@web-ts-toolkit/access-router 0.45.0 → 0.46.0

package/index.d.mts

@@ -1,193 +1,10 @@
 import mongoose, { Schema } from 'mongoose';
 import { Response, NextFunction, RequestHandler, Router } from 'express';
-import { ag as GlobalOptions, Z as DefaultModelRouterOptions, aI as ModelRouterOptions, V as DataRouterOptions, a5 as ExtendedDefaultModelRouterOptions, a6 as ExtendedModelRouterOptions, a4 as ExtendedDataRouterOptions, A as AccessRouterBaseRequest, ai as GuardHook, aH as ModelRequest, T as DataRequest, cR as DataService, a7 as Filter, aS as Projection, bN as Sort, aP as Populate, cS as Service, cT as PublicService, cu as Validation, bE as RootRouterOptions } from './parsers-DppKW-Fd.mjs';
-export { cU as AccessRouterPermissionMap, cV as AccessRouterPermissions, c as AccessRouterRequest, d as AccessRouterRequestExtensions, l as AjvErrorObjectLike, n as AjvValidatorLike, o as ArkTypeErrorsLike, p as ArkTypeLike, ah as GlobalPermissionValue, al as IoTsContextEntryLike, am as IoTsDecodeErrorLike, an as IoTsDecoderLike, ao as JoiSchemaLike, ap as JoiValidationErrorDetailLike, av as MaybePromise, aw as ModelBaseFilterHook, ay as ModelDeleteHook, az as ModelDocPermissionsHook, aB as ModelDocumentHook, aC as ModelHook, aE as ModelIdentifierHook, aF as ModelListHook, aG as ModelOverrideFilterHook, aJ as ModelValidateHook, cW as Permissions, b8 as RequestSchemaAdapter, b9 as RequestSchemaFailure, ba as RequestSchemaIssue, bb as RequestSchemaLike, bc as RequestSchemaOptions, bd as RequestSchemaResult, be as RequestSchemaSuccess, bf as RequestSchemaValidator, bH as RouteGuardAccess, bP as StandardSchemaFailure, bQ as StandardSchemaInferOutput, bR as StandardSchemaIssue, bS as StandardSchemaPathSegment, bT as StandardSchemaResult, bU as StandardSchemaSuccess, bV as StandardSchemaV1, ca as SuperstructFailureLike, cb as SuperstructValidateLike, co as ValibotIssueLike, cp as ValibotPathItemLike, cq as ValibotSafeParseLike, cr as ValibotSafeParseResult, cw as VineValidationErrorLike, cx as VineValidationMessageLike, cy as VineValidatorLike, cz as YupSchemaLike, cA as YupValidationErrorLike, cB as defineRequestSchema, cC as fromAjv, cD as fromArkType, cE as fromIoTs, cF as fromJoi, cG as fromStandardSchema, cH as fromSuperstruct, cI as fromValibot, cJ as fromVine, cK as fromYup, cL as fromZod } from './parsers-DppKW-Fd.mjs';
+import { A as AccessRouterBaseRequest, ai as GuardHook, aH as ModelRequest, cR as AccessRuntime, V as DataRouterOptions, T as DataRequest, cS as DataService, a7 as Filter, aS as Projection, bN as Sort, aP as Populate, aI as ModelRouterOptions, cT as Service, cU as PublicService, a6 as ExtendedModelRouterOptions, cu as Validation, bE as RootRouterOptions, cV as OpenApiRouterOptions, cW as OpenApiRegistryOptions, cX as OpenApiRouteDescriptor, cY as OpenApiDocumentOptions, cZ as OpenApiParameter, c_ as OpenApiSchema, c$ as OpenApiResponses, ag as GlobalOptions, Z as DefaultModelRouterOptions, a5 as ExtendedDefaultModelRouterOptions } from './parsers-BKF7VX2-.mjs';
+export { d0 as AccessRouterPermissionMap, d1 as AccessRouterPermissions, c as AccessRouterRequest, d as AccessRouterRequestExtensions, l as AjvErrorObjectLike, n as AjvValidatorLike, o as ArkTypeErrorsLike, p as ArkTypeLike, ah as GlobalPermissionValue, al as IoTsContextEntryLike, am as IoTsDecodeErrorLike, an as IoTsDecoderLike, ao as JoiSchemaLike, ap as JoiValidationErrorDetailLike, av as MaybePromise, aw as ModelBaseFilterHook, ay as ModelDeleteHook, az as ModelDocPermissionsHook, aB as ModelDocumentHook, aC as ModelHook, aE as ModelIdentifierHook, aF as ModelListHook, aG as