@classytic/arc 2.6.1 → 2.6.3

package/dist/{resourceToTools-DH3c3e-T.mjs → resourceToTools-nCJWnG1r.mjs}

@@ -1,4 +1,4 @@
-import { t as BaseController } from "./BaseController-AbbRx3e0.mjs";
+import { t as BaseController } from "./BaseController-DzRtluEF.mjs";
 import { t as pluralize } from "./pluralize-CcT6qF0a.mjs";
 import { z } from "zod";
 //#region src/integrations/mcp/createMcpServer.ts
@@ -314,6 +314,146 @@ function buildScope(auth) {
 	};
 }
 //#endregion
+//#region src/integrations/mcp/jsonSchemaToZod.ts
+/**
+* @classytic/arc — JSON Schema → Zod shape converter
+*
+* Converts an adapter-emitted JSON Schema body shape (`createBody` / `updateBody`)
+* to a flat Zod shape compatible with the MCP SDK's `registerTool({ inputSchema })`
+* contract.
+*
+* Why this exists:
+*   - The MCP SDK expects a flat `Record<string, ZodType>` shape (it wraps it in
+*     z.object() internally).
+*   - When users don't supply explicit `schemaOptions.fieldRules`, MCP would
+*     otherwise see an empty schema and silently strip every body field — that's
+*     a real DX footgun.
+*   - Adapters (Mongoose, MongoKit's buildCrudSchemasFromModel, custom) already
+*     emit JSON Schema describing the body. We translate it to Zod so MCP tools
+*     can validate input the same way REST routes do.
+*
+* Supported JSON Schema features:
+*   - Primitives: string, number, integer, boolean, null (skipped)
+*   - Constraints: minLength, maxLength, minimum, maximum, pattern, enum, format
+*   - Arrays: typed items + nested object items
+*   - Nested objects with `properties` (recursive)
+*   - Type unions: ["string", "null"] → string (null skipped)
+*   - Composition: oneOf / anyOf / allOf → first viable branch
+*   - $ref → permissive (z.unknown()) — refs are not resolved
+*   - Unknown types → z.unknown() (lenient — let the controller validate)
+*
+* NOT supported (intentionally — keeps the surface small + deterministic):
+*   - Conditional schemas (if/then/else)
+*   - dependencies / dependentRequired
+*   - Custom keywords beyond standard JSON Schema
+*/
+/**
+* Convert a JSON Schema **object** body to a flat Zod shape.
+* Returns `undefined` if the input has no usable properties.
+*
+* @param schema  Top-level JSON Schema (must be `type: 'object'` with `properties`)
+* @param mode    'create' enforces required fields, 'update' makes everything optional
+*/
+function jsonSchemaToZodShape(schema, mode = "create") {
+	if (!schema || typeof schema !== "object") return void 0;
+	if (!schema.properties || typeof schema.properties !== "object") return void 0;
+	const requiredSet = new Set(schema.required ?? []);
+	const shape = {};
+	for (const [name, propSchema] of Object.entries(schema.properties)) {
+		if (!propSchema || typeof propSchema !== "object") continue;
+		const fieldZod = jsonSchemaPropertyToZod(propSchema);
+		if (!fieldZod) continue;
+		shape[name] = mode === "create" && requiredSet.has(name) ? fieldZod : fieldZod.optional();
+	}
+	return Object.keys(shape).length > 0 ? shape : void 0;
+}
+/**
+* Convert one JSON Schema node to a Zod type.
+* Handles primitives, arrays, nested objects, type unions, and composition.
