@classytic/arc 2.43.0 → 2.45.0

package/dist/cli/commands/describe.d.mts

@@ -1,7 +1,7 @@
 
-import { F as ResourceDefinition, X as RouteSchemaOptions, kt as RateLimitConfig } from "../../index-mqaqZNpe.mjs";
+import { F as ResourceDefinition, X as RouteSchemaOptions, kt as RateLimitConfig } from "../../index-WH7xgvxS.mjs";
 //#region src/cli/commands/describe.d.ts
-interface DescribedResource {
+export interface DescribedResource {
   name: string;
   displayName: string;
   prefix: string;
@@ -124,7 +124,7 @@ interface EventDescription {
  * Hosts that want a JSON dump of one resource without spawning the CLI
  * can call this directly.
  */
-declare function describeResource(resource: ResourceDefinition<unknown>, module?: string): DescribedResource;
-declare function describe(args: string[]): Promise<void>;
+export declare function describeResource(resource: ResourceDefinition<unknown>, module?: string): DescribedResource;
+export declare function describe(args: string[]): Promise<void>;
 //#endregion
-export { DescribedResource, describe, describeResource };
+export {};

package/dist/cli/commands/describe.mjs

@@ -1,6 +1,6 @@
-/*! @classytic/arc v2.43.0 | MIT | https://classytic.com */
-import { t as CRUD_OPERATIONS } from "../../constants-Cu7Mx7_U.mjs";
-import { n as stringifyMeasureMap } from "../../ResourceRegistry-CuCARu2B.mjs";
+/*! @classytic/arc v2.45.0 | MIT | https://classytic.com */
+import { t as CRUD_OPERATIONS } from "../../constants-B90SnSQn.mjs";
+import { n as stringifyMeasureMap } from "../../ResourceRegistry-BNoHOx-D.mjs";
 import { resolve } from "node:path";
 import { pathToFileURL } from "node:url";
 //#region src/cli/commands/describe.ts

package/dist/cli/commands/docs.d.mts

@@ -6,6 +6,5 @@
  * Export OpenAPI specification from registered resources.
  * Requires an entry file that exports defineResource() results.
  */
-declare function exportDocs(args: string[]): Promise<void>;
-//#endregion
-export { exportDocs };
+export declare function exportDocs(args: string[]): Promise<void>;
+//#endregion

package/dist/cli/commands/docs.mjs

@@ -1,6 +1,6 @@
-/*! @classytic/arc v2.43.0 | MIT | https://classytic.com */
-import { t as buildOpenApiSpec } from "../../openapi-DT_G4VhY.mjs";
-import { t as loadResourcesFromEntry } from "../../loadResourcesFromEntry-3sLYbuse.mjs";
+/*! @classytic/arc v2.45.0 | MIT | https://classytic.com */
+import { t as buildOpenApiSpec } from "../../openapi-BCOaGAgE.mjs";
+import { t as loadResourcesFromEntry } from "../../loadResourcesFromEntry-BEPA0ptL.mjs";
 import { dirname, resolve } from "node:path";
 import { mkdirSync, writeFileSync } from "node:fs";
 //#region src/cli/commands/docs.ts

package/dist/cli/commands/doctor.d.mts

@@ -6,6 +6,5 @@
  * Health check utility that validates the development environment.
  * Checks Node.js version, dependencies, configuration, and env variables.
  */
-declare function doctor(_args?: string[]): Promise<void>;
-//#endregion
-export { doctor };
+export declare function doctor(_args?: string[]): Promise<void>;
+//#endregion

package/dist/cli/commands/doctor.mjs

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.43.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.45.0 | MIT | https://classytic.com */
 import { dirname, join, parse, resolve } from "node:path";
 import { existsSync, readFileSync } from "node:fs";
 //#region src/cli/commands/doctor.ts

package/dist/cli/commands/generate.mjs

@@ -1,3 +1,2 @@
-/*! @classytic/arc v2.43.0 | MIT | https://classytic.com */
-import { t as generate } from "../../generate-DRTkLlIl.mjs";
-export { generate };
+/*! @classytic/arc v2.45.0 | MIT | https://classytic.com */
+export { t as generate } from "../../generate-Cm5Ct81v.mjs";

package/dist/cli/commands/init.mjs

@@ -1,3 +1,2 @@
-/*! @classytic/arc v2.43.0 | MIT | https://classytic.com */
-import { t as init } from "../../init-B_oUYDXI.mjs";
-export { init };
+/*! @classytic/arc v2.45.0 | MIT | https://classytic.com */
+export { t as init } from "../../init-lpaUB-Ph.mjs";

package/dist/cli/commands/introspect.d.mts

@@ -6,6 +6,5 @@
  * Shows all registered resources and their configuration.
  * Requires an entry file that exports defineResource() results.
  */
-declare function introspect(args: string[]): Promise<void>;
-//#endregion
-export { introspect };
+export declare function introspect(args: string[]): Promise<void>;
+//#endregion

package/dist/cli/commands/introspect.mjs

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.43.0 | MIT | https://classytic.com */
-import { t as loadResourcesFromEntry } from "../../loadResourcesFromEntry-3sLYbuse.mjs";
+/*! @classytic/arc v2.45.0 | MIT | https://classytic.com */
+import { t as loadResourcesFromEntry } from "../../loadResourcesFromEntry-BEPA0ptL.mjs";
 //#region src/cli/commands/introspect.ts
 function describePermission(value) {
 	if (!value) return "none";

package/dist/cli/index.mjs

@@ -1,8 +1,8 @@
-/*! @classytic/arc v2.43.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.45.0 | MIT | https://classytic.com */
 import { describe } from "./commands/describe.mjs";
 import { exportDocs } from "./commands/docs.mjs";
 import { doctor } from "./commands/doctor.mjs";
-import { t as generate } from "../generate-DRTkLlIl.mjs";
-import { t as init } from "../init-B_oUYDXI.mjs";
+import { t as generate } from "../generate-Cm5Ct81v.mjs";
+import { t as init } from "../init-lpaUB-Ph.mjs";
 import { introspect } from "./commands/introspect.mjs";
 export { describe, doctor, exportDocs, generate, init, introspect };

package/dist/{constants-Cu7Mx7_U.mjs → constants-B90SnSQn.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.43.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.45.0 | MIT | https://classytic.com */
 //#region src/constants.ts
 /**
 * Arc Framework Constants — Single Source of Truth

