@classytic/arc 2.8.1 → 2.8.4

package/dist/integrations/mcp/index.mjs

@@ -1,23 +1,6 @@
-import { n as fieldRulesToZod, r as createMcpServer, t as resourceToTools } from "../../resourceToTools-DNNWnZtx.mjs";
+import { n as fieldRulesToZod, r as createMcpServer, t as resourceToTools } from "../../resourceToTools-O_HwWXFa.mjs";
 import { createHash } from "node:crypto";
 import fp from "fastify-plugin";
-//#region src/integrations/mcp/definePrompt.ts
-/**
-* Define a type-safe MCP prompt.
-*
-* @param name - Prompt name (snake_case recommended)
-* @param config - Description, args schema, handler
-*/
-function definePrompt(name, config) {
-	return {
-		name,
-		description: config.description,
-		title: config.title,
-		argsSchema: config.args,
-		handler: config.handler
-	};
-}
-//#endregion
 //#region src/integrations/mcp/defineTool.ts
 /**
 * Define a type-safe MCP tool.
@@ -127,6 +110,82 @@ function customGuard(check, errorMessage) {
 	};
 }
 //#endregion
+//#region src/integrations/mcp/aiSdkBridge.ts
+/** Serialize an AI SDK tool result into MCP's text-content envelope. */
+function toMcpEnvelope(result) {
+	if (result && typeof result === "object" && "error" in result) {
+		const msg = result.error;
+		return {
+			content: [{
+				type: "text",
+				text: typeof msg === "string" ? msg : JSON.stringify(msg)
+			}],
+			isError: true
+		};
+	}
+	return { content: [{
+		type: "text",
+		text: typeof result === "string" ? result : JSON.stringify(result, null, 2)
+	}] };
+}
+/** Convert a McpBridge into a registered MCP tool. */
+function bridgeToMcp(bridge) {
+	return defineTool(bridge.name, {
+		description: bridge.description,
+		input: bridge.inputSchema,
+		annotations: bridge.annotations,
+		handler: async (input, ctx) => {
+			if (!isAuthenticated(ctx)) return denied("Authentication required");
+			if (bridge.guard) {
+				const reason = bridge.guard(ctx);
+				if (reason) return denied(reason);
+			}
+			try {
+				return toMcpEnvelope(await bridge.buildTool(ctx).execute(input));
+			} catch (err) {
+				return denied(err instanceof Error ? err.message : String(err));
+			}
+		}
+	});
+}
+/**
+* Take a list of McpBridge objects and produce a ready-to-register MCP tool
+* array, with optional include/exclude filtering for per-environment config.
+*
+* @example
+* ```typescript
+* // All bridges
+* extraTools: [...buildMcpToolsFromBridges(allBridges)]
+*
+* // Read-only deployment — hide destructive tools
+* extraTools: [...buildMcpToolsFromBridges(allBridges, { exclude: ['trigger_job'] })]
+* ```
+*/
+function buildMcpToolsFromBridges(bridges, options = {}) {
+	return bridges.filter((bridge) => {
+		if (options.include) return options.include.includes(bridge.name);
+		if (options.exclude) return !options.exclude.includes(bridge.name);
+		return true;
+	}).map(bridgeToMcp);
+}
+//#endregion
+//#region src/integrations/mcp/definePrompt.ts
+/**
+* Define a type-safe MCP prompt.
+*
+* @param name - Prompt name (snake_case recommended)
+* @param config - Description, args schema, handler
+*/
+function definePrompt(name, config) {
+	return {
+		name,
+		description: config.description,
+		title: config.title,
+		argsSchema: config.args,
+		handler: config.handler
+	};
+}
+//#endregion
 //#region src/integrations/mcp/authBridge.ts
 /**
 * @classytic/arc — MCP Auth Bridge
@@ -572,4 +631,4 @@ const mcpPlugin = fp(mcpPluginImpl, {
 	fastify: "5.x"
 });
 //#endregion
-export { createMcpServer, customGuard, definePrompt, defineTool, denied, fieldRulesToZod, getOrgId, getUserId, guard, hasOrg, isAuthenticated, isOrg, mcpPlugin, requireAuth, requireOrg, requireOrgId, requireRole, resourceToTools };
+export { bridgeToMcp, buildMcpToolsFromBridges, createMcpServer, customGuard, definePrompt, defineTool, denied, fieldRulesToZod, getOrgId, getUserId, guard, hasOrg, isAuthenticated, isOrg, mcpPlugin, requireAuth, requireOrg, requireOrgId, requireRole, resourceToTools };

package/dist/integrations/mcp/testing.d.mts

@@ -1,4 +1,4 @@
-import { o as McpAuthResult, s as McpPluginOptions } from "../../types-D3b7hA00.mjs";
+import { o as McpAuthResult, s as McpPluginOptions } from "../../types-CcG4avic.mjs";
 
