@classytic/arc 2.37.1 → 2.38.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (172) hide show
  1. package/dist/{BaseController-Chkf0Aiw.mjs → BaseController-CYaDvmOB.mjs} +11 -11
  2. package/dist/{EventTransport-BEVP50ka.d.mts → EventTransport-Cx60_s-6.d.mts} +37 -0
  3. package/dist/{EventTransport-CFdtK25P.mjs → EventTransport-Gq7JWbWw.mjs} +39 -7
  4. package/dist/{HookSystem-Csy31WS-.mjs → HookSystem-C0ikzqQf.mjs} +2 -2
  5. package/dist/{ResourceRegistry-OQA13slI.mjs → ResourceRegistry-DPcX--zk.mjs} +2 -2
  6. package/dist/{actionPermissions-DGGqqSIV.mjs → actionPermissions-jlFZ1it4.mjs} +6 -6
  7. package/dist/audit/index.d.mts +1 -1
  8. package/dist/audit/index.mjs +2 -2
  9. package/dist/auth/audit.mjs +1 -1
  10. package/dist/auth/index.d.mts +1 -1
  11. package/dist/auth/index.mjs +6 -6
  12. package/dist/auth/redis-session.mjs +1 -1
  13. package/dist/{authorizationDecision-BzZi2bsf.mjs → authorizationDecision-BP8GHtjc.mjs} +2 -2
  14. package/dist/{buildHandler-CIz0NsGS.mjs → buildHandler-DjXOqIvX.mjs} +4 -4
  15. package/dist/cache/index.mjs +4 -4
  16. package/dist/{caching-DldVgnC9.mjs → caching-a3ZEcJJs.mjs} +2 -2
  17. package/dist/cleanup/index.d.mts +2 -2
  18. package/dist/cleanup/index.mjs +4 -4
  19. package/dist/cli/commands/describe.d.mts +1 -1
  20. package/dist/cli/commands/describe.mjs +3 -3
  21. package/dist/cli/commands/docs.mjs +3 -3
  22. package/dist/cli/commands/doctor.mjs +1 -1
  23. package/dist/cli/commands/generate.mjs +2 -2
  24. package/dist/cli/commands/init.mjs +2 -2
  25. package/dist/cli/commands/introspect.mjs +2 -2
  26. package/dist/cli/index.mjs +3 -3
  27. package/dist/{constants-DDKf25s4.mjs → constants-BONghE1Y.mjs} +1 -1
  28. package/dist/context/index.mjs +3 -3
  29. package/dist/core/index.d.mts +2 -2
  30. package/dist/core/index.mjs +7 -7
  31. package/dist/{core-uHQonaHf.mjs → core-8She7FgF.mjs} +3 -3
  32. package/dist/{createActionRouter-C22Xn11N.mjs → createActionRouter-Bqi6Bhhx.mjs} +7 -7
  33. package/dist/{createAggregationRouter-DgyksLHH.mjs → createAggregationRouter-BsYO7ktd.mjs} +7 -7
  34. package/dist/{defineAggregation-B1m-45Fe.mjs → defineAggregation-0KBvqEEC.mjs} +1 -1
  35. package/dist/{defineResource-DS3Uj2-8.mjs → defineResource-BMdyRelW.mjs} +18 -18
  36. package/dist/discovery/index.mjs +1 -1
  37. package/dist/docs/index.d.mts +1 -1
  38. package/dist/docs/index.mjs +3 -3
  39. package/dist/{elevation-9X0lGzTQ.mjs → elevation-C6woysGC.mjs} +4 -4
  40. package/dist/encryption/index.mjs +3 -3
  41. package/dist/{errorHandler-BmEGKyO9.mjs → errorHandler-BdmIWPba.mjs} +3 -3
  42. package/dist/{errors-CbxCF9M0.mjs → errors-2ExmOgIJ.mjs} +1 -1
  43. package/dist/{eventPlugin-B47sfCJ8.d.mts → eventPlugin-DFvHa4Nf.d.mts} +10 -1
  44. package/dist/{eventPlugin-B1ahehZH.mjs → eventPlugin-DJwpGMzx.mjs} +6 -6
  45. package/dist/events/index.d.mts +4 -4
  46. package/dist/events/index.mjs +5 -5
  47. package/dist/events/transports/redis-stream-entry.d.mts +1 -1
  48. package/dist/events/transports/redis-stream-entry.mjs +1 -1
  49. package/dist/events/transports/redis.d.mts +1 -1
  50. package/dist/events/transports/redis.mjs +1 -1
  51. package/dist/factory/index.d.mts +4 -4
  52. package/dist/factory/index.mjs +5 -5
  53. package/dist/{fastify-augmentation-CRsNNhuo.d.mts → fastify-augmentation-jYA2oHyL.d.mts} +3 -3
  54. package/dist/{fields-f_MdWDl_.mjs → fields-Cha2QCKH.mjs} +37 -2
  55. package/dist/{generate-DxWn-XnM.mjs → generate-BUP4Oydg.mjs} +2 -2
  56. package/dist/{headers-DivLPMHe.mjs → headers-DeXNifVj.mjs} +2 -2
  57. package/dist/{health-W_BjgWf0.mjs → health-Bh0N_FLk.mjs} +1 -1
  58. package/dist/hooks/index.d.mts +1 -1
  59. package/dist/hooks/index.mjs +2 -2
  60. package/dist/idempotency/index.mjs +4 -4
  61. package/dist/idempotency/redis.mjs +1 -1
  62. package/dist/{index-BqRfP1kT.d.mts → index-B78WZom8.d.mts} +1 -1
  63. package/dist/{index-CEmPspAB.d.mts → index-BRoDtjek.d.mts} +2 -2
  64. package/dist/{index-DCxxRwLC.d.mts → index-D2uIUSQk.d.mts} +1 -1
  65. package/dist/index.d.mts +3 -3
  66. package/dist/index.mjs +11 -11
  67. package/dist/{init-BJ6fdYnp.mjs → init-Dg_Am2o_.mjs} +1 -1
  68. package/dist/integrations/event-gateway.d.mts +1 -1
  69. package/dist/integrations/event-gateway.mjs +2 -2
  70. package/dist/integrations/index.d.mts +1 -1
  71. package/dist/integrations/index.mjs +1 -1
  72. package/dist/integrations/jobs/index.mjs +2 -2
  73. package/dist/integrations/mcp/index.d.mts +2 -2
  74. package/dist/integrations/mcp/index.mjs +2 -2
  75. package/dist/integrations/mcp/testing.d.mts +1 -1
  76. package/dist/integrations/mcp/testing.mjs +2 -2
  77. package/dist/integrations/streamline.mjs +3 -3
  78. package/dist/integrations/webhooks.d.mts +2 -2
  79. package/dist/integrations/webhooks.mjs +3 -3
  80. package/dist/integrations/websocket-pushref-redis.mjs +1 -1
  81. package/dist/integrations/websocket-redis.mjs +1 -1
  82. package/dist/integrations/websocket.mjs +1 -1
  83. package/dist/{interface-DeLndJ8G.mjs → interface-DYPVscCU.mjs} +1 -1
  84. package/dist/{jsonBody-kApktjTc.mjs → jsonBody-DVui0uJl.mjs} +2 -2
  85. package/dist/{keys-B1MgfDWi.mjs → keys-BSuxGS-B.mjs} +1 -1
  86. package/dist/{loadResources-ma-Aaxp1.mjs → loadResources-CNd1DWnK.mjs} +2 -2
  87. package/dist/{loadResourcesFromEntry-xszlyXTs.mjs → loadResourcesFromEntry-DNj8cpiY.mjs} +2 -2
  88. package/dist/logger/index.mjs +1 -1
  89. package/dist/{mcpPlugin-97HuFA46.mjs → mcpPlugin-KWsezMx7.mjs} +15 -15
  90. package/dist/{memory-DvASzOn3.mjs → memory-BiPVaCPg.mjs} +2 -2
  91. package/dist/{metrics-Dx-nkDE5.mjs → metrics-CsWaIVTa.mjs} +2 -2
  92. package/dist/middleware/index.d.mts +1 -1
  93. package/dist/middleware/index.mjs +3 -3
  94. package/dist/migrations/index.mjs +2 -2
  95. package/dist/{module-CNKk_twm.mjs → module-BQXHxMEk.mjs} +1 -1
  96. package/dist/{multipartBody-TDaYOHGZ.mjs → multipartBody-u6VrS_iH.mjs} +1 -1
  97. package/dist/{openapi-473gZ-8x.mjs → openapi-Dxc8RLy_.mjs} +6 -6
  98. package/dist/outbox-admin/index.d.mts +1 -1
  99. package/dist/outbox-admin/index.mjs +4 -4
  100. package/dist/{outbox-module-BbdaMyqy.d.mts → outbox-module-CQXu_O6o.d.mts} +2 -2
  101. package/dist/{outbox-module-DOAmyXOb.mjs → outbox-module-DyIqA5vo.mjs} +4 -4
  102. package/dist/permissions/index.mjs +5 -5
  103. package/dist/{permissions-DnAc6zoZ.mjs → permissions-H7Zcb82Z.mjs} +6 -6
  104. package/dist/{pipe-BoV-z4db.mjs → pipe-SunhEaZ6.mjs} +2 -2
  105. package/dist/pipeline/index.d.mts +1 -1
  106. package/dist/pipeline/index.mjs +2 -2
  107. package/dist/plugins/index.d.mts +4 -4
  108. package/dist/plugins/index.mjs +16 -16
  109. package/dist/plugins/response-cache.mjs +2 -2
  110. package/dist/plugins/tracing-entry.mjs +2 -2
  111. package/dist/{pluralize-BiU5ocWw.mjs → pluralize-Da7IT_qJ.mjs} +1 -1
  112. package/dist/{preloadResources-DHkyk3QN.d.mts → preloadResources-BbBkNkqK.d.mts} +6 -6
