@terreno/api 0.15.0 → 0.15.2

package/dist/api.d.ts

@@ -1,5 +1,6 @@
 import express, { type NextFunction, type Request, type Response } from "express";
 import mongoose, { type Document, type Model } from "mongoose";
+import { type CollectionActionConfig, type InstanceActionConfig } from "./actions";
 import { type User } from "./auth";
 import { type ModelRouterValidationOptions } from "./openApiValidator";
 import { type RESTPermissions } from "./permissions";
@@ -129,6 +130,10 @@ export interface ModelRouterOptions<T> {
     maxLimit?: number;
     /** Custom route setup function. Receives the router and optionally the full options (including openApi). */
     endpoints?: (router: express.Router, options?: Partial<ModelRouterOptions<T>>) => void;
+    /** Named instance-scoped operations at `/:id/:actionName` (GET or POST). */
+    instanceActions?: Record<string, InstanceActionConfig<T, unknown, unknown, unknown>>;
+    /** Named collection-scoped operations at `/:actionName` (GET or POST). */
+    collectionActions?: Record<string, CollectionActionConfig<unknown, unknown, unknown>>;
     /**
      * Hook that runs after `transformer.transform` but before the object is created.
      * Can update the body fields based on the request or the user.

package/dist/api.js

@@ -131,6 +131,7 @@ var express_1 = __importDefault(require("express"));
 var cloneDeep_1 = __importDefault(require("lodash/cloneDeep"));
 var luxon_1 = require("luxon");
 var mongoose_1 = __importDefault(require("mongoose"));
+var actions_1 = require("./actions");
 var auth_1 = require("./auth");
 var errors_1 = require("./errors");
 var logger_1 = require("./logger");
@@ -334,7 +335,9 @@ function _buildModelRouter(model, options) {
     var _this = this;
     var _a;
     var router = express_1.default.Router();
-    // Do before the other router options so endpoints take priority.
+    (0, actions_1.assertNoActionCollisions)(model, options);
+    (0, actions_1.registerActionRoutes)(router, model, options);
+    // User endpoints run after actions; actions win on path conflicts.
     if (options.endpoints) {
         options.endpoints(router, options);
     }

