@classytic/arc 2.32.0 → 2.34.0

package/dist/permissions/index.d.mts

@@ -1,5 +1,5 @@
 
-import { a as UserBase, c as normalizeRoles, i as PermissionContext, n as DataPolicy, r as PermissionCheck, s as getUserRoles, t as AuthorizationDecision } from "../types-B7XeLEgK.mjs";
+import { c as DataPolicy, d as UserBase, l as PermissionCheck, m as normalizeRoles, p as getUserRoles, s as AuthorizationDecision, u as PermissionContext } from "../base-Csjc2oF-.mjs";
 import { a as applyFieldWritePermissions, i as applyFieldReadPermissions, n as FieldPermissionMap, o as fields, r as FieldPermissionType, s as resolveEffectiveRoles, t as FieldPermission } from "../fields-I_EeRWND.mjs";
-import { $ as requireAuth, A as RequireGrantOptions, B as ConnectEventsOptions, C as requireServiceScope, D as GRANT_MODES, E as createRoleHierarchy, F as PermissionRequirement, G as createOrgPermissions, H as DynamicPermissionMatrixConfig, I as collectPublicSurface, J as allowPublic, K as allOf, L as describePermission, M as requireGrant, N as conjoinPolicyFilters, O as GrantMode, P as AccessExplanation, Q as not, R as describePermissionMap, S as requireScopeContext, T as RoleHierarchy, U as PermissionEventBus, V as DynamicPermissionMatrix, W as createDynamicPermissionMatrix, X as deny, Y as anyOf, Z as denyAll, _ as publicReadAdminWrite, a as PermissionMatrixRegistry, at as scopeOf, b as requireOrgMembership, c as introspectModule, ct as evaluatePermissionDecision, d as authenticated, dt as RequireMandateOptions, et as requireOwnership, f as fullPublic, ft as requireAgentScope, g as publicRead, h as presets_d_exports, i as PermissionMatrixOptions, it as when, j as modeSatisfies, k as GrantResolution, l as introspectRegistry, lt as normalizeToDecision, m as permissionMatrix, mt as requireMandate, n as PermissionEntryType, nt as requireRoles, o as buildPermissionMatrix, ot as PermissionCheckReturn, p as ownerWithAdminBypass, pt as requireDPoP, q as allow, r as PermissionMatrix, rt as roles, s as introspectCheck, st as applyAuthorizationDecision, t as PermissionEntry, tt as requirePlatformRole, u as adminOnly, ut as RequireAgentScopeOptions, v as readOnly, w as requireTeamMembership, x as requireOrgRole, y as requireOrgInScope, z as explainAccess } from "../index-zq6VrjaB.mjs";
+import { $ as requireAuth, A as RequireGrantOptions, B as ConnectEventsOptions, C as requireServiceScope, D as GRANT_MODES, E as createRoleHierarchy, F as PermissionRequirement, G as createOrgPermissions, H as DynamicPermissionMatrixConfig, I as collectPublicSurface, J as allowPublic, K as allOf, L as describePermission, M as requireGrant, N as conjoinPolicyFilters, O as GrantMode, P as AccessExplanation, Q as not, R as describePermissionMap, S as requireScopeContext, T as RoleHierarchy, U as PermissionEventBus, V as DynamicPermissionMatrix, W as createDynamicPermissionMatrix, X as deny, Y as anyOf, Z as denyAll, _ as publicReadAdminWrite, a as PermissionMatrixRegistry, at as scopeOf, b as requireOrgMembership, c as introspectModule, ct as evaluatePermissionDecision, d as authenticated, dt as RequireMandateOptions, et as requireOwnership, f as fullPublic, ft as requireAgentScope, g as publicRead, h as presets_d_exports, i as PermissionMatrixOptions, it as when, j as modeSatisfies, k as GrantResolution, l as introspectRegistry, lt as normalizeToDecision, m as permissionMatrix, mt as requireMandate, n as PermissionEntryType, nt as requireRoles, o as buildPermissionMatrix, ot as PermissionCheckReturn, p as ownerWithAdminBypass, pt as requireDPoP, q as allow, r as PermissionMatrix, rt as roles, s as introspectCheck, st as applyAuthorizationDecision, t as PermissionEntry, tt as requirePlatformRole, u as adminOnly, ut as RequireAgentScopeOptions, v as readOnly, w as requireTeamMembership, x as requireOrgRole, y as requireOrgInScope, z as explainAccess } from "../index-B-DvUzsr.mjs";
 export { type AccessExplanation, type AuthorizationDecision, type ConnectEventsOptions, type DataPolicy, type DynamicPermissionMatrix, type DynamicPermissionMatrixConfig, type FieldPermission, type FieldPermissionMap, type FieldPermissionType, GRANT_MODES, type GrantMode, type GrantResolution, type PermissionCheck, type PermissionCheckReturn, type PermissionContext, type PermissionEntry, type PermissionEntryType, type PermissionEventBus, type PermissionMatrix, type PermissionMatrixOptions, type PermissionMatrixRegistry, type PermissionRequirement, type RequireAgentScopeOptions, type RequireGrantOptions, type RequireMandateOptions, type RoleHierarchy, type UserBase, adminOnly, allOf, allow, allowPublic, anyOf, applyAuthorizationDecision, applyFieldReadPermissions, applyFieldWritePermissions, authenticated, buildPermissionMatrix, collectPublicSurface, conjoinPolicyFilters, createDynamicPermissionMatrix, createOrgPermissions, createRoleHierarchy, deny, denyAll, describePermission, describePermissionMap, evaluatePermissionDecision, explainAccess, fields, fullPublic, getUserRoles, introspectCheck, introspectModule, introspectRegistry, modeSatisfies, normalizeRoles, normalizeToDecision, not, ownerWithAdminBypass, permissionMatrix, presets_d_exports as permissions, publicRead, publicReadAdminWrite, readOnly, requireAgentScope, requireAuth, requireDPoP, requireGrant, requireMandate, requireOrgInScope, requireOrgMembership, requireOrgRole, requireOwnership, requirePlatformRole, requireRoles, requireScopeContext, requireServiceScope, requireTeamMembership, resolveEffectiveRoles, roles, scopeOf, when };

