@classytic/arc 2.7.1 → 2.7.7

package/dist/{interface-Dwzqt4mn.d.mts → interface-B91alUzq.d.mts}

@@ -1,6 +1,6 @@
-import { r as RequestScope } from "./types-CNEbix8T.mjs";
-import { n as FieldPermissionMap } from "./fields-CYuLMJPD.mjs";
-import { i as UserBase, t as PermissionCheck } from "./types-DPsC0taJ.mjs";
+import { r as RequestScope } from "./types--D3vvfdt.mjs";
+import { n as FieldPermissionMap } from "./fields-D4nMDqnK.mjs";
+import { i as UserBase, t as PermissionCheck } from "./types-B4BNthET.mjs";
 import { FastifyInstance, FastifyPluginAsync, FastifyReply, FastifyRequest, RouteHandlerMethod, RouteHandlerMethod as RouteHandlerMethod$1 } from "fastify";
 
 //#region src/hooks/HookSystem.d.ts
@@ -795,7 +795,7 @@ type ControllerHandler<TResponse = unknown, TBody = unknown, TParams extends Rec
  * }]
  * ```
  */
-type FastifyHandler = (request: FastifyRequest, reply: FastifyReply) => Promise<void> | void;
+type FastifyHandler<RouteGeneric extends Record<string, unknown> = Record<string, unknown>> = (request: FastifyRequest<RouteGeneric>, reply: FastifyReply) => Promise<unknown> | unknown;
 /**
  * Union type for route handlers
  */

package/dist/{mongodb-Bq90j-Uj.d.mts → mongodb-B7zupyck.d.mts}

@@ -1,4 +1,4 @@
-import { n as IdempotencyResult, r as IdempotencyStore } from "./interface-B9rHWPxD.mjs";
+import { n as IdempotencyResult, r as IdempotencyStore } from "./interface-CSbZdv_3.mjs";
 
 //#region src/idempotency/stores/mongodb.d.ts
 interface MongoConnection {

package/dist/{mongodb-DdyYlIXg.d.mts → mongodb-Cgu9F1Nd.d.mts}

@@ -1,4 +1,4 @@
-import { i as UserBase } from "./types-DPsC0taJ.mjs";
+import { i as UserBase } from "./types-B4BNthET.mjs";
 
 //#region src/audit/stores/interface.d.ts
 type AuditAction = "create" | "update" | "delete" | "restore" | "custom";

package/dist/{openapi-C5UhIeWu.mjs → openapi-D7Z7VODz.mjs}

@@ -1,5 +1,5 @@
 import { t as getUserRoles } from "./types-ZUu_h0jp.mjs";
-import { n as convertRouteSchema } from "./schemaConverter-0TyONAwM.mjs";
+import { n as convertRouteSchema } from "./schemaConverter-Y5EejTnJ.mjs";
 import fp from "fastify-plugin";
 //#region src/docs/openapi.ts
 const openApiPlugin = async (fastify, opts = {}) => {

package/dist/org/index.d.mts

@@ -1,5 +1,5 @@
-import { Rt as RouteHandler } from "../interface-Dwzqt4mn.mjs";
-import { i as UserBase } from "../types-DPsC0taJ.mjs";
+import { Rt as RouteHandler } from "../interface-B91alUzq.mjs";
+import { i as UserBase } from "../types-B4BNthET.mjs";
 import { InvitationAdapter, InvitationDoc, MemberDoc, OrgAdapter, OrgDoc, OrgPermissionStatement, OrgRole, OrganizationPluginOptions } from "./types.mjs";
 import { FastifyPluginAsync, RouteHandlerMethod } from "fastify";
 

package/dist/permissions/index.d.mts

@@ -1,4 +1,4 @@
-import { a as applyFieldWritePermissions, i as applyFieldReadPermissions, n as FieldPermissionMap, o as fields, r as FieldPermissionType, s as resolveEffectiveRoles, t as FieldPermission } from "../fields-CYuLMJPD.mjs";
-import { a as getUserRoles, i as UserBase, n as PermissionContext, o as normalizeRoles, r as PermissionResult, t as PermissionCheck } from "../types-DPsC0taJ.mjs";
-import { A as RoleHierarchy, C as authenticated, D as publicRead, E as presets_d_exports, M as applyPermissionResult, N as normalizePermissionResult, O as publicReadAdminWrite, S as adminOnly, T as ownerWithAdminBypass, _ as requireScopeContext, a as allOf, b as roles, c as createDynamicPermissionMatrix, d as requireAuth, f as requireOrgInScope, g as requireRoles, h as requireOwnership, i as PermissionEventBus, j as createRoleHierarchy, k as readOnly, l as createOrgPermissions, m as requireOrgRole, n as DynamicPermissionMatrix, o as allowPublic, p as requireOrgMembership, r as DynamicPermissionMatrixConfig, s as anyOf, t as ConnectEventsOptions, u as denyAll, v as requireServiceScope, w as fullPublic, x as when, y as requireTeamMembership } from "../index-BYpRGXif.mjs";
+import { a as applyFieldWritePermissions, i as applyFieldReadPermissions, n as FieldPermissionMap, o as fields, r as FieldPermissionType, s as resolveEffectiveRoles, t as FieldPermission } from "../fields-D4nMDqnK.mjs";
+import { a as getUserRoles, i as UserBase, n as PermissionContext, o as normalizeRoles, r as PermissionResult, t as PermissionCheck } from "../types-B4BNthET.mjs";
+import { A as RoleHierarchy, C as authenticated, D as publicRead, E as presets_d_exports, M as applyPermissionResult, N as normalizePermissionResult, O as publicReadAdminWrite, S as adminOnly, T as ownerWithAdminBypass, _ as requireScopeContext, a as allOf, b as roles, c as createDynamicPermissionMatrix, d as requireAuth, f as requireOrgInScope, g as requireRoles, h as requireOwnership, i as PermissionEventBus, j as createRoleHierarchy, k as readOnly, l as createOrgPermissions, m as requireOrgRole, n as DynamicPermissionMatrix, o as allowPublic, p as requireOrgMembership, r as DynamicPermissionMatrixConfig, s as anyOf, t as ConnectEventsOptions, u as denyAll, v as requireServiceScope, w as fullPublic, x as when, y as requireTeamMembership } from "../index-B0extFr4.mjs";
