@web-ts-toolkit/access-router 0.41.0 → 0.42.1

package/advanced.js

@@ -495,6 +495,17 @@ var OpenApiRegistry = class {
   getSpec(info) {
     return buildOpenApiSpec(this.routes, info);
   }
+  snapshot() {
+    return {
+      routes: [...this.routes],
+      options: { ...this.options }
+    };
+  }
+  restore(snapshot) {
+    this.routes.length = 0;
+    this.routes.push(...snapshot.routes);
+    this.options = { ...snapshot.options };
+  }
 };
 
 // src/logger-default.ts
@@ -608,7 +619,8 @@ var OptionsManager = class {
     }
     const [rootKey, ...nestedPath] = path;
     const currentRoot = (0, import_utils6.get)(this.currentOptions, [rootKey], void 0);
-    const nextRoot = cloneConfigValue(currentRoot ?? {});
+    const baseRoot = (0, import_utils6.isPlainObject)(currentRoot) ? currentRoot : {};
+    const nextRoot = cloneConfigValue(baseRoot);
     (0, import_utils6.set)(nextRoot, nestedPath, cloneConfigValue(value));
     (0, import_utils6.set)(this.currentOptions, [rootKey], nextRoot);
   }
@@ -634,6 +646,31 @@ var OptionsManager = class {
     (0, import_utils6.set)(this.listeners, key, func);
     return this;
   }
+  snapshot() {
+    const cloned = cloneConfigValue(this.currentOptions);
+    for (const key of this.preserveKeys) {
+      if (key in this.currentOptions) {
+        cloned[key] = this.currentOptions[key];
+      }
+    }
+    return cloned;
+  }
+  restore(snapshot) {
+    const snap = snapshot;
+    const current = this.currentOptions;
+    for (const key of Object.keys(current)) {
+      if (!(key in snap)) {
+        delete current[key];
+      }
+    }
+    const cloned = cloneConfigValue(snap);
+    for (const key of this.preserveKeys) {
+      if (key in snap) {
+        cloned[key] = snap[key];
+      }
+    }
+    (0, import_utils6.assign)(current, cloned);
+  }
 };
 
 // src/request-complexity.ts
@@ -908,6 +945,85 @@ var AccessRuntime = class {
   getOpenApiSpec(info) {
     return this.openApiRegistry.getSpec(info);
   }
+  createBootstrapSnapshot() {
+    const modelOptionsSnap = {};
+    for (const [name, mgr] of Object.entries(this.modelOptions)) {
+      modelOptionsSnap[name] = mgr.snapshot();
+    }
+    const dataOptionsSnap = {};
+    for (const [name, mgr] of Object.entries(this.dataOptions)) {
+      dataOptionsSnap[name] = mgr.snapshot();
+    }
+    return {
+      globalOptions: this.globalOptions.snapshot(),
+      defaultModelOptions: this.defaultModelOptions.snapshot(),
+      modelOptions: modelOptionsSnap,
+      dataOptions: dataOptionsSnap,
+      modelInstances: { ...this.modelInstances },
+      modelJsonSchemas: { ...this.modelJsonSchemas },
+      modelRefs: Object.fromEntries(
+        Object.entries(this.modelRefs).map(([k, v]) => [k, JSON.parse(JSON.stringify(v))])
+      ),
+      modelSubs: Object.fromEntries(Object.entries(this.modelSubs).map(([k, v]) => [k, [...v]])),
+      modelAtts: Object.fromEntries(Object.entries(this.modelAtts).map(([k, v]) => [k, [...v]])),
+      openApi: this.openApiRegistry.snapshot()
+    };
+  }
+  restoreBootstrapSnapshot(snapshot) {
+    this.globalOptions.restore(snapshot.globalOptions);
+    this.defaultModelOptions.restore(snapshot.defaultModelOptions);
+    for (const name of Object.keys(this.modelOptions)) {
+      if (!(name in snapshot.modelOptions)) {
+        delete this.modelOptions[name];
+      }
+    }
+    for (const [name, opts] of Object.entries(snapshot.modelOptions)) {
+      const existing = this.modelOptions[name];
+      if (existing) {
+        existing.restore(opts);
+      } else {
+        const mgr = this.createModelOptions(name);
+        mgr.restore(opts);
+        this.modelOptions[name] = mgr;
+      }
+    }
+    for (const name of Object.keys(this.dataOptions)) {
+      if (!(name in snapshot.dataOptions)) {
+        delete this.dataOptions[name];
+      }
+    }
+    for (const [name, opts] of Object.entries(snapshot.dataOptions)) {
+      const existing = this.dataOptions[name];
+      if (existing) {
+        existing.restore(opts);
+      } else {
+        const mgr = this.createDataOptions(name);
+        mgr.restore(opts);
+        this.dataOptions[name] = mgr;
+      }
+    }
+    for (const k of Object.keys(this.modelInstances)) {
+      if (!(k in snapshot.modelInstances)) delete this.modelInstances[k];
+    }
+    Object.assign(this.modelInstances, snapshot.modelInstances);
+    for (const k of Object.keys(this.modelJsonSchemas)) {
+      if (!(k in snapshot.modelJsonSchemas)) delete this.modelJsonSchemas[k];
+    }
+    Object.assign(this.modelJsonSchemas, snapshot.modelJsonSchemas);
+    for (const k of Object.keys(this.modelRefs)) {
+      if (!(k in snapshot.modelRefs)) delete this.modelRefs[k];
+    }
+    Object.assign(this.modelRefs, snapshot.modelRefs);
+    for (const k of Object.keys(this.modelSubs)) {
+      if (!(k in snapshot.modelSubs)) delete this.modelSubs[k];
+    }
+    Object.assign(this.modelSubs, snapshot.modelSubs);
+    for (const k of Object.keys(this.modelAtts)) {
+      if (!(k in snapshot.modelAtts)) delete this.modelAtts[k];
+    }
+    Object.assign(this.modelAtts, snapshot.modelAtts);
+    this.openApiRegistry.restore(snapshot.openApi);
+  }
   setGlobalOptions(options) {
     this.globalOptions.assign(options);
   }

package/advanced.mjs

@@ -54,7 +54,7 @@ import {
   isBoolean,
   isFunction,
   isNil as isNil2,
-  isPlainObject as isPlainObject8,
+  isPlainObject as isPlainObject9,
   isString as isString3,
   keys
 } from "@web-ts-toolkit/utils";
@@ -424,6 +424,17 @@ var OpenApiRegistry = class {
   getSpec(info) {
     return buildOpenApiSpec(this.routes, info);
   }
+  snapshot() {
+    return {
+      routes: [...this.routes],
+      options: { ...this.options }
+    };
+  }
+  restore(snapshot) {
+    this.routes.length = 0;
+    this.routes.push(...snapshot.routes);
+    this.options = { ...snapshot.options };
+  }
 };
 
 // src/logger-default.ts
@@ -453,7 +464,7 @@ var defaultLogger = createLogger({
 });
 
