@classytic/mongokit 3.16.2 → 3.18.0

package/README.md

@@ -17,7 +17,7 @@ Requirements:
 
 - Node.js `>=22`
 - Mongoose `>=9.4.1`
-- `@classytic/repo-core >=0.6.0`
+- `@classytic/repo-core >=0.7.0`
 
 ## Quick Start
 
@@ -237,6 +237,7 @@ Supports common URL operators such as `_gt`, `_gte`, `_lt`, `_lte`, `_in`, `_nin
 | `mongoOperationsPlugin` | Hook-routed Mongo update helpers |
 | `aggregateHelpersPlugin` | Common aggregation helpers |
 | `subdocumentPlugin` | Nested array document helpers |
+| `changeLogPlugin` | Durable per-doc change feed (`@classytic/repo-core/sync`) for offline-first pull/push and replicas |
 
 Import only the plugins you use.
 

package/dist/{PaginationEngine-0XXTW-9b.mjs → PaginationEngine-BcvaXBQ-.mjs}

@@ -1,7 +1,7 @@
-import { n as warn } from "./logger-DprijP5h.mjs";
-import { t as createError } from "./error-B00pI7dV.mjs";
-import { n as encodeCursor, r as resolveCursorFilter } from "./cursor-4LMYa4ga.mjs";
-import { r as validateKeysetSort, t as getPrimaryField } from "./sort-RPVz5u0w.mjs";
+import { n as warn } from "./logger-B8wf-Mtb.mjs";
+import { t as createError } from "./error-BTeepSNL.mjs";
+import { n as encodeCursor, r as resolveCursorFilter } from "./cursor-_SbWVAn-.mjs";
+import { r as validateKeysetSort, t as getPrimaryField } from "./sort-Ca1BPfvE.mjs";
 //#region src/pagination/utils/index-hint.ts
 /**
 * Read a Mongoose schema's declared indexes, defensively.

package/dist/{Repository-DE7D2QeS.mjs → Repository-B01VW_fU.mjs}

@@ -1,15 +1,83 @@
-import { a as count, b as LookupBuilder, c as getByQuery, d as deleteById, f as deleteByQuery, h as createMany, l as getOrCreate, m as create, n as update, o as exists, r as updateByQuery, s as getById, t as findOneAndUpdate, x as compileFilterToMongo, y as distinct } from "./update-BXMnCvO6.mjs";
-import { n as warn } from "./logger-DprijP5h.mjs";
-import { n as isDuplicateKeyError, r as parseDuplicateKeyError, t as createError } from "./error-B00pI7dV.mjs";
-import { t as PaginationEngine } from "./PaginationEngine-0XXTW-9b.mjs";
+import { i as isValidIdForType, t as getSchemaIdType } from "./id-resolution-CnN0YA8t.mjs";
+import { a as count, b as LookupBuilder, c as getByQuery, d as deleteById, f as deleteByQuery, h as createMany, l as getOrCreate, m as create, n as update, o as exists, r as updateByQuery, s as getById, t as findOneAndUpdate, x as compileFilterToMongo, y as distinct } from "./update-CvCMv5Cl.mjs";
+import { n as warn } from "./logger-B8wf-Mtb.mjs";
+import { n as isDuplicateKeyError, r as parseDuplicateKeyError, t as createError } from "./error-BTeepSNL.mjs";
+import { t as PaginationEngine } from "./PaginationEngine-BcvaXBQ-.mjs";
 import { hasNearOperator, rewriteNearForCount } from "./query/primitives/geo.mjs";
-import { r as isValidIdForType, t as getSchemaIdType } from "./id-resolution-DduoO4LI.mjs";
-import { isFilter } from "@classytic/repo-core/filter";
+import { RepositoryBase, runChunkedPurge, throwIfAborted, validatePluginOrder, withRetry } from "@classytic/repo-core/repository";
 import mongoose from "mongoose";
+import { isFilter } from "@classytic/repo-core/filter";
 import { HOOK_PRIORITY } from "@classytic/repo-core/hooks";
-import { RepositoryBase, runChunkedPurge, throwIfAborted, validatePluginOrder, withRetry } from "@classytic/repo-core/repository";
 import { compileUpdateSpecToMongo, isUpdateSpec } from "@classytic/repo-core/update";
 import { decodeAggCursor, encodeAggCursor, isKeysetMode, normalizeGroupBy, validateMeasures } from "@classytic/repo-core/aggregate";
+//#region src/actions/purge.ts
+/**
+* Build a `PurgePort` bound to a repository + the `field = value`
+* predicate the purge targets.
+*/
+function createMongoPurgePort(repo, field, value, session) {
+	const filter = { [field]: value };
+	const baseOpts = {
+		session,
+		bypassTenant: true
+	};
+	return { async purgeChunk(strategy, limit) {
+		if (strategy.type === "anonymize") {
+			if (Object.values(strategy.fields).some((v) => typeof v === "function")) return purgeAnonymizeFunctional(repo, filter, strategy.fields, limit, session);
+		}
+		const idDocs = await repo.Model.find(filter, { _id: 1 }).limit(limit).session(session ?? null).lean().exec();
+		if (idDocs.length === 0) return 0;
+		const chunkFilter = {
+			_id: { $in: idDocs.map((d) => d._id) },
+			[field]: value
+		};
+		switch (strategy.type) {
+			case "hard":
+				await repo.deleteMany(chunkFilter, {
+					...baseOpts,
+					mode: "hard"
+				});
+				return idDocs.length;
+			case "soft":
+				await repo.updateMany(chunkFilter, { $set: {
+					[strategy.deletedField ?? "deleted"]: true,
+					[strategy.deletedAtField ?? "deletedAt"]: /* @__PURE__ */ new Date()
+				} }, baseOpts);
+				return idDocs.length;
+			case "anonymize":
+				await repo.updateMany(chunkFilter, { $set: strategy.fields }, baseOpts);
+				return idDocs.length;
+		}
+	} };
+}
+/**
+* Anonymize with at least one function-form field replacer. Fetches the
+* full docs (function needs the row) and issues ONE `bulkWrite` with N
+* heterogeneous `updateOne` ops. Two round-trips per chunk regardless
+* of N — vs the N+1 of per-doc `update()` fan-out.
+*
+* Mongo's `bulkWrite` is ordered: false → independent failures don't
+* abort the batch. For idempotent anonymize (same row anonymized twice
+* is the same write), this matches the at-least-once contract.
+*/
+async function purgeAnonymizeFunctional(repo, filter, fields, limit, session) {
+	const docs = await repo.Model.find(filter).limit(limit).session(session ?? null).lean().exec();
+	if (docs.length === 0) return 0;
+	const operations = docs.map((doc) => {
+		const set = {};
+		for (const [k, v] of Object.entries(fields)) set[k] = typeof v === "function" ? v(doc) : v;
+		return { updateOne: {
+			filter: { _id: doc._id },
+			update: { $set: set }
+		} };
+	});
+	await repo.Model.bulkWrite(operations, {
+		ordered: false,
+		session: session ?? void 0
+	});
+	return docs.length;
+}
+//#endregion
 //#region src/capabilities.ts
 const MONGOKIT_CAPABILITIES = {
 	transactions: true,
@@ -845,74 +913,6 @@ function buildKeysetPredicate(sort, cursor) {
 	return { $match: branches.length === 1 ? branches[0] : { $or: branches } };
 }
 //#endregion
-//#region src/actions/purge.ts
-/**
-* Build a `PurgePort` bound to a repository + the `field = value`
-* predicate the purge targets.
-*/
-function createMongoPurgePort(repo, field, value, session) {
-	const filter = { [field]: value };
-	const baseOpts = {
-		session,
-		bypassTenant: true
-	};
-	return { async purgeChunk(strategy, limit) {
-		if (strategy.type === "anonymize") {
-			if (Object.values(strategy.fields).some((v) => typeof v === "function")) return purgeAnonymizeFunctional(repo, filter, strategy.fields, limit, session);
-		}
-		const idDocs = await repo.Model.find(filter, { _id: 1 }).limit(limit).session(session ?? null).lean().exec();
-		if (idDocs.length === 0) return 0;
-		const chunkFilter = {
-			_id: { $in: idDocs.map((d) => d._id) },
-			[field]: value
-		};
-		switch (strategy.type) {
-			case "hard":
-				await repo.deleteMany(chunkFilter, {
-					...baseOpts,
-					mode: "hard"
-				});
-				return idDocs.length;
-			case "soft":
-				await repo.updateMany(chunkFilter, { $set: {
-					[strategy.deletedField ?? "deleted"]: true,
-					[strategy.deletedAtField ?? "deletedAt"]: /* @__PURE__ */ new Date()
-				} }, baseOpts);
-				return idDocs.length;
-			case "anonymize":
-				await repo.updateMany(chunkFilter, { $set: strategy.fields }, baseOpts);
-				return idDocs.length;
-		}
-	} };
-}
-/**
-* Anonymize with at least one function-form field replacer. Fetches the
-* full docs (function needs the row) and issues ONE `bulkWrite` with N
-* heterogeneous `updateOne` ops. Two round-trips per chunk regardless
-* of N — vs the N+1 of per-doc `update()` fan-out.
-*
-* Mongo's `bulkWrite` is ordered: false → independent failures don't
-* abort the batch. For idempotent anonymize (same row anonymized twice
-* is the same write), this matches the at-least-once contract.
-*/
-async function purgeAnonymizeFunctional(repo, filter, fields, limit, session) {
-	const docs = await repo.Model.find(filter).limit(limit).session(session ?? null).lean().exec();
-	if (docs.length === 0) return 0;
-	const operations = docs.map((doc) => {
-		const set = {};
-		for (const [k, v] of Object.entries(fields)) set[k] = typeof v === "function" ? v(doc) : v;
-		return { updateOne: {
-			filter: { _id: doc._id },
-			update: { $set: set }
-		} };
-	});
-	await repo.Model.bulkWrite(operations, {
-		ordered: false,
-		session: session ?? void 0
-	});
-	return docs.length;
-}
-//#endregion
 //#region src/query/AggregationBuilder.ts
 /**
 * Normalize SortSpec to MongoDB's strict format (1 | -1)
@@ -3614,9 +3614,9 @@ var Repository = class extends RepositoryBase {
 				};
 				if (isKeyset && sort) {
 					const parsedSort = this._parseSort(sort);
-					const { validateKeysetSort } = await import("./sort-RPVz5u0w.mjs").then((n) => n.n);
-					const { encodeCursor, resolveCursorFilter } = await import("./cursor-4LMYa4ga.mjs").then((n) => n.t);
-					const { getPrimaryField } = await import("./sort-RPVz5u0w.mjs").then((n) => n.n);
+					const { validateKeysetSort } = await import("./sort-Ca1BPfvE.mjs").then((n) => n.n);
+					const { encodeCursor, resolveCursorFilter } = await import("./cursor-_SbWVAn-.mjs").then((n) => n.t);
+					const { getPrimaryField } = await import("./sort-Ca1BPfvE.mjs").then((n) => n.n);
 					const normalizedSort = validateKeysetSort(parsedSort, this._pagination.config.strictKeysetSortFields);
 					const cursorVersion = this._pagination.config.cursorVersion ?? 1;
 					const minCursorVersion = this._pagination.config.minCursorVersion ?? 1;
@@ -4016,4 +4016,4 @@ var Repository = class extends RepositoryBase {
 	}
 };
 //#endregion
-export { withTransaction as a, MUTATING_OPERATIONS as c, operationsByPolicyKey as d, MONGOKIT_CAPABILITIES as f, isTransactionUnsupported as i, OP_REGISTRY as l, Repository as n, AggregationBuilder as o, batchTransaction as r, ALL_OPERATIONS as s, HOOK_PRIORITY$1 as t, READ_OPERATIONS as u };
+export { withTransaction as a, MUTATING_OPERATIONS as c, operationsByPolicyKey as d, MONGOKIT_CAPABILITIES as f, isTransactionUnsupported as i, OP_REGISTRY as l, Repository as n, AggregationBuilder as o, createMongoPurgePort as p, batchTransaction as r, ALL_OPERATIONS as s, HOOK_PRIORITY$1 as t, READ_OPERATIONS as u };

