@classytic/arc 1.1.0 → 2.1.3

package/dist/idempotency/redis.mjs

@@ -0,0 +1,103 @@
+//#region src/idempotency/stores/redis.ts
+var RedisIdempotencyStore = class {
+	name = "redis";
+	client;
+	prefix;
+	lockPrefix;
+	ttlMs;
+	constructor(options) {
+		this.client = options.client;
+		this.prefix = options.prefix ?? "idem:";
+		this.lockPrefix = options.lockPrefix ?? "idem:lock:";
+		this.ttlMs = options.ttlMs ?? 864e5;
+	}
+	resultKey(key) {
+		return `${this.prefix}${key}`;
+	}
+	lockKey(key) {
+		return `${this.lockPrefix}${key}`;
+	}
+	async get(key) {
+		const data = await this.client.get(this.resultKey(key));
+		if (!data) return void 0;
+		try {
+			const result = JSON.parse(data);
+			if (new Date(result.expiresAt) < /* @__PURE__ */ new Date()) {
+				await this.delete(key);
+				return;
+			}
+			return {
+				...result,
+				createdAt: new Date(result.createdAt),
+				expiresAt: new Date(result.expiresAt)
+			};
+		} catch {
+			return;
+		}
+	}
+	async set(key, result) {
+		const data = {
+			key,
+			...result
+		};
+		const ttlSeconds = Math.ceil((new Date(result.expiresAt).getTime() - Date.now()) / 1e3);
+		if (ttlSeconds > 0) await this.client.set(this.resultKey(key), JSON.stringify(data), { EX: ttlSeconds });
+	}
+	async tryLock(key, requestId, ttlMs) {
+		const ttlSeconds = Math.ceil(ttlMs / 1e3);
+		return await this.client.set(this.lockKey(key), requestId, {
+			EX: ttlSeconds,
+			NX: true
+		}) === "OK";
+	}
+	async unlock(key, requestId) {
+		if (await this.client.get(this.lockKey(key)) === requestId) await this.client.del(this.lockKey(key));
+	}
+	async isLocked(key) {
+		return await this.client.exists(this.lockKey(key)) > 0;
+	}
+	async delete(key) {
+		await this.client.del([this.resultKey(key), this.lockKey(key)]);
+	}
+	async deleteByPrefix(prefix) {
+		const resultKeys = await this.scanByPrefix(this.resultKey(prefix));
+		const lockKeys = await this.scanByPrefix(this.lockKey(prefix));
+		const allKeys = [...resultKeys, ...lockKeys];
+		if (allKeys.length === 0) return 0;
+		return this.client.del(allKeys);
+	}
+	async findByPrefix(prefix) {
+		const keys = await this.scanByPrefix(this.resultKey(prefix));
+		for (const key of keys) {
+			const data = await this.client.get(key);
+			if (!data) continue;
+			try {
+				const result = JSON.parse(data);
+				if (new Date(result.expiresAt) < /* @__PURE__ */ new Date()) continue;
+				return {
+					...result,
+					createdAt: new Date(result.createdAt),
+					expiresAt: new Date(result.expiresAt)
+				};
+			} catch {
+				continue;
+			}
+		}
+	}
+	/** Scan Redis keys matching a prefix pattern. Falls back to empty if SCAN unavailable. */
+	async scanByPrefix(prefix) {
+		if (!this.client.scan) return [];
+		const keys = [];
+		let cursor = "0";
+		do {
+			const [nextCursor, batch] = await this.client.scan(cursor, "MATCH", `${prefix}*`, "COUNT", 100);
+			cursor = nextCursor;
+			keys.push(...batch);
+		} while (String(cursor) !== "0");
+		return keys;
+	}
+	async close() {}
+};
+
+//#endregion
+export { RedisIdempotencyStore };

