@classytic/arc 2.38.0 → 2.41.0

package/dist/{init-Dg_Am2o_.mjs → init-Y2MlSN9n.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
 import * as fs from "node:fs/promises";
 import * as path from "node:path";
 import { dirname, join } from "node:path";
@@ -605,7 +605,7 @@ export const authResource = defineResource({
   tag: 'Authentication',
   prefix: '/auth',
 
-  adapter: createAdapter(User${ts ? " as unknown as never" : ""}, userRepository${ts ? " as unknown as never" : ""}),
+  adapter: createAdapter(User${ts ? " as never" : ""}, userRepository${ts ? " as never" : ""}),
   disableDefaultRoutes: true,
 
   routes: [
@@ -661,7 +661,7 @@ export const userProfileResource = defineResource({
   tag: 'User Profile',
   prefix: '/users',
 
-  adapter: createAdapter(User${ts ? " as unknown as never" : ""}, userRepository${ts ? " as unknown as never" : ""}),
+  adapter: createAdapter(User${ts ? " as never" : ""}, userRepository${ts ? " as never" : ""}),
   disableDefaultRoutes: true,
 
   routes: [
@@ -702,7 +702,7 @@ import { mongodbAdapter } from '@better-auth/mongo-adapter';` : "";
 		useBearer ? `import { bearer } from 'better-auth/plugins/bearer';` : "",
 		useApiKey ? `import { apiKey } from '@better-auth/api-key';` : ""
 	].filter(Boolean).join("\n");
-	const dbAdapter = useMongo ? config.typescript ? `database: mongodbAdapter(mongoose.connection.getClient().db() as unknown as never),` : `database: mongodbAdapter(mongoose.connection.getClient().db()),` : `// Configure your database adapter here
+	const dbAdapter = useMongo ? config.typescript ? `database: mongodbAdapter(mongoose.connection.getClient().db() as never),` : `database: mongodbAdapter(mongoose.connection.getClient().db()),` : `// Configure your database adapter here
     // See: https://www.better-auth.com/docs/concepts/database`;
 	const pluginEntries = [
 		useBearer ? `        bearer(),` : "",
@@ -962,7 +962,7 @@ export async function resetPassword(request${ts ? ": FastifyRequest" : ""}, repl
  */
 export async function getUserProfile(request${ts ? ": FastifyRequest" : ""}, reply${ts ? ": FastifyReply" : ""}) {
   try {
-    const requestUser = (request${ts ? " as unknown as { user?: { _id?: string; id?: string } }" : ""}).user;
+    const requestUser = (request${ts ? " as { user?: { _id?: string; id?: string } }" : ""}).user;
     const userId = requestUser?._id || requestUser?.id;
     if (!userId) {
       return reply.code(401).send({ error: 'Authentication required', code: 'arc.unauthorized' });
@@ -985,7 +985,7 @@ export async function getUserProfile(request${ts ? ": FastifyRequest" : ""}, rep
  */
 export async function updateUserProfile(request${ts ? ": FastifyRequest" : ""}, reply${ts ? ": FastifyReply" : ""}) {
   try {
-    const requestUser = (request${ts ? " as unknown as { user?: { _id?: string; id?: string } }" : ""}).user;
+    const requestUser = (request${ts ? " as { user?: { _id?: string; id?: string } }" : ""}).user;
     const userId = requestUser?._id || requestUser?.id;
     if (!userId) {
       return reply.code(401).send({ error: 'Authentication required', code: 'arc.unauthorized' });
@@ -2727,7 +2727,7 @@ interface FlexibleMultiTenantOptions {
   tenantField?: string;
 }
 ` : `
-const { multiTenantPreset } = require('@classytic/arc/presets/tenant');
+import { multiTenantPreset } from '@classytic/arc/presets/tenant';
 `}
 export function flexibleMultiTenantPreset(options${ts ? ": FlexibleMultiTenantOptions = {}" : " = {}"}) {
   const { tenantField = 'organizationId' } = options;
@@ -2972,7 +2972,7 @@ ${ts ? "import type { UserDocument } from './user.model.js';\nimport type { Clie
 ${ts ? "type ID = string | Types.ObjectId;\n" : ""}
 class UserRepository extends Repository${ts ? "<UserDocument>" : ""} {
   constructor() {
-    super(User${ts ? " as unknown as never" : ""}, [
+    super(User${ts ? " as never" : ""}, [
       methodRegistryPlugin(),
       mongoOperationsPlugin(),
     ]);
@@ -3058,7 +3058,7 @@ import userRepository from './user.repository.js';
 
