@web-ts-toolkit/access-router 0.55.0 → 0.57.0

package/README.md

@@ -126,7 +126,7 @@ package-managed execution, falling back to `defaultRuntime` outside it.
 
 | Layer / public type                                                             | Where to put it                                                                                         | Scope and examples                                                                                                                                                                                          |
 | ------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| Runtime/global — `GlobalOptions`                                                | `api.setGlobalOptions({...})`, `api.setGlobalOption(key, value)`; `api.set` is an alias for these forms | That runtime's request grants (`globalPermissions`, `requestPermissionField`), logger, registered-populate policy and `requestComplexity`.                                                                  |
+| Runtime/global — `GlobalOptions`                                                | `api.setGlobalOptions({...})`, `api.setGlobalOption(key, value)`; `api.set` is an alias for these forms | That runtime's request grants (`globalPermissions`, `requestPermissionField`), logger, registered-populate/private-input read policy and `requestComplexity`.                                               |
 | Model defaults — `DefaultModelRouterOptions`                                    | `api.setDefaultModelOptions({...})`, `api.setDefaultModelOption(path, value)`                           | Shared model starting values such as `listHardLimit`, IDs, route segments, `operationAccess`, `hydration` and metadata posture. Data/root routers do not inherit them.                                      |
 | Model router — `ModelRouterOptions<Model, Virtuals>`                            | `api.createRouter(Model, {...})`, then `router.setOptions`, `router.setOption` / `router.set`           | One registered model's guards, `permissionSchema`, hooks, virtuals, request schemas, `hydration` and method defaults. Routers for the same model/runtime share its stored options.                          |
 | Data router — `DataRouterOptions<Data>`                                         | `api.createDataRouter(name, {...})`, its setters, or `api.runtime.setDataOptions` / `setDataOption`     | Owned in-memory `data`, list/read guards, request-only fields/filters and decorators. No model `defaults` or model authorization policy. Set `idParam` and `idField` explicitly for data identifier routes. |
@@ -533,11 +533,16 @@ use `result.context.getDocumentAuthorization(child)` (or the corresponding list-
 context) with **that target model's** helper. Private dependencies and join keys do
 not become output grants; related copies retain their own document results.
 
-The existing `requireRegisteredPopulateModels: false` configuration remains an
-explicit compatibility opt-out for requested unregistered populate targets. Those
-values retain the descriptor's projection, have no target authorization handle,
-and cannot receive `related` policies. It does not make an unassociated object
-passed to a raw-policy helper into authorized target output.
+Every requested populate target needs an actual registered Mongoose model and ACL
+configuration with an **effective object `permissionSchema`** in the owning runtime.
+Runtime model defaults may supply the schema; `{}` explicitly closes business fields.
+Missing registration/schema is controlled BadRequest before target I/O or initiating
+mutation persistence. Unused ordinary schema refs need not be configured at startup.
+There is no raw/unregistered passthrough. Configure a model without mounting target
+HTTP routes using `registerModelInstance` + `setModelOptions`; its own read/list can
+stay false while ordinary population skips only target operation admission with
+`requireOperationAccessForPopulateQueries: false`. See the [two-flag policy matrix](#runtime-populate-operation-policies)
+and [runnable Document example](#runnable-private-dependency-example).
 
 ### Selection, grants and document results
 
@@ -2586,12 +2591,89 @@ The source ref is retained automatically; repeating it in local `dependsOn` is u
   resolved getter's fourth argument**. It neither requests public population nor
   grants output. HTTP, root, service query and client options cannot declare it.
 
+#### Runtime populate operation policies
+
+`GlobalOptions` exposes exactly two independent populate operation flags, both
+defaulting to **true**. Only **literal boolean false** disables their respective gate:
+
+- `requireOperationAccessForPopulateQueries`: ordinary caller population requires
+  the target's effective operation (`read` normally, supported `list` or trusted custom
+  access). False skips **only** that admission: source entry/source-field access,
+  target field/document grants, row/base/transform filters, original selection and
+  `_id` exclusions, requested match and mandatory reference IDs still apply.
+- `requireOperationAccessForPopulateDependencies`: private loading requires the
+  original caller's captured target **base `operationAccess.read`**. False skips only
+  that gate. The server declaration already grants source/target input fields; the
+  virtual's own output authorization and request-mode `baseFilter.read`,
+  `overrideFilter.read` and original IDs remain mandatory. No private read-to-list fallback.
+
+For a registered target whose relevant public operation and base read are denied,
+with selected/permitted source refs and otherwise eligible fields/rows:
+
+| Query flag | Dependency flag | Requested ordinary population     | Authorized private virtual    |
+| ---------- | --------------- | --------------------------------- | ----------------------------- |
+| true       | true            | Original parent ID(s)             | Omitted                       |
+| false      | true            | Selected/authorized target DTO(s) | Omitted                       |
+| true       | false           | Original parent ID(s)             | Computed from declared inputs |
+| false      | false           | Selected/authorized target DTO(s) | Computed from declared inputs |
+
+Direct/generated target endpoints and root target reads/lists still enforce their
+own operation access. A configuration-only `Document` requires no mounted routes.
+Neither flag grants standalone target access, fields, rows or writes.
+
+<!-- doc-example: partial -->
+
+```ts
+import { createAccessRuntime, type GlobalOptions } from '@web-ts-toolkit/access-router';
+
+const api = createAccessRuntime();
+api.setGlobalOptions({
+  requireOperationAccessForPopulateQueries: true,
+  requireOperationAccessForPopulateDependencies: false,
+});
+// The exact setter and api.set(key, value)/api.set(options) aliases are also typed.
+api.setGlobalOption('requireOperationAccessForPopulateQueries', false);
+const snapshot: GlobalOptions = api.getGlobalOptions();
+const mode: boolean | undefined = api.getGlobalOption('requireOperationAccessForPopulateDependencies');
+void [snapshot, mode];
+```
+
+Missing/undefined or malformed JavaScript values (`'false'`, `0`, null, objects)
+use the conservative true mode; typed setters accept only boolean/undefined. An
+omitted property in a shallow object setter preserves the current setting. The
+flags are captured with source/target configuration and query intent **before the first
+await**. Nested related/embedded/subdocument output retains that call's modes; later
+calls see updates. Separate runtimes remain isolated.
+
+These are **server/runtime configuration**, not model defaults, service query options,
+HTTP/root/client control or persisted capability. Business fields with the same
+spelling keep ordinary data semantics. Actual runtime registration and an effective
+object `permissionSchema` are mandatory in **all four combinations**; private targets
+also require eagerly validated static declarations. `api.getGlobalOptions()` returns
+a frozen snapshot; read it again to observe later setters. The named root exports
+`getGlobalOptions`/`getGlobalOption` refer to the shared default runtime.
+
+There is **no additional target-base-read reference-visibility gate**. Adding a virtual
+does not change ordinary ref shape. Without admitted public population, selected/
+permitted parent fields retain exact IDs even on strict private denial, row/query/getter
+failure or deferred virtual denial. Only parent field denial/unselection omits them.
+Actual admitted population misses yield scalar null or filtered arrays, never restored
+IDs. See [reconstruction](#target-authority-selection-and-reconstruction).
+
+Missing target configuration/schema raises a controlled service result with
+`code: 'bad_request'` and actionable `errors[].detail` (HTTP 400); direct helpers and
+configuration setters throw with the same controlled `result`. Private declaration
+validation is eager/atomic. Ordinary required operation-hook errors propagate; bypass
+does not call that guard. Private required guard errors make inputs unavailable and
+omit the virtual with structural-only logging, preserving permitted parent IDs.
+
 #### Runnable private dependency example
 
 Save as `private-populate-example.mts` and run with Node 22.18+ or compile with
 TypeScript/NodeNext. Install the package, Express and Mongoose as above. This
 self-contained example creates/removes a uniquely named database, registers the
-target **before** the source, and checks all three response shapes. The example
+configuration-only `Document` **before** the source, and checks all four modes,
+selection/field denial, exact IDs, population misses and standalone denial. The example
 tenant is server-owned; real applications derive it from their authenticated actor.
 
