@classytic/arc 2.38.0 → 2.41.0

package/dist/cli/commands/introspect.mjs

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { t as loadResourcesFromEntry } from "../../loadResourcesFromEntry-DNj8cpiY.mjs";
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
+import { t as loadResourcesFromEntry } from "../../loadResourcesFromEntry-99fIMC3p.mjs";
 //#region src/cli/commands/introspect.ts
 function describePermission(value) {
 	if (!value) return "none";

package/dist/cli/index.mjs

@@ -1,8 +1,8 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
 import { describe } from "./commands/describe.mjs";
 import { exportDocs } from "./commands/docs.mjs";
 import { doctor } from "./commands/doctor.mjs";
-import { t as generate } from "../generate-BUP4Oydg.mjs";
-import { t as init } from "../init-Dg_Am2o_.mjs";
+import { t as generate } from "../generate-D_YmiCNf.mjs";
+import { t as init } from "../init-Y2MlSN9n.mjs";
 import { introspect } from "./commands/introspect.mjs";
 export { describe, doctor, exportDocs, generate, init, introspect };

package/dist/{constants-BONghE1Y.mjs → constants-BxLgNFF7.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
 //#region src/constants.ts
 /**
 * Arc Framework Constants — Single Source of Truth

package/dist/context/index.d.mts

@@ -1,13 +1,19 @@
 
 import { AsyncLocalStorage } from "node:async_hooks";
 import { CacheAdapter } from "@classytic/repo-core/cache";
+import { DomainEvent } from "@classytic/primitives/events";
 //#region src/context/requestContext.d.ts
+/** What started this unit of work. See `workScope.ts`. */
+type WorkKind = "request" | "event" | "job";
 /**
  * Shape of the request-scoped context store.
- * Populated by Arc's onRequest hook in arcCorePlugin.
+ * Populated by Arc's onRequest hook in arcCorePlugin, or by `runWorkScope`
+ * for an event dispatch or a job run.
  */
 interface RequestStore {
-  /** Unique request identifier */
+  /** Absent on stores created before scopes had kinds; treat as `'request'`. */
+  kind?: WorkKind;
+  /** Unique request identifier — the correlation key of an event or job scope. */
   requestId?: string;
   /** Authenticated user (if any) */
   user?: {
@@ -88,14 +94,15 @@ declare function getTraceHeaders(): Record<string, string> | undefined;
 //#endregion
 //#region src/context/requestScopedCache.d.ts
 /**
- * The cache for the CURRENT request, or `undefined` outside one.
+ * The cache for the CURRENT unit of work — a request, an event dispatch or a
+ * job run (see `runWorkScope`) — or `undefined` outside one.
  *
- * Lazily created on first use, so a request that never touches a cached
+ * Lazily created on first use, so a scope that never touches a cached
  * repository allocates nothing.
  */
 declare function requestScopedCache(): CacheAdapter | undefined;
 /**
- * Whether the current request has allocated a cache yet. Diagnostics and
+ * Whether the current scope has allocated a cache yet. Diagnostics and
  * tests only — never branch application behaviour on this.
  */
 declare function hasRequestScopedCache(): boolean;
@@ -124,4 +131,25 @@ declare const transactionContext: {
   storage: AsyncLocalStorage<unknown>;
 };
 //#endregion
-export { type DbSession, type RequestStore, getTraceHeaders, hasRequestScopedCache, requestContext, requestScopedCache, transactionContext };
+//#region src/context/workScope.d.ts
+interface WorkSeed {
+  readonly kind: WorkKind;
+  /** Becomes `requestId` — the correlation key for anything published inside. */
+  readonly id: string;
+  readonly organizationId?: string;
+}
+/** Enter a scope for `fn`, or run it inside the active one. */
+declare function runWorkScope<T>(seed: WorkSeed, fn: () => T): T;
+/**
+ * A per-scope memo slot: created once on first use, the same instance after.
+ * `undefined` outside a scope.
+ */
+declare function scopedValue<T>(slot: symbol, create: () => T): T | undefined;
+/**
+ * The scope an event dispatch runs in. The correlation id is the scope id so a
+ * child event published from a handler chains to the same correlation; the
+ * tenant rides `meta`, never the payload.
+ */
+declare function workSeedFromEvent(event: DomainEvent): WorkSeed;
+//#endregion
+export { type DbSession, type RequestStore, type WorkKind, type WorkSeed, getTraceHeaders, hasRequestScopedCache, requestContext, requestScopedCache, runWorkScope, scopedValue, transactionContext, workSeedFromEvent };

