@classytic/arc 2.21.0 → 2.23.0

package/dist/{types-DpxoNX5v.d.mts → index-Ba10fdKp.d.mts}

@@ -1,13 +1,13 @@
-import { Ut as Authenticator } from "./index-Dtrj6XZk.mjs";
+import { Wt as Authenticator } from "./index-BBsvQt7U.mjs";
 import { r as CacheStore } from "./interface-C1_WLTMK.mjs";
 import { n as ElevationOptions } from "./elevation-C9s5hFP_.mjs";
 import { a as EventTransport } from "./EventTransport-QmY7A258.mjs";
 import { t as ExternalOpenApiPaths } from "./externalPaths-BE6wFpYv.mjs";
 import { r as QueryCachePluginOptions } from "./queryCachePlugin-CfYWq-Ak.mjs";
-import { t as ErrorHandlerOptions } from "./errorHandler-B0e-bq-O.mjs";
-import { l as ResourceLike, n as ArcModuleInput } from "./module-WeuU5jfd.mjs";
+import { t as ErrorHandlerOptions } from "./errorHandler-C6yv4ZTW.mjs";
+import { l as ResourceLike, n as ArcModuleInput } from "./module-B4u10iOJ.mjs";
 import { t as EventPluginOptions } from "./eventPlugin-A6EbthXR.mjs";
-import { _ as HealthOptions, f as CachingOptions, l as SSEOptions, o as MetricsOptions, t as VersioningOptions } from "./versioning-DQ4mCvg0.mjs";
+import { g as CachingOptions, o as MetricsOptions, p as SSEOptions, t as VersioningOptions, u as RealtimeOptions, x as HealthOptions } from "./versioning-D6PvCwpq.mjs";
 import { r as IdempotencyStore } from "./interface-Uk8ONJv7.mjs";
 import { FastifyInstance, FastifyPluginAsync, FastifyReply, FastifyRequest, FastifyServerOptions } from "fastify";
 //#region src/testing/preloadResources.d.ts
@@ -33,30 +33,7 @@ declare function preloadResources(globResult: EagerGlobResult): ResourceLike[];
  */
 declare function preloadResourcesAsync(globResult: LazyGlobResult): Promise<ResourceLike[]>;
 //#endregion
-//#region src/factory/types.d.ts
-type CorsOptions = Record<string, unknown> & {
-  origin?: unknown;
-  credentials?: boolean;
-  methods?: string[];
-  allowedHeaders?: string[];
-};
-type HelmetOptions = Record<string, unknown>;
-type RateLimitOpts = Record<string, unknown> & {
-  max?: number;
-  timeWindow?: string | number;
-  /**
-   * Path patterns to exempt from rate limiting. Supports exact match
-   * (`/health`) or prefix match with trailing `*` (`/api/auth/*`).
-   *
-   * Implemented by synthesising a `@fastify/rate-limit` `allowList`
-   * function. When combined with a user-supplied `allowList`, both
-   * are OR-ed together (path OR ip/custom match skips the limit).
-   *
-   * Use this for endpoints that are hit frequently but independently
-   * of user traffic — session heartbeat, webhooks, health probes.
-   */
-  skipPaths?: string[];
-};
+//#region src/factory/types/auth.d.ts
 /**
  * Arc's built-in JWT auth
  *
@@ -161,13 +138,29 @@ interface JwtAuthOption {
  * });
  * ```
  */
+/** The shape `createBetterAuthAdapter()` returns. */
+interface BetterAuthAdapterResult {
+  plugin: FastifyPluginAsync;
+  openapi?: ExternalOpenApiPaths;
+}
 interface BetterAuthOption {
   type: "betterAuth";
-  /** Better Auth adapter — pass the result of createBetterAuthAdapter() */
-  betterAuth: {
-    plugin: FastifyPluginAsync;
-    openapi?: ExternalOpenApiPaths;
-  };
+  /**
+   * Better Auth adapter — the result of `createBetterAuthAdapter()`, or a
+   * sync/async THUNK returning it (2.22). The thunk resolves during auth
+   * registration — AFTER `beforeBoot` — for adapters whose construction
+   * needs a live DB (Better Auth's `mongodbAdapter(mongoose.connection
+   * .getClient().db())` requires an OPEN connection, so an eager value
+   * forces hosts back into connect-before-createApp ordering dances):
+   *
+   * ```typescript
+   * createApp({
+   *   beforeBoot: () => connectDatabase(),
+   *   auth: { type: 'betterAuth', betterAuth: () => createBetterAuthAdapter({ auth: getAuth() }) },
+   * });
+   * ```
+   */
+  betterAuth: BetterAuthAdapterResult | (() => BetterAuthAdapterResult | Promise<BetterAuthAdapterResult>);
 }
 /**
  * Custom auth plugin — full control over authentication setup
@@ -234,6 +227,112 @@ interface CustomAuthenticatorOption {
  * - `CustomAuthenticatorOption` — A bare authenticate function (`type: 'authenticator'`)
  */
 type AuthOption = false | JwtAuthOption | BetterAuthOption | CustomPluginAuthOption | CustomAuthenticatorOption;
+//#endregion
+//#region src/factory/types/plugin-options.d.ts
+/**
+ * Plugin-specific option shapes for `createApp()` — under-pressure,
+ * multipart, and raw-body plugin configuration.
