@terreno/api 0.20.2 → 0.22.0

package/dist/middleware.test.js

@@ -32,10 +32,52 @@ var __importStar = (this && this.__importStar) || (function () {
         return result;
     };
 })();
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g = Object.create((typeof Iterator === "function" ? Iterator : Object).prototype);
+    return g.next = verb(0), g["throw"] = verb(1), g["return"] = verb(2), typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (g && (g = 0, op[0] && (_ = 0)), _) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
 Object.defineProperty(exports, "__esModule", { value: true });
 var bun_test_1 = require("bun:test");
 var Sentry = __importStar(require("@sentry/bun"));
+var express_1 = __importDefault(require("express"));
+var supertest_1 = __importDefault(require("supertest"));
 var middleware_1 = require("./middleware");
+var requestContext_1 = require("./requestContext");
 var buildReq = function (headers) {
     return {
         get: function (name) { return headers[name]; },
@@ -80,3 +122,120 @@ var buildNext = function () { return (0, bun_test_1.mock)(function () { }); };
         (0, bun_test_1.expect)(next.mock.calls[0]).toHaveLength(0);
     });
 });
+(0, bun_test_1.describe)("jsonResponseRequestIdMiddleware", function () {
+    var buildStackedApp = function () {
+        var app = (0, express_1.default)();
+        app.use(requestContext_1.requestContextMiddleware);
+        app.use(middleware_1.jsonResponseRequestIdMiddleware);
+        app.get("/object", function (_req, res) {
+            return res.json({ hello: "world" });
+        });
+        app.get("/array", function (_req, res) {
+            return res.json([1, 2]);
+        });
+        app.get("/openapi.json", function (_req, res) {
+            return res.json({ openapi: "3.0.0", paths: {} });
+        });
+        app.get("/openapi/components/schemas/Food.json", function (_req, res) {
+            return res.json({ description: "A food", type: "object" });
+        });
+        app.get("/openapi/validate", function (_req, res) {
+            return res.json({ document: { openapi: "3.0.0" }, valid: true });
+        });
+        return app;
+    };
+    (0, bun_test_1.it)("adds requestId to object JSON bodies and matches X-Request-ID header", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var app, res;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0:
+                    app = buildStackedApp();
+                    return [4 /*yield*/, (0, supertest_1.default)(app).get("/object").expect(200)];
+                case 1:
+                    res = _a.sent();
+                    (0, bun_test_1.expect)(res.body.hello).toBe("world");
+                    (0, bun_test_1.expect)(res.body.requestId).toBeDefined();
+                    (0, bun_test_1.expect)(res.body.requestId).toBe(res.headers["x-request-id"]);
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("does not wrap JSON array bodies", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var app, res;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0:
+                    app = buildStackedApp();
+                    return [4 /*yield*/, (0, supertest_1.default)(app).get("/array").expect(200)];
+                case 1:
+                    res = _a.sent();
+                    (0, bun_test_1.expect)(res.body).toEqual([1, 2]);
+                    (0, bun_test_1.expect)(res.headers["x-request-id"]).toBeDefined();
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("does not inject requestId into GET /openapi.json bodies", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var app, res;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0:
+                    app = buildStackedApp();
+                    return [4 /*yield*/, (0, supertest_1.default)(app).get("/openapi.json").expect(200)];
+                case 1:
+                    res = _a.sent();
+                    (0, bun_test_1.expect)(res.body).toEqual({ openapi: "3.0.0", paths: {} });
+                    (0, bun_test_1.expect)(res.body.requestId).toBeUndefined();
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("does not inject requestId into GET /openapi/components/...json bodies", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var app, res;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0:
+                    app = buildStackedApp();
+                    return [4 /*yield*/, (0, supertest_1.default)(app).get("/openapi/components/schemas/Food.json").expect(200)];
+                case 1:
+                    res = _a.sent();
+                    (0, bun_test_1.expect)(res.body).toEqual({ description: "A food", type: "object" });
+                    (0, bun_test_1.expect)(res.body.requestId).toBeUndefined();
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("does not inject requestId into GET /openapi/validate bodies", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var app, res;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0:
+                    app = buildStackedApp();
+                    return [4 /*yield*/, (0, supertest_1.default)(app).get("/openapi/validate").expect(200)];
+                case 1:
+                    res = _a.sent();
+                    (0, bun_test_1.expect)(res.body).toEqual({ document: { openapi: "3.0.0" }, valid: true });
+                    (0, bun_test_1.expect)(res.body.requestId).toBeUndefined();
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("uses incoming X-Request-ID on wrapped object responses", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var app, res;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0:
+                    app = buildStackedApp();
+                    return [4 /*yield*/, (0, supertest_1.default)(app)
+                            .get("/object")
+                            .set("X-Request-ID", "client-rid-99")
+                            .expect(200)];
+                case 1:
+                    res = _a.sent();
+                    (0, bun_test_1.expect)(res.body.requestId).toBe("client-rid-99");
+                    (0, bun_test_1.expect)(res.headers["x-request-id"]).toBe("client-rid-99");
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+});

