@classytic/arc 2.16.0 → 2.17.0

package/README.md

@@ -122,12 +122,31 @@ export default defineResource({
   actions: {
     approve: { handler: approveOrder, permissions: requireRoles(['admin']) },
   },
-  // mcp: false,    // opt out of MCP tool generation for this resource (2.16)
+  // mcp: false,    // opt out of MCP tool generation for this resource
 });
 ```
 
 Auto-generates: `GET /products`, `GET /products/:id`, `POST /products`, `PATCH /products/:id`, `DELETE /products/:id` + softDelete adds `GET /products/deleted`, `POST /products/:id/restore` + slugLookup adds `GET /products/by-slug/:slug` + custom routes + `POST /products/:id/action`.
 
+### Resource shorthands
+
+```typescript
+// Reference data — read-only list+get, fetch-all limits (1000), 5min/10min cache.
+defineResource({ name: 'currency', adapter, referenceData: true });
+
+// Service resource — custom routes only, no adapter, no auto-CRUD, no registry entry.
+defineResource({
+  name: 'health',
+  customRoutesOnly: true,
+  routes: [{ method: 'GET', path: '/ping', permissions: allowPublic(), handler: () => ({ ok: true }) }],
+});
+
+// Tune pagination caps inline (no custom queryParser needed).
+defineResource({ name: 'pipeline', adapter, defaultLimit: 200, maxLimit: 500 });
+```
+
+`?limit=` violations respond 400 with a cap-aware envelope: `message: "Query parameter 'limit' must be <= 500 (got 800) (cap is 500)"` plus `meta: { field: 'limit', cap: 500 }` so callers can self-correct without scraping the message.
+
 ---
 
 ## Permissions
@@ -243,7 +262,8 @@ Tree-shake by importing only the subpath you need:
 | `@classytic/arc/plugins` | Health, request-id, versioning, tracing, response-cache |
 | `@classytic/arc/integrations/jobs` | BullMQ job dispatcher |
 | `@classytic/arc/integrations/websocket` | WebSocket integration |
-| `@classytic/arc/mcp` | Model Context Protocol tools |
+| `@classytic/arc/mcp` | Model Context Protocol tools + `createMcpAuthFromBetterAuthApiKey` (Better Auth API-key resolver), `resolveToolCollisions` |
+| `@classytic/arc/utils` | `pipeUIMessageStreamToReply`, `UI_MESSAGE_STREAM_HEADERS` (Vercel AI SDK → Fastify reply); errors, query parser, circuit breaker |
 | `@classytic/arc/testing` | `createTestApp`, `expectArc`, `TestAuthProvider`, `createTestFixtures` |
 | `@classytic/arc/types` | Type-only barrel (zero runtime cost) |
 

package/dist/{BaseController-DlCCTIxJ.mjs → BaseController-Dmeh4Y_y.mjs}

@@ -1,10 +1,9 @@
-import { h as SYSTEM_FIELDS, o as DEFAULT_TENANT_FIELD } from "./constants-TrJVIJl0.mjs";
+import { o as DEFAULT_TENANT_FIELD } from "./constants-TrJVIJl0.mjs";
 import { arcLog } from "./logger/index.mjs";
 import { d as createDomainError, f as createError, i as NotFoundError, r as ForbiddenError } from "./errors-j4aJm1Wg.mjs";
-import { b as isElevated, c as getOrgId, n as PUBLIC_SCOPE, x as isMember } from "./types-Bi0r0vjG.mjs";
-import { N as simpleEqualityMatcher, _ as ArcQueryParser, r as scheduleBackground, t as getUserId } from "./utils-DC5ycPfr.mjs";
-import { d as applyFieldWritePermissions, p as resolveEffectiveRoles } from "./permissions-CTxMrreC.mjs";
-import { t as getUserRoles } from "./types-D57iXYb8.mjs";
+import { b as isElevated, c as getOrgId } from "./types-Bi0r0vjG.mjs";
+import { I as simpleEqualityMatcher, b as ArcQueryParser, o as scheduleBackground, t as getUserId } from "./utils-CvD3glpM.mjs";
+import { w as BodySanitizer } from "./routerShared-nCyJGOKX.mjs";
 import { t as buildQueryKey } from "./keys-DopsCuyQ.mjs";
 //#region src/core/AccessControl.ts
 const log = arcLog("access-control");
@@ -241,47 +240,6 @@ var AccessControl = class {
 		return req.metadata;
 	}
 };
-var BodySanitizer = class {
-	schemaOptions;
-	onFieldWriteDenied;
-	constructor(config) {
-		this.schemaOptions = config.schemaOptions;
-		this.onFieldWriteDenied = config.onFieldWriteDenied ?? "reject";
-	}
-	/**
-	* Strip readonly and system-managed fields from request body.
