@classytic/arc 2.18.3 → 2.18.5

package/dist/{init-DSsdRfk9.mjs → init-Bqpt1Hxf.mjs}

@@ -178,13 +178,14 @@ import { getAuth } from './auth.js';
  */
 
 ${typeImport}import config from '#config/index.js';
-import { createApp, loadResources } from '@classytic/arc/factory';
-${betterAuthImport}
+import { createApp } from '@classytic/arc/factory';
+${config.adapter === "mongokit" ? "import mongoose from 'mongoose';\n" : ""}${betterAuthImport}
 // App-specific plugins
 import { registerPlugins } from '#plugins/index.js';
 
-// Resource registry
-import { resources, registerResources } from '#resources/index.js';
+// Resource registry — createApp({ resources }) mounts each one under the
+// resourcePrefix below; no manual registration loop needed.
+import { resources } from '#resources/index.js';
 
 /**
  * Create a fully configured app instance
@@ -209,7 +210,20 @@ export async function createAppInstance()${ts ? ": Promise<FastifyInstance>" : "
     trustProxy: true,
     arcPlugins: {
       metrics: config.env === 'production',  // Prometheus /_metrics endpoint
-    },
+${config.adapter === "mongokit" ? `      // Readiness probe (/_health/ready) reports DOWN until Mongo connects —
+      // K8s / load balancers hold traffic until the app can actually serve.
+      health: {
+        checks: [
+          { name: 'mongodb', check: () => mongoose.connection.readyState === 1 },
+        ],
+      },
+` : ""}    },${config.adapter === "mongokit" ? `
+    // Drain the DB connection on shutdown. Arc's gracefulShutdown (on by
+    // default) calls app.close() on SIGTERM/SIGINT, which runs this hook —
+    // no manual signal handlers needed.
+    onClose: async () => {
+      await mongoose.disconnect();
+    },` : ""}
   });
 
   // Register app-specific plugins (explicit dependency injection)
@@ -274,7 +288,7 @@ for (const file of candidates) {
   if (existsSync(file)) {
     // override: false means earlier files take priority (first loaded wins)
     dotenv.config({ path: file, override: false });
-    loaded.push(file.split(/[\\\\/]/).pop()${ts ? "!" : ""});
+    loaded.push(file.split(/[\\\\/]/).pop() ?? file);
   }
 }
 
