@classytic/arc 2.20.0 → 2.21.0

package/dist/middleware/index.d.mts

@@ -1,6 +1,5 @@
-import { I as MiddlewareHandler, L as RequestWithExtras, Q as MiddlewareConfig } from "../index-_--GyzcO.mjs";
+import { I as MiddlewareHandler, L as RequestWithExtras, Q as MiddlewareConfig } from "../index-Dtrj6XZk.mjs";
 import { RouteHandlerMethod } from "fastify";
-
 //#region src/middleware/middleware.d.ts
 interface NamedMiddleware {
   /** Unique name for debugging/introspection */

package/dist/{module-JYH9V0I8.d.mts → module-WeuU5jfd.d.mts}

@@ -1,5 +1,5 @@
+import { n as ErrorMapper } from "./errorHandler-B0e-bq-O.mjs";
 import { FastifyInstance } from "fastify";
-
 //#region src/factory/loadResources.d.ts
 /**
  * loadResources — Auto-discover resource files from a directory.
@@ -142,6 +142,31 @@ interface LoadResourcesOptions<TContext = unknown> {
    * ```
    */
   include?: string[];
+  /**
+   * Path-level gate, called for every discovered file BEFORE it is imported.
+   * Return `false` to skip the file entirely — its module never evaluates,
+   * so top-level side effects (engine construction, model registration) of
+   * gated-off features never fire. That's the difference from
+   * `include`/`exclude`, which match resource NAMES after import.
+   *
+   * The feature-flag → resource-dir manifest every tiered SaaS host carries
+   * becomes one callback:
+   *
+   * ```ts
+   * await loadResources(import.meta.url, {
+   *   filter: (path) => {
+   *     if (path.includes(`${sep}loyalty${sep}`)) return isFeatureEnabled('loyalty');
+   *     if (path.includes(`${sep}pos${sep}`)) return isFeatureEnabled('pos');
+   *     return true;
+   *   },
+   * });
+   * ```
+   *
+   * Receives the ABSOLUTE file path. Gating everything is legitimate — the
+   * result is an empty array (interacts with `strictResourceDir` like any
+   * other empty discovery).
+   */
+  filter?: (absolutePath: string) => boolean;
   /**
    * Optional logger override for diagnostics. When omitted, warnings flow
    * through arc's standard logger (`arcLog('loadResources')`) — same path
@@ -243,6 +268,26 @@ interface ArcModule<TExports = unknown> {
    * inside `bootstrap` still works — this slot just makes the two distinct.
    */
   plugins?: (fastify: FastifyInstance) => void | Promise<void>;
+  /**
+   * Domain error mappers this module ships (see `defineErrorMapper`). Merged
+   * into the app's error handler at boot, AFTER any host-declared mappers —
+   * host config keeps priority; module mappers follow in composition order.
+   *
+   * Closes the "composition root must know every domain's error classes"
+   * coupling: before this slot, adding `@classytic/arc-shipping` meant
+   * remembering to also register its `ShippingError` mapper in the host's
+   * `errorHandler.errorMappers` — forget it and the domain error crossed the
+   * wire as an opaque 500. Now the module carries its own mapper:
+   *
+   * ```ts
+   * defineModule({
+   *   name: 'shipping',
+   *   errorMappers: [shippingErrorMapper],
+   *   ...
+   * })
+   * ```
+   */
+  readonly errorMappers?: readonly ErrorMapper[];
   /**
    * Domain init — runs in the `bootstrap` phase (after all `plugins`, before
    * resources). Initialize engines / singletons / event subscriptions here so

package/dist/{openapi-Dq6RbEGK.mjs → openapi-Kyod_di6.mjs}

@@ -1,8 +1,8 @@
 import { t as getUserRoles } from "./types-XTApa8b6.mjs";
 import { n as convertRouteSchema } from "./schemaConverter-U0MnO9vd.mjs";
-import { t as resolveActionPermission } from "./actionPermissions-C9RMiIpc.mjs";
+import { t as resolveActionPermission } from "./actionPermissions-ze70xXJi.mjs";
 import { t as pluralize } from "./pluralize-BhrgwZb9.mjs";
-import { t as buildActionBodySchema } from "./createActionRouter-HlQso0jO.mjs";
+import { t as buildActionBodySchema } from "./createActionRouter-BWMDW-dL.mjs";
 import fp from "fastify-plugin";
 //#region src/docs/openapi/canonical-schemas.ts
 /**

