@classytic/arc 2.32.0 → 2.34.0

package/dist/cleanup/index.mjs

@@ -1,7 +1,7 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
-import { g as getUserId } from "../types-DXYX7dIR.mjs";
-import { t as defineResource } from "../defineResource-XFPPUu2c.mjs";
-import { t as defineModule } from "../module-Br81am6m.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { g as getUserId } from "../types-CoqIRrkY.mjs";
+import { t as defineResource } from "../defineResource-ZhuLonLm.mjs";
+import { t as defineModule } from "../module-CwKsgZXp.mjs";
 import { createPurgeEvidence } from "@classytic/primitives/retention";
 import { canonicalJson, sha256Hex } from "@classytic/primitives/canonical";
 //#region src/cleanup/errors.ts
@@ -85,6 +85,18 @@ const CleanupErrors = {
 			status
 		});
 	},
+	/**
+	* The operator's exclusion list cannot be honoured as written.
+	*
+	* A 400 rather than a filter: dropping an unrecognised exclusion leaves
+	* someone believing they narrowed a destructive run when they did not, and
+	* dropping a PROTECTIVE one would let a guard be switched off from the same
+	* request that starts the run. `steps` carries the offending ids so a UI can
+	* point at them.
+	*/
+	invalidExclusion(reason, steps) {
+		return new CleanupError("CLEANUP_INVALID_EXCLUSION", 400, reason, { steps: [...steps] });
+	},
 	forbidden(operation) {
 		return new CleanupError("CLEANUP_FORBIDDEN", 403, `Not authorized to ${operation} cleanup.`, { operation });
 	}
@@ -102,6 +114,53 @@ function stepContextOf(ctx, parameters) {
 		logger: ctx.logger
 	};
 }
+/**
+* Resolve the operator's exclusion list against the recipe's real steps.
+*
+* REFUSES rather than filters. Two rejections, both of which a permissive
+* version would turn into a silent lie:
+*
+*   - **unknown id** — a typo, or a step that has since been removed. Dropping
+*     it leaves the operator believing they narrowed a destructive run when the
+*     excluded domain will in fact be purged. A free-text ignore-list that
+*     silently tolerates unknown entries carries exactly this hazard.
+*   - **a protective step** — the property an ignore-list alone cannot give. A
+*     guard deletes nothing; it stands between the run and records that must
+*     never be purged. If it can be switched off from the same screen that
+*     starts the run, it is advice, not a guard. `destructive: false` alone is
+*     not the test — a projection rebuild is also non-destructive and IS
+*     legitimately excludable — so the marker is the step's own
+*     `disposition: 'protect'`.
+*
+* Returns the validated set; throws `CleanupErrors.invalidInput` otherwise.
+*/
+function resolveExclusions(steps, requested) {
+	if (!requested || requested.length === 0) return /* @__PURE__ */ new Set();
+	const byId = new Map(steps.map((s) => [s.id, s]));
+	const unknown = [];
+	const protectedIds = [];
+	for (const id of requested) {
+		const step = byId.get(id);
+		if (!step) {
+			unknown.push(id);
+			continue;
+		}
+		if (isProtective(step)) protectedIds.push(id);
+	}
+	if (unknown.length > 0) throw CleanupErrors.invalidExclusion(`excludeSteps names step(s) this recipe does not have: ${unknown.join(", ")}. Refusing rather than ignoring — a dropped exclusion means the run touches data the operator believed they had left out.`, unknown);
+	if (protectedIds.length > 0) throw CleanupErrors.invalidExclusion(`excludeSteps names protective step(s): ${protectedIds.join(", ")}. A guard deletes nothing; it refuses the run when records that must never be purged are present. It cannot be switched off from the same request that starts the run.`, protectedIds);
+	return new Set(requested);
+}
+/**
+* Is this step a GUARD?
+*
+* Asked of the step's declared disposition rather than `destructive`, because
+* `destructive: false` covers guards AND projection rebuilds — and a rebuild is
+* perfectly reasonable to exclude.
+*/
+function isProtective(step) {
+	return step.disposition === "protect";
+}
 function errMessage(err) {
 	return err instanceof Error ? err.message : String(err);
 }
@@ -131,16 +190,63 @@ function recipeFromSteps(input) {
 		},
 		async plan(cleanupInput, ctx) {
 			const stepCtx = stepContextOf(ctx, cleanupInput.parameters ?? {});
+			const excluded = resolveExclusions(steps, cleanupInput.excludeSteps);
 			const items = [];
 			const blockers = /* @__PURE__ */ new Set();
 			const retains = new Set(input.retains ?? []);
 			const rebuildActions = /* @__PURE__ */ new Set();
 			const warnings = new Set(input.warnings ?? []);
 			for (const step of steps) {
+				/**
+				* An excluded step is NOT estimated.
+				*
+				* Estimating it would run its counting queries for a line the operator
+				* has already taken out — cost with no consequence — and, worse, would
+				* surface its blockers, so leaving a domain out of a run could still be
+				* refused because of that domain. A line the run will not touch must not
+				* be able to stop the run.
+				*/
+				if (excluded.has(step.id)) {
+					items.push({
+						stepId: step.id,
+						resource: step.resource,
+						estimated: 0,
+						excluded: true,
+						retained: "excluded from this run by the operator"
+					});
+					continue;
+				}
 				const est = await step.estimate(stepCtx);
+				/**
+				* Disposition comes from the STEP, not from `step.destructive`.
+				*
+				* (See the exclusion handling above for why `'protect'` also decides
