@classytic/mongokit 3.32.0 → 3.34.0

package/dist/better-auth/index.mjs

@@ -1,5 +1,6 @@
-import { n as Repository } from "../Repository-B_1y9cCf.mjs";
+import { n as Repository } from "../Repository-BArvU32x.mjs";
 import { n as createMongooseAdapter } from "../adapter-BitHg-CN.mjs";
+import { asReadOnlyRepo } from "@classytic/repo-core/repository";
 import { pluralizeBetterAuthCollection, resolveBetterAuthCollections } from "@classytic/repo-core/better-auth";
 //#region src/better-auth/index.ts
 /**
@@ -39,6 +40,10 @@ function missingIndexesOn(existing, declared) {
 	const existingIndexes = (existing?.schema)?.indexes?.() ?? [];
 	return declared.filter((d) => !existingIndexes.some(([fields, options]) => indexFieldsKey(fields) === indexFieldsKey(d.fields) && declaredOptionsSatisfied(d.options ?? {}, options ?? {})));
 }
+/** The `_id` path for a stub/overlay schema, or `{}` to inherit mongoose's ObjectId default. */
+function idPath(idType) {
+	return idType === "string" ? { _id: { type: String } } : {};
+}
 /**
 * Register stub Mongoose models for Better Auth's collections so that
 * Mongoose-based resources can `.populate()` references to BA-owned
@@ -67,7 +72,7 @@ function registerBetterAuthStubs(mongoose, options = {}) {
 	const registered = [];
 	for (const finalName of names) {
 		if (finalName in mongoose.models) continue;
-		const schema = new mongoose.Schema({}, {
+		const schema = new mongoose.Schema(idPath(options.idType), {
 			strict: false,
 			collection: finalName,
 			timestamps: false
@@ -95,7 +100,7 @@ function registerBetterAuthStubs(mongoose, options = {}) {
 *         would silently drop this call's `additionalFields` / `indexes`).
 */
 async function createBetterAuthOverlay(options) {
-	const { auth, mongoose, collection, additionalFields = {}, indexes = [], usePlural = false, RepositoryClass, schemaGenerator } = options;
+	const { auth, mongoose, collection, additionalFields = {}, indexes = [], usePlural = false, RepositoryClass, schemaGenerator, unsafeWritable = false } = options;
 	const ctx = await auth.$context;
 	const tableConfig = ctx.tables[collection];
 	if (!tableConfig) throw new Error(`[mongokit:better-auth] Better Auth has no table named '${collection}'. Available: ${Object.keys(ctx.tables).join(", ")}. Did you enable the right plugin in your betterAuth() config?`);
@@ -134,7 +139,10 @@ async function createBetterAuthOverlay(options) {
 	}
 	let Model = mongoose.models[finalName];
 	if (!Model) {
-		const schema = new mongoose.Schema(additionalFields, {
+		const schema = new mongoose.Schema({
+			...idPath(options.idType),
+			...additionalFields
+		}, {
 			strict: false,
 			collection: finalName,
 			timestamps: false
@@ -142,7 +150,8 @@ async function createBetterAuthOverlay(options) {
 		for (const idx of indexes) schema.index(idx.fields, idx.options);
 		Model = mongoose.model(finalName, schema);
 	}
-	const repository = new (RepositoryClass ?? Repository)(Model);
+	const built = new (RepositoryClass ?? Repository)(Model);
+	const repository = unsafeWritable ? built : asReadOnlyRepo(built, { reason: `Better Auth owns writes to '${finalName}' (hashing, session revocation, org cascades, plugin hooks) — mutate via auth.api, not generic CRUD. Pass \`unsafeWritable: true\` to this overlay if raw administrative writes are required` });
 	return createMongooseAdapter({
 		model: Model,
 		repository,
@@ -150,6 +159,50 @@ async function createBetterAuthOverlay(options) {
 	});
 }
 /**
+* Minimal structural surface for the one write we need. Satisfied by BOTH a
+* native MongoDB `Collection` (`db.collection('session')`) and a Mongoose
+* `Model` — so the host passes whichever it has, and mongokit keeps mongoose +
+* the mongodb driver as peer deps with zero runtime import.
+*/
+/**
+* Ensure the TTL index that reaps expired Better Auth sessions.
+*
+* BA stamps `expiresAt` on every session (tunable via `session.expiresIn`,
+* default 7 days) but its mongo adapter creates NO index for it, and nothing
+* else sweeps the collection — so `session` grows without bound on the hottest
+* auth table. Measured on two live deployments before this existed: 568 rows
+* (233 expired) and 909 rows of which EVERY ONE was expired, the oldest five
+* months old.
+*
+* It lives here rather than in a host or a spine module because this kit is
+* what knows Better Auth's collection names — a host-side fix only protects
+* that host, and every other consumer keeps leaking.
+*
+* `expireAfterSeconds: 0` means "delete once `expiresAt` has passed", so
+* mongo's background task keeps the collection bounded with no application
+* code. Idempotent — re-creating an existing index is a no-op.
+*
+* NOT called automatically by {@link registerBetterAuthStubs}: that function is
+* synchronous and writes nothing to the database, and silently issuing DDL from
+* a model-registration helper would be a surprise. Call this once at boot.
+*
+* @returns `true` when an index was created or already present, `false` when
+*          the attempt failed (logged by the caller, never thrown — a missing
+*          TTL degrades storage, and refusing to boot over it is worse).
+*/
+async function ensureBetterAuthSessionTtl(connection, options = {}) {
+	const name = options.collection ?? "session";
+	try {
+		await connection.collection(name).createIndex({ expiresAt: 1 }, {
+			expireAfterSeconds: 0,
+			name: options.indexName ?? "ttl_session_expiresAt"
+		});
+		return true;
+	} catch {
+		return false;
+	}
+}
+/**
 * Clear a dangling `activeOrganizationId` from Better Auth `session` rows.
 *
 * WHY THIS EXISTS: Better Auth purges its `member` / `invitation` rows when an
@@ -180,4 +233,4 @@ async function clearActiveOrganizationFromSessions(sessions, organizationId, opt
 	return (await sessions.updateMany(filter, { $set: { activeOrganizationId: null } })).modifiedCount ?? 0;
 }
 //#endregion
-export { clearActiveOrganizationFromSessions, createBetterAuthOverlay, registerBetterAuthStubs };
+export { clearActiveOrganizationFromSessions, createBetterAuthOverlay, ensureBetterAuthSessionTtl, registerBetterAuthStubs };

package/dist/{create-repository-mEdfH9sz.d.mts → create-repository-BU4x9Kb0.d.mts}

@@ -1,8 +1,8 @@
 import { c as PaginationConfig } from "./pagination-jSUdrACK.mjs";
-import { _ as RepositoryOptions, d as PluginType } from "./repository-Q16ErTu8.mjs";
-import { T as AuditTrailOptions, _ as RepositoryCachePluginOptions, i as CustomIdOptions, t as MultiTenantOptions } from "./multi-tenant.plugin-2VtSSm1Y.mjs";
-import { n as Repository } from "./Repository-BAzymuOz.mjs";
-import { i as Logger, o as SoftDeleteOptions } from "./plugin-options-BsFH0sTi.mjs";
+import { _ as RepositoryOptions, d as PluginType } from "./repository-H_ffGgpE.mjs";
+import { T as AuditTrailOptions, _ as RepositoryCachePluginOptions, i as CustomIdOptions, t as MultiTenantOptions } from "./multi-tenant.plugin-BwSvTirB.mjs";
+import { n as Repository } from "./Repository-BdSkQ8vc.mjs";
+import { i as Logger, o as SoftDeleteOptions } from "./plugin-options-DXnlKM3B.mjs";
 import { Model } from "mongoose";
 //#region src/create-repository.d.ts
 /**

