@classytic/arc 2.38.0 → 2.40.0

package/dist/{schedules-DthM8Qag.mjs → schedules-Dm21pqHU.mjs}

@@ -1,6 +1,7 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { t as __exportAll } from "./rolldown-runtime-Add2L50I.mjs";
-import { t as startRenewingLease } from "./renewingLease-DuRGVOMe.mjs";
+/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
+import { t as __exportAll } from "./rolldown-runtime-DzE6ikSH.mjs";
+import { t as runWorkScope } from "./workScope-CoGpuzDX.mjs";
+import { t as startRenewingLease } from "./renewingLease-B5Grm0pI.mjs";
 import fp from "fastify-plugin";
 //#region src/plugins/schedules.ts
 var schedules_exports = /* @__PURE__ */ __exportAll({
@@ -60,7 +61,10 @@ const schedulesPlugin = async (fastify, opts) => {
 			}
 			stat.runs++;
 			stat.lastRunAt = (/* @__PURE__ */ new Date()).toISOString();
-			await s.handler(fastify);
+			await runWorkScope({
+				kind: "job",
+				id: s.name
+			}, () => s.handler(fastify));
 			stat.lastError = null;
 		} catch (err) {
 			stat.failures++;

package/dist/{schemaConverter-Db-MMsH6.mjs → schemaConverter-DENbixyA.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
 import { arcLog } from "./logger/index.mjs";
 //#region src/utils/schemaConverter.ts
 /**

package/dist/{schemaIR-CIXShch7.mjs → schemaIR-C2qUNzC6.mjs}

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { o as toJsonSchema } from "./schemaConverter-Db-MMsH6.mjs";
+/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
+import { o as toJsonSchema } from "./schemaConverter-DENbixyA.mjs";
 //#region src/core/schemaIR.ts
 /**
 * Schema IR — one canonical representation, two adapters.

package/dist/schemas/index.mjs

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
 import { errorContractSchema, errorDetailSchema } from "@classytic/repo-core/errors";
 import { Type, Type as Type$1 } from "typebox";
 //#region src/schemas/index.ts

package/dist/scim/index.mjs

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { t as parseJsonBody } from "../jsonBody-DVui0uJl.mjs";
+/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
+import { t as parseJsonBody } from "../jsonBody-Dx6jH_Nb.mjs";
 import fp from "fastify-plugin";
 //#region src/scim/errors.ts
 var ScimError = class extends Error {

package/dist/scope/index.mjs

@@ -1,6 +1,6 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { C as isService, D as requireUserId, E as requireTeamId, O as scopeFirstCtx, S as isOrgInScope, T as requireOrgId, _ as getUserRoles, a as getDPoPJkt, b as isElevated, c as getOrgId, d as getScopeContext, f as getScopeContextMap, g as getUserId, h as getTenantFromRequest, i as getClientId, l as getOrgRoles, m as getTeamId, n as PUBLIC_SCOPE, o as getMandate, p as getServiceScopes, r as getAncestorOrgIds, s as getOrgContext, t as AUTHENTICATED_SCOPE, u as getRequestScope, v as hasOrgAccess, w as requireClientId, x as isMember, y as isAuthenticated } from "../types-BqLyyH0o.mjs";
-import { n as elevation_default, t as elevationPlugin } from "../elevation-C6woysGC.mjs";
-import { t as createTenantKeyGenerator } from "../rateLimitKey-CewdR-m6.mjs";
-import { t as resolveOrgFromHeader } from "../scope-D03sk17n.mjs";
+/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
+import { C as isService, D as requireUserId, E as requireTeamId, O as scopeFirstCtx, S as isOrgInScope, T as requireOrgId, _ as getUserRoles, a as getDPoPJkt, b as isElevated, c as getOrgId, d as getScopeContext, f as getScopeContextMap, g as getUserId, h as getTenantFromRequest, i as getClientId, l as getOrgRoles, m as getTeamId, n as PUBLIC_SCOPE, o as getMandate, p as getServiceScopes, r as getAncestorOrgIds, s as getOrgContext, t as AUTHENTICATED_SCOPE, u as getRequestScope, v as hasOrgAccess, w as requireClientId, x as isMember, y as isAuthenticated } from "../types-CNQyOrLk.mjs";
+import { n as elevation_default, t as elevationPlugin } from "../elevation-CZy6n50b.mjs";
+import { t as createTenantKeyGenerator } from "../rateLimitKey-umrS6-vu.mjs";
+import { t as resolveOrgFromHeader } from "../scope-CdYxQVxt.mjs";
 export { AUTHENTICATED_SCOPE, PUBLIC_SCOPE, createTenantKeyGenerator, elevation_default as elevationPlugin, elevationPlugin as elevationPluginFn, getAncestorOrgIds, getClientId, getDPoPJkt, getMandate, getOrgContext, getOrgId, getOrgRoles, getRequestScope, getScopeContext, getScopeContextMap, getServiceScopes, getTeamId, getTenantFromRequest, getUserId, getUserRoles, hasOrgAccess, isAuthenticated, isElevated, isMember, isOrgInScope, isService, requireClientId, requireOrgId, requireTeamId, requireUserId, resolveOrgFromHeader, scopeFirstCtx };

