@classytic/arc 1.1.0 → 2.1.2

package/dist/discovery/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","names":[],"sources":["../../src/discovery/index.ts"],"sourcesContent":["/**\n * Arc Auto-Discovery Plugin\n *\n * Automatically discovers and registers resource files matching a glob pattern.\n * Eliminates manual resource registration boilerplate.\n *\n * This is a SEPARATE subpath import — only loaded when explicitly used:\n *   import { discoveryPlugin, discoverResources } from '@classytic/arc/discovery';\n *\n * Serverless-safe: only runs at startup, no persistent process needed.\n *\n * @example\n * ```typescript\n * import { discoveryPlugin } from '@classytic/arc/discovery';\n *\n * // Auto-discovers all *.resource.ts files\n * await fastify.register(discoveryPlugin, {\n *   paths: ['./src/modules'],\n *   pattern: '**\\/*.resource.{ts,js}',\n * });\n *\n * // Or use the helper directly\n * import { discoverResources } from '@classytic/arc/discovery';\n *\n * const resources = await discoverResources({\n *   paths: ['./src/modules'],\n *   pattern: '**\\/*.resource.{ts,js}',\n * });\n *\n * for (const resource of resources) {\n *   await fastify.register(resource.toPlugin());\n * }\n * ```\n */\nimport type { FastifyInstance, FastifyPluginAsync } from 'fastify';\nimport { readdir, stat } from 'node:fs/promises';\nimport { join, resolve, extname } from 'node:path';\nimport { pathToFileURL } from 'node:url';\n\n// ============================================================================\n// Types\n// ============================================================================\n\n/** A discovered resource — must have toPlugin() method */\nexport interface DiscoverableResource {\n  toPlugin(): FastifyPluginAsync;\n  name?: string;\n  definition?: { name: string };\n}\n\nexport interface DiscoveryOptions {\n  /** Directories to scan (relative to cwd or absolute) */\n  paths: string[];\n  /**\n   * File name pattern to match.\n   * Supports simple globs: *.resource.ts, *.resource.js\n   * Default: '*.resource.{ts,js}'\n   */\n  pattern?: string;\n  /** Export name to look for in each file (default: 'default' then first ResourceDefinition) */\n  exportName?: string;\n  /** Filter function to include/exclude discovered resources */\n  filter?: (resource: DiscoverableResource, filePath: string) => boolean;\n  /** Called for each discovered resource (for logging) */\n  onDiscover?: (name: string, filePath: string) => void;\n  /** Whether to scan recursively (default: true) */\n  recursive?: boolean;\n}\n\nexport interface DiscoveryPluginOptions extends DiscoveryOptions {\n  /** URL prefix applied to all discovered resources */\n  prefix?: string;\n}\n\n// ============================================================================\n// File Discovery (pure filesystem, no glob library needed)\n// ============================================================================\n\n/**\n * Match a filename against a simple pattern.\n * Supports: *.resource.ts, *.resource.js, *.resource.{ts,js}\n */\nfunction matchPattern(filename: string, pattern: string): boolean {\n  // Expand {ts,js} brace patterns\n  if (pattern.includes('{') && pattern.includes('}')) {\n    const match = pattern.match(/\\{([^}]+)\\}/);\n    if (match) {\n      const alternatives = match[1]!.split(',').map((s) => s.trim());\n      return alternatives.some((alt) => {\n        const expanded = pattern.replace(match[0], alt);\n        return matchPattern(filename, expanded);\n      });\n    }\n  }\n\n  // Simple wildcard: *.resource.ts → any file ending with .resource.ts\n  if (pattern.startsWith('*')) {\n    const suffix = pattern.slice(1);\n    return filename.endsWith(suffix);\n  }\n\n  // Exact match\n  return filename === pattern;\n}\n\n/**\n * Recursively scan directories for files matching a pattern.\n */\nasync function scanDirectory(\n  dir: string,\n  pattern: string,\n  recursive: boolean\n): Promise<string[]> {\n  const results: string[] = [];\n  const resolvedDir = resolve(dir);\n\n  const entries = await readdir(resolvedDir, { withFileTypes: true }).catch(\n    () => [] as { name: string; isFile(): boolean; isDirectory(): boolean }[],\n  );\n\n  for (const entry of entries) {\n    const fullPath = join(resolvedDir, String(entry.name));\n\n    if (entry.isDirectory() && recursive) {\n      const nested = await scanDirectory(fullPath, pattern, recursive);\n      results.push(...nested);\n    } else if (entry.isFile()) {\n      // Strip any path prefix from pattern (e.g., **/*.resource.ts → *.resource.ts)\n      const filePattern = pattern.replace(/^\\*\\*\\//, '');\n      if (matchPattern(String(entry.name), filePattern)) {\n        results.push(fullPath);\n      }\n    }\n  }\n\n  return results;\n}\n\n// ============================================================================\n// Resource Discovery\n// ============================================================================\n\n/**\n * Discover and import resource files.\n *\n * @returns Array of discovered resources with their file paths\n */\nexport async function discoverResources(\n  options: DiscoveryOptions\n): Promise<Array<{ resource: DiscoverableResource; filePath: string }>> {\n  const {\n    paths,\n    pattern = '*.resource.