@terreno/api 0.13.2 → 0.14.0

package/dist/config.test.js

@@ -0,0 +1,328 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g = Object.create((typeof Iterator === "function" ? Iterator : Object).prototype);
+    return g.next = verb(0), g["throw"] = verb(1), g["return"] = verb(2), typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (g && (g = 0, op[0] && (_ = 0)), _) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+var __values = (this && this.__values) || function(o) {
+    var s = typeof Symbol === "function" && Symbol.iterator, m = s && o[s], i = 0;
+    if (m) return m.call(o);
+    if (o && typeof o.length === "number") return {
+        next: function () {
+            if (o && i >= o.length) o = void 0;
+            return { value: o && o[i++], done: !o };
+        }
+    };
+    throw new TypeError(s ? "Object is not iterable." : "Symbol.iterator is not defined.");
+};
+var __read = (this && this.__read) || function (o, n) {
+    var m = typeof Symbol === "function" && o[Symbol.iterator];
+    if (!m) return o;
+    var i = m.call(o), r, ar = [], e;
+    try {
+        while ((n === void 0 || n-- > 0) && !(r = i.next()).done) ar.push(r.value);
+    }
+    catch (error) { e = { error: error }; }
+    finally {
+        try {
+            if (r && !r.done && (m = i["return"])) m.call(i);
+        }
+        finally { if (e) throw e.error; }
+    }
+    return ar;
+};
+var __spreadArray = (this && this.__spreadArray) || function (to, from, pack) {
+    if (pack || arguments.length === 2) for (var i = 0, l = from.length, ar; i < l; i++) {
+        if (ar || !(i in from)) {
+            if (!ar) ar = Array.prototype.slice.call(from, 0, i);
+            ar[i] = from[i];
+        }
+    }
+    return to.concat(ar || Array.prototype.slice.call(from));
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+var bun_test_1 = require("bun:test");
+var config_1 = require("./config");
+var KEYS = [
+    "TERRENO_CFG_STRING",
+    "TERRENO_CFG_DEFAULTED",
+    "TERRENO_CFG_NUM",
+    "TERRENO_CFG_BOOL",
+    "TERRENO_CFG_JSON",
+    "TERRENO_CFG_UNDEFAULTED",
+    "TERRENO_CFG_UNREGISTERED",
+];
+var resetEnv = function () {
+    var e_1, _a;
+    try {
+        for (var KEYS_1 = __values(KEYS), KEYS_1_1 = KEYS_1.next(); !KEYS_1_1.done; KEYS_1_1 = KEYS_1.next()) {
+            var key = KEYS_1_1.value;
+            Reflect.deleteProperty(process.env, key);
+        }
+    }
+    catch (e_1_1) { e_1 = { error: e_1_1 }; }
+    finally {
+        try {
+            if (KEYS_1_1 && !KEYS_1_1.done && (_a = KEYS_1.return)) _a.call(KEYS_1);
+        }
+        finally { if (e_1) throw e_1.error; }
+    }
+};
+(0, bun_test_1.describe)("Config", function () {
+    (0, bun_test_1.beforeEach)(function () {
+        config_1.Config.clearRegistryForTesting();
+        config_1.Config.clearOverrides();
+        config_1.Config.setCachedEnv(null);
+        config_1.Config.setEnvLoader(null);
+        resetEnv();
+        config_1.Config.register("TERRENO_CFG_STRING");
+        config_1.Config.register("TERRENO_CFG_DEFAULTED", { default: "fallback" });
+        config_1.Config.register("TERRENO_CFG_NUM", { default: "1000" });
+        config_1.Config.register("TERRENO_CFG_BOOL", { default: "false" });
+        config_1.Config.register("TERRENO_CFG_JSON", { default: "{}" });
+        config_1.Config.register("TERRENO_CFG_UNDEFAULTED");
+    });
+    (0, bun_test_1.afterEach)(function () {
+        resetEnv();
+        config_1.Config.clearRegistryForTesting();
+        config_1.Config.clearOverrides();
+        config_1.Config.setCachedEnv(null);
+        config_1.Config.setEnvLoader(null);
+    });
+    (0, bun_test_1.describe)("resolution order", function () {
+        (0, bun_test_1.it)("returns the registered default when nothing is set", function () {
+            (0, bun_test_1.expect)(config_1.Config.get("TERRENO_CFG_DEFAULTED")).toBe("fallback");
+        });
+        (0, bun_test_1.it)("returns process.env when set and no cache/override is present", function () {
+            process.env.TERRENO_CFG_STRING = "fromEnv";
