@classytic/arc 2.34.0 → 2.35.0

package/dist/types/storage.mjs

@@ -1,2 +1,2 @@
-/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.35.0 | MIT | https://classytic.com */
 export {};

package/dist/{types-BcTumAz_.d.mts → types-DDD5RKTu.d.mts}

@@ -446,52 +446,23 @@ interface ArcModule<TExports = unknown> {
    */
   readonly dependsOn?: readonly string[];
   /**
-   * Infra SETUP function — the module-level analog of the app's `plugins()`
-   * slot. Runs in the plugins phase: AFTER the app's own `plugins()` (so
-   * module infra can build on app foundations like a DB connection) and in
-   * `dependsOn` order, but BEFORE any module `bootstrap` — so engines
-   * initialised in `bootstrap` can rely on what's registered here.
-   *
-   * ## ⚠ This is NOT itself a Fastify plugin
-   *
-   * Despite the name, arc CALLS this function directly — it is never handed
-   * to `fastify.register()`. Two consequences, both of which bite module
-   * authors coming from ordinary Fastify plugins:
-   *
-   *   - **You must register plugins yourself.** `await fastify.register(x)`,
-   *     not `return x`. A returned function is read as a DISPOSER (below),
-   *     so returning a plugin silently registers nothing and then invokes
-   *     your plugin as a teardown callback. Arc detects the `fastify-plugin`
-   *     case and throws; the bare-function case warns.
-   *   - **There is no encapsulation and no prefix here.** Decorators and
-   *     hooks you add land on the instance arc passes you — the same
-   *     instance every other module sees. Fastify's encapsulation applies
-   *     only inside a `register()` call you make yourself. See
-   *     https://fastify.dev/docs/latest/Reference/Plugins/
+   * Infra SETUP — the module analog of the app's `plugins()`. Runs after the
+   * app's own `plugins()`, in `dependsOn` order, before any module `bootstrap`.
    *
-   * ```ts
-   * plugins: async (fastify) => {
-   *   await fastify.register(somePlugin, { prefix: '/x' });  // ✅ register
-   *   fastify.decorate('thing', thing);                      // ✅ root-visible
-   *   // return somePlugin                                   // ❌ never registered
-   * },
-   * ```
+   * ⚠ NOT a Fastify plugin: arc CALLS it, never `register()`s it. So you
+   * register your own (`await fastify.register(x)`, not `return x` — a
+   * returned function is read as a DISPOSER), and there is no encapsulation
+   * or prefix: decorators land on the shared instance. Returning an `fp()`
+   * plugin throws; a bare multi-arg function warns.
    *
-   * The name is kept for the 2.x line; v3 renames the slot to `setup` and
-   * REMOVES `plugins` outright — v3 ships no compatibility aliases (v3.md).
-   *
-   * Separating this from `bootstrap` keeps lifecycle intent explicit for
-   * published ecosystem packages: `plugins` = "register infra"; `bootstrap` =
-   * "initialise engines (and return the public export)". Registering a plugin
-   * inside `bootstrap` still works — this slot just makes the two distinct.
-   *
-   * Receives `{ defer }` to register teardown for anything it acquires, and
-   * may RETURN a single disposer as shorthand for the one-resource case:
+   * Receives `{ defer }` for teardown, or return one disposer as shorthand.
+   * v3 renames this slot to `setup` with no alias (v3.md).
    *
    * ```ts
    * plugins: async (fastify) => {
+   *   await fastify.register(somePlugin, { prefix: '/x' });
    *   const conn = await connect();
-   *   return () => conn.close();          // equivalent to defer(...)
+   *   return () => conn.close();
    * },
    * ```
    */
@@ -550,53 +521,25 @@ interface ArcModule<TExports = unknown> {
    */
   bootstrap?: (fastify: FastifyInstance, context: ModuleSetupContext) => TExports | Promise<TExports>;
   /**
