@classytic/arc 2.18.4 → 2.19.0

package/dist/{BaseController-B-uXzf6I.mjs → BaseController-Dy6EQHjM.mjs}

@@ -1,11 +1,11 @@
-import { h as SYSTEM_FIELDS, o as DEFAULT_TENANT_FIELD } from "./constants-TrJVIJl0.mjs";
+import { h as SYSTEM_FIELDS, o as DEFAULT_TENANT_FIELD } from "./constants-gaEeMlz-.mjs";
 import { arcLog } from "./logger/index.mjs";
-import { d as createDomainError, f as createError, i as NotFoundError, r as ForbiddenError } from "./errors-j4aJm1Wg.mjs";
-import { b as isElevated, c as getOrgId, n as PUBLIC_SCOPE, x as isMember } from "./types-Bi0r0vjG.mjs";
-import { I as simpleEqualityMatcher, b as ArcQueryParser, o as scheduleBackground, t as getUserId } from "./utils-xAQeDyU_.mjs";
-import { F as applyFieldWritePermissions, L as resolveEffectiveRoles } from "./permissions-3uzwkbQt.mjs";
-import { t as getUserRoles } from "./types-D57iXYb8.mjs";
-import { t as buildQueryKey } from "./keys-B3yyBEyH.mjs";
+import { d as createDomainError, f as createError, i as NotFoundError, r as ForbiddenError } from "./errors-DkO8Nk6-.mjs";
+import { b as isElevated, c as getOrgId, n as PUBLIC_SCOPE, x as isMember } from "./types-bHblZ9YN.mjs";
+import { M as scheduleBackground, N as simpleEqualityMatcher, j as getUserId, k as ArcQueryParser } from "./utils-C6QQ9-hd.mjs";
+import { t as buildQueryKey } from "./keys-Cd316u_y.mjs";
+import { F as applyFieldWritePermissions, L as resolveEffectiveRoles } from "./permissions-BPB1xqGf.mjs";
+import { t as getUserRoles } from "./types-XTApa8b6.mjs";
 //#region src/core/AccessControl.ts
 const log = arcLog("access-control");
 var AccessControl = class {

package/dist/{QueryCache-Dsyv2mLS.d.mts → QueryCache-TRfXau3W.d.mts}

@@ -1,4 +1,4 @@
-import { r as CacheStore } from "./interface-DL7LlWS5.mjs";
+import { r as CacheStore } from "./interface-C1_WLTMK.mjs";
 
 //#region src/cache/QueryCache.d.ts
 /** Metadata wrapper stored in CacheStore */

package/dist/{ResourceRegistry-CWmOggxS.mjs → ResourceRegistry-5fKZwhK_.mjs}

@@ -1,4 +1,4 @@
-import "./constants-TrJVIJl0.mjs";
+import "./constants-gaEeMlz-.mjs";
 //#region src/registry/ResourceRegistry.ts
 /**
 * Resource Registry

package/dist/{pipeline-D4sqiokR.mjs → actionPermissions-D7NGwcAR.mjs}

@@ -1,7 +1,7 @@
-import { b as isElevated, c as getOrgId, g as getUserId, n as PUBLIC_SCOPE, x as isMember } from "./types-Bi0r0vjG.mjs";
-import { L as resolveEffectiveRoles, P as applyFieldReadPermissions } from "./permissions-3uzwkbQt.mjs";
-import { t as getUserRoles } from "./types-D57iXYb8.mjs";
-import { t as executePipeline } from "./pipe-9Tl-OAus.mjs";
+import { b as isElevated, c as getOrgId, g as getUserId, n as PUBLIC_SCOPE, x as isMember } from "./types-bHblZ9YN.mjs";
+import { L as resolveEffectiveRoles, P as applyFieldReadPermissions } from "./permissions-BPB1xqGf.mjs";
+import { t as getUserRoles } from "./types-XTApa8b6.mjs";
+import { t as executePipeline } from "./pipe-BOLmGIxa.mjs";
 import { isPaginatedResult, toCanonicalList } from "@classytic/repo-core/pagination";
 //#region src/scope/projection.ts
 /**
@@ -247,6 +247,7 @@ function sendControllerResponse(reply, response, request) {
 function createFastifyHandler(controllerMethod) {
 	return async (req, reply) => {
 		sendControllerResponse(reply, await controllerMethod(createRequestContext(req)), req);
+		return reply;
 	};
 }
 /**
@@ -333,4 +334,27 @@ function buildActionPipelineHandler(handler, steps, operation, resourceName) {
 	};
 }
 //#endregion
-export { createFastifyHandler as a, getControllerScope as c, createCrudHandlers as i, sendControllerResponse as l, buildPipelineHandler as n, createRequestContext as o, resolvePipelineSteps as r, getControllerContext as s, buildActionPipelineHandler as t, buildRequestScopeProjection as u };
+//#region src/core/actionPermissions.ts
+/**
+* Return the effective `PermissionCheck` for a single action, or `undefined`
+* when the resource declares no gate at any level.
+*
+* Callers decide what "no gate" means:
+*   - HTTP: boot-time throw in `normalizeActionsToRouterConfig`.
+*   - MCP: tool-generation throw in `resourceToTools` (mirrors HTTP — the
+*     two surfaces fail closed identically so MCP can't expose an
+*     unauthenticated mutating tool when the HTTP plugin lifecycle hasn't
+*     run).
+*   - OpenAPI: docs advertise the endpoint as unauthenticated.
+*/
+function resolveActionPermission(input) {
+	const { action, resourcePermissions, resourceActionPermissions, globalAuth } = input;
+	const explicit = typeof action !== "function" && action.permissions ? action.permissions : void 0;
+	if (explicit) return explicit;
+	if (resourceActionPermissions) return resourceActionPermissions;
+	if (globalAuth) return globalAuth;
+	const updateFallback = resourcePermissions?.update;
+	if (updateFallback) return updateFallback;
+}
+//#endregion
+export { createCrudHandlers as a, getControllerContext as c, buildRequestScopeProjection as d, resolvePipelineSteps as i, getControllerScope as l, buildActionPipelineHandler as n, createFastifyHandler as o, buildPipelineHandler as r, createRequestContext as s, resolveActionPermission as t, sendControllerResponse as u };

