@web-ts-toolkit/access-router 0.52.0 → 0.54.0

package/llms.txt

@@ -16,7 +16,7 @@
 - [Installation](README.md#installation) · [Shortest public-read router](README.md#quick-start)
 - [Configuration-layer map](README.md#configuration-layers) · [Assignment, precedence and capture](README.md#assignment-precedence-and-capture) · [Wire placement](README.md#wire-placement-and-option-names)
 - [Names with different jobs](README.md#names-with-different-jobs) · [skim: deprecated compatibility no-op](README.md#skim-compatibility-no-op)
-- [Runtime isolation and nullish grants](README.md#default-runtime-vs-isolated-runtime) · [Factory overloads](README.md#createrouter-overloads) · [Optional metadata-alias plugin](README.md#optional-permissions-plugin)
+- [Runtime isolation and nullish grants](README.md#default-runtime-vs-isolated-runtime) · [Factory overloads](README.md#createrouter-overloads) · [Optional raw-document metadata getter](README.md#optional-permissions-plugin)
 - [Operation matrix and fallback](README.md#basic-and-advanced-operation-access) · [Live setters](README.md#live-updates-and-option-snapshots)
 - [Data list/read](README.md#data-routers) · [Data ownership/native values](README.md#in-memory-data-ownership) · [Runnable data example](README.md#runnable-data-router-split)
 - [Root batches: maxOrderGroups bounds both group count and numeric order](README.md#root-batch-bounds)
@@ -24,6 +24,9 @@
 
 ## Business and migration contracts
 
+- [Server-owned hydration and migration](README.md#breaking-release-server-owned-hydration): root/advanced types `HydrationMode` and `ModelHydrationOptions`; model/starting-default `hydration` has exactly publicList (built-in lean), publicRead/find/findOne/findById (built-in hydrated). Records replace shallowly; exact dotted setters update one member. Fresh calls capture their owning runtime; in-flight calls keep theirs. Move defaults.*Options.lean/service.defaults deliberately to model-wide configuration (true → 'lean', false → 'hydrated'); legacy method-default controls throw. No per-call/client/wire replacement; stale permissive keys are inert, strict correlated options still reject, and business fields keep their meaning.
+- [Fixed/related modes and value caveat](README.md#breaking-release-server-owned-hydration): includes/post-save subdocument visibility stay lean; raw parents/lifecycle documents stay hydrated; $$sq uses target public configuration; populate inherits its parent query. Plain finalized results do not imply identical schema defaults/getters/transforms/init-hook values or a measured speedup.
+- [Finalized permissions alias](README.md#finalized-permissions-alias): non-enumerable value alias to already-exposed canonical metadata, including dotted paths, independent of hydration/plugin. Stripping suppresses it; business/virtual/include collisions win. Package copies preserve it where metadata exists; no metadata synthesis or arbitrary-copy/client-wrapper promise. The optional Mongoose raw getter is separate.
 - [Trusted service authorization](README.md#trusted-service-authorization) · [Request admission](README.md#public-request-admission-and-backend-options): policy is server-only; wire/default control slots reject it.
 - [Selection, grants and document handles](README.md#selection-grants-and-document-results) · [Runnable Mongo authorization example](README.md#runnable-authorization-and-handle-reuse)
 - [Independent mutation input](README.md#independent-mutation-input-authority) · [Scoped subdocuments](README.md#dedicated-subdocument-authorization) · [Successful hidden-write responses](README.md#subdocument-writes-with-hidden-responses)

package/package.json

@@ -2,7 +2,7 @@
   "name": "@web-ts-toolkit/access-router",
   "description": "ACL-aware Express routers and in-memory data services for Mongoose-backed APIs",
   "homepage": "https://web-ts-toolkit.pages.dev/docs/packages/access-router",
-  "version": "0.52.0",
+  "version": "0.54.0",
   "sideEffects": [
     "./**/index.js",
     "./**/index.mjs",
@@ -57,8 +57,8 @@
     "node": ">=22"
   },
   "dependencies": {
-    "@web-ts-toolkit/express-json-router": "0.52.0",
-    "@web-ts-toolkit/utils": "0.52.0",
+    "@web-ts-toolkit/express-json-router": "0.54.0",
+    "@web-ts-toolkit/utils": "0.54.0",
     "just-diff": "^6.0.2",
     "mongoose-schema-jsonschema": "^4.0.1",
     "sift": "^17.1.3",

package/{parsers-BnmChTfF.d.mts → parsers-ZSrF7SNu.d.mts}

@@ -334,6 +334,7 @@ interface PublicListArgs {
     pageSize?: string | number;
     tasks?: Task | Task[];
 }
+/** Request presentation options. Fetch mode is server model hydration.publicList (built-in lean). */
 interface PublicListOptions {
     /** @deprecated Compatibility no-op. Authorization, document grants, virtuals and decoration always run. */
     skim?: boolean;
@@ -349,8 +350,6 @@ interface PublicListOptions {
     /** Exact authorized match total, independent of pagination (default false). Wire requests also control HTTP metadata exposure. */
     includeCount?: boolean;
     populateAccess?: PopulateAccess;
-    /** Mongoose hydration choice (public list default true); authorization and virtuals still run. Supported by service/root options. */
-    lean?: boolean;
 }
 
 interface KeyValueProjection {
@@ -981,17 +980,24 @@ declare class Service<TModel = unknown, TVirtuals extends object = Record<never,
     protected model: any;
     protected get options(): ModelRouterOptions<TModel, TVirtuals>;
     private defaultsOverride?;
+    /**
+     * Presentation/query defaults for this service instance; an explicit assignment
+     * replaces the runtime defaults bag, not a per-bucket merge. Fetch mode belongs
+     * to the owning model's hydration configuration and affects all its services.
+     * Legacy method-option lean/hydration keys throw on assignment and before calls
+     * if an assigned JavaScript bag is later mutated.
+     */
     get defaults(): Defaults<TModel>;
     set defaults(value: Defaults<TModel>);
     protected baseFields: string[];
     protected get baseFieldsExt(): string[];
     private readonly hookGate;
     private readonly persist;
+    /** Raw hydrated parent/null. Fetch mode is fixed, independent of model read settings. */
     findRawParentDoc(args: {
         filter: Filter<TModel>;
         select: string;
         populate: unknown;
-        lean: boolean;
     }): any;
     protected createModelAdapter(modelName: string): any;
     protected getModelRouterOptions(modelName: string): ModelRouterOptions<TModel, TVirtuals>;
@@ -1103,19 +1109,6 @@ declare class Service<TModel = unknown, TVirtuals extends object = Record<never,
     finalizePopulateForSubParent(parentDoc: unknown, populateEntries: Populate[], parentOperation: string, hookLimit?: number, sharedGate?: SharedHookGate): Promise<void>;
     private filterAllowedFieldsForVirtuals;
     private stripVirtualsFromFilterForSnapshot;
-    /**
-     * Preserve the `permissions` Mongoose virtual (from `permissionsPlugin`) for
-     * hydrated outputs. `isolateDocForOutput` uses `toObject({ virtuals: false })`
-     * so Mongoose getter virtuals never leak into package-virtual planning;
-     * `lean: true` therefore drops them (explicit parity rule). For `lean: false`
-     * (hydrated Mongoose documents) the historical contract exposes
-     * `doc.permissions` as an alias of the document-permission field. The shared
-     * finalizer keeps only the document-permission field, so restore the alias
-     * here for backward compatibility when the input was hydrated and the
-     * virtual existed. Lean outputs stay without the virtual. Models without
-     * the plugin never had the virtual and stay unchanged.
-     */
-    private preservePermissionsVirtual;
     /**
      * VIRT-05 populate + association helpers.
      *
@@ -1302,6 +1295,7 @@ declare class Service<TModel = unknown, TVirtuals extends object = Record<never,
     createSub<S extends string>(id: SubdocumentId, sub: S, data: SubdocumentCreateInput, options?: SubdocumentCreateOptions<TModel, SubdocumentModel<TModel, S>, SubdocumentVirtuals<TVirtuals, S>>): Promise<ListResult | ErrorResult>;
     /** Trusted parent-update/child-delete gates and rows; no fields/visibility policy. Returns the removed ID. */
     deleteSub<S extends string>(id: SubdocumentId, sub: S, subId: SubdocumentId, options?: SubdocumentDeleteOptions<TModel, SubdocumentModel<TModel, S>>): Promise<SingleResult | ErrorResult>;
+    /** Raw hydrated parent/null, with row policy and populate; no finalized permission metadata. */
     getParentDoc(id: SubdocumentId, sub: SubdocumentName, args?: SubdocumentParentArgs, options?: SubdocumentParentOptions): Promise<any>;
 }
 
