@classytic/arc 2.18.5 → 2.20.0

package/dist/{queryCachePlugin-emHb0CuX.mjs → queryCachePlugin-DzqLN904.mjs}

@@ -1,7 +1,7 @@
 import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.mjs";
-import { i as versionKey, r as tagVersionKey } from "./keys-Cd316u_y.mjs";
 import { t as MemoryCacheStore } from "./memory-CLXA2VeJ.mjs";
 import { t as hasEvents } from "./typeGuards-C9KXUly6.mjs";
+import { i as versionKey, r as tagVersionKey } from "./keys-Cd316u_y.mjs";
 import fp from "fastify-plugin";
 //#region src/cache/QueryCache.ts
 var QueryCache = class {
@@ -72,7 +72,7 @@ var QueryCache = class {
 //#endregion
 //#region src/cache/queryCachePlugin.ts
 var queryCachePlugin_exports = /* @__PURE__ */ __exportAll({ queryCachePlugin: () => queryCachePlugin });
-const CRUD_SUFFIXES = new Set([
+const CRUD_SUFFIXES = /* @__PURE__ */ new Set([
 	"created",
 	"updated",
 	"deleted"

package/dist/{registerRoute-CPmdkZGu.mjs → registerRoute-DGSREwPw.mjs}

@@ -1,6 +1,6 @@
 import { f as createError } from "./errors-DkO8Nk6-.mjs";
-import { M as evaluateAndApplyPermission } from "./permissions-BPB1xqGf.mjs";
 import { n as requestContext } from "./requestContext-BZKOr13H.mjs";
+import { M as evaluateAndApplyPermission } from "./permissions-CgbOLJZG.mjs";
 //#region src/core/middlewares/arcDecorator.ts
 /**
 * Build the `arcDecorator` preHandler for a resource.
@@ -260,6 +260,24 @@ function resolveRouterPluginMw(fastify, resourceHasQueryCache) {
 //#endregion
 //#region src/core/middlewares/rateLimit.ts
 /**
+* Build the per-route Fastify `config` object shared by the CRUD, custom, and
+* action routers. Two independent concerns ride on `routeOptions.config`:
+*   - `config.rateLimit`     — read by `@fastify/rate-limit`.
+*   - `config.arcExtensions` — read by arc plugins (encryption, …) at request
+*     time, sourced from `defineResource({ extensions })`.
+*
+* Returns `{}` (no `config` key) when neither is present, so routes without
+* either stay config-free and the spread is a genuine no-op. Both fields are
+* optional in the return type, so no cast is needed when only one is set.
+*/
+function buildRouteConfig(rateLimitConfig, extensions) {
+	if (!rateLimitConfig && !extensions) return {};
+	return { config: {
+		...rateLimitConfig ?? {},
+		...extensions ? { arcExtensions: extensions } : {}
+	} };
+}
+/**
 * Build the `config` object for Fastify route options so
 * @fastify/rate-limit picks up per-route overrides.
 *
@@ -311,4 +329,4 @@ function tryRegisterRoute(fastify, opts, context) {
 	}
 }
 //#endregion
-export { buildActionPermissionMw as a, resolveRoutePreHandlers as c, buildArcDecorator as d, selectPluginMw as i, buildAuthMiddleware as l, buildRateLimitConfig as n, buildCrudPermissionMw as o, resolveRouterPluginMw as r, buildPreHandlerChain as s, tryRegisterRoute as t, buildAuthMiddlewareForPermissions as u };
+export { selectPluginMw as a, buildPreHandlerChain as c, buildAuthMiddlewareForPermissions as d, buildArcDecorator as f, resolveRouterPluginMw as i, resolveRoutePreHandlers as l, buildRateLimitConfig as n, buildActionPermissionMw as o, buildRouteConfig as r, buildCrudPermissionMw as s, tryRegisterRoute as t, buildAuthMiddleware as u };

package/dist/registry/index.d.mts

@@ -1,4 +1,4 @@
-import { J as CrudRouteKey, R as RegisterOptions, V as ResourceDefinition, at as ResolvedTenantPurge, k as IntrospectionPluginOptions, p as RegistryEntry, z as ResourceRegistry } from "../index-CHNQIhcb.mjs";
+import { J as CrudRouteKey, R as RegisterOptions, V as ResourceDefinition, at as ResolvedTenantPurge, k as IntrospectionPluginOptions, p as RegistryEntry, z as ResourceRegistry } from "../index-_--GyzcO.mjs";
 import { FastifyPluginAsync } from "fastify";
 import { TenantPurgeProgress, TenantPurgeStrategy } from "@classytic/repo-core/repository";
 