-	* Prevents clients from overwriting _id, timestamps, __v, etc.
-	*
-	* Also applies field-level write permissions when the request has
-	* field permission metadata.
-	*/
-	sanitize(body, _operation, req, meta) {
-		let sanitized = { ...body };
-		for (const field of SYSTEM_FIELDS) delete sanitized[field];
-		const scopeForRules = req ? (meta ?? req.metadata)?._scope ?? PUBLIC_SCOPE : void 0;
-		const scopeIsElevated = scopeForRules ? isElevated(scopeForRules) : false;
-		const fieldRules = this.schemaOptions.fieldRules ?? {};
-		for (const [field, rules] of Object.entries(fieldRules)) {
-			const bypass = Boolean(rules.preserveForElevated) && scopeIsElevated;
-			if ((rules.systemManaged || rules.readonly) && !bypass) delete sanitized[field];
-			if (_operation === "update" && (rules.immutable || rules.immutableAfterCreate) && !bypass) delete sanitized[field];
-		}
-		if (req) {
-			const arcContext = meta ?? req.metadata;
-			const scope = arcContext?._scope ?? PUBLIC_SCOPE;
-			if (!isElevated(scope)) {
-				const fieldPerms = arcContext?.arc?.fields;
-				if (fieldPerms) {
-					const effectiveRoles = resolveEffectiveRoles(getUserRoles(req.user), isMember(scope) ? scope.orgRoles : []);
-					const { body: filtered, deniedFields } = applyFieldWritePermissions(sanitized, fieldPerms, effectiveRoles);
-					if (deniedFields.length > 0 && this.onFieldWriteDenied === "reject") throw new ForbiddenError(`Not permitted to write field${deniedFields.length === 1 ? "" : "s"}: ${deniedFields.join(", ")}`);
-					sanitized = filtered;
-				}
-			}
-		}
-		return sanitized;
-	}
-};
 //#endregion
 //#region src/core/fieldRulePredicates.ts
 /**
@@ -1531,4 +1489,4 @@ function TreeMixin(Base) {
 */
 var BaseController = class extends SoftDeleteMixin(TreeMixin(SlugMixin(BulkMixin(BaseCrudController)))) {};
 //#endregion
-export { BulkMixin as a, collectReadBlockedFields as c, AccessControl as d, SlugMixin as i, isFieldReadable as l, TreeMixin as n, BaseCrudController as o, SoftDeleteMixin as r, QueryResolver as s, BaseController as t, BodySanitizer as u };
+export { BulkMixin as a, collectReadBlockedFields as c, SlugMixin as i, isFieldReadable as l, TreeMixin as n, BaseCrudController as o, SoftDeleteMixin as r, QueryResolver as s, BaseController as t, AccessControl as u };

package/dist/{QueryCache-SvmT_9ti.d.mts → QueryCache-8YmAQ-zW.d.mts}

@@ -1,4 +1,4 @@
-import { r as CacheStore } from "./interface-CH0OQudo.mjs";
+import { r as CacheStore } from "./interface-BVkZsvEe.mjs";
 
 //#region src/cache/QueryCache.d.ts
 /** Metadata wrapper stored in CacheStore */

package/dist/{ResourceRegistry-f48hFk3m.mjs → ResourceRegistry-CzSzVK1m.mjs}

@@ -96,6 +96,9 @@ var ResourceRegistry = class {
 				lookupAliases: (entry.lookups ?? []).map((l) => l.as ?? l.from),
 				requireDateRange: entry.requireDateRange,
 				requireFilters: entry.requireFilters,
+				limit: entry.limit,
+				defaultLimit: entry.defaultLimit,
+				maxLimit: entry.maxLimit,
 				mcp: entry.mcp
 			})) : void 0,
 			plugin: resource.toPlugin()

package/dist/audit/index.d.mts

@@ -1,4 +1,4 @@
-import { d as UserBase } from "../fields-Anj0xdih.mjs";
+import { d as UserBase } from "../fields-DqZLp5d6.mjs";
 import { FastifyPluginAsync } from "fastify";
 import { RepositoryLike } from "@classytic/repo-core/adapter";
 

package/dist/audit/index.mjs

@@ -351,7 +351,8 @@ function createNoopLogger() {
