@classytic/arc 2.21.0 → 2.23.0

package/dist/plugins/index.mjs

@@ -3,14 +3,16 @@ import { c as getOrgId } from "../types-bHblZ9YN.mjs";
 import { n as requestContext } from "../requestContext-BZKOr13H.mjs";
 import { t as hasEvents } from "../typeGuards-C9KXUly6.mjs";
 import { t as HookSystem } from "../HookSystem-C1vB_Gc9.mjs";
-import { t as ResourceRegistry } from "../ResourceRegistry-7RnrEWNP.mjs";
+import { t as ResourceRegistry } from "../ResourceRegistry-y9Hnypus.mjs";
+import { i as sanitizeRequestId, n as requestIdPlugin, r as requestId_default, t as createRequestIdGenerator } from "../requestId-5BhTVzBv.mjs";
+import { n as health_default, t as healthPlugin } from "../health-ScyjIVo5.mjs";
 import { n as caching_default, t as cachingPlugin } from "../caching-_NJeDd1_.mjs";
-import { n as errorHandlerPlugin, t as defaultIsDuplicateKeyError } from "../errorHandler-Dxf6P_kV.mjs";
+import { n as errorHandlerPlugin, t as defaultIsDuplicateKeyError } from "../errorHandler-Bq2OeEQL.mjs";
 import { n as metrics_default, t as metricsPlugin } from "../metrics-fdxI5mn_.mjs";
+import { n as realtime_default, t as realtimePlugin } from "../realtime-I8OrfnMR.mjs";
 import { t as replyHelpersPlugin } from "../replyHelpers-67tRawQZ.mjs";
-import { n as sse_default, t as ssePlugin } from "../sse-CfUjwjDk.mjs";
+import { n as sse_default, t as ssePlugin } from "../sse-0u4P4-OI.mjs";
 import { n as versioning_default, t as versioningPlugin } from "../versioning-Dk-71iIz.mjs";
-import { randomUUID } from "node:crypto";
 import fp from "fastify-plugin";
 //#region src/core/arcCorePlugin.ts
 const arcCorePlugin = async (fastify, opts = {}) => {
@@ -24,6 +26,13 @@ const arcCorePlugin = async (fastify, opts = {}) => {
 		externalOpenApiPaths: [],
 		plugins: /* @__PURE__ */ new Map()
 	});
+	for (const field of [
+		"_policyFilters",
+		"_ownershipCheck",
+		"fieldMask",
+		"policyMetadata",
+		"document"
+	]) if (!fastify.hasRequestDecorator(field)) fastify.decorateRequest(field, void 0);
 	fastify.addHook("onRequest", (request, _reply, done) => {
 		const store = {
 			requestId: request.id,
@@ -192,283 +201,6 @@ var gracefulShutdown_default = fp(gracefulShutdownPlugin, {
 	fastify: "5.x"
 });
 //#endregion
-//#region src/plugins/health.ts
-function createHttpMetrics() {
-	return {
-		requestsTotal: {},
-		requestDurations: [],
-		_ringIndex: 0,
-		startTime: Date.now()
-	};
-}
-const healthPlugin = async (fastify, opts = {}) => {
-	const { prefix = "/_health", checks = [], metrics = false, metricsCollector, version, collectHttpMetrics = metrics } = opts;
-	const httpMetrics = createHttpMetrics();
-	fastify.get(prefix, { schema: {
-		tags: ["Health"],
-		summary: "Liveness probe (alias for /live)",
-		description: "Returns 200 if the process is alive",
-		response: { 200: {
-			type: "object",
-			properties: {
-				status: {
-					type: "string",
-					enum: ["ok"]
-				},
-				timestamp: { type: "string" },
-				version: { type: "string" }
-			}
-		} }
-	} }, async () => ({
-		status: "ok",
-		timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-		...version ? { version } : {}
-	}));
-	fastify.get(`${prefix}/live`, { schema: {
-		tags: ["Health"],
-		summary: "Liveness probe",
-		description: "Returns 200 if the process is alive",
-		response: { 200: {
-			type: "object",
-			properties: {
-				status: {
-					type: "string",
-					enum: ["ok"]
-				},
-				timestamp: { type: "string" },
-				version: { type: "string" }
-			}
-		} }
-	} }, async () => {
-		return {
-			status: "ok",
