@classytic/arc 2.41.1 → 2.44.0

package/dist/resourceRateLimit-urWPJxrt.mjs

@@ -0,0 +1,180 @@
+/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
+import { t as createTenantKeyGenerator } from "./rateLimitKey-DVEZ_UpV.mjs";
+//#region src/permissions/resourceRateLimit.ts
+function decision(allowed, max, remaining, ttlSeconds) {
+	const reset = Math.max(1, ttlSeconds);
+	return {
+		allowed,
+		retryAfterSeconds: reset,
+		headers: {
+			"x-ratelimit-limit": max,
+			"x-ratelimit-remaining": remaining,
+			"x-ratelimit-reset": reset,
+			...!allowed ? { "retry-after": reset } : {}
+		}
+	};
+}
+/** Policy namespacing must reach the store key, not merely the local limiter cache. */
+function policyIdentity(resource, policy) {
+	if (!Number.isSafeInteger(policy.max) || policy.max <= 0) throw new Error("rateLimit.max must be a positive safe integer.");
+	return JSON.stringify([
+		"arc-resource",
+		resource,
+		policy.bucket ?? "resource",
+		policy.max,
+		resourceRateLimitWindowMs(policy.timeWindow)
+	]);
+}
+const RESOURCE_RATE_LIMITER = Symbol.for("arc.resourceRateLimiter");
+const tenantKey = createTenantKeyGenerator();
+function resourceRateLimitKey(resource, context) {
+	const actor = tenantKey({
+		scope: context.scope,
+		ip: context.ip ?? "anonymous"
+	});
+	const dimension = context.scope && context.scope.kind !== "public" && "organizationId" in context.scope && context.scope.organizationId ? "tenant" : context.scope?.kind ?? "public";
+	return JSON.stringify([
+		resource,
+		dimension,
+		actor
+	]);
+}
+const RATE_LIMITING_DISABLED = Symbol.for("arc.rateLimitingDisabled");
+/**
+* The host said `rateLimit: false`. A resource's declared limit is then a recorded no-op, and
+* the resources are named once at ready. Absent this mark, a declared limit with no limiter
+* refuses to boot: nobody decided, so nothing would enforce it.
+*/
+function markRateLimitingDisabled(app) {
+	if (Reflect.get(app, RATE_LIMITING_DISABLED)) return;
+	const unenforced = /* @__PURE__ */ new Set();
+	Reflect.set(app, RATE_LIMITING_DISABLED, unenforced);
+	app.addHook("onReady", async () => {
+		if (unenforced.size === 0) return;
+		app.log.info({ resources: [...unenforced] }, `[arc] rate limiting is disabled for this app: declared rateLimit not enforced on ${[...unenforced].join(", ")}`);
+	});
+}
+/** Record a resource whose declared limit the host disabled; `false` when the host never decided. */
+function recordUnenforcedRateLimit(app, resource) {
+	let owner = app;
+	while (owner) {
+		const unenforced = Reflect.get(owner, RATE_LIMITING_DISABLED);
+		if (unenforced instanceof Set) {
+			unenforced.add(resource);
+			return true;
+		}
+		owner = Object.getPrototypeOf(owner);
+	}
+	return false;
+}
+/** Uses createRateLimit's store factory, preserving Redis/custom-store configuration. */
+function resolveResourceRateLimiter(app, durability = "memory") {
+	if (!app.hasDecorator("createRateLimit")) return void 0;
+	let owner = app;
+	while (!Object.hasOwn(owner, "createRateLimit")) {
+		const parent = Object.getPrototypeOf(owner);
+		if (!parent || typeof parent !== "object" || !("createRateLimit" in parent)) break;
+		owner = parent;
+	}
+	const existing = Reflect.get(owner, RESOURCE_RATE_LIMITER);
+	if (existing) return existing;
+	const limiters = /* @__PURE__ */ new Map();
+	const limiter = {
+		durability,
+		async consume(resource, policy, context) {
