@classytic/arc 2.38.0 → 2.41.0

package/dist/{projection-DSfEoooA.mjs → projection-Uvgp-EEj.mjs}

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { c as getOrgId, f as getScopeContextMap, g as getUserId, m as getTeamId, x as isMember } from "./types-BqLyyH0o.mjs";
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
+import { c as getOrgId, f as getScopeContextMap, g as getUserId, m as getTeamId, x as isMember } from "./types-CDy3-zw1.mjs";
 //#region src/scope/projection.ts
 /**
 * Compute the request-scope projection. Returns `undefined` when no

package/dist/{queryCachePlugin-oTsmVyEQ.mjs → queryCachePlugin-B5F09bYr.mjs}

@@ -1,8 +1,9 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { t as __exportAll } from "./rolldown-runtime-Add2L50I.mjs";
-import { i as versionKey, r as tagVersionKey } from "./keys-BSuxGS-B.mjs";
-import { t as hasEvents } from "./typeGuards-DHTnEs5X.mjs";
-import { t as MemoryCacheStore } from "./memory-BiPVaCPg.mjs";
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
+import { t as __exportAll } from "./rolldown-runtime-DjDuyglE.mjs";
+import { i as versionKey, r as tagVersionKey } from "./keys-Cmv4cBRa.mjs";
+import { n as declareRuntimeCapability } from "./runtimeCapabilities-DSA_dH1_.mjs";
+import { t as hasEvents } from "./typeGuards-D7tHFdH6.mjs";
+import { t as MemoryCacheStore } from "./memory-CpDZ9NPw.mjs";
 import fp from "fastify-plugin";
 //#region src/cache/QueryCache.ts
 var QueryCache = class {
@@ -113,6 +114,11 @@ const queryCachePluginImpl = async (fastify, opts = {}) => {
 	const ownsStore = opts.store === void 0;
 	const store = opts.store ?? new MemoryCacheStore();
 	const queryCache = new QueryCache(store);
+	declareRuntimeCapability(fastify, {
+		subsystem: "cache.query",
+		durability: store instanceof MemoryCacheStore ? "memory" : "shared",
+		detail: "MemoryCacheStore: entries and version bumps are replica-local"
+	});
 	const defaults = {
 		staleTime: opts.defaults?.staleTime ?? 0,
 		gcTime: opts.defaults?.gcTime ?? 60

package/dist/rateLimitKey-CK-EU2L8.mjs

@@ -0,0 +1,41 @@
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
+//#region src/scope/rateLimitKey.ts
+/**
+* Marks a key generator as SCOPE-AWARE, so `buildRateLimitOpts` can place the rate-limit
+* hook after authentication instead of before it.
+*
+* Without this, the degradation is invisible: `@fastify/rate-limit` runs at `onRequest`,
+* arc authenticates in a `preHandler`, so a scope-keyed generator sees `PUBLIC_SCOPE`,
+* returns the IP for every caller, and — behind a proxy — buckets an entire deployment
+* together. Nothing throws; the limiter simply answers a question nobody asked.
+*
+* `Symbol.for` so the marker survives two copies of arc in one tree.
+*/
+const SCOPE_AWARE_KEY_GENERATOR = Symbol.for("arc.rateLimit.scopeAwareKeyGenerator");
+/** True when this generator needs a resolved scope (see the symbol's docblock). */
+function isScopeAwareKeyGenerator(fn) {
+	return typeof fn === "function" && fn[SCOPE_AWARE_KEY_GENERATOR] === true;
+}
+function createTenantKeyGenerator(opts) {
+	const generator = opts?.strategy ?? defaultTenantStrategy;
+	/**
+	* Wrapped rather than tagged in place: a host's `strategy` is its own function, and
+	* stamping a symbol onto it would mutate a value it may reuse elsewhere.
+	*/
+	const tagged = (ctx) => generator(ctx);
+	Object.defineProperty(tagged, SCOPE_AWARE_KEY_GENERATOR, {
+		value: true,
+		enumerable: false
+	});
+	return tagged;
+}
+function defaultTenantStrategy(ctx) {
+	const scope = ctx.scope;
+	if (!scope || scope.kind === "public") return ctx.ip;
+	if (scope.kind === "member") return scope.organizationId;
+	if (scope.kind === "service") return scope.organizationId;
+	if (scope.kind === "elevated") return scope.organizationId ?? scope.userId ?? ctx.ip;
+	return scope.userId ?? ctx.ip;
+}
+//#endregion
+export { isScopeAwareKeyGenerator as n, createTenantKeyGenerator as t };

