+				builder.pipeline(stages);
 				builder.let({
 					lookupJoinVal: `$${lookup.localField}`,
 					...lookup.let || {}
 				});
 				builder.sanitize(false);
-			} else if (lookup.pipeline) {
-				builder.pipeline(lookup.pipeline);
-				if (lookup.let) builder.let(lookup.let);
 			} else if (lookup.let) builder.let(lookup.let);
 			return builder.build();
 		});
@@ -281,6 +374,38 @@ var LookupBuilder = class LookupBuilder {
 	}
 };
 /**
+* Normalize the three accepted `LookupOptions.select` shapes into a single
+* Mongo `$project` map.
+*
+*  - `string`              → CSV form, leading `-` excludes (`'name,-status'`)
+*  - `readonly string[]`   → array form, leading `-` excludes (`['-status']`)
+*  - `Record<string, 0|1>` → already a projection map, copied as-is
+*
+* The array form mirrors `repo-core`'s `LookupSpec.select` so cross-kit
+* callers (`select: ['name']`) compile identically on mongokit and sqlitekit.
+*/
+function compileSelectToProjection(select) {
+	if (typeof select === "string") {
+		const projection = {};
+		for (const field of select.split(",").map((f) => f.trim())) {
+			if (!field) continue;
+			if (field.startsWith("-")) projection[field.substring(1)] = 0;
+			else projection[field] = 1;
+		}
+		return projection;
+	}
+	if (Array.isArray(select)) {
+		const projection = {};
+		for (const field of select) {
+			if (!field) continue;
+			if (field.startsWith("-")) projection[field.substring(1)] = 0;
+			else projection[field] = 1;
+		}
+		return projection;
+	}
+	return { ...select };
+}
+/**
 * Performance Guidelines for $lookup at Scale:
 *
 * 1. **Index Requirements** (Critical for millions of records):
@@ -918,4 +1043,4 @@ async function pullFromArray(Model, id, field, value, options = {}) {
 	return update(Model, id, { $pull: { [field]: value } }, options);
 }
 //#endregion
-export { upsert as _, count as a, LookupBuilder as b, getByQuery as c, deleteById as d, deleteByQuery as f, create_exports as g, createMany as h, update_exports as i, getOrCreate as l, create as m, update as n, exists as o, delete_exports as p, updateByQuery as r, getById as s, findOneAndUpdate as t, read_exports as u, aggregate_exports as v, distinct as y };
+export { upsert as _, count as a, LookupBuilder as b, getByQuery as c, deleteById as d, deleteByQuery as f, create_exports as g, createMany as h, update_exports as i, getOrCreate as l, create as m, update as n, exists as o, delete_exports as p, updateByQuery as r, getById as s, findOneAndUpdate as t, read_exports as u, aggregate_exports as v, compileFilterToMongo as x, distinct as y };

package/dist/utils/index.d.mts

@@ -1,5 +1,5 @@
-import { X as PopulateSpec, ft as SortSpec, ot as SelectSpec } from "../types-Dc2aDVUi.mjs";
-import { a as createFieldPreset, c as getMongooseProjection, i as configureLogger, l as createError, n as buildCrudSchemasFromMongooseSchema, o as filterResponseData, r as createMemoryCache, s as getFieldsForUser, t as buildCrudSchemasFromModel } from "../mongooseToJsonSchema-DXxjFkLB.mjs";
+import { lt as SortSpec, q as PopulateSpec, rt as SelectSpec } from "../types-DXscZnLu.mjs";
+import { a as createFieldPreset, c as getMongooseProjection, i as configureLogger, l as createError, n as buildCrudSchemasFromMongooseSchema, o as filterResponseData, r as createMemoryCache, s as getFieldsForUser, t as buildCrudSchemasFromModel } from "../mongooseToJsonSchema-rtkdbBhf.mjs";
 