{ts,js}',\n    exportName,\n    filter,\n    onDiscover,\n    recursive = true,\n  } = options;\n\n  const discovered: Array<{ resource: DiscoverableResource; filePath: string }> = [];\n\n  // Scan all directories\n  const allFiles: string[] = [];\n  for (const dir of paths) {\n    const files = await scanDirectory(dir, pattern, recursive);\n    allFiles.push(...files);\n  }\n\n  // Sort for deterministic registration order\n  allFiles.sort();\n\n  // Import each file and extract the resource\n  for (const filePath of allFiles) {\n    const ext = extname(filePath);\n    // Only import .js and .mjs files (compiled output). .ts files need a loader.\n    // In development with tsx/ts-node, .ts files work too.\n    const fileUrl = pathToFileURL(filePath).href;\n\n    let module: Record<string, unknown>;\n    try {\n      module = await import(fileUrl);\n    } catch (err) {\n      const message = err instanceof Error ? err.message : String(err);\n      throw new Error(`Failed to import resource file: ${filePath}\\n${message}`);\n    }\n\n    // Find the resource export\n    let resource: DiscoverableResource | null = null;\n\n    // 1. Check specific export name\n    if (exportName && module[exportName]) {\n      resource = module[exportName] as DiscoverableResource;\n    }\n\n    // 2. Check default export\n    if (!resource && module.default && typeof (module.default as Record<string, unknown>).toPlugin === 'function') {\n      resource = module.default as DiscoverableResource;\n    }\n\n    // 3. Search for first export with toPlugin()\n    if (!resource) {\n      for (const value of Object.values(module)) {\n        if (value && typeof value === 'object' && typeof (value as Record<string, unknown>).toPlugin === 'function') {\n          resource = value as DiscoverableResource;\n          break;\n        }\n      }\n    }\n\n    if (!resource) {\n      throw new Error(\n        `No resource found in: ${filePath}\\n` +\n        'Resource files must export an object with a toPlugin() method.\\n' +\n        'Use defineResource() or export the resource as default.'\n      );\n    }\n\n    // Apply filter\n    if (filter && !filter(resource, filePath)) {\n      continue;\n    }\n\n    const name = resource.definition?.name ?? resource.name ?? filePath;\n    onDiscover?.(name, filePath);\n    discovered.push({ resource, filePath });\n  }\n\n  return discovered;\n}\n\n// ============================================================================\n// Fastify Plugin\n// ============================================================================\n\nconst discoveryPluginImpl: FastifyPluginAsync<DiscoveryPluginOptions> = async (\n  fastify: FastifyInstance,\n  options: DiscoveryPluginOptions\n) => {\n  const { prefix, ...discoveryOptions } = options;\n\n  const discovered = await discoverResources({\n    ...discoveryOptions,\n    onDiscover: discoveryOptions.onDiscover ?? ((name, filePath) => {\n      fastify.log.debug({ resource: name, file: filePath }, 'Auto-discovered resource');\n    }),\n  });\n\n  // Register all discovered resources\n  for (const { resource } of discovered) {\n    const plugin = resource.toPlugin();\n    if (prefix) {\n      await fastify.register(plugin, { prefix });\n    } else {\n      await fastify.register(plugin);\n    }\n  }\n\n  fastify.log.debug(\n    `Auto-discovery: registered ${discovered.length} resource(s)`\n  );\n};\n\n/** Auto-discovery plugin for Arc resources */\nexport const discoveryPlugin: FastifyPluginAsync<DiscoveryPluginOptions> = discoveryPluginImpl;\nexport default discoveryPlugin;\n"],"mappings":";;;;;;;;;AAkFA,SAAS,aAAa,UAAkB,SAA0B;AAEhE,KAAI,QAAQ,SAAS,IAAI,IAAI,QAAQ,SAAS,IAAI,EAAE;EAClD,MAAM,QAAQ,QAAQ,MAAM,cAAc;AAC1C,MAAI,MAEF,QADqB,MAAM,GAAI,MAAM,IAAI,CAAC,KAAK,MAAM,EAAE,MAAM,CAAC,CAC1C,MAAM,QAAQ;AAEhC,UAAO,aAAa,UADH,QAAQ,QAAQ,MAAM,IAAI,IAAI,CACR;IACvC;;AAKN,KAAI,QAAQ,WAAW,IAAI,EAAE;EAC3B,MAAM,SAAS,QAAQ,MAAM,EAAE;AAC/B,SAAO,SAAS,SAAS,OAAO;;AAIlC,QAAO,aAAa;;;;;AAMtB,eAAe,cACb,KACA,SACA,WACmB;CACnB,MAAM,UAAoB,EAAE;CAC5B,MAAM,cAAc,QAAQ,IAAI;CAEhC,MAAM,UAAU,MAAM,QAAQ,aAAa,EAAE,eAAe,MAAM,CAAC,CAAC,YAC5D,EAAE,CACT;AAED,MAAK,MAAM,SAAS,SAAS;EAC3B,MAAM,WAAW,KAAK,aAAa,OAAO,MAAM,KAAK,CAAC;AAEtD,MAAI,MAAM,aAAa,IAAI,WAAW;GACpC,MAAM,SAAS,MAAM,cAAc,UAAU,SAAS,UAAU;AAChE,WAAQ,KAAK,GAAG,OAAO;aACd,MAAM,QAAQ,EAAE;GAEzB,MAAM,cAAc,QAAQ,QAAQ,WAAW,GAAG;AAClD,OAAI,aAAa,OAAO,MAAM,KAAK,EAAE,YAAY,CAC/C,SAAQ,KAAK,SAAS;;;AAK5B,QAAO;;;;;;;AAYT,eAAsB,kBACpB,SACsE;CACtE,MAAM,EACJ,OACA,UAAU,sBACV,YACA,QACA,YACA,YAAY,SACV;CAEJ,MAAM,aAA0E,EAAE;CAGlF,MAAM,WAAqB,EAAE;AAC7B,MAAK,MAAM,OAAO,OAAO;EACvB,MAAM,QAAQ,MAAM,cAAc,KAAK,SAAS,UAAU;AAC1D,WAAS,KAAK,GAAG,MAAM;;AAIzB,UAAS,MAAM;AAGf,MAAK,MAAM,YAAY,UAAU;AACnB,UAAQ,SAAS;EAG7B,MAAM,UAAU,cAAc,SAAS,CAAC;EAExC,IAAI;AACJ,MAAI;AACF,YAAS,MAAM,OAAO;WACf,KAAK;GACZ,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAChE,SAAM,IAAI,MAAM,mCAAmC,SAAS,IAAI,UAAU;;EAI5E,IAAI,WAAwC;AAG5C,MAAI,cAAc,OAAO,YACvB,YAAW,OAAO;AAIpB,MAAI,CAAC,YAAY,OAAO,WAAW,OAAQ,OAAO,QAAoC,aAAa,WACjG,YAAW,OAAO;AAIpB,MAAI,CAAC,UACH;QAAK,MAAM,SAAS,OAAO,OAAO,OAAO,CACvC,KAAI,SAAS,OAAO,UAAU,YAAY,OAAQ,MAAkC,aAAa,YAAY;AAC3G,eAAW;AACX;;;AAKN,MAAI,CAAC,SACH,OAAM,IAAI,MACR,yBAAyB,SAAS;yDAGnC;AAIH,MAAI,UAAU,CAAC,OAAO,UAAU,SAAS,CACvC;EAGF,MAAM,OAAO,SAAS,YAAY,QAAQ,SAAS,QAAQ;AAC3D,eAAa,MAAM,SAAS;AAC5B,aAAW,KAAK;GAAE;GAAU;GAAU,CAAC;;AAGzC,QAAO;;AAOT,MAAM,sBAAkE,OACtE,SACA,YACG;CACH,MAAM,EAAE,QAAQ,GAAG,qBAAqB;CAExC,MAAM,aAAa,MAAM,kBAAkB;EACzC,GAAG;EACH,YAAY,iBAAiB,gBAAgB,MAAM,aAAa;AAC9D,WAAQ,IAAI,MAAM;IAAE,UAAU;IAAM,MAAM;IAAU,EAAE,2BAA2B;;EAEpF,CAAC;AAGF,MAAK,MAAM,EAAE,cAAc,YAAY;EACrC,MAAM,SAAS,SAAS,UAAU;AAClC,MAAI,OACF,OAAM,QAAQ,SAAS,QAAQ,EAAE,QAAQ,CAAC;MAE1C,OAAM,QAAQ,SAAS,OAAO;;AAIlC,SAAQ,IAAI,MACV,8BAA8B,WAAW,OAAO,cACjD;;;AAIH,MAAa,kBAA8D"}