+            (0, bun_test_1.expect)(config_1.Config.get("TERRENO_CFG_STRING")).toBe("fromEnv");
+        });
+        (0, bun_test_1.it)("cache wins over process.env", function () {
+            process.env.TERRENO_CFG_STRING = "fromEnv";
+            config_1.Config.setCachedEnv({ TERRENO_CFG_STRING: "fromCache" });
+            (0, bun_test_1.expect)(config_1.Config.get("TERRENO_CFG_STRING")).toBe("fromCache");
+        });
+        (0, bun_test_1.it)("override wins over cache and process.env", function () {
+            process.env.TERRENO_CFG_STRING = "fromEnv";
+            config_1.Config.setCachedEnv({ TERRENO_CFG_STRING: "fromCache" });
+            config_1.Config.setOverride("TERRENO_CFG_STRING", "fromOverride");
+            (0, bun_test_1.expect)(config_1.Config.get("TERRENO_CFG_STRING")).toBe("fromOverride");
+        });
+        (0, bun_test_1.it)("falls through empty-string cache values to process.env", function () {
+            process.env.TERRENO_CFG_STRING = "fromEnv";
+            config_1.Config.setCachedEnv({ TERRENO_CFG_STRING: "" });
+            (0, bun_test_1.expect)(config_1.Config.get("TERRENO_CFG_STRING")).toBe("fromEnv");
+        });
+        (0, bun_test_1.it)("falls through empty-string process.env to default", function () {
+            process.env.TERRENO_CFG_DEFAULTED = "";
+            (0, bun_test_1.expect)(config_1.Config.get("TERRENO_CFG_DEFAULTED")).toBe("fallback");
+        });
+        (0, bun_test_1.it)("returns undefined for an unregistered key with nothing set", function () {
+            (0, bun_test_1.expect)(config_1.Config.get("TERRENO_CFG_UNREGISTERED")).toBeUndefined();
+        });
+        (0, bun_test_1.it)("returns process.env for an unregistered key when set", function () {
+            process.env.TERRENO_CFG_UNREGISTERED = "value";
+            (0, bun_test_1.expect)(config_1.Config.get("TERRENO_CFG_UNREGISTERED")).toBe("value");
+        });
+        (0, bun_test_1.it)("setOverride(key, undefined) is treated as 'force unset'", function () {
+            process.env.TERRENO_CFG_STRING = "fromEnv";
+            config_1.Config.setOverride("TERRENO_CFG_STRING", undefined);
+            (0, bun_test_1.expect)(config_1.Config.get("TERRENO_CFG_STRING")).toBeUndefined();
+        });
+    });
+    (0, bun_test_1.describe)("getNumber", function () {
+        (0, bun_test_1.it)("parses numeric process.env values", function () {
+            process.env.TERRENO_CFG_NUM = "5000";
+            (0, bun_test_1.expect)(config_1.Config.getNumber("TERRENO_CFG_NUM")).toBe(5000);
+        });
+        (0, bun_test_1.it)("parses the registered default", function () {
+            (0, bun_test_1.expect)(config_1.Config.getNumber("TERRENO_CFG_NUM")).toBe(1000);
+        });
+        (0, bun_test_1.it)("returns undefined when no value is available", function () {
+            (0, bun_test_1.expect)(config_1.Config.getNumber("TERRENO_CFG_UNDEFAULTED")).toBeUndefined();
+        });
+        (0, bun_test_1.it)("throws on non-numeric values", function () {
+            process.env.TERRENO_CFG_NUM = "not-a-number";
+            (0, bun_test_1.expect)(function () { return config_1.Config.getNumber("TERRENO_CFG_NUM"); }).toThrow(/not a valid number/);
+        });
+        (0, bun_test_1.it)("throws on partially-numeric strings like '5000ms'", function () {
+            process.env.TERRENO_CFG_NUM = "5000ms";
+            (0, bun_test_1.expect)(function () { return config_1.Config.getNumber("TERRENO_CFG_NUM"); }).toThrow(/not a valid number/);
+        });
+        (0, bun_test_1.it)("supports floats", function () {
+            process.env.TERRENO_CFG_NUM = "3.14";
+            (0, bun_test_1.expect)(config_1.Config.getNumber("TERRENO_CFG_NUM")).toBe(3.14);
+        });
+    });
+    (0, bun_test_1.describe)("getBoolean", function () {
+        (0, bun_test_1.it)("returns true for 'true'", function () {
+            process.env.TERRENO_CFG_BOOL = "true";
+            (0, bun_test_1.expect)(config_1.Config.getBoolean("TERRENO_CFG_BOOL")).toBe(true);
+        });