 //#region src/integrations/mcp/testing.d.ts
 interface TestMcpClientOptions {

package/dist/integrations/mcp/testing.mjs

@@ -1,4 +1,4 @@
-import { r as createMcpServer, t as resourceToTools } from "../../resourceToTools-DNNWnZtx.mjs";
+import { r as createMcpServer, t as resourceToTools } from "../../resourceToTools-O_HwWXFa.mjs";
 //#region src/integrations/mcp/testing.ts
 /**
 * @classytic/arc/mcp/testing — MCP Test Utilities

package/dist/{interface-CS6d7HiB.d.mts → interface-BVuMfeVv.d.mts}

@@ -1,6 +1,6 @@
-import { r as RequestScope } from "./types-CN6JvmYz.mjs";
-import { n as FieldPermissionMap } from "./fields-DoeDgh2b.mjs";
-import { i as UserBase, t as PermissionCheck } from "./types-BoaZHr-2.mjs";
+import { r as RequestScope } from "./types-C72d3NDn.mjs";
+import { n as FieldPermissionMap } from "./fields-DC4So2M2.mjs";
+import { i as UserBase, t as PermissionCheck } from "./types-CVC4HOKi.mjs";
 import { FastifyInstance, FastifyPluginAsync, FastifyReply, FastifyRequest, RouteHandlerMethod, RouteHandlerMethod as RouteHandlerMethod$1 } from "fastify";
 
