@classytic/arc 2.38.0 → 2.40.0

package/dist/integrations/streamline.mjs

@@ -1,6 +1,6 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { f as createError, i as NotFoundError, r as ForbiddenError } from "../errors-2ExmOgIJ.mjs";
-import { a as promoteStreamTokenToHeader, n as forwardedStreamHeaders } from "../streaming-DkpW1HwJ.mjs";
+/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
+import { f as createError, i as NotFoundError, r as ForbiddenError } from "../errors-BHD3L8of.mjs";
+import { a as promoteStreamTokenToHeader, n as forwardedStreamHeaders } from "../streaming-CFwCzEvU.mjs";
 import fp from "fastify-plugin";
 //#region src/integrations/streamline.ts
 /**

package/dist/integrations/webhooks.d.mts

@@ -1,6 +1,6 @@
 
-import { a as EventTransport, n as DomainEvent } from "../EventTransport-Cx60_s-6.mjs";
-import { n as OutboxModuleOptions, r as createOutboxModule } from "../outbox-module-CQXu_O6o.mjs";
+import { a as EventTransport, n as DomainEvent } from "../EventTransport-BPOQsEer.mjs";
+import { n as OutboxModuleOptions, r as createOutboxModule } from "../outbox-module-CzsKRBvO.mjs";
 import { FastifyPluginAsync } from "fastify";
 import { OutboxFailurePolicy, OutboxStore } from "@classytic/primitives/outbox";
 //#region src/integrations/webhooks.d.ts

package/dist/integrations/webhooks.mjs

@@ -1,6 +1,6 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { n as declareRuntimeCapability } from "../runtimeCapabilities-D793Pxci.mjs";
-import { i as exponentialBackoff, t as createOutboxModule } from "../outbox-module-DyIqA5vo.mjs";
+/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
+import { n as declareRuntimeCapability } from "../runtimeCapabilities-Bo7rSKjm.mjs";
+import { i as exponentialBackoff, t as createOutboxModule } from "../outbox-module-6DMC_WNu.mjs";
 import { createHmac, timingSafeEqual } from "node:crypto";
 import fp from "fastify-plugin";
 import { createChildEvent } from "@classytic/primitives/events";

package/dist/integrations/websocket-pushref-redis.mjs

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
 //#region src/integrations/websocket-pushref-redis.ts
 /**
 * Lua script for atomic claim. Runs server-side, single-roundtrip.

package/dist/integrations/websocket-redis.mjs

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
 //#region src/integrations/websocket-redis.ts
 /**
 * Redis Pub/Sub adapter for cross-instance WebSocket broadcast.

package/dist/integrations/websocket.mjs

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
 import { randomUUID } from "node:crypto";
 import sjson from "secure-json-parse";
 import fp from "fastify-plugin";
@@ -968,7 +968,7 @@ async function handleConnection(ctx, socket, request) {
 			socket.close(4003, "Session expired");
 		}
 	}, options.reauthInterval);
-	socket.on("message", async (raw) => {
+	socket.on("message", (raw) => safeAsync((async () => {
 		if ((typeof raw === "string" ? Buffer.byteLength(raw) : raw.length) > options.maxMessageBytes) {
 			socket.send(JSON.stringify({
 				type: "error",
@@ -1057,12 +1057,19 @@ async function handleConnection(ctx, socket, request) {
 			}
 			default: await options.onMessage?.(client, msg);
 		}
-	});
-	socket.on("close", async () => {
+	})(), fastify.log, "ws.message", { clientId }));
+	socket.on("close", () => safeAsync((async () => {
 		if (heartbeatTimer) clearInterval(heartbeatTimer);
 		if (reauthTimer) clearInterval(reauthTimer);
 		if (rooms.getClient(clientId)?.socket === socket) {
-			await options.onDisconnect?.(client);
+			try {
+				await options.onDisconnect?.(client);
+			} catch (err) {
+				fastify.log.warn({
+					err,
+					clientId
+				}, "[arc] websocket onDisconnect threw");
+			}
 			rooms.removeClient(clientId);
 		}
 		queue.dispose();
@@ -1070,7 +1077,7 @@ async function handleConnection(ctx, socket, request) {
 			pushRef,
 			generation
 		});
-	});
+	})(), fastify.log, "ws.close", { clientId }));
 	socket.on("error", () => {
 		if (heartbeatTimer) clearInterval(heartbeatTimer);
 		if (reauthTimer) clearInterval(reauthTimer);

package/dist/{interface-DYPVscCU.mjs → interface-DjtFnZxH.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
 //#region src/idempotency/stores/interface.ts
 /**
 * Helper to create a result object

