@classytic/mongokit 3.33.0 → 3.35.0

package/dist/adapter/index.mjs

@@ -1,2 +1,2 @@
-import { n as createMongooseAdapter, r as isMongooseModel, t as MongooseAdapter } from "../adapter-BitHg-CN.mjs";
+import { n as createMongooseAdapter, r as isMongooseModel, t as MongooseAdapter } from "../adapter-DlaOGcQN.mjs";
 export { MongooseAdapter, createMongooseAdapter, isMongooseModel };

package/dist/{adapter-BitHg-CN.mjs → adapter-DlaOGcQN.mjs}

@@ -1,5 +1,5 @@
 import { n as warn } from "./logger-K7dPmu2U.mjs";
-import { t as buildCrudSchemasFromModel } from "./mongooseToJsonSchema-DKbnKduN.mjs";
+import { t as buildCrudSchemasFromModel } from "./mongooseToJsonSchema-waUVQwK4.mjs";
 import { matchesRecordFilter } from "@classytic/repo-core/filter";
 import { mergeFieldRuleConstraints } from "@classytic/repo-core/schema";
 import { asRepositoryLike, isRepository } from "@classytic/repo-core/adapter";

package/dist/better-auth/index.d.mts

@@ -49,9 +49,32 @@ interface BAFieldAttribute {
   };
   defaultValue?: unknown;
 }
+/**
+ * How Better Auth's `_id` values are stored, so mongoose casts queries the same way.
+ *
+ * - `'objectid'` (DEFAULT) — BA's mongo adapter generating its own ids writes
+ *   real ObjectIds. Mongoose's default `_id` SchemaType casts a hex string to
+ *   ObjectId, which is what makes `findById`, `_id` filters and `populate`
+ *   resolve.
+ * - `'string'` — the host overrode `advanced.database.generateId` (commonly to
+ *   `randomBytes(12).toString('hex')`, which AVOIDS a cross-driver ObjectId
+ *   `instanceof` failure). BA then stores those ids as STRINGS.
+ *
+ * Getting this wrong fails in the quiet direction, in BOTH directions: an
+ * ObjectId-typed schema over string ids casts every lookup to an ObjectId that
+ * matches nothing, so `getById` 404s and `populate` yields null — no error, no
+ * log. Measured on a real deployment: `GET /me`, `GET /users/:id` and
+ * `GET /branches/code/:code` all 404'd for rows that existed.
+ *
+ * There is no safe default that covers both, which is why this is an explicit
+ * option rather than a guess: read `typeof doc._id` from a live row.
+ */
+type BetterAuthIdType = 'objectid' | 'string';
 interface RegisterBetterAuthStubsOptions {
   /** Plugin sets to include. `core` is always implied. */
   plugins?: BetterAuthPluginKey$1[];
+  /** How BA stores `_id` — see {@link BetterAuthIdType}. Default `'objectid'`. */
+  idType?: BetterAuthIdType;
   /** Additional collection names beyond the plugin set. */
   extraCollections?: string[];
   /** Mirror BA's `usePlural` flag — appends `s` to every collection name. */
@@ -115,6 +138,8 @@ interface BetterAuthOverlayOptions<TDoc = Record<string, unknown>> {
    * Mongoose-side concerns (validators, indexes, defaults).
    */
   additionalFields?: Record<string, unknown>;
+  /** How BA stores `_id` — see {@link BetterAuthIdType}. Default `'objectid'`. */
