@classytic/arc 2.40.0 → 2.41.0

package/dist/{queryCachePlugin-2Pp9w-8D.mjs → queryCachePlugin-B5F09bYr.mjs}

@@ -1,8 +1,9 @@
-/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
-import { t as __exportAll } from "./rolldown-runtime-DzE6ikSH.mjs";
-import { i as versionKey, r as tagVersionKey } from "./keys-Ds3ekBiu.mjs";
-import { t as hasEvents } from "./typeGuards-t_CVgRXN.mjs";
-import { t as MemoryCacheStore } from "./memory-CNvjxzB2.mjs";
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
+import { t as __exportAll } from "./rolldown-runtime-DjDuyglE.mjs";
+import { i as versionKey, r as tagVersionKey } from "./keys-Cmv4cBRa.mjs";
+import { n as declareRuntimeCapability } from "./runtimeCapabilities-DSA_dH1_.mjs";
+import { t as hasEvents } from "./typeGuards-D7tHFdH6.mjs";
+import { t as MemoryCacheStore } from "./memory-CpDZ9NPw.mjs";
 import fp from "fastify-plugin";
 //#region src/cache/QueryCache.ts
 var QueryCache = class {
@@ -113,6 +114,11 @@ const queryCachePluginImpl = async (fastify, opts = {}) => {
 	const ownsStore = opts.store === void 0;
 	const store = opts.store ?? new MemoryCacheStore();
 	const queryCache = new QueryCache(store);
+	declareRuntimeCapability(fastify, {
+		subsystem: "cache.query",
+		durability: store instanceof MemoryCacheStore ? "memory" : "shared",
+		detail: "MemoryCacheStore: entries and version bumps are replica-local"
+	});
 	const defaults = {
 		staleTime: opts.defaults?.staleTime ?? 0,
 		gcTime: opts.defaults?.gcTime ?? 60

package/dist/{rateLimitKey-umrS6-vu.mjs → rateLimitKey-CK-EU2L8.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
 //#region src/scope/rateLimitKey.ts
 /**
 * Marks a key generator as SCOPE-AWARE, so `buildRateLimitOpts` can place the rate-limit

package/dist/{realtime-zzoNLDtj.mjs → realtime-FnnD0n3Z.mjs}

@@ -1,13 +1,13 @@
-/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
-import { t as __exportAll } from "./rolldown-runtime-DzE6ikSH.mjs";
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
+import { t as __exportAll } from "./rolldown-runtime-DjDuyglE.mjs";
 import { arcLog } from "./logger/index.mjs";
-import { n as evaluateAndApplyPermission } from "./authorizationDecision-D_LFvMlm.mjs";
-import { n as getUserRoles } from "./userHelpers-DLueLQdQ.mjs";
-import { c as getOrgId } from "./types-CNQyOrLk.mjs";
-import { t as simpleEqualityMatcher } from "./simpleEqualityMatcher-Cldubvul.mjs";
-import { t as applyFieldReadPermissions } from "./fields-fA-Dkou5.mjs";
-import { a as promoteStreamTokenToHeader } from "./streaming-CFwCzEvU.mjs";
-import { t as openSseStream } from "./sseStream-BfZtL5-m.mjs";
+import { n as evaluateAndApplyPermission } from "./authorizationDecision-2YY_Kaj1.mjs";
+import { n as getUserRoles } from "./userHelpers-DDMOZ_Pm.mjs";
+import { c as getOrgId } from "./types-CDy3-zw1.mjs";
+import { t as simpleEqualityMatcher } from "./simpleEqualityMatcher-BiOnyflP.mjs";
+import { t as applyFieldReadPermissions } from "./fields-BTyPLHK0.mjs";
+import { a as promoteStreamTokenToHeader } from "./streaming-dvppnxsr.mjs";
+import { t as openSseStream } from "./sseStream-CN-Lh1Tu.mjs";
 import fp from "fastify-plugin";
 //#region src/plugins/realtime.ts
 var realtime_exports = /* @__PURE__ */ __exportAll({

package/dist/{redis-CduhKsJi.d.mts → redis-Bzi1y3F9.d.mts}

@@ -45,13 +45,21 @@ declare class RedisIdempotencyStore implements IdempotencyStore {
   private scanByPrefix;
   close(): Promise<void>;
 }
-/** Minimal ioredis shape we depend on — keeps this file peer-dep-free. */
+/**
+ * Minimal ioredis shape we depend on — keeps this file peer-dep-free.
+ *
+ * Variadic tails are `unknown[]`, not `(string | number)[]`: ioredis types
+ * every command as overloads whose tails mix literal tokens (`'MATCH'`),
+ * `Buffer` and an optional callback, and a narrower tail matches NONE of
+ * them — a real `Redis` instance then fails to assign (TS2345). Pinned by
+ * `tests/types/ioredis-assignability.test.ts`.
+ */
 interface IoredisLike {
   get(key: string): Promise<string | null>;
   set(...args: unknown[]): Promise<string | null>;
   del(...keys: string[]): Promise<number>;
   exists(...keys: string[]): Promise<number>;
-  scan(cursor: string | number, ...args: (string | number)[]): Promise<[string, string[]]>;
+  scan(cursor: string | number, ...args: unknown[]): Promise<[string, string[]]>;
   eval?(script: string, numKeys: number, ...args: (string | number)[]): Promise<unknown>;
   quit?(): Promise<string>;
   disconnect?(): void;

