@terreno/api 0.13.3 → 0.14.1

package/dist/configurationApp.js

@@ -102,10 +102,6 @@ var requireAdmin = function (req, _res, next) {
     }
     next();
 };
-/**
- * Extracts field metadata from an OpenAPI properties object, augmented with
- * secret info from the Mongoose schema.
- */
 var extractFieldMeta = function (properties, required, schema, prefix, fieldOverrides) {
     var e_1, _a;
     var _b, _c, _d;
@@ -157,9 +153,15 @@ var redactSecrets = function (obj, secretFields) {
             var parts = field.path.split(".");
             var current = redacted;
             for (var i = 0; i < parts.length - 1; i++) {
-                if (current[parts[i]] != null && typeof current[parts[i]] === "object") {
-                    current[parts[i]] = __assign({}, current[parts[i]]);
-                    current = current[parts[i]];
+                if (!current) {
+                    break;
+                }
+                var part = parts[i];
+                var nested = current[part];
+                if (nested != null && typeof nested === "object") {
+                    var copy = __assign({}, nested);
+                    current[part] = copy;
+                    current = copy;
                 }
                 else {
                     current = null;
@@ -231,7 +233,7 @@ var ConfigurationApp = /** @class */ (function () {
     }
     ConfigurationApp.prototype.register = function (app) {
         var _this = this;
-        var _a, _b, _c, _d;
+        var _a, _b, _c;
         var basePath = (_a = this.options.basePath) !== null && _a !== void 0 ? _a : "/configuration";
         var ConfigModel = this.options.model;
         var schema = ConfigModel.schema;
@@ -241,14 +243,15 @@ var ConfigurationApp = /** @class */ (function () {
         app.get("".concat(basePath, "/meta"), (0, auth_1.authenticateMiddleware)(), requireAdmin, function (_req, res) {
             return res.json(meta);
         });
+        var ConfigStatics = ConfigModel;
         // Discover secret fields once at registration time
-        var secretFields = (_d = (_c = (_b = ConfigModel).getSecretFields) === null || _c === void 0 ? void 0 : _c.call(_b)) !== null && _d !== void 0 ? _d : [];
+        var secretFields = (_c = (_b = ConfigStatics.getSecretFields) === null || _b === void 0 ? void 0 : _b.call(ConfigStatics)) !== null && _c !== void 0 ? _c : [];
         // GET /configuration — current values (secrets redacted)
         app.get("".concat(basePath), (0, auth_1.authenticateMiddleware)(), requireAdmin, (0, api_1.asyncHandler)(function (_req, res) { return __awaiter(_this, void 0, void 0, function () {
             var config, data;
             return __generator(this, function (_a) {
                 switch (_a.label) {
-                    case 0: return [4 /*yield*/, ConfigModel.getConfig()];
+                    case 0: return [4 /*yield*/, ConfigStatics.getConfig()];
                     case 1:
                         config = _a.sent();
                         data = redactSecrets(config.toJSON(), secretFields);
@@ -264,7 +267,7 @@ var ConfigurationApp = /** @class */ (function () {
                 switch (_d.label) {
                     case 0:
                         _a = req.body, _s = _a._singleton, _i = _a._id, _v = _a.__v, safeBody = __rest(_a, ["_singleton", "_id", "__v"]);
-                        return [4 /*yield*/, ConfigModel.updateConfig(safeBody)];
+                        return [4 /*yield*/, ConfigStatics.updateConfig(safeBody)];
                     case 1:
                         config = _d.sent();
                         logger_1.logger.info("Configuration updated by ".concat((_c = (_b = req.user) === null || _b === void 0 ? void 0 : _b.email) !== null && _c !== void 0 ? _c : "unknown"));
@@ -279,7 +282,7 @@ var ConfigurationApp = /** @class */ (function () {
             var e_3, _b;
             return __generator(this, function (_c) {
                 switch (_c.label) {
-                    case 0: return [4 /*yield*/, ConfigModel.resolveSecrets()];
+                    case 0: return [4 /*yield*/, ConfigStatics.resolveSecrets()];
                     case 1:
                         resolved = _c.sent();
                         if (!(resolved.size > 0)) return [3 /*break*/, 3];
@@ -297,7 +300,7 @@ var ConfigurationApp = /** @class */ (function () {
                             }
                             finally { if (e_3) throw e_3.error; }
                         }
-                        return [4 /*yield*/, ConfigModel.updateConfig(updates)];
+                        return [4 /*yield*/, ConfigStatics.updateConfig(updates)];
                     case 2:
                         _c.sent();
                         logger_1.logger.info("Refreshed ".concat(resolved.size, "/").concat(secretFields.length, " secrets"));
@@ -318,6 +321,7 @@ var ConfigurationApp = /** @class */ (function () {
      * Top-level fields with subschemas become sections.
      * Top-level scalar fields go into a "General" section.
      */
+    // biome-ignore lint/suspicious/noExplicitAny: Model<any> required for invariance with consumer-supplied configuration models
     ConfigurationApp.prototype.buildMetadata = function (_model, schema) {
         var _this = this;
         var sections = [];