 		restore: noop,
 		custom: noop,
 		query: async () => [],
-		purge: async () => 0
+		purge: async () => 0,
+		_noop: true
 	};
 }
 var auditPlugin_default = fp(auditPlugin, {

package/dist/auth/index.d.mts

@@ -1,7 +1,7 @@
-import { Bt as AuthHelpers, Vt as AuthPluginOptions } from "../index-CkW0flkU.mjs";
-import { c as PermissionCheck } from "../fields-Anj0xdih.mjs";
-import { t as ExternalOpenApiPaths } from "../externalPaths-DFg-2KTp.mjs";
-import { a as SessionManagerOptions, c as createSessionManager, i as SessionData, n as MemorySessionStoreOptions, o as SessionManagerResult, r as SessionCookieOptions, s as SessionStore, t as MemorySessionStore } from "../sessionManager-BqFegc0W.mjs";
+import { Bt as AuthHelpers, Vt as AuthPluginOptions } from "../index-C1JSBan-.mjs";
+import { c as PermissionCheck } from "../fields-DqZLp5d6.mjs";
+import { t as ExternalOpenApiPaths } from "../externalPaths-ClykOQqa.mjs";
+import { a as SessionManagerOptions, c as createSessionManager, i as SessionData, n as MemorySessionStoreOptions, o as SessionManagerResult, r as SessionCookieOptions, s as SessionStore, t as MemorySessionStore } from "../sessionManager-DlmaHUAl.mjs";
 import { FastifyPluginAsync, FastifyReply as FastifyReply$1, FastifyRequest } from "fastify";
 
 //#region src/auth/authPlugin.d.ts

package/dist/auth/index.mjs

@@ -1,6 +1,6 @@
 import { d as createDomainError, l as UnauthorizedError, p as isArcError, t as ArcError } from "../errors-j4aJm1Wg.mjs";
-import { _ as requireOrgMembership, v as requireOrgRole, x as requireTeamMembership } from "../permissions-CTxMrreC.mjs";
-import { n as normalizeRoles, t as getUserRoles } from "../types-D57iXYb8.mjs";
+import { _ as requireTeamMembership, m as requireOrgRole, p as requireOrgMembership } from "../permissions-B1Qy55fg.mjs";
+import { n as normalizeRoles, t as getUserRoles } from "../types-DV9WDfeg.mjs";
 import { n as extractBetterAuthOpenApi } from "../betterAuthOpenApi-ClWxaceA.mjs";
 import { createHmac, randomUUID, timingSafeEqual } from "node:crypto";
 import fp from "fastify-plugin";

package/dist/auth/redis-session.d.mts

@@ -1,4 +1,4 @@
-import { i as SessionData, s as SessionStore } from "../sessionManager-BqFegc0W.mjs";
+import { i as SessionData, s as SessionStore } from "../sessionManager-DlmaHUAl.mjs";
 
 //#region src/auth/redis-session.d.ts
 /** Minimal Redis client interface — compatible with ioredis */

package/dist/auth/redis-session.mjs

@@ -1,5 +1,31 @@
+import sjson from "secure-json-parse";
 //#region src/auth/redis-session.ts
 /**
+* Redis Session Store for Arc
+*
+* Implements the SessionStore interface using Redis for distributed session storage.
+* Use this in multi-instance/clustered deployments where MemorySessionStore won't work.
+*
+* This is a SEPARATE subpath import — only loaded when explicitly used:
+*   import { RedisSessionStore } from '@classytic/arc/auth/redis';
+*
+* @example
+* ```typescript
+* import { createSessionManager } from '@classytic/arc/auth';
+* import { RedisSessionStore } from '@classytic/arc/auth/redis';
+* import Redis from 'ioredis';
+*
+* const redis = new Redis(process.env.REDIS_URL);
+*
+* const sessions = createSessionManager({
+*   store: new RedisSessionStore({ redis }),
+*   secret: process.env.SESSION_SECRET!,
+* });
+*
+* await fastify.register(sessions.plugin);
+* ```
+*/
+/**
 * Redis-backed session store for distributed deployments.