package/dist/registry/index.mjs

@@ -1,3 +1,3 @@
-import { a as cascadeDeleteForOrganization, c as assertNoTenantData, i as introspectionPlugin_default, n as buildResourceManifestFromRegistry, o as getCascadingResources, r as introspectionPlugin, s as getCascadingResourcesWithMetadata, t as buildResourceManifest } from "../registry-Bm9LjWKs.mjs";
-import { t as ResourceRegistry } from "../ResourceRegistry-5fKZwhK_.mjs";
+import { a as cascadeDeleteForOrganization, c as assertNoTenantData, i as introspectionPlugin_default, n as buildResourceManifestFromRegistry, o as getCascadingResources, r as introspectionPlugin, s as getCascadingResourcesWithMetadata, t as buildResourceManifest } from "../registry-vcOCtPij.mjs";
+import { t as ResourceRegistry } from "../ResourceRegistry-7RnrEWNP.mjs";
 export { ResourceRegistry, assertNoTenantData, buildResourceManifest, buildResourceManifestFromRegistry, cascadeDeleteForOrganization, getCascadingResources, getCascadingResourcesWithMetadata, introspectionPlugin_default as introspectionPlugin, introspectionPlugin as introspectionPluginFn };

package/dist/{registry-Bm9LjWKs.mjs → registry-vcOCtPij.mjs}

@@ -1,4 +1,4 @@
-import { t as CRUD_OPERATIONS } from "./constants-gaEeMlz-.mjs";
+import { t as CRUD_OPERATIONS } from "./constants-DNre0wRg.mjs";
 import fp from "fastify-plugin";
 //#region src/registry/assertNoTenantData.ts
 /**

package/dist/{schemaIR-D1MJwqmp.mjs → schemaIR-ajetw3Fv.mjs}

@@ -1,5 +1,4 @@
 import { a as toJsonSchema } from "./schemaConverter-U0MnO9vd.mjs";
-import { z } from "zod";
 //#region src/core/schemaIR.ts
 /**
 * Schema IR — one canonical representation, two adapters.
@@ -98,27 +97,6 @@ function schemaIRToJsonSchemaBranch(ir, extras = {}) {
 	};
 }
 /**
-* Emit a flat Zod shape from the IR. The MCP SDK wraps the returned record
-* in `z.object()` internally, so we return the bare shape (same contract
-* as `ToolDefinition.inputSchema`).
-*
-* `additionalProperties: false` is honored at the MCP handler layer rather
-* than baked into the Zod shape — the SDK's input validation happens before
-* the handler runs, and flat shapes can't express `.strict()` mode.
-* `strictAdditionalProperties(ir)` returns the flag so callers can gate
-* their handler on it.
-*/
-function schemaIRToZodShape(ir) {
-	const requiredSet = new Set(ir.required);
-	const result = {};
-	for (const [name, prop] of Object.entries(ir.properties)) {
-		const desc = typeof prop.description === "string" && prop.description.length > 0 ? prop.description : name;
-		const base = jsonSchemaPropToZod(prop);
-		result[name] = requiredSet.has(name) ? base.describe(desc) : base.optional().describe(desc);
-	}
-	return result;
-}
-/**
 * Returns `true` when the IR declares `additionalProperties: false`. MCP
 * tool handlers should reject inputs with unknown keys when this is true,
 * matching HTTP's AJV-level strict enforcement.
@@ -126,24 +104,5 @@ function schemaIRToZodShape(ir) {
 function shouldRejectAdditionalProperties(ir) {
 	return ir.additionalProperties === false;
 }
-/**
-* Convert a single JSON Schema property to a Zod type. Understands enum,
-* numeric/integer/boolean/array/object, and falls back to string for
-* unrecognized types (matches MCP's "strings for opaque fields" convention).
-*
-* Internal — use `schemaIRToZodShape` which wires this up with required/optional
-* + description handling.
-*/
-function jsonSchemaPropToZod(schema) {
-	if (Array.isArray(schema.enum) && schema.enum.length > 0) return z.enum(schema.enum);
-	switch (typeof schema.type === "string" ? schema.type : "string") {
-		case "number":
-		case "integer": return z.number();
-		case "boolean": return z.boolean();
-		case "array": return z.array(z.unknown());
-		case "object": return z.record(z.string(), z.unknown());
-		default: return z.string();
-	}
-}
 //#endregion
-export { shouldRejectAdditionalProperties as i, schemaIRToJsonSchemaBranch as n, schemaIRToZodShape as r, normalizeSchemaIR as t };
+export { schemaIRToJsonSchemaBranch as n, shouldRejectAdditionalProperties as r, normalizeSchemaIR as t };

package/dist/scim/index.mjs

@@ -381,7 +381,7 @@ function resourceToScim(resource, mapping, baseUrl) {
 * parseScimFilter('active eq true and name.familyName sw "S"')
 *   → { $and: [{ active: true }, { 'name.familyName': { $regex: '^S' } }] }
 */
-const COMPARISON_OPS = new Set([
+const COMPARISON_OPS = /* @__PURE__ */ new Set([
 	"eq",
 	"ne",
 	"co",
@@ -393,7 +393,7 @@ const COMPARISON_OPS = new Set([
 	"le",
 	"pr"
 ]);
-const LOGICAL_OPS = new Set([
+const LOGICAL_OPS = /* @__PURE__ */ new Set([
 	"and",
 	"or",
 	"not"

