@classytic/mongokit 3.43.1 → 3.45.0

package/dist/actions/index.d.mts

@@ -1,2 +1,2 @@
-import { c as create_d_exports, i as delete_d_exports, n as update_d_exports, r as read_d_exports, u as aggregate_d_exports } from "../index-SYF8N28D.mjs";
+import { c as create_d_exports, i as delete_d_exports, n as update_d_exports, r as read_d_exports, u as aggregate_d_exports } from "../index-5mhQ63_B.mjs";
 export { aggregate_d_exports as aggregate, create_d_exports as create, delete_d_exports as deleteActions, read_d_exports as read, update_d_exports as update };

package/dist/actions/index.mjs

@@ -1,2 +1,2 @@
-export { m as aggregate, S as create, p as deleteActions, u as read, i as update } from "../update-WgeAUJ_I.mjs";
-import "../actions-ChYfkPYP.mjs";
+export { m as aggregate, S as create, p as deleteActions, u as read, i as update } from "../update-CYaJMu6j.mjs";
+import "../actions-DKQx9ToJ.mjs";

package/dist/{actions-ChYfkPYP.mjs → actions-DKQx9ToJ.mjs}

@@ -1,6 +1,6 @@
-import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.mjs";
-import { S as create_exports, i as update_exports, m as aggregate_exports, p as delete_exports, u as read_exports } from "./update-WgeAUJ_I.mjs";
-//#region src/actions/index.ts
+import { t as __exportAll } from "./rolldown-runtime-D8jQpDG7.mjs";
+import { S as create_exports, i as update_exports, m as aggregate_exports, p as delete_exports, u as read_exports } from "./update-CYaJMu6j.mjs";
+// src/actions/index.ts
 var actions_exports = /* @__PURE__ */ __exportAll({
 	aggregate: () => aggregate_exports,
 	create: () => create_exports,
@@ -8,5 +8,4 @@ var actions_exports = /* @__PURE__ */ __exportAll({
 	read: () => read_exports,
 	update: () => update_exports
 });
-//#endregion
 export { actions_exports as t };

package/dist/adapter/index.d.mts

@@ -2,7 +2,6 @@ import { StandardRepo } from "@classytic/repo-core/repository";
 import { Document, Model } from "mongoose";
 import { SchemaBuilderOptions, SchemaGenerator } from "@classytic/repo-core/schema";
 import { AdapterRepositoryInput, AdapterSchemaContext, AdapterValidationResult, DataAdapter, OpenApiSchemas, RepositoryLike, SchemaMetadata } from "@classytic/repo-core/adapter";
-//#region src/adapter/mongoose-adapter.d.ts
 interface MongooseAdapterOptions<TDoc = unknown, TModelDoc = unknown> {
   /**
    * The Mongoose model. Still a real `Model`, so a Schema or a hand-built
@@ -68,8 +67,8 @@ interface MongooseAdapterOptions<TDoc = unknown, TModelDoc = unknown> {
  * Mongoose data adapter — implements the `DataAdapter<TDoc>` contract from
  * `@classytic/repo-core/adapter`.
  */
-declare class MongooseAdapter<TDoc = unknown, TModelDoc = unknown> implements DataAdapter<TDoc> {
-  readonly type: "mongoose";
+export declare class MongooseAdapter<TDoc = unknown, TModelDoc = unknown> implements DataAdapter<TDoc> {
+  readonly type: 'mongoose';
   readonly name: string;
   /**
    * The model as given. Its document type is NOT `TDoc` — a lean repository
@@ -196,10 +195,8 @@ declare class MongooseAdapter<TDoc = unknown, TModelDoc = unknown> implements Da
  * const adapter = createMongooseAdapter(ProductModel, productRepository);
  * ```
  */
-declare function createMongooseAdapter<TDoc = unknown, TModelDoc = unknown>(model: Model<TModelDoc>, repository: AdapterRepositoryInput<TDoc>): DataAdapter<TDoc>;
-declare function createMongooseAdapter<TDoc = unknown, TModelDoc = unknown>(options: MongooseAdapterOptions<TDoc, TModelDoc>): DataAdapter<TDoc>;
-//#endregion
-//#region src/adapter/types.d.ts
+export declare function createMongooseAdapter<TDoc = unknown, TModelDoc = unknown>(model: Model<TModelDoc>, repository: AdapterRepositoryInput<TDoc>): DataAdapter<TDoc>;
+export declare function createMongooseAdapter<TDoc = unknown, TModelDoc = unknown>(options: MongooseAdapterOptions<TDoc, TModelDoc>): DataAdapter<TDoc>;
 /**
  * Infer document type from a Mongoose model.
