@classytic/arc 2.41.1 → 2.44.0

package/dist/index.d.mts

@@ -1,12 +1,12 @@
 
-import { c as DataPolicy, d as UserBase, l as PermissionCheck, n as ArcRequest, o as UserOrganization, r as JWTPayload, s as AuthorizationDecision, t as AnyRecord, u as PermissionContext } from "./base-CxrV1LmG.mjs";
-import { A as RequestIdOptions, An as WriteVerbKey, B as defineResource, Bt as BaseController, C as RequestContext, Cn as ControllerConstructionOptions, D as HealthCheck, Dn as MutationWriteContext, E as GracefulShutdownOptions, F as FastifyWithDecorators, Fn as IControllerResponse, Ft as AuthPluginOptions, Gt as SlugExt, H as CrudController, Ht as SoftDeleteMixin, In as IRequestContext, Jt as BulkMixin, Kt as SlugMixin, L as RequestWithExtras, Ln as RawRouteHandler, Mn as ControllerLike, N as FastifyRequestExtras, Nt as RateLimitConfig, O as HealthOptions, On as ResourceWrites, P as FastifyWithAuth, Pn as IController, Q as MiddlewareConfig, Rn as RouteHandler, S as QueryParserInterface, Sn as ControllerConfigurableOptions, T as CrudRouterOptions, U as ResourceConfig, Ut as TreeExt, V as ResourceDefinition, Vt as SoftDeleteExt, Wt as TreeMixin, X as CrudRouteKey, Y as PresetResult, Yt as BaseCrudController, Z as CrudSchemas, _n as ArcDeleteResult, a as InferAdapterDoc, bn as ArcUpdateResult, c as TypedController, ct as AggMeasureShorthand, d as PaginationResult, dt as AggregationDateRangeRequirement, et as RouteSchemaOptions, f as IntrospectionData, ft as AggregationIndexHint, g as ArcInternalMetadata, gn as ArcCreateResult, gt as AggregationsMap, h as ResourceMetadata, ht as AggregationRateLimit, i as ValidationResult, k as IntrospectionPluginOptions, kn as WriteContext, l as TypedRepository, lt as AggregationCacheConfig, m as RegistryStats, mt as AggregationMaterializedResult, n as ConfigError, nt as FieldRule, o as InferDocType, ot as EventDefinition, p as RegistryEntry, pt as AggregationMaterializedContext, q as PresetFunction, qt as BulkExt, r as ValidateOptions, s as InferResourceDoc, st as AggMeasureInput, t as RouteHandlerMethod, u as TypedResourceConfig, ut as AggregationConfig, vn as ArcGetResult, w as ServiceContext, wn as ListResult, xn as BaseControllerOptions, y as OwnershipCheck, yn as ArcListResult } from "./index-DHbyPo5j.mjs";
-import { a as applyFieldWritePermissions, i as applyFieldReadPermissions, n as FieldPermissionMap, o as fields, t as FieldPermission } from "./fields-I_EeRWND.mjs";
-import "./fastify-augmentation-Cq2nHVaW.mjs";
-import { A as CRUD_OPERATIONS, B as HookOperation, C as SeamedResourceConfig, E as defineAction, F as DEFAULT_SORT, G as MUTATION_OPERATIONS, H as MAX_FILTER_DEPTH, I as DEFAULT_TENANT_FIELD, J as SYSTEM_FIELDS, K as MutationOperation, L as DEFAULT_UPDATE_METHOD, M as DEFAULT_ID_FIELD, N as DEFAULT_LIMIT, P as DEFAULT_MAX_LIMIT, R as HOOK_OPERATIONS, S as ResourceSeams, U as MAX_REGEX_LENGTH, V as HookPhase, W as MAX_SEARCH_LENGTH, b as defineResourceVariants, c as nativePolicyFilter, h as getControllerScope, j as CrudOperation, k as defineAggregation, q as RESERVED_QUERY_PARAMS, s as NativePolicyFilter, w as mergeResourceConfig, x as AdapterLike, z as HOOK_PHASES } from "./index-D4u76eQW.mjs";
-import { $ as requireAuth, C as requireServiceScope, G as createOrgPermissions, H as DynamicPermissionMatrixConfig, J as allowPublic, K as allOf, S as requireScopeContext, V as DynamicPermissionMatrix, W as createDynamicPermissionMatrix, Y as anyOf, Z as denyAll, _ as publicReadAdminWrite, b as requireOrgMembership, d as authenticated, et as requireOwnership, f as fullPublic, g as publicRead, h as presets_d_exports, it as when, nt as requireRoles, p as ownerWithAdminBypass, u as adminOnly, v as readOnly, w as requireTeamMembership, x as requireOrgRole, y as requireOrgInScope } from "./index-BHdZD8zK.mjs";
-import { a as NotFoundError, d as ValidationError, f as createDomainError, i as ForbiddenError, t as ArcError, u as UnauthorizedError } from "./errors-BGdVwP25.mjs";
+import { c as DataPolicy, d as UserBase, l as PermissionCheck, n as ArcRequest, o as UserOrganization, r as JWTPayload, s as AuthorizationDecision, t as AnyRecord, u as PermissionContext } from "./base-CZyixEQR.mjs";
+import { A as RequestWithExtras, Bn as IController, Bt as TreeMixin, C as RequestIdOptions, Cn as ArcGetResult, D as FastifyWithAuth, Dn as ControllerConfigurableOptions, E as FastifyRequestExtras, En as BaseControllerOptions, F as ResourceDefinition, Fn as WriteContext, G as CrudRouteKey, Gt as BaseCrudController, H as PresetFunction, Hn as IRequestContext, Ht as SlugMixin, I as CrudController, In as WriteVerbKey, It as BaseController, J as MiddlewareConfig, K as CrudSchemas, L as ResourceConfig, Lt as SoftDeleteExt, Nn as MutationWriteContext, O as FastifyWithDecorators, On as ControllerConstructionOptions, P as defineResource, Pn as ResourceWrites, Q as FieldRule, Rn as ControllerLike, Rt as SoftDeleteMixin, S as IntrospectionPluginOptions, Sn as ArcDeleteResult, Tn as ArcUpdateResult, Un as RawRouteHandler, Ut as BulkExt, Vn as IControllerResponse, Vt as SlugExt, W as PresetResult, Wn as RouteHandler, Wt as BulkMixin, X as RouteSchemaOptions, _ as ServiceContext, a as IntrospectionData, at as AggregationCacheConfig, b as HealthCheck, c as ResourceMetadata, ct as AggregationIndexHint, dt as AggregationRateLimit, f as OwnershipCheck, ft as AggregationsMap, g as RequestContext, h as QueryParserInterface, i as PaginationResult, it as AggMeasureShorthand, jt as AuthPluginOptions, kn as ListResult, kt as RateLimitConfig, l as ArcInternalMetadata, lt as AggregationMaterializedContext, n as InferDocType, nt as EventDefinition, o as RegistryEntry, ot as AggregationConfig, r as InferResourceDoc, rt as AggMeasureInput, s as RegistryStats, st as AggregationDateRangeRequirement, t as InferAdapterDoc, ut as AggregationMaterializedResult, v as CrudRouterOptions, wn as ArcListResult, x as HealthOptions, xn as ArcCreateResult, y as GracefulShutdownOptions, zt as TreeExt } from "./index-WH7xgvxS.mjs";
+import { a as applyFieldReadPermissions, n as FieldPermissionMap, o as applyFieldWritePermissions, s as fields, t as FieldPermission } from "./fields-BBSpf8pS.mjs";
+import "./fastify-augmentation-DRlCIWE9.mjs";
+import { A as CrudOperation, B as HookOperation, C as mergeResourceConfig, F as DEFAULT_TENANT_FIELD, G as MUTATION_OPERATIONS, H as MAX_FILTER_DEPTH, I as DEFAULT_UPDATE_METHOD, J as SYSTEM_FIELDS, K as MutationOperation, M as DEFAULT_LIMIT, N as DEFAULT_MAX_LIMIT, O as defineAggregation, P as DEFAULT_SORT, R as HOOK_OPERATIONS, S as SeamedResourceConfig, T as defineAction, U as MAX_REGEX_LENGTH, V as HookPhase, W as MAX_SEARCH_LENGTH, b as AdapterLike, c as nativePolicyFilter, j as DEFAULT_ID_FIELD, k as CRUD_OPERATIONS, m as getControllerScope, q as RESERVED_QUERY_PARAMS, s as NativePolicyFilter, x as ResourceSeams, y as defineResourceVariants, z as HOOK_PHASES } from "./index-Beg3aNnK.mjs";