+			const identity = policyIdentity(resource, policy);
+			let consume = limiters.get(identity);
+			if (!consume) {
+				consume = owner.createRateLimit({
+					max: policy.max,
+					timeWindow: resourceRateLimitWindowMs(policy.timeWindow),
+					allowList: [],
+					skipOnError: false,
+					keyGenerator: (req) => req.ip
+				});
+				limiters.set(identity, consume);
+			}
+			const req = {
+				ip: JSON.stringify([identity, resourceRateLimitKey(resource, context)]),
+				routeOptions: { config: {} }
+			};
+			const result = await consume(req);
+			return result.isAllowed ? decision(true, policy.max, policy.max, Math.ceil(resourceRateLimitWindowMs(policy.timeWindow) / 1e3)) : decision(!result.isExceeded, result.max, result.remaining, result.ttlInSeconds);
+		}
+	};
+	Reflect.set(owner, RESOURCE_RATE_LIMITER, limiter);
+	return limiter;
+}
+/** Standalone tools may use memory; wired distributed apps use the host's shared store. */
+function createMemoryResourceRateLimiter(capacity = 1e4) {
+	if (!Number.isSafeInteger(capacity) || capacity <= 0) throw new Error("rateLimit memory capacity must be a positive safe integer.");
+	const windows = /* @__PURE__ */ new Map();
+	return {
+		durability: "memory",
+		async consume(resource, policy, context) {
+			const now = Date.now();
+			const windowMs = resourceRateLimitWindowMs(policy.timeWindow);
+			const key = JSON.stringify([policyIdentity(resource, policy), resourceRateLimitKey(resource, context)]);
+			let slot = windows.get(key);
+			if (!slot || slot.expires <= now) {
+				if (windows.size >= capacity) {
+					for (const [entry, window] of windows) if (window.expires <= now) windows.delete(entry);
+					if (!windows.has(key) && windows.size >= capacity) {
+						let retryMs = Number.POSITIVE_INFINITY;
+						for (const entry of windows.values()) retryMs = Math.min(retryMs, entry.expires - now);
+						return decision(false, policy.max, 0, Math.ceil(retryMs / 1e3));
+					}
+				}
+				slot = {
+					expires: now + windowMs,
+					count: 0
+				};
+				windows.set(key, slot);
+			}
+			slot.count++;
+			return decision(slot.count <= policy.max, policy.max, Math.max(0, policy.max - slot.count), Math.ceil((slot.expires - now) / 1e3));
+		}
+	};
+}
+function resourceRateLimitWindowMs(window) {
+	const match = /^\s*((?:\d+(?:\.\d+)?|\.\d+))\s*(ms|milliseconds?|msecs?|s|secs?|seconds?|m|mins?|minutes?|h|hrs?|hours?|d|days?|w|wks?|weeks?|y|yrs?|years?)?\s*$/i.exec(window);
+	const value = Number(match?.[1]) * ({
+		ms: 1,
+		millisecond: 1,
+		milliseconds: 1,
+		msec: 1,
+		msecs: 1,
+		s: 1e3,
+		sec: 1e3,
+		secs: 1e3,
+		second: 1e3,
+		seconds: 1e3,
+		m: 6e4,
+		min: 6e4,
+		mins: 6e4,
+		minute: 6e4,
+		minutes: 6e4,
+		h: 36e5,
+		hr: 36e5,
+		hrs: 36e5,
+		hour: 36e5,
+		hours: 36e5,
+		d: 864e5,
+		day: 864e5,
+		days: 864e5,
+		w: 6048e5,
+		wk: 6048e5,
+		wks: 6048e5,
+		week: 6048e5,
+		weeks: 6048e5,
+		y: 315576e5,
+		yr: 315576e5,
+		yrs: 315576e5,
+		year: 315576e5,
+		years: 315576e5
+	}[match?.[2]?.toLowerCase() ?? "ms"] ?? 0);
+	if (!Number.isSafeInteger(value) || value <= 0) throw new Error(`rateLimit.timeWindow '${window}' must be a positive duration in milliseconds.`);
+	return value;
+}
+//#endregion
+export { resourceRateLimitWindowMs as a, resolveResourceRateLimiter as i, markRateLimitingDisabled as n, recordUnenforcedRateLimit as r, createMemoryResourceRateLimiter as t };

