@classytic/arc 2.44.0 → 2.45.0

package/dist/sse-D8AgoUN3.mjs

@@ -0,0 +1,212 @@
+/*! @classytic/arc v2.45.0 | MIT | https://classytic.com */
+import { r as __exportAll } from "./rolldown-runtime-AD16t29l.mjs";
+import { t as arcLog } from "./logger-vxu0DXf_.mjs";
+import { g as getUserId, n as PUBLIC_SCOPE } from "./types-4JKkSvds.mjs";
+import { n as isEventVisible, t as eventAudienceOf } from "./tenancy-D7jo78AP.mjs";
+import { a as promoteStreamTokenToHeader } from "./streaming-BLg1buwL.mjs";
+import { t as openSseStream } from "./sseStream-B7rPhIQw.mjs";
+import fp from "fastify-plugin";
+//#region src/plugins/sse.ts
+var sse_exports = /* @__PURE__ */ __exportAll({
+	default: () => sse_default,
+	ssePlugin: () => ssePlugin
+});
+const log = arcLog("sse");
+/** Per-registration stats providers behind one `sseStats` decorator. */
+const statsProviders = /* @__PURE__ */ new WeakMap();
+function registerStats(fastify, provider) {
+	if (fastify.hasDecorator("sseStats")) {
+		statsProviders.get(fastify.sseStats)?.add(provider);
+		return;
+	}
+	const providers = /* @__PURE__ */ new Set([provider]);
+	const sseStats = () => {
+		const total = {
+			connections: 0,
+			keys: 0
+		};
+		for (const p of providers) {
+			const s = p();
+			total.connections += s.connections;
+			total.keys += s.keys;
+		}
+		return total;
+	};
+	statsProviders.set(sseStats, providers);
+	fastify.decorate("sseStats", sseStats);
+}
+const serializeEvent = (event) => JSON.stringify({
+	type: event.type,
+	payload: event.payload,
+	meta: {
+		id: event.meta.id,
+		timestamp: event.meta.timestamp
+	}
+});
+const ssePlugin = async (fastify, opts = {}) => {
+	const { path = "/events/stream", requireAuth = true, patterns = ["*"], heartbeat = 3e4, orgScoped = true, filter: customFilter, tokenQueryParam = "token", audience: resolveAudience, connectionKey = (request) => getUserId(request.scope ?? PUBLIC_SCOPE) } = opts;
+	if (!fastify.hasDecorator("events")) {
+		log.warn("Events plugin (arc-events) not registered. SSE plugin will not function. Register eventPlugin before ssePlugin.");
+		return;
+	}
+	const activeConnections = /* @__PURE__ */ new Set();
+	const connections = /* @__PURE__ */ new Set();
+	const byKey = /* @__PURE__ */ new Map();
+	const sharedUnsubs = [];
+	let sharedSubscription;
+	const visibleTo = (conn, event) => (!orgScoped || isEventVisible(event.meta?.organizationId, conn.orgAudience)) && (!customFilter || customFilter(event, conn.request));
+	const dispatch = (event) => {
+		let keys;
+		try {
+			keys = resolveAudience?.(event);
+			if (keys != null && !Array.isArray(keys)) throw new TypeError("audience must return an array");
+		} catch (error) {
+			log.error(`audience resolver failed for '${event.type}'; event not delivered`, error);
+			return;
+		}
+		let data;
+		let filterFailed = false;
+		const deliver = (conn) => {
+			try {
+				if (!visibleTo(conn, event)) return;
+			} catch (error) {
+				if (!filterFailed) log.error(`filter threw for '${event.type}'`, error);
+				filterFailed = true;
+				return;
+			}
+			data ??= serializeEvent(event);
+			conn.stream.write(event.type, data);
+		};
+		if (keys == null) {
+			for (const conn of connections) deliver(conn);
+			return;
+		}
+		for (const key of new Set(keys)) {
+			const set = byKey.get(key);
+			if (set) for (const conn of set) deliver(conn);
+		}
+	};
+	const ensureSharedSubscription = () => {
+		sharedSubscription ??= (async () => {
+			for (const pattern of patterns) sharedUnsubs.push(await fastify.events.subscribe(pattern, dispatch));
+		})().catch((error) => {
