@classytic/arc 2.23.0 → 2.25.0

package/dist/plugins/index.mjs

@@ -1,18 +1,18 @@
 import { p as MUTATION_OPERATIONS } from "../constants-DNre0wRg.mjs";
-import { c as getOrgId } from "../types-bHblZ9YN.mjs";
-import { n as requestContext } from "../requestContext-BZKOr13H.mjs";
+import { c as getOrgId } from "../types-CSyCxl2V.mjs";
+import { n as requestContext } from "../requestContext-MrlJwECf.mjs";
 import { t as hasEvents } from "../typeGuards-C9KXUly6.mjs";
 import { t as HookSystem } from "../HookSystem-C1vB_Gc9.mjs";
 import { t as ResourceRegistry } from "../ResourceRegistry-y9Hnypus.mjs";
-import { i as sanitizeRequestId, n as requestIdPlugin, r as requestId_default, t as createRequestIdGenerator } from "../requestId-5BhTVzBv.mjs";
-import { n as health_default, t as healthPlugin } from "../health-ScyjIVo5.mjs";
+import { a as requestIdPlugin, i as createRequestIdGenerator, n as health_default, o as requestId_default, s as sanitizeRequestId, t as healthPlugin } from "../health-CB_m4S32.mjs";
 import { n as caching_default, t as cachingPlugin } from "../caching-_NJeDd1_.mjs";
 import { n as errorHandlerPlugin, t as defaultIsDuplicateKeyError } from "../errorHandler-Bq2OeEQL.mjs";
 import { n as metrics_default, t as metricsPlugin } from "../metrics-fdxI5mn_.mjs";
-import { n as realtime_default, t as realtimePlugin } from "../realtime-I8OrfnMR.mjs";
+import { n as realtime_default, t as realtimePlugin } from "../realtime-Cuw_deA-.mjs";
 import { t as replyHelpersPlugin } from "../replyHelpers-67tRawQZ.mjs";
-import { n as sse_default, t as ssePlugin } from "../sse-0u4P4-OI.mjs";
-import { n as versioning_default, t as versioningPlugin } from "../versioning-Dk-71iIz.mjs";
+import { n as schedules_default, t as schedulesPlugin } from "../schedules-CjOd2MG9.mjs";
+import { n as sse_default, t as ssePlugin } from "../sse-BQ1w0dfl.mjs";
+import { n as versioning_default, t as versioningPlugin } from "../versioning-gKWyryT3.mjs";
 import fp from "fastify-plugin";
 //#region src/core/arcCorePlugin.ts
 const arcCorePlugin = async (fastify, opts = {}) => {
@@ -24,7 +24,10 @@ const arcCorePlugin = async (fastify, opts = {}) => {
 		registry: actualRegistry,
 		emitEvents,
 		externalOpenApiPaths: [],
-		plugins: /* @__PURE__ */ new Map()
+		plugins: /* @__PURE__ */ new Map(),
+		healthChecks: [],
+		moduleDefinitions: [],
+		scheduledJobs: []
 	});
 	for (const field of [
 		"_policyFilters",
@@ -201,91 +204,4 @@ var gracefulShutdown_default = fp(gracefulShutdownPlugin, {
 	fastify: "5.x"
 });
 //#endregion
-//#region src/plugins/schedules.ts
-const MIN_SAFE_INTERVAL_MS = 1e3;
-const MAX_DEFAULT_LEASE_MS = 3e5;
-const schedulesPlugin = async (fastify, opts) => {
-	const { schedules, lock, enabled = true } = opts;
-	const holderId = opts.holderId ?? `arc-${process.pid}-${Math.random().toString(36).slice(2, 10)}`;
-	const stats = /* @__PURE__ */ new Map();
-	fastify.decorate("getScheduleStats", () => [...stats.values()].map((s) => ({ ...s })));
-	if (!enabled) {
-		fastify.log.debug("schedulesPlugin disabled — registered as no-op");
-		return;
-	}
-	const seen = /* @__PURE__ */ new Set();
-	for (const s of schedules) {
-		if (!s.name) throw new TypeError("[arc-schedules] every schedule needs a name");
-		if (seen.has(s.name)) throw new TypeError(`[arc-schedules] duplicate schedule name "${s.name}"`);
-		seen.add(s.name);
-		if (!Number.isFinite(s.every) || s.every <= 0) throw new TypeError(`[arc-schedules] "${s.name}": \`every\` must be a positive number of ms`);
-		if (s.every < MIN_SAFE_INTERVAL_MS) fastify.log.warn(`[arc-schedules] "${s.name}" runs every ${s.every}ms — sub-second schedules are almost always a bug in production (DB pressure, lock churn). Intended for tests only.`);
-	}
-	const timers = /* @__PURE__ */ new Map();
-	const inFlight = /* @__PURE__ */ new Map();
-	let closing = false;
-	async function tick(s) {
-		const stat = stats.get(s.name);
-		if (!stat) return;
-		try {
-			if (lock) {
-				const leaseMs = s.leaseMs ?? Math.min(Math.floor(s.every * .9), MAX_DEFAULT_LEASE_MS);
-				if (!await lock.tryAcquire(`arc:schedule:${s.name}`, holderId, leaseMs)) {
-					stat.skippedByLock++;
-					return;
-				}
-			}
-			stat.runs++;
-			stat.lastRunAt = (/* @__PURE__ */ new Date()).toISOString();
-			await s.handler(fastify);
-			stat.lastError = null;
-		} catch (err) {
-			stat.failures++;
-			stat.lastError = err instanceof Error ? err.message : String(err);
-			fastify.log.error({
-				err,
-				schedule: s.name
-			}, "[arc-schedules] schedule run failed");
-		}
-	}
-	function scheduleNext(s, delay) {
-		if (closing) return;
-		const timer = setTimeout(() => {
-			const run = tick(s).finally(() => {
-				inFlight.delete(s.name);
-				scheduleNext(s, s.every);
-			});
-			inFlight.set(s.name, run);
-		}, delay);
-		timer.unref?.();
-		timers.set(s.name, timer);
-	}
-	fastify.addHook("onReady", async () => {
-		for (const s of schedules) {
-			if (s.enabled === false) continue;
-			stats.set(s.name, {
-				name: s.name,
-				runs: 0,
-				failures: 0,
-				skippedByLock: 0,
-				lastRunAt: null,
-				lastError: null
-			});
-			const jitter = !s.runOnStart && s.jitterMs ? Math.floor(Math.random() * s.jitterMs) : 0;
-			scheduleNext(s, s.runOnStart ? 0 : s.every + jitter);
-		}
-		if (stats.size > 0) fastify.log.debug(`[arc-schedules] ${stats.size} schedule(s) armed${lock ? ` (leader-safe, holder ${holderId})` : ""}`);
-	});
-	fastify.addHook("onClose", async () => {
-		closing = true;
-		for (const timer of timers.values()) clearTimeout(timer);
-		timers.clear();
-		await Promise.allSettled([...inFlight.values()]);
-	});
-};
-var schedules_default = fp(schedulesPlugin, {
-	name: "arc-schedules",
-	fastify: "5.x"
-});
-//#endregion
 export { arcCorePlugin_default as arcCorePlugin, arcCorePlugin as arcCorePluginFn, caching_default as cachingPlugin, cachingPlugin as cachingPluginFn, createPlugin, createRequestIdGenerator, defaultIsDuplicateKeyError, errorHandlerPlugin, errorHandlerPlugin as errorHandlerPluginFn, gracefulShutdown_default as gracefulShutdownPlugin, gracefulShutdownPlugin as gracefulShutdownPluginFn, health_default as healthPlugin, healthPlugin as healthPluginFn, metrics_default as metricsPlugin, metricsPlugin as metricsPluginFn, realtime_default as realtimePlugin, realtimePlugin as realtimePluginFn, replyHelpersPlugin, requestId_default as requestIdPlugin, requestIdPlugin as requestIdPluginFn, sanitizeRequestId, schedules_default as schedulesPlugin, schedulesPlugin as schedulesPluginFn, sse_default as ssePlugin, ssePlugin as ssePluginFn, versioning_default as versioningPlugin, versioningPlugin as versioningPluginFn };

