@classytic/arc 2.18.4 → 2.19.0

package/dist/{schemaIR-CE6USIRi.mjs → schemaIR-D1MJwqmp.mjs}

@@ -1,4 +1,4 @@
-import { a as toJsonSchema } from "./schemaConverter-DatAaVNj.mjs";
+import { a as toJsonSchema } from "./schemaConverter-U0MnO9vd.mjs";
 import { z } from "zod";
 //#region src/core/schemaIR.ts
 /**

package/dist/schemas/index.d.mts

@@ -1,6 +1,5 @@
 import { ErrorContract, ErrorDetail } from "@classytic/repo-core/errors";
 import { FastifyPluginAsyncTypebox, FastifyPluginCallbackTypebox, TypeBoxTypeProvider, TypeBoxValidatorCompiler } from "@fastify/type-provider-typebox";
-import * as _$_sinclair_typebox0 from "@sinclair/typebox";
 import { Static, TObject, TSchema, TSchema as TSchema$1, Type } from "@sinclair/typebox";
 
 //#region src/schemas/index.d.ts
@@ -18,74 +17,74 @@ import { Static, TObject, TSchema, TSchema as TSchema$1, Type } from "@sinclair/
  * variant when your endpoint never emits the others. HTTP status
  * discriminates success vs error — no `success` field.
  */
-declare function ArcListResponse<T extends TSchema$1>(itemSchema: T): _$_sinclair_typebox0.TUnion<[_$_sinclair_typebox0.TObject<{
-  method: _$_sinclair_typebox0.TLiteral<"offset">;
-  data: _$_sinclair_typebox0.TArray<T>;
-  page: _$_sinclair_typebox0.TInteger;
-  limit: _$_sinclair_typebox0.TInteger;
-  total: _$_sinclair_typebox0.TInteger;
-  pages: _$_sinclair_typebox0.TInteger;
-  hasNext: _$_sinclair_typebox0.TBoolean;
-  hasPrev: _$_sinclair_typebox0.TBoolean;
-}>, _$_sinclair_typebox0.TObject<{
-  method: _$_sinclair_typebox0.TLiteral<"keyset">;
-  data: _$_sinclair_typebox0.TArray<T>;
-  limit: _$_sinclair_typebox0.TInteger;
-  hasMore: _$_sinclair_typebox0.TBoolean;
-  next: _$_sinclair_typebox0.TUnion<[_$_sinclair_typebox0.TString, _$_sinclair_typebox0.TNull]>;
-}>, _$_sinclair_typebox0.TObject<{
-  method: _$_sinclair_typebox0.TLiteral<"aggregate">;
-  data: _$_sinclair_typebox0.TArray<T>;
-  page: _$_sinclair_typebox0.TInteger;
-  limit: _$_sinclair_typebox0.TInteger;
-  total: _$_sinclair_typebox0.TInteger;
-  pages: _$_sinclair_typebox0.TInteger;
-  hasNext: _$_sinclair_typebox0.TBoolean;
-  hasPrev: _$_sinclair_typebox0.TBoolean;
-}>, _$_sinclair_typebox0.TObject<{
-  data: _$_sinclair_typebox0.TArray<T>;
+declare function ArcListResponse<T extends TSchema$1>(itemSchema: T): import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TObject<{
+  method: import("@sinclair/typebox").TLiteral<"offset">;
+  data: import("@sinclair/typebox").TArray<T>;
+  page: import("@sinclair/typebox").TInteger;
+  limit: import("@sinclair/typebox").TInteger;
+  total: import("@sinclair/typebox").TInteger;
+  pages: import("@sinclair/typebox").TInteger;
+  hasNext: import("@sinclair/typebox").TBoolean;
+  hasPrev: import("@sinclair/typebox").TBoolean;
+}>, import("@sinclair/typebox").TObject<{
+  method: import("@sinclair/typebox").TLiteral<"keyset">;
+  data: import("@sinclair/typebox").TArray<T>;
+  limit: import("@sinclair/typebox").TInteger;
+  hasMore: import("@sinclair/typebox").TBoolean;
+  next: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TString, import("@sinclair/typebox").TNull]>;
+}>, import("@sinclair/typebox").TObject<{
+  method: import("@sinclair/typebox").TLiteral<"aggregate">;
+  data: import("@sinclair/typebox").TArray<T>;
+  page: import("@sinclair/typebox").TInteger;
+  limit: import("@sinclair/typebox").TInteger;
+  total: import("@sinclair/typebox").TInteger;
+  pages: import("@sinclair/typebox").TInteger;
+  hasNext: import("@sinclair/typebox").TBoolean;
+  hasPrev: import("@sinclair/typebox").TBoolean;
+}>, import("@sinclair/typebox").TObject<{
+  data: import("@sinclair/typebox").TArray<T>;
 }>]>;
 /** Offset variant — `{ method: 'offset', data, page, limit, total, pages, hasNext, hasPrev }`. */
-declare function ArcOffsetListResponse<T extends TSchema$1>(itemSchema: T): _$_sinclair_typebox0.TObject<{
-  method: _$_sinclair_typebox0.TLiteral<"offset">;
-  data: _$_sinclair_typebox0.TArray<T>;
-  page: _$_sinclair_typebox0.TInteger;
-  limit: _$_sinclair_typebox0.TInteger;
-  total: _$_sinclair_typebox0.TInteger;
-  pages: _$_sinclair_typebox0.TInteger;
-  hasNext: _$_sinclair_typebox0.TBoolean;
-  hasPrev: _$_sinclair_typebox0.TBoolean;
+declare function ArcOffsetListResponse<T extends TSchema$1>(itemSchema: T): import("@sinclair/typebox").TObject<{
+  method: import("@sinclair/typebox").TLiteral<"offset">;
+  data: import("@sinclair/typebox").TArray<T>;
+  page: import("@sinclair/typebox").TInteger;
+  limit: import("@sinclair/typebox").TInteger;
+  total: import("@sinclair/typebox").TInteger;
+  pages: import("@sinclair/typebox").TInteger;
+  hasNext: import("@sinclair/typebox").TBoolean;
+  hasPrev: import("@sinclair/typebox").TBoolean;
 }>;
 /** Keyset variant — `{ method: 'keyset', data, limit, hasMore, next: string | null }`. */
-declare function ArcKeysetListResponse<T extends TSchema$1>(itemSchema: T): _$_sinclair_typebox0.TObject<{
-  method: _$_sinclair_typebox0.TLiteral<"keyset">;
-  data: _$_sinclair_typebox0.TArray<T>;
-  limit: _$_sinclair_typebox0.TInteger;
-  hasMore: _$_sinclair_typebox0.TBoolean;
-  next: _$_sinclair_typebox0.TUnion<[_$_sinclair_typebox0.TString, _$_sinclair_typebox0.TNull]>;
+declare function ArcKeysetListResponse<T extends TSchema$1>(itemSchema: T): import("@sinclair/typebox").TObject<{
+  method: import("@sinclair/typebox").TLiteral<"keyset">;
+  data: import("@sinclair/typebox").TArray<T>;
+  limit: import("@sinclair/typebox").TInteger;
+  hasMore: import("@sinclair/typebox").TBoolean;
+  next: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TString, import("@sinclair/typebox").TNull]>;
 }>;
 /** Aggregate variant — `{ method: 'aggregate', ...same as offset }`. */
-declare function ArcAggregateListResponse<T extends TSchema$1>(itemSchema: T): _$_sinclair_typebox0.TObject<{
-  method: _$_sinclair_typebox0.TLiteral<"aggregate">;
-  data: _$_sinclair_typebox0.TArray<T>;
-  page: _$_sinclair_typebox0.TInteger;
-  limit: _$_sinclair_typebox0.TInteger;
-  total: _$_sinclair_typebox0.TInteger;
-  pages: _$_sinclair_typebox0.TInteger;
-  hasNext: _$_sinclair_typebox0.TBoolean;
-  hasPrev: _$_sinclair_typebox0.TBoolean;
+declare function ArcAggregateListResponse<T extends TSchema$1>(itemSchema: T): import("@sinclair/typebox").TObject<{
+  method: import("@sinclair/typebox").TLiteral<"aggregate">;
+  data: import("@sinclair/typebox").TArray<T>;
+  page: import("@sinclair/typebox").TInteger;
+  limit: import("@sinclair/typebox").TInteger;
+  total: import("@sinclair/typebox").TInteger;
+  pages: import("@sinclair/typebox").TInteger;
+  hasNext: import("@sinclair/typebox").TBoolean;
+  hasPrev: import("@sinclair/typebox").TBoolean;
 }>;
 /** Bare variant — `{ data }`, no `method` discriminant. */
-declare function ArcBareListResponse<T extends TSchema$1>(itemSchema: T): _$_sinclair_typebox0.TObject<{
-  data: _$_sinclair_typebox0.TArray<T>;
+declare function ArcBareListResponse<T extends TSchema$1>(itemSchema: T): import("@sinclair/typebox").TObject<{
+  data: import("@sinclair/typebox").TArray<T>;
 }>;
 /**
  * Delete response — `{ message, id?, soft? }` raw at the top level.
  */
-declare function ArcDeleteResponse(): _$_sinclair_typebox0.TObject<{
-  message: _$_sinclair_typebox0.TString;
-  id: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TString>;
-  soft: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TBoolean>;
+declare function ArcDeleteResponse(): import("@sinclair/typebox").TObject<{
+  message: import("@sinclair/typebox").TString;
+  id: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+  soft: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TBoolean>;
 }>;
 /**
  * Single field-scoped error detail — `Type.Unsafe<ErrorDetail>` over the
@@ -97,7 +96,7 @@ declare function ArcDeleteResponse(): _$_sinclair_typebox0.TObject<{
  * Exported standalone so hosts can embed it in custom 422 / 409 response
  * schemas.
  */
-declare function ArcErrorDetail(): _$_sinclair_typebox0.TUnsafe<ErrorDetail>;
+declare function ArcErrorDetail(): import("@sinclair/typebox").TUnsafe<ErrorDetail>;
 /**
  * Error response schema — `Type.Unsafe<ErrorContract>` over the canonical
  * JSON Schema `errorContractSchema` from `@classytic/repo-core/errors`.
@@ -106,7 +105,7 @@ declare function ArcErrorDetail(): _$_sinclair_typebox0.TUnsafe<ErrorDetail>;
  * (`errorContractSchema`) and this TypeBox helper cannot drift —
  * literally one source.
  */
-declare function ArcErrorResponse(): _$_sinclair_typebox0.TUnsafe<ErrorContract>;
+declare function ArcErrorResponse(): import("@sinclair/typebox").TUnsafe<ErrorContract>;
 /**
  * Standard pagination + sorting + filtering query parameters.
  * Matches Arc's list endpoint conventions.
@@ -122,12 +121,12 @@ declare function ArcErrorResponse(): _$_sinclair_typebox0.TUnsafe<ErrorContract>
  * projection forms at the request-validation gate even though arc passes
  * them through unchanged.
  */
-declare function ArcPaginationQuery(): _$_sinclair_typebox0.TObject<{
-  page: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TInteger>;
-  limit: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TInteger>;
-  sort: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TString>;
-  select: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TUnion<[_$_sinclair_typebox0.TString, _$_sinclair_typebox0.TArray<_$_sinclair_typebox0.TString>, _$_sinclair_typebox0.TRecord<_$_sinclair_typebox0.TString, _$_sinclair_typebox0.TUnion<[_$_sinclair_typebox0.TLiteral<0>, _$_sinclair_typebox0.TLiteral<1>]>>]>>;
-  populate: _$_sinclair_typebox0.TOptional<_$_sinclair_typebox0.TAny>;
+declare function ArcPaginationQuery(): import("@sinclair/typebox").TObject<{
+  page: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TInteger>;
+  limit: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TInteger>;
+  sort: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+  select: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TString, import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>, import("@sinclair/typebox").TRecord<import("@sinclair/typebox").TString, import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<0>, import("@sinclair/typebox").TLiteral<1>]>>]>>;
+  populate: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TAny>;
 }>;
 //#endregion
 export { ArcAggregateListResponse, ArcBareListResponse, ArcDeleteResponse, ArcErrorDetail, ArcErrorResponse, ArcKeysetListResponse, ArcListResponse, ArcOffsetListResponse, ArcPaginationQuery, type FastifyPluginAsyncTypebox, type FastifyPluginCallbackTypebox, type Static, type TObject, type TSchema, Type, type TypeBoxTypeProvider, TypeBoxValidatorCompiler };

