@classytic/arc 2.32.0 → 2.33.0

package/dist/presets/filesUpload.d.mts

@@ -1,7 +1,7 @@
 
-import { Y as PresetResult } from "../index-CpzxqePp.mjs";
 import { i as RequestScope } from "../types-ChuShpCP.mjs";
-import { r as PermissionCheck } from "../types-B7XeLEgK.mjs";
+import { l as PermissionCheck } from "../base-Csjc2oF-.mjs";
+import { Y as PresetResult } from "../index-BcR2bFZQ.mjs";
 import { a as StorageReadResult, i as StorageReadRange, n as StorageContext, o as StorageUploadInput, r as StorageFile, t as Storage } from "../storage-Cx9Sz3Ou.mjs";
 //#region src/presets/filesUpload.d.ts
 interface FilesUploadPresetRoutes {

package/dist/presets/filesUpload.mjs

@@ -1,8 +1,8 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
-import { i as NotFoundError, u as ValidationError } from "../errors-Bh1KK5ps.mjs";
-import { c as getOrgId, g as getUserId } from "../types-DXYX7dIR.mjs";
-import { B as requireAuth, F as allowPublic } from "../permissions-Dl_m0NCe.mjs";
-import { t as multipartBody } from "../multipartBody-BnkBLN7v.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { i as NotFoundError, u as ValidationError } from "../errors-Cd_yy7aW.mjs";
+import { c as getOrgId, g as getUserId } from "../types-CoqIRrkY.mjs";
+import { B as requireAuth, F as allowPublic } from "../permissions-BAfwgBxc.mjs";
+import { t as multipartBody } from "../multipartBody-4w-S3-PU.mjs";
 //#region src/presets/filesUpload.ts
 const DEFAULT_FIELD_NAME = "file";
 const DEFAULT_MAX_FILE_SIZE = 10485760;

package/dist/presets/index.d.mts

@@ -1,6 +1,6 @@
 
-import { Rt as IControllerResponse, U as ResourceConfig, Y as PresetResult, d as PaginationResult, zt as IRequestContext } from "../index-CpzxqePp.mjs";
-import { l as AnyRecord } from "../types-B7XeLEgK.mjs";
+import { t as AnyRecord } from "../base-Csjc2oF-.mjs";
+import { Fn as IControllerResponse, In as IRequestContext, U as ResourceConfig, Y as PresetResult, d as PaginationResult } from "../index-BcR2bFZQ.mjs";
 import { FilesUploadPresetOptions, FilesUploadPresetPermissions, FilesUploadPresetRoutes, filesUploadPreset } from "./filesUpload.mjs";
 import { MultiTenantOptions, TenantFieldSpec, multiTenantPreset } from "./multiTenant.mjs";
 import { SearchHandler, SearchPresetOptions, SearchRouteConfig, searchPreset } from "./search.mjs";

package/dist/presets/index.mjs

@@ -1,6 +1,6 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
 import { multiTenantPreset } from "./multiTenant.mjs";
-import { a as registerPreset, c as auditedPreset, d as ownedByUserPreset, i as getPreset, l as softDeletePreset, n as flexibleMultiTenantPreset, o as treePreset, r as getAvailablePresets, s as bulkPreset, t as applyPresets, u as slugLookupPreset } from "../presets-Dntd_pUO.mjs";
+import { a as registerPreset, c as auditedPreset, d as ownedByUserPreset, i as getPreset, l as softDeletePreset, n as flexibleMultiTenantPreset, o as treePreset, r as getAvailablePresets, s as bulkPreset, t as applyPresets, u as slugLookupPreset } from "../presets-D-h0uWtP.mjs";
 import { filesUploadPreset } from "./filesUpload.mjs";
 import { searchPreset } from "./search.mjs";
 export { applyPresets, auditedPreset, bulkPreset, filesUploadPreset, flexibleMultiTenantPreset, getAvailablePresets, getPreset, multiTenantPreset, ownedByUserPreset, registerPreset, searchPreset, slugLookupPreset, softDeletePreset, treePreset };

package/dist/presets/multiTenant.d.mts

@@ -1,5 +1,5 @@
 
-import { X as CrudRouteKey, Y as PresetResult } from "../index-CpzxqePp.mjs";
+import { X as CrudRouteKey, Y as PresetResult } from "../index-BcR2bFZQ.mjs";
 //#region src/presets/multiTenant.d.ts
 /**
  * One tenant dimension for multi-field filtering. Discriminated by source:

