@classytic/arc 2.1.2 → 2.1.3

package/dist/{EventTransport-BD2U0BTc.d.mts → EventTransport-BkUDYZEb.d.mts}

@@ -96,5 +96,4 @@ declare class MemoryEventTransport implements EventTransport {
  */
 declare function createEvent<T>(type: string, payload: T, meta?: Partial<DomainEvent['meta']>): DomainEvent<T>;
 //#endregion
-export { MemoryEventTransport as a, EventTransport as i, EventHandler as n, MemoryEventTransportOptions as o, EventLogger as r, createEvent as s, DomainEvent as t };
-//# sourceMappingURL=EventTransport-BD2U0BTc.d.mts.map
+export { MemoryEventTransport as a, EventTransport as i, EventHandler as n, MemoryEventTransportOptions as o, EventLogger as r, createEvent as s, DomainEvent as t };

package/dist/HookSystem-BsGV-j2l.mjs

@@ -401,5 +401,4 @@ function afterDelete(hooks, resource, handler, priority = 10) {
 }
 
 //#endregion
-export { beforeCreate as a, createHookSystem as c, afterUpdate as i, defineHook as l, afterCreate as n, beforeDelete as o, afterDelete as r, beforeUpdate as s, HookSystem as t };
-//# sourceMappingURL=HookSystem-BsGV-j2l.mjs.map
+export { beforeCreate as a, createHookSystem as c, afterUpdate as i, defineHook as l, afterCreate as n, beforeDelete as o, afterDelete as r, beforeUpdate as s, HookSystem as t };

package/dist/{ResourceRegistry-DsN4KJjV.mjs → ResourceRegistry-7Ic20ZMw.mjs}

@@ -246,5 +246,4 @@ function extractPipelineSteps(pipe) {
 }
 
 //#endregion
-export { ResourceRegistry as t };
-//# sourceMappingURL=ResourceRegistry-DsN4KJjV.mjs.map
+export { ResourceRegistry as t };

package/dist/adapters/index.d.mts

@@ -1,5 +1,5 @@
-import "../elevation-B_2dRLVP.mjs";
-import { a as RepositoryLike, i as RelationMetadata, n as DataAdapter, o as SchemaMetadata, r as FieldMetadata, s as ValidationResult, t as AdapterFactory } from "../interface-Ch8HU9uM.mjs";
-import "../types-aYB4V7uN.mjs";
-import { a as PrismaQueryParserOptions, c as MongooseAdapterOptions, i as PrismaQueryParser, l as createMongooseAdapter, n as PrismaAdapterOptions, o as createPrismaAdapter, r as PrismaQueryOptions, s as MongooseAdapter, t as PrismaAdapter } from "../prisma-Dg9GoVdj.mjs";
+import "../elevation-DGo5shaX.mjs";
+import { a as RepositoryLike, i as RelationMetadata, n as DataAdapter, o as SchemaMetadata, r as FieldMetadata, s as ValidationResult, t as AdapterFactory } from "../interface-e9XfSsUV.mjs";
+import "../types-RLkFVgaw.mjs";
+import { a as PrismaQueryParserOptions, c as MongooseAdapterOptions, i as PrismaQueryParser, l as createMongooseAdapter, n as PrismaAdapterOptions, o as createPrismaAdapter, r as PrismaQueryOptions, s as MongooseAdapter, t as PrismaAdapter } from "../prisma-C3iornoK.mjs";
 export { type AdapterFactory, type DataAdapter, type FieldMetadata, MongooseAdapter, type MongooseAdapterOptions, PrismaAdapter, type PrismaAdapterOptions, type PrismaQueryOptions, PrismaQueryParser, type PrismaQueryParserOptions, type RelationMetadata, type RepositoryLike, type SchemaMetadata, type ValidationResult, createMongooseAdapter, createPrismaAdapter };

package/dist/audit/index.d.mts

@@ -1,7 +1,7 @@
-import "../elevation-B_2dRLVP.mjs";
-import "../interface-Ch8HU9uM.mjs";
-import "../types-aYB4V7uN.mjs";
-import { a as AuditContext, c as AuditStore, i as AuditAction, l as AuditStoreOptions, n as MongoAuditStoreOptions, o as AuditEntry, r as MongoConnection, s as AuditQueryOptions, u as createAuditEntry } from "../mongodb-CGzRbfAK.mjs";
+import "../elevation-DGo5shaX.mjs";
+import "../interface-e9XfSsUV.mjs";
+import "../types-RLkFVgaw.mjs";
+import { a as AuditContext, c as AuditStore, i as AuditAction, l as AuditStoreOptions, n as MongoAuditStoreOptions, o as AuditEntry, r as MongoConnection, s as AuditQueryOptions, u as createAuditEntry } from "../mongodb-ClykrfGo.mjs";
 import { FastifyPluginAsync } from "fastify";
 
 //#region src/audit/auditPlugin.d.ts
@@ -78,5 +78,4 @@ declare class MemoryAuditStore implements AuditStore {
   clear(): void;
 }
 //#endregion
-export { type AuditAction, type AuditContext, type AuditEntry, type AuditLogger, type AuditPluginOptions, type AuditQueryOptions, type AuditStore, type AuditStoreOptions, MemoryAuditStore, type MemoryAuditStoreOptions, type MongoAuditStoreOptions, _default as auditPlugin, auditPlugin as auditPluginFn, createAuditEntry };
-//# sourceMappingURL=index.d.mts.map
+export { type AuditAction, type AuditContext, type AuditEntry, type AuditLogger, type AuditPluginOptions, type AuditQueryOptions, type AuditStore, type AuditStoreOptions, MemoryAuditStore, type MemoryAuditStoreOptions, type MongoAuditStoreOptions, _default as auditPlugin, auditPlugin as auditPluginFn, createAuditEntry };

package/dist/audit/index.mjs

@@ -1,4 +1,4 @@
-import { t as MongoAuditStore } from "../mongodb-BfJVlUJH.mjs";
+import { t as MongoAuditStore } from "../mongodb-DNKEExbf.mjs";
 import fp from "fastify-plugin";
 
