@classytic/arc 2.31.0 → 2.33.0

package/dist/testing/index.mjs

@@ -1,13 +1,13 @@
-/*! @classytic/arc v2.31.0 | MIT | https://classytic.com */
-import { t as CRUD_OPERATIONS } from "../constants-D3Dv4LAV.mjs";
-import { g as getUserId } from "../types-Cys0ko9Z.mjs";
-import { t as BaseController } from "../BaseController-De7GqHck.mjs";
-import { t as defineResource } from "../defineResource-Bv6EtN1x.mjs";
-import { t as defineAggregation } from "../defineAggregation-DbPPS8RI.mjs";
-import { S as requireOrgRole } from "../permissions-L--QDAir.mjs";
-import { n as createApp } from "../createApp-Df89BEni.mjs";
-import { n as getModuleExports } from "../module-0pFJA6YW.mjs";
-import { n as preloadResourcesAsync, t as preloadResources } from "../preloadResources-Dz6BjzM6.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { t as CRUD_OPERATIONS } from "../constants-BxCoxmiN.mjs";
+import { g as getUserId } from "../types-CoqIRrkY.mjs";
+import { t as BaseController } from "../BaseController-CaQC5EXX.mjs";
+import { t as defineResource } from "../defineResource-DR9vsUYy.mjs";
+import { t as defineAggregation } from "../defineAggregation-Nv-DwfOf.mjs";
+import { E as requireOrgRole } from "../permissions-BAfwgBxc.mjs";
+import { r as createApp } from "../createApp-CLGegqiG.mjs";
+import { n as getModuleExports } from "../module-CwKsgZXp.mjs";
+import { n as preloadResourcesAsync, t as preloadResources } from "../preloadResources-BkyqeTDz.mjs";
 import { runStorageContract } from "./storageContract.mjs";
 import Fastify from "fastify";
 import { afterAll, describe, expect, it, vi } from "vitest";
@@ -64,7 +64,8 @@ function expectArc(response) {
 		failed(status) {
 			if (status !== void 0) expect(response.statusCode).toBe(status);
 			else expect(response.statusCode).toBeGreaterThanOrEqual(400);
-			expect(getBody().code, "expected ErrorContract.code on failed response").toBeDefined();
+			const body = getBody();
+			expect(body.code, "expected ErrorContract.code on failed response").toBeDefined();
 			return assertion;
 		},
 		unauthorized() {
@@ -84,7 +85,8 @@ function expectArc(response) {
 		},
 		hasData() {
 			const body = getBody();
-			expect(Object.keys(body).length > 0, "expected response body to be defined").toBe(true);
+			const hasContent = Object.keys(body).length > 0;
+			expect(hasContent, "expected response body to be defined").toBe(true);
 			return assertion;
 		},
 		hasStatus(status) {
@@ -92,11 +94,13 @@ function expectArc(response) {
 			return assertion;
 		},
 		hidesField(field) {
-			expect(getBody(), `expected field '${field}' to be hidden from response`).not.toHaveProperty(field);
+			const body = getBody();
+			expect(body, `expected field '${field}' to be hidden from response`).not.toHaveProperty(field);
 			return assertion;
 		},
 		showsField(field) {
-			expect(getBody(), `expected field '${field}' on response`).toHaveProperty(field);
+			const body = getBody();
+			expect(body, `expected field '${field}' on response`).toHaveProperty(field);
 			return assertion;
 		},
 		paginated(expected) {
@@ -247,7 +251,19 @@ function createMockReply() {
 	};
 }
 /**
-* Create a mock controller for testing
+* Create a mock controller for testing.
+*
+* The return type is ANNOTATED rather than inferred, and writing it out IS the
+* fix: inference expands `Mock`'s default type argument to `Procedure`, which
+* vitest declares in an internal sub-package arc does not depend on. The
+* emitted declaration then referenced that package by name — resolvable under
+* npm's hoisting because `vitest` (a real peer) drags it in, and broken under
+* pnpm's strict layout, where a transitive dep is not reachable from a
+* consumer's root.
+*
+* Bare `Mock` keeps the permissive ergonomics (`.mockResolvedValue(...)`, any
+* arguments) while naming only `vitest`, which arc does declare. Same shape
+* `MockRepository` above uses.
 */
 function createMockController(repository) {
 	return {
@@ -398,6 +414,21 @@ async function runAuthorizationConformance(opts) {
 			getFilter = filter;
 			return rows[0] ?? null;
 		}),
+		/**
+		* The single-record read has TWO paths, and the harness must be able to observe both.
+		*
