@classytic/arc 2.37.1 → 2.38.0

package/dist/{projection-CRCM5S9T.mjs → projection-DSfEoooA.mjs}

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.37.1 | MIT | https://classytic.com */
-import { c as getOrgId, f as getScopeContextMap, g as getUserId, m as getTeamId, x as isMember } from "./types-khJmBErP.mjs";
+/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+import { c as getOrgId, f as getScopeContextMap, g as getUserId, m as getTeamId, x as isMember } from "./types-BqLyyH0o.mjs";
 //#region src/scope/projection.ts
 /**
 * Compute the request-scope projection. Returns `undefined` when no

package/dist/{queryCachePlugin-Cl3zLG7g.mjs → queryCachePlugin-oTsmVyEQ.mjs}

@@ -1,8 +1,8 @@
-/*! @classytic/arc v2.37.1 | MIT | https://classytic.com */
-import { t as __exportAll } from "./rolldown-runtime-NVzJrC-o.mjs";
-import { i as versionKey, r as tagVersionKey } from "./keys-B1MgfDWi.mjs";
-import { t as hasEvents } from "./typeGuards-BrXgbFi-.mjs";
-import { t as MemoryCacheStore } from "./memory-DvASzOn3.mjs";
+/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+import { t as __exportAll } from "./rolldown-runtime-Add2L50I.mjs";
+import { i as versionKey, r as tagVersionKey } from "./keys-BSuxGS-B.mjs";
+import { t as hasEvents } from "./typeGuards-DHTnEs5X.mjs";
+import { t as MemoryCacheStore } from "./memory-BiPVaCPg.mjs";
 import fp from "fastify-plugin";
 //#region src/cache/QueryCache.ts
 var QueryCache = class {

package/dist/{rateLimitKey-D4_rjP1K.mjs → rateLimitKey-CewdR-m6.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.37.1 | MIT | https://classytic.com */
+/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
 //#region src/scope/rateLimitKey.ts
 function createTenantKeyGenerator(opts) {
 	if (opts?.strategy) return opts.strategy;

package/dist/{realtime-BWuHi-UI.mjs → realtime-CPmjjgqd.mjs}

@@ -1,13 +1,13 @@
-/*! @classytic/arc v2.37.1 | MIT | https://classytic.com */
-import { t as __exportAll } from "./rolldown-runtime-NVzJrC-o.mjs";
+/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+import { t as __exportAll } from "./rolldown-runtime-Add2L50I.mjs";
 import { arcLog } from "./logger/index.mjs";
-import { n as evaluateAndApplyPermission } from "./authorizationDecision-BzZi2bsf.mjs";
-import { n as getUserRoles } from "./userHelpers-Bi97zMEl.mjs";
-import { c as getOrgId } from "./types-khJmBErP.mjs";
-import { t as simpleEqualityMatcher } from "./simpleEqualityMatcher-Cr1F8jKZ.mjs";
-import { t as applyFieldReadPermissions } from "./fields-f_MdWDl_.mjs";
-import { a as promoteStreamTokenToHeader } from "./streaming-BxZDlH01.mjs";
-import { t as openSseStream } from "./sseStream-nNPqvOeK.mjs";
+import { n as evaluateAndApplyPermission } from "./authorizationDecision-BP8GHtjc.mjs";
+import { n as getUserRoles } from "./userHelpers-CXySQFRg.mjs";
+import { c as getOrgId } from "./types-BqLyyH0o.mjs";
+import { t as simpleEqualityMatcher } from "./simpleEqualityMatcher-B7qVjQBv.mjs";
+import { t as applyFieldReadPermissions } from "./fields-Cha2QCKH.mjs";
+import { a as promoteStreamTokenToHeader } from "./streaming-DkpW1HwJ.mjs";
+import { t as openSseStream } from "./sseStream-BuMNPR6r.mjs";
 import fp from "fastify-plugin";
 //#region src/plugins/realtime.ts
 var realtime_exports = /* @__PURE__ */ __exportAll({

package/dist/{redis-stream-mwLWlfHG.d.mts → redis-stream-eh0eOtjh.d.mts}

@@ -1,5 +1,5 @@
 
-import { a as EventTransport, i as EventLogger, n as DomainEvent, r as EventHandler } from "./EventTransport-BEVP50ka.mjs";
+import { a as EventTransport, i as EventLogger, n as DomainEvent, r as EventHandler } from "./EventTransport-Cx60_s-6.mjs";
 //#region src/events/transports/redis-stream.d.ts
 interface RedisStreamLike {
   xadd(key: string, id: string, ...fieldValues: string[]): Promise<string | null>;

package/dist/{registerRoute-mvm6zY2H.mjs → registerRoute-XvcI_3sh.mjs}

@@ -1,8 +1,9 @@
-/*! @classytic/arc v2.37.1 | MIT | https://classytic.com */
-import { n as evaluateAndApplyPermission } from "./authorizationDecision-BzZi2bsf.mjs";
-import { f as createError } from "./errors-CbxCF9M0.mjs";
-import { u as getRequestScope } from "./types-khJmBErP.mjs";
-import { n as requestContext } from "./requestContext-KzIdSmN2.mjs";
+/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+import { n as evaluateAndApplyPermission } from "./authorizationDecision-BP8GHtjc.mjs";
+import { f as createError } from "./errors-2ExmOgIJ.mjs";
+import { u as getRequestScope } from "./types-BqLyyH0o.mjs";
+import { r as deriveHiddenFieldPermissions } from "./fields-Cha2QCKH.mjs";
+import { n as requestContext } from "./requestContext-DpmntRZy.mjs";
 //#region src/core/middlewares/arcDecorator.ts
 /**
 * Build the `arcDecorator` preHandler for a resource.
@@ -18,7 +19,10 @@ import { n as requestContext } from "./requestContext-KzIdSmN2.mjs";
 * formatters).
 */
 function buildArcDecorator(meta) {
-	const frozen = Object.freeze({ ...meta });
+	const frozen = Object.freeze({
+		...meta,
+		fields: deriveHiddenFieldPermissions(meta.schemaOptions, meta.fields)
+	});
 	return async (req, _reply) => {
 		req.arc = frozen;
 		const store = requestContext.get();