+import { C as requireScopeContext, G as createDynamicPermissionMatrix, H as DynamicPermissionMatrix, J as PublicPolicy, K as createOrgPermissions, Q as anyOf, S as requireOrgRole, T as requireTeamMembership, U as DynamicPermissionMatrixConfig, Y as allOf, Z as allowPublic, _ as publicRead, at as requireRoles, b as requireOrgInScope, d as adminOnly, et as denyAll, f as authenticated, g as presets_d_exports, m as ownerWithAdminBypass, nt as requireAuth, p as fullPublic, q as AllowPublicOptions, rt as requireOwnership, st as when, v as publicReadAdminWrite, w as requireServiceScope, x as requireOrgMembership, y as readOnly } from "./index-Bxriq3so.mjs";
+import { a as NotFoundError, d as ValidationError, f as createDomainError, i as ForbiddenError, t as ArcError, u as UnauthorizedError } from "./errors-JYc9vwqE.mjs";
 //#region src/index.d.ts
-declare const version: string;
+export declare const version: string;
 //#endregion
-export { type AdapterLike, type AggMeasureInput, type AggMeasureShorthand, type AggregationCacheConfig, type AggregationConfig, type AggregationDateRangeRequirement, type AggregationIndexHint, type AggregationMaterializedContext, type AggregationMaterializedResult, type AggregationRateLimit, type AggregationsMap, type AnyRecord, type ArcCreateResult, type ArcDeleteResult, ArcError, type ArcGetResult, type ArcInternalMetadata, type ArcListResult, type ArcRequest, type ArcUpdateResult, type AuthPluginOptions, type AuthorizationDecision, BaseController, type BaseControllerOptions, BaseCrudController, type BulkExt, BulkMixin, CRUD_OPERATIONS, type ConfigError, type ControllerConfigurableOptions, type ControllerConstructionOptions, type ControllerLike, type CrudController, type CrudOperation, type CrudRouteKey, type CrudRouterOptions, type CrudSchemas, DEFAULT_ID_FIELD, DEFAULT_LIMIT, DEFAULT_MAX_LIMIT, DEFAULT_SORT, DEFAULT_TENANT_FIELD, DEFAULT_UPDATE_METHOD, type DataPolicy, type DynamicPermissionMatrix, type DynamicPermissionMatrixConfig, type EventDefinition, type FastifyRequestExtras, type FastifyWithAuth, type FastifyWithDecorators, type FieldPermission, type FieldPermissionMap, type FieldRule, ForbiddenError, type GracefulShutdownOptions, HOOK_OPERATIONS, HOOK_PHASES, type HealthCheck, type HealthOptions, type HookOperation, type HookPhase, type IController, type IControllerResponse, type IRequestContext, type InferAdapterDoc, type InferDocType, type InferResourceDoc, type IntrospectionData, type IntrospectionPluginOptions, type JWTPayload, type ListResult, MAX_FILTER_DEPTH, MAX_REGEX_LENGTH, MAX_SEARCH_LENGTH, MUTATION_OPERATIONS, type MiddlewareConfig, type MutationOperation, type MutationWriteContext, type NativePolicyFilter, NotFoundError, type OwnershipCheck, type PaginationResult, type PermissionCheck, type PermissionContext, type PresetFunction, type PresetResult, type QueryParserInterface, RESERVED_QUERY_PARAMS, type RateLimitConfig, type RawRouteHandler, type RegistryEntry, type RegistryStats, type RequestContext, type RequestIdOptions, type RequestWithExtras, type ResourceConfig, ResourceDefinition, type ResourceMetadata, type ResourceSeams, type ResourceWrites, type RouteHandler, type RouteHandlerMethod, type RouteSchemaOptions, SYSTEM_FIELDS, type SeamedResourceConfig, type ServiceContext, type SlugExt, SlugMixin, type SoftDeleteExt, SoftDeleteMixin, type TreeExt, TreeMixin, type TypedController, type TypedRepository, type TypedResourceConfig, UnauthorizedError, type UserBase, type UserOrganization, type ValidateOptions, ValidationError, type ValidationResult, type WriteContext, type WriteVerbKey, adminOnly, allOf, allowPublic, anyOf, applyFieldReadPermissions, applyFieldWritePermissions, authenticated, createDomainError, createDynamicPermissionMatrix, createOrgPermissions, defineAction, defineAggregation, defineResource, defineResourceVariants, denyAll, fields, fullPublic, getControllerScope, mergeResourceConfig, nativePolicyFilter, ownerWithAdminBypass, presets_d_exports as permissions, publicRead, publicReadAdminWrite, readOnly, requireAuth, requireOrgInScope, requireOrgMembership, requireOrgRole, requireOwnership, requireRoles, requireScopeContext, requireServiceScope, requireTeamMembership, version, when };
+export { type AdapterLike, type AggMeasureInput, type AggMeasureShorthand, type AggregationCacheConfig, type AggregationConfig, type AggregationDateRangeRequirement, type AggregationIndexHint, type AggregationMaterializedContext, type AggregationMaterializedResult, type AggregationRateLimit, type AggregationsMap, type AllowPublicOptions, type AnyRecord, type ArcCreateResult, type ArcDeleteResult, ArcError, type ArcGetResult, type ArcInternalMetadata, type ArcListResult, type ArcRequest, type ArcUpdateResult, type AuthPluginOptions, type AuthorizationDecision, BaseController, type BaseControllerOptions, BaseCrudController, type BulkExt, BulkMixin, CRUD_OPERATIONS, type ControllerConfigurableOptions, type ControllerConstructionOptions, type ControllerLike, type CrudController, type CrudOperation, type CrudRouteKey, type CrudRouterOptions, type CrudSchemas, DEFAULT_ID_FIELD, DEFAULT_LIMIT, DEFAULT_MAX_LIMIT, DEFAULT_SORT, DEFAULT_TENANT_FIELD, DEFAULT_UPDATE_METHOD, type DataPolicy, type DynamicPermissionMatrix, type DynamicPermissionMatrixConfig, type EventDefinition, type FastifyRequestExtras, type FastifyWithAuth, type FastifyWithDecorators, type FieldPermission, type FieldPermissionMap, type FieldRule, ForbiddenError, type GracefulShutdownOptions, HOOK_OPERATIONS, HOOK_PHASES, type HealthCheck, type HealthOptions, type HookOperation, type HookPhase, type IController, type IControllerResponse, type IRequestContext, type InferAdapterDoc, type InferDocType, type InferResourceDoc, type IntrospectionData, type IntrospectionPluginOptions, type JWTPayload, type ListResult, MAX_FILTER_DEPTH, MAX_REGEX_LENGTH, MAX_SEARCH_LENGTH, MUTATION_OPERATIONS, type MiddlewareConfig, type MutationOperation, type MutationWriteContext, type NativePolicyFilter, NotFoundError, type OwnershipCheck, type PaginationResult, type PermissionCheck, type PermissionContext, type PresetFunction, type PresetResult, type PublicPolicy, type QueryParserInterface, RESERVED_QUERY_PARAMS, type RateLimitConfig, type RawRouteHandler, type RegistryEntry, type RegistryStats, type RequestContext, type RequestIdOptions, type RequestWithExtras, type ResourceConfig, ResourceDefinition, type ResourceMetadata, type ResourceSeams, type ResourceWrites, type RouteHandler, type RouteSchemaOptions, SYSTEM_FIELDS, type SeamedResourceConfig, type ServiceContext, type SlugExt, SlugMixin, type SoftDeleteExt, SoftDeleteMixin, type TreeExt, TreeMixin, UnauthorizedError, type UserBase, type UserOrganization, ValidationError, type WriteContext, type WriteVerbKey, adminOnly, allOf, allowPublic, anyOf, applyFieldReadPermissions, applyFieldWritePermissions, authenticated, createDomainError, createDynamicPermissionMatrix, createOrgPermissions, defineAction, defineAggregation, defineResource, defineResourceVariants, denyAll, fields, fullPublic, getControllerScope, mergeResourceConfig, nativePolicyFilter, ownerWithAdminBypass, presets_d_exports as permissions, publicRead, publicReadAdminWrite, readOnly, requireAuth, requireOrgInScope, requireOrgMembership, requireOrgRole, requireOwnership, requireRoles, requireScopeContext, requireServiceScope, requireTeamMembership, when };