  *
@@ -233,7 +230,7 @@ type MatchingModel<TDoc> = Model<TDoc & Document>;
 /**
  * Runtime guard: is `value` a Mongoose model?
  */
-declare function isMongooseModel(value: unknown): value is Model<Document>;
+export declare function isMongooseModel(value: unknown): value is Model<Document>;
 /**
  * Mongoose SchemaType internal shape (not fully exposed by `@types/mongoose`).
  * Used to extract field metadata from schema paths.
@@ -252,5 +249,4 @@ interface MongooseSchemaType {
   };
   [key: string]: unknown;
 }
-//#endregion
-export { type CleanDoc, type InferAdapterDoc, type InferMongooseDoc, type InferRepoDoc, type MatchingModel, MongooseAdapter, type MongooseAdapterOptions, type MongooseDocument, type MongooseSchemaType, createMongooseAdapter, isMongooseModel };
+export type { CleanDoc, InferAdapterDoc, InferMongooseDoc, InferRepoDoc, MatchingModel, MongooseAdapterOptions, MongooseDocument, MongooseSchemaType };

package/dist/adapter/index.mjs

@@ -1 +1 @@
-export { t as MongooseAdapter, n as createMongooseAdapter, r as isMongooseModel } from "../adapter-CkMoMF83.mjs";
+export { t as MongooseAdapter, n as createMongooseAdapter, r as isMongooseModel } from "../adapter-Qzgc3ZD_.mjs";

package/dist/{adapter-CkMoMF83.mjs → adapter-Qzgc3ZD_.mjs}

@@ -1,17 +1,16 @@
-import { n as warn } from "./logger-K7dPmu2U.mjs";
-import { t as buildCrudSchemasFromModel } from "./mongooseToJsonSchema-C3k4ide0.mjs";
+import { n as warn } from "./logger-hbWOlj_X.mjs";
+import { t as buildCrudSchemasFromModel } from "./mongooseToJsonSchema-DMDotz4_.mjs";
 import { matchesRecordFilter } from "@classytic/repo-core/filter";
 import { mergeFieldRuleConstraints } from "@classytic/repo-core/schema";
 import { asRepositoryLike, isRepository } from "@classytic/repo-core/adapter";
-//#region src/adapter/types.ts
+// src/adapter/types.ts
 /**
 * Runtime guard: is `value` a Mongoose model?
 */
 function isMongooseModel(value) {
 	return typeof value === "function" && value.prototype && "modelName" in value && "schema" in value;
 }
-//#endregion
-//#region src/adapter/mongoose-adapter.ts
+// src/adapter/mongoose-adapter.ts
 const REQUIRED_REPO_METHODS = [
 	"getAll",
 	"getById",
@@ -325,5 +324,4 @@ function createMongooseAdapter(modelOrOptions, repository) {
 	}
 	return new MongooseAdapter(modelOrOptions);
 }
-//#endregion
 export { createMongooseAdapter as n, isMongooseModel as r, MongooseAdapter as t };

package/dist/ai/index.d.mts

@@ -1,6 +1,5 @@
-import { l as Plugin } from "../repository-MqAP409e.mjs";
+import { l as Plugin } from "../repository-B0aFVgP2.mjs";
 import { PipelineStage } from "mongoose";
-//#region src/ai/types.d.ts
 /** Supported similarity metrics for vector search */
 type SimilarityMetric = 'cosine' | 'euclidean' | 'dotProduct';
 /** A single piece of content to embed — text, image, or any media */
@@ -65,7 +64,11 @@ interface VectorSearchParams {
   limit?: number;
   /** Candidates to consider (higher = more accurate, slower). Default: limit * 10 */
   numCandidates?: number;
-  /** Pre-filter documents before vector search */
+  /**
+   * Pre-filter documents before vector search (`$vectorSearch.filter`). Every path
+   * must be declared as a `{ type: 'filter', path }` field on the vector index.
+   * With `multiTenantPlugin`, the tenant clause is merged in here automatically.
+   */
   filter?: Record<string, unknown>;
   /** Use exact KNN instead of approximate (slower but precise) */
   exact?: boolean;
@@ -81,6 +84,19 @@ interface VectorSearchParams {
   minScore?: number;
   /** Additional pipeline stages to append after search */
   postPipeline?: PipelineStage[];
+  /**
+   * Tenant scope for `multiTenantPlugin` (default `contextKey`). `searchSimilar`
+   * runs the same `before:searchSimilar` policy hooks as other reads, so a
+   * required tenant that is missing here (and not resolved via `resolveContext`)
+   * throws, exactly like `getAll`.
