@classytic/arc 2.32.0 → 2.34.0

package/dist/{renewingLease-BpP9wwj7.mjs → renewingLease-BnWtbA2U.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
 //#region src/lock/renewingLease.ts
 /**
 * Start renewing an ALREADY-ACQUIRED lease. The caller performed the

package/dist/{replyHelpers-DS-P0b32.mjs → replyHelpers-BSBVCwL3.mjs}

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
-import { t as __exportAll } from "./rolldown-runtime-BhflRrBs.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { t as __exportAll } from "./rolldown-runtime-DNg-KNCk.mjs";
 import { toCanonicalList } from "@classytic/repo-core/pagination";
 import fp from "fastify-plugin";
 //#region src/plugins/replyHelpers.ts

package/dist/repositoryFilter-BANpz6BX.mjs

@@ -0,0 +1,78 @@
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { arcLog } from "./logger/index.mjs";
+import { policyRecordToFilter } from "@classytic/repo-core/filter";
+//#region src/core/repositoryFilter.ts
+const NATIVE_FILTER_DIALECT = Symbol.for("@classytic/arc/native-filter-dialect");
+/**
+* Mark a server-owned policy as intentionally adapter-native. This is an
+* explicit escape hatch for semantics absent from repo-core's universal IR
+* (for example MongoDB `$elemMatch`). Never apply it to client input.
+*/
+function nativePolicyFilter(dialect, record) {
+	return Object.freeze({
+		...record,
+		[NATIVE_FILTER_DIALECT]: dialect
+	});
+}
+function nativeDialects(value, found = /* @__PURE__ */ new Set()) {
+	if (value === null || typeof value !== "object") return found;
+	const dialect = value[NATIVE_FILTER_DIALECT];
+	if (typeof dialect === "string") found.add(dialect);
+	if (Array.isArray(value)) for (const entry of value) nativeDialects(entry, found);
+	else for (const entry of Object.values(value)) nativeDialects(entry, found);
+	return found;
+}
+function stripNativeMarkers(value) {
+	if (Array.isArray(value)) return value.map(stripNativeMarkers);
+	if (value === null || typeof value !== "object" || value instanceof Date) return value;
+	const out = {};
+	for (const [key, entry] of Object.entries(value)) out[key] = stripNativeMarkers(entry);
+	return out;
+}
+const log = arcLog("repository-filter");
+let warnedUnconvertible = false;
+/** True for a `{ $op: ... }` operator object (all keys `$`-prefixed). */
+function isOperatorObject(value) {
+	if (value === null || typeof value !== "object") return false;
+	if (Array.isArray(value) || value instanceof Date) return false;
+	const keys = Object.keys(value);
+	return keys.length > 0 && keys.some((k) => k.startsWith("$"));
+}
+/**
+* Does this compound filter contain any `$`-operator (top-level logical like
+* `$and`/`$or`, or a field operator object like `{ $in: [...] }`)? If not, it is
+* pure flat equality and portable as-is.
+*/
+function filterHasDollarOperator(record) {
+	for (const [key, value] of Object.entries(record)) {
+		if (key.startsWith("$")) return true;
+		if (isOperatorObject(value)) return true;
+	}
+	return false;
+}
+/**
+* Normalize a compound query/policy filter for the repository layer. Flat
+* equality records pass through unchanged; anything carrying `$`-operators is
+* converted to repo-core {@link Filter} IR so semantics stay explicit. Common
+* operators compile identically across kits; capability-specific operators
+* such as array-element matching fail loudly on adapters that cannot model them.
+*/
+function toRepositoryFilter(record) {
+	const dialects = nativeDialects(record);
+	if (dialects.size > 0) {
+		if (dialects.size > 1) throw new Error(`Cannot compose native policy-filter dialects: ${[...dialects].sort().join(", ")}`);
+		return stripNativeMarkers(record);
+	}
+	if (!filterHasDollarOperator(record)) return record;
+	try {
+		return policyRecordToFilter(record);
+	} catch (err) {
+		if (!warnedUnconvertible) {
+			warnedUnconvertible = true;
+			log.warn(`A \`\$\`-operator filter could not be normalized to portable Filter IR (operator outside arc's policy dialect). Passing the raw record to the repository — MongoKit handles it; non-Mongo kits may not. (${err instanceof Error ? err.message : String(err)})`);
+		}
+		return record;
+	}
+}
+//#endregion
+export { toRepositoryFilter as n, nativePolicyFilter as t };

package/dist/{requestContext-B6vQF-sy.mjs → requestContext-uYE35JxI.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
 import { AsyncLocalStorage } from "node:async_hooks";
 //#region src/context/requestContext.ts
 /**

package/dist/{rolldown-runtime-BhflRrBs.mjs → rolldown-runtime-DNg-KNCk.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
 import "node:module";
 //#region \0rolldown/runtime.js
 var __defProp = Object.defineProperty;