+		* `fetchDetailed` only builds a compound filter and calls `getOne` when there is something to
+		* compound — a row policy, a tenant field, or a non-default id field. A permission that simply
+		* ALLOWS (no policy) leaves `{ _id }` alone and takes the plain `getById` path instead. The base
+		* mock stubs that as `null`, so before this stub the `get` surface reported **404 on every
+		* policy-free allow** while `list` and `aggregation` reported 200.
+		*
+		* That reads as partial enforcement and it is not: it is the harness failing to answer. A host
+		* asserting `get.status === 200` for its own allow-gate — the obvious falsification case to pair
+		* with a deny-parity suite — was told its gate broke the single-record surface. Found from
+		* be-prod, whose conformance suite does exactly that.
+		*/
+		getById: (async () => rows[0] ?? null),
 		aggregate: (async (req = {}) => {
 			aggFilter = req.filter;
 			return { rows: [{ tally: rows.length }] };
@@ -1166,12 +1197,13 @@ var HttpTestHarness = class {
 				it(`${verb} /:id with non-existent ID should return 404`, async () => {
 					const { app, fixtures } = this.getOptions();
 					const payload = fixtures.update ?? fixtures.valid;
-					expect((await app.inject({
+					const res = await app.inject({
 						method: verb,
 						url: `${this.getBaseUrl()}/000000000000000000000000`,
 						headers: this.adminHeaders(),
 						payload
-					})).statusCode).toBe(404);
+					});
+					expect(res.statusCode).toBe(404);
 				});
 			}
 			if (enabledRoutes.has("delete")) {
@@ -1188,24 +1220,29 @@ var HttpTestHarness = class {
 						deleteId = JSON.parse(createRes.body)._id;
 					}
 					if (!deleteId) return;
-					expect((await app.inject({
+					const res = await app.inject({
 						method: "DELETE",
 						url: `${this.getBaseUrl()}/${deleteId}`,
 						headers: this.adminHeaders()
-					})).statusCode).toBe(200);
-					if (enabledRoutes.has("get")) expect((await app.inject({
-						method: "GET",
-						url: `${this.getBaseUrl()}/${deleteId}`,
-						headers: this.adminHeaders()
-					})).statusCode).toBe(404);
+					});
+					expect(res.statusCode).toBe(200);
+					if (enabledRoutes.has("get")) {
+						const getRes = await app.inject({
+							method: "GET",
+							url: `${this.getBaseUrl()}/${deleteId}`,
+							headers: this.adminHeaders()
+						});
+						expect(getRes.statusCode).toBe(404);
+					}
 				});
 				it("DELETE /:id with non-existent ID should return 404", async () => {
 					const { app } = this.getOptions();
-					expect((await app.inject({
+					const res = await app.inject({
 						method: "DELETE",
 						url: `${this.getBaseUrl()}/000000000000000000000000`,
 						headers: this.adminHeaders()
-					})).statusCode).toBe(404);
+					});
+					expect(res.statusCode).toBe(404);
 				});
 			}
 		});
@@ -1224,49 +1261,55 @@ var HttpTestHarness = class {
 		describe(`${resource.displayName} HTTP Permissions`, () => {
 			if (enabledRoutes.has("list") && protectedOps.list) it("GET list without auth should return 401", async () => {
 				const { app } = this.getOptions();
-				expect((await app.inject({
+				const res = await app.inject({
 					method: "GET",
 					url: this.getBaseUrl()
-				})).statusCode).toBe(401);
+				});
+				expect(res.statusCode).toBe(401);
 			});
 			if (enabledRoutes.has("get") && protectedOps.get) it("GET /:id without auth should return 401", async () => {
 				const { app } = this.getOptions();
-				expect((await app.inject({
+				const res = await app.inject({
 					method: "GET",
 					url: `${this.getBaseUrl()}/000000000000000000000000`
-				})).statusCode).toBe(401);
+				});
+				expect(res.statusCode).toBe(401);
 			});
 			if (enabledRoutes.has("create") && protectedOps.create) it("POST without auth should return 401", async () => {
 				const { app, fixtures } = this.getOptions();
-				expect((await app.inject({
+				const res = await app.inject({
 					method: "POST",
 					url: this.getBaseUrl(),
 					payload: fixtures.valid
-				})).statusCode).toBe(401);
+				});
+				expect(res.statusCode).toBe(401);
 			});
 			if (enabledRoutes.has("update") && protectedOps.update) for (const verb of updateMethods) it(`${verb} without auth should return 401`, async () => {