  113. package/dist/{preloadResources-DJ7Lli0a.mjs → preloadResources-DlhH81py.mjs} +21 -21
  114. package/dist/presets/filesUpload.d.mts +1 -1
  115. package/dist/presets/filesUpload.mjs +5 -5
  116. package/dist/presets/index.d.mts +1 -1
  117. package/dist/presets/index.mjs +2 -2
  118. package/dist/presets/multiTenant.d.mts +1 -1
  119. package/dist/presets/multiTenant.mjs +3 -3
  120. package/dist/presets/search.d.mts +1 -1
  121. package/dist/presets/search.mjs +2 -2
  122. package/dist/{presets-BMxH-Bb7.mjs → presets-CNyfaxGL.mjs} +4 -4
  123. package/dist/{projection-CRCM5S9T.mjs → projection-DSfEoooA.mjs} +2 -2
  124. package/dist/{queryCachePlugin-Cl3zLG7g.mjs → queryCachePlugin-oTsmVyEQ.mjs} +5 -5
  125. package/dist/{rateLimitKey-D4_rjP1K.mjs → rateLimitKey-CewdR-m6.mjs} +1 -1
  126. package/dist/{realtime-BWuHi-UI.mjs → realtime-CPmjjgqd.mjs} +9 -9
  127. package/dist/{redis-stream-mwLWlfHG.d.mts → redis-stream-eh0eOtjh.d.mts} +1 -1
  128. package/dist/{registerRoute-mvm6zY2H.mjs → registerRoute-XvcI_3sh.mjs} +10 -6
  129. package/dist/registry/index.d.mts +2 -2
  130. package/dist/registry/index.mjs +3 -3
  131. package/dist/{registry-3maEt__c.mjs → registry-UFEJQN8R.mjs} +2 -2
  132. package/dist/{renewingLease-C1-GAUpr.mjs → renewingLease-DuRGVOMe.mjs} +1 -1
  133. package/dist/{replyHelpers-DVcUoled.mjs → replyHelpers-BHebarf0.mjs} +2 -2
  134. package/dist/{requestContext-KzIdSmN2.mjs → requestContext-DpmntRZy.mjs} +1 -1
  135. package/dist/{rolldown-runtime-NVzJrC-o.mjs → rolldown-runtime-Add2L50I.mjs} +1 -1
  136. package/dist/{runtimeCapabilities-OrGatf7r.mjs → runtimeCapabilities-D793Pxci.mjs} +1 -1
  137. package/dist/{schedules-DeRI03eo.mjs → schedules-DthM8Qag.mjs} +3 -3
  138. package/dist/{schemaConverter-cXTayNOW.mjs → schemaConverter-Db-MMsH6.mjs} +1 -1
  139. package/dist/{schemaIR-Cc9ZPVs2.mjs → schemaIR-CIXShch7.mjs} +2 -2
  140. package/dist/schemas/index.mjs +1 -1
  141. package/dist/scim/index.mjs +2 -2
  142. package/dist/scope/index.mjs +5 -5
  143. package/dist/{scope-C2r7_WGs.mjs → scope-D03sk17n.mjs} +4 -4
  144. package/dist/{simpleEqualityMatcher-Cr1F8jKZ.mjs → simpleEqualityMatcher-B7qVjQBv.mjs} +1 -1
  145. package/dist/{sse-BmZCVRGH.mjs → sse-D4MYqkic.mjs} +5 -5
  146. package/dist/{sseStream-nNPqvOeK.mjs → sseStream-BuMNPR6r.mjs} +2 -2
  147. package/dist/{store-helpers-C1r3-6M0.mjs → store-helpers-CIF4RG8s.mjs} +1 -1
  148. package/dist/{streaming-BxZDlH01.mjs → streaming-DkpW1HwJ.mjs} +1 -1
  149. package/dist/{subscribe-helpers-Dca7Fcz2.mjs → subscribe-helpers-CBZOi6pk.mjs} +2 -2
  150. package/dist/sync/changelog.mjs +1 -1
  151. package/dist/testing/cleanupStoreContract.mjs +1 -1
  152. package/dist/testing/index.d.mts +4 -4
  153. package/dist/testing/index.mjs +10 -10
  154. package/dist/testing/outboxStoreContract.mjs +1 -1
  155. package/dist/testing/storageContract.mjs +1 -1
  156. package/dist/{transactionContext-6F7Gkbxg.mjs → transactionContext-DMmvcfdo.mjs} +1 -1
  157. package/dist/{typeGuards-BrXgbFi-.mjs → typeGuards-DHTnEs5X.mjs} +1 -1
  158. package/dist/types/index.d.mts +1 -1
  159. package/dist/types/index.mjs +1 -1
  160. package/dist/types/storage.mjs +1 -1
  161. package/dist/{types-BMa2EPtv.d.mts → types-BRU-Kd3t.d.mts} +1 -1
  162. package/dist/{types-khJmBErP.mjs → types-BqLyyH0o.mjs} +4 -4
  163. package/dist/{types-rzNprqbE.d.mts → types-LQFwC37d.d.mts} +1 -1
  164. package/dist/usage/index.mjs +0 -0
  165. package/dist/{userHelpers-Bi97zMEl.mjs → userHelpers-CXySQFRg.mjs} +1 -1
  166. package/dist/utils/index.d.mts +1 -1
  167. package/dist/utils/index.mjs +11 -11
  168. package/dist/{utils-WlLDIKuw.mjs → utils-BbGG8XNT.mjs} +3 -3
  169. package/dist/{validate-pMke_boy.mjs → validate-CidSeUrx.mjs} +2 -2
  170. package/dist/{versioning-DEs-_hFi.d.mts → versioning-B843jOYX.d.mts} +1 -1
  171. package/dist/{versioning-CFK3c04-.mjs → versioning-C2r0eOZ4.mjs} +3 -3
  172. package/package.json +5 -5
@@ -1,8 +1,8 @@
1
- /*! @classytic/arc v2.37.1 | MIT | https://classytic.com */
2
- import { t as __exportAll } from "./rolldown-runtime-NVzJrC-o.mjs";
1
+ /*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
2
+ import { t as __exportAll } from "./rolldown-runtime-Add2L50I.mjs";
3
3
  import { arcLog } from "./logger/index.mjs";
4
- import { n as requireSingleHeaderValue } from "./headers-DivLPMHe.mjs";
5
- import { n as getUserRoles } from "./userHelpers-Bi97zMEl.mjs";
4
+ import { n as requireSingleHeaderValue } from "./headers-DeXNifVj.mjs";
5
+ import { n as getUserRoles } from "./userHelpers-CXySQFRg.mjs";
6
6
  import fp from "fastify-plugin";
7
7
  //#region src/scope/elevation.ts
8
8
  var elevation_exports = /* @__PURE__ */ __exportAll({
@@ -1,6 +1,6 @@
1
- /*! @classytic/arc v2.37.1 | MIT | https://classytic.com */
2
- import { t as ArcError } from "../errors-CbxCF9M0.mjs";
3
- import { t as parseJsonBody } from "../jsonBody-kApktjTc.mjs";
1
+ /*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
2
+ import { t as ArcError } from "../errors-2ExmOgIJ.mjs";
3
+ import { t as parseJsonBody } from "../jsonBody-DVui0uJl.mjs";
4
4
  import { createCipheriv, createDecipheriv, randomBytes } from "node:crypto";
5
5
  import fp from "fastify-plugin";
6
6
  //#region src/encryption/fieldCipher.ts
@@ -1,6 +1,6 @@
1
- /*! @classytic/arc v2.37.1 | MIT | https://classytic.com */
2
- import { t as __exportAll } from "./rolldown-runtime-NVzJrC-o.mjs";
3
- import { m as statusToArcCode, p as isArcError } from "./errors-CbxCF9M0.mjs";
1
+ /*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
2
+ import { t as __exportAll } from "./rolldown-runtime-Add2L50I.mjs";
3
+ import { m as statusToArcCode, p as isArcError } from "./errors-2ExmOgIJ.mjs";
4
4
  import { isProductionEnv } from "@classytic/primitives/environment";
5
5
  import { isHttpError, toErrorContract } from "@classytic/repo-core/errors";
6
6
  import fp from "fastify-plugin";
@@ -1,4 +1,4 @@
1
- /*! @classytic/arc v2.37.1 | MIT | https://classytic.com */
1
+ /*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
2
2
  //#region src/utils/errors.ts
3
3
  /**
4
4
  * Base Arc Error. Implements the canonical `HttpError` contract — `status`
@@ -1,5 +1,5 @@
1
1
 
2
- import { a as EventTransport, i as EventLogger, n as DomainEvent, r as EventHandler } from "./EventTransport-BEVP50ka.mjs";
2
+ import { a as EventTransport, i as EventLogger, n as DomainEvent, r as EventHandler, s as MemoryEventTransportOptions } from "./EventTransport-Cx60_s-6.mjs";
3
3
  import { FastifyPluginAsync } from "fastify";
4
4
  //#region src/events/defineEvent.d.ts
5
5
  interface EventSchema {
@@ -227,6 +227,15 @@ declare function createDeadLetterPublisher(events: {
227
227
  interface EventPluginOptions {
228
228
  /** Event transport (default: MemoryEventTransport) */
229
229
  transport?: EventTransport;
230
+ /**
231
+ * Options for the DEFAULT `MemoryEventTransport`, when no `transport` is
232
+ * supplied. Ignored if you pass your own.