 //#region src/audit/stores/interface.ts
@@ -272,5 +272,4 @@ var auditPlugin_default = fp(auditPlugin, {
 });
 
 //#endregion
-export { MemoryAuditStore, auditPlugin_default as auditPlugin, auditPlugin as auditPluginFn, createAuditEntry };
-//# sourceMappingURL=index.mjs.map
+export { MemoryAuditStore, auditPlugin_default as auditPlugin, auditPlugin as auditPluginFn, createAuditEntry };

package/dist/audit/mongodb.d.mts

@@ -1,5 +1,5 @@
-import "../elevation-B_2dRLVP.mjs";
-import "../interface-Ch8HU9uM.mjs";
-import "../types-aYB4V7uN.mjs";
-import { n as MongoAuditStoreOptions, t as MongoAuditStore } from "../mongodb-CGzRbfAK.mjs";
+import "../elevation-DGo5shaX.mjs";
+import "../interface-e9XfSsUV.mjs";
+import "../types-RLkFVgaw.mjs";
+import { n as MongoAuditStoreOptions, t as MongoAuditStore } from "../mongodb-ClykrfGo.mjs";
 export { MongoAuditStore, type MongoAuditStoreOptions };

package/dist/audit/mongodb.mjs

@@ -1,3 +1,3 @@
-import { t as MongoAuditStore } from "../mongodb-BfJVlUJH.mjs";
+import { t as MongoAuditStore } from "../mongodb-DNKEExbf.mjs";
 
 export { MongoAuditStore };

package/dist/{audited-C3T5DTUx.mjs → audited-CGdLiSlE.mjs}

@@ -137,5 +137,4 @@ function auditedPreset(options = {}) {
 }
 
 //#endregion
-export { softDeletePreset as a, slugLookupPreset as i, treePreset as n, ownedByUserPreset as r, auditedPreset as t };
-//# sourceMappingURL=audited-C3T5DTUx.mjs.map
+export { softDeletePreset as a, slugLookupPreset as i, treePreset as n, ownedByUserPreset as r, auditedPreset as t };

package/dist/auth/index.d.mts

@@ -1,9 +1,9 @@
-import "../elevation-B_2dRLVP.mjs";
-import "../interface-Ch8HU9uM.mjs";
-import { t as PermissionCheck } from "../types-aYB4V7uN.mjs";
+import "../elevation-DGo5shaX.mjs";
+import "../interface-e9XfSsUV.mjs";
+import { t as PermissionCheck } from "../types-RLkFVgaw.mjs";
 import { AuthHelpers, AuthPluginOptions } from "../types/index.mjs";
-import { t as ExternalOpenApiPaths } from "../externalPaths-DlINfKbP.mjs";
-import { a as SessionManagerOptions, c as createSessionManager, i as SessionData, n as MemorySessionStoreOptions, o as SessionManagerResult, r as SessionCookieOptions, s as SessionStore, t as MemorySessionStore } from "../sessionManager-jPKLbHE0.mjs";
+import { t as ExternalOpenApiPaths } from "../externalPaths-SyPF2tgK.mjs";
+import { a as SessionManagerOptions, c as createSessionManager, i as SessionData, n as MemorySessionStoreOptions, o as SessionManagerResult, r as SessionCookieOptions, s as SessionStore, t as MemorySessionStore } from "../sessionManager-D_iEHjQl.mjs";
 import { FastifyPluginAsync, FastifyReply as FastifyReply$1, FastifyRequest as FastifyRequest$1 } from "fastify";
 
 //#region src/auth/authPlugin.d.ts
@@ -185,5 +185,4 @@ interface BetterAuthOpenApiOptions {
  */
 declare function extractBetterAuthOpenApi(authApi: Record<string, unknown>, options?: BetterAuthOpenApiOptions): ExternalOpenApiPaths;
 //#endregion
-export { type AuthPluginOptions, type BetterAuthAdapterOptions, type BetterAuthAdapterResult, type BetterAuthHandler, type BetterAuthOpenApiOptions, MemorySessionStore, type MemorySessionStoreOptions, type SessionCookieOptions, type SessionData, type SessionManagerOptions, type SessionManagerResult, type SessionStore, _default as authPlugin, authPlugin as authPluginFn, createBetterAuthAdapter, createSessionManager, extractBetterAuthOpenApi };
-//# sourceMappingURL=index.d.mts.map
+export { type AuthPluginOptions, type BetterAuthAdapterOptions, type BetterAuthAdapterResult, type BetterAuthHandler, type BetterAuthOpenApiOptions, MemorySessionStore, type MemorySessionStoreOptions, type SessionCookieOptions, type SessionData, type SessionManagerOptions, type SessionManagerResult, type SessionStore, _default as authPlugin, authPlugin as authPluginFn, createBetterAuthAdapter, createSessionManager, extractBetterAuthOpenApi };

package/dist/auth/index.mjs

@@ -1,7 +1,8 @@
 import { t as AUTHENTICATED_SCOPE } from "../types-Beqn1Un7.mjs";
-import { t as ArcError } from "../errors-B9bZok84.mjs";
+import { n as normalizeRoles, t as getUserRoles } from "../types-DelU6kln.mjs";
+import { t as ArcError } from "../errors-DBANPbGr.mjs";
 import { requireOrgMembership, requireOrgRole, requireTeamMembership } from "../permissions/index.mjs";
-import { n as extractBetterAuthOpenApi } from "../betterAuthOpenApi-BrHKeSAx.mjs";
+import { n as extractBetterAuthOpenApi } from "../betterAuthOpenApi-DjWDddNc.mjs";
 import { createHmac, randomUUID, timingSafeEqual } from "node:crypto";
 import fp from "fastify-plugin";
 
