@terreno/api 0.7.2 → 0.8.0

package/dist/syncConsents.js

@@ -0,0 +1,334 @@
+"use strict";
+/**
+ * Sync consent form definitions from code to the database.
+ *
+ * Compares the provided definitions (keyed by slug) against what's in the database
+ * and creates, updates, or deactivates forms to match. When content changes, a new
+ * version is published so users are prompted to re-consent.
+ */
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g = Object.create((typeof Iterator === "function" ? Iterator : Object).prototype);
+    return g.next = verb(0), g["throw"] = verb(1), g["return"] = verb(2), typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (g && (g = 0, op[0] && (_ = 0)), _) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+var __read = (this && this.__read) || function (o, n) {
+    var m = typeof Symbol === "function" && o[Symbol.iterator];
+    if (!m) return o;
+    var i = m.call(o), r, ar = [], e;
+    try {
+        while ((n === void 0 || n-- > 0) && !(r = i.next()).done) ar.push(r.value);
+    }
+    catch (error) { e = { error: error }; }
+    finally {
+        try {
+            if (r && !r.done && (m = i["return"])) m.call(i);
+        }
+        finally { if (e) throw e.error; }
+    }
+    return ar;
+};
+var __spreadArray = (this && this.__spreadArray) || function (to, from, pack) {
+    if (pack || arguments.length === 2) for (var i = 0, l = from.length, ar; i < l; i++) {
+        if (ar || !(i in from)) {
+            if (!ar) ar = Array.prototype.slice.call(from, 0, i);
+            ar[i] = from[i];
+        }
+    }
+    return to.concat(ar || Array.prototype.slice.call(from));
+};
+var __values = (this && this.__values) || function(o) {
+    var s = typeof Symbol === "function" && Symbol.iterator, m = s && o[s], i = 0;
+    if (m) return m.call(o);
+    if (o && typeof o.length === "number") return {
+        next: function () {
+            if (o && i >= o.length) o = void 0;
+            return { value: o && o[i++], done: !o };
+        }
+    };
+    throw new TypeError(s ? "Object is not iterable." : "Symbol.iterator is not defined.");
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.syncConsents = void 0;
+var logger_1 = require("./logger");
+var consentForm_1 = require("./models/consentForm");
+var contentEqual = function (a, b) {
+    var aKeys = __spreadArray([], __read(a.keys()), false).sort();
+    var bKeys = Object.keys(b).sort();
+    if (aKeys.length !== bKeys.length) {
+        return false;
+    }
+    return aKeys.every(function (key, i) { return key === bKeys[i] && a.get(key) === b[key]; });
+};
+var formFieldsMatch = function (existing, def) {
+    var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k, _l, _m, _o;
+    if (existing.title !== def.title) {
+        return false;
+    }
+    if (existing.type !== def.type) {
+        return false;
+    }
+    if (existing.order !== ((_a = def.order) !== null && _a !== void 0 ? _a : 0)) {
+        return false;
+    }
+    if (existing.required !== ((_b = def.required) !== null && _b !== void 0 ? _b : true)) {
+        return false;
+    }
+    if (existing.requireScrollToBottom !== ((_c = def.requireScrollToBottom) !== null && _c !== void 0 ? _c : false)) {
+        return false;
+    }
+    if (existing.captureSignature !== ((_d = def.captureSignature) !== null && _d !== void 0 ? _d : false)) {
+        return false;
+    }
+    if (existing.agreeButtonText !== ((_e = def.agreeButtonText) !== null && _e !== void 0 ? _e : "I Agree")) {
+        return false;
+    }
+    if (existing.allowDecline !== ((_f = def.allowDecline) !== null && _f !== void 0 ? _f : false)) {
+        return false;
+    }
+    if (existing.declineButtonText !== ((_g = def.declineButtonText) !== null && _g !== void 0 ? _g : "Decline")) {
+        return false;
+    }
+    if (existing.defaultLocale !== ((_h = def.defaultLocale) !== null && _h !== void 0 ? _h : "en")) {
+        return false;
+    }
+    if (!contentEqual(existing.content, def.content)) {
+        return false;
+    }
+    var existingCheckboxes = (_j = existing.checkboxes) !== null && _j !== void 0 ? _j : [];
+    var defCheckboxes = (_k = def.checkboxes) !== null && _k !== void 0 ? _k : [];
+    if (existingCheckboxes.length !== defCheckboxes.length) {
+        return false;
+    }
+    for (var i = 0; i < existingCheckboxes.length; i++) {
+        var ec = existingCheckboxes[i];
+        var dc = defCheckboxes[i];
+        if (ec.label !== dc.label || ec.required !== ((_l = dc.required) !== null && _l !== void 0 ? _l : false)) {
+            return false;
+        }
+        if (((_m = ec.confirmationPrompt) !== null && _m !== void 0 ? _m : undefined) !== ((_o = dc.confirmationPrompt) !== null && _o !== void 0 ? _o : undefined)) {
