@classytic/arc 2.31.0 → 2.33.0

package/dist/{pipeline-UPQFatit.mjs → pipeline-q69DZzgG.mjs}

@@ -1,9 +1,9 @@
-/*! @classytic/arc v2.31.0 | MIT | https://classytic.com */
-import { n as getUserRoles } from "./userHelpers-ChYJ6CdK.mjs";
-import { b as isElevated, n as PUBLIC_SCOPE, x as isMember } from "./types-Cys0ko9Z.mjs";
-import { i as resolveEffectiveRoles, t as applyFieldReadPermissions } from "./fields-CB5Cuzk9.mjs";
-import { t as executePipeline } from "./pipe-DRDNsI2T.mjs";
-import { t as buildRequestScopeProjection } from "./projection-BHw6xlOQ.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { n as getUserRoles } from "./userHelpers-CWF5pbZD.mjs";
+import { b as isElevated, n as PUBLIC_SCOPE, x as isMember } from "./types-CoqIRrkY.mjs";
+import { i as resolveEffectiveRoles, t as applyFieldReadPermissions } from "./fields-CojeUkS4.mjs";
+import { t as executePipeline } from "./pipe-BzzoEhHj.mjs";
+import { t as buildRequestScopeProjection } from "./projection-BKM0Ui-s.mjs";
 import { isPaginatedResult, toCanonicalList } from "@classytic/repo-core/pagination";
 //#region src/core/fastifyAdapter.ts
 /** Type guard for Mongoose-like documents with toObject() */
@@ -122,9 +122,7 @@ function computeFieldCapabilities(fieldPerms, effectiveRoles) {
 			case "visibleTo":
 				readable = perm.roles?.some((r) => effectiveRoles.includes(r)) ?? false;
 				break;
-			case "writableBy":
-				writable = perm.roles?.some((r) => effectiveRoles.includes(r)) ?? false;
-				break;
+			case "writableBy": writable = perm.roles?.some((r) => effectiveRoles.includes(r)) ?? false;
 		}
 		caps[field] = {
 			readable,
@@ -172,8 +170,10 @@ function sendControllerResponse(reply, response, request) {
 	/** Apply both field mask and field-level permissions to a data item */
 	const applyPermissions = (data) => {
 		let result = fieldMaskConfig ? applyFieldMask(data, fieldMaskConfig) : data;
-		if (fieldPerms && result && typeof result === "object") if (Array.isArray(result)) result = result.map((item) => applyFieldReadPermissions(item, fieldPerms, effectiveRoles));
-		else result = applyFieldReadPermissions(result, fieldPerms, effectiveRoles);
+		if (fieldPerms && result && typeof result === "object") {
+			if (Array.isArray(result)) result = result.map((item) => applyFieldReadPermissions(item, fieldPerms, effectiveRoles));
+			else result = applyFieldReadPermissions(result, fieldPerms, effectiveRoles);
+		}
 		return result;
 	};
 	if (response.headers) for (const [key, value] of Object.entries(response.headers)) reply.header(key, value);
@@ -281,11 +281,12 @@ function resolvePipelineSteps(pipeline, operation) {
 */
 function buildPipelineHandler(controllerMethod, steps, operation, resourceName) {
 	return async (req, reply) => {
-		sendControllerResponse(reply, await executePipeline(steps, {
+		const pipeCtx = {
 			...createRequestContext(req),
 			resource: resourceName,
 			operation
-		}, (ctx) => controllerMethod(ctx), operation), req);
+		};
+		sendControllerResponse(reply, await executePipeline(steps, pipeCtx, (ctx) => controllerMethod(ctx), operation), req);
 	};
 }
 /**
@@ -310,11 +311,12 @@ function buildActionPipelineHandler(handler, steps, operation, resourceName) {
 		data: await handler(id, data, req)
 	});
 	return async (id, data, req) => {
-		return executePipeline(steps, {
+		const pipeCtx = {
 			...createRequestContext(req),
 			resource: resourceName,
 			operation
-		}, async (_ctx) => ({
+		};
+		return executePipeline(steps, pipeCtx, async (_ctx) => ({
 			status: 200,
 			data: await handler(id, data, req)
 		}), operation);