@@ -241,7 +242,7 @@ const authPlugin = async (fastify, opts = {}) => {
 				});
 				return;
 			}
-			const userRoles = user.roles ?? [];
+			const userRoles = getUserRoles(user);
 			if (allowedRoles.length === 1 && allowedRoles[0] === "*") return;
 			if (!allowedRoles.some((role) => userRoles.includes(role))) {
 				reply.code(403).send({
@@ -385,7 +386,7 @@ async function tryDirectGetMemberRole(auth, headers, organizationId) {
 			headers,
 			query: { organizationId }
 		});
-		if (result?.role) return parseRoles(result.role);
+		if (result?.role) return normalizeRoles(result.role);
 		return null;
 	} catch {
 		return null;
@@ -427,19 +428,13 @@ function normalizeId(value) {
 	}
 	return String(value);
 }
-/** Parse role payload from Better Auth (string, csv, array) into normalized roles[] */
-function parseRoles(value) {
-	if (Array.isArray(value)) return value.map((r) => String(r).trim()).filter(Boolean);
-	if (typeof value === "string") return value.split(",").map((r) => r.trim()).filter(Boolean);
-	return [];
-}
 /** Extract role field from heterogeneous org membership shapes */
 function extractRolesFromMembership(membership) {
-	const direct = parseRoles(membership.role ?? membership.roles ?? membership.orgRole);
+	const direct = normalizeRoles(membership.role ?? membership.roles ?? membership.orgRole);
 	if (direct.length > 0) return direct;
 	const nestedMembership = membership.membership;
 	if (nestedMembership) {
-		const nested = parseRoles(nestedMembership.role ?? nestedMembership.roles);
+		const nested = normalizeRoles(nestedMembership.role ?? nestedMembership.roles);
 		if (nested.length > 0) return nested;
 	}
 	return [];
@@ -480,7 +475,7 @@ async function resolveOrgRoles(auth, protocol, host, normalizedBase, headers, ac
 	const roleResponse = await auth.handler(roleRequest);
 	if (roleResponse.ok) {
 		const roleData = await roleResponse.json();
-		if (roleData?.role) return parseRoles(roleData.role);
+		if (roleData?.role) return normalizeRoles(roleData.role);
 	}
 	const listUrl = `${protocol}://${host}${normalizedBase}/organization/list`;
 	const listRequest = new Request(listUrl, {
@@ -677,7 +672,7 @@ function createBetterAuthAdapter(options) {
 		if (!fastify.hasDecorator("authenticate")) fastify.decorate("authenticate", authenticate);
 		if (!fastify.hasDecorator("optionalAuthenticate")) fastify.decorate("optionalAuthenticate", optionalAuthenticate);
 		if (!extractedOpenApi && openapiOpt !== false && auth.api && typeof auth.api === "object") {
-			const { extractBetterAuthOpenApi } = await import("../betterAuthOpenApi-BrHKeSAx.mjs").then((n) => n.t);
+			const { extractBetterAuthOpenApi } = await import("../betterAuthOpenApi-DjWDddNc.mjs").then((n) => n.t);
 			extractedOpenApi = extractBetterAuthOpenApi(auth.api, {
 				basePath,
 				userFields
@@ -1098,5 +1093,4 @@ function createSessionManager(options) {
 }
 
 //#endregion
-export { MemorySessionStore, authPlugin_default as authPlugin, authPlugin as authPluginFn, createBetterAuthAdapter, createSessionManager, extractBetterAuthOpenApi };
-//# sourceMappingURL=index.mjs.map
+export { MemorySessionStore, authPlugin_default as authPlugin, authPlugin as authPluginFn, createBetterAuthAdapter, createSessionManager, extractBetterAuthOpenApi };

package/dist/auth/redis-session.d.mts

@@ -1,4 +1,4 @@
-import { i as SessionData, s as SessionStore } from "../sessionManager-jPKLbHE0.mjs";
+import { i as SessionData, s as SessionStore } from "../sessionManager-D_iEHjQl.mjs";
 
 //#region src/auth/redis-session.d.ts
 /** Minimal Redis client interface — compatible with ioredis */
@@ -40,5 +40,4 @@ declare class RedisSessionStore implements SessionStore {
   deleteAllExcept(userId: string, currentSessionId: string): Promise<void>;
 }
 //#endregion
-export { RedisLike, RedisSessionStore, RedisSessionStoreOptions };
-//# sourceMappingURL=redis-session.d.mts.map
+export { RedisLike, RedisSessionStore, RedisSessionStoreOptions };

package/dist/auth/redis-session.mjs

@@ -72,5 +72,4 @@ var RedisSessionStore = class {
 };
 
 //#endregion
-export { RedisSessionStore };
-//# sourceMappingURL=redis-session.mjs.map
+export { RedisSessionStore };

package/dist/{betterAuthOpenApi-BrHKeSAx.mjs → betterAuthOpenApi-DjWDddNc.mjs}

@@ -1,5 +1,5 @@
 import { t as __exportAll } from "./chunk-C7Uep-_p.mjs";
-import { a as toJsonSchema } from "./schemaConverter-BwrmWroW.mjs";
+import { a as toJsonSchema } from "./schemaConverter-Dtg0Kt9T.mjs";
 
 //#region src/auth/betterAuthOpenApi.ts
 var betterAuthOpenApi_exports = /* @__PURE__ */ __exportAll({ extractBetterAuthOpenApi: () => extractBetterAuthOpenApi });
@@ -246,5 +246,4 @@ function mergeUserFieldsIntoRequestBody(requestBody, userFields, endpointPath) {
 }
 
 //#endregion
-export { extractBetterAuthOpenApi as n, betterAuthOpenApi_exports as t };
-//# sourceMappingURL=betterAuthOpenApi-BrHKeSAx.mjs.map
+export { extractBetterAuthOpenApi as n, betterAuthOpenApi_exports as t };

package/dist/cache/index.d.mts

@@ -1,5 +1,5 @@
-import { i as CacheStore, n as CacheSetOptions, r as CacheStats, t as CacheLogger } from "../interface-CZe8IkMf.mjs";
-import { a as CacheEnvelope, c as QueryCache, i as queryCachePlugin, l as QueryCacheConfig, n as QueryCacheDefaults, o as CacheResult, r as QueryCachePluginOptions, s as CacheStatus, t as CrossResourceRule } from "../queryCachePlugin-7THaI5mt.mjs";
+import { i as CacheStore, n as CacheSetOptions, r as CacheStats, t as CacheLogger } from "../interface-DTbsvIWe.mjs";
+import { a as CacheEnvelope, c as QueryCache, i as queryCachePlugin, l as QueryCacheConfig, n as QueryCacheDefaults, o as CacheResult, r as QueryCachePluginOptions, s as CacheStatus, t as CrossResourceRule } from "../queryCachePlugin-Q6SYuHZ6.mjs";
 
