@classytic/mongokit 3.22.0 → 3.22.1

package/dist/{Repository-CaDAJY98.mjs → Repository-Dr1MDAen.mjs}

@@ -3037,7 +3037,10 @@ var Repository = class extends RepositoryBase {
 	async applyTransition(id, machine, args, options = {}) {
 		const entityId = String(id);
 		const sources = Array.isArray(args.from) ? args.from : [args.from];
-		for (const from of sources) machine.assertTransition(entityId, from, args.to);
+		for (const from of sources) {
+			if (from === args.to) continue;
+			machine.assertTransition(entityId, from, args.to);
+		}
 		const historyField = args.history === false ? null : args.history ?? "statusHistory";
 		const pushSpec = { ...args.push ?? {} };
 		if (historyField !== null) pushSpec[historyField] = {
@@ -3072,7 +3075,7 @@ var Repository = class extends RepositoryBase {
 			}
 		});
 		const currentState = (args.field ?? "status").split(".").reduce((acc, key) => acc?.[key], current);
-		machine.assertTransition(entityId, String(currentState), args.to);
+		if (String(currentState) !== args.to) machine.assertTransition(entityId, String(currentState), args.to);
 		throw createError(409, `${machine.name} '${entityId}' lost the transition race to '${args.to}' (currently '${String(currentState)}'); re-read and retry`, {
 			code: "TRANSITION_RACE_LOST",
 			meta: {

package/dist/better-auth/index.mjs

@@ -1,4 +1,4 @@
-import { n as Repository } from "../Repository-CaDAJY98.mjs";
+import { n as Repository } from "../Repository-Dr1MDAen.mjs";
 import { n as createMongooseAdapter } from "../adapter-rTPLUrAV.mjs";
 import { pluralizeBetterAuthCollection, resolveBetterAuthCollections } from "@classytic/repo-core/better-auth";
 //#region src/better-auth/index.ts

package/dist/{create-repository-BFVYm48p.mjs → create-repository-DwODY4rZ.mjs}

@@ -1,5 +1,5 @@
-import { n as Repository } from "./Repository-CaDAJY98.mjs";
-import { a as methodRegistryPlugin, d as cachePlugin, f as batchOperationsPlugin, h as auditLogPlugin, i as multiTenantPlugin, m as auditTrailPlugin, n as softDeletePlugin, o as customIdPlugin, t as timestampPlugin } from "./timestamp.plugin-Ch0O6DPX.mjs";
+import { n as Repository } from "./Repository-Dr1MDAen.mjs";
+import { a as methodRegistryPlugin, d as cachePlugin, f as batchOperationsPlugin, h as auditLogPlugin, i as multiTenantPlugin, m as auditTrailPlugin, n as softDeletePlugin, o as customIdPlugin, t as timestampPlugin } from "./timestamp.plugin-Cn6LKUIZ.mjs";
 //#region src/create-repository.ts
 function isLoggerAudit(value) {
 	const v = value;

package/dist/index.d.mts

@@ -3,10 +3,10 @@ import { t as index_d_exports } from "./index-CENL7LRb.mjs";
 import { C as AuditTrailMethods, E as auditTrailPlugin, S as AuditQueryResult, T as AuditTrailQuery, _ as RepositoryCachePluginOptions, a as DateSequentialIdOptions, b as AuditOperation, c as SequentialIdOptions, d as getNextSequence, f as prefixedId, g as RepositoryCacheHandle, h as CacheOptions, i as CustomIdOptions, l as customIdPlugin, m as CacheAdapter, n as adminBypass, o as IdGenerator, p as sequentialId, r as multiTenantPlugin, s as PrefixedIdOptions, t as MultiTenantOptions, u as dateSequentialId, v as cachePlugin, w as AuditTrailOptions, x as AuditQueryOptions, y as AuditEntry } from "./multi-tenant.plugin-CFzMOuZP.mjs";
 import { t as PaginationEngine } from "./PaginationEngine-CYRTLW6s.mjs";
 import { a as Repository, i as HOOK_PRIORITY, n as CreateRepositoryConfig, o as TransitionMachine, r as createRepository, s as AggregationBuilder, t as AuditConfig } from "./create-repository-DXa3nMG6.mjs";
-import { A as fieldFilterPlugin, C as MongoOperationsMethods, D as LeaseMethods, E as methodRegistryPlugin, F as BulkWriteResult, I as batchOperationsPlugin, L as auditLogPlugin, M as elasticSearchPlugin, N as cascadePlugin, O as LeasePluginOptions, P as BatchOperationsMethods, R as AggregateHelpersMethods, S as observabilityPlugin, _ as immutableStatesPlugin, a as uniqueField, b as ObservabilityOptions, c as TenantContext, d as SubdocumentMethods, f as subdocumentPlugin, g as ImmutableStatesPluginOptions, h as ImmutableClaimView, i as requireField, j as ElasticSearchOptions, k as leasePlugin, l as TenantStore, m as softDeletePlugin, n as blockIf, o as validationChainPlugin, p as SoftDeleteMethods, r as immutableField, s as timestampPlugin, t as autoInject, u as createTenantContext, v as AppendOnlyPluginOptions, w as mongoOperationsPlugin, x as OperationMetric, y as appendOnlyPlugin, z as aggregateHelpersPlugin } from "./validation-chain.plugin-DDQeEyk5.mjs";
+import { A as elasticSearchPlugin, C as LeasePluginOptions, D as immutableStatesPlugin, E as ImmutableStatesPluginOptions, F as auditLogPlugin, I as AppendOnlyPluginOptions, L as appendOnlyPlugin, M as BatchOperationsMethods, N as BulkWriteResult, O as fieldFilterPlugin, P as batchOperationsPlugin, R as AggregateHelpersMethods, S as LeaseMethods, T as ImmutableClaimView, _ as observabilityPlugin, a as uniqueField, c as TenantContext, d as SubdocumentMethods, f as subdocumentPlugin, g as OperationMetric, h as ObservabilityOptions, i as requireField, j as cascadePlugin, k as ElasticSearchOptions, l as TenantStore, m as softDeletePlugin, n as blockIf, o as validationChainPlugin, p as SoftDeleteMethods, r as immutableField, s as timestampPlugin, t as autoInject, u as createTenantContext, v as MongoOperationsMethods, w as leasePlugin, x as methodRegistryPlugin, y as mongoOperationsPlugin, z as aggregateHelpersPlugin } from "./validation-chain.plugin-D-EjrYpR.mjs";
 import { n as SchemaPathsLike, t as FieldType$1 } from "./coercion-BjdPX3YF.mjs";
 import { n as SchemaIndexes } from "./indexes-DIjMpYES.mjs";
-import { _ as parseDuplicateKeyError, a as configureLogger, c as idVariants, d as createFieldPreset, f as filterResponseData, g as isDuplicateKeyError, h as createError, i as toPlain, m as getMongooseProjection, n as buildCrudSchemasFromMongooseSchema, p as getFieldsForUser, r as createMemoryCache, t as buildCrudSchemasFromModel } from "./mongooseToJsonSchema-ChFKfZts.mjs";
+import { _ as parseDuplicateKeyError, a as configureLogger, c as idVariants, d as createFieldPreset, f as filterResponseData, g as isDuplicateKeyError, h as createError, i as createMemoryCache, m as getMongooseProjection, n as buildCrudSchemasFromModel, p as getFieldsForUser, r as buildCrudSchemasFromMongooseSchema, t as toPlain } from "./to-plain-qzKeAC6z.mjs";
 import { RepoCapabilities } from "@classytic/repo-core/repository";
 import { ClientSession, PipelineStage } from "mongoose";
 //#region src/actions/cascade-references.d.ts