 export { ConnectEventsOptions, DynamicPermissionMatrix, DynamicPermissionMatrixConfig, FieldPermission, FieldPermissionMap, FieldPermissionType, PermissionCheck, PermissionContext, PermissionEventBus, PermissionResult, RoleHierarchy, UserBase, adminOnly, allOf, allowPublic, anyOf, applyFieldReadPermissions, applyFieldWritePermissions, applyPermissionResult, authenticated, createDynamicPermissionMatrix, createOrgPermissions, createRoleHierarchy, denyAll, fields, fullPublic, getUserRoles, normalizePermissionResult, normalizeRoles, ownerWithAdminBypass, presets_d_exports as permissions, publicRead, publicReadAdminWrite, readOnly, requireAuth, requireOrgInScope, requireOrgMembership, requireOrgRole, requireOwnership, requireRoles, requireScopeContext, requireServiceScope, requireTeamMembership, resolveEffectiveRoles, roles, when };

package/dist/plugins/index.d.mts

@@ -1,8 +1,9 @@
-import { Bt as ResourceRegistry, H as MiddlewareConfig, X as PresetHook, cn as HookSystem, ft as RouteSchemaOptions, l as AdditionalRoute, u as AnyRecord } from "../interface-Dwzqt4mn.mjs";
-import { t as ExternalOpenApiPaths } from "../externalPaths-Dg7OLsKo.mjs";
-import { _ as cachingPlugin, a as versioningPlugin, c as MetricsOptions, d as SSEOptions, f as _default$6, g as _default$1, h as CachingRule, i as _default$7, l as _default$4, m as CachingOptions, n as errorHandlerPlugin, o as MetricEntry, p as ssePlugin, r as VersioningOptions, s as MetricsCollector, t as ErrorHandlerOptions, u as metricsPlugin } from "../errorHandler-COa51ho_.mjs";
-import { t as TracingOptions } from "../tracing-65B51Dw3.mjs";
+import { Bt as ResourceRegistry, H as MiddlewareConfig, X as PresetHook, cn as HookSystem, ft as RouteSchemaOptions, l as AdditionalRoute, u as AnyRecord } from "../interface-B91alUzq.mjs";
+import { t as ExternalOpenApiPaths } from "../externalPaths-iba7jD3d.mjs";
+import { _ as cachingPlugin, a as versioningPlugin, c as MetricsOptions, d as SSEOptions, f as _default$6, g as _default$1, h as CachingRule, i as _default$7, l as _default$4, m as CachingOptions, n as errorHandlerPlugin, o as MetricEntry, p as ssePlugin, r as VersioningOptions, s as MetricsCollector, t as ErrorHandlerOptions, u as metricsPlugin } from "../errorHandler-pCpEtNd7.mjs";
+import { t as TracingOptions } from "../tracing-DEqdGkr-.mjs";
 import { FastifyInstance, FastifyPluginAsync } from "fastify";
+import * as _$node_stream0 from "node:stream";
 
 //#region src/core/arcCorePlugin.d.ts
 interface ArcCorePluginOptions {
@@ -148,6 +149,52 @@ interface HealthOptions {
 declare const healthPlugin: FastifyPluginAsync<HealthOptions>;
 declare const _default$3: FastifyPluginAsync<HealthOptions>;
 //#endregion
+//#region src/plugins/replyHelpers.d.ts
+declare module "fastify" {
+  interface FastifyReply {
+    /** Send a success response with data */
+    ok<T>(data: T, statusCode?: number): FastifyReply;
+    /** Send an error response */
+    fail(error: string | string[], statusCode?: number): FastifyReply;
+    /** Send a paginated list response */
+    paginated<T>(result: {
+      docs: T[];
+      total: number;
+      page: number;
+      limit: number;
+      [key: string]: unknown;
+    }): FastifyReply;
+    /**
+     * Stream a readable source as a file download or raw stream.
+     *
+     * @example
+     * ```typescript
+     * // CSV export
+     * return reply.stream(csvReadableStream, {
+     *   contentType: 'text/csv',
+     *   filename: 'export.csv',
+     * });
+     *
+     * // PDF download
+     * return reply.stream(pdfBuffer, {
+     *   contentType: 'application/pdf',
+     *   filename: 'report.pdf',
+     * });
+     *
+     * // Raw stream (no Content-Disposition)
+     * return reply.stream(dataStream, { contentType: 'application/octet-stream' });
+     * ```
+     */
+    stream(source: _$node_stream0.Readable | Buffer | AsyncIterable<unknown>, options: {
+      contentType: string;
+      filename?: string;
+      statusCode?: number;
+    }): FastifyReply;
+  }
+}
+declare function replyHelpersPluginFn(fastify: FastifyInstance): Promise<void>;
+declare const replyHelpersPlugin: typeof replyHelpersPluginFn;
+//#endregion
 //#region src/plugins/requestId.d.ts
 interface RequestIdOptions {
   /** Header name to read/write request ID (default: 'x-request-id') */
@@ -166,4 +213,4 @@ declare module "fastify" {
 declare const requestIdPlugin: FastifyPluginAsync<RequestIdOptions>;
 declare const _default$5: FastifyPluginAsync<RequestIdOptions>;