package/dist/scope/index.d.mts

@@ -1,5 +1,5 @@
-import { C as isMember, D as requireOrgId, E as requireClientId, O as requireTeamId, S as isElevated, T as isService, _ as getTenantFromRequest, a as getAncestorOrgIds, b as hasOrgAccess, c as getMandate, d as getOrgRoles, f as getRequestScope, g as getTeamId, h as getServiceScopes, i as RequestScope, k as requireUserId, l as getOrgContext, m as getScopeContextMap, n as Mandate, o as getClientId, p as getScopeContext, r as PUBLIC_SCOPE, s as getDPoPJkt, t as AUTHENTICATED_SCOPE, u as getOrgId, v as getUserId, w as isOrgInScope, x as isAuthenticated, y as getUserRoles } from "../types-BJwJN2Pg.mjs";
-import { i as elevationPlugin, n as ElevationOptions, r as _default, t as ElevationEvent } from "../elevation-DW90z5bT.mjs";
+import { C as isMember, D as requireOrgId, E as requireClientId, O as requireTeamId, S as isElevated, T as isService, _ as getTenantFromRequest, a as getAncestorOrgIds, b as hasOrgAccess, c as getMandate, d as getOrgRoles, f as getRequestScope, g as getTeamId, h as getServiceScopes, i as RequestScope, k as requireUserId, l as getOrgContext, m as getScopeContextMap, n as Mandate, o as getClientId, p as getScopeContext, r as PUBLIC_SCOPE, s as getDPoPJkt, t as AUTHENTICATED_SCOPE, u as getOrgId, v as getUserId, w as isOrgInScope, x as isAuthenticated, y as getUserRoles } from "../types-LNebCoJx.mjs";
+import { i as elevationPlugin, n as ElevationOptions, r as _default, t as ElevationEvent } from "../elevation-xGUBq6p_.mjs";
 import { FastifyReply, FastifyRequest } from "fastify";
 