package/dist/permissions/index.d.mts

@@ -1,3 +1,3 @@
-import { a as applyFieldWritePermissions, c as PermissionCheck, d as UserBase, f as getUserRoles, i as applyFieldReadPermissions, l as PermissionContext, n as FieldPermissionMap, o as fields, p as normalizeRoles, r as FieldPermissionType, s as resolveEffectiveRoles, t as FieldPermission, u as PermissionResult } from "../fields-C7ahdGYf.mjs";
-import { A as requireRoles, C as allOf, D as not, E as denyAll, F as RequireAgentScopeOptions, I as RequireMandateOptions, L as requireAgentScope, M as when, N as applyPermissionResult, O as requireAuth, P as normalizePermissionResult, R as requireDPoP, S as createOrgPermissions, T as anyOf, _ as ConnectEventsOptions, a as presets_d_exports, b as PermissionEventBus, c as readOnly, d as requireOrgRole, f as requireScopeContext, g as createRoleHierarchy, h as RoleHierarchy, i as ownerWithAdminBypass, j as roles, k as requireOwnership, l as requireOrgInScope, m as requireTeamMembership, n as authenticated, o as publicRead, p as requireServiceScope, r as fullPublic, s as publicReadAdminWrite, t as adminOnly, u as requireOrgMembership, v as DynamicPermissionMatrix, w as allowPublic, x as createDynamicPermissionMatrix, y as DynamicPermissionMatrixConfig, z as requireMandate } from "../index-CdFkIMEd.mjs";
-export { type ConnectEventsOptions, type DynamicPermissionMatrix, type DynamicPermissionMatrixConfig, type FieldPermission, type FieldPermissionMap, type FieldPermissionType, type PermissionCheck, type PermissionContext, type PermissionEventBus, type PermissionResult, type RequireAgentScopeOptions, type RequireMandateOptions, type RoleHierarchy, type UserBase, adminOnly, allOf, allowPublic, anyOf, applyFieldReadPermissions, applyFieldWritePermissions, applyPermissionResult, authenticated, createDynamicPermissionMatrix, createOrgPermissions, createRoleHierarchy, denyAll, fields, fullPublic, getUserRoles, normalizePermissionResult, normalizeRoles, not, ownerWithAdminBypass, presets_d_exports as permissions, publicRead, publicReadAdminWrite, readOnly, requireAgentScope, requireAuth, requireDPoP, requireMandate, requireOrgInScope, requireOrgMembership, requireOrgRole, requireOwnership, requireRoles, requireScopeContext, requireServiceScope, requireTeamMembership, resolveEffectiveRoles, roles, when };
+import { a as applyFieldWritePermissions, c as PermissionCheck, d as UserBase, f as getUserRoles, i as applyFieldReadPermissions, l as PermissionContext, n as FieldPermissionMap, o as fields, p as normalizeRoles, r as FieldPermissionType, s as resolveEffectiveRoles, t as FieldPermission, u as PermissionResult } from "../fields-BGqrAa_u.mjs";
+import { A as requireOwnership, B as requireMandate, C as createOrgPermissions, D as denyAll, E as anyOf, F as normalizePermissionResult, I as RequireAgentScopeOptions, L as RequireMandateOptions, M as roles, N as when, O as not, P as applyPermissionResult, R as requireAgentScope, S as createDynamicPermissionMatrix, T as allowPublic, _ as createRoleHierarchy, a as permissionMatrix, b as DynamicPermissionMatrixConfig, c as publicReadAdminWrite, d as requireOrgMembership, f as requireOrgRole, g as RoleHierarchy, h as requireTeamMembership, i as ownerWithAdminBypass, j as requireRoles, k as requireAuth, l as readOnly, m as requireServiceScope, n as authenticated, o as presets_d_exports, p as requireScopeContext, r as fullPublic, s as publicRead, t as adminOnly, u as requireOrgInScope, v as ConnectEventsOptions, w as allOf, x as PermissionEventBus, y as DynamicPermissionMatrix, z as requireDPoP } from "../index-B5PoNbfu.mjs";
+export { type ConnectEventsOptions, type DynamicPermissionMatrix, type DynamicPermissionMatrixConfig, type FieldPermission, type FieldPermissionMap, type FieldPermissionType, type PermissionCheck, type PermissionContext, type PermissionEventBus, type PermissionResult, type RequireAgentScopeOptions, type RequireMandateOptions, type RoleHierarchy, type UserBase, adminOnly, allOf, allowPublic, anyOf, applyFieldReadPermissions, applyFieldWritePermissions, applyPermissionResult, authenticated, createDynamicPermissionMatrix, createOrgPermissions, createRoleHierarchy, denyAll, fields, fullPublic, getUserRoles, normalizePermissionResult, normalizeRoles, not, ownerWithAdminBypass, permissionMatrix, presets_d_exports as permissions, publicRead, publicReadAdminWrite, readOnly, requireAgentScope, requireAuth, requireDPoP, requireMandate, requireOrgInScope, requireOrgMembership, requireOrgRole, requireOwnership, requireRoles, requireScopeContext, requireServiceScope, requireTeamMembership, resolveEffectiveRoles, roles, when };

package/dist/permissions/index.mjs

@@ -1,3 +1,3 @@
-import { A as requireMandate, C as requireAuth, D as when, E as roles, F as applyFieldWritePermissions, I as fields, L as resolveEffectiveRoles, N as normalizePermissionResult, O as requireAgentScope, P as applyFieldReadPermissions, S as not, T as requireRoles, _ as requireTeamMembership, a as presets_exports, b as anyOf, c as readOnly, d as createOrgPermissions, f as requireOrgInScope, g as requireServiceScope, h as requireScopeContext, i as ownerWithAdminBypass, j as applyPermissionResult, k as requireDPoP, l as createRoleHierarchy, m as requireOrgRole, n as authenticated, o as publicRead, p as requireOrgMembership, r as fullPublic, s as publicReadAdminWrite, t as adminOnly, u as createDynamicPermissionMatrix, v as allOf, w as requireOwnership, x as denyAll, y as allowPublic } from "../permissions-CgbOLJZG.mjs";
+import { A as requireDPoP, C as not, D as roles, E as requireRoles, F as applyFieldReadPermissions, I as applyFieldWritePermissions, L as fields, M as applyPermissionResult, O as when, P as normalizePermissionResult, R as resolveEffectiveRoles, S as denyAll, T as requireOwnership, _ as requireServiceScope, a as permissionMatrix, b as allowPublic, c as publicReadAdminWrite, d as createDynamicPermissionMatrix, f as createOrgPermissions, g as requireScopeContext, h as requireOrgRole, i as ownerWithAdminBypass, j as requireMandate, k as requireAgentScope, l as readOnly, m as requireOrgMembership, n as authenticated, o as presets_exports, p as requireOrgInScope, r as fullPublic, s as publicRead, t as adminOnly, u as createRoleHierarchy, v as requireTeamMembership, w as requireAuth, x as anyOf, y as allOf } from "../permissions-BJMuKMl7.mjs";
 import { n as normalizeRoles, t as getUserRoles } from "../types-XTApa8b6.mjs";
-export { adminOnly, allOf, allowPublic, anyOf, applyFieldReadPermissions, applyFieldWritePermissions, applyPermissionResult, authenticated, createDynamicPermissionMatrix, createOrgPermissions, createRoleHierarchy, denyAll, fields, fullPublic, getUserRoles, normalizePermissionResult, normalizeRoles, not, ownerWithAdminBypass, presets_exports as permissions, publicRead, publicReadAdminWrite, readOnly, requireAgentScope, requireAuth, requireDPoP, requireMandate, requireOrgInScope, requireOrgMembership, requireOrgRole, requireOwnership, requireRoles, requireScopeContext, requireServiceScope, requireTeamMembership, resolveEffectiveRoles, roles, when };
+export { adminOnly, allOf, allowPublic, anyOf, applyFieldReadPermissions, applyFieldWritePermissions, applyPermissionResult, authenticated, createDynamicPermissionMatrix, createOrgPermissions, createRoleHierarchy, denyAll, fields, fullPublic, getUserRoles, normalizePermissionResult, normalizeRoles, not, ownerWithAdminBypass, permissionMatrix, presets_exports as permissions, publicRead, publicReadAdminWrite, readOnly, requireAgentScope, requireAuth, requireDPoP, requireMandate, requireOrgInScope, requireOrgMembership, requireOrgRole, requireOwnership, requireRoles, requireScopeContext, requireServiceScope, requireTeamMembership, resolveEffectiveRoles, roles, when };

