@classytic/arc 2.30.0 → 2.31.0

package/dist/integrations/jobs/index.mjs

@@ -1,3 +1,5 @@
+/*! @classytic/arc v2.31.0 | MIT | https://classytic.com */
+import { n as evaluateAndApplyPermission } from "../../authorizationDecision-ChvUQGG1.mjs";
 import fp from "fastify-plugin";
 //#region src/integrations/jobs/execution.ts
 async function executeTimedHandler(options) {
@@ -149,6 +151,49 @@ const jobsPluginImpl = async (fastify, options) => {
 	const dlqQueues = /* @__PURE__ */ new Map();
 	const workers = /* @__PURE__ */ new Map();
 	const throttledJobs = /* @__PURE__ */ new Map();
+	const seenNames = /* @__PURE__ */ new Set();
+	for (const job of jobs) {
+		if (typeof job.name !== "string" || job.name.trim() === "") throw new Error("[arc/jobs] a job definition has an empty name — names are the queue key.");
+		if (seenNames.has(job.name)) throw new Error(`[arc/jobs] duplicate job name "${job.name}". A name is the queue key, so two definitions sharing one would leave an untracked worker consuming the same queue after shutdown. Rename one, or register it in a single definition.`);
+		seenNames.add(job.name);
+		const positiveInt = (v, field) => {
+			if (v === void 0) return;
+			if (typeof v !== "number" || !Number.isInteger(v) || v <= 0) throw new Error(`[arc/jobs] Job '${job.name}' has ${field}=${String(v)} — must be a positive integer.`);
+		};
+		const nonNegativeInt = (v, field) => {
+			if (v === void 0) return;
+			if (typeof v !== "number" || !Number.isInteger(v) || v < 0) throw new Error(`[arc/jobs] Job '${job.name}' has ${field}=${String(v)} — must be a non-negative integer.`);
+		};
+		positiveInt(job.maxConcurrent, "maxConcurrent");
+		positiveInt(job.concurrency, "concurrency");
+		positiveInt(job.timeout, "timeout");
+		nonNegativeInt(job.retries, "retries");
+		nonNegativeInt(job.cancelGraceMs, "cancelGraceMs");
+		if (job.rateLimit) {
+			positiveInt(job.rateLimit.max, "rateLimit.max");
+			positiveInt(job.rateLimit.duration, "rateLimit.duration");
+		}
+		if (job.backoff) nonNegativeInt(job.backoff.delay, "backoff.delay");
+		if (job.repeat) {
+			positiveInt(job.repeat.every, "repeat.every");
+			positiveInt(job.repeat.limit, "repeat.limit");
+			if (job.repeat.pattern !== void 0 && job.repeat.pattern.trim() === "") throw new Error(`[arc/jobs] Job '${job.name}' has an empty repeat.pattern.`);
+		}
+	}
+	if (defaults) {
+		const d = defaults;
+		const defaultPositiveInt = (v, field) => {
+			if (v === void 0) return;
+			if (typeof v !== "number" || !Number.isInteger(v) || v <= 0) throw new Error(`[arc/jobs] defaults.${field}=${String(v)} — must be a positive integer.`);
+		};
+		const defaultNonNegativeInt = (v, field) => {
+			if (v === void 0) return;
+			if (typeof v !== "number" || !Number.isInteger(v) || v < 0) throw new Error(`[arc/jobs] defaults.${field}=${String(v)} — must be a non-negative integer.`);
+		};
+		defaultNonNegativeInt(d.retries, "retries");
+		defaultPositiveInt(d.timeout, "timeout");
+		if (d.backoff) defaultNonNegativeInt(d.backoff.delay, "backoff.delay");
+	}
 	for (const job of jobs) {
 		if (!job.repeat) continue;
 		const { pattern, every, tz } = job.repeat;
@@ -296,19 +341,22 @@ const jobsPluginImpl = async (fastify, options) => {
 				}, `[arc/jobs] Large job payload — prefer passing IDs and reloading in the handler`);
 			} catch {}
 			const jobDef = jobDefsByName.get(name);
-			return { jobId: (await queue.add(name, data, {
-				delay: opts.delay,
-				priority: opts.priority,
-				jobId: opts.jobId,
-				removeOnComplete: opts.removeOnComplete ?? defaults.removeOnComplete ?? 100,
-				removeOnFail: opts.removeOnFail ?? defaults.removeOnFail ?? 500,
-				attempts: jobDef?.retries ?? defaults.retries ?? 3,
-				backoff: jobDef?.backoff ?? defaults.backoff ?? {
-					type: "exponential",
-					delay: 1e3
-				},
-				repeat: jobDef?.repeat ?? opts.repeat
-			})).id };
+			return {
+				queue: name,
+				jobId: (await queue.add(name, data, {