 class UserController extends BaseController {
   constructor() {
-    super(userRepository${config.typescript ? " as unknown as never" : ""});
+    super(userRepository${config.typescript ? " as never" : ""});
   }
 
   // Custom user operations can be added here

package/dist/integrations/event-gateway.d.mts

@@ -1,5 +1,5 @@
 
-import { n as DomainEvent } from "../EventTransport-Cx60_s-6.mjs";
+import { n as DomainEvent } from "../EventTransport-CbUKDzZZ.mjs";
 import { c as WebSocketClient, l as WebSocketMessage } from "../websocket-BOXVggMf.mjs";
 import { FastifyPluginAsync, FastifyRequest } from "fastify";
 //#region src/integrations/event-gateway.d.ts

package/dist/integrations/event-gateway.mjs

@@ -1,11 +1,11 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
 import fp from "fastify-plugin";
 //#region src/integrations/event-gateway.ts
 const eventGatewayPluginImpl = async (fastify, opts = {}) => {
 	const { auth = true, orgScoped = false, roomPolicy, maxMessageBytes, maxSubscriptionsPerClient, authenticate } = opts;
 	if (auth && !authenticate && !fastify.hasDecorator("authenticate")) throw new Error("[arc-event-gateway] auth is true but fastify.authenticate is not registered. Register an auth plugin first, provide a custom authenticate function, or set auth: false.");
 	if (opts.sse !== false) {
-		const { default: ssePlugin } = await import("../sse-D4MYqkic.mjs").then((n) => n.r);
+		const { default: ssePlugin } = await import("../sse-CH7Slxc1.mjs").then((n) => n.r);
 		await fastify.register(ssePlugin, {
 			path: opts.sse?.path ?? "/events/stream",
 			requireAuth: auth,

package/dist/integrations/index.d.mts

@@ -1,8 +1,8 @@
 
 import { c as WebSocketClient, l as WebSocketMessage, u as WebSocketPluginOptions } from "../websocket-BOXVggMf.mjs";
 import { EventGatewayOptions } from "./event-gateway.mjs";
-import { a as JobMeta, c as JobsPluginOptions, i as JobDispatcher, l as QueueStats, n as JobDefinition, r as JobDispatchOptions } from "../index-eyg5WEcy.mjs";
-import { _ as ToolDefinition, c as McpAuthResult, d as McpResourceConfig, f as PromptDefinition, g as ToolContext, h as ToolAnnotations, n as CallToolResult, o as CrudOperation, r as CreateMcpServerConfig, t as BetterAuthHandler, u as McpPluginOptions } from "../types-LQFwC37d.mjs";
+import { a as JobMeta, c as JobsPluginOptions, i as JobDispatcher, l as QueueStats, n as JobDefinition, r as JobDispatchOptions } from "../index-CbJiYrfv.mjs";
+import { _ as ToolDefinition, c as McpAuthResult, d as McpResourceConfig, f as PromptDefinition, g as ToolContext, h as ToolAnnotations, n as CallToolResult, o as CrudOperation, r as CreateMcpServerConfig, t as BetterAuthHandler, u as McpPluginOptions } from "../types-CWQn9-IC.mjs";
 import { StreamlinePluginOptions, WorkflowLike, WorkflowRunLike } from "./streamline.mjs";
 import { WebhookDeliveryRecord, WebhookManager, WebhookPluginOptions, WebhookStore, WebhookSubscription } from "./webhooks.mjs";
 export type { BetterAuthHandler, CallToolResult, CreateMcpServerConfig, CrudOperation, EventGatewayOptions, JobDefinition, JobDispatchOptions, JobDispatcher, JobMeta, JobsPluginOptions, McpAuthResult, McpPluginOptions, McpResourceConfig, PromptDefinition, QueueStats, StreamlinePluginOptions, ToolAnnotations, ToolContext, ToolDefinition, WebSocketClient, WebSocketMessage, WebSocketPluginOptions, WebhookDeliveryRecord, WebhookManager, WebhookPluginOptions, WebhookStore, WebhookSubscription, WorkflowLike, WorkflowRunLike };

