@classytic/arc 2.41.0 → 2.43.0

package/dist/index.d.mts

@@ -1,12 +1,12 @@
 
-import { c as DataPolicy, d as UserBase, l as PermissionCheck, n as ArcRequest, o as UserOrganization, r as JWTPayload, s as AuthorizationDecision, t as AnyRecord, u as PermissionContext } from "./base-CxrV1LmG.mjs";
-import { A as RequestIdOptions, An as WriteVerbKey, B as defineResource, Bt as BaseController, C as RequestContext, Cn as ControllerConstructionOptions, D as HealthCheck, Dn as MutationWriteContext, E as GracefulShutdownOptions, F as FastifyWithDecorators, Fn as IControllerResponse, Ft as AuthPluginOptions, Gt as SlugExt, H as CrudController, Ht as SoftDeleteMixin, In as IRequestContext, Jt as BulkMixin, Kt as SlugMixin, L as RequestWithExtras, Ln as RawRouteHandler, Mn as ControllerLike, N as FastifyRequestExtras, Nt as RateLimitConfig, O as HealthOptions, On as ResourceWrites, P as FastifyWithAuth, Pn as IController, Q as MiddlewareConfig, Rn as RouteHandler, S as QueryParserInterface, Sn as ControllerConfigurableOptions, T as CrudRouterOptions, U as ResourceConfig, Ut as TreeExt, V as ResourceDefinition, Vt as SoftDeleteExt, Wt as TreeMixin, X as CrudRouteKey, Y as PresetResult, Yt as BaseCrudController, Z as CrudSchemas, _n as ArcDeleteResult, a as InferAdapterDoc, bn as ArcUpdateResult, c as TypedController, ct as AggMeasureShorthand, d as PaginationResult, dt as AggregationDateRangeRequirement, et as RouteSchemaOptions, f as IntrospectionData, ft as AggregationIndexHint, g as ArcInternalMetadata, gn as ArcCreateResult, gt as AggregationsMap, h as ResourceMetadata, ht as AggregationRateLimit, i as ValidationResult, k as IntrospectionPluginOptions, kn as WriteContext, l as TypedRepository, lt as AggregationCacheConfig, m as RegistryStats, mt as AggregationMaterializedResult, n as ConfigError, nt as FieldRule, o as InferDocType, ot as EventDefinition, p as RegistryEntry, pt as AggregationMaterializedContext, q as PresetFunction, qt as BulkExt, r as ValidateOptions, s as InferResourceDoc, st as AggMeasureInput, t as RouteHandlerMethod, u as TypedResourceConfig, ut as AggregationConfig, vn as ArcGetResult, w as ServiceContext, wn as ListResult, xn as BaseControllerOptions, y as OwnershipCheck, yn as ArcListResult } from "./index-DHbyPo5j.mjs";
-import { a as applyFieldWritePermissions, i as applyFieldReadPermissions, n as FieldPermissionMap, o as fields, t as FieldPermission } from "./fields-I_EeRWND.mjs";
-import "./fastify-augmentation-Cq2nHVaW.mjs";
-import { A as CRUD_OPERATIONS, B as HookOperation, C as SeamedResourceConfig, E as defineAction, F as DEFAULT_SORT, G as MUTATION_OPERATIONS, H as MAX_FILTER_DEPTH, I as DEFAULT_TENANT_FIELD, J as SYSTEM_FIELDS, K as MutationOperation, L as DEFAULT_UPDATE_METHOD, M as DEFAULT_ID_FIELD, N as DEFAULT_LIMIT, P as DEFAULT_MAX_LIMIT, R as HOOK_OPERATIONS, S as ResourceSeams, U as MAX_REGEX_LENGTH, V as HookPhase, W as MAX_SEARCH_LENGTH, b as defineResourceVariants, c as nativePolicyFilter, h as getControllerScope, j as CrudOperation, k as defineAggregation, q as RESERVED_QUERY_PARAMS, s as NativePolicyFilter, w as mergeResourceConfig, x as AdapterLike, z as HOOK_PHASES } from "./index-D4u76eQW.mjs";
-import { $ as requireAuth, C as requireServiceScope, G as createOrgPermissions, H as DynamicPermissionMatrixConfig, J as allowPublic, K as allOf, S as requireScopeContext, V as DynamicPermissionMatrix, W as createDynamicPermissionMatrix, Y as anyOf, Z as denyAll, _ as publicReadAdminWrite, b as requireOrgMembership, d as authenticated, et as requireOwnership, f as fullPublic, g as publicRead, h as presets_d_exports, it as when, nt as requireRoles, p as ownerWithAdminBypass, u as adminOnly, v as readOnly, w as requireTeamMembership, x as requireOrgRole, y as requireOrgInScope } from "./index-BHdZD8zK.mjs";
-import { a as NotFoundError, d as ValidationError, f as createDomainError, i as ForbiddenError, t as ArcError, u as UnauthorizedError } from "./errors-BGdVwP25.mjs";
+import { c as DataPolicy, d as UserBase, l as PermissionCheck, n as ArcRequest, o as UserOrganization, r as JWTPayload, s as AuthorizationDecision, t as AnyRecord, u as PermissionContext } from "./base-CZyixEQR.mjs";