package/dist/{scope-D03sk17n.mjs → scope-CdYxQVxt.mjs}

@@ -1,7 +1,7 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { a as OrgAccessDeniedError, l as UnauthorizedError } from "./errors-2ExmOgIJ.mjs";
-import { n as requireSingleHeaderValue } from "./headers-DeXNifVj.mjs";
-import { n as getUserRoles } from "./userHelpers-CXySQFRg.mjs";
+/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
+import { a as OrgAccessDeniedError, l as UnauthorizedError } from "./errors-BHD3L8of.mjs";
+import { n as requireSingleHeaderValue } from "./headers-BFEEshDS.mjs";
+import { n as getUserRoles } from "./userHelpers-DLueLQdQ.mjs";
 //#region src/scope/resolveOrgFromHeader.ts
 /**
 * Create a preHandler hook that resolves org scope from a header.

package/dist/{simpleEqualityMatcher-B7qVjQBv.mjs → simpleEqualityMatcher-Cldubvul.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
 //#region src/utils/simpleEqualityMatcher.ts
 /**
 * `simpleEqualityMatcher` — a minimal, dialect-agnostic flat-key equality

package/dist/{sse-D4MYqkic.mjs → sse-DbyXoQun.mjs}

@@ -1,9 +1,9 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { t as __exportAll } from "./rolldown-runtime-Add2L50I.mjs";
+/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
+import { t as __exportAll } from "./rolldown-runtime-DzE6ikSH.mjs";
 import { arcLog } from "./logger/index.mjs";
-import { c as getOrgId, n as PUBLIC_SCOPE } from "./types-BqLyyH0o.mjs";
-import { a as promoteStreamTokenToHeader } from "./streaming-DkpW1HwJ.mjs";
-import { t as openSseStream } from "./sseStream-BuMNPR6r.mjs";
+import { c as getOrgId, n as PUBLIC_SCOPE } from "./types-CNQyOrLk.mjs";
+import { a as promoteStreamTokenToHeader } from "./streaming-CFwCzEvU.mjs";
+import { t as openSseStream } from "./sseStream-BfZtL5-m.mjs";
 import fp from "fastify-plugin";
 //#region src/plugins/sse.ts
 var sse_exports = /* @__PURE__ */ __exportAll({

package/dist/{sseStream-BuMNPR6r.mjs → sseStream-BfZtL5-m.mjs}

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { n as forwardedStreamHeaders } from "./streaming-DkpW1HwJ.mjs";
+/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
+import { n as forwardedStreamHeaders } from "./streaming-CFwCzEvU.mjs";
 //#region src/utils/sseStream.ts
 /**
 * Take over the reply socket and open an SSE stream. Call ONLY after every

package/dist/{store-helpers-CIF4RG8s.mjs → store-helpers-BfyOd5i6.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
 //#region src/utils/store-helpers.ts
 /**
 * Classify an error thrown by `getOne` / `getById` / `update` as a

package/dist/{streaming-DkpW1HwJ.mjs → streaming-CFwCzEvU.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
 import { Readable } from "node:stream";
 //#region src/utils/streaming.ts
 /**

package/dist/{subscribe-helpers-CBZOi6pk.mjs → subscribe-helpers-KgVEcn8L.mjs}

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { r as createEvent } from "./EventTransport-Gq7JWbWw.mjs";
+/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
+import { r as createEvent } from "./EventTransport-BUkTwY_x.mjs";
 //#region src/events/defineEvent.ts
 /**
 * Typed event declarations, a registry for introspection, and `.create()` to

package/dist/sync/changelog.mjs

@@ -1,3 +1,3 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
 import { CursorExpiredError, MemoryChangeLogStore } from "@classytic/repo-core/sync";
 export { CursorExpiredError, MemoryChangeLogStore };

package/dist/testing/cleanupStoreContract.mjs

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
 import { afterAll, beforeAll, describe, expect, it } from "vitest";
 //#region src/testing/cleanupStoreContract.ts
 /**

package/dist/testing/index.d.mts

@@ -1,10 +1,10 @@
 
 import { i as RequestScope } from "../types-Ddl9OjmE.mjs";
 import { l as PermissionCheck, t as AnyRecord } from "../base-C-NL2fTi.mjs";
-import { V as ResourceDefinition } from "../index-B78WZom8.mjs";
-import { n as ArcModuleInput, o as ModuleDisposer, s as ModuleSetupContext } from "../types-BRU-Kd3t.mjs";
-import "../index-D2uIUSQk.mjs";
-import { n as preloadResourcesAsync, r as CreateAppOptions, t as preloadResources } from "../preloadResources-BbBkNkqK.mjs";
+import { V as ResourceDefinition } from "../index-D3sIPcD4.mjs";
+import { n as ArcModuleInput, o as ModuleDisposer, s as ModuleSetupContext } from "../types-BVlowlm7.mjs";
+import "../index-DbMglURO.mjs";
+import { n as preloadResourcesAsync, r as CreateAppOptions, t as preloadResources } from "../preloadResources-DVgPCNcD.mjs";
 import { StorageContractSetup, StorageContractSetupResult, runStorageContract } from "./storageContract.mjs";
 import { StandardRepo } from "@classytic/repo-core/repository";
 import { FastifyInstance, FastifyServerOptions } from "fastify";