 //#region src/cache/memory.d.ts
 interface MemoryCacheStoreOptions {
@@ -142,5 +142,4 @@ declare function tagVersionKey(tag: string): string;
  */
 declare function hashParams(params: Record<string, unknown>): string;
 //#endregion
-export { type CacheEnvelope, type CacheLogger, type CacheResult, type CacheSetOptions, type CacheStats, type CacheStatus, type CacheStore, type CrossResourceRule, MemoryCacheStore, type MemoryCacheStoreOptions, QueryCache, type QueryCacheConfig, type QueryCacheDefaults, type QueryCachePluginOptions, type RedisCacheClient, RedisCacheStore, type RedisCacheStoreOptions, type RedisPipeline, buildQueryKey, hashParams, queryCachePlugin, tagVersionKey, versionKey };
-//# sourceMappingURL=index.d.mts.map
+export { type CacheEnvelope, type CacheLogger, type CacheResult, type CacheSetOptions, type CacheStats, type CacheStatus, type CacheStore, type CrossResourceRule, MemoryCacheStore, type MemoryCacheStoreOptions, QueryCache, type QueryCacheConfig, type QueryCacheDefaults, type QueryCachePluginOptions, type RedisCacheClient, RedisCacheStore, type RedisCacheStoreOptions, type RedisPipeline, buildQueryKey, hashParams, queryCachePlugin, tagVersionKey, versionKey };

package/dist/cache/index.mjs

@@ -1,6 +1,6 @@
-import { i as versionKey, n as hashParams, r as tagVersionKey, t as buildQueryKey } from "../keys-BqNejWup.mjs";
-import { t as MemoryCacheStore } from "../memory-cQgelFOj.mjs";
-import { r as QueryCache, t as queryCachePlugin } from "../queryCachePlugin-DMBnp2Q0.mjs";
+import { i as versionKey, n as hashParams, r as tagVersionKey, t as buildQueryKey } from "../keys-DhqDRxv3.mjs";
+import { t as MemoryCacheStore } from "../memory-B2v7KrCB.mjs";
+import { r as QueryCache, t as queryCachePlugin } from "../queryCachePlugin-B6R0d4av.mjs";
 
 //#region src/cache/redis.ts
 /**
@@ -88,5 +88,4 @@ var RedisCacheStore = class {
 };
 
 //#endregion
-export { MemoryCacheStore, QueryCache, RedisCacheStore, buildQueryKey, hashParams, queryCachePlugin, tagVersionKey, versionKey };
-//# sourceMappingURL=index.mjs.map
+export { MemoryCacheStore, QueryCache, RedisCacheStore, buildQueryKey, hashParams, queryCachePlugin, tagVersionKey, versionKey };

package/dist/{caching-Bl28lYsR.mjs → caching-GSDJcA6-.mjs}

@@ -90,5 +90,4 @@ var caching_default = fp(cachingPlugin, {
 });
 
 //#endregion
-export { caching_default as n, caching_exports as r, cachingPlugin as t };
-//# sourceMappingURL=caching-Bl28lYsR.mjs.map
+export { caching_default as n, caching_exports as r, cachingPlugin as t };

package/dist/{circuitBreaker-DeY4FCjs.mjs → circuitBreaker-DYhWBW_D.mjs}

@@ -1093,5 +1093,4 @@ function createCircuitBreakerRegistry() {
 }
 
 //#endregion
-export { ArcQueryParser as C, wrapResponse as S, paginateWrapper as _, createCircuitBreaker as a, responses as b, deleteResponse as c, getListQueryParams as d, itemResponse as f, mutationResponse as g, messageWrapper as h, CircuitState as i, errorResponseSchema as l, listResponse as m, CircuitBreakerError as n, createCircuitBreakerRegistry as o, itemWrapper as p, CircuitBreakerRegistry as r, createStateMachine as s, CircuitBreaker as t, getDefaultCrudSchemas as u, paginationSchema as v, createQueryParser as w, successResponseSchema as x, queryParams as y };
-//# sourceMappingURL=circuitBreaker-DeY4FCjs.mjs.map
+export { ArcQueryParser as C, wrapResponse as S, paginateWrapper as _, createCircuitBreaker as a, responses as b, deleteResponse as c, getListQueryParams as d, itemResponse as f, mutationResponse as g, messageWrapper as h, CircuitState as i, errorResponseSchema as l, listResponse as m, CircuitBreakerError as n, createCircuitBreakerRegistry as o, itemWrapper as p, CircuitBreakerRegistry as r, createStateMachine as s, CircuitBreaker as t, getDefaultCrudSchemas as u, paginationSchema as v, createQueryParser as w, successResponseSchema as x, queryParams as y };

package/dist/cli/commands/describe.d.mts

@@ -15,5 +15,4 @@
  */
 declare function describe(args: string[]): Promise<void>;
 //#endregion
-export { describe as default, describe };
-//# sourceMappingURL=describe.d.mts.map
+export { describe as default, describe };

package/dist/cli/commands/describe.mjs

@@ -235,5 +235,4 @@ async function describe(args) {
 }
 
 //#endregion
-export { describe as default, describe };
-//# sourceMappingURL=describe.mjs.map
+export { describe as default, describe };

package/dist/cli/commands/docs.d.mts

@@ -10,5 +10,4 @@ declare const _default: {
   exportDocs: typeof exportDocs;
 };
 //#endregion
-export { _default as default, exportDocs };
-//# sourceMappingURL=docs.d.mts.map
+export { _default as default, exportDocs };

package/dist/cli/commands/docs.mjs

@@ -1,5 +1,5 @@
-import { t as ResourceRegistry } from "../../ResourceRegistry-DsN4KJjV.mjs";
-import { t as buildOpenApiSpec } from "../../openapi-G3Cw7XuM.mjs";
+import { t as ResourceRegistry } from "../../ResourceRegistry-7Ic20ZMw.mjs";
+import { t as buildOpenApiSpec } from "../../openapi-9nB_kiuR.mjs";
 import { writeFileSync } from "node:fs";
 import { resolve } from "node:path";
 import { pathToFileURL } from "node:url";
@@ -49,5 +49,4 @@ async function exportDocs(args) {
 var docs_default = { exportDocs };
 