+import { A as RequestWithExtras, An as WriteContext, Bt as TreeMixin, C as RequestIdOptions, Cn as ControllerConstructionOptions, D as FastifyWithAuth, E as FastifyRequestExtras, F as ResourceDefinition, Fn as IController, G as CrudRouteKey, Gt as BaseCrudController, H as PresetFunction, Ht as SlugMixin, I as CrudController, In as IControllerResponse, It as BaseController, J as MiddlewareConfig, K as CrudSchemas, L as ResourceConfig, Ln as IRequestContext, Lt as SoftDeleteExt, Nn as ControllerLike, O as FastifyWithDecorators, On as MutationWriteContext, P as defineResource, Q as FieldRule, Rn as RawRouteHandler, Rt as SoftDeleteMixin, S as IntrospectionPluginOptions, Sn as ControllerConfigurableOptions, Ut as BulkExt, Vt as SlugExt, W as PresetResult, Wt as BulkMixin, X as RouteSchemaOptions, _ as ServiceContext, _n as ArcDeleteResult, a as IntrospectionData, at as AggregationCacheConfig, b as HealthCheck, bn as ArcUpdateResult, c as ResourceMetadata, ct as AggregationIndexHint, dt as AggregationRateLimit, f as OwnershipCheck, ft as AggregationsMap, g as RequestContext, gn as ArcCreateResult, h as QueryParserInterface, i as PaginationResult, it as AggMeasureShorthand, jn as WriteVerbKey, jt as AuthPluginOptions, kn as ResourceWrites, kt as RateLimitConfig, l as ArcInternalMetadata, lt as AggregationMaterializedContext, n as InferDocType, nt as EventDefinition, o as RegistryEntry, ot as AggregationConfig, r as InferResourceDoc, rt as AggMeasureInput, s as RegistryStats, st as AggregationDateRangeRequirement, t as InferAdapterDoc, ut as AggregationMaterializedResult, v as CrudRouterOptions, vn as ArcGetResult, wn as ListResult, x as HealthOptions, xn as BaseControllerOptions, y as GracefulShutdownOptions, yn as ArcListResult, zn as RouteHandler, zt as TreeExt } from "./index-mqaqZNpe.mjs";
+import { a as applyFieldReadPermissions, n as FieldPermissionMap, o as applyFieldWritePermissions, s as fields, t as FieldPermission } from "./fields-BBSpf8pS.mjs";
+import "./fastify-augmentation-DhUJ-mvo.mjs";
+import { C as AdapterLike, E as mergeResourceConfig, F as DEFAULT_LIMIT, G as MAX_FILTER_DEPTH, H as HOOK_PHASES, I as DEFAULT_MAX_LIMIT, J as MUTATION_OPERATIONS, K as MAX_REGEX_LENGTH, L as DEFAULT_SORT, M as CRUD_OPERATIONS, N as CrudOperation, O as defineAction, P as DEFAULT_ID_FIELD, R as DEFAULT_TENANT_FIELD, S as defineResourceVariants, T as SeamedResourceConfig, U as HookOperation, V as HOOK_OPERATIONS, W as HookPhase, X as RESERVED_QUERY_PARAMS, Y as MutationOperation, Z as SYSTEM_FIELDS, c as nativePolicyFilter, j as defineAggregation, m as getControllerScope, q as MAX_SEARCH_LENGTH, s as NativePolicyFilter, w as ResourceSeams, z as DEFAULT_UPDATE_METHOD } from "./index-CRoPtISf.mjs";
+import { C as requireScopeContext, G as createDynamicPermissionMatrix, H as DynamicPermissionMatrix, J as PublicPolicy, K as createOrgPermissions, Q as anyOf, S as requireOrgRole, T as requireTeamMembership, U as DynamicPermissionMatrixConfig, Y as allOf, Z as allowPublic, _ as publicRead, at as requireRoles, b as requireOrgInScope, d as adminOnly, et as denyAll, f as authenticated, g as presets_d_exports, m as ownerWithAdminBypass, nt as requireAuth, p as fullPublic, q as AllowPublicOptions, rt as requireOwnership, st as when, v as publicReadAdminWrite, w as requireServiceScope, x as requireOrgMembership, y as readOnly } from "./index-Bxriq3so.mjs";
+import { a as NotFoundError, d as ValidationError, f as createDomainError, i as ForbiddenError, t as ArcError, u as UnauthorizedError } from "./errors-JYc9vwqE.mjs";
 //#region src/index.d.ts
 declare const version: string;
 //#endregion
-export { type AdapterLike, type AggMeasureInput, type AggMeasureShorthand, type AggregationCacheConfig, type AggregationConfig, type AggregationDateRangeRequirement, type AggregationIndexHint, type AggregationMaterializedContext, type AggregationMaterializedResult, type AggregationRateLimit, type AggregationsMap, type AnyRecord, type ArcCreateResult, type ArcDeleteResult, ArcError, type ArcGetResult, type ArcInternalMetadata, type ArcListResult, type ArcRequest, type ArcUpdateResult, type AuthPluginOptions, type AuthorizationDecision, BaseController, type BaseControllerOptions, BaseCrudController, type BulkExt, BulkMixin, CRUD_OPERATIONS, type ConfigError, type ControllerConfigurableOptions, type ControllerConstructionOptions, type ControllerLike, type CrudController, type CrudOperation, type CrudRouteKey, type CrudRouterOptions, type CrudSchemas, DEFAULT_ID_FIELD, DEFAULT_LIMIT, DEFAULT_MAX_LIMIT, DEFAULT_SORT, DEFAULT_TENANT_FIELD, DEFAULT_UPDATE_METHOD, type DataPolicy, type DynamicPermissionMatrix, type DynamicPermissionMatrixConfig, type EventDefinition, type FastifyRequestExtras, type FastifyWithAuth, type FastifyWithDecorators, type FieldPermission, type FieldPermissionMap, type FieldRule, ForbiddenError, type GracefulShutdownOptions, HOOK_OPERATIONS, HOOK_PHASES, type HealthCheck, type HealthOptions, type HookOperation, type HookPhase, type IController, type IControllerResponse, type IRequestContext, type InferAdapterDoc, type InferDocType, type InferResourceDoc, type IntrospectionData, type IntrospectionPluginOptions, type JWTPayload, type ListResult, MAX_FILTER_DEPTH, MAX_REGEX_LENGTH, MAX_SEARCH_LENGTH, MUTATION_OPERATIONS, type MiddlewareConfig, type