package/dist/plugins/response-cache.mjs

@@ -92,6 +92,7 @@ const responseCachePluginImpl = async (fastify, opts = {}) => {
 		"PATCH",
 		"DELETE"
 	], xCacheHeader = true, statsPath = null, keyFn } = opts;
+	if (maxEntries > 5e3) fastify.log.warn(`[arc] responseCache maxEntries=${maxEntries}: prefix invalidation scans all entries synchronously on every mutating request — expect event-loop pauses at this size. This cache is an instance-local micro-cache; for large shared caching use the queryCache with a Redis store instead.`);
 	const cache = new LRUCache(maxEntries);
 	const invalidateMethods = new Set(invalidateOn.map((m) => m.toUpperCase()));
 	if (!fastify.hasRequestDecorator("__arcCacheTTL")) fastify.decorateRequest("__arcCacheTTL", void 0);

package/dist/plugins/tracing-entry.mjs

@@ -58,7 +58,7 @@ try {
 function createTracerProvider(options) {
 	if (!isAvailable || !NodeTracerProvider || !BatchSpanProcessor || !OTLPTraceExporter) return null;
 	const { serviceName = "@classytic/arc", serviceVersion, exporterUrl = "http://localhost:4318/v1/traces" } = options;
-	const resolvedVersion = serviceVersion ?? "2.23.0";
+	const resolvedVersion = serviceVersion ?? "2.25.0";
 	const exporter = new OTLPTraceExporter({ url: exporterUrl });
 	const provider = new NodeTracerProvider({ resource: { attributes: {
 		"service.name": serviceName,

