@classytic/arc 2.25.0 → 2.30.0

package/dist/cli/commands/describe.d.mts

@@ -1,4 +1,4 @@
-import { Nt as RateLimitConfig, V as ResourceDefinition, et as RouteSchemaOptions } from "../../index-DPRH0Cme.mjs";
+import { Nt as RateLimitConfig, V as ResourceDefinition, et as RouteSchemaOptions } from "../../index-Q5gzEIWY.mjs";
 //#region src/cli/commands/describe.d.ts
 interface DescribedResource {
   name: string;

package/dist/cli/commands/docs.mjs

@@ -1,4 +1,4 @@
-import { t as buildOpenApiSpec } from "../../openapi-DrLtog_B.mjs";
+import { t as buildOpenApiSpec } from "../../openapi-B8Vkbxbn.mjs";
 import { t as loadResourcesFromEntry } from "../../loadResourcesFromEntry-kvGT6EcO.mjs";
 import { dirname, resolve } from "node:path";
 import { mkdirSync, writeFileSync } from "node:fs";

package/dist/core/index.d.mts

@@ -1,3 +1,3 @@
-import { $t as SlugExt, An as ControllerConfigurableOptions, B as defineResource, Jt as BaseController, Mn as ListResult, Nn as BodySanitizer, Pn as BodySanitizerConfig, Qt as TreeMixin, V as ResourceDefinition, Xt as SoftDeleteMixin, Yt as SoftDeleteExt, Zt as TreeExt, an as QueryResolverConfig, ct as AggMeasureShorthand, dt as AggregationDateRangeRequirement, en as SlugMixin, ft as AggregationIndexHint, gt as AggregationsMap, ht as AggregationRateLimit, in as QueryResolver, jn as ControllerConstructionOptions, kn as BaseControllerOptions, lt as AggregationCacheConfig, mt as AggregationMaterializedResult, nn as BulkMixin, on as AccessControl, pt as AggregationMaterializedContext, rn as BaseCrudController, sn as AccessControlConfig, st as AggMeasureInput, tn as BulkExt, ut as AggregationConfig } from "../index-DPRH0Cme.mjs";
-import { A as DEFAULT_ID_FIELD, B as MAX_FILTER_DEPTH, C as DefineActionConfig, D as defineAggregation, E as createPermissionMiddleware, F as DEFAULT_UPDATE_METHOD, G as RESERVED_QUERY_PARAMS, H as MAX_SEARCH_LENGTH, I as HOOK_OPERATIONS, K as SYSTEM_FIELDS, L as HOOK_PHASES, M as DEFAULT_MAX_LIMIT, N as DEFAULT_SORT, O as CRUD_OPERATIONS, P as DEFAULT_TENANT_FIELD, R as HookOperation, S as mergeResourceConfig, T as createCrudRouter, U as MUTATION_OPERATIONS, V as MAX_REGEX_LENGTH, W as MutationOperation, _ as getEntityQuery, a as formatValidationErrors, b as ResourceSeams, c as isFieldReadable, d as createRequestContext, f as getControllerContext, g as getEntityIdField, h as getEntityId, i as assertValidConfig, j as DEFAULT_LIMIT, k as CrudOperation, l as createCrudHandlers, m as sendControllerResponse, n as ValidateOptions, o as validateResourceConfig, p as getControllerScope, r as ValidationResult, s as collectReadBlockedFields, t as ConfigError, u as createFastifyHandler, v as defineResourceVariants, w as defineAction, x as SeamedResourceConfig, y as AdapterLike, z as HookPhase } from "../index-f4PTrk3B.mjs";
+import { $t as SlugExt, An as ControllerConfigurableOptions, B as defineResource, Jt as BaseController, Mn as ListResult, Nn as BodySanitizer, Pn as BodySanitizerConfig, Qt as TreeMixin, V as ResourceDefinition, Xt as SoftDeleteMixin, Yt as SoftDeleteExt, Zt as TreeExt, an as QueryResolverConfig, ct as AggMeasureShorthand, dt as AggregationDateRangeRequirement, en as SlugMixin, ft as AggregationIndexHint, gt as AggregationsMap, ht as AggregationRateLimit, in as QueryResolver, jn as ControllerConstructionOptions, kn as BaseControllerOptions, lt as AggregationCacheConfig, mt as AggregationMaterializedResult, nn as BulkMixin, on as AccessControl, pt as AggregationMaterializedContext, rn as BaseCrudController, sn as AccessControlConfig, st as AggMeasureInput, tn as BulkExt, ut as AggregationConfig } from "../index-Q5gzEIWY.mjs";
+import { A as DEFAULT_ID_FIELD, B as MAX_FILTER_DEPTH, C as DefineActionConfig, D as defineAggregation, E as createPermissionMiddleware, F as DEFAULT_UPDATE_METHOD, G as RESERVED_QUERY_PARAMS, H as MAX_SEARCH_LENGTH, I as HOOK_OPERATIONS, K as SYSTEM_FIELDS, L as HOOK_PHASES, M as DEFAULT_MAX_LIMIT, N as DEFAULT_SORT, O as CRUD_OPERATIONS, P as DEFAULT_TENANT_FIELD, R as HookOperation, S as mergeResourceConfig, T as createCrudRouter, U as MUTATION_OPERATIONS, V as MAX_REGEX_LENGTH, W as MutationOperation, _ as getEntityQuery, a as formatValidationErrors, b as ResourceSeams, c as isFieldReadable, d as createRequestContext, f as getControllerContext, g as getEntityIdField, h as getEntityId, i as assertValidConfig, j as DEFAULT_LIMIT, k as CrudOperation, l as createCrudHandlers, m as sendControllerResponse, n as ValidateOptions, o as validateResourceConfig, p as getControllerScope, r as ValidationResult, s as collectReadBlockedFields, t as ConfigError, u as createFastifyHandler, v as defineResourceVariants, w as defineAction, x as SeamedResourceConfig, y as AdapterLike, z as HookPhase } from "../index-Cx7bro4R.mjs";
 export { AccessControl, type AccessControlConfig, type AdapterLike, type AggMeasureInput, type AggMeasureShorthand, type AggregationCacheConfig, type AggregationConfig, type AggregationDateRangeRequirement, type AggregationIndexHint, type AggregationMaterializedContext, type AggregationMaterializedResult, type AggregationRateLimit, type AggregationsMap, BaseController, type BaseControllerOptions, BaseCrudController, BodySanitizer, type BodySanitizerConfig, type BulkExt, BulkMixin, CRUD_OPERATIONS, type ConfigError, type ControllerConfigurableOptions, type ControllerConstructionOptions, CrudOperation, DEFAULT_ID_FIELD, DEFAULT_LIMIT, DEFAULT_MAX_LIMIT, DEFAULT_SORT, DEFAULT_TENANT_FIELD, DEFAULT_UPDATE_METHOD, type DefineActionConfig, HOOK_OPERATIONS, HOOK_PHASES, HookOperation, HookPhase, type ListResult, MAX_FILTER_DEPTH, MAX_REGEX_LENGTH, MAX_SEARCH_LENGTH, MUTATION_OPERATIONS, MutationOperation, QueryResolver, type QueryResolverConfig, RESERVED_QUERY_PARAMS, ResourceDefinition, type ResourceSeams, SYSTEM_FIELDS, type SeamedResourceConfig, type SlugExt, SlugMixin, type SoftDeleteExt, SoftDeleteMixin, type TreeExt, TreeMixin, type ValidateOptions, type ValidationResult, assertValidConfig, collectReadBlockedFields, createCrudHandlers, createCrudRouter, createFastifyHandler, createPermissionMiddleware, createRequestContext, defineAction, defineAggregation, defineResource, defineResourceVariants, formatValidationErrors, getControllerContext, getControllerScope, getEntityId, getEntityIdField, getEntityQuery, isFieldReadable, mergeResourceConfig, sendControllerResponse, validateResourceConfig };

