@classytic/arc 2.25.0 → 2.30.0

package/dist/{index-KUoxjIq1.d.mts → types-D_n8L6VY.d.mts}

@@ -1,4 +1,4 @@
-import { r as EventHandler } from "./EventTransport-QmY7A258.mjs";
+import { n as DomainEvent, r as EventHandler } from "./EventTransport-QmY7A258.mjs";
 import { n as ErrorMapper } from "./errorHandler-C6yv4ZTW.mjs";
 import { FastifyInstance, FastifyPluginAsync } from "fastify";
 import { LockAdapter } from "@classytic/repo-core/lock";
@@ -343,6 +343,37 @@ interface EventHandlerDefinition {
    * `inventory.order-created`; Arc does not silently rewrite public names.
    */
   name?: string;
+  /**
+   * Contain handler failures inside an error boundary — arc wraps `handler`
+   * with `wrapWithBoundary`, so a throw is logged (through `fastify.log`, with
+   * `{ err, event, eventId, handler }`) and swallowed instead of reaching the
+   * transport.
+   *
+   * **Off by default, deliberately.** Reaching the transport is what makes the
+   * durable path work: `RedisStreamTransport` leaves the message unacked, so it
+   * is redelivered and eventually DLQ'd. Silently swallowing by default would
+   * turn every module handler into best-effort delivery.
+   *
+   * Turn it ON for fire-and-forget work — projections, cache invalidation,
+   * notification fan-out — where a failure must not block the ack and a retry
+   * would only delay the next event's resync. That is precisely the case where
+   * a module author would otherwise abandon this arm for an imperative
+   * `subscribeWithBoundary` call in `afterResources` and lose arc's
+   * teardown-before-`onClose` guarantee.
+   *
+   * ```ts
+   * defineModule({ name: "search", eventHandlers: [
+   *   { name: "search.reindex", event: "product:*", handler: reindex, boundary: true },
+   * ] })
+   * ```
+   *
+   * The object form adds an `onError` sink (metrics / alerting) in place of the
+   * default log; it runs INSIDE the boundary, so a throwing `onError` is itself
+   * caught and logged rather than escaping.
+   */
+  boundary?: boolean | {
+    onError?: (error: Error, event: DomainEvent) => void | Promise<void>;
+  };
 }
 interface ArcModule<TExports = unknown> {
   /** Stable identifier — appears in boot logs and duplicate-module detection. */
@@ -587,108 +618,4 @@ type ArcModuleInput<TExports = unknown> = ArcModule<TExports> | Promise<ArcModul
  */
 interface ArcModuleRegistry {}
 //#endregion
-//#region src/factory/module/contributions.d.ts
-/**
- * Collect every module's `healthChecks` in the caller's order. Fails at boot
- * on a duplicate check `name` across modules, naming BOTH owning modules.
- * The host's app-level checks are appended AFTER this (modules-first,
- * host-last) by the caller.
- */
-declare function collectModuleHealthChecks(modules: readonly ArcModule[]): HealthCheck[];
-/**
- * Collect every module's `workflows`. Resolves factory contributions (so a
- * factory can close over a container the caller has already decorated on
- * `fastify`) and flattens to a single opaque array. Arc core deliberately
- * does NOT validate or interpret the values — the streamline integration
- * owns name/shape checks and registration. Called by the integration at init
- * time, not by arc's boot pipeline (workflows depend on the integration's
- * container).
- */
-declare function collectModuleWorkflows(fastify: FastifyInstance, modules: readonly ArcModule[]): Promise<unknown[]>;
-/**
- * Collect every module's `scheduledJobs`. Resolves factory contributions
- * (after bootstraps) and fails at boot on a duplicate job `name` across
- * modules. The caller passes the returned definitions to the canonical
- * schedules plugin; factories must therefore be resolved only once.
- */
-declare function collectModuleScheduledJobs(fastify: FastifyInstance, modules: readonly ArcModule[]): Promise<ScheduleDefinition[]>;
-//#endregion
-//#region src/factory/module/lifecycle.d.ts
-/**
- * Subscribe every module's `eventHandlers` in dependency order (pass the
- * `orderModules`-sorted list). Returns the ordered list of unsubscribe
- * functions so the caller can tear them down at shutdown BEFORE module
- * `onClose` (while module deps are still alive). Fails at boot on:
- *   - a duplicate NAMED handler across modules (attributing both owners);
- *   - a module declaring handlers while the event subsystem is unavailable.
- * Resolves factory contributions (after bootstraps) so a handler can close over
- * booted engines rather than a global getter.
- */
-declare function subscribeModuleEventHandlers(fastify: FastifyInstance, modules: readonly ArcModule[]): Promise<Array<() => void | Promise<void>>>;
-//#endregion
-//#region src/factory/module/order.d.ts
-/**
- * Order modules for composition by their `dependsOn` edges — a STABLE
- * topological sort. Called once at the start of the bootstrap phase; every
- * subsequent phase (bootstrap, resources, afterResources, and reverse-order
- * onClose) iterates the returned list, so a module's declared dependencies are
- * always composed before it.
- *
- * "Stable" = modules with no edge between them keep their original list order,
- * so declaring `dependsOn` on one module never silently reorders an unrelated
- * one. Backward compatible: a `modules` array with NO `dependsOn` anywhere is
- * returned unchanged.
- *
- * Fail-fast — throws (never reorders past a broken contract) on:
- *   - duplicate module names (the name is the graph key)
- *   - a `dependsOn` name not present in the composed set
- *   - a self-reference (`dependsOn` includes the module's own name)
- *   - a dependency cycle (reports the concrete `a → b → … → a` path)
- */
-declare function orderModules(modules: readonly ArcModule[]): ArcModule[];
-//#endregion
-//#region src/factory/module/resolve.d.ts
-/**
- * Resolve any module-input form to a concrete `ArcModule`. A thunk is invoked
- * (this is where a dynamic `import()` fires); a promise (or plain module) is
- * awaited. Called once per module at the start of the bootstrap phase.
- */
-declare function resolveModule(input: ArcModuleInput): Promise<ArcModule>;
-/** Resolve a `ModuleContribution` to a concrete array (array passthrough or factory call). */
-declare function resolveContribution<T>(contribution: ModuleContribution<T> | undefined, fastify: FastifyInstance): Promise<readonly T[]>;
-//#endregion
-//#region src/factory/module/index.d.ts
-/**
- * Identity helper for authoring a typed module — mirrors `defineResource`.
- * Gives inference + a single obvious construction site; does no work.
- *
- * `TExports` is inferred from the `bootstrap` return value, so a module
- * author gets a typed public export for free:
- *
- * ```ts
- * export const accountingModule = (deps: Deps) =>
- *   defineModule({
- *     name: "accounting",
- *     bootstrap: async () => createAccountingEngine(deps), // TExports inferred
- *   });
- * ```
- */
-declare function defineModule<TExports = unknown>(module: ArcModule<TExports>): ArcModule<TExports>;
-/**
- * Typed accessor for a module's public export (its `bootstrap` return value),
- * recorded at `fastify.arc.modules[name]`.
- *
- * Throwing, in line with the fail-fast contract (and `requireOrgId`-style
- * accessors): a missing entry means the module either isn't composed, is
- * composed AFTER the caller (list order = init order), or returned nothing —
- * all wiring bugs that must surface at boot, not as `undefined` downstream.
- *
- * The type parameter is an assertion, not a proof. Two ways to type it:
- *   - augment `ArcModuleRegistry` once — then the name alone infers the type:
- *     `getModuleExports(f, "accounting")` → `AccountingEngine`.
- *   - or pass it inline: `getModuleExports<AccountingEngine>(f, "accounting")`.
- */
-declare function getModuleExports<K extends keyof ArcModuleRegistry>(fastify: FastifyInstance, name: K): ArcModuleRegistry[K];
-declare function getModuleExports<TExports = unknown>(fastify: FastifyInstance, name: string): TExports;
-//#endregion
-export { schedulesPlugin as C, healthPlugin as D, _default$1 as E, _default as S, HealthOptions as T, ResourceModule as _, orderModules as a, ScheduleStats as b, collectModuleScheduledJobs as c, ArcModuleInput as d, ArcModuleRegistry as f, ResourceLike as g, LoadResourcesOptions as h, resolveModule as i, collectModuleWorkflows as l, ModuleContribution as m, getModuleExports as n, subscribeModuleEventHandlers as o, EventHandlerDefinition as p, resolveContribution as r, collectModuleHealthChecks as s, defineModule as t, ArcModule as u, loadResources as v, HealthCheck as w, SchedulesPluginOptions as x, ScheduleDefinition as y };
+export { _default$1 as _, ModuleContribution as a, ResourceModule as c, ScheduleStats as d, SchedulesPluginOptions as f, HealthOptions as g, HealthCheck as h, EventHandlerDefinition as i, loadResources as l, schedulesPlugin as m, ArcModuleInput as n, LoadResourcesOptions as o, _default as p, ArcModuleRegistry as r, ResourceLike as s, ArcModule as t, ScheduleDefinition as u, healthPlugin as v };