MutationOperation, type MutationWriteContext, type NativePolicyFilter, NotFoundError, type OwnershipCheck, type PaginationResult, type PermissionCheck, type PermissionContext, type PresetFunction, type PresetResult, type QueryParserInterface, RESERVED_QUERY_PARAMS, type RateLimitConfig, type RawRouteHandler, type RegistryEntry, type RegistryStats, type RequestContext, type RequestIdOptions, type RequestWithExtras, type ResourceConfig, ResourceDefinition, type ResourceMetadata, type ResourceSeams, type ResourceWrites, type RouteHandler, type RouteHandlerMethod, type RouteSchemaOptions, SYSTEM_FIELDS, type SeamedResourceConfig, type ServiceContext, type SlugExt, SlugMixin, type SoftDeleteExt, SoftDeleteMixin, type TreeExt, TreeMixin, type TypedController, type TypedRepository, type TypedResourceConfig, UnauthorizedError, type UserBase, type UserOrganization, type ValidateOptions, ValidationError, type ValidationResult, type WriteContext, type WriteVerbKey, adminOnly, allOf, allowPublic, anyOf, applyFieldReadPermissions, applyFieldWritePermissions, authenticated, createDomainError, createDynamicPermissionMatrix, createOrgPermissions, defineAction, defineAggregation, defineResource, defineResourceVariants, denyAll, fields, fullPublic, getControllerScope, mergeResourceConfig, nativePolicyFilter, ownerWithAdminBypass, presets_d_exports as permissions, publicRead, publicReadAdminWrite, readOnly, requireAuth, requireOrgInScope, requireOrgMembership, requireOrgRole, requireOwnership, requireRoles, requireScopeContext, requireServiceScope, requireTeamMembership, version, when };
+export { type AdapterLike, type AggMeasureInput, type AggMeasureShorthand, type AggregationCacheConfig, type AggregationConfig, type AggregationDateRangeRequirement, type AggregationIndexHint, type AggregationMaterializedContext, type AggregationMaterializedResult, type AggregationRateLimit, type AggregationsMap, type AllowPublicOptions, type AnyRecord, type ArcCreateResult, type ArcDeleteResult, ArcError, type ArcGetResult, type ArcInternalMetadata, type ArcListResult, type ArcRequest, type ArcUpdateResult, type AuthPluginOptions, type AuthorizationDecision, BaseController, type BaseControllerOptions, BaseCrudController, type BulkExt, BulkMixin, CRUD_OPERATIONS, type ControllerConfigurableOptions, type ControllerConstructionOptions, type ControllerLike, type CrudController, type CrudOperation, type CrudRouteKey, type CrudRouterOptions, type CrudSchemas, DEFAULT_ID_FIELD, DEFAULT_LIMIT, DEFAULT_MAX_LIMIT, DEFAULT_SORT, DEFAULT_TENANT_FIELD, DEFAULT_UPDATE_METHOD, type DataPolicy, type DynamicPermissionMatrix, type DynamicPermissionMatrixConfig, type EventDefinition, type FastifyRequestExtras, type FastifyWithAuth, type FastifyWithDecorators, type FieldPermission, type FieldPermissionMap, type FieldRule, ForbiddenError, type GracefulShutdownOptions, HOOK_OPERATIONS, HOOK_PHASES, type HealthCheck, type HealthOptions, type HookOperation, type HookPhase, type IController, type IControllerResponse, type IRequestContext, type InferAdapterDoc, type InferDocType, type InferResourceDoc, type IntrospectionData, type IntrospectionPluginOptions, type JWTPayload, type ListResult, MAX_FILTER_DEPTH, MAX_REGEX_LENGTH, MAX_SEARCH_LENGTH, MUTATION_OPERATIONS, type MiddlewareConfig, type MutationOperation, type MutationWriteContext, type NativePolicyFilter, NotFoundError, type OwnershipCheck, type PaginationResult, type PermissionCheck, type PermissionContext, type PresetFunction, type PresetResult, type PublicPolicy, type QueryParserInterface, RESERVED_QUERY_PARAMS, type RateLimitConfig, type RawRouteHandler, type RegistryEntry, type RegistryStats, type RequestContext, type RequestIdOptions, type RequestWithExtras, type ResourceConfig, ResourceDefinition, type ResourceMetadata, type ResourceSeams, type ResourceWrites, type RouteHandler, type RouteSchemaOptions, SYSTEM_FIELDS, type SeamedResourceConfig, type ServiceContext, type SlugExt, SlugMixin, type SoftDeleteExt, SoftDeleteMixin, type TreeExt, TreeMixin, UnauthorizedError, type UserBase, type UserOrganization, ValidationError, type WriteContext, type WriteVerbKey, adminOnly, allOf, allowPublic, anyOf, applyFieldReadPermissions, applyFieldWritePermissions, authenticated, createDomainError, createDynamicPermissionMatrix, createOrgPermissions, defineAction, defineAggregation, defineResource, defineResourceVariants, denyAll, fields, fullPublic, getControllerScope, mergeResourceConfig, nativePolicyFilter, ownerWithAdminBypass, presets_d_exports as permissions, publicRead, publicReadAdminWrite, readOnly, requireAuth, requireOrgInScope, requireOrgMembership, requireOrgRole, requireOwnership, requireRoles, requireScopeContext, requireServiceScope, requireTeamMembership, version, when };

