@classytic/arc 2.10.3 → 2.11.0

package/dist/{index-8qw4y6ff.d.mts → index-t8pLpPFW.d.mts}

@@ -1,6 +1,6 @@
-import { r as RequestScope } from "./types-BD85MlEK.mjs";
-import { c as PermissionCheck } from "./fields-Lo1VUDpt.mjs";
-import { B as FastifyWithDecorators, G as ResourceDefinition, St as IRequestContext, Z as CrudController, bt as IController, dn as AnyRecord, lt as ResourceConfig, qt as RequestContext, w as CrudRouterOptions, xt as IControllerResponse } from "./index-Cl0uoKd5.mjs";
+import { B as ResourceDefinition, C as RequestContext, F as FastifyWithDecorators, Pt as AnyRecord, T as CrudRouterOptions, _t as IControllerResponse, at as ResourceConfig, gt as IController, q as CrudController, vt as IRequestContext } from "./index-Cm0vUrr_.mjs";
+import { r as RequestScope } from "./types-tgR4Pt8F.mjs";
+import { c as PermissionCheck } from "./fields-C8Y0XLAu.mjs";
 import { FastifyReply, FastifyRequest, RouteHandlerMethod } from "fastify";
 
 //#region src/constants.d.ts
@@ -54,16 +54,19 @@ declare const RESERVED_QUERY_PARAMS: Readonly<Set<string>>;
 //#endregion
 //#region src/core/createCrudRouter.d.ts
 /**
- * Create CRUD routes for a controller
+ * Create CRUD routes for a controller.
  *
- * @param fastify - Fastify instance with Arc decorators
- * @param controller - CRUD controller with handler methods
- * @param options - Router configuration
+ * @param fastify    - Fastify instance with Arc decorators
+ * @param controller - CRUD controller with handler methods (optional when
+ *                     `disableDefaultRoutes: true` and only custom `routes`
+ *                     are being registered)
+ * @param options    - Router configuration
  */
 declare function createCrudRouter<TDoc = unknown>(fastify: FastifyWithDecorators, controller: CrudController<TDoc> | undefined, options?: CrudRouterOptions): void;
 /**
- * Create permission middleware from PermissionCheck
- * Useful for custom route registration
+ * Build a permission middleware from a PermissionCheck — useful when hosts
+ * register their own routes outside the resource system but still want to
+ * evaluate permissions through the shared applicator.
  */
 declare function createPermissionMiddleware(permission: PermissionCheck, resourceName: string, action: string): RouteHandlerMethod | null;
 //#endregion
@@ -108,7 +111,7 @@ type VariantsResult<TDoc, V extends VariantsMap<TDoc>> = { [K in keyof V]: Resou
  * @returns A record where each key from `variants` maps to a real
  *          `ResourceDefinition` ready for `.toPlugin()` registration.
  */
-declare function defineResourceVariants<TDoc = AnyRecord, V extends VariantsMap<TDoc> = VariantsMap<TDoc>>(base: Omit<ResourceConfig<TDoc>, "name" | "prefix">, variants: V): VariantsResult<TDoc, V>;
+declare function defineResourceVariants<TDoc extends AnyRecord = AnyRecord, V extends VariantsMap<TDoc> = VariantsMap<TDoc>>(base: Omit<ResourceConfig<TDoc>, "name" | "prefix">, variants: V): VariantsResult<TDoc, V>;
 //#endregion
 //#region src/core/fastifyAdapter.d.ts
 /**