package/dist/context/index.mjs

@@ -1,29 +1,52 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { t as transactionContext } from "../transactionContext-DMmvcfdo.mjs";
-import { n as requestContext, t as getTraceHeaders } from "../requestContext-DpmntRZy.mjs";
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
+import { t as transactionContext } from "../transactionContext-DCWMI6hV.mjs";
+import { n as requestContext, t as getTraceHeaders } from "../requestContext-cSVKnYPk.mjs";
+import { n as scopedValue, r as workSeedFromEvent, t as runWorkScope } from "../workScope-BhsWde4k.mjs";
 //#region src/context/requestScopedCache.ts
+/** The memo slot the per-scope store hangs off. */
+const SLOT = Symbol.for("arc.requestScopedCache");
 /**
-* The slot the per-request store hangs off. Underscore-prefixed to sit apart
-* from the fields arc's own hooks populate on `RequestStore`.
+* Entry cap for one scope's cache. A request touching this many distinct keys
+* is already pathological; a JOB RUN reaching it is ordinary, and that is the
+* case this exists for (see the eviction note below).
 */
-const SLOT = "_requestCache";
+const MAX_ENTRIES = 1e4;
 /**
-* A `Map`-backed `CacheAdapter` with NO eviction and NO TTL — both deliberate.
+* A `Map`-backed `CacheAdapter` with NO TTL and LRU eviction above
+* {@link MAX_ENTRIES}.
 *
-* The store is unreachable once the request's async context ends, so it is
-* garbage in milliseconds and bounded by what one request touches; an LRU
-* would guard a lifetime that cannot occur. TTL is accepted and ignored
-* because repo-core stamps freshness INTO the envelope and re-checks on read —
-* honouring it here too would put two clocks on one question.
+* TTL is accepted and ignored because repo-core stamps freshness INTO the
+* envelope and re-checks on read — honouring it here too would put two clocks
+* on one question.
+*
+* Eviction is newer than the rest of this file and the reason is worth
+* keeping. Unbounded was correct while a scope meant an HTTP REQUEST: the
+* store is unreachable once that async context ends, so it was garbage in
+* milliseconds and bounded by what one request touched, and an LRU would have
+* guarded a lifetime that could not occur. 2.40 extended scopes to job runs
+* and event dispatches — and `schedulesPlugin` wraps the WHOLE handler in one
+* scope, so a nightly job sweeping a million rows holds a single cache for the
+* duration. That is now a lifetime that occurs, and the old premise no longer
+* holds. Evicting is always safe here: this is a cache, so the worst a miss
+* costs is the re-read it was avoiding.
 */
 function createRequestCacheAdapter() {
 	const map = /* @__PURE__ */ new Map();
 	return {
 		async get(key) {
-			return map.get(key);
+			if (!map.has(key)) return void 0;
+			const value = map.get(key);
+			map.delete(key);
+			map.set(key, value);
+			return value;
 		},
 		async set(key, value, _ttlSeconds) {
+			map.delete(key);
 			map.set(key, value);
+			if (map.size > MAX_ENTRIES) {
+				const oldest = map.keys().next();
+				if (!oldest.done) map.delete(oldest.value);
+			}
 		},
 		async delete(key) {
 			map.delete(key);
@@ -39,26 +62,21 @@ function createRequestCacheAdapter() {
 	};
 }
 /**
-* The cache for the CURRENT request, or `undefined` outside one.
+* The cache for the CURRENT unit of work — a request, an event dispatch or a
+* job run (see `runWorkScope`) — or `undefined` outside one.
 *
-* Lazily created on first use, so a request that never touches a cached
+* Lazily created on first use, so a scope that never touches a cached
 * repository allocates nothing.
 */
 function requestScopedCache() {
-	const store = requestContext.get();
-	if (!store) return void 0;
-	const existing = store[SLOT];
-	if (existing) return existing;
-	const created = createRequestCacheAdapter();
-	store[SLOT] = created;
-	return created;
+	return scopedValue(SLOT, createRequestCacheAdapter);
 }
 /**
-* Whether the current request has allocated a cache yet. Diagnostics and
+* Whether the current scope has allocated a cache yet. Diagnostics and
 * tests only — never branch application behaviour on this.
 */
 function hasRequestScopedCache() {
 	return requestContext.get()?.[SLOT] !== void 0;
 }
 //#endregion
-export { getTraceHeaders, hasRequestScopedCache, requestContext, requestScopedCache, transactionContext };
+export { getTraceHeaders, hasRequestScopedCache, requestContext, requestScopedCache, runWorkScope, scopedValue, transactionContext, workSeedFromEvent };

