@classytic/arc 2.8.4 → 2.9.1

package/dist/cache/index.d.mts

@@ -141,5 +141,75 @@ declare class RedisCacheStore<TValue = unknown> implements CacheStore<TValue> {
   private scanAndDelete;
   private withPrefix;
 }
+/**
+ * Minimal ioredis shape we depend on. We don't import ioredis itself so the
+ * cache subpath stays peer-dep-free.
+ */
+interface IoredisLike {
+  get(key: string): Promise<string | null>;
+  set(...args: unknown[]): Promise<string | null>;
+  del(...keys: string[]): Promise<number>;
+  scan(cursor: string | number, ...args: (string | number)[]): Promise<[string, string[]]>;
+  pipeline?(): {
+    del(key: string): unknown;
+    exec(): Promise<unknown>;
+  };
+}
+/**
+ * Wrap an ioredis instance as a `RedisCacheClient`.
+ *
+ * Why: arc's `RedisCacheClient` uses node-redis-v4 object-options style
+ * (`set(key, val, { PX })`), but ioredis expects positional flags
+ * (`set(key, val, 'PX', ms)`). Without this adapter every ioredis user
+ * reinvents the bridge.
+ *
+ * @example
+ * ```typescript
+ * import Redis from 'ioredis';
+ * import { RedisCacheStore, ioredisAsCacheClient } from '@classytic/arc/cache';
+ *
+ * const redis = new Redis(process.env.REDIS_URL);
+ * const store = new RedisCacheStore({
+ *   client: ioredisAsCacheClient(redis),
+ *   prefix: 'arc:cache:',
+ * });
+ * ```
+ */
+declare function ioredisAsCacheClient(client: IoredisLike): RedisCacheClient;
+/**
+ * Minimal `@upstash/redis` REST SDK shape we depend on.
+ *
+ * `@upstash/redis` is HTTP-based and works on edge runtimes (Cloudflare
+ * Workers, Vercel Edge, Deno Deploy) where TCP connections — and thus
+ * ioredis — are unavailable.
+ */
+interface UpstashRedisLike {
+  get(key: string): Promise<string | null | unknown>;
+  set(key: string, value: unknown, opts?: Record<string, unknown>): Promise<unknown>;
+  del(...keys: string[]): Promise<number>;
+  scan(cursor: number | string, opts?: {
+    match?: string;
+    count?: number;
+  }): Promise<[number, string[]] | [string, string[]]>;
+}
+/**
+ * Wrap an `@upstash/redis` REST client as a `RedisCacheClient`.
+ *
+ * Enables running arc's cache layer on edge runtimes without ioredis.
+ * Requires `@upstash/redis` as an optional peer dependency.
+ *
+ * @example
+ * ```typescript
+ * import { Redis } from '@upstash/redis';
+ * import { RedisCacheStore, upstashAsCacheClient } from '@classytic/arc/cache';
+ *
+ * const redis = Redis.fromEnv();
+ * const store = new RedisCacheStore({
+ *   client: upstashAsCacheClient(redis),
+ *   prefix: 'arc:cache:',
+ * });
+ * ```
+ */
+declare function upstashAsCacheClient(client: UpstashRedisLike): RedisCacheClient;
 //#endregion
-export { type CacheEnvelope, type CacheLogger, type CacheResult, type CacheSetOptions, type CacheStats, type CacheStatus, type CacheStore, type CrossResourceRule, MemoryCacheStore, type MemoryCacheStoreOptions, QueryCache, type QueryCacheConfig, type QueryCacheDefaults, type QueryCachePluginOptions, type RedisCacheClient, RedisCacheStore, type RedisCacheStoreOptions, type RedisPipeline, buildQueryKey, hashParams, queryCachePlugin, tagVersionKey, versionKey };
+export { type CacheEnvelope, type CacheLogger, type CacheResult, type CacheSetOptions, type CacheStats, type CacheStatus, type CacheStore, type CrossResourceRule, type IoredisLike, MemoryCacheStore, type MemoryCacheStoreOptions, QueryCache, type QueryCacheConfig, type QueryCacheDefaults, type QueryCachePluginOptions, type RedisCacheClient, RedisCacheStore, type RedisCacheStoreOptions, type RedisPipeline, type UpstashRedisLike, buildQueryKey, hashParams, ioredisAsCacheClient, queryCachePlugin, tagVersionKey, upstashAsCacheClient, versionKey };

