@classytic/arc 1.1.0 → 2.1.2

package/dist/redis-D-JAeLtm.d.mts

@@ -0,0 +1,50 @@
+import { n as IdempotencyResult, r as IdempotencyStore } from "./interface-B01JvPVc.mjs";
+
+//#region src/idempotency/stores/redis.d.ts
+interface RedisClient {
+  get(key: string): Promise<string | null>;
+  set(key: string, value: string, options?: {
+    EX?: number;
+    NX?: boolean;
+  }): Promise<string | null>;
+  del(key: string | string[]): Promise<number>;
+  exists(key: string | string[]): Promise<number>;
+  /** SCAN command — compatible with node-redis and ioredis varargs signatures. */
+  scan?(cursor: string | number, ...args: (string | number)[]): Promise<[string | number, string[]]>;
+  quit?(): Promise<string>;
+  disconnect?(): Promise<void>;
+}
+interface RedisIdempotencyStoreOptions {
+  /** Redis client instance */
+  client: RedisClient;
+  /** Key prefix (default: 'idem:') */
+  prefix?: string;
+  /** Lock key prefix (default: 'idem:lock:') */
+  lockPrefix?: string;
+  /** Default TTL in ms (default: 86400000 = 24 hours) */
+  ttlMs?: number;
+}
+declare class RedisIdempotencyStore implements IdempotencyStore {
+  readonly name = "redis";
+  private client;
+  private prefix;
+  private lockPrefix;
+  private ttlMs;
+  constructor(options: RedisIdempotencyStoreOptions);
+  private resultKey;
+  private lockKey;
+  get(key: string): Promise<IdempotencyResult | undefined>;
+  set(key: string, result: Omit<IdempotencyResult, 'key'>): Promise<void>;
+  tryLock(key: string, requestId: string, ttlMs: number): Promise<boolean>;
+  unlock(key: string, requestId: string): Promise<void>;
+  isLocked(key: string): Promise<boolean>;
+  delete(key: string): Promise<void>;
+  deleteByPrefix(prefix: string): Promise<number>;
+  findByPrefix(prefix: string): Promise<IdempotencyResult | undefined>;
+  /** Scan Redis keys matching a prefix pattern. Falls back to empty if SCAN unavailable. */
+  private scanByPrefix;
+  close(): Promise<void>;
+}
+//#endregion
+export { RedisIdempotencyStore as n, RedisIdempotencyStoreOptions as r, RedisClient as t };
+//# sourceMappingURL=redis-D-JAeLtm.d.mts.map

package/dist/redis-D-JAeLtm.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redis-D-JAeLtm.d.mts","names":[],"sources":["../src/idempotency/stores/redis.ts"],"mappings":";;;UAoBiB,WAAA;EACf,GAAA,CAAI,GAAA,WAAc,OAAA;EAClB,GAAA,CAAI,GAAA,UAAa,KAAA,UAAe,OAAA;IAAY,EAAA;IAAa,EAAA;EAAA,IAAiB,OAAA;EAC1E,GAAA,CAAI,GAAA,sBAAyB,OAAA;EAC7B,MAAA,CAAO,GAAA,sBAAyB,OAAA;EAD5B;EAGJ,IAAA,EAAM,MAAA,sBAA4B,IAAA,wBAA4B,OAAA;EAC9D,IAAA,KAAS,OAAA;EACT,UAAA,KAAe,OAAA;AAAA;AAAA,UAGA,4BAAA;EALT;EAON,MAAA,EAAQ,WAAA;EAPsD;EAS9D,MAAA;EARS;EAUT,UAAA;EATe;EAWf,KAAA;AAAA;AAAA,cAGW,qBAAA,YAAiC,gBAAA;EAAA,SACnC,IAAA;EAAA,QACD,MAAA;EAAA,QACA,MAAA;EAAA,QACA,UAAA;EAAA,QACA,KAAA;cAEI,OAAA,EAAS,4BAAA;EAAA,QAOb,SAAA;EAAA,QAIA,OAAA;EAIF,GAAA,CAAI,GAAA,WAAc,OAAA,CAAQ,iBAAA;EAqB1B,GAAA,CAAI,GAAA,UAAa,MAAA,EAAQ,IAAA,CAAK,iBAAA,WAA4B,OAAA;EAa1D,OAAA,CAAQ,GAAA,UAAa,SAAA,UAAmB,KAAA,WAAgB,OAAA;EAUxD,MAAA,CAAO,GAAA,UAAa,SAAA,WAAoB,OAAA;EAQxC,QAAA,CAAS,GAAA,WAAc,OAAA;EAKvB,MAAA,CAAO,GAAA,WAAc,OAAA;EAIrB,cAAA,CAAe,MAAA,WAAiB,OAAA;EAQhC,YAAA,CAAa,MAAA,WAAiB,OAAA,CAAQ,iBAAA;EAhDR;EAAA,QAqEtB,YAAA;EAcR,KAAA,CAAA,GAAS,OAAA;AAAA"}

package/dist/redis-stream-Bdh_vUU8.d.mts

@@ -0,0 +1,104 @@
+import { i as EventTransport, n as EventHandler, r as EventLogger, t as DomainEvent } from "./EventTransport-BD2U0BTc.mjs";
+
+//#region src/events/transports/redis-stream.d.ts
+interface RedisStreamLike {
+  xadd(key: string, id: string, ...fieldValues: string[]): Promise<string | null>;
+  xreadgroup(command: 'GROUP', group: string, consumer: string, ...args: (string | number)[]): Promise<Array<[string, Array<[string, string[]]>]> | null>;
+  xack(key: string, group: string, ...ids: string[]): Promise<number>;
+  xgroup(command: string, key: string, group: string, ...args: string[]): Promise<unknown>;
+  xpending(key: string, group: string, ...args: (string | number)[]): Promise<Array<[string, string, number, number]>>;
+  xclaim(key: string, group: string, consumer: string, minIdleTime: number, ...ids: string[]): Promise<Array<[string, string[]]>>;
+  xlen(key: string): Promise<number>;
+  quit(): Promise<unknown>;
+}
+interface RedisStreamTransportOptions {
+  /**
+   * Redis stream key name.
+   * @default 'arc:events'
+   */
+  stream?: string;
+  /**
+   * Consumer group name. Each group receives every event independently.
+   * Multiple instances of the same service should share a group name.
+   * @default 'default'
+   */
+  group?: string;
+  /**
+   * Consumer name within the group. Must be unique per instance.
+   * @default 'consumer-<random>'
+   */
+  consumer?: string;
+  /**
+   * Block time in ms when waiting for new events.
+   * @default 5000
+   */
+  blockTimeMs?: number;
+  /**
+   * Max events to read per batch.
+   * @default 10
+   */
+  batchSize?: number;
+  /**
+   * Max delivery attempts before moving to dead letter stream.
+   * @default 5
+   */
+  maxRetries?: number;
+  /**
+   * Idle time in ms before pending entries are claimed by this consumer.
+   * Handles crash recovery — if a consumer dies mid-processing, another
+   * consumer will claim its pending entries after this timeout.
+   * @default 30000
+   */
+  claimTimeoutMs?: number;
+  /**
+   * Dead letter stream name. Failed events are moved here after maxRetries.
+   * Set to `false` to disable DLQ (failed events are acked and dropped).
+   * @default 'arc:events:dlq'
+   */
+  deadLetterStream?: string | false;
+  /**
+   * Max stream length (approximate). Uses XADD MAXLEN ~ to trim old entries.
+   * Set to 0 to disable trimming.
+   * @default 10000
+   */
+  maxLen?: number;
+  /**
+   * Logger for error messages (default: console).
+   * Pass `fastify.log` to integrate with your application logger.
+   */
+  logger?: EventLogger;
+}
+declare class RedisStreamTransport implements EventTransport {
+  readonly name = "redis-stream";
+  private redis;
+  private stream;
+  private group;
+  private consumer;
+  private blockTimeMs;
+  private batchSize;
+  private maxRetries;
+  private claimTimeoutMs;
+  private deadLetterStream;
+  private maxLen;
+  private logger;
+  private handlers;
+  private running;
+  private pollPromise;
+  private groupCreated;
+  constructor(redis: RedisStreamLike, options?: RedisStreamTransportOptions);
+  publish(event: DomainEvent): Promise<void>;
+  subscribe(pattern: string, handler: EventHandler): Promise<() => void>;
+  close(): Promise<void>;
+  private ensureGroup;
+  private pollLoop;
+  private readNewMessages;
+  private claimPending;
+  private processEntry;
+  private getMatchingHandlers;
+  private matchesPattern;
+  private moveToDlq;
+  private sleep;
+}
+//#endregion
+export { RedisStreamTransport as n, RedisStreamTransportOptions as r, RedisStreamLike as t };
+//# sourceMappingURL=redis-stream-Bdh_vUU8.d.mts.map