package/dist/consentApp.js

@@ -64,6 +64,11 @@ var logger_1 = require("./logger");
 var consentForm_1 = require("./models/consentForm");
 var consentResponse_1 = require("./models/consentResponse");
 var permissions_1 = require("./permissions");
+var requireAdmin = function (user) {
+    if (!(user === null || user === void 0 ? void 0 : user.admin)) {
+        throw new errors_1.APIError({ status: 403, title: "Admin access required" });
+    }
+};
 var ConsentApp = /** @class */ (function () {
     function ConsentApp(options) {
         if (options === void 0) { options = {}; }
@@ -72,110 +77,126 @@ var ConsentApp = /** @class */ (function () {
     ConsentApp.prototype.register = function (app) {
         var _this = this;
         var _a = this.options, auditTrail = _a.auditTrail, resolveConsentForms = _a.resolveConsentForms, aiConfig = _a.aiConfig;
-        // Admin CRUD for consent forms
+        var collectionActions = {};
+        if (aiConfig) {
+            collectionActions.generate = {
+                handler: function (_a) { return __awaiter(_this, [_a], void 0, function (_b) {
+                    var typedBody, locale, content;
+                    var _c;
+                    var body = _b.body, user = _b.user;
+                    return __generator(this, function (_d) {
+                        switch (_d.label) {
+                            case 0:
+                                requireAdmin(user);
+                                typedBody = body;
+                                if (!typedBody.type) {
+                                    throw new errors_1.APIError({ status: 400, title: "type is required" });
+                                }
+                                if (!typedBody.description) {
+                                    throw new errors_1.APIError({ status: 400, title: "description is required" });
+                                }
+                                locale = (_c = typedBody.locale) !== null && _c !== void 0 ? _c : "en";
+                                return [4 /*yield*/, aiConfig.generateContent({
+                                        description: typedBody.description,
+                                        locale: locale,
+                                        type: typedBody.type,
+                                    })];
+                            case 1:
+                                content = _d.sent();
+                                logger_1.logger.info("ConsentForm content generated", { locale: locale, type: typedBody.type });
+                                return [2 /*return*/, { content: content }];
+                        }
+                    });
+                }); },
+                method: "POST",
+                permissions: [permissions_1.Permissions.IsAuthenticated],
+                summary: "Generate consent form content with AI",
+            };
+            collectionActions.translate = {
+                handler: function (_a) { return __awaiter(_this, [_a], void 0, function (_b) {
+                    var typedBody, translated;
+                    var body = _b.body, user = _b.user;
+                    return __generator(this, function (_c) {
+                        switch (_c.label) {
+                            case 0:
+                                requireAdmin(user);
+                                typedBody = body;
+                                if (!typedBody.content) {
+                                    throw new errors_1.APIError({ status: 400, title: "content is required" });
+                                }
+                                if (!typedBody.fromLocale) {
+                                    throw new errors_1.APIError({ status: 400, title: "fromLocale is required" });
+                                }
+                                if (!typedBody.toLocale) {
+                                    throw new errors_1.APIError({ status: 400, title: "toLocale is required" });
+                                }
+                                return [4 /*yield*/, aiConfig.translateContent({
+                                        content: typedBody.content,
+                                        fromLocale: typedBody.fromLocale,
+                                        toLocale: typedBody.toLocale,
+                                    })];
+                            case 1:
+                                translated = _c.sent();
+                                logger_1.logger.info("ConsentForm content translated", {
+                                    fromLocale: typedBody.fromLocale,
+                                    toLocale: typedBody.toLocale,
+                                });
+                                return [2 /*return*/, { content: translated }];
+                        }
+                    });
+                }); },
+                method: "POST",
+                permissions: [permissions_1.Permissions.IsAuthenticated],
+                summary: "Translate consent form content with AI",
+            };
+        }
         app.use("/consent-forms", (0, api_1.modelRouter)(consentForm_1.ConsentForm, {
-            endpoints: function (router) {
-                if (aiConfig) {
-                    // POST /consent-forms/generate - generate consent form content with AI
-                    router.post("/generate", (0, auth_1.authenticateMiddleware)(), (0, api_1.asyncHandler)(function (req, res) { return __awaiter(_this, void 0, void 0, function () {
-                        var user, _a, type, description, _b, locale, content;
+            collectionActions: collectionActions,
+            instanceActions: {
+                publish: {
+                    handler: function (_a) { return __awaiter(_this, [_a], void 0, function (_b) {