 //#region src/utils/cache-keys.d.ts
 /**

package/dist/utils/index.mjs

@@ -1,6 +1,6 @@
-import { t as configureLogger } from "../logger-DJ7egMnd.mjs";
+import { t as configureLogger } from "../logger-8-VS1za6.mjs";
 import { t as createError } from "../error-B00pI7dV.mjs";
 import { n as isObjectIdInstance, r as isValidIdForType, t as getSchemaIdType } from "../id-resolution-e4BT9zAV.mjs";
 import { a as byIdKey, c as listQueryKey, i as getMongooseProjection, l as modelPattern, n as filterResponseData, o as byQueryKey, r as getFieldsForUser, s as listPattern, t as createFieldPreset, u as versionKey } from "../field-selection-dI0m4RBs.mjs";
-import { n as buildCrudSchemasFromMongooseSchema, r as createMemoryCache, t as buildCrudSchemasFromModel } from "../mongooseToJsonSchema-D1sdCOmj.mjs";
+import { n as buildCrudSchemasFromMongooseSchema, r as createMemoryCache, t as buildCrudSchemasFromModel } from "../mongooseToJsonSchema-B187ufOP.mjs";
 export { buildCrudSchemasFromModel, buildCrudSchemasFromMongooseSchema, byIdKey, byQueryKey, configureLogger, createError, createFieldPreset, createMemoryCache, filterResponseData, getFieldsForUser, getMongooseProjection, getSchemaIdType, isObjectIdInstance, isValidIdForType, listPattern, listQueryKey, modelPattern, versionKey };

package/dist/{validation-chain.plugin-Dllv-cml.mjs → validation-chain.plugin-BicIgzzt.mjs}