+					delay: opts.delay,
+					priority: opts.priority,
+					jobId: opts.jobId,
+					removeOnComplete: opts.removeOnComplete ?? defaults.removeOnComplete ?? 100,
+					removeOnFail: opts.removeOnFail ?? defaults.removeOnFail ?? 500,
+					attempts: jobDef?.retries ?? defaults.retries ?? 3,
+					backoff: jobDef?.backoff ?? defaults.backoff ?? {
+						type: "exponential",
+						delay: 1e3
+					},
+					repeat: jobDef?.repeat ?? opts.repeat
+				})).id
+			};
 		},
 		getQueue(name) {
 			return queues.get(name) ?? null;
@@ -327,10 +375,12 @@ const jobsPluginImpl = async (fastify, options) => {
 			}
 			return stats;
 		},
-		async getStatus(jobId) {
-			for (const [name, queue] of queues) {
+		async getStatus(queueName, jobId) {
+			const queue = queues.get(queueName);
+			if (queue) {
+				const name = queueName;
 				const job = await queue.getJob(jobId);
-				if (!job) continue;
+				if (!job) return null;
 				const state = typeof job.getState === "function" ? await job.getState() : "unknown";
 				const throttled = throttledJobs.get(name)?.has(jobId) || void 0;
 				return {
@@ -358,24 +408,50 @@ const jobsPluginImpl = async (fastify, options) => {
 		}
 	};
 	if (!fastify.hasDecorator("jobs")) fastify.decorate("jobs", dispatcher);
-	fastify.get(`${prefix}/stats`, async () => {
-		return {
-			success: true,
-			data: await dispatcher.getStats()
+	const management = options.managementRoutes;
+	if (management) {
+		const gate = management.operatorPermission;
+		if (!gate._platformOnly && !management.allowUnverifiedOperatorPermission) throw new Error("[arc/jobs] managementRoutes.operatorPermission must be platform-only. These routes are global (jobs carry no tenant identity), so an org-role gate would let a member of one organization read another's jobs. Use requirePlatformRole('platform-ops') — or requireRoles([...], { includeOrgRoles: false }) with allowUnverifiedOperatorPermission: true if you have verified the check yourself.");
+		const guard = async (req, reply) => {
+			if (!await evaluateAndApplyPermission(gate, {
+				user: req.user ?? null,
+				request: req,
+				resource: "jobs",
+				action: "read"
+			}, req, reply)) return false;
+			const policy = req._policyFilters;
+			if (policy && Object.keys(policy).length > 0) {
+				fastify.log.error("[arc/jobs] managementRoutes.operatorPermission returned a row-level policy, which this surface cannot apply — jobs carry no tenant identity. Gate it on an operator role (e.g. requireRoles(['platform-ops'])) and serve tenant-facing job status from a resource that owns its own row policy.");
+				await reply.status(403).send({
+					code: "arc.jobs.policy_unsupported",
+					message: "Job management routes are an operator surface and cannot apply a row-level policy.",
+					status: 403
+				});
+				return false;
+			}
+			return true;
 		};
-	});
-	fastify.get(`${prefix}/:id/status`, async (req, reply) => {
-		const { id } = req.params;
-		const status = await dispatcher.getStatus(id);
-		if (!status) return reply.status(404).send({
-			success: false,
-			error: "Job not found"
+		fastify.get(`${prefix}/stats`, async (req, reply) => {
+			if (!await guard(req, reply)) return reply;
+			return { stats: await dispatcher.getStats() };
 		});
-		return {
-			success: true,
-			data: status
-		};
-	});
+		fastify.get(`${prefix}/:queue/:id/status`, async (req, reply) => {
+			if (!await guard(req, reply)) return reply;
+			const { queue, id } = req.params;
+			const status = await dispatcher.getStatus(queue, id);
+			if (!status) return reply.status(404).send({
+				code: "arc.not_found",
+				message: "Job not found",
+				status: 404
+			});
+			const { returnValue, failedReason, ...safe } = status;
+			return {
+				...safe,
+				...management.exposeResult ? { returnValue } : {},
+				...management.exposeFailureReason ? { failedReason } : {}
+			};
+		});
+	}
 	fastify.addHook("onClose", async () => {
 		await dispatcher.close();
 	});