+*/
+function jsonSchemaPropertyToZod(prop) {
+	if (prop.$ref) return applyDescription(z.unknown(), prop);
+	if (Array.isArray(prop.oneOf) && prop.oneOf.length > 0) for (const branch of prop.oneOf) {
+		const z1 = jsonSchemaPropertyToZod(branch);
+		if (z1) return applyDescription(z1, prop);
+	}
+	if (Array.isArray(prop.anyOf) && prop.anyOf.length > 0) for (const branch of prop.anyOf) {
+		const z1 = jsonSchemaPropertyToZod(branch);
+		if (z1) return applyDescription(z1, prop);
+	}
+	if (Array.isArray(prop.allOf) && prop.allOf.length > 0) for (let i = prop.allOf.length - 1; i >= 0; i--) {
+		const branch = prop.allOf[i];
+		const z1 = jsonSchemaPropertyToZod(branch);
+		if (z1) return applyDescription(z1, prop);
+	}
+	if (Array.isArray(prop.enum) && prop.enum.length > 0) {
+		const stringValues = prop.enum.filter((v) => typeof v === "string");
+		if (stringValues.length > 0) return applyDescription(z.enum(stringValues), prop);
+		return applyDescription(z.number(), prop);
+	}
+	const typeCandidates = pickEffectiveType(prop.type);
+	for (const t of typeCandidates) switch (t) {
+		case "string": return applyStringConstraints(z.string(), prop);
+		case "number":
+		case "integer": return applyNumberConstraints(z.number(), prop);
+		case "boolean": return applyDescription(z.boolean(), prop);
+		case "array": return applyDescription(arrayToZod(prop), prop);
+		case "object": return applyDescription(objectToZod(prop), prop);
+		case "null": continue;
+		default: break;
+	}
+	return applyDescription(z.unknown(), prop);
+}
+function pickEffectiveType(rawType) {
+	if (!rawType) return [];
+	if (Array.isArray(rawType)) return rawType.filter((t) => t !== "null");
+	return rawType === "null" ? [] : [rawType];
+}
+function arrayToZod(prop) {
+	const items = prop.items;
+	if (items && typeof items === "object") {
+		const itemZod = jsonSchemaPropertyToZod(items);
+		if (itemZod) return z.array(itemZod);
+	}
+	return z.array(z.unknown());
+}
+function objectToZod(prop) {
+	if (prop.properties && typeof prop.properties === "object") {
+		const requiredSet = new Set(prop.required ?? []);
+		const innerShape = {};
+		for (const [k, v] of Object.entries(prop.properties)) {
+			if (!v || typeof v !== "object") continue;
+			const inner = jsonSchemaPropertyToZod(v);
+			if (!inner) continue;
+			innerShape[k] = requiredSet.has(k) ? inner : inner.optional();
+		}
+		if (Object.keys(innerShape).length > 0) return z.object(innerShape);
+	}
+	return z.record(z.string(), z.unknown());
+}
+function applyStringConstraints(base, prop) {
+	let s = base;
+	if (typeof prop.minLength === "number") s = s.min(prop.minLength);
+	if (typeof prop.maxLength === "number") s = s.max(prop.maxLength);
+	if (typeof prop.pattern === "string") try {
+		s = s.regex(new RegExp(prop.pattern));
+	} catch {}
+	if (prop.format === "email") s = s.email();
+	if (prop.format === "uuid") s = s.uuid();
+	if (prop.format === "uri" || prop.format === "url") s = s.url();
+	return applyDescription(s, prop);
+}
+function applyNumberConstraints(base, prop) {
+	let n = base;
+	if (typeof prop.minimum === "number") n = n.min(prop.minimum);
+	if (typeof prop.maximum === "number") n = n.max(prop.maximum);
+	return applyDescription(n, prop);
+}
+function applyDescription(zodType, prop) {
+	if (typeof prop.description === "string" && prop.description.length > 0) return zodType.describe(prop.description);
+	return zodType;
+}
+//#endregion
 //#region src/integrations/mcp/resourceToTools.ts
 /**
 * @classytic/arc — Resource → MCP Tools Generator
@@ -359,9 +499,11 @@ const ANNOTATIONS = {
 function resourceToTools(resource, config = {}) {
 	const controller = resource.controller ?? (resource.adapter ? createMcpController(resource) : void 0);
 	if (!controller) return [];
-	const fieldRules = resource.schemaOptions?.fieldRules;
+	const explicitFieldRules = resource.schemaOptions?.fieldRules;
 	const hiddenFields = resource.schemaOptions?.hiddenFields;
 	const readonlyFields = resource.schemaOptions?.readonlyFields;
+	const adapterBodies = explicitFieldRules ? void 0 : getAdapterBodies(resource);
+	const fieldRules = explicitFieldRules ?? deriveFieldRulesFromAdapter(resource);
 	const filterableFields = resource.schemaOptions?.filterableFields ?? resource.queryParser?.allowedFilterFields;
 	const sortableFields = resource.queryParser?.allowedSortFields;
 	const allowedOperators = resource.queryParser?.allowedOperators;
@@ -388,7 +530,8 @@ function resourceToTools(resource, config = {}) {
 				readonlyFields,
 				extraHideFields: config.hideFields,