@@ -1,12 +1,12 @@
-import { n as debug, r as warn } from "./logger-DJ7egMnd.mjs";
-import { _ as upsert, a as count, b as LookupBuilder, c as getByQuery, d as deleteById, f as deleteByQuery, h as createMany, l as getOrCreate, m as create, n as update, o as exists, r as updateByQuery, s as getById, t as findOneAndUpdate, y as distinct } from "./update-DEJYcgfV.mjs";
+import { _ as upsert, a as count, b as LookupBuilder, c as getByQuery, d as deleteById, f as deleteByQuery, h as createMany, l as getOrCreate, m as create, n as update, o as exists, r as updateByQuery, s as getById, t as findOneAndUpdate, x as compileFilterToMongo, y as distinct } from "./update-CDxPtpsk.mjs";
+import { n as debug, r as warn } from "./logger-8-VS1za6.mjs";
 import { n as isDuplicateKeyError, r as parseDuplicateKeyError, t as createError } from "./error-B00pI7dV.mjs";
-import { t as PaginationEngine } from "./PaginationEngine-CvDFfVXT.mjs";
+import { t as PaginationEngine } from "./PaginationEngine-BDaAsyPn.mjs";
 import { hasNearOperator, rewriteNearForCount } from "./query/primitives/geo.mjs";
 import { r as isValidIdForType, t as getSchemaIdType } from "./id-resolution-e4BT9zAV.mjs";
 import { a as byIdKey, c as listQueryKey, l as modelPattern, o as byQueryKey, r as getFieldsForUser, u as versionKey } from "./field-selection-dI0m4RBs.mjs";
-import mongoose from "mongoose";
 import { isFilter } from "@classytic/repo-core/filter";
+import mongoose from "mongoose";
 import { HOOK_PRIORITY } from "@classytic/repo-core/hooks";
 import { RepositoryBase, validatePluginOrder } from "@classytic/repo-core/repository";
 import { compileUpdateSpecToMongo, isUpdateSpec } from "@classytic/repo-core/update";
@@ -728,102 +728,6 @@ function batchOperationsPlugin() {
 	};
 }
 //#endregion
-//#region src/filter/compile.ts
-/**
-* Compile a Filter IR node to a MongoDB query object. Returns `{}`
-* when the node is `TRUE` (or an empty `and`) so callers can merge
-* with other scopes without special-casing.
-*
-* The `input` is typed as `unknown` so callers can pass either a
-* Filter IR node or an already-built Mongo query and we dispatch
-* appropriately. This keeps the portable API ergonomic for apps that
-* write Mongo queries directly today.
-*/
-function compileFilterToMongo(input) {
-	if (!input) return {};
-	if (!isFilter(input)) return input;
-	return compile(input);
-}
-function compile(filter) {
-	switch (filter.op) {
-		case "true": return {};
-		case "false": return { $expr: false };
-		case "eq": return { [filter.field]: filter.value };
-		case "ne": return filter.value === null ? { [filter.field]: { $ne: null } } : { $and: [{ [filter.field]: { $ne: filter.value } }, { [filter.field]: { $ne: null } }] };
-		case "gt": return { [filter.field]: { $gt: filter.value } };
-		case "gte": return { [filter.field]: { $gte: filter.value } };
-		case "lt": return { [filter.field]: { $lt: filter.value } };
-		case "lte": return { [filter.field]: { $lte: filter.value } };
-		case "in":
-			if (filter.values.length === 0) return { $expr: false };
-			return { [filter.field]: { $in: [...filter.values] } };
-		case "nin":
-			if (filter.values.length === 0) return {};
-			return { [filter.field]: { $nin: [...filter.values] } };
-		case "exists": return filter.exists ? { [filter.field]: { $ne: null } } : { [filter.field]: null };
-		case "like": return { [filter.field]: likeToRegex(filter.pattern, filter.caseSensitivity) };
-		case "regex": return { [filter.field]: { $regex: filter.pattern } };
-		case "and": {
-			if (filter.children.length === 0) return {};
-			const parts = filter.children.map(compile);
-			if (parts.length === 1) return parts[0];
-			return { $and: parts };
-		}
-		case "or": {
-			if (filter.children.length === 0) return { $expr: false };
-			const parts = filter.children.map(compile);
-			if (parts.length === 1) return parts[0];
-			return { $or: parts };
-		}
-		case "not": return { $nor: [compile(filter.child)] };
-		case "raw": throw new Error("mongokit/filter: `raw` is a SQL escape hatch and has no safe MongoDB translation. Pass a Mongo query object directly to the filter slot instead.");
-	}
-}
-/**
-* Translate a SQL-style LIKE pattern to a MongoDB regex.
-*
-* SQL semantics:
-*   - `%`  → match zero or more characters (`.*`)
-*   - `_`  → match exactly one character   (`.`)
-*   - `\%` → literal percent  (escape via backslash)
-*   - `\_` → literal underscore
-*   - `\\` → literal backslash
-*   - everything else is literal — regex metacharacters get escaped.
-*
-* The naive implementation `pattern.replace(/%/g, '.*')` is wrong:
-* it also expands escaped `\%` into a wildcard. We walk the pattern
-* char-by-char, honoring backslash escapes, so `like('notes', '50\\% off')`
-* matches the literal string `50% off` instead of `50<anything> off`.
-*
-* Anchored with `^` / `$` so LIKE matches the whole field value, the
-* same way sqlitekit's `LIKE` semantically does.
-*/
-function likeToRegex(pattern, caseSensitivity) {
-	let out = "^";
-	for (let i = 0; i < pattern.length; i++) {
-		const ch = pattern[i];
-		if (ch === "\\" && i + 1 < pattern.length) {
-			const next = pattern[i + 1];
-			if (next === "%" || next === "_" || next === "\\") {
-				out += escapeRegexChar(next);
-				i++;
-				continue;
-			}
-		}
-		if (ch === "%") out += ".*";
-		else if (ch === "_") out += ".";
-		else out += escapeRegexChar(ch);
-	}
-	out += "$";
-	return caseSensitivity === "sensitive" ? { $regex: out } : {
-		$regex: out,
-		$options: "i"
-	};
-}
-function escapeRegexChar(ch) {
-	return /[.*+?^${}()|[\]\\]/.test(ch) ? `\\${ch}` : ch;
-}
-//#endregion
 //#region src/actions/aggregate-ir/normalize.ts