@@ -1556,9 +1550,9 @@ type PublicSubdocumentMutationOptions = Readonly<Record<string, never>>;
 interface SubdocumentParentArgs {
     populate?: SubPopulate | SubPopulate[];
 }
+/** Request-only raw-parent lookup access. The returned parent is always hydrated. */
 interface SubdocumentParentOptions {
     access?: BaseFilterAccess;
-    lean?: boolean;
 }
 
 type CrossResourceModelOperation = 'list' | 'read' | 'count';
@@ -1886,11 +1880,14 @@ interface PublicReadArgs {
     include?: Include | Include[];
     tasks?: Task | Task[];
 }
+/**
+ * Request presentation options. Server model hydration.publicRead (built-in hydrated)
+ * governs both identifier/filter reads and both attempts of their list fallback.
+ */
 interface PublicReadOptions {
     /** @deprecated Compatibility no-op. Authorization, document grants, virtuals and decoration always run. */
     skim?: boolean;
     populateAccess?: PopulateAccess;
-    lean?: boolean;
     includePermissions?: boolean;
     /**
      * Include field-level `_view`/`_edit` maps. Defaults to `includePermissions`
@@ -2631,6 +2628,7 @@ interface FindArgs<T = unknown> {
     page?: string | number;
     pageSize?: string | number;
 }
+/** Internal list options. Fetch mode is model hydration.find, never a per-call/default lean option. */
 interface FindOptions<TModel = unknown, TVirtuals extends object = Record<never, never>> {
     /** Trusted server-only per-call policy. Omitted dimensions use request authority; never a wire/default option. */
     readonly authorization?: ServiceAuthorization<TModel, TVirtuals>;
@@ -2648,8 +2646,6 @@ interface FindOptions<TModel = unknown, TVirtuals extends object = Record<never,
     /** Compute exact authorized totalCount independently of pagination (default false). count is returned-row count. */
     includeCount?: boolean;
     populateAccess?: PopulateAccess;
-    /** Fetch without Mongoose hydration (internal default false). Finalized output still enforces fields and computes virtuals. */
-    lean?: boolean;
 }
 interface FindOneArgs<T = unknown> {
     select?: Projection;
@@ -2657,6 +2653,7 @@ interface FindOneArgs<T = unknown> {
     populate?: Populate[] | string;
     include?: Include | Include[];
 }
+/** Internal read options. Fetch mode is model hydration.findOne, not an option in this bag. */
 interface FindOneOptions<TModel = unknown, TVirtuals extends object = Record<never, never>> {
     /** Trusted server-only rows/output/related policy; ordinary selection remains in args.select. */
     readonly authorization?: ServiceAuthorization<TModel, TVirtuals>;
@@ -2664,8 +2661,6 @@ interface FindOneOptions<TModel = unknown, TVirtuals extends object = Record<nev
     populateAccess?: PopulateAccess;
     /** @deprecated Compatibility no-op. Authorization, document grants, virtuals and decoration always run. */
     skim?: boolean;
-    /** Fetch without Mongoose hydration (default false), retaining the same output authorization and virtuals. */
-    lean?: boolean;
     includePermissions?: boolean;
     /**
      * Include field-level `_view`/`_edit` maps. Defaults to `includePermissions`
@@ -2681,6 +2676,7 @@ interface FindByIdArgs<T = unknown> {
     populate?: Populate[] | string;
     include?: Include | Include[];
 }
+/** By-ID options inherit presentation/policy fields, not hydration.findOne; use model hydration.findById. */
 interface FindByIdOptions<TModel = unknown, TVirtuals extends object = Record<never, never>> extends FindOneOptions<TModel, TVirtuals> {
 }
 
@@ -2951,6 +2947,8 @@ interface DataRequestSchemas {
  * policy belongs here. Each fresh model-service call captures the originating runtime's
  * current defaults; nested stages retain that call's snapshot. Explicit service.defaults
  * assignments override runtime defaults. Router setters shallowly replace supplied values.
+ * Fetch mode belongs to ModelRouterOptions.hydration; legacy lean/hydration keys
+ * in method option buckets fail with migration diagnostics.
  * See README Configuration layers for delegation.
  */
 interface Defaults<TModel = unknown> {
@@ -3124,11 +3122,52 @@ interface DocPermissions {
     read?: ModelDocPermissionsHook;
     update?: ModelDocPermissionsHook;
 }
+/**
+ * Mongoose fetch mode, not an output type. Both modes finalize plain objects;
+ * schema defaults, getters, transforms and init hooks can still change values.
+ */
+type HydrationMode = 'lean' | 'hydrated';
+/**
+ * Server-only model configuration, captured by the owning runtime per call.
+ * Set through ModelRouterOptions/DefaultModelRouterOptions and their whole-record
+ * or exact hydration.<method> setters (including existing model/default decorators).
+ * A supplied record replaces the previous record shallowly; omitted/undefined
+ * members use built-ins, not an older/default record. Whole-record undefined clears
+ * it. Invalid records/keys/modes throw before publication. Fresh calls observe owner
+ * updates; in-flight calls retain their captured configuration.
+ * Includes stay fixed lean; raw parents/lifecycle stages stay hydrated; subdocument
+ * post-save visibility stays lean. Populate inherits its parent query; $$sq uses
+ * target public settings. No per-call, wire, global, data/root or service.defaults
+ * setting exists. Migrate defaults.*Options.lean explicitly (true -> 'lean', false
+ * -> 'hydrated'); a former service-instance choice becomes model-wide in its runtime.
+ * Legacy method-default lean/hydration controls throw migration diagnostics; stale
+ * permissive per-call/wire controls are inert, not a supported configuration path.
+ */
+interface ModelHydrationOptions {
+    /** Public lists default to lean. */
+    publicList?: HydrationMode;
+    /** Identifier/filter reads and their list fallback default to hydrated. */
+    publicRead?: HydrationMode;
+    /** Internal find defaults to hydrated, independently of publicList. */
+    find?: HydrationMode;
+    /** Internal findOne defaults to hydrated, independently of publicRead/findById. */
+    findOne?: HydrationMode;
+    /** Internal findById defaults to hydrated; does not inherit findOne's setting. */
+    findById?: HydrationMode;
+}
 /** Model starting defaults; data/root routers do not inherit these. Nested values assign shallowly. */
 interface DefaultModelRouterOptions<TModel = unknown> {
+    /** Server-owned fetch choices, captured per call. Not a per-call or method-default option. */
+    hydration?: ModelHydrationOptions;
     /** Maximum returned list rows (default 1000), independent of exact match/count totals. */
     listHardLimit?: number;
-    /** Authorization metadata path (default `_permissions`); include output cannot equal, contain or descend from it. */
+    /**
+     * Serialized metadata path (default `_permissions`, dotted paths supported).
+     * Finalized rows carrying it also get a non-enumerable `permissions` value alias,
+     * independent of hydration/plugin, unless that output property already exists.
+     * The alias is not authority or a live binding; JSON/spread omit it. Include output
+     * cannot equal, contain or descend from the canonical metadata path.
+     */
     documentPermissionField?: string;
     /** Express route parameter name (default `id`); fixed at router construction. */
     idParam?: string;
@@ -3178,12 +3217,13 @@ interface DefaultModelRouterOptions<TModel = unknown> {
     /**
      * When `true`, the document permissions field (`documentPermissionField`,
      * default `_permissions`) is removed from all outputs — including its empty
-     * placeholder — and client `includePermissions`/`includeFieldPermissions`
+     * placeholder — and its generated `permissions` alias. Client `includePermissions`/`includeFieldPermissions`
      * input (query params, body/root-batch options and service-direct options)
      * as well as per-operation `defaults` are ignored (both resolve to `false`).
      * Output matches `includePermissions: false` with the permissions field
      * removed entirely. Enforcement still runs; only output metadata is
-     * affected. Defaults to `false`.
+     * affected; existing business output named `permissions` is not a generated alias.
+     * Defaults to `false`.
      */
     stripPermissionsField?: boolean;
     /**
@@ -3196,6 +3236,11 @@ interface DefaultModelRouterOptions<TModel = unknown> {
     disableFieldPermissions?: boolean;
 }
 interface ExtendedDefaultModelRouterOptions<TModel = unknown> extends DefaultModelRouterOptions<TModel> {
+    'hydration.publicList'?: HydrationMode;
+    'hydration.publicRead'?: HydrationMode;
+    'hydration.find'?: HydrationMode;
+    'hydration.findOne'?: HydrationMode;
+    'hydration.findById'?: HydrationMode;
     'operationAccess.default'?: Validation;
     'operationAccess.new'?: Validation;
     'operationAccess.list'?: Validation;
@@ -3566,4 +3611,4 @@ declare function fromIoTs<TValue = unknown>(decoder: IoTsDecoderLike<TValue>): R
 declare function fromSuperstruct<TStruct, TOutput = unknown>(struct: TStruct, validate: SuperstructValidateLike): RequestSchemaValidator<TOutput>;
 declare function fromVine<TValue = unknown>(validator: VineValidatorLike<TValue>): RequestSchemaValidator<TValue>;
 