 				filterableFields,
-				allowedOperators
+				allowedOperators,
+				adapterBodies
 			}),
 			handler: createHandler(op, controller, resource.name, resource.permissions)
 		});
@@ -442,20 +585,57 @@ function buildInputSchema(op, fieldRules, opts) {
 			...opts
 		});
 		case "get": return { id: z.string().describe("Resource ID") };
-		case "create": return fieldRulesToZod(fieldRules, {
-			mode: "create",
-			...opts
-		});
-		case "update": return {
-			id: z.string().describe("Resource ID"),
-			...fieldRulesToZod(fieldRules, {
-				mode: "update",
+		case "create":
+			if (!fieldRules && opts.adapterBodies?.createBody) {
+				const shape = jsonSchemaToZodShape(opts.adapterBodies.createBody, "create");
+				if (shape) return shape;
+			}
+			return fieldRulesToZod(fieldRules, {
+				mode: "create",
 				...opts
-			})
-		};
+			});
+		case "update": {
+			const idShape = { id: z.string().describe("Resource ID") };
+			if (!fieldRules && opts.adapterBodies?.updateBody) {
+				const shape = jsonSchemaToZodShape(opts.adapterBodies.updateBody, "update");
+				if (shape) return {
+					...idShape,
+					...shape
+				};
+			}
+			return {
+				...idShape,
+				...fieldRulesToZod(fieldRules, {
+					mode: "update",
+					...opts
+				})
+			};
+		}
 		case "delete": return { id: z.string().describe("Resource ID") };
 	}
 }
+/**
+* Pull the adapter's `createBody` / `updateBody` schemas, if any.
+* Returns `undefined` when the adapter doesn't generate schemas or throws.
+*/
+function getAdapterBodies(resource) {
+	const adapter = resource.adapter;
+	if (!adapter || typeof adapter.generateSchemas !== "function") return void 0;
+	try {
+		const generated = adapter.generateSchemas(resource.schemaOptions, {
+			idField: resource.idField,
+			resourceName: resource.name
+		});
+		if (!generated || typeof generated !== "object") return void 0;
+		const schemas = generated;
+		return {
+			createBody: schemas.createBody,
+			updateBody: schemas.updateBody
+		};
+	} catch {
+		return;
+	}
+}
 function createHandler(op, controller, resourceName, permissions) {
 	const ctrl = controller;
 	return async (input, ctx) => {
@@ -550,6 +730,63 @@ async function evaluatePermission(check, session, resource, action, input) {
 	if (!permResult.granted) return false;
 	return permResult.filters ?? null;
 }
+/**
+* Derive a fieldRules-shaped object from the adapter's auto-generated body
+* schemas. Used as a fallback when the resource doesn't supply explicit
+* fieldRules — this lets MCP create/update tools accept the same body fields
+* that the REST routes already accept.
+*
+* Returns `undefined` if no usable schema can be extracted, in which case
+* `fieldRulesToZod` falls back to its own behavior (empty shape).
+*/
+function deriveFieldRulesFromAdapter(resource) {
+	const adapter = resource.adapter;
+	if (!adapter || typeof adapter.generateSchemas !== "function") return void 0;
+	let generated;
+	try {
+		generated = adapter.generateSchemas(resource.schemaOptions, {
+			idField: resource.idField,
+			resourceName: resource.name
+		});
+	} catch {
+		return;
+	}
+	if (!generated || typeof generated !== "object") return void 0;
+	const schemas = generated;
+	const createBody = schemas.createBody;
+	const updateBody = schemas.updateBody;
+	const properties = createBody?.properties ?? updateBody?.properties;
+	if (!properties || typeof properties !== "object") return void 0;
+	const requiredSet = new Set(createBody?.required ?? []);
+	const rules = {};
+	for (const [name, propSchema] of Object.entries(properties)) {
+		if (!propSchema || typeof propSchema !== "object") continue;
+		const prop = propSchema;
+		const rawType = prop.type;
+		const rule = { type: mapJsonSchemaTypeToArcType((Array.isArray(rawType) ? rawType.filter((t) => typeof t === "string") : typeof rawType === "string" ? [rawType] : [])[0]) };
+		if (requiredSet.has(name)) rule.required = true;
+		if (typeof prop.description === "string") rule.description = prop.description;
+		if (Array.isArray(prop.enum)) rule.enum = prop.enum.filter((v) => typeof v === "string");
+		if (typeof prop.minLength === "number") rule.minLength = prop.minLength;
+		if (typeof prop.maxLength === "number") rule.maxLength = prop.maxLength;
+		if (typeof prop.minimum === "number") rule.min = prop.minimum;
+		if (typeof prop.maximum === "number") rule.max = prop.maximum;
+		if (typeof prop.pattern === "string") rule.pattern = prop.pattern;
+		rules[name] = rule;
+	}
+	return Object.keys(rules).length > 0 ? rules : void 0;
+}
