@classytic/arc 2.18.2 → 2.18.4

package/dist/integrations/index.d.mts

@@ -1,7 +1,7 @@
-import { c as WebSocketClient, l as WebSocketMessage, u as WebSocketPluginOptions } from "../websocket-BZMUP7Gr.mjs";
+import { c as WebSocketClient, l as WebSocketMessage, u as WebSocketPluginOptions } from "../websocket-BFBT5rH-.mjs";
 import { EventGatewayOptions } from "./event-gateway.mjs";
 import { JobDefinition, JobDispatchOptions, JobDispatcher, JobMeta, JobsPluginOptions, QueueStats } from "./jobs.mjs";
-import { c as McpAuthResult, d as PromptDefinition, g as ToolDefinition, h as ToolContext, l as McpPluginOptions, m as ToolAnnotations, n as CallToolResult, o as CrudOperation, r as CreateMcpServerConfig, t as BetterAuthHandler, u as McpResourceConfig } from "../types-DH-7WO64.mjs";
+import { c as McpAuthResult, d as PromptDefinition, g as ToolDefinition, h as ToolContext, l as McpPluginOptions, m as ToolAnnotations, n as CallToolResult, o as CrudOperation, r as CreateMcpServerConfig, t as BetterAuthHandler, u as McpResourceConfig } from "../types-BWBcb88c.mjs";
 import { StreamlinePluginOptions, WorkflowLike, WorkflowRunLike } from "./streamline.mjs";
 import { WebhookDeliveryRecord, WebhookManager, WebhookPluginOptions, WebhookStore, WebhookSubscription } from "./webhooks.mjs";
 export { type BetterAuthHandler, type CallToolResult, type CreateMcpServerConfig, type CrudOperation, type EventGatewayOptions, type JobDefinition, type JobDispatchOptions, type JobDispatcher, type JobMeta, type JobsPluginOptions, type McpAuthResult, type McpPluginOptions, type McpResourceConfig, type PromptDefinition, type QueueStats, type StreamlinePluginOptions, type ToolAnnotations, type ToolContext, type ToolDefinition, type WebSocketClient, type WebSocketMessage, type WebSocketPluginOptions, type WebhookDeliveryRecord, type WebhookManager, type WebhookPluginOptions, type WebhookStore, type WebhookSubscription, type WorkflowLike, type WorkflowRunLike };

package/dist/integrations/jobs.mjs

@@ -40,6 +40,68 @@ var Semaphore = class {
 		else this.available++;
 	}
 };
+/**
+* Whether an existing schedule matches the currently configured repeat spec.
+*
+* BullMQ keys repeatable schedules by `name:jobId:endDate:tz:(pattern|every)`
+* — exactly these fields determine schedule identity, so they are exactly
+* what we compare. `limit` is intentionally NOT compared: it isn't part of
+* the key, so a changed limit upserts in place and never strands a stale
+* schedule.
+*/
+function repeatSpecMatches(record, spec) {
+	if ((record.pattern ?? void 0) !== spec.pattern) return false;
+	if ((record.every == null ? void 0 : Number(record.every)) !== spec.every) return false;
+	if ((record.tz ?? void 0) !== spec.tz) return false;
+	if ((record.endDate == null ? void 0 : record.endDate) !== (spec.endDate == null ? void 0 : new Date(spec.endDate).getTime())) return false;
+	return true;
+}
+/**
+* Remove repeatable schedules left behind by a previous deploy whose repeat
+* spec no longer matches the current `JobDefinition.repeat`.
+*
+* BullMQ keys repeatable schedules by a hash of their repeat options, so
+* re-adding a job with a CHANGED pattern/every/tz/endDate creates a NEW
+* schedule while the old one keeps firing — the job double-fires after every
+* repeat-config change. This reconciles at plugin registration:
+*
+*   - Only schedulers whose `name` equals the registered job's name are
+*     candidates — foreign/unknown schedulers are never touched.
+*   - A scheduler matching the current spec is kept (the subsequent
+*     `queue.add` upserts it in place, preserving its timing state).
+*   - Fail-open: any error logs a warning and never blocks boot — this is
+*     boot-time hygiene, not a correctness gate.
+*
+* Uses the modern `getJobSchedulers()` / `removeJobScheduler()` API (BullMQ
+* 5.x job schedulers) and falls back to the deprecated `getRepeatableJobs()`
+* / `removeRepeatableByKey()` pair on older clients. When neither API exists
+* the step is skipped entirely.
+*/
+async function removeStaleRepeatSchedulers(queue, jobName, spec, log) {
+	const q = queue;
+	const list = typeof q.getJobSchedulers === "function" ? q.getJobSchedulers.bind(q) : typeof q.getRepeatableJobs === "function" ? q.getRepeatableJobs.bind(q) : null;
+	const remove = typeof q.removeJobScheduler === "function" ? q.removeJobScheduler.bind(q) : typeof q.removeRepeatableByKey === "function" ? q.removeRepeatableByKey.bind(q) : null;
+	if (!list || !remove) return;
+	try {
+		const existing = await list();
+		for (const record of existing) {
+			if (!record || record.name !== jobName) continue;
+			if (repeatSpecMatches(record, spec)) continue;
+			await remove(record.key);
+			log.warn({
+				job: jobName,
+				schedulerKey: record.key,
+				stalePattern: record.pattern ?? void 0,
+				staleEvery: record.every ?? void 0
+			}, `[arc/jobs] Removed stale repeatable schedule for '${jobName}' — repeat config changed since last deploy`);
+		}
+	} catch (err) {
+		log.warn({
+			err,
+			job: jobName
+		}, `[arc/jobs] Failed to reconcile repeatable schedules for '${jobName}' — continuing (boot-time hygiene only)`);
+	}
+}
 const jobsPluginImpl = async (fastify, options) => {
 	const { connection, jobs, prefix = "/jobs", bridgeEvents = true, defaults = {} } = options;
 	let Queue;
@@ -78,6 +140,7 @@ const jobsPluginImpl = async (fastify, options) => {
 				...job.repeat.endDate ? { endDate: job.repeat.endDate } : {},
 				...job.repeat.limit != null ? { limit: job.repeat.limit } : {}
 			};
+			await removeStaleRepeatSchedulers(queue, queueName, repeatOpts, fastify.log);
 			await queue.add(queueName, {}, {
 				repeat: repeatOpts,
 				removeOnComplete: defaults.removeOnComplete ?? 100,
@@ -193,6 +256,8 @@ const jobsPluginImpl = async (fastify, options) => {
 		workers.set(queueName, worker);
 	}
 	const JOB_PAYLOAD_WARN_BYTES = 100 * 1024;
+	const jobDefsByName = /* @__PURE__ */ new Map();
+	for (const job of jobs) if (!jobDefsByName.has(job.name)) jobDefsByName.set(job.name, job);
 	const dispatcher = {
 		async dispatch(name, data, opts = {}) {
 			const queue = queues.get(name);
@@ -205,7 +270,7 @@ const jobsPluginImpl = async (fastify, options) => {
 					limit: JOB_PAYLOAD_WARN_BYTES
 				}, `[arc/jobs] Large job payload — prefer passing IDs and reloading in the handler`);
 			} catch {}
-			const jobDef = jobs.find((j) => j.name === name);
+			const jobDef = jobDefsByName.get(name);
 			return { jobId: (await queue.add(name, data, {
 				delay: opts.delay,
 				priority: opts.priority,