package/dist/index.d.mts

@@ -1,255 +1,11 @@
-import { a as applyFieldWritePermissions, c as PermissionCheck, d as UserBase, i as applyFieldReadPermissions, l as PermissionContext, n as FieldPermissionMap, o as fields, t as FieldPermission, u as PermissionResult } from "./fields-Lo1VUDpt.mjs";
-import { $ as CrudSchemas, At as SchemaMetadata, B as FastifyWithDecorators, Bt as ArcInternalMetadata, C as ResourceMetadata, Ct as RouteHandler, D as HealthOptions, Dt as FieldMetadata, E as HealthCheck, Et as DataAdapter, Ft as OperationFilter, G as ResourceDefinition, H as RequestWithExtras, It as PipelineConfig, Jt as ServiceContext, K as defineResource, Lt as PipelineContext, Mt as Guard, Nt as Interceptor, O as IntrospectionPluginOptions, Ot as RelationMetadata, Pt as NextFunction, Q as CrudRouteKey, R as FastifyRequestExtras, Rt as PipelineStep, S as RegistryStats, St as IRequestContext, T as GracefulShutdownOptions, Ut as OwnershipCheck, V as MiddlewareHandler, Z as CrudController, _ as ConfigError, _n as UserOrganization, b as IntrospectionData, bt as IController, d as InferAdapterDoc, dn as AnyRecord, et as EventDefinition, f as InferDocType, fn as ApiResponse, g as TypedResourceConfig, gt as RouteSchemaOptions, h as TypedRepository, it as PresetFunction, j as AuthPluginOptions, jt as ValidationResult, k as RequestIdOptions, kt as RepositoryLike, lt as ResourceConfig, m as TypedController, mn as JWTPayload, n as BaseController, nt as MiddlewareConfig, ot as PresetResult, p as InferResourceDoc, pn as ArcRequest, qt as RequestContext, r as BaseControllerOptions, st as RateLimitConfig, t as RouteHandlerMethod, tt as FieldRule, u as PaginationResult, v as ValidateOptions, vn as envelope, vt as ControllerLike, w as CrudRouterOptions, x as RegistryEntry, xt as IControllerResponse, y as ValidationResult$1, z as FastifyWithAuth, zt as Transform } from "./index-Cl0uoKd5.mjs";
-import { l as createMongooseAdapter, o as createPrismaAdapter, s as MongooseAdapter, t as PrismaAdapter } from "./index-DStwgFUK.mjs";
-import { C as MAX_REGEX_LENGTH, D as RESERVED_QUERY_PARAMS, E as MutationOperation, O as SYSTEM_FIELDS, S as MAX_FILTER_DEPTH, T as MUTATION_OPERATIONS, _ as DEFAULT_UPDATE_METHOD, a as getControllerScope, b as HookOperation, d as CrudOperation, f as DEFAULT_ID_FIELD, g as DEFAULT_TENANT_FIELD, h as DEFAULT_SORT, m as DEFAULT_MAX_LIMIT, p as DEFAULT_LIMIT, s as defineResourceVariants, u as CRUD_OPERATIONS, v as HOOK_OPERATIONS, w as MAX_SEARCH_LENGTH, x as HookPhase, y as HOOK_PHASES } from "./index-8qw4y6ff.mjs";
-import { A as requireRoles, C as allOf, E as denyAll, M as when, O as requireAuth, S as createOrgPermissions, T as anyOf, a as presets_d_exports, c as readOnly, d as requireOrgRole, f as requireScopeContext, i as ownerWithAdminBypass, k as requireOwnership, l as requireOrgInScope, m as requireTeamMembership, n as authenticated, o as publicRead, p as requireServiceScope, r as fullPublic, s as publicReadAdminWrite, t as adminOnly, u as requireOrgMembership, v as DynamicPermissionMatrix, w as allowPublic, x as createDynamicPermissionMatrix, y as DynamicPermissionMatrixConfig } from "./index-ChIw3776.mjs";
-import { a as NotFoundError, d as ValidationError, f as createDomainError, i as ForbiddenError, t as ArcError, u as UnauthorizedError } from "./errors-CCSsMpXE.mjs";
-import { AsyncLocalStorage } from "node:async_hooks";
-import { RouteHandlerMethod as RouteHandlerMethod$1 } from "fastify";
+import { $t as ArcListResult, A as RequestIdOptions, An as RelationMetadata, B as ResourceDefinition, Bt as UserOrganization, C as RequestContext, D as HealthCheck, E as GracefulShutdownOptions, F as FastifyWithDecorators, Ft as ApiResponse, Gt as TreeMixin, Ht as SoftDeleteExt, It as ArcRequest, J as CrudRouteKey, Jt as BulkExt, Kt as SlugExt, L as RequestWithExtras, Lt as JWTPayload, Mn as SchemaMetadata, N as FastifyRequestExtras, Nn as ValidationResult, O as HealthOptions, On as DataAdapter, P as FastifyWithAuth, Pt as AnyRecord, Q as MiddlewareConfig, Qt as ArcGetResult, S as QueryParserInterface, T as CrudRouterOptions, Ut as SoftDeleteMixin, V as defineResource, Vt as BaseController, Wt as TreeExt, X as EventDefinition, Xt as ArcCreateResult, Y as CrudSchemas, Yt as BulkMixin, Z as FieldRule, Zt as ArcDeleteResult, _t as IControllerResponse, a as InferAdapterDoc, at as ResourceConfig, c as TypedController, d as PaginationResult, en as ArcUpdateResult, et as PresetFunction, f as IntrospectionData, ft as RouteSchemaOptions, g as ArcInternalMetadata, gt as IController, h as ResourceMetadata, i as ValidationResult$1, jn as RepositoryLike, k as IntrospectionPluginOptions, kn as FieldMetadata, kt as AuthPluginOptions, l as TypedRepository, m as RegistryStats, mt as ControllerLike, n as ConfigError, nn as BaseCrudController, nt as PresetResult, o as InferDocType, p as RegistryEntry, q as CrudController, qt as SlugMixin, r as ValidateOptions, rn as ListResult, rt as RateLimitConfig, s as InferResourceDoc, t as RouteHandlerMethod, tn as BaseControllerOptions, u as TypedResourceConfig, vt as IRequestContext, w as ServiceContext, y as OwnershipCheck, yt as RouteHandler } from "./index-Cm0vUrr_.mjs";
+import { a as applyFieldWritePermissions, c as PermissionCheck, d as UserBase, i as applyFieldReadPermissions, l as PermissionContext, n as FieldPermissionMap, o as fields, t as FieldPermission, u as PermissionResult } from "./fields-C8Y0XLAu.mjs";
+import { l as createMongooseAdapter, o as createPrismaAdapter, s as MongooseAdapter, t as PrismaAdapter } from "./index-DAushRTt.mjs";
+import { C as MAX_REGEX_LENGTH, D as RESERVED_QUERY_PARAMS, E as MutationOperation, O as SYSTEM_FIELDS, S as MAX_FILTER_DEPTH, T as MUTATION_OPERATIONS, _ as DEFAULT_UPDATE_METHOD, a as getControllerScope, b as HookOperation, d as CrudOperation, f as DEFAULT_ID_FIELD, g as DEFAULT_TENANT_FIELD, h as DEFAULT_SORT, m as DEFAULT_MAX_LIMIT, p as DEFAULT_LIMIT, s as defineResourceVariants, u as CRUD_OPERATIONS, v as HOOK_OPERATIONS, w as MAX_SEARCH_LENGTH, x as HookPhase, y as HOOK_PHASES } from "./index-t8pLpPFW.mjs";
+import { A as requireRoles, C as allOf, E as denyAll, M as when, O as requireAuth, S as createOrgPermissions, T as anyOf, a as presets_d_exports, c as readOnly, d as requireOrgRole, f as requireScopeContext, i as ownerWithAdminBypass, k as requireOwnership, l as requireOrgInScope, m as requireTeamMembership, n as authenticated, o as publicRead, p as requireServiceScope, r as fullPublic, s as publicReadAdminWrite, t as adminOnly, u as requireOrgMembership, v as DynamicPermissionMatrix, w as allowPublic, x as createDynamicPermissionMatrix, y as DynamicPermissionMatrixConfig } from "./index-BYCqHCVu.mjs";
+import { ft as UnauthorizedError, j as envelope, mt as createDomainError, ot as ForbiddenError, pt as ValidationError, rt as ArcError, st as NotFoundError, t as getUserId } from "./index-DsJ1MNfC.mjs";
 
