@classytic/arc 2.38.0 → 2.40.0

package/dist/context/index.mjs

@@ -1,12 +1,10 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { t as transactionContext } from "../transactionContext-DMmvcfdo.mjs";
-import { n as requestContext, t as getTraceHeaders } from "../requestContext-DpmntRZy.mjs";
+/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
+import { t as transactionContext } from "../transactionContext-46KyUADP.mjs";
+import { n as requestContext, t as getTraceHeaders } from "../requestContext-D4PuGhEw.mjs";
+import { n as scopedValue, r as workSeedFromEvent, t as runWorkScope } from "../workScope-CoGpuzDX.mjs";
 //#region src/context/requestScopedCache.ts
-/**
-* The slot the per-request store hangs off. Underscore-prefixed to sit apart
-* from the fields arc's own hooks populate on `RequestStore`.
-*/
-const SLOT = "_requestCache";
+/** The memo slot the per-scope store hangs off. */
+const SLOT = Symbol.for("arc.requestScopedCache");
 /**
 * A `Map`-backed `CacheAdapter` with NO eviction and NO TTL — both deliberate.
 *
@@ -39,26 +37,21 @@ function createRequestCacheAdapter() {
 	};
 }
 /**
-* The cache for the CURRENT request, or `undefined` outside one.
+* The cache for the CURRENT unit of work — a request, an event dispatch or a
+* job run (see `runWorkScope`) — or `undefined` outside one.
 *
-* Lazily created on first use, so a request that never touches a cached
+* Lazily created on first use, so a scope that never touches a cached
 * repository allocates nothing.
 */
 function requestScopedCache() {
-	const store = requestContext.get();
-	if (!store) return void 0;
-	const existing = store[SLOT];
-	if (existing) return existing;
-	const created = createRequestCacheAdapter();
-	store[SLOT] = created;
-	return created;
+	return scopedValue(SLOT, createRequestCacheAdapter);
 }
 /**
-* Whether the current request has allocated a cache yet. Diagnostics and
+* Whether the current scope has allocated a cache yet. Diagnostics and
 * tests only — never branch application behaviour on this.
 */
 function hasRequestScopedCache() {
 	return requestContext.get()?.[SLOT] !== void 0;
 }
 //#endregion
-export { getTraceHeaders, hasRequestScopedCache, requestContext, requestScopedCache, transactionContext };
+export { getTraceHeaders, hasRequestScopedCache, requestContext, requestScopedCache, runWorkScope, scopedValue, transactionContext, workSeedFromEvent };

package/dist/core/index.d.mts

@@ -1,4 +1,4 @@
 
-import { $t as AccessControlConfig, B as defineResource, Bt as BaseController, Cn as ControllerConstructionOptions, En as BodySanitizerConfig, Gt as SlugExt, Ht as SoftDeleteMixin, Jt as BulkMixin, Kt as SlugMixin, Qt as AccessControl, Sn as ControllerConfigurableOptions, Tn as BodySanitizer, Ut as TreeExt, V as ResourceDefinition, Vt as SoftDeleteExt, Wt as TreeMixin, Xt as QueryResolver, Yt as BaseCrudController, Zt as QueryResolverConfig, ct as AggMeasureShorthand, dt as AggregationDateRangeRequirement, ft as AggregationIndexHint, gt as AggregationsMap, ht as AggregationRateLimit, lt as AggregationCacheConfig, mt as AggregationMaterializedResult, pt as AggregationMaterializedContext, qt as BulkExt, st as AggMeasureInput, ut as AggregationConfig, wn as ListResult, xn as BaseControllerOptions } from "../index-B78WZom8.mjs";
-import { A as CRUD_OPERATIONS, B as HookOperation, C as SeamedResourceConfig, D as createCrudRouter, E as defineAction, F as DEFAULT_SORT, G as MUTATION_OPERATIONS, H as MAX_FILTER_DEPTH, I as DEFAULT_TENANT_FIELD, J as SYSTEM_FIELDS, K as MutationOperation, L as DEFAULT_UPDATE_METHOD, M as DEFAULT_ID_FIELD, N as DEFAULT_LIMIT, O as createPermissionMiddleware, P as DEFAULT_MAX_LIMIT, R as HOOK_OPERATIONS, S as ResourceSeams, T as DefineActionConfig, U as MAX_REGEX_LENGTH, V as HookPhase, W as MAX_SEARCH_LENGTH, _ as getEntityId, a as formatValidationErrors, b as defineResourceVariants, c as nativePolicyFilter, d as createCrudHandlers, f as createFastifyHandler, g as sendControllerResponse, h as getControllerScope, i as assertValidConfig, j as CrudOperation, k as defineAggregation, l as collectReadBlockedFields, m as getControllerContext, n as ValidateOptions, o as validateResourceConfig, p as createRequestContext, q as RESERVED_QUERY_PARAMS, r as ValidationResult, s as NativePolicyFilter, t as ConfigError, u as isFieldReadable, v as getEntityIdField, w as mergeResourceConfig, x as AdapterLike, y as getEntityQuery, z as HOOK_PHASES } from "../index-BRoDtjek.mjs";
+import { $t as AccessControlConfig, B as defineResource, Bt as BaseController, Cn as ControllerConstructionOptions, En as BodySanitizerConfig, Gt as SlugExt, Ht as SoftDeleteMixin, Jt as BulkMixin, Kt as SlugMixin, Qt as AccessControl, Sn as ControllerConfigurableOptions, Tn as BodySanitizer, Ut as TreeExt, V as ResourceDefinition, Vt as SoftDeleteExt, Wt as TreeMixin, Xt as QueryResolver, Yt as BaseCrudController, Zt as QueryResolverConfig, ct as AggMeasureShorthand, dt as AggregationDateRangeRequirement, ft as AggregationIndexHint, gt as AggregationsMap, ht as AggregationRateLimit, lt as AggregationCacheConfig, mt as AggregationMaterializedResult, pt as AggregationMaterializedContext, qt as BulkExt, st as AggMeasureInput, ut as AggregationConfig, wn as ListResult, xn as BaseControllerOptions } from "../index-D3sIPcD4.mjs";
+import { A as CRUD_OPERATIONS, B as HookOperation, C as SeamedResourceConfig, D as createCrudRouter, E as defineAction, F as DEFAULT_SORT, G as MUTATION_OPERATIONS, H as MAX_FILTER_DEPTH, I as DEFAULT_TENANT_FIELD, J as SYSTEM_FIELDS, K as MutationOperation, L as DEFAULT_UPDATE_METHOD, M as DEFAULT_ID_FIELD, N as DEFAULT_LIMIT, O as createPermissionMiddleware, P as DEFAULT_MAX_LIMIT, R as HOOK_OPERATIONS, S as ResourceSeams, T as DefineActionConfig, U as MAX_REGEX_LENGTH, V as HookPhase, W as MAX_SEARCH_LENGTH, _ as getEntityId, a as formatValidationErrors, b as defineResourceVariants, c as nativePolicyFilter, d as createCrudHandlers, f as createFastifyHandler, g as sendControllerResponse, h as getControllerScope, i as assertValidConfig, j as CrudOperation, k as defineAggregation, l as collectReadBlockedFields, m as getControllerContext, n as ValidateOptions, o as validateResourceConfig, p as createRequestContext, q as RESERVED_QUERY_PARAMS, r as ValidationResult, s as NativePolicyFilter, t as ConfigError, u as isFieldReadable, v as getEntityIdField, w as mergeResourceConfig, x as AdapterLike, y as getEntityQuery, z as HOOK_PHASES } from "../index-SCsOJxWB.mjs";
 export { AccessControl, type AccessControlConfig, type AdapterLike, type AggMeasureInput, type AggMeasureShorthand, type AggregationCacheConfig, type AggregationConfig, type AggregationDateRangeRequirement, type AggregationIndexHint, type AggregationMaterializedContext, type AggregationMaterializedResult, type AggregationRateLimit, type AggregationsMap, BaseController, type BaseControllerOptions, BaseCrudController, BodySanitizer, type BodySanitizerConfig, type BulkExt, BulkMixin, CRUD_OPERATIONS, type ConfigError, type ControllerConfigurableOptions, type ControllerConstructionOptions, CrudOperation, DEFAULT_ID_FIELD, DEFAULT_LIMIT, DEFAULT_MAX_LIMIT, DEFAULT_SORT, DEFAULT_TENANT_FIELD, DEFAULT_UPDATE_METHOD, type DefineActionConfig, HOOK_OPERATIONS, HOOK_PHASES, HookOperation, HookPhase, type ListResult, MAX_FILTER_DEPTH, MAX_REGEX_LENGTH, MAX_SEARCH_LENGTH, MUTATION_OPERATIONS, MutationOperation, type NativePolicyFilter, QueryResolver, type QueryResolverConfig, RESERVED_QUERY_PARAMS, ResourceDefinition, type ResourceSeams, SYSTEM_FIELDS, type SeamedResourceConfig, type SlugExt, SlugMixin, type SoftDeleteExt, SoftDeleteMixin, type TreeExt, TreeMixin, type ValidateOptions, type ValidationResult, assertValidConfig, collectReadBlockedFields, createCrudHandlers, createCrudRouter, createFastifyHandler, createPermissionMiddleware, createRequestContext, defineAction, defineAggregation, defineResource, defineResourceVariants, formatValidationErrors, getControllerContext, getControllerScope, getEntityId, getEntityIdField, getEntityQuery, isFieldReadable, mergeResourceConfig, nativePolicyFilter, sendControllerResponse, validateResourceConfig };