 				const { app, fixtures } = this.getOptions();
 				const payload = fixtures.update ?? fixtures.valid;
-				expect((await app.inject({
+				const res = await app.inject({
 					method: verb,
 					url: `${this.getBaseUrl()}/000000000000000000000000`,
 					payload
-				})).statusCode).toBe(401);
+				});
+				expect(res.statusCode).toBe(401);
 			});
 			if (enabledRoutes.has("delete") && protectedOps.delete) it("DELETE without auth should return 401", async () => {
 				const { app } = this.getOptions();
-				expect((await app.inject({
+				const res = await app.inject({
 					method: "DELETE",
 					url: `${this.getBaseUrl()}/000000000000000000000000`
-				})).statusCode).toBe(401);
+				});
+				expect(res.statusCode).toBe(401);
 			});
 			if (enabledRoutes.has("list")) it("admin should access list endpoint", async () => {
 				const { app } = this.getOptions();
-				expect((await app.inject({
+				const res = await app.inject({
 					method: "GET",
 					url: this.getBaseUrl(),
 					headers: this.adminHeaders()
-				})).statusCode).toBeLessThan(400);
+				});
+				expect(res.statusCode).toBeLessThan(400);
 			});
 			if (enabledRoutes.has("create")) it("admin should access create endpoint", async () => {
 				const { app, fixtures } = this.getOptions();
@@ -1313,6 +1356,33 @@ function createHttpTestHarness(resource, optionsOrGetter) {
 	return new HttpTestHarness(resource, optionsOrGetter);
 }
 //#endregion
+//#region src/testing/moduleSetup.ts
+function createTestModuleSetup() {
+	const deferred = [];
+	return {
+		context: { defer(disposer) {
+			if (typeof disposer !== "function") throw new TypeError(`[arc/testing] defer() expected a function, received ${typeof disposer}.`);
+			deferred.push(disposer);
+		} },
+		deferred,
+		async dispose() {
+			const errors = [];
+			for (let i = deferred.length - 1; i >= 0; i--) {
+				const dispose = deferred[i];
+				if (!dispose) continue;
+				try {
+					await dispose();
+				} catch (err) {
+					errors.push(err);
+				}
+			}
+			deferred.length = 0;
+			if (errors.length === 1) throw errors[0];
+			if (errors.length > 1) throw new AggregateError(errors, `[arc/testing] ${errors.length} disposers threw`);
+		}
+	};
+}
+//#endregion
 //#region src/testing/scopeRoleGate.ts
 /**
 * `scopeRoleGate` — the ONE role gate for package tests.
@@ -1435,7 +1505,7 @@ function pickDefaultAuth(authMode, callerAuth) {
 	};
 }
 async function createTestApp(options = {}) {
-	const { createApp } = await import("../createApp-Df89BEni.mjs").then((n) => n.r);
+	const { createApp } = await import("../createApp-CLGegqiG.mjs").then((n) => n.i);
 	const { resources = [], db = "in-memory", connectMongoose = false, authMode = "jwt", defaultOrgId, plugins, auth: callerAuth, ...appOptions } = options;
 	let dbHandle;
 	let dbUri;
@@ -1505,4 +1575,4 @@ function createMinimalTestApp(options = {}) {
 	});
 }
 //#endregion
-export { HttpTestHarness, TEST_ACTOR_HEADER, bootModuleApp, createBetterAuthProvider, createBetterAuthTestHelpers, createCustomAuthProvider, createDataFactory, createHttpTestHarness, createJwtAuthProvider, createMinimalTestApp, createMockController, createMockReply, createMockRepository, createMockRequest, createMockUser, createSpy, createTestApp, createTestFixtures, createTestTimer, expectArc, mongoMemoryDatabase, preloadResources, preloadResourcesAsync, runAuthorizationConformance, runStorageContract, safeParseBody, scopeFromTestActor, scopeRoleGate, setupBetterAuthTestApp, testActorAuth, testActorHeaders, waitFor };
+export { HttpTestHarness, TEST_ACTOR_HEADER, bootModuleApp, createBetterAuthProvider, createBetterAuthTestHelpers, createCustomAuthProvider, createDataFactory, createHttpTestHarness, createJwtAuthProvider, createMinimalTestApp, createMockController, createMockReply, createMockRepository, createMockRequest, createMockUser, createSpy, createTestApp, createTestFixtures, createTestModuleSetup, createTestTimer, expectArc, mongoMemoryDatabase, preloadResources, preloadResourcesAsync, runAuthorizationConformance, runStorageContract, safeParseBody, scopeFromTestActor, scopeRoleGate, setupBetterAuthTestApp, testActorAuth, testActorHeaders, waitFor };