package/dist/sync/changelog.d.mts

@@ -0,0 +1,2 @@
+import { ChangeEntry, ChangeLogAppendOptions, ChangeLogStore, ChangeOp, ChangesPage, ChangesSinceOptions, CursorExpiredError, MemoryChangeLogStore, PushMutation, PushVerdict, PushVerdictStatus } from "@classytic/repo-core/sync";
+export { type ChangeEntry, type ChangeLogAppendOptions, type ChangeLogStore, type ChangeOp, type ChangesPage, type ChangesSinceOptions, CursorExpiredError, MemoryChangeLogStore, type PushMutation, type PushVerdict, type PushVerdictStatus };

package/dist/sync/changelog.mjs

@@ -0,0 +1,2 @@
+import { CursorExpiredError, MemoryChangeLogStore } from "@classytic/repo-core/sync";
+export { CursorExpiredError, MemoryChangeLogStore };

package/dist/testing/index.d.mts

@@ -1,5 +1,5 @@
-import { Kt as AnyRecord, V as ResourceDefinition } from "../index-CHNQIhcb.mjs";
-import { d as preloadResourcesAsync, r as CreateAppOptions, u as preloadResources } from "../types-CmkknLzI.mjs";
+import { V as ResourceDefinition, qt as AnyRecord } from "../index-_--GyzcO.mjs";
+import { d as preloadResourcesAsync, r as CreateAppOptions, u as preloadResources } from "../types-BHMKlMBU.mjs";
 import { StorageContractSetup, StorageContractSetupResult, runStorageContract } from "./storageContract.mjs";
 import { FastifyInstance, FastifyServerOptions } from "fastify";
 import { Mock } from "vitest";

package/dist/testing/index.mjs

@@ -1,4 +1,4 @@
-import { t as CRUD_OPERATIONS } from "../constants-gaEeMlz-.mjs";
+import { t as CRUD_OPERATIONS } from "../constants-DNre0wRg.mjs";
 import { n as preloadResourcesAsync, t as preloadResources } from "../preloadResources-CHw3_oA_.mjs";
 import { runStorageContract } from "./storageContract.mjs";
 import Fastify from "fastify";
@@ -1046,7 +1046,7 @@ function pickDefaultAuth(authMode, callerAuth) {
 	};
 }
 async function createTestApp(options = {}) {
-	const { createApp } = await import("../createApp--703hQE1.mjs").then((n) => n.r);
+	const { createApp } = await import("../createApp-D6uwzCKu.mjs").then((n) => n.r);
 	const { resources = [], db = "in-memory", connectMongoose = false, authMode = "jwt", defaultOrgId, plugins, auth: callerAuth, ...appOptions } = options;
 	let dbHandle;
 	let dbUri;

