@terreno/api 0.18.0 → 0.20.0

package/dist/openApi.js

@@ -39,13 +39,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.defaultOpenApiErrorResponses = exports.apiErrorContent = void 0;
-exports.getOpenApiMiddleware = getOpenApiMiddleware;
-exports.listOpenApiMiddleware = listOpenApiMiddleware;
-exports.createOpenApiMiddleware = createOpenApiMiddleware;
-exports.patchOpenApiMiddleware = patchOpenApiMiddleware;
-exports.deleteOpenApiMiddleware = deleteOpenApiMiddleware;
-exports.readOpenApiMiddleware = readOpenApiMiddleware;
+exports.readOpenApiMiddleware = exports.deleteOpenApiMiddleware = exports.patchOpenApiMiddleware = exports.createOpenApiMiddleware = exports.listOpenApiMiddleware = exports.getOpenApiMiddleware = exports.defaultOpenApiErrorResponses = exports.apiErrorContent = void 0;
 var flatten_1 = __importDefault(require("lodash/flatten"));
 var merge_1 = __importDefault(require("lodash/merge"));
 var mongoose_to_swagger_1 = __importDefault(require("mongoose-to-swagger"));
@@ -83,7 +77,7 @@ exports.defaultOpenApiErrorResponses = {
     },
 };
 // We repeat this constantly, so we make it a component so we only have to define it once.
-function createAPIErrorComponent(openApi) {
+var createAPIErrorComponent = function (openApi) {
     // Create a schema component called APIError
     openApi === null || openApi === void 0 ? void 0 : openApi.component("schemas", "APIError", {
         properties: {
@@ -144,8 +138,8 @@ function createAPIErrorComponent(openApi) {
         },
         type: "object",
     });
-}
-function getOpenApiMiddleware(model, options) {
+};
+var getOpenApiMiddleware = function (model, options) {
     var _c, _d, _e, _f, _g;
     createAPIErrorComponent(options.openApi);
     if (!((_c = options.openApi) === null || _c === void 0 ? void 0 : _c.path)) {
@@ -175,8 +169,9 @@ function getOpenApiMiddleware(model, options) {
             } }, exports.defaultOpenApiErrorResponses),
         tags: [model.collection.collectionName],
     }, (_g = (_f = options.openApiOverwrite) === null || _f === void 0 ? void 0 : _f.get) !== null && _g !== void 0 ? _g : {}));
-}
-function listOpenApiMiddleware(model, options) {
+};
+exports.getOpenApiMiddleware = getOpenApiMiddleware;
+var listOpenApiMiddleware = function (model, options) {
     var _c, _d, _e, _f, _g, _h;
     if (!((_c = options.openApi) === null || _c === void 0 ? void 0 : _c.path)) {
         return noop;
@@ -316,8 +311,9 @@ function listOpenApiMiddleware(model, options) {
             } }, exports.defaultOpenApiErrorResponses),
         tags: [model.collection.collectionName],
     }, (_h = (_g = options.openApiOverwrite) === null || _g === void 0 ? void 0 : _g.list) !== null && _h !== void 0 ? _h : {}));
-}
-function createOpenApiMiddleware(model, options) {
+};
+exports.listOpenApiMiddleware = listOpenApiMiddleware;
+var createOpenApiMiddleware = function (model, options) {
     var _c, _d, _e, _f, _g;
     if (!((_c = options.openApi) === null || _c === void 0 ? void 0 : _c.path)) {
         return noop;
@@ -355,8 +351,9 @@ function createOpenApiMiddleware(model, options) {
             } }, exports.defaultOpenApiErrorResponses),
         tags: [model.collection.collectionName],
     }, (_g = (_f = options.openApiOverwrite) === null || _f === void 0 ? void 0 : _f.create) !== null && _g !== void 0 ? _g : {}));
-}
-function patchOpenApiMiddleware(model, options) {
+};
+exports.createOpenApiMiddleware = createOpenApiMiddleware;
+var patchOpenApiMiddleware = function (model, options) {
     var _c, _d, _e, _f, _g;
     if (!((_c = options.openApi) === null || _c === void 0 ? void 0 : _c.path)) {
         return noop;
@@ -394,8 +391,9 @@ function patchOpenApiMiddleware(model, options) {
             } }, exports.defaultOpenApiErrorResponses),
         tags: [model.collection.collectionName],
     }, (_g = (_f = options.openApiOverwrite) === null || _f === void 0 ? void 0 : _f.update) !== null && _g !== void 0 ? _g : {}));
-}
-function deleteOpenApiMiddleware(model, options) {
+};
+exports.patchOpenApiMiddleware = patchOpenApiMiddleware;
+var deleteOpenApiMiddleware = function (model, options) {
     var _c, _d, _e, _f, _g;
     if (!((_c = options.openApi) === null || _c === void 0 ? void 0 : _c.path)) {
         return noop;
@@ -409,10 +407,11 @@ function deleteOpenApiMiddleware(model, options) {
             } }, exports.defaultOpenApiErrorResponses),
         tags: [model.collection.collectionName],
     }, (_g = (_f = options.openApiOverwrite) === null || _f === void 0 ? void 0 : _f.delete) !== null && _g !== void 0 ? _g : {}));
-}
+};
+exports.deleteOpenApiMiddleware = deleteOpenApiMiddleware;
 // This is a generic OpenAPI wrapper for a read that returns any object described by `properties`.