package/dist/index.d.mts

@@ -0,0 +1,260 @@
+import "./elevation-DGo5shaX.mjs";
+import { D as CrudRepository, E as defineResource, F as OperationFilter, I as PipelineConfig, L as PipelineContext, M as Guard, N as Interceptor, P as NextFunction, R as PipelineStep, S as RouteHandler, T as ResourceDefinition, _ as ControllerLike, a as RepositoryLike, b as IControllerResponse, c as BaseController, i as RelationMetadata, j as QueryOptions, k as PaginatedResult, l as BaseControllerOptions, n as DataAdapter, o as SchemaMetadata, r as FieldMetadata, s as ValidationResult, x as IRequestContext, y as IController, z as Transform } from "./interface-e9XfSsUV.mjs";
+import { a as applyFieldWritePermissions, i as applyFieldReadPermissions, n as FieldPermissionMap, o as fields, t as FieldPermission } from "./fields-Bi_AVKSo.mjs";
+import { i as UserBase, n as PermissionContext, r as PermissionResult, t as PermissionCheck } from "./types-RLkFVgaw.mjs";
+import { AdditionalRoute, AnyRecord, ApiResponse, ArcInternalMetadata, AuthPluginOptions, ConfigError, CrudController, CrudRouteKey, CrudRouterOptions, CrudSchemas, EventDefinition, FastifyRequestExtras, FastifyWithAuth, FastifyWithDecorators, FieldRule, GracefulShutdownOptions, HealthCheck, HealthOptions, InferAdapterDoc, InferDocType, InferResourceDoc, IntrospectionData, IntrospectionPluginOptions, JWTPayload, MiddlewareConfig, MiddlewareHandler, OwnershipCheck, PresetFunction, PresetResult, RateLimitConfig, RegistryEntry, RegistryStats, RequestContext, RequestIdOptions, RequestWithExtras, ResourceConfig, ResourceMetadata, RouteHandlerMethod, RouteSchemaOptions, ServiceContext, TypedController, TypedRepository, TypedResourceConfig, UserOrganization, ValidateOptions, ValidationResult as ValidationResult$1 } from "./types/index.mjs";
+import { c as MongooseAdapterOptions, l as createMongooseAdapter, n as PrismaAdapterOptions, o as createPrismaAdapter, s as MongooseAdapter, t as PrismaAdapter } from "./prisma-C3iornoK.mjs";
+import "./adapters/index.mjs";
+import { C as MutationOperation, S as MUTATION_OPERATIONS, T as SYSTEM_FIELDS, _ as HookOperation, a as getControllerScope, b as MAX_REGEX_LENGTH, c as CrudOperation, d as DEFAULT_MAX_LIMIT, f as DEFAULT_SORT, g as HOOK_PHASES, h as HOOK_OPERATIONS, l as DEFAULT_ID_FIELD, m as DEFAULT_UPDATE_METHOD, p as DEFAULT_TENANT_FIELD, s as CRUD_OPERATIONS, u as DEFAULT_LIMIT, v as HookPhase, w as RESERVED_QUERY_PARAMS, x as MAX_SEARCH_LENGTH, y as MAX_FILTER_DEPTH } from "./fastifyAdapter-C8DlE0YH.mjs";
+import "./core/index.mjs";
+import { a as NotFoundError, d as ValidationError, i as ForbiddenError, t as ArcError, u as UnauthorizedError } from "./errors-DAWRdiYP.mjs";
+import { a as presets_d_exports, c as readOnly, i as ownerWithAdminBypass, n as authenticated, o as publicRead, r as fullPublic, s as publicReadAdminWrite, t as adminOnly } from "./presets-BTeYbw7h.mjs";
+import { DynamicPermissionMatrix, DynamicPermissionMatrixConfig, allOf, allowPublic, anyOf, createDynamicPermissionMatrix, createOrgPermissions, denyAll, requireAuth, requireOrgMembership, requireOrgRole, requireOwnership, requireRoles, requireTeamMembership, when } from "./permissions/index.mjs";
+import { AsyncLocalStorage } from "node:async_hooks";
+
+//#region src/core/validateResourceConfig.d.ts
+interface ConfigError$1 {
+  field: string;
+  message: string;
+  suggestion?: string;
+}
+interface ValidationResult$2 {
+  valid: boolean;
+  errors: ConfigError$1[];
+  warnings: ConfigError$1[];
+}
+interface ValidateOptions$1 {
+  /** Skip controller method validation (for testing) */
+  skipControllerCheck?: boolean;
+  /** Allow unknown preset names */