package/dist/{permissions-CgbOLJZG.mjs → permissions-BJMuKMl7.mjs}

@@ -1382,6 +1382,7 @@ var presets_exports = /* @__PURE__ */ __exportAll({
 	authenticated: () => authenticated,
 	fullPublic: () => fullPublic,
 	ownerWithAdminBypass: () => ownerWithAdminBypass,
+	permissionMatrix: () => permissionMatrix,
 	publicRead: () => publicRead,
 	publicReadAdminWrite: () => publicReadAdminWrite,
 	readOnly: () => readOnly
@@ -1450,6 +1451,37 @@ function adminOnly(roles = ["admin"], overrides) {
 	}, overrides);
 }
 /**
+* Arbitrary-gate CRUD matrix — the generalization every host and arc-*
+* module hand-rolls as `{ list: view, get: view, create: manage, ... }`.
+*
+* Unlike the fixed presets above, the gates are caller-supplied
+* `PermissionCheck`s, so ANY combinator plugs in — org roles, ownership,
+* `anyOf(...)`, service scopes, custom async checks. `delete` defaults to
+* the `write` gate.
+*
+* @example
+* ```typescript
+* // Two-gate (view/manage) — the arc-* module convention:
+* permissionMatrix({ read: requireAuth(), write: requireOrgRole('manager') })
+*
+* // Three-gate with a stricter delete:
+* permissionMatrix({
+*   read: allowPublic(),
+*   write: requireOrgRole('manager'),
+*   delete: requireOrgRole('owner'),
+* })
+* ```
+*/
+function permissionMatrix(gates, overrides) {
+	return withOverrides({
+		list: gates.read,
+		get: gates.read,
+		create: gates.write,
+		update: gates.write,
+		delete: gates.delete ?? gates.write
+	}, overrides);
+}
+/**
 * Owner-scoped with admin bypass.
 * list = auth (scoped to owner), get = auth, create = auth,
 * update + delete = ownership check with admin bypass.
@@ -1498,4 +1530,4 @@ function readOnly(overrides) {
 	}, overrides);
 }
 //#endregion
-export { requireMandate as A, requireAuth as C, when as D, roles as E, applyFieldWritePermissions as F, fields as I, resolveEffectiveRoles as L, evaluateAndApplyPermission as M, normalizePermissionResult as N, requireAgentScope as O, applyFieldReadPermissions as P, not as S, requireRoles as T, requireTeamMembership as _, presets_exports as a, anyOf as b, readOnly as c, createOrgPermissions as d, requireOrgInScope as f, requireServiceScope as g, requireScopeContext as h, ownerWithAdminBypass as i, applyPermissionResult as j, requireDPoP as k, createRoleHierarchy as l, requireOrgRole as m, authenticated as n, publicRead as o, requireOrgMembership as p, fullPublic as r, publicReadAdminWrite as s, adminOnly as t, createDynamicPermissionMatrix as u, allOf as v, requireOwnership as w, denyAll as x, allowPublic as y };
+export { requireDPoP as A, not as C, roles as D, requireRoles as E, applyFieldReadPermissions as F, applyFieldWritePermissions as I, fields as L, applyPermissionResult as M, evaluateAndApplyPermission as N, when as O, normalizePermissionResult as P, resolveEffectiveRoles as R, denyAll as S, requireOwnership as T, requireServiceScope as _, permissionMatrix as a, allowPublic as b, publicReadAdminWrite as c, createDynamicPermissionMatrix as d, createOrgPermissions as f, requireScopeContext as g, requireOrgRole as h, ownerWithAdminBypass as i, requireMandate as j, requireAgentScope as k, readOnly as l, requireOrgMembership as m, authenticated as n, presets_exports as o, requireOrgInScope as p, fullPublic as r, publicRead as s, adminOnly as t, createRoleHierarchy as u, requireTeamMembership as v, requireAuth as w, anyOf as x, allOf as y };

package/dist/pipeline/index.d.mts

@@ -1,5 +1,4 @@
-import { Bt as Transform, Ft as NextFunction, It as OperationFilter, Lt as PipelineConfig, Nt as Guard, Pt as Interceptor, Rt as PipelineContext, bt as IControllerResponse, zt as PipelineStep } from "../index-_--GyzcO.mjs";
-
+import { Bt as Transform, Ft as NextFunction, It as OperationFilter, Lt as PipelineConfig, Nt as Guard, Pt as Interceptor, Rt as PipelineContext, bt as IControllerResponse, zt as PipelineStep } from "../index-Dtrj6XZk.mjs";
 //#region src/pipeline/guard.d.ts
 interface GuardOptions {
   operations?: OperationFilter;