 //#region src/scope/rateLimitKey.d.ts

package/dist/scope/index.mjs

@@ -1,6 +1,6 @@
-import { C as isService, D as requireUserId, E as requireTeamId, S as isOrgInScope, T as requireOrgId, _ as getUserRoles, a as getDPoPJkt, b as isElevated, c as getOrgId, d as getScopeContext, f as getScopeContextMap, g as getUserId, h as getTenantFromRequest, i as getClientId, l as getOrgRoles, m as getTeamId, n as PUBLIC_SCOPE, o as getMandate, p as getServiceScopes, r as getAncestorOrgIds, s as getOrgContext, t as AUTHENTICATED_SCOPE, u as getRequestScope, v as hasOrgAccess, w as requireClientId, x as isMember, y as isAuthenticated } from "../types-Bi0r0vjG.mjs";
-import { n as normalizeRoles } from "../types-D57iXYb8.mjs";
-import { n as elevation_default, t as elevationPlugin } from "../elevation-BzhyVWfn.mjs";
+import { C as isService, D as requireUserId, E as requireTeamId, S as isOrgInScope, T as requireOrgId, _ as getUserRoles, a as getDPoPJkt, b as isElevated, c as getOrgId, d as getScopeContext, f as getScopeContextMap, g as getUserId, h as getTenantFromRequest, i as getClientId, l as getOrgRoles, m as getTeamId, n as PUBLIC_SCOPE, o as getMandate, p as getServiceScopes, r as getAncestorOrgIds, s as getOrgContext, t as AUTHENTICATED_SCOPE, u as getRequestScope, v as hasOrgAccess, w as requireClientId, x as isMember, y as isAuthenticated } from "../types-bHblZ9YN.mjs";
+import { n as normalizeRoles } from "../types-XTApa8b6.mjs";
+import { n as elevation_default, t as elevationPlugin } from "../elevation-COpYKt2h.mjs";
 //#region src/scope/rateLimitKey.ts
 function createTenantKeyGenerator(opts) {
 	if (opts?.strategy) return opts.strategy;

package/dist/{sse-BrY1W6U8.mjs → sse-CfUjwjDk.mjs}

@@ -1,6 +1,7 @@
-import { t as __exportAll } from "./chunk-BpYLSNr0.mjs";
+import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.mjs";
 import { arcLog } from "./logger/index.mjs";
-import { c as getOrgId, n as PUBLIC_SCOPE } from "./types-Bi0r0vjG.mjs";
+import { c as getOrgId, n as PUBLIC_SCOPE } from "./types-bHblZ9YN.mjs";
+import { a as promoteStreamTokenToHeader, n as forwardedStreamHeaders } from "./streaming-BQcW6_Kq.mjs";
 import fp from "fastify-plugin";
 //#region src/plugins/sse.ts
 var sse_exports = /* @__PURE__ */ __exportAll({
@@ -9,7 +10,7 @@ var sse_exports = /* @__PURE__ */ __exportAll({
 });
 const log = arcLog("sse");
 const ssePlugin = async (fastify, opts = {}) => {
-	const { path = "/events/stream", requireAuth = true, patterns = ["*"], heartbeat = 3e4, orgScoped = false, filter: customFilter } = opts;
+	const { path = "/events/stream", requireAuth = true, patterns = ["*"], heartbeat = 3e4, orgScoped = false, filter: customFilter, tokenQueryParam = "token" } = opts;
 	if (!fastify.hasDecorator("events")) {
 		log.warn("Events plugin (arc-events) not registered. SSE plugin will not function. Register eventPlugin before ssePlugin.");
 		return;
@@ -33,7 +34,8 @@ const ssePlugin = async (fastify, opts = {}) => {
 				"content-type": "text/event-stream",
 				"cache-control": "no-cache",
 				connection: "keep-alive",
-				"x-accel-buffering": "no"
+				"x-accel-buffering": "no",
+				...forwardedStreamHeaders(reply)
 			});
 			reply.raw.flushHeaders();
 			const unsubscribers = [];
@@ -80,6 +82,7 @@ const ssePlugin = async (fastify, opts = {}) => {
 	};
 	if (requireAuth) {
 		routeOpts.preHandler = (request, reply) => {
+			if (tokenQueryParam) promoteStreamTokenToHeader(request, tokenQueryParam);
 			const authenticate = fastify.authenticate;
 			if (typeof authenticate !== "function") {
 				reply.code(401).send({ error: "Unauthorized" });