-export { type DecorateAccess as $, type AccessRouterBaseRequest as A, type BaseFilterAccess as B, type Change as C, type CorrelatedReadByFilterInclude as D, type CorrelatedReadByIdInclude as E, type CountBody as F, type CreateArgs as G, type CreateAuthorization as H, type CreateOptions as I, type CreateQueryInput as J, CustomHeaders as K, DATA_MIDDLEWARE as L, type DataBaseFilterHook as M, type DataFieldOptions as N, type DataFilter as O, type DataFindArgs as P, type DataFindOneArgs as Q, type DataFindOneOptions as R, type DataFindOptions as S, type DataHook as T, type DataHookContext as U, type DataIdentifierHook as V, type DataListHook as W, type DataOverrideFilterHook as X, type DataRequest as Y, type DataRequestSchemas as Z, type DataRouterOptions as _, type AccessRouterFieldKey as a, type ModelVirtualRecordAccess as a$, type DecorateAllAccess as a0, type DeepFieldPath as a1, type DefaultModelRouterOptions as a2, type Defaults as a3, type DistinctArgs as a4, type DistinctBody as a5, type DocPermissionsAccess as a6, type DocumentAuthorization as a7, type ErrorResult as a8, type ExistsOptions as a9, type KeyValueProjection as aA, type LegacyInclude as aB, type ListQueryInput as aC, type ListResult as aD, MIDDLEWARE as aE, type MaybePromise as aF, type ModelBaseFilterHook as aG, type ModelChangeHook as aH, type ModelDeleteHook as aI, type ModelDocPermissionsHook as aJ, type ModelDocument as aK, type ModelDocumentHook as aL, type ModelHook as aM, type ModelHookContext as aN, type ModelIdentifierHook as aO, type ModelListHook as aP, type ModelOverrideFilterHook as aQ, type ModelRequest as aR, type ModelRouterOptions as aS, type ModelValidateHook as aT, type ModelVirtualAccess as aU, type ModelVirtualAccessRecord as aV, type ModelVirtualContext as aW, type ModelVirtualDescriptor as aX, type ModelVirtualDoc as aY, type ModelVirtualGetter as aZ, type ModelVirtualLeaf as a_, type ExtendedDataRouterOptions as aa, type ExtendedDefaultModelRouterOptions as ab, type ExtendedModelRouterOptions as ac, type FieldAuthorization as ad, type FieldOperationAccess as ae, type Filter as af, FilterOperator as ag, type FindAccess as ah, type FindArgs as ai, type FindByIdArgs as aj, type FindByIdOptions as ak, type FindOneArgs as al, type FindOneOptions as am, type FindOptions as an, type GlobalOptions as ao, type GlobalPermissionValue as ap, type GuardHook as aq, type IdentifierHook as ar, type Include as as, type InputFieldAuthorization as at, type InputFieldPath as au, type IoTsContextEntryLike as av, type IoTsDecodeErrorLike as aw, type IoTsDecoderLike as ax, type JoiSchemaLike as ay, type JoiValidationErrorDetailLike as az, type AccessRouterLogger as b, type RootModelReadByFilterQueryEntry as b$, type ModelVirtuals as b0, type MutationAuthorization as b1, type NewArgs as b2, type NewOptions as b3, type OperationAccess as b4, type OperationAuthorization as b5, type OutputAuthorization as b6, type OutputFieldOptions as b7, type OutputFieldPath as b8, type OutputPlanningOptions as b9, type PublicUpdateArgs as bA, type PublicUpdateOptions as bB, type PublicUpsertArgs as bC, type PublicUpsertOptions as bD, type ReadQueryInput as bE, type RelatedAuthorization as bF, type Request as bG, type RequestSchemaAdapter as bH, type RequestSchemaFailure as bI, type RequestSchemaIssue as bJ, type RequestSchemaLike as bK, type RequestSchemaOptions as bL, type RequestSchemaResult as bM, type RequestSchemaSuccess as bN, type RequestSchemaValidator as bO, type RequestSchemas as bP, type RootDataListQueryEntry as bQ, type RootDataOperation as bR, type RootDataReadByFilterQueryEntry as bS, type RootDataReadByIdQueryEntry as bT, type RootModelCountQueryEntry as bU, type RootModelCreateQueryEntry as bV, type RootModelDeleteQueryEntry as bW, type RootModelDistinctQueryEntry as bX, type RootModelListQueryEntry as bY, type RootModelNewQueryEntry as bZ, type RootModelOperation as b_, PERMISSIONS as ba, PERMISSION_KEYS as bb, type PairedRouteAccess as bc, type ParentRef as bd, type PathValue as be, type PermissionSchema as bf, type Populate as bg, type PopulateAccess as bh, type PopulatePlanningOptions as bi, type PrepareAccess as bj, type Projection as bk, type PublicCreateArgs as bl, type PublicCreateOptions as bm, type PublicErrorResult as bn, type PublicListArgs as bo, type PublicListOptions as bp, type PublicListResult as bq, type PublicOutput as br, type PublicReadArgs as bs, type PublicReadOptions as bt, type PublicServiceResult as bu, type PublicSingleResult as bv, type PublicSubdocumentCreateOptions as bw, type PublicSubdocumentListOptions as bx, type PublicSubdocumentMutationOptions as by, type PublicSubdocumentReadOptions as bz, type AccessRouterRequest as c, type SubdocumentRecord as c$, type RootModelReadByIdQueryEntry as c0, type RootModelSubBulkUpdateQueryEntry as c1, type RootModelSubCreateQueryEntry as c2, type RootModelSubDeleteQueryEntry as c3, type RootModelSubListQueryEntry as c4, type RootModelSubReadQueryEntry as c5, type RootModelSubUpdateQueryEntry as c6, type RootModelUpdateQueryEntry as c7, type RootModelUpsertQueryEntry as c8, type RootOperationResult as c9, StatusCodes as cA, type SubListBody as cB, type SubOperationAccess as cC, type SubPopulate as cD, type SubQueryEntry as cE, type SubReadBody as cF, type SubRouteGuardOptions as cG, type SubdocumentBulkRecord as cH, type SubdocumentBulkUpdateInput as cI, type SubdocumentCreateAuthorization as cJ, type SubdocumentCreateInput as cK, type SubdocumentCreateOptions as cL, type SubdocumentCreateVisibilityAuthorization as cM, type SubdocumentDeleteAuthorization as cN, type SubdocumentDeleteOptions as cO, type SubdocumentGateAuthorization as cP, type SubdocumentId as cQ, type SubdocumentInputAuthorization as cR, type SubdocumentListOptions as cS, type SubdocumentModel as cT, type SubdocumentMutationAuthorization as cU, type SubdocumentName as cV, type SubdocumentOutputAuthorization as cW, type SubdocumentParentArgs as cX, type SubdocumentParentOptions as cY, type SubdocumentReadAuthorization as cZ, type SubdocumentReadOptions as c_, type RootQueryEntry as ca, type RootRouterOptions as cb, type RootSubOperation as cc, type RootTarget as cd, type RouteBaseAccess as ce, type RouteGuardAccess as cf, type RouteVariant as cg, type RouteVariantAccess as ch, type RowAuthorization as ci, type SelectAccess as cj, type SelectedPopulatedPublicOutput as ck, type SelectedPublicOutput as cl, type ServiceAuthorization as cm, type ServiceOutputContext as cn, type ServiceOutputDecorator as co, type ServiceResult as cp, type SingleResult as cq, type Sort as cr, type SortOrder as cs, type StandardSchemaFailure as ct, type StandardSchemaInferOutput as cu, type StandardSchemaIssue as cv, type StandardSchemaPathSegment as cw, type StandardSchemaResult as cx, type StandardSchemaSuccess as cy, type StandardSchemaV1 as cz, type AccessRouterRequestExtensions as d, type Permissions as d$, type SubdocumentUpdateOptions as d0, type SubdocumentVirtuals as d1, type SubdocumentVisibilityAuthorization as d2, type SuperstructFailureLike as d3, type SuperstructValidateLike as d4, type Task as d5, type TaskType as d6, type TransformAccess as d7, type TypedFilter as d8, type UpdateByIdArgs as d9, fromIoTs as dA, fromJoi as dB, fromStandardSchema as dC, fromSuperstruct as dD, fromValibot as dE, fromVine as dF, fromYup as dG, fromZod as dH, parseBody as dI, parseBodyWithSchema as dJ, parseNestedBodyWithSchema as dK, parsePathParam as dL, parseQuery as dM, AccessRuntime as dN, DataService as dO, Service as dP, PublicService as dQ, type OpenApiRouterOptions as dR, type OpenApiRegistryOptions as dS, type OpenApiRouteDescriptor as dT, type OpenApiDocumentOptions as dU, type OpenApiParameter as dV, type OpenApiSchema as dW, type OpenApiResponses as dX, type AccessRouterPermissionMap as dY, type AccessRouterPermissions as dZ, type OpenApiMethod as d_, type UpdateByIdOptions as da, type UpdateOneArgs as db, type UpdateOneOptions as dc, type UpdateQueryInput as dd, type UpsertArgs as de, type UpsertOptions as df, type UpsertQueryInput as dg, type ValibotIssueLike as dh, type ValibotPathItemLike as di, type ValibotSafeParseLike as dj, type ValibotSafeParseResult as dk, type ValidateAccess as dl, type ValidateRule as dm, type Validation as dn, type ValidationError as dp, type VineValidationErrorLike as dq, type VineValidationMessageLike as dr, type VineValidatorLike as ds, type VirtualSubModel as dt, type WithVirtuals as du, type YupSchemaLike as dv, type YupValidationErrorLike as dw, defineRequestSchema as dx, fromAjv as dy, fromArkType as dz, type AdvancedCreateBody as e, defaultRuntime as e0, type AdvancedListBody as f, type AdvancedReadBody as g, type AdvancedReadFilterBody as h, type AdvancedUpdateBody as i, type AdvancedUpsertBody as j, type AfterPersistAccess as k, type AjvErrorObjectLike as l, type AjvValidationErrorLike as m, type AjvValidatorLike as n, type AllowedOutputFieldOptions as o, type ArkTypeErrorsLike as p, type ArkTypeLike as q, type ArkTypeProblemLike as r, type AuthorizedListResult as s, type AuthorizedSingleResult as t, Codes as u, type CorrelatedCountInclude as v, type CorrelatedFilter as w, type CorrelatedInclude as x, type CorrelatedIncludeArgs as y, type CorrelatedListInclude as z };