 //#endregion
-export { type ArcCore, type ArcCorePluginOptions, type ArcPlugin, type CachingOptions, type CachingRule, type CreatePluginDefinition, type ErrorHandlerOptions, type GracefulShutdownOptions, type HealthCheck, type HealthOptions, type MetricEntry, type MetricsCollector, type MetricsOptions, type PluginMeta, type PluginResourceResult, type RequestIdOptions, type SSEOptions, type TracingOptions, type VersioningOptions, _default as arcCorePlugin, arcCorePlugin as arcCorePluginFn, _default$1 as cachingPlugin, cachingPlugin as cachingPluginFn, createPlugin, errorHandlerPlugin, errorHandlerPlugin as errorHandlerPluginFn, _default$2 as gracefulShutdownPlugin, gracefulShutdownPlugin as gracefulShutdownPluginFn, _default$3 as healthPlugin, healthPlugin as healthPluginFn, _default$4 as metricsPlugin, metricsPlugin as metricsPluginFn, _default$5 as requestIdPlugin, requestIdPlugin as requestIdPluginFn, _default$6 as ssePlugin, ssePlugin as ssePluginFn, _default$7 as versioningPlugin, versioningPlugin as versioningPluginFn };
+export { type ArcCore, type ArcCorePluginOptions, type ArcPlugin, type CachingOptions, type CachingRule, type CreatePluginDefinition, type ErrorHandlerOptions, type GracefulShutdownOptions, type HealthCheck, type HealthOptions, type MetricEntry, type MetricsCollector, type MetricsOptions, type PluginMeta, type PluginResourceResult, type RequestIdOptions, type SSEOptions, type TracingOptions, type VersioningOptions, _default as arcCorePlugin, arcCorePlugin as arcCorePluginFn, _default$1 as cachingPlugin, cachingPlugin as cachingPluginFn, createPlugin, errorHandlerPlugin, errorHandlerPlugin as errorHandlerPluginFn, _default$2 as gracefulShutdownPlugin, gracefulShutdownPlugin as gracefulShutdownPluginFn, _default$3 as healthPlugin, healthPlugin as healthPluginFn, _default$4 as metricsPlugin, metricsPlugin as metricsPluginFn, replyHelpersPlugin, _default$5 as requestIdPlugin, requestIdPlugin as requestIdPluginFn, _default$6 as ssePlugin, ssePlugin as ssePluginFn, _default$7 as versioningPlugin, versioningPlugin as versioningPluginFn };

package/dist/plugins/index.mjs

@@ -2,13 +2,14 @@ import { p as MUTATION_OPERATIONS } from "../constants-Cxde4rpC.mjs";
 import { o as getOrgId } from "../types-AOD8fxIw.mjs";
 import { t as requestContext } from "../requestContext-xHIKedG6.mjs";
 import { t as hasEvents } from "../typeGuards-CcFZXgU7.mjs";
-import { t as HookSystem } from "../HookSystem-D7lfx--K.mjs";
+import { t as HookSystem } from "../HookSystem-BNYKnrXF.mjs";
 import { t as ResourceRegistry } from "../ResourceRegistry-DsHiG9cL.mjs";
 import { n as caching_default, t as cachingPlugin } from "../caching-5DtLwIqb.mjs";
-import { t as errorHandlerPlugin } from "../errorHandler-DXUttWEO.mjs";
+import { t as errorHandlerPlugin } from "../errorHandler-CH8wk1eD.mjs";
 import { n as metrics_default, t as metricsPlugin } from "../metrics-Qnvwc-LQ.mjs";
-import { n as sse_default, t as ssePlugin } from "../sse-Bp3dabF1.mjs";
-import { n as versioning_default, t as versioningPlugin } from "../versioning-aUUVziBY.mjs";
+import { t as replyHelpersPlugin } from "../replyHelpers-uDUIYh7u.mjs";
+import { n as sse_default, t as ssePlugin } from "../sse-6W0hjVS_.mjs";
+import { n as versioning_default, t as versioningPlugin } from "../versioning-CdBbFefk.mjs";
 import { randomUUID } from "node:crypto";
 import fp from "fastify-plugin";
 //#region src/core/arcCorePlugin.ts
@@ -409,4 +410,4 @@ var requestId_default = fp(requestIdPlugin, {
 	fastify: "5.x"
 });
 //#endregion
-export { arcCorePlugin_default as arcCorePlugin, arcCorePlugin as arcCorePluginFn, caching_default as cachingPlugin, cachingPlugin as cachingPluginFn, createPlugin, errorHandlerPlugin, errorHandlerPlugin as errorHandlerPluginFn, gracefulShutdown_default as gracefulShutdownPlugin, gracefulShutdownPlugin as gracefulShutdownPluginFn, health_default as healthPlugin, healthPlugin as healthPluginFn, metrics_default as metricsPlugin, metricsPlugin as metricsPluginFn, requestId_default as requestIdPlugin, requestIdPlugin as requestIdPluginFn, sse_default as ssePlugin, ssePlugin as ssePluginFn, versioning_default as versioningPlugin, versioningPlugin as versioningPluginFn };
+export { arcCorePlugin_default as arcCorePlugin, arcCorePlugin as arcCorePluginFn, caching_default as cachingPlugin, cachingPlugin as cachingPluginFn, createPlugin, errorHandlerPlugin, errorHandlerPlugin as errorHandlerPluginFn, gracefulShutdown_default as gracefulShutdownPlugin, gracefulShutdownPlugin as gracefulShutdownPluginFn, health_default as healthPlugin, healthPlugin as healthPluginFn, metrics_default as metricsPlugin, metricsPlugin as metricsPluginFn, replyHelpersPlugin, requestId_default as requestIdPlugin, requestIdPlugin as requestIdPluginFn, sse_default as ssePlugin, ssePlugin as ssePluginFn, versioning_default as versioningPlugin, versioningPlugin as versioningPluginFn };