package/dist/core/index.mjs

@@ -1,5 +1,7 @@
 import { a as DEFAULT_SORT, c as HOOK_OPERATIONS, d as MAX_REGEX_LENGTH, f as MAX_SEARCH_LENGTH, h as SYSTEM_FIELDS, i as DEFAULT_MAX_LIMIT, l as HOOK_PHASES, m as RESERVED_QUERY_PARAMS, n as DEFAULT_ID_FIELD, o as DEFAULT_TENANT_FIELD, p as MUTATION_OPERATIONS, r as DEFAULT_LIMIT, s as DEFAULT_UPDATE_METHOD, t as CRUD_OPERATIONS, u as MAX_FILTER_DEPTH } from "../constants-DNre0wRg.mjs";
-import { a as BulkMixin, c as collectReadBlockedFields, f as AccessControl, i as SlugMixin, l as isFieldReadable, n as TreeMixin, o as BaseCrudController, r as SoftDeleteMixin, s as QueryResolver, t as BaseController, u as BodySanitizer } from "../BaseController--M8EMzt0.mjs";
-import { a as defineResource, c as validateResourceConfig, d as defineAction, f as createCrudRouter, i as defineResourceVariants, l as ResourceDefinition, m as defineAggregation, n as getEntityIdField, o as assertValidConfig, p as createPermissionMiddleware, r as getEntityQuery, s as formatValidationErrors, t as getEntityId, u as mergeResourceConfig } from "../core-EUNu0u07.mjs";
-import { a as createFastifyHandler, c as getControllerScope, i as createCrudHandlers, l as sendControllerResponse, o as createRequestContext, s as getControllerContext } from "../pipeline-BN5G05rd.mjs";
+import { a as BulkMixin, c as collectReadBlockedFields, f as AccessControl, i as SlugMixin, l as isFieldReadable, n as TreeMixin, o as BaseCrudController, r as SoftDeleteMixin, s as QueryResolver, t as BaseController, u as BodySanitizer } from "../BaseController-B5DwufbB.mjs";
+import { a as ResourceDefinition, i as validateResourceConfig, n as assertValidConfig, o as createCrudRouter, r as formatValidationErrors, s as createPermissionMiddleware, t as defineResource } from "../defineResource-CxWqDCAy.mjs";
+import { a as createFastifyHandler, c as getControllerScope, i as createCrudHandlers, l as sendControllerResponse, o as createRequestContext, s as getControllerContext } from "../pipeline-BJnpkY9i.mjs";
+import { t as defineAggregation } from "../defineAggregation-ufWjUwml.mjs";
+import { a as mergeResourceConfig, i as defineResourceVariants, n as getEntityIdField, o as defineAction, r as getEntityQuery, t as getEntityId } from "../core-poalJLvp.mjs";
 export { AccessControl, BaseController, BaseCrudController, BodySanitizer, BulkMixin, CRUD_OPERATIONS, DEFAULT_ID_FIELD, DEFAULT_LIMIT, DEFAULT_MAX_LIMIT, DEFAULT_SORT, DEFAULT_TENANT_FIELD, DEFAULT_UPDATE_METHOD, HOOK_OPERATIONS, HOOK_PHASES, MAX_FILTER_DEPTH, MAX_REGEX_LENGTH, MAX_SEARCH_LENGTH, MUTATION_OPERATIONS, QueryResolver, RESERVED_QUERY_PARAMS, ResourceDefinition, SYSTEM_FIELDS, SlugMixin, SoftDeleteMixin, TreeMixin, assertValidConfig, collectReadBlockedFields, createCrudHandlers, createCrudRouter, createFastifyHandler, createPermissionMiddleware, createRequestContext, defineAction, defineAggregation, defineResource, defineResourceVariants, formatValidationErrors, getControllerContext, getControllerScope, getEntityId, getEntityIdField, getEntityQuery, isFieldReadable, mergeResourceConfig, sendControllerResponse, validateResourceConfig };

