@classytic/arc 2.41.1 → 2.44.0

package/dist/plugins/index.d.mts

@@ -1,10 +1,10 @@
 
-import { t as AnyRecord } from "../base-CxrV1LmG.mjs";
-import { At as RouteDefinition, J as PresetHook, Q as MiddlewareConfig, et as RouteSchemaOptions } from "../index-DHbyPo5j.mjs";
+import { t as AnyRecord } from "../base-CZyixEQR.mjs";
+import { Et as RouteDefinition, J as MiddlewareConfig, U as PresetHook, X as RouteSchemaOptions } from "../index-WH7xgvxS.mjs";
 import { i as errorHandlerPlugin, n as ErrorMapper, r as defaultIsDuplicateKeyError, t as ErrorHandlerOptions } from "../errorHandler--4rSMMvq.mjs";
-import { _ as HealthCheck, b as healthPlugin, f as ScheduleDefinition, g as schedulesPlugin, h as _default$8, m as SchedulesPluginOptions, p as ScheduleStats, v as HealthOptions, y as _default$3 } from "../types-DfVDvkdP.mjs";
-import { a as arcCorePlugin, i as _default, n as ArcCorePluginOptions, r as PluginMeta, t as ArcCore } from "../fastify-augmentation-Cq2nHVaW.mjs";
-import { C as gracefulShutdownPlugin, S as _default$2, _ as CachingRule, a as MetricsCollector, b as GracefulShutdownOptions, c as metricsPlugin, d as _default$6, f as realtimePlugin, g as CachingOptions, h as ssePlugin, i as MetricEntry, l as ChangeOperation, m as _default$9, n as _default$10, o as MetricsOptions, p as SSEOptions, r as versioningPlugin, s as _default$4, t as VersioningOptions, u as RealtimeOptions, v as _default$1, x as ShutdownState, y as cachingPlugin } from "../versioning-D6JIK8Tk.mjs";
+import { C as _default$8, E as _default$3, S as SchedulesPluginOptions, T as HealthOptions, b as ScheduleDefinition, w as HealthCheck, x as ScheduleStats } from "../types-BJ-2XqVF.mjs";
+import { i as _default, n as ArcCorePluginOptions, r as PluginMeta, t as ArcCore } from "../fastify-augmentation-DRlCIWE9.mjs";
+import { _ as _default$2, a as MetricsOptions, c as RealtimeOptions, d as _default$9, f as CachingOptions, g as ShutdownState, h as GracefulShutdownOptions, i as MetricsCollector, l as _default$6, m as _default$1, n as _default$10, o as _default$4, p as CachingRule, r as MetricEntry, s as ChangeOperation, t as VersioningOptions, u as SSEOptions } from "../versioning-Bsb51gGT.mjs";
 import { t as TracingOptions } from "../tracing-Dro5eH6j.mjs";
 import { PaginatedResult } from "@classytic/repo-core/pagination";
 import { FastifyInstance, FastifyPluginAsync } from "fastify";
@@ -19,7 +19,7 @@ interface PluginResourceResult {
   /** Schema options to merge */
   schemaOptions?: RouteSchemaOptions;
 }
-interface CreatePluginDefinition<TRootOpts extends AnyRecord = AnyRecord, TResourceOpts extends AnyRecord = AnyRecord> {
+interface CreatePluginDefinition<TRootOpts extends object = AnyRecord, TResourceOpts extends object = AnyRecord> {
   /**
    * Global setup function. Called once when the plugin is registered on the Fastify instance.
    * Use this for database connections, decorators, shared state, etc.
@@ -36,7 +36,7 @@ interface CreatePluginDefinition<TRootOpts extends AnyRecord = AnyRecord, TResou
    */
   forResource?: (opts: TResourceOpts) => PluginResourceResult;
 }
-interface ArcPlugin<TRootOpts extends AnyRecord = AnyRecord, TResourceOpts extends AnyRecord = AnyRecord> {
+interface ArcPlugin<TRootOpts extends object = AnyRecord, TResourceOpts extends object = AnyRecord> {
   /** Plugin name */
   readonly name: string;
   /**
@@ -57,7 +57,7 @@ interface ArcPlugin<TRootOpts extends AnyRecord = AnyRecord, TResourceOpts exten
  * @param definition - Plugin setup functions
  * @returns ArcPlugin with forRoot() and forResource() methods
  */
-declare function createPlugin<TRootOpts extends AnyRecord = AnyRecord, TResourceOpts extends AnyRecord = AnyRecord>(name: string, definition: CreatePluginDefinition<TRootOpts, TResourceOpts>): ArcPlugin<TRootOpts, TResourceOpts>;
+export declare function createPlugin<TRootOpts extends object = AnyRecord, TResourceOpts extends object = AnyRecord>(name: string, definition: CreatePluginDefinition<TRootOpts, TResourceOpts>): ArcPlugin<TRootOpts, TResourceOpts>;
 //#endregion
 //#region src/plugins/pressure.d.ts
 /**
@@ -95,6 +95,11 @@ interface PressureOptions {
   thresholds?: PressureThresholds;
   /** Sampling cadence in ms. Default 1000. */
   intervalMs?: number;
+  /**
+   * How long one signal read may take before it counts as "cannot measure" (reported as 0, like a
+   * throwing reader). A stuck read is never restarted while pending. Default: `intervalMs`.
+   */
+  readTimeoutMs?: number;
   /** Include the built-in event-loop-utilisation signal. Default true. */