@@ -917,7 +931,7 @@ ${config.adapter === "mongokit" ? `    await mongoose.connection.collection('use
 //#region src/cli/commands/init/dependency-plan.ts
 const SCAFFOLD_DEP_VERSIONS = {
 	core: {
-		"@classytic/arc": "^2.18.3",
+		"@classytic/arc": "^2.18.5",
 		"@classytic/primitives": "^0.6.0",
 		"@classytic/repo-core": "^0.6.0",
 		"@fastify/cors": "^11.2.0",
@@ -926,7 +940,8 @@ const SCAFFOLD_DEP_VERSIONS = {
 		"@fastify/sensible": "^6.0.4",
 		"@fastify/under-pressure": "^9.0.3",
 		dotenv: "^17.4.2",
-		fastify: "^5.8.5"
+		fastify: "^5.8.5",
+		zod: "^4.3.6"
 	},
 	authJwt: {
 		"@fastify/jwt": "^10.1.0",
@@ -938,10 +953,11 @@ const SCAFFOLD_DEP_VERSIONS = {
 	},
 	authBetterAuthApiKey: { "@better-auth/api-key": "^1.6.11" },
 	adapterMongokit: {
-		"@classytic/mongokit": "^3.16.0",
+		"@classytic/mongokit": "^3.16.1",
 		mongoose: "^9.6.2"
 	},
 	devCommon: {
+		"@biomejs/biome": "^2.4.15",
 		"mongodb-memory-server": "^11.1.0",
 		"pino-pretty": "^13.1.3",
 		vitest: "^4.1.7"
@@ -992,49 +1008,45 @@ function sortByKey(record) {
 */
 function packageJsonTemplate(config) {
 	const { dependencies, devDependencies } = resolveScaffoldDependencies(config);
-	const scripts = config.typescript ? config.edge ? {
-		dev: "tsx watch src/index.ts",
-		build: "tsc",
-		start: "node dist/index.js",
-		deploy: "wrangler deploy",
-		"deploy:dev": "wrangler dev",
-		test: "vitest run",
-		"test:watch": "vitest"
-	} : {
-		dev: "tsx watch src/index.ts",
-		build: "tsc",
-		start: "node dist/index.js",
-		test: "vitest run",
-		"test:watch": "vitest"
-	} : config.edge ? {
-		dev: "node --watch src/index.js",
-		start: "node src/index.js",
-		deploy: "wrangler deploy",
-		"deploy:dev": "wrangler dev",
-		test: "vitest run",
-		"test:watch": "vitest"
-	} : {
-		dev: "node --watch src/index.js",
-		start: "node src/index.js",
+	const qualityScripts = {
+		lint: "biome check src/",
+		format: "biome check --write src/",
+		...config.typescript ? { typecheck: "tsc --noEmit" } : {},
 		test: "vitest run",
 		"test:watch": "vitest"
 	};
+	const scripts = {
+		...config.typescript ? config.edge ? {
+			dev: "tsx watch src/index.ts",
+			build: "tsc",
+			start: "node dist/index.js",
+			deploy: "wrangler deploy",
+			"deploy:dev": "wrangler dev"
+		} : {
+			dev: "tsx watch src/index.ts",
+			build: "tsc",
+			start: "node dist/index.js"
+		} : config.edge ? {
+			dev: "node --watch src/index.js",
+			start: "node src/index.js",
+			deploy: "wrangler deploy",
+			"deploy:dev": "wrangler dev"
+		} : {
+			dev: "node --watch src/index.js",
+			start: "node src/index.js"
+		},
+		...qualityScripts
+	};
 	const imports = config.typescript ? {
 		"#config/*": "./dist/config/*",
 		"#shared/*": "./dist/shared/*",
 		"#resources/*": "./dist/resources/*",
-		"#plugins/*": "./dist/plugins/*",
-		"#services/*": "./dist/services/*",
-		"#lib/*": "./dist/lib/*",
-		"#utils/*": "./dist/utils/*"
+		"#plugins/*": "./dist/plugins/*"
 	} : {
 		"#config/*": "./src/config/*",
 		"#shared/*": "./src/shared/*",
 		"#resources/*": "./src/resources/*",
-		"#plugins/*": "./src/plugins/*",
-		"#services/*": "./src/services/*",
-		"#lib/*": "./src/lib/*",
-		"#utils/*": "./src/utils/*"
+		"#plugins/*": "./src/plugins/*"
 	};
 	return JSON.stringify({
 		name: config.name,
@@ -1079,7 +1091,7 @@ function tsconfigTemplate() {
 function vitestConfigTemplate(config) {
 	const srcDir = config.typescript ? "./src" : "./src";
 	return `import { defineConfig } from 'vitest/config';
-import { resolve } from 'path';
+import { resolve } from 'node:path';
 
 export default defineConfig({
   test: {
@@ -1104,6 +1116,7 @@ node_modules/
 # Build
 dist/
 *.js.map
+*.tsbuildinfo
 