package/dist/integrations/mcp/index.d.mts

@@ -1,7 +1,7 @@
-import { V as ResourceDefinition, bt as IRequestContext, yt as IControllerResponse } from "../../index-C000faom.mjs";
-import { i as RequestScope } from "../../types-CfapW2t8.mjs";
-import { c as PermissionCheck } from "../../fields-DqZLp5d6.mjs";
-import { a as CrudDescriptionOverride, c as McpAuthResult, d as PromptDefinition, f as PromptResult, g as ToolDefinition, h as ToolContext, i as CrudDescriptionMeta, l as McpPluginOptions, m as ToolAnnotations, n as CallToolResult, o as CrudOperation, p as SessionEntry, r as CreateMcpServerConfig, s as McpAuthResolver, t as BetterAuthHandler, u as McpResourceConfig } from "../../types-DH-7WO64.mjs";
+import { V as ResourceDefinition, bt as IRequestContext, yt as IControllerResponse } from "../../index-QYma8mdC.mjs";
+import { i as RequestScope } from "../../types-BJwJN2Pg.mjs";
+import { c as PermissionCheck } from "../../fields-CKLrhyOb.mjs";
+import { a as CrudDescriptionOverride, c as McpAuthResult, d as PromptDefinition, f as PromptResult, g as ToolDefinition, h as ToolContext, i as CrudDescriptionMeta, l as McpPluginOptions, m as ToolAnnotations, n as CallToolResult, o as CrudOperation, p as SessionEntry, r as CreateMcpServerConfig, s as McpAuthResolver, t as BetterAuthHandler, u as McpResourceConfig } from "../../types-BWBcb88c.mjs";
 import { ErrorContract } from "@classytic/repo-core/errors";
 import { FastifyPluginAsync } from "fastify";
 import { z } from "zod";

package/dist/integrations/mcp/index.mjs

@@ -1,4 +1,4 @@
-import { a as defaultCrudDescription, c as mcpHandlerAdapter, d as toCallToolResult, f as toCallToolSuccess, h as resolveToolCollisions, i as fieldRulesToZod, l as permissionDeniedResult, m as createMcpServer, n as mcpPlugin, o as resolveCrudDescription, p as buildRequestContext, r as resourceToTools, s as invokeController, t as filterResourcesForMcp, u as toCallToolError } from "../../mcpPlugin-BrepZ0cV.mjs";
+import { a as defaultCrudDescription, c as mcpHandlerAdapter, d as toCallToolResult, f as toCallToolSuccess, h as resolveToolCollisions, i as fieldRulesToZod, l as permissionDeniedResult, m as createMcpServer, n as mcpPlugin, o as resolveCrudDescription, p as buildRequestContext, r as resourceToTools, s as invokeController, t as filterResourcesForMcp, u as toCallToolError } from "../../mcpPlugin-CzKdt3B8.mjs";
 //#region src/integrations/mcp/defineTool.ts
 /**
 * Define a type-safe MCP tool.

package/dist/integrations/mcp/testing.d.mts

@@ -1,4 +1,4 @@
-import { c as McpAuthResult, l as McpPluginOptions } from "../../types-DH-7WO64.mjs";
+import { c as McpAuthResult, l as McpPluginOptions } from "../../types-BWBcb88c.mjs";
 
 //#region src/integrations/mcp/testing.d.ts
 interface TestMcpClientOptions {

package/dist/integrations/mcp/testing.mjs

@@ -1,4 +1,4 @@
-import { m as createMcpServer, r as resourceToTools, t as filterResourcesForMcp } from "../../mcpPlugin-BrepZ0cV.mjs";
+import { m as createMcpServer, r as resourceToTools, t as filterResourcesForMcp } from "../../mcpPlugin-CzKdt3B8.mjs";
 //#region src/integrations/mcp/testing.ts
 /**
 * @classytic/arc/mcp/testing — MCP Test Utilities

