@classytic/arc 2.14.1 → 2.14.2

package/dist/{buildHandler-BamHHpH8.mjs → buildHandler-jSZ6Fdvi.mjs}

@@ -560,13 +560,73 @@ function parseDateRange(query, field) {
 	};
 }
 /**
+* Bracket-syntax operator shorthand → canonical Mongo operator. Mirrors
+* the `operators` map in `ArcQueryParser` so the aggregation route emits
+* the same shape the CRUD list route produces. Aggregations don't run
+* through the resource-level QueryParser (they have their own URL→IR
+* compile path), so this translation has to happen in arc itself —
+* downstream kits' filter compilers expect canonical `$gte/$lte/$in/...`
+* keys, not bare `gte/lte/in/...` shorthand.
+*/
+const OPERATOR_SHORTHAND = {
+	eq: "$eq",
+	ne: "$ne",
+	gt: "$gt",
+	gte: "$gte",
+	lt: "$lt",
+	lte: "$lte",
+	in: "$in",
+	nin: "$nin",
+	like: "$regex",
+	contains: "$regex",
+	regex: "$regex",
+	exists: "$exists",
+	size: "$size",
+	type: "$type"
+};
+const SHORTHAND_RANGE_OPS = new Set([
+	"gt",
+	"gte",
+	"lt",
+	"lte"
+]);
+const ISO_DATE_RE = /^\d{4}-\d{2}-\d{2}(?:T\d{2}:\d{2}:\d{2}(?:\.\d+)?(?:Z|[+-]\d{2}:?\d{2})?)?$/;
+function tryCoerceDate(v) {
+	if (typeof v !== "string" || !ISO_DATE_RE.test(v)) return v;
+	const d = new Date(v);
+	return Number.isNaN(d.getTime()) ? v : d;
+}
+/**
+* Translate a qs-parsed nested-operator object (`{ field: { gte, lte } }`)
+* into Mongo-shape (`{ field: { $gte: Date, $lte: Date } }`). Only fires
+* when EVERY key is a known shorthand operator — leaves user-data
+* objects untouched so callers can still equality-match on a stored
+* sub-document.
+*/
+function expandShorthandOperators(value) {
+	if (!value || typeof value !== "object" || Array.isArray(value)) return value;
+	const nested = value;
+	const keys = Object.keys(nested);
+	if (keys.length === 0) return value;
+	if (!keys.every((k) => !k.startsWith("$") && OPERATOR_SHORTHAND[k] !== void 0)) return value;
+	const expanded = {};
+	for (const [op, opVal] of Object.entries(nested)) {
+		const mongoOp = OPERATOR_SHORTHAND[op];
+		if (!mongoOp) continue;
+		expanded[mongoOp] = SHORTHAND_RANGE_OPS.has(op) ? tryCoerceDate(opVal) : opVal;
+	}
+	return expanded;
+}
+/**
 * Strip control params (page/limit/sort/select/...) and the resource-
 * dispatch verbs from the query, leaving only filter predicates the
-* caller used to narrow the aggregation.
+* caller used to narrow the aggregation. Bracket-syntax operator
+* shorthand (`createdAt[gte]=...`) gets translated to canonical Mongo-
+* shape here so kits don't have to reimplement the URL grammar — same
+* contract `ArcQueryParser` enforces for the CRUD list route.
 *
 * The resulting record is shallow-merged into the AggRequest filter
-* via `compileAggRequest`. Bracket-syntax keys (`createdAt[gte]`) are
-* preserved — the kit's filter compiler handles them.
+* via `compileAggRequest`.
 */
 function extractCallerFilter(query) {
 	const out = {};
@@ -585,7 +645,7 @@ function extractCallerFilter(query) {
 	for (const [key, value] of Object.entries(query)) {
 		if (reserved.has(key)) continue;
 		if (value === void 0 || value === "") continue;
-		out[key] = value;
+		out[key] = expandShorthandOperators(value);
 	}
 	return out;
 }