package/dist/cache/index.mjs

@@ -1,6 +1,6 @@
 import { i as versionKey, n as hashParams, r as tagVersionKey, t as buildQueryKey } from "../keys-qcD-TVJl.mjs";
-import { t as MemoryCacheStore } from "../memory-Cp7_cAko.mjs";
-import { r as QueryCache, t as queryCachePlugin } from "../queryCachePlugin-D0iIVhW_.mjs";
+import { t as MemoryCacheStore } from "../memory-BFAYkf8H.mjs";
+import { r as QueryCache, t as queryCachePlugin } from "../queryCachePlugin-DbUVroUG.mjs";
 //#region src/cache/redis.ts
 /**
 * Redis-backed cache store.
@@ -85,5 +85,98 @@ var RedisCacheStore = class {
 		return `${this.prefix}${key}`;
 	}
 };
+/**
+* Wrap an ioredis instance as a `RedisCacheClient`.
+*
+* Why: arc's `RedisCacheClient` uses node-redis-v4 object-options style
+* (`set(key, val, { PX })`), but ioredis expects positional flags
+* (`set(key, val, 'PX', ms)`). Without this adapter every ioredis user
+* reinvents the bridge.
+*
+* @example
+* ```typescript
+* import Redis from 'ioredis';
+* import { RedisCacheStore, ioredisAsCacheClient } from '@classytic/arc/cache';
+*
+* const redis = new Redis(process.env.REDIS_URL);
+* const store = new RedisCacheStore({
+*   client: ioredisAsCacheClient(redis),
+*   prefix: 'arc:cache:',
+* });
+* ```
+*/
+function ioredisAsCacheClient(client) {
+	return {
+		async get(key) {
+			return client.get(key);
+		},
+		async set(key, value, options) {
+			if (options?.PX) return client.set(key, value, "PX", options.PX, ...options.NX ? ["NX"] : []);
+			if (options?.EX) return client.set(key, value, "EX", options.EX, ...options.NX ? ["NX"] : []);
+			if (options?.NX) return client.set(key, value, "NX");
+			return client.set(key, value);
+		},
+		async del(key) {
+			if (Array.isArray(key)) return client.del(...key);
+			return client.del(key);
+		},
+		async scan(cursor, ...args) {
+			const [next, keys] = await client.scan(cursor, ...args);
+			return [next, keys];
+		},
+		pipeline: client.pipeline ? () => client.pipeline() : void 0
+	};
+}
+/**
+* Wrap an `@upstash/redis` REST client as a `RedisCacheClient`.
+*
+* Enables running arc's cache layer on edge runtimes without ioredis.
+* Requires `@upstash/redis` as an optional peer dependency.
+*
+* @example
+* ```typescript
+* import { Redis } from '@upstash/redis';
+* import { RedisCacheStore, upstashAsCacheClient } from '@classytic/arc/cache';
+*
+* const redis = Redis.fromEnv();
+* const store = new RedisCacheStore({
+*   client: upstashAsCacheClient(redis),
+*   prefix: 'arc:cache:',
+* });
+* ```
+*/
+function upstashAsCacheClient(client) {
+	return {
+		async get(key) {
+			const raw = await client.get(key);
+			if (raw == null) return null;
+			return typeof raw === "string" ? raw : JSON.stringify(raw);
+		},
+		async set(key, value, options) {
+			const opts = {};
+			if (options?.PX) opts.px = options.PX;
+			if (options?.EX) opts.ex = options.EX;
+			if (options?.NX) opts.nx = true;
+			if (options?.XX) opts.xx = true;
+			const res = await client.set(key, value, opts);
+			return res == null ? null : String(res);
+		},
+		async del(key) {
+			if (Array.isArray(key)) return client.del(...key);
+			return client.del(key);
+		},
+		async scan(cursor, ...args) {
+			const opts = {};
+			for (let i = 0; i < args.length; i += 2) {
+				const flag = String(args[i]).toLowerCase();
+				const val = args[i + 1];
+				if (flag === "match" && typeof val === "string") opts.match = val;
+				if (flag === "count") opts.count = Number(val);
+			}
+			const [next, keys] = await client.scan(cursor, opts);
+			return [next, keys];
+		}
+	};
+}
 //#endregion
-export { MemoryCacheStore, QueryCache, RedisCacheStore, buildQueryKey, hashParams, queryCachePlugin, tagVersionKey, versionKey };
+export { MemoryCacheStore, QueryCache, RedisCacheStore, buildQueryKey, hashParams, ioredisAsCacheClient, queryCachePlugin, tagVersionKey, upstashAsCacheClient, versionKey };

package/dist/cli/commands/docs.mjs

@@ -1,5 +1,5 @@
 import { t as ResourceRegistry } from "../../ResourceRegistry-Dq3_zBQP.mjs";
-import { t as buildOpenApiSpec } from "../../openapi-CYCuekCn.mjs";
+import { t as buildOpenApiSpec } from "../../openapi-CXuTG1M9.mjs";
 import { dirname, resolve } from "node:path";
 import { pathToFileURL } from "node:url";
 import { mkdirSync, writeFileSync } from "node:fs";

package/dist/cli/commands/generate.mjs

@@ -1,4 +1,4 @@
-import { t as pluralize } from "../../pluralize-A0tWEl1K.mjs";
+import { t as pluralize } from "../../pluralize-CWP6MB39.mjs";
 import { join } from "node:path";
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 //#region src/cli/commands/generate.ts