package/dist/registry/index.d.mts

@@ -1,6 +1,6 @@
 
-import { K as ResolvedTenantPurge, R as RegisterOptions, V as ResourceDefinition, X as CrudRouteKey, k as IntrospectionPluginOptions, p as RegistryEntry, z as ResourceRegistry } from "../index-BqRfP1kT.mjs";
-import "../fastify-augmentation-CRsNNhuo.mjs";
+import { K as ResolvedTenantPurge, R as RegisterOptions, V as ResourceDefinition, X as CrudRouteKey, k as IntrospectionPluginOptions, p as RegistryEntry, z as ResourceRegistry } from "../index-B78WZom8.mjs";
+import "../fastify-augmentation-jYA2oHyL.mjs";
 import { TenantPurgeProgress, TenantPurgeStrategy } from "@classytic/repo-core/repository";
 import { FastifyPluginAsync } from "fastify";
 //#region src/registry/assertNoTenantData.d.ts

package/dist/registry/index.mjs

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.37.1 | MIT | https://classytic.com */
-import { a as cascadeDeleteForOrganization, c as assertNoTenantData, i as introspectionPlugin_default, n as buildResourceManifestFromRegistry, o as getCascadingResources, r as introspectionPlugin, s as getCascadingResourcesWithMetadata, t as buildResourceManifest } from "../registry-3maEt__c.mjs";
-import { t as ResourceRegistry } from "../ResourceRegistry-OQA13slI.mjs";
+/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+import { a as cascadeDeleteForOrganization, c as assertNoTenantData, i as introspectionPlugin_default, n as buildResourceManifestFromRegistry, o as getCascadingResources, r as introspectionPlugin, s as getCascadingResourcesWithMetadata, t as buildResourceManifest } from "../registry-UFEJQN8R.mjs";
+import { t as ResourceRegistry } from "../ResourceRegistry-DPcX--zk.mjs";
 export { ResourceRegistry, assertNoTenantData, buildResourceManifest, buildResourceManifestFromRegistry, cascadeDeleteForOrganization, getCascadingResources, getCascadingResourcesWithMetadata, introspectionPlugin_default as introspectionPlugin, introspectionPlugin as introspectionPluginFn };

package/dist/{registry-3maEt__c.mjs → registry-UFEJQN8R.mjs}

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.37.1 | MIT | https://classytic.com */
-import { t as CRUD_OPERATIONS } from "./constants-DDKf25s4.mjs";
+/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+import { t as CRUD_OPERATIONS } from "./constants-BONghE1Y.mjs";
 import fp from "fastify-plugin";
 //#region src/registry/assertNoTenantData.ts
 /**

package/dist/{renewingLease-C1-GAUpr.mjs → renewingLease-DuRGVOMe.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.37.1 | MIT | https://classytic.com */
+/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
 //#region src/lock/renewingLease.ts
 /**
 * Start renewing an ALREADY-ACQUIRED lease. The caller performed the

package/dist/{replyHelpers-DVcUoled.mjs → replyHelpers-BHebarf0.mjs}

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.37.1 | MIT | https://classytic.com */
-import { t as __exportAll } from "./rolldown-runtime-NVzJrC-o.mjs";
+/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+import { t as __exportAll } from "./rolldown-runtime-Add2L50I.mjs";
 import { toCanonicalList } from "@classytic/repo-core/pagination";
 import fp from "fastify-plugin";
 //#region src/plugins/replyHelpers.ts

package/dist/{requestContext-KzIdSmN2.mjs → requestContext-DpmntRZy.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.37.1 | MIT | https://classytic.com */
+/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
 import { AsyncLocalStorage } from "node:async_hooks";
 //#region src/context/requestContext.ts
 /**

package/dist/{rolldown-runtime-NVzJrC-o.mjs → rolldown-runtime-Add2L50I.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.37.1 | MIT | https://classytic.com */
+/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
 import "node:module";
 //#region \0rolldown/runtime.js
 var __defProp = Object.defineProperty;

package/dist/{runtimeCapabilities-OrGatf7r.mjs → runtimeCapabilities-D793Pxci.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.37.1 | MIT | https://classytic.com */
+/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
 //#region src/utils/runtimeCapabilities.ts
 /**
 * `Symbol.for` so declarations from two arc copies in one dependency graph

package/dist/{schedules-DeRI03eo.mjs → schedules-DthM8Qag.mjs}

@@ -1,6 +1,6 @@
-/*! @classytic/arc v2.37.1 | MIT | https://classytic.com */
-import { t as __exportAll } from "./rolldown-runtime-NVzJrC-o.mjs";
-import { t as startRenewingLease } from "./renewingLease-C1-GAUpr.mjs";
+/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+import { t as __exportAll } from "./rolldown-runtime-Add2L50I.mjs";
+import { t as startRenewingLease } from "./renewingLease-DuRGVOMe.mjs";
 import fp from "fastify-plugin";
 //#region src/plugins/schedules.ts
 var schedules_exports = /* @__PURE__ */ __exportAll({

package/dist/{schemaConverter-cXTayNOW.mjs → schemaConverter-Db-MMsH6.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.37.1 | MIT | https://classytic.com */
+/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
 import { arcLog } from "./logger/index.mjs";
 //#region src/utils/schemaConverter.ts
 /**

package/dist/{schemaIR-Cc9ZPVs2.mjs → schemaIR-CIXShch7.mjs}

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.37.1 | MIT | https://classytic.com */
-import { o as toJsonSchema } from "./schemaConverter-cXTayNOW.mjs";
+/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+import { o as toJsonSchema } from "./schemaConverter-Db-MMsH6.mjs";
 //#region src/core/schemaIR.ts
 /**
 * Schema IR — one canonical representation, two adapters.