package/dist/testing/outboxStoreContract.d.mts

@@ -5,8 +5,17 @@ interface OutboxStoreContractSetupResult {
   store: OutboxStore;
   /** Called once after the suite. */
   teardown?: () => Promise<void>;
-  /** Empty the store between tests. Strongly recommended for isolation. */
-  reset?: () => Promise<void>;
+  /**
+   * Empty the store. REQUIRED, and run before every test.
+   *
+   * Not a recommendation: several assertions are absolute rather than relative —
+   * "exactly zero pending", "exactly two", "`oldestPendingAgeMs()` is null on an
+   * empty queue". Without a reset those read whatever the previous test left, so the
+   * suite passes on ORDER rather than on behaviour, and inserting one unrelated case
+   * turns a conforming store red. A store that cannot empty itself cannot be
+   * conformance-tested.
+   */
+  reset: () => Promise<void>;
 }
 type OutboxStoreContractSetup = () => Promise<OutboxStoreContractSetupResult>;
 declare function runOutboxStoreContract(name: string, setup: OutboxStoreContractSetup): void;

package/dist/testing/outboxStoreContract.mjs

@@ -1,6 +1,6 @@
-/*! @classytic/arc v2.31.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
 import { OutboxOwnershipError } from "@classytic/primitives/outbox";
-import { afterAll, beforeAll, describe, expect, it } from "vitest";
+import { afterAll, beforeAll, beforeEach, describe, expect, it } from "vitest";
 //#region src/testing/outboxStoreContract.ts
 let seq = 0;
 /** A minimal well-formed event. Ids are unique per call. */
@@ -30,9 +30,16 @@ function runOutboxStoreContract(name, setup) {
 		afterAll(async () => {
 			if (teardown) await teardown();
 		});
+		/**
+		* Isolation for EVERY test, not just the ones that call `seed()`. Resetting inside
+		* `seed()` left any test that asserts on an empty store — or that only reads —
+		* running against its predecessor's rows.
+		*/
+		beforeEach(async () => {
+			await reset();
+		});
 		/** Save n events, oldest first. */
 		async function seed(n, type) {
-			if (reset) await reset();
 			const events = [];
 			for (let i = 0; i < n; i++) {
 				const e = event(type);
@@ -44,10 +51,10 @@ function runOutboxStoreContract(name, setup) {
 		describe("save — rejects malformed events (invariant 1)", () => {
 			it("persists a well-formed event", async () => {
 				const [e] = await seed(1);
-				expect((await store.getPending(10)).map(idOf)).toContain(idOf(e));
+				const pending = await store.getPending(10);
+				expect(pending.map(idOf)).toContain(idOf(e));
 			});
 			it("THROWS rather than persisting an event with no `type`", async () => {
-				if (reset) await reset();
 				await expect(store.save({
 					payload: {},
 					meta: { id: "no-type" }
@@ -55,7 +62,6 @@ function runOutboxStoreContract(name, setup) {
 				expect((await store.getPending(10)).length).toBe(0);
 			});
 			it("THROWS rather than persisting an event with no `meta.id`", async () => {
-				if (reset) await reset();
 				await expect(store.save({
 					type: "x",
 					payload: {},
@@ -67,7 +73,8 @@ function runOutboxStoreContract(name, setup) {
 		describe("getPending", () => {
 			it("returns events FIFO (oldest first)", async () => {
 				const saved = await seed(3);
-				expect((await store.getPending(10)).slice(0, 3).map(idOf)).toEqual(saved.map(idOf));
+				const pending = await store.getPending(10);
+				expect(pending.slice(0, 3).map(idOf)).toEqual(saved.map(idOf));
 			});
 			it("honours the limit", async () => {
 				await seed(3);
@@ -86,10 +93,11 @@ function runOutboxStoreContract(name, setup) {
 			it("claims pending events", async ({ skip }) => {
 				if (!store.claimPending) return skip();
 				await seed(2);
-				expect((await store.claimPending({
+				const claimed = await store.claimPending({
 					consumerId: "c1",
 					limit: 10
-				})).length).toBe(2);
+				});
+				expect(claimed.length).toBe(2);
 			});
 			it("two concurrent claimers NEVER receive the same event", async ({ skip }) => {
 				if (!store.claimPending) return skip();
@@ -103,7 +111,8 @@ function runOutboxStoreContract(name, setup) {
 				})]);
 				const idsA = a.map(idOf);
 				const idsB = b.map(idOf);
-				expect(idsA.filter((id) => idsB.includes(id))).toEqual([]);
+				const overlap = idsA.filter((id) => idsB.includes(id));
+				expect(overlap).toEqual([]);
 				expect(idsA.length + idsB.length).toBeLessThanOrEqual(6);
 			});
 			it("does not re-claim an event whose lease is still live", async ({ skip }) => {
@@ -114,10 +123,11 @@ function runOutboxStoreContract(name, setup) {
 					limit: 10,
 					leaseMs: 6e4
 				});
-				expect(await store.claimPending({
+				const second = await store.claimPending({
 					consumerId: "c2",
 					limit: 10
-				})).toEqual([]);
+				});
+				expect(second).toEqual([]);
 			});
 			it("RECLAIMS an event whose lease expired (crashed worker)", async ({ skip }) => {
 				if (!store.claimPending) return skip();
@@ -127,18 +137,20 @@ function runOutboxStoreContract(name, setup) {
 					limit: 10,
 					leaseMs: 0
 				});
-				expect((await store.claimPending({
+				const reclaimed = await store.claimPending({
 					consumerId: "c2",
 					limit: 10
-				})).length).toBe(1);
+				});
+				expect(reclaimed.length).toBe(1);
 			});
 			it("claims FIFO", async ({ skip }) => {
 				if (!store.claimPending) return skip();
 				const saved = await seed(3);
-				expect((await store.claimPending({