+        (0, bun_test_1.it)("returns true for 'TRUE' (case-insensitive)", function () {
+            process.env.TERRENO_CFG_BOOL = "TRUE";
+            (0, bun_test_1.expect)(config_1.Config.getBoolean("TERRENO_CFG_BOOL")).toBe(true);
+        });
+        (0, bun_test_1.it)("returns false for 'false'", function () {
+            process.env.TERRENO_CFG_BOOL = "false";
+            (0, bun_test_1.expect)(config_1.Config.getBoolean("TERRENO_CFG_BOOL")).toBe(false);
+        });
+        (0, bun_test_1.it)("returns false when unset and default is 'false'", function () {
+            (0, bun_test_1.expect)(config_1.Config.getBoolean("TERRENO_CFG_BOOL")).toBe(false);
+        });
+        (0, bun_test_1.it)("returns false for any non-true string", function () {
+            process.env.TERRENO_CFG_BOOL = "yes";
+            (0, bun_test_1.expect)(config_1.Config.getBoolean("TERRENO_CFG_BOOL")).toBe(false);
+        });
+    });
+    (0, bun_test_1.describe)("getJSON", function () {
+        (0, bun_test_1.it)("parses valid JSON", function () {
+            process.env.TERRENO_CFG_JSON = JSON.stringify({ hook: "https://example.com" });
+            (0, bun_test_1.expect)(config_1.Config.getJSON("TERRENO_CFG_JSON")).toEqual({
+                hook: "https://example.com",
+            });
+        });
+        (0, bun_test_1.it)("parses the registered default", function () {
+            (0, bun_test_1.expect)(config_1.Config.getJSON("TERRENO_CFG_JSON")).toEqual({});
+        });
+        (0, bun_test_1.it)("returns undefined when nothing is set and no default exists", function () {
+            (0, bun_test_1.expect)(config_1.Config.getJSON("TERRENO_CFG_UNDEFAULTED")).toBeUndefined();
+        });
+        (0, bun_test_1.it)("throws on malformed JSON instead of silently returning undefined", function () {
+            process.env.TERRENO_CFG_JSON = "{not json";
+            (0, bun_test_1.expect)(function () { return config_1.Config.getJSON("TERRENO_CFG_JSON"); }).toThrow(/not valid JSON/);
+        });
+    });
+    (0, bun_test_1.describe)("registry", function () {
+        (0, bun_test_1.it)("exposes registered keys in sorted order", function () {
+            var keys = config_1.Config.getRegisteredKeys();
+            var sorted = __spreadArray([], __read(keys), false).sort();
+            (0, bun_test_1.expect)(keys).toEqual(sorted);
+        });
+        (0, bun_test_1.it)("isRegistered returns true for known keys", function () {
+            (0, bun_test_1.expect)(config_1.Config.isRegistered("TERRENO_CFG_STRING")).toBe(true);
+        });
+        (0, bun_test_1.it)("isRegistered returns false for unknown keys", function () {
+            (0, bun_test_1.expect)(config_1.Config.isRegistered("NOT_A_REAL_KEY")).toBe(false);
+        });
+        (0, bun_test_1.it)("getDefault returns the registered default", function () {
+            (0, bun_test_1.expect)(config_1.Config.getDefault("TERRENO_CFG_DEFAULTED")).toBe("fallback");
+        });
+        (0, bun_test_1.it)("getDefault returns undefined for keys with no default", function () {
+            (0, bun_test_1.expect)(config_1.Config.getDefault("TERRENO_CFG_STRING")).toBeUndefined();
+        });
+        (0, bun_test_1.it)("getRegistration exposes secret + description metadata", function () {
+            config_1.Config.register("TERRENO_CFG_WITH_META", {
+                description: "A secret thing",
+                secret: true,
+            });
+            var meta = config_1.Config.getRegistration("TERRENO_CFG_WITH_META");
+            (0, bun_test_1.expect)(meta === null || meta === void 0 ? void 0 : meta.secret).toBe(true);
+            (0, bun_test_1.expect)(meta === null || meta === void 0 ? void 0 : meta.description).toBe("A secret thing");
+        });
+        (0, bun_test_1.it)("re-registering the same key throws", function () {
+            (0, bun_test_1.expect)(function () { return config_1.Config.register("TERRENO_CFG_STRING"); }).toThrow(/registered more than once/);
+        });