package/dist/runtimeCapabilities-Dm88DaTW.mjs

@@ -0,0 +1,49 @@
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+//#region src/utils/runtimeCapabilities.ts
+/**
+* `Symbol.for` so declarations from two arc copies in one dependency graph
+* land in ONE registry — same reasoning as `ARC_EVENT_TRANSPORT`. Not on the
+* public `fastify.arc` surface; the audit result is the product, not the list.
+*/
+const ARC_RUNTIME_CAPABILITIES = Symbol.for("arc.runtimeCapabilities");
+function registryOf(fastify) {
+	const holder = fastify;
+	if (!holder[ARC_RUNTIME_CAPABILITIES]) holder[ARC_RUNTIME_CAPABILITIES] = [];
+	return holder[ARC_RUNTIME_CAPABILITIES];
+}
+/**
+* Declare a runtime capability. Callable from ANY registration context —
+* arc's own plugins, host `plugins()` callbacks, module `plugins` phases —
+* which is the point: the audit sees what the constructor-time guard cannot.
+*/
+function declareRuntimeCapability(fastify, decl) {
+	registryOf(fastify).push(decl);
+}
+/**
+* The boot audit. Runs once at the end of `buildApp`, after every declarant.
+*
+* - `runtime: 'distributed'` + `durability: 'memory'` + not `accepted` →
+*   collected and THROWN as one error naming every violator (fixing them one
+*   boot at a time is the checklist experience this replaces).
+* - accepted memory declarations → one info line, so the topology decision is
+*   visible in the boot log it was made for.
+* - non-distributed runtimes → nothing to enforce; declarations still logged
+*   at debug for `arc doctor`-style tooling.
+*/
+function auditRuntimeCapabilities(fastify, runtime) {
+	const declarations = registryOf(fastify);
+	if (declarations.length === 0) return;
+	if (runtime !== "distributed") {
+		fastify.log.debug({ capabilities: declarations }, "[arc] runtime capabilities declared (no distributed profile — informational)");
+		return;
+	}
+	const violations = declarations.filter((d) => d.durability === "memory" && !d.accepted);
+	const acceptedMemory = declarations.filter((d) => d.durability === "memory" && d.accepted);
+	if (acceptedMemory.length > 0) fastify.log.info({ accepted: acceptedMemory.map((d) => d.subsystem) }, "[arc] per-process state accepted by design under runtime: 'distributed'");
+	if (violations.length > 0) {
+		const lines = violations.map((d) => `  - ${d.subsystem}${d.detail ? ` — ${d.detail}` : ""}`).join("\n");
+		throw new Error(`runtime: 'distributed' — ${violations.length} subsystem(s) hold PER-PROCESS state that multi-replica deployment breaks:\n${lines}\nWire a shared store for each, or — where per-process is genuinely intended — have the declarant pass \`accepted: true\` with a reason.`);
+	}
+}
+//#endregion
+export { declareRuntimeCapability as n, auditRuntimeCapabilities as t };

package/dist/{schedules-C2Q3uv2d.mjs → schedules-CAcZgia0.mjs}

@@ -1,6 +1,6 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
-import { t as __exportAll } from "./rolldown-runtime-BhflRrBs.mjs";
-import { t as startRenewingLease } from "./renewingLease-BpP9wwj7.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { t as __exportAll } from "./rolldown-runtime-DNg-KNCk.mjs";
+import { t as startRenewingLease } from "./renewingLease-BnWtbA2U.mjs";
 import fp from "fastify-plugin";
 //#region src/plugins/schedules.ts
 var schedules_exports = /* @__PURE__ */ __exportAll({

package/dist/{schemaConverter-Crjvczi_.mjs → schemaConverter-XH1RZRyu.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
 import { arcLog } from "./logger/index.mjs";
 //#region src/utils/schemaConverter.ts
 /**

package/dist/{schemaIR-CnyKK_1j.mjs → schemaIR-CDvclAew.mjs}

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
-import { o as toJsonSchema } from "./schemaConverter-Crjvczi_.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { o as toJsonSchema } from "./schemaConverter-XH1RZRyu.mjs";
 //#region src/core/schemaIR.ts
 /**
 * Schema IR — one canonical representation, two adapters.

package/dist/schemas/index.mjs

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
 import { errorContractSchema, errorDetailSchema } from "@classytic/repo-core/errors";
 import { Type, Type as Type$1 } from "typebox";
 //#region src/schemas/index.ts

package/dist/scim/index.mjs

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
-import { t as parseJsonBody } from "../jsonBody-DDSR2HFl.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { t as parseJsonBody } from "../jsonBody-CfGH-GxO.mjs";
 import fp from "fastify-plugin";
 //#region src/scim/errors.ts
 var ScimError = class extends Error {