+				const claimed = await store.claimPending({
 					consumerId: "c1",
 					limit: 2
-				})).map(idOf)).toEqual(saved.slice(0, 2).map(idOf));
+				});
+				expect(claimed.map(idOf)).toEqual(saved.slice(0, 2).map(idOf));
 			});
 		});
 		describe("acknowledge", () => {
@@ -148,7 +160,6 @@ function runOutboxStoreContract(name, setup) {
 				expect((await store.getPending(10)).map(idOf)).not.toContain(idOf(e));
 			});
 			it("is a NO-OP for an unknown id — never an ownership error (invariant 4)", async () => {
-				if (reset) await reset();
 				await expect(store.acknowledge("does-not-exist")).resolves.not.toThrow();
 			});
 			it("THROWS OutboxOwnershipError when consumerId is not the lease owner (invariant 3)", async ({ skip }) => {
@@ -185,10 +196,11 @@ function runOutboxStoreContract(name, setup) {
 				});
 				if (!claimed) return skip();
 				await store.fail(idOf(claimed), { message: "boom" });
-				expect((await store.claimPending({
+				const again = await store.claimPending({
 					consumerId: "c2",
 					limit: 10
-				})).map(idOf)).toContain(idOf(claimed));
+				});
+				expect(again.map(idOf)).toContain(idOf(claimed));
 			});
 			it("THROWS OutboxOwnershipError on a consumerId mismatch (invariant 3)", async ({ skip }) => {
 				if (!store.fail || !store.claimPending) return skip();
@@ -211,10 +223,11 @@ function runOutboxStoreContract(name, setup) {
 				});
 				if (!claimed) return skip();
 				await store.fail(idOf(claimed), { message: "boom" }, { retryAt: new Date(Date.now() + 6e4) });
-				expect((await store.claimPending({
+				const again = await store.claimPending({
 					consumerId: "c2",
 					limit: 10
-				})).map(idOf)).not.toContain(idOf(claimed));
+				});
+				expect(again.map(idOf)).not.toContain(idOf(claimed));
 			});
 			it("`deadLetter: true` removes it from the pending stream", async ({ skip }) => {
 				if (!store.fail) return skip();
@@ -242,6 +255,82 @@ function runOutboxStoreContract(name, setup) {
 				expect((await store.getPending(10)).length).toBe(2);
 			});
 		});
+		/**
+		* `requeue`, `countByStatus` and `oldestPendingAgeMs` were a HOST's three extra
+		* methods before they were contract members — which is why they are pinned here.
+		* A dead-letter row an operator cannot re-drive, or a health number that lies, fails
+		* silently: the operator concludes the queue is fine, and the whole point of the
+		* table is that somebody eventually looks.
+		*/
+		describe("requeue", () => {
+			it("returns a dead-lettered event to pending and clears the attempt count", async ({ skip }) => {
+				if (!store.fail || !store.requeue) return skip();
+				const [e] = await seed(1);
+				const id = idOf(e);
+				await store.fail(id, { message: "fatal" }, { deadLetter: true });
+				expect((await store.getPending(10)).length).toBe(0);
+				expect(await store.requeue(id)).toBe(true);
+				const pending = await store.getPending(10);
+				expect(pending.length).toBe(1);
+				if (store.countByStatus) expect(await store.countByStatus("dead_letter")).toBe(0);
+			});
+			it("REFUSES a pending event — requeue is dead-letter-scoped", async ({ skip }) => {
+				if (!store.requeue) return skip();
+				const [e] = await seed(1);
+				expect(await store.requeue(idOf(e))).toBe(false);
+			});
+			it("is FALSE, not an error, for an unknown id", async ({ skip }) => {
+				if (!store.requeue) return skip();
+				expect(await store.requeue("no-such-event")).toBe(false);
+			});
+		});
+		describe("countByStatus", () => {
+			it("counts pending, and moves the count as events are delivered", async ({ skip }) => {
+				if (!store.countByStatus) return skip();
+				await seed(3);
+				expect(await store.countByStatus("pending")).toBe(3);
+				if (!store.claimPending) return skip();
+				const [claimed] = await store.claimPending({
+					consumerId: "c",
+					limit: 1,
+					leaseMs: 6e4
+				});
+				if (!claimed) return skip();
+				await store.acknowledge(idOf(claimed), { consumerId: "c" });
+				expect(await store.countByStatus("pending")).toBe(2);
+				expect(await store.countByStatus("delivered")).toBe(1);
+			});
+			it("counts dead-lettered rows — the number an alert fires on", async ({ skip }) => {
+				if (!store.countByStatus || !store.fail) return skip();
+				expect(await store.countByStatus("dead_letter")).toBe(0);
+				const [e] = await seed(1);
+				await store.fail(idOf(e), { message: "fatal" }, { deadLetter: true });
+				expect(await store.countByStatus("dead_letter")).toBe(1);
+			});
+		});
+		describe("oldestPendingAgeMs", () => {
+			it("is null on an empty queue, and a non-negative age once something pends", async ({ skip }) => {
+				if (!store.oldestPendingAgeMs) return skip();
+				expect(await store.oldestPendingAgeMs()).toBeNull();
+				await seed(1);
+				const age = await store.oldestPendingAgeMs();
+				expect(age).not.toBeNull();
+				expect(age ?? -1).toBeGreaterThanOrEqual(0);
+			});
+			it("ignores DELIVERED rows — it answers 'how long undelivered', not 'how old'", async ({ skip }) => {
+				if (!store.oldestPendingAgeMs) return skip();
+				if (!store.claimPending) return skip();
+				await seed(1);
+				const [claimed] = await store.claimPending({
+					consumerId: "c",
+					limit: 1,
+					leaseMs: 6e4
+				});
+				if (!claimed) return skip();
+				await store.acknowledge(idOf(claimed), { consumerId: "c" });
+				expect(await store.oldestPendingAgeMs()).toBeNull();
+			});
+		});
 	});
 }
 //#endregion

