@classytic/arc 2.11.2 → 2.11.4

package/dist/redis-stream-xTGxB2bm.d.mts

@@ -0,0 +1,232 @@
+import { i as EventLogger, n as DomainEvent, o as EventTransport, r as EventHandler } from "./EventTransport-CYNUXdCJ.mjs";
+
+//#region src/events/transports/redis-stream.d.ts
+interface RedisStreamLike {
+  xadd(key: string, id: string, ...fieldValues: string[]): Promise<string | null>;
+  xreadgroup(command: "GROUP", group: string, consumer: string, ...args: (string | number)[]): Promise<Array<[string, Array<[string, string[]]>]> | null>;
+  xack(key: string, group: string, ...ids: string[]): Promise<number>;
+  xgroup(command: string, key: string, group: string, ...args: string[]): Promise<unknown>;
+  xpending(key: string, group: string, ...args: (string | number)[]): Promise<Array<[string, string, number, number]>>;
+  xclaim(key: string, group: string, consumer: string, minIdleTime: number, ...ids: string[]): Promise<Array<[string, string[]]>>;
+  xlen(key: string): Promise<number>;
+  /**
+   * Read a range of entries by id. When present, the DLQ writer uses this
+   * to fetch the original message payload so dead-lettered events are
+   * **fully replayable** (a re-publish of `envelope.event` is sufficient).
+   *
+   * Optional to preserve back-compat with custom Redis wrappers that
+   * satisfied the pre-2.11.3 shape. When missing, the DLQ envelope still
+   * carries the **error reason + attempt accounting** (operator-grade
+   * triage info survives), but `envelope.event.payload` is `null` and
+   * `envelope.event.type` is `<unknown>` — replay is NOT possible without
+   * upgrading the client. A one-shot warning fires per process so this
+   * isn't silent.
+   */
+  xrange?(key: string, start: string, end: string): Promise<Array<[string, string[]]>>;
+  /** Graceful close — flushes queued commands then closes. ioredis-style. */
+  quit(): Promise<unknown>;
+  /**
+   * Force-disconnect — closes the socket immediately, abandoning any
+   * pending command (including a live `XREADGROUP BLOCK`). Optional because
+   * non-ioredis clients may not expose a force path; `close()` falls back
+   * to `quit()` when this is missing, accepting a longer shutdown wait.
+   */
+  disconnect?(): void;
+}
+interface RedisStreamTransportOptions {
+  /**
+   * Redis stream key name.
+   * @default 'arc:events'
+   */
+  stream?: string;
+  /**
+   * Consumer group name. Each group receives every event independently.
+   * Multiple instances of the same service should share a group name.
+   * @default 'default'
+   */
+  group?: string;
+  /**
+   * Consumer name within the group. Must be unique per instance.
+   * @default 'consumer-<random>'
+   */
+  consumer?: string;
+  /**
+   * Block time in ms when waiting for new events.
+   * @default 5000
+   */
+  blockTimeMs?: number;
+  /**
+   * Max events to read per batch.
+   * @default 10
+   */
+  batchSize?: number;
+  /**
+   * Max delivery attempts before moving to dead letter stream.
+   * @default 5
+   */
+  maxRetries?: number;
+  /**
+   * Idle time in ms before pending entries are claimed by this consumer.
+   * Handles crash recovery — if a consumer dies mid-processing, another
+   * consumer will claim its pending entries after this timeout.
+   * @default 30000
+   */
+  claimTimeoutMs?: number;
+  /**
+   * Dead letter stream name. Failed events are moved here after maxRetries.
+   * Set to `false` to disable DLQ (failed events are acked and dropped).
+   * @default 'arc:events:dlq'
+   */
+  deadLetterStream?: string | false;
+  /**
+   * Max stream length (approximate). Uses XADD MAXLEN ~ to trim old entries.
+   * Set to 0 to disable trimming.
+   * @default 10000
+   */
+  maxLen?: number;
+  /**
+   * Max event payload size in bytes. Publish rejects events exceeding this limit
+   * to prevent Redis memory exhaustion from oversized payloads.
+   * @default 1_000_000 (1 MB)
+   */
+  maxPayloadBytes?: number;
+  /**
+   * If `true`, `close()` does NOT call `redis.quit()` — useful when the host
+   * manages the Redis connection lifecycle externally (shared client across
+   * multiple transports / cache stores). Without this, every transport
+   * `close()` would tear down a shared client and break siblings.
+   *
+   * Mirror of `RedisEventTransportOptions.externalLifecycle`.
+   * @default false
+   */
+  externalLifecycle?: boolean;
+  /**
+   * Hard cap on how long `close()` waits for the in-flight `XREADGROUP BLOCK`
+   * iteration to drain. Tests and serverless shutdowns would otherwise hang
+   * up to `blockTimeMs` (default 5s) per close.
+   *
+   * Behaviour after timeout:
+   *   - `externalLifecycle: false` (default) — `redis.disconnect()` (or
+   *     `quit()` if the client lacks `disconnect`) breaks the BLOCK
+   *     immediately. Strict bounded close.
+   *   - `externalLifecycle: true` — arc CANNOT touch the host's connection,
+   *     so the poll loop is left to drain in the background when its
+   *     XREADGROUP returns. `close()` returns within `closeTimeoutMs` but
+   *     the loop's eventual completion is silently absorbed (no log spam,
+   *     no unhandled rejection). The contract here is "bounded return,