package/dist/core/index.d.mts

@@ -1,4 +1,4 @@
 
-import { $t as AccessControlConfig, B as defineResource, Bt as BaseController, Cn as ControllerConstructionOptions, En as BodySanitizerConfig, Gt as SlugExt, Ht as SoftDeleteMixin, Jt as BulkMixin, Kt as SlugMixin, Qt as AccessControl, Sn as ControllerConfigurableOptions, Tn as BodySanitizer, Ut as TreeExt, V as ResourceDefinition, Vt as SoftDeleteExt, Wt as TreeMixin, Xt as QueryResolver, Yt as BaseCrudController, Zt as QueryResolverConfig, ct as AggMeasureShorthand, dt as AggregationDateRangeRequirement, ft as AggregationIndexHint, gt as AggregationsMap, ht as AggregationRateLimit, lt as AggregationCacheConfig, mt as AggregationMaterializedResult, pt as AggregationMaterializedContext, qt as BulkExt, st as AggMeasureInput, ut as AggregationConfig, wn as ListResult, xn as BaseControllerOptions } from "../index-B78WZom8.mjs";
-import { A as CRUD_OPERATIONS, B as HookOperation, C as SeamedResourceConfig, D as createCrudRouter, E as defineAction, F as DEFAULT_SORT, G as MUTATION_OPERATIONS, H as MAX_FILTER_DEPTH, I as DEFAULT_TENANT_FIELD, J as SYSTEM_FIELDS, K as MutationOperation, L as DEFAULT_UPDATE_METHOD, M as DEFAULT_ID_FIELD, N as DEFAULT_LIMIT, O as createPermissionMiddleware, P as DEFAULT_MAX_LIMIT, R as HOOK_OPERATIONS, S as ResourceSeams, T as DefineActionConfig, U as MAX_REGEX_LENGTH, V as HookPhase, W as MAX_SEARCH_LENGTH, _ as getEntityId, a as formatValidationErrors, b as defineResourceVariants, c as nativePolicyFilter, d as createCrudHandlers, f as createFastifyHandler, g as sendControllerResponse, h as getControllerScope, i as assertValidConfig, j as CrudOperation, k as defineAggregation, l as collectReadBlockedFields, m as getControllerContext, n as ValidateOptions, o as validateResourceConfig, p as createRequestContext, q as RESERVED_QUERY_PARAMS, r as ValidationResult, s as NativePolicyFilter, t as ConfigError, u as isFieldReadable, v as getEntityIdField, w as mergeResourceConfig, x as AdapterLike, y as getEntityQuery, z as HOOK_PHASES } from "../index-BRoDtjek.mjs";
+import { $t as AccessControlConfig, B as defineResource, Bt as BaseController, Cn as ControllerConstructionOptions, En as BodySanitizerConfig, Gt as SlugExt, Ht as SoftDeleteMixin, Jt as BulkMixin, Kt as SlugMixin, Qt as AccessControl, Sn as ControllerConfigurableOptions, Tn as BodySanitizer, Ut as TreeExt, V as ResourceDefinition, Vt as SoftDeleteExt, Wt as TreeMixin, Xt as QueryResolver, Yt as BaseCrudController, Zt as QueryResolverConfig, ct as AggMeasureShorthand, dt as AggregationDateRangeRequirement, ft as AggregationIndexHint, gt as AggregationsMap, ht as AggregationRateLimit, lt as AggregationCacheConfig, mt as AggregationMaterializedResult, pt as AggregationMaterializedContext, qt as BulkExt, st as AggMeasureInput, ut as AggregationConfig, wn as ListResult, xn as BaseControllerOptions } from "../index-DHbyPo5j.mjs";
+import { A as CRUD_OPERATIONS, B as HookOperation, C as SeamedResourceConfig, D as createCrudRouter, E as defineAction, F as DEFAULT_SORT, G as MUTATION_OPERATIONS, H as MAX_FILTER_DEPTH, I as DEFAULT_TENANT_FIELD, J as SYSTEM_FIELDS, K as MutationOperation, L as DEFAULT_UPDATE_METHOD, M as DEFAULT_ID_FIELD, N as DEFAULT_LIMIT, O as createPermissionMiddleware, P as DEFAULT_MAX_LIMIT, R as HOOK_OPERATIONS, S as ResourceSeams, T as DefineActionConfig, U as MAX_REGEX_LENGTH, V as HookPhase, W as MAX_SEARCH_LENGTH, _ as getEntityId, a as formatValidationErrors, b as defineResourceVariants, c as nativePolicyFilter, d as createCrudHandlers, f as createFastifyHandler, g as sendControllerResponse, h as getControllerScope, i as assertValidConfig, j as CrudOperation, k as defineAggregation, l as collectReadBlockedFields, m as getControllerContext, n as ValidateOptions, o as validateResourceConfig, p as createRequestContext, q as RESERVED_QUERY_PARAMS, r as ValidationResult, s as NativePolicyFilter, t as ConfigError, u as isFieldReadable, v as getEntityIdField, w as mergeResourceConfig, x as AdapterLike, y as getEntityQuery, z as HOOK_PHASES } from "../index-D4u76eQW.mjs";
 export { AccessControl, type AccessControlConfig, type AdapterLike, type AggMeasureInput, type AggMeasureShorthand, type AggregationCacheConfig, type AggregationConfig, type AggregationDateRangeRequirement, type AggregationIndexHint, type AggregationMaterializedContext, type AggregationMaterializedResult, type AggregationRateLimit, type AggregationsMap, BaseController, type BaseControllerOptions, BaseCrudController, BodySanitizer, type BodySanitizerConfig, type BulkExt, BulkMixin, CRUD_OPERATIONS, type ConfigError, type ControllerConfigurableOptions, type ControllerConstructionOptions, CrudOperation, DEFAULT_ID_FIELD, DEFAULT_LIMIT, DEFAULT_MAX_LIMIT, DEFAULT_SORT, DEFAULT_TENANT_FIELD, DEFAULT_UPDATE_METHOD, type DefineActionConfig, HOOK_OPERATIONS, HOOK_PHASES, HookOperation, HookPhase, type ListResult, MAX_FILTER_DEPTH, MAX_REGEX_LENGTH, MAX_SEARCH_LENGTH, MUTATION_OPERATIONS, MutationOperation, type NativePolicyFilter, QueryResolver, type QueryResolverConfig, RESERVED_QUERY_PARAMS, ResourceDefinition, type ResourceSeams, SYSTEM_FIELDS, type SeamedResourceConfig, type SlugExt, SlugMixin, type SoftDeleteExt, SoftDeleteMixin, type TreeExt, TreeMixin, type ValidateOptions, type ValidationResult, assertValidConfig, collectReadBlockedFields, createCrudHandlers, createCrudRouter, createFastifyHandler, createPermissionMiddleware, createRequestContext, defineAction, defineAggregation, defineResource, defineResourceVariants, formatValidationErrors, getControllerContext, getControllerScope, getEntityId, getEntityIdField, getEntityQuery, isFieldReadable, mergeResourceConfig, nativePolicyFilter, sendControllerResponse, validateResourceConfig };