package/dist/audit/index.d.mts

@@ -1,4 +1,4 @@
-import { d as UserBase } from "../fields-CKLrhyOb.mjs";
+import { d as UserBase } from "../fields-C7ahdGYf.mjs";
 import { FastifyPluginAsync } from "fastify";
 import { RepositoryLike } from "@classytic/repo-core/adapter";
 

package/dist/auth/index.d.mts

@@ -1,7 +1,7 @@
-import { Bt as AuthHelpers, Vt as AuthPluginOptions } from "../index-QYma8mdC.mjs";
-import { c as PermissionCheck } from "../fields-CKLrhyOb.mjs";
-import { t as ExternalOpenApiPaths } from "../externalPaths-DLle0R07.mjs";
-import { a as SessionManagerOptions, c as createSessionManager, i as SessionData, n as MemorySessionStoreOptions, o as SessionManagerResult, r as SessionCookieOptions, s as SessionStore, t as MemorySessionStore } from "../sessionManager-CyHpYXoB.mjs";
+import { Ht as AuthPluginOptions, Vt as AuthHelpers } from "../index-CUTG2Cuo.mjs";
+import { c as PermissionCheck } from "../fields-C7ahdGYf.mjs";
+import { t as ExternalOpenApiPaths } from "../externalPaths-BE6wFpYv.mjs";
+import { a as SessionManagerOptions, c as createSessionManager, i as SessionData, n as MemorySessionStoreOptions, o as SessionManagerResult, r as SessionCookieOptions, s as SessionStore, t as MemorySessionStore } from "../sessionManager-BXG-HGwG.mjs";
 import { FastifyPluginAsync, FastifyReply as FastifyReply$1, FastifyRequest } from "fastify";
 