package/dist/context/index.d.mts

@@ -52,7 +52,7 @@ interface RequestStore {
  * - `run(store, fn)` — run a function with a specific store (used by Arc internals)
  * - `getStore()` — alias for get() (matches Node.js API naming)
  */
-declare const requestContext: {
+export declare const requestContext: {
   /**
    * Get the current request context.
    * Returns undefined if called outside a request lifecycle.
@@ -90,19 +90,19 @@ declare const requestContext: {
  * await outbox.store(event, { headers: traceHeaders });
  * ```
  */
-declare function getTraceHeaders(): Record<string, string> | undefined;
+export declare function getTraceHeaders(): Record<string, string> | undefined;
 //#endregion
 //#region src/context/requestScopedCache.d.ts
 /**
  * The cache for the CURRENT unit of work (see `runWorkScope`), or `undefined`
  * outside one. Lazily created on first use.
  */
-declare function requestScopedCache(): CacheAdapter | undefined;
+export declare function requestScopedCache(): CacheAdapter | undefined;
 /**
  * Whether the current scope has allocated a cache yet. Diagnostics and
  * tests only — never branch application behaviour on this.
  */
-declare function hasRequestScopedCache(): boolean;
+export declare function hasRequestScopedCache(): boolean;
 //#endregion
 //#region src/context/transactionContext.d.ts
 /** DB session/transaction handle. Typed as unknown — arc is DB-agnostic. */
@@ -113,7 +113,7 @@ type DbSession = unknown;
  * - `run(session, fn)` — install an active DB session for the duration of `fn`
  * - `get()` — read the current session (undefined if outside a transaction scope)
  */
-declare const transactionContext: {
+export declare const transactionContext: {
   /**
    * Run `fn` with `session` as the active DB transaction context.
    * Any call to `get()` within `fn`'s async call stack returns `session`.
@@ -136,17 +136,17 @@ interface WorkSeed {
   readonly organizationId?: string;
 }
 /** Enter a scope for `fn`, or run it inside the active one. */
-declare function runWorkScope<T>(seed: WorkSeed, fn: () => T): T;
+export declare function runWorkScope<T>(seed: WorkSeed, fn: () => T): T;
 /**
  * A per-scope memo slot: created once on first use, the same instance after.
  * `undefined` outside a scope.
  */
-declare function scopedValue<T>(slot: symbol, create: () => T): T | undefined;
+export declare function scopedValue<T>(slot: symbol, create: () => T): T | undefined;
 /**
  * The scope an event dispatch runs in. The correlation id is the scope id so a
  * child event published from a handler chains to the same correlation; the
  * tenant rides `meta`, never the payload.
  */
-declare function workSeedFromEvent(event: DomainEvent): WorkSeed;
+export declare function workSeedFromEvent(event: DomainEvent): WorkSeed;
 //#endregion
-export { type DbSession, type RequestStore, type WorkKind, type WorkSeed, getTraceHeaders, hasRequestScopedCache, requestContext, requestScopedCache, runWorkScope, scopedValue, transactionContext, workSeedFromEvent };
+export type { DbSession, RequestStore, WorkKind, WorkSeed };

package/dist/context/index.mjs

@@ -1,8 +1,8 @@
-/*! @classytic/arc v2.43.0 | MIT | https://classytic.com */
-import { t as transactionContext } from "../transactionContext-DjFkrNG6.mjs";
-import { n as requestContext, t as getTraceHeaders } from "../requestContext-Dsu9P1bV.mjs";
-import { n as evictToSize, r as touch } from "../boundedMap-BULzfXYU.mjs";
-import { n as scopedValue, r as workSeedFromEvent, t as runWorkScope } from "../workScope-zpPyge4t.mjs";
+/*! @classytic/arc v2.45.0 | MIT | https://classytic.com */
+import { t as transactionContext } from "../transactionContext-BWp0MBGL.mjs";
+import { n as requestContext, t as getTraceHeaders } from "../requestContext-B8JKbeb7.mjs";
+import { n as evictToSize, r as touch } from "../boundedMap-DQfXgxMo.mjs";
+import { n as scopedValue, r as workSeedFromEvent, t as runWorkScope } from "../workScope-BDjGXwU9.mjs";
 //#region src/context/requestScopedCache.ts
 /** The memo slot the per-scope store hangs off. */
 const SLOT = Symbol.for("arc.requestScopedCache");

package/dist/core/index.d.mts

@@ -1,4 +1,4 @@
 
-import { Bt as TreeMixin, Cn as ControllerConstructionOptions, Dn as BodySanitizerConfig, En as BodySanitizer, F as ResourceDefinition, Gt as BaseCrudController, Ht as SlugMixin, It as BaseController, Jt as AccessControl, Kt as QueryResolver, Lt as SoftDeleteExt, P as defineResource, Qt as FetchResult, Rt as SoftDeleteMixin, Sn as ControllerConfigurableOptions, Tn as MixinConstructor, Ut as BulkExt, Vt as SlugExt, Wt as BulkMixin, Xt as AccessControlRepository, Yt as AccessControlConfig, Zt as FetchDenialReason, at as AggregationCacheConfig, ct as AggregationIndexHint, dt as AggregationRateLimit, ft as AggregationsMap, it as AggMeasureShorthand, lt as AggregationMaterializedContext, ot as AggregationConfig, qt as QueryResolverConfig, rt as AggMeasureInput, st as AggregationDateRangeRequirement, ut as AggregationMaterializedResult, wn as ListResult, xn as BaseControllerOptions, zt as TreeExt } from "../index-mqaqZNpe.mjs";
-import { A as createPermissionMiddleware, B as DEFAULT_VERSION_FIELD, C as AdapterLike, D as DefineActionConfig, E as mergeResourceConfig, F as DEFAULT_LIMIT, G as MAX_FILTER_DEPTH, H as HOOK_PHASES, I as DEFAULT_MAX_LIMIT, J as MUTATION_OPERATIONS, K as MAX_REGEX_LENGTH, L as DEFAULT_SORT, M as CRUD_OPERATIONS, N as CrudOperation, O as defineAction, P as DEFAULT_ID_FIELD, R as DEFAULT_TENANT_FIELD, S as defineResourceVariants, T as SeamedResourceConfig, U as HookOperation, V as HOOK_OPERATIONS, W as HookPhase, X as RESERVED_QUERY_PARAMS, Y as MutationOperation, Z as SYSTEM_FIELDS, _ as getEntityIdField, a as formatValidationErrors, b as VariantsMap, c as nativePolicyFilter, d as createFastifyHandler, f as createRequestContext, g as getEntityId, h as sendControllerResponse, i as assertValidConfig, j as defineAggregation, k as createCrudRouter, l as collectReadBlockedFields, m as getControllerScope, n as ValidateOptions, o as validateResourceConfig, p as getControllerContext, q as MAX_SEARCH_LENGTH, r as ValidationResult, s as NativePolicyFilter, t as ConfigError, u as isFieldReadable, v as getEntityQuery, w as ResourceSeams, x as VariantsResult, y as VariantOverride, z as DEFAULT_UPDATE_METHOD } from "../index-CRoPtISf.mjs";