package/dist/plugins/tracing-entry.d.mts

@@ -1,2 +1,2 @@
-import { a as traced, i as isTracingAvailable, n as _default, r as createSpan, t as TracingOptions } from "../tracing-65B51Dw3.mjs";
+import { a as traced, i as isTracingAvailable, n as _default, r as createSpan, t as TracingOptions } from "../tracing-DEqdGkr-.mjs";
 export { type TracingOptions, createSpan, isTracingAvailable, traced, _default as tracingPlugin };

package/dist/plugins/tracing-entry.mjs

@@ -44,7 +44,7 @@ try {
 function createTracerProvider(options) {
 	if (!isAvailable) return null;
 	const { serviceName = "@classytic/arc", serviceVersion, exporterUrl = "http://localhost:4318/v1/traces" } = options;
-	const resolvedVersion = serviceVersion ?? "2.7.1";
+	const resolvedVersion = serviceVersion ?? "2.7.7";
 	const exporter = new OTLPTraceExporter({ url: exporterUrl });
 	const provider = new NodeTracerProvider({ resource: { attributes: {
 		"service.name": serviceName,

package/dist/policies/index.d.mts

@@ -1,4 +1,4 @@
-import { t as PermissionCheck } from "../types-DPsC0taJ.mjs";
+import { t as PermissionCheck } from "../types-B4BNthET.mjs";
 import { FastifyReply, FastifyRequest } from "fastify";
 
 //#region src/policies/PolicyInterface.d.ts

package/dist/presets/index.d.mts

@@ -1,4 +1,4 @@
-import { Gt as PaginatedResult, It as IControllerResponse, Lt as IRequestContext, Z as PresetResult, ot as ResourceConfig, u as AnyRecord } from "../interface-Dwzqt4mn.mjs";
+import { Gt as PaginatedResult, It as IControllerResponse, Lt as IRequestContext, Z as PresetResult, ot as ResourceConfig, u as AnyRecord } from "../interface-B91alUzq.mjs";
 import { MultiTenantOptions, TenantFieldSpec, multiTenantPreset } from "./multiTenant.mjs";
 
 //#region src/presets/ownedByUser.d.ts

package/dist/presets/multiTenant.d.mts

@@ -1,4 +1,4 @@
-import { S as CrudRouteKey, Z as PresetResult } from "../interface-Dwzqt4mn.mjs";
+import { S as CrudRouteKey, Z as PresetResult } from "../interface-B91alUzq.mjs";
 
 //#region src/presets/multiTenant.d.ts
 /**

package/dist/{queryCachePlugin-Bw8XyJpX.d.mts → queryCachePlugin-Ckl71mkc.d.mts}

@@ -1,4 +1,4 @@
-import { i as CacheStore } from "./interface-CnluRL4_.mjs";
+import { i as CacheStore } from "./interface-CG7oRZjX.mjs";
 import { FastifyPluginAsync } from "fastify";
 
 //#region src/cache/QueryCache.d.ts

package/dist/{redis-CyCntzTO.d.mts → redis-3TQxm2VZ.d.mts}

@@ -1,4 +1,4 @@
-import { n as IdempotencyResult, r as IdempotencyStore } from "./interface-B9rHWPxD.mjs";
+import { n as IdempotencyResult, r as IdempotencyStore } from "./interface-CSbZdv_3.mjs";
 
 //#region src/idempotency/stores/redis.d.ts
 interface RedisClient {

package/dist/{redis-stream-We_Ucl9-.d.mts → redis-stream-Dag5LFa9.d.mts}

@@ -1,4 +1,4 @@
-import { i as EventTransport, n as EventHandler, r as EventLogger, t as DomainEvent } from "./EventTransport-CUpRK_Lg.mjs";
+import { i as EventTransport, n as EventHandler, r as EventLogger, t as DomainEvent } from "./EventTransport-C4VheKeC.mjs";
 
 //#region src/events/transports/redis-stream.d.ts
 interface RedisStreamLike {

package/dist/registry/index.d.mts

@@ -1,4 +1,4 @@
-import { Bt as ResourceRegistry, R as IntrospectionPluginOptions, zt as RegisterOptions } from "../interface-Dwzqt4mn.mjs";
+import { Bt as ResourceRegistry, R as IntrospectionPluginOptions, zt as RegisterOptions } from "../interface-B91alUzq.mjs";
 import { FastifyPluginAsync } from "fastify";
 
 //#region src/registry/introspectionPlugin.d.ts

package/dist/replyHelpers-uDUIYh7u.mjs

@@ -0,0 +1,40 @@
+import { t as __exportAll } from "./chunk-BpYLSNr0.mjs";
+import fp from "fastify-plugin";
+//#region src/plugins/replyHelpers.ts
+var replyHelpers_exports = /* @__PURE__ */ __exportAll({ replyHelpersPlugin: () => replyHelpersPlugin });
+async function replyHelpersPluginFn(fastify) {
+	fastify.decorateReply("ok", function(data, statusCode = 200) {
+		return this.code(statusCode).send({
+			success: true,
+			data
+		});
+	});
+	fastify.decorateReply("fail", function(error, statusCode = 400) {
+		if (Array.isArray(error)) return this.code(statusCode).send({
+			success: false,
+			errors: error
+		});
+		return this.code(statusCode).send({
+			success: false,
+			error
+		});
+	});
+	fastify.decorateReply("paginated", function(result) {
+		return this.code(200).send({
+			success: true,
+			...result
+		});
+	});
+	fastify.decorateReply("stream", function(source, options) {
+		this.code(options.statusCode ?? 200);
+		this.header("content-type", options.contentType);
+		if (options.filename) this.header("content-disposition", `attachment; filename="${options.filename}"`);
+		return this.send(source);