package/dist/models/consentForm.js

@@ -2,6 +2,7 @@
 var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
+var _a;
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ConsentForm = void 0;
 var mongoose_1 = __importDefault(require("mongoose"));
@@ -120,4 +121,4 @@ consentFormSchema.plugin(plugins_1.createdUpdatedPlugin);
 consentFormSchema.plugin(plugins_1.isDeletedPlugin);
 consentFormSchema.plugin(plugins_1.findOneOrNone);
 consentFormSchema.plugin(plugins_1.findExactlyOne);
-exports.ConsentForm = mongoose_1.default.model("ConsentForm", consentFormSchema);
+exports.ConsentForm = (_a = mongoose_1.default.models.ConsentForm) !== null && _a !== void 0 ? _a : mongoose_1.default.model("ConsentForm", consentFormSchema);

package/dist/models/consentResponse.js

@@ -2,6 +2,7 @@
 var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
+var _a;
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ConsentResponse = void 0;
 var mongoose_1 = __importDefault(require("mongoose"));
@@ -70,4 +71,4 @@ consentResponseSchema.plugin(plugins_1.createdUpdatedPlugin);
 consentResponseSchema.plugin(plugins_1.isDeletedPlugin);
 consentResponseSchema.plugin(plugins_1.findOneOrNone);
 consentResponseSchema.plugin(plugins_1.findExactlyOne);
-exports.ConsentResponse = mongoose_1.default.model("ConsentResponse", consentResponseSchema);
+exports.ConsentResponse = (_a = mongoose_1.default.models.ConsentResponse) !== null && _a !== void 0 ? _a : mongoose_1.default.model("ConsentResponse", consentResponseSchema);

package/dist/models/versionConfig.js

@@ -2,6 +2,7 @@
 var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
+var _a;
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.VersionConfig = void 0;
 var mongoose_1 = __importDefault(require("mongoose"));
@@ -71,4 +72,4 @@ versionConfigSchema.plugin(plugins_1.createdUpdatedPlugin);
 versionConfigSchema.plugin(plugins_1.isDeletedPlugin);
 versionConfigSchema.plugin(plugins_1.findOneOrNone);
 versionConfigSchema.plugin(plugins_1.findExactlyOne);
-exports.VersionConfig = mongoose_1.default.model("VersionConfig", versionConfigSchema);
+exports.VersionConfig = (_a = mongoose_1.default.models.VersionConfig) !== null && _a !== void 0 ? _a : mongoose_1.default.model("VersionConfig", versionConfigSchema);