package/dist/types/index.d.mts

@@ -1,5 +1,5 @@
-import { $ as OnTenantDeleteConfig, A as RequestIdOptions, Bt as AuthHelpers, C as RequestContext, D as HealthCheck, E as GracefulShutdownOptions, F as FastifyWithDecorators, G as ActionsMap, Gt as TokenPair, H as ActionDefinition, Ht as Authenticator, I as MiddlewareHandler, J as CrudRouteKey, Jt as ArcRequest, K as ArcFieldRule, Kt as AnyRecord, L as RequestWithExtras, M as EventsDecorator, N as FastifyRequestExtras, O as HealthOptions, P as FastifyWithAuth, Pn as BaseControllerOptions, Q as MiddlewareConfig, Qt as UserOrganization, S as QueryParserInterface, T as CrudRouterOptions, U as ActionEntry, Ut as AuthenticatorContext, Vt as AuthPluginOptions, W as ActionHandlerFn, Wt as JwtContext, X as EventDefinition, Xt as ObjectId, Y as CrudSchemas, Yt as JWTPayload, Z as FieldRule, Zt as UserLike, _ as ControllerQueryOptions, _t as FastifyHandler, a as InferAdapterDoc, at as ResolvedTenantPurge, b as ParsedQuery, bt as IRequestContext, c as TypedController, ct as ResourceHookContext, d as PaginationResult, dt as RouteDefinition, et as OpenApiSchemas, f as IntrospectionData, ft as RouteMcpConfig, g as ArcInternalMetadata, gt as ControllerLike, h as ResourceMetadata, ht as ControllerHandler, i as ValidationResult, it as RateLimitConfig, j as ArcDecorator, k as IntrospectionPluginOptions, l as TypedRepository, lt as ResourceHooks, m as RegistryStats, mt as RouteSchemaOptions, n as ConfigError, nt as PresetHook, o as InferDocType, ot as ResourceCacheConfig, p as RegistryEntry, pt as RouteMethod, q as CrudController, qt as ApiResponse, r as ValidateOptions, rt as PresetResult, s as InferResourceDoc, st as ResourceConfig, t as RouteHandlerMethod, tt as PresetFunction, u as TypedResourceConfig, ut as ResourcePermissions, v as LookupOption, vt as IController, w as ServiceContext, x as PopulateOption, xt as RouteHandler, y as OwnershipCheck, yt as IControllerResponse } from "../index-CHNQIhcb.mjs";
+import { $ as OnTenantDeleteConfig, $t as UserOrganization, A as RequestIdOptions, C as RequestContext, D as HealthCheck, E as GracefulShutdownOptions, F as FastifyWithDecorators, Fn as BaseControllerOptions, G as ActionsMap, Gt as JwtContext, H as ActionDefinition, Ht as AuthPluginOptions, I as MiddlewareHandler, J as CrudRouteKey, Jt as ApiResponse, K as ArcFieldRule, Kt as TokenPair, L as RequestWithExtras, M as EventsDecorator, N as FastifyRequestExtras, O as HealthOptions, P as FastifyWithAuth, Q as MiddlewareConfig, Qt as UserLike, S as QueryParserInterface, St as RouteHandler, T as CrudRouterOptions, U as ActionEntry, Ut as Authenticator, Vt as AuthHelpers, W as ActionHandlerFn, Wt as AuthenticatorContext, X as EventDefinition, Xt as JWTPayload, Y as CrudSchemas, Yt as ArcRequest, Z as FieldRule, Zt as ObjectId, _ as ControllerQueryOptions, _t as ControllerLike, a as InferAdapterDoc, at as ResolvedTenantPurge, b as ParsedQuery, bt as IControllerResponse, c as TypedController, ct as ResourceExtensions, d as PaginationResult, dt as ResourcePermissions, et as OpenApiSchemas, f as IntrospectionData, ft as RouteDefinition, g as ArcInternalMetadata, gt as ControllerHandler, h as ResourceMetadata, ht as RouteSchemaOptions, i as ValidationResult, it as RateLimitConfig, j as ArcDecorator, k as IntrospectionPluginOptions, l as TypedRepository, lt as ResourceHookContext, m as RegistryStats, mt as RouteMethod, n as ConfigError, nt as PresetHook, o as InferDocType, ot as ResourceCacheConfig, p as RegistryEntry, pt as RouteMcpConfig, q as CrudController, qt as AnyRecord, r as ValidateOptions, rt as PresetResult, s as InferResourceDoc, st as ResourceConfig, t as RouteHandlerMethod, tt as PresetFunction, u as TypedResourceConfig, ut as ResourceHooks, v as LookupOption, vt as FastifyHandler, w as ServiceContext, x as PopulateOption, xt as IRequestContext, y as OwnershipCheck, yt as IController } from "../index-_--GyzcO.mjs";
 import { i as RequestScope } from "../types-LNebCoJx.mjs";
 import { c as PermissionCheck, d as UserBase, l as PermissionContext, u as PermissionResult } from "../fields-C7ahdGYf.mjs";
 import { n as ElevationOptions, t as ElevationEvent } from "../elevation-xGUBq6p_.mjs";
-export type { ActionDefinition, ActionEntry, ActionHandlerFn, ActionsMap, AnyRecord, ApiResponse, ArcDecorator, ArcFieldRule, ArcInternalMetadata, ArcRequest, AuthHelpers, AuthPluginOptions, Authenticator, AuthenticatorContext, BaseControllerOptions, ConfigError, ControllerHandler, ControllerLike, ControllerQueryOptions, CrudController, CrudRouteKey, CrudRouterOptions, CrudSchemas, ElevationEvent, ElevationOptions, EventDefinition, EventsDecorator, FastifyHandler, FastifyRequestExtras, FastifyWithAuth, FastifyWithDecorators, FieldRule, GracefulShutdownOptions, HealthCheck, HealthOptions, IController, IControllerResponse, IRequestContext, InferAdapterDoc, InferDocType, InferResourceDoc, IntrospectionData, IntrospectionPluginOptions, JWTPayload, JwtContext, LookupOption, MiddlewareConfig, MiddlewareHandler, ObjectId, OnTenantDeleteConfig, OpenApiSchemas, OwnershipCheck, PaginationResult, ParsedQuery, PermissionCheck, PermissionContext, PermissionResult, PopulateOption, PresetFunction, PresetHook, PresetResult, QueryParserInterface, RateLimitConfig, RegistryEntry, RegistryStats, RequestContext, RequestIdOptions, RequestScope, RequestWithExtras, ResolvedTenantPurge, ResourceCacheConfig, ResourceConfig, ResourceHookContext, ResourceHooks, ResourceMetadata, ResourcePermissions, RouteDefinition, RouteHandler, RouteHandlerMethod, RouteMcpConfig, RouteMethod, RouteSchemaOptions, ServiceContext, TokenPair, TypedController, TypedRepository, TypedResourceConfig, UserBase, UserLike, UserOrganization, ValidateOptions, ValidationResult };
+export type { ActionDefinition, ActionEntry, ActionHandlerFn, ActionsMap, AnyRecord, ApiResponse, ArcDecorator, ArcFieldRule, ArcInternalMetadata, ArcRequest, AuthHelpers, AuthPluginOptions, Authenticator, AuthenticatorContext, BaseControllerOptions, ConfigError, ControllerHandler, ControllerLike, ControllerQueryOptions, CrudController, CrudRouteKey, CrudRouterOptions, CrudSchemas, ElevationEvent, ElevationOptions, EventDefinition, EventsDecorator, FastifyHandler, FastifyRequestExtras, FastifyWithAuth, FastifyWithDecorators, FieldRule, GracefulShutdownOptions, HealthCheck, HealthOptions, IController, IControllerResponse, IRequestContext, InferAdapterDoc, InferDocType, InferResourceDoc, IntrospectionData, IntrospectionPluginOptions, JWTPayload, JwtContext, LookupOption, MiddlewareConfig, MiddlewareHandler, ObjectId, OnTenantDeleteConfig, OpenApiSchemas, OwnershipCheck, PaginationResult, ParsedQuery, PermissionCheck, PermissionContext, PermissionResult, PopulateOption, PresetFunction, PresetHook, PresetResult, QueryParserInterface, RateLimitConfig, RegistryEntry, RegistryStats, RequestContext, RequestIdOptions, RequestScope, RequestWithExtras, ResolvedTenantPurge, ResourceCacheConfig, ResourceConfig, ResourceExtensions, ResourceHookContext, ResourceHooks, ResourceMetadata, ResourcePermissions, RouteDefinition, RouteHandler, RouteHandlerMethod, RouteMcpConfig, RouteMethod, RouteSchemaOptions, ServiceContext, TokenPair, TypedController, TypedRepository, TypedResourceConfig, UserBase, UserLike, UserOrganization, ValidateOptions, ValidationResult };