 *
 * Uses two key patterns:
@@ -22,7 +48,7 @@ var RedisSessionStore = class {
 		if (!raw) return null;
 		let session;
 		try {
-			session = JSON.parse(raw);
+			session = sjson.parse(raw);
 		} catch {
 			await this.delete(sessionId);
 			return null;
@@ -46,7 +72,7 @@ var RedisSessionStore = class {
 	async delete(sessionId) {
 		const raw = await this.redis.get(this.prefix + sessionId);
 		if (raw) try {
-			const session = JSON.parse(raw);
+			const session = sjson.parse(raw);
 			await this.redis.srem(this.userPrefix + session.userId, sessionId);
 		} catch {}
 		await this.redis.del(this.prefix + sessionId);

package/dist/{buildHandler-BZX6zzDM.mjs → buildHandler-C_SkBNF3.mjs}

@@ -1,4 +1,4 @@
-import { n as compileAggRequest, t as adapterSupportsAggregate } from "./validate-By96rH0r.mjs";
+import { n as compileAggRequest, t as adapterSupportsAggregate } from "./validate-DFIP2VrM.mjs";
 //#region src/core/aggregation/buildHandler.ts
 /**
 * Framework-agnostic aggregation execution. Runs safety guards,
@@ -24,7 +24,7 @@ async function executeAggregation(normalized, deps, ctx) {
 		status: 400,
 		body: guardError
 	};
-	const aggReq = compileAggRequest(normalized, extractCallerFilter(query), tenantOptions);
+	const aggReq = compileAggRequest(normalized, extractCallerFilter(query), tenantOptions, query);
 	if (config.materialized) {
 		const matCtx = {
 			filter: aggReq.filter,
@@ -259,8 +259,10 @@ function extractCallerFilter(query) {
 	return out;
 }
 /**
-* Map a kit-thrown error to the framework-agnostic execute response.
-* Detects two well-known signals:
+* Map a kit-thrown error to the canonical `AggregationExecuteResponse`
+* shape so the aggregation router can surface a structured failure
+* (status + code + message) instead of leaking raw kit errors.
+* Detects three signals:
 *   - "unsupported" / "not implemented" → 501 with upgrade hint
 *   - timeout markers → 504
 *   - everything else → 500

package/dist/cache/index.d.mts

@@ -1,6 +1,6 @@
-import { n as CacheStats, r as CacheStore, t as CacheLogger } from "../interface-CH0OQudo.mjs";
-import { a as QueryCacheConfig, i as QueryCache, n as CacheResult, r as CacheStatus, t as CacheEnvelope } from "../QueryCache-SvmT_9ti.mjs";
-import { i as queryCachePlugin, n as QueryCacheDefaults, r as QueryCachePluginOptions, t as CrossResourceRule } from "../queryCachePlugin-Biqzfbi5.mjs";
+import { n as CacheStats, r as CacheStore, t as CacheLogger } from "../interface-BVkZsvEe.mjs";
+import { a as QueryCacheConfig, i as QueryCache, n as CacheResult, r as CacheStatus, t as CacheEnvelope } from "../QueryCache-8YmAQ-zW.mjs";
+import { i as queryCachePlugin, n as QueryCacheDefaults, r as QueryCachePluginOptions, t as CrossResourceRule } from "../queryCachePlugin-Do4P_WBC.mjs";
 
 //#region src/cache/keys.d.ts
 /**

package/dist/cli/commands/describe.d.mts

@@ -1,4 +1,4 @@
-import { V as ResourceDefinition, it as RateLimitConfig, mt as RouteSchemaOptions } from "../../index-CkW0flkU.mjs";
+import { V as ResourceDefinition, it as RateLimitConfig, mt as RouteSchemaOptions } from "../../index-C1JSBan-.mjs";
 
 //#region src/cli/commands/describe.d.ts
 interface DescribedResource {

package/dist/cli/commands/describe.mjs

@@ -1,5 +1,5 @@
 import { t as CRUD_OPERATIONS } from "../../constants-TrJVIJl0.mjs";
-import { n as stringifyMeasureMap } from "../../ResourceRegistry-f48hFk3m.mjs";
+import { n as stringifyMeasureMap } from "../../ResourceRegistry-CzSzVK1m.mjs";
 import { resolve } from "node:path";