package/dist/rolldown-runtime-MYrLNGnq.mjs

@@ -0,0 +1,45 @@
+/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
+import { createRequire } from "node:module";
+//#region \0rolldown/runtime.js
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __esmMin = (fn, res, err) => () => {
+	if (err) throw err[0];
+	try {
+		return fn && (res = fn(fn = 0)), res;
+	} catch (e) {
+		throw err = [e], e;
+	}
+};
+var __commonJSMin = (cb, mod) => () => (mod || (cb((mod = { exports: {} }).exports, mod, mod.exports), cb = null), mod.exports);
+var __exportAll = (all, no_symbols) => {
+	let target = {};
+	for (var name in all) __defProp(target, name, {
+		get: all[name],
+		enumerable: true
+	});
+	if (!no_symbols) __defProp(target, Symbol.toStringTag, { value: "Module" });
+	return target;
+};
+var __copyProps = (to, from, except, desc) => {
+	if (from && typeof from === "object" || typeof from === "function") for (var keys = __getOwnPropNames(from), i = 0, n = keys.length, key; i < n; i++) {
+		key = keys[i];
+		if (!__hasOwnProp.call(to, key) && key !== except) __defProp(to, key, {
+			get: ((k) => from[k]).bind(null, key),
+			enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable
+		});
+	}
+	return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule || !__hasOwnProp.call(mod, "default") ? __defProp(target, "default", {
+	value: mod,
+	enumerable: true
+}) : target, mod));
+var __toCommonJS = (mod) => __hasOwnProp.call(mod, "module.exports") ? mod["module.exports"] : __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var __require = /* #__PURE__ */ (() => createRequire(import.meta.url))();
+//#endregion
+export { __toCommonJS as a, __require as i, __esmMin as n, __toESM as o, __exportAll as r, __commonJSMin as t };

package/dist/routeValidator-DHtpzrzk.mjs

@@ -0,0 +1,70 @@
+/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
+import { AjvCompiler } from "@fastify/ajv-compiler";
+//#region src/core/routeValidator.ts
+/**
+* Arc's request validator — the AJV settings every route arc builds is validated with, on ANY host.
+*
+* Fastify's stock AJV runs `removeAdditional: true`, which turns `additionalProperties: false`
+* into a silent STRIP: an unknown key in a strict action body or filter querystring reaches the
+* handler as if it were never sent, and a dropped filter is a WIDER read. Arc's routes therefore
+* carry their own `validatorCompiler` unless the instance was built by `createApp`, whose root
+* AJV already runs these options (plus the host's `ajv.keywords`).
+* Pinned by `tests/core/route-validator-bare-host.test.ts`.
+*/
+/** The AJV options `createApp` configures and arc's own routes are compiled with. */
+function arcAjvCustomOptions(extraKeywords = []) {
+	return {
+		coerceTypes: true,
+		useDefaults: true,
+		removeAdditional: false,
+		strictTypes: false,
+		keywords: ["example", ...extraKeywords]
+	};
+}
+/** Mark an instance whose ROOT AJV was configured with `arcAjvCustomOptions` (createApp only). */
+function markArcRootValidator(fastify) {
+	fastify.decorate("arcRootValidator", true);
+}
+/** One pool for the process: `@fastify/ajv-compiler` caches an AJV per (shared schemas, options). */
+const buildFromPool = AjvCompiler();
+/**
+* The `validatorCompiler` an arc-built route registers with — `undefined` under `createApp`
+* (the root already validates this way). Schemas added with `fastify.addSchema` stay
+* `$ref`-able: the shared pool is read when Fastify compiles the route.
+*/
+function arcRouteValidatorCompiler(fastify) {
+	if (fastify.arcRootValidator === true) return void 0;
+	return ({ schema, httpPart }) => {
+		return buildFromPool(sharedSchemas(fastify), { customOptions: arcAjvCustomOptions() })({ schema: httpPart === "headers" ? lowerCaseHeaderSchema(schema) : schema });
+	};
+}
+/** The instance's `addSchema` pool, in the shape AJV accepts (a schema is an object or boolean). */
+function sharedSchemas(fastify) {
+	const out = {};
+	for (const [id, schema] of Object.entries(fastify.getSchemas())) if (isSchemaValue(schema)) out[id] = schema;
+	return out;
+}
+function isSchemaValue(value) {
+	return typeof value === "boolean" || typeof value === "object" && value !== null;
+}
+/**
+* Fastify lower-cases a headers schema's keys before compiling it with its OWN compiler and
+* skips that for a custom one — so a route-level compiler must do it, or `Authorization` in a
+* schema never matches the `authorization` header Node delivers.
+*/
+function lowerCaseHeaderSchema(schema) {
+	if (!isPlainObject(schema)) return schema;
+	const out = { ...schema };
+	if (Array.isArray(schema.required)) out.required = schema.required.map((h) => typeof h === "string" ? h.toLowerCase() : h);
+	if (isPlainObject(schema.properties)) {
+		const properties = {};
+		for (const [key, value] of Object.entries(schema.properties)) properties[key.toLowerCase()] = value;
+		out.properties = properties;
+	}
+	return out;
+}
+function isPlainObject(value) {
+	return typeof value === "object" && value !== null && Object.getPrototypeOf(value) === Object.prototype;
+}
+//#endregion
+export { arcRouteValidatorCompiler as n, markArcRootValidator as r, arcAjvCustomOptions as t };

