@classytic/arc 2.6.3 → 2.7.3

package/dist/{defineResource-wWMBB4GP.mjs → defineResource-DZzyl4a4.mjs}

@@ -1,14 +1,15 @@
 import { s as DEFAULT_UPDATE_METHOD, t as CRUD_OPERATIONS } from "./constants-Cxde4rpC.mjs";
-import { d as isElevated, f as isMember, n as PUBLIC_SCOPE } from "./types-BhtYdxZU.mjs";
-import { t as BaseController } from "./BaseController-DzRtluEF.mjs";
+import { _ as isElevated, n as PUBLIC_SCOPE, v as isMember } from "./types-AOD8fxIw.mjs";
+import { t as BaseController } from "./BaseController-CpMfCXdn.mjs";
 import { i as resolveEffectiveRoles, t as applyFieldReadPermissions } from "./fields-ipsbIRPK.mjs";
 import { t as getUserRoles } from "./types-ZUu_h0jp.mjs";
-import { t as requestContext } from "./requestContext-DYtmNpm5.mjs";
-import { i as getDefaultCrudSchemas } from "./utils-Dc0WhlIl.mjs";
-import { r as ForbiddenError } from "./errors-NoQKsbAT.mjs";
-import { n as convertRouteSchema, t as convertOpenApiSchemas } from "./schemaConverter-DjzHpFam.mjs";
-import { t as hasEvents } from "./typeGuards-Cj5Rgvlg.mjs";
-import { r as getAvailablePresets, t as applyPresets } from "./presets-BMfdy34e.mjs";
+import { n as normalizePermissionResult, t as applyPermissionResult } from "./applyPermissionResult-D6GPMsvh.mjs";
+import { t as requestContext } from "./requestContext-xHIKedG6.mjs";
+import { i as getDefaultCrudSchemas } from "./utils-B-l6410F.mjs";
+import { r as ForbiddenError } from "./errors-Cg58SLNi.mjs";
+import { n as convertRouteSchema, t as convertOpenApiSchemas } from "./schemaConverter-0TyONAwM.mjs";
+import { t as hasEvents } from "./typeGuards-CcFZXgU7.mjs";
+import { r as getAvailablePresets, t as applyPresets } from "./presets-BFrGvvjL.mjs";
 //#region src/pipeline/pipe.ts
 /**
 * Compose pipeline steps into an ordered array.
@@ -372,17 +373,7 @@ function buildPermissionMiddleware(permissionCheck, resourceName, action) {
 			});
 			return;
 		}
-		if (typeof result === "boolean") {
-			if (!result) {
-				reply.code(context.user ? 403 : 401).send({
-					success: false,
-					error: context.user ? "Permission denied" : "Authentication required"
-				});
-				return;
-			}
-			return;
-		}
-		const permResult = result;
+		const permResult = normalizePermissionResult(result);
 		if (!permResult.granted) {
 			const defaultMsg = context.user ? "Permission denied" : "Authentication required";
 			const reason = permResult.reason && permResult.reason.length <= 100 ? permResult.reason : defaultMsg;
@@ -392,10 +383,7 @@ function buildPermissionMiddleware(permissionCheck, resourceName, action) {
 			});
 			return;
 		}
-		if (permResult.filters) reqWithExtras._policyFilters = {
-			...reqWithExtras._policyFilters ?? {},
-			...permResult.filters
-		};
+		applyPermissionResult(permResult, request);
 	};
 }
 /**
@@ -907,6 +895,13 @@ function defineResource(config) {
 		}
 	}
 	const repository = config.adapter?.repository;
+	if (config.idField === void 0 && repository) {
+		const repoIdField = repository.idField;
+		if (typeof repoIdField === "string" && repoIdField !== "_id") config = {
+			...config,
+			idField: repoIdField
+		};
+	}
 	const crudRoutes = CRUD_OPERATIONS;
 	const disabledRoutes = new Set(config.disabledRoutes ?? []);
 	const hasCrudRoutes = !config.disableDefaultRoutes && crudRoutes.some((route) => !disabledRoutes.has(route));
@@ -1218,22 +1213,32 @@ var ResourceDefinition = class {
 				}
 				const listQuerySchema = self._registryMeta?.openApiSchemas?.listQuery;
 				if (listQuerySchema) {
-					const KEEP_AS_IS = new Set([
-						"page",
-						"limit",
-						"sort",
-						"search",
-						"select",
-						"after",
-						"populate",
-						"lookup",
-						"aggregate"
-					]);
+					const NORMALIZED_PROPS = {
+						page: {
+							type: "integer",
+							minimum: 1
+						},
+						limit: {
+							type: "integer",
+							minimum: 1
+						},
+						sort: {},
+						search: {},
+						select: {},
+						after: {},
+						populate: {},
+						lookup: {},
+						aggregate: {}
+					};
 					const props = listQuerySchema.properties;
 					const normalizedProps = props ? { ...props } : void 0;
-					if (normalizedProps) for (const key of Object.keys(normalizedProps)) {
-						if (KEEP_AS_IS.has(key)) continue;
-						normalizedProps[key] = {};
+					if (normalizedProps) {
+						const originalLimit = normalizedProps.limit;
+						if (originalLimit?.maximum) NORMALIZED_PROPS.limit = {
+							...NORMALIZED_PROPS.limit,
+							maximum: originalLimit.maximum
+						};
+						for (const key of Object.keys(normalizedProps)) normalizedProps[key] = NORMALIZED_PROPS[key] ?? {};
 					}
 					const normalizedSchema = {
 						...listQuerySchema,