package/dist/docs/index.d.mts

@@ -0,0 +1,163 @@
+import "../elevation-B_2dRLVP.mjs";
+import "../interface-Ch8HU9uM.mjs";
+import "../types-aYB4V7uN.mjs";
+import { RegistryEntry } from "../types/index.mjs";
+import { t as ExternalOpenApiPaths } from "../externalPaths-DlINfKbP.mjs";
+import { FastifyPluginAsync } from "fastify";
+
+//#region src/docs/openapi.d.ts
+interface OpenApiOptions {
+  /** API title */
+  title?: string;
+  /** API version */
+  version?: string;
+  /** API description */
+  description?: string;
+  /** Server URL */
+  serverUrl?: string;
+  /** Route prefix for spec endpoint (default: '/_docs') */
+  prefix?: string;
+  /** API prefix for all resource paths (e.g., '/api/v1') */
+  apiPrefix?: string;
+  /** Auth roles required to access spec (default: [] = public) */
+  authRoles?: string[];
+  /** Include internal routes (default: false) */
+  includeInternal?: boolean;
+  /** Custom OpenAPI extensions */
+  extensions?: Record<string, unknown>;
+}
+interface OpenApiSpec {
+  openapi: string;
+  info: {
+    title: string;
+    version: string;
+    description?: string;
+  };
+  servers?: Array<{
+    url: string;
+    description?: string;
+  }>;
+  paths: Record<string, PathItem>;
+  components: {
+    schemas: Record<string, SchemaObject>;
+    securitySchemes?: Record<string, SecurityScheme>;
+  };
+  tags: Array<{
+    name: string;
+    description?: string;
+  }>;
+  security?: Array<Record<string, string[]>>;
+}
+interface OpenApiBuildOptions {
+  title?: string;
+  version?: string;
+  description?: string;
+  serverUrl?: string;
+  apiPrefix?: string;
+}
+interface PathItem {
+  get?: Operation;
+  post?: Operation;
+  put?: Operation;
+  patch?: Operation;
+  delete?: Operation;
+  options?: Operation;
+  head?: Operation;
+}
+interface Operation {
+  tags: string[];
+  summary: string;
+  description?: string;
+  operationId: string;
+  parameters?: Parameter[];
+  requestBody?: RequestBody;
+  responses: Record<string, Response>;
+  security?: Array<Record<string, string[]>>;
+  /** Arc permission metadata (OpenAPI extension) */
+  'x-arc-permission'?: {
+    type: string;
+    roles?: readonly string[];
+  };
+  /** Arc pipeline steps (OpenAPI extension) */
+  'x-arc-pipeline'?: Array<{
+    type: string;
+    name: string;
+  }>;
+}
+interface Parameter {
+  name: string;
+  in: 'path' | 'query' | 'header';
+  required?: boolean;
+  schema: SchemaObject;
+  description?: string;
+}
+interface RequestBody {
+  required?: boolean;
+  content: Record<string, {
+    schema: SchemaObject;
+  }>;
+}
+interface Response {
+  description: string;
+  content?: Record<string, {
+    schema: SchemaObject;
+  }>;
+}
+interface SchemaObject {
+  type?: string;
+  format?: string;
+  properties?: Record<string, SchemaObject>;
+  items?: SchemaObject;
+  required?: string[];
+  $ref?: string;
+  description?: string;
+  example?: unknown;
+  additionalProperties?: boolean | SchemaObject;
+  enum?: string[];
+  minimum?: number;
+  maximum?: number;
+  minLength?: number;
+  maxLength?: number;
+  pattern?: string;
+}
+interface SecurityScheme {
+  type: string;
+  scheme?: string;
+  bearerFormat?: string;
+  in?: string;
+  name?: string;
+}
+declare const openApiPlugin: FastifyPluginAsync<OpenApiOptions>;
+/**
+ * Build OpenAPI spec from registry resources.
+ * Shared by HTTP docs endpoint and CLI export command.
+ */
+declare function buildOpenApiSpec(resources: RegistryEntry[], options?: OpenApiBuildOptions, externalPaths?: ExternalOpenApiPaths[]): OpenApiSpec;
+declare const _default: FastifyPluginAsync<OpenApiOptions>;
+//#endregion
+//#region src/docs/scalar.d.ts
+interface ScalarOptions {
+  /** Route prefix for UI (default: '/docs') */
+  routePrefix?: string;
+  /** OpenAPI spec URL (default: '/_docs/openapi.json') */
+  specUrl?: string;
+  /** Page title */
+  title?: string;
+  /** Theme (default: 'default') */
+  theme?: 'default' | 'alternate' | 'moon' | 'purple' | 'solarized' | 'bluePlanet' | 'saturn' | 'kepler' | 'mars' | 'deepSpace';
+  /** Show sidebar (default: true) */
+  showSidebar?: boolean;
+  /** Dark mode (default: false) */
+  darkMode?: boolean;
+  /** Auth roles required to access docs */
+  authRoles?: string[];
+  /** Custom CSS */
+  customCss?: string;
+  /** Favicon URL */
+  favicon?: string;
+}
+declare const scalarPlugin: FastifyPluginAsync<ScalarOptions>;
+declare const _default$1: FastifyPluginAsync<ScalarOptions>;
+//#endregion
+export { type ExternalOpenApiPaths, type OpenApiBuildOptions, type OpenApiOptions, type OpenApiSpec, type ScalarOptions, buildOpenApiSpec, _default as openApiPlugin, openApiPlugin as openApiPluginFn, _default$1 as scalarPlugin, scalarPlugin as scalarPluginFn };
+//# sourceMappingURL=index.d.mts.map