+  allowUnknownPresets?: boolean;
+  /** Custom valid permission keys beyond CRUD */
+  additionalPermissionKeys?: string[];
+}
+/**
+ * Validate a resource configuration
+ */
+declare function validateResourceConfig(config: ResourceConfig, options?: ValidateOptions$1): ValidationResult$2;
+/**
+ * Format validation errors for display
+ */
+declare function formatValidationErrors(resourceName: string, result: ValidationResult$2): string;
+/**
+ * Validate and throw if invalid
+ */
+declare function assertValidConfig(config: ResourceConfig, options?: ValidateOptions$1): void;
+//#endregion
+//#region src/pipeline/guard.d.ts
+interface GuardOptions {
+  operations?: OperationFilter;
+  handler: (ctx: PipelineContext) => boolean | Promise<boolean>;
+}
+/**
+ * Create a named guard.
+ *
+ * @param name - Guard name (for debugging/introspection)
+ * @param handlerOrOptions - Handler function or options object
+ */
+declare function guard(name: string, handlerOrOptions: ((ctx: PipelineContext) => boolean | Promise<boolean>) | GuardOptions): Guard;
+//#endregion
+//#region src/pipeline/transform.d.ts
+interface TransformOptions {
+  operations?: OperationFilter;
+  handler: (ctx: PipelineContext) => PipelineContext | void | Promise<PipelineContext | void>;
+}
+/**
+ * Create a named transform.
+ *
+ * @param name - Transform name (for debugging/introspection)
+ * @param handlerOrOptions - Handler function or options object
+ */
+declare function transform(name: string, handlerOrOptions: ((ctx: PipelineContext) => PipelineContext | void | Promise<PipelineContext | void>) | TransformOptions): Transform;
+//#endregion
+//#region src/pipeline/intercept.d.ts
+interface InterceptOptions {
+  operations?: OperationFilter;
+  handler: (ctx: PipelineContext, next: NextFunction) => Promise<IControllerResponse<unknown>>;
+}
+/**
+ * Create a named interceptor.
+ *
+ * @param name - Interceptor name (for debugging/introspection)
+ * @param handlerOrOptions - Handler function or options object
+ */
+declare function intercept(name: string, handlerOrOptions: ((ctx: PipelineContext, next: NextFunction) => Promise<IControllerResponse<unknown>>) | InterceptOptions): Interceptor;
+//#endregion
+//#region src/pipeline/pipe.d.ts
+/**
+ * Compose pipeline steps into an ordered array.
+ * Accepts guards, transforms, and interceptors in any order.
+ */
+declare function pipe(...steps: PipelineStep[]): PipelineStep[];
+//#endregion
+//#region src/middleware/middleware.d.ts
+interface NamedMiddleware {
+  /** Unique name for debugging/introspection */
+  readonly name: string;
+  /** Operations this middleware applies to (default: all) */
+  readonly operations?: Array<'list' | 'get' | 'create' | 'update' | 'delete' | string>;
+  /** Priority — lower numbers run first (default: 10) */
+  readonly priority: number;
+  /** Conditional execution — return true to run, false to skip */
+  readonly when?: (request: RequestWithExtras) => boolean | Promise<boolean>;
+  /** The middleware handler */
+  readonly handler: MiddlewareHandler;
+}
+interface MiddlewareOptions {
+  operations?: NamedMiddleware['operations'];
+  priority?: number;
+  when?: NamedMiddleware['when'];
+  handler: MiddlewareHandler;
+}
+/**
+ * Create a named middleware with priority and conditions.
+ */
+declare function middleware(name: string, options: MiddlewareOptions): NamedMiddleware;
+/**
+ * Sort named middlewares by priority (ascending — lower runs first).
+ * Returns a MiddlewareConfig map keyed by operation, ready to pass to `defineResource()`.
+ */
+declare function sortMiddlewares(middlewares: NamedMiddleware[]): MiddlewareConfig;
+//#endregion