package/dist/core-poalJLvp.mjs

@@ -0,0 +1,175 @@
+import "./constants-DNre0wRg.mjs";
+import { t as defineResource } from "./defineResource-CxWqDCAy.mjs";
+//#region src/core/defineAction.ts
+/**
+* Build an `ActionDefinition` with a typed handler. The literal schema
+* type captured here flows into `data`, so `defineAction({ schema:
+* z.object({...}), handler })` produces fully-typed code with no
+* `as MyShape` cast.
+*
+* Behaviorally identical to a bare `ActionDefinition` object — same
+* validation path (AJV), same permission resolution, same MCP wiring.
+* The runtime shape is unchanged; only the type-level inference is new.
+*/
+function defineAction(config) {
+	return {
+		handler: config.handler,
+		permissions: config.permissions,
+		schema: config.schema,
+		description: config.description,
+		id: config.id,
+		mcp: config.mcp
+	};
+}
+//#endregion
+//#region src/core/defineResource/seams.ts
+/** Plain object test — literals only; class instances must replace, not merge. */
+function isPlainObject(value) {
+	if (value === null || typeof value !== "object" || Array.isArray(value)) return false;
+	const proto = Object.getPrototypeOf(value);
+	return proto === Object.prototype || proto === null;
+}
+/** Recursive plain-object merge; nested arrays REPLACE (they're value lists). */
+function mergePlain(base, next) {
+	const out = { ...base };
+	for (const [key, value] of Object.entries(next)) {
+		if (value === void 0) continue;
+		const existing = out[key];
+		out[key] = isPlainObject(existing) && isPlainObject(value) ? mergePlain(existing, value) : value;
+	}
+	return out;
+}
+/**
+* Canonical slot-aware merge of a base resource config with host seams.
+* Later seams win over earlier ones; `undefined` values never clobber.
+*
+* Merge semantics (value-driven — no per-slot registry to drift):
+*
+*   - **Top-level arrays CONCAT** — `routes`, `middlewares`, `presets`,
+*     `routeGuards`, `disabledRoutes`: additive collections, base first.
+*   - **Plain objects merge recursively** — `permissions`, `actions`,
+*     `schemaOptions` (incl. `fieldRules`), `aggregations`, `customSchemas`,
+*     `fields`, `cache`, `events`: per-key composition. Arrays NESTED inside
+*     them replace (they're value lists — enums, sort specs), not concat.
+*   - **Everything else last-wins** — class instances (`adapter`,
+*     `controller`, `queryParser`), functions, scalars.
+*
+* The single `as` at the return is the one documented erasure for the
+* {@link AdapterLike}-widened seam slots — inside the helper so no module
+* author ever writes one (mirrors mongokit's one-cast-at-the-boundary rule).
+*/
+function mergeResourceConfig(base, ...seams) {
+	const out = { ...base };
+	for (const seam of seams) {
+		if (!seam) continue;
+		for (const [key, value] of Object.entries(seam)) {
+			if (value === void 0) continue;
+			const existing = out[key];
+			if (Array.isArray(existing) && Array.isArray(value)) out[key] = [...existing, ...value];
+			else if (isPlainObject(existing) && isPlainObject(value)) out[key] = mergePlain(existing, value);
+			else if (Array.isArray(value)) out[key] = [...value];
+			else out[key] = value;
+		}
+	}
+	return out;
+}
+//#endregion
+//#region src/core/defineResourceVariants.ts
+/**
+* Define multiple resources from a shared base config and per-variant overrides.
+*
+* Each variant is independently passed through `defineResource()` — the
+* returned `ResourceDefinition`s are real, fully-registered resources.
+* Register each one's plugin in your app:
+*
+* ```typescript
+* await app.register(articlePublic.toPlugin());
+* await app.register(articleAdmin.toPlugin());
+* ```
+*
+* @param base    Shared config — adapter, queryParser, schemaOptions, hooks, etc.
+*                Must NOT include `name` or `prefix` (those are per-variant).
+* @param variants  Map of variant key → override. Each variant must declare
+*                  its own `name` and `prefix`. Other fields override the base.
+* @returns A record where each key from `variants` maps to a real
+*          `ResourceDefinition` ready for `.toPlugin()` registration.
+*/
+function defineResourceVariants(base, variants) {
+	const out = {};
+	for (const key of Object.keys(variants)) {
+		const override = variants[key];
+		out[key] = defineResource({
+			...base,
+			...override
+		});
+	}
+	return out;
+}
+//#endregion
+//#region src/core/entityHelpers.ts
+/**
+* Per-request entity helpers — read the resource binding (idField + the
+* URL `:id` value) off `req.arc`.
+*
+* Action handlers receive their `id` argument as the raw URL `:id` value.
+* When the resource declares a custom `idField` (`slug`, `reportId`, …)
+* that's NOT the document `_id`, a naive `Model.findById(id)` silently
+* returns null. The historical footgun was a `findById(id)` typo where
+* the handler author hadn't realised that `:id` resolves to the friendly
+* handle.
+*
+* `getEntityQuery(req)` produces the canonical filter shape so handlers
+* compose lookups with no resource-config recall:
+*
+* ```ts
+* actions: {
+*   archive: {
+*     handler: async (id, data, req) => {
+*       const doc = await Model.findOne(getEntityQuery(req));
+*       if (!doc) throw new NotFoundError("Order");
+*       // ...
+*     },
+*   },
+* }
+* ```
+*
+* The router populates `req.arc.idField` and `req.arc.entityId` before
+* invoking the handler — these helpers are zero-cost reads.
+*/
+/**
+* Read the resource's configured `idField` for the current request.
+* Falls back to the framework default (`_id`) when the route hasn't
+* bound an idField — keeps handlers safe to author without checking
+* the resource config.
+*/
+function getEntityIdField(req) {
+	return req.arc?.idField ?? "_id";
+}
+/**
+* Read the URL `:id` path param value as the resource handle.
+* Returns `undefined` when the route has no `:id` segment (collection
+* routes) — handlers that need the entity must be on row routes.
+*/
+function getEntityId(req) {
+	if (req.arc?.entityId !== void 0) return req.arc.entityId;
+	return req.params?.id;
+}
+/**
+* Compose a `findOne` filter that resolves the current request's
+* entity, regardless of whether the resource binds `_id` or a custom
+* field. Idiomatic shape for arc action handlers.
+*
+* ```ts
+* const doc = await Model.findOne(getEntityQuery(req));
+* ```
+*
+* Returns `{}` when the route has no entity context (collection routes
+* or tests bypassing the router) — caller decides what that means.
+*/
+function getEntityQuery(req) {
+	const id = getEntityId(req);
+	if (id === void 0) return {};
+	return { [getEntityIdField(req)]: id };
+}
+//#endregion
+export { mergeResourceConfig as a, defineResourceVariants as i, getEntityIdField as n, defineAction as o, getEntityQuery as r, getEntityId as t };