+   *     background drain" — set `blockTimeMs` low (e.g. 500ms) under
+   *     externalLifecycle to keep the drain window short.
+   *
+   * @default 1000
+   */
+  closeTimeoutMs?: number;
+  /**
+   * Logger for error messages (default: console).
+   * Pass `fastify.log` to integrate with your application logger.
+   */
+  logger?: EventLogger;
+}
+declare class RedisStreamTransport implements EventTransport {
+  readonly name = "redis-stream";
+  private redis;
+  private stream;
+  private group;
+  private consumer;
+  private blockTimeMs;
+  private batchSize;
+  private maxRetries;
+  private claimTimeoutMs;
+  private deadLetterStream;
+  private maxLen;
+  private maxPayloadBytes;
+  private logger;
+  /** Tracks the lifecycle policy — set in constructor, read in close(). */
+  private externalLifecycle;
+  private closeTimeoutMs;
+  private handlers;
+  private running;
+  private pollPromise;
+  /**
+   * Monotonic counter bumped every time the poll loop should stop —
+   * `unsubscribe` (last handler removed) and `close()` increment it. Each
+   * `pollLoop` instance captures its generation at start and exits when
+   * `this.generation` no longer matches. Prevents the
+   * subscribe → unsubscribe → fast-resubscribe race where the old loop
+   * would still be in `XREADGROUP BLOCK` while a new loop started, leading
+   * to two concurrent poll loops on the same consumer name.
+   */
+  private generation;
+  private groupCreated;
+  /**
+   * Last-seen failure context per message id, populated when an in-process
+   * handler throws in {@link processEntry}. Consumed (and cleared) by
+   * {@link moveToDlq} so the dead-letter envelope carries the actual error
+   * message instead of opaque "reclaimed without context". Bounded by
+   * `maxRetries × consumer-throughput` — entries are deleted on ack and
+   * on DLQ write, so the map naturally drains.
+   */
+  private failureContext;
+  /** One-shot guard so the "client lacks xrange" warning fires once per process. */
+  private xrangeWarningEmitted;
+  constructor(redis: RedisStreamLike, options?: RedisStreamTransportOptions);
+  publish(event: DomainEvent): Promise<void>;
+  subscribe(pattern: string, handler: EventHandler): Promise<() => void>;
+  /**
+   * Stop polling and release transport state.
+   *
+   * **Two close contracts** — pick the one that matches your deployment:
+   *
+   * 1. **Default (`externalLifecycle: false`) — strict bounded close.**
+   *    `close()` waits up to `closeTimeoutMs` for the in-flight
+   *    `XREADGROUP BLOCK` to drain. On timeout it calls `redis.disconnect()`
+   *    (or `quit()` if the client lacks `disconnect`) to break the BLOCK
+   *    immediately, then awaits the loop's exit. After `close()` returns
+   *    the transport is fully closed and the connection is released.
+   *
+   * 2. **`externalLifecycle: true` — bounded RETURN, background drain.**
+   *    Arc must NOT touch a connection it doesn't own. `close()` returns
+   *    within `closeTimeoutMs`, but the poll loop is left to drain on its
+   *    own when its outstanding `XREADGROUP BLOCK` returns (up to
+   *    `blockTimeMs`). Arc silently absorbs the loop's eventual completion
+   *    so the host doesn't see unhandled rejections / log spam against a
+   *    transport it considers closed. The host's own `redis.quit()` /
+   *    process exit is what ultimately tears the connection down.
+   *
+   *    Practical implication: under `externalLifecycle: true`, set
+   *    `blockTimeMs` low (e.g. 500ms) so the background drain window is
+   *    short. The transport is "closed enough" to stop dispatching to
+   *    handlers (handlers map is cleared and generation is bumped) but is
+   *    not "fully closed" in the connection-lifecycle sense until the host
+   *    closes the underlying client.
+   *
+   * In both modes the generation counter is bumped, so a follow-up
+   * `subscribe()` spawns a fresh poll loop with a new generation — the
+   * stale loop exits on its next iteration and never overlaps the new one.
+   */
+  close(): Promise<void>;
+  private ensureGroup;
+  private pollLoop;
+  private readNewMessages;
+  private claimPending;
+  private processEntry;
+  private getMatchingHandlers;
+  private matchesPattern;
+  private moveToDlq;
+  /**
+   * Reconstruct a `DeadLetteredEvent` for a message id. Reads the original
+   * entry via `xrange` (when the client supports it) and merges in any
+   * in-process failure context. Returns `null` only when BOTH sources are
+   * missing — callers ack-and-drop rather than re-queuing a ghost.
+   *
+   * Graceful degradation paths:
+   *   - Client lacks `xrange` (older custom wrappers) → log once, build the
+   *     envelope from `failureContext` alone. Payload is absent but the
+   *     error reason + attempt accounting still survive.
+   *   - `xrange` throws (network blip, ACL) → same fallback.
+   *   - Source entry trimmed before DLQ write → same fallback.
+   */
+  private buildDlqEnvelope;
+  private sleep;
+}
+//#endregion
+export { RedisStreamTransport as n, RedisStreamTransportOptions as r, RedisStreamLike as t };