package/dist/{redis-stream-DSsPyYzd.d.mts → redis-stream-BPKscsTB.d.mts}

@@ -1,13 +1,13 @@
 
-import { a as EventTransport, i as EventLogger, n as DomainEvent, r as EventHandler } from "./EventTransport-BPOQsEer.mjs";
+import { a as EventTransport, i as EventLogger, n as DomainEvent, r as EventHandler } from "./EventTransport-CbUKDzZZ.mjs";
 //#region src/events/transports/redis-stream.d.ts
 interface RedisStreamLike {
   xadd(key: string, id: string, ...fieldValues: string[]): Promise<string | null>;
-  xreadgroup(command: "GROUP", group: string, consumer: string, ...args: (string | number)[]): Promise<Array<[string, Array<[string, string[]]>]> | null>;
-  xack(key: string, group: string, ...ids: string[]): Promise<number>;
-  xgroup(command: string, key: string, group: string, ...args: string[]): Promise<unknown>;
-  xpending(key: string, group: string, ...args: (string | number)[]): Promise<Array<[string, string, number, number]>>;
-  xclaim(key: string, group: string, consumer: string, minIdleTime: number, ...ids: string[]): Promise<Array<[string, string[]]>>;
+  xreadgroup(command: "GROUP", group: string, consumer: string, ...args: unknown[]): Promise<Array<[string, Array<[string, string[] | null]>]> | null>;
+  xack(key: string, group: string, ...ids: unknown[]): Promise<number>;
+  xgroup(command: string, key: string, group: string, ...args: unknown[]): Promise<unknown>;
+  xpending(key: string, group: string, ...args: unknown[]): Promise<unknown[]>;
+  xclaim(key: string, group: string, consumer: string, minIdleTime: number, ...ids: unknown[]): Promise<unknown[]>;
   xlen(key: string): Promise<number>;
   /**
    * Read a range of entries by id. When present, the DLQ writer uses this

package/dist/{registerRoute-_6zHiz0x.mjs → registerRoute-DRsSHPSM.mjs}

@@ -1,9 +1,9 @@
-/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
-import { n as evaluateAndApplyPermission } from "./authorizationDecision-D_LFvMlm.mjs";
-import { f as createError } from "./errors-BHD3L8of.mjs";
-import { u as getRequestScope } from "./types-CNQyOrLk.mjs";
-import { r as deriveHiddenFieldPermissions } from "./fields-fA-Dkou5.mjs";
-import { n as requestContext } from "./requestContext-D4PuGhEw.mjs";
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
+import { n as evaluateAndApplyPermission } from "./authorizationDecision-2YY_Kaj1.mjs";
+import { f as createError } from "./errors-C_YhELhe.mjs";
+import { u as getRequestScope } from "./types-CDy3-zw1.mjs";
+import { r as deriveHiddenFieldPermissions } from "./fields-BTyPLHK0.mjs";
+import { n as requestContext } from "./requestContext-cSVKnYPk.mjs";
 //#region src/core/middlewares/arcDecorator.ts
 /**
 * Build the `arcDecorator` preHandler for a resource.

package/dist/registry/index.d.mts

@@ -1,6 +1,6 @@
 
-import { K as ResolvedTenantPurge, R as RegisterOptions, V as ResourceDefinition, X as CrudRouteKey, k as IntrospectionPluginOptions, p as RegistryEntry, z as ResourceRegistry } from "../index-D3sIPcD4.mjs";
-import "../fastify-augmentation-HncZMmze.mjs";
+import { K as ResolvedTenantPurge, R as RegisterOptions, V as ResourceDefinition, X as CrudRouteKey, k as IntrospectionPluginOptions, p as RegistryEntry, z as ResourceRegistry } from "../index-DHbyPo5j.mjs";
+import "../fastify-augmentation-Cq2nHVaW.mjs";
 import { TenantPurgeProgress, TenantPurgeStrategy } from "@classytic/repo-core/repository";
 import { FastifyPluginAsync } from "fastify";
 //#region src/registry/assertNoTenantData.d.ts