package/dist/core/index.mjs

@@ -1,8 +1,8 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { a as DEFAULT_SORT, c as HOOK_OPERATIONS, d as MAX_REGEX_LENGTH, f as MAX_SEARCH_LENGTH, h as SYSTEM_FIELDS, i as DEFAULT_MAX_LIMIT, l as HOOK_PHASES, m as RESERVED_QUERY_PARAMS, n as DEFAULT_ID_FIELD, o as DEFAULT_TENANT_FIELD, p as MUTATION_OPERATIONS, r as DEFAULT_LIMIT, s as DEFAULT_UPDATE_METHOD, t as CRUD_OPERATIONS, u as MAX_FILTER_DEPTH } from "../constants-BONghE1Y.mjs";
-import { a as BulkMixin, c as collectReadBlockedFields, f as BodySanitizer, h as nativePolicyFilter, i as SlugMixin, l as isFieldReadable, m as AccessControl, n as TreeMixin, o as BaseCrudController, r as SoftDeleteMixin, s as QueryResolver, t as BaseController } from "../BaseController-CYaDvmOB.mjs";
-import { t as defineAggregation } from "../defineAggregation-0KBvqEEC.mjs";
-import { a as createCrudHandlers, c as getControllerContext, l as getControllerScope, o as createFastifyHandler, s as createRequestContext, u as sendControllerResponse } from "../actionPermissions-jlFZ1it4.mjs";
-import { a as ResourceDefinition, i as validateResourceConfig, n as assertValidConfig, o as createCrudRouter, r as formatValidationErrors, s as createPermissionMiddleware, t as defineResource } from "../defineResource-BMdyRelW.mjs";
-import { a as mergeResourceConfig, i as defineResourceVariants, n as getEntityIdField, o as defineAction, r as getEntityQuery, t as getEntityId } from "../core-8She7FgF.mjs";
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
+import { a as DEFAULT_SORT, c as HOOK_OPERATIONS, d as MAX_REGEX_LENGTH, f as MAX_SEARCH_LENGTH, h as SYSTEM_FIELDS, i as DEFAULT_MAX_LIMIT, l as HOOK_PHASES, m as RESERVED_QUERY_PARAMS, n as DEFAULT_ID_FIELD, o as DEFAULT_TENANT_FIELD, p as MUTATION_OPERATIONS, r as DEFAULT_LIMIT, s as DEFAULT_UPDATE_METHOD, t as CRUD_OPERATIONS, u as MAX_FILTER_DEPTH } from "../constants-BxLgNFF7.mjs";
+import { a as BulkMixin, c as collectReadBlockedFields, f as BodySanitizer, h as nativePolicyFilter, i as SlugMixin, l as isFieldReadable, m as AccessControl, n as TreeMixin, o as BaseCrudController, r as SoftDeleteMixin, s as QueryResolver, t as BaseController } from "../BaseController-DYJRZ0EJ.mjs";
+import { t as defineAggregation } from "../defineAggregation-UyeurGkp.mjs";
+import { a as createCrudHandlers, c as getControllerContext, l as getControllerScope, o as createFastifyHandler, s as createRequestContext, u as sendControllerResponse } from "../actionPermissions-DPwPWPOV.mjs";
+import { a as ResourceDefinition, i as validateResourceConfig, n as assertValidConfig, o as createCrudRouter, r as formatValidationErrors, s as createPermissionMiddleware, t as defineResource } from "../defineResource-DzGT-2LP.mjs";
+import { a as mergeResourceConfig, i as defineResourceVariants, n as getEntityIdField, o as defineAction, r as getEntityQuery, t as getEntityId } from "../core-iNGqYerO.mjs";
 export { AccessControl, BaseController, BaseCrudController, BodySanitizer, BulkMixin, CRUD_OPERATIONS, DEFAULT_ID_FIELD, DEFAULT_LIMIT, DEFAULT_MAX_LIMIT, DEFAULT_SORT, DEFAULT_TENANT_FIELD, DEFAULT_UPDATE_METHOD, HOOK_OPERATIONS, HOOK_PHASES, MAX_FILTER_DEPTH, MAX_REGEX_LENGTH, MAX_SEARCH_LENGTH, MUTATION_OPERATIONS, QueryResolver, RESERVED_QUERY_PARAMS, ResourceDefinition, SYSTEM_FIELDS, SlugMixin, SoftDeleteMixin, TreeMixin, assertValidConfig, collectReadBlockedFields, createCrudHandlers, createCrudRouter, createFastifyHandler, createPermissionMiddleware, createRequestContext, defineAction, defineAggregation, defineResource, defineResourceVariants, formatValidationErrors, getControllerContext, getControllerScope, getEntityId, getEntityIdField, getEntityQuery, isFieldReadable, mergeResourceConfig, nativePolicyFilter, sendControllerResponse, validateResourceConfig };

package/dist/{core-8She7FgF.mjs → core-iNGqYerO.mjs}

@@ -1,6 +1,6 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import "./constants-BONghE1Y.mjs";
-import { t as defineResource } from "./defineResource-BMdyRelW.mjs";
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
+import "./constants-BxLgNFF7.mjs";
+import { t as defineResource } from "./defineResource-DzGT-2LP.mjs";
 //#region src/core/defineAction.ts
 /**
 * Build an `ActionDefinition` with a typed handler. The literal schema

package/dist/{createActionRouter-Bqi6Bhhx.mjs → createActionRouter-BBlbPs3k.mjs}

@@ -1,10 +1,10 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { t as __exportAll } from "./rolldown-runtime-Add2L50I.mjs";
-import "./constants-BONghE1Y.mjs";
-import { f as createError } from "./errors-2ExmOgIJ.mjs";
-import { i as resolvePipelineSteps, n as buildActionPipelineHandler, u as sendControllerResponse } from "./actionPermissions-jlFZ1it4.mjs";
-import { a as selectPluginMw, c as buildRouteHooks, f as buildAuthMiddlewareForPermissions, i as resolveRouterPluginMw, n as buildRateLimitConfig, o as buildActionPermissionMw, p as buildArcDecorator, r as buildRouteConfig, t as tryRegisterRoute, u as routeHookOptions } from "./registerRoute-XvcI_3sh.mjs";
-import { n as schemaIRToJsonSchemaBranch, t as normalizeSchemaIR } from "./schemaIR-CIXShch7.mjs";
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
+import { t as __exportAll } from "./rolldown-runtime-DjDuyglE.mjs";
+import "./constants-BxLgNFF7.mjs";
+import { f as createError } from "./errors-C_YhELhe.mjs";
+import { i as resolvePipelineSteps, n as buildActionPipelineHandler, u as sendControllerResponse } from "./actionPermissions-DPwPWPOV.mjs";
+import { a as selectPluginMw, c as buildRouteHooks, f as buildAuthMiddlewareForPermissions, i as resolveRouterPluginMw, n as buildRateLimitConfig, o as buildActionPermissionMw, p as buildArcDecorator, r as buildRouteConfig, t as tryRegisterRoute, u as routeHookOptions } from "./registerRoute-DRsSHPSM.mjs";
+import { n as schemaIRToJsonSchemaBranch, t as normalizeSchemaIR } from "./schemaIR-K16Bb5BX.mjs";
 //#region src/core/createActionRouter.ts
 var createActionRouter_exports = /* @__PURE__ */ __exportAll({
 	buildActionBodySchema: () => buildActionBodySchema,

package/dist/{createAggregationRouter-BsYO7ktd.mjs → createAggregationRouter-Dv5SuK2x.mjs}