package/dist/scope/index.mjs

@@ -1,6 +1,6 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
-import { C as isService, D as requireUserId, E as requireTeamId, O as scopeFirstCtx, S as isOrgInScope, T as requireOrgId, _ as getUserRoles, a as getDPoPJkt, b as isElevated, c as getOrgId, d as getScopeContext, f as getScopeContextMap, g as getUserId, h as getTenantFromRequest, i as getClientId, l as getOrgRoles, m as getTeamId, n as PUBLIC_SCOPE, o as getMandate, p as getServiceScopes, r as getAncestorOrgIds, s as getOrgContext, t as AUTHENTICATED_SCOPE, u as getRequestScope, v as hasOrgAccess, w as requireClientId, x as isMember, y as isAuthenticated } from "../types-DXYX7dIR.mjs";
-import { n as elevation_default, t as elevationPlugin } from "../elevation-DNXXxgjl.mjs";
-import { t as createTenantKeyGenerator } from "../rateLimitKey-CccEFBfk.mjs";
-import { t as resolveOrgFromHeader } from "../scope-afz_Ieek.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { C as isService, D as requireUserId, E as requireTeamId, O as scopeFirstCtx, S as isOrgInScope, T as requireOrgId, _ as getUserRoles, a as getDPoPJkt, b as isElevated, c as getOrgId, d as getScopeContext, f as getScopeContextMap, g as getUserId, h as getTenantFromRequest, i as getClientId, l as getOrgRoles, m as getTeamId, n as PUBLIC_SCOPE, o as getMandate, p as getServiceScopes, r as getAncestorOrgIds, s as getOrgContext, t as AUTHENTICATED_SCOPE, u as getRequestScope, v as hasOrgAccess, w as requireClientId, x as isMember, y as isAuthenticated } from "../types-CoqIRrkY.mjs";
+import { n as elevation_default, t as elevationPlugin } from "../elevation-B0tlY8y1.mjs";
+import { t as createTenantKeyGenerator } from "../rateLimitKey-XngqVNEV.mjs";
+import { t as resolveOrgFromHeader } from "../scope-BaWcqBvr.mjs";
 export { AUTHENTICATED_SCOPE, PUBLIC_SCOPE, createTenantKeyGenerator, elevation_default as elevationPlugin, elevationPlugin as elevationPluginFn, getAncestorOrgIds, getClientId, getDPoPJkt, getMandate, getOrgContext, getOrgId, getOrgRoles, getRequestScope, getScopeContext, getScopeContextMap, getServiceScopes, getTeamId, getTenantFromRequest, getUserId, getUserRoles, hasOrgAccess, isAuthenticated, isElevated, isMember, isOrgInScope, isService, requireClientId, requireOrgId, requireTeamId, requireUserId, resolveOrgFromHeader, scopeFirstCtx };

package/dist/{scope-afz_Ieek.mjs → scope-BaWcqBvr.mjs}

@@ -1,7 +1,7 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
-import { a as OrgAccessDeniedError, l as UnauthorizedError } from "./errors-Bh1KK5ps.mjs";
-import { n as requireSingleHeaderValue } from "./headers-BXjQYbeC.mjs";
-import { n as getUserRoles } from "./userHelpers-BNsOXzOd.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { a as OrgAccessDeniedError, l as UnauthorizedError } from "./errors-Cd_yy7aW.mjs";
+import { n as requireSingleHeaderValue } from "./headers-CveNO9gR.mjs";
+import { n as getUserRoles } from "./userHelpers-CWF5pbZD.mjs";
 //#region src/scope/resolveOrgFromHeader.ts
 /**
 * Create a preHandler hook that resolves org scope from a header.

package/dist/{simpleEqualityMatcher-C4KiMWUa.mjs → simpleEqualityMatcher-Se8VrsaP.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
 //#region src/utils/simpleEqualityMatcher.ts
 /**
 * `simpleEqualityMatcher` — a minimal, dialect-agnostic flat-key equality

package/dist/{sse-B9P4Y-UI.mjs → sse-Cf0jUHsh.mjs}

@@ -1,9 +1,9 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
-import { t as __exportAll } from "./rolldown-runtime-BhflRrBs.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { t as __exportAll } from "./rolldown-runtime-DNg-KNCk.mjs";
 import { arcLog } from "./logger/index.mjs";
-import { c as getOrgId, n as PUBLIC_SCOPE } from "./types-DXYX7dIR.mjs";
-import { a as promoteStreamTokenToHeader } from "./streaming-DPZdQmDz.mjs";
-import { t as openSseStream } from "./sseStream-B3zb_d1h.mjs";
+import { c as getOrgId, n as PUBLIC_SCOPE } from "./types-CoqIRrkY.mjs";
+import { a as promoteStreamTokenToHeader } from "./streaming-DsT1B5zJ.mjs";
+import { t as openSseStream } from "./sseStream-Bvpi-UXQ.mjs";
 import fp from "fastify-plugin";
 //#region src/plugins/sse.ts
 var sse_exports = /* @__PURE__ */ __exportAll({

package/dist/{sseStream-B3zb_d1h.mjs → sseStream-Bvpi-UXQ.mjs}

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
-import { n as forwardedStreamHeaders } from "./streaming-DPZdQmDz.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { n as forwardedStreamHeaders } from "./streaming-DsT1B5zJ.mjs";
 //#region src/utils/sseStream.ts
 /**
 * Take over the reply socket and open an SSE stream. Call ONLY after every