package/dist/presets/multiTenant.mjs

@@ -1,6 +1,6 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
-import "../constants-J99LGTJI.mjs";
-import { b as isElevated, c as getOrgId, d as getScopeContext, m as getTeamId, u as getRequestScope, v as hasOrgAccess } from "../types-DXYX7dIR.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import "../constants-BxCoxmiN.mjs";
+import { b as isElevated, c as getOrgId, d as getScopeContext, m as getTeamId, u as getRequestScope, v as hasOrgAccess } from "../types-CoqIRrkY.mjs";
 //#region src/presets/multiTenant.ts
 /**
 * Resolve a single TenantFieldSpec against the current scope.

package/dist/presets/search.d.mts

@@ -1,6 +1,6 @@
 
-import { At as RouteDefinition, Pt as ControllerHandler, Y as PresetResult, jt as RouteMcpConfig } from "../index-CpzxqePp.mjs";
-import { r as PermissionCheck } from "../types-B7XeLEgK.mjs";
+import { l as PermissionCheck } from "../base-Csjc2oF-.mjs";
+import { At as RouteDefinition, Y as PresetResult, jn as ControllerHandler, jt as RouteMcpConfig } from "../index-BcR2bFZQ.mjs";
 //#region src/presets/search.d.ts
 /**
  * Search Preset — backend-agnostic search / vector / embed routes

package/dist/presets/search.mjs

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
-import { B as requireAuth, F as allowPublic } from "../permissions-Dl_m0NCe.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { B as requireAuth, F as allowPublic } from "../permissions-BAfwgBxc.mjs";
 //#region src/presets/search.ts
 const BUILTINS = [
 	{

package/dist/{presets-Dntd_pUO.mjs → presets-D-h0uWtP.mjs}

@@ -1,7 +1,7 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
-import { l as UnauthorizedError } from "./errors-Bh1KK5ps.mjs";
-import { b as isElevated, n as PUBLIC_SCOPE } from "./types-DXYX7dIR.mjs";
-import { B as requireAuth, F as allowPublic, U as requireRoles } from "./permissions-Dl_m0NCe.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { l as UnauthorizedError } from "./errors-Cd_yy7aW.mjs";
+import { b as isElevated, n as PUBLIC_SCOPE } from "./types-CoqIRrkY.mjs";
+import { B as requireAuth, F as allowPublic, U as requireRoles } from "./permissions-BAfwgBxc.mjs";
 import { multiTenantPreset } from "./presets/multiTenant.mjs";
 //#region src/presets/ownedByUser.ts
 /**

package/dist/projection-BKM0Ui-s.mjs

@@ -0,0 +1,42 @@
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { c as getOrgId, f as getScopeContextMap, g as getUserId, m as getTeamId, x as isMember } from "./types-CoqIRrkY.mjs";
+//#region src/scope/projection.ts
+/**
+* Compute the request-scope projection. Returns `undefined` when no
+* scope is attached (public / unscoped routes) so hosts can idiomatically
+* write `ctx.scope?.organizationId` without a double-null check.
+*/
+function buildRequestScopeProjection(scope) {
+	if (!scope) return void 0;
+	return {
+		organizationId: getOrgId(scope),
+		userId: getUserId(scope),
+		orgRoles: isMember(scope) ? scope.orgRoles : void 0,
+		teamId: getTeamId(scope),
+		context: freezeContext(getScopeContextMap(scope))
+	};
+}
+/**
+* Hand out a FROZEN COPY of the scope's context, never the live map.
+*
+* `Readonly<Record<string, string>>` is erased at runtime, so the annotation
+* alone protected nothing: `getScopeContextMap` returns the scope's own
+* object, and a hook doing `ctx.scope.context.branchId = 'other'` mutated the
+* caller's REAL scope. That matters because `requireScopeContext()` authorises
+* against exactly these values — a later permission check in the same request
+* would read the tampered dimension and allow what it should refuse.
+*
+* A copy rather than freezing in place: the map belongs to whoever built the
+* scope (a host auth function), and freezing someone else's object as a side
+* effect of reading it is a surprise a library should not spring. Copying also
+* makes the guarantee deterministic instead of "frozen once something happens
+* to call the accessor".
+*
+* ESM is always strict mode, so a write to the frozen copy THROWS rather than
+* failing silently — the mistake surfaces where it is made.
+*/
+function freezeContext(ctx) {
+	return ctx === void 0 ? void 0 : Object.freeze({ ...ctx });
+}
+//#endregion
+export { buildRequestScopeProjection as t };

