@classytic/mongokit 3.43.1 → 3.45.0

package/dist/query/primitives/geo.d.mts

@@ -1,4 +1,3 @@
-//#region src/query/primitives/geo.d.ts
 /**
  * Geo query primitives
  *
@@ -14,21 +13,21 @@
  * `[nearSphere]`, or `[geoWithin]` operator on a field.
  */
 /** Geo operators recognized by the parser */
-declare const GEO_OPERATORS: readonly ["near", "nearSphere", "geoWithin", "withinRadius"];
-type GeoOperator = (typeof GEO_OPERATORS)[number];
+export declare const GEO_OPERATORS: readonly ['near', 'nearSphere', 'geoWithin', 'withinRadius'];
+export type GeoOperator = (typeof GEO_OPERATORS)[number];
 /**
  * True iff `operator` is one of the geo operators we handle.
  * Used by the operator router in QueryParser to short-circuit before the
  * generic numeric/string operator handling kicks in.
  */
-declare function isGeoOperator(operator: string): operator is GeoOperator;
+export declare function isGeoOperator(operator: string): operator is GeoOperator;
 /**
  * Parse a comma-separated coordinate list into numbers, validating each value
  * is a finite number. Returns null on any parse failure — callers must treat
  * null as "drop this filter entirely" rather than substituting defaults
  * (which would silently widen the query).
  */
-declare function parseCoordinateList(raw: unknown): number[] | null;
+export declare function parseCoordinateList(raw: unknown): number[] | null;
 /**
  * Validate a [lng, lat] pair against MongoDB's accepted ranges.
  * Longitude: [-180, 180]. Latitude: [-90, 90]. Out-of-range coordinates
@@ -36,7 +35,7 @@ declare function parseCoordinateList(raw: unknown): number[] | null;
  * with `coordinates: [999, 40]` would either error inside Mongo or worse,
  * silently behave unexpectedly.
  */
-declare function isValidLngLat(lng: number, lat: number): boolean;
+export declare function isValidLngLat(lng: number, lat: number): boolean;
 /**
  * Build a `$near` or `$nearSphere` filter for a single field from a coordinate
  * list. Accepts:
@@ -45,7 +44,7 @@ declare function isValidLngLat(lng: number, lat: number): boolean;
  *
  * Returns null on any validation failure (drop the filter).
  */
-declare function buildNearFilter(variant: 'near' | 'nearSphere', coords: number[]): Record<string, unknown> | null;
+export declare function buildNearFilter(variant: 'near' | 'nearSphere', coords: number[]): Record<string, unknown> | null;
 /**
  * Build a `$geoWithin: $centerSphere` filter from [lng, lat, radiusMeters].
  *
@@ -62,14 +61,14 @@ declare function buildNearFilter(variant: 'near' | 'nearSphere', coords: number[
  * `$centerSphere` takes the radius in radians, so we convert from the
  * caller-friendly meters using Earth's equatorial radius.
  */
-declare function buildWithinRadiusFilter(coords: number[]): Record<string, unknown> | null;
+export declare function buildWithinRadiusFilter(coords: number[]): Record<string, unknown> | null;
 /**
  * Build a `$geoWithin: $box` filter from a 4-element coordinate list:
  *   [minLng, minLat, maxLng, maxLat]
  *
  * Returns null on any validation failure (drop the filter).
  */
-declare function buildGeoWithinBoxFilter(coords: number[]): Record<string, unknown> | null;
+export declare function buildGeoWithinBoxFilter(coords: number[]): Record<string, unknown> | null;
 /**
  * Rewrite a filter object that contains `$near` / `$nearSphere` into an
  * equivalent count-compatible filter using `$geoWithin: $centerSphere`.
@@ -91,7 +90,7 @@ declare function buildGeoWithinBoxFilter(coords: number[]): Record<string, unkno
  *     rewritten to a bounded `$centerSphere`; caller should fall back to
  *     `countStrategy: 'none'`)
  */
-declare function rewriteNearForCount(filters: unknown): Record<string, unknown> | null;
+export declare function rewriteNearForCount(filters: unknown): Record<string, unknown> | null;
 /**
  * Detect whether a Mongo filter object contains a `$near` or `$nearSphere`
  * operator on any field at the top level. These are SORT operators in
@@ -104,13 +103,11 @@ declare function rewriteNearForCount(filters: unknown): Record<string, unknown>
  *
  * Returns false for falsy / non-object inputs.
  */
-declare function hasNearOperator(filters: unknown): boolean;
+export declare function hasNearOperator(filters: unknown): boolean;
 /**
  * High-level entry point: given an operator name and the raw value from the
  * URL, return the MongoDB filter for that field — or null if the operator is
  * not a geo operator (caller should fall through to normal handling) or the
  * value is invalid (caller should drop the filter).
  */
-declare function parseGeoFilter(operator: string, raw: unknown): Record<string, unknown> | null;
-//#endregion
-export { GEO_OPERATORS, GeoOperator, buildGeoWithinBoxFilter, buildNearFilter, buildWithinRadiusFilter, hasNearOperator, isGeoOperator, isValidLngLat, parseCoordinateList, parseGeoFilter, rewriteNearForCount };
+export declare function parseGeoFilter(operator: string, raw: unknown): Record<string, unknown> | null;