+                        var form, newFormData, newForm;
+                        var doc = _b.doc, user = _b.user;
                         return __generator(this, function (_c) {
                             switch (_c.label) {
                                 case 0:
-                                    user = req.user;
-                                    if (!(user === null || user === void 0 ? void 0 : user.admin)) {
-                                        throw new errors_1.APIError({ status: 403, title: "Admin access required" });
-                                    }
-                                    _a = req.body, type = _a.type, description = _a.description, _b = _a.locale, locale = _b === void 0 ? "en" : _b;
-                                    if (!type) {
-                                        throw new errors_1.APIError({ status: 400, title: "type is required" });
-                                    }
-                                    if (!description) {
-                                        throw new errors_1.APIError({ status: 400, title: "description is required" });
-                                    }
-                                    return [4 /*yield*/, aiConfig.generateContent({ description: description, locale: locale, type: type })];
-                                case 1:
-                                    content = _c.sent();
-                                    logger_1.logger.info("ConsentForm content generated", { locale: locale, type: type });
-                                    return [2 /*return*/, res.json({ data: { content: content } })];
-                            }
-                        });
-                    }); }));
-                    // POST /consent-forms/translate - translate consent form content with AI
-                    router.post("/translate", (0, auth_1.authenticateMiddleware)(), (0, api_1.asyncHandler)(function (req, res) { return __awaiter(_this, void 0, void 0, function () {
-                        var user, _a, content, fromLocale, toLocale, translated;
-                        return __generator(this, function (_b) {
-                            switch (_b.label) {
-                                case 0:
-                                    user = req.user;
-                                    if (!(user === null || user === void 0 ? void 0 : user.admin)) {
-                                        throw new errors_1.APIError({ status: 403, title: "Admin access required" });
-                                    }
-                                    _a = req.body, content = _a.content, fromLocale = _a.fromLocale, toLocale = _a.toLocale;
-                                    if (!content) {
-                                        throw new errors_1.APIError({ status: 400, title: "content is required" });
-                                    }
-                                    if (!fromLocale) {
-                                        throw new errors_1.APIError({ status: 400, title: "fromLocale is required" });
-                                    }
-                                    if (!toLocale) {
-                                        throw new errors_1.APIError({ status: 400, title: "toLocale is required" });
-                                    }
-                                    return [4 /*yield*/, aiConfig.translateContent({ content: content, fromLocale: fromLocale, toLocale: toLocale })];
+                                    requireAdmin(user);
+                                    form = doc;
+                                    newFormData = {
+                                        active: true,
+                                        agreeButtonText: form.agreeButtonText,
+                                        allowDecline: form.allowDecline,
+                                        captureSignature: form.captureSignature,
+                                        checkboxes: form.checkboxes,
+                                        content: form.content,
+                                        declineButtonText: form.declineButtonText,
+                                        defaultLocale: form.defaultLocale,
+                                        order: form.order,
+                                        required: form.required,
+                                        requireScrollToBottom: form.requireScrollToBottom,
+                                        slug: form.slug,
+                                        title: form.title,
+                                        type: form.type,
+                                        version: form.version + 1,
+                                    };
+                                    return [4 /*yield*/, consentForm_1.ConsentForm.create(newFormData)];
                                 case 1:
-                                    translated = _b.sent();
-                                    logger_1.logger.info("ConsentForm content translated", { fromLocale: fromLocale, toLocale: toLocale });
-                                    return [2 /*return*/, res.json({ data: { content: translated } })];
+                                    newForm = _c.sent();
+                                    return [4 /*yield*/, consentForm_1.ConsentForm.updateMany({ _id: { $ne: newForm._id }, slug: form.slug }, { active: false })];
+                                case 2:
+                                    _c.sent();
+                                    logger_1.logger.info("ConsentForm published", {
+                                        newVersion: newForm.version,
+                                        slug: newForm.slug,
+                                    });
+                                    return [2 /*return*/, newForm];
                             }
                         });