package/dist/integrations/streamline.d.mts

@@ -232,6 +232,21 @@ interface StreamlinePluginOptions {
  * because streamline extended its bus.
  */
 declare const STREAMLINE_BUS_EVENTS: readonly ["step:started", "step:completed", "step:failed", "step:waiting", "step:skipped", "step:retry-scheduled", "step:compensated", "workflow:started", "workflow:completed", "workflow:failed", "workflow:waiting", "workflow:resumed", "workflow:cancelled", "workflow:recovered", "workflow:retry", "workflow:compensating", "engine:error", "scheduler:error", "scheduler:circuit-open"];
+/**
+ * Non-durable streaming frames from streamline >= 2.6's `ctx.stream(frame)`
+ * (LLM tokens, percent-complete, live previews).
+ *
+ * Delivered on the SSE endpoint ONLY — deliberately excluded from
+ * `STREAMLINE_BUS_EVENTS` / `bridgeBusEvents` because frames are
+ * high-frequency, at-most-once UI traffic, not domain events: republishing
+ * every token onto arc's Redis/Kafka transport would flood it. Subscribers
+ * that genuinely want frames on the transport can bridge
+ * `streamline:step.stream` from streamline's own arc-shape transport.
+ *
+ * On streamline < 2.6 the subscription is a structural no-op (the bus never
+ * emits the event) — no version gate needed.
+ */
+declare const STREAMLINE_STREAM_EVENTS: readonly ["step:stream"];
 /**
  * Workflow events that should auto-close an SSE stream when observed.
  * Recovered / waiting / resumed / retry / compensating are NOT terminal —
@@ -255,4 +270,4 @@ declare const TERMINAL_RUN_STATUSES: Set<string>;
  */
 declare const streamlinePlugin: FastifyPluginAsync<StreamlinePluginOptions>;
 //#endregion
-export { STREAMLINE_BUS_EVENTS, STREAMLINE_FAILURE_CODES, STREAMLINE_TERMINAL_EVENTS, StreamlinePluginOptions, TERMINAL_RUN_STATUSES, WorkflowLike, WorkflowRunLike, WorkflowStartOptions, streamlinePlugin };
+export { STREAMLINE_BUS_EVENTS, STREAMLINE_FAILURE_CODES, STREAMLINE_STREAM_EVENTS, STREAMLINE_TERMINAL_EVENTS, StreamlinePluginOptions, TERMINAL_RUN_STATUSES, WorkflowLike, WorkflowRunLike, WorkflowStartOptions, streamlinePlugin };

package/dist/integrations/streamline.mjs

@@ -49,6 +49,21 @@ const STREAMLINE_BUS_EVENTS = [
 	"scheduler:circuit-open"
 ];
 /**
+* Non-durable streaming frames from streamline >= 2.6's `ctx.stream(frame)`
+* (LLM tokens, percent-complete, live previews).
+*
+* Delivered on the SSE endpoint ONLY — deliberately excluded from
+* `STREAMLINE_BUS_EVENTS` / `bridgeBusEvents` because frames are
+* high-frequency, at-most-once UI traffic, not domain events: republishing
+* every token onto arc's Redis/Kafka transport would flood it. Subscribers
+* that genuinely want frames on the transport can bridge
+* `streamline:step.stream` from streamline's own arc-shape transport.
+*
+* On streamline < 2.6 the subscription is a structural no-op (the bus never
+* emits the event) — no version gate needed.
+*/
+const STREAMLINE_STREAM_EVENTS = ["step:stream"];
+/**
 * Workflow events that should auto-close an SSE stream when observed.
 * Recovered / waiting / resumed / retry / compensating are NOT terminal —
 * the run is still active after them.
@@ -99,6 +114,14 @@ const streamlinePluginImpl = async (fastify, options) => {
 	};
 	for (const [id, wf] of registry) {
 		const routePrefix = `${routeScope}/${id}`;
+		const visibilityRepo = wf.container?.repository;
+		const visibilityGetById = visibilityRepo?.getById?.bind(visibilityRepo);
+		const assertRunVisible = async (request, runId) => {
+			if (!visibilityGetById) return;
+			const tenantOpts = resolveTenantOpts(request);
+			if (tenantOpts.bypassTenant || tenantOpts.tenantId === void 0) return;
+			if (!await visibilityGetById(runId, { tenantId: tenantOpts.tenantId })) throw new NotFoundError("Workflow run", runId);
+		};
 		fastify.post(`${routePrefix}/start`, { preHandler: authPreHandler }, async (request, reply) => {
 			if (!await checkPerm("start", request)) throw new ForbiddenError();
 			const body = request.body;
@@ -170,6 +193,7 @@ const streamlinePluginImpl = async (fastify, options) => {
 		fastify.get(`${routePrefix}/runs/:runId`, { preHandler: authPreHandler }, async (request, _reply) => {
 			if (!await checkPerm("get", request)) throw new ForbiddenError();
 			const { runId } = request.params;
+			await assertRunVisible(request, runId);
 			const run = await wf.get(runId);
 			if (!run) throw new NotFoundError("Workflow run", runId);
 			return run;
@@ -177,6 +201,7 @@ const streamlinePluginImpl = async (fastify, options) => {
 		fastify.post(`${routePrefix}/runs/:runId/resume`, { preHandler: authPreHandler }, async (request, _reply) => {
 			if (!await checkPerm("resume", request)) throw new ForbiddenError();
 			const { runId } = request.params;
+			await assertRunVisible(request, runId);
 			const { payload } = request.body ?? {};
 			const run = await wf.resume(runId, payload);
 			if (bridgeEvents && fastify.events?.publish) try {
@@ -196,6 +221,7 @@ const streamlinePluginImpl = async (fastify, options) => {
 		fastify.post(`${routePrefix}/runs/:runId/cancel`, { preHandler: authPreHandler }, async (request, _reply) => {
 			if (!await checkPerm("cancel", request)) throw new ForbiddenError();
 			const { runId } = request.params;
+			await assertRunVisible(request, runId);
 			const run = await wf.cancel(runId);
 			if (bridgeEvents && fastify.events?.publish) try {
 				await fastify.events.publish(`workflow.${id}.cancelled`, {
@@ -212,6 +238,7 @@ const streamlinePluginImpl = async (fastify, options) => {
 		});
 		fastify.post(`${routePrefix}/runs/:runId/execute`, { preHandler: authPreHandler }, async (request, _reply) => {
 			const { runId } = request.params;
+			await assertRunVisible(request, runId);
 			return await wf.engine.execute(runId);
 		});
 		const deleteRepo = wf.container?.repository;
@@ -235,16 +262,19 @@ const streamlinePluginImpl = async (fastify, options) => {
 		if (wf.engine.waitFor) fastify.get(`${routePrefix}/runs/:runId/wait`, { preHandler: authPreHandler }, async (request, _reply) => {
 			if (!await checkPerm("get", request)) throw new ForbiddenError();
 			const { runId } = request.params;
+			await assertRunVisible(request, runId);
 			const { timeout } = request.query ?? {};
 			const timeoutMs = timeout ? Number.parseInt(timeout, 10) : 3e4;
 			return await wf.engine.waitFor?.(runId, { timeout: Math.min(timeoutMs, 12e4) });
 		});
 		if (wf.engine.pause) fastify.post(`${routePrefix}/runs/:runId/pause`, { preHandler: authPreHandler }, async (request, _reply) => {
 			const { runId } = request.params;
+			await assertRunVisible(request, runId);
 			return await wf.engine.pause?.(runId);
 		});
 		if (wf.engine.rewindTo) fastify.post(`${routePrefix}/runs/:runId/rewind`, { preHandler: authPreHandler }, async (request, _reply) => {
 			const { runId } = request.params;
+			await assertRunVisible(request, runId);
 			const { stepId } = request.body ?? {};
 			if (!stepId) throw createError(400, "stepId is required");
 			return await wf.engine.rewindTo?.(runId, stepId);
@@ -266,6 +296,7 @@ const streamlinePluginImpl = async (fastify, options) => {
 		if (enableStreaming && wf.container?.eventBus) fastify.get(`${routePrefix}/runs/:runId/stream`, { preHandler: authPreHandler }, async (request, reply) => {
 			if (!await checkPerm("get", request)) throw new ForbiddenError();
 			const { runId } = request.params;
+			await assertRunVisible(request, runId);
 			const run = await wf.get(runId);
 			if (!run) throw new NotFoundError("Workflow run", runId);
 			reply.raw.writeHead(200, {
@@ -312,7 +343,7 @@ const streamlinePluginImpl = async (fastify, options) => {
 				}
 			}, 15e3);
 			heartbeat.unref?.();
-			for (const eventName of STREAMLINE_BUS_EVENTS) {
+			for (const eventName of [...STREAMLINE_BUS_EVENTS, ...STREAMLINE_STREAM_EVENTS]) {
 				const fn = (payload) => {
 					const p = payload;
 					if (typeof p?.runId === "string" && p.runId !== runId) return;
@@ -367,4 +398,4 @@ const streamlinePlugin = fp(streamlinePluginImpl, {
 	fastify: "5.x"
 });
 //#endregion
-export { STREAMLINE_BUS_EVENTS, STREAMLINE_FAILURE_CODES, STREAMLINE_TERMINAL_EVENTS, TERMINAL_RUN_STATUSES, streamlinePlugin };
+export { STREAMLINE_BUS_EVENTS, STREAMLINE_FAILURE_CODES, STREAMLINE_STREAM_EVENTS, STREAMLINE_TERMINAL_EVENTS, TERMINAL_RUN_STATUSES, streamlinePlugin };

