@classytic/arc 2.31.0 → 2.33.0

package/dist/{replyHelpers-DIiZKGUt.mjs → replyHelpers-BSBVCwL3.mjs}

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.31.0 | MIT | https://classytic.com */
-import { t as __exportAll } from "./rolldown-runtime-CUsjNX9R.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { t as __exportAll } from "./rolldown-runtime-DNg-KNCk.mjs";
 import { toCanonicalList } from "@classytic/repo-core/pagination";
 import fp from "fastify-plugin";
 //#region src/plugins/replyHelpers.ts

package/dist/{repositoryFilter-f9eAfq_l.mjs → repositoryFilter-DKny7PDn.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.31.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
 import { arcLog } from "./logger/index.mjs";
 import { policyRecordToFilter } from "@classytic/repo-core/filter";
 //#region src/core/repositoryFilter.ts

package/dist/{requestContext-2TxXOJ7T.mjs → requestContext-uYE35JxI.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.31.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
 import { AsyncLocalStorage } from "node:async_hooks";
 //#region src/context/requestContext.ts
 /**

package/dist/{rolldown-runtime-CUsjNX9R.mjs → rolldown-runtime-DNg-KNCk.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.31.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
 import "node:module";
 //#region \0rolldown/runtime.js
 var __defProp = Object.defineProperty;

package/dist/runtimeCapabilities-Dm88DaTW.mjs

@@ -0,0 +1,49 @@
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+//#region src/utils/runtimeCapabilities.ts
+/**
+* `Symbol.for` so declarations from two arc copies in one dependency graph
+* land in ONE registry — same reasoning as `ARC_EVENT_TRANSPORT`. Not on the
+* public `fastify.arc` surface; the audit result is the product, not the list.
+*/
+const ARC_RUNTIME_CAPABILITIES = Symbol.for("arc.runtimeCapabilities");
+function registryOf(fastify) {
+	const holder = fastify;
+	if (!holder[ARC_RUNTIME_CAPABILITIES]) holder[ARC_RUNTIME_CAPABILITIES] = [];
+	return holder[ARC_RUNTIME_CAPABILITIES];
+}
+/**
+* Declare a runtime capability. Callable from ANY registration context —
+* arc's own plugins, host `plugins()` callbacks, module `plugins` phases —
+* which is the point: the audit sees what the constructor-time guard cannot.
+*/
+function declareRuntimeCapability(fastify, decl) {
+	registryOf(fastify).push(decl);
+}
+/**
+* The boot audit. Runs once at the end of `buildApp`, after every declarant.
+*
+* - `runtime: 'distributed'` + `durability: 'memory'` + not `accepted` →
+*   collected and THROWN as one error naming every violator (fixing them one
+*   boot at a time is the checklist experience this replaces).
+* - accepted memory declarations → one info line, so the topology decision is
+*   visible in the boot log it was made for.
+* - non-distributed runtimes → nothing to enforce; declarations still logged
+*   at debug for `arc doctor`-style tooling.
+*/
+function auditRuntimeCapabilities(fastify, runtime) {
+	const declarations = registryOf(fastify);
+	if (declarations.length === 0) return;
+	if (runtime !== "distributed") {
+		fastify.log.debug({ capabilities: declarations }, "[arc] runtime capabilities declared (no distributed profile — informational)");
+		return;
+	}
+	const violations = declarations.filter((d) => d.durability === "memory" && !d.accepted);
+	const acceptedMemory = declarations.filter((d) => d.durability === "memory" && d.accepted);
+	if (acceptedMemory.length > 0) fastify.log.info({ accepted: acceptedMemory.map((d) => d.subsystem) }, "[arc] per-process state accepted by design under runtime: 'distributed'");
+	if (violations.length > 0) {
+		const lines = violations.map((d) => `  - ${d.subsystem}${d.detail ? ` — ${d.detail}` : ""}`).join("\n");
+		throw new Error(`runtime: 'distributed' — ${violations.length} subsystem(s) hold PER-PROCESS state that multi-replica deployment breaks:\n${lines}\nWire a shared store for each, or — where per-process is genuinely intended — have the declarant pass \`accepted: true\` with a reason.`);
+	}
+}
+//#endregion
+export { declareRuntimeCapability as n, auditRuntimeCapabilities as t };

