@classytic/arc 2.6.2 → 2.7.1

package/dist/{defineResource-Ckxg6HrZ.mjs → defineResource-DZzyl4a4.mjs}

@@ -1,14 +1,15 @@
 import { s as DEFAULT_UPDATE_METHOD, t as CRUD_OPERATIONS } from "./constants-Cxde4rpC.mjs";
-import { d as isElevated, f as isMember, n as PUBLIC_SCOPE } from "./types-BhtYdxZU.mjs";
-import { t as BaseController } from "./BaseController-AbbRx3e0.mjs";
+import { _ as isElevated, n as PUBLIC_SCOPE, v as isMember } from "./types-AOD8fxIw.mjs";
+import { t as BaseController } from "./BaseController-CpMfCXdn.mjs";
 import { i as resolveEffectiveRoles, t as applyFieldReadPermissions } from "./fields-ipsbIRPK.mjs";
 import { t as getUserRoles } from "./types-ZUu_h0jp.mjs";
-import { t as requestContext } from "./requestContext-DYtmNpm5.mjs";
-import { i as getDefaultCrudSchemas } from "./utils-Dc0WhlIl.mjs";
-import { r as ForbiddenError } from "./errors-NoQKsbAT.mjs";
-import { n as convertRouteSchema, t as convertOpenApiSchemas } from "./schemaConverter-DjzHpFam.mjs";
-import { t as hasEvents } from "./typeGuards-Cj5Rgvlg.mjs";
-import { r as getAvailablePresets, t as applyPresets } from "./presets-BMfdy34e.mjs";
+import { n as normalizePermissionResult, t as applyPermissionResult } from "./applyPermissionResult-D6GPMsvh.mjs";
+import { t as requestContext } from "./requestContext-xHIKedG6.mjs";
+import { i as getDefaultCrudSchemas } from "./utils-B-l6410F.mjs";
+import { r as ForbiddenError } from "./errors-Cg58SLNi.mjs";
+import { n as convertRouteSchema, t as convertOpenApiSchemas } from "./schemaConverter-0TyONAwM.mjs";
+import { t as hasEvents } from "./typeGuards-CcFZXgU7.mjs";
+import { r as getAvailablePresets, t as applyPresets } from "./presets-BFrGvvjL.mjs";
 //#region src/pipeline/pipe.ts
 /**
 * Compose pipeline steps into an ordered array.
@@ -372,17 +373,7 @@ function buildPermissionMiddleware(permissionCheck, resourceName, action) {
 			});
 			return;
 		}
-		if (typeof result === "boolean") {
-			if (!result) {
-				reply.code(context.user ? 403 : 401).send({
-					success: false,
-					error: context.user ? "Permission denied" : "Authentication required"
-				});
-				return;
-			}
-			return;
-		}
-		const permResult = result;
+		const permResult = normalizePermissionResult(result);
 		if (!permResult.granted) {
 			const defaultMsg = context.user ? "Permission denied" : "Authentication required";
 			const reason = permResult.reason && permResult.reason.length <= 100 ? permResult.reason : defaultMsg;
@@ -392,10 +383,7 @@ function buildPermissionMiddleware(permissionCheck, resourceName, action) {
 			});
 			return;
 		}
-		if (permResult.filters) reqWithExtras._policyFilters = {
-			...reqWithExtras._policyFilters ?? {},
-			...permResult.filters
-		};
+		applyPermissionResult(permResult, request);
 	};
 }
 /**
@@ -907,6 +895,13 @@ function defineResource(config) {
 		}
 	}
 	const repository = config.adapter?.repository;
+	if (config.idField === void 0 && repository) {
+		const repoIdField = repository.idField;
+		if (typeof repoIdField === "string" && repoIdField !== "_id") config = {
+			...config,
+			idField: repoIdField
+		};
+	}
 	const crudRoutes = CRUD_OPERATIONS;
 	const disabledRoutes = new Set(config.disabledRoutes ?? []);
 	const hasCrudRoutes = !config.disableDefaultRoutes && crudRoutes.some((route) => !disabledRoutes.has(route));
@@ -1015,9 +1010,38 @@ function defineResource(config) {
 	if (!config.skipRegistry) try {
 		let openApiSchemas;
 		if (config.adapter?.generateSchemas) {
-			const generated = config.adapter.generateSchemas(config.schemaOptions);
+			const adapterContext = {
+				idField: config.idField,
+				resourceName: config.name
