@classytic/mongokit 3.16.0 → 3.16.2

package/README.md

@@ -284,6 +284,28 @@ type UserRepo = Repository<UserDoc> &
   BatchOperationsMethods;
 ```
 
+### Type your Mongoose model — never cast `as never`
+
+Declare the model with its doc type so `Model<UserDoc>` flows straight into
+`Repository<UserDoc>` and `createMongooseAdapter` with no casts:
+
+```ts
+// ✅ Typed — flows cleanly into Repository + the arc adapter
+export type UserDoc = InferSchemaType<typeof UserSchema> & { _id: Types.ObjectId };
+export const UserModel = model<UserDoc>('User', UserSchema);
+export const userRepo = new Repository<UserDoc>(UserModel, [/* plugins */]);
+
+// ❌ Untyped — the inferred doc type diverges from `UserDoc`, and
+//    `mongoose.Model<T>` is INVARIANT in T, so it won't unify. The
+//    tempting "fix" is `as never` — don't; type the model instead.
+export const UserModel = model('User', UserSchema);          // Model<inferred>
+new Repository<UserDoc>(UserModel as never, []);             // ⛔ cast smell
+```
+
+The cast isn't a mongokit typing gap — it's a symptom of an untyped model.
+One generic at the `model<Doc>(...)` call site removes it everywhere
+(`Repository`, `createMongooseAdapter`, and any `RepositoryLike<Doc>` site).
+
 Feature-detect portable behavior with:
 
 ```ts

package/dist/better-auth/index.d.mts

@@ -65,8 +65,11 @@ interface RegisterBetterAuthStubsOptions {
  * Mongoose-based resources can `.populate()` references to BA-owned
  * documents. Idempotent — safe to call multiple times.
  *
- * Schemas are `strict: false` and `_id: false` so BA's writes flow through
- * unchanged and Mongoose hydrates whatever BA wrote. Use this when you have
+ * Schemas are `strict: false` (so BA's writes flow through unchanged and
+ * Mongoose hydrates whatever BA wrote) and keep the DEFAULT ObjectId `_id`
+ * SchemaType — BA's mongo adapter stores ObjectId `_id`s, so the caster is
+ * required for `findById`, `_id` filters, and `populate`/`ref` to resolve a
+ * hex-string id (see the NOTE in the loop below). Use this when you have
  * resources that *reference* BA collections (`createdBy: { ref: 'user' }`)
  * but don't expose CRUD on the BA collection itself.
  *

package/dist/better-auth/index.mjs

@@ -7,8 +7,11 @@ import { pluralizeBetterAuthCollection, resolveBetterAuthCollections } from "@cl
 * Mongoose-based resources can `.populate()` references to BA-owned
 * documents. Idempotent — safe to call multiple times.
 *
-* Schemas are `strict: false` and `_id: false` so BA's writes flow through
-* unchanged and Mongoose hydrates whatever BA wrote. Use this when you have
+* Schemas are `strict: false` (so BA's writes flow through unchanged and
+* Mongoose hydrates whatever BA wrote) and keep the DEFAULT ObjectId `_id`
+* SchemaType — BA's mongo adapter stores ObjectId `_id`s, so the caster is
+* required for `findById`, `_id` filters, and `populate`/`ref` to resolve a
+* hex-string id (see the NOTE in the loop below). Use this when you have
 * resources that *reference* BA collections (`createdBy: { ref: 'user' }`)
 * but don't expose CRUD on the BA collection itself.
 *
@@ -26,7 +29,6 @@ function registerBetterAuthStubs(mongoose, options = {}) {
 		const schema = new mongoose.Schema({}, {
 			strict: false,
 			collection: finalName,
-			_id: false,
 			timestamps: false
 		});
 		mongoose.model(finalName, schema);

package/dist/index.mjs

@@ -9,7 +9,7 @@ import { isGeoOperator, parseGeoFilter } from "./query/primitives/geo.mjs";
 import { i as getMongooseProjection, n as filterResponseData, r as getFieldsForUser, t as createFieldPreset } from "./field-selection-CQW3WBiK.mjs";
 import { buildFieldTypeMap, coerceFieldValue, coerceHeuristic } from "./query/primitives/coercion.mjs";
 import { extractSchemaIndexes } from "./query/primitives/indexes.mjs";
-import { n as buildCrudSchemasFromMongooseSchema, r as createMemoryCache, t as buildCrudSchemasFromModel } from "./mongooseToJsonSchema-Bi0q0pYW.mjs";
+import { n as buildCrudSchemasFromMongooseSchema, r as createMemoryCache, t as buildCrudSchemasFromModel } from "./mongooseToJsonSchema-CMM2QHzd.mjs";
 import { isControlParam } from "@classytic/repo-core/query-parser";
 //#region src/create-repository.ts
 function isLoggerAudit(value) {

package/dist/{mongooseToJsonSchema-Bi0q0pYW.mjs → mongooseToJsonSchema-CMM2QHzd.mjs}