package/dist/testing/index.mjs

@@ -1,12 +1,12 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { t as CRUD_OPERATIONS } from "../constants-BONghE1Y.mjs";
-import { g as getUserId } from "../types-BqLyyH0o.mjs";
-import { t as BaseController } from "../BaseController-CYaDvmOB.mjs";
-import { t as defineAggregation } from "../defineAggregation-0KBvqEEC.mjs";
-import { t as defineResource } from "../defineResource-BMdyRelW.mjs";
-import { E as requireOrgRole } from "../permissions-H7Zcb82Z.mjs";
-import { a as createApp, n as preloadResourcesAsync, t as preloadResources } from "../preloadResources-DlhH81py.mjs";
-import { n as getModuleExports } from "../module-BQXHxMEk.mjs";
+/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
+import { t as CRUD_OPERATIONS } from "../constants-BQ2FbhPB.mjs";
+import { g as getUserId } from "../types-CNQyOrLk.mjs";
+import { t as BaseController } from "../BaseController-BqJtbiUA.mjs";
+import { t as defineAggregation } from "../defineAggregation-BDA2Tw7v.mjs";
+import { t as defineResource } from "../defineResource-DaIySrQr.mjs";
+import { E as requireOrgRole } from "../permissions-C0GpDsB_.mjs";
+import { a as createApp, n as preloadResourcesAsync, t as preloadResources } from "../preloadResources-BAx5s9EF.mjs";
+import { n as getModuleExports } from "../module-CNcwCKUJ.mjs";
 import { runStorageContract } from "./storageContract.mjs";
 import Fastify from "fastify";
 import { afterAll, describe, expect, it, vi } from "vitest";
@@ -1504,7 +1504,7 @@ function pickDefaultAuth(authMode, callerAuth) {
 	};
 }
 async function createTestApp(options = {}) {
-	const { createApp } = await import("../preloadResources-DlhH81py.mjs").then((n) => n.o);
+	const { createApp } = await import("../preloadResources-BAx5s9EF.mjs").then((n) => n.o);
 	const { resources = [], db = "in-memory", connectMongoose = false, authMode = "jwt", defaultOrgId, plugins, auth: callerAuth, ...appOptions } = options;
 	let dbHandle;
 	let dbUri;

package/dist/testing/outboxStoreContract.mjs

@@ -1,9 +1,20 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
 import { OutboxOwnershipError } from "@classytic/primitives/outbox";
 import { afterAll, beforeAll, beforeEach, describe, expect, it } from "vitest";
 //#region src/testing/outboxStoreContract.ts
 let seq = 0;
-/** A minimal well-formed event. Ids are unique per call. */
+/**
+* A minimal well-formed event. Ids are unique per call.
+*
+* It was NOT well-formed until 2.40: `meta` carried `occurredAt: string`, which
+* is not a field of `EventMeta`, and omitted the REQUIRED `timestamp: Date`.
+* An `as unknown as DomainEvent` made it compile — a total override that hid the
+* mismatch, so every third party running this shipped suite conformance-tested
+* their store against an event shape the transports never produce. `createEvent`
+* in `@classytic/primitives` is the reference: `{ id, timestamp: new Date() }`.
+*
+* No cast now — if `EventMeta` changes, this stops compiling, which is the point.
+*/
 function event(type = "test.event") {
 	seq += 1;
 	return {
@@ -11,7 +22,7 @@ function event(type = "test.event") {
 		payload: { n: seq },
 		meta: {
 			id: `evt-${Date.now()}-${seq}`,
-			occurredAt: (/* @__PURE__ */ new Date()).toISOString()
+			timestamp: /* @__PURE__ */ new Date()
 		}
 	};
 }

package/dist/testing/storageContract.mjs

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
 import { afterAll, beforeAll, describe, expect, it } from "vitest";
 //#region src/testing/storageContract.ts
 /**

package/dist/{transactionContext-DMmvcfdo.mjs → transactionContext-46KyUADP.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
 import { AsyncLocalStorage } from "node:async_hooks";
 //#region src/context/transactionContext.ts
 /**

package/dist/{typeGuards-DHTnEs5X.mjs → typeGuards-t_CVgRXN.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
 //#region src/utils/typeGuards.ts
 /** Check if fastify has the events plugin registered */
 function hasEvents(instance) {