+			};
+			const generated = config.adapter.generateSchemas(config.schemaOptions, adapterContext);
 			if (generated) openApiSchemas = generated;
 		}
+		if (config.idField && config.idField !== "_id" && openApiSchemas?.params && typeof openApiSchemas.params === "object") {
+			const params = openApiSchemas.params;
+			const properties = params.properties;
+			const idProp = properties?.id;
+			if (idProp && typeof idProp === "object") {
+				const pattern = idProp.pattern;
+				if (typeof pattern === "string" && (pattern === "^[0-9a-fA-F]{24}$" || pattern === "^[a-f\\d]{24}$" || pattern === "^[a-fA-F0-9]{24}$" || /^\^\[[a-fA-F0-9\\d]+\]\{24\}\$$/.test(pattern))) {
+					const cleanedId = { ...idProp };
+					delete cleanedId.pattern;
+					delete cleanedId.minLength;
+					delete cleanedId.maxLength;
+					if (!cleanedId.description) cleanedId.description = `${config.idField} (custom ID field)`;
+					openApiSchemas = {
+						...openApiSchemas,
+						params: {
+							...params,
+							properties: {
+								...properties,
+								id: cleanedId
+							}
+						}
+					};
+				}
+			}
+		}
 		const queryParser = config.queryParser;
 		if (queryParser?.getQuerySchema) {
 			const querySchema = queryParser.getQuerySchema();
@@ -1156,7 +1180,7 @@ var ResourceDefinition = class {
 				const openApi = self._registryMeta?.openApiSchemas;
 				if (openApi && (!self.customSchemas || Object.keys(self.customSchemas).length === 0)) {
 					const generated = {};
-					const { createBody, updateBody, params, response } = openApi;
+					const { createBody, updateBody, params } = openApi;
 					const safeBody = (schema) => {
 						if (schema && typeof schema === "object" && schema.type === "object") return {
 							additionalProperties: true,
@@ -1189,39 +1213,32 @@ var ResourceDefinition = class {
 				}
 				const listQuerySchema = self._registryMeta?.openApiSchemas?.listQuery;
 				if (listQuerySchema) {
-					const KEEP_TYPE = new Set([
-						"page",
-						"limit",
-						"sort",
-						"search",
-						"select",
-						"after"
-					]);
-					const TYPE_DEPENDENT = new Set([
-						"type",
-						"minimum",
-						"maximum",
-						"minLength",
-						"maxLength",
-						"pattern",
-						"format",
-						"exclusiveMinimum",
-						"exclusiveMaximum",
-						"multipleOf",
-						"minItems",
-						"maxItems",
-						"uniqueItems"
-					]);
+					const NORMALIZED_PROPS = {
+						page: {
+							type: "integer",
+							minimum: 1
+						},
+						limit: {
+							type: "integer",
+							minimum: 1
+						},
+						sort: {},
+						search: {},
+						select: {},
+						after: {},
+						populate: {},
+						lookup: {},
+						aggregate: {}
+					};
 					const props = listQuerySchema.properties;
 					const normalizedProps = props ? { ...props } : void 0;
-					if (normalizedProps) for (const key of Object.keys(normalizedProps)) {
-						if (KEEP_TYPE.has(key)) continue;
-						const prop = normalizedProps[key];
-						if (prop && typeof prop === "object" && "type" in prop) {
-							const cleaned = {};
-							for (const [k, v] of Object.entries(prop)) if (!TYPE_DEPENDENT.has(k)) cleaned[k] = v;
-							normalizedProps[key] = Object.keys(cleaned).length > 0 ? cleaned : {};
-						}
+					if (normalizedProps) {
+						const originalLimit = normalizedProps.limit;
+						if (originalLimit?.maximum) NORMALIZED_PROPS.limit = {
+							...NORMALIZED_PROPS.limit,
+							maximum: originalLimit.maximum
+						};
+						for (const key of Object.keys(normalizedProps)) normalizedProps[key] = NORMALIZED_PROPS[key] ?? {};
 					}
 					const normalizedSchema = {
 						...listQuerySchema,