package/dist/core/index.d.mts

@@ -1,3 +1,3 @@
-import { At as BaseController, Ft as BodySanitizerConfig, It as AccessControl, Jt as defineResource, Lt as AccessControlConfig, Mt as QueryResolver, Nt as QueryResolverConfig, Pt as BodySanitizer, jt as BaseControllerOptions, qt as ResourceDefinition } from "../interface-BVuMfeVv.mjs";
-import { A as MUTATION_OPERATIONS, C as HOOK_OPERATIONS, D as MAX_FILTER_DEPTH, E as HookPhase, M as RESERVED_QUERY_PARAMS, N as SYSTEM_FIELDS, O as MAX_REGEX_LENGTH, S as DEFAULT_UPDATE_METHOD, T as HookOperation, _ as DEFAULT_ID_FIELD, a as getControllerScope, b as DEFAULT_SORT, c as createCrudRouter, d as ActionRouterConfig, f as IdempotencyService, g as CrudOperation, h as CRUD_OPERATIONS, i as getControllerContext, j as MutationOperation, k as MAX_SEARCH_LENGTH, l as createPermissionMiddleware, m as createActionRouter, n as createFastifyHandler, o as sendControllerResponse, p as buildActionBodySchema, r as createRequestContext, s as defineResourceVariants, t as createCrudHandlers, u as ActionHandler, v as DEFAULT_LIMIT, w as HOOK_PHASES, x as DEFAULT_TENANT_FIELD, y as DEFAULT_MAX_LIMIT } from "../index-CpTSDqmD.mjs";
-export { AccessControl, AccessControlConfig, ActionHandler, ActionRouterConfig, BaseController, BaseControllerOptions, BodySanitizer, BodySanitizerConfig, CRUD_OPERATIONS, CrudOperation, DEFAULT_ID_FIELD, DEFAULT_LIMIT, DEFAULT_MAX_LIMIT, DEFAULT_SORT, DEFAULT_TENANT_FIELD, DEFAULT_UPDATE_METHOD, HOOK_OPERATIONS, HOOK_PHASES, HookOperation, HookPhase, IdempotencyService, MAX_FILTER_DEPTH, MAX_REGEX_LENGTH, MAX_SEARCH_LENGTH, MUTATION_OPERATIONS, MutationOperation, QueryResolver, QueryResolverConfig, RESERVED_QUERY_PARAMS, ResourceDefinition, SYSTEM_FIELDS, buildActionBodySchema, createActionRouter, createCrudHandlers, createCrudRouter, createFastifyHandler, createPermissionMiddleware, createRequestContext, defineResource, defineResourceVariants, getControllerContext, getControllerScope, sendControllerResponse };
+import { At as BaseControllerOptions, Ft as AccessControl, It as AccessControlConfig, Kt as ResourceDefinition, Mt as QueryResolverConfig, Nt as BodySanitizer, Pt as BodySanitizerConfig, jt as QueryResolver, kt as BaseController, qt as defineResource } from "../interface-YrWsmKqE.mjs";
+import { C as MAX_REGEX_LENGTH, D as RESERVED_QUERY_PARAMS, E as MutationOperation, O as SYSTEM_FIELDS, S as MAX_FILTER_DEPTH, T as MUTATION_OPERATIONS, _ as DEFAULT_UPDATE_METHOD, a as getControllerScope, b as HookOperation, c as createCrudRouter, d as CrudOperation, f as DEFAULT_ID_FIELD, g as DEFAULT_TENANT_FIELD, h as DEFAULT_SORT, i as getControllerContext, l as createPermissionMiddleware, m as DEFAULT_MAX_LIMIT, n as createFastifyHandler, o as sendControllerResponse, p as DEFAULT_LIMIT, r as createRequestContext, s as defineResourceVariants, t as createCrudHandlers, u as CRUD_OPERATIONS, v as HOOK_OPERATIONS, w as MAX_SEARCH_LENGTH, x as HookPhase, y as HOOK_PHASES } from "../index-Cibkchnx.mjs";
+export { AccessControl, AccessControlConfig, BaseController, BaseControllerOptions, BodySanitizer, BodySanitizerConfig, CRUD_OPERATIONS, CrudOperation, DEFAULT_ID_FIELD, DEFAULT_LIMIT, DEFAULT_MAX_LIMIT, DEFAULT_SORT, DEFAULT_TENANT_FIELD, DEFAULT_UPDATE_METHOD, HOOK_OPERATIONS, HOOK_PHASES, HookOperation, HookPhase, MAX_FILTER_DEPTH, MAX_REGEX_LENGTH, MAX_SEARCH_LENGTH, MUTATION_OPERATIONS, MutationOperation, QueryResolver, QueryResolverConfig, RESERVED_QUERY_PARAMS, ResourceDefinition, SYSTEM_FIELDS, createCrudHandlers, createCrudRouter, createFastifyHandler, createPermissionMiddleware, createRequestContext, defineResource, defineResourceVariants, getControllerContext, getControllerScope, sendControllerResponse };