 /**
 * Normalize `AggRequest['groupBy']` into a readonly string array.
@@ -1626,32 +1530,6 @@ function createTxBoundRepo(outer, session) {
 }
 //#endregion
 //#region src/Repository.ts
-/**
-* Repository Pattern - Data Access Layer
-*
-* Event-driven, plugin-based abstraction for MongoDB operations
-* Inspired by Meta & Stripe's repository patterns
-*
-* @example
-* ```typescript
-* const userRepo = new Repository(UserModel, [
-*   timestampPlugin(),
-*   softDeletePlugin(),
-* ]);
-*
-* // Create
-* const user = await userRepo.create({ name: 'John', email: 'john@example.com' });
-*
-* // Read with pagination
-* const users = await userRepo.getAll({ page: 1, limit: 20, filters: { status: 'active' } });
-*
-* // Update
-* const updated = await userRepo.update(user._id, { name: 'John Doe' });
-*
-* // Delete
-* await userRepo.delete(user._id);
-* ```
-*/
 function ensureLookupProjectionIncludesCursorFields(projection, sort) {
 	if (!projection || !sort) return projection;
 	if (!Object.values(projection).some((value) => value === 1)) return projection;
@@ -2300,7 +2178,7 @@ var Repository = class extends RepositoryBase {
 			if (context.softDeleted) {
 				const result = {
 					acknowledged: true,
-					deletedCount: 0,
+					deletedCount: context.softDeletedCount ?? 0,
 					soft: true
 				};
 				await this._emitHook("after:deleteMany", {
@@ -2488,19 +2366,31 @@ var Repository = class extends RepositoryBase {
 	* Merge policy-hook-injected filters (multi-tenant scope,
 	* soft-delete) into the pre-aggregate `filter` slot of the request.
 	* Plugins speak mongo-query shape (`context.query` / `context.filters`);
-	* we merge those with the portable `req.filter` using `$and`.
+	* the caller's `req.filter` may be either Filter IR or a mongo query.
 	*
-	* When the caller's filter is a Filter IR node we don't unwrap it —
-	* the pipeline compiler does Filter→mongo translation. Merging here
-	* as a mongo-shaped `$and` is safe because `compileFilterToMongo`
-	* passes through already-mongo queries unchanged.
+	* Each part is compiled through `compileFilterToMongo` BEFORE the
+	* `$and` merge — otherwise an IR node like `eq('status', 'paid')`
+	* (`{ op, field, value }`) gets nested inside `$and` as a literal,
+	* `compileFilterToMongo` of the merged value finds no top-level `op`
+	* (so `isFilter` is false), and Mongo receives the IR object as a
+	* raw query clause that matches no real document. Symptom: aggregates
+	* silently return 0 rows whenever a callerpasses IR + a policy
+	* plugin is installed.
 	*/
 	_injectPolicyScopeIntoAgg(req, context) {
 		const scopeCandidates = [];
 		for (const candidate of [context.filters, context.query]) if (candidate && typeof candidate === "object" && Object.keys(candidate).length > 0) scopeCandidates.push(candidate);
 		if (scopeCandidates.length === 0) return req;
-		const parts = [...scopeCandidates];
-		if (req.filter) parts.push(req.filter);
+		const parts = [];
+		for (const c of scopeCandidates) {
+			const compiled = compileFilterToMongo(c);
+			if (Object.keys(compiled).length > 0) parts.push(compiled);
+		}
+		if (req.filter) {
+			const compiled = compileFilterToMongo(req.filter);
+			if (Object.keys(compiled).length > 0) parts.push(compiled);
+		}
+		if (parts.length === 0) return req;
 		const merged = parts.length === 1 ? parts[0] : { $and: parts };
 		return {
 			...req,
@@ -4330,49 +4220,6 @@ function mongoOperationsPlugin() {
 //#endregion
 //#region src/plugins/multi-tenant.plugin.ts
 /**
-* Multi-Tenant Plugin
-*
-* Automatically injects tenant isolation filters into all queries.
-* Ensures data isolation by adding organizationId (or custom tenant field)
-* to every read and write operation.
-*
-* Uses HOOK_PRIORITY.POLICY (100) to ensure tenant filters are injected
-* BEFORE cache keys are computed (HOOK_PRIORITY.CACHE = 200).
-*
-* @example
-* ```typescript
-* // Basic — scopes every operation by organizationId from context
-* const repo = new Repository(Invoice, [
-*   multiTenantPlugin({ tenantField: 'organizationId' }),
-* ]);
-*
-* const invoices = await repo.getAll(
-*   { filters: { status: 'paid' } },
-*   { organizationId: 'org_123' }
-* );
-* // Actual query: { status: 'paid', organizationId: 'org_123' }
-*
-* // Super admin bypass — skip scoping based on context
-* const repo = new Repository(Invoice, [
-*   multiTenantPlugin({
-*     tenantField: 'organizationId',
-*     skipWhen: (context) => context.role === 'superadmin',
-*   }),
-* ]);
-*
-* // Admin sees all orgs
-* await repo.getAll({ page: 1, limit: 10 }, { role: 'superadmin' });
-*
-* // Automatic context — resolve tenant from AsyncLocalStorage
-* const repo = new Repository(Invoice, [
-*   multiTenantPlugin({
-*     tenantField: 'organizationId',
-*     resolveContext: () => asyncLocalStorage.getStore()?.tenantId,
-*   }),
-* ]);
-* ```
-*/
-/**
 * True when the op's policy target already has `tenantField` set by the
 * caller. Used to decide whether the plugin can safely skip injecting a
 * tenant scope rather than throwing on a missing context.
@@ -4719,8 +4566,9 @@ function softDeletePlugin(options = {}) {
 						...context.query || {},
 						...deleteFilter
 					};
-					await repo.Model.updateMany(finalQuery, { $set: { [deletedField]: /* @__PURE__ */ new Date() } }, { session: context.session });
+					const updateRes = await repo.Model.updateMany(finalQuery, { $set: { [deletedField]: /* @__PURE__ */ new Date() } }, { session: context.session });
 					context.softDeleted = true;
+					context.softDeletedCount = updateRes?.modifiedCount ?? 0;
 				}
 			}, { priority: HOOK_PRIORITY$1.POLICY });
 			if (addRestoreMethod) {

