@classytic/arc 2.1.2 → 2.1.7

package/dist/integrations/event-gateway.d.mts

@@ -1,4 +1,4 @@
-import { t as DomainEvent } from "../EventTransport-BD2U0BTc.mjs";
+import { t as DomainEvent } from "../EventTransport-BkUDYZEb.mjs";
 import { WebSocketClient, WebSocketMessage } from "./websocket.mjs";
 import { FastifyPluginAsync, FastifyRequest } from "fastify";
 
@@ -43,5 +43,4 @@ interface EventGatewayOptions {
 }
 declare const eventGatewayPlugin: FastifyPluginAsync<EventGatewayOptions>;
 //#endregion
-export { EventGatewayOptions, eventGatewayPlugin as default, eventGatewayPlugin };
-//# sourceMappingURL=event-gateway.d.mts.map
+export { EventGatewayOptions, eventGatewayPlugin as default, eventGatewayPlugin };

package/dist/integrations/event-gateway.mjs

@@ -5,7 +5,7 @@ const eventGatewayPluginImpl = async (fastify, opts = {}) => {
 	const { auth = true, orgScoped = false, roomPolicy, maxMessageBytes, maxSubscriptionsPerClient, authenticate } = opts;
 	if (auth && !authenticate && !fastify.hasDecorator("authenticate")) throw new Error("[arc-event-gateway] auth is true but fastify.authenticate is not registered. Register an auth plugin first, provide a custom authenticate function, or set auth: false.");
 	if (opts.sse !== false) {
-		const { default: ssePlugin } = await import("../sse-B3c3_yZp.mjs").then((n) => n.r);
+		const { default: ssePlugin } = await import("../sse-DkqQ1uxb.mjs").then((n) => n.r);
 		await fastify.register(ssePlugin, {
 			path: opts.sse?.path ?? "/events/stream",
 			requireAuth: auth,
@@ -40,5 +40,4 @@ const eventGatewayPlugin = fp(eventGatewayPluginImpl, {
 });
 
 //#endregion
-export { eventGatewayPlugin as default, eventGatewayPlugin };
-//# sourceMappingURL=event-gateway.mjs.map
+export { eventGatewayPlugin as default, eventGatewayPlugin };

package/dist/integrations/jobs.d.mts

@@ -100,5 +100,4 @@ declare function defineJob<TData = unknown, TResult = unknown>(definition: JobDe
 /** Pluggable BullMQ job queue integration for Arc */
 declare const jobsPlugin: FastifyPluginAsync<JobsPluginOptions>;
 //#endregion
-export { JobDefinition, JobDispatchOptions, JobDispatcher, JobMeta, JobsPluginOptions, QueueStats, jobsPlugin as default, jobsPlugin, defineJob };
-//# sourceMappingURL=jobs.d.mts.map
+export { JobDefinition, JobDispatchOptions, JobDispatcher, JobMeta, JobsPluginOptions, QueueStats, jobsPlugin as default, jobsPlugin, defineJob };

package/dist/integrations/jobs.mjs

@@ -120,5 +120,4 @@ const jobsPluginImpl = async (fastify, options) => {
 const jobsPlugin = jobsPluginImpl;
 
 //#endregion
-export { jobsPlugin as default, jobsPlugin, defineJob };
-//# sourceMappingURL=jobs.mjs.map
+export { jobsPlugin as default, jobsPlugin, defineJob };

package/dist/integrations/streamline.d.mts

@@ -57,5 +57,4 @@ interface StreamlinePluginOptions {
 /** Pluggable streamline integration for Arc */
 declare const streamlinePlugin: FastifyPluginAsync<StreamlinePluginOptions>;
 //#endregion
-export { StreamlinePluginOptions, WorkflowLike, WorkflowRunLike, streamlinePlugin as default, streamlinePlugin };
-//# sourceMappingURL=streamline.d.mts.map
+export { StreamlinePluginOptions, WorkflowLike, WorkflowRunLike, streamlinePlugin as default, streamlinePlugin };

package/dist/integrations/streamline.mjs

@@ -122,5 +122,4 @@ const streamlinePluginImpl = async (fastify, options) => {
 const streamlinePlugin = streamlinePluginImpl;
 
 //#endregion
-export { streamlinePlugin as default, streamlinePlugin };
-//# sourceMappingURL=streamline.mjs.map
+export { streamlinePlugin as default, streamlinePlugin };

package/dist/integrations/websocket.d.mts

@@ -79,5 +79,4 @@ declare class RoomManager {
 /** Pluggable WebSocket integration for Arc */
 declare const websocketPlugin: FastifyPluginAsync<WebSocketPluginOptions>;
 //#endregion
-export { RoomManager, WebSocketClient, WebSocketMessage, WebSocketPluginOptions, websocketPlugin as default, websocketPlugin };
-//# sourceMappingURL=websocket.d.mts.map
+export { RoomManager, WebSocketClient, WebSocketMessage, WebSocketPluginOptions, websocketPlugin as default, websocketPlugin };

package/dist/integrations/websocket.mjs

@@ -285,5 +285,4 @@ const websocketPlugin = fp(websocketPluginImpl, {
 });
 
 //#endregion
-export { RoomManager, websocketPlugin as default, websocketPlugin };
-//# sourceMappingURL=websocket.mjs.map
+export { RoomManager, websocketPlugin as default, websocketPlugin };

package/dist/{interface-B01JvPVc.d.mts → interface-CSNjltAc.d.mts}

@@ -74,5 +74,4 @@ interface IdempotencyStore {
  */
 declare function createIdempotencyResult(statusCode: number, body: unknown, headers: Record<string, string>, ttlMs: number): Omit<IdempotencyResult, 'key'>;
 //#endregion
-export { createIdempotencyResult as i, IdempotencyResult as n, IdempotencyStore as r, IdempotencyLock as t };
-//# sourceMappingURL=interface-B01JvPVc.d.mts.map
+export { createIdempotencyResult as i, IdempotencyResult as n, IdempotencyStore as r, IdempotencyLock as t };

package/dist/{interface-Ch8HU9uM.d.mts → interface-Cb2klgid.d.mts}

@@ -1,5 +1,5 @@
-import { n as FieldPermissionMap } from "./fields-DyaDVX4J.mjs";
-import { i as UserBase } from "./types-aYB4V7uN.mjs";
+import { n as FieldPermissionMap } from "./fields-Bi_AVKSo.mjs";
+import { i as UserBase } from "./types-RLkFVgaw.mjs";
 import { AdditionalRoute, AnyRecord, ArcInternalMetadata, ControllerQueryOptions, CrudRouteKey, CrudSchemas, EventDefinition, IntrospectionData, MiddlewareConfig, OpenApiSchemas, QueryParserInterface, RateLimitConfig, RegistryEntry, RegistryStats, RequestContext, ResourceCacheConfig, ResourceConfig, ResourceMetadata, ResourcePermissions, RouteSchemaOptions } from "./types/index.mjs";
 import { FastifyPluginAsync, FastifyReply, FastifyRequest } from "fastify";
 