package/dist/index.mjs

@@ -1,18 +1,18 @@
 import { n as idVariants } from "./id-resolution-P2OzcyRl.mjs";
-import { a as withTransaction, c as MUTATING_OPERATIONS, d as operationsByPolicyKey, f as MONGOKIT_CAPABILITIES, i as isTransactionUnsupported, l as OP_REGISTRY, n as Repository, o as AggregationBuilder, p as createMongoPurgePort, r as batchTransaction, s as ALL_OPERATIONS, t as HOOK_PRIORITY, u as READ_OPERATIONS } from "./Repository-CaDAJY98.mjs";
+import { a as withTransaction, c as MUTATING_OPERATIONS, d as operationsByPolicyKey, f as MONGOKIT_CAPABILITIES, i as isTransactionUnsupported, l as OP_REGISTRY, n as Repository, o as AggregationBuilder, p as createMongoPurgePort, r as batchTransaction, s as ALL_OPERATIONS, t as HOOK_PRIORITY, u as READ_OPERATIONS } from "./Repository-Dr1MDAen.mjs";
 import { b as LookupBuilder, x as compileFilterToMongo } from "./update-1Lq9OMD2.mjs";
 import { n as warn, t as configureLogger } from "./logger-K7dPmu2U.mjs";
 import { n as isDuplicateKeyError, r as parseDuplicateKeyError, t as createError } from "./error-BuByZwKU.mjs";
 import { t as actions_exports } from "./actions/index.mjs";
-import { a as methodRegistryPlugin, c as getNextSequence, d as cachePlugin, f as batchOperationsPlugin, h as auditLogPlugin, i as multiTenantPlugin, l as prefixedId, m as auditTrailPlugin, n as softDeletePlugin, o as customIdPlugin, p as AuditTrailQuery, r as adminBypass, s as dateSequentialId, t as timestampPlugin, u as sequentialId } from "./timestamp.plugin-Ch0O6DPX.mjs";
+import { a as methodRegistryPlugin, c as getNextSequence, d as cachePlugin, f as batchOperationsPlugin, h as auditLogPlugin, i as multiTenantPlugin, l as prefixedId, m as auditTrailPlugin, n as softDeletePlugin, o as customIdPlugin, p as AuditTrailQuery, r as adminBypass, s as dateSequentialId, t as timestampPlugin, u as sequentialId } from "./timestamp.plugin-Cn6LKUIZ.mjs";
 import { t as PaginationEngine } from "./PaginationEngine-BT1ywu9k.mjs";
 import { isGeoOperator, parseGeoFilter } from "./query/primitives/geo.mjs";
-import { t as createRepository } from "./create-repository-BFVYm48p.mjs";
-import { _ as aggregateHelpersPlugin, a as uniqueField, c as subdocumentPlugin, d as observabilityPlugin, f as mongoOperationsPlugin, g as cascadePlugin, h as elasticSearchPlugin, i as requireField, l as immutableStatesPlugin, m as fieldFilterPlugin, n as blockIf, o as validationChainPlugin, p as leasePlugin, r as immutableField, s as createTenantContext, t as autoInject, u as appendOnlyPlugin } from "./validation-chain.plugin-RxOzGuQy.mjs";
+import { t as createRepository } from "./create-repository-DwODY4rZ.mjs";
+import { _ as aggregateHelpersPlugin, a as uniqueField, c as subdocumentPlugin, d as leasePlugin, f as immutableStatesPlugin, g as appendOnlyPlugin, h as cascadePlugin, i as requireField, l as observabilityPlugin, m as elasticSearchPlugin, n as blockIf, o as validationChainPlugin, p as fieldFilterPlugin, r as immutableField, s as createTenantContext, t as autoInject, u as mongoOperationsPlugin } from "./validation-chain.plugin-D6qWMH5d.mjs";
 import { i as getMongooseProjection, n as filterResponseData, r as getFieldsForUser, t as createFieldPreset } from "./field-selection-FSQFLpsU.mjs";
 import { buildFieldTypeMap, coerceFieldValue, coerceHeuristic } from "./query/primitives/coercion.mjs";
 import { extractSchemaIndexes } from "./query/primitives/indexes.mjs";
-import { n as toPlain, t as createMemoryCache } from "./memory-cache-D3wyN_2w.mjs";
+import { n as createMemoryCache, t as toPlain } from "./to-plain-vksRrLtc.mjs";
 import { n as buildCrudSchemasFromMongooseSchema, t as buildCrudSchemasFromModel } from "./mongooseToJsonSchema-CVnrKFDq.mjs";
 import { runChunkedPurge } from "@classytic/repo-core/repository";
 import { isControlParam } from "@classytic/repo-core/query-parser";

package/dist/plugins/index.d.mts

@@ -1,6 +1,6 @@
 import { G as Plugin } from "../types-BnRqAJVa.mjs";
 import { C as AuditTrailMethods, E as auditTrailPlugin, S as AuditQueryResult, T as AuditTrailQuery, _ as RepositoryCachePluginOptions, a as DateSequentialIdOptions, b as AuditOperation, c as SequentialIdOptions, d as getNextSequence, f as prefixedId, g as RepositoryCacheHandle, h as CacheOptions, i as CustomIdOptions, l as customIdPlugin, m as CacheAdapter, o as IdGenerator, p as sequentialId, r as multiTenantPlugin, s as PrefixedIdOptions, t as MultiTenantOptions, u as dateSequentialId, v as cachePlugin, w as AuditTrailOptions, x as AuditQueryOptions, y as AuditEntry } from "../multi-tenant.plugin-CFzMOuZP.mjs";
-import { A as fieldFilterPlugin, C as MongoOperationsMethods, D as LeaseMethods, E as methodRegistryPlugin, I as batchOperationsPlugin, L as auditLogPlugin, M as elasticSearchPlugin, N as cascadePlugin, O as LeasePluginOptions, P as BatchOperationsMethods, R as AggregateHelpersMethods, S as observabilityPlugin, T as MethodRegistryRepository, _ as immutableStatesPlugin, a as uniqueField, b as ObservabilityOptions, c as TenantContext, d as SubdocumentMethods, f as subdocumentPlugin, g as ImmutableStatesPluginOptions, h as ImmutableClaimView, i as requireField, j as ElasticSearchOptions, k as leasePlugin, l as TenantStore, m as softDeletePlugin, n as blockIf, o as validationChainPlugin, p as SoftDeleteMethods, r as immutableField, s as timestampPlugin, t as autoInject, u as createTenantContext, v as AppendOnlyPluginOptions, w as mongoOperationsPlugin, x as OperationMetric, y as appendOnlyPlugin, z as aggregateHelpersPlugin } from "../validation-chain.plugin-DDQeEyk5.mjs";
+import { A as elasticSearchPlugin, C as LeasePluginOptions, D as immutableStatesPlugin, E as ImmutableStatesPluginOptions, F as auditLogPlugin, I as AppendOnlyPluginOptions, L as appendOnlyPlugin, M as BatchOperationsMethods, O as fieldFilterPlugin, P as batchOperationsPlugin, R as AggregateHelpersMethods, S as LeaseMethods, T as ImmutableClaimView, _ as observabilityPlugin, a as uniqueField, b as MethodRegistryRepository, c as TenantContext, d as SubdocumentMethods, f as subdocumentPlugin, g as OperationMetric, h as ObservabilityOptions, i as requireField, j as cascadePlugin, k as ElasticSearchOptions, l as TenantStore, m as softDeletePlugin, n as blockIf, o as validationChainPlugin, p as SoftDeleteMethods, r as immutableField, s as timestampPlugin, t as autoInject, u as createTenantContext, v as MongoOperationsMethods, w as leasePlugin, x as methodRegistryPlugin, y as mongoOperationsPlugin, z as aggregateHelpersPlugin } from "../validation-chain.plugin-D-EjrYpR.mjs";
 import { ChangeLogStore } from "@classytic/repo-core/sync";
 //#region src/plugins/change-log.plugin.d.ts
 interface ChangeLogPluginOptions {