package/dist/query/primitives/geo.mjs

@@ -1,4 +1,4 @@
-//#region src/query/primitives/geo.ts
+// src/query/primitives/geo.ts
 /**
 * Geo query primitives
 *
@@ -207,5 +207,4 @@ function parseGeoFilter(operator, raw) {
 	if (operator === "withinRadius") return buildWithinRadiusFilter(coords);
 	return null;
 }
-//#endregion
 export { GEO_OPERATORS, buildGeoWithinBoxFilter, buildNearFilter, buildWithinRadiusFilter, hasNearOperator, isGeoOperator, isValidLngLat, parseCoordinateList, parseGeoFilter, rewriteNearForCount };

package/dist/query/primitives/indexes.d.mts

@@ -1,2 +1,2 @@
-import { n as SchemaIndexes, r as extractSchemaIndexes, t as IndexableSchema } from "../../indexes-DIjMpYES.mjs";
+import { n as SchemaIndexes, r as extractSchemaIndexes, t as IndexableSchema } from "../../indexes-FfyOuhDK.mjs";
 export { IndexableSchema, SchemaIndexes, extractSchemaIndexes };

package/dist/query/primitives/indexes.mjs

@@ -1,4 +1,4 @@
-//#region src/query/primitives/indexes.ts
+// src/query/primitives/indexes.ts
 const EMPTY = {
 	geoFields: [],
 	textFields: [],
@@ -42,5 +42,4 @@ function extractSchemaIndexes(schema) {
 		other
 	};
 }
-//#endregion
 export { extractSchemaIndexes };