-   * App-level resource NAMES this module authoritatively SUPERSEDES. When the
-   * host also lists (or `resourceDir`-discovers) a resource of the same name,
-   * arc DROPS the app copy and registers THIS module's version instead — so the
-   * host keeps NO hand-maintained "which resources did modules take over" filter
-   * set. Ownership lives on the atom that provides it (colocated, drift-proof):
-   *
-   * ```ts
-   * defineModule({ name: "order", owns: ["order", "quotation", "rfq"], resources: () => [...] })
-   * ```
-   *
-   * Semantics:
-   *   - Purely a supersede-the-app-fork switch — it filters the *app* resource
-   *     list, never the module's own `resources` (those always register).
-   *   - Idempotent + tolerant on the APP side: an `owns` entry with no matching
-   *     app resource is a silent no-op — a module may pre-declare a name before
-   *     any fork exists.
-   *   - Collected across ALL modules; the app-side supersession is their union.
-   *
-   * **Prefer `owns: "provided"`** (2.32) — arc derives the list from the
-   * resources this module actually returned, so the claim and the reality
-   * cannot disagree:
-   *
-   * ```ts
-   * defineModule({ name: "order", owns: "provided", resources: () => [...] })
-   * ```
-   *
-   * That is the whole arm for most modules. Resources are resolved exactly
-   * once, names are validated (duplicates within a module are rejected), the
-   * effective `owns` is derived, and supersession runs afterward — one atomic
-   * phase arc owns, rather than a rule each module re-states.
-   *
-   * **The explicit-array form is ENFORCED at boot: if you `owns` a name,
-   * PROVIDE it** — in THIS module's own `resources`. Arc fails boot when a
-   * claimed name is not among them, naming the module, the unmet names, and
-   * what it did supply. Without that check, a typo or a resource deleted
-   * without updating the list booted "successfully" with the app's route
-   * silently removed and nothing serving it. Two real cases, both silent 404s:
-   * a POS module claiming a checkout resource it mounted only when the host
-   * supplied a pipeline, and a device gateway claiming a name it never
-   * provided at all.
-   *
-   * Keep the explicit array only when the list is genuinely NOT the module's
-   * own resource set — e.g. pre-declaring a name before the fork exists.
-   *
-   * A sibling module supplying the name does NOT satisfy the claim — ownership
-   * is local to the module that declares it, which is the colocation this arm
-   * exists for.
+   * App-level resource NAMES this module SUPERSEDES. When the host lists (or
+   * discovers) a resource of the same name, arc drops the app copy and
+   * registers this module's — so the host maintains no "which resources did
+   * modules take over" filter set.
+   *
+   * PREFER `owns: "provided"`: arc derives the list from the resources the
+   * module actually returned, so the claim cannot disagree with reality.
+   * Resources resolve once, names are validated, `owns` is derived, and
+   * supersession runs after — one phase arc owns.
+   *
+   * The explicit array is ENFORCED at boot: a claimed name must appear in THIS
+   * module's own `resources`, or boot fails naming the unmet names. Without
+   * that, a typo or a deleted resource booted "successfully" with the app's
+   * route removed and nothing serving it. A sibling module providing the name
+   * does NOT satisfy the claim — ownership is local to its declarer.
+   *
+   * It only filters the APP list, never the module's own resources; an entry
+   * matching no app resource is a silent no-op (a module may pre-declare a
+   * name before any fork exists). Collected across modules as a union.
    */
   readonly owns?: readonly string[] | "provided";
   /**