package/dist/{jsonBody-DVui0uJl.mjs → jsonBody-Dx6jH_Nb.mjs}

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { t as ArcError } from "./errors-2ExmOgIJ.mjs";
+/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
+import { t as ArcError } from "./errors-BHD3L8of.mjs";
 import sjson from "secure-json-parse";
 //#region src/utils/jsonBody.ts
 /**

package/dist/{keys-BSuxGS-B.mjs → keys-Ds3ekBiu.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
 //#region src/cache/keys.ts
 /**
 * Cache Key Utilities

package/dist/{loadResources-CNd1DWnK.mjs → loadResources-E5UFlRrT.mjs}

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { t as __exportAll } from "./rolldown-runtime-Add2L50I.mjs";
+/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
+import { t as __exportAll } from "./rolldown-runtime-DzE6ikSH.mjs";
 import { arcLog } from "./logger/index.mjs";
 import { readdir } from "node:fs/promises";
 import { dirname, join, resolve } from "node:path";

package/dist/{loadResourcesFromEntry-DNj8cpiY.mjs → loadResourcesFromEntry-C2jrJbWG.mjs}

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { t as ResourceRegistry } from "./ResourceRegistry-DPcX--zk.mjs";
+/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
+import { t as ResourceRegistry } from "./ResourceRegistry-B9WnuG2Q.mjs";
 import { resolve } from "node:path";
 import { pathToFileURL } from "node:url";
 //#region src/cli/utils/loadResourcesFromEntry.ts

package/dist/logger/index.mjs

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
 import { AsyncLocalStorage } from "node:async_hooks";
 //#region src/logger/index.ts
 /**