 //#endregion
-export { docs_default as default, exportDocs };
-//# sourceMappingURL=docs.mjs.map
+export { docs_default as default, exportDocs };

package/dist/cli/commands/generate.d.mts

@@ -14,5 +14,4 @@
  */
 declare function generate(type: string | undefined, args: string[]): Promise<void>;
 //#endregion
-export { generate as default, generate };
-//# sourceMappingURL=generate.d.mts.map
+export { generate as default, generate };

package/dist/cli/commands/generate.mjs

@@ -1,4 +1,4 @@
-import { t as pluralize } from "../../pluralize-CEweyOEm.mjs";
+import { t as pluralize } from "../../pluralize-CM-jZg7p.mjs";
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
 
@@ -354,5 +354,4 @@ async function generateFile(name, lowerName, resourcePath, fileType, template, e
 }
 
 //#endregion
-export { generate as default, generate };
-//# sourceMappingURL=generate.mjs.map
+export { generate as default, generate };

package/dist/cli/commands/init.d.mts

@@ -24,5 +24,4 @@ interface InitOptions {
  */
 declare function init(options?: InitOptions): Promise<void>;
 //#endregion
-export { InitOptions, init as default, init };
-//# sourceMappingURL=init.d.mts.map
+export { InitOptions, init as default, init };

package/dist/cli/commands/init.mjs

@@ -1201,7 +1201,7 @@ export const requireSuperadmin = ()${returnType} =>
  * - requireOrgMembership()             — just checks if user is in the org (any role)
  * - requireTeamMembership()            — checks if user is in the active team
  *
- * These are DIFFERENT from platform-level helpers above (requireRoles checks user.roles).
+ * These are DIFFERENT from platform-level helpers above (requireRoles checks user.role).
  * Platform superadmin automatically bypasses all org role checks.
  *
  * IMPORTANT: When using Better Auth's Access Control (ac) with custom roles,
@@ -1219,13 +1219,13 @@ import {
 export { requireOrgMembership, requireOrgRole, requireTeamMembership };
 
 /**
- * Require organization owner (checks member.role, not user.roles)
+ * Require organization owner (checks member.role, not user.role)
  */
 export const requireOrgOwner = ()${returnType} =>
   requireOrgRole(['owner']);
 
 /**
- * Require organization manager or higher (checks member.role, not user.roles)
+ * Require organization manager or higher (checks member.role, not user.role)
  */
 export const requireOrgManager = ()${returnType} =>
   requireOrgRole(['manager', 'admin', 'owner']);
@@ -2236,11 +2236,11 @@ export async function login(request${ts ? ": FastifyRequest" : ""}, reply${ts ?
       return reply.code(401).send({ success: false, message: 'Invalid credentials' });
     }
 
-    const tokens = request.server.auth.issueTokens({ id: user._id.toString(), roles: user.roles });
+    const tokens = request.server.auth.issueTokens({ id: user._id.toString(), role: user.role });
 
     return reply.send({
       success: true,
-      user: { id: user._id, name: user.name, email: user.email, roles: user.roles },
+      user: { id: user._id, name: user.name, email: user.email, role: user.role },
       ...tokens,
     });
   } catch (error) {
@@ -2612,5 +2612,4 @@ Documentation:
 }
 
 //#endregion
-export { init as default, init };
-//# sourceMappingURL=init.mjs.map
+export { init as default, init };

package/dist/cli/commands/introspect.d.mts

@@ -7,5 +7,4 @@
  */
 declare function introspect(args: string[]): Promise<void>;
 //#endregion
-export { introspect as default, introspect };
-//# sourceMappingURL=introspect.d.mts.map
+export { introspect as default, introspect };

package/dist/cli/commands/introspect.mjs

@@ -1,4 +1,4 @@
-import { t as ResourceRegistry } from "../../ResourceRegistry-DsN4KJjV.mjs";
+import { t as ResourceRegistry } from "../../ResourceRegistry-7Ic20ZMw.mjs";
 import { resolve } from "node:path";
 import { pathToFileURL } from "node:url";
 
@@ -72,5 +72,4 @@ async function introspect(args) {
 }
 
 //#endregion
-export { introspect as default, introspect };
-//# sourceMappingURL=introspect.mjs.map
+export { introspect as default, introspect };

package/dist/cli/index.d.mts

@@ -13,5 +13,4 @@ import introspect from "./commands/introspect.mjs";
  */
 declare function doctor(_args?: string[]): Promise<void>;
 //#endregion
-export { describe, doctor, exportDocs, generate, init, introspect };
-//# sourceMappingURL=index.d.mts.map
+export { describe, doctor, exportDocs, generate, init, introspect };

package/dist/cli/index.mjs

@@ -153,5 +153,4 @@ function findPackageJson(dir) {
 }
 
 //#endregion
-export { describe, doctor, exportDocs, generate, init, introspect };
-//# sourceMappingURL=index.mjs.map
+export { describe, doctor, exportDocs, generate, init, introspect };

package/dist/constants-DdXFXQtN.mjs

@@ -81,5 +81,4 @@ const RESERVED_QUERY_PARAMS = Object.freeze(new Set([
 ]));
 