package/dist/{query-defaults-BxUcSOoF.mjs → query-defaults-DwvWUjZU.mjs}

@@ -1,6 +1,6 @@
-import { t as createError } from "./error-BuByZwKU.mjs";
+import { t as createError } from "./error-DjdmPLWO.mjs";
 import mongoose from "mongoose";
-//#region src/repository/query-defaults.ts
+// src/repository/query-defaults.ts
 /**
 * Query defaults — the time bound and read/write concerns every repository command carries.
 *
@@ -9,13 +9,13 @@ import mongoose from "mongoose";
 * An explicit value always wins (FL1). For an aggregation the aggregate chain is consulted before
 * the generic query chain, because it is the more specific instruction.
 *
-* The bound travels as per-op CSOT `timeoutMS` (the driver derives the wire `maxTimeMS` from
-* it, and a client-level `timeoutMS` cannot override it). It and `comment` go to the commands Mongoose itself bounds with its global `maxTimeMS`
-* (find, findOne, countDocuments, distinct, findOneAndUpdate, aggregate:
-* lib/query.js:2465,2812,2905,3074,3610; lib/aggregate.js:1106). Writes get `writeConcern`. The
-* connection's CSOT `timeoutMS` bounds everything else; {@link assertQueryDefaultsConfigured}
-* checks both at boot. Inside a transaction a DEFAULT read/write concern or read preference is
-* dropped (the transaction owns them); a per-call one is passed and the driver judges it.
+* The bound travels as the server-side `maxTimeMS` on the command (driver 7.8 made the client-side
+* `timeoutMS` / CSOT a no-op, CVE-2026-119179, so there is no per-op client budget any more). It
+* reaches find, findOne, countDocuments, distinct, findOneAndUpdate, aggregate, insertMany,
+* update/delete and bulkWrite. A single-document `create()` goes through Mongoose `save()`, which
+* forwards no `maxTimeMS`, so it is NOT server-bounded. Writes also get `writeConcern`.
+* {@link assertQueryDefaultsConfigured} checks the deployment bound at boot. Inside a transaction a DEFAULT read/write concern or read
+* preference is dropped (the transaction owns them); a per-call one is passed and the driver judges it.
 */
 /** On `globalThis`, for the reason `pagination/defaults.ts` gives: a duplicated install must share it. */
 const POLICY_SLOT = Symbol.for("classytic.mongokit.queryDefaults");
@@ -60,31 +60,19 @@ function resetQueryDefaults() {
 	};
 }
 /**
-* Boot check (M7): throws unless the deployment sets a query `maxTimeMS`, and — when a connection
-* is passed — unless its client carries a CSOT `timeoutMS`. Returns what it verified.
+* Boot check (M7): throws unless the deployment sets a query `maxTimeMS`. Returns what it verified.
+* A client `timeoutMS` is not checked: the driver (7.8+) drops it from the client options and only
+* logs a process warning, so there is nothing to read; it bounds nothing either way.
 */
-function assertQueryDefaultsConfigured(connection) {
+function assertQueryDefaultsConfigured() {
 	const maxTimeMS = policy().query.maxTimeMS;
 	if (maxTimeMS === void 0) throw createError(500, "[mongokit] no deployment query time bound: call configureQueryDefaults({ maxTimeMS }) at boot", {
 		code: QUERY_DEFAULTS_ERROR_CODES.NOT_CONFIGURED,
 		meta: { missing: "maxTimeMS" }
 	});
-	if (!connection) return { maxTimeMS };
-	const timeoutMS = connection.getClient().options.timeoutMS;
-	if (!(typeof timeoutMS === "number" && timeoutMS > 0)) throw createError(500, "[mongokit] the connection has no CSOT timeoutMS: pass { timeoutMS } to mongoose.connect()", {
-		code: QUERY_DEFAULTS_ERROR_CODES.NOT_CONFIGURED,
-		meta: { missing: "timeoutMS" }
-	});
-	return {
-		maxTimeMS,
-		timeoutMS
-	};
+	return { maxTimeMS };
 }
-const QUERY_DEFAULTS_ERROR_CODES = {
-	NOT_CONFIGURED: "mongokit.query_defaults.not_configured",
-	/** A per-call bound inside a transaction that carries its own CSOT budget (the driver forbids both). */
-	TIMEOUT_IN_TRANSACTION: "mongokit.query_defaults.timeout_in_transaction"
-};
+const QUERY_DEFAULTS_ERROR_CODES = { NOT_CONFIGURED: "mongokit.query_defaults.not_configured" };
 const TX_DEADLINE = Symbol.for("@classytic/mongokit/transaction-deadline");
 /**
 * Set (or clear) the transaction budget's deadline (`performance.now()` ms) on a session.