-export { AccessControl, type AccessControlConfig, type AccessControlRepository, type AdapterLike, type AggMeasureInput, type AggMeasureShorthand, type AggregationCacheConfig, type AggregationConfig, type AggregationDateRangeRequirement, type AggregationIndexHint, type AggregationMaterializedContext, type AggregationMaterializedResult, type AggregationRateLimit, type AggregationsMap, BaseController, type BaseControllerOptions, BaseCrudController, BodySanitizer, type BodySanitizerConfig, type BulkExt, BulkMixin, CRUD_OPERATIONS, type ConfigError, type ControllerConfigurableOptions, type ControllerConstructionOptions, CrudOperation, DEFAULT_ID_FIELD, DEFAULT_LIMIT, DEFAULT_MAX_LIMIT, DEFAULT_SORT, DEFAULT_TENANT_FIELD, DEFAULT_UPDATE_METHOD, DEFAULT_VERSION_FIELD, type DefineActionConfig, type FetchDenialReason, type FetchResult, HOOK_OPERATIONS, HOOK_PHASES, HookOperation, HookPhase, type ListResult, MAX_FILTER_DEPTH, MAX_REGEX_LENGTH, MAX_SEARCH_LENGTH, MUTATION_OPERATIONS, type MixinConstructor, MutationOperation, type NativePolicyFilter, QueryResolver, type QueryResolverConfig, RESERVED_QUERY_PARAMS, ResourceDefinition, type ResourceSeams, SYSTEM_FIELDS, type SeamedResourceConfig, type SlugExt, SlugMixin, type SoftDeleteExt, SoftDeleteMixin, type TreeExt, TreeMixin, type ValidateOptions, type ValidationResult, type VariantOverride, type VariantsMap, type VariantsResult, assertValidConfig, collectReadBlockedFields, createCrudRouter, createFastifyHandler, createPermissionMiddleware, createRequestContext, defineAction, defineAggregation, defineResource, defineResourceVariants, formatValidationErrors, getControllerContext, getControllerScope, getEntityId, getEntityIdField, getEntityQuery, isFieldReadable, mergeResourceConfig, nativePolicyFilter, sendControllerResponse, validateResourceConfig };
+import { $t as AccessControl, An as MixinConstructor, Bt as TreeMixin, Dn as ControllerConfigurableOptions, En as BaseControllerOptions, F as ResourceDefinition, Gt as BaseCrudController, Ht as SlugMixin, It as BaseController, Jt as ActionTargetCheck, Kt as QueryResolver, Lt as SoftDeleteExt, Mn as BodySanitizerConfig, On as ControllerConstructionOptions, P as defineResource, Qt as getEntityQuery, Rt as SoftDeleteMixin, Ut as BulkExt, Vt as SlugExt, Wt as BulkMixin, Xt as getEntityId, Yt as getActionTarget, Zt as getEntityIdField, at as AggregationCacheConfig, ct as AggregationIndexHint, dt as AggregationRateLimit, en as AccessControlConfig, ft as AggregationsMap, it as AggMeasureShorthand, jn as BodySanitizer, kn as ListResult, lt as AggregationMaterializedContext, nn as FetchDenialReason, ot as AggregationConfig, qt as QueryResolverConfig, rn as FetchResult, rt as AggMeasureInput, st as AggregationDateRangeRequirement, tn as AccessControlRepository, ut as AggregationMaterializedResult, zt as TreeExt } from "../index-WH7xgvxS.mjs";
+import { A as CrudOperation, B as HookOperation, C as mergeResourceConfig, D as createPermissionMiddleware, E as createCrudRouter, F as DEFAULT_TENANT_FIELD, G as MUTATION_OPERATIONS, H as MAX_FILTER_DEPTH, I as DEFAULT_UPDATE_METHOD, J as SYSTEM_FIELDS, K as MutationOperation, L as DEFAULT_VERSION_FIELD, M as DEFAULT_LIMIT, N as DEFAULT_MAX_LIMIT, O as defineAggregation, P as DEFAULT_SORT, R as HOOK_OPERATIONS, S as SeamedResourceConfig, T as defineAction, U as MAX_REGEX_LENGTH, V as HookPhase, W as MAX_SEARCH_LENGTH, _ as VariantsMap, a as formatValidationErrors, b as AdapterLike, c as nativePolicyFilter, d as createFastifyHandler, f as createRequestContext, g as VariantOverride, h as sendControllerResponse, i as assertValidConfig, j as DEFAULT_ID_FIELD, k as CRUD_OPERATIONS, l as collectReadBlockedFields, m as getControllerScope, n as ValidateOptions, o as validateResourceConfig, p as getControllerContext, q as RESERVED_QUERY_PARAMS, r as ValidationResult, s as NativePolicyFilter, t as ConfigError, u as isFieldReadable, v as VariantsResult, w as DefineActionConfig, x as ResourceSeams, y as defineResourceVariants, z as HOOK_PHASES } from "../index-Beg3aNnK.mjs";
+export { AccessControl, type AccessControlConfig, type AccessControlRepository, type ActionTargetCheck, type AdapterLike, type AggMeasureInput, type AggMeasureShorthand, type AggregationCacheConfig, type AggregationConfig, type AggregationDateRangeRequirement, type AggregationIndexHint, type AggregationMaterializedContext, type AggregationMaterializedResult, type AggregationRateLimit, type AggregationsMap, BaseController, type BaseControllerOptions, BaseCrudController, BodySanitizer, type BodySanitizerConfig, type BulkExt, BulkMixin, CRUD_OPERATIONS, type ConfigError, type ControllerConfigurableOptions, type ControllerConstructionOptions, CrudOperation, DEFAULT_ID_FIELD, DEFAULT_LIMIT, DEFAULT_MAX_LIMIT, DEFAULT_SORT, DEFAULT_TENANT_FIELD, DEFAULT_UPDATE_METHOD, DEFAULT_VERSION_FIELD, type DefineActionConfig, type FetchDenialReason, type FetchResult, HOOK_OPERATIONS, HOOK_PHASES, HookOperation, HookPhase, type ListResult, MAX_FILTER_DEPTH, MAX_REGEX_LENGTH, MAX_SEARCH_LENGTH, MUTATION_OPERATIONS, type MixinConstructor, MutationOperation, type NativePolicyFilter, QueryResolver, type QueryResolverConfig, RESERVED_QUERY_PARAMS, ResourceDefinition, type ResourceSeams, SYSTEM_FIELDS, type SeamedResourceConfig, type SlugExt, SlugMixin, type SoftDeleteExt, SoftDeleteMixin, type TreeExt, TreeMixin, type ValidateOptions, type ValidationResult, type VariantOverride, type VariantsMap, type VariantsResult, assertValidConfig, collectReadBlockedFields, createCrudRouter, createFastifyHandler, createPermissionMiddleware, createRequestContext, defineAction, defineAggregation, defineResource, defineResourceVariants, formatValidationErrors, getActionTarget, getControllerContext, getControllerScope, getEntityId, getEntityIdField, getEntityQuery, isFieldReadable, mergeResourceConfig, nativePolicyFilter, sendControllerResponse, validateResourceConfig };