package/dist/integrations/index.mjs

@@ -1,2 +1,2 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
 export {};

package/dist/integrations/jobs/index.d.mts

@@ -1,3 +1,3 @@
 
-import { a as JobMeta, c as JobsPluginOptions, d as ExecuteTimedHandlerOptions, f as TimedHandlerLogger, i as JobDispatcher, l as QueueStats, n as JobDefinition, o as JobRepeatOptions, p as executeTimedHandler, r as JobDispatchOptions, s as JobStatus, t as jobsPlugin, u as defineJob } from "../../index-eyg5WEcy.mjs";
+import { a as JobMeta, c as JobsPluginOptions, d as ExecuteTimedHandlerOptions, f as TimedHandlerLogger, i as JobDispatcher, l as QueueStats, n as JobDefinition, o as JobRepeatOptions, p as executeTimedHandler, r as JobDispatchOptions, s as JobStatus, t as jobsPlugin, u as defineJob } from "../../index-CbJiYrfv.mjs";
 export { type ExecuteTimedHandlerOptions, type JobDefinition, type JobDispatchOptions, type JobDispatcher, type JobMeta, type JobRepeatOptions, type JobStatus, type JobsPluginOptions, type QueueStats, type TimedHandlerLogger, defineJob, executeTimedHandler, jobsPlugin };

package/dist/integrations/jobs/index.mjs

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { n as evaluateAndApplyPermission } from "../../authorizationDecision-BP8GHtjc.mjs";
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
+import { n as evaluateAndApplyPermission } from "../../authorizationDecision-2YY_Kaj1.mjs";
 import fp from "fastify-plugin";
 //#region src/integrations/jobs/execution.ts
 async function executeTimedHandler(options) {