package/dist/{validation-chain.plugin-B0VSdcwa.d.mts → validation-chain.plugin-CH-xPoKM.d.mts}

@@ -1,7 +1,9 @@
-import { B as ObjectId, F as Logger, H as OffsetPaginationResult, T as FieldPreset, X as PopulateSpec, bt as ValidationChainOptions, et as RepositoryContext, f as CascadeOptions, ft as SortSpec, l as CacheOptions, lt as SoftDeleteOptions, nt as RepositoryInstance, ot as SelectSpec, q as Plugin, u as CacheStats, xt as ValidatorDefinition } from "./types-Dc2aDVUi.mjs";
+import { $ as RepositoryInstance, E as FieldPreset, P as Logger, W as Plugin, Z as RepositoryContext, _t as ValidationChainOptions, f as CascadeOptions, l as CacheOptions, lt as SortSpec, ot as SoftDeleteOptions, q as PopulateSpec, rt as SelectSpec, u as CacheStats, vt as ValidatorDefinition, z as ObjectId } from "./types-DXscZnLu.mjs";
 import mongoose from "mongoose";
 import { BulkWriteResult } from "@classytic/repo-core/repository";
 import { AsyncLocalStorage } from "node:async_hooks";
+import { OffsetPaginationResult } from "@classytic/repo-core/pagination";
+import { TenantConfig } from "@classytic/repo-core/tenant";
 