@@ -759,8 +759,8 @@ interface ControllerLike {
 //#endregion
 //#region src/core/AccessControl.d.ts
 interface AccessControlConfig {
-  /** Field name used for multi-tenant scoping (default: 'organizationId') */
-  tenantField: string;
+  /** Field name used for multi-tenant scoping (default: 'organizationId'). Set to `false` to disable org filtering. */
+  tenantField: string | false;
   /** Primary key field name (default: '_id') */
   idField: string;
   /**
@@ -876,8 +876,8 @@ interface QueryResolverConfig {
   defaultSort?: string;
   /** Schema options for field sanitization */
   schemaOptions?: RouteSchemaOptions;
-  /** Field name used for multi-tenant scoping (default: 'organizationId') */
-  tenantField?: string;
+  /** Field name used for multi-tenant scoping (default: 'organizationId'). Set to `false` to disable. */
+  tenantField?: string | false;
 }
 declare class QueryResolver {
   private queryParser;
@@ -926,8 +926,9 @@ interface BaseControllerOptions {
   /**
    * Field name used for multi-tenant scoping (default: 'organizationId').
    * Override to match your schema: 'workspaceId', 'tenantId', 'teamId', etc.
+   * Set to `false` to disable org filtering for platform-universal resources.
    */
-  tenantField?: string;
+  tenantField?: string | false;
   /**
    * Primary key field name (default: '_id').
    * Override for non-MongoDB adapters (e.g., 'id' for SQL databases).
@@ -965,7 +966,7 @@ declare class BaseController<TDoc = AnyRecord, TRepository extends RepositoryLik
   protected defaultLimit: number;
   protected defaultSort: string;
   protected resourceName?: string;
-  protected tenantField: string;
+  protected tenantField: string | false;
   protected idField: string;
   /** Composable access control (ID filtering, policy checks, org scope, ownership) */
   readonly accessControl: AccessControl;
@@ -1094,5 +1095,4 @@ interface ValidationResult {
 }
 type AdapterFactory<TDoc> = (config: unknown) => DataAdapter<TDoc>;
 //#endregion
-export { beforeUpdate as $, PaginationParams as A, DefineHookOptions as B, RegisterOptions as C, CrudRepository as D, defineResource as E, OperationFilter as F, HookRegistration as G, HookHandler as H, PipelineConfig as I, afterCreate as J, HookSystem as K, PipelineContext as L, Guard as M, Interceptor as N, InferDoc as O, NextFunction as P, beforeDelete as Q, PipelineStep as R, RouteHandler as S, ResourceDefinition as T, HookOperation as U, HookContext as V, HookPhase as W, afterUpdate as X, afterDelete as Y, beforeCreate as Z, ControllerLike as _, RepositoryLike as a, IControllerResponse as b, BaseController as c, QueryResolverConfig as d, createHookSystem as et, BodySanitizer as f, ControllerHandler as g, AccessControlConfig as h, RelationMetadata as i, QueryOptions as j, PaginatedResult as k, BaseControllerOptions as l, AccessControl as m, DataAdapter as n, SchemaMetadata as o, BodySanitizerConfig as p, HookSystemOptions as q, FieldMetadata as r, ValidationResult as s, AdapterFactory as t, defineHook as tt, QueryResolver as u, FastifyHandler as v, ResourceRegistry as w, IRequestContext as x, IController as y, Transform as z };
-//# sourceMappingURL=interface-Ch8HU9uM.d.mts.map
+export { beforeUpdate as $, PaginationParams as A, DefineHookOptions as B, RegisterOptions as C, CrudRepository as D, defineResource as E, OperationFilter as F, HookRegistration as G, HookHandler as H, PipelineConfig as I, afterCreate as J, HookSystem as K, PipelineContext as L, Guard as M, Interceptor as N, InferDoc as O, NextFunction as P, beforeDelete as Q, PipelineStep as R, RouteHandler as S, ResourceDefinition as T, HookOperation as U, HookContext as V, HookPhase as W, afterUpdate as X, afterDelete as Y, beforeCreate as Z, ControllerLike as _, RepositoryLike as a, IControllerResponse as b, BaseController as c, QueryResolverConfig as d, createHookSystem as et, BodySanitizer as f, ControllerHandler as g, AccessControlConfig as h, RelationMetadata as i, QueryOptions as j, PaginatedResult as k, BaseControllerOptions as l, AccessControl as m, DataAdapter as n, SchemaMetadata as o, BodySanitizerConfig as p, HookSystemOptions as q, FieldMetadata as r, ValidationResult as s, AdapterFactory as t, defineHook as tt, QueryResolver as u, FastifyHandler as v, ResourceRegistry as w, IRequestContext as x, IController as y, Transform as z };

package/dist/{interface-CZe8IkMf.d.mts → interface-DTbsvIWe.d.mts}

@@ -51,5 +51,4 @@ interface CacheStore<TValue = unknown> {
   stats?(): CacheStats;
 }
 //#endregion
-export { CacheStore as i, CacheSetOptions as n, CacheStats as r, CacheLogger as t };
-//# sourceMappingURL=interface-CZe8IkMf.d.mts.map
+export { CacheStore as i, CacheSetOptions as n, CacheStats as r, CacheLogger as t };

package/dist/{introspectionPlugin-rFdO8ZUa.mjs → introspectionPlugin-B3JkrjwU.mjs}