+            return false;
+        }
+    }
+    return true;
+};
+/**
+ * Sync consent form definitions to the database.
+ *
+ * @param definitions - Map of slug to consent form definition
+ * @param options - Sync options
+ * @returns Summary of what was created, updated, deactivated, or unchanged
+ *
+ * @example
+ * ```typescript
+ * import {syncConsents} from "@terreno/api";
+ *
+ * await syncConsents({
+ *   "terms-of-service": {
+ *     title: "Terms of Service",
+ *     type: "terms",
+ *     content: {"en": "# Terms\n...", "es": "# Términos\n..."},
+ *     required: true,
+ *     order: 1,
+ *   },
+ *   "privacy-policy": {
+ *     title: "Privacy Policy",
+ *     type: "privacy",
+ *     content: {"en": "# Privacy\n..."},
+ *     order: 2,
+ *   },
+ * });
+ * ```
+ */
+var syncConsents = function (definitions_1) {
+    var args_1 = [];
+    for (var _i = 1; _i < arguments.length; _i++) {
+        args_1[_i - 1] = arguments[_i];
+    }
+    return __awaiter(void 0, __spreadArray([definitions_1], __read(args_1), false), void 0, function (definitions, options) {
+        var _a, deactivateRemoved, _b, dryRun, result, slugs, activeForms, activeBySlug, slugs_1, slugs_1_1, slug, def, existing, newVersion, e_1_1, activeBySlug_1, activeBySlug_1_1, _c, slug, form, e_2_1, summary;
+        var e_1, _d, e_2, _e;
+        var _f, _g, _h, _j;
+        if (options === void 0) { options = {}; }
+        return __generator(this, function (_k) {
+            switch (_k.label) {
+                case 0:
+                    _a = options.deactivateRemoved, deactivateRemoved = _a === void 0 ? false : _a, _b = options.dryRun, dryRun = _b === void 0 ? false : _b;
+                    result = {
+                        created: [],
+                        deactivated: [],
+                        unchanged: [],
+                        updated: [],
+                    };
+                    slugs = Object.keys(definitions);
+                    return [4 /*yield*/, consentForm_1.ConsentForm.find({ active: true })];
+                case 1:
+                    activeForms = _k.sent();
+                    activeBySlug = new Map(activeForms.map(function (f) { return [f.slug, f]; }));
+                    _k.label = 2;
+                case 2:
+                    _k.trys.push([2, 12, 13, 14]);
+                    slugs_1 = __values(slugs), slugs_1_1 = slugs_1.next();
+                    _k.label = 3;
+                case 3:
+                    if (!!slugs_1_1.done) return [3 /*break*/, 11];
+                    slug = slugs_1_1.value;
+                    def = definitions[slug];
+                    existing = activeBySlug.get(slug);
+                    if (!!existing) return [3 /*break*/, 6];
+                    // No active form for this slug — create version 1
+                    logger_1.logger.info("syncConsents: creating \"".concat(slug, "\""), { dryRun: dryRun });
+                    if (!!dryRun) return [3 /*break*/, 5];
+                    return [4 /*yield*/, consentForm_1.ConsentForm.create({
+                            active: true,
+                            agreeButtonText: def.agreeButtonText,
+                            allowDecline: def.allowDecline,
+                            captureSignature: def.captureSignature,
+                            checkboxes: def.checkboxes,
+                            content: new Map(Object.entries(def.content)),
+                            declineButtonText: def.declineButtonText,
+                            defaultLocale: def.defaultLocale,
+                            order: (_f = def.order) !== null && _f !== void 0 ? _f : 0,
+                            required: (_g = def.required) !== null && _g !== void 0 ? _g : true,
+                            requireScrollToBottom: def.requireScrollToBottom,
+                            slug: slug,
+                            title: def.title,
+                            type: def.type,
+                            version: 1,
+                        })];
+                case 4:
+                    _k.sent();
+                    _k.label = 5;
+                case 5:
+                    result.created.push(slug);
+                    return [3 /*break*/, 10];
+                case 6:
+                    if (formFieldsMatch(existing, def)) {
+                        result.unchanged.push(slug);
+                        return [3 /*break*/, 10];
+                    }
+                    newVersion = existing.version + 1;
+                    logger_1.logger.info("syncConsents: updating \"".concat(slug, "\" v").concat(existing.version, " -> v").concat(newVersion), {
+                        dryRun: dryRun,
+                    });
+                    if (!!dryRun) return [3 /*break*/, 9];