package/dist/{realtime-CPmjjgqd.mjs → realtime-FnnD0n3Z.mjs}

@@ -1,13 +1,13 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { t as __exportAll } from "./rolldown-runtime-Add2L50I.mjs";
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
+import { t as __exportAll } from "./rolldown-runtime-DjDuyglE.mjs";
 import { arcLog } from "./logger/index.mjs";
-import { n as evaluateAndApplyPermission } from "./authorizationDecision-BP8GHtjc.mjs";
-import { n as getUserRoles } from "./userHelpers-CXySQFRg.mjs";
-import { c as getOrgId } from "./types-BqLyyH0o.mjs";
-import { t as simpleEqualityMatcher } from "./simpleEqualityMatcher-B7qVjQBv.mjs";
-import { t as applyFieldReadPermissions } from "./fields-Cha2QCKH.mjs";
-import { a as promoteStreamTokenToHeader } from "./streaming-DkpW1HwJ.mjs";
-import { t as openSseStream } from "./sseStream-BuMNPR6r.mjs";
+import { n as evaluateAndApplyPermission } from "./authorizationDecision-2YY_Kaj1.mjs";
+import { n as getUserRoles } from "./userHelpers-DDMOZ_Pm.mjs";
+import { c as getOrgId } from "./types-CDy3-zw1.mjs";
+import { t as simpleEqualityMatcher } from "./simpleEqualityMatcher-BiOnyflP.mjs";
+import { t as applyFieldReadPermissions } from "./fields-BTyPLHK0.mjs";
+import { a as promoteStreamTokenToHeader } from "./streaming-dvppnxsr.mjs";
+import { t as openSseStream } from "./sseStream-CN-Lh1Tu.mjs";
 import fp from "fastify-plugin";
 //#region src/plugins/realtime.ts
 var realtime_exports = /* @__PURE__ */ __exportAll({

package/dist/{redis-CduhKsJi.d.mts → redis-Bzi1y3F9.d.mts}

@@ -45,13 +45,21 @@ declare class RedisIdempotencyStore implements IdempotencyStore {
   private scanByPrefix;
   close(): Promise<void>;
 }
-/** Minimal ioredis shape we depend on — keeps this file peer-dep-free. */
+/**
+ * Minimal ioredis shape we depend on — keeps this file peer-dep-free.
+ *
+ * Variadic tails are `unknown[]`, not `(string | number)[]`: ioredis types
+ * every command as overloads whose tails mix literal tokens (`'MATCH'`),
+ * `Buffer` and an optional callback, and a narrower tail matches NONE of
+ * them — a real `Redis` instance then fails to assign (TS2345). Pinned by
+ * `tests/types/ioredis-assignability.test.ts`.
+ */
 interface IoredisLike {
   get(key: string): Promise<string | null>;
   set(...args: unknown[]): Promise<string | null>;
   del(...keys: string[]): Promise<number>;
   exists(...keys: string[]): Promise<number>;
-  scan(cursor: string | number, ...args: (string | number)[]): Promise<[string, string[]]>;
+  scan(cursor: string | number, ...args: unknown[]): Promise<[string, string[]]>;
   eval?(script: string, numKeys: number, ...args: (string | number)[]): Promise<unknown>;
   quit?(): Promise<string>;
   disconnect?(): void;

package/dist/{redis-stream-eh0eOtjh.d.mts → redis-stream-BPKscsTB.d.mts}

@@ -1,13 +1,13 @@
 
-import { a as EventTransport, i as EventLogger, n as DomainEvent, r as EventHandler } from "./EventTransport-Cx60_s-6.mjs";
+import { a as EventTransport, i as EventLogger, n as DomainEvent, r as EventHandler } from "./EventTransport-CbUKDzZZ.mjs";
 //#region src/events/transports/redis-stream.d.ts
 interface RedisStreamLike {
   xadd(key: string, id: string, ...fieldValues: string[]): Promise<string | null>;
-  xreadgroup(command: "GROUP", group: string, consumer: string, ...args: (string | number)[]): Promise<Array<[string, Array<[string, string[]]>]> | null>;
-  xack(key: string, group: string, ...ids: string[]): Promise<number>;
-  xgroup(command: string, key: string, group: string, ...args: string[]): Promise<unknown>;
-  xpending(key: string, group: string, ...args: (string | number)[]): Promise<Array<[string, string, number, number]>>;
-  xclaim(key: string, group: string, consumer: string, minIdleTime: number, ...ids: string[]): Promise<Array<[string, string[]]>>;
+  xreadgroup(command: "GROUP", group: string, consumer: string, ...args: unknown[]): Promise<Array<[string, Array<[string, string[] | null]>]> | null>;
+  xack(key: string, group: string, ...ids: unknown[]): Promise<number>;
+  xgroup(command: string, key: string, group: string, ...args: unknown[]): Promise<unknown>;
+  xpending(key: string, group: string, ...args: unknown[]): Promise<unknown[]>;
+  xclaim(key: string, group: string, consumer: string, minIdleTime: number, ...ids: unknown[]): Promise<unknown[]>;
   xlen(key: string): Promise<number>;
   /**
    * Read a range of entries by id. When present, the DLQ writer uses this
@@ -232,8 +232,13 @@ declare class RedisStreamTransport implements EventTransport {
   private processEntries;
   private claimPending;
   private processEntry;
+  /**
+   * The canonical matcher from primitives — the SAME glob rules the memory
+   * transport speaks. A private matcher here once accepted `prefix.*` but not
+   * `prefix:*`, so an `order:*` subscription that worked in-process received
+   * nothing after a move to the stream, with no error.
+   */
   private getMatchingHandlers;
-  private matchesPattern;
   private moveToDlq;
   /**
    * Reconstruct a `DeadLetteredEvent` for a message id. Reads the original

