@classytic/arc 2.9.1 → 2.10.3

package/dist/audit/index.mjs

@@ -23,8 +23,12 @@ function repositoryAsAuditStore(repository) {
 			};
 			await repository.create(doc);
 		},
+		async purgeOlderThan(cutoff) {
+			if (!repository.deleteMany) return 0;
+			return (await repository.deleteMany({ timestamp: { $lt: cutoff } })).deletedCount ?? 0;
+		},
 		async query(opts = {}) {
-			if (!repository.findAll) throw new Error("auditPlugin: repository.findAll is required for query(). mongokit ≥3.6 implements it; other kits should match.");
+			if (!repository.getAll) throw new Error("auditPlugin: repository.getAll is required for query(). It's on repo-core's MinimalRepo floor — every kit (mongokit, sqlitekit, custom) implements it.");
 			const filter = {};
 			if (opts.resource) filter.resource = opts.resource;
 			if (opts.documentId) filter.documentId = opts.documentId;
@@ -40,11 +44,15 @@ function repositoryAsAuditStore(repository) {
 				if (opts.to) range.$lte = opts.to;
 				filter.timestamp = range;
 			}
-			return (await repository.findAll(filter, {
+			const limit = opts.limit ?? 100;
+			const page = Math.floor((opts.offset ?? 0) / limit) + 1;
+			const result = await repository.getAll({
+				filters: filter,
 				sort: { timestamp: -1 },
-				skip: opts.offset ?? 0,
-				limit: opts.limit ?? 100
-			})).map((d) => ({
+				page,
+				limit
+			});
+			return (Array.isArray(result) ? result : result.docs ?? []).map((d) => ({
 				id: String(d._id ?? d.id ?? ""),
 				resource: d.resource ?? "",
 				documentId: d.documentId ?? "",
@@ -145,6 +153,11 @@ var MemoryAuditStore = class {
 		results = results.slice(offset, offset + limit);
 		return results;
 	}
+	async purgeOlderThan(cutoff) {
+		const before = this.entries.length;
+		this.entries = this.entries.filter((e) => e.timestamp >= cutoff);
+		return before - this.entries.length;
+	}
 	async close() {
 		this.entries = [];
 	}
@@ -199,6 +212,11 @@ const auditPlugin = async (fastify, opts = {}) => {
 		async query(options) {
 			for (const store of stores) if (store.query) return store.query(options);
 			return [];
+		},
+		async purge(cutoff) {
+			let total = 0;
+			for (const store of stores) if (store.purgeOlderThan) total += await store.purgeOlderThan(cutoff);
+			return total;
 		}
 	};
 	fastify.decorate("audit", audit);
@@ -223,7 +241,22 @@ const auditPlugin = async (fastify, opts = {}) => {
 			request.auditContext.duration = Math.round(reply.elapsedTime);
 		}
 	});
+	const retention = opts.retention;
+	let retentionTimer = null;
+	if (retention) {
+		const interval = retention.purgeIntervalMs ?? 864e5;
+		if (interval > 0) {
+			retentionTimer = setInterval(() => {
+				const cutoff = new Date(Date.now() - retention.maxAgeMs);
+				audit.purge(cutoff).catch((err) => {
+					fastify.log?.warn?.({ err }, "audit retention purge failed");
+				});
+			}, interval);
+			retentionTimer.unref?.();
+		}
+	}
 	fastify.addHook("onClose", async () => {
+		if (retentionTimer) clearInterval(retentionTimer);
 		await Promise.all(stores.map((store) => store.close?.()));
 	});
 	const autoAuditConfig = opts.autoAudit ?? true;
@@ -317,7 +350,8 @@ function createNoopLogger() {
 		delete: noop,
 		restore: noop,
 		custom: noop,
-		query: async () => []
+		query: async () => [],
+		purge: async () => 0
 	};
 }
 var auditPlugin_default = fp(auditPlugin, {
@@ -326,4 +360,4 @@ var auditPlugin_default = fp(auditPlugin, {
 	dependencies: ["arc-core"]
 });
 //#endregion
-export { MemoryAuditStore, auditPlugin_default as auditPlugin, auditPlugin as auditPluginFn, createAuditEntry };
+export { MemoryAuditStore, auditPlugin_default as auditPlugin, auditPlugin as auditPluginFn, createAuditEntry, repositoryAsAuditStore };

package/dist/auth/index.d.mts

@@ -1,7 +1,7 @@
-import { v as AuthHelpers, y as AuthPluginOptions } from "../interface-YrWsmKqE.mjs";
-import { t as PermissionCheck } from "../types-DZi1aYhm.mjs";
-import { t as ExternalOpenApiPaths } from "../externalPaths-Bapitwvd.mjs";
-import { a as SessionManagerOptions, c as createSessionManager, i as SessionData, n as MemorySessionStoreOptions, o as SessionManagerResult, r as SessionCookieOptions, s as SessionStore, t as MemorySessionStore } from "../sessionManager-D-oNWHz3.mjs";
+import { c as PermissionCheck } from "../fields-Lo1VUDpt.mjs";
+import { A as AuthHelpers, j as AuthPluginOptions } from "../index-Cl0uoKd5.mjs";
+import { t as ExternalOpenApiPaths } from "../externalPaths-BQ8QijNH.mjs";
+import { a as SessionManagerOptions, c as createSessionManager, i as SessionData, n as MemorySessionStoreOptions, o as SessionManagerResult, r as SessionCookieOptions, s as SessionStore, t as MemorySessionStore } from "../sessionManager-BkzVU8h2.mjs";
 import { FastifyPluginAsync, FastifyReply as FastifyReply$1, FastifyRequest } from "fastify";
 