+                    return [4 /*yield*/, consentForm_1.ConsentForm.create({
+                            active: true,
+                            agreeButtonText: def.agreeButtonText,
+                            allowDecline: def.allowDecline,
+                            captureSignature: def.captureSignature,
+                            checkboxes: def.checkboxes,
+                            content: new Map(Object.entries(def.content)),
+                            declineButtonText: def.declineButtonText,
+                            defaultLocale: def.defaultLocale,
+                            order: (_h = def.order) !== null && _h !== void 0 ? _h : 0,
+                            required: (_j = def.required) !== null && _j !== void 0 ? _j : true,
+                            requireScrollToBottom: def.requireScrollToBottom,
+                            slug: slug,
+                            title: def.title,
+                            type: def.type,
+                            version: newVersion,
+                        })];
+                case 7:
+                    _k.sent();
+                    return [4 /*yield*/, consentForm_1.ConsentForm.updateMany({ _id: { $ne: undefined }, slug: slug, version: { $lt: newVersion } }, { active: false })];
+                case 8:
+                    _k.sent();
+                    _k.label = 9;
+                case 9:
+                    result.updated.push(slug);
+                    _k.label = 10;
+                case 10:
+                    slugs_1_1 = slugs_1.next();
+                    return [3 /*break*/, 3];
+                case 11: return [3 /*break*/, 14];
+                case 12:
+                    e_1_1 = _k.sent();
+                    e_1 = { error: e_1_1 };
+                    return [3 /*break*/, 14];
+                case 13:
+                    try {
+                        if (slugs_1_1 && !slugs_1_1.done && (_d = slugs_1.return)) _d.call(slugs_1);
+                    }
+                    finally { if (e_1) throw e_1.error; }
+                    return [7 /*endfinally*/];
+                case 14:
+                    if (!deactivateRemoved) return [3 /*break*/, 23];
+                    _k.label = 15;
+                case 15:
+                    _k.trys.push([15, 21, 22, 23]);
+                    activeBySlug_1 = __values(activeBySlug), activeBySlug_1_1 = activeBySlug_1.next();
+                    _k.label = 16;
+                case 16:
+                    if (!!activeBySlug_1_1.done) return [3 /*break*/, 20];
+                    _c = __read(activeBySlug_1_1.value, 2), slug = _c[0], form = _c[1];
+                    if (!!definitions[slug]) return [3 /*break*/, 19];
+                    logger_1.logger.info("syncConsents: deactivating \"".concat(slug, "\""), { dryRun: dryRun });
+                    if (!!dryRun) return [3 /*break*/, 18];
+                    return [4 /*yield*/, consentForm_1.ConsentForm.updateMany({ slug: slug }, { active: false })];
+                case 17:
+                    _k.sent();
+                    _k.label = 18;
+                case 18:
+                    result.deactivated.push(slug);
+                    _k.label = 19;
+                case 19:
+                    activeBySlug_1_1 = activeBySlug_1.next();
+                    return [3 /*break*/, 16];
+                case 20: return [3 /*break*/, 23];
+                case 21:
+                    e_2_1 = _k.sent();
+                    e_2 = { error: e_2_1 };
+                    return [3 /*break*/, 23];
+                case 22:
+                    try {
+                        if (activeBySlug_1_1 && !activeBySlug_1_1.done && (_e = activeBySlug_1.return)) _e.call(activeBySlug_1);
+                    }
+                    finally { if (e_2) throw e_2.error; }
+                    return [7 /*endfinally*/];
+                case 23:
+                    summary = [
+                        result.created.length > 0 ? "created: ".concat(result.created.join(", ")) : null,
+                        result.updated.length > 0 ? "updated: ".concat(result.updated.join(", ")) : null,
+                        result.deactivated.length > 0 ? "deactivated: ".concat(result.deactivated.join(", ")) : null,
+                        result.unchanged.length > 0 ? "unchanged: ".concat(result.unchanged.join(", ")) : null,
+                    ]
+                        .filter(Boolean)
+                        .join(" | ");
+                    logger_1.logger.info("syncConsents: ".concat(dryRun ? "[DRY RUN] " : "").concat(summary || "nothing to do"));
+                    return [2 /*return*/, result];
+            }
+        });
+    });
+};
+exports.syncConsents = syncConsents;