package/dist/integrations/websocket-pushref-redis.d.mts

@@ -1,4 +1,4 @@
-import { c as SerializedEntry, i as Principal, n as FencedWriteOutcome, s as PushRefStore, t as EnvelopeSnapshot } from "../pushref-registry-Bq_-EVsC.mjs";
+import { c as SerializedEntry, i as Principal, n as FencedWriteOutcome, s as PushRefStore, t as EnvelopeSnapshot } from "../pushref-registry-Dqclzjy7.mjs";
 
 //#region src/integrations/websocket-pushref-redis.d.ts
 /**

package/dist/integrations/websocket-redis.d.mts

@@ -1,4 +1,4 @@
-import { f as WebSocketAdapter } from "../websocket-BZMUP7Gr.mjs";
+import { f as WebSocketAdapter } from "../websocket-BFBT5rH-.mjs";
 
 //#region src/integrations/websocket-redis.d.ts
 interface RedisLike {

package/dist/integrations/websocket.d.mts

@@ -1,3 +1,3 @@
-import { a as GeoRoomOptions, c as WebSocketClient, d as LocalWebSocketAdapter, f as WebSocketAdapter, i as GeoRoom, l as WebSocketMessage, n as GeoPoint, o as RoomManager, r as GeoPublishOpts, s as AuthResult, t as websocketPlugin, u as WebSocketPluginOptions } from "../websocket-BZMUP7Gr.mjs";
-import { a as PushRefRegistry, c as SerializedEntry, i as Principal, o as PushRefRegistryOptions, r as MemoryPushRefStore, s as PushRefStore } from "../pushref-registry-Bq_-EVsC.mjs";
+import { a as GeoRoomOptions, c as WebSocketClient, d as LocalWebSocketAdapter, f as WebSocketAdapter, i as GeoRoom, l as WebSocketMessage, n as GeoPoint, o as RoomManager, r as GeoPublishOpts, s as AuthResult, t as websocketPlugin, u as WebSocketPluginOptions } from "../websocket-BFBT5rH-.mjs";
+import { a as PushRefRegistry, c as SerializedEntry, i as Principal, o as PushRefRegistryOptions, r as MemoryPushRefStore, s as PushRefStore } from "../pushref-registry-Dqclzjy7.mjs";
 export { AuthResult, GeoPoint, GeoPublishOpts, GeoRoom, GeoRoomOptions, LocalWebSocketAdapter, MemoryPushRefStore, Principal, PushRefRegistry, PushRefRegistryOptions, PushRefStore, RoomManager, SerializedEntry, WebSocketAdapter, WebSocketClient, WebSocketMessage, WebSocketPluginOptions, websocketPlugin };

package/dist/{loadResourcesFromEntry-DCjYMgfC.mjs → loadResourcesFromEntry-XHNeUWpu.mjs}