package/dist/{create-repository-a3DQ5tzt.mjs → create-repository-CPNbktFG.mjs}

@@ -1,5 +1,5 @@
-import { n as Repository } from "./Repository-B_1y9cCf.mjs";
-import { a as customIdPlugin, f as auditTrailPlugin, i as multiTenantPlugin, m as auditLogPlugin, n as softDeletePlugin, t as timestampPlugin, u as cachePlugin } from "./timestamp.plugin-CAXzHs9y.mjs";
+import { n as Repository } from "./Repository-BArvU32x.mjs";
+import { a as customIdPlugin, f as auditTrailPlugin, i as multiTenantPlugin, m as auditLogPlugin, n as softDeletePlugin, t as timestampPlugin, u as cachePlugin } from "./timestamp.plugin-BEc6TANm.mjs";
 import { n as batchOperationsPlugin, t as methodRegistryPlugin } from "./method-registry.plugin-DblM7V6j.mjs";
 //#region src/create-repository.ts
 function isLoggerAudit(value) {

package/dist/id-chunks-BmAwsqNk.mjs

@@ -0,0 +1,67 @@
+//#region src/utils/id-chunks.ts
+/**
+* Default slice for `$in` fan-out. Larger than `runChunkedPurge`'s 1000 on purpose:
+* a purge chunk bounds the WRITE LOCK SCOPE of each progressive strategy step, while a
+* snapshot slice bounds only the query-document size and the per-call working set —
+* 10k ObjectIds is ~120 KB of `$in`, far under every limit, at 10× fewer round trips.
+*/
+const DEFAULT_ID_CHUNK = 1e4;
+/**
+* Collect the bare id values matching `filter`, streaming via a driver cursor so the
+* only O(n) allocation is the returned array itself (a `find().lean()` materializes an
+* intermediate array of `{_id}` documents first — roughly double the peak for large n).
+*/
+async function collectIds(model, filter, options = {}) {
+	const idField = options.idField ?? "_id";
+	const ids = [];
+	const cursor = model.find(filter, { [idField]: 1 }).session(options.session ?? null).lean().cursor();
+	for await (const doc of cursor) ids.push(doc[idField]);
+	return ids;
+}
+/**
+* Yield `ids` in consecutive slices of at most `size`. Yields nothing for an empty
+* array. `size` must be a positive integer — sliced `$in` correctness depends on it,
+* so a nonsense size throws instead of silently degrading to one giant slice.
+*/
+function* idChunks(ids, size) {
+	if (!Number.isInteger(size) || size < 1) throw new Error(`idChunks: size must be a positive integer, got ${String(size)}`);
+	for (let i = 0; i < ids.length; i += size) yield ids.slice(i, i + size);
+}
+/**
+* Compose the keyset-progressed select filter: the base predicate, narrowed to rows past
+* the last committed `_id`. `cursor == null` means "from the start". Selection paired
+* with this must sort `_id`-ascending ({@link selectKeysetChunk} does), so `$gt: cursor`
+* never revisits a processed row and never skips an unprocessed one. Never mutates
+* `baseFilter`.
+*/
+function keysetFilter(baseFilter, cursor) {
+	return cursor == null ? baseFilter : {
+		...baseFilter,
+		_id: { $gt: cursor }
+	};
+}
+/**
+* The `_id`-ascending bounded chunk select both action ports share:
+* `find(filter).sort({_id: 1}).limit(limit).lean()`. Lean on purpose — chunk consumers
+* want plain objects, not hydrated documents. Pass `projection: {_id: 1}` when only ids
+* are needed (the purge port's common path); omit it for full docs (archive's readChunk,
+* anonymize-functional).
+*/
+async function selectKeysetChunk(model, filter, limit, options = {}) {
+	return await model.find(filter, options.projection).sort({ _id: 1 }).limit(limit).session(options.session ?? null).lean().exec();
+}
+/**
+* Re-assert the base predicate on an id-narrowed WRITE: `{...base, _id: {$in: ids}}`.
+* The `$in` alone would be enough to address the chunk, but carrying the base predicate
+* defends against a row whose scope fields changed between the chunk select and the
+* write — such a row is silently skipped instead of written outside its cohort. Both
+* action ports use this shape; use it for any select-then-write over a chunk.
+*/
+function narrowToIds(baseFilter, ids) {
+	return {
+		...baseFilter,
+		_id: { $in: ids }
+	};
+}
+//#endregion
+export { narrowToIds as a, keysetFilter as i, collectIds as n, selectKeysetChunk as o, idChunks as r, DEFAULT_ID_CHUNK as t };

package/dist/{index-Beyr1r4d.d.mts → index-DKEql4cL.d.mts}

@@ -1,4 +1,4 @@
-import { c as GroupResult, d as MinMaxResult, f as OperationOptions, g as UpdateOptions, h as UpdateManyResult, i as CreateOptions, o as DeleteResult, s as FindOneAndUpdateOptions, y as LookupOptions } from "./operations-CuzX9m2Z.mjs";
+import { _ as UpdateOptions, a as CreateOptions, b as LookupOptions, c as FindOneAndUpdateOptions, f as MinMaxResult, g as UpdateManyResult, l as GroupResult, p as OperationOptions, s as DeleteResult } from "./operations-DZodvjC-.mjs";
 import { a as PopulateSpec, i as ObjectId, l as SortSpec, o as ReadPreferenceType, s as SelectSpec, t as AnyDocument } from "./core-62oo3N1C.mjs";
 import { p as UpdateWithValidationResult } from "./type-utils-CLzRFtIA.mjs";
 import { Model, PipelineStage } from "mongoose";