   eventLoopUtilization?: boolean;
   /** Fired when the state CHANGES — not on every sample. */
@@ -136,7 +141,6 @@ declare module "fastify" {
     pressure: PressureApi;
   }
 }
-declare const pressurePlugin: FastifyPluginAsync<PressureOptions>;
 /**
  * `fp()`-wrapped so `fastify.pressure` is visible to the whole app rather than
  * trapped in this plugin's encapsulation context — the named export above is
@@ -172,7 +176,7 @@ declare module "fastify" {
   }
 }
 declare function replyHelpersPluginFn(fastify: FastifyInstance): Promise<void>;
-declare const replyHelpersPlugin: typeof replyHelpersPluginFn;
+export declare const replyHelpersPlugin: typeof replyHelpersPluginFn;
 //#endregion
 //#region src/plugins/requestId.d.ts
 interface RequestIdOptions {
@@ -210,17 +214,16 @@ declare module "fastify" {
  * (repeated headers) are rejected outright — a client sending multiple
  * request-id headers is not tracing in good faith.
  */
-declare function sanitizeRequestId(value: unknown): string | undefined;
+export declare function sanitizeRequestId(value: unknown): string | undefined;
 /**
  * Build a Fastify `genReqId` function: adopt a sanitized incoming request-id
  * header, or generate one. Wire this into the `Fastify()` constructor so
  * `request.id`, `request.log`'s `reqId` binding, and the echoed response
  * header all agree — `createApp` does this automatically.
  */
-declare function createRequestIdGenerator(opts?: Pick<RequestIdOptions, "header" | "generator">): (req: {
+export declare function createRequestIdGenerator(opts?: Pick<RequestIdOptions, "header" | "generator">): (req: {
   headers: Record<string, string | string[] | undefined>;
 }) => string;
-declare const requestIdPlugin: FastifyPluginAsync<RequestIdOptions>;
 declare const _default$7: FastifyPluginAsync<RequestIdOptions>;
 //#endregion
-export { type ArcCore, type ArcCorePluginOptions, type ArcPlugin, type CachingOptions, type CachingRule, type ChangeOperation, type CreatePluginDefinition, type ErrorHandlerOptions, type ErrorMapper, type GracefulShutdownOptions, type HealthCheck, type HealthOptions, type MetricEntry, type MetricsCollector, type MetricsOptions, type PluginMeta, type PluginResourceResult, type PressureApi, type PressureOptions, type PressureSignal, type PressureSnapshot, type PressureState, type PressureThresholds, type RealtimeOptions, type RequestIdOptions, type SSEOptions, type ScheduleDefinition, type ScheduleStats, type SchedulesPluginOptions, type ShutdownState, type TracingOptions, type VersioningOptions, _default as arcCorePlugin, arcCorePlugin as arcCorePluginFn, _default$1 as cachingPlugin, cachingPlugin as cachingPluginFn, createPlugin, createRequestIdGenerator, defaultIsDuplicateKeyError, errorHandlerPlugin, errorHandlerPlugin as errorHandlerPluginFn, _default$2 as gracefulShutdownPlugin, gracefulShutdownPlugin as gracefulShutdownPluginFn, _default$3 as healthPlugin, healthPlugin as healthPluginFn, _default$4 as metricsPlugin, metricsPlugin as metricsPluginFn, _default$5 as pressurePlugin, pressurePlugin as pressurePluginFn, _default$6 as realtimePlugin, realtimePlugin as realtimePluginFn, replyHelpersPlugin, _default$7 as requestIdPlugin, requestIdPlugin as requestIdPluginFn, sanitizeRequestId, _default$8 as schedulesPlugin, schedulesPlugin as schedulesPluginFn, _default$9 as ssePlugin, ssePlugin as ssePluginFn, _default$10 as versioningPlugin, versioningPlugin as versioningPluginFn };
+export { type ArcCore, type ArcCorePluginOptions, type ArcPlugin, type CachingOptions, type CachingRule, type ChangeOperation, type CreatePluginDefinition, type ErrorHandlerOptions, type ErrorMapper, type GracefulShutdownOptions, type HealthCheck, type HealthOptions, type MetricEntry, type MetricsCollector, type MetricsOptions, type PluginMeta, type PluginResourceResult, type PressureApi, type PressureOptions, type PressureSignal, type PressureSnapshot, type PressureState, type PressureThresholds, type RealtimeOptions, type RequestIdOptions, type SSEOptions, type ScheduleDefinition, type ScheduleStats, type SchedulesPluginOptions, type ShutdownState, type TracingOptions, type VersioningOptions, _default as arcCorePlugin, _default$1 as cachingPlugin, defaultIsDuplicateKeyError, errorHandlerPlugin, _default$2 as gracefulShutdownPlugin, _default$3 as healthPlugin, _default$4 as metricsPlugin, _default$5 as pressurePlugin, _default$6 as realtimePlugin, _default$7 as requestIdPlugin, _default$8 as schedulesPlugin, _default$9 as ssePlugin, _default$10 as versioningPlugin };