package/dist/{schedules-DdtlICTf.mjs → schedules-CAcZgia0.mjs}

@@ -1,6 +1,6 @@
-/*! @classytic/arc v2.31.0 | MIT | https://classytic.com */
-import { t as __exportAll } from "./rolldown-runtime-CUsjNX9R.mjs";
-import { t as startRenewingLease } from "./renewingLease-Dll8mGgc.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { t as __exportAll } from "./rolldown-runtime-DNg-KNCk.mjs";
+import { t as startRenewingLease } from "./renewingLease-BnWtbA2U.mjs";
 import fp from "fastify-plugin";
 //#region src/plugins/schedules.ts
 var schedules_exports = /* @__PURE__ */ __exportAll({

package/dist/{schemaConverter-D--wdJM-.mjs → schemaConverter-XH1RZRyu.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.31.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
 import { arcLog } from "./logger/index.mjs";
 //#region src/utils/schemaConverter.ts
 /**

package/dist/{schemaIR-Bm2enbnh.mjs → schemaIR-CDvclAew.mjs}

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.31.0 | MIT | https://classytic.com */
-import { o as toJsonSchema } from "./schemaConverter-D--wdJM-.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { o as toJsonSchema } from "./schemaConverter-XH1RZRyu.mjs";
 //#region src/core/schemaIR.ts
 /**
 * Schema IR — one canonical representation, two adapters.

package/dist/schemas/index.mjs

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.31.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
 import { errorContractSchema, errorDetailSchema } from "@classytic/repo-core/errors";
 import { Type, Type as Type$1 } from "typebox";
 //#region src/schemas/index.ts

package/dist/scim/index.mjs

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.31.0 | MIT | https://classytic.com */
-import { t as parseJsonBody } from "../jsonBody-BYbLDi5D.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { t as parseJsonBody } from "../jsonBody-CfGH-GxO.mjs";
 import fp from "fastify-plugin";
 //#region src/scim/errors.ts
 var ScimError = class extends Error {

package/dist/scope/index.mjs

@@ -1,6 +1,6 @@
-/*! @classytic/arc v2.31.0 | MIT | https://classytic.com */
-import { C as isService, D as requireUserId, E as requireTeamId, O as scopeFirstCtx, S as isOrgInScope, T as requireOrgId, _ as getUserRoles, a as getDPoPJkt, b as isElevated, c as getOrgId, d as getScopeContext, f as getScopeContextMap, g as getUserId, h as getTenantFromRequest, i as getClientId, l as getOrgRoles, m as getTeamId, n as PUBLIC_SCOPE, o as getMandate, p as getServiceScopes, r as getAncestorOrgIds, s as getOrgContext, t as AUTHENTICATED_SCOPE, u as getRequestScope, v as hasOrgAccess, w as requireClientId, x as isMember, y as isAuthenticated } from "../types-Cys0ko9Z.mjs";
-import { n as elevation_default, t as elevationPlugin } from "../elevation-D2l1mh4g.mjs";
-import { t as createTenantKeyGenerator } from "../rateLimitKey-Dn5JNmkj.mjs";
-import { t as resolveOrgFromHeader } from "../scope-DHx5Fous.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { C as isService, D as requireUserId, E as requireTeamId, O as scopeFirstCtx, S as isOrgInScope, T as requireOrgId, _ as getUserRoles, a as getDPoPJkt, b as isElevated, c as getOrgId, d as getScopeContext, f as getScopeContextMap, g as getUserId, h as getTenantFromRequest, i as getClientId, l as getOrgRoles, m as getTeamId, n as PUBLIC_SCOPE, o as getMandate, p as getServiceScopes, r as getAncestorOrgIds, s as getOrgContext, t as AUTHENTICATED_SCOPE, u as getRequestScope, v as hasOrgAccess, w as requireClientId, x as isMember, y as isAuthenticated } from "../types-CoqIRrkY.mjs";
+import { n as elevation_default, t as elevationPlugin } from "../elevation-B0tlY8y1.mjs";
+import { t as createTenantKeyGenerator } from "../rateLimitKey-XngqVNEV.mjs";
+import { t as resolveOrgFromHeader } from "../scope-BaWcqBvr.mjs";
 export { AUTHENTICATED_SCOPE, PUBLIC_SCOPE, createTenantKeyGenerator, elevation_default as elevationPlugin, elevationPlugin as elevationPluginFn, getAncestorOrgIds, getClientId, getDPoPJkt, getMandate, getOrgContext, getOrgId, getOrgRoles, getRequestScope, getScopeContext, getScopeContextMap, getServiceScopes, getTeamId, getTenantFromRequest, getUserId, getUserRoles, hasOrgAccess, isAuthenticated, isElevated, isMember, isOrgInScope, isService, requireClientId, requireOrgId, requireTeamId, requireUserId, resolveOrgFromHeader, scopeFirstCtx };

