@classytic/mongokit 3.44.0 → 3.45.0

package/README.md

@@ -206,11 +206,12 @@ To serialise writers on a row, the write must change it. An update that sets a f
 ### Time Bounds And Concerns (`queryDefaults`)
 
 ```ts
-// Boot: every command is bounded; the boot check fails without it (and without CSOT timeoutMS).
-await mongoose.connect(uri, { timeoutMS: 30_000 });
+// Boot: every command is bounded by a server-side maxTimeMS; the boot check fails without it.
+// Do not pass `timeoutMS` to mongoose.connect(): the MongoDB driver ignores it since 7.8 (CVE-2026-119179).
+await mongoose.connect(uri);
 configureQueryDefaults({ maxTimeMS: 5_000, writeConcern: { w: 'majority' } });
 configureAggregateDefaults({ maxTimeMs: 15_000 });
-assertQueryDefaultsConfigured(mongoose.connection);
+assertQueryDefaultsConfigured();
 
 // Per repository, and per call (per call always wins):
 const repo = new Repository(Order, plugins, {}, { queryDefaults: { comment: 'orders' } });

package/dist/{PaginationEngine-C9iS0U5l.mjs → PaginationEngine-BRlLTQQz.mjs}

@@ -1,5 +1,5 @@
 import { t as __exportAll } from "./rolldown-runtime-D8jQpDG7.mjs";
-import { i as applyToQuery, r as applyToAggregate, u as resolveQueryOptions } from "./query-defaults-aUoKlEbh.mjs";
+import { l as resolveQueryOptions, n as applyToAggregate, r as applyToQuery } from "./query-defaults-DwvWUjZU.mjs";
 import { t as createError } from "./error-DjdmPLWO.mjs";
 import { n as warn } from "./logger-hbWOlj_X.mjs";
 import { calculateSkip, calculateTotalPages, shouldWarnDeepPagination, validateLimit, validatePage } from "./pagination/utils/limits.mjs";

package/dist/{PaginationEngine-D17AthKw.d.mts → PaginationEngine-BWb-c47a.d.mts}

@@ -1,4 +1,4 @@
-import { D as AnyDocument, c as MongokitPageExtras, f as CursorSecret, i as CountStrategy, l as OffsetPaginationOptions, s as KeysetPaginationOptions, t as AggregatePaginationOptions, u as PaginationConfig } from "./pagination-DAUg5zOY.mjs";
+import { D as AnyDocument, c as MongokitPageExtras, f as CursorSecret, i as CountStrategy, l as OffsetPaginationOptions, s as KeysetPaginationOptions, t as AggregatePaginationOptions, u as PaginationConfig } from "./pagination-BAM9cA4N.mjs";
 import { Model } from "mongoose";
 import { TtlMemo } from "@classytic/repo-core/cache";
 import { AggregatePaginationResult, KeysetPaginationResult, OffsetPaginationResult } from "@classytic/repo-core/pagination";

package/dist/{Repository-B6oL6OMv.d.mts → Repository-DJuRmBNx.d.mts}

@@ -1,8 +1,8 @@
-import { A as ObjectId, F as SortSpec$1, M as ReadPreferenceType, N as SelectSpec, c as MongokitPageExtras, i as CountStrategy, j as PopulateSpec, r as CollationOptions, t as AggregatePaginationOptions, u as PaginationConfig } from "./pagination-DAUg5zOY.mjs";
-import { r as RetentionPurgeRequest } from "./retention-purge-DqcYvRnG.mjs";
-import { n as PaginationEngine } from "./PaginationEngine-D17AthKw.mjs";
-import { S as LookupOptions, _ as SessionOptions, b as WithTransactionOptions, c as DeleteResult, f as LookupPopulateOptions, g as ReadOptions, h as OperationOptions, i as CacheableOptions, l as FindOneAndUpdateOptions, n as AggregateOptions, o as CreateOptions, p as LookupPopulateResult, s as DeleteManyResult, t as AggregateCallOptions, u as GetByIdsOptions, v as UpdateManyResult, x as LookupBuilder, y as UpdateOptions } from "./operations-Dw9OFV0V.mjs";
-import { _ as RepositoryOptions, d as PluginType, f as PrioritizedHook, o as Middleware, p as RepositoryContext } from "./repository-DzVIwhU2.mjs";
+import { A as ObjectId, F as SortSpec$1, M as ReadPreferenceType, N as SelectSpec, c as MongokitPageExtras, i as CountStrategy, j as PopulateSpec, r as CollationOptions, t as AggregatePaginationOptions, u as PaginationConfig } from "./pagination-BAM9cA4N.mjs";
+import { r as RetentionPurgeRequest } from "./retention-purge-CCd_VXUf.mjs";
+import { n as PaginationEngine } from "./PaginationEngine-BWb-c47a.mjs";
+import { S as LookupOptions, _ as SessionOptions, b as WithTransactionOptions, c as DeleteResult, f as LookupPopulateOptions, g as ReadOptions, h as OperationOptions, i as CacheableOptions, l as FindOneAndUpdateOptions, n as AggregateOptions, o as CreateOptions, p as LookupPopulateResult, s as DeleteManyResult, t as AggregateCallOptions, u as GetByIdsOptions, v as UpdateManyResult, x as LookupBuilder, y as UpdateOptions } from "./operations-D6XsHx4e.mjs";
+import { _ as RepositoryOptions, d as PluginType, f as PrioritizedHook, o as Middleware, p as RepositoryContext } from "./repository-B0aFVgP2.mjs";
 import { AggPaginationRequest, AggRequest, AggResult, ArchiveOptions, ArchiveResult, ArchiveSink, BulkUpsertOptions, BulkUpsertResult, ChangeEvent, FilterInput, KeysetAggPaginationResult, QueryOptions, RepoCapabilities, RepositoryBase, TenantPurgeOptions, TenantPurgeResult, TenantPurgeStrategy, WatchOptions } from "@classytic/repo-core/repository";
 import { ClientSession, Expression, Model, PipelineStage, PopulateOptions } from "mongoose";
 import { Filter } from "@classytic/repo-core/filter";
@@ -870,7 +870,7 @@ declare class Repository<TDoc = unknown> extends RepositoryBase {
   }): Promise<string>;
   /**
    * Resumable keyset batches over `_id`: each batch is ONE bounded `find` (no long-lived server
-   * cursor, so no cursor timeout and no CSOT lifetime budget), memory is one batch, and every
+   * cursor, so no cursor timeout and a bound on every batch), memory is one batch, and every
    * batch carries a `checkpoint`. Pass a checkpoint back as `after` to resume: rows written
    * behind it are not revisited, rows ahead of it are reached. A checkpoint is bound to the
    * collection, the post-policy filter (tenant included) and is refused elsewhere.
@@ -1609,15 +1609,24 @@ declare class Repository<TDoc = unknown> extends RepositoryBase {
    * Chunked cold-storage extraction — see `StandardRepo.archiveByFilter`
    * for the cross-kit contract (write-before-delete, at-least-once,
    * duplicate-tolerant sinks). Mongokit composes the kit-agnostic
-   * `runChunkedArchive` orchestrator with `createMongoArchivePort`
+   * `runChunkedArchive` orchestrator with `createMongoArchiveRun`
    * (`_id`-ordered lean reads + plugin-routed deleteMany removal). See
    * [actions/archive.ts](./actions/archive.ts) for the port.
    *
+   * `retentionPurge` rides every chunk delete with an attestation of the ids the
+   * sink acknowledged, so a fence built with `allowArchive` (or `allowPurge`)
+   * admits it; validated before any chunk is read. Each row is deleted only if its
+   * `updatedAt` (+ `versionField`) still equals the exported value; an edited row stays
+   * live for the next run.