package/dist/{types-CmkknLzI.d.mts → types-BHMKlMBU.d.mts}

@@ -1,208 +1,16 @@
-import { Ht as Authenticator } from "./index-CHNQIhcb.mjs";
+import { Ut as Authenticator } from "./index-_--GyzcO.mjs";
 import { r as CacheStore } from "./interface-C1_WLTMK.mjs";
 import { n as ElevationOptions } from "./elevation-xGUBq6p_.mjs";
 import { a as EventTransport } from "./EventTransport-IEn7Tn-Q.mjs";
 import { t as ExternalOpenApiPaths } from "./externalPaths-BE6wFpYv.mjs";
 import { r as QueryCachePluginOptions } from "./queryCachePlugin-xzFyKAjT.mjs";
+import { l as ResourceLike, n as ArcModuleInput } from "./module-JYH9V0I8.mjs";
 import { t as EventPluginOptions } from "./eventPlugin-DbBFd3x_.mjs";
 import { _ as HealthOptions, f as CachingOptions, l as SSEOptions, o as MetricsOptions, t as VersioningOptions } from "./versioning-D_eBCfNr.mjs";
 import { t as ErrorHandlerOptions } from "./errorHandler-BtUUDPEa.mjs";
 import { r as IdempotencyStore } from "./interface-Uk8ONJv7.mjs";
 import { FastifyInstance, FastifyPluginAsync, FastifyReply, FastifyRequest, FastifyServerOptions } from "fastify";
 