package/dist/{scope-DHx5Fous.mjs → scope-BaWcqBvr.mjs}

@@ -1,7 +1,7 @@
-/*! @classytic/arc v2.31.0 | MIT | https://classytic.com */
-import { a as OrgAccessDeniedError, l as UnauthorizedError } from "./errors-Cj42AntO.mjs";
-import { n as requireSingleHeaderValue } from "./headers-3zvE0rM3.mjs";
-import { n as getUserRoles } from "./userHelpers-ChYJ6CdK.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { a as OrgAccessDeniedError, l as UnauthorizedError } from "./errors-Cd_yy7aW.mjs";
+import { n as requireSingleHeaderValue } from "./headers-CveNO9gR.mjs";
+import { n as getUserRoles } from "./userHelpers-CWF5pbZD.mjs";
 //#region src/scope/resolveOrgFromHeader.ts
 /**
 * Create a preHandler hook that resolves org scope from a header.

package/dist/{simpleEqualityMatcher-DjQJ7FKA.mjs → simpleEqualityMatcher-Se8VrsaP.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.31.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
 //#region src/utils/simpleEqualityMatcher.ts
 /**
 * `simpleEqualityMatcher` — a minimal, dialect-agnostic flat-key equality

package/dist/{sse-CUTo9y0X.mjs → sse-Cf0jUHsh.mjs}

@@ -1,9 +1,9 @@
-/*! @classytic/arc v2.31.0 | MIT | https://classytic.com */
-import { t as __exportAll } from "./rolldown-runtime-CUsjNX9R.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { t as __exportAll } from "./rolldown-runtime-DNg-KNCk.mjs";
 import { arcLog } from "./logger/index.mjs";
-import { c as getOrgId, n as PUBLIC_SCOPE } from "./types-Cys0ko9Z.mjs";
-import { a as promoteStreamTokenToHeader } from "./streaming-PSZwi8JV.mjs";
-import { t as openSseStream } from "./sseStream-B_5XcVVd.mjs";
+import { c as getOrgId, n as PUBLIC_SCOPE } from "./types-CoqIRrkY.mjs";
+import { a as promoteStreamTokenToHeader } from "./streaming-DsT1B5zJ.mjs";
+import { t as openSseStream } from "./sseStream-Bvpi-UXQ.mjs";
 import fp from "fastify-plugin";
 //#region src/plugins/sse.ts
 var sse_exports = /* @__PURE__ */ __exportAll({
@@ -33,7 +33,8 @@ const ssePlugin = async (fastify, opts = {}) => {
 		handler: async (request, reply) => {
 			const stream = openSseStream(request, reply, { heartbeatMs: heartbeat });
 			stream.onCleanup(() => activeConnections.delete(stream.close));
-			const requestOrgId = getOrgId(request.scope ?? PUBLIC_SCOPE);
+			const scope = request.scope ?? PUBLIC_SCOPE;
+			const requestOrgId = getOrgId(scope);
 			const dropOrgEvents = orgScoped && !requestOrgId;
 			for (const pattern of patterns) {
 				const unsub = await fastify.events.subscribe(pattern, async (event) => {

package/dist/{sseStream-B_5XcVVd.mjs → sseStream-Bvpi-UXQ.mjs}

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.31.0 | MIT | https://classytic.com */
-import { n as forwardedStreamHeaders } from "./streaming-PSZwi8JV.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { n as forwardedStreamHeaders } from "./streaming-DsT1B5zJ.mjs";
 //#region src/utils/sseStream.ts
 /**
 * Take over the reply socket and open an SSE stream. Call ONLY after every