 import { pathToFileURL } from "node:url";
 //#region src/cli/commands/describe.ts

package/dist/cli/commands/docs.mjs

@@ -1,5 +1,5 @@
-import { t as buildOpenApiSpec } from "../../openapi-34T9yNwd.mjs";
-import { t as loadResourcesFromEntry } from "../../loadResourcesFromEntry-BLMEI2Xa.mjs";
+import { t as buildOpenApiSpec } from "../../openapi-DKDs9NfD.mjs";
+import { t as loadResourcesFromEntry } from "../../loadResourcesFromEntry-DCjYMgfC.mjs";
 import { dirname, resolve } from "node:path";
 import { mkdirSync, writeFileSync } from "node:fs";
 //#region src/cli/commands/docs.ts

package/dist/cli/commands/generate.d.mts

@@ -1,2 +1,2 @@
-import { n as generate, t as ArcProjectConfig } from "../../generate-BWFwgcCM.mjs";
+import { n as generate, t as ArcProjectConfig } from "../../generate-cRnsafMS.mjs";
 export { ArcProjectConfig, generate };

package/dist/cli/commands/generate.mjs

@@ -1,2 +1,2 @@
-import { t as generate } from "../../generate-CYac-OLv.mjs";
+import { t as generate } from "../../generate-CcM24hoq.mjs";
 export { generate };

package/dist/cli/commands/init.d.mts

@@ -1,2 +1,2 @@
-import { a as ProjectConfig, i as PackageManager, n as DependencyManifest, r as InitOptions, t as init } from "../../init-Dv71MsJr.mjs";
+import { a as ProjectConfig, i as PackageManager, n as DependencyManifest, r as InitOptions, t as init } from "../../init-D-vrTZ1G.mjs";
 export { DependencyManifest, InitOptions, PackageManager, ProjectConfig, init };

package/dist/cli/commands/init.mjs

@@ -1,2 +1,2 @@
-import { t as init } from "../../init-HDvoO9L5.mjs";
+import { t as init } from "../../init-DYzfniuX.mjs";
 export { init };

package/dist/cli/commands/introspect.mjs

@@ -1,4 +1,4 @@
-import { t as loadResourcesFromEntry } from "../../loadResourcesFromEntry-BLMEI2Xa.mjs";
+import { t as loadResourcesFromEntry } from "../../loadResourcesFromEntry-DCjYMgfC.mjs";
 //#region src/cli/commands/introspect.ts
 function describePermission(value) {
 	if (!value) return "none";

package/dist/cli/index.d.mts

@@ -1,7 +1,7 @@
 import { describe } from "./commands/describe.mjs";
 import { exportDocs } from "./commands/docs.mjs";
 import { doctor } from "./commands/doctor.mjs";
-import { n as generate } from "../generate-BWFwgcCM.mjs";
-import { t as init } from "../init-Dv71MsJr.mjs";
+import { n as generate } from "../generate-cRnsafMS.mjs";
+import { t as init } from "../init-D-vrTZ1G.mjs";
 import { introspect } from "./commands/introspect.mjs";
 export { describe, doctor, exportDocs, generate, init, introspect };

package/dist/cli/index.mjs

@@ -1,7 +1,7 @@
 import { describe } from "./commands/describe.mjs";
 import { exportDocs } from "./commands/docs.mjs";
 import { doctor } from "./commands/doctor.mjs";
-import { t as generate } from "../generate-CYac-OLv.mjs";
-import { t as init } from "../init-HDvoO9L5.mjs";
+import { t as generate } from "../generate-CcM24hoq.mjs";
+import { t as init } from "../init-DYzfniuX.mjs";
 import { introspect } from "./commands/introspect.mjs";
 export { describe, doctor, exportDocs, generate, init, introspect };

package/dist/core/index.d.mts

@@ -1,3 +1,3 @@