package/dist/core/index.mjs

@@ -1,5 +1,5 @@
 import { a as DEFAULT_SORT, c as HOOK_OPERATIONS, d as MAX_REGEX_LENGTH, f as MAX_SEARCH_LENGTH, h as SYSTEM_FIELDS, i as DEFAULT_MAX_LIMIT, l as HOOK_PHASES, m as RESERVED_QUERY_PARAMS, n as DEFAULT_ID_FIELD, o as DEFAULT_TENANT_FIELD, p as MUTATION_OPERATIONS, r as DEFAULT_LIMIT, s as DEFAULT_UPDATE_METHOD, t as CRUD_OPERATIONS, u as MAX_FILTER_DEPTH } from "../constants-Cxde4rpC.mjs";
 import { a as BulkMixin, c as collectReadBlockedFields, d as AccessControl, i as SlugMixin, l as isFieldReadable, n as TreeMixin, o as BaseCrudController, r as SoftDeleteMixin, s as QueryResolver, t as BaseController, u as BodySanitizer } from "../BaseController-Dv60tU83.mjs";
 import { _ as getControllerContext, g as createRequestContext, h as createFastifyHandler, m as createCrudHandlers, v as getControllerScope, y as sendControllerResponse } from "../routerShared-DrOa-26E.mjs";
-import { a as defineResource, c as createPermissionMiddleware, i as defineResourceVariants, l as defineAggregation, n as getEntityIdField, o as ResourceDefinition, r as getEntityQuery, s as createCrudRouter, t as getEntityId } from "../core-DEdN6zKD.mjs";
+import { a as defineResource, c as createPermissionMiddleware, i as defineResourceVariants, l as defineAggregation, n as getEntityIdField, o as ResourceDefinition, r as getEntityQuery, s as createCrudRouter, t as getEntityId } from "../core-D29kkRL5.mjs";
 export { AccessControl, BaseController, BaseCrudController, BodySanitizer, BulkMixin, CRUD_OPERATIONS, DEFAULT_ID_FIELD, DEFAULT_LIMIT, DEFAULT_MAX_LIMIT, DEFAULT_SORT, DEFAULT_TENANT_FIELD, DEFAULT_UPDATE_METHOD, HOOK_OPERATIONS, HOOK_PHASES, MAX_FILTER_DEPTH, MAX_REGEX_LENGTH, MAX_SEARCH_LENGTH, MUTATION_OPERATIONS, QueryResolver, RESERVED_QUERY_PARAMS, ResourceDefinition, SYSTEM_FIELDS, SlugMixin, SoftDeleteMixin, TreeMixin, collectReadBlockedFields, createCrudHandlers, createCrudRouter, createFastifyHandler, createPermissionMiddleware, createRequestContext, defineAggregation, defineResource, defineResourceVariants, getControllerContext, getControllerScope, getEntityId, getEntityIdField, getEntityQuery, isFieldReadable, sendControllerResponse };

package/dist/{core-DEdN6zKD.mjs → core-D29kkRL5.mjs}

@@ -945,7 +945,7 @@ function buildResourcePlugin(resource) {
 				});
 			}
 			if (resource.aggregations && Object.keys(resource.aggregations).length > 0) {
-				const { createAggregationRouter } = await import("./createAggregationRouter-Bk-58SbZ.mjs");
+				const { createAggregationRouter } = await import("./createAggregationRouter-DhR-Ofiz.mjs");
 				const repoForAgg = resource.controller?.repository;
 				const buildOptions = (req) => {
 					return resource.controller?.tenantRepoOptions?.(req) ?? {};

package/dist/{createAggregationRouter-Bk-58SbZ.mjs → createAggregationRouter-DhR-Ofiz.mjs}

@@ -1,6 +1,6 @@
 import { f as createError, l as UnauthorizedError, r as ForbiddenError } from "./errors-j4aJm1Wg.mjs";
 import { c as buildPreHandlerChain, f as resolveRouterPluginMw, i as buildAuthMiddleware, l as buildRateLimitConfig, p as selectPluginMw, r as buildArcDecorator } from "./routerShared-DrOa-26E.mjs";
-import { r as validateAggregations, t as buildAggregationHandler } from "./buildHandler-BamHHpH8.mjs";
+import { r as validateAggregations, t as buildAggregationHandler } from "./buildHandler-jSZ6Fdvi.mjs";
 //#region src/core/aggregation/createAggregationRouter.ts
 /**
 * Register one Fastify route per aggregation. No-op when the map is