package/dist/plugins/index.mjs

@@ -1,5 +1,5 @@
-import { a as methodRegistryPlugin, c as getNextSequence, d as cachePlugin, f as batchOperationsPlugin, h as auditLogPlugin, i as multiTenantPlugin, l as prefixedId, m as auditTrailPlugin, n as softDeletePlugin, o as customIdPlugin, p as AuditTrailQuery, s as dateSequentialId, t as timestampPlugin, u as sequentialId } from "../timestamp.plugin-Ch0O6DPX.mjs";
-import { _ as aggregateHelpersPlugin, a as uniqueField, c as subdocumentPlugin, d as observabilityPlugin, f as mongoOperationsPlugin, g as cascadePlugin, h as elasticSearchPlugin, i as requireField, l as immutableStatesPlugin, m as fieldFilterPlugin, n as blockIf, o as validationChainPlugin, p as leasePlugin, r as immutableField, s as createTenantContext, t as autoInject, u as appendOnlyPlugin } from "../validation-chain.plugin-RxOzGuQy.mjs";
+import { a as methodRegistryPlugin, c as getNextSequence, d as cachePlugin, f as batchOperationsPlugin, h as auditLogPlugin, i as multiTenantPlugin, l as prefixedId, m as auditTrailPlugin, n as softDeletePlugin, o as customIdPlugin, p as AuditTrailQuery, s as dateSequentialId, t as timestampPlugin, u as sequentialId } from "../timestamp.plugin-Cn6LKUIZ.mjs";
+import { _ as aggregateHelpersPlugin, a as uniqueField, c as subdocumentPlugin, d as leasePlugin, f as immutableStatesPlugin, g as appendOnlyPlugin, h as cascadePlugin, i as requireField, l as observabilityPlugin, m as elasticSearchPlugin, n as blockIf, o as validationChainPlugin, p as fieldFilterPlugin, r as immutableField, s as createTenantContext, t as autoInject, u as mongoOperationsPlugin } from "../validation-chain.plugin-D6qWMH5d.mjs";
 //#region src/plugins/change-log.plugin.ts
 const PLUGIN_NAME = "changeLog";
 function isSkipped(context) {

package/dist/testkit/index.mjs

@@ -1,4 +1,4 @@
-import { t as createRepository } from "../create-repository-BFVYm48p.mjs";
+import { t as createRepository } from "../create-repository-DwODY4rZ.mjs";
 import { createConnection } from "mongoose";
 //#region src/testkit/index.ts
 function idempotentStop(server) {

package/dist/{timestamp.plugin-Ch0O6DPX.mjs → timestamp.plugin-Cn6LKUIZ.mjs}

@@ -1,4 +1,4 @@
-import { l as OP_REGISTRY, s as ALL_OPERATIONS, t as HOOK_PRIORITY } from "./Repository-CaDAJY98.mjs";
+import { l as OP_REGISTRY, s as ALL_OPERATIONS, t as HOOK_PRIORITY } from "./Repository-Dr1MDAen.mjs";
 import { n as warn } from "./logger-K7dPmu2U.mjs";
 import { t as createError } from "./error-BuByZwKU.mjs";
 import { throwIfAborted, withRetry } from "@classytic/repo-core/repository";

package/dist/{mongooseToJsonSchema-ChFKfZts.d.mts → to-plain-qzKeAC6z.d.mts}

@@ -249,35 +249,6 @@ interface LoggerConfig {
  */
 declare function configureLogger(config: Partial<LoggerConfig> | false): void;
 //#endregion
-//#region src/utils/to-plain.d.ts
-/**
- * Convert a hydrated Mongoose (sub)document to a plain object — the
- * spread-safety primitive for domain verbs that rebuild embedded lines.
- *
- * **The footgun this closes:** spreading a hydrated subdocument
- * (`{ ...line, consumedQuantity: x }`) spreads its Mongoose INTERNAL
- * properties (`$__`, `_doc`, ...), not its schema fields. The rebuilt
- * object then casts to garbage on write — required fields land
- * `undefined`, and because `findOneAndUpdate` does not run validators
- * by default, the corrupt lines persist silently. This has bitten every
- * package that maps over embedded arrays (`components`, `operations`,
- * `revisions`) to produce an updated copy.
- *
- * Rule of thumb: **any `{ ...subdoc }` in a repository verb goes
- * through `toPlain` first.**
- *
- * ```ts
- * const updated = lines.map((line) => ({
- *   ...toPlain(line),
- *   reservedQuantity: reserved.get(line.itemSku) ?? 0,
- * }));
- * ```
- *
- * Non-documents pass through unchanged, so it is safe to apply
- * defensively over values that may or may not be hydrated.
- */
-declare function toPlain<T>(value: T): T;
-//#endregion
 //#region src/utils/memory-cache.d.ts
 /**
  * Creates an in-memory cache adapter
@@ -324,4 +295,33 @@ declare function buildCrudSchemasFromMongooseSchema(mongooseSchema: Schema, opti
  */
 declare function buildCrudSchemasFromModel(mongooseModel: mongoose.Model<unknown>, options?: SchemaBuilderOptions): CrudSchemasFramework;
 //#endregion
-export { parseDuplicateKeyError as _, configureLogger as a, idVariants as c, createFieldPreset as d, filterResponseData as f, isDuplicateKeyError as g, createError as h, toPlain as i, isObjectIdInstance as l, getMongooseProjection as m, buildCrudSchemasFromMongooseSchema as n, IdType as o, getFieldsForUser as p, createMemoryCache as r, getSchemaIdType as s, buildCrudSchemasFromModel as t, isValidIdForType as u };
+//#region src/utils/to-plain.d.ts
+/**
+ * Convert a hydrated Mongoose (sub)document to a plain object — the
+ * spread-safety primitive for domain verbs that rebuild embedded lines.
+ *
+ * **The footgun this closes:** spreading a hydrated subdocument
+ * (`{ ...line, consumedQuantity: x }`) spreads its Mongoose INTERNAL
+ * properties (`$__`, `_doc`, ...), not its schema fields. The rebuilt
+ * object then casts to garbage on write — required fields land
+ * `undefined`, and because `findOneAndUpdate` does not run validators
+ * by default, the corrupt lines persist silently. This has bitten every
+ * package that maps over embedded arrays (`components`, `operations`,
+ * `revisions`) to produce an updated copy.
+ *
+ * Rule of thumb: **any `{ ...subdoc }` in a repository verb goes
+ * through `toPlain` first.**
+ *
+ * ```ts
+ * const updated = lines.map((line) => ({
+ *   ...toPlain(line),
+ *   reservedQuantity: reserved.get(line.itemSku) ?? 0,
+ * }));
+ * ```
+ *
+ * Non-documents pass through unchanged, so it is safe to apply
+ * defensively over values that may or may not be hydrated.
+ */
+declare function toPlain<T>(value: T): T;
+//#endregion
+export { parseDuplicateKeyError as _, configureLogger as a, idVariants as c, createFieldPreset as d, filterResponseData as f, isDuplicateKeyError as g, createError as h, createMemoryCache as i, isObjectIdInstance as l, getMongooseProjection as m, buildCrudSchemasFromModel as n, IdType as o, getFieldsForUser as p, buildCrudSchemasFromMongooseSchema as r, getSchemaIdType as s, toPlain as t, isValidIdForType as u };

