@classytic/arc 2.16.0 → 2.16.1

package/dist/presets/filesUpload.d.mts

@@ -1,7 +1,7 @@
-import { rt as PresetResult } from "../index-CkW0flkU.mjs";
-import { i as RequestScope } from "../types-DVfpSfx2.mjs";
-import { c as PermissionCheck } from "../fields-Anj0xdih.mjs";
-import { a as StorageReadResult, i as StorageReadRange, n as StorageContext, o as StorageUploadInput, r as StorageFile, t as Storage } from "../storage-D2KZJAmn.mjs";
+import { rt as PresetResult } from "../index-DBDgy6Hw.mjs";
+import { i as RequestScope } from "../types-CfapW2t8.mjs";
+import { c as PermissionCheck } from "../fields-DqZLp5d6.mjs";
+import { a as StorageReadResult, i as StorageReadRange, n as StorageContext, o as StorageUploadInput, r as StorageFile, t as Storage } from "../storage-HcAgP5Ni.mjs";
 
 //#region src/presets/filesUpload.d.ts
 interface FilesUploadPresetRoutes {

package/dist/presets/index.d.mts

@@ -1,4 +1,4 @@
-import { Kt as AnyRecord, bt as IRequestContext, d as PaginationResult, rt as PresetResult, st as ResourceConfig, yt as IControllerResponse } from "../index-CkW0flkU.mjs";
+import { Kt as AnyRecord, bt as IRequestContext, d as PaginationResult, rt as PresetResult, st as ResourceConfig, yt as IControllerResponse } from "../index-DBDgy6Hw.mjs";
 import { FilesUploadPresetOptions, FilesUploadPresetPermissions, FilesUploadPresetRoutes, filesUploadPreset } from "./filesUpload.mjs";
 import { MultiTenantOptions, TenantFieldSpec, multiTenantPreset } from "./multiTenant.mjs";
 import { SearchHandler, SearchPresetOptions, SearchRouteConfig, searchPreset } from "./search.mjs";

package/dist/presets/multiTenant.d.mts

@@ -1,4 +1,4 @@
-import { J as CrudRouteKey, rt as PresetResult } from "../index-CkW0flkU.mjs";
+import { J as CrudRouteKey, rt as PresetResult } from "../index-DBDgy6Hw.mjs";
 
 //#region src/presets/multiTenant.d.ts
 /**

package/dist/presets/search.d.mts

@@ -1,5 +1,5 @@
-import { dt as RouteDefinition, ft as RouteMcpConfig, ht as ControllerHandler, rt as PresetResult } from "../index-CkW0flkU.mjs";
-import { c as PermissionCheck } from "../fields-Anj0xdih.mjs";
+import { dt as RouteDefinition, ft as RouteMcpConfig, ht as ControllerHandler, rt as PresetResult } from "../index-DBDgy6Hw.mjs";
+import { c as PermissionCheck } from "../fields-DqZLp5d6.mjs";
 
 //#region src/presets/search.d.ts
 /**

package/dist/{queryCachePlugin-Biqzfbi5.d.mts → queryCachePlugin-Do4P_WBC.d.mts}

@@ -1,5 +1,5 @@
-import { r as CacheStore } from "./interface-CH0OQudo.mjs";
-import { i as QueryCache } from "./QueryCache-SvmT_9ti.mjs";
+import { r as CacheStore } from "./interface-BVkZsvEe.mjs";
+import { i as QueryCache } from "./QueryCache-8YmAQ-zW.mjs";
 import { FastifyPluginAsync } from "fastify";
 
 //#region src/cache/queryCachePlugin.d.ts

package/dist/{redis-Cyzrz6SX.d.mts → redis-cpqVb85w.d.mts}

@@ -1,4 +1,4 @@
-import { n as IdempotencyResult, r as IdempotencyStore } from "./interface-NwJ_qPlY.mjs";
+import { n as IdempotencyResult, r as IdempotencyStore } from "./interface-DoE6UoC2.mjs";
 
 //#region src/idempotency/stores/redis.d.ts
 interface RedisClient {

package/dist/{redis-stream-DT-YjzrB.d.mts → redis-stream-BuiAS3aE.d.mts}

@@ -1,4 +1,4 @@
-import { a as EventTransport, i as EventLogger, n as DomainEvent, r as EventHandler } from "./EventTransport-C-2oAHtw.mjs";
+import { a as EventTransport, i as EventLogger, n as DomainEvent, r as EventHandler } from "./EventTransport-B1GFiYUy.mjs";
 
 //#region src/events/transports/redis-stream.d.ts
 interface RedisStreamLike {

package/dist/registry/index.d.mts

@@ -1,4 +1,4 @@
-import { J as CrudRouteKey, R as RegisterOptions, V as ResourceDefinition, at as ResolvedTenantPurge, k as IntrospectionPluginOptions, p as RegistryEntry, z as ResourceRegistry } from "../index-CkW0flkU.mjs";
+import { J as CrudRouteKey, R as RegisterOptions, V as ResourceDefinition, at as ResolvedTenantPurge, k as IntrospectionPluginOptions, p as RegistryEntry, z as ResourceRegistry } from "../index-DBDgy6Hw.mjs";
 import { FastifyPluginAsync } from "fastify";
 import { TenantPurgeProgress, TenantPurgeStrategy } from "@classytic/repo-core/repository";
 