+			for (const unsub of sharedUnsubs.splice(0)) unsub();
+			sharedSubscription = void 0;
+			throw error;
+		});
+		return sharedSubscription;
+	};
+	registerStats(fastify, () => resolveAudience ? {
+		connections: connections.size,
+		keys: byKey.size
+	} : {
+		connections: activeConnections.size,
+		keys: 0
+	});
+	const routeOpts = {
+		method: "GET",
+		url: path,
+		schema: {
+			tags: ["Events"],
+			summary: "SSE event stream",
+			description: "Server-Sent Events stream for real-time domain events",
+			response: { 200: {
+				type: "string",
+				description: "text/event-stream"
+			} }
+		},
+		handler: async (request, reply) => {
+			const stream = openSseStream(request, reply, { heartbeatMs: heartbeat });
+			stream.onCleanup(() => activeConnections.delete(stream.close));
+			const scope = request.scope ?? PUBLIC_SCOPE;
+			const audience = eventAudienceOf(scope);
+			if (resolveAudience) {
+				const key = connectionKey(request) || void 0;
+				const conn = {
+					request,
+					stream,
+					orgAudience: audience,
+					key
+				};
+				let closed = false;
+				stream.onCleanup(() => {
+					closed = true;
+					activeConnections.delete(stream.close);
+					connections.delete(conn);
+					const set = key === void 0 ? void 0 : byKey.get(key);
+					if (set?.delete(conn) && set.size === 0) byKey.delete(key);
+				});
+				await ensureSharedSubscription();
+				if (closed) return;
+				connections.add(conn);
+				if (key !== void 0) {
+					const set = byKey.get(key) ?? /* @__PURE__ */ new Set();
+					set.add(conn);
+					byKey.set(key, set);
+				}
+				activeConnections.add(stream.close);
+				return;
+			}
+			let closed = false;
+			const unsubs = [];
+			stream.onCleanup(() => {
+				closed = true;
+				for (const unsub of unsubs.splice(0)) unsub();
+			});
+			for (const pattern of patterns) {
+				const unsub = await fastify.events.subscribe(pattern, async (event) => {
+					if (orgScoped && !isEventVisible(event.meta?.organizationId, audience)) return;
+					if (customFilter && !customFilter(event, request)) return;
+					const data = JSON.stringify({
+						type: event.type,
+						payload: event.payload,
+						meta: {
+							id: event.meta.id,
+							timestamp: event.meta.timestamp
+						}
+					});
+					stream.write(event.type, data);
+				});
+				if (closed) {
+					unsub();
+					return;
+				}
+				unsubs.push(unsub);
+			}
+			activeConnections.add(stream.close);
+		}
+	};
+	if (requireAuth) {
+		routeOpts.preHandler = (request, reply) => {
+			if (tokenQueryParam) promoteStreamTokenToHeader(request, tokenQueryParam);
+			const authenticate = fastify.authenticate;
+			if (typeof authenticate !== "function") {
+				reply.code(401).send({ error: "Unauthorized" });
+				return Promise.resolve();
+			}
+			return authenticate(request, reply);
+		};
+		fastify.addHook("onReady", async () => {
+			if (!fastify.hasDecorator("authenticate")) throw new Error("[arc-sse] requireAuth is true but no `authenticate` decorator was registered by the time the app was ready. Register an auth plugin, or set requireAuth: false.");
+		});
+	}
+	fastify.route(routeOpts);
+	fastify.addHook("onClose", async () => {
+		for (const cleanup of activeConnections) cleanup();
+		activeConnections.clear();
+		for (const unsub of sharedUnsubs.splice(0)) unsub();
+	});
+	log.debug("Plugin registered", {
+		path,
+		patterns,
+		orgScoped,
+		keyed: Boolean(resolveAudience)
+	});
+};
+var sse_default = fp(ssePlugin, {
+	name: "arc-sse",
+	fastify: "5.x",
+	dependencies: ["arc-events"]
+});
+//#endregion
+export { sse_exports as n, sse_default as t };