package/dist/openApi.test.js

@@ -70,10 +70,9 @@ Object.defineProperty(exports, "__esModule", { value: true });
 var bun_test_1 = require("bun:test");
 var supertest_1 = __importDefault(require("supertest"));
 var api_1 = require("./api");
-var auth_1 = require("./auth");
-var expressServer_1 = require("./expressServer");
 var openApi_1 = require("./openApi");
 var permissions_1 = require("./permissions");
+var terrenoApp_1 = require("./terrenoApp");
 var tests_1 = require("./tests");
 function getMessageSummaryOpenApiMiddleware(options) {
     if (!options.openApi) {
@@ -136,13 +135,11 @@ function addRoutes(router, options) {
         return __generator(this, function (_a) {
             process.env.REFRESH_TOKEN_SECRET = "testsecret1234";
             process.env.ENABLE_SWAGGER = "true";
-            app = (0, expressServer_1.setupServer)({
-                addRoutes: addRoutes,
+            app = new terrenoApp_1.TerrenoApp({
+                configureApp: addRoutes,
                 skipListen: true,
                 userModel: tests_1.UserModel,
-            });
-            (0, auth_1.setupAuth)(app, tests_1.UserModel);
-            (0, auth_1.addAuthRoutes)(app, tests_1.UserModel);
+            }).build();
             return [2 /*return*/];
         });
     }); });
@@ -342,13 +339,11 @@ function addRoutesPopulate(router, options) {
         return __generator(this, function (_a) {
             process.env.REFRESH_TOKEN_SECRET = "testsecret1234";
             process.env.ENABLE_SWAGGER = "false";
-            app = (0, expressServer_1.setupServer)({
-                addRoutes: addRoutes,
+            app = new terrenoApp_1.TerrenoApp({
+                configureApp: addRoutes,
                 skipListen: true,
                 userModel: tests_1.UserModel,
-            });
-            (0, auth_1.setupAuth)(app, tests_1.UserModel);
-            (0, auth_1.addAuthRoutes)(app, tests_1.UserModel);
+            }).build();
             return [2 /*return*/];
         });
     }); });
@@ -371,13 +366,11 @@ function addRoutesPopulate(router, options) {
     (0, bun_test_1.beforeEach)(function () { return __awaiter(void 0, void 0, void 0, function () {
         return __generator(this, function (_a) {
             process.env.REFRESH_TOKEN_SECRET = "testsecret1234";
-            app = (0, expressServer_1.setupServer)({
-                addRoutes: addRoutesPopulate,
+            app = new terrenoApp_1.TerrenoApp({
+                configureApp: addRoutesPopulate,
                 skipListen: true,
                 userModel: tests_1.UserModel,
-            });
-            (0, auth_1.setupAuth)(app, tests_1.UserModel);
-            (0, auth_1.addAuthRoutes)(app, tests_1.UserModel);
+            }).build();
             return [2 /*return*/];
         });
     }); });

package/dist/openApiBuilder.d.ts

@@ -272,6 +272,24 @@ export declare class OpenApiMiddlewareBuilder {
      * ```
      */
     withSummary(summary: string): this;
+    /**
+     * Sets an explicit `operationId` for the OpenAPI operation.
+     *
+     * The `operationId` is a unique string used to identify an operation. Client and SDK
+     * generators (e.g. RTK Query codegen) derive generated function and hook names from it,
+     * so setting it keeps generated names stable and readable for routes whose URL path would
+     * otherwise produce unwieldy names (e.g. deeply nested routes). It must be unique across
+     * the whole OpenAPI document.
+     *
+     * @param operationId - Unique operation identifier (e.g. "getUserStats")
+     * @returns The builder instance for chaining
+     *
+     * @example
+     * ```typescript
+     * builder.withOperationId("getUserStats");
+     * ```
+     */
+    withOperationId(operationId: string): this;
     /**
      * Sets the description for the OpenAPI operation.
      *

package/dist/openApiBuilder.js

@@ -121,6 +121,27 @@ var OpenApiMiddlewareBuilder = /** @class */ (function () {
         this.config.summary = summary;
         return this;
     };
+    /**
+     * Sets an explicit `operationId` for the OpenAPI operation.
+     *
+     * The `operationId` is a unique string used to identify an operation. Client and SDK
+     * generators (e.g. RTK Query codegen) derive generated function and hook names from it,
+     * so setting it keeps generated names stable and readable for routes whose URL path would
+     * otherwise produce unwieldy names (e.g. deeply nested routes). It must be unique across
+     * the whole OpenAPI document.
+     *
+     * @param operationId - Unique operation identifier (e.g. "getUserStats")
+     * @returns The builder instance for chaining
+     *
+     * @example
+     * ```typescript
+     * builder.withOperationId("getUserStats");
+     * ```
+     */
+    OpenApiMiddlewareBuilder.prototype.withOperationId = function (operationId) {
+        this.config.operationId = operationId;
+        return this;
+    };
     /**
      * Sets the description for the OpenAPI operation.
      *