package/dist/{queryCachePlugin-Dhps-Ldt.mjs → queryCachePlugin-DhsZ0ZIc.mjs}

@@ -1,8 +1,8 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
-import { t as __exportAll } from "./rolldown-runtime-BhflRrBs.mjs";
-import { t as hasEvents } from "./typeGuards-B_5-hKjJ.mjs";
-import { i as versionKey, r as tagVersionKey } from "./keys-B-HBTGXl.mjs";
-import { t as MemoryCacheStore } from "./memory-DsuWnj4T.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { t as __exportAll } from "./rolldown-runtime-DNg-KNCk.mjs";
+import { t as hasEvents } from "./typeGuards-jjKJDN13.mjs";
+import { i as versionKey, r as tagVersionKey } from "./keys-WeKvY1dE.mjs";
+import { t as MemoryCacheStore } from "./memory-qYSB7rMQ.mjs";
 import fp from "fastify-plugin";
 //#region src/cache/QueryCache.ts
 var QueryCache = class {
@@ -110,6 +110,7 @@ const CRUD_SUFFIXES = /* @__PURE__ */ new Set([
 	"deleted"
 ]);
 const queryCachePluginImpl = async (fastify, opts = {}) => {
+	const ownsStore = opts.store === void 0;
 	const store = opts.store ?? new MemoryCacheStore();
 	const queryCache = new QueryCache(store);
 	const defaults = {
@@ -124,20 +125,61 @@ const queryCachePluginImpl = async (fastify, opts = {}) => {
 	});
 	fastify.addHook("onReady", async () => {
 		if (!hasEvents(fastify)) return;
+		/**
+		* Auto-invalidate on CRUD events — `product.created` bumps `product`, and
+		* `catalog:category.created` bumps BOTH `catalog:category` and `category`.
+		*
+		* ## Why the namespace has to be stripped
+		*
+		* This derived the resource as "everything before the last dot", which is right for
+		* an arc-native event (`product.created`) and wrong for every NAMESPACED one. Each
+		* `@classytic/*` kernel publishes `<domain>:<entity>.<verb>` —
+		* `catalog:category.created`, `revenue:payment.verified`,
+		* `access:entitlement.granted` — so the resource came out as `catalog:category` and
+		* the version bumped at `arc:ver:catalog:category`.
+		*
+		* Readers use the arc RESOURCE NAME: `buildQueryKey(resource, …)` folds in
+		* `getResourceVersion("category")`, i.e. `arc:ver:category`. Bump and read
+		* therefore used different keys and **auto-invalidation never fired for any
+		* kernel-backed resource** — no error, no warning, just caches serving stale data
+		* for a full `staleTime`. It was invisible precisely because the feature looks
+		* wired: the plugin is registered, events flow, a version does get bumped.
+		*
+		* ## Both names are bumped, on purpose
+		*
+		* Two namespaces could each own an `<entity>` of the same name (`catalog:category`
+		* and a hypothetical `cms:category`), so stripping is ambiguous. The asymmetry
+		* decides it: **over-invalidation costs a cache miss, under-invalidation serves
+		* wrong data.** Bumping both the qualified and the bare name means an unrelated
+		* namespace can at worst force an extra reload, and never a stale read. That is the
+		* same reasoning applied everywhere else here — a permissive default is only
+		* acceptable when the failure it causes is loud and cheap.
+		*
+		* By the same argument the split is UNCONDITIONAL: any `:` in the qualified
+		* name yields a bare candidate, including when the prefix itself contains a
+		* dot (`some.thing:entity` bumps `entity` too). Narrowing that would remove
+		* invalidations, which is the one direction that can serve wrong data.
+		*/
 		await fastify.events.subscribe("*", async (event) => {
 			const type = event.type;
 			const dotIdx = type.lastIndexOf(".");
 			if (dotIdx === -1) return;
 			const suffix = type.slice(dotIdx + 1);
 			if (!CRUD_SUFFIXES.has(suffix)) return;
-			const resource = type.slice(0, dotIdx);
-			await queryCache.bumpResourceVersion(resource);
+			const qualified = type.slice(0, dotIdx);
+			await queryCache.bumpResourceVersion(qualified);
+			const colonIdx = qualified.lastIndexOf(":");
+			if (colonIdx === -1) return;
+			const bare = qualified.slice(colonIdx + 1);
+			if (bare.length === 0 || bare === qualified) return;
+			await queryCache.bumpResourceVersion(bare);
 		});
 		for (const rule of crossResourceRules) await fastify.events.subscribe(rule.pattern, async () => {
 			for (const tag of rule.tags) await queryCache.bumpTagVersion(tag);
 		});
 	});
 	fastify.addHook("onClose", async () => {
+		if (!ownsStore) return;
 		if ("close" in store && typeof store.close === "function") await store.close();
 	});
 };