package/dist/plugins/index.d.mts

@@ -1,10 +1,10 @@
 
-import { At as RouteDefinition, J as PresetHook, Q as MiddlewareConfig, et as RouteSchemaOptions } from "../index-CpzxqePp.mjs";
-import { l as AnyRecord } from "../types-B7XeLEgK.mjs";
-import { i as errorHandlerPlugin, n as ErrorMapper, r as defaultIsDuplicateKeyError, t as ErrorHandlerOptions } from "../errorHandler-CpYUJmPA.mjs";
-import { _ as _default$3, d as ScheduleStats, f as SchedulesPluginOptions, g as HealthOptions, h as HealthCheck, m as schedulesPlugin, p as _default$7, u as ScheduleDefinition, v as healthPlugin } from "../types-CBgvkp8O.mjs";
-import { a as arcCorePlugin, i as _default, n as ArcCorePluginOptions, r as PluginMeta, t as ArcCore } from "../fastify-augmentation-zh0_AYHa.mjs";
-import { _ as CachingRule, a as MetricsCollector, c as metricsPlugin, d as _default$5, f as realtimePlugin, g as CachingOptions, h as ssePlugin, i as MetricEntry, l as ChangeOperation, m as _default$8, n as _default$9, o as MetricsOptions, p as SSEOptions, r as versioningPlugin, s as _default$4, t as VersioningOptions, u as RealtimeOptions, v as _default$1, y as cachingPlugin } from "../versioning-D_rhHfZm.mjs";
+import { t as AnyRecord } from "../base-Csjc2oF-.mjs";
+import { At as RouteDefinition, J as PresetHook, Q as MiddlewareConfig, et as RouteSchemaOptions } from "../index-BcR2bFZQ.mjs";
+import { i as errorHandlerPlugin, n as ErrorMapper, r as defaultIsDuplicateKeyError, t as ErrorHandlerOptions } from "../errorHandler-DI5AN2b5.mjs";
+import { _ as HealthCheck, b as healthPlugin, f as ScheduleDefinition, g as schedulesPlugin, h as _default$7, m as SchedulesPluginOptions, p as ScheduleStats, v as HealthOptions, y as _default$3 } from "../types-BcTumAz_.mjs";
+import { a as arcCorePlugin, i as _default, n as ArcCorePluginOptions, r as PluginMeta, t as ArcCore } from "../fastify-augmentation-DVsTAy6X.mjs";
+import { _ as CachingRule, a as MetricsCollector, c as metricsPlugin, d as _default$5, f as realtimePlugin, g as CachingOptions, h as ssePlugin, i as MetricEntry, l as ChangeOperation, m as _default$8, n as _default$9, o as MetricsOptions, p as SSEOptions, r as versioningPlugin, s as _default$4, t as VersioningOptions, u as RealtimeOptions, v as _default$1, y as cachingPlugin } from "../versioning-DEs-_hFi.mjs";
 import { t as TracingOptions } from "../tracing-Dro5eH6j.mjs";
 import { PaginatedResult } from "@classytic/repo-core/pagination";
 import { FastifyInstance, FastifyPluginAsync } from "fastify";

package/dist/plugins/index.mjs

@@ -1,19 +1,19 @@
-/*! @classytic/arc v2.31.0 | MIT | https://classytic.com */
-import { p as MUTATION_OPERATIONS } from "../constants-D3Dv4LAV.mjs";
-import { c as getOrgId } from "../types-Cys0ko9Z.mjs";
-import { n as requestContext } from "../requestContext-2TxXOJ7T.mjs";
-import { t as hasEvents } from "../typeGuards-B0ryPo3I.mjs";
-import { t as HookSystem } from "../HookSystem-BcmPyq5I.mjs";
-import { t as ResourceRegistry } from "../ResourceRegistry-qq0mn2s9.mjs";
-import { a as requestIdPlugin, i as createRequestIdGenerator, n as health_default, o as requestId_default, s as sanitizeRequestId, t as healthPlugin } from "../health-DjZYjM7H.mjs";
-import { n as caching_default, t as cachingPlugin } from "../caching-BFHA6Scf.mjs";
-import { n as errorHandlerPlugin, t as defaultIsDuplicateKeyError } from "../errorHandler-C5NeD6bT.mjs";
-import { n as metrics_default, t as metricsPlugin } from "../metrics-CUdw_wLB.mjs";
-import { n as realtime_default, t as realtimePlugin } from "../realtime-C5NoxWFY.mjs";
-import { t as replyHelpersPlugin } from "../replyHelpers-DIiZKGUt.mjs";
-import { n as schedules_default, t as schedulesPlugin } from "../schedules-DdtlICTf.mjs";
-import { n as sse_default, t as ssePlugin } from "../sse-CUTo9y0X.mjs";
-import { n as versioning_default, t as versioningPlugin } from "../versioning-CHDTor3P.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { p as MUTATION_OPERATIONS } from "../constants-BxCoxmiN.mjs";
+import { c as getOrgId } from "../types-CoqIRrkY.mjs";
+import { n as requestContext } from "../requestContext-uYE35JxI.mjs";
+import { t as hasEvents } from "../typeGuards-jjKJDN13.mjs";
+import { t as HookSystem } from "../HookSystem-DqXkMXkB.mjs";
+import { t as ResourceRegistry } from "../ResourceRegistry-DoALUlOO.mjs";
+import { a as requestIdPlugin, i as createRequestIdGenerator, n as health_default, o as requestId_default, s as sanitizeRequestId, t as healthPlugin } from "../health-CasG2A28.mjs";
+import { n as caching_default, t as cachingPlugin } from "../caching-BcGmvnHh.mjs";
+import { n as errorHandlerPlugin, t as defaultIsDuplicateKeyError } from "../errorHandler-C7xBqHsI.mjs";
+import { n as metrics_default, t as metricsPlugin } from "../metrics-D7uchLjN.mjs";
+import { n as realtime_default, t as realtimePlugin } from "../realtime-CTkv3O59.mjs";
+import { t as replyHelpersPlugin } from "../replyHelpers-BSBVCwL3.mjs";
+import { n as schedules_default, t as schedulesPlugin } from "../schedules-CAcZgia0.mjs";
+import { n as sse_default, t as ssePlugin } from "../sse-Cf0jUHsh.mjs";
+import { n as versioning_default, t as versioningPlugin } from "../versioning-rZbyLVD-.mjs";
 import fp from "fastify-plugin";
 //#region src/core/arcCorePlugin.ts
 const arcCorePlugin = async (fastify, opts = {}) => {