@@ -50,5 +50,4 @@ const introspectionPlugin = async (fastify, opts = {}) => {
 var introspectionPlugin_default = fp(introspectionPlugin, { name: "arc-introspection" });
 
 //#endregion
-export { introspectionPlugin_default as n, introspectionPlugin as t };
-//# sourceMappingURL=introspectionPlugin-rFdO8ZUa.mjs.map
+export { introspectionPlugin_default as n, introspectionPlugin as t };

package/dist/{keys-BqNejWup.mjs → keys-DhqDRxv3.mjs}

@@ -39,5 +39,4 @@ function djb2(str) {
 }
 
 //#endregion
-export { versionKey as i, hashParams as n, tagVersionKey as r, buildQueryKey as t };
-//# sourceMappingURL=keys-BqNejWup.mjs.map
+export { versionKey as i, hashParams as n, tagVersionKey as r, buildQueryKey as t };

package/dist/{logger-Df2O2WsW.mjs → logger-ByrvQWZO.mjs}

@@ -75,5 +75,4 @@ function isSuppressed() {
 }
 
 //#endregion
-export { configureArcLogger as n, logger_exports as r, arcLog as t };
-//# sourceMappingURL=logger-Df2O2WsW.mjs.map
+export { configureArcLogger as n, logger_exports as r, arcLog as t };

package/dist/{memory-cQgelFOj.mjs → memory-B2v7KrCB.mjs}

@@ -140,5 +140,4 @@ function clamp(value, min, max) {
 }
 
 //#endregion
-export { memory_exports as n, MemoryCacheStore as t };
-//# sourceMappingURL=memory-cQgelFOj.mjs.map
+export { memory_exports as n, MemoryCacheStore as t };

package/dist/migrations/index.d.mts

@@ -153,5 +153,4 @@ declare const migrationHelpers: {
   createIndex: (collection: string, fields: Record<string, 1 | -1>, options?: Record<string, unknown>) => Migration;
 };
 //#endregion
-export { Migration, MigrationRecord, MigrationRegistry, MigrationRunner, SchemaVersion, defineMigration, migrationHelpers, migrationRegistry, withSchemaVersion };
-//# sourceMappingURL=index.d.mts.map
+export { Migration, MigrationRecord, MigrationRegistry, MigrationRunner, SchemaVersion, defineMigration, migrationHelpers, migrationRegistry, withSchemaVersion };

package/dist/migrations/index.mjs

@@ -257,5 +257,4 @@ const migrationHelpers = {
 };
 
 //#endregion
-export { MigrationRegistry, MigrationRunner, defineMigration, migrationHelpers, migrationRegistry, withSchemaVersion };
-//# sourceMappingURL=index.mjs.map
+export { MigrationRegistry, MigrationRunner, defineMigration, migrationHelpers, migrationRegistry, withSchemaVersion };

package/dist/{mongodb-CGzRbfAK.d.mts → mongodb-ClykrfGo.d.mts}

@@ -1,4 +1,4 @@
-import { i as UserBase } from "./types-aYB4V7uN.mjs";
+import { i as UserBase } from "./types-RLkFVgaw.mjs";
 
 //#region src/audit/stores/interface.d.ts
 type AuditAction = 'create' | 'update' | 'delete' | 'restore' | 'custom';
@@ -115,5 +115,4 @@ declare class MongoAuditStore implements AuditStore {
   query(options?: AuditQueryOptions): Promise<AuditEntry[]>;
 }
 //#endregion
-export { AuditContext as a, AuditStore as c, AuditAction as i, AuditStoreOptions as l, MongoAuditStoreOptions as n, AuditEntry as o, MongoConnection as r, AuditQueryOptions as s, MongoAuditStore as t, createAuditEntry as u };
-//# sourceMappingURL=mongodb-CGzRbfAK.d.mts.map
+export { AuditContext as a, AuditStore as c, AuditAction as i, AuditStoreOptions as l, MongoAuditStoreOptions as n, AuditEntry as o, MongoConnection as r, AuditQueryOptions as s, MongoAuditStore as t, createAuditEntry as u };

package/dist/{mongodb-BfJVlUJH.mjs → mongodb-DNKEExbf.mjs}

@@ -90,5 +90,4 @@ var MongoAuditStore = class {
 };
 
 //#endregion
-export { MongoAuditStore as t };
-//# sourceMappingURL=mongodb-BfJVlUJH.mjs.map
+export { MongoAuditStore as t };

package/dist/{mongodb-JN-9JA7K.d.mts → mongodb-Dg8O_gvd.d.mts}

@@ -1,4 +1,4 @@
-import { n as IdempotencyResult, r as IdempotencyStore } from "./interface-B01JvPVc.mjs";
+import { n as IdempotencyResult, r as IdempotencyStore } from "./interface-CSNjltAc.mjs";
 
 //#region src/idempotency/stores/mongodb.d.ts
 interface MongoConnection {
@@ -68,5 +68,4 @@ declare class MongoIdempotencyStore implements IdempotencyStore {
   close(): Promise<void>;
 }
 //#endregion
-export { MongoIdempotencyStoreOptions as n, MongoIdempotencyStore as t };
-//# sourceMappingURL=mongodb-JN-9JA7K.d.mts.map
+export { MongoIdempotencyStoreOptions as n, MongoIdempotencyStore as t };

package/dist/{openapi-G3Cw7XuM.mjs → openapi-9nB_kiuR.mjs}

@@ -1,4 +1,5 @@
-import { n as convertRouteSchema } from "./schemaConverter-BwrmWroW.mjs";
+import { t as getUserRoles } from "./types-DelU6kln.mjs";
+import { n as convertRouteSchema } from "./schemaConverter-Dtg0Kt9T.mjs";
 import fp from "fastify-plugin";
 
 //#region src/docs/openapi.ts
@@ -34,7 +35,8 @@ const openApiPlugin = async (fastify, opts = {}) => {
 	fastify.get(`${prefix}/openapi.json`, async (request, reply) => {
 		if (authRoles.length > 0) {
 			const user = request.user;
-			if (!authRoles.some((role) => user?.roles?.includes(role)) && !user?.roles?.includes("superadmin")) {
+			const roles = getUserRoles(user);
+			if (!authRoles.some((r) => roles.includes(r)) && !roles.includes("superadmin")) {
 				reply.code(403).send({ error: "Access denied" });
 				return;
 			}
@@ -520,5 +522,4 @@ var openapi_default = fp(openApiPlugin, {
 });
 