package/dist/redis-stream-Bdh_vUU8.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redis-stream-Bdh_vUU8.d.mts","names":[],"sources":["../src/events/transports/redis-stream.ts"],"mappings":";;;UAkCiB,eAAA;EACf,IAAA,CAAK,GAAA,UAAa,EAAA,aAAe,WAAA,aAAwB,OAAA;EACzD,UAAA,CACE,OAAA,WACA,KAAA,UACA,QAAA,aACG,IAAA,wBACF,OAAA,CAAQ,KAAA,UAAe,KAAA;EAC1B,IAAA,CAAK,GAAA,UAAa,KAAA,aAAkB,GAAA,aAAgB,OAAA;EACpD,MAAA,CAAO,OAAA,UAAiB,GAAA,UAAa,KAAA,aAAkB,IAAA,aAAiB,OAAA;EACxE,QAAA,CACE,GAAA,UACA,KAAA,aACG,IAAA,wBACF,OAAA,CAAQ,KAAA;EACX,MAAA,CACE,GAAA,UACA,KAAA,UACA,QAAA,UACA,WAAA,aACG,GAAA,aACF,OAAA,CAAQ,KAAA;EACX,IAAA,CAAK,GAAA,WAAc,OAAA;EACnB,IAAA,IAAQ,OAAA;AAAA;AAAA,UAOO,2BAAA;EArBR;;;;EA0BP,MAAA;EAzBA;;;;;EAgCA,KAAA;EA3BA;;;;EAiCA,QAAA;EA5BK;;;;EAkCL,WAAA;EAhCmB;;;;EAsCnB,SAAA;EA9Be;;;;EAoCf,UAAA;EAxBA;;;;;;EAgCA,cAAA;EAcA;;;;;EAPA,gBAAA;EAoBgC;;;;;EAbhC,MAAA;EAqE0C;;;;EA/D1C,MAAA,GAAS,WAAA;AAAA;AAAA,cAOE,oBAAA,YAAgC,cAAA;EAAA,SAClC,IAAA;EAAA,QAED,KAAA;EAAA,QACA,MAAA;EAAA,QACA,KAAA;EAAA,QACA,QAAA;EAAA,QACA,WAAA;EAAA,QACA,SAAA;EAAA,QACA,UAAA;EAAA,QACA,cAAA;EAAA,QACA,gBAAA;EAAA,QACA,MAAA;EAAA,QAEA,MAAA;EAAA,QAEA,QAAA;EAAA,QACA,OAAA;EAAA,QACA,WAAA;EAAA,QACA,YAAA;cAEI,KAAA,EAAO,eAAA,EAAiB,OAAA,GAAS,2BAAA;EAkBvC,OAAA,CAAQ,KAAA,EAAO,WAAA,GAAc,OAAA;EAiB7B,SAAA,CAAU,OAAA,UAAiB,OAAA,EAAS,YAAA,GAAe,OAAA;EA8BnD,KAAA,CAAA,GAAS,OAAA;EAAA,QAeD,WAAA;EAAA,QAqBA,QAAA;EAAA,QAkBA,eAAA;EAAA,QAkBA,YAAA;EAAA,QAiDA,YAAA;EAAA,QA8CN,mBAAA;EAAA,QAcA,cAAA;EAAA,QAcM,SAAA;EAAA,QA+BN,KAAA;AAAA"}

package/dist/registry/index.d.mts

@@ -0,0 +1,12 @@
+import "../elevation-B_2dRLVP.mjs";
+import { C as RegisterOptions, w as ResourceRegistry } from "../interface-Ch8HU9uM.mjs";
+import "../types-aYB4V7uN.mjs";
+import { IntrospectionPluginOptions } from "../types/index.mjs";
+import { FastifyPluginAsync } from "fastify";
+
+//#region src/registry/introspectionPlugin.d.ts
+declare const introspectionPlugin: FastifyPluginAsync<IntrospectionPluginOptions>;
+declare const _default: FastifyPluginAsync<IntrospectionPluginOptions>;
+//#endregion
+export { type IntrospectionPluginOptions, type RegisterOptions, ResourceRegistry, _default as introspectionPlugin, introspectionPlugin as introspectionPluginFn };
+//# sourceMappingURL=index.d.mts.map

package/dist/registry/index.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.mts","names":[],"sources":["../../src/registry/introspectionPlugin.ts"],"mappings":";;;;;;;cAUM,mBAAA,EAAqB,kBAAA,CAAmB,0BAAA;AAAA,cAA0B,QAAA"}

package/dist/registry/index.mjs

@@ -0,0 +1,4 @@
+import { t as ResourceRegistry } from "../ResourceRegistry-DsN4KJjV.mjs";
+import { n as introspectionPlugin_default, t as introspectionPlugin } from "../introspectionPlugin-rFdO8ZUa.mjs";
+
+export { ResourceRegistry, introspectionPlugin_default as introspectionPlugin, introspectionPlugin as introspectionPluginFn };

