@classytic/arc 2.34.0 → 2.35.0

package/dist/registry/index.mjs

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
-import { a as cascadeDeleteForOrganization, c as assertNoTenantData, i as introspectionPlugin_default, n as buildResourceManifestFromRegistry, o as getCascadingResources, r as introspectionPlugin, s as getCascadingResourcesWithMetadata, t as buildResourceManifest } from "../registry-CLxCR5LF.mjs";
-import { t as ResourceRegistry } from "../ResourceRegistry-DoALUlOO.mjs";
+/*! @classytic/arc v2.35.0 | MIT | https://classytic.com */
+import { a as cascadeDeleteForOrganization, c as assertNoTenantData, i as introspectionPlugin_default, n as buildResourceManifestFromRegistry, o as getCascadingResources, r as introspectionPlugin, s as getCascadingResourcesWithMetadata, t as buildResourceManifest } from "../registry-B4sf9Rfm.mjs";
+import { t as ResourceRegistry } from "../ResourceRegistry-yuD1Ra53.mjs";
 export { ResourceRegistry, assertNoTenantData, buildResourceManifest, buildResourceManifestFromRegistry, cascadeDeleteForOrganization, getCascadingResources, getCascadingResourcesWithMetadata, introspectionPlugin_default as introspectionPlugin, introspectionPlugin as introspectionPluginFn };

package/dist/{registry-CLxCR5LF.mjs → registry-B4sf9Rfm.mjs}

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
-import { t as CRUD_OPERATIONS } from "./constants-BxCoxmiN.mjs";
+/*! @classytic/arc v2.35.0 | MIT | https://classytic.com */
+import { t as CRUD_OPERATIONS } from "./constants-BhzLXCfN.mjs";
 import fp from "fastify-plugin";
 //#region src/registry/assertNoTenantData.ts
 /**
@@ -441,64 +441,23 @@ var introspectionPlugin_default = fp(introspectionPlugin, { name: "arc-introspec
 //#endregion
 //#region src/registry/manifest.ts
 /**
-* Resource manifest for frontend code generators.
+* Resource metadata for frontend code generators — `{ name, prefix, idField,
+* crudOps, actions[] }`, where each action carries its `mount` and
+* `requiresId`.
 *
-* Every host that hand-rolls a `createCrudApi('foo')` helper on the frontend
-* ends up rewriting the same shim for declarative actions: `postAction(id,
-* name, body)` — and forgets to add a method for every NEW action declared
-* on the resource. The OpenAI-team report flagged this in fajr's
-* `invoices.js`, and now matches needs the same.
+* A hand-rolled FE client needs a method per declarative action and drifts the
+* moment a new one is declared. Arc owns the resource definition, so it can
+* emit the list instead of the host maintaining a parallel one.
 *
-* Arc owns the resource definition, so arc can ship the metadata FE codegen
-* needs in one canonical shape:
+* BE-side only — arc ships no FE runtime. The host decides whether this powers
+* a fetch helper, a TanStack Query factory, an RPC client, or `.d.ts` codegen.
 *
-*   {
-*     name: 'invoice',
-*     prefix: '/invoices',
-*     idField: '_id',
-*     crudOps: ['list', 'get', 'create', 'update', 'delete'],
-*     actions: [
-*       { name: 'recordPayment', mount: '/:id/action', requiresId: true,  description: '...' },
-*       { name: 'propose',       mount: '/action',     requiresId: false, description: '...' },
-*     ],
-*   }
-*
-* Hosts feed this into their FE generator (or a runtime `createActionsApi`
-* shim) and every action is wired automatically. New actions land on the FE
-* the same moment they're declared on the resource — no parallel list to
-* keep in sync.
-*
-* The helper is BE-side only (lives under `@classytic/arc/registry`) — arc
-* stays a backend framework and doesn't ship FE runtime code. The host
-* decides whether the manifest powers a fetch-based helper, a TanStack
-* Query factory, an RPC client, or static `.d.ts` generation.
-*
-* @example BE → emit JSON at build time / on a route
+* @example
 * ```ts
-* // Build-time codegen
-* import { buildResourceManifest } from '@classytic/arc/registry';
-* import { invoiceResource } from './invoice.resource.js';
-* writeFileSync('./fe-gen/invoice.manifest.json',
-*   JSON.stringify(buildResourceManifest(invoiceResource)));
-*
-* // Runtime introspection endpoint
-* fastify.get('/manifest/:name', async (req) => {
-*   const r = arc.registry.get(req.params.name);
-*   return r ? buildResourceManifestFromRegistry(r) : reply.code(404);
-* });
-* ```
-*
-* @example FE → generate fetch methods from the manifest
-* ```ts
-* import manifest from './fe-gen/invoice.manifest.json';
-* import { createActionsApi } from './my-fe-shim.js';  // host-owned
-*
-* export const invoicesApi = {
-*   ...createCrudApi(manifest.prefix),
-*   ...createActionsApi(manifest.prefix, manifest.actions),
-*   // → invoicesApi.recordPayment(id, body)
-*   // → invoicesApi.propose(body)        // id-less
-* };
+* // build time
+* writeFileSync('invoice.manifest.json', JSON.stringify(buildResourceManifest(r)));
+* // or at runtime, from the live registry
+* buildResourceManifestFromRegistry(arc.registry.get(name));
 * ```
 */
 /**