233
+ *
234
+ * Exists so the default path can reach `handlerDispatch` / `onHandlerError`
235
+ * at all: without it only an app that hand-constructs its transport could
236
+ * opt in, which is most of the fleet unable to change either setting.
237
+ */
238
+ memoryTransport?: MemoryEventTransportOptions;
230
239
  /**
231
240
  * Declare that this deployment is ONE process on purpose — the in-memory
232
241
  * transport is its intended configuration, not a forgotten default.
@@ -1,9 +1,9 @@
1
- /*! @classytic/arc v2.37.1 | MIT | https://classytic.com */
2
- import { t as __exportAll } from "./rolldown-runtime-NVzJrC-o.mjs";
1
+ /*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
2
+ import { t as __exportAll } from "./rolldown-runtime-Add2L50I.mjs";
3
3
  import { arcLog } from "./logger/index.mjs";
4
- import { d as createDomainError } from "./errors-CbxCF9M0.mjs";
5
- import { n as requestContext } from "./requestContext-KzIdSmN2.mjs";
6
- import { n as MemoryEventTransport, r as createEvent, t as ARC_EVENT_TRANSPORT } from "./EventTransport-CFdtK25P.mjs";
4
+ import { d as createDomainError } from "./errors-2ExmOgIJ.mjs";
5
+ import { n as requestContext } from "./requestContext-DpmntRZy.mjs";
6
+ import { n as MemoryEventTransport, r as createEvent, t as ARC_EVENT_TRANSPORT } from "./EventTransport-Gq7JWbWw.mjs";
7
7
  import { isProductionEnv } from "@classytic/primitives/environment";
8
8
  import fp from "fastify-plugin";
9
9
  //#region src/events/retry.ts
@@ -147,7 +147,7 @@ const eventPlugin = async (fastify, opts = {}) => {
147
147
  * from a host value afterwards.
148
148
  */
149
149
  const ownsTransport = opts.transport === void 0;
150
- const { transport = new MemoryEventTransport(), singleProcess = false, logEvents = false, failOpen = true, retry: retryOpts, deadLetterQueue: dlqOpts, wal, onPublish, onPublishError, registry, validateMode: rawValidateMode, warnOnDuplicate: rawWarnOnDuplicate } = opts;
150
+ const { transport = new MemoryEventTransport(opts.memoryTransport), singleProcess = false, logEvents = false, failOpen = true, retry: retryOpts, deadLetterQueue: dlqOpts, wal, onPublish, onPublishError, registry, validateMode: rawValidateMode, warnOnDuplicate: rawWarnOnDuplicate } = opts;
151
151
  const validateMode = rawValidateMode ?? (registry ? "warn" : "off");
152
152
  const warnOnDuplicate = rawWarnOnDuplicate ?? !isProductionEnv(process.env.NODE_ENV);
153
153
  const DUP_WINDOW_MS = 5e3;
@@ -1,9 +1,9 @@
1
1
 
2
- import { i as EventLogger, n as DomainEvent, o as MemoryEventTransport, r as EventHandler, s as MemoryEventTransportOptions } from "../EventTransport-BEVP50ka.mjs";
3
- import { a as withRetry, c as EventDefinitionOutput, d as EventSchema, f as ValidationResult, i as createDeadLetterPublisher, l as EventRegistry, m as defineEvent, n as eventPlugin, o as CustomValidator, p as createEventRegistry, r as RetryOptions, s as EventDefinitionInput, t as EventPluginOptions, u as EventRegistryOptions } from "../eventPlugin-B47sfCJ8.mjs";
4
- import { a as EventOutbox, c as OutboxRelayErrorKind, i as MemoryOutboxStore, l as RelayResult, n as OutboxModuleOptions, o as EventOutboxOptions, r as createOutboxModule, s as OutboxRelayErrorHandler, t as OutboxModuleExports } from "../outbox-module-BbdaMyqy.mjs";
2
+ import { i as EventLogger, n as DomainEvent, o as MemoryEventTransport, r as EventHandler, s as MemoryEventTransportOptions } from "../EventTransport-Cx60_s-6.mjs";
3
+ import { a as withRetry, c as EventDefinitionOutput, d as EventSchema, f as ValidationResult, i as createDeadLetterPublisher, l as EventRegistry, m as defineEvent, n as eventPlugin, o as CustomValidator, p as createEventRegistry, r as RetryOptions, s as EventDefinitionInput, t as EventPluginOptions, u as EventRegistryOptions } from "../eventPlugin-DFvHa4Nf.mjs";
4
+ import { a as EventOutbox, c as OutboxRelayErrorKind, i as MemoryOutboxStore, l as RelayResult, n as OutboxModuleOptions, o as EventOutboxOptions, r as createOutboxModule, s as OutboxRelayErrorHandler, t as OutboxModuleExports } from "../outbox-module-CQXu_O6o.mjs";
5
5
  import { RedisEventTransportOptions, RedisLike } from "./transports/redis.mjs";
6
- import { r as RedisStreamTransportOptions, t as RedisStreamLike } from "../redis-stream-mwLWlfHG.mjs";
6
+ import { r as RedisStreamTransportOptions, t as RedisStreamLike } from "../redis-stream-eh0eOtjh.mjs";
7
7
  import { OutboxStore } from "@classytic/primitives/outbox";
8
8
  import { RepositoryLike } from "@classytic/repo-core/adapter";
9
9
  //#region src/events/eventTypes.d.ts
@@ -1,8 +1,8 @@
1
- /*! @classytic/arc v2.37.1 | MIT | https://classytic.com */
2
- import { n as MemoryEventTransport } from "../EventTransport-CFdtK25P.mjs";
3
- import { a as createEventRegistry, i as wrapWithSchema, n as subscribeWithSchema, o as defineEvent, r as wrapWithBoundary, t as subscribeWithBoundary } from "../subscribe-helpers-Dca7Fcz2.mjs";
4
- import { i as withRetry, r as createDeadLetterPublisher, t as eventPlugin } from "../eventPlugin-B1ahehZH.mjs";
5
- import { i as exponentialBackoff, n as EventOutbox, r as repositoryAsOutboxStore, t as createOutboxModule } from "../outbox-module-DOAmyXOb.mjs";
1
+ /*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
2
+ import { n as MemoryEventTransport } from "../EventTransport-Gq7JWbWw.mjs";
3
+ import { a as createEventRegistry, i as wrapWithSchema, n as subscribeWithSchema, o as defineEvent, r as wrapWithBoundary, t as subscribeWithBoundary } from "../subscribe-helpers-CBZOi6pk.mjs";
4
+ import { i as withRetry, r as createDeadLetterPublisher, t as eventPlugin } from "../eventPlugin-DJwpGMzx.mjs";
5
+ import { i as exponentialBackoff, n as EventOutbox, r as repositoryAsOutboxStore, t as createOutboxModule } from "../outbox-module-DyIqA5vo.mjs";
6
6
  import { MemoryOutboxStore } from "@classytic/primitives/memory-outbox";
7
7
  //#region src/events/eventTypes.ts
8
8
  /**
@@ -1,3 +1,3 @@
1
1
 
2
- import { n as RedisStreamTransport, r as RedisStreamTransportOptions, t as RedisStreamLike } from "../../redis-stream-mwLWlfHG.mjs";
2
+ import { n as RedisStreamTransport, r as RedisStreamTransportOptions, t as RedisStreamLike } from "../../redis-stream-eh0eOtjh.mjs";
3
3
  export { type RedisStreamLike, RedisStreamTransport, type RedisStreamTransportOptions };
@@ -1,4 +1,4 @@
1
- /*! @classytic/arc v2.37.1 | MIT | https://classytic.com */
1
+ /*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
2
2
  import sjson from "secure-json-parse";
3
3
  //#region src/events/transports/redis-stream.ts
4
4
  /**
@@ -1,5 +1,5 @@
1
1
 
2
- import { a as EventTransport, i as EventLogger, n as DomainEvent, r as EventHandler } from "../../EventTransport-BEVP50ka.mjs";
2
+ import { a as EventTransport, i as EventLogger, n as DomainEvent, r as EventHandler } from "../../EventTransport-Cx60_s-6.mjs";
3
3
  //#region src/events/transports/redis.d.ts
4
4
  interface RedisLike {
5
5
  publish(channel: string, message: string): Promise<number>;
@@ -1,4 +1,4 @@
1
- /*! @classytic/arc v2.37.1 | MIT | https://classytic.com */
1
+ /*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
2
2
  import sjson from "secure-json-parse";
3
3
  //#region src/events/transports/redis.ts
4
4
  /**
@@ -1,8 +1,8 @@
1
1
 
2