package/dist/index.mjs

@@ -1,14 +1,14 @@
-/*! @classytic/arc v2.41.1 | MIT | https://classytic.com */
-import { a as DEFAULT_SORT, c as HOOK_OPERATIONS, d as MAX_REGEX_LENGTH, f as MAX_SEARCH_LENGTH, h as SYSTEM_FIELDS, i as DEFAULT_MAX_LIMIT, l as HOOK_PHASES, m as RESERVED_QUERY_PARAMS, n as DEFAULT_ID_FIELD, o as DEFAULT_TENANT_FIELD, p as MUTATION_OPERATIONS, r as DEFAULT_LIMIT, s as DEFAULT_UPDATE_METHOD, t as CRUD_OPERATIONS, u as MAX_FILTER_DEPTH } from "./constants-D5Ubn1fe.mjs";
-import { d as createDomainError, i as NotFoundError, l as UnauthorizedError, r as ForbiddenError, t as ArcError, u as ValidationError } from "./errors-BH7YU_9O.mjs";
-import { a as BulkMixin, h as nativePolicyFilter, i as SlugMixin, n as TreeMixin, o as BaseCrudController, r as SoftDeleteMixin, t as BaseController } from "./BaseController-CYEwjyjN.mjs";
-import { t as defineAggregation } from "./defineAggregation-D_eJjm5A.mjs";
-import { i as fields, n as applyFieldWritePermissions, t as applyFieldReadPermissions } from "./fields-BHrkoF5y.mjs";
-import { l as getControllerScope } from "./actionPermissions-BoPGQ5-4.mjs";
-import { a as ResourceDefinition, t as defineResource } from "./defineResource-DxkMTjRn.mjs";
-import { a as mergeResourceConfig, i as defineResourceVariants, o as defineAction } from "./core-5lazhva9.mjs";
-import { B as requireAuth, C as createOrgPermissions, D as requireScopeContext, E as requireOrgRole, F as allowPublic, G as when, I as anyOf, N as allOf, O as requireServiceScope, R as denyAll, S as createDynamicPermissionMatrix, T as requireOrgMembership, U as requireRoles, V as requireOwnership, a as adminOnly, c as ownerWithAdminBypass, d as publicRead, f as publicReadAdminWrite, k as requireTeamMembership, o as authenticated, p as readOnly, s as fullPublic, u as presets_exports, w as requireOrgInScope } from "./permissions-D8TBH44E.mjs";
+/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
+import { a as DEFAULT_SORT, d as MAX_FILTER_DEPTH, f as MAX_REGEX_LENGTH, g as SYSTEM_FIELDS, h as RESERVED_QUERY_PARAMS, i as DEFAULT_MAX_LIMIT, l as HOOK_OPERATIONS, m as MUTATION_OPERATIONS, n as DEFAULT_ID_FIELD, o as DEFAULT_TENANT_FIELD, p as MAX_SEARCH_LENGTH, r as DEFAULT_LIMIT, s as DEFAULT_UPDATE_METHOD, t as CRUD_OPERATIONS, u as HOOK_PHASES } from "./constants-B2QHb6u6.mjs";
+import { d as createDomainError, i as NotFoundError, l as UnauthorizedError, r as ForbiddenError, t as ArcError, u as ValidationError } from "./errors-CW4anJBy.mjs";
+import { S as nativePolicyFilter, c as BaseController, d as SlugMixin, f as BulkMixin, l as TreeMixin, p as BaseCrudController, u as SoftDeleteMixin } from "./plugin-DALd9dcF.mjs";
+import { t as defineAggregation } from "./defineAggregation--3xguLkk.mjs";
+import { i as fields, n as applyFieldWritePermissions, t as applyFieldReadPermissions } from "./fields-A5crhsJb.mjs";
+import { S as getControllerScope } from "./actionPermissions-5N04zBL4.mjs";
+import { a as defineResourceVariants, o as mergeResourceConfig, s as defineAction } from "./core-COcqo0Cp.mjs";
+import { a as ResourceDefinition, t as defineResource } from "./defineResource-gUp9ug66.mjs";
+import { B as requireAuth, C as createOrgPermissions, D as requireScopeContext, E as requireOrgRole, F as allowPublic, G as when, I as anyOf, N as allOf, O as requireServiceScope, R as denyAll, S as createDynamicPermissionMatrix, T as requireOrgMembership, U as requireRoles, V as requireOwnership, a as adminOnly, c as ownerWithAdminBypass, d as publicRead, f as publicReadAdminWrite, k as requireTeamMembership, o as authenticated, p as readOnly, s as fullPublic, u as presets_exports, w as requireOrgInScope } from "./permissions-C5ijIz5Q.mjs";
 //#region src/index.ts
-const version = "2.41.1";
+const version = "2.44.0";
 //#endregion
 export { ArcError, BaseController, BaseCrudController, BulkMixin, CRUD_OPERATIONS, DEFAULT_ID_FIELD, DEFAULT_LIMIT, DEFAULT_MAX_LIMIT, DEFAULT_SORT, DEFAULT_TENANT_FIELD, DEFAULT_UPDATE_METHOD, ForbiddenError, HOOK_OPERATIONS, HOOK_PHASES, MAX_FILTER_DEPTH, MAX_REGEX_LENGTH, MAX_SEARCH_LENGTH, MUTATION_OPERATIONS, NotFoundError, RESERVED_QUERY_PARAMS, ResourceDefinition, SYSTEM_FIELDS, SlugMixin, SoftDeleteMixin, TreeMixin, UnauthorizedError, ValidationError, adminOnly, allOf, allowPublic, anyOf, applyFieldReadPermissions, applyFieldWritePermissions, authenticated, createDomainError, createDynamicPermissionMatrix, createOrgPermissions, defineAction, defineAggregation, defineResource, defineResourceVariants, denyAll, fields, fullPublic, getControllerScope, mergeResourceConfig, nativePolicyFilter, ownerWithAdminBypass, presets_exports as permissions, publicRead, publicReadAdminWrite, readOnly, requireAuth, requireOrgInScope, requireOrgMembership, requireOrgRole, requireOwnership, requireRoles, requireScopeContext, requireServiceScope, requireTeamMembership, version, when };