package/dist/integrations/mcp/index.d.mts

@@ -1,8 +1,9 @@
-import { Rt as IControllerResponse, V as ResourceDefinition, Vt as ServerAccessor, zt as IRequestContext } from "../../index-Q5gzEIWY.mjs";
-import { i as RequestScope } from "../../types-DjC-KUCz.mjs";
-import { r as PermissionCheck } from "../../types-ChvvVNP8.mjs";
-import { n as FieldPermissionMap } from "../../fields-D3lhgzhD.mjs";
-import { _ as ToolDefinition, a as CrudDescriptionOverride, c as McpAuthResult, d as McpResourceConfig, f as PromptDefinition, g as ToolContext, h as ToolAnnotations, i as CrudDescriptionMeta, l as McpExecutionWiring, m as SessionEntry, n as CallToolResult, o as CrudOperation, p as PromptResult, r as CreateMcpServerConfig, s as McpAuthResolver, t as BetterAuthHandler, u as McpPluginOptions } from "../../types-Bmmn-fO0.mjs";
+
+import { Ht as ServerAccessor, Rt as IControllerResponse, V as ResourceDefinition, zt as IRequestContext } from "../../index-CpzxqePp.mjs";
+import { i as RequestScope } from "../../types-ChuShpCP.mjs";
+import { r as PermissionCheck } from "../../types-B7XeLEgK.mjs";
+import { n as FieldPermissionMap } from "../../fields-I_EeRWND.mjs";
+import { _ as ToolDefinition, a as CrudDescriptionOverride, c as McpAuthResult, d as McpResourceConfig, f as PromptDefinition, g as ToolContext, h as ToolAnnotations, i as CrudDescriptionMeta, l as McpExecutionWiring, m as SessionEntry, n as CallToolResult, o as CrudOperation, p as PromptResult, r as CreateMcpServerConfig, s as McpAuthResolver, t as BetterAuthHandler, u as McpPluginOptions } from "../../types-CwcUQ610.mjs";
 import { ErrorContract } from "@classytic/repo-core/errors";
 import { FastifyPluginAsync } from "fastify";
 import { z } from "zod";
@@ -529,7 +530,6 @@ declare module "fastify" {
 }
 interface ResourceFilterInputs {
   readonly expose?: readonly string[];
-  readonly include?: readonly string[];
   readonly exclude?: readonly string[];
 }
 /**

package/dist/integrations/mcp/index.mjs

@@ -1,4 +1,5 @@
-import { a as defaultCrudDescription, c as mcpHandlerAdapter, d as toCallToolResult, f as toCallToolSuccess, h as resolveToolCollisions, i as fieldRulesToZod, l as permissionDeniedResult, m as createMcpServer, n as mcpPlugin, o as resolveCrudDescription, p as buildRequestContext, r as resourceToTools, s as invokeController, t as filterResourcesForMcp, u as toCallToolError } from "../../mcpPlugin-nRzm5g2s.mjs";
+/*! @classytic/arc v2.31.0 | MIT | https://classytic.com */
+import { a as defaultCrudDescription, c as mcpHandlerAdapter, d as toCallToolResult, f as toCallToolSuccess, h as resolveToolCollisions, i as fieldRulesToZod, l as permissionDeniedResult, m as createMcpServer, n as mcpPlugin, o as resolveCrudDescription, p as buildRequestContext, r as resourceToTools, s as invokeController, t as filterResourcesForMcp, u as toCallToolError } from "../../mcpPlugin-B_es0hiF.mjs";
 //#region src/integrations/mcp/defineTool.ts
 /**
 * Define a type-safe MCP tool.

package/dist/integrations/mcp/testing.d.mts

@@ -1,8 +1,9 @@
-import { c as McpAuthResult, u as McpPluginOptions } from "../../types-Bmmn-fO0.mjs";
+
+import { c as McpAuthResult, u as McpPluginOptions } from "../../types-CwcUQ610.mjs";
 //#region src/integrations/mcp/testing.d.ts
 interface TestMcpClientOptions {
   /** MCP plugin options (resources, overrides, etc.) — same as mcpPlugin config */
-  pluginOptions?: Pick<McpPluginOptions, "resources" | "overrides" | "expose" | "include" | "exclude" | "toolNamePrefix" | "extraTools" | "extraPrompts" | "instructions">;
+  pluginOptions?: Pick<McpPluginOptions, "resources" | "overrides" | "expose" | "exclude" | "toolNamePrefix" | "extraTools" | "extraPrompts" | "instructions">;
   /** Auth identity for the test session */
   auth?: McpAuthResult | null;
   /** Server name (default: 'test-mcp') */