 <!-- doc-example: complete-runtime -->
@@ -2604,8 +2686,9 @@ import type { Server } from 'node:http';
 import express from 'express';
 import mongoose from 'mongoose';
 import { createAccessRuntime, type ModelVirtualDescriptor } from '@web-ts-toolkit/access-router';
+import type { ModelRequest } from '@web-ts-toolkit/access-router/advanced';
 
-interface Account {
+interface DocumentRecord {
   name: string;
   balance: number;
   creditLimit: number;
@@ -2613,7 +2696,7 @@ interface Account {
 }
 interface Order {
   total: number;
-  account: mongoose.Types.ObjectId | null; // stays a persisted ref, not an Account
+  account: mongoose.Types.ObjectId | null; // stays a persisted ref, not a DocumentRecord
 }
 interface OrderVirtuals {
   canPlaceOrder: boolean;
@@ -2629,9 +2712,9 @@ async function runPrivatePopulateExample() {
   try {
     const api = createAccessRuntime();
     api.setGlobalOptions({ globalPermissions: () => [] });
-    const AccountModel = connection.model<Account>(
-      'PrivateExampleAccount',
-      new mongoose.Schema<Account>({
+    const DocumentModel = connection.model<DocumentRecord>(
+      'Document',
+      new mongoose.Schema<DocumentRecord>({
         name: String,
         balance: { type: Number, select: false },
         creditLimit: Number,
@@ -2639,8 +2722,9 @@ async function runPrivatePopulateExample() {
       }),
     );
     // Both the actual model instance and its options must exist in this runtime first.
-    const accounts = api.createRouter(AccountModel, {
-      operationAccess: { read: true },
+    api.registerModelInstance(DocumentModel.modelName, DocumentModel);
+    api.setModelOptions(DocumentModel.modelName, {
+      operationAccess: { read: false, list: false },
       baseFilter: { read: () => ({ tenantId: 'shop-a' }) },
       permissionSchema: { name: true, balance: false, creditLimit: false },
       stripPermissionsField: true,
@@ -2649,11 +2733,11 @@ async function runPrivatePopulateExample() {
       'PrivateExampleOrder',
       new mongoose.Schema<Order>({
         total: Number,
-        account: { type: mongoose.Schema.Types.ObjectId, ref: AccountModel.modelName },
+        account: { type: mongoose.Schema.Types.ObjectId, ref: DocumentModel.modelName },
       }),
     );
     // Explicit target map: an ObjectId alone cannot infer its related model.
-    const canPlaceOrder: ModelVirtualDescriptor<Order, boolean, { account: Account }> = {
+    const canPlaceOrder: ModelVirtualDescriptor<Order, boolean, { account: DocumentRecord }> = {
       dependsOn: ['total'],
       dependsOnPopulate: [{ path: 'account', select: ['balance', 'creditLimit'] }],
       get(doc, _permissions, _context, populated = {}) {
@@ -2670,11 +2754,20 @@ async function runPrivatePopulateExample() {
       virtuals: { canPlaceOrder }, // assign the separately typed descriptor normally
       stripPermissionsField: true,
     });
-    const account = await AccountModel.create({ name: 'Main', balance: 80, creditLimit: 20, tenantId: 'shop-a' });
+    const account = await DocumentModel.create({ name: 'Main', balance: 80, creditLimit: 20, tenantId: 'shop-a' });
     const order = await OrderModel.create({ total: 90, account: account._id });
+    // Check standalone base admission without constructing target HTTP routes.
+    orders.router.post('/verify-target', async (req, res) => {
+      const core = (req as ModelRequest).macl;
+      assert.equal(await core.isAllowed(DocumentModel.modelName, 'read'), false);
+      assert.equal(await core.isAllowed(DocumentModel.modelName, 'list'), false);
+      res.json({ ok: true });
+    });
+    const root = api.createRouter({ basePath: '/batch', operationAccess: true });
     const app = express();
     app.use(express.json());
     app.use(orders.routes);
+    app.use(root.routes); // no Document HTTP router is constructed or mounted
     server = app.listen(0, '127.0.0.1');
     await once(server, 'listening');
     const address = server.address();
@@ -2690,27 +2783,56 @@ async function runPrivatePopulateExample() {
       return response.json();
     }
     const select = ['account', 'canPlaceOrder', '-_id'];
-    // 1. Public population: fetch name + private inputs, return only the public mask.
+    const populate = [{ path: 'account', select: 'name balance -_id' }];
+    for (const queries of [true, false]) {
+      for (const dependencies of [true, false]) {
+        api.setGlobalOptions({
+          requireOperationAccessForPopulateQueries: queries,
+          requireOperationAccessForPopulateDependencies: dependencies,
+        });
+        const computed = dependencies ? {} : { canPlaceOrder: true };
+        assert.deepEqual(await read({ select, populate }), {
+          account: queries ? String(account._id) : { name: 'Main' }, // balance stays private
+          ...computed,
+        });
+        assert.deepEqual(await read({ select }), { account: String(account._id), ...computed });
+        assert.deepEqual(await read({ select: ['canPlaceOrder', '-_id'] }), computed);
+        orders.permissionSchema('account', false);
+        assert.deepEqual(await read({ select, populate }), computed);
+        orders.permissionSchema('account', true);
+      }
+    }
+    // Both false: readable-but-unrequested private fetch inputs still cannot widen the public mask.
+    api.setModelOption(DocumentModel.modelName, 'permissionSchema', { name: true, balance: true, creditLimit: false });
     assert.deepEqual(await read({ select, populate: [{ path: 'account', select: 'name -_id' }] }), {
       account: { name: 'Main' },
       canPlaceOrder: true,
     });
-    // 2. No ordinary population: restore the exact selected/permitted original ID.
-    assert.deepEqual(await read({ select }), { account: String(account._id), canPlaceOrder: true });
-    // 3. Unselected reference: compute privately, omit account entirely.
-    assert.deepEqual(await read({ select: ['canPlaceOrder', '-_id'] }), { canPlaceOrder: true });
-    // Readable-but-unrequested private fields still do not join public output.
-    accounts.setOption('permissionSchema', { name: true, balance: true, creditLimit: true });
-    assert.deepEqual(await read({ select, populate: [{ path: 'account', select: 'name -_id' }] }), {
-      account: { name: 'Main' },
-      canPlaceOrder: true,
+    const withId = await read({ select, populate: [{ path: 'account', select: ['name'] }] });
+    assert.deepEqual(withId.account, { _id: String(account._id), name: 'Main' });
+    // Admitted public match miss is null; private inputs retain their independent read-row scope.
+    assert.deepEqual(
+      await read({ select, populate: [{ path: 'account', select: 'name -_id', match: { name: 'Other' } }] }),
+      {
+        account: null,
+        canPlaceOrder: true,
+      },
+    );
+    const origin = `http://127.0.0.1:${address.port}`;
+    assert.equal((await fetch(`${origin}/orders/verify-target`, { method: 'POST' })).status, 200);
+    const batch = await fetch(`${origin}/batch`, {
+      method: 'POST',
+      headers: { 'content-type': 'application/json' },
+      body: JSON.stringify([
+        { target: 'model', name: DocumentModel.modelName, op: 'read', id: String(account._id) },
+        { target: 'model', name: DocumentModel.modelName, op: 'list' },
+      ]),
     });
-    // Denying the source field also leaves only the authorized virtual result.
-    orders.permissionSchema('account', false);
-    assert.deepEqual(await read({ select }), { canPlaceOrder: true });
-    // Input-field authority does not bypass the target's base read operation.
-    accounts.setOption('operationAccess.read', false);
-    assert.deepEqual(await read({ select: ['canPlaceOrder', '-_id'] }), {});
+    assert.equal(batch.status, 200);
+    for (const entry of await batch.json()) {
+      assert.equal(entry.statusCode, 401);
+      assert.equal(entry.result.code, 'unauthorized');
+    }
   } finally {
     if (server)
       await new Promise<void>((resolve, reject) => server!.close((error) => (error ? reject(error) : resolve())));
@@ -2753,12 +2875,13 @@ becomes computed output**; this is not a prohibition on returning derived values
 