+function mapJsonSchemaTypeToArcType(jsonType) {
+	switch (jsonType) {
+		case "string": return "string";
+		case "number":
+		case "integer": return "number";
+		case "boolean": return "boolean";
+		case "array": return "array";
+		case "object": return "object";
+		default: return "string";
+	}
+}
 function toCallToolResult(result) {
 	if (!result.success) return {
 		content: [{

package/dist/testing/index.d.mts

@@ -1,5 +1,5 @@
-import { Bt as ResourceDefinition, Ht as CrudRepository, l as AnyRecord } from "../interface-DDW43OmS.mjs";
-import { r as CreateAppOptions } from "../types-D5hJ-k_3.mjs";
+import { Ut as CrudRepository, Vt as ResourceDefinition, u as AnyRecord } from "../interface-DYH8AXGe.mjs";
+import { d as ResourceLike, r as CreateAppOptions } from "../types-By-5mIfn.mjs";
 import Fastify, { FastifyInstance, FastifyServerOptions } from "fastify";
 import { Connection } from "mongoose";
 import { Mock } from "vitest";
@@ -572,6 +572,29 @@ declare function createTestTimer(): {
   reset: () => void;
 };
 //#endregion
+//#region src/testing/preloadResources.d.ts
+/** Eager glob result: `{ '/path/to/file.ts': resourceModule }` */
+type EagerGlobResult = Record<string, unknown>;
+/** Lazy glob result: `{ '/path/to/file.ts': () => Promise<unknown> }` */
+type LazyGlobResult = Record<string, () => Promise<unknown>>;
+/**
+ * Normalize an eager `import.meta.glob` result into a `ResourceLike[]`.
+ *
+ * Accepts either:
+ * - `{ import: 'default' }` form: values are the resource directly
+ * - default form: values are the full module — picks first export with `toPlugin()`
+ *
+ * Throws if any module doesn't yield a valid `ResourceLike`.
+ */
+declare function preloadResources(globResult: EagerGlobResult): ResourceLike[];
+/**
+ * Normalize a lazy `import.meta.glob` result into a `Promise<ResourceLike[]>`.
+ *
+ * Use this when resources depend on prior bootstrap (e.g., engine init) and
+ * cannot be evaluated at import time of the preload file.
+ */
+declare function preloadResourcesAsync(globResult: LazyGlobResult): Promise<ResourceLike[]>;
+//#endregion
 //#region src/testing/TestHarness.d.ts
 /**
  * Test fixtures for a resource
@@ -898,4 +921,4 @@ declare class TestDataLoader {
   cleanup(): Promise<void>;
 }
 //#endregion
-export { type AuthProvider, type AuthResponse, type BetterAuthTestHelpers, type BetterAuthTestHelpersOptions, type CreateTestAppOptions, DatabaseSnapshot, TestFixtures as DbTestFixtures, type GenerateTestFileOptions, HttpTestHarness, type HttpTestHarnessOptions, InMemoryDatabase, type OrgResponse, type SetupBetterAuthOrgOptions, type SetupUserConfig, type TestAppResult, TestDataLoader, TestDatabase, type TestFixtures$1 as TestFixtures, TestHarness, type TestHarnessOptions, type TestOrgContext, TestRequestBuilder, TestSeeder, TestTransaction, type TestUserContext, createBetterAuthProvider, createBetterAuthTestHelpers, createConfigTestSuite, createDataFactory, createHttpTestHarness, createJwtAuthProvider, createMinimalTestApp, createMockController, createMockReply, createMockRepository, createMockRequest, createMockUser, createSnapshotMatcher, createSpy, createTestApp, createTestAuth, createTestHarness, createTestTimer, generateTestFile, request, safeParseBody, setupBetterAuthOrg, waitFor, withTestDb };
+export { type AuthProvider, type AuthResponse, type BetterAuthTestHelpers, type BetterAuthTestHelpersOptions, type CreateTestAppOptions, DatabaseSnapshot, TestFixtures as DbTestFixtures, type GenerateTestFileOptions, HttpTestHarness, type HttpTestHarnessOptions, InMemoryDatabase, type OrgResponse, type SetupBetterAuthOrgOptions, type SetupUserConfig, type TestAppResult, TestDataLoader, TestDatabase, type TestFixtures$1 as TestFixtures, TestHarness, type TestHarnessOptions, type TestOrgContext, TestRequestBuilder, TestSeeder, TestTransaction, type TestUserContext, createBetterAuthProvider, createBetterAuthTestHelpers, createConfigTestSuite, createDataFactory, createHttpTestHarness, createJwtAuthProvider, createMinimalTestApp, createMockController, createMockReply, createMockRepository, createMockRequest, createMockUser, createSnapshotMatcher, createSpy, createTestApp, createTestAuth, createTestHarness, createTestTimer, generateTestFile, preloadResources, preloadResourcesAsync, request, safeParseBody, setupBetterAuthOrg, waitFor, withTestDb };

package/dist/testing/index.mjs

@@ -1066,6 +1066,50 @@ function createTestTimer() {
 	};
 }
 //#endregion
+//#region src/testing/preloadResources.ts
+/**
+* Normalize an eager `import.meta.glob` result into a `ResourceLike[]`.