package/dist/plugins/index.mjs

@@ -1,20 +1,20 @@
-/*! @classytic/arc v2.41.1 | MIT | https://classytic.com */
-import { p as MUTATION_OPERATIONS } from "../constants-D5Ubn1fe.mjs";
-import { arcLog } from "../logger/index.mjs";
-import { c as getOrgId } from "../types-CgenB1gv.mjs";
-import { n as requestContext } from "../requestContext-cDkAUr-P.mjs";
-import { t as hasEvents } from "../typeGuards-BLjPgVBm.mjs";
-import { t as HookSystem } from "../HookSystem-CMF94SEA.mjs";
-import { t as ResourceRegistry } from "../ResourceRegistry-MGpXoxHZ.mjs";
-import { a as requestIdPlugin, i as createRequestIdGenerator, n as health_default, o as requestId_default, s as sanitizeRequestId, t as healthPlugin } from "../health-ZRHeDHXH.mjs";
-import { n as caching_default, t as cachingPlugin } from "../caching-DbCBxlgw.mjs";
-import { n as errorHandlerPlugin, t as defaultIsDuplicateKeyError } from "../errorHandler-D1GHKGlV.mjs";
-import { n as metrics_default, t as metricsPlugin } from "../metrics-NMsmpRmY.mjs";
-import { n as realtime_default, t as realtimePlugin } from "../realtime-8tIQWZz4.mjs";
-import { t as replyHelpersPlugin } from "../replyHelpers-CNdvMfM4.mjs";
-import { n as schedules_default, t as schedulesPlugin } from "../schedules-j6uXXAeJ.mjs";
-import { n as sse_default, t as ssePlugin } from "../sse-BeqVKQKu.mjs";
-import { n as versioning_default, t as versioningPlugin } from "../versioning-DKkT4hNJ.mjs";
+/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
+import { m as MUTATION_OPERATIONS } from "../constants-B2QHb6u6.mjs";
+import { t as arcLog } from "../logger-D4V1zGLI.mjs";
+import { c as getOrgId } from "../types-fvO6Ovzx.mjs";
+import { n as requestContext } from "../requestContext-C10UeFe5.mjs";
+import { t as hasEvents } from "../typeGuards-kEaP_WmO.mjs";
+import { t as HookSystem } from "../HookSystem-yjEgn7Cm.mjs";
+import { t as ResourceRegistry } from "../ResourceRegistry-DJxHUpE4.mjs";
+import { c as createRequestIdGenerator, l as requestId_default, n as health_default, u as sanitizeRequestId } from "../health-CrqUp3sz.mjs";
+import { t as caching_default } from "../caching-Drp68DIS.mjs";
+import { n as errorHandlerPlugin, t as defaultIsDuplicateKeyError } from "../errorHandler-COHw3N1b.mjs";
+import { t as metrics_default } from "../metrics-DsZrvnpB.mjs";
+import { t as realtime_default } from "../realtime-xyubMKSB.mjs";
+import { t as replyHelpersPlugin } from "../replyHelpers-Bnc6lJyy.mjs";
+import { t as schedules_default } from "../schedules-CKTs5ys8.mjs";
+import { t as sse_default } from "../sse-BzJFPX_1.mjs";
+import { t as versioning_default } from "../versioning-CHhL9P3o.mjs";
 import fp from "fastify-plugin";
 import { performance as performance$1 } from "node:perf_hooks";
 //#region src/core/arcCorePlugin.ts
@@ -106,7 +106,7 @@ const arcCorePlugin = async (fastify, opts = {}) => {
 	});
 	fastify.addHook("onClose", async () => {
 		actualHookSystem.clear();
-		actualRegistry._clear();
+		actualRegistry.reset();
 	});
 	fastify.log?.debug?.("Arc core plugin enabled (instance-scoped hooks & registry)");
 };
@@ -277,13 +277,30 @@ const pressurePlugin = async (fastify, options) => {
 		worst: void 0,
 		signals: {}
 	};
+	const intervalMs = options.intervalMs ?? 1e3;
+	const readTimeoutMs = options.readTimeoutMs ?? intervalMs;
+	/** A signal whose read has not settled is not read again — the next sample waits on the same read. */
+	const pendingReads = /* @__PURE__ */ new Map();
+	const readSignal = (signal) => {
+		let read = pendingReads.get(signal.name);
+		if (!read) {
+			read = Promise.resolve().then(() => signal.read()).finally(() => pendingReads.delete(signal.name));
+			pendingReads.set(signal.name, read);
+		}
+		let timer;
+		const timeout = new Promise((_, reject) => {
+			timer = setTimeout(() => reject(/* @__PURE__ */ new Error(`read exceeded ${readTimeoutMs}ms`)), readTimeoutMs);
+			timer.unref?.();
+		});
+		return Promise.race([read, timeout]).finally(() => clearTimeout(timer));
+	};
 	async function sample() {
 		const values = {};
 		let worst;
 		for (const signal of signals) {
 			let value = 0;
 			try {
-				value = clamp(await signal.read());
+				value = clamp(await readSignal(signal));
 				broken.delete(signal.name);
 			} catch (error) {
 				if (!broken.has(signal.name)) {
@@ -317,9 +334,14 @@ const pressurePlugin = async (fastify, options) => {
 			options.onStateChange?.(next, snapshot);
 		}
 	}
+	let sampling = false;
 	const timer = setInterval(() => {
-		sample();
-	}, options.intervalMs ?? 1e3);
+		if (sampling) return;
+		sampling = true;
+		sample().finally(() => {
+			sampling = false;
+		});
+	}, intervalMs);
 	timer.unref?.();
 	fastify.addHook("onClose", async () => clearInterval(timer));
 	fastify.decorate("pressure", {
@@ -368,4 +390,4 @@ var pressure_default = fp(pressurePlugin, {
 	fastify: "5.x"
 });
 //#endregion
-export { arcCorePlugin_default as arcCorePlugin, arcCorePlugin as arcCorePluginFn, caching_default as cachingPlugin, cachingPlugin as cachingPluginFn, createPlugin, createRequestIdGenerator, defaultIsDuplicateKeyError, errorHandlerPlugin, errorHandlerPlugin as errorHandlerPluginFn, gracefulShutdown_default as gracefulShutdownPlugin, gracefulShutdownPlugin as gracefulShutdownPluginFn, health_default as healthPlugin, healthPlugin as healthPluginFn, metrics_default as metricsPlugin, metricsPlugin as metricsPluginFn, pressure_default as pressurePlugin, pressurePlugin as pressurePluginFn, realtime_default as realtimePlugin, realtimePlugin as realtimePluginFn, replyHelpersPlugin, requestId_default as requestIdPlugin, requestIdPlugin as requestIdPluginFn, sanitizeRequestId, schedules_default as schedulesPlugin, schedulesPlugin as schedulesPluginFn, sse_default as ssePlugin, ssePlugin as ssePluginFn, versioning_default as versioningPlugin, versioningPlugin as versioningPluginFn };
+export { arcCorePlugin_default as arcCorePlugin, caching_default as cachingPlugin, createPlugin, createRequestIdGenerator, defaultIsDuplicateKeyError, errorHandlerPlugin, gracefulShutdown_default as gracefulShutdownPlugin, health_default as healthPlugin, metrics_default as metricsPlugin, pressure_default as pressurePlugin, realtime_default as realtimePlugin, replyHelpersPlugin, requestId_default as requestIdPlugin, sanitizeRequestId, schedules_default as schedulesPlugin, sse_default as ssePlugin, versioning_default as versioningPlugin };