package/dist/{index-Ba10fdKp.d.mts → preloadResources-0oe-JSSS.d.mts}

@@ -1,38 +1,15 @@
-import { Wt as Authenticator } from "./index-BBsvQt7U.mjs";
-import { r as CacheStore } from "./interface-C1_WLTMK.mjs";
+import { Wt as Authenticator } from "./index-DPRH0Cme.mjs";
+import { r as CacheStore } from "./interface-BGZCzOGL.mjs";
 import { n as ElevationOptions } from "./elevation-C9s5hFP_.mjs";
 import { a as EventTransport } from "./EventTransport-QmY7A258.mjs";
 import { t as ExternalOpenApiPaths } from "./externalPaths-BE6wFpYv.mjs";
-import { r as QueryCachePluginOptions } from "./queryCachePlugin-CfYWq-Ak.mjs";
+import { r as QueryCachePluginOptions } from "./queryCachePlugin-br4otiqF.mjs";
 import { t as ErrorHandlerOptions } from "./errorHandler-C6yv4ZTW.mjs";
-import { l as ResourceLike, n as ArcModuleInput } from "./module-B4u10iOJ.mjs";
-import { t as EventPluginOptions } from "./eventPlugin-A6EbthXR.mjs";
-import { g as CachingOptions, o as MetricsOptions, p as SSEOptions, t as VersioningOptions, u as RealtimeOptions, x as HealthOptions } from "./versioning-D6PvCwpq.mjs";
+import { T as HealthOptions, d as ArcModuleInput, g as ResourceLike, x as SchedulesPluginOptions } from "./index-KUoxjIq1.mjs";
+import { t as EventPluginOptions } from "./eventPlugin-Bg3cP2_u.mjs";
+import { g as CachingOptions, o as MetricsOptions, p as SSEOptions, t as VersioningOptions, u as RealtimeOptions } from "./versioning-DXgY5BUm.mjs";
 import { r as IdempotencyStore } from "./interface-Uk8ONJv7.mjs";
 import { FastifyInstance, FastifyPluginAsync, FastifyReply, FastifyRequest, FastifyServerOptions } from "fastify";
-//#region src/testing/preloadResources.d.ts
-/** Eager glob result: `{ '/path/to/file.ts': resourceModule }` */
-type EagerGlobResult = Record<string, unknown>;
-/** Lazy glob result: `{ '/path/to/file.ts': () => Promise<unknown> }` */
-type LazyGlobResult = Record<string, () => Promise<unknown>>;
-/**
- * Normalize an eager `import.meta.glob` result into a `ResourceLike[]`.
- *
- * Accepts either:
- * - `{ import: 'default' }` form: values are the resource directly
- * - default form: values are the full module — picks first export with `toPlugin()`
- *
- * Throws if any module doesn't yield a valid `ResourceLike`.
- */
-declare function preloadResources(globResult: EagerGlobResult): ResourceLike[];
-/**
- * Normalize a lazy `import.meta.glob` result into a `Promise<ResourceLike[]>`.
- *
- * Use this when resources depend on prior bootstrap (e.g., engine init) and
- * cannot be evaluated at import time of the preload file.
- */
-declare function preloadResourcesAsync(globResult: LazyGlobResult): Promise<ResourceLike[]>;
-//#endregion
 //#region src/factory/types/auth.d.ts
 /**
  * Arc's built-in JWT auth
@@ -238,6 +215,8 @@ interface UnderPressureOptions {
   exposeStatusRoute?: boolean;
   /** Event loop lag threshold in ms — requests rejected above this (default: 1000) */
   maxEventLoopDelay?: number;
+  /** Event loop utilization threshold (0–1) — requests rejected above this */
+  maxEventLoopUtilization?: number;
   /** V8 heap usage threshold in bytes — requests rejected above this */
   maxHeapUsedBytes?: number;
   /** RSS memory threshold in bytes — requests rejected above this */
@@ -445,6 +424,12 @@ interface CreateAppOptions {
    * - `'10.0.0.0/8'` / `['10.0.0.0/8', '172.16.0.0/12']` — trust only these
    *   CIDR ranges
    *
+   * Default: `false` everywhere, including `preset: 'production'` (2.24
+   * flip — fail-closed; the preset previously trusted every proxy). Apps
+   * behind a proxy/LB must set this explicitly or `request.ip` is the
+   * proxy's address; a boot warning fires when the production preset's