package/dist/docs/index.d.mts

@@ -1,5 +1,5 @@
-import { et as RegistryEntry } from "../interface-DYH8AXGe.mjs";
-import { t as ExternalOpenApiPaths } from "../externalPaths-DpO-s7r8.mjs";
+import { et as RegistryEntry } from "../interface-B91alUzq.mjs";
+import { t as ExternalOpenApiPaths } from "../externalPaths-iba7jD3d.mjs";
 import { FastifyPluginAsync } from "fastify";
 
 //#region src/docs/openapi.d.ts

package/dist/docs/index.mjs

@@ -1,5 +1,5 @@
 import { t as getUserRoles } from "../types-ZUu_h0jp.mjs";
-import { n as openApiPlugin, r as openapi_default, t as buildOpenApiSpec } from "../openapi-CBmZ6EQN.mjs";
+import { n as openApiPlugin, r as openapi_default, t as buildOpenApiSpec } from "../openapi-BBSTVcMm.mjs";
 import fp from "fastify-plugin";
 //#region src/docs/scalar.ts
 const scalarPlugin = async (fastify, opts = {}) => {

package/dist/dynamic/index.d.mts

@@ -1,5 +1,5 @@
-import { Vt as ResourceDefinition, r as DataAdapter } from "../interface-DYH8AXGe.mjs";
-import { t as PermissionCheck } from "../types-BNUccdcf.mjs";
+import { Vt as ResourceDefinition, r as DataAdapter } from "../interface-B91alUzq.mjs";
+import { t as PermissionCheck } from "../types-B4BNthET.mjs";
 
 //#region src/dynamic/ArcDynamicLoader.d.ts
 interface ArcArchitectureSchema {

package/dist/dynamic/index.mjs

@@ -1,6 +1,6 @@
 import { t as ArcQueryParser } from "../queryParser-CgCtsjti.mjs";
-import { n as defineResource } from "../defineResource-wWMBB4GP.mjs";
-import { S as readOnly, _ as fullPublic, b as publicRead, g as authenticated, h as adminOnly, v as ownerWithAdminBypass, x as publicReadAdminWrite } from "../permissions-C8ImI8gC.mjs";
+import { n as defineResource } from "../defineResource-DZzyl4a4.mjs";
+import { C as publicRead, T as readOnly, b as fullPublic, v as adminOnly, w as publicReadAdminWrite, x as ownerWithAdminBypass, y as authenticated } from "../permissions-CH4cNwJi.mjs";
 //#region src/dynamic/ArcDynamicLoader.ts
 const VALID_FIELD_TYPES = new Set([
 	"string",