package/dist/configurationPlugin.test.js

@@ -85,6 +85,7 @@ var __read = (this && this.__read) || function (o, n) {
     return ar;
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+// biome-ignore-all lint/suspicious/noExplicitAny: test mock typing
 var bun_test_1 = require("bun:test");
 var mongoose_1 = __importStar(require("mongoose"));
 var configurationPlugin_1 = require("./configurationPlugin");

package/dist/consentApp.test.js

@@ -55,6 +55,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+// biome-ignore-all lint/suspicious/noExplicitAny: test mock typing
 var bun_test_1 = require("bun:test");
 var supertest_1 = __importDefault(require("supertest"));
 var consentApp_1 = require("./consentApp");

package/dist/envConfigurationPlugin.d.ts

@@ -0,0 +1,2 @@
+import type { Schema } from "mongoose";
+export declare const envConfigurationPlugin: (schema: Schema<any, any, any, any>) => void;

package/dist/envConfigurationPlugin.js

@@ -0,0 +1,173 @@
+"use strict";
+var __assign = (this && this.__assign) || function () {
+    __assign = Object.assign || function(t) {
+        for (var s, i = 1, n = arguments.length; i < n; i++) {
+            s = arguments[i];
+            for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p))
+                t[p] = s[p];
+        }
+        return t;
+    };
+    return __assign.apply(this, arguments);
+};
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g = Object.create((typeof Iterator === "function" ? Iterator : Object).prototype);
+    return g.next = verb(0), g["throw"] = verb(1), g["return"] = verb(2), typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (g && (g = 0, op[0] && (_ = 0)), _) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+var __values = (this && this.__values) || function(o) {
+    var s = typeof Symbol === "function" && Symbol.iterator, m = s && o[s], i = 0;
+    if (m) return m.call(o);
+    if (o && typeof o.length === "number") return {
+        next: function () {
+            if (o && i >= o.length) o = void 0;
+            return { value: o && o[i++], done: !o };
+        }
+    };
+    throw new TypeError(s ? "Object is not iterable." : "Symbol.iterator is not defined.");
+};
+var __read = (this && this.__read) || function (o, n) {
+    var m = typeof Symbol === "function" && o[Symbol.iterator];
+    if (!m) return o;
+    var i = m.call(o), r, ar = [], e;
+    try {
+        while ((n === void 0 || n-- > 0) && !(r = i.next()).done) ar.push(r.value);
+    }
+    catch (error) { e = { error: error }; }
+    finally {
+        try {
+            if (r && !r.done && (m = i["return"])) m.call(i);
+        }
+        finally { if (e) throw e.error; }
+    }
+    return ar;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.envConfigurationPlugin = void 0;
+var config_1 = require("./config");
+var logger_1 = require("./logger");
+var plugins_1 = require("./plugins");
+var mapToObject = function (env) {
+    var e_1, _a;
+    if (!env) {
+        return {};
+    }
+    if (env instanceof Map) {
+        var out = {};
+        try {
+            for (var env_1 = __values(env), env_1_1 = env_1.next(); !env_1_1.done; env_1_1 = env_1.next()) {
+                var _b = __read(env_1_1.value, 2), k = _b[0], v = _b[1];
+                out[k] = v;
+            }
+        }
+        catch (e_1_1) { e_1 = { error: e_1_1 }; }
+        finally {
+            try {
+                if (env_1_1 && !env_1_1.done && (_a = env_1.return)) _a.call(env_1);
+            }
+            finally { if (e_1) throw e_1.error; }
+        }
+        return out;
+    }
+    return __assign({}, env);
+};
+var refreshFromDoc = function (Model) { return __awaiter(void 0, void 0, void 0, function () {
+    var doc, error_1;
+    return __generator(this, function (_a) {
+        switch (_a.label) {
+            case 0:
+                _a.trys.push([0, 2, , 3]);
+                return [4 /*yield*/, (0, plugins_1.findOneOrNoneFor)(Model, {})];
+            case 1:
+                doc = (_a.sent());
+                config_1.Config.setCachedEnv(mapToObject(doc === null || doc === void 0 ? void 0 : doc.env));
+                return [3 /*break*/, 3];
+            case 2:
+                error_1 = _a.sent();
+                logger_1.logger.warn("envConfigurationPlugin: failed to refresh Config cache: ".concat(error_1.message));
+                return [3 /*break*/, 3];
+            case 3: return [2 /*return*/];
+        }
+    });
+}); };
+// biome-ignore lint/suspicious/noExplicitAny: Schema generics must be loose to accept arbitrary consumer schemas
+var envConfigurationPlugin = function (schema) {
+    schema.add({
+        env: {
+            default: function () { return new Map(); },
+            description: "Admin-editable overrides for runtime configuration. Keys are env-var names " +
+                "(e.g. EXPO_ACCESS_TOKEN) and values are stored as strings. Overrides win " +
+                "over process.env at read time via the Config registry.",
+            of: String,
+            type: Map,
+        },
+    });
+    schema.post("save", function () {
+        return __awaiter(this, void 0, void 0, function () {
+            return __generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0: return [4 /*yield*/, refreshFromDoc(this.constructor)];
+                    case 1:
+                        _a.sent();
+                        return [2 /*return*/];
+                }
+            });
+        });
+    });
+    schema.post("findOneAndUpdate", function () {
+        return __awaiter(this, void 0, void 0, function () {
+            return __generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0: return [4 /*yield*/, refreshFromDoc(this.model)];
+                    case 1:
+                        _a.sent();
+                        return [2 /*return*/];
+                }
+            });
+        });
+    });
+    schema.post("updateOne", function () {
+        return __awaiter(this, void 0, void 0, function () {
+            return __generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0: return [4 /*yield*/, refreshFromDoc(this.model)];
+                    case 1:
+                        _a.sent();
+                        return [2 /*return*/];
+                }
+            });
+        });
+    });
+};
+exports.envConfigurationPlugin = envConfigurationPlugin;

package/dist/envConfigurationPlugin.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/envConfigurationPlugin.test.js