package/dist/schemas/index.mjs

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.37.1 | MIT | https://classytic.com */
+/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
 import { errorContractSchema, errorDetailSchema } from "@classytic/repo-core/errors";
 import { Type, Type as Type$1 } from "typebox";
 //#region src/schemas/index.ts

package/dist/scim/index.mjs

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.37.1 | MIT | https://classytic.com */
-import { t as parseJsonBody } from "../jsonBody-kApktjTc.mjs";
+/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+import { t as parseJsonBody } from "../jsonBody-DVui0uJl.mjs";
 import fp from "fastify-plugin";
 //#region src/scim/errors.ts
 var ScimError = class extends Error {

package/dist/scope/index.mjs

@@ -1,6 +1,6 @@
-/*! @classytic/arc v2.37.1 | MIT | https://classytic.com */
-import { C as isService, D as requireUserId, E as requireTeamId, O as scopeFirstCtx, S as isOrgInScope, T as requireOrgId, _ as getUserRoles, a as getDPoPJkt, b as isElevated, c as getOrgId, d as getScopeContext, f as getScopeContextMap, g as getUserId, h as getTenantFromRequest, i as getClientId, l as getOrgRoles, m as getTeamId, n as PUBLIC_SCOPE, o as getMandate, p as getServiceScopes, r as getAncestorOrgIds, s as getOrgContext, t as AUTHENTICATED_SCOPE, u as getRequestScope, v as hasOrgAccess, w as requireClientId, x as isMember, y as isAuthenticated } from "../types-khJmBErP.mjs";
-import { n as elevation_default, t as elevationPlugin } from "../elevation-9X0lGzTQ.mjs";
-import { t as createTenantKeyGenerator } from "../rateLimitKey-D4_rjP1K.mjs";
-import { t as resolveOrgFromHeader } from "../scope-C2r7_WGs.mjs";
+/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+import { C as isService, D as requireUserId, E as requireTeamId, O as scopeFirstCtx, S as isOrgInScope, T as requireOrgId, _ as getUserRoles, a as getDPoPJkt, b as isElevated, c as getOrgId, d as getScopeContext, f as getScopeContextMap, g as getUserId, h as getTenantFromRequest, i as getClientId, l as getOrgRoles, m as getTeamId, n as PUBLIC_SCOPE, o as getMandate, p as getServiceScopes, r as getAncestorOrgIds, s as getOrgContext, t as AUTHENTICATED_SCOPE, u as getRequestScope, v as hasOrgAccess, w as requireClientId, x as isMember, y as isAuthenticated } from "../types-BqLyyH0o.mjs";
+import { n as elevation_default, t as elevationPlugin } from "../elevation-C6woysGC.mjs";
+import { t as createTenantKeyGenerator } from "../rateLimitKey-CewdR-m6.mjs";
+import { t as resolveOrgFromHeader } from "../scope-D03sk17n.mjs";
 export { AUTHENTICATED_SCOPE, PUBLIC_SCOPE, createTenantKeyGenerator, elevation_default as elevationPlugin, elevationPlugin as elevationPluginFn, getAncestorOrgIds, getClientId, getDPoPJkt, getMandate, getOrgContext, getOrgId, getOrgRoles, getRequestScope, getScopeContext, getScopeContextMap, getServiceScopes, getTeamId, getTenantFromRequest, getUserId, getUserRoles, hasOrgAccess, isAuthenticated, isElevated, isMember, isOrgInScope, isService, requireClientId, requireOrgId, requireTeamId, requireUserId, resolveOrgFromHeader, scopeFirstCtx };

package/dist/{scope-C2r7_WGs.mjs → scope-D03sk17n.mjs}

@@ -1,7 +1,7 @@
-/*! @classytic/arc v2.37.1 | MIT | https://classytic.com */
-import { a as OrgAccessDeniedError, l as UnauthorizedError } from "./errors-CbxCF9M0.mjs";
-import { n as requireSingleHeaderValue } from "./headers-DivLPMHe.mjs";
-import { n as getUserRoles } from "./userHelpers-Bi97zMEl.mjs";
+/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+import { a as OrgAccessDeniedError, l as UnauthorizedError } from "./errors-2ExmOgIJ.mjs";
+import { n as requireSingleHeaderValue } from "./headers-DeXNifVj.mjs";
+import { n as getUserRoles } from "./userHelpers-CXySQFRg.mjs";
 //#region src/scope/resolveOrgFromHeader.ts
 /**
 * Create a preHandler hook that resolves org scope from a header.