package/dist/{init-CpLkjU18.mjs → init-BPzK5Lnr.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.41.1 | MIT | https://classytic.com */
+/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
 import * as fs from "node:fs/promises";
 import * as path from "node:path";
 import { dirname, join } from "node:path";

package/dist/integrations/event-gateway.d.mts

@@ -1,9 +1,9 @@
 
-import { n as DomainEvent } from "../EventTransport-CbUKDzZZ.mjs";
-import { c as WebSocketClient, l as WebSocketMessage } from "../websocket-BOXVggMf.mjs";
+import { n as DomainEvent } from "../EventTransport-CiicKz2Z.mjs";
+import { c as WebSocketClient, l as WebSocketMessage } from "../websocket-Cs4awVyD.mjs";
 import { FastifyPluginAsync, FastifyRequest } from "fastify";
 //#region src/integrations/event-gateway.d.ts
-interface EventGatewayOptions {
+export interface EventGatewayOptions {
   /** Require auth for all real-time connections (default: true) */
   auth?: boolean;
   /** Custom auth function for WebSocket upgrade */
@@ -11,7 +11,12 @@ interface EventGatewayOptions {
     userId?: string;
     organizationId?: string;
   } | null>;
-  /** Filter events by org from request.scope (default: false) */
+  /**
+   * SSE tenant filtering — forwarded to `ssePlugin`'s `orgScoped`, whose
+   * default (**true**) applies when this is omitted. Deliberately not
+   * defaulted here: two defaults for one decision is how the stream stayed
+   * cross-tenant after the rest of arc failed closed.
+   */
   orgScoped?: boolean;
   /** Room/subscription authorization policy */
   roomPolicy?: (client: {
@@ -41,6 +46,5 @@ interface EventGatewayOptions {
     onDisconnect?: (client: WebSocketClient) => void | Promise<void>;
   };
 }
-declare const eventGatewayPlugin: FastifyPluginAsync<EventGatewayOptions>;
-//#endregion
-export { EventGatewayOptions, eventGatewayPlugin };
+export declare const eventGatewayPlugin: FastifyPluginAsync<EventGatewayOptions>;
+//#endregion

package/dist/integrations/event-gateway.mjs

@@ -1,17 +1,17 @@
-/*! @classytic/arc v2.41.1 | MIT | https://classytic.com */
+/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
 import fp from "fastify-plugin";
 //#region src/integrations/event-gateway.ts
 const eventGatewayPluginImpl = async (fastify, opts = {}) => {
-	const { auth = true, orgScoped = false, roomPolicy, maxMessageBytes, maxSubscriptionsPerClient, authenticate } = opts;
+	const { auth = true, orgScoped, roomPolicy, maxMessageBytes, maxSubscriptionsPerClient, authenticate } = opts;
 	if (auth && !authenticate && !fastify.hasDecorator("authenticate")) throw new Error("[arc-event-gateway] auth is true but fastify.authenticate is not registered. Register an auth plugin first, provide a custom authenticate function, or set auth: false.");
 	if (opts.sse !== false) {
-		const { default: ssePlugin } = await import("../sse-BeqVKQKu.mjs").then((n) => n.r);
+		const { default: ssePlugin } = await import("../sse-BzJFPX_1.mjs").then((n) => n.n);
 		await fastify.register(ssePlugin, {
 			path: opts.sse?.path ?? "/events/stream",
 			requireAuth: auth,
 			patterns: opts.sse?.patterns ?? ["*"],
 			heartbeat: opts.sse?.heartbeat ?? 3e4,
-			orgScoped,
+			...orgScoped !== void 0 ? { orgScoped } : {},
 			filter: opts.sse?.filter
 		});
 	}

package/dist/integrations/index.d.mts

@@ -1,8 +1,8 @@
 
-import { c as WebSocketClient, l as WebSocketMessage, u as WebSocketPluginOptions } from "../websocket-BOXVggMf.mjs";
+import { c as WebSocketClient, l as WebSocketMessage, u as WebSocketPluginOptions } from "../websocket-Cs4awVyD.mjs";
 import { EventGatewayOptions } from "./event-gateway.mjs";
-import { a as JobMeta, c as JobsPluginOptions, i as JobDispatcher, l as QueueStats, n as JobDefinition, r as JobDispatchOptions } from "../index-CbJiYrfv.mjs";
-import { _ as ToolDefinition, c as McpAuthResult, d as McpResourceConfig, f as PromptDefinition, g as ToolContext, h as ToolAnnotations, n as CallToolResult, o as CrudOperation, r as CreateMcpServerConfig, t as BetterAuthHandler, u as McpPluginOptions } from "../types-CWQn9-IC.mjs";
+import { a as JobMeta, c as JobsPluginOptions, i as JobDispatcher, l as QueueStats, n as JobDefinition, r as JobDispatchOptions } from "../index-Chgz3d0i.mjs";
+import { _ as ToolDefinition, c as McpAuthResult, d as McpResourceConfig, f as PromptDefinition, g as ToolContext, h as ToolAnnotations, n as CallToolResult, o as CrudOperation, r as CreateMcpServerConfig, t as BetterAuthHandler, u as McpPluginOptions } from "../types-D3Ixsh00.mjs";
 import { StreamlinePluginOptions, WorkflowLike, WorkflowRunLike } from "./streamline.mjs";
 import { WebhookDeliveryRecord, WebhookManager, WebhookPluginOptions, WebhookStore, WebhookSubscription } from "./webhooks.mjs";
 export type { BetterAuthHandler, CallToolResult, CreateMcpServerConfig, CrudOperation, EventGatewayOptions, JobDefinition, JobDispatchOptions, JobDispatcher, JobMeta, JobsPluginOptions, McpAuthResult, McpPluginOptions, McpResourceConfig, PromptDefinition, QueueStats, StreamlinePluginOptions, ToolAnnotations, ToolContext, ToolDefinition, WebSocketClient, WebSocketMessage, WebSocketPluginOptions, WebhookDeliveryRecord, WebhookManager, WebhookPluginOptions, WebhookStore, WebhookSubscription, WorkflowLike, WorkflowRunLike };