+        (0, bun_test_1.it)("does not treat Object prototype keys as registered", function () {
+            (0, bun_test_1.expect)(config_1.Config.isRegistered("constructor")).toBe(false);
+            (0, bun_test_1.expect)(config_1.Config.isRegistered("toString")).toBe(false);
+            (0, bun_test_1.expect)(config_1.Config.isRegistered("hasOwnProperty")).toBe(false);
+            // And re-registering one of these names should still succeed.
+            (0, bun_test_1.expect)(function () { return config_1.Config.register("toString", { default: "x" }); }).not.toThrow();
+            (0, bun_test_1.expect)(config_1.Config.get("toString")).toBe("x");
+        });
+    });
+    (0, bun_test_1.describe)("clearOverrides", function () {
+        (0, bun_test_1.it)("removes all overrides", function () {
+            config_1.Config.setOverride("TERRENO_CFG_STRING", "x");
+            config_1.Config.setOverride("TERRENO_CFG_DEFAULTED", "y");
+            config_1.Config.clearOverrides();
+            (0, bun_test_1.expect)(config_1.Config.get("TERRENO_CFG_STRING")).toBeUndefined();
+            (0, bun_test_1.expect)(config_1.Config.get("TERRENO_CFG_DEFAULTED")).toBe("fallback");
+        });
+    });
+    (0, bun_test_1.describe)("refresh", function () {
+        (0, bun_test_1.it)("loads values via the registered env loader", function () { return __awaiter(void 0, void 0, void 0, function () {
+            return __generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0:
+                        config_1.Config.setEnvLoader(function () { return __awaiter(void 0, void 0, void 0, function () { return __generator(this, function (_a) {
+                            return [2 /*return*/, ({ TERRENO_CFG_STRING: "fromLoader" })];
+                        }); }); });
+                        return [4 /*yield*/, config_1.Config.refresh()];
+                    case 1:
+                        _a.sent();
+                        (0, bun_test_1.expect)(config_1.Config.get("TERRENO_CFG_STRING")).toBe("fromLoader");
+                        return [2 /*return*/];
+                }
+            });
+        }); });
+        (0, bun_test_1.it)("clears the cache when no loader is registered", function () { return __awaiter(void 0, void 0, void 0, function () {
+            return __generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0:
+                        config_1.Config.setCachedEnv({ TERRENO_CFG_STRING: "stale" });
+                        config_1.Config.setEnvLoader(null);
+                        return [4 /*yield*/, config_1.Config.refresh()];
+                    case 1:
+                        _a.sent();
+                        (0, bun_test_1.expect)(config_1.Config.get("TERRENO_CFG_STRING")).toBeUndefined();
+                        return [2 /*return*/];
+                }
+            });
+        }); });
+        (0, bun_test_1.it)("updates the cache on each refresh", function () { return __awaiter(void 0, void 0, void 0, function () {
+            var payload;
+            return __generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0:
+                        payload = { TERRENO_CFG_STRING: "first" };
+                        config_1.Config.setEnvLoader(function () { return __awaiter(void 0, void 0, void 0, function () { return __generator(this, function (_a) {
+                            return [2 /*return*/, payload];
+                        }); }); });
+                        return [4 /*yield*/, config_1.Config.refresh()];
+                    case 1:
+                        _a.sent();
+                        (0, bun_test_1.expect)(config_1.Config.get("TERRENO_CFG_STRING")).toBe("first");
+                        payload = { TERRENO_CFG_STRING: "second" };
+                        return [4 /*yield*/, config_1.Config.refresh()];
+                    case 2:
+                        _a.sent();
+                        (0, bun_test_1.expect)(config_1.Config.get("TERRENO_CFG_STRING")).toBe("second");
+                        return [2 /*return*/];
+                }
+            });
+        }); });
+    });
+});