package/dist/index.mjs

@@ -1,14 +1,14 @@
-/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
-import { a as DEFAULT_SORT, c as HOOK_OPERATIONS, d as MAX_REGEX_LENGTH, f as MAX_SEARCH_LENGTH, h as SYSTEM_FIELDS, i as DEFAULT_MAX_LIMIT, l as HOOK_PHASES, m as RESERVED_QUERY_PARAMS, n as DEFAULT_ID_FIELD, o as DEFAULT_TENANT_FIELD, p as MUTATION_OPERATIONS, r as DEFAULT_LIMIT, s as DEFAULT_UPDATE_METHOD, t as CRUD_OPERATIONS, u as MAX_FILTER_DEPTH } from "./constants-BxLgNFF7.mjs";
-import { d as createDomainError, i as NotFoundError, l as UnauthorizedError, r as ForbiddenError, t as ArcError, u as ValidationError } from "./errors-C_YhELhe.mjs";
-import { a as BulkMixin, h as nativePolicyFilter, i as SlugMixin, n as TreeMixin, o as BaseCrudController, r as SoftDeleteMixin, t as BaseController } from "./BaseController-DYJRZ0EJ.mjs";
-import { t as defineAggregation } from "./defineAggregation-UyeurGkp.mjs";
-import { i as fields, n as applyFieldWritePermissions, t as applyFieldReadPermissions } from "./fields-BTyPLHK0.mjs";
-import { l as getControllerScope } from "./actionPermissions-DPwPWPOV.mjs";
-import { a as ResourceDefinition, t as defineResource } from "./defineResource-DzGT-2LP.mjs";
-import { a as mergeResourceConfig, i as defineResourceVariants, o as defineAction } from "./core-iNGqYerO.mjs";
-import { B as requireAuth, C as createOrgPermissions, D as requireScopeContext, E as requireOrgRole, F as allowPublic, G as when, I as anyOf, N as allOf, O as requireServiceScope, R as denyAll, S as createDynamicPermissionMatrix, T as requireOrgMembership, U as requireRoles, V as requireOwnership, a as adminOnly, c as ownerWithAdminBypass, d as publicRead, f as publicReadAdminWrite, k as requireTeamMembership, o as authenticated, p as readOnly, s as fullPublic, u as presets_exports, w as requireOrgInScope } from "./permissions-DiHXy8Ck.mjs";
+/*! @classytic/arc v2.43.0 | MIT | https://classytic.com */
+import { a as DEFAULT_SORT, d as MAX_FILTER_DEPTH, f as MAX_REGEX_LENGTH, g as SYSTEM_FIELDS, h as RESERVED_QUERY_PARAMS, i as DEFAULT_MAX_LIMIT, l as HOOK_OPERATIONS, m as MUTATION_OPERATIONS, n as DEFAULT_ID_FIELD, o as DEFAULT_TENANT_FIELD, p as MAX_SEARCH_LENGTH, r as DEFAULT_LIMIT, s as DEFAULT_UPDATE_METHOD, t as CRUD_OPERATIONS, u as HOOK_PHASES } from "./constants-Cu7Mx7_U.mjs";
+import { d as createDomainError, i as NotFoundError, l as UnauthorizedError, r as ForbiddenError, t as ArcError, u as ValidationError } from "./errors-CtrywMHP.mjs";
+import { S as nativePolicyFilter, c as BaseController, d as SlugMixin, f as BulkMixin, l as TreeMixin, p as BaseCrudController, u as SoftDeleteMixin } from "./plugin-BccET1tL.mjs";
+import { t as defineAggregation } from "./defineAggregation-Bm8RjMbq.mjs";
+import { i as fields, n as applyFieldWritePermissions, t as applyFieldReadPermissions } from "./fields-ToPYpMqS.mjs";
+import { S as getControllerScope } from "./actionPermissions-BotX1YOa.mjs";
+import { a as mergeResourceConfig, i as defineResourceVariants, o as defineAction } from "./core-Cb0LjccA.mjs";
+import { a as ResourceDefinition, t as defineResource } from "./defineResource-DIC7JZGU.mjs";
+import { B as requireAuth, C as createOrgPermissions, D as requireScopeContext, E as requireOrgRole, F as allowPublic, G as when, I as anyOf, N as allOf, O as requireServiceScope, R as denyAll, S as createDynamicPermissionMatrix, T as requireOrgMembership, U as requireRoles, V as requireOwnership, a as adminOnly, c as ownerWithAdminBypass, d as publicRead, f as publicReadAdminWrite, k as requireTeamMembership, o as authenticated, p as readOnly, s as fullPublic, u as presets_exports, w as requireOrgInScope } from "./permissions-Cm0uYHvd.mjs";
 //#region src/index.ts
-const version = "2.41.0";
+const version = "2.43.0";
 //#endregion
 export { ArcError, BaseController, BaseCrudController, BulkMixin, CRUD_OPERATIONS, DEFAULT_ID_FIELD, DEFAULT_LIMIT, DEFAULT_MAX_LIMIT, DEFAULT_SORT, DEFAULT_TENANT_FIELD, DEFAULT_UPDATE_METHOD, ForbiddenError, HOOK_OPERATIONS, HOOK_PHASES, MAX_FILTER_DEPTH, MAX_REGEX_LENGTH, MAX_SEARCH_LENGTH, MUTATION_OPERATIONS, NotFoundError, RESERVED_QUERY_PARAMS, ResourceDefinition, SYSTEM_FIELDS, SlugMixin, SoftDeleteMixin, TreeMixin, UnauthorizedError, ValidationError, adminOnly, allOf, allowPublic, anyOf, applyFieldReadPermissions, applyFieldWritePermissions, authenticated, createDomainError, createDynamicPermissionMatrix, createOrgPermissions, defineAction, defineAggregation, defineResource, defineResourceVariants, denyAll, fields, fullPublic, getControllerScope, mergeResourceConfig, nativePolicyFilter, ownerWithAdminBypass, presets_exports as permissions, publicRead, publicReadAdminWrite, readOnly, requireAuth, requireOrgInScope, requireOrgMembership, requireOrgRole, requireOwnership, requireRoles, requireScopeContext, requireServiceScope, requireTeamMembership, version, when };

package/dist/{init-Y2MlSN9n.mjs → init-B_oUYDXI.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.43.0 | MIT | https://classytic.com */
 import * as fs from "node:fs/promises";
 import * as path from "node:path";
 import { dirname, join } from "node:path";

package/dist/integrations/event-gateway.d.mts

@@ -1,6 +1,6 @@
 
-import { n as DomainEvent } from "../EventTransport-CbUKDzZZ.mjs";
-import { c as WebSocketClient, l as WebSocketMessage } from "../websocket-BOXVggMf.mjs";
+import { n as DomainEvent } from "../EventTransport-CiicKz2Z.mjs";
+import { c as WebSocketClient, l as WebSocketMessage } from "../websocket-Cs4awVyD.mjs";
 import { FastifyPluginAsync, FastifyRequest } from "fastify";
 //#region src/integrations/event-gateway.d.ts
 interface EventGatewayOptions {
@@ -11,7 +11,12 @@ interface EventGatewayOptions {
     userId?: string;
     organizationId?: string;
   } | null>;
-  /** Filter events by org from request.scope (default: false) */
+  /**
+   * SSE tenant filtering — forwarded to `ssePlugin`'s `orgScoped`, whose
+   * default (**true**) applies when this is omitted. Deliberately not
+   * defaulted here: two defaults for one decision is how the stream stayed
+   * cross-tenant after the rest of arc failed closed.
+   */
   orgScoped?: boolean;
   /** Room/subscription authorization policy */
   roomPolicy?: (client: {

package/dist/integrations/event-gateway.mjs

@@ -1,17 +1,17 @@
-/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.43.0 | MIT | https://classytic.com */
 import fp from "fastify-plugin";
 //#region src/integrations/event-gateway.ts
 const eventGatewayPluginImpl = async (fastify, opts = {}) => {
-	const { auth = true, orgScoped = false, roomPolicy, maxMessageBytes, maxSubscriptionsPerClient, authenticate } = opts;
+	const { auth = true, orgScoped, roomPolicy, maxMessageBytes, maxSubscriptionsPerClient, authenticate } = opts;
 	if (auth && !authenticate && !fastify.hasDecorator("authenticate")) throw new Error("[arc-event-gateway] auth is true but fastify.authenticate is not registered. Register an auth plugin first, provide a custom authenticate function, or set auth: false.");
 	if (opts.sse !== false) {
-		const { default: ssePlugin } = await import("../sse-CH7Slxc1.mjs").then((n) => n.r);
+		const { default: ssePlugin } = await import("../sse-CYzQBVFe.mjs").then((n) => n.n);
 		await fastify.register(ssePlugin, {
 			path: opts.sse?.path ?? "/events/stream",
 			requireAuth: auth,
 			patterns: opts.sse?.patterns ?? ["*"],
 			heartbeat: opts.sse?.heartbeat ?? 3e4,
-			orgScoped,
+			...orgScoped !== void 0 ? { orgScoped } : {},
 			filter: opts.sse?.filter
 		});
 	}