+				* whether a line may be left out of a run.)
+				*
+				* They are close but not the same, and conflating them is how the bug
+				* this fixes arose. `destructive: false` covers BOTH a protective guard
+				* (counts what it defends) and a projection rebuild (counts what it
+				* recomputes) — opposite meanings for the headline. A step that says
+				* nothing means `'remove'`, which is what every purge step is.
+				*/
+				/**
+				* A step may only PROTECT if it said so on the step itself.
+				*
+				* `resolveExclusions` runs before any estimate — it has to, since it
+				* decides which steps to estimate at all — so it can read only
+				* `step.disposition`. A guard that declared `'protect'` from its
+				* ESTIMATE instead was therefore excludable: the plan line came back
+				* marked protective, looked defended, and `excludeSteps: [thatId]`
+				* still switched it off. That is precisely the property this feature
+				* exists to make impossible, so the mismatch is an authoring error
+				* rather than a silent downgrade.
+				*/
+				if (est.disposition === "protect" && step.disposition !== "protect") throw CleanupErrors.invalidExclusion(`step '${step.id}' returned disposition 'protect' from its estimate but does not declare \`disposition: 'protect'\` on the step. Exclusions are resolved before estimates run, so a guard declared only at estimate time can be excluded — switching off the check it exists to enforce. Declare it on the step.`, [step.id]);
 				items.push({
+					stepId: step.id,
 					resource: est.resource,
 					estimated: est.estimated,
+					...(est.disposition ?? step.disposition) !== void 0 ? { disposition: est.disposition ?? step.disposition } : {},
 					...est.retained !== void 0 ? { retained: est.retained } : {},
 					...est.blockers && est.blockers.length > 0 ? { blockers: est.blockers } : {}
 				});
@@ -161,8 +267,44 @@ function recipeFromSteps(input) {
 		async execute(plan, ctx) {
 			const parameters = plan.parameters ?? {};
 			const results = [];
+			/**
+			* Re-resolved from the SEALED plan, never from a fresh caller input.
+			*
+			* The exclusion set is part of the digest the operator confirmed against,
+			* so taking it from the plan is what makes consent binding: an execute
+			* cannot widen the run beyond what was previewed. Re-validating here also
+			* means a step that has since become protective refuses rather than being
+			* quietly dropped.
+			*/
+			const excluded = resolveExclusions(steps, plan.excludeSteps);
+			/**
+			* Lifecycle reporting is OPTIONAL on the context — a host service that
+			* predates it simply gets no per-step view, rather than a crash. Resolved
+			* once so the loop below reads as bookkeeping, not feature detection.
+			*/
+			const reportState = ctx.onStepState?.bind(ctx) ?? (async () => {});
 			for (const step of steps) {
 				await ctx.throwIfCancelled();
+				if (excluded.has(step.id)) {
+					await reportState({
+						stepId: step.id,
+						resource: step.resource,
+						status: "skipped",
+						processed: 0,
+						startedAt: ctx.now,
+						completedAt: ctx.now,
+						detail: "excluded by the operator"
+					});
+					continue;
+				}
+				const startedAt = ctx.now;
+				await reportState({
+					stepId: step.id,
+					resource: step.resource,
+					status: "running",
+					processed: 0,
+					startedAt
+				});
 				let reported = 0;
 				const execCtx = {
 					...stepContextOf(ctx, parameters),
@@ -211,6 +353,25 @@ function recipeFromSteps(input) {
 					...outcome.error !== void 0 ? { error: outcome.error } : {},
 					...outcome.cursor !== void 0 ? { cursor: outcome.cursor } : {}
 				});
+				/**
+				* `skipped` is a REAL outcome, not "completed with zero".
+				*
+				* A step that had nothing in scope and a step that removed 4,000 rows
+				* both end `ok`, and reading a bare 0 as success is how an operator
+				* concludes a phase ran when its scope was simply empty. Three states
+				* alone only CATEGORISE the outcome; the `detail` is what makes it
+				* answerable.
+				*/
+				const isSkip = outcome.ok && outcome.processed === 0;
+				await reportState({
+					stepId: step.id,
+					resource: outcome.resource,
+					status: outcome.ok ? isSkip ? "skipped" : "completed" : "failed",
+					processed: outcome.processed,
+					startedAt,
+					completedAt: ctx.now,
+					...outcome.ok ? isSkip ? { detail: "nothing in scope" } : {} : { detail: outcome.error ?? "step failed" }
+				});
 				if (!outcome.ok) break;
 			}
 			const allOk = results.every((r) => r.ok);
@@ -465,12 +626,15 @@ function planMaterial(plan) {
 		items: plan.items.map((i) => ({
 			resource: i.resource,
 			estimated: i.estimated,
+			disposition: i.disposition ?? "remove",
+			excluded: i.excluded ?? false,
 			retained: i.retained ?? null,
 			blockers: [...i.blockers ?? []].sort()
 		})).sort((a, b) => a.resource < b.resource ? -1 : a.resource > b.resource ? 1 : a.estimated - b.estimated),
 		retains: [...plan.retains].sort(),
 		blockers: [...plan.blockers].sort(),
 		rebuildActions: [...plan.rebuildActions].sort(),
+		excludeSteps: [...plan.excludeSteps].sort(),
 		estimatedTotal: plan.estimatedTotal,
 		confirmationPhrase: plan.confirmationPhrase
 	};
@@ -586,10 +750,22 @@ function createCleanupService(deps) {
 		};
 	}
 	async function seal(recipe, input, ctx) {