package/dist/permissions/index.mjs

@@ -1,6 +1,6 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
-import { a as conjoinPolicyFilters, i as normalizeToDecision, r as evaluatePermissionDecision, t as applyAuthorizationDecision } from "../authorizationDecision-__T3EJDA.mjs";
-import { n as getUserRoles, r as normalizeRoles } from "../userHelpers-BNsOXzOd.mjs";
-import { i as resolveEffectiveRoles, n as applyFieldWritePermissions, r as fields, t as applyFieldReadPermissions } from "../fields-DEi65pGj.mjs";
-import { A as requireAgentScope, B as requireAuth, C as createOrgPermissions, D as requireScopeContext, E as requireOrgRole, F as allowPublic, G as when, H as requirePlatformRole, I as anyOf, K as scopeOf, L as deny, M as requireMandate, N as allOf, O as requireServiceScope, P as allow, R as denyAll, S as createDynamicPermissionMatrix, T as requireOrgMembership, U as requireRoles, V as requireOwnership, W as roles, _ as requireGrant, a as adminOnly, b as describePermissionMap, c as ownerWithAdminBypass, d as publicRead, f as publicReadAdminWrite, g as modeSatisfies, h as GRANT_MODES, i as introspectRegistry, j as requireDPoP, k as requireTeamMembership, l as permissionMatrix, m as createRoleHierarchy, n as introspectCheck, o as authenticated, p as readOnly, r as introspectModule, s as fullPublic, t as buildPermissionMatrix, u as presets_exports, v as collectPublicSurface, w as requireOrgInScope, x as explainAccess, y as describePermission, z as not } from "../permissions-Dl_m0NCe.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { a as conjoinPolicyFilters, i as normalizeToDecision, r as evaluatePermissionDecision, t as applyAuthorizationDecision } from "../authorizationDecision-CMMLWmuZ.mjs";
+import { n as getUserRoles, r as normalizeRoles } from "../userHelpers-CWF5pbZD.mjs";
+import { i as resolveEffectiveRoles, n as applyFieldWritePermissions, r as fields, t as applyFieldReadPermissions } from "../fields-CojeUkS4.mjs";
+import { A as requireAgentScope, B as requireAuth, C as createOrgPermissions, D as requireScopeContext, E as requireOrgRole, F as allowPublic, G as when, H as requirePlatformRole, I as anyOf, K as scopeOf, L as deny, M as requireMandate, N as allOf, O as requireServiceScope, P as allow, R as denyAll, S as createDynamicPermissionMatrix, T as requireOrgMembership, U as requireRoles, V as requireOwnership, W as roles, _ as requireGrant, a as adminOnly, b as describePermissionMap, c as ownerWithAdminBypass, d as publicRead, f as publicReadAdminWrite, g as modeSatisfies, h as GRANT_MODES, i as introspectRegistry, j as requireDPoP, k as requireTeamMembership, l as permissionMatrix, m as createRoleHierarchy, n as introspectCheck, o as authenticated, p as readOnly, r as introspectModule, s as fullPublic, t as buildPermissionMatrix, u as presets_exports, v as collectPublicSurface, w as requireOrgInScope, x as explainAccess, y as describePermission, z as not } from "../permissions-CP47jdi7.mjs";
 export { GRANT_MODES, adminOnly, allOf, allow, allowPublic, anyOf, applyAuthorizationDecision, applyFieldReadPermissions, applyFieldWritePermissions, authenticated, buildPermissionMatrix, collectPublicSurface, conjoinPolicyFilters, createDynamicPermissionMatrix, createOrgPermissions, createRoleHierarchy, deny, denyAll, describePermission, describePermissionMap, evaluatePermissionDecision, explainAccess, fields, fullPublic, getUserRoles, introspectCheck, introspectModule, introspectRegistry, modeSatisfies, normalizeRoles, normalizeToDecision, not, ownerWithAdminBypass, permissionMatrix, presets_exports as permissions, publicRead, publicReadAdminWrite, readOnly, requireAgentScope, requireAuth, requireDPoP, requireGrant, requireMandate, requireOrgInScope, requireOrgMembership, requireOrgRole, requireOwnership, requirePlatformRole, requireRoles, requireScopeContext, requireServiceScope, requireTeamMembership, resolveEffectiveRoles, roles, scopeOf, when };