package/dist/index.d.mts

@@ -1,18 +1,18 @@
-import { _ as WithTransactionOptions, c as GroupResult, d as MinMaxResult, f as OperationOptions, g as UpdateOptions, h as UpdateManyResult, i as CreateOptions, l as LookupPopulateOptions, m as SessionOptions, n as CacheOperationOptions, o as DeleteResult, p as ReadOptions, r as CacheableOptions, s as FindOneAndUpdateOptions, t as AggregateOptions, u as LookupPopulateResult, v as LookupBuilder, y as LookupOptions } from "./operations-CuzX9m2Z.mjs";
+import { _ as UpdateOptions, a as CreateOptions, b as LookupOptions, c as FindOneAndUpdateOptions, d as LookupPopulateResult, f as MinMaxResult, g as UpdateManyResult, h as SessionOptions, i as ConvenientTransactionOptions, l as GroupResult, m as ReadOptions, n as CacheOperationOptions, p as OperationOptions, r as CacheableOptions, s as DeleteResult, t as AggregateOptions, u as LookupPopulateOptions, v as WithTransactionOptions, y as LookupBuilder } from "./operations-DZodvjC-.mjs";
 import { a as PopulateSpec, c as SortDirection, i as ObjectId, l as SortSpec$1, n as AnyModel, o as ReadPreferenceType, s as SelectSpec, t as AnyDocument } from "./core-62oo3N1C.mjs";
 import { a as DecodedCursor, c as PaginationConfig, i as CursorPayload, l as ValueType, n as BasePaginationOptions, o as KeysetPaginationOptions, r as CollationOptions, s as OffsetPaginationOptions, t as AggregatePaginationOptions } from "./pagination-jSUdrACK.mjs";
-import { t as index_d_exports } from "./index-Beyr1r4d.mjs";
+import { t as index_d_exports } from "./index-DKEql4cL.mjs";
 import { a as InferRawDoc, c as NonNullableFields, d as Strict, f as UpdatePatch, i as InferDocument, l as PartialBy, n as DeepPartial, o as KeysOfType, p as UpdateWithValidationResult, r as DocField, s as MongoOperatorUpdate, t as CreateInput, u as RequiredBy } from "./type-utils-CLzRFtIA.mjs";
-import { S as RepositoryPluginName, _ as RepositoryOptions, a as HookMode, b as MONGOKIT_PLUGIN_NAMES, c as MinimalRepoView, d as PluginType, f as PrioritizedHook, g as RepositoryOperation, h as RepositoryInstance, i as EventPhase, l as Plugin, m as RepositoryEvent, n as EventHandlers, o as Middleware, p as RepositoryContext, r as EventPayload, s as MiddlewareContext, t as AllPluginMethods, u as PluginFunction, v as UserContext, x as MongoKitPluginName, y as WithPlugins } from "./repository-Q16ErTu8.mjs";
-import { A as ensureAuditTrailReady, C as AuditTrailMethods, D as AuditTrailQueryOptions, E as AuditTrailQuery, O as EnsureAuditTrailReadyOptions, S as AuditQueryResult, T as AuditTrailOptions, _ as RepositoryCachePluginOptions, a as DateSequentialIdOptions, b as AuditOperation, c as SequentialIdOptions, d as getNextSequence, f as prefixedId, g as RepositoryCacheHandle, h as CacheOptions, i as CustomIdOptions, k as auditTrailPlugin, l as customIdPlugin, m as CacheAdapter, n as adminBypass, o as IdGenerator, p as sequentialId, r as multiTenantPlugin, s as PrefixedIdOptions, t as MultiTenantOptions, u as dateSequentialId, v as cachePlugin, w as AuditTrailMode, x as AuditQueryOptions, y as AuditEntry } from "./multi-tenant.plugin-2VtSSm1Y.mjs";
+import { S as RepositoryPluginName, _ as RepositoryOptions, a as HookMode, b as MONGOKIT_PLUGIN_NAMES, c as MinimalRepoView, d as PluginType, f as PrioritizedHook, g as RepositoryOperation, h as RepositoryInstance, i as EventPhase, l as Plugin, m as RepositoryEvent, n as EventHandlers, o as Middleware, p as RepositoryContext, r as EventPayload, s as MiddlewareContext, t as AllPluginMethods, u as PluginFunction, v as UserContext, x as MongoKitPluginName, y as WithPlugins } from "./repository-H_ffGgpE.mjs";
+import { A as ensureAuditTrailReady, C as AuditTrailMethods, D as AuditTrailQueryOptions, E as AuditTrailQuery, O as EnsureAuditTrailReadyOptions, S as AuditQueryResult, T as AuditTrailOptions, _ as RepositoryCachePluginOptions, a as DateSequentialIdOptions, b as AuditOperation, c as SequentialIdOptions, d as getNextSequence, f as prefixedId, g as RepositoryCacheHandle, h as CacheOptions, i as CustomIdOptions, k as auditTrailPlugin, l as customIdPlugin, m as CacheAdapter, n as adminBypass, o as IdGenerator, p as sequentialId, r as multiTenantPlugin, s as PrefixedIdOptions, t as MultiTenantOptions, u as dateSequentialId, v as cachePlugin, w as AuditTrailMode, x as AuditQueryOptions, y as AuditEntry } from "./multi-tenant.plugin-BwSvTirB.mjs";
 import { t as PaginationEngine } from "./PaginationEngine-CBS1XGzp.mjs";
-import { a as AggregationPlan, c as SortOrder, i as AggregationBuilder, l as SortSpec, n as Repository, o as GroupSpec, r as TransitionMachine, s as ProjectionSpec, t as HOOK_PRIORITY, u as VectorSearchOptions } from "./Repository-BAzymuOz.mjs";
-import { a as SoftDeleteFilterMode, c as ValidationChainOptions, i as Logger, l as ValidatorDefinition, n as CascadeRelation, o as SoftDeleteOptions, r as FieldPreset, s as SoftDeleteRepository, t as CascadeOptions } from "./plugin-options-BsFH0sTi.mjs";
-import { n as CreateRepositoryConfig, r as createRepository, t as AuditConfig } from "./create-repository-mEdfH9sz.mjs";
-import { A as IdempotencyStoreMethods, B as auditLogPlugin, C as LeaseMethods, D as ImmutableStatesPluginOptions, E as ImmutableClaimView, F as elasticSearchPlugin, H as appendOnlyPlugin, I as cascadePlugin, L as BatchOperationsMethods, M as idempotencyStorePlugin, N as fieldFilterPlugin, O as immutableStatesPlugin, P as ElasticSearchOptions, R as BulkWriteResult, S as methodRegistryPlugin, T as leasePlugin, U as AggregateHelpersMethods, V as AppendOnlyPluginOptions, W as aggregateHelpersPlugin, _ as OperationMetric, a as requireField, b as mongoOperationsPlugin, c as timestampPlugin, d as createTenantContext, f as SubdocumentMethods, g as ObservabilityOptions, h as softDeletePlugin, i as immutableField, j as IdempotencyStorePluginOptions, k as IdempotencyClaim, l as TenantContext, m as SoftDeleteMethods, n as autoInject, o as uniqueField, p as subdocumentPlugin, r as blockIf, s as validationChainPlugin, t as OperationType, u as TenantStore, v as observabilityPlugin, w as LeasePluginOptions, y as MongoOperationsMethods, z as batchOperationsPlugin } from "./validation-chain.plugin-BSshLJTA.mjs";
+import { a as AggregationPlan, c as SortOrder, i as AggregationBuilder, l as SortSpec, n as Repository, o as GroupSpec, r as TransitionMachine, s as ProjectionSpec, t as HOOK_PRIORITY, u as VectorSearchOptions } from "./Repository-BdSkQ8vc.mjs";
+import { a as SoftDeleteFilterMode, c as ValidationChainOptions, i as Logger, l as ValidatorDefinition, n as CascadeRelation, o as SoftDeleteOptions, r as FieldPreset, s as SoftDeleteRepository, t as CascadeOptions } from "./plugin-options-DXnlKM3B.mjs";
+import { n as CreateRepositoryConfig, r as createRepository, t as AuditConfig } from "./create-repository-BU4x9Kb0.mjs";