package/dist/plugins/response-cache.d.mts

@@ -1,13 +1,13 @@
 
 import { FastifyPluginAsync, FastifyRequest } from "fastify";
 //#region src/plugins/response-cache.d.ts
-interface ResponseCacheRule {
+export interface ResponseCacheRule {
   /** Path prefix to match (e.g., '/api/products') */
   match: string;
   /** TTL in seconds for this path (0 = don't cache) */
   ttl: number;
 }
-interface ResponseCacheOptions {
+export interface ResponseCacheOptions {
   /** Maximum number of cached entries (default: 500). LRU eviction when exceeded. */
   maxEntries?: number;
   /** Default TTL in seconds (default: 30). Set to 0 to require explicit rules. */
@@ -46,7 +46,7 @@ interface ResponseCacheOptions {
     patterns?: Record<string, string[]>;
   };
 }
-interface ResponseCacheStats {
+export interface ResponseCacheStats {
   entries: number;
   maxEntries: number;
   hits: number;
@@ -85,6 +85,5 @@ declare module "fastify" {
     __arcCacheTTL?: number;
   }
 }
-declare const responseCachePlugin: FastifyPluginAsync<ResponseCacheOptions>;
-//#endregion
-export { ResponseCacheOptions, ResponseCacheRule, ResponseCacheStats, responseCachePlugin };
+export declare const responseCachePlugin: FastifyPluginAsync<ResponseCacheOptions>;
+//#endregion