+   *
    * Accepts Filter IR or a Mongo-shaped filter record — compiled once via
    * `compileFilterToMongo`, same dual-dialect rule as every other verb.
    */
   archiveByFilter(filter: Record<string, unknown> | Filter, sink: ArchiveSink<TDoc>, options?: ArchiveOptions & {
     session?: ClientSession;
+    retentionPurge?: RetentionPurgeRequest | undefined;
+    /** Rows never change: skip the unchanged-since-export pin (refused without it when the schema has no timestamps). */
+    immutable?: boolean | undefined;
   }): Promise<ArchiveResult>;
   /**
    * Many keyed upserts in ONE command with an exact per-row outcome (repo-core `bulkUpsert` IR).

package/dist/{Repository-eMRYZ_2Y.mjs → Repository-DheA7oW-.mjs}

@@ -1,11 +1,11 @@
 import { i as isValidIdForType, t as getSchemaIdType } from "./id-resolution-Cqh49d9J.mjs";
 import { n as isDuplicateKeyError, r as parseDuplicateKeyError, t as createError } from "./error-DjdmPLWO.mjs";
 import { a as narrowToIds, i as keysetFilter, o as selectKeysetChunk, r as idChunks, t as DEFAULT_ID_CHUNK } from "./id-chunks-DH-RAZWG.mjs";
-import { _ as SHORTHAND_OPS, a as count, b as create, c as getByQuery, d as deleteById, f as deleteByQuery, g as LookupBuilder, h as distinct, l as getOrCreate, n as update, o as exists, r as updateByQuery, s as getById, t as findOneAndUpdate, v as compileFilterToMongo, x as createMany, y as castFilterToSchema } from "./update-DcfmNbJe.mjs";
+import { _ as SHORTHAND_OPS, a as count, b as create, c as getByQuery, d as deleteById, f as deleteByQuery, g as LookupBuilder, h as distinct, l as getOrCreate, n as update, o as exists, r as updateByQuery, s as getById, t as findOneAndUpdate, v as compileFilterToMongo, x as createMany, y as castFilterToSchema } from "./update-CYaJMu6j.mjs";
 import { n as warn } from "./logger-hbWOlj_X.mjs";
-import { i as applyToQuery, n as applyCursorTimeoutMode, r as applyToAggregate, u as resolveQueryOptions } from "./query-defaults-aUoKlEbh.mjs";
-import { o as withTransaction, p as resolveMongoCapabilities, s as createTxBoundRepo } from "./transaction-C2PFxfIv.mjs";
-import { _ as resolveCursorSecrets, d as withGroupTiebreak, f as withIdTiebreak, g as attachSignature, i as validateKeysetSort, l as assertOffsetWithinCap, n as getPrimaryField, o as encodeCursor, s as resolveCursorFilter, t as PaginationEngine, u as cursorScope, v as verifySignature } from "./PaginationEngine-C9iS0U5l.mjs";
+import { l as resolveQueryOptions, n as applyToAggregate, r as applyToQuery } from "./query-defaults-DwvWUjZU.mjs";
+import { o as withTransaction, p as resolveMongoCapabilities, s as createTxBoundRepo } from "./transaction-C6Oj941P.mjs";
+import { _ as resolveCursorSecrets, d as withGroupTiebreak, f as withIdTiebreak, g as attachSignature, i as validateKeysetSort, l as assertOffsetWithinCap, n as getPrimaryField, o as encodeCursor, s as resolveCursorFilter, t as PaginationEngine, u as cursorScope, v as verifySignature } from "./PaginationEngine-BRlLTQQz.mjs";
 import { calculateTotalPages } from "./pagination/utils/limits.mjs";
 import { a as insertValues, c as writeKeys, d as buildSearchKeys, f as prefixSearchFilter, i as fieldValuesOf, n as SearchKeysWriteError, o as keysFromValues, r as analyzeUpdate, s as unresolvedForUpdate, t as SEARCH_KEYS_ERROR_CODES } from "./derive-Dxsc31fV.mjs";
 import { hasNearOperator, rewriteNearForCount } from "./query/primitives/geo.mjs";
@@ -23,8 +23,43 @@ const RETENTION_PURGE_ERROR_CODES = {
 	DISABLED: "RETENTION_PURGE_DISABLED",
 	REASON_REQUIRED: "RETENTION_PURGE_REASON_REQUIRED",
 	INVALID_ACTOR: "RETENTION_PURGE_INVALID_ACTOR",
-	HARD_ONLY: "RETENTION_PURGE_HARD_ONLY"
+	HARD_ONLY: "RETENTION_PURGE_HARD_ONLY",
+	ARCHIVE_UNATTESTED: "RETENTION_PURGE_ARCHIVE_UNATTESTED"
 };
+/** Attested id sets, keyed by an object only `attestArchivedChunk` can mint. */
+const ATTESTED_CHUNKS = /* @__PURE__ */ new WeakMap();
+/**
+* Mint the attestation for one archive chunk the sink has ACKNOWLEDGED. Internal to
+* mongokit (not exported from the package entry): the archive port is its only caller.
+*/
+function attestArchivedChunk(ids) {
+	const token = Object.freeze({});
+	ATTESTED_CHUNKS.set(token, new Set(ids.map(String)));
+	return token;
+}
+/** Every `_id: { $in: [...] }` list in the query, through nested `$and`. */
+function idListsIn(query) {
+	if (!query || typeof query !== "object") return [];
+	const q = query;
+	const lists = [];
+	const idPredicate = q._id;
+	if (idPredicate && typeof idPredicate === "object" && Array.isArray(idPredicate.$in)) lists.push(idPredicate.$in);
+	if (Array.isArray(q.$and)) for (const arm of q.$and) lists.push(...idListsIn(arm));
+	return lists;
+}
+/**
+* Whether the context carries an attestation, and whether it covers the delete. A delete
+* is covered only when some `_id.$in` it ANDs in is non-empty and wholly attested — an
+* extra predicate can only narrow it further.
+*/
+function archiveAttestationOf(ctx) {
+	const token = ctx.archiveAttestation;
+	if (token === void 0) return "none";
+	const attested = typeof token === "object" && token ? ATTESTED_CHUNKS.get(token) : void 0;
+	if (!attested) return "invalid";
+	const query = ctx.query;
+	return idListsIn(query).some((ids) => ids.length > 0 && ids.every((id) => attested.has(String(id)))) ? "valid" : "invalid";
+}
 /** Validates the request's shape (reason, actor). Throws 400 on a malformed one. */
 function assertRetentionPurgeShape(raw, op) {
 	const req = raw;
@@ -50,7 +85,15 @@ function assertRetentionPurgeShape(raw, op) {
 function readRetentionPurge(ctx, op, guard) {
 	const raw = ctx.retentionPurge;
 	if (raw === void 0 || raw === null || raw === false) return void 0;
-	if (!guard.allowPurge) throw createError(403, `'${op}' with retentionPurge is not enabled on this repository: construct ${guard.plugin} with allowPurge: true for the retention path.`, {
+	const attestation = archiveAttestationOf(ctx);
+	if (attestation === "invalid") throw createError(403, `'${op}' carries an archive attestation that does not cover the rows it deletes: an archive delete may remove only the chunk its sink acknowledged.`, {
+		code: RETENTION_PURGE_ERROR_CODES.ARCHIVE_UNATTESTED,
+		meta: {
+			operation: op,
+			plugin: guard.plugin
+		}
+	});
+	if (!guard.allowPurge && !(guard.allowArchive && attestation === "valid")) throw createError(403, `'${op}' with retentionPurge is not enabled on this repository: construct ${guard.plugin} with allowPurge: true for the retention path` + (attestation === "valid" ? ", or allowArchive: true for archiveByFilter." : "."), {
 		code: RETENTION_PURGE_ERROR_CODES.DISABLED,
 		meta: {
 			operation: op,
@@ -76,6 +119,7 @@ function retentionPurgeEvent(operation, context, result) {
 		id: operation === "delete" ? ctx.id : void 0,
 		filter: operation === "deleteMany" ? ctx.query : void 0,
 		deletedCount: operation === "delete" ? result ? 1 : 0 : result?.deletedCount ?? 0,
+		archived: archiveAttestationOf(context) === "valid",
 		session: context.session,
 		context
 	};
@@ -117,7 +161,7 @@ function createMongoPurgePort(repo, field, value, session, portOptions = {}) {
 * uses, so a row that leaves the matching set between the id select and the
 * write is never touched.