@@ -1,4 +1,4 @@
-import { t as ResourceRegistry } from "./ResourceRegistry-CzSzVK1m.mjs";
+import { t as ResourceRegistry } from "./ResourceRegistry-CWmOggxS.mjs";
 import { resolve } from "node:path";
 import { pathToFileURL } from "node:url";
 //#region src/cli/utils/loadResourcesFromEntry.ts

package/dist/{mcpPlugin-BrepZ0cV.mjs → mcpPlugin-CzKdt3B8.mjs}

@@ -1,13 +1,13 @@
 import { p as isArcError, t as ArcError } from "./errors-j4aJm1Wg.mjs";
-import { t as BaseController } from "./BaseController-DPwe89qs.mjs";
-import { L as normalizePermissionResult } from "./permissions-B1Qy55fg.mjs";
-import { t as executePipeline } from "./pipe-DiCyvyPN.mjs";
-import { f as resolvePipelineSteps } from "./routerShared-Dl0A77Ba.mjs";
-import { r as validateAggregations } from "./validate-DFIP2VrM.mjs";
-import { n as executeAggregation } from "./buildHandler-C_SkBNF3.mjs";
-import { t as pluralize } from "./pluralize-B9M8xvy-.mjs";
-import { t as resolveActionPermission } from "./actionPermissions-Bjmvn7Eb.mjs";
-import { i as shouldRejectAdditionalProperties, r as schemaIRToZodShape, t as normalizeSchemaIR } from "./schemaIR-Bk6Tns82.mjs";
+import { t as BaseController } from "./BaseController-B-uXzf6I.mjs";
+import { N as normalizePermissionResult } from "./permissions-3uzwkbQt.mjs";
+import { t as executePipeline } from "./pipe-9Tl-OAus.mjs";
+import { r as resolvePipelineSteps } from "./pipeline-D4sqiokR.mjs";
+import { n as validateAggregations } from "./validate-0__MuUsK.mjs";
+import { n as executeAggregation } from "./buildHandler-Cvrc2p7r.mjs";
+import { t as pluralize } from "./pluralize-BxdUl2P4.mjs";
+import { t as resolveActionPermission } from "./actionPermissions-CX9QIMTd.mjs";
+import { i as shouldRejectAdditionalProperties, r as schemaIRToZodShape, t as normalizeSchemaIR } from "./schemaIR-CE6USIRi.mjs";
 import { createHash, randomUUID } from "node:crypto";
 import { isHttpError, toErrorContract } from "@classytic/repo-core/errors";
 import fp from "fastify-plugin";

package/dist/middleware/index.d.mts

@@ -1,4 +1,4 @@
-import { I as MiddlewareHandler, L as RequestWithExtras, Q as MiddlewareConfig } from "../index-C000faom.mjs";
+import { I as MiddlewareHandler, L as RequestWithExtras, Q as MiddlewareConfig } from "../index-QYma8mdC.mjs";
 import { RouteHandlerMethod } from "fastify";
 
 //#region src/middleware/middleware.d.ts

package/dist/middleware/index.mjs

@@ -1,5 +1,5 @@
 import { t as CRUD_OPERATIONS } from "../constants-TrJVIJl0.mjs";
-import { t as multipartBody } from "../multipartBody-VjVWmZl8.mjs";
+import { t as multipartBody } from "../multipartBody-709YcXi1.mjs";
 //#region src/middleware/middleware.ts
 /**
 * Named Middleware — Priority-based, conditional middleware execution.

package/dist/{openapi-CLZx9bwS.mjs → openapi-ButnRyOM.mjs}

@@ -1,8 +1,8 @@
-import { t as getUserRoles } from "./types-DV9WDfeg.mjs";
-import { n as convertRouteSchema } from "./schemaConverter-De34B1ZG.mjs";
-import { t as pluralize } from "./pluralize-B9M8xvy-.mjs";
-import { t as resolveActionPermission } from "./actionPermissions-Bjmvn7Eb.mjs";
-import { t as buildActionBodySchema } from "./createActionRouter-CRaIwB5S.mjs";
+import { t as getUserRoles } from "./types-D57iXYb8.mjs";
+import { n as convertRouteSchema } from "./schemaConverter-DatAaVNj.mjs";
+import { t as pluralize } from "./pluralize-BxdUl2P4.mjs";
+import { t as resolveActionPermission } from "./actionPermissions-CX9QIMTd.mjs";
+import { t as buildActionBodySchema } from "./createActionRouter-DGCCp-kP.mjs";
 import fp from "fastify-plugin";
 //#region src/docs/openapi/canonical-schemas.ts
 /**