package/dist/{mcpPlugin-KWsezMx7.mjs → mcpPlugin-D-3OLxNz.mjs}

@@ -1,18 +1,18 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { r as evaluatePermissionDecision } from "./authorizationDecision-BP8GHtjc.mjs";
-import { p as isArcError, t as ArcError } from "./errors-2ExmOgIJ.mjs";
-import { n as requireSingleHeaderValue } from "./headers-DeXNifVj.mjs";
-import { b as isElevated, c as getOrgId, g as getUserId, x as isMember } from "./types-BqLyyH0o.mjs";
-import { t as BaseController } from "./BaseController-CYaDvmOB.mjs";
-import { a as resolveEffectiveRoles, t as applyFieldReadPermissions } from "./fields-Cha2QCKH.mjs";
-import { t as buildRequestScopeProjection } from "./projection-DSfEoooA.mjs";
-import { i as resolvePipelineSteps, t as resolveActionPermission } from "./actionPermissions-jlFZ1it4.mjs";
-import { t as executePipeline } from "./pipe-SunhEaZ6.mjs";
-import { t as pluralize } from "./pluralize-Da7IT_qJ.mjs";
-import { t as createIdempotencyResult } from "./interface-DYPVscCU.mjs";
-import { r as shouldRejectAdditionalProperties, t as normalizeSchemaIR } from "./schemaIR-CIXShch7.mjs";
-import { n as validateAggregations } from "./validate-CidSeUrx.mjs";
-import { n as executeAggregation } from "./buildHandler-DjXOqIvX.mjs";
+/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
+import { r as evaluatePermissionDecision } from "./authorizationDecision-D_LFvMlm.mjs";
+import { p as isArcError, t as ArcError } from "./errors-BHD3L8of.mjs";
+import { n as requireSingleHeaderValue } from "./headers-BFEEshDS.mjs";
+import { b as isElevated, c as getOrgId, g as getUserId, x as isMember } from "./types-CNQyOrLk.mjs";
+import { t as BaseController } from "./BaseController-BqJtbiUA.mjs";
+import { a as resolveEffectiveRoles, t as applyFieldReadPermissions } from "./fields-fA-Dkou5.mjs";
+import { t as buildRequestScopeProjection } from "./projection-qbCOEvsh.mjs";
+import { i as resolvePipelineSteps, t as resolveActionPermission } from "./actionPermissions-4OGbe3Hf.mjs";
+import { t as executePipeline } from "./pipe-4_XamfxI.mjs";
+import { t as pluralize } from "./pluralize-BaQ62hOW.mjs";
+import { t as createIdempotencyResult } from "./interface-DjtFnZxH.mjs";
+import { r as shouldRejectAdditionalProperties, t as normalizeSchemaIR } from "./schemaIR-C2qUNzC6.mjs";
+import { n as validateAggregations } from "./validate-DV3hRbsz.mjs";
+import { n as executeAggregation } from "./buildHandler-BG_CHXqQ.mjs";
 import { isHttpError, toErrorContract } from "@classytic/repo-core/errors";
 import { createHash, randomUUID } from "node:crypto";
 import fp from "fastify-plugin";
@@ -50,7 +50,7 @@ import { z } from "zod";
 * @returns McpServer instance (not yet connected to a transport)
 */
 async function createMcpServer(config, authRef) {
-	const { McpServer } = await import("@modelcontextprotocol/sdk/server/mcp.js");
+	const { McpServer } = await import("@modelcontextprotocol/server");
 	const server = new McpServer({
 		name: config.name,
 		version: config.version ?? "1.0.0"
@@ -130,25 +130,39 @@ function registerTool(server, tool, authRef) {
 	const config = {};
 	if (tool.title) config.title = tool.title;
 	if (tool.description) config.description = tool.description;
+	/**
+	* Flat SHAPES are passed straight through. v2's `registerTool` carries a
+	* `ZodRawShape` overload and auto-wraps it in `z.object()` itself, so arc's
+	* host-facing ergonomic (`{ name: z.string() }`) needs no adaptation layer.
+	*
+	* arc's own MIGRATION-V2 notes claimed v2 "requires z.object(), raw shapes no
+	* longer accepted" and a wrap was written here on that basis. That was true of
+	* the PRE-ALPHA and is not true of 2.0.0 — checked against the shipped
+	* overloads. Wrapping anyway would have been arc maintaining an adapter for a
+	* conversion the SDK already owns.
+	*/
 	if (tool.inputSchema) config.inputSchema = tool.inputSchema;
 	if (tool.outputSchema) config.outputSchema = tool.outputSchema;
 	if (tool.annotations) config.annotations = tool.annotations;
-	srv.registerTool(tool.name, config, (input, extra) => {
+	srv.registerTool(tool.name, config, (input, mcpCtx) => {
 		const ctx = {
 			session: authRef?.current ?? null,
+			/**
+			* v2 exposes logging as `ctx.mcpReq.log(level, message)` — the SDK builds
+			* the `notifications/message` envelope and correlates it to the in-flight
+			* request. v1 handed over a raw `sendNotification` that arc had to frame
+			* itself; that hand-framed envelope carried no request id, so a log line
+			* from a tool arrived uncorrelated.
+			*
+			* Still best-effort: a transport that has already closed must not turn a
+			* successful tool call into a failed one.
+			*/
 			log: async (level, message) => {
 				try {
-					const notify = extra?.sendNotification;
-					if (notify) await notify({
-						method: "notifications/message",
-						params: {
-							level,
-							data: message
-						}
-					});
+					await (mcpCtx?.mcpReq)?.log?.(level, message);
 				} catch {}
 			},
-			extra
+			extra: mcpCtx
 		};
 		return tool.handler(input, ctx);
 	});
@@ -2035,7 +2049,7 @@ function resourceToTools(resource, config = {}) {
 */
 function registerSchemaResources(server, resources, overrides) {
 	const srv = server;
-	srv.resource("schemas", "arc://schemas", {
+	srv.registerResource("schemas", "arc://schemas", {
 		title: "Arc Resource Schemas",
 		description: "All available resources",
 		mimeType: "application/json"
@@ -2053,7 +2067,7 @@ function registerSchemaResources(server, resources, overrides) {
 	for (const r of resources) {
 		const uri = `arc://schemas/${r.name}`;
 		const schemaOpts = r.schemaOptions;
-		srv.resource(`schema-${r.name}`, uri, {
+		srv.registerResource(`schema-${r.name}`, uri, {
 			title: `${r.displayName} Schema`,
 			description: `Schema for ${r.displayName}`,
 			mimeType: "application/json"
@@ -2181,7 +2195,7 @@ var McpSessionCache = class {
 	closeTransport(entry) {
 		try {
 			const transport = entry.transport;
-			if (transport && typeof transport.close === "function") transport.close();
+			if (transport && typeof transport.close === "function") Promise.resolve(transport.close()).catch(() => {});
 		} catch {}
 	}
 };
@@ -2219,9 +2233,9 @@ var McpSessionCache = class {
 const mcpPluginImpl = async (fastify, options) => {
 	let StreamableHTTPServerTransport;
 	try {
-		StreamableHTTPServerTransport = (await import("@modelcontextprotocol/sdk/server/streamableHttp.js")).StreamableHTTPServerTransport;
+		StreamableHTTPServerTransport = (await import("@modelcontextprotocol/node")).NodeStreamableHTTPServerTransport;
 	} catch {
-		throw new Error("@modelcontextprotocol/sdk is required for MCP support. Install it: npm install @modelcontextprotocol/sdk");
+		throw new Error("@modelcontextprotocol/server and @modelcontextprotocol/node are required for MCP support. Install them: npm install @modelcontextprotocol/server @modelcontextprotocol/node");
 	}
 	try {
 		await import("zod");
@@ -2286,6 +2300,36 @@ const mcpPluginImpl = async (fastify, options) => {
 		const more = allTools.length > 5 ? ` (+${allTools.length - 5} more)` : "";
 		fastify.log.warn(`[arc/mcp] MCP server registered at "${prefix}" with auth DISABLED. Anyone who can reach this URL has full access to ${allTools.length} tools across ${enabledResources.length} resources: ${toolList}${more}. Pass \`auth: betterAuthInstance\` or \`auth: async (headers) => ...\` to gate access. Safe only for stdio transports, local development, or explicitly-public read-only APIs.`);
 	}
+	const rebindOption = options.dnsRebindingProtection;
+	if (rebindOption === void 0 ? options.auth === false : rebindOption !== false) {
+		const { validateHostHeader, validateOriginHeader, localhostAllowedHostnames } = await import("@modelcontextprotocol/server");
+		const cfg = rebindOption === void 0 || rebindOption === false ? {} : rebindOption;
+		const allowedHosts = cfg.allowedHosts ?? localhostAllowedHostnames();
+		const allowedOrigins = cfg.allowedOrigins ?? allowedHosts;
+		const healthPath = `${prefix}/health`;
+		fastify.addHook("onRequest", async (request, reply) => {
+			if (!request.url.startsWith(prefix)) return;
+			if (request.url.split("?")[0] === healthPath) return;
+			const host = validateHostHeader(request.headers.host, allowedHosts);
+			if (!host.ok) return reply.code(403).send({
+				jsonrpc: "2.0",
+				error: {
+					code: -32e3,
+					message: host.message
+				},
+				id: null
+			});
+			const origin = validateOriginHeader(request.headers.origin, allowedOrigins);
+			if (!origin.ok) return reply.code(403).send({
+				jsonrpc: "2.0",
+				error: {
+					code: -32e3,
+					message: origin.message
+				},
+				id: null
+			});
+		});
+	}
 	fastify.get(`${prefix}/health`, async (request, reply) => {
 		const liveness = {
 			status: "ok",