package/dist/{permissions-Dl_m0NCe.mjs → permissions-CP47jdi7.mjs}

@@ -1,10 +1,10 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
-import { t as __exportAll } from "./rolldown-runtime-BhflRrBs.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { t as __exportAll } from "./rolldown-runtime-DNg-KNCk.mjs";
 import { arcLog } from "./logger/index.mjs";
-import { a as conjoinPolicyFilters, i as normalizeToDecision } from "./authorizationDecision-__T3EJDA.mjs";
-import { n as getUserRoles } from "./userHelpers-BNsOXzOd.mjs";
-import { C as isService, S as isOrgInScope, a as getDPoPJkt, b as isElevated, d as getScopeContext, f as getScopeContextMap, g as getUserId, m as getTeamId, n as PUBLIC_SCOPE, o as getMandate, p as getServiceScopes, u as getRequestScope, v as hasOrgAccess, x as isMember } from "./types-DXYX7dIR.mjs";
-import { t as MemoryCacheStore } from "./memory-DsuWnj4T.mjs";
+import { a as conjoinPolicyFilters, i as normalizeToDecision } from "./authorizationDecision-CMMLWmuZ.mjs";
+import { n as getUserRoles } from "./userHelpers-CWF5pbZD.mjs";
+import { C as isService, S as isOrgInScope, a as getDPoPJkt, b as isElevated, d as getScopeContext, f as getScopeContextMap, g as getUserId, m as getTeamId, n as PUBLIC_SCOPE, o as getMandate, p as getServiceScopes, u as getRequestScope, v as hasOrgAccess, x as isMember } from "./types-CoqIRrkY.mjs";
+import { t as MemoryCacheStore } from "./memory-qYSB7rMQ.mjs";
 import { randomUUID } from "node:crypto";
 //#region src/permissions/context.ts
 /**
@@ -1614,6 +1614,25 @@ function introspectRegistry(registry) {
 		for (const [action, check] of Object.entries(entry.permissions ?? {})) if (typeof check === "function") map[action] = introspectCheck(check);
 		for (const a of entry.actions ?? []) if (typeof a.permissions === "function") map[`action:${a.name}`] = introspectCheck(a.permissions);
 		for (const agg of entry.aggregations ?? []) if (typeof agg.permissions === "function") map[`agg:${agg.name}`] = introspectCheck(agg.permissions);
+		/**
+		* Custom routes that OPTED IN via `capability`.
+		*
+		* A route has no inherent name — only a method and a path — so it cannot be
+		* keyed automatically, and a path is not an identity. Without this, a
+		* resource whose gates live entirely on `routes[]` published nothing, was
+		* absent from the matrix, and every `can()` against it answered `false`:
+		* a UI gating on it hid the feature from everyone, admins included, and that
+		* reads as broken permissions rather than an unpublished key.
+		*
+		* The key is BARE, alongside `list`/`get`/`create`, so a consumer never has
+		* to know whether a verb is a route, an action or a CRUD slot.
+		*/
+		for (const route of entry.customRoutes ?? []) {
+			const key = route.capability;
+			if (key === void 0 || typeof route.permissions !== "function") continue;
+			if (map[key] !== void 0) throw new Error(`[arc] permission-matrix collision on resource "${entry.name}": route ${route.method} ${route.path} declares capability "${key}", which is already published by a CRUD slot, action or another route. Rename the route's \`capability\`.`);
+			map[key] = introspectCheck(route.permissions);
+		}
 		if (Object.keys(map).length > 0) modules[entry.name] = map;
 	}
 	return modules;

package/dist/{pipe-ELHCP3zj.mjs → pipe-BzzoEhHj.mjs}

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
-import { r as ForbiddenError } from "./errors-Bh1KK5ps.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { r as ForbiddenError } from "./errors-Cd_yy7aW.mjs";
 //#region src/pipeline/pipe.ts
 /**
 * Compose pipeline steps into an ordered array.

package/dist/pipeline/index.d.mts

@@ -1,5 +1,5 @@
 
-import { Ct as PipelineStep, Rt as IControllerResponse, St as PipelineContext, _t as Guard, bt as OperationFilter, vt as Interceptor, wt as Transform, xt as PipelineConfig, yt as NextFunction } from "../index-CpzxqePp.mjs";
+import { Ct as PipelineStep, Fn as IControllerResponse, St as PipelineContext, _t as Guard, bt as OperationFilter, vt as Interceptor, wt as Transform, xt as PipelineConfig, yt as NextFunction } from "../index-BcR2bFZQ.mjs";
 //#region src/pipeline/guard.d.ts
 interface GuardOptions {
   operations?: OperationFilter;

package/dist/pipeline/index.mjs

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
-import { n as pipe, t as executePipeline } from "../pipe-ELHCP3zj.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { n as pipe, t as executePipeline } from "../pipe-BzzoEhHj.mjs";
 //#region src/pipeline/guard.ts
 /**
 * Create a named guard.

package/dist/{pipeline-CPA-jx0M.mjs → pipeline-q69DZzgG.mjs}

@@ -1,9 +1,9 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
-import { n as getUserRoles } from "./userHelpers-BNsOXzOd.mjs";
-import { b as isElevated, n as PUBLIC_SCOPE, x as isMember } from "./types-DXYX7dIR.mjs";
-import { i as resolveEffectiveRoles, t as applyFieldReadPermissions } from "./fields-DEi65pGj.mjs";
-import { t as executePipeline } from "./pipe-ELHCP3zj.mjs";
-import { t as buildRequestScopeProjection } from "./projection-CjHhM5W1.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { n as getUserRoles } from "./userHelpers-CWF5pbZD.mjs";
+import { b as isElevated, n as PUBLIC_SCOPE, x as isMember } from "./types-CoqIRrkY.mjs";
+import { i as resolveEffectiveRoles, t as applyFieldReadPermissions } from "./fields-CojeUkS4.mjs";
+import { t as executePipeline } from "./pipe-BzzoEhHj.mjs";
+import { t as buildRequestScopeProjection } from "./projection-BKM0Ui-s.mjs";
 import { isPaginatedResult, toCanonicalList } from "@classytic/repo-core/pagination";
 //#region src/core/fastifyAdapter.ts
 /** Type guard for Mongoose-like documents with toObject() */