package/dist/{types-BfC83KsP.d.mts → types-DSvHH0uR.d.mts}

@@ -1,5 +1,5 @@
 
-import { V as ResourceDefinition } from "./index-BcR2bFZQ.mjs";
+import { V as ResourceDefinition } from "./index-C5K78SXo.mjs";
 import { z } from "zod";
 //#region src/integrations/mcp/types.d.ts
 /** Behavioral hints for MCP clients (tool annotations per MCP spec) */

package/dist/{types-ChuShpCP.d.mts → types-Ddl9OjmE.d.mts}

@@ -36,48 +36,17 @@ declare function requireSingleHeaderValue(headers: ArcHeaders | Record<string, s
 //#endregion
 //#region src/scope/types.d.ts
 /**
- * A capability mandate — declarative, time-boxed, optionally cap-bounded
- * authorization for a single high-value action by an AI agent or service.
+ * A capability mandate — time-boxed, optionally cap-bounded authorization for
+ * ONE high-value action by an agent or service.
  *
- * Models the **2025 agent-payments / agent-authorization conventions**:
- * - Google + Anthropic + Stripe **AP2** (Agent Payments Protocol)
- * - Stripe **x402 / Agentic Commerce**
- * - **MCP authorization** (RFC 9728 + RFC 9700 + RFC 9449)
+ * Where OAuth scopes answer "what may this client EVER do?", a mandate answers
+ * "what is THIS request authorized to do right now?" — narrower in capability,
+ * time, and value. Shape follows the 2025 agent-authorization conventions
+ * (AP2, x402, MCP authorization: RFC 9728/9700/9449).
  *
- * Where OAuth `scopes` answer "what can this client EVER do?", a mandate
- * answers "what is THIS REQUEST authorized to do RIGHT NOW?" — narrower in
- * capability, time, and value.
- *
- * Arc does **not** parse mandate JWTs / Verifiable Credentials — your
- * authenticate callback does (one `jose.jwtVerify()` or `did-jwt-vc.verify()`
- * call) and populates this object. Arc's `requireMandate(capability, opts)`
- * permission helper reads it and validates the action against the mandate's
- * declared bounds.
- *
- * @example
- * ```typescript
- * // Inbound: Authorization: Mandate eyJhbGc...
- * authenticate: async (request) => {
- *   const proof = request.headers['authorization']?.replace(/^Mandate /, '');
- *   const claims = await verifyMandate(proof);            // host's verifier
- *   request.scope = {
- *     kind: 'service',
- *     clientId: claims.iss,
- *     organizationId: claims.org,
- *     scopes: claims.scope?.split(' '),
- *     mandate: {
- *       id: claims.jti,
- *       capability: claims.cap,           // 'payment.charge' / 'inbox.send' / ...
- *       cap: claims.amount,               // numeric ceiling
- *       expiresAt: claims.exp * 1000,
- *       parent: claims.parent,            // delegated mandate chain
- *       audience: claims.aud,             // resource id mandate is bound to
- *     },
- *     dpopJkt: claims.cnf?.jkt,           // RFC 7638 — sender-constrained
- *   };
- *   return { id: claims.iss };
- * };
- * ```
+ * Arc does NOT verify mandate JWTs or VCs. The host's `authenticate` callback
+ * verifies and populates this object; `requireMandate(capability, opts)` then
+ * validates the action against its bounds.
  */
 interface Mandate {
   /** Mandate identifier — typically the JWT `jti` claim. */
@@ -252,36 +221,10 @@ declare function isAuthenticated(scope: RequestScope): boolean;
 /** Get organizationId from scope (member, service, or elevated — undefined otherwise) */
 declare function getOrgId(scope: RequestScope): string | undefined;
 /**
- * Resolve the tenant (organization) id from an incoming Fastify request,
- * walking the canonical sources in order: `request.scope` → `x-organization-id`
- * header. Returns `{ organizationId, source }` so callers can log or branch
- * on which path won.
- *
- * Use in custom handlers that bypass arc's auto-CRUD path (worker routes,
- * batch importers, cross-engine subscribers) and therefore don't get the
- * tenant injected by `BaseCrudController`. Bridges arc's HTTP shape to
- * the mongokit/kit-side tenant context (e.g. `createTenantContext().run`).
+ * Tenant id for a request, from its scope.
  *
- * Header fallback is intentional: matches `resolveOrgFromHeader` semantics
- * for hosts that select an org via header instead of session/scope. Don't