package/dist/{memory-BiPVaCPg.mjs → memory-CNvjxzB2.mjs}

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { t as __exportAll } from "./rolldown-runtime-Add2L50I.mjs";
+/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
+import { t as __exportAll } from "./rolldown-runtime-DzE6ikSH.mjs";
 //#region src/cache/memory.ts
 var memory_exports = /* @__PURE__ */ __exportAll({ MemoryCacheStore: () => MemoryCacheStore });
 /**

package/dist/{metrics-CsWaIVTa.mjs → metrics-P37sNV5H.mjs}

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { t as __exportAll } from "./rolldown-runtime-Add2L50I.mjs";
+/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
+import { t as __exportAll } from "./rolldown-runtime-DzE6ikSH.mjs";
 import fp from "fastify-plugin";
 //#region src/plugins/metrics.ts
 var metrics_exports = /* @__PURE__ */ __exportAll({

package/dist/middleware/index.d.mts

@@ -1,5 +1,5 @@
 
-import { I as MiddlewareHandler, L as RequestWithExtras, Q as MiddlewareConfig } from "../index-B78WZom8.mjs";
+import { I as MiddlewareHandler, L as RequestWithExtras, Q as MiddlewareConfig } from "../index-D3sIPcD4.mjs";
 import { RouteHandlerMethod } from "fastify";
 //#region src/middleware/middleware.d.ts
 interface NamedMiddleware {

package/dist/middleware/index.mjs

@@ -1,6 +1,6 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { t as CRUD_OPERATIONS } from "../constants-BONghE1Y.mjs";
-import { t as multipartBody } from "../multipartBody-u6VrS_iH.mjs";
+/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
+import { t as CRUD_OPERATIONS } from "../constants-BQ2FbhPB.mjs";
+import { t as multipartBody } from "../multipartBody-Bl_gU3Wg.mjs";
 //#region src/middleware/middleware.ts
 /**
 * Named Middleware — Priority-based, conditional middleware execution.

package/dist/migrations/index.mjs

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { t as startRenewingLease } from "../renewingLease-DuRGVOMe.mjs";
+/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
+import { t as startRenewingLease } from "../renewingLease-B5Grm0pI.mjs";
 import { createHash, randomUUID } from "node:crypto";
 //#region src/migrations/index.ts
 /**

package/dist/{module-BQXHxMEk.mjs → module-CNcwCKUJ.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
 //#region src/factory/module/index.ts
 /**
 * Identity helper for authoring a typed module — mirrors `defineResource`.