+//#region src/context/requestContext.d.ts
+/**
+ * Shape of the request-scoped context store.
+ * Populated by Arc's onRequest hook in arcCorePlugin.
+ */
+interface RequestStore {
+  /** Unique request identifier */
+  requestId?: string;
+  /** Authenticated user (if any) */
+  user?: {
+    id?: string;
+    _id?: string;
+    roles?: string[];
+    [key: string]: unknown;
+  } | null;
+  /** Active organization ID (multi-tenant) */
+  organizationId?: string;
+  /** Active team ID (team-scoped resources) */
+  teamId?: string;
+  /** Current resource name (set by arcDecorator in CRUD routes) */
+  resourceName?: string;
+  /** Request start time (for timing) */
+  startTime: number;
+  /** Additional context — extensible by app */
+  [key: string]: unknown;
+}
+/**
+ * Request context API.
+ *
+ * - `get()` — returns current store or undefined if outside request scope
+ * - `run(store, fn)` — run a function with a specific store (used by Arc internals)
+ * - `getStore()` — alias for get() (matches Node.js API naming)
+ */
+declare const requestContext: {
+  /**
+   * Get the current request context.
+   * Returns undefined if called outside a request lifecycle.
+   */
+  get(): RequestStore | undefined;
+  /**
+   * Alias for get() — matches Node.js AsyncLocalStorage API naming.
+   */
+  getStore(): RequestStore | undefined;
+  /**
+   * Run a function within a specific request context.
+   * Used internally by Arc's onRequest hook.
+   */
+  run<T>(store: RequestStore, fn: () => T): T;
+  /**
+   * The underlying AsyncLocalStorage instance.
+   * Exposed for advanced use cases (testing, custom integrations).
+   */
+  storage: AsyncLocalStorage<RequestStore>;
+};
+//#endregion
+//#region src/logger/index.d.ts
+/**
+ * Arc Logger — Centralized debug & warning system
+ *
+ * Lightweight, zero-dependency logger for Arc framework internals.
+ * Inspired by the `debug` npm package — disabled by default, opt-in via
+ * environment variable or `createApp({ debug })` option.
+ *
+ * @example
+ * ```typescript
+ * // Enable via env var
+ * ARC_DEBUG=1 node server.js        // all modules
+ * ARC_DEBUG=scope,elevation node server.js // specific modules
+ *
+ * // Enable via createApp
+ * const app = await createApp({ debug: true });
+ * const app = await createApp({ debug: 'scope,elevation' });
+ *
+ * // Suppress warnings (not recommended)
+ * ARC_SUPPRESS_WARNINGS=1 node server.js
+ *
+ * // Framework internals use:
+ * import { arcLog } from '../logger/index.js';
+ * const log = arcLog('elevation');
+ * log.debug('Elevation applied', { userId });
+ * log.warn('Something unexpected');
+ * ```
+ */
+interface ArcLoggerOptions {
+  /**
+   * Enable debug output.
+   * - `true` or `'*'` — all modules
+   * - `string` — comma-separated module names (e.g., `'scope,elevation'`)
+   * - `false` — disabled (default)
+   */
+  debug?: boolean | string;
+  /**
+   * Custom log writer. Defaults to `console`.
+   * Useful for routing Arc logs into Fastify's pino logger or test fixtures.
+   */
+  writer?: ArcLogWriter;
+}
+interface ArcLogWriter {
+  debug: (...args: unknown[]) => void;
+  info: (...args: unknown[]) => void;
+  warn: (...args: unknown[]) => void;
+  error: (...args: unknown[]) => void;
+}
+interface ArcLogger {
+  debug: (...args: unknown[]) => void;
+  info: (...args: unknown[]) => void;
+  warn: (...args: unknown[]) => void;
+  error: (...args: unknown[]) => void;
+}
+/**
+ * Configure the Arc logger globally.
+ *
+ * Called automatically by `createApp({ debug })`, but can also be
+ * called manually for standalone usage outside of `createApp`.
+ */
+declare function configureArcLogger(options: ArcLoggerOptions): void;