 // Useful for endpoints that don't directly map to a model.
-function readOpenApiMiddleware(options, properties, required, queryParameters) {
+var readOpenApiMiddleware = function (options, properties, required, queryParameters) {
     var _c, _d, _e, _f, _g;
     if (!((_c = options.openApi) === null || _c === void 0 ? void 0 : _c.path)) {
         // Just log this once rather than for each middleware.
@@ -438,4 +437,5 @@ function readOpenApiMiddleware(options, properties, required, queryParameters) {
             } }, exports.defaultOpenApiErrorResponses),
         tags: [],
     }, (_g = (_f = options.openApiOverwrite) === null || _f === void 0 ? void 0 : _f.get) !== null && _g !== void 0 ? _g : {}));
-}
+};
+exports.readOpenApiMiddleware = readOpenApiMiddleware;

package/dist/populate.test.js

@@ -328,6 +328,29 @@ var tests_1 = require("./tests");
         (0, bun_test_1.expect)(detail.properties.displayAmount.type).toBe("any");
     });
 });
+(0, bun_test_1.describe)("getOpenApiSpecForModel populate with existing properties", function () {
+    (0, bun_test_1.it)("merges populated properties into a path that already has properties", function () {
+        var result = (0, populate_1.getOpenApiSpecForModel)(tests_1.FoodModel, {
+            populatePaths: [{ path: "likesIds.userId" }],
+        });
+        // likesIds is an array subschema with its own properties already;
+        // populating userId should merge the user properties into the existing structure.
+        (0, bun_test_1.expect)(result.properties.likesIds).toBeDefined();
+        var likesIds = result.properties.likesIds;
+        var items = likesIds.items;
+        (0, bun_test_1.expect)(items.properties.userId).toBeDefined();
+    });
+    (0, bun_test_1.it)("creates intermediate path structure when navigating to nested populate", function () {
+        // eatenBy is defined as [{ ref: "User", type: ObjectId }] - an array of refs.
+        // When we populate eatenBy, the openApiPath resolves through items.
+        var result = (0, populate_1.getOpenApiSpecForModel)(tests_1.FoodModel, {
+            populatePaths: [{ path: "eatenBy" }],
+        });
+        (0, bun_test_1.expect)(result.properties.eatenBy).toBeDefined();
+        var eatenBy = result.properties.eatenBy;
+        (0, bun_test_1.expect)(eatenBy.items).toBeDefined();
+    });
+});
 (0, bun_test_1.describe)("filterKeys (via getOpenApiSpecForModel populatePaths)", function () {
     (0, bun_test_1.it)("filters populated fields using dot-notation keys", function () {
         var result = (0, populate_1.getOpenApiSpecForModel)(tests_1.FoodModel, {

package/dist/realtime/queryMatcher.js

@@ -35,7 +35,6 @@ var __read = (this && this.__read) || function (o, n) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.matchesQuery = void 0;
-// biome-ignore lint/suspicious/noExplicitAny: traversing arbitrary nested document fields by user-supplied dotted path
 var getNestedValue = function (doc, path) {
     var e_1, _a;
     var parts = path.split(".");
@@ -58,7 +57,6 @@ var getNestedValue = function (doc, path) {
     }
     return current;
 };
-// biome-ignore lint/suspicious/noExplicitAny: value may be any document field type (string, number, ObjectId, etc.)