+  idType?: BetterAuthIdType;
   /**
    * Mongoose schema indexes to attach to the overlay model.
    *
@@ -200,6 +225,40 @@ declare function createBetterAuthOverlay<TDoc = Record<string, unknown>>(options
  * `Model` — so the host passes whichever it has, and mongokit keeps mongoose +
  * the mongodb driver as peer deps with zero runtime import.
  */
+/**
+ * Ensure the TTL index that reaps expired Better Auth sessions.
+ *
+ * BA stamps `expiresAt` on every session (tunable via `session.expiresIn`,
+ * default 7 days) but its mongo adapter creates NO index for it, and nothing
+ * else sweeps the collection — so `session` grows without bound on the hottest
+ * auth table. Measured on two live deployments before this existed: 568 rows
+ * (233 expired) and 909 rows of which EVERY ONE was expired, the oldest five
+ * months old.
+ *
+ * It lives here rather than in a host or a spine module because this kit is
+ * what knows Better Auth's collection names — a host-side fix only protects
+ * that host, and every other consumer keeps leaking.
+ *
+ * `expireAfterSeconds: 0` means "delete once `expiresAt` has passed", so
+ * mongo's background task keeps the collection bounded with no application
+ * code. Idempotent — re-creating an existing index is a no-op.
+ *
+ * NOT called automatically by {@link registerBetterAuthStubs}: that function is
+ * synchronous and writes nothing to the database, and silently issuing DDL from
+ * a model-registration helper would be a surprise. Call this once at boot.
+ *
+ * @returns `true` when an index was created or already present, `false` when
+ *          the attempt failed (logged by the caller, never thrown — a missing
+ *          TTL degrades storage, and refusing to boot over it is worse).
+ */
+declare function ensureBetterAuthSessionTtl(connection: {
+  collection(name: string): {
+    createIndex(keys: Record<string, 1>, opts: Record<string, unknown>): Promise<unknown>;
+  };
+}, options?: {
+  collection?: string;
+  indexName?: string;
+}): Promise<boolean>;
 interface SessionUpdaterLike {
   updateMany(filter: Record<string, unknown>, update: Record<string, unknown>): Promise<{
     modifiedCount?: number;
@@ -234,4 +293,4 @@ declare function clearActiveOrganizationFromSessions(sessions: SessionUpdaterLik
   userId?: unknown;
 }): Promise<number>;
 //#endregion
-export { BetterAuthInstance, BetterAuthOverlayOptions, type BetterAuthPluginKey, MongooseLike, RegisterBetterAuthStubsOptions, SessionUpdaterLike, clearActiveOrganizationFromSessions, createBetterAuthOverlay, registerBetterAuthStubs };
+export { BetterAuthIdType, BetterAuthInstance, BetterAuthOverlayOptions, type BetterAuthPluginKey, MongooseLike, RegisterBetterAuthStubsOptions, SessionUpdaterLike, clearActiveOrganizationFromSessions, createBetterAuthOverlay, ensureBetterAuthSessionTtl, registerBetterAuthStubs };