package/dist/{store-helpers-D1MP_gRG.mjs → store-helpers-B88p99Z2.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.31.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
 //#region src/utils/store-helpers.ts
 /**
 * Classify an error thrown by `getOne` / `getById` / `update` as a

package/dist/{streaming-PSZwi8JV.mjs → streaming-DsT1B5zJ.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.31.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
 import { Readable } from "node:stream";
 //#region src/utils/streaming.ts
 /**

package/dist/{subscribe-helpers-C0Tb2aUp.mjs → subscribe-helpers-CLIOHsOK.mjs}

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.31.0 | MIT | https://classytic.com */
-import { n as createEvent } from "./EventTransport-9mlTgqzE.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { r as createEvent } from "./EventTransport-tq4CEB-q.mjs";
 //#region src/events/defineEvent.ts
 /**
 * defineEvent — Typed Event Definitions with Optional Schema Validation

package/dist/sync/changelog.mjs

@@ -1,3 +1,3 @@
-/*! @classytic/arc v2.31.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
 import { CursorExpiredError, MemoryChangeLogStore } from "@classytic/repo-core/sync";
 export { CursorExpiredError, MemoryChangeLogStore };

package/dist/testing/cleanupStoreContract.d.mts

@@ -1,5 +1,5 @@
 
-import { D as CleanupRunStore } from "../types-C4QE8qnm.mjs";
+import { D as CleanupRunStore } from "../types-DVLddu2q.mjs";
 //#region src/testing/cleanupStoreContract.d.ts
 interface CleanupRunStoreContractSetupResult {
   store: CleanupRunStore;

package/dist/testing/cleanupStoreContract.mjs

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.31.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
 import { afterAll, beforeAll, describe, expect, it } from "vitest";
 //#region src/testing/cleanupStoreContract.ts
 /**
@@ -50,6 +50,8 @@ function plan(recipeId) {
 		rebuildActions: [],
 		warnings: [],
 		estimatedTotal: 1,
+		protectedTotal: 0,
+		excludeSteps: [],
 		confirmationPhrase: recipeId,
 		digest: `digest-${recipeId}`
 	};
@@ -152,10 +154,11 @@ function runCleanupRunStoreContract(name, setup) {
 					expiresAt: future()
 				});
 				await store.compareAndTransition(run.id, ["queued"], "running");
-				expect(await store.claim(run.id, {
+				const stolen = await store.claim(run.id, {
 					token: uid("thief"),
 					expiresAt: future()
-				})).toBeNull();
+				});
+				expect(stolen).toBeNull();
 			});
 			it("recovers a running run whose lease EXPIRED (crash recovery)", async () => {
 				const run = makeRun(uid("crashed"), { concurrencyKey: void 0 });
@@ -234,9 +237,11 @@ function runCleanupRunStoreContract(name, setup) {
 					token: live,
 					expiresAt: future()
 				});
-				expect(await store.compareAndTransition(run.id, ["running"], "completed", { completedAt: /* @__PURE__ */ new Date() }, "a-stale-token")).toBeNull();
+				const clobbered = await store.compareAndTransition(run.id, ["running"], "completed", { completedAt: /* @__PURE__ */ new Date() }, "a-stale-token");
+				expect(clobbered).toBeNull();
 				expect((await store.get(run.id))?.status).toBe("running");
-				expect((await store.compareAndTransition(run.id, ["running"], "completed", void 0, live))?.status).toBe("completed");
+				const ok = await store.compareAndTransition(run.id, ["running"], "completed", void 0, live);
+				expect(ok?.status).toBe("completed");
 			});
 		});
 		describe("requestCancel — durable cancellation flag", () => {
@@ -353,7 +358,8 @@ function runCleanupRunStoreContract(name, setup) {
 				const run = makeRun(uid("rearm-cancelled"), { concurrencyKey: void 0 });
 				await store.createIfPermitted(run);
 				await store.compareAndTransition(run.id, ["queued"], "cancelled");
-				expect((await store.reArmIfPermitted(run.id, { queuedAt: /* @__PURE__ */ new Date() }))?.status).toBe("queued");
+				const requeued = await store.reArmIfPermitted(run.id, { queuedAt: /* @__PURE__ */ new Date() });
+				expect(requeued?.status).toBe("queued");
 			});
 			it("refuses a run that is not in a terminal status", async () => {
 				const run = makeRun(uid("rearm-live"), { concurrencyKey: void 0 });