 //#region src/hooks/HookSystem.d.ts
@@ -839,6 +839,7 @@ declare class ResourceDefinition<TDoc = AnyRecord> {
    */
   readonly routes?: readonly RouteDefinition[];
   readonly middlewares: MiddlewareConfig;
+  readonly routeGuards?: RouteHandlerMethod$1[];
   readonly disableDefaultRoutes: boolean;
   readonly disabledRoutes: CrudRouteKey[];
   readonly actions?: ActionsMap;
@@ -956,7 +957,7 @@ declare class ResourceRegistry {
 /**
  * Minimal server accessor — exposes safe, read-only server decorators.
  * Allows controller handlers to publish events, log, and audit
- * without switching to `wrapHandler: false`.
+ * without switching to `raw: true`.
  */
 interface ServerAccessor {
   /** Event bus — publish domain events from any handler */
@@ -1069,7 +1070,7 @@ interface IRequestContext<TBody = unknown, TParams extends Record<string, string
   metadata?: TMetadata;
   /**
    * Fastify server accessor — publish events, log, and audit
-   * from any handler without switching to `wrapHandler: false`.
+   * from any handler without switching to `raw: true`.
    *
    * @example
    * ```typescript
@@ -1105,7 +1106,7 @@ interface IControllerResponse<T = unknown> {
  * Controller handler — Arc's standard pattern.
  *
  * Receives a request context object, returns IControllerResponse.
- * Use with `wrapHandler: true` in additionalRoutes.
+ * Use with `raw: false` in routes.
  *
  * **Generic parameters:**
  * - `TResponse` — shape of `IControllerResponse.data` (default: `unknown`)
@@ -1137,12 +1138,12 @@ interface IControllerResponse<T = unknown> {
  *   return { success: true, data: product };
  * };
  *
- * additionalRoutes: [{
+ * routes: [{
  *   method: 'POST',
  *   path: '/products',
  *   handler: createProduct,
  *   permissions: requireAuth(),
- *   wrapHandler: true,  // Arc wraps this into Fastify handler
+ *   raw: false,  // Arc wraps this into Fastify handler
  * }]
  * ```
  */
@@ -1151,7 +1152,7 @@ type ControllerHandler<TResponse = unknown, TBody = unknown, TParams extends Rec
  * Fastify native handler
  *
  * Standard Fastify request/reply pattern.
- * Use with `wrapHandler: false` in additionalRoutes.
+ * Use with `raw: true` in routes.
  *
  * @example
  * ```typescript
@@ -1161,12 +1162,12 @@ type ControllerHandler<TResponse = unknown, TBody = unknown, TParams extends Rec
  *   return reply.send(file.buffer);
  * };
  *
- * additionalRoutes: [{
+ * routes: [{
  *   method: 'GET',
  *   path: '/files/:id/download',
  *   handler: downloadFile,
  *   permissions: requireAuth(),
- *   wrapHandler: false,  // Use as-is, no wrapping
+ *   raw: true,  // Use as-is, no wrapping
  * }]
  * ```
  */
@@ -1596,7 +1597,7 @@ declare module 'fastify' {
 /**
  * Typed Fastify request with Arc decorations.
  *
- * Use this in `wrapHandler: false` handlers instead of `(req as any).user`.
+ * Use this in `raw: true` handlers instead of `(req as any).user`.
  *
  * @example
  * ```typescript
@@ -2027,11 +2028,26 @@ interface ResourceConfig<TDoc = AnyRecord> {
    */
   fields?: FieldPermissionMap;
   middlewares?: MiddlewareConfig;
-  /** @deprecated Use `routes` instead. Will error in v3. */
-  additionalRoutes?: AdditionalRoute[];
   /**
-   * Custom routes — the v2.8 way to add endpoints beyond CRUD.
-   * Replaces `additionalRoutes` with cleaner naming and no `wrapHandler` boolean.
+   * PreHandler guards auto-applied to **every** route on this resource
+   * (CRUD + custom `routes` + preset routes). Runs after auth/permissions,
+   * before per-route `preHandler`. Use for mode gates, tenant checks,
+   * feature flags — anything that applies to every endpoint.
+   *
+   * @example
+   * ```typescript
+   * defineResource({
+   *   routeGuards: [requireFlowMode('standard')],
+   *   routes: [
+   *     { method: 'GET', path: '/', raw: true, handler: listHandler },
+   *     // guard runs automatically — no per-route boilerplate
+   *   ],
+   * });
+   * ```
+   */
+  routeGuards?: RouteHandlerMethod[];
+  /**
+   * Custom routes beyond CRUD. Presets also merge their routes here.
    *
    * @example
    * ```typescript
@@ -2697,7 +2713,8 @@ interface PresetHook {
 }
 interface PresetResult {
   name: string;
-  additionalRoutes?: AdditionalRoute[] | ((permissions: ResourcePermissions) => AdditionalRoute[]);
+  /** Preset routes — merged into the resource's `routes` array. */
+  routes?: RouteDefinition[] | ((permissions: ResourcePermissions) => RouteDefinition[]);
   middlewares?: MiddlewareConfig;
   schemaOptions?: RouteSchemaOptions;
   controllerOptions?: Record<string, unknown>;
@@ -2892,6 +2909,8 @@ interface CrudRouterOptions {
    * Set to `false` to disable rate limiting for this resource.
    */
   rateLimit?: RateLimitConfig | false;
+  /** PreHandler guards applied to every route (CRUD + custom + preset). */
+  routeGuards?: RouteHandlerMethod[];
 }
 interface ResourceMetadata {
   name: string;
@@ -2901,7 +2920,17 @@ interface ResourceMetadata {
   module?: string;
   permissions?: ResourcePermissions;
   presets: string[];
-  additionalRoutes?: AdditionalRoute[];
+  customRoutes?: Array<{
+    method: string;
+    path: string;
+    handler: string;
+    operation?: string;
+    summary?: string;
+    description?: string;
+    permissions?: PermissionCheck;
+    raw?: boolean;
+    schema?: Record<string, unknown>;
+  }>;
   routes: Array<{
     method: string;
     path: string;