package/dist/actions/index.d.mts

@@ -1,2 +1,2 @@
-import { a as create_d_exports, i as delete_d_exports, n as update_d_exports, o as aggregate_d_exports, r as read_d_exports } from "../index-CV5vv-8E.mjs";
+import { a as create_d_exports, i as delete_d_exports, n as update_d_exports, o as aggregate_d_exports, r as read_d_exports } from "../index-fi91ycQc.mjs";
 export { aggregate_d_exports as aggregate, create_d_exports as create, delete_d_exports as deleteActions, read_d_exports as read, update_d_exports as update };

package/dist/actions/index.mjs

@@ -1,5 +1,5 @@
 import { t as __exportAll } from "../chunk-CfYAbeIz.mjs";
-import { g as create_exports, i as update_exports, p as delete_exports, u as read_exports, v as aggregate_exports } from "../update-BXMnCvO6.mjs";
+import { g as create_exports, i as update_exports, p as delete_exports, u as read_exports, v as aggregate_exports } from "../update-CvCMv5Cl.mjs";
 //#region src/actions/index.ts
 var actions_exports = /* @__PURE__ */ __exportAll({
 	aggregate: () => aggregate_exports,

package/dist/adapter/index.d.mts

@@ -1,5 +1,5 @@
-import { Document, Model } from "mongoose";
 import { StandardRepo } from "@classytic/repo-core/repository";
+import { Document, Model } from "mongoose";
 import { SchemaBuilderOptions, SchemaGenerator } from "@classytic/repo-core/schema";
 import { AdapterRepositoryInput, AdapterSchemaContext, AdapterValidationResult, DataAdapter, OpenApiSchemas, RepositoryLike, SchemaMetadata } from "@classytic/repo-core/adapter";
 

package/dist/adapter/index.mjs

@@ -1,2 +1,2 @@
-import { n as createMongooseAdapter, r as isMongooseModel, t as MongooseAdapter } from "../adapter-gG_uyFSZ.mjs";
+import { n as createMongooseAdapter, r as isMongooseModel, t as MongooseAdapter } from "../adapter-DYEMkLwK.mjs";
 export { MongooseAdapter, createMongooseAdapter, isMongooseModel };

package/dist/{adapter-gG_uyFSZ.mjs → adapter-DYEMkLwK.mjs}

@@ -1,4 +1,4 @@
-import { n as warn } from "./logger-DprijP5h.mjs";
+import { n as warn } from "./logger-B8wf-Mtb.mjs";
 import { mergeFieldRuleConstraints } from "@classytic/repo-core/schema";
 import { asRepositoryLike, isRepository } from "@classytic/repo-core/adapter";
 //#region src/adapter/types.ts

package/dist/ai/index.d.mts

@@ -1,4 +1,4 @@
-import { G as Plugin } from "../types-BWZILovv.mjs";
+import { G as Plugin } from "../types-CU3SEDbD.mjs";
 import { PipelineStage } from "mongoose";
 
 //#region src/ai/types.d.ts

package/dist/ai/index.mjs

@@ -1,4 +1,4 @@
-import { n as warn } from "../logger-DprijP5h.mjs";
+import { n as warn } from "../logger-B8wf-Mtb.mjs";
 //#region src/ai/url-policy.ts
 /**
 * URL policy helpers for the vector plugin media pipeline.

package/dist/better-auth/index.mjs

@@ -1,5 +1,5 @@
-import { n as Repository } from "../Repository-DE7D2QeS.mjs";
-import { n as createMongooseAdapter } from "../adapter-gG_uyFSZ.mjs";
+import { n as Repository } from "../Repository-B01VW_fU.mjs";
+import { n as createMongooseAdapter } from "../adapter-DYEMkLwK.mjs";
 import { pluralizeBetterAuthCollection, resolveBetterAuthCollections } from "@classytic/repo-core/better-auth";
 //#region src/better-auth/index.ts
 /**

package/dist/{id-resolution-DduoO4LI.mjs → id-resolution-CnN0YA8t.mjs}

@@ -77,5 +77,25 @@ function isValidIdForType(id, idType) {
 		case "unknown": return String(id).length > 0;
 	}
 }
+/**
+* Return every form an id might be stored as, for use in a `{ field: { $in: ... } }`
+* match. The Better Auth mongo adapter (and mixed mongoose/overlay writes) store
+* the same logical id as either a hex STRING or an ObjectId depending on the code
+* path, so a query keyed on one form silently misses rows stored as the other.
+*
+* - A 12-byte / 24-hex string that `ObjectId.isValid` accepts → `[hex, ObjectId(hex)]`.
+* - Anything else (non-ObjectId string, number, an ObjectId instance, …) → `[id]`.
+*
+* Over-matching is harmless — the extra `$in` term can't match a non-existent doc.
+* Replaces the `Types.ObjectId.isValid(id) ? [id, new Types.ObjectId(id)] : [id]`
+* one-liner that tends to get re-implemented at every call site.
+*
+* @example
+* await col.deleteMany({ customerId: { $in: idVariants(userId) } });
+*/
+function idVariants(id) {
+	if (typeof id === "string" && id.length > 0 && mongoose.Types.ObjectId.isValid(id)) return [id, new mongoose.Types.ObjectId(id)];
+	return [id];
+}
 //#endregion
-export { isObjectIdInstance as n, isValidIdForType as r, getSchemaIdType as t };
+export { isValidIdForType as i, idVariants as n, isObjectIdInstance as r, getSchemaIdType as t };

package/dist/{index-CV5vv-8E.d.mts → index-fi91ycQc.d.mts}

@@ -1,4 +1,4 @@
-import { B as ObjectId, Dt as LookupOptions, H as OperationOptions, I as MinMaxResult, J as PopulateSpec, T as GroupResult, Z as ReadPreferenceType, ft as UpdateManyResult, ht as UpdateWithValidationResult, i as AnyDocument, it as SelectSpec, p as CreateOptions, pt as UpdateOptions, ut as SortSpec, v as DeleteResult, w as FindOneAndUpdateOptions } from "./types-BWZILovv.mjs";
+import { B as ObjectId, Dt as LookupOptions, H as OperationOptions, I as MinMaxResult, J as PopulateSpec, T as GroupResult, Z as ReadPreferenceType, ft as UpdateManyResult, ht as UpdateWithValidationResult, i as AnyDocument, it as SelectSpec, p as CreateOptions, pt as UpdateOptions, ut as SortSpec, v as DeleteResult, w as FindOneAndUpdateOptions } from "./types-CU3SEDbD.mjs";
 import { Model, PipelineStage } from "mongoose";
 