 //#endregion
-export { openApiPlugin as n, openapi_default as r, buildOpenApiSpec as t };
-//# sourceMappingURL=openapi-G3Cw7XuM.mjs.map
+export { openApiPlugin as n, openapi_default as r, buildOpenApiSpec as t };

package/dist/org/index.d.mts

@@ -1,6 +1,6 @@
-import "../elevation-B_2dRLVP.mjs";
-import { S as RouteHandler } from "../interface-Ch8HU9uM.mjs";
-import { i as UserBase } from "../types-aYB4V7uN.mjs";
+import "../elevation-DGo5shaX.mjs";
+import { S as RouteHandler } from "../interface-Cb2klgid.mjs";
+import { i as UserBase } from "../types-RLkFVgaw.mjs";
 import "../types/index.mjs";
 import { InvitationAdapter, InvitationDoc, MemberDoc, OrgAdapter, OrgDoc, OrgPermissionStatement, OrgRole, OrganizationPluginOptions } from "./types.mjs";
 import { FastifyPluginAsync, RouteHandlerMethod } from "fastify";
@@ -65,5 +65,4 @@ declare module 'fastify' {
 declare const organizationPlugin: FastifyPluginAsync<OrganizationPluginOptions>;
 declare const _default: FastifyPluginAsync<OrganizationPluginOptions>;
 //#endregion
-export { type InvitationAdapter, type InvitationDoc, type MemberDoc, type OrgAdapter, type OrgDoc, type OrgGuardOptions, type OrgMembershipOptions, type OrgPermissionStatement, type OrgRole, type OrgRolesOptions, type OrganizationPluginOptions, getUserOrgRoles, hasOrgRole, orgGuard, orgMembershipCheck, _default as organizationPlugin, organizationPlugin as organizationPluginFn, requireOrg, requireOrgRole };
-//# sourceMappingURL=index.d.mts.map
+export { type InvitationAdapter, type InvitationDoc, type MemberDoc, type OrgAdapter, type OrgDoc, type OrgGuardOptions, type OrgMembershipOptions, type OrgPermissionStatement, type OrgRole, type OrgRolesOptions, type OrganizationPluginOptions, getUserOrgRoles, hasOrgRole, orgGuard, orgMembershipCheck, _default as organizationPlugin, organizationPlugin as organizationPluginFn, requireOrg, requireOrgRole };

package/dist/org/index.mjs

@@ -510,5 +510,4 @@ var organizationPlugin_default = fp(organizationPlugin, {
 });
 
 //#endregion
-export { getUserOrgRoles, hasOrgRole, orgGuard, orgMembershipCheck, organizationPlugin_default as organizationPlugin, organizationPlugin as organizationPluginFn, requireOrg, requireOrgRole };
-//# sourceMappingURL=index.mjs.map
+export { getUserOrgRoles, hasOrgRole, orgGuard, orgMembershipCheck, organizationPlugin_default as organizationPlugin, organizationPlugin as organizationPluginFn, requireOrg, requireOrgRole };

package/dist/org/types.d.mts

@@ -79,5 +79,4 @@ interface OrganizationPluginOptions {
   enableInvitations?: boolean;
 }
 //#endregion
-export { InvitationAdapter, InvitationDoc, MemberDoc, OrgAdapter, OrgDoc, OrgPermissionStatement, OrgRole, OrganizationPluginOptions };
-//# sourceMappingURL=types.d.mts.map
+export { InvitationAdapter, InvitationDoc, MemberDoc, OrgAdapter, OrgDoc, OrgPermissionStatement, OrgRole, OrganizationPluginOptions };

package/dist/permissions/index.d.mts

@@ -1,7 +1,7 @@
-import { a as applyFieldWritePermissions, i as applyFieldReadPermissions, n as FieldPermissionMap, o as fields, r as FieldPermissionType, s as resolveEffectiveRoles, t as FieldPermission } from "../fields-DyaDVX4J.mjs";
-import { i as UserBase, n as PermissionContext, r as PermissionResult, t as PermissionCheck } from "../types-aYB4V7uN.mjs";
-import { i as CacheStore, t as CacheLogger } from "../interface-CZe8IkMf.mjs";
-import { a as presets_d_exports, c as readOnly, i as ownerWithAdminBypass, n as authenticated, o as publicRead, r as fullPublic, s as publicReadAdminWrite, t as adminOnly } from "../presets-DzSMwlKj.mjs";
+import { a as applyFieldWritePermissions, i as applyFieldReadPermissions, n as FieldPermissionMap, o as fields, r as FieldPermissionType, s as resolveEffectiveRoles, t as FieldPermission } from "../fields-Bi_AVKSo.mjs";
+import { a as getUserRoles, i as UserBase, n as PermissionContext, o as normalizeRoles, r as PermissionResult, t as PermissionCheck } from "../types-RLkFVgaw.mjs";
+import { i as CacheStore, t as CacheLogger } from "../interface-DTbsvIWe.mjs";
+import { a as presets_d_exports, c as readOnly, i as ownerWithAdminBypass, n as authenticated, o as publicRead, r as fullPublic, s as publicReadAdminWrite, t as adminOnly } from "../presets-BTeYbw7h.mjs";
 
