@classytic/arc 2.30.0 → 2.32.0

package/dist/cleanup/index.mjs

@@ -1,6 +1,7 @@
-import { g as getUserId } from "../types-CSyCxl2V.mjs";
-import { t as defineResource } from "../defineResource-CxWqDCAy.mjs";
-import { t as defineModule } from "../module-_-M7C5ES.mjs";
+/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
+import { g as getUserId } from "../types-DXYX7dIR.mjs";
+import { t as defineResource } from "../defineResource-XFPPUu2c.mjs";
+import { t as defineModule } from "../module-Br81am6m.mjs";
 import { createPurgeEvidence } from "@classytic/primitives/retention";
 import { canonicalJson, sha256Hex } from "@classytic/primitives/canonical";
 //#region src/cleanup/errors.ts
@@ -562,7 +563,7 @@ function createCleanupService(deps) {
 		...DEFAULT_CLEANUP_LIMITS,
 		...deps.limits
 	};
-	const leaseMs = deps.leaseMs ?? 300 * 1e3;
+	const leaseMs = deps.leaseMs ?? 3e5;
 	const progressThrottleMs = deps.progressThrottleMs ?? 0;
 	const jobQueue = deps.jobQueue ?? { enqueue: async (job) => {
 		queueMicrotask(() => {
@@ -1139,24 +1140,40 @@ const actionBodySchema = {
 		}
 	}
 };
-/**
-* Build the Data Cleanup Center Arc module. The module's public export is the
-* live {@link CleanupService} (so other modules / tests can drive it directly).
-*/
+async function resolve(input) {
+	return typeof input === "function" ? await input() : input;
+}
 function createDataCleanupModule(deps) {
-	const registry = createCleanupRegistry(deps.recipes);
-	const service = createCleanupService({
-		registry,
-		runStore: deps.runStore,
-		evidenceStore: deps.evidenceStore,
-		writeFence: deps.writeFence,
-		jobQueue: deps.jobQueue,
-		limits: deps.limits,
-		leaseMs: deps.leaseMs,
-		progressThrottleMs: deps.progressThrottleMs,
-		generateId: deps.generateId,
-		now: deps.now
-	});
+	/**
+	* Built on FIRST READ, which is `bootstrap` — never in this factory body.
+	*
+	* Memoized, so the recipe thunk runs exactly once and the id-uniqueness check
+	* still happens at boot (arc calls bootstrap during startup); it simply happens
+	* inside arc's lifecycle rather than ahead of it.
+	*/
+	let cachedRegistry;
+	const registry = async () => {
+		cachedRegistry ??= createCleanupRegistry(typeof deps.recipes === "function" ? await deps.recipes() : deps.recipes);
+		return cachedRegistry;
+	};
+	if (typeof deps.recipes !== "function") cachedRegistry = createCleanupRegistry(deps.recipes);
+	let cached;
+	const service = async () => {
+		if (cached) return cached;
+		cached = createCleanupService({
+			registry: await registry(),
+			runStore: await resolve(deps.runStore),
+			evidenceStore: await resolve(deps.evidenceStore),
+			writeFence: await resolve(deps.writeFence),
+			jobQueue: await resolve(deps.jobQueue),
+			limits: deps.limits,
+			leaseMs: deps.leaseMs,
+			progressThrottleMs: deps.progressThrottleMs,
+			generateId: deps.generateId,
+			now: deps.now
+		});
+		return cached;
+	};
 	const prefix = deps.prefix ?? "/governance/data-cleanup";
 	const resolveActor = deps.resolveActor ?? defaultResolveActor;
 	const resolveAmbient = deps.resolveAmbient;
@@ -1175,9 +1192,8 @@ function createDataCleanupModule(deps) {
 				path: "/recipes",
 				summary: "List available cleanup recipes",
 				permissions: view,
-				raw: true,
-				handler: async (_req, reply) => {
-					return reply.send({ recipes: registry.introspect() });
+				rawHandler: async (_req, reply) => {
+					return reply.send({ recipes: (await registry()).introspect() });
 				}
 			},
 			{
@@ -1185,12 +1201,11 @@ function createDataCleanupModule(deps) {
 				path: "/preview",
 				summary: "Preview a cleanup plan (no mutation)",
 				permissions: view,
-				raw: true,
 				schema: { body: previewBodySchema },
-				handler: async (req, reply) => {
+				rawHandler: async (req, reply) => {
 					const r = req;
 					const body = req.body;
-					const plan = await service.preview({
+					const plan = await (await service()).preview({
 						recipeId: body.recipe,
 						parameters: body.parameters,
 						actor: resolveActor(r),
@@ -1204,12 +1219,11 @@ function createDataCleanupModule(deps) {
 				path: "/runs",
 				summary: "Execute a confirmed cleanup plan",
 				permissions: execute,
-				raw: true,
 				schema: { body: runsBodySchema },
-				handler: async (req, reply) => {
+				rawHandler: async (req, reply) => {
 					const r = req;
 					const body = req.body;
-					const run = await service.execute({
+					const run = await (await service()).execute({
 						recipeId: body.recipe,
 						parameters: body.parameters,
 						planDigest: body.planDigest,
@@ -1226,11 +1240,10 @@ function createDataCleanupModule(deps) {
 				path: "/runs/:id",
 				summary: "Observe a cleanup run",
 				permissions: view,
-				raw: true,
 				schema: { params: runIdParamsSchema },
-				handler: async (req, reply) => {
+				rawHandler: async (req, reply) => {
 					const { id } = req.params;
-					return reply.send(await service.getRun(id));
+					return reply.send(await (await service()).getRun(id));
 				}
 			},
 			{
@@ -1238,20 +1251,19 @@ function createDataCleanupModule(deps) {
 				path: "/runs/:id/action",
 				summary: "Cancel or retry a cleanup run",
 				permissions: manage,
-				raw: true,
 				schema: {
 					params: runIdParamsSchema,
 					body: actionBodySchema
 				},
-				handler: async (req, reply) => {
+				rawHandler: async (req, reply) => {
 					const actionActor = resolveActor(req);
 					const { id } = req.params;
 					const { action, reason } = req.body;
-					if (action === "cancel") return reply.send(await service.cancel(id, {
+					if (action === "cancel") return reply.send(await (await service()).cancel(id, {
 						actor: actionActor,
 						reason
 					}));
-					return reply.send(await service.retry(id));
+					return reply.send(await (await service()).retry(id));
 				}
 			}
 		]
@@ -1259,7 +1271,7 @@ function createDataCleanupModule(deps) {
 	return defineModule({
 		name: deps.moduleName ?? "data-cleanup",
 		...deps.owns ? { owns: deps.owns } : {},
-		bootstrap: () => service,
+		bootstrap: () => service(),
 		resources: () => [resource]
 	});
 }

package/dist/cli/commands/describe.d.mts

@@ -1,4 +1,5 @@
-import { Nt as RateLimitConfig, V as ResourceDefinition, et as RouteSchemaOptions } from "../../index-Q5gzEIWY.mjs";
+
+import { Nt as RateLimitConfig, V as ResourceDefinition, et as RouteSchemaOptions } from "../../index-CpzxqePp.mjs";
 //#region src/cli/commands/describe.d.ts
 interface DescribedResource {
   name: string;

package/dist/cli/commands/describe.mjs

@@ -1,5 +1,6 @@
-import { t as CRUD_OPERATIONS } from "../../constants-DNre0wRg.mjs";
-import { n as stringifyMeasureMap } from "../../ResourceRegistry-y9Hnypus.mjs";
+/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
+import { t as CRUD_OPERATIONS } from "../../constants-J99LGTJI.mjs";
+import { n as stringifyMeasureMap } from "../../ResourceRegistry-BVr7PgA0.mjs";
 import { resolve } from "node:path";
 import { pathToFileURL } from "node:url";
 //#region src/cli/commands/describe.ts
@@ -77,9 +78,7 @@ function describePipeline(pipe) {
 			case "transform":
 				transforms.push(desc);
 				break;
-			case "interceptor":
-				interceptors.push(desc);
-				break;
+			case "interceptor": interceptors.push(desc);
 		}
 	}
 	return {

package/dist/cli/commands/docs.d.mts

@@ -1,3 +1,4 @@
+
 //#region src/cli/commands/docs.d.ts
 /**
  * Arc CLI - Docs Command

package/dist/cli/commands/docs.mjs

@@ -1,5 +1,6 @@
-import { t as buildOpenApiSpec } from "../../openapi-B8Vkbxbn.mjs";
-import { t as loadResourcesFromEntry } from "../../loadResourcesFromEntry-kvGT6EcO.mjs";
+/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
+import { t as buildOpenApiSpec } from "../../openapi-DIRzvxC0.mjs";
+import { t as loadResourcesFromEntry } from "../../loadResourcesFromEntry-D1MJp13f.mjs";
 import { dirname, resolve } from "node:path";
 import { mkdirSync, writeFileSync } from "node:fs";
 //#region src/cli/commands/docs.ts

package/dist/cli/commands/doctor.d.mts

@@ -1,3 +1,4 @@
+
 //#region src/cli/commands/doctor.d.ts
 /**
  * Arc CLI - Doctor Command

package/dist/cli/commands/doctor.mjs

@@ -1,3 +1,4 @@
+/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
 import { dirname, join, parse, resolve } from "node:path";
 import { existsSync, readFileSync } from "node:fs";
 //#region src/cli/commands/doctor.ts

package/dist/cli/commands/generate.d.mts

@@ -1,2 +1,3 @@
-import { n as generate, t as ArcProjectConfig } from "../../generate-BnsL9GBm.mjs";
+
+import { n as generate, t as ArcProjectConfig } from "../../generate-DCGuEbqI.mjs";
 export { type ArcProjectConfig, generate };

package/dist/cli/commands/generate.mjs

@@ -1,2 +1,3 @@
-import { t as generate } from "../../generate-D0wZupBg.mjs";
+/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
+import { t as generate } from "../../generate-CRSG0jTv.mjs";
 export { generate };

package/dist/cli/commands/init.d.mts

@@ -1,2 +1,3 @@
-import { a as ProjectConfig, i as PackageManager, n as DependencyManifest, r as InitOptions, t as init } from "../../init-BPEu8cs-.mjs";
+
+import { a as ProjectConfig, i as PackageManager, n as DependencyManifest, r as InitOptions, t as init } from "../../init-Cscs4lab.mjs";
 export { type DependencyManifest, type InitOptions, type PackageManager, type ProjectConfig, init };

package/dist/cli/commands/init.mjs

@@ -1,2 +1,3 @@
-import { t as init } from "../../init-tlRSt667.mjs";
+/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
+import { t as init } from "../../init-BbfP8aky.mjs";
 export { init };

package/dist/cli/commands/introspect.d.mts

@@ -1,3 +1,4 @@
+
 //#region src/cli/commands/introspect.d.ts
 /**
  * Arc CLI - Introspect Command

package/dist/cli/commands/introspect.mjs

@@ -1,4 +1,5 @@
-import { t as loadResourcesFromEntry } from "../../loadResourcesFromEntry-kvGT6EcO.mjs";
+/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
+import { t as loadResourcesFromEntry } from "../../loadResourcesFromEntry-D1MJp13f.mjs";
 //#region src/cli/commands/introspect.ts
 function describePermission(value) {
 	if (!value) return "none";

package/dist/cli/index.d.mts

@@ -1,7 +1,8 @@
+
 import { describe } from "./commands/describe.mjs";
 import { exportDocs } from "./commands/docs.mjs";
 import { doctor } from "./commands/doctor.mjs";
-import { n as generate } from "../generate-BnsL9GBm.mjs";
-import { t as init } from "../init-BPEu8cs-.mjs";
+import { n as generate } from "../generate-DCGuEbqI.mjs";
+import { t as init } from "../init-Cscs4lab.mjs";
 import { introspect } from "./commands/introspect.mjs";
 export { describe, doctor, exportDocs, generate, init, introspect };

package/dist/cli/index.mjs

@@ -1,7 +1,8 @@
+/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
 import { describe } from "./commands/describe.mjs";
 import { exportDocs } from "./commands/docs.mjs";
 import { doctor } from "./commands/doctor.mjs";
-import { t as generate } from "../generate-D0wZupBg.mjs";
-import { t as init } from "../init-tlRSt667.mjs";
+import { t as generate } from "../generate-CRSG0jTv.mjs";
+import { t as init } from "../init-BbfP8aky.mjs";
 import { introspect } from "./commands/introspect.mjs";
 export { describe, doctor, exportDocs, generate, init, introspect };

package/dist/{constants-DNre0wRg.mjs → constants-J99LGTJI.mjs}

@@ -1,3 +1,4 @@
+/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
 //#region src/constants.ts
 /**
 * Arc Framework Constants — Single Source of Truth

package/dist/context/index.d.mts

@@ -1,3 +1,4 @@
+
 import { AsyncLocalStorage } from "node:async_hooks";
 //#region src/context/requestContext.d.ts
 /**

package/dist/context/index.mjs

@@ -1,3 +1,4 @@
-import { n as requestContext, t as getTraceHeaders } from "../requestContext-MrlJwECf.mjs";
-import { t as transactionContext } from "../transactionContext-PNdoyLLm.mjs";
+/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
+import { n as requestContext, t as getTraceHeaders } from "../requestContext-B6vQF-sy.mjs";
+import { t as transactionContext } from "../transactionContext-BvLKvOIL.mjs";
 export { getTraceHeaders, requestContext, transactionContext };

package/dist/core/index.d.mts

@@ -1,3 +1,4 @@
-import { $t as SlugExt, An as ControllerConfigurableOptions, B as defineResource, Jt as BaseController, Mn as ListResult, Nn as BodySanitizer, Pn as BodySanitizerConfig, Qt as TreeMixin, V as ResourceDefinition, Xt as SoftDeleteMixin, Yt as SoftDeleteExt, Zt as TreeExt, an as QueryResolverConfig, ct as AggMeasureShorthand, dt as AggregationDateRangeRequirement, en as SlugMixin, ft as AggregationIndexHint, gt as AggregationsMap, ht as AggregationRateLimit, in as QueryResolver, jn as ControllerConstructionOptions, kn as BaseControllerOptions, lt as AggregationCacheConfig, mt as AggregationMaterializedResult, nn as BulkMixin, on as AccessControl, pt as AggregationMaterializedContext, rn as BaseCrudController, sn as AccessControlConfig, st as AggMeasureInput, tn as BulkExt, ut as AggregationConfig } from "../index-Q5gzEIWY.mjs";
-import { A as DEFAULT_ID_FIELD, B as MAX_FILTER_DEPTH, C as DefineActionConfig, D as defineAggregation, E as createPermissionMiddleware, F as DEFAULT_UPDATE_METHOD, G as RESERVED_QUERY_PARAMS, H as MAX_SEARCH_LENGTH, I as HOOK_OPERATIONS, K as SYSTEM_FIELDS, L as HOOK_PHASES, M as DEFAULT_MAX_LIMIT, N as DEFAULT_SORT, O as CRUD_OPERATIONS, P as DEFAULT_TENANT_FIELD, R as HookOperation, S as mergeResourceConfig, T as createCrudRouter, U as MUTATION_OPERATIONS, V as MAX_REGEX_LENGTH, W as MutationOperation, _ as getEntityQuery, a as formatValidationErrors, b as ResourceSeams, c as isFieldReadable, d as createRequestContext, f as getControllerContext, g as getEntityIdField, h as getEntityId, i as assertValidConfig, j as DEFAULT_LIMIT, k as CrudOperation, l as createCrudHandlers, m as sendControllerResponse, n as ValidateOptions, o as validateResourceConfig, p as getControllerScope, r as ValidationResult, s as collectReadBlockedFields, t as ConfigError, u as createFastifyHandler, v as defineResourceVariants, w as defineAction, x as SeamedResourceConfig, y as AdapterLike, z as HookPhase } from "../index-Cx7bro4R.mjs";
+
+import { $t as TreeMixin, An as BaseControllerOptions, B as defineResource, Fn as BodySanitizerConfig, Mn as ControllerConstructionOptions, Nn as ListResult, Pn as BodySanitizer, Qt as TreeExt, V as ResourceDefinition, Xt as SoftDeleteExt, Yt as BaseController, Zt as SoftDeleteMixin, an as QueryResolver, cn as AccessControlConfig, ct as AggMeasureShorthand, dt as AggregationDateRangeRequirement, en as SlugExt, ft as AggregationIndexHint, gt as AggregationsMap, ht as AggregationRateLimit, in as BaseCrudController, jn as ControllerConfigurableOptions, lt as AggregationCacheConfig, mt as AggregationMaterializedResult, nn as BulkExt, on as QueryResolverConfig, pt as AggregationMaterializedContext, rn as BulkMixin, sn as AccessControl, st as AggMeasureInput, tn as SlugMixin, ut as AggregationConfig } from "../index-CpzxqePp.mjs";
+import { A as DEFAULT_ID_FIELD, B as MAX_FILTER_DEPTH, C as DefineActionConfig, D as defineAggregation, E as createPermissionMiddleware, F as DEFAULT_UPDATE_METHOD, G as RESERVED_QUERY_PARAMS, H as MAX_SEARCH_LENGTH, I as HOOK_OPERATIONS, K as SYSTEM_FIELDS, L as HOOK_PHASES, M as DEFAULT_MAX_LIMIT, N as DEFAULT_SORT, O as CRUD_OPERATIONS, P as DEFAULT_TENANT_FIELD, R as HookOperation, S as mergeResourceConfig, T as createCrudRouter, U as MUTATION_OPERATIONS, V as MAX_REGEX_LENGTH, W as MutationOperation, _ as getEntityQuery, a as formatValidationErrors, b as ResourceSeams, c as isFieldReadable, d as createRequestContext, f as getControllerContext, g as getEntityIdField, h as getEntityId, i as assertValidConfig, j as DEFAULT_LIMIT, k as CrudOperation, l as createCrudHandlers, m as sendControllerResponse, n as ValidateOptions, o as validateResourceConfig, p as getControllerScope, r as ValidationResult, s as collectReadBlockedFields, t as ConfigError, u as createFastifyHandler, v as defineResourceVariants, w as defineAction, x as SeamedResourceConfig, y as AdapterLike, z as HookPhase } from "../index-DXlHwvuE.mjs";
 export { AccessControl, type AccessControlConfig, type AdapterLike, type AggMeasureInput, type AggMeasureShorthand, type AggregationCacheConfig, type AggregationConfig, type AggregationDateRangeRequirement, type AggregationIndexHint, type AggregationMaterializedContext, type AggregationMaterializedResult, type AggregationRateLimit, type AggregationsMap, BaseController, type BaseControllerOptions, BaseCrudController, BodySanitizer, type BodySanitizerConfig, type BulkExt, BulkMixin, CRUD_OPERATIONS, type ConfigError, type ControllerConfigurableOptions, type ControllerConstructionOptions, CrudOperation, DEFAULT_ID_FIELD, DEFAULT_LIMIT, DEFAULT_MAX_LIMIT, DEFAULT_SORT, DEFAULT_TENANT_FIELD, DEFAULT_UPDATE_METHOD, type DefineActionConfig, HOOK_OPERATIONS, HOOK_PHASES, HookOperation, HookPhase, type ListResult, MAX_FILTER_DEPTH, MAX_REGEX_LENGTH, MAX_SEARCH_LENGTH, MUTATION_OPERATIONS, MutationOperation, QueryResolver, type QueryResolverConfig, RESERVED_QUERY_PARAMS, ResourceDefinition, type ResourceSeams, SYSTEM_FIELDS, type SeamedResourceConfig, type SlugExt, SlugMixin, type SoftDeleteExt, SoftDeleteMixin, type TreeExt, TreeMixin, type ValidateOptions, type ValidationResult, assertValidConfig, collectReadBlockedFields, createCrudHandlers, createCrudRouter, createFastifyHandler, createPermissionMiddleware, createRequestContext, defineAction, defineAggregation, defineResource, defineResourceVariants, formatValidationErrors, getControllerContext, getControllerScope, getEntityId, getEntityIdField, getEntityQuery, isFieldReadable, mergeResourceConfig, sendControllerResponse, validateResourceConfig };

package/dist/core/index.mjs

@@ -1,7 +1,8 @@
-import { a as DEFAULT_SORT, c as HOOK_OPERATIONS, d as MAX_REGEX_LENGTH, f as MAX_SEARCH_LENGTH, h as SYSTEM_FIELDS, i as DEFAULT_MAX_LIMIT, l as HOOK_PHASES, m as RESERVED_QUERY_PARAMS, n as DEFAULT_ID_FIELD, o as DEFAULT_TENANT_FIELD, p as MUTATION_OPERATIONS, r as DEFAULT_LIMIT, s as DEFAULT_UPDATE_METHOD, t as CRUD_OPERATIONS, u as MAX_FILTER_DEPTH } from "../constants-DNre0wRg.mjs";
-import { a as BulkMixin, c as collectReadBlockedFields, f as AccessControl, i as SlugMixin, l as isFieldReadable, n as TreeMixin, o as BaseCrudController, r as SoftDeleteMixin, s as QueryResolver, t as BaseController, u as BodySanitizer } from "../BaseController-B5DwufbB.mjs";
-import { a as ResourceDefinition, i as validateResourceConfig, n as assertValidConfig, o as createCrudRouter, r as formatValidationErrors, s as createPermissionMiddleware, t as defineResource } from "../defineResource-CxWqDCAy.mjs";
-import { a as createFastifyHandler, c as getControllerScope, i as createCrudHandlers, l as sendControllerResponse, o as createRequestContext, s as getControllerContext } from "../pipeline-BJnpkY9i.mjs";
-import { t as defineAggregation } from "../defineAggregation-ufWjUwml.mjs";
-import { a as mergeResourceConfig, i as defineResourceVariants, n as getEntityIdField, o as defineAction, r as getEntityQuery, t as getEntityId } from "../core-poalJLvp.mjs";
+/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
+import { a as DEFAULT_SORT, c as HOOK_OPERATIONS, d as MAX_REGEX_LENGTH, f as MAX_SEARCH_LENGTH, h as SYSTEM_FIELDS, i as DEFAULT_MAX_LIMIT, l as HOOK_PHASES, m as RESERVED_QUERY_PARAMS, n as DEFAULT_ID_FIELD, o as DEFAULT_TENANT_FIELD, p as MUTATION_OPERATIONS, r as DEFAULT_LIMIT, s as DEFAULT_UPDATE_METHOD, t as CRUD_OPERATIONS, u as MAX_FILTER_DEPTH } from "../constants-J99LGTJI.mjs";
+import { a as BulkMixin, c as collectReadBlockedFields, f as AccessControl, i as SlugMixin, l as isFieldReadable, n as TreeMixin, o as BaseCrudController, r as SoftDeleteMixin, s as QueryResolver, t as BaseController, u as BodySanitizer } from "../BaseController-Dk34dxhI.mjs";
+import { a as ResourceDefinition, i as validateResourceConfig, n as assertValidConfig, o as createCrudRouter, r as formatValidationErrors, s as createPermissionMiddleware, t as defineResource } from "../defineResource-XFPPUu2c.mjs";
+import { a as createFastifyHandler, c as getControllerScope, i as createCrudHandlers, l as sendControllerResponse, o as createRequestContext, s as getControllerContext } from "../pipeline-CPA-jx0M.mjs";
+import { t as defineAggregation } from "../defineAggregation-gX4No1gt.mjs";
+import { a as mergeResourceConfig, i as defineResourceVariants, n as getEntityIdField, o as defineAction, r as getEntityQuery, t as getEntityId } from "../core-BwwmNSp7.mjs";
 export { AccessControl, BaseController, BaseCrudController, BodySanitizer, BulkMixin, CRUD_OPERATIONS, DEFAULT_ID_FIELD, DEFAULT_LIMIT, DEFAULT_MAX_LIMIT, DEFAULT_SORT, DEFAULT_TENANT_FIELD, DEFAULT_UPDATE_METHOD, HOOK_OPERATIONS, HOOK_PHASES, MAX_FILTER_DEPTH, MAX_REGEX_LENGTH, MAX_SEARCH_LENGTH, MUTATION_OPERATIONS, QueryResolver, RESERVED_QUERY_PARAMS, ResourceDefinition, SYSTEM_FIELDS, SlugMixin, SoftDeleteMixin, TreeMixin, assertValidConfig, collectReadBlockedFields, createCrudHandlers, createCrudRouter, createFastifyHandler, createPermissionMiddleware, createRequestContext, defineAction, defineAggregation, defineResource, defineResourceVariants, formatValidationErrors, getControllerContext, getControllerScope, getEntityId, getEntityIdField, getEntityQuery, isFieldReadable, mergeResourceConfig, sendControllerResponse, validateResourceConfig };

package/dist/{core-poalJLvp.mjs → core-BwwmNSp7.mjs}

@@ -1,5 +1,6 @@
-import "./constants-DNre0wRg.mjs";
-import { t as defineResource } from "./defineResource-CxWqDCAy.mjs";
+/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
+import "./constants-J99LGTJI.mjs";
+import { t as defineResource } from "./defineResource-XFPPUu2c.mjs";
 //#region src/core/defineAction.ts
 /**
 * Build an `ActionDefinition` with a typed handler. The literal schema

package/dist/{createActionRouter-BxuywVRB.mjs → createActionRouter-DkJZWo0m.mjs}

@@ -1,10 +1,11 @@
-import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.mjs";
-import "./constants-DNre0wRg.mjs";
-import { f as createError } from "./errors-DkO8Nk6-.mjs";
-import { a as buildRouteHooks, i as selectPluginMw, l as buildAuthMiddlewareForPermissions, n as buildRouteConfig, r as resolveRouterPluginMw, s as routeHookOptions, t as buildRateLimitConfig, u as buildArcDecorator } from "./rateLimit-DrED-C4v.mjs";
-import { n as buildActionPermissionMw, t as tryRegisterRoute } from "./registerRoute-JkxIEBJq.mjs";
-import { l as sendControllerResponse, r as resolvePipelineSteps, t as buildActionPipelineHandler } from "./pipeline-BJnpkY9i.mjs";
-import { n as schemaIRToJsonSchemaBranch, t as normalizeSchemaIR } from "./schemaIR-Ca7ySNPx.mjs";
+/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
+import { t as __exportAll } from "./rolldown-runtime-BhflRrBs.mjs";
+import "./constants-J99LGTJI.mjs";
+import { f as createError } from "./errors-Bh1KK5ps.mjs";
+import { a as buildRouteHooks, i as selectPluginMw, l as buildAuthMiddlewareForPermissions, n as buildRouteConfig, r as resolveRouterPluginMw, s as routeHookOptions, t as buildRateLimitConfig, u as buildArcDecorator } from "./rateLimit-C7mmAGs3.mjs";
+import { n as buildActionPermissionMw, t as tryRegisterRoute } from "./registerRoute-B_QrjYZS.mjs";
+import { l as sendControllerResponse, r as resolvePipelineSteps, t as buildActionPipelineHandler } from "./pipeline-CPA-jx0M.mjs";
+import { n as schemaIRToJsonSchemaBranch, t as normalizeSchemaIR } from "./schemaIR-CnyKK_1j.mjs";
 //#region src/core/createActionRouter.ts
 var createActionRouter_exports = /* @__PURE__ */ __exportAll({
 	buildActionBodySchema: () => buildActionBodySchema,
@@ -57,7 +58,8 @@ function createActionRouter(fastify, config) {
 		const { urlPath, actionSubset, hasId } = mountOpts;
 		if (actionSubset.length === 0) return;
 		const subsetSet = new Set(actionSubset);
-		const authMw = buildAuthMiddlewareForPermissions(fastify, actionSubset.map((name) => actionPermissions[name] ?? globalAuth));
+		const perActionPermissions = actionSubset.map((name) => actionPermissions[name] ?? globalAuth);
+		const authMw = buildAuthMiddlewareForPermissions(fastify, perActionPermissions);
 		const subsetPermissions = {};
 		for (const name of actionSubset) {
 			const perm = actionPermissions[name];
@@ -89,7 +91,8 @@ function createActionRouter(fastify, config) {
 			if (!submitted || !subsetSet.has(submitted)) {
 				const wrongMount = submitted && allActionNames.includes(submitted) ? submitted : void 0;
 				const otherMount = hasId ? "/action" : "/:id/action";
-				throw createError(400, wrongMount ? `Action '${wrongMount}' on '${resourceName}' is mounted at 'POST ${otherMount}', not 'POST ${urlPath}'` : submitted ? `Unknown action '${submitted}' on '${resourceName}'. Valid at 'POST ${urlPath}': ${actionSubset.join(", ")}` : `Missing 'action' field on '${resourceName}'. Valid at 'POST ${urlPath}': ${actionSubset.join(", ")}`, {
+				const message = wrongMount ? `Action '${wrongMount}' on '${resourceName}' is mounted at 'POST ${otherMount}', not 'POST ${urlPath}'` : submitted ? `Unknown action '${submitted}' on '${resourceName}'. Valid at 'POST ${urlPath}': ${actionSubset.join(", ")}` : `Missing 'action' field on '${resourceName}'. Valid at 'POST ${urlPath}': ${actionSubset.join(", ")}`;
+				throw createError(400, message, {
 					code: "arc.invalid_action",
 					validActions: actionSubset,
 					mount: urlPath,
@@ -140,7 +143,8 @@ function createActionRouter(fastify, config) {
 				const handler = wrappedHandlers.get(action);
 				if (!handler) throw createError(400, `Invalid action '${action}'. Valid actions: ${actionSubset.join(", ")}`, { validActions: actionSubset });
 				try {
-					sendControllerResponse(reply, await handler(id, data, req), req);
+					const response = await handler(id, data, req);
+					sendControllerResponse(reply, response, req);
 					return reply;
 				} catch (error) {
 					if (onError) {

package/dist/{createAggregationRouter-BiY-lGdY.mjs → createAggregationRouter-B1exOVD8.mjs}

@@ -1,9 +1,10 @@
-import { f as createError } from "./errors-DkO8Nk6-.mjs";
-import { u as getRequestScope } from "./types-CSyCxl2V.mjs";
-import { r as evaluateAndApplyPermission } from "./applyPermissionResult-Cf6zUCvb.mjs";
-import { a as buildRouteHooks, c as buildAuthMiddleware, i as selectPluginMw, r as resolveRouterPluginMw, s as routeHookOptions, t as buildRateLimitConfig, u as buildArcDecorator } from "./rateLimit-DrED-C4v.mjs";
-import { n as validateAggregations } from "./validate-Bk44F2yT.mjs";
-import { t as buildAggregationHandler } from "./buildHandler-BYS3Vkfz.mjs";
+/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
+import { n as evaluateAndApplyPermission } from "./authorizationDecision-__T3EJDA.mjs";
+import { f as createError } from "./errors-Bh1KK5ps.mjs";
+import { u as getRequestScope } from "./types-DXYX7dIR.mjs";
+import { a as buildRouteHooks, c as buildAuthMiddleware, i as selectPluginMw, r as resolveRouterPluginMw, s as routeHookOptions, t as buildRateLimitConfig, u as buildArcDecorator } from "./rateLimit-C7mmAGs3.mjs";
+import { n as validateAggregations } from "./validate-PMCPR9El.mjs";
+import { t as buildAggregationHandler } from "./buildHandler-Dn7rzUJo.mjs";
 //#region src/core/aggregation/createAggregationRouter.ts
 /**
 * Register one Fastify route per aggregation. No-op when the map is
@@ -44,11 +45,13 @@ function registerOne(fastify, normalized, ctx) {
 		const ctx = buildPermissionContextLite(req, normalized.name);
 		await evaluateAndApplyPermission(permissionFn, ctx, req, reply, { defaultDenialMessage: (user) => user ? "You do not have permission to access this aggregation." : "Authentication required to access this aggregation." });
 	};
+	const pluginMwAll = resolveRouterPluginMw(fastify, false);
+	const pluginMw = selectPluginMw("GET", pluginMwAll);
 	const hooks = buildRouteHooks({
 		arcDecorator,
 		authMw,
 		permissionMw,
-		pluginMw: selectPluginMw("GET", resolveRouterPluginMw(fastify, false)),
+		pluginMw,
 		routeGuards,
 		customMws: middlewares
 	});