+ */
+interface UnderPressureOptions {
+  /** Expose `/_status` route for health checks (default: false) */
+  exposeStatusRoute?: boolean;
+  /** Event loop lag threshold in ms — requests rejected above this (default: 1000) */
+  maxEventLoopDelay?: number;
+  /** V8 heap usage threshold in bytes — requests rejected above this */
+  maxHeapUsedBytes?: number;
+  /** RSS memory threshold in bytes — requests rejected above this */
+  maxRssBytes?: number;
+}
+interface MultipartOptions {
+  limits?: {
+    /** Max file size in bytes (default: Fastify default ~1MB) */
+    fileSize?: number;
+    /** Max number of files per request */
+    files?: number;
+  };
+}
+interface RawBodyOptions {
+  /** Body field name to store raw body on (default: 'rawBody') */
+  field?: string;
+  /** Apply to all routes globally (default: false) */
+  global?: boolean;
+  /** Encoding for raw body string (default: 'utf8') */
+  encoding?: string;
+  /** Parse raw body before other parsers (default: false) */
+  runFirst?: boolean;
+}
+//#endregion
+//#region src/factory/types/security.d.ts
+/**
+ * Security-plugin option shapes — CORS / Helmet / rate-limit config for
+ * `createApp()`, including plan-aware rate limiting (2.22).
+ */
+type CorsOptions = Record<string, unknown> & {
+  origin?: unknown;
+  credentials?: boolean;
+  methods?: string[];
+  allowedHeaders?: string[];
+};
+type HelmetOptions = Record<string, unknown>;
+type RateLimitOpts = Record<string, unknown> & {
+  max?: number;
+  timeWindow?: string | number;
+  /**
+   * Path patterns to exempt from rate limiting. Supports exact match
+   * (`/health`) or prefix match with trailing `*` (`/api/auth/*`).
+   *
+   * Implemented by synthesising a `@fastify/rate-limit` `allowList`
+   * function. When combined with a user-supplied `allowList`, both
+   * are OR-ed together (path OR ip/custom match skips the limit).
+   *
+   * Use this for endpoints that are hit frequently but independently
+   * of user traffic — session heartbeat, webhooks, health probes.
+   */
+  skipPaths?: string[];
+  /**
+   * Plan-aware limits (2.22) — resolve the caller's plan per request and
+   * apply that plan's ceiling instead of the global `max`:
+   *
+   * ```typescript
+   * rateLimit: {
+   *   timeWindow: '1 minute',
+   *   plan: {
+   *     resolve: (req) => lookupPlan(req),            // 'free' | 'pro' | ...
+   *     limits: { free: { max: 60 }, pro: { max: 1000 }, enterprise: false },
+   *     default: 'free',
+   *   },
+   * }
+   * ```
+   *
+   * `false` = effectively unlimited. When `plan` is set and no
+   * `keyGenerator` is supplied, arc defaults to the tenant key chain
+   * (org → user → client → IP) so buckets follow actors, not addresses.
+   *
+   * Timing caveat: the limiter runs before route-level auth, so
+   * `req.scope` may be unresolved for token-authenticated calls —
+   * `resolve` receives the RAW request and may need to derive the plan
+   * from its own header/token/session lookup. Same caveat as
+   * `createTenantKeyGenerator`'s IP fallback (documented there).
+   */
+  plan?: RateLimitPlanConfig;
+};
+/** Plan-aware rate limiting (2.22) — see `rateLimit.plan` on CreateAppOptions. */
+interface RateLimitPlanConfig {
+  /**
+   * Name the caller's plan from the raw request. Return `undefined` to
+   * fall back to `default`. Sync or async; a throwing resolver also
+   * falls back (limits must fail-safe, not fail-open to unlimited).
