@terreno/api 0.0.11-beta.1 → 0.0.12

package/dist/api.arrayOperations.test.js

@@ -0,0 +1,868 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g = Object.create((typeof Iterator === "function" ? Iterator : Object).prototype);
+    return g.next = verb(0), g["throw"] = verb(1), g["return"] = verb(2), typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (g && (g = 0, op[0] && (_ = 0)), _) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+var __read = (this && this.__read) || function (o, n) {
+    var m = typeof Symbol === "function" && o[Symbol.iterator];
+    if (!m) return o;
+    var i = m.call(o), r, ar = [], e;
+    try {
+        while ((n === void 0 || n-- > 0) && !(r = i.next()).done) ar.push(r.value);
+    }
+    catch (error) { e = { error: error }; }
+    finally {
+        try {
+            if (r && !r.done && (m = i["return"])) m.call(i);
+        }
+        finally { if (e) throw e.error; }
+    }
+    return ar;
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+var bun_test_1 = require("bun:test");
+var supertest_1 = __importDefault(require("supertest"));
+var api_1 = require("./api");
+var auth_1 = require("./auth");
+var permissions_1 = require("./permissions");
+var tests_1 = require("./tests");
+var transformers_1 = require("./transformers");
+(0, bun_test_1.describe)("model array operations", function () {
+    var _server;
+    var app;
+    var admin;
+    var spinach;
+    var apple;
+    var agent;
+    (0, bun_test_1.beforeEach)(function () { return __awaiter(void 0, void 0, void 0, function () {
+        var _a, _b;
+        return __generator(this, function (_c) {
+            switch (_c.label) {
+                case 0:
+                    process.env.REFRESH_TOKEN_SECRET = "testsecret1234";
+                    return [4 /*yield*/, (0, tests_1.setupDb)()];
+                case 1:
+                    _a = __read.apply(void 0, [_c.sent(), 1]), admin = _a[0];
+                    return [4 /*yield*/, Promise.all([
+                            tests_1.FoodModel.create({
+                                calories: 1,
+                                created: new Date("2021-12-03T00:00:20.000Z"),
+                                hidden: false,
+                                name: "Spinach",
+                                ownerId: admin._id,
+                                source: {
+                                    name: "Brand",
+                                },
+                            }),
+                            tests_1.FoodModel.create({
+                                calories: 100,
+                                categories: [
+                                    {
+                                        name: "Fruit",
+                                        show: true,
+                                    },
+                                    {
+                                        name: "Popular",
+                                        show: false,
+                                    },
+                                ],
+                                created: new Date("2021-12-03T00:00:30.000Z"),
+                                hidden: false,
+                                name: "Apple",
+                                ownerId: admin._id,
+                                tags: ["healthy", "cheap"],
+                            }),
+                        ])];
+                case 2:
+                    _b = __read.apply(void 0, [_c.sent(), 2]), spinach = _b[0], apple = _b[1];
+                    app = (0, tests_1.getBaseServer)();
+                    (0, auth_1.setupAuth)(app, tests_1.UserModel);
+                    (0, auth_1.addAuthRoutes)(app, tests_1.UserModel);
+                    app.use("/food", (0, api_1.modelRouter)(tests_1.FoodModel, {
+                        allowAnonymous: true,
+                        permissions: {
+                            create: [permissions_1.Permissions.IsAdmin],
+                            delete: [permissions_1.Permissions.IsAdmin],
+                            list: [permissions_1.Permissions.IsAdmin],
+                            read: [permissions_1.Permissions.IsAdmin],
+                            update: [permissions_1.Permissions.IsAdmin],
+                        },
+                        queryFields: ["hidden", "calories", "created", "source.name"],
+                        sort: { created: "descending" },
+                    }));
+                    _server = (0, supertest_1.default)(app);
+                    return [4 /*yield*/, (0, tests_1.authAsUser)(app, "admin")];
+                case 3:
+                    agent = _c.sent();
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("add array sub-schema item", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var res;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, agent
+                        .post("/food/".concat(apple._id, "/categories"))
+                        .send({ name: "Good Seller", show: false })
+                        .expect(400)];
+                case 1:
+                    res = _a.sent();
+                    (0, bun_test_1.expect)(res.body.title).toBe("Malformed body, array operations should have a single, top level key, got: name,show");
+                    return [4 /*yield*/, agent
+                            .post("/food/".concat(apple._id, "/categories"))