-		const draft = await recipe.plan({ parameters: input.parameters }, ctx);
+		const draft = await recipe.plan({
+			parameters: input.parameters,
+			excludeSteps: input.excludeSteps
+		}, ctx);
 		const items = draft.items;
 		if (items.length > limits.maxPlanItems) throw CleanupErrors.planTooLarge(`${items.length} items > maxPlanItems ${limits.maxPlanItems}`);
-		const estimatedTotal = items.reduce((sum, i) => sum + i.estimated, 0);
+		/**
+		* Partition by DISPOSITION — a protective guard's count is not damage.
+		*
+		* This was one `reduce` over every item, so a guard reporting the 173 posted
+		* journal entries it defends pushed the "records to remove" headline to 540
+		* on a plan that removes 367. Absent disposition means `'remove'`, so every
+		* pre-existing recipe is unchanged.
+		*/
+		const estimatedTotal = items.reduce((sum, i) => sum + ((i.disposition ?? "remove") === "remove" ? i.estimated : 0), 0);
+		const protectedTotal = items.reduce((sum, i) => sum + (i.disposition === "protect" ? i.estimated : 0), 0);
 		const blockers = new Set(draft.blockers ?? []);
 		for (const item of items) for (const b of item.blockers ?? []) blockers.add(b);
 		const unsealed = {
@@ -601,6 +777,8 @@ function createCleanupService(deps) {
 			rebuildActions: [...draft.rebuildActions ?? []],
 			warnings: [...draft.warnings ?? []],
 			estimatedTotal,
+			protectedTotal,
+			excludeSteps: [...input.excludeSteps ?? []].sort(),
 			confirmationPhrase: draft.confirmationPhrase ?? recipe.id
 		};
 		return {
@@ -713,6 +891,14 @@ function createCleanupService(deps) {
 		let processed = 0;
 		let steps = 0;
 		let failed = 0;
+		/**
+		* Per-step lifecycle, keyed by `stepId` and ordered by first sight.
+		*
+		* Seeded from the run's existing progress so a RESUMED run (crash recovery,
+		* retry) keeps the states it already recorded instead of presenting an
+		* operator with a blank pipeline for work that demonstrably happened.
+		*/
+		const stepStates = new Map((run.progress?.stepProgress ?? []).map((s) => [s.stepId, s]));
 		let cancelled = false;
 		let lastSummary = run.progress ?? EMPTY_PROGRESS;
 		let lastPersistMs = 0;
@@ -745,6 +931,7 @@ function createCleanupService(deps) {
 					steps,
 					failed,
 					currentResource: step.resource,
+					...stepStates.size > 0 ? { stepProgress: [...stepStates.values()] } : {},
 					...step.cursor !== void 0 ? { lastCursor: step.cursor } : {},
 					heartbeatAt: now()
 				};
@@ -756,6 +943,31 @@ function createCleanupService(deps) {
 					await refreshCancel();
 				}
 			},
+			/**
+			* Upsert one step's lifecycle state, preserving FIRST-SEEN order.
+			*
+			* A `Map` keyed by `stepId` is what keeps this bounded and idempotent: a
+			* step transitioning running → completed updates its entry rather than
+			* appending, so the array length is the step count and never the
+			* transition count. Insertion order is the execution order, which is what
+			* an operator reads down the list.
+			*
+			* Persisted on the NEXT `onStep` (or the terminal write) rather than
+			* immediately — a lifecycle transition is not itself a committed chunk,
+			* and writing on every one would defeat the progress throttle that exists
+			* to keep a long run from hammering the store.
+			*/
+			async onStepState(state) {
+				stepStates.set(state.stepId, state);
+				lastSummary = {
+					...lastSummary ?? {
+						processed,
+						steps,
+						failed
+					},
+					stepProgress: [...stepStates.values()]
+				};
+			},
 			async throwIfCancelled() {
 				if (cancelled || controller.signal.aborted || await refreshCancel()) throw new CleanupCancelled(run.id);
 			}
@@ -1079,13 +1291,31 @@ const parametersSchema = {
 	type: "object",
 	additionalProperties: true
 };
+/**
+* Step ids to leave out. Bounded and unique — an unbounded list on a
+* destructive endpoint is a denial-of-service surface, and a duplicate id says
+* nothing a single one does not. Unknown or PROTECTIVE ids are refused by the
+* recipe (CLEANUP_INVALID_EXCLUSION), not stripped here: the route must not
+* decide what an operator may narrow.
+*/
+const excludeStepsSchema = {
+	type: "array",
+	items: {
+		type: "string",
+		minLength: 1,
+		maxLength: 200
+	},
+	maxItems: 200,
+	uniqueItems: true
+};
 const previewBodySchema = {
 	type: "object",
 	required: ["recipe"],
 	additionalProperties: false,
 	properties: {
 		recipe: recipeIdSchema,
-		parameters: parametersSchema
+		parameters: parametersSchema,
+		excludeSteps: excludeStepsSchema
 	}
 };
 const runsBodySchema = {
@@ -1099,6 +1329,7 @@ const runsBodySchema = {
 	properties: {
 		recipe: recipeIdSchema,
 		parameters: parametersSchema,
+		excludeSteps: excludeStepsSchema,
 		planDigest: {
 			type: "string",
 			minLength: 1,
@@ -1208,6 +1439,7 @@ function createDataCleanupModule(deps) {
 					const plan = await (await service()).preview({
 						recipeId: body.recipe,
 						parameters: body.parameters,
+						excludeSteps: body.excludeSteps,
 						actor: resolveActor(r),
 						ambient: resolveAmbient?.(r)
 					});
@@ -1226,6 +1458,7 @@ function createDataCleanupModule(deps) {
 					const run = await (await service()).execute({
 						recipeId: body.recipe,
 						parameters: body.parameters,
+						excludeSteps: body.excludeSteps,
 						planDigest: body.planDigest,
 						reason: body.reason,
 						confirmation: body.confirmation,