package/dist/integrations/index.mjs

@@ -1,2 +1,2 @@
-/*! @classytic/arc v2.41.1 | MIT | https://classytic.com */
+/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
 export {};

package/dist/integrations/jobs/index.d.mts

@@ -1,3 +1,3 @@
 
-import { a as JobMeta, c as JobsPluginOptions, d as ExecuteTimedHandlerOptions, f as TimedHandlerLogger, i as JobDispatcher, l as QueueStats, n as JobDefinition, o as JobRepeatOptions, p as executeTimedHandler, r as JobDispatchOptions, s as JobStatus, t as jobsPlugin, u as defineJob } from "../../index-CbJiYrfv.mjs";
+import { a as JobMeta, c as JobsPluginOptions, d as ExecuteTimedHandlerOptions, f as TimedHandlerLogger, i as JobDispatcher, l as QueueStats, n as JobDefinition, o as JobRepeatOptions, p as executeTimedHandler, r as JobDispatchOptions, s as JobStatus, t as jobsPlugin, u as defineJob } from "../../index-Chgz3d0i.mjs";
 export { type ExecuteTimedHandlerOptions, type JobDefinition, type JobDispatchOptions, type JobDispatcher, type JobMeta, type JobRepeatOptions, type JobStatus, type JobsPluginOptions, type QueueStats, type TimedHandlerLogger, defineJob, executeTimedHandler, jobsPlugin };

package/dist/integrations/jobs/index.mjs

@@ -1,5 +1,6 @@
-/*! @classytic/arc v2.41.1 | MIT | https://classytic.com */
-import { n as evaluateAndApplyPermission } from "../../authorizationDecision-DawKGoXb.mjs";
+/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
+import { n as evaluateAndApplyPermission } from "../../authorizationDecision-wX3SA9w_.mjs";
+import { i as runAdmittedWork, r as registerShutdownParticipant } from "../../shutdown-LpLMH8T1.mjs";
 import fp from "fastify-plugin";
 //#region src/integrations/jobs/execution.ts
 async function executeTimedHandler(options) {
@@ -150,6 +151,7 @@ const jobsPluginImpl = async (fastify, options) => {
 	const queues = /* @__PURE__ */ new Map();
 	const dlqQueues = /* @__PURE__ */ new Map();
 	const workers = /* @__PURE__ */ new Map();
+	const activeHandlers = /* @__PURE__ */ new Set();
 	const throttledJobs = /* @__PURE__ */ new Map();
 	const seenNames = /* @__PURE__ */ new Set();
 	for (const job of jobs) {
@@ -255,7 +257,11 @@ const jobsPluginImpl = async (fastify, options) => {
 							timestamp: Date.now(),
 							signal
 						};
-						return job.handler(bullJob.data, meta);
+						const pending = runAdmittedWork(() => job.handler(bullJob.data, meta));
+						activeHandlers.add(pending);
+						return pending.finally(() => {
+							activeHandlers.delete(pending);
+						});
 					}
 				});
 				if (bridgeEvents && fastify.events?.publish) try {
@@ -454,8 +460,15 @@ const jobsPluginImpl = async (fastify, options) => {
 			};
 		});
 	}
-	fastify.addHook("onClose", async () => {
-		await dispatcher.close();
+	registerShutdownParticipant(fastify, {
+		name: "jobs",
+		stop: async () => {
+			await Promise.all(Array.from(workers.values()).map((worker) => worker.pause(true)));
+		},
+		drain: async () => {
+			await dispatcher.close();
+			await Promise.allSettled([...activeHandlers]);
+		}
 	});
 };
 /**