package/dist/{renewingLease-BnWtbA2U.mjs → renewingLease-5ESPMxp0.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.35.0 | MIT | https://classytic.com */
 //#region src/lock/renewingLease.ts
 /**
 * Start renewing an ALREADY-ACQUIRED lease. The caller performed the
@@ -8,14 +8,23 @@
 function startRenewingLease(options) {
 	const { lock, name, holderId, leaseMs, onLost, onError } = options;
 	const renewEveryMs = options.renewEveryMs ?? Math.max(10, Math.floor(leaseMs / 2));
+	const fenced = typeof lock.tryAcquireFenced === "function" && options.token !== void 0;
 	let stopped = false;
 	let lost = false;
+	let token = options.token;
 	let timer;
 	let inFlight;
 	const scheduleNext = () => {
 		if (stopped) return;
 		timer = setTimeout(() => {
-			inFlight = Promise.resolve(lock.tryAcquire(name, holderId, leaseMs)).then((renewed) => {
+			inFlight = (fenced ? Promise.resolve(lock.tryAcquireFenced?.(name, holderId, leaseMs)).then((result) => {
+				if (result === null || result === void 0) return false;
+				if (result.token !== token) {
+					token = result.token;
+					return false;
+				}
+				return true;
+			}) : Promise.resolve(lock.tryAcquire(name, holderId, leaseMs))).then((renewed) => {
 				if (!renewed && !lost) {
 					lost = true;
 					onLost?.();
@@ -34,6 +43,9 @@ function startRenewingLease(options) {
 		get lost() {
 			return lost;
 		},
+		get token() {
+			return token;
+		},
 		async stop() {
 			stopped = true;
 			if (timer) clearTimeout(timer);

package/dist/{replyHelpers-BSBVCwL3.mjs → replyHelpers-2jfmMnnV.mjs}

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
-import { t as __exportAll } from "./rolldown-runtime-DNg-KNCk.mjs";
+/*! @classytic/arc v2.35.0 | MIT | https://classytic.com */
+import { t as __exportAll } from "./rolldown-runtime-CEvvVXTC.mjs";
 import { toCanonicalList } from "@classytic/repo-core/pagination";
 import fp from "fastify-plugin";
 //#region src/plugins/replyHelpers.ts

package/dist/{requestContext-uYE35JxI.mjs → requestContext-DzOUGNdY.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.35.0 | MIT | https://classytic.com */
 import { AsyncLocalStorage } from "node:async_hooks";
 //#region src/context/requestContext.ts
 /**

package/dist/{rolldown-runtime-DNg-KNCk.mjs → rolldown-runtime-CEvvVXTC.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.35.0 | MIT | https://classytic.com */
 import "node:module";
 //#region \0rolldown/runtime.js
 var __defProp = Object.defineProperty;

package/dist/{runtimeCapabilities-Dm88DaTW.mjs → runtimeCapabilities-BagWc3TI.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.35.0 | MIT | https://classytic.com */
 //#region src/utils/runtimeCapabilities.ts
 /**
 * `Symbol.for` so declarations from two arc copies in one dependency graph

package/dist/{schedules-CAcZgia0.mjs → schedules-BLpZLWGF.mjs}

@@ -1,6 +1,6 @@
-/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
-import { t as __exportAll } from "./rolldown-runtime-DNg-KNCk.mjs";
-import { t as startRenewingLease } from "./renewingLease-BnWtbA2U.mjs";
+/*! @classytic/arc v2.35.0 | MIT | https://classytic.com */
+import { t as __exportAll } from "./rolldown-runtime-CEvvVXTC.mjs";
+import { t as startRenewingLease } from "./renewingLease-5ESPMxp0.mjs";
 import fp from "fastify-plugin";
 //#region src/plugins/schedules.ts
 var schedules_exports = /* @__PURE__ */ __exportAll({
@@ -40,7 +40,8 @@ const schedulesPlugin = async (fastify, opts) => {
 			if (lock) {
 				const lockName = `arc:schedule:${s.name}`;
 				const leaseMs = s.leaseMs ?? Math.min(Math.floor(s.every * .9), MAX_DEFAULT_LEASE_MS);
-				if (!await lock.tryAcquire(lockName, holderId, leaseMs)) {
+				const fenced = await lock.tryAcquireFenced?.(lockName, holderId, leaseMs);
+				if (!(fenced !== void 0 ? fenced !== null : await lock.tryAcquire(lockName, holderId, leaseMs))) {
 					stat.skippedByLock++;
 					return;
 				}
@@ -49,6 +50,7 @@ const schedulesPlugin = async (fastify, opts) => {
 					name: lockName,
 					holderId,
 					leaseMs,
+					...fenced ? { token: fenced.token } : {},
 					onLost: () => fastify.log.warn({ schedule: s.name }, "[arc-schedules] lease renewal lost — another holder took the lock; this run may now overlap. Handlers should be idempotent."),
 					onError: (err) => fastify.log.warn({
 						err,