package/dist/core/index.mjs

@@ -1,6 +1,5 @@
 import { a as DEFAULT_SORT, c as HOOK_OPERATIONS, d as MAX_REGEX_LENGTH, f as MAX_SEARCH_LENGTH, h as SYSTEM_FIELDS, i as DEFAULT_MAX_LIMIT, l as HOOK_PHASES, m as RESERVED_QUERY_PARAMS, n as DEFAULT_ID_FIELD, o as DEFAULT_TENANT_FIELD, p as MUTATION_OPERATIONS, r as DEFAULT_LIMIT, s as DEFAULT_UPDATE_METHOD, t as CRUD_OPERATIONS, u as MAX_FILTER_DEPTH } from "../constants-Cxde4rpC.mjs";
-import { i as AccessControl, n as QueryResolver, r as BodySanitizer, t as BaseController } from "../BaseController-DAGGc5Xn.mjs";
-import { n as createActionRouter, t as buildActionBodySchema } from "../createActionRouter-Df1BuawX.mjs";
-import { c as createCrudHandlers, d as getControllerContext, f as getControllerScope, l as createFastifyHandler, n as defineResource, o as createCrudRouter, p as sendControllerResponse, s as createPermissionMiddleware, t as ResourceDefinition, u as createRequestContext } from "../defineResource-Bb_Bdhtw.mjs";
-import { t as defineResourceVariants } from "../core-DKSwNSXf.mjs";
-export { AccessControl, BaseController, BodySanitizer, CRUD_OPERATIONS, DEFAULT_ID_FIELD, DEFAULT_LIMIT, DEFAULT_MAX_LIMIT, DEFAULT_SORT, DEFAULT_TENANT_FIELD, DEFAULT_UPDATE_METHOD, HOOK_OPERATIONS, HOOK_PHASES, MAX_FILTER_DEPTH, MAX_REGEX_LENGTH, MAX_SEARCH_LENGTH, MUTATION_OPERATIONS, QueryResolver, RESERVED_QUERY_PARAMS, ResourceDefinition, SYSTEM_FIELDS, buildActionBodySchema, createActionRouter, createCrudHandlers, createCrudRouter, createFastifyHandler, createPermissionMiddleware, createRequestContext, defineResource, defineResourceVariants, getControllerContext, getControllerScope, sendControllerResponse };
+import { i as AccessControl, n as QueryResolver, r as BodySanitizer, t as BaseController } from "../BaseController-Vu2yc56T.mjs";
+import { c as createCrudHandlers, d as getControllerContext, f as getControllerScope, l as createFastifyHandler, n as defineResource, o as createCrudRouter, p as sendControllerResponse, s as createPermissionMiddleware, t as ResourceDefinition, u as createRequestContext } from "../defineResource-C__jkwvs.mjs";
+import { t as defineResourceVariants } from "../core-DNncu0xF.mjs";
+export { AccessControl, BaseController, BodySanitizer, CRUD_OPERATIONS, DEFAULT_ID_FIELD, DEFAULT_LIMIT, DEFAULT_MAX_LIMIT, DEFAULT_SORT, DEFAULT_TENANT_FIELD, DEFAULT_UPDATE_METHOD, HOOK_OPERATIONS, HOOK_PHASES, MAX_FILTER_DEPTH, MAX_REGEX_LENGTH, MAX_SEARCH_LENGTH, MUTATION_OPERATIONS, QueryResolver, RESERVED_QUERY_PARAMS, ResourceDefinition, SYSTEM_FIELDS, createCrudHandlers, createCrudRouter, createFastifyHandler, createPermissionMiddleware, createRequestContext, defineResource, defineResourceVariants, getControllerContext, getControllerScope, sendControllerResponse };

package/dist/{core-DKSwNSXf.mjs → core-DNncu0xF.mjs}

@@ -1,4 +1,4 @@
-import { n as defineResource } from "./defineResource-Bb_Bdhtw.mjs";
+import { n as defineResource } from "./defineResource-C__jkwvs.mjs";
 //#region src/core/defineResourceVariants.ts
 /**
 * Define multiple resources from a shared base config and per-variant overrides.

package/dist/{createActionRouter-Df1BuawX.mjs → createActionRouter-DH1YFL9m.mjs}

@@ -1,6 +1,6 @@
 import { t as __exportAll } from "./chunk-BpYLSNr0.mjs";
-import { n as normalizePermissionResult, t as applyPermissionResult } from "./applyPermissionResult-D6GPMsvh.mjs";
-import { a as toJsonSchema } from "./schemaConverter-OxfCshus.mjs";
+import { n as normalizePermissionResult, t as applyPermissionResult } from "./applyPermissionResult-bqGpo9ML.mjs";
+import { a as toJsonSchema } from "./schemaConverter-BxFDdtXu.mjs";
 //#region src/core/createActionRouter.ts
 var createActionRouter_exports = /* @__PURE__ */ __exportAll({
 	buildActionBodySchema: () => buildActionBodySchema,
@@ -246,4 +246,4 @@ function buildActionDescription(actions, actionPermissions) {
 	return lines.join("\n");
 }
 //#endregion
-export { createActionRouter as n, createActionRouter_exports as r, buildActionBodySchema as t };
+export { createActionRouter_exports as n, buildActionBodySchema as t };

package/dist/{createApp-BOYjBgdI.mjs → createApp-CBJUJKGP.mjs}

@@ -207,7 +207,7 @@ async function registerArcCore(fastify, config, trackPlugin) {
 	await fastify.register(arcCorePlugin, { emitEvents: config.arcPlugins?.emitEvents !== false });
 	trackPlugin("arc-core");
 	if (config.arcPlugins?.events !== false) {
-		const { default: eventPlugin } = await import("./eventPlugin-D91S2YF4.mjs").then((n) => n.n);
+		const { default: eventPlugin } = await import("./eventPlugin-Dl7MoVWH.mjs").then((n) => n.n);
 		const eventOpts = typeof config.arcPlugins?.events === "object" ? config.arcPlugins.events : {};
 		await fastify.register(eventPlugin, {
 			...eventOpts,
@@ -249,9 +249,9 @@ async function registerArcPlugins(fastify, config, trackPlugin, modules) {
 		trackPlugin("arc-caching", opts);
 	}
 	if (config.arcPlugins?.queryCache) {
-		const { queryCachePlugin } = await import("./queryCachePlugin-D0iIVhW_.mjs").then((n) => n.n);
+		const { queryCachePlugin } = await import("./queryCachePlugin-DbUVroUG.mjs").then((n) => n.n);
 		const opts = config.arcPlugins.queryCache === true ? {} : config.arcPlugins.queryCache;
-		const store = config.stores?.queryCache ?? new (await (import("./memory-Cp7_cAko.mjs").then((n) => n.n))).MemoryCacheStore();
+		const store = config.stores?.queryCache ?? new (await (import("./memory-BFAYkf8H.mjs").then((n) => n.n))).MemoryCacheStore();
 		await fastify.register(queryCachePlugin, {
 			store,
 			...opts
@@ -340,7 +340,7 @@ async function registerAuth(fastify, config, trackPlugin) {
 */
 async function registerElevation(fastify, config, trackPlugin) {
 	if (!config.elevation) return;
-	const { elevationPlugin } = await import("./elevation-BBGFjzIP.mjs").then((n) => n.r);
+	const { elevationPlugin } = await import("./elevation-DxQ6ACbt.mjs").then((n) => n.r);
 	await fastify.register(elevationPlugin, config.elevation);
 	trackPlugin("arc-elevation", config.elevation);
 	fastify.log.debug("Elevation plugin enabled");
@@ -350,7 +350,7 @@ async function registerElevation(fastify, config, trackPlugin) {
 */
 async function registerErrorHandler(fastify, config, trackPlugin) {
 	if (config.errorHandler === false) return;
-	const { errorHandlerPlugin } = await import("./errorHandler-mzqk4cGl.mjs").then((n) => n.n);
+	const { errorHandlerPlugin } = await import("./errorHandler-CZDW4EXS.mjs").then((n) => n.r);
 	const errorOpts = typeof config.errorHandler === "object" ? config.errorHandler : { includeStack: config.preset !== "production" };
 	await fastify.register(errorHandlerPlugin, errorOpts);
 	trackPlugin("arc-error-handler", errorOpts);
@@ -688,6 +688,7 @@ async function createApp(options) {
 	const fastify = Fastify({
 		logger: config.logger ?? true,
 		trustProxy: config.trustProxy ?? false,
+		pluginTimeout: config.pluginTimeout ?? 1e4,
 		routerOptions: { querystringParser: (str) => qs.parse(str) },
 		ajv: { customOptions: {
 			coerceTypes: true,