package/dist/permissions/index.d.mts

@@ -1,3 +1,3 @@
-import { a as applyFieldWritePermissions, c as PermissionCheck, d as UserBase, f as getUserRoles, i as applyFieldReadPermissions, l as PermissionContext, n as FieldPermissionMap, o as fields, p as normalizeRoles, r as FieldPermissionType, s as resolveEffectiveRoles, t as FieldPermission, u as PermissionResult } from "../fields-DqZLp5d6.mjs";
-import { A as requireRoles, C as allOf, D as not, E as denyAll, F as RequireAgentScopeOptions, I as RequireMandateOptions, L as requireAgentScope, M as when, N as applyPermissionResult, O as requireAuth, P as normalizePermissionResult, R as requireDPoP, S as createOrgPermissions, T as anyOf, _ as ConnectEventsOptions, a as presets_d_exports, b as PermissionEventBus, c as readOnly, d as requireOrgRole, f as requireScopeContext, g as createRoleHierarchy, h as RoleHierarchy, i as ownerWithAdminBypass, j as roles, k as requireOwnership, l as requireOrgInScope, m as requireTeamMembership, n as authenticated, o as publicRead, p as requireServiceScope, r as fullPublic, s as publicReadAdminWrite, t as adminOnly, u as requireOrgMembership, v as DynamicPermissionMatrix, w as allowPublic, x as createDynamicPermissionMatrix, y as DynamicPermissionMatrixConfig, z as requireMandate } from "../index-3L-adFJO.mjs";
+import { a as applyFieldWritePermissions, c as PermissionCheck, d as UserBase, f as getUserRoles, i as applyFieldReadPermissions, l as PermissionContext, n as FieldPermissionMap, o as fields, p as normalizeRoles, r as FieldPermissionType, s as resolveEffectiveRoles, t as FieldPermission, u as PermissionResult } from "../fields-CKLrhyOb.mjs";
+import { A as requireRoles, C as allOf, D as not, E as denyAll, F as RequireAgentScopeOptions, I as RequireMandateOptions, L as requireAgentScope, M as when, N as applyPermissionResult, O as requireAuth, P as normalizePermissionResult, R as requireDPoP, S as createOrgPermissions, T as anyOf, _ as ConnectEventsOptions, a as presets_d_exports, b as PermissionEventBus, c as readOnly, d as requireOrgRole, f as requireScopeContext, g as createRoleHierarchy, h as RoleHierarchy, i as ownerWithAdminBypass, j as roles, k as requireOwnership, l as requireOrgInScope, m as requireTeamMembership, n as authenticated, o as publicRead, p as requireServiceScope, r as fullPublic, s as publicReadAdminWrite, t as adminOnly, u as requireOrgMembership, v as DynamicPermissionMatrix, w as allowPublic, x as createDynamicPermissionMatrix, y as DynamicPermissionMatrixConfig, z as requireMandate } from "../index-vcWUGkwf.mjs";
 export { ConnectEventsOptions, DynamicPermissionMatrix, DynamicPermissionMatrixConfig, FieldPermission, FieldPermissionMap, FieldPermissionType, PermissionCheck, PermissionContext, PermissionEventBus, PermissionResult, RequireAgentScopeOptions, RequireMandateOptions, RoleHierarchy, UserBase, adminOnly, allOf, allowPublic, anyOf, applyFieldReadPermissions, applyFieldWritePermissions, applyPermissionResult, authenticated, createDynamicPermissionMatrix, createOrgPermissions, createRoleHierarchy, denyAll, fields, fullPublic, getUserRoles, normalizePermissionResult, normalizeRoles, not, ownerWithAdminBypass, presets_d_exports as permissions, publicRead, publicReadAdminWrite, readOnly, requireAgentScope, requireAuth, requireDPoP, requireMandate, requireOrgInScope, requireOrgMembership, requireOrgRole, requireOwnership, requireRoles, requireScopeContext, requireServiceScope, requireTeamMembership, resolveEffectiveRoles, roles, when };

package/dist/permissions/index.mjs

@@ -1,3 +1,3 @@
-import { A as requireMandate, C as requireAuth, D as when, E as roles, F as applyPermissionResult, L as normalizePermissionResult, M as applyFieldWritePermissions, N as fields, O as requireAgentScope, P as resolveEffectiveRoles, S as not, T as requireRoles, _ as requireTeamMembership, a as presets_exports, b as anyOf, c as readOnly, d as createOrgPermissions, f as requireOrgInScope, g as requireServiceScope, h as requireScopeContext, i as ownerWithAdminBypass, j as applyFieldReadPermissions, k as requireDPoP, l as createRoleHierarchy, m as requireOrgRole, n as authenticated, o as publicRead, p as requireOrgMembership, r as fullPublic, s as publicReadAdminWrite, t as adminOnly, u as createDynamicPermissionMatrix, v as allOf, w as requireOwnership, x as denyAll, y as allowPublic } from "../permissions-B1Qy55fg.mjs";
-import { n as normalizeRoles, t as getUserRoles } from "../types-DV9WDfeg.mjs";
+import { A as requireMandate, C as requireAuth, D as when, E as roles, F as applyFieldWritePermissions, I as fields, L as resolveEffectiveRoles, N as normalizePermissionResult, O as requireAgentScope, P as applyFieldReadPermissions, S as not, T as requireRoles, _ as requireTeamMembership, a as presets_exports, b as anyOf, c as readOnly, d as createOrgPermissions, f as requireOrgInScope, g as requireServiceScope, h as requireScopeContext, i as ownerWithAdminBypass, j as applyPermissionResult, k as requireDPoP, l as createRoleHierarchy, m as requireOrgRole, n as authenticated, o as publicRead, p as requireOrgMembership, r as fullPublic, s as publicReadAdminWrite, t as adminOnly, u as createDynamicPermissionMatrix, v as allOf, w as requireOwnership, x as denyAll, y as allowPublic } from "../permissions-3uzwkbQt.mjs";
+import { n as normalizeRoles, t as getUserRoles } from "../types-D57iXYb8.mjs";
 export { adminOnly, allOf, allowPublic, anyOf, applyFieldReadPermissions, applyFieldWritePermissions, applyPermissionResult, authenticated, createDynamicPermissionMatrix, createOrgPermissions, createRoleHierarchy, denyAll, fields, fullPublic, getUserRoles, normalizePermissionResult, normalizeRoles, not, ownerWithAdminBypass, presets_exports as permissions, publicRead, publicReadAdminWrite, readOnly, requireAgentScope, requireAuth, requireDPoP, requireMandate, requireOrgInScope, requireOrgMembership, requireOrgRole, requireOwnership, requireRoles, requireScopeContext, requireServiceScope, requireTeamMembership, resolveEffectiveRoles, roles, when };