ModelOverrideFilterHook, aJ as ModelValidateHook, d2 as OpenApiMethod, d3 as Permissions, b8 as RequestSchemaAdapter, b9 as RequestSchemaFailure, ba as RequestSchemaIssue, bb as RequestSchemaLike, bc as RequestSchemaOptions, bd as RequestSchemaResult, be as RequestSchemaSuccess, bf as RequestSchemaValidator, bH as RouteGuardAccess, bP as StandardSchemaFailure, bQ as StandardSchemaInferOutput, bR as StandardSchemaIssue, bS as StandardSchemaPathSegment, bT as StandardSchemaResult, bU as StandardSchemaSuccess, bV as StandardSchemaV1, ca as SuperstructFailureLike, cb as SuperstructValidateLike, co as ValibotIssueLike, cp as ValibotPathItemLike, cq as ValibotSafeParseLike, cr as ValibotSafeParseResult, cw as VineValidationErrorLike, cx as VineValidationMessageLike, cy as VineValidatorLike, cz as YupSchemaLike, cA as YupValidationErrorLike, d4 as defaultRuntime, cB as defineRequestSchema, cC as fromAjv, cD as fromArkType, cE as fromIoTs, cF as fromJoi, cG as fromStandardSchema, cH as fromSuperstruct, cI as fromValibot, cJ as fromVine, cK as fromYup, cL as fromZod } from './parsers-BKF7VX2-.mjs';
 import JsonRouter from '@web-ts-toolkit/express-json-router';
 import 'zod';
 
-type OpenApiMethod = 'get' | 'post' | 'put' | 'patch' | 'delete';
-type OpenApiSchema = Record<string, unknown>;
-type OpenApiSchemaSource = unknown;
-type OpenApiParameter = {
-    name: string;
-    in: 'path' | 'query';
-    required?: boolean;
-    description?: string;
-    schema?: OpenApiSchema;
-};
-type OpenApiResponse = {
-    description: string;
-    content?: Record<string, {
-        schema: OpenApiSchema;
-    }>;
-};
-type OpenApiResponses = Record<string, OpenApiResponse>;
-type OpenApiRouteDescriptor = {
-    method: OpenApiMethod;
-    path: string;
-    operationId?: string;
-    summary?: string;
-    description?: string;
-    tags?: string[];
-    acl?: string;
-    deprecated?: boolean;
-    query?: OpenApiSchemaSource;
-    body?: OpenApiSchemaSource;
-    pathParams?: Record<string, OpenApiSchemaSource>;
-    responses?: OpenApiResponses;
-    /**
-     * When true, replaces an existing registration with the same method/path
-     * even when the descriptors differ. When false (default), conflicting
-     * registrations throw at registration time so consumers can detect
-     * accidental route shadowing.
-     */
-    allowReplace?: boolean;
-    /**
-     * When true, this exact descriptor is idempotent and registering the same
-     * method/path with an equivalent descriptor again is silently accepted.
-     * Differing re-registrations still throw unless {@link allowReplace} is set.
-     * Additionally, an idempotent descriptor may share its operationId with
-     * another idempotent descriptor mounted at a different path on the same
-     * registry, so reserved operations (e.g. the root batch route) can be
-     * exposed from multiple base paths without triggering strict-mode
-     * duplicate-operationId rejection.
-     */
-    idempotent?: boolean;
-};
-type OpenApiRegistryOptions = {
-    /**
-     * Throw when the same method/path is registered twice with differing
-     * descriptors, instead of silently replacing. Default: true (strict).
-     * The {@link AccessRuntime} registry is constructed in strict mode by
-     * default; construct {@link OpenApiRegistry} directly with
-     * `rejectConflicts: false` for legacy replacement semantics.
-     */
-    rejectConflicts?: boolean;
-    /**
-     * Throw when the same operationId is registered more than once, including
-     * when {@link OpenApiRouteDescriptor.allowReplace} is set. Default: true.
