@classytic/arc 2.44.0 → 2.45.1

package/dist/{EventTransport-DZWDsaPa.mjs → EventTransport-4b0noGwa.mjs}

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
-import { r as workSeedFromEvent, t as runWorkScope } from "./workScope-n9a7d_lZ.mjs";
+/*! @classytic/arc v2.45.1 | MIT | https://classytic.com */
+import { r as workSeedFromEvent, t as runWorkScope } from "./workScope-BcMLKa3G.mjs";
 import { createEvent, createEventRouter } from "@classytic/primitives/events";
 //#region src/events/EventTransport.ts
 /**

package/dist/{HookSystem-yjEgn7Cm.mjs → HookSystem-4pABQnGn.mjs}

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
-import { t as buildRequestScopeProjection } from "./projection-wFoLqdss.mjs";
+/*! @classytic/arc v2.45.1 | MIT | https://classytic.com */
+import { t as buildRequestScopeProjection } from "./projection-BGty6ie4.mjs";
 //#region src/hooks/HookSystem.ts
 /**
 * Hook System

package/dist/{ResourceRegistry-DJxHUpE4.mjs → ResourceRegistry-BBaN_Ne-.mjs}

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
-import "./constants-B2QHb6u6.mjs";
+/*! @classytic/arc v2.45.1 | MIT | https://classytic.com */
+import "./constants-CtWkmWn3.mjs";
 //#region src/registry/ResourceRegistry.ts
 /**
 * Resource Registry

package/dist/{acquire-BozJ-9yt.mjs → acquire-kiZzy5bX.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.45.1 | MIT | https://classytic.com */
 //#region src/idempotency/acquire.ts
 async function acquireIdempotencyKey(store, key, requestId, lockTtlMs) {
 	if (typeof store.acquire === "function") return store.acquire(key, requestId, lockTtlMs);

package/dist/{actionPermissions-5N04zBL4.mjs → actionPermissions-BLnbDA6g.mjs}

@@ -1,16 +1,16 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
-import { f as createError } from "./errors-CW4anJBy.mjs";
-import { n as getUserRoles } from "./userHelpers-C76zD5pa.mjs";
-import { b as isElevated, n as PUBLIC_SCOPE, u as getRequestScope, x as isMember } from "./types-fvO6Ovzx.mjs";
-import { a as resolveEffectiveRoles, r as deriveHiddenFieldPermissions, t as applyFieldReadPermissions } from "./fields-A5crhsJb.mjs";
-import { t as buildRequestScopeProjection } from "./projection-wFoLqdss.mjs";
-import { n as requestContext } from "./requestContext-C10UeFe5.mjs";
-import { n as isTenantPreparation } from "./tenantPreparation-CBvvAcAj.mjs";
-import { n as evaluateAndApplyPermission } from "./authorizationDecision-wX3SA9w_.mjs";
-import { t as executePipeline } from "./pipe-D81zMtWs.mjs";
-import { n as idempotencyConfigProblem, t as declaresIdempotencyFence } from "./requirement-Bu50QALH.mjs";
-import { i as resolveResourceRateLimiter, r as recordUnenforcedRateLimit } from "./resourceRateLimit-urWPJxrt.mjs";
-import { n as arcRouteValidatorCompiler } from "./routeValidator-DHtpzrzk.mjs";
+/*! @classytic/arc v2.45.1 | MIT | https://classytic.com */
+import { f as createError } from "./errors-BtHzrSA6.mjs";
+import { n as getUserRoles } from "./userHelpers-oBTU3a_k.mjs";
+import { b as isElevated, n as PUBLIC_SCOPE, u as getRequestScope, x as isMember } from "./types-BI4sbUJ3.mjs";
+import { a as resolveEffectiveRoles, r as deriveHiddenFieldPermissions, t as applyFieldReadPermissions } from "./fields-C1e_7Fwi.mjs";
+import { t as buildRequestScopeProjection } from "./projection-BGty6ie4.mjs";
+import { n as requestContext } from "./requestContext-DBKIdmDi.mjs";
+import { n as isTenantPreparation } from "./tenantPreparation-DIH-GX4g.mjs";
+import { n as evaluateAndApplyPermission } from "./authorizationDecision-CVlaTjAX.mjs";
+import { t as executePipeline } from "./pipe-B8uq865o.mjs";
+import { n as idempotencyConfigProblem, t as declaresIdempotencyFence } from "./requirement-DxOaghWD.mjs";
+import { i as resolveResourceRateLimiter, r as recordUnenforcedRateLimit } from "./resourceRateLimit-BBdj5yRq.mjs";
+import { n as arcRouteValidatorCompiler } from "./routeValidator-BNTqM1Eh.mjs";
 import { isPaginatedResult, toCanonicalList } from "@classytic/repo-core/pagination";
 //#region src/core/fastifyAdapter.ts
 /** Type guard for Mongoose-like documents with toObject() */