package/dist/loadResources-Bksk8ydA.mjs

@@ -0,0 +1,154 @@
+import { t as __exportAll } from "./chunk-BpYLSNr0.mjs";
+import { readdir } from "node:fs/promises";
+import { dirname, join, resolve } from "node:path";
+import { fileURLToPath, pathToFileURL } from "node:url";
+//#region src/factory/loadResources.ts
+/**
+* loadResources — Auto-discover resource files from a directory.
+*
+* Scans for `*.resource.{ts,js,mts,mjs}` files, imports each,
+* and collects their default exports. No barrel file needed.
+*
+* @example
+* ```ts
+* import { createApp, loadResources } from '@classytic/arc/factory';
+*
+* // Recommended: import.meta.url — works in both src/ (dev) and dist/ (prod)
+* const app = await createApp({
+*   resources: await loadResources(import.meta.url),
+*   auth: { type: 'jwt', jwt: { secret: process.env.JWT_SECRET } },
+* });
+*
+* // Or explicit path (must match runtime layout)
+* const app2 = await createApp({
+*   resources: await loadResources('./src/resources'),
+* });
+* ```
+*
+* File convention:
+* ```
+* src/resources/
+*   product/product.resource.ts    → export default defineResource({ name: 'product', ... })
+*   order/order.resource.ts        → export default defineResource({ name: 'order', ... })
+* ```
+*/
+var loadResources_exports = /* @__PURE__ */ __exportAll({ loadResources: () => loadResources });
+/**
+* Scan a directory for resource files and import their default exports.
+*
+* Accepts a directory path OR `import.meta.url` (file:// URL).
+* When given a URL, resolves to the directory containing that file —
+* so `loadResources(import.meta.url)` works in both dev (`src/`) and
+* production (`dist/`) without path gymnastics.
+*
+* @param dir - Directory path, or `import.meta.url` (file:// URL resolved to its dirname)
+* @param options - Pattern and recursion options
+* @returns Array of resource definitions (anything with `.toPlugin()`)
+*
+* @example
+* ```ts
+* // Works from both src/ and dist/ — resolves relative to the calling file
+* await loadResources(import.meta.url);
+*
+* // Subdirectory relative to the calling file
+* await loadResources(import.meta.url, { suffix: '.resource' });
+*
+* // Explicit path (must match runtime layout)
+* await loadResources('./src/resources');
+* ```
+*/
+async function loadResources(dir, options = {}) {
+	const { suffix = ".resource", recursive = true, exclude, include, silent = false } = options;
+	const files = await collectFiles(resolve(dir.startsWith("file://") ? dirname(fileURLToPath(dir)) : dir), new RegExp(`${escapeRegex(suffix)}\\.(ts|js|mts|mjs)$`), recursive);
+	files.sort();
+	const includeSet = include ? new Set(include) : null;
+	const excludeSet = exclude ? new Set(exclude) : null;
+	const skipped = [];
+	const failed = [];
+	const isWindowsPath = (p) => /^[a-z]:[\\/]/i.test(p);
+	const results = await Promise.all(files.map(async (file) => {
+		let mod;
+		let primaryError;
+		try {
+			mod = await import(pathToFileURL(file).href);
+			return {
+				file,
+				mod
+			};
+		} catch (err) {
+			primaryError = err;
+		}
+		if (!isWindowsPath(file)) try {
+			mod = await import(file);
+			return {
+				file,
+				mod
+			};
+		} catch {}
+		const err = primaryError;
+		const code = err.code;
+		const msg = err instanceof Error ? err.message : String(err);
+		if (code === "ERR_MODULE_NOT_FOUND" && msg.includes(".js")) failed.push(`${file}: ${msg}\n    Hint: This file uses .js extension imports (TypeScript ESM convention).
+    • Production: ensure your build compiles .ts→.js before loadResources() runs.
+    • Node.js: use tsx, ts-node/esm, or a build step.
+    • Vitest: nested .js→.ts resolution may fail through dynamic imports.
+      Workaround: use import.meta.glob to preload resources statically.
+      See: https://github.com/classytic/arc/blob/main/docs/production-ops/factory.mdx#vitest-limitation`);
+		else failed.push(`${file}: ${msg}`);
+		return null;
+	}));
+	const resources = [];
+	for (const result of results) {
+		if (!result) continue;
+		let resource = result.mod.default ?? result.mod.resource;
+		if (!resource || typeof resource.toPlugin !== "function") {
+			for (const value of Object.values(result.mod)) if (value && typeof value === "object" && typeof value.toPlugin === "function") {
+				resource = value;
+				break;
+			}
+		}
+		if (!resource || typeof resource.toPlugin !== "function") {
+			skipped.push(result.file);
+			continue;
+		}
+		const name = resource.name;
+		if (name) {
+			if (includeSet && !includeSet.has(name)) continue;
+			if (!includeSet && excludeSet?.has(name)) continue;
+		}
+		resources.push(resource);
+	}
+	const log = silent ? void 0 : options?.logger;
+	if (log) {
+		if (failed.length) {
+			log.warn(`[arc] loadResources: ${failed.length} file(s) failed to import:`);
+			for (const f of failed) log.warn(`  - ${f}`);
+		}
+		if (skipped.length) {
+			log.warn(`[arc] loadResources: ${skipped.length} file(s) skipped (no default export with toPlugin):`);
+			for (const f of skipped) log.warn(`  - ${f}`);
+		}
+	}
+	return resources;
+}
+async function collectFiles(dir, pattern, recursive) {
+	const results = [];
+	let entries;
+	try {
+		entries = await readdir(dir, { withFileTypes: true });
+	} catch {
+		return results;
+	}
+	for (const entry of entries) {
+		const name = String(entry.name);
+		const fullPath = join(dir, name);
+		if (entry.isDirectory() && recursive) results.push(...await collectFiles(fullPath, pattern, recursive));
+		else if (entry.isFile() && pattern.test(name)) results.push(fullPath);
+	}
+	return results;
+}
+function escapeRegex(str) {
+	return str.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+//#endregion
+export { loadResources_exports as n, loadResources as t };

package/dist/{mongodb-B1eVtFhw.d.mts → mongodb-B8U2xaLj.d.mts}

@@ -1,4 +1,4 @@
-import { i as UserBase } from "./types-BoaZHr-2.mjs";
+import { i as UserBase } from "./types-CVC4HOKi.mjs";
 