 //#region src/auth/authPlugin.d.ts

package/dist/auth/index.mjs

@@ -1,7 +1,7 @@
-import { n as normalizeRoles, t as getUserRoles } from "../types-ZUu_h0jp.mjs";
-import { t as ArcError } from "../errors-CqWnSqM-.mjs";
-import { h as requireTeamMembership, l as requireOrgMembership, u as requireOrgRole } from "../permissions-oNZawnkR.mjs";
-import { n as extractBetterAuthOpenApi } from "../betterAuthOpenApi--rdY15Ld.mjs";
+import { n as normalizeRoles, t as getUserRoles } from "../types-DV9WDfeg.mjs";
+import { t as ArcError } from "../errors-D5c-5BJL.mjs";
+import { _ as requireTeamMembership, m as requireOrgRole, p as requireOrgMembership } from "../permissions-Dk6mshja.mjs";
+import { n as extractBetterAuthOpenApi } from "../betterAuthOpenApi-BBRVhjQN.mjs";
 import { createHmac, randomUUID, timingSafeEqual } from "node:crypto";
 import fp from "fastify-plugin";
 //#region src/auth/authPlugin.ts
@@ -684,7 +684,7 @@ function createBetterAuthAdapter(options) {
 		if (!fastify.hasDecorator("authenticate")) fastify.decorate("authenticate", authenticate);
 		if (!fastify.hasDecorator("optionalAuthenticate")) fastify.decorate("optionalAuthenticate", optionalAuthenticate);
 		if (!extractedOpenApi && openapiOpt !== false && auth.api && typeof auth.api === "object") {
-			const { extractBetterAuthOpenApi } = await import("../betterAuthOpenApi--rdY15Ld.mjs").then((n) => n.t);
+			const { extractBetterAuthOpenApi } = await import("../betterAuthOpenApi-BBRVhjQN.mjs").then((n) => n.t);
 			extractedOpenApi = extractBetterAuthOpenApi(auth.api, {
 				basePath,
 				userFields

package/dist/auth/redis-session.d.mts

@@ -1,4 +1,4 @@
-import { i as SessionData, s as SessionStore } from "../sessionManager-D-oNWHz3.mjs";
+import { i as SessionData, s as SessionStore } from "../sessionManager-BkzVU8h2.mjs";
 
 //#region src/auth/redis-session.d.ts
 /** Minimal Redis client interface — compatible with ioredis */

package/dist/cache/index.d.mts

@@ -1,5 +1,5 @@
-import { i as CacheStore, n as CacheSetOptions, r as CacheStats, t as CacheLogger } from "../interface-DplgQO2e.mjs";
-import { a as CacheEnvelope, c as QueryCache, i as queryCachePlugin, l as QueryCacheConfig, n as QueryCacheDefaults, o as CacheResult, r as QueryCachePluginOptions, s as CacheStatus, t as CrossResourceRule } from "../queryCachePlugin-CnTZZTC5.mjs";
+import { n as CacheStats, r as CacheStore, t as CacheLogger } from "../interface-D218ikEo.mjs";
+import { a as CacheEnvelope, c as QueryCache, i as queryCachePlugin, l as QueryCacheConfig, n as QueryCacheDefaults, o as CacheResult, r as QueryCachePluginOptions, s as CacheStatus, t as CrossResourceRule } from "../queryCachePlugin-BKbWjgDG.mjs";
 
 //#region src/cache/keys.d.ts
 /**
@@ -24,8 +24,8 @@ declare function hashParams(params: Record<string, unknown>): string;
 //#endregion
 //#region src/cache/memory.d.ts
 interface MemoryCacheStoreOptions {
-  /** Default TTL in milliseconds (default: 60_000) */
-  defaultTtlMs?: number;
+  /** Default TTL in seconds (default: 60) */
+  defaultTtlSeconds?: number;
   /** Hard upper bound for entries (default: 1000) */
   maxEntries?: number;
   /** Background cleanup interval in milliseconds (default: 30_000) */
@@ -59,7 +59,7 @@ interface MemoryCacheStoreOptions {
 declare class MemoryCacheStore<TValue = unknown> implements CacheStore<TValue> {
   readonly name = "memory-cache";
   private readonly cache;
-  private readonly defaultTtlMs;
+  private readonly defaultTtlSeconds;
   private readonly maxEntries;
   private readonly maxEntryBytes;
   private readonly maxMemoryBytes;
@@ -72,9 +72,9 @@ declare class MemoryCacheStore<TValue = unknown> implements CacheStore<TValue> {
   private _evictions;
   constructor(options?: MemoryCacheStoreOptions);
   get(key: string): Promise<TValue | undefined>;
-  set(key: string, value: TValue, options?: CacheSetOptions): Promise<void>;
+  set(key: string, value: TValue, ttlSeconds?: number): Promise<void>;
   delete(key: string): Promise<void>;
-  clear(): Promise<void>;
+  clear(pattern?: string): Promise<void>;
   close(): Promise<void>;
   stats(): CacheStats;
   private removeEntry;
@@ -112,8 +112,8 @@ interface RedisCacheStoreOptions {
   client: RedisCacheClient;
   /** Key prefix for namespacing (default: 'arc:cache:') */
   prefix?: string;
-  /** Default TTL in milliseconds (default: 60_000) */
-  defaultTtlMs?: number;
+  /** Default TTL in seconds (default: 60) */
+  defaultTtlSeconds?: number;
   /** Maximum serialized entry size in bytes. Oversized entries are skipped. */
   maxEntryBytes?: number;
 }
@@ -126,17 +126,19 @@ declare class RedisCacheStore<TValue = unknown> implements CacheStore<TValue> {
   readonly name = "redis-cache";
   private readonly client;
   private readonly prefix;
-  private readonly defaultTtlMs;
+  private readonly defaultTtlSeconds;
   private readonly maxEntryBytes;
   private _hits;
   private _misses;
   constructor(options: RedisCacheStoreOptions);
   get(key: string): Promise<TValue | undefined>;
-  set(key: string, value: TValue, options?: CacheSetOptions): Promise<void>;
+  set(key: string, value: TValue, ttlSeconds?: number): Promise<void>;
   delete(key: string): Promise<void>;
-  clear(): Promise<void>;
-  /** Delete all keys matching `this.prefix + prefix + *`. Returns count deleted. */
-  deleteByPrefix(prefix: string): Promise<number>;
+  /**
+   * Invalidate keys. Pass a glob pattern to delete a subset (`user:*:v2`);
+   * omit to clear every key under this store's prefix.
+   */
+  clear(pattern?: string): Promise<void>;
   stats(): CacheStats;
   private scanAndDelete;
   private withPrefix;
@@ -212,4 +214,4 @@ interface UpstashRedisLike {
  */
 declare function upstashAsCacheClient(client: UpstashRedisLike): RedisCacheClient;
 //#endregion
-export { type CacheEnvelope, type CacheLogger, type CacheResult, type CacheSetOptions, type CacheStats, type CacheStatus, type CacheStore, type CrossResourceRule, type IoredisLike, MemoryCacheStore, type MemoryCacheStoreOptions, QueryCache, type QueryCacheConfig, type QueryCacheDefaults, type QueryCachePluginOptions, type RedisCacheClient, RedisCacheStore, type RedisCacheStoreOptions, type RedisPipeline, type UpstashRedisLike, buildQueryKey, hashParams, ioredisAsCacheClient, queryCachePlugin, tagVersionKey, upstashAsCacheClient, versionKey };
+export { type CacheEnvelope, type CacheLogger, type CacheResult, type CacheStats, type CacheStatus, type CacheStore, type CrossResourceRule, type IoredisLike, MemoryCacheStore, type MemoryCacheStoreOptions, QueryCache, type QueryCacheConfig, type QueryCacheDefaults, type QueryCachePluginOptions, type RedisCacheClient, RedisCacheStore, type RedisCacheStoreOptions, type RedisPipeline, type UpstashRedisLike, buildQueryKey, hashParams, ioredisAsCacheClient, queryCachePlugin, tagVersionKey, upstashAsCacheClient, versionKey };