package/dist/audit/index.mjs

@@ -1,7 +1,7 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
-import { g as getUserId, i as getClientId } from "../types-fvO6Ovzx.mjs";
-import { t as transactionContext } from "../transactionContext-orvnGu4F.mjs";
-import { n as declareRuntimeCapability } from "../runtimeCapabilities-DIMKMV2G.mjs";
+/*! @classytic/arc v2.45.1 | MIT | https://classytic.com */
+import { g as getUserId, i as getClientId } from "../types-BI4sbUJ3.mjs";
+import { t as transactionContext } from "../transactionContext-NHmhDIOF.mjs";
+import { n as declareRuntimeCapability } from "../runtimeCapabilities-D_3eUO6V.mjs";
 import { and, anyOf, eq, gte, lt, lte } from "@classytic/repo-core/filter";
 import fp from "fastify-plugin";
 //#region src/audit/repository-audit-adapter.ts

package/dist/auth/audit.mjs

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.45.1 | MIT | https://classytic.com */
 //#region src/auth/audit.ts
 function compileGlobs(patterns) {
 	if (patterns.length === 0) return () => false;

package/dist/auth/index.mjs

@@ -1,10 +1,10 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
-import { d as createDomainError, l as UnauthorizedError, p as isArcError, t as ArcError } from "../errors-CW4anJBy.mjs";
-import { n as requireSingleHeaderValue } from "../headers-DKZQKL-Z.mjs";
-import { n as getUserRoles, r as normalizeRoles } from "../userHelpers-C76zD5pa.mjs";
-import { o as toJsonSchema } from "../schemaConverter-BVjkQ5DD.mjs";
-import { n as declareRuntimeCapability } from "../runtimeCapabilities-DIMKMV2G.mjs";
-import { E as requireOrgRole, T as requireOrgMembership, k as requireTeamMembership } from "../permissions-C5ijIz5Q.mjs";
+/*! @classytic/arc v2.45.1 | MIT | https://classytic.com */
+import { d as createDomainError, l as UnauthorizedError, p as isArcError, t as ArcError } from "../errors-BtHzrSA6.mjs";
+import { n as requireSingleHeaderValue } from "../headers-Dr-wt6Tr.mjs";
+import { n as getUserRoles, r as normalizeRoles } from "../userHelpers-oBTU3a_k.mjs";
+import { o as toJsonSchema } from "../schemaConverter-BQbg7loK.mjs";
+import { n as declareRuntimeCapability } from "../runtimeCapabilities-D_3eUO6V.mjs";
+import { E as requireOrgRole, T as requireOrgMembership, k as requireTeamMembership } from "../permissions-DN1CWH56.mjs";
 import { ARC_ERROR_CODES } from "@classytic/repo-core/errors";
 import { isProductionEnv } from "@classytic/primitives/environment";
 import { createHmac, randomUUID, timingSafeEqual } from "node:crypto";
@@ -664,8 +664,7 @@ async function getActiveMemberRoles(auth, headers) {
 	}
 }
 /**
-* Resolve org roles for an explicit organizationId — for sessions without
-* `activeOrganizationId` (e.g. API-key auth via `x-organization-id`).
+* Resolve membership for the explicitly selected organization.
 */
 async function getMemberRolesByOrg(auth, headers, organizationId) {
 	const fn = pickApiMethod(auth, "getActiveMemberRole", "organization");
@@ -775,11 +774,11 @@ function createBetterAuthAdapter(options) {
 	* other.
 	*/
 	const resolveMemberScope = async (headers, session, requestedOrgId, userId, userRoles) => {
-		const activeOrgId = session?.activeOrganizationId || requestedOrgId;
+		const activeOrgId = requestedOrgId || session?.activeOrganizationId;
 		if (!activeOrgId) return void 0;
 		let orgRoles = null;
 		if (!skipMemberLookup) {
-			if (session?.activeOrganizationId) orgRoles = await getActiveMemberRoles(auth, headers);
+			if (session?.activeOrganizationId === activeOrgId) orgRoles = await getActiveMemberRoles(auth, headers);
 			if (!orgRoles) orgRoles = await getMemberRolesByOrg(auth, headers, activeOrgId);
 		}
 		if (resolveOrgRoles && userId) orgRoles = await resolveOrgRoles({

