@classytic/arc 2.19.0 → 2.21.0

package/README.md

@@ -126,7 +126,7 @@ export default defineResource({
 });
 ```
 
-Auto-generates: `GET /products`, `GET /products/:id`, `POST /products`, `PATCH /products/:id`, `DELETE /products/:id` + softDelete adds `GET /products/deleted`, `POST /products/:id/restore` + slugLookup adds `GET /products/by-slug/:slug` + custom routes + `POST /products/:id/action`.
+Auto-generates: `GET /products`, `GET /products/:id`, `POST /products`, `PATCH /products/:id`, `DELETE /products/:id` + softDelete adds `GET /products/deleted`, `POST /products/:id/restore` + slugLookup adds `GET /products/slug/:slug` + custom routes + `POST /products/:id/action`.
 
 ### Resource shorthands
 

package/bin/arc.js

@@ -60,8 +60,30 @@ if (args.length === 0 || args.includes('--help') || args.includes('-h')) {
 
 const [command, subcommand, ...rest] = args;
 
+// Per-command usage — `arc <command> --help` prints this instead of falling
+// through to the command (where `--help` was mistaken for an argument).
+const COMMAND_ALIASES = { new: 'init', g: 'generate', i: 'introspect', desc: 'describe', d: 'docs' };
+const COMMAND_HELP = {
+  init: 'Usage: arc init [name] [--jwt|--better-auth] [--mongokit|--custom] [--api-key]\n            [--multi|--single] [--js] [--edge] [--docker|--no-docker] [--skip-install] [--force]\n  Scaffold a new arc project (prompts when run in a TTY without a name).',
+  generate: 'Usage: arc generate <resource|controller|model|repository|schemas|mcp> <name> [--mcp]\n  Aliases: g; types r/c/m/repo/s. Name must be kebab-case (letters, digits, hyphens).',
+  introspect: 'Usage: arc introspect <entry-file>\n  Print a human-readable summary of the resources an entry file exports.',
+  describe: 'Usage: arc describe <entry-file> [--json] [--pretty] [--entry <file>]\n  Describe resources; --json emits machine output for AI agents.',
+  docs: 'Usage: arc docs <entry-file> [output.json] [--entry <file>]\n  Export the generated OpenAPI document.',
+  doctor: 'Usage: arc doctor\n  Diagnose common arc setup issues (exit 1 on hard failures).',
+};
+
 async function main() {
   try {
+    // `arc <command> --help` / `-h` → command-specific usage, exit 0.
+    const canonicalCommand = COMMAND_ALIASES[command] ?? command;
+    if (
+      COMMAND_HELP[canonicalCommand] &&
+      [subcommand, ...rest].some((a) => a === '--help' || a === '-h')
+    ) {
+      console.log(COMMAND_HELP[canonicalCommand]);
+      return;
+    }
+
     switch (command) {
       case 'init':
       case 'new':
@@ -310,6 +332,21 @@ function parseInitOptions(rawArgs) {
       case '-f':
         opts.force = true;
         break;
+
+      case '--help':
+      case '-h':
+        // Handled by the per-command help short-circuit in main(); ignore here.
+        break;
+
+      default:
+        // Surface typos instead of silently scaffolding with defaults — a
+        // dropped `--jwt` / `--mongokit` would change the whole project. Warn
+        // (non-fatal, to stderr) rather than error, since a scaffolder should
+        // stay forgiving.
+        if (arg.startsWith('-')) {
+          console.error(`Warning: unknown flag "${arg}" (ignored). Run "arc init --help".`);
+        }
+        break;
     }
   }
 

package/dist/{BaseController-Dy6EQHjM.mjs → BaseController-BnLYgE9A.mjs}

@@ -1,11 +1,11 @@
-import { h as SYSTEM_FIELDS, o as DEFAULT_TENANT_FIELD } from "./constants-gaEeMlz-.mjs";
+import { h as SYSTEM_FIELDS, o as DEFAULT_TENANT_FIELD } from "./constants-DNre0wRg.mjs";
 import { arcLog } from "./logger/index.mjs";
 import { d as createDomainError, f as createError, i as NotFoundError, r as ForbiddenError } from "./errors-DkO8Nk6-.mjs";
 import { b as isElevated, c as getOrgId, n as PUBLIC_SCOPE, x as isMember } from "./types-bHblZ9YN.mjs";
-import { M as scheduleBackground, N as simpleEqualityMatcher, j as getUserId, k as ArcQueryParser } from "./utils-C6QQ9-hd.mjs";
-import { t as buildQueryKey } from "./keys-Cd316u_y.mjs";
-import { F as applyFieldWritePermissions, L as resolveEffectiveRoles } from "./permissions-BPB1xqGf.mjs";
+import { F as simpleEqualityMatcher, _ as ArcQueryParser, r as scheduleBackground, t as getUserId } from "./utils-CO8a3B_1.mjs";
+import { I as applyFieldWritePermissions, R as resolveEffectiveRoles } from "./permissions-BJMuKMl7.mjs";
 import { t as getUserRoles } from "./types-XTApa8b6.mjs";