package/dist/integrations/mcp/index.d.mts

@@ -1,9 +1,10 @@
 
 import { i as RequestScope } from "../../types-Ddl9OjmE.mjs";
-import { l as PermissionCheck } from "../../base-C-NL2fTi.mjs";
-import { Fn as IControllerResponse, In as IRequestContext, V as ResourceDefinition, zn as ServerAccessor } from "../../index-B78WZom8.mjs";
+import { l as PermissionCheck } from "../../base-CxrV1LmG.mjs";
+import { Fn as IControllerResponse, In as IRequestContext, V as ResourceDefinition, zn as ServerAccessor } from "../../index-DHbyPo5j.mjs";
 import { n as FieldPermissionMap } from "../../fields-I_EeRWND.mjs";
-import { _ as ToolDefinition, a as CrudDescriptionOverride, c as McpAuthResult, d as McpResourceConfig, f as PromptDefinition, g as ToolContext, h as ToolAnnotations, i as CrudDescriptionMeta, l as McpExecutionWiring, m as SessionEntry, n as CallToolResult, o as CrudOperation, p as PromptResult, r as CreateMcpServerConfig, s as McpAuthResolver, t as BetterAuthHandler, u as McpPluginOptions } from "../../types-LQFwC37d.mjs";
+import { _ as ToolDefinition, a as CrudDescriptionOverride, c as McpAuthResult, d as McpResourceConfig, f as PromptDefinition, g as ToolContext, h as ToolAnnotations, i as CrudDescriptionMeta, l as McpExecutionWiring, m as SessionEntry, n as CallToolResult, o as CrudOperation, p as PromptResult, r as CreateMcpServerConfig, s as McpAuthResolver, t as BetterAuthHandler, u as McpPluginOptions } from "../../types-CWQn9-IC.mjs";
+import { i as resolveToolCollisions, n as McpServerInstance, r as createMcpServer, t as AuthRef } from "../../createMcpServer-CbDWkZ1T.mjs";
 import { ErrorContract } from "@classytic/repo-core/errors";
 import { FastifyPluginAsync } from "fastify";
 import { z } from "zod";
@@ -96,50 +97,6 @@ interface CreateMcpAuthFromBetterAuthApiKeyOptions {
  */
 declare function createMcpAuthFromBetterAuthApiKey(auth: BetterAuthHandler, options?: CreateMcpAuthFromBetterAuthApiKeyOptions): McpAuthResolver;
 //#endregion
-//#region src/integrations/mcp/createMcpServer.d.ts
-/**
- * Mutable auth ref — updated per-request by mcpPlugin.
- * Tool handlers read from this to get the current request's auth context.
- */
-interface AuthRef {
-  current: McpAuthResult | null;
-}
-/**
- * Create a configured MCP server from declarative config.
- *
- * @param config - Server name, version, tools, prompts
- * @returns McpServer instance (not yet connected to a transport)
- */
-declare function createMcpServer(config: CreateMcpServerConfig, authRef?: AuthRef): Promise<McpServerInstance>;
-/**
- * Detect and resolve duplicate MCP tool names across the assembled tool list.
- *
- * Two outcomes:
- *
- *  1. **Auto-namespace** — when one tool's `source` carries a `preset:<name>`
- *     prefix and the other doesn't, the preset tool is renamed to
- *     `<presetName>_<originalName>` (e.g. softDelete's `restore_post`
- *     becomes `softdelete_restore_post` when the user defines
- *     `actions.restore`). The user's tool wins the canonical name because
- *     it's the more-specific intent.
- *
- *  2. **Typed throw** — every other collision (two user actions, two
- *     custom routes, two presets) raises `ArcError('arc.mcp.tool_name_collision')`
- *     naming both sources so the host's stack trace points at the
- *     resource definitions, not the MCP SDK internals.
- *
- * Exported for the testing harness so collision behaviour can be exercised
- * without a full server boot.
- */
-declare function resolveToolCollisions(tools: readonly ToolDefinition[]): ToolDefinition[];
-/** Minimal interface for McpServer — avoids hard SDK type dependency */
-interface McpServerInstance {
-  connect: (transport: unknown) => Promise<void>;
-  registerTool: (name: string, config: Record<string, unknown>, handler: (input: Record<string, unknown>, extra: Record<string, unknown>) => unknown) => unknown;
-  registerPrompt: (name: string, config: Record<string, unknown>, handler: (args: Record<string, unknown>) => unknown) => void;
-  resource: (...args: unknown[]) => void;
-}
-//#endregion
 //#region src/integrations/mcp/crud-tools.d.ts
 /**
  * Default description for a CRUD tool. Enriches list descriptions with the

package/dist/integrations/mcp/index.mjs

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { a as defaultCrudDescription, c as mcpHandlerAdapter, d as toCallToolResult, f as toCallToolSuccess, h as resolveToolCollisions, i as fieldRulesToZod, l as permissionDeniedResult, m as createMcpServer, n as mcpPlugin, o as resolveCrudDescription, p as buildRequestContext, r as resourceToTools, s as invokeController, t as filterResourcesForMcp, u as toCallToolError } from "../../mcpPlugin-KWsezMx7.mjs";
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
+import { a as defaultCrudDescription, c as mcpHandlerAdapter, d as toCallToolResult, f as toCallToolSuccess, h as resolveToolCollisions, i as fieldRulesToZod, l as permissionDeniedResult, m as createMcpServer, n as mcpPlugin, o as resolveCrudDescription, p as buildRequestContext, r as resourceToTools, s as invokeController, t as filterResourcesForMcp, u as toCallToolError } from "../../mcpPlugin-xF3Gw-HW.mjs";
 //#region src/integrations/mcp/defineTool.ts
 /**
 * Define a type-safe MCP tool.

