@classytic/arc 2.7.7 → 2.8.1

package/dist/{types-CKB47kiu.d.mts → types-BlOuKTPw.d.mts}

@@ -1,12 +1,12 @@
-import { _ as Authenticator } from "./interface-B91alUzq.mjs";
-import { n as ElevationOptions } from "./elevation-D7WK0RXq.mjs";
-import { t as ExternalOpenApiPaths } from "./externalPaths-iba7jD3d.mjs";
-import { i as CacheStore } from "./interface-CG7oRZjX.mjs";
-import { r as QueryCachePluginOptions } from "./queryCachePlugin-Ckl71mkc.mjs";
-import { i as EventTransport } from "./EventTransport-C4VheKeC.mjs";
-import { t as EventPluginOptions } from "./eventPlugin-CdvUoUna.mjs";
-import { c as MetricsOptions, d as SSEOptions, m as CachingOptions, r as VersioningOptions, t as ErrorHandlerOptions } from "./errorHandler-pCpEtNd7.mjs";
-import { r as IdempotencyStore } from "./interface-CSbZdv_3.mjs";
+import { x as Authenticator } from "./interface-CS6d7HiB.mjs";
+import { n as ElevationOptions } from "./elevation-UJO3-NvX.mjs";
+import { t as ExternalOpenApiPaths } from "./externalPaths-BQ8QijNH.mjs";
+import { i as CacheStore } from "./interface-bpoLKKqx.mjs";
+import { r as QueryCachePluginOptions } from "./queryCachePlugin-BCFVXnxK.mjs";
+import { i as EventTransport } from "./EventTransport-CLXJUzyT.mjs";
+import { t as EventPluginOptions } from "./eventPlugin-Cdjwo0Gv.mjs";
+import { c as MetricsOptions, d as SSEOptions, m as CachingOptions, r as VersioningOptions, t as ErrorHandlerOptions } from "./errorHandler-DJ7OAB2V.mjs";
+import { r as IdempotencyStore } from "./interface-CkkWm5uR.mjs";
 import { FastifyInstance, FastifyPluginAsync, FastifyReply, FastifyRequest, FastifyServerOptions } from "fastify";
 
 //#region src/factory/loadResources.d.ts

package/dist/{types-B4BNthET.d.mts → types-BoaZHr-2.d.mts}

@@ -1,4 +1,4 @@
-import { r as RequestScope } from "./types--D3vvfdt.mjs";
+import { r as RequestScope } from "./types-CN6JvmYz.mjs";
 import { FastifyRequest } from "fastify";
 
 //#region src/permissions/types.d.ts

package/dist/{types-C5g2oRC7.d.mts → types-D3b7hA00.d.mts}

@@ -1,4 +1,4 @@
-import { Vt as ResourceDefinition } from "./interface-B91alUzq.mjs";
+import { qt as ResourceDefinition } from "./interface-CS6d7HiB.mjs";
 import { z } from "zod";
 
 //#region src/integrations/mcp/types.d.ts

package/dist/utils/index.d.mts

@@ -1,6 +1,6 @@
-import { G as OpenApiSchemas, Q as QueryParserInterface, q as ParsedQuery, u as AnyRecord } from "../interface-B91alUzq.mjs";
-import { a as NotFoundError, c as RateLimitError, d as ValidationError, i as ForbiddenError, l as ServiceUnavailableError, m as isArcError, n as ConflictError, o as OrgAccessDeniedError, p as createError, r as ErrorDetails, s as OrgRequiredError, t as ArcError, u as UnauthorizedError } from "../errors-BS6lZvWy.mjs";
-import { a as CircuitBreakerStats, c as createCircuitBreakerRegistry, i as CircuitBreakerRegistry, n as CircuitBreakerError, o as CircuitState, r as CircuitBreakerOptions, s as createCircuitBreaker, t as CircuitBreaker } from "../circuitBreaker-BBPDt-J_.mjs";
+import { Y as OpenApiSchemas, Z as ParsedQuery, m as AnyRecord, nt as QueryParserInterface } from "../interface-CS6d7HiB.mjs";
+import { a as NotFoundError, c as RateLimitError, d as ValidationError, i as ForbiddenError, l as ServiceUnavailableError, m as isArcError, n as ConflictError, o as OrgAccessDeniedError, p as createError, r as ErrorDetails, s as OrgRequiredError, t as ArcError, u as UnauthorizedError } from "../errors-BI8kEKsO.mjs";
+import { a as CircuitBreakerStats, c as createCircuitBreakerRegistry, i as CircuitBreakerRegistry, n as CircuitBreakerError, o as CircuitState, r as CircuitBreakerOptions, s as createCircuitBreaker, t as CircuitBreaker } from "../circuitBreaker-BGVoB1hD.mjs";
 import { FastifyInstance } from "fastify";
 