package/dist/{multipartBody-u6VrS_iH.mjs → multipartBody-Bl_gU3Wg.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
 import sjson from "secure-json-parse";
 //#region src/middleware/multipartBody.ts
 const DEFAULT_MAX_FILE_SIZE = 10485760;

package/dist/{openapi-Dxc8RLy_.mjs → openapi-BYrL8zvY.mjs}

@@ -1,9 +1,9 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { n as getUserRoles } from "./userHelpers-CXySQFRg.mjs";
-import { n as convertRouteSchema } from "./schemaConverter-Db-MMsH6.mjs";
-import { t as resolveActionPermission } from "./actionPermissions-jlFZ1it4.mjs";
-import { t as pluralize } from "./pluralize-Da7IT_qJ.mjs";
-import { t as buildActionBodySchema } from "./createActionRouter-Bqi6Bhhx.mjs";
+/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
+import { n as getUserRoles } from "./userHelpers-DLueLQdQ.mjs";
+import { n as convertRouteSchema } from "./schemaConverter-DENbixyA.mjs";
+import { t as resolveActionPermission } from "./actionPermissions-4OGbe3Hf.mjs";
+import { t as pluralize } from "./pluralize-BaQ62hOW.mjs";
+import { t as buildActionBodySchema } from "./createActionRouter-BR93gCKg.mjs";
 import fp from "fastify-plugin";
 //#region src/docs/openapi/canonical-schemas.ts
 /**

package/dist/outbox-admin/index.d.mts

@@ -1,6 +1,6 @@
 
 import { l as PermissionCheck } from "../base-C-NL2fTi.mjs";
-import { t as ArcModule } from "../types-BRU-Kd3t.mjs";
+import { t as ArcModule } from "../types-BVlowlm7.mjs";
 import { OutboxStore } from "@classytic/primitives/outbox";
 //#region src/outbox-admin/module.d.ts
 /**

package/dist/outbox-admin/index.mjs

@@ -1,7 +1,7 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { i as NotFoundError, u as ValidationError } from "../errors-2ExmOgIJ.mjs";
-import { t as defineResource } from "../defineResource-BMdyRelW.mjs";
-import { n as getModuleExports, t as defineModule } from "../module-BQXHxMEk.mjs";
+/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
+import { i as NotFoundError, u as ValidationError } from "../errors-BHD3L8of.mjs";
+import { t as defineResource } from "../defineResource-DaIySrQr.mjs";
+import { n as getModuleExports, t as defineModule } from "../module-CNcwCKUJ.mjs";
 //#region src/outbox-admin/module.ts
 /**
 * Strip the domain payload and the stack unless explicitly opted in.

package/dist/{outbox-module-DyIqA5vo.mjs → outbox-module-6DMC_WNu.mjs}

@@ -1,7 +1,7 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { t as transactionContext } from "./transactionContext-DMmvcfdo.mjs";
-import { i as resolveEventTransport } from "./EventTransport-Gq7JWbWw.mjs";
-import { n as createSafeGetOne, t as createIsDuplicateKeyError } from "./store-helpers-CIF4RG8s.mjs";
+/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
+import { t as transactionContext } from "./transactionContext-46KyUADP.mjs";
+import { i as resolveEventTransport } from "./EventTransport-BUkTwY_x.mjs";
+import { n as createSafeGetOne, t as createIsDuplicateKeyError } from "./store-helpers-BfyOd5i6.mjs";
 import { and, anyOf, eq, lte, ne, or } from "@classytic/repo-core/filter";
 import { randomBytes } from "node:crypto";
 import { InvalidOutboxEventError, OutboxOwnershipError } from "@classytic/primitives/outbox";
@@ -807,25 +807,44 @@ function createOutboxModule(options) {
 			* module exists to prevent, arrived at from the other side.
 			*/
 			if (transport === void 0) throw new Error(`Outbox module "${name}" could not resolve an event transport, so its relay would tick forever without publishing while the store grows. Register arc's events plugin (it is on by default — check \`arcPlugins.events !== false\`), or pass an explicit \`transport\` to \`createOutboxModule\`. Note the outbox needs the RAW EventTransport, not the \`fastify.events\` facade: the facade takes \`(type, payload, meta?)\` and fails open, which would acknowledge rows whose publish actually failed.`);
+			const relay = new EventOutbox({
+				store,
+				transport,
+				...options.batchSize !== void 0 ? { batchSize: options.batchSize } : {},
+				...options.leaseMs !== void 0 ? { leaseMs: options.leaseMs } : {},
+				consumerId: options.consumerId ?? mintConsumerId(name),
+				onError: options.onError ?? ((info) => {
+					fastify.log.error({
+						err: info.error,
+						kind: info.kind,
+						...info.event?.meta.id !== void 0 ? { eventId: info.event.meta.id } : {},
+						...info.event?.type !== void 0 ? { eventType: info.event.type } : {}
+					}, `outbox relay "${name}" failed`);
+				}),
+				...options.failurePolicy !== void 0 ? { failurePolicy: options.failurePolicy } : {},
+				...options.sessionProvider === false ? {} : { sessionProvider: options.sessionProvider ?? (() => transactionContext.get()) }
+			});
+			/**
+			* One pass per burst of requests. `drainQueued` stays true from the
+			* first request until the pass STARTS, so a request landing mid-pass
+			* schedules the next one — a row written during a pass is never left
+			* waiting for the interval.
+			*/
+			let drainQueued = false;
+			const requestDrain = () => {
+				if (drainQueued) return;
+				drainQueued = true;
+				setImmediate(() => {
+					drainQueued = false;
+					relay.relayBatch().catch((err) => {
+						fastify.log.error({ err }, `outbox relay "${name}" requested drain failed`);
+					});
+				});
+			};
 			exports = {
 				store,
-				relay: new EventOutbox({
-					store,
-					transport,
-					...options.batchSize !== void 0 ? { batchSize: options.batchSize } : {},
-					...options.leaseMs !== void 0 ? { leaseMs: options.leaseMs } : {},
-					consumerId: options.consumerId ?? mintConsumerId(name),
-					onError: options.onError ?? ((info) => {
-						fastify.log.error({
-							err: info.error,
-							kind: info.kind,
-							...info.event?.meta.id !== void 0 ? { eventId: info.event.meta.id } : {},
-							...info.event?.type !== void 0 ? { eventType: info.event.type } : {}
-						}, `outbox relay "${name}" failed`);
-					}),
-					...options.failurePolicy !== void 0 ? { failurePolicy: options.failurePolicy } : {},
-					...options.sessionProvider === false ? {} : { sessionProvider: options.sessionProvider ?? (() => transactionContext.get()) }
-				})
+				relay,
+				requestDrain
 			};
 			return exports;
 		},