 # Environment (local overrides — never commit secrets)
 .env.local
@@ -1129,6 +1142,68 @@ npm-debug.log*
 coverage/
 `;
 }
+/**
+* Biome config — formatter + linter in one. Mirrors arc's own defaults
+* (2-space indent, double quotes, organize-imports on) so generated code
+* and the framework share a house style. `npm run lint` / `npm run format`.
+*/
+function biomeTemplate() {
+	return `${JSON.stringify({
+		$schema: "https://biomejs.dev/schemas/2.4.15/schema.json",
+		vcs: {
+			enabled: true,
+			clientKind: "git",
+			useIgnoreFile: true
+		},
+		files: { ignoreUnknown: true },
+		formatter: {
+			enabled: true,
+			indentStyle: "space",
+			indentWidth: 2,
+			lineWidth: 100
+		},
+		assist: { actions: { source: { organizeImports: "on" } } },
+		linter: {
+			enabled: true,
+			rules: { recommended: true }
+		},
+		javascript: { formatter: {
+			quoteStyle: "double",
+			semicolons: "always"
+		} }
+	}, null, 2)}\n`;
+}
+/**
+* GitHub Actions CI — install, typecheck, lint, test on push + PR.
+* The quality gate every team re-adds by hand; ship it wired.
+*/
+function ciWorkflowTemplate(config) {
+	return `name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 22
+          cache: npm
+      - name: Install
+        run: npm ci
+${config.typescript ? `      - name: Typecheck
+        run: npm run typecheck
+` : ""}      - name: Lint
+        run: npm run lint
+      - name: Test
+        run: npm test
+`;
+}
 function envExampleTemplate(config) {
 	let content = `# Environment Files (Next.js-style priority):
 #   .env.local         → machine-specific overrides (gitignored)
@@ -1368,7 +1443,80 @@ docker-compose up -d
 }
 function configTemplate(config) {
 	const ts = config.typescript;
-	const authTypeBlock = config.auth === "better-auth" ? `
+	const isBetterAuth = config.auth === "better-auth";
+	const isMongo = config.adapter === "mongokit";
+	const isMulti = config.tenant === "multi";
+	const authSchemaFields = isBetterAuth ? `  BETTER_AUTH_SECRET: z
+    .string()
+    .min(32, 'BETTER_AUTH_SECRET must be at least 32 characters')
+    .default('dev-secret-change-in-production-min-32-chars'),
+  FRONTEND_URL: z.string().url().default('http://localhost:3000'),` : `  JWT_SECRET: z
+    .string()
+    .min(32, 'JWT_SECRET must be at least 32 characters')
+    .default('dev-secret-change-in-production-min-32'),
+  JWT_EXPIRES_IN: z.string().default('7d'),`;
+	const dbSchemaField = isMongo ? `\n  MONGODB_URI: z.string().min(1).default('mongodb://localhost:27017/${config.name}'),` : "";
+	const orgSchemaField = isMulti ? `\n  ORG_HEADER: z.string().default('x-organization-id'),` : "";
+	const secretVar = isBetterAuth ? "BETTER_AUTH_SECRET" : "JWT_SECRET";
+	const prodGuard = `  .superRefine((env, ctx) => {
+    if (env.NODE_ENV === 'production' && env.${secretVar}.startsWith('dev-secret')) {
+      ctx.addIssue({
+        code: 'custom',
+        path: ['${secretVar}'],
+        message:
+          'Set a strong ${secretVar} in production — the bundled dev default is not allowed.',
+      });
+    }
+  })`;
+	return `/**
+ * Application Configuration
+ *
+ * Environment variables are validated with Zod at startup. A missing or
+ * malformed var fails fast here with a clear message — instead of surfacing
+ * as a confusing runtime error on the first request. ENV files are loaded
+ * by config/env.${ts ? "ts" : "js"} (imported first in the entry points).
+ */
+
+import { z } from 'zod';
+
+// Normalize NODE_ENV to the three canonical values the rest of the app
+// reasons about (matches the env loader's prod/dev/test aliasing).
+const NodeEnv = z.preprocess((v) => {
+  const s = String(v ?? '').toLowerCase();
+  if (s === 'prod' || s === 'production') return 'production';
+  if (s === 'test' || s === 'qa') return 'test';
+  return 'development';
+}, z.enum(['development', 'production', 'test']));
+
+const EnvSchema = z
+  .object({
+    NODE_ENV: NodeEnv,
+    PORT: z.coerce.number().int().positive().default(8040),
+    HOST: z.string().min(1).default('0.0.0.0'),
+    CORS_ORIGINS: z.string().default('http://localhost:3000'),
+${authSchemaFields}${dbSchemaField}${orgSchemaField}
+  })
+${prodGuard};
+
+const parsed = EnvSchema.safeParse(process.env);
+if (!parsed.success) {
+  const lines = parsed.error.issues
+    .map((i) => \`  - \${i.path.join('.') || '(root)'}: \${i.message}\`)
+    .join('\\n');
+  console.error(\`Invalid environment configuration:\\n\${lines}\`);
+  process.exit(1);
+}
+
+const env = parsed.data;
+${ts ? `
+export interface AppConfig {
+  env: 'development' | 'production' | 'test';
+  isDev: boolean;
+  isProd: boolean;
+  server: {
+    port: number;
+    host: string;
+  };${isBetterAuth ? `
   betterAuth: {
     secret: string;
   };
@@ -1378,78 +1526,57 @@ function configTemplate(config) {
   jwt: {
     secret: string;
     expiresIn: string;
-  };`;
-	let typeDefinition = "";
-	if (ts) typeDefinition = `
-export interface AppConfig {
-  env: string;
-  isDev: boolean;
-  isProd: boolean;
-  server: {
-    port: number;
-    host: string;
-  };${authTypeBlock}
+  };`}
   cors: {
     origins: string[] | boolean;  // true = allow all ('*')
     methods: string[];
     allowedHeaders: string[];
     credentials: boolean;
-  };${config.adapter === "mongokit" ? `
+  };${isMongo ? `
   database: {
     uri: string;
-  };` : ""}${config.tenant === "multi" ? `
+  };` : ""}${isMulti ? `
   org: {
     header: string;
   };` : ""}
 }
-`;
-	const authConfigBlock = config.auth === "better-auth" ? `
+` : ""}
+const config${ts ? ": AppConfig" : ""} = {
+  env: env.NODE_ENV,
+  isDev: env.NODE_ENV !== 'production',
+  isProd: env.NODE_ENV === 'production',
+
+  server: {
+    port: env.PORT,
+    host: env.HOST,
+  },
+${isBetterAuth ? `
   betterAuth: {
-    secret: process.env.BETTER_AUTH_SECRET || 'dev-secret-change-in-production-min-32-chars',
+    secret: env.BETTER_AUTH_SECRET,
   },
 