package/dist/{rateLimit-C7mmAGs3.mjs → rateLimit-D4-ASwsI.mjs}

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
-import { n as requestContext } from "./requestContext-B6vQF-sy.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { n as requestContext } from "./requestContext-uYE35JxI.mjs";
 //#region src/core/middlewares/arcDecorator.ts
 /**
 * Build the `arcDecorator` preHandler for a resource.

package/dist/{rateLimitKey-CccEFBfk.mjs → rateLimitKey-XngqVNEV.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
 //#region src/scope/rateLimitKey.ts
 function createTenantKeyGenerator(opts) {
 	if (opts?.strategy) return opts.strategy;

package/dist/{realtime-DVvVZZFz.mjs → realtime-CTkv3O59.mjs}

@@ -1,13 +1,13 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
-import { t as __exportAll } from "./rolldown-runtime-BhflRrBs.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { t as __exportAll } from "./rolldown-runtime-DNg-KNCk.mjs";
 import { arcLog } from "./logger/index.mjs";
-import { n as evaluateAndApplyPermission } from "./authorizationDecision-__T3EJDA.mjs";
-import { n as getUserRoles } from "./userHelpers-BNsOXzOd.mjs";
-import { c as getOrgId } from "./types-DXYX7dIR.mjs";
-import { t as simpleEqualityMatcher } from "./simpleEqualityMatcher-C4KiMWUa.mjs";
-import { t as applyFieldReadPermissions } from "./fields-DEi65pGj.mjs";
-import { a as promoteStreamTokenToHeader } from "./streaming-DPZdQmDz.mjs";
-import { t as openSseStream } from "./sseStream-B3zb_d1h.mjs";
+import { n as evaluateAndApplyPermission } from "./authorizationDecision-B3mP_QTy.mjs";
+import { n as getUserRoles } from "./userHelpers-CWF5pbZD.mjs";
+import { c as getOrgId } from "./types-CoqIRrkY.mjs";
+import { t as simpleEqualityMatcher } from "./simpleEqualityMatcher-Se8VrsaP.mjs";
+import { t as applyFieldReadPermissions } from "./fields-CojeUkS4.mjs";
+import { a as promoteStreamTokenToHeader } from "./streaming-DsT1B5zJ.mjs";
+import { t as openSseStream } from "./sseStream-Bvpi-UXQ.mjs";
 import fp from "fastify-plugin";
 //#region src/plugins/realtime.ts
 var realtime_exports = /* @__PURE__ */ __exportAll({

package/dist/{redis-stream-qN6A-RFv.d.mts → redis-stream-mwLWlfHG.d.mts}

@@ -1,5 +1,5 @@
 
-import { a as EventTransport, i as EventLogger, n as DomainEvent, r as EventHandler } from "./EventTransport-2uVV34WU.mjs";
+import { a as EventTransport, i as EventLogger, n as DomainEvent, r as EventHandler } from "./EventTransport-BEVP50ka.mjs";
 //#region src/events/transports/redis-stream.d.ts
 interface RedisStreamLike {
   xadd(key: string, id: string, ...fieldValues: string[]): Promise<string | null>;