- import { _ as HealthCheck, a as ModuleContribution, c as LoadResourcesOptions, d as loadResources, i as EventHandlerDefinition, l as ResourceLike, n as ArcModuleInput, o as ModuleDisposer, r as ArcModuleRegistry, s as ModuleSetupContext, t as ArcModule, u as ResourceModule } from "../types-BMa2EPtv.mjs";
3
- import { _ as collectModuleScheduledJobs, a as lazyModuleExports, c as getModuleState, d as resolveModule, f as orderModules, g as collectModuleHealthChecks, h as extendModule, i as hasModuleExports, l as hasModule, m as ModuleExtension, n as getModuleExports, o as lazyRequiredModuleExports, p as subscribeModuleEventHandlers, r as getOptionalModuleExports, s as ModuleState, t as defineModule, u as resolveContribution, v as collectModuleWorkflows } from "../index-DCxxRwLC.mjs";
4
- import { c as ResolvedResourceDescriptor, l as describeResolvedModule, o as ResolvedModuleDescriptor, s as ResolvedModuleLifecycle } from "../fastify-augmentation-CRsNNhuo.mjs";
5
- import { a as RawBodyOptions, c as BetterAuthOption, d as JwtAuthOption, i as MultipartOptions, l as CustomAuthenticatorOption, n as preloadResourcesAsync, o as UnderPressureOptions, r as CreateAppOptions, s as AuthOption, t as preloadResources, u as CustomPluginAuthOption } from "../preloadResources-DHkyk3QN.mjs";
2
+ import { _ as HealthCheck, a as ModuleContribution, c as LoadResourcesOptions, d as loadResources, i as EventHandlerDefinition, l as ResourceLike, n as ArcModuleInput, o as ModuleDisposer, r as ArcModuleRegistry, s as ModuleSetupContext, t as ArcModule, u as ResourceModule } from "../types-BRU-Kd3t.mjs";
3
+ import { _ as collectModuleScheduledJobs, a as lazyModuleExports, c as getModuleState, d as resolveModule, f as orderModules, g as collectModuleHealthChecks, h as extendModule, i as hasModuleExports, l as hasModule, m as ModuleExtension, n as getModuleExports, o as lazyRequiredModuleExports, p as subscribeModuleEventHandlers, r as getOptionalModuleExports, s as ModuleState, t as defineModule, u as resolveContribution, v as collectModuleWorkflows } from "../index-D2uIUSQk.mjs";
4
+ import { c as ResolvedResourceDescriptor, l as describeResolvedModule, o as ResolvedModuleDescriptor, s as ResolvedModuleLifecycle } from "../fastify-augmentation-jYA2oHyL.mjs";
5
+ import { a as RawBodyOptions, c as BetterAuthOption, d as JwtAuthOption, i as MultipartOptions, l as CustomAuthenticatorOption, n as preloadResourcesAsync, o as UnderPressureOptions, r as CreateAppOptions, s as AuthOption, t as preloadResources, u as CustomPluginAuthOption } from "../preloadResources-BbBkNkqK.mjs";
6
6
  import { FastifyInstance, FastifyServerOptions } from "fastify";
7
7
  //#region src/factory/createApp.d.ts
8
8
  /**
@@ -1,8 +1,8 @@
1
- /*! @classytic/arc v2.37.1 | MIT | https://classytic.com */
2
- import { r as mergeHealthChecks, t as healthPlugin } from "../health-W_BjgWf0.mjs";
3
- import { S as resolveModule, _ as describeResolvedModule, a as createApp, b as collectModuleWorkflows, c as edgePreset, d as testingPreset, f as workerPreset, g as subscribeModuleEventHandlers, h as orderModules, i as DEFAULT_LOGGER_REDACT_PATHS, l as getPreset, m as hasModule, n as preloadResourcesAsync, p as getModuleState, r as ArcFactory, s as developmentPreset, t as preloadResources, u as productionPreset, v as collectModuleHealthChecks, x as resolveContribution, y as collectModuleScheduledJobs } from "../preloadResources-DJ7Lli0a.mjs";
4
- import { a as lazyModuleExports, i as hasModuleExports, n as getModuleExports, o as lazyRequiredModuleExports, r as getOptionalModuleExports, t as defineModule } from "../module-CNKk_twm.mjs";
5
- import { t as loadResources } from "../loadResources-ma-Aaxp1.mjs";
1
+ /*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
2
+ import { r as mergeHealthChecks, t as healthPlugin } from "../health-Bh0N_FLk.mjs";
3
+ import { S as resolveModule, _ as describeResolvedModule, a as createApp, b as collectModuleWorkflows, c as edgePreset, d as testingPreset, f as workerPreset, g as subscribeModuleEventHandlers, h as orderModules, i as DEFAULT_LOGGER_REDACT_PATHS, l as getPreset, m as hasModule, n as preloadResourcesAsync, p as getModuleState, r as ArcFactory, s as developmentPreset, t as preloadResources, u as productionPreset, v as collectModuleHealthChecks, x as resolveContribution, y as collectModuleScheduledJobs } from "../preloadResources-DlhH81py.mjs";
4
+ import { a as lazyModuleExports, i as hasModuleExports, n as getModuleExports, o as lazyRequiredModuleExports, r as getOptionalModuleExports, t as defineModule } from "../module-BQXHxMEk.mjs";
5
+ import { t as loadResources } from "../loadResources-CNd1DWnK.mjs";
6
6
  //#region src/factory/module/extend.ts
7
7
  /** Concatenate two contributions, resolving factories only when arc asks. */
8
8
  function mergeContribution(own, extra) {
@@ -1,8 +1,8 @@
1
1
 
2
- import { on as HookSystem, z as ResourceRegistry } from "./index-BqRfP1kT.mjs";
2
+ import { on as HookSystem, z as ResourceRegistry } from "./index-B78WZom8.mjs";
3
3
  import { t as ExternalOpenApiPaths } from "./externalPaths-CmGOxOtD.mjs";
4
- import { _ as HealthCheck, f as ScheduleDefinition, r as ArcModuleRegistry, t as ArcModule } from "./types-BMa2EPtv.mjs";
5
- import { s as ModuleState } from "./index-DCxxRwLC.mjs";
4
+ import { _ as HealthCheck, f as ScheduleDefinition, r as ArcModuleRegistry, t as ArcModule } from "./types-BRU-Kd3t.mjs";
5
+ import { s as ModuleState } from "./index-D2uIUSQk.mjs";
6
6
  import { FastifyPluginAsync } from "fastify";
7
7
  //#region src/factory/module/descriptor.d.ts
8
8
  /**
@@ -1,4 +1,4 @@
1
- /*! @classytic/arc v2.37.1 | MIT | https://classytic.com */
1
+ /*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
2
2
  //#region src/permissions/fields.ts
3
3
  /**
4
4
  * Field-Level Permissions
@@ -93,6 +93,41 @@ const fields = {
93
93
  }
94
94
  };
95
95
  /**
96
+ * Field permissions implied by `schemaOptions.fieldRules[x].hidden === true`.
97
+ *
98
+ * `hidden` is documented — in `fieldRulePredicates.ts` and in arc's own adapter
99
+ * tests ("must never appear in API", "never surfaced") — as meaning the field is
100
+ * not readable AT ALL. Every read surface honoured that except the one that
101
+ * matters most: the response body. `select=`, `_distinct` and aggregations were
102
+ * gated while a plain `GET /:id` returned the value, so a resource declaring
103
+ * `fieldRules: { secret: { hidden: true } }` shipped the secret in every payload
104
+ * and nothing said so.
105
+ *
106
+ * Deriving a `hidden()` PERMISSION here routes it through the single existing
107
+ * response stripper rather than adding a second one — two strippers is how the
108
+ * two halves drift apart again.
109
+ *
110
+ * An explicit `fields` entry WINS: it is the more specific statement about
111
+ * visibility, and silently overriding an operator's `visibleTo([...])` with a
112
+ * broad query-surface flag would be the general defeating the specific.
113
+ */
114
+ function deriveHiddenFieldPermissions(schemaOptions, explicit) {
115
+ const rules = schemaOptions?.fieldRules;
116
+ if (!rules) return explicit;
117
+ const derived = {};
118
+ let any = false;
119
+ for (const [name, rule] of Object.entries(rules)) {
120
+ if (rule?.hidden !== true) continue;
121
+ derived[name] = { _type: "hidden" };
122
+ any = true;
123
+ }
124
+ if (!any) return explicit;
125
+ return {
126
+ ...derived,
127
+ ...explicit ?? {}
128
+ };
129
+ }
130
+ /**
96
131
  * Apply field-level READ permissions to a response object.