package/dist/docs/index.d.mts

@@ -1,5 +1,5 @@
-import { $ as RegistryEntry } from "../interface-CrN45qz1.mjs";
-import { t as ExternalOpenApiPaths } from "../externalPaths-DpO-s7r8.mjs";
+import { et as RegistryEntry } from "../interface-Dwzqt4mn.mjs";
+import { t as ExternalOpenApiPaths } from "../externalPaths-Dg7OLsKo.mjs";
 import { FastifyPluginAsync } from "fastify";
 
 //#region src/docs/openapi.d.ts

package/dist/docs/index.mjs

@@ -1,5 +1,5 @@
 import { t as getUserRoles } from "../types-ZUu_h0jp.mjs";
-import { n as openApiPlugin, r as openapi_default, t as buildOpenApiSpec } from "../openapi-CBmZ6EQN.mjs";
+import { n as openApiPlugin, r as openapi_default, t as buildOpenApiSpec } from "../openapi-C5UhIeWu.mjs";
 import fp from "fastify-plugin";
 //#region src/docs/scalar.ts
 const scalarPlugin = async (fastify, opts = {}) => {

package/dist/dynamic/index.d.mts

@@ -1,5 +1,5 @@
-import { Bt as ResourceDefinition, n as DataAdapter } from "../interface-CrN45qz1.mjs";
-import { t as PermissionCheck } from "../types-BNUccdcf.mjs";
+import { Vt as ResourceDefinition, r as DataAdapter } from "../interface-Dwzqt4mn.mjs";
+import { t as PermissionCheck } from "../types-DPsC0taJ.mjs";
 
 //#region src/dynamic/ArcDynamicLoader.d.ts
 interface ArcArchitectureSchema {

package/dist/dynamic/index.mjs

@@ -1,6 +1,6 @@
 import { t as ArcQueryParser } from "../queryParser-CgCtsjti.mjs";
-import { n as defineResource } from "../defineResource-Ckxg6HrZ.mjs";
-import { S as readOnly, _ as fullPublic, b as publicRead, g as authenticated, h as adminOnly, v as ownerWithAdminBypass, x as publicReadAdminWrite } from "../permissions-C8ImI8gC.mjs";
+import { n as defineResource } from "../defineResource-DZzyl4a4.mjs";
+import { C as publicRead, T as readOnly, b as fullPublic, v as adminOnly, w as publicReadAdminWrite, x as ownerWithAdminBypass, y as authenticated } from "../permissions-CH4cNwJi.mjs";
 //#region src/dynamic/ArcDynamicLoader.ts
 const VALID_FIELD_TYPES = new Set([
 	"string",

package/dist/{elevation-BEdACOLB.mjs → elevation-By_p2lnn.mjs}

@@ -1,6 +1,6 @@
 import { t as __exportAll } from "./chunk-BpYLSNr0.mjs";
 import { t as getUserRoles } from "./types-ZUu_h0jp.mjs";
-import { t as arcLog } from "./logger-Dz3j1ItV.mjs";
+import { t as arcLog } from "./logger-DLg8-Ueg.mjs";
 import fp from "fastify-plugin";
 //#region src/scope/elevation.ts
 var elevation_exports = /* @__PURE__ */ __exportAll({