package/dist/integrations/mcp/testing.mjs

@@ -1,4 +1,5 @@
-import { m as createMcpServer, r as resourceToTools, t as filterResourcesForMcp } from "../../mcpPlugin-nRzm5g2s.mjs";
+/*! @classytic/arc v2.31.0 | MIT | https://classytic.com */
+import { m as createMcpServer, r as resourceToTools, t as filterResourcesForMcp } from "../../mcpPlugin-B_es0hiF.mjs";
 //#region src/integrations/mcp/testing.ts
 /**
 * @classytic/arc/mcp/testing — MCP Test Utilities
@@ -54,7 +55,6 @@ async function createTestMcpClient(options = {}) {
 	const overrides = pluginOpts.overrides ?? {};
 	const tools = filterResourcesForMcp(pluginOpts.resources ?? [], {
 		expose: pluginOpts.expose,
-		include: pluginOpts.include,
 		exclude: pluginOpts.exclude
 	}).flatMap((r) => {
 		const resOverrides = overrides[r.name] ?? {};

package/dist/integrations/streamline.d.mts

@@ -1,3 +1,4 @@
+
 import { FastifyPluginAsync, FastifyRequest } from "fastify";
 //#region src/integrations/streamline.d.ts
 /**

package/dist/integrations/streamline.mjs

@@ -1,5 +1,6 @@
-import { f as createError, i as NotFoundError, r as ForbiddenError } from "../errors-DkO8Nk6-.mjs";
-import { a as promoteStreamTokenToHeader, n as forwardedStreamHeaders } from "../streaming-BQcW6_Kq.mjs";
+/*! @classytic/arc v2.31.0 | MIT | https://classytic.com */
+import { f as createError, i as NotFoundError, r as ForbiddenError } from "../errors-Cj42AntO.mjs";
+import { a as promoteStreamTokenToHeader, n as forwardedStreamHeaders } from "../streaming-PSZwi8JV.mjs";
 import fp from "fastify-plugin";
 //#region src/integrations/streamline.ts
 /**

package/dist/integrations/webhooks.d.mts

@@ -1,3 +1,4 @@
+
 import { FastifyPluginAsync } from "fastify";
 //#region src/integrations/webhooks.d.ts
 interface WebhookSubscription {

package/dist/integrations/webhooks.mjs

@@ -1,3 +1,4 @@
+/*! @classytic/arc v2.31.0 | MIT | https://classytic.com */
 import { createHmac, timingSafeEqual } from "node:crypto";
 import fp from "fastify-plugin";
 //#region src/integrations/webhooks.ts

package/dist/integrations/websocket-pushref-redis.d.mts

@@ -1,4 +1,5 @@
-import { c as SerializedEntry, i as Principal, n as FencedWriteOutcome, s as PushRefStore, t as EnvelopeSnapshot } from "../pushref-registry-BbcnpNTm.mjs";
+
+import { c as SerializedEntry, i as Principal, n as FencedWriteOutcome, s as PushRefStore, t as EnvelopeSnapshot } from "../pushref-registry-Dov9l4qE.mjs";
 //#region src/integrations/websocket-pushref-redis.d.ts
 /**
  * Minimal `ioredis` shape — typed structurally so this file doesn't

package/dist/integrations/websocket-pushref-redis.mjs

@@ -1,3 +1,4 @@
+/*! @classytic/arc v2.31.0 | MIT | https://classytic.com */
 //#region src/integrations/websocket-pushref-redis.ts
 /**
 * Lua script for atomic claim. Runs server-side, single-roundtrip.

package/dist/integrations/websocket-redis.d.mts

@@ -1,4 +1,5 @@
-import { f as WebSocketAdapter } from "../websocket-_Pd0CgR0.mjs";
+
+import { f as WebSocketAdapter } from "../websocket-BOXVggMf.mjs";
 //#region src/integrations/websocket-redis.d.ts
 interface RedisLike {
   publish(channel: string, message: string): Promise<number>;

package/dist/integrations/websocket-redis.mjs

@@ -1,3 +1,4 @@
+/*! @classytic/arc v2.31.0 | MIT | https://classytic.com */
 //#region src/integrations/websocket-redis.ts
 /**
 * Redis Pub/Sub adapter for cross-instance WebSocket broadcast.