+/**
+ * Create a module-scoped logger.
+ *
+ * Debug and info messages are gated by the `ARC_DEBUG` env var or
+ * `createApp({ debug })` option. Warnings always show (unless
+ * `ARC_SUPPRESS_WARNINGS=1`). Errors always show.
+ *
+ * @param module - Module name (e.g., 'scope', 'elevation', 'sse', 'preset')
+ * @returns Logger instance for that module
+ *
+ * @example
+ * ```typescript
+ * const log = arcLog('elevation');
+ * log.debug('Checking elevation header');
+ * log.warn('No authenticate decorator found');
+ * ```
+ */
+declare function arcLog(module: string): ArcLogger;
+//#endregion
+//#region src/index.d.ts
+declare const version: string;
+//#endregion
+export { type ValidationResult as AdapterValidationResult, type AdditionalRoute, type AnyRecord, type ApiResponse, ArcError, type ArcInternalMetadata, type ArcLogWriter, type ArcLogger, type ArcLoggerOptions, type AuthPluginOptions, BaseController, type BaseControllerOptions, CRUD_OPERATIONS, type ConfigError, type ControllerLike, type CrudController, CrudOperation, type CrudRepository, type CrudRouteKey, type CrudRouterOptions, type CrudSchemas, DEFAULT_ID_FIELD, DEFAULT_LIMIT, DEFAULT_MAX_LIMIT, DEFAULT_SORT, DEFAULT_TENANT_FIELD, DEFAULT_UPDATE_METHOD, type DataAdapter, type DynamicPermissionMatrix, type DynamicPermissionMatrixConfig, type EventDefinition, type FastifyRequestExtras, type FastifyWithAuth, type FastifyWithDecorators, type FieldMetadata, type FieldPermission, type FieldPermissionMap, type FieldRule, ForbiddenError, type GracefulShutdownOptions, type Guard, HOOK_OPERATIONS, HOOK_PHASES, type HealthCheck, type HealthOptions, HookOperation, HookPhase, type IController, type IControllerResponse, type IRequestContext, type InferAdapterDoc, type InferDocType, type InferResourceDoc, type Interceptor, type IntrospectionData, type IntrospectionPluginOptions, type JWTPayload, MAX_FILTER_DEPTH, MAX_REGEX_LENGTH, MAX_SEARCH_LENGTH, MUTATION_OPERATIONS, type MiddlewareConfig, MongooseAdapter, type MongooseAdapterOptions, MutationOperation, type NamedMiddleware, NotFoundError, type OwnershipCheck, type PaginatedResult, type PermissionCheck, type PermissionContext, type PermissionResult, type PipelineConfig, type PipelineContext, type PipelineStep, type PresetFunction, type PresetResult, PrismaAdapter, type PrismaAdapterOptions, type QueryOptions, RESERVED_QUERY_PARAMS, type RateLimitConfig, type RegistryEntry, type RegistryStats, type RelationMetadata, type RepositoryLike, type RequestContext, type RequestIdOptions, type RequestStore, type RequestWithExtras, type ResourceConfig, ResourceDefinition, type ResourceMetadata, type RouteHandler, type RouteHandlerMethod, type RouteSchemaOptions, SYSTEM_FIELDS, type SchemaMetadata, type ServiceContext, type Transform, type TypedController, type TypedRepository, type TypedResourceConfig, UnauthorizedError, type UserBase, type UserOrganization, type ValidateOptions, ValidationError, type ValidationResult$1 as ValidationResult, adminOnly, allOf, allowPublic, anyOf, applyFieldReadPermissions, applyFieldWritePermissions, arcLog, assertValidConfig, authenticated, configureArcLogger, createDynamicPermissionMatrix, createMongooseAdapter, createOrgPermissions, createPrismaAdapter, defineResource, denyAll, fields, formatValidationErrors, fullPublic, getControllerScope, guard, intercept, middleware, ownerWithAdminBypass, presets_d_exports as permissions, pipe, publicRead, publicReadAdminWrite, readOnly, requestContext, requireAuth, requireOrgMembership, requireOrgRole, requireOwnership, requireRoles, requireTeamMembership, sortMiddlewares, transform, validateResourceConfig, version, when };