 *
-* Mirrors `createMongoArchivePort`, which likewise binds a pre-compiled
+* Mirrors `createMongoArchiveRun`, which likewise binds a pre-compiled
 * filter rather than a `field/value` pair.
 */
 function createMongoPurgePortFromFilter(repo, filter, session, portOptions = {}) {
@@ -1459,22 +1503,78 @@ function buildKeysetPredicate(sort, cursor) {
 	return { $match: branches.length === 1 ? branches[0] : { $or: branches } };
 }
 // src/actions/archive.ts
+const idOf = (doc) => doc._id;
+const valueAt = (doc, path) => path.split(".").reduce((acc, key) => acc?.[key], doc);
 /**
-* Build an `ArchivePort` bound to a repository + a pre-compiled Mongo
-* filter (the repository compiles Filter IR before calling this).
+* The fields that prove a row is unchanged since export: the `updatedAt` mongoose
+* timestamps maintain on every write path, plus the repository's `versionField` when
+* the schema has it. Empty only for a collection declared `immutable`. A collection with
+* no maintained `updatedAt` is refused before the run reads anything.
 */
-function createMongoArchivePort(repo, filter, session) {
+function archiveChangeTokens(model, versionField, immutable) {
+	if (immutable) return [];
+	const ts = model.timestamps;
+	const updatedAt = ts === true ? "updatedAt" : ts && typeof ts === "object" && ts.updatedAt !== false ? typeof ts.updatedAt === "string" ? ts.updatedAt : "updatedAt" : void 0;
+	if (!updatedAt) throw createError(400, `archiveByFilter on '${model.modelName}': the schema maintains no updatedAt (timestamps), so a row edited between export and delete could not be told apart and would be deleted with its edit. Enable timestamps, or pass immutable: true for a collection whose rows never change.`, {
+		code: "ARCHIVE_NO_CHANGE_TOKEN",
+		meta: { model: model.modelName }
+	});
+	return model.hasVersionPath ? [updatedAt, versionField] : [updatedAt];
+}
+/** Each exported row pinned to its change tokens: an edited row no longer matches. */
+function unchangedSince(docs, tokens) {
+	return { $or: docs.map((doc) => {
+		const pin = { _id: idOf(doc) };
+		for (const token of tokens) {
+			const value = valueAt(doc, token);
+			pin[token] = value === void 0 ? { $exists: false } : value;
+		}
+		return pin;
+	}) };
+}
+/**
+* Build the sink + port pair for ONE `archiveByFilter` call. The returned sink
+* forwards to the caller's and records what it acknowledged; the port's delete
+* removes only acknowledged rows still unchanged since export, and throws on any other.
+* Progression is a keyset over `_id`, so a row left live is not revisited by this run.
+*/
+function createMongoArchiveRun(repo, filter, sink, session, retentionPurge, immutable) {
+	const tokens = archiveChangeTokens({
+		modelName: repo.Model.modelName,
+		timestamps: repo.Model.schema.get("timestamps"),
+		hasVersionPath: Boolean(repo.Model.schema.path(repo.versionField))
+	}, repo.versionField, immutable);
+	let acknowledged = /* @__PURE__ */ new Set();
+	let cursor = null;
 	return {
-		async readChunk(limit) {
-			return selectKeysetChunk(repo.Model, filter, limit, { session });
+		sink: {
+			async write(docs) {
+				await sink.write(docs);
+				acknowledged = new Set(docs.map((doc) => String(idOf(doc))));
+			},
+			...sink.flush ? { flush: () => sink.flush?.() ?? Promise.resolve() } : {}
 		},
-		async deleteChunk(docs) {
-			const ids = docs.map((doc) => doc._id);
-			return (await repo.deleteMany(narrowToIds(filter, ids), {
-				session,
-				bypassTenant: true,
-				mode: "hard"
-			})).deletedCount;
+		port: {
+			async readChunk(limit) {
+				return selectKeysetChunk(repo.Model, keysetFilter(filter, cursor), limit, { session });
+			},
+			async deleteChunk(docs) {
+				const ids = docs.map(idOf);
+				const unacknowledged = ids.filter((id) => !acknowledged.has(String(id)));
+				if (unacknowledged.length > 0) throw new Error(`archiveByFilter: refusing to delete ${unacknowledged.length} row(s) the sink did not acknowledge`);
+				const narrowed = narrowToIds(filter, ids);
+				const result = await repo.deleteMany(tokens.length > 0 ? { $and: [narrowed, unchangedSince(docs, tokens)] } : narrowed, {
+					session,
+					bypassTenant: true,
+					mode: "hard",
+					...retentionPurge ? {
+						retentionPurge,
+						archiveAttestation: attestArchivedChunk(ids)
+					} : {}
+				});
+				if (ids.length > 0) cursor = ids[ids.length - 1];
+				return result.deletedCount;
+			}
 		}
 	};
 }
@@ -1619,7 +1719,7 @@ async function executeUpserts(model, ops, options) {
 			verboseResults: true,
 			...options.session ? { session: options.session } : {},
 			...options.writeConcern ? { writeConcern: options.writeConcern } : {},
-			...options.timeoutMS !== void 0 ? { timeoutMS: options.timeoutMS } : {}
+			...options.maxTimeMS !== void 0 ? { maxTimeMS: options.maxTimeMS } : {}
 		});
 	} catch (err) {
 		throwIfUnsupported(err);
@@ -3085,7 +3185,7 @@ var Repository = class extends RepositoryBase {
 	}
 	/**
 	* Resumable keyset batches over `_id`: each batch is ONE bounded `find` (no long-lived server
-	* cursor, so no cursor timeout and no CSOT lifetime budget), memory is one batch, and every
+	* cursor, so no cursor timeout and a bound on every batch), memory is one batch, and every
 	* batch carries a `checkpoint`. Pass a checkpoint back as `after` to resume: rows written
 	* behind it are not revisited, rows ahead of it are reached. A checkpoint is bound to the
 	* collection, the post-policy filter (tenant included) and is refused elsewhere.
@@ -3164,7 +3264,6 @@ var Repository = class extends RepositoryBase {
 		if (options.session) query.session(options.session);
 		const cursorOpts = this._opts("read", context);
 		applyToQuery(query, cursorOpts);
-		applyCursorTimeoutMode(query, cursorOpts, this.Model.db);
 		const stream = query.cursor();
 		let yieldedCount = 0;
 		try {
@@ -4509,17 +4608,24 @@ var Repository = class extends RepositoryBase {
 	* Chunked cold-storage extraction — see `StandardRepo.archiveByFilter`
 	* for the cross-kit contract (write-before-delete, at-least-once,
 	* duplicate-tolerant sinks). Mongokit composes the kit-agnostic
-	* `runChunkedArchive` orchestrator with `createMongoArchivePort`
+	* `runChunkedArchive` orchestrator with `createMongoArchiveRun`
 	* (`_id`-ordered lean reads + plugin-routed deleteMany removal). See
 	* [actions/archive.ts](./actions/archive.ts) for the port.