package/dist/{registerRoute-XvcI_3sh.mjs → registerRoute-DRsSHPSM.mjs}

@@ -1,9 +1,9 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { n as evaluateAndApplyPermission } from "./authorizationDecision-BP8GHtjc.mjs";
-import { f as createError } from "./errors-2ExmOgIJ.mjs";
-import { u as getRequestScope } from "./types-BqLyyH0o.mjs";
-import { r as deriveHiddenFieldPermissions } from "./fields-Cha2QCKH.mjs";
-import { n as requestContext } from "./requestContext-DpmntRZy.mjs";
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
+import { n as evaluateAndApplyPermission } from "./authorizationDecision-2YY_Kaj1.mjs";
+import { f as createError } from "./errors-C_YhELhe.mjs";
+import { u as getRequestScope } from "./types-CDy3-zw1.mjs";
+import { r as deriveHiddenFieldPermissions } from "./fields-BTyPLHK0.mjs";
+import { n as requestContext } from "./requestContext-cSVKnYPk.mjs";
 //#region src/core/middlewares/arcDecorator.ts
 /**
 * Build the `arcDecorator` preHandler for a resource.

package/dist/registry/index.d.mts

@@ -1,6 +1,6 @@
 
-import { K as ResolvedTenantPurge, R as RegisterOptions, V as ResourceDefinition, X as CrudRouteKey, k as IntrospectionPluginOptions, p as RegistryEntry, z as ResourceRegistry } from "../index-B78WZom8.mjs";
-import "../fastify-augmentation-jYA2oHyL.mjs";
+import { K as ResolvedTenantPurge, R as RegisterOptions, V as ResourceDefinition, X as CrudRouteKey, k as IntrospectionPluginOptions, p as RegistryEntry, z as ResourceRegistry } from "../index-DHbyPo5j.mjs";
+import "../fastify-augmentation-Cq2nHVaW.mjs";
 import { TenantPurgeProgress, TenantPurgeStrategy } from "@classytic/repo-core/repository";
 import { FastifyPluginAsync } from "fastify";
 //#region src/registry/assertNoTenantData.d.ts

package/dist/registry/index.mjs

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { a as cascadeDeleteForOrganization, c as assertNoTenantData, i as introspectionPlugin_default, n as buildResourceManifestFromRegistry, o as getCascadingResources, r as introspectionPlugin, s as getCascadingResourcesWithMetadata, t as buildResourceManifest } from "../registry-UFEJQN8R.mjs";
-import { t as ResourceRegistry } from "../ResourceRegistry-DPcX--zk.mjs";
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
+import { a as cascadeDeleteForOrganization, c as assertNoTenantData, i as introspectionPlugin_default, n as buildResourceManifestFromRegistry, o as getCascadingResources, r as introspectionPlugin, s as getCascadingResourcesWithMetadata, t as buildResourceManifest } from "../registry-D3y8VEJ1.mjs";
+import { t as ResourceRegistry } from "../ResourceRegistry-Cu7uTJp9.mjs";
 export { ResourceRegistry, assertNoTenantData, buildResourceManifest, buildResourceManifestFromRegistry, cascadeDeleteForOrganization, getCascadingResources, getCascadingResourcesWithMetadata, introspectionPlugin_default as introspectionPlugin, introspectionPlugin as introspectionPluginFn };

package/dist/{registry-UFEJQN8R.mjs → registry-D3y8VEJ1.mjs}

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { t as CRUD_OPERATIONS } from "./constants-BONghE1Y.mjs";
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
+import { t as CRUD_OPERATIONS } from "./constants-BxLgNFF7.mjs";
 import fp from "fastify-plugin";
 //#region src/registry/assertNoTenantData.ts
 /**

package/dist/{renewingLease-DuRGVOMe.mjs → renewingLease-B3VYh5aU.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
 //#region src/lock/renewingLease.ts
 /**
 * Start renewing an ALREADY-ACQUIRED lease. The caller performed the

package/dist/{replyHelpers-BHebarf0.mjs → replyHelpers-DPHsdw-5.mjs}

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { t as __exportAll } from "./rolldown-runtime-Add2L50I.mjs";
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
+import { t as __exportAll } from "./rolldown-runtime-DjDuyglE.mjs";
 import { toCanonicalList } from "@classytic/repo-core/pagination";
 import fp from "fastify-plugin";
 //#region src/plugins/replyHelpers.ts

package/dist/{requestContext-DpmntRZy.mjs → requestContext-cSVKnYPk.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
 import { AsyncLocalStorage } from "node:async_hooks";
 //#region src/context/requestContext.ts
 /**

package/dist/{rolldown-runtime-Add2L50I.mjs → rolldown-runtime-DjDuyglE.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
 import "node:module";
 //#region \0rolldown/runtime.js
 var __defProp = Object.defineProperty;