 //#region src/permissions/index.d.ts
 interface DynamicPermissionMatrixConfig {
@@ -275,5 +275,4 @@ declare function createDynamicPermissionMatrix(config: DynamicPermissionMatrixCo
  */
 declare function requireTeamMembership<TDoc = any>(): PermissionCheck<TDoc>;
 //#endregion
-export { ConnectEventsOptions, DynamicPermissionMatrix, DynamicPermissionMatrixConfig, type FieldPermission, type FieldPermissionMap, type FieldPermissionType, type PermissionCheck, type PermissionContext, PermissionEventBus, type PermissionResult, type UserBase, adminOnly, allOf, allowPublic, anyOf, applyFieldReadPermissions, applyFieldWritePermissions, authenticated, createDynamicPermissionMatrix, createOrgPermissions, denyAll, fields, fullPublic, ownerWithAdminBypass, presets_d_exports as permissions, publicRead, publicReadAdminWrite, readOnly, requireAuth, requireOrgMembership, requireOrgRole, requireOwnership, requireRoles, requireTeamMembership, resolveEffectiveRoles, when };
-//# sourceMappingURL=index.d.mts.map
+export { ConnectEventsOptions, DynamicPermissionMatrix, DynamicPermissionMatrixConfig, type FieldPermission, type FieldPermissionMap, type FieldPermissionType, type PermissionCheck, type PermissionContext, PermissionEventBus, type PermissionResult, type UserBase, adminOnly, allOf, allowPublic, anyOf, applyFieldReadPermissions, applyFieldWritePermissions, authenticated, createDynamicPermissionMatrix, createOrgPermissions, denyAll, fields, fullPublic, getUserRoles, normalizeRoles, ownerWithAdminBypass, presets_d_exports as permissions, publicRead, publicReadAdminWrite, readOnly, requireAuth, requireOrgMembership, requireOrgRole, requireOwnership, requireRoles, requireTeamMembership, resolveEffectiveRoles, when };

package/dist/permissions/index.mjs

@@ -1,7 +1,8 @@
 import { a as getTeamId, c as isElevated, l as isMember, n as PUBLIC_SCOPE } from "../types-Beqn1Un7.mjs";
-import { i as resolveEffectiveRoles, n as applyFieldWritePermissions, r as fields, t as applyFieldReadPermissions } from "../fields-iagOozy0.mjs";
-import { t as MemoryCacheStore } from "../memory-cQgelFOj.mjs";
-import { a as presets_exports, c as readOnly, i as ownerWithAdminBypass, n as authenticated, o as publicRead, r as fullPublic, s as publicReadAdminWrite, t as adminOnly } from "../presets-BITljm96.mjs";
+import { i as resolveEffectiveRoles, n as applyFieldWritePermissions, r as fields, t as applyFieldReadPermissions } from "../fields-CTd_CrKr.mjs";
+import { n as normalizeRoles, t as getUserRoles } from "../types-DelU6kln.mjs";
+import { t as MemoryCacheStore } from "../memory-B2v7KrCB.mjs";
+import { a as presets_exports, c as readOnly, i as ownerWithAdminBypass, n as authenticated, o as publicRead, r as fullPublic, s as publicReadAdminWrite, t as adminOnly } from "../presets-CeFtfDR8.mjs";
 import { randomUUID } from "node:crypto";
 
 //#region src/permissions/index.ts
@@ -67,7 +68,7 @@ function requireRoles(roles, options) {
 			granted: false,
 			reason: "Authentication required"
 		};
-		const userRoles = ctx.user.roles ?? [];
+		const userRoles = getUserRoles(ctx.user);
 		if (options?.bypassRoles?.some((r) => userRoles.includes(r))) return true;
 		if (roles.some((r) => userRoles.includes(r))) return true;
 		return {
@@ -100,7 +101,7 @@ function requireOwnership(ownerField = "userId", options) {
 			granted: false,
 			reason: "Authentication required"
 		};
-		const userRoles = ctx.user.roles ?? [];
+		const userRoles = getUserRoles(ctx.user);
 		if (options?.bypassRoles?.some((r) => userRoles.includes(r))) return true;
 		const userId = ctx.user.id ?? ctx.user._id;
 		if (!userId) return {
@@ -575,5 +576,4 @@ function requireTeamMembership() {
 }
 
 //#endregion
-export { adminOnly, allOf, allowPublic, anyOf, applyFieldReadPermissions, applyFieldWritePermissions, authenticated, createDynamicPermissionMatrix, createOrgPermissions, denyAll, fields, fullPublic, ownerWithAdminBypass, presets_exports as permissions, publicRead, publicReadAdminWrite, readOnly, requireAuth, requireOrgMembership, requireOrgRole, requireOwnership, requireRoles, requireTeamMembership, resolveEffectiveRoles, when };
-//# sourceMappingURL=index.mjs.map
+export { adminOnly, allOf, allowPublic, anyOf, applyFieldReadPermissions, applyFieldWritePermissions, authenticated, createDynamicPermissionMatrix, createOrgPermissions, denyAll, fields, fullPublic, getUserRoles, normalizeRoles, ownerWithAdminBypass, presets_exports as permissions, publicRead, publicReadAdminWrite, readOnly, requireAuth, requireOrgMembership, requireOrgRole, requireOwnership, requireRoles, requireTeamMembership, resolveEffectiveRoles, when };

package/dist/plugins/index.d.mts

@@ -1,10 +1,10 @@
-import "../elevation-B_2dRLVP.mjs";
-import { K as HookSystem, w as ResourceRegistry } from "../interface-Ch8HU9uM.mjs";
-import "../types-aYB4V7uN.mjs";
+import "../elevation-DGo5shaX.mjs";
+import { K as HookSystem, w as ResourceRegistry } from "../interface-Cb2klgid.mjs";
+import "../types-RLkFVgaw.mjs";
 import { AdditionalRoute, AnyRecord, MiddlewareConfig, PresetHook, RouteSchemaOptions } from "../types/index.mjs";
-import { t as ExternalOpenApiPaths } from "../externalPaths-DlINfKbP.mjs";
-import { a as ssePlugin, c as _default$1, i as _default$5, l as cachingPlugin, n as errorHandlerPlugin, o as CachingOptions, r as SSEOptions, s as CachingRule, t as ErrorHandlerOptions } from "../errorHandler-BbcgBmIH.mjs";
-import { t as TracingOptions } from "../tracing-Cc7vVQPp.mjs";
+import { t as ExternalOpenApiPaths } from "../externalPaths-SyPF2tgK.mjs";
+import { a as ssePlugin, c as _default$1, i as _default$5, l as cachingPlugin, n as errorHandlerPlugin, o as CachingOptions, r as SSEOptions, s as CachingRule, t as ErrorHandlerOptions } from "../errorHandler-CW3OOeYq.mjs";
+import { t as TracingOptions } from "../tracing-8CEbhF0w.mjs";
 import { FastifyInstance, FastifyPluginAsync } from "fastify";
 