package/dist/{runtimeCapabilities-CkhS6jn6.mjs → runtimeCapabilities-DIMKMV2G.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.41.1 | MIT | https://classytic.com */
+/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
 //#region src/utils/runtimeCapabilities.ts
 /**
 * `Symbol.for` so declarations from two arc copies in one dependency graph

package/dist/{schedules-j6uXXAeJ.mjs → schedules-CKTs5ys8.mjs}

@@ -1,7 +1,8 @@
-/*! @classytic/arc v2.41.1 | MIT | https://classytic.com */
-import { t as __exportAll } from "./rolldown-runtime-eysyzFAF.mjs";
-import { t as runWorkScope } from "./workScope-CxKqoIFn.mjs";
-import { t as startRenewingLease } from "./renewingLease-yF8BdW4b.mjs";
+/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
+import { r as __exportAll } from "./rolldown-runtime-MYrLNGnq.mjs";
+import { a as runShutdown, i as runAdmittedWork, r as registerShutdownParticipant } from "./shutdown-LpLMH8T1.mjs";
+import { t as runWorkScope } from "./workScope-n9a7d_lZ.mjs";
+import { t as startRenewingLease } from "./renewingLease-BFJxGPuh.mjs";
 import fp from "fastify-plugin";
 //#region src/plugins/schedules.ts
 var schedules_exports = /* @__PURE__ */ __exportAll({
@@ -61,10 +62,10 @@ const schedulesPlugin = async (fastify, opts) => {
 			}
 			stat.runs++;
 			stat.lastRunAt = (/* @__PURE__ */ new Date()).toISOString();
-			await runWorkScope({
+			await runAdmittedWork(() => runWorkScope({
 				kind: "job",
 				id: s.name
-			}, () => s.handler(fastify));
+			}, () => s.handler(fastify)));
 			stat.lastError = null;
 		} catch (err) {
 			stat.failures++;
@@ -105,37 +106,45 @@ const schedulesPlugin = async (fastify, opts) => {
 		}
 		if (stats.size > 0) fastify.log.debug(`[arc-schedules] ${stats.size} schedule(s) armed${lock ? ` (leader-safe, holder ${holderId})` : ""}`);
 	});
+	registerShutdownParticipant(fastify, {
+		name: "schedules",
+		stop: () => {
+			closing = true;
+			for (const timer of timers.values()) clearTimeout(timer);
+			timers.clear();
+		},
+		drain: async () => {
+			/**
+			* Let in-flight runs settle so shutdown never truncates a sweep mid-write —
+			* but BOUNDED, because a tick has no cancellation contract and its duration
+			* is not this plugin's to predict. An outbox relay whose subscriber retries
+			* on a backoff ladder holds one tick for minutes, and an unbounded await
+			* here contradicts the `unref` two functions up: pending scheduled work is
+			* already declared as something that must not hold the process.
+			*
+			* Waiting longer than the orchestrator's grace period buys nothing anyway —
+			* SIGKILL truncates the same write, without the log line naming what was
+			* still running.
+			*/
+			const pending = [...inFlight.entries()];
+			if (pending.length === 0) return;
+			let timeout;
+			const expired = Symbol("drain-timeout");
+			const budget = new Promise((resolve) => {
+				timeout = setTimeout(() => resolve(expired), drainTimeoutMs);
+				timeout.unref?.();
+			});
+			const settled = Promise.allSettled(pending.map(([, run]) => run)).then(() => void 0);
+			const outcome = await Promise.race([settled, budget]);
+			if (timeout) clearTimeout(timeout);
+			if (outcome === expired) fastify.log.warn({
+				schedules: pending.map(([name]) => name),
+				drainTimeoutMs
+			}, "[arc-schedules] shutdown drain budget exceeded — abandoning in-flight run(s). Durable work (outbox rows, leased sweeps) is retried on the next boot; raise `drainTimeoutMs` only if a listed job is genuinely non-resumable.");
+		}
+	});
 	fastify.addHook("onClose", async () => {
-		closing = true;
-		for (const timer of timers.values()) clearTimeout(timer);
-		timers.clear();
-		/**
-		* Let in-flight runs settle so shutdown never truncates a sweep mid-write —
-		* but BOUNDED, because a tick has no cancellation contract and its duration
-		* is not this plugin's to predict. An outbox relay whose subscriber retries
-		* on a backoff ladder holds one tick for minutes, and an unbounded await
-		* here contradicts the `unref` two functions up: pending scheduled work is
-		* already declared as something that must not hold the process.
-		*
-		* Waiting longer than the orchestrator's grace period buys nothing anyway —
-		* SIGKILL truncates the same write, without the log line naming what was
-		* still running.
-		*/
-		const pending = [...inFlight.entries()];
-		if (pending.length === 0) return;
-		let timeout;
-		const expired = Symbol("drain-timeout");
-		const budget = new Promise((resolve) => {
-			timeout = setTimeout(() => resolve(expired), drainTimeoutMs);
-			timeout.unref?.();
-		});
-		const settled = Promise.allSettled(pending.map(([, run]) => run)).then(() => void 0);
-		const outcome = await Promise.race([settled, budget]);
-		if (timeout) clearTimeout(timeout);
-		if (outcome === expired) fastify.log.warn({
-			schedules: pending.map(([name]) => name),
-			drainTimeoutMs
-		}, "[arc-schedules] shutdown drain budget exceeded — abandoning in-flight run(s). Durable work (outbox rows, leased sweeps) is retried on the next boot; raise `drainTimeoutMs` only if a listed job is genuinely non-resumable.");
+		await runShutdown(fastify);
 	});
 };
 var schedules_default = fp(schedulesPlugin, {
@@ -143,4 +152,4 @@ var schedules_default = fp(schedulesPlugin, {
 	fastify: "5.x"
 });
 //#endregion
-export { schedules_default as n, schedules_exports as r, schedulesPlugin as t };
+export { schedules_exports as n, schedules_default as t };