package/dist/{sseStream-DQChzGTs.mjs → sseStream-B7rPhIQw.mjs}

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
-import { n as forwardedStreamHeaders } from "./streaming-JzB5CAga.mjs";
+/*! @classytic/arc v2.45.0 | MIT | https://classytic.com */
+import { n as forwardedStreamHeaders } from "./streaming-BLg1buwL.mjs";
 //#region src/utils/sseStream.ts
 /**
 * Take over the reply socket and open an SSE stream. Call ONLY after every

package/dist/{store-helpers-Coj9RhOZ.mjs → store-helpers-Bxk7TDgG.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.45.0 | MIT | https://classytic.com */
 //#region src/utils/store-helpers.ts
 /**
 * Classify an error thrown by `getOne` / `getById` / `update` as a

package/dist/{streaming-JzB5CAga.mjs → streaming-BLg1buwL.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.45.0 | MIT | https://classytic.com */
 import { Readable } from "node:stream";
 //#region src/utils/streaming.ts
 /**

package/dist/{subscriberIdentity-DeyppIif.mjs → subscriberIdentity-Cxp19Ked.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.45.0 | MIT | https://classytic.com */
 //#region src/events/subscriberIdentity.ts
 const SUBSCRIBER_ID = Symbol.for("@classytic/arc/subscriber-id");
 /** Assign a deployment-stable identity for durable per-handler progress; never use an index. */

package/dist/{tenancy-DxV8OuX2.mjs → tenancy-D7jo78AP.mjs}

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
-import { b as isElevated, c as getOrgId } from "./types-fvO6Ovzx.mjs";
+/*! @classytic/arc v2.45.0 | MIT | https://classytic.com */
+import { b as isElevated, c as getOrgId } from "./types-4JKkSvds.mjs";
 //#region src/core/tenancy.ts
 function eventAudienceOf(scope) {
 	const tenancy = resolveTenancy({ _scope: scope }, "organizationId");

package/dist/{tenantPreparation-CBvvAcAj.mjs → tenantPreparation-DqJnokDW.mjs}

@@ -1,7 +1,7 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
-import { t as conjoinPolicyFilters } from "./filter-merge-DGM-GQ1J.mjs";
-import { d as createDomainError } from "./errors-CW4anJBy.mjs";
-import { b as isElevated, c as getOrgId, d as getScopeContext, m as getTeamId, v as hasOrgAccess } from "./types-fvO6Ovzx.mjs";
+/*! @classytic/arc v2.45.0 | MIT | https://classytic.com */
+import { t as conjoinPolicyFilters } from "./filter-merge-BYKBa9b2.mjs";
+import { d as createDomainError } from "./errors-C9G4A8cN.mjs";
+import { b as isElevated, c as getOrgId, d as getScopeContext, m as getTeamId, v as hasOrgAccess } from "./types-4JKkSvds.mjs";
 //#region src/permissions/tenantPreparation.ts
 /** Tenant preparation shared by HTTP middleware and direct transport invocation. */
 const PREPARATION = Symbol.for("arc.tenantPreparation");

package/dist/testing/cleanupStoreContract.mjs

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.45.0 | MIT | https://classytic.com */
 import { afterAll, beforeAll, describe, expect, it } from "vitest";
 //#region src/testing/cleanupStoreContract.ts
 /**

package/dist/testing/index.d.mts

@@ -4,7 +4,7 @@ import { l as PermissionCheck, t as AnyRecord } from "../base-CZyixEQR.mjs";
 import { F as ResourceDefinition } from "../index-WH7xgvxS.mjs";
 import { h as ModuleSetupContext, m as ModuleDisposer, o as ArcPorts, p as PortName, r as ArcModuleInput, u as ModuleName } from "../types-BJ-2XqVF.mjs";
 import "../index-CUJvoyw3.mjs";
-import { n as CreateAppOptions } from "../index-BkV55WlV.mjs";
+import { n as CreateAppOptions } from "../index-uhkUA5-U.mjs";
 import { StorageContractSetup, StorageContractSetupResult, runStorageContract } from "./storageContract.mjs";
 import { StandardRepo } from "@classytic/repo-core/repository";
 import { FastifyInstance, FastifyServerOptions } from "fastify";