package/dist/auth/redis-session.mjs

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.45.1 | MIT | https://classytic.com */
 import sjson from "secure-json-parse";
 //#region src/auth/redis-session.ts
 /**

package/dist/{authorizationDecision-wX3SA9w_.mjs → authorizationDecision-CVlaTjAX.mjs}

@@ -1,7 +1,7 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
-import { t as arcLog } from "./logger-D4V1zGLI.mjs";
-import { t as conjoinPolicyFilters } from "./filter-merge-DGM-GQ1J.mjs";
-import { t as ArcError } from "./errors-CW4anJBy.mjs";
+/*! @classytic/arc v2.45.1 | MIT | https://classytic.com */
+import { t as arcLog } from "./logger-qQNLlOAU.mjs";
+import { t as conjoinPolicyFilters } from "./filter-merge-xaiEKtz8.mjs";
+import { t as ArcError } from "./errors-BtHzrSA6.mjs";
 //#region src/permissions/authorizationDecision.ts
 const log = arcLog("permissions:enforce");
 /**

package/dist/{boundedMap-DWiKW7lP.mjs → boundedMap-DSy7KkeX.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.45.1 | MIT | https://classytic.com */
 //#region src/collections/boundedMap.ts
 /**
 * Insertion-order LRU on a plain `Map` — the two moves, written once.

package/dist/{buildHandler-Bswu_vNb.mjs → buildHandler-B4IhILv9.mjs}

@@ -1,7 +1,7 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
-import { t as conjoinPolicyFilters } from "./filter-merge-DGM-GQ1J.mjs";
-import { C as toRepositoryFilter } from "./plugin-DALd9dcF.mjs";
-import { i as compileAggRequest, t as adapterSupportsAggregate } from "./validate-CWp-lsrm.mjs";
+/*! @classytic/arc v2.45.1 | MIT | https://classytic.com */
+import { t as conjoinPolicyFilters } from "./filter-merge-xaiEKtz8.mjs";
+import { C as toRepositoryFilter } from "./plugin-ByU3h-bR.mjs";
+import { i as compileAggRequest, t as adapterSupportsAggregate } from "./validate-Dby08LhR.mjs";
 //#region src/core/aggregation/buildHandler.ts
 /**
 * Framework-agnostic aggregation execution. Runs safety guards,

package/dist/cache/index.mjs

@@ -1,7 +1,7 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
-import { i as versionKey, n as hashParams, r as tagVersionKey, t as buildQueryKey } from "../keys-CpoiZ8hU.mjs";
-import { t as MemoryCacheStore } from "../memory-CTa5pOCW.mjs";
-import { r as QueryCache, t as queryCachePlugin } from "../queryCachePlugin-BATECpyh.mjs";
+/*! @classytic/arc v2.45.1 | MIT | https://classytic.com */
+import { i as versionKey, n as hashParams, r as tagVersionKey, t as buildQueryKey } from "../keys-Dgn6OYhl.mjs";
+import { t as MemoryCacheStore } from "../memory-C0Blueoh.mjs";
+import { r as QueryCache, t as queryCachePlugin } from "../queryCachePlugin-B7itTkWu.mjs";
 //#region src/cache/redis.ts
 /**
 * Redis-backed cache store.