package/dist/integrations/index.d.mts

@@ -1,8 +1,8 @@
 
-import { c as WebSocketClient, l as WebSocketMessage, u as WebSocketPluginOptions } from "../websocket-BOXVggMf.mjs";
+import { c as WebSocketClient, l as WebSocketMessage, u as WebSocketPluginOptions } from "../websocket-Cs4awVyD.mjs";
 import { EventGatewayOptions } from "./event-gateway.mjs";
-import { a as JobMeta, c as JobsPluginOptions, i as JobDispatcher, l as QueueStats, n as JobDefinition, r as JobDispatchOptions } from "../index-CbJiYrfv.mjs";
-import { _ as ToolDefinition, c as McpAuthResult, d as McpResourceConfig, f as PromptDefinition, g as ToolContext, h as ToolAnnotations, n as CallToolResult, o as CrudOperation, r as CreateMcpServerConfig, t as BetterAuthHandler, u as McpPluginOptions } from "../types-CWQn9-IC.mjs";
+import { a as JobMeta, c as JobsPluginOptions, i as JobDispatcher, l as QueueStats, n as JobDefinition, r as JobDispatchOptions } from "../index-Chgz3d0i.mjs";
+import { _ as ToolDefinition, c as McpAuthResult, d as McpResourceConfig, f as PromptDefinition, g as ToolContext, h as ToolAnnotations, n as CallToolResult, o as CrudOperation, r as CreateMcpServerConfig, t as BetterAuthHandler, u as McpPluginOptions } from "../types-B4Aq4Sdj.mjs";
 import { StreamlinePluginOptions, WorkflowLike, WorkflowRunLike } from "./streamline.mjs";
 import { WebhookDeliveryRecord, WebhookManager, WebhookPluginOptions, WebhookStore, WebhookSubscription } from "./webhooks.mjs";
 export type { BetterAuthHandler, CallToolResult, CreateMcpServerConfig, CrudOperation, EventGatewayOptions, JobDefinition, JobDispatchOptions, JobDispatcher, JobMeta, JobsPluginOptions, McpAuthResult, McpPluginOptions, McpResourceConfig, PromptDefinition, QueueStats, StreamlinePluginOptions, ToolAnnotations, ToolContext, ToolDefinition, WebSocketClient, WebSocketMessage, WebSocketPluginOptions, WebhookDeliveryRecord, WebhookManager, WebhookPluginOptions, WebhookStore, WebhookSubscription, WorkflowLike, WorkflowRunLike };

package/dist/integrations/index.mjs

@@ -1,2 +1,2 @@
-/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.43.0 | MIT | https://classytic.com */
 export {};

package/dist/integrations/jobs/index.d.mts

@@ -1,3 +1,3 @@
 
-import { a as JobMeta, c as JobsPluginOptions, d as ExecuteTimedHandlerOptions, f as TimedHandlerLogger, i as JobDispatcher, l as QueueStats, n as JobDefinition, o as JobRepeatOptions, p as executeTimedHandler, r as JobDispatchOptions, s as JobStatus, t as jobsPlugin, u as defineJob } from "../../index-CbJiYrfv.mjs";
+import { a as JobMeta, c as JobsPluginOptions, d as ExecuteTimedHandlerOptions, f as TimedHandlerLogger, i as JobDispatcher, l as QueueStats, n as JobDefinition, o as JobRepeatOptions, p as executeTimedHandler, r as JobDispatchOptions, s as JobStatus, t as jobsPlugin, u as defineJob } from "../../index-Chgz3d0i.mjs";
 export { type ExecuteTimedHandlerOptions, type JobDefinition, type JobDispatchOptions, type JobDispatcher, type JobMeta, type JobRepeatOptions, type JobStatus, type JobsPluginOptions, type QueueStats, type TimedHandlerLogger, defineJob, executeTimedHandler, jobsPlugin };

package/dist/integrations/jobs/index.mjs

@@ -1,5 +1,6 @@
-/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
-import { n as evaluateAndApplyPermission } from "../../authorizationDecision-2YY_Kaj1.mjs";
+/*! @classytic/arc v2.43.0 | MIT | https://classytic.com */
+import { n as evaluateAndApplyPermission } from "../../authorizationDecision-DQYrkl5f.mjs";
+import { i as runAdmittedWork, r as registerShutdownParticipant } from "../../shutdown-MqA81z_P.mjs";
 import fp from "fastify-plugin";
 //#region src/integrations/jobs/execution.ts
 async function executeTimedHandler(options) {
@@ -150,6 +151,7 @@ const jobsPluginImpl = async (fastify, options) => {
 	const queues = /* @__PURE__ */ new Map();
 	const dlqQueues = /* @__PURE__ */ new Map();
 	const workers = /* @__PURE__ */ new Map();
+	const activeHandlers = /* @__PURE__ */ new Set();
 	const throttledJobs = /* @__PURE__ */ new Map();
 	const seenNames = /* @__PURE__ */ new Set();
 	for (const job of jobs) {
@@ -255,7 +257,11 @@ const jobsPluginImpl = async (fastify, options) => {
 							timestamp: Date.now(),
 							signal
 						};
-						return job.handler(bullJob.data, meta);
+						const pending = runAdmittedWork(() => job.handler(bullJob.data, meta));
+						activeHandlers.add(pending);
+						return pending.finally(() => {
+							activeHandlers.delete(pending);
+						});
 					}
 				});
 				if (bridgeEvents && fastify.events?.publish) try {
@@ -454,8 +460,15 @@ const jobsPluginImpl = async (fastify, options) => {
 			};
 		});
 	}
-	fastify.addHook("onClose", async () => {
-		await dispatcher.close();
+	registerShutdownParticipant(fastify, {
+		name: "jobs",
+		stop: async () => {
+			await Promise.all(Array.from(workers.values()).map((worker) => worker.pause(true)));
+		},
+		drain: async () => {
+			await dispatcher.close();
+			await Promise.allSettled([...activeHandlers]);
+		}
 	});
 };
 /**