package/dist/cli/commands/describe.d.mts

@@ -1,5 +1,5 @@
 
-import { Nt as RateLimitConfig, V as ResourceDefinition, et as RouteSchemaOptions } from "../../index-CpzxqePp.mjs";
+import { Nt as RateLimitConfig, V as ResourceDefinition, et as RouteSchemaOptions } from "../../index-BcR2bFZQ.mjs";
 //#region src/cli/commands/describe.d.ts
 interface DescribedResource {
   name: string;

package/dist/cli/commands/describe.mjs

@@ -1,6 +1,6 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
-import { t as CRUD_OPERATIONS } from "../../constants-J99LGTJI.mjs";
-import { n as stringifyMeasureMap } from "../../ResourceRegistry-BVr7PgA0.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { t as CRUD_OPERATIONS } from "../../constants-BxCoxmiN.mjs";
+import { n as stringifyMeasureMap } from "../../ResourceRegistry-DoALUlOO.mjs";
 import { resolve } from "node:path";
 import { pathToFileURL } from "node:url";
 //#region src/cli/commands/describe.ts

package/dist/cli/commands/docs.mjs

@@ -1,6 +1,6 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
-import { t as buildOpenApiSpec } from "../../openapi-DIRzvxC0.mjs";
-import { t as loadResourcesFromEntry } from "../../loadResourcesFromEntry-D1MJp13f.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { t as buildOpenApiSpec } from "../../openapi-CkV5mQ53.mjs";
+import { t as loadResourcesFromEntry } from "../../loadResourcesFromEntry-DwaxNcE2.mjs";
 import { dirname, resolve } from "node:path";
 import { mkdirSync, writeFileSync } from "node:fs";
 //#region src/cli/commands/docs.ts

package/dist/cli/commands/doctor.mjs

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
 import { dirname, join, parse, resolve } from "node:path";
 import { existsSync, readFileSync } from "node:fs";
 //#region src/cli/commands/doctor.ts

package/dist/cli/commands/generate.mjs

@@ -1,3 +1,3 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
-import { t as generate } from "../../generate-CRSG0jTv.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { t as generate } from "../../generate-DiB0nHPR.mjs";
 export { generate };

package/dist/cli/commands/init.mjs

@@ -1,3 +1,3 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
-import { t as init } from "../../init-BbfP8aky.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { t as init } from "../../init-mdJ-v4Xp.mjs";
 export { init };

package/dist/cli/commands/introspect.mjs

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
-import { t as loadResourcesFromEntry } from "../../loadResourcesFromEntry-D1MJp13f.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { t as loadResourcesFromEntry } from "../../loadResourcesFromEntry-DwaxNcE2.mjs";
 //#region src/cli/commands/introspect.ts
 function describePermission(value) {
 	if (!value) return "none";

package/dist/cli/index.mjs

@@ -1,8 +1,8 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
 import { describe } from "./commands/describe.mjs";
 import { exportDocs } from "./commands/docs.mjs";
 import { doctor } from "./commands/doctor.mjs";
-import { t as generate } from "../generate-CRSG0jTv.mjs";
-import { t as init } from "../init-BbfP8aky.mjs";
+import { t as generate } from "../generate-DiB0nHPR.mjs";
+import { t as init } from "../init-mdJ-v4Xp.mjs";
 import { introspect } from "./commands/introspect.mjs";
 export { describe, doctor, exportDocs, generate, init, introspect };