@@ -108,14 +96,6 @@ function inTransaction(session) {
 	const s = session;
 	return typeof s?.inTransaction === "function" && s.inTransaction();
 }
-/**
-* A `withTransaction` running under a CSOT budget: the driver refuses any per-op `timeoutMS`
-* there (mongodb lib/utils.js:451, `session.explicit && session.timeoutContext != null`).
-*/
-function csotTransaction(session) {
-	const s = session;
-	return inTransaction(session) && s?.explicit === true && s.timeoutContext != null;
-}
 /** Resolve the options one command runs with. `repo` is the repository's own defaults. */
 function resolveQueryOptions(kind, perCall, repo = {}) {
 	const deployment = policy();
@@ -132,7 +112,6 @@ function resolveQueryOptions(kind, perCall, repo = {}) {
 	const budget = tx ? transactionRemaining(perCall.session) : void 0;
 	if (budget !== void 0 && budget <= 0) throw new mongoose.mongo.MongoOperationTimeoutError("Transaction budget exhausted before this operation");
 	if (kind !== "write") {
-		if (csotTransaction(perCall.session) && perCall.maxTimeMS !== void 0) throw createError(400, "[mongokit] a per-call maxTimeMS cannot be honoured inside a transaction with its own timeoutMS budget; bound the transaction instead", { code: QUERY_DEFAULTS_ERROR_CODES.TIMEOUT_IN_TRANSACTION });
 		const bound = tx ? perCall.maxTimeMS : perCall.maxTimeMS ?? (kind === "aggregate" ? repo.aggregate?.maxTimeMs ?? deployment.aggregate.maxTimeMs : void 0) ?? q.maxTimeMS;
 		const capped = budget === void 0 ? bound : Math.min(bound ?? Number.POSITIVE_INFINITY, budget);
 		if (capped !== void 0) out.maxTimeMS = capped;
@@ -174,35 +153,20 @@ function readPreferenceMode(value) {
 }
 /** Apply resolved options to a mongoose Query. */
 function applyToQuery(query, o) {
-	if (o.maxTimeMS !== void 0) {
-		const csot = { timeoutMS: o.maxTimeMS };
-		query.setOptions(csot);
-	}
+	if (o.maxTimeMS !== void 0) query.maxTimeMS(o.maxTimeMS);
 	if (o.comment !== void 0) query.setOptions({ comment: o.comment });
 	if (o.readPreference !== void 0) query.read(readPreferenceMode(o.readPreference));
 	if (o.readConcern !== void 0) query.readConcern(o.readConcern);
 	if (o.writeConcern !== void 0) query.setOptions({ writeConcern: o.writeConcern });
 	if (o.hint !== void 0) query.hint(o.hint);
 }
-/**
-* Make a find cursor's bound apply PER BATCH (CSOT `timeoutMode: 'iteration'`). Only when some
-* `timeoutMS` exists (this op's, or the client's): the driver refuses a timeoutMode without one
-* (mongodb lib/cursor/abstract_cursor.js:114). In iteration mode the driver enforces the budget
-* client-side per batch and sends no wire maxTimeMS.
-*/
-function applyCursorTimeoutMode(query, o, connection) {
-	const clientTimeout = connection.getClient().options.timeoutMS;
-	if (o.maxTimeMS === void 0 && clientTimeout === void 0) return;
-	query.setOptions({ timeoutMode: "iteration" });
-}
 /** Apply resolved options to a mongoose Aggregate. */
 function applyToAggregate(aggregation, o) {
-	if (o.maxTimeMS !== void 0) aggregation.option({ timeoutMS: o.maxTimeMS });
+	if (o.maxTimeMS !== void 0) aggregation.option({ maxTimeMS: o.maxTimeMS });
 	if (o.comment !== void 0) aggregation.option({ comment: o.comment });
 	if (o.readPreference !== void 0) aggregation.read(readPreferenceMode(o.readPreference));
 	if (o.readConcern !== void 0) aggregation.readConcern(o.readConcern);
 	if (o.allowDiskUse !== void 0) aggregation.allowDiskUse(o.allowDiskUse);
 	if (o.hint !== void 0) aggregation.hint(o.hint);
 }
-//#endregion
-export { assertQueryDefaultsConfigured as a, getQueryDefaults as c, setTransactionDeadline as d, applyToQuery as i, resetQueryDefaults as l, applyCursorTimeoutMode as n, configureAggregateDefaults as o, applyToAggregate as r, configureQueryDefaults as s, QUERY_DEFAULTS_ERROR_CODES as t, resolveQueryOptions as u };
+export { configureAggregateDefaults as a, resetQueryDefaults as c, assertQueryDefaultsConfigured as i, resolveQueryOptions as l, applyToAggregate as n, configureQueryDefaults as o, applyToQuery as r, getQueryDefaults as s, QUERY_DEFAULTS_ERROR_CODES as t, setTransactionDeadline as u };