package/dist/cache/index.mjs

@@ -1,6 +1,6 @@
 import { i as versionKey, n as hashParams, r as tagVersionKey, t as buildQueryKey } from "../keys-qcD-TVJl.mjs";
-import { t as MemoryCacheStore } from "../memory-BFAYkf8H.mjs";
-import { r as QueryCache, t as queryCachePlugin } from "../queryCachePlugin-DbUVroUG.mjs";
+import { t as MemoryCacheStore } from "../memory-B5Amv9A1.mjs";
+import { r as QueryCache, t as queryCachePlugin } from "../queryCachePlugin-DQCEfJis.mjs";
 //#region src/cache/redis.ts
 /**
 * Redis-backed cache store.
@@ -11,14 +11,14 @@ var RedisCacheStore = class {
 	name = "redis-cache";
 	client;
 	prefix;
-	defaultTtlMs;
+	defaultTtlSeconds;
 	maxEntryBytes;
 	_hits = 0;
 	_misses = 0;
 	constructor(options) {
 		this.client = options.client;
 		this.prefix = options.prefix ?? "arc:cache:";
-		this.defaultTtlMs = options.defaultTtlMs ?? 6e4;
+		this.defaultTtlSeconds = options.defaultTtlSeconds ?? 60;
 		this.maxEntryBytes = options.maxEntryBytes ?? 0;
 	}
 	async get(key) {
@@ -36,22 +36,23 @@ var RedisCacheStore = class {
 			return;
 		}
 	}
-	async set(key, value, options = {}) {
-		const ttlMs = options.ttlMs ?? this.defaultTtlMs;
-		if (!Number.isFinite(ttlMs) || ttlMs <= 0) return;
+	async set(key, value, ttlSeconds) {
+		const effectiveTtlSeconds = ttlSeconds ?? this.defaultTtlSeconds;
+		if (!Number.isFinite(effectiveTtlSeconds) || effectiveTtlSeconds <= 0) return;
 		const payload = JSON.stringify(value);
 		if (this.maxEntryBytes > 0 && Buffer.byteLength(payload, "utf8") > this.maxEntryBytes) return;
-		await this.client.set(this.withPrefix(key), payload, { PX: Math.ceil(ttlMs) });
+		await this.client.set(this.withPrefix(key), payload, { EX: Math.ceil(effectiveTtlSeconds) });
 	}
 	async delete(key) {
 		await this.client.del(this.withPrefix(key));
 	}
-	async clear() {
-		await this.scanAndDelete(`${this.prefix}*`);
-	}
-	/** Delete all keys matching `this.prefix + prefix + *`. Returns count deleted. */
-	async deleteByPrefix(prefix) {
-		return this.scanAndDelete(`${this.prefix}${prefix}*`);
+	/**
+	* Invalidate keys. Pass a glob pattern to delete a subset (`user:*:v2`);
+	* omit to clear every key under this store's prefix.
+	*/
+	async clear(pattern) {
+		const scanPattern = pattern ? `${this.prefix}${pattern.includes("*") ? pattern : `${pattern}*`}` : `${this.prefix}*`;
+		await this.scanAndDelete(scanPattern);
 	}
 	stats() {
 		return {