@@ -505,10 +505,37 @@ function convertTreeToJsonSchema(tree, options, seen = /* @__PURE__ */ new WeakS
 	if (required.length) schema.required = required;
 	return schema;
 }
+/**
+* Recursively delete every `default` keyword from a JSON-schema subtree
+* (properties, array items, nested subdocuments).
+*
+* A `default` has no place in an UPDATE (PATCH) validator. Hosts that run
+* Fastify/AJV with `useDefaults: true` (arc's `createApp` does) would
+* otherwise have the default INJECTED into any PATCH body that omits the
+* field — and the repository then `$set`s it, silently overwriting stored
+* data on a partial update. The canonical bite: a nullable field carrying
+* `default: null` (e.g. `publishedAt`) gets nulled out on every
+* content-only save, unpublishing the doc. Partial updates must touch only
+* the fields the client actually sent; DB-layer defaults still apply on
+* create via Mongoose. The nullable type widening (`type: [..., 'null']`)
+* stays, so a client may still explicitly send `null` — it just won't be
+* auto-injected.
+*/
+function stripDefaultsDeep(node) {
+	if (Array.isArray(node)) {
+		for (const item of node) stripDefaultsDeep(item);
+		return;
+	}
+	if (!node || typeof node !== "object") return;
+	const obj = node;
+	delete obj.default;
+	for (const value of Object.values(obj)) stripDefaultsDeep(value);
+}
 function buildJsonSchemaForUpdate(createJson, options) {
 	const clone = JSON.parse(JSON.stringify(createJson));
 	delete clone.required;
 	applyFieldRules(clone, collectFieldsToOmit(options, "update"), options);
+	stripDefaultsDeep(clone);
 	if (options?.strictAdditionalProperties === true) clone.additionalProperties = false;
 	if (options?.update?.requireAtLeastOne === true) clone.minProperties = 1;
 	return clone;

package/dist/utils/index.mjs

@@ -2,5 +2,5 @@ import { t as configureLogger } from "../logger-DprijP5h.mjs";
 import { t as createError } from "../error-B00pI7dV.mjs";
 import { n as isObjectIdInstance, r as isValidIdForType, t as getSchemaIdType } from "../id-resolution-DduoO4LI.mjs";
 import { i as getMongooseProjection, n as filterResponseData, r as getFieldsForUser, t as createFieldPreset } from "../field-selection-CQW3WBiK.mjs";
-import { n as buildCrudSchemasFromMongooseSchema, r as createMemoryCache, t as buildCrudSchemasFromModel } from "../mongooseToJsonSchema-Bi0q0pYW.mjs";
+import { n as buildCrudSchemasFromMongooseSchema, r as createMemoryCache, t as buildCrudSchemasFromModel } from "../mongooseToJsonSchema-CMM2QHzd.mjs";
 export { buildCrudSchemasFromModel, buildCrudSchemasFromMongooseSchema, configureLogger, createError, createFieldPreset, createMemoryCache, filterResponseData, getFieldsForUser, getMongooseProjection, getSchemaIdType, isObjectIdInstance, isValidIdForType };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@classytic/mongokit",
-  "version": "3.16.0",
+  "version": "3.16.2",
   "description": "Production-grade MongoDB repositories - smart pagination, events, and plugins. Built on @classytic/repo-core.",
   "type": "module",
   "sideEffects": false,
@@ -145,8 +145,8 @@
   },
   "devDependencies": {
     "@arethetypeswrong/cli": "^0.18.2",
-    "@better-auth/api-key": "^1.6.9",
-    "@better-auth/mongo-adapter": "^1.6.9",
+    "@better-auth/api-key": "^1.6.22",
+    "@better-auth/mongo-adapter": "^1.6.22",
     "@biomejs/biome": "^2.4.10",
     "@classytic/dev-tools": "^0.2.0",
     "@classytic/repo-core": "0.6.0",
@@ -154,7 +154,7 @@
     "@vitest/coverage-v8": "^4.1.4",
     "ajv": "^8.18.0",
     "ajv-formats": "^3.0.1",
-    "better-auth": "^1.6.9",
+    "better-auth": "^1.6.22",
     "dotenv": "^17.4.2",
     "knip": "^6.3.0",
     "mongodb-memory-server": "^10.4.3",
@@ -163,5 +163,9 @@
     "tsdown": "^0.21.8",
     "typescript": "^6.0.3",
     "vitest": "^4.1.4"
+  },
+  "overrides": {
+    "mongodb": "7.2.0",
+    "bson": "7.2.0"
   }
 }