97
132
  * Strips hidden fields, enforces visibility, and applies redaction.
98
133
  *
@@ -161,4 +196,4 @@ function resolveEffectiveRoles(userRoles, orgRoles) {
161
196
  return [.../* @__PURE__ */ new Set([...userRoles, ...orgRoles])];
162
197
  }
163
198
  //#endregion
164
- export { resolveEffectiveRoles as i, applyFieldWritePermissions as n, fields as r, applyFieldReadPermissions as t };
199
+ export { resolveEffectiveRoles as a, fields as i, applyFieldWritePermissions as n, deriveHiddenFieldPermissions as r, applyFieldReadPermissions as t };
@@ -1,5 +1,5 @@
1
- /*! @classytic/arc v2.37.1 | MIT | https://classytic.com */
2
- import { t as pluralize } from "./pluralize-BiU5ocWw.mjs";
1
+ /*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
2
+ import { t as pluralize } from "./pluralize-Da7IT_qJ.mjs";
3
3
  import { join } from "node:path";
4
4
  import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
5
5
  //#region src/cli/commands/generate/name-helpers.ts
@@ -1,5 +1,5 @@
1
- /*! @classytic/arc v2.37.1 | MIT | https://classytic.com */
2
- import { u as ValidationError } from "./errors-CbxCF9M0.mjs";
1
+ /*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
2
+ import { u as ValidationError } from "./errors-2ExmOgIJ.mjs";
3
3
  //#region src/utils/headers.ts
4
4
  /**
5
5
  * Canonical header typing + accessor.
@@ -1,4 +1,4 @@
1
- /*! @classytic/arc v2.37.1 | MIT | https://classytic.com */
1
+ /*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
2
2
  import { randomUUID } from "node:crypto";
3
3
  import fp from "fastify-plugin";
4
4
  //#region src/plugins/requestId.ts
@@ -1,3 +1,3 @@
1
1
 
2
- import { an as HookRegistration, cn as afterCreate, dn as beforeCreate, en as DefineHookOptions, fn as beforeDelete, hn as defineHook, in as HookPhase, ln as afterDelete, mn as createHookSystem, nn as HookHandler, on as HookSystem, pn as beforeUpdate, rn as HookOperation, sn as HookSystemOptions, tn as HookContext, un as afterUpdate } from "../index-BqRfP1kT.mjs";
2
+ import { an as HookRegistration, cn as afterCreate, dn as beforeCreate, en as DefineHookOptions, fn as beforeDelete, hn as defineHook, in as HookPhase, ln as afterDelete, mn as createHookSystem, nn as HookHandler, on as HookSystem, pn as beforeUpdate, rn as HookOperation, sn as HookSystemOptions, tn as HookContext, un as afterUpdate } from "../index-B78WZom8.mjs";
3
3
  export { type DefineHookOptions, type HookContext, type HookHandler, type HookOperation, type HookPhase, type HookRegistration, HookSystem, type HookSystemOptions, afterCreate, afterDelete, afterUpdate, beforeCreate, beforeDelete, beforeUpdate, createHookSystem, defineHook };
@@ -1,3 +1,3 @@
1
- /*! @classytic/arc v2.37.1 | MIT | https://classytic.com */
2
- import { a as beforeCreate, c as createHookSystem, i as afterUpdate, l as defineHook, n as afterCreate, o as beforeDelete, r as afterDelete, s as beforeUpdate, t as HookSystem } from "../HookSystem-Csy31WS-.mjs";
1
+ /*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
2
+ import { a as beforeCreate, c as createHookSystem, i as afterUpdate, l as defineHook, n as afterCreate, o as beforeDelete, r as afterDelete, s as beforeUpdate, t as HookSystem } from "../HookSystem-C0ikzqQf.mjs";
3
3
  export { HookSystem, afterCreate, afterDelete, afterUpdate, beforeCreate, beforeDelete, beforeUpdate, createHookSystem, defineHook };
@@ -1,7 +1,7 @@
1
- /*! @classytic/arc v2.37.1 | MIT | https://classytic.com */
2
- import { n as requireSingleHeaderValue } from "../headers-DivLPMHe.mjs";
3
- import { n as createSafeGetOne, t as createIsDuplicateKeyError } from "../store-helpers-C1r3-6M0.mjs";
4
- import { t as createIdempotencyResult } from "../interface-DeLndJ8G.mjs";
1
+ /*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
2
+ import { n as requireSingleHeaderValue } from "../headers-DeXNifVj.mjs";
3
+ import { n as createSafeGetOne, t as createIsDuplicateKeyError } from "../store-helpers-CIF4RG8s.mjs";
4
+ import { t as createIdempotencyResult } from "../interface-DYPVscCU.mjs";
5
5
  import { and, eq, exists, gt, lt, or, startsWith } from "@classytic/repo-core/filter";
6
6
  import { createHash } from "node:crypto";
7
7
  import fp from "fastify-plugin";
@@ -1,4 +1,4 @@
1
- /*! @classytic/arc v2.37.1 | MIT | https://classytic.com */
1
+ /*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
2
2
  //#region src/idempotency/stores/redis.ts
3
3
  var RedisIdempotencyStore = class {
4
4
  name = "redis";
@@ -5,7 +5,7 @@ import { a as QueryCacheConfig } from "./QueryCache-DFA-QrU9.mjs";
5
5
  import "./elevation-BXCfVcNG.mjs";
6
6
  import { n as FieldPermissionMap } from "./fields-I_EeRWND.mjs";
7
7
  import { n as EncryptionDirective } from "./types-ByHn9rEO.mjs";
8
- import { n as DomainEvent } from "./EventTransport-BEVP50ka.mjs";
8
+ import { n as DomainEvent } from "./EventTransport-Cx60_s-6.mjs";
9
9
  import { Filter } from "@classytic/repo-core/filter";
10
10
  import { AggDateBucket, AggMeasure, AggTopN, QueryOptions, StandardRepo, TenantPurgeStrategy, TransactionHandle } from "@classytic/repo-core/repository";
11
11
  import { KeysetPaginationResult, OffsetPaginationResult } from "@classytic/repo-core/pagination";
@@ -1,8 +1,8 @@
1
1
 
2
2
  import { i as RequestScope } from "./types-Ddl9OjmE.mjs";
3
3
  import { l as PermissionCheck, t as AnyRecord } from "./base-C-NL2fTi.mjs";
4
- import { C as RequestContext, Et as ActionDefinition, F as FastifyWithDecorators, Fn as IControllerResponse, H as CrudController, In as IRequestContext, L as RequestWithExtras, Pn as IController, T as CrudRouterOptions, U as ResourceConfig, V as ResourceDefinition, et as RouteSchemaOptions, jt as RouteMcpConfig, tt as ArcFieldRule, ut as AggregationConfig } from "./index-BqRfP1kT.mjs";
5
- import "./fastify-augmentation-CRsNNhuo.mjs";
4
+ import { C as RequestContext, Et as ActionDefinition, F as FastifyWithDecorators, Fn as IControllerResponse, H as CrudController, In as IRequestContext, L as RequestWithExtras, Pn as IController, T as CrudRouterOptions, U as ResourceConfig, V as ResourceDefinition, et as RouteSchemaOptions, jt as RouteMcpConfig, tt as ArcFieldRule, ut as AggregationConfig } from "./index-B78WZom8.mjs";
5
+ import "./fastify-augmentation-jYA2oHyL.mjs";
6
6
  import { Filter } from "@classytic/repo-core/filter";
7
7
  import { FastifyReply, FastifyRequest, RouteHandlerMethod } from "fastify";
8
8
  import { z } from "zod";
@@ -1,5 +1,5 @@
1
1
 
2
- import { _ as HealthCheck, a as ModuleContribution, f as ScheduleDefinition, n as ArcModuleInput, r as ArcModuleRegistry, s as ModuleSetupContext, t as ArcModule } from "./types-BMa2EPtv.mjs";
2
+ import { _ as HealthCheck, a as ModuleContribution, f as ScheduleDefinition, n as ArcModuleInput, r as ArcModuleRegistry, s as ModuleSetupContext, t as ArcModule } from "./types-BRU-Kd3t.mjs";
3
3
  import { FastifyInstance } from "fastify";
4
4
  //#region src/factory/module/contributions.d.ts
5
5
  /**
package/dist/index.d.mts CHANGED
@@ -1,9 +1,9 @@
1
1
 
2
2
  import { c as DataPolicy, d as UserBase, l as PermissionCheck, n as ArcRequest, o as UserOrganization, r as JWTPayload, s as AuthorizationDecision, t as AnyRecord, u as PermissionContext } from "./base-C-NL2fTi.mjs";
3