package/dist/registry/index.mjs

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
-import { a as cascadeDeleteForOrganization, c as assertNoTenantData, i as introspectionPlugin_default, n as buildResourceManifestFromRegistry, o as getCascadingResources, r as introspectionPlugin, s as getCascadingResourcesWithMetadata, t as buildResourceManifest } from "../registry-CEpoRpLP.mjs";
-import { t as ResourceRegistry } from "../ResourceRegistry-B9WnuG2Q.mjs";
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
+import { a as cascadeDeleteForOrganization, c as assertNoTenantData, i as introspectionPlugin_default, n as buildResourceManifestFromRegistry, o as getCascadingResources, r as introspectionPlugin, s as getCascadingResourcesWithMetadata, t as buildResourceManifest } from "../registry-D3y8VEJ1.mjs";
+import { t as ResourceRegistry } from "../ResourceRegistry-Cu7uTJp9.mjs";
 export { ResourceRegistry, assertNoTenantData, buildResourceManifest, buildResourceManifestFromRegistry, cascadeDeleteForOrganization, getCascadingResources, getCascadingResourcesWithMetadata, introspectionPlugin_default as introspectionPlugin, introspectionPlugin as introspectionPluginFn };

package/dist/{registry-CEpoRpLP.mjs → registry-D3y8VEJ1.mjs}

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
-import { t as CRUD_OPERATIONS } from "./constants-BQ2FbhPB.mjs";
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
+import { t as CRUD_OPERATIONS } from "./constants-BxLgNFF7.mjs";
 import fp from "fastify-plugin";
 //#region src/registry/assertNoTenantData.ts
 /**

package/dist/{renewingLease-B5Grm0pI.mjs → renewingLease-B3VYh5aU.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
 //#region src/lock/renewingLease.ts
 /**
 * Start renewing an ALREADY-ACQUIRED lease. The caller performed the

package/dist/{replyHelpers-9h-a592u.mjs → replyHelpers-DPHsdw-5.mjs}

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
-import { t as __exportAll } from "./rolldown-runtime-DzE6ikSH.mjs";
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
+import { t as __exportAll } from "./rolldown-runtime-DjDuyglE.mjs";
 import { toCanonicalList } from "@classytic/repo-core/pagination";
 import fp from "fastify-plugin";
 //#region src/plugins/replyHelpers.ts

package/dist/{requestContext-D4PuGhEw.mjs → requestContext-cSVKnYPk.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
 import { AsyncLocalStorage } from "node:async_hooks";
 //#region src/context/requestContext.ts
 /**

package/dist/{rolldown-runtime-DzE6ikSH.mjs → rolldown-runtime-DjDuyglE.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
 import "node:module";
 //#region \0rolldown/runtime.js
 var __defProp = Object.defineProperty;

package/dist/{runtimeCapabilities-Bo7rSKjm.mjs → runtimeCapabilities-DSA_dH1_.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
 //#region src/utils/runtimeCapabilities.ts
 /**
 * `Symbol.for` so declarations from two arc copies in one dependency graph
@@ -6,6 +6,29 @@
 * public `fastify.arc` surface; the audit result is the product, not the list.
 */
 const ARC_RUNTIME_CAPABILITIES = Symbol.for("arc.runtimeCapabilities");
+/**
+* Seed the registry on the ROOT instance. `createApp` calls this the moment the
+* instance exists, before any registration — and that ordering is load-bearing,
+* not tidiness.
+*
+* A Fastify child (`register` with an un-`fp`-wrapped plugin) is
+* `Object.create(parent)`, so a symbol READ reaches the parent's array through
+* the prototype chain but a symbol WRITE always lands on the child. Created
+* lazily, the first declarant therefore decides where the registry lives: seeded
+* first, every child pushes into the root's one array; declared first from
+* inside an encapsulated child, that child gets an own array the root audit
+* never sees — a silent pass from the mechanism whose entire job is to refuse to
+* boot. Arc's own declarants are all `fp`-wrapped and both host `plugins()` and
+* module `plugins()` receive the root, so nothing internal hit this; a host
+* declaring from inside its own `fastify.register(async (child) => …)` would.
+*
+* Idempotent, and never clobbers an existing array — re-seeding an instance that
+* already collected declarations would discard them.
+*/
+function initRuntimeCapabilityRegistry(fastify) {
+	const holder = fastify;
+	if (!Object.hasOwn(holder, ARC_RUNTIME_CAPABILITIES)) holder[ARC_RUNTIME_CAPABILITIES] = holder[ARC_RUNTIME_CAPABILITIES] ?? [];
+}
 function registryOf(fastify) {
 	const holder = fastify;
 	if (!holder[ARC_RUNTIME_CAPABILITIES]) holder[ARC_RUNTIME_CAPABILITIES] = [];
@@ -13,14 +36,17 @@ function registryOf(fastify) {
 }
 /**
 * Declare a runtime capability. Callable from ANY registration context —
-* arc's own plugins, host `plugins()` callbacks, module `plugins` phases —
-* which is the point: the audit sees what the constructor-time guard cannot.
+* arc's own plugins, host `plugins()` callbacks, module `plugins` phases,
+* and encapsulated children of any of them — which is the point: the audit
+* sees what the constructor-time guard cannot.
 */
 function declareRuntimeCapability(fastify, decl) {
 	registryOf(fastify).push(decl);
 }
 /**
-* The boot audit. Runs once at the end of `buildApp`, after every declarant.
+* The boot audit. Runs once at the end of `buildApp`, after every declarant —
+* on the SAME instance `initRuntimeCapabilityRegistry` seeded, which is what
+* makes declarations from encapsulated children visible here.
 *
 * - `runtime: 'distributed'` + `durability: 'memory'` + not `accepted` →
 *   collected and THROWN as one error naming every violator (fixing them one
@@ -46,4 +72,4 @@ function auditRuntimeCapabilities(fastify, runtime) {
 	}
 }
 //#endregion
-export { declareRuntimeCapability as n, auditRuntimeCapabilities as t };
+export { declareRuntimeCapability as n, initRuntimeCapabilityRegistry as r, auditRuntimeCapabilities as t };