-//#region src/factory/loadResources.d.ts
-/**
- * loadResources — Auto-discover resource files from a directory.
- *
- * Scans for `*.resource.{ts,js,mts,mjs}` files, imports each,
- * and collects their default exports. No barrel file needed.
- *
- * @example
- * ```ts
- * import { createApp, loadResources } from '@classytic/arc/factory';
- *
- * // Recommended: import.meta.url — works in both src/ (dev) and dist/ (prod)
- * const app = await createApp({
- *   resources: await loadResources(import.meta.url),
- *   auth: { type: 'jwt', jwt: { secret: process.env.JWT_SECRET } },
- * });
- *
- * // Or explicit path (must match runtime layout)
- * const app2 = await createApp({
- *   resources: await loadResources('./src/resources'),
- * });
- * ```
- *
- * File convention:
- * ```
- * src/resources/
- *   product/product.resource.ts    → export default defineResource({ name: 'product', ... })
- *   order/order.resource.ts        → export default defineResource({ name: 'order', ... })
- * ```
- */
-/**
- * Resource interface — the contract between `loadResources`/`createApp` and resource definitions.
- *
- * Matches the shape of `ResourceDefinition` from `defineResource()` without requiring
- * the import. All properties except `toPlugin` are optional so plain objects work too:
- *
- * ```typescript
- * // Full resource (from defineResource)
- * const product = defineResource({ name: 'product', ... }); // satisfies ResourceLike
- *
- * // Minimal resource (plain object)
- * const simple: ResourceLike = { name: 'ping', toPlugin: () => () => {} };
- * ```
- *
- * **DO NOT add an index signature** (`[key: string]: unknown`) to this interface.
- * Class instances (like `ResourceDefinition`) don't implicitly carry index signatures,
- * so adding one here makes `ResourceDefinition` *unassignable* to `ResourceLike` —
- * the exact opposite of the intent. TypeScript's structural typing already allows
- * classes with extra properties to satisfy this interface without an index signature.
- */
-interface ResourceLike {
-  /** Plugin factory — called by createApp to register routes */
-  toPlugin: () => unknown;
-  /** Resource name (used for route generation, logging, duplicate detection) */
-  name?: string;
-  /** Route prefix (default: `/${name}s`) */
-  prefix?: string;
-  /** Skip the global `resourcePrefix` from createApp — register at root */
-  skipGlobalPrefix?: boolean;
-  /** Display name for docs/OpenAPI */
-  displayName?: string;
-  /** Applied preset names */
-  _appliedPresets?: string[];
-}
-/**
- * Resource module — what a `.resource.ts` file's default (or named) export
- * may resolve to.
- *
- * Two shapes accepted:
- *   1. **Plain `ResourceLike`** — the result of `defineResource({...})`.
- *      Used as-is; no engine wiring needed.
- *   2. **Factory `(ctx: TContext) => ResourceLike | Promise<ResourceLike>`**
- *      — a function arc calls with the `context` from `LoadResourcesOptions`.
- *      Eliminates the parallel `createXResource(engine)` factory files +
- *      `exclude: [...]` bookkeeping that engine-bound resources used to need.
- *
- * Detection is by `typeof === 'function'`: `ResourceDefinition` instances
- * (returned by `defineResource()`) are class instances (`typeof === 'object'`),
- * so the two shapes are unambiguous in practice.
- */
-type ResourceModule<TContext = unknown> = ResourceLike | ((ctx: TContext) => ResourceLike | Promise<ResourceLike>);
-interface LoadResourcesOptions<TContext = unknown> {
-  /** File pattern suffix (default: '.resource'). Matches `*.resource.{ts,js,mts,mjs}`. */
-  suffix?: string;
-  /** Recurse into subdirectories (default: true) */
-  recursive?: boolean;
-  /**
-   * Context passed to factory-style default exports. Resources whose default
-   * export is a function `(ctx) => ResourceLike` are called with this value;
-   * plain `ResourceLike` exports are returned unchanged.
-   *
-   * Use this to thread engine handles into engine-bound resources without
-   * creating parallel factory files outside `loadResources`'s sweep:
-   *
-   * ```ts
-   * // category.resource.ts
-   * import type { AppContext } from '#core/app/context.js';
-   * export default (ctx: AppContext) =>
-   *   defineResource({
-   *     name: 'category',
-   *     adapter: createMongooseAdapter(
-   *       ctx.catalog.models.Category,
-   *       ctx.catalog.repositories.category,
-   *     ),
-   *   });
-   *
-   * // create-arc-app-options.ts
-   * resources: async () => {
-   *   const [catalog, flow] = await Promise.all([
-   *     ensureCatalogEngine(),
-   *     ensureFlowEngine(),
-   *   ]);
-   *   return loadResources(import.meta.url, { context: { catalog, flow } });
-   * }
-   * ```
-   *
-   * Backwards compatible — pre-2.11.1 callers omit `context`, plain exports
-   * keep working unchanged. Factories that need a context but receive
-   * `undefined` should narrow defensively.
-   */
-  context?: TContext;
-  /**
-   * Resource names to exclude. Matched against the resource's `.name` property
-   * after import, so you use the resource name (not the filename).
-   *
-   * @example
-   * ```ts
-   * await loadResources('./src/resources', { exclude: ['debug', 'legacy-report'] })
-   * ```
-   */
-  exclude?: string[];
-  /**
-   * Resource names to include. When set, only matching resources are returned.
-   * Takes priority over `exclude`.
-   *
-   * @example
-   * ```ts
-   * // Only load these two resources (useful for testing or microservice splits)
-   * await loadResources('./src/resources', { include: ['product', 'order'] })
-   * ```
-   */
-  include?: string[];
-  /**
-   * Optional logger override for diagnostics. When omitted, warnings flow