 // src/options/manager.ts
-import { assign, get, set } from "@web-ts-toolkit/utils";
+import { assign, get, isPlainObject as isPlainObject7, set } from "@web-ts-toolkit/utils";
 var toPath = (key) => {
   if (Array.isArray(key)) return key;
   return typeof key === "string" ? key.split(".") : [key];
@@ -537,7 +548,8 @@ var OptionsManager = class {
     }
     const [rootKey, ...nestedPath] = path;
     const currentRoot = get(this.currentOptions, [rootKey], void 0);
-    const nextRoot = cloneConfigValue(currentRoot ?? {});
+    const baseRoot = isPlainObject7(currentRoot) ? currentRoot : {};
+    const nextRoot = cloneConfigValue(baseRoot);
     set(nextRoot, nestedPath, cloneConfigValue(value));
     set(this.currentOptions, [rootKey], nextRoot);
   }
@@ -563,10 +575,35 @@ var OptionsManager = class {
     set(this.listeners, key, func);
     return this;
   }
+  snapshot() {
+    const cloned = cloneConfigValue(this.currentOptions);
+    for (const key of this.preserveKeys) {
+      if (key in this.currentOptions) {
+        cloned[key] = this.currentOptions[key];
+      }
+    }
+    return cloned;
+  }
+  restore(snapshot) {
+    const snap = snapshot;
+    const current = this.currentOptions;
+    for (const key of Object.keys(current)) {
+      if (!(key in snap)) {
+        delete current[key];
+      }
+    }
+    const cloned = cloneConfigValue(snap);
+    for (const key of this.preserveKeys) {
+      if (key in snap) {
+        cloned[key] = snap[key];
+      }
+    }
+    assign(current, cloned);
+  }
 };
 
 // src/request-complexity.ts
-import { isArray as isArray3, isPlainObject as isPlainObject7 } from "@web-ts-toolkit/utils";
+import { isArray as isArray3, isPlainObject as isPlainObject8 } from "@web-ts-toolkit/utils";
 var defaultRequestComplexity = {
   maxDepth: 8,
   maxNodes: 500,
@@ -642,7 +679,7 @@ function validateRequestComplexity(value, options, scope = "request") {
       }
       return;
     }
-    if (!isPlainObject7(current)) return;
+    if (!isPlainObject8(current)) return;
     for (const [key, child] of Object.entries(current)) {
       if (key === "__proto__" || key === "prototype" || key === "constructor") {
         pushError(`Unsupported key: ${key}`, path.concat(key));
@@ -721,7 +758,7 @@ var classifyPermissionSchema = (permissionSchema, modelPermissionPrefix) => {
   const modelPermissionKeys = {};
   forEach2(schemaKeys, (schemaKey) => {
     const schemaRule = permissionSchema[schemaKey];
-    const ruleEntries = isPlainObject8(schemaRule) ? Object.entries(schemaRule) : FIELD_ACCESS_KEYS.map((accessKey) => [accessKey, schemaRule]);
+    const ruleEntries = isPlainObject9(schemaRule) ? Object.entries(schemaRule) : FIELD_ACCESS_KEYS.map((accessKey) => [accessKey, schemaRule]);
     for (let x = 0; x < ruleEntries.length; x++) {
       const [accessKey, value] = ruleEntries[x];
       if (!isArray4(globalPermissionKeys[accessKey])) {
@@ -837,6 +874,85 @@ var AccessRuntime = class {
   getOpenApiSpec(info) {
     return this.openApiRegistry.getSpec(info);
   }
+  createBootstrapSnapshot() {
+    const modelOptionsSnap = {};
+    for (const [name, mgr] of Object.entries(this.modelOptions)) {
+      modelOptionsSnap[name] = mgr.snapshot();
+    }
+    const dataOptionsSnap = {};
+    for (const [name, mgr] of Object.entries(this.dataOptions)) {
+      dataOptionsSnap[name] = mgr.snapshot();
+    }
+    return {
+      globalOptions: this.globalOptions.snapshot(),
+      defaultModelOptions: this.defaultModelOptions.snapshot(),
+      modelOptions: modelOptionsSnap,
+      dataOptions: dataOptionsSnap,
+      modelInstances: { ...this.modelInstances },
+      modelJsonSchemas: { ...this.modelJsonSchemas },
+      modelRefs: Object.fromEntries(
+        Object.entries(this.modelRefs).map(([k, v]) => [k, JSON.parse(JSON.stringify(v))])
+      ),
+      modelSubs: Object.fromEntries(Object.entries(this.modelSubs).map(([k, v]) => [k, [...v]])),
+      modelAtts: Object.fromEntries(Object.entries(this.modelAtts).map(([k, v]) => [k, [...v]])),
+      openApi: this.openApiRegistry.snapshot()
+    };
+  }
+  restoreBootstrapSnapshot(snapshot) {
+    this.globalOptions.restore(snapshot.globalOptions);
+    this.defaultModelOptions.restore(snapshot.defaultModelOptions);
+    for (const name of Object.keys(this.modelOptions)) {
+      if (!(name in snapshot.modelOptions)) {
+        delete this.modelOptions[name];
+      }
+    }
+    for (const [name, opts] of Object.entries(snapshot.modelOptions)) {
+      const existing = this.modelOptions[name];
+      if (existing) {
+        existing.restore(opts);
+      } else {
+        const mgr = this.createModelOptions(name);
+        mgr.restore(opts);
+        this.modelOptions[name] = mgr;
+      }
+    }
+    for (const name of Object.keys(this.dataOptions)) {
+      if (!(name in snapshot.dataOptions)) {
+        delete this.dataOptions[name];
+      }
+    }
+    for (const [name, opts] of Object.entries(snapshot.dataOptions)) {
+      const existing = this.dataOptions[name];
+      if (existing) {
+        existing.restore(opts);
+      } else {
+        const mgr = this.createDataOptions(name);
+        mgr.restore(opts);
+        this.dataOptions[name] = mgr;
+      }
+    }
+    for (const k of Object.keys(this.modelInstances)) {
+      if (!(k in snapshot.modelInstances)) delete this.modelInstances[k];
+    }
+    Object.assign(this.modelInstances, snapshot.modelInstances);
+    for (const k of Object.keys(this.modelJsonSchemas)) {
+      if (!(k in snapshot.modelJsonSchemas)) delete this.modelJsonSchemas[k];
+    }
+    Object.assign(this.modelJsonSchemas, snapshot.modelJsonSchemas);
+    for (const k of Object.keys(this.modelRefs)) {
+      if (!(k in snapshot.modelRefs)) delete this.modelRefs[k];
+    }
+    Object.assign(this.modelRefs, snapshot.modelRefs);
+    for (const k of Object.keys(this.modelSubs)) {
+      if (!(k in snapshot.modelSubs)) delete this.modelSubs[k];
+    }
+    Object.assign(this.modelSubs, snapshot.modelSubs);
+    for (const k of Object.keys(this.modelAtts)) {
+      if (!(k in snapshot.modelAtts)) delete this.modelAtts[k];
+    }
+    Object.assign(this.modelAtts, snapshot.modelAtts);
+    this.openApiRegistry.restore(snapshot.openApi);
+  }
   setGlobalOptions(options) {
     this.globalOptions.assign(options);
   }