 //#region src/audit/stores/interface.d.ts
 type AuditAction = "create" | "update" | "delete" | "restore" | "custom";

package/dist/{mongodb-NShVZDMr.d.mts → mongodb-X7LbEjTN.d.mts}

@@ -1,4 +1,4 @@
-import { n as IdempotencyResult, r as IdempotencyStore } from "./interface-CkkWm5uR.mjs";
+import { n as IdempotencyResult, r as IdempotencyStore } from "./interface-B-pe8fhj.mjs";
 
 //#region src/idempotency/stores/mongodb.d.ts
 interface MongoConnection {
@@ -15,6 +15,7 @@ interface MongoCollection {
     acknowledged: boolean;
     matchedCount: number;
     modifiedCount: number;
+    upsertedCount?: number;
   }>;
   deleteOne(filter: object): Promise<{
     deletedCount: number;
@@ -38,6 +39,10 @@ interface IdempotencyDocument {
   createdAt: Date;
   expiresAt: Date;
 }
+/** Minimal logger interface — compatible with console, pino, fastify.log */
+interface IdempotencyLogger {
+  warn(message: string, ...args: unknown[]): void;
+}
 interface MongoIdempotencyStoreOptions {
   /** Mongoose connection or MongoDB connection object */
   connection: MongoConnection;
@@ -47,6 +52,8 @@ interface MongoIdempotencyStoreOptions {
   createIndex?: boolean;
   /** Default TTL in ms (default: 86400000 = 24 hours) */
   ttlMs?: number;
+  /** Logger for operational warnings (default: console) */
+  logger?: IdempotencyLogger;
 }
 declare class MongoIdempotencyStore implements IdempotencyStore {
   readonly name = "mongodb";
@@ -54,6 +61,8 @@ declare class MongoIdempotencyStore implements IdempotencyStore {
   private collectionName;
   private ttlMs;
   private indexCreated;
+  private shouldEnsureIndex;
+  private logger;
   constructor(options: MongoIdempotencyStoreOptions);
   private get collection();
   private ensureIndex;

package/dist/{openapi-q6rNKfZy.mjs → openapi-CYCuekCn.mjs}

@@ -159,7 +159,7 @@ const DEFAULT_LIST_PARAMS = [
 function generateResourcePaths(resource, apiPrefix = "", additionalSecurity = []) {
 	const paths = {};
 	const basePath = `${apiPrefix}${resource.prefix}`;
-	if (resource.disableDefaultRoutes && (!resource.additionalRoutes || resource.additionalRoutes.length === 0) && (!resource.actions || resource.actions.length === 0)) return paths;
+	if (resource.disableDefaultRoutes && (!resource.customRoutes || resource.customRoutes.length === 0) && (!resource.actions || resource.actions.length === 0)) return paths;
 	if (!resource.disableDefaultRoutes) {
 		const disabledSet = new Set(resource.disabledRoutes ?? []);
 		const updateMethod = resource.updateMethod ?? "PATCH";
@@ -276,7 +276,7 @@ function generateResourcePaths(resource, apiPrefix = "", additionalSecurity = []
 		}, void 0, additionalSecurity);
 		if (Object.keys(itemPath).length > 0) paths[toOpenApiPath(`${basePath}/:id`)] = itemPath;
 	}
-	for (const route of resource.additionalRoutes || []) {
+	for (const route of resource.customRoutes || []) {
 		const fullPath = toOpenApiPath(`${basePath}${route.path}`);
 		const method = route.method.toLowerCase();
 		if (!paths[fullPath]) paths[fullPath] = {};

package/dist/org/index.d.mts

@@ -1,5 +1,5 @@
-import { Wt as RouteHandler } from "../interface-CS6d7HiB.mjs";
-import { i as UserBase } from "../types-BoaZHr-2.mjs";
+import { Wt as RouteHandler } from "../interface-BVuMfeVv.mjs";
+import { i as UserBase } from "../types-CVC4HOKi.mjs";
 import { InvitationAdapter, InvitationDoc, MemberDoc, OrgAdapter, OrgDoc, OrgPermissionStatement, OrgRole, OrganizationPluginOptions } from "./types.mjs";
 import { FastifyPluginAsync, RouteHandlerMethod } from "fastify";
 