package/dist/core/index.mjs

@@ -1,8 +1,8 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { a as DEFAULT_SORT, c as HOOK_OPERATIONS, d as MAX_REGEX_LENGTH, f as MAX_SEARCH_LENGTH, h as SYSTEM_FIELDS, i as DEFAULT_MAX_LIMIT, l as HOOK_PHASES, m as RESERVED_QUERY_PARAMS, n as DEFAULT_ID_FIELD, o as DEFAULT_TENANT_FIELD, p as MUTATION_OPERATIONS, r as DEFAULT_LIMIT, s as DEFAULT_UPDATE_METHOD, t as CRUD_OPERATIONS, u as MAX_FILTER_DEPTH } from "../constants-BONghE1Y.mjs";
-import { a as BulkMixin, c as collectReadBlockedFields, f as BodySanitizer, h as nativePolicyFilter, i as SlugMixin, l as isFieldReadable, m as AccessControl, n as TreeMixin, o as BaseCrudController, r as SoftDeleteMixin, s as QueryResolver, t as BaseController } from "../BaseController-CYaDvmOB.mjs";
-import { t as defineAggregation } from "../defineAggregation-0KBvqEEC.mjs";
-import { a as createCrudHandlers, c as getControllerContext, l as getControllerScope, o as createFastifyHandler, s as createRequestContext, u as sendControllerResponse } from "../actionPermissions-jlFZ1it4.mjs";
-import { a as ResourceDefinition, i as validateResourceConfig, n as assertValidConfig, o as createCrudRouter, r as formatValidationErrors, s as createPermissionMiddleware, t as defineResource } from "../defineResource-BMdyRelW.mjs";
-import { a as mergeResourceConfig, i as defineResourceVariants, n as getEntityIdField, o as defineAction, r as getEntityQuery, t as getEntityId } from "../core-8She7FgF.mjs";
+/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
+import { a as DEFAULT_SORT, c as HOOK_OPERATIONS, d as MAX_REGEX_LENGTH, f as MAX_SEARCH_LENGTH, h as SYSTEM_FIELDS, i as DEFAULT_MAX_LIMIT, l as HOOK_PHASES, m as RESERVED_QUERY_PARAMS, n as DEFAULT_ID_FIELD, o as DEFAULT_TENANT_FIELD, p as MUTATION_OPERATIONS, r as DEFAULT_LIMIT, s as DEFAULT_UPDATE_METHOD, t as CRUD_OPERATIONS, u as MAX_FILTER_DEPTH } from "../constants-BQ2FbhPB.mjs";
+import { a as BulkMixin, c as collectReadBlockedFields, f as BodySanitizer, h as nativePolicyFilter, i as SlugMixin, l as isFieldReadable, m as AccessControl, n as TreeMixin, o as BaseCrudController, r as SoftDeleteMixin, s as QueryResolver, t as BaseController } from "../BaseController-BqJtbiUA.mjs";
+import { t as defineAggregation } from "../defineAggregation-BDA2Tw7v.mjs";
+import { a as createCrudHandlers, c as getControllerContext, l as getControllerScope, o as createFastifyHandler, s as createRequestContext, u as sendControllerResponse } from "../actionPermissions-4OGbe3Hf.mjs";
+import { a as ResourceDefinition, i as validateResourceConfig, n as assertValidConfig, o as createCrudRouter, r as formatValidationErrors, s as createPermissionMiddleware, t as defineResource } from "../defineResource-DaIySrQr.mjs";
+import { a as mergeResourceConfig, i as defineResourceVariants, n as getEntityIdField, o as defineAction, r as getEntityQuery, t as getEntityId } from "../core-CsZR037F.mjs";
 export { AccessControl, BaseController, BaseCrudController, BodySanitizer, BulkMixin, CRUD_OPERATIONS, DEFAULT_ID_FIELD, DEFAULT_LIMIT, DEFAULT_MAX_LIMIT, DEFAULT_SORT, DEFAULT_TENANT_FIELD, DEFAULT_UPDATE_METHOD, HOOK_OPERATIONS, HOOK_PHASES, MAX_FILTER_DEPTH, MAX_REGEX_LENGTH, MAX_SEARCH_LENGTH, MUTATION_OPERATIONS, QueryResolver, RESERVED_QUERY_PARAMS, ResourceDefinition, SYSTEM_FIELDS, SlugMixin, SoftDeleteMixin, TreeMixin, assertValidConfig, collectReadBlockedFields, createCrudHandlers, createCrudRouter, createFastifyHandler, createPermissionMiddleware, createRequestContext, defineAction, defineAggregation, defineResource, defineResourceVariants, formatValidationErrors, getControllerContext, getControllerScope, getEntityId, getEntityIdField, getEntityQuery, isFieldReadable, mergeResourceConfig, nativePolicyFilter, sendControllerResponse, validateResourceConfig };