@@ -20,7 +20,14 @@ interface AssertNoTenantDataOptions {
 interface TenantDataLeak {
   readonly resource: string;
   readonly tenantField: string;
-  readonly strategy: TenantPurgeStrategy["type"];
+  /**
+   * Full `TenantPurgeStrategy` discriminated union — not just `.type`.
+   * `anonymize` carries the field map; `custom` carries the handler
+   * descriptor; auditors get the actionable signal without re-resolving
+   * the resource definition. Narrow on `.strategy.type` for typed
+   * access.
+   */
+  readonly strategy: TenantPurgeStrategy;
   readonly expected: number;
   readonly actual: number;
   readonly reason?: string;
@@ -64,7 +71,14 @@ declare function assertNoTenantData(registry: ResourceRegistry, options: AssertN
 interface PurgeResourceOutcome {
   readonly resource: string;
   readonly tenantField: string;
-  readonly strategy: TenantPurgeStrategy["type"];
+  /**
+   * Full `TenantPurgeStrategy` discriminated union. Audit consumers
+   * narrow on `.strategy.type` for typed access — `skip` carries the
+   * mandatory `reason`, `anonymize` carries the field map, `custom`
+   * carries the handler descriptor. Pre-2.17 this was the `.type` tag
+   * only, which dropped the audit-critical `reason` field.
+   */
+  readonly strategy: TenantPurgeStrategy;
   readonly processed: number;
   readonly ok: boolean;
   readonly path: "purgeByField" | "legacy-deleteMany" | "skipped" | "unsupported";
@@ -92,11 +106,13 @@ interface CascadeResourceReport {
    */
   readonly deletedCount: number;
   /**
-   * Strategy that actually ran for this resource — `'hard'` / `'soft'` /
-   * `'anonymize'` / `'skip'`. Audit consumers branch on this to answer
-   * "did data physically leave the system?".
+   * Full `TenantPurgeStrategy` that ran for this resource. Branch on
+   * `.strategy.type` (`'hard'` / `'soft'` / `'anonymize'` / `'skip'` /
+   * `'custom'`) to answer "did data physically leave the system?". The
+   * `skip` variant carries the mandatory `reason`; `anonymize` carries
+   * the field map; `custom` carries the handler descriptor.
    */
-  readonly strategy?: TenantPurgeStrategy["type"];
+  readonly strategy?: TenantPurgeStrategy;
   /**
    * Where the strategy came from — `'declared'` (host wrote
    * `onTenantDelete`) or `'disabled'` (filtered out before reaching
@@ -221,11 +237,17 @@ declare function getCascadingResources(registry: ResourceRegistry): readonly str
  * cascading resource. Use for audit dashboards that answer "what
  * happens to this resource on org-delete?" without grepping the
  * source.
+ *
+ * **Returns the full `TenantPurgeStrategy` discriminated union**, not
+ * just its `type` tag. The `skip` variant carries a required `reason`
+ * field — auditors need it to sign off on every "we deliberately don't
+ * purge this" entry. Anonymize carries the field map. Custom carries
+ * the handler reference. Narrow on `.strategy.type` for typed access.
  */
 declare function getCascadingResourcesWithMetadata(registry: ResourceRegistry): readonly {
   name: string;
   tenantField: string;
-  strategy: TenantPurgeStrategy["type"];
+  strategy: TenantPurgeStrategy;
   source: ResolvedTenantPurge["source"];
   priority: number;
 }[];

package/dist/registry/index.mjs

@@ -1,3 +1,3 @@
-import { a as cascadeDeleteForOrganization, c as assertNoTenantData, i as introspectionPlugin_default, n as buildResourceManifestFromRegistry, o as getCascadingResources, r as introspectionPlugin, s as getCascadingResourcesWithMetadata, t as buildResourceManifest } from "../registry-BBE23CDj.mjs";
-import { t as ResourceRegistry } from "../ResourceRegistry-f48hFk3m.mjs";
+import { a as cascadeDeleteForOrganization, c as assertNoTenantData, i as introspectionPlugin_default, n as buildResourceManifestFromRegistry, o as getCascadingResources, r as introspectionPlugin, s as getCascadingResourcesWithMetadata, t as buildResourceManifest } from "../registry-BrlHkrRS.mjs";
+import { t as ResourceRegistry } from "../ResourceRegistry-CzSzVK1m.mjs";
 export { ResourceRegistry, assertNoTenantData, buildResourceManifest, buildResourceManifestFromRegistry, cascadeDeleteForOrganization, getCascadingResources, getCascadingResourcesWithMetadata, introspectionPlugin_default as introspectionPlugin, introspectionPlugin as introspectionPluginFn };