package/dist/{schemaConverter-BVA7cFRG.mjs → schemaConverter-BVjkQ5DD.mjs}

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.41.1 | MIT | https://classytic.com */
-import { arcLog } from "./logger/index.mjs";
+/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
+import { t as arcLog } from "./logger-D4V1zGLI.mjs";
 //#region src/utils/schemaConverter.ts
 /**
 * Schema Converter — Detect-First, Convert-Only-When-Needed

package/dist/{schemaIR-CTvPDoPB.mjs → schemaIR-BA0Hb21Y.mjs}

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.41.1 | MIT | https://classytic.com */
-import { o as toJsonSchema } from "./schemaConverter-BVA7cFRG.mjs";
+/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
+import { o as toJsonSchema } from "./schemaConverter-BVjkQ5DD.mjs";
 //#region src/core/schemaIR.ts
 /**
 * Schema IR — one canonical representation, two adapters.

package/dist/schemas/index.d.mts

@@ -17,7 +17,7 @@ import { FastifyPluginAsyncTypebox, FastifyPluginCallbackTypebox, TypeBoxTypePro
  * variant when your endpoint never emits the others. HTTP status
  * discriminates success vs error — no `success` field.
  */
-declare function ArcListResponse<T extends TSchema$1>(itemSchema: T): Type$1.TUnion<[Type$1.TObject<{
+export declare function ArcListResponse<T extends TSchema$1>(itemSchema: T): Type$1.TUnion<[Type$1.TObject<{
   method: Type$1.TLiteral<"offset">;
   data: Type$1.TArray<T>;
   page: Type$1.TInteger;
@@ -26,12 +26,17 @@ declare function ArcListResponse<T extends TSchema$1>(itemSchema: T): Type$1.TUn
   pages: Type$1.TInteger;
   hasNext: Type$1.TBoolean;
   hasPrev: Type$1.TBoolean;
+  totalIsEstimate: Type$1.TOptional<Type$1.TBoolean>;
+  countedAt: Type$1.TOptional<Type$1.TUnion<[Type$1.TString, Type$1.TNull]>>;
 }>, Type$1.TObject<{
   method: Type$1.TLiteral<"keyset">;
   data: Type$1.TArray<T>;
   limit: Type$1.TInteger;
   hasMore: Type$1.TBoolean;
   next: Type$1.TUnion<[Type$1.TString, Type$1.TNull]>;
+  prev: Type$1.TOptional<Type$1.TUnion<[Type$1.TString, Type$1.TNull]>>;
+  hasPrev: Type$1.TOptional<Type$1.TBoolean>;
+  end: Type$1.TOptional<Type$1.TUnion<[Type$1.TString, Type$1.TNull]>>;
 }>, Type$1.TObject<{
   method: Type$1.TLiteral<"aggregate">;
   data: Type$1.TArray<T>;
@@ -45,7 +50,7 @@ declare function ArcListResponse<T extends TSchema$1>(itemSchema: T): Type$1.TUn
   data: Type$1.TArray<T>;
 }>]>;
 /** Offset variant — `{ method: 'offset', data, page, limit, total, pages, hasNext, hasPrev }`. */
-declare function ArcOffsetListResponse<T extends TSchema$1>(itemSchema: T): Type$1.TObject<{
+export declare function ArcOffsetListResponse<T extends TSchema$1>(itemSchema: T): Type$1.TObject<{
   method: Type$1.TLiteral<"offset">;
   data: Type$1.TArray<T>;
   page: Type$1.TInteger;
@@ -54,17 +59,22 @@ declare function ArcOffsetListResponse<T extends TSchema$1>(itemSchema: T): Type
   pages: Type$1.TInteger;
   hasNext: Type$1.TBoolean;
   hasPrev: Type$1.TBoolean;
+  totalIsEstimate: Type$1.TOptional<Type$1.TBoolean>;
+  countedAt: Type$1.TOptional<Type$1.TUnion<[Type$1.TString, Type$1.TNull]>>;
 }>;
 /** Keyset variant — `{ method: 'keyset', data, limit, hasMore, next: string | null }`. */
-declare function ArcKeysetListResponse<T extends TSchema$1>(itemSchema: T): Type$1.TObject<{
+export declare function ArcKeysetListResponse<T extends TSchema$1>(itemSchema: T): Type$1.TObject<{
   method: Type$1.TLiteral<"keyset">;