package/dist/streaming-BQcW6_Kq.mjs

@@ -0,0 +1,162 @@
+import { Readable } from "node:stream";
+//#region src/utils/streaming.ts
+/**
+* Streaming helpers — adapters between Web `ReadableStream` producers
+* (Vercel AI SDK, OpenAI SDK, `fetch().body`, hand-built `TransformStream`s)
+* and Fastify's raw Node-stream reply.
+*
+* Why this exists: returning a `ReadableStream<UIMessageChunk>` from a
+* `streamResponse: true` arc route used to crash with
+* `chunk must be a string or Buffer` because Fastify cannot serialise
+* `UIMessageChunk` JSON objects directly. Every arc-ai host (sniffer,
+* spawn, downstream) reimplemented the same `JsonToSseTransformStream` +
+* SSE header boilerplate. `pipeUIMessageStreamToReply()` is that
+* boilerplate, owned once.
+*
+* arc stays peer-coupled to nothing: the helper accepts any
+* `ReadableStream<unknown>` and JSON-stringifies each chunk. It works
+* with `UIMessageChunk` from the AI SDK without importing it.
+*/
+/**
+* Canonical SSE headers for AI-SDK-style UI message streams.
+*
+* `x-vercel-ai-ui-message-stream: v1` is the marker the Vercel AI SDK
+* client uses to detect the v1 UI message stream protocol (vs the older
+* data stream protocol). Surfaced as a constant so hosts don't memorise it.
+*/
+const UI_MESSAGE_STREAM_HEADERS = {
+	"content-type": "text/event-stream",
+	"cache-control": "no-cache",
+	connection: "keep-alive",
+	"x-accel-buffering": "no",
+	"x-vercel-ai-ui-message-stream": "v1"
+};
+/**
+* Pipe a Web `ReadableStream` of JSON-serialisable chunks (typically
+* `UIMessageChunk` from the Vercel AI SDK) into a Fastify reply as an
+* SSE event stream.
+*
+* - Sets {@link UI_MESSAGE_STREAM_HEADERS} (or the caller's override)
+*   before the first chunk.
+* - Writes each chunk as `data: ${JSON.stringify(chunk)}\n\n`.
+* - Cancels the source and closes the reply when the client disconnects.
+* - Resolves once the stream is fully written.
+*
+* @example
+* ```ts
+* import { pipeUIMessageStreamToReply } from '@classytic/arc/utils';
+* import { streamText, convertToUIMessageStream } from 'ai';
+*
+* defineResource({
+*   name: 'chat',
+*   routes: [{
+*     method: 'POST', path: '/', streamResponse: true,
+*     handler: async (req, reply) => {
+*       const result = streamText({ model, messages: req.body.messages });
+*       await pipeUIMessageStreamToReply(reply, result.toUIMessageStream());
+*     },
+*   }],
+* });
+* ```
+*/
+async function pipeUIMessageStreamToReply(reply, stream, options = {}) {
+	const serialize = options.serialize ?? defaultSerialize;
+	const headers = options.headers ?? UI_MESSAGE_STREAM_HEADERS;
+	for (const [key, value] of Object.entries(headers)) reply.header(key, value);
+	const reader = stream.getReader();
+	let cancelled = false;
+	const onAbort = () => {
+		cancelled = true;
+		reader.cancel().catch(() => {});
+	};
+	reply.request.raw.once("close", onAbort);
+	options.signal?.addEventListener("abort", onAbort, { once: true });
+	async function* sseFrames() {
+		try {
+			while (true) {
+				const { value, done } = await reader.read();
+				if (done) break;
+				yield `data: ${serialize(value)}\n\n`;
+			}
+		} catch (err) {
+			if (!cancelled) yield `event: error\ndata: ${JSON.stringify({ message: String(err) })}\n\n`;
+		} finally {
+			reply.request.raw.removeListener("close", onAbort);
+			options.signal?.removeEventListener("abort", onAbort);
+			reader.releaseLock?.();
+		}
+	}
+	const nodeStream = Readable.from(sseFrames());
+	await reply.send(nodeStream);
+}
+function defaultSerialize(chunk) {
+	return typeof chunk === "string" ? chunk : JSON.stringify(chunk);
+}
+/**
+* Promote a stream auth token from the query string into the `Authorization`
+* header, in place, so the standard `fastify.authenticate` decorator can read it.
+*
+* Why: the browser `EventSource` (and `WebSocket`) API **cannot set request
+* headers** — there is no header channel on the constructor. So arc-next's
+* `buildStreamUrl` (bearer mode) appends the token as `?token=<jwt>` on stream
+* URLs. Server auth reads the `Authorization` header, so without this promotion
+* EVERY browser SSE/WS stream is 401 in bearer mode (cookie mode is unaffected —
+* arc-next omits the query token there and relies on the cookie).
+*
+* Safe by construction:
+* - No-op when an `Authorization` header is already present → normal `fetch`
+*   requests (which send the header) are never touched.
+* - The token still goes through full authentication downstream, so a forged or
+*   stale value simply 401s. This only relocates WHERE the bearer is read from;
+*   it grants no trust on its own.
+*
+* Parsed from `request.raw.url` (not `request.query`) so it's robust to route
+* querystring schemas that would otherwise strip an undeclared `token` param.
+*
+* @param queryParam name of the query parameter carrying the token (default `token`).
+*/
+function promoteStreamTokenToHeader(request, queryParam = "token") {
+	if (request.headers.authorization) return;
+	const url = request.raw.url ?? "";
+	const q = url.indexOf("?");
+	if (q < 0) return;
+	const token = new URLSearchParams(url.slice(q + 1)).get(queryParam);
+	if (token) request.headers.authorization = `Bearer ${token}`;
+}
+/**
+* Collect the CORS / `Vary` headers a plugin (e.g. `@fastify/cors`, whose default
+* `onRequest` hook runs BEFORE the route handler) has already set on the reply, so
+* a hijacked SSE handler that writes straight to `reply.raw.writeHead(...)` can
+* merge them onto the raw response.
+*
+* Why: `reply.hijack()` + `reply.raw.writeHead()` bypass Fastify's `onSend`
+* serialization, which is where reply-level headers reach the wire. A cross-origin
+* `EventSource` therefore receives no `Access-Control-Allow-Origin` and the browser
+* blocks the (authenticated) stream. Re-emitting the already-computed CORS headers
+* honors the host's configured policy (origin allowlist, credentials) rather than
+* re-deriving it. Returns lowercased header names suitable for `writeHead`.
+*/
+function forwardedStreamHeaders(reply) {
+	const out = {};
+	for (const [key, value] of Object.entries(reply.getHeaders())) {
+		if (value == null) continue;
+		if (key.startsWith("access-control-") || key === "vary") out[key] = Array.isArray(value) ? value.join(", ") : String(value);
+	}
+	return out;
+}
+/**
+* Heuristic — does this value look like a Web `ReadableStream`?
+*
+* Used by `createCrudRouter` to auto-pipe `streamResponse: true` handlers
+* that return a UI message stream instead of writing to `reply.raw`
+* directly. Cross-realm safe (no `instanceof`) — checks the duck shape
+* the Streams spec mandates: `getReader`, `cancel`, and the `locked`
+* getter.
+*/
+function isReadableStream(value) {
+	if (value === null || typeof value !== "object") return false;
+	const obj = value;
+	return typeof obj.getReader === "function" && typeof obj.cancel === "function" && typeof obj.locked === "boolean";
+}
+//#endregion
+export { promoteStreamTokenToHeader as a, pipeUIMessageStreamToReply as i, forwardedStreamHeaders as n, isReadableStream as r, UI_MESSAGE_STREAM_HEADERS as t };

package/dist/testing/index.d.mts

@@ -1,5 +1,5 @@
-import { Kt as AnyRecord, V as ResourceDefinition } from "../index-QYma8mdC.mjs";
-import { d as preloadResourcesAsync, r as CreateAppOptions, u as preloadResources } from "../types-WVlAVp8T.mjs";
+import { V as ResourceDefinition, qt as AnyRecord } from "../index-CUTG2Cuo.mjs";
+import { d as preloadResourcesAsync, r as CreateAppOptions, u as preloadResources } from "../types-9_wtNPsI.mjs";
 import { StorageContractSetup, StorageContractSetupResult, runStorageContract } from "./storageContract.mjs";
 import { FastifyInstance, FastifyServerOptions } from "fastify";
 import { Mock } from "vitest";
@@ -412,11 +412,11 @@ declare function createMockReply(): unknown;
  */
 declare function createMockController(repository: StandardRepo<AnyRecord>): {
   repository: StandardRepo<AnyRecord>;
-  list: Mock<(...args: any[]) => any>;
-  get: Mock<(...args: any[]) => any>;
-  create: Mock<(...args: any[]) => any>;
-  update: Mock<(...args: any[]) => any>;
-  delete: Mock<(...args: any[]) => any>;
+  list: Mock<import("@vitest/spy").Procedure>;
+  get: Mock<import("@vitest/spy").Procedure>;
+  create: Mock<import("@vitest/spy").Procedure>;
+  update: Mock<import("@vitest/spy").Procedure>;
+  delete: Mock<import("@vitest/spy").Procedure>;
 };
 /**
  * Create mock data factory