+import { t as buildQueryKey } from "./keys-Cd316u_y.mjs";
 //#region src/core/AccessControl.ts
 const log = arcLog("access-control");
 var AccessControl = class {

package/dist/{EventTransport-IEn7Tn-Q.d.mts → EventTransport-QmY7A258.d.mts}

@@ -1,5 +1,4 @@
 import { DeadLetteredEvent, DomainEvent, DomainEvent as DomainEvent$1, EventHandler, EventHandler as EventHandler$1, EventLogger, EventLogger as EventLogger$1, EventTransport, EventTransport as EventTransport$1, PublishManyResult } from "@classytic/primitives/events";
-
 //#region src/events/EventTransport.d.ts
 interface MemoryEventTransportOptions {
   /** Logger for error/warning messages (default: console) */

package/dist/{QueryCache-TRfXau3W.d.mts → QueryCache-Z1B38koh.d.mts}

@@ -1,5 +1,4 @@
 import { r as CacheStore } from "./interface-C1_WLTMK.mjs";
-
 //#region src/cache/QueryCache.d.ts
 /** Metadata wrapper stored in CacheStore */
 interface CacheEnvelope<T = unknown> {

package/dist/{ResourceRegistry-5fKZwhK_.mjs → ResourceRegistry-7RnrEWNP.mjs}

@@ -1,4 +1,4 @@
-import "./constants-gaEeMlz-.mjs";
+import "./constants-DNre0wRg.mjs";
 //#region src/registry/ResourceRegistry.ts
 /**
 * Resource Registry

package/dist/{actionPermissions-D7NGwcAR.mjs → actionPermissions-ze70xXJi.mjs}

@@ -1,5 +1,5 @@
 import { b as isElevated, c as getOrgId, g as getUserId, n as PUBLIC_SCOPE, x as isMember } from "./types-bHblZ9YN.mjs";
-import { L as resolveEffectiveRoles, P as applyFieldReadPermissions } from "./permissions-BPB1xqGf.mjs";
+import { F as applyFieldReadPermissions, R as resolveEffectiveRoles } from "./permissions-BJMuKMl7.mjs";
 import { t as getUserRoles } from "./types-XTApa8b6.mjs";
 import { t as executePipeline } from "./pipe-BOLmGIxa.mjs";
 import { isPaginatedResult, toCanonicalList } from "@classytic/repo-core/pagination";

package/dist/audit/index.d.mts

@@ -1,7 +1,7 @@
-import { d as UserBase } from "../fields-C7ahdGYf.mjs";
+import "../index-Dtrj6XZk.mjs";
+import { d as UserBase } from "../fields-BGqrAa_u.mjs";
 import { FastifyPluginAsync } from "fastify";
 import { RepositoryLike } from "@classytic/repo-core/adapter";
-
 //#region src/audit/stores/interface.d.ts
 type AuditAction = "create" | "update" | "delete" | "restore" | "custom";
 interface AuditEntry {
@@ -126,7 +126,9 @@ interface AuditPluginOptions {
    * Set `purgeIntervalMs: 0` to skip the timer (manual purge only).
    */
   retention?: {
-    /** Max entry age in ms. Entries with `timestamp < now - maxAgeMs` are purged. */maxAgeMs: number; /** Interval between purges in ms. Default 86_400_000 (24h). 0 disables the timer. */
+    /** Max entry age in ms. Entries with `timestamp < now - maxAgeMs` are purged. */
+    maxAgeMs: number;
+    /** Interval between purges in ms. Default 86_400_000 (24h). 0 disables the timer. */
     purgeIntervalMs?: number;
   };
   /**
@@ -159,8 +161,10 @@ interface AuditPluginOptions {
    * - `false`: Disable auto-audit (manual `fastify.audit.*()` calls only)
    */
   autoAudit?: boolean | {
-    operations?: ("create" | "update" | "delete")[]; /** Allowlist — only listed resources are audited (mutually exclusive with exclude) */
-    include?: string[]; /** Denylist — audit everything except listed resources */
+    operations?: ("create" | "update" | "delete")[];
+    /** Allowlist — only listed resources are audited (mutually exclusive with exclude) */
+    include?: string[];
+    /** Denylist — audit everything except listed resources */
     exclude?: string[];
     /**
      * Per-resource opt-in mode: only audit resources with `audit: true` in their

package/dist/audit/index.mjs

@@ -108,7 +108,7 @@ function extractUserId(user) {
 */
 function detectChanges(before, after) {
 	const changes = [];
-	const allKeys = new Set([...Object.keys(before), ...Object.keys(after)]);
+	const allKeys = /* @__PURE__ */ new Set([...Object.keys(before), ...Object.keys(after)]);
 	for (const key of allKeys) {
 		if (key.startsWith("_") || key === "updatedAt") continue;
 		if (JSON.stringify(before[key]) !== JSON.stringify(after[key])) changes.push(key);

package/dist/auth/audit.d.mts

@@ -1,5 +1,4 @@
 import { FastifyInstance } from "fastify";
-
 //#region src/auth/audit.d.ts
 /**
  * Canonical auth event names emitted by the bridge. Hosts pattern-match
@@ -143,9 +142,13 @@ interface BetterAuthAuditBridge {
    * is called again. Useful for Prometheus exporters that scrape periodically.