 var normalize = function (value) {
     var _a;
     if (value === null || value === undefined) {
@@ -73,7 +71,6 @@ var normalize = function (value) {
     }
     return value;
 };
-// biome-ignore lint/suspicious/noExplicitAny: rawValue is an arbitrary document field, condition is an arbitrary user query operand
 var matchesCondition = function (rawValue, condition) {
     var e_2, _a;
     var value = normalize(rawValue);
@@ -127,7 +124,6 @@ var matchesCondition = function (rawValue, condition) {
                         return false;
                     }
                     var inValues = operand.map(normalize);
-                    // biome-ignore lint/suspicious/noExplicitAny: normalized value of arbitrary document field
                     if (!inValues.some(function (v) { return v === value || String(v) === String(value); })) {
                         return false;
                     }
@@ -138,7 +134,6 @@ var matchesCondition = function (rawValue, condition) {
                         return false;
                     }
                     var ninValues = operand.map(normalize);
-                    // biome-ignore lint/suspicious/noExplicitAny: normalized value of arbitrary document field
                     if (ninValues.some(function (v) { return v === value || String(v) === String(value); })) {
                         return false;
                     }
@@ -179,7 +174,6 @@ var matchesCondition = function (rawValue, condition) {
  * @param query - MongoDB-style query object
  * @returns true if the document matches all query conditions
  */
-// biome-ignore lint/suspicious/noExplicitAny: doc is arbitrary; query values are arbitrary user-supplied JSON
 var matchesQuery = function (doc, query) {
     var e_3, _a, e_4, _b, e_5, _c;
     try {

package/dist/realtime/queryStore.js

@@ -40,12 +40,9 @@ exports.clearQueryStore = exports.getQuerySubscriptionsForCollection = exports.r
  * Compute a deterministic queryId from collection and query on the server side.
  * This prevents clients from hijacking other subscriptions by providing a colliding queryId.
  */
-var computeQueryId = function (collection, 
-// biome-ignore lint/suspicious/noExplicitAny: MongoDB query filter values are arbitrary user-supplied JSON
-query) {
+var computeQueryId = function (collection, query) {
     var e_1, _a;
     var sortedKeys = Object.keys(query).sort();
-    // biome-ignore lint/suspicious/noExplicitAny: mirrors the input query value shape
     var normalized = {};
     try {
         for (var sortedKeys_1 = __values(sortedKeys), sortedKeys_1_1 = sortedKeys_1.next(); !sortedKeys_1_1.done; sortedKeys_1_1 = sortedKeys_1.next()) {
@@ -71,9 +68,7 @@ var socketQueries = new Map();
  * Register a query subscription for a socket.
  * The socket joins the `query:{queryId}` room (handled by the caller).
  */
-var addQuerySubscription = function (socketId, collection, 
-// biome-ignore lint/suspicious/noExplicitAny: MongoDB query filter values are arbitrary user-supplied JSON
-query, queryId) {
+var addQuerySubscription = function (socketId, collection, query, queryId) {
     var _a;
     querySubscriptions.set(queryId, { collection: collection, query: query, queryId: queryId });
     if (!socketQueries.has(socketId)) {
@@ -161,11 +156,8 @@ exports.removeAllSocketQueries = removeAllSocketQueries;
  * Get all unique query subscriptions for a given collection.
  * Used by the change stream watcher to evaluate which query rooms to emit to.