package/dist/testing/index.mjs

@@ -1,5 +1,5 @@
-import { t as CRUD_OPERATIONS } from "../constants-TrJVIJl0.mjs";
-import { n as preloadResourcesAsync, t as preloadResources } from "../preloadResources-B-j-iqo-.mjs";
+import { t as CRUD_OPERATIONS } from "../constants-gaEeMlz-.mjs";
+import { n as preloadResourcesAsync, t as preloadResources } from "../preloadResources-CHw3_oA_.mjs";
 import { runStorageContract } from "./storageContract.mjs";
 import Fastify from "fastify";
 import { afterAll, describe, expect, it, vi } from "vitest";
@@ -1046,7 +1046,7 @@ function pickDefaultAuth(authMode, callerAuth) {
 	};
 }
 async function createTestApp(options = {}) {
-	const { createApp } = await import("../createApp-J1iPXY9p.mjs").then((n) => n.r);
+	const { createApp } = await import("../createApp--703hQE1.mjs").then((n) => n.r);
 	const { resources = [], db = "in-memory", connectMongoose = false, authMode = "jwt", defaultOrgId, plugins, auth: callerAuth, ...appOptions } = options;
 	let dbHandle;
 	let dbUri;

package/dist/testing/storageContract.d.mts

@@ -1,4 +1,4 @@
-import { t as Storage } from "../storage-C5q8fuEt.mjs";
+import { t as Storage } from "../storage-Co_PQpeQ.mjs";
 
 //#region src/testing/storageContract.d.ts
 interface StorageContractSetupResult {

package/dist/types/index.d.mts

@@ -1,5 +1,5 @@
-import { $ as OnTenantDeleteConfig, A as RequestIdOptions, Bt as AuthHelpers, C as RequestContext, D as HealthCheck, E as GracefulShutdownOptions, F as FastifyWithDecorators, G as ActionsMap, Gt as TokenPair, H as ActionDefinition, Ht as Authenticator, I as MiddlewareHandler, J as CrudRouteKey, Jt as ArcRequest, K as ArcFieldRule, Kt as AnyRecord, L as RequestWithExtras, M as EventsDecorator, N as FastifyRequestExtras, O as HealthOptions, P as FastifyWithAuth, Pn as BaseControllerOptions, Q as MiddlewareConfig, Qt as UserOrganization, S as QueryParserInterface, T as CrudRouterOptions, U as ActionEntry, Ut as AuthenticatorContext, Vt as AuthPluginOptions, W as ActionHandlerFn, Wt as JwtContext, X as EventDefinition, Xt as ObjectId, Y as CrudSchemas, Yt as JWTPayload, Z as FieldRule, Zt as UserLike, _ as ControllerQueryOptions, _t as FastifyHandler, a as InferAdapterDoc, at as ResolvedTenantPurge, b as ParsedQuery, bt as IRequestContext, c as TypedController, ct as ResourceHookContext, d as PaginationResult, dt as RouteDefinition, et as OpenApiSchemas, f as IntrospectionData, ft as RouteMcpConfig, g as ArcInternalMetadata, gt as ControllerLike, h as ResourceMetadata, ht as ControllerHandler, i as ValidationResult, it as RateLimitConfig, j as ArcDecorator, k as IntrospectionPluginOptions, l as TypedRepository, lt as ResourceHooks, m as RegistryStats, mt as RouteSchemaOptions, n as ConfigError, nt as PresetHook, o as InferDocType, ot as ResourceCacheConfig, p as RegistryEntry, pt as RouteMethod, q as CrudController, qt as ApiResponse, r as ValidateOptions, rt as PresetResult, s as InferResourceDoc, st as ResourceConfig, t as RouteHandlerMethod, tt as PresetFunction, u as TypedResourceConfig, ut as ResourcePermissions, v as LookupOption, vt as IController, w as ServiceContext, x as PopulateOption, xt as RouteHandler, y as OwnershipCheck, yt as IControllerResponse } from "../index-QYma8mdC.mjs";
-import { i as RequestScope } from "../types-BJwJN2Pg.mjs";
-import { c as PermissionCheck, d as UserBase, l as PermissionContext, u as PermissionResult } from "../fields-CKLrhyOb.mjs";
-import { n as ElevationOptions, t as ElevationEvent } from "../elevation-DW90z5bT.mjs";
-export { ActionDefinition, ActionEntry, ActionHandlerFn, ActionsMap, AnyRecord, ApiResponse, ArcDecorator, ArcFieldRule, ArcInternalMetadata, ArcRequest, AuthHelpers, AuthPluginOptions, Authenticator, AuthenticatorContext, BaseControllerOptions, ConfigError, ControllerHandler, ControllerLike, ControllerQueryOptions, CrudController, CrudRouteKey, CrudRouterOptions, CrudSchemas, ElevationEvent, ElevationOptions, EventDefinition, EventsDecorator, FastifyHandler, FastifyRequestExtras, FastifyWithAuth, FastifyWithDecorators, FieldRule, GracefulShutdownOptions, HealthCheck, HealthOptions, IController, IControllerResponse, IRequestContext, InferAdapterDoc, InferDocType, InferResourceDoc, IntrospectionData, IntrospectionPluginOptions, JWTPayload, JwtContext, LookupOption, MiddlewareConfig, MiddlewareHandler, ObjectId, OnTenantDeleteConfig, OpenApiSchemas, OwnershipCheck, PaginationResult, ParsedQuery, PermissionCheck, PermissionContext, PermissionResult, PopulateOption, PresetFunction, PresetHook, PresetResult, QueryParserInterface, RateLimitConfig, RegistryEntry, RegistryStats, RequestContext, RequestIdOptions, RequestScope, RequestWithExtras, ResolvedTenantPurge, ResourceCacheConfig, ResourceConfig, ResourceHookContext, ResourceHooks, ResourceMetadata, ResourcePermissions, RouteDefinition, RouteHandler, RouteHandlerMethod, RouteMcpConfig, RouteMethod, RouteSchemaOptions, ServiceContext, TokenPair, TypedController, TypedRepository, TypedResourceConfig, UserBase, UserLike, UserOrganization, ValidateOptions, ValidationResult };
+import { $ as OnTenantDeleteConfig, $t as UserOrganization, A as RequestIdOptions, C as RequestContext, D as HealthCheck, E as GracefulShutdownOptions, F as FastifyWithDecorators, Fn as BaseControllerOptions, G as ActionsMap, Gt as JwtContext, H as ActionDefinition, Ht as AuthPluginOptions, I as MiddlewareHandler, J as CrudRouteKey, Jt as ApiResponse, K as ArcFieldRule, Kt as TokenPair, L as RequestWithExtras, M as EventsDecorator, N as FastifyRequestExtras, O as HealthOptions, P as FastifyWithAuth, Q as MiddlewareConfig, Qt as UserLike, S as QueryParserInterface, St as RouteHandler, T as CrudRouterOptions, U as ActionEntry, Ut as Authenticator, Vt as AuthHelpers, W as ActionHandlerFn, Wt as AuthenticatorContext, X as EventDefinition, Xt as JWTPayload, Y as CrudSchemas, Yt as ArcRequest, Z as FieldRule, Zt as ObjectId, _ as ControllerQueryOptions, _t as ControllerLike, a as InferAdapterDoc, at as ResolvedTenantPurge, b as ParsedQuery, bt as IControllerResponse, c as TypedController, ct as ResourceExtensions, d as PaginationResult, dt as ResourcePermissions, et as OpenApiSchemas, f as IntrospectionData, ft as RouteDefinition, g as ArcInternalMetadata, gt as ControllerHandler, h as ResourceMetadata, ht as RouteSchemaOptions, i as ValidationResult, it as RateLimitConfig, j as ArcDecorator, k as IntrospectionPluginOptions, l as TypedRepository, lt as ResourceHookContext, m as RegistryStats, mt as RouteMethod, n as ConfigError, nt as PresetHook, o as InferDocType, ot as ResourceCacheConfig, p as RegistryEntry, pt as RouteMcpConfig, q as CrudController, qt as AnyRecord, r as ValidateOptions, rt as PresetResult, s as InferResourceDoc, st as ResourceConfig, t as RouteHandlerMethod, tt as PresetFunction, u as TypedResourceConfig, ut as ResourceHooks, v as LookupOption, vt as FastifyHandler, w as ServiceContext, x as PopulateOption, xt as IRequestContext, y as OwnershipCheck, yt as IController } from "../index-CUTG2Cuo.mjs";
+import { i as RequestScope } from "../types-LNebCoJx.mjs";
+import { c as PermissionCheck, d as UserBase, l as PermissionContext, u as PermissionResult } from "../fields-C7ahdGYf.mjs";
+import { n as ElevationOptions, t as ElevationEvent } from "../elevation-xGUBq6p_.mjs";
+export type { ActionDefinition, ActionEntry, ActionHandlerFn, ActionsMap, AnyRecord, ApiResponse, ArcDecorator, ArcFieldRule, ArcInternalMetadata, ArcRequest, AuthHelpers, AuthPluginOptions, Authenticator, AuthenticatorContext, BaseControllerOptions, ConfigError, ControllerHandler, ControllerLike, ControllerQueryOptions, CrudController, CrudRouteKey, CrudRouterOptions, CrudSchemas, ElevationEvent, ElevationOptions, EventDefinition, EventsDecorator, FastifyHandler, FastifyRequestExtras, FastifyWithAuth, FastifyWithDecorators, FieldRule, GracefulShutdownOptions, HealthCheck, HealthOptions, IController, IControllerResponse, IRequestContext, InferAdapterDoc, InferDocType, InferResourceDoc, IntrospectionData, IntrospectionPluginOptions, JWTPayload, JwtContext, LookupOption, MiddlewareConfig, MiddlewareHandler, ObjectId, OnTenantDeleteConfig, OpenApiSchemas, OwnershipCheck, PaginationResult, ParsedQuery, PermissionCheck, PermissionContext, PermissionResult, PopulateOption, PresetFunction, PresetHook, PresetResult, QueryParserInterface, RateLimitConfig, RegistryEntry, RegistryStats, RequestContext, RequestIdOptions, RequestScope, RequestWithExtras, ResolvedTenantPurge, ResourceCacheConfig, ResourceConfig, ResourceExtensions, ResourceHookContext, ResourceHooks, ResourceMetadata, ResourcePermissions, RouteDefinition, RouteHandler, RouteHandlerMethod, RouteMcpConfig, RouteMethod, RouteSchemaOptions, ServiceContext, TokenPair, TypedController, TypedRepository, TypedResourceConfig, UserBase, UserLike, UserOrganization, ValidateOptions, ValidationResult };