package/dist/{store-helpers-DmEMHlPQ.mjs → store-helpers-B88p99Z2.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
 //#region src/utils/store-helpers.ts
 /**
 * Classify an error thrown by `getOne` / `getById` / `update` as a

package/dist/{streaming-DPZdQmDz.mjs → streaming-DsT1B5zJ.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
 import { Readable } from "node:stream";
 //#region src/utils/streaming.ts
 /**

package/dist/{subscribe-helpers-sp5xTDVA.mjs → subscribe-helpers-CLIOHsOK.mjs}

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
-import { n as createEvent } from "./EventTransport-BV10D0oG.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { r as createEvent } from "./EventTransport-tq4CEB-q.mjs";
 //#region src/events/defineEvent.ts
 /**
 * defineEvent — Typed Event Definitions with Optional Schema Validation

package/dist/sync/changelog.mjs

@@ -1,3 +1,3 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
 import { CursorExpiredError, MemoryChangeLogStore } from "@classytic/repo-core/sync";
 export { CursorExpiredError, MemoryChangeLogStore };

package/dist/testing/cleanupStoreContract.d.mts

@@ -1,5 +1,5 @@
 
-import { D as CleanupRunStore } from "../types-C4QE8qnm.mjs";
+import { D as CleanupRunStore } from "../types-DVLddu2q.mjs";
 //#region src/testing/cleanupStoreContract.d.ts
 interface CleanupRunStoreContractSetupResult {
   store: CleanupRunStore;

package/dist/testing/cleanupStoreContract.mjs

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
 import { afterAll, beforeAll, describe, expect, it } from "vitest";
 //#region src/testing/cleanupStoreContract.ts
 /**
@@ -50,6 +50,8 @@ function plan(recipeId) {
 		rebuildActions: [],
 		warnings: [],
 		estimatedTotal: 1,
+		protectedTotal: 0,
+		excludeSteps: [],
 		confirmationPhrase: recipeId,
 		digest: `digest-${recipeId}`
 	};

package/dist/testing/index.d.mts

@@ -1,14 +1,14 @@
 
-import { V as ResourceDefinition } from "../index-CpzxqePp.mjs";
 import { i as RequestScope } from "../types-ChuShpCP.mjs";
-import { l as AnyRecord, r as PermissionCheck } from "../types-B7XeLEgK.mjs";
-import { n as ArcModuleInput, o as ModuleDisposer, s as ModuleSetupContext } from "../types-CT5vu6M0.mjs";
-import "../index-ZWhLTp_s.mjs";
-import { n as preloadResourcesAsync, r as CreateAppOptions, t as preloadResources } from "../preloadResources-T1hmlTEZ.mjs";
+import { l as PermissionCheck, t as AnyRecord } from "../base-Csjc2oF-.mjs";
+import { V as ResourceDefinition } from "../index-BcR2bFZQ.mjs";
+import { n as ArcModuleInput, o as ModuleDisposer, s as ModuleSetupContext } from "../types-BcTumAz_.mjs";
+import "../index-C5NnMEKF.mjs";
+import { n as preloadResourcesAsync, r as CreateAppOptions, t as preloadResources } from "../preloadResources-g07ldtzh.mjs";
 import { StorageContractSetup, StorageContractSetupResult, runStorageContract } from "./storageContract.mjs";
+import { StandardRepo } from "@classytic/repo-core/repository";
 import { FastifyInstance, FastifyServerOptions } from "fastify";
 import { Mock } from "vitest";
-import { StandardRepo } from "@classytic/repo-core/repository";
 //#region src/testing/assertions.d.ts
 /**
  * expectArc — Arc-specific response assertions
@@ -611,15 +611,27 @@ declare function createMockRequest(overrides?: Partial<AnyRecord>): unknown;
  */
 declare function createMockReply(): unknown;
 /**
- * Create a mock controller for testing
+ * Create a mock controller for testing.
+ *
+ * The return type is ANNOTATED rather than inferred, and writing it out IS the
+ * fix: inference expands `Mock`'s default type argument to `Procedure`, which
+ * vitest declares in an internal sub-package arc does not depend on. The
+ * emitted declaration then referenced that package by name — resolvable under
+ * npm's hoisting because `vitest` (a real peer) drags it in, and broken under
+ * pnpm's strict layout, where a transitive dep is not reachable from a
+ * consumer's root.
+ *
+ * Bare `Mock` keeps the permissive ergonomics (`.mockResolvedValue(...)`, any
+ * arguments) while naming only `vitest`, which arc does declare. Same shape
+ * `MockRepository` above uses.
  */
 declare function createMockController(repository: StandardRepo<AnyRecord>): {
   repository: StandardRepo<AnyRecord>;
-  list: Mock<import("@vitest/spy").Procedure>;
-  get: Mock<import("@vitest/spy").Procedure>;
-  create: Mock<import("@vitest/spy").Procedure>;
-  update: Mock<import("@vitest/spy").Procedure>;
-  delete: Mock<import("@vitest/spy").Procedure>;
+  list: Mock;
+  get: Mock;
+  create: Mock;
+  update: Mock;
+  delete: Mock;
 };
 /**
  * Create mock data factory