package/dist/{registry-BBE23CDj.mjs → registry-BrlHkrRS.mjs}

@@ -59,7 +59,7 @@ async function assertNoTenantData(registry, options) {
 		if (actual !== expected) leaks.push({
 			resource: r.name,
 			tenantField,
-			strategy: strategy.type,
+			strategy,
 			expected,
 			actual
 		});
@@ -88,7 +88,7 @@ async function purgeResource(resourceName, tenantField, organizationId, resolved
 	if (strategy.type === "skip") return {
 		resource: resourceName,
 		tenantField,
-		strategy: "skip",
+		strategy,
 		processed: 0,
 		ok: true,
 		path: "skipped",
@@ -103,7 +103,7 @@ async function purgeResource(resourceName, tenantField, organizationId, resolved
 		return {
 			resource: resourceName,
 			tenantField,
-			strategy: result.strategy,
+			strategy,
 			processed: result.processed,
 			ok: result.ok,
 			path: "purgeByField",
@@ -114,7 +114,7 @@ async function purgeResource(resourceName, tenantField, organizationId, resolved
 	if (strategy.type !== "hard") return {
 		resource: resourceName,
 		tenantField,
-		strategy: strategy.type,
+		strategy,
 		processed: 0,
 		ok: false,
 		path: "unsupported",
@@ -127,7 +127,7 @@ async function purgeResource(resourceName, tenantField, organizationId, resolved
 	if (!op) return {
 		resource: resourceName,
 		tenantField,
-		strategy: "hard",
+		strategy,
 		processed: 0,
 		ok: false,
 		path: "unsupported",
@@ -142,7 +142,7 @@ async function purgeResource(resourceName, tenantField, organizationId, resolved
 		return {
 			resource: resourceName,
 			tenantField,
-			strategy: "hard",
+			strategy,
 			processed: typeof result === "number" ? result : typeof result?.deletedCount === "number" ? result.deletedCount : typeof result?.count === "number" ? result.count : -1,
 			ok: true,
 			path: "legacy-deleteMany",
@@ -152,7 +152,7 @@ async function purgeResource(resourceName, tenantField, organizationId, resolved
 		return {
 			resource: resourceName,
 			tenantField,
-			strategy: "hard",
+			strategy,
 			processed: 0,
 			ok: false,
 			path: "legacy-deleteMany",
@@ -178,6 +178,12 @@ function getCascadingResources(registry) {
 * cascading resource. Use for audit dashboards that answer "what
 * happens to this resource on org-delete?" without grepping the
 * source.
+*
+* **Returns the full `TenantPurgeStrategy` discriminated union**, not
+* just its `type` tag. The `skip` variant carries a required `reason`
+* field — auditors need it to sign off on every "we deliberately don't
+* purge this" entry. Anonymize carries the field map. Custom carries
+* the handler reference. Narrow on `.strategy.type` for typed access.
 */
 function getCascadingResourcesWithMetadata(registry) {
 	return registry.getAll().filter((r) => isResourceCascading(r)).map((r) => {
@@ -191,7 +197,7 @@ function getCascadingResourcesWithMetadata(registry) {
 		return {
 			name: r.name,
 			tenantField,
-			strategy: r0.strategy.type,
+			strategy: r0.strategy,
 			source: r0.source,
 			priority: r0.priority
 		};

package/dist/{routerShared-CZV5aabX.mjs → routerShared-ClV4cCaa.mjs}

@@ -55,9 +55,13 @@ function applyFieldMask(data, fieldMask) {
 	return data;
 }
 /**
-* Create IRequestContext from Fastify request
-*
-* Extracts framework-agnostic context from Fastify-specific request object
+* Project `FastifyRequest` into the curated `IRequestContext` shape that
+* arc's controllers receive. This is a developer-facing facade, not a
+* portability boundary — arc is Fastify-only. The projection lifts the
+* fields tenant-scoped controllers reach for (`organizationId`,
+* `teamId`, `scope`, `context`, server accessor) onto a flat, typed
+* surface so handler code doesn't have to dig through Fastify's
+* decorator surface or `req.metadata._scope` internals.
 */
 function createRequestContext(req) {
 	const reqWithExtras = req;
@@ -145,12 +149,33 @@ function computeFieldCapabilities(fieldPerms, effectiveRoles) {
 	return caps;
 }
 /**
-* Send IControllerResponse via Fastify reply
+* Send a controller's `IControllerResponse` through Fastify's reply.
+*
+* The `IControllerResponse<T>` envelope is arc's internal pipeline
+* contract — it's how custom `status`, `meta`, `headers`, and field
+* permissions thread from a handler through interceptors to the wire
+* without each step having to touch `reply` directly. Not a portability
+* abstraction (arc is Fastify-only); a pipeline-internal one.
 *
-* Converts framework-agnostic response to Fastify response
-* Applies field masking if specified in request
+* **Auto-envelope of bare returns.** Custom route handlers are
+* expected to return the envelope shape so this function can apply
+* field permissions, attach `fieldCaps`, and flatten paginated lists.
+* A handler that returns raw `T` (array, plain object, primitive) used
+* to silently produce a broken response — `response.data` was
+* `undefined`, the body sent was `undefined`, and any declared
+* `fields:` permission map was bypassed (the leak shape mentora
+* flagged). 2.17 detects bare returns and wraps them into
+* `{ data: response, status: 200 }` before the field-permission
+* pipeline runs, so `fields:` applies to ALL custom routes whether the
+* handler envelopes its return value or not. The envelope shape is
+* still the canonical contract — auto-wrapping is a safety net, not
+* an invitation to drop the envelope.
 */
 function sendControllerResponse(reply, response, request) {
+	if (response === null || typeof response !== "object" || !Object.hasOwn(response, "data")) response = {
+		data: response,
+		status: 200
+	};
 	const reqWithExtras = request;
 	const fieldMaskConfig = reqWithExtras?.fieldMask;
 	const arcMeta = reqWithExtras?.arc;
@@ -207,18 +232,17 @@ function sendControllerResponse(reply, response, request) {
 	reply.code(status).send(filteredData);
 }
 /**
-* Create Fastify route handler from IController method
-*
-* Wraps framework-agnostic controller method in Fastify-specific handler
+* Bridge an `IController` method (`(ctx: IRequestContext) => Promise<IControllerResponse<T>>`)
+* into a Fastify route handler. Translates between arc's curated request
+* context surface and Fastify's request/reply, and routes the envelope
+* through `sendControllerResponse` so the pipeline applies field
+* permissions, status, and meta uniformly. Internal plumbing, not a
+* portability layer — arc is Fastify-only.
 *
 * @example
 * ```typescript
 * const controller = new BaseController(repository);
-*
-* // Create Fastify handler
 * const listHandler = createFastifyHandler(controller.list.bind(controller));
-*
-* // Register route
 * fastify.get('/products', listHandler);
 * ```
 */