+                            .send({ categories: { name: "Good Seller", show: false } })
+                            .expect(200)];
+                case 2:
+                    res = _a.sent();
+                    (0, bun_test_1.expect)(res.body.data.categories).toHaveLength(3);
+                    (0, bun_test_1.expect)(res.body.data.categories[2].name).toBe("Good Seller");
+                    return [4 /*yield*/, agent
+                            .post("/food/".concat(spinach._id, "/categories"))
+                            .send({ categories: { name: "Good Seller", show: false } })
+                            .expect(200)];
+                case 3:
+                    res = _a.sent();
+                    (0, bun_test_1.expect)(res.body.data.categories).toHaveLength(1);
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("update array sub-schema item", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var res;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, agent
+                        .patch("/food/".concat(apple._id, "/categories/xyz"))
+                        .send({ categories: { name: "Good Seller", show: false } })
+                        .expect(404)];
+                case 1:
+                    res = _a.sent();
+                    (0, bun_test_1.expect)(res.body.title).toBe("Could not find categories/xyz");
+                    return [4 /*yield*/, agent
+                            .patch("/food/".concat(apple._id, "/categories/").concat(apple.categories[1]._id))
+                            .send({ categories: { name: "Good Seller", show: false } })
+                            .expect(200)];
+                case 2:
+                    res = _a.sent();
+                    (0, bun_test_1.expect)(res.body.data.categories).toHaveLength(2);
+                    (0, bun_test_1.expect)(res.body.data.categories[1].name).toBe("Good Seller");
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("delete array sub-schema item", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var res;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, agent.delete("/food/".concat(apple._id, "/categories/xyz")).expect(404)];
+                case 1:
+                    res = _a.sent();
+                    (0, bun_test_1.expect)(res.body.title).toBe("Could not find categories/xyz");
+                    return [4 /*yield*/, agent
+                            .delete("/food/".concat(apple._id, "/categories/").concat(apple.categories[0]._id))
+                            .expect(200)];
+                case 2:
+                    res = _a.sent();
+                    (0, bun_test_1.expect)(res.body.data.categories).toHaveLength(1);
+                    (0, bun_test_1.expect)(res.body.data.categories[0].name).toBe("Popular");
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("add array item", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var res;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, agent.post("/food/".concat(apple._id, "/tags")).send({ tags: "popular" }).expect(200)];
+                case 1:
+                    res = _a.sent();
+                    (0, bun_test_1.expect)(res.body.data.tags).toHaveLength(3);
+                    (0, bun_test_1.expect)(res.body.data.tags).toEqual(["healthy", "cheap", "popular"]);
+                    return [4 /*yield*/, agent.post("/food/".concat(spinach._id, "/tags")).send({ tags: "popular" }).expect(200)];
+                case 2:
+                    res = _a.sent();
+                    (0, bun_test_1.expect)(res.body.data.tags).toEqual(["popular"]);
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("update array item", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var res;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, agent
+                        .patch("/food/".concat(apple._id, "/tags/xyz"))
+                        .send({ tags: "unhealthy" })
+                        .expect(404)];
+                case 1:
+                    res = _a.sent();
+                    (0, bun_test_1.expect)(res.body.title).toBe("Could not find tags/xyz");
+                    return [4 /*yield*/, agent
+                            .patch("/food/".concat(apple._id, "/tags/healthy"))
+                            .send({ tags: "unhealthy" })
+                            .expect(200)];
+                case 2:
+                    res = _a.sent();
+                    (0, bun_test_1.expect)(res.body.data.tags).toEqual(["unhealthy", "cheap"]);
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("delete array item", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var res;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, agent.delete("/food/".concat(apple._id, "/tags/xyz")).expect(404)];
+                case 1:
+                    res = _a.sent();
+                    (0, bun_test_1.expect)(res.body.title).toBe("Could not find tags/xyz");
+                    return [4 /*yield*/, agent.delete("/food/".concat(apple._id, "/tags/healthy")).expect(200)];
+                case 2:
+                    res = _a.sent();
+                    (0, bun_test_1.expect)(res.body.data.tags).toEqual(["cheap"]);
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("updates timestamps on array subdocuments", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var foodWithTimestamps, firstCategoryId, secondCategoryId, res, updatedCategory, unchangedCategory;