+	});
+}
+const replyHelpersPlugin = fp(replyHelpersPluginFn, {
+	name: "arc-reply-helpers",
+	fastify: "5.x"
+});
+//#endregion
+export { replyHelpers_exports as n, replyHelpersPlugin as t };

package/dist/{resourceToTools-CkVSSzKg.mjs → resourceToTools-BJkoQoUP.mjs}

@@ -1,6 +1,6 @@
 import { t as BaseController } from "./BaseController-CpMfCXdn.mjs";
 import { n as normalizePermissionResult } from "./applyPermissionResult-D6GPMsvh.mjs";
-import { t as pluralize } from "./pluralize-COpOVar8.mjs";
+import { t as pluralize } from "./pluralize-Dckfq6US.mjs";
 import { z } from "zod";
 //#region src/integrations/mcp/createMcpServer.ts
 /**
@@ -228,7 +228,7 @@ function buildRequestContext(input, auth, operation, policyFilters, scopeOverrid
 	const sessionScope = buildScope(auth);
 	const scope = scopeOverride && sessionScope.kind === "public" ? scopeOverride : sessionScope;
 	const base = {
-		user: auth ? {
+		user: auth?.userId ? {
 			id: auth.userId,
 			_id: auth.userId,
 			...auth
@@ -344,17 +344,23 @@ function expandOperatorKeys(input) {
 }
 function buildScope(auth) {
 	if (!auth) return { kind: "public" };
+	if (auth.clientId && auth.organizationId) return {
+		kind: "service",
+		clientId: auth.clientId,
+		organizationId: auth.organizationId,
+		scopes: auth.scopes
+	};
 	if (auth.organizationId) return {
 		kind: "member",
 		userId: auth.userId,
-		userRoles: [],
+		userRoles: auth.roles ?? [],
 		organizationId: auth.organizationId,
-		orgRoles: []
+		orgRoles: auth.orgRoles ?? []
 	};
 	return {
 		kind: "authenticated",
 		userId: auth.userId,
-		userRoles: []
+		userRoles: auth.roles ?? []
 	};
 }
 //#endregion

package/dist/rpc/index.d.mts

@@ -1,4 +1,4 @@
-import { r as CircuitBreakerOptions } from "../circuitBreaker-DwxrljLB.mjs";
+import { r as CircuitBreakerOptions } from "../circuitBreaker-BBPDt-J_.mjs";
 
 //#region src/rpc/serviceClient.d.ts
 interface RetryConfig {

package/dist/{schemaConverter-0TyONAwM.mjs → schemaConverter-Y5EejTnJ.mjs}

@@ -34,10 +34,7 @@ function toJsonSchema(input) {
 	if (typeof input !== "object") return void 0;
 	if (isJsonSchema(input)) return input;
 	if (isZodSchema(input)) {
-		if (!_toJSONSchema) {
-			console.warn("[Arc] Zod schema detected but zod is not installed. Install zod v4: npm install zod");
-			return input;
-		}
+		if (!_toJSONSchema) return input;
 		try {
 			return _toJSONSchema(input, { target: "openapi-3.0" });
 		} catch {

package/dist/scope/index.d.mts

@@ -1,5 +1,5 @@
-import { _ as isAuthenticated, a as getClientId, b as isOrgInScope, c as getOrgRoles, d as getScopeContextMap, f as getServiceScopes, g as hasOrgAccess, h as getUserRoles, i as getAncestorOrgIds, l as getRequestScope, m as getUserId, n as PUBLIC_SCOPE, o as getOrgContext, p as getTeamId, r as RequestScope, s as getOrgId, t as AUTHENTICATED_SCOPE, u as getScopeContext, v as isElevated, x as isService, y as isMember } from "../types-CNEbix8T.mjs";
-import { i as elevationPlugin, n as ElevationOptions, r as _default, t as ElevationEvent } from "../elevation-Dm-HTBCt.mjs";
+import { _ as isAuthenticated, a as getClientId, b as isOrgInScope, c as getOrgRoles, d as getScopeContextMap, f as getServiceScopes, g as hasOrgAccess, h as getUserRoles, i as getAncestorOrgIds, l as getRequestScope, m as getUserId, n as PUBLIC_SCOPE, o as getOrgContext, p as getTeamId, r as RequestScope, s as getOrgId, t as AUTHENTICATED_SCOPE, u as getScopeContext, v as isElevated, x as isService, y as isMember } from "../types--D3vvfdt.mjs";
+import { i as elevationPlugin, n as ElevationOptions, r as _default, t as ElevationEvent } from "../elevation-D7WK0RXq.mjs";
 import { FastifyReply, FastifyRequest } from "fastify";
 
 //#region src/scope/rateLimitKey.d.ts

package/dist/testing/index.d.mts

@@ -1,5 +1,5 @@
-import { Ut as CrudRepository, Vt as ResourceDefinition, u as AnyRecord } from "../interface-Dwzqt4mn.mjs";
-import { d as ResourceLike, r as CreateAppOptions } from "../types-D0qf0Mf4.mjs";
+import { Ut as CrudRepository, Vt as ResourceDefinition, u as AnyRecord } from "../interface-B91alUzq.mjs";
+import { d as ResourceLike, r as CreateAppOptions } from "../types-CKB47kiu.mjs";
 import Fastify, { FastifyInstance, FastifyServerOptions } from "fastify";
 import { Connection } from "mongoose";
 import { Mock } from "vitest";

package/dist/testing/index.mjs

@@ -1796,7 +1796,7 @@ function runEventTests(resourceName, displayName, events) {
 * ```
 */
 async function createTestApp(options = {}) {
-	const { createApp } = await import("../createApp-B_nvKNAQ.mjs").then((n) => n.r);
+	const { createApp } = await import("../createApp-D7e77m8C.mjs").then((n) => n.r);
 	const { useInMemoryDb = true, mongoUri: providedMongoUri, ...appOptions } = options;
 	const defaultAuth = {
 		type: "jwt",