+export { type DecorateAccess as $, type AccessRouterBaseRequest as A, type BaseFilterAccess as B, type Change as C, type CorrelatedReadByFilterInclude as D, type CorrelatedReadByIdInclude as E, type CountBody as F, type CreateArgs as G, type CreateAuthorization as H, type CreateOptions as I, type CreateQueryInput as J, CustomHeaders as K, DATA_MIDDLEWARE as L, type DataBaseFilterHook as M, type DataFieldOptions as N, type DataFilter as O, type DataFindArgs as P, type DataFindOneArgs as Q, type DataFindOneOptions as R, type DataFindOptions as S, type DataHook as T, type DataHookContext as U, type DataIdentifierHook as V, type DataListHook as W, type DataOverrideFilterHook as X, type DataRequest as Y, type DataRequestSchemas as Z, type DataRouterOptions as _, type AccessRouterFieldKey as a, type ModelVirtualGetter as a$, type DecorateAllAccess as a0, type DeepFieldPath as a1, type DefaultModelRouterOptions as a2, type Defaults as a3, type DistinctArgs as a4, type DistinctBody as a5, type DocPermissionsAccess as a6, type DocumentAuthorization as a7, type ErrorResult as a8, type ExistsOptions as a9, type JoiValidationErrorDetailLike as aA, type KeyValueProjection as aB, type LegacyInclude as aC, type ListQueryInput as aD, type ListResult as aE, MIDDLEWARE as aF, type MaybePromise as aG, type ModelBaseFilterHook as aH, type ModelChangeHook as aI, type ModelDeleteHook as aJ, type ModelDocPermissionsHook as aK, type ModelDocument as aL, type ModelDocumentHook as aM, type ModelHook as aN, type ModelHookContext as aO, type ModelHydrationOptions as aP, type ModelIdentifierHook as aQ, type ModelListHook as aR, type ModelOverrideFilterHook as aS, type ModelRequest as aT, type ModelRouterOptions as aU, type ModelValidateHook as aV, type ModelVirtualAccess as aW, type ModelVirtualAccessRecord as aX, type ModelVirtualContext as aY, type ModelVirtualDescriptor as aZ, type ModelVirtualDoc as a_, type ExtendedDataRouterOptions as aa, type ExtendedDefaultModelRouterOptions as ab, type ExtendedModelRouterOptions as ac, type FieldAuthorization as ad, type FieldOperationAccess as ae, type Filter as af, FilterOperator as ag, type FindAccess as ah, type FindArgs as ai, type FindByIdArgs as aj, type FindByIdOptions as ak, type FindOneArgs as al, type FindOneOptions as am, type FindOptions as an, type GlobalOptions as ao, type GlobalPermissionValue as ap, type GuardHook as aq, type HydrationMode as ar, type IdentifierHook as as, type Include as at, type InputFieldAuthorization as au, type InputFieldPath as av, type IoTsContextEntryLike as aw, type IoTsDecodeErrorLike as ax, type IoTsDecoderLike as ay, type JoiSchemaLike as az, type AccessRouterLogger as b, type RootModelNewQueryEntry as b$, type ModelVirtualLeaf as b0, type ModelVirtualRecordAccess as b1, type ModelVirtuals as b2, type MutationAuthorization as b3, type NewArgs as b4, type NewOptions as b5, type OperationAccess as b6, type OperationAuthorization as b7, type OutputAuthorization as b8, type OutputFieldOptions as b9, type PublicSubdocumentMutationOptions as bA, type PublicSubdocumentReadOptions as bB, type PublicUpdateArgs as bC, type PublicUpdateOptions as bD, type PublicUpsertArgs as bE, type PublicUpsertOptions as bF, type ReadQueryInput as bG, type RelatedAuthorization as bH, type Request as bI, type RequestSchemaAdapter as bJ, type RequestSchemaFailure as bK, type RequestSchemaIssue as bL, type RequestSchemaLike as bM, type RequestSchemaOptions as bN, type RequestSchemaResult as bO, type RequestSchemaSuccess as bP, type RequestSchemaValidator as bQ, type RequestSchemas as bR, type RootDataListQueryEntry as bS, type RootDataOperation as bT, type RootDataReadByFilterQueryEntry as bU, type RootDataReadByIdQueryEntry as bV, type RootModelCountQueryEntry as bW, type RootModelCreateQueryEntry as bX, type RootModelDeleteQueryEntry as bY, type RootModelDistinctQueryEntry as bZ, type RootModelListQueryEntry as b_, type OutputFieldPath as ba, type OutputPlanningOptions as bb, PERMISSIONS as bc, PERMISSION_KEYS as bd, type PairedRouteAccess as be, type ParentRef as bf, type PathValue as bg, type PermissionSchema as bh, type Populate as bi, type PopulateAccess as bj, type PopulatePlanningOptions as bk, type PrepareAccess as bl, type Projection as bm, type PublicCreateArgs as bn, type PublicCreateOptions as bo, type PublicErrorResult as bp, type PublicListArgs as bq, type PublicListOptions as br, type PublicListResult as bs, type PublicOutput as bt, type PublicReadArgs as bu, type PublicReadOptions as bv, type PublicServiceResult as bw, type PublicSingleResult as bx, type PublicSubdocumentCreateOptions as by, type PublicSubdocumentListOptions as bz, type AccessRouterRequest as c, type SubdocumentReadAuthorization as c$, type RootModelOperation as c0, type RootModelReadByFilterQueryEntry as c1, type RootModelReadByIdQueryEntry as c2, type RootModelSubBulkUpdateQueryEntry as c3, type RootModelSubCreateQueryEntry as c4, type RootModelSubDeleteQueryEntry as c5, type RootModelSubListQueryEntry as c6, type RootModelSubReadQueryEntry as c7, type RootModelSubUpdateQueryEntry as c8, type RootModelUpdateQueryEntry as c9, type StandardSchemaSuccess as cA, type StandardSchemaV1 as cB, StatusCodes as cC, type SubListBody as cD, type SubOperationAccess as cE, type SubPopulate as cF, type SubQueryEntry as cG, type SubReadBody as cH, type SubRouteGuardOptions as cI, type SubdocumentBulkRecord as cJ, type SubdocumentBulkUpdateInput as cK, type SubdocumentCreateAuthorization as cL, type SubdocumentCreateInput as cM, type SubdocumentCreateOptions as cN, type SubdocumentCreateVisibilityAuthorization as cO, type SubdocumentDeleteAuthorization as cP, type SubdocumentDeleteOptions as cQ, type SubdocumentGateAuthorization as cR, type SubdocumentId as cS, type SubdocumentInputAuthorization as cT, type SubdocumentListOptions as cU, type SubdocumentModel as cV, type SubdocumentMutationAuthorization as cW, type SubdocumentName as cX, type SubdocumentOutputAuthorization as cY, type SubdocumentParentArgs as cZ, type SubdocumentParentOptions as c_, type RootModelUpsertQueryEntry as ca, type RootOperationResult as cb, type RootQueryEntry as cc, type RootRouterOptions as cd, type RootSubOperation as ce, type RootTarget as cf, type RouteBaseAccess as cg, type RouteGuardAccess as ch, type RouteVariant as ci, type RouteVariantAccess as cj, type RowAuthorization as ck, type SelectAccess as cl, type SelectedPopulatedPublicOutput as cm, type SelectedPublicOutput as cn, type ServiceAuthorization as co, type ServiceOutputContext as cp, type ServiceOutputDecorator as cq, type ServiceResult as cr, type SingleResult as cs, type Sort as ct, type SortOrder as cu, type StandardSchemaFailure as cv, type StandardSchemaInferOutput as cw, type StandardSchemaIssue as cx, type StandardSchemaPathSegment as cy, type StandardSchemaResult as cz, type AccessRouterRequestExtensions as d, type AccessRouterPermissions as d$, type SubdocumentReadOptions as d0, type SubdocumentRecord as d1, type SubdocumentUpdateOptions as d2, type SubdocumentVirtuals as d3, type SubdocumentVisibilityAuthorization as d4, type SuperstructFailureLike as d5, type SuperstructValidateLike as d6, type Task as d7, type TaskType as d8, type TransformAccess as d9, fromAjv as dA, fromArkType as dB, fromIoTs as dC, fromJoi as dD, fromStandardSchema as dE, fromSuperstruct as dF, fromValibot as dG, fromVine as dH, fromYup as dI, fromZod as dJ, parseBody as dK, parseBodyWithSchema as dL, parseNestedBodyWithSchema as dM, parsePathParam as dN, parseQuery as dO, AccessRuntime as dP, DataService as dQ, Service as dR, PublicService as dS, type OpenApiRouterOptions as dT, type OpenApiRegistryOptions as dU, type OpenApiRouteDescriptor as dV, type OpenApiDocumentOptions as dW, type OpenApiParameter as dX, type OpenApiSchema as dY, type OpenApiResponses as dZ, type AccessRouterPermissionMap as d_, type TypedFilter as da, type UpdateByIdArgs as db, type UpdateByIdOptions as dc, type UpdateOneArgs as dd, type UpdateOneOptions as de, type UpdateQueryInput as df, type UpsertArgs as dg, type UpsertOptions as dh, type UpsertQueryInput as di, type ValibotIssueLike as dj, type ValibotPathItemLike as dk, type ValibotSafeParseLike as dl, type ValibotSafeParseResult as dm, type ValidateAccess as dn, type ValidateRule as dp, type Validation as dq, type ValidationError as dr, type VineValidationErrorLike as ds, type VineValidationMessageLike as dt, type VineValidatorLike as du, type VirtualSubModel as dv, type WithVirtuals as dw, type YupSchemaLike as dx, type YupValidationErrorLike as dy, defineRequestSchema as dz, type AdvancedCreateBody as e, type OpenApiMethod as e0, type Permissions as e1, defaultRuntime as e2, type AdvancedListBody as f, type AdvancedReadBody as g, type AdvancedReadFilterBody as h, type AdvancedUpdateBody as i, type AdvancedUpsertBody as j, type AfterPersistAccess as k, type AjvErrorObjectLike as l, type AjvValidationErrorLike as m, type AjvValidatorLike as n, type AllowedOutputFieldOptions as o, type ArkTypeErrorsLike as p, type ArkTypeLike as q, type ArkTypeProblemLike as r, type AuthorizedListResult as s, type AuthorizedSingleResult as t, Codes as u, type CorrelatedCountInclude as v, type CorrelatedFilter as w, type CorrelatedInclude as x, type CorrelatedIncludeArgs as y, type CorrelatedListInclude as z };