+        var _a, _b, _c, _d, _e, _f;
+        return __generator(this, function (_g) {
+            switch (_g.label) {
+                case 0: return [4 /*yield*/, tests_1.FoodModel.create({
+                        calories: 100,
+                        categories: [
+                            {
+                                name: "Category 1",
+                                show: true,
+                                updated: new Date("2024-01-01T00:00:00.000Z"),
+                            },
+                            {
+                                name: "Category 2",
+                                show: true,
+                                updated: new Date("2024-01-01T00:00:00.000Z"),
+                            },
+                        ],
+                        created: new Date(),
+                        name: "Food with Timestamps",
+                        ownerId: admin._id,
+                    })];
+                case 1:
+                    foodWithTimestamps = _g.sent();
+                    firstCategoryId = (_c = (_b = (_a = foodWithTimestamps.categories) === null || _a === void 0 ? void 0 : _a[0]) === null || _b === void 0 ? void 0 : _b._id) === null || _c === void 0 ? void 0 : _c.toString();
+                    secondCategoryId = (_f = (_e = (_d = foodWithTimestamps.categories) === null || _d === void 0 ? void 0 : _d[1]) === null || _e === void 0 ? void 0 : _e._id) === null || _f === void 0 ? void 0 : _f.toString();
+                    if (!firstCategoryId || !secondCategoryId) {
+                        throw new Error("Failed to create food with categories");
+                    }
+                    // Wait a moment to ensure timestamp difference
+                    return [4 /*yield*/, new Promise(function (resolve) { return setTimeout(resolve, 100); })];
+                case 2:
+                    // Wait a moment to ensure timestamp difference
+                    _g.sent();
+                    return [4 /*yield*/, agent
+                            .patch("/food/".concat(foodWithTimestamps._id, "/categories/").concat(firstCategoryId))
+                            .send({ categories: { name: "Updated Category" } })
+                            .expect(200)];
+                case 3:
+                    res = _g.sent();
+                    updatedCategory = res.body.data.categories.find(function (c) { return c._id === firstCategoryId; });
+                    unchangedCategory = res.body.data.categories.find(function (c) { return c._id === secondCategoryId; });
+                    if (!updatedCategory || !unchangedCategory) {
+                        throw new Error("Failed to find categories in response");
+                    }
+                    (0, bun_test_1.expect)(updatedCategory.updated).not.toBe(updatedCategory.created);
+                    (0, bun_test_1.expect)(unchangedCategory.updated).toBe(unchangedCategory.created);
+                    (0, bun_test_1.expect)(updatedCategory.name).toBe("Updated Category");
+                    // Unchanged.
+                    (0, bun_test_1.expect)(updatedCategory.show).toBe(true);
+                    (0, bun_test_1.expect)(unchangedCategory.show).toBe(true);
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("array operations call postUpdate with different copy of document", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var postUpdateDoc, postUpdatePrevDoc, postUpdateCalled, categoryId, updatedCategory, prevCategory, remainingCategories, prevCategories;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0:
+                    postUpdateCalled = false;
+                    app = (0, tests_1.getBaseServer)();
+                    (0, auth_1.setupAuth)(app, tests_1.UserModel);
+                    (0, auth_1.addAuthRoutes)(app, tests_1.UserModel);
+                    app.use("/food", (0, api_1.modelRouter)(tests_1.FoodModel, {
+                        allowAnonymous: true,
+                        permissions: {
+                            create: [permissions_1.Permissions.IsAdmin],
+                            delete: [permissions_1.Permissions.IsAdmin],
+                            list: [permissions_1.Permissions.IsAdmin],
+                            read: [permissions_1.Permissions.IsAdmin],
+                            update: [permissions_1.Permissions.IsAdmin],
+                        },
+                        postUpdate: function (doc, _cleanedBody, _request, prevValue) { return __awaiter(void 0, void 0, void 0, function () {
+                            return __generator(this, function (_a) {
+                                postUpdateDoc = doc;
+                                postUpdatePrevDoc = prevValue;
+                                postUpdateCalled = true;
+                                return [2 /*return*/];
+                            });
+                        }); },
+                    }));
+                    _server = (0, supertest_1.default)(app);
+                    return [4 /*yield*/, (0, tests_1.authAsUser)(app, "admin")];
+                case 1:
+                    agent = _a.sent();
+                    // Test POST operation (add to array)
+                    return [4 /*yield*/, agent