package/dist/plugins/index.d.mts

@@ -1,10 +1,10 @@
 
-import { At as RouteDefinition, J as PresetHook, Q as MiddlewareConfig, et as RouteSchemaOptions } from "../index-CpzxqePp.mjs";
-import { l as AnyRecord } from "../types-B7XeLEgK.mjs";
-import { i as errorHandlerPlugin, n as ErrorMapper, r as defaultIsDuplicateKeyError, t as ErrorHandlerOptions } from "../errorHandler-CpYUJmPA.mjs";
-import { _ as HealthCheck, b as healthPlugin, f as ScheduleDefinition, g as schedulesPlugin, h as _default$7, m as SchedulesPluginOptions, p as ScheduleStats, v as HealthOptions, y as _default$3 } from "../types-CT5vu6M0.mjs";
-import { a as arcCorePlugin, i as _default, n as ArcCorePluginOptions, r as PluginMeta, t as ArcCore } from "../fastify-augmentation-BppG5bMT.mjs";
-import { _ as CachingRule, a as MetricsCollector, c as metricsPlugin, d as _default$5, f as realtimePlugin, g as CachingOptions, h as ssePlugin, i as MetricEntry, l as ChangeOperation, m as _default$8, n as _default$9, o as MetricsOptions, p as SSEOptions, r as versioningPlugin, s as _default$4, t as VersioningOptions, u as RealtimeOptions, v as _default$1, y as cachingPlugin } from "../versioning-D_rhHfZm.mjs";
+import { t as AnyRecord } from "../base-Csjc2oF-.mjs";
+import { At as RouteDefinition, J as PresetHook, Q as MiddlewareConfig, et as RouteSchemaOptions } from "../index-BcR2bFZQ.mjs";
+import { i as errorHandlerPlugin, n as ErrorMapper, r as defaultIsDuplicateKeyError, t as ErrorHandlerOptions } from "../errorHandler-DI5AN2b5.mjs";
+import { _ as HealthCheck, b as healthPlugin, f as ScheduleDefinition, g as schedulesPlugin, h as _default$7, m as SchedulesPluginOptions, p as ScheduleStats, v as HealthOptions, y as _default$3 } from "../types-BcTumAz_.mjs";
+import { a as arcCorePlugin, i as _default, n as ArcCorePluginOptions, r as PluginMeta, t as ArcCore } from "../fastify-augmentation-DVsTAy6X.mjs";
+import { _ as CachingRule, a as MetricsCollector, c as metricsPlugin, d as _default$5, f as realtimePlugin, g as CachingOptions, h as ssePlugin, i as MetricEntry, l as ChangeOperation, m as _default$8, n as _default$9, o as MetricsOptions, p as SSEOptions, r as versioningPlugin, s as _default$4, t as VersioningOptions, u as RealtimeOptions, v as _default$1, y as cachingPlugin } from "../versioning-DEs-_hFi.mjs";
 import { t as TracingOptions } from "../tracing-Dro5eH6j.mjs";
 import { PaginatedResult } from "@classytic/repo-core/pagination";
 import { FastifyInstance, FastifyPluginAsync } from "fastify";

package/dist/plugins/index.mjs

@@ -1,19 +1,19 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
-import { p as MUTATION_OPERATIONS } from "../constants-J99LGTJI.mjs";
-import { c as getOrgId } from "../types-DXYX7dIR.mjs";
-import { n as requestContext } from "../requestContext-B6vQF-sy.mjs";
-import { t as hasEvents } from "../typeGuards-B_5-hKjJ.mjs";
-import { t as HookSystem } from "../HookSystem-vimw5D7Z.mjs";
-import { t as ResourceRegistry } from "../ResourceRegistry-BVr7PgA0.mjs";
-import { a as requestIdPlugin, i as createRequestIdGenerator, n as health_default, o as requestId_default, s as sanitizeRequestId, t as healthPlugin } from "../health-5XnTa2uo.mjs";
-import { n as caching_default, t as cachingPlugin } from "../caching-DFJqHyFs.mjs";
-import { n as errorHandlerPlugin, t as defaultIsDuplicateKeyError } from "../errorHandler-B2AZUJUj.mjs";
-import { n as metrics_default, t as metricsPlugin } from "../metrics-DdQL8syd.mjs";
-import { n as realtime_default, t as realtimePlugin } from "../realtime-DVvVZZFz.mjs";
-import { t as replyHelpersPlugin } from "../replyHelpers-DS-P0b32.mjs";
-import { n as schedules_default, t as schedulesPlugin } from "../schedules-C2Q3uv2d.mjs";
-import { n as sse_default, t as ssePlugin } from "../sse-B9P4Y-UI.mjs";
-import { n as versioning_default, t as versioningPlugin } from "../versioning-CKv2jz_U.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { p as MUTATION_OPERATIONS } from "../constants-BxCoxmiN.mjs";
+import { c as getOrgId } from "../types-CoqIRrkY.mjs";
+import { n as requestContext } from "../requestContext-uYE35JxI.mjs";
+import { t as hasEvents } from "../typeGuards-jjKJDN13.mjs";
+import { t as HookSystem } from "../HookSystem-DqXkMXkB.mjs";
+import { t as ResourceRegistry } from "../ResourceRegistry-DoALUlOO.mjs";
+import { a as requestIdPlugin, i as createRequestIdGenerator, n as health_default, o as requestId_default, s as sanitizeRequestId, t as healthPlugin } from "../health-CasG2A28.mjs";
+import { n as caching_default, t as cachingPlugin } from "../caching-BcGmvnHh.mjs";
+import { n as errorHandlerPlugin, t as defaultIsDuplicateKeyError } from "../errorHandler-C7xBqHsI.mjs";
+import { n as metrics_default, t as metricsPlugin } from "../metrics-D7uchLjN.mjs";
+import { n as realtime_default, t as realtimePlugin } from "../realtime-G1TC6Yzc.mjs";
+import { t as replyHelpersPlugin } from "../replyHelpers-BSBVCwL3.mjs";
+import { n as schedules_default, t as schedulesPlugin } from "../schedules-CAcZgia0.mjs";
+import { n as sse_default, t as ssePlugin } from "../sse-Cf0jUHsh.mjs";
+import { n as versioning_default, t as versioningPlugin } from "../versioning-rZbyLVD-.mjs";
 import fp from "fastify-plugin";
 //#region src/core/arcCorePlugin.ts
 const arcCorePlugin = async (fastify, opts = {}) => {

package/dist/plugins/response-cache.mjs

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
-import { t as hasEvents } from "../typeGuards-B_5-hKjJ.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { t as hasEvents } from "../typeGuards-jjKJDN13.mjs";
 import fp from "fastify-plugin";
 //#region src/plugins/response-cache.ts
 /**

package/dist/plugins/tracing-entry.mjs

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
 import { createRequire } from "node:module";
 import fp from "fastify-plugin";
 //#region src/plugins/tracing.ts
@@ -59,7 +59,7 @@ try {
 function createTracerProvider(options) {
 	if (!isAvailable || !NodeTracerProvider || !BatchSpanProcessor || !OTLPTraceExporter) return null;
 	const { serviceName = "@classytic/arc", serviceVersion, exporterUrl = "http://localhost:4318/v1/traces" } = options;
-	const resolvedVersion = serviceVersion ?? "2.32.0";
+	const resolvedVersion = serviceVersion ?? "2.34.0";
 	const exporter = new OTLPTraceExporter({ url: exporterUrl });
 	const provider = new NodeTracerProvider({ resource: { attributes: {
 		"service.name": serviceName,

package/dist/{pluralize-C2ZkKbsn.mjs → pluralize-B7xf8qZF.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
 //#region src/utils/pluralize.ts
 /**
 * Lightweight English pluralization for the Arc CLI.