package/dist/registry/index.d.mts

@@ -1,4 +1,4 @@
-import { R as RegisterOptions, k as IntrospectionPluginOptions, z as ResourceRegistry } from "../index-6u4_Gg6G.mjs";
+import { R as RegisterOptions, k as IntrospectionPluginOptions, z as ResourceRegistry } from "../index-CXXRbnf8.mjs";
 import { FastifyPluginAsync } from "fastify";
 
 //#region src/registry/introspectionPlugin.d.ts

package/dist/{requestContext-CfRkaxwf.mjs → requestContext-C5XeK3VA.mjs}

@@ -38,15 +38,30 @@ const storage = new AsyncLocalStorage();
 * - `getStore()` — alias for get() (matches Node.js API naming)
 */
 const requestContext = {
+	/**
+	* Get the current request context.
+	* Returns undefined if called outside a request lifecycle.
+	*/
 	get() {
 		return storage.getStore();
 	},
+	/**
+	* Alias for get() — matches Node.js AsyncLocalStorage API naming.
+	*/
 	getStore() {
 		return storage.getStore();
 	},
+	/**
+	* Run a function within a specific request context.
+	* Used internally by Arc's onRequest hook.
+	*/
 	run(store, fn) {
 		return storage.run(store, fn);
 	},
+	/**
+	* The underlying AsyncLocalStorage instance.
+	* Exposed for advanced use cases (testing, custom integrations).
+	*/
 	storage
 };
 //#endregion

package/dist/{resourceToTools--okX6QBr.mjs → resourceToTools-CxNmI6xF.mjs}

@@ -1,10 +1,10 @@
-import { t as BaseController } from "./BaseController-JNV08qOT.mjs";
-import { A as normalizePermissionResult } from "./permissions-B4vU9L0Q.mjs";
-import { u as resolvePipelineSteps } from "./routerShared-DeESFp4a.mjs";
+import { t as BaseController } from "./BaseController-swXruJ2_.mjs";
+import { A as normalizePermissionResult } from "./permissions-gd_aUWrR.mjs";
+import { u as resolvePipelineSteps } from "./routerShared-BqLRb5l7.mjs";
 import { t as executePipeline } from "./pipe-DVoIheVC.mjs";
-import { t as resolveActionPermission } from "./actionPermissions-C8YYU92K.mjs";
-import { i as shouldRejectAdditionalProperties, r as schemaIRToZodShape, t as normalizeSchemaIR } from "./schemaIR-BlG9bY7v.mjs";
-import { t as pluralize } from "./pluralize-BneOJkpi.mjs";
+import { t as resolveActionPermission } from "./actionPermissions-sUUKDhtP.mjs";
+import { i as shouldRejectAdditionalProperties, r as schemaIRToZodShape, t as normalizeSchemaIR } from "./schemaIR-Dy2p4MxS.mjs";
+import { t as pluralize } from "./pluralize-CWP6MB39.mjs";
 import { z } from "zod";
 //#region src/integrations/mcp/createMcpServer.ts
 /**
@@ -1145,6 +1145,7 @@ function resourceToTools(resource, config = {}) {
 			resourcePermissions: resource.permissions,
 			resourceActionPermissions: resource.actionPermissions
 		});
+		if (!actionPerms) throw new Error(`[Arc/MCP] Resource '${resource.name}': action '${actionName}' has no permission gate and the resource defines no \`permissions.update\` fallback. Declare one of:\n  - \`actions.${actionName}.permissions: <PermissionCheck>\` (per-action)\n  - \`actionPermissions: <PermissionCheck>\` (resource-wide)\n  - \`permissions.update: <PermissionCheck>\` (inherited by actions)\nUse \`allowPublic()\` if you genuinely want the action unauthenticated.`);
 		tools.push({
 			name: toolName,
 			description: String(description),