package/dist/openApiBuilder.test.js

@@ -54,10 +54,9 @@ Object.defineProperty(exports, "__esModule", { value: true });
 var bun_test_1 = require("bun:test");
 var supertest_1 = __importDefault(require("supertest"));
 var api_1 = require("./api");
-var auth_1 = require("./auth");
-var expressServer_1 = require("./expressServer");
 var openApiBuilder_1 = require("./openApiBuilder");
 var permissions_1 = require("./permissions");
+var terrenoApp_1 = require("./terrenoApp");
 var tests_1 = require("./tests");
 function addRoutesWithBuilder(router, options) {
     var _this = this;
@@ -65,6 +64,7 @@ function addRoutesWithBuilder(router, options) {
     var statsMiddleware = (0, openApiBuilder_1.createOpenApiBuilder)(options !== null && options !== void 0 ? options : {})
         .withTags(["Stats"])
         .withSummary("Get food statistics")
+        .withOperationId("getFoodStats")
         .withDescription("Returns aggregated statistics about food items")
         .withQueryParameter("category", { type: "string" }, {
         description: "Filter by food category",
@@ -168,13 +168,11 @@ function addRoutesWithBuilder(router, options) {
         return __generator(this, function (_a) {
             process.env.REFRESH_TOKEN_SECRET = "testsecret1234";
             process.env.ENABLE_SWAGGER = "true";
-            app = (0, expressServer_1.setupServer)({
-                addRoutes: addRoutesWithBuilder,
+            app = new terrenoApp_1.TerrenoApp({
+                configureApp: addRoutesWithBuilder,
                 skipListen: true,
                 userModel: tests_1.UserModel,
-            });
-            (0, auth_1.setupAuth)(app, tests_1.UserModel);
-            (0, auth_1.addAuthRoutes)(app, tests_1.UserModel);
+            }).build();
             return [2 /*return*/];
         });
     }); });
@@ -223,6 +221,21 @@ function addRoutesWithBuilder(router, options) {
                 }
             });
         }); });
+        (0, bun_test_1.it)("includes the explicit operationId in OpenAPI spec", function () { return __awaiter(void 0, void 0, void 0, function () {
+            var res, statsPath;
+            return __generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0:
+                        server = (0, supertest_1.default)(app);
+                        return [4 /*yield*/, server.get("/openapi.json").expect(200)];
+                    case 1:
+                        res = _a.sent();
+                        statsPath = res.body.paths["/food/stats"];
+                        (0, bun_test_1.expect)(statsPath.get.operationId).toBe("getFoodStats");
+                        return [2 /*return*/];
+                }
+            });
+        }); });
         (0, bun_test_1.it)("includes request body schema in OpenAPI spec", function () { return __awaiter(void 0, void 0, void 0, function () {
             var res, reportsPath, requestBody, schema;
             return __generator(this, function (_a) {
@@ -367,7 +380,11 @@ function addRoutesWithBuilder(router, options) {
                         return [4 /*yield*/, server.get("/food/stats").expect(200)];
                     case 1:
                         res = _a.sent();
-                        (0, bun_test_1.expect)(res.body).toEqual({ avgCalories: 250, count: 10 });
+                        (0, bun_test_1.expect)(res.body).toEqual({
+                            avgCalories: 250,
+                            count: 10,
+                            requestId: res.headers["x-request-id"],
+                        });
                         return [2 /*return*/];
                 }
             });
@@ -384,7 +401,10 @@ function addRoutesWithBuilder(router, options) {
                                 .expect(201)];
                     case 1:
                         res = _a.sent();
-                        (0, bun_test_1.expect)(res.body).toEqual({ reportId: "report-123" });
+                        (0, bun_test_1.expect)(res.body).toEqual({
+                            reportId: "report-123",
+                            requestId: res.headers["x-request-id"],
+                        });
                         return [2 /*return*/];
                 }
             });
@@ -414,7 +434,11 @@ function addRoutesWithBuilder(router, options) {
                         return [4 /*yield*/, server.get("/food/categories/cat-123").expect(200)];
                     case 1:
                         res = _a.sent();
-                        (0, bun_test_1.expect)(res.body).toEqual({ id: "cat-123", name: "Fruits" });
+                        (0, bun_test_1.expect)(res.body).toEqual({
+                            id: "cat-123",
+                            name: "Fruits",
+                            requestId: res.headers["x-request-id"],
+                        });
                         return [2 /*return*/];
                 }
             });