package/dist/requestContext-QQD6ROJc.mjs

@@ -0,0 +1,56 @@
+import { AsyncLocalStorage } from "node:async_hooks";
+
+//#region src/context/requestContext.ts
+/**
+* Request Context via AsyncLocalStorage
+*
+* Provides request-scoped context accessible anywhere in the call stack
+* without threading parameters through every function call.
+*
+* Uses Node.js native AsyncLocalStorage — zero-cost per request, no allocation
+* beyond the store object, and fully supported since Node 16.
+*
+* @example
+* ```typescript
+* import { requestContext } from '@classytic/arc';
+*
+* // Anywhere in the call stack — no parameter passing needed
+* async function auditAction(action: string) {
+*   const ctx = requestContext.get();
+*   await auditLog.write({
+*     action,
+*     userId: ctx?.user?.id,
+*     orgId: ctx?.organizationId,
+*     requestId: ctx?.requestId,
+*   });
+* }
+*
+* // Type-safe access to specific fields
+* const userId = requestContext.get()?.user?.id;
+* const orgId = requestContext.get()?.organizationId;
+* ```
+*/
+const storage = new AsyncLocalStorage();
+/**
+* Request context API.
+*
+* - `get()` — returns current store or undefined if outside request scope
+* - `run(store, fn)` — run a function with a specific store (used by Arc internals)
+* - `getStore()` — alias for get() (matches Node.js API naming)
+*/
+const requestContext = {
+	get() {
+		return storage.getStore();
+	},
+	getStore() {
+		return storage.getStore();
+	},
+	run(store, fn) {
+		return storage.run(store, fn);
+	},
+	storage
+};
+
+//#endregion
+export { requestContext as t };
+//# sourceMappingURL=requestContext-QQD6ROJc.mjs.map

package/dist/requestContext-QQD6ROJc.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"requestContext-QQD6ROJc.mjs","names":[],"sources":["../src/context/requestContext.ts"],"sourcesContent":["/**\n * Request Context via AsyncLocalStorage\n *\n * Provides request-scoped context accessible anywhere in the call stack\n * without threading parameters through every function call.\n *\n * Uses Node.js native AsyncLocalStorage — zero-cost per request, no allocation\n * beyond the store object, and fully supported since Node 16.\n *\n * @example\n * ```typescript\n * import { requestContext } from '@classytic/arc';\n *\n * // Anywhere in the call stack — no parameter passing needed\n * async function auditAction(action: string) {\n *   const ctx = requestContext.get();\n *   await auditLog.write({\n *     action,\n *     userId: ctx?.user?.id,\n *     orgId: ctx?.organizationId,\n *     requestId: ctx?.requestId,\n *   });\n * }\n *\n * // Type-safe access to specific fields\n * const userId = requestContext.get()?.user?.id;\n * const orgId = requestContext.get()?.organizationId;\n * ```\n */\n\nimport { AsyncLocalStorage } from 'node:async_hooks';\n\n/**\n * Shape of the request-scoped context store.\n * Populated by Arc's onRequest hook in arcCorePlugin.\n */\nexport interface RequestStore {\n  /** Unique request identifier */\n  requestId?: string;\n  /** Authenticated user (if any) */\n  user?: { id?: string; _id?: string; roles?: string[]; [key: string]: unknown } | null;\n  /** Active organization ID (multi-tenant) */\n  organizationId?: string;\n  /** Active team ID (team-scoped resources) */\n  teamId?: string;\n  /** Current resource name (set by arcDecorator in CRUD routes) */\n  resourceName?: string;\n  /** Request start time (for timing) */\n  startTime: number;\n  /** Additional context — extensible by app */\n  [key: string]: unknown;\n}\n\nconst storage = new AsyncLocalStorage<RequestStore>();\n\n/**\n * Request context API.\n *\n * - `get()` — returns current store or undefined if outside request scope\n * - `run(store, fn)` — run a function with a specific store (used by Arc internals)\n * - `getStore()` — alias for get() (matches Node.js API naming)\n */\nexport const requestContext = {\n  /**\n   * Get the current request context.\n   * Returns undefined if called outside a request lifecycle.\n   */\n  get(): RequestStore | undefined {\n    return storage.getStore();\n  },\n\n  /**\n   * Alias for get() — matches Node.js AsyncLocalStorage API naming.\n   */\n  getStore(): RequestStore | undefined {\n    return storage.getStore();\n  },\n\n  /**\n   * Run a function within a specific request context.\n   * Used internally by Arc's onRequest hook.\n   */\n  run<T>(store: RequestStore, fn: () => T): T {\n    return storage.run(store, fn);\n  },\n\n  /**\n   * The underlying AsyncLocalStorage instance.\n   * Exposed for advanced use cases (testing, custom integrations).\n   */\n  storage,\n};\n\nexport default requestContext;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqDA,MAAM,UAAU,IAAI,mBAAiC;;;;;;;;AASrD,MAAa,iBAAiB;CAK5B,MAAgC;AAC9B,SAAO,QAAQ,UAAU;;CAM3B,WAAqC;AACnC,SAAO,QAAQ,UAAU;;CAO3B,IAAO,OAAqB,IAAgB;AAC1C,SAAO,QAAQ,IAAI,OAAO,GAAG;;CAO/B;CACD"}

package/dist/schemaConverter-BwrmWroW.mjs

@@ -0,0 +1,99 @@
+//#region src/utils/schemaConverter.ts
+let _toJSONSchema = null;
+import("zod").then(({ z }) => {
+	if (typeof z?.toJSONSchema === "function") _toJSONSchema = (schema, opts) => z.toJSONSchema(schema, opts);
+}).catch(() => {});
+/**
+* Check if an object is already a plain JSON Schema.
+* Returns true if it has JSON Schema markers (`type`, `properties`, `$ref`,
+* `allOf`, `anyOf`, `oneOf`, `items`, `enum`) and does NOT have Zod markers.
+*/
+function isJsonSchema(input) {
+	if (input === null || typeof input !== "object") return false;
+	const obj = input;
+	if ("_def" in obj || "_zod" in obj) return false;
+	return "type" in obj || "properties" in obj || "$ref" in obj || "allOf" in obj || "anyOf" in obj || "oneOf" in obj || "items" in obj || "enum" in obj;
+}
+/**
+* Check if an object is a Zod schema (has `_zod` marker from Zod v4).
+*/
+function isZodSchema(input) {
+	return input !== null && typeof input === "object" && "_zod" in input;
+}
+/**
+* Convert any schema input to JSON Schema.
+*
+* Detection order:
+* 1. `null`/`undefined` → `undefined`
+* 2. Already JSON Schema → pass through as-is (zero overhead)
+* 3. Zod v4 schema → `z.toJSONSchema(schema, { target: 'openapi-3.0' })`
+* 4. Unrecognized object → return as-is (treat as opaque schema)
+*/
+function toJsonSchema(input) {
+	if (input == null) return void 0;
+	if (typeof input !== "object") return void 0;
+	if (isJsonSchema(input)) return input;
+	if (isZodSchema(input)) {
+		if (!_toJSONSchema) {
+			console.warn("[Arc] Zod schema detected but zod is not installed. Install zod v4: npm install zod");
+			return input;
+		}
+		try {
+			return _toJSONSchema(input, { target: "openapi-3.0" });
+		} catch {
+			return { type: "object" };
+		}
+	}
+	return input;
+}
+/**
+* Convert all schema fields in an OpenApiSchemas object.
+* JSON Schema values pass through unchanged. Only Zod schemas are converted.
+*/
+function convertOpenApiSchemas(schemas) {
+	const result = {};
+	const schemaFields = [
+		"entity",
+		"createBody",
+		"updateBody",
+		"params",
+		"listQuery",
+		"response"
+	];
+	for (const field of schemaFields) {
+		const value = schemas[field];
+		if (value !== void 0) result[field] = toJsonSchema(value) ?? value;
+	}
+	for (const [key, value] of Object.entries(schemas)) if (!schemaFields.includes(key)) result[key] = value;
+	return result;
+}
+/**
+* Convert schema values in a Fastify route schema record.
+*
+* Handles `body`, `querystring`, `params`, `headers` (top-level conversion)
+* and `response` (iterates by status code — each value converted individually).
+*
+* JSON Schema values pass through unchanged. Only Zod schemas are converted.
+*
+* Used for both additionalRoutes and customSchemas (CRUD overrides).
+*/
+function convertRouteSchema(schema) {
+	const result = { ...schema };
+	for (const field of [
+		"body",
+		"querystring",
+		"params",
+		"headers"
+	]) if (result[field] !== void 0) result[field] = toJsonSchema(result[field]) ?? result[field];
+	if (result.response !== void 0 && typeof result.response === "object" && result.response !== null) {
+		const responseObj = result.response;
+		const convertedResponse = {};
+		for (const [statusCode, responseSchema] of Object.entries(responseObj)) convertedResponse[statusCode] = toJsonSchema(responseSchema) ?? responseSchema;
+		result.response = convertedResponse;
+	}
+	return result;
+}
+
+//#endregion
+export { toJsonSchema as a, isZodSchema as i, convertRouteSchema as n, isJsonSchema as r, convertOpenApiSchemas as t };
+//# sourceMappingURL=schemaConverter-BwrmWroW.mjs.map