 //#region src/actions/aggregate.d.ts

package/dist/index.d.mts

@@ -1,17 +1,95 @@
-import { $ as RepositoryEvent, A as KeysetPaginationOptions, B as ObjectId, C as FieldPreset, Ct as IControllerResponse, D as InferDocument, Dt as LookupOptions, E as HookMode, Et as LookupBuilder, F as MiddlewareContext, G as Plugin, H as OperationOptions, I as MinMaxResult, J as PopulateSpec, K as PluginFunction, L as MinimalRepoView, M as LookupPopulateOptions, N as LookupPopulateResult, O as InferRawDoc, P as Middleware, Q as RepositoryContext, R as MongoOperatorUpdate, S as EventPhase, St as IController, T as GroupResult, Tt as IResponseFormatter, U as PaginationConfig, V as OffsetPaginationOptions, W as PartialBy, X as ReadOptions, Y as PrioritizedHook, Z as ReadPreferenceType, _ as DeleteManyResult, _t as ValidationChainOptions, a as AnyModel, at as SessionOptions, b as EventHandlers, bt as WithPlugins, c as CacheableOptions, ct as SoftDeleteRepository, d as CollationOptions, dt as Strict, et as RepositoryInstance, f as CreateInput, ft as UpdateManyResult, g as DeepPartial, gt as UserContext, h as DecodedCursor, ht as UpdateWithValidationResult, i as AnyDocument, it as SelectSpec, j as Logger, k as KeysOfType, l as CascadeOptions, lt as SortDirection, m as CursorPayload, mt as UpdatePatch, n as AggregatePaginationOptions, nt as RepositoryOptions, o as BasePaginationOptions, ot as SoftDeleteFilterMode, p as CreateOptions, pt as UpdateOptions, q as PluginType, r as AllPluginMethods, rt as RequiredBy, s as CacheOperationOptions, st as SoftDeleteOptions, t as AggregateOptions, tt as RepositoryOperation, u as CascadeRelation, ut as SortSpec, v as DeleteResult, vt as ValidatorDefinition, w as FindOneAndUpdateOptions, wt as IRequestContext, x as EventPayload, xt as WithTransactionOptions, y as DocField, yt as ValueType, z as NonNullableFields } from "./types-BWZILovv.mjs";
-import { t as index_d_exports } from "./index-CV5vv-8E.mjs";
-import { $ as AuditEntry, A as BulkWriteResult, B as IdGenerator, C as LeasePluginOptions, D as elasticSearchPlugin, E as ElasticSearchOptions, F as MultiTenantOptions, G as getNextSequence, H as SequentialIdOptions, I as adminBypass, J as CacheAdapter, K as prefixedId, L as multiTenantPlugin, M as auditLogPlugin, N as AggregateHelpersMethods, O as cascadePlugin, P as aggregateHelpersPlugin, Q as cachePlugin, R as CustomIdOptions, S as LeaseMethods, T as fieldFilterPlugin, U as customIdPlugin, V as PrefixedIdOptions, W as dateSequentialId, X as RepositoryCacheHandle, Y as CacheOptions, Z as RepositoryCachePluginOptions, _ as observabilityPlugin, a as uniqueField, at as AuditTrailQuery, c as TenantContext, d as SubdocumentMethods, et as AuditOperation, f as subdocumentPlugin, g as OperationMetric, h as ObservabilityOptions, i as requireField, it as AuditTrailOptions, j as batchOperationsPlugin, k as BatchOperationsMethods, l as TenantStore, m as softDeletePlugin, n as blockIf, nt as AuditQueryResult, o as validationChainPlugin, ot as auditTrailPlugin, p as SoftDeleteMethods, q as sequentialId, r as immutableField, rt as AuditTrailMethods, s as timestampPlugin, t as autoInject, tt as AuditQueryOptions, u as createTenantContext, v as MongoOperationsMethods, w as leasePlugin, x as methodRegistryPlugin, y as mongoOperationsPlugin, z as DateSequentialIdOptions } from "./validation-chain.plugin-Iee2_puD.mjs";
+import { $ as RepositoryEvent, A as KeysetPaginationOptions, B as ObjectId, C as FieldPreset, Ct as IControllerResponse, D as InferDocument, Dt as LookupOptions, E as HookMode, Et as LookupBuilder, F as MiddlewareContext, G as Plugin, H as OperationOptions, I as MinMaxResult, J as PopulateSpec, K as PluginFunction, L as MinimalRepoView, M as LookupPopulateOptions, N as LookupPopulateResult, O as InferRawDoc, P as Middleware, Q as RepositoryContext, R as MongoOperatorUpdate, S as EventPhase, St as IController, T as GroupResult, Tt as IResponseFormatter, U as PaginationConfig, V as OffsetPaginationOptions, W as PartialBy, X as ReadOptions, Y as PrioritizedHook, Z as ReadPreferenceType, _ as DeleteManyResult, _t as ValidationChainOptions, a as AnyModel, at as SessionOptions, b as EventHandlers, bt as WithPlugins, c as CacheableOptions, ct as SoftDeleteRepository, d as CollationOptions, dt as Strict, et as RepositoryInstance, f as CreateInput, ft as UpdateManyResult, g as DeepPartial, gt as UserContext, h as DecodedCursor, ht as UpdateWithValidationResult, i as AnyDocument, it as SelectSpec, j as Logger, k as KeysOfType, l as CascadeOptions, lt as SortDirection, m as CursorPayload, mt as UpdatePatch, n as AggregatePaginationOptions, nt as RepositoryOptions, o as BasePaginationOptions, ot as SoftDeleteFilterMode, p as CreateOptions, pt as UpdateOptions, q as PluginType, r as AllPluginMethods, rt as RequiredBy, s as CacheOperationOptions, st as SoftDeleteOptions, t as AggregateOptions, tt as RepositoryOperation, u as CascadeRelation, ut as SortSpec, v as DeleteResult, vt as ValidatorDefinition, w as FindOneAndUpdateOptions, wt as IRequestContext, x as EventPayload, xt as WithTransactionOptions, y as DocField, yt as ValueType, z as NonNullableFields } from "./types-CU3SEDbD.mjs";
+import { t as index_d_exports } from "./index-fi91ycQc.mjs";
+import { $ as AuditEntry, A as BulkWriteResult, B as IdGenerator, C as LeasePluginOptions, D as elasticSearchPlugin, E as ElasticSearchOptions, F as MultiTenantOptions, G as getNextSequence, H as SequentialIdOptions, I as adminBypass, J as CacheAdapter, K as prefixedId, L as multiTenantPlugin, M as auditLogPlugin, N as AggregateHelpersMethods, O as cascadePlugin, P as aggregateHelpersPlugin, Q as cachePlugin, R as CustomIdOptions, S as LeaseMethods, T as fieldFilterPlugin, U as customIdPlugin, V as PrefixedIdOptions, W as dateSequentialId, X as RepositoryCacheHandle, Y as CacheOptions, Z as RepositoryCachePluginOptions, _ as observabilityPlugin, a as uniqueField, at as AuditTrailQuery, c as TenantContext, d as SubdocumentMethods, et as AuditOperation, f as subdocumentPlugin, g as OperationMetric, h as ObservabilityOptions, i as requireField, it as AuditTrailOptions, j as batchOperationsPlugin, k as BatchOperationsMethods, l as TenantStore, m as softDeletePlugin, n as blockIf, nt as AuditQueryResult, o as validationChainPlugin, ot as auditTrailPlugin, p as SoftDeleteMethods, q as sequentialId, r as immutableField, rt as AuditTrailMethods, s as timestampPlugin, t as autoInject, tt as AuditQueryOptions, u as createTenantContext, v as MongoOperationsMethods, w as leasePlugin, x as methodRegistryPlugin, y as mongoOperationsPlugin, z as DateSequentialIdOptions } from "./validation-chain.plugin-BpMfy18N.mjs";
 import { PaginationEngine } from "./pagination/PaginationEngine.mjs";
 import { n as SchemaPathsLike, t as FieldType$1 } from "./coercion-TRMmR49h.mjs";
 import { n as SchemaIndexes } from "./indexes-CgOF7Wjd.mjs";
-import { a as createFieldPreset, c as getMongooseProjection, d as parseDuplicateKeyError, i as configureLogger, l as createError, n as buildCrudSchemasFromMongooseSchema, o as filterResponseData, r as createMemoryCache, s as getFieldsForUser, t as buildCrudSchemasFromModel, u as isDuplicateKeyError } from "./mongooseToJsonSchema-GhvZUjRO.mjs";
+import { d as filterResponseData, f as getFieldsForUser, g as parseDuplicateKeyError, h as isDuplicateKeyError, i as configureLogger, m as createError, n as buildCrudSchemasFromMongooseSchema, p as getMongooseProjection, r as createMemoryCache, s as idVariants, t as buildCrudSchemasFromModel, u as createFieldPreset } from "./mongooseToJsonSchema-BdQJU39w.mjs";
+import { AggPaginationRequest, AggRequest, AggResult, ChangeEvent, FilterInput, KeysetAggPaginationResult, QueryOptions, RepoCapabilities, RepositoryBase, TenantPurgeOptions, TenantPurgeResult, TenantPurgeStrategy, WatchOptions } from "@classytic/repo-core/repository";
 import * as _$mongoose from "mongoose";
 import { ClientSession, Expression, Model, PipelineStage, PopulateOptions } from "mongoose";
-import { AggPaginationRequest, AggRequest, AggResult, ChangeEvent, FilterInput, KeysetAggPaginationResult, QueryOptions, RepoCapabilities, RepositoryBase, TenantPurgeOptions, TenantPurgeResult, TenantPurgeStrategy, WatchOptions } from "@classytic/repo-core/repository";
 import { UpdateInput } from "@classytic/repo-core/update";
 import { AggregatePaginationResult, KeysetPaginationResult, OffsetPaginationResult, OffsetPaginationResultCore } from "@classytic/repo-core/pagination";
 import { HttpError } from "@classytic/repo-core/errors";
 