package/dist/elevation-Dm-HTBCt.d.mts

@@ -0,0 +1,23 @@
+import { FastifyPluginAsync, FastifyRequest } from "fastify";
+
+//#region src/scope/elevation.d.ts
+interface ElevationOptions {
+  /** Roles that can use elevation (default: ['superadmin']) */
+  platformRoles?: string[];
+  /** Header name for scope declaration (default: 'x-arc-scope') */
+  scopeHeader?: string;
+  /** Header name for target organization (default: 'x-organization-id') */
+  orgHeader?: string;
+  /** Called when elevation happens — use for audit logging */
+  onElevation?: (event: ElevationEvent) => void | Promise<void>;
+}
+interface ElevationEvent {
+  userId: string;
+  organizationId?: string;
+  request: FastifyRequest;
+  timestamp: Date;
+}
+declare const elevationPlugin: FastifyPluginAsync<ElevationOptions>;
+declare const _default: FastifyPluginAsync<ElevationOptions>;
+//#endregion
+export { elevationPlugin as i, ElevationOptions as n, _default as r, ElevationEvent as t };

package/dist/{errorHandler-Do4vVQ1f.d.mts → errorHandler-COa51ho_.d.mts}

@@ -1,4 +1,4 @@
-import { t as DomainEvent } from "./EventTransport-wc5hSLik.mjs";
+import { t as DomainEvent } from "./EventTransport-CUpRK_Lg.mjs";
 import { FastifyInstance, FastifyPluginAsync, FastifyRequest } from "fastify";
 
 //#region src/plugins/caching.d.ts

package/dist/{errorHandler-r2595m8T.mjs → errorHandler-DXUttWEO.mjs}

@@ -1,5 +1,5 @@
 import { t as __exportAll } from "./chunk-BpYLSNr0.mjs";
-import { p as isArcError } from "./errors-NoQKsbAT.mjs";
+import { p as isArcError } from "./errors-Cg58SLNi.mjs";
 import fp from "fastify-plugin";
 //#region src/plugins/errorHandler.ts
 var errorHandler_exports = /* @__PURE__ */ __exportAll({ errorHandlerPlugin: () => errorHandlerPlugin });

package/dist/{eventPlugin-DW45v4V5.d.mts → eventPlugin-BgLxJkIB.d.mts}

@@ -1,4 +1,4 @@
-import { i as EventTransport, n as EventHandler, r as EventLogger, t as DomainEvent } from "./EventTransport-wc5hSLik.mjs";
+import { i as EventTransport, n as EventHandler, r as EventLogger, t as DomainEvent } from "./EventTransport-CUpRK_Lg.mjs";
 import { FastifyPluginAsync } from "fastify";
 
 //#region src/events/defineEvent.d.ts

package/dist/{eventPlugin-Ba00swHF.mjs → eventPlugin-DsaNNXzZ.mjs}

@@ -1,5 +1,5 @@
 import { t as __exportAll } from "./chunk-BpYLSNr0.mjs";
-import { t as requestContext } from "./requestContext-DYtmNpm5.mjs";
+import { t as requestContext } from "./requestContext-xHIKedG6.mjs";
 import fp from "fastify-plugin";
 //#region src/events/EventTransport.ts
 /**

package/dist/events/index.d.mts

@@ -1,7 +1,7 @@
-import { a as MemoryEventTransport, i as EventTransport, n as EventHandler, o as MemoryEventTransportOptions, r as EventLogger, s as createEvent, t as DomainEvent } from "../EventTransport-wc5hSLik.mjs";
-import { a as withRetry, c as EventDefinitionOutput, d as EventSchema, f as ValidationResult, i as createDeadLetterPublisher, l as EventRegistry, m as defineEvent, n as eventPlugin, o as CustomValidator, p as createEventRegistry, r as RetryOptions, s as EventDefinitionInput, t as EventPluginOptions, u as EventRegistryOptions } from "../eventPlugin-DW45v4V5.mjs";
+import { a as MemoryEventTransport, i as EventTransport, n as EventHandler, o as MemoryEventTransportOptions, r as EventLogger, s as createEvent, t as DomainEvent } from "../EventTransport-CUpRK_Lg.mjs";
+import { a as withRetry, c as EventDefinitionOutput, d as EventSchema, f as ValidationResult, i as createDeadLetterPublisher, l as EventRegistry, m as defineEvent, n as eventPlugin, o as CustomValidator, p as createEventRegistry, r as RetryOptions, s as EventDefinitionInput, t as EventPluginOptions, u as EventRegistryOptions } from "../eventPlugin-BgLxJkIB.mjs";
 import { RedisEventTransportOptions, RedisLike } from "./transports/redis.mjs";
-import { r as RedisStreamTransportOptions, t as RedisStreamLike } from "../redis-stream-BW9UKLZM.mjs";
+import { r as RedisStreamTransportOptions, t as RedisStreamLike } from "../redis-stream-We_Ucl9-.mjs";
 