    */
   getStats(): {
-    /** Events buffered during pre-`attach` phase that were dropped due to `bufferSize` overflow. */droppedFromBuffer: number; /** Events that reached `app.audit.custom(...)` but threw (audit store failure). */
-    dispatchFailures: number; /** Total `dispatch` calls — useful to verify BA is actually invoking the bridge's hooks. */
-    dispatchAttempts: number; /** Events currently buffered awaiting `attach`. */
+    /** Events buffered during pre-`attach` phase that were dropped due to `bufferSize` overflow. */
+    droppedFromBuffer: number;
+    /** Events that reached `app.audit.custom(...)` but threw (audit store failure). */
+    dispatchFailures: number;
+    /** Total `dispatch` calls — useful to verify BA is actually invoking the bridge's hooks. */
+    dispatchAttempts: number;
+    /** Events currently buffered awaiting `attach`. */
     pendingBuffered: number;
   };
 }

package/dist/auth/audit.mjs

@@ -100,6 +100,11 @@ const ENDPOINT_TO_EVENT = [
 		test: /\/api-key\/delete\b/,
 		phase: "after",
 		name: "apikey.delete"
+	},
+	{
+		test: /\/sign-out\b/,
+		phase: "after",
+		name: "session.delete"
 	}
 ];
 function classifyEndpoint(phase, ctx) {

package/dist/auth/index.d.mts

@@ -1,9 +1,8 @@
-import { Ht as AuthPluginOptions, Vt as AuthHelpers } from "../index-CUTG2Cuo.mjs";
-import { c as PermissionCheck } from "../fields-C7ahdGYf.mjs";
+import { Ht as AuthPluginOptions, Vt as AuthHelpers } from "../index-Dtrj6XZk.mjs";
+import { c as PermissionCheck } from "../fields-BGqrAa_u.mjs";
 import { t as ExternalOpenApiPaths } from "../externalPaths-BE6wFpYv.mjs";
-import { a as SessionManagerOptions, c as createSessionManager, i as SessionData, n as MemorySessionStoreOptions, o as SessionManagerResult, r as SessionCookieOptions, s as SessionStore, t as MemorySessionStore } from "../sessionManager-BXG-HGwG.mjs";
+import { a as SessionManagerOptions, c as createSessionManager, i as SessionData, n as MemorySessionStoreOptions, o as SessionManagerResult, r as SessionCookieOptions, s as SessionStore, t as MemorySessionStore } from "../sessionManager-BHOM3N_0.mjs";
 import { FastifyPluginAsync, FastifyReply as FastifyReply$1, FastifyRequest } from "fastify";
-
 //#region src/auth/authPlugin.d.ts
 declare module "fastify" {
   interface FastifyInstance {
@@ -17,14 +16,6 @@ declare module "fastify" {
     auth: AuthHelpers;
   }
 }
-/**
- * Extract Bearer token from Authorization header.
- *
- * Exported for property-based test coverage — the contract is:
- *  - header must start with exactly `"Bearer "` (case-sensitive, one space)
- *  - everything after that prefix is returned verbatim (no trim, no parse)
- *  - missing header → `null`; any other shape → `null`
- */
 declare const authPlugin: FastifyPluginAsync<AuthPluginOptions>;
 declare const _default: FastifyPluginAsync<AuthPluginOptions>;
 //#endregion
@@ -177,8 +168,10 @@ interface BetterAuthOpenApiOptions {
    */
   userFields?: Record<string, {
     type: string;
-    description?: string; /** Whether this field is required in sign-up (default: false) */
-    required?: boolean; /** Whether this field is accepted in request body (default: true). Set false for output-only fields. */
+    description?: string;
+    /** Whether this field is required in sign-up (default: false) */
+    required?: boolean;
+    /** Whether this field is accepted in request body (default: true). Set false for output-only fields. */
     input?: boolean;
   }>;
 }

package/dist/auth/index.mjs

@@ -1,5 +1,5 @@
 import { d as createDomainError, l as UnauthorizedError, p as isArcError, t as ArcError } from "../errors-DkO8Nk6-.mjs";
-import { _ as requireTeamMembership, m as requireOrgRole, p as requireOrgMembership } from "../permissions-BPB1xqGf.mjs";
+import { h as requireOrgRole, m as requireOrgMembership, v as requireTeamMembership } from "../permissions-BJMuKMl7.mjs";
 import { n as normalizeRoles, t as getUserRoles } from "../types-XTApa8b6.mjs";
 import { a as toJsonSchema } from "../schemaConverter-U0MnO9vd.mjs";
 import { createHmac, randomUUID, timingSafeEqual } from "node:crypto";
@@ -1054,7 +1054,7 @@ var MemorySessionStore = class {
 		const userSessions = this.userIndex.get(userId);
 		if (!userSessions) return;
 		for (const sessionId of userSessions) if (sessionId !== currentSessionId) this.sessions.delete(sessionId);