package/dist/plugins/index.d.mts

@@ -1,11 +1,10 @@
-import { Q as MiddlewareConfig, ft as RouteDefinition, ht as RouteSchemaOptions, nt as PresetHook, qt as AnyRecord } from "../index-_--GyzcO.mjs";
-import { a as arcCorePlugin, i as _default, n as ArcCorePluginOptions, r as PluginMeta, t as ArcCore } from "../fastify-augmentation-CCQJEDgh.mjs";
-import { _ as HealthOptions, a as MetricsCollector, c as metricsPlugin, d as ssePlugin, f as CachingOptions, g as HealthCheck, h as cachingPlugin, i as MetricEntry, l as SSEOptions, m as _default$1, n as _default$7, o as MetricsOptions, p as CachingRule, r as versioningPlugin, s as _default$4, t as VersioningOptions, u as _default$6, v as _default$3, y as healthPlugin } from "../versioning-D_eBCfNr.mjs";
-import { i as errorHandlerPlugin, n as ErrorMapper, r as defaultIsDuplicateKeyError, t as ErrorHandlerOptions } from "../errorHandler-BtUUDPEa.mjs";
-import { t as TracingOptions } from "../tracing-D8jlGXP7.mjs";
+import { Q as MiddlewareConfig, ft as RouteDefinition, ht as RouteSchemaOptions, nt as PresetHook, qt as AnyRecord } from "../index-Dtrj6XZk.mjs";
+import { i as errorHandlerPlugin, n as ErrorMapper, r as defaultIsDuplicateKeyError, t as ErrorHandlerOptions } from "../errorHandler-B0e-bq-O.mjs";
+import { a as arcCorePlugin, i as _default, n as ArcCorePluginOptions, r as PluginMeta, t as ArcCore } from "../fastify-augmentation-DafigGQp.mjs";
+import { _ as HealthOptions, a as MetricsCollector, c as metricsPlugin, d as ssePlugin, f as CachingOptions, g as HealthCheck, h as cachingPlugin, i as MetricEntry, l as SSEOptions, m as _default$1, n as _default$8, o as MetricsOptions, p as CachingRule, r as versioningPlugin, s as _default$4, t as VersioningOptions, u as _default$7, v as _default$3, y as healthPlugin } from "../versioning-DQ4mCvg0.mjs";
+import { t as TracingOptions } from "../tracing-CsGKQJGg.mjs";
 import { PaginatedResult } from "@classytic/repo-core/pagination";
 import { FastifyInstance, FastifyPluginAsync } from "fastify";
-
 //#region src/plugins/createPlugin.d.ts
 interface PluginResourceResult {
   /** Additional routes to add to the resource (v2.8 `RouteDefinition` shape) */
@@ -149,4 +148,77 @@ declare module "fastify" {
 declare const requestIdPlugin: FastifyPluginAsync<RequestIdOptions>;
 declare const _default$5: FastifyPluginAsync<RequestIdOptions>;
 //#endregion
-export { type ArcCore, type ArcCorePluginOptions, type ArcPlugin, type CachingOptions, type CachingRule, type CreatePluginDefinition, type ErrorHandlerOptions, type ErrorMapper, type GracefulShutdownOptions, type HealthCheck, type HealthOptions, type MetricEntry, type MetricsCollector, type MetricsOptions, type PluginMeta, type PluginResourceResult, type RequestIdOptions, type SSEOptions, type TracingOptions, type VersioningOptions, _default as arcCorePlugin, arcCorePlugin as arcCorePluginFn, _default$1 as cachingPlugin, cachingPlugin as cachingPluginFn, createPlugin, defaultIsDuplicateKeyError, errorHandlerPlugin, errorHandlerPlugin as errorHandlerPluginFn, _default$2 as gracefulShutdownPlugin, gracefulShutdownPlugin as gracefulShutdownPluginFn, _default$3 as healthPlugin, healthPlugin as healthPluginFn, _default$4 as metricsPlugin, metricsPlugin as metricsPluginFn, replyHelpersPlugin, _default$5 as requestIdPlugin, requestIdPlugin as requestIdPluginFn, _default$6 as ssePlugin, ssePlugin as ssePluginFn, _default$7 as versioningPlugin, versioningPlugin as versioningPluginFn };
+//#region src/plugins/schedules.d.ts
+/**
+ * Structural view of the ecosystem lock contract — matches
+ * `LockAdapter` from `@classytic/repo-core/lock` (and every kit
+ * implementation) WITHOUT importing the subpath, so arc's emitted
+ * declarations carry no repo-core@>=0.8 subpath reference and the
+ * peer floor stays honest. Any conforming adapter assigns.
+ */
+interface ScheduleLockLike {
+  tryAcquire(name: string, holderId: string, leaseMs: number): Promise<boolean> | boolean;
+  release(name: string, holderId: string): Promise<boolean> | boolean;
+}
+interface ScheduleDefinition {
+  /** Unique name — also the lock key (`arc:schedule:<name>`). */
+  name: string;
+  /** Interval in milliseconds between the END of one run and the next tick. */
+  every: number;
+  /** The work. Receives the Fastify instance; errors are logged, never fatal. */
+  handler: (fastify: FastifyInstance) => void | Promise<void>;
+  /** Fire once immediately when the app becomes ready (default: false). */
+  runOnStart?: boolean;
+  /**
+   * Random extra delay in `[0, jitterMs)` added to the FIRST tick only.
+   * Spreads boot-aligned jobs so multiple same-cadence schedules don't all
+   * fire at exactly `boot + every` after every restart (and, with a lock,
+   * de-synchronizes replicas competing for the same lease). Ignored when
+   * `runOnStart` is true.
+   */
+  jitterMs?: number;
+  /**
+   * Lease duration when a `lock` is configured. Default: `every * 0.9`
+   * (capped at 5 minutes) — long enough that other replicas skip the same
+   * tick, short enough that a crashed leader fails over within one cycle.
+   */
+  leaseMs?: number;
+  /** Per-schedule kill switch (default: true). */
+  enabled?: boolean;
+}
+interface SchedulesPluginOptions {
+  schedules: ScheduleDefinition[];
+  /**
+   * Ecosystem lock adapter for multi-replica deployments. Omit for
+   * single-instance apps — every tick runs locally.
+   */
+  lock?: ScheduleLockLike;
+  /**
+   * Identity of this replica for lease ownership. Default: a random id per
+   * process (repo-core's `getInstanceId()` is a good explicit value).
+   */
+  holderId?: string;
+  /**
+   * Master switch — `false` registers a typed no-op (config-gated
+   * environments), same pattern as `idempotencyPlugin`.
+   */
+  enabled?: boolean;
+}
+/** Per-schedule runtime counters, readable via `fastify.getScheduleStats()`. */
+interface ScheduleStats {
+  name: string;
+  runs: number;
+  failures: number;
+  skippedByLock: number;
+  lastRunAt: string | null;
+  lastError: string | null;
+}
+declare module "fastify" {
+  interface FastifyInstance {
+    getScheduleStats?: () => ScheduleStats[];
+  }
+}
+declare const schedulesPlugin: FastifyPluginAsync<SchedulesPluginOptions>;
+declare const _default$6: FastifyPluginAsync<SchedulesPluginOptions>;
+//#endregion
+export { type ArcCore, type ArcCorePluginOptions, type ArcPlugin, type CachingOptions, type CachingRule, type CreatePluginDefinition, type ErrorHandlerOptions, type ErrorMapper, type GracefulShutdownOptions, type HealthCheck, type HealthOptions, type MetricEntry, type MetricsCollector, type MetricsOptions, type PluginMeta, type PluginResourceResult, type RequestIdOptions, type SSEOptions, type ScheduleDefinition, type ScheduleLockLike, type ScheduleStats, type SchedulesPluginOptions, type TracingOptions, type VersioningOptions, _default as arcCorePlugin, arcCorePlugin as arcCorePluginFn, _default$1 as cachingPlugin, cachingPlugin as cachingPluginFn, createPlugin, defaultIsDuplicateKeyError, errorHandlerPlugin, errorHandlerPlugin as errorHandlerPluginFn, _default$2 as gracefulShutdownPlugin, gracefulShutdownPlugin as gracefulShutdownPluginFn, _default$3 as healthPlugin, healthPlugin as healthPluginFn, _default$4 as metricsPlugin, metricsPlugin as metricsPluginFn, replyHelpersPlugin, _default$5 as requestIdPlugin, requestIdPlugin as requestIdPluginFn, _default$6 as schedulesPlugin, schedulesPlugin as schedulesPluginFn, _default$7 as ssePlugin, ssePlugin as ssePluginFn, _default$8 as versioningPlugin, versioningPlugin as versioningPluginFn };