package/dist/{registerRoute-B_QrjYZS.mjs → registerRoute-DNnd3vkz.mjs}

@@ -1,7 +1,7 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
-import { n as evaluateAndApplyPermission } from "./authorizationDecision-__T3EJDA.mjs";
-import { f as createError } from "./errors-Bh1KK5ps.mjs";
-import { u as getRequestScope } from "./types-DXYX7dIR.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { n as evaluateAndApplyPermission } from "./authorizationDecision-B3mP_QTy.mjs";
+import { f as createError } from "./errors-Cd_yy7aW.mjs";
+import { u as getRequestScope } from "./types-CoqIRrkY.mjs";
 //#region src/core/middlewares/permissions.ts
 /**
 * Build a PermissionContext from a Fastify request. Extracted so the CRUD

package/dist/registry/index.d.mts

@@ -1,8 +1,8 @@
 
-import { K as ResolvedTenantPurge, R as RegisterOptions, V as ResourceDefinition, X as CrudRouteKey, k as IntrospectionPluginOptions, p as RegistryEntry, z as ResourceRegistry } from "../index-CpzxqePp.mjs";
-import "../fastify-augmentation-BppG5bMT.mjs";
-import { FastifyPluginAsync } from "fastify";
+import { K as ResolvedTenantPurge, R as RegisterOptions, V as ResourceDefinition, X as CrudRouteKey, k as IntrospectionPluginOptions, p as RegistryEntry, z as ResourceRegistry } from "../index-BcR2bFZQ.mjs";
+import "../fastify-augmentation-DVsTAy6X.mjs";
 import { TenantPurgeProgress, TenantPurgeStrategy } from "@classytic/repo-core/repository";
+import { FastifyPluginAsync } from "fastify";
 //#region src/registry/assertNoTenantData.d.ts
 interface AssertNoTenantDataOptions {
   readonly organizationId: string;

package/dist/registry/index.mjs

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
-import { a as cascadeDeleteForOrganization, c as assertNoTenantData, i as introspectionPlugin_default, n as buildResourceManifestFromRegistry, o as getCascadingResources, r as introspectionPlugin, s as getCascadingResourcesWithMetadata, t as buildResourceManifest } from "../registry-DqUmzA9W.mjs";
-import { t as ResourceRegistry } from "../ResourceRegistry-BVr7PgA0.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { a as cascadeDeleteForOrganization, c as assertNoTenantData, i as introspectionPlugin_default, n as buildResourceManifestFromRegistry, o as getCascadingResources, r as introspectionPlugin, s as getCascadingResourcesWithMetadata, t as buildResourceManifest } from "../registry-CLxCR5LF.mjs";
+import { t as ResourceRegistry } from "../ResourceRegistry-DoALUlOO.mjs";
 export { ResourceRegistry, assertNoTenantData, buildResourceManifest, buildResourceManifestFromRegistry, cascadeDeleteForOrganization, getCascadingResources, getCascadingResourcesWithMetadata, introspectionPlugin_default as introspectionPlugin, introspectionPlugin as introspectionPluginFn };

package/dist/{registry-DqUmzA9W.mjs → registry-CLxCR5LF.mjs}

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
-import { t as CRUD_OPERATIONS } from "./constants-J99LGTJI.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { t as CRUD_OPERATIONS } from "./constants-BxCoxmiN.mjs";
 import fp from "fastify-plugin";
 //#region src/registry/assertNoTenantData.ts
 /**

package/dist/{renewingLease-BpP9wwj7.mjs → renewingLease-BnWtbA2U.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
 //#region src/lock/renewingLease.ts
 /**
 * Start renewing an ALREADY-ACQUIRED lease. The caller performed the

package/dist/{replyHelpers-DS-P0b32.mjs → replyHelpers-BSBVCwL3.mjs}

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
-import { t as __exportAll } from "./rolldown-runtime-BhflRrBs.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { t as __exportAll } from "./rolldown-runtime-DNg-KNCk.mjs";
 import { toCanonicalList } from "@classytic/repo-core/pagination";
 import fp from "fastify-plugin";
 //#region src/plugins/replyHelpers.ts

package/dist/{repositoryFilter-DotlxG3L.mjs → repositoryFilter-DKny7PDn.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
 import { arcLog } from "./logger/index.mjs";
 import { policyRecordToFilter } from "@classytic/repo-core/filter";
 //#region src/core/repositoryFilter.ts