package/dist/{schedules-Dm21pqHU.mjs → schedules-BktJb3Y3.mjs}

@@ -1,7 +1,7 @@
-/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
-import { t as __exportAll } from "./rolldown-runtime-DzE6ikSH.mjs";
-import { t as runWorkScope } from "./workScope-CoGpuzDX.mjs";
-import { t as startRenewingLease } from "./renewingLease-B5Grm0pI.mjs";
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
+import { t as __exportAll } from "./rolldown-runtime-DjDuyglE.mjs";
+import { t as runWorkScope } from "./workScope-BhsWde4k.mjs";
+import { t as startRenewingLease } from "./renewingLease-B3VYh5aU.mjs";
 import fp from "fastify-plugin";
 //#region src/plugins/schedules.ts
 var schedules_exports = /* @__PURE__ */ __exportAll({

package/dist/{schemaConverter-DENbixyA.mjs → schemaConverter-BLCSmNbr.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
 import { arcLog } from "./logger/index.mjs";
 //#region src/utils/schemaConverter.ts
 /**

package/dist/{schemaIR-C2qUNzC6.mjs → schemaIR-K16Bb5BX.mjs}

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
-import { o as toJsonSchema } from "./schemaConverter-DENbixyA.mjs";
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
+import { o as toJsonSchema } from "./schemaConverter-BLCSmNbr.mjs";
 //#region src/core/schemaIR.ts
 /**
 * Schema IR — one canonical representation, two adapters.

package/dist/schemas/index.mjs

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
 import { errorContractSchema, errorDetailSchema } from "@classytic/repo-core/errors";
 import { Type, Type as Type$1 } from "typebox";
 //#region src/schemas/index.ts

package/dist/scim/index.mjs

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
-import { t as parseJsonBody } from "../jsonBody-Dx6jH_Nb.mjs";
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
+import { t as parseJsonBody } from "../jsonBody-Cq9KYl2Z.mjs";
 import fp from "fastify-plugin";
 //#region src/scim/errors.ts
 var ScimError = class extends Error {

package/dist/scope/index.mjs

@@ -1,6 +1,6 @@
-/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
-import { C as isService, D as requireUserId, E as requireTeamId, O as scopeFirstCtx, S as isOrgInScope, T as requireOrgId, _ as getUserRoles, a as getDPoPJkt, b as isElevated, c as getOrgId, d as getScopeContext, f as getScopeContextMap, g as getUserId, h as getTenantFromRequest, i as getClientId, l as getOrgRoles, m as getTeamId, n as PUBLIC_SCOPE, o as getMandate, p as getServiceScopes, r as getAncestorOrgIds, s as getOrgContext, t as AUTHENTICATED_SCOPE, u as getRequestScope, v as hasOrgAccess, w as requireClientId, x as isMember, y as isAuthenticated } from "../types-CNQyOrLk.mjs";
-import { n as elevation_default, t as elevationPlugin } from "../elevation-CZy6n50b.mjs";
-import { t as createTenantKeyGenerator } from "../rateLimitKey-umrS6-vu.mjs";
-import { t as resolveOrgFromHeader } from "../scope-CdYxQVxt.mjs";
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
+import { C as isService, D as requireUserId, E as requireTeamId, O as scopeFirstCtx, S as isOrgInScope, T as requireOrgId, _ as getUserRoles, a as getDPoPJkt, b as isElevated, c as getOrgId, d as getScopeContext, f as getScopeContextMap, g as getUserId, h as getTenantFromRequest, i as getClientId, l as getOrgRoles, m as getTeamId, n as PUBLIC_SCOPE, o as getMandate, p as getServiceScopes, r as getAncestorOrgIds, s as getOrgContext, t as AUTHENTICATED_SCOPE, u as getRequestScope, v as hasOrgAccess, w as requireClientId, x as isMember, y as isAuthenticated } from "../types-CDy3-zw1.mjs";
+import { n as elevation_default, t as elevationPlugin } from "../elevation-BF-vhGxY.mjs";
+import { t as createTenantKeyGenerator } from "../rateLimitKey-CK-EU2L8.mjs";
+import { t as resolveOrgFromHeader } from "../scope-jSxuBTFM.mjs";
 export { AUTHENTICATED_SCOPE, PUBLIC_SCOPE, createTenantKeyGenerator, elevation_default as elevationPlugin, elevationPlugin as elevationPluginFn, getAncestorOrgIds, getClientId, getDPoPJkt, getMandate, getOrgContext, getOrgId, getOrgRoles, getRequestScope, getScopeContext, getScopeContextMap, getServiceScopes, getTeamId, getTenantFromRequest, getUserId, getUserRoles, hasOrgAccess, isAuthenticated, isElevated, isMember, isOrgInScope, isService, requireClientId, requireOrgId, requireTeamId, requireUserId, resolveOrgFromHeader, scopeFirstCtx };