package/dist/plugins/response-cache.mjs

@@ -1,6 +1,7 @@
-/*! @classytic/arc v2.41.1 | MIT | https://classytic.com */
-import { n as declareRuntimeCapability } from "../runtimeCapabilities-CkhS6jn6.mjs";
-import { t as hasEvents } from "../typeGuards-BLjPgVBm.mjs";
+/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
+import { n as declareRuntimeCapability } from "../runtimeCapabilities-DIMKMV2G.mjs";
+import { t as hasEvents } from "../typeGuards-kEaP_WmO.mjs";
+import { n as evictToSize, r as touch, t as assertCapacity } from "../boundedMap-DWiKW7lP.mjs";
 import fp from "fastify-plugin";
 //#region src/plugins/response-cache.ts
 /**
@@ -28,22 +29,14 @@ var LRUCache = class {
 			this.misses++;
 			return null;
 		}
-		this.cache.delete(key);
-		this.cache.set(key, entry);
+		touch(this.cache, key, entry);
 		this.hits++;
 		return entry;
 	}
 	set(key, entry) {
 		if (this.isPrefixLocked(key)) return;
-		if (this.cache.has(key)) this.cache.delete(key);
-		while (this.cache.size >= this.maxEntries) {
-			const firstKey = this.cache.keys().next().value;
-			if (firstKey !== void 0) {
-				this.cache.delete(firstKey);
-				this.evictions++;
-			}
-		}
-		this.cache.set(key, entry);
+		touch(this.cache, key, entry);
+		this.evictions += evictToSize(this.cache, this.maxEntries);
 	}
 	/** Invalidate entries matching a path prefix and lock it from caching to allow DB replicas to catch up */
 	invalidatePrefix(prefix, jitterMs = 1500) {
@@ -95,6 +88,7 @@ const responseCachePluginImpl = async (fastify, opts = {}) => {
 		"DELETE"
 	], xCacheHeader = true, statsPath = null, keyFn } = opts;
 	if (maxEntries > 5e3) fastify.log.warn(`[arc] responseCache maxEntries=${maxEntries}: prefix invalidation scans all entries synchronously on every mutating request — expect event-loop pauses at this size. This cache is an instance-local micro-cache; for large shared caching use the queryCache with a Redis store instead.`);
+	assertCapacity("responseCache maxEntries", maxEntries);
 	const cache = new LRUCache(maxEntries);
 	const invalidateMethods = new Set(invalidateOn.map((m) => m.toUpperCase()));
 	declareRuntimeCapability(fastify, {

package/dist/plugins/tracing-entry.mjs

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.41.1 | MIT | https://classytic.com */
+/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
 import { createRequire } from "node:module";
 import fp from "fastify-plugin";
 //#region src/plugins/tracing.ts
@@ -59,7 +59,7 @@ try {
 function createTracerProvider(options) {
 	if (!isAvailable || !NodeTracerProvider || !BatchSpanProcessor || !OTLPTraceExporter) return null;
 	const { serviceName = "@classytic/arc", serviceVersion, exporterUrl = "http://localhost:4318/v1/traces" } = options;
-	const resolvedVersion = serviceVersion ?? "2.41.1";
+	const resolvedVersion = serviceVersion ?? "2.44.0";
 	const exporter = new OTLPTraceExporter({ url: exporterUrl });
 	const provider = new NodeTracerProvider({ resource: { attributes: {
 		"service.name": serviceName,

package/dist/{pluralize-CXWZIzTv.mjs → pluralize-COUNYo3d.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.41.1 | MIT | https://classytic.com */
+/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
 //#region src/utils/pluralize.ts
 /**
 * Lightweight English pluralization for the Arc CLI.

package/dist/presets/filesUpload.d.mts

@@ -1,15 +1,15 @@
 
 import { i as RequestScope } from "../types-Ddl9OjmE.mjs";
-import { l as PermissionCheck } from "../base-CxrV1LmG.mjs";
-import { Y as PresetResult } from "../index-DHbyPo5j.mjs";
+import { l as PermissionCheck } from "../base-CZyixEQR.mjs";
+import { W as PresetResult } from "../index-WH7xgvxS.mjs";
 import { a as StorageReadResult, i as StorageReadRange, n as StorageContext, o as StorageUploadInput, r as StorageFile, t as Storage } from "../storage-Cx9Sz3Ou.mjs";
 //#region src/presets/filesUpload.d.ts
-interface FilesUploadPresetRoutes {
+export interface FilesUploadPresetRoutes {
   upload?: boolean;
   read?: boolean;
   delete?: boolean;
 }
-interface FilesUploadPresetPermissions {
+export interface FilesUploadPresetPermissions {
   upload?: PermissionCheck;
   read?: PermissionCheck;
   delete?: PermissionCheck;
@@ -27,8 +27,8 @@ interface FilesUploadPresetPermissions {
  * - function: custom policy. Return a string to *transform* the filename,
  *   `false` to reject (triggers `ValidationError`), or `true`/`void` to accept.
  */
-type FilenamePolicy = boolean | "*" | ((filename: string) => string | boolean | undefined);
-interface FilesUploadPresetOptions {
+export type FilenamePolicy = boolean | "*" | ((filename: string) => string | boolean | undefined);
+export interface FilesUploadPresetOptions {
   /** Any implementation of the `Storage` interface. App owns it. */
   storage: Storage;
   /** Multipart form field name. Default: `'file'`. */
@@ -66,6 +66,6 @@ interface FilesUploadPresetOptions {
  * envelope. Upload still returns the standard `{ success: true, data }`
  * envelope manually because the response is structured metadata, not bytes.
  */
-declare function filesUploadPreset(options: FilesUploadPresetOptions): PresetResult;
+export declare function filesUploadPreset(options: FilesUploadPresetOptions): PresetResult;
 //#endregion
-export { FilenamePolicy, FilesUploadPresetOptions, FilesUploadPresetPermissions, FilesUploadPresetRoutes, type Storage, type StorageContext, type StorageFile, type StorageReadRange, type StorageReadResult, type StorageUploadInput, filesUploadPreset };
+export type { Storage, StorageContext, StorageFile, StorageReadRange, StorageReadResult, StorageUploadInput };