package/dist/{schemaConverter-XH1RZRyu.mjs → schemaConverter-D2_bHGil.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.35.0 | MIT | https://classytic.com */
 import { arcLog } from "./logger/index.mjs";
 //#region src/utils/schemaConverter.ts
 /**
@@ -14,44 +14,31 @@ import { arcLog } from "./logger/index.mjs";
 * boot with an actionable error; DOC paths warn and degrade — see
 * {@link UnconvertibleMode}. Hosts that never pass Zod pay nothing.
 *
-* ## Targets
+* TARGET — `draft-7` for Fastify route schemas, `openapi-3.0` for docs. Fastify
+* v5's AJV 8 is draft-07 and wants NUMERIC `exclusiveMinimum`; the
+* `openapi-3.0` target emits the draft-04 boolean form, which AJV rejects at
+* registration (`exclusiveMinimum must be number`). Using `draft-7` makes
+* `.positive()` / `.gt()` work unmodified.
 *
-* Zod v4's `toJSONSchema` supports multiple output targets; arc picks per consumer:
-*
-* - **`draft-7`** (default) — for Fastify route schemas. Fastify v5 bundles AJV 8
-*   configured for draft-07, which uses **numeric** `exclusiveMinimum`/`exclusiveMaximum`.
-*   The `openapi-3.0` target emits the **boolean** form inherited from draft-04
-*   (`exclusiveMinimum: true` alongside `minimum`), which AJV rejects at route
-*   registration with `schema is invalid: data/properties/X/exclusiveMinimum must be number`.
-*   Using `draft-7` fixes `.positive() / .negative() / .gt() / .lt()` out of the box.
-* - **`openapi-3.0`** — for OpenAPI doc generation (arc emits OpenAPI 3.0.3). Keeps
-*   the boolean exclusive form that 3.0 tooling expects.
-*
-* ## Input vs output (`io`)
-*
-* A Zod schema has TWO shapes and `z.toJSONSchema()` emits one of them. Getting
-* this wrong is not cosmetic — it rejects legal traffic:
+* IO DIRECTION — a Zod schema has two shapes and getting this wrong REJECTS
+* LEGAL TRAFFIC:
 *
 * ```ts
 * z.object({ title: z.string(), status: z.string().default("draft") })
-* // io: "output" → required: ["title", "status"]   ← a client omitting `status` is REJECTED
-* // io: "input"  → required: ["title"]             ← correct: the default fills it in
+* // io: "output" → required: ["title", "status"]  ← omitting `status` is rejected
+* // io: "input"  → required: ["title"]            ← correct; the default fills it
 * ```
 *
-* The same applies to `.transform()`: in output mode the node is unrepresentable
-* and degrades to `{}` (no validation at all), while input mode emits the real
-* input type. So arc converts by DIRECTION:
-*
-* - **request** (`body`, `querystring`, `params`, `headers`) → `io: "input"` —
-*   validates what the client SENDS, before defaults/transforms/coercion apply.
-* - **response** (and the `entity` doc shape) → `io: "output"` — describes what
-*   the server RETURNS, after they apply.
+* `.transform()` is worse in output mode: unrepresentable, so it degrades to
+* `{}` — no validation at all. Arc therefore converts by direction: REQUESTS
+* (`body`/`querystring`/`params`/`headers`) use `io: "input"`, validating what
+* the client sends before defaults and transforms; RESPONSES (and the `entity`
+* shape) use `io: "output"`, describing what the server returns.
 *
-* One deliberate consequence: a plain `z.object()` emits
-* `additionalProperties: false` in output mode but NOT in input mode, because
-* `z.object()` STRIPS unknown keys rather than rejecting them — so extra keys
-* are legal input. Use `z.strictObject()` when the wire contract must reject
-* them; it keeps `additionalProperties: false` in both modes.
+* Consequence: plain `z.object()` emits `additionalProperties: false` only in
+* output mode, because it STRIPS unknown keys rather than rejecting them — so
+* extra keys are legal input. Use `z.strictObject()` when the wire contract
+* must reject them; it holds in both modes.
 */
 const log = arcLog("schema");
 /** Default target for Fastify-consumed schemas (matches Fastify v5's default AJV draft). */

package/dist/{schemaIR-CDvclAew.mjs → schemaIR-s3-ouZmP.mjs}

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
-import { o as toJsonSchema } from "./schemaConverter-XH1RZRyu.mjs";
+/*! @classytic/arc v2.35.0 | MIT | https://classytic.com */
+import { o as toJsonSchema } from "./schemaConverter-D2_bHGil.mjs";
 //#region src/core/schemaIR.ts
 /**
 * Schema IR — one canonical representation, two adapters.

package/dist/schemas/index.mjs

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.35.0 | MIT | https://classytic.com */
 import { errorContractSchema, errorDetailSchema } from "@classytic/repo-core/errors";
 import { Type, Type as Type$1 } from "typebox";
 //#region src/schemas/index.ts

package/dist/scim/index.mjs

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
-import { t as parseJsonBody } from "../jsonBody-CfGH-GxO.mjs";
+/*! @classytic/arc v2.35.0 | MIT | https://classytic.com */
+import { t as parseJsonBody } from "../jsonBody-CVKA7C5m.mjs";
 import fp from "fastify-plugin";
 //#region src/scim/errors.ts
 var ScimError = class extends Error {