package/dist/{caching-CjybdRwx.mjs → caching-CBpK_SCM.mjs}

@@ -34,7 +34,7 @@ const cachingPlugin = async (fastify, opts = {}) => {
 		if (rule?.staleWhileRevalidate) parts.push(`stale-while-revalidate=${rule.staleWhileRevalidate}`);
 		return parts.join(", ");
 	}
-	fastify.addHook("onSend", async (request, reply, payload) => {
+	fastify.addHook("preSerialization", async (request, reply, payload) => {
 		const url = request.url;
 		if (exclude.some((p) => url.startsWith(p))) return payload;
 		const method = request.method.toUpperCase();
@@ -48,13 +48,18 @@ const cachingPlugin = async (fastify, opts = {}) => {
 			const rule = findRule(url);
 			reply.header("cache-control", buildCacheControl(rule));
 		}
-		if (etag && payload) {
-			const tag = `"${fnv1a(typeof payload === "string" ? payload : String(payload))}"`;
+		if (etag && payload != null) {
+			let body;
+			if (typeof payload === "string") body = payload;
+			else if (Buffer.isBuffer(payload)) body = payload.toString("utf-8");
+			else body = JSON.stringify(payload);
+			const tag = `"${fnv1a(body)}"`;
 			reply.header("etag", tag);
 			if (conditional) {
 				const ifNoneMatch = request.headers["if-none-match"];
 				if (ifNoneMatch && ifNoneMatch === tag) {
 					reply.code(304);
+					reply.serializer((p) => typeof p === "string" ? p : "");
 					return "";
 				}
 			}

package/dist/cli/commands/describe.mjs

@@ -1,4 +1,4 @@
-import { t as CRUD_OPERATIONS } from "../../constants-Cxde4rpC.mjs";
+import { t as CRUD_OPERATIONS } from "../../constants-BhY1OHoH.mjs";
 import { resolve } from "node:path";
 import { pathToFileURL } from "node:url";
 //#region src/cli/commands/describe.ts

package/dist/cli/commands/docs.mjs

@@ -1,5 +1,5 @@
-import { t as ResourceRegistry } from "../../ResourceRegistry-Dq3_zBQP.mjs";
-import { t as buildOpenApiSpec } from "../../openapi-CXuTG1M9.mjs";
+import { t as ResourceRegistry } from "../../ResourceRegistry-BPd6NQDm.mjs";
+import { t as buildOpenApiSpec } from "../../openapi-B5F8AddX.mjs";
 import { dirname, resolve } from "node:path";
 import { pathToFileURL } from "node:url";
 import { mkdirSync, writeFileSync } from "node:fs";

package/dist/cli/commands/generate.mjs

@@ -1,4 +1,4 @@
-import { t as pluralize } from "../../pluralize-CWP6MB39.mjs";
+import { t as pluralize } from "../../pluralize-A0tWEl1K.mjs";
 import { join } from "node:path";
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 //#region src/cli/commands/generate.ts

package/dist/cli/commands/init.mjs

@@ -102,7 +102,7 @@ async function installDependencies(projectPath, config, pm) {
 	];
 	if (config.auth === "better-auth") deps.push("better-auth@^1.6.0", "mongodb@latest");
 	else deps.push("@fastify/jwt@latest", "bcryptjs@latest");
-	if (config.adapter === "mongokit") deps.push("@classytic/mongokit@^3.5.5", "mongoose@^9.4.1");
+	if (config.adapter === "mongokit") deps.push("@classytic/mongokit@^3.10.2", "@classytic/repo-core@^0.1.0", "mongoose@^9.4.1");
 	const devDeps = ["vitest@latest", "pino-pretty@latest"];
 	if (config.typescript) devDeps.push("typescript@latest", "@types/node@latest", "tsx@latest");
 	const installCmd = getInstallCommand(pm, deps, false);

package/dist/cli/commands/introspect.mjs

@@ -1,4 +1,4 @@
-import { t as ResourceRegistry } from "../../ResourceRegistry-Dq3_zBQP.mjs";
+import { t as ResourceRegistry } from "../../ResourceRegistry-BPd6NQDm.mjs";
 import { resolve } from "node:path";
 import { pathToFileURL } from "node:url";
 //#region src/cli/commands/introspect.ts