package/dist/permissions.test.js

@@ -35,22 +35,6 @@ var __generator = (this && this.__generator) || function (thisArg, body) {
         if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
     }
 };
-var __read = (this && this.__read) || function (o, n) {
-    var m = typeof Symbol === "function" && o[Symbol.iterator];
-    if (!m) return o;
-    var i = m.call(o), r, ar = [], e;
-    try {
-        while ((n === void 0 || n-- > 0) && !(r = i.next()).done) ar.push(r.value);
-    }
-    catch (error) { e = { error: error }; }
-    finally {
-        try {
-            if (r && !r.done && (m = i["return"])) m.call(i);
-        }
-        finally { if (e) throw e.error; }
-    }
-    return ar;
-};
 var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
@@ -66,30 +50,13 @@ var tests_1 = require("./tests");
     var server;
     var app;
     (0, bun_test_1.beforeEach)(function () { return __awaiter(void 0, void 0, void 0, function () {
-        var _a, admin, notAdmin;
-        return __generator(this, function (_b) {
-            switch (_b.label) {
+        return __generator(this, function (_a) {
+            switch (_a.label) {
                 case 0:
                     process.env.REFRESH_TOKEN_SECRET = "testsecret1234";
-                    return [4 /*yield*/, (0, tests_1.setupDb)()];
+                    return [4 /*yield*/, (0, tests_1.setupTestData)()];
                 case 1:
-                    _a = __read.apply(void 0, [_b.sent(), 2]), admin = _a[0], notAdmin = _a[1];
-                    return [4 /*yield*/, Promise.all([
-                            tests_1.FoodModel.create({
-                                calories: 1,
-                                created: new Date(),
-                                name: "Spinach",
-                                ownerId: notAdmin._id,
-                            }),
-                            tests_1.FoodModel.create({
-                                calories: 100,
-                                created: Date.now() - 10,
-                                name: "Apple",
-                                ownerId: admin._id,
-                            }),
-                        ])];
-                case 2:
-                    _b.sent();
+                    _a.sent();
                     app = (0, tests_1.getBaseServer)();
                     (0, auth_1.setupAuth)(app, tests_1.UserModel);
                     (0, auth_1.addAuthRoutes)(app, tests_1.UserModel);
@@ -125,7 +92,7 @@ var tests_1 = require("./tests");
                     case 0: return [4 /*yield*/, server.get("/food").expect(200)];
                     case 1:
                         res = _a.sent();
-                        (0, bun_test_1.expect)(res.body.data).toHaveLength(2);
+                        (0, bun_test_1.expect)(res.body.data).toHaveLength(4);
                         return [2 /*return*/];
                 }
             });
@@ -137,7 +104,7 @@ var tests_1 = require("./tests");
                     case 0: return [4 /*yield*/, server.get("/food").expect(200)];
                     case 1:
                         res = _a.sent();
-                        (0, bun_test_1.expect)(res.body.data).toHaveLength(2);
+                        (0, bun_test_1.expect)(res.body.data).toHaveLength(4);
                         return [4 /*yield*/, server.get("/food/".concat(res.body.data[0]._id)).expect(200)];
                     case 2:
                         res2 = _a.sent();
@@ -213,7 +180,7 @@ var tests_1 = require("./tests");
                     case 0: return [4 /*yield*/, agent.get("/food").expect(200)];
                     case 1:
                         res = _a.sent();
-                        (0, bun_test_1.expect)(res.body.data).toHaveLength(2);
+                        (0, bun_test_1.expect)(res.body.data).toHaveLength(4);
                         return [2 /*return*/];
                 }
             });
@@ -225,7 +192,7 @@ var tests_1 = require("./tests");
                     case 0: return [4 /*yield*/, agent.get("/food").expect(200)];
                     case 1:
                         res = _a.sent();
-                        (0, bun_test_1.expect)(res.body.data).toHaveLength(2);
+                        (0, bun_test_1.expect)(res.body.data).toHaveLength(4);
                         return [4 /*yield*/, server.get("/food/".concat(res.body.data[0]._id)).expect(200)];
                     case 2:
                         res2 = _a.sent();
@@ -326,7 +293,7 @@ var tests_1 = require("./tests");
                     case 0: return [4 /*yield*/, agent.get("/food")];
                     case 1:
                         res = _a.sent();
-                        (0, bun_test_1.expect)(res.body.data).toHaveLength(2);
+                        (0, bun_test_1.expect)(res.body.data).toHaveLength(4);
                         return [2 /*return*/];
                 }
             });
@@ -338,7 +305,7 @@ var tests_1 = require("./tests");
                     case 0: return [4 /*yield*/, agent.get("/food")];
                     case 1:
                         res = _a.sent();
-                        (0, bun_test_1.expect)(res.body.data).toHaveLength(2);
+                        (0, bun_test_1.expect)(res.body.data).toHaveLength(4);
                         return [4 /*yield*/, agent.get("/food/".concat(res.body.data[0]._id))];
                     case 2:
                         res2 = _a.sent();