-			timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-			...version ? { version } : {}
-		};
-	});
-	fastify.get(`${prefix}/ready`, { schema: {
-		tags: ["Health"],
-		summary: "Readiness probe",
-		description: "Returns 200 if all dependencies are healthy",
-		response: {
-			200: {
-				type: "object",
-				properties: {
-					status: {
-						type: "string",
-						enum: ["ready", "not_ready"]
-					},
-					timestamp: { type: "string" },
-					checks: {
-						type: "array",
-						items: {
-							type: "object",
-							properties: {
-								name: { type: "string" },
-								healthy: { type: "boolean" },
-								duration: { type: "number" },
-								error: { type: "string" }
-							}
-						}
-					}
-				}
-			},
-			503: {
-				type: "object",
-				properties: {
-					status: {
-						type: "string",
-						enum: ["not_ready"]
-					},
-					timestamp: { type: "string" },
-					checks: { type: "array" }
-				}
-			}
-		}
-	} }, async (_, reply) => {
-		const results = await runChecks(checks);
-		const criticalFailed = results.some((r) => !r.healthy && (checks.find((c) => c.name === r.name)?.critical ?? true));
-		const response = {
-			status: criticalFailed ? "not_ready" : "ready",
-			timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-			checks: results
-		};
-		if (criticalFailed) reply.code(503);
-		return response;
-	});
-	if (metrics) fastify.get(`${prefix}/metrics`, async (_, reply) => {
-		reply.type("text/plain; charset=utf-8");
-		if (metricsCollector) return await metricsCollector();
-		const uptime = process.uptime();
-		const memory = process.memoryUsage();
-		const cpu = process.cpuUsage();
-		const lines = [
-			"# HELP process_uptime_seconds Process uptime in seconds",
-			"# TYPE process_uptime_seconds gauge",
-			`process_uptime_seconds ${uptime.toFixed(2)}`,
-			"",
-			"# HELP process_memory_heap_bytes Heap memory usage in bytes",
-			"# TYPE process_memory_heap_bytes gauge",
-			`process_memory_heap_bytes{type="used"} ${memory.heapUsed}`,
-			`process_memory_heap_bytes{type="total"} ${memory.heapTotal}`,
-			"",
-			"# HELP process_memory_rss_bytes RSS memory in bytes",
-			"# TYPE process_memory_rss_bytes gauge",
-			`process_memory_rss_bytes ${memory.rss}`,
-			"",
-			"# HELP process_memory_external_bytes External memory in bytes",
-			"# TYPE process_memory_external_bytes gauge",
-			`process_memory_external_bytes ${memory.external}`,
-			"",
-			"# HELP process_cpu_user_microseconds User CPU time in microseconds",
-			"# TYPE process_cpu_user_microseconds counter",
-			`process_cpu_user_microseconds ${cpu.user}`,
-			"",
-			"# HELP process_cpu_system_microseconds System CPU time in microseconds",
-			"# TYPE process_cpu_system_microseconds counter",
-			`process_cpu_system_microseconds ${cpu.system}`,
-			""
-		];
-		if (collectHttpMetrics && Object.keys(httpMetrics.requestsTotal).length > 0) {
-			lines.push("# HELP http_requests_total Total HTTP requests by status code", "# TYPE http_requests_total counter");
-			for (const [status, count] of Object.entries(httpMetrics.requestsTotal)) lines.push(`http_requests_total{status="${status}"} ${count}`);
-			lines.push("");
-			if (httpMetrics.requestDurations.length > 0) {
-				const sorted = [...httpMetrics.requestDurations].sort((a, b) => a - b);
-				const p50 = sorted[Math.floor(sorted.length * .5)] || 0;
-				const p95 = sorted[Math.floor(sorted.length * .95)] || 0;
-				const p99 = sorted[Math.floor(sorted.length * .99)] || 0;
-				const sum = sorted.reduce((a, b) => a + b, 0);