package/index.d.mts

@@ -1,7 +1,7 @@
 import mongoose, { Schema } from 'mongoose';
 import { Response, NextFunction, RequestHandler, Router } from 'express';
-import { a8 as GlobalOptions, R as DefaultModelRouterOptions, Z as ExtendedDefaultModelRouterOptions, az as ModelRouterOptions, _ as ExtendedModelRouterOptions, N as DataRouterOptions, Y as ExtendedDataRouterOptions, A as AccessRouterBaseRequest, aa as GuardHook, ay as ModelRequest, L as DataRequest, cG as DataService, $ as Filter, aI as Projection, bD as Sort, aF as Populate, cH as Service, cI as PublicService, cj as Validation, bu as RootRouterOptions } from './parsers-PMWujHUV.mjs';
-export { cJ as AccessRouterPermissionMap, cK as AccessRouterPermissions, c as AccessRouterRequest, d as AccessRouterRequestExtensions, l as AjvErrorObjectLike, m as AjvValidatorLike, n as ArkTypeErrorsLike, o as ArkTypeLike, a9 as GlobalPermissionValue, ad as IoTsContextEntryLike, ae as IoTsDecodeErrorLike, af as IoTsDecoderLike, ag as JoiSchemaLike, ah as JoiValidationErrorDetailLike, am as MaybePromise, an as ModelBaseFilterHook, ap as ModelDeleteHook, aq as ModelDocPermissionsHook, as as ModelDocumentHook, at as ModelHook, av as ModelIdentifierHook, aw as ModelListHook, ax as ModelOverrideFilterHook, aA as ModelValidateHook, cL as Permissions, a_ as RequestSchemaAdapter, a$ as RequestSchemaFailure, b0 as RequestSchemaIssue, b1 as RequestSchemaLike, b2 as RequestSchemaOptions, b3 as RequestSchemaResult, b4 as RequestSchemaSuccess, b5 as RequestSchemaValidator, bF as StandardSchemaFailure, bG as StandardSchemaInferOutput, bH as StandardSchemaIssue, bI as StandardSchemaPathSegment, bJ as StandardSchemaResult, bK as StandardSchemaSuccess, bL as StandardSchemaV1, c0 as SuperstructFailureLike, c1 as SuperstructValidateLike, cd as ValibotIssueLike, ce as ValibotPathItemLike, cf as ValibotSafeParseLike, cg as ValibotSafeParseResult, cl as VineValidationErrorLike, cm as VineValidationMessageLike, cn as VineValidatorLike, co as YupSchemaLike, cp as YupValidationErrorLike, cq as defineRequestSchema, cr as fromAjv, cs as fromArkType, ct as fromIoTs, cu as fromJoi, cv as fromStandardSchema, cw as fromSuperstruct, cx as fromValibot, cy as fromVine, cz as fromYup, cA as fromZod } from './parsers-PMWujHUV.mjs';
+import { a8 as GlobalOptions, R as DefaultModelRouterOptions, az as ModelRouterOptions, N as DataRouterOptions, Z as ExtendedDefaultModelRouterOptions, _ as ExtendedModelRouterOptions, Y as ExtendedDataRouterOptions, A as AccessRouterBaseRequest, aa as GuardHook, ay as ModelRequest, L as DataRequest, cG as DataService, $ as Filter, aI as Projection, bD as Sort, aF as Populate, cH as Service, cI as PublicService, cj as Validation, bu as RootRouterOptions } from './parsers-PMWujHUV.mjs';
+export { cJ as AccessRouterPermissionMap, cK as AccessRouterPermissions, c as AccessRouterRequest, d as AccessRouterRequestExtensions, l as AjvErrorObjectLike, m as AjvValidatorLike, n as ArkTypeErrorsLike, o as ArkTypeLike, a9 as GlobalPermissionValue, ad as IoTsContextEntryLike, ae as IoTsDecodeErrorLike, af as IoTsDecoderLike, ag as JoiSchemaLike, ah as JoiValidationErrorDetailLike, am as MaybePromise, an as ModelBaseFilterHook, ap as ModelDeleteHook, aq as ModelDocPermissionsHook, as as ModelDocumentHook, at as ModelHook, av as ModelIdentifierHook, aw as ModelListHook, ax as ModelOverrideFilterHook, aA as ModelValidateHook, cL as Permissions, a_ as RequestSchemaAdapter, a$ as RequestSchemaFailure, b0 as RequestSchemaIssue, b1 as RequestSchemaLike, b2 as RequestSchemaOptions, b3 as RequestSchemaResult, b4 as RequestSchemaSuccess, b5 as RequestSchemaValidator, bx as RouteGuardAccess, bF as StandardSchemaFailure, bG as StandardSchemaInferOutput, bH as StandardSchemaIssue, bI as StandardSchemaPathSegment, bJ as StandardSchemaResult, bK as StandardSchemaSuccess, bL as StandardSchemaV1, c0 as SuperstructFailureLike, c1 as SuperstructValidateLike, cd as ValibotIssueLike, ce as ValibotPathItemLike, cf as ValibotSafeParseLike, cg as ValibotSafeParseResult, cl as VineValidationErrorLike, cm as VineValidationMessageLike, cn as VineValidatorLike, co as YupSchemaLike, cp as YupValidationErrorLike, cq as defineRequestSchema, cr as fromAjv, cs as fromArkType, ct as fromIoTs, cu as fromJoi, cv as fromStandardSchema, cw as fromSuperstruct, cx as fromValibot, cy as fromVine, cz as fromYup, cA as fromZod } from './parsers-PMWujHUV.mjs';
 import JsonRouter from '@web-ts-toolkit/express-json-router';
 import 'zod';
 
@@ -85,6 +85,9 @@ type OpenApiRouterOptions = Partial<OpenApiDocumentOptions> & {
     swaggerUiBundleUrl?: string;
 };
 
+type ModelReferenceMap = {
+    [key: string]: string | ModelReferenceMap;
+};
 declare class AccessRuntime {
     private readonly allowGlobalModelLookup;
     constructor(options?: {
@@ -135,6 +138,22 @@ declare class AccessRuntime {
             responses: OpenApiResponses;
         }>>;
     };
+    createBootstrapSnapshot(): {
+        globalOptions: GlobalOptions;
+        defaultModelOptions: DefaultModelRouterOptions;
+        modelOptions: Record<string, ModelRouterOptions>;
+        dataOptions: Record<string, DataRouterOptions>;
+        modelInstances: Record<string, mongoose.Model<unknown>>;
+        modelJsonSchemas: Record<string, Record<string, unknown>>;
+        modelRefs: Record<string, ModelReferenceMap>;
+        modelSubs: Record<string, string[]>;
+        modelAtts: Record<string, string[]>;
+        openApi: {
+            routes: OpenApiRouteDescriptor[];
+            options: Required<OpenApiRegistryOptions>;
+        };
+    };
+    restoreBootstrapSnapshot(snapshot: ReturnType<AccessRuntime['createBootstrapSnapshot']>): void;
     setGlobalOptions(options: GlobalOptions): void;
     setGlobalOption<K extends keyof GlobalOptions>(key: K, value: GlobalOptions[K]): void;
     getGlobalOptions(): GlobalOptions;
@@ -456,6 +475,14 @@ declare class OpenApiRegistry {
             responses: OpenApiResponses;
         }>>;
     };
+    snapshot(): {
+        routes: OpenApiRouteDescriptor[];
+        options: Required<OpenApiRegistryOptions>;
+    };
+    restore(snapshot: {
+        routes: OpenApiRouteDescriptor[];
+        options: Required<OpenApiRegistryOptions>;
+    }): void;
 }
 
 type AccessRouterInstance = ModelRouter<any> | DataRouter<any> | RootRouter;
@@ -574,4 +601,4 @@ type AccessRuntimeApi = typeof macl & Wtt;
 declare function createAccessRuntime(): AccessRuntimeApi;
 declare const acl: AccessRuntimeApi;
 