package/dist/core/index.mjs

@@ -1,8 +1,8 @@
-/*! @classytic/arc v2.43.0 | MIT | https://classytic.com */
-import { a as DEFAULT_SORT, c as DEFAULT_VERSION_FIELD, d as MAX_FILTER_DEPTH, f as MAX_REGEX_LENGTH, g as SYSTEM_FIELDS, h as RESERVED_QUERY_PARAMS, i as DEFAULT_MAX_LIMIT, l as HOOK_OPERATIONS, m as MUTATION_OPERATIONS, n as DEFAULT_ID_FIELD, o as DEFAULT_TENANT_FIELD, p as MAX_SEARCH_LENGTH, r as DEFAULT_LIMIT, s as DEFAULT_UPDATE_METHOD, t as CRUD_OPERATIONS, u as HOOK_PHASES } from "../constants-Cu7Mx7_U.mjs";
-import { S as nativePolicyFilter, b as BodySanitizer, c as BaseController, d as SlugMixin, f as BulkMixin, g as isFieldReadable, h as collectReadBlockedFields, l as TreeMixin, m as QueryResolver, o as createCrudRouter, p as BaseCrudController, s as createPermissionMiddleware, u as SoftDeleteMixin, x as AccessControl } from "../plugin-BccET1tL.mjs";
-import { t as defineAggregation } from "../defineAggregation-Bm8RjMbq.mjs";
-import { C as sendControllerResponse, S as getControllerScope, b as createRequestContext, x as getControllerContext, y as createFastifyHandler } from "../actionPermissions-BotX1YOa.mjs";
-import { a as mergeResourceConfig, i as defineResourceVariants, n as getEntityIdField, o as defineAction, r as getEntityQuery, t as getEntityId } from "../core-Cb0LjccA.mjs";
-import { a as ResourceDefinition, i as validateResourceConfig, n as assertValidConfig, r as formatValidationErrors, t as defineResource } from "../defineResource-DIC7JZGU.mjs";
-export { AccessControl, BaseController, BaseCrudController, BodySanitizer, BulkMixin, CRUD_OPERATIONS, DEFAULT_ID_FIELD, DEFAULT_LIMIT, DEFAULT_MAX_LIMIT, DEFAULT_SORT, DEFAULT_TENANT_FIELD, DEFAULT_UPDATE_METHOD, DEFAULT_VERSION_FIELD, HOOK_OPERATIONS, HOOK_PHASES, MAX_FILTER_DEPTH, MAX_REGEX_LENGTH, MAX_SEARCH_LENGTH, MUTATION_OPERATIONS, QueryResolver, RESERVED_QUERY_PARAMS, ResourceDefinition, SYSTEM_FIELDS, SlugMixin, SoftDeleteMixin, TreeMixin, assertValidConfig, collectReadBlockedFields, createCrudRouter, createFastifyHandler, createPermissionMiddleware, createRequestContext, defineAction, defineAggregation, defineResource, defineResourceVariants, formatValidationErrors, getControllerContext, getControllerScope, getEntityId, getEntityIdField, getEntityQuery, isFieldReadable, mergeResourceConfig, nativePolicyFilter, sendControllerResponse, validateResourceConfig };
+/*! @classytic/arc v2.45.0 | MIT | https://classytic.com */
+import { a as DEFAULT_SORT, c as DEFAULT_VERSION_FIELD, d as MAX_FILTER_DEPTH, f as MAX_REGEX_LENGTH, g as SYSTEM_FIELDS, h as RESERVED_QUERY_PARAMS, i as DEFAULT_MAX_LIMIT, l as HOOK_OPERATIONS, m as MUTATION_OPERATIONS, n as DEFAULT_ID_FIELD, o as DEFAULT_TENANT_FIELD, p as MAX_SEARCH_LENGTH, r as DEFAULT_LIMIT, s as DEFAULT_UPDATE_METHOD, t as CRUD_OPERATIONS, u as HOOK_PHASES } from "../constants-B90SnSQn.mjs";
+import { S as nativePolicyFilter, b as BodySanitizer, c as BaseController, d as SlugMixin, f as BulkMixin, g as isFieldReadable, h as collectReadBlockedFields, l as TreeMixin, m as QueryResolver, o as createCrudRouter, p as BaseCrudController, s as createPermissionMiddleware, u as SoftDeleteMixin, x as AccessControl } from "../plugin-BDBOS3-c.mjs";
+import { t as defineAggregation } from "../defineAggregation-CwD8_XNd.mjs";
+import { C as sendControllerResponse, S as getControllerScope, b as createRequestContext, x as getControllerContext, y as createFastifyHandler } from "../actionPermissions-TAc_6LCw.mjs";
+import { a as defineResourceVariants, i as getEntityQuery, n as getEntityId, o as mergeResourceConfig, r as getEntityIdField, s as defineAction, t as getActionTarget } from "../core-DV9PSXtr.mjs";
+import { a as ResourceDefinition, i as validateResourceConfig, n as assertValidConfig, r as formatValidationErrors, t as defineResource } from "../defineResource-CRkhRRSj.mjs";
+export { AccessControl, BaseController, BaseCrudController, BodySanitizer, BulkMixin, CRUD_OPERATIONS, DEFAULT_ID_FIELD, DEFAULT_LIMIT, DEFAULT_MAX_LIMIT, DEFAULT_SORT, DEFAULT_TENANT_FIELD, DEFAULT_UPDATE_METHOD, DEFAULT_VERSION_FIELD, HOOK_OPERATIONS, HOOK_PHASES, MAX_FILTER_DEPTH, MAX_REGEX_LENGTH, MAX_SEARCH_LENGTH, MUTATION_OPERATIONS, QueryResolver, RESERVED_QUERY_PARAMS, ResourceDefinition, SYSTEM_FIELDS, SlugMixin, SoftDeleteMixin, TreeMixin, assertValidConfig, collectReadBlockedFields, createCrudRouter, createFastifyHandler, createPermissionMiddleware, createRequestContext, defineAction, defineAggregation, defineResource, defineResourceVariants, formatValidationErrors, getActionTarget, getControllerContext, getControllerScope, getEntityId, getEntityIdField, getEntityQuery, isFieldReadable, mergeResourceConfig, nativePolicyFilter, sendControllerResponse, validateResourceConfig };

package/dist/{core-Cb0LjccA.mjs → core-DV9PSXtr.mjs}

@@ -1,6 +1,6 @@
-/*! @classytic/arc v2.43.0 | MIT | https://classytic.com */
-import "./constants-Cu7Mx7_U.mjs";
-import { t as defineResource } from "./defineResource-DIC7JZGU.mjs";
+/*! @classytic/arc v2.45.0 | MIT | https://classytic.com */
+import "./constants-B90SnSQn.mjs";
+import { t as defineResource } from "./defineResource-CRkhRRSj.mjs";
 //#region src/core/defineAction.ts
 /**
 * Build an `ActionDefinition` with a typed handler. The literal schema