package/dist/types/index.d.mts

@@ -1,6 +1,6 @@
 
 import { i as RequestScope } from "../types-Ddl9OjmE.mjs";
 import { a as UserLike, c as DataPolicy, d as UserBase, i as ObjectId, l as PermissionCheck, n as ArcRequest, o as UserOrganization, r as JWTPayload, s as AuthorizationDecision, t as AnyRecord, u as PermissionContext } from "../base-C-NL2fTi.mjs";
-import { $ as OpenApiSchemas, A as RequestIdOptions, An as WriteVerbKey, At as RouteDefinition, C as RequestContext, D as HealthCheck, Dn as MutationWriteContext, Dt as ActionEntry, E as GracefulShutdownOptions, Et as ActionDefinition, F as FastifyWithDecorators, Fn as IControllerResponse, Ft as AuthPluginOptions, G as OnTenantDeleteConfig, H as CrudController, I as MiddlewareHandler, In as IRequestContext, It as Authenticator, J as PresetHook, K as ResolvedTenantPurge, L as RequestWithExtras, Ln as RawRouteHandler, Lt as AuthenticatorContext, M as EventsDecorator, Mn as ControllerLike, Mt as RouteMethod, N as FastifyRequestExtras, Nn as FastifyHandler, Nt as RateLimitConfig, O as HealthOptions, On as ResourceWrites, Ot as ActionHandlerFn, P as FastifyWithAuth, Pn as IController, Pt as AuthHelpers, Q as MiddlewareConfig, Rn as RouteHandler, Rt as JwtContext, S as QueryParserInterface, T as CrudRouterOptions, Tt as ResourceCacheConfig, U as ResourceConfig, W as ResourcePermissions, X as CrudRouteKey, Y as PresetResult, Z as CrudSchemas, _ as ControllerQueryOptions, a as InferAdapterDoc, at as ResourceExtensions, b as ParsedQuery, c as TypedController, d as PaginationResult, et as RouteSchemaOptions, f as IntrospectionData, g as ArcInternalMetadata, h as ResourceMetadata, i as ValidationResult, it as ResourceHooks, j as ArcDecorator, jn as ControllerHandler, jt as RouteMcpConfig, k as IntrospectionPluginOptions, kn as WriteContext, kt as ActionsMap, l as TypedRepository, m as RegistryStats, n as ConfigError, nt as FieldRule, o as InferDocType, ot as EventDefinition, p as RegistryEntry, q as PresetFunction, r as ValidateOptions, rt as ResourceHookContext, s as InferResourceDoc, t as RouteHandlerMethod, tt as ArcFieldRule, u as TypedResourceConfig, v as LookupOption, w as ServiceContext, x as PopulateOption, xn as BaseControllerOptions, y as OwnershipCheck, zt as TokenPair } from "../index-B78WZom8.mjs";
+import { $ as OpenApiSchemas, A as RequestIdOptions, An as WriteVerbKey, At as RouteDefinition, C as RequestContext, D as HealthCheck, Dn as MutationWriteContext, Dt as ActionEntry, E as GracefulShutdownOptions, Et as ActionDefinition, F as FastifyWithDecorators, Fn as IControllerResponse, Ft as AuthPluginOptions, G as OnTenantDeleteConfig, H as CrudController, I as MiddlewareHandler, In as IRequestContext, It as Authenticator, J as PresetHook, K as ResolvedTenantPurge, L as RequestWithExtras, Ln as RawRouteHandler, Lt as AuthenticatorContext, M as EventsDecorator, Mn as ControllerLike, Mt as RouteMethod, N as FastifyRequestExtras, Nn as FastifyHandler, Nt as RateLimitConfig, O as HealthOptions, On as ResourceWrites, Ot as ActionHandlerFn, P as FastifyWithAuth, Pn as IController, Pt as AuthHelpers, Q as MiddlewareConfig, Rn as RouteHandler, Rt as JwtContext, S as QueryParserInterface, T as CrudRouterOptions, Tt as ResourceCacheConfig, U as ResourceConfig, W as ResourcePermissions, X as CrudRouteKey, Y as PresetResult, Z as CrudSchemas, _ as ControllerQueryOptions, a as InferAdapterDoc, at as ResourceExtensions, b as ParsedQuery, c as TypedController, d as PaginationResult, et as RouteSchemaOptions, f as IntrospectionData, g as ArcInternalMetadata, h as ResourceMetadata, i as ValidationResult, it as ResourceHooks, j as ArcDecorator, jn as ControllerHandler, jt as RouteMcpConfig, k as IntrospectionPluginOptions, kn as WriteContext, kt as ActionsMap, l as TypedRepository, m as RegistryStats, n as ConfigError, nt as FieldRule, o as InferDocType, ot as EventDefinition, p as RegistryEntry, q as PresetFunction, r as ValidateOptions, rt as ResourceHookContext, s as InferResourceDoc, t as RouteHandlerMethod, tt as ArcFieldRule, u as TypedResourceConfig, v as LookupOption, w as ServiceContext, x as PopulateOption, xn as BaseControllerOptions, y as OwnershipCheck, zt as TokenPair } from "../index-D3sIPcD4.mjs";
 import { n as ElevationOptions, t as ElevationEvent } from "../elevation-BXCfVcNG.mjs";
 export type { ActionDefinition, ActionEntry, ActionHandlerFn, ActionsMap, AnyRecord, ArcDecorator, ArcFieldRule, ArcInternalMetadata, ArcRequest, AuthHelpers, AuthPluginOptions, Authenticator, AuthenticatorContext, AuthorizationDecision, BaseControllerOptions, ConfigError, ControllerHandler, ControllerLike, ControllerQueryOptions, CrudController, CrudRouteKey, CrudRouterOptions, CrudSchemas, DataPolicy, ElevationEvent, ElevationOptions, EventDefinition, EventsDecorator, FastifyHandler, FastifyRequestExtras, FastifyWithAuth, FastifyWithDecorators, FieldRule, GracefulShutdownOptions, HealthCheck, HealthOptions, IController, IControllerResponse, IRequestContext, InferAdapterDoc, InferDocType, InferResourceDoc, IntrospectionData, IntrospectionPluginOptions, JWTPayload, JwtContext, LookupOption, MiddlewareConfig, MiddlewareHandler, MutationWriteContext, ObjectId, OnTenantDeleteConfig, OpenApiSchemas, OwnershipCheck, PaginationResult, ParsedQuery, PermissionCheck, PermissionContext, PopulateOption, PresetFunction, PresetHook, PresetResult, QueryParserInterface, RateLimitConfig, RawRouteHandler, RegistryEntry, RegistryStats, RequestContext, RequestIdOptions, RequestScope, RequestWithExtras, ResolvedTenantPurge, ResourceCacheConfig, ResourceConfig, ResourceExtensions, ResourceHookContext, ResourceHooks, ResourceMetadata, ResourcePermissions, ResourceWrites, RouteDefinition, RouteHandler, RouteHandlerMethod, RouteMcpConfig, RouteMethod, RouteSchemaOptions, ServiceContext, TokenPair, TypedController, TypedRepository, TypedResourceConfig, UserBase, UserLike, UserOrganization, ValidateOptions, ValidationResult, WriteContext, WriteVerbKey };