package/dist/testing/storageContract.mjs

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.31.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
 import { afterAll, beforeAll, describe, expect, it } from "vitest";
 //#region src/testing/storageContract.ts
 /**
@@ -89,7 +89,8 @@ function runStorageContract(name, setup) {
 				size: bytes.length
 			}, EMPTY_CTX);
 			const read = await storage.read(file.id, EMPTY_CTX);
-			expect((await readAll(read)).equals(bytes)).toBe(true);
+			const actual = await readAll(read);
+			expect(actual.equals(bytes)).toBe(true);
 			expect(read.contentType).toBe("application/octet-stream");
 			await storage.delete(file.id, EMPTY_CTX);
 		});
@@ -101,7 +102,8 @@ function runStorageContract(name, setup) {
 				mimeType: "application/octet-stream",
 				size: bytes.length
 			}, EMPTY_CTX);
-			expect(await storage.delete(file.id, EMPTY_CTX)).toBe(true);
+			const first = await storage.delete(file.id, EMPTY_CTX);
+			expect(first).toBe(true);
 			let second = "threw";
 			try {
 				second = await storage.delete(file.id, EMPTY_CTX);
@@ -169,8 +171,10 @@ function runStorageContract(name, setup) {
 				mimeType: "application/octet-stream",
 				size: bytes.length
 			}, EMPTY_CTX);
-			expect((await readAll(await storage.read(file.id, EMPTY_CTX))).equals(bytes)).toBe(true);
-			expect(await storage.delete(file.id, EMPTY_CTX)).toBe(true);
+			const before = await readAll(await storage.read(file.id, EMPTY_CTX));
+			expect(before.equals(bytes)).toBe(true);
+			const removed = await storage.delete(file.id, EMPTY_CTX);
+			expect(removed).toBe(true);
 			let rejected = false;
 			try {
 				if (!(await readAll(await storage.read(file.id, EMPTY_CTX))).equals(bytes)) rejected = true;
@@ -189,7 +193,8 @@ function runStorageContract(name, setup) {
 			}, EMPTY_CTX);
 			const result = await storage.read(file.id, EMPTY_CTX);
 			expect(result.kind === "stream" || result.kind === "buffer").toBe(true);
-			expect((await readAll(result)).equals(bytes)).toBe(true);
+			const actual = await readAll(result);
+			expect(actual.equals(bytes)).toBe(true);
 			await storage.delete(file.id, EMPTY_CTX);
 		});
 		it("read() with a mid-object range slices correctly (when adapter supports ranges)", async () => {

package/dist/{transactionContext-dAfBVUrk.mjs → transactionContext-BYtWnwAS.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.31.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
 import { AsyncLocalStorage } from "node:async_hooks";
 //#region src/context/transactionContext.ts
 /**

package/dist/{typeGuards-B0ryPo3I.mjs → typeGuards-jjKJDN13.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.31.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
 //#region src/utils/typeGuards.ts
 /** Check if fastify has the events plugin registered */
 function hasEvents(instance) {