 //#region src/utils/compensation.d.ts
@@ -235,20 +235,12 @@ declare function wrapResponse(dataSchema: JsonSchema): JsonSchema;
  * Note: Uses 'docs' array (not 'data') with flat pagination fields
  */
 declare function listResponse(itemSchema: JsonSchema): JsonSchema;
-/**
- * Alias for listResponse - matches local responseSchemas.js naming
- */
-declare const paginateWrapper: typeof listResponse;
 /**
  * Create a single item response schema
  *
  * Runtime format: { success, data: {...} }
  */
 declare function itemResponse(itemSchema: JsonSchema): JsonSchema;
-/**
- * Alias for itemResponse - matches local responseSchemas.js naming
- */
-declare const itemWrapper: typeof itemResponse;
 /**
  * Create a create/update response schema
  */
@@ -259,10 +251,6 @@ declare function mutationResponse(itemSchema: JsonSchema): JsonSchema;
  * Runtime format: { success, data: { message, id?, soft? } }
  */
 declare function deleteResponse(): JsonSchema;
-/**
- * Alias for deleteResponse - matches local responseSchemas.js naming
- */
-declare const messageWrapper: typeof deleteResponse;
 declare const responses: {
   200: (schema: JsonSchema) => {
     description: string;
@@ -647,4 +635,4 @@ declare function hasEvents(instance: FastifyInstance): instance is FastifyInstan
   events: EventsDecorator;
 };
 //#endregion
-export { ArcError, ArcQueryParser, type ArcQueryParserOptions, CircuitBreaker, CircuitBreakerError, type CircuitBreakerOptions, CircuitBreakerRegistry, type CircuitBreakerStats, CircuitState, type CompensationDefinition, type CompensationError, type CompensationHooks, type CompensationResult, type CompensationStep, ConflictError, type ErrorDetails, type EventsDecorator, ForbiddenError, type JsonSchema, NotFoundError, OrgAccessDeniedError, OrgRequiredError, RateLimitError, ServiceUnavailableError, type StateMachine, type TransitionConfig, UnauthorizedError, ValidationError, convertOpenApiSchemas, convertRouteSchema, createCircuitBreaker, createCircuitBreakerRegistry, createError, createQueryParser, createStateMachine, defineCompensation, deleteResponse, errorResponseSchema, getDefaultCrudSchemas, getListQueryParams, hasEvents, isArcError, isJsonSchema, isZodSchema, itemResponse, itemWrapper, listResponse, messageWrapper, mutationResponse, paginateWrapper, paginationSchema, queryParams, responses, successResponseSchema, toJsonSchema, withCompensation, wrapResponse };
+export { ArcError, ArcQueryParser, type ArcQueryParserOptions, CircuitBreaker, CircuitBreakerError, type CircuitBreakerOptions, CircuitBreakerRegistry, type CircuitBreakerStats, CircuitState, type CompensationDefinition, type CompensationError, type CompensationHooks, type CompensationResult, type CompensationStep, ConflictError, type ErrorDetails, type EventsDecorator, ForbiddenError, type JsonSchema, NotFoundError, OrgAccessDeniedError, OrgRequiredError, RateLimitError, ServiceUnavailableError, type StateMachine, type TransitionConfig, UnauthorizedError, ValidationError, convertOpenApiSchemas, convertRouteSchema, createCircuitBreaker, createCircuitBreakerRegistry, createError, createQueryParser, createStateMachine, defineCompensation, deleteResponse, errorResponseSchema, getDefaultCrudSchemas, getListQueryParams, hasEvents, isArcError, isJsonSchema, isZodSchema, itemResponse, listResponse, mutationResponse, paginationSchema, queryParams, responses, successResponseSchema, toJsonSchema, withCompensation, wrapResponse };