package/dist/{createActionRouter-B6GvAuAX.mjs → createActionRouter-BxuywVRB.mjs}

@@ -2,8 +2,8 @@ import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.mjs";
 import "./constants-DNre0wRg.mjs";
 import { f as createError } from "./errors-DkO8Nk6-.mjs";
 import { a as buildRouteHooks, i as selectPluginMw, l as buildAuthMiddlewareForPermissions, n as buildRouteConfig, r as resolveRouterPluginMw, s as routeHookOptions, t as buildRateLimitConfig, u as buildArcDecorator } from "./rateLimit-DrED-C4v.mjs";
-import { n as buildActionPermissionMw, t as tryRegisterRoute } from "./registerRoute-v0Wb6Plt.mjs";
-import { l as sendControllerResponse, r as resolvePipelineSteps, t as buildActionPipelineHandler } from "./pipeline-BN5G05rd.mjs";
+import { n as buildActionPermissionMw, t as tryRegisterRoute } from "./registerRoute-JkxIEBJq.mjs";
+import { l as sendControllerResponse, r as resolvePipelineSteps, t as buildActionPipelineHandler } from "./pipeline-BJnpkY9i.mjs";
 import { n as schemaIRToJsonSchemaBranch, t as normalizeSchemaIR } from "./schemaIR-Ca7ySNPx.mjs";
 //#region src/core/createActionRouter.ts
 var createActionRouter_exports = /* @__PURE__ */ __exportAll({

package/dist/{createAggregationRouter-wzwFa_dW.mjs → createAggregationRouter-BiY-lGdY.mjs}