+   */
+  organizationId?: string;
+  /** Per-call tenant bypass — same semantics as every other repository read. */
+  bypassTenant?: boolean;
+  /** Abort signal, checked before the policy hooks run. */
+  signal?: AbortSignal;
+  /** Any other context key a policy plugin reads (e.g. a custom `contextKey` like `branchId`). */
+  [contextKey: string]: unknown;
 }
 /** Vector search result with score */
 interface ScoredResult<T = Record<string, unknown>> {
@@ -128,8 +144,6 @@ interface VectorPluginOptions {
    */
   blockPrivateIpUrls?: boolean;
 }
-//#endregion
-//#region src/ai/vector.plugin.d.ts
 interface VectorMethods {
   searchSimilar<T = Record<string, unknown>>(params: VectorSearchParams): Promise<ScoredResult<T>[]>;
   embed(input: EmbeddingInput | string): Promise<number[]>;
@@ -141,6 +155,5 @@ declare function buildVectorSearchPipeline(field: VectorFieldConfig, queryVector
 /**
  * Creates the vector search plugin
  */
-declare function vectorPlugin(options: VectorPluginOptions): Plugin;
-//#endregion
-export { type BatchEmbedFn, type EmbedFn, type EmbeddingInput, type ScoredResult, type SimilarityMetric, type VectorFieldConfig, type VectorMethods, type VectorPluginOptions, type VectorSearchParams, buildVectorSearchPipeline, vectorPlugin };
+export declare function vectorPlugin(options: VectorPluginOptions): Plugin;
+export { type BatchEmbedFn, type EmbedFn, type EmbeddingInput, type ScoredResult, type SimilarityMetric, type VectorFieldConfig, type VectorMethods, type VectorPluginOptions, type VectorSearchParams, buildVectorSearchPipeline };

package/dist/ai/index.mjs

@@ -1,5 +1,5 @@
-import { n as warn } from "../logger-K7dPmu2U.mjs";
-//#region src/ai/url-policy.ts
+import { n as warn } from "../logger-hbWOlj_X.mjs";
+// src/ai/url-policy.ts
 /**
 * URL policy helpers for the vector plugin media pipeline.
 *
@@ -72,8 +72,7 @@ function isPrivateOrLocalHost(hostname) {
 	if (a === 100 && b >= 64 && b <= 127) return true;
 	return false;
 }
-//#endregion
-//#region src/ai/vector-error-hints.ts
+// src/ai/vector-error-hints.ts
 /**
 * Pure classifier. Takes the raw error and the context the plugin knows
 * (index name, dimensions, filter paths it tried to use) and returns a hint.
@@ -157,8 +156,7 @@ function extractErrorMessage(err) {
 	}
 	return String(err);
 }
-//#endregion
-//#region src/ai/vector.plugin.ts
+// src/ai/vector.plugin.ts
 /** Maximum numCandidates allowed by Atlas Vector Search */
 const MAX_NUM_CANDIDATES = 1e4;
 /**
@@ -273,6 +271,12 @@ function vectorPlugin(options) {
 			repo.registerMethod("searchSimilar", async function searchSimilar(params) {
 				if (vectorSearchUnavailable) throw vectorSearchUnavailable;
 				const field = resolveField(fields, params.field);
+				const { query: _query, filter: callerFilter, ...contextOptions } = params;
+				const scopedFilter = (await repo._buildContext("searchSimilar", {
+					...contextOptions,
+					...callerFilter && { filters: callerFilter }
+				})).filters;
+				const filter = scopedFilter && Object.keys(scopedFilter).length > 0 ? scopedFilter : void 0;
 				let queryVector;
 				if (Array.isArray(params.query)) queryVector = params.query;
 				else {
@@ -281,7 +285,10 @@ function vectorPlugin(options) {
 					queryVector = await embedFn(input);
 				}
 				if (queryVector.length !== field.dimensions) throw new Error(`[mongokit] Query vector has ${queryVector.length} dimensions, expected ${field.dimensions}`);
-				const pipeline = buildVectorSearchPipeline(field, queryVector, params);
+				const pipeline = buildVectorSearchPipeline(field, queryVector, {
+					...params,
+					filter
+				});
 				const agg = repo.Model.aggregate(pipeline);
 				if (params.session) agg.session(params.session);
 				let results;
@@ -289,7 +296,7 @@ function vectorPlugin(options) {
 					results = await withVectorErrorHints(() => agg.exec(), {
 						indexName: field.index,
 						dimensions: field.dimensions,
-						filterPaths: params.filter ? Object.keys(params.filter) : void 0
+						filterPaths: filter ? Object.keys(filter) : void 0
 					});
 				} catch (err) {
 					if (err.code === "NOT_ATLAS") vectorSearchUnavailable = err;
@@ -391,5 +398,4 @@ function vectorPlugin(options) {
 		}
 	};
 }
-//#endregion
 export { buildVectorSearchPipeline, vectorPlugin };

package/dist/better-auth/index.d.mts

@@ -1,12 +1,11 @@
 import { DataAdapter, RepositoryLike } from "@classytic/repo-core/adapter";
 import { BetterAuthPluginKey, BetterAuthPluginKey as BetterAuthPluginKey$1 } from "@classytic/repo-core/better-auth";
-//#region src/better-auth/index.d.ts
 /**
  * Minimal structural type for the Mongoose surface this module touches.