package/dist/{permissions-B1Qy55fg.mjs → permissions-3uzwkbQt.mjs}

@@ -1,104 +1,8 @@
 import { t as __exportAll } from "./chunk-BpYLSNr0.mjs";
 import { C as isService, S as isOrgInScope, a as getDPoPJkt, b as isElevated, d as getScopeContext, f as getScopeContextMap, g as getUserId, m as getTeamId, o as getMandate, p as getServiceScopes, u as getRequestScope, v as hasOrgAccess, x as isMember } from "./types-Bi0r0vjG.mjs";
-import { t as getUserRoles } from "./types-DV9WDfeg.mjs";
-import { t as MemoryCacheStore } from "./memory-QOLe11D5.mjs";
+import { t as getUserRoles } from "./types-D57iXYb8.mjs";
+import { t as MemoryCacheStore } from "./memory-TdTHCS9-.mjs";
 import { randomUUID } from "node:crypto";
-//#region src/permissions/applyPermissionResult.ts
-/**
-* Normalize a permission check return value (`boolean | PermissionResult`)
-* into a concrete `PermissionResult`. This is the only place in Arc that
-* promotes booleans to results — keeps the type narrowing honest everywhere.
-*/
-function normalizePermissionResult(result) {
-	if (typeof result === "boolean") return { granted: result };
-	return result;
-}
-/**
-* Apply a granted `PermissionResult` to a Fastify request — merges row-level
-* filters into `_policyFilters` and conditionally installs the scope.
-*
-* **Scope install rule:** only writes `scope` when the current request scope
-* is absent or `public`. This prevents downgrading an already-authenticated
-* request (e.g. Better Auth set `member`, then a permission check returns a
-* narrower `service` scope — the original `member` wins because it came from
-* a more authoritative source).
-*
-* Safe to call with a non-granted result — it simply no-ops. Callers should
-* still check `result.granted` and send an error response before reaching here,
-* but this function tolerates the misuse defensively.
-*/
-function applyPermissionResult(result, request) {
-	if (!result.granted) return;
-	if (result.filters) request._policyFilters = {
-		...request._policyFilters ?? {},
-		...result.filters
-	};
-	if (result.scope) {
-		const current = request.scope;
-		if (!current || current.kind === "public") request.scope = result.scope;
-	}
-}
-/**
-* Max length of a `PermissionResult.reason` string before we fall back to the
-* generic default message. Upstream checks can return arbitrary strings; we
-* clamp to prevent accidental leakage of internal diagnostics or oversized
-* payloads via the 4xx response body.
-*/
-const MAX_DENIAL_REASON_LENGTH = 100;
-/**
-* End-to-end evaluator: runs the permission check, catches throws, normalizes
-* the result, sends a 401/403 response on denial, and applies side-effects on
-* grant. Returns `true` if the caller should continue, `false` if a response
-* has been sent and the caller should return.
-*
-* This is the single source of truth for the 5-step sequence shared by the
-* CRUD router, action router, and MCP tool handlers:
-*
-*   1. `try { await check(ctx) } catch { reply 403 }`
-*   2. `normalizePermissionResult(result)`
-*   3. If denied → 401 (no user) or 403 (user) with clamped reason
-*   4. If granted → `applyPermissionResult` (filters + scope)
-*   5. Return true/false so the caller knows whether to keep going
-*
-* Context construction, pre-check auth gating, and success-path handler
-* invocation stay at the callsite — those are genuinely different per router
-* and don't belong here.
-*
-* @returns `true` if authorized (caller continues), `false` if a response was sent
-*/
-async function evaluateAndApplyPermission(check, context, request, reply, opts) {
-	let result;
-	try {
-		result = await check(context);
-	} catch (err) {
-		request.log?.warn?.({
-			err,
-			resource: context.resource,
-			action: context.action
-		}, "Permission check threw");
-		reply.code(403).send({
-			code: "arc.forbidden",
-			message: "Permission denied",
-			status: 403
-		});
-		return false;
-	}
-	const permResult = normalizePermissionResult(result);
-	if (!permResult.granted) {
-		const defaultMsg = opts?.defaultDenialMessage?.(context.user) ?? (context.user ? "Permission denied" : "Authentication required");
-		const reason = permResult.reason && permResult.reason.length <= MAX_DENIAL_REASON_LENGTH ? permResult.reason : defaultMsg;
-		const status = context.user ? 403 : 401;
-		reply.code(status).send({
-			code: context.user ? "arc.forbidden" : "arc.unauthorized",
-			message: reason,
-			status
-		});
-		return false;
-	}
-	applyPermissionResult(permResult, request);
-	return true;
-}
-//#endregion
 //#region src/permissions/fields.ts
 /**
 * Field-Level Permissions
@@ -266,6 +170,102 @@ function resolveEffectiveRoles(userRoles, orgRoles) {
 	return [...new Set([...userRoles, ...orgRoles])];
 }
 //#endregion
+//#region src/permissions/applyPermissionResult.ts
+/**
+* Normalize a permission check return value (`boolean | PermissionResult`)
+* into a concrete `PermissionResult`. This is the only place in Arc that
+* promotes booleans to results — keeps the type narrowing honest everywhere.
+*/
+function normalizePermissionResult(result) {
+	if (typeof result === "boolean") return { granted: result };
+	return result;
+}
+/**
+* Apply a granted `PermissionResult` to a Fastify request — merges row-level
+* filters into `_policyFilters` and conditionally installs the scope.
+*
+* **Scope install rule:** only writes `scope` when the current request scope
+* is absent or `public`. This prevents downgrading an already-authenticated
+* request (e.g. Better Auth set `member`, then a permission check returns a
+* narrower `service` scope — the original `member` wins because it came from