@@ -1,7 +1,9 @@
-import { f as createError, l as UnauthorizedError, r as ForbiddenError } from "./errors-DkO8Nk6-.mjs";
+import { f as createError } from "./errors-DkO8Nk6-.mjs";
+import { u as getRequestScope } from "./types-CSyCxl2V.mjs";
+import { r as evaluateAndApplyPermission } from "./applyPermissionResult-Cf6zUCvb.mjs";
 import { a as buildRouteHooks, c as buildAuthMiddleware, i as selectPluginMw, r as resolveRouterPluginMw, s as routeHookOptions, t as buildRateLimitConfig, u as buildArcDecorator } from "./rateLimit-DrED-C4v.mjs";
 import { n as validateAggregations } from "./validate-Bk44F2yT.mjs";
-import { t as buildAggregationHandler } from "./buildHandler-Dtwd8fdz.mjs";
+import { t as buildAggregationHandler } from "./buildHandler-BYS3Vkfz.mjs";
 //#region src/core/aggregation/createAggregationRouter.ts
 /**
 * Register one Fastify route per aggregation. No-op when the map is
@@ -38,15 +40,9 @@ function registerOne(fastify, normalized, ctx) {
 	const config = normalized.base;
 	const authMw = buildAuthMiddleware(fastify, config.permissions);
 	const permissionFn = config.permissions;
-	const permissionMw = async (req, _reply) => {
+	const permissionMw = async (req, reply) => {
 		const ctx = buildPermissionContextLite(req, normalized.name);
-		const raw = await permissionFn(ctx);
-		if (!normalizePermissionGranted(raw)) {
-			const status = req.user ? 403 : 401;
-			const reason = normalizePermissionReason(raw);
-			if (status === 401) throw new UnauthorizedError(reason ?? "Authentication required to access this aggregation.");
-			throw new ForbiddenError(reason ?? "You do not have permission to access this aggregation.");
-		}
+		await evaluateAndApplyPermission(permissionFn, ctx, req, reply, { defaultDenialMessage: (user) => user ? "You do not have permission to access this aggregation." : "Authentication required to access this aggregation." });
 	};
 	const hooks = buildRouteHooks({
 		arcDecorator,
@@ -99,20 +95,11 @@ function buildPermissionContextLite(req, aggregationName) {
 	const reqWithExtras = req;
 	return {
 		user: reqWithExtras.user ?? null,
+		scope: getRequestScope(req),
 		request: req,
 		resource: reqWithExtras.arc?.resource ?? "aggregation",
 		action: `aggregation:${aggregationName}`
 	};
 }
-/** PermissionCheck returns `boolean | PermissionResult`. Pull `granted`. */
-function normalizePermissionGranted(raw) {
-	if (typeof raw === "boolean") return raw;
-	return raw.granted;
-}
-/** Pull `reason` when the check returned a structured `PermissionResult`. */
-function normalizePermissionReason(raw) {
-	if (typeof raw === "boolean") return void 0;
-	return raw.reason;
-}
 //#endregion
 export { createAggregationRouter };