  * Declared structurally so the file has zero runtime `import` of mongoose —
  * mongoose stays a peer dep and is never bundled with mongokit.
  */
-interface MongooseLike {
+export interface MongooseLike {
   models: Record<string, unknown>;
   Schema: new (definition?: Record<string, unknown>, options?: Record<string, unknown>) => MongooseSchemaLike;
   model: (name: string, schema?: unknown) => MongooseModelLike;
@@ -26,7 +25,7 @@ interface MongooseModelLike {
  * `better-auth` from this module — declared as an *optional* peer in
  * package.json for hosts that import this subpath.
  */
-interface BetterAuthInstance {
+export interface BetterAuthInstance {
   $context: Promise<{
     tables: Record<string, BATableConfig>;
   }> | {
@@ -54,11 +53,14 @@ interface BATableConfig {
  * log. Measured on a real deployment: `GET /me`, `GET /users/:id` and
  * `GET /branches/code/:code` all 404'd for rows that existed.
  *
- * There is no safe default that covers both, which is why this is an explicit
+ * - `'uuid'` - the host set `advanced.database.generateId: 'uuid'`. BA then stores real BSON UUIDs
+ *   (not strings), and the schema needs the UUID SchemaType so a string id is cast to one.
+ *
+ * There is no safe default that covers all three, which is why this is an explicit
  * option rather than a guess: read `typeof doc._id` from a live row.
  */
-type BetterAuthIdType = 'objectid' | 'string';
-interface RegisterBetterAuthStubsOptions {
+export type BetterAuthIdType = 'objectid' | 'string' | 'uuid';
+export interface RegisterBetterAuthStubsOptions {
   /** Plugin sets to include. `core` is always implied. */
   plugins?: BetterAuthPluginKey$1[];
   /** How BA stores `_id` — see {@link BetterAuthIdType}. Default `'objectid'`. */
@@ -102,8 +104,8 @@ interface RegisterBetterAuthStubsOptions {
  * @returns the model names that were newly registered (excluding any that
  *          already existed on `mongoose.models`).
  */
-declare function registerBetterAuthStubs(mongoose: MongooseLike, options?: RegisterBetterAuthStubsOptions): string[];
-interface BetterAuthOverlayOptions<TDoc = Record<string, unknown>> {
+export declare function registerBetterAuthStubs(mongoose: MongooseLike, options?: RegisterBetterAuthStubsOptions): string[];
+export interface BetterAuthOverlayOptions<TDoc = Record<string, unknown>> {
   /** A `betterAuth()` instance. Used to read the resolved schema (`auth.$context.tables`). */
   auth: BetterAuthInstance;
   /** Mongoose instance — passed in to keep mongoose a peer dep. */
@@ -206,7 +208,7 @@ interface BetterAuthOverlayOptions<TDoc = Record<string, unknown>> {
  *         registered on `mongoose.models` from a prior call (re-registration
  *         would silently drop this call's `additionalFields` / `indexes`).
  */
-declare function createBetterAuthOverlay<TDoc = Record<string, unknown>>(options: BetterAuthOverlayOptions<TDoc>): Promise<DataAdapter<TDoc>>;
+export declare function createBetterAuthOverlay<TDoc = Record<string, unknown>>(options: BetterAuthOverlayOptions<TDoc>): Promise<DataAdapter<TDoc>>;
 /**
  * Minimal structural surface for the one write we need. Satisfied by BOTH a
  * native MongoDB `Collection` (`db.collection('session')`) and a Mongoose
@@ -239,7 +241,7 @@ declare function createBetterAuthOverlay<TDoc = Record<string, unknown>>(options
  *          the attempt failed (logged by the caller, never thrown — a missing
  *          TTL degrades storage, and refusing to boot over it is worse).
  */
-declare function ensureBetterAuthSessionTtl(connection: {
+export declare function ensureBetterAuthSessionTtl(connection: {
   collection(name: string): {
     createIndex(keys: Record<string, 1>, opts: Record<string, unknown>): Promise<unknown>;
   };
@@ -255,7 +257,7 @@ declare function ensureBetterAuthSessionTtl(connection: {
  * because failing a boot over historical duplicates is worse than running with
  * a plain lookup index and reporting the degradation.