-     */
-    rejectDuplicateOperationIds?: boolean;
-};
-type OpenApiDocumentOptions = {
-    title: string;
-    version: string;
-    description?: string;
-    servers?: Array<{
-        url: string;
-        description?: string;
-    }>;
-};
-type OpenApiRouterOptions = Partial<OpenApiDocumentOptions> & {
-    jsonPath?: string;
-    docsPath?: string | false;
-    swaggerUiCssUrl?: string;
-    swaggerUiBundleUrl?: string;
-};
-
-type ModelReferenceMap = {
-    [key: string]: string | ModelReferenceMap;
-};
-declare class AccessRuntime {
-    private readonly allowGlobalModelLookup;
-    constructor(options?: {
-        allowGlobalModelLookup?: boolean;
-    });
-    private readonly globalOptions;
-    private readonly defaultModelOptions;
-    private readonly modelOptions;
-    private readonly modelJsonSchemas;
-    private readonly dataOptions;
-    private readonly modelRefs;
-    private readonly modelSubs;
-    private readonly modelAtts;
-    private readonly modelInstances;
-    private readonly openApiRegistry;
-    registerModelInstance<TModel>(modelName: string, model: mongoose.Model<TModel>): void;
-    hasModelInstance(modelName: string): boolean;
-    getModelInstance<TModel = unknown>(modelName: string): mongoose.Model<TModel> | null;
-    registerOpenApiRoute(route: OpenApiRouteDescriptor): void;
-    /**
-     * Enable strict OpenAPI collision detection for the remainder of this
-     * runtime's lifetime. After this call, conflicting method/path
-     * registrations and duplicate operationIds throw {@link OpenApiCollisionError}
-     * instead of silently replacing. Existing already-registered routes are
-     * not retroactively re-validated.
-     */
-    enableOpenApiCollisionDetection(): void;
-    getOpenApiRoutes(): OpenApiRouteDescriptor[];
-    clearOpenApiRoutes(): void;
-    getOpenApiSpec(info: OpenApiDocumentOptions): {
-        openapi: string;
-        info: Omit<OpenApiDocumentOptions, "servers">;
-        servers?: OpenApiDocumentOptions["servers"];
-        paths: Record<string, Record<string, {
-            [key: `x-${string}`]: unknown;
-            operationId?: string;
-            summary?: string;
-            description?: string;
-            tags?: string[];
-            deprecated?: boolean;
-            parameters?: OpenApiParameter[];
-            requestBody?: {
-                required?: boolean;
-                content: Record<string, {
-                    schema: OpenApiSchema;
-                }>;
-            };
-            responses: OpenApiResponses;
-        }>>;
-    };
-    createBootstrapSnapshot(): {
-        globalOptions: GlobalOptions;
-        defaultModelOptions: DefaultModelRouterOptions;
-        modelOptions: Record<string, ModelRouterOptions>;
-        dataOptions: Record<string, DataRouterOptions>;
-        modelInstances: Record<string, mongoose.Model<unknown>>;
-        modelJsonSchemas: Record<string, Record<string, unknown>>;
-        modelRefs: Record<string, ModelReferenceMap>;
-        modelSubs: Record<string, string[]>;
-        modelAtts: Record<string, string[]>;
-        openApi: {
-            routes: OpenApiRouteDescriptor[];
-            options: Required<OpenApiRegistryOptions>;
-        };
-    };
-    restoreBootstrapSnapshot(snapshot: ReturnType<AccessRuntime['createBootstrapSnapshot']>): void;
-    setGlobalOptions(options: GlobalOptions): void;
-    setGlobalOption<K extends keyof GlobalOptions>(key: K, value: GlobalOptions[K]): void;
-    getGlobalOptions(): GlobalOptions;
-    getGlobalOption<K extends keyof GlobalOptions>(key: K, defaultValue?: GlobalOptions[K]): GlobalOptions[K];
-    setDefaultModelOptions(options: DefaultModelRouterOptions): void;
-    setDefaultModelOption<K extends keyof ExtendedDefaultModelRouterOptions>(key: K, value: ExtendedDefaultModelRouterOptions[K]): void;
-    getDefaultModelOptions(): DefaultModelRouterOptions<unknown>;
-    getDefaultModelOption<K extends keyof ExtendedDefaultModelRouterOptions>(key: K, defaultValue?: ExtendedDefaultModelRouterOptions[K]): ExtendedDefaultModelRouterOptions<unknown>[K];