+                            .post("/food/".concat(apple._id, "/categories"))
+                            .send({ categories: { name: "New Category", show: true } })
+                            .expect(200)];
+                case 2:
+                    // Test POST operation (add to array)
+                    _a.sent();
+                    (0, bun_test_1.expect)(postUpdateCalled).toBe(true);
+                    (0, bun_test_1.expect)(postUpdateDoc).toBeDefined();
+                    (0, bun_test_1.expect)(postUpdatePrevDoc).toBeDefined();
+                    // Verify they are different object references
+                    (0, bun_test_1.expect)(postUpdateDoc).not.toBe(postUpdatePrevDoc);
+                    // Verify the content is different (new category added)
+                    (0, bun_test_1.expect)(postUpdateDoc.categories).toHaveLength(3);
+                    (0, bun_test_1.expect)(postUpdatePrevDoc.categories).toHaveLength(2);
+                    // Reset for next test
+                    postUpdateCalled = false;
+                    postUpdateDoc = undefined;
+                    postUpdatePrevDoc = undefined;
+                    categoryId = apple.categories[0]._id;
+                    if (!categoryId) {
+                        throw new Error("Category ID is undefined");
+                    }
+                    return [4 /*yield*/, agent
+                            .patch("/food/".concat(apple._id, "/categories/").concat(categoryId))
+                            .send({ categories: { name: "Updated Category", show: false } })
+                            .expect(200)];
+                case 3:
+                    _a.sent();
+                    (0, bun_test_1.expect)(postUpdateCalled).toBe(true);
+                    (0, bun_test_1.expect)(postUpdateDoc).toBeDefined();
+                    (0, bun_test_1.expect)(postUpdatePrevDoc).toBeDefined();
+                    // Verify they are different object references
+                    (0, bun_test_1.expect)(postUpdateDoc).not.toBe(postUpdatePrevDoc);
+                    updatedCategory = postUpdateDoc.categories.find(function (c) { return c._id.toString() === categoryId.toString(); });
+                    prevCategory = postUpdatePrevDoc.categories.find(function (c) { return c._id.toString() === categoryId.toString(); });
+                    (0, bun_test_1.expect)(updatedCategory.name).toBe("Updated Category");
+                    (0, bun_test_1.expect)(prevCategory.name).toBe("Fruit");
+                    // Reset for next test
+                    postUpdateCalled = false;
+                    postUpdateDoc = undefined;
+                    postUpdatePrevDoc = undefined;
+                    // Test DELETE operation (remove from array)
+                    return [4 /*yield*/, agent.delete("/food/".concat(apple._id, "/categories/").concat(categoryId)).expect(200)];
+                case 4:
+                    // Test DELETE operation (remove from array)
+                    _a.sent();
+                    (0, bun_test_1.expect)(postUpdateCalled).toBe(true);
+                    (0, bun_test_1.expect)(postUpdateDoc).toBeDefined();
+                    (0, bun_test_1.expect)(postUpdatePrevDoc).toBeDefined();
+                    // Verify they are different object references
+                    (0, bun_test_1.expect)(postUpdateDoc).not.toBe(postUpdatePrevDoc);
+                    remainingCategories = postUpdateDoc.categories.filter(function (c) { return c._id.toString() === categoryId.toString(); });
+                    prevCategories = postUpdatePrevDoc.categories.filter(function (c) { return c._id.toString() === categoryId.toString(); });
+                    (0, bun_test_1.expect)(remainingCategories).toHaveLength(0);
+                    (0, bun_test_1.expect)(prevCategories).toHaveLength(1);
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("array operations with string arrays call postUpdate with different copy", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var postUpdateDoc, postUpdatePrevDoc, postUpdateCalled;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0:
+                    postUpdateCalled = false;
+                    app = (0, tests_1.getBaseServer)();
+                    (0, auth_1.setupAuth)(app, tests_1.UserModel);
+                    (0, auth_1.addAuthRoutes)(app, tests_1.UserModel);
+                    app.use("/food", (0, api_1.modelRouter)(tests_1.FoodModel, {
+                        allowAnonymous: true,
+                        permissions: {
+                            create: [permissions_1.Permissions.IsAdmin],
+                            delete: [permissions_1.Permissions.IsAdmin],
+                            list: [permissions_1.Permissions.IsAdmin],
+                            read: [permissions_1.Permissions.IsAdmin],
+                            update: [permissions_1.Permissions.IsAdmin],
+                        },
+                        postUpdate: function (doc, _cleanedBody, _request, prevValue) { return __awaiter(void 0, void 0, void 0, function () {
+                            return __generator(this, function (_a) {
+                                postUpdateDoc = doc;
+                                postUpdatePrevDoc = prevValue;
+                                postUpdateCalled = true;
+                                return [2 /*return*/];