package/dist/{core-8She7FgF.mjs → core-CsZR037F.mjs}

@@ -1,6 +1,6 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import "./constants-BONghE1Y.mjs";
-import { t as defineResource } from "./defineResource-BMdyRelW.mjs";
+/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
+import "./constants-BQ2FbhPB.mjs";
+import { t as defineResource } from "./defineResource-DaIySrQr.mjs";
 //#region src/core/defineAction.ts
 /**
 * Build an `ActionDefinition` with a typed handler. The literal schema

package/dist/{createActionRouter-Bqi6Bhhx.mjs → createActionRouter-BR93gCKg.mjs}

@@ -1,10 +1,10 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { t as __exportAll } from "./rolldown-runtime-Add2L50I.mjs";
-import "./constants-BONghE1Y.mjs";
-import { f as createError } from "./errors-2ExmOgIJ.mjs";
-import { i as resolvePipelineSteps, n as buildActionPipelineHandler, u as sendControllerResponse } from "./actionPermissions-jlFZ1it4.mjs";
-import { a as selectPluginMw, c as buildRouteHooks, f as buildAuthMiddlewareForPermissions, i as resolveRouterPluginMw, n as buildRateLimitConfig, o as buildActionPermissionMw, p as buildArcDecorator, r as buildRouteConfig, t as tryRegisterRoute, u as routeHookOptions } from "./registerRoute-XvcI_3sh.mjs";
-import { n as schemaIRToJsonSchemaBranch, t as normalizeSchemaIR } from "./schemaIR-CIXShch7.mjs";
+/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
+import { t as __exportAll } from "./rolldown-runtime-DzE6ikSH.mjs";
+import "./constants-BQ2FbhPB.mjs";
+import { f as createError } from "./errors-BHD3L8of.mjs";
+import { i as resolvePipelineSteps, n as buildActionPipelineHandler, u as sendControllerResponse } from "./actionPermissions-4OGbe3Hf.mjs";
+import { a as selectPluginMw, c as buildRouteHooks, f as buildAuthMiddlewareForPermissions, i as resolveRouterPluginMw, n as buildRateLimitConfig, o as buildActionPermissionMw, p as buildArcDecorator, r as buildRouteConfig, t as tryRegisterRoute, u as routeHookOptions } from "./registerRoute-_6zHiz0x.mjs";
+import { n as schemaIRToJsonSchemaBranch, t as normalizeSchemaIR } from "./schemaIR-C2qUNzC6.mjs";
 //#region src/core/createActionRouter.ts
 var createActionRouter_exports = /* @__PURE__ */ __exportAll({
 	buildActionBodySchema: () => buildActionBodySchema,

package/dist/{createAggregationRouter-BsYO7ktd.mjs → createAggregationRouter-CF40Aw95.mjs}

@@ -1,10 +1,10 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { n as evaluateAndApplyPermission } from "./authorizationDecision-BP8GHtjc.mjs";
-import { f as createError } from "./errors-2ExmOgIJ.mjs";
-import { u as getRequestScope } from "./types-BqLyyH0o.mjs";
-import { a as selectPluginMw, c as buildRouteHooks, d as buildAuthMiddleware, i as resolveRouterPluginMw, n as buildRateLimitConfig, p as buildArcDecorator, u as routeHookOptions } from "./registerRoute-XvcI_3sh.mjs";
-import { n as validateAggregations } from "./validate-CidSeUrx.mjs";
-import { t as buildAggregationHandler } from "./buildHandler-DjXOqIvX.mjs";
+/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
+import { n as evaluateAndApplyPermission } from "./authorizationDecision-D_LFvMlm.mjs";
+import { f as createError } from "./errors-BHD3L8of.mjs";
+import { u as getRequestScope } from "./types-CNQyOrLk.mjs";
+import { a as selectPluginMw, c as buildRouteHooks, d as buildAuthMiddleware, i as resolveRouterPluginMw, n as buildRateLimitConfig, p as buildArcDecorator, u as routeHookOptions } from "./registerRoute-_6zHiz0x.mjs";
+import { n as validateAggregations } from "./validate-DV3hRbsz.mjs";
+import { t as buildAggregationHandler } from "./buildHandler-BG_CHXqQ.mjs";
 //#region src/core/aggregation/createAggregationRouter.ts
 /**
 * Register one Fastify route per aggregation. No-op when the map is