package/dist/integrations/mcp/testing.d.mts

@@ -1,6 +1,26 @@
 
-import { c as McpAuthResult, u as McpPluginOptions } from "../../types-LQFwC37d.mjs";
+import { c as McpAuthResult, u as McpPluginOptions } from "../../types-CWQn9-IC.mjs";
+import { n as McpServerInstance } from "../../createMcpServer-CbDWkZ1T.mjs";
+import { Client } from "@modelcontextprotocol/client";
 //#region src/integrations/mcp/testing.d.ts
+/** An MCP client bound to a live loopback server, plus its teardown. */
+interface ConnectedMcpTestClient {
+  /** The connected SDK client — full `listTools` / `callTool` / `listPrompts` surface. */
+  client: Client;
+  /** Closes the client and the HTTP server. Always await it. */
+  close: () => Promise<void>;
+}
+/**
+ * Serve an already-built `McpServer` on an ephemeral loopback port and connect
+ * a client to it.
+ *
+ * Split out from {@link createTestMcpClient} because arc's own MCP suites build
+ * a server directly and only need the connection — five of them had each grown a
+ * private copy of the same connect helper against the v1 in-memory transport.
+ * One implementation, two entry points: this for a server you built, that for
+ * one built from resources.
+ */
+declare function connectMcpTestClient(server: McpServerInstance | unknown): Promise<ConnectedMcpTestClient>;
 interface TestMcpClientOptions {
   /** MCP plugin options (resources, overrides, etc.) — same as mcpPlugin config */
   pluginOptions?: Pick<McpPluginOptions, "resources" | "overrides" | "expose" | "exclude" | "toolNamePrefix" | "extraTools" | "extraPrompts" | "instructions">;
@@ -50,4 +70,4 @@ interface TestMcpClient {
  */
 declare function createTestMcpClient(options?: TestMcpClientOptions): Promise<TestMcpClient>;
 //#endregion
-export { TestMcpClient, TestMcpClientOptions, createTestMcpClient };
+export { ConnectedMcpTestClient, TestMcpClient, TestMcpClientOptions, connectMcpTestClient, createTestMcpClient };