+import { A as IdempotencyStoreMethods, B as auditLogPlugin, C as LeaseMethods, D as ImmutableStatesPluginOptions, E as ImmutableClaimView, F as elasticSearchPlugin, H as appendOnlyPlugin, I as cascadePlugin, L as BatchOperationsMethods, M as idempotencyStorePlugin, N as fieldFilterPlugin, O as immutableStatesPlugin, P as ElasticSearchOptions, R as BulkWriteResult, S as methodRegistryPlugin, T as leasePlugin, U as AggregateHelpersMethods, V as AppendOnlyPluginOptions, W as aggregateHelpersPlugin, _ as OperationMetric, a as requireField, b as mongoOperationsPlugin, c as timestampPlugin, d as createTenantContext, f as SubdocumentMethods, g as ObservabilityOptions, h as softDeletePlugin, i as immutableField, j as IdempotencyStorePluginOptions, k as IdempotencyClaim, l as TenantContext, m as SoftDeleteMethods, n as autoInject, o as uniqueField, p as subdocumentPlugin, r as blockIf, s as validationChainPlugin, t as OperationType, u as TenantStore, v as observabilityPlugin, w as LeasePluginOptions, y as MongoOperationsMethods, z as batchOperationsPlugin } from "./validation-chain.plugin-yQRob3Av.mjs";
 import { n as SchemaPathsLike, t as FieldType$1 } from "./coercion-BjdPX3YF.mjs";
 import { n as SchemaIndexes } from "./indexes-DIjMpYES.mjs";
-import { S as parseDuplicateKeyError, _ as getMongooseProjection, a as createMemoryCache, b as createError, g as getFieldsForUser, h as filterResponseData, i as buildCrudSchemasFromMongooseSchema, m as createFieldPreset, n as CrudSchemasFramework, o as LoggerConfig, r as buildCrudSchemasFromModel, s as configureLogger, t as toPlain, u as idVariants, v as CreateErrorOptions, x as isDuplicateKeyError, y as ParseDuplicateKeyOptions } from "./to-plain-BuX1RUZV.mjs";
+import { S as parseDuplicateKeyError, _ as getMongooseProjection, a as createMemoryCache, b as createError, g as getFieldsForUser, h as filterResponseData, i as buildCrudSchemasFromMongooseSchema, m as createFieldPreset, n as CrudSchemasFramework, o as LoggerConfig, r as buildCrudSchemasFromModel, s as configureLogger, t as toPlain, u as idVariants, v as CreateErrorOptions, x as isDuplicateKeyError, y as ParseDuplicateKeyOptions } from "./to-plain-Dyz_qvuo.mjs";
 import { RepoCapabilities } from "@classytic/repo-core/repository";
 import { ClientSession, Connection, Model, PipelineStage, Schema } from "mongoose";
 //#region src/actions/cascade-references.d.ts
@@ -144,10 +144,11 @@ declare function transactionResolutionOf(caps: RepoCapabilities): CapabilityReso
 /**
  * What MongoDB supports through mongokit's surface, DECLARED (not observed).
  *
- * Deployment-dependent flags (`transactions`, `nestedTransactions`,
- * `changeStreams` — all three need a replica set or mongos) are `true` here
- * because they describe the product, not the server you happen to be pointed
- * at. **Do not read this constant to decide whether a live connection can run
+ * Deployment-dependent flags (`transactions`, `changeStreams` — both need a
+ * replica set or mongos) are `true` here because they describe the product,
+ * not the server you happen to be pointed at. `nestedTransactions` is NOT one
+ * of them: it is `false` unconditionally, because the refusal comes from
+ * mongokit's own tx-bound proxy rather than from the deployment. **Do not read this constant to decide whether a live connection can run
  * a transaction** — that is {@link resolveMongoCapabilities}, which is what
  * `Repository#capabilities` returns. This one is for the cross-kit conformance
  * harness (which overrides environment-specific limits where it is
@@ -971,4 +972,4 @@ declare function createOptionsExtractor<TCtx extends Record<string, unknown>>(fi
  */
 declare function systemContext(extra?: SessionOptions): SessionOptions;
 //#endregion
-export { ALL_OPERATIONS, type AggregateHelpersMethods, type AggregateOptions, type AggregatePaginationOptions, AggregationBuilder, type AggregationPlan, type SortOrder as AggregationSortOrder, type SortSpec as AggregationSortSpec, type AllPluginMethods, type AnyDocument, type AnyModel, type AppendOnlyPluginOptions, type AuditConfig, type AuditEntry, type AuditOperation, type AuditQueryOptions, type AuditQueryResult, type AuditTrailMethods, type AuditTrailMode, type AuditTrailOptions, AuditTrailQuery, type AuditTrailQueryOptions, type BasePaginationOptions, type BatchOperationsMethods, type BulkWriteResult, type CacheAdapter, type CacheOperationOptions, type CacheOptions, type CacheableOptions, type CapabilityConnectionLike, type CapabilityProbeOptions, type CapabilityResolution, type CascadeOptions, type CascadePurgeReferencesOptions, type CascadeRelation, type CollationOptions, type CollectionRWLike, type CreateErrorOptions, type CreateInput, type CreateOptions, type CreateRepositoryConfig, type CrudSchemasFramework, type CursorPayload, type CustomIdOptions, type DateSequentialIdOptions, type DecodedCursor, type DeepPartial, type DefineModelOptions, type DeleteResult, type DocField, type ElasticSearchOptions, type EnsureAuditTrailReadyOptions, type EventHandlers, type EventPayload, type EventPhase, type ExistingModelPolicy, type FieldPreset, type FieldType, type FilterQuery, type FindOneAndUpdateOptions, type GroupResult, type GroupSpec, HOOK_PRIORITY, type HookMode, type IdGenerator, type IdempotencyClaim, type IdempotencyStoreMethods, type IdempotencyStorePluginOptions, type ImmutableClaimView, type ImmutableStatesPluginOptions, type InferDocument, type InferRawDoc, type KeysOfType, type KeysetPaginationOptions, type LeaseMethods, type LeasePluginOptions, type Logger, type LoggerConfig, LookupBuilder, type LookupOptions, type LookupPopulateOptions, type LookupPopulateResult, MONGOKIT_CAPABILITIES, MONGOKIT_PLUGIN_NAMES, MUTATING_OPERATIONS, type Middleware, type MiddlewareContext, type MinMaxResult, type MinimalRepoView, type ModelBlueprint, ModelCollisionError, type ModelSpec, type MongoKitPluginName, type MongoOperationsMethods, type MongoOperatorUpdate, type MongoRepoCapabilities, type MultiTenantOptions, type NonNullableFields, OP_REGISTRY, type ObjectId, type ObservabilityOptions, type OffsetPaginationOptions, type OperationDescriptor, type OperationMetric, type OperationOptions, type OperationType, type PaginationConfig, PaginationEngine, type ParseDuplicateKeyOptions, type ParsedQuery, type PartialBy, type Plugin, type PluginFunction, type PluginType, type PolicyKey, type PopulateOption, type PopulateSpec, type PrefixedIdOptions, type PrioritizedHook, type ProjectionSpec, type PurgeMode, type PurgeableRepoLike, QueryParser, type QueryParserOptions, type QuerySchema, READ_OPERATIONS, type ReadOptions, type ReadPreferenceType, type ReferencePurgeResult, type ReferenceRelation, Repository, Repository as default, type RepositoryCacheHandle, type RepositoryCachePluginOptions, type RepositoryContext, type RepositoryEvent, type RepositoryInstance, type RepositoryOperation, type RepositoryOptions, type RepositoryPluginName, type RequiredBy, type SchemaLike, type SearchMode, type SelectSpec, type SequentialIdOptions, type SessionOptions, type SessionStarter, type SoftDeleteFilterMode, type SoftDeleteMethods, type SoftDeleteOptions, type