package/dist/createMcpServer-BVTs2S5G.d.mts

@@ -0,0 +1,48 @@
+
+import { _ as ToolDefinition, c as McpAuthResult, r as CreateMcpServerConfig } from "./types-9rvxn5Ym.mjs";
+//#region src/integrations/mcp/createMcpServer.d.ts
+/**
+ * Mutable auth ref — updated per-request by mcpPlugin.
+ * Tool handlers read from this to get the current request's auth context.
+ */
+interface AuthRef {
+  current: McpAuthResult | null;
+}
+/**
+ * Create a configured MCP server from declarative config.
+ *
+ * @param config - Server name, version, tools, prompts
+ * @returns McpServer instance (not yet connected to a transport)
+ */
+declare function createMcpServer(config: CreateMcpServerConfig, authRef?: AuthRef): Promise<McpServerInstance>;
+/**
+ * Detect and resolve duplicate MCP tool names across the assembled tool list.
+ *
+ * Two outcomes:
+ *
+ *  1. **Auto-namespace** — when one tool's `source` carries a `preset:<name>`
+ *     prefix and the other doesn't, the preset tool is renamed to
+ *     `<presetName>_<originalName>` (e.g. softDelete's `restore_post`
+ *     becomes `softdelete_restore_post` when the user defines
+ *     `actions.restore`). The user's tool wins the canonical name because
+ *     it's the more-specific intent.
+ *
+ *  2. **Typed throw** — every other collision (two user actions, two
+ *     custom routes, two presets) raises `ArcError('arc.mcp.tool_name_collision')`
+ *     naming both sources so the host's stack trace points at the
+ *     resource definitions, not the MCP SDK internals.
+ *
+ * Exported for the testing harness so collision behaviour can be exercised
+ * without a full server boot.
+ */
+declare function resolveToolCollisions(tools: readonly ToolDefinition[]): ToolDefinition[];
+/** Minimal interface for McpServer — avoids hard SDK type dependency */
+interface McpServerInstance {
+  connect: (transport: unknown) => Promise<void>;
+  registerTool: (name: string, config: Record<string, unknown>, handler: (input: Record<string, unknown>, extra: Record<string, unknown>) => unknown) => unknown;
+  registerPrompt: (name: string, config: Record<string, unknown>, handler: (args: Record<string, unknown>) => unknown) => void;
+  /** v2 name. v1 called this `resource()` — same four arguments. */
+  registerResource: (...args: unknown[]) => void;
+}
+//#endregion
+export { resolveToolCollisions as i, McpServerInstance as n, createMcpServer as r, AuthRef as t };

package/dist/{defineAggregation-0KBvqEEC.mjs → defineAggregation-BDA2Tw7v.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
 //#region src/core/aggregation/defineAggregation.ts
 /**
 * Declare a single resource aggregation. Exported configs flow into

package/dist/{defineResource-BMdyRelW.mjs → defineResource-DaIySrQr.mjs}

@@ -1,20 +1,20 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { p as MUTATION_OPERATIONS, s as DEFAULT_UPDATE_METHOD, t as CRUD_OPERATIONS } from "./constants-BONghE1Y.mjs";
+/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
+import { p as MUTATION_OPERATIONS, s as DEFAULT_UPDATE_METHOD, t as CRUD_OPERATIONS } from "./constants-BQ2FbhPB.mjs";
 import { arcLog } from "./logger/index.mjs";
-import { r as ForbiddenError } from "./errors-2ExmOgIJ.mjs";
-import { n as getUserRoles } from "./userHelpers-CXySQFRg.mjs";
-import { b as isElevated, n as PUBLIC_SCOPE, x as isMember } from "./types-BqLyyH0o.mjs";
-import { d as isWriteVerbCapable, p as DEFAULT_FIELD_WRITE_DENIAL_POLICY, t as BaseController, u as detectOverriddenWriteSlots } from "./BaseController-CYaDvmOB.mjs";
-import { v as getDefaultCrudSchemas } from "./utils-BbGG8XNT.mjs";
-import { a as resolveEffectiveRoles, n as applyFieldWritePermissions } from "./fields-Cha2QCKH.mjs";
-import { n as convertRouteSchema, r as ensureSchemaConverter, t as convertOpenApiSchemas } from "./schemaConverter-Db-MMsH6.mjs";
-import { i as pipeUIMessageStreamToReply, r as isReadableStream } from "./streaming-DkpW1HwJ.mjs";
-import { a as createCrudHandlers, i as resolvePipelineSteps, o as createFastifyHandler, r as buildPipelineHandler, s as createRequestContext, t as resolveActionPermission } from "./actionPermissions-jlFZ1it4.mjs";
-import { a as selectPluginMw, c as buildRouteHooks, d as buildAuthMiddleware, i as resolveRouterPluginMw, l as resolveRoutePreHandlers, n as buildRateLimitConfig, p as buildArcDecorator, r as buildRouteConfig, s as buildCrudPermissionMw, t as tryRegisterRoute, u as routeHookOptions } from "./registerRoute-XvcI_3sh.mjs";
-import { t as hasEvents } from "./typeGuards-DHTnEs5X.mjs";
-import { B as requireAuth } from "./permissions-H7Zcb82Z.mjs";
-import { r as getAvailablePresets, t as applyPresets } from "./presets-CNyfaxGL.mjs";
-import { t as pluralize } from "./pluralize-Da7IT_qJ.mjs";
+import { r as ForbiddenError } from "./errors-BHD3L8of.mjs";
+import { n as getUserRoles } from "./userHelpers-DLueLQdQ.mjs";
+import { b as isElevated, n as PUBLIC_SCOPE, x as isMember } from "./types-CNQyOrLk.mjs";
+import { d as isWriteVerbCapable, p as DEFAULT_FIELD_WRITE_DENIAL_POLICY, t as BaseController, u as detectOverriddenWriteSlots } from "./BaseController-BqJtbiUA.mjs";
+import { v as getDefaultCrudSchemas } from "./utils-CUFBrhq-.mjs";
+import { a as resolveEffectiveRoles, n as applyFieldWritePermissions } from "./fields-fA-Dkou5.mjs";
+import { n as convertRouteSchema, r as ensureSchemaConverter, t as convertOpenApiSchemas } from "./schemaConverter-DENbixyA.mjs";
+import { i as pipeUIMessageStreamToReply, r as isReadableStream } from "./streaming-CFwCzEvU.mjs";
+import { a as createCrudHandlers, i as resolvePipelineSteps, o as createFastifyHandler, r as buildPipelineHandler, s as createRequestContext, t as resolveActionPermission } from "./actionPermissions-4OGbe3Hf.mjs";
+import { a as selectPluginMw, c as buildRouteHooks, d as buildAuthMiddleware, i as resolveRouterPluginMw, l as resolveRoutePreHandlers, n as buildRateLimitConfig, p as buildArcDecorator, r as buildRouteConfig, s as buildCrudPermissionMw, t as tryRegisterRoute, u as routeHookOptions } from "./registerRoute-_6zHiz0x.mjs";
+import { t as hasEvents } from "./typeGuards-t_CVgRXN.mjs";
+import { B as requireAuth } from "./permissions-C0GpDsB_.mjs";
+import { r as getAvailablePresets, t as applyPresets } from "./presets-CAaqVVcW.mjs";
+import { t as pluralize } from "./pluralize-BaQ62hOW.mjs";
 import { isReadOnlyRepo } from "@classytic/repo-core/repository";
 //#region src/core/middlewares/fieldWrite.ts
 /**
@@ -1425,7 +1425,7 @@ function buildResourcePlugin(resource) {
 				extensions: resource.extensions
 			});
 			if (resource.actions && Object.keys(resource.actions).length > 0) {
-				const { createActionRouter } = await import("./createActionRouter-Bqi6Bhhx.mjs").then((n) => n.n);
+				const { createActionRouter } = await import("./createActionRouter-BR93gCKg.mjs").then((n) => n.n);
 				createActionRouter(typedInstance, {
 					...normalizeActionsToRouterConfig(resource.actions, resource.actionPermissions, resource.tag, resource.permissions, resource.name, typedInstance.log),
 					resourceName: resource.name,
@@ -1440,7 +1440,7 @@ function buildResourcePlugin(resource) {
 				});
 			}
 			if (resource.aggregations && Object.keys(resource.aggregations).length > 0) {
-				const [{ createAggregationRouter }, { adapterSupportsAggregate, ArcAggregationConfigError }] = await Promise.all([import("./createAggregationRouter-BsYO7ktd.mjs"), import("./validate-CidSeUrx.mjs").then((n) => n.r)]);
+				const [{ createAggregationRouter }, { adapterSupportsAggregate, ArcAggregationConfigError }] = await Promise.all([import("./createAggregationRouter-CF40Aw95.mjs"), import("./validate-DV3hRbsz.mjs").then((n) => n.r)]);
 				const repoForAgg = resource.controller?.repository ?? resource.repository;
 				if (!adapterSupportsAggregate(repoForAgg)) {
 					const undispatchable = Object.entries(resource.aggregations).filter(([, cfg]) => !cfg.materialized).map(([name]) => name);
@@ -2457,10 +2457,8 @@ function defineResource(config) {
 	const configWithId = resolveIdField(normalisedConfig, repository);
 	const resolvedConfig = applyPresetsAndAutoInject(configWithId);
 	const hasCrudRoutes = computeHasCrudRoutes(resolvedConfig);
-	if (!normalisedConfig.skipValidation) {
-		const strict = resolvedConfig.strictPermissions ?? process.env.ARC_STRICT_PERMISSIONS === "true";
-		diagnostics = diagnostics.concat(collectUngatedCrudDiagnostics(resolvedConfig, strict));
-	}
+	const strict = resolvedConfig.strictPermissions ?? process.env.ARC_STRICT_PERMISSIONS === "true";
+	diagnostics = diagnostics.concat(collectUngatedCrudDiagnostics(resolvedConfig, strict));
 	const fatal = diagnostics.filter((d) => d.severity === "error");
 	if (fatal.length > 0) throw new Error(fatal.map((d) => d.message).join("\n\n"));
 	const narrowedConfig = resolvedConfig;