 //#region src/events/eventTypes.d.ts
 /**

package/dist/events/index.mjs

@@ -1,4 +1,4 @@
-import { a as MemoryEventTransport, i as withRetry, o as createEvent, r as createDeadLetterPublisher, t as eventPlugin } from "../eventPlugin-Ba00swHF.mjs";
+import { a as MemoryEventTransport, i as withRetry, o as createEvent, r as createDeadLetterPublisher, t as eventPlugin } from "../eventPlugin-DsaNNXzZ.mjs";
 //#region src/events/defineEvent.ts
 /**
 * defineEvent — Typed Event Definitions with Optional Schema Validation

package/dist/events/transports/redis-stream-entry.d.mts

@@ -1,2 +1,2 @@
-import { n as RedisStreamTransport, r as RedisStreamTransportOptions, t as RedisStreamLike } from "../../redis-stream-BW9UKLZM.mjs";
+import { n as RedisStreamTransport, r as RedisStreamTransportOptions, t as RedisStreamLike } from "../../redis-stream-We_Ucl9-.mjs";
 export { type RedisStreamLike, RedisStreamTransport, type RedisStreamTransportOptions };

package/dist/events/transports/redis.d.mts

@@ -1,4 +1,4 @@
-import { i as EventTransport, n as EventHandler, r as EventLogger, t as DomainEvent } from "../../EventTransport-wc5hSLik.mjs";
+import { i as EventTransport, n as EventHandler, r as EventLogger, t as DomainEvent } from "../../EventTransport-CUpRK_Lg.mjs";
 
 //#region src/events/transports/redis.d.ts
 interface RedisLike {

package/dist/factory/index.d.mts

@@ -1,4 +1,4 @@
-import { a as CustomPluginAuthOption, c as RawBodyOptions, d as ResourceLike, f as loadResources, i as CustomAuthenticatorOption, l as UnderPressureOptions, n as BetterAuthOption, o as JwtAuthOption, r as CreateAppOptions, s as MultipartOptions, t as AuthOption, u as LoadResourcesOptions } from "../types-C1Z28coa.mjs";
+import { a as CustomPluginAuthOption, c as RawBodyOptions, d as ResourceLike, f as loadResources, i as CustomAuthenticatorOption, l as UnderPressureOptions, n as BetterAuthOption, o as JwtAuthOption, r as CreateAppOptions, s as MultipartOptions, t as AuthOption, u as LoadResourcesOptions } from "../types-D0qf0Mf4.mjs";
 import { FastifyInstance } from "fastify";
 
 //#region src/factory/createApp.d.ts

package/dist/factory/index.mjs

@@ -1,4 +1,4 @@
-import { a as edgePreset, c as testingPreset, i as developmentPreset, n as createApp, o as getPreset, s as productionPreset, t as ArcFactory } from "../createApp-D2w0LdYJ.mjs";
+import { a as edgePreset, c as testingPreset, i as developmentPreset, n as createApp, o as getPreset, s as productionPreset, t as ArcFactory } from "../createApp-B_nvKNAQ.mjs";
 import { readdir } from "node:fs/promises";
 import { dirname, join, resolve } from "node:path";
 import { fileURLToPath, pathToFileURL } from "node:url";