package/dist/{elevation-BEdACOLB.mjs → elevation-By_p2lnn.mjs}

@@ -1,6 +1,6 @@
 import { t as __exportAll } from "./chunk-BpYLSNr0.mjs";
 import { t as getUserRoles } from "./types-ZUu_h0jp.mjs";
-import { t as arcLog } from "./logger-Dz3j1ItV.mjs";
+import { t as arcLog } from "./logger-DLg8-Ueg.mjs";
 import fp from "fastify-plugin";
 //#region src/scope/elevation.ts
 var elevation_exports = /* @__PURE__ */ __exportAll({

package/dist/elevation-D7WK0RXq.d.mts

@@ -0,0 +1,23 @@
+import { FastifyPluginAsync, FastifyRequest } from "fastify";
+
+//#region src/scope/elevation.d.ts
+interface ElevationOptions {
+  /** Roles that can use elevation (default: ['superadmin']) */
+  platformRoles?: string[];
+  /** Header name for scope declaration (default: 'x-arc-scope') */
+  scopeHeader?: string;
+  /** Header name for target organization (default: 'x-organization-id') */
+  orgHeader?: string;
+  /** Called when elevation happens — use for audit logging */
+  onElevation?: (event: ElevationEvent) => void | Promise<void>;
+}
+interface ElevationEvent {
+  userId: string;
+  organizationId?: string;
+  request: FastifyRequest;
+  timestamp: Date;
+}
+declare const elevationPlugin: FastifyPluginAsync<ElevationOptions>;
+declare const _default: FastifyPluginAsync<ElevationOptions>;
+//#endregion
+export { elevationPlugin as i, ElevationOptions as n, _default as r, ElevationEvent as t };

package/dist/{errorHandler-r2595m8T.mjs → errorHandler-CH8wk1eD.mjs}

@@ -1,11 +1,11 @@
 import { t as __exportAll } from "./chunk-BpYLSNr0.mjs";
-import { p as isArcError } from "./errors-NoQKsbAT.mjs";
+import { p as isArcError } from "./errors-Cg58SLNi.mjs";
 import fp from "fastify-plugin";
 //#region src/plugins/errorHandler.ts
 var errorHandler_exports = /* @__PURE__ */ __exportAll({ errorHandlerPlugin: () => errorHandlerPlugin });
 async function errorHandlerPluginFn(fastify, options = {}) {
 	const isProduction = process.env.NODE_ENV === "production";
-	const { includeStack = !isProduction, onError, errorMap = {} } = options;
+	const { includeStack = !isProduction, onError, errorMap = {}, errorMappers = [] } = options;
 	fastify.setErrorHandler(async (error, request, reply) => {
 		if (onError) try {
 			await onError(error, request);
@@ -13,6 +13,21 @@ async function errorHandlerPluginFn(fastify, options = {}) {
 			request.log.error({ err: callbackError }, "Error in onError callback");
 		}
 		const requestId = request.id;
+		if (errorMappers.length > 0) {
+			for (const mapper of errorMappers) if (error instanceof mapper.type) {
+				const mapped = mapper.toResponse(error);
+				const response = {
+					success: false,
+					error: mapped.message ?? error.message,
+					code: mapped.code ?? "DOMAIN_ERROR",
+					timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+					...requestId && { requestId },
+					...mapped.details && { details: mapped.details },
+					...includeStack && error.stack ? { stack: error.stack } : {}
+				};
+				return reply.code(mapped.status).send(response);
+			}
+		}
 		const response = {
 			success: false,
 			error: error.message || "Internal Server Error",

package/dist/{errorHandler-Do4vVQ1f.d.mts → errorHandler-pCpEtNd7.d.mts}

@@ -1,4 +1,4 @@
-import { t as DomainEvent } from "./EventTransport-wc5hSLik.mjs";
+import { t as DomainEvent } from "./EventTransport-C4VheKeC.mjs";
 import { FastifyInstance, FastifyPluginAsync, FastifyRequest } from "fastify";
 