package/dist/{runtimeCapabilities-D793Pxci.mjs → runtimeCapabilities-DSA_dH1_.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
 //#region src/utils/runtimeCapabilities.ts
 /**
 * `Symbol.for` so declarations from two arc copies in one dependency graph
@@ -6,6 +6,29 @@
 * public `fastify.arc` surface; the audit result is the product, not the list.
 */
 const ARC_RUNTIME_CAPABILITIES = Symbol.for("arc.runtimeCapabilities");
+/**
+* Seed the registry on the ROOT instance. `createApp` calls this the moment the
+* instance exists, before any registration — and that ordering is load-bearing,
+* not tidiness.
+*
+* A Fastify child (`register` with an un-`fp`-wrapped plugin) is
+* `Object.create(parent)`, so a symbol READ reaches the parent's array through
+* the prototype chain but a symbol WRITE always lands on the child. Created
+* lazily, the first declarant therefore decides where the registry lives: seeded
+* first, every child pushes into the root's one array; declared first from
+* inside an encapsulated child, that child gets an own array the root audit
+* never sees — a silent pass from the mechanism whose entire job is to refuse to
+* boot. Arc's own declarants are all `fp`-wrapped and both host `plugins()` and
+* module `plugins()` receive the root, so nothing internal hit this; a host
+* declaring from inside its own `fastify.register(async (child) => …)` would.
+*
+* Idempotent, and never clobbers an existing array — re-seeding an instance that
+* already collected declarations would discard them.
+*/
+function initRuntimeCapabilityRegistry(fastify) {
+	const holder = fastify;
+	if (!Object.hasOwn(holder, ARC_RUNTIME_CAPABILITIES)) holder[ARC_RUNTIME_CAPABILITIES] = holder[ARC_RUNTIME_CAPABILITIES] ?? [];
+}
 function registryOf(fastify) {
 	const holder = fastify;
 	if (!holder[ARC_RUNTIME_CAPABILITIES]) holder[ARC_RUNTIME_CAPABILITIES] = [];
@@ -13,14 +36,17 @@ function registryOf(fastify) {
 }
 /**
 * Declare a runtime capability. Callable from ANY registration context —
-* arc's own plugins, host `plugins()` callbacks, module `plugins` phases —
-* which is the point: the audit sees what the constructor-time guard cannot.
+* arc's own plugins, host `plugins()` callbacks, module `plugins` phases,
+* and encapsulated children of any of them — which is the point: the audit
+* sees what the constructor-time guard cannot.
 */
 function declareRuntimeCapability(fastify, decl) {
 	registryOf(fastify).push(decl);
 }
 /**
-* The boot audit. Runs once at the end of `buildApp`, after every declarant.
+* The boot audit. Runs once at the end of `buildApp`, after every declarant —
+* on the SAME instance `initRuntimeCapabilityRegistry` seeded, which is what
+* makes declarations from encapsulated children visible here.
 *
 * - `runtime: 'distributed'` + `durability: 'memory'` + not `accepted` →
 *   collected and THROWN as one error naming every violator (fixing them one
@@ -46,4 +72,4 @@ function auditRuntimeCapabilities(fastify, runtime) {
 	}
 }
 //#endregion
-export { declareRuntimeCapability as n, auditRuntimeCapabilities as t };
+export { declareRuntimeCapability as n, initRuntimeCapabilityRegistry as r, auditRuntimeCapabilities as t };

package/dist/{schedules-DthM8Qag.mjs → schedules-BktJb3Y3.mjs}

@@ -1,6 +1,7 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { t as __exportAll } from "./rolldown-runtime-Add2L50I.mjs";
-import { t as startRenewingLease } from "./renewingLease-DuRGVOMe.mjs";
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
+import { t as __exportAll } from "./rolldown-runtime-DjDuyglE.mjs";
+import { t as runWorkScope } from "./workScope-BhsWde4k.mjs";
+import { t as startRenewingLease } from "./renewingLease-B3VYh5aU.mjs";
 import fp from "fastify-plugin";
 //#region src/plugins/schedules.ts
 var schedules_exports = /* @__PURE__ */ __exportAll({
@@ -60,7 +61,10 @@ const schedulesPlugin = async (fastify, opts) => {
 			}
 			stat.runs++;
 			stat.lastRunAt = (/* @__PURE__ */ new Date()).toISOString();
-			await s.handler(fastify);
+			await runWorkScope({
+				kind: "job",
+				id: s.name
+			}, () => s.handler(fastify));
 			stat.lastError = null;
 		} catch (err) {
 			stat.failures++;

package/dist/{schemaConverter-Db-MMsH6.mjs → schemaConverter-BLCSmNbr.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
 import { arcLog } from "./logger/index.mjs";
 //#region src/utils/schemaConverter.ts
 /**

package/dist/{schemaIR-CIXShch7.mjs → schemaIR-K16Bb5BX.mjs}

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { o as toJsonSchema } from "./schemaConverter-Db-MMsH6.mjs";
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
+import { o as toJsonSchema } from "./schemaConverter-BLCSmNbr.mjs";
 //#region src/core/schemaIR.ts
 /**
 * Schema IR — one canonical representation, two adapters.