package/dist/presets/filesUpload.mjs

@@ -1,8 +1,8 @@
-/*! @classytic/arc v2.41.1 | MIT | https://classytic.com */
-import { i as NotFoundError, u as ValidationError } from "../errors-BH7YU_9O.mjs";
-import { c as getOrgId, g as getUserId } from "../types-CgenB1gv.mjs";
-import { B as requireAuth, F as allowPublic } from "../permissions-D8TBH44E.mjs";
-import { t as multipartBody } from "../multipartBody-DtRWM6_U.mjs";
+/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
+import { i as NotFoundError, u as ValidationError } from "../errors-CW4anJBy.mjs";
+import { c as getOrgId, g as getUserId } from "../types-fvO6Ovzx.mjs";
+import { B as requireAuth, F as allowPublic } from "../permissions-C5ijIz5Q.mjs";
+import { t as multipartBody } from "../multipartBody-Cc7eZ9cq.mjs";
 //#region src/presets/filesUpload.ts
 const DEFAULT_FIELD_NAME = "file";
 const DEFAULT_MAX_FILE_SIZE = 10485760;

package/dist/presets/index.d.mts

@@ -1,9 +1,31 @@
 
-import { t as AnyRecord } from "../base-CxrV1LmG.mjs";
-import { Fn as IControllerResponse, In as IRequestContext, U as ResourceConfig, Y as PresetResult, d as PaginationResult } from "../index-DHbyPo5j.mjs";
+import { t as AnyRecord } from "../base-CZyixEQR.mjs";
+import { Hn as IRequestContext, L as ResourceConfig, Vn as IControllerResponse, W as PresetResult, i as PaginationResult } from "../index-WH7xgvxS.mjs";
 import { FilesUploadPresetOptions, FilesUploadPresetPermissions, FilesUploadPresetRoutes, filesUploadPreset } from "./filesUpload.mjs";
-import { MultiTenantOptions, TenantFieldSpec, multiTenantPreset } from "./multiTenant.mjs";
+import { n as multiTenantPreset, r as TenantFieldSpec, t as MultiTenantOptions } from "../multiTenant-CAtYlW6H.mjs";
 import { SearchHandler, SearchPresetOptions, SearchRouteConfig, searchPreset } from "./search.mjs";
+//#region src/presets/audited.d.ts
+interface AuditedPresetOptions {
+  /** Field name for creator (default: 'createdBy') */
+  createdByField?: string;
+  /** Field name for updater (default: 'updatedBy') */
+  updatedByField?: string;
+}
+/**
+ * Audited preset - adds createdBy/updatedBy tracking
+ */
+export declare function auditedPreset(options?: AuditedPresetOptions): PresetResult;
+//#endregion
+//#region src/presets/bulk.d.ts
+type BulkOperation = "createMany" | "updateMany" | "deleteMany";
+interface BulkPresetOptions {
+  /** Which bulk operations to enable (default: all three) */
+  operations?: BulkOperation[];
+  /** Max items per bulk create (default: 1000) */
+  maxCreateItems?: number;
+}
+export declare function bulkPreset(opts?: BulkPresetOptions): PresetResult;
+//#endregion
 //#region src/presets/ownedByUser.d.ts
 interface OwnedByUserOptions {
   ownerField?: string;
@@ -20,44 +42,22 @@ interface OwnedByUserOptions {
    */
   missingOwner?: "deny" | "allow";
 }
-declare function ownedByUserPreset(options?: OwnedByUserOptions): PresetResult;
+export declare function ownedByUserPreset(options?: OwnedByUserOptions): PresetResult;
 //#endregion
 //#region src/presets/slugLookup.d.ts
 interface SlugLookupOptions {
   slugField?: string;
 }
-declare function slugLookupPreset(options?: SlugLookupOptions): PresetResult;
+export declare function slugLookupPreset(options?: SlugLookupOptions): PresetResult;
 //#endregion
 //#region src/presets/softDelete.d.ts
-declare function softDeletePreset(): PresetResult;
-//#endregion
-//#region src/presets/audited.d.ts
-interface AuditedPresetOptions {
-  /** Field name for creator (default: 'createdBy') */
-  createdByField?: string;
-  /** Field name for updater (default: 'updatedBy') */
-  updatedByField?: string;
-}
-/**
- * Audited preset - adds createdBy/updatedBy tracking
- */
-declare function auditedPreset(options?: AuditedPresetOptions): PresetResult;
-//#endregion
-//#region src/presets/bulk.d.ts
-type BulkOperation = "createMany" | "updateMany" | "deleteMany";
-interface BulkPresetOptions {
-  /** Which bulk operations to enable (default: all three) */
-  operations?: BulkOperation[];
-  /** Max items per bulk create (default: 1000) */
-  maxCreateItems?: number;
-}
-declare function bulkPreset(opts?: BulkPresetOptions): PresetResult;
+export declare function softDeletePreset(): PresetResult;
 //#endregion
 //#region src/presets/tree.d.ts
 interface TreeOptions {
   parentField?: string;
 }
-declare function treePreset(options?: TreeOptions): PresetResult;
+export declare function treePreset(options?: TreeOptions): PresetResult;
 //#endregion
 //#region src/presets/types.d.ts
 /**
@@ -267,30 +267,25 @@ type UnionToIntersection<U> = (U extends unknown ? (x: U) => void : never) exten
 type IPresetController<TDoc = unknown, TPresets extends keyof PresetControllerContracts<TDoc> = never> = UnionToIntersection<PresetControllerContracts<TDoc>[TPresets]>;
 //#endregion
 //#region src/presets/index.d.ts
-/**
- * Convenience alias for multiTenantPreset with public list/get routes
- * Equivalent to: multiTenantPreset({ allowPublic: ['list', 'get'] })
- */
-declare const flexibleMultiTenantPreset: (options?: Omit<MultiTenantOptions, "allowPublic">) => PresetResult;
 type PresetFactory = (options?: AnyRecord) => PresetResult;
 /**
  * Get preset by name with options
  */
-declare function getPreset(nameOrConfig: string | {
+export declare function getPreset(nameOrConfig: string | {
   name: string;
   [key: string]: unknown;
 }): PresetResult;
 /**
  * Register a custom preset
  */
-declare function registerPreset(name: string, factory: PresetFactory, options?: {
+export declare function registerPreset(name: string, factory: PresetFactory, options?: {
   override?: boolean;
 }): void;
 /**
  * Get all available preset names
  */
-declare function getAvailablePresets(): string[];
-type PresetInput = string | PresetResult | {
+export declare function getAvailablePresets(): string[];
+export type PresetInput = string | PresetResult | {
   name: string;
   [key: string]: unknown;
 };
@@ -298,6 +293,6 @@ type PresetInput = string | PresetResult | {
  * Apply presets to resource config.
  * Validates preset combinations for conflicts before merging.
  */
-declare function applyPresets<TDoc = AnyRecord>(config: ResourceConfig<TDoc>, presets?: PresetInput[]): ResourceConfig<TDoc>;
+export declare function applyPresets<TDoc = AnyRecord>(config: ResourceConfig<TDoc>, presets?: PresetInput[]): ResourceConfig<TDoc>;
 //#endregion
-export { type AuditedPresetOptions, type BulkOperation, type BulkPresetOptions, type FilesUploadPresetOptions, type FilesUploadPresetPermissions, type FilesUploadPresetRoutes, type IAuditedPreset, type IMultiTenantPreset, type IOwnedByUserPreset, type IPresetController, type ISlugLookupController, type ISoftDeleteController, type ITreeController, type MultiTenantOptions, type OwnedByUserOptions, type SearchHandler, type SearchPresetOptions, type SearchRouteConfig, type SlugLookupOptions, type TenantFieldSpec, type TreeOptions, applyPresets, auditedPreset, bulkPreset, filesUploadPreset, flexibleMultiTenantPreset, getAvailablePresets, getPreset, multiTenantPreset, ownedByUserPreset, registerPreset, searchPreset, slugLookupPreset, softDeletePreset, treePreset };
+export { type AuditedPresetOptions, type BulkOperation, type BulkPresetOptions, type FilesUploadPresetOptions, type FilesUploadPresetPermissions, type FilesUploadPresetRoutes, type IAuditedPreset, type IMultiTenantPreset, type IOwnedByUserPreset, type IPresetController, type ISlugLookupController, type ISoftDeleteController, type ITreeController, type MultiTenantOptions, type OwnedByUserOptions, type SearchHandler, type SearchPresetOptions, type SearchRouteConfig, type SlugLookupOptions, type TenantFieldSpec, type TreeOptions, filesUploadPreset, multiTenantPreset, searchPreset };