  */
-interface BetterAuthIndexSpec {
+export interface BetterAuthIndexSpec {
   /** Canonical collection name (`'user'`, `'session'`, ...). */
   collection: string;
   keys: Record<string, 1 | -1>;
@@ -280,16 +282,16 @@ interface BetterAuthIndexSpec {
  * TTL entries (`expiresAt`) additionally keep the collection BOUNDED — see
  * {@link ensureBetterAuthSessionTtl} for the measurements that motivated it.
  */
-declare const BA_INDEXES_BY_PLUGIN: Record<string, readonly BetterAuthIndexSpec[]>;
+export declare const BA_INDEXES_BY_PLUGIN: Record<string, readonly BetterAuthIndexSpec[]>;
 /** Outcome of one declared index. */
-interface BetterAuthIndexResult {
+export interface BetterAuthIndexResult {
   collection: string;
   name: string;
   status: 'created' | 'degraded' | 'failed';
   /** Set on `degraded` (unique dropped) and `failed`. */
   reason?: string;
 }
-interface EnsureBetterAuthIndexesOptions {
+export interface EnsureBetterAuthIndexesOptions {
   /** Plugin sets to include beyond `core` (always implied). */
   plugins?: BetterAuthPluginKey$1[];
   /** Mirror BA's `usePlural` — appends `s` to every collection name. */
@@ -299,7 +301,7 @@ interface EnsureBetterAuthIndexesOptions {
   /** Canonical collection names to skip entirely. */
   exclude?: string[];
 }
-interface IndexCreator {
+export interface IndexCreator {
   collection(name: string): {
     createIndex(keys: Record<string, 1 | -1>, opts: Record<string, unknown>): Promise<unknown>;
   };
@@ -323,8 +325,8 @@ interface IndexCreator {
  *
  * Call once at boot, after the connection is live. Safe to call again.
  */
-declare function ensureBetterAuthIndexes(connection: IndexCreator, options?: EnsureBetterAuthIndexesOptions): Promise<BetterAuthIndexResult[]>;
-interface SessionUpdaterLike {
+export declare function ensureBetterAuthIndexes(connection: IndexCreator, options?: EnsureBetterAuthIndexesOptions): Promise<BetterAuthIndexResult[]>;
+export interface SessionUpdaterLike {
   updateMany(filter: Record<string, unknown>, update: Record<string, unknown>): Promise<{
     modifiedCount?: number;
   }>;
@@ -354,8 +356,7 @@ interface SessionUpdaterLike {
  *
  * @returns the number of sessions whose pointer was cleared.
  */
-declare function clearActiveOrganizationFromSessions(sessions: SessionUpdaterLike, organizationId: string, options?: {
+export declare function clearActiveOrganizationFromSessions(sessions: SessionUpdaterLike, organizationId: string, options?: {
   userId?: unknown;
 }): Promise<number>;
-//#endregion
-export { BA_INDEXES_BY_PLUGIN, BetterAuthIdType, BetterAuthIndexResult, BetterAuthIndexSpec, BetterAuthInstance, BetterAuthOverlayOptions, type BetterAuthPluginKey, EnsureBetterAuthIndexesOptions, IndexCreator, MongooseLike, RegisterBetterAuthStubsOptions, SessionUpdaterLike, clearActiveOrganizationFromSessions, createBetterAuthOverlay, ensureBetterAuthIndexes, ensureBetterAuthSessionTtl, registerBetterAuthStubs };
+export type { BetterAuthPluginKey };

package/dist/better-auth/index.mjs

@@ -1,8 +1,8 @@
-import { n as Repository } from "../Repository-Dj6xqPxJ.mjs";
-import { n as createMongooseAdapter } from "../adapter-CkMoMF83.mjs";
+import { n as createMongooseAdapter } from "../adapter-Qzgc3ZD_.mjs";
+import { n as Repository } from "../Repository-DheA7oW-.mjs";
 import { asReadOnlyRepo } from "@classytic/repo-core/repository";
 import { pluralizeBetterAuthCollection, resolveBetterAuthCollections } from "@classytic/repo-core/better-auth";
-//#region src/better-auth/index.ts
+// src/better-auth/index.ts
 /**
 * Field key with ORDER PRESERVED — a compound index is identified by its key sequence.
