@classytic/arc 2.41.0 → 2.43.0

package/dist/{validate-R0G_JrnK.mjs → validate-9yzHC1e2.mjs}

@@ -1,5 +1,6 @@
-/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
-import { t as __exportAll } from "./rolldown-runtime-DjDuyglE.mjs";
+/*! @classytic/arc v2.43.0 | MIT | https://classytic.com */
+import { t as __exportAll } from "./rolldown-runtime-D1w9Y1VJ.mjs";
+import { _ as pathTouchesBlocked } from "./plugin-BccET1tL.mjs";
 //#region src/core/aggregation/normalize.ts
 /**
 * Framework cap on URL-driven aggregation limits when the host opts
@@ -180,11 +181,7 @@ function buildCacheOptions(config) {
 function buildExecutionHints(config) {
 	const hints = {};
 	if (typeof config.timeout === "number" && config.timeout > 0) hints.maxTimeMs = config.timeout;
-	if (config.indexHint && config.indexHint.leadingKeys.length > 0) {
-		const hintObj = {};
-		for (const key of config.indexHint.leadingKeys) hintObj[key] = 1;
-		hints.indexHint = hintObj;
-	}
+	if (config.indexHint && config.indexHint.leadingKeys.length > 0) hints.indexHint = { leadingKeys: [...config.indexHint.leadingKeys] };
 	return Object.keys(hints).length > 0 ? hints : void 0;
 }
 //#endregion
@@ -445,13 +442,8 @@ function validateFieldReferences(input) {
 function assertFieldAllowed(context, ref, input) {
 	const { resourceName, aggregationName, lookupAliases, blockedFields } = input;
 	const dot = ref.indexOf(".");
-	if (dot > 0) {
-		const alias = ref.slice(0, dot);
-		if (lookupAliases.has(alias)) return;
-		if (blockedFields.has(alias)) throw new ArcAggregationConfigError(`Resource "${resourceName}" aggregation "${aggregationName}" references field "${ref}" in ${context} whose root "${alias}" is blocked from aggregation (\`hidden: true\` or \`aggregable: false\` in schemaOptions.fieldRules). Aggregating hidden fields would leak cardinality information.`);
-		return;
-	}
-	if (blockedFields.has(ref)) throw new ArcAggregationConfigError(`Resource "${resourceName}" aggregation "${aggregationName}" references field "${ref}" in ${context}, but the field is blocked from aggregation (\`hidden: true\` or \`aggregable: false\` in schemaOptions.fieldRules). Aggregating hidden fields would leak cardinality information.`);
+	if (dot > 0 && lookupAliases.has(ref.slice(0, dot))) return;
+	if (pathTouchesBlocked(ref, blockedFields, { descendants: true })) throw new ArcAggregationConfigError(`Resource "${resourceName}" aggregation "${aggregationName}" references field "${ref}" in ${context}, but the field is blocked from aggregation (\`hidden: true\` or \`aggregable: false\` in schemaOptions.fieldRules). Aggregating hidden fields would leak cardinality information.`);
 }
 //#endregion
 export { compileAggRequest as i, validateAggregations as n, validate_exports as r, adapterSupportsAggregate as t };