+//#region src/actions/cascade-references.d.ts
+type PurgeMode = 'hard' | 'soft' | 'anonymize';
+/** Raw collection surface — a native MongoDB `Collection` or a Mongoose `Model`. */
+interface CollectionRWLike {
+  readonly collectionName?: string;
+  deleteMany(filter: Record<string, unknown>): Promise<{
+    deletedCount?: number;
+  }>;
+  updateMany(filter: Record<string, unknown>, update: Record<string, unknown>): Promise<{
+    modifiedCount?: number;
+  }>;
+}
+/** Repository surface for the policy-preserving path (matches `createMongoPurgePort`). */
+interface PurgeableRepoLike {
+  readonly Model: {
+    readonly modelName?: string;
+  };
+  deleteMany(filter: Record<string, unknown>, options?: Record<string, unknown>): Promise<unknown>;
+  updateMany(filter: Record<string, unknown>, data: Record<string, unknown>, options?: Record<string, unknown>): Promise<unknown>;
+}
+interface ReferenceRelation {
+  /** Policy-preserving target — a mongokit Repository (chunked via repo-core). */
+  repo?: PurgeableRepoLike;
+  /** Raw target — a collection with no Repository (e.g. a Better Auth table). */
+  collection?: CollectionRWLike;
+  /** Field on the target holding the reference id. */
+  field: string;
+  /** Override the call-level `mode` for this relation. */
+  mode?: PurgeMode;
+  /** `$set` patch applied when the resolved mode is `'anonymize'`. */
+  anonymizeFields?: Record<string, unknown>;
+  /** Soft-delete field names (default `'deleted'` / `'deletedAt'`). */
+  softDeletedField?: string;
+  softDeletedAtField?: string;
+}
+interface CascadePurgeReferencesOptions {
+  /** The value every relation's `field` is matched against (usually an id). */
+  value: unknown;
+  /** Targets to purge. */
+  relations: ReferenceRelation[];
+  /** Default mode for relations without an override. Default `'hard'`. */
+  mode?: PurgeMode;
+  /** Also match the ObjectId/hex variant of `value`. Default `true`. */
+  matchIdVariants?: boolean;
+  /** Run relations concurrently. Default `true`. */
+  parallel?: boolean;
+  /** Chunk size for repo-routed relations. Default `1000`. */
+  batchSize?: number;
+  session?: ClientSession;
+}
+interface ReferencePurgeResult {
+  /** Model or collection name. */
+  target: string;
+  field: string;
+  mode: PurgeMode;
+  /** Rows deleted (hard) or modified (soft / anonymize). */
+  affected: number;
+  ok: boolean;
+  error?: string;
+}
+/**
+ * Purge every relation that references `value`. Returns a per-relation report
+ * (never rejects for in-strategy errors). Pass arrays/objects as actual values.
+ *
+ * @example Better Auth user-delete cleanup (raw collections, hard delete):
+ * ```ts
+ * await cascadePurgeReferences({
+ *   value: userId,
+ *   relations: [
+ *     { collection: db.collection('downloadgrants'), field: 'customerId' },
+ *     { collection: db.collection('enrollments'),    field: 'customerId' },
+ *     { collection: db.collection('member'),         field: 'userId' },
+ *   ],
+ * });
+ * ```
+ */
+declare function cascadePurgeReferences(options: CascadePurgeReferencesOptions): Promise<ReferencePurgeResult[]>;
+//#endregion
 //#region src/capabilities.d.ts
 declare const MONGOKIT_CAPABILITIES: RepoCapabilities;
 //#endregion
@@ -2429,4 +2507,4 @@ declare function createOptionsExtractor<TCtx extends Record<string, unknown>>(fi
  */
 declare function systemContext(extra?: SessionOptions): SessionOptions;
 //#endregion
-export { ALL_OPERATIONS, type AggregateHelpersMethods, type AggregateOptions, type AggregatePaginationOptions, AggregationBuilder, type AllPluginMethods, type AnyDocument, type AnyModel, type AuditConfig, type AuditEntry, type AuditOperation, type AuditQueryOptions, type AuditQueryResult, type AuditTrailMethods, type AuditTrailOptions, AuditTrailQuery, type BasePaginationOptions, type BatchOperationsMethods, type BulkWriteResult, type CacheAdapter, type CacheOperationOptions, type CacheOptions, type CacheableOptions, type CascadeOptions, type CascadeRelation, type CollationOptions, type CreateInput, type CreateOptions, type CreateRepositoryConfig, type CursorPayload, type CustomIdOptions, type DateSequentialIdOptions, type DecodedCursor, type DeepPartial, type DeleteResult, type DocField, type ElasticSearchOptions, type EventHandlers, type EventPayload, type EventPhase, type FieldPreset, type FieldType, type FilterQuery, type FindOneAndUpdateOptions, type GroupResult, HOOK_PRIORITY, type HookMode, type IController, type IControllerResponse, type IRequestContext, type IResponseFormatter, type IdGenerator, type InferDocument, type InferRawDoc, type KeysOfType, type KeysetPaginationOptions, type LeaseMethods, type LeasePluginOptions, type Logger, LookupBuilder, type LookupOptions, type LookupPopulateOptions, type LookupPopulateResult, MONGOKIT_CAPABILITIES, MUTATING_OPERATIONS, type Middleware, type MiddlewareContext, type MinMaxResult, type MinimalRepoView, type MongoOperationsMethods, type MongoOperatorUpdate, type MultiTenantOptions, type NonNullableFields, OP_REGISTRY, type ObjectId, type ObservabilityOptions, type OffsetPaginationOptions, type OperationDescriptor, type OperationMetric, type OperationOptions, type PaginationConfig, PaginationEngine, type ParsedQuery, type PartialBy, type Plugin, type PluginFunction, type PluginType, type PolicyKey, type PopulateOption, type PopulateSpec, type PrefixedIdOptions, type PrioritizedHook, QueryParser, type QueryParserOptions, READ_OPERATIONS, type ReadOptions, type ReadPreferenceType, Repository, Repository as default, type RepositoryCacheHandle, type RepositoryCachePluginOptions, type RepositoryContext, type RepositoryEvent, type RepositoryInstance, type RepositoryOperation, type RepositoryOptions, type RequiredBy, type SchemaLike, type SearchMode, type SelectSpec, type SequentialIdOptions, type SessionOptions, type SoftDeleteFilterMode, type SoftDeleteMethods, type SoftDeleteOptions, type SoftDeleteRepository, type SortDirection, type SortSpec, type Strict, type SubdocumentMethods, type TenantContext, type TenantStore, type UpdateManyResult, type UpdateOptions, type UpdatePatch, type UpdateWithValidationResult, type UserContext, type ValidationChainOptions, type ValidatorDefinition, type ValueType, type WithPlugins, type WithTransactionOptions, index_d_exports as actions, adminBypass, aggregateHelpersPlugin, auditLogPlugin, auditTrailPlugin, autoInject, batchOperationsPlugin, batchTransaction, blockIf, buildCrudSchemasFromModel, buildCrudSchemasFromMongooseSchema, cachePlugin, cascadePlugin, compileFilterToMongo, configureLogger, createError, createFieldPreset, createMemoryCache, createOptionsExtractor, createRepository, createTenantContext, customIdPlugin, dateSequentialId, elasticSearchPlugin, fieldFilterPlugin, filterResponseData, getFieldsForUser, getMongooseProjection, getNextSequence, immutableField, isDuplicateKeyError, isTransactionUnsupported, leasePlugin, methodRegistryPlugin, mongoOperationsPlugin, multiTenantPlugin, observabilityPlugin, operationsByPolicyKey, parseDuplicateKeyError, prefixedId, repoOptionsFromCtx, requireField, sequentialId, softDeletePlugin, subdocumentPlugin, systemContext, timestampPlugin, uniqueField, validationChainPlugin, withTransaction };
+export { ALL_OPERATIONS, type AggregateHelpersMethods, type AggregateOptions, type AggregatePaginationOptions, AggregationBuilder, type AllPluginMethods, type AnyDocument, type AnyModel, type AuditConfig, type AuditEntry, type AuditOperation, type AuditQueryOptions, type AuditQueryResult, type AuditTrailMethods, type AuditTrailOptions, AuditTrailQuery, type BasePaginationOptions, type BatchOperationsMethods, type BulkWriteResult, type CacheAdapter, type CacheOperationOptions, type CacheOptions, type CacheableOptions, type CascadeOptions, type CascadePurgeReferencesOptions, type CascadeRelation, type CollationOptions, type CollectionRWLike, type CreateInput, type CreateOptions, type CreateRepositoryConfig, type CursorPayload, type CustomIdOptions, type DateSequentialIdOptions, type DecodedCursor, type DeepPartial, type DeleteResult, type DocField, type ElasticSearchOptions, type EventHandlers, type EventPayload, type EventPhase, type FieldPreset, type FieldType, type FilterQuery, type FindOneAndUpdateOptions, type GroupResult, HOOK_PRIORITY, type HookMode, type IController, type IControllerResponse, type IRequestContext, type IResponseFormatter, type IdGenerator, type InferDocument, type InferRawDoc, type KeysOfType, type KeysetPaginationOptions, type LeaseMethods, type LeasePluginOptions, type Logger, LookupBuilder, type LookupOptions, type LookupPopulateOptions, type LookupPopulateResult, MONGOKIT_CAPABILITIES, MUTATING_OPERATIONS, type Middleware, type MiddlewareContext, type MinMaxResult, type MinimalRepoView, type MongoOperationsMethods, type MongoOperatorUpdate, type MultiTenantOptions, type NonNullableFields, OP_REGISTRY, type ObjectId, type ObservabilityOptions, type OffsetPaginationOptions, type OperationDescriptor, type OperationMetric, type OperationOptions, type PaginationConfig, PaginationEngine, type ParsedQuery, type PartialBy, type Plugin, type PluginFunction, type PluginType, type PolicyKey, type PopulateOption, type PopulateSpec, type PrefixedIdOptions, type PrioritizedHook, type PurgeMode, type PurgeableRepoLike, QueryParser, type QueryParserOptions, READ_OPERATIONS, type ReadOptions, type ReadPreferenceType, type ReferencePurgeResult, type ReferenceRelation, Repository, Repository as default, type RepositoryCacheHandle, type RepositoryCachePluginOptions, type RepositoryContext, type RepositoryEvent, type RepositoryInstance, type RepositoryOperation, type RepositoryOptions, type RequiredBy, type SchemaLike, type SearchMode, type SelectSpec, type SequentialIdOptions, type SessionOptions, type SoftDeleteFilterMode, type SoftDeleteMethods, type SoftDeleteOptions, type SoftDeleteRepository, type SortDirection, type SortSpec, type Strict, type SubdocumentMethods, type TenantContext, type TenantStore, type UpdateManyResult, type UpdateOptions, type UpdatePatch, type UpdateWithValidationResult, type UserContext, type ValidationChainOptions, type ValidatorDefinition, type ValueType, type WithPlugins, type WithTransactionOptions, index_d_exports as actions, adminBypass, aggregateHelpersPlugin, auditLogPlugin, auditTrailPlugin, autoInject, batchOperationsPlugin, batchTransaction, blockIf, buildCrudSchemasFromModel, buildCrudSchemasFromMongooseSchema, cachePlugin, cascadePlugin, cascadePurgeReferences, compileFilterToMongo, configureLogger, createError, createFieldPreset, createMemoryCache, createOptionsExtractor, createRepository, createTenantContext, customIdPlugin, dateSequentialId, elasticSearchPlugin, fieldFilterPlugin, filterResponseData, getFieldsForUser, getMongooseProjection, getNextSequence, idVariants, immutableField, isDuplicateKeyError, isTransactionUnsupported, leasePlugin, methodRegistryPlugin, mongoOperationsPlugin, multiTenantPlugin, observabilityPlugin, operationsByPolicyKey, parseDuplicateKeyError, prefixedId, repoOptionsFromCtx, requireField, sequentialId, softDeletePlugin, subdocumentPlugin, systemContext, timestampPlugin, uniqueField, validationChainPlugin, withTransaction };