 //#endregion
-export { DEFAULT_SORT as a, HOOK_OPERATIONS as c, MAX_REGEX_LENGTH as d, MAX_SEARCH_LENGTH as f, SYSTEM_FIELDS as h, DEFAULT_MAX_LIMIT as i, HOOK_PHASES as l, RESERVED_QUERY_PARAMS as m, DEFAULT_ID_FIELD as n, DEFAULT_TENANT_FIELD as o, MUTATION_OPERATIONS as p, DEFAULT_LIMIT as r, DEFAULT_UPDATE_METHOD as s, CRUD_OPERATIONS as t, MAX_FILTER_DEPTH as u };
-//# sourceMappingURL=constants-DdXFXQtN.mjs.map
+export { DEFAULT_SORT as a, HOOK_OPERATIONS as c, MAX_REGEX_LENGTH as d, MAX_SEARCH_LENGTH as f, SYSTEM_FIELDS as h, DEFAULT_MAX_LIMIT as i, HOOK_PHASES as l, RESERVED_QUERY_PARAMS as m, DEFAULT_ID_FIELD as n, DEFAULT_TENANT_FIELD as o, MUTATION_OPERATIONS as p, DEFAULT_LIMIT as r, DEFAULT_UPDATE_METHOD as s, CRUD_OPERATIONS as t, MAX_FILTER_DEPTH as u };

package/dist/core/index.d.mts

@@ -1,5 +1,5 @@
-import "../elevation-B_2dRLVP.mjs";
-import { E as defineResource, T as ResourceDefinition, c as BaseController, d as QueryResolverConfig, f as BodySanitizer, h as AccessControlConfig, l as BaseControllerOptions, m as AccessControl, p as BodySanitizerConfig, u as QueryResolver } from "../interface-Ch8HU9uM.mjs";
-import "../types-aYB4V7uN.mjs";
-import { A as createCrudRouter, C as MutationOperation, D as ActionRouterConfig, E as ActionHandler, O as IdempotencyService, S as MUTATION_OPERATIONS, T as SYSTEM_FIELDS, _ as HookOperation, a as getControllerScope, b as MAX_REGEX_LENGTH, c as CrudOperation, d as DEFAULT_MAX_LIMIT, f as DEFAULT_SORT, g as HOOK_PHASES, h as HOOK_OPERATIONS, i as getControllerContext, j as createPermissionMiddleware, k as createActionRouter, l as DEFAULT_ID_FIELD, m as DEFAULT_UPDATE_METHOD, n as createFastifyHandler, o as sendControllerResponse, p as DEFAULT_TENANT_FIELD, r as createRequestContext, s as CRUD_OPERATIONS, t as createCrudHandlers, u as DEFAULT_LIMIT, v as HookPhase, w as RESERVED_QUERY_PARAMS, x as MAX_SEARCH_LENGTH, y as MAX_FILTER_DEPTH } from "../fastifyAdapter-BkrGrlFi.mjs";
+import "../elevation-DGo5shaX.mjs";
+import { E as defineResource, T as ResourceDefinition, c as BaseController, d as QueryResolverConfig, f as BodySanitizer, h as AccessControlConfig, l as BaseControllerOptions, m as AccessControl, p as BodySanitizerConfig, u as QueryResolver } from "../interface-e9XfSsUV.mjs";
+import "../types-RLkFVgaw.mjs";
+import { A as createCrudRouter, C as MutationOperation, D as ActionRouterConfig, E as ActionHandler, O as IdempotencyService, S as MUTATION_OPERATIONS, T as SYSTEM_FIELDS, _ as HookOperation, a as getControllerScope, b as MAX_REGEX_LENGTH, c as CrudOperation, d as DEFAULT_MAX_LIMIT, f as DEFAULT_SORT, g as HOOK_PHASES, h as HOOK_OPERATIONS, i as getControllerContext, j as createPermissionMiddleware, k as createActionRouter, l as DEFAULT_ID_FIELD, m as DEFAULT_UPDATE_METHOD, n as createFastifyHandler, o as sendControllerResponse, p as DEFAULT_TENANT_FIELD, r as createRequestContext, s as CRUD_OPERATIONS, t as createCrudHandlers, u as DEFAULT_LIMIT, v as HookPhase, w as RESERVED_QUERY_PARAMS, x as MAX_SEARCH_LENGTH, y as MAX_FILTER_DEPTH } from "../fastifyAdapter-C8DlE0YH.mjs";
 export { AccessControl, type AccessControlConfig, type ActionHandler, type ActionRouterConfig, BaseController, type BaseControllerOptions, BodySanitizer, type BodySanitizerConfig, CRUD_OPERATIONS, CrudOperation, DEFAULT_ID_FIELD, DEFAULT_LIMIT, DEFAULT_MAX_LIMIT, DEFAULT_SORT, DEFAULT_TENANT_FIELD, DEFAULT_UPDATE_METHOD, HOOK_OPERATIONS, HOOK_PHASES, HookOperation, HookPhase, type IdempotencyService, MAX_FILTER_DEPTH, MAX_REGEX_LENGTH, MAX_SEARCH_LENGTH, MUTATION_OPERATIONS, MutationOperation, QueryResolver, type QueryResolverConfig, RESERVED_QUERY_PARAMS, ResourceDefinition, SYSTEM_FIELDS, createActionRouter, createCrudHandlers, createCrudRouter, createFastifyHandler, createPermissionMiddleware, createRequestContext, defineResource, getControllerContext, getControllerScope, sendControllerResponse };

package/dist/core/index.mjs

@@ -1,4 +1,4 @@
 import { a as DEFAULT_SORT, c as HOOK_OPERATIONS, d as MAX_REGEX_LENGTH, f as MAX_SEARCH_LENGTH, h as SYSTEM_FIELDS, i as DEFAULT_MAX_LIMIT, l as HOOK_PHASES, m as RESERVED_QUERY_PARAMS, n as DEFAULT_ID_FIELD, o as DEFAULT_TENANT_FIELD, p as MUTATION_OPERATIONS, r as DEFAULT_LIMIT, s as DEFAULT_UPDATE_METHOD, t as CRUD_OPERATIONS, u as MAX_FILTER_DEPTH } from "../constants-DdXFXQtN.mjs";
-import { _ as QueryResolver, c as createPermissionMiddleware, d as createFastifyHandler, f as createRequestContext, g as BaseController, h as sendControllerResponse, m as getControllerScope, n as defineResource, o as createActionRouter, p as getControllerContext, s as createCrudRouter, t as ResourceDefinition, u as createCrudHandlers, v as BodySanitizer, y as AccessControl } from "../defineResource-k0_BDn8v.mjs";
+import { _ as QueryResolver, c as createPermissionMiddleware, d as createFastifyHandler, f as createRequestContext, g as BaseController, h as sendControllerResponse, m as getControllerScope, n as defineResource, o as createActionRouter, p as getControllerContext, s as createCrudRouter, t as ResourceDefinition, u as createCrudHandlers, v as BodySanitizer, y as AccessControl } from "../defineResource-PXzSJ15_.mjs";
 