package/dist/plugins/index.mjs

@@ -469,4 +469,91 @@ var requestId_default = fp(requestIdPlugin, {
 	fastify: "5.x"
 });
 //#endregion
-export { arcCorePlugin_default as arcCorePlugin, arcCorePlugin as arcCorePluginFn, caching_default as cachingPlugin, cachingPlugin as cachingPluginFn, createPlugin, defaultIsDuplicateKeyError, errorHandlerPlugin, errorHandlerPlugin as errorHandlerPluginFn, gracefulShutdown_default as gracefulShutdownPlugin, gracefulShutdownPlugin as gracefulShutdownPluginFn, health_default as healthPlugin, healthPlugin as healthPluginFn, metrics_default as metricsPlugin, metricsPlugin as metricsPluginFn, replyHelpersPlugin, requestId_default as requestIdPlugin, requestIdPlugin as requestIdPluginFn, sse_default as ssePlugin, ssePlugin as ssePluginFn, versioning_default as versioningPlugin, versioningPlugin as versioningPluginFn };
+//#region src/plugins/schedules.ts
+const MIN_SAFE_INTERVAL_MS = 1e3;
+const MAX_DEFAULT_LEASE_MS = 3e5;
+const schedulesPlugin = async (fastify, opts) => {
+	const { schedules, lock, enabled = true } = opts;
+	const holderId = opts.holderId ?? `arc-${process.pid}-${Math.random().toString(36).slice(2, 10)}`;
+	const stats = /* @__PURE__ */ new Map();
+	fastify.decorate("getScheduleStats", () => [...stats.values()].map((s) => ({ ...s })));
+	if (!enabled) {
+		fastify.log.debug("schedulesPlugin disabled — registered as no-op");
+		return;
+	}
+	const seen = /* @__PURE__ */ new Set();
+	for (const s of schedules) {
+		if (!s.name) throw new TypeError("[arc-schedules] every schedule needs a name");
+		if (seen.has(s.name)) throw new TypeError(`[arc-schedules] duplicate schedule name "${s.name}"`);
+		seen.add(s.name);
+		if (!Number.isFinite(s.every) || s.every <= 0) throw new TypeError(`[arc-schedules] "${s.name}": \`every\` must be a positive number of ms`);
+		if (s.every < MIN_SAFE_INTERVAL_MS) fastify.log.warn(`[arc-schedules] "${s.name}" runs every ${s.every}ms — sub-second schedules are almost always a bug in production (DB pressure, lock churn). Intended for tests only.`);
+	}
+	const timers = /* @__PURE__ */ new Map();
+	const inFlight = /* @__PURE__ */ new Map();
+	let closing = false;
+	async function tick(s) {
+		const stat = stats.get(s.name);
+		if (!stat) return;
+		try {
+			if (lock) {
+				const leaseMs = s.leaseMs ?? Math.min(Math.floor(s.every * .9), MAX_DEFAULT_LEASE_MS);
+				if (!await lock.tryAcquire(`arc:schedule:${s.name}`, holderId, leaseMs)) {
+					stat.skippedByLock++;
+					return;
+				}
+			}
+			stat.runs++;
+			stat.lastRunAt = (/* @__PURE__ */ new Date()).toISOString();
+			await s.handler(fastify);
+			stat.lastError = null;
+		} catch (err) {
+			stat.failures++;
+			stat.lastError = err instanceof Error ? err.message : String(err);
+			fastify.log.error({
+				err,
+				schedule: s.name
+			}, "[arc-schedules] schedule run failed");
+		}
+	}
+	function scheduleNext(s, delay) {
+		if (closing) return;
+		const timer = setTimeout(() => {
+			const run = tick(s).finally(() => {
+				inFlight.delete(s.name);
+				scheduleNext(s, s.every);
+			});
+			inFlight.set(s.name, run);
+		}, delay);
+		timer.unref?.();
+		timers.set(s.name, timer);
+	}
+	fastify.addHook("onReady", async () => {
+		for (const s of schedules) {
+			if (s.enabled === false) continue;
+			stats.set(s.name, {
+				name: s.name,
+				runs: 0,
+				failures: 0,
+				skippedByLock: 0,
+				lastRunAt: null,
+				lastError: null
+			});
+			const jitter = !s.runOnStart && s.jitterMs ? Math.floor(Math.random() * s.jitterMs) : 0;
+			scheduleNext(s, s.runOnStart ? 0 : s.every + jitter);
+		}
+		if (stats.size > 0) fastify.log.debug(`[arc-schedules] ${stats.size} schedule(s) armed${lock ? ` (leader-safe, holder ${holderId})` : ""}`);
+	});
+	fastify.addHook("onClose", async () => {
+		closing = true;
+		for (const timer of timers.values()) clearTimeout(timer);
+		timers.clear();
+		await Promise.allSettled([...inFlight.values()]);
+	});
+};
+var schedules_default = fp(schedulesPlugin, {
+	name: "arc-schedules",
+	fastify: "5.x"
+});
+//#endregion
+export { arcCorePlugin_default as arcCorePlugin, arcCorePlugin as arcCorePluginFn, caching_default as cachingPlugin, cachingPlugin as cachingPluginFn, createPlugin, defaultIsDuplicateKeyError, errorHandlerPlugin, errorHandlerPlugin as errorHandlerPluginFn, gracefulShutdown_default as gracefulShutdownPlugin, gracefulShutdownPlugin as gracefulShutdownPluginFn, health_default as healthPlugin, healthPlugin as healthPluginFn, metrics_default as metricsPlugin, metricsPlugin as metricsPluginFn, replyHelpersPlugin, requestId_default as requestIdPlugin, requestIdPlugin as requestIdPluginFn, schedules_default as schedulesPlugin, schedulesPlugin as schedulesPluginFn, sse_default as ssePlugin, ssePlugin as ssePluginFn, versioning_default as versioningPlugin, versioningPlugin as versioningPluginFn };