package/dist/testing/index.d.mts

@@ -1,14 +1,14 @@
 
-import { V as ResourceDefinition } from "../index-CpzxqePp.mjs";
 import { i as RequestScope } from "../types-ChuShpCP.mjs";
-import { l as AnyRecord, r as PermissionCheck } from "../types-B7XeLEgK.mjs";
-import { n as ArcModuleInput } from "../types-CBgvkp8O.mjs";
-import "../index-CFThn1K9.mjs";
-import { n as preloadResourcesAsync, r as CreateAppOptions, t as preloadResources } from "../preloadResources-CyoJMSiO.mjs";
+import { l as PermissionCheck, t as AnyRecord } from "../base-Csjc2oF-.mjs";
+import { V as ResourceDefinition } from "../index-BcR2bFZQ.mjs";
+import { n as ArcModuleInput, o as ModuleDisposer, s as ModuleSetupContext } from "../types-BcTumAz_.mjs";
+import "../index-C5NnMEKF.mjs";
+import { n as preloadResourcesAsync, r as CreateAppOptions, t as preloadResources } from "../preloadResources-g07ldtzh.mjs";
 import { StorageContractSetup, StorageContractSetupResult, runStorageContract } from "./storageContract.mjs";
+import { StandardRepo } from "@classytic/repo-core/repository";
 import { FastifyInstance, FastifyServerOptions } from "fastify";
 import { Mock } from "vitest";
-import { StandardRepo } from "@classytic/repo-core/repository";
 //#region src/testing/assertions.d.ts
 /**
  * expectArc — Arc-specific response assertions
@@ -91,6 +91,11 @@ interface AuthorizationConformance {
    * `buildIdFilter` output (route id AND policy AND tenant), so a policy that
    * tried to redirect/widen the target would show here — the surface the
    * filter-overwrite class of bug lives on.
+   *
+   * `filter` is `undefined` when the permission carries NO policy: `fetchDetailed`
+   * only builds a compound filter when there is something to compound, and takes a
+   * plain by-id read otherwise. `status` is meaningful on both paths — assert the
+   * filter only when the permission under test emits a policy.
    */
   get: SurfaceObservation;
   /** `GET /confs/aggregations/tally` — the aggregation surface. */
@@ -606,15 +611,27 @@ declare function createMockRequest(overrides?: Partial<AnyRecord>): unknown;
  */
 declare function createMockReply(): unknown;
 /**
- * Create a mock controller for testing
+ * Create a mock controller for testing.
+ *
+ * The return type is ANNOTATED rather than inferred, and writing it out IS the
+ * fix: inference expands `Mock`'s default type argument to `Procedure`, which
+ * vitest declares in an internal sub-package arc does not depend on. The
+ * emitted declaration then referenced that package by name — resolvable under
+ * npm's hoisting because `vitest` (a real peer) drags it in, and broken under
+ * pnpm's strict layout, where a transitive dep is not reachable from a
+ * consumer's root.
+ *
+ * Bare `Mock` keeps the permissive ergonomics (`.mockResolvedValue(...)`, any
+ * arguments) while naming only `vitest`, which arc does declare. Same shape
+ * `MockRepository` above uses.
  */
 declare function createMockController(repository: StandardRepo<AnyRecord>): {
   repository: StandardRepo<AnyRecord>;
-  list: Mock<import("@vitest/spy").Procedure>;
-  get: Mock<import("@vitest/spy").Procedure>;
-  create: Mock<import("@vitest/spy").Procedure>;
-  update: Mock<import("@vitest/spy").Procedure>;
-  delete: Mock<import("@vitest/spy").Procedure>;
+  list: Mock;
+  get: Mock;
+  create: Mock;
+  update: Mock;
+  delete: Mock;
 };
 /**
  * Create mock data factory
@@ -675,6 +692,28 @@ declare function createTestTimer(): {
   reset: () => void;
 };
 //#endregion
+//#region src/testing/moduleSetup.d.ts
+interface TestModuleSetup {
+  /** Pass this as the second argument to `bootstrap` / `plugins` / `afterResources`. */
+  readonly context: ModuleSetupContext;
+  /**
+   * Disposers the module registered, in REGISTRATION order (`dispose()` runs
+   * them backwards). Assert on `.length` to prove a phase registered teardown