 //#region src/auth/authPlugin.d.ts

package/dist/auth/index.mjs

@@ -1,7 +1,7 @@
-import { d as createDomainError, l as UnauthorizedError, p as isArcError, t as ArcError } from "../errors-j4aJm1Wg.mjs";
-import { _ as requireTeamMembership, m as requireOrgRole, p as requireOrgMembership } from "../permissions-3uzwkbQt.mjs";
-import { n as normalizeRoles, t as getUserRoles } from "../types-D57iXYb8.mjs";
-import { n as extractBetterAuthOpenApi } from "../betterAuthOpenApi-DAAhMZff.mjs";
+import { d as createDomainError, l as UnauthorizedError, p as isArcError, t as ArcError } from "../errors-DkO8Nk6-.mjs";
+import { _ as requireTeamMembership, m as requireOrgRole, p as requireOrgMembership } from "../permissions-BPB1xqGf.mjs";
+import { n as normalizeRoles, t as getUserRoles } from "../types-XTApa8b6.mjs";
+import { a as toJsonSchema } from "../schemaConverter-U0MnO9vd.mjs";
 import { createHmac, randomUUID, timingSafeEqual } from "node:crypto";
 import fp from "fastify-plugin";
 //#region src/auth/authPlugin.ts
@@ -317,11 +317,20 @@ function toFetchRequest(request) {
 		else if (contentType.includes("application/json") || contentType.includes("text/") || !contentType) body = JSON.stringify(request.body);
 		else request.log?.warn?.("toFetchRequest: cannot reconstruct %s body without rawBody plugin", contentType);
 	}
-	return new Request(url, {
+	const init = {
 		method: request.method,
 		headers,
 		body
+	};
+	const fetchRequest = new Request(url, init);
+	Object.defineProperty(fetchRequest, "clone", {
+		configurable: true,
+		writable: true,
+		value() {
+			return new Request(url, init);
+		}
 	});
+	return fetchRequest;
 }
 /**
 * Pipe a Fetch API Response back into Fastify's reply.
@@ -611,7 +620,7 @@ function createBetterAuthAdapter(options) {
 		if (!fastify.hasDecorator("authenticate")) fastify.decorate("authenticate", authenticate);
 		if (!fastify.hasDecorator("optionalAuthenticate")) fastify.decorate("optionalAuthenticate", optionalAuthenticate);
 		if (!extractedOpenApi && openapiOpt !== false && auth.api && typeof auth.api === "object") {
-			const { extractBetterAuthOpenApi } = await import("../betterAuthOpenApi-DAAhMZff.mjs").then((n) => n.t);
+			const { extractBetterAuthOpenApi } = await import("../betterAuthOpenApi-CV1lxpRX.mjs");
 			extractedOpenApi = extractBetterAuthOpenApi(auth.api, {
 				basePath,
 				userFields
@@ -639,6 +648,253 @@ function createBetterAuthAdapter(options) {
 	};
 }
 //#endregion
+//#region src/auth/betterAuthOpenApi.ts
+/**
+* Check if a value looks like a Better Auth endpoint (has .path and .options)
+*/
+function isBetterAuthEndpoint(value) {
+	if (typeof value !== "function" && typeof value !== "object") return false;
+	if (!value) return false;
+	const v = value;
+	return typeof v.path === "string" && typeof v.options === "object" && v.options !== null;
+}
+/**
+* Convert Fastify-style path params (/:id) to OpenAPI-style (/{id})
+*/
+function toOpenApiPath(path) {
+	return path.replace(/:([^/]+)/g, "{$1}");
+}
+/**
+* Extract path parameters from a path string
+*/
+function extractPathParams(path) {
+	const params = [];
+	const matches = path.matchAll(/:(\w+)/g);
+	for (const match of matches) {
+		const name = match[1];
+		if (!name) continue;
+		params.push({
+			name,
+			in: "path",
+			required: true,
+			schema: { type: "string" }
+		});
+	}
+	return params;
+}
+/**
+* Extract OpenAPI paths from a Better Auth instance's API object.
+*
+* Walks `authApi` (the `auth.api` object from Better Auth), discovers
+* endpoints, converts their Zod schemas to JSON Schema via `z.toJSONSchema()`,
+* and returns a complete `ExternalOpenApiPaths` object ready for Arc's spec builder.
+*/
+function extractBetterAuthOpenApi(authApi, options = {}) {
+	const { basePath = "/api/auth", tagName = "Authentication", tagDescription = "Better Auth authentication endpoints", excludePaths = [], excludeServerOnly = true, userFields } = options;
+	const normalizedBase = basePath.replace(/\/+$/, "");
+	const paths = {};
+	const detectedPlugins = detectActivePlugins(authApi);
+	const securityOptions = [{ cookieAuth: [] }, { bearerAuth: [] }];
+	if (detectedPlugins.apiKey) securityOptions.push({ apiKeyAuth: [] });
+	for (const [key, value] of Object.entries(authApi)) {
+		if (!isBetterAuthEndpoint(value)) continue;
+		const { path: endpointPath, options: endpointOpts } = value;
+		if (excludePaths.includes(endpointPath)) continue;
+		if (excludeServerOnly && endpointOpts.metadata?.SERVER_ONLY) continue;
+		const fullPath = toOpenApiPath(`${normalizedBase}${endpointPath}`);
+		const methods = [];
+		if (endpointOpts.method) if (Array.isArray(endpointOpts.method)) methods.push(...endpointOpts.method.map((m) => m.toLowerCase()));
+		else methods.push(endpointOpts.method.toLowerCase());
+		else methods.push(endpointOpts.body ? "post" : "get");
+		const openApiMeta = endpointOpts.metadata?.openapi;
+		for (const method of methods) {
+			const operation = {
+				tags: openApiMeta?.tags ?? [tagName],
+				operationId: openApiMeta?.operationId ?? key,
+				summary: openApiMeta?.summary ?? formatOperationSummary(key),
+				security: securityOptions
+			};
+			if (openApiMeta?.description) operation.description = openApiMeta.description;
+			const parameters = [...extractPathParams(endpointPath)];
+			if ((method === "get" || method === "delete") && endpointOpts.query) {
+				const querySchema = toJsonSchema(endpointOpts.query);
+				if (querySchema && querySchema.type === "object" && querySchema.properties) {