package/dist/schemaConverter-BwrmWroW.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemaConverter-BwrmWroW.mjs","names":[],"sources":["../src/utils/schemaConverter.ts"],"sourcesContent":["/**\n * Schema Converter — Detect-First, Convert-Only-When-Needed\n *\n * Converts Zod v4 schemas to JSON Schema using Zod's native `z.toJSONSchema()`.\n * Plain JSON Schema objects pass through with zero overhead.\n *\n * Zod is an **optional** peer dependency — loaded lazily at module init.\n * If Zod is not installed, Zod schemas pass through unconverted with a warning.\n *\n * @example\n * ```typescript\n * import { toJsonSchema } from '@classytic/arc/utils';\n *\n * // Zod v4 schema → auto-converted via z.toJSONSchema()\n * const schema = toJsonSchema(z.object({ name: z.string() }));\n *\n * // Plain JSON Schema → passes through as-is\n * const same = toJsonSchema({ type: 'object', properties: { name: { type: 'string' } } });\n * ```\n */\n\nimport type { OpenApiSchemas } from '../types/index.js';\n\n// ============================================================================\n// Lazy Zod Import — loaded once at module init, only if installed\n// ============================================================================\n\ntype ToJSONSchemaFn = (schema: unknown, opts?: unknown) => Record<string, unknown>;\nlet _toJSONSchema: ToJSONSchemaFn | null = null;\n\n// Fire-and-forget: resolve Zod at module load (async but non-blocking).\n// By the time any route handler calls toJsonSchema(), the promise will have settled.\n// Safe for both ESM and CJS (no top-level await).\nimport('zod')\n  .then(({ z }) => {\n    if (typeof z?.toJSONSchema === 'function') {\n      _toJSONSchema = (schema, opts) =>\n        // eslint-disable-next-line @typescript-eslint/no-explicit-any\n        z.toJSONSchema(schema as any, opts as any) as Record<string, unknown>;\n    }\n  })\n  .catch(() => {\n    // Zod not installed — schema conversion will pass through Zod objects as-is\n  });\n\n// ============================================================================\n// Detection — O(1) checks\n// ============================================================================\n\n/**\n * Check if an object is already a plain JSON Schema.\n * Returns true if it has JSON Schema markers (`type`, `properties`, `$ref`,\n * `allOf`, `anyOf`, `oneOf`, `items`, `enum`) and does NOT have Zod markers.\n */\nexport function isJsonSchema(input: unknown): input is Record<string, unknown> {\n  if (input === null || typeof input !== 'object') return false;\n  const obj = input as Record<string, unknown>;\n\n  // Zod markers — if present, this is a Zod schema, not JSON Schema\n  if ('_def' in obj || '_zod' in obj) return false;\n\n  // JSON Schema markers\n  return (\n    'type' in obj ||\n    'properties' in obj ||\n    '$ref' in obj ||\n    'allOf' in obj ||\n    'anyOf' in obj ||\n    'oneOf' in obj ||\n    'items' in obj ||\n    'enum' in obj\n  );\n}\n\n/**\n * Check if an object is a Zod schema (has `_zod` marker from Zod v4).\n */\nexport function isZodSchema(input: unknown): boolean {\n  return input !== null && typeof input === 'object' && '_zod' in (input as Record<string, unknown>);\n}\n\n// ============================================================================\n// Converter\n// ============================================================================\n\n/**\n * Convert any schema input to JSON Schema.\n *\n * Detection order:\n * 1. `null`/`undefined` → `undefined`\n * 2. Already JSON Schema → pass through as-is (zero overhead)\n * 3. Zod v4 schema → `z.toJSONSchema(schema, { target: 'openapi-3.0' })`\n * 4. Unrecognized object → return as-is (treat as opaque schema)\n */\nexport function toJsonSchema(input: unknown): Record<string, unknown> | undefined {\n  if (input == null) return undefined;\n  if (typeof input !== 'object') return undefined;\n\n  // Fast path: already a plain JSON Schema → passthrough\n  if (isJsonSchema(input)) return input as Record<string, unknown>;\n\n  // Zod v4 schema → native conversion\n  if (isZodSchema(input)) {\n    if (!_toJSONSchema) {\n      // Zod not installed but a Zod schema was passed — can't convert\n      console.warn(\n        '[Arc] Zod schema detected but zod is not installed. ' +\n        'Install zod v4: npm install zod'\n      );\n      return input as Record<string, unknown>;\n    }\n    try {\n      return _toJSONSchema(input, { target: 'openapi-3.0' });\n    } catch {\n      return { type: 'object' };\n    }\n  }\n\n  // Unrecognized — return as-is (don't break opaque schemas)\n  return input as Record<string, unknown>;\n}\n\n// ============================================================================\n// Batch Converters\n// ============================================================================\n\n/**\n * Convert all schema fields in an OpenApiSchemas object.\n * JSON Schema values pass through unchanged. Only Zod schemas are converted.\n */\nexport function convertOpenApiSchemas(schemas: OpenApiSchemas): OpenApiSchemas {\n  const result: OpenApiSchemas = {};\n  const schemaFields = ['entity', 'createBody', 'updateBody', 'params', 'listQuery', 'response'] as const;\n\n  for (const field of schemaFields) {\n    const value = schemas[field];\n    if (value !== undefined) {\n      result[field] = toJsonSchema(value) ?? value;\n    }\n  }\n\n  // Copy any extra fields as-is\n  for (const [key, value] of Object.entries(schemas)) {\n    if (!schemaFields.includes(key as typeof schemaFields[number])) {\n      result[key] = value;\n    }\n  }\n\n  return result;\n}\n\n/**\n * Convert schema values in a Fastify route schema record.\n *\n * Handles `body`, `querystring`, `params`, `headers` (top-level conversion)\n * and `response` (iterates by status code — each value converted individually).\n *\n * JSON Schema values pass through unchanged. Only Zod schemas are converted.\n *\n * Used for both additionalRoutes and customSchemas (CRUD overrides).\n */\nexport function convertRouteSchema(schema: Record<string, unknown>): Record<string, unknown> {\n  const result: Record<string, unknown> = { ...schema };\n\n  // Convert top-level schema fields (body, querystring, params, headers)\n  for (const field of ['body', 'querystring', 'params', 'headers'] as const) {\n    if (result[field] !== undefined) {\n      result[field] = toJsonSchema(result[field]) ?? result[field];\n    }\n  }\n\n  // Convert response schemas (keyed by status code, e.g. { 200: zodSchema, 201: zodSchema })\n  if (result.response !== undefined && typeof result.response === 'object' && result.response !== null) {\n    const responseObj = result.response as Record<string, unknown>;\n    const convertedResponse: Record<string, unknown> = {};\n    for (const [statusCode, responseSchema] of Object.entries(responseObj)) {\n      convertedResponse[statusCode] = toJsonSchema(responseSchema) ?? responseSchema;\n    }\n    result.response = convertedResponse;\n  }\n\n  return result;\n}\n"],"mappings":";AA4BA,IAAI,gBAAuC;AAK3C,OAAO,OACJ,MAAM,EAAE,QAAQ;AACf,KAAI,OAAO,GAAG,iBAAiB,WAC7B,kBAAiB,QAAQ,SAEvB,EAAE,aAAa,QAAe,KAAY;EAE9C,CACD,YAAY,GAEX;;;;;;AAWJ,SAAgB,aAAa,OAAkD;AAC7E,KAAI,UAAU,QAAQ,OAAO,UAAU,SAAU,QAAO;CACxD,MAAM,MAAM;AAGZ,KAAI,UAAU,OAAO,UAAU,IAAK,QAAO;AAG3C,QACE,UAAU,OACV,gBAAgB,OAChB,UAAU,OACV,WAAW,OACX,WAAW,OACX,WAAW,OACX,WAAW,OACX,UAAU;;;;;AAOd,SAAgB,YAAY,OAAyB;AACnD,QAAO,UAAU,QAAQ,OAAO,UAAU,YAAY,UAAW;;;;;;;;;;;AAgBnE,SAAgB,aAAa,OAAqD;AAChF,KAAI,SAAS,KAAM,QAAO;AAC1B,KAAI,OAAO,UAAU,SAAU,QAAO;AAGtC,KAAI,aAAa,MAAM,CAAE,QAAO;AAGhC,KAAI,YAAY,MAAM,EAAE;AACtB,MAAI,CAAC,eAAe;AAElB,WAAQ,KACN,sFAED;AACD,UAAO;;AAET,MAAI;AACF,UAAO,cAAc,OAAO,EAAE,QAAQ,eAAe,CAAC;UAChD;AACN,UAAO,EAAE,MAAM,UAAU;;;AAK7B,QAAO;;;;;;AAWT,SAAgB,sBAAsB,SAAyC;CAC7E,MAAM,SAAyB,EAAE;CACjC,MAAM,eAAe;EAAC;EAAU;EAAc;EAAc;EAAU;EAAa;EAAW;AAE9F,MAAK,MAAM,SAAS,cAAc;EAChC,MAAM,QAAQ,QAAQ;AACtB,MAAI,UAAU,OACZ,QAAO,SAAS,aAAa,MAAM,IAAI;;AAK3C,MAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,QAAQ,CAChD,KAAI,CAAC,aAAa,SAAS,IAAmC,CAC5D,QAAO,OAAO;AAIlB,QAAO;;;;;;;;;;;;AAaT,SAAgB,mBAAmB,QAA0D;CAC3F,MAAM,SAAkC,EAAE,GAAG,QAAQ;AAGrD,MAAK,MAAM,SAAS;EAAC;EAAQ;EAAe;EAAU;EAAU,CAC9D,KAAI,OAAO,WAAW,OACpB,QAAO,SAAS,aAAa,OAAO,OAAO,IAAI,OAAO;AAK1D,KAAI,OAAO,aAAa,UAAa,OAAO,OAAO,aAAa,YAAY,OAAO,aAAa,MAAM;EACpG,MAAM,cAAc,OAAO;EAC3B,MAAM,oBAA6C,EAAE;AACrD,OAAK,MAAM,CAAC,YAAY,mBAAmB,OAAO,QAAQ,YAAY,CACpE,mBAAkB,cAAc,aAAa,eAAe,IAAI;AAElE,SAAO,WAAW;;AAGpB,QAAO"}