-    private createModelOptions;
-    private getOrCreateModelOptions;
-    setModelOptions<TModel = unknown>(modelName: string, options: ModelRouterOptions<TModel>): void;
-    setModelOption<K extends keyof ExtendedModelRouterOptions<TModel>, TModel = unknown>(modelName: string, key: K, value: ExtendedModelRouterOptions<TModel>[K]): void;
-    getModelOptions<TModel = unknown>(modelName: string): ModelRouterOptions<TModel>;
-    getModelOption<K extends keyof ExtendedModelRouterOptions<TModel>, TModel = unknown>(modelName: string, key: K | string, defaultValue?: ExtendedModelRouterOptions<TModel>[K]): ExtendedModelRouterOptions<TModel>[K];
-    getExactModelOption<K extends keyof ExtendedModelRouterOptions<TModel>, TModel = unknown>(modelName: string, key: K | string): ExtendedModelRouterOptions<TModel>[K];
-    getModelNames(): string[];
-    hasModel(modelName: string): boolean;
-    getModelJsonSchema(modelName: string): Record<string, unknown>;
-    private createDataOptions;
-    private getOrCreateDataOptions;
-    setDataOptions<TData = unknown>(dataName: string, options: DataRouterOptions<TData>): void;
-    setDataOption<K extends keyof DataRouterOptions<TData>, TData = unknown>(dataName: string, key: K, value: DataRouterOptions<TData>[K]): void;
-    getDataOptions<TData = unknown>(dataName: string): DataRouterOptions<TData>;
-    getDataSnapshot<TData = unknown>(dataName: string): readonly TData[];
-    getDataOption<K extends keyof DataRouterOptions<TData>, TData = unknown>(dataName: string, key: K | string, defaultValue?: DataRouterOptions<TData>[K]): DataRouterOptions<TData>[K];
-    getExactDataOption<K extends keyof ExtendedDataRouterOptions<TData>, TData = unknown>(dataName: string, key: K | string): ExtendedDataRouterOptions<TData>[K];
-    getDataNames(): string[];
-    ensureModelMeta(modelName: string): void;
-    getModelRef(modelName: string, refPath: string): string | null;
-    getModelSub(modelName: string): string[];
-    getModelAtt(modelName: string): string[];
-}
-declare const defaultRuntime: AccessRuntime;
-
 declare function macl(): (req: AccessRouterBaseRequest, res: Response, next: NextFunction) => Promise<void>;
 interface GuardModelConditionID {
     type: 'param' | 'query';
@@ -271,6 +88,8 @@ declare class Model {
     findOne({ filter, select, sort, populate, lean }: FindOneProps): mongoose.Query<any, any>;
     exists(filter: Filter): ReturnType<typeof Model.prototype.findOne> | null;
     countDocuments(filter?: {}): mongoose.Query<number, any>;
+    /** Cast a copy using this model's query schema/setters, without executing query middleware or persistence. */
+    castFilter(filter: Record<string, unknown>): Record<string, unknown>;
     distinct(field: string, conditions?: {}): mongoose.Query<any[], any>;
     aggregate(pipeline: unknown[]): mongoose.Aggregate<any[]>;
 }
@@ -609,4 +428,4 @@ type AccessRuntimeApi = typeof macl & Wtt;
 declare function createAccessRuntime(): AccessRuntimeApi;
 declare const acl: AccessRuntimeApi;
 
-export { AccessRuntime, type AccessRuntimeApi, type CombinedRouteInput, DataRouter, DataRouterOptions, ExtendedDefaultModelRouterOptions, ExtendedModelRouterOptions, GlobalOptions, GuardHook, type GuardModelCondition, type GuardModelConditionID, ModelRouter, ModelRouterOptions, type OpLogContext, OpenApiCollisionError, type OpenApiDocumentOptions, type OpenApiMethod, OpenApiRegistry, type OpenApiRegistryOptions, type OpenApiRouteDescriptor, type OpenApiRouterOptions, RootRouter, RootRouterOptions, Validation, acl, combineRoutes, createAccessRuntime, createOpenApiRouter, acl as default, defaultRuntime, getDefaultModelOption, getDefaultModelOptions, getGlobalOption, getGlobalOptions, getModelInstance, getModelJsonSchema, getModelNames, getModelOption, getModelOptions, guard, hasModelInstance, isLevelEnabled, permissionsPlugin, redactFilter, redactPayload, registerModelInstance, safeStringify, setDefaultModelOption, setDefaultModelOptions, setGlobalOption, setGlobalOptions, setModelOption, setModelOptions };