-		if (userSessions.has(currentSessionId)) this.userIndex.set(userId, new Set([currentSessionId]));
+		if (userSessions.has(currentSessionId)) this.userIndex.set(userId, /* @__PURE__ */ new Set([currentSessionId]));
 		else this.userIndex.delete(userId);
 	}
 	/**
@@ -1160,9 +1160,10 @@ function createSessionManager(options) {
 			metadata
 		};
 		await store.set(sessionId, sessionData);
+		const signedId = signSessionId(sessionId, secret);
 		return {
 			sessionId,
-			cookie: buildSetCookieHeader(cookieName, signSessionId(sessionId, secret), maxAgeSeconds, cookieOptions)
+			cookie: buildSetCookieHeader(cookieName, signedId, maxAgeSeconds, cookieOptions)
 		};
 	}
 	/**
@@ -1257,7 +1258,8 @@ function createSessionManager(options) {
 			if (Date.now() - session.updatedAt > updateAgeMs) {
 				const updatedSession = await refreshSession(sessionId);
 				if (updatedSession) {
-					const newCookie = buildSetCookieHeader(cookieName, signSessionId(sessionId, secret), maxAgeSeconds, cookieOptions);
+					const signedId = signSessionId(sessionId, secret);
+					const newCookie = buildSetCookieHeader(cookieName, signedId, maxAgeSeconds, cookieOptions);
 					reply.header("Set-Cookie", newCookie);
 					request.session = {
 						...updatedSession,
@@ -1300,7 +1302,7 @@ function mirrorTrustedOriginsFromCors(options) {
 	const { corsOrigins, canonicalUrl } = options;
 	if (corsOrigins === true) return ["*"];
 	if (!corsOrigins) return [canonicalUrl];
-	return Array.from(new Set([canonicalUrl, ...corsOrigins]));
+	return Array.from(/* @__PURE__ */ new Set([canonicalUrl, ...corsOrigins]));
 }
 //#endregion
 export { MemorySessionStore, authPlugin_default as authPlugin, authPlugin as authPluginFn, createBetterAuthAdapter, createSessionManager, extractBetterAuthOpenApi, mirrorTrustedOriginsFromCors };

package/dist/auth/redis-session.d.mts

@@ -1,5 +1,4 @@
-import { i as SessionData, s as SessionStore } from "../sessionManager-BXG-HGwG.mjs";
-
+import { i as SessionData, s as SessionStore } from "../sessionManager-BHOM3N_0.mjs";
 //#region src/auth/redis-session.d.ts
 /** Minimal Redis client interface — compatible with ioredis */
 interface RedisLike {

package/dist/{buildHandler-B0qvAguf.mjs → buildHandler-D_2ULWxZ.mjs}

@@ -1,4 +1,4 @@
-import { i as compileAggRequest, t as adapterSupportsAggregate } from "./validate-CRcaWzp2.mjs";
+import { i as compileAggRequest, t as adapterSupportsAggregate } from "./validate-C2mGgSXg.mjs";
 //#region src/core/aggregation/buildHandler.ts
 /**
 * Framework-agnostic aggregation execution. Runs safety guards,
@@ -193,7 +193,7 @@ const OPERATOR_SHORTHAND = {
 	size: "$size",
 	type: "$type"
 };
-const SHORTHAND_RANGE_OPS = new Set([
+const SHORTHAND_RANGE_OPS = /* @__PURE__ */ new Set([
 	"gt",
 	"gte",
 	"lt",
@@ -239,7 +239,7 @@ function expandShorthandOperators(value) {
 */
 function extractCallerFilter(query) {
 	const out = {};
-	const reserved = new Set([
+	const reserved = /* @__PURE__ */ new Set([
 		"page",
 		"limit",
 		"after",

package/dist/cache/index.d.mts

@@ -1,7 +1,6 @@
 import { n as CacheStats, r as CacheStore, t as CacheLogger } from "../interface-C1_WLTMK.mjs";
-import { a as QueryCacheConfig, i as QueryCache, n as CacheResult, r as CacheStatus, t as CacheEnvelope } from "../QueryCache-TRfXau3W.mjs";
-import { i as queryCachePlugin, n as QueryCacheDefaults, r as QueryCachePluginOptions, t as CrossResourceRule } from "../queryCachePlugin-xzFyKAjT.mjs";
-
+import { a as QueryCacheConfig, i as QueryCache, n as CacheResult, r as CacheStatus, t as CacheEnvelope } from "../QueryCache-Z1B38koh.mjs";
+import { i as queryCachePlugin, n as QueryCacheDefaults, r as QueryCachePluginOptions, t as CrossResourceRule } from "../queryCachePlugin-CfYWq-Ak.mjs";
 //#region src/cache/keys.d.ts
 /**
  * Cache Key Utilities

package/dist/cache/index.mjs

@@ -1,6 +1,6 @@
-import { i as versionKey, n as hashParams, r as tagVersionKey, t as buildQueryKey } from "../keys-Cd316u_y.mjs";
 import { t as MemoryCacheStore } from "../memory-CLXA2VeJ.mjs";
-import { r as QueryCache, t as queryCachePlugin } from "../queryCachePlugin-emHb0CuX.mjs";
+import { i as versionKey, n as hashParams, r as tagVersionKey, t as buildQueryKey } from "../keys-Cd316u_y.mjs";
+import { r as QueryCache, t as queryCachePlugin } from "../queryCachePlugin-DzqLN904.mjs";
 //#region src/cache/redis.ts
 /**
 * Redis-backed cache store.