package/dist/testing/index.mjs

@@ -1,13 +1,13 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
-import { t as CRUD_OPERATIONS } from "../constants-J99LGTJI.mjs";
-import { g as getUserId } from "../types-DXYX7dIR.mjs";
-import { t as BaseController } from "../BaseController-Dk34dxhI.mjs";
-import { t as defineResource } from "../defineResource-XFPPUu2c.mjs";
-import { t as defineAggregation } from "../defineAggregation-gX4No1gt.mjs";
-import { E as requireOrgRole } from "../permissions-Dl_m0NCe.mjs";
-import { n as createApp } from "../createApp-Bv0m-Q6_.mjs";
-import { n as getModuleExports } from "../module-Br81am6m.mjs";
-import { n as preloadResourcesAsync, t as preloadResources } from "../preloadResources-CDs87fTw.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { t as CRUD_OPERATIONS } from "../constants-BxCoxmiN.mjs";
+import { g as getUserId } from "../types-CoqIRrkY.mjs";
+import { t as BaseController } from "../BaseController-CbkuhNI2.mjs";
+import { t as defineResource } from "../defineResource-ZhuLonLm.mjs";
+import { t as defineAggregation } from "../defineAggregation-Nv-DwfOf.mjs";
+import { E as requireOrgRole } from "../permissions-CP47jdi7.mjs";
+import { r as createApp } from "../createApp-zR-DEesr.mjs";
+import { n as getModuleExports } from "../module-CwKsgZXp.mjs";
+import { n as preloadResourcesAsync, t as preloadResources } from "../preloadResources-BkyqeTDz.mjs";
 import { runStorageContract } from "./storageContract.mjs";
 import Fastify from "fastify";
 import { afterAll, describe, expect, it, vi } from "vitest";
@@ -251,7 +251,19 @@ function createMockReply() {
 	};
 }
 /**
-* Create a mock controller for testing
+* Create a mock controller for testing.
+*
+* The return type is ANNOTATED rather than inferred, and writing it out IS the
+* fix: inference expands `Mock`'s default type argument to `Procedure`, which
+* vitest declares in an internal sub-package arc does not depend on. The
+* emitted declaration then referenced that package by name — resolvable under
+* npm's hoisting because `vitest` (a real peer) drags it in, and broken under
+* pnpm's strict layout, where a transitive dep is not reachable from a
+* consumer's root.
+*
+* Bare `Mock` keeps the permissive ergonomics (`.mockResolvedValue(...)`, any
+* arguments) while naming only `vitest`, which arc does declare. Same shape
+* `MockRepository` above uses.
 */
 function createMockController(repository) {
 	return {
@@ -1493,7 +1505,7 @@ function pickDefaultAuth(authMode, callerAuth) {
 	};
 }
 async function createTestApp(options = {}) {
-	const { createApp } = await import("../createApp-Bv0m-Q6_.mjs").then((n) => n.r);
+	const { createApp } = await import("../createApp-zR-DEesr.mjs").then((n) => n.i);
 	const { resources = [], db = "in-memory", connectMongoose = false, authMode = "jwt", defaultOrgId, plugins, auth: callerAuth, ...appOptions } = options;
 	let dbHandle;
 	let dbUri;

package/dist/testing/outboxStoreContract.mjs

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
 import { OutboxOwnershipError } from "@classytic/primitives/outbox";
 import { afterAll, beforeAll, beforeEach, describe, expect, it } from "vitest";
 //#region src/testing/outboxStoreContract.ts

package/dist/testing/storageContract.mjs

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
 import { afterAll, beforeAll, describe, expect, it } from "vitest";
 //#region src/testing/storageContract.ts
 /**

package/dist/{transactionContext-BvLKvOIL.mjs → transactionContext-BYtWnwAS.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
 import { AsyncLocalStorage } from "node:async_hooks";
 //#region src/context/transactionContext.ts
 /**

package/dist/{typeGuards-B_5-hKjJ.mjs → typeGuards-jjKJDN13.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
 //#region src/utils/typeGuards.ts
 /** Check if fastify has the events plugin registered */
 function hasEvents(instance) {