package/dist/types/index.mjs

@@ -1,2 +1,2 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
 export {};

package/dist/types/storage.mjs

@@ -1,2 +1,2 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
 export {};

package/dist/{types-LQFwC37d.d.mts → types-9rvxn5Ym.d.mts}

@@ -1,5 +1,5 @@
 
-import { V as ResourceDefinition } from "./index-B78WZom8.mjs";
+import { V as ResourceDefinition } from "./index-D3sIPcD4.mjs";
 import { z } from "zod";
 //#region src/integrations/mcp/types.d.ts
 /** Behavioral hints for MCP clients (tool annotations per MCP spec) */
@@ -275,6 +275,51 @@ interface McpPluginOptions {
    * - `McpAuthResolver` — custom function that resolves identity from headers
    */
   auth?: BetterAuthHandler | McpAuthResolver | false;
+  /**
+   * DNS-rebinding protection for the MCP routes — `Host` / `Origin` validation.
+   *
+   * The attack this closes: a page the developer visits can POST to
+   * `127.0.0.1:<port>`. If a DNS name the attacker controls resolves to
+   * loopback, the browser treats the response as same-origin and the page can
+   * READ it — every registered tool, from any website. Validating that `Host`
+   * names a host you expect is what breaks it, which is why the MCP SDK ships
+   * this as a default for localhost servers.
+   *
+   * **Default: on when `auth: false`, off otherwise.** Not a guess — it follows
+   * the threat:
+   * - `auth: false` is the local/dev shape the attack targets, and nothing else
+   *   is standing in the way. Defaults to the SDK's localhost set
+   *   (`localhost`, `127.0.0.1`, `[::1]`).
+   * - With auth configured, the endpoint is normally a real domain whose `Host`
+   *   is not localhost — defaulting protection ON would 403 every production
+   *   deployment. There, credentials are the gate.
+   *
+   * Set explicitly whenever the default's assumption is wrong for you: a
+   * localhost server that DOES use auth, or a deliberately-public `auth: false`
+   * endpoint that must keep answering (`false` to disable).
+   *
+   * Validation itself is `@modelcontextprotocol/server`'s `validateHostHeader` /
+   * `validateOriginHeader` — arc does not reimplement the matching rules.
+   * Hostnames only, no scheme or port; IPv6 in brackets (`[::1]`). A request
+   * with no `Origin` header passes (non-browser MCP clients send none); a
+   * present-but-unlisted `Origin` is rejected.
+   *
+   * @example
+   * ```ts
+   * // localhost server that uses auth — opt in explicitly
+   * mcpPlugin({ resources, auth, dnsRebindingProtection: {} });
+   * // reachable under a known public name
+   * mcpPlugin({ resources, dnsRebindingProtection: { allowedHosts: ['mcp.example.com'] } });
+   * // deliberately public, no Host constraint
+   * mcpPlugin({ resources, auth: false, dnsRebindingProtection: false });
+   * ```
+   */
+  dnsRebindingProtection?: false | {
+    /** Allowed `Host` hostnames. Default: `localhost`, `127.0.0.1`, `[::1]`. */
+    allowedHosts?: string[];
+    /** Allowed `Origin` hostnames. Default: same localhost set. */
+    allowedOrigins?: string[];
+  };
   /** MCP endpoint path (default: '/mcp') */
   prefix?: string;
   /** Server identity */