+   * at all — the check a no-op `defer` can never fail.
+   */
+  readonly deferred: readonly ModuleDisposer[];
+  /**
+   * Run every collected disposer LIFO, then clear them.
+   *
+   * Best-effort like arc's teardown: one throwing disposer never blocks the
+   * ones behind it. Any errors are collected and thrown together at the end, so
+   * a test still fails loudly instead of a rejection vanishing into a floating
+   * promise.
+   */
+  dispose(): Promise<void>;
+}
+declare function createTestModuleSetup(): TestModuleSetup;
+//#endregion
 //#region src/testing/scopeRoleGate.d.ts
 /**
  * Grants iff the caller is an org member holding one of `allowed` as an ORG role.
@@ -777,4 +816,4 @@ declare function createTestApp(options?: CreateTestAppOptions): Promise<TestAppC
  */
 declare function createMinimalTestApp(options?: FastifyServerOptions): FastifyInstance;
 //#endregion
-export { type ArcAssertion, type ArcResponseLike, type AuthMode, type AuthResponse, type AuthorizationConformance, type BetterAuthTestHelpers, type BetterAuthTestHelpersOptions, type BetterAuthTestUser, type BootModuleAppOptions, type BootModulesInput, type CreateOrgInput, type CreateTestAppOptions, type DbMode, type FixtureDestroyer, type FixtureFactory, type FixtureRegistration, HttpTestHarness, type HttpTestHarnessOptions, type MockRepository, type ModuleTestApp, type OrgResponse, type RoleConfig, type SetupBetterAuthTestAppInput, type SetupBetterAuthTestAppResult, type SignInInput, type SignUpInput, type StorageContractSetup, type StorageContractSetupResult, type SurfaceObservation, TEST_ACTOR_HEADER, type TestActor, type TestAppContext, type TestAuthProvider, type TestAuthSession, type TestDatabase, type TestDatabaseFactory, type TestFixtures, type TestkitContext, bootModuleApp, createBetterAuthProvider, createBetterAuthTestHelpers, createCustomAuthProvider, createDataFactory, createHttpTestHarness, createJwtAuthProvider, createMinimalTestApp, createMockController, createMockReply, createMockRepository, createMockRequest, createMockUser, createSpy, createTestApp, createTestFixtures, createTestTimer, expectArc, mongoMemoryDatabase, preloadResources, preloadResourcesAsync, runAuthorizationConformance, runStorageContract, safeParseBody, scopeFromTestActor, scopeRoleGate, setupBetterAuthTestApp, testActorAuth, testActorHeaders, waitFor };
+export { type ArcAssertion, type ArcResponseLike, type AuthMode, type AuthResponse, type AuthorizationConformance, type BetterAuthTestHelpers, type BetterAuthTestHelpersOptions, type BetterAuthTestUser, type BootModuleAppOptions, type BootModulesInput, type CreateOrgInput, type CreateTestAppOptions, type DbMode, type FixtureDestroyer, type FixtureFactory, type FixtureRegistration, HttpTestHarness, type HttpTestHarnessOptions, type MockRepository, type ModuleTestApp, type OrgResponse, type RoleConfig, type SetupBetterAuthTestAppInput, type SetupBetterAuthTestAppResult, type SignInInput, type SignUpInput, type StorageContractSetup, type StorageContractSetupResult, type SurfaceObservation, TEST_ACTOR_HEADER, type TestActor, type TestAppContext, type TestAuthProvider, type TestAuthSession, type TestDatabase, type TestDatabaseFactory, type TestFixtures, type TestModuleSetup, type TestkitContext, bootModuleApp, createBetterAuthProvider, createBetterAuthTestHelpers, createCustomAuthProvider, createDataFactory, createHttpTestHarness, createJwtAuthProvider, createMinimalTestApp, createMockController, createMockReply, createMockRepository, createMockRequest, createMockUser, createSpy, createTestApp, createTestFixtures, createTestModuleSetup, createTestTimer, expectArc, mongoMemoryDatabase, preloadResources, preloadResourcesAsync, runAuthorizationConformance, runStorageContract, safeParseBody, scopeFromTestActor, scopeRoleGate, setupBetterAuthTestApp, testActorAuth, testActorHeaders, waitFor };