package/dist/types/index.d.mts

@@ -1,5 +1,5 @@
-import { _ as isAuthenticated, c as getOrgRoles, g as hasOrgAccess, n as PUBLIC_SCOPE, p as getTeamId, r as RequestScope, s as getOrgId, t as AUTHENTICATED_SCOPE, v as isElevated, y as isMember } from "../types-CNEbix8T.mjs";
-import { $ as RateLimitConfig, A as FieldRule, B as JwtContext, C as CrudRouterOptions, Ct as getUserId, D as FastifyRequestExtras, E as EventsDecorator, F as InferDocType, Ft as IController, G as OpenApiSchemas, Gt as PaginatedResult, H as MiddlewareConfig, I as InferResourceDoc, It as IControllerResponse, J as PopulateOption, K as OwnershipCheck, Kt as PaginationParams, L as IntrospectionData, Lt as IRequestContext, M as HealthCheck, Mt as ControllerHandler, N as HealthOptions, Nt as ControllerLike, O as FastifyWithAuth, P as InferAdapterDoc, Pt as FastifyHandler, Q as QueryParserInterface, R as IntrospectionPluginOptions, Rt as RouteHandler, S as CrudRouteKey, St as envelope, T as EventDefinition, Tt as BaseControllerOptions, U as MiddlewareHandler, Ut as CrudRepository, V as LookupOption, W as ObjectId, Wt as InferDoc, X as PresetHook, Y as PresetFunction, Z as PresetResult, _ as Authenticator, _t as TypedResourceConfig, at as ResourceCacheConfig, b as ControllerQueryOptions, bt as ValidateOptions, ct as ResourceHooks, d as ApiResponse, dt as RouteHandlerMethod, et as RegistryEntry, f as ArcDecorator, ft as RouteSchemaOptions, g as AuthPluginOptions, gt as TypedRepository, h as AuthHelpers, ht as TypedController, it as RequestWithExtras, j as GracefulShutdownOptions, k as FastifyWithDecorators, l as AdditionalRoute, lt as ResourceMetadata, m as ArcRequest, mt as TokenPair, nt as RequestContext, ot as ResourceConfig, p as ArcInternalMetadata, pt as ServiceContext, q as ParsedQuery, qt as QueryOptions, rt as RequestIdOptions, st as ResourceHookContext, tt as RegistryStats, u as AnyRecord, ut as ResourcePermissions, v as AuthenticatorContext, vt as UserLike, w as CrudSchemas, x as CrudController, xt as ValidationResult, y as ConfigError, yt as UserOrganization, z as JWTPayload } from "../interface-Dwzqt4mn.mjs";
-import { i as UserBase, n as PermissionContext, r as PermissionResult, t as PermissionCheck } from "../types-DPsC0taJ.mjs";
-import { n as ElevationOptions, t as ElevationEvent } from "../elevation-Dm-HTBCt.mjs";
+import { _ as isAuthenticated, c as getOrgRoles, g as hasOrgAccess, n as PUBLIC_SCOPE, p as getTeamId, r as RequestScope, s as getOrgId, t as AUTHENTICATED_SCOPE, v as isElevated, y as isMember } from "../types--D3vvfdt.mjs";
+import { $ as RateLimitConfig, A as FieldRule, B as JwtContext, C as CrudRouterOptions, Ct as getUserId, D as FastifyRequestExtras, E as EventsDecorator, F as InferDocType, Ft as IController, G as OpenApiSchemas, Gt as PaginatedResult, H as MiddlewareConfig, I as InferResourceDoc, It as IControllerResponse, J as PopulateOption, K as OwnershipCheck, Kt as PaginationParams, L as IntrospectionData, Lt as IRequestContext, M as HealthCheck, Mt as ControllerHandler, N as HealthOptions, Nt as ControllerLike, O as FastifyWithAuth, P as InferAdapterDoc, Pt as FastifyHandler, Q as QueryParserInterface, R as IntrospectionPluginOptions, Rt as RouteHandler, S as CrudRouteKey, St as envelope, T as EventDefinition, Tt as BaseControllerOptions, U as MiddlewareHandler, Ut as CrudRepository, V as LookupOption, W as ObjectId, Wt as InferDoc, X as PresetHook, Y as PresetFunction, Z as PresetResult, _ as Authenticator, _t as TypedResourceConfig, at as ResourceCacheConfig, b as ControllerQueryOptions, bt as ValidateOptions, ct as ResourceHooks, d as ApiResponse, dt as RouteHandlerMethod, et as RegistryEntry, f as ArcDecorator, ft as RouteSchemaOptions, g as AuthPluginOptions, gt as TypedRepository, h as AuthHelpers, ht as TypedController, it as RequestWithExtras, j as GracefulShutdownOptions, k as FastifyWithDecorators, l as AdditionalRoute, lt as ResourceMetadata, m as ArcRequest, mt as TokenPair, nt as RequestContext, ot as ResourceConfig, p as ArcInternalMetadata, pt as ServiceContext, q as ParsedQuery, qt as QueryOptions, rt as RequestIdOptions, st as ResourceHookContext, tt as RegistryStats, u as AnyRecord, ut as ResourcePermissions, v as AuthenticatorContext, vt as UserLike, w as CrudSchemas, x as CrudController, xt as ValidationResult, y as ConfigError, yt as UserOrganization, z as JWTPayload } from "../interface-B91alUzq.mjs";
+import { i as UserBase, n as PermissionContext, r as PermissionResult, t as PermissionCheck } from "../types-B4BNthET.mjs";
+import { n as ElevationOptions, t as ElevationEvent } from "../elevation-D7WK0RXq.mjs";
 export { AUTHENTICATED_SCOPE, AdditionalRoute, AnyRecord, ApiResponse, ArcDecorator, ArcInternalMetadata, ArcRequest, AuthHelpers, AuthPluginOptions, Authenticator, AuthenticatorContext, BaseControllerOptions, ConfigError, ControllerHandler, ControllerLike, ControllerQueryOptions, CrudController, CrudRepository, CrudRouteKey, CrudRouterOptions, CrudSchemas, ElevationEvent, ElevationOptions, EventDefinition, EventsDecorator, FastifyHandler, FastifyRequestExtras, FastifyWithAuth, FastifyWithDecorators, FieldRule, GracefulShutdownOptions, HealthCheck, HealthOptions, IController, IControllerResponse, IRequestContext, InferAdapterDoc, InferDoc, InferDocType, InferResourceDoc, IntrospectionData, IntrospectionPluginOptions, JWTPayload, JwtContext, LookupOption, MiddlewareConfig, MiddlewareHandler, ObjectId, OpenApiSchemas, OwnershipCheck, PUBLIC_SCOPE, PaginatedResult, PaginationParams, ParsedQuery, PermissionCheck, PermissionContext, PermissionResult, PopulateOption, PresetFunction, PresetHook, PresetResult, QueryOptions, QueryParserInterface, RateLimitConfig, RegistryEntry, RegistryStats, RequestContext, RequestIdOptions, RequestScope, RequestWithExtras, ResourceCacheConfig, ResourceConfig, ResourceHookContext, ResourceHooks, ResourceMetadata, ResourcePermissions, RouteHandler, RouteHandlerMethod, RouteSchemaOptions, ServiceContext, TokenPair, TypedController, TypedRepository, TypedResourceConfig, UserBase, UserLike, UserOrganization, ValidateOptions, ValidationResult, envelope, getOrgId, getOrgRoles, getTeamId, getUserId, hasOrgAccess, isAuthenticated, isElevated, isMember };

package/dist/{types-DPsC0taJ.d.mts → types-B4BNthET.d.mts}

@@ -1,4 +1,4 @@
-import { r as RequestScope } from "./types-CNEbix8T.mjs";
+import { r as RequestScope } from "./types--D3vvfdt.mjs";
 import { FastifyRequest } from "fastify";
 