package/dist/docs/index.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.mts","names":[],"sources":["../../src/docs/openapi.ts","../../src/docs/scalar.ts"],"mappings":";;;;;;;;UAuBiB,cAAA;EAgBf;EAdA,KAAA;EAgBa;EAdb,OAAA;EAcmB;EAZnB,WAAA;EAe0B;EAb1B,SAAA;EAoBU;EAlBV,MAAA;EAmBO;EAjBP,SAAA;EAmBW;EAjBX,SAAA;EAkBoB;EAhBpB,eAAA;EAmBiB;EAjBjB,UAAA,GAAa,MAAA;AAAA;AAAA,UAGE,WAAA;EACf,OAAA;EACA,IAAA;IACE,KAAA;IACA,OAAA;IACA,WAAA;EAAA;EAEF,OAAA,GAAU,KAAA;IAAQ,GAAA;IAAa,WAAA;EAAA;EAC/B,KAAA,EAAO,MAAA,SAAe,QAAA;EACtB,UAAA;IACE,OAAA,EAAS,MAAA,SAAe,YAAA;IACxB,eAAA,GAAkB,MAAA,SAAe,cAAA;EAAA;EAEnC,IAAA,EAAM,KAAA;IAAQ,IAAA;IAAc,WAAA;EAAA;EAC5B,QAAA,GAAW,KAAA,CAAM,MAAA;AAAA;AAAA,UAGF,mBAAA;EACf,KAAA;EACA,OAAA;EACA,WAAA;EACA,SAAA;EACA,SAAA;AAAA;AAAA,UAGQ,QAAA;EACR,GAAA,GAAM,SAAA;EACN,IAAA,GAAO,SAAA;EACP,GAAA,GAAM,SAAA;EACN,KAAA,GAAQ,SAAA;EACR,MAAA,GAAS,SAAA;EACT,OAAA,GAAU,SAAA;EACV,IAAA,GAAO,SAAA;AAAA;AAAA,UAGC,SAAA;EACR,IAAA;EACA,OAAA;EACA,WAAA;EACA,WAAA;EACA,UAAA,GAAa,SAAA;EACb,WAAA,GAAc,WAAA;EACd,SAAA,EAAW,MAAA,SAAe,QAAA;EAC1B,QAAA,GAAW,KAAA,CAAM,MAAA;EAbR;EAeT,kBAAA;IAAuB,IAAA;IAAc,KAAA;EAAA;EAnBrC;EAqBA,gBAAA,GAAmB,KAAA;IAAQ,IAAA;IAAc,IAAA;EAAA;AAAA;AAAA,UAGjC,SAAA;EACR,IAAA;EACA,EAAA;EACA,QAAA;EACA,MAAA,EAAQ,YAAA;EACR,WAAA;AAAA;AAAA,UAGQ,WAAA;EACR,QAAA;EACA,OAAA,EAAS,MAAA;IAAiB,MAAA,EAAQ,YAAA;EAAA;AAAA;AAAA,UAG1B,QAAA;EACR,WAAA;EACA,OAAA,GAAU,MAAA;IAAiB,MAAA,EAAQ,YAAA;EAAA;AAAA;AAAA,UAG3B,YAAA;EACR,IAAA;EACA,MAAA;EACA,UAAA,GAAa,MAAA,SAAe,YAAA;EAC5B,KAAA,GAAQ,YAAA;EACR,QAAA;EACA,IAAA;EACA,WAAA;EACA,OAAA;EACA,oBAAA,aAAiC,YAAA;EACjC,IAAA;EACA,OAAA;EACA,OAAA;EACA,SAAA;EACA,SAAA;EACA,OAAA;AAAA;AAAA,UAGQ,cAAA;EACR,IAAA;EACA,MAAA;EACA,YAAA;EACA,EAAA;EACA,IAAA;AAAA;AAAA,cAGI,aAAA,EAAe,kBAAA,CAAmB,cAAA;;AA/CO;;;iBAmG/B,gBAAA,CACd,SAAA,EAAW,aAAA,IACX,OAAA,GAAS,mBAAA,EACT,aAAA,GAAgB,oBAAA,KACf,WAAA;AAAA,cAkGF,QAAA;;;UChRgB,aAAA;EDiBf;ECfA,WAAA;EDmBA;ECjBA,OAAA;EDiBmB;ECfnB,KAAA;EDkBe;EChBf,KAAA;;EAEA,WAAA;EDsBsB;ECpBtB,QAAA;EDsB0B;ECpB1B,SAAA;EDqBmC;ECnBnC,SAAA;EDqBM;ECnBN,OAAA;AAAA;AAAA,cAGI,YAAA,EAAc,kBAAA,CAAmB,aAAA;AAAA,cAAa,UAAA"}

package/dist/docs/index.mjs

@@ -0,0 +1,73 @@
+import { n as openApiPlugin, r as openapi_default, t as buildOpenApiSpec } from "../openapi-G3Cw7XuM.mjs";
+import fp from "fastify-plugin";
+
+//#region src/docs/scalar.ts
+/**
+* Scalar API Reference Plugin
+*
+* Beautiful, modern API documentation UI.
+* Lighter and more modern than Swagger UI.
+*
+* @example
+* import { scalarPlugin } from '@classytic/arc/docs';
+*
+* await fastify.register(scalarPlugin, {
+*   routePrefix: '/docs',
+*   specUrl: '/_docs/openapi.json',
+* });
+*
+* // UI available at /docs
+*/
+const scalarPlugin = async (fastify, opts = {}) => {
+	const { routePrefix = "/docs", specUrl = "/_docs/openapi.json", title = "API Documentation", theme = "default", showSidebar = true, darkMode = false, authRoles = [], customCss = "", favicon } = opts;
+	const scalarConfig = JSON.stringify({
+		spec: { url: specUrl },
+		theme,
+		showSidebar,
+		darkMode,
+		...favicon && { favicon }
+	});
+	const html = `<!DOCTYPE html>
+<html>
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <title>${title}</title>
+  ${favicon ? `<link rel="icon" href="${favicon}">` : ""}
+  <style>
+    body { margin: 0; padding: 0; }
+    ${customCss}
+  </style>
+</head>
+<body>
+  <script id="api-reference" data-url="${specUrl}"><\/script>
+  <script>
+    var configuration = ${scalarConfig};
+    document.getElementById('api-reference').dataset.configuration = JSON.stringify(configuration);
+  <\/script>
+  <script src="https://cdn.jsdelivr.net/npm/@scalar/api-reference"><\/script>
+</body>
+</html>`;
+	fastify.get(routePrefix, async (request, reply) => {
+		if (authRoles.length > 0) {
+			const user = request.user;
+			if (!authRoles.some((role) => user?.roles?.includes(role)) && !user?.roles?.includes("superadmin")) {
+				reply.code(403).send({ error: "Access denied" });
+				return;
+			}
+		}
+		reply.type("text/html").send(html);
+	});
+	if (!routePrefix.endsWith("/")) fastify.get(`${routePrefix}/`, async (_, reply) => {
+		reply.redirect(routePrefix);
+	});
+	fastify.log?.debug?.(`Scalar API docs available at ${routePrefix}`);
+};
+var scalar_default = fp(scalarPlugin, {
+	name: "arc-scalar",
+	fastify: "5.x"
+});
+
+//#endregion
+export { buildOpenApiSpec, openapi_default as openApiPlugin, openApiPlugin as openApiPluginFn, scalar_default as scalarPlugin, scalarPlugin as scalarPluginFn };
+//# sourceMappingURL=index.mjs.map