-//#region src/context/requestContext.d.ts
-/**
- * Shape of the request-scoped context store.
- * Populated by Arc's onRequest hook in arcCorePlugin.
- */
-interface RequestStore {
-  /** Unique request identifier */
-  requestId?: string;
-  /** Authenticated user (if any) */
-  user?: {
-    id?: string;
-    _id?: string;
-    roles?: string[];
-    [key: string]: unknown;
-  } | null;
-  /** Active organization ID (multi-tenant) */
-  organizationId?: string;
-  /** Active team ID (team-scoped resources) */
-  teamId?: string;
-  /** Current resource name (set by arcDecorator in CRUD routes) */
-  resourceName?: string;
-  /** Request start time (for timing) */
-  startTime: number;
-  /** Additional context — extensible by app */
-  [key: string]: unknown;
-}
-/**
- * Request context API.
- *
- * - `get()` — returns current store or undefined if outside request scope
- * - `run(store, fn)` — run a function with a specific store (used by Arc internals)
- * - `getStore()` — alias for get() (matches Node.js API naming)
- */
-declare const requestContext: {
-  /**
-   * Get the current request context.
-   * Returns undefined if called outside a request lifecycle.
-   */
-  get(): RequestStore | undefined;
-  /**
-   * Alias for get() — matches Node.js AsyncLocalStorage API naming.
-   */
-  getStore(): RequestStore | undefined;
-  /**
-   * Run a function within a specific request context.
-   * Used internally by Arc's onRequest hook.
-   */
-  run<T>(store: RequestStore, fn: () => T): T;
-  /**
-   * The underlying AsyncLocalStorage instance.
-   * Exposed for advanced use cases (testing, custom integrations).
-   */
-  storage: AsyncLocalStorage<RequestStore>;
-};
-//#endregion
-//#region src/core/validateResourceConfig.d.ts
-interface ConfigError$1 {
-  field: string;
-  message: string;
-  suggestion?: string;
-}
-interface ValidationResult$2 {
-  valid: boolean;
-  errors: ConfigError$1[];
-  warnings: ConfigError$1[];
-}
-interface ValidateOptions$1 {
-  /** Skip controller method validation (for testing) */
-  skipControllerCheck?: boolean;
-  /** Allow unknown preset names */
-  allowUnknownPresets?: boolean;
-  /** Custom valid permission keys beyond CRUD */
-  additionalPermissionKeys?: string[];
-}
-/**
- * Validate a resource configuration
- */
-declare function validateResourceConfig(config: ResourceConfig, options?: ValidateOptions$1): ValidationResult$2;
-/**
- * Format validation errors for display
- */
-declare function formatValidationErrors(resourceName: string, result: ValidationResult$2): string;
-/**
- * Validate and throw if invalid
- */
-declare function assertValidConfig(config: ResourceConfig, options?: ValidateOptions$1): void;
-//#endregion
-//#region src/middleware/middleware.d.ts
-interface NamedMiddleware {
-  /** Unique name for debugging/introspection */
-  readonly name: string;
-  /** Operations this middleware applies to (default: all) */
-  readonly operations?: Array<"list" | "get" | "create" | "update" | "delete" | string>;
-  /** Priority — lower numbers run first (default: 10) */
-  readonly priority: number;
-  /** Conditional execution — return true to run, false to skip */
-  readonly when?: (request: RequestWithExtras) => boolean | Promise<boolean>;
-  /** The middleware handler */
-  readonly handler: MiddlewareHandler;
-}
-interface MiddlewareOptions {
-  operations?: NamedMiddleware["operations"];
-  priority?: number;
-  when?: NamedMiddleware["when"];
-  handler: MiddlewareHandler;
-}
-/**
- * Create a named middleware with priority and conditions.
- */
-declare function middleware(name: string, options: MiddlewareOptions): NamedMiddleware;
-/**
- * Sort named middlewares by priority (ascending — lower runs first).
- * Returns a MiddlewareConfig map keyed by operation, ready to pass to `defineResource()`.
- */
-declare function sortMiddlewares(middlewares: NamedMiddleware[]): MiddlewareConfig;
-//#endregion
-//#region src/pipeline/guard.d.ts
-interface GuardOptions {
-  operations?: OperationFilter;
-  handler: (ctx: PipelineContext) => boolean | Promise<boolean>;
-}
-/**
- * Create a named guard.
- *
- * @param name - Guard name (for debugging/introspection)
- * @param handlerOrOptions - Handler function or options object
- */
-declare function guard(name: string, handlerOrOptions: ((ctx: PipelineContext) => boolean | Promise<boolean>) | GuardOptions): Guard;
-//#endregion
-//#region src/pipeline/intercept.d.ts
-interface InterceptOptions {
-  operations?: OperationFilter;
-  handler: (ctx: PipelineContext, next: NextFunction) => Promise<IControllerResponse<unknown>>;
-}
-/**
- * Create a named interceptor.
- *
- * @param name - Interceptor name (for debugging/introspection)
- * @param handlerOrOptions - Handler function or options object
- */
-declare function intercept(name: string, handlerOrOptions: ((ctx: PipelineContext, next: NextFunction) => Promise<IControllerResponse<unknown>>) | InterceptOptions): Interceptor;
-//#endregion
-//#region src/pipeline/pipe.d.ts
-/**
- * Compose pipeline steps into an ordered array.
- * Accepts guards, transforms, and interceptors in any order.
- */
-declare function pipe(...steps: PipelineStep[]): PipelineStep[];
-//#endregion
-//#region src/pipeline/transform.d.ts
-interface TransformOptions {
-  operations?: OperationFilter;
-  handler: (ctx: PipelineContext) => PipelineContext | undefined | Promise<PipelineContext | undefined>;
-}
-/**
- * Create a named transform.
- *
- * @param name - Transform name (for debugging/introspection)
- * @param handlerOrOptions - Handler function or options object
- */
-declare function transform(name: string, handlerOrOptions: ((ctx: PipelineContext) => PipelineContext | undefined | Promise<PipelineContext | undefined>) | TransformOptions): Transform;
-//#endregion
-//#region src/logger/index.d.ts
-/**
- * Arc Logger — Centralized debug & warning system
- *
- * Lightweight, zero-dependency logger for Arc framework internals.
- * Inspired by the `debug` npm package — disabled by default, opt-in via
- * environment variable or `createApp({ debug })` option.
- *
- * @example
- * ```typescript
- * // Enable via env var
- * ARC_DEBUG=1 node server.js        // all modules
- * ARC_DEBUG=scope,elevation node server.js // specific modules
- *
- * // Enable via createApp
- * const app = await createApp({ debug: true });
- * const app = await createApp({ debug: 'scope,elevation' });
- *
- * // Suppress warnings (not recommended)
- * ARC_SUPPRESS_WARNINGS=1 node server.js
- *
- * // Framework internals use:
- * import { arcLog } from '../logger/index.js';
- * const log = arcLog('elevation');
- * log.debug('Elevation applied', { userId });
- * log.warn('Something unexpected');
- * ```
- */
-interface ArcLoggerOptions {
-  /**
-   * Enable debug output.
-   * - `true` or `'*'` — all modules
-   * - `string` — comma-separated module names (e.g., `'scope,elevation'`)
-   * - `false` — disabled (default)
-   */
-  debug?: boolean | string;
-  /**
-   * Custom log writer. Defaults to `console`.
-   * Useful for routing Arc logs into Fastify's pino logger or test fixtures.
-   */
-  writer?: ArcLogWriter;
-}
-interface ArcLogWriter {