 	*
+	* `retentionPurge` rides every chunk delete with an attestation of the ids the
+	* sink acknowledged, so a fence built with `allowArchive` (or `allowPurge`)
+	* admits it; validated before any chunk is read. Each row is deleted only if its
+	* `updatedAt` (+ `versionField`) still equals the exported value; an edited row stays
+	* live for the next run.
+	*
 	* Accepts Filter IR or a Mongo-shaped filter record — compiled once via
 	* `compileFilterToMongo`, same dual-dialect rule as every other verb.
 	*/
 	async archiveByFilter(filter, sink, options = {}) {
 		const compiled = compileFilterToMongo(filter);
-		const port = createMongoArchivePort(this, compiled, options.session);
-		return runChunkedArchive(options, sink, port);
+		const retentionPurge = options.retentionPurge === void 0 ? void 0 : assertRetentionPurgeShape(options.retentionPurge, "archiveByFilter");
+		const run = createMongoArchiveRun(this, compiled, sink, options.session, retentionPurge, options.immutable === true);
+		return runChunkedArchive(options, run.sink, run.port);
 	}
 	/**
 	* Many keyed upserts in ONE command with an exact per-row outcome (repo-core `bulkUpsert` IR).
@@ -4580,7 +4686,7 @@ var Repository = class extends RepositoryBase {
 				ordered,
 				session: context.session,
 				writeConcern: writeOpts.writeConcern,
-				timeoutMS: writeOpts.maxTimeMS
+				maxTimeMS: writeOpts.maxTimeMS
 			});
 			return summarizeBulkUpsert([...refused, ...sent].sort((a, b) => a.index - b.index));
 		});
@@ -4940,9 +5046,9 @@ var Repository = class extends RepositoryBase {
 				const appendLookupStages$2 = (pipeline) => appendLookupStages(pipeline, lookups, projection, isKeyset && sort ? this._parseSort(sort) : void 0);
 				if (isKeyset && sort) {
 					const parsedSort = this._parseSort(sort);
-					const { validateKeysetSort } = await import("./PaginationEngine-C9iS0U5l.mjs").then((n) => n.r);
-					const { encodeCursor, resolveCursorFilter } = await import("./PaginationEngine-C9iS0U5l.mjs").then((n) => n.a);
-					const { getPrimaryField } = await import("./PaginationEngine-C9iS0U5l.mjs").then((n) => n.r);
+					const { validateKeysetSort } = await import("./PaginationEngine-BRlLTQQz.mjs").then((n) => n.r);
+					const { encodeCursor, resolveCursorFilter } = await import("./PaginationEngine-BRlLTQQz.mjs").then((n) => n.a);
+					const { getPrimaryField } = await import("./PaginationEngine-BRlLTQQz.mjs").then((n) => n.r);
 					const normalizedSort = validateKeysetSort(parsedSort, this._pagination.config.strictKeysetSortFields);
 					const cursorVersion = this._pagination.config.cursorVersion ?? 1;
 					const minCursorVersion = this._pagination.config.minCursorVersion ?? 1;

package/dist/actions/index.d.mts

@@ -1,2 +1,2 @@
-import { c as create_d_exports, i as delete_d_exports, n as update_d_exports, r as read_d_exports, u as aggregate_d_exports } from "../index-8QUEsOFI.mjs";
+import { c as create_d_exports, i as delete_d_exports, n as update_d_exports, r as read_d_exports, u as aggregate_d_exports } from "../index-5mhQ63_B.mjs";
 export { aggregate_d_exports as aggregate, create_d_exports as create, delete_d_exports as deleteActions, read_d_exports as read, update_d_exports as update };

package/dist/actions/index.mjs

@@ -1,2 +1,2 @@
-export { m as aggregate, S as create, p as deleteActions, u as read, i as update } from "../update-DcfmNbJe.mjs";
-import "../actions-DExyXMTy.mjs";
+export { m as aggregate, S as create, p as deleteActions, u as read, i as update } from "../update-CYaJMu6j.mjs";
+import "../actions-DKQx9ToJ.mjs";

package/dist/{actions-DExyXMTy.mjs → actions-DKQx9ToJ.mjs}

@@ -1,5 +1,5 @@
 import { t as __exportAll } from "./rolldown-runtime-D8jQpDG7.mjs";
-import { S as create_exports, i as update_exports, m as aggregate_exports, p as delete_exports, u as read_exports } from "./update-DcfmNbJe.mjs";
+import { S as create_exports, i as update_exports, m as aggregate_exports, p as delete_exports, u as read_exports } from "./update-CYaJMu6j.mjs";
 // src/actions/index.ts
 var actions_exports = /* @__PURE__ */ __exportAll({
 	aggregate: () => aggregate_exports,

package/dist/ai/index.d.mts

@@ -1,4 +1,4 @@
-import { l as Plugin } from "../repository-DzVIwhU2.mjs";
+import { l as Plugin } from "../repository-B0aFVgP2.mjs";
 import { PipelineStage } from "mongoose";
 /** Supported similarity metrics for vector search */
 type SimilarityMetric = 'cosine' | 'euclidean' | 'dotProduct';

package/dist/better-auth/index.d.mts

@@ -53,10 +53,13 @@ interface BATableConfig {
  * log. Measured on a real deployment: `GET /me`, `GET /users/:id` and
  * `GET /branches/code/:code` all 404'd for rows that existed.
  *
- * There is no safe default that covers both, which is why this is an explicit
+ * - `'uuid'` - the host set `advanced.database.generateId: 'uuid'`. BA then stores real BSON UUIDs
+ *   (not strings), and the schema needs the UUID SchemaType so a string id is cast to one.
+ *
+ * There is no safe default that covers all three, which is why this is an explicit
  * option rather than a guess: read `typeof doc._id` from a live row.
  */
-export type BetterAuthIdType = 'objectid' | 'string';
+export type BetterAuthIdType = 'objectid' | 'string' | 'uuid';
 export interface RegisterBetterAuthStubsOptions {
   /** Plugin sets to include. `core` is always implied. */
   plugins?: BetterAuthPluginKey$1[];

package/dist/better-auth/index.mjs

@@ -1,5 +1,5 @@
 import { n as createMongooseAdapter } from "../adapter-Qzgc3ZD_.mjs";
-import { n as Repository } from "../Repository-eMRYZ_2Y.mjs";
+import { n as Repository } from "../Repository-DheA7oW-.mjs";
 import { asReadOnlyRepo } from "@classytic/repo-core/repository";
 import { pluralizeBetterAuthCollection, resolveBetterAuthCollections } from "@classytic/repo-core/better-auth";
 // src/better-auth/index.ts
@@ -42,7 +42,9 @@ function missingIndexesOn(existing, declared) {
 }
 /** The `_id` path for a stub/overlay schema, or `{}` to inherit mongoose's ObjectId default. */
 function idPath(idType) {
-	return idType === "string" ? { _id: { type: String } } : {};
+	if (idType === "string") return { _id: { type: String } };
+	if (idType === "uuid") return { _id: { type: "UUID" } };
+	return {};
 }
 /**
 * Register stub Mongoose models for Better Auth's collections so that
@@ -331,24 +333,12 @@ const BA_INDEXES_BY_PLUGIN = {
 		keys: { userId: 1 },
 		name: "ba_twoFactor_userId"
 	}],
-	deviceAuthorization: [
-		{
-			collection: "deviceCode",
-			keys: { deviceCode: 1 },
-			name: "ba_deviceCode_code"
-		},
-		{
-			collection: "deviceCode",
-			keys: { userCode: 1 },
-			name: "ba_deviceCode_userCode"
-		},
-		{
-			collection: "deviceCode",
-			keys: { expiresAt: 1 },
-			name: "ttl_deviceCode_expiresAt",
-			ttl: true
-		}
-	]
+	deviceAuthorization: [{
+		collection: "deviceCode",
+		keys: { expiresAt: 1 },
+		name: "ttl_deviceCode_expiresAt",
+		ttl: true
+	}]
 };
 /**
 * Create every index Better Auth's queries need. Idempotent, never throws.