package/dist/scope/index.d.mts

@@ -1,5 +1,5 @@
-import { C as isMember, D as requireOrgId, E as requireClientId, O as requireTeamId, S as isElevated, T as isService, _ as getTenantFromRequest, a as getAncestorOrgIds, b as hasOrgAccess, c as getMandate, d as getOrgRoles, f as getRequestScope, g as getTeamId, h as getServiceScopes, i as RequestScope, k as requireUserId, l as getOrgContext, m as getScopeContextMap, n as Mandate, o as getClientId, p as getScopeContext, r as PUBLIC_SCOPE, s as getDPoPJkt, t as AUTHENTICATED_SCOPE, u as getOrgId, v as getUserId, w as isOrgInScope, x as isAuthenticated, y as getUserRoles } from "../types-DVfpSfx2.mjs";
-import { i as elevationPlugin, n as ElevationOptions, r as _default, t as ElevationEvent } from "../elevation-0YBpa663.mjs";
+import { C as isMember, D as requireOrgId, E as requireClientId, O as requireTeamId, S as isElevated, T as isService, _ as getTenantFromRequest, a as getAncestorOrgIds, b as hasOrgAccess, c as getMandate, d as getOrgRoles, f as getRequestScope, g as getTeamId, h as getServiceScopes, i as RequestScope, k as requireUserId, l as getOrgContext, m as getScopeContextMap, n as Mandate, o as getClientId, p as getScopeContext, r as PUBLIC_SCOPE, s as getDPoPJkt, t as AUTHENTICATED_SCOPE, u as getOrgId, v as getUserId, w as isOrgInScope, x as isAuthenticated, y as getUserRoles } from "../types-CfapW2t8.mjs";
+import { i as elevationPlugin, n as ElevationOptions, r as _default, t as ElevationEvent } from "../elevation-DvwtjDwu.mjs";
 import { FastifyReply, FastifyRequest } from "fastify";
 
 //#region src/scope/rateLimitKey.d.ts

package/dist/testing/index.d.mts

@@ -1,5 +1,5 @@
-import { Kt as AnyRecord, V as ResourceDefinition } from "../index-CkW0flkU.mjs";
-import { d as ResourceLike, r as CreateAppOptions } from "../types-D-fYtKjb.mjs";
+import { Kt as AnyRecord, V as ResourceDefinition } from "../index-DBDgy6Hw.mjs";
+import { d as preloadResourcesAsync, r as CreateAppOptions, u as preloadResources } from "../types-Dw--SyTq.mjs";
 import { StorageContractSetup, StorageContractSetupResult, runStorageContract } from "./storageContract.mjs";
 import { FastifyInstance, FastifyServerOptions } from "fastify";
 import { Mock } from "vitest";
@@ -464,29 +464,6 @@ declare function createTestTimer(): {
   reset: () => void;
 };
 //#endregion
-//#region src/testing/preloadResources.d.ts
-/** Eager glob result: `{ '/path/to/file.ts': resourceModule }` */
-type EagerGlobResult = Record<string, unknown>;
-/** Lazy glob result: `{ '/path/to/file.ts': () => Promise<unknown> }` */
-type LazyGlobResult = Record<string, () => Promise<unknown>>;
-/**
- * Normalize an eager `import.meta.glob` result into a `ResourceLike[]`.
- *
- * Accepts either:
- * - `{ import: 'default' }` form: values are the resource directly
- * - default form: values are the full module — picks first export with `toPlugin()`
- *
- * Throws if any module doesn't yield a valid `ResourceLike`.
- */
-declare function preloadResources(globResult: EagerGlobResult): ResourceLike[];
-/**
- * Normalize a lazy `import.meta.glob` result into a `Promise<ResourceLike[]>`.
- *
- * Use this when resources depend on prior bootstrap (e.g., engine init) and
- * cannot be evaluated at import time of the preload file.
- */
-declare function preloadResourcesAsync(globResult: LazyGlobResult): Promise<ResourceLike[]>;
-//#endregion
 //#region src/testing/testApp.d.ts
 type DbMode = "in-memory" | {
   uri: string;

package/dist/testing/index.mjs

@@ -1,4 +1,5 @@
 import { t as CRUD_OPERATIONS } from "../constants-TrJVIJl0.mjs";
+import { n as preloadResourcesAsync, t as preloadResources } from "../preloadResources-BOXzPhKU.mjs";
 import { runStorageContract } from "./storageContract.mjs";
 import Fastify from "fastify";
 import { afterAll, describe, expect, it, vi } from "vitest";
@@ -970,50 +971,6 @@ function createTestTimer() {
 	};
 }
 //#endregion
-//#region src/testing/preloadResources.ts
-/**
-* Normalize an eager `import.meta.glob` result into a `ResourceLike[]`.
-*
-* Accepts either:
-* - `{ import: 'default' }` form: values are the resource directly
-* - default form: values are the full module — picks first export with `toPlugin()`
-*
-* Throws if any module doesn't yield a valid `ResourceLike`.
-*/
-function preloadResources(globResult) {
-	const resources = [];
-	for (const [path, value] of Object.entries(globResult)) {
-		const resource = pickResource(value);
-		if (!resource) throw new Error(`preloadResources: ${path} does not export a valid resource.\n    Expected: a default export OR a named export with toPlugin().`);
-		resources.push(resource);
-	}
-	return resources.sort((a, b) => (a.name ?? "").localeCompare(b.name ?? ""));
-}
-/**
-* Normalize a lazy `import.meta.glob` result into a `Promise<ResourceLike[]>`.
-*
-* Use this when resources depend on prior bootstrap (e.g., engine init) and
-* cannot be evaluated at import time of the preload file.
-*/
-async function preloadResourcesAsync(globResult) {
-	return (await Promise.all(Object.entries(globResult).map(async ([path, loader]) => {
-		const resource = pickResource(await loader());
-		if (!resource) throw new Error(`preloadResourcesAsync: ${path} does not export a valid resource.\n    Expected: a default export OR a named export with toPlugin().`);
-		return resource;
-	}))).sort((a, b) => (a.name ?? "").localeCompare(b.name ?? ""));
-}
-function pickResource(value) {
-	if (!value || typeof value !== "object") return void 0;
-	if (typeof value.toPlugin === "function") return value;
-	const mod = value;
-	const candidates = [
-		mod.default,
-		mod.resource,
-		...Object.values(mod)
-	];
-	for (const c of candidates) if (c && typeof c === "object" && typeof c.toPlugin === "function") return c;
-}
-//#endregion
 //#region src/testing/testApp.ts
 /**
 * createTestApp — test app factory for arc
@@ -1079,7 +1036,7 @@ function pickDefaultAuth(authMode, callerAuth) {
 	};
 }
 async function createTestApp(options = {}) {
-	const { createApp } = await import("../createApp-DNccuhyI.mjs").then((n) => n.r);
+	const { createApp } = await import("../createApp-DdPBtmzp.mjs").then((n) => n.r);
 	const { resources = [], db = "in-memory", connectMongoose = false, authMode = "jwt", defaultOrgId, plugins, auth: callerAuth, ...appOptions } = options;
 	let dbHandle;
 	let dbUri;