@@ -1,10 +1,10 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { n as evaluateAndApplyPermission } from "./authorizationDecision-BP8GHtjc.mjs";
-import { f as createError } from "./errors-2ExmOgIJ.mjs";
-import { u as getRequestScope } from "./types-BqLyyH0o.mjs";
-import { a as selectPluginMw, c as buildRouteHooks, d as buildAuthMiddleware, i as resolveRouterPluginMw, n as buildRateLimitConfig, p as buildArcDecorator, u as routeHookOptions } from "./registerRoute-XvcI_3sh.mjs";
-import { n as validateAggregations } from "./validate-CidSeUrx.mjs";
-import { t as buildAggregationHandler } from "./buildHandler-DjXOqIvX.mjs";
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
+import { n as evaluateAndApplyPermission } from "./authorizationDecision-2YY_Kaj1.mjs";
+import { f as createError } from "./errors-C_YhELhe.mjs";
+import { u as getRequestScope } from "./types-CDy3-zw1.mjs";
+import { a as selectPluginMw, c as buildRouteHooks, d as buildAuthMiddleware, i as resolveRouterPluginMw, n as buildRateLimitConfig, p as buildArcDecorator, u as routeHookOptions } from "./registerRoute-DRsSHPSM.mjs";
+import { n as validateAggregations } from "./validate-R0G_JrnK.mjs";
+import { t as buildAggregationHandler } from "./buildHandler-CUhjGHGZ.mjs";
 //#region src/core/aggregation/createAggregationRouter.ts
 /**
 * Register one Fastify route per aggregation. No-op when the map is

package/dist/createMcpServer-CbDWkZ1T.d.mts

@@ -0,0 +1,48 @@
+
+import { _ as ToolDefinition, c as McpAuthResult, r as CreateMcpServerConfig } from "./types-CWQn9-IC.mjs";
+//#region src/integrations/mcp/createMcpServer.d.ts
+/**
+ * Mutable auth ref — updated per-request by mcpPlugin.
+ * Tool handlers read from this to get the current request's auth context.
+ */
+interface AuthRef {
+  current: McpAuthResult | null;
+}
+/**
+ * Create a configured MCP server from declarative config.
+ *
+ * @param config - Server name, version, tools, prompts
+ * @returns McpServer instance (not yet connected to a transport)
+ */
+declare function createMcpServer(config: CreateMcpServerConfig, authRef?: AuthRef): Promise<McpServerInstance>;
+/**
+ * Detect and resolve duplicate MCP tool names across the assembled tool list.
+ *
+ * Two outcomes:
+ *
+ *  1. **Auto-namespace** — when one tool's `source` carries a `preset:<name>`
+ *     prefix and the other doesn't, the preset tool is renamed to
+ *     `<presetName>_<originalName>` (e.g. softDelete's `restore_post`
+ *     becomes `softdelete_restore_post` when the user defines
+ *     `actions.restore`). The user's tool wins the canonical name because
+ *     it's the more-specific intent.
+ *
+ *  2. **Typed throw** — every other collision (two user actions, two
+ *     custom routes, two presets) raises `ArcError('arc.mcp.tool_name_collision')`
+ *     naming both sources so the host's stack trace points at the
+ *     resource definitions, not the MCP SDK internals.
+ *
+ * Exported for the testing harness so collision behaviour can be exercised
+ * without a full server boot.
+ */
+declare function resolveToolCollisions(tools: readonly ToolDefinition[]): ToolDefinition[];
+/** Minimal interface for McpServer — avoids hard SDK type dependency */
+interface McpServerInstance {
+  connect: (transport: unknown) => Promise<void>;
+  registerTool: (name: string, config: Record<string, unknown>, handler: (input: Record<string, unknown>, extra: Record<string, unknown>) => unknown) => unknown;
+  registerPrompt: (name: string, config: Record<string, unknown>, handler: (args: Record<string, unknown>) => unknown) => void;
+  /** v2 name. v1 called this `resource()` — same four arguments. */
+  registerResource: (...args: unknown[]) => void;
+}
+//#endregion
+export { resolveToolCollisions as i, McpServerInstance as n, createMcpServer as r, AuthRef as t };

package/dist/{defineAggregation-0KBvqEEC.mjs → defineAggregation-UyeurGkp.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
 //#region src/core/aggregation/defineAggregation.ts
 /**
 * Declare a single resource aggregation. Exported configs flow into