package/dist/index.mjs

@@ -1,16 +1,147 @@
-import { b as LookupBuilder, x as compileFilterToMongo } from "./update-BXMnCvO6.mjs";
-import { n as warn, t as configureLogger } from "./logger-DprijP5h.mjs";
-import { n as isDuplicateKeyError, r as parseDuplicateKeyError, t as createError } from "./error-B00pI7dV.mjs";
+import { n as idVariants } from "./id-resolution-CnN0YA8t.mjs";
+import { a as withTransaction, c as MUTATING_OPERATIONS, d as operationsByPolicyKey, f as MONGOKIT_CAPABILITIES, i as isTransactionUnsupported, l as OP_REGISTRY, n as Repository, o as AggregationBuilder, p as createMongoPurgePort, r as batchTransaction, s as ALL_OPERATIONS, t as HOOK_PRIORITY, u as READ_OPERATIONS } from "./Repository-B01VW_fU.mjs";
+import { b as LookupBuilder, x as compileFilterToMongo } from "./update-CvCMv5Cl.mjs";
+import { n as warn, t as configureLogger } from "./logger-B8wf-Mtb.mjs";
+import { n as isDuplicateKeyError, r as parseDuplicateKeyError, t as createError } from "./error-BTeepSNL.mjs";
 import { t as actions_exports } from "./actions/index.mjs";
-import { a as withTransaction, c as MUTATING_OPERATIONS, d as operationsByPolicyKey, f as MONGOKIT_CAPABILITIES, i as isTransactionUnsupported, l as OP_REGISTRY, n as Repository, o as AggregationBuilder, r as batchTransaction, s as ALL_OPERATIONS, t as HOOK_PRIORITY, u as READ_OPERATIONS } from "./Repository-DE7D2QeS.mjs";
-import { A as auditLogPlugin, C as getNextSequence, D as batchOperationsPlugin, E as cachePlugin, O as AuditTrailQuery, S as dateSequentialId, T as sequentialId, _ as softDeletePlugin, a as uniqueField, b as methodRegistryPlugin, c as subdocumentPlugin, d as leasePlugin, f as fieldFilterPlugin, g as timestampPlugin, h as aggregateHelpersPlugin, i as requireField, k as auditTrailPlugin, l as observabilityPlugin, m as cascadePlugin, n as blockIf, o as validationChainPlugin, p as elasticSearchPlugin, r as immutableField, s as createTenantContext, t as autoInject, u as mongoOperationsPlugin, v as adminBypass, w as prefixedId, x as customIdPlugin, y as multiTenantPlugin } from "./validation-chain.plugin-Crl5nQAY.mjs";
-import { t as PaginationEngine } from "./PaginationEngine-0XXTW-9b.mjs";
+import { A as auditLogPlugin, C as getNextSequence, D as batchOperationsPlugin, E as cachePlugin, O as AuditTrailQuery, S as dateSequentialId, T as sequentialId, _ as softDeletePlugin, a as uniqueField, b as methodRegistryPlugin, c as subdocumentPlugin, d as leasePlugin, f as fieldFilterPlugin, g as timestampPlugin, h as aggregateHelpersPlugin, i as requireField, k as auditTrailPlugin, l as observabilityPlugin, m as cascadePlugin, n as blockIf, o as validationChainPlugin, p as elasticSearchPlugin, r as immutableField, s as createTenantContext, t as autoInject, u as mongoOperationsPlugin, v as adminBypass, w as prefixedId, x as customIdPlugin, y as multiTenantPlugin } from "./validation-chain.plugin-DJtC0KJ-.mjs";
+import { t as PaginationEngine } from "./PaginationEngine-BcvaXBQ-.mjs";
 import { isGeoOperator, parseGeoFilter } from "./query/primitives/geo.mjs";
 import { i as getMongooseProjection, n as filterResponseData, r as getFieldsForUser, t as createFieldPreset } from "./field-selection-CQW3WBiK.mjs";
 import { buildFieldTypeMap, coerceFieldValue, coerceHeuristic } from "./query/primitives/coercion.mjs";
 import { extractSchemaIndexes } from "./query/primitives/indexes.mjs";
-import { n as buildCrudSchemasFromMongooseSchema, r as createMemoryCache, t as buildCrudSchemasFromModel } from "./mongooseToJsonSchema-CMM2QHzd.mjs";
+import { n as buildCrudSchemasFromMongooseSchema, r as createMemoryCache, t as buildCrudSchemasFromModel } from "./mongooseToJsonSchema-CBEQmeEa.mjs";
+import { runChunkedPurge } from "@classytic/repo-core/repository";
 import { isControlParam } from "@classytic/repo-core/query-parser";
+//#region src/actions/cascade-references.ts
+/**
+* cascadePurgeReferences — imperative, multi-relation "purge by reference".
+*
+* Given a value (typically an id) and a set of relations (each a target +
+* the field that references the value), purge every matching row. The
+* imperative sibling of `cascadePlugin` (which is Repository-delete-EVENT
+* driven): use this when the delete happens OUTSIDE a mongokit Repository —
+* e.g. a Better Auth `user.delete` hook, where BA deletes its own `user` row
+* and the app must clean up its FK-referencing collections (Mongo has no
+* foreign-key cascades; SQL kits get this for free via `onDelete: 'cascade'`).
+*
+* Composition, not duplication:
+*   - **repo-routed** relations reuse repo-core's `runChunkedPurge` +
+*     `createMongoPurgePort` → chunking, soft/anonymize strategies, plugin
+*     hooks (audit / cache), and tenant-bypass all come from the existing
+*     layers. No purge logic is re-implemented here.
+*   - **collection-routed** relations hit a raw `Collection` (for BA-owned
+*     tables that have no Repository) with a direct deleteMany / updateMany.
+*   - id matching uses `idVariants` so a value stored as either a hex string
+*     or an ObjectId is caught.
+*
+* Never throws for in-strategy failures (mirrors `runChunkedPurge`): each
+* relation returns a `{ ok, error }` line so a partial failure doesn't abort
+* siblings and the caller can log/inspect the full report.
+*/
+function toStrategy(mode, rel) {
+	if (mode === "soft") return {
+		type: "soft",
+		deletedField: rel.softDeletedField,
+		deletedAtField: rel.softDeletedAtField
+	};
+	if (mode === "anonymize") return {
+		type: "anonymize",
+		fields: rel.anonymizeFields ?? {}
+	};
+	return { type: "hard" };
+}
+async function purgeRelation(rel, match, defaultMode, ctx) {
+	const mode = rel.mode ?? defaultMode;
+	const target = rel.repo ? rel.repo.Model?.modelName ?? "<repo>" : rel.collection?.collectionName ?? "<collection>";
+	if (!rel.repo && !rel.collection) return {
+		target: "<unrouted>",
+		field: rel.field,
+		mode,
+		affected: 0,
+		ok: false,
+		error: "relation needs `repo` or `collection`"
+	};
+	try {
+		if (rel.repo) {
+			const repo = rel.repo;
+			const port = createMongoPurgePort(repo, rel.field, match, ctx.session);
+			const r = await runChunkedPurge(toStrategy(mode, rel), { batchSize: ctx.batchSize ?? 1e3 }, port);
+			return {
+				target,
+				field: rel.field,
+				mode,
+				affected: r.processed,
+				ok: r.ok,
+				error: r.error?.message
+			};
+		}
+		const col = rel.collection;
+		const filter = { [rel.field]: match };
+		if (mode === "hard") {
+			const res = await col.deleteMany(filter);
+			return {
+				target,
+				field: rel.field,
+				mode,
+				affected: res.deletedCount ?? 0,
+				ok: true
+			};
+		}
+		const update = mode === "soft" ? { $set: {
+			[rel.softDeletedField ?? "deleted"]: true,
+			[rel.softDeletedAtField ?? "deletedAt"]: /* @__PURE__ */ new Date()
+		} } : { $set: rel.anonymizeFields ?? {} };
+		const res = await col.updateMany(filter, update);
+		return {
+			target,
+			field: rel.field,
+			mode,
+			affected: res.modifiedCount ?? 0,
+			ok: true
+		};
+	} catch (err) {
+		return {
+			target,
+			field: rel.field,
+			mode,
+			affected: 0,
+			ok: false,
+			error: err instanceof Error ? err.message : String(err)
+		};
+	}
+}
+/**
+* Purge every relation that references `value`. Returns a per-relation report
+* (never rejects for in-strategy errors). Pass arrays/objects as actual values.
+*
+* @example Better Auth user-delete cleanup (raw collections, hard delete):
+* ```ts
+* await cascadePurgeReferences({
+*   value: userId,
+*   relations: [
+*     { collection: db.collection('downloadgrants'), field: 'customerId' },
+*     { collection: db.collection('enrollments'),    field: 'customerId' },
+*     { collection: db.collection('member'),         field: 'userId' },
+*   ],
+* });
+* ```
+*/
+async function cascadePurgeReferences(options) {
+	const { value, relations, mode = "hard", matchIdVariants = true, parallel = true, session, batchSize } = options;
+	if (!relations?.length || value === void 0 || value === null) return [];
+	const variants = matchIdVariants ? idVariants(value) : [value];
+	const match = variants.length > 1 ? { $in: variants } : variants[0];
+	const ctx = {
+		session,
+		batchSize
+	};
+	if (parallel) return Promise.all(relations.map((rel) => purgeRelation(rel, match, mode, ctx)));
+	const out = [];
+	for (const rel of relations) out.push(await purgeRelation(rel, match, mode, ctx));
+	return out;
+}
+//#endregion
 //#region src/create-repository.ts
 function isLoggerAudit(value) {
 	const v = value;
@@ -1316,4 +1447,4 @@ function systemContext(extra) {
 //#region src/index.ts
 var src_default = Repository;
 //#endregion
-export { ALL_OPERATIONS, AggregationBuilder, AuditTrailQuery, HOOK_PRIORITY, LookupBuilder, MONGOKIT_CAPABILITIES, MUTATING_OPERATIONS, OP_REGISTRY, PaginationEngine, QueryParser, READ_OPERATIONS, Repository, actions_exports as actions, adminBypass, aggregateHelpersPlugin, auditLogPlugin, auditTrailPlugin, autoInject, batchOperationsPlugin, batchTransaction, blockIf, buildCrudSchemasFromModel, buildCrudSchemasFromMongooseSchema, cachePlugin, cascadePlugin, compileFilterToMongo, configureLogger, createError, createFieldPreset, createMemoryCache, createOptionsExtractor, createRepository, createTenantContext, customIdPlugin, dateSequentialId, src_default as default, elasticSearchPlugin, fieldFilterPlugin, filterResponseData, getFieldsForUser, getMongooseProjection, getNextSequence, immutableField, isDuplicateKeyError, isTransactionUnsupported, leasePlugin, methodRegistryPlugin, mongoOperationsPlugin, multiTenantPlugin, observabilityPlugin, operationsByPolicyKey, parseDuplicateKeyError, prefixedId, repoOptionsFromCtx, requireField, sequentialId, softDeletePlugin, subdocumentPlugin, systemContext, timestampPlugin, uniqueField, validationChainPlugin, withTransaction };
+export { ALL_OPERATIONS, AggregationBuilder, AuditTrailQuery, HOOK_PRIORITY, LookupBuilder, MONGOKIT_CAPABILITIES, MUTATING_OPERATIONS, OP_REGISTRY, PaginationEngine, QueryParser, READ_OPERATIONS, Repository, actions_exports as actions, adminBypass, aggregateHelpersPlugin, auditLogPlugin, auditTrailPlugin, autoInject, batchOperationsPlugin, batchTransaction, blockIf, buildCrudSchemasFromModel, buildCrudSchemasFromMongooseSchema, cachePlugin, cascadePlugin, cascadePurgeReferences, compileFilterToMongo, configureLogger, createError, createFieldPreset, createMemoryCache, createOptionsExtractor, createRepository, createTenantContext, customIdPlugin, dateSequentialId, src_default as default, elasticSearchPlugin, fieldFilterPlugin, filterResponseData, getFieldsForUser, getMongooseProjection, getNextSequence, idVariants, immutableField, isDuplicateKeyError, isTransactionUnsupported, leasePlugin, methodRegistryPlugin, mongoOperationsPlugin, multiTenantPlugin, observabilityPlugin, operationsByPolicyKey, parseDuplicateKeyError, prefixedId, repoOptionsFromCtx, requireField, sequentialId, softDeletePlugin, subdocumentPlugin, systemContext, timestampPlugin, uniqueField, validationChainPlugin, withTransaction };

package/dist/{mongooseToJsonSchema-GhvZUjRO.d.mts → mongooseToJsonSchema-BdQJU39w.d.mts}