package/dist/integrations/mcp/testing.mjs

@@ -1,26 +1,58 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { m as createMcpServer, r as resourceToTools, t as filterResourcesForMcp } from "../../mcpPlugin-KWsezMx7.mjs";
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
+import { m as createMcpServer, r as resourceToTools, t as filterResourcesForMcp } from "../../mcpPlugin-xF3Gw-HW.mjs";
 //#region src/integrations/mcp/testing.ts
 /**
-* @classytic/arc/mcp/testing — MCP Test Utilities
+* Serve an already-built `McpServer` on an ephemeral loopback port and connect
+* a client to it.
 *
-* Helpers for testing MCP tool integration without raw JSON-RPC parsing.
-* Uses the MCP SDK's InMemoryTransport for fast, in-process testing.
-*
-* @example
-* ```typescript
-* import { createTestMcpClient } from '@classytic/arc/mcp/testing';
-*
-* const client = await createTestMcpClient({
-*   pluginOptions: { resources: [productResource] },
-*   auth: { userId: 'test-user', organizationId: 'org-1' },
-* });
-*
-* const tools = await client.listTools();
-* const result = await client.callTool('list_products', { limit: 5 });
-* await client.close();
-* ```
+* Split out from {@link createTestMcpClient} because arc's own MCP suites build
+* a server directly and only need the connection — five of them had each grown a
+* private copy of the same connect helper against the v1 in-memory transport.
+* One implementation, two entry points: this for a server you built, that for
+* one built from resources.
 */
+async function connectMcpTestClient(server) {
+	const { randomUUID } = await import("node:crypto");
+	const { createServer } = await import("node:http");
+	const { NodeStreamableHTTPServerTransport } = await import("@modelcontextprotocol/node");
+	const { Client, StreamableHTTPClientTransport } = await import("@modelcontextprotocol/client");
+	const serverTransport = new NodeStreamableHTTPServerTransport({ sessionIdGenerator: () => randomUUID() });
+	await server.connect(serverTransport);
+	const httpServer = createServer((req, res) => {
+		serverTransport.handleRequest(req, res);
+	});
+	await new Promise((resolve, reject) => {
+		httpServer.once("error", reject);
+		httpServer.listen(0, "127.0.0.1", resolve);
+	});
+	const address = httpServer.address();
+	if (address === null || typeof address === "string") {
+		httpServer.close();
+		throw new Error("[arc] MCP test harness: HTTP server did not bind a TCP port");
+	}
+	const client = new Client({
+		name: "test-client",
+		version: "1.0"
+	});
+	await client.connect(new StreamableHTTPClientTransport(new URL(`http://127.0.0.1:${address.port}/`)));
+	return {
+		client,
+		/**
+		* Client first, THEN the socket. Reversed, the client's in-flight request
+		* hangs on a dead server until its own timeout — which reads as a slow test
+		* rather than a teardown bug. `httpServer.close()` only stops NEW
+		* connections, so keep-alive sockets are destroyed explicitly; without that
+		* vitest hangs at end-of-file with no failing assertion.
+		*/
+		async close() {
+			await client.close();
+			httpServer.closeAllConnections?.();
+			await new Promise((resolve, reject) => {
+				httpServer.close((err) => err ? reject(err) : resolve());
+			});
+		}
+	};
+}
 /**
 * Create an in-process MCP test client connected to an Arc MCP server.
 *
@@ -44,8 +76,6 @@ import { m as createMcpServer, r as resourceToTools, t as filterResourcesForMcp
 * ```
 */
 async function createTestMcpClient(options = {}) {
-	const { InMemoryTransport } = await import("@modelcontextprotocol/sdk/inMemory.js");
-	const { Client } = await import("@modelcontextprotocol/sdk/client/index.js");
 	const pluginOpts = {
 		resources: [],
 		...options.pluginOptions
@@ -65,19 +95,13 @@ async function createTestMcpClient(options = {}) {
 	});
 	if (pluginOpts.extraTools) tools.push(...pluginOpts.extraTools);
 	const authRef = { current: auth };
-	const server = await createMcpServer({
+	const { client, close } = await connectMcpTestClient(await createMcpServer({
 		name: serverName,
 		version: "1.0.0",