-export { AccessRuntime, type AccessRuntimeApi, type CombinedRouteInput, DataRouter, DataRouterOptions, ExtendedDefaultModelRouterOptions, ExtendedModelRouterOptions, GlobalOptions, type GuardModelCondition, type GuardModelConditionID, ModelRouter, ModelRouterOptions, type OpLogContext, OpenApiCollisionError, type OpenApiDocumentOptions, type OpenApiMethod, OpenApiRegistry, type OpenApiRegistryOptions, type OpenApiRouteDescriptor, type OpenApiRouterOptions, RootRouter, RootRouterOptions, acl, combineRoutes, createAccessRuntime, createOpenApiRouter, acl as default, defaultRuntime, getDefaultModelOption, getDefaultModelOptions, getGlobalOption, getGlobalOptions, getModelInstance, getModelJsonSchema, getModelNames, getModelOption, getModelOptions, guard, hasModelInstance, isLevelEnabled, permissionsPlugin, redactFilter, redactPayload, registerModelInstance, safeStringify, setDefaultModelOption, setDefaultModelOptions, setGlobalOption, setGlobalOptions, setModelOption, setModelOptions };
+export { AccessRuntime, type AccessRuntimeApi, type CombinedRouteInput, DataRouter, DataRouterOptions, ExtendedDefaultModelRouterOptions, ExtendedModelRouterOptions, GlobalOptions, GuardHook, type GuardModelCondition, type GuardModelConditionID, ModelRouter, ModelRouterOptions, type OpLogContext, OpenApiCollisionError, type OpenApiDocumentOptions, type OpenApiMethod, OpenApiRegistry, type OpenApiRegistryOptions, type OpenApiRouteDescriptor, type OpenApiRouterOptions, RootRouter, RootRouterOptions, Validation, acl, combineRoutes, createAccessRuntime, createOpenApiRouter, acl as default, defaultRuntime, getDefaultModelOption, getDefaultModelOptions, getGlobalOption, getGlobalOptions, getModelInstance, getModelJsonSchema, getModelNames, getModelOption, getModelOptions, guard, hasModelInstance, isLevelEnabled, permissionsPlugin, redactFilter, redactPayload, registerModelInstance, safeStringify, setDefaultModelOption, setDefaultModelOptions, setGlobalOption, setGlobalOptions, setModelOption, setModelOptions };

package/index.d.ts

@@ -1,7 +1,7 @@
 import mongoose, { Schema } from 'mongoose';
 import { Response, NextFunction, RequestHandler, Router } from 'express';
-import { a8 as GlobalOptions, R as DefaultModelRouterOptions, Z as ExtendedDefaultModelRouterOptions, az as ModelRouterOptions, _ as ExtendedModelRouterOptions, N as DataRouterOptions, Y as ExtendedDataRouterOptions, A as AccessRouterBaseRequest, aa as GuardHook, ay as ModelRequest, L as DataRequest, cG as DataService, $ as Filter, aI as Projection, bD as Sort, aF as Populate, cH as Service, cI as PublicService, cj as Validation, bu as RootRouterOptions } from './parsers-PMWujHUV.js';
-export { cJ as AccessRouterPermissionMap, cK as AccessRouterPermissions, c as AccessRouterRequest, d as AccessRouterRequestExtensions, l as AjvErrorObjectLike, m as AjvValidatorLike, n as ArkTypeErrorsLike, o as ArkTypeLike, a9 as GlobalPermissionValue, ad as IoTsContextEntryLike, ae as IoTsDecodeErrorLike, af as IoTsDecoderLike, ag as JoiSchemaLike, ah as JoiValidationErrorDetailLike, am as MaybePromise, an as ModelBaseFilterHook, ap as ModelDeleteHook, aq as ModelDocPermissionsHook, as as ModelDocumentHook, at as ModelHook, av as ModelIdentifierHook, aw as ModelListHook, ax as ModelOverrideFilterHook, aA as ModelValidateHook, cL as Permissions, a_ as RequestSchemaAdapter, a$ as RequestSchemaFailure, b0 as RequestSchemaIssue, b1 as RequestSchemaLike, b2 as RequestSchemaOptions, b3 as RequestSchemaResult, b4 as RequestSchemaSuccess, b5 as RequestSchemaValidator, bF as StandardSchemaFailure, bG as StandardSchemaInferOutput, bH as StandardSchemaIssue, bI as StandardSchemaPathSegment, bJ as StandardSchemaResult, bK as StandardSchemaSuccess, bL as StandardSchemaV1, c0 as SuperstructFailureLike, c1 as SuperstructValidateLike, cd as ValibotIssueLike, ce as ValibotPathItemLike, cf as ValibotSafeParseLike, cg as ValibotSafeParseResult, cl as VineValidationErrorLike, cm as VineValidationMessageLike, cn as VineValidatorLike, co as YupSchemaLike, cp as YupValidationErrorLike, cq as defineRequestSchema, cr as fromAjv, cs as fromArkType, ct as fromIoTs, cu as fromJoi, cv as fromStandardSchema, cw as fromSuperstruct, cx as fromValibot, cy as fromVine, cz as fromYup, cA as fromZod } from './parsers-PMWujHUV.js';
+import { a8 as GlobalOptions, R as DefaultModelRouterOptions, az as ModelRouterOptions, N as DataRouterOptions, Z as ExtendedDefaultModelRouterOptions, _ as ExtendedModelRouterOptions, Y as ExtendedDataRouterOptions, A as AccessRouterBaseRequest, aa as GuardHook, ay as ModelRequest, L as DataRequest, cG as DataService, $ as Filter, aI as Projection, bD as Sort, aF as Populate, cH as Service, cI as PublicService, cj as Validation, bu as RootRouterOptions } from './parsers-PMWujHUV.js';
+export { cJ as AccessRouterPermissionMap, cK as AccessRouterPermissions, c as AccessRouterRequest, d as AccessRouterRequestExtensions, l as AjvErrorObjectLike, m as AjvValidatorLike, n as ArkTypeErrorsLike, o as ArkTypeLike, a9 as GlobalPermissionValue, ad as IoTsContextEntryLike, ae as IoTsDecodeErrorLike, af as IoTsDecoderLike, ag as JoiSchemaLike, ah as JoiValidationErrorDetailLike, am as MaybePromise, an as ModelBaseFilterHook, ap as ModelDeleteHook, aq as ModelDocPermissionsHook, as as ModelDocumentHook, at as ModelHook, av as ModelIdentifierHook, aw as ModelListHook, ax as ModelOverrideFilterHook, aA as ModelValidateHook, cL as Permissions, a_ as RequestSchemaAdapter, a$ as RequestSchemaFailure, b0 as RequestSchemaIssue, b1 as RequestSchemaLike, b2 as RequestSchemaOptions, b3 as RequestSchemaResult, b4 as RequestSchemaSuccess, b5 as RequestSchemaValidator, bx as RouteGuardAccess, bF as StandardSchemaFailure, bG as StandardSchemaInferOutput, bH as StandardSchemaIssue, bI as StandardSchemaPathSegment, bJ as StandardSchemaResult, bK as StandardSchemaSuccess, bL as StandardSchemaV1, c0 as SuperstructFailureLike, c1 as SuperstructValidateLike, cd as ValibotIssueLike, ce as ValibotPathItemLike, cf as ValibotSafeParseLike, cg as ValibotSafeParseResult, cl as VineValidationErrorLike, cm as VineValidationMessageLike, cn as VineValidatorLike, co as YupSchemaLike, cp as YupValidationErrorLike, cq as defineRequestSchema, cr as fromAjv, cs as fromArkType, ct as fromIoTs, cu as fromJoi, cv as fromStandardSchema, cw as fromSuperstruct, cx as fromValibot, cy as fromVine, cz as fromYup, cA as fromZod } from './parsers-PMWujHUV.js';
 import JsonRouter from '@web-ts-toolkit/express-json-router';
 import 'zod';
 