package/dist/{constants-J99LGTJI.mjs → constants-BxCoxmiN.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
 //#region src/constants.ts
 /**
 * Arc Framework Constants — Single Source of Truth

package/dist/context/index.mjs

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
-import { n as requestContext, t as getTraceHeaders } from "../requestContext-B6vQF-sy.mjs";
-import { t as transactionContext } from "../transactionContext-BvLKvOIL.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { n as requestContext, t as getTraceHeaders } from "../requestContext-uYE35JxI.mjs";
+import { t as transactionContext } from "../transactionContext-BYtWnwAS.mjs";
 export { getTraceHeaders, requestContext, transactionContext };

package/dist/core/index.d.mts

@@ -1,4 +1,4 @@
 
-import { $t as TreeMixin, An as BaseControllerOptions, B as defineResource, Fn as BodySanitizerConfig, Mn as ControllerConstructionOptions, Nn as ListResult, Pn as BodySanitizer, Qt as TreeExt, V as ResourceDefinition, Xt as SoftDeleteExt, Yt as BaseController, Zt as SoftDeleteMixin, an as QueryResolver, cn as AccessControlConfig, ct as AggMeasureShorthand, dt as AggregationDateRangeRequirement, en as SlugExt, ft as AggregationIndexHint, gt as AggregationsMap, ht as AggregationRateLimit, in as BaseCrudController, jn as ControllerConfigurableOptions, lt as AggregationCacheConfig, mt as AggregationMaterializedResult, nn as BulkExt, on as QueryResolverConfig, pt as AggregationMaterializedContext, rn as BulkMixin, sn as AccessControl, st as AggMeasureInput, tn as SlugMixin, ut as AggregationConfig } from "../index-CpzxqePp.mjs";
-import { A as DEFAULT_ID_FIELD, B as MAX_FILTER_DEPTH, C as DefineActionConfig, D as defineAggregation, E as createPermissionMiddleware, F as DEFAULT_UPDATE_METHOD, G as RESERVED_QUERY_PARAMS, H as MAX_SEARCH_LENGTH, I as HOOK_OPERATIONS, K as SYSTEM_FIELDS, L as HOOK_PHASES, M as DEFAULT_MAX_LIMIT, N as DEFAULT_SORT, O as CRUD_OPERATIONS, P as DEFAULT_TENANT_FIELD, R as HookOperation, S as mergeResourceConfig, T as createCrudRouter, U as MUTATION_OPERATIONS, V as MAX_REGEX_LENGTH, W as MutationOperation, _ as getEntityQuery, a as formatValidationErrors, b as ResourceSeams, c as isFieldReadable, d as createRequestContext, f as getControllerContext, g as getEntityIdField, h as getEntityId, i as assertValidConfig, j as DEFAULT_LIMIT, k as CrudOperation, l as createCrudHandlers, m as sendControllerResponse, n as ValidateOptions, o as validateResourceConfig, p as getControllerScope, r as ValidationResult, s as collectReadBlockedFields, t as ConfigError, u as createFastifyHandler, v as defineResourceVariants, w as defineAction, x as SeamedResourceConfig, y as AdapterLike, z as HookPhase } from "../index-DXlHwvuE.mjs";
-export { AccessControl, type AccessControlConfig, type AdapterLike, type AggMeasureInput, type AggMeasureShorthand, type AggregationCacheConfig, type AggregationConfig, type AggregationDateRangeRequirement, type AggregationIndexHint, type AggregationMaterializedContext, type AggregationMaterializedResult, type AggregationRateLimit, type AggregationsMap, BaseController, type BaseControllerOptions, BaseCrudController, BodySanitizer, type BodySanitizerConfig, type BulkExt, BulkMixin, CRUD_OPERATIONS, type ConfigError, type ControllerConfigurableOptions, type ControllerConstructionOptions, CrudOperation, DEFAULT_ID_FIELD, DEFAULT_LIMIT, DEFAULT_MAX_LIMIT, DEFAULT_SORT, DEFAULT_TENANT_FIELD, DEFAULT_UPDATE_METHOD, type DefineActionConfig, HOOK_OPERATIONS, HOOK_PHASES, HookOperation, HookPhase, type ListResult, MAX_FILTER_DEPTH, MAX_REGEX_LENGTH, MAX_SEARCH_LENGTH, MUTATION_OPERATIONS, MutationOperation, QueryResolver, type QueryResolverConfig, RESERVED_QUERY_PARAMS, ResourceDefinition, type ResourceSeams, SYSTEM_FIELDS, type SeamedResourceConfig, type SlugExt, SlugMixin, type SoftDeleteExt, SoftDeleteMixin, type TreeExt, TreeMixin, type ValidateOptions, type ValidationResult, assertValidConfig, collectReadBlockedFields, createCrudHandlers, createCrudRouter, createFastifyHandler, createPermissionMiddleware, createRequestContext, defineAction, defineAggregation, defineResource, defineResourceVariants, formatValidationErrors, getControllerContext, getControllerScope, getEntityId, getEntityIdField, getEntityQuery, isFieldReadable, mergeResourceConfig, sendControllerResponse, validateResourceConfig };