package/dist/populate.test.js

@@ -68,22 +68,6 @@ var __generator = (this && this.__generator) || function (thisArg, body) {
         if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
     }
 };
-var __read = (this && this.__read) || function (o, n) {
-    var m = typeof Symbol === "function" && o[Symbol.iterator];
-    if (!m) return o;
-    var i = m.call(o), r, ar = [], e;
-    try {
-        while ((n === void 0 || n-- > 0) && !(r = i.next()).done) ar.push(r.value);
-    }
-    catch (error) { e = { error: error }; }
-    finally {
-        try {
-            if (r && !r.done && (m = i["return"])) m.call(i);
-        }
-        finally { if (e) throw e.error; }
-    }
-    return ar;
-};
 Object.defineProperty(exports, "__esModule", { value: true });
 // biome-ignore-all lint/suspicious/noExplicitAny: test mock typing
 var bun_test_1 = require("bun:test");
@@ -96,31 +80,15 @@ var tests_1 = require("./tests");
     // noExplicitAny: typing as HydratedDocument<Food> causes cascading errors on populated field access patterns (e.g. populated.ownerId.name)
     var spinach;
     (0, bun_test_1.beforeEach)(function () { return __awaiter(void 0, void 0, void 0, function () {
-        var _a, _b;
-        return __generator(this, function (_c) {
-            switch (_c.label) {
-                case 0: return [4 /*yield*/, (0, tests_1.setupDb)()];
+        var testData;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, (0, tests_1.setupTestData)()];
                 case 1:
-                    _a = __read.apply(void 0, [_c.sent(), 2]), admin = _a[0], notAdmin = _a[1];
-                    return [4 /*yield*/, Promise.all([
-                            tests_1.FoodModel.create({
-                                calories: 1,
-                                created: new Date("2021-12-03T00:00:20.000Z"),
-                                eatenBy: [admin._id],
-                                hidden: false,
-                                likesIds: [
-                                    { likes: true, userId: admin._id },
-                                    { likes: false, userId: notAdmin._id },
-                                ],
-                                name: "Spinach",
-                                ownerId: admin._id,
-                                source: {
-                                    name: "Brand",
-                                },
-                            }),
-                        ])];
-                case 2:
-                    _b = __read.apply(void 0, [_c.sent(), 1]), spinach = _b[0];
+                    testData = _a.sent();
+                    admin = testData.users.admin;
+                    notAdmin = testData.users.notAdmin;
+                    spinach = testData.foods.spinach;
                     return [2 /*return*/];
             }
         });
@@ -139,7 +107,7 @@ var tests_1 = require("./tests");
                     return [4 /*yield*/, populated.populate("likesIds.userId")];
                 case 3:
                     populated = _c.sent();
-                    (0, bun_test_1.expect)(populated.ownerId.name).toBe("Admin");
+                    (0, bun_test_1.expect)(populated.ownerId.name).toBe("Not Admin");
                     (0, bun_test_1.expect)(populated.eatenBy[0].id).toBe(admin.id);
                     (0, bun_test_1.expect)(populated.eatenBy[0].name).toBe("Admin");
                     (0, bun_test_1.expect)(populated.likesIds[0].userId.id).toBe(admin.id);
@@ -148,7 +116,7 @@ var tests_1 = require("./tests");
                     (0, bun_test_1.expect)(populated.likesIds[1].userId.name).toBe("Not Admin");
                     unpopulated = (0, populate_1.unpopulate)(populated, "ownerId");
                     (0, bun_test_1.expect)(spinach.ownerId.name).toBeUndefined();
-                    (0, bun_test_1.expect)(unpopulated.ownerId.toString()).toBe(admin.id);
+                    (0, bun_test_1.expect)(unpopulated.ownerId.toString()).toBe(notAdmin.id);
                     // Ensure nothing else was touched.
                     (0, bun_test_1.expect)(populated.likesIds[0].userId.id).toBe(admin.id);
                     (0, bun_test_1.expect)(populated.likesIds[0].userId.name).toBe("Admin");