package/dist/{defineResource-Bb_Bdhtw.mjs → defineResource-C__jkwvs.mjs}

@@ -1,15 +1,15 @@
 import { s as DEFAULT_UPDATE_METHOD, t as CRUD_OPERATIONS } from "./constants-Cxde4rpC.mjs";
 import { _ as isElevated, n as PUBLIC_SCOPE, v as isMember } from "./types-AOD8fxIw.mjs";
-import { t as BaseController } from "./BaseController-DAGGc5Xn.mjs";
-import { i as resolveEffectiveRoles, t as applyFieldReadPermissions } from "./fields-ipsbIRPK.mjs";
+import { t as BaseController } from "./BaseController-Vu2yc56T.mjs";
+import { i as resolveEffectiveRoles, t as applyFieldReadPermissions } from "./fields-CU6FlaDV.mjs";
 import { t as getUserRoles } from "./types-ZUu_h0jp.mjs";
-import { n as normalizePermissionResult, t as applyPermissionResult } from "./applyPermissionResult-D6GPMsvh.mjs";
-import { n as convertRouteSchema, t as convertOpenApiSchemas } from "./schemaConverter-OxfCshus.mjs";
-import { t as requestContext } from "./requestContext-DYvHl113.mjs";
-import { i as getDefaultCrudSchemas } from "./utils-yYT3HDXt.mjs";
-import { r as ForbiddenError } from "./errors-BF2bIOIS.mjs";
-import { t as hasEvents } from "./typeGuards-CcFZXgU7.mjs";
-import { r as getAvailablePresets, t as applyPresets } from "./presets-C2xgzW6x.mjs";
+import { r as ForbiddenError } from "./errors-CqWnSqM-.mjs";
+import { t as requestContext } from "./requestContext-DYtmNpm5.mjs";
+import { n as normalizePermissionResult, t as applyPermissionResult } from "./applyPermissionResult-bqGpo9ML.mjs";
+import { i as getDefaultCrudSchemas } from "./utils-B7FuRr9w.mjs";
+import { n as convertRouteSchema, t as convertOpenApiSchemas } from "./schemaConverter-BxFDdtXu.mjs";
+import { t as hasEvents } from "./typeGuards-Cj5Rgvlg.mjs";
+import { r as getAvailablePresets, t as applyPresets } from "./presets-hM4WhNWY.mjs";
 //#region src/pipeline/pipe.ts
 /**
 * Compose pipeline steps into an ordered array.
@@ -387,24 +387,26 @@ function buildPermissionMiddleware(permissionCheck, resourceName, action) {
 	};
 }
 /**
-* Create additional routes from preset/custom definitions
+* Mount custom routes (from presets or user-defined `routes`) on Fastify.
+* `wrapHandler` is derived inline from `!route.raw`.
 */
-function createAdditionalRoutes(fastify, routes, controller, options) {
+function createCustomRoutes(fastify, routes, controller, options) {
 	const { tag, resourceName, arcDecorator, rateLimitConfig, cacheMw, idempotencyMw, pipeline, routeGuards } = options;
 	for (const route of routes) {
 		const opName = route.operation ?? (typeof route.handler === "string" ? route.handler : `${route.method.toLowerCase()}${route.path.replace(/[/:]/g, "_")}`);
+		const wrapHandler = !route.raw;
 		let handler;
 		if (typeof route.handler === "string") {
 			if (!controller) throw new Error(`Route ${route.method} ${route.path}: string handler '${route.handler}' requires a controller. Either provide a controller or use a function handler instead.`);
 			const method = controller[route.handler];
 			if (typeof method !== "function") throw new Error(`Handler '${route.handler}' not found on controller`);
 			const boundMethod = method.bind(controller);
-			if (route.wrapHandler) {
+			if (wrapHandler) {
 				const steps = pipeline ? resolvePipelineSteps(pipeline, opName) : [];
 				if (steps.length > 0) handler = createPipelineHandler(boundMethod, steps, opName, resourceName);
 				else handler = createFastifyHandler(boundMethod);
 			} else handler = boundMethod;
-		} else if (route.wrapHandler) {
+		} else if (wrapHandler) {
 			const steps = pipeline ? resolvePipelineSteps(pipeline, opName) : [];
 			if (steps.length > 0) handler = createPipelineHandler(route.handler, steps, opName, resourceName);
 			else handler = createFastifyHandler(route.handler);
@@ -480,7 +482,7 @@ function createPipelineHandler(controllerMethod, steps, operation, resourceName)
 * @param options - Router configuration
 */
 function createCrudRouter(fastify, controller, options = {}) {
-	const { tag = "Resource", schemas = {}, permissions = {}, middlewares = {}, routeGuards = [], additionalRoutes = [], disableDefaultRoutes = false, disabledRoutes = [], resourceName = "unknown", schemaOptions, rateLimit, pipe: pipeline, fields: fieldPermissions, updateMethod = DEFAULT_UPDATE_METHOD } = options;
+	const { tag = "Resource", schemas = {}, permissions = {}, middlewares = {}, routeGuards = [], routes: customRoutes = [], disableDefaultRoutes = false, disabledRoutes = [], resourceName = "unknown", schemaOptions, rateLimit, pipe: pipeline, fields: fieldPermissions, updateMethod = DEFAULT_UPDATE_METHOD } = options;
 	const rateLimitConfig = buildRateLimitConfig(rateLimit);
 	const cacheMw = !(fastify.hasDecorator("queryCache") && controller && typeof controller._cacheConfig !== "undefined" && controller._cacheConfig !== void 0) && fastify.hasDecorator("responseCache") ? fastify.responseCache.middleware : null;
 	const idempotencyMw = fastify.hasDecorator("idempotency") ? fastify.idempotency.middleware : null;
@@ -646,7 +648,7 @@ function createCrudRouter(fastify, controller, options = {}) {
 			});
 		}
 	}
-	if (additionalRoutes.length > 0) createAdditionalRoutes(fastify, additionalRoutes, controller, {
+	if (customRoutes.length > 0) createCustomRoutes(fastify, customRoutes, controller, {
 		tag,
 		resourceName,