package/dist/{types-BRU-Kd3t.d.mts → types-BVlowlm7.d.mts}

@@ -1,6 +1,6 @@
 
-import { n as DomainEvent, r as EventHandler } from "./EventTransport-Cx60_s-6.mjs";
-import { n as ErrorMapper } from "./errorHandler-DI5AN2b5.mjs";
+import { n as DomainEvent, r as EventHandler } from "./EventTransport-BPOQsEer.mjs";
+import { n as ErrorMapper } from "./errorHandler--4rSMMvq.mjs";
 import { FastifyInstance, FastifyPluginAsync } from "fastify";
 import { LockAdapter } from "@classytic/repo-core/lock";
 //#region src/plugins/health.d.ts

package/dist/{types-BqLyyH0o.mjs → types-CNQyOrLk.mjs}

@@ -1,7 +1,7 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { l as UnauthorizedError, o as OrgRequiredError } from "./errors-2ExmOgIJ.mjs";
-import { n as requireSingleHeaderValue } from "./headers-DeXNifVj.mjs";
-import { t as getUserId$1 } from "./userHelpers-CXySQFRg.mjs";
+/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
+import { l as UnauthorizedError, o as OrgRequiredError } from "./errors-BHD3L8of.mjs";
+import { n as requireSingleHeaderValue } from "./headers-BFEEshDS.mjs";
+import { t as getUserId$1 } from "./userHelpers-DLueLQdQ.mjs";
 //#region src/scope/types.ts
 /**
 * Request Scope — The One Standard

package/dist/{userHelpers-CXySQFRg.mjs → userHelpers-DLueLQdQ.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
 //#region src/utils/userHelpers.ts
 /**
 * Extract a user ID from a user object. Accepts `id` or `_id` — returns

package/dist/utils/index.d.mts

@@ -1,8 +1,8 @@
 
 import { F as getHeader, I as requireSingleHeaderValue, P as ArcHeaders } from "../types-Ddl9OjmE.mjs";
 import { f as getUserId, m as normalizeRoles, p as getUserRoles, t as AnyRecord } from "../base-C-NL2fTi.mjs";
-import { $ as OpenApiSchemas, S as QueryParserInterface, b as ParsedQuery } from "../index-B78WZom8.mjs";
-import { n as ErrorMapper } from "../errorHandler-DI5AN2b5.mjs";
+import { $ as OpenApiSchemas, S as QueryParserInterface, b as ParsedQuery } from "../index-D3sIPcD4.mjs";
+import { n as ErrorMapper } from "../errorHandler--4rSMMvq.mjs";
 import { a as NotFoundError, c as RateLimitError, d as ValidationError, f as createDomainError, i as ForbiddenError, l as ServiceUnavailableError, m as isArcError, n as ConflictError, o as OrgAccessDeniedError, p as createError, r as ErrorOptions, s as OrgRequiredError, t as ArcError, u as UnauthorizedError } from "../errors-BGdVwP25.mjs";
 import { scheduleBackground } from "@classytic/repo-core/cache";
 import { errorContractSchema, errorDetailSchema } from "@classytic/repo-core/errors";
@@ -691,8 +691,8 @@ declare const paginationSchema: JsonSchema;
  * validation PER RESPONSE to pick the branch, on the hottest route of
  * every arc app. The merge keeps the exact bytes (pinned by
  * `tests/utils/list-response-serialization.test.ts`) and drops the
- * per-response branch validation. Only `data` is required — the one field
- * all four variants share.
+ * per-response branch validation. The list route also serves count, exists
+ * and distinct dispatch verbs, so no field is common to every valid shape.
  */
 declare function listResponse(itemSchema: JsonSchema): JsonSchema;
 /** Offset variant — `{ method: 'offset', data, page, limit, total, pages, hasNext, hasPrev }`. */