package/dist/index.mjs

@@ -0,0 +1,104 @@
+import { a as DEFAULT_SORT, c as HOOK_OPERATIONS, d as MAX_REGEX_LENGTH, f as MAX_SEARCH_LENGTH, h as SYSTEM_FIELDS, i as DEFAULT_MAX_LIMIT, l as HOOK_PHASES, m as RESERVED_QUERY_PARAMS, n as DEFAULT_ID_FIELD, o as DEFAULT_TENANT_FIELD, p as MUTATION_OPERATIONS, r as DEFAULT_LIMIT, s as DEFAULT_UPDATE_METHOD, t as CRUD_OPERATIONS, u as MAX_FILTER_DEPTH } from "./constants-DdXFXQtN.mjs";
+import { a as createMongooseAdapter, i as MongooseAdapter, r as createPrismaAdapter, t as PrismaAdapter } from "./prisma-DJbMt3yf.mjs";
+import { a as validateResourceConfig, g as BaseController, i as formatValidationErrors, l as pipe, m as getControllerScope, n as defineResource, r as assertValidConfig, t as ResourceDefinition } from "./defineResource-PXzSJ15_.mjs";
+import { n as applyFieldWritePermissions, r as fields, t as applyFieldReadPermissions } from "./fields-CTd_CrKr.mjs";
+import { i as NotFoundError, l as UnauthorizedError, r as ForbiddenError, t as ArcError, u as ValidationError } from "./errors-DBANPbGr.mjs";
+import { t as requestContext } from "./requestContext-xi6OKBL-.mjs";
+import { a as presets_exports, c as readOnly, i as ownerWithAdminBypass, n as authenticated, o as publicRead, r as fullPublic, s as publicReadAdminWrite, t as adminOnly } from "./presets-CeFtfDR8.mjs";
+import { allOf, allowPublic, anyOf, createDynamicPermissionMatrix, createOrgPermissions, denyAll, requireAuth, requireOrgMembership, requireOrgRole, requireOwnership, requireRoles, requireTeamMembership, when } from "./permissions/index.mjs";
+import { n as configureArcLogger, t as arcLog } from "./logger-ByrvQWZO.mjs";
+
+//#region src/pipeline/guard.ts
+/**
+* Create a named guard.
+*
+* @param name - Guard name (for debugging/introspection)
+* @param handlerOrOptions - Handler function or options object
+*/
+function guard(name, handlerOrOptions) {
+	const opts = typeof handlerOrOptions === "function" ? { handler: handlerOrOptions } : handlerOrOptions;
+	return {
+		_type: "guard",
+		name,
+		operations: opts.operations,
+		handler: opts.handler
+	};
+}
+
+//#endregion
+//#region src/pipeline/transform.ts
+/**
+* Create a named transform.
+*
+* @param name - Transform name (for debugging/introspection)
+* @param handlerOrOptions - Handler function or options object
+*/
+function transform(name, handlerOrOptions) {
+	const opts = typeof handlerOrOptions === "function" ? { handler: handlerOrOptions } : handlerOrOptions;
+	return {
+		_type: "transform",
+		name,
+		operations: opts.operations,
+		handler: opts.handler
+	};
+}
+
+//#endregion
+//#region src/pipeline/intercept.ts
+/**
+* Create a named interceptor.
+*
+* @param name - Interceptor name (for debugging/introspection)
+* @param handlerOrOptions - Handler function or options object
+*/
+function intercept(name, handlerOrOptions) {
+	const opts = typeof handlerOrOptions === "function" ? { handler: handlerOrOptions } : handlerOrOptions;
+	return {
+		_type: "interceptor",
+		name,
+		operations: opts.operations,
+		handler: opts.handler
+	};
+}
+
+//#endregion
+//#region src/middleware/middleware.ts
+/**
+* Create a named middleware with priority and conditions.
+*/
+function middleware(name, options) {
+	return {
+		name,
+		operations: options.operations,
+		priority: options.priority ?? 10,
+		when: options.when,
+		handler: options.handler
+	};
+}
+/**
+* Sort named middlewares by priority (ascending — lower runs first).
+* Returns a MiddlewareConfig map keyed by operation, ready to pass to `defineResource()`.
+*/
+function sortMiddlewares(middlewares) {
+	const sorted = [...middlewares].sort((a, b) => a.priority - b.priority);
+	const operations = CRUD_OPERATIONS;
+	const result = {};
+	for (const op of operations) {
+		const applicable = sorted.filter((m) => !m.operations || m.operations.length === 0 || m.operations.includes(op));
+		if (applicable.length > 0) result[op] = applicable.map((m) => {
+			if (!m.when) return m.handler;
+			const wrapped = async (request, reply) => {
+				if (await m.when(request)) return m.handler(request, reply);
+			};
+			return wrapped;
+		});
+	}
+	return result;
+}
+
+//#endregion
+//#region src/index.ts
+const version = "__ARC_VERSION__";
+
+//#endregion
+export { ArcError, BaseController, CRUD_OPERATIONS, DEFAULT_ID_FIELD, DEFAULT_LIMIT, DEFAULT_MAX_LIMIT, DEFAULT_SORT, DEFAULT_TENANT_FIELD, DEFAULT_UPDATE_METHOD, ForbiddenError, HOOK_OPERATIONS, HOOK_PHASES, MAX_FILTER_DEPTH, MAX_REGEX_LENGTH, MAX_SEARCH_LENGTH, MUTATION_OPERATIONS, MongooseAdapter, NotFoundError, PrismaAdapter, RESERVED_QUERY_PARAMS, ResourceDefinition, SYSTEM_FIELDS, UnauthorizedError, ValidationError, adminOnly, allOf, allowPublic, anyOf, applyFieldReadPermissions, applyFieldWritePermissions, arcLog, assertValidConfig, authenticated, configureArcLogger, createDynamicPermissionMatrix, createMongooseAdapter, createOrgPermissions, createPrismaAdapter, defineResource, denyAll, fields, formatValidationErrors, fullPublic, getControllerScope, guard, intercept, middleware, ownerWithAdminBypass, presets_exports as permissions, pipe, publicRead, publicReadAdminWrite, readOnly, requestContext, requireAuth, requireOrgMembership, requireOrgRole, requireOwnership, requireRoles, requireTeamMembership, sortMiddlewares, transform, validateResourceConfig, version, when };