package/dist/schemas/index.d.mts

@@ -0,0 +1,64 @@
+import * as _sinclair_typebox0 from "@sinclair/typebox";
+import { Static, TObject, TSchema, TSchema as TSchema$1, Type } from "@sinclair/typebox";
+import { FastifyPluginAsyncTypebox, FastifyPluginCallbackTypebox, TypeBoxTypeProvider, TypeBoxValidatorCompiler } from "@fastify/type-provider-typebox";
+
+//#region src/schemas/index.d.ts
+/**
+ * Paginated list response — matches Arc's runtime format:
+ * `{ success, docs: [...], page, limit, total, pages, hasNext, hasPrev }`
+ */
+declare function ArcListResponse<T extends TSchema$1>(itemSchema: T): _sinclair_typebox0.TObject<{
+  success: _sinclair_typebox0.TBoolean;
+  docs: _sinclair_typebox0.TArray<T>;
+  page: _sinclair_typebox0.TInteger;
+  limit: _sinclair_typebox0.TInteger;
+  total: _sinclair_typebox0.TInteger;
+  pages: _sinclair_typebox0.TInteger;
+  hasNext: _sinclair_typebox0.TBoolean;
+  hasPrev: _sinclair_typebox0.TBoolean;
+}>;
+/**
+ * Single item response — `{ success, data: {...} }`
+ */
+declare function ArcItemResponse<T extends TSchema$1>(itemSchema: T): _sinclair_typebox0.TObject<{
+  success: _sinclair_typebox0.TBoolean;
+  data: T;
+}>;
+/**
+ * Mutation (create/update) response — `{ success, data: {...}, message? }`
+ */
+declare function ArcMutationResponse<T extends TSchema$1>(itemSchema: T): _sinclair_typebox0.TObject<{
+  success: _sinclair_typebox0.TBoolean;
+  data: T;
+  message: _sinclair_typebox0.TOptional<_sinclair_typebox0.TString>;
+}>;
+/**
+ * Delete response — `{ success, message }`
+ */
+declare function ArcDeleteResponse(): _sinclair_typebox0.TObject<{
+  success: _sinclair_typebox0.TBoolean;
+  message: _sinclair_typebox0.TOptional<_sinclair_typebox0.TString>;
+}>;
+/**
+ * Error response schema
+ */
+declare function ArcErrorResponse(): _sinclair_typebox0.TObject<{
+  success: _sinclair_typebox0.TLiteral<false>;
+  error: _sinclair_typebox0.TString;
+  code: _sinclair_typebox0.TOptional<_sinclair_typebox0.TString>;
+  message: _sinclair_typebox0.TOptional<_sinclair_typebox0.TString>;
+}>;
+/**
+ * Standard pagination + sorting + filtering query parameters.
+ * Matches Arc's list endpoint conventions.
+ */
+declare function ArcPaginationQuery(): _sinclair_typebox0.TObject<{
+  page: _sinclair_typebox0.TOptional<_sinclair_typebox0.TInteger>;
+  limit: _sinclair_typebox0.TOptional<_sinclair_typebox0.TInteger>;
+  sort: _sinclair_typebox0.TOptional<_sinclair_typebox0.TString>;
+  select: _sinclair_typebox0.TOptional<_sinclair_typebox0.TString>;
+  populate: _sinclair_typebox0.TOptional<_sinclair_typebox0.TString>;
+}>;
+//#endregion
+export { ArcDeleteResponse, ArcErrorResponse, ArcItemResponse, ArcListResponse, ArcMutationResponse, ArcPaginationQuery, type FastifyPluginAsyncTypebox, type FastifyPluginCallbackTypebox, type Static, type TObject, type TSchema, Type, type TypeBoxTypeProvider, TypeBoxValidatorCompiler };
+//# sourceMappingURL=index.d.mts.map