 //#region src/plugins/requestId.d.ts
@@ -169,5 +169,4 @@ declare module 'fastify' {
 declare const arcCorePlugin: FastifyPluginAsync<ArcCorePluginOptions>;
 declare const _default: FastifyPluginAsync<ArcCorePluginOptions>;
 //#endregion
-export { type ArcCore, type ArcCorePluginOptions, type ArcPlugin, type CachingOptions, type CachingRule, type CreatePluginDefinition, type ErrorHandlerOptions, type GracefulShutdownOptions, type HealthCheck, type HealthOptions, type PluginMeta, type PluginResourceResult, type RequestIdOptions, type SSEOptions, type TracingOptions, _default as arcCorePlugin, arcCorePlugin as arcCorePluginFn, _default$1 as cachingPlugin, cachingPlugin as cachingPluginFn, createPlugin, errorHandlerPlugin, errorHandlerPlugin as errorHandlerPluginFn, _default$2 as gracefulShutdownPlugin, gracefulShutdownPlugin as gracefulShutdownPluginFn, _default$3 as healthPlugin, healthPlugin as healthPluginFn, _default$4 as requestIdPlugin, requestIdPlugin as requestIdPluginFn, _default$5 as ssePlugin, ssePlugin as ssePluginFn };
-//# sourceMappingURL=index.d.mts.map
+export { type ArcCore, type ArcCorePluginOptions, type ArcPlugin, type CachingOptions, type CachingRule, type CreatePluginDefinition, type ErrorHandlerOptions, type GracefulShutdownOptions, type HealthCheck, type HealthOptions, type PluginMeta, type PluginResourceResult, type RequestIdOptions, type SSEOptions, type TracingOptions, _default as arcCorePlugin, arcCorePlugin as arcCorePluginFn, _default$1 as cachingPlugin, cachingPlugin as cachingPluginFn, createPlugin, errorHandlerPlugin, errorHandlerPlugin as errorHandlerPluginFn, _default$2 as gracefulShutdownPlugin, gracefulShutdownPlugin as gracefulShutdownPluginFn, _default$3 as healthPlugin, healthPlugin as healthPluginFn, _default$4 as requestIdPlugin, requestIdPlugin as requestIdPluginFn, _default$5 as ssePlugin, ssePlugin as ssePluginFn };

package/dist/plugins/index.mjs

@@ -1,12 +1,12 @@
 import { p as MUTATION_OPERATIONS } from "../constants-DdXFXQtN.mjs";
 import { r as getOrgId } from "../types-Beqn1Un7.mjs";
 import { t as HookSystem } from "../HookSystem-BsGV-j2l.mjs";
-import { t as hasEvents } from "../typeGuards-DhMNLuvU.mjs";
-import { t as requestContext } from "../requestContext-QQD6ROJc.mjs";
-import { t as ResourceRegistry } from "../ResourceRegistry-DsN4KJjV.mjs";
-import { t as errorHandlerPlugin } from "../errorHandler-C1okiriz.mjs";
-import { n as caching_default, t as cachingPlugin } from "../caching-Bl28lYsR.mjs";
-import { n as sse_default, t as ssePlugin } from "../sse-B3c3_yZp.mjs";
+import { t as hasEvents } from "../typeGuards-DwxA1t_L.mjs";
+import { t as requestContext } from "../requestContext-xi6OKBL-.mjs";
+import { t as ResourceRegistry } from "../ResourceRegistry-7Ic20ZMw.mjs";
+import { t as errorHandlerPlugin } from "../errorHandler-C3GY3_ow.mjs";
+import { n as caching_default, t as cachingPlugin } from "../caching-GSDJcA6-.mjs";
+import { n as sse_default, t as ssePlugin } from "../sse-DkqQ1uxb.mjs";
 import fp from "fastify-plugin";
 import { randomUUID } from "crypto";
 
@@ -519,5 +519,4 @@ var arcCorePlugin_default = fp(arcCorePlugin, {
 });
 
 //#endregion
-export { arcCorePlugin_default as arcCorePlugin, arcCorePlugin as arcCorePluginFn, caching_default as cachingPlugin, cachingPlugin as cachingPluginFn, createPlugin, errorHandlerPlugin, errorHandlerPlugin as errorHandlerPluginFn, gracefulShutdown_default as gracefulShutdownPlugin, gracefulShutdownPlugin as gracefulShutdownPluginFn, health_default as healthPlugin, healthPlugin as healthPluginFn, requestId_default as requestIdPlugin, requestIdPlugin as requestIdPluginFn, sse_default as ssePlugin, ssePlugin as ssePluginFn };
-//# sourceMappingURL=index.mjs.map
+export { arcCorePlugin_default as arcCorePlugin, arcCorePlugin as arcCorePluginFn, caching_default as cachingPlugin, cachingPlugin as cachingPluginFn, createPlugin, errorHandlerPlugin, errorHandlerPlugin as errorHandlerPluginFn, gracefulShutdown_default as gracefulShutdownPlugin, gracefulShutdownPlugin as gracefulShutdownPluginFn, health_default as healthPlugin, healthPlugin as healthPluginFn, requestId_default as requestIdPlugin, requestIdPlugin as requestIdPluginFn, sse_default as ssePlugin, ssePlugin as ssePluginFn };

package/dist/plugins/response-cache.d.mts

@@ -84,5 +84,4 @@ declare module "fastify" {
 }
 declare const responseCachePlugin: FastifyPluginAsync<ResponseCacheOptions>;
 //#endregion
-export { ResponseCacheOptions, ResponseCacheRule, ResponseCacheStats, responseCachePlugin as default, responseCachePlugin };
-//# sourceMappingURL=response-cache.d.mts.map
+export { ResponseCacheOptions, ResponseCacheRule, ResponseCacheStats, responseCachePlugin as default, responseCachePlugin };

package/dist/plugins/response-cache.mjs

@@ -1,4 +1,4 @@
-import { t as hasEvents } from "../typeGuards-DhMNLuvU.mjs";
+import { t as hasEvents } from "../typeGuards-DwxA1t_L.mjs";
 import fp from "fastify-plugin";
 