package/dist/{routerShared-DeESFp4a.mjs → routerShared-BqLRb5l7.mjs}

@@ -1,7 +1,7 @@
 import { _ as isElevated, n as PUBLIC_SCOPE, o as getOrgId, p as getUserId, v as isMember } from "./types-AOD8fxIw.mjs";
-import { P as resolveEffectiveRoles, j as applyFieldReadPermissions, k as evaluateAndApplyPermission } from "./permissions-B4vU9L0Q.mjs";
+import { P as resolveEffectiveRoles, j as applyFieldReadPermissions, k as evaluateAndApplyPermission } from "./permissions-gd_aUWrR.mjs";
 import { t as getUserRoles } from "./types-DV9WDfeg.mjs";
-import { t as requestContext } from "./requestContext-CfRkaxwf.mjs";
+import { t as requestContext } from "./requestContext-C5XeK3VA.mjs";
 import { t as executePipeline } from "./pipe-DVoIheVC.mjs";
 //#region src/scope/projection.ts
 /**
@@ -511,5 +511,62 @@ function buildPreHandlerChain(parts) {
 		...parts.customMws ?? []
 	].filter(Boolean);
 }
+/**
+* `RouteDefinition.preHandler` accepts two shapes:
+*
+*   1. **Array form** — `RouteHandlerMethod[]`. Used directly.
+*   2. **Factory form** — `(fastify) => RouteHandlerMethod[]`. Called once at
+*      route-registration time with the Fastify instance, so handlers can
+*      capture decorators (`fastify.authenticate`, `fastify.events`, etc.)
+*      that aren't on the request.
+*
+* The two forms are equally idiomatic, but the discrimination is by
+* `typeof preHandler === "function"`. Single-function shapes such as
+* `multipartBody({...})` (a `RouteHandlerMethod`) **structurally satisfy
+* the factory branch** at the call site, then fail with a cryptic
+* `Cannot read properties of undefined (reading 'content-type')` once the
+* handler runs with `fastify` in the request slot.
+*
+* This resolver:
+*   1. Distinguishes the two valid shapes.
+*   2. Validates the factory's RETURN — must be an array of functions.
+*   3. Throws an actionable error pointing at the route + the fix when
+*      a single `RouteHandlerMethod` was passed instead of an array, OR
+*      when a factory returned the wrong shape.
+*
+* The error message names the route (`{method} {path}`) and the
+* canonical fix (`preHandler: [yourHandler]`) so the failure mode is
+* obvious instead of debug-archaeology.
+*
+* @param preHandler  The `route.preHandler` value (any of the valid shapes
+*                    plus the common bare-handler mistake).
+* @param fastify     Passed to factory-form preHandlers.
+* @param routeId     `"GET /todos/:id/attach"` (or similar) — used in the
+*                    error message so a multi-route file points at the
+*                    actual offender.
+*/
+function resolveRoutePreHandlers(preHandler, fastify, routeId) {
+	if (preHandler === void 0 || preHandler === null) return [];
+	if (Array.isArray(preHandler)) return preHandler.filter((h) => typeof h === "function");
+	if (typeof preHandler === "function") {
+		let result;
+		try {
+			result = preHandler(fastify);
+		} catch (err) {
+			const msg = err instanceof Error ? err.message : String(err);
+			throw new TypeError(`Route ${routeId}: preHandler factory threw during route registration: ${msg}.\nIf you intended to pass a single handler (e.g. \`multipartBody({...})\`), wrap it in an array: \`preHandler: [yourHandler]\`. The factory form is \`(fastify) => RouteHandlerMethod[]\` — it must return an array.`, { cause: err instanceof Error ? err : void 0 });
+		}
+		if (!Array.isArray(result)) throw new TypeError(`Route ${routeId}: preHandler factory must return an array of handlers, got ${describeValue(result)}.\nCommon cause: passing a single \`RouteHandlerMethod\` (e.g. \`multipartBody({...})\`) where an array was expected. Wrap it: \`preHandler: [yourHandler]\`. The factory form \`(fastify) => RouteHandlerMethod[]\` is for cases that need the Fastify instance — e.g. \`(fastify) => [fastify.authenticate, myHandler]\`.`);
+		return result.filter((h) => typeof h === "function");
+	}
+	throw new TypeError(`Route ${routeId}: preHandler must be an array of handlers OR a factory \`(fastify) => RouteHandlerMethod[]\`. Got ${describeValue(preHandler)}.`);
+}
+function describeValue(v) {
+	if (v === null) return "null";
+	if (v === void 0) return "undefined";
+	if (typeof v === "function") return "a function (single handler — wrap in array)";
+	if (Array.isArray(v)) return `an array of length ${v.length}`;
+	return `${typeof v} (${JSON.stringify(v).slice(0, 80)})`;
+}
 //#endregion
-export { getControllerScope as _, buildAuthMiddlewareForPermissions as a, buildPreHandlerChain as c, resolveRouterPluginMw as d, selectPluginMw as f, getControllerContext as g, createRequestContext as h, buildAuthMiddleware as i, buildRateLimitConfig as l, createFastifyHandler as m, buildActionPipelineHandler as n, buildCrudPermissionMw as o, createCrudHandlers as p, buildArcDecorator as r, buildPipelineHandler as s, buildActionPermissionMw as t, resolvePipelineSteps as u, sendControllerResponse as v, buildRequestScopeProjection as y };
+export { getControllerContext as _, buildAuthMiddlewareForPermissions as a, buildRequestScopeProjection as b, buildPreHandlerChain as c, resolveRoutePreHandlers as d, resolveRouterPluginMw as f, createRequestContext as g, createFastifyHandler as h, buildAuthMiddleware as i, buildRateLimitConfig as l, createCrudHandlers as m, buildActionPipelineHandler as n, buildCrudPermissionMw as o, selectPluginMw as p, buildArcDecorator as r, buildPipelineHandler as s, buildActionPermissionMw as t, resolvePipelineSteps as u, getControllerScope as v, sendControllerResponse as y };

package/dist/scope/index.d.mts

@@ -1,5 +1,5 @@
-import { _ as isAuthenticated, a as getClientId, b as isOrgInScope, c as getOrgRoles, d as getScopeContextMap, f as getServiceScopes, g as hasOrgAccess, h as getUserRoles, i as getAncestorOrgIds, l as getRequestScope, m as getUserId, n as PUBLIC_SCOPE, o as getOrgContext, p as getTeamId, r as RequestScope, s as getOrgId, t as AUTHENTICATED_SCOPE, u as getScopeContext, v as isElevated, x as isService, y as isMember } from "../types-tgR4Pt8F.mjs";
-import { i as elevationPlugin, n as ElevationOptions, r as _default, t as ElevationEvent } from "../elevation-s5ykdNHr.mjs";
+import { _ as isAuthenticated, a as getClientId, b as isOrgInScope, c as getOrgRoles, d as getScopeContextMap, f as getServiceScopes, g as hasOrgAccess, h as getUserRoles, i as getAncestorOrgIds, l as getRequestScope, m as getUserId, n as PUBLIC_SCOPE, o as getOrgContext, p as getTeamId, r as RequestScope, s as getOrgId, t as AUTHENTICATED_SCOPE, u as getScopeContext, v as isElevated, x as isService, y as isMember } from "../types-DDyTPc6y.mjs";
+import { i as elevationPlugin, n as ElevationOptions, r as _default, t as ElevationEvent } from "../elevation-BQQXZ_VR.mjs";
 import { FastifyReply, FastifyRequest } from "fastify";
 