package/dist/plugins/response-cache.mjs

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.31.0 | MIT | https://classytic.com */
-import { t as hasEvents } from "../typeGuards-B0ryPo3I.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { t as hasEvents } from "../typeGuards-jjKJDN13.mjs";
 import fp from "fastify-plugin";
 //#region src/plugins/response-cache.ts
 /**

package/dist/plugins/tracing-entry.mjs

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.31.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
 import { createRequire } from "node:module";
 import fp from "fastify-plugin";
 //#region src/plugins/tracing.ts
@@ -59,7 +59,7 @@ try {
 function createTracerProvider(options) {
 	if (!isAvailable || !NodeTracerProvider || !BatchSpanProcessor || !OTLPTraceExporter) return null;
 	const { serviceName = "@classytic/arc", serviceVersion, exporterUrl = "http://localhost:4318/v1/traces" } = options;
-	const resolvedVersion = serviceVersion ?? "2.31.0";
+	const resolvedVersion = serviceVersion ?? "2.34.0";
 	const exporter = new OTLPTraceExporter({ url: exporterUrl });
 	const provider = new NodeTracerProvider({ resource: { attributes: {
 		"service.name": serviceName,

package/dist/{pluralize-O0FZgESl.mjs → pluralize-B7xf8qZF.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.31.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
 //#region src/utils/pluralize.ts
 /**
 * Lightweight English pluralization for the Arc CLI.

package/dist/{preloadResources-Dz6BjzM6.mjs → preloadResources-BkyqeTDz.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.31.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
 //#region src/factory/preloadResources.ts
 /**
 * Normalize an eager `import.meta.glob` result into a `ResourceLike[]`.

package/dist/{preloadResources-CyoJMSiO.d.mts → preloadResources-g07ldtzh.d.mts}

@@ -1,15 +1,15 @@
 
-import { Gt as Authenticator } from "./index-CpzxqePp.mjs";
+import { It as Authenticator } from "./index-BcR2bFZQ.mjs";
 import { r as CacheStore } from "./interface-BOk3YnTz.mjs";
 import { n as ElevationOptions } from "./elevation-BXCfVcNG.mjs";
-import { a as EventTransport } from "./EventTransport-2uVV34WU.mjs";
+import { a as EventTransport } from "./EventTransport-BEVP50ka.mjs";
 import { t as ExternalOpenApiPaths } from "./externalPaths-CmGOxOtD.mjs";
 import { r as QueryCachePluginOptions } from "./queryCachePlugin-BzqxconG.mjs";
-import { t as ErrorHandlerOptions } from "./errorHandler-CpYUJmPA.mjs";
-import { f as SchedulesPluginOptions, g as HealthOptions, n as ArcModuleInput, s as ResourceLike } from "./types-CBgvkp8O.mjs";
-import "./index-CFThn1K9.mjs";
-import { t as EventPluginOptions } from "./eventPlugin-GF5nnBIq.mjs";
-import { g as CachingOptions, o as MetricsOptions, p as SSEOptions, t as VersioningOptions, u as RealtimeOptions } from "./versioning-D_rhHfZm.mjs";
+import { t as ErrorHandlerOptions } from "./errorHandler-DI5AN2b5.mjs";
+import { l as ResourceLike, m as SchedulesPluginOptions, n as ArcModuleInput, v as HealthOptions } from "./types-BcTumAz_.mjs";
+import "./index-C5NnMEKF.mjs";
+import { t as EventPluginOptions } from "./eventPlugin-DSNEZWfV.mjs";
+import { g as CachingOptions, o as MetricsOptions, p as SSEOptions, t as VersioningOptions, u as RealtimeOptions } from "./versioning-DEs-_hFi.mjs";
 import { r as IdempotencyStore } from "./interface-DEWNOMza.mjs";
 import { FastifyInstance, FastifyPluginAsync, FastifyReply, FastifyRequest, FastifyServerOptions } from "fastify";
 //#region src/factory/types/assets.d.ts
@@ -463,6 +463,29 @@ interface CreateAppOptions {
    *   would be instance-local.
    */
   runtime?: "memory" | "distributed";
+  /**
+   * Deployment ROLE of this process (topology plan, Phase 2). Decides which
+   * async machinery mounts; default `'all'` is the single-process case and
+   * changes nothing.
+   *
+   * - `'api'` / `'worker'` — no module schedule arms run here (the outbox
+   *   relay arm included); a worker fleet or scheduler deployment owns them.
+   *   Register `jobsPlugin({ mode })` to match ('api' → 'producer').
+   * - `'relay'` — ONLY `kind: 'relay'` schedule arms run (the outbox
+   *   relays); declaring HTTP `resources` is boot-fatal.
+   * - `'scheduler'` — every schedule arm runs; HTTP resources boot-fatal.
+   * - `'all'` — everything (default).
+   *
+   * A skipped arm is logged by name at boot so a misdeployed process is
+   * legible from its first lines.
+   *
+   * `createWorker` is the paved road for headless processes and forwards
+   * this option untouched — one axis, not two mechanisms. Its default stays
+   * `'all'` (its 2.23 contract: the headless process runs everything
+   * non-HTTP); pass `role: 'worker'` there when a dedicated scheduler/relay
+   * deployment owns the arms.
+   */
+  role?: "api" | "worker" | "relay" | "scheduler" | "all";
   /**
    * Store and transport instances for runtime profile validation.
    * When `runtime` is `'distributed'`, Arc validates that these are