 //#region src/plugins/response-cache.ts
@@ -280,5 +280,4 @@ const responseCachePlugin = fp(responseCachePluginImpl, {
 });
 
 //#endregion
-export { responseCachePlugin as default, responseCachePlugin };
-//# sourceMappingURL=response-cache.mjs.map
+export { responseCachePlugin as default, responseCachePlugin };

package/dist/plugins/tracing-entry.d.mts

@@ -1,2 +1,2 @@
-import { a as traced, i as isTracingAvailable, n as _default, r as createSpan, t as TracingOptions } from "../tracing-Cc7vVQPp.mjs";
+import { a as traced, i as isTracingAvailable, n as _default, r as createSpan, t as TracingOptions } from "../tracing-8CEbhF0w.mjs";
 export { type TracingOptions, createSpan, isTracingAvailable, traced, _default as tracingPlugin };

package/dist/plugins/tracing-entry.mjs

@@ -182,5 +182,4 @@ var tracing_default = fp(tracingPlugin, {
 });
 
 //#endregion
-export { createSpan, isTracingAvailable, traced, tracing_default as tracingPlugin };
-//# sourceMappingURL=tracing-entry.mjs.map
+export { createSpan, isTracingAvailable, traced, tracing_default as tracingPlugin };

package/dist/{pluralize-CEweyOEm.mjs → pluralize-CM-jZg7p.mjs}

@@ -83,5 +83,4 @@ function pluralize(word) {
 }
 
 //#endregion
-export { pluralize as t };
-//# sourceMappingURL=pluralize-CEweyOEm.mjs.map
+export { pluralize as t };

package/dist/policies/index.d.mts

@@ -1,4 +1,4 @@
-import { t as PermissionCheck } from "../types-aYB4V7uN.mjs";
+import { t as PermissionCheck } from "../types-RLkFVgaw.mjs";
 import { FastifyReply, FastifyRequest } from "fastify";
 
 //#region src/policies/PolicyInterface.d.ts
@@ -106,7 +106,7 @@ interface PolicyContext {
  *   can(user, operation, context) {
  *     // Check RBAC
  *     const allowedRoles = this.config.roles[operation] || [];
- *     if (!user.roles.some(r => allowedRoles.includes(r))) {
+ *     if (!getUserRoles(user).some(r => allowedRoles.includes(r))) {
  *       return { allowed: false, reason: 'Insufficient permissions' };
  *     }
  *
@@ -321,7 +321,7 @@ declare module 'fastify' {
   interface FastifyRequest {
     policyResult?: PolicyResult;
   }
-} //# sourceMappingURL=PolicyInterface.d.ts.map
+}
 //#endregion
 //#region src/policies/helpers.d.ts
 /**
@@ -429,5 +429,4 @@ declare function allowAll(): PolicyEngine;
  */
 declare function denyAll(reason?: string): PolicyEngine;
 //#endregion
-export { type AccessControlPolicyOptions, type AccessControlStatement, type PolicyContext, type PolicyEngine, type PolicyFactory, type PolicyResult, allowAll, anyPolicy, combinePolicies, createAccessControlPolicy, createPolicyMiddleware, denyAll };
-//# sourceMappingURL=index.d.mts.map
+export { type AccessControlPolicyOptions, type AccessControlStatement, type PolicyContext, type PolicyEngine, type PolicyFactory, type PolicyResult, allowAll, anyPolicy, combinePolicies, createAccessControlPolicy, createPolicyMiddleware, denyAll };

package/dist/policies/index.mjs

@@ -318,5 +318,4 @@ function denyAll(reason = "Operation not allowed") {
 }
 
 //#endregion
-export { allowAll, anyPolicy, combinePolicies, createAccessControlPolicy, createPolicyMiddleware, denyAll };
-//# sourceMappingURL=index.mjs.map
+export { allowAll, anyPolicy, combinePolicies, createAccessControlPolicy, createPolicyMiddleware, denyAll };

package/dist/presets/index.d.mts

@@ -1,6 +1,6 @@
-import "../elevation-B_2dRLVP.mjs";
-import { b as IControllerResponse, k as PaginatedResult, x as IRequestContext } from "../interface-Ch8HU9uM.mjs";
-import "../types-aYB4V7uN.mjs";
+import "../elevation-DGo5shaX.mjs";
+import { b as IControllerResponse, k as PaginatedResult, x as IRequestContext } from "../interface-Cb2klgid.mjs";
+import "../types-RLkFVgaw.mjs";
 import { AnyRecord, PresetResult, ResourceConfig } from "../types/index.mjs";
 import multiTenantPreset, { MultiTenantOptions } from "./multiTenant.mjs";
 
@@ -264,5 +264,4 @@ type PresetInput = string | PresetResult | {
  */
 declare function applyPresets<TDoc = AnyRecord>(config: ResourceConfig<TDoc>, presets?: PresetInput[]): ResourceConfig<TDoc>;
 //#endregion
-export { type AuditedPresetOptions, type IAuditedPreset, type IMultiTenantPreset, type IOwnedByUserPreset, type IPresetController, type ISlugLookupController, type ISoftDeleteController, type ITreeController, type MultiTenantOptions, type OwnedByUserOptions, type SlugLookupOptions, type TreeOptions, applyPresets, auditedPreset, flexibleMultiTenantPreset, getAvailablePresets, getPreset, multiTenantPreset, ownedByUserPreset, registerPreset, slugLookupPreset, softDeletePreset, treePreset };
-//# sourceMappingURL=index.d.mts.map
+export { type AuditedPresetOptions, type IAuditedPreset, type IMultiTenantPreset, type IOwnedByUserPreset, type IPresetController, type ISlugLookupController, type ISoftDeleteController, type ITreeController, type MultiTenantOptions, type OwnedByUserOptions, type SlugLookupOptions, type TreeOptions, applyPresets, auditedPreset, flexibleMultiTenantPreset, getAvailablePresets, getPreset, multiTenantPreset, ownedByUserPreset, registerPreset, slugLookupPreset, softDeletePreset, treePreset };

package/dist/presets/index.mjs

@@ -1,4 +1,4 @@
-import { a as softDeletePreset, i as slugLookupPreset, n as treePreset, r as ownedByUserPreset, t as auditedPreset } from "../audited-C3T5DTUx.mjs";
+import { a as softDeletePreset, i as slugLookupPreset, n as treePreset, r as ownedByUserPreset, t as auditedPreset } from "../audited-CGdLiSlE.mjs";
 import multiTenantPreset from "./multiTenant.mjs";
 