package/dist/{simpleEqualityMatcher-Cr1F8jKZ.mjs → simpleEqualityMatcher-B7qVjQBv.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.37.1 | MIT | https://classytic.com */
+/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
 //#region src/utils/simpleEqualityMatcher.ts
 /**
 * `simpleEqualityMatcher` — a minimal, dialect-agnostic flat-key equality

package/dist/{sse-BmZCVRGH.mjs → sse-D4MYqkic.mjs}

@@ -1,9 +1,9 @@
-/*! @classytic/arc v2.37.1 | MIT | https://classytic.com */
-import { t as __exportAll } from "./rolldown-runtime-NVzJrC-o.mjs";
+/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+import { t as __exportAll } from "./rolldown-runtime-Add2L50I.mjs";
 import { arcLog } from "./logger/index.mjs";
-import { c as getOrgId, n as PUBLIC_SCOPE } from "./types-khJmBErP.mjs";
-import { a as promoteStreamTokenToHeader } from "./streaming-BxZDlH01.mjs";
-import { t as openSseStream } from "./sseStream-nNPqvOeK.mjs";
+import { c as getOrgId, n as PUBLIC_SCOPE } from "./types-BqLyyH0o.mjs";
+import { a as promoteStreamTokenToHeader } from "./streaming-DkpW1HwJ.mjs";
+import { t as openSseStream } from "./sseStream-BuMNPR6r.mjs";
 import fp from "fastify-plugin";
 //#region src/plugins/sse.ts
 var sse_exports = /* @__PURE__ */ __exportAll({

package/dist/{sseStream-nNPqvOeK.mjs → sseStream-BuMNPR6r.mjs}

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.37.1 | MIT | https://classytic.com */
-import { n as forwardedStreamHeaders } from "./streaming-BxZDlH01.mjs";
+/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+import { n as forwardedStreamHeaders } from "./streaming-DkpW1HwJ.mjs";
 //#region src/utils/sseStream.ts
 /**
 * Take over the reply socket and open an SSE stream. Call ONLY after every

package/dist/{store-helpers-C1r3-6M0.mjs → store-helpers-CIF4RG8s.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.37.1 | MIT | https://classytic.com */
+/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
 //#region src/utils/store-helpers.ts
 /**
 * Classify an error thrown by `getOne` / `getById` / `update` as a

package/dist/{streaming-BxZDlH01.mjs → streaming-DkpW1HwJ.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.37.1 | MIT | https://classytic.com */
+/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
 import { Readable } from "node:stream";
 //#region src/utils/streaming.ts
 /**

package/dist/{subscribe-helpers-Dca7Fcz2.mjs → subscribe-helpers-CBZOi6pk.mjs}

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.37.1 | MIT | https://classytic.com */
-import { r as createEvent } from "./EventTransport-CFdtK25P.mjs";
+/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+import { r as createEvent } from "./EventTransport-Gq7JWbWw.mjs";
 //#region src/events/defineEvent.ts
 /**
 * Typed event declarations, a registry for introspection, and `.create()` to

package/dist/sync/changelog.mjs

@@ -1,3 +1,3 @@
-/*! @classytic/arc v2.37.1 | MIT | https://classytic.com */
+/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
 import { CursorExpiredError, MemoryChangeLogStore } from "@classytic/repo-core/sync";
 export { CursorExpiredError, MemoryChangeLogStore };

package/dist/testing/cleanupStoreContract.mjs

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.37.1 | MIT | https://classytic.com */
+/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
 import { afterAll, beforeAll, describe, expect, it } from "vitest";
 //#region src/testing/cleanupStoreContract.ts
 /**

package/dist/testing/index.d.mts

@@ -1,10 +1,10 @@
 
 import { i as RequestScope } from "../types-Ddl9OjmE.mjs";
 import { l as PermissionCheck, t as AnyRecord } from "../base-C-NL2fTi.mjs";
-import { V as ResourceDefinition } from "../index-BqRfP1kT.mjs";
-import { n as ArcModuleInput, o as ModuleDisposer, s as ModuleSetupContext } from "../types-BMa2EPtv.mjs";
-import "../index-DCxxRwLC.mjs";
-import { n as preloadResourcesAsync, r as CreateAppOptions, t as preloadResources } from "../preloadResources-DHkyk3QN.mjs";
+import { V as ResourceDefinition } from "../index-B78WZom8.mjs";
+import { n as ArcModuleInput, o as ModuleDisposer, s as ModuleSetupContext } from "../types-BRU-Kd3t.mjs";
+import "../index-D2uIUSQk.mjs";
+import { n as preloadResourcesAsync, r as CreateAppOptions, t as preloadResources } from "../preloadResources-BbBkNkqK.mjs";
 import { StorageContractSetup, StorageContractSetupResult, runStorageContract } from "./storageContract.mjs";
 import { StandardRepo } from "@classytic/repo-core/repository";
 import { FastifyInstance, FastifyServerOptions } from "fastify";

package/dist/testing/index.mjs

@@ -1,12 +1,12 @@
-/*! @classytic/arc v2.37.1 | MIT | https://classytic.com */
-import { t as CRUD_OPERATIONS } from "../constants-DDKf25s4.mjs";
-import { g as getUserId } from "../types-khJmBErP.mjs";
-import { t as BaseController } from "../BaseController-Chkf0Aiw.mjs";
-import { t as defineAggregation } from "../defineAggregation-B1m-45Fe.mjs";
-import { t as defineResource } from "../defineResource-DS3Uj2-8.mjs";
-import { E as requireOrgRole } from "../permissions-DnAc6zoZ.mjs";
-import { a as createApp, n as preloadResourcesAsync, t as preloadResources } from "../preloadResources-DJ7Lli0a.mjs";
-import { n as getModuleExports } from "../module-CNKk_twm.mjs";
+/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+import { t as CRUD_OPERATIONS } from "../constants-BONghE1Y.mjs";
+import { g as getUserId } from "../types-BqLyyH0o.mjs";
+import { t as BaseController } from "../BaseController-CYaDvmOB.mjs";
+import { t as defineAggregation } from "../defineAggregation-0KBvqEEC.mjs";
+import { t as defineResource } from "../defineResource-BMdyRelW.mjs";
+import { E as requireOrgRole } from "../permissions-H7Zcb82Z.mjs";
+import { a as createApp, n as preloadResourcesAsync, t as preloadResources } from "../preloadResources-DlhH81py.mjs";
+import { n as getModuleExports } from "../module-BQXHxMEk.mjs";
 import { runStorageContract } from "./storageContract.mjs";
 import Fastify from "fastify";
 import { afterAll, describe, expect, it, vi } from "vitest";
@@ -1504,7 +1504,7 @@ function pickDefaultAuth(authMode, callerAuth) {
 	};
 }
 async function createTestApp(options = {}) {
-	const { createApp } = await import("../preloadResources-DJ7Lli0a.mjs").then((n) => n.o);
+	const { createApp } = await import("../preloadResources-DlhH81py.mjs").then((n) => n.o);
 	const { resources = [], db = "in-memory", connectMongoose = false, authMode = "jwt", defaultOrgId, plugins, auth: callerAuth, ...appOptions } = options;
 	let dbHandle;
 	let dbUri;