-import { $t as BaseController, At as AggregationRateLimit, B as defineResource, Cn as AccessControlConfig, Ct as AggMeasureShorthand, Dt as AggregationIndexHint, Et as AggregationDateRangeRequirement, Ot as AggregationMaterializedContext, Sn as AccessControl, St as AggMeasureInput, Tt as AggregationConfig, V as ResourceDefinition, an as SlugMixin, bn as BodySanitizer, cn as BaseControllerOptions, dn as ControllerConstructionOptions, en as SoftDeleteExt, fn as QueryResolver, in as SlugExt, jt as AggregationsMap, kt as AggregationMaterializedResult, ln as BaseCrudController, nn as TreeExt, on as BulkExt, pn as QueryResolverConfig, rn as TreeMixin, sn as BulkMixin, tn as SoftDeleteMixin, un as ControllerConfigurableOptions, wt as AggregationCacheConfig, xn as BodySanitizerConfig, yn as ListResult } from "../index-CkW0flkU.mjs";
-import { A as MAX_FILTER_DEPTH, C as DEFAULT_SORT, D as HOOK_PHASES, E as HOOK_OPERATIONS, F as RESERVED_QUERY_PARAMS, I as SYSTEM_FIELDS, M as MAX_SEARCH_LENGTH, N as MUTATION_OPERATIONS, O as HookOperation, P as MutationOperation, S as DEFAULT_MAX_LIMIT, T as DEFAULT_UPDATE_METHOD, _ as defineAggregation, a as createRequestContext, b as DEFAULT_ID_FIELD, c as sendControllerResponse, d as getEntityQuery, f as defineResourceVariants, g as createPermissionMiddleware, h as createCrudRouter, i as createFastifyHandler, j as MAX_REGEX_LENGTH, k as HookPhase, l as getEntityId, m as defineAction, n as isFieldReadable, o as getControllerContext, p as DefineActionConfig, r as createCrudHandlers, s as getControllerScope, t as collectReadBlockedFields, u as getEntityIdField, v as CRUD_OPERATIONS, w as DEFAULT_TENANT_FIELD, x as DEFAULT_LIMIT, y as CrudOperation } from "../index-B-ulKx5P.mjs";
+import { $t as BaseController, At as AggregationRateLimit, B as defineResource, Cn as AccessControlConfig, Ct as AggMeasureShorthand, Dt as AggregationIndexHint, Et as AggregationDateRangeRequirement, Ot as AggregationMaterializedContext, Sn as AccessControl, St as AggMeasureInput, Tt as AggregationConfig, V as ResourceDefinition, an as SlugMixin, bn as BodySanitizer, cn as BaseControllerOptions, dn as ControllerConstructionOptions, en as SoftDeleteExt, fn as QueryResolver, in as SlugExt, jt as AggregationsMap, kt as AggregationMaterializedResult, ln as BaseCrudController, nn as TreeExt, on as BulkExt, pn as QueryResolverConfig, rn as TreeMixin, sn as BulkMixin, tn as SoftDeleteMixin, un as ControllerConfigurableOptions, wt as AggregationCacheConfig, xn as BodySanitizerConfig, yn as ListResult } from "../index-C1JSBan-.mjs";
+import { A as MAX_FILTER_DEPTH, C as DEFAULT_SORT, D as HOOK_PHASES, E as HOOK_OPERATIONS, F as RESERVED_QUERY_PARAMS, I as SYSTEM_FIELDS, M as MAX_SEARCH_LENGTH, N as MUTATION_OPERATIONS, O as HookOperation, P as MutationOperation, S as DEFAULT_MAX_LIMIT, T as DEFAULT_UPDATE_METHOD, _ as defineAggregation, a as createRequestContext, b as DEFAULT_ID_FIELD, c as sendControllerResponse, d as getEntityQuery, f as defineResourceVariants, g as createPermissionMiddleware, h as createCrudRouter, i as createFastifyHandler, j as MAX_REGEX_LENGTH, k as HookPhase, l as getEntityId, m as defineAction, n as isFieldReadable, o as getControllerContext, p as DefineActionConfig, r as createCrudHandlers, s as getControllerScope, t as collectReadBlockedFields, u as getEntityIdField, v as CRUD_OPERATIONS, w as DEFAULT_TENANT_FIELD, x as DEFAULT_LIMIT, y as CrudOperation } from "../index-CruZir1o.mjs";