 //#region src/presets/index.ts
@@ -140,5 +140,4 @@ function mergePreset(config, preset) {
 }
 
 //#endregion
-export { applyPresets, auditedPreset, flexibleMultiTenantPreset, getAvailablePresets, getPreset, multiTenantPreset, ownedByUserPreset, registerPreset, slugLookupPreset, softDeletePreset, treePreset };
-//# sourceMappingURL=index.mjs.map
+export { applyPresets, auditedPreset, flexibleMultiTenantPreset, getAvailablePresets, getPreset, multiTenantPreset, ownedByUserPreset, registerPreset, slugLookupPreset, softDeletePreset, treePreset };

package/dist/presets/multiTenant.d.mts

@@ -1,6 +1,6 @@
-import "../elevation-B_2dRLVP.mjs";
-import "../interface-Ch8HU9uM.mjs";
-import "../types-aYB4V7uN.mjs";
+import "../elevation-DGo5shaX.mjs";
+import "../interface-Cb2klgid.mjs";
+import "../types-RLkFVgaw.mjs";
 import { CrudRouteKey, PresetResult } from "../types/index.mjs";
 
 //#region src/presets/multiTenant.d.ts
@@ -21,5 +21,4 @@ interface MultiTenantOptions {
 }
 declare function multiTenantPreset(options?: MultiTenantOptions): PresetResult;
 //#endregion
-export { MultiTenantOptions, multiTenantPreset as default, multiTenantPreset };
-//# sourceMappingURL=multiTenant.d.mts.map
+export { MultiTenantOptions, multiTenantPreset as default, multiTenantPreset };

package/dist/presets/multiTenant.mjs

@@ -110,5 +110,4 @@ function multiTenantPreset(options = {}) {
 }
 
 //#endregion
-export { multiTenantPreset as default, multiTenantPreset };
-//# sourceMappingURL=multiTenant.mjs.map
+export { multiTenantPreset as default, multiTenantPreset };

package/dist/{presets-DzSMwlKj.d.mts → presets-BTeYbw7h.d.mts}

@@ -1,4 +1,4 @@
-import { t as PermissionCheck } from "./types-aYB4V7uN.mjs";
+import { t as PermissionCheck } from "./types-RLkFVgaw.mjs";
 
 //#region src/permissions/presets.d.ts
 declare namespace presets_d_exports {
@@ -54,5 +54,4 @@ declare function fullPublic<TDoc = any>(overrides?: PermissionOverrides<TDoc>):
  */
 declare function readOnly<TDoc = any>(overrides?: PermissionOverrides<TDoc>): ResourcePermissions<TDoc>;
 //#endregion
-export { presets_d_exports as a, readOnly as c, ownerWithAdminBypass as i, authenticated as n, publicRead as o, fullPublic as r, publicReadAdminWrite as s, adminOnly as t };
-//# sourceMappingURL=presets-DzSMwlKj.d.mts.map
+export { presets_d_exports as a, readOnly as c, ownerWithAdminBypass as i, authenticated as n, publicRead as o, fullPublic as r, publicReadAdminWrite as s, adminOnly as t };

package/dist/{presets-BITljm96.mjs → presets-CeFtfDR8.mjs}

@@ -116,5 +116,4 @@ function readOnly(overrides) {
 }
 
 //#endregion
-export { presets_exports as a, readOnly as c, ownerWithAdminBypass as i, authenticated as n, publicRead as o, fullPublic as r, publicReadAdminWrite as s, adminOnly as t };
-//# sourceMappingURL=presets-BITljm96.mjs.map
+export { presets_exports as a, readOnly as c, ownerWithAdminBypass as i, authenticated as n, publicRead as o, fullPublic as r, publicReadAdminWrite as s, adminOnly as t };

package/dist/prisma-DJbMt3yf.mjs

@@ -624,5 +624,4 @@ function createPrismaAdapter(options) {
 }
 
 //#endregion
-export { createMongooseAdapter as a, MongooseAdapter as i, PrismaQueryParser as n, createPrismaAdapter as r, PrismaAdapter as t };
-//# sourceMappingURL=prisma-DJbMt3yf.mjs.map
+export { createMongooseAdapter as a, MongooseAdapter as i, PrismaQueryParser as n, createPrismaAdapter as r, PrismaAdapter as t };

package/dist/{prisma-Dg9GoVdj.d.mts → prisma-DQBSSHAB.d.mts}

@@ -1,4 +1,4 @@
-import { D as CrudRepository, a as RepositoryLike, n as DataAdapter, o as SchemaMetadata, s as ValidationResult } from "./interface-Ch8HU9uM.mjs";
+import { D as CrudRepository, a as RepositoryLike, n as DataAdapter, o as SchemaMetadata, s as ValidationResult } from "./interface-Cb2klgid.mjs";
 import { OpenApiSchemas, ParsedQuery, QueryParserInterface, RouteSchemaOptions } from "./types/index.mjs";
 import { Model } from "mongoose";
 
@@ -271,5 +271,4 @@ declare class PrismaAdapter<TModel = unknown> implements DataAdapter<TModel> {
  */
 declare function createPrismaAdapter<TModel>(options: PrismaAdapterOptions<TModel>): PrismaAdapter<TModel>;
 //#endregion
-export { PrismaQueryParserOptions as a, MongooseAdapterOptions as c, PrismaQueryParser as i, createMongooseAdapter as l, PrismaAdapterOptions as n, createPrismaAdapter as o, PrismaQueryOptions as r, MongooseAdapter as s, PrismaAdapter as t };
-//# sourceMappingURL=prisma-Dg9GoVdj.d.mts.map
+export { PrismaQueryParserOptions as a, MongooseAdapterOptions as c, PrismaQueryParser as i, createMongooseAdapter as l, PrismaAdapterOptions as n, createPrismaAdapter as o, PrismaQueryOptions as r, MongooseAdapter as s, PrismaAdapter as t };