 		instructions: pluginOpts.instructions,
 		tools,
 		prompts: pluginOpts.extraPrompts
-	}, authRef);
-	const [clientTransport, serverTransport] = InMemoryTransport.createLinkedPair();
-	const client = new Client({
-		name: "test-client",
-		version: "1.0"
-	});
-	await Promise.all([client.connect(clientTransport), server.connect(serverTransport)]);
+	}, authRef));
 	return {
 		async listTools() {
 			return (await client.listTools()).tools.map((t) => ({
@@ -91,10 +115,8 @@ async function createTestMcpClient(options = {}) {
 				arguments: args ?? {}
 			});
 		},
-		async close() {
-			await client.close();
-		}
+		close
 	};
 }
 //#endregion
-export { createTestMcpClient };
+export { connectMcpTestClient, createTestMcpClient };

package/dist/integrations/streamline.mjs

@@ -1,6 +1,6 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { f as createError, i as NotFoundError, r as ForbiddenError } from "../errors-2ExmOgIJ.mjs";
-import { a as promoteStreamTokenToHeader, n as forwardedStreamHeaders } from "../streaming-DkpW1HwJ.mjs";
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
+import { f as createError, i as NotFoundError, r as ForbiddenError } from "../errors-C_YhELhe.mjs";
+import { a as promoteStreamTokenToHeader, n as forwardedStreamHeaders } from "../streaming-dvppnxsr.mjs";
 import fp from "fastify-plugin";
 //#region src/integrations/streamline.ts
 /**

package/dist/integrations/webhooks.d.mts

@@ -1,6 +1,6 @@
 
-import { a as EventTransport, n as DomainEvent } from "../EventTransport-Cx60_s-6.mjs";
-import { n as OutboxModuleOptions, r as createOutboxModule } from "../outbox-module-CQXu_O6o.mjs";
+import { a as EventTransport, n as DomainEvent } from "../EventTransport-CbUKDzZZ.mjs";
+import { n as OutboxModuleOptions, r as createOutboxModule } from "../outbox-module-BHdUnuuK.mjs";
 import { FastifyPluginAsync } from "fastify";
 import { OutboxFailurePolicy, OutboxStore } from "@classytic/primitives/outbox";
 //#region src/integrations/webhooks.d.ts

package/dist/integrations/webhooks.mjs

@@ -1,6 +1,6 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { n as declareRuntimeCapability } from "../runtimeCapabilities-D793Pxci.mjs";
-import { i as exponentialBackoff, t as createOutboxModule } from "../outbox-module-DyIqA5vo.mjs";
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
+import { n as declareRuntimeCapability } from "../runtimeCapabilities-DSA_dH1_.mjs";
+import { i as exponentialBackoff, t as createOutboxModule } from "../outbox-module-dsCyLxXH.mjs";
 import { createHmac, timingSafeEqual } from "node:crypto";
 import fp from "fastify-plugin";
 import { createChildEvent } from "@classytic/primitives/events";

package/dist/integrations/websocket-pushref-redis.d.mts

@@ -9,7 +9,7 @@ import { c as SerializedEntry, i as Principal, n as FencedWriteOutcome, s as Pus
  */
 interface RedisLike {
   get(key: string): Promise<string | null>;
-  set(key: string, value: string, mode?: string, duration?: number): Promise<unknown>;
+  set(key: string, value: string, ...args: unknown[]): Promise<unknown>;
   del(key: string): Promise<number>;
   pexpire(key: string, ttlMs: number): Promise<number>;
   scan(cursor: string | number, matchKw: "MATCH", pattern: string, countKw: "COUNT", count: number): Promise<[string, string[]]>;

package/dist/integrations/websocket-pushref-redis.mjs

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
 //#region src/integrations/websocket-pushref-redis.ts
 /**
 * Lua script for atomic claim. Runs server-side, single-roundtrip.

package/dist/integrations/websocket-redis.mjs

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
 //#region src/integrations/websocket-redis.ts
 /**
 * Redis Pub/Sub adapter for cross-instance WebSocket broadcast.

package/dist/integrations/websocket.mjs

@@ -1,4 +1,5 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
+import { n as declareRuntimeCapability } from "../runtimeCapabilities-DSA_dH1_.mjs";
 import { randomUUID } from "node:crypto";
 import sjson from "secure-json-parse";
 import fp from "fastify-plugin";