package/dist/types/storage.d.mts

@@ -1,2 +1,2 @@
-import { a as StorageReadResult, i as StorageReadRange, n as StorageContext, o as StorageUploadInput, r as StorageFile, t as Storage } from "../storage-C5q8fuEt.mjs";
+import { a as StorageReadResult, i as StorageReadRange, n as StorageContext, o as StorageUploadInput, r as StorageFile, t as Storage } from "../storage-Co_PQpeQ.mjs";
 export { Storage, StorageContext, StorageFile, StorageReadRange, StorageReadResult, StorageUploadInput };

package/dist/{types-WVlAVp8T.d.mts → types-9_wtNPsI.d.mts}

@@ -1,13 +1,13 @@
-import { Ht as Authenticator } from "./index-QYma8mdC.mjs";
-import { r as CacheStore } from "./interface-DL7LlWS5.mjs";
-import { n as ElevationOptions } from "./elevation-DW90z5bT.mjs";
-import { a as EventTransport } from "./EventTransport-CaaXM5Y1.mjs";
-import { t as ExternalOpenApiPaths } from "./externalPaths-DLle0R07.mjs";
-import { r as QueryCachePluginOptions } from "./queryCachePlugin-Bd2tYgh5.mjs";
-import { t as EventPluginOptions } from "./eventPlugin-C1W1CRbf.mjs";
-import { _ as HealthOptions, f as CachingOptions, l as SSEOptions, o as MetricsOptions, t as VersioningOptions } from "./versioning-BSEDGXKC.mjs";
-import { t as ErrorHandlerOptions } from "./errorHandler-_Lp2k9M3.mjs";
-import { r as IdempotencyStore } from "./interface-CsrGR8LF.mjs";
+import { Ut as Authenticator } from "./index-CUTG2Cuo.mjs";
+import { r as CacheStore } from "./interface-C1_WLTMK.mjs";
+import { n as ElevationOptions } from "./elevation-xGUBq6p_.mjs";
+import { a as EventTransport } from "./EventTransport-IEn7Tn-Q.mjs";
+import { t as ExternalOpenApiPaths } from "./externalPaths-BE6wFpYv.mjs";
+import { r as QueryCachePluginOptions } from "./queryCachePlugin-xzFyKAjT.mjs";
+import { t as EventPluginOptions } from "./eventPlugin-DbBFd3x_.mjs";
+import { _ as HealthOptions, f as CachingOptions, l as SSEOptions, o as MetricsOptions, t as VersioningOptions } from "./versioning-D_eBCfNr.mjs";
+import { t as ErrorHandlerOptions } from "./errorHandler-BtUUDPEa.mjs";
+import { r as IdempotencyStore } from "./interface-Uk8ONJv7.mjs";
 import { FastifyInstance, FastifyPluginAsync, FastifyReply, FastifyRequest, FastifyServerOptions } from "fastify";
 
 //#region src/factory/loadResources.d.ts

package/dist/{types-BWBcb88c.d.mts → types-DpvSF5Hh.d.mts}

@@ -1,4 +1,4 @@
-import { V as ResourceDefinition } from "./index-QYma8mdC.mjs";
+import { V as ResourceDefinition } from "./index-CUTG2Cuo.mjs";
 import { z } from "zod";
 