@@ -173,5 +173,14 @@ function getEntityQuery(req) {
 	if (id === void 0) return {};
 	return { [getEntityIdField(req)]: id };
 }
+/**
+* The row the action-target fence loaded for this request, so the handler need not read it
+* again. `undefined` when no fence read happened (untenanted resource, `scope: 'handler'`,
+* id-less action) — load it yourself then. It is a snapshot taken after the idempotency lock
+* and before the handler: a guarded write must still carry its precondition in the filter.
+*/
+function getActionTarget(req) {
+	return req.arc?.actionTarget;
+}
 //#endregion
-export { mergeResourceConfig as a, defineResourceVariants as i, getEntityIdField as n, defineAction as o, getEntityQuery as r, getEntityId as t };
+export { defineResourceVariants as a, getEntityQuery as i, getEntityId as n, mergeResourceConfig as o, getEntityIdField as r, defineAction as s, getActionTarget as t };

package/dist/{createActionRouter-xjqonMRO.mjs → createActionRouter-BgPCYU2U.mjs}

@@ -1,9 +1,9 @@
-/*! @classytic/arc v2.43.0 | MIT | https://classytic.com */
-import { t as __exportAll } from "./rolldown-runtime-D1w9Y1VJ.mjs";
-import "./constants-Cu7Mx7_U.mjs";
-import { f as createError, i as NotFoundError, u as ValidationError } from "./errors-CtrywMHP.mjs";
-import { C as sendControllerResponse, _ as buildArcDecorator, a as resolveRouterPluginMw, f as buildRouteHooks, g as buildAuthMiddlewareForPermissions, i as buildRouteConfig, l as resolvePipelineSteps, m as routeHookOptions, n as tryRegisterRoute, o as selectPluginMw, r as buildRateLimitConfig, s as buildActionPipelineHandler, u as buildActionPermissionMw } from "./actionPermissions-BotX1YOa.mjs";
-import { n as schemaIRToJsonSchemaBranch, t as normalizeSchemaIR } from "./schemaIR-C7Vbp71I.mjs";
+/*! @classytic/arc v2.45.0 | MIT | https://classytic.com */
+import { r as __exportAll } from "./rolldown-runtime-AD16t29l.mjs";
+import "./constants-B90SnSQn.mjs";
+import { f as createError, i as NotFoundError, u as ValidationError } from "./errors-C9G4A8cN.mjs";
+import { C as sendControllerResponse, _ as buildArcDecorator, a as resolveRouterPluginMw, f as buildRouteHooks, g as buildAuthMiddlewareForPermissions, i as buildRouteConfig, l as resolvePipelineSteps, m as routeHookOptions, n as tryRegisterRoute, o as selectPluginMw, r as buildRateLimitConfig, s as buildActionPipelineHandler, u as buildActionPermissionMw } from "./actionPermissions-TAc_6LCw.mjs";
+import { n as schemaIRToJsonSchemaBranch, t as normalizeSchemaIR } from "./schemaIR-GrOK1JO4.mjs";
 //#region src/core/createActionRouter.ts
 var createActionRouter_exports = /* @__PURE__ */ __exportAll({
 	buildActionBodySchema: () => buildActionBodySchema,
@@ -37,7 +37,7 @@ async function auditAction(req, resource, id, action) {
 * (keyed by `body.action` at request time).
 */
 function createActionRouter(fastify, config) {
-	const { tag, resourceName = tag ?? "action", actions, actionPermissions = {}, actionSchemas = {}, globalAuth, onError, fields: fieldPermissions, schemaOptions, idField = "_id", permissions: resourcePermissions, routeGuards = [], tenantMiddlewares = [], pipeline, rateLimit, idLessActionNames = [], extensions, isTargetVisible, handlerScopedActionNames = [], idempotentActionNames = [], handlerDedupOwners = {}, auditActions = false } = config;
+	const { tag, resourceName = tag ?? "action", actions, actionPermissions = {}, actionSchemas = {}, globalAuth, onError, fields: fieldPermissions, schemaOptions, idField = "_id", permissions: resourcePermissions, routeGuards = [], tenantMiddlewares = [], pipeline, rateLimit, idLessActionNames = [], extensions, isTargetVisible, loadTarget, handlerScopedActionNames = [], idempotentActionNames = [], handlerDedupOwners = {}, auditActions = false } = config;
 	const handlerScoped = new Set(handlerScopedActionNames);
 	const allActionNames = Object.keys(actions);
 	if (allActionNames.length === 0) {
@@ -169,7 +169,17 @@ function createActionRouter(fastify, config) {
 				}
 				const handler = wrappedHandlers.get(action);
 				if (!handler) throw createError(400, `Invalid action '${action}'. Valid actions: ${actionSubset.join(", ")}`, { validActions: actionSubset });
-				if (hasId && isTargetVisible && !handlerScoped.has(action) && !await isTargetVisible(id, req)) throw new NotFoundError(resourceName);
+				if (hasId && (loadTarget || isTargetVisible) && !handlerScoped.has(action)) {
+					const target = loadTarget ? await loadTarget(id, req) : { visible: await isTargetVisible(id, req) };
+					if (!target.visible) throw new NotFoundError(resourceName);
+					if (target.doc !== void 0) {
+						const reqWithExtras = req;
+						reqWithExtras.arc = {
+							...reqWithExtras.arc ?? {},
+							actionTarget: target.doc
+						};
+					}
+				}
 				try {
 					const response = await handler(id, data, req);
 					if (auditActions && (response.status ?? 200) < 400) await auditAction(req, resourceName, id, action);

package/dist/{createAggregationRouter-zRYWw_5D.mjs → createAggregationRouter-lNCkDwKe.mjs}

@@ -1,10 +1,10 @@
-/*! @classytic/arc v2.43.0 | MIT | https://classytic.com */
-import { f as createError } from "./errors-CtrywMHP.mjs";
-import { u as getRequestScope } from "./types-Bk9NOgOC.mjs";
-import { _ as buildArcDecorator, a as resolveRouterPluginMw, f as buildRouteHooks, h as buildAuthMiddleware, m as routeHookOptions, n as tryRegisterRoute, o as selectPluginMw, r as buildRateLimitConfig } from "./actionPermissions-BotX1YOa.mjs";
-import { n as evaluateAndApplyPermission } from "./authorizationDecision-DQYrkl5f.mjs";
-import { n as validateAggregations } from "./validate-9yzHC1e2.mjs";
-import { t as buildAggregationHandler } from "./buildHandler-CRQ8EcX5.mjs";
+/*! @classytic/arc v2.45.0 | MIT | https://classytic.com */
+import { f as createError } from "./errors-C9G4A8cN.mjs";