package/dist/{preloadResources-CDs87fTw.mjs → preloadResources-BkyqeTDz.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
 //#region src/factory/preloadResources.ts
 /**
 * Normalize an eager `import.meta.glob` result into a `ResourceLike[]`.

package/dist/{preloadResources-T1hmlTEZ.d.mts → preloadResources-g07ldtzh.d.mts}

@@ -1,15 +1,15 @@
 
-import { Gt as Authenticator } from "./index-CpzxqePp.mjs";
+import { It as Authenticator } from "./index-BcR2bFZQ.mjs";
 import { r as CacheStore } from "./interface-BOk3YnTz.mjs";
 import { n as ElevationOptions } from "./elevation-BXCfVcNG.mjs";
-import { a as EventTransport } from "./EventTransport-2uVV34WU.mjs";
+import { a as EventTransport } from "./EventTransport-BEVP50ka.mjs";
 import { t as ExternalOpenApiPaths } from "./externalPaths-CmGOxOtD.mjs";
 import { r as QueryCachePluginOptions } from "./queryCachePlugin-BzqxconG.mjs";
-import { t as ErrorHandlerOptions } from "./errorHandler-CpYUJmPA.mjs";
-import { l as ResourceLike, m as SchedulesPluginOptions, n as ArcModuleInput, v as HealthOptions } from "./types-CT5vu6M0.mjs";
-import "./index-ZWhLTp_s.mjs";
-import { t as EventPluginOptions } from "./eventPlugin-GF5nnBIq.mjs";
-import { g as CachingOptions, o as MetricsOptions, p as SSEOptions, t as VersioningOptions, u as RealtimeOptions } from "./versioning-D_rhHfZm.mjs";
+import { t as ErrorHandlerOptions } from "./errorHandler-DI5AN2b5.mjs";
+import { l as ResourceLike, m as SchedulesPluginOptions, n as ArcModuleInput, v as HealthOptions } from "./types-BcTumAz_.mjs";
+import "./index-C5NnMEKF.mjs";
+import { t as EventPluginOptions } from "./eventPlugin-DSNEZWfV.mjs";
+import { g as CachingOptions, o as MetricsOptions, p as SSEOptions, t as VersioningOptions, u as RealtimeOptions } from "./versioning-DEs-_hFi.mjs";
 import { r as IdempotencyStore } from "./interface-DEWNOMza.mjs";
 import { FastifyInstance, FastifyPluginAsync, FastifyReply, FastifyRequest, FastifyServerOptions } from "fastify";
 //#region src/factory/types/assets.d.ts
@@ -463,6 +463,29 @@ interface CreateAppOptions {
    *   would be instance-local.
    */
   runtime?: "memory" | "distributed";
+  /**
+   * Deployment ROLE of this process (topology plan, Phase 2). Decides which
+   * async machinery mounts; default `'all'` is the single-process case and
+   * changes nothing.
+   *
+   * - `'api'` / `'worker'` — no module schedule arms run here (the outbox
+   *   relay arm included); a worker fleet or scheduler deployment owns them.
+   *   Register `jobsPlugin({ mode })` to match ('api' → 'producer').
+   * - `'relay'` — ONLY `kind: 'relay'` schedule arms run (the outbox
+   *   relays); declaring HTTP `resources` is boot-fatal.
+   * - `'scheduler'` — every schedule arm runs; HTTP resources boot-fatal.
+   * - `'all'` — everything (default).
+   *
+   * A skipped arm is logged by name at boot so a misdeployed process is
+   * legible from its first lines.
+   *
+   * `createWorker` is the paved road for headless processes and forwards
+   * this option untouched — one axis, not two mechanisms. Its default stays
+   * `'all'` (its 2.23 contract: the headless process runs everything
+   * non-HTTP); pass `role: 'worker'` there when a dedicated scheduler/relay
+   * deployment owns the arms.
+   */
+  role?: "api" | "worker" | "relay" | "scheduler" | "all";
   /**
    * Store and transport instances for runtime profile validation.
    * When `runtime` is `'distributed'`, Arc validates that these are

package/dist/presets/filesUpload.d.mts

@@ -1,7 +1,7 @@
 
-import { Y as PresetResult } from "../index-CpzxqePp.mjs";
 import { i as RequestScope } from "../types-ChuShpCP.mjs";
-import { r as PermissionCheck } from "../types-B7XeLEgK.mjs";
+import { l as PermissionCheck } from "../base-Csjc2oF-.mjs";
+import { Y as PresetResult } from "../index-BcR2bFZQ.mjs";
 import { a as StorageReadResult, i as StorageReadRange, n as StorageContext, o as StorageUploadInput, r as StorageFile, t as Storage } from "../storage-Cx9Sz3Ou.mjs";
 //#region src/presets/filesUpload.d.ts
 interface FilesUploadPresetRoutes {

package/dist/presets/filesUpload.mjs

@@ -1,8 +1,8 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
-import { i as NotFoundError, u as ValidationError } from "../errors-Bh1KK5ps.mjs";
-import { c as getOrgId, g as getUserId } from "../types-DXYX7dIR.mjs";
-import { B as requireAuth, F as allowPublic } from "../permissions-Dl_m0NCe.mjs";
-import { t as multipartBody } from "../multipartBody-BnkBLN7v.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { i as NotFoundError, u as ValidationError } from "../errors-Cd_yy7aW.mjs";
+import { c as getOrgId, g as getUserId } from "../types-CoqIRrkY.mjs";
+import { B as requireAuth, F as allowPublic } from "../permissions-CP47jdi7.mjs";
+import { t as multipartBody } from "../multipartBody-4w-S3-PU.mjs";
 //#region src/presets/filesUpload.ts
 const DEFAULT_FIELD_NAME = "file";
 const DEFAULT_MAX_FILE_SIZE = 10485760;