 //#region src/plugins/caching.d.ts
@@ -115,6 +115,18 @@ declare const versioningPlugin: FastifyPluginAsync<VersioningOptions>;
 declare const _default: FastifyPluginAsync<VersioningOptions>;
 //#endregion
 //#region src/plugins/errorHandler.d.ts
+/** Class-based error mapper — maps thrown error instances to HTTP responses */
+interface ErrorMapper<T extends Error = Error> {
+  /** Error class to match (uses instanceof) */
+  type: new (...args: unknown[]) => T;
+  /** Convert the error to an HTTP response shape */
+  toResponse: (error: T) => {
+    status: number;
+    code?: string;
+    message?: string;
+    details?: Record<string, unknown>;
+  };
+}
 interface ErrorHandlerOptions {
   /**
    * Include stack trace in error responses (default: false in production)
@@ -125,13 +137,45 @@ interface ErrorHandlerOptions {
    */
   onError?: (error: Error, request: FastifyRequest) => void | Promise<void>;
   /**
-   * Map specific error types to custom responses
+   * Map specific error types to custom responses (by error.name string)
    */
   errorMap?: Record<string, {
     statusCode: number;
     code: string;
     message?: string;
   }>;
+  /**
+   * Class-based error mappers — checked via `instanceof`, highest priority.
+   *
+   * Register your domain error classes once; Arc auto-catches and maps them
+   * in every handler. Handlers just `throw` — no try/catch needed.
+   *
+   * @example
+   * ```typescript
+   * class AccountingError extends Error {
+   *   constructor(message: string, public status: number, public code: string) {
+   *     super(message);
+   *   }
+   * }
+   *
+   * const app = await createApp({
+   *   errorHandler: {
+   *     errorMappers: [
+   *       {
+   *         type: AccountingError,
+   *         toResponse: (err) => ({ status: err.status, code: err.code, message: err.message }),
+   *       },
+   *     ],
+   *   },
+   * });
+   *
+   * // Now handlers just throw:
+   * handler: async (req) => {
+   *   await ledger.post(id); // throws AccountingError → Arc maps to proper HTTP response
+   * }
+   * ```
+   */
+  errorMappers?: ErrorMapper[];
 }
 declare function errorHandlerPluginFn(fastify: FastifyInstance, options?: ErrorHandlerOptions): Promise<void>;
 declare const errorHandlerPlugin: typeof errorHandlerPluginFn;

package/dist/{eventPlugin-Ba00swHF.mjs → eventPlugin-B6U_nCFU.mjs}

@@ -1,5 +1,5 @@
 import { t as __exportAll } from "./chunk-BpYLSNr0.mjs";
-import { t as requestContext } from "./requestContext-DYtmNpm5.mjs";
+import { t as requestContext } from "./requestContext-xHIKedG6.mjs";
 import fp from "fastify-plugin";
 //#region src/events/EventTransport.ts
 /**
@@ -165,9 +165,10 @@ const eventPlugin = async (fastify, opts = {}) => {
 				}
 			}
 			try {
-				if (wal) await wal.save(event);
+				const isInternalEvent = type.startsWith("arc.");
+				if (wal && !isInternalEvent) await wal.save(event);
 				await transport.publish(event);
-				if (wal?.acknowledge) await wal.acknowledge(event.meta.id);
+				if (wal?.acknowledge && !isInternalEvent) await wal.acknowledge(event.meta.id);
 				onPublish?.(event);
 			} catch (error) {
 				fastify.log?.error?.({

package/dist/{eventPlugin-DW45v4V5.d.mts → eventPlugin-CdvUoUna.d.mts}

@@ -1,4 +1,4 @@
-import { i as EventTransport, n as EventHandler, r as EventLogger, t as DomainEvent } from "./EventTransport-wc5hSLik.mjs";
+import { i as EventTransport, n as EventHandler, r as EventLogger, t as DomainEvent } from "./EventTransport-C4VheKeC.mjs";
 import { FastifyPluginAsync } from "fastify";
 