package/dist/plugins/response-cache.d.mts

@@ -1,5 +1,4 @@
 import { FastifyPluginAsync, FastifyRequest } from "fastify";
-
 //#region src/plugins/response-cache.d.ts
 interface ResponseCacheRule {
   /** Path prefix to match (e.g., '/api/products') */
@@ -57,8 +56,11 @@ interface ResponseCacheStats {
 declare module "fastify" {
   interface FastifyInstance {
     responseCache: {
-      /** Invalidate all cached responses matching a path prefix */invalidate: (pathPrefix: string) => number; /** Clear the entire cache */
-      invalidateAll: () => void; /** Get cache statistics */
+      /** Invalidate all cached responses matching a path prefix */
+      invalidate: (pathPrefix: string) => number;
+      /** Clear the entire cache */
+      invalidateAll: () => void;
+      /** Get cache statistics */
       stats: () => ResponseCacheStats;
       /**
        * Route-level preHandler for cache lookup.

package/dist/plugins/tracing-entry.d.mts

@@ -1,2 +1,2 @@
-import { a as traced, i as isTracingAvailable, n as _default, r as createSpan, t as TracingOptions } from "../tracing-D8jlGXP7.mjs";
+import { a as traced, i as isTracingAvailable, n as _default, r as createSpan, t as TracingOptions } from "../tracing-CsGKQJGg.mjs";
 export { type TracingOptions, createSpan, isTracingAvailable, traced, _default as tracingPlugin };

package/dist/plugins/tracing-entry.mjs

@@ -58,7 +58,7 @@ try {
 function createTracerProvider(options) {
 	if (!isAvailable || !NodeTracerProvider || !BatchSpanProcessor || !OTLPTraceExporter) return null;
 	const { serviceName = "@classytic/arc", serviceVersion, exporterUrl = "http://localhost:4318/v1/traces" } = options;
-	const resolvedVersion = serviceVersion ?? "2.20.0";
+	const resolvedVersion = serviceVersion ?? "2.21.0";
 	const exporter = new OTLPTraceExporter({ url: exporterUrl });
 	const provider = new NodeTracerProvider({ resource: { attributes: {
 		"service.name": serviceName,

package/dist/presets/filesUpload.d.mts

@@ -1,8 +1,7 @@
-import { rt as PresetResult } from "../index-_--GyzcO.mjs";
-import { i as RequestScope } from "../types-LNebCoJx.mjs";
-import { c as PermissionCheck } from "../fields-C7ahdGYf.mjs";
-import { a as StorageReadResult, i as StorageReadRange, n as StorageContext, o as StorageUploadInput, r as StorageFile, t as Storage } from "../storage-Co_PQpeQ.mjs";
-
+import { rt as PresetResult } from "../index-Dtrj6XZk.mjs";
+import { i as RequestScope } from "../types-DH0GupI7.mjs";
+import { c as PermissionCheck } from "../fields-BGqrAa_u.mjs";
+import { a as StorageReadResult, i as StorageReadRange, n as StorageContext, o as StorageUploadInput, r as StorageFile, t as Storage } from "../storage-DLUZ04kK.mjs";
 //#region src/presets/filesUpload.d.ts
 interface FilesUploadPresetRoutes {
   upload?: boolean;

package/dist/presets/filesUpload.mjs

@@ -1,6 +1,6 @@
 import { i as NotFoundError, u as ValidationError } from "../errors-DkO8Nk6-.mjs";
 import { c as getOrgId, g as getUserId } from "../types-bHblZ9YN.mjs";
-import { C as requireAuth, y as allowPublic } from "../permissions-CgbOLJZG.mjs";
+import { b as allowPublic, w as requireAuth } from "../permissions-BJMuKMl7.mjs";
 import { t as multipartBody } from "../multipartBody-CHEQSZ6G.mjs";
 //#region src/presets/filesUpload.ts
 const DEFAULT_FIELD_NAME = "file";

package/dist/presets/index.d.mts

@@ -1,8 +1,7 @@
-import { bt as IControllerResponse, d as PaginationResult, qt as AnyRecord, rt as PresetResult, st as ResourceConfig, xt as IRequestContext } from "../index-_--GyzcO.mjs";
+import { bt as IControllerResponse, d as PaginationResult, qt as AnyRecord, rt as PresetResult, st as ResourceConfig, xt as IRequestContext } from "../index-Dtrj6XZk.mjs";
 import { FilesUploadPresetOptions, FilesUploadPresetPermissions, FilesUploadPresetRoutes, filesUploadPreset } from "./filesUpload.mjs";
 import { MultiTenantOptions, TenantFieldSpec, multiTenantPreset } from "./multiTenant.mjs";
 import { SearchHandler, SearchPresetOptions, SearchRouteConfig, searchPreset } from "./search.mjs";
-
 //#region src/presets/ownedByUser.d.ts
 interface OwnedByUserOptions {
   ownerField?: string;