-  debug: (...args: unknown[]) => void;
-  info: (...args: unknown[]) => void;
-  warn: (...args: unknown[]) => void;
-  error: (...args: unknown[]) => void;
-}
-interface ArcLogger {
-  debug: (...args: unknown[]) => void;
-  info: (...args: unknown[]) => void;
-  warn: (...args: unknown[]) => void;
-  error: (...args: unknown[]) => void;
-}
-/**
- * Configure the Arc logger globally.
- *
- * Called automatically by `createApp({ debug })`, but can also be
- * called manually for standalone usage outside of `createApp`.
- */
-declare function configureArcLogger(options: ArcLoggerOptions): void;
-/**
- * Create a module-scoped logger.
- *
- * Debug and info messages are gated by the `ARC_DEBUG` env var or
- * `createApp({ debug })` option. Warnings always show (unless
- * `ARC_SUPPRESS_WARNINGS=1`). Errors always show.
- *
- * @param module - Module name (e.g., 'scope', 'elevation', 'sse', 'preset')
- * @returns Logger instance for that module
- *
- * @example
- * ```typescript
- * const log = arcLog('elevation');
- * log.debug('Checking elevation header');
- * log.warn('No authenticate decorator found');
- * ```
- */
-declare function arcLog(module: string): ArcLogger;
-//#endregion
 //#region src/index.d.ts
 declare const version: string;
 //#endregion
-export { type ValidationResult as AdapterValidationResult, type AnyRecord, type ApiResponse, ArcError, type ArcInternalMetadata, type ArcLogWriter, type ArcLogger, type ArcLoggerOptions, type ArcRequest, type AuthPluginOptions, BaseController, type BaseControllerOptions, CRUD_OPERATIONS, type ConfigError, type ControllerLike, type CrudController, CrudOperation, type CrudRouteKey, type CrudRouterOptions, type CrudSchemas, DEFAULT_ID_FIELD, DEFAULT_LIMIT, DEFAULT_MAX_LIMIT, DEFAULT_SORT, DEFAULT_TENANT_FIELD, DEFAULT_UPDATE_METHOD, type DataAdapter, type DynamicPermissionMatrix, type DynamicPermissionMatrixConfig, type EventDefinition, type FastifyRequestExtras, type FastifyWithAuth, type FastifyWithDecorators, type FieldMetadata, type FieldPermission, type FieldPermissionMap, type FieldRule, ForbiddenError, type GracefulShutdownOptions, type Guard, HOOK_OPERATIONS, HOOK_PHASES, type HealthCheck, type HealthOptions, HookOperation, HookPhase, type IController, type IControllerResponse, type IRequestContext, type InferAdapterDoc, type InferDocType, type InferResourceDoc, type Interceptor, type IntrospectionData, type IntrospectionPluginOptions, type JWTPayload, MAX_FILTER_DEPTH, MAX_REGEX_LENGTH, MAX_SEARCH_LENGTH, MUTATION_OPERATIONS, type MiddlewareConfig, MongooseAdapter, MutationOperation, type NamedMiddleware, NotFoundError, type OwnershipCheck, type PaginationResult, type PermissionCheck, type PermissionContext, type PermissionResult, type PipelineConfig, type PipelineContext, type PipelineStep, type PresetFunction, type PresetResult, PrismaAdapter, RESERVED_QUERY_PARAMS, type RateLimitConfig, type RegistryEntry, type RegistryStats, type RelationMetadata, type RepositoryLike, type RequestContext, type RequestIdOptions, type RequestStore, type RequestWithExtras, type ResourceConfig, ResourceDefinition, type ResourceMetadata, type RouteHandler, type RouteHandlerMethod, type RouteSchemaOptions, SYSTEM_FIELDS, type SchemaMetadata, type ServiceContext, type Transform, type TypedController, type TypedRepository, type TypedResourceConfig, UnauthorizedError, type UserBase, type UserOrganization, type ValidateOptions, ValidationError, type ValidationResult$1 as ValidationResult, adminOnly, allOf, allowPublic, anyOf, applyFieldReadPermissions, applyFieldWritePermissions, arcLog, assertValidConfig, authenticated, configureArcLogger, createDomainError, createDynamicPermissionMatrix, createMongooseAdapter, createOrgPermissions, createPrismaAdapter, defineResource, defineResourceVariants, denyAll, envelope, fields, formatValidationErrors, fullPublic, getControllerScope, guard, intercept, middleware, ownerWithAdminBypass, presets_d_exports as permissions, pipe, publicRead, publicReadAdminWrite, readOnly, requestContext, requireAuth, requireOrgInScope, requireOrgMembership, requireOrgRole, requireOwnership, requireRoles, requireScopeContext, requireServiceScope, requireTeamMembership, sortMiddlewares, transform, validateResourceConfig, version, when };
+export { type ValidationResult as AdapterValidationResult, type AnyRecord, type ApiResponse, type ArcCreateResult, type ArcDeleteResult, ArcError, type ArcGetResult, type ArcInternalMetadata, type ArcListResult, type ArcRequest, type ArcUpdateResult, type AuthPluginOptions, BaseController, type BaseControllerOptions, BaseCrudController, type BulkExt, BulkMixin, CRUD_OPERATIONS, type ConfigError, type ControllerLike, type CrudController, type CrudOperation, type CrudRouteKey, type CrudRouterOptions, type CrudSchemas, DEFAULT_ID_FIELD, DEFAULT_LIMIT, DEFAULT_MAX_LIMIT, DEFAULT_SORT, DEFAULT_TENANT_FIELD, DEFAULT_UPDATE_METHOD, type DataAdapter, type DynamicPermissionMatrix, type DynamicPermissionMatrixConfig, type EventDefinition, type FastifyRequestExtras, type FastifyWithAuth, type FastifyWithDecorators, type FieldMetadata, type FieldPermission, type FieldPermissionMap, type FieldRule, ForbiddenError, type GracefulShutdownOptions, HOOK_OPERATIONS, HOOK_PHASES, type HealthCheck, type HealthOptions, type HookOperation, type HookPhase, type IController, type IControllerResponse, type IRequestContext, type InferAdapterDoc, type InferDocType, type InferResourceDoc, type IntrospectionData, type IntrospectionPluginOptions, type JWTPayload, type ListResult, MAX_FILTER_DEPTH, MAX_REGEX_LENGTH, MAX_SEARCH_LENGTH, MUTATION_OPERATIONS, type MiddlewareConfig, MongooseAdapter, type MutationOperation, NotFoundError, type OwnershipCheck, type PaginationResult, type PermissionCheck, type PermissionContext, type PermissionResult, type PresetFunction, type PresetResult, PrismaAdapter, type QueryParserInterface, RESERVED_QUERY_PARAMS, type RateLimitConfig, type RegistryEntry, type RegistryStats, type RelationMetadata, type RepositoryLike, type RequestContext, type RequestIdOptions, type RequestWithExtras, type ResourceConfig, ResourceDefinition, type ResourceMetadata, type RouteHandler, type RouteHandlerMethod, type RouteSchemaOptions, SYSTEM_FIELDS, type SchemaMetadata, type ServiceContext, type SlugExt, SlugMixin, type SoftDeleteExt, SoftDeleteMixin, type TreeExt, TreeMixin, type TypedController, type TypedRepository, type TypedResourceConfig, UnauthorizedError, type UserBase, type UserOrganization, type ValidateOptions, ValidationError, type ValidationResult$1 as ValidationResult, adminOnly, allOf, allowPublic, anyOf, applyFieldReadPermissions, applyFieldWritePermissions, authenticated, createDomainError, createDynamicPermissionMatrix, createMongooseAdapter, createOrgPermissions, createPrismaAdapter, defineResource, defineResourceVariants, denyAll, envelope, fields, fullPublic, getControllerScope, getUserId, ownerWithAdminBypass, presets_d_exports as permissions, publicRead, publicReadAdminWrite, readOnly, requireAuth, requireOrgInScope, requireOrgMembership, requireOrgRole, requireOwnership, requireRoles, requireScopeContext, requireServiceScope, requireTeamMembership, version, when };