package/dist/syncConsents.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/syncConsents.test.js

@@ -0,0 +1,249 @@
+"use strict";
+var __assign = (this && this.__assign) || function () {
+    __assign = Object.assign || function(t) {
+        for (var s, i = 1, n = arguments.length; i < n; i++) {
+            s = arguments[i];
+            for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p))
+                t[p] = s[p];
+        }
+        return t;
+    };
+    return __assign.apply(this, arguments);
+};
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g = Object.create((typeof Iterator === "function" ? Iterator : Object).prototype);
+    return g.next = verb(0), g["throw"] = verb(1), g["return"] = verb(2), typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (g && (g = 0, op[0] && (_ = 0)), _) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+var bun_test_1 = require("bun:test");
+var consentForm_1 = require("./models/consentForm");
+var syncConsents_1 = require("./syncConsents");
+var tests_1 = require("./tests");
+var baseDef = {
+    content: { en: "# Terms\nPlease agree." },
+    order: 1,
+    required: true,
+    title: "Terms of Service",
+    type: "terms",
+};
+(0, bun_test_1.describe)("syncConsents", function () {
+    (0, bun_test_1.beforeEach)(function () { return __awaiter(void 0, void 0, void 0, function () {
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, (0, tests_1.setupDb)()];
+                case 1:
+                    _a.sent();
+                    return [4 /*yield*/, consentForm_1.ConsentForm.deleteMany({})];
+                case 2:
+                    _a.sent();
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.afterEach)(function () { return __awaiter(void 0, void 0, void 0, function () {
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, consentForm_1.ConsentForm.deleteMany({})];
+                case 1:
+                    _a.sent();
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("creates a new consent form when none exists", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var result, forms;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, (0, syncConsents_1.syncConsents)({ terms: baseDef })];
+                case 1:
+                    result = _a.sent();
+                    (0, bun_test_1.expect)(result.created).toEqual(["terms"]);
+                    (0, bun_test_1.expect)(result.updated).toHaveLength(0);
+                    (0, bun_test_1.expect)(result.unchanged).toHaveLength(0);
+                    return [4 /*yield*/, consentForm_1.ConsentForm.find({ slug: "terms" })];
+                case 2:
+                    forms = _a.sent();
+                    (0, bun_test_1.expect)(forms).toHaveLength(1);
+                    (0, bun_test_1.expect)(forms[0].active).toBe(true);
+                    (0, bun_test_1.expect)(forms[0].version).toBe(1);
+                    (0, bun_test_1.expect)(forms[0].title).toBe("Terms of Service");
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("leaves unchanged forms alone", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var result, forms;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, (0, syncConsents_1.syncConsents)({ terms: baseDef })];
+                case 1:
+                    _a.sent();
+                    return [4 /*yield*/, (0, syncConsents_1.syncConsents)({ terms: baseDef })];
+                case 2:
+                    result = _a.sent();
+                    (0, bun_test_1.expect)(result.unchanged).toEqual(["terms"]);
+                    (0, bun_test_1.expect)(result.created).toHaveLength(0);
+                    (0, bun_test_1.expect)(result.updated).toHaveLength(0);
+                    return [4 /*yield*/, consentForm_1.ConsentForm.find({ slug: "terms" })];
+                case 3:
+                    forms = _a.sent();
+                    (0, bun_test_1.expect)(forms).toHaveLength(1);
+                    (0, bun_test_1.expect)(forms[0].version).toBe(1);
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("publishes a new version when content changes", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var updated, result, forms;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, (0, syncConsents_1.syncConsents)({ terms: baseDef })];
+                case 1:
+                    _a.sent();
+                    updated = __assign(__assign({}, baseDef), { content: { en: "# Updated Terms\nNew content." } });
+                    return [4 /*yield*/, (0, syncConsents_1.syncConsents)({ terms: updated })];
+                case 2:
+                    result = _a.sent();
+                    (0, bun_test_1.expect)(result.updated).toEqual(["terms"]);
+                    return [4 /*yield*/, consentForm_1.ConsentForm.find({ slug: "terms" }).sort({ version: 1 })];
+                case 3:
+                    forms = _a.sent();
+                    (0, bun_test_1.expect)(forms).toHaveLength(2);
+                    (0, bun_test_1.expect)(forms[0].active).toBe(false);
+                    (0, bun_test_1.expect)(forms[0].version).toBe(1);