package/dist/read-model/index.d.mts

@@ -1,18 +1,17 @@
-import { r as Repository } from "../Repository-DnL4xk5w.mjs";
+import { r as Repository } from "../Repository-DJuRmBNx.mjs";
 import { BulkUpsertResult } from "@classytic/repo-core/repository";
-//#region src/read-model/index.d.ts
-declare const READ_MODEL_ERROR_CODES: {
-  readonly MERGE_IN_TRANSACTION: "mongokit.read_model.merge_in_transaction";
-  readonly ON_NOT_UNIQUE: "mongokit.read_model.on_not_unique";
-  readonly ON_MISSING_SCOPE: "mongokit.read_model.on_missing_scope";
-  readonly DEDUPE_NEEDS_TRANSACTION: "mongokit.read_model.dedupe_needs_transaction";
-  readonly DEDUPE_KEY_MISSING: "mongokit.read_model.dedupe_key_missing";
-  readonly INCREMENT_FAILED: "mongokit.read_model.increment_failed";
-  readonly TOO_LARGE: "mongokit.read_model.too_large";
+export declare const READ_MODEL_ERROR_CODES: {
+  readonly MERGE_IN_TRANSACTION: 'mongokit.read_model.merge_in_transaction';
+  readonly ON_NOT_UNIQUE: 'mongokit.read_model.on_not_unique';
+  readonly ON_MISSING_SCOPE: 'mongokit.read_model.on_missing_scope';
+  readonly DEDUPE_NEEDS_TRANSACTION: 'mongokit.read_model.dedupe_needs_transaction';
+  readonly DEDUPE_KEY_MISSING: 'mongokit.read_model.dedupe_key_missing';
+  readonly INCREMENT_FAILED: 'mongokit.read_model.increment_failed';
+  readonly TOO_LARGE: 'mongokit.read_model.too_large';
 };
 /** Caller scope forwarded to every repository call (tenant, bypass, attribution). */
-type ReadModelScope = Record<string, unknown>;
-interface IncrementGrain {
+export type ReadModelScope = Record<string, unknown>;
+export interface IncrementGrain {
   /** The read-model key (without the policy scope, which the repository adds). */
   key: Record<string, unknown>;
   inc: Record<string, number>;
@@ -21,12 +20,12 @@ interface IncrementGrain {
   dedupeKey?: string;
 }
 /** Sum grains per key, apply them in one upsert; with a ledger, count each dedupeKey once. */
-declare function applyIncrements<TDoc>(target: Repository<TDoc>, grains: readonly IncrementGrain[], options?: ReadModelScope & {
+export declare function applyIncrements<TDoc>(target: Repository<TDoc>, grains: readonly IncrementGrain[], options?: ReadModelScope & {
   session?: unknown;
   /** Repository over a collection unique on (scope, `dedupeKey`). */
   ledger?: Repository<unknown>;
 }): Promise<BulkUpsertResult>;
-interface RebuildOptions {
+export interface RebuildOptions {
   /** Source stages producing one row per read-model grain (with every `on` field except scope fields). */
   pipeline: readonly unknown[];
   /** Fields identifying a grain; must equal a unique index of the target and include its tenant field. */
@@ -37,11 +36,11 @@ interface RebuildOptions {
   session?: unknown;
 }
 /** Rebuild the scope's slice of `target` from `source` with one `$merge`, then drop stale grains. */
-declare function rebuildInto<TSrc, TDoc>(source: Repository<TSrc>, target: Repository<TDoc>, options: RebuildOptions): Promise<{
+export declare function rebuildInto<TSrc, TDoc>(source: Repository<TSrc>, target: Repository<TDoc>, options: RebuildOptions): Promise<{
   rebuildId: string;
   removed: number;
 }>;
-interface ReconcileOptions {
+export interface ReconcileOptions {
   pipeline: readonly unknown[];
   on: readonly string[];
   /** Fields compared between the recomputed and the stored row. */
@@ -50,7 +49,7 @@ interface ReconcileOptions {
   /** Refuse past this many rows on either side (both are held in memory). Default 100,000. */
   maxRows?: number;
 }
-interface DriftRow {
+export interface DriftRow {
   key: Record<string, unknown>;
   /** Recomputed measures, `null` when the source produces no such grain. */
   expected: Record<string, unknown> | null;
@@ -58,9 +57,7 @@ interface DriftRow {
   actual: Record<string, unknown> | null;
 }
 /** Recompute the scope's grains from `source` and report every one that differs in `target`. */
-declare function reconcile<TSrc, TDoc>(source: Repository<TSrc>, target: Repository<TDoc>, options: ReconcileOptions): Promise<{
+export declare function reconcile<TSrc, TDoc>(source: Repository<TSrc>, target: Repository<TDoc>, options: ReconcileOptions): Promise<{
   drift: DriftRow[];
   compared: number;
-}>;
-//#endregion
-export { DriftRow, IncrementGrain, READ_MODEL_ERROR_CODES, ReadModelScope, RebuildOptions, ReconcileOptions, applyIncrements, rebuildInto, reconcile };
+}>;