package/dist/presets/filesUpload.d.mts

@@ -1,7 +1,7 @@
 
-import { Y as PresetResult } from "../index-CpzxqePp.mjs";
 import { i as RequestScope } from "../types-ChuShpCP.mjs";
-import { r as PermissionCheck } from "../types-B7XeLEgK.mjs";
+import { l as PermissionCheck } from "../base-Csjc2oF-.mjs";
+import { Y as PresetResult } from "../index-BcR2bFZQ.mjs";
 import { a as StorageReadResult, i as StorageReadRange, n as StorageContext, o as StorageUploadInput, r as StorageFile, t as Storage } from "../storage-Cx9Sz3Ou.mjs";
 //#region src/presets/filesUpload.d.ts
 interface FilesUploadPresetRoutes {

package/dist/presets/filesUpload.mjs

@@ -1,11 +1,11 @@
-/*! @classytic/arc v2.31.0 | MIT | https://classytic.com */
-import { i as NotFoundError, u as ValidationError } from "../errors-Cj42AntO.mjs";
-import { c as getOrgId, g as getUserId } from "../types-Cys0ko9Z.mjs";
-import { I as requireAuth, j as allowPublic } from "../permissions-L--QDAir.mjs";
-import { t as multipartBody } from "../multipartBody-wOgj_fnj.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { i as NotFoundError, u as ValidationError } from "../errors-Cd_yy7aW.mjs";
+import { c as getOrgId, g as getUserId } from "../types-CoqIRrkY.mjs";
+import { B as requireAuth, F as allowPublic } from "../permissions-BAfwgBxc.mjs";
+import { t as multipartBody } from "../multipartBody-4w-S3-PU.mjs";
 //#region src/presets/filesUpload.ts
 const DEFAULT_FIELD_NAME = "file";
-const DEFAULT_MAX_FILE_SIZE = 10 * 1024 * 1024;
+const DEFAULT_MAX_FILE_SIZE = 10485760;
 function defaultContextFrom(scope) {
 	if (!scope) return {};
 	const userId = getUserId(scope);

package/dist/presets/index.d.mts

@@ -1,6 +1,6 @@
 
-import { Rt as IControllerResponse, U as ResourceConfig, Y as PresetResult, d as PaginationResult, zt as IRequestContext } from "../index-CpzxqePp.mjs";
-import { l as AnyRecord } from "../types-B7XeLEgK.mjs";
+import { t as AnyRecord } from "../base-Csjc2oF-.mjs";
+import { Fn as IControllerResponse, In as IRequestContext, U as ResourceConfig, Y as PresetResult, d as PaginationResult } from "../index-BcR2bFZQ.mjs";
 import { FilesUploadPresetOptions, FilesUploadPresetPermissions, FilesUploadPresetRoutes, filesUploadPreset } from "./filesUpload.mjs";
 import { MultiTenantOptions, TenantFieldSpec, multiTenantPreset } from "./multiTenant.mjs";
 import { SearchHandler, SearchPresetOptions, SearchRouteConfig, searchPreset } from "./search.mjs";

package/dist/presets/index.mjs

@@ -1,6 +1,6 @@
-/*! @classytic/arc v2.31.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
 import { multiTenantPreset } from "./multiTenant.mjs";
-import { a as registerPreset, c as auditedPreset, d as ownedByUserPreset, i as getPreset, l as softDeletePreset, n as flexibleMultiTenantPreset, o as treePreset, r as getAvailablePresets, s as bulkPreset, t as applyPresets, u as slugLookupPreset } from "../presets-C4-g4_4P.mjs";
+import { a as registerPreset, c as auditedPreset, d as ownedByUserPreset, i as getPreset, l as softDeletePreset, n as flexibleMultiTenantPreset, o as treePreset, r as getAvailablePresets, s as bulkPreset, t as applyPresets, u as slugLookupPreset } from "../presets-D-h0uWtP.mjs";
 import { filesUploadPreset } from "./filesUpload.mjs";
 import { searchPreset } from "./search.mjs";
 export { applyPresets, auditedPreset, bulkPreset, filesUploadPreset, flexibleMultiTenantPreset, getAvailablePresets, getPreset, multiTenantPreset, ownedByUserPreset, registerPreset, searchPreset, slugLookupPreset, softDeletePreset, treePreset };