package/dist/types/index.d.mts

@@ -1,6 +1,6 @@
 
-import { $ as OpenApiSchemas, A as RequestIdOptions, An as BaseControllerOptions, At as RouteDefinition, Bt as RawRouteHandler, C as RequestContext, D as HealthCheck, Dt as ActionEntry, E as GracefulShutdownOptions, Et as ActionDefinition, F as FastifyWithDecorators, Ft as ControllerLike, G as OnTenantDeleteConfig, Gt as Authenticator, H as CrudController, I as MiddlewareHandler, It as FastifyHandler, J as PresetHook, Jt as TokenPair, K as ResolvedTenantPurge, Kt as AuthenticatorContext, L as RequestWithExtras, Lt as IController, M as EventsDecorator, Mt as RouteMethod, N as FastifyRequestExtras, Nt as RateLimitConfig, O as HealthOptions, Ot as ActionHandlerFn, P as FastifyWithAuth, Pt as ControllerHandler, Q as MiddlewareConfig, Rt as IControllerResponse, S as QueryParserInterface, T as CrudRouterOptions, Tt as ResourceCacheConfig, U as ResourceConfig, Ut as AuthHelpers, Vt as RouteHandler, W as ResourcePermissions, Wt as AuthPluginOptions, X as CrudRouteKey, Y as PresetResult, Z as CrudSchemas, _ as ControllerQueryOptions, a as InferAdapterDoc, at as ResourceExtensions, b as ParsedQuery, c as TypedController, d as PaginationResult, et as RouteSchemaOptions, f as IntrospectionData, g as ArcInternalMetadata, h as ResourceMetadata, i as ValidationResult, it as ResourceHooks, j as ArcDecorator, jt as RouteMcpConfig, k as IntrospectionPluginOptions, kt as ActionsMap, l as TypedRepository, m as RegistryStats, n as ConfigError, nt as FieldRule, o as InferDocType, ot as EventDefinition, p as RegistryEntry, q as PresetFunction, qt as JwtContext, r as ValidateOptions, rt as ResourceHookContext, s as InferResourceDoc, t as RouteHandlerMethod, tt as ArcFieldRule, u as TypedResourceConfig, v as LookupOption, w as ServiceContext, x as PopulateOption, y as OwnershipCheck, zt as IRequestContext } from "../index-CpzxqePp.mjs";
 import { i as RequestScope } from "../types-ChuShpCP.mjs";
-import { a as UserBase, d as JWTPayload, f as ObjectId, i as PermissionContext, l as AnyRecord, m as UserOrganization, n as DataPolicy, p as UserLike, r as PermissionCheck, t as AuthorizationDecision, u as ArcRequest } from "../types-B7XeLEgK.mjs";
+import { a as UserLike, c as DataPolicy, d as UserBase, i as ObjectId, l as PermissionCheck, n as ArcRequest, o as UserOrganization, r as JWTPayload, s as AuthorizationDecision, t as AnyRecord, u as PermissionContext } from "../base-Csjc2oF-.mjs";
+import { $ as OpenApiSchemas, A as RequestIdOptions, An as WriteVerbKey, At as RouteDefinition, C as RequestContext, D as HealthCheck, Dn as MutationWriteContext, Dt as ActionEntry, E as GracefulShutdownOptions, Et as ActionDefinition, F as FastifyWithDecorators, Fn as IControllerResponse, Ft as AuthPluginOptions, G as OnTenantDeleteConfig, H as CrudController, I as MiddlewareHandler, In as IRequestContext, It as Authenticator, J as PresetHook, K as ResolvedTenantPurge, L as RequestWithExtras, Ln as RawRouteHandler, Lt as AuthenticatorContext, M as EventsDecorator, Mn as ControllerLike, Mt as RouteMethod, N as FastifyRequestExtras, Nn as FastifyHandler, Nt as RateLimitConfig, O as HealthOptions, On as ResourceWrites, Ot as ActionHandlerFn, P as FastifyWithAuth, Pn as IController, Pt as AuthHelpers, Q as MiddlewareConfig, Rn as RouteHandler, Rt as JwtContext, S as QueryParserInterface, T as CrudRouterOptions, Tt as ResourceCacheConfig, U as ResourceConfig, W as ResourcePermissions, X as CrudRouteKey, Y as PresetResult, Z as CrudSchemas, _ as ControllerQueryOptions, a as InferAdapterDoc, at as ResourceExtensions, b as ParsedQuery, c as TypedController, d as PaginationResult, et as RouteSchemaOptions, f as IntrospectionData, g as ArcInternalMetadata, h as ResourceMetadata, i as ValidationResult, it as ResourceHooks, j as ArcDecorator, jn as ControllerHandler, jt as RouteMcpConfig, k as IntrospectionPluginOptions, kn as WriteContext, kt as ActionsMap, l as TypedRepository, m as RegistryStats, n as ConfigError, nt as FieldRule, o as InferDocType, ot as EventDefinition, p as RegistryEntry, q as PresetFunction, r as ValidateOptions, rt as ResourceHookContext, s as InferResourceDoc, t as RouteHandlerMethod, tt as ArcFieldRule, u as TypedResourceConfig, v as LookupOption, w as ServiceContext, x as PopulateOption, xn as BaseControllerOptions, y as OwnershipCheck, zt as TokenPair } from "../index-BcR2bFZQ.mjs";