   data: Type$1.TArray<T>;
   limit: Type$1.TInteger;
   hasMore: Type$1.TBoolean;
   next: Type$1.TUnion<[Type$1.TString, Type$1.TNull]>;
+  prev: Type$1.TOptional<Type$1.TUnion<[Type$1.TString, Type$1.TNull]>>;
+  hasPrev: Type$1.TOptional<Type$1.TBoolean>;
+  end: Type$1.TOptional<Type$1.TUnion<[Type$1.TString, Type$1.TNull]>>;
 }>;
 /** Aggregate variant — `{ method: 'aggregate', ...same as offset }`. */
-declare function ArcAggregateListResponse<T extends TSchema$1>(itemSchema: T): Type$1.TObject<{
+export declare function ArcAggregateListResponse<T extends TSchema$1>(itemSchema: T): Type$1.TObject<{
   method: Type$1.TLiteral<"aggregate">;
   data: Type$1.TArray<T>;
   page: Type$1.TInteger;
@@ -75,13 +85,13 @@ declare function ArcAggregateListResponse<T extends TSchema$1>(itemSchema: T): T
   hasPrev: Type$1.TBoolean;
 }>;
 /** Bare variant — `{ data }`, no `method` discriminant. */
-declare function ArcBareListResponse<T extends TSchema$1>(itemSchema: T): Type$1.TObject<{
+export declare function ArcBareListResponse<T extends TSchema$1>(itemSchema: T): Type$1.TObject<{
   data: Type$1.TArray<T>;
 }>;
 /**
  * Delete response — `{ message, id?, soft? }` raw at the top level.
  */
-declare function ArcDeleteResponse(): Type$1.TObject<{
+export declare function ArcDeleteResponse(): Type$1.TObject<{
   message: Type$1.TString;
   id: Type$1.TOptional<Type$1.TString>;
   soft: Type$1.TOptional<Type$1.TBoolean>;
@@ -96,7 +106,7 @@ declare function ArcDeleteResponse(): Type$1.TObject<{
  * Exported standalone so hosts can embed it in custom 422 / 409 response
  * schemas.
  */
-declare function ArcErrorDetail(): Type$1.TUnsafe<ErrorDetail>;
+export declare function ArcErrorDetail(): Type$1.TUnsafe<ErrorDetail>;
 /**
  * Error response schema — `Type.Unsafe<ErrorContract>` over the canonical
  * JSON Schema `errorContractSchema` from `@classytic/repo-core/errors`.
@@ -105,7 +115,7 @@ declare function ArcErrorDetail(): Type$1.TUnsafe<ErrorDetail>;
  * (`errorContractSchema`) and this TypeBox helper cannot drift —
  * literally one source.
  */
-declare function ArcErrorResponse(): Type$1.TUnsafe<ErrorContract>;
+export declare function ArcErrorResponse(): Type$1.TUnsafe<ErrorContract>;
 /**
  * Standard pagination + sorting + filtering query parameters.
  * Matches Arc's list endpoint conventions.
@@ -121,7 +131,7 @@ declare function ArcErrorResponse(): Type$1.TUnsafe<ErrorContract>;
  * projection forms at the request-validation gate even though arc passes
  * them through unchanged.
  */
-declare function ArcPaginationQuery(): Type$1.TObject<{
+export declare function ArcPaginationQuery(): Type$1.TObject<{
   page: Type$1.TOptional<Type$1.TInteger>;
   limit: Type$1.TOptional<Type$1.TInteger>;
   sort: Type$1.TOptional<Type$1.TString>;
@@ -129,4 +139,4 @@ declare function ArcPaginationQuery(): Type$1.TObject<{
   populate: Type$1.TOptional<Type$1.TAny>;
 }>;
 //#endregion
-export { ArcAggregateListResponse, ArcBareListResponse, ArcDeleteResponse, ArcErrorDetail, ArcErrorResponse, ArcKeysetListResponse, ArcListResponse, ArcOffsetListResponse, ArcPaginationQuery, type FastifyPluginAsyncTypebox, type FastifyPluginCallbackTypebox, type Static, type TObject, type TSchema, Type, type TypeBoxTypeProvider };
+export { type FastifyPluginAsyncTypebox, type FastifyPluginCallbackTypebox, type Static, type TObject, type TSchema, Type, type TypeBoxTypeProvider };