package/dist/presets/index.d.mts

@@ -1,6 +1,6 @@
 
-import { Rt as IControllerResponse, U as ResourceConfig, Y as PresetResult, d as PaginationResult, zt as IRequestContext } from "../index-CpzxqePp.mjs";
-import { l as AnyRecord } from "../types-B7XeLEgK.mjs";
+import { t as AnyRecord } from "../base-Csjc2oF-.mjs";
+import { Fn as IControllerResponse, In as IRequestContext, U as ResourceConfig, Y as PresetResult, d as PaginationResult } from "../index-BcR2bFZQ.mjs";
 import { FilesUploadPresetOptions, FilesUploadPresetPermissions, FilesUploadPresetRoutes, filesUploadPreset } from "./filesUpload.mjs";
 import { MultiTenantOptions, TenantFieldSpec, multiTenantPreset } from "./multiTenant.mjs";
 import { SearchHandler, SearchPresetOptions, SearchRouteConfig, searchPreset } from "./search.mjs";

package/dist/presets/index.mjs

@@ -1,6 +1,6 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
 import { multiTenantPreset } from "./multiTenant.mjs";
-import { a as registerPreset, c as auditedPreset, d as ownedByUserPreset, i as getPreset, l as softDeletePreset, n as flexibleMultiTenantPreset, o as treePreset, r as getAvailablePresets, s as bulkPreset, t as applyPresets, u as slugLookupPreset } from "../presets-Dntd_pUO.mjs";
+import { a as registerPreset, c as auditedPreset, d as ownedByUserPreset, i as getPreset, l as softDeletePreset, n as flexibleMultiTenantPreset, o as treePreset, r as getAvailablePresets, s as bulkPreset, t as applyPresets, u as slugLookupPreset } from "../presets-BAPijK_A.mjs";
 import { filesUploadPreset } from "./filesUpload.mjs";
 import { searchPreset } from "./search.mjs";
 export { applyPresets, auditedPreset, bulkPreset, filesUploadPreset, flexibleMultiTenantPreset, getAvailablePresets, getPreset, multiTenantPreset, ownedByUserPreset, registerPreset, searchPreset, slugLookupPreset, softDeletePreset, treePreset };

package/dist/presets/multiTenant.d.mts

@@ -1,5 +1,5 @@
 
-import { X as CrudRouteKey, Y as PresetResult } from "../index-CpzxqePp.mjs";
+import { X as CrudRouteKey, Y as PresetResult } from "../index-BcR2bFZQ.mjs";
 //#region src/presets/multiTenant.d.ts
 /**
  * One tenant dimension for multi-field filtering. Discriminated by source:

package/dist/presets/multiTenant.mjs

@@ -1,6 +1,6 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
-import "../constants-J99LGTJI.mjs";
-import { b as isElevated, c as getOrgId, d as getScopeContext, m as getTeamId, u as getRequestScope, v as hasOrgAccess } from "../types-DXYX7dIR.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import "../constants-BxCoxmiN.mjs";
+import { b as isElevated, c as getOrgId, d as getScopeContext, m as getTeamId, u as getRequestScope, v as hasOrgAccess } from "../types-CoqIRrkY.mjs";
 //#region src/presets/multiTenant.ts
 /**
 * Resolve a single TenantFieldSpec against the current scope.

package/dist/presets/search.d.mts

@@ -1,6 +1,6 @@
 
-import { At as RouteDefinition, Pt as ControllerHandler, Y as PresetResult, jt as RouteMcpConfig } from "../index-CpzxqePp.mjs";
-import { r as PermissionCheck } from "../types-B7XeLEgK.mjs";
+import { l as PermissionCheck } from "../base-Csjc2oF-.mjs";
+import { At as RouteDefinition, Y as PresetResult, jn as ControllerHandler, jt as RouteMcpConfig } from "../index-BcR2bFZQ.mjs";
 //#region src/presets/search.d.ts
 /**
  * Search Preset — backend-agnostic search / vector / embed routes

package/dist/presets/search.mjs

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
-import { B as requireAuth, F as allowPublic } from "../permissions-Dl_m0NCe.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { B as requireAuth, F as allowPublic } from "../permissions-CP47jdi7.mjs";
 //#region src/presets/search.ts
 const BUILTINS = [
 	{

package/dist/{presets-Dntd_pUO.mjs → presets-BAPijK_A.mjs}

@@ -1,7 +1,7 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
-import { l as UnauthorizedError } from "./errors-Bh1KK5ps.mjs";
-import { b as isElevated, n as PUBLIC_SCOPE } from "./types-DXYX7dIR.mjs";
-import { B as requireAuth, F as allowPublic, U as requireRoles } from "./permissions-Dl_m0NCe.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { l as UnauthorizedError } from "./errors-Cd_yy7aW.mjs";
+import { b as isElevated, n as PUBLIC_SCOPE } from "./types-CoqIRrkY.mjs";
+import { B as requireAuth, F as allowPublic, U as requireRoles } from "./permissions-CP47jdi7.mjs";
 import { multiTenantPreset } from "./presets/multiTenant.mjs";
 //#region src/presets/ownedByUser.ts
 /**

package/dist/projection-BKM0Ui-s.mjs

@@ -0,0 +1,42 @@
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { c as getOrgId, f as getScopeContextMap, g as getUserId, m as getTeamId, x as isMember } from "./types-CoqIRrkY.mjs";
+//#region src/scope/projection.ts
+/**
+* Compute the request-scope projection. Returns `undefined` when no
+* scope is attached (public / unscoped routes) so hosts can idiomatically
+* write `ctx.scope?.organizationId` without a double-null check.
+*/
+function buildRequestScopeProjection(scope) {
+	if (!scope) return void 0;
+	return {
+		organizationId: getOrgId(scope),
+		userId: getUserId(scope),
+		orgRoles: isMember(scope) ? scope.orgRoles : void 0,
+		teamId: getTeamId(scope),
+		context: freezeContext(getScopeContextMap(scope))
+	};
+}
+/**
+* Hand out a FROZEN COPY of the scope's context, never the live map.
+*
+* `Readonly<Record<string, string>>` is erased at runtime, so the annotation
+* alone protected nothing: `getScopeContextMap` returns the scope's own
+* object, and a hook doing `ctx.scope.context.branchId = 'other'` mutated the
+* caller's REAL scope. That matters because `requireScopeContext()` authorises
+* against exactly these values — a later permission check in the same request
+* would read the tampered dimension and allow what it should refuse.
+*
+* A copy rather than freezing in place: the map belongs to whoever built the
+* scope (a host auth function), and freezing someone else's object as a side
+* effect of reading it is a surprise a library should not spring. Copying also
+* makes the guarantee deterministic instead of "frozen once something happens
+* to call the accessor".
+*
+* ESM is always strict mode, so a write to the frozen copy THROWS rather than
+* failing silently — the mistake surfaces where it is made.
+*/
+function freezeContext(ctx) {
+	return ctx === void 0 ? void 0 : Object.freeze({ ...ctx });
+}
+//#endregion
+export { buildRequestScopeProjection as t };