package/dist/{preloadResources-DfyngIN9.mjs → createApp-CXrKFciH.mjs}

@@ -4,6 +4,7 @@ import { n as PUBLIC_SCOPE } from "./types-CSyCxl2V.mjs";
 import { t as createTenantKeyGenerator } from "./rateLimitKey-BoWRH3e7.mjs";
 import { i as createRequestIdGenerator, r as mergeHealthChecks } from "./health-CB_m4S32.mjs";
 import { t as parseJsonBody } from "./jsonBody-BlzAoGCe.mjs";
+import { r as wrapWithBoundary } from "./subscribe-helpers-DfzsivM6.mjs";
 import Fastify from "fastify";
 import qs from "qs";
 //#region src/factory/module/resolve.ts
@@ -100,8 +101,9 @@ async function subscribeModuleEventHandlers(fastify, modules) {
 					if (prior !== void 0) throw new Error(`[arc] duplicate event-handler name "${def.name}" — declared by module "${prior}" and module "${m.name}". Named event handlers must be unique across the module graph; prefix names with the owning module.`);
 					owner.set(def.name, m.name);
 				}
+				const handler = applyBoundary(def, m.name, fastify);
 				const patterns = Array.isArray(def.event) ? def.event : [def.event];
-				for (const pattern of patterns) unsubscribes.push(await bus.subscribe(pattern, def.handler));
+				for (const pattern of patterns) unsubscribes.push(await bus.subscribe(pattern, handler));
 			}
 		}
 		return unsubscribes;
@@ -111,6 +113,25 @@ async function subscribeModuleEventHandlers(fastify, modules) {
 		throw err;
 	}
 }
+/**
+* Apply the declaration's opt-in error boundary. Without `boundary`, the raw
+* handler is subscribed and a throw reaches the transport — which is what makes
+* the durable path work (unacked → redelivered → DLQ). With it, failures are
+* logged through `fastify.log` and swallowed, for handlers whose retry would
+* only delay the next event's resync.
+*
+* The boundary label falls back to `<module>.<pattern>` so an unnamed handler
+* still produces an attributable log line instead of "anonymous".
+*/
+function applyBoundary(def, moduleName, fastify) {
+	if (!def.boundary) return def.handler;
+	const onError = typeof def.boundary === "object" ? def.boundary.onError : void 0;
+	return wrapWithBoundary(def.handler, {
+		logger: fastify.log,
+		name: def.name ?? `${moduleName}.${String(def.event)}`,
+		...onError ? { onError } : {}
+	});
+}
 /** Best-effort reverse-order teardown; every unsubscribe is attempted. */
 async function unsubscribeModuleEventHandlers(unsubscribes) {
 	const errors = [];
@@ -214,34 +235,6 @@ function describeModuleCycle(remaining, byName) {
 	return `[arc] module dependency cycle: ${cycle ? cycle.join(" → ") : [...remaining].join(", ")}. Modules cannot dependsOn each other circularly — break it with a shared module both point at, or wire the softer direction through an event/port instead of a hard dependsOn.`;
 }
 //#endregion
-//#region src/factory/module/index.ts
-/**
-* Identity helper for authoring a typed module — mirrors `defineResource`.
-* Gives inference + a single obvious construction site; does no work.
-*
-* `TExports` is inferred from the `bootstrap` return value, so a module
-* author gets a typed public export for free:
-*
-* ```ts
-* export const accountingModule = (deps: Deps) =>
-*   defineModule({
-*     name: "accounting",
-*     bootstrap: async () => createAccountingEngine(deps), // TExports inferred
-*   });
-* ```
-*/
-function defineModule(module) {
-	return module;
-}
-function getModuleExports(fastify, name) {
-	const modules = fastify.arc?.modules;
-	if (!modules || !Object.hasOwn(modules, name)) {
-		const available = modules ? Object.keys(modules) : [];
-		throw new Error(`[arc] no public export recorded for module "${name}".\nA module's export is its bootstrap() return value; it is readable only AFTER that module's bootstrap ran (dependsOn / list order = init order).\nModules with recorded exports: ${available.length ? available.join(", ") : "(none)"}.`);
-	}
-	return modules[name];
-}
-//#endregion
 //#region src/factory/presets.ts
 /**
 * Production preset - strict security, performance optimized