package/dist/testing/storageContract.d.mts

@@ -1,4 +1,4 @@
-import { t as Storage } from "../storage-D2KZJAmn.mjs";
+import { t as Storage } from "../storage-HcAgP5Ni.mjs";
 
 //#region src/testing/storageContract.d.ts
 interface StorageContractSetupResult {

package/dist/types/index.d.mts

@@ -1,5 +1,5 @@
-import { $ as OnTenantDeleteConfig, A as RequestIdOptions, Bt as AuthHelpers, C as RequestContext, D as HealthCheck, E as GracefulShutdownOptions, F as FastifyWithDecorators, G as ActionsMap, Gt as TokenPair, H as ActionDefinition, Ht as Authenticator, I as MiddlewareHandler, J as CrudRouteKey, Jt as ArcRequest, K as ArcFieldRule, Kt as AnyRecord, L as RequestWithExtras, M as EventsDecorator, N as FastifyRequestExtras, O as HealthOptions, P as FastifyWithAuth, Q as MiddlewareConfig, Qt as UserOrganization, S as QueryParserInterface, T as CrudRouterOptions, U as ActionEntry, Ut as AuthenticatorContext, Vt as AuthPluginOptions, W as ActionHandlerFn, Wt as JwtContext, X as EventDefinition, Xt as ObjectId, Y as CrudSchemas, Yt as JWTPayload, Z as FieldRule, Zt as UserLike, _ as ControllerQueryOptions, _t as FastifyHandler, a as InferAdapterDoc, at as ResolvedTenantPurge, b as ParsedQuery, bt as IRequestContext, c as TypedController, cn as BaseControllerOptions, ct as ResourceHookContext, d as PaginationResult, dt as RouteDefinition, et as OpenApiSchemas, f as IntrospectionData, ft as RouteMcpConfig, g as ArcInternalMetadata, gt as ControllerLike, h as ResourceMetadata, ht as ControllerHandler, i as ValidationResult, it as RateLimitConfig, j as ArcDecorator, k as IntrospectionPluginOptions, l as TypedRepository, lt as ResourceHooks, m as RegistryStats, mt as RouteSchemaOptions, n as ConfigError, nt as PresetHook, o as InferDocType, ot as ResourceCacheConfig, p as RegistryEntry, pt as RouteMethod, q as CrudController, qt as ApiResponse, r as ValidateOptions, rt as PresetResult, s as InferResourceDoc, st as ResourceConfig, t as RouteHandlerMethod, tt as PresetFunction, u as TypedResourceConfig, ut as ResourcePermissions, v as LookupOption, vt as IController, w as ServiceContext, x as PopulateOption, xt as RouteHandler, y as OwnershipCheck, yt as IControllerResponse } from "../index-CkW0flkU.mjs";
-import { i as RequestScope } from "../types-DVfpSfx2.mjs";
-import { c as PermissionCheck, d as UserBase, l as PermissionContext, u as PermissionResult } from "../fields-Anj0xdih.mjs";
-import { n as ElevationOptions, t as ElevationEvent } from "../elevation-0YBpa663.mjs";
+import { $ as OnTenantDeleteConfig, A as RequestIdOptions, Bt as AuthHelpers, C as RequestContext, D as HealthCheck, E as GracefulShutdownOptions, F as FastifyWithDecorators, G as ActionsMap, Gt as TokenPair, H as ActionDefinition, Ht as Authenticator, I as MiddlewareHandler, J as CrudRouteKey, Jt as ArcRequest, K as ArcFieldRule, Kt as AnyRecord, L as RequestWithExtras, M as EventsDecorator, N as FastifyRequestExtras, O as HealthOptions, P as FastifyWithAuth, Q as MiddlewareConfig, Qt as UserOrganization, S as QueryParserInterface, T as CrudRouterOptions, U as ActionEntry, Ut as AuthenticatorContext, Vt as AuthPluginOptions, W as ActionHandlerFn, Wt as JwtContext, X as EventDefinition, Xt as ObjectId, Y as CrudSchemas, Yt as JWTPayload, Z as FieldRule, Zt as UserLike, _ as ControllerQueryOptions, _t as FastifyHandler, a as InferAdapterDoc, at as ResolvedTenantPurge, b as ParsedQuery, bt as IRequestContext, c as TypedController, cn as BaseControllerOptions, ct as ResourceHookContext, d as PaginationResult, dt as RouteDefinition, et as OpenApiSchemas, f as IntrospectionData, ft as RouteMcpConfig, g as ArcInternalMetadata, gt as ControllerLike, h as ResourceMetadata, ht as ControllerHandler, i as ValidationResult, it as RateLimitConfig, j as ArcDecorator, k as IntrospectionPluginOptions, l as TypedRepository, lt as ResourceHooks, m as RegistryStats, mt as RouteSchemaOptions, n as ConfigError, nt as PresetHook, o as InferDocType, ot as ResourceCacheConfig, p as RegistryEntry, pt as RouteMethod, q as CrudController, qt as ApiResponse, r as ValidateOptions, rt as PresetResult, s as InferResourceDoc, st as ResourceConfig, t as RouteHandlerMethod, tt as PresetFunction, u as TypedResourceConfig, ut as ResourcePermissions, v as LookupOption, vt as IController, w as ServiceContext, x as PopulateOption, xt as RouteHandler, y as OwnershipCheck, yt as IControllerResponse } from "../index-DBDgy6Hw.mjs";
+import { i as RequestScope } from "../types-CfapW2t8.mjs";
+import { c as PermissionCheck, d as UserBase, l as PermissionContext, u as PermissionResult } from "../fields-DqZLp5d6.mjs";
+import { n as ElevationOptions, t as ElevationEvent } from "../elevation-DvwtjDwu.mjs";
 export { ActionDefinition, ActionEntry, ActionHandlerFn, ActionsMap, AnyRecord, ApiResponse, ArcDecorator, ArcFieldRule, ArcInternalMetadata, ArcRequest, AuthHelpers, AuthPluginOptions, Authenticator, AuthenticatorContext, BaseControllerOptions, ConfigError, ControllerHandler, ControllerLike, ControllerQueryOptions, CrudController, CrudRouteKey, CrudRouterOptions, CrudSchemas, ElevationEvent, ElevationOptions, EventDefinition, EventsDecorator, FastifyHandler, FastifyRequestExtras, FastifyWithAuth, FastifyWithDecorators, FieldRule, GracefulShutdownOptions, HealthCheck, HealthOptions, IController, IControllerResponse, IRequestContext, InferAdapterDoc, InferDocType, InferResourceDoc, IntrospectionData, IntrospectionPluginOptions, JWTPayload, JwtContext, LookupOption, MiddlewareConfig, MiddlewareHandler, ObjectId, OnTenantDeleteConfig, OpenApiSchemas, OwnershipCheck, PaginationResult, ParsedQuery, PermissionCheck, PermissionContext, PermissionResult, PopulateOption, PresetFunction, PresetHook, PresetResult, QueryParserInterface, RateLimitConfig, RegistryEntry, RegistryStats, RequestContext, RequestIdOptions, RequestScope, RequestWithExtras, ResolvedTenantPurge, ResourceCacheConfig, ResourceConfig, ResourceHookContext, ResourceHooks, ResourceMetadata, ResourcePermissions, RouteDefinition, RouteHandler, RouteHandlerMethod, RouteMcpConfig, RouteMethod, RouteSchemaOptions, ServiceContext, TokenPair, TypedController, TypedRepository, TypedResourceConfig, UserBase, UserLike, UserOrganization, ValidateOptions, ValidationResult };