package/dist/scope/index.d.mts

@@ -1,5 +1,5 @@
 
-import { A as requireOrgId, C as hasOrgAccess, D as isOrgInScope, E as isMember, M as requireUserId, N as scopeFirstCtx, O as isService, S as getUserRoles, T as isElevated, _ as getScopeContextMap, a as ScopeFirstCtx, b as getTenantFromRequest, c as getAncestorOrgIds, d as getMandate, f as getOrgContext, g as getScopeContext, h as getRequestScope, i as RequestScope, j as requireTeamId, k as requireClientId, l as getClientId, m as getOrgRoles, n as Mandate, o as ScopeFirstCtxOptions, p as getOrgId, r as PUBLIC_SCOPE, s as ScopeFirstCtxRequest, t as AUTHENTICATED_SCOPE, u as getDPoPJkt, v as getServiceScopes, w as isAuthenticated, x as getUserId, y as getTeamId } from "../types-ChuShpCP.mjs";
+import { A as requireOrgId, C as hasOrgAccess, D as isOrgInScope, E as isMember, M as requireUserId, N as scopeFirstCtx, O as isService, S as getUserRoles, T as isElevated, _ as getScopeContextMap, a as ScopeFirstCtx, b as getTenantFromRequest, c as getAncestorOrgIds, d as getMandate, f as getOrgContext, g as getScopeContext, h as getRequestScope, i as RequestScope, j as requireTeamId, k as requireClientId, l as getClientId, m as getOrgRoles, n as Mandate, o as ScopeFirstCtxOptions, p as getOrgId, r as PUBLIC_SCOPE, s as ScopeFirstCtxRequest, t as AUTHENTICATED_SCOPE, u as getDPoPJkt, v as getServiceScopes, w as isAuthenticated, x as getUserId, y as getTeamId } from "../types-Ddl9OjmE.mjs";
 import { i as elevationPlugin, n as ElevationOptions, r as _default, t as ElevationEvent } from "../elevation-BXCfVcNG.mjs";
 import { FastifyReply, FastifyRequest } from "fastify";
 //#region src/scope/rateLimitKey.d.ts

package/dist/scope/index.mjs

@@ -1,6 +1,6 @@
-/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
-import { C as isService, D as requireUserId, E as requireTeamId, O as scopeFirstCtx, S as isOrgInScope, T as requireOrgId, _ as getUserRoles, a as getDPoPJkt, b as isElevated, c as getOrgId, d as getScopeContext, f as getScopeContextMap, g as getUserId, h as getTenantFromRequest, i as getClientId, l as getOrgRoles, m as getTeamId, n as PUBLIC_SCOPE, o as getMandate, p as getServiceScopes, r as getAncestorOrgIds, s as getOrgContext, t as AUTHENTICATED_SCOPE, u as getRequestScope, v as hasOrgAccess, w as requireClientId, x as isMember, y as isAuthenticated } from "../types-CoqIRrkY.mjs";
-import { n as elevation_default, t as elevationPlugin } from "../elevation-B0tlY8y1.mjs";
-import { t as createTenantKeyGenerator } from "../rateLimitKey-XngqVNEV.mjs";
-import { t as resolveOrgFromHeader } from "../scope-BaWcqBvr.mjs";
+/*! @classytic/arc v2.35.0 | MIT | https://classytic.com */
+import { C as isService, D as requireUserId, E as requireTeamId, O as scopeFirstCtx, S as isOrgInScope, T as requireOrgId, _ as getUserRoles, a as getDPoPJkt, b as isElevated, c as getOrgId, d as getScopeContext, f as getScopeContextMap, g as getUserId, h as getTenantFromRequest, i as getClientId, l as getOrgRoles, m as getTeamId, n as PUBLIC_SCOPE, o as getMandate, p as getServiceScopes, r as getAncestorOrgIds, s as getOrgContext, t as AUTHENTICATED_SCOPE, u as getRequestScope, v as hasOrgAccess, w as requireClientId, x as isMember, y as isAuthenticated } from "../types-GY4kATJb.mjs";
+import { n as elevation_default, t as elevationPlugin } from "../elevation-tGIAldco.mjs";
+import { t as createTenantKeyGenerator } from "../rateLimitKey-pyevMUVf.mjs";
+import { t as resolveOrgFromHeader } from "../scope-DgepeCv6.mjs";
 export { AUTHENTICATED_SCOPE, PUBLIC_SCOPE, createTenantKeyGenerator, elevation_default as elevationPlugin, elevationPlugin as elevationPluginFn, getAncestorOrgIds, getClientId, getDPoPJkt, getMandate, getOrgContext, getOrgId, getOrgRoles, getRequestScope, getScopeContext, getScopeContextMap, getServiceScopes, getTeamId, getTenantFromRequest, getUserId, getUserRoles, hasOrgAccess, isAuthenticated, isElevated, isMember, isOrgInScope, isService, requireClientId, requireOrgId, requireTeamId, requireUserId, resolveOrgFromHeader, scopeFirstCtx };

package/dist/{scope-BaWcqBvr.mjs → scope-DgepeCv6.mjs}

@@ -1,7 +1,7 @@
-/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
-import { a as OrgAccessDeniedError, l as UnauthorizedError } from "./errors-Cd_yy7aW.mjs";
-import { n as requireSingleHeaderValue } from "./headers-CveNO9gR.mjs";
-import { n as getUserRoles } from "./userHelpers-CWF5pbZD.mjs";
+/*! @classytic/arc v2.35.0 | MIT | https://classytic.com */
+import { a as OrgAccessDeniedError, l as UnauthorizedError } from "./errors-CLid6atr.mjs";
+import { n as requireSingleHeaderValue } from "./headers-DODWf7aC.mjs";
+import { n as getUserRoles } from "./userHelpers-AKcB4V03.mjs";
 //#region src/scope/resolveOrgFromHeader.ts
 /**
 * Create a preHandler hook that resolves org scope from a header.