package/dist/index.mjs

@@ -4,8 +4,8 @@ import { t as getUserId } from "./utils-_h9B3c57.mjs";
 import { a as BulkMixin, i as SlugMixin, n as TreeMixin, o as BaseCrudController, r as SoftDeleteMixin, t as BaseController } from "./BaseController-Dv60tU83.mjs";
 import { C as allowPublic, D as requireAuth, O as requireOwnership, S as allOf, T as denyAll, _ as requireOrgMembership, a as presets_exports, b as requireServiceScope, c as readOnly, d as applyFieldWritePermissions, f as fields, g as requireOrgInScope, h as createOrgPermissions, i as ownerWithAdminBypass, j as when, k as requireRoles, m as createDynamicPermissionMatrix, n as authenticated, o as publicRead, r as fullPublic, s as publicReadAdminWrite, t as adminOnly, u as applyFieldReadPermissions, v as requireOrgRole, w as anyOf, x as requireTeamMembership, y as requireScopeContext } from "./permissions-ohQyv50e.mjs";
 import { v as getControllerScope } from "./routerShared-DrOa-26E.mjs";
-import { a as defineResource, i as defineResourceVariants, l as defineAggregation, o as ResourceDefinition } from "./core-DEdN6zKD.mjs";
+import { a as defineResource, i as defineResourceVariants, l as defineAggregation, o as ResourceDefinition } from "./core-D29kkRL5.mjs";
 //#region src/index.ts
-const version = "2.14.1";
+const version = "2.14.2";
 //#endregion
 export { ArcError, BaseController, BaseCrudController, BulkMixin, CRUD_OPERATIONS, DEFAULT_ID_FIELD, DEFAULT_LIMIT, DEFAULT_MAX_LIMIT, DEFAULT_SORT, DEFAULT_TENANT_FIELD, DEFAULT_UPDATE_METHOD, ForbiddenError, HOOK_OPERATIONS, HOOK_PHASES, MAX_FILTER_DEPTH, MAX_REGEX_LENGTH, MAX_SEARCH_LENGTH, MUTATION_OPERATIONS, NotFoundError, RESERVED_QUERY_PARAMS, ResourceDefinition, SYSTEM_FIELDS, SlugMixin, SoftDeleteMixin, TreeMixin, UnauthorizedError, ValidationError, adminOnly, allOf, allowPublic, anyOf, applyFieldReadPermissions, applyFieldWritePermissions, authenticated, createDomainError, createDynamicPermissionMatrix, createOrgPermissions, defineAggregation, defineResource, defineResourceVariants, denyAll, fields, fullPublic, getControllerScope, getUserId, ownerWithAdminBypass, presets_exports as permissions, publicRead, publicReadAdminWrite, readOnly, requireAuth, requireOrgInScope, requireOrgMembership, requireOrgRole, requireOwnership, requireRoles, requireScopeContext, requireServiceScope, requireTeamMembership, version, when };

package/dist/integrations/mcp/index.mjs

@@ -1,4 +1,4 @@
-import { n as fieldRulesToZod, r as createMcpServer, t as resourceToTools } from "../../resourceToTools-CZ-ZhS7v.mjs";
+import { n as fieldRulesToZod, r as createMcpServer, t as resourceToTools } from "../../resourceToTools-BM686jB4.mjs";
 import { createHash, randomUUID } from "node:crypto";
 import fp from "fastify-plugin";
 //#region src/integrations/mcp/defineTool.ts

package/dist/integrations/mcp/testing.mjs

@@ -1,4 +1,4 @@
-import { r as createMcpServer, t as resourceToTools } from "../../resourceToTools-CZ-ZhS7v.mjs";
+import { r as createMcpServer, t as resourceToTools } from "../../resourceToTools-BM686jB4.mjs";
 //#region src/integrations/mcp/testing.ts
 /**
 * @classytic/arc/mcp/testing — MCP Test Utilities

package/dist/plugins/tracing-entry.mjs

@@ -58,7 +58,7 @@ try {
 function createTracerProvider(options) {
 	if (!isAvailable || !NodeTracerProvider || !BatchSpanProcessor || !OTLPTraceExporter) return null;
 	const { serviceName = "@classytic/arc", serviceVersion, exporterUrl = "http://localhost:4318/v1/traces" } = options;
-	const resolvedVersion = serviceVersion ?? "2.14.1";
+	const resolvedVersion = serviceVersion ?? "2.14.2";
 	const exporter = new OTLPTraceExporter({ url: exporterUrl });
 	const provider = new NodeTracerProvider({ resource: { attributes: {
 		"service.name": serviceName,