package/dist/discovery/index.mjs

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
 import { readdir } from "node:fs/promises";
 import { extname, join, resolve } from "node:path";
 import { pathToFileURL } from "node:url";

package/dist/docs/index.d.mts

@@ -1,5 +1,5 @@
 
-import { p as RegistryEntry } from "../index-B78WZom8.mjs";
+import { p as RegistryEntry } from "../index-D3sIPcD4.mjs";
 import { t as ExternalOpenApiPaths } from "../externalPaths-CmGOxOtD.mjs";
 import { FastifyPluginAsync } from "fastify";
 //#region src/docs/openapi/types.d.ts

package/dist/docs/index.mjs

@@ -1,6 +1,6 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { n as getUserRoles } from "../userHelpers-CXySQFRg.mjs";
-import { n as openApiPlugin, r as openapi_default, t as buildOpenApiSpec } from "../openapi-Dxc8RLy_.mjs";
+/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
+import { n as getUserRoles } from "../userHelpers-DLueLQdQ.mjs";
+import { n as openApiPlugin, r as openapi_default, t as buildOpenApiSpec } from "../openapi-BYrL8zvY.mjs";
 import fp from "fastify-plugin";
 //#region src/docs/scalar.ts
 const scalarPlugin = async (fastify, opts = {}) => {

package/dist/{elevation-C6woysGC.mjs → elevation-CZy6n50b.mjs}

@@ -1,8 +1,8 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { t as __exportAll } from "./rolldown-runtime-Add2L50I.mjs";
+/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
+import { t as __exportAll } from "./rolldown-runtime-DzE6ikSH.mjs";
 import { arcLog } from "./logger/index.mjs";
-import { n as requireSingleHeaderValue } from "./headers-DeXNifVj.mjs";
-import { n as getUserRoles } from "./userHelpers-CXySQFRg.mjs";
+import { n as requireSingleHeaderValue } from "./headers-BFEEshDS.mjs";
+import { n as getUserRoles } from "./userHelpers-DLueLQdQ.mjs";
 import fp from "fastify-plugin";
 //#region src/scope/elevation.ts
 var elevation_exports = /* @__PURE__ */ __exportAll({

package/dist/encryption/index.mjs

@@ -1,6 +1,6 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { t as ArcError } from "../errors-2ExmOgIJ.mjs";
-import { t as parseJsonBody } from "../jsonBody-DVui0uJl.mjs";
+/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
+import { t as ArcError } from "../errors-BHD3L8of.mjs";
+import { t as parseJsonBody } from "../jsonBody-Dx6jH_Nb.mjs";
 import { createCipheriv, createDecipheriv, randomBytes } from "node:crypto";
 import fp from "fastify-plugin";
 //#region src/encryption/fieldCipher.ts

package/dist/{errorHandler-DI5AN2b5.d.mts → errorHandler--4rSMMvq.d.mts}

@@ -7,7 +7,13 @@ import { FastifyInstance, FastifyRequest } from "fastify";
  * to a partial `ErrorContract`. Highest-priority dispatch in the handler.
  */
 interface ErrorMapper<T extends Error = Error> {
-  type: abstract new (...args: any[]) => T;
+  /**
+   * Only ever used as `error instanceof mapper.type` — the constructor is never
+   * CALLED through this interface, so `never[]` is the sound parameter type:
+   * every real class assigns to it (constructor parameters are contravariant),
+   * and nothing can invoke it. `any[]` here was a permission nothing used.
+   */
+  type: abstract new (...args: never[]) => T;
   toResponse: (error: T) => {
     status: number;
     code?: string;