 * `{ organizationId: 1, createdAt: -1 }` is a DIFFERENT index from `{ createdAt: -1, organizationId: 1 }`
@@ -42,7 +42,9 @@ function missingIndexesOn(existing, declared) {
 }
 /** The `_id` path for a stub/overlay schema, or `{}` to inherit mongoose's ObjectId default. */
 function idPath(idType) {
-	return idType === "string" ? { _id: { type: String } } : {};
+	if (idType === "string") return { _id: { type: String } };
+	if (idType === "uuid") return { _id: { type: "UUID" } };
+	return {};
 }
 /**
 * Register stub Mongoose models for Better Auth's collections so that
@@ -331,24 +333,12 @@ const BA_INDEXES_BY_PLUGIN = {
 		keys: { userId: 1 },
 		name: "ba_twoFactor_userId"
 	}],
-	deviceAuthorization: [
-		{
-			collection: "deviceCode",
-			keys: { deviceCode: 1 },
-			name: "ba_deviceCode_code"
-		},
-		{
-			collection: "deviceCode",
-			keys: { userCode: 1 },
-			name: "ba_deviceCode_userCode"
-		},
-		{
-			collection: "deviceCode",
-			keys: { expiresAt: 1 },
-			name: "ttl_deviceCode_expiresAt",
-			ttl: true
-		}
-	]
+	deviceAuthorization: [{
+		collection: "deviceCode",
+		keys: { expiresAt: 1 },
+		name: "ttl_deviceCode_expiresAt",
+		ttl: true
+	}]
 };
 /**
 * Create every index Better Auth's queries need. Idempotent, never throws.
@@ -462,5 +452,4 @@ async function clearActiveOrganizationFromSessions(sessions, organizationId, opt
 	if (options?.userId != null) filter.userId = options.userId;
 	return (await sessions.updateMany(filter, { $set: { activeOrganizationId: null } })).modifiedCount ?? 0;
 }
-//#endregion
 export { BA_INDEXES_BY_PLUGIN, clearActiveOrganizationFromSessions, createBetterAuthOverlay, ensureBetterAuthIndexes, ensureBetterAuthSessionTtl, registerBetterAuthStubs };

package/dist/{coercion-BjdPX3YF.d.mts → coercion-COp9DRNw.d.mts}

@@ -1,4 +1,3 @@
-//#region src/query/primitives/coercion.d.ts
 /**
  * Value coercion primitives
  *
@@ -102,5 +101,4 @@ declare function coerceToType(value: unknown, type: FieldType): unknown;
  * preserves-pre-3.5.5-behavior fallback).
  */
 declare function coerceFieldValue(field: string, value: unknown, types: Map<string, FieldType>): unknown;
-//#endregion
 export { coerceHeuristic as a, coerceFieldValue as i, SchemaPathsLike as n, coerceToType as o, buildFieldTypeMap as r, normalizeMongooseType as s, FieldType as t };

package/dist/{create-repository-UjwPWR1z.mjs → create-repository-C9DHHcl7.mjs}

@@ -1,7 +1,7 @@
-import { n as Repository } from "./Repository-Dj6xqPxJ.mjs";
-import { b as auditLogPlugin, g as cachePlugin, i as multiTenantPlugin, l as customIdPlugin, n as softDeletePlugin, t as timestampPlugin, v as auditTrailPlugin } from "./timestamp.plugin-DpOWavVI.mjs";
-import { n as batchOperationsPlugin, t as methodRegistryPlugin } from "./method-registry.plugin-C63pGn1d.mjs";
-//#region src/create-repository.ts
+import { S as auditTrailPlugin, b as cachePlugin, d as customIdPlugin, i as multiTenantPlugin, n as softDeletePlugin, t as timestampPlugin, w as auditLogPlugin } from "./timestamp.plugin-B-IJrlYb.mjs";
+import { n as batchOperationsPlugin, t as methodRegistryPlugin } from "./method-registry.plugin-BeJfQBJV.mjs";
+import { n as Repository } from "./Repository-DheA7oW-.mjs";
+// src/create-repository.ts
 function isLoggerAudit(value) {
 	const v = value;
 	return typeof v.info === "function" || typeof v.warn === "function" || typeof v.error === "function" || typeof v.debug === "function";
@@ -26,5 +26,4 @@ function createRepository(model, config = {}) {
 		...repositoryOptions
 	});
 }
-//#endregion
 export { createRepository as t };

package/dist/{create-repository-CJtVdwig.d.mts → create-repository-DG-gwOf0.d.mts}

@@ -1,10 +1,9 @@
-import { u as PaginationConfig } from "./pagination-D6psses0.mjs";
-import { _ as RepositoryOptions, d as PluginType } from "./repository-MqAP409e.mjs";
-import { D as AuditTrailOptions, i as CustomIdOptions, t as MultiTenantOptions, y as RepositoryCachePluginOptions } from "./multi-tenant.plugin-B_q9NUHc.mjs";
-import { r as Repository } from "./Repository-DnL4xk5w.mjs";
-import { i as Logger, o as SoftDeleteOptions } from "./plugin-options-Cirmb4Kp.mjs";
+import { L as AuditTrailOptions, i as CustomIdOptions, k as RepositoryCachePluginOptions, t as MultiTenantOptions } from "./multi-tenant.plugin-BTPtCLNK.mjs";
+import { r as Repository } from "./Repository-DJuRmBNx.mjs";
+import { u as PaginationConfig } from "./pagination-BAM9cA4N.mjs";
+import { i as Logger, o as SoftDeleteOptions } from "./plugin-options-DrNGWV5b.mjs";
+import { _ as RepositoryOptions, d as PluginType } from "./repository-B0aFVgP2.mjs";
 import { Model } from "mongoose";
-//#region src/create-repository.d.ts
 /**
  * Audit config — either a `Logger` (routes to `auditLogPlugin`, which
  * writes structured log lines through your logger) or an
@@ -50,5 +49,4 @@ interface CreateRepositoryConfig extends RepositoryOptions {
  * ordering guarantees and an example.