+import { u as getRequestScope } from "./types-4JKkSvds.mjs";
+import { _ as buildArcDecorator, a as resolveRouterPluginMw, f as buildRouteHooks, h as buildAuthMiddleware, m as routeHookOptions, n as tryRegisterRoute, o as selectPluginMw, r as buildRateLimitConfig } from "./actionPermissions-TAc_6LCw.mjs";
+import { n as evaluateAndApplyPermission } from "./authorizationDecision-BixzgirP.mjs";
+import { n as validateAggregations } from "./validate-CT4umNhp.mjs";
+import { t as buildAggregationHandler } from "./buildHandler-mEUmO2_u.mjs";
 //#region src/core/aggregation/createAggregationRouter.ts
 /**
 * Register one Fastify route per aggregation. No-op when the map is

package/dist/{createApp-D-953ZAq.mjs → createApp-BSBPntOQ.mjs}

@@ -1,18 +1,18 @@
-/*! @classytic/arc v2.43.0 | MIT | https://classytic.com */
-import { t as __exportAll } from "./rolldown-runtime-D1w9Y1VJ.mjs";
-import { a as enterArcLoggerScope, i as runWithArcLogger, n as configureArcLogger, r as createPinoWriter, t as arcLog } from "./logger-DXjfIqjV.mjs";
-import { n as PUBLIC_SCOPE } from "./types-Bk9NOgOC.mjs";
-import { r as initRuntimeCapabilityRegistry, t as auditRuntimeCapabilities } from "./runtimeCapabilities-0tccjRlj.mjs";
-import { a as runShutdown, t as initShutdownRegistry } from "./shutdown-MqA81z_P.mjs";
-import { n as isScopeAwareKeyGenerator, t as createTenantKeyGenerator } from "./rateLimitKey-C4O-kPm0.mjs";
-import { i as resolveResourceRateLimiter, n as markRateLimitingDisabled } from "./resourceRateLimit-dSjVr1pk.mjs";
-import { r as markArcRootValidator, t as arcAjvCustomOptions } from "./routeValidator-D36SW8qt.mjs";
-import { c as createRequestIdGenerator, r as mergeHealthChecks } from "./health-DqbsG-_w.mjs";
-import { t as parseJsonBody } from "./jsonBody-B4YVGcql.mjs";
-import { a as portsForModule, b as verifyEventDurability, f as resolveModuleArm, g as crudEventsOf, h as buildModuleGraph, m as analyzeModuleGraph, n as composeModules, x as verifyModuleGraph } from "./plan-FVR6LP59.mjs";
-import { c as wrapWithAttribution, f as defineEvent, l as wrapWithBoundary, r as CRUD_EVENT_SCHEMA } from "./eventTypes-Cdhm6ZlV.mjs";
-import { r as withSubscriberId } from "./subscriberIdentity-CW39uA8G.mjs";
-import { r as getOptionalModuleExports } from "./module-BSvOQC7E.mjs";
+/*! @classytic/arc v2.45.0 | MIT | https://classytic.com */
+import { r as __exportAll } from "./rolldown-runtime-AD16t29l.mjs";
+import { a as enterArcLoggerScope, i as runWithArcLogger, n as configureArcLogger, r as createPinoWriter, t as arcLog } from "./logger-vxu0DXf_.mjs";
+import { n as PUBLIC_SCOPE } from "./types-4JKkSvds.mjs";
+import { r as initRuntimeCapabilityRegistry, t as auditRuntimeCapabilities } from "./runtimeCapabilities-C7gAbIxC.mjs";
+import { a as runShutdown, t as initShutdownRegistry } from "./shutdown-BW8qwgpx.mjs";
+import { n as isScopeAwareKeyGenerator, t as createTenantKeyGenerator } from "./rateLimitKey-C4mkCwQ-.mjs";
+import { i as resolveResourceRateLimiter, n as markRateLimitingDisabled } from "./resourceRateLimit-DWob9nQ8.mjs";
+import { r as markArcRootValidator, t as arcAjvCustomOptions } from "./routeValidator-CnmenC4Y.mjs";
+import { c as createRequestIdGenerator, r as mergeHealthChecks } from "./health-pLbfckGB.mjs";
+import { t as parseJsonBody } from "./jsonBody-CzKHE-Fg.mjs";
+import { a as portsForModule, b as verifyEventDurability, f as resolveModuleArm, g as crudEventsOf, h as buildModuleGraph, m as analyzeModuleGraph, n as composeModules, x as verifyModuleGraph } from "./plan-CEedaMlr.mjs";
+import { c as wrapWithAttribution, f as defineEvent, l as wrapWithBoundary, r as CRUD_EVENT_SCHEMA } from "./eventTypes-DDy7BMAn.mjs";
+import { r as withSubscriberId } from "./subscriberIdentity-Cxp19Ked.mjs";
+import { r as getOptionalModuleExports } from "./module-BtdcGn_E.mjs";
 import { isProductionEnv, readEnv } from "@classytic/primitives/environment";
 import Fastify from "fastify";
 import qs from "qs";
@@ -774,7 +774,7 @@ async function registerArcCore(fastify, config, trackPlugin) {
 	await fastify.register(arcCorePlugin, { emitEvents: config.arcPlugins?.emitEvents !== false });
 	trackPlugin("arc-core");
 	if (config.arcPlugins?.events !== false) {
-		const { default: eventPlugin } = await import("./eventPlugin-Q6BhzHzs.mjs").then((n) => n.r);
+		const { default: eventPlugin } = await import("./eventPlugin-Dghr7iL5.mjs").then((n) => n.r);
 		const eventOpts = typeof config.arcPlugins?.events === "object" ? config.arcPlugins.events : {};
 		await fastify.register(eventPlugin, {
 			/**
@@ -829,15 +829,15 @@ async function registerArcPlugins(fastify, config, trackPlugin, modules, moduleH
 		trackPlugin("arc-graceful-shutdown", shutdownOpts);
 	}
 	if (config.arcPlugins?.caching) {
-		const { default: cachingPlugin } = await import("./caching-Cc2M1DwO.mjs").then((n) => n.n);
+		const { default: cachingPlugin } = await import("./caching-TQfW2QX7.mjs").then((n) => n.n);
 		const opts = config.arcPlugins.caching === true ? {} : config.arcPlugins.caching;
 		await fastify.register(cachingPlugin, opts);
 		trackPlugin("arc-caching", opts);
 	}
 	if (config.arcPlugins?.queryCache) {
-		const { queryCachePlugin } = await import("./queryCachePlugin-CFWNH8aT.mjs").then((n) => n.n);
+		const { queryCachePlugin } = await import("./queryCachePlugin-s4pBvjFF.mjs").then((n) => n.n);
 		const opts = config.arcPlugins.queryCache === true ? {} : config.arcPlugins.queryCache;
-		const store = config.stores?.queryCache ?? new (await (import("./memory-9Cp7611C.mjs").then((n) => n.n))).MemoryCacheStore();
+		const store = config.stores?.queryCache ?? new (await (import("./memory-DJN6kyC8.mjs").then((n) => n.n))).MemoryCacheStore();
 		await fastify.register(queryCachePlugin, {
 			store,
 			...opts
@@ -847,7 +847,7 @@ async function registerArcPlugins(fastify, config, trackPlugin, modules, moduleH