+   */
+  resolve: (req: import("fastify").FastifyRequest) => string | undefined | Promise<string | undefined>;
+  /** Per-plan ceilings within the shared `timeWindow`. `false` = effectively unlimited. */
+  limits: Record<string, {
+    max: number;
+  } | false>;
+  /** Plan used when `resolve` returns undefined/unknown or throws. Default: fall back to the global `max`. */
+  default?: string;
+}
+//#endregion
+//#region src/factory/types/app-options.d.ts
 /**
  * CreateApp Options
  *
@@ -276,8 +375,18 @@ type AuthOption = false | JwtAuthOption | BetterAuthOption | CustomPluginAuthOpt
  * ```
  */
 interface CreateAppOptions {
-  /** Environment preset: 'production', 'development', 'testing', or 'edge' */
-  preset?: "production" | "development" | "testing" | "edge";
+  /** Environment preset: 'production', 'development', 'testing', 'edge', or 'worker' */
+  preset?: "production" | "development" | "testing" | "edge" | "worker";
+  /**
+   * Route-mounting switch (2.23) — the worker-role primitive. `false`
+   * registers every resource's shared runtime state (registry metadata +
+   * adapter, hooks, cache-invalidation rules) WITHOUT mounting any routes,
+   * so headless processes keep tenant-purge cascade, per-resource audit,
+   * and events metadata intact. Set by `preset: 'worker'` /
+   * `createWorker()`; hosts composing a custom worker shape may set it
+   * directly. Default: true (routes mount).
+   */
+  mountRoutes?: boolean;
   /**
    * Runtime profile for store backends.
    * - 'memory' (default): Uses in-memory stores. Suitable for single-instance deployments.
@@ -324,10 +433,50 @@ interface CreateAppOptions {
    * ```
    */
   debug?: boolean | string;
-  /** Trust proxy headers (X-Forwarded-For, etc.) */
-  trustProxy?: boolean;
+  /**
+   * Trust proxy headers (X-Forwarded-For, etc.). Pass-through to Fastify's
+   * `trustProxy` server option — all its forms are supported, not just the
+   * boolean:
+   *
+   * - `true` — trust ALL proxies (only safe when the app is never directly
+   *   reachable; a spoofed `X-Forwarded-For` otherwise forges `request.ip`,
+   *   which feeds rate-limit keys and audit logs)
+   * - `1` — trust exactly one hop (typical single LB / reverse proxy)
+   * - `'10.0.0.0/8'` / `['10.0.0.0/8', '172.16.0.0/12']` — trust only these
+   *   CIDR ranges
+   *
+   * @example
+   * ```ts
+   * createApp({ preset: 'production', trustProxy: 1 });          // one LB hop
+   * createApp({ preset: 'production', trustProxy: '10.0.0.0/8' }); // VPC proxies
+   * ```
+   */
+  trustProxy?: boolean | string | string[] | number;
   /** Fastify plugin/onReady timeout in ms (default: 10_000). Raise for slow boot work (index materialisation, WAL replay, external warm-up). */
   pluginTimeout?: number;
+  /**
+   * Max time in ms the server waits to RECEIVE an entire request
+   * (headers + body). Pass-through to Fastify's `requestTimeout` (Node's
+   * `server.requestTimeout`). Default `0` defers to Node's own 300s bound
+   * — slow-loris requests are already cut off there, so arc doesn't
+   * override; tighten (e.g. `30_000`) for APIs that never accept slow
+   * uploads. Response duration (SSE, streaming) is NOT affected.
+   */
+  requestTimeout?: number;
+  /**
+   * Max time in ms to establish a connection before the socket is
+   * destroyed. Pass-through to Fastify's `connectionTimeout` (Node's
+   * `server.timeout`). Default `0` = no limit (Node's `headersTimeout`
+   * ~60s still bounds idle pre-request sockets).
+   */
+  connectionTimeout?: number;
+  /**
+   * Keep-alive idle timeout in ms (Node's `server.keepAliveTimeout`,
+   * default 72_000). MUST be longer than the idle timeout of any load
+   * balancer in front of the app (ALB default 60s) or the LB reuses
+   * sockets the server just closed → intermittent 502s.
+   */
+  keepAliveTimeout?: number;
   /**
    * Maximum JSON body size in bytes. Pass-through to Fastify's
    * server-level `bodyLimit` option; default is Fastify's 1 MiB
@@ -523,6 +672,15 @@ interface CreateAppOptions {
      * Requires emitEvents to be enabled (or events plugin registered).
      */
     sse?: SSEOptions | boolean;
+    /**
+     * Realtime resource change feed (2.22) — `GET /realtime/:resource`
+     * streams that resource's created/updated/deleted events over SSE,
+     * gated by its own `list` permission with per-event row filtering,
+     * tenant scoping, and field-level masking. Default: false (opt-in).
+     * Set true for defaults, or pass RealtimeOptions (path, heartbeat,
+     * resource allowlist, operations). Requires events.
+     */
+    realtime?: RealtimeOptions | boolean;
     /**
      * QueryCache — TanStack Query-inspired server cache with SWR.
      * Default: false (opt-in). Set to true for memory store defaults.