-                    }); }));
-                }
-                // POST /consent-forms/:id/publish - clone form with incremented version and activate
-                router.post("/:id/publish", (0, auth_1.authenticateMiddleware)(), (0, api_1.asyncHandler)(function (req, res) { return __awaiter(_this, void 0, void 0, function () {
-                    var user, form, newFormData, newForm;
-                    return __generator(this, function (_a) {
-                        switch (_a.label) {
-                            case 0:
-                                user = req.user;
-                                if (!(user === null || user === void 0 ? void 0 : user.admin)) {
-                                    throw new errors_1.APIError({ status: 403, title: "Admin access required" });
-                                }
-                                return [4 /*yield*/, consentForm_1.ConsentForm.findExactlyOne({ _id: req.params.id })];
-                            case 1:
-                                form = _a.sent();
-                                newFormData = {
-                                    active: true,
-                                    agreeButtonText: form.agreeButtonText,
-                                    allowDecline: form.allowDecline,
-                                    captureSignature: form.captureSignature,
-                                    checkboxes: form.checkboxes,
-                                    content: form.content,
-                                    declineButtonText: form.declineButtonText,
-                                    defaultLocale: form.defaultLocale,
-                                    order: form.order,
-                                    required: form.required,
-                                    requireScrollToBottom: form.requireScrollToBottom,
-                                    slug: form.slug,
-                                    title: form.title,
-                                    type: form.type,
-                                    version: form.version + 1,
-                                };
-                                return [4 /*yield*/, consentForm_1.ConsentForm.create(newFormData)];
-                            case 2:
-                                newForm = _a.sent();
-                                // Deactivate all other versions of the same slug
-                                return [4 /*yield*/, consentForm_1.ConsentForm.updateMany({ _id: { $ne: newForm._id }, slug: form.slug }, { active: false })];
-                            case 3:
-                                // Deactivate all other versions of the same slug
-                                _a.sent();
-                                logger_1.logger.info("ConsentForm published", {
-                                    newVersion: newForm.version,
-                                    slug: newForm.slug,
-                                });
-                                return [2 /*return*/, res.json({ data: newForm })];
-                        }
-                    });
-                }); }));
+                    }); },
+                    method: "POST",
+                    permissions: [permissions_1.Permissions.IsAuthenticated],
+                    summary: "Publish a new version of a consent form",
+                },
             },
             permissions: {
                 create: [permissions_1.Permissions.IsAdmin],
@@ -273,12 +294,10 @@ var ConsentApp = /** @class */ (function () {
                         }
                         pendingForms = resolvedForms.filter(function (form) {
                             var formId = form._id.toString();
-                            // Find responses for this form
                             var matchingResponses = existingResponses.filter(function (r) { return r.consentFormId.toString() === formId; });
                             if (matchingResponses.length === 0) {
                                 return true;
                             }
-                            // Check if any response matches the current form version
                             return !matchingResponses.some(function (r) { return r.formVersionSnapshot === form.version; });
                         });
                         filteredOutByResolverCount = Math.max(activeForms.length - resolvedForms.length, 0);
@@ -324,14 +343,12 @@ var ConsentApp = /** @class */ (function () {
                         if (!form.active) {
                             throw new errors_1.APIError({ status: 400, title: "Consent form is not active" });
                         }
-                        // Validate signature requirement
                         if (form.captureSignature && agreed && !signature) {
                             throw new errors_1.APIError({
                                 status: 400,
                                 title: "Signature is required for this consent form",
                             });
                         }
-                        // Validate required checkboxes
                         if (agreed && form.checkboxes.length > 0) {
                             values = checkboxValues !== null && checkboxValues !== void 0 ? checkboxValues : {};
                             for (i = 0; i < form.checkboxes.length; i++) {
@@ -429,7 +446,6 @@ var ConsentApp = /** @class */ (function () {
                 }
             });
         }); }));
-        // GET /consents/audit/:userId - admin audit trail for a specific user
         if (auditTrail) {
             router.get("/audit/:userId", (0, auth_1.authenticateMiddleware)(), (0, api_1.asyncHandler)(function (req, res) { return __awaiter(_this, void 0, void 0, function () {
                 var user, responses, formIds, forms, formMap, auditEntries;