package/dist/schemas/index.mjs

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
 import { errorContractSchema, errorDetailSchema } from "@classytic/repo-core/errors";
 import { Type, Type as Type$1 } from "typebox";
 //#region src/schemas/index.ts

package/dist/scim/index.mjs

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { t as parseJsonBody } from "../jsonBody-DVui0uJl.mjs";
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
+import { t as parseJsonBody } from "../jsonBody-Cq9KYl2Z.mjs";
 import fp from "fastify-plugin";
 //#region src/scim/errors.ts
 var ScimError = class extends Error {

package/dist/scope/index.mjs

@@ -1,6 +1,6 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { C as isService, D as requireUserId, E as requireTeamId, O as scopeFirstCtx, S as isOrgInScope, T as requireOrgId, _ as getUserRoles, a as getDPoPJkt, b as isElevated, c as getOrgId, d as getScopeContext, f as getScopeContextMap, g as getUserId, h as getTenantFromRequest, i as getClientId, l as getOrgRoles, m as getTeamId, n as PUBLIC_SCOPE, o as getMandate, p as getServiceScopes, r as getAncestorOrgIds, s as getOrgContext, t as AUTHENTICATED_SCOPE, u as getRequestScope, v as hasOrgAccess, w as requireClientId, x as isMember, y as isAuthenticated } from "../types-BqLyyH0o.mjs";
-import { n as elevation_default, t as elevationPlugin } from "../elevation-C6woysGC.mjs";
-import { t as createTenantKeyGenerator } from "../rateLimitKey-CewdR-m6.mjs";
-import { t as resolveOrgFromHeader } from "../scope-D03sk17n.mjs";
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
+import { C as isService, D as requireUserId, E as requireTeamId, O as scopeFirstCtx, S as isOrgInScope, T as requireOrgId, _ as getUserRoles, a as getDPoPJkt, b as isElevated, c as getOrgId, d as getScopeContext, f as getScopeContextMap, g as getUserId, h as getTenantFromRequest, i as getClientId, l as getOrgRoles, m as getTeamId, n as PUBLIC_SCOPE, o as getMandate, p as getServiceScopes, r as getAncestorOrgIds, s as getOrgContext, t as AUTHENTICATED_SCOPE, u as getRequestScope, v as hasOrgAccess, w as requireClientId, x as isMember, y as isAuthenticated } from "../types-CDy3-zw1.mjs";
+import { n as elevation_default, t as elevationPlugin } from "../elevation-BF-vhGxY.mjs";
+import { t as createTenantKeyGenerator } from "../rateLimitKey-CK-EU2L8.mjs";
+import { t as resolveOrgFromHeader } from "../scope-jSxuBTFM.mjs";
 export { AUTHENTICATED_SCOPE, PUBLIC_SCOPE, createTenantKeyGenerator, elevation_default as elevationPlugin, elevationPlugin as elevationPluginFn, getAncestorOrgIds, getClientId, getDPoPJkt, getMandate, getOrgContext, getOrgId, getOrgRoles, getRequestScope, getScopeContext, getScopeContextMap, getServiceScopes, getTeamId, getTenantFromRequest, getUserId, getUserRoles, hasOrgAccess, isAuthenticated, isElevated, isMember, isOrgInScope, isService, requireClientId, requireOrgId, requireTeamId, requireUserId, resolveOrgFromHeader, scopeFirstCtx };

package/dist/{scope-D03sk17n.mjs → scope-jSxuBTFM.mjs}

@@ -1,7 +1,7 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { a as OrgAccessDeniedError, l as UnauthorizedError } from "./errors-2ExmOgIJ.mjs";
-import { n as requireSingleHeaderValue } from "./headers-DeXNifVj.mjs";
-import { n as getUserRoles } from "./userHelpers-CXySQFRg.mjs";
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
+import { a as OrgAccessDeniedError, l as UnauthorizedError } from "./errors-C_YhELhe.mjs";
+import { n as requireSingleHeaderValue } from "./headers-CNECDE6q.mjs";
+import { n as getUserRoles } from "./userHelpers-DDMOZ_Pm.mjs";
 //#region src/scope/resolveOrgFromHeader.ts
 /**
 * Create a preHandler hook that resolves org scope from a header.

package/dist/{simpleEqualityMatcher-B7qVjQBv.mjs → simpleEqualityMatcher-BiOnyflP.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
 //#region src/utils/simpleEqualityMatcher.ts
 /**
 * `simpleEqualityMatcher` — a minimal, dialect-agnostic flat-key equality

package/dist/{sse-D4MYqkic.mjs → sse-CH7Slxc1.mjs}

@@ -1,9 +1,9 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { t as __exportAll } from "./rolldown-runtime-Add2L50I.mjs";
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
+import { t as __exportAll } from "./rolldown-runtime-DjDuyglE.mjs";
 import { arcLog } from "./logger/index.mjs";
-import { c as getOrgId, n as PUBLIC_SCOPE } from "./types-BqLyyH0o.mjs";
-import { a as promoteStreamTokenToHeader } from "./streaming-DkpW1HwJ.mjs";
-import { t as openSseStream } from "./sseStream-BuMNPR6r.mjs";
+import { c as getOrgId, n as PUBLIC_SCOPE } from "./types-CDy3-zw1.mjs";
+import { a as promoteStreamTokenToHeader } from "./streaming-dvppnxsr.mjs";
+import { t as openSseStream } from "./sseStream-CN-Lh1Tu.mjs";
 import fp from "fastify-plugin";
 //#region src/plugins/sse.ts
 var sse_exports = /* @__PURE__ */ __exportAll({

package/dist/{sseStream-BuMNPR6r.mjs → sseStream-CN-Lh1Tu.mjs}

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { n as forwardedStreamHeaders } from "./streaming-DkpW1HwJ.mjs";
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
+import { n as forwardedStreamHeaders } from "./streaming-dvppnxsr.mjs";
 //#region src/utils/sseStream.ts
 /**
 * Take over the reply socket and open an SSE stream. Call ONLY after every