package/dist/{outbox-module-CQXu_O6o.d.mts → outbox-module-CzsKRBvO.d.mts}

@@ -1,6 +1,6 @@
 
-import { a as EventTransport, n as DomainEvent, t as DeadLetteredEvent } from "./EventTransport-Cx60_s-6.mjs";
-import { t as ArcModule } from "./types-BRU-Kd3t.mjs";
+import { a as EventTransport, n as DomainEvent, t as DeadLetteredEvent } from "./EventTransport-BPOQsEer.mjs";
+import { t as ArcModule } from "./types-BVlowlm7.mjs";
 import { FastifyInstance } from "fastify";
 import { MemoryOutboxStore } from "@classytic/primitives/memory-outbox";
 import { OutboxFailurePolicy, OutboxStore, OutboxWriteOptions } from "@classytic/primitives/outbox";
@@ -372,6 +372,15 @@ interface OutboxModuleExports {
   store: OutboxStore;
   /** The relay, for a host that wants to drain on demand (tests, admin actions). */
   relay: EventOutbox;
+  /**
+   * Ask for a relay pass SOON, without waiting for the interval. Coalesced:
+   * any number of calls before the pass runs produce ONE pass. Never throws
+   * and returns nothing — a unit of work calls this after commit so a row it
+   * just wrote is delivered in milliseconds rather than up to `relayEveryMs`
+   * later. Safe under concurrency: the store's lease and fence token make an
+   * extra pass a no-op, not a double publish.
+   */
+  requestDrain: () => void;
 }
 /**
  * Compose the outbox as a module.