  */
 declare function createRepository<TDoc>(model: Model<TDoc, any, any, any>, config?: CreateRepositoryConfig): Repository<TDoc>;
-//#endregion
 export { CreateRepositoryConfig as n, createRepository as r, AuditConfig as t };

package/dist/{derive-DRBiegRH.mjs → derive-Dxsc31fV.mjs}

@@ -1,4 +1,4 @@
-//#region src/search/normalize.ts
+// src/search/normalize.ts
 /**
 * Search-as-you-type text rules, shared by the WRITER (the search keys stored on
 * every document) and the READER (the query typed into a search box).
@@ -97,8 +97,7 @@ function findSearchMatches(text, query) {
 	}
 	return out;
 }
-//#endregion
-//#region src/search/prefix.ts
+// src/search/prefix.ts
 /**
 * Indexed search-as-you-type (`searchMode: 'prefix'`): the stored keys, the
 * query filter, and the index/schema declarations. Pure: no mongoose import.
@@ -228,8 +227,7 @@ function searchKeysIndex(field = DEFAULT_SEARCH_KEYS_FIELD, options = {}) {
 		options: { name: options.name ?? `${field}_1` }
 	};
 }
-//#endregion
-//#region src/search/derive.ts
+// src/search/derive.ts
 /**
 * How a write changes the search fields: the pure analysis behind the
 * search-keys plugin. Given one write (a document, a replacement, or an update
@@ -371,5 +369,4 @@ function fieldValuesOf(doc, fields) {
 function keysFromValues(values, fields) {
 	return collectSearchTokens(fields.map((f) => values[f]));
 }
-//#endregion
 export { tokenizeSearchText as _, insertValues as a, writeKeys as c, buildSearchKeys as d, prefixSearchFilter as f, normalizeSearchText as g, findSearchMatches as h, fieldValuesOf as i, DEFAULT_SEARCH_KEYS_FIELD as l, searchKeysPath as m, SearchKeysWriteError as n, keysFromValues as o, searchKeysIndex as p, analyzeUpdate as r, unresolvedForUpdate as s, SEARCH_KEYS_ERROR_CODES as t, MAX_PREFIX_SEARCH_TERMS as u };

package/dist/{error-BuByZwKU.mjs → error-DjdmPLWO.mjs}

@@ -1,4 +1,4 @@
-//#region src/utils/error.ts
+// src/utils/error.ts
 /**
 * Creates an error with HTTP status code, plus optional stable `code` /
 * `meta` so callers can `catch` on the code instead of regex-matching the
@@ -71,5 +71,4 @@ function parseDuplicateKeyError(error, options = {}) {
 	};
 	return httpError;
 }
-//#endregion
 export { isDuplicateKeyError as n, parseDuplicateKeyError as r, createError as t };

package/dist/{field-selection-FSQFLpsU.mjs → field-selection-DPFaFw9Y.mjs}

@@ -1,4 +1,4 @@
-//#region src/utils/field-selection.ts
+// src/utils/field-selection.ts
 /**
 * Get allowed fields for a user based on their context
 *
@@ -95,5 +95,4 @@ function createFieldPreset(config) {
 		admin: config.admin || []
 	};
 }
-//#endregion
 export { getMongooseProjection as i, filterResponseData as n, getFieldsForUser as r, createFieldPreset as t };

package/dist/{id-chunks-BmAwsqNk.mjs → id-chunks-DH-RAZWG.mjs}

@@ -1,4 +1,4 @@
-//#region src/utils/id-chunks.ts
+// src/utils/id-chunks.ts
 /**
 * Default slice for `$in` fan-out. Larger than `runChunkedPurge`'s 1000 on purpose:
 * a purge chunk bounds the WRITE LOCK SCOPE of each progressive strategy step, while a
@@ -35,9 +35,18 @@ function* idChunks(ids, size) {
 * `baseFilter`.