@@ -85,6 +85,9 @@ type OpenApiRouterOptions = Partial<OpenApiDocumentOptions> & {
     swaggerUiBundleUrl?: string;
 };
 
+type ModelReferenceMap = {
+    [key: string]: string | ModelReferenceMap;
+};
 declare class AccessRuntime {
     private readonly allowGlobalModelLookup;
     constructor(options?: {
@@ -135,6 +138,22 @@ declare class AccessRuntime {
             responses: OpenApiResponses;
         }>>;
     };
+    createBootstrapSnapshot(): {
+        globalOptions: GlobalOptions;
+        defaultModelOptions: DefaultModelRouterOptions;
+        modelOptions: Record<string, ModelRouterOptions>;
+        dataOptions: Record<string, DataRouterOptions>;
+        modelInstances: Record<string, mongoose.Model<unknown>>;
+        modelJsonSchemas: Record<string, Record<string, unknown>>;
+        modelRefs: Record<string, ModelReferenceMap>;
+        modelSubs: Record<string, string[]>;
+        modelAtts: Record<string, string[]>;
+        openApi: {
+            routes: OpenApiRouteDescriptor[];
+            options: Required<OpenApiRegistryOptions>;
+        };
+    };
+    restoreBootstrapSnapshot(snapshot: ReturnType<AccessRuntime['createBootstrapSnapshot']>): void;
     setGlobalOptions(options: GlobalOptions): void;
     setGlobalOption<K extends keyof GlobalOptions>(key: K, value: GlobalOptions[K]): void;
     getGlobalOptions(): GlobalOptions;
@@ -456,6 +475,14 @@ declare class OpenApiRegistry {
             responses: OpenApiResponses;
         }>>;
     };
+    snapshot(): {
+        routes: OpenApiRouteDescriptor[];
+        options: Required<OpenApiRegistryOptions>;
+    };
+    restore(snapshot: {
+        routes: OpenApiRouteDescriptor[];
+        options: Required<OpenApiRegistryOptions>;
+    }): void;
 }
 
 type AccessRouterInstance = ModelRouter<any> | DataRouter<any> | RootRouter;
@@ -574,4 +601,4 @@ type AccessRuntimeApi = typeof macl & Wtt;
 declare function createAccessRuntime(): AccessRuntimeApi;
 declare const acl: AccessRuntimeApi;
 
-export { AccessRuntime, type AccessRuntimeApi, type CombinedRouteInput, DataRouter, DataRouterOptions, ExtendedDefaultModelRouterOptions, ExtendedModelRouterOptions, GlobalOptions, type GuardModelCondition, type GuardModelConditionID, ModelRouter, ModelRouterOptions, type OpLogContext, OpenApiCollisionError, type OpenApiDocumentOptions, type OpenApiMethod, OpenApiRegistry, type OpenApiRegistryOptions, type OpenApiRouteDescriptor, type OpenApiRouterOptions, RootRouter, RootRouterOptions, acl, combineRoutes, createAccessRuntime, createOpenApiRouter, acl as default, defaultRuntime, getDefaultModelOption, getDefaultModelOptions, getGlobalOption, getGlobalOptions, getModelInstance, getModelJsonSchema, getModelNames, getModelOption, getModelOptions, guard, hasModelInstance, isLevelEnabled, permissionsPlugin, redactFilter, redactPayload, registerModelInstance, safeStringify, setDefaultModelOption, setDefaultModelOptions, setGlobalOption, setGlobalOptions, setModelOption, setModelOptions };
+export { AccessRuntime, type AccessRuntimeApi, type CombinedRouteInput, DataRouter, DataRouterOptions, ExtendedDefaultModelRouterOptions, ExtendedModelRouterOptions, GlobalOptions, GuardHook, type GuardModelCondition, type GuardModelConditionID, ModelRouter, ModelRouterOptions, type OpLogContext, OpenApiCollisionError, type OpenApiDocumentOptions, type OpenApiMethod, OpenApiRegistry, type OpenApiRegistryOptions, type OpenApiRouteDescriptor, type OpenApiRouterOptions, RootRouter, RootRouterOptions, Validation, acl, combineRoutes, createAccessRuntime, createOpenApiRouter, acl as default, defaultRuntime, getDefaultModelOption, getDefaultModelOptions, getGlobalOption, getGlobalOptions, getModelInstance, getModelJsonSchema, getModelNames, getModelOption, getModelOptions, guard, hasModelInstance, isLevelEnabled, permissionsPlugin, redactFilter, redactPayload, registerModelInstance, safeStringify, setDefaultModelOption, setDefaultModelOptions, setGlobalOption, setGlobalOptions, setModelOption, setModelOptions };

package/index.js

@@ -779,6 +779,17 @@ var OpenApiRegistry = class {
   getSpec(info) {
     return buildOpenApiSpec(this.routes, info);
   }
+  snapshot() {
+    return {
+      routes: [...this.routes],
+      options: { ...this.options }
+    };
+  }
+  restore(snapshot) {
+    this.routes.length = 0;
+    this.routes.push(...snapshot.routes);
+    this.options = { ...snapshot.options };
+  }
 };
 
 // src/logger-default.ts
@@ -892,7 +903,8 @@ var OptionsManager = class {
     }
     const [rootKey, ...nestedPath] = path;
     const currentRoot = (0, import_utils9.get)(this.currentOptions, [rootKey], void 0);
-    const nextRoot = cloneConfigValue(currentRoot ?? {});
+    const baseRoot = (0, import_utils9.isPlainObject)(currentRoot) ? currentRoot : {};
+    const nextRoot = cloneConfigValue(baseRoot);
     (0, import_utils9.set)(nextRoot, nestedPath, cloneConfigValue(value));
     (0, import_utils9.set)(this.currentOptions, [rootKey], nextRoot);
   }
@@ -918,6 +930,31 @@ var OptionsManager = class {
     (0, import_utils9.set)(this.listeners, key, func);
     return this;
   }
+  snapshot() {
+    const cloned = cloneConfigValue(this.currentOptions);
+    for (const key of this.preserveKeys) {
+      if (key in this.currentOptions) {
+        cloned[key] = this.currentOptions[key];
+      }
+    }
+    return cloned;
+  }
+  restore(snapshot) {
+    const snap = snapshot;
+    const current = this.currentOptions;
+    for (const key of Object.keys(current)) {
+      if (!(key in snap)) {
+        delete current[key];
+      }
+    }
+    const cloned = cloneConfigValue(snap);
+    for (const key of this.preserveKeys) {
+      if (key in snap) {
+        cloned[key] = snap[key];
+      }
+    }
+    (0, import_utils9.assign)(current, cloned);
+  }
 };
 