package/dist/core/index.d.mts

@@ -1,3 +1,3 @@
-import { At as BaseControllerOptions, Ft as AccessControl, It as AccessControlConfig, Kt as ResourceDefinition, Mt as QueryResolverConfig, Nt as BodySanitizer, Pt as BodySanitizerConfig, jt as QueryResolver, kt as BaseController, qt as defineResource } from "../interface-YrWsmKqE.mjs";
-import { C as MAX_REGEX_LENGTH, D as RESERVED_QUERY_PARAMS, E as MutationOperation, O as SYSTEM_FIELDS, S as MAX_FILTER_DEPTH, T as MUTATION_OPERATIONS, _ as DEFAULT_UPDATE_METHOD, a as getControllerScope, b as HookOperation, c as createCrudRouter, d as CrudOperation, f as DEFAULT_ID_FIELD, g as DEFAULT_TENANT_FIELD, h as DEFAULT_SORT, i as getControllerContext, l as createPermissionMiddleware, m as DEFAULT_MAX_LIMIT, n as createFastifyHandler, o as sendControllerResponse, p as DEFAULT_LIMIT, r as createRequestContext, s as defineResourceVariants, t as createCrudHandlers, u as CRUD_OPERATIONS, v as HOOK_OPERATIONS, w as MAX_SEARCH_LENGTH, x as HookPhase, y as HOOK_PHASES } from "../index-Cibkchnx.mjs";
+import { G as ResourceDefinition, K as defineResource, a as QueryResolverConfig, c as AccessControl, i as QueryResolver, l as AccessControlConfig, n as BaseController, o as BodySanitizer, r as BaseControllerOptions, s as BodySanitizerConfig } from "../index-Cl0uoKd5.mjs";
+import { C as MAX_REGEX_LENGTH, D as RESERVED_QUERY_PARAMS, E as MutationOperation, O as SYSTEM_FIELDS, S as MAX_FILTER_DEPTH, T as MUTATION_OPERATIONS, _ as DEFAULT_UPDATE_METHOD, a as getControllerScope, b as HookOperation, c as createCrudRouter, d as CrudOperation, f as DEFAULT_ID_FIELD, g as DEFAULT_TENANT_FIELD, h as DEFAULT_SORT, i as getControllerContext, l as createPermissionMiddleware, m as DEFAULT_MAX_LIMIT, n as createFastifyHandler, o as sendControllerResponse, p as DEFAULT_LIMIT, r as createRequestContext, s as defineResourceVariants, t as createCrudHandlers, u as CRUD_OPERATIONS, v as HOOK_OPERATIONS, w as MAX_SEARCH_LENGTH, x as HookPhase, y as HOOK_PHASES } from "../index-8qw4y6ff.mjs";
 export { AccessControl, AccessControlConfig, BaseController, BaseControllerOptions, BodySanitizer, BodySanitizerConfig, CRUD_OPERATIONS, CrudOperation, DEFAULT_ID_FIELD, DEFAULT_LIMIT, DEFAULT_MAX_LIMIT, DEFAULT_SORT, DEFAULT_TENANT_FIELD, DEFAULT_UPDATE_METHOD, HOOK_OPERATIONS, HOOK_PHASES, HookOperation, HookPhase, MAX_FILTER_DEPTH, MAX_REGEX_LENGTH, MAX_SEARCH_LENGTH, MUTATION_OPERATIONS, MutationOperation, QueryResolver, QueryResolverConfig, RESERVED_QUERY_PARAMS, ResourceDefinition, SYSTEM_FIELDS, createCrudHandlers, createCrudRouter, createFastifyHandler, createPermissionMiddleware, createRequestContext, defineResource, defineResourceVariants, getControllerContext, getControllerScope, sendControllerResponse };

package/dist/core/index.mjs

@@ -1,5 +1,4 @@
-import { a as DEFAULT_SORT, c as HOOK_OPERATIONS, d as MAX_REGEX_LENGTH, f as MAX_SEARCH_LENGTH, h as SYSTEM_FIELDS, i as DEFAULT_MAX_LIMIT, l as HOOK_PHASES, m as RESERVED_QUERY_PARAMS, n as DEFAULT_ID_FIELD, o as DEFAULT_TENANT_FIELD, p as MUTATION_OPERATIONS, r as DEFAULT_LIMIT, s as DEFAULT_UPDATE_METHOD, t as CRUD_OPERATIONS, u as MAX_FILTER_DEPTH } from "../constants-Cxde4rpC.mjs";
-import { i as AccessControl, n as QueryResolver, r as BodySanitizer, t as BaseController } from "../BaseController-Vu2yc56T.mjs";
-import { c as createCrudHandlers, d as getControllerContext, f as getControllerScope, l as createFastifyHandler, n as defineResource, o as createCrudRouter, p as sendControllerResponse, s as createPermissionMiddleware, t as ResourceDefinition, u as createRequestContext } from "../defineResource-C__jkwvs.mjs";
-import { t as defineResourceVariants } from "../core-DNncu0xF.mjs";
+import { a as DEFAULT_SORT, c as HOOK_OPERATIONS, d as MAX_REGEX_LENGTH, f as MAX_SEARCH_LENGTH, h as SYSTEM_FIELDS, i as DEFAULT_MAX_LIMIT, l as HOOK_PHASES, m as RESERVED_QUERY_PARAMS, n as DEFAULT_ID_FIELD, o as DEFAULT_TENANT_FIELD, p as MUTATION_OPERATIONS, r as DEFAULT_LIMIT, s as DEFAULT_UPDATE_METHOD, t as CRUD_OPERATIONS, u as MAX_FILTER_DEPTH } from "../constants-BhY1OHoH.mjs";
+import { i as AccessControl, n as QueryResolver, r as BodySanitizer, t as BaseController } from "../BaseController-CbKKIflT.mjs";
+import { c as createPermissionMiddleware, d as createRequestContext, f as getControllerContext, l as createCrudHandlers, m as sendControllerResponse, n as ResourceDefinition, p as getControllerScope, r as defineResource, s as createCrudRouter, t as defineResourceVariants, u as createFastifyHandler } from "../core-CcR01lup.mjs";
 export { AccessControl, BaseController, BodySanitizer, CRUD_OPERATIONS, DEFAULT_ID_FIELD, DEFAULT_LIMIT, DEFAULT_MAX_LIMIT, DEFAULT_SORT, DEFAULT_TENANT_FIELD, DEFAULT_UPDATE_METHOD, HOOK_OPERATIONS, HOOK_PHASES, MAX_FILTER_DEPTH, MAX_REGEX_LENGTH, MAX_SEARCH_LENGTH, MUTATION_OPERATIONS, QueryResolver, RESERVED_QUERY_PARAMS, ResourceDefinition, SYSTEM_FIELDS, createCrudHandlers, createCrudRouter, createFastifyHandler, createPermissionMiddleware, createRequestContext, defineResource, defineResourceVariants, getControllerContext, getControllerScope, sendControllerResponse };