package/dist/{caching-Drp68DIS.mjs → caching-DqakP2vY.mjs}

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
-import { r as __exportAll } from "./rolldown-runtime-MYrLNGnq.mjs";
+/*! @classytic/arc v2.45.1 | MIT | https://classytic.com */
+import { t as __exportAll } from "./rolldown-runtime-DpVPUeXF.mjs";
 import fp from "fastify-plugin";
 //#region src/plugins/caching.ts
 var caching_exports = /* @__PURE__ */ __exportAll({

package/dist/{claimed-DYvQoZLv.mjs → claimed-XoiVrWZ2.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.45.1 | MIT | https://classytic.com */
 //#region src/events/outbox/claimed.ts
 function claimedAttempts(claimed) {
 	const value = claimed.attempts;

package/dist/cleanup/index.mjs

@@ -1,7 +1,7 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
-import { g as getUserId } from "../types-fvO6Ovzx.mjs";
-import { t as defineResource } from "../defineResource-gUp9ug66.mjs";
-import { t as defineModule } from "../module--L0iBIZz.mjs";
+/*! @classytic/arc v2.45.1 | MIT | https://classytic.com */
+import { g as getUserId } from "../types-BI4sbUJ3.mjs";
+import { t as defineResource } from "../defineResource-DwgEjLCO.mjs";
+import { t as defineModule } from "../module-BszSyWbd.mjs";
 import { createPurgeEvidence } from "@classytic/primitives/retention";
 import { canonicalJson, sha256Hex } from "@classytic/primitives/canonical";
 //#region src/cleanup/errors.ts

package/dist/cli/commands/describe.mjs

@@ -1,6 +1,6 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
-import { t as CRUD_OPERATIONS } from "../../constants-B2QHb6u6.mjs";
-import { n as stringifyMeasureMap } from "../../ResourceRegistry-DJxHUpE4.mjs";
+/*! @classytic/arc v2.45.1 | MIT | https://classytic.com */
+import { t as CRUD_OPERATIONS } from "../../constants-CtWkmWn3.mjs";
+import { n as stringifyMeasureMap } from "../../ResourceRegistry-BBaN_Ne-.mjs";
 import { resolve } from "node:path";
 import { pathToFileURL } from "node:url";
 //#region src/cli/commands/describe.ts

package/dist/cli/commands/docs.mjs

@@ -1,6 +1,6 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
-import { t as buildOpenApiSpec } from "../../openapi-CMegfsm8.mjs";
-import { t as loadResourcesFromEntry } from "../../loadResourcesFromEntry-MP8xEppu.mjs";
+/*! @classytic/arc v2.45.1 | MIT | https://classytic.com */
+import { t as buildOpenApiSpec } from "../../openapi-BrFPc3Ny.mjs";
+import { t as loadResourcesFromEntry } from "../../loadResourcesFromEntry-Bmq6TnB7.mjs";
 import { dirname, resolve } from "node:path";
 import { mkdirSync, writeFileSync } from "node:fs";
 //#region src/cli/commands/docs.ts

package/dist/cli/commands/doctor.mjs

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.45.1 | MIT | https://classytic.com */
 import { dirname, join, parse, resolve } from "node:path";
 import { existsSync, readFileSync } from "node:fs";
 //#region src/cli/commands/doctor.ts

package/dist/cli/commands/generate.mjs

@@ -1,2 +1,2 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
-export { t as generate } from "../../generate-BXKo2Gc8.mjs";
+/*! @classytic/arc v2.45.1 | MIT | https://classytic.com */
+export { t as generate } from "../../generate-DJiJMaXN.mjs";

package/dist/cli/commands/init.mjs

@@ -1,2 +1,2 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
-export { t as init } from "../../init-BPzK5Lnr.mjs";
+/*! @classytic/arc v2.45.1 | MIT | https://classytic.com */
+export { t as init } from "../../init-CW3kJqNW.mjs";

package/dist/cli/commands/introspect.mjs

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
-import { t as loadResourcesFromEntry } from "../../loadResourcesFromEntry-MP8xEppu.mjs";
+/*! @classytic/arc v2.45.1 | MIT | https://classytic.com */
+import { t as loadResourcesFromEntry } from "../../loadResourcesFromEntry-Bmq6TnB7.mjs";
 //#region src/cli/commands/introspect.ts
 function describePermission(value) {
 	if (!value) return "none";

package/dist/cli/index.mjs

@@ -1,8 +1,8 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.45.1 | MIT | https://classytic.com */
 import { describe } from "./commands/describe.mjs";
 import { exportDocs } from "./commands/docs.mjs";
 import { doctor } from "./commands/doctor.mjs";
-import { t as generate } from "../generate-BXKo2Gc8.mjs";
-import { t as init } from "../init-BPzK5Lnr.mjs";
+import { t as generate } from "../generate-DJiJMaXN.mjs";
+import { t as init } from "../init-CW3kJqNW.mjs";
 import { introspect } from "./commands/introspect.mjs";
 export { describe, doctor, exportDocs, generate, init, introspect };