package/dist/{create-repository-D7MQpIZo.mjs → create-repository-C9DHHcl7.mjs}

@@ -1,6 +1,6 @@
-import { S as auditTrailPlugin, b as cachePlugin, d as customIdPlugin, i as multiTenantPlugin, n as softDeletePlugin, t as timestampPlugin, w as auditLogPlugin } from "./timestamp.plugin-Bz_zL9PX.mjs";
-import { n as batchOperationsPlugin, t as methodRegistryPlugin } from "./method-registry.plugin-CGAepsBU.mjs";
-import { n as Repository } from "./Repository-eMRYZ_2Y.mjs";
+import { S as auditTrailPlugin, b as cachePlugin, d as customIdPlugin, i as multiTenantPlugin, n as softDeletePlugin, t as timestampPlugin, w as auditLogPlugin } from "./timestamp.plugin-B-IJrlYb.mjs";
+import { n as batchOperationsPlugin, t as methodRegistryPlugin } from "./method-registry.plugin-BeJfQBJV.mjs";
+import { n as Repository } from "./Repository-DheA7oW-.mjs";
 // src/create-repository.ts
 function isLoggerAudit(value) {
 	const v = value;

package/dist/{create-repository-BOFUYj1l.d.mts → create-repository-DG-gwOf0.d.mts}

@@ -1,8 +1,8 @@
-import { L as AuditTrailOptions, i as CustomIdOptions, k as RepositoryCachePluginOptions, t as MultiTenantOptions } from "./multi-tenant.plugin-DfeDMiI8.mjs";
-import { r as Repository } from "./Repository-B6oL6OMv.mjs";
-import { u as PaginationConfig } from "./pagination-DAUg5zOY.mjs";
-import { i as Logger, o as SoftDeleteOptions } from "./plugin-options-Bpcuz9kS.mjs";
-import { _ as RepositoryOptions, d as PluginType } from "./repository-DzVIwhU2.mjs";
+import { L as AuditTrailOptions, i as CustomIdOptions, k as RepositoryCachePluginOptions, t as MultiTenantOptions } from "./multi-tenant.plugin-BTPtCLNK.mjs";
+import { r as Repository } from "./Repository-DJuRmBNx.mjs";
+import { u as PaginationConfig } from "./pagination-BAM9cA4N.mjs";
+import { i as Logger, o as SoftDeleteOptions } from "./plugin-options-DrNGWV5b.mjs";
+import { _ as RepositoryOptions, d as PluginType } from "./repository-B0aFVgP2.mjs";
 import { Model } from "mongoose";
 /**
  * Audit config — either a `Logger` (routes to `auditLogPlugin`, which

package/dist/{index-8QUEsOFI.d.mts → index-5mhQ63_B.d.mts}

@@ -1,5 +1,5 @@
-import { S as LookupOptions, c as DeleteResult, d as GroupResult, h as OperationOptions, l as FindOneAndUpdateOptions, m as MinMaxResult, o as CreateOptions, v as UpdateManyResult, y as UpdateOptions } from "./operations-Dw9OFV0V.mjs";
-import { A as ObjectId, D as AnyDocument, F as SortSpec, N as SelectSpec, j as PopulateSpec, y as ResolvedQueryOptions } from "./pagination-DAUg5zOY.mjs";
+import { S as LookupOptions, c as DeleteResult, d as GroupResult, h as OperationOptions, l as FindOneAndUpdateOptions, m as MinMaxResult, o as CreateOptions, v as UpdateManyResult, y as UpdateOptions } from "./operations-D6XsHx4e.mjs";
+import { A as ObjectId, D as AnyDocument, F as SortSpec, N as SelectSpec, j as PopulateSpec, y as ResolvedQueryOptions } from "./pagination-BAM9cA4N.mjs";
 import { p as UpdateWithValidationResult } from "./type-utils-CKvuewAL.mjs";
 import { Model, PipelineStage } from "mongoose";
 declare namespace aggregate_d_exports {

package/dist/index.d.mts

@@ -1,19 +1,19 @@
-import { a as CreateManyFailure, l as isCreateManyPartialError, o as CreateManyPartial, s as CreateManyPartialError, t as index_d_exports } from "./index-8QUEsOFI.mjs";
-import { a as AggregationBuilder, c as ProjectionSpec, d as VectorSearchOptions, f as RetentionTenantPurgeOptions, i as TransitionMachine, l as SortOrder, n as HOOK_PRIORITY, o as AggregationPlan, r as Repository, s as GroupSpec, t as GetAllParams, u as SortSpec } from "./Repository-B6oL6OMv.mjs";
-import { n as CreateRepositoryConfig, r as createRepository, t as AuditConfig } from "./create-repository-BOFUYj1l.mjs";
-import { C as RepositoryPluginName, S as MongoKitPluginName, _ as RepositoryOptions, a as HookMode, b as WithPlugins, c as MinimalRepoView, d as PluginType, f as PrioritizedHook, g as RepositoryOperation, h as RepositoryInstance, i as EventPhase, l as Plugin, m as RepositoryEvent, n as EventHandlers, o as Middleware, p as RepositoryContext, r as EventPayload, s as MiddlewareContext, t as AllPluginMethods, u as PluginFunction, v as RepositorySearchMode, x as MONGOKIT_PLUGIN_NAMES, y as UserContext } from "./repository-DzVIwhU2.mjs";
-import { A as ObjectId, C as configureQueryDefaults, D as AnyDocument, E as resolveQueryOptions, F as SortSpec$1, M as ReadPreferenceType, N as SelectSpec, O as AnyModel, P as SortDirection, S as configureAggregateDefaults, T as resetQueryDefaults, _ as QueryDefaults, a as CursorPayload, b as WriteConcernSpec, c as MongokitPageExtras, d as ValueType, f as CursorSecret, g as QUERY_DEFAULTS_ERROR_CODES, h as PerCallQueryOptions, i as CountStrategy, j as PopulateSpec, l as OffsetPaginationOptions, m as CommandKind, n as BasePaginationOptions, o as DecodedCursor, p as AggregateDefaults, r as CollationOptions, s as KeysetPaginationOptions, t as AggregatePaginationOptions, u as PaginationConfig, v as ReadConcernLevel, w as getQueryDefaults, x as assertQueryDefaultsConfigured, y as ResolvedQueryOptions } from "./pagination-DAUg5zOY.mjs";
-import { S as LookupOptions, _ as SessionOptions, a as ConvenientTransactionOptions, b as WithTransactionOptions, c as DeleteResult, d as GroupResult, f as LookupPopulateOptions, g as ReadOptions, h as OperationOptions, i as CacheableOptions, l as FindOneAndUpdateOptions, m as MinMaxResult, n as AggregateOptions, o as CreateOptions, p as LookupPopulateResult, r as CacheOperationOptions, t as AggregateCallOptions, u as GetByIdsOptions, v as UpdateManyResult, x as LookupBuilder, y as UpdateOptions } from "./operations-Dw9OFV0V.mjs";
-import { n as PaginationEngine, t as CountMemoKey } from "./PaginationEngine-D17AthKw.mjs";