package/dist/{defineResource-C__jkwvs.mjs → core-CcR01lup.mjs}

@@ -1,15 +1,15 @@
-import { s as DEFAULT_UPDATE_METHOD, t as CRUD_OPERATIONS } from "./constants-Cxde4rpC.mjs";
+import { s as DEFAULT_UPDATE_METHOD, t as CRUD_OPERATIONS } from "./constants-BhY1OHoH.mjs";
 import { _ as isElevated, n as PUBLIC_SCOPE, v as isMember } from "./types-AOD8fxIw.mjs";
-import { t as BaseController } from "./BaseController-Vu2yc56T.mjs";
-import { i as resolveEffectiveRoles, t as applyFieldReadPermissions } from "./fields-CU6FlaDV.mjs";
-import { t as getUserRoles } from "./types-ZUu_h0jp.mjs";
-import { r as ForbiddenError } from "./errors-CqWnSqM-.mjs";
-import { t as requestContext } from "./requestContext-DYtmNpm5.mjs";
-import { n as normalizePermissionResult, t as applyPermissionResult } from "./applyPermissionResult-bqGpo9ML.mjs";
-import { i as getDefaultCrudSchemas } from "./utils-B7FuRr9w.mjs";
+import { t as BaseController } from "./BaseController-CbKKIflT.mjs";
+import { i as resolveEffectiveRoles, t as applyFieldReadPermissions } from "./fields-bxkeltzz.mjs";
+import { t as getUserRoles } from "./types-DV9WDfeg.mjs";
+import { r as ForbiddenError } from "./errors-D5c-5BJL.mjs";
+import { t as requestContext } from "./requestContext-xHIKedG6.mjs";
+import { n as normalizePermissionResult, t as applyPermissionResult } from "./applyPermissionResult-QhV1Pa-g.mjs";
+import { i as getDefaultCrudSchemas } from "./utils-B2fNOD_i.mjs";
 import { n as convertRouteSchema, t as convertOpenApiSchemas } from "./schemaConverter-BxFDdtXu.mjs";
 import { t as hasEvents } from "./typeGuards-Cj5Rgvlg.mjs";
-import { r as getAvailablePresets, t as applyPresets } from "./presets-hM4WhNWY.mjs";
+import { r as getAvailablePresets, t as applyPresets } from "./presets-fLJVXdVn.mjs";
 //#region src/pipeline/pipe.ts
 /**
 * Compose pipeline steps into an ordered array.
@@ -708,7 +708,7 @@ function validateResourceConfig(config, options = {}) {
 		else if (!config.adapter.repository) errors.push({
 			field: "adapter.repository",
 			message: "Adapter must provide a repository",
-			suggestion: "Ensure your adapter returns a valid CrudRepository"
+			suggestion: "Ensure your adapter returns a valid StandardRepo (see @classytic/repo-core)"
 		});
 	} else if (!config.adapter && !config.routes?.length) warnings.push({
 		field: "config",
@@ -1287,7 +1287,7 @@ var ResourceDefinition = class {
 					fields: self.fields
 				});
 				if (self.actions && Object.keys(self.actions).length > 0) {
-					const { createActionRouter } = await import("./createActionRouter-DH1YFL9m.mjs").then((n) => n.n);
+					const { createActionRouter } = await import("./createActionRouter-Bp_5c_2b.mjs").then((n) => n.n);
 					createActionRouter(instance, normalizeActionsToRouterConfig(self.actions, self.actionPermissions, self.tag));
 				}
 				if (self.events && Object.keys(self.events).length > 0) typedInstance.log?.debug?.(`Resource '${self.name}' defined ${Object.keys(self.events).length} events`);
@@ -1376,4 +1376,36 @@ function normalizeActionsToRouterConfig(actions, globalAuth, tag) {
 	};
 }
 //#endregion
-export { validateResourceConfig as a, createCrudHandlers as c, getControllerContext as d, getControllerScope as f, formatValidationErrors as i, createFastifyHandler as l, pipe as m, defineResource as n, createCrudRouter as o, sendControllerResponse as p, assertValidConfig as r, createPermissionMiddleware as s, ResourceDefinition as t, createRequestContext as u };
+//#region src/core/defineResourceVariants.ts
+/**
+* Define multiple resources from a shared base config and per-variant overrides.
+*
+* Each variant is independently passed through `defineResource()` — the
+* returned `ResourceDefinition`s are real, fully-registered resources.
+* Register each one's plugin in your app:
+*
+* ```typescript
+* await app.register(articlePublic.toPlugin());
+* await app.register(articleAdmin.toPlugin());
+* ```
+*
+* @param base    Shared config — adapter, queryParser, schemaOptions, hooks, etc.
+*                Must NOT include `name` or `prefix` (those are per-variant).
+* @param variants  Map of variant key → override. Each variant must declare
+*                  its own `name` and `prefix`. Other fields override the base.
+* @returns A record where each key from `variants` maps to a real
+*          `ResourceDefinition` ready for `.toPlugin()` registration.
+*/
+function defineResourceVariants(base, variants) {
+	const out = {};
+	for (const key of Object.keys(variants)) {
+		const override = variants[key];
+		out[key] = defineResource({
+			...base,
+			...override
+		});
+	}
+	return out;
+}
+//#endregion
+export { formatValidationErrors as a, createPermissionMiddleware as c, createRequestContext as d, getControllerContext as f, pipe as h, assertValidConfig as i, createCrudHandlers as l, sendControllerResponse as m, ResourceDefinition as n, validateResourceConfig as o, getControllerScope as p, defineResource as r, createCrudRouter as s, defineResourceVariants as t, createFastifyHandler as u };

package/dist/{createActionRouter-DH1YFL9m.mjs → createActionRouter-Bp_5c_2b.mjs}

@@ -1,5 +1,5 @@
 import { t as __exportAll } from "./chunk-BpYLSNr0.mjs";
-import { n as normalizePermissionResult, t as applyPermissionResult } from "./applyPermissionResult-bqGpo9ML.mjs";
+import { n as normalizePermissionResult, t as applyPermissionResult } from "./applyPermissionResult-QhV1Pa-g.mjs";
 import { a as toJsonSchema } from "./schemaConverter-BxFDdtXu.mjs";
 //#region src/core/createActionRouter.ts
 var createActionRouter_exports = /* @__PURE__ */ __exportAll({