package/dist/schemas/index.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.mts","names":[],"sources":["../../src/schemas/index.ts"],"mappings":";;;;;;;;;iBA+CgB,eAAA,WAA0B,SAAA,CAAA,CAAS,UAAA,EAAY,CAAA,sBAAC,OAAA;WAAA,kBAAA,CAAA,QAAA;;;;;;;;;AAgBhE;;;AAAA,iBAAgB,eAAA,WAA0B,SAAA,CAAA,CAAS,UAAA,EAAY,CAAA,sBAAC,OAAA;WAAA,kBAAA,CAAA,QAAA;;;;;;iBAUhD,mBAAA,WAA8B,SAAA,CAAA,CAAS,UAAA,EAAY,CAAA,sBAAC,OAAA;WAAA,kBAAA,CAAA,QAAA;;;;;;;iBAWpD,iBAAA,CAAA,sBAAiB,OAAA;WAAA,kBAAA,CAAA,QAAA;;;;;;iBAUjB,gBAAA,CAAA,sBAAgB,OAAA;WAAA,kBAAA,CAAA,QAAA;;;;;;;;;iBAiBhB,kBAAA,CAAA,sBAAkB,OAAA;qCAAA,kBAAA,CAAA,QAAA"}

package/dist/schemas/index.mjs

@@ -0,0 +1,83 @@
+import { Type, Type as Type$1 } from "@sinclair/typebox";
+import { TypeBoxValidatorCompiler } from "@fastify/type-provider-typebox";
+
+//#region src/schemas/index.ts
+/**
+* Paginated list response — matches Arc's runtime format:
+* `{ success, docs: [...], page, limit, total, pages, hasNext, hasPrev }`
+*/
+function ArcListResponse(itemSchema) {
+	return Type$1.Object({
+		success: Type$1.Boolean(),
+		docs: Type$1.Array(itemSchema),
+		page: Type$1.Integer(),
+		limit: Type$1.Integer(),
+		total: Type$1.Integer(),
+		pages: Type$1.Integer(),
+		hasNext: Type$1.Boolean(),
+		hasPrev: Type$1.Boolean()
+	});
+}
+/**
+* Single item response — `{ success, data: {...} }`
+*/
+function ArcItemResponse(itemSchema) {
+	return Type$1.Object({
+		success: Type$1.Boolean(),
+		data: itemSchema
+	});
+}
+/**
+* Mutation (create/update) response — `{ success, data: {...}, message? }`
+*/
+function ArcMutationResponse(itemSchema) {
+	return Type$1.Object({
+		success: Type$1.Boolean(),
+		data: itemSchema,
+		message: Type$1.Optional(Type$1.String())
+	});
+}
+/**
+* Delete response — `{ success, message }`
+*/
+function ArcDeleteResponse() {
+	return Type$1.Object({
+		success: Type$1.Boolean(),
+		message: Type$1.Optional(Type$1.String())
+	});
+}
+/**
+* Error response schema
+*/
+function ArcErrorResponse() {
+	return Type$1.Object({
+		success: Type$1.Literal(false),
+		error: Type$1.String(),
+		code: Type$1.Optional(Type$1.String()),
+		message: Type$1.Optional(Type$1.String())
+	});
+}
+/**
+* Standard pagination + sorting + filtering query parameters.
+* Matches Arc's list endpoint conventions.
+*/
+function ArcPaginationQuery() {
+	return Type$1.Object({
+		page: Type$1.Optional(Type$1.Integer({
+			minimum: 1,
+			default: 1
+		})),
+		limit: Type$1.Optional(Type$1.Integer({
+			minimum: 1,
+			maximum: 100,
+			default: 20
+		})),
+		sort: Type$1.Optional(Type$1.String()),
+		select: Type$1.Optional(Type$1.String()),
+		populate: Type$1.Optional(Type$1.String())
+	});
+}
+
+//#endregion
+export { ArcDeleteResponse, ArcErrorResponse, ArcItemResponse, ArcListResponse, ArcMutationResponse, ArcPaginationQuery, Type, TypeBoxValidatorCompiler };
+//# sourceMappingURL=index.mjs.map