package/dist/testing/index.mjs

@@ -1,14 +1,14 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
-import { o as __toESM } from "../rolldown-runtime-MYrLNGnq.mjs";
-import { t as CRUD_OPERATIONS } from "../constants-B2QHb6u6.mjs";
-import { c as BaseController } from "../plugin-DALd9dcF.mjs";
-import { g as getUserId } from "../types-fvO6Ovzx.mjs";
-import { t as defineAggregation } from "../defineAggregation--3xguLkk.mjs";
-import { t as defineResource } from "../defineResource-gUp9ug66.mjs";
-import { E as requireOrgRole } from "../permissions-C5ijIz5Q.mjs";
-import { h as asModulePorts, r as createApp } from "../createApp-BGLYtErt.mjs";
-import { d as resolveModule, l as isLazyBridge, o as resolveModuleClosure } from "../plan-CJGMKoui.mjs";
-import { n as getModuleExports } from "../module--L0iBIZz.mjs";
+/*! @classytic/arc v2.45.0 | MIT | https://classytic.com */
+import { o as __toESM } from "../rolldown-runtime-AD16t29l.mjs";
+import { t as CRUD_OPERATIONS } from "../constants-B90SnSQn.mjs";
+import { c as BaseController } from "../plugin-BDBOS3-c.mjs";
+import { g as getUserId } from "../types-4JKkSvds.mjs";
+import { t as defineAggregation } from "../defineAggregation-CwD8_XNd.mjs";
+import { t as defineResource } from "../defineResource-CRkhRRSj.mjs";
+import { E as requireOrgRole } from "../permissions-IdHJ0_5V.mjs";
+import { h as asModulePorts, r as createApp } from "../createApp-BSBPntOQ.mjs";
+import { d as resolveModule, l as isLazyBridge, o as resolveModuleClosure } from "../plan-CEedaMlr.mjs";
+import { n as getModuleExports } from "../module-BtdcGn_E.mjs";
 import { runStorageContract } from "./storageContract.mjs";
 import Fastify from "fastify";
 import { afterAll, describe, expect, it, vi } from "vitest";
@@ -266,13 +266,13 @@ function testActorAuth(defaultActor) {
 async function mongoMemoryDatabase(opts) {
 	let mms;
 	try {
-		mms = await import("../mongodb-memory-server-CHhYSq5y.mjs").then((m) => /* @__PURE__ */ __toESM(m.default, 1));
+		mms = await import("../mongodb-memory-server-Cn57YIsc.mjs").then((m) => /* @__PURE__ */ __toESM(m.default, 1));
 	} catch {
 		throw new Error("[arc-testing] bootModuleApp's default database is in-memory MongoDB — install 'mongodb-memory-server' + 'mongoose' as devDependencies, or inject your own `database` factory for a different store");
 	}
 	const server = opts.replset ? await mms.MongoMemoryReplSet.create({ replSet: { count: 1 } }) : await mms.MongoMemoryServer.create();
 	const uri = server.getUri();
-	const mongoose = (await import("../mongoose-CYJCLyi-.mjs").then((m) => /* @__PURE__ */ __toESM(m.default, 1))).default;
+	const mongoose = (await import("../mongoose-DzFjTtBN.mjs").then((m) => /* @__PURE__ */ __toESM(m.default, 1))).default;
 	if (mongoose.connection.readyState !== 0) await mongoose.disconnect();
 	await mongoose.connect(uri);
 	mongoose.connection.deleteModel(/.*/);
@@ -1548,7 +1548,7 @@ function scopeRoleGate(...allowed) {
 */
 async function startInMemoryMongo() {
 	try {
-		const { MongoMemoryServer } = await import("../mongodb-memory-server-CHhYSq5y.mjs").then((m) => /* @__PURE__ */ __toESM(m.default, 1));
+		const { MongoMemoryServer } = await import("../mongodb-memory-server-Cn57YIsc.mjs").then((m) => /* @__PURE__ */ __toESM(m.default, 1));
 		const mongod = await MongoMemoryServer.create();
 		return {
 			uri: mongod.getUri(),
@@ -1562,7 +1562,7 @@ async function startInMemoryMongo() {
 }
 async function connectMongooseToUri(uri) {
 	try {
-		const mongoose = (await import("../mongoose-CYJCLyi-.mjs").then((m) => /* @__PURE__ */ __toESM(m.default, 1))).default;
+		const mongoose = (await import("../mongoose-DzFjTtBN.mjs").then((m) => /* @__PURE__ */ __toESM(m.default, 1))).default;
 		await mongoose.connect(uri);
 		return { async disconnect() {
 			await mongoose.disconnect();
@@ -1579,7 +1579,7 @@ function pickDefaultAuth(authMode, callerAuth) {
 	};
 }
 async function createTestApp(options = {}) {
-	const { createApp } = await import("../createApp-BGLYtErt.mjs").then((n) => n.i);
+	const { createApp } = await import("../createApp-BSBPntOQ.mjs").then((n) => n.i);
 	const { resources = [], db = "in-memory", connectMongoose = false, authMode = "jwt", defaultOrgId, plugins, auth: callerAuth, ...appOptions } = options;
 	let dbHandle;
 	let dbUri;