  */
-var getQuerySubscriptionsForCollection = function (collection
-// biome-ignore lint/suspicious/noExplicitAny: MongoDB query filter values are arbitrary user-supplied JSON
-) {
+var getQuerySubscriptionsForCollection = function (collection) {
     var e_5, _a;
-    // biome-ignore lint/suspicious/noExplicitAny: MongoDB query filter values are arbitrary user-supplied JSON
     var result = [];
     try {
         for (var querySubscriptions_1 = __values(querySubscriptions), querySubscriptions_1_1 = querySubscriptions_1.next(); !querySubscriptions_1_1.done; querySubscriptions_1_1 = querySubscriptions_1.next()) {

package/dist/realtime/realtime.test.js

@@ -2201,6 +2201,22 @@ var createMockSocket = function (decodedToken) {
             },
         };
     };
+    var invokeRegisteredChangeHandler = function (mockStream, event) { return __awaiter(void 0, void 0, void 0, function () {
+        var changeHandler;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0:
+                    changeHandler = mockStream.listeners.get("change");
+                    if (!changeHandler) {
+                        throw new Error("expected change handler");
+                    }
+                    return [4 /*yield*/, changeHandler(event)];
+                case 1:
+                    _a.sent();
+                    return [2 /*return*/];
+            }
+        });
+    }); };
     var createMockIo = function () {
         var rooms = new Map();
         var sockets = new Map();
@@ -2272,7 +2288,7 @@ var createMockSocket = function (decodedToken) {
         });
     }); });
     (0, bun_test_1.it)("handles change events for registered models", function () { return __awaiter(void 0, void 0, void 0, function () {
-        var mockStream, mockDb, startChangeStreamWatcher, io, changeHandler;
+        var mockStream, mockDb, startChangeStreamWatcher, io;
         return __generator(this, function (_a) {
             switch (_a.label) {
                 case 0:
@@ -2304,22 +2320,22 @@ var createMockSocket = function (decodedToken) {
                     startChangeStreamWatcher = (_a.sent()).startChangeStreamWatcher;
                     io = createMockIo();
                     startChangeStreamWatcher(io, {}, true);
-                    changeHandler = mockStream.listeners.get("change");
-                    (0, bun_test_1.expect)(changeHandler).toBeDefined();
-                    return [4 /*yield*/, changeHandler({
+                    // Trigger an insert change event
+                    return [4 /*yield*/, invokeRegisteredChangeHandler(mockStream, {
                             documentKey: { _id: "doc-1" },
                             fullDocument: { _id: "doc-1", name: "Test Todo" },
                             ns: { coll: "todos" },
                             operationType: "insert",
                         })];
                 case 2:
+                    // Trigger an insert change event
                     _a.sent();
                     return [2 /*return*/];
             }
         });
     }); });
     (0, bun_test_1.it)("skips events for unregistered collections", function () { return __awaiter(void 0, void 0, void 0, function () {
-        var mockStream, mockDb, startChangeStreamWatcher, io, changeHandler;
+        var mockStream, mockDb, startChangeStreamWatcher, io;
         return __generator(this, function (_a) {
             switch (_a.label) {
                 case 0:
@@ -2333,9 +2349,8 @@ var createMockSocket = function (decodedToken) {
                     startChangeStreamWatcher = (_a.sent()).startChangeStreamWatcher;
                     io = createMockIo();
                     startChangeStreamWatcher(io, {}, true);
-                    changeHandler = mockStream.listeners.get("change");
                     // Trigger for an unregistered collection — should not throw
-                    return [4 /*yield*/, changeHandler({
+                    return [4 /*yield*/, invokeRegisteredChangeHandler(mockStream, {
                             documentKey: { _id: "doc-1" },
                             fullDocument: { _id: "doc-1" },
                             ns: { coll: "unknown_collection" },
@@ -2349,7 +2364,7 @@ var createMockSocket = function (decodedToken) {
         });
     }); });
     (0, bun_test_1.it)("skips events when method is not enabled for the model", function () { return __awaiter(void 0, void 0, void 0, function () {
-        var mockStream, mockDb, startChangeStreamWatcher, io, changeHandler;
+        var mockStream, mockDb, startChangeStreamWatcher, io;
         return __generator(this, function (_a) {
             switch (_a.label) {
                 case 0:
@@ -2381,9 +2396,8 @@ var createMockSocket = function (decodedToken) {
                     startChangeStreamWatcher = (_a.sent()).startChangeStreamWatcher;
                     io = createMockIo();
                     startChangeStreamWatcher(io, {}, true);
-                    changeHandler = mockStream.listeners.get("change");
                     // Update event should be skipped because "update" not in methods