 		arcDecorator,
@@ -941,6 +943,7 @@ function defineResource(config) {
 			idField: resolvedConfig.idField,
 			matchesFilter: config.adapter?.matchesFilter,
 			cache: resolvedConfig.cache,
+			onFieldWriteDenied: resolvedConfig.onFieldWriteDenied,
 			presetFields: resolvedConfig._controllerOptions ? {
 				slugField: resolvedConfig._controllerOptions.slugField,
 				parentField: resolvedConfig._controllerOptions.parentField
@@ -1088,16 +1091,6 @@ var ResourceDefinition = class {
 	schemaOptions;
 	customSchemas;
 	permissions;
-	additionalRoutes;
-	/**
-	* Original v2.8 `routes` declaration — retained for downstream consumers
-	* (OpenAPI, MCP, registry, CLI introspect). Preserves fields dropped during
-	* normalization to `additionalRoutes` (notably `mcp`, `description`,
-	* `annotations`). Undefined when the resource was defined with the legacy
-	* `additionalRoutes` shape.
-	*
-	* Added in 2.8.1 — the source-of-truth fix for "canonical resource manifest".
-	*/
 	routes;
 	middlewares;
 	routeGuards;
@@ -1130,8 +1123,7 @@ var ResourceDefinition = class {
 		this.schemaOptions = config.schemaOptions ?? {};
 		this.customSchemas = config.customSchemas ?? {};
 		this.permissions = config.permissions ?? {};
-		this.routes = config.routes;
-		this.additionalRoutes = config.routes ? convertRoutesToAdditionalRoutes(config.routes) : [];
+		this.routes = config.routes ?? [];
 		this.middlewares = config.middlewares ?? {};
 		this.routeGuards = config.routeGuards;
 		this.disableDefaultRoutes = config.disableDefaultRoutes ?? false;
@@ -1150,7 +1142,6 @@ var ResourceDefinition = class {
 		this.queryParser = config.queryParser;
 		this._appliedPresets = config._appliedPresets ?? [];
 		this._pendingHooks = config._pendingHooks ?? [];
-		if (config.onRegister) this._onRegister = config.onRegister;
 	}
 	/** Get repository from adapter (if available) */
 	get repository() {
@@ -1166,7 +1157,7 @@ var ResourceDefinition = class {
 			const ctrl = this.controller;
 			for (const method of enabledCrudRoutes) if (typeof ctrl[method] !== "function") errors.push(`CRUD method '${method}' not found on controller`);
 		}
-		for (const route of this.additionalRoutes) if (typeof route.handler === "string") {
+		for (const route of this.routes) if (typeof route.handler === "string") {
 			if (!this.controller) errors.push(`Route ${route.method} ${route.path}: string handler '${route.handler}' requires a controller`);
 			else if (typeof this.controller[route.handler] !== "function") errors.push(`Route ${route.method} ${route.path}: handler '${route.handler}' not found`);
 		}
@@ -1207,8 +1198,6 @@ var ResourceDefinition = class {
 			});
 			await fastify.register(async (instance) => {
 				const typedInstance = instance;
-				const onRegister = self._onRegister;
-				if (onRegister) await onRegister(instance);
 				let schemas = null;
 				const openApi = self._registryMeta?.openApiSchemas;
 				if (openApi && (!self.customSchemas || Object.keys(self.customSchemas).length === 0)) {
@@ -1281,14 +1270,13 @@ var ResourceDefinition = class {
 					schemas = schemas ?? {};
 					schemas.list = schemas.list ? deepMergeSchemas({ querystring: normalizedSchema }, schemas.list) : { querystring: normalizedSchema };
 				}
-				const resolvedRoutes = self.additionalRoutes;
 				createCrudRouter(typedInstance, self.controller, {
 					tag: self.tag,
 					schemas: schemas ?? void 0,
 					permissions: self.permissions,
 					middlewares: self.middlewares,
 					routeGuards: self.routeGuards,
-					additionalRoutes: resolvedRoutes,
+					routes: self.routes,
 					disableDefaultRoutes: self.disableDefaultRoutes,
 					disabledRoutes: self.disabledRoutes,
 					resourceName: self.name,
@@ -1299,7 +1287,7 @@ var ResourceDefinition = class {
 					fields: self.fields
 				});
 				if (self.actions && Object.keys(self.actions).length > 0) {
-					const { createActionRouter } = await import("./createActionRouter-Df1BuawX.mjs").then((n) => n.r);
+					const { createActionRouter } = await import("./createActionRouter-DH1YFL9m.mjs").then((n) => n.n);
 					createActionRouter(instance, normalizeActionsToRouterConfig(self.actions, self.actionPermissions, self.tag));
 				}
 				if (self.events && Object.keys(self.events).length > 0) typedInstance.log?.debug?.(`Resource '${self.name}' defined ${Object.keys(self.events).length} events`);
@@ -1366,29 +1354,6 @@ function capitalize(str) {
 	return str.charAt(0).toUpperCase() + str.slice(1);
 }
 /**
-* Convert v2.8 RouteDefinition[] to internal AdditionalRoute[] format.
-* The internal format is what createCrudRouter understands.
-*/
-function convertRoutesToAdditionalRoutes(routes) {
-	return routes.map((route) => ({
-		method: route.method,
-		path: route.path,
-		handler: route.handler,
-		permissions: route.permissions,
-		wrapHandler: !route.raw,
-		operation: route.operation,
-		summary: route.summary,
-		description: route.description,
-		tags: route.tags,
-		preHandler: route.preHandler,
-		preAuth: route.preAuth,
-		streamResponse: route.streamResponse,
-		schema: route.schema,
-		mcpHandler: route.mcpHandler,
-		mcp: route.mcp
-	}));
-}
-/**
 * Normalize ActionsMap into the ActionRouterConfig shape that createActionRouter expects.
 */
 function normalizeActionsToRouterConfig(actions, globalAuth, tag) {