package/dist/integrations/mcp/index.d.mts

@@ -1,10 +1,11 @@
 
 import { i as RequestScope } from "../../types-Ddl9OjmE.mjs";
-import { l as PermissionCheck } from "../../base-CxrV1LmG.mjs";
-import { Fn as IControllerResponse, In as IRequestContext, V as ResourceDefinition, zn as ServerAccessor } from "../../index-DHbyPo5j.mjs";
-import { n as FieldPermissionMap } from "../../fields-I_EeRWND.mjs";
-import { _ as ToolDefinition, a as CrudDescriptionOverride, c as McpAuthResult, d as McpResourceConfig, f as PromptDefinition, g as ToolContext, h as ToolAnnotations, i as CrudDescriptionMeta, l as McpExecutionWiring, m as SessionEntry, n as CallToolResult, o as CrudOperation, p as PromptResult, r as CreateMcpServerConfig, s as McpAuthResolver, t as BetterAuthHandler, u as McpPluginOptions } from "../../types-CWQn9-IC.mjs";
-import { i as resolveToolCollisions, n as McpServerInstance, r as createMcpServer, t as AuthRef } from "../../createMcpServer-CbDWkZ1T.mjs";
+import { l as PermissionCheck } from "../../base-CZyixEQR.mjs";
+import { F as ResourceDefinition, Gn as ServerAccessor, Hn as IRequestContext, Vn as IControllerResponse } from "../../index-WH7xgvxS.mjs";
+import { n as FieldPermissionMap } from "../../fields-BBSpf8pS.mjs";
+import "../../resourceRateLimit-Wf6d6FL9.mjs";
+import { _ as ToolDefinition, a as CrudDescriptionOverride, c as McpAuthResult, d as McpResourceConfig, f as PromptDefinition, g as ToolContext, h as ToolAnnotations, i as CrudDescriptionMeta, l as McpExecutionWiring, m as SessionEntry, n as CallToolResult, o as CrudOperation, p as PromptResult, r as CreateMcpServerConfig, s as McpAuthResolver, t as BetterAuthHandler, u as McpPluginOptions, v as ToolInputSchema } from "../../types-D3Ixsh00.mjs";
+import { i as resolveToolCollisions, n as McpServerInstance, r as createMcpServer, t as AuthRef } from "../../createMcpServer-DSztofa9.mjs";
 import { ErrorContract } from "@classytic/repo-core/errors";
 import { FastifyPluginAsync } from "fastify";
 import { z } from "zod";
@@ -34,7 +35,7 @@ interface McpBridge {
   guard?: (ctx: ToolContext) => string | null;
 }
 /** Convert a McpBridge into a registered MCP tool. */
-declare function bridgeToMcp(bridge: McpBridge): ToolDefinition;
+export declare function bridgeToMcp(bridge: McpBridge): ToolDefinition;
 interface BuildMcpToolsFromBridgesOptions {
   /** If set, only bridges whose `name` is in this array are registered. */
   include?: string[];
@@ -54,7 +55,7 @@ interface BuildMcpToolsFromBridgesOptions {
  * extraTools: [...buildMcpToolsFromBridges(allBridges, { exclude: ['trigger_job'] })]
  * ```
  */
-declare function buildMcpToolsFromBridges(bridges: readonly McpBridge[], options?: BuildMcpToolsFromBridgesOptions): ToolDefinition[];
+export declare function buildMcpToolsFromBridges(bridges: readonly McpBridge[], options?: BuildMcpToolsFromBridgesOptions): ToolDefinition[];
 //#endregion
 //#region src/integrations/mcp/betterAuthApiKey.d.ts
 /** Minimal subset of Better Auth's API-key record the helper needs. */
@@ -95,7 +96,61 @@ interface CreateMcpAuthFromBetterAuthApiKeyOptions {
  * Build an {@link McpAuthResolver} that authenticates MCP requests against
  * Better Auth's API-key plugin. See module docstring for the rationale.
  */
-declare function createMcpAuthFromBetterAuthApiKey(auth: BetterAuthHandler, options?: CreateMcpAuthFromBetterAuthApiKeyOptions): McpAuthResolver;
+export declare function createMcpAuthFromBetterAuthApiKey(auth: BetterAuthHandler, options?: CreateMcpAuthFromBetterAuthApiKeyOptions): McpAuthResolver;
+//#endregion
+//#region src/integrations/mcp/buildRequestContext.d.ts
+type McpOperation = "list" | "get" | "create" | "update" | "delete" | "action";
+/**
+ * Optional context extras — the pieces of `IRequestContext` that HTTP's
+ * `createRequestContext` assembles from Fastify decorators and the MCP
+ * synthetic path historically DROPPED. Without them, controller code that
+ * reads `metadata.arc.hooks` (the whole hook system — including the
+ * arcCorePlugin after-hook that publishes `<resource>.<op>d` events) or
+ * `ctx.server.events` silently no-ops on MCP calls: agents could mutate
+ * records without hooks firing, events publishing, realtime feeds updating,
+ * or webhooks dispatching. Thread these through `invokeController` /
+ * `resourceToTools({ wiring })` to restore full HTTP ↔ MCP parity.
+ */
+interface McpContextExtras {
+  tenantMiddlewares?: readonly unknown[];
+  /**
+   * Resource wiring — becomes `metadata.arc`, the same frozen shape
+   * `buildArcDecorator` stamps on HTTP requests (`ArcRouteMeta`).
+   */
+  arc?: {
+    readonly resourceName: string;
+    readonly schemaOptions?: unknown;
+    readonly permissions?: unknown;
+    readonly hooks?: unknown;
+    readonly events?: unknown;
+    readonly fields?: unknown;
+    readonly idField?: string;
+  };
+  /** Server accessor — `ctx.server.events/audit/log`, mirroring HTTP. */
+  server?: ServerAccessor;
+}
+/**
+ * Build an IRequestContext from MCP tool input and session auth.
+ *
+ * | Operation | params     | query                | body                |
+ * |-----------|------------|----------------------|---------------------|
+ * | list      | {}         | all input fields     | undefined           |
+ * | get       | { id }     | {}                   | undefined           |
+ * | create    | {}         | {}                   | all input fields    |
+ * | update    | { id }     | {}                   | input minus id      |
+ * | delete    | { id }     | {}                   | undefined           |
+ *
+ * **scopeOverride** — when a permission check (e.g. `requireApiKey()`) returns
+ * an `AuthorizationDecision.scope`, the MCP tool handler must install it on the
+ * request context the same way CRUD/action routes do. This parameter follows the exact
+ * same non-downgrade rule as `applyAuthorizationDecision`: it overrides only when
+ * the session-derived scope is `public` (i.e. MCP called with `auth: false`).
+ * An authenticated session scope is never overwritten.
+ */
+export declare function buildRequestContext(input: Record<string, unknown>, auth: McpAuthResult | null, operation: McpOperation, policyFilters?: Record<string, unknown>, scopeOverride?: RequestScope, extras?: McpContextExtras): IRequestContext;
+//#endregion
+//#region src/integrations/mcp/http-parity.d.ts
+type ToolAdmission = (session: McpAuthResult | null, scope?: RequestScope) => boolean | Promise<boolean>;
 //#endregion
 //#region src/integrations/mcp/crud-tools.d.ts
 /**
@@ -107,7 +162,7 @@ declare function createMcpAuthFromBetterAuthApiKey(auth: BetterAuthHandler, opti
  * override can call this from their own override to keep the auto-derived
  * blurb intact and only append extra context.
  */
-declare function defaultCrudDescription(op: CrudOperation, displayName: string, softDelete: boolean, queryMeta?: {
+export declare function defaultCrudDescription(op: CrudOperation, displayName: string, softDelete: boolean, queryMeta?: {
   filterableFields?: readonly string[];
   allowedOperators?: readonly string[];
   sortableFields?: readonly string[];
@@ -119,7 +174,7 @@ declare function defaultCrudDescription(op: CrudOperation, displayName: string,
  *
  * Falls back to {@link defaultCrudDescription} when no override is set.
  */
-declare function resolveCrudDescription(override: CrudDescriptionOverride | undefined, meta: CrudDescriptionMeta): string;
+export declare function resolveCrudDescription(override: CrudDescriptionOverride | undefined, meta: CrudDescriptionMeta): string;
 //#endregion
 //#region src/integrations/mcp/definePrompt.d.ts
 /** definePrompt() config */
@@ -136,7 +191,7 @@ interface DefinePromptConfig<TArgs extends Record<string, z.ZodTypeAny>> {
  * @param name - Prompt name (snake_case recommended)
  * @param config - Description, args schema, handler
  */
-declare function definePrompt<TArgs extends Record<string, z.ZodTypeAny>>(name: string, config: DefinePromptConfig<TArgs>): PromptDefinition;