-                    return [4 /*yield*/, changeHandler({
+                    return [4 /*yield*/, invokeRegisteredChangeHandler(mockStream, {
                             documentKey: { _id: "doc-1" },
                             fullDocument: { _id: "doc-1", name: "Updated" },
                             ns: { coll: "todos" },
@@ -2398,7 +2412,7 @@ var createMockSocket = function (decodedToken) {
         });
     }); });
     (0, bun_test_1.it)("handles delete events for owner-strategy models", function () { return __awaiter(void 0, void 0, void 0, function () {
-        var mockStream, mockDb, startChangeStreamWatcher, io, changeHandler;
+        var mockStream, mockDb, startChangeStreamWatcher, io;
         return __generator(this, function (_a) {
             switch (_a.label) {
                 case 0:
@@ -2430,9 +2444,8 @@ var createMockSocket = function (decodedToken) {
                     startChangeStreamWatcher = (_a.sent()).startChangeStreamWatcher;
                     io = createMockIo();
                     startChangeStreamWatcher(io, {}, true);
-                    changeHandler = mockStream.listeners.get("change");
                     // Hard delete (no fullDocument)
-                    return [4 /*yield*/, changeHandler({
+                    return [4 /*yield*/, invokeRegisteredChangeHandler(mockStream, {
                             documentKey: { _id: "doc-1" },
                             ns: { coll: "todos" },
                             operationType: "delete",
@@ -2445,7 +2458,7 @@ var createMockSocket = function (decodedToken) {
         });
     }); });
     (0, bun_test_1.it)("handles delete events for broadcast-strategy models", function () { return __awaiter(void 0, void 0, void 0, function () {
-        var mockStream, mockDb, startChangeStreamWatcher, io, changeHandler;
+        var mockStream, mockDb, startChangeStreamWatcher, io;
         return __generator(this, function (_a) {
             switch (_a.label) {
                 case 0:
@@ -2477,9 +2490,8 @@ var createMockSocket = function (decodedToken) {
                     startChangeStreamWatcher = (_a.sent()).startChangeStreamWatcher;
                     io = createMockIo();
                     startChangeStreamWatcher(io, {}, true);
-                    changeHandler = mockStream.listeners.get("change");
                     // Hard delete for broadcast strategy
-                    return [4 /*yield*/, changeHandler({
+                    return [4 /*yield*/, invokeRegisteredChangeHandler(mockStream, {
                             documentKey: { _id: "doc-1" },
                             ns: { coll: "broadcasts" },
                             operationType: "delete",
@@ -2492,7 +2504,7 @@ var createMockSocket = function (decodedToken) {
         });
     }); });
     (0, bun_test_1.it)("includes updatedFields in event for update operations", function () { return __awaiter(void 0, void 0, void 0, function () {
-        var mockStream, mockDb, startChangeStreamWatcher, io, changeHandler;
+        var mockStream, mockDb, startChangeStreamWatcher, io;
         return __generator(this, function (_a) {
             switch (_a.label) {
                 case 0:
@@ -2524,8 +2536,7 @@ var createMockSocket = function (decodedToken) {
                     startChangeStreamWatcher = (_a.sent()).startChangeStreamWatcher;
                     io = createMockIo();
                     startChangeStreamWatcher(io, {}, true);
-                    changeHandler = mockStream.listeners.get("change");
-                    return [4 /*yield*/, changeHandler({
+                    return [4 /*yield*/, invokeRegisteredChangeHandler(mockStream, {
                             documentKey: { _id: "doc-1" },
                             fullDocument: { _id: "doc-1", name: "Updated", status: "done" },
                             ns: { coll: "todos" },
@@ -2563,7 +2574,7 @@ var createMockSocket = function (decodedToken) {
         });
     }); });
     (0, bun_test_1.it)("respects ignoredOperations config", function () { return __awaiter(void 0, void 0, void 0, function () {
-        var mockStream, mockDb, startChangeStreamWatcher, io, changeHandler;
+        var mockStream, mockDb, startChangeStreamWatcher, io;
         return __generator(this, function (_a) {
             switch (_a.label) {
                 case 0:
@@ -2595,9 +2606,8 @@ var createMockSocket = function (decodedToken) {
                     startChangeStreamWatcher = (_a.sent()).startChangeStreamWatcher;
                     io = createMockIo();
                     startChangeStreamWatcher(io, { ignoredOperations: ["insert"] }, true);
-                    changeHandler = mockStream.listeners.get("change");
                     // This insert should be skipped because "insert" is ignored
-                    return [4 /*yield*/, changeHandler({
+                    return [4 /*yield*/, invokeRegisteredChangeHandler(mockStream, {
                             documentKey: { _id: "doc-1" },
                             fullDocument: { _id: "doc-1" },
                             ns: { coll: "todos" },