package/dist/{defineResource-BMdyRelW.mjs → defineResource-DzGT-2LP.mjs}

@@ -1,20 +1,20 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { p as MUTATION_OPERATIONS, s as DEFAULT_UPDATE_METHOD, t as CRUD_OPERATIONS } from "./constants-BONghE1Y.mjs";
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
+import { p as MUTATION_OPERATIONS, s as DEFAULT_UPDATE_METHOD, t as CRUD_OPERATIONS } from "./constants-BxLgNFF7.mjs";
 import { arcLog } from "./logger/index.mjs";
-import { r as ForbiddenError } from "./errors-2ExmOgIJ.mjs";
-import { n as getUserRoles } from "./userHelpers-CXySQFRg.mjs";
-import { b as isElevated, n as PUBLIC_SCOPE, x as isMember } from "./types-BqLyyH0o.mjs";
-import { d as isWriteVerbCapable, p as DEFAULT_FIELD_WRITE_DENIAL_POLICY, t as BaseController, u as detectOverriddenWriteSlots } from "./BaseController-CYaDvmOB.mjs";
-import { v as getDefaultCrudSchemas } from "./utils-BbGG8XNT.mjs";
-import { a as resolveEffectiveRoles, n as applyFieldWritePermissions } from "./fields-Cha2QCKH.mjs";
-import { n as convertRouteSchema, r as ensureSchemaConverter, t as convertOpenApiSchemas } from "./schemaConverter-Db-MMsH6.mjs";
-import { i as pipeUIMessageStreamToReply, r as isReadableStream } from "./streaming-DkpW1HwJ.mjs";
-import { a as createCrudHandlers, i as resolvePipelineSteps, o as createFastifyHandler, r as buildPipelineHandler, s as createRequestContext, t as resolveActionPermission } from "./actionPermissions-jlFZ1it4.mjs";
-import { a as selectPluginMw, c as buildRouteHooks, d as buildAuthMiddleware, i as resolveRouterPluginMw, l as resolveRoutePreHandlers, n as buildRateLimitConfig, p as buildArcDecorator, r as buildRouteConfig, s as buildCrudPermissionMw, t as tryRegisterRoute, u as routeHookOptions } from "./registerRoute-XvcI_3sh.mjs";
-import { t as hasEvents } from "./typeGuards-DHTnEs5X.mjs";
-import { B as requireAuth } from "./permissions-H7Zcb82Z.mjs";
-import { r as getAvailablePresets, t as applyPresets } from "./presets-CNyfaxGL.mjs";
-import { t as pluralize } from "./pluralize-Da7IT_qJ.mjs";
+import { r as ForbiddenError } from "./errors-C_YhELhe.mjs";
+import { n as getUserRoles } from "./userHelpers-DDMOZ_Pm.mjs";
+import { b as isElevated, n as PUBLIC_SCOPE, x as isMember } from "./types-CDy3-zw1.mjs";
+import { d as isWriteVerbCapable, p as DEFAULT_FIELD_WRITE_DENIAL_POLICY, t as BaseController, u as detectOverriddenWriteSlots } from "./BaseController-DYJRZ0EJ.mjs";
+import { y as getDefaultCrudSchemas } from "./utils-B-zj_b__.mjs";
+import { a as resolveEffectiveRoles, n as applyFieldWritePermissions } from "./fields-BTyPLHK0.mjs";
+import { n as convertRouteSchema, r as ensureSchemaConverter, t as convertOpenApiSchemas } from "./schemaConverter-BLCSmNbr.mjs";
+import { i as pipeUIMessageStreamToReply, r as isReadableStream } from "./streaming-dvppnxsr.mjs";
+import { a as createCrudHandlers, i as resolvePipelineSteps, o as createFastifyHandler, r as buildPipelineHandler, s as createRequestContext, t as resolveActionPermission } from "./actionPermissions-DPwPWPOV.mjs";
+import { a as selectPluginMw, c as buildRouteHooks, d as buildAuthMiddleware, i as resolveRouterPluginMw, l as resolveRoutePreHandlers, n as buildRateLimitConfig, p as buildArcDecorator, r as buildRouteConfig, s as buildCrudPermissionMw, t as tryRegisterRoute, u as routeHookOptions } from "./registerRoute-DRsSHPSM.mjs";
+import { t as hasEvents } from "./typeGuards-D7tHFdH6.mjs";
+import { B as requireAuth } from "./permissions-DiHXy8Ck.mjs";
+import { r as getAvailablePresets, t as applyPresets } from "./presets-BdlugYTc.mjs";
+import { t as pluralize } from "./pluralize-2_U6QZQg.mjs";
 import { isReadOnlyRepo } from "@classytic/repo-core/repository";
 //#region src/core/middlewares/fieldWrite.ts
 /**
@@ -1425,7 +1425,7 @@ function buildResourcePlugin(resource) {
 				extensions: resource.extensions
 			});
 			if (resource.actions && Object.keys(resource.actions).length > 0) {
-				const { createActionRouter } = await import("./createActionRouter-Bqi6Bhhx.mjs").then((n) => n.n);
+				const { createActionRouter } = await import("./createActionRouter-BBlbPs3k.mjs").then((n) => n.n);
 				createActionRouter(typedInstance, {
 					...normalizeActionsToRouterConfig(resource.actions, resource.actionPermissions, resource.tag, resource.permissions, resource.name, typedInstance.log),
 					resourceName: resource.name,
@@ -1440,7 +1440,7 @@ function buildResourcePlugin(resource) {
 				});
 			}
 			if (resource.aggregations && Object.keys(resource.aggregations).length > 0) {
-				const [{ createAggregationRouter }, { adapterSupportsAggregate, ArcAggregationConfigError }] = await Promise.all([import("./createAggregationRouter-BsYO7ktd.mjs"), import("./validate-CidSeUrx.mjs").then((n) => n.r)]);
+				const [{ createAggregationRouter }, { adapterSupportsAggregate, ArcAggregationConfigError }] = await Promise.all([import("./createAggregationRouter-Dv5SuK2x.mjs"), import("./validate-R0G_JrnK.mjs").then((n) => n.r)]);
 				const repoForAgg = resource.controller?.repository ?? resource.repository;
 				if (!adapterSupportsAggregate(repoForAgg)) {
 					const undispatchable = Object.entries(resource.aggregations).filter(([, cfg]) => !cfg.materialized).map(([name]) => name);
@@ -2457,10 +2457,8 @@ function defineResource(config) {
 	const configWithId = resolveIdField(normalisedConfig, repository);
 	const resolvedConfig = applyPresetsAndAutoInject(configWithId);
 	const hasCrudRoutes = computeHasCrudRoutes(resolvedConfig);
-	if (!normalisedConfig.skipValidation) {
-		const strict = resolvedConfig.strictPermissions ?? process.env.ARC_STRICT_PERMISSIONS === "true";
-		diagnostics = diagnostics.concat(collectUngatedCrudDiagnostics(resolvedConfig, strict));
-	}
+	const strict = resolvedConfig.strictPermissions ?? process.env.ARC_STRICT_PERMISSIONS === "true";
+	diagnostics = diagnostics.concat(collectUngatedCrudDiagnostics(resolvedConfig, strict));
 	const fatal = diagnostics.filter((d) => d.severity === "error");
 	if (fatal.length > 0) throw new Error(fatal.map((d) => d.message).join("\n\n"));
 	const narrowedConfig = resolvedConfig;