package/{parsers-BnmChTfF.d.ts → parsers-ZSrF7SNu.d.ts}

@@ -334,6 +334,7 @@ interface PublicListArgs {
     pageSize?: string | number;
     tasks?: Task | Task[];
 }
+/** Request presentation options. Fetch mode is server model hydration.publicList (built-in lean). */
 interface PublicListOptions {
     /** @deprecated Compatibility no-op. Authorization, document grants, virtuals and decoration always run. */
     skim?: boolean;
@@ -349,8 +350,6 @@ interface PublicListOptions {
     /** Exact authorized match total, independent of pagination (default false). Wire requests also control HTTP metadata exposure. */
     includeCount?: boolean;
     populateAccess?: PopulateAccess;
-    /** Mongoose hydration choice (public list default true); authorization and virtuals still run. Supported by service/root options. */
-    lean?: boolean;
 }
 
 interface KeyValueProjection {
@@ -981,17 +980,24 @@ declare class Service<TModel = unknown, TVirtuals extends object = Record<never,
     protected model: any;
     protected get options(): ModelRouterOptions<TModel, TVirtuals>;
     private defaultsOverride?;
+    /**
+     * Presentation/query defaults for this service instance; an explicit assignment
+     * replaces the runtime defaults bag, not a per-bucket merge. Fetch mode belongs
+     * to the owning model's hydration configuration and affects all its services.
+     * Legacy method-option lean/hydration keys throw on assignment and before calls
+     * if an assigned JavaScript bag is later mutated.
+     */
     get defaults(): Defaults<TModel>;
     set defaults(value: Defaults<TModel>);
     protected baseFields: string[];
     protected get baseFieldsExt(): string[];
     private readonly hookGate;
     private readonly persist;
+    /** Raw hydrated parent/null. Fetch mode is fixed, independent of model read settings. */
     findRawParentDoc(args: {
         filter: Filter<TModel>;
         select: string;
         populate: unknown;
-        lean: boolean;
     }): any;
     protected createModelAdapter(modelName: string): any;
     protected getModelRouterOptions(modelName: string): ModelRouterOptions<TModel, TVirtuals>;
@@ -1103,19 +1109,6 @@ declare class Service<TModel = unknown, TVirtuals extends object = Record<never,
     finalizePopulateForSubParent(parentDoc: unknown, populateEntries: Populate[], parentOperation: string, hookLimit?: number, sharedGate?: SharedHookGate): Promise<void>;
     private filterAllowedFieldsForVirtuals;
     private stripVirtualsFromFilterForSnapshot;
-    /**
-     * Preserve the `permissions` Mongoose virtual (from `permissionsPlugin`) for
-     * hydrated outputs. `isolateDocForOutput` uses `toObject({ virtuals: false })`
-     * so Mongoose getter virtuals never leak into package-virtual planning;
-     * `lean: true` therefore drops them (explicit parity rule). For `lean: false`
-     * (hydrated Mongoose documents) the historical contract exposes
-     * `doc.permissions` as an alias of the document-permission field. The shared
-     * finalizer keeps only the document-permission field, so restore the alias
-     * here for backward compatibility when the input was hydrated and the
-     * virtual existed. Lean outputs stay without the virtual. Models without
-     * the plugin never had the virtual and stay unchanged.
-     */
-    private preservePermissionsVirtual;
     /**
      * VIRT-05 populate + association helpers.
      *
@@ -1302,6 +1295,7 @@ declare class Service<TModel = unknown, TVirtuals extends object = Record<never,
     createSub<S extends string>(id: SubdocumentId, sub: S, data: SubdocumentCreateInput, options?: SubdocumentCreateOptions<TModel, SubdocumentModel<TModel, S>, SubdocumentVirtuals<TVirtuals, S>>): Promise<ListResult | ErrorResult>;
     /** Trusted parent-update/child-delete gates and rows; no fields/visibility policy. Returns the removed ID. */
     deleteSub<S extends string>(id: SubdocumentId, sub: S, subId: SubdocumentId, options?: SubdocumentDeleteOptions<TModel, SubdocumentModel<TModel, S>>): Promise<SingleResult | ErrorResult>;
+    /** Raw hydrated parent/null, with row policy and populate; no finalized permission metadata. */
     getParentDoc(id: SubdocumentId, sub: SubdocumentName, args?: SubdocumentParentArgs, options?: SubdocumentParentOptions): Promise<any>;
 }
 
@@ -1556,9 +1550,9 @@ type PublicSubdocumentMutationOptions = Readonly<Record<string, never>>;
 interface SubdocumentParentArgs {
     populate?: SubPopulate | SubPopulate[];
 }
+/** Request-only raw-parent lookup access. The returned parent is always hydrated. */
 interface SubdocumentParentOptions {
     access?: BaseFilterAccess;
-    lean?: boolean;
 }
 
 type CrossResourceModelOperation = 'list' | 'read' | 'count';
@@ -1886,11 +1880,14 @@ interface PublicReadArgs {
     include?: Include | Include[];
     tasks?: Task | Task[];
 }
+/**
+ * Request presentation options. Server model hydration.publicRead (built-in hydrated)
+ * governs both identifier/filter reads and both attempts of their list fallback.
+ */
 interface PublicReadOptions {
     /** @deprecated Compatibility no-op. Authorization, document grants, virtuals and decoration always run. */
     skim?: boolean;
     populateAccess?: PopulateAccess;
-    lean?: boolean;
     includePermissions?: boolean;
     /**
      * Include field-level `_view`/`_edit` maps. Defaults to `includePermissions`
@@ -2631,6 +2628,7 @@ interface FindArgs<T = unknown> {
     page?: string | number;
     pageSize?: string | number;
 }
+/** Internal list options. Fetch mode is model hydration.find, never a per-call/default lean option. */
 interface FindOptions<TModel = unknown, TVirtuals extends object = Record<never, never>> {
     /** Trusted server-only per-call policy. Omitted dimensions use request authority; never a wire/default option. */
     readonly authorization?: ServiceAuthorization<TModel, TVirtuals>;
@@ -2648,8 +2646,6 @@ interface FindOptions<TModel = unknown, TVirtuals extends object = Record<never,
     /** Compute exact authorized totalCount independently of pagination (default false). count is returned-row count. */
     includeCount?: boolean;
     populateAccess?: PopulateAccess;
-    /** Fetch without Mongoose hydration (internal default false). Finalized output still enforces fields and computes virtuals. */
-    lean?: boolean;
 }
 interface FindOneArgs<T = unknown> {
     select?: Projection;
@@ -2657,6 +2653,7 @@ interface FindOneArgs<T = unknown> {
     populate?: Populate[] | string;
     include?: Include | Include[];
 }
+/** Internal read options. Fetch mode is model hydration.findOne, not an option in this bag. */
 interface FindOneOptions<TModel = unknown, TVirtuals extends object = Record<never, never>> {
     /** Trusted server-only rows/output/related policy; ordinary selection remains in args.select. */
     readonly authorization?: ServiceAuthorization<TModel, TVirtuals>;
@@ -2664,8 +2661,6 @@ interface FindOneOptions<TModel = unknown, TVirtuals extends object = Record<nev
     populateAccess?: PopulateAccess;
     /** @deprecated Compatibility no-op. Authorization, document grants, virtuals and decoration always run. */
     skim?: boolean;
-    /** Fetch without Mongoose hydration (default false), retaining the same output authorization and virtuals. */
-    lean?: boolean;
     includePermissions?: boolean;
     /**
      * Include field-level `_view`/`_edit` maps. Defaults to `includePermissions`
@@ -2681,6 +2676,7 @@ interface FindByIdArgs<T = unknown> {
     populate?: Populate[] | string;
     include?: Include | Include[];
 }
+/** By-ID options inherit presentation/policy fields, not hydration.findOne; use model hydration.findById. */
 interface FindByIdOptions<TModel = unknown, TVirtuals extends object = Record<never, never>> extends FindOneOptions<TModel, TVirtuals> {
 }
 