package/dist/{resourceToTools-CZ-ZhS7v.mjs → resourceToTools-BM686jB4.mjs}

@@ -3,7 +3,7 @@ import { t as BaseController } from "./BaseController-Dv60tU83.mjs";
 import { L as normalizePermissionResult } from "./permissions-ohQyv50e.mjs";
 import { t as executePipeline } from "./pipe-Zr0KXjQe.mjs";
 import { u as resolvePipelineSteps } from "./routerShared-DrOa-26E.mjs";
-import { n as executeAggregation, r as validateAggregations } from "./buildHandler-BamHHpH8.mjs";
+import { n as executeAggregation, r as validateAggregations } from "./buildHandler-jSZ6Fdvi.mjs";
 import { t as resolveActionPermission } from "./actionPermissions-CyUkQu6O.mjs";
 import { i as shouldRejectAdditionalProperties, r as schemaIRToZodShape, t as normalizeSchemaIR } from "./schemaIR-lYhC2gE5.mjs";
 import { t as pluralize } from "./pluralize-DQgqgifU.mjs";

package/dist/testing/index.mjs

@@ -564,9 +564,8 @@ var HttpTestHarness = class {
 				});
 				expect(res.statusCode).toBeLessThan(300);
 				const body = JSON.parse(res.body);
-				expect(body.success).toBe(true);
-				expect(body.data?._id).toBeDefined();
-				createdId = body.data._id;
+				expect(body._id).toBeDefined();
+				createdId = body._id;
 			});
 			if (enabledRoutes.has("list")) it("GET should list resources", async () => {
 				const { app } = this.getOptions();
@@ -576,9 +575,7 @@ var HttpTestHarness = class {
 					headers: this.adminHeaders()
 				});
 				expect(res.statusCode).toBe(200);
-				const body = JSON.parse(res.body);
-				expect(body.success).toBe(true);
-				const list = body.data ?? body.data;
+				const list = JSON.parse(res.body).data;
 				expect(Array.isArray(list)).toBe(true);
 			});
 			if (enabledRoutes.has("get")) {
@@ -591,7 +588,7 @@ var HttpTestHarness = class {
 						headers: this.adminHeaders()
 					});
 					expect(res.statusCode).toBe(200);
-					expect(JSON.parse(res.body).data?._id).toBe(createdId);
+					expect(JSON.parse(res.body)._id).toBe(createdId);
 				});
 				it("GET /:id with non-existent ID should return 404", async () => {
 					const { app } = this.getOptions();
@@ -601,7 +598,7 @@ var HttpTestHarness = class {
 						headers: this.adminHeaders()
 					});
 					expect(res.statusCode).toBe(404);
-					expect(JSON.parse(res.body).success).toBe(false);
+					expect(JSON.parse(res.body).status).toBe(404);
 				});
 			}
 			if (enabledRoutes.has("update")) for (const verb of updateMethods) {
@@ -616,7 +613,7 @@ var HttpTestHarness = class {
 						payload
 					});
 					expect(res.statusCode).toBe(200);
-					expect(JSON.parse(res.body).success).toBe(true);
+					expect(JSON.parse(res.body)._id).toBe(createdId);
 				});
 				it(`${verb} /:id with non-existent ID should return 404`, async () => {
 					const { app, fixtures } = this.getOptions();
@@ -640,7 +637,7 @@ var HttpTestHarness = class {
 							headers: this.adminHeaders(),
 							payload: fixtures.valid
 						});
-						deleteId = JSON.parse(createRes.body).data?._id;
+						deleteId = JSON.parse(createRes.body)._id;
 					}
 					if (!deleteId) return;
 					expect((await app.inject({
@@ -731,9 +728,9 @@ var HttpTestHarness = class {
 				});
 				expect(res.statusCode).toBeLessThan(400);
 				const body = JSON.parse(res.body);
-				if (body.data?._id && enabledRoutes.has("delete")) await app.inject({
+				if (body._id && enabledRoutes.has("delete")) await app.inject({
 					method: "DELETE",
-					url: `${this.getBaseUrl()}/${body.data._id}`,
+					url: `${this.getBaseUrl()}/${body._id}`,
 					headers: this.adminHeaders()
 				});
 			});
@@ -753,7 +750,7 @@ var HttpTestHarness = class {
 					payload: fixtures.invalid
 				});
 				expect(res.statusCode).toBeGreaterThanOrEqual(400);
-				expect(JSON.parse(res.body).success).toBe(false);
+				expect(JSON.parse(res.body).status).toBeGreaterThanOrEqual(400);
 			});
 		});
 	}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@classytic/arc",
-  "version": "2.14.1",
+  "version": "2.14.2",
   "description": "Resource-oriented backend framework for Fastify - clean, minimal, powerful, tree-shakable",
   "type": "module",
   "exports": {