package/dist/index.mjs

@@ -1,132 +1,12 @@
-import { a as createMongooseAdapter, i as MongooseAdapter, r as createPrismaAdapter, t as PrismaAdapter } from "./adapters-BXY4i-hw.mjs";
+import { a as createMongooseAdapter, i as MongooseAdapter, r as createPrismaAdapter, t as PrismaAdapter } from "./adapters-D0tT2Tyo.mjs";
 import { a as DEFAULT_SORT, c as HOOK_OPERATIONS, d as MAX_REGEX_LENGTH, f as MAX_SEARCH_LENGTH, h as SYSTEM_FIELDS, i as DEFAULT_MAX_LIMIT, l as HOOK_PHASES, m as RESERVED_QUERY_PARAMS, n as DEFAULT_ID_FIELD, o as DEFAULT_TENANT_FIELD, p as MUTATION_OPERATIONS, r as DEFAULT_LIMIT, s as DEFAULT_UPDATE_METHOD, t as CRUD_OPERATIONS, u as MAX_FILTER_DEPTH } from "./constants-BhY1OHoH.mjs";
-import { t as BaseController } from "./BaseController-CbKKIflT.mjs";
-import { t as envelope } from "./types-Csi3FLfq.mjs";
-import { n as applyFieldWritePermissions, r as fields, t as applyFieldReadPermissions } from "./fields-bxkeltzz.mjs";
+import { j as getUserId, r as envelope } from "./utils-D3Yxnrwr.mjs";
+import { a as BulkMixin, i as SlugMixin, n as TreeMixin, o as BaseCrudController, r as SoftDeleteMixin, t as BaseController } from "./BaseController-JNV08qOT.mjs";
+import { C as requireAuth, D as when, M as applyFieldWritePermissions, N as fields, T as requireRoles, _ as requireTeamMembership, a as presets_exports, b as anyOf, c as readOnly, d as createOrgPermissions, f as requireOrgInScope, g as requireServiceScope, h as requireScopeContext, i as ownerWithAdminBypass, j as applyFieldReadPermissions, m as requireOrgRole, n as authenticated, o as publicRead, p as requireOrgMembership, r as fullPublic, s as publicReadAdminWrite, t as adminOnly, u as createDynamicPermissionMatrix, v as allOf, w as requireOwnership, x as denyAll, y as allowPublic } from "./permissions-B4vU9L0Q.mjs";
 import { d as createDomainError, i as NotFoundError, l as UnauthorizedError, r as ForbiddenError, t as ArcError, u as ValidationError } from "./errors-D5c-5BJL.mjs";
-import { t as requestContext } from "./requestContext-xHIKedG6.mjs";
-import { a as formatValidationErrors, h as pipe, i as assertValidConfig, n as ResourceDefinition, o as validateResourceConfig, p as getControllerScope, r as defineResource, t as defineResourceVariants } from "./core-CcR01lup.mjs";
-import { C as requireAuth, D as when, T as requireRoles, _ as requireTeamMembership, a as presets_exports, b as anyOf, c as readOnly, d as createOrgPermissions, f as requireOrgInScope, g as requireServiceScope, h as requireScopeContext, i as ownerWithAdminBypass, m as requireOrgRole, n as authenticated, o as publicRead, p as requireOrgMembership, r as fullPublic, s as publicReadAdminWrite, t as adminOnly, u as createDynamicPermissionMatrix, v as allOf, w as requireOwnership, x as denyAll, y as allowPublic } from "./permissions-Dk6mshja.mjs";
-import { n as configureArcLogger, t as arcLog } from "./logger-DLg8-Ueg.mjs";
-//#region src/middleware/middleware.ts
-/**
-* Named Middleware — Priority-based, conditional middleware execution.
-*
-* Named middleware replaces flat arrays with structured, inspectable middleware
-* that runs in priority order and supports conditional execution.
-*
-* @example
-* ```typescript
-* import { middleware } from '@classytic/arc';
-*
-* const verifyEmail = middleware('verifyEmail', {
-*   operations: ['create', 'update'],
-*   priority: 5,
-*   when: (req) => !req.user?.emailVerified,
-*   handler: async (req, reply) => {
-*     reply.code(403).send({ error: 'Email verification required' });
-*   },
-* });
-*
-* const rateLimit = middleware('rateLimit', {
-*   priority: 1,
-*   handler: async (req, reply) => {
-*     // rate limit logic
-*   },
-* });
-*
-* const productResource = defineResource({
-*   name: 'product',
-*   adapter,
-*   middlewares: sortMiddlewares([verifyEmail, rateLimit]),
-* });
-* ```
-*/
-/**
-* Create a named middleware with priority and conditions.
-*/
-function middleware(name, options) {
-	return {
-		name,
-		operations: options.operations,
-		priority: options.priority ?? 10,
-		when: options.when,
-		handler: options.handler
-	};
-}
-/**
-* Sort named middlewares by priority (ascending — lower runs first).
-* Returns a MiddlewareConfig map keyed by operation, ready to pass to `defineResource()`.
-*/
-function sortMiddlewares(middlewares) {
-	const sorted = [...middlewares].sort((a, b) => a.priority - b.priority);
-	const operations = CRUD_OPERATIONS;
-	const result = {};