package/dist/types/storage.d.mts

@@ -1,2 +1,2 @@
-import { a as StorageReadResult, i as StorageReadRange, n as StorageContext, o as StorageUploadInput, r as StorageFile, t as Storage } from "../storage-D2KZJAmn.mjs";
+import { a as StorageReadResult, i as StorageReadRange, n as StorageContext, o as StorageUploadInput, r as StorageFile, t as Storage } from "../storage-HcAgP5Ni.mjs";
 export { Storage, StorageContext, StorageFile, StorageReadRange, StorageReadResult, StorageUploadInput };

package/dist/{types-BsJMEQ4D.d.mts → types-BD0BCdf6.d.mts}

@@ -1,4 +1,4 @@
-import { V as ResourceDefinition } from "./index-CkW0flkU.mjs";
+import { V as ResourceDefinition } from "./index-DBDgy6Hw.mjs";
 import { z } from "zod";
 
 //#region src/integrations/mcp/types.d.ts

package/dist/{types-D-fYtKjb.d.mts → types-Dw--SyTq.d.mts}

@@ -1,13 +1,13 @@
-import { r as CacheStore } from "./interface-CH0OQudo.mjs";
-import { Ht as Authenticator } from "./index-CkW0flkU.mjs";
-import { n as ElevationOptions } from "./elevation-0YBpa663.mjs";
-import { a as EventTransport } from "./EventTransport-C-2oAHtw.mjs";
-import { t as ExternalOpenApiPaths } from "./externalPaths-DFg-2KTp.mjs";
-import { r as QueryCachePluginOptions } from "./queryCachePlugin-Biqzfbi5.mjs";
-import { t as EventPluginOptions } from "./eventPlugin-CtHC_av1.mjs";
-import { _ as HealthOptions, f as CachingOptions, l as SSEOptions, o as MetricsOptions, t as VersioningOptions } from "./versioning-ZwX9tmbS.mjs";
-import { t as ErrorHandlerOptions } from "./errorHandler-mHuyWzZE.mjs";
-import { r as IdempotencyStore } from "./interface-NwJ_qPlY.mjs";
+import { r as CacheStore } from "./interface-BVkZsvEe.mjs";
+import { Ht as Authenticator } from "./index-DBDgy6Hw.mjs";
+import { n as ElevationOptions } from "./elevation-DvwtjDwu.mjs";
+import { a as EventTransport } from "./EventTransport-B1GFiYUy.mjs";
+import { t as ExternalOpenApiPaths } from "./externalPaths-ClykOQqa.mjs";
+import { r as QueryCachePluginOptions } from "./queryCachePlugin-Do4P_WBC.mjs";
+import { t as EventPluginOptions } from "./eventPlugin-DjEx_J3j.mjs";
+import { _ as HealthOptions, f as CachingOptions, l as SSEOptions, o as MetricsOptions, t as VersioningOptions } from "./versioning-5H4930tj.mjs";
+import { t as ErrorHandlerOptions } from "./errorHandler-DuqTqeqn.mjs";
+import { r as IdempotencyStore } from "./interface-DoE6UoC2.mjs";
 import { FastifyInstance, FastifyPluginAsync, FastifyReply, FastifyRequest, FastifyServerOptions } from "fastify";
 