package/dist/presets/index.mjs

@@ -1,5 +1,5 @@
 import { multiTenantPreset } from "./multiTenant.mjs";
-import { a as registerPreset, c as auditedPreset, d as ownedByUserPreset, i as getPreset, l as softDeletePreset, n as flexibleMultiTenantPreset, o as treePreset, r as getAvailablePresets, s as bulkPreset, t as applyPresets, u as slugLookupPreset } from "../presets-DWsYQdbV.mjs";
+import { a as registerPreset, c as auditedPreset, d as ownedByUserPreset, i as getPreset, l as softDeletePreset, n as flexibleMultiTenantPreset, o as treePreset, r as getAvailablePresets, s as bulkPreset, t as applyPresets, u as slugLookupPreset } from "../presets-gw0ciIUD.mjs";
 import { filesUploadPreset } from "./filesUpload.mjs";
 import { searchPreset } from "./search.mjs";
 export { applyPresets, auditedPreset, bulkPreset, filesUploadPreset, flexibleMultiTenantPreset, getAvailablePresets, getPreset, multiTenantPreset, ownedByUserPreset, registerPreset, searchPreset, slugLookupPreset, softDeletePreset, treePreset };

package/dist/presets/multiTenant.d.mts

@@ -1,5 +1,4 @@
-import { J as CrudRouteKey, rt as PresetResult } from "../index-_--GyzcO.mjs";
-
+import { J as CrudRouteKey, rt as PresetResult } from "../index-Dtrj6XZk.mjs";
 //#region src/presets/multiTenant.d.ts
 /**
  * One tenant dimension for multi-field filtering. Discriminated by source:

package/dist/presets/search.d.mts

@@ -1,6 +1,5 @@
-import { ft as RouteDefinition, gt as ControllerHandler, pt as RouteMcpConfig, rt as PresetResult } from "../index-_--GyzcO.mjs";
-import { c as PermissionCheck } from "../fields-C7ahdGYf.mjs";
-
+import { ft as RouteDefinition, gt as ControllerHandler, pt as RouteMcpConfig, rt as PresetResult } from "../index-Dtrj6XZk.mjs";
+import { c as PermissionCheck } from "../fields-BGqrAa_u.mjs";
 //#region src/presets/search.d.ts
 /**
  * Search Preset — backend-agnostic search / vector / embed routes

package/dist/presets/search.mjs

@@ -1,4 +1,4 @@
-import { C as requireAuth, y as allowPublic } from "../permissions-CgbOLJZG.mjs";
+import { b as allowPublic, w as requireAuth } from "../permissions-BJMuKMl7.mjs";
 //#region src/presets/search.ts
 const BUILTINS = [
 	{

package/dist/{presets-DWsYQdbV.mjs → presets-gw0ciIUD.mjs}

@@ -1,5 +1,5 @@
 import { b as isElevated, n as PUBLIC_SCOPE } from "./types-bHblZ9YN.mjs";
-import { C as requireAuth, T as requireRoles, y as allowPublic } from "./permissions-CgbOLJZG.mjs";
+import { E as requireRoles, b as allowPublic, w as requireAuth } from "./permissions-BJMuKMl7.mjs";
 import { multiTenantPreset } from "./presets/multiTenant.mjs";
 //#region src/presets/ownedByUser.ts
 /**

package/dist/{pushref-registry-DnCqL3aa.d.mts → pushref-registry-BbcnpNTm.d.mts}

@@ -244,8 +244,10 @@ interface PushRefStore {
    * pre-compute it without re-introducing the very race we're closing.
    */
   stageIfInactive(args: {
-    pushRef: string; /** Raw payload (NOT pre-wrapped). The store assigns seq + wraps atomically. */
-    payload: unknown; /** Server timestamp (ms) — passed in so tests can pin the clock. */
+    pushRef: string;
+    /** Raw payload (NOT pre-wrapped). The store assigns seq + wraps atomically. */
+    payload: unknown;
+    /** Server timestamp (ms) — passed in so tests can pin the clock. */
     timestamp: number;
     expiresAt: number;
   }): Promise<"ok" | "missing" | "active" | "raw">;

package/dist/{queryCachePlugin-xzFyKAjT.d.mts → queryCachePlugin-CfYWq-Ak.d.mts}

@@ -1,7 +1,6 @@
 import { r as CacheStore } from "./interface-C1_WLTMK.mjs";
-import { i as QueryCache } from "./QueryCache-TRfXau3W.mjs";
+import { i as QueryCache } from "./QueryCache-Z1B38koh.mjs";
 import { FastifyPluginAsync } from "fastify";
-
 //#region src/cache/queryCachePlugin.d.ts
 interface QueryCachePluginOptions {
   /** CacheStore instance. Default: MemoryCacheStore with default options. */

package/dist/{redis-C3W0qbz8.d.mts → redis-UDtLaNj6.d.mts}

@@ -1,5 +1,4 @@
 import { n as IdempotencyResult, r as IdempotencyStore } from "./interface-Uk8ONJv7.mjs";
-
 //#region src/idempotency/stores/redis.d.ts
 interface RedisClient {
   get(key: string): Promise<string | null>;

package/dist/{redis-stream-DsP1vqZB.d.mts → redis-stream-iVR2l7aS.d.mts}

@@ -1,5 +1,4 @@
-import { a as EventTransport, i as EventLogger, n as DomainEvent, r as EventHandler } from "./EventTransport-IEn7Tn-Q.mjs";
-
+import { a as EventTransport, i as EventLogger, n as DomainEvent, r as EventHandler } from "./EventTransport-QmY7A258.mjs";
 //#region src/events/transports/redis-stream.d.ts
 interface RedisStreamLike {
   xadd(key: string, id: string, ...fieldValues: string[]): Promise<string | null>;

package/dist/{registerRoute-DGSREwPw.mjs → registerRoute-oGAl0oA8.mjs}

@@ -1,6 +1,6 @@
 import { f as createError } from "./errors-DkO8Nk6-.mjs";
 import { n as requestContext } from "./requestContext-BZKOr13H.mjs";
-import { M as evaluateAndApplyPermission } from "./permissions-CgbOLJZG.mjs";
+import { N as evaluateAndApplyPermission } from "./permissions-BJMuKMl7.mjs";
 //#region src/core/middlewares/arcDecorator.ts
 /**
 * Build the `arcDecorator` preHandler for a resource.