package/dist/integrations/websocket.d.mts

@@ -1,3 +1,4 @@
-import { a as GeoRoomOptions, c as WebSocketClient, d as LocalWebSocketAdapter, f as WebSocketAdapter, i as GeoRoom, l as WebSocketMessage, n as GeoPoint, o as RoomManager, r as GeoPublishOpts, s as AuthResult, t as websocketPlugin, u as WebSocketPluginOptions } from "../websocket-_Pd0CgR0.mjs";
-import { a as PushRefRegistry, c as SerializedEntry, i as Principal, o as PushRefRegistryOptions, r as MemoryPushRefStore, s as PushRefStore } from "../pushref-registry-BbcnpNTm.mjs";
+
+import { a as GeoRoomOptions, c as WebSocketClient, d as LocalWebSocketAdapter, f as WebSocketAdapter, i as GeoRoom, l as WebSocketMessage, n as GeoPoint, o as RoomManager, r as GeoPublishOpts, s as AuthResult, t as websocketPlugin, u as WebSocketPluginOptions } from "../websocket-BOXVggMf.mjs";
+import { a as PushRefRegistry, c as SerializedEntry, i as Principal, o as PushRefRegistryOptions, r as MemoryPushRefStore, s as PushRefStore } from "../pushref-registry-Dov9l4qE.mjs";
 export { type AuthResult, type GeoPoint, type GeoPublishOpts, GeoRoom, type GeoRoomOptions, LocalWebSocketAdapter, MemoryPushRefStore, type Principal, PushRefRegistry, type PushRefRegistryOptions, type PushRefStore, RoomManager, type SerializedEntry, type WebSocketAdapter, type WebSocketClient, type WebSocketMessage, type WebSocketPluginOptions, websocketPlugin };

package/dist/integrations/websocket.mjs

@@ -1,3 +1,4 @@
+/*! @classytic/arc v2.31.0 | MIT | https://classytic.com */
 import { randomUUID } from "node:crypto";
 import sjson from "secure-json-parse";
 import fp from "fastify-plugin";

package/dist/{interface-BGZCzOGL.d.mts → interface-BOk3YnTz.d.mts}

@@ -1,3 +1,4 @@
+
 import { CacheAdapter } from "@classytic/repo-core/cache";
 //#region src/cache/interface.d.ts
 interface CacheLogger {

package/dist/{interface-Uk8ONJv7.d.mts → interface-DEWNOMza.d.mts}

@@ -1,3 +1,4 @@
+
 //#region src/idempotency/stores/interface.d.ts
 /**
  * Idempotency Store Interface

package/dist/{interface-n5hpKg1d.mjs → interface-DYzM0q-u.mjs}

@@ -1,3 +1,4 @@
+/*! @classytic/arc v2.31.0 | MIT | https://classytic.com */
 //#region src/idempotency/stores/interface.ts
 /**
 * Helper to create a result object

package/dist/{jsonBody-BlzAoGCe.mjs → jsonBody-BYbLDi5D.mjs}

@@ -1,4 +1,5 @@
-import { t as ArcError } from "./errors-DkO8Nk6-.mjs";
+/*! @classytic/arc v2.31.0 | MIT | https://classytic.com */
+import { t as ArcError } from "./errors-Cj42AntO.mjs";
 import sjson from "secure-json-parse";
 //#region src/utils/jsonBody.ts
 /**

package/dist/{keys-Cd316u_y.mjs → keys-C0_pa1tY.mjs}

@@ -1,3 +1,4 @@
+/*! @classytic/arc v2.31.0 | MIT | https://classytic.com */
 //#region src/cache/keys.ts
 /**
 * Cache Key Utilities

package/dist/{loadResources-DpU8pfjV.mjs → loadResources-yawi9tAE.mjs}

@@ -1,4 +1,5 @@
-import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.mjs";
+/*! @classytic/arc v2.31.0 | MIT | https://classytic.com */
+import { t as __exportAll } from "./rolldown-runtime-CUsjNX9R.mjs";
 import { arcLog } from "./logger/index.mjs";
 import { readdir } from "node:fs/promises";
 import { dirname, join, resolve } from "node:path";

package/dist/{loadResourcesFromEntry-kvGT6EcO.mjs → loadResourcesFromEntry-BAjYZonx.mjs}

@@ -1,4 +1,5 @@
-import { t as ResourceRegistry } from "./ResourceRegistry-y9Hnypus.mjs";
+/*! @classytic/arc v2.31.0 | MIT | https://classytic.com */
+import { t as ResourceRegistry } from "./ResourceRegistry-qq0mn2s9.mjs";
 import { resolve } from "node:path";
 import { pathToFileURL } from "node:url";
 //#region src/cli/utils/loadResourcesFromEntry.ts

package/dist/logger/index.d.mts

@@ -1,3 +1,4 @@
+
 //#region src/logger/index.d.ts
 /**
  * Arc Logger — Centralized debug & warning system

package/dist/logger/index.mjs

@@ -1,3 +1,4 @@
+/*! @classytic/arc v2.31.0 | MIT | https://classytic.com */
 //#region src/logger/index.ts
 let globalOptions = {};
 /**