 import { n as ElevationOptions, t as ElevationEvent } from "../elevation-BXCfVcNG.mjs";
-export type { ActionDefinition, ActionEntry, ActionHandlerFn, ActionsMap, AnyRecord, ArcDecorator, ArcFieldRule, ArcInternalMetadata, ArcRequest, AuthHelpers, AuthPluginOptions, Authenticator, AuthenticatorContext, AuthorizationDecision, BaseControllerOptions, ConfigError, ControllerHandler, ControllerLike, ControllerQueryOptions, CrudController, CrudRouteKey, CrudRouterOptions, CrudSchemas, DataPolicy, ElevationEvent, ElevationOptions, EventDefinition, EventsDecorator, FastifyHandler, FastifyRequestExtras, FastifyWithAuth, FastifyWithDecorators, FieldRule, GracefulShutdownOptions, HealthCheck, HealthOptions, IController, IControllerResponse, IRequestContext, InferAdapterDoc, InferDocType, InferResourceDoc, IntrospectionData, IntrospectionPluginOptions, JWTPayload, JwtContext, LookupOption, MiddlewareConfig, MiddlewareHandler, ObjectId, OnTenantDeleteConfig, OpenApiSchemas, OwnershipCheck, PaginationResult, ParsedQuery, PermissionCheck, PermissionContext, PopulateOption, PresetFunction, PresetHook, PresetResult, QueryParserInterface, RateLimitConfig, RawRouteHandler, RegistryEntry, RegistryStats, RequestContext, RequestIdOptions, RequestScope, RequestWithExtras, ResolvedTenantPurge, ResourceCacheConfig, ResourceConfig, ResourceExtensions, ResourceHookContext, ResourceHooks, ResourceMetadata, ResourcePermissions, RouteDefinition, RouteHandler, RouteHandlerMethod, RouteMcpConfig, RouteMethod, RouteSchemaOptions, ServiceContext, TokenPair, TypedController, TypedRepository, TypedResourceConfig, UserBase, UserLike, UserOrganization, ValidateOptions, ValidationResult };
+export type { ActionDefinition, ActionEntry, ActionHandlerFn, ActionsMap, AnyRecord, ArcDecorator, ArcFieldRule, ArcInternalMetadata, ArcRequest, AuthHelpers, AuthPluginOptions, Authenticator, AuthenticatorContext, AuthorizationDecision, BaseControllerOptions, ConfigError, ControllerHandler, ControllerLike, ControllerQueryOptions, CrudController, CrudRouteKey, CrudRouterOptions, CrudSchemas, DataPolicy, ElevationEvent, ElevationOptions, EventDefinition, EventsDecorator, FastifyHandler, FastifyRequestExtras, FastifyWithAuth, FastifyWithDecorators, FieldRule, GracefulShutdownOptions, HealthCheck, HealthOptions, IController, IControllerResponse, IRequestContext, InferAdapterDoc, InferDocType, InferResourceDoc, IntrospectionData, IntrospectionPluginOptions, JWTPayload, JwtContext, LookupOption, MiddlewareConfig, MiddlewareHandler, MutationWriteContext, ObjectId, OnTenantDeleteConfig, OpenApiSchemas, OwnershipCheck, PaginationResult, ParsedQuery, PermissionCheck, PermissionContext, PopulateOption, PresetFunction, PresetHook, PresetResult, QueryParserInterface, RateLimitConfig, RawRouteHandler, RegistryEntry, RegistryStats, RequestContext, RequestIdOptions, RequestScope, RequestWithExtras, ResolvedTenantPurge, ResourceCacheConfig, ResourceConfig, ResourceExtensions, ResourceHookContext, ResourceHooks, ResourceMetadata, ResourcePermissions, ResourceWrites, RouteDefinition, RouteHandler, RouteHandlerMethod, RouteMcpConfig, RouteMethod, RouteSchemaOptions, ServiceContext, TokenPair, TypedController, TypedRepository, TypedResourceConfig, UserBase, UserLike, UserOrganization, ValidateOptions, ValidationResult, WriteContext, WriteVerbKey };