+					const props = querySchema.properties;
+					const required = querySchema.required ?? [];
+					for (const [name, prop] of Object.entries(props)) {
+						const paramEntry = {
+							name,
+							in: "query",
+							required: required.includes(name),
+							schema: prop
+						};
+						if (prop.description) paramEntry.description = prop.description;
+						parameters.push(paramEntry);
+					}
+				}
+			}
+			if (parameters.length > 0) operation.parameters = parameters;
+			if (method === "post" || method === "put" || method === "patch") {
+				if (openApiMeta?.requestBody) operation.requestBody = structuredClone(openApiMeta.requestBody);
+				else if (endpointOpts.body) {
+					const bodySchema = toJsonSchema(endpointOpts.body);
+					if (bodySchema) operation.requestBody = {
+						required: true,
+						content: { "application/json": { schema: bodySchema } }
+					};
+				}
+				if (userFields && isUserFieldEndpoint(endpointPath) && operation.requestBody) mergeUserFieldsIntoRequestBody(operation.requestBody, userFields, endpointPath);
+			}
+			if (openApiMeta?.responses) operation.responses = openApiMeta.responses;
+			else operation.responses = {
+				"200": { description: "Success" },
+				"400": { description: "Bad request" },
+				"401": { description: "Unauthorized" }
+			};
+			if (!paths[fullPath]) paths[fullPath] = {};
+			paths[fullPath][method] = operation;
+		}
+	}
+	const schemas = {
+		User: {
+			type: "object",
+			properties: {
+				id: { type: "string" },
+				name: { type: "string" },
+				email: {
+					type: "string",
+					format: "email"
+				},
+				emailVerified: { type: "boolean" },
+				image: {
+					type: "string",
+					nullable: true
+				},
+				createdAt: {
+					type: "string",
+					format: "date-time"
+				},
+				updatedAt: {
+					type: "string",
+					format: "date-time"
+				}
+			}
+		},
+		Session: {
+			type: "object",
+			properties: {
+				id: { type: "string" },
+				userId: { type: "string" },
+				token: { type: "string" },
+				expiresAt: {
+					type: "string",
+					format: "date-time"
+				},
+				ipAddress: {
+					type: "string",
+					nullable: true
+				},
+				userAgent: {
+					type: "string",
+					nullable: true
+				},
+				createdAt: {
+					type: "string",
+					format: "date-time"
+				},
+				updatedAt: {
+					type: "string",
+					format: "date-time"
+				}
+			}
+		}
+	};
+	if (userFields) {
+		const userProps = schemas.User?.properties;
+		for (const [name, field] of Object.entries(userFields)) {
+			const prop = { type: field.type };
+			if (field.description) prop.description = field.description;
+			userProps[name] = prop;
+		}
+	}
+	const securitySchemes = { cookieAuth: {
+		type: "apiKey",
+		in: "cookie",
+		name: "better-auth.session_token",
+		description: "Session cookie set by Better Auth after sign-in"
+	} };
+	if (detectedPlugins.apiKey) securitySchemes.apiKeyAuth = {
+		type: "apiKey",
+		in: "header",
+		name: "x-api-key",
+		description: "API key for programmatic access. Pass org context via x-organization-id header."
+	};
+	const resourceSecurity = [];
+	if (detectedPlugins.apiKey) resourceSecurity.push({
+		apiKeyAuth: [],
+		orgHeader: []
+	});
+	return {
+		paths,
+		schemas,
+		securitySchemes,
+		tags: [{
+			name: tagName,
+			description: tagDescription
+		}],
+		resourceSecurity: resourceSecurity.length > 0 ? resourceSecurity : void 0
+	};
+}
+/**
+* Auto-detect active Better Auth plugins by inspecting the API object.
+*
+* Rather than hardcoding plugin-specific behavior, we check for known
+* endpoint signatures that each plugin registers. This way the OpenAPI
+* spec adapts automatically to whatever plugins the app has enabled —
+* no Arc update needed when adding/removing plugins.
+*/
+function detectActivePlugins(authApi) {
+	const endpointPaths = /* @__PURE__ */ new Set();
+	for (const value of Object.values(authApi)) if (isBetterAuthEndpoint(value)) endpointPaths.add(value.path);
+	return {
+		apiKey: endpointPaths.has("/api-key/create"),
+		organization: endpointPaths.has("/organization/create")
+	};
+}
+/**
+* Convert a camelCase key like 'signInEmail' to a readable summary like 'Sign in email'
+*/
+function formatOperationSummary(key) {
+	return key.replace(/([A-Z])/g, " $1").replace(/^./, (s) => s.toUpperCase()).trim();
+}
+/**
+* Check if an endpoint path should have userFields merged into its request body.
+*/
+function isUserFieldEndpoint(path) {
+	return path === "/sign-up/email" || path === "/update-user";
+}
+/**
+* Merge user-defined fields into an existing requestBody schema.
+* For updateUser, all fields are treated as optional regardless of their `required` setting.
+*/
+function mergeUserFieldsIntoRequestBody(requestBody, userFields, endpointPath) {
+	const content = requestBody?.content?.["application/json"];
+	if (!content?.schema) return;
+	const schema = content.schema;
+	if (!schema.properties) schema.properties = {};
+	if (!schema.required) schema.required = [];
+	const props = schema.properties;
+	const required = schema.required;
+	for (const [name, field] of Object.entries(userFields)) {
+		if (field.input === false) continue;
+		const isRequired = endpointPath === "/update-user" ? false : field.required ?? false;
+		const prop = { type: field.type };
+		if (field.description) prop.description = field.description;
+		props[name] = prop;
+		if (isRequired && !required.includes(name)) required.push(name);
+	}
+}
+//#endregion
 //#region src/auth/sessionManager.ts
 /**
 * Session Management for Arc