package/dist/{memory-cache-D3wyN_2w.mjs → to-plain-vksRrLtc.mjs}

@@ -1,34 +1,3 @@
-//#region src/utils/to-plain.ts
-/**
-* Convert a hydrated Mongoose (sub)document to a plain object — the
-* spread-safety primitive for domain verbs that rebuild embedded lines.
-*
-* **The footgun this closes:** spreading a hydrated subdocument
-* (`{ ...line, consumedQuantity: x }`) spreads its Mongoose INTERNAL
-* properties (`$__`, `_doc`, ...), not its schema fields. The rebuilt
-* object then casts to garbage on write — required fields land
-* `undefined`, and because `findOneAndUpdate` does not run validators
-* by default, the corrupt lines persist silently. This has bitten every
-* package that maps over embedded arrays (`components`, `operations`,
-* `revisions`) to produce an updated copy.
-*
-* Rule of thumb: **any `{ ...subdoc }` in a repository verb goes
-* through `toPlain` first.**
-*
-* ```ts
-* const updated = lines.map((line) => ({
-*   ...toPlain(line),
-*   reservedQuantity: reserved.get(line.itemSku) ?? 0,
-* }));
-* ```
-*
-* Non-documents pass through unchanged, so it is safe to apply
-* defensively over values that may or may not be hydrated.
-*/
-function toPlain(value) {
-	return value !== null && value !== void 0 && typeof value.toObject === "function" ? value.toObject() : value;
-}
-//#endregion
 //#region src/utils/memory-cache.ts
 /**
 * Creates an in-memory cache adapter
@@ -95,4 +64,35 @@ function createMemoryCache(maxEntries = 1e3) {
 	};
 }
 //#endregion
-export { toPlain as n, createMemoryCache as t };
+//#region src/utils/to-plain.ts
+/**
+* Convert a hydrated Mongoose (sub)document to a plain object — the
+* spread-safety primitive for domain verbs that rebuild embedded lines.
+*
+* **The footgun this closes:** spreading a hydrated subdocument
+* (`{ ...line, consumedQuantity: x }`) spreads its Mongoose INTERNAL
+* properties (`$__`, `_doc`, ...), not its schema fields. The rebuilt
+* object then casts to garbage on write — required fields land
+* `undefined`, and because `findOneAndUpdate` does not run validators
+* by default, the corrupt lines persist silently. This has bitten every
+* package that maps over embedded arrays (`components`, `operations`,
+* `revisions`) to produce an updated copy.
+*
+* Rule of thumb: **any `{ ...subdoc }` in a repository verb goes
+* through `toPlain` first.**
+*
+* ```ts
+* const updated = lines.map((line) => ({
+*   ...toPlain(line),
+*   reservedQuantity: reserved.get(line.itemSku) ?? 0,
+* }));
+* ```
+*
+* Non-documents pass through unchanged, so it is safe to apply
+* defensively over values that may or may not be hydrated.
+*/
+function toPlain(value) {
+	return value !== null && value !== void 0 && typeof value.toObject === "function" ? value.toObject() : value;
+}
+//#endregion
+export { createMemoryCache as n, toPlain as t };

package/dist/utils/index.d.mts

@@ -1,2 +1,2 @@
-import { a as configureLogger, d as createFieldPreset, f as filterResponseData, h as createError, i as toPlain, l as isObjectIdInstance, m as getMongooseProjection, n as buildCrudSchemasFromMongooseSchema, o as IdType, p as getFieldsForUser, r as createMemoryCache, s as getSchemaIdType, t as buildCrudSchemasFromModel, u as isValidIdForType } from "../mongooseToJsonSchema-ChFKfZts.mjs";
+import { a as configureLogger, d as createFieldPreset, f as filterResponseData, h as createError, i as createMemoryCache, l as isObjectIdInstance, m as getMongooseProjection, n as buildCrudSchemasFromModel, o as IdType, p as getFieldsForUser, r as buildCrudSchemasFromMongooseSchema, s as getSchemaIdType, t as toPlain, u as isValidIdForType } from "../to-plain-qzKeAC6z.mjs";
 export { type IdType, buildCrudSchemasFromModel, buildCrudSchemasFromMongooseSchema, configureLogger, createError, createFieldPreset, createMemoryCache, filterResponseData, getFieldsForUser, getMongooseProjection, getSchemaIdType, isObjectIdInstance, isValidIdForType, toPlain };

package/dist/utils/index.mjs

@@ -2,6 +2,6 @@ import { i as isValidIdForType, r as isObjectIdInstance, t as getSchemaIdType }
 import { t as configureLogger } from "../logger-K7dPmu2U.mjs";
 import { t as createError } from "../error-BuByZwKU.mjs";
 import { i as getMongooseProjection, n as filterResponseData, r as getFieldsForUser, t as createFieldPreset } from "../field-selection-FSQFLpsU.mjs";
-import { n as toPlain, t as createMemoryCache } from "../memory-cache-D3wyN_2w.mjs";
+import { n as createMemoryCache, t as toPlain } from "../to-plain-vksRrLtc.mjs";
 import { n as buildCrudSchemasFromMongooseSchema, t as buildCrudSchemasFromModel } from "../mongooseToJsonSchema-CVnrKFDq.mjs";
 export { buildCrudSchemasFromModel, buildCrudSchemasFromMongooseSchema, configureLogger, createError, createFieldPreset, createMemoryCache, filterResponseData, getFieldsForUser, getMongooseProjection, getSchemaIdType, isObjectIdInstance, isValidIdForType, toPlain };

package/dist/{validation-chain.plugin-DDQeEyk5.d.mts → validation-chain.plugin-D-EjrYpR.d.mts}