   frontend: {
-    url: process.env.FRONTEND_URL || 'http://localhost:3000',
+    url: env.FRONTEND_URL,
   },` : `
   jwt: {
-    secret: process.env.JWT_SECRET || 'dev-secret-change-in-production-min-32',
-    expiresIn: process.env.JWT_EXPIRES_IN || '7d',
-  },`;
-	return `/**
- * Application Configuration
- *
- * All config is loaded from environment variables.
- * ENV file is loaded by config/env.ts (imported first in entry points).
- */
-${typeDefinition}
-const config${ts ? ": AppConfig" : ""} = {
-  env: process.env.NODE_ENV || 'development',
-  isDev: (process.env.NODE_ENV || 'development') !== 'production',
-  isProd: process.env.NODE_ENV === 'production',
-
-  server: {
-    port: parseInt(process.env.PORT || '8040', 10),
-    host: process.env.HOST || '0.0.0.0',
-  },
-${authConfigBlock}
+    secret: env.JWT_SECRET,
+    expiresIn: env.JWT_EXPIRES_IN,
+  },`}
 
   cors: {
     // '*' = allow all origins (true), otherwise comma-separated list
-    origins:
-      process.env.CORS_ORIGINS === '*'
-        ? true
-        : (process.env.CORS_ORIGINS || 'http://localhost:3000').split(','),
+    origins: env.CORS_ORIGINS === '*' ? true : env.CORS_ORIGINS.split(','),
     methods: ['GET', 'POST', 'PUT', 'PATCH', 'DELETE', 'OPTIONS'],
     allowedHeaders: ['Content-Type', 'Authorization', 'x-organization-id', 'x-request-id'],
     credentials: true,
   },
-${config.adapter === "mongokit" ? `
+${isMongo ? `
   database: {
-    uri: process.env.MONGODB_URI || 'mongodb://localhost:27017/${config.name}',
+    uri: env.MONGODB_URI,
   },
-` : ""}${config.tenant === "multi" ? `
+` : ""}${isMulti ? `
   org: {
-    header: process.env.ORG_HEADER || 'x-organization-id',
+    header: env.ORG_HEADER,
   },
 ` : ""}};
 