package/dist/simpleEqualityMatcher-BO-sFTQf.mjs

@@ -0,0 +1,43 @@
+/*! @classytic/arc v2.35.0 | MIT | https://classytic.com */
+//#region src/utils/simpleEqualityMatcher.ts
+/**
+* `simpleEqualityMatcher` — a minimal, dialect-agnostic flat-key equality
+* matcher for `DataAdapter.matchesFilter` / `BaseController({ matchesFilter })`.
+*
+* Compares `item[key]` to each filter value by string coercion, so a Mongo
+* `ObjectId` matches its string form; array values match by contains. ALL
+* entries must match.
+*
+* NOT an operator engine: no `$in`/`$ne`/`$gt`/`$regex`/`$exists`, no
+* `$and`/`$or`, no dot paths, no schema coercion. Most `_policyFilters` from
+* arc's built-in permission helpers are flat equality (`{ ownerId }`,
+* `{ organizationId }`), and this covers exactly that — defense-in-depth for
+* hosts on minimal repos with no `getOne(compoundFilter)` path.
+*
+* Do NOT use it with operator-shaped filters — supply a native matcher instead
+* (a kit's predicate engine). Kit users need neither: the DB-level filter in
+* `getOne(compoundFilter)` already applies.
+*
+* @example
+* ```ts
+* const adapter: DataAdapter = { repository, type: 'custom', name: 'in-memory',
+*                                matchesFilter: simpleEqualityMatcher };
+* ```
+*/
+function simpleEqualityMatcher(item, filters) {
+	if (!item || typeof item !== "object") return false;
+	const obj = item;
+	for (const [key, expected] of Object.entries(filters)) {
+		if (expected && typeof expected === "object" && !Array.isArray(expected) && Object.getPrototypeOf(expected) === Object.prototype && Object.keys(expected).some((k) => k.startsWith("$"))) return false;
+		const actual = obj[key];
+		if (Array.isArray(actual)) {
+			const expectedStr = String(expected);
+			if (!actual.some((v) => String(v) === expectedStr)) return false;
+			continue;
+		}
+		if (String(actual) !== String(expected)) return false;
+	}
+	return true;
+}
+//#endregion
+export { simpleEqualityMatcher as t };

package/dist/{sse-Cf0jUHsh.mjs → sse-DUIP1XH6.mjs}

@@ -1,9 +1,9 @@
-/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
-import { t as __exportAll } from "./rolldown-runtime-DNg-KNCk.mjs";
+/*! @classytic/arc v2.35.0 | MIT | https://classytic.com */
+import { t as __exportAll } from "./rolldown-runtime-CEvvVXTC.mjs";
 import { arcLog } from "./logger/index.mjs";
-import { c as getOrgId, n as PUBLIC_SCOPE } from "./types-CoqIRrkY.mjs";
-import { a as promoteStreamTokenToHeader } from "./streaming-DsT1B5zJ.mjs";
-import { t as openSseStream } from "./sseStream-Bvpi-UXQ.mjs";
+import { c as getOrgId, n as PUBLIC_SCOPE } from "./types-GY4kATJb.mjs";
+import { a as promoteStreamTokenToHeader } from "./streaming-DOpZVht6.mjs";
+import { t as openSseStream } from "./sseStream-ByFGyIVr.mjs";
 import fp from "fastify-plugin";
 //#region src/plugins/sse.ts
 var sse_exports = /* @__PURE__ */ __exportAll({

package/dist/{sseStream-Bvpi-UXQ.mjs → sseStream-ByFGyIVr.mjs}

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
-import { n as forwardedStreamHeaders } from "./streaming-DsT1B5zJ.mjs";
+/*! @classytic/arc v2.35.0 | MIT | https://classytic.com */
+import { n as forwardedStreamHeaders } from "./streaming-DOpZVht6.mjs";
 //#region src/utils/sseStream.ts
 /**
 * Take over the reply socket and open an SSE stream. Call ONLY after every

package/dist/{store-helpers-B88p99Z2.mjs → store-helpers-kIJCY0wI.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.35.0 | MIT | https://classytic.com */
 //#region src/utils/store-helpers.ts
 /**
 * Classify an error thrown by `getOne` / `getById` / `update` as a

package/dist/{streaming-DsT1B5zJ.mjs → streaming-DOpZVht6.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.35.0 | MIT | https://classytic.com */
 import { Readable } from "node:stream";
 //#region src/utils/streaming.ts
 /**

package/dist/{subscribe-helpers-CLIOHsOK.mjs → subscribe-helpers-Dh2BnzJf.mjs}

@@ -1,61 +1,27 @@
-/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
-import { r as createEvent } from "./EventTransport-tq4CEB-q.mjs";
+/*! @classytic/arc v2.35.0 | MIT | https://classytic.com */
+import { r as createEvent } from "./EventTransport-BrPeGUil.mjs";
 //#region src/events/defineEvent.ts
 /**
-* defineEvent — Typed Event Definitions with Optional Schema Validation
+* Typed event declarations, a registry for introspection, and `.create()` to
+* build a `DomainEvent` with generated metadata.
 *
-* Provides:
-* 1. defineEvent() — declare an event with name, schema, version, description
-* 2. EventRegistry — catalog of all known events + payload validation
-* 3. .create() helper — build DomainEvent with auto-generated metadata
-*
-* The built-in validator checks: object type, required fields, and top-level
-* property types. It does NOT recurse into nested objects, validate arrays,
-* enums, patterns, formats, or $ref. This is intentional — it's a lightweight
-* guard, not a full JSON Schema engine.
-*
-* For full validation, pass a custom `validate` function to `createEventRegistry()`:
-*
-* @example
-* ```typescript
-* import Ajv from 'ajv';
-* const ajv = new Ajv();
-*
-* const registry = createEventRegistry({
-*   validate: (schema, payload) => {
-*     const valid = ajv.validate(schema, payload);
-*     return valid
-*       ? { valid: true }
-*       : { valid: false, errors: ajv.errorsText().split(', ') };
-*   },
-* });
-* ```
+* The BUILT-IN validator is deliberately shallow: object type, required
+* fields, and top-level property types only. It does not recurse, nor handle
+* arrays, enums, patterns, formats, or `$ref` — it is a guard, not a JSON
+* Schema engine. Pass `validate` to `createEventRegistry()` to delegate to AJV
+* or similar when you need the real thing.
 *
 * @example
 * ```typescript
-* import { defineEvent, createEventRegistry } from '@classytic/arc/events';
-*
 * const OrderCreated = defineEvent({
 *   name: 'order.created',
 *   version: 1,
-*   schema: {
-*     type: 'object',
-*     properties: {
-*       orderId: { type: 'string' },
-*       total: { type: 'number' },
-*     },
-*     required: ['orderId', 'total'],
-*   },
+*   schema: { type: 'object', properties: { orderId: { type: 'string' } },
+*             required: ['orderId'] },
 * });
 *
-* // Type-safe event creation
-* const event = OrderCreated.create({ orderId: 'o-1', total: 100 });
+* const event = OrderCreated.create({ orderId: 'o-1' });
 * await fastify.events.publish(event.type, event.payload, event.meta);
-*
-* // Registry for introspection + validation
-* const registry = createEventRegistry();
-* registry.register(OrderCreated);
-* const result = registry.validate('order.created', payload);
 * ```
 */
 /**

package/dist/sync/changelog.mjs

@@ -1,3 +1,3 @@
-/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.35.0 | MIT | https://classytic.com */
 import { CursorExpiredError, MemoryChangeLogStore } from "@classytic/repo-core/sync";
 export { CursorExpiredError, MemoryChangeLogStore };

package/dist/testing/cleanupStoreContract.mjs

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.35.0 | MIT | https://classytic.com */
 import { afterAll, beforeAll, describe, expect, it } from "vitest";
 //#region src/testing/cleanupStoreContract.ts
 /**

package/dist/testing/index.d.mts

@@ -1,10 +1,10 @@
 
-import { i as RequestScope } from "../types-ChuShpCP.mjs";
-import { l as PermissionCheck, t as AnyRecord } from "../base-Csjc2oF-.mjs";
-import { V as ResourceDefinition } from "../index-BcR2bFZQ.mjs";
-import { n as ArcModuleInput, o as ModuleDisposer, s as ModuleSetupContext } from "../types-BcTumAz_.mjs";
-import "../index-C5NnMEKF.mjs";
-import { n as preloadResourcesAsync, r as CreateAppOptions, t as preloadResources } from "../preloadResources-g07ldtzh.mjs";
+import { i as RequestScope } from "../types-Ddl9OjmE.mjs";
+import { l as PermissionCheck, t as AnyRecord } from "../base-GZU3LlzP.mjs";
+import { V as ResourceDefinition } from "../index-C5K78SXo.mjs";
+import { n as ArcModuleInput, o as ModuleDisposer, s as ModuleSetupContext } from "../types-DDD5RKTu.mjs";
+import "../index-C50BUxKs.mjs";
+import { n as preloadResourcesAsync, r as CreateAppOptions, t as preloadResources } from "../preloadResources--ZtY9pe9.mjs";
 import { StorageContractSetup, StorageContractSetupResult, runStorageContract } from "./storageContract.mjs";
 import { StandardRepo } from "@classytic/repo-core/repository";
 import { FastifyInstance, FastifyServerOptions } from "fastify";

package/dist/testing/index.mjs

@@ -1,13 +1,12 @@
-/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
-import { t as CRUD_OPERATIONS } from "../constants-BxCoxmiN.mjs";
-import { g as getUserId } from "../types-CoqIRrkY.mjs";
-import { t as BaseController } from "../BaseController-CbkuhNI2.mjs";
-import { t as defineResource } from "../defineResource-ZhuLonLm.mjs";
-import { t as defineAggregation } from "../defineAggregation-Nv-DwfOf.mjs";
-import { E as requireOrgRole } from "../permissions-CP47jdi7.mjs";
-import { r as createApp } from "../createApp-zR-DEesr.mjs";
-import { n as getModuleExports } from "../module-CwKsgZXp.mjs";
-import { n as preloadResourcesAsync, t as preloadResources } from "../preloadResources-BkyqeTDz.mjs";
+/*! @classytic/arc v2.35.0 | MIT | https://classytic.com */
+import { t as CRUD_OPERATIONS } from "../constants-BhzLXCfN.mjs";
+import { g as getUserId } from "../types-GY4kATJb.mjs";
+import { t as BaseController } from "../BaseController-C-pofd0v.mjs";
+import { t as defineResource } from "../defineResource-BOrGeocE.mjs";
+import { t as defineAggregation } from "../defineAggregation-DoIijIFq.mjs";
+import { E as requireOrgRole } from "../permissions-CpSBlFXZ.mjs";
+import { a as createApp, n as preloadResourcesAsync, t as preloadResources } from "../preloadResources-DYMzmUk1.mjs";
+import { n as getModuleExports } from "../module-Bh5OC7ww.mjs";
 import { runStorageContract } from "./storageContract.mjs";
 import Fastify from "fastify";
 import { afterAll, describe, expect, it, vi } from "vitest";
@@ -1505,7 +1504,7 @@ function pickDefaultAuth(authMode, callerAuth) {
 	};
 }
 async function createTestApp(options = {}) {
-	const { createApp } = await import("../createApp-zR-DEesr.mjs").then((n) => n.i);
+	const { createApp } = await import("../preloadResources-DYMzmUk1.mjs").then((n) => n.o);
 	const { resources = [], db = "in-memory", connectMongoose = false, authMode = "jwt", defaultOrgId, plugins, auth: callerAuth, ...appOptions } = options;
 	let dbHandle;
 	let dbUri;

package/dist/testing/outboxStoreContract.mjs

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.35.0 | MIT | https://classytic.com */
 import { OutboxOwnershipError } from "@classytic/primitives/outbox";
 import { afterAll, beforeAll, beforeEach, describe, expect, it } from "vitest";
 //#region src/testing/outboxStoreContract.ts

package/dist/testing/storageContract.mjs

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.35.0 | MIT | https://classytic.com */
 import { afterAll, beforeAll, describe, expect, it } from "vitest";
 //#region src/testing/storageContract.ts
 /**

package/dist/{transactionContext-BYtWnwAS.mjs → transactionContext-BTZzEcRo.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.35.0 | MIT | https://classytic.com */
 import { AsyncLocalStorage } from "node:async_hooks";
 //#region src/context/transactionContext.ts
 /**

package/dist/{typeGuards-jjKJDN13.mjs → typeGuards-B-_jqaMi.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.35.0 | MIT | https://classytic.com */
 //#region src/utils/typeGuards.ts
 /** Check if fastify has the events plugin registered */
 function hasEvents(instance) {