@@ -0,0 +1,322 @@
+"use strict";
+var __assign = (this && this.__assign) || function () {
+    __assign = Object.assign || function(t) {
+        for (var s, i = 1, n = arguments.length; i < n; i++) {
+            s = arguments[i];
+            for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p))
+                t[p] = s[p];
+        }
+        return t;
+    };
+    return __assign.apply(this, arguments);
+};
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g = Object.create((typeof Iterator === "function" ? Iterator : Object).prototype);
+    return g.next = verb(0), g["throw"] = verb(1), g["return"] = verb(2), typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (g && (g = 0, op[0] && (_ = 0)), _) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+var __values = (this && this.__values) || function(o) {
+    var s = typeof Symbol === "function" && Symbol.iterator, m = s && o[s], i = 0;
+    if (m) return m.call(o);
+    if (o && typeof o.length === "number") return {
+        next: function () {
+            if (o && i >= o.length) o = void 0;
+            return { value: o && o[i++], done: !o };
+        }
+    };
+    throw new TypeError(s ? "Object is not iterable." : "Symbol.iterator is not defined.");
+};
+var __read = (this && this.__read) || function (o, n) {
+    var m = typeof Symbol === "function" && o[Symbol.iterator];
+    if (!m) return o;
+    var i = m.call(o), r, ar = [], e;
+    try {
+        while ((n === void 0 || n-- > 0) && !(r = i.next()).done) ar.push(r.value);
+    }
+    catch (error) { e = { error: error }; }
+    finally {
+        try {
+            if (r && !r.done && (m = i["return"])) m.call(i);
+        }
+        finally { if (e) throw e.error; }
+    }
+    return ar;
+};
+var _a;
+Object.defineProperty(exports, "__esModule", { value: true });
+// biome-ignore-all lint/suspicious/noExplicitAny: test model typing
+var bun_test_1 = require("bun:test");
+var mongoose_1 = __importStar(require("mongoose"));
+var config_1 = require("./config");
+var envConfigurationPlugin_1 = require("./envConfigurationPlugin");
+var testSchema = new mongoose_1.Schema({}, { strict: "throw" });
+testSchema.plugin(envConfigurationPlugin_1.envConfigurationPlugin);
+var TestEnvConfig = (_a = mongoose_1.default.models.TestEnvConfig) !== null && _a !== void 0 ? _a : mongoose_1.default.model("TestEnvConfig", testSchema);
+var setupLoader = function () {
+    config_1.Config.setEnvLoader(function () { return __awaiter(void 0, void 0, void 0, function () {
+        var doc, out, _a, _b, _c, k, v;
+        var e_1, _d;
+        return __generator(this, function (_e) {
+            switch (_e.label) {
+                case 0: return [4 /*yield*/, TestEnvConfig.findOne({}).lean()];
+                case 1:
+                    doc = (_e.sent());
+                    if (!(doc === null || doc === void 0 ? void 0 : doc.env)) {
+                        return [2 /*return*/, {}];
+                    }
+                    if (doc.env instanceof Map) {
+                        out = {};
+                        try {
+                            for (_a = __values(doc.env), _b = _a.next(); !_b.done; _b = _a.next()) {
+                                _c = __read(_b.value, 2), k = _c[0], v = _c[1];
+                                out[k] = v;
+                            }
+                        }
+                        catch (e_1_1) { e_1 = { error: e_1_1 }; }
+                        finally {
+                            try {
+                                if (_b && !_b.done && (_d = _a.return)) _d.call(_a);
+                            }
+                            finally { if (e_1) throw e_1.error; }
+                        }
+                        return [2 /*return*/, out];
+                    }
+                    return [2 /*return*/, __assign({}, doc.env)];
+            }
+        });
+    }); });
+};