 //#region src/plugins/aggregate-helpers.plugin.d.ts
 /**
@@ -753,13 +755,20 @@ interface MongoOperationsMethods<TDoc> {
 }
 //#endregion
 //#region src/plugins/multi-tenant.plugin.d.ts
-interface MultiTenantOptions {
-  /** Field name used for tenant isolation (default: 'organizationId') */
-  tenantField?: string;
-  /** Context key to read tenant ID from (default: 'organizationId') */
-  contextKey?: string;
-  /** Throw if tenant ID is missing from context (default: true) */
-  required?: boolean;
+/**
+ * Static tenant fields are picked from `@classytic/repo-core/tenant` so the
+ * vocabulary (`tenantField`, `contextKey`, `required`, `fieldType`) stays
+ * locked to the org-wide canonical source. Mongokit-specific runtime
+ * callbacks (`skipWhen`, `resolveContext`, `skipOperations`,
+ * `allowDataInjection`) extend on top — those genuinely differ from
+ * sqlitekit's runtime shape because mongokit's `RepositoryContext` carries
+ * Mongoose-specific bits the resolver may inspect.
+ *
+ * Mongokit defaults `fieldType` to `'string'` (not repo-core's `'objectId'`)
+ * for back-compat — pre-3.x stored tenant ids as raw strings; flipping the
+ * default would silently change cast behavior for existing apps.
+ */
+interface MultiTenantOptions extends Pick<TenantConfig, 'tenantField' | 'contextKey' | 'required' | 'fieldType'> {
   /** Operations to skip tenant injection (e.g., for admin/system queries) */
   skipOperations?: string[];
   /**
@@ -784,17 +793,6 @@ interface MultiTenantOptions {
    * ```
    */
   resolveContext?: () => string | undefined;
-  /**
-   * How to store/query the tenant ID.
-   *
-   * - `'string'` (default): inject the tenant ID as-is (raw string).
-   * - `'objectId'`: cast to `mongoose.Types.ObjectId` before injecting.
-   *
-   * Choose `'objectId'` when the schema declares the tenant field as
-   * `Schema.Types.ObjectId` (e.g., Flow, accounting). This enables
-   * `$lookup` and `.populate()` against the referenced collection.
-   */
-  fieldType?: 'string' | 'objectId';
   /**
    * When `true` (default), bypass the `required` throw if the operation's
    * policy target already carries the tenant field. This lets hosts that

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@classytic/mongokit",
-  "version": "3.11.1",
+  "version": "3.12.0",
   "description": "Production-grade MongoDB repositories - smart pagination, events, and plugins. Built on @classytic/repo-core.",
   "type": "module",
   "sideEffects": false,
@@ -93,8 +93,8 @@
   },
   "homepage": "https://github.com/classytic/mongokit#readme",
   "peerDependencies": {
-    "mongoose": ">=9.4.1",
-    "@classytic/repo-core": ">=0.2.0"
+    "@classytic/repo-core": ">=0.3.0",
+    "mongoose": ">=9.4.1"
   },
   "engines": {
     "node": ">=22"
@@ -115,10 +115,12 @@
     "lint:fix": "biome check src/ --write",
     "format": "biome format src/ --write",
     "check": "biome ci src/ --diagnostic-level=error",
+    "push": "classytic-push",
     "prepublishOnly": "npm run check && npm run build && npm run typecheck && npm run typecheck:tests && npm test",
     "publish:dry": "npm publish --dry-run --access public",
     "publish:npm": "npm publish --access public",
-    "release": "npm run check && npm run build && npm run typecheck && npm run typecheck:tests && npm test && npm publish --access public",
+    "release:tag": "node -e \"require('child_process').execSync('npm run push -- v'+require('./package.json').version,{stdio:'inherit'})\"",
+    "release": "npm run push -- main && npm run release:tag && npm publish",
     "release:patch": "npm version patch && npm run release",
     "release:minor": "npm version minor && npm run release",
     "release:major": "npm version major && npm run release"
@@ -126,7 +128,8 @@
   "devDependencies": {
     "@arethetypeswrong/cli": "^0.18.2",
     "@biomejs/biome": "^2.4.10",
-    "@classytic/repo-core": ">=0.2.0",
+    "@classytic/dev-tools": "^0.2.0",
+    "@classytic/repo-core": "^0.3.0",
     "@types/node": "^22.0.0",
     "@vitest/coverage-v8": "^3.2.4",
     "ajv": "^8.18.0",