package/dist/types/index.d.mts

@@ -1,6 +1,6 @@
 
-import { i as RequestScope } from "../types-ChuShpCP.mjs";
-import { a as UserLike, c as DataPolicy, d as UserBase, i as ObjectId, l as PermissionCheck, n as ArcRequest, o as UserOrganization, r as JWTPayload, s as AuthorizationDecision, t as AnyRecord, u as PermissionContext } from "../base-Csjc2oF-.mjs";
-import { $ as OpenApiSchemas, A as RequestIdOptions, An as WriteVerbKey, At as RouteDefinition, C as RequestContext, D as HealthCheck, Dn as MutationWriteContext, Dt as ActionEntry, E as GracefulShutdownOptions, Et as ActionDefinition, F as FastifyWithDecorators, Fn as IControllerResponse, Ft as AuthPluginOptions, G as OnTenantDeleteConfig, H as CrudController, I as MiddlewareHandler, In as IRequestContext, It as Authenticator, J as PresetHook, K as ResolvedTenantPurge, L as RequestWithExtras, Ln as RawRouteHandler, Lt as AuthenticatorContext, M as EventsDecorator, Mn as ControllerLike, Mt as RouteMethod, N as FastifyRequestExtras, Nn as FastifyHandler, Nt as RateLimitConfig, O as HealthOptions, On as ResourceWrites, Ot as ActionHandlerFn, P as FastifyWithAuth, Pn as IController, Pt as AuthHelpers, Q as MiddlewareConfig, Rn as RouteHandler, Rt as JwtContext, S as QueryParserInterface, T as CrudRouterOptions, Tt as ResourceCacheConfig, U as ResourceConfig, W as ResourcePermissions, X as CrudRouteKey, Y as PresetResult, Z as CrudSchemas, _ as ControllerQueryOptions, a as InferAdapterDoc, at as ResourceExtensions, b as ParsedQuery, c as TypedController, d as PaginationResult, et as RouteSchemaOptions, f as IntrospectionData, g as ArcInternalMetadata, h as ResourceMetadata, i as ValidationResult, it as ResourceHooks, j as ArcDecorator, jn as ControllerHandler, jt as RouteMcpConfig, k as IntrospectionPluginOptions, kn as WriteContext, kt as ActionsMap, l as TypedRepository, m as RegistryStats, n as ConfigError, nt as FieldRule, o as InferDocType, ot as EventDefinition, p as RegistryEntry, q as PresetFunction, r as ValidateOptions, rt as ResourceHookContext, s as InferResourceDoc, t as RouteHandlerMethod, tt as ArcFieldRule, u as TypedResourceConfig, v as LookupOption, w as ServiceContext, x as PopulateOption, xn as BaseControllerOptions, y as OwnershipCheck, zt as TokenPair } from "../index-BcR2bFZQ.mjs";
+import { i as RequestScope } from "../types-Ddl9OjmE.mjs";
+import { a as UserLike, c as DataPolicy, d as UserBase, i as ObjectId, l as PermissionCheck, n as ArcRequest, o as UserOrganization, r as JWTPayload, s as AuthorizationDecision, t as AnyRecord, u as PermissionContext } from "../base-GZU3LlzP.mjs";
+import { $ as OpenApiSchemas, A as RequestIdOptions, An as WriteVerbKey, At as RouteDefinition, C as RequestContext, D as HealthCheck, Dn as MutationWriteContext, Dt as ActionEntry, E as GracefulShutdownOptions, Et as ActionDefinition, F as FastifyWithDecorators, Fn as IControllerResponse, Ft as AuthPluginOptions, G as OnTenantDeleteConfig, H as CrudController, I as MiddlewareHandler, In as IRequestContext, It as Authenticator, J as PresetHook, K as ResolvedTenantPurge, L as RequestWithExtras, Ln as RawRouteHandler, Lt as AuthenticatorContext, M as EventsDecorator, Mn as ControllerLike, Mt as RouteMethod, N as FastifyRequestExtras, Nn as FastifyHandler, Nt as RateLimitConfig, O as HealthOptions, On as ResourceWrites, Ot as ActionHandlerFn, P as FastifyWithAuth, Pn as IController, Pt as AuthHelpers, Q as MiddlewareConfig, Rn as RouteHandler, Rt as JwtContext, S as QueryParserInterface, T as CrudRouterOptions, Tt as ResourceCacheConfig, U as ResourceConfig, W as ResourcePermissions, X as CrudRouteKey, Y as PresetResult, Z as CrudSchemas, _ as ControllerQueryOptions, a as InferAdapterDoc, at as ResourceExtensions, b as ParsedQuery, c as TypedController, d as PaginationResult, et as RouteSchemaOptions, f as IntrospectionData, g as ArcInternalMetadata, h as ResourceMetadata, i as ValidationResult, it as ResourceHooks, j as ArcDecorator, jn as ControllerHandler, jt as RouteMcpConfig, k as IntrospectionPluginOptions, kn as WriteContext, kt as ActionsMap, l as TypedRepository, m as RegistryStats, n as ConfigError, nt as FieldRule, o as InferDocType, ot as EventDefinition, p as RegistryEntry, q as PresetFunction, r as ValidateOptions, rt as ResourceHookContext, s as InferResourceDoc, t as RouteHandlerMethod, tt as ArcFieldRule, u as TypedResourceConfig, v as LookupOption, w as ServiceContext, x as PopulateOption, xn as BaseControllerOptions, y as OwnershipCheck, zt as TokenPair } from "../index-C5K78SXo.mjs";
 import { n as ElevationOptions, t as ElevationEvent } from "../elevation-BXCfVcNG.mjs";
 export type { ActionDefinition, ActionEntry, ActionHandlerFn, ActionsMap, AnyRecord, ArcDecorator, ArcFieldRule, ArcInternalMetadata, ArcRequest, AuthHelpers, AuthPluginOptions, Authenticator, AuthenticatorContext, AuthorizationDecision, BaseControllerOptions, ConfigError, ControllerHandler, ControllerLike, ControllerQueryOptions, CrudController, CrudRouteKey, CrudRouterOptions, CrudSchemas, DataPolicy, ElevationEvent, ElevationOptions, EventDefinition, EventsDecorator, FastifyHandler, FastifyRequestExtras, FastifyWithAuth, FastifyWithDecorators, FieldRule, GracefulShutdownOptions, HealthCheck, HealthOptions, IController, IControllerResponse, IRequestContext, InferAdapterDoc, InferDocType, InferResourceDoc, IntrospectionData, IntrospectionPluginOptions, JWTPayload, JwtContext, LookupOption, MiddlewareConfig, MiddlewareHandler, MutationWriteContext, ObjectId, OnTenantDeleteConfig, OpenApiSchemas, OwnershipCheck, PaginationResult, ParsedQuery, PermissionCheck, PermissionContext, PopulateOption, PresetFunction, PresetHook, PresetResult, QueryParserInterface, RateLimitConfig, RawRouteHandler, RegistryEntry, RegistryStats, RequestContext, RequestIdOptions, RequestScope, RequestWithExtras, ResolvedTenantPurge, ResourceCacheConfig, ResourceConfig, ResourceExtensions, ResourceHookContext, ResourceHooks, ResourceMetadata, ResourcePermissions, ResourceWrites, RouteDefinition, RouteHandler, RouteHandlerMethod, RouteMcpConfig, RouteMethod, RouteSchemaOptions, ServiceContext, TokenPair, TypedController, TypedRepository, TypedResourceConfig, UserBase, UserLike, UserOrganization, ValidateOptions, ValidationResult, WriteContext, WriteVerbKey };

package/dist/types/index.mjs

@@ -1,2 +1,2 @@
-/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.35.0 | MIT | https://classytic.com */
 export {};