package/dist/testing/outboxStoreContract.mjs

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
-import { t as claimedAttempts } from "../claimed-DYvQoZLv.mjs";
+/*! @classytic/arc v2.45.0 | MIT | https://classytic.com */
+import { t as claimedAttempts } from "../claimed-CnEEOHuL.mjs";
 import { OutboxConflictError, OutboxOwnershipError } from "@classytic/primitives/outbox";
 import { afterAll, beforeAll, beforeEach, describe, expect, it } from "vitest";
 //#region src/testing/outboxStoreContract.ts

package/dist/testing/requiredPorts.mjs

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
-import { c as declareModules, d as resolveModule, i as planModules, r as compositionProblems } from "../plan-CJGMKoui.mjs";
+/*! @classytic/arc v2.45.0 | MIT | https://classytic.com */
+import { c as declareModules, d as resolveModule, i as planModules, r as compositionProblems } from "../plan-CEedaMlr.mjs";
 //#region src/testing/requiredPorts.ts
 /**
 * Assert a module declares EXACTLY `ports` as required, and that composing it without any one of

package/dist/testing/storageContract.mjs

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.45.0 | MIT | https://classytic.com */
 import { afterAll, beforeAll, describe, expect, it } from "vitest";
 //#region src/testing/storageContract.ts
 /**

package/dist/{timing-CntavTlR.mjs → timing-Y6_ZpoYG.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.45.0 | MIT | https://classytic.com */
 import { createHash } from "node:crypto";
 //#region src/utils/operationIdentity.ts
 /** Security context included in idempotency identities across transports. */

package/dist/{transactionContext-orvnGu4F.mjs → transactionContext-BWp0MBGL.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.45.0 | MIT | https://classytic.com */
 import { AsyncLocalStorage } from "node:async_hooks";
 //#region src/context/transactionContext.ts
 /**

package/dist/{typeGuards-kEaP_WmO.mjs → typeGuards-CtZJypJO.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.45.0 | MIT | https://classytic.com */
 //#region src/utils/typeGuards.ts
 /** Check if fastify has the events plugin registered */
 function hasEvents(instance) {

package/dist/types/index.mjs

@@ -1,2 +1,2 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.45.0 | MIT | https://classytic.com */
 export {};

package/dist/types/storage.mjs

@@ -1,2 +1,2 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.45.0 | MIT | https://classytic.com */
 export {};

package/dist/{types-fvO6Ovzx.mjs → types-4JKkSvds.mjs}

@@ -1,7 +1,7 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
-import { l as UnauthorizedError, o as OrgRequiredError } from "./errors-CW4anJBy.mjs";
-import { n as requireSingleHeaderValue } from "./headers-DKZQKL-Z.mjs";
-import { t as getUserId$1 } from "./userHelpers-C76zD5pa.mjs";
+/*! @classytic/arc v2.45.0 | MIT | https://classytic.com */
+import { l as UnauthorizedError, o as OrgRequiredError } from "./errors-C9G4A8cN.mjs";
+import { n as requireSingleHeaderValue } from "./headers-B6DRXXzT.mjs";
+import { t as getUserId$1 } from "./userHelpers-Nc5ePCsf.mjs";
 //#region src/scope/types.ts
 /**
 * Request Scope — The One Standard