@@ -87,6 +87,26 @@ interface AggregateHelpersMethods {
   max(field: string, query?: Record<string, unknown>, options?: Record<string, unknown>): Promise<number>;
 }
 //#endregion
+//#region src/plugins/append-only.plugin.d.ts
+interface AppendOnlyPluginOptions {
+  /**
+   * Mutating ops to permit besides `create` / `createMany`. Use for a
+   * domain's ONE legitimate mutation path (e.g. GDPR `deleteMany`) —
+   * every allowed op still flows through the rest of the plugin stack
+   * (tenant scope, audit) as usual.
+   */
+  allow?: readonly string[] | undefined;
+  /**
+   * Hook priority for the fence. Default `HOOK_PRIORITY.POLICY` (100).
+   * Ledger repos that want the append-only refusal to win over other
+   * policy errors (e.g. a missing-tenant throw) register BELOW policy —
+   * flow's StockEvent uses `50` so the violation always reads
+   * "append-only", never "missing organizationId".
+   */
+  priority?: number | undefined;
+}
+declare function appendOnlyPlugin(options?: AppendOnlyPluginOptions): Plugin;
+//#endregion
 //#region src/plugins/audit-log.plugin.d.ts
 declare function auditLogPlugin(logger: Logger): Plugin;
 //#endregion
@@ -163,6 +183,47 @@ declare function elasticSearchPlugin(options: ElasticSearchOptions): Plugin;
  */
 declare function fieldFilterPlugin(fieldPreset: FieldPreset): Plugin;
 //#endregion
+//#region src/plugins/immutable-states.plugin.d.ts
+/** The slice of a `before:claim` context `allowClaim` predicates see. */
+interface ImmutableClaimView {
+  id: unknown;
+  transition: {
+    from?: unknown | readonly unknown[];
+    to?: unknown;
+    field?: string;
+    where?: Record<string, unknown>;
+  };
+  /** Operator-form patch (`{ $set: {...}, ... }`). */
+  data: Record<string, unknown> | undefined;
+}
+interface ImmutableStatesPluginOptions {
+  /** States in which the document is frozen (e.g. `['posted']`). */
+  states: readonly string[];
+  /** State field on the doc — dotted paths supported. Default `'state'`. */
+  field?: string | undefined;
+  /**
+   * Context flag the OWNING ENGINE's verbs set to pass the guard
+   * (private handshake — see module doc). Default `'_immutableInternal'`.
+   */
+  internalFlag?: string | undefined;
+  /** Tenant field used to scope state lookups (mirrors the repo's scope). */
+  tenantField?: string | undefined;
+  /**
+   * Exempt specific claim shapes that legitimately touch frozen rows
+   * (audit-trail stamps like ledger's reverse-mark). Return `true` to
+   * allow. Runs only after the claim was determined to reach a frozen
+   * state — keep the predicate a strict fingerprint.
+   */
+  allowClaim?: ((view: ImmutableClaimView) => boolean) | undefined;
+  /** Domain error to throw. Default: 403 `IMMUTABLE_STATE_VIOLATION`. */
+  errorFactory?: ((ctx: {
+    id: unknown;
+    operation: string;
+    state?: string | undefined;
+  }) => Error) | undefined;
+}
+declare function immutableStatesPlugin(options: ImmutableStatesPluginOptions): Plugin;
+//#endregion
 //#region src/plugins/lease.plugin.d.ts
 interface LeasePluginOptions {
   /** Field carrying the row's status. @default `'status'` */
@@ -517,67 +578,6 @@ interface ObservabilityOptions {
 }
 declare function observabilityPlugin(options: ObservabilityOptions): Plugin;
 //#endregion
-//#region src/plugins/append-only.plugin.d.ts
-interface AppendOnlyPluginOptions {
-  /**
-   * Mutating ops to permit besides `create` / `createMany`. Use for a
-   * domain's ONE legitimate mutation path (e.g. GDPR `deleteMany`) —
-   * every allowed op still flows through the rest of the plugin stack
-   * (tenant scope, audit) as usual.
-   */
-  allow?: readonly string[] | undefined;
-  /**
-   * Hook priority for the fence. Default `HOOK_PRIORITY.POLICY` (100).
-   * Ledger repos that want the append-only refusal to win over other
-   * policy errors (e.g. a missing-tenant throw) register BELOW policy —
-   * flow's StockEvent uses `50` so the violation always reads
-   * "append-only", never "missing organizationId".
-   */
-  priority?: number | undefined;
-}
-declare function appendOnlyPlugin(options?: AppendOnlyPluginOptions): Plugin;
-//#endregion
-//#region src/plugins/immutable-states.plugin.d.ts
-/** The slice of a `before:claim` context `allowClaim` predicates see. */
-interface ImmutableClaimView {
-  id: unknown;
-  transition: {
-    from?: unknown | readonly unknown[];
-    to?: unknown;
-    field?: string;
-    where?: Record<string, unknown>;
-  };
-  /** Operator-form patch (`{ $set: {...}, ... }`). */
-  data: Record<string, unknown> | undefined;
-}
-interface ImmutableStatesPluginOptions {
-  /** States in which the document is frozen (e.g. `['posted']`). */
-  states: readonly string[];
-  /** State field on the doc — dotted paths supported. Default `'state'`. */
-  field?: string | undefined;
-  /**
-   * Context flag the OWNING ENGINE's verbs set to pass the guard
-   * (private handshake — see module doc). Default `'_immutableInternal'`.
-   */
-  internalFlag?: string | undefined;
-  /** Tenant field used to scope state lookups (mirrors the repo's scope). */
-  tenantField?: string | undefined;
-  /**
-   * Exempt specific claim shapes that legitimately touch frozen rows
-   * (audit-trail stamps like ledger's reverse-mark). Return `true` to
-   * allow. Runs only after the claim was determined to reach a frozen
-   * state — keep the predicate a strict fingerprint.
-   */
-  allowClaim?: ((view: ImmutableClaimView) => boolean) | undefined;
-  /** Domain error to throw. Default: 403 `IMMUTABLE_STATE_VIOLATION`. */
-  errorFactory?: ((ctx: {
-    id: unknown;
-    operation: string;
-    state?: string | undefined;
-  }) => Error) | undefined;
-}
-declare function immutableStatesPlugin(options: ImmutableStatesPluginOptions): Plugin;
-//#endregion
 //#region src/plugins/soft-delete.plugin.d.ts
 /**
  * Soft delete plugin
@@ -820,4 +820,4 @@ declare function immutableField(field: string): ValidatorDefinition;
  */
 declare function uniqueField(field: string, errorMessage?: string): ValidatorDefinition;
 //#endregion
-export { fieldFilterPlugin as A, MongoOperationsMethods as C, LeaseMethods as D, methodRegistryPlugin as E, BulkWriteResult as F, batchOperationsPlugin as I, auditLogPlugin as L, elasticSearchPlugin as M, cascadePlugin as N, LeasePluginOptions as O, BatchOperationsMethods as P, AggregateHelpersMethods as R, observabilityPlugin as S, MethodRegistryRepository as T, immutableStatesPlugin as _, uniqueField as a, ObservabilityOptions as b, TenantContext as c, SubdocumentMethods as d, subdocumentPlugin as f, ImmutableStatesPluginOptions as g, ImmutableClaimView as h, requireField as i, ElasticSearchOptions as j, leasePlugin as k, TenantStore as l, softDeletePlugin as m, blockIf as n, validationChainPlugin as o, SoftDeleteMethods as p, immutableField as r, timestampPlugin as s, autoInject as t, createTenantContext as u, AppendOnlyPluginOptions as v, mongoOperationsPlugin as w, OperationMetric as x, appendOnlyPlugin as y, aggregateHelpersPlugin as z };
+export { elasticSearchPlugin as A, LeasePluginOptions as C, immutableStatesPlugin as D, ImmutableStatesPluginOptions as E, auditLogPlugin as F, AppendOnlyPluginOptions as I, appendOnlyPlugin as L, BatchOperationsMethods as M, BulkWriteResult as N, fieldFilterPlugin as O, batchOperationsPlugin as P, AggregateHelpersMethods as R, LeaseMethods as S, ImmutableClaimView as T, observabilityPlugin as _, uniqueField as a, MethodRegistryRepository as b, TenantContext as c, SubdocumentMethods as d, subdocumentPlugin as f, OperationMetric as g, ObservabilityOptions as h, requireField as i, cascadePlugin as j, ElasticSearchOptions as k, TenantStore as l, softDeletePlugin as m, blockIf as n, validationChainPlugin as o, SoftDeleteMethods as p, immutableField as r, timestampPlugin as s, autoInject as t, createTenantContext as u, MongoOperationsMethods as v, leasePlugin as w, methodRegistryPlugin as x, mongoOperationsPlugin as y, aggregateHelpersPlugin as z };