@@ -2611,7 +2621,7 @@ var createMockSocket = function (decodedToken) {
         });
     }); });
     (0, bun_test_1.it)("skips events with no collectionName or docId", function () { return __awaiter(void 0, void 0, void 0, function () {
-        var mockStream, mockDb, startChangeStreamWatcher, io, changeHandler;
+        var mockStream, mockDb, startChangeStreamWatcher, io;
         return __generator(this, function (_a) {
             switch (_a.label) {
                 case 0:
@@ -2625,9 +2635,8 @@ var createMockSocket = function (decodedToken) {
                     startChangeStreamWatcher = (_a.sent()).startChangeStreamWatcher;
                     io = createMockIo();
                     startChangeStreamWatcher(io, {}, true);
-                    changeHandler = mockStream.listeners.get("change");
                     // Missing ns.coll
-                    return [4 /*yield*/, changeHandler({
+                    return [4 /*yield*/, invokeRegisteredChangeHandler(mockStream, {
                             documentKey: { _id: "doc-1" },
                             ns: {},
                             operationType: "insert",
@@ -2636,7 +2645,7 @@ var createMockSocket = function (decodedToken) {
                     // Missing ns.coll
                     _a.sent();
                     // Missing documentKey
-                    return [4 /*yield*/, changeHandler({
+                    return [4 /*yield*/, invokeRegisteredChangeHandler(mockStream, {
                             documentKey: {},
                             ns: { coll: "todos" },
                             operationType: "insert",
@@ -2649,7 +2658,7 @@ var createMockSocket = function (decodedToken) {
         });
     }); });
     (0, bun_test_1.it)("skips non-CRUD operation types", function () { return __awaiter(void 0, void 0, void 0, function () {
-        var mockStream, mockDb, startChangeStreamWatcher, io, changeHandler;
+        var mockStream, mockDb, startChangeStreamWatcher, io;
         return __generator(this, function (_a) {
             switch (_a.label) {
                 case 0:
@@ -2663,9 +2672,8 @@ var createMockSocket = function (decodedToken) {
                     startChangeStreamWatcher = (_a.sent()).startChangeStreamWatcher;
                     io = createMockIo();
                     startChangeStreamWatcher(io, {}, true);
-                    changeHandler = mockStream.listeners.get("change");
                     // "drop" is not in our pipeline filter, should be skipped
-                    return [4 /*yield*/, changeHandler({
+                    return [4 /*yield*/, invokeRegisteredChangeHandler(mockStream, {
                             operationType: "drop",
                         })];
                 case 2:
@@ -2721,7 +2729,7 @@ var createMockSocket = function (decodedToken) {
         });
     }); });
     (0, bun_test_1.it)("catches errors thrown in the change handler", function () { return __awaiter(void 0, void 0, void 0, function () {
-        var mockStream, mockDb, startChangeStreamWatcher, emissions, mockSocket, rooms, sockets, io, changeHandler;
+        var mockStream, mockDb, startChangeStreamWatcher, emissions, mockSocket, rooms, sockets, io;
         return __generator(this, function (_a) {
             switch (_a.label) {
                 case 0:
@@ -2776,9 +2784,8 @@ var createMockSocket = function (decodedToken) {
                         to: function () { return ({ emit: function () { } }); },
                     };
                     startChangeStreamWatcher(io, {}, true);
-                    changeHandler = mockStream.listeners.get("change");
                     // Should not throw even though permission check throws
-                    return [4 /*yield*/, changeHandler({
+                    return [4 /*yield*/, invokeRegisteredChangeHandler(mockStream, {
                             documentKey: { _id: "doc-1" },
                             fullDocument: { _id: "doc-1", name: "Test" },
                             ns: { coll: "todos" },
@@ -2862,7 +2869,7 @@ var createMockSocket = function (decodedToken) {
         });
     }); });
     var makeServer = function () {
-        var http = require("http");
+        var http = require("node:http");
         var server = http.createServer();
         servers.push(server);
         return server;
@@ -2925,7 +2932,7 @@ var createMockSocket = function (decodedToken) {
         });
     }); });
     var makeServer = function () {
-        var http = require("http");
+        var http = require("node:http");
         var server = http.createServer();
         servers.push(server);
         return server;

package/dist/secretProviders.d.ts

@@ -15,7 +15,11 @@ import type { SecretProvider } from "./configurationPlugin";
  */
 export declare class EnvSecretProvider implements SecretProvider {
     name: string;
-    getSecret(secretName: string): Promise<string | null>;
+    /**
+     * Resolve a secret from an environment variable. Environment variables have no
+     * versions, so the optional `version` parameter is ignored.