package/dist/schemas/index.mjs

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.41.1 | MIT | https://classytic.com */
+/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
 import { errorContractSchema, errorDetailSchema } from "@classytic/repo-core/errors";
 import { Type, Type as Type$1 } from "typebox";
 //#region src/schemas/index.ts
@@ -34,7 +34,9 @@ function ArcOffsetListResponse(itemSchema) {
 		total: Type$1.Integer(),
 		pages: Type$1.Integer(),
 		hasNext: Type$1.Boolean(),
-		hasPrev: Type$1.Boolean()
+		hasPrev: Type$1.Boolean(),
+		totalIsEstimate: Type$1.Optional(Type$1.Boolean()),
+		countedAt: Type$1.Optional(Type$1.Union([Type$1.String({ format: "date-time" }), Type$1.Null()]))
 	});
 }
 /** Keyset variant — `{ method: 'keyset', data, limit, hasMore, next: string | null }`. */
@@ -44,7 +46,10 @@ function ArcKeysetListResponse(itemSchema) {
 		data: Type$1.Array(itemSchema),
 		limit: Type$1.Integer(),
 		hasMore: Type$1.Boolean(),
-		next: Type$1.Union([Type$1.String(), Type$1.Null()])
+		next: Type$1.Union([Type$1.String(), Type$1.Null()]),
+		prev: Type$1.Optional(Type$1.Union([Type$1.String(), Type$1.Null()])),
+		hasPrev: Type$1.Optional(Type$1.Boolean()),
+		end: Type$1.Optional(Type$1.Union([Type$1.String(), Type$1.Null()]))
 	});
 }
 /** Aggregate variant — `{ method: 'aggregate', ...same as offset }`. */