package/dist/{versioning-D6JIK8Tk.d.mts → versioning-Bsb51gGT.d.mts}

@@ -1,5 +1,5 @@
 
-import { n as DomainEvent } from "./EventTransport-CbUKDzZZ.mjs";
+import { n as DomainEvent } from "./EventTransport-CiicKz2Z.mjs";
 import { FastifyPluginAsync, FastifyRequest } from "fastify";
 //#region src/plugins/gracefulShutdown.d.ts
 interface GracefulShutdownOptions {
@@ -46,7 +46,6 @@ interface ShutdownState {
   /** When draining began. */
   readonly since?: Date;
 }
-declare const gracefulShutdownPlugin: FastifyPluginAsync<GracefulShutdownOptions>;
 declare module "fastify" {
   interface FastifyInstance {
     /** Trigger graceful shutdown manually */
@@ -82,7 +81,6 @@ interface CachingOptions {
   /** Custom cache rules per path prefix */
   rules?: CachingRule[];
 }
-declare const cachingPlugin: FastifyPluginAsync<CachingOptions>;
 declare const _default$4: FastifyPluginAsync<CachingOptions>;
 //#endregion
 //#region src/plugins/sse.d.ts
@@ -95,7 +93,22 @@ interface SSEOptions {
   patterns?: string[];
   /** Heartbeat interval in ms (default: 30000) */
   heartbeat?: number;
-  /** Filter events by organizationId from request.scope (default: false) */
+  /**
+   * Deliver an event carrying `meta.organizationId` only to callers in that
+   * organization (default: **true** since 2.41.1).
+   *
+   * It defaulted to `false`, and with `patterns: ['*']` that meant a signed-in
+   * member of one tenant received every other tenant's domain events — CRUD
+   * events carry the full document as `data`. In a framework whose other
+   * defaults fail closed, the stream was the one door left open.
+   *
+   * Flipping it costs single-tenant apps nothing: events with no
+   * `organizationId` are delivered to every caller either way. An elevated
+   * platform admin with NO active organization still sees every tenant — the
+   * same rule `checkOrgScope` applies to elevated reads. Set `false` only for a
+   * stream that is deliberately cross-tenant (an internal ops console), and
+   * put `requireAuth` plus a `filter` in front of it.
+   */
   orgScoped?: boolean;
   /** Custom event filter function */
   filter?: (event: DomainEvent<unknown>, request: FastifyRequest) => boolean;
@@ -107,7 +120,6 @@ interface SSEOptions {
    */
   tokenQueryParam?: string | null;
 }
-declare const ssePlugin: FastifyPluginAsync<SSEOptions>;
 declare const _default$3: FastifyPluginAsync<SSEOptions>;
 //#endregion
 //#region src/plugins/realtime.d.ts
@@ -148,13 +160,21 @@ interface RealtimeOptions {
    */
   maxConnectionMs?: number;
 }
-declare const realtimePlugin: FastifyPluginAsync<RealtimeOptions>;
 declare const _default$2: FastifyPluginAsync<RealtimeOptions>;
 //#endregion
+//#region src/utils/metricSeries.d.ts
+interface MetricSample {
+  labels: Record<string, string>;
+  value: number;
+  suffix?: "_bucket" | "_sum" | "_count";
+}
+//#endregion
 //#region src/plugins/metrics.d.ts
 interface MetricsOptions {
   /** Endpoint path (default: '/_metrics') */
   path?: string;
+  /** Maximum label sets per metric, plus one overflow series (default: 1000). */
+  maxSeries?: number;
   /** Prefix for all metric names (default: 'arc') */
   prefix?: string;
   /** Called after metrics are collected (for OTLP push, etc.) */
@@ -164,10 +184,7 @@ interface MetricEntry {
   name: string;
   type: "counter" | "histogram" | "gauge";
   help: string;
-  values: Array<{
-    labels: Record<string, string>;
-    value: number;
-  }>;
+  values: MetricSample[];
 }
 interface MetricsCollector {
   /** Get all metrics as structured data */
@@ -192,7 +209,6 @@ declare module "fastify" {
     metrics: MetricsCollector;
   }
 }
-declare const metricsPlugin: FastifyPluginAsync<MetricsOptions>;
 declare const _default$1: FastifyPluginAsync<MetricsOptions>;
 //#endregion
 //#region src/plugins/versioning.d.ts
@@ -225,7 +241,6 @@ declare module "fastify" {
     apiVersion: string;
   }
 }
-declare const versioningPlugin: FastifyPluginAsync<VersioningOptions>;
 declare const _default: FastifyPluginAsync<VersioningOptions>;
 //#endregion
-export { gracefulShutdownPlugin as C, _default$5 as S, CachingRule as _, MetricsCollector as a, GracefulShutdownOptions as b, metricsPlugin as c, _default$2 as d, realtimePlugin as f, CachingOptions as g, ssePlugin as h, MetricEntry as i, ChangeOperation as l, _default$3 as m, _default as n, MetricsOptions as o, SSEOptions as p, versioningPlugin as r, _default$1 as s, VersioningOptions as t, RealtimeOptions as u, _default$4 as v, ShutdownState as x, cachingPlugin as y };
+export { _default$5 as _, MetricsOptions as a, RealtimeOptions as c, _default$3 as d, CachingOptions as f, ShutdownState as g, GracefulShutdownOptions as h, MetricsCollector as i, _default$2 as l, _default$4 as m, _default as n, _default$1 as o, CachingRule as p, MetricEntry as r, ChangeOperation as s, VersioningOptions as t, SSEOptions as u };

package/dist/{versioning-DuVWcu-F.mjs → versioning-fhhWHV74.mjs}

@@ -1,6 +1,6 @@
-/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
-import { t as __exportAll } from "./rolldown-runtime-DjDuyglE.mjs";
-import { d as createDomainError } from "./errors-C_YhELhe.mjs";
+/*! @classytic/arc v2.43.0 | MIT | https://classytic.com */
+import { t as __exportAll } from "./rolldown-runtime-D1w9Y1VJ.mjs";
+import { d as createDomainError } from "./errors-CtrywMHP.mjs";
 import fp from "fastify-plugin";
 //#region src/plugins/versioning.ts
 var versioning_exports = /* @__PURE__ */ __exportAll({
@@ -40,4 +40,4 @@ var versioning_default = fp(versioningPlugin, {
 	fastify: "5.x"
 });
 //#endregion
-export { versioning_default as n, versioning_exports as r, versioningPlugin as t };
+export { versioning_exports as n, versioning_default as t };

package/dist/{websocket-BOXVggMf.d.mts → websocket-Cs4awVyD.d.mts}

@@ -1,5 +1,5 @@
 
-import { a as PushRefRegistry, l as EnvelopeWriter, s as PushRefStore } from "./pushref-registry-Dov9l4qE.mjs";
+import { a as PushRefRegistry, l as EnvelopeWriter, s as PushRefStore } from "./pushref-registry-UxCkoA4C.mjs";
 import { FastifyBaseLogger, FastifyPluginAsync } from "fastify";
 //#region src/integrations/websocket/adapter.d.ts
 /**

package/dist/{workScope-BhsWde4k.mjs → workScope-zpPyge4t.mjs}

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.41.0 | MIT | https://classytic.com */
-import { n as requestContext } from "./requestContext-cSVKnYPk.mjs";
+/*! @classytic/arc v2.43.0 | MIT | https://classytic.com */
+import { n as requestContext } from "./requestContext-Dsu9P1bV.mjs";
 //#region src/context/workScope.ts
 /** Enter a scope for `fn`, or run it inside the active one. */
 function runWorkScope(seed, fn) {