+*
+* Accepts either:
+* - `{ import: 'default' }` form: values are the resource directly
+* - default form: values are the full module — picks first export with `toPlugin()`
+*
+* Throws if any module doesn't yield a valid `ResourceLike`.
+*/
+function preloadResources(globResult) {
+	const resources = [];
+	for (const [path, value] of Object.entries(globResult)) {
+		const resource = pickResource(value);
+		if (!resource) throw new Error(`preloadResources: ${path} does not export a valid resource.\n    Expected: a default export OR a named export with toPlugin().`);
+		resources.push(resource);
+	}
+	return resources.sort((a, b) => (a.name ?? "").localeCompare(b.name ?? ""));
+}
+/**
+* Normalize a lazy `import.meta.glob` result into a `Promise<ResourceLike[]>`.
+*
+* Use this when resources depend on prior bootstrap (e.g., engine init) and
+* cannot be evaluated at import time of the preload file.
+*/
+async function preloadResourcesAsync(globResult) {
+	return (await Promise.all(Object.entries(globResult).map(async ([path, loader]) => {
+		const resource = pickResource(await loader());
+		if (!resource) throw new Error(`preloadResourcesAsync: ${path} does not export a valid resource.\n    Expected: a default export OR a named export with toPlugin().`);
+		return resource;
+	}))).sort((a, b) => (a.name ?? "").localeCompare(b.name ?? ""));
+}
+function pickResource(value) {
+	if (!value || typeof value !== "object") return void 0;
+	if (typeof value.toPlugin === "function") return value;
+	const mod = value;
+	const candidates = [
+		mod.default,
+		mod.resource,
+		...Object.values(mod)
+	];
+	for (const c of candidates) if (c && typeof c === "object" && typeof c.toPlugin === "function") return c;
+}
+//#endregion
 //#region src/testing/TestHarness.ts
 /**
 * Resource Test Harness
@@ -1752,7 +1796,7 @@ function runEventTests(resourceName, displayName, events) {
 * ```
 */
 async function createTestApp(options = {}) {
-	const { createApp } = await import("../createApp-Bol7DLUf.mjs").then((n) => n.r);
+	const { createApp } = await import("../createApp-D2w0LdYJ.mjs").then((n) => n.r);
 	const { useInMemoryDb = true, mongoUri: providedMongoUri, ...appOptions } = options;
 	const defaultAuth = {
 		type: "jwt",
@@ -1950,4 +1994,4 @@ var TestDataLoader = class {
 	}
 };
 //#endregion
-export { DatabaseSnapshot, TestFixtures as DbTestFixtures, HttpTestHarness, InMemoryDatabase, TestDataLoader, TestDatabase, TestHarness, TestRequestBuilder, TestSeeder, TestTransaction, createBetterAuthProvider, createBetterAuthTestHelpers, createConfigTestSuite, createDataFactory, createHttpTestHarness, createJwtAuthProvider, createMinimalTestApp, createMockController, createMockReply, createMockRepository, createMockRequest, createMockUser, createSnapshotMatcher, createSpy, createTestApp, createTestAuth, createTestHarness, createTestTimer, generateTestFile, request, safeParseBody, setupBetterAuthOrg, waitFor, withTestDb };
+export { DatabaseSnapshot, TestFixtures as DbTestFixtures, HttpTestHarness, InMemoryDatabase, TestDataLoader, TestDatabase, TestHarness, TestRequestBuilder, TestSeeder, TestTransaction, createBetterAuthProvider, createBetterAuthTestHelpers, createConfigTestSuite, createDataFactory, createHttpTestHarness, createJwtAuthProvider, createMinimalTestApp, createMockController, createMockReply, createMockRepository, createMockRequest, createMockUser, createSnapshotMatcher, createSpy, createTestApp, createTestAuth, createTestHarness, createTestTimer, generateTestFile, preloadResources, preloadResourcesAsync, request, safeParseBody, setupBetterAuthOrg, waitFor, withTestDb };