 //#region src/integrations/mcp/types.d.ts

package/dist/{types-Bi0r0vjG.mjs → types-bHblZ9YN.mjs}

@@ -1,4 +1,4 @@
-import { l as UnauthorizedError, o as OrgRequiredError } from "./errors-j4aJm1Wg.mjs";
+import { l as UnauthorizedError, o as OrgRequiredError } from "./errors-DkO8Nk6-.mjs";
 //#region src/scope/types.ts
 /**
 * Request Scope — The One Standard

package/dist/utils/index.d.mts

@@ -1,6 +1,6 @@
-import { Kt as AnyRecord, S as QueryParserInterface, Zt as UserLike, b as ParsedQuery, et as OpenApiSchemas, st as ResourceConfig } from "../index-QYma8mdC.mjs";
-import { n as ErrorMapper } from "../errorHandler-_Lp2k9M3.mjs";
-import { a as NotFoundError, c as RateLimitError, d as ValidationError, f as createDomainError, i as ForbiddenError, l as ServiceUnavailableError, m as isArcError, n as ConflictError, o as OrgAccessDeniedError, p as createError, r as ErrorOptions, s as OrgRequiredError, t as ArcError, u as UnauthorizedError } from "../errors-DZOemeGa.mjs";
+import { Qt as UserLike, S as QueryParserInterface, b as ParsedQuery, et as OpenApiSchemas, qt as AnyRecord, st as ResourceConfig } from "../index-CUTG2Cuo.mjs";
+import { n as ErrorMapper } from "../errorHandler-BtUUDPEa.mjs";
+import { a as NotFoundError, c as RateLimitError, d as ValidationError, f as createDomainError, i as ForbiddenError, l as ServiceUnavailableError, m as isArcError, n as ConflictError, o as OrgAccessDeniedError, p as createError, r as ErrorOptions, s as OrgRequiredError, t as ArcError, u as UnauthorizedError } from "../errors-DOHkjQlD.mjs";
 import { errorContractSchema, errorDetailSchema } from "@classytic/repo-core/errors";
 import { FastifyInstance, FastifyReply, FastifyRequest, RouteHandlerMethod } from "fastify";
 