+export declare function definePrompt<TArgs extends Record<string, z.ZodTypeAny>>(name: string, config: DefinePromptConfig<TArgs>): PromptDefinition;
 //#endregion
 //#region src/integrations/mcp/defineTool.d.ts
 /**
@@ -163,7 +218,7 @@ interface DefineToolConfig<TInput extends Record<string, z.ZodTypeAny>, TSession
  * @param name - Tool name (snake_case recommended)
  * @param config - Tool description, input schema, annotations, handler
  */
-declare function defineTool<TInput extends Record<string, z.ZodTypeAny>, TSession = McpAuthResult>(name: string, config: DefineToolConfig<TInput, TSession>): ToolDefinition<TSession>;
+export declare function defineTool<TInput extends Record<string, z.ZodTypeAny>, TSession = McpAuthResult>(name: string, config: DefineToolConfig<TInput, TSession>): ToolDefinition<TSession>;
 //#endregion
 //#region src/integrations/mcp/fieldRulesToZod.d.ts
 interface FieldRulesToZodOptions {
@@ -212,21 +267,21 @@ interface FieldRuleEntry {
  *
  * @returns Flat shape `Record<string, z.ZodTypeAny>` — pass directly to defineTool() or registerTool()
  */
-declare function fieldRulesToZod(fieldRules: Record<string, FieldRuleEntry> | undefined, options?: FieldRulesToZodOptions): Record<string, z.ZodTypeAny>;
+export declare function fieldRulesToZod(fieldRules: Record<string, FieldRuleEntry> | undefined, options?: FieldRulesToZodOptions): Record<string, z.ZodTypeAny>;
 //#endregion
 //#region src/integrations/mcp/guards.d.ts
 /** Check if the tool context has an authenticated user (not anonymous/null) */
-declare function isAuthenticated(ctx: ToolContext): boolean;
+export declare function isAuthenticated(ctx: ToolContext): boolean;
 /** Check if the tool context has an organization scope */
-declare function hasOrg(ctx: ToolContext): boolean;
+export declare function hasOrg(ctx: ToolContext): boolean;
 /** Check if the tool context matches a specific org */
-declare function isOrg(ctx: ToolContext, orgId: string): boolean;
+export declare function isOrg(ctx: ToolContext, orgId: string): boolean;
 /** Get the current user ID from context (undefined if anonymous/null) */
-declare function getUserId(ctx: ToolContext): string | undefined;
+export declare function getUserId(ctx: ToolContext): string | undefined;
 /** Get the current org ID from context */
-declare function getOrgId(ctx: ToolContext): string | undefined;
+export declare function getOrgId(ctx: ToolContext): string | undefined;
 /** Create a denied (isError) CallToolResult */
-declare function denied(reason: string): CallToolResult;
+export declare function denied(reason: string): CallToolResult;
 /** Guard type — checks ToolContext, returns error message or null (pass) */
 type McpGuard = (ctx: ToolContext) => string | null | Promise<string | null>;
 /**
@@ -243,15 +298,15 @@ type McpGuard = (ctx: ToolContext) => string | null | Promise<string | null>;
  * });
  * ```
  */
-declare function guard(...args: [...McpGuard[], (input: Record<string, unknown>, ctx: ToolContext) => Promise<CallToolResult>]): (input: Record<string, unknown>, ctx: ToolContext) => Promise<CallToolResult>;
+export declare function guard(...args: [...McpGuard[], (input: Record<string, unknown>, ctx: ToolContext) => Promise<CallToolResult>]): (input: Record<string, unknown>, ctx: ToolContext) => Promise<CallToolResult>;
 /** Require authenticated user (not anonymous) */
-declare const requireAuth: McpGuard;
+export declare const requireAuth: McpGuard;
 /** Require organization context */
-declare const requireOrg: McpGuard;
+export declare const requireOrg: McpGuard;
 /** Require specific user role (checks session metadata if available) */
-declare function requireRole(...roles: string[]): McpGuard;
+export declare function requireRole(...roles: string[]): McpGuard;
 /** Require specific organization */
-declare function requireOrgId(orgId: string): McpGuard;
+export declare function requireOrgId(orgId: string): McpGuard;
 /**
  * Custom guard from a predicate function.
  *
@@ -263,57 +318,7 @@ declare function requireOrgId(orgId: string): McpGuard;
  * );
  * ```
  */
-declare function customGuard(check: (ctx: ToolContext) => boolean | Promise<boolean>, errorMessage: string): McpGuard;
-//#endregion
-//#region src/integrations/mcp/buildRequestContext.d.ts
-type McpOperation = "list" | "get" | "create" | "update" | "delete" | "action";
-/**
- * Optional context extras — the pieces of `IRequestContext` that HTTP's
- * `createRequestContext` assembles from Fastify decorators and the MCP
- * synthetic path historically DROPPED. Without them, controller code that
- * reads `metadata.arc.hooks` (the whole hook system — including the
- * arcCorePlugin after-hook that publishes `<resource>.<op>d` events) or
- * `ctx.server.events` silently no-ops on MCP calls: agents could mutate
- * records without hooks firing, events publishing, realtime feeds updating,
- * or webhooks dispatching. Thread these through `invokeController` /
- * `resourceToTools({ wiring })` to restore full HTTP ↔ MCP parity.
- */
-interface McpContextExtras {
-  /**
-   * Resource wiring — becomes `metadata.arc`, the same frozen shape
-   * `buildArcDecorator` stamps on HTTP requests (`ArcRouteMeta`).
-   */
-  arc?: {
-    readonly resourceName: string;
-    readonly schemaOptions?: unknown;
-    readonly permissions?: unknown;
-    readonly hooks?: unknown;
-    readonly events?: unknown;
-    readonly fields?: unknown;
-    readonly idField?: string;
-  };
-  /** Server accessor — `ctx.server.events/audit/log`, mirroring HTTP. */
-  server?: ServerAccessor;
-}
-/**
- * Build an IRequestContext from MCP tool input and session auth.
- *
- * | Operation | params     | query                | body                |
- * |-----------|------------|----------------------|---------------------|
- * | list      | {}         | all input fields     | undefined           |
- * | get       | { id }     | {}                   | undefined           |
- * | create    | {}         | {}                   | all input fields    |
- * | update    | { id }     | {}                   | input minus id      |
- * | delete    | { id }     | {}                   | undefined           |
- *
- * **scopeOverride** — when a permission check (e.g. `requireApiKey()`) returns
- * an `AuthorizationDecision.scope`, the MCP tool handler must install it on the
- * request context the same way CRUD/action routes do. This parameter follows the exact
- * same non-downgrade rule as `applyAuthorizationDecision`: it overrides only when
- * the session-derived scope is `public` (i.e. MCP called with `auth: false`).
- * An authenticated session scope is never overwritten.
- */
-declare function buildRequestContext(input: Record<string, unknown>, auth: McpAuthResult | null, operation: McpOperation, policyFilters?: Record<string, unknown>, scopeOverride?: RequestScope, extras?: McpContextExtras): IRequestContext;
+export declare function customGuard(check: (ctx: ToolContext) => boolean | Promise<boolean>, errorMessage: string): McpGuard;
 //#endregion
 //#region src/integrations/mcp/invokeController.d.ts
 /**
@@ -322,8 +327,10 @@ declare function buildRequestContext(input: Record<string, unknown>, auth: McpAu
  * identity; everything else is optional and falls back to sensible defaults.
  */
 interface InvokeControllerOptions {
+  readonly allow?: ToolAdmission;
   /** Resolved identity for this invocation — `null` runs as public scope. */
   readonly session: McpAuthResult | null;
+  readonly tenantMiddlewares?: readonly unknown[];
   /** Resource name surfaced into the permission context (`PermissionContext.resource`). */
   readonly resourceName: string;
   /**
@@ -405,7 +412,7 @@ interface InvokeControllerOptions {
  * `McpAuthResult` the HTTP MCP plugin produces, so the same permission
  * checks compose.
  */
-declare function invokeController(controller: unknown, op: McpOperation, input: Record<string, unknown>, options: InvokeControllerOptions): Promise<CallToolResult>;