package/dist/{constants-B2QHb6u6.mjs → constants-CtWkmWn3.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.45.1 | MIT | https://classytic.com */
 //#region src/constants.ts
 /**
 * Arc Framework Constants — Single Source of Truth

package/dist/context/index.mjs

@@ -1,8 +1,8 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
-import { t as transactionContext } from "../transactionContext-orvnGu4F.mjs";
-import { n as requestContext, t as getTraceHeaders } from "../requestContext-C10UeFe5.mjs";
-import { n as evictToSize, r as touch } from "../boundedMap-DWiKW7lP.mjs";
-import { n as scopedValue, r as workSeedFromEvent, t as runWorkScope } from "../workScope-n9a7d_lZ.mjs";
+/*! @classytic/arc v2.45.1 | MIT | https://classytic.com */
+import { t as transactionContext } from "../transactionContext-NHmhDIOF.mjs";
+import { n as requestContext, t as getTraceHeaders } from "../requestContext-DBKIdmDi.mjs";
+import { n as evictToSize, r as touch } from "../boundedMap-DSy7KkeX.mjs";
+import { n as scopedValue, r as workSeedFromEvent, t as runWorkScope } from "../workScope-BcMLKa3G.mjs";
 //#region src/context/requestScopedCache.ts
 /** The memo slot the per-scope store hangs off. */
 const SLOT = Symbol.for("arc.requestScopedCache");

package/dist/core/index.mjs

@@ -1,8 +1,8 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
-import { a as DEFAULT_SORT, c as DEFAULT_VERSION_FIELD, d as MAX_FILTER_DEPTH, f as MAX_REGEX_LENGTH, g as SYSTEM_FIELDS, h as RESERVED_QUERY_PARAMS, i as DEFAULT_MAX_LIMIT, l as HOOK_OPERATIONS, m as MUTATION_OPERATIONS, n as DEFAULT_ID_FIELD, o as DEFAULT_TENANT_FIELD, p as MAX_SEARCH_LENGTH, r as DEFAULT_LIMIT, s as DEFAULT_UPDATE_METHOD, t as CRUD_OPERATIONS, u as HOOK_PHASES } from "../constants-B2QHb6u6.mjs";
-import { S as nativePolicyFilter, b as BodySanitizer, c as BaseController, d as SlugMixin, f as BulkMixin, g as isFieldReadable, h as collectReadBlockedFields, l as TreeMixin, m as QueryResolver, o as createCrudRouter, p as BaseCrudController, s as createPermissionMiddleware, u as SoftDeleteMixin, x as AccessControl } from "../plugin-DALd9dcF.mjs";
-import { t as defineAggregation } from "../defineAggregation--3xguLkk.mjs";
-import { C as sendControllerResponse, S as getControllerScope, b as createRequestContext, x as getControllerContext, y as createFastifyHandler } from "../actionPermissions-5N04zBL4.mjs";
-import { a as defineResourceVariants, i as getEntityQuery, n as getEntityId, o as mergeResourceConfig, r as getEntityIdField, s as defineAction, t as getActionTarget } from "../core-COcqo0Cp.mjs";
-import { a as ResourceDefinition, i as validateResourceConfig, n as assertValidConfig, r as formatValidationErrors, t as defineResource } from "../defineResource-gUp9ug66.mjs";
+/*! @classytic/arc v2.45.1 | MIT | https://classytic.com */
+import { a as DEFAULT_SORT, c as DEFAULT_VERSION_FIELD, d as MAX_FILTER_DEPTH, f as MAX_REGEX_LENGTH, g as SYSTEM_FIELDS, h as RESERVED_QUERY_PARAMS, i as DEFAULT_MAX_LIMIT, l as HOOK_OPERATIONS, m as MUTATION_OPERATIONS, n as DEFAULT_ID_FIELD, o as DEFAULT_TENANT_FIELD, p as MAX_SEARCH_LENGTH, r as DEFAULT_LIMIT, s as DEFAULT_UPDATE_METHOD, t as CRUD_OPERATIONS, u as HOOK_PHASES } from "../constants-CtWkmWn3.mjs";
+import { S as nativePolicyFilter, b as BodySanitizer, c as BaseController, d as SlugMixin, f as BulkMixin, g as isFieldReadable, h as collectReadBlockedFields, l as TreeMixin, m as QueryResolver, o as createCrudRouter, p as BaseCrudController, s as createPermissionMiddleware, u as SoftDeleteMixin, x as AccessControl } from "../plugin-ByU3h-bR.mjs";
+import { t as defineAggregation } from "../defineAggregation-pxbd7BBK.mjs";
+import { C as sendControllerResponse, S as getControllerScope, b as createRequestContext, x as getControllerContext, y as createFastifyHandler } from "../actionPermissions-BLnbDA6g.mjs";
+import { a as defineResourceVariants, i as getEntityQuery, n as getEntityId, o as mergeResourceConfig, r as getEntityIdField, s as defineAction, t as getActionTarget } from "../core-Cro2v5a7.mjs";
+import { a as ResourceDefinition, i as validateResourceConfig, n as assertValidConfig, r as formatValidationErrors, t as defineResource } from "../defineResource-DwgEjLCO.mjs";
 export { AccessControl, BaseController, BaseCrudController, BodySanitizer, BulkMixin, CRUD_OPERATIONS, DEFAULT_ID_FIELD, DEFAULT_LIMIT, DEFAULT_MAX_LIMIT, DEFAULT_SORT, DEFAULT_TENANT_FIELD, DEFAULT_UPDATE_METHOD, DEFAULT_VERSION_FIELD, HOOK_OPERATIONS, HOOK_PHASES, MAX_FILTER_DEPTH, MAX_REGEX_LENGTH, MAX_SEARCH_LENGTH, MUTATION_OPERATIONS, QueryResolver, RESERVED_QUERY_PARAMS, ResourceDefinition, SYSTEM_FIELDS, SlugMixin, SoftDeleteMixin, TreeMixin, assertValidConfig, collectReadBlockedFields, createCrudRouter, createFastifyHandler, createPermissionMiddleware, createRequestContext, defineAction, defineAggregation, defineResource, defineResourceVariants, formatValidationErrors, getActionTarget, getControllerContext, getControllerScope, getEntityId, getEntityIdField, getEntityQuery, isFieldReadable, mergeResourceConfig, nativePolicyFilter, sendControllerResponse, validateResourceConfig };