+export { AccessRuntime, type AccessRuntimeApi, type CombinedRouteInput, DataRouter, DataRouterOptions, ExtendedDefaultModelRouterOptions, ExtendedModelRouterOptions, GlobalOptions, GuardHook, type GuardModelCondition, type GuardModelConditionID, ModelRouter, ModelRouterOptions, type OpLogContext, OpenApiCollisionError, OpenApiDocumentOptions, OpenApiRegistry, OpenApiRegistryOptions, OpenApiRouteDescriptor, OpenApiRouterOptions, RootRouter, RootRouterOptions, Validation, acl, combineRoutes, createAccessRuntime, createOpenApiRouter, acl as default, getDefaultModelOption, getDefaultModelOptions, getGlobalOption, getGlobalOptions, getModelInstance, getModelJsonSchema, getModelNames, getModelOption, getModelOptions, guard, hasModelInstance, isLevelEnabled, permissionsPlugin, redactFilter, redactPayload, registerModelInstance, safeStringify, setDefaultModelOption, setDefaultModelOptions, setGlobalOption, setGlobalOptions, setModelOption, setModelOptions };

package/index.d.ts

@@ -1,193 +1,10 @@
 import mongoose, { Schema } from 'mongoose';
 import { Response, NextFunction, RequestHandler, Router } from 'express';
-import { ag as GlobalOptions, Z as DefaultModelRouterOptions, aI as ModelRouterOptions, V as DataRouterOptions, a5 as ExtendedDefaultModelRouterOptions, a6 as ExtendedModelRouterOptions, a4 as ExtendedDataRouterOptions, A as AccessRouterBaseRequest, ai as GuardHook, aH as ModelRequest, T as DataRequest, cR as DataService, a7 as Filter, aS as Projection, bN as Sort, aP as Populate, cS as Service, cT as PublicService, cu as Validation, bE as RootRouterOptions } from './parsers-DppKW-Fd.js';
-export { cU as AccessRouterPermissionMap, cV as AccessRouterPermissions, c as AccessRouterRequest, d as AccessRouterRequestExtensions, l as AjvErrorObjectLike, n as AjvValidatorLike, o as ArkTypeErrorsLike, p as ArkTypeLike, ah as GlobalPermissionValue, al as IoTsContextEntryLike, am as IoTsDecodeErrorLike, an as IoTsDecoderLike, ao as JoiSchemaLike, ap as JoiValidationErrorDetailLike, av as MaybePromise, aw as ModelBaseFilterHook, ay as ModelDeleteHook, az as ModelDocPermissionsHook, aB as ModelDocumentHook, aC as ModelHook, aE as ModelIdentifierHook, aF as ModelListHook, aG as ModelOverrideFilterHook, aJ as ModelValidateHook, cW as Permissions, b8 as RequestSchemaAdapter, b9 as RequestSchemaFailure, ba as RequestSchemaIssue, bb as RequestSchemaLike, bc as RequestSchemaOptions, bd as RequestSchemaResult, be as RequestSchemaSuccess, bf as RequestSchemaValidator, bH as RouteGuardAccess, bP as StandardSchemaFailure, bQ as StandardSchemaInferOutput, bR as StandardSchemaIssue, bS as StandardSchemaPathSegment, bT as StandardSchemaResult, bU as StandardSchemaSuccess, bV as StandardSchemaV1, ca as SuperstructFailureLike, cb as SuperstructValidateLike, co as ValibotIssueLike, cp as ValibotPathItemLike, cq as ValibotSafeParseLike, cr as ValibotSafeParseResult, cw as VineValidationErrorLike, cx as VineValidationMessageLike, cy as VineValidatorLike, cz as YupSchemaLike, cA as YupValidationErrorLike, cB as defineRequestSchema, cC as fromAjv, cD as fromArkType, cE as fromIoTs, cF as fromJoi, cG as fromStandardSchema, cH as fromSuperstruct, cI as fromValibot, cJ as fromVine, cK as fromYup, cL as fromZod } from './parsers-DppKW-Fd.js';
+import { A as AccessRouterBaseRequest, ai as GuardHook, aH as ModelRequest, cR as AccessRuntime, V as DataRouterOptions, T as DataRequest, cS as DataService, a7 as Filter, aS as Projection, bN as Sort, aP as Populate, aI as ModelRouterOptions, cT as Service, cU as PublicService, a6 as ExtendedModelRouterOptions, cu as Validation, bE as RootRouterOptions, cV as OpenApiRouterOptions, cW as OpenApiRegistryOptions, cX as OpenApiRouteDescriptor, cY as OpenApiDocumentOptions, cZ as OpenApiParameter, c_ as OpenApiSchema, c$ as OpenApiResponses, ag as GlobalOptions, Z as DefaultModelRouterOptions, a5 as ExtendedDefaultModelRouterOptions } from './parsers-BKF7VX2-.js';