+export declare function invokeController(controller: unknown, op: McpOperation, input: Record<string, unknown>, options: InvokeControllerOptions): Promise<CallToolResult>;
 /**
  * Wrap an async function as a {@link ToolDefinition} handler — handles the
  * try/catch → canonical-error translation in one place so MCP tools that
@@ -433,7 +440,7 @@ declare function invokeController(controller: unknown, op: McpOperation, input:
  * });
  * ```
  */
-declare function mcpHandlerAdapter<TSession = McpAuthResult>(fn: (input: Record<string, unknown>, ctx: ToolContext<TSession>) => Promise<unknown>): ToolDefinition<TSession>["handler"];
+export declare function mcpHandlerAdapter<TSession = McpAuthResult>(fn: (input: Record<string, unknown>, ctx: ToolContext<TSession>) => Promise<unknown>): ToolDefinition<TSession>["handler"];
 //#endregion
 //#region src/integrations/mcp/sessionCache.d.ts
 declare class McpSessionCache {
@@ -499,11 +506,10 @@ interface ResourceFilterInputs {
   readonly exclude?: readonly string[];
 }
 /**
- * Resolve `expose` / `include` / `exclude` into the filtered resource list
- * `mcpPlugin` should surface. Three mutually exclusive intents:
+ * Resolve `expose` / `exclude` into the filtered resource list `mcpPlugin`
+ * should surface. Two mutually exclusive intents:
  *
  *  - `expose`: default-deny allowlist (preferred — new resources auto-deny).
- *  - `include`: legacy alias for `expose`, kept for back-compat.
  *  - `exclude`: default-allow opt-out (drift-prone — new resources auto-leak).
  *
  * Conflicting combinations throw with an actionable message so a host that
@@ -520,11 +526,11 @@ interface ResourceFilterInputs {
  * Exported so `mcp/testing.ts` and external test harnesses can apply the
  * same precedence rules without duplicating them.
  */
-declare function filterResourcesForMcp<T extends {
+export declare function filterResourcesForMcp<T extends {
   name: string;
   mcp?: boolean;
 }>(resources: readonly T[], inputs: ResourceFilterInputs): T[];
-declare const mcpPlugin: FastifyPluginAsync<McpPluginOptions>;
+export declare const mcpPlugin: FastifyPluginAsync<McpPluginOptions>;
 //#endregion
 //#region src/integrations/mcp/realtimeBridge.d.ts
 /**
@@ -564,7 +570,7 @@ interface DispatchOptions<TSession = unknown> {
  * handler throw). The realtime client uses the `id` to correlate
  * responses to the original calls.
  */
-declare function dispatchRealtimeToolCall<TSession = unknown>(tools: readonly ToolDefinition[], calls: readonly RealtimeToolCall[], opts?: DispatchOptions<TSession>): Promise<RealtimeToolResponse[]>;
+export declare function dispatchRealtimeToolCall<TSession = unknown>(tools: readonly ToolDefinition[], calls: readonly RealtimeToolCall[], opts?: DispatchOptions<TSession>): Promise<RealtimeToolResponse[]>;
 //#endregion
 //#region src/integrations/mcp/resourceToTools.d.ts
 interface ResourceToToolsConfig extends McpResourceConfig {
@@ -592,7 +598,14 @@ interface ResourceToToolsConfig extends McpResourceConfig {
  * @param resource - Arc resource definition
  * @param config - Optional overrides (operations, descriptions, hideFields, prefix, names)
  */
-declare function resourceToTools(resource: ResourceDefinition, config?: ResourceToToolsConfig): ToolDefinition[];
+export declare function resourceToTools(resource: ResourceDefinition, config?: ResourceToToolsConfig): ToolDefinition[];
+//#endregion
+//#region src/integrations/mcp/route-input-schema.d.ts
+/**
+ * The field shape a tool advertises — the flat record itself, or a whole object
+ * schema's `.shape`. `undefined` for a union, which has no single shape.
+ */
+export declare function toolInputShape(schema: ToolInputSchema | undefined): Record<string, z.ZodTypeAny> | undefined;
 //#endregion
 //#region src/integrations/mcp/tool-helpers.d.ts
 /**
@@ -603,7 +616,7 @@ declare function resourceToTools(resource: ResourceDefinition, config?: Resource
  * Errors are not represented here — controllers throw `ArcError` and the
  * MCP tool wrapper catches them via {@link toCallToolError}.
  */
-declare function toCallToolResult(result: IControllerResponse): CallToolResult;
+export declare function toCallToolResult(result: IControllerResponse): CallToolResult;
 /**
  * Wrap a raw success payload as an MCP `CallToolResult`. Use when the
  * tool produced a value directly (action handler return, aggregation
@@ -613,7 +626,7 @@ declare function toCallToolResult(result: IControllerResponse): CallToolResult;
  * the HTTP wire follows. The `isError: true` flag on `CallToolResult`
  * is the success/error discriminant for MCP, mirroring HTTP status.
  */
-declare function toCallToolSuccess(value: unknown): CallToolResult;
+export declare function toCallToolSuccess(value: unknown): CallToolResult;
 /**
  * Wrap an error as an MCP `CallToolResult` with the canonical
  * `ErrorContract` shape inside the text payload. Single source of truth
@@ -627,7 +640,7 @@ declare function toCallToolSuccess(value: unknown): CallToolResult;
  *  - A partial contract `{code, message, status, details?}` → used as-is.
  *  - Any other `Error` → falls back to `arc.internal_error` 500.
  */
-declare function toCallToolError(input: Error | {
+export declare function toCallToolError(input: Error | {
   code: string;
   message: string;
   status?: number;
@@ -639,11 +652,11 @@ declare function toCallToolError(input: Error | {
  * 403 (session present, denied — "Permission denied"). Mirrors the
  * status split the HTTP `errorHandler` plugin uses.
  */
-declare function permissionDeniedResult(args: {
+export declare function permissionDeniedResult(args: {
   resource: string;
   operation: string;
   reason?: string;
   session: McpAuthResult | null;
 }): CallToolResult;
 //#endregion
-export { type AuthRef, type BetterAuthHandler, type BuildMcpToolsFromBridgesOptions, type CallToolResult, type CreateMcpAuthFromBetterAuthApiKeyOptions, type CreateMcpServerConfig, type CrudDescriptionMeta, type CrudDescriptionOverride, type CrudOperation, type DefinePromptConfig, type DefineToolConfig, type DispatchOptions, type FieldRuleEntry, type FieldRulesToZodOptions, type InvokeControllerOptions, type McpAuthResolver, type McpAuthResult, type McpBridge, type McpGuard, type McpOperation, type McpPluginOptions, type McpResourceConfig, type McpServerInstance, type PromptDefinition, type PromptResult, type RealtimeToolCall, type RealtimeToolResponse, type ResourceToToolsConfig, type ToolAnnotations, type ToolContext, type ToolDefinition, bridgeToMcp, buildMcpToolsFromBridges, buildRequestContext, createMcpAuthFromBetterAuthApiKey, createMcpServer, customGuard, defaultCrudDescription, definePrompt, defineTool, denied, dispatchRealtimeToolCall, fieldRulesToZod, filterResourcesForMcp, getOrgId, getUserId, guard, hasOrg, invokeController, isAuthenticated, isOrg, mcpHandlerAdapter, mcpPlugin, permissionDeniedResult, requireAuth, requireOrg, requireOrgId, requireRole, resolveCrudDescription, resolveToolCollisions, resourceToTools, toCallToolError, toCallToolResult, toCallToolSuccess };
+export { type AuthRef, type BetterAuthHandler, type BuildMcpToolsFromBridgesOptions, type CallToolResult, type CreateMcpAuthFromBetterAuthApiKeyOptions, type CreateMcpServerConfig, type CrudDescriptionMeta, type CrudDescriptionOverride, type CrudOperation, type DefinePromptConfig, type DefineToolConfig, type DispatchOptions, type FieldRuleEntry, type FieldRulesToZodOptions, type InvokeControllerOptions, type McpAuthResolver, type McpAuthResult, type McpBridge, type McpContextExtras, type McpGuard, type McpOperation, type McpPluginOptions, type McpResourceConfig, type McpServerInstance, type PromptDefinition, type PromptResult, type RealtimeToolCall, type RealtimeToolResponse, type ResourceToToolsConfig, type ToolAnnotations, type ToolContext, type ToolDefinition, type ToolInputSchema, createMcpServer, resolveToolCollisions };