package/dist/{queryCachePlugin-Dhps-Ldt.mjs → queryCachePlugin-DhsZ0ZIc.mjs}

@@ -1,8 +1,8 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
-import { t as __exportAll } from "./rolldown-runtime-BhflRrBs.mjs";
-import { t as hasEvents } from "./typeGuards-B_5-hKjJ.mjs";
-import { i as versionKey, r as tagVersionKey } from "./keys-B-HBTGXl.mjs";
-import { t as MemoryCacheStore } from "./memory-DsuWnj4T.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { t as __exportAll } from "./rolldown-runtime-DNg-KNCk.mjs";
+import { t as hasEvents } from "./typeGuards-jjKJDN13.mjs";
+import { i as versionKey, r as tagVersionKey } from "./keys-WeKvY1dE.mjs";
+import { t as MemoryCacheStore } from "./memory-qYSB7rMQ.mjs";
 import fp from "fastify-plugin";
 //#region src/cache/QueryCache.ts
 var QueryCache = class {
@@ -110,6 +110,7 @@ const CRUD_SUFFIXES = /* @__PURE__ */ new Set([
 	"deleted"
 ]);
 const queryCachePluginImpl = async (fastify, opts = {}) => {
+	const ownsStore = opts.store === void 0;
 	const store = opts.store ?? new MemoryCacheStore();
 	const queryCache = new QueryCache(store);
 	const defaults = {
@@ -124,20 +125,61 @@ const queryCachePluginImpl = async (fastify, opts = {}) => {
 	});
 	fastify.addHook("onReady", async () => {
 		if (!hasEvents(fastify)) return;
+		/**
+		* Auto-invalidate on CRUD events — `product.created` bumps `product`, and
+		* `catalog:category.created` bumps BOTH `catalog:category` and `category`.
+		*
+		* ## Why the namespace has to be stripped
+		*
+		* This derived the resource as "everything before the last dot", which is right for
+		* an arc-native event (`product.created`) and wrong for every NAMESPACED one. Each
+		* `@classytic/*` kernel publishes `<domain>:<entity>.<verb>` —
+		* `catalog:category.created`, `revenue:payment.verified`,
+		* `access:entitlement.granted` — so the resource came out as `catalog:category` and
+		* the version bumped at `arc:ver:catalog:category`.
+		*
+		* Readers use the arc RESOURCE NAME: `buildQueryKey(resource, …)` folds in
+		* `getResourceVersion("category")`, i.e. `arc:ver:category`. Bump and read
+		* therefore used different keys and **auto-invalidation never fired for any
+		* kernel-backed resource** — no error, no warning, just caches serving stale data
+		* for a full `staleTime`. It was invisible precisely because the feature looks
+		* wired: the plugin is registered, events flow, a version does get bumped.
+		*
+		* ## Both names are bumped, on purpose
+		*
+		* Two namespaces could each own an `<entity>` of the same name (`catalog:category`
+		* and a hypothetical `cms:category`), so stripping is ambiguous. The asymmetry
+		* decides it: **over-invalidation costs a cache miss, under-invalidation serves
+		* wrong data.** Bumping both the qualified and the bare name means an unrelated
+		* namespace can at worst force an extra reload, and never a stale read. That is the
+		* same reasoning applied everywhere else here — a permissive default is only
+		* acceptable when the failure it causes is loud and cheap.
+		*
+		* By the same argument the split is UNCONDITIONAL: any `:` in the qualified
+		* name yields a bare candidate, including when the prefix itself contains a
+		* dot (`some.thing:entity` bumps `entity` too). Narrowing that would remove
+		* invalidations, which is the one direction that can serve wrong data.
+		*/
 		await fastify.events.subscribe("*", async (event) => {
 			const type = event.type;
 			const dotIdx = type.lastIndexOf(".");
 			if (dotIdx === -1) return;
 			const suffix = type.slice(dotIdx + 1);
 			if (!CRUD_SUFFIXES.has(suffix)) return;
-			const resource = type.slice(0, dotIdx);
-			await queryCache.bumpResourceVersion(resource);
+			const qualified = type.slice(0, dotIdx);
+			await queryCache.bumpResourceVersion(qualified);
+			const colonIdx = qualified.lastIndexOf(":");
+			if (colonIdx === -1) return;
+			const bare = qualified.slice(colonIdx + 1);
+			if (bare.length === 0 || bare === qualified) return;
+			await queryCache.bumpResourceVersion(bare);
 		});
 		for (const rule of crossResourceRules) await fastify.events.subscribe(rule.pattern, async () => {
 			for (const tag of rule.tags) await queryCache.bumpTagVersion(tag);
 		});
 	});
 	fastify.addHook("onClose", async () => {
+		if (!ownsStore) return;
 		if ("close" in store && typeof store.close === "function") await store.close();
 	});
 };

package/dist/{rateLimit-C7mmAGs3.mjs → rateLimit-D4-ASwsI.mjs}

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
-import { n as requestContext } from "./requestContext-B6vQF-sy.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { n as requestContext } from "./requestContext-uYE35JxI.mjs";
 //#region src/core/middlewares/arcDecorator.ts
 /**
 * Build the `arcDecorator` preHandler for a resource.