package/dist/usage/index.d.mts

@@ -1,5 +1,5 @@
 import { i as RequestScope } from "../types-DjC-KUCz.mjs";
-import { n as PermissionContext, t as PermissionCheck } from "../types-Dmw-6Qeo.mjs";
+import { i as PermissionContext, r as PermissionCheck } from "../types-ChvvVNP8.mjs";
 import { UsageBucket, UsageStore, usagePeriod } from "@classytic/repo-core/usage";
 import { FastifyPluginAsync, FastifyRequest } from "fastify";
 //#region src/usage/requireQuota.d.ts

package/dist/utils/index.d.mts

@@ -1,6 +1,6 @@
-import { $ as OpenApiSchemas, S as QueryParserInterface, b as ParsedQuery } from "../index-DPRH0Cme.mjs";
+import { $ as OpenApiSchemas, S as QueryParserInterface, b as ParsedQuery } from "../index-Q5gzEIWY.mjs";
 import { F as getHeader, I as requireSingleHeaderValue, P as ArcHeaders } from "../types-DjC-KUCz.mjs";
-import { a as getUserId, c as AnyRecord, o as getUserRoles, s as normalizeRoles } from "../types-Dmw-6Qeo.mjs";
+import { c as normalizeRoles, l as AnyRecord, o as getUserId, s as getUserRoles } from "../types-ChvvVNP8.mjs";
 import { n as ErrorMapper } from "../errorHandler-C6yv4ZTW.mjs";
 import { a as NotFoundError, c as RateLimitError, d as ValidationError, f as createDomainError, i as ForbiddenError, l as ServiceUnavailableError, m as isArcError, n as ConflictError, o as OrgAccessDeniedError, p as createError, r as ErrorOptions, s as OrgRequiredError, t as ArcError, u as UnauthorizedError } from "../errors-DHcHVAgk.mjs";
 import { errorContractSchema, errorDetailSchema } from "@classytic/repo-core/errors";
@@ -1313,9 +1313,6 @@ interface StateMachine {
    * Record a transition
    */
   recordTransition?(from: string, to: string, action: string, metadata?: Record<string, unknown>): void;
-  /**
-   * Clear history
-   */
   clearHistory?(): void;
   /**
    * Get available actions for current status