+* a more authoritative source).
+*
+* Safe to call with a non-granted result — it simply no-ops. Callers should
+* still check `result.granted` and send an error response before reaching here,
+* but this function tolerates the misuse defensively.
+*/
+function applyPermissionResult(result, request) {
+	if (!result.granted) return;
+	if (result.filters) request._policyFilters = {
+		...request._policyFilters ?? {},
+		...result.filters
+	};
+	if (result.scope) {
+		const current = request.scope;
+		if (!current || current.kind === "public") request.scope = result.scope;
+	}
+}
+/**
+* Max length of a `PermissionResult.reason` string before we fall back to the
+* generic default message. Upstream checks can return arbitrary strings; we
+* clamp to prevent accidental leakage of internal diagnostics or oversized
+* payloads via the 4xx response body.
+*/
+const MAX_DENIAL_REASON_LENGTH = 100;
+/**
+* End-to-end evaluator: runs the permission check, catches throws, normalizes
+* the result, sends a 401/403 response on denial, and applies side-effects on
+* grant. Returns `true` if the caller should continue, `false` if a response
+* has been sent and the caller should return.
+*
+* This is the single source of truth for the 5-step sequence shared by the
+* CRUD router, action router, and MCP tool handlers:
+*
+*   1. `try { await check(ctx) } catch { reply 403 }`
+*   2. `normalizePermissionResult(result)`
+*   3. If denied → 401 (no user) or 403 (user) with clamped reason
+*   4. If granted → `applyPermissionResult` (filters + scope)
+*   5. Return true/false so the caller knows whether to keep going
+*
+* Context construction, pre-check auth gating, and success-path handler
+* invocation stay at the callsite — those are genuinely different per router
+* and don't belong here.
+*
+* @returns `true` if authorized (caller continues), `false` if a response was sent
+*/
+async function evaluateAndApplyPermission(check, context, request, reply, opts) {
+	let result;
+	try {
+		result = await check(context);
+	} catch (err) {
+		request.log?.warn?.({
+			err,
+			resource: context.resource,
+			action: context.action
+		}, "Permission check threw");
+		reply.code(403).send({
+			code: "arc.forbidden",
+			message: "Permission denied",
+			status: 403
+		});
+		return false;
+	}
+	const permResult = normalizePermissionResult(result);
+	if (!permResult.granted) {
+		const defaultMsg = opts?.defaultDenialMessage?.(context.user) ?? (context.user ? "Permission denied" : "Authentication required");
+		const reason = permResult.reason && permResult.reason.length <= MAX_DENIAL_REASON_LENGTH ? permResult.reason : defaultMsg;
+		const status = context.user ? 403 : 401;
+		reply.code(status).send({
+			code: context.user ? "arc.forbidden" : "arc.unauthorized",
+			message: reason,
+			status
+		});
+		return false;
+	}
+	applyPermissionResult(permResult, request);
+	return true;
+}
+//#endregion
 //#region src/permissions/agent.ts
 /**
 * Agent-Auth Permission Helpers — DPoP + capability mandates for AI-agent flows
@@ -1490,4 +1490,4 @@ function readOnly(overrides) {
 	}, overrides);
 }
 //#endregion
-export { requireMandate as A, requireAuth as C, when as D, roles as E, applyPermissionResult as F, evaluateAndApplyPermission as I, normalizePermissionResult as L, applyFieldWritePermissions as M, fields as N, requireAgentScope as O, resolveEffectiveRoles as P, not as S, requireRoles as T, requireTeamMembership as _, presets_exports as a, anyOf as b, readOnly as c, createOrgPermissions as d, requireOrgInScope as f, requireServiceScope as g, requireScopeContext as h, ownerWithAdminBypass as i, applyFieldReadPermissions as j, requireDPoP as k, createRoleHierarchy as l, requireOrgRole as m, authenticated as n, publicRead as o, requireOrgMembership as p, fullPublic as r, publicReadAdminWrite as s, adminOnly as t, createDynamicPermissionMatrix as u, allOf as v, requireOwnership as w, denyAll as x, allowPublic as y };
+export { requireMandate as A, requireAuth as C, when as D, roles as E, applyFieldWritePermissions as F, fields as I, resolveEffectiveRoles as L, evaluateAndApplyPermission as M, normalizePermissionResult as N, requireAgentScope as O, applyFieldReadPermissions as P, not as S, requireRoles as T, requireTeamMembership as _, presets_exports as a, anyOf as b, readOnly as c, createOrgPermissions as d, requireOrgInScope as f, requireServiceScope as g, requireScopeContext as h, ownerWithAdminBypass as i, applyPermissionResult as j, requireDPoP as k, createRoleHierarchy as l, requireOrgRole as m, authenticated as n, publicRead as o, requireOrgMembership as p, fullPublic as r, publicReadAdminWrite as s, adminOnly as t, createDynamicPermissionMatrix as u, allOf as v, requireOwnership as w, denyAll as x, allowPublic as y };

package/dist/pipeline/index.d.mts

@@ -1,4 +1,4 @@
-import { Ft as OperationFilter, It as PipelineConfig, Lt as PipelineContext, Mt as Guard, Nt as Interceptor, Pt as NextFunction, Rt as PipelineStep, yt as IControllerResponse, zt as Transform } from "../index-C000faom.mjs";
+import { Ft as OperationFilter, It as PipelineConfig, Lt as PipelineContext, Mt as Guard, Nt as Interceptor, Pt as NextFunction, Rt as PipelineStep, yt as IControllerResponse, zt as Transform } from "../index-QYma8mdC.mjs";
 
 //#region src/pipeline/guard.d.ts
 interface GuardOptions {

package/dist/pipeline/index.mjs

@@ -1,4 +1,4 @@
-import { n as pipe, t as executePipeline } from "../pipe-DiCyvyPN.mjs";
+import { n as pipe, t as executePipeline } from "../pipe-9Tl-OAus.mjs";
 //#region src/pipeline/guard.ts
 /**
 * Create a named guard.