-   * through arc's standard logger (`arcLog('loadResources')`) — same path
-   * as every other arc-internal warning, controlled by `ARC_SUPPRESS_WARNINGS=1`
-   * and routable via `configureArcLogger({ writer })`.
-   *
-   * Pass any object with `warn(msg)` to override (e.g. `fastify.log` —
-   * which is what `registerResources` passes automatically when arc's
-   * factory triggers auto-discovery via `resourceDir`).
-   *
-   * Pre-2.11.1 had a `silent: boolean` flag and "silent by default" semantics;
-   * both removed. Migration:
-   *
-   * ```ts
-   * // Pre-2.11.1                                // 2.11.1+
-   * loadResources(url, { silent: true });            // ARC_SUPPRESS_WARNINGS=1 (env)
-   *                                                  //   OR configureArcLogger({ writer })
-   * loadResources(url, { silent: !isDev });          // ARC_SUPPRESS_WARNINGS=1 in prod
-   * loadResources(url, { logger: pinoAdapter });     // unchanged — still works
-   * ```
-   */
-  logger?: {
-    warn: (msg: string) => void;
-  };
-}
-/**
- * Scan a directory for resource files and import their default exports.
- *
- * Accepts a directory path OR `import.meta.url` (file:// URL).
- * When given a URL, resolves to the directory containing that file —
- * so `loadResources(import.meta.url)` works in both dev (`src/`) and
- * production (`dist/`) without path gymnastics.
- *
- * @param dir - Directory path, or `import.meta.url` (file:// URL resolved to its dirname)
- * @param options - Pattern and recursion options
- * @returns Array of resource definitions (anything with `.toPlugin()`)
- *
- * @example
- * ```ts
- * // Works from both src/ and dist/ — resolves relative to the calling file
- * await loadResources(import.meta.url);
- *
- * // Subdirectory relative to the calling file
- * await loadResources(import.meta.url, { suffix: '.resource' });
- *
- * // Explicit path (must match runtime layout)
- * await loadResources('./src/resources');
- * ```
- */
-declare function loadResources<TContext = unknown>(dir: string, options?: LoadResourcesOptions<TContext>): Promise<ResourceLike[]>;
-//#endregion
 //#region src/testing/preloadResources.d.ts
 /** Eager glob result: `{ '/path/to/file.ts': resourceModule }` */
 type EagerGlobResult = Record<string, unknown>;
@@ -843,6 +651,56 @@ interface CreateAppOptions {
    * ```
    */
   serializeBigInt?: boolean | "number" | "string";
+  /**
+   * Domain modules — compose whole domains into the app, one entry each.
+   *
+   * Where a `resources` entry is a single route group, a module is a self-
+   * contained domain package's full contribution (engine init + resources +
+   * post-wiring) bundled as one `ArcModule`. A package exports
+   * `createXModule(deps): ArcModule`; the host lists it here instead of hand-
+   * threading the package's pieces across `bootstrap` / `resources` /
+   * `afterResources`.
+   *
+   * Modules are pure sugar over the existing lifecycle — each expands into the
+   * SAME phases, in `dependsOn` order, running BEFORE the app-level entry in
+   * every phase:
+   * ```
+   * app plugins()  → modules[].plugins         (infra registration)
+   * modules[].bootstrap      → options.bootstrap
+   * modules[].resources      → options.resources / resourceDir  (see note ↓)
+   * modules[].afterResources → options.afterResources
+   * modules[].onClose (REVERSE order) → options.onClose   (one hook; see below)
+   * ```
+   * RESOURCES — two orderings, both intentional: app `resources`/`resourceDir`
+   * RESOLVE first (semantics untouched), but module resources REGISTER first
+   * (prepended, so their routes mount ahead of app resources). Teardown runs
+   * module `onClose` (reverse composition order) then app `onClose` in a single
+   * close hook, so module teardown (flush outboxes, drain queues, close a
+   * module-owned connection) sees live shared infra — the app/plugin
+   * connections close last. Module resources flow through arc's normal
+   * registration (prefix, dedup, docs, audit) — they are not special-cased.
+   *
+   * Entries may be eager modules, promises, or **thunks of dynamic imports**
+   * (the `next/dynamic` idea, backend-shaped) — thunks resolve once at boot,
+   * so region/tier-gated packs are only imported when selected:
+   *
+   * @example
+   * ```ts
+   * const taxPack = region === 'BD'
+   *   ? () => import('@classytic/bd-tax/module').then((m) => m.createBdTaxModule(deps))
+   *   : () => import('@classytic/us-tax/module').then((m) => m.createUsTaxModule(deps));
+   *
+   * const app = await createApp({
+   *   resourcePrefix: '/api/v1',
+   *   modules: [accountingModule({ permissions }), taxPack],
+   *   resources: [healthResource], // app-local resources still compose alongside
+   * });
+   * ```
+   *
+   * See `wiki/modules.md` for the full design (authoring convention, events/
+   * outbox integration, microservices path).
+   */
+  modules?: ReadonlyArray<ArcModuleInput>;
   /**
    * Resources to register automatically. Accepts two shapes:
    *
@@ -1064,4 +922,4 @@ interface RawBodyOptions {
   runFirst?: boolean;
 }
 //#endregion
-export { CustomPluginAuthOption as a, RawBodyOptions as c, preloadResourcesAsync as d, LoadResourcesOptions as f, loadResources as h, CustomAuthenticatorOption as i, UnderPressureOptions as l, ResourceModule as m, BetterAuthOption as n, JwtAuthOption as o, ResourceLike as p, CreateAppOptions as r, MultipartOptions as s, AuthOption as t, preloadResources as u };
+export { CustomPluginAuthOption as a, RawBodyOptions as c, preloadResourcesAsync as d, CustomAuthenticatorOption as i, UnderPressureOptions as l, BetterAuthOption as n, JwtAuthOption as o, CreateAppOptions as r, MultipartOptions as s, AuthOption as t, preloadResources as u };