package/dist/schemas/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","names":["Type"],"sources":["../../src/schemas/index.ts"],"sourcesContent":["/**\n * Arc Schema Utilities — TypeBox Integration\n *\n * Provides type-safe schema definitions for Fastify routes using TypeBox.\n * Install `@sinclair/typebox` and `@fastify/type-provider-typebox` to use.\n *\n * @example\n * ```typescript\n * import { Type, ArcListResponse, ArcPaginationQuery } from '@classytic/arc/schemas';\n *\n * const ItemSchema = Type.Object({\n *   _id: Type.String(),\n *   name: Type.String(),\n *   createdAt: Type.String({ format: 'date-time' }),\n * });\n *\n * // Use in route definitions\n * fastify.get('/items', {\n *   schema: {\n *     querystring: ArcPaginationQuery(),\n *     response: { 200: ArcListResponse(ItemSchema) },\n *   },\n * }, handler);\n * ```\n *\n * @module\n */\n\n// Re-export TypeBox core — users import Type from here instead of @sinclair/typebox directly\nexport { Type } from '@sinclair/typebox';\nexport type { Static, TSchema, TObject } from '@sinclair/typebox';\n\n// Re-export Fastify TypeBox type provider\nexport { TypeBoxValidatorCompiler } from '@fastify/type-provider-typebox';\nexport type { TypeBoxTypeProvider, FastifyPluginAsyncTypebox, FastifyPluginCallbackTypebox } from '@fastify/type-provider-typebox';\n\nimport { Type } from '@sinclair/typebox';\nimport type { TSchema } from '@sinclair/typebox';\n\n// ============================================================================\n// Arc Response Schemas (TypeBox versions of responseSchemas.ts)\n// ============================================================================\n\n/**\n * Paginated list response — matches Arc's runtime format:\n * `{ success, docs: [...], page, limit, total, pages, hasNext, hasPrev }`\n */\nexport function ArcListResponse<T extends TSchema>(itemSchema: T) {\n  return Type.Object({\n    success: Type.Boolean(),\n    docs: Type.Array(itemSchema),\n    page: Type.Integer(),\n    limit: Type.Integer(),\n    total: Type.Integer(),\n    pages: Type.Integer(),\n    hasNext: Type.Boolean(),\n    hasPrev: Type.Boolean(),\n  });\n}\n\n/**\n * Single item response — `{ success, data: {...} }`\n */\nexport function ArcItemResponse<T extends TSchema>(itemSchema: T) {\n  return Type.Object({\n    success: Type.Boolean(),\n    data: itemSchema,\n  });\n}\n\n/**\n * Mutation (create/update) response — `{ success, data: {...}, message? }`\n */\nexport function ArcMutationResponse<T extends TSchema>(itemSchema: T) {\n  return Type.Object({\n    success: Type.Boolean(),\n    data: itemSchema,\n    message: Type.Optional(Type.String()),\n  });\n}\n\n/**\n * Delete response — `{ success, message }`\n */\nexport function ArcDeleteResponse() {\n  return Type.Object({\n    success: Type.Boolean(),\n    message: Type.Optional(Type.String()),\n  });\n}\n\n/**\n * Error response schema\n */\nexport function ArcErrorResponse() {\n  return Type.Object({\n    success: Type.Literal(false),\n    error: Type.String(),\n    code: Type.Optional(Type.String()),\n    message: Type.Optional(Type.String()),\n  });\n}\n\n// ============================================================================\n// Arc Query Schemas\n// ============================================================================\n\n/**\n * Standard pagination + sorting + filtering query parameters.\n * Matches Arc's list endpoint conventions.\n */\nexport function ArcPaginationQuery() {\n  return Type.Object({\n    page: Type.Optional(Type.Integer({ minimum: 1, default: 1 })),\n    limit: Type.Optional(Type.Integer({ minimum: 1, maximum: 100, default: 20 })),\n    sort: Type.Optional(Type.String()),\n    select: Type.Optional(Type.String()),\n    populate: Type.Optional(Type.String()),\n  });\n}\n"],"mappings":";;;;;;;;AA+CA,SAAgB,gBAAmC,YAAe;AAChE,QAAOA,OAAK,OAAO;EACjB,SAASA,OAAK,SAAS;EACvB,MAAMA,OAAK,MAAM,WAAW;EAC5B,MAAMA,OAAK,SAAS;EACpB,OAAOA,OAAK,SAAS;EACrB,OAAOA,OAAK,SAAS;EACrB,OAAOA,OAAK,SAAS;EACrB,SAASA,OAAK,SAAS;EACvB,SAASA,OAAK,SAAS;EACxB,CAAC;;;;;AAMJ,SAAgB,gBAAmC,YAAe;AAChE,QAAOA,OAAK,OAAO;EACjB,SAASA,OAAK,SAAS;EACvB,MAAM;EACP,CAAC;;;;;AAMJ,SAAgB,oBAAuC,YAAe;AACpE,QAAOA,OAAK,OAAO;EACjB,SAASA,OAAK,SAAS;EACvB,MAAM;EACN,SAASA,OAAK,SAASA,OAAK,QAAQ,CAAC;EACtC,CAAC;;;;;AAMJ,SAAgB,oBAAoB;AAClC,QAAOA,OAAK,OAAO;EACjB,SAASA,OAAK,SAAS;EACvB,SAASA,OAAK,SAASA,OAAK,QAAQ,CAAC;EACtC,CAAC;;;;;AAMJ,SAAgB,mBAAmB;AACjC,QAAOA,OAAK,OAAO;EACjB,SAASA,OAAK,QAAQ,MAAM;EAC5B,OAAOA,OAAK,QAAQ;EACpB,MAAMA,OAAK,SAASA,OAAK,QAAQ,CAAC;EAClC,SAASA,OAAK,SAASA,OAAK,QAAQ,CAAC;EACtC,CAAC;;;;;;AAWJ,SAAgB,qBAAqB;AACnC,QAAOA,OAAK,OAAO;EACjB,MAAMA,OAAK,SAASA,OAAK,QAAQ;GAAE,SAAS;GAAG,SAAS;GAAG,CAAC,CAAC;EAC7D,OAAOA,OAAK,SAASA,OAAK,QAAQ;GAAE,SAAS;GAAG,SAAS;GAAK,SAAS;GAAI,CAAC,CAAC;EAC7E,MAAMA,OAAK,SAASA,OAAK,QAAQ,CAAC;EAClC,QAAQA,OAAK,SAASA,OAAK,QAAQ,CAAC;EACpC,UAAUA,OAAK,SAASA,OAAK,QAAQ,CAAC;EACvC,CAAC"}

package/dist/scope/index.d.mts

@@ -0,0 +1,22 @@
+import { a as AUTHENTICATED_SCOPE, c as getOrgId, d as hasOrgAccess, f as isAuthenticated, i as elevationPlugin, l as getOrgRoles, m as isMember, n as ElevationOptions, o as PUBLIC_SCOPE, p as isElevated, r as _default, s as RequestScope, t as ElevationEvent, u as getTeamId } from "../elevation-B_2dRLVP.mjs";
+import { FastifyReply, FastifyRequest } from "fastify";
+
+//#region src/scope/resolveOrgFromHeader.d.ts
+interface ResolveOrgFromHeaderOptions {
+  /** Header name (default: 'x-organization-id') */
+  header?: string;
+  /** Resolve user's membership in the org. Return roles or null if not a member. */
+  resolveMembership: (userId: string, orgId: string) => Promise<{
+    roles: string[];
+  } | null>;
+}
+/**
+ * Create a preHandler hook that resolves org scope from a header.
+ * Must run AFTER authentication so `request.user` is populated.
+ * If the header is present and user is a member, sets `request.scope` to `member`.
+ * If the header is absent, scope stays as-is (typically `authenticated`).
+ */
+declare function resolveOrgFromHeader(options: ResolveOrgFromHeaderOptions): (request: FastifyRequest, reply: FastifyReply) => Promise<void>;
+//#endregion
+export { AUTHENTICATED_SCOPE, type ElevationEvent, type ElevationOptions, PUBLIC_SCOPE, type RequestScope, type ResolveOrgFromHeaderOptions, _default as elevationPlugin, elevationPlugin as elevationPluginFn, getOrgId, getOrgRoles, getTeamId, hasOrgAccess, isAuthenticated, isElevated, isMember, resolveOrgFromHeader };
+//# sourceMappingURL=index.d.mts.map

package/dist/scope/index.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.mts","names":[],"sources":["../../src/scope/resolveOrgFromHeader.ts"],"mappings":";;;;UA2BiB,2BAAA;EAcN;EAZT,MAAA;EAaW;EAXX,iBAAA,GAAoB,MAAA,UAAgB,KAAA,aAAkB,OAAA;IAAU,KAAA;EAAA;AAAA;;;;;;;iBASlD,oBAAA,CACd,OAAA,EAAS,2BAAA,IACP,OAAA,EAAS,cAAA,EAAgB,KAAA,EAAO,YAAA,KAAiB,OAAA"}