@@ -467,7 +460,7 @@ async function registerArcCore(fastify, config, trackPlugin) {
 	await fastify.register(arcCorePlugin, { emitEvents: config.arcPlugins?.emitEvents !== false });
 	trackPlugin("arc-core");
 	if (config.arcPlugins?.events !== false) {
-		const { default: eventPlugin } = await import("./eventPlugin-DrQ_FesK.mjs").then((n) => n.n);
+		const { default: eventPlugin } = await import("./eventPlugin-D2NNR4py.mjs").then((n) => n.n);
 		const eventOpts = typeof config.arcPlugins?.events === "object" ? config.arcPlugins.events : {};
 		await fastify.register(eventPlugin, {
 			...eventOpts,
@@ -539,7 +532,7 @@ async function registerArcPlugins(fastify, config, trackPlugin, modules, moduleH
 	}
 	if (config.arcPlugins?.realtime) if (config.arcPlugins?.events === false) fastify.log.warn("Realtime plugin requires events plugin (arcPlugins.events). Realtime disabled.");
 	else {
-		const { default: realtimePlugin } = await import("./realtime-Cuw_deA-.mjs").then((n) => n.r);
+		const { default: realtimePlugin } = await import("./realtime-B9nmIY5V.mjs").then((n) => n.r);
 		const opts = config.arcPlugins.realtime === true ? {} : config.arcPlugins.realtime;
 		await fastify.register(realtimePlugin, opts);
 		trackPlugin("arc-realtime", opts);
@@ -1466,48 +1459,4 @@ const ArcFactory = {
 	}
 };
 //#endregion
-//#region src/factory/preloadResources.ts
-/**
-* Normalize an eager `import.meta.glob` result into a `ResourceLike[]`.
-*
-* Accepts either:
-* - `{ import: 'default' }` form: values are the resource directly
-* - default form: values are the full module — picks first export with `toPlugin()`
-*
-* Throws if any module doesn't yield a valid `ResourceLike`.
-*/
-function preloadResources(globResult) {
-	const resources = [];
-	for (const [path, value] of Object.entries(globResult)) {
-		const resource = pickResource(value);
-		if (!resource) throw new Error(`preloadResources: ${path} does not export a valid resource.\n    Expected: a default export OR a named export with toPlugin().`);
-		resources.push(resource);
-	}
-	return resources.sort((a, b) => (a.name ?? "").localeCompare(b.name ?? ""));
-}
-/**
-* Normalize a lazy `import.meta.glob` result into a `Promise<ResourceLike[]>`.
-*
-* Use this when resources depend on prior bootstrap (e.g., engine init) and
-* cannot be evaluated at import time of the preload file.
-*/
-async function preloadResourcesAsync(globResult) {
-	return (await Promise.all(Object.entries(globResult).map(async ([path, loader]) => {
-		const resource = pickResource(await loader());
-		if (!resource) throw new Error(`preloadResourcesAsync: ${path} does not export a valid resource.\n    Expected: a default export OR a named export with toPlugin().`);
-		return resource;
-	}))).sort((a, b) => (a.name ?? "").localeCompare(b.name ?? ""));
-}
-function pickResource(value) {
-	if (!value || typeof value !== "object") return void 0;
-	if (typeof value.toPlugin === "function") return value;
-	const mod = value;
-	const candidates = [
-		mod.default,
-		mod.resource,
-		...Object.values(mod)
-	];
-	for (const c of candidates) if (c && typeof c === "object" && typeof c.toPlugin === "function") return c;
-}
-//#endregion
-export { collectModuleScheduledJobs as _, createApp_exports as a, resolveModule as b, getPreset as c, workerPreset as d, defineModule as f, collectModuleHealthChecks as g, subscribeModuleEventHandlers as h, createApp as i, productionPreset as l, orderModules as m, preloadResourcesAsync as n, developmentPreset as o, getModuleExports as p, ArcFactory as r, edgePreset as s, preloadResources as t, testingPreset as u, collectModuleWorkflows as v, resolveContribution as y };
+export { edgePreset as a, testingPreset as c, subscribeModuleEventHandlers as d, collectModuleHealthChecks as f, resolveModule as g, resolveContribution as h, developmentPreset as i, workerPreset as l, collectModuleWorkflows as m, createApp as n, getPreset as o, collectModuleScheduledJobs as p, createApp_exports as r, productionPreset as s, ArcFactory as t, orderModules as u };