 // src/request-complexity.ts
@@ -1192,6 +1229,85 @@ var AccessRuntime = class {
   getOpenApiSpec(info) {
     return this.openApiRegistry.getSpec(info);
   }
+  createBootstrapSnapshot() {
+    const modelOptionsSnap = {};
+    for (const [name, mgr] of Object.entries(this.modelOptions)) {
+      modelOptionsSnap[name] = mgr.snapshot();
+    }
+    const dataOptionsSnap = {};
+    for (const [name, mgr] of Object.entries(this.dataOptions)) {
+      dataOptionsSnap[name] = mgr.snapshot();
+    }
+    return {
+      globalOptions: this.globalOptions.snapshot(),
+      defaultModelOptions: this.defaultModelOptions.snapshot(),
+      modelOptions: modelOptionsSnap,
+      dataOptions: dataOptionsSnap,
+      modelInstances: { ...this.modelInstances },
+      modelJsonSchemas: { ...this.modelJsonSchemas },
+      modelRefs: Object.fromEntries(
+        Object.entries(this.modelRefs).map(([k, v]) => [k, JSON.parse(JSON.stringify(v))])
+      ),
+      modelSubs: Object.fromEntries(Object.entries(this.modelSubs).map(([k, v]) => [k, [...v]])),
+      modelAtts: Object.fromEntries(Object.entries(this.modelAtts).map(([k, v]) => [k, [...v]])),
+      openApi: this.openApiRegistry.snapshot()
+    };
+  }
+  restoreBootstrapSnapshot(snapshot) {
+    this.globalOptions.restore(snapshot.globalOptions);
+    this.defaultModelOptions.restore(snapshot.defaultModelOptions);
+    for (const name of Object.keys(this.modelOptions)) {
+      if (!(name in snapshot.modelOptions)) {
+        delete this.modelOptions[name];
+      }
+    }
+    for (const [name, opts] of Object.entries(snapshot.modelOptions)) {
+      const existing = this.modelOptions[name];
+      if (existing) {
+        existing.restore(opts);
+      } else {
+        const mgr = this.createModelOptions(name);
+        mgr.restore(opts);
+        this.modelOptions[name] = mgr;
+      }
+    }
+    for (const name of Object.keys(this.dataOptions)) {
+      if (!(name in snapshot.dataOptions)) {
+        delete this.dataOptions[name];
+      }
+    }
+    for (const [name, opts] of Object.entries(snapshot.dataOptions)) {
+      const existing = this.dataOptions[name];
+      if (existing) {
+        existing.restore(opts);
+      } else {
+        const mgr = this.createDataOptions(name);
+        mgr.restore(opts);
+        this.dataOptions[name] = mgr;
+      }
+    }
+    for (const k of Object.keys(this.modelInstances)) {
+      if (!(k in snapshot.modelInstances)) delete this.modelInstances[k];
+    }
+    Object.assign(this.modelInstances, snapshot.modelInstances);
+    for (const k of Object.keys(this.modelJsonSchemas)) {
+      if (!(k in snapshot.modelJsonSchemas)) delete this.modelJsonSchemas[k];
+    }
+    Object.assign(this.modelJsonSchemas, snapshot.modelJsonSchemas);
+    for (const k of Object.keys(this.modelRefs)) {
+      if (!(k in snapshot.modelRefs)) delete this.modelRefs[k];
+    }
+    Object.assign(this.modelRefs, snapshot.modelRefs);
+    for (const k of Object.keys(this.modelSubs)) {
+      if (!(k in snapshot.modelSubs)) delete this.modelSubs[k];
+    }
+    Object.assign(this.modelSubs, snapshot.modelSubs);
+    for (const k of Object.keys(this.modelAtts)) {
+      if (!(k in snapshot.modelAtts)) delete this.modelAtts[k];
+    }
+    Object.assign(this.modelAtts, snapshot.modelAtts);
+    this.openApiRegistry.restore(snapshot.openApi);
+  }
   setGlobalOptions(options) {
     this.globalOptions.assign(options);
   }

package/index.mjs

@@ -1,9 +1,9 @@
 // src/index.ts
-import { isPlainObject as isPlainObject17, isString as isString10, isUndefined as isUndefined4 } from "@web-ts-toolkit/utils";
+import { isPlainObject as isPlainObject18, isString as isString10, isUndefined as isUndefined4 } from "@web-ts-toolkit/utils";
 
 // src/middleware.ts
 import JsonRouter2 from "@web-ts-toolkit/express-json-router";
-import { isArray as isArray11, isFunction as isFunction6, isPlainObject as isPlainObject14, isString as isString7 } from "@web-ts-toolkit/utils";
+import { isArray as isArray11, isFunction as isFunction6, isPlainObject as isPlainObject15, isString as isString7 } from "@web-ts-toolkit/utils";
 
 // src/core.ts
 import {
@@ -29,7 +29,7 @@ import {
   isBoolean,
   isFunction,
   isNil as isNil2,
-  isPlainObject as isPlainObject9,
+  isPlainObject as isPlainObject10,
   isString as isString4,
   keys
 } from "@web-ts-toolkit/utils";
@@ -722,6 +722,17 @@ var OpenApiRegistry = class {
   getSpec(info) {
     return buildOpenApiSpec(this.routes, info);
   }
+  snapshot() {
+    return {
+      routes: [...this.routes],
+      options: { ...this.options }
+    };
+  }
+  restore(snapshot) {
+    this.routes.length = 0;
+    this.routes.push(...snapshot.routes);
+    this.options = { ...snapshot.options };
+  }
 };
 
 // src/logger-default.ts
@@ -751,7 +762,7 @@ var defaultLogger = createLogger({
 });
 
 // src/options/manager.ts
-import { assign, get as get2, set as set2 } from "@web-ts-toolkit/utils";
+import { assign, get as get2, isPlainObject as isPlainObject8, set as set2 } from "@web-ts-toolkit/utils";
 var toPath = (key) => {
   if (Array.isArray(key)) return key;
   return typeof key === "string" ? key.split(".") : [key];
@@ -835,7 +846,8 @@ var OptionsManager = class {
     }
     const [rootKey, ...nestedPath] = path;
     const currentRoot = get2(this.currentOptions, [rootKey], void 0);
-    const nextRoot = cloneConfigValue(currentRoot ?? {});
+    const baseRoot = isPlainObject8(currentRoot) ? currentRoot : {};
+    const nextRoot = cloneConfigValue(baseRoot);
     set2(nextRoot, nestedPath, cloneConfigValue(value));
     set2(this.currentOptions, [rootKey], nextRoot);
   }
@@ -861,10 +873,35 @@ var OptionsManager = class {
     set2(this.listeners, key, func);
     return this;
   }
+  snapshot() {
+    const cloned = cloneConfigValue(this.currentOptions);
+    for (const key of this.preserveKeys) {
+      if (key in this.currentOptions) {
+        cloned[key] = this.currentOptions[key];
+      }
+    }
+    return cloned;
+  }
+  restore(snapshot) {
+    const snap = snapshot;
+    const current = this.currentOptions;
+    for (const key of Object.keys(current)) {
+      if (!(key in snap)) {
+        delete current[key];
+      }
+    }
+    const cloned = cloneConfigValue(snap);
+    for (const key of this.preserveKeys) {
+      if (key in snap) {
+        cloned[key] = snap[key];
+      }
+    }
+    assign(current, cloned);
+  }
 };
 