-				lines.push("# HELP http_request_duration_milliseconds HTTP request duration", "# TYPE http_request_duration_milliseconds summary", `http_request_duration_milliseconds{quantile="0.5"} ${p50.toFixed(2)}`, `http_request_duration_milliseconds{quantile="0.95"} ${p95.toFixed(2)}`, `http_request_duration_milliseconds{quantile="0.99"} ${p99.toFixed(2)}`, `http_request_duration_milliseconds_sum ${sum.toFixed(2)}`, `http_request_duration_milliseconds_count ${sorted.length}`, "");
-			}
-		}
-		return lines.join("\n");
-	});
-	if (collectHttpMetrics) {
-		fastify.addHook("onRequest", async (request) => {
-			request._startTime = Date.now();
-		});
-		fastify.addHook("onResponse", async (request, reply) => {
-			const duration = Date.now() - (request._startTime ?? Date.now());
-			const statusBucket = `${Math.floor(reply.statusCode / 100)}xx`;
-			httpMetrics.requestsTotal[statusBucket] = (httpMetrics.requestsTotal[statusBucket] || 0) + 1;
-			if (httpMetrics.requestDurations.length < 1e4) httpMetrics.requestDurations.push(duration);
-			else httpMetrics.requestDurations[httpMetrics._ringIndex % 1e4] = duration;
-			httpMetrics._ringIndex = httpMetrics._ringIndex + 1;
-		});
-	}
-	fastify.log?.debug?.(`Health plugin registered at ${prefix} (alias), ${prefix}/live, ${prefix}/ready${metrics ? `, ${prefix}/metrics` : ""}`);
-};
-/**
-* Run all health checks with timeout
-*/
-async function runChecks(checks) {
-	const results = [];
-	for (const check of checks) {
-		const start = Date.now();
-		const timeout = check.timeout ?? 5e3;
-		let timer;
-		try {
-			const checkPromise = Promise.resolve(check.check());
-			const timeoutPromise = new Promise((_, reject) => {
-				timer = setTimeout(() => reject(/* @__PURE__ */ new Error("Health check timeout")), timeout);
-			});
-			const healthy = await Promise.race([checkPromise, timeoutPromise]);
-			results.push({
-				name: check.name,
-				healthy: Boolean(healthy),
-				duration: Date.now() - start
-			});
-		} catch (err) {
-			results.push({
-				name: check.name,
-				healthy: false,
-				duration: Date.now() - start,
-				error: err.message
-			});
-		} finally {
-			if (timer) clearTimeout(timer);
-		}
-	}
-	return results;
-}
-var health_default = fp(healthPlugin, {
-	name: "arc-health",
-	fastify: "5.x"
-});
-//#endregion
-//#region src/plugins/requestId.ts
-/**
-* Request ID Plugin
-*
-* Propagates request IDs for distributed tracing.
-* - Accepts incoming x-request-id header
-* - Generates UUID if not provided
-* - Attaches to request.id and response header
-*
-* @example
-* import { requestIdPlugin } from '@classytic/arc';
-*
-* await fastify.register(requestIdPlugin);
-*
-* // In handlers, access via request.id
-* fastify.get('/', async (request) => {
-*   console.log(request.id); // UUID
-* });
-*/
-/** W3C traceparent format: `version-traceid-parentid-flags` */
-const TRACEPARENT_RE = /^([0-9a-f]{2})-([0-9a-f]{32})-([0-9a-f]{16})-([0-9a-f]{2})$/i;
-/** W3C spec: version ff is reserved and invalid; trace/parent IDs must not be all zeros */
-const TRACEID_ZEROS = "0".repeat(32);
-const PARENTID_ZEROS = "0".repeat(16);
-/** tracestate: printable ASCII, <= 512 bytes */
-const TRACESTATE_MAX = 512;
-function isValidTraceparent(tp) {
-	const m = TRACEPARENT_RE.exec(tp);
-	if (!m) return false;
-	const version = m[1] ?? "";
-	const traceId = m[2] ?? "";
-	const parentId = m[3] ?? "";
-	if (version.toLowerCase() === "ff") return false;
-	if (traceId.toLowerCase() === TRACEID_ZEROS) return false;
-	if (parentId.toLowerCase() === PARENTID_ZEROS) return false;