package/dist/auth/redis-session.d.mts

@@ -1,4 +1,4 @@
-import { i as SessionData, s as SessionStore } from "../sessionManager-CyHpYXoB.mjs";
+import { i as SessionData, s as SessionStore } from "../sessionManager-BXG-HGwG.mjs";
 
 //#region src/auth/redis-session.d.ts
 /** Minimal Redis client interface — compatible with ioredis */

package/dist/betterAuthOpenApi-CV1lxpRX.mjs

@@ -0,0 +1,2 @@
+import { extractBetterAuthOpenApi } from "./auth/index.mjs";
+export { extractBetterAuthOpenApi };

package/dist/{buildHandler-Cvrc2p7r.mjs → buildHandler-B0qvAguf.mjs}

@@ -1,4 +1,4 @@
-import { i as compileAggRequest, t as adapterSupportsAggregate } from "./validate-0__MuUsK.mjs";
+import { i as compileAggRequest, t as adapterSupportsAggregate } from "./validate-CRcaWzp2.mjs";
 //#region src/core/aggregation/buildHandler.ts
 /**
 * Framework-agnostic aggregation execution. Runs safety guards,

package/dist/cache/index.d.mts

@@ -1,6 +1,6 @@
-import { n as CacheStats, r as CacheStore, t as CacheLogger } from "../interface-DL7LlWS5.mjs";
-import { a as QueryCacheConfig, i as QueryCache, n as CacheResult, r as CacheStatus, t as CacheEnvelope } from "../QueryCache-Dsyv2mLS.mjs";
-import { i as queryCachePlugin, n as QueryCacheDefaults, r as QueryCachePluginOptions, t as CrossResourceRule } from "../queryCachePlugin-Bd2tYgh5.mjs";
+import { n as CacheStats, r as CacheStore, t as CacheLogger } from "../interface-C1_WLTMK.mjs";
+import { a as QueryCacheConfig, i as QueryCache, n as CacheResult, r as CacheStatus, t as CacheEnvelope } from "../QueryCache-TRfXau3W.mjs";
+import { i as queryCachePlugin, n as QueryCacheDefaults, r as QueryCachePluginOptions, t as CrossResourceRule } from "../queryCachePlugin-xzFyKAjT.mjs";
 
 //#region src/cache/keys.d.ts
 /**

package/dist/cache/index.mjs

@@ -1,6 +1,6 @@
-import { t as MemoryCacheStore } from "../memory-TdTHCS9-.mjs";
-import { i as versionKey, n as hashParams, r as tagVersionKey, t as buildQueryKey } from "../keys-B3yyBEyH.mjs";
-import { r as QueryCache, t as queryCachePlugin } from "../queryCachePlugin-CnAeFqju.mjs";
+import { i as versionKey, n as hashParams, r as tagVersionKey, t as buildQueryKey } from "../keys-Cd316u_y.mjs";
+import { t as MemoryCacheStore } from "../memory-CLXA2VeJ.mjs";
+import { r as QueryCache, t as queryCachePlugin } from "../queryCachePlugin-emHb0CuX.mjs";
 //#region src/cache/redis.ts
 /**
 * Redis-backed cache store.

package/dist/{caching-C0DdKiYB.mjs → caching-_NJeDd1_.mjs}

@@ -1,4 +1,4 @@
-import { t as __exportAll } from "./chunk-BpYLSNr0.mjs";
+import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.mjs";
 import fp from "fastify-plugin";
 //#region src/plugins/caching.ts
 var caching_exports = /* @__PURE__ */ __exportAll({

package/dist/cli/commands/describe.d.mts

@@ -1,4 +1,4 @@
-import { V as ResourceDefinition, it as RateLimitConfig, mt as RouteSchemaOptions } from "../../index-QYma8mdC.mjs";
+import { V as ResourceDefinition, ht as RouteSchemaOptions, it as RateLimitConfig } from "../../index-CUTG2Cuo.mjs";
 
 //#region src/cli/commands/describe.d.ts
 interface DescribedResource {

package/dist/cli/commands/describe.mjs

@@ -1,5 +1,5 @@
-import { t as CRUD_OPERATIONS } from "../../constants-TrJVIJl0.mjs";
-import { n as stringifyMeasureMap } from "../../ResourceRegistry-CWmOggxS.mjs";
+import { t as CRUD_OPERATIONS } from "../../constants-gaEeMlz-.mjs";
+import { n as stringifyMeasureMap } from "../../ResourceRegistry-5fKZwhK_.mjs";
 import { resolve } from "node:path";
 import { pathToFileURL } from "node:url";
 //#region src/cli/commands/describe.ts

package/dist/cli/commands/docs.mjs

@@ -1,5 +1,5 @@
-import { t as buildOpenApiSpec } from "../../openapi-ButnRyOM.mjs";
-import { t as loadResourcesFromEntry } from "../../loadResourcesFromEntry-XHNeUWpu.mjs";
+import { t as buildOpenApiSpec } from "../../openapi-DZ-5a5Op.mjs";
+import { t as loadResourcesFromEntry } from "../../loadResourcesFromEntry-BTlFEx05.mjs";
 import { dirname, resolve } from "node:path";
 import { mkdirSync, writeFileSync } from "node:fs";
 //#region src/cli/commands/docs.ts

package/dist/cli/commands/generate.d.mts

@@ -1,2 +1,2 @@
-import { n as generate, t as ArcProjectConfig } from "../../generate-Dmk8cfvX.mjs";
-export { ArcProjectConfig, generate };
+import { n as generate, t as ArcProjectConfig } from "../../generate-BnsL9GBm.mjs";
+export { type ArcProjectConfig, generate };