 //#region src/events/defineEvent.d.ts

package/dist/events/index.d.mts

@@ -1,7 +1,7 @@
-import { a as MemoryEventTransport, i as EventTransport, n as EventHandler, o as MemoryEventTransportOptions, r as EventLogger, s as createEvent, t as DomainEvent } from "../EventTransport-wc5hSLik.mjs";
-import { a as withRetry, c as EventDefinitionOutput, d as EventSchema, f as ValidationResult, i as createDeadLetterPublisher, l as EventRegistry, m as defineEvent, n as eventPlugin, o as CustomValidator, p as createEventRegistry, r as RetryOptions, s as EventDefinitionInput, t as EventPluginOptions, u as EventRegistryOptions } from "../eventPlugin-DW45v4V5.mjs";
+import { a as MemoryEventTransport, i as EventTransport, n as EventHandler, o as MemoryEventTransportOptions, r as EventLogger, s as createEvent, t as DomainEvent } from "../EventTransport-C4VheKeC.mjs";
+import { a as withRetry, c as EventDefinitionOutput, d as EventSchema, f as ValidationResult, i as createDeadLetterPublisher, l as EventRegistry, m as defineEvent, n as eventPlugin, o as CustomValidator, p as createEventRegistry, r as RetryOptions, s as EventDefinitionInput, t as EventPluginOptions, u as EventRegistryOptions } from "../eventPlugin-CdvUoUna.mjs";
 import { RedisEventTransportOptions, RedisLike } from "./transports/redis.mjs";
-import { r as RedisStreamTransportOptions, t as RedisStreamLike } from "../redis-stream-BW9UKLZM.mjs";
+import { r as RedisStreamTransportOptions, t as RedisStreamLike } from "../redis-stream-Dag5LFa9.mjs";
 
 //#region src/events/eventTypes.d.ts
 /**

package/dist/events/index.mjs

@@ -1,4 +1,4 @@
-import { a as MemoryEventTransport, i as withRetry, o as createEvent, r as createDeadLetterPublisher, t as eventPlugin } from "../eventPlugin-Ba00swHF.mjs";
+import { a as MemoryEventTransport, i as withRetry, o as createEvent, r as createDeadLetterPublisher, t as eventPlugin } from "../eventPlugin-B6U_nCFU.mjs";
 //#region src/events/defineEvent.ts
 /**
 * defineEvent — Typed Event Definitions with Optional Schema Validation

package/dist/events/transports/redis-stream-entry.d.mts

@@ -1,2 +1,2 @@
-import { n as RedisStreamTransport, r as RedisStreamTransportOptions, t as RedisStreamLike } from "../../redis-stream-BW9UKLZM.mjs";
+import { n as RedisStreamTransport, r as RedisStreamTransportOptions, t as RedisStreamLike } from "../../redis-stream-Dag5LFa9.mjs";
 export { type RedisStreamLike, RedisStreamTransport, type RedisStreamTransportOptions };

package/dist/events/transports/redis.d.mts

@@ -1,4 +1,4 @@
-import { i as EventTransport, n as EventHandler, r as EventLogger, t as DomainEvent } from "../../EventTransport-wc5hSLik.mjs";
+import { i as EventTransport, n as EventHandler, r as EventLogger, t as DomainEvent } from "../../EventTransport-C4VheKeC.mjs";
 
 //#region src/events/transports/redis.d.ts
 interface RedisLike {

package/dist/factory/index.d.mts

@@ -1,4 +1,4 @@
-import { a as CustomPluginAuthOption, c as RawBodyOptions, d as ResourceLike, f as loadResources, i as CustomAuthenticatorOption, l as UnderPressureOptions, n as BetterAuthOption, o as JwtAuthOption, r as CreateAppOptions, s as MultipartOptions, t as AuthOption, u as LoadResourcesOptions } from "../types-By-5mIfn.mjs";
+import { a as CustomPluginAuthOption, c as RawBodyOptions, d as ResourceLike, f as loadResources, i as CustomAuthenticatorOption, l as UnderPressureOptions, n as BetterAuthOption, o as JwtAuthOption, r as CreateAppOptions, s as MultipartOptions, t as AuthOption, u as LoadResourcesOptions } from "../types-2FlNl0mL.mjs";
 import { FastifyInstance } from "fastify";
 