package/dist/{requestContext-B6vQF-sy.mjs → requestContext-uYE35JxI.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
 import { AsyncLocalStorage } from "node:async_hooks";
 //#region src/context/requestContext.ts
 /**

package/dist/{rolldown-runtime-BhflRrBs.mjs → rolldown-runtime-DNg-KNCk.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
 import "node:module";
 //#region \0rolldown/runtime.js
 var __defProp = Object.defineProperty;

package/dist/runtimeCapabilities-Dm88DaTW.mjs

@@ -0,0 +1,49 @@
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+//#region src/utils/runtimeCapabilities.ts
+/**
+* `Symbol.for` so declarations from two arc copies in one dependency graph
+* land in ONE registry — same reasoning as `ARC_EVENT_TRANSPORT`. Not on the
+* public `fastify.arc` surface; the audit result is the product, not the list.
+*/
+const ARC_RUNTIME_CAPABILITIES = Symbol.for("arc.runtimeCapabilities");
+function registryOf(fastify) {
+	const holder = fastify;
+	if (!holder[ARC_RUNTIME_CAPABILITIES]) holder[ARC_RUNTIME_CAPABILITIES] = [];
+	return holder[ARC_RUNTIME_CAPABILITIES];
+}
+/**
+* Declare a runtime capability. Callable from ANY registration context —
+* arc's own plugins, host `plugins()` callbacks, module `plugins` phases —
+* which is the point: the audit sees what the constructor-time guard cannot.
+*/
+function declareRuntimeCapability(fastify, decl) {
+	registryOf(fastify).push(decl);
+}
+/**
+* The boot audit. Runs once at the end of `buildApp`, after every declarant.
+*
+* - `runtime: 'distributed'` + `durability: 'memory'` + not `accepted` →
+*   collected and THROWN as one error naming every violator (fixing them one
+*   boot at a time is the checklist experience this replaces).
+* - accepted memory declarations → one info line, so the topology decision is
+*   visible in the boot log it was made for.
+* - non-distributed runtimes → nothing to enforce; declarations still logged
+*   at debug for `arc doctor`-style tooling.
+*/
+function auditRuntimeCapabilities(fastify, runtime) {
+	const declarations = registryOf(fastify);
+	if (declarations.length === 0) return;
+	if (runtime !== "distributed") {
+		fastify.log.debug({ capabilities: declarations }, "[arc] runtime capabilities declared (no distributed profile — informational)");
+		return;
+	}
+	const violations = declarations.filter((d) => d.durability === "memory" && !d.accepted);
+	const acceptedMemory = declarations.filter((d) => d.durability === "memory" && d.accepted);
+	if (acceptedMemory.length > 0) fastify.log.info({ accepted: acceptedMemory.map((d) => d.subsystem) }, "[arc] per-process state accepted by design under runtime: 'distributed'");
+	if (violations.length > 0) {
+		const lines = violations.map((d) => `  - ${d.subsystem}${d.detail ? ` — ${d.detail}` : ""}`).join("\n");
+		throw new Error(`runtime: 'distributed' — ${violations.length} subsystem(s) hold PER-PROCESS state that multi-replica deployment breaks:\n${lines}\nWire a shared store for each, or — where per-process is genuinely intended — have the declarant pass \`accepted: true\` with a reason.`);
+	}
+}
+//#endregion
+export { declareRuntimeCapability as n, auditRuntimeCapabilities as t };

package/dist/{schedules-C2Q3uv2d.mjs → schedules-CAcZgia0.mjs}

@@ -1,6 +1,6 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
-import { t as __exportAll } from "./rolldown-runtime-BhflRrBs.mjs";
-import { t as startRenewingLease } from "./renewingLease-BpP9wwj7.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { t as __exportAll } from "./rolldown-runtime-DNg-KNCk.mjs";
+import { t as startRenewingLease } from "./renewingLease-BnWtbA2U.mjs";
 import fp from "fastify-plugin";
 //#region src/plugins/schedules.ts
 var schedules_exports = /* @__PURE__ */ __exportAll({

package/dist/{schemaConverter-Crjvczi_.mjs → schemaConverter-XH1RZRyu.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
 import { arcLog } from "./logger/index.mjs";
 //#region src/utils/schemaConverter.ts
 /**

package/dist/{schemaIR-CnyKK_1j.mjs → schemaIR-CDvclAew.mjs}

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
-import { o as toJsonSchema } from "./schemaConverter-Crjvczi_.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { o as toJsonSchema } from "./schemaConverter-XH1RZRyu.mjs";
 //#region src/core/schemaIR.ts
 /**
 * Schema IR — one canonical representation, two adapters.