package/dist/better-auth/index.mjs

@@ -1,5 +1,5 @@
 import { n as Repository } from "../Repository-BArvU32x.mjs";
-import { n as createMongooseAdapter } from "../adapter-BitHg-CN.mjs";
+import { n as createMongooseAdapter } from "../adapter-DlaOGcQN.mjs";
 import { asReadOnlyRepo } from "@classytic/repo-core/repository";
 import { pluralizeBetterAuthCollection, resolveBetterAuthCollections } from "@classytic/repo-core/better-auth";
 //#region src/better-auth/index.ts
@@ -40,6 +40,10 @@ function missingIndexesOn(existing, declared) {
 	const existingIndexes = (existing?.schema)?.indexes?.() ?? [];
 	return declared.filter((d) => !existingIndexes.some(([fields, options]) => indexFieldsKey(fields) === indexFieldsKey(d.fields) && declaredOptionsSatisfied(d.options ?? {}, options ?? {})));
 }
+/** The `_id` path for a stub/overlay schema, or `{}` to inherit mongoose's ObjectId default. */
+function idPath(idType) {
+	return idType === "string" ? { _id: { type: String } } : {};
+}
 /**
 * Register stub Mongoose models for Better Auth's collections so that
 * Mongoose-based resources can `.populate()` references to BA-owned
@@ -68,7 +72,7 @@ function registerBetterAuthStubs(mongoose, options = {}) {
 	const registered = [];
 	for (const finalName of names) {
 		if (finalName in mongoose.models) continue;
-		const schema = new mongoose.Schema({}, {
+		const schema = new mongoose.Schema(idPath(options.idType), {
 			strict: false,
 			collection: finalName,
 			timestamps: false
@@ -135,7 +139,10 @@ async function createBetterAuthOverlay(options) {
 	}
 	let Model = mongoose.models[finalName];
 	if (!Model) {
-		const schema = new mongoose.Schema(additionalFields, {
+		const schema = new mongoose.Schema({
+			...idPath(options.idType),
+			...additionalFields
+		}, {
 			strict: false,
 			collection: finalName,
 			timestamps: false
@@ -152,6 +159,50 @@ async function createBetterAuthOverlay(options) {
 	});
 }
 /**
+* Minimal structural surface for the one write we need. Satisfied by BOTH a
+* native MongoDB `Collection` (`db.collection('session')`) and a Mongoose
+* `Model` — so the host passes whichever it has, and mongokit keeps mongoose +
+* the mongodb driver as peer deps with zero runtime import.
+*/
+/**
+* Ensure the TTL index that reaps expired Better Auth sessions.
+*
+* BA stamps `expiresAt` on every session (tunable via `session.expiresIn`,
+* default 7 days) but its mongo adapter creates NO index for it, and nothing
+* else sweeps the collection — so `session` grows without bound on the hottest
+* auth table. Measured on two live deployments before this existed: 568 rows
+* (233 expired) and 909 rows of which EVERY ONE was expired, the oldest five
+* months old.
+*
+* It lives here rather than in a host or a spine module because this kit is
+* what knows Better Auth's collection names — a host-side fix only protects
+* that host, and every other consumer keeps leaking.
+*
+* `expireAfterSeconds: 0` means "delete once `expiresAt` has passed", so
+* mongo's background task keeps the collection bounded with no application
+* code. Idempotent — re-creating an existing index is a no-op.
+*
+* NOT called automatically by {@link registerBetterAuthStubs}: that function is
+* synchronous and writes nothing to the database, and silently issuing DDL from
+* a model-registration helper would be a surprise. Call this once at boot.
+*
+* @returns `true` when an index was created or already present, `false` when
+*          the attempt failed (logged by the caller, never thrown — a missing
+*          TTL degrades storage, and refusing to boot over it is worse).
+*/
+async function ensureBetterAuthSessionTtl(connection, options = {}) {
+	const name = options.collection ?? "session";
+	try {
+		await connection.collection(name).createIndex({ expiresAt: 1 }, {
+			expireAfterSeconds: 0,
+			name: options.indexName ?? "ttl_session_expiresAt"
+		});
+		return true;
+	} catch {
+		return false;
+	}
+}
+/**
 * Clear a dangling `activeOrganizationId` from Better Auth `session` rows.
 *
 * WHY THIS EXISTS: Better Auth purges its `member` / `invitation` rows when an
@@ -182,4 +233,4 @@ async function clearActiveOrganizationFromSessions(sessions, organizationId, opt
 	return (await sessions.updateMany(filter, { $set: { activeOrganizationId: null } })).modifiedCount ?? 0;
 }
 //#endregion
-export { clearActiveOrganizationFromSessions, createBetterAuthOverlay, registerBetterAuthStubs };
+export { clearActiveOrganizationFromSessions, createBetterAuthOverlay, ensureBetterAuthSessionTtl, registerBetterAuthStubs };

package/dist/index.mjs

@@ -15,7 +15,7 @@ import { i as getMongooseProjection, n as filterResponseData, r as getFieldsForU
 import { buildFieldTypeMap, coerceFieldValue, coerceHeuristic } from "./query/primitives/coercion.mjs";
 import { extractSchemaIndexes } from "./query/primitives/indexes.mjs";
 import { n as createMemoryCache, t as toPlain } from "./to-plain-vksRrLtc.mjs";
-import { n as buildCrudSchemasFromMongooseSchema, t as buildCrudSchemasFromModel } from "./mongooseToJsonSchema-DKbnKduN.mjs";
+import { n as buildCrudSchemasFromMongooseSchema, t as buildCrudSchemasFromModel } from "./mongooseToJsonSchema-waUVQwK4.mjs";
 import { runChunkedPurge } from "@classytic/repo-core/repository";
 import { isControlParam } from "@classytic/repo-core/query-parser";
 //#region src/actions/cascade-references.ts

package/dist/{mongooseToJsonSchema-DKbnKduN.mjs → mongooseToJsonSchema-waUVQwK4.mjs}