package/dist/defineAggregation-ufWjUwml.mjs

@@ -0,0 +1,47 @@
+//#region src/core/aggregation/defineAggregation.ts
+/**
+* Declare a single resource aggregation. Exported configs flow into
+* `defineResource({ aggregations: { ... } })` either as named keys or
+* via auto-discovery patterns (loadAggregations — future).
+*
+* @example Inline
+* ```ts
+* defineResource({
+*   name: 'order',
+*   aggregations: {
+*     revenueByStatus: defineAggregation({
+*       groupBy: 'status',
+*       measures: { count: 'count', revenue: 'sum:totalPrice' },
+*       permissions: requireRoles(['admin']),
+*     }),
+*   },
+* });
+* ```
+*
+* @example Multi-file
+* ```ts
+* // orders/aggregations/revenue-by-status.ts
+* import { defineAggregation } from '@classytic/arc';
+*
+* export const revenueByStatus = defineAggregation({
+*   groupBy: 'status',
+*   measures: { count: 'count', revenue: 'sum:totalPrice' },
+*   permissions: requireRoles(['admin']),
+*   timeout: 5000,
+*   cache: { staleTime: 60 },
+* });
+*
+* // orders/order.resource.ts
+* import * as aggregations from './aggregations/index.js';
+*
+* defineResource({
+*   name: 'order',
+*   aggregations,                                  // 30+ entries flow in
+* });
+* ```
+*/
+function defineAggregation(config) {
+	return config;
+}
+//#endregion
+export { defineAggregation as t };