package/dist/docLoader.d.ts

@@ -0,0 +1,7 @@
+import { type Model } from "mongoose";
+import type { PopulatePath } from "./populate";
+/**
+ * Loads a document by id or throws a 404 APIError.
+ * Matches permission middleware behavior including soft-delete metadata.
+ */
+export declare const loadDocOr404: <T>(model: Model<T>, id: string, populatePaths?: PopulatePath[]) => Promise<T>;

package/dist/docLoader.js

@@ -0,0 +1,154 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g = Object.create((typeof Iterator === "function" ? Iterator : Object).prototype);
+    return g.next = verb(0), g["throw"] = verb(1), g["return"] = verb(2), typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (g && (g = 0, op[0] && (_ = 0)), _) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.loadDocOr404 = void 0;
+var Sentry = __importStar(require("@sentry/bun"));
+var mongoose_1 = __importDefault(require("mongoose"));
+var api_1 = require("./api");
+var errors_1 = require("./errors");
+/**
+ * Loads a document by id or throws a 404 APIError.
+ * Matches permission middleware behavior including soft-delete metadata.
+ */
+var loadDocOr404 = function (model, id, populatePaths) { return __awaiter(void 0, void 0, void 0, function () {
+    var builtQuery, populatedQuery, data, error_1, hiddenDoc, error, reason, error;
+    return __generator(this, function (_a) {
+        switch (_a.label) {
+            case 0:
+                builtQuery = model.findById(id);
+                populatedQuery = (0, api_1.addPopulateToQuery)(
+                // biome-ignore lint/suspicious/noExplicitAny: Query types vary based on populate paths
+                builtQuery, populatePaths);
+                _a.label = 1;
+            case 1:
+                _a.trys.push([1, 3, , 4]);
+                return [4 /*yield*/, populatedQuery.exec()];
+            case 2:
+                data = (_a.sent());
+                return [3 /*break*/, 4];
+            case 3:
+                error_1 = _a.sent();
+                if ((0, errors_1.isAPIError)(error_1)) {
+                    throw error_1;
+                }
+                throw new errors_1.APIError({
+                    error: error_1,
+                    status: 500,
+                    title: "GET failed on ".concat(id),
+                });
+            case 4:
+                if (!!data) return [3 /*break*/, 6];
+                return [4 /*yield*/, model.collection.findOne({
+                        _id: new mongoose_1.default.Types.ObjectId(id),
+                    })];
+            case 5:
+                hiddenDoc = _a.sent();
+                if (!hiddenDoc) {
+                    Sentry.captureMessage("Document ".concat(id, " not found for model ").concat(model.modelName));
+                    error = new errors_1.APIError({
+                        status: 404,
+                        title: "Document ".concat(id, " not found for model ").concat(model.modelName),
+                    });
+                    error.meta = undefined;
+                    throw error;
+                }
+                reason = null;
+                if (hiddenDoc.deleted) {
+                    reason = { deleted: "true" };
+                }
+                else if (hiddenDoc.disabled) {
+                    reason = { disabled: "true" };
+                }
+                else if (hiddenDoc.archived) {
+                    reason = { archived: "true" };
+                }
+                if (!reason) {
+                    error = new errors_1.APIError({
+                        status: 404,
+                        title: "Document ".concat(id, " not found for model ").concat(model.modelName),
+                    });
+                    error.meta = undefined;
+                    throw error;
+                }
+                throw new errors_1.APIError({
+                    disableExternalErrorTracking: true,
+                    meta: reason,
+                    status: 404,
+                    title: "Document ".concat(id, " not found for model ").concat(model.modelName),
+                });
+            case 6: return [2 /*return*/, data];
+        }
+    });
+}); };
+exports.loadDocOr404 = loadDocOr404;

package/dist/docLoader.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/docLoader.test.js