- * reach for this when `getOrgId(scope)` alone is enough — for standard
- * authenticated routes the scope is already authoritative.
- *
- * @example
- * ```typescript
- * import { getTenantFromRequest } from '@classytic/arc/scope';
- * import { tenantContext } from './lib/mongokit.js';
- *
- * fastify.post('/statements/batch', async (req, reply) => {
- *   const { organizationId } = getTenantFromRequest(req);
- *   if (!organizationId) {
- *     return reply.code(400).send({ error: 'organizationId required' });
- *   }
- *   await tenantContext.run({ tenantId: organizationId }, async () => {
- *     await statementRepository.create(req.body);
- *   });
- * });
- * ```
+ * Reads the SCOPE, never `request.user` — the two drift once elevation or a
+ * service token is involved, and the scope is the resolved answer.
  */
 declare function getTenantFromRequest(req: {
   scope?: RequestScope;
@@ -510,27 +453,10 @@ declare function getOrgContext(request: {
   orgRoles: string[];
 };
 /**
- * Read `request.scope` safely from any object that *might* have one.
- * Falls back to `PUBLIC_SCOPE` when the field is absent or undefined.
- *
- * This is the canonical way for permission checks, presets, and middleware
- * to read scope — never access `request.scope` directly because it can be
- * `undefined` on requests that haven't been touched by an auth adapter yet.
- *
- * Accepts a structural shape (`{ scope?: RequestScope }`) instead of the
- * full Fastify request type so it can be called from any layer without
- * dragging in the Fastify type. The actual runtime is identical.
+ * Read `request.scope`, falling back to `PUBLIC_SCOPE`.
  *
- * @example
- * ```typescript
- * import { getRequestScope } from '@classytic/arc/scope';
- *
- * function myCheck(ctx: PermissionContext) {
- *   const scope = getRequestScope(ctx.request);
- *   if (isElevated(scope)) return true;
- *   // ...
- * }
- * ```
+ * Never returns undefined: an absent scope means an unauthenticated request,
+ * not a missing one, and callers must not have to distinguish those.
  */
 declare function getRequestScope(request: {
   scope?: RequestScope;
@@ -576,38 +502,9 @@ interface ScopeFirstCtxRequest {
   headers?: ArcHeaders | undefined;
 }
 /**
- * The ONE shared actor/org derivation for resource handlers and module
- * packages (`arc-*` fleet) — scope-FIRST, per the canonical precedence:
- *
- * 1. `request.scope` (arc's validated `RequestScope`, set by auth adapters):
- *    `userId` (human) or `clientId` (service) → `actorId`; `getOrgId(scope)`
- *    → `organizationId`.
- * 2. The `x-organization-id` header — ONLY when the scope carries no org.
- *    This is the bridge for custom-auth/public routes where arc leaves scope
- *    unpopulated; it never overrides a validated scope.
- *
- * Replaces per-package hand-rolled clones of
- * `req.user?._id ?? req.user?.id ?? headers['x-organization-id']` — that
- * pattern re-implements (and drifts from) arc's canonical resolution. A
- * package's `ctxOf(req)` should call this for the shared
- * `{ actorId, organizationId }` and only ADD its kernel-specific fields
- * (`actorKind` / `correlationId` / `roles` / `idempotencyKey`).
- *
- * Structural request shape — works on a raw `FastifyRequest` AND on arc's
- * `IRequestContext` (see {@link ScopeFirstCtxRequest}: the discriminated
- * `RequestScope` and the flat controller projection are both understood).
- *
- * @example
- * ```typescript
- * import { scopeFirstCtx } from '@classytic/arc/scope';
- *
- * // Guaranteed actor (kernel context requires one):
- * const { actorId, organizationId } = scopeFirstCtx(req, { fallbackActorId: 'system' });
- *
- * // Optional actor (package applies its own policy):
- * const ctx = scopeFirstCtx(req);
- * if (ctx.actorId) audit.record({ actor: ctx.actorId });
- * ```
+ * Build a scope-first context for permission checks outside a Fastify request
+ * (jobs, MCP tools, workers). `scope` is the identity channel; `user` is
+ * derived for legacy checks that still read it.
  */
 declare function scopeFirstCtx(req: ScopeFirstCtxRequest, options: ScopeFirstCtxOptions & {
   fallbackActorId: string;