package/dist/integrations/event-gateway.d.mts

@@ -0,0 +1,46 @@
+import { t as DomainEvent } from "../EventTransport-BkUDYZEb.mjs";
+import { WebSocketClient, WebSocketMessage } from "./websocket.mjs";
+import { FastifyPluginAsync, FastifyRequest } from "fastify";
+
+//#region src/integrations/event-gateway.d.ts
+interface EventGatewayOptions {
+  /** Require auth for all real-time connections (default: true) */
+  auth?: boolean;
+  /** Custom auth function for WebSocket upgrade */
+  authenticate?: (request: unknown) => Promise<{
+    userId?: string;
+    organizationId?: string;
+  } | null>;
+  /** Filter events by org from request.scope (default: false) */
+  orgScoped?: boolean;
+  /** Room/subscription authorization policy */
+  roomPolicy?: (client: {
+    userId?: string;
+    organizationId?: string;
+  }, room: string) => boolean | Promise<boolean>;
+  /** Max message size from WS clients in bytes (default: 16384) */
+  maxMessageBytes?: number;
+  /** Max subscriptions per client (default: 100) */
+  maxSubscriptionsPerClient?: number;
+  /** SSE config. Set false to disable SSE. */
+  sse?: false | {
+    path?: string;
+    patterns?: string[];
+    heartbeat?: number;
+    filter?: (event: DomainEvent<unknown>, request: FastifyRequest) => boolean;
+  };
+  /** WebSocket config. Set false to disable WebSocket. */
+  ws?: false | {
+    path?: string;
+    resources?: string[];
+    heartbeatInterval?: number;
+    maxClientsPerRoom?: number;
+    exposeStats?: boolean | "authenticated";
+    onMessage?: (client: WebSocketClient, message: WebSocketMessage) => void | Promise<void>;
+    onConnect?: (client: WebSocketClient) => void | Promise<void>;
+    onDisconnect?: (client: WebSocketClient) => void | Promise<void>;
+  };
+}
+declare const eventGatewayPlugin: FastifyPluginAsync<EventGatewayOptions>;
+//#endregion
+export { EventGatewayOptions, eventGatewayPlugin as default, eventGatewayPlugin };

package/dist/integrations/event-gateway.mjs

@@ -0,0 +1,43 @@
+import fp from "fastify-plugin";
+
+//#region src/integrations/event-gateway.ts
+const eventGatewayPluginImpl = async (fastify, opts = {}) => {
+	const { auth = true, orgScoped = false, roomPolicy, maxMessageBytes, maxSubscriptionsPerClient, authenticate } = opts;
+	if (auth && !authenticate && !fastify.hasDecorator("authenticate")) throw new Error("[arc-event-gateway] auth is true but fastify.authenticate is not registered. Register an auth plugin first, provide a custom authenticate function, or set auth: false.");
+	if (opts.sse !== false) {
+		const { default: ssePlugin } = await import("../sse-DkqQ1uxb.mjs").then((n) => n.r);
+		await fastify.register(ssePlugin, {
+			path: opts.sse?.path ?? "/events/stream",
+			requireAuth: auth,
+			patterns: opts.sse?.patterns ?? ["*"],
+			heartbeat: opts.sse?.heartbeat ?? 3e4,
+			orgScoped,
+			filter: opts.sse?.filter
+		});
+	}
+	if (opts.ws !== false) {
+		const { websocketPlugin } = await import("./websocket.mjs");
+		await fastify.register(websocketPlugin, {
+			path: opts.ws?.path ?? "/ws",
+			auth,
+			authenticate,
+			resources: opts.ws?.resources ?? [],
+			heartbeatInterval: opts.ws?.heartbeatInterval ?? 3e4,
+			maxClientsPerRoom: opts.ws?.maxClientsPerRoom,
+			roomPolicy,
+			maxMessageBytes,
+			maxSubscriptionsPerClient,
+			exposeStats: opts.ws?.exposeStats,
+			onMessage: opts.ws?.onMessage,
+			onConnect: opts.ws?.onConnect,
+			onDisconnect: opts.ws?.onDisconnect
+		});
+	}
+};
+const eventGatewayPlugin = fp(eventGatewayPluginImpl, {
+	name: "arc-event-gateway",
+	fastify: "5.x"
+});
+
+//#endregion
+export { eventGatewayPlugin as default, eventGatewayPlugin };