package/dist/usage/index.mjs

@@ -1,7 +1,7 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
-import { t as ArcError } from "../errors-CW4anJBy.mjs";
-import { c as getOrgId, g as getUserId, i as getClientId } from "../types-fvO6Ovzx.mjs";
-import { n as declareRuntimeCapability } from "../runtimeCapabilities-DIMKMV2G.mjs";
+/*! @classytic/arc v2.45.0 | MIT | https://classytic.com */
+import { t as ArcError } from "../errors-C9G4A8cN.mjs";
+import { c as getOrgId, g as getUserId, i as getClientId } from "../types-4JKkSvds.mjs";
+import { n as declareRuntimeCapability } from "../runtimeCapabilities-C7gAbIxC.mjs";
 import { usagePeriod } from "@classytic/repo-core/usage";
 import fp from "fastify-plugin";
 //#region src/usage/requireQuota.ts

package/dist/{userHelpers-C76zD5pa.mjs → userHelpers-Nc5ePCsf.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.45.0 | MIT | https://classytic.com */
 //#region src/utils/userHelpers.ts
 /**
 * Extract a user ID from a user object. Accepts `id` or `_id` — returns

package/dist/utils/index.mjs

@@ -1,13 +1,13 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
-import { a as OrgAccessDeniedError, c as ServiceUnavailableError, d as createDomainError, f as createError, i as NotFoundError, l as UnauthorizedError, n as ConflictError, o as OrgRequiredError, p as isArcError, r as ForbiddenError, s as RateLimitError, t as ArcError, u as ValidationError } from "../errors-CW4anJBy.mjs";
-import { t as simpleEqualityMatcher } from "../simpleEqualityMatcher-DbwIM1f1.mjs";
-import { n as requireSingleHeaderValue, t as getHeader } from "../headers-DKZQKL-Z.mjs";
-import { n as getUserRoles, r as normalizeRoles, t as getUserId } from "../userHelpers-C76zD5pa.mjs";
-import { C as paginationSchema, D as createQueryParser, E as ArcQueryParser, O as MONGO_DIALECT, S as offsetListResponse, T as responses, _ as errorContractSchema, a as defineCompensation, b as keysetListResponse, c as CircuitBreaker, d as CircuitState, f as createCircuitBreaker, g as deleteResponse, h as bareListResponse, i as defineErrorMapper, k as NEUTRAL_DIALECT, l as CircuitBreakerError, m as aggregateListResponse, n as handleRaw, o as withCompensation, p as createCircuitBreakerRegistry, r as defineGuard, s as RedisCircuitBreakerState, t as createStateMachine, u as CircuitBreakerRegistry, v as getDefaultCrudSchemas, w as queryParams, x as listResponse, y as getListQueryParams } from "../utils-BpkVZ8rB.mjs";
-import { a as isZodSchema, i as isJsonSchema, n as convertRouteSchema, o as toJsonSchema, t as convertOpenApiSchemas } from "../schemaConverter-BVjkQ5DD.mjs";
-import { a as promoteStreamTokenToHeader, i as pipeUIMessageStreamToReply, n as forwardedStreamHeaders, r as isReadableStream, t as UI_MESSAGE_STREAM_HEADERS } from "../streaming-JzB5CAga.mjs";
-import { n as declareRuntimeCapability } from "../runtimeCapabilities-DIMKMV2G.mjs";
-import { i as runAdmittedWork, r as registerShutdownParticipant } from "../shutdown-LpLMH8T1.mjs";
-import { t as openSseStream } from "../sseStream-DQChzGTs.mjs";
-import { t as hasEvents } from "../typeGuards-kEaP_WmO.mjs";
+/*! @classytic/arc v2.45.0 | MIT | https://classytic.com */