@@ -1,4 +1,4 @@
-import { C as FieldPreset, gt as UserContext } from "./types-BWZILovv.mjs";
+import { C as FieldPreset, gt as UserContext } from "./types-CU3SEDbD.mjs";
 import mongoose, { Schema } from "mongoose";
 import { CacheAdapter } from "@classytic/repo-core/cache";
 import { CrudSchemas, SchemaBuilderOptions } from "@classytic/repo-core/schema";
@@ -139,6 +139,80 @@ declare function filterResponseData<T extends Record<string, unknown>>(data: T |
  */
 declare function createFieldPreset(config: Partial<FieldPreset>): FieldPreset;
 //#endregion
+//#region src/utils/id-resolution.d.ts
+/**
+ * ID Resolution Primitive
+ *
+ * Pure functions for detecting a Mongoose schema's _id type and validating
+ * id values against it. Used by Repository.getById to decide whether to
+ * run ObjectId validation (for ObjectId schemas) or skip it (for String /
+ * Number / UUID schemas).
+ *
+ * Also usable standalone — Arc controllers, custom repositories, migration
+ * scripts, or test harnesses can import these directly to make the same
+ * decision without depending on Repository.
+ *
+ * Design: no `this`, no Model, no DB calls. Only reads `schema.paths._id.instance`.
+ */
+/** Normalized _id type — covers the common Mongoose _id declarations */
+type IdType = 'objectid' | 'string' | 'number' | 'uuid' | 'unknown';
+/**
+ * Check if a Mongoose SchemaType `instance` string is an ObjectId variant.
+ * Mongoose 9.x uses `'ObjectId'`, older versions use `'ObjectID'`. This
+ * is the single source of truth — use it instead of inline
+ * `instance === 'ObjectId' || instance === 'ObjectID'` checks.
+ */
+declare function isObjectIdInstance(instance: string | undefined): boolean;
+/** Minimal structural type for schema introspection (decoupled from Mongoose version) */
+interface SchemaLike {
+  paths?: Record<string, {
+    instance?: string;
+  }>;
+}
+/**
+ * Detect the _id path type from a Mongoose schema.
+ *
+ * Returns 'objectid' as the safe default when:
+ *   - No schema is provided (mock models, test harnesses)
+ *   - The schema has no `paths._id` (auto-generated ObjectId)
+ *   - The instance string is unrecognized
+ *
+ * This safe-default means existing callers that don't set _id explicitly
+ * get the same ObjectId validation they always had — the behavioral change
+ * is strictly opt-in via schema declaration.
+ */
+declare function getSchemaIdType(schema?: SchemaLike | null): IdType;
+/**
+ * Validate an id value against a known _id type — WITHOUT hitting the DB.
+ *
+ * Returns `true` when the value is structurally valid for the given type.
+ * Returns `false` when it's definitely invalid (Repository should return
+ * 404 / null immediately rather than wasting a round-trip).
+ *
+ * For `'string'` and `'unknown'` types, validation is intentionally
+ * permissive: any truthy, non-empty value is accepted. The DB is the
+ * authority for whether the document exists — we only reject values that
+ * are structurally impossible (null, undefined, empty string).
+ */
+declare function isValidIdForType(id: unknown, idType: IdType): boolean;
+/**
+ * Return every form an id might be stored as, for use in a `{ field: { $in: ... } }`
+ * match. The Better Auth mongo adapter (and mixed mongoose/overlay writes) store
+ * the same logical id as either a hex STRING or an ObjectId depending on the code
+ * path, so a query keyed on one form silently misses rows stored as the other.
+ *
+ * - A 12-byte / 24-hex string that `ObjectId.isValid` accepts → `[hex, ObjectId(hex)]`.
+ * - Anything else (non-ObjectId string, number, an ObjectId instance, …) → `[id]`.
+ *
+ * Over-matching is harmless — the extra `$in` term can't match a non-existent doc.
+ * Replaces the `Types.ObjectId.isValid(id) ? [id, new Types.ObjectId(id)] : [id]`
+ * one-liner that tends to get re-implemented at every call site.
+ *
+ * @example
+ * await col.deleteMany({ customerId: { $in: idVariants(userId) } });
+ */
+declare function idVariants(id: unknown): unknown[];
+//#endregion
 //#region src/utils/logger.d.ts
 /**
  * Internal Logger
@@ -217,4 +291,4 @@ declare function buildCrudSchemasFromMongooseSchema(mongooseSchema: Schema, opti
  */
 declare function buildCrudSchemasFromModel(mongooseModel: mongoose.Model<unknown>, options?: SchemaBuilderOptions): CrudSchemasFramework;
 //#endregion
-export { createFieldPreset as a, getMongooseProjection as c, parseDuplicateKeyError as d, configureLogger as i, createError as l, buildCrudSchemasFromMongooseSchema as n, filterResponseData as o, createMemoryCache as r, getFieldsForUser as s, buildCrudSchemasFromModel as t, isDuplicateKeyError as u };
+export { IdType as a, isObjectIdInstance as c, filterResponseData as d, getFieldsForUser as f, parseDuplicateKeyError as g, isDuplicateKeyError as h, configureLogger as i, isValidIdForType as l, createError as m, buildCrudSchemasFromMongooseSchema as n, getSchemaIdType as o, getMongooseProjection as p, createMemoryCache as r, idVariants as s, buildCrudSchemasFromModel as t, createFieldPreset as u };

package/dist/{mongooseToJsonSchema-CMM2QHzd.mjs → mongooseToJsonSchema-CBEQmeEa.mjs}

@@ -1,4 +1,4 @@
-import { n as isObjectIdInstance } from "./id-resolution-DduoO4LI.mjs";
+import { r as isObjectIdInstance } from "./id-resolution-CnN0YA8t.mjs";
 import mongoose from "mongoose";
 import { applyFieldRules, collectFieldsToOmit } from "@classytic/repo-core/schema";
 //#region src/utils/memory-cache.ts

package/dist/pagination/PaginationEngine.d.mts

@@ -1,4 +1,4 @@
-import { A as KeysetPaginationOptions, U as PaginationConfig, V as OffsetPaginationOptions, i as AnyDocument, n as AggregatePaginationOptions } from "../types-BWZILovv.mjs";
+import { A as KeysetPaginationOptions, U as PaginationConfig, V as OffsetPaginationOptions, i as AnyDocument, n as AggregatePaginationOptions } from "../types-CU3SEDbD.mjs";
 import { Model } from "mongoose";
 import { AggregatePaginationResult, KeysetPaginationResult, OffsetPaginationResult } from "@classytic/repo-core/pagination";
 

package/dist/pagination/PaginationEngine.mjs

@@ -1,2 +1,2 @@
-import { t as PaginationEngine } from "../PaginationEngine-0XXTW-9b.mjs";
+import { t as PaginationEngine } from "../PaginationEngine-BcvaXBQ-.mjs";
 export { PaginationEngine };

package/dist/plugins/index.d.mts

@@ -1,2 +1,18 @@
-import { $ as AuditEntry, B as IdGenerator, C as LeasePluginOptions, D as elasticSearchPlugin, E as ElasticSearchOptions, F as MultiTenantOptions, G as getNextSequence, H as SequentialIdOptions, J as CacheAdapter, K as prefixedId, L as multiTenantPlugin, M as auditLogPlugin, N as AggregateHelpersMethods, O as cascadePlugin, P as aggregateHelpersPlugin, Q as cachePlugin, R as CustomIdOptions, S as LeaseMethods, T as fieldFilterPlugin, U as customIdPlugin, V as PrefixedIdOptions, W as dateSequentialId, X as RepositoryCacheHandle, Y as CacheOptions, Z as RepositoryCachePluginOptions, _ as observabilityPlugin, a as uniqueField, at as AuditTrailQuery, b as MethodRegistryRepository, c as TenantContext, d as SubdocumentMethods, et as AuditOperation, f as subdocumentPlugin, g as OperationMetric, h as ObservabilityOptions, i as requireField, it as AuditTrailOptions, j as batchOperationsPlugin, k as BatchOperationsMethods, l as TenantStore, m as softDeletePlugin, n as blockIf, nt as AuditQueryResult, o as validationChainPlugin, ot as auditTrailPlugin, p as SoftDeleteMethods, q as sequentialId, r as immutableField, rt as AuditTrailMethods, s as timestampPlugin, t as autoInject, tt as AuditQueryOptions, u as createTenantContext, v as MongoOperationsMethods, w as leasePlugin, x as methodRegistryPlugin, y as mongoOperationsPlugin, z as DateSequentialIdOptions } from "../validation-chain.plugin-Iee2_puD.mjs";
-export { type AggregateHelpersMethods, type AuditEntry, type AuditOperation, type AuditQueryOptions, type AuditQueryResult, type AuditTrailMethods, type AuditTrailOptions, AuditTrailQuery, type BatchOperationsMethods, type CacheAdapter, type CacheOptions, type CustomIdOptions, type DateSequentialIdOptions, type ElasticSearchOptions, type IdGenerator, type LeaseMethods, type LeasePluginOptions, type MethodRegistryRepository, type MongoOperationsMethods, type MultiTenantOptions, type ObservabilityOptions, type OperationMetric, type PrefixedIdOptions, type RepositoryCacheHandle, type RepositoryCachePluginOptions, type SequentialIdOptions, type SoftDeleteMethods, type SubdocumentMethods, type TenantContext, type TenantStore, aggregateHelpersPlugin, auditLogPlugin, auditTrailPlugin, autoInject, batchOperationsPlugin, blockIf, cachePlugin, cascadePlugin, createTenantContext, customIdPlugin, dateSequentialId, elasticSearchPlugin, fieldFilterPlugin, getNextSequence, immutableField, leasePlugin, methodRegistryPlugin, mongoOperationsPlugin, multiTenantPlugin, observabilityPlugin, prefixedId, requireField, sequentialId, softDeletePlugin, subdocumentPlugin, timestampPlugin, uniqueField, validationChainPlugin };
+import { G as Plugin } from "../types-CU3SEDbD.mjs";
+import { $ as AuditEntry, B as IdGenerator, C as LeasePluginOptions, D as elasticSearchPlugin, E as ElasticSearchOptions, F as MultiTenantOptions, G as getNextSequence, H as SequentialIdOptions, J as CacheAdapter, K as prefixedId, L as multiTenantPlugin, M as auditLogPlugin, N as AggregateHelpersMethods, O as cascadePlugin, P as aggregateHelpersPlugin, Q as cachePlugin, R as CustomIdOptions, S as LeaseMethods, T as fieldFilterPlugin, U as customIdPlugin, V as PrefixedIdOptions, W as dateSequentialId, X as RepositoryCacheHandle, Y as CacheOptions, Z as RepositoryCachePluginOptions, _ as observabilityPlugin, a as uniqueField, at as AuditTrailQuery, b as MethodRegistryRepository, c as TenantContext, d as SubdocumentMethods, et as AuditOperation, f as subdocumentPlugin, g as OperationMetric, h as ObservabilityOptions, i as requireField, it as AuditTrailOptions, j as batchOperationsPlugin, k as BatchOperationsMethods, l as TenantStore, m as softDeletePlugin, n as blockIf, nt as AuditQueryResult, o as validationChainPlugin, ot as auditTrailPlugin, p as SoftDeleteMethods, q as sequentialId, r as immutableField, rt as AuditTrailMethods, s as timestampPlugin, t as autoInject, tt as AuditQueryOptions, u as createTenantContext, v as MongoOperationsMethods, w as leasePlugin, x as methodRegistryPlugin, y as mongoOperationsPlugin, z as DateSequentialIdOptions } from "../validation-chain.plugin-BpMfy18N.mjs";
+import { ChangeLogStore } from "@classytic/repo-core/sync";
+
+//#region src/plugins/change-log.plugin.d.ts
+interface ChangeLogPluginOptions {
+  /** Durable feed implementing the repo-core/sync contract. */
+  store: ChangeLogStore;
+  /** Logical scope for entries (resource name a client subscribes to). */
+  scope: string;
+  /** Tenant partition field on docs/context. Default `organizationId`. */
+  tenantField?: string;
+  /** Monotonic per-doc version field. Default `version` (kernel convention). */
+  versionField?: string;
+}
+declare function changeLogPlugin(options: ChangeLogPluginOptions): Plugin;
+//#endregion
+export { type AggregateHelpersMethods, type AuditEntry, type AuditOperation, type AuditQueryOptions, type AuditQueryResult, type AuditTrailMethods, type AuditTrailOptions, AuditTrailQuery, type BatchOperationsMethods, type CacheAdapter, type CacheOptions, type ChangeLogPluginOptions, type CustomIdOptions, type DateSequentialIdOptions, type ElasticSearchOptions, type IdGenerator, type LeaseMethods, type LeasePluginOptions, type MethodRegistryRepository, type MongoOperationsMethods, type MultiTenantOptions, type ObservabilityOptions, type OperationMetric, type PrefixedIdOptions, type RepositoryCacheHandle, type RepositoryCachePluginOptions, type SequentialIdOptions, type SoftDeleteMethods, type SubdocumentMethods, type TenantContext, type TenantStore, aggregateHelpersPlugin, auditLogPlugin, auditTrailPlugin, autoInject, batchOperationsPlugin, blockIf, cachePlugin, cascadePlugin, changeLogPlugin, createTenantContext, customIdPlugin, dateSequentialId, elasticSearchPlugin, fieldFilterPlugin, getNextSequence, immutableField, leasePlugin, methodRegistryPlugin, mongoOperationsPlugin, multiTenantPlugin, observabilityPlugin, prefixedId, requireField, sequentialId, softDeletePlugin, subdocumentPlugin, timestampPlugin, uniqueField, validationChainPlugin };