 //#region src/factory/loadResources.d.ts
@@ -203,6 +203,29 @@ interface LoadResourcesOptions<TContext = unknown> {
  */
 declare function loadResources<TContext = unknown>(dir: string, options?: LoadResourcesOptions<TContext>): Promise<ResourceLike[]>;
 //#endregion
+//#region src/testing/preloadResources.d.ts
+/** Eager glob result: `{ '/path/to/file.ts': resourceModule }` */
+type EagerGlobResult = Record<string, unknown>;
+/** Lazy glob result: `{ '/path/to/file.ts': () => Promise<unknown> }` */
+type LazyGlobResult = Record<string, () => Promise<unknown>>;
+/**
+ * Normalize an eager `import.meta.glob` result into a `ResourceLike[]`.
+ *
+ * Accepts either:
+ * - `{ import: 'default' }` form: values are the resource directly
+ * - default form: values are the full module — picks first export with `toPlugin()`
+ *
+ * Throws if any module doesn't yield a valid `ResourceLike`.
+ */
+declare function preloadResources(globResult: EagerGlobResult): ResourceLike[];
+/**
+ * Normalize a lazy `import.meta.glob` result into a `Promise<ResourceLike[]>`.
+ *
+ * Use this when resources depend on prior bootstrap (e.g., engine init) and
+ * cannot be evaluated at import time of the preload file.
+ */
+declare function preloadResourcesAsync(globResult: LazyGlobResult): Promise<ResourceLike[]>;
+//#endregion
 //#region src/factory/types.d.ts
 type CorsOptions = Record<string, unknown> & {
   origin?: unknown;
@@ -1041,4 +1064,4 @@ interface RawBodyOptions {
   runFirst?: boolean;
 }
 //#endregion
-export { CustomPluginAuthOption as a, RawBodyOptions as c, ResourceLike as d, ResourceModule as f, CustomAuthenticatorOption as i, UnderPressureOptions as l, BetterAuthOption as n, JwtAuthOption as o, loadResources as p, CreateAppOptions as r, MultipartOptions as s, AuthOption as t, LoadResourcesOptions as u };
+export { CustomPluginAuthOption as a, RawBodyOptions as c, preloadResourcesAsync as d, LoadResourcesOptions as f, loadResources as h, CustomAuthenticatorOption as i, UnderPressureOptions as l, ResourceModule as m, BetterAuthOption as n, JwtAuthOption as o, ResourceLike as p, CreateAppOptions as r, MultipartOptions as s, AuthOption as t, preloadResources as u };

package/dist/utils/index.d.mts

@@ -1,6 +1,6 @@
-import { Kt as AnyRecord, S as QueryParserInterface, Zt as UserLike, b as ParsedQuery, et as OpenApiSchemas, st as ResourceConfig } from "../index-CkW0flkU.mjs";
-import { n as ErrorMapper } from "../errorHandler-mHuyWzZE.mjs";
-import { a as NotFoundError, c as RateLimitError, d as ValidationError, f as createDomainError, i as ForbiddenError, l as ServiceUnavailableError, m as isArcError, n as ConflictError, o as OrgAccessDeniedError, p as createError, r as ErrorOptions, s as OrgRequiredError, t as ArcError, u as UnauthorizedError } from "../errors-C1lX_jlm.mjs";
+import { Kt as AnyRecord, S as QueryParserInterface, Zt as UserLike, b as ParsedQuery, et as OpenApiSchemas, st as ResourceConfig } from "../index-DBDgy6Hw.mjs";
+import { n as ErrorMapper } from "../errorHandler-DuqTqeqn.mjs";
+import { a as NotFoundError, c as RateLimitError, d as ValidationError, f as createDomainError, i as ForbiddenError, l as ServiceUnavailableError, m as isArcError, n as ConflictError, o as OrgAccessDeniedError, p as createError, r as ErrorOptions, s as OrgRequiredError, t as ArcError, u as UnauthorizedError } from "../errors-4ZloYFvm.mjs";
 import { errorContractSchema, errorDetailSchema } from "@classytic/repo-core/errors";
 import { FastifyInstance, FastifyReply, FastifyRequest, RouteHandlerMethod } from "fastify";
 
@@ -1144,7 +1144,8 @@ declare function simpleEqualityMatcher(item: unknown, filters: Record<string, un
  * State Machine Utility
  *
  * Pure utility for validating state transitions in workflow systems.
- * Zero dependencies, framework-agnostic.
+ * Zero runtime dependencies — usable from any layer of arc (controllers,
+ * hooks, pipeline steps, tests).
  *
  * @example
  * const orderState = createStateMachine('Order', {