@@ -2951,6 +2947,8 @@ interface DataRequestSchemas {
  * policy belongs here. Each fresh model-service call captures the originating runtime's
  * current defaults; nested stages retain that call's snapshot. Explicit service.defaults
  * assignments override runtime defaults. Router setters shallowly replace supplied values.
+ * Fetch mode belongs to ModelRouterOptions.hydration; legacy lean/hydration keys
+ * in method option buckets fail with migration diagnostics.
  * See README Configuration layers for delegation.
  */
 interface Defaults<TModel = unknown> {
@@ -3124,11 +3122,52 @@ interface DocPermissions {
     read?: ModelDocPermissionsHook;
     update?: ModelDocPermissionsHook;
 }
+/**
+ * Mongoose fetch mode, not an output type. Both modes finalize plain objects;
+ * schema defaults, getters, transforms and init hooks can still change values.
+ */
+type HydrationMode = 'lean' | 'hydrated';
+/**
+ * Server-only model configuration, captured by the owning runtime per call.
+ * Set through ModelRouterOptions/DefaultModelRouterOptions and their whole-record
+ * or exact hydration.<method> setters (including existing model/default decorators).
+ * A supplied record replaces the previous record shallowly; omitted/undefined
+ * members use built-ins, not an older/default record. Whole-record undefined clears
+ * it. Invalid records/keys/modes throw before publication. Fresh calls observe owner
+ * updates; in-flight calls retain their captured configuration.
+ * Includes stay fixed lean; raw parents/lifecycle stages stay hydrated; subdocument
+ * post-save visibility stays lean. Populate inherits its parent query; $$sq uses
+ * target public settings. No per-call, wire, global, data/root or service.defaults
+ * setting exists. Migrate defaults.*Options.lean explicitly (true -> 'lean', false
+ * -> 'hydrated'); a former service-instance choice becomes model-wide in its runtime.
+ * Legacy method-default lean/hydration controls throw migration diagnostics; stale
+ * permissive per-call/wire controls are inert, not a supported configuration path.
+ */
+interface ModelHydrationOptions {
+    /** Public lists default to lean. */
+    publicList?: HydrationMode;
+    /** Identifier/filter reads and their list fallback default to hydrated. */
+    publicRead?: HydrationMode;
+    /** Internal find defaults to hydrated, independently of publicList. */
+    find?: HydrationMode;
+    /** Internal findOne defaults to hydrated, independently of publicRead/findById. */
+    findOne?: HydrationMode;
+    /** Internal findById defaults to hydrated; does not inherit findOne's setting. */
+    findById?: HydrationMode;
+}
 /** Model starting defaults; data/root routers do not inherit these. Nested values assign shallowly. */
 interface DefaultModelRouterOptions<TModel = unknown> {
+    /** Server-owned fetch choices, captured per call. Not a per-call or method-default option. */
+    hydration?: ModelHydrationOptions;
     /** Maximum returned list rows (default 1000), independent of exact match/count totals. */
     listHardLimit?: number;
-    /** Authorization metadata path (default `_permissions`); include output cannot equal, contain or descend from it. */
+    /**
+     * Serialized metadata path (default `_permissions`, dotted paths supported).
+     * Finalized rows carrying it also get a non-enumerable `permissions` value alias,
+     * independent of hydration/plugin, unless that output property already exists.
+     * The alias is not authority or a live binding; JSON/spread omit it. Include output
+     * cannot equal, contain or descend from the canonical metadata path.
+     */
     documentPermissionField?: string;
     /** Express route parameter name (default `id`); fixed at router construction. */
     idParam?: string;
@@ -3178,12 +3217,13 @@ interface DefaultModelRouterOptions<TModel = unknown> {
     /**
      * When `true`, the document permissions field (`documentPermissionField`,
      * default `_permissions`) is removed from all outputs — including its empty
-     * placeholder — and client `includePermissions`/`includeFieldPermissions`
+     * placeholder — and its generated `permissions` alias. Client `includePermissions`/`includeFieldPermissions`
      * input (query params, body/root-batch options and service-direct options)
      * as well as per-operation `defaults` are ignored (both resolve to `false`).
      * Output matches `includePermissions: false` with the permissions field
      * removed entirely. Enforcement still runs; only output metadata is
-     * affected. Defaults to `false`.
+     * affected; existing business output named `permissions` is not a generated alias.
+     * Defaults to `false`.
      */
     stripPermissionsField?: boolean;
     /**
@@ -3196,6 +3236,11 @@ interface DefaultModelRouterOptions<TModel = unknown> {
     disableFieldPermissions?: boolean;
 }
 interface ExtendedDefaultModelRouterOptions<TModel = unknown> extends DefaultModelRouterOptions<TModel> {
+    'hydration.publicList'?: HydrationMode;
+    'hydration.publicRead'?: HydrationMode;
+    'hydration.find'?: HydrationMode;
+    'hydration.findOne'?: HydrationMode;
+    'hydration.findById'?: HydrationMode;
     'operationAccess.default'?: Validation;
     'operationAccess.new'?: Validation;
     'operationAccess.list'?: Validation;
@@ -3566,4 +3611,4 @@ declare function fromIoTs<TValue = unknown>(decoder: IoTsDecoderLike<TValue>): R
 declare function fromSuperstruct<TStruct, TOutput = unknown>(struct: TStruct, validate: SuperstructValidateLike): RequestSchemaValidator<TOutput>;
 declare function fromVine<TValue = unknown>(validator: VineValidatorLike<TValue>): RequestSchemaValidator<TValue>;
 