package/dist/docs/index.d.mts

@@ -1,4 +1,4 @@
-import { it as RegistryEntry } from "../interface-BVuMfeVv.mjs";
+import { rt as RegistryEntry } from "../interface-YrWsmKqE.mjs";
 import { t as ExternalOpenApiPaths } from "../externalPaths-Bapitwvd.mjs";
 import { FastifyPluginAsync } from "fastify";
 

package/dist/docs/index.mjs

@@ -1,5 +1,5 @@
 import { t as getUserRoles } from "../types-ZUu_h0jp.mjs";
-import { n as openApiPlugin, r as openapi_default, t as buildOpenApiSpec } from "../openapi-CYCuekCn.mjs";
+import { n as openApiPlugin, r as openapi_default, t as buildOpenApiSpec } from "../openapi-CXuTG1M9.mjs";
 import fp from "fastify-plugin";
 //#region src/docs/scalar.ts
 const scalarPlugin = async (fastify, opts = {}) => {

package/dist/dynamic/index.d.mts

@@ -1,5 +1,5 @@
-import { qt as ResourceDefinition, r as DataAdapter } from "../interface-BVuMfeVv.mjs";
-import { t as PermissionCheck } from "../types-CVC4HOKi.mjs";
+import { Kt as ResourceDefinition, r as DataAdapter } from "../interface-YrWsmKqE.mjs";
+import { t as PermissionCheck } from "../types-DZi1aYhm.mjs";
 
 //#region src/dynamic/ArcDynamicLoader.d.ts
 interface ArcArchitectureSchema {

package/dist/dynamic/index.mjs

@@ -1,6 +1,6 @@
-import { t as ArcQueryParser } from "../queryParser-CgCtsjti.mjs";
-import { n as defineResource } from "../defineResource-Bb_Bdhtw.mjs";
-import { C as publicRead, T as readOnly, b as fullPublic, v as adminOnly, w as publicReadAdminWrite, x as ownerWithAdminBypass, y as authenticated } from "../permissions-CH4cNwJi.mjs";
+import { t as ArcQueryParser } from "../queryParser-Cs-6SHQK.mjs";
+import { n as defineResource } from "../defineResource-C__jkwvs.mjs";
+import { C as publicRead, T as readOnly, b as fullPublic, v as adminOnly, w as publicReadAdminWrite, x as ownerWithAdminBypass, y as authenticated } from "../permissions-oNZawnkR.mjs";
 //#region src/dynamic/ArcDynamicLoader.ts
 const VALID_FIELD_TYPES = new Set([
 	"string",