@@ -1321,6 +1321,44 @@ interface PipeUIMessageStreamOptions {
  * ```
  */
 declare function pipeUIMessageStreamToReply(reply: FastifyReply, stream: ReadableStream<unknown>, options?: PipeUIMessageStreamOptions): Promise<void>;
+/**
+ * Promote a stream auth token from the query string into the `Authorization`
+ * header, in place, so the standard `fastify.authenticate` decorator can read it.
+ *
+ * Why: the browser `EventSource` (and `WebSocket`) API **cannot set request
+ * headers** — there is no header channel on the constructor. So arc-next's
+ * `buildStreamUrl` (bearer mode) appends the token as `?token=<jwt>` on stream
+ * URLs. Server auth reads the `Authorization` header, so without this promotion
+ * EVERY browser SSE/WS stream is 401 in bearer mode (cookie mode is unaffected —
+ * arc-next omits the query token there and relies on the cookie).
+ *
+ * Safe by construction:
+ * - No-op when an `Authorization` header is already present → normal `fetch`
+ *   requests (which send the header) are never touched.
+ * - The token still goes through full authentication downstream, so a forged or
+ *   stale value simply 401s. This only relocates WHERE the bearer is read from;
+ *   it grants no trust on its own.
+ *
+ * Parsed from `request.raw.url` (not `request.query`) so it's robust to route
+ * querystring schemas that would otherwise strip an undeclared `token` param.
+ *
+ * @param queryParam name of the query parameter carrying the token (default `token`).
+ */
+declare function promoteStreamTokenToHeader(request: FastifyRequest, queryParam?: string): void;
+/**
+ * Collect the CORS / `Vary` headers a plugin (e.g. `@fastify/cors`, whose default
+ * `onRequest` hook runs BEFORE the route handler) has already set on the reply, so
+ * a hijacked SSE handler that writes straight to `reply.raw.writeHead(...)` can
+ * merge them onto the raw response.
+ *
+ * Why: `reply.hijack()` + `reply.raw.writeHead()` bypass Fastify's `onSend`
+ * serialization, which is where reply-level headers reach the wire. A cross-origin
+ * `EventSource` therefore receives no `Access-Control-Allow-Origin` and the browser
+ * blocks the (authenticated) stream. Re-emitting the already-computed CORS headers
+ * honors the host's configured policy (origin allowlist, credentials) rather than
+ * re-deriving it. Returns lowercased header names suitable for `writeHead`.
+ */
+declare function forwardedStreamHeaders(reply: FastifyReply): Record<string, string>;
 /**
  * Heuristic — does this value look like a Web `ReadableStream`?
  *
@@ -1361,4 +1399,4 @@ declare function hasEvents(instance: FastifyInstance): instance is FastifyInstan
  */
 declare function getUserId(user: UserLike | null | undefined): string | undefined;
 //#endregion
-export { ArcError, ArcQueryParser, type ArcQueryParserOptions, CircuitBreaker, CircuitBreakerError, type CircuitBreakerOptions, CircuitBreakerRegistry, type CircuitBreakerStats, CircuitState, type CompensationDefinition, type CompensationError, type CompensationHooks, type CompensationResult, type CompensationStep, type ConfigError, ConflictError, type ErrorOptions, type EventsDecorator, ForbiddenError, type Guard, type GuardConfig, type JsonSchema, type JsonSchemaTarget, NotFoundError, OrgAccessDeniedError, OrgRequiredError, type PipeUIMessageStreamOptions, RateLimitError, ServiceUnavailableError, type StateMachine, type TransitionConfig, UI_MESSAGE_STREAM_HEADERS, UnauthorizedError, type ValidateOptions, ValidationError, type ValidationResult, aggregateListResponse, assertValidConfig, bareListResponse, convertOpenApiSchemas, convertRouteSchema, createCircuitBreaker, createCircuitBreakerRegistry, createDomainError, createError, createQueryParser, createStateMachine, defineCompensation, defineErrorMapper, defineGuard, deleteResponse, errorContractSchema, errorDetailSchema, formatValidationErrors, getDefaultCrudSchemas, getListQueryParams, getUserId, handleRaw, hasEvents, isArcError, isJsonSchema, isReadableStream, isZodSchema, keysetListResponse, listResponse, offsetListResponse, paginationSchema, pipeUIMessageStreamToReply, queryParams, responses, scheduleBackground, simpleEqualityMatcher, toJsonSchema, validateResourceConfig, withCompensation };
+export { ArcError, ArcQueryParser, type ArcQueryParserOptions, CircuitBreaker, CircuitBreakerError, type CircuitBreakerOptions, CircuitBreakerRegistry, type CircuitBreakerStats, CircuitState, type CompensationDefinition, type CompensationError, type CompensationHooks, type CompensationResult, type CompensationStep, type ConfigError, ConflictError, type ErrorOptions, type EventsDecorator, ForbiddenError, type Guard, type GuardConfig, type JsonSchema, type JsonSchemaTarget, NotFoundError, OrgAccessDeniedError, OrgRequiredError, type PipeUIMessageStreamOptions, RateLimitError, ServiceUnavailableError, type StateMachine, type TransitionConfig, UI_MESSAGE_STREAM_HEADERS, UnauthorizedError, type ValidateOptions, ValidationError, type ValidationResult, aggregateListResponse, assertValidConfig, bareListResponse, convertOpenApiSchemas, convertRouteSchema, createCircuitBreaker, createCircuitBreakerRegistry, createDomainError, createError, createQueryParser, createStateMachine, defineCompensation, defineErrorMapper, defineGuard, deleteResponse, errorContractSchema, errorDetailSchema, formatValidationErrors, forwardedStreamHeaders, getDefaultCrudSchemas, getListQueryParams, getUserId, handleRaw, hasEvents, isArcError, isJsonSchema, isReadableStream, isZodSchema, keysetListResponse, listResponse, offsetListResponse, paginationSchema, pipeUIMessageStreamToReply, promoteStreamTokenToHeader, queryParams, responses, scheduleBackground, simpleEqualityMatcher, toJsonSchema, validateResourceConfig, withCompensation };

package/dist/utils/index.mjs

@@ -1,5 +1,6 @@
-import { a as OrgAccessDeniedError, c as ServiceUnavailableError, d as createDomainError, f as createError, i as NotFoundError, l as UnauthorizedError, n as ConflictError, o as OrgRequiredError, p as isArcError, r as ForbiddenError, s as RateLimitError, t as ArcError, u as ValidationError } from "../errors-j4aJm1Wg.mjs";
-import { A as CircuitState, C as defineGuard, D as CircuitBreaker, E as withCompensation, F as validateResourceConfig, I as simpleEqualityMatcher, M as createCircuitBreakerRegistry, N as assertValidConfig, O as CircuitBreakerError, P as formatValidationErrors, S as handleRaw, T as defineCompensation, _ as paginationSchema, a as createStateMachine, b as ArcQueryParser, c as bareListResponse, d as errorDetailSchema, f as getDefaultCrudSchemas, g as offsetListResponse, h as listResponse, i as pipeUIMessageStreamToReply, j as createCircuitBreaker, k as CircuitBreakerRegistry, l as deleteResponse, m as keysetListResponse, n as UI_MESSAGE_STREAM_HEADERS, o as scheduleBackground, p as getListQueryParams, r as isReadableStream, s as aggregateListResponse, t as getUserId, u as errorContractSchema, v as queryParams, w as defineErrorMapper, x as createQueryParser, y as responses } from "../utils-xAQeDyU_.mjs";
-import { a as toJsonSchema, i as isZodSchema, n as convertRouteSchema, r as isJsonSchema, t as convertOpenApiSchemas } from "../schemaConverter-DatAaVNj.mjs";
-import { t as hasEvents } from "../typeGuards-CcFZXgU7.mjs";
-export { ArcError, ArcQueryParser, CircuitBreaker, CircuitBreakerError, CircuitBreakerRegistry, CircuitState, ConflictError, ForbiddenError, NotFoundError, OrgAccessDeniedError, OrgRequiredError, RateLimitError, ServiceUnavailableError, UI_MESSAGE_STREAM_HEADERS, UnauthorizedError, ValidationError, aggregateListResponse, assertValidConfig, bareListResponse, convertOpenApiSchemas, convertRouteSchema, createCircuitBreaker, createCircuitBreakerRegistry, createDomainError, createError, createQueryParser, createStateMachine, defineCompensation, defineErrorMapper, defineGuard, deleteResponse, errorContractSchema, errorDetailSchema, formatValidationErrors, getDefaultCrudSchemas, getListQueryParams, getUserId, handleRaw, hasEvents, isArcError, isJsonSchema, isReadableStream, isZodSchema, keysetListResponse, listResponse, offsetListResponse, paginationSchema, pipeUIMessageStreamToReply, queryParams, responses, scheduleBackground, simpleEqualityMatcher, toJsonSchema, validateResourceConfig, withCompensation };
+import { a as OrgAccessDeniedError, c as ServiceUnavailableError, d as createDomainError, f as createError, i as NotFoundError, l as UnauthorizedError, n as ConflictError, o as OrgRequiredError, p as isArcError, r as ForbiddenError, s as RateLimitError, t as ArcError, u as ValidationError } from "../errors-DkO8Nk6-.mjs";
+import { A as createQueryParser, C as keysetListResponse, D as queryParams, E as paginationSchema, M as scheduleBackground, N as simpleEqualityMatcher, O as responses, S as getListQueryParams, T as offsetListResponse, _ as bareListResponse, a as defineCompensation, b as errorDetailSchema, c as CircuitBreakerError, d as createCircuitBreaker, f as createCircuitBreakerRegistry, g as aggregateListResponse, h as validateResourceConfig, i as defineErrorMapper, j as getUserId, k as ArcQueryParser, l as CircuitBreakerRegistry, m as formatValidationErrors, n as handleRaw, o as withCompensation, p as assertValidConfig, r as defineGuard, s as CircuitBreaker, t as createStateMachine, u as CircuitState, v as deleteResponse, w as listResponse, x as getDefaultCrudSchemas, y as errorContractSchema } from "../utils-C6QQ9-hd.mjs";
+import { a as toJsonSchema, i as isZodSchema, n as convertRouteSchema, r as isJsonSchema, t as convertOpenApiSchemas } from "../schemaConverter-U0MnO9vd.mjs";
+import { a as promoteStreamTokenToHeader, i as pipeUIMessageStreamToReply, n as forwardedStreamHeaders, r as isReadableStream, t as UI_MESSAGE_STREAM_HEADERS } from "../streaming-BQcW6_Kq.mjs";
+import { t as hasEvents } from "../typeGuards-C9KXUly6.mjs";
+export { ArcError, ArcQueryParser, CircuitBreaker, CircuitBreakerError, CircuitBreakerRegistry, CircuitState, ConflictError, ForbiddenError, NotFoundError, OrgAccessDeniedError, OrgRequiredError, RateLimitError, ServiceUnavailableError, UI_MESSAGE_STREAM_HEADERS, UnauthorizedError, ValidationError, aggregateListResponse, assertValidConfig, bareListResponse, convertOpenApiSchemas, convertRouteSchema, createCircuitBreaker, createCircuitBreakerRegistry, createDomainError, createError, createQueryParser, createStateMachine, defineCompensation, defineErrorMapper, defineGuard, deleteResponse, errorContractSchema, errorDetailSchema, formatValidationErrors, forwardedStreamHeaders, getDefaultCrudSchemas, getListQueryParams, getUserId, handleRaw, hasEvents, isArcError, isJsonSchema, isReadableStream, isZodSchema, keysetListResponse, listResponse, offsetListResponse, paginationSchema, pipeUIMessageStreamToReply, promoteStreamTokenToHeader, queryParams, responses, scheduleBackground, simpleEqualityMatcher, toJsonSchema, validateResourceConfig, withCompensation };