+(0, bun_test_1.describe)("envConfigurationPlugin", function () {
+    (0, bun_test_1.beforeEach)(function () { return __awaiter(void 0, void 0, void 0, function () {
+        var _a;
+        return __generator(this, function (_b) {
+            switch (_b.label) {
+                case 0:
+                    config_1.Config.clearRegistryForTesting();
+                    config_1.Config.clearOverrides();
+                    config_1.Config.setCachedEnv(null);
+                    config_1.Config.setEnvLoader(null);
+                    Reflect.deleteProperty(process.env, "TERRENO_PLUGIN_KEY");
+                    config_1.Config.register("TERRENO_PLUGIN_KEY", { default: "fallback" });
+                    return [4 /*yield*/, ((_a = mongoose_1.default.connection.db) === null || _a === void 0 ? void 0 : _a.collection("testenvconfigs").deleteMany({}))];
+                case 1:
+                    _b.sent();
+                    setupLoader();
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.afterEach)(function () { return __awaiter(void 0, void 0, void 0, function () {
+        var _a;
+        return __generator(this, function (_b) {
+            switch (_b.label) {
+                case 0:
+                    config_1.Config.clearRegistryForTesting();
+                    config_1.Config.clearOverrides();
+                    config_1.Config.setCachedEnv(null);
+                    config_1.Config.setEnvLoader(null);
+                    Reflect.deleteProperty(process.env, "TERRENO_PLUGIN_KEY");
+                    return [4 /*yield*/, ((_a = mongoose_1.default.connection.db) === null || _a === void 0 ? void 0 : _a.collection("testenvconfigs").deleteMany({}))];
+                case 1:
+                    _b.sent();
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("adds an env Map field to the schema", function () {
+        var doc = new TestEnvConfig();
+        (0, bun_test_1.expect)(doc.env).toBeInstanceOf(Map);
+    });
+    (0, bun_test_1.it)("Config.refresh() loads values from the document", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var doc;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0:
+                    doc = new TestEnvConfig();
+                    doc.env.set("TERRENO_PLUGIN_KEY", "fromDoc");
+                    return [4 /*yield*/, doc.save()];
+                case 1:
+                    _a.sent();
+                    config_1.Config.setCachedEnv(null);
+                    return [4 /*yield*/, config_1.Config.refresh()];
+                case 2:
+                    _a.sent();
+                    (0, bun_test_1.expect)(config_1.Config.get("TERRENO_PLUGIN_KEY")).toBe("fromDoc");
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("post-save hook refreshes the cache automatically", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var doc;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0:
+                    doc = new TestEnvConfig();
+                    doc.env.set("TERRENO_PLUGIN_KEY", "first");
+                    return [4 /*yield*/, doc.save()];
+                case 1:
+                    _a.sent();
+                    (0, bun_test_1.expect)(config_1.Config.get("TERRENO_PLUGIN_KEY")).toBe("first");
+                    doc.env.set("TERRENO_PLUGIN_KEY", "second");
+                    return [4 /*yield*/, doc.save()];
+                case 2:
+                    _a.sent();
+                    (0, bun_test_1.expect)(config_1.Config.get("TERRENO_PLUGIN_KEY")).toBe("second");
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("post-findOneAndUpdate hook refreshes the cache", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var doc;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0:
+                    doc = new TestEnvConfig();
+                    doc.env.set("TERRENO_PLUGIN_KEY", "initial");
+                    return [4 /*yield*/, doc.save()];
+                case 1:
+                    _a.sent();
+                    return [4 /*yield*/, TestEnvConfig.findOneAndUpdate({ _id: doc._id }, { env: new Map([["TERRENO_PLUGIN_KEY", "updated"]]) })];
+                case 2:
+                    _a.sent();
+                    (0, bun_test_1.expect)(config_1.Config.get("TERRENO_PLUGIN_KEY")).toBe("updated");
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("post-updateOne hook refreshes the cache", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var doc;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0:
+                    doc = new TestEnvConfig();
+                    doc.env.set("TERRENO_PLUGIN_KEY", "initial");
+                    return [4 /*yield*/, doc.save()];
+                case 1:
+                    _a.sent();
+                    return [4 /*yield*/, TestEnvConfig.updateOne({ _id: doc._id }, { env: new Map([["TERRENO_PLUGIN_KEY", "updatedViaUpdateOne"]]) })];
+                case 2:
+                    _a.sent();
+                    (0, bun_test_1.expect)(config_1.Config.get("TERRENO_PLUGIN_KEY")).toBe("updatedViaUpdateOne");
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("empty-string env values fall through to process.env", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var doc;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0:
+                    process.env.TERRENO_PLUGIN_KEY = "fromEnv";
+                    doc = new TestEnvConfig();
+                    doc.env.set("TERRENO_PLUGIN_KEY", "");
+                    return [4 /*yield*/, doc.save()];
+                case 1:
+                    _a.sent();
+                    (0, bun_test_1.expect)(config_1.Config.get("TERRENO_PLUGIN_KEY")).toBe("fromEnv");
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("missing document yields registered defaults", function () { return __awaiter(void 0, void 0, void 0, function () {
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, config_1.Config.refresh()];
+                case 1:
+                    _a.sent();
+                    (0, bun_test_1.expect)(config_1.Config.get("TERRENO_PLUGIN_KEY")).toBe("fallback");
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("refreshFromDoc handles null document via Mongoose hook when collection is empty", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var _a;
+        return __generator(this, function (_b) {
+            switch (_b.label) {
+                case 0: 
+                // Ensure collection is empty — no documents to find
+                return [4 /*yield*/, ((_a = mongoose_1.default.connection.db) === null || _a === void 0 ? void 0 : _a.collection("testenvconfigs").deleteMany({}))];
+                case 1:
+                    // Ensure collection is empty — no documents to find
+                    _b.sent();
+                    // Override the cache so we can verify it gets cleared by the hook
+                    config_1.Config.setCachedEnv({ TERRENO_PLUGIN_KEY: "stale" });
+                    (0, bun_test_1.expect)(config_1.Config.get("TERRENO_PLUGIN_KEY")).toBe("stale");
+                    // Trigger findOneAndUpdate hook on a non-existent doc — refreshFromDoc
+                    // calls findOneOrNone which returns null, so mapToObject(undefined) runs
+                    return [4 /*yield*/, TestEnvConfig.findOneAndUpdate({ _id: new mongoose_1.default.Types.ObjectId() }, { $set: { __v: 1 } })];
+                case 2:
+                    // Trigger findOneAndUpdate hook on a non-existent doc — refreshFromDoc
+                    // calls findOneOrNone which returns null, so mapToObject(undefined) runs
+                    _b.sent();
+                    // mapToObject(undefined) returns {}, so Config falls back to the registered default
+                    (0, bun_test_1.expect)(config_1.Config.get("TERRENO_PLUGIN_KEY")).toBe("fallback");
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+});