package/dist/discovery/index.mjs

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
 import { readdir } from "node:fs/promises";
 import { extname, join, resolve } from "node:path";
 import { pathToFileURL } from "node:url";

package/dist/docs/index.d.mts

@@ -1,5 +1,5 @@
 
-import { p as RegistryEntry } from "../index-B78WZom8.mjs";
+import { p as RegistryEntry } from "../index-DHbyPo5j.mjs";
 import { t as ExternalOpenApiPaths } from "../externalPaths-CmGOxOtD.mjs";
 import { FastifyPluginAsync } from "fastify";
 //#region src/docs/openapi/types.d.ts

package/dist/docs/index.mjs

@@ -1,6 +1,6 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { n as getUserRoles } from "../userHelpers-CXySQFRg.mjs";
-import { n as openApiPlugin, r as openapi_default, t as buildOpenApiSpec } from "../openapi-Dxc8RLy_.mjs";
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
+import { n as getUserRoles } from "../userHelpers-DDMOZ_Pm.mjs";
+import { n as openApiPlugin, r as openapi_default, t as buildOpenApiSpec } from "../openapi-C3LFRzPq.mjs";
 import fp from "fastify-plugin";
 //#region src/docs/scalar.ts
 const scalarPlugin = async (fastify, opts = {}) => {

package/dist/{elevation-C6woysGC.mjs → elevation-BF-vhGxY.mjs}

@@ -1,8 +1,8 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { t as __exportAll } from "./rolldown-runtime-Add2L50I.mjs";
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
+import { t as __exportAll } from "./rolldown-runtime-DjDuyglE.mjs";
 import { arcLog } from "./logger/index.mjs";
-import { n as requireSingleHeaderValue } from "./headers-DeXNifVj.mjs";
-import { n as getUserRoles } from "./userHelpers-CXySQFRg.mjs";
+import { n as requireSingleHeaderValue } from "./headers-CNECDE6q.mjs";
+import { n as getUserRoles } from "./userHelpers-DDMOZ_Pm.mjs";
 import fp from "fastify-plugin";
 //#region src/scope/elevation.ts
 var elevation_exports = /* @__PURE__ */ __exportAll({

package/dist/encryption/index.mjs

@@ -1,6 +1,6 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { t as ArcError } from "../errors-2ExmOgIJ.mjs";
-import { t as parseJsonBody } from "../jsonBody-DVui0uJl.mjs";
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
+import { t as ArcError } from "../errors-C_YhELhe.mjs";
+import { t as parseJsonBody } from "../jsonBody-Cq9KYl2Z.mjs";
 import { createCipheriv, createDecipheriv, randomBytes } from "node:crypto";
 import fp from "fastify-plugin";
 //#region src/encryption/fieldCipher.ts

package/dist/{errorHandler-DI5AN2b5.d.mts → errorHandler--4rSMMvq.d.mts}

@@ -7,7 +7,13 @@ import { FastifyInstance, FastifyRequest } from "fastify";
  * to a partial `ErrorContract`. Highest-priority dispatch in the handler.
  */
 interface ErrorMapper<T extends Error = Error> {
-  type: abstract new (...args: any[]) => T;
+  /**
+   * Only ever used as `error instanceof mapper.type` — the constructor is never
+   * CALLED through this interface, so `never[]` is the sound parameter type:
+   * every real class assigns to it (constructor parameters are contravariant),
+   * and nothing can invoke it. `any[]` here was a permission nothing used.
+   */
+  type: abstract new (...args: never[]) => T;
   toResponse: (error: T) => {
     status: number;
     code?: string;

package/dist/{errorHandler-BdmIWPba.mjs → errorHandler-CIMkCOWm.mjs}

@@ -1,6 +1,6 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { t as __exportAll } from "./rolldown-runtime-Add2L50I.mjs";
-import { m as statusToArcCode, p as isArcError } from "./errors-2ExmOgIJ.mjs";
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
+import { t as __exportAll } from "./rolldown-runtime-DjDuyglE.mjs";
+import { m as statusToArcCode, p as isArcError } from "./errors-C_YhELhe.mjs";
 import { isProductionEnv } from "@classytic/primitives/environment";
 import { isHttpError, toErrorContract } from "@classytic/repo-core/errors";
 import fp from "fastify-plugin";

package/dist/{errors-2ExmOgIJ.mjs → errors-C_YhELhe.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
 //#region src/utils/errors.ts
 /**
 * Base Arc Error. Implements the canonical `HttpError` contract — `status`

package/dist/{eventPlugin-DFvHa4Nf.d.mts → eventPlugin-B52abJ8W.d.mts}

@@ -1,5 +1,5 @@
 
-import { a as EventTransport, i as EventLogger, n as DomainEvent, r as EventHandler, s as MemoryEventTransportOptions } from "./EventTransport-Cx60_s-6.mjs";
+import { a as EventTransport, i as EventLogger, n as DomainEvent, r as EventHandler, s as MemoryEventTransportOptions } from "./EventTransport-CbUKDzZZ.mjs";
 import { FastifyPluginAsync } from "fastify";
 //#region src/events/defineEvent.d.ts
 interface EventSchema {