@@ -933,33 +1091,5 @@ interface CreateAppOptions {
   /** Hook called when the app is shutting down */
   onClose?: (fastify: FastifyInstance) => void | Promise<void>;
 }
-interface UnderPressureOptions {
-  /** Expose `/_status` route for health checks (default: false) */
-  exposeStatusRoute?: boolean;
-  /** Event loop lag threshold in ms — requests rejected above this (default: 1000) */
-  maxEventLoopDelay?: number;
-  /** V8 heap usage threshold in bytes — requests rejected above this */
-  maxHeapUsedBytes?: number;
-  /** RSS memory threshold in bytes — requests rejected above this */
-  maxRssBytes?: number;
-}
-interface MultipartOptions {
-  limits?: {
-    /** Max file size in bytes (default: Fastify default ~1MB) */
-    fileSize?: number;
-    /** Max number of files per request */
-    files?: number;
-  };
-}
-interface RawBodyOptions {
-  /** Body field name to store raw body on (default: 'rawBody') */
-  field?: string;
-  /** Apply to all routes globally (default: false) */
-  global?: boolean;
-  /** Encoding for raw body string (default: 'utf8') */
-  encoding?: string;
-  /** Parse raw body before other parsers (default: false) */
-  runFirst?: boolean;
-}
 //#endregion
-export { CustomPluginAuthOption as a, RawBodyOptions as c, preloadResourcesAsync as d, CustomAuthenticatorOption as i, UnderPressureOptions as l, BetterAuthOption as n, JwtAuthOption as o, CreateAppOptions as r, MultipartOptions as s, AuthOption as t, preloadResources as u };
+export { AuthOption as a, CustomPluginAuthOption as c, preloadResourcesAsync as d, UnderPressureOptions as i, JwtAuthOption as l, MultipartOptions as n, BetterAuthOption as o, RawBodyOptions as r, CustomAuthenticatorOption as s, CreateAppOptions as t, preloadResources as u };

package/dist/{index-B5N-NaHs.d.mts → index-CC5ruDGh.d.mts}

@@ -1,7 +1,7 @@
-import { C as RequestContext, Et as AggregationConfig, F as FastifyWithDecorators, H as ActionDefinition, K as ArcFieldRule, L as RequestWithExtras, T as CrudRouterOptions, V as ResourceDefinition, bt as IControllerResponse, ht as RouteSchemaOptions, pt as RouteMcpConfig, q as CrudController, qt as AnyRecord, st as ResourceConfig, xt as IRequestContext, yt as IController } from "./index-Dtrj6XZk.mjs";
+import { C as RequestContext, Et as ActionDefinition, F as FastifyWithDecorators, H as CrudController, Jt as AnyRecord, L as RequestWithExtras, Lt as IController, Rt as IControllerResponse, T as CrudRouterOptions, U as ResourceConfig, V as ResourceDefinition, et as RouteSchemaOptions, jt as RouteMcpConfig, tt as ArcFieldRule, ut as AggregationConfig, zt as IRequestContext } from "./index-BBsvQt7U.mjs";
 import { i as RequestScope } from "./types-DH0GupI7.mjs";
-import { c as PermissionCheck } from "./fields-BGqrAa_u.mjs";
-import "./fastify-augmentation-DafigGQp.mjs";
+import { t as PermissionCheck } from "./types-Csxga7d3.mjs";
+import "./fastify-augmentation-g_f9omSc.mjs";
 import { FastifyReply, FastifyRequest, RouteHandlerMethod } from "fastify";
 import { z } from "zod";
 import { DataAdapter } from "@classytic/repo-core/adapter";

package/dist/{index-B5PoNbfu.d.mts → index-wMoWBLkn.d.mts}

@@ -1,6 +1,6 @@
 import { r as CacheStore, t as CacheLogger } from "./interface-C1_WLTMK.mjs";
 import { i as RequestScope, n as Mandate } from "./types-DH0GupI7.mjs";
-import { c as PermissionCheck, l as PermissionContext, u as PermissionResult } from "./fields-BGqrAa_u.mjs";
+import { n as PermissionContext, r as PermissionResult, t as PermissionCheck } from "./types-Csxga7d3.mjs";
 import { FastifyReply, FastifyRequest } from "fastify";
 //#region src/permissions/agent.d.ts
 /**
@@ -449,6 +449,72 @@ declare function createOrgPermissions(config: {
  */
 declare function createDynamicPermissionMatrix(config: DynamicPermissionMatrixConfig): DynamicPermissionMatrix;
 //#endregion
+//#region src/permissions/grants.d.ts
+/**
+ * The grant-mode lattice, weakest → strongest. Holding a mode satisfies
+ * every mode at or below it (`write` ⊇ `read` ⊇ `list` ⊇ `see`); `manage`
+ * (grant/revoke rights) satisfies everything. Same semantics as Puter's
+ * `see < list < read < write` hierarchy with `manage` folded into the
+ * lattice top instead of a separate string namespace.