package/dist/{types-CoqIRrkY.mjs → types-GY4kATJb.mjs}

@@ -1,7 +1,7 @@
-/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
-import { l as UnauthorizedError, o as OrgRequiredError } from "./errors-Cd_yy7aW.mjs";
-import { n as requireSingleHeaderValue } from "./headers-CveNO9gR.mjs";
-import { t as getUserId$1 } from "./userHelpers-CWF5pbZD.mjs";
+/*! @classytic/arc v2.35.0 | MIT | https://classytic.com */
+import { l as UnauthorizedError, o as OrgRequiredError } from "./errors-CLid6atr.mjs";
+import { n as requireSingleHeaderValue } from "./headers-DODWf7aC.mjs";
+import { t as getUserId$1 } from "./userHelpers-AKcB4V03.mjs";
 //#region src/scope/types.ts
 /**
 * Request Scope — The One Standard
@@ -50,36 +50,10 @@ function getOrgId(scope) {
 	if (scope.kind === "elevated") return scope.organizationId;
 }
 /**
-* Resolve the tenant (organization) id from an incoming Fastify request,
-* walking the canonical sources in order: `request.scope` → `x-organization-id`
-* header. Returns `{ organizationId, source }` so callers can log or branch
-* on which path won.
+* Tenant id for a request, from its scope.
 *
-* Use in custom handlers that bypass arc's auto-CRUD path (worker routes,
-* batch importers, cross-engine subscribers) and therefore don't get the
-* tenant injected by `BaseCrudController`. Bridges arc's HTTP shape to
-* the mongokit/kit-side tenant context (e.g. `createTenantContext().run`).
-*
-* Header fallback is intentional: matches `resolveOrgFromHeader` semantics
-* for hosts that select an org via header instead of session/scope. Don't
-* reach for this when `getOrgId(scope)` alone is enough — for standard
-* authenticated routes the scope is already authoritative.
-*
-* @example
-* ```typescript
-* import { getTenantFromRequest } from '@classytic/arc/scope';
-* import { tenantContext } from './lib/mongokit.js';
-*
-* fastify.post('/statements/batch', async (req, reply) => {
-*   const { organizationId } = getTenantFromRequest(req);
-*   if (!organizationId) {
-*     return reply.code(400).send({ error: 'organizationId required' });
-*   }
-*   await tenantContext.run({ tenantId: organizationId }, async () => {
-*     await statementRepository.create(req.body);
-*   });
-* });
-* ```
+* Reads the SCOPE, never `request.user` — the two drift once elevation or a
+* service token is involved, and the scope is the resolved answer.
 */
 function getTenantFromRequest(req, options = {}) {
 	if (req.scope) {
@@ -374,27 +348,10 @@ function getOrgContext(request) {
 	};
 }
 /**
-* Read `request.scope` safely from any object that *might* have one.
-* Falls back to `PUBLIC_SCOPE` when the field is absent or undefined.
-*
-* This is the canonical way for permission checks, presets, and middleware
-* to read scope — never access `request.scope` directly because it can be
-* `undefined` on requests that haven't been touched by an auth adapter yet.
+* Read `request.scope`, falling back to `PUBLIC_SCOPE`.
 *
-* Accepts a structural shape (`{ scope?: RequestScope }`) instead of the
-* full Fastify request type so it can be called from any layer without
-* dragging in the Fastify type. The actual runtime is identical.
-*
-* @example
-* ```typescript
-* import { getRequestScope } from '@classytic/arc/scope';
-*
-* function myCheck(ctx: PermissionContext) {
-*   const scope = getRequestScope(ctx.request);
-*   if (isElevated(scope)) return true;
-*   // ...
-* }
-* ```
+* Never returns undefined: an absent scope means an unauthenticated request,
+* not a missing one, and callers must not have to distinguish those.
 */
 function getRequestScope(request) {
 	return request.scope ?? PUBLIC_SCOPE;