package/dist/types/index.d.mts

@@ -1,4 +1,4 @@
 import { _ as isMember, a as AUTHENTICATED_SCOPE, d as getTeamId, g as isElevated, h as isAuthenticated, l as getOrgId, m as hasOrgAccess, n as ElevationOptions, o as PUBLIC_SCOPE, s as RequestScope, t as ElevationEvent, u as getOrgRoles } from "../elevation-C_taLQrM.mjs";
-import { $ as RegistryEntry, A as GracefulShutdownOptions, B as LookupOption, C as CrudSchemas, D as FastifyWithAuth, E as FastifyRequestExtras, F as InferResourceDoc, Ft as IControllerResponse, G as OwnershipCheck, Gt as PaginationParams, H as MiddlewareHandler, Ht as CrudRepository, I as IntrospectionData, It as IRequestContext, J as PresetFunction, K as ParsedQuery, Kt as QueryOptions, L as IntrospectionPluginOptions, Lt as RouteHandler, M as HealthOptions, Mt as ControllerLike, N as InferAdapterDoc, Nt as FastifyHandler, O as FastifyWithDecorators, P as InferDocType, Pt as IController, Q as RateLimitConfig, R as JWTPayload, S as CrudRouterOptions, St as getUserId, T as EventsDecorator, U as ObjectId, Ut as InferDoc, V as MiddlewareConfig, W as OpenApiSchemas, Wt as PaginatedResult, X as PresetResult, Y as PresetHook, Z as QueryParserInterface, _ as AuthenticatorContext, _t as UserLike, at as ResourceConfig, b as CrudController, bt as ValidationResult, c as AdditionalRoute, ct as ResourceMetadata, d as ArcDecorator, dt as RouteSchemaOptions, et as RegistryStats, f as ArcInternalMetadata, ft as ServiceContext, g as Authenticator, gt as TypedResourceConfig, h as AuthPluginOptions, ht as TypedRepository, it as ResourceCacheConfig, j as HealthCheck, jt as ControllerHandler, k as FieldRule, l as AnyRecord, lt as ResourcePermissions, m as AuthHelpers, mt as TypedController, nt as RequestIdOptions, ot as ResourceHookContext, p as ArcRequest, pt as TokenPair, q as PopulateOption, rt as RequestWithExtras, st as ResourceHooks, tt as RequestContext, u as ApiResponse, ut as RouteHandlerMethod, v as ConfigError, vt as UserOrganization, w as EventDefinition, wt as BaseControllerOptions, x as CrudRouteKey, xt as envelope, y as ControllerQueryOptions, yt as ValidateOptions, z as JwtContext } from "../interface-DDW43OmS.mjs";
+import { $ as RateLimitConfig, A as FieldRule, B as JwtContext, C as CrudRouterOptions, Ct as getUserId, D as FastifyRequestExtras, E as EventsDecorator, F as InferDocType, Ft as IController, G as OpenApiSchemas, Gt as PaginatedResult, H as MiddlewareConfig, I as InferResourceDoc, It as IControllerResponse, J as PopulateOption, K as OwnershipCheck, Kt as PaginationParams, L as IntrospectionData, Lt as IRequestContext, M as HealthCheck, Mt as ControllerHandler, N as HealthOptions, Nt as ControllerLike, O as FastifyWithAuth, P as InferAdapterDoc, Pt as FastifyHandler, Q as QueryParserInterface, R as IntrospectionPluginOptions, Rt as RouteHandler, S as CrudRouteKey, St as envelope, T as EventDefinition, Tt as BaseControllerOptions, U as MiddlewareHandler, Ut as CrudRepository, V as LookupOption, W as ObjectId, Wt as InferDoc, X as PresetHook, Y as PresetFunction, Z as PresetResult, _ as Authenticator, _t as TypedResourceConfig, at as ResourceCacheConfig, b as ControllerQueryOptions, bt as ValidateOptions, ct as ResourceHooks, d as ApiResponse, dt as RouteHandlerMethod, et as RegistryEntry, f as ArcDecorator, ft as RouteSchemaOptions, g as AuthPluginOptions, gt