package/dist/testing/outboxStoreContract.mjs

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.37.1 | MIT | https://classytic.com */
+/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
 import { OutboxOwnershipError } from "@classytic/primitives/outbox";
 import { afterAll, beforeAll, beforeEach, describe, expect, it } from "vitest";
 //#region src/testing/outboxStoreContract.ts

package/dist/testing/storageContract.mjs

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.37.1 | MIT | https://classytic.com */
+/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
 import { afterAll, beforeAll, describe, expect, it } from "vitest";
 //#region src/testing/storageContract.ts
 /**

package/dist/{transactionContext-6F7Gkbxg.mjs → transactionContext-DMmvcfdo.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.37.1 | MIT | https://classytic.com */
+/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
 import { AsyncLocalStorage } from "node:async_hooks";
 //#region src/context/transactionContext.ts
 /**

package/dist/{typeGuards-BrXgbFi-.mjs → typeGuards-DHTnEs5X.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.37.1 | MIT | https://classytic.com */
+/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
 //#region src/utils/typeGuards.ts
 /** Check if fastify has the events plugin registered */
 function hasEvents(instance) {

package/dist/types/index.d.mts

@@ -1,6 +1,6 @@
 
 import { i as RequestScope } from "../types-Ddl9OjmE.mjs";
 import { a as UserLike, c as DataPolicy, d as UserBase, i as ObjectId, l as PermissionCheck, n as ArcRequest, o as UserOrganization, r as JWTPayload, s as AuthorizationDecision, t as AnyRecord, u as PermissionContext } from "../base-C-NL2fTi.mjs";
-import { $ as OpenApiSchemas, A as RequestIdOptions, An as WriteVerbKey, At as RouteDefinition, C as RequestContext, D as HealthCheck, Dn as MutationWriteContext, Dt as ActionEntry, E as GracefulShutdownOptions, Et as ActionDefinition, F as FastifyWithDecorators, Fn as IControllerResponse, Ft as AuthPluginOptions, G as OnTenantDeleteConfig, H as CrudController, I as MiddlewareHandler, In as IRequestContext, It as Authenticator, J as PresetHook, K as ResolvedTenantPurge, L as RequestWithExtras, Ln as RawRouteHandler, Lt as AuthenticatorContext, M as EventsDecorator, Mn as ControllerLike, Mt as RouteMethod, N as FastifyRequestExtras, Nn as FastifyHandler, Nt as RateLimitConfig, O as HealthOptions, On as ResourceWrites, Ot as ActionHandlerFn, P as FastifyWithAuth, Pn as IController, Pt as AuthHelpers, Q as MiddlewareConfig, Rn as RouteHandler, Rt as JwtContext, S as QueryParserInterface, T as CrudRouterOptions, Tt as ResourceCacheConfig, U as ResourceConfig, W as ResourcePermissions, X as CrudRouteKey, Y as PresetResult, Z as CrudSchemas, _ as ControllerQueryOptions, a as InferAdapterDoc, at as ResourceExtensions, b as ParsedQuery, c as TypedController, d as PaginationResult, et as RouteSchemaOptions, f as IntrospectionData, g as ArcInternalMetadata, h as ResourceMetadata, i as ValidationResult, it as ResourceHooks, j as ArcDecorator, jn as ControllerHandler, jt as RouteMcpConfig, k as IntrospectionPluginOptions, kn as WriteContext, kt as ActionsMap, l as TypedRepository, m as RegistryStats, n as ConfigError, nt as FieldRule, o as InferDocType, ot as EventDefinition, p as RegistryEntry, q as PresetFunction, r as ValidateOptions, rt as ResourceHookContext, s as InferResourceDoc, t as RouteHandlerMethod, tt as ArcFieldRule, u as TypedResourceConfig, v as LookupOption, w as ServiceContext, x as PopulateOption, xn as BaseControllerOptions, y as OwnershipCheck, zt as TokenPair } from "../index-BqRfP1kT.mjs";
+import { $ as OpenApiSchemas, A as RequestIdOptions, An as WriteVerbKey, At as RouteDefinition, C as RequestContext, D as HealthCheck, Dn as MutationWriteContext, Dt as ActionEntry, E as GracefulShutdownOptions, Et as ActionDefinition, F as FastifyWithDecorators, Fn as IControllerResponse, Ft as AuthPluginOptions, G as OnTenantDeleteConfig, H as CrudController, I as MiddlewareHandler, In as IRequestContext, It as Authenticator, J as PresetHook, K as ResolvedTenantPurge, L as RequestWithExtras, Ln as RawRouteHandler, Lt as AuthenticatorContext, M as EventsDecorator, Mn as ControllerLike, Mt as RouteMethod, N as FastifyRequestExtras, Nn as FastifyHandler, Nt as RateLimitConfig, O as HealthOptions, On as ResourceWrites, Ot as ActionHandlerFn, P as FastifyWithAuth, Pn as IController, Pt as AuthHelpers, Q as MiddlewareConfig, Rn as RouteHandler, Rt as JwtContext, S as QueryParserInterface, T as CrudRouterOptions, Tt as ResourceCacheConfig, U as ResourceConfig, W as ResourcePermissions, X as CrudRouteKey, Y as PresetResult, Z as CrudSchemas, _ as ControllerQueryOptions, a as InferAdapterDoc, at as ResourceExtensions, b as ParsedQuery, c as TypedController, d as PaginationResult, et as RouteSchemaOptions, f as IntrospectionData, g as ArcInternalMetadata, h as ResourceMetadata, i as ValidationResult, it as ResourceHooks, j as ArcDecorator, jn as ControllerHandler, jt as RouteMcpConfig, k as IntrospectionPluginOptions, kn as WriteContext, kt as ActionsMap, l as TypedRepository, m as RegistryStats, n as ConfigError, nt as FieldRule, o as InferDocType, ot as EventDefinition, p as RegistryEntry, q as PresetFunction, r as ValidateOptions, rt as ResourceHookContext, s as InferResourceDoc, t as RouteHandlerMethod, tt as ArcFieldRule, u as TypedResourceConfig, v as LookupOption, w as ServiceContext, x as PopulateOption, xn as BaseControllerOptions, y as OwnershipCheck, zt as TokenPair } from "../index-B78WZom8.mjs";
 import { n as ElevationOptions, t as ElevationEvent } from "../elevation-BXCfVcNG.mjs";
 export type { ActionDefinition, ActionEntry, ActionHandlerFn, ActionsMap, AnyRecord, ArcDecorator, ArcFieldRule, ArcInternalMetadata, ArcRequest, AuthHelpers, AuthPluginOptions, Authenticator, AuthenticatorContext, AuthorizationDecision, BaseControllerOptions, ConfigError, ControllerHandler, ControllerLike, ControllerQueryOptions, CrudController, CrudRouteKey, CrudRouterOptions, CrudSchemas, DataPolicy, ElevationEvent, ElevationOptions, EventDefinition, EventsDecorator, FastifyHandler, FastifyRequestExtras, FastifyWithAuth, FastifyWithDecorators, FieldRule, GracefulShutdownOptions, HealthCheck, HealthOptions, IController, IControllerResponse, IRequestContext, InferAdapterDoc, InferDocType, InferResourceDoc, IntrospectionData, IntrospectionPluginOptions, JWTPayload, JwtContext, LookupOption, MiddlewareConfig, MiddlewareHandler, MutationWriteContext, ObjectId, OnTenantDeleteConfig, OpenApiSchemas, OwnershipCheck, PaginationResult, ParsedQuery, PermissionCheck, PermissionContext, PopulateOption, PresetFunction, PresetHook, PresetResult, QueryParserInterface, RateLimitConfig, RawRouteHandler, RegistryEntry, RegistryStats, RequestContext, RequestIdOptions, RequestScope, RequestWithExtras, ResolvedTenantPurge, ResourceCacheConfig, ResourceConfig, ResourceExtensions, ResourceHookContext, ResourceHooks, ResourceMetadata, ResourcePermissions, ResourceWrites, RouteDefinition, RouteHandler, RouteHandlerMethod, RouteMcpConfig, RouteMethod, RouteSchemaOptions, ServiceContext, TokenPair, TypedController, TypedRepository, TypedResourceConfig, UserBase, UserLike, UserOrganization, ValidateOptions, ValidationResult, WriteContext, WriteVerbKey };