package/dist/registry/index.d.mts

@@ -1,7 +1,7 @@
-import { J as CrudRouteKey, R as RegisterOptions, V as ResourceDefinition, at as ResolvedTenantPurge, k as IntrospectionPluginOptions, p as RegistryEntry, z as ResourceRegistry } from "../index-_--GyzcO.mjs";
+import { J as CrudRouteKey, R as RegisterOptions, V as ResourceDefinition, at as ResolvedTenantPurge, k as IntrospectionPluginOptions, p as RegistryEntry, z as ResourceRegistry } from "../index-Dtrj6XZk.mjs";
+import "../fastify-augmentation-DafigGQp.mjs";
 import { FastifyPluginAsync } from "fastify";
 import { TenantPurgeProgress, TenantPurgeStrategy } from "@classytic/repo-core/repository";
-
 //#region src/registry/assertNoTenantData.d.ts
 interface AssertNoTenantDataOptions {
   readonly organizationId: string;

package/dist/schemas/index.d.mts

@@ -1,7 +1,6 @@
 import { ErrorContract, ErrorDetail } from "@classytic/repo-core/errors";
 import { FastifyPluginAsyncTypebox, FastifyPluginCallbackTypebox, TypeBoxTypeProvider, TypeBoxValidatorCompiler } from "@fastify/type-provider-typebox";
 import { Static, TObject, TSchema, TSchema as TSchema$1, Type } from "@sinclair/typebox";
-
 //#region src/schemas/index.d.ts
 /**
  * Paginated list response — full union of every wire shape `toCanonicalList`

package/dist/scim/index.d.mts

@@ -1,6 +1,5 @@
 import { FastifyPluginAsync, FastifyRequest } from "fastify";
 import { RepositoryLike } from "@classytic/repo-core/adapter";
-
 //#region src/scim/mapping.d.ts
 /**
  * SCIM 2.0 ↔ arc resource mapping

package/dist/scope/index.d.mts

@@ -1,7 +1,6 @@
-import { C as isMember, D as requireOrgId, E as requireClientId, O as requireTeamId, S as isElevated, T as isService, _ as getTenantFromRequest, a as getAncestorOrgIds, b as hasOrgAccess, c as getMandate, d as getOrgRoles, f as getRequestScope, g as getTeamId, h as getServiceScopes, i as RequestScope, k as requireUserId, l as getOrgContext, m as getScopeContextMap, n as Mandate, o as getClientId, p as getScopeContext, r as PUBLIC_SCOPE, s as getDPoPJkt, t as AUTHENTICATED_SCOPE, u as getOrgId, v as getUserId, w as isOrgInScope, x as isAuthenticated, y as getUserRoles } from "../types-LNebCoJx.mjs";
-import { i as elevationPlugin, n as ElevationOptions, r as _default, t as ElevationEvent } from "../elevation-xGUBq6p_.mjs";
+import { C as isMember, D as requireOrgId, E as requireClientId, O as requireTeamId, S as isElevated, T as isService, _ as getTenantFromRequest, a as getAncestorOrgIds, b as hasOrgAccess, c as getMandate, d as getOrgRoles, f as getRequestScope, g as getTeamId, h as getServiceScopes, i as RequestScope, k as requireUserId, l as getOrgContext, m as getScopeContextMap, n as Mandate, o as getClientId, p as getScopeContext, r as PUBLIC_SCOPE, s as getDPoPJkt, t as AUTHENTICATED_SCOPE, u as getOrgId, v as getUserId, w as isOrgInScope, x as isAuthenticated, y as getUserRoles } from "../types-DH0GupI7.mjs";
+import { i as elevationPlugin, n as ElevationOptions, r as _default, t as ElevationEvent } from "../elevation-C9s5hFP_.mjs";
 import { FastifyReply, FastifyRequest } from "fastify";
-
 //#region src/scope/rateLimitKey.d.ts
 interface RateLimitKeyContext {
   ip: string;

package/dist/{sessionManager-BXG-HGwG.d.mts → sessionManager-BHOM3N_0.d.mts}

@@ -1,5 +1,4 @@
 import { FastifyPluginAsync, FastifyReply, FastifyRequest } from "fastify";
-
 //#region src/auth/sessionManager.d.ts
 /**
  * Session data stored in the session store.
@@ -81,13 +80,18 @@ declare module "fastify" {
     authenticate: (request: FastifyRequest, reply: FastifyReply) => Promise<void>;
     /** Session management helpers */
     sessionManager: {
-      /** Create a new session for a user */createSession: (userId: string, metadata?: Record<string, unknown>) => Promise<{
+      /** Create a new session for a user */
+      createSession: (userId: string, metadata?: Record<string, unknown>) => Promise<{
         sessionId: string;
         cookie: string;
-      }>; /** Revoke a specific session */
-      revokeSession: (sessionId: string) => Promise<void>; /** Revoke all sessions for a user */
-      revokeAllSessions: (userId: string) => Promise<void>; /** Revoke all sessions except the current one */
-      revokeOtherSessions: (userId: string, currentSessionId: string) => Promise<void>; /** Refresh a session (reset updatedAt, extend expiry if needed) */
+      }>;
+      /** Revoke a specific session */
+      revokeSession: (sessionId: string) => Promise<void>;
+      /** Revoke all sessions for a user */
+      revokeAllSessions: (userId: string) => Promise<void>;
+      /** Revoke all sessions except the current one */
+      revokeOtherSessions: (userId: string, currentSessionId: string) => Promise<void>;
+      /** Refresh a session (reset updatedAt, extend expiry if needed) */
       refreshSession: (sessionId: string) => Promise<SessionData | null>;
     };
   }