 //#region src/factory/createApp.d.ts

package/dist/factory/index.mjs

@@ -1,4 +1,4 @@
-import { a as edgePreset, c as testingPreset, i as developmentPreset, n as createApp, o as getPreset, s as productionPreset, t as ArcFactory } from "../createApp-D2w0LdYJ.mjs";
+import { a as edgePreset, c as testingPreset, i as developmentPreset, n as createApp, o as getPreset, s as productionPreset, t as ArcFactory } from "../createApp-D7e77m8C.mjs";
 import { readdir } from "node:fs/promises";
 import { dirname, join, resolve } from "node:path";
 import { fileURLToPath, pathToFileURL } from "node:url";

package/dist/hooks/index.d.mts

@@ -1,2 +1,2 @@
-import { _n as defineHook, an as HookOperation, cn as HookSystem, dn as afterDelete, fn as afterUpdate, gn as createHookSystem, hn as beforeUpdate, in as HookHandler, ln as HookSystemOptions, mn as beforeDelete, nn as DefineHookOptions, on as HookPhase, pn as beforeCreate, rn as HookContext, sn as HookRegistration, un as afterCreate } from "../interface-DYH8AXGe.mjs";
+import { _n as defineHook, an as HookOperation, cn as HookSystem, dn as afterDelete, fn as afterUpdate, gn as createHookSystem, hn as beforeUpdate, in as HookHandler, ln as HookSystemOptions, mn as beforeDelete, nn as DefineHookOptions, on as HookPhase, pn as beforeCreate, rn as HookContext, sn as HookRegistration, un as afterCreate } from "../interface-B91alUzq.mjs";
 export { type DefineHookOptions, type HookContext, type HookHandler, type HookOperation, type HookPhase, type HookRegistration, HookSystem, type HookSystemOptions, afterCreate, afterDelete, afterUpdate, beforeCreate, beforeDelete, beforeUpdate, createHookSystem, defineHook };

package/dist/hooks/index.mjs

@@ -1,2 +1,2 @@
-import { a as beforeCreate, c as createHookSystem, i as afterUpdate, l as defineHook, n as afterCreate, o as beforeDelete, r as afterDelete, s as beforeUpdate, t as HookSystem } from "../HookSystem-COkyWztM.mjs";
+import { a as beforeCreate, c as createHookSystem, i as afterUpdate, l as defineHook, n as afterCreate, o as beforeDelete, r as afterDelete, s as beforeUpdate, t as HookSystem } from "../HookSystem-D7lfx--K.mjs";
 export { HookSystem, afterCreate, afterDelete, afterUpdate, beforeCreate, beforeDelete, beforeUpdate, createHookSystem, defineHook };

package/dist/idempotency/index.d.mts

@@ -1,6 +1,6 @@
-import { i as createIdempotencyResult, n as IdempotencyResult, r as IdempotencyStore, t as IdempotencyLock } from "../interface-gr-7qo9j.mjs";
-import { n as MongoIdempotencyStoreOptions } from "../mongodb-pMvOlR5_.mjs";
-import { r as RedisIdempotencyStoreOptions, t as RedisClient } from "../redis-D0Qc-9EW.mjs";
+import { i as createIdempotencyResult, n as IdempotencyResult, r as IdempotencyStore, t as IdempotencyLock } from "../interface-CSbZdv_3.mjs";
+import { n as MongoIdempotencyStoreOptions } from "../mongodb-B7zupyck.mjs";
+import { r as RedisIdempotencyStoreOptions, t as RedisClient } from "../redis-3TQxm2VZ.mjs";
 import { FastifyPluginAsync } from "fastify";
 
 //#region src/idempotency/idempotencyPlugin.d.ts

package/dist/idempotency/mongodb.d.mts

@@ -1,2 +1,2 @@
-import { n as MongoIdempotencyStoreOptions, t as MongoIdempotencyStore } from "../mongodb-pMvOlR5_.mjs";
+import { n as MongoIdempotencyStoreOptions, t as MongoIdempotencyStore } from "../mongodb-B7zupyck.mjs";
 export { MongoIdempotencyStore, type MongoIdempotencyStoreOptions };

package/dist/idempotency/redis.d.mts

@@ -1,2 +1,2 @@
-import { n as RedisIdempotencyStore, r as RedisIdempotencyStoreOptions, t as RedisClient } from "../redis-D0Qc-9EW.mjs";
+import { n as RedisIdempotencyStore, r as RedisIdempotencyStoreOptions, t as RedisClient } from "../redis-3TQxm2VZ.mjs";
 export { type RedisClient, RedisIdempotencyStore, type RedisIdempotencyStoreOptions };