package/dist/permissions/index.mjs

@@ -1,6 +1,6 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { a as conjoinPolicyFilters, i as normalizeToDecision, r as evaluatePermissionDecision, t as applyAuthorizationDecision } from "../authorizationDecision-BP8GHtjc.mjs";
-import { n as getUserRoles, r as normalizeRoles } from "../userHelpers-CXySQFRg.mjs";
-import { a as resolveEffectiveRoles, i as fields, n as applyFieldWritePermissions, t as applyFieldReadPermissions } from "../fields-Cha2QCKH.mjs";
-import { A as requireAgentScope, B as requireAuth, C as createOrgPermissions, D as requireScopeContext, E as requireOrgRole, F as allowPublic, G as when, H as requirePlatformRole, I as anyOf, K as scopeOf, L as deny, M as requireMandate, N as allOf, O as requireServiceScope, P as allow, R as denyAll, S as createDynamicPermissionMatrix, T as requireOrgMembership, U as requireRoles, V as requireOwnership, W as roles, _ as requireGrant, a as adminOnly, b as describePermissionMap, c as ownerWithAdminBypass, d as publicRead, f as publicReadAdminWrite, g as modeSatisfies, h as GRANT_MODES, i as introspectRegistry, j as requireDPoP, k as requireTeamMembership, l as permissionMatrix, m as createRoleHierarchy, n as introspectCheck, o as authenticated, p as readOnly, r as introspectModule, s as fullPublic, t as buildPermissionMatrix, u as presets_exports, v as collectPublicSurface, w as requireOrgInScope, x as explainAccess, y as describePermission, z as not } from "../permissions-H7Zcb82Z.mjs";
+/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
+import { a as conjoinPolicyFilters, i as normalizeToDecision, r as evaluatePermissionDecision, t as applyAuthorizationDecision } from "../authorizationDecision-D_LFvMlm.mjs";
+import { n as getUserRoles, r as normalizeRoles } from "../userHelpers-DLueLQdQ.mjs";
+import { a as resolveEffectiveRoles, i as fields, n as applyFieldWritePermissions, t as applyFieldReadPermissions } from "../fields-fA-Dkou5.mjs";
+import { A as requireAgentScope, B as requireAuth, C as createOrgPermissions, D as requireScopeContext, E as requireOrgRole, F as allowPublic, G as when, H as requirePlatformRole, I as anyOf, K as scopeOf, L as deny, M as requireMandate, N as allOf, O as requireServiceScope, P as allow, R as denyAll, S as createDynamicPermissionMatrix, T as requireOrgMembership, U as requireRoles, V as requireOwnership, W as roles, _ as requireGrant, a as adminOnly, b as describePermissionMap, c as ownerWithAdminBypass, d as publicRead, f as publicReadAdminWrite, g as modeSatisfies, h as GRANT_MODES, i as introspectRegistry, j as requireDPoP, k as requireTeamMembership, l as permissionMatrix, m as createRoleHierarchy, n as introspectCheck, o as authenticated, p as readOnly, r as introspectModule, s as fullPublic, t as buildPermissionMatrix, u as presets_exports, v as collectPublicSurface, w as requireOrgInScope, x as explainAccess, y as describePermission, z as not } from "../permissions-C0GpDsB_.mjs";
 export { GRANT_MODES, adminOnly, allOf, allow, allowPublic, anyOf, applyAuthorizationDecision, applyFieldReadPermissions, applyFieldWritePermissions, authenticated, buildPermissionMatrix, collectPublicSurface, conjoinPolicyFilters, createDynamicPermissionMatrix, createOrgPermissions, createRoleHierarchy, deny, denyAll, describePermission, describePermissionMap, evaluatePermissionDecision, explainAccess, fields, fullPublic, getUserRoles, introspectCheck, introspectModule, introspectRegistry, modeSatisfies, normalizeRoles, normalizeToDecision, not, ownerWithAdminBypass, permissionMatrix, presets_exports as permissions, publicRead, publicReadAdminWrite, readOnly, requireAgentScope, requireAuth, requireDPoP, requireGrant, requireMandate, requireOrgInScope, requireOrgMembership, requireOrgRole, requireOwnership, requirePlatformRole, requireRoles, requireScopeContext, requireServiceScope, requireTeamMembership, resolveEffectiveRoles, roles, scopeOf, when };

package/dist/{permissions-H7Zcb82Z.mjs → permissions-C0GpDsB_.mjs}

@@ -1,10 +1,10 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { t as __exportAll } from "./rolldown-runtime-Add2L50I.mjs";
+/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
+import { t as __exportAll } from "./rolldown-runtime-DzE6ikSH.mjs";
 import { arcLog } from "./logger/index.mjs";
-import { a as conjoinPolicyFilters, i as normalizeToDecision } from "./authorizationDecision-BP8GHtjc.mjs";
-import { n as getUserRoles } from "./userHelpers-CXySQFRg.mjs";
-import { C as isService, S as isOrgInScope, a as getDPoPJkt, b as isElevated, d as getScopeContext, f as getScopeContextMap, g as getUserId, m as getTeamId, n as PUBLIC_SCOPE, o as getMandate, p as getServiceScopes, u as getRequestScope, v as hasOrgAccess, x as isMember } from "./types-BqLyyH0o.mjs";
-import { t as MemoryCacheStore } from "./memory-BiPVaCPg.mjs";
+import { a as conjoinPolicyFilters, i as normalizeToDecision } from "./authorizationDecision-D_LFvMlm.mjs";
+import { n as getUserRoles } from "./userHelpers-DLueLQdQ.mjs";
+import { C as isService, S as isOrgInScope, a as getDPoPJkt, b as isElevated, d as getScopeContext, f as getScopeContextMap, g as getUserId, m as getTeamId, n as PUBLIC_SCOPE, o as getMandate, p as getServiceScopes, u as getRequestScope, v as hasOrgAccess, x as isMember } from "./types-CNQyOrLk.mjs";
+import { t as MemoryCacheStore } from "./memory-CNvjxzB2.mjs";
 import { randomUUID } from "node:crypto";
 //#region src/permissions/context.ts
 /**

package/dist/{pipe-SunhEaZ6.mjs → pipe-4_XamfxI.mjs}

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { r as ForbiddenError } from "./errors-2ExmOgIJ.mjs";
+/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
+import { r as ForbiddenError } from "./errors-BHD3L8of.mjs";
 //#region src/pipeline/pipe.ts
 /**
 * Compose pipeline steps into an ordered array.

