@classytic/arc 2.10.3 → 2.11.0

package/dist/presets/multiTenant.mjs

@@ -10,6 +10,20 @@ function resolveSpec(scope, spec) {
 	if (spec.type === "org") return getOrgId(scope);
 	if (spec.type === "team") return getTeamId(scope);
 }
+/**
+* Stash the resolved tenant field map on the request so `BaseController`
+* can forward it to the repository layer as top-level options. Needed by
+* plugin-scoped repos (mongokit's `multiTenantPlugin`) that read tenant
+* from `context.<field>` rather than from filter/query/data stamping.
+*/
+function stashTenantFields(request, resolved) {
+	if (Object.keys(resolved).length === 0) return;
+	const target = request;
+	target._tenantFields = {
+		...target._tenantFields ?? {},
+		...resolved
+	};
+}
 /** Resolve every spec — returns the partial map of fields that have a value. */
 function resolveAll(scope, specs) {
 	const resolved = {};
@@ -34,10 +48,13 @@ function createTenantFilter(specs) {
 		const scope = getRequestScope(request);
 		if (isElevated(scope)) {
 			const { resolved } = resolveAll(scope, specs);
-			if (Object.keys(resolved).length > 0) request._policyFilters = {
-				...request._policyFilters ?? {},
-				...resolved
-			};
+			if (Object.keys(resolved).length > 0) {
+				request._policyFilters = {
+					...request._policyFilters ?? {},
+					...resolved
+				};
+				stashTenantFields(request, resolved);
+			}
 			return;
 		}
 		if (hasOrgAccess(scope)) {
@@ -47,6 +64,7 @@ function createTenantFilter(specs) {
 					...request._policyFilters ?? {},
 					...resolved
 				};
+				stashTenantFields(request, resolved);
 				return;
 			}
 			reply.code(403).send({
@@ -81,10 +99,13 @@ function createFlexibleTenantFilter(specs) {
 		const scope = getRequestScope(request);
 		if (isElevated(scope)) {
 			const { resolved } = resolveAll(scope, specs);
-			if (Object.keys(resolved).length > 0) request._policyFilters = {
-				...request._policyFilters ?? {},
-				...resolved
-			};
+			if (Object.keys(resolved).length > 0) {
+				request._policyFilters = {
+					...request._policyFilters ?? {},
+					...resolved
+				};
+				stashTenantFields(request, resolved);
+			}
 			return;
 		}
 		if (hasOrgAccess(scope)) {
@@ -94,6 +115,7 @@ function createFlexibleTenantFilter(specs) {
 					...request._policyFilters ?? {},
 					...resolved
 				};
+				stashTenantFields(request, resolved);
 				return;
 			}
 			reply.code(403).send({
@@ -109,6 +131,14 @@ function createFlexibleTenantFilter(specs) {
 * Create tenant injection middleware.
 * Walks the configured tenant fields and writes each into the request body.
 * Fails closed if any required dimension is missing for non-elevated callers.
+*
+* Also stashes the resolved fields on `request._tenantFields` so
+* `BaseController.tenantRepoOptions()` can forward them to the repo layer
+* as top-level options — needed by plugin-scoped repos like mongokit's
+* `multiTenantPlugin`, which reads tenant from `context.<field>` rather
+* than from `data.<field>`. Without this forwarding, multi-field preset
+* writes (update/delete) work only when the plugin's `allowDataInjection`
+* fallback covers the operation's policy key, which is write-only.
 */
 function createTenantInjection(specs) {
 	return async (request, reply) => {
@@ -124,6 +154,10 @@ function createTenantInjection(specs) {
 			return;
 		}
 		if (request.body) Object.assign(request.body, resolved);
+		request._tenantFields = {
+			...request._tenantFields ?? {},
+			...resolved
+		};
 	};
 }
 function multiTenantPreset(options = {}) {
@@ -138,8 +172,14 @@ function multiTenantPreset(options = {}) {
 	const flexibleTenantFilter = createFlexibleTenantFilter(specs);
 	const tenantInjection = createTenantInjection(specs);
 	const getFilter = (route) => allowPublic.includes(route) ? flexibleTenantFilter : strictTenantFilter;
+	const fieldRules = {};
+	for (const spec of specs) fieldRules[spec.field] = {
+		systemManaged: true,
+		preserveForElevated: true
+	};
 	return {
 		name: "multiTenant",
+		schemaOptions: { fieldRules },
 		middlewares: {
 			list: [getFilter("list")],
 			get: [getFilter("get")],

package/dist/presets/search.d.mts

@@ -1,5 +1,5 @@
-import { c as PermissionCheck } from "../fields-Lo1VUDpt.mjs";
-import { _t as ControllerHandler, mt as RouteMcpConfig, ot as PresetResult, pt as RouteDefinition } from "../index-Cl0uoKd5.mjs";
+import { lt as RouteDefinition, nt as PresetResult, pt as ControllerHandler, ut as RouteMcpConfig } from "../index-Cm0vUrr_.mjs";
+import { c as PermissionCheck } from "../fields-C8Y0XLAu.mjs";
 