package/dist/{errorHandler-BdmIWPba.mjs → errorHandler-By9keRvX.mjs}

@@ -1,6 +1,6 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { t as __exportAll } from "./rolldown-runtime-Add2L50I.mjs";
-import { m as statusToArcCode, p as isArcError } from "./errors-2ExmOgIJ.mjs";
+/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
+import { t as __exportAll } from "./rolldown-runtime-DzE6ikSH.mjs";
+import { m as statusToArcCode, p as isArcError } from "./errors-BHD3L8of.mjs";
 import { isProductionEnv } from "@classytic/primitives/environment";
 import { isHttpError, toErrorContract } from "@classytic/repo-core/errors";
 import fp from "fastify-plugin";

package/dist/{errors-2ExmOgIJ.mjs → errors-BHD3L8of.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
 //#region src/utils/errors.ts
 /**
 * Base Arc Error. Implements the canonical `HttpError` contract — `status`

package/dist/{eventPlugin-DJwpGMzx.mjs → eventPlugin-DB26V7uX.mjs}

@@ -1,9 +1,9 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { t as __exportAll } from "./rolldown-runtime-Add2L50I.mjs";
+/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
+import { t as __exportAll } from "./rolldown-runtime-DzE6ikSH.mjs";
 import { arcLog } from "./logger/index.mjs";
-import { d as createDomainError } from "./errors-2ExmOgIJ.mjs";
-import { n as requestContext } from "./requestContext-DpmntRZy.mjs";
-import { n as MemoryEventTransport, r as createEvent, t as ARC_EVENT_TRANSPORT } from "./EventTransport-Gq7JWbWw.mjs";
+import { d as createDomainError } from "./errors-BHD3L8of.mjs";
+import { n as requestContext } from "./requestContext-D4PuGhEw.mjs";
+import { n as MemoryEventTransport, r as createEvent, t as ARC_EVENT_TRANSPORT } from "./EventTransport-BUkTwY_x.mjs";
 import { isProductionEnv } from "@classytic/primitives/environment";
 import fp from "fastify-plugin";
 //#region src/events/retry.ts

package/dist/{eventPlugin-DFvHa4Nf.d.mts → eventPlugin-DfHaKEWQ.d.mts}

@@ -1,5 +1,5 @@
 
-import { a as EventTransport, i as EventLogger, n as DomainEvent, r as EventHandler, s as MemoryEventTransportOptions } from "./EventTransport-Cx60_s-6.mjs";
+import { a as EventTransport, i as EventLogger, n as DomainEvent, r as EventHandler, s as MemoryEventTransportOptions } from "./EventTransport-BPOQsEer.mjs";
 import { FastifyPluginAsync } from "fastify";
 //#region src/events/defineEvent.d.ts
 interface EventSchema {

package/dist/events/index.d.mts

@@ -1,9 +1,9 @@
 
-import { i as EventLogger, n as DomainEvent, o as MemoryEventTransport, r as EventHandler, s as MemoryEventTransportOptions } from "../EventTransport-Cx60_s-6.mjs";
-import { a as withRetry, c as EventDefinitionOutput, d as EventSchema, f as ValidationResult, i as createDeadLetterPublisher, l as EventRegistry, m as defineEvent, n as eventPlugin, o as CustomValidator, p as createEventRegistry, r as RetryOptions, s as EventDefinitionInput, t as EventPluginOptions, u as EventRegistryOptions } from "../eventPlugin-DFvHa4Nf.mjs";
-import { a as EventOutbox, c as OutboxRelayErrorKind, i as MemoryOutboxStore, l as RelayResult, n as OutboxModuleOptions, o as EventOutboxOptions, r as createOutboxModule, s as OutboxRelayErrorHandler, t as OutboxModuleExports } from "../outbox-module-CQXu_O6o.mjs";
+import { i as EventLogger, n as DomainEvent, o as MemoryEventTransport, r as EventHandler, s as MemoryEventTransportOptions } from "../EventTransport-BPOQsEer.mjs";
+import { a as withRetry, c as EventDefinitionOutput, d as EventSchema, f as ValidationResult, i as createDeadLetterPublisher, l as EventRegistry, m as defineEvent, n as eventPlugin, o as CustomValidator, p as createEventRegistry, r as RetryOptions, s as EventDefinitionInput, t as EventPluginOptions, u as EventRegistryOptions } from "../eventPlugin-DfHaKEWQ.mjs";
+import { a as EventOutbox, c as OutboxRelayErrorKind, i as MemoryOutboxStore, l as RelayResult, n as OutboxModuleOptions, o as EventOutboxOptions, r as createOutboxModule, s as OutboxRelayErrorHandler, t as OutboxModuleExports } from "../outbox-module-CzsKRBvO.mjs";
 import { RedisEventTransportOptions, RedisLike } from "./transports/redis.mjs";
-import { r as RedisStreamTransportOptions, t as RedisStreamLike } from "../redis-stream-eh0eOtjh.mjs";
+import { r as RedisStreamTransportOptions, t as RedisStreamLike } from "../redis-stream-DSsPyYzd.mjs";
 import { OutboxStore } from "@classytic/primitives/outbox";
 import { RepositoryLike } from "@classytic/repo-core/adapter";
 //#region src/events/eventTypes.d.ts

package/dist/events/index.mjs

@@ -1,8 +1,8 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { n as MemoryEventTransport } from "../EventTransport-Gq7JWbWw.mjs";
-import { a as createEventRegistry, i as wrapWithSchema, n as subscribeWithSchema, o as defineEvent, r as wrapWithBoundary, t as subscribeWithBoundary } from "../subscribe-helpers-CBZOi6pk.mjs";
-import { i as withRetry, r as createDeadLetterPublisher, t as eventPlugin } from "../eventPlugin-DJwpGMzx.mjs";
-import { i as exponentialBackoff, n as EventOutbox, r as repositoryAsOutboxStore, t as createOutboxModule } from "../outbox-module-DyIqA5vo.mjs";
+/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
+import { n as MemoryEventTransport } from "../EventTransport-BUkTwY_x.mjs";
+import { a as createEventRegistry, i as wrapWithSchema, n as subscribeWithSchema, o as defineEvent, r as wrapWithBoundary, t as subscribeWithBoundary } from "../subscribe-helpers-KgVEcn8L.mjs";
+import { i as withRetry, r as createDeadLetterPublisher, t as eventPlugin } from "../eventPlugin-DB26V7uX.mjs";
+import { i as exponentialBackoff, n as EventOutbox, r as repositoryAsOutboxStore, t as createOutboxModule } from "../outbox-module-6DMC_WNu.mjs";
 import { MemoryOutboxStore } from "@classytic/primitives/memory-outbox";
 //#region src/events/eventTypes.ts
 /**