package/dist/docs/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","names":[],"sources":["../../src/docs/scalar.ts"],"sourcesContent":["/**\n * Scalar API Reference Plugin\n *\n * Beautiful, modern API documentation UI.\n * Lighter and more modern than Swagger UI.\n *\n * @example\n * import { scalarPlugin } from '@classytic/arc/docs';\n *\n * await fastify.register(scalarPlugin, {\n *   routePrefix: '/docs',\n *   specUrl: '/_docs/openapi.json',\n * });\n *\n * // UI available at /docs\n */\n\nimport fp from 'fastify-plugin';\nimport type { FastifyInstance, FastifyPluginAsync } from 'fastify';\n\nexport interface ScalarOptions {\n  /** Route prefix for UI (default: '/docs') */\n  routePrefix?: string;\n  /** OpenAPI spec URL (default: '/_docs/openapi.json') */\n  specUrl?: string;\n  /** Page title */\n  title?: string;\n  /** Theme (default: 'default') */\n  theme?: 'default' | 'alternate' | 'moon' | 'purple' | 'solarized' | 'bluePlanet' | 'saturn' | 'kepler' | 'mars' | 'deepSpace';\n  /** Show sidebar (default: true) */\n  showSidebar?: boolean;\n  /** Dark mode (default: false) */\n  darkMode?: boolean;\n  /** Auth roles required to access docs */\n  authRoles?: string[];\n  /** Custom CSS */\n  customCss?: string;\n  /** Favicon URL */\n  favicon?: string;\n}\n\nconst scalarPlugin: FastifyPluginAsync<ScalarOptions> = async (\n  fastify: FastifyInstance,\n  opts: ScalarOptions = {}\n) => {\n  const {\n    routePrefix = '/docs',\n    specUrl = '/_docs/openapi.json',\n    title = 'API Documentation',\n    theme = 'default',\n    showSidebar = true,\n    darkMode = false,\n    authRoles = [],\n    customCss = '',\n    favicon,\n  } = opts;\n\n  // Scalar configuration\n  const scalarConfig = JSON.stringify({\n    spec: { url: specUrl },\n    theme,\n    showSidebar,\n    darkMode,\n    ...(favicon && { favicon }),\n  });\n\n  // HTML template for Scalar\n  const html = `<!DOCTYPE html>\n<html>\n<head>\n  <meta charset=\"utf-8\">\n  <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n  <title>${title}</title>\n  ${favicon ? `<link rel=\"icon\" href=\"${favicon}\">` : ''}\n  <style>\n    body { margin: 0; padding: 0; }\n    ${customCss}\n  </style>\n</head>\n<body>\n  <script id=\"api-reference\" data-url=\"${specUrl}\"></script>\n  <script>\n    var configuration = ${scalarConfig};\n    document.getElementById('api-reference').dataset.configuration = JSON.stringify(configuration);\n  </script>\n  <script src=\"https://cdn.jsdelivr.net/npm/@scalar/api-reference\"></script>\n</body>\n</html>`;\n\n  // Serve UI (not included in OpenAPI spec)\n  fastify.get(routePrefix, async (request, reply) => {\n    // Check auth if required\n    if (authRoles.length > 0) {\n      const user = (request as { user?: { roles?: string[] } }).user;\n      const hasRole = authRoles.some((role) => user?.roles?.includes(role));\n      if (!hasRole && !user?.roles?.includes('superadmin')) {\n        reply.code(403).send({ error: 'Access denied' });\n        return;\n      }\n    }\n\n    reply.type('text/html').send(html);\n  });\n\n  // Redirect /docs/ to /docs\n  if (!routePrefix.endsWith('/')) {\n    fastify.get(`${routePrefix}/`, async (_, reply) => {\n      reply.redirect(routePrefix);\n    });\n  }\n\n  fastify.log?.debug?.(`Scalar API docs available at ${routePrefix}`);\n};\n\nexport default fp(scalarPlugin, {\n  name: 'arc-scalar',\n  fastify: '5.x',\n});\n\nexport { scalarPlugin };\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAyCA,MAAM,eAAkD,OACtD,SACA,OAAsB,EAAE,KACrB;CACH,MAAM,EACJ,cAAc,SACd,UAAU,uBACV,QAAQ,qBACR,QAAQ,WACR,cAAc,MACd,WAAW,OACX,YAAY,EAAE,EACd,YAAY,IACZ,YACE;CAGJ,MAAM,eAAe,KAAK,UAAU;EAClC,MAAM,EAAE,KAAK,SAAS;EACtB;EACA;EACA;EACA,GAAI,WAAW,EAAE,SAAS;EAC3B,CAAC;CAGF,MAAM,OAAO;;;;;WAKJ,MAAM;IACb,UAAU,0BAA0B,QAAQ,MAAM,GAAG;;;MAGnD,UAAU;;;;yCAIyB,QAAQ;;0BAEvB,aAAa;;;;;;AAQrC,SAAQ,IAAI,aAAa,OAAO,SAAS,UAAU;AAEjD,MAAI,UAAU,SAAS,GAAG;GACxB,MAAM,OAAQ,QAA4C;AAE1D,OAAI,CADY,UAAU,MAAM,SAAS,MAAM,OAAO,SAAS,KAAK,CAAC,IACrD,CAAC,MAAM,OAAO,SAAS,aAAa,EAAE;AACpD,UAAM,KAAK,IAAI,CAAC,KAAK,EAAE,OAAO,iBAAiB,CAAC;AAChD;;;AAIJ,QAAM,KAAK,YAAY,CAAC,KAAK,KAAK;GAClC;AAGF,KAAI,CAAC,YAAY,SAAS,IAAI,CAC5B,SAAQ,IAAI,GAAG,YAAY,IAAI,OAAO,GAAG,UAAU;AACjD,QAAM,SAAS,YAAY;GAC3B;AAGJ,SAAQ,KAAK,QAAQ,gCAAgC,cAAc;;AAGrE,qBAAe,GAAG,cAAc;CAC9B,MAAM;CACN,SAAS;CACV,CAAC"}

package/dist/elevation-BRy3yFWT.mjs

@@ -0,0 +1,113 @@
+import { t as __exportAll } from "./chunk-C7Uep-_p.mjs";
+import { t as arcLog } from "./logger-Df2O2WsW.mjs";
+import fp from "fastify-plugin";
+
+//#region src/scope/elevation.ts
+/**
+* Elevation Plugin — Explicit Platform Admin Access
+*
+* Opt-in Fastify plugin that allows platform admins to explicitly
+* elevate their scope via the `x-arc-scope: platform` header.
+*
+* Without this header, a superadmin is treated as a normal user.
+* This prevents implicit bypass and enables audit logging.
+*
+* ## Lifecycle
+*
+* Elevation wraps `fastify.authenticate` so it always runs AFTER
+* authentication has set `request.user`. This avoids the `onRequest`
+* timing issue where `request.user` doesn't exist yet.
+*
+* Flow: `authenticate()` → user is set → `elevation check` → scope is set
+*
+* Inspired by Stripe Connect's `Stripe-Account` header.
+*
+* @example
+* ```typescript
+* const app = await createApp({
+*   auth: { type: 'betterAuth', betterAuth: adapter },
+*   elevation: {
+*     platformRoles: ['superadmin'],
+*     onElevation: (event) => auditLog.write(event),
+*   },
+* });
+* ```
+*/
+var elevation_exports = /* @__PURE__ */ __exportAll({
+	default: () => elevation_default,
+	elevationPlugin: () => elevationPlugin
+});
+const log = arcLog("elevation");
+const elevationPlugin = async (fastify, opts = {}) => {
+	const { platformRoles = ["superadmin"], scopeHeader = "x-arc-scope", orgHeader = "x-organization-id", onElevation } = opts;
+	if (!fastify.hasDecorator("authenticate")) {
+		log.warn("authenticate decorator not found. Register auth before elevation. Elevation will not function.");
+		return;
+	}
+	const originalAuthenticate = fastify.authenticate;
+	const authenticateWithElevation = async (request, reply) => {
+		await originalAuthenticate.call(fastify, request, reply);
+		if (reply.sent) return;
+		if (request.headers[scopeHeader] !== "platform") return;
+		const user = request.user;
+		if (!user) {
+			log.debug("Elevation requested but no user after auth");
+			reply.code(401).send({
+				success: false,
+				error: "Unauthorized",
+				message: "Authentication required for platform elevation",
+				code: "ELEVATION_AUTH_REQUIRED"
+			});
+			return;
+		}
+		const userRoles = user.roles ?? [];
+		if (!platformRoles.some((r) => userRoles.includes(r))) {
+			log.debug("Elevation rejected — insufficient roles", {
+				userId: user.id ?? user._id,
+				userRoles,
+				required: platformRoles
+			});
+			reply.code(403).send({
+				success: false,
+				error: "Forbidden",
+				message: "Insufficient privileges for platform elevation",
+				code: "ELEVATION_FORBIDDEN"
+			});
+			return;
+		}
+		const orgId = request.headers[orgHeader];
+		const userId = String(user.id ?? user._id ?? "unknown");
+		request.scope = {
+			kind: "elevated",
+			organizationId: orgId || void 0,
+			elevatedBy: userId
+		};
+		log.debug("Scope elevated", {
+			userId,
+			organizationId: orgId
+		});
+		if (onElevation) try {
+			await onElevation({
+				userId,
+				organizationId: orgId || void 0,
+				request,
+				timestamp: /* @__PURE__ */ new Date()
+			});
+		} catch {
+			log.warn("onElevation callback threw — continuing request");
+		}
+	};
+	fastify.authenticate = authenticateWithElevation;
+	log.debug("Plugin registered", {
+		platformRoles,
+		scopeHeader
+	});
+};
+var elevation_default = fp(elevationPlugin, {
+	name: "arc-elevation",
+	fastify: "5.x"
+});
+
+//#endregion
+export { elevation_default as n, elevation_exports as r, elevationPlugin as t };
+//# sourceMappingURL=elevation-BRy3yFWT.mjs.map