package/dist/schemas/index.mjs

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
 import { errorContractSchema, errorDetailSchema } from "@classytic/repo-core/errors";
 import { Type, Type as Type$1 } from "typebox";
 //#region src/schemas/index.ts

package/dist/scim/index.mjs

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
-import { t as parseJsonBody } from "../jsonBody-DDSR2HFl.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { t as parseJsonBody } from "../jsonBody-CfGH-GxO.mjs";
 import fp from "fastify-plugin";
 //#region src/scim/errors.ts
 var ScimError = class extends Error {

package/dist/scope/index.mjs

@@ -1,6 +1,6 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
-import { C as isService, D as requireUserId, E as requireTeamId, O as scopeFirstCtx, S as isOrgInScope, T as requireOrgId, _ as getUserRoles, a as getDPoPJkt, b as isElevated, c as getOrgId, d as getScopeContext, f as getScopeContextMap, g as getUserId, h as getTenantFromRequest, i as getClientId, l as getOrgRoles, m as getTeamId, n as PUBLIC_SCOPE, o as getMandate, p as getServiceScopes, r as getAncestorOrgIds, s as getOrgContext, t as AUTHENTICATED_SCOPE, u as getRequestScope, v as hasOrgAccess, w as requireClientId, x as isMember, y as isAuthenticated } from "../types-DXYX7dIR.mjs";
-import { n as elevation_default, t as elevationPlugin } from "../elevation-DNXXxgjl.mjs";
-import { t as createTenantKeyGenerator } from "../rateLimitKey-CccEFBfk.mjs";
-import { t as resolveOrgFromHeader } from "../scope-afz_Ieek.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { C as isService, D as requireUserId, E as requireTeamId, O as scopeFirstCtx, S as isOrgInScope, T as requireOrgId, _ as getUserRoles, a as getDPoPJkt, b as isElevated, c as getOrgId, d as getScopeContext, f as getScopeContextMap, g as getUserId, h as getTenantFromRequest, i as getClientId, l as getOrgRoles, m as getTeamId, n as PUBLIC_SCOPE, o as getMandate, p as getServiceScopes, r as getAncestorOrgIds, s as getOrgContext, t as AUTHENTICATED_SCOPE, u as getRequestScope, v as hasOrgAccess, w as requireClientId, x as isMember, y as isAuthenticated } from "../types-CoqIRrkY.mjs";
+import { n as elevation_default, t as elevationPlugin } from "../elevation-B0tlY8y1.mjs";
+import { t as createTenantKeyGenerator } from "../rateLimitKey-XngqVNEV.mjs";
+import { t as resolveOrgFromHeader } from "../scope-BaWcqBvr.mjs";
 export { AUTHENTICATED_SCOPE, PUBLIC_SCOPE, createTenantKeyGenerator, elevation_default as elevationPlugin, elevationPlugin as elevationPluginFn, getAncestorOrgIds, getClientId, getDPoPJkt, getMandate, getOrgContext, getOrgId, getOrgRoles, getRequestScope, getScopeContext, getScopeContextMap, getServiceScopes, getTeamId, getTenantFromRequest, getUserId, getUserRoles, hasOrgAccess, isAuthenticated, isElevated, isMember, isOrgInScope, isService, requireClientId, requireOrgId, requireTeamId, requireUserId, resolveOrgFromHeader, scopeFirstCtx };

package/dist/{scope-afz_Ieek.mjs → scope-BaWcqBvr.mjs}

@@ -1,7 +1,7 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
-import { a as OrgAccessDeniedError, l as UnauthorizedError } from "./errors-Bh1KK5ps.mjs";
-import { n as requireSingleHeaderValue } from "./headers-BXjQYbeC.mjs";
-import { n as getUserRoles } from "./userHelpers-BNsOXzOd.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { a as OrgAccessDeniedError, l as UnauthorizedError } from "./errors-Cd_yy7aW.mjs";
+import { n as requireSingleHeaderValue } from "./headers-CveNO9gR.mjs";
+import { n as getUserRoles } from "./userHelpers-CWF5pbZD.mjs";
 //#region src/scope/resolveOrgFromHeader.ts
 /**
 * Create a preHandler hook that resolves org scope from a header.