package/dist/read-model/index.mjs

@@ -1,7 +1,7 @@
-import { t as createError } from "../error-BuByZwKU.mjs";
-import { i as scopeForCollection, o as tenantFieldsOf } from "../join-scope-DSAznE8E.mjs";
+import { i as scopeForCollection, o as tenantFieldsOf } from "../join-scope-C1gOtZ59.mjs";
+import { t as createError } from "../error-DjdmPLWO.mjs";
 import { randomUUID } from "node:crypto";
-//#region src/read-model/index.ts
+// src/read-model/index.ts
 /**
 * `@classytic/mongokit/read-model` — maintain and verify a derived (read) collection.
 *
@@ -189,5 +189,4 @@ async function reconcile(source, target, options) {
 		compared: expectedRows.length
 	};
 }
-//#endregion
 export { READ_MODEL_ERROR_CODES, applyIncrements, rebuildInto, reconcile };

package/dist/{repository-MqAP409e.d.mts → repository-B0aFVgP2.d.mts}

@@ -1,10 +1,9 @@
-import { A as ObjectId, D as AnyDocument, F as SortSpec, M as ReadPreferenceType, N as SelectSpec, _ as QueryDefaults, b as WriteConcernSpec, i as CountStrategy, j as PopulateSpec, k as FilterQuery, p as AggregateDefaults, v as ReadConcernLevel } from "./pagination-D6psses0.mjs";
-import { r as DocField } from "./type-utils-CLzRFtIA.mjs";
+import { A as ObjectId, D as AnyDocument, F as SortSpec, M as ReadPreferenceType, N as SelectSpec, _ as QueryDefaults, b as WriteConcernSpec, i as CountStrategy, j as PopulateSpec, k as FilterQuery, p as AggregateDefaults, v as ReadConcernLevel } from "./pagination-BAM9cA4N.mjs";
+import { r as DocField } from "./type-utils-CKvuewAL.mjs";
 import { DistributionConfig, DistributionMissHandler, RepoCapabilities, RepositoryBase } from "@classytic/repo-core/repository";
 import { Model, PipelineStage } from "mongoose";
 import { HttpError } from "@classytic/repo-core/errors";
 import { OffsetPaginationResult } from "@classytic/repo-core/pagination";
-//#region src/plugins/names.d.ts
 /**
  * Canonical identifiers exposed by mongokit's bundled plugins.
  *
@@ -13,34 +12,32 @@ import { OffsetPaginationResult } from "@classytic/repo-core/pagination";
  * The values intentionally preserve the plugins' existing public names.
  */
 declare const MONGOKIT_PLUGIN_NAMES: {
-  readonly aggregateHelpers: "aggregate-helpers";
-  readonly appendOnly: "appendOnly";
-  readonly auditLog: "auditLog";
-  readonly auditTrail: "auditTrail";
-  readonly batchOperations: "batch-operations";
-  readonly cache: "cache";
-  readonly cascade: "cascade";
-  readonly changeLog: "changeLog";
-  readonly customId: "custom-id";
-  readonly elasticSearch: "elastic-search";
-  readonly fieldFilter: "fieldFilter";
-  readonly immutableStates: "immutableStates";
-  readonly lease: "lease";
-  readonly methodRegistry: "method-registry";
-  readonly mongoOperations: "mongo-operations";
-  readonly multiTenant: "multi-tenant";
-  readonly observability: "observability";
-  readonly searchKeys: "search-keys";
-  readonly softDelete: "softDelete";
-  readonly subdocument: "subdocument";
-  readonly timestamp: "timestamp";
-  readonly validationChain: "validation-chain";
+  readonly aggregateHelpers: 'aggregate-helpers';
+  readonly appendOnly: 'appendOnly';
+  readonly auditLog: 'auditLog';
+  readonly auditTrail: 'auditTrail';
+  readonly batchOperations: 'batch-operations';