SoftDeleteRepository, type SortDirection, type SortSpec$1 as SortSpec, type Strict, type SubdocumentMethods, type TenantContext, type TenantStore, type TransactionSupport, type TransitionMachine, type UpdateManyResult, type UpdateOptions, type UpdatePatch, type UpdateWithValidationResult, type UserContext, type ValidationChainOptions, type ValidatorDefinition, type ValueType, type VectorSearchOptions, type WithPlugins, type WithTransactionOptions, index_d_exports as actions, adminBypass, aggregateHelpersPlugin, appendOnlyPlugin, auditLogPlugin, auditTrailPlugin, autoInject, batchOperationsPlugin, batchTransaction, blockIf, buildCrudSchemasFromModel, buildCrudSchemasFromMongooseSchema, cachePlugin, capabilitiesForSupport, cascadePlugin, cascadePurgeReferences, classifyHelloReply, compileFilterToMongo, configureLogger, createError, createFieldPreset, createMemoryCache, createOptionsExtractor, createRepository, createTenantContext, customIdPlugin, dateSequentialId, defineModel, defineModels, elasticSearchPlugin, ensureAuditTrailReady, fieldFilterPlugin, filterResponseData, getFieldsForUser, getMongooseProjection, getNextSequence, idVariants, idempotencyStorePlugin, immutableField, immutableStatesPlugin, isDuplicateKeyError, isModelRegistered, isTransactionUnsupported, leasePlugin, methodRegistryPlugin, mongoOperationsPlugin, multiTenantPlugin, observabilityPlugin, operationsByPolicyKey, parseDuplicateKeyError, prefixedId, probeMongoCapabilities, repoOptionsFromCtx, requireField, resetCapabilityProbeCache, resolveMongoCapabilities, resolveTransactionSupport, sequentialId, softDeletePlugin, subdocumentPlugin, supportsTransactions, systemContext, timestampPlugin, toPlain, transactionResolutionOf, uniqueField, validationChainPlugin, withTransaction };
+export { ALL_OPERATIONS, type AggregateHelpersMethods, type AggregateOptions, type AggregatePaginationOptions, AggregationBuilder, type AggregationPlan, type SortOrder as AggregationSortOrder, type SortSpec as AggregationSortSpec, type AllPluginMethods, type AnyDocument, type AnyModel, type AppendOnlyPluginOptions, type AuditConfig, type AuditEntry, type AuditOperation, type AuditQueryOptions, type AuditQueryResult, type AuditTrailMethods, type AuditTrailMode, type AuditTrailOptions, AuditTrailQuery, type AuditTrailQueryOptions, type BasePaginationOptions, type BatchOperationsMethods, type BulkWriteResult, type CacheAdapter, type CacheOperationOptions, type CacheOptions, type CacheableOptions, type CapabilityConnectionLike, type CapabilityProbeOptions, type CapabilityResolution, type CascadeOptions, type CascadePurgeReferencesOptions, type CascadeRelation, type CollationOptions, type CollectionRWLike, type ConvenientTransactionOptions, type CreateErrorOptions, type CreateInput, type CreateOptions, type CreateRepositoryConfig, type CrudSchemasFramework, type CursorPayload, type CustomIdOptions, type DateSequentialIdOptions, type DecodedCursor, type DeepPartial, type DefineModelOptions, type DeleteResult, type DocField, type ElasticSearchOptions, type EnsureAuditTrailReadyOptions, type EventHandlers, type EventPayload, type EventPhase, type ExistingModelPolicy, type FieldPreset, type FieldType, type FilterQuery, type FindOneAndUpdateOptions, type GroupResult, type GroupSpec, HOOK_PRIORITY, type HookMode, type IdGenerator, type IdempotencyClaim, type IdempotencyStoreMethods, type IdempotencyStorePluginOptions, type ImmutableClaimView, type ImmutableStatesPluginOptions, type InferDocument, type InferRawDoc, type KeysOfType, type KeysetPaginationOptions, type LeaseMethods, type LeasePluginOptions, type Logger, type LoggerConfig, LookupBuilder, type LookupOptions, type LookupPopulateOptions, type LookupPopulateResult, MONGOKIT_CAPABILITIES, MONGOKIT_PLUGIN_NAMES, MUTATING_OPERATIONS, type Middleware, type MiddlewareContext, type MinMaxResult, type MinimalRepoView, type ModelBlueprint, ModelCollisionError, type ModelSpec, type MongoKitPluginName, type MongoOperationsMethods, type MongoOperatorUpdate, type MongoRepoCapabilities, type MultiTenantOptions, type NonNullableFields, OP_REGISTRY, type ObjectId, type ObservabilityOptions, type OffsetPaginationOptions, type OperationDescriptor, type OperationMetric, type OperationOptions, type OperationType, type PaginationConfig, PaginationEngine, type ParseDuplicateKeyOptions, type ParsedQuery, type PartialBy, type Plugin, type PluginFunction, type PluginType, type PolicyKey, type PopulateOption, type PopulateSpec, type PrefixedIdOptions, type PrioritizedHook, type ProjectionSpec, type PurgeMode, type PurgeableRepoLike, QueryParser, type QueryParserOptions, type QuerySchema, READ_OPERATIONS, type ReadOptions, type ReadPreferenceType, type ReferencePurgeResult, type ReferenceRelation, Repository, Repository as default, type RepositoryCacheHandle, type RepositoryCachePluginOptions, type RepositoryContext, type RepositoryEvent, type RepositoryInstance, type RepositoryOperation, type RepositoryOptions, type RepositoryPluginName, type RequiredBy, type SchemaLike, type SearchMode, type SelectSpec, type SequentialIdOptions, type SessionOptions, type SessionStarter, type SoftDeleteFilterMode, type SoftDeleteMethods, type SoftDeleteOptions, type SoftDeleteRepository, type SortDirection, type SortSpec$1 as SortSpec, type Strict, type SubdocumentMethods, type TenantContext, type TenantStore, type TransactionSupport, type TransitionMachine, type UpdateManyResult, type UpdateOptions, type UpdatePatch, type UpdateWithValidationResult, type UserContext, type ValidationChainOptions, type ValidatorDefinition, type ValueType, type VectorSearchOptions, type WithPlugins, type WithTransactionOptions, index_d_exports as actions, adminBypass, aggregateHelpersPlugin, appendOnlyPlugin, auditLogPlugin, auditTrailPlugin, autoInject, batchOperationsPlugin, batchTransaction, blockIf, buildCrudSchemasFromModel, buildCrudSchemasFromMongooseSchema, cachePlugin, capabilitiesForSupport, cascadePlugin, cascadePurgeReferences, classifyHelloReply, compileFilterToMongo, configureLogger, createError, createFieldPreset, createMemoryCache, createOptionsExtractor, createRepository, createTenantContext, customIdPlugin, dateSequentialId, defineModel, defineModels, elasticSearchPlugin, ensureAuditTrailReady, fieldFilterPlugin, filterResponseData, getFieldsForUser, getMongooseProjection, getNextSequence, idVariants, idempotencyStorePlugin, immutableField, immutableStatesPlugin, isDuplicateKeyError, isModelRegistered, isTransactionUnsupported, leasePlugin, methodRegistryPlugin, mongoOperationsPlugin, multiTenantPlugin, observabilityPlugin, operationsByPolicyKey, parseDuplicateKeyError, prefixedId, probeMongoCapabilities, repoOptionsFromCtx, requireField, resetCapabilityProbeCache, resolveMongoCapabilities, resolveTransactionSupport, sequentialId, softDeletePlugin, subdocumentPlugin, supportsTransactions, systemContext, timestampPlugin, toPlain, transactionResolutionOf, uniqueField, validationChainPlugin, withTransaction };