package/dist/cli/commands/describe.d.mts

@@ -1,5 +1,4 @@
-import { V as ResourceDefinition, ht as RouteSchemaOptions, it as RateLimitConfig } from "../../index-CUTG2Cuo.mjs";
-
+import { V as ResourceDefinition, ht as RouteSchemaOptions, it as RateLimitConfig } from "../../index-Dtrj6XZk.mjs";
 //#region src/cli/commands/describe.d.ts
 interface DescribedResource {
   name: string;

package/dist/cli/commands/describe.mjs

@@ -1,5 +1,5 @@
-import { t as CRUD_OPERATIONS } from "../../constants-gaEeMlz-.mjs";
-import { n as stringifyMeasureMap } from "../../ResourceRegistry-5fKZwhK_.mjs";
+import { t as CRUD_OPERATIONS } from "../../constants-DNre0wRg.mjs";
+import { n as stringifyMeasureMap } from "../../ResourceRegistry-7RnrEWNP.mjs";
 import { resolve } from "node:path";
 import { pathToFileURL } from "node:url";
 //#region src/cli/commands/describe.ts

package/dist/cli/commands/docs.mjs

@@ -1,5 +1,5 @@
-import { t as buildOpenApiSpec } from "../../openapi-DZ-5a5Op.mjs";
-import { t as loadResourcesFromEntry } from "../../loadResourcesFromEntry-BTlFEx05.mjs";
+import { t as buildOpenApiSpec } from "../../openapi-Kyod_di6.mjs";
+import { t as loadResourcesFromEntry } from "../../loadResourcesFromEntry-OMCvIEE7.mjs";
 import { dirname, resolve } from "node:path";
 import { mkdirSync, writeFileSync } from "node:fs";
 //#region src/cli/commands/docs.ts

package/dist/cli/commands/generate.mjs

@@ -1,2 +1,2 @@
-import { t as generate } from "../../generate-Brans3fW.mjs";
+import { t as generate } from "../../generate-usRSdQmP.mjs";
 export { generate };

package/dist/cli/commands/init.mjs

@@ -1,2 +1,2 @@
-import { t as init } from "../../init-Bqpt1Hxf.mjs";
+import { t as init } from "../../init-0YhHkXGk.mjs";
 export { init };

package/dist/cli/commands/introspect.mjs

@@ -1,4 +1,4 @@
-import { t as loadResourcesFromEntry } from "../../loadResourcesFromEntry-BTlFEx05.mjs";
+import { t as loadResourcesFromEntry } from "../../loadResourcesFromEntry-OMCvIEE7.mjs";
 //#region src/cli/commands/introspect.ts
 function describePermission(value) {
 	if (!value) return "none";
@@ -10,19 +10,10 @@ function describePermission(value) {
 async function introspect(args) {
 	console.log("Introspecting Arc resources...\n");
 	const entryPath = args[0];
-	if (!entryPath) {
-		console.log("Usage: arc introspect <entry-file>\n");
-		console.log("Where entry-file exports your defineResource() results.");
-		console.log("Example: arc introspect ./src/resources.js");
-		return;
-	}
+	if (!entryPath) throw new Error("Missing entry-file argument\nUsage: arc introspect <entry-file>\nWhere entry-file exports your defineResource() results.\nExample: arc introspect ./src/resources.js");
 	const { registry, registered } = await loadResourcesFromEntry(entryPath);
-	if (registered === 0) {
-		console.log("No resource definitions found in entry file.");
-		console.log("\nMake sure your file exports defineResource() results:");
-		console.log("  export const productResource = defineResource({ ... });");
-		return;
-	}
+	if (registered === 0) throw new Error(`No resource definitions found in "${entryPath}".\nMake sure the file exports defineResource() results:
+  export const productResource = defineResource({ ... });`);
 	const resources = registry.getAll();
 	console.log(`Found ${resources.length} resource(s):\n`);
 	resources.forEach((resource, index) => {

package/dist/cli/index.mjs

@@ -1,7 +1,7 @@
 import { describe } from "./commands/describe.mjs";
 import { exportDocs } from "./commands/docs.mjs";
 import { doctor } from "./commands/doctor.mjs";
-import { t as generate } from "../generate-Brans3fW.mjs";
-import { t as init } from "../init-Bqpt1Hxf.mjs";
+import { t as generate } from "../generate-usRSdQmP.mjs";
+import { t as init } from "../init-0YhHkXGk.mjs";
 import { introspect } from "./commands/introspect.mjs";
 export { describe, doctor, exportDocs, generate, init, introspect };

package/dist/{constants-gaEeMlz-.mjs → constants-DNre0wRg.mjs}

@@ -73,7 +73,7 @@ const MAX_FILTER_DEPTH = 10;
 * filter. See `ArcQueryParser.parseFilters()` for the unwrap step that
 * merges `q.filter[*]` back into the top-level filter map.