+                            });
+                        }); },
+                    }));
+                    _server = (0, supertest_1.default)(app);
+                    return [4 /*yield*/, (0, tests_1.authAsUser)(app, "admin")];
+                case 1:
+                    agent = _a.sent();
+                    // Test POST operation with string array (add tag)
+                    return [4 /*yield*/, agent.post("/food/".concat(apple._id, "/tags")).send({ tags: "organic" }).expect(200)];
+                case 2:
+                    // Test POST operation with string array (add tag)
+                    _a.sent();
+                    (0, bun_test_1.expect)(postUpdateCalled).toBe(true);
+                    (0, bun_test_1.expect)(postUpdateDoc).toBeDefined();
+                    (0, bun_test_1.expect)(postUpdatePrevDoc).toBeDefined();
+                    // Verify they are different object references
+                    (0, bun_test_1.expect)(postUpdateDoc).not.toBe(postUpdatePrevDoc);
+                    // Verify the content is different (new tag added)
+                    (0, bun_test_1.expect)(postUpdateDoc.tags).toHaveLength(3);
+                    (0, bun_test_1.expect)(postUpdatePrevDoc.tags).toHaveLength(2);
+                    (0, bun_test_1.expect)(postUpdateDoc.tags).toContain("organic");
+                    (0, bun_test_1.expect)(postUpdatePrevDoc.tags).not.toContain("organic");
+                    // Reset for next test
+                    postUpdateCalled = false;
+                    postUpdateDoc = undefined;
+                    postUpdatePrevDoc = undefined;
+                    // Test PATCH operation with string array (update tag)
+                    return [4 /*yield*/, agent.patch("/food/".concat(apple._id, "/tags/healthy")).send({ tags: "super-healthy" }).expect(200)];
+                case 3:
+                    // Test PATCH operation with string array (update tag)
+                    _a.sent();
+                    (0, bun_test_1.expect)(postUpdateCalled).toBe(true);
+                    (0, bun_test_1.expect)(postUpdateDoc).not.toBe(postUpdatePrevDoc);
+                    // Verify the content is different (tag updated)
+                    (0, bun_test_1.expect)(postUpdateDoc.tags).toContain("super-healthy");
+                    (0, bun_test_1.expect)(postUpdatePrevDoc.tags).toContain("healthy");
+                    (0, bun_test_1.expect)(postUpdateDoc.tags).not.toContain("healthy");
+                    (0, bun_test_1.expect)(postUpdatePrevDoc.tags).not.toContain("super-healthy");
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+});
+(0, bun_test_1.describe)("array operation errors", function () {
+    var _server;
+    var app;
+    var admin;
+    var apple;
+    var agent;
+    (0, bun_test_1.beforeEach)(function () { return __awaiter(void 0, void 0, void 0, function () {
+        var _a;
+        return __generator(this, function (_b) {
+            switch (_b.label) {
+                case 0: return [4 /*yield*/, (0, tests_1.setupDb)()];
+                case 1:
+                    _a = __read.apply(void 0, [_b.sent(), 1]), admin = _a[0];
+                    return [4 /*yield*/, tests_1.FoodModel.create({
+                            calories: 100,
+                            categories: [
+                                { name: "Fruit", show: true },
+                                { name: "Popular", show: false },
+                            ],
+                            created: new Date("2021-12-03T00:00:30.000Z"),
+                            hidden: false,
+                            name: "Apple",
+                            ownerId: admin._id,
+                            tags: ["healthy", "cheap"],
+                        })];
+                case 2:
+                    apple = _b.sent();
+                    app = (0, tests_1.getBaseServer)();
+                    (0, auth_1.setupAuth)(app, tests_1.UserModel);
+                    (0, auth_1.addAuthRoutes)(app, tests_1.UserModel);
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("array operation preUpdate returning undefined throws error", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var res;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0:
+                    app.use("/food", (0, api_1.modelRouter)(tests_1.FoodModel, {
+                        allowAnonymous: true,
+                        permissions: {
+                            create: [permissions_1.Permissions.IsAdmin],
+                            delete: [permissions_1.Permissions.IsAdmin],
+                            list: [permissions_1.Permissions.IsAdmin],
+                            read: [permissions_1.Permissions.IsAdmin],
+                            update: [permissions_1.Permissions.IsAdmin],
+                        },
+                        preUpdate: function () { return undefined; },
+                    }));
+                    _server = (0, supertest_1.default)(app);
+                    return [4 /*yield*/, (0, tests_1.authAsUser)(app, "admin")];
+                case 1:
+                    agent = _a.sent();
+                    return [4 /*yield*/, agent.post("/food/".concat(apple._id, "/tags")).send({ tags: "organic" }).expect(403)];
+                case 2:
+                    res = _a.sent();