-	for (const op of operations) {
-		const applicable = sorted.filter((m) => !m.operations || m.operations.length === 0 || m.operations.includes(op));
-		if (applicable.length > 0) result[op] = applicable.map((m) => {
-			if (!m.when) return m.handler;
-			const wrapped = async (request, reply) => {
-				if (await m.when?.(request)) return m.handler(request, reply);
-			};
-			return wrapped;
-		});
-	}
-	return result;
-}
-//#endregion
-//#region src/pipeline/guard.ts
-/**
-* Create a named guard.
-*
-* @param name - Guard name (for debugging/introspection)
-* @param handlerOrOptions - Handler function or options object
-*/
-function guard(name, handlerOrOptions) {
-	const opts = typeof handlerOrOptions === "function" ? { handler: handlerOrOptions } : handlerOrOptions;
-	return {
-		_type: "guard",
-		name,
-		operations: opts.operations,
-		handler: opts.handler
-	};
-}
-//#endregion
-//#region src/pipeline/intercept.ts
-/**
-* Create a named interceptor.
-*
-* @param name - Interceptor name (for debugging/introspection)
-* @param handlerOrOptions - Handler function or options object
-*/
-function intercept(name, handlerOrOptions) {
-	const opts = typeof handlerOrOptions === "function" ? { handler: handlerOrOptions } : handlerOrOptions;
-	return {
-		_type: "interceptor",
-		name,
-		operations: opts.operations,
-		handler: opts.handler
-	};
-}
-//#endregion
-//#region src/pipeline/transform.ts
-/**
-* Create a named transform.
-*
-* @param name - Transform name (for debugging/introspection)
-* @param handlerOrOptions - Handler function or options object
-*/
-function transform(name, handlerOrOptions) {
-	const opts = typeof handlerOrOptions === "function" ? { handler: handlerOrOptions } : handlerOrOptions;
-	return {
-		_type: "transform",
-		name,
-		operations: opts.operations,
-		handler: opts.handler
-	};
-}
-//#endregion
+import { _ as getControllerScope } from "./routerShared-DeESFp4a.mjs";
+import { n as ResourceDefinition, r as defineResource, t as defineResourceVariants } from "./core-DXdSSFW-.mjs";
 //#region src/index.ts
-const version = "2.10.3";
+const version = "2.11.0";
 //#endregion
-export { ArcError, BaseController, CRUD_OPERATIONS, DEFAULT_ID_FIELD, DEFAULT_LIMIT, DEFAULT_MAX_LIMIT, DEFAULT_SORT, DEFAULT_TENANT_FIELD, DEFAULT_UPDATE_METHOD, ForbiddenError, HOOK_OPERATIONS, HOOK_PHASES, MAX_FILTER_DEPTH, MAX_REGEX_LENGTH, MAX_SEARCH_LENGTH, MUTATION_OPERATIONS, MongooseAdapter, NotFoundError, PrismaAdapter, RESERVED_QUERY_PARAMS, ResourceDefinition, SYSTEM_FIELDS, UnauthorizedError, ValidationError, adminOnly, allOf, allowPublic, anyOf, applyFieldReadPermissions, applyFieldWritePermissions, arcLog, assertValidConfig, authenticated, configureArcLogger, createDomainError, createDynamicPermissionMatrix, createMongooseAdapter, createOrgPermissions, createPrismaAdapter, defineResource, defineResourceVariants, denyAll, envelope, fields, formatValidationErrors, fullPublic, getControllerScope, guard, intercept, middleware, ownerWithAdminBypass, presets_exports as permissions, pipe, publicRead, publicReadAdminWrite, readOnly, requestContext, requireAuth, requireOrgInScope, requireOrgMembership, requireOrgRole, requireOwnership, requireRoles, requireScopeContext, requireServiceScope, requireTeamMembership, sortMiddlewares, transform, validateResourceConfig, version, when };
+export { ArcError, BaseController, BaseCrudController, BulkMixin, CRUD_OPERATIONS, DEFAULT_ID_FIELD, DEFAULT_LIMIT, DEFAULT_MAX_LIMIT, DEFAULT_SORT, DEFAULT_TENANT_FIELD, DEFAULT_UPDATE_METHOD, ForbiddenError, HOOK_OPERATIONS, HOOK_PHASES, MAX_FILTER_DEPTH, MAX_REGEX_LENGTH, MAX_SEARCH_LENGTH, MUTATION_OPERATIONS, MongooseAdapter, NotFoundError, PrismaAdapter, RESERVED_QUERY_PARAMS, ResourceDefinition, SYSTEM_FIELDS, SlugMixin, SoftDeleteMixin, TreeMixin, UnauthorizedError, ValidationError, adminOnly, allOf, allowPublic, anyOf, applyFieldReadPermissions, applyFieldWritePermissions, authenticated, createDomainError, createDynamicPermissionMatrix, createMongooseAdapter, createOrgPermissions, createPrismaAdapter, defineResource, defineResourceVariants, denyAll, envelope, fields, fullPublic, getControllerScope, getUserId, ownerWithAdminBypass, presets_exports as permissions, publicRead, publicReadAdminWrite, readOnly, requireAuth, requireOrgInScope, requireOrgMembership, requireOrgRole, requireOwnership, requireRoles, requireScopeContext, requireServiceScope, requireTeamMembership, version, when };