 */
-const RESERVED_QUERY_PARAMS = Object.freeze(new Set([
+const RESERVED_QUERY_PARAMS = Object.freeze(/* @__PURE__ */ new Set([
 	"page",
 	"limit",
 	"sort",

package/dist/context/index.d.mts

@@ -1,5 +1,4 @@
 import { AsyncLocalStorage } from "node:async_hooks";
-
 //#region src/context/requestContext.d.ts
 /**
  * Shape of the request-scoped context store.
@@ -104,7 +103,8 @@ declare const transactionContext: {
    * Get the current DB session, or `undefined` if not inside a
    * `transactionContext.run(...)` scope.
    */
-  get(): DbSession | undefined; /** The underlying AsyncLocalStorage instance. Exposed for advanced integrations. */
+  get(): DbSession | undefined;
+  /** The underlying AsyncLocalStorage instance. Exposed for advanced integrations. */
   storage: AsyncLocalStorage<unknown>;
 };
 //#endregion

package/dist/core/index.d.mts

@@ -1,3 +1,3 @@
-import { At as AggregationMaterializedResult, B as defineResource, Bn as BodySanitizerConfig, Ct as AggMeasureInput, Dt as AggregationDateRangeRequirement, Et as AggregationConfig, Fn as BaseControllerOptions, In as ControllerConfigurableOptions, Ln as ControllerConstructionOptions, Mt as AggregationsMap, Ot as AggregationIndexHint, Rn as ListResult, Tt as AggregationCacheConfig, V as ResourceDefinition, an as SlugExt, cn as BulkMixin, dn as QueryResolverConfig, en as BaseController, fn as AccessControl, in as TreeMixin, jt as AggregationRateLimit, kt as AggregationMaterializedContext, ln as BaseCrudController, nn as SoftDeleteMixin, on as SlugMixin, pn as AccessControlConfig, rn as TreeExt, sn as BulkExt, tn as SoftDeleteExt, un as QueryResolver, wt as AggMeasureShorthand, zn as BodySanitizer } from "../index-CUTG2Cuo.mjs";
-import { A as MAX_FILTER_DEPTH, C as DEFAULT_SORT, D as HOOK_PHASES, E as HOOK_OPERATIONS, F as RESERVED_QUERY_PARAMS, I as SYSTEM_FIELDS, M as MAX_SEARCH_LENGTH, N as MUTATION_OPERATIONS, O as HookOperation, P as MutationOperation, S as DEFAULT_MAX_LIMIT, T as DEFAULT_UPDATE_METHOD, _ as defineAggregation, a as createRequestContext, b as DEFAULT_ID_FIELD, c as sendControllerResponse, d as getEntityQuery, f as defineResourceVariants, g as createPermissionMiddleware, h as createCrudRouter, i as createFastifyHandler, j as MAX_REGEX_LENGTH, k as HookPhase, l as getEntityId, m as defineAction, n as isFieldReadable, o as getControllerContext, p as DefineActionConfig, r as createCrudHandlers, s as getControllerScope, t as collectReadBlockedFields, u as getEntityIdField, v as CRUD_OPERATIONS, w as DEFAULT_TENANT_FIELD, x as DEFAULT_LIMIT, y as CrudOperation } from "../index-CP6A1Ffj.mjs";
-export { AccessControl, type AccessControlConfig, type AggMeasureInput, type AggMeasureShorthand, type AggregationCacheConfig, type AggregationConfig, type AggregationDateRangeRequirement, type AggregationIndexHint, type AggregationMaterializedContext, type AggregationMaterializedResult, type AggregationRateLimit, type AggregationsMap, BaseController, type BaseControllerOptions, BaseCrudController, BodySanitizer, type BodySanitizerConfig, type BulkExt, BulkMixin, CRUD_OPERATIONS, type ControllerConfigurableOptions, type ControllerConstructionOptions, CrudOperation, DEFAULT_ID_FIELD, DEFAULT_LIMIT, DEFAULT_MAX_LIMIT, DEFAULT_SORT, DEFAULT_TENANT_FIELD, DEFAULT_UPDATE_METHOD, type DefineActionConfig, HOOK_OPERATIONS, HOOK_PHASES, HookOperation, HookPhase, type ListResult, MAX_FILTER_DEPTH, MAX_REGEX_LENGTH, MAX_SEARCH_LENGTH, MUTATION_OPERATIONS, MutationOperation, QueryResolver, type QueryResolverConfig, RESERVED_QUERY_PARAMS, ResourceDefinition, SYSTEM_FIELDS, type SlugExt, SlugMixin, type SoftDeleteExt, SoftDeleteMixin, type TreeExt, TreeMixin, collectReadBlockedFields, createCrudHandlers, createCrudRouter, createFastifyHandler, createPermissionMiddleware, createRequestContext, defineAction, defineAggregation, defineResource, defineResourceVariants, getControllerContext, getControllerScope, getEntityId, getEntityIdField, getEntityQuery, isFieldReadable, sendControllerResponse };