package/dist/utils/index.mjs

@@ -1,12 +1,12 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { a as OrgAccessDeniedError, c as ServiceUnavailableError, d as createDomainError, f as createError, i as NotFoundError, l as UnauthorizedError, n as ConflictError, o as OrgRequiredError, p as isArcError, r as ForbiddenError, s as RateLimitError, t as ArcError, u as ValidationError } from "../errors-2ExmOgIJ.mjs";
-import { n as requireSingleHeaderValue, t as getHeader } from "../headers-DeXNifVj.mjs";
-import { n as getUserRoles, r as normalizeRoles, t as getUserId } from "../userHelpers-CXySQFRg.mjs";
-import { t as simpleEqualityMatcher } from "../simpleEqualityMatcher-B7qVjQBv.mjs";
-import { A as scheduleBackground, C as paginationSchema, D as createQueryParser, E as ArcQueryParser, O as MONGO_DIALECT, S as offsetListResponse, T as responses, _ as errorDetailSchema, a as defineCompensation, b as keysetListResponse, c as CircuitBreakerError, d as createCircuitBreaker, f as createCircuitBreakerRegistry, g as errorContractSchema, h as deleteResponse, i as defineErrorMapper, k as NEUTRAL_DIALECT, l as CircuitBreakerRegistry, m as bareListResponse, n as handleRaw, o as withCompensation, p as aggregateListResponse, r as defineGuard, s as CircuitBreaker, t as createStateMachine, u as CircuitState, v as getDefaultCrudSchemas, w as queryParams, x as listResponse, y as getListQueryParams } from "../utils-BbGG8XNT.mjs";
-import { a as isZodSchema, i as isJsonSchema, n as convertRouteSchema, o as toJsonSchema, t as convertOpenApiSchemas } from "../schemaConverter-Db-MMsH6.mjs";
-import { a as promoteStreamTokenToHeader, i as pipeUIMessageStreamToReply, n as forwardedStreamHeaders, r as isReadableStream, t as UI_MESSAGE_STREAM_HEADERS } from "../streaming-DkpW1HwJ.mjs";
-import { n as declareRuntimeCapability } from "../runtimeCapabilities-D793Pxci.mjs";
-import { t as openSseStream } from "../sseStream-BuMNPR6r.mjs";
-import { t as hasEvents } from "../typeGuards-DHTnEs5X.mjs";
+/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
+import { a as OrgAccessDeniedError, c as ServiceUnavailableError, d as createDomainError, f as createError, i as NotFoundError, l as UnauthorizedError, n as ConflictError, o as OrgRequiredError, p as isArcError, r as ForbiddenError, s as RateLimitError, t as ArcError, u as ValidationError } from "../errors-BHD3L8of.mjs";
+import { n as requireSingleHeaderValue, t as getHeader } from "../headers-BFEEshDS.mjs";
+import { n as getUserRoles, r as normalizeRoles, t as getUserId } from "../userHelpers-DLueLQdQ.mjs";
+import { t as simpleEqualityMatcher } from "../simpleEqualityMatcher-Cldubvul.mjs";
+import { A as scheduleBackground, C as paginationSchema, D as createQueryParser, E as ArcQueryParser, O as MONGO_DIALECT, S as offsetListResponse, T as responses, _ as errorDetailSchema, a as defineCompensation, b as keysetListResponse, c as CircuitBreakerError, d as createCircuitBreaker, f as createCircuitBreakerRegistry, g as errorContractSchema, h as deleteResponse, i as defineErrorMapper, k as NEUTRAL_DIALECT, l as CircuitBreakerRegistry, m as bareListResponse, n as handleRaw, o as withCompensation, p as aggregateListResponse, r as defineGuard, s as CircuitBreaker, t as createStateMachine, u as CircuitState, v as getDefaultCrudSchemas, w as queryParams, x as listResponse, y as getListQueryParams } from "../utils-CUFBrhq-.mjs";
+import { a as isZodSchema, i as isJsonSchema, n as convertRouteSchema, o as toJsonSchema, t as convertOpenApiSchemas } from "../schemaConverter-DENbixyA.mjs";
+import { a as promoteStreamTokenToHeader, i as pipeUIMessageStreamToReply, n as forwardedStreamHeaders, r as isReadableStream, t as UI_MESSAGE_STREAM_HEADERS } from "../streaming-CFwCzEvU.mjs";
+import { n as declareRuntimeCapability } from "../runtimeCapabilities-Bo7rSKjm.mjs";
+import { t as openSseStream } from "../sseStream-BfZtL5-m.mjs";
+import { t as hasEvents } from "../typeGuards-t_CVgRXN.mjs";
 export { ArcError, ArcQueryParser, CircuitBreaker, CircuitBreakerError, CircuitBreakerRegistry, CircuitState, ConflictError, ForbiddenError, MONGO_DIALECT, NEUTRAL_DIALECT, NotFoundError, OrgAccessDeniedError, OrgRequiredError, RateLimitError, ServiceUnavailableError, UI_MESSAGE_STREAM_HEADERS, UnauthorizedError, ValidationError, aggregateListResponse, bareListResponse, convertOpenApiSchemas, convertRouteSchema, createCircuitBreaker, createCircuitBreakerRegistry, createDomainError, createError, createQueryParser, createStateMachine, declareRuntimeCapability, defineCompensation, defineErrorMapper, defineGuard, deleteResponse, errorContractSchema, errorDetailSchema, forwardedStreamHeaders, getDefaultCrudSchemas, getHeader, getListQueryParams, getUserId, getUserRoles, handleRaw, hasEvents, isArcError, isJsonSchema, isReadableStream, isZodSchema, keysetListResponse, listResponse, normalizeRoles, offsetListResponse, openSseStream, paginationSchema, pipeUIMessageStreamToReply, promoteStreamTokenToHeader, queryParams, requireSingleHeaderValue, responses, scheduleBackground, simpleEqualityMatcher, toJsonSchema, withCompensation };