package/dist/plugins/index.mjs

@@ -1,2 +1,72 @@
-import { A as auditLogPlugin, C as getNextSequence, D as batchOperationsPlugin, E as cachePlugin, O as AuditTrailQuery, S as dateSequentialId, T as sequentialId, _ as softDeletePlugin, a as uniqueField, b as methodRegistryPlugin, c as subdocumentPlugin, d as leasePlugin, f as fieldFilterPlugin, g as timestampPlugin, h as aggregateHelpersPlugin, i as requireField, k as auditTrailPlugin, l as observabilityPlugin, m as cascadePlugin, n as blockIf, o as validationChainPlugin, p as elasticSearchPlugin, r as immutableField, s as createTenantContext, t as autoInject, u as mongoOperationsPlugin, w as prefixedId, x as customIdPlugin, y as multiTenantPlugin } from "../validation-chain.plugin-Crl5nQAY.mjs";
-export { AuditTrailQuery, aggregateHelpersPlugin, auditLogPlugin, auditTrailPlugin, autoInject, batchOperationsPlugin, blockIf, cachePlugin, cascadePlugin, createTenantContext, customIdPlugin, dateSequentialId, elasticSearchPlugin, fieldFilterPlugin, getNextSequence, immutableField, leasePlugin, methodRegistryPlugin, mongoOperationsPlugin, multiTenantPlugin, observabilityPlugin, prefixedId, requireField, sequentialId, softDeletePlugin, subdocumentPlugin, timestampPlugin, uniqueField, validationChainPlugin };
+import { A as auditLogPlugin, C as getNextSequence, D as batchOperationsPlugin, E as cachePlugin, O as AuditTrailQuery, S as dateSequentialId, T as sequentialId, _ as softDeletePlugin, a as uniqueField, b as methodRegistryPlugin, c as subdocumentPlugin, d as leasePlugin, f as fieldFilterPlugin, g as timestampPlugin, h as aggregateHelpersPlugin, i as requireField, k as auditTrailPlugin, l as observabilityPlugin, m as cascadePlugin, n as blockIf, o as validationChainPlugin, p as elasticSearchPlugin, r as immutableField, s as createTenantContext, t as autoInject, u as mongoOperationsPlugin, w as prefixedId, x as customIdPlugin, y as multiTenantPlugin } from "../validation-chain.plugin-DJtC0KJ-.mjs";
+//#region src/plugins/change-log.plugin.ts
+const PLUGIN_NAME = "changeLog";
+function isSkipped(context) {
+	const list = context.skipPlugins;
+	return Array.isArray(list) && list.includes(PLUGIN_NAME);
+}
+function changeLogPlugin(options) {
+	const { store, scope, tenantField = "organizationId", versionField = "version" } = options;
+	const toRecord = (doc) => {
+		if (!doc || typeof doc !== "object") return null;
+		const d = doc;
+		return typeof d.toObject === "function" ? d.toObject() : doc;
+	};
+	const versionOf = (doc) => {
+		const v = doc[versionField] ?? doc.__v;
+		if (typeof v === "number") return v;
+		const updatedAt = doc.updatedAt;
+		return updatedAt instanceof Date ? updatedAt.getTime() : 0;
+	};
+	const tenantOf = (doc, context) => {
+		const raw = doc[tenantField] ?? context.organizationId;
+		return raw === void 0 || raw === null ? void 0 : String(raw);
+	};
+	const capture = async (op, doc, context) => {
+		const record = toRecord(doc);
+		if (!record || record._id === void 0) return;
+		const tenantId = tenantOf(record, context);
+		await store.append({
+			scope,
+			docId: String(record._id),
+			op,
+			version: versionOf(record),
+			...op === "upsert" ? { doc: record } : {},
+			...tenantId !== void 0 ? { tenantId } : {}
+		}, context.session !== void 0 ? { session: context.session } : void 0);
+	};
+	return {
+		name: PLUGIN_NAME,
+		apply(repo) {
+			repo.on("after:create", async ({ context, result }) => {
+				if (isSkipped(context) || !result) return;
+				await capture("upsert", result, context);
+			});
+			repo.on("after:createMany", async ({ context, result }) => {
+				if (isSkipped(context) || !Array.isArray(result)) return;
+				for (const doc of result) await capture("upsert", doc, context);
+			});
+			repo.on("after:update", async ({ context, result }) => {
+				if (isSkipped(context) || !result) return;
+				await capture("upsert", result, context);
+			});
+			repo.on("after:delete", async ({ context, result }) => {
+				if (isSkipped(context) || !result) return;
+				const summary = result;
+				const ctxId = context.id;
+				const docId = summary.id ?? ctxId;
+				if (docId === void 0 || docId === null) return;
+				const tenantRaw = context.organizationId;
+				await store.append({
+					scope,
+					docId: String(docId),
+					op: "delete",
+					version: 0,
+					...tenantRaw !== void 0 && tenantRaw !== null ? { tenantId: String(tenantRaw) } : {}
+				}, context.session !== void 0 ? { session: context.session } : void 0);
+			});
+		}
+	};
+}
+//#endregion
+export { AuditTrailQuery, aggregateHelpersPlugin, auditLogPlugin, auditTrailPlugin, autoInject, batchOperationsPlugin, blockIf, cachePlugin, cascadePlugin, changeLogPlugin, createTenantContext, customIdPlugin, dateSequentialId, elasticSearchPlugin, fieldFilterPlugin, getNextSequence, immutableField, leasePlugin, methodRegistryPlugin, mongoOperationsPlugin, multiTenantPlugin, observabilityPlugin, prefixedId, requireField, sequentialId, softDeletePlugin, subdocumentPlugin, timestampPlugin, uniqueField, validationChainPlugin };

package/dist/query/primitives/coercion.mjs

@@ -1,4 +1,4 @@
-import { n as isObjectIdInstance } from "../../id-resolution-DduoO4LI.mjs";
+import { r as isObjectIdInstance } from "../../id-resolution-CnN0YA8t.mjs";
 import mongoose from "mongoose";
 //#region src/query/primitives/coercion.ts
 /**

package/dist/{types-BWZILovv.d.mts → types-CU3SEDbD.d.mts}

@@ -1,10 +1,10 @@
-import * as _$_classytic_repo_core_filter0 from "@classytic/repo-core/filter";
-import { Filter } from "@classytic/repo-core/filter";
+import * as _$_classytic_repo_core_repository0 from "@classytic/repo-core/repository";
+import { DeleteManyResult, DeleteResult, LookupPopulateResult, RepositoryBase, UpdateManyResult } from "@classytic/repo-core/repository";
 import * as _$mongoose from "mongoose";
 import { Document, Model, PipelineStage, PopulateOptions, Types } from "mongoose";
+import * as _$_classytic_repo_core_filter0 from "@classytic/repo-core/filter";
+import { Filter } from "@classytic/repo-core/filter";
 import * as _$_classytic_repo_core_cache0 from "@classytic/repo-core/cache";
-import * as _$_classytic_repo_core_repository0 from "@classytic/repo-core/repository";
-import { DeleteManyResult, DeleteResult, LookupPopulateResult, RepositoryBase, UpdateManyResult } from "@classytic/repo-core/repository";
 import * as _$_classytic_repo_core_schema0 from "@classytic/repo-core/schema";
 import { ValidationResult } from "@classytic/repo-core/schema";
 import * as _$_classytic_repo_core_events0 from "@classytic/repo-core/events";