package/dist/cli/commands/generate.mjs

@@ -1,2 +1,2 @@
-import { t as generate } from "../../generate-BaxDdmJ8.mjs";
+import { t as generate } from "../../generate-Brans3fW.mjs";
 export { generate };

package/dist/cli/commands/init.d.mts

@@ -1,2 +1,2 @@
-import { a as ProjectConfig, i as PackageManager, n as DependencyManifest, r as InitOptions, t as init } from "../../init-BS4Daqnv.mjs";
-export { DependencyManifest, InitOptions, PackageManager, ProjectConfig, init };
+import { a as ProjectConfig, i as PackageManager, n as DependencyManifest, r as InitOptions, t as init } from "../../init-BPEu8cs-.mjs";
+export { type DependencyManifest, type InitOptions, type PackageManager, type ProjectConfig, init };

package/dist/cli/commands/init.mjs

@@ -1,2 +1,2 @@
-import { t as init } from "../../init-DSsdRfk9.mjs";
+import { t as init } from "../../init-Bqpt1Hxf.mjs";
 export { init };

package/dist/cli/commands/introspect.mjs

@@ -1,4 +1,4 @@
-import { t as loadResourcesFromEntry } from "../../loadResourcesFromEntry-XHNeUWpu.mjs";
+import { t as loadResourcesFromEntry } from "../../loadResourcesFromEntry-BTlFEx05.mjs";
 //#region src/cli/commands/introspect.ts
 function describePermission(value) {
 	if (!value) return "none";

package/dist/cli/index.d.mts

@@ -1,7 +1,7 @@
 import { describe } from "./commands/describe.mjs";
 import { exportDocs } from "./commands/docs.mjs";
 import { doctor } from "./commands/doctor.mjs";
-import { n as generate } from "../generate-Dmk8cfvX.mjs";
-import { t as init } from "../init-BS4Daqnv.mjs";
+import { n as generate } from "../generate-BnsL9GBm.mjs";
+import { t as init } from "../init-BPEu8cs-.mjs";
 import { introspect } from "./commands/introspect.mjs";
 export { describe, doctor, exportDocs, generate, init, introspect };

package/dist/cli/index.mjs

@@ -1,7 +1,7 @@
 import { describe } from "./commands/describe.mjs";
 import { exportDocs } from "./commands/docs.mjs";
 import { doctor } from "./commands/doctor.mjs";
-import { t as generate } from "../generate-BaxDdmJ8.mjs";
-import { t as init } from "../init-DSsdRfk9.mjs";
+import { t as generate } from "../generate-Brans3fW.mjs";
+import { t as init } from "../init-Bqpt1Hxf.mjs";
 import { introspect } from "./commands/introspect.mjs";
 export { describe, doctor, exportDocs, generate, init, introspect };

package/dist/context/index.mjs

@@ -1,4 +1,4 @@
-import { n as requestContext, t as getTraceHeaders } from "../requestContext-DDLS3NVU.mjs";
+import { n as requestContext, t as getTraceHeaders } from "../requestContext-BZKOr13H.mjs";
 import { AsyncLocalStorage } from "node:async_hooks";
 //#region src/context/transactionContext.ts
 /**