package/dist/{validation-chain.plugin-RxOzGuQy.mjs → validation-chain.plugin-D6qWMH5d.mjs}

@@ -1,4 +1,4 @@
-import { l as OP_REGISTRY, s as ALL_OPERATIONS } from "./Repository-CaDAJY98.mjs";
+import { l as OP_REGISTRY, s as ALL_OPERATIONS } from "./Repository-Dr1MDAen.mjs";
 import { _ as upsert } from "./update-1Lq9OMD2.mjs";
 import { n as warn } from "./logger-K7dPmu2U.mjs";
 import { t as createError } from "./error-BuByZwKU.mjs";
@@ -70,6 +70,90 @@ function aggregateHelpersPlugin() {
 	};
 }
 //#endregion
+//#region src/plugins/append-only.plugin.ts
+/**
+* Append-Only Plugin
+*
+* Turns a repository into an immutable-facts ledger: inserts land,
+* everything else is refused at POLICY priority. The enforcement
+* layer for event-sourced planes — flow's `StockEvent`,
+* manufacturing's `ProductionEvent`, audit sinks, outbox archives —
+* where a mutable row would silently corrupt the audit/time-travel
+* story that the whole collection exists to provide.
+*
+* Grep-proof by construction: hand-fenced `update()`/`delete()`
+* overrides only cover the verbs someone remembered to override; this
+* plugin derives coverage from `OP_REGISTRY`, so every mutating op —
+* including `claim`, `claimVersion`, `restore`, `bulkWrite`, and any
+* op added to the registry later — is refused automatically.
+*
+* Allowed by default: `create`, `createMany` (appends). `getOrCreate`
+* is registry-classified as a read and stays available — it can only
+* INSERT or return the existing row, never mutate one, which is
+* append-safe by definition (idempotency stores rely on it).
+* Refused by default: `update`, `findOneAndUpdate`, `updateMany`,
+* `delete`, `deleteMany`, `restore`, `claim`, `claimVersion`,
+* `bulkWrite` (wholesale — mixed insert/update batches are ambiguous;
+* append via `createMany` instead). Composed methods from other
+* plugins (`incrementIfBelow`, lease ops) decompose into these
+* registry ops internally, so the fence catches them too.
+*
+* TTL indexes are unaffected (server-side GC never touches the repo
+* layer) — TTL-expiring an idempotency ledger still works. Raw
+* `Model.*` driver calls bypass every plugin, this one included —
+* the org-wide "never drop to Model.deleteOne" rule is what covers
+* that hole, same as for tenant scope.
+*
+* **Escape hatches** (both audited via `after:append-only-bypass`):
+*   - Plugin-level `allow` — ops the DOMAIN legitimately needs, wired
+*     once at construction (e.g. `allow: ['deleteMany']` for a
+*     GDPR-erasure path the host gates behind admin roles).
+*   - Per-call `bypassAppendOnly: true` — deliberate one-off
+*     maintenance (backfill repair, migration), grep-auditable at the
+*     call site.
+*
+* `skipPlugins` is deliberately IGNORED — same policy as tenant scope
+* and soft delete: integrity fences don't have a convenience bypass.
+*
+* @example
+* const events = new Repository(StockEventModel, [
+*   multiTenantPlugin({ ... }),
+*   appendOnlyPlugin(),
+* ]);
+* await events.create({ ... });            // OK
+* await events.update(id, { ... });        // throws 405 APPEND_ONLY_VIOLATION
+* await events.deleteMany({ ... }, { bypassAppendOnly: true }); // audited bypass
+*/
+const ALWAYS_ALLOWED = /* @__PURE__ */ new Set(["create", "createMany"]);
+function appendOnlyPlugin(options = {}) {
+	const allowed = /* @__PURE__ */ new Set([...ALWAYS_ALLOWED, ...options.allow ?? []]);
+	return {
+		name: "appendOnly",
+		apply(repo) {
+			const modelName = repo.Model?.modelName ?? "model";
+			for (const [op, meta] of Object.entries(OP_REGISTRY)) {
+				if (!meta.mutates || allowed.has(op)) continue;
+				repo.on(`before:${op}`, (context) => {
+					if (context.bypassAppendOnly === true) {
+						repo.emit("after:append-only-bypass", {
+							operation: op,
+							context
+						});
+						return;
+					}
+					throw createError(405, `${modelName} is append-only: '${op}' is not permitted. Rows on this collection are immutable facts (event ledger). Append a compensating row instead; for deliberate maintenance pass bypassAppendOnly: true (audited via 'after:append-only-bypass').`, {
+						code: "APPEND_ONLY_VIOLATION",
+						meta: {
+							operation: op,
+							model: modelName
+						}
+					});
+				}, { priority: options.priority ?? HOOK_PRIORITY.POLICY });
+			}
+		}
+	};
+}
+//#endregion
 //#region src/plugins/cascade.plugin.ts
 /**
 * Cascade Delete Plugin
@@ -392,6 +476,140 @@ function fieldFilterPlugin(fieldPreset) {
 	};
 }
 //#endregion
+//#region src/plugins/immutable-states.plugin.ts
+/** Ops this plugin has an explicit strategy for (see module doc). */
+const STRATEGY_OPS = /* @__PURE__ */ new Set([
+	"create",
+	"createMany",
+	"update",
+	"delete",
+	"claimVersion",
+	"restore",
+	"findOneAndUpdate",
+	"updateMany",
+	"deleteMany",
+	"bulkWrite",
+	"claim"
+]);
+function immutableStatesPlugin(options) {
+	const field = options.field ?? "state";
+	const internalFlag = options.internalFlag ?? "_immutableInternal";
+	const frozen = new Set(options.states);
+	const throwViolation = (ctx) => {
+		if (options.errorFactory) throw options.errorFactory(ctx);
+		throw createError(403, `Document ${String(ctx.id)} is in immutable state${ctx.state !== void 0 ? ` '${ctx.state}'` : ""} — '${ctx.operation}' is not permitted. Frozen rows change only through the owning engine's transition verbs.`, {
+			code: "IMMUTABLE_STATE_VIOLATION",
+			meta: { ...ctx }
+		});
+	};
+	return {
+		name: "immutableStates",
+		apply(repo) {
+			const unhandled = Object.entries(OP_REGISTRY).filter(([op, meta]) => meta.mutates && !STRATEGY_OPS.has(op)).map(([op]) => op);
+			if (unhandled.length > 0) throw createError(500, `immutableStatesPlugin has no strategy for mutating op(s): ${unhandled.join(", ")}. Mongokit added write ops this plugin predates — extend the plugin before using it.`, {
+				code: "IMMUTABLE_STATES_UNHANDLED_OPS",
+				meta: { unhandled }
+			});
+			const Model = repo.Model;
+			const getState = (doc) => field.split(".").reduce((acc, key) => acc?.[key], doc);
+			const scoped = (base, ctx) => {
+				const q = { ...base };
+				if (options.tenantField && ctx.query && options.tenantField in ctx.query) q[options.tenantField] = ctx.query[options.tenantField];
+				return q;