+                    (0, bun_test_1.expect)(res.body.title).toBe("Update not allowed");
+                    (0, bun_test_1.expect)(res.body.detail).toBe("A body must be returned from preUpdate");
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("array operation preUpdate returning null throws error", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var res;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0:
+                    app.use("/food", (0, api_1.modelRouter)(tests_1.FoodModel, {
+                        allowAnonymous: true,
+                        permissions: {
+                            create: [permissions_1.Permissions.IsAdmin],
+                            delete: [permissions_1.Permissions.IsAdmin],
+                            list: [permissions_1.Permissions.IsAdmin],
+                            read: [permissions_1.Permissions.IsAdmin],
+                            update: [permissions_1.Permissions.IsAdmin],
+                        },
+                        preUpdate: function () { return null; },
+                    }));
+                    _server = (0, supertest_1.default)(app);
+                    return [4 /*yield*/, (0, tests_1.authAsUser)(app, "admin")];
+                case 1:
+                    agent = _a.sent();
+                    return [4 /*yield*/, agent.post("/food/".concat(apple._id, "/tags")).send({ tags: "organic" }).expect(403)];
+                case 2:
+                    res = _a.sent();
+                    (0, bun_test_1.expect)(res.body.title).toBe("Update not allowed");
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("array operation preUpdate error is handled", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var res;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0:
+                    app.use("/food", (0, api_1.modelRouter)(tests_1.FoodModel, {
+                        allowAnonymous: true,
+                        permissions: {
+                            create: [permissions_1.Permissions.IsAdmin],
+                            delete: [permissions_1.Permissions.IsAdmin],
+                            list: [permissions_1.Permissions.IsAdmin],
+                            read: [permissions_1.Permissions.IsAdmin],
+                            update: [permissions_1.Permissions.IsAdmin],
+                        },
+                        preUpdate: function () {
+                            throw new Error("preUpdate array failed");
+                        },
+                    }));
+                    _server = (0, supertest_1.default)(app);
+                    return [4 /*yield*/, (0, tests_1.authAsUser)(app, "admin")];
+                case 1:
+                    agent = _a.sent();
+                    return [4 /*yield*/, agent.post("/food/".concat(apple._id, "/tags")).send({ tags: "organic" }).expect(400)];
+                case 2:
+                    res = _a.sent();
+                    (0, bun_test_1.expect)(res.body.title).toContain("preUpdate hook error");
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("array operation postUpdate error is handled", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var res;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0:
+                    app.use("/food", (0, api_1.modelRouter)(tests_1.FoodModel, {
+                        allowAnonymous: true,
+                        permissions: {
+                            create: [permissions_1.Permissions.IsAdmin],
+                            delete: [permissions_1.Permissions.IsAdmin],
+                            list: [permissions_1.Permissions.IsAdmin],
+                            read: [permissions_1.Permissions.IsAdmin],
+                            update: [permissions_1.Permissions.IsAdmin],
+                        },
+                        postUpdate: function () {
+                            throw new Error("postUpdate array failed");
+                        },
+                    }));
+                    _server = (0, supertest_1.default)(app);
+                    return [4 /*yield*/, (0, tests_1.authAsUser)(app, "admin")];
+                case 1:
+                    agent = _a.sent();
+                    return [4 /*yield*/, agent.post("/food/".concat(apple._id, "/tags")).send({ tags: "organic" }).expect(400)];
+                case 2:
+                    res = _a.sent();
+                    (0, bun_test_1.expect)(res.body.title).toContain("PATCH Post Update error");
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("array operation denied without update permission", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var res;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0:
+                    app.use("/food", (0, api_1.modelRouter)(tests_1.FoodModel, {
+                        allowAnonymous: true,
+                        permissions: {
+                            create: [permissions_1.Permissions.IsAdmin],
+                            delete: [permissions_1.Permissions.IsAdmin],
+                            list: [permissions_1.Permissions.IsAny],
+                            read: [permissions_1.Permissions.IsAny],
+                            update: [permissions_1.Permissions.IsAdmin],
+                        },
+                    }));
+                    _server = (0, supertest_1.default)(app);
+                    return [4 /*yield*/, (0, tests_1.authAsUser)(app, "notAdmin")];