package/dist/pipeline/index.d.mts

@@ -1,5 +1,5 @@
 
-import { Ct as PipelineStep, Fn as IControllerResponse, St as PipelineContext, _t as Guard, bt as OperationFilter, vt as Interceptor, wt as Transform, xt as PipelineConfig, yt as NextFunction } from "../index-B78WZom8.mjs";
+import { Ct as PipelineStep, Fn as IControllerResponse, St as PipelineContext, _t as Guard, bt as OperationFilter, vt as Interceptor, wt as Transform, xt as PipelineConfig, yt as NextFunction } from "../index-D3sIPcD4.mjs";
 //#region src/pipeline/guard.d.ts
 interface GuardOptions {
   operations?: OperationFilter;

package/dist/pipeline/index.mjs

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { n as pipe, t as executePipeline } from "../pipe-SunhEaZ6.mjs";
+/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
+import { n as pipe, t as executePipeline } from "../pipe-4_XamfxI.mjs";
 //#region src/pipeline/guard.ts
 /**
 * Create a named guard.

package/dist/plugins/index.d.mts

@@ -1,10 +1,10 @@
 
 import { t as AnyRecord } from "../base-C-NL2fTi.mjs";
-import { At as RouteDefinition, J as PresetHook, Q as MiddlewareConfig, et as RouteSchemaOptions } from "../index-B78WZom8.mjs";
-import { i as errorHandlerPlugin, n as ErrorMapper, r as defaultIsDuplicateKeyError, t as ErrorHandlerOptions } from "../errorHandler-DI5AN2b5.mjs";
-import { _ as HealthCheck, b as healthPlugin, f as ScheduleDefinition, g as schedulesPlugin, h as _default$8, m as SchedulesPluginOptions, p as ScheduleStats, v as HealthOptions, y as _default$3 } from "../types-BRU-Kd3t.mjs";
-import { a as arcCorePlugin, i as _default, n as ArcCorePluginOptions, r as PluginMeta, t as ArcCore } from "../fastify-augmentation-jYA2oHyL.mjs";
-import { _ as CachingRule, a as MetricsCollector, c as metricsPlugin, d as _default$6, f as realtimePlugin, g as CachingOptions, h as ssePlugin, i as MetricEntry, l as ChangeOperation, m as _default$9, n as _default$10, o as MetricsOptions, p as SSEOptions, r as versioningPlugin, s as _default$4, t as VersioningOptions, u as RealtimeOptions, v as _default$1, y as cachingPlugin } from "../versioning-B843jOYX.mjs";
+import { At as RouteDefinition, J as PresetHook, Q as MiddlewareConfig, et as RouteSchemaOptions } from "../index-D3sIPcD4.mjs";
+import { i as errorHandlerPlugin, n as ErrorMapper, r as defaultIsDuplicateKeyError, t as ErrorHandlerOptions } from "../errorHandler--4rSMMvq.mjs";
+import { _ as HealthCheck, b as healthPlugin, f as ScheduleDefinition, g as schedulesPlugin, h as _default$8, m as SchedulesPluginOptions, p as ScheduleStats, v as HealthOptions, y as _default$3 } from "../types-BVlowlm7.mjs";
+import { a as arcCorePlugin, i as _default, n as ArcCorePluginOptions, r as PluginMeta, t as ArcCore } from "../fastify-augmentation-HncZMmze.mjs";
+import { _ as CachingRule, a as MetricsCollector, c as metricsPlugin, d as _default$6, f as realtimePlugin, g as CachingOptions, h as ssePlugin, i as MetricEntry, l as ChangeOperation, m as _default$9, n as _default$10, o as MetricsOptions, p as SSEOptions, r as versioningPlugin, s as _default$4, t as VersioningOptions, u as RealtimeOptions, v as _default$1, y as cachingPlugin } from "../versioning-P3V6ATyC.mjs";
 import { t as TracingOptions } from "../tracing-Dro5eH6j.mjs";
 import { PaginatedResult } from "@classytic/repo-core/pagination";
 import { FastifyInstance, FastifyPluginAsync } from "fastify";