package/dist/index.mjs

@@ -1,16 +1,16 @@
 import { n as idVariants } from "./id-resolution-BqDrk0S2.mjs";
-import { _ as resetCapabilityProbeCache, a as supportsTransactions, b as transactionResolutionOf, c as ALL_OPERATIONS, d as READ_OPERATIONS, f as operationsByPolicyKey, g as probeMongoCapabilities, h as classifyHelloReply, i as isTransactionUnsupported, l as MUTATING_OPERATIONS, m as capabilitiesForSupport, n as Repository, o as withTransaction, p as MONGOKIT_CAPABILITIES, r as batchTransaction, s as AggregationBuilder, t as HOOK_PRIORITY, u as OP_REGISTRY, v as resolveMongoCapabilities, x as createMongoPurgePort, y as resolveTransactionSupport } from "./Repository-B_1y9cCf.mjs";
-import { b as LookupBuilder, x as compileFilterToMongo } from "./update-w5i-pa_c.mjs";
+import { _ as resetCapabilityProbeCache, a as supportsTransactions, b as transactionResolutionOf, c as ALL_OPERATIONS, d as READ_OPERATIONS, f as operationsByPolicyKey, g as probeMongoCapabilities, h as classifyHelloReply, i as isTransactionUnsupported, l as MUTATING_OPERATIONS, m as capabilitiesForSupport, n as Repository, o as withTransaction, p as MONGOKIT_CAPABILITIES, r as batchTransaction, s as AggregationBuilder, t as HOOK_PRIORITY, u as OP_REGISTRY, v as resolveMongoCapabilities, x as createMongoPurgePort, y as resolveTransactionSupport } from "./Repository-BArvU32x.mjs";
+import { b as LookupBuilder, x as compileFilterToMongo } from "./update-jSXp3nu3.mjs";
 import { n as warn, t as configureLogger } from "./logger-K7dPmu2U.mjs";
 import { n as isDuplicateKeyError, r as parseDuplicateKeyError, t as createError } from "./error-BuByZwKU.mjs";
 import { t as actions_exports } from "./actions/index.mjs";
-import { a as customIdPlugin, c as prefixedId, d as AuditTrailQuery, f as auditTrailPlugin, i as multiTenantPlugin, l as sequentialId, m as auditLogPlugin, n as softDeletePlugin, o as dateSequentialId, p as ensureAuditTrailReady, r as adminBypass, s as getNextSequence, t as timestampPlugin, u as cachePlugin } from "./timestamp.plugin-CAXzHs9y.mjs";
+import { a as customIdPlugin, c as prefixedId, d as AuditTrailQuery, f as auditTrailPlugin, i as multiTenantPlugin, l as sequentialId, m as auditLogPlugin, n as softDeletePlugin, o as dateSequentialId, p as ensureAuditTrailReady, r as adminBypass, s as getNextSequence, t as timestampPlugin, u as cachePlugin } from "./timestamp.plugin-BEc6TANm.mjs";
 import { n as batchOperationsPlugin, t as methodRegistryPlugin } from "./method-registry.plugin-DblM7V6j.mjs";
-import { t as PaginationEngine } from "./PaginationEngine-CSh-P8Nh.mjs";
+import { t as PaginationEngine } from "./PaginationEngine-GdyX29tE.mjs";
 import { isGeoOperator, parseGeoFilter } from "./query/primitives/geo.mjs";
-import { t as createRepository } from "./create-repository-a3DQ5tzt.mjs";
+import { t as createRepository } from "./create-repository-CPNbktFG.mjs";
 import { n as defineModel, r as isModelRegistered, t as ModelCollisionError } from "./model-registry-ClKtWiHa.mjs";
-import { _ as cascadePlugin, a as uniqueField, c as subdocumentPlugin, d as mongoOperationsPlugin, f as leasePlugin, g as elasticSearchPlugin, h as fieldFilterPlugin, i as requireField, l as observabilityPlugin, m as idempotencyStorePlugin, n as blockIf, o as validationChainPlugin, p as immutableStatesPlugin, r as immutableField, s as createTenantContext, t as autoInject, u as MONGOKIT_PLUGIN_NAMES, v as appendOnlyPlugin, y as aggregateHelpersPlugin } from "./validation-chain.plugin-BihbMQRq.mjs";
+import { _ as cascadePlugin, a as uniqueField, c as subdocumentPlugin, d as mongoOperationsPlugin, f as leasePlugin, g as elasticSearchPlugin, h as fieldFilterPlugin, i as requireField, l as observabilityPlugin, m as idempotencyStorePlugin, n as blockIf, o as validationChainPlugin, p as immutableStatesPlugin, r as immutableField, s as createTenantContext, t as autoInject, u as MONGOKIT_PLUGIN_NAMES, v as appendOnlyPlugin, y as aggregateHelpersPlugin } from "./validation-chain.plugin-CyK1s9Ze.mjs";
 import { i as getMongooseProjection, n as filterResponseData, r as getFieldsForUser, t as createFieldPreset } from "./field-selection-FSQFLpsU.mjs";
 import { buildFieldTypeMap, coerceFieldValue, coerceHeuristic } from "./query/primitives/coercion.mjs";
 import { extractSchemaIndexes } from "./query/primitives/indexes.mjs";
@@ -536,11 +536,13 @@ function handleOperatorSyntax(rt, filters, regexFields, operatorMatch, value) {
 	}
 	if (operator.toLowerCase() === "options" && regexFields[field]) {
 		const fieldValue = filters[field];
-		if (typeof fieldValue === "object" && fieldValue !== null && "$regex" in fieldValue) if (typeof value === "string" && /^[imsx]+$/.test(value)) fieldValue.$options = value;
-		else rt.reject(`Blocked invalid regex $options value: ${String(value)}. Allowed flags: i, m, s, x`, {
-			field,
-			value: String(value)
-		});
+		if (typeof fieldValue === "object" && fieldValue !== null && "$regex" in fieldValue) {
+			if (typeof value === "string" && /^[imsx]+$/.test(value)) fieldValue.$options = value;
+			else rt.reject(`Blocked invalid regex $options value: ${String(value)}. Allowed flags: i, m, s, x`, {
+				field,
+				value: String(value)
+			});
+		}
 		return;
 	}
 	if (operator.toLowerCase() === "between") {
@@ -594,26 +596,27 @@ function handleOperatorSyntax(rt, filters, regexFields, operatorMatch, value) {
 			"gte",
 			"lt",
 			"lte"
-		].includes(op)) if (rt.fieldTypes.has(field)) {
-			processedValue = coerceFieldValue(field, value, rt.fieldTypes);
-			if (typeof processedValue === "number" && Number.isNaN(processedValue)) {
-				rt.reject(`Invalid value for ${field}[${op}]: ${String(value)}`, {
-					field,
-					op
-				});
-				return;
-			}
-		} else {
-			processedValue = parseFloat(String(value));
-			if (Number.isNaN(processedValue)) {
-				rt.reject(`Non-numeric value for ${field}[${op}]: ${String(value)}`, {
-					field,
-					op
-				});
-				return;
+		].includes(op)) {
+			if (rt.fieldTypes.has(field)) {
+				processedValue = coerceFieldValue(field, value, rt.fieldTypes);
+				if (typeof processedValue === "number" && Number.isNaN(processedValue)) {
+					rt.reject(`Invalid value for ${field}[${op}]: ${String(value)}`, {
+						field,
+						op
+					});
+					return;
+				}
+			} else {
+				processedValue = parseFloat(String(value));
+				if (Number.isNaN(processedValue)) {
+					rt.reject(`Non-numeric value for ${field}[${op}]: ${String(value)}`, {
+						field,
+						op
+					});
+					return;
+				}
 			}
-		}
-		else if (op === "in" || op === "nin") processedValue = (Array.isArray(value) ? value : String(value).split(",").map((v) => v.trim())).map((elem) => coerceFieldValue(field, elem, rt.fieldTypes));
+		} else if (op === "in" || op === "nin") processedValue = (Array.isArray(value) ? value : String(value).split(",").map((v) => v.trim())).map((elem) => coerceFieldValue(field, elem, rt.fieldTypes));
 		else processedValue = coerceFieldValue(field, value, rt.fieldTypes);
 		if (typeof filters[field] !== "object" || filters[field] === null || Array.isArray(filters[field])) filters[field] = {};
 		filters[field][mongoOperator] = processedValue;
@@ -672,26 +675,27 @@ function handleBracketSyntax(rt, field, operators, parsedFilters, depth = 0) {
 				"gte",
 				"lt",
 				"lte"
-			].includes(operator)) if (rt.fieldTypes.has(field)) {
-				processedValue = coerceFieldValue(field, value, rt.fieldTypes);
-				if (typeof processedValue === "number" && Number.isNaN(processedValue)) {
-					rt.reject(`Invalid value for ${field}[${operator}]: ${String(value)}`, {
-						field,
-						operator
-					});
-					continue;
-				}
-			} else {
-				processedValue = parseFloat(String(value));
-				if (Number.isNaN(processedValue)) {
-					rt.reject(`Non-numeric value for ${field}[${operator}]: ${String(value)}`, {
-						field,
-						operator
-					});
-					continue;
+			].includes(operator)) {
+				if (rt.fieldTypes.has(field)) {
+					processedValue = coerceFieldValue(field, value, rt.fieldTypes);
+					if (typeof processedValue === "number" && Number.isNaN(processedValue)) {
+						rt.reject(`Invalid value for ${field}[${operator}]: ${String(value)}`, {
+							field,
+							operator
+						});
+						continue;
+					}
+				} else {
+					processedValue = parseFloat(String(value));
+					if (Number.isNaN(processedValue)) {
+						rt.reject(`Non-numeric value for ${field}[${operator}]: ${String(value)}`, {
+							field,
+							operator
+						});
+						continue;
+					}
 				}
-			}
-			else if (operator === "in" || operator === "nin") processedValue = (Array.isArray(value) ? value : String(value).split(",").map((v) => v.trim())).map((elem) => coerceFieldValue(field, elem, rt.fieldTypes));
+			} else if (operator === "in" || operator === "nin") processedValue = (Array.isArray(value) ? value : String(value).split(",").map((v) => v.trim())).map((elem) => coerceFieldValue(field, elem, rt.fieldTypes));
 			else if (operator === "like" || operator === "contains" || operator === "regex") {
 				const safeRegex = createSafeRegex(rt, value, "i", operator === "regex" ? "reject" : "escape");
 				if (!safeRegex) continue;
@@ -1460,11 +1464,13 @@ var QueryParser = class {
 		const parsedPage = parsePositiveInt(rt, page, "page");
 		if (parsedPage !== void 0) parsed.page = parsedPage;
 		const orGroup = parseOr(rt, query);
-		if (orGroup) if (parsed.filters.$or) {
-			const existingOr = parsed.filters.$or;
-			delete parsed.filters.$or;
-			parsed.filters.$and = [{ $or: existingOr }, { $or: orGroup }];
-		} else parsed.filters.$or = orGroup;
+		if (orGroup) {
+			if (parsed.filters.$or) {
+				const existingOr = parsed.filters.$or;
+				delete parsed.filters.$or;
+				parsed.filters.$and = [{ $or: existingOr }, { $or: orGroup }];
+			} else parsed.filters.$or = orGroup;
+		}
 		parsed.filters = enhanceWithBetween(rt, parsed.filters);
 		return parsed;
 	}

package/dist/{multi-tenant.plugin-2VtSSm1Y.d.mts → multi-tenant.plugin-BwSvTirB.d.mts}