 #### Target authority, selection and reconstruction
 
-Private targets always use captured base **`read`** admission, including array refs,
-source lists, writes and templates. The original actor's `operationAccess.read`,
-`overrideFilter.read` (starting with `{}`) and `baseFilter.read` run under request row
-authority with their normal exact → default → bare fallback/cache rules. Mandatory
-source IDs are ANDed afterward, preserving tenant scope. There is no private read-to-list
-fallback or route-variant gate. `authorization.related` governs only an ordinary
+Private targets use captured base **`read`** row semantics, including array refs,
+source lists, writes and templates. The original actor's `operationAccess.read` gates
+private loading in default/true mode; false bypasses only that admission. In either
+mode, `overrideFilter.read` (starting with `{}`) and `baseFilter.read` use request row
+authority with their normal exact → default → bare fallback/cache rules (including
+runtime defaults). Mandatory source IDs are ANDed afterward, preserving tenant scope.
+There is no private read-to-list fallback or route-variant gate. `authorization.related` governs only an ordinary
 requested populate/include; its grants/replacement rows, public `match`, `access`
 and `select` cannot redefine private inputs. A related policy naming only a
 dependency-only path is unused/invalid.
@@ -2771,14 +2894,26 @@ separate and immutable. Even a readable private field is omitted unless original
 selected and permitted. Public exclusions and `-_id` remain effective. Different
 public match/access/row scopes require independent queries.
 
+**Ordinary reference visibility is independent of private computation, in all four modes.**
+The extra target-base-read reference-visibility gate is removed. Adding a virtual,
+selecting it, or changing private input availability must not change ordinary ref shape.
+
+| Source field / original query                                               | Returned reference                                             |
+| --------------------------------------------------------------------------- | -------------------------------------------------------------- |
+| Source unselected, excluded or field-denied                                 | Omitted entirely                                               |
+| Source selected/permitted, ordinary population denied/not requested         | Exact original ID/array of IDs                                 |
+| Source selected/permitted, ordinary population admitted                     | Original requested/authorized populated projection             |
+| Source selected/permitted, admitted population finds no matching target row | Scalar null / filtered array (possibly `[]`), not original IDs |
+
 The original query includes resolved server defaults. A default populate is ordinary
-population; explicit `populate: []` suppresses it. Admitted ordinary population keeps
-its original target projection, match/missing/null/array behavior. Denied ordinary
-population keeps its existing fallback shape. Without ordinary population, selected
-and permitted refs restore their exact pre-populate IDs/arrays, including missing
-target IDs, order, duplicates, nulls, empty arrays and own absence. Unselected,
-excluded or denied source refs are omitted, including their IDs. Reconstruction
-runs even when the getter is omitted or fails, before presentation hooks/tasks.
+population; explicit `populate: []` suppresses it. Allowed ordinary population retains
+its original target projection, match/missing/null/array behavior. Without admitted
+ordinary population, permitted refs restore exact pre-populate IDs/arrays, including
+missing target IDs, order, duplicates, nulls, empty arrays and own absence. Strict
+private operation denial, private row/query failure, getter omission/failure and deferred
+virtual authorization denial cannot hide permitted IDs. Public list/custom population
+and scoped backend operation grants retain their own admission and target-owned output
+authority. Cleanup runs before output copying/handles and presentation hooks/tasks.
 
 #### Supported declarations and validation
 
@@ -2811,23 +2946,25 @@ runs even when the getter is omitted or fails, before presentation hooks/tasks.
   undefined inherits, and null rejects. Descriptor arrays/masks and target policies
   are captured with the getter before asynchronous work; later calls see updates.
 - Validation is eager and atomic for constructors, bulk and dotted setters. Target
-  model instances **and options must be registered first**, even with
-  `requireRegisteredPopulateModels: false`. For mutually referencing models, register
+  model instances **and options with an effective object `permissionSchema` must be
+  registered first**, regardless of either operation flag. For mutually referencing models, register
   both options before assigning virtuals; self-refs use the proposed source options.
   Operation capture rechecks schema/target/metadata binding before hooks or writes.
 
 #### Absence, errors, lifecycle and measured work
 
 Absent/undefined source refs omit the virtual without invoking it. Present null and
-empty arrays invoke the getter with null/[] without a target query when read is
-admitted. Deleted/out-of-scope target rows become scalar null or null array slots;
+empty arrays invoke the getter with null/[] without a target query when private
+admission/row policy permits. Deleted/out-of-scope target rows become scalar null or null array slots;
 private arrays preserve original order, duplicates and null/missing slots. Missing
 target fields remain partial inputs; null/false/zero/empty-string stay present and
 the getter decides what to return.
 
-Target read denial or terminal false transform/base scope makes dependencies
-unavailable and omits affected virtuals (even for null/empty source refs). A
-dependency-only query/hook/cast failure also omits them with structural-only logging.
+In true mode, target read denial makes dependencies unavailable; in either mode,
+a terminal false `overrideFilter.read`/`baseFilter.read` does so. Affected virtuals
+are omitted even for null/empty source refs. Permitted parent IDs remain available
+independently of those private outcomes. A dependency-only query/hook/cast failure
+also omits the virtual with structural-only logging.
 There is no raw fallback, retry or new retryable write error: a successful write
 stays successful. A failed query that also serves ordinary public population keeps
 that ordinary error path. Getter undefined/throw omits fail-closed; invalid server
@@ -2840,7 +2977,8 @@ distinct, exists, delete identities, include-count and field helpers add no priv
 dependency I/O/getters. `SubPopulate` remains path/select-only. Writes capture
 post-save/post-afterPersist refs on detached output copies after lifecycle work;
 hidden mutation rows do not run getters. `new` still ignores `args.select`, uses
-create access, and loads present default refs under target read authority without saving.
+create access, and loads present default refs under the captured private-read mode and
+request read-row scope without saving.
 
 Private fetches use the receiving output's captured hydration: source read mode for
 direct reads/populate, fixed lean for include targets, hydrated for dedicated child
@@ -2854,7 +2992,7 @@ issued 1 parent find + 2 target finds**, in lean and hydrated modes. Getter coun
 were 4 and 96; observed persistence/getter peaks were 1/1 or 2/2 at matching limits.
 Compatible rows/virtuals/scopes batch and deduplicate fetched IDs, not reconstructed
 slots or public authorization. Covered raw work can be reused only within its
-captured request/runtime/family/mode and ID/projection coverage. Different scopes
+captured request/runtime/family/private-read mode, hydration and ID/projection coverage. Different scopes
 still query separately; ordinary per-parent correlated public queries remain
 per-parent. This is not a constant-query-count promise for independent includes.
 
@@ -2862,9 +3000,33 @@ per-parent. This is not a constant-query-count promise for independent includes.
 keep their first-argument and three-argument direct-call contract. Opt in by adding
 the declaration and a separately typed descriptor/default fourth argument; no new
 router-wide generic, entrypoint, client API or persisted-field migration is required.
-The deliberate opt-in constraints are eager target registration and strict static
+The declaration's opt-in constraints are eager target registration and strict static
 reference/target-selection validation; ordinary public populate grammar is unchanged.
 