+import { a as OrgAccessDeniedError, c as ServiceUnavailableError, d as createDomainError, f as createError, i as NotFoundError, l as UnauthorizedError, n as ConflictError, o as OrgRequiredError, p as isArcError, r as ForbiddenError, s as RateLimitError, t as ArcError, u as ValidationError } from "../errors-C9G4A8cN.mjs";
+import { t as simpleEqualityMatcher } from "../simpleEqualityMatcher-WdZw6GOt.mjs";
+import { n as requireSingleHeaderValue, t as getHeader } from "../headers-B6DRXXzT.mjs";
+import { n as getUserRoles, r as normalizeRoles, t as getUserId } from "../userHelpers-Nc5ePCsf.mjs";
+import { C as paginationSchema, D as createQueryParser, E as ArcQueryParser, O as MONGO_DIALECT, S as offsetListResponse, T as responses, _ as errorContractSchema, a as defineCompensation, b as keysetListResponse, c as CircuitBreaker, d as CircuitState, f as createCircuitBreaker, g as deleteResponse, h as bareListResponse, i as defineErrorMapper, k as NEUTRAL_DIALECT, l as CircuitBreakerError, m as aggregateListResponse, n as handleRaw, o as withCompensation, p as createCircuitBreakerRegistry, r as defineGuard, s as RedisCircuitBreakerState, t as createStateMachine, u as CircuitBreakerRegistry, v as getDefaultCrudSchemas, w as queryParams, x as listResponse, y as getListQueryParams } from "../utils-QWSIKqAk.mjs";
+import { a as isZodSchema, i as isJsonSchema, n as convertRouteSchema, o as toJsonSchema, t as convertOpenApiSchemas } from "../schemaConverter-rzBovk00.mjs";
+import { a as promoteStreamTokenToHeader, i as pipeUIMessageStreamToReply, n as forwardedStreamHeaders, r as isReadableStream, t as UI_MESSAGE_STREAM_HEADERS } from "../streaming-BLg1buwL.mjs";
+import { n as declareRuntimeCapability } from "../runtimeCapabilities-C7gAbIxC.mjs";
+import { i as runAdmittedWork, r as registerShutdownParticipant } from "../shutdown-BW8qwgpx.mjs";
+import { t as openSseStream } from "../sseStream-B7rPhIQw.mjs";
+import { t as hasEvents } from "../typeGuards-CtZJypJO.mjs";
 export { ArcError, ArcQueryParser, CircuitBreaker, CircuitBreakerError, CircuitBreakerRegistry, CircuitState, ConflictError, ForbiddenError, MONGO_DIALECT, NEUTRAL_DIALECT, NotFoundError, OrgAccessDeniedError, OrgRequiredError, RateLimitError, RedisCircuitBreakerState, ServiceUnavailableError, UI_MESSAGE_STREAM_HEADERS, UnauthorizedError, ValidationError, aggregateListResponse, bareListResponse, convertOpenApiSchemas, convertRouteSchema, createCircuitBreaker, createCircuitBreakerRegistry, createDomainError, createError, createQueryParser, createStateMachine, declareRuntimeCapability, defineCompensation, defineErrorMapper, defineGuard, deleteResponse, errorContractSchema, forwardedStreamHeaders, getDefaultCrudSchemas, getHeader, getListQueryParams, getUserId, getUserRoles, handleRaw, hasEvents, isArcError, isJsonSchema, isReadableStream, isZodSchema, keysetListResponse, listResponse, normalizeRoles, offsetListResponse, openSseStream, paginationSchema, pipeUIMessageStreamToReply, promoteStreamTokenToHeader, queryParams, registerShutdownParticipant, requireSingleHeaderValue, responses, runAdmittedWork, simpleEqualityMatcher, toJsonSchema, withCompensation };