+export { d0 as AccessRouterPermissionMap, d1 as AccessRouterPermissions, c as AccessRouterRequest, d as AccessRouterRequestExtensions, l as AjvErrorObjectLike, n as AjvValidatorLike, o as ArkTypeErrorsLike, p as ArkTypeLike, ah as GlobalPermissionValue, al as IoTsContextEntryLike, am as IoTsDecodeErrorLike, an as IoTsDecoderLike, ao as JoiSchemaLike, ap as JoiValidationErrorDetailLike, av as MaybePromise, aw as ModelBaseFilterHook, ay as ModelDeleteHook, az as ModelDocPermissionsHook, aB as ModelDocumentHook, aC as ModelHook, aE as ModelIdentifierHook, aF as ModelListHook, aG as ModelOverrideFilterHook, aJ as ModelValidateHook, d2 as OpenApiMethod, d3 as Permissions, b8 as RequestSchemaAdapter, b9 as RequestSchemaFailure, ba as RequestSchemaIssue, bb as RequestSchemaLike, bc as RequestSchemaOptions, bd as RequestSchemaResult, be as RequestSchemaSuccess, bf as RequestSchemaValidator, bH as RouteGuardAccess, bP as StandardSchemaFailure, bQ as StandardSchemaInferOutput, bR as StandardSchemaIssue, bS as StandardSchemaPathSegment, bT as StandardSchemaResult, bU as StandardSchemaSuccess, bV as StandardSchemaV1, ca as SuperstructFailureLike, cb as SuperstructValidateLike, co as ValibotIssueLike, cp as ValibotPathItemLike, cq as ValibotSafeParseLike, cr as ValibotSafeParseResult, cw as VineValidationErrorLike, cx as VineValidationMessageLike, cy as VineValidatorLike, cz as YupSchemaLike, cA as YupValidationErrorLike, d4 as defaultRuntime, cB as defineRequestSchema, cC as fromAjv, cD as fromArkType, cE as fromIoTs, cF as fromJoi, cG as fromStandardSchema, cH as fromSuperstruct, cI as fromValibot, cJ as fromVine, cK as fromYup, cL as fromZod } from './parsers-BKF7VX2-.js';
 import JsonRouter from '@web-ts-toolkit/express-json-router';
 import 'zod';
 
-type OpenApiMethod = 'get' | 'post' | 'put' | 'patch' | 'delete';
-type OpenApiSchema = Record<string, unknown>;
-type OpenApiSchemaSource = unknown;
-type OpenApiParameter = {
-    name: string;
-    in: 'path' | 'query';
-    required?: boolean;
-    description?: string;
-    schema?: OpenApiSchema;
-};
-type OpenApiResponse = {
-    description: string;
-    content?: Record<string, {
-        schema: OpenApiSchema;
-    }>;
-};
-type OpenApiResponses = Record<string, OpenApiResponse>;
-type OpenApiRouteDescriptor = {
-    method: OpenApiMethod;
-    path: string;
-    operationId?: string;
-    summary?: string;
-    description?: string;
-    tags?: string[];
-    acl?: string;
-    deprecated?: boolean;
-    query?: OpenApiSchemaSource;
-    body?: OpenApiSchemaSource;
-    pathParams?: Record<string, OpenApiSchemaSource>;
-    responses?: OpenApiResponses;
-    /**
-     * When true, replaces an existing registration with the same method/path
-     * even when the descriptors differ. When false (default), conflicting
-     * registrations throw at registration time so consumers can detect
-     * accidental route shadowing.
-     */
-    allowReplace?: boolean;
-    /**
-     * When true, this exact descriptor is idempotent and registering the same
-     * method/path with an equivalent descriptor again is silently accepted.
-     * Differing re-registrations still throw unless {@link allowReplace} is set.
-     * Additionally, an idempotent descriptor may share its operationId with
-     * another idempotent descriptor mounted at a different path on the same
-     * registry, so reserved operations (e.g. the root batch route) can be
-     * exposed from multiple base paths without triggering strict-mode
-     * duplicate-operationId rejection.
-     */
-    idempotent?: boolean;
-};
-type OpenApiRegistryOptions = {
-    /**
-     * Throw when the same method/path is registered twice with differing
-     * descriptors, instead of silently replacing. Default: true (strict).
-     * The {@link AccessRuntime} registry is constructed in strict mode by
-     * default; construct {@link OpenApiRegistry} directly with
-     * `rejectConflicts: false` for legacy replacement semantics.
-     */
-    rejectConflicts?: boolean;
-    /**
-     * Throw when the same operationId is registered more than once, including
-     * when {@link OpenApiRouteDescriptor.allowReplace} is set. Default: true.