+   * default is inherited without an explicit choice.
+   *
    * @example
    * ```ts
    * createApp({ preset: 'production', trustProxy: 1 });          // one LB hop
@@ -661,6 +646,18 @@ interface CreateAppOptions {
      * ```
      */
     events?: Omit<EventPluginOptions, "transport"> | boolean;
+    /**
+     * Runtime options for module-contributed `scheduledJobs`. Module schedules
+     * automatically use Arc's existing schedules plugin. Pass lock/holder
+     * options for multi-replica safety, `true` for single-instance defaults,
+     * or `false` to reject any module that declares schedules.
+     *
+     * `enabled: false` registers the scheduler as a NO-OP — the host's runtime
+     * kill switch (e.g. an ops instance that must run zero background work
+     * against a shared DB). Unlike `schedules: false`, it does NOT reject
+     * modules that declare schedules; they are collected but never armed.
+     */
+    schedules?: Omit<SchedulesPluginOptions, "schedules"> | boolean;
     /**
      * Caching headers (ETag + Cache-Control). Default: false (opt-in).
      * Set to true for defaults, or pass CachingOptions for fine control.
@@ -698,26 +695,6 @@ interface CreateAppOptions {
      */
     versioning?: VersioningOptions;
   };
-  /**
-   * Type provider for schema inference.
-   *
-   * When set to `'typebox'`, enables TypeBox type provider for
-   * automatic TypeScript inference from route schemas.
-   *
-   * Requires `@sinclair/typebox` and `@fastify/type-provider-typebox` installed.
-   *
-   * @example
-   * ```typescript
-   * import { Type } from '@classytic/arc/schemas';
-   *
-   * const app = await createApp({
-   *   typeProvider: 'typebox',
-   * });
-   *
-   * // Now route schemas built with Type.* give full TS inference
-   * ```
-   */
-  typeProvider?: "typebox";
   /**
    * Error handler plugin. Normalizes AJV, Mongoose, and ArcError responses
    * into a consistent JSON envelope. Enabled by default.
@@ -1092,4 +1069,27 @@ interface CreateAppOptions {
   onClose?: (fastify: FastifyInstance) => void | Promise<void>;
 }
 //#endregion
-export { AuthOption as a, CustomPluginAuthOption as c, preloadResourcesAsync as d, UnderPressureOptions as i, JwtAuthOption as l, MultipartOptions as n, BetterAuthOption as o, RawBodyOptions as r, CustomAuthenticatorOption as s, CreateAppOptions as t, preloadResources as u };
+//#region src/factory/preloadResources.d.ts
+/** Eager glob result: `{ '/path/to/file.ts': resourceModule }` */
+type EagerGlobResult = Record<string, unknown>;
+/** Lazy glob result: `{ '/path/to/file.ts': () => Promise<unknown> }` */
+type LazyGlobResult = Record<string, () => Promise<unknown>>;
+/**
+ * Normalize an eager `import.meta.glob` result into a `ResourceLike[]`.
+ *
+ * Accepts either:
+ * - `{ import: 'default' }` form: values are the resource directly
+ * - default form: values are the full module — picks first export with `toPlugin()`
+ *
+ * Throws if any module doesn't yield a valid `ResourceLike`.
+ */
+declare function preloadResources(globResult: EagerGlobResult): ResourceLike[];
+/**
+ * Normalize a lazy `import.meta.glob` result into a `Promise<ResourceLike[]>`.
+ *
+ * Use this when resources depend on prior bootstrap (e.g., engine init) and
+ * cannot be evaluated at import time of the preload file.
+ */
+declare function preloadResourcesAsync(globResult: LazyGlobResult): Promise<ResourceLike[]>;
+//#endregion
+export { RawBodyOptions as a, BetterAuthOption as c, JwtAuthOption as d, MultipartOptions as i, CustomAuthenticatorOption as l, preloadResourcesAsync as n, UnderPressureOptions as o, CreateAppOptions as r, AuthOption as s, preloadResources as t, CustomPluginAuthOption as u };