package/dist/{createApp-CBJUJKGP.mjs → createApp-BuvPma24.mjs}

@@ -207,7 +207,7 @@ async function registerArcCore(fastify, config, trackPlugin) {
 	await fastify.register(arcCorePlugin, { emitEvents: config.arcPlugins?.emitEvents !== false });
 	trackPlugin("arc-core");
 	if (config.arcPlugins?.events !== false) {
-		const { default: eventPlugin } = await import("./eventPlugin-Dl7MoVWH.mjs").then((n) => n.n);
+		const { default: eventPlugin } = await import("./eventPlugin-DCUjuiQT.mjs").then((n) => n.n);
 		const eventOpts = typeof config.arcPlugins?.events === "object" ? config.arcPlugins.events : {};
 		await fastify.register(eventPlugin, {
 			...eventOpts,
@@ -243,15 +243,15 @@ async function registerArcPlugins(fastify, config, trackPlugin, modules) {
 		trackPlugin("arc-graceful-shutdown");
 	}
 	if (config.arcPlugins?.caching) {
-		const { default: cachingPlugin } = await import("./caching-CjybdRwx.mjs").then((n) => n.r);
+		const { default: cachingPlugin } = await import("./caching-CBpK_SCM.mjs").then((n) => n.r);
 		const opts = config.arcPlugins.caching === true ? {} : config.arcPlugins.caching;
 		await fastify.register(cachingPlugin, opts);
 		trackPlugin("arc-caching", opts);
 	}
 	if (config.arcPlugins?.queryCache) {
-		const { queryCachePlugin } = await import("./queryCachePlugin-DbUVroUG.mjs").then((n) => n.n);
+		const { queryCachePlugin } = await import("./queryCachePlugin-DQCEfJis.mjs").then((n) => n.n);
 		const opts = config.arcPlugins.queryCache === true ? {} : config.arcPlugins.queryCache;
-		const store = config.stores?.queryCache ?? new (await (import("./memory-BFAYkf8H.mjs").then((n) => n.n))).MemoryCacheStore();
+		const store = config.stores?.queryCache ?? new (await (import("./memory-B5Amv9A1.mjs").then((n) => n.n))).MemoryCacheStore();
 		await fastify.register(queryCachePlugin, {
 			store,
 			...opts
@@ -260,19 +260,19 @@ async function registerArcPlugins(fastify, config, trackPlugin, modules) {
 	}
 	if (config.arcPlugins?.sse) if (config.arcPlugins?.events === false) fastify.log.warn("SSE plugin requires events plugin (arcPlugins.events). SSE disabled.");
 	else {
-		const { default: ssePlugin } = await import("./sse-CJpt7LGI.mjs").then((n) => n.r);
+		const { default: ssePlugin } = await import("./sse-yBCgOLGu.mjs").then((n) => n.r);
 		const opts = config.arcPlugins.sse === true ? {} : config.arcPlugins.sse;
 		await fastify.register(ssePlugin, opts);
 		trackPlugin("arc-sse", opts);
 	}
 	if (config.arcPlugins?.metrics) {
-		const { default: metricsPlugin } = await import("./metrics-TuOmguhi.mjs").then((n) => n.r);
+		const { default: metricsPlugin } = await import("./metrics-DuhiSEZI.mjs").then((n) => n.r);
 		const opts = config.arcPlugins.metrics === true ? {} : config.arcPlugins.metrics;
 		await fastify.register(metricsPlugin, opts);
 		trackPlugin("arc-metrics", opts);
 	}
 	if (config.arcPlugins?.versioning) {
-		const { default: versioningPlugin } = await import("./versioning-Cm8qoFDg.mjs").then((n) => n.r);
+		const { default: versioningPlugin } = await import("./versioning-C2U_bLY0.mjs").then((n) => n.r);
 		await fastify.register(versioningPlugin, config.arcPlugins.versioning);
 		trackPlugin("arc-versioning", config.arcPlugins.versioning);
 	}
@@ -340,7 +340,7 @@ async function registerAuth(fastify, config, trackPlugin) {
 */
 async function registerElevation(fastify, config, trackPlugin) {
 	if (!config.elevation) return;
-	const { elevationPlugin } = await import("./elevation-DxQ6ACbt.mjs").then((n) => n.r);
+	const { elevationPlugin } = await import("./elevation-C7hgL_aI.mjs").then((n) => n.r);
 	await fastify.register(elevationPlugin, config.elevation);
 	trackPlugin("arc-elevation", config.elevation);
 	fastify.log.debug("Elevation plugin enabled");
@@ -350,7 +350,7 @@ async function registerElevation(fastify, config, trackPlugin) {
 */
 async function registerErrorHandler(fastify, config, trackPlugin) {
 	if (config.errorHandler === false) return;
-	const { errorHandlerPlugin } = await import("./errorHandler-CZDW4EXS.mjs").then((n) => n.r);
+	const { errorHandlerPlugin } = await import("./errorHandler-Bb49BvPD.mjs").then((n) => n.r);
 	const errorOpts = typeof config.errorHandler === "object" ? config.errorHandler : { includeStack: config.preset !== "production" };
 	await fastify.register(errorHandlerPlugin, errorOpts);
 	trackPlugin("arc-error-handler", errorOpts);
@@ -417,7 +417,7 @@ async function registerResources(fastify, config) {
 		fastify.log.debug(`${config.bootstrap.length} bootstrap function(s) executed`);
 	}
 	if (!config.resources?.length && config.resourceDir) {
-		const { loadResources } = await import("./loadResources-Bksk8ydA.mjs").then((n) => n.n);
+		const { loadResources } = await import("./loadResources-BAzJItAJ.mjs").then((n) => n.n);
 		const { resolve } = await import("node:path");
 		const dir = resolve(config.resourceDir);
 		config = {
@@ -643,14 +643,14 @@ function validateDistributedRuntime(options) {
 	if (!events || MEMORY_STORE_NAMES.has(events.name)) missing.push("events transport");
 	if (options.arcPlugins?.caching) {
 		const cache = options.stores?.cache;
-		if (!cache || MEMORY_STORE_NAMES.has(cache.name)) missing.push("cache store");
+		if (!cache || cache.name !== void 0 && MEMORY_STORE_NAMES.has(cache.name)) missing.push("cache store");
 	}
 	const idempotency = options.stores?.idempotency;
 	if (idempotency && MEMORY_STORE_NAMES.has(idempotency.name)) missing.push("idempotency store (memory-backed in distributed mode)");
 	else if (!idempotency) deferredWarnings.push("runtime: 'distributed' — no idempotency store configured. Write-path deduplication will be instance-local. If resources use the idempotency plugin, provide stores.idempotency with a Redis/MongoDB store.");
 	if (options.arcPlugins?.queryCache) {
 		const qc = options.stores?.queryCache;
-		if (!qc || MEMORY_STORE_NAMES.has(qc.name)) missing.push("queryCache store");
+		if (!qc || qc.name !== void 0 && MEMORY_STORE_NAMES.has(qc.name)) missing.push("queryCache store");
 	}
 	if (missing.length > 0) throw new Error(`[Arc] runtime: 'distributed' requires Redis/durable adapters.\nMissing: ${missing.join(", ")}.\nProvide Redis-backed stores or use runtime: 'memory' for development.`);
 	return deferredWarnings;
@@ -676,7 +676,7 @@ function validateDistributedRuntime(options) {
 */
 async function createApp(options) {
 	if (options.debug !== void 0 && options.debug !== false) {
-		const { configureArcLogger } = await import("./logger-CDjpjySd.mjs").then((n) => n.r);
+		const { configureArcLogger } = await import("./logger-DLg8-Ueg.mjs").then((n) => n.r);
 		configureArcLogger({ debug: options.debug });
 	}
 	validateAuthOptions(options);
@@ -730,7 +730,7 @@ async function createApp(options) {
 	await registerErrorHandler(fastify, config, trackPlugin);
 	await registerResources(fastify, config);
 	if (config.replyHelpers) {
-		const { replyHelpersPlugin } = await import("./replyHelpers-BLojtuvR.mjs").then((n) => n.n);
+		const { replyHelpersPlugin } = await import("./replyHelpers-CXtJDAZ0.mjs").then((n) => n.n);
 		await fastify.register(replyHelpersPlugin);
 	}
 	if (config.serializeBigInt) fastify.addHook("preSerialization", async (_request, _reply, payload) => {