 //#region src/scope/rateLimitKey.d.ts

package/dist/testing/index.d.mts

@@ -1,5 +1,5 @@
-import { B as ResourceDefinition, Pt as AnyRecord } from "../index-6u4_Gg6G.mjs";
-import { d as ResourceLike, r as CreateAppOptions } from "../types-BH7dEGvU.mjs";
+import { B as ResourceDefinition, Pt as AnyRecord } from "../index-CXXRbnf8.mjs";
+import { d as ResourceLike, r as CreateAppOptions } from "../types-D7KpfiL1.mjs";
 import { StorageContractSetup, StorageContractSetupResult, runStorageContract } from "./storageContract.mjs";
 import { FastifyInstance, FastifyServerOptions } from "fastify";
 import { Mock } from "vitest";

package/dist/testing/index.mjs

@@ -1081,7 +1081,7 @@ function pickDefaultAuth(authMode, callerAuth) {
 	};
 }
 async function createTestApp(options = {}) {
-	const { createApp } = await import("../createApp-P1d6rjPy.mjs").then((n) => n.r);
+	const { createApp } = await import("../createApp-C9bRrqlX.mjs").then((n) => n.r);
 	const { resources = [], db = "in-memory", connectMongoose = false, authMode = "jwt", defaultOrgId, plugins, auth: callerAuth, ...appOptions } = options;
 	let dbHandle;
 	let dbUri;

package/dist/testing/storageContract.d.mts

@@ -1,4 +1,4 @@
-import { t as Storage } from "../storage-BwGQXUpd.mjs";
+import { t as Storage } from "../storage-Dfzt4VTl.mjs";
 
 //#region src/testing/storageContract.d.ts
 interface StorageContractSetupResult {

package/dist/types/index.d.mts

@@ -1,5 +1,5 @@
-import { $ as OpenApiSchemas, A as RequestIdOptions, At as Authenticator, Bt as UserOrganization, C as RequestContext, D as HealthCheck, E as GracefulShutdownOptions, F as FastifyWithDecorators, Ft as ApiResponse, G as ActionsMap, H as ActionDefinition, I as MiddlewareHandler, It as ArcRequest, J as CrudRouteKey, K as ArcFieldRule, L as RequestWithExtras, Lt as JWTPayload, M as EventsDecorator, Mt as JwtContext, N as FastifyRequestExtras, Nt as TokenPair, O as HealthOptions, Ot as AuthHelpers, P as FastifyWithAuth, Pt as AnyRecord, Q as MiddlewareConfig, Rt as ObjectId, S as QueryParserInterface, T as CrudRouterOptions, U as ActionEntry, W as ActionHandlerFn, X as EventDefinition, Y as CrudSchemas, Z as FieldRule, _ as ControllerQueryOptions, _t as IControllerResponse, a as InferAdapterDoc, at as ResourceConfig, b as ParsedQuery, c as TypedController, ct as ResourcePermissions, d as PaginationResult, dt as RouteMethod, et as PresetFunction, f as IntrospectionData, ft as RouteSchemaOptions, g as ArcInternalMetadata, gt as IController, h as ResourceMetadata, ht as FastifyHandler, i as ValidationResult, it as ResourceCacheConfig, j as ArcDecorator, jt as AuthenticatorContext, k as IntrospectionPluginOptions, kt as AuthPluginOptions, l as TypedRepository, lt as RouteDefinition, m as RegistryStats, mt as ControllerLike, n as ConfigError, nt as PresetResult, o as InferDocType, ot as ResourceHookContext, p as RegistryEntry, pt as ControllerHandler, q as CrudController, r as ValidateOptions, rt as RateLimitConfig, s as InferResourceDoc, st as ResourceHooks, t as RouteHandlerMethod, tn as BaseControllerOptions, tt as PresetHook, u as TypedResourceConfig, ut as RouteMcpConfig, v as LookupOption, vt as IRequestContext, w as ServiceContext, x as PopulateOption, y as OwnershipCheck, yt as RouteHandler, zt as UserLike } from "../index-6u4_Gg6G.mjs";
-import { r as RequestScope } from "../types-tgR4Pt8F.mjs";
-import { c as PermissionCheck, d as UserBase, l as PermissionContext, u as PermissionResult } from "../fields-C8Y0XLAu.mjs";
-import { n as ElevationOptions, t as ElevationEvent } from "../elevation-s5ykdNHr.mjs";