 export { AccessControl, BaseController, BodySanitizer, CRUD_OPERATIONS, DEFAULT_ID_FIELD, DEFAULT_LIMIT, DEFAULT_MAX_LIMIT, DEFAULT_SORT, DEFAULT_TENANT_FIELD, DEFAULT_UPDATE_METHOD, HOOK_OPERATIONS, HOOK_PHASES, MAX_FILTER_DEPTH, MAX_REGEX_LENGTH, MAX_SEARCH_LENGTH, MUTATION_OPERATIONS, QueryResolver, RESERVED_QUERY_PARAMS, ResourceDefinition, SYSTEM_FIELDS, createActionRouter, createCrudHandlers, createCrudRouter, createFastifyHandler, createPermissionMiddleware, createRequestContext, defineResource, getControllerContext, getControllerScope, sendControllerResponse };

package/dist/{createApp-CUgNqegw.mjs → createApp-D2D5XXaV.mjs}

@@ -276,7 +276,7 @@ async function loadPlugin(name, logger) {
 */
 async function createApp(options) {
 	if (options.debug !== void 0 && options.debug !== false) {
-		const { configureArcLogger } = await import("./logger-Df2O2WsW.mjs").then((n) => n.r);
+		const { configureArcLogger } = await import("./logger-ByrvQWZO.mjs").then((n) => n.r);
 		configureArcLogger({ debug: options.debug });
 	}
 	const authConfig = options.auth;
@@ -404,7 +404,7 @@ async function createApp(options) {
 	};
 	trackPlugin("arc-core");
 	if (config.arcPlugins?.events !== false) {
-		const { default: eventPlugin } = await import("./eventPlugin-DGR_B2on.mjs").then((n) => n.n);
+		const { default: eventPlugin } = await import("./eventPlugin-BEOvaDqo.mjs").then((n) => n.n);
 		const eventOpts = typeof config.arcPlugins?.events === "object" ? config.arcPlugins.events : {};
 		await fastify.register(eventPlugin, {
 			...eventOpts,
@@ -429,16 +429,16 @@ async function createApp(options) {
 		fastify.log.debug("Arc gracefulShutdown plugin enabled");
 	}
 	if (config.arcPlugins?.caching) {
-		const { default: cachingPlugin } = await import("./caching-Bl28lYsR.mjs").then((n) => n.r);
+		const { default: cachingPlugin } = await import("./caching-GSDJcA6-.mjs").then((n) => n.r);
 		const cachingOpts = config.arcPlugins.caching === true ? {} : config.arcPlugins.caching;
 		await fastify.register(cachingPlugin, cachingOpts);
 		trackPlugin("arc-caching", cachingOpts);
 		fastify.log.debug("Arc caching plugin enabled");
 	}
 	if (config.arcPlugins?.queryCache) {
-		const { queryCachePlugin } = await import("./queryCachePlugin-DMBnp2Q0.mjs").then((n) => n.n);
+		const { queryCachePlugin } = await import("./queryCachePlugin-B6R0d4av.mjs").then((n) => n.n);
 		const qcOpts = config.arcPlugins.queryCache === true ? {} : config.arcPlugins.queryCache;
-		const store = options.stores?.queryCache ?? new (await (import("./memory-cQgelFOj.mjs").then((n) => n.n))).MemoryCacheStore();
+		const store = options.stores?.queryCache ?? new (await (import("./memory-B2v7KrCB.mjs").then((n) => n.n))).MemoryCacheStore();
 		await fastify.register(queryCachePlugin, {
 			store,
 			...qcOpts
@@ -448,7 +448,7 @@ async function createApp(options) {
 	}
 	if (config.arcPlugins?.sse) if (config.arcPlugins?.events === false) fastify.log.warn("SSE plugin requires events plugin (arcPlugins.events). SSE disabled.");
 	else {
-		const { default: ssePlugin } = await import("./sse-B3c3_yZp.mjs").then((n) => n.r);
+		const { default: ssePlugin } = await import("./sse-DkqQ1uxb.mjs").then((n) => n.r);
 		const sseOpts = config.arcPlugins.sse === true ? {} : config.arcPlugins.sse;
 		await fastify.register(ssePlugin, sseOpts);
 		trackPlugin("arc-sse", sseOpts);
@@ -492,13 +492,13 @@ async function createApp(options) {
 		}
 	}
 	if (config.elevation) {
-		const { elevationPlugin } = await import("./elevation-BRy3yFWT.mjs").then((n) => n.r);
+		const { elevationPlugin } = await import("./elevation-DSTbVvYj.mjs").then((n) => n.r);
 		await fastify.register(elevationPlugin, config.elevation);
 		trackPlugin("arc-elevation", config.elevation);
 		fastify.log.debug("Elevation plugin enabled");
 	}
 	if (config.errorHandler !== false) {
-		const { errorHandlerPlugin } = await import("./errorHandler-C1okiriz.mjs").then((n) => n.n);
+		const { errorHandlerPlugin } = await import("./errorHandler-C3GY3_ow.mjs").then((n) => n.n);
 		const errorOpts = typeof config.errorHandler === "object" ? config.errorHandler : { includeStack: config.preset !== "production" };
 		await fastify.register(errorHandlerPlugin, errorOpts);
 		trackPlugin("arc-error-handler", errorOpts);
@@ -556,5 +556,4 @@ const ArcFactory = {
 };
 