package/dist/{store-helpers-CIF4RG8s.mjs → store-helpers-9DX9-1j_.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
 //#region src/utils/store-helpers.ts
 /**
 * Classify an error thrown by `getOne` / `getById` / `update` as a

package/dist/{streaming-DkpW1HwJ.mjs → streaming-dvppnxsr.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
 import { Readable } from "node:stream";
 //#region src/utils/streaming.ts
 /**

package/dist/{subscribe-helpers-CBZOi6pk.mjs → subscribe-helpers-AVYPgqTl.mjs}

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { r as createEvent } from "./EventTransport-Gq7JWbWw.mjs";
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
+import { r as createEvent } from "./EventTransport-n7qO5Cz3.mjs";
 //#region src/events/defineEvent.ts
 /**
 * Typed event declarations, a registry for introspection, and `.create()` to

package/dist/sync/changelog.mjs

@@ -1,3 +1,3 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
 import { CursorExpiredError, MemoryChangeLogStore } from "@classytic/repo-core/sync";
 export { CursorExpiredError, MemoryChangeLogStore };

package/dist/testing/cleanupStoreContract.mjs

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
 import { afterAll, beforeAll, describe, expect, it } from "vitest";
 //#region src/testing/cleanupStoreContract.ts
 /**

package/dist/testing/index.d.mts

@@ -1,10 +1,10 @@
 
 import { i as RequestScope } from "../types-Ddl9OjmE.mjs";
-import { l as PermissionCheck, t as AnyRecord } from "../base-C-NL2fTi.mjs";
-import { V as ResourceDefinition } from "../index-B78WZom8.mjs";
-import { n as ArcModuleInput, o as ModuleDisposer, s as ModuleSetupContext } from "../types-BRU-Kd3t.mjs";
-import "../index-D2uIUSQk.mjs";
-import { n as preloadResourcesAsync, r as CreateAppOptions, t as preloadResources } from "../preloadResources-BbBkNkqK.mjs";
+import { l as PermissionCheck, t as AnyRecord } from "../base-CxrV1LmG.mjs";
+import { V as ResourceDefinition } from "../index-DHbyPo5j.mjs";
+import { n as ArcModuleInput, o as ModuleDisposer, s as ModuleSetupContext } from "../types-DfVDvkdP.mjs";
+import "../index-CFfLKMH4.mjs";
+import { n as preloadResourcesAsync, r as CreateAppOptions, t as preloadResources } from "../preloadResources-CjS2OfpU.mjs";
 import { StorageContractSetup, StorageContractSetupResult, runStorageContract } from "./storageContract.mjs";
 import { StandardRepo } from "@classytic/repo-core/repository";
 import { FastifyInstance, FastifyServerOptions } from "fastify";

package/dist/testing/index.mjs

@@ -1,12 +1,12 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { t as CRUD_OPERATIONS } from "../constants-BONghE1Y.mjs";
-import { g as getUserId } from "../types-BqLyyH0o.mjs";
-import { t as BaseController } from "../BaseController-CYaDvmOB.mjs";
-import { t as defineAggregation } from "../defineAggregation-0KBvqEEC.mjs";
-import { t as defineResource } from "../defineResource-BMdyRelW.mjs";
-import { E as requireOrgRole } from "../permissions-H7Zcb82Z.mjs";
-import { a as createApp, n as preloadResourcesAsync, t as preloadResources } from "../preloadResources-DlhH81py.mjs";
-import { n as getModuleExports } from "../module-BQXHxMEk.mjs";
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
+import { t as CRUD_OPERATIONS } from "../constants-BxLgNFF7.mjs";
+import { g as getUserId } from "../types-CDy3-zw1.mjs";
+import { t as BaseController } from "../BaseController-DYJRZ0EJ.mjs";
+import { t as defineAggregation } from "../defineAggregation-UyeurGkp.mjs";
+import { t as defineResource } from "../defineResource-DzGT-2LP.mjs";
+import { E as requireOrgRole } from "../permissions-DiHXy8Ck.mjs";
+import { a as createApp, n as preloadResourcesAsync, t as preloadResources } from "../preloadResources-Bbp4QJ8V.mjs";
+import { n as getModuleExports } from "../module-BkQEesNQ.mjs";
 import { runStorageContract } from "./storageContract.mjs";
 import Fastify from "fastify";
 import { afterAll, describe, expect, it, vi } from "vitest";
@@ -1504,7 +1504,7 @@ function pickDefaultAuth(authMode, callerAuth) {
 	};
 }
 async function createTestApp(options = {}) {
-	const { createApp } = await import("../preloadResources-DlhH81py.mjs").then((n) => n.o);
+	const { createApp } = await import("../preloadResources-Bbp4QJ8V.mjs").then((n) => n.o);
 	const { resources = [], db = "in-memory", connectMongoose = false, authMode = "jwt", defaultOrgId, plugins, auth: callerAuth, ...appOptions } = options;
 	let dbHandle;
 	let dbUri;