 //#region src/permissions/types.d.ts

package/dist/{types-ClmkMDK1.d.mts → types-C5g2oRC7.d.mts}

@@ -1,4 +1,4 @@
-import { Vt as ResourceDefinition } from "./interface-Dwzqt4mn.mjs";
+import { Vt as ResourceDefinition } from "./interface-B91alUzq.mjs";
 import { z } from "zod";
 
 //#region src/integrations/mcp/types.d.ts
@@ -220,12 +220,28 @@ interface McpSession {
 }
 /** Resolved auth identity for a single MCP request */
 interface McpAuthResult {
-  userId: string;
+  /**
+   * Human user ID. Optional for service/machine principals — when `clientId`
+   * is set and `userId` is omitted, the principal is purely machine-identity
+   * and `ctx.user` will be `null` (not a synthetic user object).
+   */
+  userId?: string;
   organizationId?: string;
   /** User roles (global) — used by guard helpers like requireRole() */
   roles?: string[];
   /** Org-level roles — used by guard helpers */
   orgRoles?: string[];
+  /**
+   * OAuth client ID — set this to enable `kind: "service"` scope.
+   * When present, buildRequestContext produces a service scope instead
+   * of member/authenticated, enabling `requireServiceScope()` checks.
+   */
+  clientId?: string;
+  /**
+   * OAuth scopes (e.g. `['read:products', 'write:orders']`).
+   * Carried on the `service` RequestScope for fine-grained permission checks.
+   */
+  scopes?: readonly string[];
   /** Any extra metadata from the auth resolver */
   [key: string]: unknown;
 }

package/dist/{types-D0qf0Mf4.d.mts → types-CKB47kiu.d.mts}

@@ -1,12 +1,12 @@
-import { _ as Authenticator } from "./interface-Dwzqt4mn.mjs";
-import { n as ElevationOptions } from "./elevation-Dm-HTBCt.mjs";
-import { t as ExternalOpenApiPaths } from "./externalPaths-Dg7OLsKo.mjs";
-import { i as CacheStore } from "./interface-CnluRL4_.mjs";
-import { r as QueryCachePluginOptions } from "./queryCachePlugin-Bw8XyJpX.mjs";
-import { i as EventTransport } from "./EventTransport-CUpRK_Lg.mjs";
-import { t as EventPluginOptions } from "./eventPlugin-BgLxJkIB.mjs";
-import { c as MetricsOptions, d as SSEOptions, m as CachingOptions, r as VersioningOptions, t as ErrorHandlerOptions } from "./errorHandler-COa51ho_.mjs";
-import { r as IdempotencyStore } from "./interface-B9rHWPxD.mjs";
+import { _ as Authenticator } from "./interface-B91alUzq.mjs";
+import { n as ElevationOptions } from "./elevation-D7WK0RXq.mjs";
+import { t as ExternalOpenApiPaths } from "./externalPaths-iba7jD3d.mjs";
+import { i as CacheStore } from "./interface-CG7oRZjX.mjs";
+import { r as QueryCachePluginOptions } from "./queryCachePlugin-Ckl71mkc.mjs";
+import { i as EventTransport } from "./EventTransport-C4VheKeC.mjs";
+import { t as EventPluginOptions } from "./eventPlugin-CdvUoUna.mjs";
+import { c as MetricsOptions, d as SSEOptions, m as CachingOptions, r as VersioningOptions, t as ErrorHandlerOptions } from "./errorHandler-pCpEtNd7.mjs";
+import { r as IdempotencyStore } from "./interface-CSbZdv_3.mjs";
 import { FastifyInstance, FastifyPluginAsync, FastifyReply, FastifyRequest, FastifyServerOptions } from "fastify";
 
 //#region src/factory/loadResources.d.ts
@@ -107,6 +107,10 @@ interface LoadResourcesOptions {
    * @default false
    */
   silent?: boolean;
+  /** Optional logger for diagnostics. No output when omitted (silent by default). */
+  logger?: {
+    warn: (msg: string) => void;
+  };
 }
 /**
  * Scan a directory for resource files and import their default exports.
@@ -598,6 +602,41 @@ interface CreateAppOptions {
   ajv?: {
     keywords?: string[];
   };
+  /**
+   * Enable `reply.ok()`, `reply.fail()`, `reply.paginated()` response helpers.
+   *
+   * Default: `false` (opt-in).
+   *
+   * @example
+   * ```typescript
+   * const app = await createApp({ replyHelpers: true });
+   *
+   * // Then in any handler:
+   * return reply.ok({ name: 'MacBook' });          // → 200 { success: true, data: { ... } }
+   * return reply.ok(product, 201);                  // → 201 { success: true, data: { ... } }
+   * return reply.fail('Not found', 404);            // → 404 { success: false, error: '...' }
+   * return reply.fail(['err1', 'err2'], 422);       // → 422 { success: false, errors: [...] }
+   * return reply.paginated({ docs, total, page, limit });
+   * ```
+   */
+  replyHelpers?: boolean;
+  /**
+   * Auto-convert BigInt values to Number in all JSON responses.
+   *
+   * When `true`, Arc adds a `preSerialization` hook that converts BigInt values
+   * to Number before JSON serialization. Without this, `JSON.stringify` throws
+   * on BigInt values (e.g., from financial libraries like fin-io).
+   *
+   * Default: `false` (opt-in — most apps don't use BigInt).
+   *
+   * @example
+   * ```typescript
+   * const app = await createApp({
+   *   serializeBigInt: true,
+   * });
+   * ```
+   */
+  serializeBigInt?: boolean;
   /**
    * Resources to register automatically.
    * Each resource's `.toPlugin()` is called and registered for you.