+ */
+declare const GRANT_MODES: readonly ["see", "list", "read", "write", "manage"];
+/** One mode from the {@link GRANT_MODES} lattice. */
+type GrantMode = (typeof GRANT_MODES)[number];
+/**
+ * Does a HELD mode satisfy a REQUIRED mode? Lattice implication —
+ * `modeSatisfies('write', 'read') === true`, `modeSatisfies('see', 'read')
+ * === false`. Unknown strings (a corrupted grant row) never satisfy
+ * anything: fail-closed.
+ */
+declare function modeSatisfies(held: string | undefined, required: GrantMode): boolean;
+/**
+ * What a grant `resolve` callback may return:
+ *
+ * - `boolean` — the host did the whole check itself (already compared modes).
+ * - `{ mode }` — the strongest mode the caller holds on `ctx.resourceId`;
+ *   the combinator applies the lattice against the required mode.
+ * - `{ filters }` — list-shaped resolution: row filters that scope the
+ *   query to visible records (flows through `PermissionResult.filters` →
+ *   `_policyFilters` → the repository query). Grants access with the
+ *   filters attached.
+ * - `{ mode, filters }` — mode gates; filters ride along when it passes.
+ *
+ * An empty object (neither `mode` nor `filters`) and a thrown error both
+ * DENY — grant resolution is fail-closed, same stance as `isRevoked`.
+ */
+type GrantResolution = boolean | {
+  mode?: GrantMode | string;
+  filters?: Record<string, unknown>;
+  /** Optional denial reason surfaced on the 403 (clamped by the framework). */
+  reason?: string;
+};
+interface RequireGrantOptions {
+  /** The mode this operation needs (lattice-checked against the held mode). */
+  mode: GrantMode;
+  /**
+   * Look up the caller's grant. Receives the full `PermissionContext`
+   * (`resourceId` for single-record ops, `request` for headers/scope —
+   * e.g. a share-link token). May be sync or async.
+   *
+   * NOTE: unauthenticated callers are NOT rejected up front — share links
+   * grant access to anonymous callers by design. If your grants are
+   * session-only, return `false` when `ctx.user` is null (or compose with
+   * `requireAuth()` via `allOf`).
+   */
+  resolve: (ctx: PermissionContext) => GrantResolution | Promise<GrantResolution>;
+  /** Roles that skip the grant check entirely (platform admins). */
+  bypassRoles?: readonly string[];
+}
+/**
+ * Per-record grant gate. Same combinator tier as `requireOwnership` —
+ * compose with `anyOf`/`allOf` like any other `PermissionCheck`.
+ *
+ * Fail-closed contract: resolver throws → denied (logged via
+ * `ctx.request.log`); resolution carries neither `mode` nor `filters` →
+ * denied; unknown/corrupted mode strings → denied.
+ */
+declare function requireGrant(options: RequireGrantOptions): PermissionCheck;
+//#endregion
 //#region src/permissions/roleHierarchy.d.ts
 /**
  * Role Hierarchy — Composable RBAC Inheritance
@@ -706,4 +772,4 @@ declare function fullPublic<TDoc = Record<string, unknown>>(overrides?: Permissi
  */
 declare function readOnly<TDoc = Record<string, unknown>>(overrides?: PermissionOverrides<TDoc>): ResourcePermissions<TDoc>;
 //#endregion
-export { requireOwnership as A, requireMandate as B, createOrgPermissions as C, denyAll as D, anyOf as E, normalizePermissionResult as F, RequireAgentScopeOptions as I, RequireMandateOptions as L, roles as M, when as N, not as O, applyPermissionResult as P, requireAgentScope as R, createDynamicPermissionMatrix as S, allowPublic as T, createRoleHierarchy as _, permissionMatrix as a, DynamicPermissionMatrixConfig as b, publicReadAdminWrite as c, requireOrgMembership as d, requireOrgRole as f, RoleHierarchy as g, requireTeamMembership as h, ownerWithAdminBypass as i, requireRoles as j, requireAuth as k, readOnly as l, requireServiceScope as m, authenticated as n, presets_d_exports as o, requireScopeContext as p, fullPublic as r, publicRead as s, adminOnly as t, requireOrgInScope as u, ConnectEventsOptions as v, allOf as w, PermissionEventBus as x, DynamicPermissionMatrix as y, requireDPoP as z };