package/dist/utils/index.mjs

@@ -1,5 +1,5 @@
 import { a as OrgAccessDeniedError, c as ServiceUnavailableError, d as createDomainError, f as createError, i as NotFoundError, l as UnauthorizedError, n as ConflictError, o as OrgRequiredError, p as isArcError, r as ForbiddenError, s as RateLimitError, t as ArcError, u as ValidationError } from "../errors-j4aJm1Wg.mjs";
-import { A as assertValidConfig, C as withCompensation, D as CircuitState, E as CircuitBreakerRegistry, M as validateResourceConfig, N as simpleEqualityMatcher, O as createCircuitBreaker, S as defineCompensation, T as CircuitBreakerError, _ as ArcQueryParser, a as bareListResponse, b as defineGuard, c as errorDetailSchema, d as keysetListResponse, f as listResponse, g as responses, h as queryParams, i as aggregateListResponse, j as formatValidationErrors, k as createCircuitBreakerRegistry, l as getDefaultCrudSchemas, m as paginationSchema, n as createStateMachine, o as deleteResponse, p as offsetListResponse, r as scheduleBackground, s as errorContractSchema, t as getUserId, u as getListQueryParams, v as createQueryParser, w as CircuitBreaker, x as defineErrorMapper, y as handleRaw } from "../utils-DC5ycPfr.mjs";
+import { A as assertValidConfig, C as withCompensation, D as CircuitState, E as CircuitBreakerRegistry, M as validateResourceConfig, N as simpleEqualityMatcher, O as createCircuitBreaker, S as defineCompensation, T as CircuitBreakerError, _ as ArcQueryParser, a as bareListResponse, b as defineGuard, c as errorDetailSchema, d as keysetListResponse, f as listResponse, g as responses, h as queryParams, i as aggregateListResponse, j as formatValidationErrors, k as createCircuitBreakerRegistry, l as getDefaultCrudSchemas, m as paginationSchema, n as createStateMachine, o as deleteResponse, p as offsetListResponse, r as scheduleBackground, s as errorContractSchema, t as getUserId, u as getListQueryParams, v as createQueryParser, w as CircuitBreaker, x as defineErrorMapper, y as handleRaw } from "../utils-DPXZnZUx.mjs";
 import { a as toJsonSchema, i as isZodSchema, n as convertRouteSchema, r as isJsonSchema, t as convertOpenApiSchemas } from "../schemaConverter-De34B1ZG.mjs";
 import { t as hasEvents } from "../typeGuards-BzkXkvVv.mjs";
 export { ArcError, ArcQueryParser, CircuitBreaker, CircuitBreakerError, CircuitBreakerRegistry, CircuitState, ConflictError, ForbiddenError, NotFoundError, OrgAccessDeniedError, OrgRequiredError, RateLimitError, ServiceUnavailableError, UnauthorizedError, ValidationError, aggregateListResponse, assertValidConfig, bareListResponse, convertOpenApiSchemas, convertRouteSchema, createCircuitBreaker, createCircuitBreakerRegistry, createDomainError, createError, createQueryParser, createStateMachine, defineCompensation, defineErrorMapper, defineGuard, deleteResponse, errorContractSchema, errorDetailSchema, formatValidationErrors, getDefaultCrudSchemas, getListQueryParams, getUserId, handleRaw, hasEvents, isArcError, isJsonSchema, isZodSchema, keysetListResponse, listResponse, offsetListResponse, paginationSchema, queryParams, responses, scheduleBackground, simpleEqualityMatcher, toJsonSchema, validateResourceConfig, withCompensation };

package/dist/{utils-DC5ycPfr.mjs → utils-DPXZnZUx.mjs}

@@ -142,7 +142,10 @@ function validateResourceConfig(config, options = {}) {
 			suggestion: `Change to "${config.prefix.slice(0, -1)}"`
 		});
 	}
-	if (config.routes) validateRoutes(config.routes, errors);
+	if (config.routes) {
+		validateRoutes(config.routes, errors);
+		validateRouteCrudCollisions(config, errors);
+	}
 	return {
 		valid: errors.length === 0,
 		errors,
@@ -210,6 +213,71 @@ function validatePresetOptions(preset, warnings) {
 		suggestion: validOptions.length > 0 ? `Valid options: ${validOptions.join(", ")}` : `Preset "${preset.name}" has no configurable options`
 	});
 }
+/**
+* Detect collisions between user-declared `routes:` entries and the
+* auto-CRUD route table that `createCrudRouter` will register.
+*
+* Without this check, a custom `POST /` on the same prefix as auto-CRUD's
+* `create` boots fine through `defineResource()` and only blows up at
+* `app.register()` time with Fastify's opaque `FST_ERR_DUPLICATED_ROUTE`.
+* That error doesn't mention `disabledRoutes` and doesn't distinguish
+* "you collided with auto-CRUD" from "you collided with yourself" — so
+* the consumer has to grep arc's source to discover the fix.
+*
+* We surface the fix in the error message, naming the conflicting op
+* and the literal line to add.
+*
+* Honored config:
+*   - `disableDefaultRoutes: true` → no auto-CRUD, no collisions possible
+*   - `disabledRoutes: ['create']` → that op's path is free for custom use
+*   - `updateMethod: 'PUT' | 'both'` → update slot covers PUT/PATCH accordingly
+*/
+function validateRouteCrudCollisions(config, errors) {
+	if (config.disableDefaultRoutes) return;
+	if (!config.routes || config.routes.length === 0) return;
+	const updateMethod = config.updateMethod ?? "PATCH";
+	const updateMethods = updateMethod === "both" ? ["PUT", "PATCH"] : [updateMethod];
+	const disabled = new Set(config.disabledRoutes ?? []);
+	const crudTable = [
+		{
+			op: "list",
+			method: "GET",
+			path: "/"
+		},
+		{
+			op: "get",
+			method: "GET",
+			path: "/:id"
+		},
+		{
+			op: "create",
+			method: "POST",
+			path: "/"
+		},
+		...updateMethods.map((m) => ({
+			op: "update",
+			method: m,
+			path: "/:id"
+		})),
+		{
+			op: "delete",
+			method: "DELETE",
+			path: "/:id"
+		}
+	];
+	for (const [i, route] of config.routes.entries()) {
+		if (!route.method || !route.path) continue;
+		for (const crud of crudTable) {
+			if (disabled.has(crud.op)) continue;
+			if (route.method !== crud.method || route.path !== crud.path) continue;
+			errors.push({
+				field: `routes[${i}]`,
+				message: `Route ${route.method} ${route.path} collides with auto-CRUD "${crud.op}"`,
+				suggestion: `Add \`disabledRoutes: ['${crud.op}']\` to suppress the auto-CRUD route, or move your custom handler to a different path. Set \`disableDefaultRoutes: true\` to disable all auto-CRUD on this resource.`
+			});
+		}
+	}
+}
 function validateRoutes(routes, errors) {
 	const validMethods = [
 		"GET",