as TypedRepository, h as AuthHelpers, ht as TypedController, it as RequestWithExtras, j as GracefulShutdownOptions, k as FastifyWithDecorators, l as AdditionalRoute, lt as ResourceMetadata, m as ArcRequest, mt as TokenPair, nt as RequestContext, ot as ResourceConfig, p as ArcInternalMetadata, pt as ServiceContext, q as ParsedQuery, qt as QueryOptions, rt as RequestIdOptions, st as ResourceHookContext, tt as RegistryStats, u as AnyRecord, ut as ResourcePermissions, v as AuthenticatorContext, vt as UserLike, w as CrudSchemas, x as CrudController, xt as ValidationResult, y as ConfigError, yt as UserOrganization, z as JWTPayload } from "../interface-DYH8AXGe.mjs";
 import { i as UserBase, n as PermissionContext, r as PermissionResult, t as PermissionCheck } from "../types-BNUccdcf.mjs";
 export { AUTHENTICATED_SCOPE, AdditionalRoute, AnyRecord, ApiResponse, ArcDecorator, ArcInternalMetadata, ArcRequest, AuthHelpers, AuthPluginOptions, Authenticator, AuthenticatorContext, BaseControllerOptions, ConfigError, ControllerHandler, ControllerLike, ControllerQueryOptions, CrudController, CrudRepository, CrudRouteKey, CrudRouterOptions, CrudSchemas, ElevationEvent, ElevationOptions, EventDefinition, EventsDecorator, FastifyHandler, FastifyRequestExtras, FastifyWithAuth, FastifyWithDecorators, FieldRule, GracefulShutdownOptions, HealthCheck, HealthOptions, IController, IControllerResponse, IRequestContext, InferAdapterDoc, InferDoc, InferDocType, InferResourceDoc, IntrospectionData, IntrospectionPluginOptions, JWTPayload, JwtContext, LookupOption, MiddlewareConfig, MiddlewareHandler, ObjectId, OpenApiSchemas, OwnershipCheck, PUBLIC_SCOPE, PaginatedResult, PaginationParams, ParsedQuery, PermissionCheck, PermissionContext, PermissionResult, PopulateOption, PresetFunction, PresetHook, PresetResult, QueryOptions, QueryParserInterface, RateLimitConfig, RegistryEntry, RegistryStats, RequestContext, RequestIdOptions, RequestScope, RequestWithExtras, ResourceCacheConfig, ResourceConfig, ResourceHookContext, ResourceHooks, ResourceMetadata, ResourcePermissions, RouteHandler, RouteHandlerMethod, RouteSchemaOptions, ServiceContext, TokenPair, TypedController, TypedRepository, TypedResourceConfig, UserBase, UserLike, UserOrganization, ValidateOptions, ValidationResult, envelope, getOrgId, getOrgRoles, getTeamId, getUserId, hasOrgAccess, isAuthenticated, isElevated, isMember };

package/dist/{types-D5rjsS_i.d.mts → types-B4_TDdPe.d.mts}

@@ -1,4 +1,4 @@
-import { Bt as ResourceDefinition } from "./interface-DDW43OmS.mjs";
+import { Vt as ResourceDefinition } from "./interface-DYH8AXGe.mjs";
 import { z } from "zod";
 
 //#region src/integrations/mcp/types.d.ts

package/dist/{types-D5hJ-k_3.d.mts → types-By-5mIfn.d.mts}

@@ -1,5 +1,5 @@
 import { n as ElevationOptions } from "./elevation-C_taLQrM.mjs";
-import { g as Authenticator } from "./interface-DDW43OmS.mjs";
+import { _ as Authenticator } from "./interface-DYH8AXGe.mjs";
 import { t as ExternalOpenApiPaths } from "./externalPaths-DpO-s7r8.mjs";
 import { i as CacheStore } from "./interface-D_BWALyZ.mjs";
 import { r as QueryCachePluginOptions } from "./queryCachePlugin-DcmETvcB.mjs";
@@ -52,6 +52,12 @@ import { FastifyInstance, FastifyPluginAsync, FastifyReply, FastifyRequest, Fast
  * // Minimal resource (plain object)
  * const simple: ResourceLike = { name: 'ping', toPlugin: () => () => {} };
  * ```
+ *
+ * **DO NOT add an index signature** (`[key: string]: unknown`) to this interface.