 // src/request-complexity.ts
-import { isArray as isArray4, isPlainObject as isPlainObject8 } from "@web-ts-toolkit/utils";
+import { isArray as isArray4, isPlainObject as isPlainObject9 } from "@web-ts-toolkit/utils";
 var defaultRequestComplexity = {
   maxDepth: 8,
   maxNodes: 500,
@@ -940,7 +977,7 @@ function validateRequestComplexity(value, options, scope = "request") {
       }
       return;
     }
-    if (!isPlainObject8(current)) return;
+    if (!isPlainObject9(current)) return;
     for (const [key, child] of Object.entries(current)) {
       if (key === "__proto__" || key === "prototype" || key === "constructor") {
         pushError(`Unsupported key: ${key}`, path.concat(key));
@@ -1019,7 +1056,7 @@ var classifyPermissionSchema = (permissionSchema, modelPermissionPrefix) => {
   const modelPermissionKeys = {};
   forEach2(schemaKeys, (schemaKey) => {
     const schemaRule = permissionSchema[schemaKey];
-    const ruleEntries = isPlainObject9(schemaRule) ? Object.entries(schemaRule) : FIELD_ACCESS_KEYS.map((accessKey) => [accessKey, schemaRule]);
+    const ruleEntries = isPlainObject10(schemaRule) ? Object.entries(schemaRule) : FIELD_ACCESS_KEYS.map((accessKey) => [accessKey, schemaRule]);
     for (let x = 0; x < ruleEntries.length; x++) {
       const [accessKey, value] = ruleEntries[x];
       if (!isArray5(globalPermissionKeys[accessKey])) {
@@ -1135,6 +1172,85 @@ var AccessRuntime = class {
   getOpenApiSpec(info) {
     return this.openApiRegistry.getSpec(info);
   }
+  createBootstrapSnapshot() {
+    const modelOptionsSnap = {};
+    for (const [name, mgr] of Object.entries(this.modelOptions)) {
+      modelOptionsSnap[name] = mgr.snapshot();
+    }
+    const dataOptionsSnap = {};
+    for (const [name, mgr] of Object.entries(this.dataOptions)) {
+      dataOptionsSnap[name] = mgr.snapshot();
+    }
+    return {
+      globalOptions: this.globalOptions.snapshot(),
+      defaultModelOptions: this.defaultModelOptions.snapshot(),
+      modelOptions: modelOptionsSnap,
+      dataOptions: dataOptionsSnap,
+      modelInstances: { ...this.modelInstances },
+      modelJsonSchemas: { ...this.modelJsonSchemas },
+      modelRefs: Object.fromEntries(
+        Object.entries(this.modelRefs).map(([k, v]) => [k, JSON.parse(JSON.stringify(v))])
+      ),
+      modelSubs: Object.fromEntries(Object.entries(this.modelSubs).map(([k, v]) => [k, [...v]])),
+      modelAtts: Object.fromEntries(Object.entries(this.modelAtts).map(([k, v]) => [k, [...v]])),
+      openApi: this.openApiRegistry.snapshot()
+    };
+  }
+  restoreBootstrapSnapshot(snapshot) {
+    this.globalOptions.restore(snapshot.globalOptions);
+    this.defaultModelOptions.restore(snapshot.defaultModelOptions);
+    for (const name of Object.keys(this.modelOptions)) {
+      if (!(name in snapshot.modelOptions)) {
+        delete this.modelOptions[name];
+      }
+    }
+    for (const [name, opts] of Object.entries(snapshot.modelOptions)) {
+      const existing = this.modelOptions[name];
+      if (existing) {
+        existing.restore(opts);
+      } else {
+        const mgr = this.createModelOptions(name);
+        mgr.restore(opts);
+        this.modelOptions[name] = mgr;
+      }
+    }
+    for (const name of Object.keys(this.dataOptions)) {
+      if (!(name in snapshot.dataOptions)) {
+        delete this.dataOptions[name];
+      }
+    }
+    for (const [name, opts] of Object.entries(snapshot.dataOptions)) {
+      const existing = this.dataOptions[name];
+      if (existing) {
+        existing.restore(opts);
+      } else {
+        const mgr = this.createDataOptions(name);
+        mgr.restore(opts);
+        this.dataOptions[name] = mgr;
+      }
+    }
+    for (const k of Object.keys(this.modelInstances)) {
+      if (!(k in snapshot.modelInstances)) delete this.modelInstances[k];
+    }
+    Object.assign(this.modelInstances, snapshot.modelInstances);
+    for (const k of Object.keys(this.modelJsonSchemas)) {
+      if (!(k in snapshot.modelJsonSchemas)) delete this.modelJsonSchemas[k];
+    }
+    Object.assign(this.modelJsonSchemas, snapshot.modelJsonSchemas);
+    for (const k of Object.keys(this.modelRefs)) {
+      if (!(k in snapshot.modelRefs)) delete this.modelRefs[k];
+    }
+    Object.assign(this.modelRefs, snapshot.modelRefs);
+    for (const k of Object.keys(this.modelSubs)) {
+      if (!(k in snapshot.modelSubs)) delete this.modelSubs[k];
+    }
+    Object.assign(this.modelSubs, snapshot.modelSubs);
+    for (const k of Object.keys(this.modelAtts)) {
+      if (!(k in snapshot.modelAtts)) delete this.modelAtts[k];
+    }
+    Object.assign(this.modelAtts, snapshot.modelAtts);
+    this.openApiRegistry.restore(snapshot.openApi);
+  }
   setGlobalOptions(options) {
     this.globalOptions.assign(options);
   }
@@ -1403,7 +1519,7 @@ import {
   forEach as forEach3,
   get as get4,
   isArray as isArray6,
-  isPlainObject as isPlainObject10,
+  isPlainObject as isPlainObject11,
   uniq
 } from "@web-ts-toolkit/utils";
 var ClientRequestError = class extends Error {
@@ -1424,7 +1540,7 @@ function validateClientFilter(filter2) {
       value.forEach((item, index) => visit(item, `${path}[${index}]`));
       return;
     }
-    if (!isPlainObject10(value)) return;
+    if (!isPlainObject11(value)) return;
     Object.entries(value).forEach(([key, child]) => {
       const nextPath = path ? `${path}.${key}` : key;
       if (blockedOperators.has(key)) {
@@ -1601,7 +1717,7 @@ var Base = class {
     return ids.size;
   }
   sanitizeIncludeArgs(args) {
-    if (!isPlainObject10(args)) return {};
+    if (!isPlainObject11(args)) return {};
     const { overrides: _clientOverrides, ...trustedArgs } = args;
     return trustedArgs;
   }
@@ -3431,7 +3547,7 @@ var DataService = class {
 };
 
 // src/processors.ts
-import { cloneDeep, forEach as forEach6, get as get7, isArray as isArray8, isPlainObject as isPlainObject12, map, set as set5 } from "@web-ts-toolkit/utils";
+import { cloneDeep, forEach as forEach6, get as get7, isArray as isArray8, isPlainObject as isPlainObject13, map, set as set5 } from "@web-ts-toolkit/utils";
 var UNSAFE_PATH_KEYS = /* @__PURE__ */ new Set(["__proto__", "prototype", "constructor"]);
 function failUnsafeSegment(path) {
   throw new Error(
@@ -3466,7 +3582,7 @@ var copyAndDepopulate = (docObject, operations, options = { mutable: true, idFie
     forEach6(segs, (seg, ind) => {
       if (segs.length === ind + 1) {
         forEach6(targets, (target) => {
-          if (!isPlainObject12(target)) return;
+          if (!isPlainObject13(target)) return;
           const targetObject = target;
           const leaf = targetObject[seg];
           const sourceForDest = leaf;
@@ -3474,7 +3590,7 @@ var copyAndDepopulate = (docObject, operations, options = { mutable: true, idFie
           if (isArray8(leaf)) {
             if (leaf.length === 0) {
               depopulated = [];
-            } else if (leaf.every((item) => isPlainObject12(item))) {
+            } else if (leaf.every((item) => isPlainObject13(item))) {
               depopulated = map(leaf, idField).map((id, i) => {
                 if (id === void 0) {
                   failMissingId(`${src}[${i}]`);
@@ -3484,7 +3600,7 @@ var copyAndDepopulate = (docObject, operations, options = { mutable: true, idFie
             } else {
               return;
             }
-          } else if (isPlainObject12(leaf)) {
+          } else if (isPlainObject13(leaf)) {
             const id = get7(leaf, idField);
             if (id === void 0) {
               failMissingId(src);
@@ -3498,7 +3614,7 @@ var copyAndDepopulate = (docObject, operations, options = { mutable: true, idFie
         });
       } else {
         targets = targets.reduce((ret, target) => {
-          if (!isPlainObject12(target)) return ret;
+          if (!isPlainObject13(target)) return ret;
           const targetObject = target;
           const next = targetObject[seg];
           if (isArray8(next)) ret.push(...next);
@@ -3558,7 +3674,7 @@ import {
   isEmpty as isEmpty2,
   isEqual,
   isFunction as isFunction4,
-  isPlainObject as isPlainObject13,
+  isPlainObject as isPlainObject14,
   isString as isString5
 } from "@web-ts-toolkit/utils";
 