package/dist/integrations/event-gateway.d.mts

@@ -1,5 +1,5 @@
-import { n as DomainEvent } from "../EventTransport-CUw5NNWe.mjs";
-import { WebSocketClient, WebSocketMessage } from "./websocket.mjs";
+import { n as DomainEvent } from "../EventTransport-CfVEGaEl.mjs";
+import { a as WebSocketMessage, i as WebSocketClient } from "../websocket-CyJ1VIFI.mjs";
 import { FastifyPluginAsync, FastifyRequest } from "fastify";
 
 //#region src/integrations/event-gateway.d.ts

package/dist/integrations/event-gateway.mjs

@@ -4,7 +4,7 @@ const eventGatewayPluginImpl = async (fastify, opts = {}) => {
 	const { auth = true, orgScoped = false, roomPolicy, maxMessageBytes, maxSubscriptionsPerClient, authenticate } = opts;
 	if (auth && !authenticate && !fastify.hasDecorator("authenticate")) throw new Error("[arc-event-gateway] auth is true but fastify.authenticate is not registered. Register an auth plugin first, provide a custom authenticate function, or set auth: false.");
 	if (opts.sse !== false) {
-		const { default: ssePlugin } = await import("../sse-yBCgOLGu.mjs").then((n) => n.r);
+		const { default: ssePlugin } = await import("../sse-V7aXc3bW.mjs").then((n) => n.r);
 		await fastify.register(ssePlugin, {
 			path: opts.sse?.path ?? "/events/stream",
 			requireAuth: auth,

package/dist/integrations/index.d.mts

@@ -1,7 +1,7 @@
-import { WebSocketClient, WebSocketMessage, WebSocketPluginOptions } from "./websocket.mjs";
+import { a as WebSocketMessage, i as WebSocketClient, o as WebSocketPluginOptions } from "../websocket-CyJ1VIFI.mjs";
 import { EventGatewayOptions } from "./event-gateway.mjs";
 import { JobDefinition, JobDispatchOptions, JobDispatcher, JobMeta, JobsPluginOptions, QueueStats } from "./jobs.mjs";
-import { c as McpResourceConfig, f as ToolAnnotations, i as CrudOperation, l as PromptDefinition, m as ToolDefinition, n as CallToolResult, o as McpAuthResult, p as ToolContext, r as CreateMcpServerConfig, s as McpPluginOptions, t as BetterAuthHandler } from "../types-Btdda02s.mjs";
+import { c as McpResourceConfig, f as ToolAnnotations, i as CrudOperation, l as PromptDefinition, m as ToolDefinition, n as CallToolResult, o as McpAuthResult, p as ToolContext, r as CreateMcpServerConfig, s as McpPluginOptions, t as BetterAuthHandler } from "../types-D9NqiYIw.mjs";
 import { StreamlinePluginOptions, WorkflowLike, WorkflowRunLike } from "./streamline.mjs";
 import { WebhookDeliveryRecord, WebhookManager, WebhookPluginOptions, WebhookStore, WebhookSubscription } from "./webhooks.mjs";
 export { type BetterAuthHandler, type CallToolResult, type CreateMcpServerConfig, type CrudOperation, type EventGatewayOptions, type JobDefinition, type JobDispatchOptions, type JobDispatcher, type JobMeta, type JobsPluginOptions, type McpAuthResult, type McpPluginOptions, type McpResourceConfig, type PromptDefinition, type QueueStats, type StreamlinePluginOptions, type ToolAnnotations, type ToolContext, type ToolDefinition, type WebSocketClient, type WebSocketMessage, type WebSocketPluginOptions, type WebhookDeliveryRecord, type WebhookManager, type WebhookPluginOptions, type WebhookStore, type WebhookSubscription, type WorkflowLike, type WorkflowRunLike };

package/dist/integrations/mcp/index.d.mts

@@ -1,5 +1,5 @@
-import { G as ResourceDefinition } from "../../index-Cl0uoKd5.mjs";
-import { a as McpAuthResolver, c as McpResourceConfig, d as SessionEntry, f as ToolAnnotations, i as CrudOperation, l as PromptDefinition, m as ToolDefinition, n as CallToolResult, o as McpAuthResult, p as ToolContext, r as CreateMcpServerConfig, s as McpPluginOptions, t as BetterAuthHandler, u as PromptResult } from "../../types-Btdda02s.mjs";
+import { B as ResourceDefinition } from "../../index-Cm0vUrr_.mjs";
+import { a as McpAuthResolver, c as McpResourceConfig, d as SessionEntry, f as ToolAnnotations, i as CrudOperation, l as PromptDefinition, m as ToolDefinition, n as CallToolResult, o as McpAuthResult, p as ToolContext, r as CreateMcpServerConfig, s as McpPluginOptions, t as BetterAuthHandler, u as PromptResult } from "../../types-D9NqiYIw.mjs";
 import { FastifyPluginAsync } from "fastify";
 import { z } from "zod";
 