package/dist/elevation-BRy3yFWT.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"elevation-BRy3yFWT.mjs","names":[],"sources":["../src/scope/elevation.ts"],"sourcesContent":["/**\n * Elevation Plugin — Explicit Platform Admin Access\n *\n * Opt-in Fastify plugin that allows platform admins to explicitly\n * elevate their scope via the `x-arc-scope: platform` header.\n *\n * Without this header, a superadmin is treated as a normal user.\n * This prevents implicit bypass and enables audit logging.\n *\n * ## Lifecycle\n *\n * Elevation wraps `fastify.authenticate` so it always runs AFTER\n * authentication has set `request.user`. This avoids the `onRequest`\n * timing issue where `request.user` doesn't exist yet.\n *\n * Flow: `authenticate()` → user is set → `elevation check` → scope is set\n *\n * Inspired by Stripe Connect's `Stripe-Account` header.\n *\n * @example\n * ```typescript\n * const app = await createApp({\n *   auth: { type: 'betterAuth', betterAuth: adapter },\n *   elevation: {\n *     platformRoles: ['superadmin'],\n *     onElevation: (event) => auditLog.write(event),\n *   },\n * });\n * ```\n */\n\nimport fp from 'fastify-plugin';\nimport type { FastifyInstance, FastifyPluginAsync, FastifyReply, FastifyRequest } from 'fastify';\nimport type { RequestScope } from './types.js';\nimport { arcLog } from '../logger/index.js';\n\nconst log = arcLog('elevation');\n\n// ============================================================================\n// Types\n// ============================================================================\n\nexport interface ElevationOptions {\n  /** Roles that can use elevation (default: ['superadmin']) */\n  platformRoles?: string[];\n  /** Header name for scope declaration (default: 'x-arc-scope') */\n  scopeHeader?: string;\n  /** Header name for target organization (default: 'x-organization-id') */\n  orgHeader?: string;\n  /** Called when elevation happens — use for audit logging */\n  onElevation?: (event: ElevationEvent) => void | Promise<void>;\n}\n\nexport interface ElevationEvent {\n  userId: string;\n  organizationId?: string;\n  request: FastifyRequest;\n  timestamp: Date;\n}\n\n// ============================================================================\n// Plugin\n// ============================================================================\n\nconst elevationPlugin: FastifyPluginAsync<ElevationOptions> = async (\n  fastify: FastifyInstance,\n  opts: ElevationOptions = {},\n) => {\n  const {\n    platformRoles = ['superadmin'],\n    scopeHeader = 'x-arc-scope',\n    orgHeader = 'x-organization-id',\n    onElevation,\n  } = opts;\n\n  // Elevation requires auth — wrap the authenticate decorator\n  if (!fastify.hasDecorator('authenticate')) {\n    log.warn(\n      'authenticate decorator not found. ' +\n      'Register auth before elevation. Elevation will not function.',\n    );\n    return;\n  }\n\n  const originalAuthenticate = fastify.authenticate;\n\n  // Replace authenticate with elevation-aware version\n  const authenticateWithElevation = async (\n    request: FastifyRequest,\n    reply: FastifyReply,\n  ): Promise<void> => {\n    // Step 1: Run original auth (sets request.user + default scope)\n    await originalAuthenticate.call(fastify, request, reply);\n\n    // If auth failed and sent a reply, stop\n    if (reply.sent) return;\n\n    // Step 2: Check elevation header\n    const headerValue = request.headers[scopeHeader] as string | undefined;\n    if (headerValue !== 'platform') return;\n\n    // Step 3: Validate user for elevation\n    const user = request.user;\n    if (!user) {\n      log.debug('Elevation requested but no user after auth');\n      reply.code(401).send({\n        success: false,\n        error: 'Unauthorized',\n        message: 'Authentication required for platform elevation',\n        code: 'ELEVATION_AUTH_REQUIRED',\n      });\n      return;\n    }\n\n    const userRoles = (user.roles ?? []) as string[];\n    if (!platformRoles.some((r) => userRoles.includes(r))) {\n      log.debug('Elevation rejected — insufficient roles', {\n        userId: user.id ?? user._id,\n        userRoles,\n        required: platformRoles,\n      });\n      reply.code(403).send({\n        success: false,\n        error: 'Forbidden',\n        message: 'Insufficient privileges for platform elevation',\n        code: 'ELEVATION_FORBIDDEN',\n      });\n      return;\n    }\n\n    // Step 4: Build elevated scope\n    const orgId = request.headers[orgHeader] as string | undefined;\n    const userId = String(user.id ?? user._id ?? 'unknown');\n\n    const scope: RequestScope = {\n      kind: 'elevated',\n      organizationId: orgId || undefined,\n      elevatedBy: userId,\n    };\n\n    request.scope = scope;\n    log.debug('Scope elevated', { userId, organizationId: orgId });\n\n    // Step 5: Fire audit callback\n    if (onElevation) {\n      try {\n        await onElevation({\n          userId,\n          organizationId: orgId || undefined,\n          request,\n          timestamp: new Date(),\n        });\n      } catch {\n        // Don't fail the request if audit logging fails\n        log.warn('onElevation callback threw — continuing request');\n      }\n    }\n  };\n\n  // Overwrite the authenticate decorator\n  fastify.authenticate = authenticateWithElevation;\n\n  log.debug('Plugin registered', { platformRoles, scopeHeader });\n};\n\nexport default fp(elevationPlugin, {\n  name: 'arc-elevation',\n  fastify: '5.x',\n});\n\nexport { elevationPlugin };\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoCA,MAAM,MAAM,OAAO,YAAY;AA4B/B,MAAM,kBAAwD,OAC5D,SACA,OAAyB,EAAE,KACxB;CACH,MAAM,EACJ,gBAAgB,CAAC,aAAa,EAC9B,cAAc,eACd,YAAY,qBACZ,gBACE;AAGJ,KAAI,CAAC,QAAQ,aAAa,eAAe,EAAE;AACzC,MAAI,KACF,iGAED;AACD;;CAGF,MAAM,uBAAuB,QAAQ;CAGrC,MAAM,4BAA4B,OAChC,SACA,UACkB;AAElB,QAAM,qBAAqB,KAAK,SAAS,SAAS,MAAM;AAGxD,MAAI,MAAM,KAAM;AAIhB,MADoB,QAAQ,QAAQ,iBAChB,WAAY;EAGhC,MAAM,OAAO,QAAQ;AACrB,MAAI,CAAC,MAAM;AACT,OAAI,MAAM,6CAA6C;AACvD,SAAM,KAAK,IAAI,CAAC,KAAK;IACnB,SAAS;IACT,OAAO;IACP,SAAS;IACT,MAAM;IACP,CAAC;AACF;;EAGF,MAAM,YAAa,KAAK,SAAS,EAAE;AACnC,MAAI,CAAC,cAAc,MAAM,MAAM,UAAU,SAAS,EAAE,CAAC,EAAE;AACrD,OAAI,MAAM,2CAA2C;IACnD,QAAQ,KAAK,MAAM,KAAK;IACxB;IACA,UAAU;IACX,CAAC;AACF,SAAM,KAAK,IAAI,CAAC,KAAK;IACnB,SAAS;IACT,OAAO;IACP,SAAS;IACT,MAAM;IACP,CAAC;AACF;;EAIF,MAAM,QAAQ,QAAQ,QAAQ;EAC9B,MAAM,SAAS,OAAO,KAAK,MAAM,KAAK,OAAO,UAAU;AAQvD,UAAQ,QANoB;GAC1B,MAAM;GACN,gBAAgB,SAAS;GACzB,YAAY;GACb;AAGD,MAAI,MAAM,kBAAkB;GAAE;GAAQ,gBAAgB;GAAO,CAAC;AAG9D,MAAI,YACF,KAAI;AACF,SAAM,YAAY;IAChB;IACA,gBAAgB,SAAS;IACzB;IACA,2BAAW,IAAI,MAAM;IACtB,CAAC;UACI;AAEN,OAAI,KAAK,kDAAkD;;;AAMjE,SAAQ,eAAe;AAEvB,KAAI,MAAM,qBAAqB;EAAE;EAAe;EAAa,CAAC;;AAGhE,wBAAe,GAAG,iBAAiB;CACjC,MAAM;CACN,SAAS;CACV,CAAC"}