 */
 function keysetFilter(baseFilter, cursor) {
-	return cursor == null ? baseFilter : {
+	return cursor == null ? baseFilter : withIdPredicate(baseFilter, { $gt: cursor });
+}
+/**
+* `baseFilter` AND an `_id` predicate. A base that already constrains `_id` (an ID-bounded
+* purge: `{ _id: { $nin: keep } }`, `{ _id: { $lte: last } }`) is combined with `$and`;
+* spreading would REPLACE the caller's `_id` predicate with the chunk's, so every chunk after
+* the first would escape the caller's bound. Without a base `_id` the flat shape is kept.
+*/
+function withIdPredicate(baseFilter, idPredicate) {
+	return Object.hasOwn(baseFilter, "_id") ? { $and: [baseFilter, { _id: idPredicate }] } : {
 		...baseFilter,
-		_id: { $gt: cursor }
+		_id: idPredicate
 	};
 }
 /**
@@ -58,10 +67,6 @@ async function selectKeysetChunk(model, filter, limit, options = {}) {
 * action ports use this shape; use it for any select-then-write over a chunk.
 */
 function narrowToIds(baseFilter, ids) {
-	return {
-		...baseFilter,
-		_id: { $in: ids }
-	};
+	return withIdPredicate(baseFilter, { $in: ids });
 }
-//#endregion
 export { narrowToIds as a, keysetFilter as i, collectIds as n, selectKeysetChunk as o, idChunks as r, DEFAULT_ID_CHUNK as t };

package/dist/{id-resolution-BqDrk0S2.mjs → id-resolution-Cqh49d9J.mjs}

@@ -1,5 +1,5 @@
 import mongoose from "mongoose";
-//#region src/utils/id-resolution.ts
+// src/utils/id-resolution.ts
 /**
 * ID Resolution Primitive
 *
@@ -113,5 +113,4 @@ function idVariants(id) {
 	if (typeof id === "string" && id.length > 0 && mongoose.Types.ObjectId.isValid(id)) return [id, new mongoose.Types.ObjectId(id)];
 	return [id];
 }
-//#endregion
 export { toObjectId as a, isValidIdForType as i, idVariants as n, isObjectIdInstance as r, getSchemaIdType as t };

package/dist/idempotency/index.d.mts

@@ -1,13 +1,12 @@
 import { Connection, Model } from "mongoose";
 import { IdempotencyClaimStore } from "@classytic/repo-core/idempotency";
-//#region src/idempotency/index.d.ts
-interface IdempotencyModelOptions {
+export interface IdempotencyModelOptions {
   /** Collection name. Default `idempotency_claims`. */
   collection?: string;
   /** Mongoose model name. Default `IdempotencyClaim`. Must be unique per connection. */
   modelName?: string;
 }
-interface IdempotencyStoreOptions {
+export interface IdempotencyStoreOptions {
   /**
    * How long a claim is kept after its last write before the TTL monitor removes it.
    * Default 7 days. Size it to the longest a caller may retry — a retry after the claim
@@ -16,8 +15,6 @@ interface IdempotencyStoreOptions {
   retentionSeconds?: number;
 }
 /** Build (or return) the claims model on `connection`. Idempotent per connection. */
-declare function createIdempotencyModel(connection: Connection, options?: IdempotencyModelOptions): Model<Record<string, unknown>>;
+export declare function createIdempotencyModel(connection: Connection, options?: IdempotencyModelOptions): Model<Record<string, unknown>>;
 /** The store over a model from {@link createIdempotencyModel}. */
-declare function createIdempotencyStore(model: Model<Record<string, unknown>>, options?: IdempotencyStoreOptions): IdempotencyClaimStore;
-//#endregion
-export { IdempotencyModelOptions, IdempotencyStoreOptions, createIdempotencyModel, createIdempotencyStore };
+export declare function createIdempotencyStore(model: Model<Record<string, unknown>>, options?: IdempotencyStoreOptions): IdempotencyClaimStore;

package/dist/idempotency/index.mjs

@@ -1,6 +1,6 @@
 import { Schema } from "mongoose";
 import { identityKey } from "@classytic/repo-core/idempotency";
-//#region src/idempotency/index.ts
+// src/idempotency/index.ts
 /**
 * The mongo {@link IdempotencyClaimStore} — use this with `runIdempotent` from
 * `@classytic/repo-core/idempotency`; never keep a per-module claims table.
@@ -130,5 +130,4 @@ function createIdempotencyStore(model, options = {}) {
 		}
 	};
 }
-//#endregion
 export { createIdempotencyModel, createIdempotencyStore };