package/dist/usage/index.d.mts

@@ -1,6 +1,6 @@
 
-import { i as RequestScope } from "../types-ChuShpCP.mjs";
-import { l as PermissionCheck, u as PermissionContext } from "../base-Csjc2oF-.mjs";
+import { i as RequestScope } from "../types-Ddl9OjmE.mjs";
+import { l as PermissionCheck, u as PermissionContext } from "../base-GZU3LlzP.mjs";
 import { UsageBucket, UsageStore, usagePeriod } from "@classytic/repo-core/usage";
 import { FastifyPluginAsync, FastifyRequest } from "fastify";
 //#region src/usage/requireQuota.d.ts

package/dist/{userHelpers-CWF5pbZD.mjs → userHelpers-AKcB4V03.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.35.0 | MIT | https://classytic.com */
 //#region src/utils/userHelpers.ts
 /**
 * Extract a user ID from a user object. Accepts `id` or `_id` — returns

package/dist/utils/index.d.mts

@@ -1,7 +1,7 @@
 
-import { F as getHeader, I as requireSingleHeaderValue, P as ArcHeaders } from "../types-ChuShpCP.mjs";
-import { f as getUserId, m as normalizeRoles, p as getUserRoles, t as AnyRecord } from "../base-Csjc2oF-.mjs";
-import { $ as OpenApiSchemas, S as QueryParserInterface, b as ParsedQuery } from "../index-BcR2bFZQ.mjs";
+import { F as getHeader, I as requireSingleHeaderValue, P as ArcHeaders } from "../types-Ddl9OjmE.mjs";
+import { f as getUserId, m as normalizeRoles, p as getUserRoles, t as AnyRecord } from "../base-GZU3LlzP.mjs";
+import { $ as OpenApiSchemas, S as QueryParserInterface, b as ParsedQuery } from "../index-C5K78SXo.mjs";
 import { n as ErrorMapper } from "../errorHandler-DI5AN2b5.mjs";
 import { a as NotFoundError, c as RateLimitError, d as ValidationError, f as createDomainError, i as ForbiddenError, l as ServiceUnavailableError, m as isArcError, n as ConflictError, o as OrgAccessDeniedError, p as createError, r as ErrorOptions, s as OrgRequiredError, t as ArcError, u as UnauthorizedError } from "../errors-BGdVwP25.mjs";
 import { errorContractSchema, errorDetailSchema } from "@classytic/repo-core/errors";
@@ -1243,50 +1243,24 @@ declare function convertRouteSchema(schema: Record<string, unknown>, target?: Js
  * `simpleEqualityMatcher` — a minimal, dialect-agnostic flat-key equality
  * matcher for `DataAdapter.matchesFilter` / `BaseController({ matchesFilter })`.
  *
- * **What it does:** for each `[key, expected]` in the filter, compares
- * `item[key]` to `expected` via string coercion (so Mongo `ObjectId` values
- * match their string representation) and returns `true` only if every
- * filter entry matches. Array item values are matched implicitly (contains).
+ * Compares `item[key]` to each filter value by string coercion, so a Mongo
+ * `ObjectId` matches its string form; array values match by contains. ALL
+ * entries must match.
  *
- * **What it does NOT do:**
- * - No `$eq` / `$ne` / `$in` / `$nin` / `$gt` / `$lt` / `$regex` / `$exists`
- * - No `$and` / `$or`
- * - No dot-path traversal (`"owner.id"`)
- * - No schema-specific coercion
+ * NOT an operator engine: no `$in`/`$ne`/`$gt`/`$regex`/`$exists`, no
+ * `$and`/`$or`, no dot paths, no schema coercion. Most `_policyFilters` from
+ * arc's built-in permission helpers are flat equality (`{ ownerId }`,
+ * `{ organizationId }`), and this covers exactly that — defense-in-depth for
+ * hosts on minimal repos with no `getOne(compoundFilter)` path.
  *
- * **Why it exists:** 95%+ of arc's `_policyFilters` are produced by built-in
- * permission helpers and are shaped like `{ ownerId: "u1" }` or
- * `{ organizationId: "org_x" }` — flat equality. For that common shape,
- * this helper is a safe, tested, 15-line defense-in-depth matcher that
- * hosts using minimal repos (no `getOne(compoundFilter)` DB path) can opt
- * into without arc shipping a full Mongo-syntax engine.
- *
- * **When to use:**
- * - Your adapter/repo doesn't natively filter on `getOne(compoundFilter)`
- * - Your `_policyFilters` are flat equality (from arc's built-in permission helpers)
- * - You want defense-in-depth on `validateItemAccess` / `fetchDetailed`'s `getById` fallback
- *
- * **When NOT to use:**
- * - Your `_policyFilters` use operators (`$in`, `$ne`, etc.) — supply a
- *   native matcher (mongokit's repo does the filter at the DB layer; for
- *   custom repos, wrap the kit's own predicate engine).
- * - You're a mongokit / sqlitekit / Prisma user — the DB-level filter
- *   applied by `getOne(compoundFilter)` already covers this.
+ * Do NOT use it with operator-shaped filters — supply a native matcher instead
+ * (a kit's predicate engine). Kit users need neither: the DB-level filter in
+ * `getOne(compoundFilter)` already applies.
  *
  * @example
  * ```ts
- * import { simpleEqualityMatcher } from '@classytic/arc/utils';
- *
- * // On a custom adapter
- * const adapter: DataAdapter = {
- *   repository,
- *   type: 'custom',
- *   name: 'in-memory',
- *   matchesFilter: simpleEqualityMatcher,
- * };
- *
- * // Or directly on BaseController for ad-hoc controllers
- * new BaseController(repo, { matchesFilter: simpleEqualityMatcher });
+ * const adapter: DataAdapter = { repository, type: 'custom', name: 'in-memory',
+ *                                matchesFilter: simpleEqualityMatcher };
  * ```
  */
 declare function simpleEqualityMatcher(item: unknown, filters: Record<string, unknown>): boolean;