+import { $t as AccessControlConfig, B as defineResource, Bt as BaseController, Cn as ControllerConstructionOptions, En as BodySanitizerConfig, Gt as SlugExt, Ht as SoftDeleteMixin, Jt as BulkMixin, Kt as SlugMixin, Qt as AccessControl, Sn as ControllerConfigurableOptions, Tn as BodySanitizer, Ut as TreeExt, V as ResourceDefinition, Vt as SoftDeleteExt, Wt as TreeMixin, Xt as QueryResolver, Yt as BaseCrudController, Zt as QueryResolverConfig, ct as AggMeasureShorthand, dt as AggregationDateRangeRequirement, ft as AggregationIndexHint, gt as AggregationsMap, ht as AggregationRateLimit, lt as AggregationCacheConfig, mt as AggregationMaterializedResult, pt as AggregationMaterializedContext, qt as BulkExt, st as AggMeasureInput, ut as AggregationConfig, wn as ListResult, xn as BaseControllerOptions } from "../index-BcR2bFZQ.mjs";
+import { A as CRUD_OPERATIONS, B as HookOperation, C as SeamedResourceConfig, D as createCrudRouter, E as defineAction, F as DEFAULT_SORT, G as MUTATION_OPERATIONS, H as MAX_FILTER_DEPTH, I as DEFAULT_TENANT_FIELD, J as SYSTEM_FIELDS, K as MutationOperation, L as DEFAULT_UPDATE_METHOD, M as DEFAULT_ID_FIELD, N as DEFAULT_LIMIT, O as createPermissionMiddleware, P as DEFAULT_MAX_LIMIT, R as HOOK_OPERATIONS, S as ResourceSeams, T as DefineActionConfig, U as MAX_REGEX_LENGTH, V as HookPhase, W as MAX_SEARCH_LENGTH, _ as getEntityId, a as formatValidationErrors, b as defineResourceVariants, c as nativePolicyFilter, d as createCrudHandlers, f as createFastifyHandler, g as sendControllerResponse, h as getControllerScope, i as assertValidConfig, j as CrudOperation, k as defineAggregation, l as collectReadBlockedFields, m as getControllerContext, n as ValidateOptions, o as validateResourceConfig, p as createRequestContext, q as RESERVED_QUERY_PARAMS, r as ValidationResult, s as NativePolicyFilter, t as ConfigError, u as isFieldReadable, v as getEntityIdField, w as mergeResourceConfig, x as AdapterLike, y as getEntityQuery, z as HOOK_PHASES } from "../index-CFAJEWCX.mjs";
+export { AccessControl, type AccessControlConfig, type AdapterLike, type AggMeasureInput, type AggMeasureShorthand, type AggregationCacheConfig, type AggregationConfig, type AggregationDateRangeRequirement, type AggregationIndexHint, type AggregationMaterializedContext, type AggregationMaterializedResult, type AggregationRateLimit, type AggregationsMap, BaseController, type BaseControllerOptions, BaseCrudController, BodySanitizer, type BodySanitizerConfig, type BulkExt, BulkMixin, CRUD_OPERATIONS, type ConfigError, type ControllerConfigurableOptions, type ControllerConstructionOptions, CrudOperation, DEFAULT_ID_FIELD, DEFAULT_LIMIT, DEFAULT_MAX_LIMIT, DEFAULT_SORT, DEFAULT_TENANT_FIELD, DEFAULT_UPDATE_METHOD, type DefineActionConfig, HOOK_OPERATIONS, HOOK_PHASES, HookOperation, HookPhase, type ListResult, MAX_FILTER_DEPTH, MAX_REGEX_LENGTH, MAX_SEARCH_LENGTH, MUTATION_OPERATIONS, MutationOperation, type NativePolicyFilter, QueryResolver, type QueryResolverConfig, RESERVED_QUERY_PARAMS, ResourceDefinition, type ResourceSeams, SYSTEM_FIELDS, type SeamedResourceConfig, type SlugExt, SlugMixin, type SoftDeleteExt, SoftDeleteMixin, type TreeExt, TreeMixin, type ValidateOptions, type ValidationResult, assertValidConfig, collectReadBlockedFields, createCrudHandlers, createCrudRouter, createFastifyHandler, createPermissionMiddleware, createRequestContext, defineAction, defineAggregation, defineResource, defineResourceVariants, formatValidationErrors, getControllerContext, getControllerScope, getEntityId, getEntityIdField, getEntityQuery, isFieldReadable, mergeResourceConfig, nativePolicyFilter, sendControllerResponse, validateResourceConfig };