package/dist/permissions/index.d.mts

@@ -1,4 +1,4 @@
-import { a as applyFieldWritePermissions, i as applyFieldReadPermissions, n as FieldPermissionMap, o as fields, r as FieldPermissionType, s as resolveEffectiveRoles, t as FieldPermission } from "../fields-DoeDgh2b.mjs";
-import { a as getUserRoles, i as UserBase, n as PermissionContext, o as normalizeRoles, r as PermissionResult, t as PermissionCheck } from "../types-BoaZHr-2.mjs";
-import { A as RoleHierarchy, C as authenticated, D as publicRead, E as presets_d_exports, M as applyPermissionResult, N as normalizePermissionResult, O as publicReadAdminWrite, S as adminOnly, T as ownerWithAdminBypass, _ as requireScopeContext, a as allOf, b as roles, c as createDynamicPermissionMatrix, d as requireAuth, f as requireOrgInScope, g as requireRoles, h as requireOwnership, i as PermissionEventBus, j as createRoleHierarchy, k as readOnly, l as createOrgPermissions, m as requireOrgRole, n as DynamicPermissionMatrix, o as allowPublic, p as requireOrgMembership, r as DynamicPermissionMatrixConfig, s as anyOf, t as ConnectEventsOptions, u as denyAll, v as requireServiceScope, w as fullPublic, x as when, y as requireTeamMembership } from "../index-CBru2y5Y.mjs";
+import { a as applyFieldWritePermissions, i as applyFieldReadPermissions, n as FieldPermissionMap, o as fields, r as FieldPermissionType, s as resolveEffectiveRoles, t as FieldPermission } from "../fields-DC4So2M2.mjs";
+import { a as getUserRoles, i as UserBase, n as PermissionContext, o as normalizeRoles, r as PermissionResult, t as PermissionCheck } from "../types-CVC4HOKi.mjs";
+import { A as RoleHierarchy, C as authenticated, D as publicRead, E as presets_d_exports, M as applyPermissionResult, N as normalizePermissionResult, O as publicReadAdminWrite, S as adminOnly, T as ownerWithAdminBypass, _ as requireScopeContext, a as allOf, b as roles, c as createDynamicPermissionMatrix, d as requireAuth, f as requireOrgInScope, g as requireRoles, h as requireOwnership, i as PermissionEventBus, j as createRoleHierarchy, k as readOnly, l as createOrgPermissions, m as requireOrgRole, n as DynamicPermissionMatrix, o as allowPublic, p as requireOrgMembership, r as DynamicPermissionMatrixConfig, s as anyOf, t as ConnectEventsOptions, u as denyAll, v as requireServiceScope, w as fullPublic, x as when, y as requireTeamMembership } from "../index-CSkeivBx.mjs";
 export { ConnectEventsOptions, DynamicPermissionMatrix, DynamicPermissionMatrixConfig, FieldPermission, FieldPermissionMap, FieldPermissionType, PermissionCheck, PermissionContext, PermissionEventBus, PermissionResult, RoleHierarchy, UserBase, adminOnly, allOf, allowPublic, anyOf, applyFieldReadPermissions, applyFieldWritePermissions, applyPermissionResult, authenticated, createDynamicPermissionMatrix, createOrgPermissions, createRoleHierarchy, denyAll, fields, fullPublic, getUserRoles, normalizePermissionResult, normalizeRoles, ownerWithAdminBypass, presets_d_exports as permissions, publicRead, publicReadAdminWrite, readOnly, requireAuth, requireOrgInScope, requireOrgMembership, requireOrgRole, requireOwnership, requireRoles, requireScopeContext, requireServiceScope, requireTeamMembership, resolveEffectiveRoles, roles, when };