package/dist/{core-COcqo0Cp.mjs → core-Cro2v5a7.mjs}

@@ -1,6 +1,6 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
-import "./constants-B2QHb6u6.mjs";
-import { t as defineResource } from "./defineResource-gUp9ug66.mjs";
+/*! @classytic/arc v2.45.1 | MIT | https://classytic.com */
+import "./constants-CtWkmWn3.mjs";
+import { t as defineResource } from "./defineResource-DwgEjLCO.mjs";
 //#region src/core/defineAction.ts
 /**
 * Build an `ActionDefinition` with a typed handler. The literal schema

package/dist/{createActionRouter-zG13rpPJ.mjs → createActionRouter-k-gwiPv6.mjs}

@@ -1,9 +1,9 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
-import { r as __exportAll } from "./rolldown-runtime-MYrLNGnq.mjs";
-import "./constants-B2QHb6u6.mjs";
-import { f as createError, i as NotFoundError, u as ValidationError } from "./errors-CW4anJBy.mjs";
-import { C as sendControllerResponse, _ as buildArcDecorator, a as resolveRouterPluginMw, f as buildRouteHooks, g as buildAuthMiddlewareForPermissions, i as buildRouteConfig, l as resolvePipelineSteps, m as routeHookOptions, n as tryRegisterRoute, o as selectPluginMw, r as buildRateLimitConfig, s as buildActionPipelineHandler, u as buildActionPermissionMw } from "./actionPermissions-5N04zBL4.mjs";
-import { n as schemaIRToJsonSchemaBranch, t as normalizeSchemaIR } from "./schemaIR-BA0Hb21Y.mjs";
+/*! @classytic/arc v2.45.1 | MIT | https://classytic.com */
+import { t as __exportAll } from "./rolldown-runtime-DpVPUeXF.mjs";
+import "./constants-CtWkmWn3.mjs";
+import { f as createError, i as NotFoundError, u as ValidationError } from "./errors-BtHzrSA6.mjs";
+import { C as sendControllerResponse, _ as buildArcDecorator, a as resolveRouterPluginMw, f as buildRouteHooks, g as buildAuthMiddlewareForPermissions, i as buildRouteConfig, l as resolvePipelineSteps, m as routeHookOptions, n as tryRegisterRoute, o as selectPluginMw, r as buildRateLimitConfig, s as buildActionPipelineHandler, u as buildActionPermissionMw } from "./actionPermissions-BLnbDA6g.mjs";
+import { n as schemaIRToJsonSchemaBranch, t as normalizeSchemaIR } from "./schemaIR-CUI3hPQR.mjs";
 //#region src/core/createActionRouter.ts
 var createActionRouter_exports = /* @__PURE__ */ __exportAll({
 	buildActionBodySchema: () => buildActionBodySchema,