-	return true;
-}
-const requestIdPlugin = async (fastify, opts = {}) => {
-	const { header = "x-request-id", generator = randomUUID, setResponseHeader = true, propagateTraceContext = true } = opts;
-	if (!fastify.hasRequestDecorator("requestId")) fastify.decorateRequest("requestId", "");
-	if (!fastify.hasRequestDecorator("traceContext")) fastify.decorateRequest("traceContext", void 0);
-	fastify.addHook("onRequest", async (request, reply) => {
-		const incomingId = request.headers[header];
-		const sanitized = typeof incomingId === "string" ? incomingId.trim() : "";
-		const requestId = sanitized.length > 0 && sanitized.length <= 128 && /^[\w.:-]+$/.test(sanitized) ? sanitized : generator();
-		request.id = requestId;
-		request.requestId = requestId;
-		if (setResponseHeader) reply.header(header, requestId);
-		if (propagateTraceContext) {
-			const rawTraceparent = request.headers["traceparent"];
-			const rawTracestate = request.headers["tracestate"];
-			if (typeof rawTraceparent === "string") {
-				const tp = rawTraceparent.trim();
-				if (isValidTraceparent(tp)) {
-					const ts = typeof rawTracestate === "string" && rawTracestate.length > 0 && rawTracestate.length <= TRACESTATE_MAX ? rawTracestate : void 0;
-					request.traceContext = {
-						traceparent: tp,
-						...ts ? { tracestate: ts } : {}
-					};
-					reply.header("traceparent", tp);
-					if (ts) reply.header("tracestate", ts);
-				}
-			}
-		}
-	});
-	fastify.log?.debug?.("Request ID plugin registered");
-};
-var requestId_default = fp(requestIdPlugin, {
-	name: "arc-request-id",
-	fastify: "5.x"
-});
-//#endregion
 //#region src/plugins/schedules.ts
 const MIN_SAFE_INTERVAL_MS = 1e3;
 const MAX_DEFAULT_LEASE_MS = 3e5;
@@ -556,4 +288,4 @@ var schedules_default = fp(schedulesPlugin, {
 	fastify: "5.x"
 });
 //#endregion
-export { arcCorePlugin_default as arcCorePlugin, arcCorePlugin as arcCorePluginFn, caching_default as cachingPlugin, cachingPlugin as cachingPluginFn, createPlugin, defaultIsDuplicateKeyError, errorHandlerPlugin, errorHandlerPlugin as errorHandlerPluginFn, gracefulShutdown_default as gracefulShutdownPlugin, gracefulShutdownPlugin as gracefulShutdownPluginFn, health_default as healthPlugin, healthPlugin as healthPluginFn, metrics_default as metricsPlugin, metricsPlugin as metricsPluginFn, replyHelpersPlugin, requestId_default as requestIdPlugin, requestIdPlugin as requestIdPluginFn, schedules_default as schedulesPlugin, schedulesPlugin as schedulesPluginFn, sse_default as ssePlugin, ssePlugin as ssePluginFn, versioning_default as versioningPlugin, versioningPlugin as versioningPluginFn };
+export { arcCorePlugin_default as arcCorePlugin, arcCorePlugin as arcCorePluginFn, caching_default as cachingPlugin, cachingPlugin as cachingPluginFn, createPlugin, createRequestIdGenerator, defaultIsDuplicateKeyError, errorHandlerPlugin, errorHandlerPlugin as errorHandlerPluginFn, gracefulShutdown_default as gracefulShutdownPlugin, gracefulShutdownPlugin as gracefulShutdownPluginFn, health_default as healthPlugin, healthPlugin as healthPluginFn, metrics_default as metricsPlugin, metricsPlugin as metricsPluginFn, realtime_default as realtimePlugin, realtimePlugin as realtimePluginFn, replyHelpersPlugin, requestId_default as requestIdPlugin, requestIdPlugin as requestIdPluginFn, sanitizeRequestId, schedules_default as schedulesPlugin, schedulesPlugin as schedulesPluginFn, sse_default as ssePlugin, ssePlugin as ssePluginFn, versioning_default as versioningPlugin, versioningPlugin as versioningPluginFn };