+import { $ as OpenApiSchemas, A as RequestIdOptions, At as Authenticator, Bt as UserOrganization, C as RequestContext, D as HealthCheck, E as GracefulShutdownOptions, F as FastifyWithDecorators, Ft as ApiResponse, G as ActionsMap, H as ActionDefinition, I as MiddlewareHandler, It as ArcRequest, J as CrudRouteKey, K as ArcFieldRule, L as RequestWithExtras, Lt as JWTPayload, M as EventsDecorator, Mt as JwtContext, N as FastifyRequestExtras, Nt as TokenPair, O as HealthOptions, Ot as AuthHelpers, P as FastifyWithAuth, Pt as AnyRecord, Q as MiddlewareConfig, Rt as ObjectId, S as QueryParserInterface, T as CrudRouterOptions, U as ActionEntry, W as ActionHandlerFn, X as EventDefinition, Y as CrudSchemas, Z as FieldRule, _ as ControllerQueryOptions, _t as IControllerResponse, a as InferAdapterDoc, at as ResourceConfig, b as ParsedQuery, c as TypedController, ct as ResourcePermissions, d as PaginationResult, dt as RouteMethod, et as PresetFunction, f as IntrospectionData, ft as RouteSchemaOptions, g as ArcInternalMetadata, gt as IController, h as ResourceMetadata, ht as FastifyHandler, i as ValidationResult, it as ResourceCacheConfig, j as ArcDecorator, jt as AuthenticatorContext, k as IntrospectionPluginOptions, kt as AuthPluginOptions, l as TypedRepository, lt as RouteDefinition, m as RegistryStats, mt as ControllerLike, n as ConfigError, nt as PresetResult, o as InferDocType, ot as ResourceHookContext, p as RegistryEntry, pt as ControllerHandler, q as CrudController, r as ValidateOptions, rt as RateLimitConfig, s as InferResourceDoc, st as ResourceHooks, t as RouteHandlerMethod, tn as BaseControllerOptions, tt as PresetHook, u as TypedResourceConfig, ut as RouteMcpConfig, v as LookupOption, vt as IRequestContext, w as ServiceContext, x as PopulateOption, y as OwnershipCheck, yt as RouteHandler, zt as UserLike } from "../index-CXXRbnf8.mjs";
+import { r as RequestScope } from "../types-DDyTPc6y.mjs";
+import { c as PermissionCheck, d as UserBase, l as PermissionContext, u as PermissionResult } from "../fields-BRjxOAFp.mjs";
+import { n as ElevationOptions, t as ElevationEvent } from "../elevation-BQQXZ_VR.mjs";
 export { ActionDefinition, ActionEntry, ActionHandlerFn, ActionsMap, AnyRecord, ApiResponse, ArcDecorator, ArcFieldRule, ArcInternalMetadata, ArcRequest, AuthHelpers, AuthPluginOptions, Authenticator, AuthenticatorContext, BaseControllerOptions, ConfigError, ControllerHandler, ControllerLike, ControllerQueryOptions, CrudController, CrudRouteKey, CrudRouterOptions, CrudSchemas, ElevationEvent, ElevationOptions, EventDefinition, EventsDecorator, FastifyHandler, FastifyRequestExtras, FastifyWithAuth, FastifyWithDecorators, FieldRule, GracefulShutdownOptions, HealthCheck, HealthOptions, IController, IControllerResponse, IRequestContext, InferAdapterDoc, InferDocType, InferResourceDoc, IntrospectionData, IntrospectionPluginOptions, JWTPayload, JwtContext, LookupOption, MiddlewareConfig, MiddlewareHandler, ObjectId, OpenApiSchemas, OwnershipCheck, PaginationResult, ParsedQuery, PermissionCheck, PermissionContext, PermissionResult, PopulateOption, PresetFunction, PresetHook, PresetResult, QueryParserInterface, RateLimitConfig, RegistryEntry, RegistryStats, RequestContext, RequestIdOptions, RequestScope, RequestWithExtras, ResourceCacheConfig, ResourceConfig, ResourceHookContext, ResourceHooks, ResourceMetadata, ResourcePermissions, RouteDefinition, RouteHandler, RouteHandlerMethod, RouteMcpConfig, RouteMethod, RouteSchemaOptions, ServiceContext, TokenPair, TypedController, TypedRepository, TypedResourceConfig, UserBase, UserLike, UserOrganization, ValidateOptions, ValidationResult };