package/dist/{simpleEqualityMatcher-C4KiMWUa.mjs → simpleEqualityMatcher-Se8VrsaP.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
 //#region src/utils/simpleEqualityMatcher.ts
 /**
 * `simpleEqualityMatcher` — a minimal, dialect-agnostic flat-key equality

package/dist/{sse-B9P4Y-UI.mjs → sse-Cf0jUHsh.mjs}

@@ -1,9 +1,9 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
-import { t as __exportAll } from "./rolldown-runtime-BhflRrBs.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { t as __exportAll } from "./rolldown-runtime-DNg-KNCk.mjs";
 import { arcLog } from "./logger/index.mjs";
-import { c as getOrgId, n as PUBLIC_SCOPE } from "./types-DXYX7dIR.mjs";
-import { a as promoteStreamTokenToHeader } from "./streaming-DPZdQmDz.mjs";
-import { t as openSseStream } from "./sseStream-B3zb_d1h.mjs";
+import { c as getOrgId, n as PUBLIC_SCOPE } from "./types-CoqIRrkY.mjs";
+import { a as promoteStreamTokenToHeader } from "./streaming-DsT1B5zJ.mjs";
+import { t as openSseStream } from "./sseStream-Bvpi-UXQ.mjs";
 import fp from "fastify-plugin";
 //#region src/plugins/sse.ts
 var sse_exports = /* @__PURE__ */ __exportAll({

package/dist/{sseStream-B3zb_d1h.mjs → sseStream-Bvpi-UXQ.mjs}

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
-import { n as forwardedStreamHeaders } from "./streaming-DPZdQmDz.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { n as forwardedStreamHeaders } from "./streaming-DsT1B5zJ.mjs";
 //#region src/utils/sseStream.ts
 /**
 * Take over the reply socket and open an SSE stream. Call ONLY after every

package/dist/{store-helpers-DmEMHlPQ.mjs → store-helpers-B88p99Z2.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
 //#region src/utils/store-helpers.ts
 /**
 * Classify an error thrown by `getOne` / `getById` / `update` as a

package/dist/{streaming-DPZdQmDz.mjs → streaming-DsT1B5zJ.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
 import { Readable } from "node:stream";
 //#region src/utils/streaming.ts
 /**

package/dist/{subscribe-helpers-sp5xTDVA.mjs → subscribe-helpers-CLIOHsOK.mjs}

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
-import { n as createEvent } from "./EventTransport-BV10D0oG.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { r as createEvent } from "./EventTransport-tq4CEB-q.mjs";
 //#region src/events/defineEvent.ts
 /**
 * defineEvent — Typed Event Definitions with Optional Schema Validation

package/dist/sync/changelog.mjs

@@ -1,3 +1,3 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
 import { CursorExpiredError, MemoryChangeLogStore } from "@classytic/repo-core/sync";
 export { CursorExpiredError, MemoryChangeLogStore };

package/dist/testing/cleanupStoreContract.d.mts

@@ -1,5 +1,5 @@
 
-import { D as CleanupRunStore } from "../types-C4QE8qnm.mjs";
+import { D as CleanupRunStore } from "../types-DVLddu2q.mjs";
 //#region src/testing/cleanupStoreContract.d.ts
 interface CleanupRunStoreContractSetupResult {
   store: CleanupRunStore;

package/dist/testing/cleanupStoreContract.mjs

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
 import { afterAll, beforeAll, describe, expect, it } from "vitest";
 //#region src/testing/cleanupStoreContract.ts
 /**
@@ -50,6 +50,8 @@ function plan(recipeId) {
 		rebuildActions: [],
 		warnings: [],
 		estimatedTotal: 1,
+		protectedTotal: 0,
+		excludeSteps: [],
 		confirmationPhrase: recipeId,
 		digest: `digest-${recipeId}`
 	};