 	if (config.arcPlugins?.sse) {
 		if (config.arcPlugins?.events === false) fastify.log.warn("SSE plugin requires events plugin (arcPlugins.events). SSE disabled.");
 		else {
-			const { default: ssePlugin } = await import("./sse-CYzQBVFe.mjs").then((n) => n.n);
+			const { default: ssePlugin } = await import("./sse-D8AgoUN3.mjs").then((n) => n.n);
 			const opts = config.arcPlugins.sse === true ? {} : config.arcPlugins.sse;
 			await fastify.register(ssePlugin, opts);
 			trackPlugin("arc-sse", opts);
@@ -856,20 +856,20 @@ async function registerArcPlugins(fastify, config, trackPlugin, modules, moduleH
 	if (config.arcPlugins?.realtime) {
 		if (config.arcPlugins?.events === false) fastify.log.warn("Realtime plugin requires events plugin (arcPlugins.events). Realtime disabled.");
 		else {
-			const { default: realtimePlugin } = await import("./realtime-DmPE9S54.mjs").then((n) => n.n);
+			const { default: realtimePlugin } = await import("./realtime-MPj6eIoV.mjs").then((n) => n.n);
 			const opts = config.arcPlugins.realtime === true ? {} : config.arcPlugins.realtime;
 			await fastify.register(realtimePlugin, opts);
 			trackPlugin("arc-realtime", opts);
 		}
 	}
 	if (config.arcPlugins?.metrics) {
-		const { default: metricsPlugin } = await import("./metrics-CWI11eRu.mjs").then((n) => n.n);
+		const { default: metricsPlugin } = await import("./metrics-wfr7XFE7.mjs").then((n) => n.n);
 		const opts = config.arcPlugins.metrics === true ? {} : config.arcPlugins.metrics;
 		await fastify.register(metricsPlugin, opts);
 		trackPlugin("arc-metrics", opts);
 	}
 	if (config.arcPlugins?.versioning) {
-		const { default: versioningPlugin } = await import("./versioning-fhhWHV74.mjs").then((n) => n.n);
+		const { default: versioningPlugin } = await import("./versioning-JIqxO64K.mjs").then((n) => n.n);
 		await fastify.register(versioningPlugin, config.arcPlugins.versioning);
 		trackPlugin("arc-versioning", config.arcPlugins.versioning);
 	}
@@ -946,7 +946,7 @@ async function registerAuth(fastify, config, trackPlugin) {
 */
 async function registerElevation(fastify, config, trackPlugin) {
 	if (!config.elevation) return;
-	const { elevationPlugin } = await import("./elevation-DG8SrLN-.mjs").then((n) => n.n);
+	const { elevationPlugin } = await import("./elevation-BAfsnnO0.mjs").then((n) => n.n);
 	await fastify.register(elevationPlugin, config.elevation);
 	trackPlugin("arc-elevation", config.elevation);
 	fastify.log.debug("Elevation plugin enabled");
@@ -961,7 +961,7 @@ async function registerElevation(fastify, config, trackPlugin) {
 */
 async function registerErrorHandler(fastify, config, trackPlugin, moduleErrorMappers) {
 	if (config.errorHandler === false) return;
-	const { errorHandlerPlugin } = await import("./errorHandler-BnfDviL1.mjs").then((n) => n.r);
+	const { errorHandlerPlugin } = await import("./errorHandler-DbHGwrQM.mjs").then((n) => n.r);
 	/**
 	* DISCLOSURE DEFAULTS MERGE — they used to be REPLACED, and that was two bugs.
 	*
@@ -1180,7 +1180,7 @@ async function registerResources(fastify, config, preResolvedModules, skippedBri
 		let discoveryPath;
 		let discoveryYieldedZero = false;
 		if (resolvedResources === void 0 && config.resourceDir) {
-			const { loadResources } = await import("./loadResources-Dn4lalw2.mjs").then((n) => n.n);
+			const { loadResources } = await import("./loadResources-BEKG6bP9.mjs").then((n) => n.n);
 			const { resolve, dirname } = await import("node:path");
 			const { fileURLToPath } = await import("node:url");
 			const rawDir = config.resourceDir;
@@ -1261,10 +1261,12 @@ Resources supplied by "${m.name}": ${provided}.`);
 			else prefixed.push(resource);
 			for (const resource of root) await registerOne(fastify, resource, config.mountRoutes);
 			if (prefixed.length) {
-				if (config.resourcePrefix) await fastify.register(async (scoped) => {
-					for (const resource of prefixed) await registerOne(scoped, resource, config.mountRoutes);
-				}, { prefix: config.resourcePrefix });
-				else for (const resource of prefixed) await registerOne(fastify, resource, config.mountRoutes);
+				if (config.resourcePrefix) {
+					const registerPrefixed = async (scoped) => {
+						for (const resource of prefixed) await registerOne(scoped, resource, config.mountRoutes);
+					};
+					await fastify.register(registerPrefixed, { prefix: config.resourcePrefix });
+				} else for (const resource of prefixed) await registerOne(fastify, resource, config.mountRoutes);
 			}
 			const names = resolvedResources.map((r) => r.name ?? "?").join(", ");
 			const prefix = config.resourcePrefix ? ` (prefix: ${config.resourcePrefix})` : "";
@@ -1303,7 +1305,7 @@ Resources supplied by "${m.name}": ${provided}.`);
 			if (fastify.hasDecorator("getScheduleStats")) throw new Error("[arc] modules declare scheduledJobs but schedulesPlugin was already registered manually. Configure their runner through arcPlugins.schedules so Arc can compose one schedule table.");
 			const frozenJobs = Object.freeze(scheduledJobs.map((job) => Object.freeze({ ...job })));
 			const scheduleOptions = typeof config.arcPlugins?.schedules === "object" ? config.arcPlugins.schedules : {};
-			const { default: schedulesPlugin } = await import("./schedules-C-OpmHBq.mjs").then((n) => n.n);
+			const { default: schedulesPlugin } = await import("./schedules-Dr9gNFzx.mjs").then((n) => n.n);
 			await fastify.register(schedulesPlugin, {
 				...scheduleOptions,
 				schedules: frozenJobs
@@ -2009,7 +2011,7 @@ async function buildApp(options, loggerScope, onInstance, onBootDisposer) {
 	await registerErrorHandler(fastify, config, trackPlugin, moduleErrorMappers);
 	await registerResources(fastify, config, resolvedModules, skippedBridges);
 	if (config.replyHelpers) {