package/dist/types/index.mjs

@@ -1,2 +1,2 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
 export {};

package/dist/types/storage.mjs

@@ -1,2 +1,2 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
 export {};

package/dist/{types-CT5vu6M0.d.mts → types-BcTumAz_.d.mts}

@@ -1,6 +1,6 @@
 
-import { n as DomainEvent, r as EventHandler } from "./EventTransport-2uVV34WU.mjs";
-import { n as ErrorMapper } from "./errorHandler-CpYUJmPA.mjs";
+import { n as DomainEvent, r as EventHandler } from "./EventTransport-BEVP50ka.mjs";
+import { n as ErrorMapper } from "./errorHandler-DI5AN2b5.mjs";
 import { FastifyInstance, FastifyPluginAsync } from "fastify";
 import { LockAdapter } from "@classytic/repo-core/lock";
 //#region src/plugins/health.d.ts
@@ -49,6 +49,12 @@ interface ScheduleDefinition {
   handler: (fastify: FastifyInstance) => void | Promise<void>;
   /** Fire once immediately when the app becomes ready (default: false). */
   runOnStart?: boolean;
+  /**
+   * Topology tag: `'relay'` marks an arm a `role: 'relay'` process runs
+   * (outbox relays); everything else is `'job'` (default). See
+   * `CreateAppOptions.role`.
+   */
+  kind?: "relay" | "job";
   /**
    * Random extra delay in `[0, jitterMs)` added to the FIRST tick only.
    * Spreads boot-aligned jobs so multiple same-cadence schedules don't all
@@ -440,11 +446,39 @@ interface ArcModule<TExports = unknown> {
    */
   readonly dependsOn?: readonly string[];
   /**
-   * Fastify plugins / decorators this module needs — the module-level analog
-   * of the app's `plugins()` slot. Runs in the plugins phase: AFTER the app's
-   * own `plugins()` (so module infra can build on app foundations like a DB
-   * connection) and in `dependsOn` order, but BEFORE any module `bootstrap` —
-   * so engines initialised in `bootstrap` can rely on what's registered here.
+   * Infra SETUP function — the module-level analog of the app's `plugins()`
+   * slot. Runs in the plugins phase: AFTER the app's own `plugins()` (so
+   * module infra can build on app foundations like a DB connection) and in
+   * `dependsOn` order, but BEFORE any module `bootstrap` — so engines
+   * initialised in `bootstrap` can rely on what's registered here.
+   *
+   * ## ⚠ This is NOT itself a Fastify plugin
+   *
+   * Despite the name, arc CALLS this function directly — it is never handed
+   * to `fastify.register()`. Two consequences, both of which bite module
+   * authors coming from ordinary Fastify plugins:
+   *
+   *   - **You must register plugins yourself.** `await fastify.register(x)`,
+   *     not `return x`. A returned function is read as a DISPOSER (below),
+   *     so returning a plugin silently registers nothing and then invokes
+   *     your plugin as a teardown callback. Arc detects the `fastify-plugin`
+   *     case and throws; the bare-function case warns.
+   *   - **There is no encapsulation and no prefix here.** Decorators and
+   *     hooks you add land on the instance arc passes you — the same
+   *     instance every other module sees. Fastify's encapsulation applies
+   *     only inside a `register()` call you make yourself. See
+   *     https://fastify.dev/docs/latest/Reference/Plugins/
+   *
+   * ```ts
+   * plugins: async (fastify) => {
+   *   await fastify.register(somePlugin, { prefix: '/x' });  // ✅ register
+   *   fastify.decorate('thing', thing);                      // ✅ root-visible
+   *   // return somePlugin                                   // ❌ never registered
+   * },
+   * ```
+   *
+   * The name is kept for the 2.x line; v3 renames the slot to `setup` and
+   * REMOVES `plugins` outright — v3 ships no compatibility aliases (v3.md).
    *
    * Separating this from `bootstrap` keeps lifecycle intent explicit for
    * published ecosystem packages: `plugins` = "register infra"; `bootstrap` =

package/dist/{types-CwcUQ610.d.mts → types-BfC83KsP.d.mts}

@@ -1,5 +1,5 @@
 
-import { V as ResourceDefinition } from "./index-CpzxqePp.mjs";
+import { V as ResourceDefinition } from "./index-BcR2bFZQ.mjs";
 import { z } from "zod";
 //#region src/integrations/mcp/types.d.ts
 /** Behavioral hints for MCP clients (tool annotations per MCP spec) */
@@ -377,6 +377,20 @@ interface McpAuthResult {
    * Carried on the `service` RequestScope for fine-grained permission checks.
    */
   scopes?: readonly string[];
+  /**
+   * Active team — carried onto a `member` scope so `getTeamId()` answers the
+   * same on MCP as on HTTP. Member-only, like the HTTP surface.
+   */
+  teamId?: string;
+  /**
+   * Host-defined scope dimensions (`branchId`, `projectId`, `region`, …),
+   * carried onto `member` / `service` scopes.
+   *
+   * Declared explicitly because `requireScopeContext()` AUTHORISES against
+   * these: a resource gated on `branchId` denies every MCP call until the
+   * resolver supplies it. Non-string entries are dropped rather than coerced.
+   */
+  context?: Record<string, string>;
   /** Any extra metadata from the auth resolver */
   [key: string]: unknown;
 }

package/dist/{types-DXYX7dIR.mjs → types-CoqIRrkY.mjs}

@@ -1,7 +1,7 @@
-/*! @classytic/arc v2.32.0 | MIT | https://classytic.com */
-import { l as UnauthorizedError, o as OrgRequiredError } from "./errors-Bh1KK5ps.mjs";
-import { n as requireSingleHeaderValue } from "./headers-BXjQYbeC.mjs";
-import { t as getUserId$1 } from "./userHelpers-BNsOXzOd.mjs";
+/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+import { l as UnauthorizedError, o as OrgRequiredError } from "./errors-Cd_yy7aW.mjs";
+import { n as requireSingleHeaderValue } from "./headers-CveNO9gR.mjs";
+import { t as getUserId$1 } from "./userHelpers-CWF5pbZD.mjs";
 //#region src/scope/types.ts
 /**
 * Request Scope — The One Standard