+#### Breaking release: populate policy migration
+
+**Removed:** `requireRegisteredPopulateModels` and
+`requireReadOperationAccessForPopulateDependencies`. There are no aliases, deprecated
+mappings or replacement registration enums. Register every used target's actual model
+and ACL options with an effective object `permissionSchema`; use an explicit `{}` to
+close its business fields. Defaults may supply the schema. Old unregistered/raw output
+is no longer supported, including with both new flags false.
+
+Choose `requireOperationAccessForPopulateQueries` and
+`requireOperationAccessForPopulateDependencies` explicitly from the matrix above;
+both default true. Migrate a deliberate private operation bypass to the new dependency
+name, then review the query policy independently. Changing a registration setting is
+not a boolean-to-new-policy migration. Keep configuration in the owning runtime, not
+model defaults, per-call options or clients.
+
+The former PPR whole-reference omission rule is superseded: selected/permitted parent
+IDs survive denied ordinary/private admission and private failure. Source-field denial
+or unselection still omits the field; admitted population still returns its DTO/null/
+filtered-array result. Consumers that relied on target-read denial to conceal IDs must
+deny the **source field** instead. Private inputs remain isolated fourth arguments,
+and registration, row, static-ref and hydration limitations remain mandatory. Plan this
+as a breaking application upgrade; no release/version automation is changed here.
+
 ### Hook admission and reentrant service calls
 