@@ -474,9 +474,37 @@ function stripDefaultsDeep(node) {
 	delete obj.default;
 	for (const value of Object.values(obj)) stripDefaultsDeep(value);
 }
+/**
+* Recursively delete every `required` keyword from a JSON-schema subtree
+* (properties, array items, nested subdocuments).
+*
+* PATCH semantics mean every field is optional at EVERY nesting depth, not
+* just the root — a caller may send a partial subdocument-array item (e.g.
+* `variants: [{ sku, isActive }]` to toggle a flag) without re-supplying
+* every field the CREATE schema requires for that item. The one-line
+* `delete clone.required` below only stripped the top-level key; a
+* DocumentArray's `items` schema carries its OWN `required` (built by
+* `subSchemaToJsonSchema`), which survived untouched — so a partial nested
+* item still failed AJV's `required` check before the request ever reached
+* the repository (real defect: PATCHing a product to add ONE variant with
+* no `variationAttributes` 400'd on `variants/0` missing `attributes`, even
+* though `attributes: {}` is a valid, already-persisted value). Same fix
+* shape as `stripDefaultsDeep` above, for the identical reason: an UPDATE
+* schema's partial-field semantics belong to the whole tree, not its root.
+*/
+function stripRequiredDeep(node) {
+	if (Array.isArray(node)) {
+		for (const item of node) stripRequiredDeep(item);
+		return;
+	}
+	if (!node || typeof node !== "object") return;
+	const obj = node;
+	delete obj.required;
+	for (const value of Object.values(obj)) stripRequiredDeep(value);
+}
 function buildJsonSchemaForUpdate(createJson, options) {
 	const clone = JSON.parse(JSON.stringify(createJson));
-	delete clone.required;
+	stripRequiredDeep(clone);
 	const fieldsToOmit = collectFieldsToOmit(options, "update");
 	applyFieldRules(clone, fieldsToOmit, options);
 	stripDefaultsDeep(clone);

package/dist/utils/index.mjs

@@ -4,5 +4,5 @@ import { t as configureLogger } from "../logger-K7dPmu2U.mjs";
 import { t as createError } from "../error-BuByZwKU.mjs";
 import { i as getMongooseProjection, n as filterResponseData, r as getFieldsForUser, t as createFieldPreset } from "../field-selection-FSQFLpsU.mjs";
 import { n as createMemoryCache, t as toPlain } from "../to-plain-vksRrLtc.mjs";
-import { n as buildCrudSchemasFromMongooseSchema, t as buildCrudSchemasFromModel } from "../mongooseToJsonSchema-DKbnKduN.mjs";
+import { n as buildCrudSchemasFromMongooseSchema, t as buildCrudSchemasFromModel } from "../mongooseToJsonSchema-waUVQwK4.mjs";
 export { DEFAULT_ID_CHUNK, buildCrudSchemasFromModel, buildCrudSchemasFromMongooseSchema, collectIds, configureLogger, createError, createFieldPreset, createMemoryCache, filterResponseData, getFieldsForUser, getMongooseProjection, getSchemaIdType, idChunks, isObjectIdInstance, isValidIdForType, keysetFilter, narrowToIds, selectKeysetChunk, toObjectId, toPlain };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@classytic/mongokit",
-  "version": "3.33.0",
+  "version": "3.35.0",
   "description": "Production-grade MongoDB repositories - smart pagination, events, and plugins. Built on @classytic/repo-core.",
   "type": "module",
   "sideEffects": false,
@@ -122,7 +122,7 @@
   },
   "homepage": "https://github.com/classytic/mongokit#readme",
   "peerDependencies": {
-    "@classytic/repo-core": ">=0.23.0",
+    "@classytic/repo-core": ">=0.25.0",
     "mongodb-memory-server": ">=10.4.3",
     "mongoose": ">=9.4.1"
   },
@@ -174,7 +174,7 @@
     "@better-auth/mongo-adapter": "^1.6.29",
     "@biomejs/biome": "^2.5.8",
     "@classytic/dev-tools": "^0.2.0",
-    "@classytic/repo-core": "^0.23.0",
+    "@classytic/repo-core": "^0.25.0",
     "@types/node": "^26.2.0",
     "@vitest/coverage-v8": "^4.1.10",
     "ajv": "^8.20.0",