+                case 1:
+                    agent = _a.sent();
+                    return [4 /*yield*/, agent.post("/food/".concat(apple._id, "/tags")).send({ tags: "organic" }).expect(405)];
+                case 2:
+                    res = _a.sent();
+                    (0, bun_test_1.expect)(res.body.title).toContain("Access to PATCH");
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("array operation on non-existent document returns 404", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var fakeId, res;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0:
+                    app.use("/food", (0, api_1.modelRouter)(tests_1.FoodModel, {
+                        allowAnonymous: true,
+                        permissions: {
+                            create: [permissions_1.Permissions.IsAdmin],
+                            delete: [permissions_1.Permissions.IsAdmin],
+                            list: [permissions_1.Permissions.IsAdmin],
+                            read: [permissions_1.Permissions.IsAdmin],
+                            update: [permissions_1.Permissions.IsAdmin],
+                        },
+                    }));
+                    _server = (0, supertest_1.default)(app);
+                    return [4 /*yield*/, (0, tests_1.authAsUser)(app, "admin")];
+                case 1:
+                    agent = _a.sent();
+                    fakeId = "000000000000000000000000";
+                    return [4 /*yield*/, agent.post("/food/".concat(fakeId, "/tags")).send({ tags: "organic" }).expect(404)];
+                case 2:
+                    res = _a.sent();
+                    (0, bun_test_1.expect)(res.body.title).toContain("Could not find document to PATCH");
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("array operation denied when user cannot update specific doc", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var res;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0:
+                    // Create food owned by admin, then try to update as notAdmin
+                    app.use("/food", (0, api_1.modelRouter)(tests_1.FoodModel, {
+                        allowAnonymous: true,
+                        permissions: {
+                            create: [permissions_1.Permissions.IsAuthenticated],
+                            delete: [permissions_1.Permissions.IsAuthenticated],
+                            list: [permissions_1.Permissions.IsAuthenticated],
+                            read: [permissions_1.Permissions.IsAuthenticated],
+                            update: [permissions_1.Permissions.IsOwner],
+                        },
+                    }));
+                    _server = (0, supertest_1.default)(app);
+                    return [4 /*yield*/, (0, tests_1.authAsUser)(app, "notAdmin")];
+                case 1:
+                    // Login as notAdmin and try to update admin's food (apple)
+                    agent = _a.sent();
+                    return [4 /*yield*/, agent.post("/food/".concat(apple._id, "/tags")).send({ tags: "organic" }).expect(403)];
+                case 2:
+                    res = _a.sent();
+                    (0, bun_test_1.expect)(res.body.title).toContain("Patch not allowed");
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("array operation transform error is handled", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var res;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0:
+                    app.use("/food", (0, api_1.modelRouter)(tests_1.FoodModel, {
+                        allowAnonymous: true,
+                        permissions: {
+                            create: [permissions_1.Permissions.IsAdmin],
+                            delete: [permissions_1.Permissions.IsAdmin],
+                            list: [permissions_1.Permissions.IsAdmin],
+                            read: [permissions_1.Permissions.IsAdmin],
+                            update: [permissions_1.Permissions.IsAdmin],
+                        },
+                        transformer: (0, transformers_1.AdminOwnerTransformer)({
+                            adminWriteFields: ["name"],
+                        }),
+                    }));
+                    _server = (0, supertest_1.default)(app);
+                    return [4 /*yield*/, (0, tests_1.authAsUser)(app, "admin")];
+                case 1:
+                    agent = _a.sent();
+                    return [4 /*yield*/, agent.post("/food/".concat(apple._id, "/tags")).send({ tags: "organic" }).expect(403)];
+                case 2:
+                    res = _a.sent();
+                    (0, bun_test_1.expect)(res.body.title).toContain("cannot write fields");
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+});
+(0, bun_test_1.describe)("array operation with undefined preUpdate return", function () {
+    var _server;
+    var app;
+    var admin;
+    var apple;
+    var agent;
+    (0, bun_test_1.beforeEach)(function () { return __awaiter(void 0, void 0, void 0, function () {
+        var _a;
+        return __generator(this, function (_b) {
+            switch (_b.label) {
+                case 0: return [4 /*yield*/, (0, tests_1.setupDb)()];
+                case 1:
+                    _a = __read.apply(void 0, [_b.sent(), 1]), admin = _a[0];