package/dist/presets/index.mjs

@@ -1,6 +1,6 @@
-/*! @classytic/arc v2.41.1 | MIT | https://classytic.com */
-import { multiTenantPreset } from "./multiTenant.mjs";
-import { a as registerPreset, c as auditedPreset, d as ownedByUserPreset, i as getPreset, l as softDeletePreset, n as flexibleMultiTenantPreset, o as treePreset, r as getAvailablePresets, s as bulkPreset, t as applyPresets, u as slugLookupPreset } from "../presets-ZJSPgmT2.mjs";
+/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
+import { a as treePreset, c as ownedByUserPreset, i as registerPreset, l as bulkPreset, n as getAvailablePresets, o as softDeletePreset, r as getPreset, s as slugLookupPreset, t as applyPresets, u as auditedPreset } from "../presets-CONf2Qem.mjs";
 import { filesUploadPreset } from "./filesUpload.mjs";
+import { multiTenantPreset } from "./multiTenant.mjs";
 import { searchPreset } from "./search.mjs";
-export { applyPresets, auditedPreset, bulkPreset, filesUploadPreset, flexibleMultiTenantPreset, getAvailablePresets, getPreset, multiTenantPreset, ownedByUserPreset, registerPreset, searchPreset, slugLookupPreset, softDeletePreset, treePreset };
+export { applyPresets, auditedPreset, bulkPreset, filesUploadPreset, getAvailablePresets, getPreset, multiTenantPreset, ownedByUserPreset, registerPreset, searchPreset, slugLookupPreset, softDeletePreset, treePreset };