+			};
+			/** Raw-Model read — never re-enters the repo hook pipeline. */
+			const readStateById = async (ctx) => {
+				if (ctx.id === void 0 || ctx.id === null) return void 0;
+				const doc = await Model.findOne(scoped({ _id: ctx.id }, ctx)).select({ [field]: 1 }).lean();
+				return doc ? getState(doc) : void 0;
+			};
+			const guardById = (op) => async (ctx) => {
+				if (ctx[internalFlag]) return;
+				const state = await readStateById(ctx);
+				if (state !== void 0 && frozen.has(state)) throwViolation({
+					id: ctx.id,
+					operation: op,
+					state
+				});
+			};
+			for (const op of [
+				"update",
+				"delete",
+				"claimVersion",
+				"restore"
+			]) repo.on(`before:${op}`, guardById(op));
+			repo.on("before:findOneAndUpdate", async (ctx) => {
+				if (ctx[internalFlag]) return;
+				const filter = ctx.query ?? {};
+				const doc = await Model.findOne(filter).select({
+					[field]: 1,
+					_id: 1
+				}).lean();
+				if (!doc) return;
+				const state = getState(doc);
+				if (state !== void 0 && frozen.has(state)) throwViolation({
+					id: doc._id,
+					operation: "findOneAndUpdate",
+					state
+				});
+			});
+			const guardMany = (op) => async (ctx) => {
+				if (ctx[internalFlag]) return;
+				const filter = ctx.query ?? {};
+				const hit = await Model.exists({ $and: [filter, { [field]: { $in: [...frozen] } }] });
+				if (hit) throwViolation({
+					id: hit._id,
+					operation: op,
+					state: void 0
+				});
+			};
+			repo.on("before:updateMany", guardMany("updateMany"));
+			repo.on("before:deleteMany", guardMany("deleteMany"));
+			repo.on("before:bulkWrite", (ctx) => {
+				if (ctx[internalFlag]) return;
+				throwViolation({
+					id: void 0,
+					operation: "bulkWrite",
+					state: void 0
+				});
+			});
+			repo.on("before:claim", async (rawCtx) => {
+				const ctx = rawCtx;
+				if (ctx[internalFlag]) return;
+				const t = ctx.transition;
+				if (!t) return;
+				if ((t.field ?? "status") === field) {
+					const fromSpec = t.from;
+					if (!(Array.isArray(fromSpec) ? fromSpec.some((f) => frozen.has(String(f))) : frozen.has(String(fromSpec)))) return;
+					if (options.allowClaim?.({
+						id: ctx.id,
+						transition: t,
+						data: ctx.data
+					})) return;
+					throwViolation({
+						id: ctx.id,
+						operation: "claim",
+						state: void 0
+					});
+				}
+				const state = await readStateById(ctx);
+				if (state !== void 0 && frozen.has(state)) {
+					if (options.allowClaim?.({
+						id: ctx.id,
+						transition: t,
+						data: ctx.data
+					})) return;
+					throwViolation({
+						id: ctx.id,
+						operation: "claim",
+						state
+					});
+				}
+			});
+		}
+	};
+}
+//#endregion
 //#region src/plugins/lease.plugin.ts
 function leasePlugin(options = {}) {
 	const statusField = options.statusField ?? "status";
@@ -783,224 +1001,6 @@ function observabilityPlugin(options) {
 	};
 }
 //#endregion
-//#region src/plugins/append-only.plugin.ts
-/**
-* Append-Only Plugin
-*
-* Turns a repository into an immutable-facts ledger: inserts land,
-* everything else is refused at POLICY priority. The enforcement
-* layer for event-sourced planes — flow's `StockEvent`,
-* manufacturing's `ProductionEvent`, audit sinks, outbox archives —
-* where a mutable row would silently corrupt the audit/time-travel
-* story that the whole collection exists to provide.
-*
-* Grep-proof by construction: hand-fenced `update()`/`delete()`
-* overrides only cover the verbs someone remembered to override; this
-* plugin derives coverage from `OP_REGISTRY`, so every mutating op —
-* including `claim`, `claimVersion`, `restore`, `bulkWrite`, and any
-* op added to the registry later — is refused automatically.
-*
-* Allowed by default: `create`, `createMany` (appends). `getOrCreate`
-* is registry-classified as a read and stays available — it can only
-* INSERT or return the existing row, never mutate one, which is
-* append-safe by definition (idempotency stores rely on it).
-* Refused by default: `update`, `findOneAndUpdate`, `updateMany`,
-* `delete`, `deleteMany`, `restore`, `claim`, `claimVersion`,
-* `bulkWrite` (wholesale — mixed insert/update batches are ambiguous;
-* append via `createMany` instead). Composed methods from other
-* plugins (`incrementIfBelow`, lease ops) decompose into these
-* registry ops internally, so the fence catches them too.
-*
-* TTL indexes are unaffected (server-side GC never touches the repo
-* layer) — TTL-expiring an idempotency ledger still works. Raw
-* `Model.*` driver calls bypass every plugin, this one included —
-* the org-wide "never drop to Model.deleteOne" rule is what covers
-* that hole, same as for tenant scope.
-*
-* **Escape hatches** (both audited via `after:append-only-bypass`):
-*   - Plugin-level `allow` — ops the DOMAIN legitimately needs, wired
-*     once at construction (e.g. `allow: ['deleteMany']` for a
-*     GDPR-erasure path the host gates behind admin roles).
-*   - Per-call `bypassAppendOnly: true` — deliberate one-off
-*     maintenance (backfill repair, migration), grep-auditable at the
-*     call site.
-*
-* `skipPlugins` is deliberately IGNORED — same policy as tenant scope
-* and soft delete: integrity fences don't have a convenience bypass.
-*
-* @example
-* const events = new Repository(StockEventModel, [
-*   multiTenantPlugin({ ... }),
-*   appendOnlyPlugin(),
-* ]);
-* await events.create({ ... });            // OK
-* await events.update(id, { ... });        // throws 405 APPEND_ONLY_VIOLATION
-* await events.deleteMany({ ... }, { bypassAppendOnly: true }); // audited bypass
-*/
-const ALWAYS_ALLOWED = /* @__PURE__ */ new Set(["create", "createMany"]);
-function appendOnlyPlugin(options = {}) {
-	const allowed = /* @__PURE__ */ new Set([...ALWAYS_ALLOWED, ...options.allow ?? []]);
-	return {
-		name: "appendOnly",
-		apply(repo) {
-			const modelName = repo.Model?.modelName ?? "model";
-			for (const [op, meta] of Object.entries(OP_REGISTRY)) {
-				if (!meta.mutates || allowed.has(op)) continue;
-				repo.on(`before:${op}`, (context) => {
-					if (context.bypassAppendOnly === true) {
-						repo.emit("after:append-only-bypass", {
-							operation: op,
-							context
-						});
-						return;
-					}