 export { AccessControl, AccessControlConfig, AggMeasureInput, AggMeasureShorthand, AggregationCacheConfig, AggregationConfig, AggregationDateRangeRequirement, AggregationIndexHint, AggregationMaterializedContext, AggregationMaterializedResult, AggregationRateLimit, AggregationsMap, BaseController, BaseControllerOptions, BaseCrudController, BodySanitizer, BodySanitizerConfig, BulkExt, BulkMixin, CRUD_OPERATIONS, ControllerConfigurableOptions, ControllerConstructionOptions, CrudOperation, DEFAULT_ID_FIELD, DEFAULT_LIMIT, DEFAULT_MAX_LIMIT, DEFAULT_SORT, DEFAULT_TENANT_FIELD, DEFAULT_UPDATE_METHOD, DefineActionConfig, HOOK_OPERATIONS, HOOK_PHASES, HookOperation, HookPhase, ListResult, MAX_FILTER_DEPTH, MAX_REGEX_LENGTH, MAX_SEARCH_LENGTH, MUTATION_OPERATIONS, MutationOperation, QueryResolver, QueryResolverConfig, RESERVED_QUERY_PARAMS, ResourceDefinition, SYSTEM_FIELDS, SlugExt, SlugMixin, SoftDeleteExt, SoftDeleteMixin, TreeExt, TreeMixin, collectReadBlockedFields, createCrudHandlers, createCrudRouter, createFastifyHandler, createPermissionMiddleware, createRequestContext, defineAction, defineAggregation, defineResource, defineResourceVariants, getControllerContext, getControllerScope, getEntityId, getEntityIdField, getEntityQuery, isFieldReadable, sendControllerResponse };

package/dist/core/index.mjs

@@ -1,5 +1,5 @@
 import { a as DEFAULT_SORT, c as HOOK_OPERATIONS, d as MAX_REGEX_LENGTH, f as MAX_SEARCH_LENGTH, h as SYSTEM_FIELDS, i as DEFAULT_MAX_LIMIT, l as HOOK_PHASES, m as RESERVED_QUERY_PARAMS, n as DEFAULT_ID_FIELD, o as DEFAULT_TENANT_FIELD, p as MUTATION_OPERATIONS, r as DEFAULT_LIMIT, s as DEFAULT_UPDATE_METHOD, t as CRUD_OPERATIONS, u as MAX_FILTER_DEPTH } from "../constants-TrJVIJl0.mjs";
-import { a as BulkMixin, c as collectReadBlockedFields, d as AccessControl, i as SlugMixin, l as isFieldReadable, n as TreeMixin, o as BaseCrudController, r as SoftDeleteMixin, s as QueryResolver, t as BaseController, u as BodySanitizer } from "../BaseController-DlCCTIxJ.mjs";
-import { _ as getControllerContext, g as createRequestContext, h as createFastifyHandler, m as createCrudHandlers, v as getControllerScope, y as sendControllerResponse } from "../routerShared-CZV5aabX.mjs";
-import { a as defineResource, c as createCrudRouter, i as defineResourceVariants, l as createPermissionMiddleware, n as getEntityIdField, o as ResourceDefinition, r as getEntityQuery, s as defineAction, t as getEntityId, u as defineAggregation } from "../core-DBJ_j6rX.mjs";
+import { a as BulkMixin, c as collectReadBlockedFields, i as SlugMixin, l as isFieldReadable, n as TreeMixin, o as BaseCrudController, r as SoftDeleteMixin, s as QueryResolver, t as BaseController, u as AccessControl } from "../BaseController-Dmeh4Y_y.mjs";
+import { S as sendControllerResponse, _ as createCrudHandlers, b as getControllerContext, v as createFastifyHandler, w as BodySanitizer, x as getControllerScope, y as createRequestContext } from "../routerShared-nCyJGOKX.mjs";
+import { a as defineResource, c as createCrudRouter, i as defineResourceVariants, l as createPermissionMiddleware, n as getEntityIdField, o as ResourceDefinition, r as getEntityQuery, s as defineAction, t as getEntityId, u as defineAggregation } from "../core-DYJvu7aI.mjs";
 export { AccessControl, BaseController, BaseCrudController, BodySanitizer, BulkMixin, CRUD_OPERATIONS, DEFAULT_ID_FIELD, DEFAULT_LIMIT, DEFAULT_MAX_LIMIT, DEFAULT_SORT, DEFAULT_TENANT_FIELD, DEFAULT_UPDATE_METHOD, HOOK_OPERATIONS, HOOK_PHASES, MAX_FILTER_DEPTH, MAX_REGEX_LENGTH, MAX_SEARCH_LENGTH, MUTATION_OPERATIONS, QueryResolver, RESERVED_QUERY_PARAMS, ResourceDefinition, SYSTEM_FIELDS, SlugMixin, SoftDeleteMixin, TreeMixin, collectReadBlockedFields, createCrudHandlers, createCrudRouter, createFastifyHandler, createPermissionMiddleware, createRequestContext, defineAction, defineAggregation, defineResource, defineResourceVariants, getControllerContext, getControllerScope, getEntityId, getEntityIdField, getEntityQuery, isFieldReadable, sendControllerResponse };