package/dist/core/index.mjs

@@ -1,8 +1,9 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
-import { a as DEFAULT_SORT, c as HOOK_OPERATIONS, d as MAX_REGEX_LENGTH, f as MAX_SEARCH_LENGTH, h as SYSTEM_FIELDS, i as DEFAULT_MAX_LIMIT, l as HOOK_PHASES, m as RESERVED_QUERY_PARAMS, n as DEFAULT_ID_FIELD, o as DEFAULT_TENANT_FIELD, p as MUTATION_OPERATIONS, r as DEFAULT_LIMIT, s as DEFAULT_UPDATE_METHOD, t as CRUD_OPERATIONS, u as MAX_FILTER_DEPTH } from "../constants-J99LGTJI.mjs";
-import { a as BulkMixin, c as collectReadBlockedFields, f as AccessControl, i as SlugMixin, l as isFieldReadable, n as TreeMixin, o as BaseCrudController, r as SoftDeleteMixin, s as QueryResolver, t as BaseController, u as BodySanitizer } from "../BaseController-Dk34dxhI.mjs";
-import { a as ResourceDefinition, i as validateResourceConfig, n as assertValidConfig, o as createCrudRouter, r as formatValidationErrors, s as createPermissionMiddleware, t as defineResource } from "../defineResource-XFPPUu2c.mjs";
-import { a as createFastifyHandler, c as getControllerScope, i as createCrudHandlers, l as sendControllerResponse, o as createRequestContext, s as getControllerContext } from "../pipeline-CPA-jx0M.mjs";
-import { t as defineAggregation } from "../defineAggregation-gX4No1gt.mjs";
-import { a as mergeResourceConfig, i as defineResourceVariants, n as getEntityIdField, o as defineAction, r as getEntityQuery, t as getEntityId } from "../core-BwwmNSp7.mjs";
-export { AccessControl, BaseController, BaseCrudController, BodySanitizer, BulkMixin, CRUD_OPERATIONS, DEFAULT_ID_FIELD, DEFAULT_LIMIT, DEFAULT_MAX_LIMIT, DEFAULT_SORT, DEFAULT_TENANT_FIELD, DEFAULT_UPDATE_METHOD, HOOK_OPERATIONS, HOOK_PHASES, MAX_FILTER_DEPTH, MAX_REGEX_LENGTH, MAX_SEARCH_LENGTH, MUTATION_OPERATIONS, QueryResolver, RESERVED_QUERY_PARAMS, ResourceDefinition, SYSTEM_FIELDS, SlugMixin, SoftDeleteMixin, TreeMixin, assertValidConfig, collectReadBlockedFields, createCrudHandlers, createCrudRouter, createFastifyHandler, createPermissionMiddleware, createRequestContext, defineAction, defineAggregation, defineResource, defineResourceVariants, formatValidationErrors, getControllerContext, getControllerScope, getEntityId, getEntityIdField, getEntityQuery, isFieldReadable, mergeResourceConfig, sendControllerResponse, validateResourceConfig };
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { a as DEFAULT_SORT, c as HOOK_OPERATIONS, d as MAX_REGEX_LENGTH, f as MAX_SEARCH_LENGTH, h as SYSTEM_FIELDS, i as DEFAULT_MAX_LIMIT, l as HOOK_PHASES, m as RESERVED_QUERY_PARAMS, n as DEFAULT_ID_FIELD, o as DEFAULT_TENANT_FIELD, p as MUTATION_OPERATIONS, r as DEFAULT_LIMIT, s as DEFAULT_UPDATE_METHOD, t as CRUD_OPERATIONS, u as MAX_FILTER_DEPTH } from "../constants-BxCoxmiN.mjs";
+import { t as nativePolicyFilter } from "../repositoryFilter-BANpz6BX.mjs";
+import { a as BulkMixin, c as collectReadBlockedFields, f as BodySanitizer, i as SlugMixin, l as isFieldReadable, m as AccessControl, n as TreeMixin, o as BaseCrudController, r as SoftDeleteMixin, s as QueryResolver, t as BaseController } from "../BaseController-CbkuhNI2.mjs";
+import { a as ResourceDefinition, i as validateResourceConfig, n as assertValidConfig, o as createCrudRouter, r as formatValidationErrors, s as createPermissionMiddleware, t as defineResource } from "../defineResource-ZhuLonLm.mjs";
+import { a as createFastifyHandler, c as getControllerScope, i as createCrudHandlers, l as sendControllerResponse, o as createRequestContext, s as getControllerContext } from "../pipeline-q69DZzgG.mjs";
+import { t as defineAggregation } from "../defineAggregation-Nv-DwfOf.mjs";
+import { a as mergeResourceConfig, i as defineResourceVariants, n as getEntityIdField, o as defineAction, r as getEntityQuery, t as getEntityId } from "../core-BYKa8wHu.mjs";
+export { AccessControl, BaseController, BaseCrudController, BodySanitizer, BulkMixin, CRUD_OPERATIONS, DEFAULT_ID_FIELD, DEFAULT_LIMIT, DEFAULT_MAX_LIMIT, DEFAULT_SORT, DEFAULT_TENANT_FIELD, DEFAULT_UPDATE_METHOD, HOOK_OPERATIONS, HOOK_PHASES, MAX_FILTER_DEPTH, MAX_REGEX_LENGTH, MAX_SEARCH_LENGTH, MUTATION_OPERATIONS, QueryResolver, RESERVED_QUERY_PARAMS, ResourceDefinition, SYSTEM_FIELDS, SlugMixin, SoftDeleteMixin, TreeMixin, assertValidConfig, collectReadBlockedFields, createCrudHandlers, createCrudRouter, createFastifyHandler, createPermissionMiddleware, createRequestContext, defineAction, defineAggregation, defineResource, defineResourceVariants, formatValidationErrors, getControllerContext, getControllerScope, getEntityId, getEntityIdField, getEntityQuery, isFieldReadable, mergeResourceConfig, nativePolicyFilter, sendControllerResponse, validateResourceConfig };