package/dist/{scope-CdYxQVxt.mjs → scope-jSxuBTFM.mjs}

@@ -1,7 +1,7 @@
-/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
-import { a as OrgAccessDeniedError, l as UnauthorizedError } from "./errors-BHD3L8of.mjs";
-import { n as requireSingleHeaderValue } from "./headers-BFEEshDS.mjs";
-import { n as getUserRoles } from "./userHelpers-DLueLQdQ.mjs";
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
+import { a as OrgAccessDeniedError, l as UnauthorizedError } from "./errors-C_YhELhe.mjs";
+import { n as requireSingleHeaderValue } from "./headers-CNECDE6q.mjs";
+import { n as getUserRoles } from "./userHelpers-DDMOZ_Pm.mjs";
 //#region src/scope/resolveOrgFromHeader.ts
 /**
 * Create a preHandler hook that resolves org scope from a header.

package/dist/{simpleEqualityMatcher-Cldubvul.mjs → simpleEqualityMatcher-BiOnyflP.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
 //#region src/utils/simpleEqualityMatcher.ts
 /**
 * `simpleEqualityMatcher` — a minimal, dialect-agnostic flat-key equality

package/dist/{sse-DbyXoQun.mjs → sse-CH7Slxc1.mjs}

@@ -1,9 +1,9 @@
-/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
-import { t as __exportAll } from "./rolldown-runtime-DzE6ikSH.mjs";
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
+import { t as __exportAll } from "./rolldown-runtime-DjDuyglE.mjs";
 import { arcLog } from "./logger/index.mjs";
-import { c as getOrgId, n as PUBLIC_SCOPE } from "./types-CNQyOrLk.mjs";
-import { a as promoteStreamTokenToHeader } from "./streaming-CFwCzEvU.mjs";
-import { t as openSseStream } from "./sseStream-BfZtL5-m.mjs";
+import { c as getOrgId, n as PUBLIC_SCOPE } from "./types-CDy3-zw1.mjs";
+import { a as promoteStreamTokenToHeader } from "./streaming-dvppnxsr.mjs";
+import { t as openSseStream } from "./sseStream-CN-Lh1Tu.mjs";
 import fp from "fastify-plugin";
 //#region src/plugins/sse.ts
 var sse_exports = /* @__PURE__ */ __exportAll({

package/dist/{sseStream-BfZtL5-m.mjs → sseStream-CN-Lh1Tu.mjs}

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
-import { n as forwardedStreamHeaders } from "./streaming-CFwCzEvU.mjs";
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
+import { n as forwardedStreamHeaders } from "./streaming-dvppnxsr.mjs";
 //#region src/utils/sseStream.ts
 /**
 * Take over the reply socket and open an SSE stream. Call ONLY after every

package/dist/{store-helpers-BfyOd5i6.mjs → store-helpers-9DX9-1j_.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
 //#region src/utils/store-helpers.ts
 /**
 * Classify an error thrown by `getOne` / `getById` / `update` as a

package/dist/{streaming-CFwCzEvU.mjs → streaming-dvppnxsr.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
 import { Readable } from "node:stream";
 //#region src/utils/streaming.ts
 /**

package/dist/{subscribe-helpers-KgVEcn8L.mjs → subscribe-helpers-AVYPgqTl.mjs}

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
-import { r as createEvent } from "./EventTransport-BUkTwY_x.mjs";
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
+import { r as createEvent } from "./EventTransport-n7qO5Cz3.mjs";
 //#region src/events/defineEvent.ts
 /**
 * Typed event declarations, a registry for introspection, and `.create()` to

package/dist/sync/changelog.mjs

@@ -1,3 +1,3 @@
-/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
 import { CursorExpiredError, MemoryChangeLogStore } from "@classytic/repo-core/sync";
 export { CursorExpiredError, MemoryChangeLogStore };

package/dist/testing/cleanupStoreContract.mjs

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
 import { afterAll, beforeAll, describe, expect, it } from "vitest";
 //#region src/testing/cleanupStoreContract.ts
 /**