package/dist/types/index.mjs

@@ -1,2 +1,2 @@
-/*! @classytic/arc v2.37.1 | MIT | https://classytic.com */
+/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
 export {};

package/dist/types/storage.mjs

@@ -1,2 +1,2 @@
-/*! @classytic/arc v2.37.1 | MIT | https://classytic.com */
+/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
 export {};

package/dist/{types-BMa2EPtv.d.mts → types-BRU-Kd3t.d.mts}

@@ -1,5 +1,5 @@
 
-import { n as DomainEvent, r as EventHandler } from "./EventTransport-BEVP50ka.mjs";
+import { n as DomainEvent, r as EventHandler } from "./EventTransport-Cx60_s-6.mjs";
 import { n as ErrorMapper } from "./errorHandler-DI5AN2b5.mjs";
 import { FastifyInstance, FastifyPluginAsync } from "fastify";
 import { LockAdapter } from "@classytic/repo-core/lock";

package/dist/{types-khJmBErP.mjs → types-BqLyyH0o.mjs}

@@ -1,7 +1,7 @@
-/*! @classytic/arc v2.37.1 | MIT | https://classytic.com */
-import { l as UnauthorizedError, o as OrgRequiredError } from "./errors-CbxCF9M0.mjs";
-import { n as requireSingleHeaderValue } from "./headers-DivLPMHe.mjs";
-import { t as getUserId$1 } from "./userHelpers-Bi97zMEl.mjs";
+/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+import { l as UnauthorizedError, o as OrgRequiredError } from "./errors-2ExmOgIJ.mjs";
+import { n as requireSingleHeaderValue } from "./headers-DeXNifVj.mjs";
+import { t as getUserId$1 } from "./userHelpers-CXySQFRg.mjs";
 //#region src/scope/types.ts
 /**
 * Request Scope — The One Standard

package/dist/{types-rzNprqbE.d.mts → types-LQFwC37d.d.mts}

@@ -1,5 +1,5 @@
 
-import { V as ResourceDefinition } from "./index-BqRfP1kT.mjs";
+import { V as ResourceDefinition } from "./index-B78WZom8.mjs";
 import { z } from "zod";
 //#region src/integrations/mcp/types.d.ts
 /** Behavioral hints for MCP clients (tool annotations per MCP spec) */