package/dist/{utils-BbGG8XNT.mjs → utils-CUFBrhq-.mjs}

@@ -1,7 +1,7 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { m as RESERVED_QUERY_PARAMS } from "./constants-BONghE1Y.mjs";
+/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
+import { m as RESERVED_QUERY_PARAMS } from "./constants-BQ2FbhPB.mjs";
 import { arcLog } from "./logger/index.mjs";
-import { t as ArcError, u as ValidationError } from "./errors-2ExmOgIJ.mjs";
+import { t as ArcError, u as ValidationError } from "./errors-BHD3L8of.mjs";
 import { scheduleBackground } from "@classytic/repo-core/cache";
 import { errorContractSchema as errorContractSchema$1, errorDetailSchema as errorDetailSchema$1 } from "@classytic/repo-core/errors";
 //#region src/utils/filter-dialect.ts
@@ -561,8 +561,8 @@ const paginationSchema = {
 * validation PER RESPONSE to pick the branch, on the hottest route of
 * every arc app. The merge keeps the exact bytes (pinned by
 * `tests/utils/list-response-serialization.test.ts`) and drops the
-* per-response branch validation. Only `data` is required — the one field
-* all four variants share.
+* per-response branch validation. The list route also serves count, exists
+* and distinct dispatch verbs, so no field is common to every valid shape.
 */
 function listResponse(itemSchema) {
 	return {
@@ -577,6 +577,15 @@ function listResponse(itemSchema) {
 				type: "array",
 				items: itemSchema
 			},
+			count: {
+				type: "integer",
+				minimum: 0
+			},
+			exists: { type: "boolean" },
+			values: {
+				type: "array",
+				items: {}
+			},
 			page: {
 				type: "integer",
 				example: 1
@@ -607,7 +616,6 @@ function listResponse(itemSchema) {
 				description: "Cursor token for the next page, or null."
 			}
 		},
-		required: ["data"],
 		additionalProperties: true
 	};
 }

package/dist/{validate-CidSeUrx.mjs → validate-DV3hRbsz.mjs}

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { t as __exportAll } from "./rolldown-runtime-Add2L50I.mjs";
+/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
+import { t as __exportAll } from "./rolldown-runtime-DzE6ikSH.mjs";
 //#region src/core/aggregation/normalize.ts
 /**
 * Framework cap on URL-driven aggregation limits when the host opts

package/dist/{versioning-C2r0eOZ4.mjs → versioning-BXwmj5SD.mjs}

@@ -1,6 +1,6 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { t as __exportAll } from "./rolldown-runtime-Add2L50I.mjs";
-import { d as createDomainError } from "./errors-2ExmOgIJ.mjs";
+/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
+import { t as __exportAll } from "./rolldown-runtime-DzE6ikSH.mjs";
+import { d as createDomainError } from "./errors-BHD3L8of.mjs";
 import fp from "fastify-plugin";
 //#region src/plugins/versioning.ts
 var versioning_exports = /* @__PURE__ */ __exportAll({

package/dist/{versioning-B843jOYX.d.mts → versioning-P3V6ATyC.d.mts}

@@ -1,5 +1,5 @@
 
-import { n as DomainEvent } from "./EventTransport-Cx60_s-6.mjs";
+import { n as DomainEvent } from "./EventTransport-BPOQsEer.mjs";
 import { FastifyPluginAsync, FastifyRequest } from "fastify";
 //#region src/plugins/caching.d.ts
 interface CachingRule {

package/dist/workScope-CoGpuzDX.mjs

@@ -0,0 +1,42 @@
+/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
+import { n as requestContext } from "./requestContext-D4PuGhEw.mjs";
+//#region src/context/workScope.ts
+/** Enter a scope for `fn`, or run it inside the active one. */
+function runWorkScope(seed, fn) {
+	if (requestContext.get()) return fn();
+	const store = {
+		kind: seed.kind,
+		requestId: seed.id,
+		startTime: performance.now(),
+		...seed.organizationId !== void 0 ? { organizationId: seed.organizationId } : {}
+	};
+	return requestContext.run(store, fn);
+}
+/**
+* A per-scope memo slot: created once on first use, the same instance after.
+* `undefined` outside a scope.
+*/
+function scopedValue(slot, create) {
+	const store = requestContext.get();
+	if (!store) return void 0;
+	const slots = store;
+	const existing = slots[slot];
+	if (existing !== void 0) return existing;
+	const created = create();
+	slots[slot] = created;
+	return created;
+}
+/**
+* The scope an event dispatch runs in. The correlation id is the scope id so a
+* child event published from a handler chains to the same correlation; the
+* tenant rides `meta`, never the payload.
+*/
+function workSeedFromEvent(event) {
+	return {
+		kind: "event",
+		id: event.meta.correlationId ?? event.meta.id,
+		...event.meta.organizationId !== void 0 ? { organizationId: event.meta.organizationId } : {}
+	};
+}
+//#endregion
+export { scopedValue as n, workSeedFromEvent as r, runWorkScope as t };