 `requestComplexity.maxHookConcurrency` (default `10`) limits **independently

package/advanced.d.mts

@@ -1,4 +1,4 @@
-export { A as AccessRouterBaseRequest, a as AccessRouterFieldKey, b as AccessRouterLogger, c as AccessRouterRequest, d as AccessRouterRequestExtensions, e as AdvancedCreateBody, f as AdvancedListBody, g as AdvancedReadBody, h as AdvancedReadFilterBody, i as AdvancedUpdateBody, j as AdvancedUpsertBody, k as AfterPersistAccess, l as AjvErrorObjectLike, m as AjvValidationErrorLike, n as AjvValidatorLike, o as AllowedOutputFieldOptions, p as ArkTypeErrorsLike, q as ArkTypeLike, r as ArkTypeProblemLike, s as AuthorizedListResult, t as AuthorizedSingleResult, B as BaseFilterAccess, C as Change, u as Codes, v as CorrelatedCountInclude, w as CorrelatedFilter, x as CorrelatedInclude, y as CorrelatedIncludeArgs, z as CorrelatedListInclude, D as CorrelatedReadByFilterInclude, E as CorrelatedReadByIdInclude, F as CountBody, G as CreateArgs, H as CreateAuthorization, I as CreateOptions, J as CreateQueryInput, K as CustomHeaders, L as DATA_MIDDLEWARE, M as DataBaseFilterHook, N as DataFieldOptions, O as DataFilter, P as DataFindArgs, Q as DataFindOneArgs, R as DataFindOneOptions, S as DataFindOptions, T as DataHook, U as DataHookContext, V as DataIdentifierHook, W as DataListHook, X as DataOverrideFilterHook, Y as DataRequest, Z as DataRequestSchemas, _ as DataRouterOptions, $ as DecorateAccess, a0 as DecorateAllAccess, a1 as DeepFieldPath, a2 as DefaultModelRouterOptions, a3 as Defaults, a4 as DistinctArgs, a5 as DistinctBody, a6 as DocPermissionsAccess, a7 as DocumentAuthorization, a8 as ErrorResult, a9 as ExistsOptions, aa as ExtendedDataRouterOptions, ab as ExtendedDefaultModelRouterOptions, ac as ExtendedModelRouterOptions, ad as FieldAuthorization, ae as FieldOperationAccess, af as Filter, ag as FilterOperator, ah as FindAccess, ai as FindArgs, aj as FindByIdArgs, ak as FindByIdOptions, al as FindOneArgs, am as FindOneOptions, an as FindOptions, ao as GlobalOptions, ap as GlobalPermissionValue, aq as GuardHook, ar as HydrationMode, as as IdentifierHook, at as Include, au as InputFieldAuthorization, av as InputFieldPath, aw as IoTsContextEntryLike, ax as IoTsDecodeErrorLike, ay as IoTsDecoderLike, az as JoiSchemaLike, aA as JoiValidationErrorDetailLike, aB as KeyValueProjection, aC as LegacyInclude, aD as ListQueryInput, aE as ListResult, aF as MIDDLEWARE, aG as MaybePromise, aH as ModelBaseFilterHook, aI as ModelChangeHook, aJ as ModelDeleteHook, aK as ModelDocPermissionsHook, aL as ModelDocument, aM as ModelDocumentHook, aN as ModelHook, aO as ModelHookContext, aP as ModelHydrationOptions, aQ as ModelIdentifierHook, aR as ModelListHook, aS as ModelOverrideFilterHook, aT as ModelRequest, aU as ModelRouterOptions, aV as ModelValidateHook, aW as ModelVirtualAccess, aX as ModelVirtualAccessRecord, aY as ModelVirtualContext, aZ as ModelVirtualDescriptor, a_ as ModelVirtualDoc, a$ as ModelVirtualGetter, b0 as ModelVirtualLeaf, b1 as ModelVirtualPopulateDependency, b2 as ModelVirtualPopulateInputs, b3 as ModelVirtualRecordAccess, b4 as ModelVirtuals, b5 as MutationAuthorization, b6 as NewArgs, b7 as NewOptions, b8 as OperationAccess, b9 as OperationAuthorization, ba as OutputAuthorization, bb as OutputFieldOptions, bc as OutputFieldPath, bd as OutputPlanningOptions, be as PERMISSIONS, bf as PERMISSION_KEYS, bg as PairedRouteAccess, bh as ParentRef, bi as PathValue, bj as PermissionSchema, bk as Populate, bl as PopulateAccess, bm as PopulatePlanningOptions, bn as PrepareAccess, bo as Projection, bp as PublicCreateArgs, bq as PublicCreateOptions, br as PublicErrorResult, bs as PublicListArgs, bt as PublicListOptions, bu as PublicListResult, bv as PublicOutput, bw as PublicReadArgs, bx as PublicReadOptions, by as PublicServiceResult, bz as PublicSingleResult, bA as PublicSubdocumentCreateOptions, bB as PublicSubdocumentListOptions, bC as PublicSubdocumentMutationOptions, bD as PublicSubdocumentReadOptions, bE as PublicUpdateArgs, bF as PublicUpdateOptions, bG as PublicUpsertArgs, bH as PublicUpsertOptions, bI as ReadQueryInput, bJ as RelatedAuthorization, bK as Request, bL as RequestSchemaAdapter, bM as RequestSchemaFailure, bN as RequestSchemaIssue, bO as RequestSchemaLike, bP as RequestSchemaOptions, bQ as RequestSchemaResult, bR as RequestSchemaSuccess, bS as RequestSchemaValidator, bT as RequestSchemas, bU as RootDataListQueryEntry, bV as RootDataOperation, bW as RootDataReadByFilterQueryEntry, bX as RootDataReadByIdQueryEntry, bY as RootModelCountQueryEntry, bZ as RootModelCreateQueryEntry, b_ as RootModelDeleteQueryEntry, b$ as RootModelDistinctQueryEntry, c0 as RootModelListQueryEntry, c1 as RootModelNewQueryEntry, c2 as RootModelOperation, c3 as RootModelReadByFilterQueryEntry, c4 as RootModelReadByIdQueryEntry, c5 as RootModelSubBulkUpdateQueryEntry, c6 as RootModelSubCreateQueryEntry, c7 as RootModelSubDeleteQueryEntry, c8 as RootModelSubListQueryEntry, c9 as RootModelSubReadQueryEntry, ca as RootModelSubUpdateQueryEntry, cb as RootModelUpdateQueryEntry, cc as RootModelUpsertQueryEntry, cd as RootOperationResult, ce as RootQueryEntry, cf as RootRouterOptions, cg as RootSubOperation, ch as RootTarget, ci as RouteBaseAccess, cj as RouteGuardAccess, ck as RouteVariant, cl as RouteVariantAccess, cm as RowAuthorization, cn as SelectAccess, co as SelectedPopulatedPublicOutput, cp as SelectedPublicOutput, cq as ServiceAuthorization, cr as ServiceOutputContext, cs as ServiceOutputDecorator, ct as ServiceResult, cu as SingleResult, cv as Sort, cw as SortOrder, cx as StandardSchemaFailure, cy as StandardSchemaInferOutput, cz as StandardSchemaIssue, cA as StandardSchemaPathSegment, cB as StandardSchemaResult, cC as StandardSchemaSuccess, cD as StandardSchemaV1, cE as StatusCodes, cF as SubListBody, cG as SubOperationAccess, cH as SubPopulate, cI as SubQueryEntry, cJ as SubReadBody, cK as SubRouteGuardOptions, cL as SubdocumentBulkRecord, cM as SubdocumentBulkUpdateInput, cN as SubdocumentCreateAuthorization, cO as SubdocumentCreateInput, cP as SubdocumentCreateOptions, cQ as SubdocumentCreateVisibilityAuthorization, cR as SubdocumentDeleteAuthorization, cS as SubdocumentDeleteOptions, cT as SubdocumentGateAuthorization, cU as SubdocumentId, cV as SubdocumentInputAuthorization, cW as SubdocumentListOptions, cX as SubdocumentModel, cY as SubdocumentMutationAuthorization, cZ as SubdocumentName, c_ as SubdocumentOutputAuthorization, c$ as SubdocumentParentArgs, d0 as SubdocumentParentOptions, d1 as SubdocumentReadAuthorization, d2 as SubdocumentReadOptions, d3 as SubdocumentRecord, d4 as SubdocumentUpdateOptions, d5 as SubdocumentVirtuals, d6 as SubdocumentVisibilityAuthorization, d7 as SuperstructFailureLike, d8 as SuperstructValidateLike, d9 as Task, da as TaskType, db as TransformAccess, dc as TypedFilter, dd as UpdateByIdArgs, de as UpdateByIdOptions, df as UpdateOneArgs, dg as UpdateOneOptions, dh as UpdateQueryInput, di as UpsertArgs, dj as UpsertOptions, dk as UpsertQueryInput, dl as ValibotIssueLike, dm as ValibotPathItemLike, dn as ValibotSafeParseLike, dp as ValibotSafeParseResult, dq as ValidateAccess, dr as ValidateRule, ds as Validation, dt as ValidationError, du as VineValidationErrorLike, dv as VineValidationMessageLike, dw as VineValidatorLike, dx as VirtualSubModel, dy as WithVirtuals, dz as YupSchemaLike, dA as YupValidationErrorLike, dB as defineRequestSchema, dC as fromAjv, dD as fromArkType, dE as fromIoTs, dF as fromJoi, dG as fromStandardSchema, dH as fromSuperstruct, dI as fromValibot, dJ as fromVine, dK as fromYup, dL as fromZod, dM as parseBody, dN as parseBodyWithSchema, dO as parseNestedBodyWithSchema, dP as parsePathParam, dQ as parseQuery } from './parsers-BrVRL2fg.mjs';