package/dist/types/storage.d.mts

@@ -1,2 +1,2 @@
-import { a as StorageReadResult, i as StorageReadRange, n as StorageContext, o as StorageUploadInput, r as StorageFile, t as Storage } from "../storage-BwGQXUpd.mjs";
+import { a as StorageReadResult, i as StorageReadRange, n as StorageContext, o as StorageUploadInput, r as StorageFile, t as Storage } from "../storage-Dfzt4VTl.mjs";
 export { Storage, StorageContext, StorageFile, StorageReadRange, StorageReadResult, StorageUploadInput };

package/dist/{types-9beEMe25.d.mts → types-BQ9TJQNy.d.mts}

@@ -1,4 +1,4 @@
-import { B as ResourceDefinition } from "./index-6u4_Gg6G.mjs";
+import { B as ResourceDefinition } from "./index-CXXRbnf8.mjs";
 import { z } from "zod";
 
 //#region src/integrations/mcp/types.d.ts

package/dist/{types-BH7dEGvU.d.mts → types-D7KpfiL1.d.mts}

@@ -1,13 +1,13 @@
-import { At as Authenticator } from "./index-6u4_Gg6G.mjs";
-import { r as CacheStore } from "./interface-Da0r7Lna.mjs";
-import { n as ElevationOptions } from "./elevation-s5ykdNHr.mjs";
-import { o as EventTransport } from "./EventTransport-CfVEGaEl.mjs";
-import { t as ExternalOpenApiPaths } from "./externalPaths-Bapitwvd.mjs";
-import { r as QueryCachePluginOptions } from "./queryCachePlugin-BUXBSm4F.mjs";
-import { t as EventPluginOptions } from "./eventPlugin-CUNjYYRY.mjs";
-import { f as CachingOptions, l as SSEOptions, o as MetricsOptions, t as VersioningOptions } from "./versioning-M9lNLhO8.mjs";
-import { t as ErrorHandlerOptions } from "./errorHandler-Co3lnVmJ.mjs";
-import { r as IdempotencyStore } from "./interface-CkkWm5uR.mjs";
+import { At as Authenticator } from "./index-CXXRbnf8.mjs";
+import { r as CacheStore } from "./interface-beEtJyWM.mjs";
+import { n as ElevationOptions } from "./elevation-BQQXZ_VR.mjs";
+import { o as EventTransport } from "./EventTransport-CYNUXdCJ.mjs";
+import { t as ExternalOpenApiPaths } from "./externalPaths-BD5nw6St.mjs";
+import { r as QueryCachePluginOptions } from "./queryCachePlugin-CqMdLI2-.mjs";
+import { t as EventPluginOptions } from "./eventPlugin-DDJoNEPL.mjs";
+import { f as CachingOptions, l as SSEOptions, o as MetricsOptions, t as VersioningOptions } from "./versioning-DsglKfM_.mjs";
+import { t as ErrorHandlerOptions } from "./errorHandler-DEWmGWPz.mjs";
+import { r as IdempotencyStore } from "./interface-DfLGcus7.mjs";
 import { FastifyInstance, FastifyPluginAsync, FastifyReply, FastifyRequest, FastifyServerOptions } from "fastify";
 
 //#region src/factory/loadResources.d.ts

package/dist/utils/index.d.mts

@@ -1,2 +1,2 @@
-import { $ as ValidationResult, A as handleRaw, B as CompensationStep, C as queryParams, D as ArcQueryParser, E as wrapResponse, F as defineErrorMapper, G as CircuitBreakerOptions, H as withCompensation, I as CompensationDefinition, J as CircuitState, K as CircuitBreakerRegistry, L as CompensationError, M as Guard, N as GuardConfig, O as ArcQueryParserOptions, P as defineGuard, Q as ValidateOptions, R as CompensationHooks, S as paginationSchema, T as successResponseSchema, U as CircuitBreaker, V as defineCompensation, W as CircuitBreakerError, X as createCircuitBreakerRegistry, Y as createCircuitBreaker, Z as ConfigError, _ as getDefaultCrudSchemas, a as TransitionConfig, at as ErrorDetails, b as listResponse, c as JsonSchemaTarget, ct as OrgAccessDeniedError, d as isJsonSchema, dt as ServiceUnavailableError, et as assertValidConfig, f as isZodSchema, ft as UnauthorizedError, g as errorResponseSchema, gt as isArcError, h as deleteResponse, ht as createError, i as StateMachine, it as ConflictError, j as envelope, k as createQueryParser, l as convertOpenApiSchemas, lt as OrgRequiredError, m as JsonSchema, mt as createDomainError, n as EventsDecorator, nt as validateResourceConfig, o as createStateMachine, ot as ForbiddenError, p as toJsonSchema, pt as ValidationError, q as CircuitBreakerStats, r as hasEvents, rt as ArcError, s as simpleEqualityMatcher, st as NotFoundError, t as getUserId, tt as formatValidationErrors, u as convertRouteSchema, ut as RateLimitError, v as getListQueryParams, w as responses, x as mutationResponse, y as itemResponse, z as CompensationResult } from "../index-DdQ3O9Pg.mjs";
+import { $ as ValidationResult, A as handleRaw, B as CompensationStep, C as queryParams, D as ArcQueryParser, E as wrapResponse, F as defineErrorMapper, G as CircuitBreakerOptions, H as withCompensation, I as CompensationDefinition, J as CircuitState, K as CircuitBreakerRegistry, L as CompensationError, M as Guard, N as GuardConfig, O as ArcQueryParserOptions, P as defineGuard, Q as ValidateOptions, R as CompensationHooks, S as paginationSchema, T as successResponseSchema, U as CircuitBreaker, V as defineCompensation, W as CircuitBreakerError, X as createCircuitBreakerRegistry, Y as createCircuitBreaker, Z as ConfigError, _ as getDefaultCrudSchemas, a as TransitionConfig, at as ErrorDetails, b as listResponse, c as JsonSchemaTarget, ct as OrgAccessDeniedError, d as isJsonSchema, dt as ServiceUnavailableError, et as assertValidConfig, f as isZodSchema, ft as UnauthorizedError, g as errorResponseSchema, gt as isArcError, h as deleteResponse, ht as createError, i as StateMachine, it as ConflictError, j as envelope, k as createQueryParser, l as convertOpenApiSchemas, lt as OrgRequiredError, m as JsonSchema, mt as createDomainError, n as EventsDecorator, nt as validateResourceConfig, o as createStateMachine, ot as ForbiddenError, p as toJsonSchema, pt as ValidationError, q as CircuitBreakerStats, r as hasEvents, rt as ArcError, s as simpleEqualityMatcher, st as NotFoundError, t as getUserId, tt as formatValidationErrors, u as convertRouteSchema, ut as RateLimitError, v as getListQueryParams, w as responses, x as mutationResponse, y as itemResponse, z as CompensationResult } from "../index-D9t1KNaB.mjs";
 export { ArcError, ArcQueryParser, ArcQueryParserOptions, CircuitBreaker, CircuitBreakerError, CircuitBreakerOptions, CircuitBreakerRegistry, CircuitBreakerStats, CircuitState, CompensationDefinition, CompensationError, CompensationHooks, CompensationResult, CompensationStep, ConfigError, ConflictError, ErrorDetails, EventsDecorator, ForbiddenError, Guard, GuardConfig, JsonSchema, JsonSchemaTarget, NotFoundError, OrgAccessDeniedError, OrgRequiredError, RateLimitError, ServiceUnavailableError, StateMachine, TransitionConfig, UnauthorizedError, ValidateOptions, ValidationError, ValidationResult, assertValidConfig, convertOpenApiSchemas, convertRouteSchema, createCircuitBreaker, createCircuitBreakerRegistry, createDomainError, createError, createQueryParser, createStateMachine, defineCompensation, defineErrorMapper, defineGuard, deleteResponse, envelope, errorResponseSchema, formatValidationErrors, getDefaultCrudSchemas, getListQueryParams, getUserId, handleRaw, hasEvents, isArcError, isJsonSchema, isZodSchema, itemResponse, listResponse, mutationResponse, paginationSchema, queryParams, responses, simpleEqualityMatcher, successResponseSchema, toJsonSchema, validateResourceConfig, withCompensation, wrapResponse };