-import { A as ImmutablePurgeEvent, B as elasticSearchPlugin, D as LeasePluginOptions, E as LeasePendingFilter, F as IdempotencyStoreMethods, G as batchOperationsPlugin, H as BatchOperationsMethods, I as IdempotencyStorePluginOptions, J as AppendOnlyPurgeEvent, K as auditLogPlugin, L as idempotencyStorePlugin, M as ImmutableStatesPluginOptions, N as immutableStatesPlugin, O as leasePlugin, P as IdempotencyClaim, R as fieldFilterPlugin, S as mongoOperationsPlugin, T as LeaseMethods, U as BulkWriteOptions, V as cascadePlugin, W as BulkWriteResult, X as AggregateHelpersMethods, Y as appendOnlyPlugin, Z as aggregateHelpersPlugin, _ as searchKeysPlugin, a as requireField, b as observabilityPlugin, c as timestampPlugin, d as createTenantContext, f as SubdocumentMethods, g as SearchKeysPluginOptions, h as softDeletePlugin, i as immutableField, j as ImmutablePurgeRequest, k as ImmutableClaimView, l as TenantContext, m as SoftDeleteMethods, n as autoInject, o as uniqueField, p as subdocumentPlugin, q as AppendOnlyPluginOptions, r as blockIf, s as validationChainPlugin, t as OperationType, u as TenantStore, v as ObservabilityOptions, w as methodRegistryPlugin, x as MongoOperationsMethods, y as OperationMetric, z as ElasticSearchOptions } from "./validation-chain.plugin-B3gZCZj4.mjs";
-import { A as cachePlugin, B as EnsureAuditTrailReadyOptions, C as prefixedId, D as CacheOptions, E as CacheAdapter, F as AuditTrailMethods, H as ensureAuditTrailReady, I as AuditTrailMode, L as AuditTrailOptions, M as AuditOperation, N as AuditQueryOptions, O as RepositoryCacheHandle, P as AuditQueryResult, R as AuditTrailQuery, S as periodCounterKey, T as sequentialId, V as auditTrailPlugin, _ as customIdPlugin, a as DateSequentialIdOptions, b as getNextPeriodSequence, c as PeriodSequenceOptions, d as SequenceCounter, f as SequenceCounterOptions, g as createSequenceCounter, h as civilPeriodKey, i as CustomIdOptions, j as AuditEntry, k as RepositoryCachePluginOptions, l as PeriodSequenceResult, m as SequentialIdOptions, n as adminBypass, o as IdGenerator, p as SequencePeriod, r as multiTenantPlugin, s as PeriodSequenceKeyOptions, t as MultiTenantOptions, u as PrefixedIdOptions, v as dateSequentialId, w as readSequence, x as getNextSequence, y as ensureSequenceAtLeast, z as AuditTrailQueryOptions } from "./multi-tenant.plugin-DfeDMiI8.mjs";
-import { n as RetentionPurgeEvent, r as RetentionPurgeRequest, t as RETENTION_PURGE_ERROR_CODES } from "./retention-purge-DqcYvRnG.mjs";
+import { a as CreateManyFailure, l as isCreateManyPartialError, o as CreateManyPartial, s as CreateManyPartialError, t as index_d_exports } from "./index-5mhQ63_B.mjs";
+import { a as AggregationBuilder, c as ProjectionSpec, d as VectorSearchOptions, f as RetentionTenantPurgeOptions, i as TransitionMachine, l as SortOrder, n as HOOK_PRIORITY, o as AggregationPlan, r as Repository, s as GroupSpec, t as GetAllParams, u as SortSpec } from "./Repository-DJuRmBNx.mjs";
+import { n as CreateRepositoryConfig, r as createRepository, t as AuditConfig } from "./create-repository-DG-gwOf0.mjs";
+import { C as RepositoryPluginName, S as MongoKitPluginName, _ as RepositoryOptions, a as HookMode, b as WithPlugins, c as MinimalRepoView, d as PluginType, f as PrioritizedHook, g as RepositoryOperation, h as RepositoryInstance, i as EventPhase, l as Plugin, m as RepositoryEvent, n as EventHandlers, o as Middleware, p as RepositoryContext, r as EventPayload, s as MiddlewareContext, t as AllPluginMethods, u as PluginFunction, v as RepositorySearchMode, x as MONGOKIT_PLUGIN_NAMES, y as UserContext } from "./repository-B0aFVgP2.mjs";
+import { A as ObjectId, C as configureQueryDefaults, D as AnyDocument, E as resolveQueryOptions, F as SortSpec$1, M as ReadPreferenceType, N as SelectSpec, O as AnyModel, P as SortDirection, S as configureAggregateDefaults, T as resetQueryDefaults, _ as QueryDefaults, a as CursorPayload, b as WriteConcernSpec, c as MongokitPageExtras, d as ValueType, f as CursorSecret, g as QUERY_DEFAULTS_ERROR_CODES, h as PerCallQueryOptions, i as CountStrategy, j as PopulateSpec, l as OffsetPaginationOptions, m as CommandKind, n as BasePaginationOptions, o as DecodedCursor, p as AggregateDefaults, r as CollationOptions, s as KeysetPaginationOptions, t as AggregatePaginationOptions, u as PaginationConfig, v as ReadConcernLevel, w as getQueryDefaults, x as assertQueryDefaultsConfigured, y as ResolvedQueryOptions } from "./pagination-BAM9cA4N.mjs";
+import { S as LookupOptions, _ as SessionOptions, a as ConvenientTransactionOptions, b as WithTransactionOptions, c as DeleteResult, d as GroupResult, f as LookupPopulateOptions, g as ReadOptions, h as OperationOptions, i as CacheableOptions, l as FindOneAndUpdateOptions, m as MinMaxResult, n as AggregateOptions, o as CreateOptions, p as LookupPopulateResult, r as CacheOperationOptions, t as AggregateCallOptions, u as GetByIdsOptions, v as UpdateManyResult, x as LookupBuilder, y as UpdateOptions } from "./operations-D6XsHx4e.mjs";
+import { n as PaginationEngine, t as CountMemoKey } from "./PaginationEngine-BWb-c47a.mjs";
+import { A as ImmutablePurgeEvent, B as elasticSearchPlugin, D as LeasePluginOptions, E as LeasePendingFilter, F as IdempotencyStoreMethods, G as batchOperationsPlugin, H as BatchOperationsMethods, I as IdempotencyStorePluginOptions, J as AppendOnlyPurgeEvent, K as auditLogPlugin, L as idempotencyStorePlugin, M as ImmutableStatesPluginOptions, N as immutableStatesPlugin, O as leasePlugin, P as IdempotencyClaim, R as fieldFilterPlugin, S as mongoOperationsPlugin, T as LeaseMethods, U as BulkWriteOptions, V as cascadePlugin, W as BulkWriteResult, X as AggregateHelpersMethods, Y as appendOnlyPlugin, Z as aggregateHelpersPlugin, _ as searchKeysPlugin, a as requireField, b as observabilityPlugin, c as timestampPlugin, d as createTenantContext, f as SubdocumentMethods, g as SearchKeysPluginOptions, h as softDeletePlugin, i as immutableField, j as ImmutablePurgeRequest, k as ImmutableClaimView, l as TenantContext, m as SoftDeleteMethods, n as autoInject, o as uniqueField, p as subdocumentPlugin, q as AppendOnlyPluginOptions, r as blockIf, s as validationChainPlugin, t as OperationType, u as TenantStore, v as ObservabilityOptions, w as methodRegistryPlugin, x as MongoOperationsMethods, y as OperationMetric, z as ElasticSearchOptions } from "./validation-chain.plugin-COYrUdd8.mjs";