package/dist/{rateLimitKey-CccEFBfk.mjs → rateLimitKey-XngqVNEV.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
 //#region src/scope/rateLimitKey.ts
 function createTenantKeyGenerator(opts) {
 	if (opts?.strategy) return opts.strategy;

package/dist/{realtime-DVvVZZFz.mjs → realtime-G1TC6Yzc.mjs}

@@ -1,13 +1,13 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
-import { t as __exportAll } from "./rolldown-runtime-BhflRrBs.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { t as __exportAll } from "./rolldown-runtime-DNg-KNCk.mjs";
 import { arcLog } from "./logger/index.mjs";
-import { n as evaluateAndApplyPermission } from "./authorizationDecision-__T3EJDA.mjs";
-import { n as getUserRoles } from "./userHelpers-BNsOXzOd.mjs";
-import { c as getOrgId } from "./types-DXYX7dIR.mjs";
-import { t as simpleEqualityMatcher } from "./simpleEqualityMatcher-C4KiMWUa.mjs";
-import { t as applyFieldReadPermissions } from "./fields-DEi65pGj.mjs";
-import { a as promoteStreamTokenToHeader } from "./streaming-DPZdQmDz.mjs";
-import { t as openSseStream } from "./sseStream-B3zb_d1h.mjs";
+import { n as evaluateAndApplyPermission } from "./authorizationDecision-CMMLWmuZ.mjs";
+import { n as getUserRoles } from "./userHelpers-CWF5pbZD.mjs";
+import { c as getOrgId } from "./types-CoqIRrkY.mjs";
+import { t as simpleEqualityMatcher } from "./simpleEqualityMatcher-Se8VrsaP.mjs";
+import { t as applyFieldReadPermissions } from "./fields-CojeUkS4.mjs";
+import { a as promoteStreamTokenToHeader } from "./streaming-DsT1B5zJ.mjs";
+import { t as openSseStream } from "./sseStream-Bvpi-UXQ.mjs";
 import fp from "fastify-plugin";
 //#region src/plugins/realtime.ts
 var realtime_exports = /* @__PURE__ */ __exportAll({

package/dist/{redis-stream-qN6A-RFv.d.mts → redis-stream-mwLWlfHG.d.mts}

@@ -1,5 +1,5 @@
 
-import { a as EventTransport, i as EventLogger, n as DomainEvent, r as EventHandler } from "./EventTransport-2uVV34WU.mjs";
+import { a as EventTransport, i as EventLogger, n as DomainEvent, r as EventHandler } from "./EventTransport-BEVP50ka.mjs";
 //#region src/events/transports/redis-stream.d.ts
 interface RedisStreamLike {
   xadd(key: string, id: string, ...fieldValues: string[]): Promise<string | null>;

package/dist/{registerRoute-B_QrjYZS.mjs → registerRoute-Ba8v0PCa.mjs}

@@ -1,7 +1,7 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
-import { n as evaluateAndApplyPermission } from "./authorizationDecision-__T3EJDA.mjs";
-import { f as createError } from "./errors-Bh1KK5ps.mjs";
-import { u as getRequestScope } from "./types-DXYX7dIR.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { n as evaluateAndApplyPermission } from "./authorizationDecision-CMMLWmuZ.mjs";
+import { f as createError } from "./errors-Cd_yy7aW.mjs";
+import { u as getRequestScope } from "./types-CoqIRrkY.mjs";
 //#region src/core/middlewares/permissions.ts
 /**
 * Build a PermissionContext from a Fastify request. Extracted so the CRUD

package/dist/registry/index.d.mts

@@ -1,8 +1,8 @@
 
-import { K as ResolvedTenantPurge, R as RegisterOptions, V as ResourceDefinition, X as CrudRouteKey, k as IntrospectionPluginOptions, p as RegistryEntry, z as ResourceRegistry } from "../index-CpzxqePp.mjs";
-import "../fastify-augmentation-BppG5bMT.mjs";
-import { FastifyPluginAsync } from "fastify";
+import { K as ResolvedTenantPurge, R as RegisterOptions, V as ResourceDefinition, X as CrudRouteKey, k as IntrospectionPluginOptions, p as RegistryEntry, z as ResourceRegistry } from "../index-BcR2bFZQ.mjs";
+import "../fastify-augmentation-DVsTAy6X.mjs";
 import { TenantPurgeProgress, TenantPurgeStrategy } from "@classytic/repo-core/repository";
+import { FastifyPluginAsync } from "fastify";
 //#region src/registry/assertNoTenantData.d.ts
 interface AssertNoTenantDataOptions {
   readonly organizationId: string;

package/dist/registry/index.mjs

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
-import { a as cascadeDeleteForOrganization, c as assertNoTenantData, i as introspectionPlugin_default, n as buildResourceManifestFromRegistry, o as getCascadingResources, r as introspectionPlugin, s as getCascadingResourcesWithMetadata, t as buildResourceManifest } from "../registry-DqUmzA9W.mjs";
-import { t as ResourceRegistry } from "../ResourceRegistry-BVr7PgA0.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { a as cascadeDeleteForOrganization, c as assertNoTenantData, i as introspectionPlugin_default, n as buildResourceManifestFromRegistry, o as getCascadingResources, r as introspectionPlugin, s as getCascadingResourcesWithMetadata, t as buildResourceManifest } from "../registry-CLxCR5LF.mjs";
+import { t as ResourceRegistry } from "../ResourceRegistry-DoALUlOO.mjs";
 export { ResourceRegistry, assertNoTenantData, buildResourceManifest, buildResourceManifestFromRegistry, cascadeDeleteForOrganization, getCascadingResources, getCascadingResourcesWithMetadata, introspectionPlugin_default as introspectionPlugin, introspectionPlugin as introspectionPluginFn };

package/dist/{registry-DqUmzA9W.mjs → registry-CLxCR5LF.mjs}

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
-import { t as CRUD_OPERATIONS } from "./constants-J99LGTJI.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { t as CRUD_OPERATIONS } from "./constants-BxCoxmiN.mjs";
 import fp from "fastify-plugin";
 //#region src/registry/assertNoTenantData.ts
 /**