package/dist/types/index.d.mts

@@ -1,6 +1,6 @@
 
-import { $ as OpenApiSchemas, A as RequestIdOptions, An as BaseControllerOptions, At as RouteDefinition, Bt as RawRouteHandler, C as RequestContext, D as HealthCheck, Dt as ActionEntry, E as GracefulShutdownOptions, Et as ActionDefinition, F as FastifyWithDecorators, Ft as ControllerLike, G as OnTenantDeleteConfig, Gt as Authenticator, H as CrudController, I as MiddlewareHandler, It as FastifyHandler, J as PresetHook, Jt as TokenPair, K as ResolvedTenantPurge, Kt as AuthenticatorContext, L as RequestWithExtras, Lt as IController, M as EventsDecorator, Mt as RouteMethod, N as FastifyRequestExtras, Nt as RateLimitConfig, O as HealthOptions, Ot as ActionHandlerFn, P as FastifyWithAuth, Pt as ControllerHandler, Q as MiddlewareConfig, Rt as IControllerResponse, S as QueryParserInterface, T as CrudRouterOptions, Tt as ResourceCacheConfig, U as ResourceConfig, Ut as AuthHelpers, Vt as RouteHandler, W as ResourcePermissions, Wt as AuthPluginOptions, X as CrudRouteKey, Y as PresetResult, Z as CrudSchemas, _ as ControllerQueryOptions, a as InferAdapterDoc, at as ResourceExtensions, b as ParsedQuery, c as TypedController, d as PaginationResult, et as RouteSchemaOptions, f as IntrospectionData, g as ArcInternalMetadata, h as ResourceMetadata, i as ValidationResult, it as ResourceHooks, j as ArcDecorator, jt as RouteMcpConfig, k as IntrospectionPluginOptions, kt as ActionsMap, l as TypedRepository, m as RegistryStats, n as ConfigError, nt as FieldRule, o as InferDocType, ot as EventDefinition, p as RegistryEntry, q as PresetFunction, qt as JwtContext, r as ValidateOptions, rt as ResourceHookContext, s as InferResourceDoc, t as RouteHandlerMethod, tt as ArcFieldRule, u as TypedResourceConfig, v as LookupOption, w as ServiceContext, x as PopulateOption, y as OwnershipCheck, zt as IRequestContext } from "../index-CpzxqePp.mjs";
 import { i as RequestScope } from "../types-ChuShpCP.mjs";
-import { a as UserBase, d as JWTPayload, f as ObjectId, i as PermissionContext, l as AnyRecord, m as UserOrganization, n as DataPolicy, p as UserLike, r as PermissionCheck, t as AuthorizationDecision, u as ArcRequest } from "../types-B7XeLEgK.mjs";
+import { a as UserLike, c as DataPolicy, d as UserBase, i as ObjectId, l as PermissionCheck, n as ArcRequest, o as UserOrganization, r as JWTPayload, s as AuthorizationDecision, t as AnyRecord, u as PermissionContext } from "../base-Csjc2oF-.mjs";
+import { $ as OpenApiSchemas, A as RequestIdOptions, An as WriteVerbKey, At as RouteDefinition, C as RequestContext, D as HealthCheck, Dn as MutationWriteContext, Dt as ActionEntry, E as GracefulShutdownOptions, Et as ActionDefinition, F as FastifyWithDecorators, Fn as IControllerResponse, Ft as AuthPluginOptions, G as OnTenantDeleteConfig, H as CrudController, I as MiddlewareHandler, In as IRequestContext, It as Authenticator, J as PresetHook, K as ResolvedTenantPurge, L as RequestWithExtras, Ln as RawRouteHandler, Lt as AuthenticatorContext, M as EventsDecorator, Mn as ControllerLike, Mt as RouteMethod, N as FastifyRequestExtras, Nn as FastifyHandler, Nt as RateLimitConfig, O as HealthOptions, On as ResourceWrites, Ot as ActionHandlerFn, P as FastifyWithAuth, Pn as IController, Pt as AuthHelpers, Q as MiddlewareConfig, Rn as RouteHandler, Rt as JwtContext, S as QueryParserInterface, T as CrudRouterOptions, Tt as ResourceCacheConfig, U as ResourceConfig, W as ResourcePermissions, X as CrudRouteKey, Y as PresetResult, Z as CrudSchemas, _ as ControllerQueryOptions, a as InferAdapterDoc, at as ResourceExtensions, b as ParsedQuery, c as TypedController, d as PaginationResult, et as RouteSchemaOptions, f as IntrospectionData, g as ArcInternalMetadata, h as ResourceMetadata, i as ValidationResult, it as ResourceHooks, j as ArcDecorator, jn as ControllerHandler, jt as RouteMcpConfig, k as IntrospectionPluginOptions, kn as WriteContext, kt as ActionsMap, l as TypedRepository, m as RegistryStats, n as ConfigError, nt as FieldRule, o as InferDocType, ot as EventDefinition, p as RegistryEntry, q as PresetFunction, r as ValidateOptions, rt as ResourceHookContext, s as InferResourceDoc, t as RouteHandlerMethod, tt as ArcFieldRule, u as TypedResourceConfig, v as LookupOption, w as ServiceContext, x as PopulateOption, xn as BaseControllerOptions, y as OwnershipCheck, zt as TokenPair } from "../index-BcR2bFZQ.mjs";