+import { A as cachePlugin, B as EnsureAuditTrailReadyOptions, C as prefixedId, D as CacheOptions, E as CacheAdapter, F as AuditTrailMethods, H as ensureAuditTrailReady, I as AuditTrailMode, L as AuditTrailOptions, M as AuditOperation, N as AuditQueryOptions, O as RepositoryCacheHandle, P as AuditQueryResult, R as AuditTrailQuery, S as periodCounterKey, T as sequentialId, V as auditTrailPlugin, _ as customIdPlugin, a as DateSequentialIdOptions, b as getNextPeriodSequence, c as PeriodSequenceOptions, d as SequenceCounter, f as SequenceCounterOptions, g as createSequenceCounter, h as civilPeriodKey, i as CustomIdOptions, j as AuditEntry, k as RepositoryCachePluginOptions, l as PeriodSequenceResult, m as SequentialIdOptions, n as adminBypass, o as IdGenerator, p as SequencePeriod, r as multiTenantPlugin, s as PeriodSequenceKeyOptions, t as MultiTenantOptions, u as PrefixedIdOptions, v as dateSequentialId, w as readSequence, x as getNextSequence, y as ensureSequenceAtLeast, z as AuditTrailQueryOptions } from "./multi-tenant.plugin-BTPtCLNK.mjs";
+import { n as RetentionPurgeEvent, r as RetentionPurgeRequest, t as RETENTION_PURGE_ERROR_CODES } from "./retention-purge-CCd_VXUf.mjs";
 import { n as SchemaPathsLike, t as FieldType$1 } from "./coercion-COp9DRNw.mjs";
 import { n as SchemaIndexes } from "./indexes-FfyOuhDK.mjs";
-import { a as SoftDeleteFilterMode, c as ValidationChainOptions, i as Logger, l as ValidatorDefinition, n as CascadeRelation, o as SoftDeleteOptions, r as FieldPreset, s as SoftDeleteRepository, t as CascadeOptions } from "./plugin-options-Bpcuz9kS.mjs";
+import { a as SoftDeleteFilterMode, c as ValidationChainOptions, i as Logger, l as ValidatorDefinition, n as CascadeRelation, o as SoftDeleteOptions, r as FieldPreset, s as SoftDeleteRepository, t as CascadeOptions } from "./plugin-options-DrNGWV5b.mjs";
 import { a as InferRawDoc, c as NonNullableFields, d as Strict, f as UpdatePatch, i as InferDocument, l as PartialBy, n as DeepPartial, o as KeysOfType, p as UpdateWithValidationResult, r as DocField, s as MongoOperatorUpdate, t as CreateInput, u as RequiredBy } from "./type-utils-CKvuewAL.mjs";
 import { a as prefixSearchFilter, c as SearchMatchRange, d as tokenizeSearchText, f as SEARCH_KEYS_ERROR_CODES, i as buildSearchKeys, l as findSearchMatches, n as MAX_PREFIX_SEARCH_TERMS, o as searchKeysIndex, p as SearchKeysWriteError, r as PrefixSearchFilterOptions, s as searchKeysPath, t as DEFAULT_SEARCH_KEYS_FIELD, u as normalizeSearchText } from "./index-ehGZLbrd.mjs";
-import { S as parseDuplicateKeyError, _ as getMongooseProjection, a as createMemoryCache, b as createError, g as getFieldsForUser, h as filterResponseData, i as buildCrudSchemasFromMongooseSchema, m as createFieldPreset, n as CrudSchemasFramework, o as LoggerConfig, r as buildCrudSchemasFromModel, s as configureLogger, t as toPlain, u as idVariants, v as CreateErrorOptions, x as isDuplicateKeyError, y as ParseDuplicateKeyOptions } from "./to-plain-PO5r1Qoy.mjs";
+import { S as parseDuplicateKeyError, _ as getMongooseProjection, a as createMemoryCache, b as createError, g as getFieldsForUser, h as filterResponseData, i as buildCrudSchemasFromMongooseSchema, m as createFieldPreset, n as CrudSchemasFramework, o as LoggerConfig, r as buildCrudSchemasFromModel, s as configureLogger, t as toPlain, u as idVariants, v as CreateErrorOptions, x as isDuplicateKeyError, y as ParseDuplicateKeyOptions } from "./to-plain-Do-8jTKC.mjs";
 import { RepoCapabilities } from "@classytic/repo-core/repository";
 import { ClientSession, Connection, Model, PipelineStage, Schema } from "mongoose";
 import { HttpError } from "@classytic/repo-core/errors";
@@ -789,12 +789,13 @@ export declare const TRANSACTION_ERROR_CODES: {
 };
 /**
  * The driver's convenient-transaction algorithm (start → callback → commit, label-based retry,
- * jittered backoff, a deadline), run here so the driver never attaches a session `timeoutContext`:
- * with one, every legacy bulk write (`insertMany`, `bulkWrite`) in the transaction is refused once
- * the client carries `timeoutMS` (driver <= 7.7: the bulk path re-resolves the inherited client
- * `timeoutMS` as a per-op one). Each operation keeps its own per-op CSOT budget instead.
- * Deadline: `transactionOptions.timeoutMS`, else the client's `timeoutMS`, else 120 s (as the driver).
- * Pinned by `tests/integration/csot-transaction-matrix.test.ts`.
+ * jittered backoff, a deadline), run here and nowhere else: the driver's own `timeoutMS` / CSOT is a
+ * no-op since 7.8, so the budget is mongokit's. `transactionOptions.timeoutMS` is that budget, enforced
+ * by mongokit alone: every mongokit operation in the transaction is sent with `maxTimeMS` = what
+ * remains of it, the commit is bounded by `maxCommitTimeMS`, and the retry loop stops at the deadline
+ * (a spent budget before the commit aborts, so the outcome is known). Without it the deadline is 120 s
+ * (as the driver) and operations carry only their own bound. The client's `timeoutMS` is not read.
+ * Pinned by `tests/integration/transaction-budget-matrix.test.ts`.