package/dist/elevation-B_2dRLVP.d.mts

@@ -0,0 +1,88 @@
+import { FastifyPluginAsync, FastifyRequest } from "fastify";
+
+//#region src/scope/types.d.ts
+/**
+ * Request Scope — The One Standard
+ *
+ * Discriminated union representing the access context of every request.
+ * Replaces scattered orgScope/orgRoles/organizationId/bypassRoles.
+ *
+ * Set once by auth adapters, read everywhere by permissions/presets/guards.
+ *
+ * @example
+ * ```typescript
+ * // In a permission check
+ * const scope = request.scope;
+ * if (isElevated(scope)) return true;
+ * if (isMember(scope) && scope.orgRoles.includes('admin')) return true;
+ * ```
+ */
+/**
+ * Request scope — 4 kinds, 4 states, no ambiguity.
+ *
+ * | Kind          | Meaning                           |
+ * |---------------|-----------------------------------|
+ * | public        | No authentication                 |
+ * | authenticated | Logged in, no org context          |
+ * | member        | In an org with specific roles      |
+ * | elevated      | Platform admin, explicit elevation |
+ */
+type RequestScope = {
+  kind: 'public';
+} | {
+  kind: 'authenticated';
+} | {
+  kind: 'member';
+  organizationId: string;
+  orgRoles: string[];
+  teamId?: string;
+} | {
+  kind: 'elevated';
+  organizationId?: string;
+  elevatedBy: string;
+};
+/** Check if scope is `member` kind */
+declare function isMember(scope: RequestScope): scope is Extract<RequestScope, {
+  kind: 'member';
+}>;
+/** Check if scope is `elevated` kind */
+declare function isElevated(scope: RequestScope): scope is Extract<RequestScope, {
+  kind: 'elevated';
+}>;
+/** Check if scope has org access (member OR elevated) */
+declare function hasOrgAccess(scope: RequestScope): boolean;
+/** Check if request is authenticated (any kind except public) */
+declare function isAuthenticated(scope: RequestScope): boolean;
+/** Get organizationId from scope (if present) */
+declare function getOrgId(scope: RequestScope): string | undefined;
+/** Get org roles from scope (empty array if not a member) */
+declare function getOrgRoles(scope: RequestScope): string[];
+/** Get team ID from scope (only available on member kind) */
+declare function getTeamId(scope: RequestScope): string | undefined;
+/** Default public scope — used as initial decoration value */
+declare const PUBLIC_SCOPE: Readonly<RequestScope>;
+/** Default authenticated scope — used when user is logged in but no org */
+declare const AUTHENTICATED_SCOPE: Readonly<RequestScope>;
+//#endregion
+//#region src/scope/elevation.d.ts
+interface ElevationOptions {
+  /** Roles that can use elevation (default: ['superadmin']) */
+  platformRoles?: string[];
+  /** Header name for scope declaration (default: 'x-arc-scope') */
+  scopeHeader?: string;
+  /** Header name for target organization (default: 'x-organization-id') */
+  orgHeader?: string;
+  /** Called when elevation happens — use for audit logging */
+  onElevation?: (event: ElevationEvent) => void | Promise<void>;
+}
+interface ElevationEvent {
+  userId: string;
+  organizationId?: string;
+  request: FastifyRequest;
+  timestamp: Date;
+}
+declare const elevationPlugin: FastifyPluginAsync<ElevationOptions>;
+declare const _default: FastifyPluginAsync<ElevationOptions>;
+//#endregion
+export { AUTHENTICATED_SCOPE as a, getOrgId as c, hasOrgAccess as d, isAuthenticated as f, elevationPlugin as i, getOrgRoles as l, isMember as m, ElevationOptions as n, PUBLIC_SCOPE as o, isElevated as p, _default as r, RequestScope as s, ElevationEvent as t, getTeamId as u };
+//# sourceMappingURL=elevation-B_2dRLVP.d.mts.map