@@ -1,7 +1,7 @@
 import { i as ObjectId } from "./core-62oo3N1C.mjs";
-import { l as Plugin, p as RepositoryContext } from "./repository-Q16ErTu8.mjs";
+import { l as Plugin, p as RepositoryContext } from "./repository-H_ffGgpE.mjs";
 import mongoose, { Connection } from "mongoose";
-import { CacheAdapter as CacheAdapter$1, CacheOptions, RepositoryCacheHandle, RepositoryCachePluginOptions, cachePlugin } from "@classytic/repo-core/cache";
+import { CacheAdapter as CacheAdapter$1, CacheOptions, RepositoryCacheHandle as RepositoryCacheHandle$1, RepositoryCachePluginOptions, cachePlugin } from "@classytic/repo-core/cache";
 import { TenantConfig } from "@classytic/repo-core/tenant";
 //#region src/plugins/audit-trail.plugin.d.ts
 /**
@@ -582,4 +582,4 @@ declare function adminBypass(options: {
   adminRoles: readonly string[];
 }): (context: RepositoryContext, operation: string) => boolean;
 //#endregion
-export { ensureAuditTrailReady as A, AuditTrailMethods as C, AuditTrailQueryOptions as D, AuditTrailQuery as E, EnsureAuditTrailReadyOptions as O, AuditQueryResult as S, AuditTrailOptions as T, RepositoryCachePluginOptions as _, DateSequentialIdOptions as a, AuditOperation as b, SequentialIdOptions as c, getNextSequence as d, prefixedId as f, RepositoryCacheHandle as g, CacheOptions as h, CustomIdOptions as i, auditTrailPlugin as k, customIdPlugin as l, CacheAdapter$1 as m, adminBypass as n, IdGenerator as o, sequentialId as p, multiTenantPlugin as r, PrefixedIdOptions as s, MultiTenantOptions as t, dateSequentialId as u, cachePlugin as v, AuditTrailMode as w, AuditQueryOptions as x, AuditEntry as y };
+export { ensureAuditTrailReady as A, AuditTrailMethods as C, AuditTrailQueryOptions as D, AuditTrailQuery as E, EnsureAuditTrailReadyOptions as O, AuditQueryResult as S, AuditTrailOptions as T, RepositoryCachePluginOptions as _, DateSequentialIdOptions as a, AuditOperation as b, SequentialIdOptions as c, getNextSequence as d, prefixedId as f, RepositoryCacheHandle$1 as g, CacheOptions as h, CustomIdOptions as i, auditTrailPlugin as k, customIdPlugin as l, CacheAdapter$1 as m, adminBypass as n, IdGenerator as o, sequentialId as p, multiTenantPlugin as r, PrefixedIdOptions as s, MultiTenantOptions as t, dateSequentialId as u, cachePlugin as v, AuditTrailMode as w, AuditQueryOptions as x, AuditEntry as y };

package/dist/{operations-CuzX9m2Z.d.mts → operations-DZodvjC-.d.mts}

@@ -361,14 +361,25 @@ interface CacheOperationOptions {
   /** Per-call cache override forwarded to the unified cache plugin. */
   cache?: import('@classytic/repo-core/cache').CacheOptions;
 }
+/**
+ * `session.withTransaction()`'s own options param — `TransactionOptions` (readConcern,
+ * writeConcern, readPreference, maxCommitTimeMS) PLUS the driver's `timeoutMS`, which is
+ * NOT a field on `TransactionOptions` itself (verified against the installed mongodb
+ * driver's `ClientSession.withTransaction` overload, mongodb.d.ts). `timeoutMS` bounds the
+ * WHOLE `withTransaction` call, including its built-in retry loop (default 120s) — distinct
+ * from `maxCommitTimeMS`, which only bounds a single `commitTransaction` server call.
+ */
+type ConvenientTransactionOptions = import('mongoose').mongo.TransactionOptions & {
+  timeoutMS?: number;
+};
 /** withTransaction options */
 interface WithTransactionOptions {
   /** Allow non-transactional fallback when transactions are unsupported */
   allowFallback?: boolean;
   /** Optional hook to observe fallback triggers */
   onFallback?: (error: Error) => void;
-  /** MongoDB transaction options (readConcern, writeConcern, readPreference, maxCommitTimeMS) */
-  transactionOptions?: import('mongoose').mongo.TransactionOptions;
+  /** MongoDB transaction options (readConcern, writeConcern, readPreference, maxCommitTimeMS, timeoutMS) */
+  transactionOptions?: ConvenientTransactionOptions;
 }
 /** Create operation options */
 interface CreateOptions extends SessionOptions {
@@ -381,6 +392,14 @@ interface CreateOptions extends SessionOptions {
 interface UpdateOptions extends OperationOptions {
   /** Enable update pipeline syntax */
   updatePipeline?: boolean;
+  /**
+   * Optimistic-concurrency CAS (repo-core `WriteOptions.ifVersion`): apply
+   * only if the stored version field equals this value; the write also
+   * `$inc`s the version. Stale version → `VersionConflictError` (never
+   * `null` — null stays "not found"). Version field: `RepositoryOptions.versionField`,
+   * default `'__v'`.
+   */
+  ifVersion?: number;
   /** Array filters for positional operator $[<identifier>] updates */
   arrayFilters?: Record<string, unknown>[];
 }
@@ -499,4 +518,4 @@ interface MinMaxResult {
   max: unknown;
 }
 //#endregion
-export { WithTransactionOptions as _, DeleteManyResult as a, GroupResult as c, MinMaxResult as d, OperationOptions as f, UpdateOptions as g, UpdateManyResult as h, CreateOptions as i, LookupPopulateOptions as l, SessionOptions as m, CacheOperationOptions as n, DeleteResult as o, ReadOptions as p, CacheableOptions as r, FindOneAndUpdateOptions as s, AggregateOptions as t, LookupPopulateResult as u, LookupBuilder as v, LookupOptions as y };
+export { UpdateOptions as _, CreateOptions as a, LookupOptions as b, FindOneAndUpdateOptions as c, LookupPopulateResult as d, MinMaxResult as f, UpdateManyResult as g, SessionOptions as h, ConvenientTransactionOptions as i, GroupResult as l, ReadOptions as m, CacheOperationOptions as n, DeleteManyResult as o, OperationOptions as p, CacheableOptions as r, DeleteResult as s, AggregateOptions as t, LookupPopulateOptions as u, WithTransactionOptions as v, LookupBuilder as y };

package/dist/outbox/index.d.mts

@@ -1,4 +1,4 @@
-import { n as Repository } from "../Repository-BAzymuOz.mjs";
+import { n as Repository } from "../Repository-BdSkQ8vc.mjs";
 import { Connection, Model } from "mongoose";
 //#region src/outbox/index.d.ts
 /** Delivery states. `dead_letter` is terminal and operator-visible. */

package/dist/outbox/index.mjs

@@ -1,4 +1,4 @@
-import { n as Repository } from "../Repository-B_1y9cCf.mjs";
+import { n as Repository } from "../Repository-BArvU32x.mjs";
 import { n as batchOperationsPlugin, t as methodRegistryPlugin } from "../method-registry.plugin-DblM7V6j.mjs";
 import { Schema } from "mongoose";
 //#region src/outbox/index.ts

package/dist/pagination/PaginationEngine.mjs

@@ -1,2 +1,2 @@
-import { t as PaginationEngine } from "../PaginationEngine-CSh-P8Nh.mjs";
+import { t as PaginationEngine } from "../PaginationEngine-GdyX29tE.mjs";
 export { PaginationEngine };