- import { A as RequestIdOptions, An as WriteVerbKey, B as defineResource, Bt as BaseController, C as RequestContext, Cn as ControllerConstructionOptions, D as HealthCheck, Dn as MutationWriteContext, E as GracefulShutdownOptions, F as FastifyWithDecorators, Fn as IControllerResponse, Ft as AuthPluginOptions, Gt as SlugExt, H as CrudController, Ht as SoftDeleteMixin, In as IRequestContext, Jt as BulkMixin, Kt as SlugMixin, L as RequestWithExtras, Ln as RawRouteHandler, Mn as ControllerLike, N as FastifyRequestExtras, Nt as RateLimitConfig, O as HealthOptions, On as ResourceWrites, P as FastifyWithAuth, Pn as IController, Q as MiddlewareConfig, Rn as RouteHandler, S as QueryParserInterface, Sn as ControllerConfigurableOptions, T as CrudRouterOptions, U as ResourceConfig, Ut as TreeExt, V as ResourceDefinition, Vt as SoftDeleteExt, Wt as TreeMixin, X as CrudRouteKey, Y as PresetResult, Yt as BaseCrudController, Z as CrudSchemas, _n as ArcDeleteResult, a as InferAdapterDoc, bn as ArcUpdateResult, c as TypedController, ct as AggMeasureShorthand, d as PaginationResult, dt as AggregationDateRangeRequirement, et as RouteSchemaOptions, f as IntrospectionData, ft as AggregationIndexHint, g as ArcInternalMetadata, gn as ArcCreateResult, gt as AggregationsMap, h as ResourceMetadata, ht as AggregationRateLimit, i as ValidationResult, k as IntrospectionPluginOptions, kn as WriteContext, l as TypedRepository, lt as AggregationCacheConfig, m as RegistryStats, mt as AggregationMaterializedResult, n as ConfigError, nt as FieldRule, o as InferDocType, ot as EventDefinition, p as RegistryEntry, pt as AggregationMaterializedContext, q as PresetFunction, qt as BulkExt, r as ValidateOptions, s as InferResourceDoc, st as AggMeasureInput, t as RouteHandlerMethod, u as TypedResourceConfig, ut as AggregationConfig, vn as ArcGetResult, w as ServiceContext, wn as ListResult, xn as BaseControllerOptions, y as OwnershipCheck, yn as ArcListResult } from "./index-BqRfP1kT.mjs";
3
+ import { A as RequestIdOptions, An as WriteVerbKey, B as defineResource, Bt as BaseController, C as RequestContext, Cn as ControllerConstructionOptions, D as HealthCheck, Dn as MutationWriteContext, E as GracefulShutdownOptions, F as FastifyWithDecorators, Fn as IControllerResponse, Ft as AuthPluginOptions, Gt as SlugExt, H as CrudController, Ht as SoftDeleteMixin, In as IRequestContext, Jt as BulkMixin, Kt as SlugMixin, L as RequestWithExtras, Ln as RawRouteHandler, Mn as ControllerLike, N as FastifyRequestExtras, Nt as RateLimitConfig, O as HealthOptions, On as ResourceWrites, P as FastifyWithAuth, Pn as IController, Q as MiddlewareConfig, Rn as RouteHandler, S as QueryParserInterface, Sn as ControllerConfigurableOptions, T as CrudRouterOptions, U as ResourceConfig, Ut as TreeExt, V as ResourceDefinition, Vt as SoftDeleteExt, Wt as TreeMixin, X as CrudRouteKey, Y as PresetResult, Yt as BaseCrudController, Z as CrudSchemas, _n as ArcDeleteResult, a as InferAdapterDoc, bn as ArcUpdateResult, c as TypedController, ct as AggMeasureShorthand, d as PaginationResult, dt as AggregationDateRangeRequirement, et as RouteSchemaOptions, f as IntrospectionData, ft as AggregationIndexHint, g as ArcInternalMetadata, gn as ArcCreateResult, gt as AggregationsMap, h as ResourceMetadata, ht as AggregationRateLimit, i as ValidationResult, k as IntrospectionPluginOptions, kn as WriteContext, l as TypedRepository, lt as AggregationCacheConfig, m as RegistryStats, mt as AggregationMaterializedResult, n as ConfigError, nt as FieldRule, o as InferDocType, ot as EventDefinition, p as RegistryEntry, pt as AggregationMaterializedContext, q as PresetFunction, qt as BulkExt, r as ValidateOptions, s as InferResourceDoc, st as AggMeasureInput, t as RouteHandlerMethod, u as TypedResourceConfig, ut as AggregationConfig, vn as ArcGetResult, w as ServiceContext, wn as ListResult, xn as BaseControllerOptions, y as OwnershipCheck, yn as ArcListResult } from "./index-B78WZom8.mjs";
4
4
  import { a as applyFieldWritePermissions, i as applyFieldReadPermissions, n as FieldPermissionMap, o as fields, t as FieldPermission } from "./fields-I_EeRWND.mjs";
5
- import "./fastify-augmentation-CRsNNhuo.mjs";
6
- import { A as CRUD_OPERATIONS, B as HookOperation, C as SeamedResourceConfig, E as defineAction, F as DEFAULT_SORT, G as MUTATION_OPERATIONS, H as MAX_FILTER_DEPTH, I as DEFAULT_TENANT_FIELD, J as SYSTEM_FIELDS, K as MutationOperation, L as DEFAULT_UPDATE_METHOD, M as DEFAULT_ID_FIELD, N as DEFAULT_LIMIT, P as DEFAULT_MAX_LIMIT, R as HOOK_OPERATIONS, S as ResourceSeams, U as MAX_REGEX_LENGTH, V as HookPhase, W as MAX_SEARCH_LENGTH, b as defineResourceVariants, c as nativePolicyFilter, h as getControllerScope, j as CrudOperation, k as defineAggregation, q as RESERVED_QUERY_PARAMS, s as NativePolicyFilter, w as mergeResourceConfig, x as AdapterLike, z as HOOK_PHASES } from "./index-CEmPspAB.mjs";
5
+ import "./fastify-augmentation-jYA2oHyL.mjs";
6
+ import { A as CRUD_OPERATIONS, B as HookOperation, C as SeamedResourceConfig, E as defineAction, F as DEFAULT_SORT, G as MUTATION_OPERATIONS, H as MAX_FILTER_DEPTH, I as DEFAULT_TENANT_FIELD, J as SYSTEM_FIELDS, K as MutationOperation, L as DEFAULT_UPDATE_METHOD, M as DEFAULT_ID_FIELD, N as DEFAULT_LIMIT, P as DEFAULT_MAX_LIMIT, R as HOOK_OPERATIONS, S as ResourceSeams, U as MAX_REGEX_LENGTH, V as HookPhase, W as MAX_SEARCH_LENGTH, b as defineResourceVariants, c as nativePolicyFilter, h as getControllerScope, j as CrudOperation, k as defineAggregation, q as RESERVED_QUERY_PARAMS, s as NativePolicyFilter, w as mergeResourceConfig, x as AdapterLike, z as HOOK_PHASES } from "./index-BRoDtjek.mjs";
7
7
  import { $ as requireAuth, C as requireServiceScope, G as createOrgPermissions, H as DynamicPermissionMatrixConfig, J as allowPublic, K as allOf, S as requireScopeContext, V as DynamicPermissionMatrix, W as createDynamicPermissionMatrix, Y as anyOf, Z as denyAll, _ as publicReadAdminWrite, b as requireOrgMembership, d as authenticated, et as requireOwnership, f as fullPublic, g as publicRead, h as presets_d_exports, it as when, nt as requireRoles, p as ownerWithAdminBypass, u as adminOnly, v as readOnly, w as requireTeamMembership, x as requireOrgRole, y as requireOrgInScope } from "./index-BtYoMip1.mjs";
8
8
  import { a as NotFoundError, d as ValidationError, f as createDomainError, i as ForbiddenError, t as ArcError, u as UnauthorizedError } from "./errors-BGdVwP25.mjs";
9
9
  //#region src/index.d.ts
package/dist/index.mjs CHANGED
@@ -1,14 +1,14 @@
1
- /*! @classytic/arc v2.37.1 | MIT | https://classytic.com */
2
- import { a as DEFAULT_SORT, c as HOOK_OPERATIONS, d as MAX_REGEX_LENGTH, f as MAX_SEARCH_LENGTH, h as SYSTEM_FIELDS, i as DEFAULT_MAX_LIMIT, l as HOOK_PHASES, m as RESERVED_QUERY_PARAMS, n as DEFAULT_ID_FIELD, o as DEFAULT_TENANT_FIELD, p as MUTATION_OPERATIONS, r as DEFAULT_LIMIT, s as DEFAULT_UPDATE_METHOD, t as CRUD_OPERATIONS, u as MAX_FILTER_DEPTH } from "./constants-DDKf25s4.mjs";
3
- import { d as createDomainError, i as NotFoundError, l as UnauthorizedError, r as ForbiddenError, t as ArcError, u as ValidationError } from "./errors-CbxCF9M0.mjs";
4
- import { a as BulkMixin, h as nativePolicyFilter, i as SlugMixin, n as TreeMixin, o as BaseCrudController, r as SoftDeleteMixin, t as BaseController } from "./BaseController-Chkf0Aiw.mjs";
5
- import { t as defineAggregation } from "./defineAggregation-B1m-45Fe.mjs";
6
- import { n as applyFieldWritePermissions, r as fields, t as applyFieldReadPermissions } from "./fields-f_MdWDl_.mjs";
7
- import { l as getControllerScope } from "./actionPermissions-DGGqqSIV.mjs";
8