package/dist/utils/index.mjs

@@ -1,12 +1,12 @@
-/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
-import { a as OrgAccessDeniedError, c as ServiceUnavailableError, d as createDomainError, f as createError, i as NotFoundError, l as UnauthorizedError, n as ConflictError, o as OrgRequiredError, p as isArcError, r as ForbiddenError, s as RateLimitError, t as ArcError, u as ValidationError } from "../errors-Cd_yy7aW.mjs";
-import { n as requireSingleHeaderValue, t as getHeader } from "../headers-CveNO9gR.mjs";
-import { n as getUserRoles, r as normalizeRoles, t as getUserId } from "../userHelpers-CWF5pbZD.mjs";
-import { t as simpleEqualityMatcher } from "../simpleEqualityMatcher-Se8VrsaP.mjs";
-import { A as createCircuitBreakerRegistry, C as defineCompensation, D as CircuitBreakerRegistry, E as CircuitBreakerError, O as CircuitState, S as defineErrorMapper, T as CircuitBreaker, _ as createQueryParser, a as deleteResponse, b as NEUTRAL_DIALECT, c as getDefaultCrudSchemas, d as listResponse, f as offsetListResponse, g as ArcQueryParser, h as responses, i as bareListResponse, k as createCircuitBreaker, l as getListQueryParams, m as queryParams, n as scheduleBackground, o as errorContractSchema, p as paginationSchema, r as aggregateListResponse, s as errorDetailSchema, t as createStateMachine, u as keysetListResponse, v as handleRaw, w as withCompensation, x as defineGuard, y as MONGO_DIALECT } from "../utils-h1V_sT-t.mjs";
-import { n as declareRuntimeCapability } from "../runtimeCapabilities-Dm88DaTW.mjs";
-import { a as isZodSchema, i as isJsonSchema, n as convertRouteSchema, o as toJsonSchema, t as convertOpenApiSchemas } from "../schemaConverter-XH1RZRyu.mjs";
-import { a as promoteStreamTokenToHeader, i as pipeUIMessageStreamToReply, n as forwardedStreamHeaders, r as isReadableStream, t as UI_MESSAGE_STREAM_HEADERS } from "../streaming-DsT1B5zJ.mjs";
-import { t as openSseStream } from "../sseStream-Bvpi-UXQ.mjs";
-import { t as hasEvents } from "../typeGuards-jjKJDN13.mjs";
+/*! @classytic/arc v2.35.0 | MIT | https://classytic.com */
+import { a as OrgAccessDeniedError, c as ServiceUnavailableError, d as createDomainError, f as createError, i as NotFoundError, l as UnauthorizedError, n as ConflictError, o as OrgRequiredError, p as isArcError, r as ForbiddenError, s as RateLimitError, t as ArcError, u as ValidationError } from "../errors-CLid6atr.mjs";
+import { n as requireSingleHeaderValue, t as getHeader } from "../headers-DODWf7aC.mjs";
+import { n as getUserRoles, r as normalizeRoles, t as getUserId } from "../userHelpers-AKcB4V03.mjs";
+import { t as simpleEqualityMatcher } from "../simpleEqualityMatcher-BO-sFTQf.mjs";
+import { A as createCircuitBreakerRegistry, C as defineCompensation, D as CircuitBreakerRegistry, E as CircuitBreakerError, O as CircuitState, S as defineErrorMapper, T as CircuitBreaker, _ as createQueryParser, a as deleteResponse, b as NEUTRAL_DIALECT, c as getDefaultCrudSchemas, d as listResponse, f as offsetListResponse, g as ArcQueryParser, h as responses, i as bareListResponse, k as createCircuitBreaker, l as getListQueryParams, m as queryParams, n as scheduleBackground, o as errorContractSchema, p as paginationSchema, r as aggregateListResponse, s as errorDetailSchema, t as createStateMachine, u as keysetListResponse, v as handleRaw, w as withCompensation, x as defineGuard, y as MONGO_DIALECT } from "../utils-CBK9HQOI.mjs";
+import { n as declareRuntimeCapability } from "../runtimeCapabilities-BagWc3TI.mjs";
+import { a as isZodSchema, i as isJsonSchema, n as convertRouteSchema, o as toJsonSchema, t as convertOpenApiSchemas } from "../schemaConverter-D2_bHGil.mjs";
+import { a as promoteStreamTokenToHeader, i as pipeUIMessageStreamToReply, n as forwardedStreamHeaders, r as isReadableStream, t as UI_MESSAGE_STREAM_HEADERS } from "../streaming-DOpZVht6.mjs";
+import { t as openSseStream } from "../sseStream-ByFGyIVr.mjs";
+import { t as hasEvents } from "../typeGuards-B-_jqaMi.mjs";
 export { ArcError, ArcQueryParser, CircuitBreaker, CircuitBreakerError, CircuitBreakerRegistry, CircuitState, ConflictError, ForbiddenError, MONGO_DIALECT, NEUTRAL_DIALECT, NotFoundError, OrgAccessDeniedError, OrgRequiredError, RateLimitError, ServiceUnavailableError, UI_MESSAGE_STREAM_HEADERS, UnauthorizedError, ValidationError, aggregateListResponse, bareListResponse, convertOpenApiSchemas, convertRouteSchema, createCircuitBreaker, createCircuitBreakerRegistry, createDomainError, createError, createQueryParser, createStateMachine, declareRuntimeCapability, defineCompensation, defineErrorMapper, defineGuard, deleteResponse, errorContractSchema, errorDetailSchema, forwardedStreamHeaders, getDefaultCrudSchemas, getHeader, getListQueryParams, getUserId, getUserRoles, handleRaw, hasEvents, isArcError, isJsonSchema, isReadableStream, isZodSchema, keysetListResponse, listResponse, normalizeRoles, offsetListResponse, openSseStream, paginationSchema, pipeUIMessageStreamToReply, promoteStreamTokenToHeader, queryParams, requireSingleHeaderValue, responses, scheduleBackground, simpleEqualityMatcher, toJsonSchema, withCompensation };