package/dist/scope/index.mjs

@@ -0,0 +1,66 @@
+import { a as getTeamId, c as isElevated, i as getOrgRoles, l as isMember, n as PUBLIC_SCOPE, o as hasOrgAccess, r as getOrgId, s as isAuthenticated, t as AUTHENTICATED_SCOPE } from "../types-Beqn1Un7.mjs";
+import { n as elevation_default, t as elevationPlugin } from "../elevation-BRy3yFWT.mjs";
+
+//#region src/scope/resolveOrgFromHeader.ts
+/**
+* Create a preHandler hook that resolves org scope from a header.
+* Must run AFTER authentication so `request.user` is populated.
+* If the header is present and user is a member, sets `request.scope` to `member`.
+* If the header is absent, scope stays as-is (typically `authenticated`).
+*/
+function resolveOrgFromHeader(options) {
+	const { header = "x-organization-id", resolveMembership } = options;
+	return async (request, reply) => {
+		const orgId = request.headers[header];
+		if (!orgId) return;
+		const scope = request.scope;
+		if (!scope || scope.kind === "public") {
+			reply.code(401).send({
+				success: false,
+				error: "Unauthorized",
+				message: "Authentication required for organization access",
+				code: "ORG_AUTH_REQUIRED"
+			});
+			return;
+		}
+		if (scope.kind === "elevated") return;
+		const user = request.user;
+		if (!user) {
+			reply.code(401).send({
+				success: false,
+				error: "Unauthorized",
+				message: "Authentication required for organization access",
+				code: "ORG_AUTH_REQUIRED"
+			});
+			return;
+		}
+		const userId = String(user.id ?? user._id ?? "");
+		if (!userId) {
+			reply.code(401).send({
+				success: false,
+				error: "Unauthorized",
+				message: "User identity required for organization access"
+			});
+			return;
+		}
+		const membership = await resolveMembership(userId, orgId);
+		if (!membership) {
+			reply.code(403).send({
+				success: false,
+				error: "Forbidden",
+				message: "Not a member of this organization",
+				code: "ORG_ACCESS_DENIED"
+			});
+			return;
+		}
+		request.scope = {
+			kind: "member",
+			organizationId: orgId,
+			orgRoles: membership.roles
+		};
+	};
+}
+
+//#endregion
+export { AUTHENTICATED_SCOPE, PUBLIC_SCOPE, elevation_default as elevationPlugin, elevationPlugin as elevationPluginFn, getOrgId, getOrgRoles, getTeamId, hasOrgAccess, isAuthenticated, isElevated, isMember, resolveOrgFromHeader };
+//# sourceMappingURL=index.mjs.map

package/dist/scope/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","names":[],"sources":["../../src/scope/resolveOrgFromHeader.ts"],"sourcesContent":["/**\n * Resolve Org Scope from Header\n *\n * Utility hook for JWT/custom auth apps that use `x-organization-id` header\n * to select an organization. Better Auth apps don't need this — org context\n * comes from the session automatically.\n *\n * **Important:** This hook reads `request.user` and `request.scope`, which\n * are populated by the auth `preHandler`. Register it as a `preHandler`\n * (not `onRequest`) so it runs after authentication:\n *\n * @example\n * ```typescript\n * import { resolveOrgFromHeader } from '@classytic/arc/scope';\n *\n * app.addHook('preHandler', resolveOrgFromHeader({\n *   resolveMembership: async (userId, orgId) => {\n *     const member = await MemberModel.findOne({ userId, orgId });\n *     return member ? { roles: member.roles } : null;\n *   },\n * }));\n * ```\n */\n\nimport type { FastifyReply, FastifyRequest } from 'fastify';\nimport type { RequestScope } from './types.js';\n\nexport interface ResolveOrgFromHeaderOptions {\n  /** Header name (default: 'x-organization-id') */\n  header?: string;\n  /** Resolve user's membership in the org. Return roles or null if not a member. */\n  resolveMembership: (userId: string, orgId: string) => Promise<{ roles: string[] } | null>;\n}\n\n/**\n * Create a preHandler hook that resolves org scope from a header.\n * Must run AFTER authentication so `request.user` is populated.\n * If the header is present and user is a member, sets `request.scope` to `member`.\n * If the header is absent, scope stays as-is (typically `authenticated`).\n */\nexport function resolveOrgFromHeader(\n  options: ResolveOrgFromHeaderOptions,\n): (request: FastifyRequest, reply: FastifyReply) => Promise<void> {\n  const { header = 'x-organization-id', resolveMembership } = options;\n\n  return async (request: FastifyRequest, reply: FastifyReply): Promise<void> => {\n    const orgId = request.headers[header] as string | undefined;\n    if (!orgId) return; // No org header — scope stays as auth adapter set it\n\n    const scope = request.scope;\n    if (!scope || scope.kind === 'public') {\n      reply.code(401).send({\n        success: false,\n        error: 'Unauthorized',\n        message: 'Authentication required for organization access',\n        code: 'ORG_AUTH_REQUIRED',\n      });\n      return;\n    }\n\n    // Already elevated — don't downgrade\n    if (scope.kind === 'elevated') return;\n\n    const user = request.user;\n    if (!user) {\n      reply.code(401).send({\n        success: false,\n        error: 'Unauthorized',\n        message: 'Authentication required for organization access',\n        code: 'ORG_AUTH_REQUIRED',\n      });\n      return;\n    }\n\n    const userId = String(user.id ?? user._id ?? '');\n    if (!userId) {\n      reply.code(401).send({\n        success: false,\n        error: 'Unauthorized',\n        message: 'User identity required for organization access',\n      });\n      return;\n    }\n\n    const membership = await resolveMembership(userId, orgId);\n    if (!membership) {\n      reply.code(403).send({\n        success: false,\n        error: 'Forbidden',\n        message: 'Not a member of this organization',\n        code: 'ORG_ACCESS_DENIED',\n      });\n      return;\n    }\n\n    request.scope = {\n      kind: 'member',\n      organizationId: orgId,\n      orgRoles: membership.roles,\n    } satisfies RequestScope;\n  };\n}\n"],"mappings":";;;;;;;;;;AAwCA,SAAgB,qBACd,SACiE;CACjE,MAAM,EAAE,SAAS,qBAAqB,sBAAsB;AAE5D,QAAO,OAAO,SAAyB,UAAuC;EAC5E,MAAM,QAAQ,QAAQ,QAAQ;AAC9B,MAAI,CAAC,MAAO;EAEZ,MAAM,QAAQ,QAAQ;AACtB,MAAI,CAAC,SAAS,MAAM,SAAS,UAAU;AACrC,SAAM,KAAK,IAAI,CAAC,KAAK;IACnB,SAAS;IACT,OAAO;IACP,SAAS;IACT,MAAM;IACP,CAAC;AACF;;AAIF,MAAI,MAAM,SAAS,WAAY;EAE/B,MAAM,OAAO,QAAQ;AACrB,MAAI,CAAC,MAAM;AACT,SAAM,KAAK,IAAI,CAAC,KAAK;IACnB,SAAS;IACT,OAAO;IACP,SAAS;IACT,MAAM;IACP,CAAC;AACF;;EAGF,MAAM,SAAS,OAAO,KAAK,MAAM,KAAK,OAAO,GAAG;AAChD,MAAI,CAAC,QAAQ;AACX,SAAM,KAAK,IAAI,CAAC,KAAK;IACnB,SAAS;IACT,OAAO;IACP,SAAS;IACV,CAAC;AACF;;EAGF,MAAM,aAAa,MAAM,kBAAkB,QAAQ,MAAM;AACzD,MAAI,CAAC,YAAY;AACf,SAAM,KAAK,IAAI,CAAC,KAAK;IACnB,SAAS;IACT,OAAO;IACP,SAAS;IACT,MAAM;IACP,CAAC;AACF;;AAGF,UAAQ,QAAQ;GACd,MAAM;GACN,gBAAgB;GAChB,UAAU,WAAW;GACtB"}