 import { n as ElevationOptions, t as ElevationEvent } from "../elevation-BXCfVcNG.mjs";
-export type { ActionDefinition, ActionEntry, ActionHandlerFn, ActionsMap, AnyRecord, ArcDecorator, ArcFieldRule, ArcInternalMetadata, ArcRequest, AuthHelpers, AuthPluginOptions, Authenticator, AuthenticatorContext, AuthorizationDecision, BaseControllerOptions, ConfigError, ControllerHandler, ControllerLike, ControllerQueryOptions, CrudController, CrudRouteKey, CrudRouterOptions, CrudSchemas, DataPolicy, ElevationEvent, ElevationOptions, EventDefinition, EventsDecorator, FastifyHandler, FastifyRequestExtras, FastifyWithAuth, FastifyWithDecorators, FieldRule, GracefulShutdownOptions, HealthCheck, HealthOptions, IController, IControllerResponse, IRequestContext, InferAdapterDoc, InferDocType, InferResourceDoc, IntrospectionData, IntrospectionPluginOptions, JWTPayload, JwtContext, LookupOption, MiddlewareConfig, MiddlewareHandler, ObjectId, OnTenantDeleteConfig, OpenApiSchemas, OwnershipCheck, PaginationResult, ParsedQuery, PermissionCheck, PermissionContext, PopulateOption, PresetFunction, PresetHook, PresetResult, QueryParserInterface, RateLimitConfig, RawRouteHandler, RegistryEntry, RegistryStats, RequestContext, RequestIdOptions, RequestScope, RequestWithExtras, ResolvedTenantPurge, ResourceCacheConfig, ResourceConfig, ResourceExtensions, ResourceHookContext, ResourceHooks, ResourceMetadata, ResourcePermissions, RouteDefinition, RouteHandler, RouteHandlerMethod, RouteMcpConfig, RouteMethod, RouteSchemaOptions, ServiceContext, TokenPair, TypedController, TypedRepository, TypedResourceConfig, UserBase, UserLike, UserOrganization, ValidateOptions, ValidationResult };
+export type { ActionDefinition, ActionEntry, ActionHandlerFn, ActionsMap, AnyRecord, ArcDecorator, ArcFieldRule, ArcInternalMetadata, ArcRequest, AuthHelpers, AuthPluginOptions, Authenticator, AuthenticatorContext, AuthorizationDecision, BaseControllerOptions, ConfigError, ControllerHandler, ControllerLike, ControllerQueryOptions, CrudController, CrudRouteKey, CrudRouterOptions, CrudSchemas, DataPolicy, ElevationEvent, ElevationOptions, EventDefinition, EventsDecorator, FastifyHandler, FastifyRequestExtras, FastifyWithAuth, FastifyWithDecorators, FieldRule, GracefulShutdownOptions, HealthCheck, HealthOptions, IController, IControllerResponse, IRequestContext, InferAdapterDoc, InferDocType, InferResourceDoc, IntrospectionData, IntrospectionPluginOptions, JWTPayload, JwtContext, LookupOption, MiddlewareConfig, MiddlewareHandler, MutationWriteContext, ObjectId, OnTenantDeleteConfig, OpenApiSchemas, OwnershipCheck, PaginationResult, ParsedQuery, PermissionCheck, PermissionContext, PopulateOption, PresetFunction, PresetHook, PresetResult, QueryParserInterface, RateLimitConfig, RawRouteHandler, RegistryEntry, RegistryStats, RequestContext, RequestIdOptions, RequestScope, RequestWithExtras, ResolvedTenantPurge, ResourceCacheConfig, ResourceConfig, ResourceExtensions, ResourceHookContext, ResourceHooks, ResourceMetadata, ResourcePermissions, ResourceWrites, RouteDefinition, RouteHandler, RouteHandlerMethod, RouteMcpConfig, RouteMethod, RouteSchemaOptions, ServiceContext, TokenPair, TypedController, TypedRepository, TypedResourceConfig, UserBase, UserLike, UserOrganization, ValidateOptions, ValidationResult, WriteContext, WriteVerbKey };

package/dist/types/index.mjs

@@ -1,2 +1,2 @@
-/*! @classytic/arc v2.31.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
 export {};

package/dist/types/storage.mjs

@@ -1,2 +1,2 @@
-/*! @classytic/arc v2.31.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
 export {};