package/dist/testing/index.d.mts

@@ -1,10 +1,10 @@
 
 import { i as RequestScope } from "../types-Ddl9OjmE.mjs";
-import { l as PermissionCheck, t as AnyRecord } from "../base-C-NL2fTi.mjs";
-import { V as ResourceDefinition } from "../index-D3sIPcD4.mjs";
-import { n as ArcModuleInput, o as ModuleDisposer, s as ModuleSetupContext } from "../types-BVlowlm7.mjs";
-import "../index-DbMglURO.mjs";
-import { n as preloadResourcesAsync, r as CreateAppOptions, t as preloadResources } from "../preloadResources-DVgPCNcD.mjs";
+import { l as PermissionCheck, t as AnyRecord } from "../base-CxrV1LmG.mjs";
+import { V as ResourceDefinition } from "../index-DHbyPo5j.mjs";
+import { n as ArcModuleInput, o as ModuleDisposer, s as ModuleSetupContext } from "../types-DfVDvkdP.mjs";
+import "../index-CFfLKMH4.mjs";
+import { n as preloadResourcesAsync, r as CreateAppOptions, t as preloadResources } from "../preloadResources-CjS2OfpU.mjs";
 import { StorageContractSetup, StorageContractSetupResult, runStorageContract } from "./storageContract.mjs";
 import { StandardRepo } from "@classytic/repo-core/repository";
 import { FastifyInstance, FastifyServerOptions } from "fastify";

package/dist/testing/index.mjs

@@ -1,12 +1,12 @@
-/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
-import { t as CRUD_OPERATIONS } from "../constants-BQ2FbhPB.mjs";
-import { g as getUserId } from "../types-CNQyOrLk.mjs";
-import { t as BaseController } from "../BaseController-BqJtbiUA.mjs";
-import { t as defineAggregation } from "../defineAggregation-BDA2Tw7v.mjs";
-import { t as defineResource } from "../defineResource-DaIySrQr.mjs";
-import { E as requireOrgRole } from "../permissions-C0GpDsB_.mjs";
-import { a as createApp, n as preloadResourcesAsync, t as preloadResources } from "../preloadResources-BAx5s9EF.mjs";
-import { n as getModuleExports } from "../module-CNcwCKUJ.mjs";
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
+import { t as CRUD_OPERATIONS } from "../constants-BxLgNFF7.mjs";
+import { g as getUserId } from "../types-CDy3-zw1.mjs";
+import { t as BaseController } from "../BaseController-DYJRZ0EJ.mjs";
+import { t as defineAggregation } from "../defineAggregation-UyeurGkp.mjs";
+import { t as defineResource } from "../defineResource-DzGT-2LP.mjs";
+import { E as requireOrgRole } from "../permissions-DiHXy8Ck.mjs";
+import { a as createApp, n as preloadResourcesAsync, t as preloadResources } from "../preloadResources-Bbp4QJ8V.mjs";
+import { n as getModuleExports } from "../module-BkQEesNQ.mjs";
 import { runStorageContract } from "./storageContract.mjs";
 import Fastify from "fastify";
 import { afterAll, describe, expect, it, vi } from "vitest";
@@ -1504,7 +1504,7 @@ function pickDefaultAuth(authMode, callerAuth) {
 	};
 }
 async function createTestApp(options = {}) {
-	const { createApp } = await import("../preloadResources-BAx5s9EF.mjs").then((n) => n.o);
+	const { createApp } = await import("../preloadResources-Bbp4QJ8V.mjs").then((n) => n.o);
 	const { resources = [], db = "in-memory", connectMongoose = false, authMode = "jwt", defaultOrgId, plugins, auth: callerAuth, ...appOptions } = options;
 	let dbHandle;
 	let dbUri;

package/dist/testing/outboxStoreContract.mjs

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
 import { OutboxOwnershipError } from "@classytic/primitives/outbox";
 import { afterAll, beforeAll, beforeEach, describe, expect, it } from "vitest";
 //#region src/testing/outboxStoreContract.ts

package/dist/testing/storageContract.mjs

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
 import { afterAll, beforeAll, describe, expect, it } from "vitest";
 //#region src/testing/storageContract.ts
 /**

package/dist/{transactionContext-46KyUADP.mjs → transactionContext-DCWMI6hV.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
 import { AsyncLocalStorage } from "node:async_hooks";
 //#region src/context/transactionContext.ts
 /**

package/dist/{typeGuards-t_CVgRXN.mjs → typeGuards-D7tHFdH6.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
 //#region src/utils/typeGuards.ts
 /** Check if fastify has the events plugin registered */
 function hasEvents(instance) {