 //#region src/presets/search.d.ts
 /**

package/dist/presets/search.mjs

@@ -1,4 +1,4 @@
-import { C as requireAuth, y as allowPublic } from "../permissions-Dk6mshja.mjs";
+import { C as requireAuth, y as allowPublic } from "../permissions-B4vU9L0Q.mjs";
 //#region src/presets/search.ts
 const BUILTINS = [
 	{

package/dist/{presets-fLJVXdVn.mjs → presets-k604Lj99.mjs}

@@ -1,6 +1,6 @@
 import { _ as isElevated, n as PUBLIC_SCOPE } from "./types-AOD8fxIw.mjs";
+import { C as requireAuth, T as requireRoles, y as allowPublic } from "./permissions-B4vU9L0Q.mjs";
 import { multiTenantPreset } from "./presets/multiTenant.mjs";
-import { C as requireAuth, T as requireRoles, y as allowPublic } from "./permissions-Dk6mshja.mjs";
 //#region src/presets/ownedByUser.ts
 /**
 * Create ownership check middleware.

package/dist/queryCachePlugin-BUXBSm4F.d.mts

@@ -0,0 +1,34 @@
+import { r as CacheStore } from "./interface-Da0r7Lna.mjs";
+import { i as QueryCache } from "./QueryCache-DOBNHBE0.mjs";
+import { FastifyPluginAsync } from "fastify";
+
+//#region src/cache/queryCachePlugin.d.ts
+interface QueryCachePluginOptions {
+  /** CacheStore instance. Default: MemoryCacheStore with default options. */
+  store?: CacheStore;
+  /** Global defaults for staleTime/gcTime (seconds) */
+  defaults?: {
+    staleTime?: number;
+    gcTime?: number;
+  };
+}
+interface QueryCacheDefaults {
+  staleTime: number;
+  gcTime: number;
+}
+/** Cross-resource invalidation rules collected from resource configs */
+interface CrossResourceRule {
+  pattern: string;
+  tags: string[];
+}
+declare module "fastify" {
+  interface FastifyInstance {
+    queryCache: QueryCache;
+    queryCacheConfig: QueryCacheDefaults;
+    /** Register cross-resource invalidation rules (called by defineResource) */
+    registerCacheInvalidationRule?(rule: CrossResourceRule): void;
+  }
+}
+declare const queryCachePlugin: FastifyPluginAsync<QueryCachePluginOptions>;
+//#endregion
+export { queryCachePlugin as i, QueryCacheDefaults as n, QueryCachePluginOptions as r, CrossResourceRule as t };

package/dist/{queryCachePlugin-DQCEfJis.mjs → queryCachePlugin-Bq6bO6vc.mjs}

@@ -1,7 +1,7 @@
 import { t as __exportAll } from "./chunk-BpYLSNr0.mjs";
-import { i as versionKey, r as tagVersionKey } from "./keys-qcD-TVJl.mjs";
-import { t as hasEvents } from "./typeGuards-Cj5Rgvlg.mjs";
-import { t as MemoryCacheStore } from "./memory-B5Amv9A1.mjs";
+import { i as versionKey, r as tagVersionKey } from "./keys-CARyUjiR.mjs";
+import { t as MemoryCacheStore } from "./memory-DikHSvWa.mjs";
+import { t as hasEvents } from "./typeGuards-CcFZXgU7.mjs";
 import fp from "fastify-plugin";
 //#region src/cache/QueryCache.ts
 var QueryCache = class {

package/dist/{redis-DqyeggCa.d.mts → redis-Cm1gnRDf.d.mts}

@@ -1,4 +1,4 @@
-import { n as IdempotencyResult, r as IdempotencyStore } from "./interface-CSbZdv_3.mjs";
+import { n as IdempotencyResult, r as IdempotencyStore } from "./interface-CkkWm5uR.mjs";
 
 //#region src/idempotency/stores/redis.d.ts
 interface RedisClient {

package/dist/{redis-stream-CakIQmwR.d.mts → redis-stream-CM8TXTix.d.mts}

@@ -1,4 +1,4 @@
-import { i as EventLogger, n as DomainEvent, o as EventTransport, r as EventHandler } from "./EventTransport-CUw5NNWe.mjs";
+import { i as EventLogger, n as DomainEvent, o as EventTransport, r as EventHandler } from "./EventTransport-CfVEGaEl.mjs";
 
 //#region src/events/transports/redis-stream.d.ts
 interface RedisStreamLike {

package/dist/registry/index.d.mts

@@ -1,4 +1,4 @@
-import { O as IntrospectionPluginOptions, U as RegisterOptions, W as ResourceRegistry } from "../index-Cl0uoKd5.mjs";
+import { R as RegisterOptions, k as IntrospectionPluginOptions, z as ResourceRegistry } from "../index-Cm0vUrr_.mjs";
 import { FastifyPluginAsync } from "fastify";
 
 //#region src/registry/introspectionPlugin.d.ts

package/dist/registry/index.mjs

@@ -1,3 +1,3 @@
-import { n as introspectionPlugin_default, t as introspectionPlugin } from "../registry-B3lRFBWo.mjs";
-import { t as ResourceRegistry } from "../ResourceRegistry-BPd6NQDm.mjs";
+import { n as introspectionPlugin_default, t as introspectionPlugin } from "../registry-D63ee7fl.mjs";
+import { t as ResourceRegistry } from "../ResourceRegistry-DkAeAuTX.mjs";
 export { ResourceRegistry, introspectionPlugin_default as introspectionPlugin, introspectionPlugin as introspectionPluginFn };

package/dist/{requestContext-xHIKedG6.mjs → requestContext-CfRkaxwf.mjs}

@@ -11,7 +11,7 @@ import { AsyncLocalStorage } from "node:async_hooks";
 *
 * @example
 * ```typescript
-* import { requestContext } from '@classytic/arc';
+* import { requestContext } from '@classytic/arc/context';
 *
 * // Anywhere in the call stack — no parameter passing needed
 * async function auditAction(action: string) {