package/dist/integrations/mcp/index.d.mts

@@ -1,10 +1,11 @@
 
 import { i as RequestScope } from "../../types-Ddl9OjmE.mjs";
-import { l as PermissionCheck } from "../../base-CxrV1LmG.mjs";
-import { Fn as IControllerResponse, In as IRequestContext, V as ResourceDefinition, zn as ServerAccessor } from "../../index-DHbyPo5j.mjs";
-import { n as FieldPermissionMap } from "../../fields-I_EeRWND.mjs";
-import { _ as ToolDefinition, a as CrudDescriptionOverride, c as McpAuthResult, d as McpResourceConfig, f as PromptDefinition, g as ToolContext, h as ToolAnnotations, i as CrudDescriptionMeta, l as McpExecutionWiring, m as SessionEntry, n as CallToolResult, o as CrudOperation, p as PromptResult, r as CreateMcpServerConfig, s as McpAuthResolver, t as BetterAuthHandler, u as McpPluginOptions } from "../../types-CWQn9-IC.mjs";
-import { i as resolveToolCollisions, n as McpServerInstance, r as createMcpServer, t as AuthRef } from "../../createMcpServer-CbDWkZ1T.mjs";
+import { l as PermissionCheck } from "../../base-CZyixEQR.mjs";
+import { Bn as ServerAccessor, F as ResourceDefinition, In as IControllerResponse, Ln as IRequestContext } from "../../index-mqaqZNpe.mjs";
+import { n as FieldPermissionMap } from "../../fields-BBSpf8pS.mjs";
+import "../../resourceRateLimit-Wf6d6FL9.mjs";
+import { _ as ToolDefinition, a as CrudDescriptionOverride, c as McpAuthResult, d as McpResourceConfig, f as PromptDefinition, g as ToolContext, h as ToolAnnotations, i as CrudDescriptionMeta, l as McpExecutionWiring, m as SessionEntry, n as CallToolResult, o as CrudOperation, p as PromptResult, r as CreateMcpServerConfig, s as McpAuthResolver, t as BetterAuthHandler, u as McpPluginOptions, v as ToolInputSchema } from "../../types-B4Aq4Sdj.mjs";
+import { i as resolveToolCollisions, n as McpServerInstance, r as createMcpServer, t as AuthRef } from "../../createMcpServer-C9cxS8zt.mjs";
 import { ErrorContract } from "@classytic/repo-core/errors";
 import { FastifyPluginAsync } from "fastify";
 import { z } from "zod";
@@ -97,6 +98,60 @@ interface CreateMcpAuthFromBetterAuthApiKeyOptions {
  */
 declare function createMcpAuthFromBetterAuthApiKey(auth: BetterAuthHandler, options?: CreateMcpAuthFromBetterAuthApiKeyOptions): McpAuthResolver;
 //#endregion
+//#region src/integrations/mcp/buildRequestContext.d.ts
+type McpOperation = "list" | "get" | "create" | "update" | "delete" | "action";
+/**
+ * Optional context extras — the pieces of `IRequestContext` that HTTP's
+ * `createRequestContext` assembles from Fastify decorators and the MCP
+ * synthetic path historically DROPPED. Without them, controller code that
+ * reads `metadata.arc.hooks` (the whole hook system — including the
+ * arcCorePlugin after-hook that publishes `<resource>.<op>d` events) or
+ * `ctx.server.events` silently no-ops on MCP calls: agents could mutate
+ * records without hooks firing, events publishing, realtime feeds updating,
+ * or webhooks dispatching. Thread these through `invokeController` /
+ * `resourceToTools({ wiring })` to restore full HTTP ↔ MCP parity.
+ */
+interface McpContextExtras {
+  tenantMiddlewares?: readonly unknown[];
+  /**
+   * Resource wiring — becomes `metadata.arc`, the same frozen shape
+   * `buildArcDecorator` stamps on HTTP requests (`ArcRouteMeta`).
+   */
+  arc?: {
+    readonly resourceName: string;
+    readonly schemaOptions?: unknown;
+    readonly permissions?: unknown;
+    readonly hooks?: unknown;
+    readonly events?: unknown;
+    readonly fields?: unknown;
+    readonly idField?: string;
+  };
+  /** Server accessor — `ctx.server.events/audit/log`, mirroring HTTP. */
+  server?: ServerAccessor;
+}
+/**
+ * Build an IRequestContext from MCP tool input and session auth.
+ *
+ * | Operation | params     | query                | body                |
+ * |-----------|------------|----------------------|---------------------|
+ * | list      | {}         | all input fields     | undefined           |
+ * | get       | { id }     | {}                   | undefined           |
+ * | create    | {}         | {}                   | all input fields    |
+ * | update    | { id }     | {}                   | input minus id      |
+ * | delete    | { id }     | {}                   | undefined           |
+ *
+ * **scopeOverride** — when a permission check (e.g. `requireApiKey()`) returns
+ * an `AuthorizationDecision.scope`, the MCP tool handler must install it on the
+ * request context the same way CRUD/action routes do. This parameter follows the exact
+ * same non-downgrade rule as `applyAuthorizationDecision`: it overrides only when
+ * the session-derived scope is `public` (i.e. MCP called with `auth: false`).
+ * An authenticated session scope is never overwritten.
+ */
+declare function buildRequestContext(input: Record<string, unknown>, auth: McpAuthResult | null, operation: McpOperation, policyFilters?: Record<string, unknown>, scopeOverride?: RequestScope, extras?: McpContextExtras): IRequestContext;
+//#endregion
+//#region src/integrations/mcp/http-parity.d.ts
+type ToolAdmission = (session: McpAuthResult | null, scope?: RequestScope) => boolean | Promise<boolean>;
+//#endregion
 //#region src/integrations/mcp/crud-tools.d.ts
 /**
  * Default description for a CRUD tool. Enriches list descriptions with the
@@ -265,56 +320,6 @@ declare function requireOrgId(orgId: string): McpGuard;
  */
 declare function customGuard(check: (ctx: ToolContext) => boolean | Promise<boolean>, errorMessage: string): McpGuard;
 //#endregion
-//#region src/integrations/mcp/buildRequestContext.d.ts
-type McpOperation = "list" | "get" | "create" | "update" | "delete" | "action";
-/**
- * Optional context extras — the pieces of `IRequestContext` that HTTP's
- * `createRequestContext` assembles from Fastify decorators and the MCP
- * synthetic path historically DROPPED. Without them, controller code that
- * reads `metadata.arc.hooks` (the whole hook system — including the
- * arcCorePlugin after-hook that publishes `<resource>.<op>d` events) or
- * `ctx.server.events` silently no-ops on MCP calls: agents could mutate
- * records without hooks firing, events publishing, realtime feeds updating,
- * or webhooks dispatching. Thread these through `invokeController` /
- * `resourceToTools({ wiring })` to restore full HTTP ↔ MCP parity.
- */
-interface McpContextExtras {
-  /**
-   * Resource wiring — becomes `metadata.arc`, the same frozen shape
-   * `buildArcDecorator` stamps on HTTP requests (`ArcRouteMeta`).
-   */
-  arc?: {
-    readonly resourceName: string;