package/dist/{types-D60PFwfG.d.mts → types-C9b2HR5W.d.mts}

@@ -1,4 +1,4 @@
-import { V as ResourceDefinition } from "./index-CHNQIhcb.mjs";
+import { V as ResourceDefinition } from "./index-_--GyzcO.mjs";
 import { z } from "zod";
 
 //#region src/integrations/mcp/types.d.ts

package/dist/utils/index.d.mts

@@ -1,4 +1,4 @@
-import { Kt as AnyRecord, S as QueryParserInterface, Zt as UserLike, b as ParsedQuery, et as OpenApiSchemas, st as ResourceConfig } from "../index-CHNQIhcb.mjs";
+import { Qt as UserLike, S as QueryParserInterface, b as ParsedQuery, et as OpenApiSchemas, qt as AnyRecord, st as ResourceConfig } from "../index-_--GyzcO.mjs";
 import { n as ErrorMapper } from "../errorHandler-BtUUDPEa.mjs";
 import { a as NotFoundError, c as RateLimitError, d as ValidationError, f as createDomainError, i as ForbiddenError, l as ServiceUnavailableError, m as isArcError, n as ConflictError, o as OrgAccessDeniedError, p as createError, r as ErrorOptions, s as OrgRequiredError, t as ArcError, u as UnauthorizedError } from "../errors-DOHkjQlD.mjs";
 import { errorContractSchema, errorDetailSchema } from "@classytic/repo-core/errors";

package/dist/utils/index.mjs

@@ -1,5 +1,5 @@
 import { a as OrgAccessDeniedError, c as ServiceUnavailableError, d as createDomainError, f as createError, i as NotFoundError, l as UnauthorizedError, n as ConflictError, o as OrgRequiredError, p as isArcError, r as ForbiddenError, s as RateLimitError, t as ArcError, u as ValidationError } from "../errors-DkO8Nk6-.mjs";
-import { A as createQueryParser, C as keysetListResponse, D as queryParams, E as paginationSchema, M as scheduleBackground, N as simpleEqualityMatcher, O as responses, S as getListQueryParams, T as offsetListResponse, _ as bareListResponse, a as defineCompensation, b as errorDetailSchema, c as CircuitBreakerError, d as createCircuitBreaker, f as createCircuitBreakerRegistry, g as aggregateListResponse, h as validateResourceConfig, i as defineErrorMapper, j as getUserId, k as ArcQueryParser, l as CircuitBreakerRegistry, m as formatValidationErrors, n as handleRaw, o as withCompensation, p as assertValidConfig, r as defineGuard, s as CircuitBreaker, t as createStateMachine, u as CircuitState, v as deleteResponse, w as listResponse, x as getDefaultCrudSchemas, y as errorContractSchema } from "../utils-C6QQ9-hd.mjs";
+import { A as assertValidConfig, C as withCompensation, D as CircuitState, E as CircuitBreakerRegistry, M as validateResourceConfig, N as simpleEqualityMatcher, O as createCircuitBreaker, S as defineCompensation, T as CircuitBreakerError, _ as ArcQueryParser, a as bareListResponse, b as defineGuard, c as errorDetailSchema, d as keysetListResponse, f as listResponse, g as responses, h as queryParams, i as aggregateListResponse, j as formatValidationErrors, k as createCircuitBreakerRegistry, l as getDefaultCrudSchemas, m as paginationSchema, n as createStateMachine, o as deleteResponse, p as offsetListResponse, r as scheduleBackground, s as errorContractSchema, t as getUserId, u as getListQueryParams, v as createQueryParser, w as CircuitBreaker, x as defineErrorMapper, y as handleRaw } from "../utils-ChjYQpjn.mjs";
 import { a as toJsonSchema, i as isZodSchema, n as convertRouteSchema, r as isJsonSchema, t as convertOpenApiSchemas } from "../schemaConverter-U0MnO9vd.mjs";
 import { a as promoteStreamTokenToHeader, i as pipeUIMessageStreamToReply, n as forwardedStreamHeaders, r as isReadableStream, t as UI_MESSAGE_STREAM_HEADERS } from "../streaming-BQcW6_Kq.mjs";
 import { t as hasEvents } from "../typeGuards-C9KXUly6.mjs";