- import { a as ResourceDefinition, t as defineResource } from "./defineResource-DS3Uj2-8.mjs";
9
- import { a as mergeResourceConfig, i as defineResourceVariants, o as defineAction } from "./core-uHQonaHf.mjs";
10
- import { B as requireAuth, C as createOrgPermissions, D as requireScopeContext, E as requireOrgRole, F as allowPublic, G as when, I as anyOf, N as allOf, O as requireServiceScope, R as denyAll, S as createDynamicPermissionMatrix, T as requireOrgMembership, U as requireRoles, V as requireOwnership, a as adminOnly, c as ownerWithAdminBypass, d as publicRead, f as publicReadAdminWrite, k as requireTeamMembership, o as authenticated, p as readOnly, s as fullPublic, u as presets_exports, w as requireOrgInScope } from "./permissions-DnAc6zoZ.mjs";
1
+ /*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
2
+ import { a as DEFAULT_SORT, c as HOOK_OPERATIONS, d as MAX_REGEX_LENGTH, f as MAX_SEARCH_LENGTH, h as SYSTEM_FIELDS, i as DEFAULT_MAX_LIMIT, l as HOOK_PHASES, m as RESERVED_QUERY_PARAMS, n as DEFAULT_ID_FIELD, o as DEFAULT_TENANT_FIELD, p as MUTATION_OPERATIONS, r as DEFAULT_LIMIT, s as DEFAULT_UPDATE_METHOD, t as CRUD_OPERATIONS, u as MAX_FILTER_DEPTH } from "./constants-BONghE1Y.mjs";
3
+ import { d as createDomainError, i as NotFoundError, l as UnauthorizedError, r as ForbiddenError, t as ArcError, u as ValidationError } from "./errors-2ExmOgIJ.mjs";
4
+ import { a as BulkMixin, h as nativePolicyFilter, i as SlugMixin, n as TreeMixin, o as BaseCrudController, r as SoftDeleteMixin, t as BaseController } from "./BaseController-CYaDvmOB.mjs";
5
+ import { t as defineAggregation } from "./defineAggregation-0KBvqEEC.mjs";
6
+ import { i as fields, n as applyFieldWritePermissions, t as applyFieldReadPermissions } from "./fields-Cha2QCKH.mjs";
7
+ import { l as getControllerScope } from "./actionPermissions-jlFZ1it4.mjs";
8
+ import { a as ResourceDefinition, t as defineResource } from "./defineResource-BMdyRelW.mjs";
9
+ import { a as mergeResourceConfig, i as defineResourceVariants, o as defineAction } from "./core-8She7FgF.mjs";
10
+ import { B as requireAuth, C as createOrgPermissions, D as requireScopeContext, E as requireOrgRole, F as allowPublic, G as when, I as anyOf, N as allOf, O as requireServiceScope, R as denyAll, S as createDynamicPermissionMatrix, T as requireOrgMembership, U as requireRoles, V as requireOwnership, a as adminOnly, c as ownerWithAdminBypass, d as publicRead, f as publicReadAdminWrite, k as requireTeamMembership, o as authenticated, p as readOnly, s as fullPublic, u as presets_exports, w as requireOrgInScope } from "./permissions-H7Zcb82Z.mjs";
11
11
  //#region src/index.ts
12
- const version = "2.37.1";
12
+ const version = "2.38.0";
13
13
  //#endregion
14
14
  export { ArcError, BaseController, BaseCrudController, BulkMixin, CRUD_OPERATIONS, DEFAULT_ID_FIELD, DEFAULT_LIMIT, DEFAULT_MAX_LIMIT, DEFAULT_SORT, DEFAULT_TENANT_FIELD, DEFAULT_UPDATE_METHOD, ForbiddenError, HOOK_OPERATIONS, HOOK_PHASES, MAX_FILTER_DEPTH, MAX_REGEX_LENGTH, MAX_SEARCH_LENGTH, MUTATION_OPERATIONS, NotFoundError, RESERVED_QUERY_PARAMS, ResourceDefinition, SYSTEM_FIELDS, SlugMixin, SoftDeleteMixin, TreeMixin, UnauthorizedError, ValidationError, adminOnly, allOf, allowPublic, anyOf, applyFieldReadPermissions, applyFieldWritePermissions, authenticated, createDomainError, createDynamicPermissionMatrix, createOrgPermissions, defineAction, defineAggregation, defineResource, defineResourceVariants, denyAll, fields, fullPublic, getControllerScope, mergeResourceConfig, nativePolicyFilter, ownerWithAdminBypass, presets_exports as permissions, publicRead, publicReadAdminWrite, readOnly, requireAuth, requireOrgInScope, requireOrgMembership, requireOrgRole, requireOwnership, requireRoles, requireScopeContext, requireServiceScope, requireTeamMembership, version, when };
@@ -1,4 +1,4 @@
1
- /*! @classytic/arc v2.37.1 | MIT | https://classytic.com */
1
+ /*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
2
2
  import * as fs from "node:fs/promises";
3
3
  import * as path from "node:path";
4
4
  import { dirname, join } from "node:path";
@@ -1,5 +1,5 @@
1
1
 
2
- import { n as DomainEvent } from "../EventTransport-BEVP50ka.mjs";
2
+ import { n as DomainEvent } from "../EventTransport-Cx60_s-6.mjs";
3
3
  import { c as WebSocketClient, l as WebSocketMessage } from "../websocket-BOXVggMf.mjs";
4
4
  import { FastifyPluginAsync, FastifyRequest } from "fastify";
5
5
  //#region src/integrations/event-gateway.d.ts
@@ -1,11 +1,11 @@
1
- /*! @classytic/arc v2.37.1 | MIT | https://classytic.com */
1
+ /*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
2
2
  import fp from "fastify-plugin";
3
3
  //#region src/integrations/event-gateway.ts
4
4
  const eventGatewayPluginImpl = async (fastify, opts = {}) => {
5
5
  const { auth = true, orgScoped = false, roomPolicy, maxMessageBytes, maxSubscriptionsPerClient, authenticate } = opts;
6
6
  if (auth && !authenticate && !fastify.hasDecorator("authenticate")) throw new Error("[arc-event-gateway] auth is true but fastify.authenticate is not registered. Register an auth plugin first, provide a custom authenticate function, or set auth: false.");
7
7
  if (opts.sse !== false) {
8
- const { default: ssePlugin } = await import("../sse-BmZCVRGH.mjs").then((n) => n.r);
8
+ const { default: ssePlugin } = await import("../sse-D4MYqkic.mjs").then((n) => n.r);
9
9
  await fastify.register(ssePlugin, {
10
10
  path: opts.sse?.path ?? "/events/stream",
11
11
  requireAuth: auth,
@@ -2,7 +2,7 @@
2
2
  import { c as WebSocketClient, l as WebSocketMessage, u as WebSocketPluginOptions } from "../websocket-BOXVggMf.mjs";
3
3
  import { EventGatewayOptions } from "./event-gateway.mjs";
4
4
  import { a as JobMeta, c as JobsPluginOptions, i as JobDispatcher, l as QueueStats, n as JobDefinition, r as JobDispatchOptions } from "../index-eyg5WEcy.mjs";
5
- import { _ as ToolDefinition, c as McpAuthResult, d as McpResourceConfig, f as PromptDefinition, g as ToolContext, h as ToolAnnotations, n as CallToolResult, o as CrudOperation, r as CreateMcpServerConfig, t as BetterAuthHandler, u as McpPluginOptions } from "../types-rzNprqbE.mjs";
5
+ import { _ as ToolDefinition, c as McpAuthResult, d as McpResourceConfig, f as PromptDefinition, g as ToolContext, h as ToolAnnotations, n as CallToolResult, o as CrudOperation, r as CreateMcpServerConfig, t as BetterAuthHandler, u as McpPluginOptions } from "../types-LQFwC37d.mjs";
6
6
  import { StreamlinePluginOptions, WorkflowLike, WorkflowRunLike } from "./streamline.mjs";
7
7
  import { WebhookDeliveryRecord, WebhookManager, WebhookPluginOptions, WebhookStore, WebhookSubscription } from "./webhooks.mjs";
8
8
  export type { BetterAuthHandler, CallToolResult, CreateMcpServerConfig, CrudOperation, EventGatewayOptions, JobDefinition, JobDispatchOptions, JobDispatcher, JobMeta, JobsPluginOptions, McpAuthResult, McpPluginOptions, McpResourceConfig, PromptDefinition, QueueStats, StreamlinePluginOptions, ToolAnnotations, ToolContext, ToolDefinition, WebSocketClient, WebSocketMessage, WebSocketPluginOptions, WebhookDeliveryRecord, WebhookManager, WebhookPluginOptions, WebhookStore, WebhookSubscription, WorkflowLike, WorkflowRunLike };
@@ -1,2 +1,2 @@
1
- /*! @classytic/arc v2.37.1 | MIT | https://classytic.com */
1
+ /*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
2
2
  export {};
@@ -1,5 +1,5 @@
1
- /*! @classytic/arc v2.37.1 | MIT | https://classytic.com */
2