package/dist/{userHelpers-Bi97zMEl.mjs → userHelpers-CXySQFRg.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.37.1 | MIT | https://classytic.com */
+/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
 //#region src/utils/userHelpers.ts
 /**
 * Extract a user ID from a user object. Accepts `id` or `_id` — returns

package/dist/utils/index.d.mts

@@ -1,7 +1,7 @@
 
 import { F as getHeader, I as requireSingleHeaderValue, P as ArcHeaders } from "../types-Ddl9OjmE.mjs";
 import { f as getUserId, m as normalizeRoles, p as getUserRoles, t as AnyRecord } from "../base-C-NL2fTi.mjs";
-import { $ as OpenApiSchemas, S as QueryParserInterface, b as ParsedQuery } from "../index-BqRfP1kT.mjs";
+import { $ as OpenApiSchemas, S as QueryParserInterface, b as ParsedQuery } from "../index-B78WZom8.mjs";
 import { n as ErrorMapper } from "../errorHandler-DI5AN2b5.mjs";
 import { a as NotFoundError, c as RateLimitError, d as ValidationError, f as createDomainError, i as ForbiddenError, l as ServiceUnavailableError, m as isArcError, n as ConflictError, o as OrgAccessDeniedError, p as createError, r as ErrorOptions, s as OrgRequiredError, t as ArcError, u as UnauthorizedError } from "../errors-BGdVwP25.mjs";
 import { scheduleBackground } from "@classytic/repo-core/cache";

package/dist/utils/index.mjs

@@ -1,12 +1,12 @@
-/*! @classytic/arc v2.37.1 | MIT | https://classytic.com */
-import { a as OrgAccessDeniedError, c as ServiceUnavailableError, d as createDomainError, f as createError, i as NotFoundError, l as UnauthorizedError, n as ConflictError, o as OrgRequiredError, p as isArcError, r as ForbiddenError, s as RateLimitError, t as ArcError, u as ValidationError } from "../errors-CbxCF9M0.mjs";
-import { n as requireSingleHeaderValue, t as getHeader } from "../headers-DivLPMHe.mjs";
-import { n as getUserRoles, r as normalizeRoles, t as getUserId } from "../userHelpers-Bi97zMEl.mjs";
-import { t as simpleEqualityMatcher } from "../simpleEqualityMatcher-Cr1F8jKZ.mjs";
-import { A as scheduleBackground, C as paginationSchema, D as createQueryParser, E as ArcQueryParser, O as MONGO_DIALECT, S as offsetListResponse, T as responses, _ as errorDetailSchema, a as defineCompensation, b as keysetListResponse, c as CircuitBreakerError, d as createCircuitBreaker, f as createCircuitBreakerRegistry, g as errorContractSchema, h as deleteResponse, i as defineErrorMapper, k as NEUTRAL_DIALECT, l as CircuitBreakerRegistry, m as bareListResponse, n as handleRaw, o as withCompensation, p as aggregateListResponse, r as defineGuard, s as CircuitBreaker, t as createStateMachine, u as CircuitState, v as getDefaultCrudSchemas, w as queryParams, x as listResponse, y as getListQueryParams } from "../utils-WlLDIKuw.mjs";
-import { a as isZodSchema, i as isJsonSchema, n as convertRouteSchema, o as toJsonSchema, t as convertOpenApiSchemas } from "../schemaConverter-cXTayNOW.mjs";
-import { a as promoteStreamTokenToHeader, i as pipeUIMessageStreamToReply, n as forwardedStreamHeaders, r as isReadableStream, t as UI_MESSAGE_STREAM_HEADERS } from "../streaming-BxZDlH01.mjs";
-import { n as declareRuntimeCapability } from "../runtimeCapabilities-OrGatf7r.mjs";
-import { t as openSseStream } from "../sseStream-nNPqvOeK.mjs";
-import { t as hasEvents } from "../typeGuards-BrXgbFi-.mjs";
+/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+import { a as OrgAccessDeniedError, c as ServiceUnavailableError, d as createDomainError, f as createError, i as NotFoundError, l as UnauthorizedError, n as ConflictError, o as OrgRequiredError, p as isArcError, r as ForbiddenError, s as RateLimitError, t as ArcError, u as ValidationError } from "../errors-2ExmOgIJ.mjs";
+import { n as requireSingleHeaderValue, t as getHeader } from "../headers-DeXNifVj.mjs";
+import { n as getUserRoles, r as normalizeRoles, t as getUserId } from "../userHelpers-CXySQFRg.mjs";
+import { t as simpleEqualityMatcher } from "../simpleEqualityMatcher-B7qVjQBv.mjs";
+import { A as scheduleBackground, C as paginationSchema, D as createQueryParser, E as ArcQueryParser, O as MONGO_DIALECT, S as offsetListResponse, T as responses, _ as errorDetailSchema, a as defineCompensation, b as keysetListResponse, c as CircuitBreakerError, d as createCircuitBreaker, f as createCircuitBreakerRegistry, g as errorContractSchema, h as deleteResponse, i as defineErrorMapper, k as NEUTRAL_DIALECT, l as CircuitBreakerRegistry, m as bareListResponse, n as handleRaw, o as withCompensation, p as aggregateListResponse, r as defineGuard, s as CircuitBreaker, t as createStateMachine, u as CircuitState, v as getDefaultCrudSchemas, w as queryParams, x as listResponse, y as getListQueryParams } from "../utils-BbGG8XNT.mjs";
+import { a as isZodSchema, i as isJsonSchema, n as convertRouteSchema, o as toJsonSchema, t as convertOpenApiSchemas } from "../schemaConverter-Db-MMsH6.mjs";
+import { a as promoteStreamTokenToHeader, i as pipeUIMessageStreamToReply, n as forwardedStreamHeaders, r as isReadableStream, t as UI_MESSAGE_STREAM_HEADERS } from "../streaming-DkpW1HwJ.mjs";
+import { n as declareRuntimeCapability } from "../runtimeCapabilities-D793Pxci.mjs";
+import { t as openSseStream } from "../sseStream-BuMNPR6r.mjs";
+import { t as hasEvents } from "../typeGuards-DHTnEs5X.mjs";
 export { ArcError, ArcQueryParser, CircuitBreaker, CircuitBreakerError, CircuitBreakerRegistry, CircuitState, ConflictError, ForbiddenError, MONGO_DIALECT, NEUTRAL_DIALECT, NotFoundError, OrgAccessDeniedError, OrgRequiredError, RateLimitError, ServiceUnavailableError, UI_MESSAGE_STREAM_HEADERS, UnauthorizedError, ValidationError, aggregateListResponse, bareListResponse, convertOpenApiSchemas, convertRouteSchema, createCircuitBreaker, createCircuitBreakerRegistry, createDomainError, createError, createQueryParser, createStateMachine, declareRuntimeCapability, defineCompensation, defineErrorMapper, defineGuard, deleteResponse, errorContractSchema, errorDetailSchema, forwardedStreamHeaders, getDefaultCrudSchemas, getHeader, getListQueryParams, getUserId, getUserRoles, handleRaw, hasEvents, isArcError, isJsonSchema, isReadableStream, isZodSchema, keysetListResponse, listResponse, normalizeRoles, offsetListResponse, openSseStream, paginationSchema, pipeUIMessageStreamToReply, promoteStreamTokenToHeader, queryParams, requireSingleHeaderValue, responses, scheduleBackground, simpleEqualityMatcher, toJsonSchema, withCompensation };