package/dist/configuration.test.js

@@ -72,6 +72,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+// biome-ignore-all lint/suspicious/noExplicitAny: test mock typing
 var bun_test_1 = require("bun:test");
 var mongoose_1 = __importStar(require("mongoose"));
 var supertest_1 = __importDefault(require("supertest"));

package/dist/configurationApp.d.ts

@@ -9,7 +9,7 @@ interface ConfigFieldMeta {
     required: boolean;
     description?: string;
     enum?: string[];
-    default?: any;
+    default?: unknown;
     secret?: boolean;
     widget?: string;
 }

package/dist/configurationApp.js

@@ -102,10 +102,6 @@ var requireAdmin = function (req, _res, next) {
     }
     next();
 };
-/**
- * Extracts field metadata from an OpenAPI properties object, augmented with
- * secret info from the Mongoose schema.
- */
 var extractFieldMeta = function (properties, required, schema, prefix, fieldOverrides) {
     var e_1, _a;
     var _b, _c, _d;
@@ -157,9 +153,15 @@ var redactSecrets = function (obj, secretFields) {
             var parts = field.path.split(".");
             var current = redacted;
             for (var i = 0; i < parts.length - 1; i++) {
-                if (current[parts[i]] != null && typeof current[parts[i]] === "object") {
-                    current[parts[i]] = __assign({}, current[parts[i]]);
-                    current = current[parts[i]];
+                if (!current) {
+                    break;
+                }
+                var part = parts[i];
+                var nested = current[part];
+                if (nested != null && typeof nested === "object") {
+                    var copy = __assign({}, nested);
+                    current[part] = copy;
+                    current = copy;
                 }
                 else {
                     current = null;
@@ -231,7 +233,7 @@ var ConfigurationApp = /** @class */ (function () {
     }
     ConfigurationApp.prototype.register = function (app) {
         var _this = this;
-        var _a, _b, _c, _d;
+        var _a, _b, _c;
         var basePath = (_a = this.options.basePath) !== null && _a !== void 0 ? _a : "/configuration";
         var ConfigModel = this.options.model;
         var schema = ConfigModel.schema;
@@ -241,14 +243,15 @@ var ConfigurationApp = /** @class */ (function () {
         app.get("".concat(basePath, "/meta"), (0, auth_1.authenticateMiddleware)(), requireAdmin, function (_req, res) {
             return res.json(meta);
         });
+        var ConfigStatics = ConfigModel;
         // Discover secret fields once at registration time
-        var secretFields = (_d = (_c = (_b = ConfigModel).getSecretFields) === null || _c === void 0 ? void 0 : _c.call(_b)) !== null && _d !== void 0 ? _d : [];
+        var secretFields = (_c = (_b = ConfigStatics.getSecretFields) === null || _b === void 0 ? void 0 : _b.call(ConfigStatics)) !== null && _c !== void 0 ? _c : [];
         // GET /configuration — current values (secrets redacted)
         app.get("".concat(basePath), (0, auth_1.authenticateMiddleware)(), requireAdmin, (0, api_1.asyncHandler)(function (_req, res) { return __awaiter(_this, void 0, void 0, function () {
             var config, data;
             return __generator(this, function (_a) {
                 switch (_a.label) {
-                    case 0: return [4 /*yield*/, ConfigModel.getConfig()];
+                    case 0: return [4 /*yield*/, ConfigStatics.getConfig()];
                     case 1:
                         config = _a.sent();
                         data = redactSecrets(config.toJSON(), secretFields);
@@ -264,7 +267,7 @@ var ConfigurationApp = /** @class */ (function () {
                 switch (_d.label) {
                     case 0:
                         _a = req.body, _s = _a._singleton, _i = _a._id, _v = _a.__v, safeBody = __rest(_a, ["_singleton", "_id", "__v"]);
-                        return [4 /*yield*/, ConfigModel.updateConfig(safeBody)];
+                        return [4 /*yield*/, ConfigStatics.updateConfig(safeBody)];
                     case 1:
                         config = _d.sent();
                         logger_1.logger.info("Configuration updated by ".concat((_c = (_b = req.user) === null || _b === void 0 ? void 0 : _b.email) !== null && _c !== void 0 ? _c : "unknown"));
@@ -279,7 +282,7 @@ var ConfigurationApp = /** @class */ (function () {
             var e_3, _b;
             return __generator(this, function (_c) {
                 switch (_c.label) {
-                    case 0: return [4 /*yield*/, ConfigModel.resolveSecrets()];
+                    case 0: return [4 /*yield*/, ConfigStatics.resolveSecrets()];
                     case 1:
                         resolved = _c.sent();
                         if (!(resolved.size > 0)) return [3 /*break*/, 3];
@@ -297,7 +300,7 @@ var ConfigurationApp = /** @class */ (function () {
                             }
                             finally { if (e_3) throw e_3.error; }
                         }
-                        return [4 /*yield*/, ConfigModel.updateConfig(updates)];
+                        return [4 /*yield*/, ConfigStatics.updateConfig(updates)];
                     case 2:
                         _c.sent();
                         logger_1.logger.info("Refreshed ".concat(resolved.size, "/").concat(secretFields.length, " secrets"));
@@ -318,6 +321,7 @@ var ConfigurationApp = /** @class */ (function () {
      * Top-level fields with subschemas become sections.
      * Top-level scalar fields go into a "General" section.
      */
+    // biome-ignore lint/suspicious/noExplicitAny: Model<any> required for invariance with consumer-supplied configuration models
     ConfigurationApp.prototype.buildMetadata = function (_model, schema) {
         var _this = this;
         var sections = [];