package/dist/presets/multiTenant.d.mts

@@ -1,5 +1,5 @@
 
-import { X as CrudRouteKey, Y as PresetResult } from "../index-CpzxqePp.mjs";
+import { X as CrudRouteKey, Y as PresetResult } from "../index-BcR2bFZQ.mjs";
 //#region src/presets/multiTenant.d.ts
 /**
  * One tenant dimension for multi-field filtering. Discriminated by source:

package/dist/presets/multiTenant.mjs

@@ -1,6 +1,6 @@
-/*! @classytic/arc v2.31.0 | MIT | https://classytic.com */
-import "../constants-D3Dv4LAV.mjs";
-import { b as isElevated, c as getOrgId, d as getScopeContext, m as getTeamId, u as getRequestScope, v as hasOrgAccess } from "../types-Cys0ko9Z.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import "../constants-BxCoxmiN.mjs";
+import { b as isElevated, c as getOrgId, d as getScopeContext, m as getTeamId, u as getRequestScope, v as hasOrgAccess } from "../types-CoqIRrkY.mjs";
 //#region src/presets/multiTenant.ts
 /**
 * Resolve a single TenantFieldSpec against the current scope.

package/dist/presets/search.d.mts

@@ -1,6 +1,6 @@
 
-import { At as RouteDefinition, Pt as ControllerHandler, Y as PresetResult, jt as RouteMcpConfig } from "../index-CpzxqePp.mjs";
-import { r as PermissionCheck } from "../types-B7XeLEgK.mjs";
+import { l as PermissionCheck } from "../base-Csjc2oF-.mjs";
+import { At as RouteDefinition, Y as PresetResult, jn as ControllerHandler, jt as RouteMcpConfig } from "../index-BcR2bFZQ.mjs";
 //#region src/presets/search.d.ts
 /**
  * Search Preset — backend-agnostic search / vector / embed routes

package/dist/presets/search.mjs

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.31.0 | MIT | https://classytic.com */
-import { I as requireAuth, j as allowPublic } from "../permissions-L--QDAir.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { B as requireAuth, F as allowPublic } from "../permissions-BAfwgBxc.mjs";
 //#region src/presets/search.ts
 const BUILTINS = [
 	{

package/dist/{presets-C4-g4_4P.mjs → presets-D-h0uWtP.mjs}

@@ -1,7 +1,7 @@
-/*! @classytic/arc v2.31.0 | MIT | https://classytic.com */
-import { l as UnauthorizedError } from "./errors-Cj42AntO.mjs";
-import { b as isElevated, n as PUBLIC_SCOPE } from "./types-Cys0ko9Z.mjs";
-import { I as requireAuth, j as allowPublic, z as requireRoles } from "./permissions-L--QDAir.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { l as UnauthorizedError } from "./errors-Cd_yy7aW.mjs";
+import { b as isElevated, n as PUBLIC_SCOPE } from "./types-CoqIRrkY.mjs";
+import { B as requireAuth, F as allowPublic, U as requireRoles } from "./permissions-BAfwgBxc.mjs";
 import { multiTenantPreset } from "./presets/multiTenant.mjs";
 //#region src/presets/ownedByUser.ts
 /**
@@ -14,7 +14,8 @@ import { multiTenantPreset } from "./presets/multiTenant.mjs";
 */
 function createOwnershipCheck(ownerField, missingOwner) {
 	return async (request, _reply) => {
-		if (isElevated(request.scope ?? PUBLIC_SCOPE)) return;
+		const scope = request.scope ?? PUBLIC_SCOPE;
+		if (isElevated(scope)) return;
 		const user = request.user;
 		if (!user) throw new UnauthorizedError("Authentication required for this operation");
 		const userWithId = user;

package/dist/projection-BKM0Ui-s.mjs

@@ -0,0 +1,42 @@
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { c as getOrgId, f as getScopeContextMap, g as getUserId, m as getTeamId, x as isMember } from "./types-CoqIRrkY.mjs";
+//#region src/scope/projection.ts
+/**
+* Compute the request-scope projection. Returns `undefined` when no
+* scope is attached (public / unscoped routes) so hosts can idiomatically
+* write `ctx.scope?.organizationId` without a double-null check.
+*/
+function buildRequestScopeProjection(scope) {
+	if (!scope) return void 0;
+	return {
+		organizationId: getOrgId(scope),
+		userId: getUserId(scope),
+		orgRoles: isMember(scope) ? scope.orgRoles : void 0,
+		teamId: getTeamId(scope),
+		context: freezeContext(getScopeContextMap(scope))
+	};
+}
+/**
+* Hand out a FROZEN COPY of the scope's context, never the live map.
+*
+* `Readonly<Record<string, string>>` is erased at runtime, so the annotation
+* alone protected nothing: `getScopeContextMap` returns the scope's own
+* object, and a hook doing `ctx.scope.context.branchId = 'other'` mutated the
+* caller's REAL scope. That matters because `requireScopeContext()` authorises
+* against exactly these values — a later permission check in the same request
+* would read the tampered dimension and allow what it should refuse.
+*
+* A copy rather than freezing in place: the map belongs to whoever built the
+* scope (a host auth function), and freezing someone else's object as a side
+* effect of reading it is a surprise a library should not spring. Copying also
+* makes the guarantee deterministic instead of "frozen once something happens
+* to call the accessor".
+*
+* ESM is always strict mode, so a write to the frozen copy THROWS rather than
+* failing silently — the mistake surfaces where it is made.
+*/
+function freezeContext(ctx) {
+	return ctx === void 0 ? void 0 : Object.freeze({ ...ctx });
+}
+//#endregion
+export { buildRequestScopeProjection as t };