package/dist/errors.d.ts

@@ -21,7 +21,7 @@ export interface APIErrorConstructor {
     meta?: {
         [id: string]: string;
     };
-    error?: Error;
+    error?: unknown;
     disableExternalErrorTracking?: boolean;
 }
 /**
@@ -54,22 +54,33 @@ export declare class APIError extends Error {
         header?: string;
     } | undefined;
     meta: {
-        [id: string]: any;
+        [id: string]: unknown;
     } | undefined;
-    error?: Error;
+    error?: unknown;
     disableExternalErrorTracking?: boolean;
     constructor(data: APIErrorConstructor);
 }
 export declare const errorsPlugin: (schema: Schema) => void;
-export declare const isAPIError: (error: Error) => error is APIError;
+export declare const isAPIError: (error: unknown) => error is APIError;
+/** Extract a human-readable message from an unknown error. */
+export declare const errorMessage: (error: unknown) => string;
+/** Extract a stack trace string from an unknown error. */
+export declare const errorStack: (error: unknown) => string;
 /**
  * Safely extracts the disableExternalErrorTracking property from an error.
  * Works with both APIError instances and regular Error objects that may have
  * this property attached.
  */
 export declare const getDisableExternalErrorTracking: (error: unknown) => boolean | undefined;
-export declare const getAPIErrorBody: (error: APIError) => {
-    [id: string]: any;
-};
+export declare const getAPIErrorBody: (error: APIError) => Record<string, unknown>;
 export declare const apiUnauthorizedMiddleware: (err: Error, _req: Request, res: Response, next: NextFunction) => void;
+/**
+ * Converts Mongoose validation/cast errors into client-friendly APIErrors.
+ */
+export declare const mongooseErrorToAPIError: (err: Error) => APIError | null;
 export declare const apiErrorMiddleware: (err: Error, _req: Request, res: Response, next: NextFunction) => void;
+/**
+ * Final Express error handler for unexpected errors. Always returns JSON so
+ * clients (e.g. RTK Query) can parse the response.
+ */
+export declare const apiFallthroughErrorMiddleware: (err: Error, _req: Request, res: Response, _next: NextFunction) => void;