+                    (0, bun_test_1.expect)(forms[1].active).toBe(true);
+                    (0, bun_test_1.expect)(forms[1].version).toBe(2);
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("publishes a new version when title changes", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var updated, result, active;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, (0, syncConsents_1.syncConsents)({ terms: baseDef })];
+                case 1:
+                    _a.sent();
+                    updated = __assign(__assign({}, baseDef), { title: "Updated Terms" });
+                    return [4 /*yield*/, (0, syncConsents_1.syncConsents)({ terms: updated })];
+                case 2:
+                    result = _a.sent();
+                    (0, bun_test_1.expect)(result.updated).toEqual(["terms"]);
+                    return [4 /*yield*/, consentForm_1.ConsentForm.findOne({ active: true, slug: "terms" })];
+                case 3:
+                    active = _a.sent();
+                    (0, bun_test_1.expect)(active === null || active === void 0 ? void 0 : active.version).toBe(2);
+                    (0, bun_test_1.expect)(active === null || active === void 0 ? void 0 : active.title).toBe("Updated Terms");
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("deactivates removed forms when deactivateRemoved is true", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var result, privacy;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, (0, syncConsents_1.syncConsents)({ privacy: __assign(__assign({}, baseDef), { title: "Privacy", type: "privacy" }), terms: baseDef })];
+                case 1:
+                    _a.sent();
+                    return [4 /*yield*/, (0, syncConsents_1.syncConsents)({ terms: baseDef }, { deactivateRemoved: true })];
+                case 2:
+                    result = _a.sent();
+                    (0, bun_test_1.expect)(result.deactivated).toEqual(["privacy"]);
+                    (0, bun_test_1.expect)(result.unchanged).toEqual(["terms"]);
+                    return [4 /*yield*/, consentForm_1.ConsentForm.findOne({ slug: "privacy" })];
+                case 3:
+                    privacy = _a.sent();
+                    (0, bun_test_1.expect)(privacy === null || privacy === void 0 ? void 0 : privacy.active).toBe(false);
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("does not deactivate removed forms by default", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var result, privacy;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, (0, syncConsents_1.syncConsents)({ privacy: __assign(__assign({}, baseDef), { title: "Privacy", type: "privacy" }), terms: baseDef })];
+                case 1:
+                    _a.sent();
+                    return [4 /*yield*/, (0, syncConsents_1.syncConsents)({ terms: baseDef })];
+                case 2:
+                    result = _a.sent();
+                    (0, bun_test_1.expect)(result.deactivated).toHaveLength(0);
+                    return [4 /*yield*/, consentForm_1.ConsentForm.findOne({ slug: "privacy" })];
+                case 3:
+                    privacy = _a.sent();
+                    (0, bun_test_1.expect)(privacy === null || privacy === void 0 ? void 0 : privacy.active).toBe(true);
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("does not write to the database in dry run mode", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var result, forms;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, (0, syncConsents_1.syncConsents)({ terms: baseDef }, { dryRun: true })];
+                case 1:
+                    result = _a.sent();
+                    (0, bun_test_1.expect)(result.created).toEqual(["terms"]);
+                    return [4 /*yield*/, consentForm_1.ConsentForm.find({ slug: "terms" })];
+                case 2:
+                    forms = _a.sent();
+                    (0, bun_test_1.expect)(forms).toHaveLength(0);
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    (0, bun_test_1.it)("handles multiple forms in a single sync", function () { return __awaiter(void 0, void 0, void 0, function () {
+        var result, forms;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, (0, syncConsents_1.syncConsents)({
+                        privacy: __assign(__assign({}, baseDef), { order: 2, title: "Privacy Policy", type: "privacy" }),
+                        terms: baseDef,
+                    })];
+                case 1:
+                    result = _a.sent();
+                    (0, bun_test_1.expect)(result.created.sort()).toEqual(["privacy", "terms"]);
+                    return [4 /*yield*/, consentForm_1.ConsentForm.find({}).sort({ order: 1 })];
+                case 2:
+                    forms = _a.sent();
+                    (0, bun_test_1.expect)(forms).toHaveLength(2);
+                    (0, bun_test_1.expect)(forms[0].slug).toBe("terms");
+                    (0, bun_test_1.expect)(forms[1].slug).toBe("privacy");
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+});