package/dist/events/transports/redis-stream-entry.d.mts

@@ -1,3 +1,3 @@
 
-import { n as RedisStreamTransport, r as RedisStreamTransportOptions, t as RedisStreamLike } from "../../redis-stream-eh0eOtjh.mjs";
+import { n as RedisStreamTransport, r as RedisStreamTransportOptions, t as RedisStreamLike } from "../../redis-stream-DSsPyYzd.mjs";
 export { type RedisStreamLike, RedisStreamTransport, type RedisStreamTransportOptions };

package/dist/events/transports/redis-stream-entry.mjs

@@ -1,5 +1,7 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
+import { r as workSeedFromEvent, t as runWorkScope } from "../../workScope-CoGpuzDX.mjs";
 import sjson from "secure-json-parse";
+import { matchEventPattern } from "@classytic/primitives/events";
 //#region src/events/transports/redis-stream.ts
 /**
 * Redis Stream Event Transport — Durable Event Delivery
@@ -183,7 +185,7 @@ var RedisStreamTransport = class {
 		this.generation++;
 		this.handlers.clear();
 		this.failureContext.clear();
-		if (this.pollPromise) {
+		if (this.pollPromise !== null) {
 			if (await Promise.race([this.pollPromise.then(() => "drained"), this.sleep(this.closeTimeoutMs).then(() => "timeout")]) === "timeout") {
 				if (!this.externalLifecycle) {
 					if (typeof this.redis.disconnect === "function") this.redis.disconnect();
@@ -278,14 +280,16 @@ var RedisStreamTransport = class {
 		let allSucceeded = true;
 		let lastError;
 		let lastHandlerName;
-		for (const handler of matchingHandlers) try {
-			await handler(event);
-		} catch (err) {
-			allSucceeded = false;
-			lastError = err instanceof Error ? err : new Error(String(err));
-			lastHandlerName = handler.name || lastHandlerName;
-			this.logger.error(`[RedisStreamTransport] Handler error for ${event.type}:`, err);
-		}
+		await runWorkScope(workSeedFromEvent(event), async () => {
+			for (const handler of matchingHandlers) try {
+				await handler(event);
+			} catch (err) {
+				allSucceeded = false;
+				lastError = err instanceof Error ? err : new Error(String(err));
+				lastHandlerName = handler.name || lastHandlerName;
+				this.logger.error(`[RedisStreamTransport] Handler error for ${event.type}:`, err);
+			}
+		});
 		if (allSucceeded) {
 			await this.redis.xack(this.stream, this.group, messageId);
 			this.failureContext.delete(messageId);
@@ -306,20 +310,17 @@ var RedisStreamTransport = class {
 			if (oldest !== void 0) this.failureContext.delete(oldest);
 		}
 	}
+	/**
+	* The canonical matcher from primitives — the SAME glob rules the memory
+	* transport speaks. A private matcher here once accepted `prefix.*` but not
+	* `prefix:*`, so an `order:*` subscription that worked in-process received
+	* nothing after a move to the stream, with no error.
+	*/
 	getMatchingHandlers(eventType) {
 		const matched = [];
-		for (const [pattern, handlers] of this.handlers) if (this.matchesPattern(pattern, eventType)) for (const h of handlers) matched.push(h);
+		for (const [pattern, handlers] of this.handlers) if (matchEventPattern(pattern, eventType)) for (const h of handlers) matched.push(h);
 		return matched;
 	}
-	matchesPattern(pattern, eventType) {
-		if (pattern === "*") return true;
-		if (pattern === eventType) return true;
-		if (pattern.endsWith(".*")) {
-			const prefix = pattern.slice(0, -2);
-			return eventType.startsWith(`${prefix}.`);
-		}
-		return false;
-	}
 	async moveToDlq(ids) {
 		if (this.deadLetterStream === false) {
 			for (const id of ids) {

package/dist/events/transports/redis.d.mts

@@ -1,5 +1,5 @@
 
-import { a as EventTransport, i as EventLogger, n as DomainEvent, r as EventHandler } from "../../EventTransport-Cx60_s-6.mjs";
+import { a as EventTransport, i as EventLogger, n as DomainEvent, r as EventHandler } from "../../EventTransport-BPOQsEer.mjs";
 //#region src/events/transports/redis.d.ts
 interface RedisLike {
   publish(channel: string, message: string): Promise<number>;

package/dist/events/transports/redis.mjs

@@ -1,4 +1,5 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
+import { r as workSeedFromEvent, t as runWorkScope } from "../../workScope-CoGpuzDX.mjs";
 import sjson from "secure-json-parse";
 //#region src/events/transports/redis.ts
 /**
@@ -107,14 +108,16 @@ var RedisEventTransport = class {
 		} catch {
 			return;
 		}
-		for (const handler of handlers) try {
-			const result = handler(event);
-			if (result && typeof result === "object" && "catch" in result) result.catch((err) => {
+		runWorkScope(workSeedFromEvent(event), () => {
+			for (const handler of handlers) try {
+				const result = handler(event);
+				if (result && typeof result === "object" && "catch" in result) result.catch((err) => {
+					this.logger.error(`[RedisEventTransport] Handler error for ${event.type}:`, err);
+				});
+			} catch (err) {
 				this.logger.error(`[RedisEventTransport] Handler error for ${event.type}:`, err);
-			});
-		} catch (err) {
-			this.logger.error(`[RedisEventTransport] Handler error for ${event.type}:`, err);
-		}
+			}
+		});
 	}
 	/**
 	* Convert an Arc event pattern to a Redis channel/pattern string.

package/dist/factory/index.d.mts

@@ -1,8 +1,8 @@
 
-import { _ as HealthCheck, a as ModuleContribution, c as LoadResourcesOptions, d as loadResources, i as EventHandlerDefinition, l as ResourceLike, n as ArcModuleInput, o as ModuleDisposer, r as ArcModuleRegistry, s as ModuleSetupContext, t as ArcModule, u as ResourceModule } from "../types-BRU-Kd3t.mjs";
-import { _ as collectModuleScheduledJobs, a as lazyModuleExports, c as getModuleState, d as resolveModule, f as orderModules, g as collectModuleHealthChecks, h as extendModule, i as hasModuleExports, l as hasModule, m as ModuleExtension, n as getModuleExports, o as lazyRequiredModuleExports, p as subscribeModuleEventHandlers, r as getOptionalModuleExports, s as ModuleState, t as defineModule, u as resolveContribution, v as collectModuleWorkflows } from "../index-D2uIUSQk.mjs";
-import { c as ResolvedResourceDescriptor, l as describeResolvedModule, o as ResolvedModuleDescriptor, s as ResolvedModuleLifecycle } from "../fastify-augmentation-jYA2oHyL.mjs";
-import { a as RawBodyOptions, c as BetterAuthOption, d as JwtAuthOption, i as MultipartOptions, l as CustomAuthenticatorOption, n as preloadResourcesAsync, o as UnderPressureOptions, r as CreateAppOptions, s as AuthOption, t as preloadResources, u as CustomPluginAuthOption } from "../preloadResources-BbBkNkqK.mjs";
+import { _ as HealthCheck, a as ModuleContribution, c as LoadResourcesOptions, d as loadResources, i as EventHandlerDefinition, l as ResourceLike, n as ArcModuleInput, o as ModuleDisposer, r as ArcModuleRegistry, s as ModuleSetupContext, t as ArcModule, u as ResourceModule } from "../types-BVlowlm7.mjs";
+import { _ as collectModuleScheduledJobs, a as lazyModuleExports, c as getModuleState, d as resolveModule, f as orderModules, g as collectModuleHealthChecks, h as extendModule, i as hasModuleExports, l as hasModule, m as ModuleExtension, n as getModuleExports, o as lazyRequiredModuleExports, p as subscribeModuleEventHandlers, r as getOptionalModuleExports, s as ModuleState, t as defineModule, u as resolveContribution, v as collectModuleWorkflows } from "../index-DbMglURO.mjs";
+import { c as ResolvedResourceDescriptor, l as describeResolvedModule, o as ResolvedModuleDescriptor, s as ResolvedModuleLifecycle } from "../fastify-augmentation-HncZMmze.mjs";
+import { a as RawBodyOptions, c as BetterAuthOption, d as JwtAuthOption, i as MultipartOptions, l as CustomAuthenticatorOption, n as preloadResourcesAsync, o as UnderPressureOptions, r as CreateAppOptions, s as AuthOption, t as preloadResources, u as CustomPluginAuthOption } from "../preloadResources-DVgPCNcD.mjs";
 import { FastifyInstance, FastifyServerOptions } from "fastify";
 //#region src/factory/createApp.d.ts
 /**

package/dist/factory/index.mjs

@@ -1,8 +1,8 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { r as mergeHealthChecks, t as healthPlugin } from "../health-Bh0N_FLk.mjs";
-import { S as resolveModule, _ as describeResolvedModule, a as createApp, b as collectModuleWorkflows, c as edgePreset, d as testingPreset, f as workerPreset, g as subscribeModuleEventHandlers, h as orderModules, i as DEFAULT_LOGGER_REDACT_PATHS, l as getPreset, m as hasModule, n as preloadResourcesAsync, p as getModuleState, r as ArcFactory, s as developmentPreset, t as preloadResources, u as productionPreset, v as collectModuleHealthChecks, x as resolveContribution, y as collectModuleScheduledJobs } from "../preloadResources-DlhH81py.mjs";
-import { a as lazyModuleExports, i as hasModuleExports, n as getModuleExports, o as lazyRequiredModuleExports, r as getOptionalModuleExports, t as defineModule } from "../module-BQXHxMEk.mjs";
-import { t as loadResources } from "../loadResources-CNd1DWnK.mjs";
+/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
+import { r as mergeHealthChecks, t as healthPlugin } from "../health-BlGHjkqZ.mjs";
+import { S as resolveModule, _ as describeResolvedModule, a as createApp, b as collectModuleWorkflows, c as edgePreset, d as testingPreset, f as workerPreset, g as subscribeModuleEventHandlers, h as orderModules, i as DEFAULT_LOGGER_REDACT_PATHS, l as getPreset, m as hasModule, n as preloadResourcesAsync, p as getModuleState, r as ArcFactory, s as developmentPreset, t as preloadResources, u as productionPreset, v as collectModuleHealthChecks, x as resolveContribution, y as collectModuleScheduledJobs } from "../preloadResources-BAx5s9EF.mjs";
+import { a as lazyModuleExports, i as hasModuleExports, n as getModuleExports, o as lazyRequiredModuleExports, r as getOptionalModuleExports, t as defineModule } from "../module-CNcwCKUJ.mjs";
+import { t as loadResources } from "../loadResources-E5UFlRrT.mjs";
 //#region src/factory/module/extend.ts
 /** Concatenate two contributions, resolving factories only when arc asks. */
 function mergeContribution(own, extra) {

package/dist/{fastify-augmentation-jYA2oHyL.d.mts → fastify-augmentation-HncZMmze.d.mts}

@@ -1,8 +1,8 @@
 
-import { on as HookSystem, z as ResourceRegistry } from "./index-B78WZom8.mjs";
+import { on as HookSystem, z as ResourceRegistry } from "./index-D3sIPcD4.mjs";
 import { t as ExternalOpenApiPaths } from "./externalPaths-CmGOxOtD.mjs";
-import { _ as HealthCheck, f as ScheduleDefinition, r as ArcModuleRegistry, t as ArcModule } from "./types-BRU-Kd3t.mjs";
-import { s as ModuleState } from "./index-D2uIUSQk.mjs";
+import { _ as HealthCheck, f as ScheduleDefinition, r as ArcModuleRegistry, t as ArcModule } from "./types-BVlowlm7.mjs";
+import { s as ModuleState } from "./index-DbMglURO.mjs";
 import { FastifyPluginAsync } from "fastify";
 //#region src/factory/module/descriptor.d.ts
 /**

package/dist/{fields-Cha2QCKH.mjs → fields-fA-Dkou5.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
 //#region src/permissions/fields.ts
 /**
 * Field-Level Permissions

package/dist/{generate-BUP4Oydg.mjs → generate-BSSdtiOy.mjs}

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { t as pluralize } from "./pluralize-Da7IT_qJ.mjs";
+/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
+import { t as pluralize } from "./pluralize-BaQ62hOW.mjs";
 import { join } from "node:path";
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 //#region src/cli/commands/generate/name-helpers.ts
@@ -470,7 +470,8 @@ export default ${camel}Resource;
  */
 
 import { defineTool } from '@classytic/arc/mcp';
-${ts ? "import { z } from 'zod';\n" : "const { z } = require('zod');\n"}
+import { z } from 'zod';
+
 // Example: domain-specific action tool
 // export const activate${name}Tool = defineTool('activate_${fileName}', {
 //   description: 'Activate a ${name.toLowerCase()} by ID',