package/dist/configurationPlugin.test.js

@@ -85,6 +85,7 @@ var __read = (this && this.__read) || function (o, n) {
     return ar;
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+// biome-ignore-all lint/suspicious/noExplicitAny: test mock typing
 var bun_test_1 = require("bun:test");
 var mongoose_1 = __importStar(require("mongoose"));
 var configurationPlugin_1 = require("./configurationPlugin");

package/dist/consentApp.test.js

@@ -55,6 +55,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+// biome-ignore-all lint/suspicious/noExplicitAny: test mock typing
 var bun_test_1 = require("bun:test");
 var supertest_1 = __importDefault(require("supertest"));
 var consentApp_1 = require("./consentApp");

package/dist/envConfigurationPlugin.d.ts

@@ -0,0 +1,2 @@
+import type { Schema } from "mongoose";
+export declare const envConfigurationPlugin: (schema: Schema<any, any, any, any>) => void;

package/dist/envConfigurationPlugin.js

@@ -0,0 +1,173 @@
+"use strict";
+var __assign = (this && this.__assign) || function () {
+    __assign = Object.assign || function(t) {
+        for (var s, i = 1, n = arguments.length; i < n; i++) {
+            s = arguments[i];
+            for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p))
+                t[p] = s[p];
+        }
+        return t;
+    };
+    return __assign.apply(this, arguments);
+};
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g = Object.create((typeof Iterator === "function" ? Iterator : Object).prototype);
+    return g.next = verb(0), g["throw"] = verb(1), g["return"] = verb(2), typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (g && (g = 0, op[0] && (_ = 0)), _) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+var __values = (this && this.__values) || function(o) {
+    var s = typeof Symbol === "function" && Symbol.iterator, m = s && o[s], i = 0;
+    if (m) return m.call(o);
+    if (o && typeof o.length === "number") return {
+        next: function () {
+            if (o && i >= o.length) o = void 0;
+            return { value: o && o[i++], done: !o };
+        }
+    };
+    throw new TypeError(s ? "Object is not iterable." : "Symbol.iterator is not defined.");
+};
+var __read = (this && this.__read) || function (o, n) {
+    var m = typeof Symbol === "function" && o[Symbol.iterator];
+    if (!m) return o;
+    var i = m.call(o), r, ar = [], e;
+    try {
+        while ((n === void 0 || n-- > 0) && !(r = i.next()).done) ar.push(r.value);
+    }
+    catch (error) { e = { error: error }; }
+    finally {
+        try {
+            if (r && !r.done && (m = i["return"])) m.call(i);
+        }
+        finally { if (e) throw e.error; }
+    }
+    return ar;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.envConfigurationPlugin = void 0;
+var config_1 = require("./config");
+var logger_1 = require("./logger");
+var plugins_1 = require("./plugins");
+var mapToObject = function (env) {
+    var e_1, _a;
+    if (!env) {
+        return {};
+    }
+    if (env instanceof Map) {
+        var out = {};
+        try {
+            for (var env_1 = __values(env), env_1_1 = env_1.next(); !env_1_1.done; env_1_1 = env_1.next()) {
+                var _b = __read(env_1_1.value, 2), k = _b[0], v = _b[1];