package/dist/elevation-B_2dRLVP.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"elevation-B_2dRLVP.d.mts","names":[],"sources":["../src/scope/types.ts","../src/scope/elevation.ts"],"mappings":";;;;;;AA+BA;;;;;;;;;;;;;;;AAWA;;;;;;;;KAXY,YAAA;EACN,IAAA;AAAA;EACA,IAAA;AAAA;EACA,IAAA;EAAgB,cAAA;EAAwB,QAAA;EAAoB,MAAA;AAAA;EAC5D,IAAA;EAAkB,cAAA;EAAyB,UAAA;AAAA;;iBAOjC,QAAA,CAAS,KAAA,EAAO,YAAA,GAAe,KAAA,IAAS,OAAA,CAAQ,YAAA;EAAgB,IAAA;AAAA;;iBAKhE,UAAA,CAAW,KAAA,EAAO,YAAA,GAAe,KAAA,IAAS,OAAA,CAAQ,YAAA;EAAgB,IAAA;AAAA;;iBAKlE,YAAA,CAAa,KAAA,EAAO,YAAA;AAApC;AAAA,iBAKgB,eAAA,CAAgB,KAAA,EAAO,YAAA;;iBASvB,QAAA,CAAS,KAAA,EAAO,YAAA;;iBAOhB,WAAA,CAAY,KAAA,EAAO,YAAA;;iBAMnB,SAAA,CAAU,KAAA,EAAO,YAAA;;cAUpB,YAAA,EAAc,QAAA,CAAS,YAAA;AAvBpC;AAAA,cA0Ba,mBAAA,EAAqB,QAAA,CAAS,YAAA;;;UClD1B,gBAAA;EDAmE;ECElF,aAAA;EDGc;ECDd,WAAA;;EAEA,SAAA;EDDgE;ECGhE,WAAA,IAAe,KAAA,EAAO,cAAA,YAA0B,OAAA;AAAA;AAAA,UAGjC,cAAA;EACf,MAAA;EACA,cAAA;EACA,OAAA,EAAS,cAAA;EACT,SAAA,EAAW,IAAA;AAAA;AAAA,cAOP,eAAA,EAAiB,kBAAA,CAAmB,gBAAA;AAAA,cAAgB,QAAA"}

package/dist/errorHandler-BbcgBmIH.d.mts

@@ -0,0 +1,73 @@
+import { t as DomainEvent } from "./EventTransport-BD2U0BTc.mjs";
+import { FastifyInstance, FastifyPluginAsync, FastifyRequest } from "fastify";
+
+//#region src/plugins/caching.d.ts
+interface CachingRule {
+  /** Path prefix to match (e.g., '/api/products') */
+  match: string;
+  /** Cache-Control max-age in seconds */
+  maxAge: number;
+  /** Cache-Control: private vs public (default: public) */
+  private?: boolean;
+  /** stale-while-revalidate directive in seconds */
+  staleWhileRevalidate?: number;
+}
+interface CachingOptions {
+  /** Default max-age in seconds for Cache-Control (default: 0 = no-cache) */
+  maxAge?: number;
+  /** Enable ETag generation (default: true) */
+  etag?: boolean;
+  /** Enable conditional requests — 304 Not Modified (default: true) */
+  conditional?: boolean;
+  /** HTTP methods to cache (default: ['GET', 'HEAD']) */
+  methods?: string[];
+  /** Paths to exclude from caching (prefix match) */
+  exclude?: string[];
+  /** Custom cache rules per path prefix */
+  rules?: CachingRule[];
+}
+declare const cachingPlugin: FastifyPluginAsync<CachingOptions>;
+declare const _default$1: FastifyPluginAsync<CachingOptions>;
+//#endregion
+//#region src/plugins/sse.d.ts
+interface SSEOptions {
+  /** SSE endpoint path (default: '/events/stream') */
+  path?: string;
+  /** Require authentication (default: true) */
+  requireAuth?: boolean;
+  /** Event patterns to stream (default: ['*'] = all) */
+  patterns?: string[];
+  /** Heartbeat interval in ms (default: 30000) */
+  heartbeat?: number;
+  /** Filter events by organizationId from request.scope (default: false) */
+  orgScoped?: boolean;
+  /** Custom event filter function */
+  filter?: (event: DomainEvent<unknown>, request: FastifyRequest) => boolean;
+}
+declare const ssePlugin: FastifyPluginAsync<SSEOptions>;
+declare const _default: FastifyPluginAsync<SSEOptions>;
+//#endregion
+//#region src/plugins/errorHandler.d.ts
+interface ErrorHandlerOptions {
+  /**
+   * Include stack trace in error responses (default: false in production)
+   */
+  includeStack?: boolean;
+  /**
+   * Custom error callback for logging to external services
+   */
+  onError?: (error: Error, request: FastifyRequest) => void | Promise<void>;
+  /**
+   * Map specific error types to custom responses
+   */
+  errorMap?: Record<string, {
+    statusCode: number;
+    code: string;
+    message?: string;
+  }>;
+}
+declare function errorHandlerPluginFn(fastify: FastifyInstance, options?: ErrorHandlerOptions): Promise<void>;
+declare const errorHandlerPlugin: typeof errorHandlerPluginFn;
+//#endregion
+export { ssePlugin as a, _default$1 as c, _default as i, cachingPlugin as l, errorHandlerPlugin as n, CachingOptions as o, SSEOptions as r, CachingRule as s, ErrorHandlerOptions as t };
+//# sourceMappingURL=errorHandler-BbcgBmIH.d.mts.map

package/dist/errorHandler-BbcgBmIH.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errorHandler-BbcgBmIH.d.mts","names":[],"sources":["../src/plugins/caching.ts","../src/plugins/sse.ts","../src/plugins/errorHandler.ts"],"mappings":";;;;UAwBiB,WAAA;EAqBf;EAnBA,KAAA;EAqBQ;EAnBR,MAAA;EAmBmB;EAjBnB,OAAA;EAgID;EA9HC,oBAAA;AAAA;AAAA,UAGe,cAAA;EAoCqC;EAlCpD,MAAA;;EAEA,IAAA;;EAEA,WAAA;;EAEA,OAAA;ECTe;EDWf,OAAA;;EAEA,KAAA,GAAQ,WAAA;AAAA;AAAA,cAwBJ,aAAA,EAAe,kBAAA,CAAmB,cAAA;AAAA,cAAc,UAAA;;;UCrCrC,UAAA;EDWf;ECTA,IAAA;EDWQ;ECTR,WAAA;EDSmB;ECPnB,QAAA;EDsHD;ECpHC,SAAA;ED6BmB;EC3BnB,SAAA;ED2BoD;ECzBpD,MAAA,IAAU,KAAA,EAAO,WAAA,WAAsB,OAAA,EAAS,cAAA;AAAA;AAAA,cAO5C,SAAA,EAAW,kBAAA,CAAmB,UAAA;AAAA,cAAU,QAAA;;;UC/B7B,mBAAA;EFiBf;;;EEbA,YAAA;EFqBA;;;EEhBA,OAAA,IAAW,KAAA,EAAO,KAAA,EAAO,OAAA,EAAS,cAAA,YAA0B,OAAA;EFwCxD;;;EEnCJ,QAAA,GAAW,MAAA;IACT,UAAA;IACA,IAAA;IACA,OAAA;EAAA;AAAA;AAAA,iBAcW,oBAAA,CACb,OAAA,EAAS,eAAA,EACT,OAAA,GAAS,mBAAA,GACR,OAAA;AAAA,cAoJU,kBAAA,SAAkB,oBAAA"}