@@ -1842,11 +1969,14 @@ function exampleTestTemplate(config) {
 
 import { describe, it, beforeAll, afterAll } from 'vitest';
 import { createTestApp, expectArc } from '@classytic/arc/testing';
-import type { TestAppContext } from '@classytic/arc/testing';
-import { exampleResource } from '../src/resources/example/example.js';
+import type { TestAppContext${ts ? ", TestAuthProvider" : ""} } from '@classytic/arc/testing';
+import exampleResource from '../src/resources/example/example.resource.js';
 
 describe('Example Resource', () => {
   let ctx${ts ? ": TestAppContext" : ""};
+  // Narrowed once below — \`authMode: 'jwt'\` guarantees a provider, but
+  // ctx.auth is typed optional, so bind it instead of asserting at every use.
+  let auth${ts ? ": TestAuthProvider" : ""};
 
   beforeAll(async () => {
     ctx = await createTestApp({
@@ -1854,9 +1984,12 @@ describe('Example Resource', () => {
       authMode: 'jwt',
 ${config.adapter === "mongokit" ? "      connectMongoose: true,\n" : ""}    });
 
+    if (!ctx.auth) throw new Error('Test auth provider was not configured');
+    auth = ctx.auth;
+
     // Arc's permission engine reads singular user.role — string,
     // comma-separated string, or array all normalise via getUserRoles().
-    ctx.auth${ts ? "!" : ""}.register('admin', {
+    auth.register('admin', {
       user: { id: '1', role: 'admin' },
       orgId: 'org-1',
     });
@@ -1885,7 +2018,7 @@ ${config.adapter === "mongokit" ? "      connectMongoose: true,\n" : ""}    });
       const res = await ctx.app.inject({
         method: 'POST',
         url: '/examples',
-        headers: ctx.auth${ts ? "!" : ""}.as('admin').headers,
+        headers: auth.as('admin').headers,
         payload: { name: 'Test Example' },
       });
       expectArc(res).ok();
@@ -2396,22 +2529,25 @@ export default flexibleMultiTenantPreset;
 //#region src/cli/commands/init/templates/resources.ts
 function resourcesIndexTemplate(config) {
 	const ts = config.typescript;
-	const typeImport = ts ? "import type { FastifyInstance } from 'fastify';\n" : "";
-	const appType = ts ? ": FastifyInstance" : "";
-	return `/**
- * Resources Registry
- *
- * Central registry for all API resources.
- * All resources are mounted under /api prefix via Fastify scoping.
- */
-
-${typeImport}${config.auth === "jwt" ? `
+	const authImports = config.auth === "jwt" ? `
 // Auth resources (register, login, /users/me)
 import { authResource, userProfileResource } from './auth/auth.resource.js';
 ` : `
 // Auth is handled by Better Auth — routes at /api/auth/*
 // No manual auth resource needed.
-`}
+`;
+	const authResources = config.auth === "jwt" ? `  authResource,
+  userProfileResource,
+  ` : `  `;
+	return `/**
+ * Resources Registry
+ *
+ * Central array of every API resource. Passed to \`createApp({ resources })\`
+ * in app.${ts ? "ts" : "js"}, which mounts each one under the configured
+ * resourcePrefix (/api) — add a resource by importing it and listing it here.
+ */
+
+${authImports}
 // App resources
 import exampleResource from './example/example.resource.js';
 