package/dist/{createAggregationRouter-CWRz96Vr.mjs → createAggregationRouter-BqWqhAPG.mjs}

@@ -1,10 +1,10 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
-import { f as createError } from "./errors-CW4anJBy.mjs";
-import { u as getRequestScope } from "./types-fvO6Ovzx.mjs";
-import { _ as buildArcDecorator, a as resolveRouterPluginMw, f as buildRouteHooks, h as buildAuthMiddleware, m as routeHookOptions, n as tryRegisterRoute, o as selectPluginMw, r as buildRateLimitConfig } from "./actionPermissions-5N04zBL4.mjs";
-import { n as evaluateAndApplyPermission } from "./authorizationDecision-wX3SA9w_.mjs";
-import { n as validateAggregations } from "./validate-CWp-lsrm.mjs";
-import { t as buildAggregationHandler } from "./buildHandler-Bswu_vNb.mjs";
+/*! @classytic/arc v2.45.1 | MIT | https://classytic.com */
+import { f as createError } from "./errors-BtHzrSA6.mjs";
+import { u as getRequestScope } from "./types-BI4sbUJ3.mjs";
+import { _ as buildArcDecorator, a as resolveRouterPluginMw, f as buildRouteHooks, h as buildAuthMiddleware, m as routeHookOptions, n as tryRegisterRoute, o as selectPluginMw, r as buildRateLimitConfig } from "./actionPermissions-BLnbDA6g.mjs";
+import { n as evaluateAndApplyPermission } from "./authorizationDecision-CVlaTjAX.mjs";
+import { n as validateAggregations } from "./validate-Dby08LhR.mjs";
+import { t as buildAggregationHandler } from "./buildHandler-B4IhILv9.mjs";
 //#region src/core/aggregation/createAggregationRouter.ts
 /**
 * Register one Fastify route per aggregation. No-op when the map is