+export { allOf as A, applyPermissionResult as B, requireGrant as C, PermissionEventBus as D, DynamicPermissionMatrixConfig as E, requireAuth as F, requireDPoP as G, RequireAgentScopeOptions as H, requireOwnership as I, requireMandate as K, requireRoles as L, anyOf as M, denyAll as N, createDynamicPermissionMatrix as O, not as P, roles as R, modeSatisfies as S, DynamicPermissionMatrix as T, RequireMandateOptions as U, normalizePermissionResult as V, requireAgentScope as W, createRoleHierarchy as _, permissionMatrix as a, GrantResolution as b, publicReadAdminWrite as c, requireOrgMembership as d, requireOrgRole as f, RoleHierarchy as g, requireTeamMembership as h, ownerWithAdminBypass as i, allowPublic as j, createOrgPermissions as k, readOnly as l, requireServiceScope as m, authenticated as n, presets_d_exports as o, requireScopeContext as p, fullPublic as r, publicRead as s, adminOnly as t, requireOrgInScope as u, GRANT_MODES as v, ConnectEventsOptions as w, RequireGrantOptions as x, GrantMode as y, when as z };

package/dist/index.d.mts

@@ -1,8 +1,9 @@
-import { $t as UserOrganization, A as RequestIdOptions, An as ArcCreateResult, At as AggregationMaterializedResult, B as defineResource, C as RequestContext, Ct as AggMeasureInput, D as HealthCheck, Dt as AggregationDateRangeRequirement, E as GracefulShutdownOptions, Et as AggregationConfig, F as FastifyWithDecorators, Fn as BaseControllerOptions, Ht as AuthPluginOptions, In as ControllerConfigurableOptions, J as CrudRouteKey, Jt as ApiResponse, L as RequestWithExtras, Ln as ControllerConstructionOptions, Mn as ArcGetResult, Mt as AggregationsMap, N as FastifyRequestExtras, Nn as ArcListResult, O as HealthOptions, Ot as AggregationIndexHint, P as FastifyWithAuth, Pn as ArcUpdateResult, Q as MiddlewareConfig, Rn as ListResult, S as QueryParserInterface, St as RouteHandler, T as CrudRouterOptions, Tt as AggregationCacheConfig, V as ResourceDefinition, X as EventDefinition, Xt as JWTPayload, Y as CrudSchemas, Yt as ArcRequest, Z as FieldRule, _t as ControllerLike, a as InferAdapterDoc, an as SlugExt, bt as IControllerResponse, c as TypedController, cn as BulkMixin, d as PaginationResult, en as BaseController, f as IntrospectionData, g as ArcInternalMetadata, h as ResourceMetadata, ht as RouteSchemaOptions, i as ValidationResult, in as TreeMixin, it as RateLimitConfig, jn as ArcDeleteResult, jt as AggregationRateLimit, k as IntrospectionPluginOptions, kt as AggregationMaterializedContext, l as TypedRepository, ln as BaseCrudController, m as RegistryStats, n as ConfigError, nn as SoftDeleteMixin, o as InferDocType, on as SlugMixin, p as RegistryEntry, q as CrudController, qt as AnyRecord, r as ValidateOptions, rn as TreeExt, rt as PresetResult, s as InferResourceDoc, sn as BulkExt, st as ResourceConfig, t as RouteHandlerMethod, tn as SoftDeleteExt, tt as PresetFunction, u as TypedResourceConfig, w as ServiceContext, wt as AggMeasureShorthand, xt as IRequestContext, y as OwnershipCheck, yt as IController } from "./index-Dtrj6XZk.mjs";
-import { a as applyFieldWritePermissions, c as PermissionCheck, d as UserBase, i as applyFieldReadPermissions, l as PermissionContext, n as FieldPermissionMap, o as fields, t as FieldPermission, u as PermissionResult } from "./fields-BGqrAa_u.mjs";
-import "./fastify-augmentation-DafigGQp.mjs";
-import { A as HOOK_OPERATIONS, B as SYSTEM_FIELDS, C as CrudOperation, D as DEFAULT_SORT, E as DEFAULT_MAX_LIMIT, F as MAX_REGEX_LENGTH, I as MAX_SEARCH_LENGTH, L as MUTATION_OPERATIONS, M as HookOperation, N as HookPhase, O as DEFAULT_TENANT_FIELD, P as MAX_FILTER_DEPTH, R as MutationOperation, S as CRUD_OPERATIONS, T as DEFAULT_LIMIT, f as defineResourceVariants, g as mergeResourceConfig, h as SeamedResourceConfig, j as HOOK_PHASES, k as DEFAULT_UPDATE_METHOD, m as ResourceSeams, p as AdapterLike, s as getControllerScope, v as defineAction, w as DEFAULT_ID_FIELD, x as defineAggregation, z as RESERVED_QUERY_PARAMS } from "./index-B5N-NaHs.mjs";