package/dist/{elevation-BBGFjzIP.mjs → elevation-DxQ6ACbt.mjs}

@@ -57,13 +57,27 @@ const elevationPlugin = async (fastify, opts = {}) => {
 			userId,
 			organizationId: orgId
 		});
-		if (onElevation) try {
-			await onElevation({
-				userId,
-				organizationId: orgId || void 0,
-				request,
-				timestamp: /* @__PURE__ */ new Date()
+		const event = {
+			userId,
+			organizationId: orgId || void 0,
+			request,
+			timestamp: /* @__PURE__ */ new Date()
+		};
+		const publish = fastify.events?.publish;
+		if (publish) try {
+			await publish("arc.scope.elevated", {
+				userId: event.userId,
+				organizationId: event.organizationId,
+				route: request.routeOptions?.url ?? request.url,
+				method: request.method,
+				requestId: request.id,
+				timestamp: event.timestamp.toISOString()
 			});
+		} catch (err) {
+			log.warn("Failed to publish arc.scope.elevated event", { error: err instanceof Error ? err.message : String(err) });
+		}
+		if (onElevation) try {
+			await onElevation(event);
 		} catch {
 			log.warn("onElevation callback threw — continuing request");
 		}

package/dist/{errorHandler-mzqk4cGl.mjs → errorHandler-CZDW4EXS.mjs}

@@ -1,11 +1,61 @@
 import { t as __exportAll } from "./chunk-BpYLSNr0.mjs";
-import { p as isArcError } from "./errors-BF2bIOIS.mjs";
+import { p as isArcError } from "./errors-CqWnSqM-.mjs";
 import fp from "fastify-plugin";
 //#region src/plugins/errorHandler.ts
-var errorHandler_exports = /* @__PURE__ */ __exportAll({ errorHandlerPlugin: () => errorHandlerPlugin });
+var errorHandler_exports = /* @__PURE__ */ __exportAll({
+	defaultIsDuplicateKeyError: () => defaultIsDuplicateKeyError,
+	errorHandlerPlugin: () => errorHandlerPlugin
+});
+/**
+* Default duplicate-key detector covering the mainstream drivers arc sees
+* most. Detection is strictly by known driver codes — never by message
+* string matching — because false positives on dup-key silently mask real
+* errors (WriteConflict, NotWritablePrimary, etc.) as 409s. For long-tail
+* drivers (Neo4j, MSSQL, DynamoDB, custom kits), compose rather than
+* replace:
+*
+* ```ts
+* import { defaultIsDuplicateKeyError } from '@classytic/arc/plugins';
+*
+* errorHandler: {
+*   isDuplicateKeyError: (err) =>
+*     defaultIsDuplicateKeyError(err) || isNeo4jDupKey(err),
+* }
+* ```
+*
+* Drizzle apps get coverage transitively (Drizzle doesn't wrap driver
+* errors — pg/mysql2/better-sqlite3 codes propagate as-is). Neon is
+* Postgres-wire-compatible → `23505` covers `@neondatabase/serverless`.
+*/
+function defaultIsDuplicateKeyError(err) {
+	if (!err || typeof err !== "object") return false;
+	const e = err;
+	if (e.code === 11e3 || e.codeName === "DuplicateKey") return true;
+	if (e.code === "P2002") return true;
+	if (e.code === "23505") return true;
+	if (e.code === "ER_DUP_ENTRY" || e.errno === 1062) return true;
+	if (e.code === "SQLITE_CONSTRAINT_UNIQUE" || e.code === "SQLITE_CONSTRAINT_PRIMARYKEY") return true;
+	return false;
+}
+/**
+* Extract the duplicate-field names for the `details.duplicateFields`
+* response. Only called when the caller has opted into detail exposure
+* (`includeStack: true`) — shape differs per driver.
+*/
+function extractDuplicateFields(err) {
+	if (!err || typeof err !== "object") return null;
+	const e = err;
+	if (e.keyValue && typeof e.keyValue === "object") return Object.keys(e.keyValue);
+	if (e.meta?.target) {
+		if (Array.isArray(e.meta.target)) return e.meta.target.map(String);
+		if (typeof e.meta.target === "string") return [e.meta.target];
+	}
+	if (typeof e.constraint === "string") return [e.constraint];
+	return null;
+}
 async function errorHandlerPluginFn(fastify, options = {}) {
 	const isProduction = process.env.NODE_ENV === "production";
-	const { includeStack = !isProduction, onError, errorMap = {}, errorMappers = [] } = options;
+	const { includeStack = !isProduction, onError, errorMap = {}, errorMappers = [], isDuplicateKeyError = defaultIsDuplicateKeyError } = options;
 	fastify.setErrorHandler(async (error, request, reply) => {
 		if (onError) try {
 			await onError(error, request);
@@ -75,12 +125,14 @@ async function errorHandlerPluginFn(fastify, options = {}) {
 			statusCode = 400;
 			response.code = "INVALID_ID";
 			response.error = "Invalid identifier format";
-		} else if (error.name === "MongoServerError" && error.code === 11e3) {
+		} else if (isDuplicateKeyError(error)) {
 			statusCode = 409;
 			response.code = "DUPLICATE_KEY";
 			response.error = "Resource already exists";
-			const keyValue = error.keyValue;
-			if (keyValue && includeStack) response.details = { duplicateFields: Object.keys(keyValue) };
+			if (includeStack) {
+				const duplicateFields = extractDuplicateFields(error);
+				if (duplicateFields && duplicateFields.length > 0) response.details = { duplicateFields };
+			}
 		}
 		if (includeStack && error.stack) response.stack = error.stack;
 		if (statusCode >= 500) request.log.error({
@@ -118,4 +170,4 @@ const errorHandlerPlugin = fp(errorHandlerPluginFn, {
 	fastify: "5.x"
 });
 //#endregion
-export { errorHandler_exports as n, errorHandlerPlugin as t };
+export { errorHandlerPlugin as n, errorHandler_exports as r, defaultIsDuplicateKeyError as t };