 //#endregion
-export { getPreset as a, developmentPreset as i, createApp as n, productionPreset as o, createApp_exports as r, testingPreset as s, ArcFactory as t };
-//# sourceMappingURL=createApp-CUgNqegw.mjs.map
+export { getPreset as a, developmentPreset as i, createApp as n, productionPreset as o, createApp_exports as r, testingPreset as s, ArcFactory as t };

package/dist/{defineResource-k0_BDn8v.mjs → defineResource-PXzSJ15_.mjs}

@@ -1,13 +1,14 @@
 import { a as DEFAULT_SORT, d as MAX_REGEX_LENGTH, h as SYSTEM_FIELDS, n as DEFAULT_ID_FIELD, o as DEFAULT_TENANT_FIELD, r as DEFAULT_LIMIT, s as DEFAULT_UPDATE_METHOD, t as CRUD_OPERATIONS } from "./constants-DdXFXQtN.mjs";
 import { c as isElevated, l as isMember, n as PUBLIC_SCOPE, r as getOrgId } from "./types-Beqn1Un7.mjs";
 import { getUserId } from "./types/index.mjs";
-import { i as resolveEffectiveRoles, n as applyFieldWritePermissions, t as applyFieldReadPermissions } from "./fields-iagOozy0.mjs";
-import { C as ArcQueryParser, u as getDefaultCrudSchemas } from "./circuitBreaker-DeY4FCjs.mjs";
-import { t as buildQueryKey } from "./keys-BqNejWup.mjs";
-import { r as ForbiddenError } from "./errors-B9bZok84.mjs";
-import { t as hasEvents } from "./typeGuards-DhMNLuvU.mjs";
-import { n as convertRouteSchema, t as convertOpenApiSchemas } from "./schemaConverter-BwrmWroW.mjs";
-import { t as requestContext } from "./requestContext-QQD6ROJc.mjs";
+import { i as resolveEffectiveRoles, n as applyFieldWritePermissions, t as applyFieldReadPermissions } from "./fields-CTd_CrKr.mjs";
+import { t as getUserRoles } from "./types-DelU6kln.mjs";
+import { C as ArcQueryParser, u as getDefaultCrudSchemas } from "./circuitBreaker-DYhWBW_D.mjs";
+import { t as buildQueryKey } from "./keys-DhqDRxv3.mjs";
+import { r as ForbiddenError } from "./errors-DBANPbGr.mjs";
+import { t as hasEvents } from "./typeGuards-DwxA1t_L.mjs";
+import { n as convertRouteSchema, t as convertOpenApiSchemas } from "./schemaConverter-Dtg0Kt9T.mjs";
+import { t as requestContext } from "./requestContext-xi6OKBL-.mjs";
 import { applyPresets, getAvailablePresets } from "./presets/index.mjs";
 
 //#region src/core/AccessControl.ts
@@ -230,7 +231,7 @@ var BodySanitizer = class {
 			if (!isElevated(scope)) {
 				const fieldPerms = arcContext?.arc?.fields;
 				if (fieldPerms) {
-					const effectiveRoles = resolveEffectiveRoles(req.user?.roles ?? [], isMember(scope) ? scope.orgRoles : []);
+					const effectiveRoles = resolveEffectiveRoles(getUserRoles(req.user), isMember(scope) ? scope.orgRoles : []);
 					sanitized = applyFieldWritePermissions(sanitized, fieldPerms, effectiveRoles);
 				}
 			}
@@ -1003,7 +1004,7 @@ function sendControllerResponse(reply, response, request) {
 	const arcMeta = reqWithExtras?.arc;
 	const scope = reqWithExtras?.scope ?? PUBLIC_SCOPE;
 	const fieldPerms = isElevated(scope) ? void 0 : arcMeta?.fields;
-	const effectiveRoles = fieldPerms ? resolveEffectiveRoles((reqWithExtras?.user)?.roles ?? [], isMember(scope) ? scope.orgRoles : []) : [];
+	const effectiveRoles = fieldPerms ? resolveEffectiveRoles(getUserRoles(reqWithExtras?.user), isMember(scope) ? scope.orgRoles : []) : [];
 	const fieldCaps = fieldPerms ? computeFieldCapabilities(fieldPerms, effectiveRoles) : void 0;
 	const hasFieldRestrictions = !!(fieldMaskConfig || fieldPerms);
 	/** Apply both field mask and field-level permissions to a data item */
@@ -2193,5 +2194,4 @@ function capitalize(str) {
 }
 
 //#endregion
-export { QueryResolver as _, validateResourceConfig as a, createPermissionMiddleware as c, createFastifyHandler as d, createRequestContext as f, BaseController as g, sendControllerResponse as h, formatValidationErrors as i, pipe as l, getControllerScope as m, defineResource as n, createActionRouter as o, getControllerContext as p, assertValidConfig as r, createCrudRouter as s, ResourceDefinition as t, createCrudHandlers as u, BodySanitizer as v, AccessControl as y };
-//# sourceMappingURL=defineResource-k0_BDn8v.mjs.map
+export { QueryResolver as _, validateResourceConfig as a, createPermissionMiddleware as c, createFastifyHandler as d, createRequestContext as f, BaseController as g, sendControllerResponse as h, formatValidationErrors as i, pipe as l, getControllerScope as m, defineResource as n, createActionRouter as o, getControllerContext as p, assertValidConfig as r, createCrudRouter as s, ResourceDefinition as t, createCrudHandlers as u, BodySanitizer as v, AccessControl as y };

package/dist/discovery/index.d.mts

@@ -43,5 +43,4 @@ declare function discoverResources(options: DiscoveryOptions): Promise<Array<{
 /** Auto-discovery plugin for Arc resources */
 declare const discoveryPlugin: FastifyPluginAsync<DiscoveryPluginOptions>;
 //#endregion
-export { DiscoverableResource, DiscoveryOptions, DiscoveryPluginOptions, discoveryPlugin as default, discoveryPlugin, discoverResources };
-//# sourceMappingURL=index.d.mts.map
+export { DiscoverableResource, DiscoveryOptions, DiscoveryPluginOptions, discoveryPlugin as default, discoveryPlugin, discoverResources };

package/dist/discovery/index.mjs

@@ -106,5 +106,4 @@ const discoveryPluginImpl = async (fastify, options) => {
 const discoveryPlugin = discoveryPluginImpl;
 
 //#endregion
-export { discoveryPlugin as default, discoveryPlugin, discoverResources };
-//# sourceMappingURL=index.mjs.map
+export { discoveryPlugin as default, discoveryPlugin, discoverResources };