@@ -2422,23 +2558,8 @@ import exampleResource from './example/example.resource.js';
  * All registered resources
  */
 export const resources = [
-${config.auth === "jwt" ? `  authResource,
-  userProfileResource,
-  ` : `  `}exampleResource,
+${authResources}exampleResource,
 ]${ts ? " as const" : ""};
-
-/**
- * Register all resources with the app under a common prefix.
- * Fastify scoping ensures all routes are mounted at /api/*.
- * The apiPrefix option in openApiPlugin keeps OpenAPI docs in sync.
- */
-export async function registerResources(app${appType}, prefix = '/api')${ts ? ": Promise<void>" : ""} {
-  await app.register(async (scope) => {
-    for (const resource of resources) {
-      await scope.register(resource.toPlugin());
-    }
-  }, { prefix });
-}
 `;
 }
 function sharedIndexTemplate(_config) {
@@ -2524,18 +2645,13 @@ userSchema.methods.removeOrganization = function(organizationId${ts ? ": Types.O
 userSchema.index({ 'organizations.organizationId': 1 });
 ` : "";
 	const userType = ts ? `
-const PLATFORM_ROLES = ['user', 'admin', 'superadmin'] as const;
-type PlatformRole = typeof PLATFORM_ROLES[number];
-
-/**
- * Comma-separated list of platform roles (Better Auth admin-plugin convention).
- * Single role: 'admin'. Multiple: 'admin,trainer'. Arc's permission engine
- * normalises both forms via getUserRoles() — see @classytic/arc/scope.
- */
 type User = {
   name: string;
   email: string;
   password: string;
+  // Platform role(s), Better Auth admin-plugin convention: a single role
+  // ('admin') or a comma-separated list ('admin,trainer'). Arc's permission
+  // engine normalises both forms via getUserRoles() — see @classytic/arc/scope.
   role: string;${config.tenant === "multi" ? `
   organizations: UserOrganization[];` : ""}
   resetPasswordToken?: string;
@@ -2551,7 +2667,7 @@ type UserMethods = {
 };
 
 export type UserDocument = HydratedDocument<User, UserMethods>;
-export type UserModel = Model<User, {}, UserMethods>;
+export type UserModel = Model<User, Record<string, never>, UserMethods>;
 ` : "";
 	return `/**
  * User Model
@@ -2559,7 +2675,7 @@ export type UserModel = Model<User, {}, UserMethods>;
  */
 
 import bcrypt from 'bcryptjs';
-import mongoose${ts ? ", { type HydratedDocument, type Model, type Types }" : ""} from 'mongoose';
+import mongoose${ts ? `, { type HydratedDocument, type Model${config.tenant === "multi" ? ", type Types" : ""} }` : ""} from 'mongoose';
 ${orgRoles}
 const { Schema } = mongoose;
 ${orgInterface}${userType}
@@ -2774,7 +2890,9 @@ async function createProjectStructure(projectPath, config) {
 		".gitignore": gitignoreTemplate(),
 		".env.example": envExampleTemplate(config),
 		".env.dev": envDevTemplate(config),
-		"README.md": readmeTemplate(config)
+		"README.md": readmeTemplate(config),
+		"biome.json": biomeTemplate(),
+		".github/workflows/ci.yml": ciWorkflowTemplate(config)
 	};
 	if (config.typescript) files["tsconfig.json"] = tsconfigTemplate();
 	files["vitest.config.ts"] = vitestConfigTemplate(config);
@@ -3016,6 +3134,31 @@ async function installDependencies(projectPath, _config, pm) {
 	console.log(`\nDependencies installed successfully.`);
 }
 /**
+* Normalize the freshly-scaffolded tree to Biome's house style so the
+* shipped `npm run lint` (= `biome check`) is green on first run and the
+* generated code matches the framework's formatting.
+*
+* Best-effort: runs the project-local Biome (installed as a devDep) via the
+* package manager's exec. Swallows failure — a formatting hiccup must never
+* fail `init`. Only call this when dependencies were installed (otherwise
+* there is no Biome binary to invoke).
+*/
+async function formatProject(projectPath, pm) {
+	console.log(`  Formatting project...`);
+	try {
+		await runCommand(`${getExecPrefix(pm)} biome check --write --no-errors-on-unmatched .`, projectPath);
+	} catch {}
+}
+/** Package-manager `exec` prefix for running a project-local binary. */
+function getExecPrefix(pm) {
+	switch (pm) {
+		case "pnpm": return "pnpm exec";
+		case "yarn": return "yarn";
+		case "bun": return "bunx";
+		default: return "npx";
+	}
+}
+/**
 * Get the plain `install` command for a package manager. Reads the declared
 * dependencies from the project's `package.json`.
 */
@@ -3091,6 +3234,7 @@ async function init(options = {}) {
 	if (!options.skipInstall) {
 		console.log("\n📥 Installing dependencies...\n");
 		await installDependencies(projectPath, config, packageManager);
+		await formatProject(projectPath, packageManager);
 	}
 	printSuccessMessage(config, options.skipInstall);
 }