package/dist/core/index.d.mts

@@ -1,3 +1,3 @@
-import { $t as BaseController, At as AggregationRateLimit, B as defineResource, Ct as AggMeasureShorthand, Dt as AggregationIndexHint, Et as AggregationDateRangeRequirement, Fn as ControllerConfigurableOptions, In as ControllerConstructionOptions, Ln as ListResult, Ot as AggregationMaterializedContext, Pn as BaseControllerOptions, Rn as BodySanitizer, St as AggMeasureInput, Tt as AggregationConfig, V as ResourceDefinition, an as SlugMixin, cn as BaseCrudController, dn as AccessControl, en as SoftDeleteExt, fn as AccessControlConfig, in as SlugExt, jt as AggregationsMap, kt as AggregationMaterializedResult, ln as QueryResolver, nn as TreeExt, on as BulkExt, rn as TreeMixin, sn as BulkMixin, tn as SoftDeleteMixin, un as QueryResolverConfig, wt as AggregationCacheConfig, zn as BodySanitizerConfig } from "../index-QYma8mdC.mjs";
-import { A as MAX_FILTER_DEPTH, C as DEFAULT_SORT, D as HOOK_PHASES, E as HOOK_OPERATIONS, F as RESERVED_QUERY_PARAMS, I as SYSTEM_FIELDS, M as MAX_SEARCH_LENGTH, N as MUTATION_OPERATIONS, O as HookOperation, P as MutationOperation, S as DEFAULT_MAX_LIMIT, T as DEFAULT_UPDATE_METHOD, _ as defineAggregation, a as createRequestContext, b as DEFAULT_ID_FIELD, c as sendControllerResponse, d as getEntityQuery, f as defineResourceVariants, g as createPermissionMiddleware, h as createCrudRouter, i as createFastifyHandler, j as MAX_REGEX_LENGTH, k as HookPhase, l as getEntityId, m as defineAction, n as isFieldReadable, o as getControllerContext, p as DefineActionConfig, r as createCrudHandlers, s as getControllerScope, t as collectReadBlockedFields, u as getEntityIdField, v as CRUD_OPERATIONS, w as DEFAULT_TENANT_FIELD, x as DEFAULT_LIMIT, y as CrudOperation } from "../index-Cvo1u9n6.mjs";
-export { AccessControl, AccessControlConfig, AggMeasureInput, AggMeasureShorthand, AggregationCacheConfig, AggregationConfig, AggregationDateRangeRequirement, AggregationIndexHint, AggregationMaterializedContext, AggregationMaterializedResult, AggregationRateLimit, AggregationsMap, BaseController, BaseControllerOptions, BaseCrudController, BodySanitizer, BodySanitizerConfig, BulkExt, BulkMixin, CRUD_OPERATIONS, ControllerConfigurableOptions, ControllerConstructionOptions, CrudOperation, DEFAULT_ID_FIELD, DEFAULT_LIMIT, DEFAULT_MAX_LIMIT, DEFAULT_SORT, DEFAULT_TENANT_FIELD, DEFAULT_UPDATE_METHOD, DefineActionConfig, HOOK_OPERATIONS, HOOK_PHASES, HookOperation, HookPhase, ListResult, MAX_FILTER_DEPTH, MAX_REGEX_LENGTH, MAX_SEARCH_LENGTH, MUTATION_OPERATIONS, MutationOperation, QueryResolver, QueryResolverConfig, RESERVED_QUERY_PARAMS, ResourceDefinition, SYSTEM_FIELDS, SlugExt, SlugMixin, SoftDeleteExt, SoftDeleteMixin, TreeExt, TreeMixin, collectReadBlockedFields, createCrudHandlers, createCrudRouter, createFastifyHandler, createPermissionMiddleware, createRequestContext, defineAction, defineAggregation, defineResource, defineResourceVariants, getControllerContext, getControllerScope, getEntityId, getEntityIdField, getEntityQuery, isFieldReadable, sendControllerResponse };
+import { At as AggregationMaterializedResult, B as defineResource, Bn as BodySanitizerConfig, Ct as AggMeasureInput, Dt as AggregationDateRangeRequirement, Et as AggregationConfig, Fn as BaseControllerOptions, In as ControllerConfigurableOptions, Ln as ControllerConstructionOptions, Mt as AggregationsMap, Ot as AggregationIndexHint, Rn as ListResult, Tt as AggregationCacheConfig, V as ResourceDefinition, an as SlugExt, cn as BulkMixin, dn as QueryResolverConfig, en as BaseController, fn as AccessControl, in as TreeMixin, jt as AggregationRateLimit, kt as AggregationMaterializedContext, ln as BaseCrudController, nn as SoftDeleteMixin, on as SlugMixin, pn as AccessControlConfig, rn as TreeExt, sn as BulkExt, tn as SoftDeleteExt, un as QueryResolver, wt as AggMeasureShorthand, zn as BodySanitizer } from "../index-CUTG2Cuo.mjs";
+import { A as MAX_FILTER_DEPTH, C as DEFAULT_SORT, D as HOOK_PHASES, E as HOOK_OPERATIONS, F as RESERVED_QUERY_PARAMS, I as SYSTEM_FIELDS, M as MAX_SEARCH_LENGTH, N as MUTATION_OPERATIONS, O as HookOperation, P as MutationOperation, S as DEFAULT_MAX_LIMIT, T as DEFAULT_UPDATE_METHOD, _ as defineAggregation, a as createRequestContext, b as DEFAULT_ID_FIELD, c as sendControllerResponse, d as getEntityQuery, f as defineResourceVariants, g as createPermissionMiddleware, h as createCrudRouter, i as createFastifyHandler, j as MAX_REGEX_LENGTH, k as HookPhase, l as getEntityId, m as defineAction, n as isFieldReadable, o as getControllerContext, p as DefineActionConfig, r as createCrudHandlers, s as getControllerScope, t as collectReadBlockedFields, u as getEntityIdField, v as CRUD_OPERATIONS, w as DEFAULT_TENANT_FIELD, x as DEFAULT_LIMIT, y as CrudOperation } from "../index-CP6A1Ffj.mjs";
+export { AccessControl, type AccessControlConfig, type AggMeasureInput, type AggMeasureShorthand, type AggregationCacheConfig, type AggregationConfig, type AggregationDateRangeRequirement, type AggregationIndexHint, type AggregationMaterializedContext, type AggregationMaterializedResult, type AggregationRateLimit, type AggregationsMap, BaseController, type BaseControllerOptions, BaseCrudController, BodySanitizer, type BodySanitizerConfig, type BulkExt, BulkMixin, CRUD_OPERATIONS, type ControllerConfigurableOptions, type ControllerConstructionOptions, CrudOperation, DEFAULT_ID_FIELD, DEFAULT_LIMIT, DEFAULT_MAX_LIMIT, DEFAULT_SORT, DEFAULT_TENANT_FIELD, DEFAULT_UPDATE_METHOD, type DefineActionConfig, HOOK_OPERATIONS, HOOK_PHASES, HookOperation, HookPhase, type ListResult, MAX_FILTER_DEPTH, MAX_REGEX_LENGTH, MAX_SEARCH_LENGTH, MUTATION_OPERATIONS, MutationOperation, QueryResolver, type QueryResolverConfig, RESERVED_QUERY_PARAMS, ResourceDefinition, SYSTEM_FIELDS, type SlugExt, SlugMixin, type SoftDeleteExt, SoftDeleteMixin, type TreeExt, TreeMixin, collectReadBlockedFields, createCrudHandlers, createCrudRouter, createFastifyHandler, createPermissionMiddleware, createRequestContext, defineAction, defineAggregation, defineResource, defineResourceVariants, getControllerContext, getControllerScope, getEntityId, getEntityIdField, getEntityQuery, isFieldReadable, sendControllerResponse };