package/dist/terrenoApp.js

@@ -312,7 +312,6 @@ var TerrenoApp = /** @class */ (function () {
         if (process.env.ENABLE_SWAGGER === "true") {
             app.use("/swagger", oapi.swaggerui());
         }
-        (0, auth_1.addMeRoutes)(app, options.userModel, options.authOptions);
         // GitHub OAuth
         if (options.githubAuth) {
             (0, githubAuth_1.setupGitHubAuth)(app, options.userModel, options.githubAuth);
@@ -327,10 +326,11 @@ var TerrenoApp = /** @class */ (function () {
             for (var _f = __values(this.registrations), _g = _f.next(); !_g.done; _g = _f.next()) {
                 var registration = _g.value;
                 if (this.isModelRouterRegistration(registration)) {
-                    app.use(registration.path, registration.router);
+                    var router = registration._buildWithOpenApi(oapi);
+                    app.use(registration.path, router);
                 }
                 else {
-                    registration.register(app);
+                    registration.register(app, oapi);
                 }
             }
         }
@@ -341,8 +341,9 @@ var TerrenoApp = /** @class */ (function () {
             }
             finally { if (e_2) throw e_2.error; }
         }
-        // Inject openApi into model router options for registered routers
-        // The openApi middleware handles this via the oapi instance already mounted on the app
+        // /auth/me must be registered after plugins so that session middleware
+        // (e.g. Better Auth) has a chance to populate req.user first.
+        (0, auth_1.addMeRoutes)(app, options.userModel, options.authOptions);
         Sentry.setupExpressErrorHandler(app);
         // Error middleware
         app.use(errors_1.apiUnauthorizedMiddleware);

package/dist/terrenoPlugin.d.ts

@@ -34,5 +34,5 @@ export interface TerrenoPlugin {
      *
      * @param app - The Express application instance to register with
      */
-    register(app: express.Application): void;
+    register(app: express.Application, openApi?: unknown): void;
 }

package/dist/types/consentForm.d.ts

@@ -0,0 +1,32 @@
+import type mongoose from "mongoose";
+import type { FindExactlyOnePlugin, FindOneOrNonePlugin } from "../plugins";
+export interface ConsentFormCheckbox {
+    label: string;
+    required: boolean;
+    confirmationPrompt?: string;
+}
+export type ConsentFormType = "agreement" | "privacy" | "hipaa" | "research" | "terms" | "custom";
+export type ConsentFormMethods = {};
+export type ConsentFormStatics = FindExactlyOnePlugin<ConsentFormDocument> & FindOneOrNonePlugin<ConsentFormDocument>;
+export type ConsentFormModel = mongoose.Model<ConsentFormDocument, object, ConsentFormMethods> & ConsentFormStatics;
+export interface ConsentFormDocument extends mongoose.Document {
+    _id: mongoose.Types.ObjectId;
+    title: string;
+    slug: string;
+    version: number;
+    order: number;
+    type: ConsentFormType;
+    content: Map<string, string>;
+    defaultLocale: string;
+    active: boolean;
+    captureSignature: boolean;
+    requireScrollToBottom: boolean;
+    checkboxes: ConsentFormCheckbox[];
+    agreeButtonText: string;
+    allowDecline: boolean;
+    declineButtonText: string;
+    required: boolean;
+    created: Date;
+    updated: Date;
+    deleted: boolean;
+}

package/dist/types/consentForm.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });