@classytic/arc 2.31.0 → 2.33.0

package/dist/{createActionRouter-CDXEdasl.mjs → createActionRouter-DVpoA0do.mjs}

@@ -1,11 +1,11 @@
-/*! @classytic/arc v2.31.0 | MIT | https://classytic.com */
-import { t as __exportAll } from "./rolldown-runtime-CUsjNX9R.mjs";
-import "./constants-D3Dv4LAV.mjs";
-import { f as createError } from "./errors-Cj42AntO.mjs";
-import { a as buildRouteHooks, i as selectPluginMw, l as buildAuthMiddlewareForPermissions, n as buildRouteConfig, r as resolveRouterPluginMw, s as routeHookOptions, t as buildRateLimitConfig, u as buildArcDecorator } from "./rateLimit-CMPY5Qms.mjs";
-import { n as buildActionPermissionMw, t as tryRegisterRoute } from "./registerRoute-CBN84fc7.mjs";
-import { l as sendControllerResponse, r as resolvePipelineSteps, t as buildActionPipelineHandler } from "./pipeline-UPQFatit.mjs";
-import { n as schemaIRToJsonSchemaBranch, t as normalizeSchemaIR } from "./schemaIR-Bm2enbnh.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { t as __exportAll } from "./rolldown-runtime-DNg-KNCk.mjs";
+import "./constants-BxCoxmiN.mjs";
+import { f as createError } from "./errors-Cd_yy7aW.mjs";
+import { a as buildRouteHooks, i as selectPluginMw, l as buildAuthMiddlewareForPermissions, n as buildRouteConfig, r as resolveRouterPluginMw, s as routeHookOptions, t as buildRateLimitConfig, u as buildArcDecorator } from "./rateLimit-D4-ASwsI.mjs";
+import { n as buildActionPermissionMw, t as tryRegisterRoute } from "./registerRoute-DNnd3vkz.mjs";
+import { l as sendControllerResponse, r as resolvePipelineSteps, t as buildActionPipelineHandler } from "./pipeline-q69DZzgG.mjs";
+import { n as schemaIRToJsonSchemaBranch, t as normalizeSchemaIR } from "./schemaIR-CDvclAew.mjs";
 //#region src/core/createActionRouter.ts
 var createActionRouter_exports = /* @__PURE__ */ __exportAll({
 	buildActionBodySchema: () => buildActionBodySchema,
@@ -58,7 +58,8 @@ function createActionRouter(fastify, config) {
 		const { urlPath, actionSubset, hasId } = mountOpts;
 		if (actionSubset.length === 0) return;
 		const subsetSet = new Set(actionSubset);
-		const authMw = buildAuthMiddlewareForPermissions(fastify, actionSubset.map((name) => actionPermissions[name] ?? globalAuth));
+		const perActionPermissions = actionSubset.map((name) => actionPermissions[name] ?? globalAuth);
+		const authMw = buildAuthMiddlewareForPermissions(fastify, perActionPermissions);
 		const subsetPermissions = {};
 		for (const name of actionSubset) {
 			const perm = actionPermissions[name];
@@ -90,7 +91,8 @@ function createActionRouter(fastify, config) {
 			if (!submitted || !subsetSet.has(submitted)) {
 				const wrongMount = submitted && allActionNames.includes(submitted) ? submitted : void 0;
 				const otherMount = hasId ? "/action" : "/:id/action";
-				throw createError(400, wrongMount ? `Action '${wrongMount}' on '${resourceName}' is mounted at 'POST ${otherMount}', not 'POST ${urlPath}'` : submitted ? `Unknown action '${submitted}' on '${resourceName}'. Valid at 'POST ${urlPath}': ${actionSubset.join(", ")}` : `Missing 'action' field on '${resourceName}'. Valid at 'POST ${urlPath}': ${actionSubset.join(", ")}`, {
+				const message = wrongMount ? `Action '${wrongMount}' on '${resourceName}' is mounted at 'POST ${otherMount}', not 'POST ${urlPath}'` : submitted ? `Unknown action '${submitted}' on '${resourceName}'. Valid at 'POST ${urlPath}': ${actionSubset.join(", ")}` : `Missing 'action' field on '${resourceName}'. Valid at 'POST ${urlPath}': ${actionSubset.join(", ")}`;
+				throw createError(400, message, {
 					code: "arc.invalid_action",
 					validActions: actionSubset,
 					mount: urlPath,
@@ -141,7 +143,8 @@ function createActionRouter(fastify, config) {
 				const handler = wrappedHandlers.get(action);
 				if (!handler) throw createError(400, `Invalid action '${action}'. Valid actions: ${actionSubset.join(", ")}`, { validActions: actionSubset });
 				try {
-					sendControllerResponse(reply, await handler(id, data, req), req);
+					const response = await handler(id, data, req);
+					sendControllerResponse(reply, response, req);
 					return reply;
 				} catch (error) {
 					if (onError) {

package/dist/{createAggregationRouter-KrQDzx-k.mjs → createAggregationRouter-B_B48JZ-.mjs}

@@ -1,10 +1,10 @@
-/*! @classytic/arc v2.31.0 | MIT | https://classytic.com */
-import { n as evaluateAndApplyPermission } from "./authorizationDecision-ChvUQGG1.mjs";
-import { f as createError } from "./errors-Cj42AntO.mjs";
-import { u as getRequestScope } from "./types-Cys0ko9Z.mjs";
-import { a as buildRouteHooks, c as buildAuthMiddleware, i as selectPluginMw, r as resolveRouterPluginMw, s as routeHookOptions, t as buildRateLimitConfig, u as buildArcDecorator } from "./rateLimit-CMPY5Qms.mjs";
-import { n as validateAggregations } from "./validate-_KbifpHF.mjs";
-import { t as buildAggregationHandler } from "./buildHandler-CDrCJzmB.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { n as evaluateAndApplyPermission } from "./authorizationDecision-B3mP_QTy.mjs";
+import { f as createError } from "./errors-Cd_yy7aW.mjs";
+import { u as getRequestScope } from "./types-CoqIRrkY.mjs";
+import { a as buildRouteHooks, c as buildAuthMiddleware, i as selectPluginMw, r as resolveRouterPluginMw, s as routeHookOptions, t as buildRateLimitConfig, u as buildArcDecorator } from "./rateLimit-D4-ASwsI.mjs";
+import { n as validateAggregations } from "./validate-CdQlz52F.mjs";
+import { t as buildAggregationHandler } from "./buildHandler-DLE9xX-V.mjs";
 //#region src/core/aggregation/createAggregationRouter.ts
 /**
 * Register one Fastify route per aggregation. No-op when the map is
@@ -45,11 +45,13 @@ function registerOne(fastify, normalized, ctx) {
 		const ctx = buildPermissionContextLite(req, normalized.name);
 		await evaluateAndApplyPermission(permissionFn, ctx, req, reply, { defaultDenialMessage: (user) => user ? "You do not have permission to access this aggregation." : "Authentication required to access this aggregation." });
 	};
+	const pluginMwAll = resolveRouterPluginMw(fastify, false);
+	const pluginMw = selectPluginMw("GET", pluginMwAll);
 	const hooks = buildRouteHooks({
 		arcDecorator,
 		authMw,
 		permissionMw,
-		pluginMw: selectPluginMw("GET", resolveRouterPluginMw(fastify, false)),
+		pluginMw,
 		routeGuards,
 		customMws: middlewares
 	});