package/dist/utils/index.d.mts

@@ -1,6 +1,6 @@
-import { G as OpenApiSchemas, Q as QueryParserInterface, q as ParsedQuery, u as AnyRecord } from "../interface-Dwzqt4mn.mjs";
-import { a as NotFoundError, c as RateLimitError, d as ValidationError, i as ForbiddenError, l as ServiceUnavailableError, m as isArcError, n as ConflictError, o as OrgAccessDeniedError, p as createError, r as ErrorDetails, s as OrgRequiredError, t as ArcError, u as UnauthorizedError } from "../errors-CCSsMpXE.mjs";
-import { a as CircuitBreakerStats, c as createCircuitBreakerRegistry, i as CircuitBreakerRegistry, n as CircuitBreakerError, o as CircuitState, r as CircuitBreakerOptions, s as createCircuitBreaker, t as CircuitBreaker } from "../circuitBreaker-DwxrljLB.mjs";
+import { G as OpenApiSchemas, Q as QueryParserInterface, q as ParsedQuery, u as AnyRecord } from "../interface-B91alUzq.mjs";
+import { a as NotFoundError, c as RateLimitError, d as ValidationError, i as ForbiddenError, l as ServiceUnavailableError, m as isArcError, n as ConflictError, o as OrgAccessDeniedError, p as createError, r as ErrorDetails, s as OrgRequiredError, t as ArcError, u as UnauthorizedError } from "../errors-BS6lZvWy.mjs";
+import { a as CircuitBreakerStats, c as createCircuitBreakerRegistry, i as CircuitBreakerRegistry, n as CircuitBreakerError, o as CircuitState, r as CircuitBreakerOptions, s as createCircuitBreaker, t as CircuitBreaker } from "../circuitBreaker-BBPDt-J_.mjs";
 import { FastifyInstance } from "fastify";
 
 //#region src/utils/compensation.d.ts

package/dist/utils/index.mjs

@@ -2,6 +2,6 @@ import { n as createQueryParser, t as ArcQueryParser } from "../queryParser-CgCt
 import { a as createCircuitBreaker, i as CircuitState, n as CircuitBreakerError, o as createCircuitBreakerRegistry, r as CircuitBreakerRegistry, t as CircuitBreaker } from "../circuitBreaker-l18oRgL5.mjs";
 import { _ as defineCompensation, a as getListQueryParams, c as listResponse, d as paginateWrapper, f as paginationSchema, g as wrapResponse, h as successResponseSchema, i as getDefaultCrudSchemas, l as messageWrapper, m as responses, n as deleteResponse, o as itemResponse, p as queryParams, r as errorResponseSchema, s as itemWrapper, t as createStateMachine, u as mutationResponse, v as withCompensation } from "../utils-B-l6410F.mjs";
 import { a as OrgAccessDeniedError, c as ServiceUnavailableError, f as createError, i as NotFoundError, l as UnauthorizedError, n as ConflictError, o as OrgRequiredError, p as isArcError, r as ForbiddenError, s as RateLimitError, t as ArcError, u as ValidationError } from "../errors-Cg58SLNi.mjs";
-import { a as toJsonSchema, i as isZodSchema, n as convertRouteSchema, r as isJsonSchema, t as convertOpenApiSchemas } from "../schemaConverter-0TyONAwM.mjs";
+import { a as toJsonSchema, i as isZodSchema, n as convertRouteSchema, r as isJsonSchema, t as convertOpenApiSchemas } from "../schemaConverter-Y5EejTnJ.mjs";
 import { t as hasEvents } from "../typeGuards-CcFZXgU7.mjs";
 export { ArcError, ArcQueryParser, CircuitBreaker, CircuitBreakerError, CircuitBreakerRegistry, CircuitState, ConflictError, ForbiddenError, NotFoundError, OrgAccessDeniedError, OrgRequiredError, RateLimitError, ServiceUnavailableError, UnauthorizedError, ValidationError, convertOpenApiSchemas, convertRouteSchema, createCircuitBreaker, createCircuitBreakerRegistry, createError, createQueryParser, createStateMachine, defineCompensation, deleteResponse, errorResponseSchema, getDefaultCrudSchemas, getListQueryParams, hasEvents, isArcError, isJsonSchema, isZodSchema, itemResponse, itemWrapper, listResponse, messageWrapper, mutationResponse, paginateWrapper, paginationSchema, queryParams, responses, successResponseSchema, toJsonSchema, withCompensation, wrapResponse };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@classytic/arc",
-  "version": "2.7.1",
+  "version": "2.7.7",
   "description": "Resource-oriented backend framework for Fastify — clean, minimal, powerful, tree-shakable",
   "type": "module",
   "exports": {
@@ -212,20 +212,23 @@
     "lint:fix": "biome check --fix src/",
     "lint:all": "biome check src/ tests/",
     "test": "vitest run",
+    "test:main": "vitest run",
+    "test:perf": "node --expose-gc ./node_modules/vitest/vitest.mjs run --config vitest.perf.config.ts",
+    "test:ci": "npm run test:main && npm run test:perf",
     "test:watch": "vitest",
     "test:ui": "vitest --ui",
     "test:coverage": "vitest run --coverage",
     "test:e2e": "vitest run tests/e2e",
     "test:unit": "vitest run tests/core tests/hooks tests/utils tests/plugins",
     "smoke": "node scripts/smoke-test.mjs",
-    "prepublishOnly": "npm run typecheck && npm test && npm run build && npm run smoke"
+    "prepublishOnly": "npm run typecheck && npm run lint && npm run build && npm run test:ci && npm run smoke"
   },
   "engines": {
     "node": ">=22"
   },
   "peerDependencies": {
-    "@classytic/mongokit": ">=3.5.5",
-    "@classytic/streamline": ">=2.0.0",
+    "@classytic/mongokit": ">=3.5.6",
+    "@classytic/streamline": ">=2.1.0",
     "@fastify/cors": ">=11.0.0",
     "@fastify/helmet": ">=13.0.0",
     "@fastify/jwt": ">=10.0.0",
@@ -343,7 +346,8 @@
   "devDependencies": {
     "@better-auth/mongo-adapter": "^1.6.0",
     "@biomejs/biome": "^2.4.10",
-    "@classytic/mongokit": "^3.5.5",
+    "@classytic/mongokit": "3.5.6",
+    "@classytic/streamline": "^2.1.0",
     "@fastify/cors": "^11.2.0",
     "@fastify/helmet": "^13.0.2",
     "@fastify/jwt": "^10.0.0",