package/dist/presets/multiTenant.d.mts

@@ -1,108 +1,3 @@
 
-import { X as CrudRouteKey, Y as PresetResult } from "../index-DHbyPo5j.mjs";
-//#region src/presets/multiTenant.d.ts
-/**
- * One tenant dimension for multi-field filtering. Discriminated by source:
- * - `type: 'org'`  → reads `getOrgId(scope)`
- * - `type: 'team'` → reads `getTeamId(scope)`
- * - `contextKey`   → reads `getScopeContext(scope, contextKey)` (any custom dimension)
- */
-type TenantFieldSpec = {
-  field: string;
-  type: "org";
-} | {
-  field: string;
-  type: "team";
-} | {
-  field: string;
-  contextKey: string;
-};
-interface MultiTenantOptions {
-  /**
-   * Single-field form: name of the database field to filter by.
-   * Reads `getOrgId(scope)` as the value source.
-   *
-   * Mutually exclusive with `tenantFields` — pass one or the other, not both.
-   *
-   * @default 'organizationId'
-   */
-  tenantField?: string;
-  /**
-   * Multi-field form (2.7.1+): list of tenant dimensions to filter by in
-   * lockstep. Use this when a resource is scoped by more than just
-   * organization — e.g. organization + branch, organization + project,
-   * or organization + team + workspace.
-   *
-   * Each entry is a discriminated `TenantFieldSpec` declaring where the
-   * value comes from. Use `type: 'org'` / `type: 'team'` for built-in scope
-   * fields, or `contextKey: '...'` to read from `scope.context` (set by
-   * your auth function).
-   *
-   * Fail-closed: if any required dimension is missing, the request is
-   * rejected. Elevated scopes apply whatever resolves and skip the rest.
-   *
-   * Mutually exclusive with `tenantField`.
-   *
-   * @example
-   * ```typescript
-   * multiTenantPreset({
-   *   tenantFields: [
-   *     { field: 'organizationId', type: 'org' },
-   *     { field: 'branchId',       contextKey: 'branchId' },
-   *   ],
-   * })
-   * ```
-   */
-  tenantFields?: readonly TenantFieldSpec[];
-  /**
-   * Routes that allow public access (no auth required)
-   * When a route is in this array:
-   * - If no org context: allow through without filtering (public data)
-   * - If org context present: require auth and apply filter
-   *
-   * @default [] (strict mode - all routes require auth)
-   * @example
-   * multiTenantPreset({ allowPublic: ['list', 'get'] })
-   */
-  allowPublic?: CrudRouteKey[];
-  /**
-   * Reads that are NOT scoped to a tenant at all — a marketplace listing.
-   *
-   * `allowPublic` answers "may an anonymous caller reach this route?". That is a different
-   * question from "is this listing scoped to a tenant?", and until this option there was no way
-   * to answer the second one with "no". An `allowPublic` route still filters by the caller's
-   * organization whenever they have one, and a signed-in user of a multi-org product ALWAYS has
-   * one, because choosing an organization writes it onto the session. So a cross-tenant catalog
-   * silently became single-tenant the moment one of its own sellers browsed it: the same URL,
-   * with no header and no query parameter to explain the difference, returned a different world
-   * depending on who was asking.
-   *
-   * The only escape was to drop this preset from the resource entirely, which also drops tenant
-   * INJECTION on create/update — the thing that stops a member moving a document into another
-   * organization. Trading a write guarantee for a read behaviour is not a real choice.
-   *
-   * Listed routes get no tenant middleware: no filter, and nothing stashed for the repo layer.
-   * Everything else keeps its filter, so writes are unaffected.
-   *
-   * READS ONLY, by type. A cross-tenant `create` or `update` is not a listing, it is an escape
-   * from tenancy, and it should never be one option away by accident.
-   *
-   * THIS DOES NOT AUTHORIZE ANYTHING. Removing the tenant filter widens what the query can
-   * return, so the resource owes a row-level `policy` from its permission check saying what a
-   * stranger may see (`{ status: 'active' }`, `{ visibility: 'public' }`). Declaring this without
-   * one publishes every row in every tenant.
-   *
-   * @default []
-   * @example
-   * // A public catalog: anyone may browse every seller's LIVE products,
-   * // while create/update/delete stay pinned to the caller's own shop.
-   * multiTenantPreset({
-   *   allowPublic: ['list', 'get'],
-   *   crossTenant: ['list', 'get'],
-   * })
-   */
-  crossTenant?: readonly Extract<CrudRouteKey, "list" | "get">[];
-}
-declare function multiTenantPreset(options?: MultiTenantOptions): PresetResult;
-//#endregion
-export { MultiTenantOptions, TenantFieldSpec, multiTenantPreset };
+import { n as multiTenantPreset, r as TenantFieldSpec, t as MultiTenantOptions } from "../multiTenant-CAtYlW6H.mjs";
+export { MultiTenantOptions, type TenantFieldSpec, multiTenantPreset };