-export { type DecorateAccess as $, type AccessRouterBaseRequest as A, type BaseFilterAccess as B, type Change as C, type CorrelatedReadByFilterInclude as D, type CorrelatedReadByIdInclude as E, type CountBody as F, type CreateArgs as G, type CreateAuthorization as H, type CreateOptions as I, type CreateQueryInput as J, CustomHeaders as K, DATA_MIDDLEWARE as L, type DataBaseFilterHook as M, type DataFieldOptions as N, type DataFilter as O, type DataFindArgs as P, type DataFindOneArgs as Q, type DataFindOneOptions as R, type DataFindOptions as S, type DataHook as T, type DataHookContext as U, type DataIdentifierHook as V, type DataListHook as W, type DataOverrideFilterHook as X, type DataRequest as Y, type DataRequestSchemas as Z, type DataRouterOptions as _, type AccessRouterFieldKey as a, type ModelVirtualRecordAccess as a$, type DecorateAllAccess as a0, type DeepFieldPath as a1, type DefaultModelRouterOptions as a2, type Defaults as a3, type DistinctArgs as a4, type DistinctBody as a5, type DocPermissionsAccess as a6, type DocumentAuthorization as a7, type ErrorResult as a8, type ExistsOptions as a9, type KeyValueProjection as aA, type LegacyInclude as aB, type ListQueryInput as aC, type ListResult as aD, MIDDLEWARE as aE, type MaybePromise as aF, type ModelBaseFilterHook as aG, type ModelChangeHook as aH, type ModelDeleteHook as aI, type ModelDocPermissionsHook as aJ, type ModelDocument as aK, type ModelDocumentHook as aL, type ModelHook as aM, type ModelHookContext as aN, type ModelIdentifierHook as aO, type ModelListHook as aP, type ModelOverrideFilterHook as aQ, type ModelRequest as aR, type ModelRouterOptions as aS, type ModelValidateHook as aT, type ModelVirtualAccess as aU, type ModelVirtualAccessRecord as aV, type ModelVirtualContext as aW, type ModelVirtualDescriptor as aX, type ModelVirtualDoc as aY, type ModelVirtualGetter as aZ, type ModelVirtualLeaf as a_, type ExtendedDataRouterOptions as aa, type ExtendedDefaultModelRouterOptions as ab, type ExtendedModelRouterOptions as ac, type FieldAuthorization as ad, type FieldOperationAccess as ae, type Filter as af, FilterOperator as ag, type FindAccess as ah, type FindArgs as ai, type FindByIdArgs as aj, type FindByIdOptions as ak, type FindOneArgs as al, type FindOneOptions as am, type FindOptions as an, type GlobalOptions as ao, type GlobalPermissionValue as ap, type GuardHook as aq, type IdentifierHook as ar, type Include as as, type InputFieldAuthorization as at, type InputFieldPath as au, type IoTsContextEntryLike as av, type IoTsDecodeErrorLike as aw, type IoTsDecoderLike as ax, type JoiSchemaLike as ay, type JoiValidationErrorDetailLike as az, type AccessRouterLogger as b, type RootModelReadByFilterQueryEntry as b$, type ModelVirtuals as b0, type MutationAuthorization as b1, type NewArgs as b2, type NewOptions as b3, type OperationAccess as b4, type OperationAuthorization as b5, type OutputAuthorization as b6, type OutputFieldOptions as b7, type OutputFieldPath as b8, type OutputPlanningOptions as b9, type PublicUpdateArgs as bA, type PublicUpdateOptions as bB, type PublicUpsertArgs as bC, type PublicUpsertOptions as bD, type ReadQueryInput as bE, type RelatedAuthorization as bF, type Request as bG, type RequestSchemaAdapter as bH, type RequestSchemaFailure as bI, type RequestSchemaIssue as bJ, type RequestSchemaLike as bK, type RequestSchemaOptions as bL, type RequestSchemaResult as bM, type RequestSchemaSuccess as bN, type RequestSchemaValidator as bO, type RequestSchemas as bP, type RootDataListQueryEntry as bQ, type RootDataOperation as bR, type RootDataReadByFilterQueryEntry as bS, type RootDataReadByIdQueryEntry as bT, type RootModelCountQueryEntry as bU, type RootModelCreateQueryEntry as bV, type RootModelDeleteQueryEntry as bW, type RootModelDistinctQueryEntry as bX, type RootModelListQueryEntry as bY, type RootModelNewQueryEntry as bZ, type RootModelOperation as b_, PERMISSIONS as ba, PERMISSION_KEYS as bb, type PairedRouteAccess as bc, type ParentRef as bd, type PathValue as be, type PermissionSchema as bf, type Populate as bg, type PopulateAccess as bh, type PopulatePlanningOptions as bi, type PrepareAccess as bj, type Projection as bk, type PublicCreateArgs as bl, type PublicCreateOptions as bm, type PublicErrorResult as bn, type PublicListArgs as bo, type PublicListOptions as bp, type PublicListResult as bq, type PublicOutput as br, type PublicReadArgs as bs, type PublicReadOptions as bt, type PublicServiceResult as bu, type PublicSingleResult as bv, type PublicSubdocumentCreateOptions as bw, type PublicSubdocumentListOptions as bx, type PublicSubdocumentMutationOptions as by, type PublicSubdocumentReadOptions as bz, type AccessRouterRequest as c, type SubdocumentRecord as c$, type RootModelReadByIdQueryEntry as c0, type RootModelSubBulkUpdateQueryEntry as c1, type RootModelSubCreateQueryEntry as c2, type RootModelSubDeleteQueryEntry as c3, type RootModelSubListQueryEntry as c4, type RootModelSubReadQueryEntry as c5, type RootModelSubUpdateQueryEntry as c6, type RootModelUpdateQueryEntry as c7, type RootModelUpsertQueryEntry as c8, type RootOperationResult as c9, StatusCodes as cA, type SubListBody as cB, type SubOperationAccess as cC, type SubPopulate as cD, type SubQueryEntry as cE, type SubReadBody as cF, type SubRouteGuardOptions as cG, type SubdocumentBulkRecord as cH, type SubdocumentBulkUpdateInput as cI, type SubdocumentCreateAuthorization as cJ, type SubdocumentCreateInput as cK, type SubdocumentCreateOptions as cL, type SubdocumentCreateVisibilityAuthorization as cM, type SubdocumentDeleteAuthorization as cN, type SubdocumentDeleteOptions as cO, type SubdocumentGateAuthorization as cP, type SubdocumentId as cQ, type SubdocumentInputAuthorization as cR, type SubdocumentListOptions as cS, type SubdocumentModel as cT, type SubdocumentMutationAuthorization as cU, type SubdocumentName as cV, type SubdocumentOutputAuthorization as cW, type SubdocumentParentArgs as cX, type SubdocumentParentOptions as cY, type SubdocumentReadAuthorization as cZ, type SubdocumentReadOptions as c_, type RootQueryEntry as ca, type RootRouterOptions as cb, type RootSubOperation as cc, type RootTarget as cd, type RouteBaseAccess as ce, type RouteGuardAccess as cf, type RouteVariant as cg, type RouteVariantAccess as ch, type RowAuthorization as ci, type SelectAccess as cj, type SelectedPopulatedPublicOutput as ck, type SelectedPublicOutput as cl, type ServiceAuthorization as cm, type ServiceOutputContext as cn, type ServiceOutputDecorator as co, type ServiceResult as cp, type SingleResult as cq, type Sort as cr, type SortOrder as cs, type StandardSchemaFailure as ct, type StandardSchemaInferOutput as cu, type StandardSchemaIssue as cv, type StandardSchemaPathSegment as cw, type StandardSchemaResult as cx, type StandardSchemaSuccess as cy, type StandardSchemaV1 as cz, type AccessRouterRequestExtensions as d, type Permissions as d$, type SubdocumentUpdateOptions as d0, type SubdocumentVirtuals as d1, type SubdocumentVisibilityAuthorization as d2, type SuperstructFailureLike as d3, type SuperstructValidateLike as d4, type Task as d5, type TaskType as d6, type TransformAccess as d7, type TypedFilter as d8, type UpdateByIdArgs as d9, fromIoTs as dA, fromJoi as dB, fromStandardSchema as dC, fromSuperstruct as dD, fromValibot as dE, fromVine as dF, fromYup as dG, fromZod as dH, parseBody as dI, parseBodyWithSchema as dJ, parseNestedBodyWithSchema as dK, parsePathParam as dL, parseQuery as dM, AccessRuntime as dN, DataService as dO, Service as dP, PublicService as dQ, type OpenApiRouterOptions as dR, type OpenApiRegistryOptions as dS, type OpenApiRouteDescriptor as dT, type OpenApiDocumentOptions as dU, type OpenApiParameter as dV, type OpenApiSchema as dW, type OpenApiResponses as dX, type AccessRouterPermissionMap as dY, type AccessRouterPermissions as dZ, type OpenApiMethod as d_, type UpdateByIdOptions as da, type UpdateOneArgs as db, type UpdateOneOptions as dc, type UpdateQueryInput as dd, type UpsertArgs as de, type UpsertOptions as df, type UpsertQueryInput as dg, type ValibotIssueLike as dh, type ValibotPathItemLike as di, type ValibotSafeParseLike as dj, type ValibotSafeParseResult as dk, type ValidateAccess as dl, type ValidateRule as dm, type Validation as dn, type ValidationError as dp, type VineValidationErrorLike as dq, type VineValidationMessageLike as dr, type VineValidatorLike as ds, type VirtualSubModel as dt, type WithVirtuals as du, type YupSchemaLike as dv, type YupValidationErrorLike as dw, defineRequestSchema as dx, fromAjv as dy, fromArkType as dz, type AdvancedCreateBody as e, defaultRuntime as e0, type AdvancedListBody as f, type AdvancedReadBody as g, type AdvancedReadFilterBody as h, type AdvancedUpdateBody as i, type AdvancedUpsertBody as j, type AfterPersistAccess as k, type AjvErrorObjectLike as l, type AjvValidationErrorLike as m, type AjvValidatorLike as n, type AllowedOutputFieldOptions as o, type ArkTypeErrorsLike as p, type ArkTypeLike as q, type ArkTypeProblemLike as r, type AuthorizedListResult as s, type AuthorizedSingleResult as t, Codes as u, type CorrelatedCountInclude as v, type CorrelatedFilter as w, type CorrelatedInclude as x, type CorrelatedIncludeArgs as y, type CorrelatedListInclude as z };