package/dist/utils/index.mjs

@@ -1,4 +1,4 @@
-import { A as createQueryParser, C as mutationResponse, D as successResponseSchema, E as responses, M as simpleEqualityMatcher, O as wrapResponse, S as listResponse, T as queryParams, _ as deleteResponse, a as defineErrorMapper, b as getListQueryParams, c as CircuitBreaker, d as CircuitState, f as createCircuitBreaker, g as validateResourceConfig, h as formatValidationErrors, i as defineGuard, j as getUserId, k as ArcQueryParser, l as CircuitBreakerError, m as assertValidConfig, n as handleRaw, o as defineCompensation, p as createCircuitBreakerRegistry, r as envelope, s as withCompensation, t as createStateMachine, u as CircuitBreakerRegistry, v as errorResponseSchema, w as paginationSchema, x as itemResponse, y as getDefaultCrudSchemas } from "../utils-D3Yxnrwr.mjs";
+import { A as createQueryParser, C as mutationResponse, D as successResponseSchema, E as responses, M as simpleEqualityMatcher, O as wrapResponse, S as listResponse, T as queryParams, _ as deleteResponse, a as defineErrorMapper, b as getListQueryParams, c as CircuitBreaker, d as CircuitState, f as createCircuitBreaker, g as validateResourceConfig, h as formatValidationErrors, i as defineGuard, j as getUserId, k as ArcQueryParser, l as CircuitBreakerError, m as assertValidConfig, n as handleRaw, o as defineCompensation, p as createCircuitBreakerRegistry, r as envelope, s as withCompensation, t as createStateMachine, u as CircuitBreakerRegistry, v as errorResponseSchema, w as paginationSchema, x as itemResponse, y as getDefaultCrudSchemas } from "../utils-CcYTj09l.mjs";
 import { a as OrgAccessDeniedError, c as ServiceUnavailableError, d as createDomainError, f as createError, i as NotFoundError, l as UnauthorizedError, n as ConflictError, o as OrgRequiredError, p as isArcError, r as ForbiddenError, s as RateLimitError, t as ArcError, u as ValidationError } from "../errors-D5c-5BJL.mjs";
 import { a as toJsonSchema, i as isZodSchema, n as convertRouteSchema, r as isJsonSchema, t as convertOpenApiSchemas } from "../schemaConverter-B0oKLuqI.mjs";
 import { t as hasEvents } from "../typeGuards-CcFZXgU7.mjs";

package/dist/{utils-D3Yxnrwr.mjs → utils-CcYTj09l.mjs}

@@ -1,7 +1,7 @@
 import { m as RESERVED_QUERY_PARAMS, t as CRUD_OPERATIONS } from "./constants-BhY1OHoH.mjs";
 import { arcLog } from "./logger/index.mjs";
 import { t as ArcError } from "./errors-D5c-5BJL.mjs";
-import { r as getAvailablePresets } from "./presets-k604Lj99.mjs";
+import { r as getAvailablePresets } from "./presets-Z7P5w4gF.mjs";
 //#region src/utils/simpleEqualityMatcher.ts
 /**
 * `simpleEqualityMatcher` — a minimal, dialect-agnostic flat-key equality

package/dist/{versioning-M9lNLhO8.d.mts → versioning-DsglKfM_.d.mts}

@@ -1,4 +1,4 @@
-import { n as DomainEvent } from "./EventTransport-CfVEGaEl.mjs";
+import { n as DomainEvent } from "./EventTransport-CYNUXdCJ.mjs";
 import { FastifyPluginAsync, FastifyRequest } from "fastify";
 
 //#region src/plugins/caching.d.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@classytic/arc",
-  "version": "2.11.2",
+  "version": "2.11.4",
   "description": "Resource-oriented backend framework for Fastify — clean, minimal, powerful, tree-shakable",
   "type": "module",
   "exports": {
@@ -255,6 +255,7 @@
     "@fastify/under-pressure": ">=9.0.0",
     "@fastify/websocket": ">=11.0.0",
     "@modelcontextprotocol/sdk": ">=1.28.0",
+    "@opentelemetry/api": ">=1.9.0",
     "@opentelemetry/auto-instrumentations-node": ">=0.40.0",
     "@opentelemetry/exporter-trace-otlp-http": ">=0.50.0",
     "@opentelemetry/instrumentation-http": ">=0.50.0",
@@ -381,6 +382,7 @@
     "@fastify/under-pressure": "^9.0.3",
     "@fastify/websocket": "^11.0.0",
     "@modelcontextprotocol/sdk": "^1.29.0",
+    "@opentelemetry/api": "^1.9.1",
     "@sinclair/typebox": "^0.34.0",
     "@types/node": "^22.10.0",
     "@types/qs": "^6.14.0",