package/dist/types/index.d.mts

@@ -1,6 +1,6 @@
 
 import { i as RequestScope } from "../types-Ddl9OjmE.mjs";
-import { a as UserLike, c as DataPolicy, d as UserBase, i as ObjectId, l as PermissionCheck, n as ArcRequest, o as UserOrganization, r as JWTPayload, s as AuthorizationDecision, t as AnyRecord, u as PermissionContext } from "../base-C-NL2fTi.mjs";
-import { $ as OpenApiSchemas, A as RequestIdOptions, An as WriteVerbKey, At as RouteDefinition, C as RequestContext, D as HealthCheck, Dn as MutationWriteContext, Dt as ActionEntry, E as GracefulShutdownOptions, Et as ActionDefinition, F as FastifyWithDecorators, Fn as IControllerResponse, Ft as AuthPluginOptions, G as OnTenantDeleteConfig, H as CrudController, I as MiddlewareHandler, In as IRequestContext, It as Authenticator, J as PresetHook, K as ResolvedTenantPurge, L as RequestWithExtras, Ln as RawRouteHandler, Lt as AuthenticatorContext, M as EventsDecorator, Mn as ControllerLike, Mt as RouteMethod, N as FastifyRequestExtras, Nn as FastifyHandler, Nt as RateLimitConfig, O as HealthOptions, On as ResourceWrites, Ot as ActionHandlerFn, P as FastifyWithAuth, Pn as IController, Pt as AuthHelpers, Q as MiddlewareConfig, Rn as RouteHandler, Rt as JwtContext, S as QueryParserInterface, T as CrudRouterOptions, Tt as ResourceCacheConfig, U as ResourceConfig, W as ResourcePermissions, X as CrudRouteKey, Y as PresetResult, Z as CrudSchemas, _ as ControllerQueryOptions, a as InferAdapterDoc, at as ResourceExtensions, b as ParsedQuery, c as TypedController, d as PaginationResult, et as RouteSchemaOptions, f as IntrospectionData, g as ArcInternalMetadata, h as ResourceMetadata, i as ValidationResult, it as ResourceHooks, j as ArcDecorator, jn as ControllerHandler, jt as RouteMcpConfig, k as IntrospectionPluginOptions, kn as WriteContext, kt as ActionsMap, l as TypedRepository, m as RegistryStats, n as ConfigError, nt as FieldRule, o as InferDocType, ot as EventDefinition, p as RegistryEntry, q as PresetFunction, r as ValidateOptions, rt as ResourceHookContext, s as InferResourceDoc, t as RouteHandlerMethod, tt as ArcFieldRule, u as TypedResourceConfig, v as LookupOption, w as ServiceContext, x as PopulateOption, xn as BaseControllerOptions, y as OwnershipCheck, zt as TokenPair } from "../index-D3sIPcD4.mjs";
+import { a as UserLike, c as DataPolicy, d as UserBase, i as ObjectId, l as PermissionCheck, n as ArcRequest, o as UserOrganization, r as JWTPayload, s as AuthorizationDecision, t as AnyRecord, u as PermissionContext } from "../base-CxrV1LmG.mjs";
+import { $ as OpenApiSchemas, A as RequestIdOptions, An as WriteVerbKey, At as RouteDefinition, C as RequestContext, D as HealthCheck, Dn as MutationWriteContext, Dt as ActionEntry, E as GracefulShutdownOptions, Et as ActionDefinition, F as FastifyWithDecorators, Fn as IControllerResponse, Ft as AuthPluginOptions, G as OnTenantDeleteConfig, H as CrudController, I as MiddlewareHandler, In as IRequestContext, It as Authenticator, J as PresetHook, K as ResolvedTenantPurge, L as RequestWithExtras, Ln as RawRouteHandler, Lt as AuthenticatorContext, M as EventsDecorator, Mn as ControllerLike, Mt as RouteMethod, N as FastifyRequestExtras, Nn as FastifyHandler, Nt as RateLimitConfig, O as HealthOptions, On as ResourceWrites, Ot as ActionHandlerFn, P as FastifyWithAuth, Pn as IController, Pt as AuthHelpers, Q as MiddlewareConfig, Rn as RouteHandler, Rt as JwtContext, S as QueryParserInterface, T as CrudRouterOptions, Tt as ResourceCacheConfig, U as ResourceConfig, W as ResourcePermissions, X as CrudRouteKey, Y as PresetResult, Z as CrudSchemas, _ as ControllerQueryOptions, a as InferAdapterDoc, at as ResourceExtensions, b as ParsedQuery, c as TypedController, d as PaginationResult, et as RouteSchemaOptions, f as IntrospectionData, g as ArcInternalMetadata, h as ResourceMetadata, i as ValidationResult, it as ResourceHooks, j as ArcDecorator, jn as ControllerHandler, jt as RouteMcpConfig, k as IntrospectionPluginOptions, kn as WriteContext, kt as ActionsMap, l as TypedRepository, m as RegistryStats, n as ConfigError, nt as FieldRule, o as InferDocType, ot as EventDefinition, p as RegistryEntry, q as PresetFunction, r as ValidateOptions, rt as ResourceHookContext, s as InferResourceDoc, t as RouteHandlerMethod, tt as ArcFieldRule, u as TypedResourceConfig, v as LookupOption, w as ServiceContext, x as PopulateOption, xn as BaseControllerOptions, y as OwnershipCheck, zt as TokenPair } from "../index-DHbyPo5j.mjs";
 import { n as ElevationOptions, t as ElevationEvent } from "../elevation-BXCfVcNG.mjs";
 export type { ActionDefinition, ActionEntry, ActionHandlerFn, ActionsMap, AnyRecord, ArcDecorator, ArcFieldRule, ArcInternalMetadata, ArcRequest, AuthHelpers, AuthPluginOptions, Authenticator, AuthenticatorContext, AuthorizationDecision, BaseControllerOptions, ConfigError, ControllerHandler, ControllerLike, ControllerQueryOptions, CrudController, CrudRouteKey, CrudRouterOptions, CrudSchemas, DataPolicy, ElevationEvent, ElevationOptions, EventDefinition, EventsDecorator, FastifyHandler, FastifyRequestExtras, FastifyWithAuth, FastifyWithDecorators, FieldRule, GracefulShutdownOptions, HealthCheck, HealthOptions, IController, IControllerResponse, IRequestContext, InferAdapterDoc, InferDocType, InferResourceDoc, IntrospectionData, IntrospectionPluginOptions, JWTPayload, JwtContext, LookupOption, MiddlewareConfig, MiddlewareHandler, MutationWriteContext, ObjectId, OnTenantDeleteConfig, OpenApiSchemas, OwnershipCheck, PaginationResult, ParsedQuery, PermissionCheck, PermissionContext, PopulateOption, PresetFunction, PresetHook, PresetResult, QueryParserInterface, RateLimitConfig, RawRouteHandler, RegistryEntry, RegistryStats, RequestContext, RequestIdOptions, RequestScope, RequestWithExtras, ResolvedTenantPurge, ResourceCacheConfig, ResourceConfig, ResourceExtensions, ResourceHookContext, ResourceHooks, ResourceMetadata, ResourcePermissions, ResourceWrites, RouteDefinition, RouteHandler, RouteHandlerMethod, RouteMcpConfig, RouteMethod, RouteSchemaOptions, ServiceContext, TokenPair, TypedController, TypedRepository, TypedResourceConfig, UserBase, UserLike, UserOrganization, ValidateOptions, ValidationResult, WriteContext, WriteVerbKey };