-     */
-    rejectDuplicateOperationIds?: boolean;
-};
-type OpenApiDocumentOptions = {
-    title: string;
-    version: string;
-    description?: string;
-    servers?: Array<{
-        url: string;
-        description?: string;
-    }>;
-};
-type OpenApiRouterOptions = Partial<OpenApiDocumentOptions> & {
-    jsonPath?: string;
-    docsPath?: string | false;
-    swaggerUiCssUrl?: string;
-    swaggerUiBundleUrl?: string;
-};
-
-type ModelReferenceMap = {
-    [key: string]: string | ModelReferenceMap;
-};
-declare class AccessRuntime {
-    private readonly allowGlobalModelLookup;
-    constructor(options?: {
-        allowGlobalModelLookup?: boolean;
-    });
-    private readonly globalOptions;
-    private readonly defaultModelOptions;
-    private readonly modelOptions;
-    private readonly modelJsonSchemas;
-    private readonly dataOptions;
-    private readonly modelRefs;
-    private readonly modelSubs;
-    private readonly modelAtts;
-    private readonly modelInstances;
-    private readonly openApiRegistry;
-    registerModelInstance<TModel>(modelName: string, model: mongoose.Model<TModel>): void;
-    hasModelInstance(modelName: string): boolean;
-    getModelInstance<TModel = unknown>(modelName: string): mongoose.Model<TModel> | null;
-    registerOpenApiRoute(route: OpenApiRouteDescriptor): void;
-    /**
-     * Enable strict OpenAPI collision detection for the remainder of this
-     * runtime's lifetime. After this call, conflicting method/path
-     * registrations and duplicate operationIds throw {@link OpenApiCollisionError}
-     * instead of silently replacing. Existing already-registered routes are
-     * not retroactively re-validated.
-     */
-    enableOpenApiCollisionDetection(): void;
-    getOpenApiRoutes(): OpenApiRouteDescriptor[];
-    clearOpenApiRoutes(): void;
-    getOpenApiSpec(info: OpenApiDocumentOptions): {
-        openapi: string;
-        info: Omit<OpenApiDocumentOptions, "servers">;
-        servers?: OpenApiDocumentOptions["servers"];
-        paths: Record<string, Record<string, {
-            [key: `x-${string}`]: unknown;
-            operationId?: string;
-            summary?: string;
-            description?: string;
-            tags?: string[];
-            deprecated?: boolean;
-            parameters?: OpenApiParameter[];
-            requestBody?: {
-                required?: boolean;
-                content: Record<string, {
-                    schema: OpenApiSchema;
-                }>;
-            };
-            responses: OpenApiResponses;
-        }>>;
-    };
-    createBootstrapSnapshot(): {
-        globalOptions: GlobalOptions;
-        defaultModelOptions: DefaultModelRouterOptions;
-        modelOptions: Record<string, ModelRouterOptions>;
-        dataOptions: Record<string, DataRouterOptions>;
-        modelInstances: Record<string, mongoose.Model<unknown>>;
-        modelJsonSchemas: Record<string, Record<string, unknown>>;
-        modelRefs: Record<string, ModelReferenceMap>;
-        modelSubs: Record<string, string[]>;
-        modelAtts: Record<string, string[]>;
-        openApi: {
-            routes: OpenApiRouteDescriptor[];
-            options: Required<OpenApiRegistryOptions>;
-        };
-    };
-    restoreBootstrapSnapshot(snapshot: ReturnType<AccessRuntime['createBootstrapSnapshot']>): void;
-    setGlobalOptions(options: GlobalOptions): void;
-    setGlobalOption<K extends keyof GlobalOptions>(key: K, value: GlobalOptions[K]): void;
-    getGlobalOptions(): GlobalOptions;
-    getGlobalOption<K extends keyof GlobalOptions>(key: K, defaultValue?: GlobalOptions[K]): GlobalOptions[K];
-    setDefaultModelOptions(options: DefaultModelRouterOptions): void;
-    setDefaultModelOption<K extends keyof ExtendedDefaultModelRouterOptions>(key: K, value: ExtendedDefaultModelRouterOptions[K]): void;
-    getDefaultModelOptions(): DefaultModelRouterOptions<unknown>;
-    getDefaultModelOption<K extends keyof ExtendedDefaultModelRouterOptions>(key: K, defaultValue?: ExtendedDefaultModelRouterOptions[K]): ExtendedDefaultModelRouterOptions<unknown>[K];
-    private createModelOptions;
-    private getOrCreateModelOptions;
-    setModelOptions<TModel = unknown>(modelName: string, options: ModelRouterOptions<TModel>): void;
-    setModelOption<K extends keyof ExtendedModelRouterOptions<TModel>, TModel = unknown>(modelName: string, key: K, value: ExtendedModelRouterOptions<TModel>[K]): void;
-    getModelOptions<TModel = unknown>(modelName: string): ModelRouterOptions<TModel>;