+  readonly cache: 'cache';
+  readonly cascade: 'cascade';
+  readonly changeLog: 'changeLog';
+  readonly customId: 'custom-id';
+  readonly elasticSearch: 'elastic-search';
+  readonly fieldFilter: 'fieldFilter';
+  readonly immutableStates: 'immutableStates';
+  readonly lease: 'lease';
+  readonly methodRegistry: 'method-registry';
+  readonly mongoOperations: 'mongo-operations';
+  readonly multiTenant: 'multi-tenant';
+  readonly observability: 'observability';
+  readonly searchKeys: 'search-keys';
+  readonly softDelete: 'softDelete';
+  readonly subdocument: 'subdocument';
+  readonly timestamp: 'timestamp';
+  readonly validationChain: 'validation-chain';
 };
 type MongoKitPluginName = (typeof MONGOKIT_PLUGIN_NAMES)[keyof typeof MONGOKIT_PLUGIN_NAMES];
 /** Bundled-name autocomplete while remaining open to third-party plugins. */
 type RepositoryPluginName = MongoKitPluginName | (string & Record<never, never>);
-//#endregion
-//#region src/types/repository.d.ts
 /** Hook execution mode */
 type HookMode = 'sync' | 'async';
 /**
@@ -533,7 +530,7 @@ type AllPluginMethods<TDoc> = {
   setMin(id: string | ObjectId, field: DocField<TDoc>, value: unknown, options?: Record<string, unknown>): Promise<TDoc>;
   setMax(id: string | ObjectId, field: DocField<TDoc>, value: unknown, options?: Record<string, unknown>): Promise<TDoc>;
   atomicUpdate(id: string | ObjectId, operators: Record<string, Record<string, unknown>>, options?: Record<string, unknown>): Promise<TDoc>;
-  bulkWrite(operations: Record<string, unknown>[], options?: {
+  bulkWrite(operations: readonly Record<string, unknown>[], options?: {
     session?: unknown;
     ordered?: boolean;
   }): Promise<{
@@ -602,5 +599,4 @@ type AllPluginMethods<TDoc> = {
  * ```
  */
 type WithPlugins<TDoc, TRepo extends RepositoryInstance = RepositoryInstance> = TRepo & AllPluginMethods<TDoc>;
-//#endregion
 export { RepositoryPluginName as C, MongoKitPluginName as S, RepositoryOptions as _, HookMode as a, WithPlugins as b, MinimalRepoView as c, PluginType as d, PrioritizedHook as f, RepositoryOperation as g, RepositoryInstance as h, EventPhase as i, Plugin as l, RepositoryEvent as m, EventHandlers as n, Middleware as o, RepositoryContext as p, EventPayload as r, MiddlewareContext as s, AllPluginMethods as t, PluginFunction as u, RepositorySearchMode as v, MONGOKIT_PLUGIN_NAMES as x, UserContext as y };

package/dist/retention-purge-CCd_VXUf.d.mts

@@ -0,0 +1,38 @@
+import { p as RepositoryContext } from "./repository-B0aFVgP2.mjs";
+/** Per-call retention purge request (`options.retentionPurge`). */
+interface RetentionPurgeRequest {
+  /** Why the rows are removed (e.g. `'retention: 7 years'`). Required, non-blank. */
+  reason: string;
+  /** Who or what purges (user id, `'job:retention'`). Carried to the audit events. */
+  actor?: string | undefined;
+}
+/** Common payload of the per-plugin purge audit events, one per successful delete call. */
+interface RetentionPurgeEvent {
+  operation: 'delete' | 'deleteMany';
+  reason: string;
+  actor: string | undefined;
+  /** `delete`: the id. */
+  id: unknown;
+  /** `deleteMany`: the final filter (after policy hooks such as tenant scope). */
+  filter: Record<string, unknown> | undefined;