package/dist/integrations/index.d.mts

@@ -0,0 +1,5 @@
+import { WebSocketClient, WebSocketMessage, WebSocketPluginOptions } from "./websocket.mjs";
+import { EventGatewayOptions } from "./event-gateway.mjs";
+import { StreamlinePluginOptions, WorkflowLike, WorkflowRunLike } from "./streamline.mjs";
+import { JobDefinition, JobDispatchOptions, JobDispatcher, JobMeta, JobsPluginOptions, QueueStats } from "./jobs.mjs";
+export { type EventGatewayOptions, type JobDefinition, type JobDispatchOptions, type JobDispatcher, type JobMeta, type JobsPluginOptions, type QueueStats, type StreamlinePluginOptions, type WebSocketClient, type WebSocketMessage, type WebSocketPluginOptions, type WorkflowLike, type WorkflowRunLike };

package/dist/integrations/index.mjs

@@ -0,0 +1 @@
+export {  };

package/dist/integrations/jobs.d.mts

@@ -0,0 +1,103 @@
+import { FastifyPluginAsync } from "fastify";
+
+//#region src/integrations/jobs.d.ts
+interface JobDefinition<TData = unknown, TResult = unknown> {
+  /** Unique job name */
+  name: string;
+  /** Job handler function */
+  handler: (data: TData, meta: JobMeta) => Promise<TResult>;
+  /** Number of retries on failure (default: 3) */
+  retries?: number;
+  /** Backoff strategy */
+  backoff?: {
+    type: 'exponential' | 'fixed';
+    delay: number;
+  };
+  /** Job timeout in ms (default: 30000) */
+  timeout?: number;
+  /** Concurrency per worker (default: 1) */
+  concurrency?: number;
+  /** Rate limit: max jobs per duration */
+  rateLimit?: {
+    max: number;
+    duration: number;
+  };
+  /** Dead letter queue name (default: '{name}:dead') */
+  deadLetterQueue?: string;
+}
+interface JobMeta {
+  jobId: string;
+  attemptsMade: number;
+  timestamp: number;
+}
+interface JobDispatchOptions {
+  /** Delay job execution by ms */
+  delay?: number;
+  /** Job priority (lower = higher priority) */
+  priority?: number;
+  /** Unique job ID (for deduplication) */
+  jobId?: string;
+  /** Remove job after completion */
+  removeOnComplete?: boolean | number;
+  /** Remove job after failure */
+  removeOnFail?: boolean | number;
+}
+interface JobsPluginOptions {
+  /** Redis connection options (passed to BullMQ) */
+  connection: {
+    host: string;
+    port: number;
+    password?: string;
+    db?: number;
+  } | unknown;
+  /** Job definitions to register */
+  jobs: JobDefinition[];
+  /** URL prefix for job management endpoints (default: '/jobs') */
+  prefix?: string;
+  /** Bridge job events to Arc's event bus (default: true) */
+  bridgeEvents?: boolean;
+  /** Default job options applied to all jobs */
+  defaults?: {
+    retries?: number;
+    backoff?: {
+      type: 'exponential' | 'fixed';
+      delay: number;
+    };
+    timeout?: number;
+    removeOnComplete?: boolean | number;
+    removeOnFail?: boolean | number;
+  };
+}
+interface JobDispatcher {
+  dispatch<TData = unknown>(name: string, data: TData, options?: JobDispatchOptions): Promise<{
+    jobId: string;
+  }>;
+  getQueue(name: string): unknown | null;
+  getStats(): Promise<Record<string, QueueStats>>;
+  close(): Promise<void>;
+}
+interface QueueStats {
+  waiting: number;
+  active: number;
+  completed: number;
+  failed: number;
+  delayed: number;
+}
+/**
+ * Define a background job with typed data and configuration.
+ *
+ * @example
+ * const processImage = defineJob({
+ *   name: 'process-image',
+ *   handler: async (data: { url: string; width: number }) => {
+ *     return await sharp(data.url).resize(data.width).toBuffer();
+ *   },
+ *   retries: 3,
+ *   timeout: 60000,
+ * });
+ */
+declare function defineJob<TData = unknown, TResult = unknown>(definition: JobDefinition<TData, TResult>): JobDefinition<TData, TResult>;
+/** Pluggable BullMQ job queue integration for Arc */
+declare const jobsPlugin: FastifyPluginAsync<JobsPluginOptions>;
+//#endregion
+export { JobDefinition, JobDispatchOptions, JobDispatcher, JobMeta, JobsPluginOptions, QueueStats, jobsPlugin as default, jobsPlugin, defineJob };