-    getModelOption<K extends keyof ExtendedModelRouterOptions<TModel>, TModel = unknown>(modelName: string, key: K | string, defaultValue?: ExtendedModelRouterOptions<TModel>[K]): ExtendedModelRouterOptions<TModel>[K];
-    getExactModelOption<K extends keyof ExtendedModelRouterOptions<TModel>, TModel = unknown>(modelName: string, key: K | string): ExtendedModelRouterOptions<TModel>[K];
-    getModelNames(): string[];
-    hasModel(modelName: string): boolean;
-    getModelJsonSchema(modelName: string): Record<string, unknown>;
-    private createDataOptions;
-    private getOrCreateDataOptions;
-    setDataOptions<TData = unknown>(dataName: string, options: DataRouterOptions<TData>): void;
-    setDataOption<K extends keyof DataRouterOptions<TData>, TData = unknown>(dataName: string, key: K, value: DataRouterOptions<TData>[K]): void;
-    getDataOptions<TData = unknown>(dataName: string): DataRouterOptions<TData>;
-    getDataSnapshot<TData = unknown>(dataName: string): readonly TData[];
-    getDataOption<K extends keyof DataRouterOptions<TData>, TData = unknown>(dataName: string, key: K | string, defaultValue?: DataRouterOptions<TData>[K]): DataRouterOptions<TData>[K];
-    getExactDataOption<K extends keyof ExtendedDataRouterOptions<TData>, TData = unknown>(dataName: string, key: K | string): ExtendedDataRouterOptions<TData>[K];
-    getDataNames(): string[];
-    ensureModelMeta(modelName: string): void;
-    getModelRef(modelName: string, refPath: string): string | null;
-    getModelSub(modelName: string): string[];
-    getModelAtt(modelName: string): string[];
-}
-declare const defaultRuntime: AccessRuntime;
-
 declare function macl(): (req: AccessRouterBaseRequest, res: Response, next: NextFunction) => Promise<void>;
 interface GuardModelConditionID {
     type: 'param' | 'query';
@@ -271,6 +88,8 @@ declare class Model {
     findOne({ filter, select, sort, populate, lean }: FindOneProps): mongoose.Query<any, any>;
     exists(filter: Filter): ReturnType<typeof Model.prototype.findOne> | null;
     countDocuments(filter?: {}): mongoose.Query<number, any>;
+    /** Cast a copy using this model's query schema/setters, without executing query middleware or persistence. */
+    castFilter(filter: Record<string, unknown>): Record<string, unknown>;
     distinct(field: string, conditions?: {}): mongoose.Query<any[], any>;
     aggregate(pipeline: unknown[]): mongoose.Aggregate<any[]>;
 }
@@ -609,4 +428,4 @@ type AccessRuntimeApi = typeof macl & Wtt;
 declare function createAccessRuntime(): AccessRuntimeApi;
 declare const acl: AccessRuntimeApi;
 
-export { AccessRuntime, type AccessRuntimeApi, type CombinedRouteInput, DataRouter, DataRouterOptions, ExtendedDefaultModelRouterOptions, ExtendedModelRouterOptions, GlobalOptions, GuardHook, type GuardModelCondition, type GuardModelConditionID, ModelRouter, ModelRouterOptions, type OpLogContext, OpenApiCollisionError, type OpenApiDocumentOptions, type OpenApiMethod, OpenApiRegistry, type OpenApiRegistryOptions, type OpenApiRouteDescriptor, type OpenApiRouterOptions, RootRouter, RootRouterOptions, Validation, acl, combineRoutes, createAccessRuntime, createOpenApiRouter, acl as default, defaultRuntime, getDefaultModelOption, getDefaultModelOptions, getGlobalOption, getGlobalOptions, getModelInstance, getModelJsonSchema, getModelNames, getModelOption, getModelOptions, guard, hasModelInstance, isLevelEnabled, permissionsPlugin, redactFilter, redactPayload, registerModelInstance, safeStringify, setDefaultModelOption, setDefaultModelOptions, setGlobalOption, setGlobalOptions, setModelOption, setModelOptions };
+export { AccessRuntime, type AccessRuntimeApi, type CombinedRouteInput, DataRouter, DataRouterOptions, ExtendedDefaultModelRouterOptions, ExtendedModelRouterOptions, GlobalOptions, GuardHook, type GuardModelCondition, type GuardModelConditionID, ModelRouter, ModelRouterOptions, type OpLogContext, OpenApiCollisionError, OpenApiDocumentOptions, OpenApiRegistry, OpenApiRegistryOptions, OpenApiRouteDescriptor, OpenApiRouterOptions, RootRouter, RootRouterOptions, Validation, acl, combineRoutes, createAccessRuntime, createOpenApiRouter, acl as default, getDefaultModelOption, getDefaultModelOptions, getGlobalOption, getGlobalOptions, getModelInstance, getModelJsonSchema, getModelNames, getModelOption, getModelOptions, guard, hasModelInstance, isLevelEnabled, permissionsPlugin, redactFilter, redactPayload, registerModelInstance, safeStringify, setDefaultModelOption, setDefaultModelOptions, setGlobalOption, setGlobalOptions, setModelOption, setModelOptions };