package/dist/{utils-BpkVZ8rB.mjs → utils-QWSIKqAk.mjs}

@@ -1,7 +1,7 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
-import { h as RESERVED_QUERY_PARAMS } from "./constants-B2QHb6u6.mjs";
-import { t as arcLog } from "./logger-D4V1zGLI.mjs";
-import { t as ArcError, u as ValidationError } from "./errors-CW4anJBy.mjs";
+/*! @classytic/arc v2.45.0 | MIT | https://classytic.com */
+import { h as RESERVED_QUERY_PARAMS } from "./constants-B90SnSQn.mjs";
+import { t as arcLog } from "./logger-vxu0DXf_.mjs";
+import { t as ArcError, u as ValidationError } from "./errors-C9G4A8cN.mjs";
 import { errorContractSchema as errorContractSchema$1 } from "@classytic/repo-core/errors";
 import { readEnv } from "@classytic/primitives/environment";
 import { OPERATOR_DESCRIPTIONS, URL_OPERATORS, escapeRegex, isQueryGrammarError, readFilterClauses, readPageRequest, readSearch, readSelect, readSort } from "@classytic/repo-core/query-parser";

package/dist/{validate-CWp-lsrm.mjs → validate-CT4umNhp.mjs}

@@ -1,6 +1,6 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
-import { r as __exportAll } from "./rolldown-runtime-MYrLNGnq.mjs";
-import { _ as pathTouchesBlocked } from "./plugin-DALd9dcF.mjs";
+/*! @classytic/arc v2.45.0 | MIT | https://classytic.com */
+import { r as __exportAll } from "./rolldown-runtime-AD16t29l.mjs";
+import { _ as pathTouchesBlocked } from "./plugin-BDBOS3-c.mjs";
 //#region src/core/aggregation/normalize.ts
 /**
 * Framework cap on URL-driven aggregation limits when the host opts

package/dist/{versioning-Bsb51gGT.d.mts → versioning-Bqm_57Qt.d.mts}

@@ -119,6 +119,28 @@ interface SSEOptions {
    * Set `null` to disable promotion (e.g. cookie-only auth).
    */
   tokenQueryParam?: string | null;
+  /**
+   * Keyed delivery: the connection keys (user ids by default) an event is for.
+   * Delivery becomes one map lookup per key, and org-scoping + `filter` still run
+   * on those connections only. `null`/`undefined` = broadcast through the filter.
+   * Each replica resolves it against its own connections. Setting it switches the
+   * plugin to one shared subscription per pattern. See wiki/plugins.md.
+   */
+  audience?: (event: DomainEvent<unknown>) => readonly string[] | null | undefined;
+  /** Key a connection is indexed under for `audience` (default: scope user id; none = broadcasts only). */
+  connectionKey?: (request: FastifyRequest) => string | null | undefined;
+}
+/** Live connection gauge, summed across every `ssePlugin` registration on the instance. */
+interface SSEStats {
+  /** Open SSE connections. */
+  connections: number;
+  /** Distinct `connectionKey`s indexed (0 without `audience`). */
+  keys: number;
+}
+declare module "fastify" {
+  interface FastifyInstance {
+    sseStats: () => SSEStats;
+  }
 }
 declare const _default$3: FastifyPluginAsync<SSEOptions>;
 //#endregion
@@ -243,4 +265,4 @@ declare module "fastify" {
 }
 declare const _default: FastifyPluginAsync<VersioningOptions>;
 //#endregion
-export { _default$5 as _, MetricsOptions as a, RealtimeOptions as c, _default$3 as d, CachingOptions as f, ShutdownState as g, GracefulShutdownOptions as h, MetricsCollector as i, _default$2 as l, _default$4 as m, _default as n, _default$1 as o, CachingRule as p, MetricEntry as r, ChangeOperation as s, VersioningOptions as t, SSEOptions as u };
+export { ShutdownState as _, MetricsOptions as a, RealtimeOptions as c, SSEStats as d, _default$3 as f, GracefulShutdownOptions as g, _default$4 as h, MetricsCollector as i, _default$2 as l, CachingRule as m, _default as n, _default$1 as o, CachingOptions as p, MetricEntry as r, ChangeOperation as s, VersioningOptions as t, SSEOptions as u, _default$5 as v };

package/dist/{versioning-CHhL9P3o.mjs → versioning-JIqxO64K.mjs}

@@ -1,6 +1,6 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
-import { r as __exportAll } from "./rolldown-runtime-MYrLNGnq.mjs";
-import { d as createDomainError } from "./errors-CW4anJBy.mjs";
+/*! @classytic/arc v2.45.0 | MIT | https://classytic.com */
+import { r as __exportAll } from "./rolldown-runtime-AD16t29l.mjs";
+import { d as createDomainError } from "./errors-C9G4A8cN.mjs";
 import fp from "fastify-plugin";
 //#region src/plugins/versioning.ts
 var versioning_exports = /* @__PURE__ */ __exportAll({

package/dist/{workScope-n9a7d_lZ.mjs → workScope-BDjGXwU9.mjs}

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
-import { n as requestContext } from "./requestContext-C10UeFe5.mjs";
+/*! @classytic/arc v2.45.0 | MIT | https://classytic.com */
+import { n as requestContext } from "./requestContext-B8JKbeb7.mjs";
 //#region src/context/workScope.ts
 /** Enter a scope for `fn`, or run it inside the active one. */
 function runWorkScope(seed, fn) {