-import { A as requireOwnership, C as createOrgPermissions, D as denyAll, E as anyOf, N as when, S as createDynamicPermissionMatrix, T as allowPublic, b as DynamicPermissionMatrixConfig, c as publicReadAdminWrite, d as requireOrgMembership, f as requireOrgRole, h as requireTeamMembership, i as ownerWithAdminBypass, j as requireRoles, k as requireAuth, l as readOnly, m as requireServiceScope, n as authenticated, o as presets_d_exports, p as requireScopeContext, r as fullPublic, s as publicRead, t as adminOnly, u as requireOrgInScope, w as allOf, y as DynamicPermissionMatrix } from "./index-B5PoNbfu.mjs";
+import { A as RequestIdOptions, B as defineResource, Bt as RouteHandler, C as RequestContext, D as HealthCheck, E as GracefulShutdownOptions, F as FastifyWithDecorators, Fn as ArcUpdateResult, Ft as ControllerLike, H as CrudController, In as BaseControllerOptions, Jt as AnyRecord, L as RequestWithExtras, Ln as ControllerConfigurableOptions, Lt as IController, Mn as ArcDeleteResult, N as FastifyRequestExtras, Nn as ArcGetResult, Nt as RateLimitConfig, O as HealthOptions, P as FastifyWithAuth, Pn as ArcListResult, Q as MiddlewareConfig, Rn as ControllerConstructionOptions, Rt as IControllerResponse, S as QueryParserInterface, T as CrudRouterOptions, U as ResourceConfig, Ut as AuthPluginOptions, V as ResourceDefinition, X as CrudRouteKey, Xt as ArcRequest, Y as PresetResult, Yt as ApiResponse, Z as CrudSchemas, Zt as JWTPayload, a as InferAdapterDoc, an as TreeMixin, c as TypedController, cn as BulkExt, ct as AggMeasureShorthand, d as PaginationResult, dt as AggregationDateRangeRequirement, en as UserOrganization, et as RouteSchemaOptions, f as IntrospectionData, ft as AggregationIndexHint, g as ArcInternalMetadata, gt as AggregationsMap, h as ResourceMetadata, ht as AggregationRateLimit, i as ValidationResult, in as TreeExt, jn as ArcCreateResult, k as IntrospectionPluginOptions, l as TypedRepository, ln as BulkMixin, lt as AggregationCacheConfig, m as RegistryStats, mt as AggregationMaterializedResult, n as ConfigError, nn as SoftDeleteExt, nt as FieldRule, o as InferDocType, on as SlugExt, ot as EventDefinition, p as RegistryEntry, pt as AggregationMaterializedContext, q as PresetFunction, r as ValidateOptions, rn as SoftDeleteMixin, s as InferResourceDoc, sn as SlugMixin, st as AggMeasureInput, t as RouteHandlerMethod, tn as BaseController, u as TypedResourceConfig, un as BaseCrudController, ut as AggregationConfig, w as ServiceContext, y as OwnershipCheck, zn as ListResult, zt as IRequestContext } from "./index-BBsvQt7U.mjs";
+import { i as UserBase, n as PermissionContext, r as PermissionResult, t as PermissionCheck } from "./types-Csxga7d3.mjs";
+import { a as applyFieldWritePermissions, i as applyFieldReadPermissions, n as FieldPermissionMap, o as fields, t as FieldPermission } from "./fields-D3lhgzhD.mjs";
+import "./fastify-augmentation-g_f9omSc.mjs";
+import { A as HOOK_OPERATIONS, B as SYSTEM_FIELDS, C as CrudOperation, D as DEFAULT_SORT, E as DEFAULT_MAX_LIMIT, F as MAX_REGEX_LENGTH, I as MAX_SEARCH_LENGTH, L as MUTATION_OPERATIONS, M as HookOperation, N as HookPhase, O as DEFAULT_TENANT_FIELD, P as MAX_FILTER_DEPTH, R as MutationOperation, S as CRUD_OPERATIONS, T as DEFAULT_LIMIT, f as defineResourceVariants, g as mergeResourceConfig, h as SeamedResourceConfig, j as HOOK_PHASES, k as DEFAULT_UPDATE_METHOD, m as ResourceSeams, p as AdapterLike, s as getControllerScope, v as defineAction, w as DEFAULT_ID_FIELD, x as defineAggregation, z as RESERVED_QUERY_PARAMS } from "./index-CC5ruDGh.mjs";
+import { A as allOf, E as DynamicPermissionMatrixConfig, F as requireAuth, I as requireOwnership, L as requireRoles, M as anyOf, N as denyAll, O as createDynamicPermissionMatrix, T as DynamicPermissionMatrix, c as publicReadAdminWrite, d as requireOrgMembership, f as requireOrgRole, h as requireTeamMembership, i as ownerWithAdminBypass, j as allowPublic, k as createOrgPermissions, l as readOnly, m as requireServiceScope, n as authenticated, o as presets_d_exports, p as requireScopeContext, r as fullPublic, s as publicRead, t as adminOnly, u as requireOrgInScope, z as when } from "./index-wMoWBLkn.mjs";
 import { a as NotFoundError, d as ValidationError, f as createDomainError, i as ForbiddenError, t as ArcError, u as UnauthorizedError } from "./errors-DHcHVAgk.mjs";
 //#region src/index.d.ts
 declare const version: string;

package/dist/index.mjs

@@ -1,10 +1,11 @@
 import { a as DEFAULT_SORT, c as HOOK_OPERATIONS, d as MAX_REGEX_LENGTH, f as MAX_SEARCH_LENGTH, h as SYSTEM_FIELDS, i as DEFAULT_MAX_LIMIT, l as HOOK_PHASES, m as RESERVED_QUERY_PARAMS, n as DEFAULT_ID_FIELD, o as DEFAULT_TENANT_FIELD, p as MUTATION_OPERATIONS, r as DEFAULT_LIMIT, s as DEFAULT_UPDATE_METHOD, t as CRUD_OPERATIONS, u as MAX_FILTER_DEPTH } from "./constants-DNre0wRg.mjs";
 import { d as createDomainError, i as NotFoundError, l as UnauthorizedError, r as ForbiddenError, t as ArcError, u as ValidationError } from "./errors-DkO8Nk6-.mjs";
-import { a as BulkMixin, i as SlugMixin, n as TreeMixin, o as BaseCrudController, r as SoftDeleteMixin, t as BaseController } from "./BaseController-BnLYgE9A.mjs";
-import { E as requireRoles, F as applyFieldReadPermissions, I as applyFieldWritePermissions, L as fields, O as when, S as denyAll, T as requireOwnership, _ as requireServiceScope, b as allowPublic, c as publicReadAdminWrite, d as createDynamicPermissionMatrix, f as createOrgPermissions, g as requireScopeContext, h as requireOrgRole, i as ownerWithAdminBypass, l as readOnly, m as requireOrgMembership, n as authenticated, o as presets_exports, p as requireOrgInScope, r as fullPublic, s as publicRead, t as adminOnly, v as requireTeamMembership, w as requireAuth, x as anyOf, y as allOf } from "./permissions-BJMuKMl7.mjs";
-import { a as mergeResourceConfig, c as defineAction, d as defineAggregation, i as defineResourceVariants, o as defineResource, s as ResourceDefinition } from "./core-DZ6Xe1jR.mjs";
-import { l as getControllerScope } from "./actionPermissions-ze70xXJi.mjs";
+import { a as BulkMixin, i as SlugMixin, n as TreeMixin, o as BaseCrudController, r as SoftDeleteMixin, t as BaseController } from "./BaseController-BQ8KNvWC.mjs";
+import { a as applyFieldWritePermissions, i as applyFieldReadPermissions, o as fields } from "./applyPermissionResult-Tw4iXtlf.mjs";
+import { a as defineResource, c as defineAction, d as defineAggregation, i as defineResourceVariants, o as ResourceDefinition, s as mergeResourceConfig } from "./core-DQ6rDTyH.mjs";
+import { C as allowPublic, D as requireAuth, O as requireOwnership, S as allOf, T as denyAll, _ as requireOrgMembership, b as requireServiceScope, c as publicReadAdminWrite, g as requireOrgInScope, h as createOrgPermissions, i as ownerWithAdminBypass, j as when, k as requireRoles, l as readOnly, m as createDynamicPermissionMatrix, n as authenticated, o as presets_exports, r as fullPublic, s as publicRead, t as adminOnly, v as requireOrgRole, w as anyOf, x as requireTeamMembership, y as requireScopeContext } from "./permissions-tbxFHxjZ.mjs";
+import { l as getControllerScope } from "./actionPermissions-lszoJle1.mjs";
 //#region src/index.ts
-const version = "2.21.0";
+const version = "2.23.0";
 //#endregion
 export { ArcError, BaseController, BaseCrudController, BulkMixin, CRUD_OPERATIONS, DEFAULT_ID_FIELD, DEFAULT_LIMIT, DEFAULT_MAX_LIMIT, DEFAULT_SORT, DEFAULT_TENANT_FIELD, DEFAULT_UPDATE_METHOD, ForbiddenError, HOOK_OPERATIONS, HOOK_PHASES, MAX_FILTER_DEPTH, MAX_REGEX_LENGTH, MAX_SEARCH_LENGTH, MUTATION_OPERATIONS, NotFoundError, RESERVED_QUERY_PARAMS, ResourceDefinition, SYSTEM_FIELDS, SlugMixin, SoftDeleteMixin, TreeMixin, UnauthorizedError, ValidationError, adminOnly, allOf, allowPublic, anyOf, applyFieldReadPermissions, applyFieldWritePermissions, authenticated, createDomainError, createDynamicPermissionMatrix, createOrgPermissions, defineAction, defineAggregation, defineResource, defineResourceVariants, denyAll, fields, fullPublic, getControllerScope, mergeResourceConfig, ownerWithAdminBypass, presets_exports as permissions, publicRead, publicReadAdminWrite, readOnly, requireAuth, requireOrgInScope, requireOrgMembership, requireOrgRole, requireOwnership, requireRoles, requireScopeContext, requireServiceScope, requireTeamMembership, version, when };