package/dist/plugins/response-cache.mjs

@@ -94,6 +94,7 @@ const responseCachePluginImpl = async (fastify, opts = {}) => {
 	], xCacheHeader = true, statsPath = null, keyFn } = opts;
 	const cache = new LRUCache(maxEntries);
 	const invalidateMethods = new Set(invalidateOn.map((m) => m.toUpperCase()));
+	if (!fastify.hasRequestDecorator("__arcCacheTTL")) fastify.decorateRequest("__arcCacheTTL", void 0);
 	/** Find TTL for a given URL path (seconds) */
 	function getTTL(url) {
 		const path = url.split("?")[0] ?? url;

package/dist/plugins/tracing-entry.mjs

@@ -58,7 +58,7 @@ try {
 function createTracerProvider(options) {
 	if (!isAvailable || !NodeTracerProvider || !BatchSpanProcessor || !OTLPTraceExporter) return null;
 	const { serviceName = "@classytic/arc", serviceVersion, exporterUrl = "http://localhost:4318/v1/traces" } = options;
-	const resolvedVersion = serviceVersion ?? "2.21.0";
+	const resolvedVersion = serviceVersion ?? "2.23.0";
 	const exporter = new OTLPTraceExporter({ url: exporterUrl });
 	const provider = new NodeTracerProvider({ resource: { attributes: {
 		"service.name": serviceName,
@@ -92,8 +92,11 @@ async function tracingPlugin(fastify, options = {}) {
 	}
 	const tracer = otelTrace.getTracer(serviceName);
 	fastify.decorateRequest("tracer", void 0);
-	fastify.addHook("onRequest", async (request, _reply) => {
-		if (Math.random() > sampleRate) return;
+	fastify.addHook("onRequest", (request, _reply, done) => {
+		if (Math.random() > sampleRate) {
+			done();
+			return;
+		}
 		const span = tracer.startSpan(`HTTP ${request.method} ${request.url}`, {
 			kind: 1,
 			attributes: {
@@ -109,7 +112,7 @@ async function tracingPlugin(fastify, options = {}) {
 			tracer,
 			currentSpan: span
 		};
-		otelContext.with(otelTrace.setSpan(otelContext.active(), span), () => {});
+		otelContext.with(otelTrace.setSpan(otelContext.active(), span), done);
 	});
 	fastify.addHook("onResponse", async (request, reply) => {
 		if (!request.tracer?.currentSpan) return;

package/dist/presets/filesUpload.d.mts

@@ -1,6 +1,6 @@
-import { rt as PresetResult } from "../index-Dtrj6XZk.mjs";
+import { Y as PresetResult } from "../index-BBsvQt7U.mjs";
 import { i as RequestScope } from "../types-DH0GupI7.mjs";
-import { c as PermissionCheck } from "../fields-BGqrAa_u.mjs";
+import { t as PermissionCheck } from "../types-Csxga7d3.mjs";
 import { a as StorageReadResult, i as StorageReadRange, n as StorageContext, o as StorageUploadInput, r as StorageFile, t as Storage } from "../storage-DLUZ04kK.mjs";
 //#region src/presets/filesUpload.d.ts
 interface FilesUploadPresetRoutes {

package/dist/presets/filesUpload.mjs

@@ -1,6 +1,6 @@
 import { i as NotFoundError, u as ValidationError } from "../errors-DkO8Nk6-.mjs";
 import { c as getOrgId, g as getUserId } from "../types-bHblZ9YN.mjs";
-import { b as allowPublic, w as requireAuth } from "../permissions-BJMuKMl7.mjs";
+import { C as allowPublic, D as requireAuth } from "../permissions-tbxFHxjZ.mjs";
 import { t as multipartBody } from "../multipartBody-CHEQSZ6G.mjs";
 //#region src/presets/filesUpload.ts
 const DEFAULT_FIELD_NAME = "file";

package/dist/presets/index.d.mts

@@ -1,4 +1,4 @@
-import { bt as IControllerResponse, d as PaginationResult, qt as AnyRecord, rt as PresetResult, st as ResourceConfig, xt as IRequestContext } from "../index-Dtrj6XZk.mjs";
+import { Jt as AnyRecord, Rt as IControllerResponse, U as ResourceConfig, Y as PresetResult, d as PaginationResult, zt as IRequestContext } from "../index-BBsvQt7U.mjs";
 import { FilesUploadPresetOptions, FilesUploadPresetPermissions, FilesUploadPresetRoutes, filesUploadPreset } from "./filesUpload.mjs";
 import { MultiTenantOptions, TenantFieldSpec, multiTenantPreset } from "./multiTenant.mjs";
 import { SearchHandler, SearchPresetOptions, SearchRouteConfig, searchPreset } from "./search.mjs";