+                out[k] = v;
+            }
+        }
+        catch (e_1_1) { e_1 = { error: e_1_1 }; }
+        finally {
+            try {
+                if (env_1_1 && !env_1_1.done && (_a = env_1.return)) _a.call(env_1);
+            }
+            finally { if (e_1) throw e_1.error; }
+        }
+        return out;
+    }
+    return __assign({}, env);
+};
+var refreshFromDoc = function (Model) { return __awaiter(void 0, void 0, void 0, function () {
+    var doc, error_1;
+    return __generator(this, function (_a) {
+        switch (_a.label) {
+            case 0:
+                _a.trys.push([0, 2, , 3]);
+                return [4 /*yield*/, (0, plugins_1.findOneOrNoneFor)(Model, {})];
+            case 1:
+                doc = (_a.sent());
+                config_1.Config.setCachedEnv(mapToObject(doc === null || doc === void 0 ? void 0 : doc.env));
+                return [3 /*break*/, 3];
+            case 2:
+                error_1 = _a.sent();
+                logger_1.logger.warn("envConfigurationPlugin: failed to refresh Config cache: ".concat(error_1.message));
+                return [3 /*break*/, 3];
+            case 3: return [2 /*return*/];
+        }
+    });
+}); };
+// biome-ignore lint/suspicious/noExplicitAny: Schema generics must be loose to accept arbitrary consumer schemas
+var envConfigurationPlugin = function (schema) {
+    schema.add({
+        env: {
+            default: function () { return new Map(); },
+            description: "Admin-editable overrides for runtime configuration. Keys are env-var names " +
+                "(e.g. EXPO_ACCESS_TOKEN) and values are stored as strings. Overrides win " +
+                "over process.env at read time via the Config registry.",
+            of: String,
+            type: Map,
+        },
+    });
+    schema.post("save", function () {
+        return __awaiter(this, void 0, void 0, function () {
+            return __generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0: return [4 /*yield*/, refreshFromDoc(this.constructor)];
+                    case 1:
+                        _a.sent();
+                        return [2 /*return*/];
+                }
+            });
+        });
+    });
+    schema.post("findOneAndUpdate", function () {
+        return __awaiter(this, void 0, void 0, function () {
+            return __generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0: return [4 /*yield*/, refreshFromDoc(this.model)];
+                    case 1:
+                        _a.sent();
+                        return [2 /*return*/];
+                }
+            });
+        });
+    });
+    schema.post("updateOne", function () {
+        return __awaiter(this, void 0, void 0, function () {
+            return __generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0: return [4 /*yield*/, refreshFromDoc(this.model)];
+                    case 1:
+                        _a.sent();
+                        return [2 /*return*/];
+                }
+            });
+        });
+    });
+};
+exports.envConfigurationPlugin = envConfigurationPlugin;

package/dist/envConfigurationPlugin.test.d.ts

@@ -0,0 +1 @@
+export {};