package/dist/{queryCachePlugin-BZr8v46E.mjs → queryCachePlugin-DhsZ0ZIc.mjs}

@@ -1,8 +1,8 @@
-/*! @classytic/arc v2.31.0 | MIT | https://classytic.com */
-import { t as __exportAll } from "./rolldown-runtime-CUsjNX9R.mjs";
-import { t as hasEvents } from "./typeGuards-B0ryPo3I.mjs";
-import { i as versionKey, r as tagVersionKey } from "./keys-C0_pa1tY.mjs";
-import { t as MemoryCacheStore } from "./memory-DR6wpa9F.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { t as __exportAll } from "./rolldown-runtime-DNg-KNCk.mjs";
+import { t as hasEvents } from "./typeGuards-jjKJDN13.mjs";
+import { i as versionKey, r as tagVersionKey } from "./keys-WeKvY1dE.mjs";
+import { t as MemoryCacheStore } from "./memory-qYSB7rMQ.mjs";
 import fp from "fastify-plugin";
 //#region src/cache/QueryCache.ts
 var QueryCache = class {
@@ -100,7 +100,7 @@ var QueryCache = class {
 	}
 };
 /** See `bumpVersion` — effectively non-expiring, refreshed on every bump. */
-const VERSION_TTL_SECONDS = 365 * 24 * 60 * 60;
+const VERSION_TTL_SECONDS = 31536e3;
 //#endregion
 //#region src/cache/queryCachePlugin.ts
 var queryCachePlugin_exports = /* @__PURE__ */ __exportAll({ queryCachePlugin: () => queryCachePlugin });
@@ -110,6 +110,7 @@ const CRUD_SUFFIXES = /* @__PURE__ */ new Set([
 	"deleted"
 ]);
 const queryCachePluginImpl = async (fastify, opts = {}) => {
+	const ownsStore = opts.store === void 0;
 	const store = opts.store ?? new MemoryCacheStore();
 	const queryCache = new QueryCache(store);
 	const defaults = {
@@ -124,20 +125,61 @@ const queryCachePluginImpl = async (fastify, opts = {}) => {
 	});
 	fastify.addHook("onReady", async () => {
 		if (!hasEvents(fastify)) return;
+		/**
+		* Auto-invalidate on CRUD events — `product.created` bumps `product`, and
+		* `catalog:category.created` bumps BOTH `catalog:category` and `category`.
+		*
+		* ## Why the namespace has to be stripped
+		*
+		* This derived the resource as "everything before the last dot", which is right for
+		* an arc-native event (`product.created`) and wrong for every NAMESPACED one. Each
+		* `@classytic/*` kernel publishes `<domain>:<entity>.<verb>` —
+		* `catalog:category.created`, `revenue:payment.verified`,
+		* `access:entitlement.granted` — so the resource came out as `catalog:category` and
+		* the version bumped at `arc:ver:catalog:category`.
+		*
+		* Readers use the arc RESOURCE NAME: `buildQueryKey(resource, …)` folds in
+		* `getResourceVersion("category")`, i.e. `arc:ver:category`. Bump and read
+		* therefore used different keys and **auto-invalidation never fired for any
+		* kernel-backed resource** — no error, no warning, just caches serving stale data
+		* for a full `staleTime`. It was invisible precisely because the feature looks
+		* wired: the plugin is registered, events flow, a version does get bumped.
+		*
+		* ## Both names are bumped, on purpose
+		*
+		* Two namespaces could each own an `<entity>` of the same name (`catalog:category`
+		* and a hypothetical `cms:category`), so stripping is ambiguous. The asymmetry
+		* decides it: **over-invalidation costs a cache miss, under-invalidation serves
+		* wrong data.** Bumping both the qualified and the bare name means an unrelated
+		* namespace can at worst force an extra reload, and never a stale read. That is the
+		* same reasoning applied everywhere else here — a permissive default is only
+		* acceptable when the failure it causes is loud and cheap.
+		*
+		* By the same argument the split is UNCONDITIONAL: any `:` in the qualified
+		* name yields a bare candidate, including when the prefix itself contains a
+		* dot (`some.thing:entity` bumps `entity` too). Narrowing that would remove
+		* invalidations, which is the one direction that can serve wrong data.
+		*/
 		await fastify.events.subscribe("*", async (event) => {
 			const type = event.type;
 			const dotIdx = type.lastIndexOf(".");
 			if (dotIdx === -1) return;
 			const suffix = type.slice(dotIdx + 1);
 			if (!CRUD_SUFFIXES.has(suffix)) return;
-			const resource = type.slice(0, dotIdx);
-			await queryCache.bumpResourceVersion(resource);
+			const qualified = type.slice(0, dotIdx);
+			await queryCache.bumpResourceVersion(qualified);
+			const colonIdx = qualified.lastIndexOf(":");
+			if (colonIdx === -1) return;
+			const bare = qualified.slice(colonIdx + 1);
+			if (bare.length === 0 || bare === qualified) return;
+			await queryCache.bumpResourceVersion(bare);
 		});
 		for (const rule of crossResourceRules) await fastify.events.subscribe(rule.pattern, async () => {
 			for (const tag of rule.tags) await queryCache.bumpTagVersion(tag);
 		});
 	});
 	fastify.addHook("onClose", async () => {
+		if (!ownsStore) return;
 		if ("close" in store && typeof store.close === "function") await store.close();
 	});
 };