package/dist/hooks/index.d.mts

@@ -1,2 +1,2 @@
-import { an as HookPhase, cn as HookSystemOptions, dn as afterUpdate, fn as beforeCreate, gn as defineHook, hn as createHookSystem, in as HookOperation, ln as afterCreate, mn as beforeUpdate, nn as HookContext, on as HookRegistration, pn as beforeDelete, rn as HookHandler, sn as HookSystem, tn as DefineHookOptions, un as afterDelete } from "../interface-CrN45qz1.mjs";
+import { _n as defineHook, an as HookOperation, cn as HookSystem, dn as afterDelete, fn as afterUpdate, gn as createHookSystem, hn as beforeUpdate, in as HookHandler, ln as HookSystemOptions, mn as beforeDelete, nn as DefineHookOptions, on as HookPhase, pn as beforeCreate, rn as HookContext, sn as HookRegistration, un as afterCreate } from "../interface-Dwzqt4mn.mjs";
 export { type DefineHookOptions, type HookContext, type HookHandler, type HookOperation, type HookPhase, type HookRegistration, HookSystem, type HookSystemOptions, afterCreate, afterDelete, afterUpdate, beforeCreate, beforeDelete, beforeUpdate, createHookSystem, defineHook };

package/dist/hooks/index.mjs

@@ -1,2 +1,2 @@
-import { a as beforeCreate, c as createHookSystem, i as afterUpdate, l as defineHook, n as afterCreate, o as beforeDelete, r as afterDelete, s as beforeUpdate, t as HookSystem } from "../HookSystem-COkyWztM.mjs";
+import { a as beforeCreate, c as createHookSystem, i as afterUpdate, l as defineHook, n as afterCreate, o as beforeDelete, r as afterDelete, s as beforeUpdate, t as HookSystem } from "../HookSystem-D7lfx--K.mjs";
 export { HookSystem, afterCreate, afterDelete, afterUpdate, beforeCreate, beforeDelete, beforeUpdate, createHookSystem, defineHook };

package/dist/idempotency/index.d.mts

@@ -1,6 +1,6 @@
-import { i as createIdempotencyResult, n as IdempotencyResult, r as IdempotencyStore, t as IdempotencyLock } from "../interface-gr-7qo9j.mjs";
-import { n as MongoIdempotencyStoreOptions } from "../mongodb-pMvOlR5_.mjs";
-import { r as RedisIdempotencyStoreOptions, t as RedisClient } from "../redis-D0Qc-9EW.mjs";
+import { i as createIdempotencyResult, n as IdempotencyResult, r as IdempotencyStore, t as IdempotencyLock } from "../interface-B9rHWPxD.mjs";
+import { n as MongoIdempotencyStoreOptions } from "../mongodb-Bq90j-Uj.mjs";
+import { r as RedisIdempotencyStoreOptions, t as RedisClient } from "../redis-CyCntzTO.mjs";
 import { FastifyPluginAsync } from "fastify";
 
 //#region src/idempotency/idempotencyPlugin.d.ts

package/dist/idempotency/mongodb.d.mts

@@ -1,2 +1,2 @@
-import { n as MongoIdempotencyStoreOptions, t as MongoIdempotencyStore } from "../mongodb-pMvOlR5_.mjs";
+import { n as MongoIdempotencyStoreOptions, t as MongoIdempotencyStore } from "../mongodb-Bq90j-Uj.mjs";
 export { MongoIdempotencyStore, type MongoIdempotencyStoreOptions };

package/dist/idempotency/redis.d.mts

@@ -1,2 +1,2 @@
-import { n as RedisIdempotencyStore, r as RedisIdempotencyStoreOptions, t as RedisClient } from "../redis-D0Qc-9EW.mjs";
+import { n as RedisIdempotencyStore, r as RedisIdempotencyStoreOptions, t as RedisClient } from "../redis-CyCntzTO.mjs";
 export { type RedisClient, RedisIdempotencyStore, type RedisIdempotencyStoreOptions };