package/dist/plugins/index.d.mts

@@ -1,7 +1,7 @@
-import { K as MiddlewareConfig, Kt as ResourceRegistry, Tn as HookSystem, et as PresetHook, m as AnyRecord, p as AdditionalRoute, vt as RouteSchemaOptions } from "../interface-CS6d7HiB.mjs";
-import { t as ExternalOpenApiPaths } from "../externalPaths-BQ8QijNH.mjs";
-import { _ as cachingPlugin, a as versioningPlugin, c as MetricsOptions, d as SSEOptions, f as _default$6, g as _default$1, h as CachingRule, i as _default$7, l as _default$4, m as CachingOptions, n as errorHandlerPlugin, o as MetricEntry, p as ssePlugin, r as VersioningOptions, s as MetricsCollector, t as ErrorHandlerOptions, u as metricsPlugin } from "../errorHandler-DJ7OAB2V.mjs";
-import { t as TracingOptions } from "../tracing-xqXzWeaf.mjs";
+import { K as MiddlewareConfig, Kt as ResourceRegistry, Tn as HookSystem, et as PresetHook, m as AnyRecord, p as AdditionalRoute, vt as RouteSchemaOptions } from "../interface-BVuMfeVv.mjs";
+import { t as ExternalOpenApiPaths } from "../externalPaths-Bapitwvd.mjs";
+import { _ as _default$1, a as _default$7, c as MetricsCollector, d as metricsPlugin, f as SSEOptions, g as CachingRule, h as CachingOptions, i as VersioningOptions, l as MetricsOptions, m as ssePlugin, n as ErrorMapper, o as versioningPlugin, p as _default$6, r as errorHandlerPlugin, s as MetricEntry, t as ErrorHandlerOptions, u as _default$4, v as cachingPlugin } from "../errorHandler-CdZDavNH.mjs";
+import { t as TracingOptions } from "../tracing-DxjKk7eW.mjs";
 import { FastifyInstance, FastifyPluginAsync } from "fastify";
 import * as _$node_stream0 from "node:stream";
 
@@ -213,4 +213,4 @@ declare module "fastify" {
 declare const requestIdPlugin: FastifyPluginAsync<RequestIdOptions>;
 declare const _default$5: FastifyPluginAsync<RequestIdOptions>;
 //#endregion
-export { type ArcCore, type ArcCorePluginOptions, type ArcPlugin, type CachingOptions, type CachingRule, type CreatePluginDefinition, type ErrorHandlerOptions, type GracefulShutdownOptions, type HealthCheck, type HealthOptions, type MetricEntry, type MetricsCollector, type MetricsOptions, type PluginMeta, type PluginResourceResult, type RequestIdOptions, type SSEOptions, type TracingOptions, type VersioningOptions, _default as arcCorePlugin, arcCorePlugin as arcCorePluginFn, _default$1 as cachingPlugin, cachingPlugin as cachingPluginFn, createPlugin, errorHandlerPlugin, errorHandlerPlugin as errorHandlerPluginFn, _default$2 as gracefulShutdownPlugin, gracefulShutdownPlugin as gracefulShutdownPluginFn, _default$3 as healthPlugin, healthPlugin as healthPluginFn, _default$4 as metricsPlugin, metricsPlugin as metricsPluginFn, replyHelpersPlugin, _default$5 as requestIdPlugin, requestIdPlugin as requestIdPluginFn, _default$6 as ssePlugin, ssePlugin as ssePluginFn, _default$7 as versioningPlugin, versioningPlugin as versioningPluginFn };
+export { type ArcCore, type ArcCorePluginOptions, type ArcPlugin, type CachingOptions, type CachingRule, type CreatePluginDefinition, type ErrorHandlerOptions, type ErrorMapper, type GracefulShutdownOptions, type HealthCheck, type HealthOptions, type MetricEntry, type MetricsCollector, type MetricsOptions, type PluginMeta, type PluginResourceResult, type RequestIdOptions, type SSEOptions, type TracingOptions, type VersioningOptions, _default as arcCorePlugin, arcCorePlugin as arcCorePluginFn, _default$1 as cachingPlugin, cachingPlugin as cachingPluginFn, createPlugin, errorHandlerPlugin, errorHandlerPlugin as errorHandlerPluginFn, _default$2 as gracefulShutdownPlugin, gracefulShutdownPlugin as gracefulShutdownPluginFn, _default$3 as healthPlugin, healthPlugin as healthPluginFn, _default$4 as metricsPlugin, metricsPlugin as metricsPluginFn, replyHelpersPlugin, _default$5 as requestIdPlugin, requestIdPlugin as requestIdPluginFn, _default$6 as ssePlugin, ssePlugin as ssePluginFn, _default$7 as versioningPlugin, versioningPlugin as versioningPluginFn };