+ * Class instances (like `ResourceDefinition`) don't implicitly carry index signatures,
+ * so adding one here makes `ResourceDefinition` *unassignable* to `ResourceLike` —
+ * the exact opposite of the intent. TypeScript's structural typing already allows
+ * classes with extra properties to satisfy this interface without an index signature.
  */
 interface ResourceLike {
   /** Plugin factory — called by createApp to register routes */

package/dist/utils/index.d.mts

@@ -1,4 +1,4 @@
-import { K as ParsedQuery, W as OpenApiSchemas, Z as QueryParserInterface, l as AnyRecord } from "../interface-DDW43OmS.mjs";
+import { G as OpenApiSchemas, Q as QueryParserInterface, q as ParsedQuery, u as AnyRecord } from "../interface-DYH8AXGe.mjs";
 import { a as NotFoundError, c as RateLimitError, d as ValidationError, i as ForbiddenError, l as ServiceUnavailableError, m as isArcError, n as ConflictError, o as OrgAccessDeniedError, p as createError, r as ErrorDetails, s as OrgRequiredError, t as ArcError, u as UnauthorizedError } from "../errors-CcVbl1-T.mjs";
 import { a as CircuitBreakerStats, c as createCircuitBreakerRegistry, i as CircuitBreakerRegistry, n as CircuitBreakerError, o as CircuitState, r as CircuitBreakerOptions, s as createCircuitBreaker, t as CircuitBreaker } from "../circuitBreaker-JP2GdJ4b.mjs";
 import { FastifyInstance } from "fastify";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@classytic/arc",
-  "version": "2.6.1",
+  "version": "2.6.3",
   "description": "Resource-oriented backend framework for Fastify — clean, minimal, powerful, tree-shakable",
   "type": "module",
   "exports": {
@@ -222,31 +222,31 @@
   "peerDependencies": {
     "@classytic/mongokit": ">=3.5.0",
     "@classytic/streamline": ">=2.0.0",
-    "@fastify/cors": "^11.0.0",
-    "@fastify/helmet": "^13.0.0",
-    "@fastify/jwt": "^10.0.0",
-    "@fastify/multipart": "^9.0.0",
-    "@fastify/rate-limit": "^10.0.0",
-    "@fastify/sensible": "^6.0.0",
-    "@fastify/type-provider-typebox": "^6.0.0",
-    "@fastify/under-pressure": "^9.0.0",
-    "@fastify/websocket": "^11.0.0",
+    "@fastify/cors": ">=11.0.0",
+    "@fastify/helmet": ">=13.0.0",
+    "@fastify/jwt": ">=10.0.0",
+    "@fastify/multipart": ">=9.0.0",
+    "@fastify/rate-limit": ">=10.0.0",
+    "@fastify/sensible": ">=6.0.0",
+    "@fastify/type-provider-typebox": ">=6.0.0",
+    "@fastify/under-pressure": ">=9.0.0",
+    "@fastify/websocket": ">=11.0.0",
     "@modelcontextprotocol/sdk": ">=1.28.0",
     "@opentelemetry/auto-instrumentations-node": ">=0.40.0",
     "@opentelemetry/exporter-trace-otlp-http": ">=0.50.0",
     "@opentelemetry/instrumentation-http": ">=0.50.0",
     "@opentelemetry/instrumentation-mongodb": ">=0.40.0",
     "@opentelemetry/sdk-node": ">=0.50.0",
-    "@sinclair/typebox": "^0.34.0",
+    "@sinclair/typebox": ">=0.34.0",
     "better-auth": ">=1.5.5",
-    "bullmq": "^5.0.0",
-    "fastify": "^5.7.4",
-    "fastify-raw-body": "^5.0.0",
-    "ioredis": "^5.0.0",
-    "mongodb": "^6.0.0 || ^7.0.0",
+    "bullmq": ">=5.0.0",
+    "fastify": ">=5.0.0",
+    "fastify-raw-body": ">=5.0.0",
+    "ioredis": ">=5.0.0",
+    "mongodb": ">=6.0.0",
     "mongoose": ">=9.0.0",
-    "pino-pretty": "^13.0.0",
-    "zod": "^4.0.0"
+    "pino-pretty": ">=13.0.0",
+    "zod": ">=4.0.0"
   },
   "peerDependenciesMeta": {
     "@classytic/mongokit": {