package/dist/{update-BXMnCvO6.mjs → update-CvCMv5Cl.mjs}

@@ -1,6 +1,6 @@
 import { t as __exportAll } from "./chunk-CfYAbeIz.mjs";
-import { n as warn } from "./logger-DprijP5h.mjs";
-import { t as createError } from "./error-B00pI7dV.mjs";
+import { n as warn } from "./logger-B8wf-Mtb.mjs";
+import { t as createError } from "./error-BTeepSNL.mjs";
 import { isFilter } from "@classytic/repo-core/filter";
 //#region src/filter/compile.ts
 /**

package/dist/utils/index.d.mts

@@ -1,60 +1,2 @@
-import { a as createFieldPreset, c as getMongooseProjection, i as configureLogger, l as createError, n as buildCrudSchemasFromMongooseSchema, o as filterResponseData, r as createMemoryCache, s as getFieldsForUser, t as buildCrudSchemasFromModel } from "../mongooseToJsonSchema-GhvZUjRO.mjs";
-
-//#region src/utils/id-resolution.d.ts
-/**
- * ID Resolution Primitive
- *
- * Pure functions for detecting a Mongoose schema's _id type and validating
- * id values against it. Used by Repository.getById to decide whether to
- * run ObjectId validation (for ObjectId schemas) or skip it (for String /
- * Number / UUID schemas).
- *
- * Also usable standalone — Arc controllers, custom repositories, migration
- * scripts, or test harnesses can import these directly to make the same
- * decision without depending on Repository.
- *
- * Design: no `this`, no Model, no DB calls. Only reads `schema.paths._id.instance`.
- */
-/** Normalized _id type — covers the common Mongoose _id declarations */
-type IdType = 'objectid' | 'string' | 'number' | 'uuid' | 'unknown';
-/**
- * Check if a Mongoose SchemaType `instance` string is an ObjectId variant.
- * Mongoose 9.x uses `'ObjectId'`, older versions use `'ObjectID'`. This
- * is the single source of truth — use it instead of inline
- * `instance === 'ObjectId' || instance === 'ObjectID'` checks.
- */
-declare function isObjectIdInstance(instance: string | undefined): boolean;
-/** Minimal structural type for schema introspection (decoupled from Mongoose version) */
-interface SchemaLike {
-  paths?: Record<string, {
-    instance?: string;
-  }>;
-}
-/**
- * Detect the _id path type from a Mongoose schema.
- *
- * Returns 'objectid' as the safe default when:
- *   - No schema is provided (mock models, test harnesses)
- *   - The schema has no `paths._id` (auto-generated ObjectId)
- *   - The instance string is unrecognized
- *
- * This safe-default means existing callers that don't set _id explicitly
- * get the same ObjectId validation they always had — the behavioral change
- * is strictly opt-in via schema declaration.
- */
-declare function getSchemaIdType(schema?: SchemaLike | null): IdType;
-/**
- * Validate an id value against a known _id type — WITHOUT hitting the DB.
- *
- * Returns `true` when the value is structurally valid for the given type.
- * Returns `false` when it's definitely invalid (Repository should return
- * 404 / null immediately rather than wasting a round-trip).
- *
- * For `'string'` and `'unknown'` types, validation is intentionally
- * permissive: any truthy, non-empty value is accepted. The DB is the
- * authority for whether the document exists — we only reject values that
- * are structurally impossible (null, undefined, empty string).
- */
-declare function isValidIdForType(id: unknown, idType: IdType): boolean;
-//#endregion
+import { a as IdType, c as isObjectIdInstance, d as filterResponseData, f as getFieldsForUser, i as configureLogger, l as isValidIdForType, m as createError, n as buildCrudSchemasFromMongooseSchema, o as getSchemaIdType, p as getMongooseProjection, r as createMemoryCache, t as buildCrudSchemasFromModel, u as createFieldPreset } from "../mongooseToJsonSchema-BdQJU39w.mjs";
 export { type IdType, buildCrudSchemasFromModel, buildCrudSchemasFromMongooseSchema, configureLogger, createError, createFieldPreset, createMemoryCache, filterResponseData, getFieldsForUser, getMongooseProjection, getSchemaIdType, isObjectIdInstance, isValidIdForType };

package/dist/utils/index.mjs

@@ -1,6 +1,6 @@
-import { t as configureLogger } from "../logger-DprijP5h.mjs";
-import { t as createError } from "../error-B00pI7dV.mjs";
-import { n as isObjectIdInstance, r as isValidIdForType, t as getSchemaIdType } from "../id-resolution-DduoO4LI.mjs";
+import { i as isValidIdForType, r as isObjectIdInstance, t as getSchemaIdType } from "../id-resolution-CnN0YA8t.mjs";
+import { t as configureLogger } from "../logger-B8wf-Mtb.mjs";
+import { t as createError } from "../error-BTeepSNL.mjs";
 import { i as getMongooseProjection, n as filterResponseData, r as getFieldsForUser, t as createFieldPreset } from "../field-selection-CQW3WBiK.mjs";
-import { n as buildCrudSchemasFromMongooseSchema, r as createMemoryCache, t as buildCrudSchemasFromModel } from "../mongooseToJsonSchema-CMM2QHzd.mjs";
+import { n as buildCrudSchemasFromMongooseSchema, r as createMemoryCache, t as buildCrudSchemasFromModel } from "../mongooseToJsonSchema-CBEQmeEa.mjs";
 export { buildCrudSchemasFromModel, buildCrudSchemasFromMongooseSchema, configureLogger, createError, createFieldPreset, createMemoryCache, filterResponseData, getFieldsForUser, getMongooseProjection, getSchemaIdType, isObjectIdInstance, isValidIdForType };

package/dist/{validation-chain.plugin-Iee2_puD.d.mts → validation-chain.plugin-BpMfy18N.d.mts}

@@ -1,7 +1,7 @@
-import { B as ObjectId, C as FieldPreset, G as Plugin, J as PopulateSpec, Q as RepositoryContext, _t as ValidationChainOptions, et as RepositoryInstance, it as SelectSpec, j as Logger, l as CascadeOptions, st as SoftDeleteOptions, ut as SortSpec, vt as ValidatorDefinition } from "./types-BWZILovv.mjs";
+import { B as ObjectId, C as FieldPreset, G as Plugin, J as PopulateSpec, Q as RepositoryContext, _t as ValidationChainOptions, et as RepositoryInstance, it as SelectSpec, j as Logger, l as CascadeOptions, st as SoftDeleteOptions, ut as SortSpec, vt as ValidatorDefinition } from "./types-CU3SEDbD.mjs";
+import { BulkWriteResult } from "@classytic/repo-core/repository";
 import mongoose from "mongoose";
 import { CacheAdapter as CacheAdapter$1, CacheOptions, RepositoryCacheHandle, RepositoryCachePluginOptions, cachePlugin } from "@classytic/repo-core/cache";
-import { BulkWriteResult } from "@classytic/repo-core/repository";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { OffsetPaginationResult } from "@classytic/repo-core/pagination";
 import { TenantConfig } from "@classytic/repo-core/tenant";

package/dist/{validation-chain.plugin-Crl5nQAY.mjs → validation-chain.plugin-DJtC0KJ-.mjs}

@@ -1,12 +1,12 @@
-import { _ as upsert } from "./update-BXMnCvO6.mjs";
-import { n as warn } from "./logger-DprijP5h.mjs";
-import { t as createError } from "./error-B00pI7dV.mjs";
-import { l as OP_REGISTRY, s as ALL_OPERATIONS, t as HOOK_PRIORITY } from "./Repository-DE7D2QeS.mjs";
+import { l as OP_REGISTRY, s as ALL_OPERATIONS, t as HOOK_PRIORITY } from "./Repository-B01VW_fU.mjs";
+import { _ as upsert } from "./update-CvCMv5Cl.mjs";
+import { n as warn } from "./logger-B8wf-Mtb.mjs";
+import { t as createError } from "./error-BTeepSNL.mjs";
 import { r as getFieldsForUser } from "./field-selection-CQW3WBiK.mjs";
+import { throwIfAborted, withRetry } from "@classytic/repo-core/repository";
 import mongoose from "mongoose";
 import { cachePlugin } from "@classytic/repo-core/cache";
 import { adminBypass, payloadHasTenantField } from "@classytic/repo-core/plugins";
-import { throwIfAborted, withRetry } from "@classytic/repo-core/repository";
 import { AsyncLocalStorage } from "node:async_hooks";
 //#region src/plugins/audit-log.plugin.ts
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@classytic/mongokit",
-  "version": "3.16.2",
+  "version": "3.18.0",
   "description": "Production-grade MongoDB repositories - smart pagination, events, and plugins. Built on @classytic/repo-core.",
   "type": "module",
   "sideEffects": false,
@@ -105,7 +105,7 @@
   },
   "homepage": "https://github.com/classytic/mongokit#readme",
   "peerDependencies": {
-    "@classytic/repo-core": ">=0.6.0",
+    "@classytic/repo-core": ">=0.7.0",
     "better-auth": ">=1.6.0",
     "mongoose": ">=9.4.1"
   },
@@ -117,6 +117,9 @@
   "engines": {
     "node": ">=22"
   },
+  "publishConfig": {
+    "access": "public"
+  },
   "scripts": {
     "build": "tsdown",
     "dev": "tsdown --watch",
@@ -138,7 +141,7 @@
     "publish:dry": "npm publish --dry-run --access public",
     "publish:npm": "npm publish --access public",
     "release:tag": "node -e \"require('child_process').execSync('npm run push -- v'+require('./package.json').version,{stdio:'inherit'})\"",
-    "release": "npm run push -- main && npm run release:tag && npm publish",
+    "release": "npm run push -- main && npm run release:tag && npm publish --access public",
     "release:patch": "npm version patch && npm run release",
     "release:minor": "npm version minor && npm run release",
     "release:major": "npm version major && npm run release"
@@ -149,7 +152,7 @@
     "@better-auth/mongo-adapter": "^1.6.22",
     "@biomejs/biome": "^2.4.10",
     "@classytic/dev-tools": "^0.2.0",
-    "@classytic/repo-core": "0.6.0",
+    "@classytic/repo-core": "^0.7.0",
     "@types/node": "^22.0.0",
     "@vitest/coverage-v8": "^4.1.4",
     "ajv": "^8.18.0",
@@ -157,6 +160,7 @@
     "better-auth": "^1.6.22",
     "dotenv": "^17.4.2",
     "knip": "^6.3.0",
+    "mongodb": "7.2.0",
     "mongodb-memory-server": "^10.4.3",
     "mongoose": "^9.4.1",
     "publint": "^0.3.18",