- import { n as evaluateAndApplyPermission } from "../../authorizationDecision-BzZi2bsf.mjs";
1
+ /*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
2
+ import { n as evaluateAndApplyPermission } from "../../authorizationDecision-BP8GHtjc.mjs";
3
3
  import fp from "fastify-plugin";
4
4
  //#region src/integrations/jobs/execution.ts
5
5
  async function executeTimedHandler(options) {
@@ -1,9 +1,9 @@
1
1
 
2
2
  import { i as RequestScope } from "../../types-Ddl9OjmE.mjs";
3
3
  import { l as PermissionCheck } from "../../base-C-NL2fTi.mjs";
4
- import { Fn as IControllerResponse, In as IRequestContext, V as ResourceDefinition, zn as ServerAccessor } from "../../index-BqRfP1kT.mjs";
4
+ import { Fn as IControllerResponse, In as IRequestContext, V as ResourceDefinition, zn as ServerAccessor } from "../../index-B78WZom8.mjs";
5
5
  import { n as FieldPermissionMap } from "../../fields-I_EeRWND.mjs";
6
- import { _ as ToolDefinition, a as CrudDescriptionOverride, c as McpAuthResult, d as McpResourceConfig, f as PromptDefinition, g as ToolContext, h as ToolAnnotations, i as CrudDescriptionMeta, l as McpExecutionWiring, m as SessionEntry, n as CallToolResult, o as CrudOperation, p as PromptResult, r as CreateMcpServerConfig, s as McpAuthResolver, t as BetterAuthHandler, u as McpPluginOptions } from "../../types-rzNprqbE.mjs";
6
+ import { _ as ToolDefinition, a as CrudDescriptionOverride, c as McpAuthResult, d as McpResourceConfig, f as PromptDefinition, g as ToolContext, h as ToolAnnotations, i as CrudDescriptionMeta, l as McpExecutionWiring, m as SessionEntry, n as CallToolResult, o as CrudOperation, p as PromptResult, r as CreateMcpServerConfig, s as McpAuthResolver, t as BetterAuthHandler, u as McpPluginOptions } from "../../types-LQFwC37d.mjs";
7
7
  import { ErrorContract } from "@classytic/repo-core/errors";
8
8
  import { FastifyPluginAsync } from "fastify";
9
9
  import { z } from "zod";
@@ -1,5 +1,5 @@
1
- /*! @classytic/arc v2.37.1 | MIT | https://classytic.com */
2
- import { a as defaultCrudDescription, c as mcpHandlerAdapter, d as toCallToolResult, f as toCallToolSuccess, h as resolveToolCollisions, i as fieldRulesToZod, l as permissionDeniedResult, m as createMcpServer, n as mcpPlugin, o as resolveCrudDescription, p as buildRequestContext, r as resourceToTools, s as invokeController, t as filterResourcesForMcp, u as toCallToolError } from "../../mcpPlugin-97HuFA46.mjs";
1
+ /*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
2
+ import { a as defaultCrudDescription, c as mcpHandlerAdapter, d as toCallToolResult, f as toCallToolSuccess, h as resolveToolCollisions, i as fieldRulesToZod, l as permissionDeniedResult, m as createMcpServer, n as mcpPlugin, o as resolveCrudDescription, p as buildRequestContext, r as resourceToTools, s as invokeController, t as filterResourcesForMcp, u as toCallToolError } from "../../mcpPlugin-KWsezMx7.mjs";
3
3
  //#region src/integrations/mcp/defineTool.ts
4
4
  /**
5
5
  * Define a type-safe MCP tool.
@@ -1,5 +1,5 @@
1
1
 
2
- import { c as McpAuthResult, u as McpPluginOptions } from "../../types-rzNprqbE.mjs";
2
+ import { c as McpAuthResult, u as McpPluginOptions } from "../../types-LQFwC37d.mjs";
3
3
  //#region src/integrations/mcp/testing.d.ts
4
4
  interface TestMcpClientOptions {
5
5
  /** MCP plugin options (resources, overrides, etc.) — same as mcpPlugin config */
@@ -1,5 +1,5 @@
1
- /*! @classytic/arc v2.37.1 | MIT | https://classytic.com */
2
- import { m as createMcpServer, r as resourceToTools, t as filterResourcesForMcp } from "../../mcpPlugin-97HuFA46.mjs";
1
+ /*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
2
+ import { m as createMcpServer, r as resourceToTools, t as filterResourcesForMcp } from "../../mcpPlugin-KWsezMx7.mjs";
3
3
  //#region src/integrations/mcp/testing.ts
4
4
  /**
5
5
  * @classytic/arc/mcp/testing — MCP Test Utilities
@@ -1,6 +1,6 @@
1
- /*! @classytic/arc v2.37.1 | MIT | https://classytic.com */
2
- import { f as createError, i as NotFoundError, r as ForbiddenError } from "../errors-CbxCF9M0.mjs";
3
- import { a as promoteStreamTokenToHeader, n as forwardedStreamHeaders } from "../streaming-BxZDlH01.mjs";
1
+ /*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
2
+ import { f as createError, i as NotFoundError, r as ForbiddenError } from "../errors-2ExmOgIJ.mjs";
3
+ import { a as promoteStreamTokenToHeader, n as forwardedStreamHeaders } from "../streaming-DkpW1HwJ.mjs";
4
4
  import fp from "fastify-plugin";
5
5
  //#region src/integrations/streamline.ts
6
6
  /**
@@ -1,6 +1,6 @@
1
1
 
2
- import { a as EventTransport, n as DomainEvent } from "../EventTransport-BEVP50ka.mjs";
3
- import { n as OutboxModuleOptions, r as createOutboxModule } from "../outbox-module-BbdaMyqy.mjs";
2
+ import { a as EventTransport, n as DomainEvent } from "../EventTransport-Cx60_s-6.mjs";
3
+ import { n as OutboxModuleOptions, r as createOutboxModule } from "../outbox-module-CQXu_O6o.mjs";
4
4
  import { FastifyPluginAsync } from "fastify";
5
5
  import { OutboxFailurePolicy, OutboxStore } from "@classytic/primitives/outbox";
6
6
  //#region src/integrations/webhooks.d.ts
@@ -1,6 +1,6 @@
1
- /*! @classytic/arc v2.37.1 | MIT | https://classytic.com */
2
- import { n as declareRuntimeCapability } from "../runtimeCapabilities-OrGatf7r.mjs";
3
- import { i as exponentialBackoff, t as createOutboxModule } from "../outbox-module-DOAmyXOb.mjs";
1
+ /*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
2
+ import { n as declareRuntimeCapability } from "../runtimeCapabilities-D793Pxci.mjs";
3
+ import { i as exponentialBackoff, t as createOutboxModule } from "../outbox-module-DyIqA5vo.mjs";
4
4
  import { createHmac, timingSafeEqual } from "node:crypto";
5
5
  import fp from "fastify-plugin";
6
6
  import { createChildEvent } from "@classytic/primitives/events";
@@ -1,4 +1,4 @@
1
- /*! @classytic/arc v2.37.1 | MIT | https://classytic.com */
1
+ /*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
2
2
  //#region src/integrations/websocket-pushref-redis.ts
3
3
  /**
4
4
  * Lua script for atomic claim. Runs server-side, single-roundtrip.
@@ -1,4 +1,4 @@
1
- /*! @classytic/arc v2.37.1 | MIT | https://classytic.com */
1
+ /*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
2
2
  //#region src/integrations/websocket-redis.ts
3
3
  /**
4
4
  * Redis Pub/Sub adapter for cross-instance WebSocket broadcast.
@@ -1,4 +1,4 @@
1
- /*! @classytic/arc v2.37.1 | MIT | https://classytic.com */
1
+ /*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
2
2
  import { randomUUID } from "node:crypto";
3
3
  import sjson from "secure-json-parse";
4
4
  import fp from "fastify-plugin";
@@ -1,4 +1,4 @@
1
- /*! @classytic/arc v2.37.1 | MIT | https://classytic.com */
1
+ /*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
2
2
  //#region src/idempotency/stores/interface.ts
3
3
  /**
4
4
  * Helper to create a result object
@@ -1,5 +1,5 @@
1
- /*! @classytic/arc v2.37.1 | MIT | https://classytic.com */
2
- import { t as ArcError } from "./errors-CbxCF9M0.mjs";
1
+ /*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
2
+ import { t as ArcError } from "./errors-2ExmOgIJ.mjs";
3
3
  import sjson from "secure-json-parse";
4
4
  //#region src/utils/jsonBody.ts
5
5
  /**
@@ -1,4 +1,4 @@
1
- /*! @classytic/arc v2.37.1 | MIT | https://classytic.com */
1
+ /*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
2
2
  //#region src/cache/keys.ts
3
3
  /**
4
4
  * Cache Key Utilities