package/dist/{mcpPlugin-nRzm5g2s.mjs → mcpPlugin-B_es0hiF.mjs}

@@ -1,18 +1,19 @@
-import { p as isArcError, t as ArcError } from "./errors-DkO8Nk6-.mjs";
-import { n as requireSingleHeaderValue } from "./headers-BvlQSDMB.mjs";
-import { b as isElevated, c as getOrgId, g as getUserId, x as isMember } from "./types-CSyCxl2V.mjs";
-import { t as BaseController } from "./BaseController-B5DwufbB.mjs";
-import { i as evaluatePermissionDecision } from "./applyPermissionResult-Cf6zUCvb.mjs";
-import { i as resolveEffectiveRoles, t as applyFieldReadPermissions } from "./fields-CQ_7KQWw.mjs";
-import { t as executePipeline } from "./pipe-BOLmGIxa.mjs";
-import { t as buildRequestScopeProjection } from "./projection-UBDgfMwu.mjs";
-import { r as resolvePipelineSteps } from "./pipeline-BJnpkY9i.mjs";
-import { n as validateAggregations } from "./validate-Bk44F2yT.mjs";
-import { n as executeAggregation } from "./buildHandler-BYS3Vkfz.mjs";
-import { t as pluralize } from "./pluralize-BhrgwZb9.mjs";
-import { t as resolveActionPermission } from "./actionPermissions-CAphcmUG.mjs";
-import { t as createIdempotencyResult } from "./interface-n5hpKg1d.mjs";
-import { r as shouldRejectAdditionalProperties, t as normalizeSchemaIR } from "./schemaIR-Ca7ySNPx.mjs";
+/*! @classytic/arc v2.31.0 | MIT | https://classytic.com */
+import { r as evaluatePermissionDecision } from "./authorizationDecision-ChvUQGG1.mjs";
+import { p as isArcError, t as ArcError } from "./errors-Cj42AntO.mjs";
+import { n as requireSingleHeaderValue } from "./headers-3zvE0rM3.mjs";
+import { b as isElevated, c as getOrgId, g as getUserId, x as isMember } from "./types-Cys0ko9Z.mjs";
+import { t as BaseController } from "./BaseController-De7GqHck.mjs";
+import { i as resolveEffectiveRoles, t as applyFieldReadPermissions } from "./fields-CB5Cuzk9.mjs";
+import { t as executePipeline } from "./pipe-DRDNsI2T.mjs";
+import { t as buildRequestScopeProjection } from "./projection-BHw6xlOQ.mjs";
+import { r as resolvePipelineSteps } from "./pipeline-UPQFatit.mjs";
+import { n as validateAggregations } from "./validate-_KbifpHF.mjs";
+import { n as executeAggregation } from "./buildHandler-CDrCJzmB.mjs";
+import { t as pluralize } from "./pluralize-O0FZgESl.mjs";
+import { t as resolveActionPermission } from "./actionPermissions-BE5NwaQk.mjs";
+import { t as createIdempotencyResult } from "./interface-DYzM0q-u.mjs";
+import { r as shouldRejectAdditionalProperties, t as normalizeSchemaIR } from "./schemaIR-Bm2enbnh.mjs";
 import { isHttpError, toErrorContract } from "@classytic/repo-core/errors";
 import { createHash, randomUUID } from "node:crypto";
 import fp from "fastify-plugin";
@@ -1634,7 +1635,7 @@ function mapJsonSchemaTypeToArcType(jsonType) {
 *
 * 1. `mcpHandler` (full bypass) — caller-supplied function owns the whole
 *    tool result; pipeline is not invoked.
-* 2. Function handler with `raw: false/undefined` — arc's pipeline wrapper
+* 2. Function in `handler` (the arc pipeline) — arc's pipeline wrapper
 *    runs normally, and the envelope is serialized into the tool result.
 * 3. String handler — looks up a method on the controller by name.
 */
@@ -1872,10 +1873,10 @@ function resourceToTools(resource, config = {}) {
 	for (const route of resource.routes ?? []) {
 		if (route.mcp === false) continue;
 		const mcpHandler = route.mcpHandler;
-		if (!!route.raw && !mcpHandler) continue;
+		if (!(route.rawHandler === void 0) && !mcpHandler) continue;
 		if (!mcpHandler && typeof route.handler === "string" && !controller) continue;
 		const routeWithRef = route;
-		let resolvedRouteHandler = route.handler;
+		let resolvedRouteHandler = route.handler ?? route.rawHandler;
 		if (typeof routeWithRef.controllerMethod === "function" && !resolvedRouteHandler) {
 			if (!controller) continue;
 			const referenced = routeWithRef.controllerMethod(controller);
@@ -2190,7 +2191,6 @@ const mcpPluginImpl = async (fastify, options) => {
 	}
 	const enabledResources = filterResourcesForMcp(options.resources, {
 		expose: options.expose,
-		include: options.include,
 		exclude: options.exclude
 	});
 	const fastifyAny = fastify;
@@ -2465,11 +2465,10 @@ function registerStatefulRoutes(fastify, prefix, options, cache, createServer, T
 * same precedence rules without duplicating them.
 */
 function filterResourcesForMcp(resources, inputs) {
-	const { expose, include, exclude } = inputs;
-	if (expose && include) throw new Error("mcpPlugin: pass either `expose` (preferred) or `include` (legacy alias), not both.");
-	if (expose && exclude) throw new Error("mcpPlugin: `expose` is default-deny — `exclude` is redundant. Drop `exclude` or switch to `include`/`exclude` for default-allow semantics.");
+	const { expose, exclude } = inputs;
+	if (expose && exclude) throw new Error("mcpPlugin: `expose` is default-deny (an allowlist) — `exclude` is redundant alongside it. Use `expose` to name what to surface, OR `exclude` to drop specific resources from the default-allow set. Not both.");
 	const eligible = resources.filter((r) => r.mcp !== false);
-	const allow = expose ?? include;
+	const allow = expose;
 	if (allow) {
 		const allowSet = new Set(allow);
 		return eligible.filter((r) => allowSet.has(r.name));