-    readonly schemaOptions?: unknown;
-    readonly permissions?: unknown;
-    readonly hooks?: unknown;
-    readonly events?: unknown;
-    readonly fields?: unknown;
-    readonly idField?: string;
-  };
-  /** Server accessor — `ctx.server.events/audit/log`, mirroring HTTP. */
-  server?: ServerAccessor;
-}
-/**
- * Build an IRequestContext from MCP tool input and session auth.
- *
- * | Operation | params     | query                | body                |
- * |-----------|------------|----------------------|---------------------|
- * | list      | {}         | all input fields     | undefined           |
- * | get       | { id }     | {}                   | undefined           |
- * | create    | {}         | {}                   | all input fields    |
- * | update    | { id }     | {}                   | input minus id      |
- * | delete    | { id }     | {}                   | undefined           |
- *
- * **scopeOverride** — when a permission check (e.g. `requireApiKey()`) returns
- * an `AuthorizationDecision.scope`, the MCP tool handler must install it on the
- * request context the same way CRUD/action routes do. This parameter follows the exact
- * same non-downgrade rule as `applyAuthorizationDecision`: it overrides only when
- * the session-derived scope is `public` (i.e. MCP called with `auth: false`).
- * An authenticated session scope is never overwritten.
- */
-declare function buildRequestContext(input: Record<string, unknown>, auth: McpAuthResult | null, operation: McpOperation, policyFilters?: Record<string, unknown>, scopeOverride?: RequestScope, extras?: McpContextExtras): IRequestContext;
-//#endregion
 //#region src/integrations/mcp/invokeController.d.ts
 /**
  * Options threaded into {@link invokeController}. `session` is required so
@@ -322,8 +327,10 @@ declare function buildRequestContext(input: Record<string, unknown>, auth: McpAu
  * identity; everything else is optional and falls back to sensible defaults.
  */
 interface InvokeControllerOptions {
+  readonly allow?: ToolAdmission;
   /** Resolved identity for this invocation — `null` runs as public scope. */
   readonly session: McpAuthResult | null;
+  readonly tenantMiddlewares?: readonly unknown[];
   /** Resource name surfaced into the permission context (`PermissionContext.resource`). */
   readonly resourceName: string;
   /**
@@ -499,11 +506,10 @@ interface ResourceFilterInputs {
   readonly exclude?: readonly string[];
 }
 /**
- * Resolve `expose` / `include` / `exclude` into the filtered resource list
- * `mcpPlugin` should surface. Three mutually exclusive intents:
+ * Resolve `expose` / `exclude` into the filtered resource list `mcpPlugin`
+ * should surface. Two mutually exclusive intents:
  *
  *  - `expose`: default-deny allowlist (preferred — new resources auto-deny).
- *  - `include`: legacy alias for `expose`, kept for back-compat.
  *  - `exclude`: default-allow opt-out (drift-prone — new resources auto-leak).
  *
  * Conflicting combinations throw with an actionable message so a host that
@@ -594,6 +600,13 @@ interface ResourceToToolsConfig extends McpResourceConfig {
  */
 declare function resourceToTools(resource: ResourceDefinition, config?: ResourceToToolsConfig): ToolDefinition[];
 //#endregion
+//#region src/integrations/mcp/route-input-schema.d.ts
+/**
+ * The field shape a tool advertises — the flat record itself, or a whole object
+ * schema's `.shape`. `undefined` for a union, which has no single shape.
+ */
+declare function toolInputShape(schema: ToolInputSchema | undefined): Record<string, z.ZodTypeAny> | undefined;
+//#endregion
 //#region src/integrations/mcp/tool-helpers.d.ts
 /**
  * Convert a controller response envelope into an MCP `CallToolResult`.
@@ -646,4 +659,4 @@ declare function permissionDeniedResult(args: {
   session: McpAuthResult | null;
 }): CallToolResult;
 //#endregion
-export { type AuthRef, type BetterAuthHandler, type BuildMcpToolsFromBridgesOptions, type CallToolResult, type CreateMcpAuthFromBetterAuthApiKeyOptions, type CreateMcpServerConfig, type CrudDescriptionMeta, type CrudDescriptionOverride, type CrudOperation, type DefinePromptConfig, type DefineToolConfig, type DispatchOptions, type FieldRuleEntry, type FieldRulesToZodOptions, type InvokeControllerOptions, type McpAuthResolver, type McpAuthResult, type McpBridge, type McpGuard, type McpOperation, type McpPluginOptions, type McpResourceConfig, type McpServerInstance, type PromptDefinition, type PromptResult, type RealtimeToolCall, type RealtimeToolResponse, type ResourceToToolsConfig, type ToolAnnotations, type ToolContext, type ToolDefinition, bridgeToMcp, buildMcpToolsFromBridges, buildRequestContext, createMcpAuthFromBetterAuthApiKey, createMcpServer, customGuard, defaultCrudDescription, definePrompt, defineTool, denied, dispatchRealtimeToolCall, fieldRulesToZod, filterResourcesForMcp, getOrgId, getUserId, guard, hasOrg, invokeController, isAuthenticated, isOrg, mcpHandlerAdapter, mcpPlugin, permissionDeniedResult, requireAuth, requireOrg, requireOrgId, requireRole, resolveCrudDescription, resolveToolCollisions, resourceToTools, toCallToolError, toCallToolResult, toCallToolSuccess };
+export { type AuthRef, type BetterAuthHandler, type BuildMcpToolsFromBridgesOptions, type CallToolResult, type CreateMcpAuthFromBetterAuthApiKeyOptions, type CreateMcpServerConfig, type CrudDescriptionMeta, type CrudDescriptionOverride, type CrudOperation, type DefinePromptConfig, type DefineToolConfig, type DispatchOptions, type FieldRuleEntry, type FieldRulesToZodOptions, type InvokeControllerOptions, type McpAuthResolver, type McpAuthResult, type McpBridge, type McpContextExtras, type McpGuard, type McpOperation, type McpPluginOptions, type McpResourceConfig, type McpServerInstance, type PromptDefinition, type PromptResult, type RealtimeToolCall, type RealtimeToolResponse, type ResourceToToolsConfig, type ToolAnnotations, type ToolContext, type ToolDefinition, type ToolInputSchema, bridgeToMcp, buildMcpToolsFromBridges, buildRequestContext, createMcpAuthFromBetterAuthApiKey, createMcpServer, customGuard, defaultCrudDescription, definePrompt, defineTool, denied, dispatchRealtimeToolCall, fieldRulesToZod, filterResourcesForMcp, getOrgId, getUserId, guard, hasOrg, invokeController, isAuthenticated, isOrg, mcpHandlerAdapter, mcpPlugin, permissionDeniedResult, requireAuth, requireOrg, requireOrgId, requireRole, resolveCrudDescription, resolveToolCollisions, resourceToTools, toCallToolError, toCallToolResult, toCallToolSuccess, toolInputShape };