package/dist/docs/index.d.mts

@@ -1,5 +1,5 @@
-import { rt as RegistryEntry } from "../interface-YrWsmKqE.mjs";
-import { t as ExternalOpenApiPaths } from "../externalPaths-Bapitwvd.mjs";
+import { x as RegistryEntry } from "../index-Cl0uoKd5.mjs";
+import { t as ExternalOpenApiPaths } from "../externalPaths-BQ8QijNH.mjs";
 import { FastifyPluginAsync } from "fastify";
 
 //#region src/docs/openapi.d.ts

package/dist/docs/index.mjs

@@ -1,5 +1,5 @@
-import { t as getUserRoles } from "../types-ZUu_h0jp.mjs";
-import { n as openApiPlugin, r as openapi_default, t as buildOpenApiSpec } from "../openapi-CXuTG1M9.mjs";
+import { t as getUserRoles } from "../types-DV9WDfeg.mjs";
+import { n as openApiPlugin, r as openapi_default, t as buildOpenApiSpec } from "../openapi-B5F8AddX.mjs";
 import fp from "fastify-plugin";
 //#region src/docs/scalar.ts
 const scalarPlugin = async (fastify, opts = {}) => {

package/dist/{elevation-DxQ6ACbt.mjs → elevation-C7hgL_aI.mjs}

@@ -1,6 +1,6 @@
 import { t as __exportAll } from "./chunk-BpYLSNr0.mjs";
-import { t as getUserRoles } from "./types-ZUu_h0jp.mjs";
-import { t as arcLog } from "./logger-CDjpjySd.mjs";
+import { t as getUserRoles } from "./types-DV9WDfeg.mjs";
+import { t as arcLog } from "./logger-DLg8-Ueg.mjs";
 import fp from "fastify-plugin";
 //#region src/scope/elevation.ts
 var elevation_exports = /* @__PURE__ */ __exportAll({

package/dist/{errorHandler-CZDW4EXS.mjs → errorHandler-Bb49BvPD.mjs}

@@ -1,5 +1,5 @@
 import { t as __exportAll } from "./chunk-BpYLSNr0.mjs";
-import { p as isArcError } from "./errors-CqWnSqM-.mjs";
+import { p as isArcError } from "./errors-D5c-5BJL.mjs";
 import fp from "fastify-plugin";
 //#region src/plugins/errorHandler.ts
 var errorHandler_exports = /* @__PURE__ */ __exportAll({

package/dist/{errorHandler-DixGcttC.d.mts → errorHandler-DRQ3EqfL.d.mts}

@@ -1,4 +1,4 @@
-import { n as DomainEvent } from "./EventTransport-CqZ8FyM_.mjs";
+import { n as DomainEvent } from "./EventTransport-CUw5NNWe.mjs";
 import { FastifyInstance, FastifyPluginAsync, FastifyRequest } from "fastify";
 
 //#region src/plugins/caching.d.ts