package/dist/integrations/event-gateway.d.mts

@@ -1,5 +1,5 @@
-import { n as DomainEvent } from "../EventTransport-CaaXM5Y1.mjs";
-import { c as WebSocketClient, l as WebSocketMessage } from "../websocket-BFBT5rH-.mjs";
+import { n as DomainEvent } from "../EventTransport-IEn7Tn-Q.mjs";
+import { c as WebSocketClient, l as WebSocketMessage } from "../websocket-MlYlrYq0.mjs";
 import { FastifyPluginAsync, FastifyRequest } from "fastify";
 
 //#region src/integrations/event-gateway.d.ts

package/dist/integrations/event-gateway.mjs

@@ -4,7 +4,7 @@ const eventGatewayPluginImpl = async (fastify, opts = {}) => {
 	const { auth = true, orgScoped = false, roomPolicy, maxMessageBytes, maxSubscriptionsPerClient, authenticate } = opts;
 	if (auth && !authenticate && !fastify.hasDecorator("authenticate")) throw new Error("[arc-event-gateway] auth is true but fastify.authenticate is not registered. Register an auth plugin first, provide a custom authenticate function, or set auth: false.");
 	if (opts.sse !== false) {
-		const { default: ssePlugin } = await import("../sse-Xq8UtuQx.mjs").then((n) => n.r);
+		const { default: ssePlugin } = await import("../sse-CfUjwjDk.mjs").then((n) => n.r);
 		await fastify.register(ssePlugin, {
 			path: opts.sse?.path ?? "/events/stream",
 			requireAuth: auth,

package/dist/integrations/index.d.mts

@@ -1,7 +1,7 @@
-import { c as WebSocketClient, l as WebSocketMessage, u as WebSocketPluginOptions } from "../websocket-BFBT5rH-.mjs";
+import { c as WebSocketClient, l as WebSocketMessage, u as WebSocketPluginOptions } from "../websocket-MlYlrYq0.mjs";
 import { EventGatewayOptions } from "./event-gateway.mjs";
 import { JobDefinition, JobDispatchOptions, JobDispatcher, JobMeta, JobsPluginOptions, QueueStats } from "./jobs.mjs";
-import { c as McpAuthResult, d as PromptDefinition, g as ToolDefinition, h as ToolContext, l as McpPluginOptions, m as ToolAnnotations, n as CallToolResult, o as CrudOperation, r as CreateMcpServerConfig, t as BetterAuthHandler, u as McpResourceConfig } from "../types-BWBcb88c.mjs";
+import { c as McpAuthResult, d as PromptDefinition, g as ToolDefinition, h as ToolContext, l as McpPluginOptions, m as ToolAnnotations, n as CallToolResult, o as CrudOperation, r as CreateMcpServerConfig, t as BetterAuthHandler, u as McpResourceConfig } from "../types-D60PFwfG.mjs";
 import { StreamlinePluginOptions, WorkflowLike, WorkflowRunLike } from "./streamline.mjs";
 import { WebhookDeliveryRecord, WebhookManager, WebhookPluginOptions, WebhookStore, WebhookSubscription } from "./webhooks.mjs";
-export { type BetterAuthHandler, type CallToolResult, type CreateMcpServerConfig, type CrudOperation, type EventGatewayOptions, type JobDefinition, type JobDispatchOptions, type JobDispatcher, type JobMeta, type JobsPluginOptions, type McpAuthResult, type McpPluginOptions, type McpResourceConfig, type PromptDefinition, type QueueStats, type StreamlinePluginOptions, type ToolAnnotations, type ToolContext, type ToolDefinition, type WebSocketClient, type WebSocketMessage, type WebSocketPluginOptions, type WebhookDeliveryRecord, type WebhookManager, type WebhookPluginOptions, type WebhookStore, type WebhookSubscription, type WorkflowLike, type WorkflowRunLike };
+export type { BetterAuthHandler, CallToolResult, CreateMcpServerConfig, CrudOperation, EventGatewayOptions, JobDefinition, JobDispatchOptions, JobDispatcher, JobMeta, JobsPluginOptions, McpAuthResult, McpPluginOptions, McpResourceConfig, PromptDefinition, QueueStats, StreamlinePluginOptions, ToolAnnotations, ToolContext, ToolDefinition, WebSocketClient, WebSocketMessage, WebSocketPluginOptions, WebhookDeliveryRecord, WebhookManager, WebhookPluginOptions, WebhookStore, WebhookSubscription, WorkflowLike, WorkflowRunLike };