package/dist/{utils-WlLDIKuw.mjs → utils-BbGG8XNT.mjs}

@@ -1,7 +1,7 @@
-/*! @classytic/arc v2.37.1 | MIT | https://classytic.com */
-import { m as RESERVED_QUERY_PARAMS } from "./constants-DDKf25s4.mjs";
+/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+import { m as RESERVED_QUERY_PARAMS } from "./constants-BONghE1Y.mjs";
 import { arcLog } from "./logger/index.mjs";
-import { t as ArcError, u as ValidationError } from "./errors-CbxCF9M0.mjs";
+import { t as ArcError, u as ValidationError } from "./errors-2ExmOgIJ.mjs";
 import { scheduleBackground } from "@classytic/repo-core/cache";
 import { errorContractSchema as errorContractSchema$1, errorDetailSchema as errorDetailSchema$1 } from "@classytic/repo-core/errors";
 //#region src/utils/filter-dialect.ts

package/dist/{validate-pMke_boy.mjs → validate-CidSeUrx.mjs}

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.37.1 | MIT | https://classytic.com */
-import { t as __exportAll } from "./rolldown-runtime-NVzJrC-o.mjs";
+/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+import { t as __exportAll } from "./rolldown-runtime-Add2L50I.mjs";
 //#region src/core/aggregation/normalize.ts
 /**
 * Framework cap on URL-driven aggregation limits when the host opts

package/dist/{versioning-DEs-_hFi.d.mts → versioning-B843jOYX.d.mts}

@@ -1,5 +1,5 @@
 
-import { n as DomainEvent } from "./EventTransport-BEVP50ka.mjs";
+import { n as DomainEvent } from "./EventTransport-Cx60_s-6.mjs";
 import { FastifyPluginAsync, FastifyRequest } from "fastify";
 //#region src/plugins/caching.d.ts
 interface CachingRule {

package/dist/{versioning-CFK3c04-.mjs → versioning-C2r0eOZ4.mjs}

@@ -1,6 +1,6 @@
-/*! @classytic/arc v2.37.1 | MIT | https://classytic.com */
-import { t as __exportAll } from "./rolldown-runtime-NVzJrC-o.mjs";
-import { d as createDomainError } from "./errors-CbxCF9M0.mjs";
+/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+import { t as __exportAll } from "./rolldown-runtime-Add2L50I.mjs";
+import { d as createDomainError } from "./errors-2ExmOgIJ.mjs";
 import fp from "fastify-plugin";
 //#region src/plugins/versioning.ts
 var versioning_exports = /* @__PURE__ */ __exportAll({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@classytic/arc",
-  "version": "2.37.1",
+  "version": "2.38.0",
   "description": "Resource-oriented backend framework for Fastify - clean, minimal, powerful, tree-shakable",
   "type": "module",
   "exports": {
@@ -353,8 +353,8 @@
     "node": ">=22"
   },
   "peerDependencies": {
-    "@classytic/primitives": ">=0.25.0",
-    "@classytic/repo-core": ">=0.25.0",
+    "@classytic/primitives": ">=0.26.4",
+    "@classytic/repo-core": ">=0.26.0",
     "@classytic/streamline": ">=2.8.0",
     "@fastify/cors": ">=11.0.0",
     "@fastify/helmet": ">=13.0.0",
@@ -485,8 +485,8 @@
     "@classytic/gitkit": ">=0.1.0",
     "@classytic/mongokit": "^3.33.0",
     "@classytic/pgkit": "^0.1.0",
-    "@classytic/primitives": "^0.25.0",
-    "@classytic/repo-core": "^0.25.0",
+    "@classytic/primitives": "^0.26.4",
+    "@classytic/repo-core": "^0.26.0",
     "@classytic/sqlitekit": "^0.9.0",
     "@classytic/streamline": "^2.8.2",
     "@electric-sql/pglite": "^0.5.4",