@@ -968,7 +969,7 @@ async function handleConnection(ctx, socket, request) {
 			socket.close(4003, "Session expired");
 		}
 	}, options.reauthInterval);
-	socket.on("message", async (raw) => {
+	socket.on("message", (raw) => safeAsync((async () => {
 		if ((typeof raw === "string" ? Buffer.byteLength(raw) : raw.length) > options.maxMessageBytes) {
 			socket.send(JSON.stringify({
 				type: "error",
@@ -1057,12 +1058,19 @@ async function handleConnection(ctx, socket, request) {
 			}
 			default: await options.onMessage?.(client, msg);
 		}
-	});
-	socket.on("close", async () => {
+	})(), fastify.log, "ws.message", { clientId }));
+	socket.on("close", () => safeAsync((async () => {
 		if (heartbeatTimer) clearInterval(heartbeatTimer);
 		if (reauthTimer) clearInterval(reauthTimer);
 		if (rooms.getClient(clientId)?.socket === socket) {
-			await options.onDisconnect?.(client);
+			try {
+				await options.onDisconnect?.(client);
+			} catch (err) {
+				fastify.log.warn({
+					err,
+					clientId
+				}, "[arc] websocket onDisconnect threw");
+			}
 			rooms.removeClient(clientId);
 		}
 		queue.dispose();
@@ -1070,7 +1078,7 @@ async function handleConnection(ctx, socket, request) {
 			pushRef,
 			generation
 		});
-	});
+	})(), fastify.log, "ws.close", { clientId }));
 	socket.on("error", () => {
 		if (heartbeatTimer) clearInterval(heartbeatTimer);
 		if (reauthTimer) clearInterval(reauthTimer);
@@ -1483,6 +1491,16 @@ const websocketPluginImpl = async (fastify, options) => {
 		...options.pushRefStore ? { store: options.pushRefStore } : {}
 	});
 	const rooms = new RoomManager(maxClientsPerRoom, adapter ?? new LocalWebSocketAdapter(), pushRefRegistry, fastify.log);
+	declareRuntimeCapability(fastify, {
+		subsystem: "websocket.adapter",
+		durability: adapter ? "shared" : "memory",
+		detail: "LocalWebSocketAdapter: a broadcast reaches only this replica's sockets"
+	});
+	declareRuntimeCapability(fastify, {
+		subsystem: "websocket.pushref-store",
+		durability: options.pushRefStore ? "shared" : "memory",
+		detail: "MemoryPushRefStore: a client reconnecting through another replica loses its dead queue (RESUME replays nothing)"
+	});
 	if (adapter) await adapter.subscribe((room, message) => {
 		if (room.startsWith("org:")) {
 			const parts = room.split(":");

package/dist/{interface-DYPVscCU.mjs → interface-BIpgzbZl.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
 //#region src/idempotency/stores/interface.ts
 /**
 * Helper to create a result object

package/dist/{jsonBody-DVui0uJl.mjs → jsonBody-Cq9KYl2Z.mjs}

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { t as ArcError } from "./errors-2ExmOgIJ.mjs";
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
+import { t as ArcError } from "./errors-C_YhELhe.mjs";
 import sjson from "secure-json-parse";
 //#region src/utils/jsonBody.ts
 /**

package/dist/{keys-BSuxGS-B.mjs → keys-Cmv4cBRa.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
 //#region src/cache/keys.ts
 /**
 * Cache Key Utilities

package/dist/{loadResources-CNd1DWnK.mjs → loadResources-CblF7xt2.mjs}

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { t as __exportAll } from "./rolldown-runtime-Add2L50I.mjs";
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
+import { t as __exportAll } from "./rolldown-runtime-DjDuyglE.mjs";
 import { arcLog } from "./logger/index.mjs";
 import { readdir } from "node:fs/promises";
 import { dirname, join, resolve } from "node:path";

package/dist/{loadResourcesFromEntry-DNj8cpiY.mjs → loadResourcesFromEntry-99fIMC3p.mjs}

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { t as ResourceRegistry } from "./ResourceRegistry-DPcX--zk.mjs";
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
+import { t as ResourceRegistry } from "./ResourceRegistry-Cu7uTJp9.mjs";
 import { resolve } from "node:path";
 import { pathToFileURL } from "node:url";
 //#region src/cli/utils/loadResourcesFromEntry.ts

package/dist/logger/index.mjs

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
 import { AsyncLocalStorage } from "node:async_hooks";
 //#region src/logger/index.ts
 /**