package/dist/integrations/mcp/index.mjs

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
-import { a as defaultCrudDescription, c as mcpHandlerAdapter, d as toCallToolResult, f as toCallToolSuccess, h as resolveToolCollisions, i as fieldRulesToZod, l as permissionDeniedResult, m as createMcpServer, n as mcpPlugin, o as resolveCrudDescription, p as buildRequestContext, r as resourceToTools, s as invokeController, t as filterResourcesForMcp, u as toCallToolError } from "../../mcpPlugin-xF3Gw-HW.mjs";
+/*! @classytic/arc v2.43.0 | MIT | https://classytic.com */
+import { _ as resolveToolCollisions, a as toolInputShape, c as resolveCrudDescription, d as permissionDeniedResult, f as toCallToolError, g as createMcpServer, h as buildRequestContext, i as isZodTypeSchema, l as invokeController, m as toCallToolSuccess, n as mcpPlugin, o as fieldRulesToZod, p as toCallToolResult, r as resourceToTools, s as defaultCrudDescription, t as filterResourcesForMcp, u as mcpHandlerAdapter } from "../../mcpPlugin-C08HalN5.mjs";
 //#region src/integrations/mcp/defineTool.ts
 /**
 * Define a type-safe MCP tool.
@@ -277,6 +277,9 @@ function definePrompt(name, config) {
 }
 //#endregion
 //#region src/integrations/mcp/realtimeBridge.ts
+function isPlainArgs(value) {
+	return value !== null && typeof value === "object" && !Array.isArray(value);
+}
 /**
 * Dispatch a batch of tool calls through the host's MCP tool registry.
 *
@@ -329,7 +332,19 @@ async function dispatchOne(def, call, ctx) {
 			response: { error: "arguments_json is not valid JSON" }
 		};
 	}
-	if (def.inputSchema) {
+	if (isZodTypeSchema(def.inputSchema)) {
+		const result = def.inputSchema.safeParse(parsedArgs);
+		if (!result.success) return {
+			id: call.id,
+			name: call.name,
+			isError: true,
+			response: {
+				error: "argument validation failed",
+				fields: result.error.issues.map((i) => `${i.path.join(".") || "input"}: ${i.message}`)
+			}
+		};
+		parsedArgs = isPlainArgs(result.data) ? result.data : {};
+	} else if (def.inputSchema) {
 		const fieldErrors = [];
 		const validated = {};
 		for (const [key, schema] of Object.entries(def.inputSchema)) {
@@ -376,4 +391,4 @@ function normalizeResult(result) {
 	return {};
 }
 //#endregion
-export { bridgeToMcp, buildMcpToolsFromBridges, buildRequestContext, createMcpAuthFromBetterAuthApiKey, createMcpServer, customGuard, defaultCrudDescription, definePrompt, defineTool, denied, dispatchRealtimeToolCall, fieldRulesToZod, filterResourcesForMcp, getOrgId, getUserId, guard, hasOrg, invokeController, isAuthenticated, isOrg, mcpHandlerAdapter, mcpPlugin, permissionDeniedResult, requireAuth, requireOrg, requireOrgId, requireRole, resolveCrudDescription, resolveToolCollisions, resourceToTools, toCallToolError, toCallToolResult, toCallToolSuccess };
+export { bridgeToMcp, buildMcpToolsFromBridges, buildRequestContext, createMcpAuthFromBetterAuthApiKey, createMcpServer, customGuard, defaultCrudDescription, definePrompt, defineTool, denied, dispatchRealtimeToolCall, fieldRulesToZod, filterResourcesForMcp, getOrgId, getUserId, guard, hasOrg, invokeController, isAuthenticated, isOrg, mcpHandlerAdapter, mcpPlugin, permissionDeniedResult, requireAuth, requireOrg, requireOrgId, requireRole, resolveCrudDescription, resolveToolCollisions, resourceToTools, toCallToolError, toCallToolResult, toCallToolSuccess, toolInputShape };

package/dist/integrations/mcp/testing.d.mts

@@ -1,6 +1,6 @@
 
-import { c as McpAuthResult, u as McpPluginOptions } from "../../types-CWQn9-IC.mjs";
-import { n as McpServerInstance } from "../../createMcpServer-CbDWkZ1T.mjs";
+import { c as McpAuthResult, u as McpPluginOptions } from "../../types-B4Aq4Sdj.mjs";
+import { n as McpServerInstance } from "../../createMcpServer-C9cxS8zt.mjs";
 import { Client } from "@modelcontextprotocol/client";
 //#region src/integrations/mcp/testing.d.ts
 /** An MCP client bound to a live loopback server, plus its teardown. */

package/dist/integrations/mcp/testing.mjs

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
-import { m as createMcpServer, r as resourceToTools, t as filterResourcesForMcp } from "../../mcpPlugin-xF3Gw-HW.mjs";
+/*! @classytic/arc v2.43.0 | MIT | https://classytic.com */
+import { g as createMcpServer, r as resourceToTools, t as filterResourcesForMcp } from "../../mcpPlugin-C08HalN5.mjs";
 //#region src/integrations/mcp/testing.ts
 /**
 * Serve an already-built `McpServer` on an ephemeral loopback port and connect