package/dist/{rateLimit-CMPY5Qms.mjs → rateLimit-D4-ASwsI.mjs}

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.31.0 | MIT | https://classytic.com */
-import { n as requestContext } from "./requestContext-2TxXOJ7T.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { n as requestContext } from "./requestContext-uYE35JxI.mjs";
 //#region src/core/middlewares/arcDecorator.ts
 /**
 * Build the `arcDecorator` preHandler for a resource.

package/dist/{rateLimitKey-Dn5JNmkj.mjs → rateLimitKey-XngqVNEV.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.31.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
 //#region src/scope/rateLimitKey.ts
 function createTenantKeyGenerator(opts) {
 	if (opts?.strategy) return opts.strategy;

package/dist/{realtime-C5NoxWFY.mjs → realtime-CTkv3O59.mjs}

@@ -1,13 +1,13 @@
-/*! @classytic/arc v2.31.0 | MIT | https://classytic.com */
-import { t as __exportAll } from "./rolldown-runtime-CUsjNX9R.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { t as __exportAll } from "./rolldown-runtime-DNg-KNCk.mjs";
 import { arcLog } from "./logger/index.mjs";
-import { n as evaluateAndApplyPermission } from "./authorizationDecision-ChvUQGG1.mjs";
-import { n as getUserRoles } from "./userHelpers-ChYJ6CdK.mjs";
-import { c as getOrgId } from "./types-Cys0ko9Z.mjs";
-import { t as simpleEqualityMatcher } from "./simpleEqualityMatcher-DjQJ7FKA.mjs";
-import { t as applyFieldReadPermissions } from "./fields-CB5Cuzk9.mjs";
-import { a as promoteStreamTokenToHeader } from "./streaming-PSZwi8JV.mjs";
-import { t as openSseStream } from "./sseStream-B_5XcVVd.mjs";
+import { n as evaluateAndApplyPermission } from "./authorizationDecision-B3mP_QTy.mjs";
+import { n as getUserRoles } from "./userHelpers-CWF5pbZD.mjs";
+import { c as getOrgId } from "./types-CoqIRrkY.mjs";
+import { t as simpleEqualityMatcher } from "./simpleEqualityMatcher-Se8VrsaP.mjs";
+import { t as applyFieldReadPermissions } from "./fields-CojeUkS4.mjs";
+import { a as promoteStreamTokenToHeader } from "./streaming-DsT1B5zJ.mjs";
+import { t as openSseStream } from "./sseStream-Bvpi-UXQ.mjs";
 import fp from "fastify-plugin";
 //#region src/plugins/realtime.ts
 var realtime_exports = /* @__PURE__ */ __exportAll({
@@ -47,7 +47,7 @@ const MAX_TIMER_MS = 2147483647;
 * churning connections. A host that truly wants a longer-lived feed sets
 * `maxConnectionMs` explicitly (up to `MAX_TIMER_MS`).
 */
-const DEFAULT_MAX_CONNECTION_MS = 30 * 6e4;
+const DEFAULT_MAX_CONNECTION_MS = 18e5;
 /**
 * Milliseconds from `now` until the feed should force-close to bound
 * permission staleness — `min(auth-token exp, maxConnectionMs)`. Returns

package/dist/{redis-stream-qN6A-RFv.d.mts → redis-stream-mwLWlfHG.d.mts}

@@ -1,5 +1,5 @@
 
-import { a as EventTransport, i as EventLogger, n as DomainEvent, r as EventHandler } from "./EventTransport-2uVV34WU.mjs";
+import { a as EventTransport, i as EventLogger, n as DomainEvent, r as EventHandler } from "./EventTransport-BEVP50ka.mjs";
 //#region src/events/transports/redis-stream.d.ts
 interface RedisStreamLike {
   xadd(key: string, id: string, ...fieldValues: string[]): Promise<string | null>;