+     */
+    getSecret(secretName: string, _version?: string): Promise<string | null>;
 }
 /**
  * Options for GcpSecretProvider.
@@ -43,5 +47,78 @@ export declare class GcpSecretProvider implements SecretProvider {
     private client;
     constructor(options: GcpSecretProviderOptions);
     private getClient;
-    getSecret(secretName: string): Promise<string | null>;
+    /**
+     * Resolve a secret from Google Cloud Secret Manager.
+     *
+     * @param secretName - A short secret id (e.g. "openai-api-key") or a full
+     *   resource path (e.g. "projects/p/secrets/s" or
+     *   "projects/p/secrets/s/versions/3").
+     * @param version - Optional version to resolve when `secretName` is a short id
+     *   (e.g. "3"). Defaults to "latest". Ignored when `secretName` already
+     *   contains an explicit `/versions/...` suffix.
+     */
+    getSecret(secretName: string, version?: string): Promise<string | null>;
+}
+/**
+ * Secret provider that delegates to an ordered list of providers, returning the
+ * first non-null result.
+ *
+ * A provider that throws is warn-logged (secret name only — never the value) and
+ * resolution falls through to the next provider. This makes it easy to compose a
+ * primary provider with a fallback, e.g. GCP with an environment-variable
+ * fallback:
+ *
+ * @example
+ * ```typescript
+ * const provider = new CompositeSecretProvider([
+ *   new GcpSecretProvider({projectId: "my-project"}),
+ *   new EnvSecretProvider(),
+ * ]);
+ * const key = await provider.getSecret("openai-api-key");
+ * ```
+ */
+export declare class CompositeSecretProvider implements SecretProvider {
+    name: string;
+    private providers;
+    constructor(providers: SecretProvider[]);
+    getSecret(secretName: string, version?: string): Promise<string | null>;
+}
+/**
+ * Options for CachingSecretProvider.
+ */
+export interface CachingSecretProviderOptions {
+    /** Time-to-live for cached values, in milliseconds. Defaults to 60_000 (1 minute). */
+    ttlMs?: number;
+}
+/**
+ * Secret provider that wraps any provider with an in-memory TTL cache.
+ *
+ * Cache entries are keyed by `secretName@version` so that pinned versions are
+ * cached independently. `null` results (secret not found) are cached too, to
+ * avoid hammering the underlying provider for missing secrets. Secret values are
+ * never logged.
+ *
+ * Use `clear()` to drop the entire cache (e.g. on rotation) or `clearKey()` to
+ * invalidate a single secret.
+ *
+ * @example
+ * ```typescript
+ * const provider = new CachingSecretProvider(
+ *   new CompositeSecretProvider([gcp, env]),
+ *   {ttlMs: 30_000}
+ * );
+ * ```
+ */
+export declare class CachingSecretProvider implements SecretProvider {
+    name: string;
+    private provider;
+    private ttlMs;
+    private cache;
+    constructor(provider: SecretProvider, options?: CachingSecretProviderOptions);
+    private cacheKey;
+    getSecret(secretName: string, version?: string): Promise<string | null>;
+    /** Clears the entire cache. Useful on secret rotation and in tests. */
+    clear(): void;
+    /** Invalidates a single cached secret by name (and optional version). */
+    clearKey(secretName: string, version?: string): void;
 }