package/dist/types/index.mjs

@@ -1,2 +1,2 @@
-/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
 export {};

package/dist/types/storage.mjs

@@ -1,2 +1,2 @@
-/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
 export {};

package/dist/{types-CNQyOrLk.mjs → types-CDy3-zw1.mjs}

@@ -1,7 +1,7 @@
-/*! @classytic/arc v2.40.0 | MIT | https://classytic.com */
-import { l as UnauthorizedError, o as OrgRequiredError } from "./errors-BHD3L8of.mjs";
-import { n as requireSingleHeaderValue } from "./headers-BFEEshDS.mjs";
-import { t as getUserId$1 } from "./userHelpers-DLueLQdQ.mjs";
+/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
+import { l as UnauthorizedError, o as OrgRequiredError } from "./errors-C_YhELhe.mjs";
+import { n as requireSingleHeaderValue } from "./headers-CNECDE6q.mjs";
+import { t as getUserId$1 } from "./userHelpers-DDMOZ_Pm.mjs";
 //#region src/scope/types.ts
 /**
 * Request Scope — The One Standard

package/dist/{types-9rvxn5Ym.d.mts → types-CWQn9-IC.d.mts}

@@ -1,5 +1,5 @@
 
-import { V as ResourceDefinition } from "./index-D3sIPcD4.mjs";
+import { V as ResourceDefinition } from "./index-DHbyPo5j.mjs";
 import { z } from "zod";
 //#region src/integrations/mcp/types.d.ts
 /** Behavioral hints for MCP clients (tool annotations per MCP spec) */

package/dist/{types-BVlowlm7.d.mts → types-DfVDvkdP.d.mts}

@@ -1,5 +1,5 @@
 
-import { n as DomainEvent, r as EventHandler } from "./EventTransport-BPOQsEer.mjs";
+import { n as DomainEvent, r as EventHandler } from "./EventTransport-CbUKDzZZ.mjs";
 import { n as ErrorMapper } from "./errorHandler--4rSMMvq.mjs";
 import { FastifyInstance, FastifyPluginAsync } from "fastify";
 import { LockAdapter } from "@classytic/repo-core/lock";
@@ -90,6 +90,24 @@ interface SchedulesPluginOptions {
    * environments), same pattern as `idempotencyPlugin`.
    */
   enabled?: boolean;
+  /**
+   * States that exactly ONE replica of this deployment arms schedules, so no
+   * lock is needed. Same idiom as `eventPlugin, { singleProcess: true }`.
+   *
+   * Under `runtime: 'distributed'`, schedules with neither `lock` nor this
+   * flag FAIL the boot. Without one of them arc cannot tell a deliberately
+   * single-armed deployment — the `role: 'scheduler'` process pinned to one
+   * replica, which is the recommended topology — from the accidental default,
+   * where every replica in a fleet fires every tick. The accidental case is
+   * duplicate side effects: two invoices, two dunning emails, two charges.
+   * That is a worse failure than the replica-local stores arc already refuses
+   * to boot on, so it is held to the same standard rather than warned about.
+   *
+   * Set it only when the replica count for the process that arms schedules is
+   * genuinely one. It is a claim about your deployment, not a silencer — if
+   * you scale that deployment past one replica, remove it and pass a `lock`.
+   */
+  singleReplica?: boolean;
   /**
    * How long `onClose` waits for in-flight runs before abandoning them.
    * Default: 5000.