-					throw createError(405, `${modelName} is append-only: '${op}' is not permitted. Rows on this collection are immutable facts (event ledger). Append a compensating row instead; for deliberate maintenance pass bypassAppendOnly: true (audited via 'after:append-only-bypass').`, {
-						code: "APPEND_ONLY_VIOLATION",
-						meta: {
-							operation: op,
-							model: modelName
-						}
-					});
-				}, { priority: options.priority ?? HOOK_PRIORITY.POLICY });
-			}
-		}
-	};
-}
-//#endregion
-//#region src/plugins/immutable-states.plugin.ts
-/** Ops this plugin has an explicit strategy for (see module doc). */
-const STRATEGY_OPS = /* @__PURE__ */ new Set([
-	"create",
-	"createMany",
-	"update",
-	"delete",
-	"claimVersion",
-	"restore",
-	"findOneAndUpdate",
-	"updateMany",
-	"deleteMany",
-	"bulkWrite",
-	"claim"
-]);
-function immutableStatesPlugin(options) {
-	const field = options.field ?? "state";
-	const internalFlag = options.internalFlag ?? "_immutableInternal";
-	const frozen = new Set(options.states);
-	const throwViolation = (ctx) => {
-		if (options.errorFactory) throw options.errorFactory(ctx);
-		throw createError(403, `Document ${String(ctx.id)} is in immutable state${ctx.state !== void 0 ? ` '${ctx.state}'` : ""} — '${ctx.operation}' is not permitted. Frozen rows change only through the owning engine's transition verbs.`, {
-			code: "IMMUTABLE_STATE_VIOLATION",
-			meta: { ...ctx }
-		});
-	};
-	return {
-		name: "immutableStates",
-		apply(repo) {
-			const unhandled = Object.entries(OP_REGISTRY).filter(([op, meta]) => meta.mutates && !STRATEGY_OPS.has(op)).map(([op]) => op);
-			if (unhandled.length > 0) throw createError(500, `immutableStatesPlugin has no strategy for mutating op(s): ${unhandled.join(", ")}. Mongokit added write ops this plugin predates — extend the plugin before using it.`, {
-				code: "IMMUTABLE_STATES_UNHANDLED_OPS",
-				meta: { unhandled }
-			});
-			const Model = repo.Model;
-			const getState = (doc) => field.split(".").reduce((acc, key) => acc?.[key], doc);
-			const scoped = (base, ctx) => {
-				const q = { ...base };
-				if (options.tenantField && ctx.query && options.tenantField in ctx.query) q[options.tenantField] = ctx.query[options.tenantField];
-				return q;
-			};
-			/** Raw-Model read — never re-enters the repo hook pipeline. */
-			const readStateById = async (ctx) => {
-				if (ctx.id === void 0 || ctx.id === null) return void 0;
-				const doc = await Model.findOne(scoped({ _id: ctx.id }, ctx)).select({ [field]: 1 }).lean();
-				return doc ? getState(doc) : void 0;
-			};
-			const guardById = (op) => async (ctx) => {
-				if (ctx[internalFlag]) return;
-				const state = await readStateById(ctx);
-				if (state !== void 0 && frozen.has(state)) throwViolation({
-					id: ctx.id,
-					operation: op,
-					state
-				});
-			};
-			for (const op of [
-				"update",
-				"delete",
-				"claimVersion",
-				"restore"
-			]) repo.on(`before:${op}`, guardById(op));
-			repo.on("before:findOneAndUpdate", async (ctx) => {
-				if (ctx[internalFlag]) return;
-				const filter = ctx.query ?? {};
-				const doc = await Model.findOne(filter).select({
-					[field]: 1,
-					_id: 1
-				}).lean();
-				if (!doc) return;
-				const state = getState(doc);
-				if (state !== void 0 && frozen.has(state)) throwViolation({
-					id: doc._id,
-					operation: "findOneAndUpdate",
-					state
-				});
-			});
-			const guardMany = (op) => async (ctx) => {
-				if (ctx[internalFlag]) return;
-				const filter = ctx.query ?? {};
-				const hit = await Model.exists({ $and: [filter, { [field]: { $in: [...frozen] } }] });
-				if (hit) throwViolation({
-					id: hit._id,
-					operation: op,
-					state: void 0
-				});
-			};
-			repo.on("before:updateMany", guardMany("updateMany"));
-			repo.on("before:deleteMany", guardMany("deleteMany"));
-			repo.on("before:bulkWrite", (ctx) => {
-				if (ctx[internalFlag]) return;
-				throwViolation({
-					id: void 0,
-					operation: "bulkWrite",
-					state: void 0
-				});
-			});
-			repo.on("before:claim", async (rawCtx) => {
-				const ctx = rawCtx;
-				if (ctx[internalFlag]) return;
-				const t = ctx.transition;
-				if (!t) return;
-				if ((t.field ?? "status") === field) {
-					const fromSpec = t.from;
-					if (!(Array.isArray(fromSpec) ? fromSpec.some((f) => frozen.has(String(f))) : frozen.has(String(fromSpec)))) return;
-					if (options.allowClaim?.({
-						id: ctx.id,
-						transition: t,
-						data: ctx.data
-					})) return;
-					throwViolation({
-						id: ctx.id,
-						operation: "claim",
-						state: void 0
-					});
-				}
-				const state = await readStateById(ctx);
-				if (state !== void 0 && frozen.has(state)) {
-					if (options.allowClaim?.({
-						id: ctx.id,
-						transition: t,
-						data: ctx.data
-					})) return;
-					throwViolation({
-						id: ctx.id,
-						operation: "claim",
-						state
-					});
-				}
-			});
-		}
-	};
-}
-//#endregion
 //#region src/plugins/subdocument.plugin.ts
 /**
 * Subdocument plugin for managing nested arrays
@@ -1272,4 +1272,4 @@ function uniqueField(field, errorMessage) {
 	};
 }
 //#endregion
-export { aggregateHelpersPlugin as _, uniqueField as a, subdocumentPlugin as c, observabilityPlugin as d, mongoOperationsPlugin as f, cascadePlugin as g, elasticSearchPlugin as h, requireField as i, immutableStatesPlugin as l, fieldFilterPlugin as m, blockIf as n, validationChainPlugin as o, leasePlugin as p, immutableField as r, createTenantContext as s, autoInject as t, appendOnlyPlugin as u };
+export { aggregateHelpersPlugin as _, uniqueField as a, subdocumentPlugin as c, leasePlugin as d, immutableStatesPlugin as f, appendOnlyPlugin as g, cascadePlugin as h, requireField as i, observabilityPlugin as l, elasticSearchPlugin as m, blockIf as n, validationChainPlugin as o, fieldFilterPlugin as p, immutableField as r, createTenantContext as s, autoInject as t, mongoOperationsPlugin as u };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@classytic/mongokit",
-  "version": "3.22.0",
+  "version": "3.22.1",
   "description": "Production-grade MongoDB repositories - smart pagination, events, and plugins. Built on @classytic/repo-core.",
   "type": "module",
   "sideEffects": false,