+export { A as AccessRouterBaseRequest, a as AccessRouterFieldKey, b as AccessRouterLogger, c as AccessRouterRequest, d as AccessRouterRequestExtensions, e as AdvancedCreateBody, f as AdvancedListBody, g as AdvancedReadBody, h as AdvancedReadFilterBody, i as AdvancedUpdateBody, j as AdvancedUpsertBody, k as AfterPersistAccess, l as AjvErrorObjectLike, m as AjvValidationErrorLike, n as AjvValidatorLike, o as AllowedOutputFieldOptions, p as ArkTypeErrorsLike, q as ArkTypeLike, r as ArkTypeProblemLike, s as AuthorizedListResult, t as AuthorizedSingleResult, B as BaseFilterAccess, C as Change, u as Codes, v as CorrelatedCountInclude, w as CorrelatedFilter, x as CorrelatedInclude, y as CorrelatedIncludeArgs, z as CorrelatedListInclude, D as CorrelatedReadByFilterInclude, E as CorrelatedReadByIdInclude, F as CountBody, G as CreateArgs, H as CreateAuthorization, I as CreateOptions, J as CreateQueryInput, K as CustomHeaders, L as DATA_MIDDLEWARE, M as DataBaseFilterHook, N as DataFieldOptions, O as DataFilter, P as DataFindArgs, Q as DataFindOneArgs, R as DataFindOneOptions, S as DataFindOptions, T as DataHook, U as DataHookContext, V as DataIdentifierHook, W as DataListHook, X as DataOverrideFilterHook, Y as DataRequest, Z as DataRequestSchemas, _ as DataRouterOptions, $ as DecorateAccess, a0 as DecorateAllAccess, a1 as DeepFieldPath, a2 as DefaultModelRouterOptions, a3 as Defaults, a4 as DistinctArgs, a5 as DistinctBody, a6 as DocPermissionsAccess, a7 as DocumentAuthorization, a8 as ErrorResult, a9 as ExistsOptions, aa as ExtendedDataRouterOptions, ab as ExtendedDefaultModelRouterOptions, ac as ExtendedModelRouterOptions, ad as FieldAuthorization, ae as FieldOperationAccess, af as Filter, ag as FilterOperator, ah as FindAccess, ai as FindArgs, aj as FindByIdArgs, ak as FindByIdOptions, al as FindOneArgs, am as FindOneOptions, an as FindOptions, ao as GlobalOptions, ap as GlobalPermissionValue, aq as GuardHook, ar as HydrationMode, as as IdentifierHook, at as Include, au as InputFieldAuthorization, av as InputFieldPath, aw as IoTsContextEntryLike, ax as IoTsDecodeErrorLike, ay as IoTsDecoderLike, az as JoiSchemaLike, aA as JoiValidationErrorDetailLike, aB as KeyValueProjection, aC as LegacyInclude, aD as ListQueryInput, aE as ListResult, aF as MIDDLEWARE, aG as MaybePromise, aH as ModelBaseFilterHook, aI as ModelChangeHook, aJ as ModelDeleteHook, aK as ModelDocPermissionsHook, aL as ModelDocument, aM as ModelDocumentHook, aN as ModelHook, aO as ModelHookContext, aP as ModelHydrationOptions, aQ as ModelIdentifierHook, aR as ModelListHook, aS as ModelOverrideFilterHook, aT as ModelRequest, aU as ModelRouterOptions, aV as ModelValidateHook, aW as ModelVirtualAccess, aX as ModelVirtualAccessRecord, aY as ModelVirtualContext, aZ as ModelVirtualDescriptor, a_ as ModelVirtualDoc, a$ as ModelVirtualGetter, b0 as ModelVirtualLeaf, b1 as ModelVirtualPopulateDependency, b2 as ModelVirtualPopulateInputs, b3 as ModelVirtualRecordAccess, b4 as ModelVirtuals, b5 as MutationAuthorization, b6 as NewArgs, b7 as NewOptions, b8 as OperationAccess, b9 as OperationAuthorization, ba as OutputAuthorization, bb as OutputFieldOptions, bc as OutputFieldPath, bd as OutputPlanningOptions, be as PERMISSIONS, bf as PERMISSION_KEYS, bg as PairedRouteAccess, bh as ParentRef, bi as PathValue, bj as PermissionSchema, bk as Populate, bl as PopulateAccess, bm as PopulatePlanningOptions, bn as PrepareAccess, bo as Projection, bp as PublicCreateArgs, bq as PublicCreateOptions, br as PublicErrorResult, bs as PublicListArgs, bt as PublicListOptions, bu as PublicListResult, bv as PublicOutput, bw as PublicReadArgs, bx as PublicReadOptions, by as PublicServiceResult, bz as PublicSingleResult, bA as PublicSubdocumentCreateOptions, bB as PublicSubdocumentListOptions, bC as PublicSubdocumentMutationOptions, bD as PublicSubdocumentReadOptions, bE as PublicUpdateArgs, bF as PublicUpdateOptions, bG as PublicUpsertArgs, bH as PublicUpsertOptions, bI as ReadQueryInput, bJ as RelatedAuthorization, bK as Request, bL as RequestSchemaAdapter, bM as RequestSchemaFailure, bN as RequestSchemaIssue, bO as RequestSchemaLike, bP as RequestSchemaOptions, bQ as RequestSchemaResult, bR as RequestSchemaSuccess, bS as RequestSchemaValidator, bT as RequestSchemas, bU as RootDataListQueryEntry, bV as RootDataOperation, bW as RootDataReadByFilterQueryEntry, bX as RootDataReadByIdQueryEntry, bY as RootModelCountQueryEntry, bZ as RootModelCreateQueryEntry, b_ as RootModelDeleteQueryEntry, b$ as RootModelDistinctQueryEntry, c0 as RootModelListQueryEntry, c1 as RootModelNewQueryEntry, c2 as RootModelOperation, c3 as RootModelReadByFilterQueryEntry, c4 as RootModelReadByIdQueryEntry, c5 as RootModelSubBulkUpdateQueryEntry, c6 as RootModelSubCreateQueryEntry, c7 as RootModelSubDeleteQueryEntry, c8 as RootModelSubListQueryEntry, c9 as RootModelSubReadQueryEntry, ca as RootModelSubUpdateQueryEntry, cb as RootModelUpdateQueryEntry, cc as RootModelUpsertQueryEntry, cd as RootOperationResult, ce as RootQueryEntry, cf as RootRouterOptions, cg as RootSubOperation, ch as RootTarget, ci as RouteBaseAccess, cj as RouteGuardAccess, ck as RouteVariant, cl as RouteVariantAccess, cm as RowAuthorization, cn as SelectAccess, co as SelectedPopulatedPublicOutput, cp as SelectedPublicOutput, cq as ServiceAuthorization, cr as ServiceOutputContext, cs as ServiceOutputDecorator, ct as ServiceResult, cu as SingleResult, cv as Sort, cw as SortOrder, cx as StandardSchemaFailure, cy as StandardSchemaInferOutput, cz as StandardSchemaIssue, cA as StandardSchemaPathSegment, cB as StandardSchemaResult, cC as StandardSchemaSuccess, cD as StandardSchemaV1, cE as StatusCodes, cF as SubListBody, cG as SubOperationAccess, cH as SubPopulate, cI as SubQueryEntry, cJ as SubReadBody, cK as SubRouteGuardOptions, cL as SubdocumentBulkRecord, cM as SubdocumentBulkUpdateInput, cN as SubdocumentCreateAuthorization, cO as SubdocumentCreateInput, cP as SubdocumentCreateOptions, cQ as SubdocumentCreateVisibilityAuthorization, cR as SubdocumentDeleteAuthorization, cS as SubdocumentDeleteOptions, cT as SubdocumentGateAuthorization, cU as SubdocumentId, cV as SubdocumentInputAuthorization, cW as SubdocumentListOptions, cX as SubdocumentModel, cY as SubdocumentMutationAuthorization, cZ as SubdocumentName, c_ as SubdocumentOutputAuthorization, c$ as SubdocumentParentArgs, d0 as SubdocumentParentOptions, d1 as SubdocumentReadAuthorization, d2 as SubdocumentReadOptions, d3 as SubdocumentRecord, d4 as SubdocumentUpdateOptions, d5 as SubdocumentVirtuals, d6 as SubdocumentVisibilityAuthorization, d7 as SuperstructFailureLike, d8 as SuperstructValidateLike, d9 as Task, da as TaskType, db as TransformAccess, dc as TypedFilter, dd as UpdateByIdArgs, de as UpdateByIdOptions, df as UpdateOneArgs, dg as UpdateOneOptions, dh as UpdateQueryInput, di as UpsertArgs, dj as UpsertOptions, dk as UpsertQueryInput, dl as ValibotIssueLike, dm as ValibotPathItemLike, dn as ValibotSafeParseLike, dp as ValibotSafeParseResult, dq as ValidateAccess, dr as ValidateRule, ds as Validation, dt as ValidationError, du as VineValidationErrorLike, dv as VineValidationMessageLike, dw as VineValidatorLike, dx as VirtualSubModel, dy as WithVirtuals, dz as YupSchemaLike, dA as YupValidationErrorLike, dB as defineRequestSchema, dC as fromAjv, dD as fromArkType, dE as fromIoTs, dF as fromJoi, dG as fromStandardSchema, dH as fromSuperstruct, dI as fromValibot, dJ as fromVine, dK as fromYup, dL as fromZod, dM as parseBody, dN as parseBodyWithSchema, dO as parseNestedBodyWithSchema, dP as parsePathParam, dQ as parseQuery } from './parsers-CngKnVjW.mjs';
 import { z } from 'zod';
 import 'mongoose';
 import 'express';