+                    return [4 /*yield*/, tests_1.FoodModel.create({
+                            calories: 100,
+                            categories: [
+                                { name: "Fruit", show: true },
+                                { name: "Popular", show: false },
+                            ],
+                            created: new Date("2021-12-03T00:00:30.000Z"),
+                            hidden: false,
+                            name: "Apple",
+                            ownerId: admin._id,
+                            tags: ["healthy", "cheap"],
+                        })];
+                case 2:
+                    apple = _b.sent();
+                    app = (0, tests_1.getBaseServer)();
+                    (0, auth_1.setupAuth)(app, tests_1.UserModel);
+                    (0, auth_1.addAuthRoutes)(app, tests_1.UserModel);
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("array operation preUpdate returning undefined for array POST throws error", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var res;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0:
+                    app.use("/food", (0, api_1.modelRouter)(tests_1.FoodModel, {
+                        allowAnonymous: true,
+                        permissions: {
+                            create: [permissions_1.Permissions.IsAdmin],
+                            delete: [permissions_1.Permissions.IsAdmin],
+                            list: [permissions_1.Permissions.IsAdmin],
+                            read: [permissions_1.Permissions.IsAdmin],
+                            update: [permissions_1.Permissions.IsAdmin],
+                        },
+                        preUpdate: function () { return undefined; },
+                    }));
+                    _server = (0, supertest_1.default)(app);
+                    return [4 /*yield*/, (0, tests_1.authAsUser)(app, "admin")];
+                case 1:
+                    agent = _a.sent();
+                    return [4 /*yield*/, agent.post("/food/".concat(apple._id, "/tags")).send({ tags: "organic" }).expect(403)];
+                case 2:
+                    res = _a.sent();
+                    (0, bun_test_1.expect)(res.body.title).toBe("Update not allowed");
+                    (0, bun_test_1.expect)(res.body.detail).toBe("A body must be returned from preUpdate");
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("array operation preUpdate returning null for array PATCH throws error", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var res;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0:
+                    app.use("/food", (0, api_1.modelRouter)(tests_1.FoodModel, {
+                        allowAnonymous: true,
+                        permissions: {
+                            create: [permissions_1.Permissions.IsAdmin],
+                            delete: [permissions_1.Permissions.IsAdmin],
+                            list: [permissions_1.Permissions.IsAdmin],
+                            read: [permissions_1.Permissions.IsAdmin],
+                            update: [permissions_1.Permissions.IsAdmin],
+                        },
+                        preUpdate: function () { return null; },
+                    }));
+                    _server = (0, supertest_1.default)(app);
+                    return [4 /*yield*/, (0, tests_1.authAsUser)(app, "admin")];
+                case 1:
+                    agent = _a.sent();
+                    return [4 /*yield*/, agent
+                            .patch("/food/".concat(apple._id, "/tags/healthy"))
+                            .send({ tags: "unhealthy" })
+                            .expect(403)];
+                case 2:
+                    res = _a.sent();
+                    (0, bun_test_1.expect)(res.body.title).toBe("Update not allowed");
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("array operation preUpdate error for array DELETE is handled", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var res;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0:
+                    app.use("/food", (0, api_1.modelRouter)(tests_1.FoodModel, {
+                        allowAnonymous: true,
+                        permissions: {
+                            create: [permissions_1.Permissions.IsAdmin],
+                            delete: [permissions_1.Permissions.IsAdmin],
+                            list: [permissions_1.Permissions.IsAdmin],
+                            read: [permissions_1.Permissions.IsAdmin],
+                            update: [permissions_1.Permissions.IsAdmin],
+                        },
+                        preUpdate: function () {
+                            throw new Error("preUpdate error during delete");
+                        },
+                    }));
+                    _server = (0, supertest_1.default)(app);
+                    return [4 /*yield*/, (0, tests_1.authAsUser)(app, "admin")];
+                case 1:
+                    agent = _a.sent();
+                    return [4 /*yield*/, agent.delete("/food/".concat(apple._id, "/tags/healthy")).expect(400)];
+                case 2:
+                    res = _a.sent();
+                    (0, bun_test_1.expect)(res.body.title).toContain("preUpdate hook error");
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+});