package/dist/{memory-CmnzXE5Z.mjs → memory-DR6wpa9F.mjs}

@@ -1,4 +1,5 @@
-import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.mjs";
+/*! @classytic/arc v2.31.0 | MIT | https://classytic.com */
+import { t as __exportAll } from "./rolldown-runtime-CUsjNX9R.mjs";
 //#region src/cache/memory.ts
 var memory_exports = /* @__PURE__ */ __exportAll({ MemoryCacheStore: () => MemoryCacheStore });
 /**

package/dist/{metrics-fdxI5mn_.mjs → metrics-CUdw_wLB.mjs}

@@ -1,4 +1,5 @@
-import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.mjs";
+/*! @classytic/arc v2.31.0 | MIT | https://classytic.com */
+import { t as __exportAll } from "./rolldown-runtime-CUsjNX9R.mjs";
 import fp from "fastify-plugin";
 //#region src/plugins/metrics.ts
 var metrics_exports = /* @__PURE__ */ __exportAll({

package/dist/middleware/index.d.mts

@@ -1,4 +1,5 @@
-import { I as MiddlewareHandler, L as RequestWithExtras, Q as MiddlewareConfig } from "../index-Q5gzEIWY.mjs";
+
+import { I as MiddlewareHandler, L as RequestWithExtras, Q as MiddlewareConfig } from "../index-CpzxqePp.mjs";
 import { RouteHandlerMethod } from "fastify";
 //#region src/middleware/middleware.d.ts
 interface NamedMiddleware {

package/dist/middleware/index.mjs

@@ -1,5 +1,6 @@
-import { t as CRUD_OPERATIONS } from "../constants-DNre0wRg.mjs";
-import { t as multipartBody } from "../multipartBody-D0eBvkeq.mjs";
+/*! @classytic/arc v2.31.0 | MIT | https://classytic.com */
+import { t as CRUD_OPERATIONS } from "../constants-D3Dv4LAV.mjs";
+import { t as multipartBody } from "../multipartBody-wOgj_fnj.mjs";
 //#region src/middleware/middleware.ts
 /**
 * Named Middleware — Priority-based, conditional middleware execution.

package/dist/migrations/index.d.mts

@@ -1,3 +1,4 @@
+
 import { LockAdapter } from "@classytic/repo-core/lock";
 //#region src/migrations/index.d.ts
 interface Migration {

package/dist/migrations/index.mjs

@@ -1,4 +1,5 @@
-import { t as startRenewingLease } from "../renewingLease-3cuQH7h8.mjs";
+/*! @classytic/arc v2.31.0 | MIT | https://classytic.com */
+import { t as startRenewingLease } from "../renewingLease-Dll8mGgc.mjs";
 import { createHash, randomUUID } from "node:crypto";
 //#region src/migrations/index.ts
 /**