package/dist/scim/index.d.mts

@@ -33,15 +33,15 @@ interface ScimResourceMapping {
   /** Custom outbound transform — runs after attribute mapping. */
   toScim?: (resource: Record<string, unknown>, mapped: Record<string, unknown>) => Record<string, unknown>;
 }
-declare const SCIM_USER_SCHEMA = "urn:ietf:params:scim:schemas:core:2.0:User";
-declare const SCIM_GROUP_SCHEMA = "urn:ietf:params:scim:schemas:core:2.0:Group";
-declare const SCIM_ENTERPRISE_USER_SCHEMA = "urn:ietf:params:scim:schemas:extension:enterprise:2.0:User";
-declare const DEFAULT_USER_MAPPING: ScimResourceMapping;
-declare const DEFAULT_GROUP_MAPPING: ScimResourceMapping;
+export declare const SCIM_USER_SCHEMA = "urn:ietf:params:scim:schemas:core:2.0:User";
+export declare const SCIM_GROUP_SCHEMA = "urn:ietf:params:scim:schemas:core:2.0:Group";
+export declare const SCIM_ENTERPRISE_USER_SCHEMA = "urn:ietf:params:scim:schemas:extension:enterprise:2.0:User";
+export declare const DEFAULT_USER_MAPPING: ScimResourceMapping;
+export declare const DEFAULT_GROUP_MAPPING: ScimResourceMapping;
 /** Translate inbound SCIM JSON → resource shape. */
-declare function scimToResource(scim: Record<string, unknown>, mapping: ScimResourceMapping): Record<string, unknown>;
+export declare function scimToResource(scim: Record<string, unknown>, mapping: ScimResourceMapping): Record<string, unknown>;
 /** Translate resource → SCIM JSON. */
-declare function resourceToScim(resource: Record<string, unknown>, mapping: ScimResourceMapping, baseUrl: string): Record<string, unknown>;
+export declare function resourceToScim(resource: Record<string, unknown>, mapping: ScimResourceMapping, baseUrl: string): Record<string, unknown>;
 //#endregion
 //#region src/scim/types.d.ts
 /**
@@ -138,7 +138,7 @@ interface ScimObservedEvent {
  * ```
  */
 type ScimType = "invalidFilter" | "tooMany" | "uniqueness" | "mutability" | "invalidSyntax" | "invalidPath" | "noTarget" | "invalidValue" | "invalidVers" | "sensitive";
-declare class ScimError extends Error {
+export declare class ScimError extends Error {
   readonly statusCode: number;
   readonly scimType?: ScimType;
   constructor(statusCode: number, scimType: ScimType | undefined, detail: string);
@@ -197,9 +197,9 @@ type FilterNode = {
  *   `undefined` to deny (yields 400 invalidFilter). Use `IDENTITY_MAP` when
  *   the resource exposes SCIM-named attributes directly.
  */
-declare function parseScimFilter(filter: string, mapAttr: (scimAttr: string) => string | undefined): Record<string, unknown>;
+export declare function parseScimFilter(filter: string, mapAttr: (scimAttr: string) => string | undefined): Record<string, unknown>;
 /** Pass-through mapper for resources that already use SCIM attribute names. */
-declare const IDENTITY_MAP: (a: string) => string;
+export declare const IDENTITY_MAP: (a: string) => string;
 //#endregion
 //#region src/scim/patch.d.ts
 /**
@@ -248,17 +248,17 @@ interface ScimUpdate {
   /** Field unset (remove without filter). */
   $unset: Record<string, true>;
 }
-declare function parseScimPatch(req: ScimPatchRequest): ScimUpdate;
+export declare function parseScimPatch(req: ScimPatchRequest): ScimUpdate;
 /**
  * Flatten a {@link ScimUpdate} into a plain `{ field: value }` object suitable
  * for arc resource `PATCH` handlers that expect a partial document. Drops
  * `$push` / `$pull` / `$unset` semantics — use {@link parseScimPatch} directly
  * when the host needs the full op stream (e.g. to issue array mutations).
  */
-declare function scimUpdateToFlatPatch(update: ScimUpdate): Record<string, unknown>;
+export declare function scimUpdateToFlatPatch(update: ScimUpdate): Record<string, unknown>;
 //#endregion
 //#region src/scim/index.d.ts
 declare const scimPlugin: FastifyPluginAsync<ScimPluginOptions>;
 declare const _default: FastifyPluginAsync<ScimPluginOptions>;
 //#endregion
-export { DEFAULT_GROUP_MAPPING, DEFAULT_USER_MAPPING, type FilterNode, IDENTITY_MAP, SCIM_ENTERPRISE_USER_SCHEMA, SCIM_GROUP_SCHEMA, SCIM_USER_SCHEMA, ScimError, type ScimObservedEvent, type ScimPatchRequest, type ScimPluginOptions, type ScimResourceBinding, type ScimResourceMapping, type ScimType, type ScimUpdate, _default as default, parseScimFilter, parseScimPatch, resourceToScim, scimPlugin, scimToResource, scimUpdateToFlatPatch };
+export { type FilterNode, type ScimObservedEvent, type ScimPatchRequest, type ScimPluginOptions, type ScimResourceBinding, type ScimResourceMapping, type ScimType, type ScimUpdate, _default as default, scimPlugin };

package/dist/scim/index.mjs

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.41.1 | MIT | https://classytic.com */
-import { t as parseJsonBody } from "../jsonBody-ELR9lfeU.mjs";
+/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
+import { t as parseJsonBody } from "../jsonBody-YIq-vGLv.mjs";
 import fp from "fastify-plugin";
 //#region src/scim/errors.ts
 var ScimError = class extends Error {