package/dist/{utils-h1V_sT-t.mjs → utils-CBK9HQOI.mjs}

@@ -1,7 +1,7 @@
-/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
-import { m as RESERVED_QUERY_PARAMS } from "./constants-BxCoxmiN.mjs";
+/*! @classytic/arc v2.35.0 | MIT | https://classytic.com */
+import { m as RESERVED_QUERY_PARAMS } from "./constants-BhzLXCfN.mjs";
 import { arcLog } from "./logger/index.mjs";
-import { t as ArcError, u as ValidationError } from "./errors-Cd_yy7aW.mjs";
+import { t as ArcError, u as ValidationError } from "./errors-CLid6atr.mjs";
 import { errorContractSchema as errorContractSchema$1, errorDetailSchema as errorDetailSchema$1 } from "@classytic/repo-core/errors";
 import { scheduleBackground } from "@classytic/repo-core/cache";
 //#region src/utils/circuitBreaker.ts

package/dist/{validate-CdQlz52F.mjs → validate-dosAIvQU.mjs}

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
-import { t as __exportAll } from "./rolldown-runtime-DNg-KNCk.mjs";
+/*! @classytic/arc v2.35.0 | MIT | https://classytic.com */
+import { t as __exportAll } from "./rolldown-runtime-CEvvVXTC.mjs";
 //#region src/core/aggregation/normalize.ts
 /**
 * Framework cap on URL-driven aggregation limits when the host opts

package/dist/{versioning-rZbyLVD-.mjs → versioning-BbTs4pwM.mjs}

@@ -1,6 +1,6 @@
-/*! @classytic/arc v2.34.0 | MIT | https://classytic.com */
-import { t as __exportAll } from "./rolldown-runtime-DNg-KNCk.mjs";
-import { d as createDomainError } from "./errors-Cd_yy7aW.mjs";
+/*! @classytic/arc v2.35.0 | MIT | https://classytic.com */
+import { t as __exportAll } from "./rolldown-runtime-CEvvVXTC.mjs";
+import { d as createDomainError } from "./errors-CLid6atr.mjs";
 import fp from "fastify-plugin";
 //#region src/plugins/versioning.ts
 var versioning_exports = /* @__PURE__ */ __exportAll({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@classytic/arc",
-  "version": "2.34.0",
+  "version": "2.35.0",
   "description": "Resource-oriented backend framework for Fastify - clean, minimal, powerful, tree-shakable",
   "type": "module",
   "exports": {
@@ -351,8 +351,8 @@
     "node": ">=22"
   },
   "peerDependencies": {
-    "@classytic/primitives": ">=0.23.0",
-    "@classytic/repo-core": ">=0.24.0",
+    "@classytic/primitives": ">=0.25.0",
+    "@classytic/repo-core": ">=0.25.0",
     "@classytic/streamline": ">=2.8.0",
     "@fastify/cors": ">=11.0.0",
     "@fastify/helmet": ">=13.0.0",
@@ -373,7 +373,7 @@
     "@opentelemetry/sdk-node": ">=0.50.0",
     "better-auth": ">=1.6.2",
     "bullmq": ">=5.0.0",
-    "fastify": ">=5.8.5",
+    "fastify": ">=5.12.0",
     "fastify-raw-body": ">=5.0.0",
     "h3-js": ">=4.0.0",
     "ioredis": ">=5.0.0",
@@ -483,8 +483,8 @@
     "@classytic/gitkit": ">=0.1.0",
     "@classytic/mongokit": "^3.33.0",
     "@classytic/pgkit": "^0.1.0",
-    "@classytic/primitives": "^0.23.0",
-    "@classytic/repo-core": "^0.24.0",
+    "@classytic/primitives": "^0.25.0",
+    "@classytic/repo-core": "^0.25.0",
     "@classytic/sqlitekit": "^0.9.0",
     "@classytic/streamline": "^2.8.2",
     "@electric-sql/pglite": "^0.5.4",
@@ -505,12 +505,12 @@
     "@vitest/coverage-v8": "^4.1.9",
     "ajv": "^8.20.0",
     "better-auth": "^1.6.25",
-    "better-sqlite3": "^13.0.3",
+    "better-sqlite3": "^12.4.1",
     "bullmq": "^6.1.2",
     "dotenv": "^17.4.2",
     "drizzle-orm": "^0.45.2",
     "fast-check": "^4.8.0",
-    "fastify": "^5.12.0",
+    "fastify": "^5.12.1",
     "fastify-raw-body": "^6.0.1",
     "h3-js": "^4.4.0",
     "ioredis": "^6.0.0",