package/dist/{registerRoute-CBN84fc7.mjs → registerRoute-DNnd3vkz.mjs}

@@ -1,7 +1,7 @@
-/*! @classytic/arc v2.31.0 | MIT | https://classytic.com */
-import { n as evaluateAndApplyPermission } from "./authorizationDecision-ChvUQGG1.mjs";
-import { f as createError } from "./errors-Cj42AntO.mjs";
-import { u as getRequestScope } from "./types-Cys0ko9Z.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { n as evaluateAndApplyPermission } from "./authorizationDecision-B3mP_QTy.mjs";
+import { f as createError } from "./errors-Cd_yy7aW.mjs";
+import { u as getRequestScope } from "./types-CoqIRrkY.mjs";
 //#region src/core/middlewares/permissions.ts
 /**
 * Build a PermissionContext from a Fastify request. Extracted so the CRUD
@@ -32,10 +32,11 @@ function buildPermissionContext(req, opts) {
 function buildCrudPermissionMw(permissionCheck, resourceName, action) {
 	if (!permissionCheck) return null;
 	return async (req, reply) => {
-		await evaluateAndApplyPermission(permissionCheck, buildPermissionContext(req, {
+		const context = buildPermissionContext(req, {
 			resource: resourceName,
 			action
-		}), req, reply);
+		});
+		await evaluateAndApplyPermission(permissionCheck, context, req, reply);
 	};
 }
 /**
@@ -64,12 +65,13 @@ function buildActionPermissionMw(actionEnum, actionPermissions, globalAuth, reso
 		if (!permissionCheck) return;
 		const { action: _discard, ...data } = body;
 		const params = req.params;
-		await evaluateAndApplyPermission(permissionCheck, buildPermissionContext(req, {
+		const context = buildPermissionContext(req, {
 			resource: resourceName,
 			action,
 			resourceId: params?.id,
 			data
-		}), req, reply, { defaultDenialMessage: (user) => user ? `Permission denied for '${action}'` : "Authentication required" });
+		});
+		await evaluateAndApplyPermission(permissionCheck, context, req, reply, { defaultDenialMessage: (user) => user ? `Permission denied for '${action}'` : "Authentication required" });
 	};
 }
 //#endregion

package/dist/registry/index.d.mts

@@ -1,8 +1,8 @@
 
-import { K as ResolvedTenantPurge, R as RegisterOptions, V as ResourceDefinition, X as CrudRouteKey, k as IntrospectionPluginOptions, p as RegistryEntry, z as ResourceRegistry } from "../index-CpzxqePp.mjs";
-import "../fastify-augmentation-zh0_AYHa.mjs";
-import { FastifyPluginAsync } from "fastify";
+import { K as ResolvedTenantPurge, R as RegisterOptions, V as ResourceDefinition, X as CrudRouteKey, k as IntrospectionPluginOptions, p as RegistryEntry, z as ResourceRegistry } from "../index-BcR2bFZQ.mjs";
+import "../fastify-augmentation-DVsTAy6X.mjs";
 import { TenantPurgeProgress, TenantPurgeStrategy } from "@classytic/repo-core/repository";
+import { FastifyPluginAsync } from "fastify";
 //#region src/registry/assertNoTenantData.d.ts
 interface AssertNoTenantDataOptions {
   readonly organizationId: string;

package/dist/registry/index.mjs

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.31.0 | MIT | https://classytic.com */
-import { a as cascadeDeleteForOrganization, c as assertNoTenantData, i as introspectionPlugin_default, n as buildResourceManifestFromRegistry, o as getCascadingResources, r as introspectionPlugin, s as getCascadingResourcesWithMetadata, t as buildResourceManifest } from "../registry-4213U4zb.mjs";
-import { t as ResourceRegistry } from "../ResourceRegistry-qq0mn2s9.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { a as cascadeDeleteForOrganization, c as assertNoTenantData, i as introspectionPlugin_default, n as buildResourceManifestFromRegistry, o as getCascadingResources, r as introspectionPlugin, s as getCascadingResourcesWithMetadata, t as buildResourceManifest } from "../registry-CLxCR5LF.mjs";
+import { t as ResourceRegistry } from "../ResourceRegistry-DoALUlOO.mjs";
 export { ResourceRegistry, assertNoTenantData, buildResourceManifest, buildResourceManifestFromRegistry, cascadeDeleteForOrganization, getCascadingResources, getCascadingResourcesWithMetadata, introspectionPlugin_default as introspectionPlugin, introspectionPlugin as introspectionPluginFn };

package/dist/{registry-4213U4zb.mjs → registry-CLxCR5LF.mjs}

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.31.0 | MIT | https://classytic.com */
-import { t as CRUD_OPERATIONS } from "./constants-D3Dv4LAV.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { t as CRUD_OPERATIONS } from "./constants-BxCoxmiN.mjs";
 import fp from "fastify-plugin";
 //#region src/registry/assertNoTenantData.ts
 /**

package/dist/{renewingLease-Dll8mGgc.mjs → renewingLease-BnWtbA2U.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.31.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
 //#region src/lock/renewingLease.ts
 /**
 * Start renewing an ALREADY-ACQUIRED lease. The caller performed the