package/dist/realtime/changeStreamWatcher.d.ts

@@ -21,7 +21,7 @@ export declare const mapOperationType: (operationType: string, change: ChangeStr
  * Determine which Socket.io rooms to emit to based on the room strategy.
  * Exported for testing.
  */
-export declare const resolveRooms: (entry: RealtimeRegistryEntry, doc: any, method: string) => string[];
+export declare const resolveRooms: (entry: RealtimeRegistryEntry, doc: Record<string, unknown>, method: string) => string[];
 /**
  * Ensure serialized documents include `id` to match REST API responses.
  * Change stream fullDocument payloads are raw BSON objects with `_id` only.
@@ -43,8 +43,8 @@ export declare const ensureApiId: (data: unknown) => unknown;
  * would risk leaking unsanitized fields (e.g. `hash`/`salt`) that the handler
  * was supposed to strip.
  */
-export declare const serializeDoc: (entry: RealtimeRegistryEntry, doc: any, method: "create" | "update" | "delete", user?: User) => Promise<any>;
-export declare const emitToAuthorizedRoom: (io: Server, room: string, event: RealtimeEvent, entry: RealtimeRegistryEntry, fullDocument: any, logDebug: (msg: string) => void) => Promise<void>;
+export declare const serializeDoc: (entry: RealtimeRegistryEntry, doc: Record<string, unknown>, method: "create" | "update" | "delete", user?: User) => Promise<unknown>;
+export declare const emitToAuthorizedRoom: (io: Server, room: string, event: RealtimeEvent, entry: RealtimeRegistryEntry, fullDocument: Record<string, unknown> | undefined, logDebug: (msg: string) => void) => Promise<void>;
 /**
  * Emit a sync event to document-specific and query rooms.
  *
@@ -61,7 +61,7 @@ export declare const emitToAuthorizedRoom: (io: Server, room: string, event: Rea
  *
  * Exported for testing.
  */
-export declare const emitToDocumentAndQueryRooms: (io: Server, collection: string, event: RealtimeEvent, fullDocument: any, logDebug: (msg: string) => void, entry?: RealtimeRegistryEntry) => Promise<void>;
+export declare const emitToDocumentAndQueryRooms: (io: Server, collection: string, event: RealtimeEvent, fullDocument: Record<string, unknown> | undefined, logDebug: (msg: string) => void, entry?: RealtimeRegistryEntry) => Promise<void>;
 /**
  * Start watching MongoDB change streams and emitting real-time events.
  */