+  /** Rows removed (`delete`: 1 or 0). */
+  deletedCount: number;
+  /** True when the delete is an `archiveByFilter` chunk the sink acknowledged first. */
+  archived: boolean;
+  /**
+   * The delete's session, when the call ran in one. Write the audit row with it
+   * (`{ session: event.session }`) so the delete and its audit commit or abort
+   * together. Listeners are awaited and a throwing one fails the purge call.
+   */
+  session: unknown;
+  context: RepositoryContext;
+}
+/** Error codes thrown for a malformed or unauthorized retention purge. */
+declare const RETENTION_PURGE_ERROR_CODES: {
+  readonly DISABLED: 'RETENTION_PURGE_DISABLED';
+  readonly REASON_REQUIRED: 'RETENTION_PURGE_REASON_REQUIRED';
+  readonly INVALID_ACTOR: 'RETENTION_PURGE_INVALID_ACTOR';
+  readonly HARD_ONLY: 'RETENTION_PURGE_HARD_ONLY';
+  readonly ARCHIVE_UNATTESTED: 'RETENTION_PURGE_ARCHIVE_UNATTESTED';
+};
+export { RetentionPurgeEvent as n, RetentionPurgeRequest as r, RETENTION_PURGE_ERROR_CODES as t };

package/dist/{rolldown-runtime-D7D4PA-g.mjs → rolldown-runtime-D8jQpDG7.mjs}

@@ -1,4 +1,4 @@
-//#region \0rolldown/runtime.js
+// \0rolldown/runtime.js
 var __defProp = Object.defineProperty;
 var __exportAll = (all, no_symbols) => {
 	let target = {};
@@ -9,5 +9,4 @@ var __exportAll = (all, no_symbols) => {
 	if (!no_symbols) __defProp(target, Symbol.toStringTag, { value: "Module" });
 	return target;
 };
-//#endregion
 export { __exportAll as t };

package/dist/search/index.d.mts

@@ -1,2 +1,2 @@
-import { a as prefixSearchFilter, c as SearchMatchRange, d as tokenizeSearchText, f as SEARCH_KEYS_ERROR_CODES, i as buildSearchKeys, l as findSearchMatches, n as MAX_PREFIX_SEARCH_TERMS, o as searchKeysIndex, p as SearchKeysWriteError, r as PrefixSearchFilterOptions, s as searchKeysPath, t as DEFAULT_SEARCH_KEYS_FIELD, u as normalizeSearchText } from "../index-C0AjVqX3.mjs";
+import { a as prefixSearchFilter, c as SearchMatchRange, d as tokenizeSearchText, f as SEARCH_KEYS_ERROR_CODES, i as buildSearchKeys, l as findSearchMatches, n as MAX_PREFIX_SEARCH_TERMS, o as searchKeysIndex, p as SearchKeysWriteError, r as PrefixSearchFilterOptions, s as searchKeysPath, t as DEFAULT_SEARCH_KEYS_FIELD, u as normalizeSearchText } from "../index-ehGZLbrd.mjs";
 export { DEFAULT_SEARCH_KEYS_FIELD, MAX_PREFIX_SEARCH_TERMS, type PrefixSearchFilterOptions, SEARCH_KEYS_ERROR_CODES, SearchKeysWriteError, type SearchMatchRange, buildSearchKeys, findSearchMatches, normalizeSearchText, prefixSearchFilter, searchKeysIndex, searchKeysPath, tokenizeSearchText };

package/dist/search/index.mjs

@@ -1 +1 @@
-export { l as DEFAULT_SEARCH_KEYS_FIELD, u as MAX_PREFIX_SEARCH_TERMS, t as SEARCH_KEYS_ERROR_CODES, n as SearchKeysWriteError, d as buildSearchKeys, h as findSearchMatches, g as normalizeSearchText, f as prefixSearchFilter, p as searchKeysIndex, m as searchKeysPath, _ as tokenizeSearchText } from "../derive-DRBiegRH.mjs";
+export { l as DEFAULT_SEARCH_KEYS_FIELD, u as MAX_PREFIX_SEARCH_TERMS, t as SEARCH_KEYS_ERROR_CODES, n as SearchKeysWriteError, d as buildSearchKeys, h as findSearchMatches, g as normalizeSearchText, f as prefixSearchFilter, p as searchKeysIndex, m as searchKeysPath, _ as tokenizeSearchText } from "../derive-Dxsc31fV.mjs";