package/dist/utils/index.mjs

@@ -1,7 +1,7 @@
 import { n as createQueryParser, t as ArcQueryParser } from "../queryParser-CgCtsjti.mjs";
-import { a as createCircuitBreaker, i as CircuitState, n as CircuitBreakerError, o as createCircuitBreakerRegistry, r as CircuitBreakerRegistry, t as CircuitBreaker } from "../circuitBreaker-l18oRgL5.mjs";
-import { _ as defineCompensation, a as getListQueryParams, c as listResponse, d as paginateWrapper, f as paginationSchema, g as wrapResponse, h as successResponseSchema, i as getDefaultCrudSchemas, l as messageWrapper, m as responses, n as deleteResponse, o as itemResponse, p as queryParams, r as errorResponseSchema, s as itemWrapper, t as createStateMachine, u as mutationResponse, v as withCompensation } from "../utils-B-l6410F.mjs";
-import { a as OrgAccessDeniedError, c as ServiceUnavailableError, f as createError, i as NotFoundError, l as UnauthorizedError, n as ConflictError, o as OrgRequiredError, p as isArcError, r as ForbiddenError, s as RateLimitError, t as ArcError, u as ValidationError } from "../errors-Cg58SLNi.mjs";
-import { a as toJsonSchema, i as isZodSchema, n as convertRouteSchema, r as isJsonSchema, t as convertOpenApiSchemas } from "../schemaConverter-Y5EejTnJ.mjs";
+import { a as toJsonSchema, i as isZodSchema, n as convertRouteSchema, r as isJsonSchema, t as convertOpenApiSchemas } from "../schemaConverter-OxfCshus.mjs";
+import { a as createCircuitBreaker, i as CircuitState, n as CircuitBreakerError, o as createCircuitBreakerRegistry, r as CircuitBreakerRegistry, t as CircuitBreaker } from "../circuitBreaker-cmi5XDv5.mjs";
+import { a as getListQueryParams, c as mutationResponse, d as responses, f as successResponseSchema, h as withCompensation, i as getDefaultCrudSchemas, l as paginationSchema, m as defineCompensation, n as deleteResponse, o as itemResponse, p as wrapResponse, r as errorResponseSchema, s as listResponse, t as createStateMachine, u as queryParams } from "../utils-7sJ8X83I.mjs";
+import { a as OrgAccessDeniedError, c as ServiceUnavailableError, f as createError, i as NotFoundError, l as UnauthorizedError, n as ConflictError, o as OrgRequiredError, p as isArcError, r as ForbiddenError, s as RateLimitError, t as ArcError, u as ValidationError } from "../errors-BF2bIOIS.mjs";
 import { t as hasEvents } from "../typeGuards-CcFZXgU7.mjs";
-export { ArcError, ArcQueryParser, CircuitBreaker, CircuitBreakerError, CircuitBreakerRegistry, CircuitState, ConflictError, ForbiddenError, NotFoundError, OrgAccessDeniedError, OrgRequiredError, RateLimitError, ServiceUnavailableError, UnauthorizedError, ValidationError, convertOpenApiSchemas, convertRouteSchema, createCircuitBreaker, createCircuitBreakerRegistry, createError, createQueryParser, createStateMachine, defineCompensation, deleteResponse, errorResponseSchema, getDefaultCrudSchemas, getListQueryParams, hasEvents, isArcError, isJsonSchema, isZodSchema, itemResponse, itemWrapper, listResponse, messageWrapper, mutationResponse, paginateWrapper, paginationSchema, queryParams, responses, successResponseSchema, toJsonSchema, withCompensation, wrapResponse };
+export { ArcError, ArcQueryParser, CircuitBreaker, CircuitBreakerError, CircuitBreakerRegistry, CircuitState, ConflictError, ForbiddenError, NotFoundError, OrgAccessDeniedError, OrgRequiredError, RateLimitError, ServiceUnavailableError, UnauthorizedError, ValidationError, convertOpenApiSchemas, convertRouteSchema, createCircuitBreaker, createCircuitBreakerRegistry, createError, createQueryParser, createStateMachine, defineCompensation, deleteResponse, errorResponseSchema, getDefaultCrudSchemas, getListQueryParams, hasEvents, isArcError, isJsonSchema, isZodSchema, itemResponse, listResponse, mutationResponse, paginationSchema, queryParams, responses, successResponseSchema, toJsonSchema, withCompensation, wrapResponse };