package/dist/core/index.mjs

@@ -1,5 +1,5 @@
-import { a as DEFAULT_SORT, c as HOOK_OPERATIONS, d as MAX_REGEX_LENGTH, f as MAX_SEARCH_LENGTH, h as SYSTEM_FIELDS, i as DEFAULT_MAX_LIMIT, l as HOOK_PHASES, m as RESERVED_QUERY_PARAMS, n as DEFAULT_ID_FIELD, o as DEFAULT_TENANT_FIELD, p as MUTATION_OPERATIONS, r as DEFAULT_LIMIT, s as DEFAULT_UPDATE_METHOD, t as CRUD_OPERATIONS, u as MAX_FILTER_DEPTH } from "../constants-TrJVIJl0.mjs";
-import { a as BulkMixin, c as collectReadBlockedFields, f as AccessControl, i as SlugMixin, l as isFieldReadable, n as TreeMixin, o as BaseCrudController, r as SoftDeleteMixin, s as QueryResolver, t as BaseController, u as BodySanitizer } from "../BaseController-B-uXzf6I.mjs";
-import { a as defineResource, c as createCrudRouter, i as defineResourceVariants, l as createPermissionMiddleware, n as getEntityIdField, o as ResourceDefinition, r as getEntityQuery, s as defineAction, t as getEntityId, u as defineAggregation } from "../core-C88uIwd3.mjs";
-import { a as createFastifyHandler, c as getControllerScope, i as createCrudHandlers, l as sendControllerResponse, o as createRequestContext, s as getControllerContext } from "../pipeline-D4sqiokR.mjs";
+import { a as DEFAULT_SORT, c as HOOK_OPERATIONS, d as MAX_REGEX_LENGTH, f as MAX_SEARCH_LENGTH, h as SYSTEM_FIELDS, i as DEFAULT_MAX_LIMIT, l as HOOK_PHASES, m as RESERVED_QUERY_PARAMS, n as DEFAULT_ID_FIELD, o as DEFAULT_TENANT_FIELD, p as MUTATION_OPERATIONS, r as DEFAULT_LIMIT, s as DEFAULT_UPDATE_METHOD, t as CRUD_OPERATIONS, u as MAX_FILTER_DEPTH } from "../constants-gaEeMlz-.mjs";
+import { a as BulkMixin, c as collectReadBlockedFields, f as AccessControl, i as SlugMixin, l as isFieldReadable, n as TreeMixin, o as BaseCrudController, r as SoftDeleteMixin, s as QueryResolver, t as BaseController, u as BodySanitizer } from "../BaseController-Dy6EQHjM.mjs";
+import { a as defineResource, c as createCrudRouter, i as defineResourceVariants, l as createPermissionMiddleware, n as getEntityIdField, o as ResourceDefinition, r as getEntityQuery, s as defineAction, t as getEntityId, u as defineAggregation } from "../core-Ba-6Sue6.mjs";
+import { a as createCrudHandlers, c as getControllerContext, l as getControllerScope, o as createFastifyHandler, s as createRequestContext, u as sendControllerResponse } from "../actionPermissions-D7NGwcAR.mjs";
 export { AccessControl, BaseController, BaseCrudController, BodySanitizer, BulkMixin, CRUD_OPERATIONS, DEFAULT_ID_FIELD, DEFAULT_LIMIT, DEFAULT_MAX_LIMIT, DEFAULT_SORT, DEFAULT_TENANT_FIELD, DEFAULT_UPDATE_METHOD, HOOK_OPERATIONS, HOOK_PHASES, MAX_FILTER_DEPTH, MAX_REGEX_LENGTH, MAX_SEARCH_LENGTH, MUTATION_OPERATIONS, QueryResolver, RESERVED_QUERY_PARAMS, ResourceDefinition, SYSTEM_FIELDS, SlugMixin, SoftDeleteMixin, TreeMixin, collectReadBlockedFields, createCrudHandlers, createCrudRouter, createFastifyHandler, createPermissionMiddleware, createRequestContext, defineAction, defineAggregation, defineResource, defineResourceVariants, getControllerContext, getControllerScope, getEntityId, getEntityIdField, getEntityQuery, isFieldReadable, sendControllerResponse };