package/dist/integrations/mcp/index.mjs

@@ -1,4 +1,4 @@
-import { n as fieldRulesToZod, r as createMcpServer, t as resourceToTools } from "../../resourceToTools-BElv3xPT.mjs";
+import { n as fieldRulesToZod, r as createMcpServer, t as resourceToTools } from "../../resourceToTools--okX6QBr.mjs";
 import { createHash, randomUUID } from "node:crypto";
 import fp from "fastify-plugin";
 //#region src/integrations/mcp/defineTool.ts

package/dist/integrations/mcp/testing.d.mts

@@ -1,4 +1,4 @@
-import { o as McpAuthResult, s as McpPluginOptions } from "../../types-Btdda02s.mjs";
+import { o as McpAuthResult, s as McpPluginOptions } from "../../types-D9NqiYIw.mjs";
 
 //#region src/integrations/mcp/testing.d.ts
 interface TestMcpClientOptions {

package/dist/integrations/mcp/testing.mjs

@@ -1,4 +1,4 @@
-import { r as createMcpServer, t as resourceToTools } from "../../resourceToTools-BElv3xPT.mjs";
+import { r as createMcpServer, t as resourceToTools } from "../../resourceToTools--okX6QBr.mjs";
 //#region src/integrations/mcp/testing.ts
 /**
 * @classytic/arc/mcp/testing — MCP Test Utilities

package/dist/integrations/streamline.d.mts

@@ -1,7 +1,7 @@
 import { FastifyPluginAsync } from "fastify";
 
 //#region src/integrations/streamline.d.ts
-/** Start options — matches @classytic/streamline v2.1 StartOptions */
+/** Start options — matches @classytic/streamline v2.1+ StartOptions */
 interface WorkflowStartOptions {
   meta?: Record<string, unknown>;
   idempotencyKey?: string;
@@ -65,15 +65,38 @@ interface StreamlinePluginOptions {
   /** Connect workflow lifecycle events to Arc's event bus (default: true) */
   bridgeEvents?: boolean;
   /**
-   * Bridge step-level events (step:started, step:completed, step:failed) to Arc's event bus.
+   * Bridge the workflow's internal event bus (step + workflow lifecycle +
+   * engine telemetry) to Arc's event bus, topic-scoped as
+   * `workflow.${workflowId}.${eventName}`.
+   *
+   * Covers the full streamline 2.2 event surface:
+   *   - Step events: started, completed, failed, waiting, skipped,
+   *     retry-scheduled, compensated
+   *   - Workflow lifecycle: started, completed, failed, waiting, resumed,
+   *     cancelled, recovered, retry, compensating
+   *   - Engine telemetry: engine:error, scheduler:error,
+   *     scheduler:circuit-open
+   *
+   * Subscriptions use structural `container.eventBus.on(...)` — future
+   * streamline releases can add events without breaking arc; missing
+   * events are simply never handled (no crash). Requires the workflow
+   * to expose `container.eventBus`.
+   *
    * Disabled by default — enable for dashboards or monitoring.
-   * Requires the workflow to expose `container.eventBus` (streamline >=2.1).
    * @default false
    */
+  bridgeBusEvents?: boolean;
+  /**
+   * @deprecated v2.11.0 — renamed to `bridgeBusEvents` which now covers
+   * step + workflow + engine events (not just step-level). Still accepted
+   * as an alias; will be removed in v3. Prefer `bridgeBusEvents`.
+   */
   bridgeStepEvents?: boolean;
   /**
    * Enable SSE streaming endpoint: GET /:workflowId/runs/:runId/stream
-   * Streams step-level events as Server-Sent Events for live UI updates.
+   * Streams step-level + lifecycle events as Server-Sent Events for live
+   * UI updates. Auto-closes the stream on terminal workflow events
+   * (completed / failed / cancelled).
    * @default false
    */
   enableStreaming?: boolean;
@@ -86,7 +109,25 @@ interface StreamlinePluginOptions {
     get?: (request: unknown) => boolean | Promise<boolean>;
   };
 }
+/**
+ * Full event list published on a streamline workflow's internal `eventBus`
+ * (tracks streamline 2.2's `EventPayloadMap` in
+ * `@classytic/streamline/src/core/events.ts`).
+ *
+ * Hardcoded here by design — arc subscribes via structural
+ * `eventBus.on(name, handler)`, which is a no-op for events the running
+ * streamline version doesn't emit. New events a future streamline release
+ * adds can be bridged by updating this list; arc never breaks just
+ * because streamline extended its bus.
+ */
+declare const STREAMLINE_BUS_EVENTS: readonly ["step:started", "step:completed", "step:failed", "step:waiting", "step:skipped", "step:retry-scheduled", "step:compensated", "workflow:started", "workflow:completed", "workflow:failed", "workflow:waiting", "workflow:resumed", "workflow:cancelled", "workflow:recovered", "workflow:retry", "workflow:compensating", "engine:error", "scheduler:error", "scheduler:circuit-open"];
+/**
+ * Workflow events that should auto-close an SSE stream when observed.
+ * Recovered / waiting / resumed / retry / compensating are NOT terminal —
+ * the run is still active after them.
+ */
+declare const STREAMLINE_TERMINAL_EVENTS: readonly ["workflow:completed", "workflow:failed", "workflow:cancelled"];
 /** Pluggable streamline integration for Arc */
 declare const streamlinePlugin: FastifyPluginAsync<StreamlinePluginOptions>;
 //#endregion
-export { StreamlinePluginOptions, WorkflowLike, WorkflowRunLike, WorkflowStartOptions, streamlinePlugin };
+export { STREAMLINE_BUS_EVENTS, STREAMLINE_TERMINAL_EVENTS, StreamlinePluginOptions, WorkflowLike, WorkflowRunLike, WorkflowStartOptions, streamlinePlugin };