package/dist/{utils-B-l6410F.mjs → utils-7sJ8X83I.mjs}

@@ -216,10 +216,6 @@ function listResponse(itemSchema) {
 	};
 }
 /**
-* Alias for listResponse - matches local responseSchemas.js naming
-*/
-const paginateWrapper = listResponse;
-/**
 * Create a single item response schema
 *
 * Runtime format: { success, data: {...} }
@@ -228,10 +224,6 @@ function itemResponse(itemSchema) {
 	return wrapResponse(itemSchema);
 }
 /**
-* Alias for itemResponse - matches local responseSchemas.js naming
-*/
-const itemWrapper = itemResponse;
-/**
 * Create a create/update response schema
 */
 function mutationResponse(itemSchema) {
@@ -288,10 +280,6 @@ function deleteResponse() {
 		additionalProperties: true
 	};
 }
-/**
-* Alias for deleteResponse - matches local responseSchemas.js naming
-*/
-const messageWrapper = deleteResponse;
 const responses = {
 	200: (schema) => ({
 		description: "Successful response",
@@ -591,4 +579,4 @@ function createStateMachine(name, transitions = {}, options = {}) {
 	};
 }
 //#endregion
-export { defineCompensation as _, getListQueryParams as a, listResponse as c, paginateWrapper as d, paginationSchema as f, wrapResponse as g, successResponseSchema as h, getDefaultCrudSchemas as i, messageWrapper as l, responses as m, deleteResponse as n, itemResponse as o, queryParams as p, errorResponseSchema as r, itemWrapper as s, createStateMachine as t, mutationResponse as u, withCompensation as v };
+export { getListQueryParams as a, mutationResponse as c, responses as d, successResponseSchema as f, withCompensation as h, getDefaultCrudSchemas as i, paginationSchema as l, defineCompensation as m, deleteResponse as n, itemResponse as o, wrapResponse as p, errorResponseSchema as r, listResponse as s, createStateMachine as t, queryParams as u };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@classytic/arc",
-  "version": "2.7.7",
+  "version": "2.8.1",
   "description": "Resource-oriented backend framework for Fastify — clean, minimal, powerful, tree-shakable",
   "type": "module",
   "exports": {
@@ -227,7 +227,7 @@
     "node": ">=22"
   },
   "peerDependencies": {
-    "@classytic/mongokit": ">=3.5.6",
+    "@classytic/mongokit": ">=3.6.0",
     "@classytic/streamline": ">=2.1.0",
     "@fastify/cors": ">=11.0.0",
     "@fastify/helmet": ">=13.0.0",
@@ -245,12 +245,12 @@
     "@opentelemetry/instrumentation-mongodb": ">=0.40.0",
     "@opentelemetry/sdk-node": ">=0.50.0",
     "@sinclair/typebox": ">=0.34.0",
-    "better-auth": ">=1.6.0",
+    "better-auth": ">=1.6.2",
     "bullmq": ">=5.0.0",
     "fastify": ">=5.0.0",
     "fastify-raw-body": ">=5.0.0",
     "ioredis": ">=5.0.0",
-    "mongodb": ">=6.0.0",
+    "mongodb": ">=7.0.0",
     "mongoose": ">=9.4.1",
     "pino-pretty": ">=13.0.0",
     "zod": ">=4.0.0"
@@ -346,7 +346,8 @@
   "devDependencies": {
     "@better-auth/mongo-adapter": "^1.6.0",
     "@biomejs/biome": "^2.4.10",
-    "@classytic/mongokit": "3.5.6",
+    "ajv": "^8.18.0",
+    "@classytic/mongokit": "file:../../packages/mongokit/classytic-mongokit-3.6.0.tgz",
     "@classytic/streamline": "^2.1.0",
     "@fastify/cors": "^11.2.0",
     "@fastify/helmet": "^13.0.2",