package/dist/{eventPlugin-DJwpGMzx.mjs → eventPlugin-CmXaPWLv.mjs}

@@ -1,9 +1,9 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { t as __exportAll } from "./rolldown-runtime-Add2L50I.mjs";
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
+import { t as __exportAll } from "./rolldown-runtime-DjDuyglE.mjs";
 import { arcLog } from "./logger/index.mjs";
-import { d as createDomainError } from "./errors-2ExmOgIJ.mjs";
-import { n as requestContext } from "./requestContext-DpmntRZy.mjs";
-import { n as MemoryEventTransport, r as createEvent, t as ARC_EVENT_TRANSPORT } from "./EventTransport-Gq7JWbWw.mjs";
+import { d as createDomainError } from "./errors-C_YhELhe.mjs";
+import { n as requestContext } from "./requestContext-cSVKnYPk.mjs";
+import { n as MemoryEventTransport, r as createEvent, t as ARC_EVENT_TRANSPORT } from "./EventTransport-n7qO5Cz3.mjs";
 import { isProductionEnv } from "@classytic/primitives/environment";
 import fp from "fastify-plugin";
 //#region src/events/retry.ts

package/dist/events/index.d.mts

@@ -1,9 +1,9 @@
 
-import { i as EventLogger, n as DomainEvent, o as MemoryEventTransport, r as EventHandler, s as MemoryEventTransportOptions } from "../EventTransport-Cx60_s-6.mjs";
-import { a as withRetry, c as EventDefinitionOutput, d as EventSchema, f as ValidationResult, i as createDeadLetterPublisher, l as EventRegistry, m as defineEvent, n as eventPlugin, o as CustomValidator, p as createEventRegistry, r as RetryOptions, s as EventDefinitionInput, t as EventPluginOptions, u as EventRegistryOptions } from "../eventPlugin-DFvHa4Nf.mjs";
-import { a as EventOutbox, c as OutboxRelayErrorKind, i as MemoryOutboxStore, l as RelayResult, n as OutboxModuleOptions, o as EventOutboxOptions, r as createOutboxModule, s as OutboxRelayErrorHandler, t as OutboxModuleExports } from "../outbox-module-CQXu_O6o.mjs";
+import { i as EventLogger, n as DomainEvent, o as MemoryEventTransport, r as EventHandler, s as MemoryEventTransportOptions } from "../EventTransport-CbUKDzZZ.mjs";
+import { a as withRetry, c as EventDefinitionOutput, d as EventSchema, f as ValidationResult, i as createDeadLetterPublisher, l as EventRegistry, m as defineEvent, n as eventPlugin, o as CustomValidator, p as createEventRegistry, r as RetryOptions, s as EventDefinitionInput, t as EventPluginOptions, u as EventRegistryOptions } from "../eventPlugin-B52abJ8W.mjs";
+import { a as EventOutbox, c as OutboxRelayErrorKind, i as MemoryOutboxStore, l as RelayResult, n as OutboxModuleOptions, o as EventOutboxOptions, r as createOutboxModule, s as OutboxRelayErrorHandler, t as OutboxModuleExports } from "../outbox-module-BHdUnuuK.mjs";
 import { RedisEventTransportOptions, RedisLike } from "./transports/redis.mjs";
-import { r as RedisStreamTransportOptions, t as RedisStreamLike } from "../redis-stream-eh0eOtjh.mjs";
+import { r as RedisStreamTransportOptions, t as RedisStreamLike } from "../redis-stream-BPKscsTB.mjs";
 import { OutboxStore } from "@classytic/primitives/outbox";
 import { RepositoryLike } from "@classytic/repo-core/adapter";
 //#region src/events/eventTypes.d.ts

package/dist/events/index.mjs

@@ -1,8 +1,8 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { n as MemoryEventTransport } from "../EventTransport-Gq7JWbWw.mjs";
-import { a as createEventRegistry, i as wrapWithSchema, n as subscribeWithSchema, o as defineEvent, r as wrapWithBoundary, t as subscribeWithBoundary } from "../subscribe-helpers-CBZOi6pk.mjs";
-import { i as withRetry, r as createDeadLetterPublisher, t as eventPlugin } from "../eventPlugin-DJwpGMzx.mjs";
-import { i as exponentialBackoff, n as EventOutbox, r as repositoryAsOutboxStore, t as createOutboxModule } from "../outbox-module-DyIqA5vo.mjs";
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
+import { n as MemoryEventTransport } from "../EventTransport-n7qO5Cz3.mjs";
+import { a as createEventRegistry, i as wrapWithSchema, n as subscribeWithSchema, o as defineEvent, r as wrapWithBoundary, t as subscribeWithBoundary } from "../subscribe-helpers-AVYPgqTl.mjs";
+import { i as withRetry, r as createDeadLetterPublisher, t as eventPlugin } from "../eventPlugin-CmXaPWLv.mjs";
+import { i as exponentialBackoff, n as EventOutbox, r as repositoryAsOutboxStore, t as createOutboxModule } from "../outbox-module-dsCyLxXH.mjs";
 import { MemoryOutboxStore } from "@classytic/primitives/memory-outbox";
 //#region src/events/eventTypes.ts
 /**

package/dist/events/transports/redis-stream-entry.d.mts

@@ -1,3 +1,3 @@
 
-import { n as RedisStreamTransport, r as RedisStreamTransportOptions, t as RedisStreamLike } from "../../redis-stream-eh0eOtjh.mjs";
+import { n as RedisStreamTransport, r as RedisStreamTransportOptions, t as RedisStreamLike } from "../../redis-stream-BPKscsTB.mjs";
 export { type RedisStreamLike, RedisStreamTransport, type RedisStreamTransportOptions };