@@ -0,0 +1,137 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g = Object.create((typeof Iterator === "function" ? Iterator : Object).prototype);
+    return g.next = verb(0), g["throw"] = verb(1), g["return"] = verb(2), typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (g && (g = 0, op[0] && (_ = 0)), _) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+// biome-ignore-all lint/suspicious/noExplicitAny: test mock typing
+var bun_test_1 = require("bun:test");
+var docLoader_1 = require("./docLoader");
+var errors_1 = require("./errors");
+(0, bun_test_1.describe)("loadDocOr404", function () {
+    (0, bun_test_1.it)("returns hidden reason metadata when document is deleted", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var model, error_1, apiError;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0:
+                    model = {
+                        collection: { findOne: (0, bun_test_1.mock)(function () { return __awaiter(void 0, void 0, void 0, function () { return __generator(this, function (_a) {
+                                return [2 /*return*/, ({ deleted: true })];
+                            }); }); }) },
+                        findById: (0, bun_test_1.mock)(function () { return ({ exec: (0, bun_test_1.mock)(function () { return __awaiter(void 0, void 0, void 0, function () { return __generator(this, function (_a) {
+                                return [2 /*return*/, null];
+                            }); }); }) }); }),
+                        modelName: "MockModel",
+                    };
+                    _a.label = 1;
+                case 1:
+                    _a.trys.push([1, 3, , 4]);
+                    return [4 /*yield*/, (0, docLoader_1.loadDocOr404)(model, "507f1f77bcf86cd799439011")];
+                case 2:
+                    _a.sent();
+                    bun_test_1.expect.unreachable("expected loadDocOr404 to throw");
+                    return [3 /*break*/, 4];
+                case 3:
+                    error_1 = _a.sent();
+                    (0, bun_test_1.expect)(error_1).toBeInstanceOf(errors_1.APIError);
+                    apiError = error_1;
+                    (0, bun_test_1.expect)(apiError.status).toBe(404);
+                    (0, bun_test_1.expect)(apiError.meta).toEqual({ deleted: "true" });
+                    (0, bun_test_1.expect)(apiError.disableExternalErrorTracking).toBe(true);
+                    return [3 /*break*/, 4];
+                case 4: return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("rethrows APIError from query execution without wrapping", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var original, model;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0:
+                    original = new errors_1.APIError({ status: 400, title: "validation failed" });
+                    model = {
+                        collection: { findOne: (0, bun_test_1.mock)(function () { return __awaiter(void 0, void 0, void 0, function () { return __generator(this, function (_a) {
+                                return [2 /*return*/, null];
+                            }); }); }) },
+                        findById: (0, bun_test_1.mock)(function () { return ({
+                            exec: (0, bun_test_1.mock)(function () { return __awaiter(void 0, void 0, void 0, function () {
+                                return __generator(this, function (_a) {
+                                    throw original;
+                                });
+                            }); }),
+                        }); }),
+                        modelName: "MockModel",
+                    };
+                    return [4 /*yield*/, (0, bun_test_1.expect)((0, docLoader_1.loadDocOr404)(model, "507f1f77bcf86cd799439011")).rejects.toBe(original)];
+                case 1:
+                    _a.sent();
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("returns plain not found when document does not exist", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var model, error_2, apiError;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0:
+                    model = {
+                        collection: { findOne: (0, bun_test_1.mock)(function () { return __awaiter(void 0, void 0, void 0, function () { return __generator(this, function (_a) {
+                                return [2 /*return*/, null];
+                            }); }); }) },
+                        findById: (0, bun_test_1.mock)(function () { return ({ exec: (0, bun_test_1.mock)(function () { return __awaiter(void 0, void 0, void 0, function () { return __generator(this, function (_a) {
+                                return [2 /*return*/, null];
+                            }); }); }) }); }),
+                        modelName: "MockModel",
+                    };
+                    _a.label = 1;
+                case 1:
+                    _a.trys.push([1, 3, , 4]);
+                    return [4 /*yield*/, (0, docLoader_1.loadDocOr404)(model, "507f1f77bcf86cd799439011")];
+                case 2:
+                    _a.sent();
+                    bun_test_1.expect.unreachable("expected loadDocOr404 to throw");
+                    return [3 /*break*/, 4];
+                case 3:
+                    error_2 = _a.sent();
+                    (0, bun_test_1.expect)(error_2).toBeInstanceOf(errors_1.APIError);
+                    apiError = error_2;
+                    (0, bun_test_1.expect)(apiError.status).toBe(404);
+                    (0, bun_test_1.expect)(apiError.meta).toBeUndefined();
+                    return [3 /*break*/, 4];
+                case 4: return [2 /*return*/];
+            }
+        });
+    }); });
+});

package/dist/index.d.ts

@@ -1,3 +1,4 @@
+export * from "./actions";
 export * from "./api";
 export * from "./auth";
 export * from "./betterAuth";
@@ -36,3 +37,4 @@ export * from "./types/consentForm";
 export * from "./types/consentResponse";
 export * from "./utils";
 export * from "./versionCheckPlugin";
+export { z } from "./zodOpenApi";

package/dist/index.js

@@ -14,6 +14,8 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.z = void 0;
+__exportStar(require("./actions"), exports);
 __exportStar(require("./api"), exports);
 __exportStar(require("./auth"), exports);
 __exportStar(require("./betterAuth"), exports);
@@ -52,3 +54,5 @@ __exportStar(require("./types/consentForm"), exports);
 __exportStar(require("./types/consentResponse"), exports);
 __exportStar(require("./utils"), exports);
 __exportStar(require("./versionCheckPlugin"), exports);
+var zodOpenApi_1 = require("./zodOpenApi");
+Object.defineProperty(exports, "z", { enumerable: true, get: function () { return zodOpenApi_1.z; } });