-		const { replyHelpersPlugin } = await import("./replyHelpers-CG_VtVgS.mjs").then((n) => n.n);
+		const { replyHelpersPlugin } = await import("./replyHelpers-BW_p67QD.mjs").then((n) => n.n);
 		await fastify.register(replyHelpersPlugin);
 	}
 	if (config.serializeBigInt) {

package/dist/{createMcpServer-C9cxS8zt.d.mts → createMcpServer-DSztofa9.d.mts}

@@ -1,5 +1,5 @@
 
-import { _ as ToolDefinition, c as McpAuthResult, r as CreateMcpServerConfig } from "./types-B4Aq4Sdj.mjs";
+import { _ as ToolDefinition, c as McpAuthResult, r as CreateMcpServerConfig } from "./types-D3Ixsh00.mjs";
 //#region src/integrations/mcp/createMcpServer.d.ts
 /**
  * Mutable auth ref — updated per-request by mcpPlugin.

package/dist/{defineAggregation-Bm8RjMbq.mjs → defineAggregation-CwD8_XNd.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.43.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.45.0 | MIT | https://classytic.com */
 //#region src/core/aggregation/defineAggregation.ts
 /**
 * Declare a single resource aggregation. Exported configs flow into

package/dist/{defineResource-DIC7JZGU.mjs → defineResource-CRkhRRSj.mjs}

@@ -1,10 +1,10 @@
-/*! @classytic/arc v2.43.0 | MIT | https://classytic.com */
-import { m as MUTATION_OPERATIONS, t as CRUD_OPERATIONS } from "./constants-Cu7Mx7_U.mjs";
-import { t as arcLog } from "./logger-DXjfIqjV.mjs";
-import { a as autoInjectTenantFieldRules, c as BaseController, i as resolveOpenApiSchemas, t as buildResourcePlugin, v as detectOverriddenWriteSlots, y as isWriteVerbCapable } from "./plugin-BccET1tL.mjs";
-import { B as requireAuth } from "./permissions-Cm0uYHvd.mjs";
-import { n as getAvailablePresets, t as applyPresets } from "./presets-Cpvj6fGO.mjs";
-import { t as pluralize } from "./pluralize-CVIOcgMF.mjs";
+/*! @classytic/arc v2.45.0 | MIT | https://classytic.com */
+import { m as MUTATION_OPERATIONS, t as CRUD_OPERATIONS } from "./constants-B90SnSQn.mjs";
+import { t as arcLog } from "./logger-vxu0DXf_.mjs";
+import { a as autoInjectTenantFieldRules, c as BaseController, i as resolveOpenApiSchemas, t as buildResourcePlugin, v as detectOverriddenWriteSlots, y as isWriteVerbCapable } from "./plugin-BDBOS3-c.mjs";
+import { B as requireAuth } from "./permissions-IdHJ0_5V.mjs";
+import { n as getAvailablePresets, t as applyPresets } from "./presets-BPjNc-Np.mjs";
+import { t as pluralize } from "./pluralize-B4FcZEyI.mjs";
 import { isReadOnlyRepo } from "@classytic/repo-core/repository";
 import { readEnv } from "@classytic/primitives/environment";
 //#region src/core/defineResource/writeVerbs.ts

package/dist/discovery/index.d.mts

@@ -2,14 +2,14 @@
 import { FastifyPluginAsync } from "fastify";
 //#region src/discovery/index.d.ts
 /** A discovered resource — must have toPlugin() method */
-interface DiscoverableResource {
+export interface DiscoverableResource {
   toPlugin(): FastifyPluginAsync;
   name?: string;
   definition?: {
     name: string;
   };
 }
-interface DiscoveryOptions {
+export interface DiscoveryOptions {
   /** Directories to scan (relative to cwd or absolute) */
   paths: string[];
   /**
@@ -27,7 +27,7 @@ interface DiscoveryOptions {
   /** Whether to scan recursively (default: true) */
   recursive?: boolean;
 }
-interface DiscoveryPluginOptions extends DiscoveryOptions {
+export interface DiscoveryPluginOptions extends DiscoveryOptions {
   /** URL prefix applied to all discovered resources */
   prefix?: string;
 }
@@ -36,11 +36,10 @@ interface DiscoveryPluginOptions extends DiscoveryOptions {
  *
  * @returns Array of discovered resources with their file paths
  */
-declare function discoverResources(options: DiscoveryOptions): Promise<Array<{
+export declare function discoverResources(options: DiscoveryOptions): Promise<Array<{
   resource: DiscoverableResource;
   filePath: string;
 }>>;
 /** Auto-discovery plugin for Arc resources */
-declare const discoveryPlugin: FastifyPluginAsync<DiscoveryPluginOptions>;
-//#endregion
-export { DiscoverableResource, DiscoveryOptions, DiscoveryPluginOptions, discoverResources, discoveryPlugin };
+export declare const discoveryPlugin: FastifyPluginAsync<DiscoveryPluginOptions>;
+//#endregion

package/dist/discovery/index.mjs

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.43.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.45.0 | MIT | https://classytic.com */
 import { readdir } from "node:fs/promises";
 import { extname, join, resolve } from "node:path";
 import { pathToFileURL } from "node:url";

package/dist/docs/index.d.mts

@@ -1,5 +1,5 @@
 
-import { o as RegistryEntry } from "../index-mqaqZNpe.mjs";
+import { o as RegistryEntry } from "../index-WH7xgvxS.mjs";
 import { t as ExternalOpenApiPaths } from "../externalPaths-CmGOxOtD.mjs";
 import { FastifyPluginAsync } from "fastify";
 //#region src/docs/openapi/types.d.ts
@@ -149,7 +149,7 @@ interface SecurityScheme {
  * Build OpenAPI spec from registry resources.
  * Shared by HTTP docs endpoint and CLI export command.
  */
-declare function buildOpenApiSpec(resources: RegistryEntry[], options?: OpenApiBuildOptions, externalPaths?: ExternalOpenApiPaths[]): OpenApiSpec;
+export declare function buildOpenApiSpec(resources: RegistryEntry[], options?: OpenApiBuildOptions, externalPaths?: ExternalOpenApiPaths[]): OpenApiSpec;
 declare const _default: FastifyPluginAsync<OpenApiOptions>;
 //#endregion
 //#region src/docs/scalar.d.ts
@@ -175,4 +175,4 @@ interface ScalarOptions {
 }
 declare const _default$1: FastifyPluginAsync<ScalarOptions>;
 //#endregion
-export { type ExternalOpenApiPaths, type OpenApiBuildOptions, type OpenApiOptions, type OpenApiSpec, type ScalarOptions, buildOpenApiSpec, _default as openApiPlugin, _default$1 as scalarPlugin };
+export { type ExternalOpenApiPaths, type OpenApiBuildOptions, type OpenApiOptions, type OpenApiSpec, type ScalarOptions, _default as openApiPlugin, _default$1 as scalarPlugin };