package/dist/{core-BwwmNSp7.mjs → core-BYKa8wHu.mjs}

@@ -1,6 +1,6 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
-import "./constants-J99LGTJI.mjs";
-import { t as defineResource } from "./defineResource-XFPPUu2c.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import "./constants-BxCoxmiN.mjs";
+import { t as defineResource } from "./defineResource-ZhuLonLm.mjs";
 //#region src/core/defineAction.ts
 /**
 * Build an `ActionDefinition` with a typed handler. The literal schema

package/dist/{createActionRouter-DkJZWo0m.mjs → createActionRouter-D6T0jWhS.mjs}

@@ -1,11 +1,11 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
-import { t as __exportAll } from "./rolldown-runtime-BhflRrBs.mjs";
-import "./constants-J99LGTJI.mjs";
-import { f as createError } from "./errors-Bh1KK5ps.mjs";
-import { a as buildRouteHooks, i as selectPluginMw, l as buildAuthMiddlewareForPermissions, n as buildRouteConfig, r as resolveRouterPluginMw, s as routeHookOptions, t as buildRateLimitConfig, u as buildArcDecorator } from "./rateLimit-C7mmAGs3.mjs";
-import { n as buildActionPermissionMw, t as tryRegisterRoute } from "./registerRoute-B_QrjYZS.mjs";
-import { l as sendControllerResponse, r as resolvePipelineSteps, t as buildActionPipelineHandler } from "./pipeline-CPA-jx0M.mjs";
-import { n as schemaIRToJsonSchemaBranch, t as normalizeSchemaIR } from "./schemaIR-CnyKK_1j.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { t as __exportAll } from "./rolldown-runtime-DNg-KNCk.mjs";
+import "./constants-BxCoxmiN.mjs";
+import { f as createError } from "./errors-Cd_yy7aW.mjs";
+import { a as buildRouteHooks, i as selectPluginMw, l as buildAuthMiddlewareForPermissions, n as buildRouteConfig, r as resolveRouterPluginMw, s as routeHookOptions, t as buildRateLimitConfig, u as buildArcDecorator } from "./rateLimit-D4-ASwsI.mjs";
+import { n as buildActionPermissionMw, t as tryRegisterRoute } from "./registerRoute-Ba8v0PCa.mjs";
+import { l as sendControllerResponse, r as resolvePipelineSteps, t as buildActionPipelineHandler } from "./pipeline-q69DZzgG.mjs";
+import { n as schemaIRToJsonSchemaBranch, t as normalizeSchemaIR } from "./schemaIR-CDvclAew.mjs";
 //#region src/core/createActionRouter.ts
 var createActionRouter_exports = /* @__PURE__ */ __exportAll({
 	buildActionBodySchema: () => buildActionBodySchema,

package/dist/{createAggregationRouter-B1exOVD8.mjs → createAggregationRouter-QLV2PrWP.mjs}

@@ -1,10 +1,10 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
-import { n as evaluateAndApplyPermission } from "./authorizationDecision-__T3EJDA.mjs";
-import { f as createError } from "./errors-Bh1KK5ps.mjs";
-import { u as getRequestScope } from "./types-DXYX7dIR.mjs";
-import { a as buildRouteHooks, c as buildAuthMiddleware, i as selectPluginMw, r as resolveRouterPluginMw, s as routeHookOptions, t as buildRateLimitConfig, u as buildArcDecorator } from "./rateLimit-C7mmAGs3.mjs";
-import { n as validateAggregations } from "./validate-PMCPR9El.mjs";
-import { t as buildAggregationHandler } from "./buildHandler-Dn7rzUJo.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { n as evaluateAndApplyPermission } from "./authorizationDecision-CMMLWmuZ.mjs";
+import { f as createError } from "./errors-Cd_yy7aW.mjs";
+import { u as getRequestScope } from "./types-CoqIRrkY.mjs";
+import { a as buildRouteHooks, c as buildAuthMiddleware, i as selectPluginMw, r as resolveRouterPluginMw, s as routeHookOptions, t as buildRateLimitConfig, u as buildArcDecorator } from "./rateLimit-D4-ASwsI.mjs";
+import { n as validateAggregations } from "./validate-CdQlz52F.mjs";
+import { t as buildAggregationHandler } from "./buildHandler-BrdYrG_1.mjs";
 //#region src/core/aggregation/createAggregationRouter.ts
 /**
 * Register one Fastify route per aggregation. No-op when the map is