package/skills/arc/SKILL.md

@@ -8,11 +8,11 @@ description: |
   Triggers: arc, fastify resource, defineResource, createApp, BaseController, arc preset,
   arc auth, arc events, arc jobs, arc websocket, arc mcp, arc plugin, arc testing, arc cli,
   arc permissions, arc hooks, arc pipeline, arc factory, arc cache, arc QueryCache.
-version: 2.7.3
+version: 2.8.0
 license: MIT
 metadata:
   author: Classytic
-  version: "2.7.1"
+  version: "2.8.0"
 tags:
   - fastify
   - rest-api
@@ -91,6 +91,23 @@ const productResource = defineResource({
   additionalRoutes: [
     { method: 'GET', path: '/featured', handler: 'getFeatured', permissions: allowPublic(), wrapHandler: true },
   ],
+
+  // v2.8: routes (replaces additionalRoutes — additionalRoutes still works but is deprecated)
+  routes: [
+    { method: 'GET', path: '/stats', handler: 'getStats', permissions: auth() },
+    { method: 'POST', path: '/webhook', handler: webhookFn, raw: true, permissions: auth() },
+  ],
+
+  // v2.8: actions (replaces onRegister + createActionRouter)
+  actions: {
+    approve: async (id, data, req) => service.approve(id, req.user._id),
+    cancel: {
+      handler: async (id, data, req) => service.cancel(id, data.reason, req.user._id),
+      permissions: roles('admin'),
+      schema: { reason: { type: 'string' } },
+    },
+  },
+  actionPermissions: auth(),
 });
 
 await fastify.register(productResource.toPlugin());
@@ -867,7 +884,8 @@ permissions: {
 **DX helpers:**
 
 ```typescript
-// Typed request for wrapHandler: false routes — no more (req as any).user
+// Typed request for raw routes — no more (req as any).user
+// v2.8: `raw: true` replaces `wrapHandler: false` (wrapHandler still works but is deprecated)
 import type { ArcRequest } from '@classytic/arc';
 handler: async (req: ArcRequest, reply) => { req.user?.id; req.scope; req.signal; }
 
@@ -884,6 +902,7 @@ import { createDomainError } from '@classytic/arc';
 throw createDomainError('SELF_REFERRAL', 'Cannot refer yourself', 422);
 
 // Resource lifecycle hook — wire singletons during registration
+// v2.8: for action routes, use `actions` config instead of onRegister + createActionRouter
 defineResource({ name: 'notification', onRegister: (f) => setSseManager(f.sseManager) });
 
 // SSE auth — preAuth runs BEFORE auth middleware (EventSource can't set headers)
@@ -893,7 +912,7 @@ additionalRoutes: [{ preAuth: [(req) => { req.headers.authorization = `Bearer ${
 additionalRoutes: [{ streamResponse: true, handler: async (req, reply) => reply.send(stream) }]
 ```
 
-## DX Helpers (v2.7.3)
+## DX Helpers (v2.7.3+)
 
 **Reply helpers** — consistent response envelopes (opt-in via `createApp({ replyHelpers: true })`):
 

package/skills/arc/references/integrations.md

@@ -3,7 +3,7 @@
 Pluggable adapters for BullMQ jobs, WebSocket real-time, Streamline workflows, and MCP tools.
 All are separate subpath imports — only loaded when explicitly used.
 
-> **MCP** has its own dedicated reference: [mcp.md](mcp.md) — auto-generate tools from resources, custom tools, Better Auth OAuth 2.1.
+> **MCP** has its own dedicated reference: [mcp.md](mcp.md) — auto-generate tools from resources (including actions, v2.8), custom tools, Better Auth OAuth 2.1.
 
 ## Job Queue (BullMQ)
 

package/skills/arc/references/mcp.md

@@ -46,6 +46,8 @@ await app.register(mcpPlugin, {
 
 Per resource, generates up to 5 tools: `list_{plural}`, `get_{name}`, `create_{name}`, `update_{name}`, `delete_{name}`.
 
+Resource `actions` (v2.8) also auto-generate MCP tools — each action becomes a tool named `{action}_{name}` with the action's input schema.
+
 Tool handlers call `BaseController` — same pipeline as REST (auth, org-scoping, hooks, field permissions, cache).
 
 ### McpPluginOptions