@@ -3599,10 +3715,10 @@ var permission_default = Permission;
 
 // src/core-shared.ts
 function isAndFilter(filter2) {
-  return !!filter2 && isPlainObject13(filter2) && Object.keys(filter2).length === 1 && isArray9(filter2.$and);
+  return !!filter2 && isPlainObject14(filter2) && Object.keys(filter2).length === 1 && isArray9(filter2.$and);
 }
 function isMergeableClause(filter2) {
-  return !!filter2 && isPlainObject13(filter2) && Object.keys(filter2).every((key) => !key.startsWith("$"));
+  return !!filter2 && isPlainObject14(filter2) && Object.keys(filter2).every((key) => !key.startsWith("$"));
 }
 function optimizeAndFilter(clausesInput) {
   const clauses = [];
@@ -3620,7 +3736,7 @@ function optimizeAndFilter(clausesInput) {
     if (isArray9(value)) {
       return `[${value.map(dedupeKey).join(",")}]`;
     }
-    if (isPlainObject13(value)) {
+    if (isPlainObject14(value)) {
       return `{${Object.keys(value).sort().map((key) => `${key}:${dedupeKey(value[key])}`).join(",")}}`;
     }
     return JSON.stringify(value);
@@ -3662,7 +3778,7 @@ function optimizeAndFilter(clausesInput) {
 }
 function normalizeFilter(filter2) {
   if (filter2 === false) return false;
-  if (!filter2 || !isPlainObject13(filter2) || isEmpty2(filter2)) return null;
+  if (!filter2 || !isPlainObject14(filter2) || isEmpty2(filter2)) return null;
   if (!isAndFilter(filter2)) {
     return filter2;
   }
@@ -3714,7 +3830,7 @@ async function setRequestPermissions(req) {
   const globalPermissions = getGlobalOption("globalPermissions");
   if (!isFunction4(globalPermissions)) return;
   const permissions = await globalPermissions.call(req, req);
-  if (isPlainObject13(permissions)) req[requestPermissionField] = permissions;
+  if (isPlainObject14(permissions)) req[requestPermissionField] = permissions;
   else if (isArray9(permissions)) req[requestPermissionField] = arrayToRecord(permissions);
   else if (isString5(permissions)) req[requestPermissionField] = { [permissions]: true };
 }
@@ -4289,12 +4405,12 @@ function guard(condition) {
     const permissions = req[PERMISSIONS];
     let cond = condition;
     let phas = (key) => permissions.has(key);
-    if (isPlainObject14(condition)) {
+    if (isPlainObject15(condition)) {
       const { modelName, id, condition: _cond } = condition;
       const svc = req.macl.getPublicService(modelName);
       const select = getModelOption(modelName, `alwaysSelectFields.read`, void 0);
       let _id = isString7(id) ? id : null;
-      if (isPlainObject14(id)) {
+      if (isPlainObject15(id)) {
         const { type = "param", key } = id;
         if (type === "param") {
           const paramValue = req.params[key];
@@ -4336,7 +4452,7 @@ import express2 from "express";
 
 // src/routers/model-router.ts
 import JsonRouter5 from "@web-ts-toolkit/express-json-router";
-import { forEach as forEach8, isPlainObject as isPlainObject15, isString as isString8, isUndefined as isUndefined2, normalizeUrlPath as normalizeUrlPath2, padEnd } from "@web-ts-toolkit/utils";
+import { forEach as forEach8, isPlainObject as isPlainObject16, isString as isString8, isUndefined as isUndefined2, normalizeUrlPath as normalizeUrlPath2, padEnd } from "@web-ts-toolkit/utils";
 
 // src/routers/router-mutation.ts
 var MODEL_BUILD_TIME_OPTION_KEYS = /* @__PURE__ */ new Set([
@@ -6231,7 +6347,7 @@ var ModelRouter = class _ModelRouter {
         value
       );
     }
-    if (arguments.length === 1 && isPlainObject15(keyOrOptions)) {
+    if (arguments.length === 1 && isPlainObject16(keyOrOptions)) {
       assertMutableRouterOptions("model", keyOrOptions);
       this.runtime.setModelOptions(this.modelName, keyOrOptions);
     }
@@ -6665,7 +6781,7 @@ var RootRouter = class {
 
 // src/routers/data-router.ts
 import JsonRouter7 from "@web-ts-toolkit/express-json-router";
-import { isPlainObject as isPlainObject16, isString as isString9, isUndefined as isUndefined3, normalizeUrlPath as normalizeUrlPath4 } from "@web-ts-toolkit/utils";
+import { isPlainObject as isPlainObject17, isString as isString9, isUndefined as isUndefined3, normalizeUrlPath as normalizeUrlPath4 } from "@web-ts-toolkit/utils";
 var clientErrors4 = JsonRouter7.clientErrors;
 function setOption2(parentKey, optionKey, option) {
   const key = isUndefined3(option) ? parentKey : `${parentKey}.${optionKey}`;
@@ -6861,7 +6977,7 @@ var DataRouter = class {
       assertMutableRouterOption("data", keyOrOptions);
       this.runtime.setDataOption(this.dataName, keyOrOptions, value);
     }
-    if (arguments.length === 1 && isPlainObject16(keyOrOptions)) {
+    if (arguments.length === 1 && isPlainObject17(keyOrOptions)) {
       assertMutableRouterOptions("data", keyOrOptions);
       this.runtime.setDataOptions(this.dataName, keyOrOptions);
     }
@@ -7008,7 +7124,7 @@ function createRuntimeApi(runtime) {
     if (arguments.length === 2 && isString10(keyOrOptions)) {
       return runtime.setGlobalOption(keyOrOptions, value);
     }
-    if (arguments.length === 1 && isPlainObject17(keyOrOptions)) {
+    if (arguments.length === 1 && isPlainObject18(keyOrOptions)) {
       return runtime.setGlobalOptions(keyOrOptions);
     }
   };

package/package.json

@@ -2,7 +2,7 @@
   "name": "@web-ts-toolkit/access-router",
   "description": "ACL-aware Express routers and in-memory data services for Mongoose-backed APIs",
   "homepage": "https://web-ts-toolkit.pages.dev/docs/packages/access-router",
-  "version": "0.41.0",
+  "version": "0.42.1",
   "sideEffects": [
     "./**/index.js",
     "./**/index.mjs",
@@ -45,8 +45,8 @@
     "node": ">=22"
   },
   "dependencies": {
-    "@web-ts-toolkit/express-json-router": "0.41.0",
-    "@web-ts-toolkit/utils": "0.41.0",
+    "@web-ts-toolkit/express-json-router": "0.42.1",
+    "@web-ts-toolkit/utils": "0.42.1",
     "just-diff": "^6.0.2",
     "mongoose-schema-jsonschema": "^4.0.1",
     "sift": "^17.1.3",