package/advanced.d.ts

@@ -1,4 +1,4 @@
-export { A as AccessRouterBaseRequest, a as AccessRouterFieldKey, b as AccessRouterLogger, c as AccessRouterRequest, d as AccessRouterRequestExtensions, e as AdvancedCreateBody, f as AdvancedListBody, g as AdvancedReadBody, h as AdvancedReadFilterBody, i as AdvancedUpdateBody, j as AdvancedUpsertBody, k as AfterPersistAccess, l as AjvErrorObjectLike, m as AjvValidationErrorLike, n as AjvValidatorLike, o as AllowedOutputFieldOptions, p as ArkTypeErrorsLike, q as ArkTypeLike, r as ArkTypeProblemLike, s as AuthorizedListResult, t as AuthorizedSingleResult, B as BaseFilterAccess, C as Change, u as Codes, v as CorrelatedCountInclude, w as CorrelatedFilter, x as CorrelatedInclude, y as CorrelatedIncludeArgs, z as CorrelatedListInclude, D as CorrelatedReadByFilterInclude, E as CorrelatedReadByIdInclude, F as CountBody, G as CreateArgs, H as CreateAuthorization, I as CreateOptions, J as CreateQueryInput, K as CustomHeaders, L as DATA_MIDDLEWARE, M as DataBaseFilterHook, N as DataFieldOptions, O as DataFilter, P as DataFindArgs, Q as DataFindOneArgs, R as DataFindOneOptions, S as DataFindOptions, T as DataHook, U as DataHookContext, V as DataIdentifierHook, W as DataListHook, X as DataOverrideFilterHook, Y as DataRequest, Z as DataRequestSchemas, _ as DataRouterOptions, $ as DecorateAccess, a0 as DecorateAllAccess, a1 as DeepFieldPath, a2 as DefaultModelRouterOptions, a3 as Defaults, a4 as DistinctArgs, a5 as DistinctBody, a6 as DocPermissionsAccess, a7 as DocumentAuthorization, a8 as ErrorResult, a9 as ExistsOptions, aa as ExtendedDataRouterOptions, ab as ExtendedDefaultModelRouterOptions, ac as ExtendedModelRouterOptions, ad as FieldAuthorization, ae as FieldOperationAccess, af as Filter, ag as FilterOperator, ah as FindAccess, ai as FindArgs, aj as FindByIdArgs, ak as FindByIdOptions, al as FindOneArgs, am as FindOneOptions, an as FindOptions, ao as GlobalOptions, ap as GlobalPermissionValue, aq as GuardHook, ar as HydrationMode, as as IdentifierHook, at as Include, au as InputFieldAuthorization, av as InputFieldPath, aw as IoTsContextEntryLike, ax as IoTsDecodeErrorLike, ay as IoTsDecoderLike, az as JoiSchemaLike, aA as JoiValidationErrorDetailLike, aB as KeyValueProjection, aC as LegacyInclude, aD as ListQueryInput, aE as ListResult, aF as MIDDLEWARE, aG as MaybePromise, aH as ModelBaseFilterHook, aI as ModelChangeHook, aJ as ModelDeleteHook, aK as ModelDocPermissionsHook, aL as ModelDocument, aM as ModelDocumentHook, aN as ModelHook, aO as ModelHookContext, aP as ModelHydrationOptions, aQ as ModelIdentifierHook, aR as ModelListHook, aS as ModelOverrideFilterHook, aT as ModelRequest, aU as ModelRouterOptions, aV as ModelValidateHook, aW as ModelVirtualAccess, aX as ModelVirtualAccessRecord, aY as ModelVirtualContext, aZ as ModelVirtualDescriptor, a_ as ModelVirtualDoc, a$ as ModelVirtualGetter, b0 as ModelVirtualLeaf, b1 as ModelVirtualPopulateDependency, b2 as ModelVirtualPopulateInputs, b3 as ModelVirtualRecordAccess, b4 as ModelVirtuals, b5 as MutationAuthorization, b6 as NewArgs, b7 as NewOptions, b8 as OperationAccess, b9 as OperationAuthorization, ba as OutputAuthorization, bb as OutputFieldOptions, bc as OutputFieldPath, bd as OutputPlanningOptions, be as PERMISSIONS, bf as PERMISSION_KEYS, bg as PairedRouteAccess, bh as ParentRef, bi as PathValue, bj as PermissionSchema, bk as Populate, bl as PopulateAccess, bm as PopulatePlanningOptions, bn as PrepareAccess, bo as Projection, bp as PublicCreateArgs, bq as PublicCreateOptions, br as PublicErrorResult, bs as PublicListArgs, bt as PublicListOptions, bu as PublicListResult, bv as PublicOutput, bw as PublicReadArgs, bx as PublicReadOptions, by as PublicServiceResult, bz as PublicSingleResult, bA as PublicSubdocumentCreateOptions, bB as PublicSubdocumentListOptions, bC as PublicSubdocumentMutationOptions, bD as PublicSubdocumentReadOptions, bE as PublicUpdateArgs, bF as PublicUpdateOptions, bG as PublicUpsertArgs, bH as PublicUpsertOptions, bI as ReadQueryInput, bJ as RelatedAuthorization, bK as Request, bL as RequestSchemaAdapter, bM as RequestSchemaFailure, bN as RequestSchemaIssue, bO as RequestSchemaLike, bP as RequestSchemaOptions, bQ as RequestSchemaResult, bR as RequestSchemaSuccess, bS as RequestSchemaValidator, bT as RequestSchemas, bU as RootDataListQueryEntry, bV as RootDataOperation, bW as RootDataReadByFilterQueryEntry, bX as RootDataReadByIdQueryEntry, bY as RootModelCountQueryEntry, bZ as RootModelCreateQueryEntry, b_ as RootModelDeleteQueryEntry, b$ as RootModelDistinctQueryEntry, c0 as RootModelListQueryEntry, c1 as RootModelNewQueryEntry, c2 as RootModelOperation, c3 as RootModelReadByFilterQueryEntry, c4 as RootModelReadByIdQueryEntry, c5 as RootModelSubBulkUpdateQueryEntry, c6 as RootModelSubCreateQueryEntry, c7 as RootModelSubDeleteQueryEntry, c8 as RootModelSubListQueryEntry, c9 as RootModelSubReadQueryEntry, ca as RootModelSubUpdateQueryEntry, cb as RootModelUpdateQueryEntry, cc as RootModelUpsertQueryEntry, cd as RootOperationResult, ce as RootQueryEntry, cf as RootRouterOptions, cg as RootSubOperation, ch as RootTarget, ci as RouteBaseAccess, cj as RouteGuardAccess, ck as RouteVariant, cl as RouteVariantAccess, cm as RowAuthorization, cn as SelectAccess, co as SelectedPopulatedPublicOutput, cp as SelectedPublicOutput, cq as ServiceAuthorization, cr as ServiceOutputContext, cs as ServiceOutputDecorator, ct as ServiceResult, cu as SingleResult, cv as Sort, cw as SortOrder, cx as StandardSchemaFailure, cy as StandardSchemaInferOutput, cz as StandardSchemaIssue, cA as StandardSchemaPathSegment, cB as StandardSchemaResult, cC as StandardSchemaSuccess, cD as StandardSchemaV1, cE as StatusCodes, cF as SubListBody, cG as SubOperationAccess, cH as SubPopulate, cI as SubQueryEntry, cJ as SubReadBody, cK as SubRouteGuardOptions, cL as SubdocumentBulkRecord, cM as SubdocumentBulkUpdateInput, cN as SubdocumentCreateAuthorization, cO as SubdocumentCreateInput, cP as SubdocumentCreateOptions, cQ as SubdocumentCreateVisibilityAuthorization, cR as SubdocumentDeleteAuthorization, cS as SubdocumentDeleteOptions, cT as SubdocumentGateAuthorization, cU as SubdocumentId, cV as SubdocumentInputAuthorization, cW as SubdocumentListOptions, cX as SubdocumentModel, cY as SubdocumentMutationAuthorization, cZ as SubdocumentName, c_ as SubdocumentOutputAuthorization, c$ as SubdocumentParentArgs, d0 as SubdocumentParentOptions, d1 as SubdocumentReadAuthorization, d2 as SubdocumentReadOptions, d3 as SubdocumentRecord, d4 as SubdocumentUpdateOptions, d5 as SubdocumentVirtuals, d6 as SubdocumentVisibilityAuthorization, d7 as SuperstructFailureLike, d8 as SuperstructValidateLike, d9 as Task, da as TaskType, db as TransformAccess, dc as TypedFilter, dd as UpdateByIdArgs, de as UpdateByIdOptions, df as UpdateOneArgs, dg as UpdateOneOptions, dh as UpdateQueryInput, di as UpsertArgs, dj as UpsertOptions, dk as UpsertQueryInput, dl as ValibotIssueLike, dm as ValibotPathItemLike, dn as ValibotSafeParseLike, dp as ValibotSafeParseResult, dq as ValidateAccess, dr as ValidateRule, ds as Validation, dt as ValidationError, du as VineValidationErrorLike, dv as VineValidationMessageLike, dw as VineValidatorLike, dx as VirtualSubModel, dy as WithVirtuals, dz as YupSchemaLike, dA as YupValidationErrorLike, dB as defineRequestSchema, dC as fromAjv, dD as fromArkType, dE as fromIoTs, dF as fromJoi, dG as fromStandardSchema, dH as fromSuperstruct, dI as fromValibot, dJ as fromVine, dK as fromYup, dL as fromZod, dM as parseBody, dN as parseBodyWithSchema, dO as parseNestedBodyWithSchema, dP as parsePathParam, dQ as parseQuery } from './parsers-BrVRL2fg.js';