package/dist/{plugin-options-BsFH0sTi.d.mts → plugin-options-DXnlKM3B.d.mts}

@@ -1,5 +1,5 @@
 import { a as PopulateSpec, i as ObjectId, l as SortSpec, s as SelectSpec } from "./core-62oo3N1C.mjs";
-import { h as RepositoryInstance, p as RepositoryContext } from "./repository-Q16ErTu8.mjs";
+import { h as RepositoryInstance, p as RepositoryContext } from "./repository-H_ffGgpE.mjs";
 import { OffsetPaginationResult } from "@classytic/repo-core/pagination";
 //#region src/types/plugin-options.d.ts
 /** Field preset configuration (field-filter plugin) */
@@ -111,6 +111,27 @@ interface CascadeRelation {
   foreignKey: string;
   /** Whether to use soft delete if available (default: follows parent behavior) */
   softDelete?: boolean;
+  /**
+   * What happens to the referencing documents when the parent is deleted.
+   *
+   * MongoDB has no foreign keys, so this is the application-level equivalent of an
+   * RDBMS `ON DELETE` clause. Odoo — which hard-deletes almost everything — relies on
+   * Postgres `ondelete='restrict'` in 31 places in its accounting module alone; that
+   * enforcement is what lets it skip soft delete entirely. Without an equivalent here, a
+   * hard delete leaves dangling references that surface later as reports with missing
+   * names, and the usual workaround is to soft-delete the parent forever — which hides
+   * the row rather than refusing the operation.
+   *
+   * - `cascade` (DEFAULT, and the pre-existing behaviour) — delete the children too.
+   * - `restrict` — REFUSE the parent delete while any reference remains. Runs
+   *   `before:delete`, because refusing after the parent is gone is not a refusal.
+   * - `detach` — clear the reference (`$unset`) and keep the child. The RDBMS
+   *   `SET NULL`; only valid where the field is optional.
+   *
+   * `restrict` and `detach` issue a query per relation on delete, so `foreignKey`
+   * SHOULD be indexed — Mongo gives no index for free the way a FK constraint does.
+   */
+  onDelete?: 'cascade' | 'restrict' | 'detach';
 }
 /** Cascade delete plugin options */
 interface CascadeOptions {
@@ -118,6 +139,15 @@ interface CascadeOptions {
   relations: CascadeRelation[];
   /** Run cascade deletes in parallel (default: true) */
   parallel?: boolean;
+  /**
+   * Upper bound on every `$in` the bulk (`deleteMany`) path issues — restrict counts,
+   * detach `$unset`s and cascade deletes are all sliced to at most this many parent ids
+   * per query. Bounds the query-document size (Mongo rejects documents past 16 MB, which
+   * an unsliced `$in` reaches around a million ObjectIds) and the per-call working set.
+   * Default 10_000 (`DEFAULT_ID_CHUNK`); see `utils/id-chunks.ts` for why this is larger
+   * than `runChunkedPurge`'s 1000.
+   */
+  batchSize?: number;
   /** Logger for cascade operations */
   logger?: Logger;
 }

package/dist/plugins/index.d.mts

@@ -1,6 +1,6 @@
-import { S as RepositoryPluginName, b as MONGOKIT_PLUGIN_NAMES, l as Plugin, x as MongoKitPluginName } from "../repository-Q16ErTu8.mjs";
-import { A as ensureAuditTrailReady, C as AuditTrailMethods, D as AuditTrailQueryOptions, E as AuditTrailQuery, O as EnsureAuditTrailReadyOptions, S as AuditQueryResult, T as AuditTrailOptions, _ as RepositoryCachePluginOptions, a as DateSequentialIdOptions, b as AuditOperation, c as SequentialIdOptions, d as getNextSequence, f as prefixedId, g as RepositoryCacheHandle, h as CacheOptions, i as CustomIdOptions, k as auditTrailPlugin, l as customIdPlugin, m as CacheAdapter, o as IdGenerator, p as sequentialId, r as multiTenantPlugin, s as PrefixedIdOptions, t as MultiTenantOptions, u as dateSequentialId, v as cachePlugin, w as AuditTrailMode, x as AuditQueryOptions, y as AuditEntry } from "../multi-tenant.plugin-2VtSSm1Y.mjs";
-import { A as IdempotencyStoreMethods, B as auditLogPlugin, C as LeaseMethods, D as ImmutableStatesPluginOptions, E as ImmutableClaimView, F as elasticSearchPlugin, H as appendOnlyPlugin, I as cascadePlugin, L as BatchOperationsMethods, M as idempotencyStorePlugin, N as fieldFilterPlugin, O as immutableStatesPlugin, P as ElasticSearchOptions, S as methodRegistryPlugin, T as leasePlugin, U as AggregateHelpersMethods, V as AppendOnlyPluginOptions, W as aggregateHelpersPlugin, _ as OperationMetric, a as requireField, b as mongoOperationsPlugin, c as timestampPlugin, d as createTenantContext, f as SubdocumentMethods, g as ObservabilityOptions, h as softDeletePlugin, i as immutableField, j as IdempotencyStorePluginOptions, k as IdempotencyClaim, l as TenantContext, m as SoftDeleteMethods, n as autoInject, o as uniqueField, p as subdocumentPlugin, r as blockIf, s as validationChainPlugin, t as OperationType, u as TenantStore, v as observabilityPlugin, w as LeasePluginOptions, x as MethodRegistryRepository, y as MongoOperationsMethods, z as batchOperationsPlugin } from "../validation-chain.plugin-BSshLJTA.mjs";
+import { S as RepositoryPluginName, b as MONGOKIT_PLUGIN_NAMES, l as Plugin, x as MongoKitPluginName } from "../repository-H_ffGgpE.mjs";
+import { A as ensureAuditTrailReady, C as AuditTrailMethods, D as AuditTrailQueryOptions, E as AuditTrailQuery, O as EnsureAuditTrailReadyOptions, S as AuditQueryResult, T as AuditTrailOptions, _ as RepositoryCachePluginOptions, a as DateSequentialIdOptions, b as AuditOperation, c as SequentialIdOptions, d as getNextSequence, f as prefixedId, g as RepositoryCacheHandle, h as CacheOptions, i as CustomIdOptions, k as auditTrailPlugin, l as customIdPlugin, m as CacheAdapter, o as IdGenerator, p as sequentialId, r as multiTenantPlugin, s as PrefixedIdOptions, t as MultiTenantOptions, u as dateSequentialId, v as cachePlugin, w as AuditTrailMode, x as AuditQueryOptions, y as AuditEntry } from "../multi-tenant.plugin-BwSvTirB.mjs";
+import { A as IdempotencyStoreMethods, B as auditLogPlugin, C as LeaseMethods, D as ImmutableStatesPluginOptions, E as ImmutableClaimView, F as elasticSearchPlugin, H as appendOnlyPlugin, I as cascadePlugin, L as BatchOperationsMethods, M as idempotencyStorePlugin, N as fieldFilterPlugin, O as immutableStatesPlugin, P as ElasticSearchOptions, S as methodRegistryPlugin, T as leasePlugin, U as AggregateHelpersMethods, V as AppendOnlyPluginOptions, W as aggregateHelpersPlugin, _ as OperationMetric, a as requireField, b as mongoOperationsPlugin, c as timestampPlugin, d as createTenantContext, f as SubdocumentMethods, g as ObservabilityOptions, h as softDeletePlugin, i as immutableField, j as IdempotencyStorePluginOptions, k as IdempotencyClaim, l as TenantContext, m as SoftDeleteMethods, n as autoInject, o as uniqueField, p as subdocumentPlugin, r as blockIf, s as validationChainPlugin, t as OperationType, u as TenantStore, v as observabilityPlugin, w as LeasePluginOptions, x as MethodRegistryRepository, y as MongoOperationsMethods, z as batchOperationsPlugin } from "../validation-chain.plugin-yQRob3Av.mjs";
 import { ChangeLogStore } from "@classytic/repo-core/sync";
 //#region src/plugins/change-log.plugin.d.ts
 interface ChangeLogPluginOptions {