package/dist/module-0pFJA6YW.mjs

@@ -0,0 +1,78 @@
+/*! @classytic/arc v2.31.0 | MIT | https://classytic.com */
+//#region src/factory/module/index.ts
+/**
+* Identity helper for authoring a typed module — mirrors `defineResource`.
+* Gives inference + a single obvious construction site; does no work.
+*
+* `TExports` is inferred from the `bootstrap` return value, so a module
+* author gets a typed public export for free:
+*
+* ```ts
+* export const accountingModule = (deps: Deps) =>
+*   defineModule({
+*     name: "accounting",
+*     bootstrap: async () => createAccountingEngine(deps), // TExports inferred
+*   });
+* ```
+*/
+function defineModule(module) {
+	return module;
+}
+function getModuleExports(fastify, name) {
+	const recorded = readModuleExports(fastify, name);
+	if (recorded === ABSENT) {
+		const available = fastify.arc?.modules ? Object.keys(fastify.arc.modules) : [];
+		throw new Error(`[arc] no public export recorded for module "${name}".\nA module's export is its bootstrap() return value; it is readable only AFTER that module's bootstrap ran (dependsOn / list order = init order).\nModules with recorded exports: ${available.length ? available.join(", ") : "(none)"}.`);
+	}
+	return recorded;
+}
+/**
+* Sentinel for "no entry recorded", distinct from a recorded `undefined`.
+*
+* registerResources never records an `undefined` export, so today the two
+* cannot both happen — but encoding absence as `undefined` would make the
+* optional/required accessors disagree the day that changes, and a required
+* accessor that stops throwing is exactly the silent-null class of bug these
+* helpers exist to remove.
+*/
+const ABSENT = Symbol("arc.module.absent");
+/** The one honest read of the module-export map, shared by every accessor. */
+function readModuleExports(fastify, name) {
+	const modules = fastify.arc?.modules;
+	if (!modules || !Object.hasOwn(modules, name)) return ABSENT;
+	return modules[name];
+}
+function getOptionalModuleExports(fastify, name) {
+	const recorded = readModuleExports(fastify, name);
+	return recorded === ABSENT ? void 0 : recorded;
+}
+/**
+* Is a module's public export recorded yet? The predicate form of
+* `getOptionalModuleExports`, for readiness gates (`ready: () => ...`) that
+* should not have to reason about falsy-but-present exports.
+*/
+function hasModuleExports(fastify, name) {
+	return readModuleExports(fastify, name) !== ABSENT;
+}
+function lazyModuleExports(fastify, name) {
+	let resolved = ABSENT;
+	return () => {
+		if (resolved === ABSENT) resolved = readModuleExports(fastify, name);
+		return resolved === ABSENT ? void 0 : resolved;
+	};
+}
+function lazyRequiredModuleExports(fastify, name) {
+	const states = fastify.arc?.moduleStates;
+	if (states !== void 0 && !Object.hasOwn(states, name)) {
+		const composed = Object.keys(states);
+		throw new Error(`[arc] lazyRequiredModuleExports("${name}"): module "${name}" is not in the composed module graph. A lazily-required module is still a HARD dependency — compose it (and declare it in the consumer's \`dependsOn\`), or use lazyModuleExports() if the integration is genuinely optional.
+Composed modules: ${composed.length ? composed.join(", ") : "(none)"}.`);
+	}
+	let resolved = ABSENT;
+	return () => {
+		if (resolved === ABSENT) resolved = getModuleExports(fastify, name);
+		return resolved;
+	};
+}
+//#endregion
+export { lazyModuleExports as a, hasModuleExports as i, getModuleExports as n, lazyRequiredModuleExports as o, getOptionalModuleExports as r, defineModule as t };

package/dist/{multipartBody-D0eBvkeq.mjs → multipartBody-wOgj_fnj.mjs}

@@ -1,3 +1,4 @@
+/*! @classytic/arc v2.31.0 | MIT | https://classytic.com */
 import sjson from "secure-json-parse";
 //#region src/middleware/multipartBody.ts
 const DEFAULT_MAX_FILE_SIZE = 10 * 1024 * 1024;

package/dist/{openapi-B8Vkbxbn.mjs → openapi-B2L4js1v.mjs}

@@ -1,8 +1,9 @@
-import { n as getUserRoles } from "./userHelpers-Cg_y3fBz.mjs";
-import { n as convertRouteSchema } from "./schemaConverter-DJvodiHj.mjs";
-import { t as pluralize } from "./pluralize-BhrgwZb9.mjs";
-import { t as resolveActionPermission } from "./actionPermissions-CAphcmUG.mjs";
-import { t as buildActionBodySchema } from "./createActionRouter-BxuywVRB.mjs";
+/*! @classytic/arc v2.31.0 | MIT | https://classytic.com */
+import { n as getUserRoles } from "./userHelpers-ChYJ6CdK.mjs";
+import { n as convertRouteSchema } from "./schemaConverter-D--wdJM-.mjs";
+import { t as pluralize } from "./pluralize-O0FZgESl.mjs";
+import { t as resolveActionPermission } from "./actionPermissions-BE5NwaQk.mjs";
+import { t as buildActionBodySchema } from "./createActionRouter-CDXEdasl.mjs";
 import fp from "fastify-plugin";
 //#region src/docs/openapi/canonical-schemas.ts
 /**