package/dist/presets/index.mjs

@@ -1,5 +1,5 @@
 import { multiTenantPreset } from "./multiTenant.mjs";
-import { a as registerPreset, c as auditedPreset, d as ownedByUserPreset, i as getPreset, l as softDeletePreset, n as flexibleMultiTenantPreset, o as treePreset, r as getAvailablePresets, s as bulkPreset, t as applyPresets, u as slugLookupPreset } from "../presets-gw0ciIUD.mjs";
+import { a as registerPreset, c as auditedPreset, d as ownedByUserPreset, i as getPreset, l as softDeletePreset, n as flexibleMultiTenantPreset, o as treePreset, r as getAvailablePresets, s as bulkPreset, t as applyPresets, u as slugLookupPreset } from "../presets-BOe4Ugkl.mjs";
 import { filesUploadPreset } from "./filesUpload.mjs";
 import { searchPreset } from "./search.mjs";
 export { applyPresets, auditedPreset, bulkPreset, filesUploadPreset, flexibleMultiTenantPreset, getAvailablePresets, getPreset, multiTenantPreset, ownedByUserPreset, registerPreset, searchPreset, slugLookupPreset, softDeletePreset, treePreset };

package/dist/presets/multiTenant.d.mts

@@ -1,4 +1,4 @@
-import { J as CrudRouteKey, rt as PresetResult } from "../index-Dtrj6XZk.mjs";
+import { X as CrudRouteKey, Y as PresetResult } from "../index-BBsvQt7U.mjs";
 //#region src/presets/multiTenant.d.ts
 /**
  * One tenant dimension for multi-field filtering. Discriminated by source:

package/dist/presets/search.d.mts

@@ -1,5 +1,5 @@
-import { ft as RouteDefinition, gt as ControllerHandler, pt as RouteMcpConfig, rt as PresetResult } from "../index-Dtrj6XZk.mjs";
-import { c as PermissionCheck } from "../fields-BGqrAa_u.mjs";
+import { At as RouteDefinition, Pt as ControllerHandler, Y as PresetResult, jt as RouteMcpConfig } from "../index-BBsvQt7U.mjs";
+import { t as PermissionCheck } from "../types-Csxga7d3.mjs";
 //#region src/presets/search.d.ts
 /**
  * Search Preset — backend-agnostic search / vector / embed routes

package/dist/presets/search.mjs

@@ -1,4 +1,4 @@
-import { b as allowPublic, w as requireAuth } from "../permissions-BJMuKMl7.mjs";
+import { C as allowPublic, D as requireAuth } from "../permissions-tbxFHxjZ.mjs";
 //#region src/presets/search.ts
 const BUILTINS = [
 	{

package/dist/{presets-gw0ciIUD.mjs → presets-BOe4Ugkl.mjs}

@@ -1,6 +1,6 @@
 import { b as isElevated, n as PUBLIC_SCOPE } from "./types-bHblZ9YN.mjs";
-import { E as requireRoles, b as allowPublic, w as requireAuth } from "./permissions-BJMuKMl7.mjs";
 import { multiTenantPreset } from "./presets/multiTenant.mjs";
+import { C as allowPublic, D as requireAuth, k as requireRoles } from "./permissions-tbxFHxjZ.mjs";
 //#region src/presets/ownedByUser.ts
 /**
 * Create ownership check middleware.

package/dist/rateLimitKey-BoWRH3e7.mjs

@@ -0,0 +1,14 @@
+//#region src/scope/rateLimitKey.ts
+function createTenantKeyGenerator(opts) {
+	if (opts?.strategy) return opts.strategy;
+	return (ctx) => {
+		const scope = ctx.scope;
+		if (!scope || scope.kind === "public") return ctx.ip;
+		if (scope.kind === "member") return scope.organizationId;
+		if (scope.kind === "service") return scope.organizationId;
+		if (scope.kind === "elevated") return scope.organizationId ?? scope.userId ?? ctx.ip;
+		return scope.userId ?? ctx.ip;
+	};
+}
+//#endregion
+export { createTenantKeyGenerator as t };