+import { At as AggregationMaterializedResult, B as defineResource, Bn as BodySanitizerConfig, Ct as AggMeasureInput, Dt as AggregationDateRangeRequirement, Et as AggregationConfig, Fn as BaseControllerOptions, In as ControllerConfigurableOptions, Ln as ControllerConstructionOptions, Mt as AggregationsMap, Ot as AggregationIndexHint, Rn as ListResult, Tt as AggregationCacheConfig, V as ResourceDefinition, an as SlugExt, cn as BulkMixin, dn as QueryResolverConfig, en as BaseController, fn as AccessControl, in as TreeMixin, jt as AggregationRateLimit, kt as AggregationMaterializedContext, ln as BaseCrudController, nn as SoftDeleteMixin, on as SlugMixin, pn as AccessControlConfig, rn as TreeExt, sn as BulkExt, tn as SoftDeleteExt, un as QueryResolver, wt as AggMeasureShorthand, zn as BodySanitizer } from "../index-Dtrj6XZk.mjs";
+import { A as HOOK_OPERATIONS, B as SYSTEM_FIELDS, C as CrudOperation, D as DEFAULT_SORT, E as DEFAULT_MAX_LIMIT, F as MAX_REGEX_LENGTH, I as MAX_SEARCH_LENGTH, L as MUTATION_OPERATIONS, M as HookOperation, N as HookPhase, O as DEFAULT_TENANT_FIELD, P as MAX_FILTER_DEPTH, R as MutationOperation, S as CRUD_OPERATIONS, T as DEFAULT_LIMIT, _ as DefineActionConfig, a as createRequestContext, b as createPermissionMiddleware, c as sendControllerResponse, d as getEntityQuery, f as defineResourceVariants, g as mergeResourceConfig, h as SeamedResourceConfig, i as createFastifyHandler, j as HOOK_PHASES, k as DEFAULT_UPDATE_METHOD, l as getEntityId, m as ResourceSeams, n as isFieldReadable, o as getControllerContext, p as AdapterLike, r as createCrudHandlers, s as getControllerScope, t as collectReadBlockedFields, u as getEntityIdField, v as defineAction, w as DEFAULT_ID_FIELD, x as defineAggregation, y as createCrudRouter, z as RESERVED_QUERY_PARAMS } from "../index-B5N-NaHs.mjs";
+export { AccessControl, type AccessControlConfig, type AdapterLike, type AggMeasureInput, type AggMeasureShorthand, type AggregationCacheConfig, type AggregationConfig, type AggregationDateRangeRequirement, type AggregationIndexHint, type AggregationMaterializedContext, type AggregationMaterializedResult, type AggregationRateLimit, type AggregationsMap, BaseController, type BaseControllerOptions, BaseCrudController, BodySanitizer, type BodySanitizerConfig, type BulkExt, BulkMixin, CRUD_OPERATIONS, type ControllerConfigurableOptions, type ControllerConstructionOptions, CrudOperation, DEFAULT_ID_FIELD, DEFAULT_LIMIT, DEFAULT_MAX_LIMIT, DEFAULT_SORT, DEFAULT_TENANT_FIELD, DEFAULT_UPDATE_METHOD, type DefineActionConfig, HOOK_OPERATIONS, HOOK_PHASES, HookOperation, HookPhase, type ListResult, MAX_FILTER_DEPTH, MAX_REGEX_LENGTH, MAX_SEARCH_LENGTH, MUTATION_OPERATIONS, MutationOperation, QueryResolver, type QueryResolverConfig, RESERVED_QUERY_PARAMS, ResourceDefinition, type ResourceSeams, SYSTEM_FIELDS, type SeamedResourceConfig, type SlugExt, SlugMixin, type SoftDeleteExt, SoftDeleteMixin, type TreeExt, TreeMixin, collectReadBlockedFields, createCrudHandlers, createCrudRouter, createFastifyHandler, createPermissionMiddleware, createRequestContext, defineAction, defineAggregation, defineResource, defineResourceVariants, getControllerContext, getControllerScope, getEntityId, getEntityIdField, getEntityQuery, isFieldReadable, mergeResourceConfig, sendControllerResponse };

package/dist/core/index.mjs

@@ -1,5 +1,5 @@