+export { type DecorateAccess as $, type AccessRouterBaseRequest as A, type BaseFilterAccess as B, type Change as C, type CorrelatedReadByFilterInclude as D, type CorrelatedReadByIdInclude as E, type CountBody as F, type CreateArgs as G, type CreateAuthorization as H, type CreateOptions as I, type CreateQueryInput as J, CustomHeaders as K, DATA_MIDDLEWARE as L, type DataBaseFilterHook as M, type DataFieldOptions as N, type DataFilter as O, type DataFindArgs as P, type DataFindOneArgs as Q, type DataFindOneOptions as R, type DataFindOptions as S, type DataHook as T, type DataHookContext as U, type DataIdentifierHook as V, type DataListHook as W, type DataOverrideFilterHook as X, type DataRequest as Y, type DataRequestSchemas as Z, type DataRouterOptions as _, type AccessRouterFieldKey as a, type ModelVirtualGetter as a$, type DecorateAllAccess as a0, type DeepFieldPath as a1, type DefaultModelRouterOptions as a2, type Defaults as a3, type DistinctArgs as a4, type DistinctBody as a5, type DocPermissionsAccess as a6, type DocumentAuthorization as a7, type ErrorResult as a8, type ExistsOptions as a9, type JoiValidationErrorDetailLike as aA, type KeyValueProjection as aB, type LegacyInclude as aC, type ListQueryInput as aD, type ListResult as aE, MIDDLEWARE as aF, type MaybePromise as aG, type ModelBaseFilterHook as aH, type ModelChangeHook as aI, type ModelDeleteHook as aJ, type ModelDocPermissionsHook as aK, type ModelDocument as aL, type ModelDocumentHook as aM, type ModelHook as aN, type ModelHookContext as aO, type ModelHydrationOptions as aP, type ModelIdentifierHook as aQ, type ModelListHook as aR, type ModelOverrideFilterHook as aS, type ModelRequest as aT, type ModelRouterOptions as aU, type ModelValidateHook as aV, type ModelVirtualAccess as aW, type ModelVirtualAccessRecord as aX, type ModelVirtualContext as aY, type ModelVirtualDescriptor as aZ, type ModelVirtualDoc as a_, type ExtendedDataRouterOptions as aa, type ExtendedDefaultModelRouterOptions as ab, type ExtendedModelRouterOptions as ac, type FieldAuthorization as ad, type FieldOperationAccess as ae, type Filter as af, FilterOperator as ag, type FindAccess as ah, type FindArgs as ai, type FindByIdArgs as aj, type FindByIdOptions as ak, type FindOneArgs as al, type FindOneOptions as am, type FindOptions as an, type GlobalOptions as ao, type GlobalPermissionValue as ap, type GuardHook as aq, type HydrationMode as ar, type IdentifierHook as as, type Include as at, type InputFieldAuthorization as au, type InputFieldPath as av, type IoTsContextEntryLike as aw, type IoTsDecodeErrorLike as ax, type IoTsDecoderLike as ay, type JoiSchemaLike as az, type AccessRouterLogger as b, type RootModelNewQueryEntry as b$, type ModelVirtualLeaf as b0, type ModelVirtualRecordAccess as b1, type ModelVirtuals as b2, type MutationAuthorization as b3, type NewArgs as b4, type NewOptions as b5, type OperationAccess as b6, type OperationAuthorization as b7, type OutputAuthorization as b8, type OutputFieldOptions as b9, type PublicSubdocumentMutationOptions as bA, type PublicSubdocumentReadOptions as bB, type PublicUpdateArgs as bC, type PublicUpdateOptions as bD, type PublicUpsertArgs as bE, type PublicUpsertOptions as bF, type ReadQueryInput as bG, type RelatedAuthorization as bH, type Request as bI, type RequestSchemaAdapter as bJ, type RequestSchemaFailure as bK, type RequestSchemaIssue as bL, type RequestSchemaLike as bM, type RequestSchemaOptions as bN, type RequestSchemaResult as bO, type RequestSchemaSuccess as bP, type RequestSchemaValidator as bQ, type RequestSchemas as bR, type RootDataListQueryEntry as bS, type RootDataOperation as bT, type RootDataReadByFilterQueryEntry as bU, type RootDataReadByIdQueryEntry as bV, type RootModelCountQueryEntry as bW, type RootModelCreateQueryEntry as bX, type RootModelDeleteQueryEntry as bY, type RootModelDistinctQueryEntry as bZ, type RootModelListQueryEntry as b_, type OutputFieldPath as ba, type OutputPlanningOptions as bb, PERMISSIONS as bc, PERMISSION_KEYS as bd, type PairedRouteAccess as be, type ParentRef as bf, type PathValue as bg, type PermissionSchema as bh, type Populate as bi, type PopulateAccess as bj, type PopulatePlanningOptions as bk, type PrepareAccess as bl, type Projection as bm, type PublicCreateArgs as bn, type PublicCreateOptions as bo, type PublicErrorResult as bp, type PublicListArgs as bq, type PublicListOptions as br, type PublicListResult as bs, type PublicOutput as bt, type PublicReadArgs as bu, type PublicReadOptions as bv, type PublicServiceResult as bw, type PublicSingleResult as bx, type PublicSubdocumentCreateOptions as by, type PublicSubdocumentListOptions as bz, type AccessRouterRequest as c, type SubdocumentReadAuthorization as c$, type RootModelOperation as c0, type RootModelReadByFilterQueryEntry as c1, type RootModelReadByIdQueryEntry as c2, type RootModelSubBulkUpdateQueryEntry as c3, type RootModelSubCreateQueryEntry as c4, type RootModelSubDeleteQueryEntry as c5, type RootModelSubListQueryEntry as c6, type RootModelSubReadQueryEntry as c7, type RootModelSubUpdateQueryEntry as c8, type RootModelUpdateQueryEntry as c9, type StandardSchemaSuccess as cA, type StandardSchemaV1 as cB, StatusCodes as cC, type SubListBody as cD, type SubOperationAccess as cE, type SubPopulate as cF, type SubQueryEntry as cG, type SubReadBody as cH, type SubRouteGuardOptions as cI, type SubdocumentBulkRecord as cJ, type SubdocumentBulkUpdateInput as cK, type SubdocumentCreateAuthorization as cL, type SubdocumentCreateInput as cM, type SubdocumentCreateOptions as cN, type SubdocumentCreateVisibilityAuthorization as cO, type SubdocumentDeleteAuthorization as cP, type SubdocumentDeleteOptions as cQ, type SubdocumentGateAuthorization as cR, type SubdocumentId as cS, type SubdocumentInputAuthorization as cT, type SubdocumentListOptions as cU, type SubdocumentModel as cV, type SubdocumentMutationAuthorization as cW, type SubdocumentName as cX, type SubdocumentOutputAuthorization as cY, type SubdocumentParentArgs as cZ, type SubdocumentParentOptions as c_, type RootModelUpsertQueryEntry as ca, type RootOperationResult as cb, type RootQueryEntry as cc, type RootRouterOptions as cd, type RootSubOperation as ce, type RootTarget as cf, type RouteBaseAccess as cg, type RouteGuardAccess as ch, type RouteVariant as ci, type RouteVariantAccess as cj, type RowAuthorization as ck, type SelectAccess as cl, type SelectedPopulatedPublicOutput as cm, type SelectedPublicOutput as cn, type ServiceAuthorization as co, type ServiceOutputContext as cp, type ServiceOutputDecorator as cq, type ServiceResult as cr, type SingleResult as cs, type Sort as ct, type SortOrder as cu, type StandardSchemaFailure as cv, type StandardSchemaInferOutput as cw, type StandardSchemaIssue as cx, type StandardSchemaPathSegment as cy, type StandardSchemaResult as cz, type AccessRouterRequestExtensions as d, type AccessRouterPermissions as d$, type SubdocumentReadOptions as d0, type SubdocumentRecord as d1, type SubdocumentUpdateOptions as d2, type SubdocumentVirtuals as d3, type SubdocumentVisibilityAuthorization as d4, type SuperstructFailureLike as d5, type SuperstructValidateLike as d6, type Task as d7, type TaskType as d8, type TransformAccess as d9, fromAjv as dA, fromArkType as dB, fromIoTs as dC, fromJoi as dD, fromStandardSchema as dE, fromSuperstruct as dF, fromValibot as dG, fromVine as dH, fromYup as dI, fromZod as dJ, parseBody as dK, parseBodyWithSchema as dL, parseNestedBodyWithSchema as dM, parsePathParam as dN, parseQuery as dO, AccessRuntime as dP, DataService as dQ, Service as dR, PublicService as dS, type OpenApiRouterOptions as dT, type OpenApiRegistryOptions as dU, type OpenApiRouteDescriptor as dV, type OpenApiDocumentOptions as dW, type OpenApiParameter as dX, type OpenApiSchema as dY, type OpenApiResponses as dZ, type AccessRouterPermissionMap as d_, type TypedFilter as da, type UpdateByIdArgs as db, type UpdateByIdOptions as dc, type UpdateOneArgs as dd, type UpdateOneOptions as de, type UpdateQueryInput as df, type UpsertArgs as dg, type UpsertOptions as dh, type UpsertQueryInput as di, type ValibotIssueLike as dj, type ValibotPathItemLike as dk, type ValibotSafeParseLike as dl, type ValibotSafeParseResult as dm, type ValidateAccess as dn, type ValidateRule as dp, type Validation as dq, type ValidationError as dr, type VineValidationErrorLike as ds, type VineValidationMessageLike as dt, type VineValidatorLike as du, type VirtualSubModel as dv, type WithVirtuals as dw, type YupSchemaLike as dx, type YupValidationErrorLike as dy, defineRequestSchema as dz, type AdvancedCreateBody as e, type OpenApiMethod as e0, type Permissions as e1, defaultRuntime as e2, type AdvancedListBody as f, type AdvancedReadBody as g, type AdvancedReadFilterBody as h, type AdvancedUpdateBody as i, type AdvancedUpsertBody as j, type AfterPersistAccess as k, type AjvErrorObjectLike as l, type AjvValidationErrorLike as m, type AjvValidatorLike as n, type AllowedOutputFieldOptions as o, type ArkTypeErrorsLike as p, type ArkTypeLike as q, type ArkTypeProblemLike as r, type AuthorizedListResult as s, type AuthorizedSingleResult as t, Codes as u, type CorrelatedCountInclude as v, type CorrelatedFilter as w, type CorrelatedInclude as x, type CorrelatedIncludeArgs as y, type CorrelatedListInclude as z };