package/dist/plugins/index.mjs

@@ -3,13 +3,13 @@ import { o as getOrgId } from "../types-AOD8fxIw.mjs";
 import { t as requestContext } from "../requestContext-DYvHl113.mjs";
 import { t as hasEvents } from "../typeGuards-CcFZXgU7.mjs";
 import { t as HookSystem } from "../HookSystem-BjFu7zf1.mjs";
-import { t as ResourceRegistry } from "../ResourceRegistry-Dtcojmu8.mjs";
-import { n as caching_default, t as cachingPlugin } from "../caching-CHH-iHs3.mjs";
-import { t as errorHandlerPlugin } from "../errorHandler-Cw34h_om.mjs";
-import { n as metrics_default, t as metricsPlugin } from "../metrics-DuhiSEZI.mjs";
-import { t as replyHelpersPlugin } from "../replyHelpers-CXtJDAZ0.mjs";
-import { n as sse_default, t as ssePlugin } from "../sse-CD5Hghpu.mjs";
-import { n as versioning_default, t as versioningPlugin } from "../versioning-CPU_5Xfs.mjs";
+import { t as ResourceRegistry } from "../ResourceRegistry-Dq3_zBQP.mjs";
+import { n as caching_default, t as cachingPlugin } from "../caching-CjybdRwx.mjs";
+import { t as errorHandlerPlugin } from "../errorHandler-mzqk4cGl.mjs";
+import { n as metrics_default, t as metricsPlugin } from "../metrics-TuOmguhi.mjs";
+import { t as replyHelpersPlugin } from "../replyHelpers-BLojtuvR.mjs";
+import { n as sse_default, t as ssePlugin } from "../sse-CJpt7LGI.mjs";
+import { n as versioning_default, t as versioningPlugin } from "../versioning-Cm8qoFDg.mjs";
 import { randomUUID } from "node:crypto";
 import fp from "fastify-plugin";
 //#region src/core/arcCorePlugin.ts

package/dist/plugins/tracing-entry.d.mts

@@ -1,2 +1,2 @@
-import { a as traced, i as isTracingAvailable, n as _default, r as createSpan, t as TracingOptions } from "../tracing-xqXzWeaf.mjs";
+import { a as traced, i as isTracingAvailable, n as _default, r as createSpan, t as TracingOptions } from "../tracing-DxjKk7eW.mjs";
 export { type TracingOptions, createSpan, isTracingAvailable, traced, _default as tracingPlugin };

package/dist/plugins/tracing-entry.mjs

@@ -44,7 +44,7 @@ try {
 function createTracerProvider(options) {
 	if (!isAvailable) return null;
 	const { serviceName = "@classytic/arc", serviceVersion, exporterUrl = "http://localhost:4318/v1/traces" } = options;
-	const resolvedVersion = serviceVersion ?? "2.8.1";
+	const resolvedVersion = serviceVersion ?? "2.8.4";
 	const exporter = new OTLPTraceExporter({ url: exporterUrl });
 	const provider = new NodeTracerProvider({ resource: { attributes: {
 		"service.name": serviceName,

package/dist/policies/index.d.mts

@@ -1,4 +1,4 @@
-import { t as PermissionCheck } from "../types-BoaZHr-2.mjs";
+import { t as PermissionCheck } from "../types-CVC4HOKi.mjs";
 import { FastifyReply, FastifyRequest } from "fastify";
 
 //#region src/policies/PolicyInterface.d.ts

package/dist/presets/index.d.mts

@@ -1,4 +1,4 @@
-import { Ht as IControllerResponse, Ut as IRequestContext, m as AnyRecord, on as PaginationResult, tt as PresetResult, ut as ResourceConfig } from "../interface-CS6d7HiB.mjs";
+import { Ht as IControllerResponse, Ut as IRequestContext, m as AnyRecord, on as PaginationResult, tt as PresetResult, ut as ResourceConfig } from "../interface-BVuMfeVv.mjs";
 import { MultiTenantOptions, TenantFieldSpec, multiTenantPreset } from "./multiTenant.mjs";
 
 //#region src/presets/ownedByUser.d.ts

package/dist/presets/index.mjs

@@ -1,3 +1,3 @@
 import { multiTenantPreset } from "./multiTenant.mjs";
-import { a as registerPreset, c as auditedPreset, d as ownedByUserPreset, i as getPreset, l as softDeletePreset, n as flexibleMultiTenantPreset, o as treePreset, r as getAvailablePresets, s as bulkPreset, t as applyPresets, u as slugLookupPreset } from "../presets-BFrGvvjL.mjs";
+import { a as registerPreset, c as auditedPreset, d as ownedByUserPreset, i as getPreset, l as softDeletePreset, n as flexibleMultiTenantPreset, o as treePreset, r as getAvailablePresets, s as bulkPreset, t as applyPresets, u as slugLookupPreset } from "../presets-C2xgzW6x.mjs";
 export { applyPresets, auditedPreset, bulkPreset, flexibleMultiTenantPreset, getAvailablePresets, getPreset, multiTenantPreset, ownedByUserPreset, registerPreset, slugLookupPreset, softDeletePreset, treePreset };

package/dist/presets/multiTenant.d.mts

@@ -1,4 +1,4 @@
-import { E as CrudRouteKey, tt as PresetResult } from "../interface-CS6d7HiB.mjs";
+import { E as CrudRouteKey, tt as PresetResult } from "../interface-BVuMfeVv.mjs";
 
 //#region src/presets/multiTenant.d.ts
 /**