package/dist/integrations/mcp/index.d.mts

@@ -1,7 +1,7 @@
-import { V as ResourceDefinition, bt as IRequestContext, yt as IControllerResponse } from "../../index-QYma8mdC.mjs";
-import { i as RequestScope } from "../../types-BJwJN2Pg.mjs";
-import { c as PermissionCheck } from "../../fields-CKLrhyOb.mjs";
-import { a as CrudDescriptionOverride, c as McpAuthResult, d as PromptDefinition, f as PromptResult, g as ToolDefinition, h as ToolContext, i as CrudDescriptionMeta, l as McpPluginOptions, m as ToolAnnotations, n as CallToolResult, o as CrudOperation, p as SessionEntry, r as CreateMcpServerConfig, s as McpAuthResolver, t as BetterAuthHandler, u as McpResourceConfig } from "../../types-BWBcb88c.mjs";
+import { V as ResourceDefinition, bt as IRequestContext, yt as IControllerResponse } from "../../index-CHNQIhcb.mjs";
+import { i as RequestScope } from "../../types-LNebCoJx.mjs";
+import { c as PermissionCheck } from "../../fields-C7ahdGYf.mjs";
+import { a as CrudDescriptionOverride, c as McpAuthResult, d as PromptDefinition, f as PromptResult, g as ToolDefinition, h as ToolContext, i as CrudDescriptionMeta, l as McpPluginOptions, m as ToolAnnotations, n as CallToolResult, o as CrudOperation, p as SessionEntry, r as CreateMcpServerConfig, s as McpAuthResolver, t as BetterAuthHandler, u as McpResourceConfig } from "../../types-D60PFwfG.mjs";
 import { ErrorContract } from "@classytic/repo-core/errors";
 import { FastifyPluginAsync } from "fastify";
 import { z } from "zod";

package/dist/integrations/mcp/index.mjs

@@ -1,4 +1,4 @@
-import { a as defaultCrudDescription, c as mcpHandlerAdapter, d as toCallToolResult, f as toCallToolSuccess, h as resolveToolCollisions, i as fieldRulesToZod, l as permissionDeniedResult, m as createMcpServer, n as mcpPlugin, o as resolveCrudDescription, p as buildRequestContext, r as resourceToTools, s as invokeController, t as filterResourcesForMcp, u as toCallToolError } from "../../mcpPlugin-CzKdt3B8.mjs";
+import { a as defaultCrudDescription, c as mcpHandlerAdapter, d as toCallToolResult, f as toCallToolSuccess, h as resolveToolCollisions, i as fieldRulesToZod, l as permissionDeniedResult, m as createMcpServer, n as mcpPlugin, o as resolveCrudDescription, p as buildRequestContext, r as resourceToTools, s as invokeController, t as filterResourcesForMcp, u as toCallToolError } from "../../mcpPlugin-D1wuRD2c.mjs";
 //#region src/integrations/mcp/defineTool.ts
 /**
 * Define a type-safe MCP tool.