  */
 export declare function runTransaction<T>(session: ClientSession, callback: (session: ClientSession) => Promise<T>, transactionOptions?: ConvenientTransactionOptions): Promise<T>;
 /**

package/dist/index.mjs

@@ -1,21 +1,21 @@
 import { n as idVariants } from "./id-resolution-Cqh49d9J.mjs";
-import { a as ALL_OPERATIONS, c as READ_OPERATIONS, d as RETENTION_PURGE_ERROR_CODES, i as searchKeysPlugin, l as operationsByPolicyKey, n as Repository, o as MUTATING_OPERATIONS, r as AggregationBuilder, s as OP_REGISTRY, t as HOOK_PRIORITY, u as createMongoPurgePort } from "./Repository-eMRYZ_2Y.mjs";
-import { C as isCreateManyPartialError, g as LookupBuilder, v as compileFilterToMongo } from "./update-DcfmNbJe.mjs";
-import { t as actions_exports } from "./actions-DExyXMTy.mjs";
-import { a as supportsTransactions, c as MONGOKIT_CAPABILITIES, d as probeMongoCapabilities, f as resetCapabilityProbeCache, h as transactionResolutionOf, i as runTransaction, l as capabilitiesForSupport, m as resolveTransactionSupport, n as batchTransaction, o as withTransaction, p as resolveMongoCapabilities, r as isTransactionUnsupported, t as TRANSACTION_ERROR_CODES, u as classifyHelloReply } from "./transaction-C2PFxfIv.mjs";
-import { t as createRepository } from "./create-repository-D7MQpIZo.mjs";
+import { a as ALL_OPERATIONS, c as READ_OPERATIONS, d as RETENTION_PURGE_ERROR_CODES, i as searchKeysPlugin, l as operationsByPolicyKey, n as Repository, o as MUTATING_OPERATIONS, r as AggregationBuilder, s as OP_REGISTRY, t as HOOK_PRIORITY, u as createMongoPurgePort } from "./Repository-DheA7oW-.mjs";
+import { C as isCreateManyPartialError, g as LookupBuilder, v as compileFilterToMongo } from "./update-CYaJMu6j.mjs";
+import { t as actions_exports } from "./actions-DKQx9ToJ.mjs";
+import { a as supportsTransactions, c as MONGOKIT_CAPABILITIES, d as probeMongoCapabilities, f as resetCapabilityProbeCache, h as transactionResolutionOf, i as runTransaction, l as capabilitiesForSupport, m as resolveTransactionSupport, n as batchTransaction, o as withTransaction, p as resolveMongoCapabilities, r as isTransactionUnsupported, t as TRANSACTION_ERROR_CODES, u as classifyHelloReply } from "./transaction-C6Oj941P.mjs";
+import { t as createRepository } from "./create-repository-C9DHHcl7.mjs";
 import { n as defineModel, r as isModelRegistered, t as ModelCollisionError } from "./model-registry-DrVfJ3Nt.mjs";
-import { c as PAGINATION_ERROR_CODES, h as resetPaginationDefaults, m as getPaginationDefaults, p as configurePaginationDefaults, t as PaginationEngine } from "./PaginationEngine-C9iS0U5l.mjs";
-import { C as ensureAuditTrailReady, S as auditTrailPlugin, _ as prefixedId, a as declareTenantContextKey, b as cachePlugin, c as tenantContextKeysOf, d as customIdPlugin, f as dateSequentialId, g as periodCounterKey, h as getNextSequence, i as multiTenantPlugin, l as civilPeriodKey, m as getNextPeriodSequence, n as softDeletePlugin, o as forwardScope, p as ensureSequenceAtLeast, r as adminBypass, s as isScopeKey, t as timestampPlugin, u as createSequenceCounter, v as readSequence, w as auditLogPlugin, x as AuditTrailQuery, y as sequentialId } from "./timestamp.plugin-Bz_zL9PX.mjs";
-import { _ as cascadePlugin, a as uniqueField, c as subdocumentPlugin, d as mongoOperationsPlugin, f as leasePlugin, g as elasticSearchPlugin, h as fieldFilterPlugin, i as requireField, l as observabilityPlugin, m as idempotencyStorePlugin, n as blockIf, o as validationChainPlugin, p as immutableStatesPlugin, r as immutableField, s as createTenantContext, t as autoInject, u as MONGOKIT_PLUGIN_NAMES, v as appendOnlyPlugin, y as aggregateHelpersPlugin } from "./validation-chain.plugin-DNY6MIF6.mjs";
-import { n as batchOperationsPlugin, t as methodRegistryPlugin } from "./method-registry.plugin-CGAepsBU.mjs";
+import { c as PAGINATION_ERROR_CODES, h as resetPaginationDefaults, m as getPaginationDefaults, p as configurePaginationDefaults, t as PaginationEngine } from "./PaginationEngine-BRlLTQQz.mjs";
+import { C as ensureAuditTrailReady, S as auditTrailPlugin, _ as prefixedId, a as declareTenantContextKey, b as cachePlugin, c as tenantContextKeysOf, d as customIdPlugin, f as dateSequentialId, g as periodCounterKey, h as getNextSequence, i as multiTenantPlugin, l as civilPeriodKey, m as getNextPeriodSequence, n as softDeletePlugin, o as forwardScope, p as ensureSequenceAtLeast, r as adminBypass, s as isScopeKey, t as timestampPlugin, u as createSequenceCounter, v as readSequence, w as auditLogPlugin, x as AuditTrailQuery, y as sequentialId } from "./timestamp.plugin-B-IJrlYb.mjs";
+import { _ as cascadePlugin, a as uniqueField, c as subdocumentPlugin, d as mongoOperationsPlugin, f as leasePlugin, g as elasticSearchPlugin, h as fieldFilterPlugin, i as requireField, l as observabilityPlugin, m as idempotencyStorePlugin, n as blockIf, o as validationChainPlugin, p as immutableStatesPlugin, r as immutableField, s as createTenantContext, t as autoInject, u as MONGOKIT_PLUGIN_NAMES, v as appendOnlyPlugin, y as aggregateHelpersPlugin } from "./validation-chain.plugin-DJplVJ12.mjs";
+import { n as batchOperationsPlugin, t as methodRegistryPlugin } from "./method-registry.plugin-BeJfQBJV.mjs";
 import { n as warn, t as configureLogger } from "./logger-hbWOlj_X.mjs";
 import { GEO_OPERATORS, parseGeoFilter } from "./query/primitives/geo.mjs";
 import { buildFieldTypeMap, coerceHeuristic } from "./query/primitives/coercion.mjs";
 import { n as isDuplicateKeyError, r as parseDuplicateKeyError, t as createError } from "./error-DjdmPLWO.mjs";
 import { extractSchemaIndexes } from "./query/primitives/indexes.mjs";
 import { n as declareCollectionScope, t as JOIN_ERROR_CODES } from "./join-scope-C1gOtZ59.mjs";
-import { a as assertQueryDefaultsConfigured, c as getQueryDefaults, l as resetQueryDefaults, o as configureAggregateDefaults, s as configureQueryDefaults, t as QUERY_DEFAULTS_ERROR_CODES, u as resolveQueryOptions } from "./query-defaults-aUoKlEbh.mjs";
+import { a as configureAggregateDefaults, c as resetQueryDefaults, i as assertQueryDefaultsConfigured, l as resolveQueryOptions, o as configureQueryDefaults, s as getQueryDefaults, t as QUERY_DEFAULTS_ERROR_CODES } from "./query-defaults-DwvWUjZU.mjs";
 import { _ as tokenizeSearchText, d as buildSearchKeys, f as prefixSearchFilter, g as normalizeSearchText, h as findSearchMatches, l as DEFAULT_SEARCH_KEYS_FIELD, m as searchKeysPath, n as SearchKeysWriteError, p as searchKeysIndex, t as SEARCH_KEYS_ERROR_CODES, u as MAX_PREFIX_SEARCH_TERMS } from "./derive-Dxsc31fV.mjs";
 import { i as getMongooseProjection, n as filterResponseData, r as getFieldsForUser, t as createFieldPreset } from "./field-selection-DPFaFw9Y.mjs";
 import "./search/index.mjs";

package/dist/{method-registry.plugin-CGAepsBU.mjs → method-registry.plugin-BeJfQBJV.mjs}

@@ -31,7 +31,8 @@ const BULK_WRITE_OPTIONS = [
 	"bypassDocumentValidation",
 	"comment",
 	"let",
-	"ignoreUndefined"
+	"ignoreUndefined",
+	"maxTimeMS"
 ];
 /**
 * Driver options that EXIST but this method does not forward.
@@ -51,7 +52,6 @@ const BULK_WRITE_OPTIONS = [
 const UNSUPPORTED_DRIVER_OPTIONS = /* @__PURE__ */ new Set([
 	"forceServerObjectId",
 	"timeoutMS",
-	"maxTimeMS",
 	"retryWrites",
 	"checkKeys",
 	"serializeFunctions",