-import { a as DEFAULT_SORT, c as HOOK_OPERATIONS, d as MAX_REGEX_LENGTH, f as MAX_SEARCH_LENGTH, h as SYSTEM_FIELDS, i as DEFAULT_MAX_LIMIT, l as HOOK_PHASES, m as RESERVED_QUERY_PARAMS, n as DEFAULT_ID_FIELD, o as DEFAULT_TENANT_FIELD, p as MUTATION_OPERATIONS, r as DEFAULT_LIMIT, s as DEFAULT_UPDATE_METHOD, t as CRUD_OPERATIONS, u as MAX_FILTER_DEPTH } from "../constants-gaEeMlz-.mjs";
-import { a as BulkMixin, c as collectReadBlockedFields, f as AccessControl, i as SlugMixin, l as isFieldReadable, n as TreeMixin, o as BaseCrudController, r as SoftDeleteMixin, s as QueryResolver, t as BaseController, u as BodySanitizer } from "../BaseController-Dy6EQHjM.mjs";
-import { a as defineResource, c as createCrudRouter, i as defineResourceVariants, l as createPermissionMiddleware, n as getEntityIdField, o as ResourceDefinition, r as getEntityQuery, s as defineAction, t as getEntityId, u as defineAggregation } from "../core-Ba-6Sue6.mjs";
-import { a as createCrudHandlers, c as getControllerContext, l as getControllerScope, o as createFastifyHandler, s as createRequestContext, u as sendControllerResponse } from "../actionPermissions-D7NGwcAR.mjs";
-export { AccessControl, BaseController, BaseCrudController, BodySanitizer, BulkMixin, CRUD_OPERATIONS, DEFAULT_ID_FIELD, DEFAULT_LIMIT, DEFAULT_MAX_LIMIT, DEFAULT_SORT, DEFAULT_TENANT_FIELD, DEFAULT_UPDATE_METHOD, HOOK_OPERATIONS, HOOK_PHASES, MAX_FILTER_DEPTH, MAX_REGEX_LENGTH, MAX_SEARCH_LENGTH, MUTATION_OPERATIONS, QueryResolver, RESERVED_QUERY_PARAMS, ResourceDefinition, SYSTEM_FIELDS, SlugMixin, SoftDeleteMixin, TreeMixin, collectReadBlockedFields, createCrudHandlers, createCrudRouter, createFastifyHandler, createPermissionMiddleware, createRequestContext, defineAction, defineAggregation, defineResource, defineResourceVariants, getControllerContext, getControllerScope, getEntityId, getEntityIdField, getEntityQuery, isFieldReadable, sendControllerResponse };
+import { a as DEFAULT_SORT, c as HOOK_OPERATIONS, d as MAX_REGEX_LENGTH, f as MAX_SEARCH_LENGTH, h as SYSTEM_FIELDS, i as DEFAULT_MAX_LIMIT, l as HOOK_PHASES, m as RESERVED_QUERY_PARAMS, n as DEFAULT_ID_FIELD, o as DEFAULT_TENANT_FIELD, p as MUTATION_OPERATIONS, r as DEFAULT_LIMIT, s as DEFAULT_UPDATE_METHOD, t as CRUD_OPERATIONS, u as MAX_FILTER_DEPTH } from "../constants-DNre0wRg.mjs";
+import { a as BulkMixin, c as collectReadBlockedFields, f as AccessControl, i as SlugMixin, l as isFieldReadable, n as TreeMixin, o as BaseCrudController, r as SoftDeleteMixin, s as QueryResolver, t as BaseController, u as BodySanitizer } from "../BaseController-BnLYgE9A.mjs";
+import { a as mergeResourceConfig, c as defineAction, d as defineAggregation, i as defineResourceVariants, l as createCrudRouter, n as getEntityIdField, o as defineResource, r as getEntityQuery, s as ResourceDefinition, t as getEntityId, u as createPermissionMiddleware } from "../core-DZ6Xe1jR.mjs";
+import { a as createCrudHandlers, c as getControllerContext, l as getControllerScope, o as createFastifyHandler, s as createRequestContext, u as sendControllerResponse } from "../actionPermissions-ze70xXJi.mjs";
+export { AccessControl, BaseController, BaseCrudController, BodySanitizer, BulkMixin, CRUD_OPERATIONS, DEFAULT_ID_FIELD, DEFAULT_LIMIT, DEFAULT_MAX_LIMIT, DEFAULT_SORT, DEFAULT_TENANT_FIELD, DEFAULT_UPDATE_METHOD, HOOK_OPERATIONS, HOOK_PHASES, MAX_FILTER_DEPTH, MAX_REGEX_LENGTH, MAX_SEARCH_LENGTH, MUTATION_OPERATIONS, QueryResolver, RESERVED_QUERY_PARAMS, ResourceDefinition, SYSTEM_FIELDS, SlugMixin, SoftDeleteMixin, TreeMixin, collectReadBlockedFields, createCrudHandlers, createCrudRouter, createFastifyHandler, createPermissionMiddleware, createRequestContext, defineAction, defineAggregation, defineResource, defineResourceVariants, getControllerContext, getControllerScope, getEntityId, getEntityIdField, getEntityQuery, isFieldReadable, mergeResourceConfig, sendControllerResponse };