package/dist/testing/outboxStoreContract.mjs

@@ -1,9 +1,20 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
 import { OutboxOwnershipError } from "@classytic/primitives/outbox";
 import { afterAll, beforeAll, beforeEach, describe, expect, it } from "vitest";
 //#region src/testing/outboxStoreContract.ts
 let seq = 0;
-/** A minimal well-formed event. Ids are unique per call. */
+/**
+* A minimal well-formed event. Ids are unique per call.
+*
+* It was NOT well-formed until 2.40: `meta` carried `occurredAt: string`, which
+* is not a field of `EventMeta`, and omitted the REQUIRED `timestamp: Date`.
+* An `as unknown as DomainEvent` made it compile — a total override that hid the
+* mismatch, so every third party running this shipped suite conformance-tested
+* their store against an event shape the transports never produce. `createEvent`
+* in `@classytic/primitives` is the reference: `{ id, timestamp: new Date() }`.
+*
+* No cast now — if `EventMeta` changes, this stops compiling, which is the point.
+*/
 function event(type = "test.event") {
 	seq += 1;
 	return {
@@ -11,7 +22,7 @@ function event(type = "test.event") {
 		payload: { n: seq },
 		meta: {
 			id: `evt-${Date.now()}-${seq}`,
-			occurredAt: (/* @__PURE__ */ new Date()).toISOString()
+			timestamp: /* @__PURE__ */ new Date()
 		}
 	};
 }

package/dist/testing/storageContract.mjs

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
 import { afterAll, beforeAll, describe, expect, it } from "vitest";
 //#region src/testing/storageContract.ts
 /**

package/dist/{transactionContext-DMmvcfdo.mjs → transactionContext-DCWMI6hV.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
 import { AsyncLocalStorage } from "node:async_hooks";
 //#region src/context/transactionContext.ts
 /**

package/dist/{typeGuards-DHTnEs5X.mjs → typeGuards-D7tHFdH6.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
 //#region src/utils/typeGuards.ts
 /** Check if fastify has the events plugin registered */
 function hasEvents(instance) {