+export { A as AccessRouterBaseRequest, a as AccessRouterFieldKey, b as AccessRouterLogger, c as AccessRouterRequest, d as AccessRouterRequestExtensions, e as AdvancedCreateBody, f as AdvancedListBody, g as AdvancedReadBody, h as AdvancedReadFilterBody, i as AdvancedUpdateBody, j as AdvancedUpsertBody, k as AfterPersistAccess, l as AjvErrorObjectLike, m as AjvValidationErrorLike, n as AjvValidatorLike, o as AllowedOutputFieldOptions, p as ArkTypeErrorsLike, q as ArkTypeLike, r as ArkTypeProblemLike, s as AuthorizedListResult, t as AuthorizedSingleResult, B as BaseFilterAccess, C as Change, u as Codes, v as CorrelatedCountInclude, w as CorrelatedFilter, x as CorrelatedInclude, y as CorrelatedIncludeArgs, z as CorrelatedListInclude, D as CorrelatedReadByFilterInclude, E as CorrelatedReadByIdInclude, F as CountBody, G as CreateArgs, H as CreateAuthorization, I as CreateOptions, J as CreateQueryInput, K as CustomHeaders, L as DATA_MIDDLEWARE, M as DataBaseFilterHook, N as DataFieldOptions, O as DataFilter, P as DataFindArgs, Q as DataFindOneArgs, R as DataFindOneOptions, S as DataFindOptions, T as DataHook, U as DataHookContext, V as DataIdentifierHook, W as DataListHook, X as DataOverrideFilterHook, Y as DataRequest, Z as DataRequestSchemas, _ as DataRouterOptions, $ as DecorateAccess, a0 as DecorateAllAccess, a1 as DeepFieldPath, a2 as DefaultModelRouterOptions, a3 as Defaults, a4 as DistinctArgs, a5 as DistinctBody, a6 as DocPermissionsAccess, a7 as DocumentAuthorization, a8 as ErrorResult, a9 as ExistsOptions, aa as ExtendedDataRouterOptions, ab as ExtendedDefaultModelRouterOptions, ac as ExtendedModelRouterOptions, ad as FieldAuthorization, ae as FieldOperationAccess, af as Filter, ag as FilterOperator, ah as FindAccess, ai as FindArgs, aj as FindByIdArgs, ak as FindByIdOptions, al as FindOneArgs, am as FindOneOptions, an as FindOptions, ao as GlobalOptions, ap as GlobalPermissionValue, aq as GuardHook, ar as HydrationMode, as as IdentifierHook, at as Include, au as InputFieldAuthorization, av as InputFieldPath, aw as IoTsContextEntryLike, ax as IoTsDecodeErrorLike, ay as IoTsDecoderLike, az as JoiSchemaLike, aA as JoiValidationErrorDetailLike, aB as KeyValueProjection, aC as LegacyInclude, aD as ListQueryInput, aE as ListResult, aF as MIDDLEWARE, aG as MaybePromise, aH as ModelBaseFilterHook, aI as ModelChangeHook, aJ as ModelDeleteHook, aK as ModelDocPermissionsHook, aL as ModelDocument, aM as ModelDocumentHook, aN as ModelHook, aO as ModelHookContext, aP as ModelHydrationOptions, aQ as ModelIdentifierHook, aR as ModelListHook, aS as ModelOverrideFilterHook, aT as ModelRequest, aU as ModelRouterOptions, aV as ModelValidateHook, aW as ModelVirtualAccess, aX as ModelVirtualAccessRecord, aY as ModelVirtualContext, aZ as ModelVirtualDescriptor, a_ as ModelVirtualDoc, a$ as ModelVirtualGetter, b0 as ModelVirtualLeaf, b1 as ModelVirtualPopulateDependency, b2 as ModelVirtualPopulateInputs, b3 as ModelVirtualRecordAccess, b4 as ModelVirtuals, b5 as MutationAuthorization, b6 as NewArgs, b7 as NewOptions, b8 as OperationAccess, b9 as OperationAuthorization, ba as OutputAuthorization, bb as OutputFieldOptions, bc as OutputFieldPath, bd as OutputPlanningOptions, be as PERMISSIONS, bf as PERMISSION_KEYS, bg as PairedRouteAccess, bh as ParentRef, bi as PathValue, bj as PermissionSchema, bk as Populate, bl as PopulateAccess, bm as PopulatePlanningOptions, bn as PrepareAccess, bo as Projection, bp as PublicCreateArgs, bq as PublicCreateOptions, br as PublicErrorResult, bs as PublicListArgs, bt as PublicListOptions, bu as PublicListResult, bv as PublicOutput, bw as PublicReadArgs, bx as PublicReadOptions, by as PublicServiceResult, bz as PublicSingleResult, bA as PublicSubdocumentCreateOptions, bB as PublicSubdocumentListOptions, bC as PublicSubdocumentMutationOptions, bD as PublicSubdocumentReadOptions, bE as PublicUpdateArgs, bF as PublicUpdateOptions, bG as PublicUpsertArgs, bH as PublicUpsertOptions, bI as ReadQueryInput, bJ as RelatedAuthorization, bK as Request, bL as RequestSchemaAdapter, bM as RequestSchemaFailure, bN as RequestSchemaIssue, bO as RequestSchemaLike, bP as RequestSchemaOptions, bQ as RequestSchemaResult, bR as RequestSchemaSuccess, bS as RequestSchemaValidator, bT as RequestSchemas, bU as RootDataListQueryEntry, bV as RootDataOperation, bW as RootDataReadByFilterQueryEntry, bX as RootDataReadByIdQueryEntry, bY as RootModelCountQueryEntry, bZ as RootModelCreateQueryEntry, b_ as RootModelDeleteQueryEntry, b$ as RootModelDistinctQueryEntry, c0 as RootModelListQueryEntry, c1 as RootModelNewQueryEntry, c2 as RootModelOperation, c3 as RootModelReadByFilterQueryEntry, c4 as RootModelReadByIdQueryEntry, c5 as RootModelSubBulkUpdateQueryEntry, c6 as RootModelSubCreateQueryEntry, c7 as RootModelSubDeleteQueryEntry, c8 as RootModelSubListQueryEntry, c9 as RootModelSubReadQueryEntry, ca as RootModelSubUpdateQueryEntry, cb as RootModelUpdateQueryEntry, cc as RootModelUpsertQueryEntry, cd as RootOperationResult, ce as RootQueryEntry, cf as RootRouterOptions, cg as RootSubOperation, ch as RootTarget, ci as RouteBaseAccess, cj as RouteGuardAccess, ck as RouteVariant, cl as RouteVariantAccess, cm as RowAuthorization, cn as SelectAccess, co as SelectedPopulatedPublicOutput, cp as SelectedPublicOutput, cq as ServiceAuthorization, cr as ServiceOutputContext, cs as ServiceOutputDecorator, ct as ServiceResult, cu as SingleResult, cv as Sort, cw as SortOrder, cx as StandardSchemaFailure, cy as StandardSchemaInferOutput, cz as StandardSchemaIssue, cA as StandardSchemaPathSegment, cB as StandardSchemaResult, cC as StandardSchemaSuccess, cD as StandardSchemaV1, cE as StatusCodes, cF as SubListBody, cG as SubOperationAccess, cH as SubPopulate, cI as SubQueryEntry, cJ as SubReadBody, cK as SubRouteGuardOptions, cL as SubdocumentBulkRecord, cM as SubdocumentBulkUpdateInput, cN as SubdocumentCreateAuthorization, cO as SubdocumentCreateInput, cP as SubdocumentCreateOptions, cQ as SubdocumentCreateVisibilityAuthorization, cR as SubdocumentDeleteAuthorization, cS as SubdocumentDeleteOptions, cT as SubdocumentGateAuthorization, cU as SubdocumentId, cV as SubdocumentInputAuthorization, cW as SubdocumentListOptions, cX as SubdocumentModel, cY as SubdocumentMutationAuthorization, cZ as SubdocumentName, c_ as SubdocumentOutputAuthorization, c$ as SubdocumentParentArgs, d0 as SubdocumentParentOptions, d1 as SubdocumentReadAuthorization, d2 as SubdocumentReadOptions, d3 as SubdocumentRecord, d4 as SubdocumentUpdateOptions, d5 as SubdocumentVirtuals, d6 as SubdocumentVisibilityAuthorization, d7 as SuperstructFailureLike, d8 as SuperstructValidateLike, d9 as Task, da as TaskType, db as TransformAccess, dc as TypedFilter, dd as UpdateByIdArgs, de as UpdateByIdOptions, df as UpdateOneArgs, dg as UpdateOneOptions, dh as UpdateQueryInput, di as UpsertArgs, dj as UpsertOptions, dk as UpsertQueryInput, dl as ValibotIssueLike, dm as ValibotPathItemLike, dn as ValibotSafeParseLike, dp as ValibotSafeParseResult, dq as ValidateAccess, dr as ValidateRule, ds as Validation, dt as ValidationError, du as VineValidationErrorLike, dv as VineValidationMessageLike, dw as VineValidatorLike, dx as VirtualSubModel, dy as WithVirtuals, dz as YupSchemaLike, dA as YupValidationErrorLike, dB as defineRequestSchema, dC as fromAjv, dD as fromArkType, dE as fromIoTs, dF as fromJoi, dG as fromStandardSchema, dH as fromSuperstruct, dI as fromValibot, dJ as fromVine, dK as fromYup, dL as fromZod, dM as parseBody, dN as parseBodyWithSchema, dO as parseNestedBodyWithSchema, dP as parsePathParam, dQ as parseQuery } from './parsers-CngKnVjW.js';
 import { z } from 'zod';
 import 'mongoose';
 import 'express';