package/dist/types/index.d.mts

@@ -1,6 +1,6 @@
 
 import { i as RequestScope } from "../types-Ddl9OjmE.mjs";
-import { a as UserLike, c as DataPolicy, d as UserBase, i as ObjectId, l as PermissionCheck, n as ArcRequest, o as UserOrganization, r as JWTPayload, s as AuthorizationDecision, t as AnyRecord, u as PermissionContext } from "../base-C-NL2fTi.mjs";
-import { $ as OpenApiSchemas, A as RequestIdOptions, An as WriteVerbKey, At as RouteDefinition, C as RequestContext, D as HealthCheck, Dn as MutationWriteContext, Dt as ActionEntry, E as GracefulShutdownOptions, Et as ActionDefinition, F as FastifyWithDecorators, Fn as IControllerResponse, Ft as AuthPluginOptions, G as OnTenantDeleteConfig, H as CrudController, I as MiddlewareHandler, In as IRequestContext, It as Authenticator, J as PresetHook, K as ResolvedTenantPurge, L as RequestWithExtras, Ln as RawRouteHandler, Lt as AuthenticatorContext, M as EventsDecorator, Mn as ControllerLike, Mt as RouteMethod, N as FastifyRequestExtras, Nn as FastifyHandler, Nt as RateLimitConfig, O as HealthOptions, On as ResourceWrites, Ot as ActionHandlerFn, P as FastifyWithAuth, Pn as IController, Pt as AuthHelpers, Q as MiddlewareConfig, Rn as RouteHandler, Rt as JwtContext, S as QueryParserInterface, T as CrudRouterOptions, Tt as ResourceCacheConfig, U as ResourceConfig, W as ResourcePermissions, X as CrudRouteKey, Y as PresetResult, Z as CrudSchemas, _ as ControllerQueryOptions, a as InferAdapterDoc, at as ResourceExtensions, b as ParsedQuery, c as TypedController, d as PaginationResult, et as RouteSchemaOptions, f as IntrospectionData, g as ArcInternalMetadata, h as ResourceMetadata, i as ValidationResult, it as ResourceHooks, j as ArcDecorator, jn as ControllerHandler, jt as RouteMcpConfig, k as IntrospectionPluginOptions, kn as WriteContext, kt as ActionsMap, l as TypedRepository, m as RegistryStats, n as ConfigError, nt as FieldRule, o as InferDocType, ot as EventDefinition, p as RegistryEntry, q as PresetFunction, r as ValidateOptions, rt as ResourceHookContext, s as InferResourceDoc, t as RouteHandlerMethod, tt as ArcFieldRule, u as TypedResourceConfig, v as LookupOption, w as ServiceContext, x as PopulateOption, xn as BaseControllerOptions, y as OwnershipCheck, zt as TokenPair } from "../index-B78WZom8.mjs";
+import { a as UserLike, c as DataPolicy, d as UserBase, i as ObjectId, l as PermissionCheck, n as ArcRequest, o as UserOrganization, r as JWTPayload, s as AuthorizationDecision, t as AnyRecord, u as PermissionContext } from "../base-CxrV1LmG.mjs";
+import { $ as OpenApiSchemas, A as RequestIdOptions, An as WriteVerbKey, At as RouteDefinition, C as RequestContext, D as HealthCheck, Dn as MutationWriteContext, Dt as ActionEntry, E as GracefulShutdownOptions, Et as ActionDefinition, F as FastifyWithDecorators, Fn as IControllerResponse, Ft as AuthPluginOptions, G as OnTenantDeleteConfig, H as CrudController, I as MiddlewareHandler, In as IRequestContext, It as Authenticator, J as PresetHook, K as ResolvedTenantPurge, L as RequestWithExtras, Ln as RawRouteHandler, Lt as AuthenticatorContext, M as EventsDecorator, Mn as ControllerLike, Mt as RouteMethod, N as FastifyRequestExtras, Nn as FastifyHandler, Nt as RateLimitConfig, O as HealthOptions, On as ResourceWrites, Ot as ActionHandlerFn, P as FastifyWithAuth, Pn as IController, Pt as AuthHelpers, Q as MiddlewareConfig, Rn as RouteHandler, Rt as JwtContext, S as QueryParserInterface, T as CrudRouterOptions, Tt as ResourceCacheConfig, U as ResourceConfig, W as ResourcePermissions, X as CrudRouteKey, Y as PresetResult, Z as CrudSchemas, _ as ControllerQueryOptions, a as InferAdapterDoc, at as ResourceExtensions, b as ParsedQuery, c as TypedController, d as PaginationResult, et as RouteSchemaOptions, f as IntrospectionData, g as ArcInternalMetadata, h as ResourceMetadata, i as ValidationResult, it as ResourceHooks, j as ArcDecorator, jn as ControllerHandler, jt as RouteMcpConfig, k as IntrospectionPluginOptions, kn as WriteContext, kt as ActionsMap, l as TypedRepository, m as RegistryStats, n as ConfigError, nt as FieldRule, o as InferDocType, ot as EventDefinition, p as RegistryEntry, q as PresetFunction, r as ValidateOptions, rt as ResourceHookContext, s as InferResourceDoc, t as RouteHandlerMethod, tt as ArcFieldRule, u as TypedResourceConfig, v as LookupOption, w as ServiceContext, x as PopulateOption, xn as BaseControllerOptions, y as OwnershipCheck, zt as TokenPair } from "../index-DHbyPo5j.mjs";
 import { n as ElevationOptions, t as ElevationEvent } from "../elevation-BXCfVcNG.mjs";
 export type { ActionDefinition, ActionEntry, ActionHandlerFn, ActionsMap, AnyRecord, ArcDecorator, ArcFieldRule, ArcInternalMetadata, ArcRequest, AuthHelpers, AuthPluginOptions, Authenticator, AuthenticatorContext, AuthorizationDecision, BaseControllerOptions, ConfigError, ControllerHandler, ControllerLike, ControllerQueryOptions, CrudController, CrudRouteKey, CrudRouterOptions, CrudSchemas, DataPolicy, ElevationEvent, ElevationOptions, EventDefinition, EventsDecorator, FastifyHandler, FastifyRequestExtras, FastifyWithAuth, FastifyWithDecorators, FieldRule, GracefulShutdownOptions, HealthCheck, HealthOptions, IController, IControllerResponse, IRequestContext, InferAdapterDoc, InferDocType, InferResourceDoc, IntrospectionData, IntrospectionPluginOptions, JWTPayload, JwtContext, LookupOption, MiddlewareConfig, MiddlewareHandler, MutationWriteContext, ObjectId, OnTenantDeleteConfig, OpenApiSchemas, OwnershipCheck, PaginationResult, ParsedQuery, PermissionCheck, PermissionContext, PopulateOption, PresetFunction, PresetHook, PresetResult, QueryParserInterface, RateLimitConfig, RawRouteHandler, RegistryEntry, RegistryStats, RequestContext, RequestIdOptions, RequestScope, RequestWithExtras, ResolvedTenantPurge, ResourceCacheConfig, ResourceConfig, ResourceExtensions, ResourceHookContext, ResourceHooks, ResourceMetadata, ResourcePermissions, ResourceWrites, RouteDefinition, RouteHandler, RouteHandlerMethod, RouteMcpConfig, RouteMethod, RouteSchemaOptions, ServiceContext, TokenPair, TypedController, TypedRepository, TypedResourceConfig, UserBase, UserLike, UserOrganization, ValidateOptions, ValidationResult, WriteContext, WriteVerbKey };

package/dist/types/index.mjs

@@ -1,2 +1,2 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
 export {};

package/dist/types/storage.mjs

@@ -1,2 +1,2 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
 export {};

package/dist/{types-BqLyyH0o.mjs → types-CDy3-zw1.mjs}

@@ -1,7 +1,7 @@
-/*! @classytic/arc v2.38.0 | MIT | https://classytic.com */
-import { l as UnauthorizedError, o as OrgRequiredError } from "./errors-2ExmOgIJ.mjs";
-import { n as requireSingleHeaderValue } from "./headers-DeXNifVj.mjs";
-import { t as getUserId$1 } from "./userHelpers-CXySQFRg.mjs";
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
+import { l as UnauthorizedError, o as OrgRequiredError } from "./errors-C_YhELhe.mjs";
+import { n as requireSingleHeaderValue } from "./headers-CNECDE6q.mjs";
+import { t as getUserId$1 } from "./userHelpers-DDMOZ_Pm.mjs";
 //#region src/scope/types.ts
 /**
 * Request Scope — The One Standard