package/dist/{createApp-BGLYtErt.mjs → createApp-Dw7L72Hz.mjs}

@@ -1,18 +1,18 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
-import { r as __exportAll } from "./rolldown-runtime-MYrLNGnq.mjs";
-import { a as enterArcLoggerScope, i as runWithArcLogger, n as configureArcLogger, r as createPinoWriter, t as arcLog } from "./logger-D4V1zGLI.mjs";
-import { n as PUBLIC_SCOPE } from "./types-fvO6Ovzx.mjs";
-import { r as initRuntimeCapabilityRegistry, t as auditRuntimeCapabilities } from "./runtimeCapabilities-DIMKMV2G.mjs";
-import { a as runShutdown, t as initShutdownRegistry } from "./shutdown-LpLMH8T1.mjs";
-import { n as isScopeAwareKeyGenerator, t as createTenantKeyGenerator } from "./rateLimitKey-DVEZ_UpV.mjs";
-import { i as resolveResourceRateLimiter, n as markRateLimitingDisabled } from "./resourceRateLimit-urWPJxrt.mjs";
-import { r as markArcRootValidator, t as arcAjvCustomOptions } from "./routeValidator-DHtpzrzk.mjs";
-import { c as createRequestIdGenerator, r as mergeHealthChecks } from "./health-CrqUp3sz.mjs";
-import { t as parseJsonBody } from "./jsonBody-YIq-vGLv.mjs";
-import { a as portsForModule, b as verifyEventDurability, f as resolveModuleArm, g as crudEventsOf, h as buildModuleGraph, m as analyzeModuleGraph, n as composeModules, x as verifyModuleGraph } from "./plan-CJGMKoui.mjs";
-import { c as wrapWithAttribution, f as defineEvent, l as wrapWithBoundary, r as CRUD_EVENT_SCHEMA } from "./eventTypes-N4-omQFR.mjs";
-import { r as withSubscriberId } from "./subscriberIdentity-DeyppIif.mjs";
-import { r as getOptionalModuleExports } from "./module--L0iBIZz.mjs";
+/*! @classytic/arc v2.45.1 | MIT | https://classytic.com */
+import { t as __exportAll } from "./rolldown-runtime-DpVPUeXF.mjs";
+import { a as enterArcLoggerScope, i as runWithArcLogger, n as configureArcLogger, r as createPinoWriter, t as arcLog } from "./logger-qQNLlOAU.mjs";
+import { n as PUBLIC_SCOPE } from "./types-BI4sbUJ3.mjs";
+import { r as initRuntimeCapabilityRegistry, t as auditRuntimeCapabilities } from "./runtimeCapabilities-D_3eUO6V.mjs";
+import { a as runShutdown, t as initShutdownRegistry } from "./shutdown-BCXCwghd.mjs";
+import { n as isScopeAwareKeyGenerator, t as createTenantKeyGenerator } from "./rateLimitKey-DBWO59H9.mjs";
+import { i as resolveResourceRateLimiter, n as markRateLimitingDisabled } from "./resourceRateLimit-BBdj5yRq.mjs";
+import { r as markArcRootValidator, t as arcAjvCustomOptions } from "./routeValidator-BNTqM1Eh.mjs";
+import { c as createRequestIdGenerator, r as mergeHealthChecks } from "./health-BLYn_Hds.mjs";
+import { t as parseJsonBody } from "./jsonBody-DPU8yYwA.mjs";
+import { a as portsForModule, b as verifyEventDurability, f as resolveModuleArm, g as crudEventsOf, h as buildModuleGraph, m as analyzeModuleGraph, n as composeModules, x as verifyModuleGraph } from "./plan-DUGfynNg.mjs";
+import { c as wrapWithAttribution, f as defineEvent, l as wrapWithBoundary, r as CRUD_EVENT_SCHEMA } from "./eventTypes-BVoCTG5c.mjs";
+import { r as withSubscriberId } from "./subscriberIdentity-EWnIZ-U8.mjs";
+import { r as getOptionalModuleExports } from "./module-BszSyWbd.mjs";
 import { isProductionEnv, readEnv } from "@classytic/primitives/environment";
 import Fastify from "fastify";
 import qs from "qs";
@@ -774,7 +774,7 @@ async function registerArcCore(fastify, config, trackPlugin) {
 	await fastify.register(arcCorePlugin, { emitEvents: config.arcPlugins?.emitEvents !== false });
 	trackPlugin("arc-core");
 	if (config.arcPlugins?.events !== false) {
-		const { default: eventPlugin } = await import("./eventPlugin-BweHAVws.mjs").then((n) => n.r);
+		const { default: eventPlugin } = await import("./eventPlugin-Dvs7OBw8.mjs").then((n) => n.r);
 		const eventOpts = typeof config.arcPlugins?.events === "object" ? config.arcPlugins.events : {};
 		await fastify.register(eventPlugin, {
 			/**
@@ -829,15 +829,15 @@ async function registerArcPlugins(fastify, config, trackPlugin, modules, moduleH
 		trackPlugin("arc-graceful-shutdown", shutdownOpts);
 	}
 	if (config.arcPlugins?.caching) {
-		const { default: cachingPlugin } = await import("./caching-Drp68DIS.mjs").then((n) => n.n);
+		const { default: cachingPlugin } = await import("./caching-DqakP2vY.mjs").then((n) => n.n);
 		const opts = config.arcPlugins.caching === true ? {} : config.arcPlugins.caching;
 		await fastify.register(cachingPlugin, opts);
 		trackPlugin("arc-caching", opts);
 	}
 	if (config.arcPlugins?.queryCache) {
-		const { queryCachePlugin } = await import("./queryCachePlugin-BATECpyh.mjs").then((n) => n.n);
+		const { queryCachePlugin } = await import("./queryCachePlugin-B7itTkWu.mjs").then((n) => n.n);
 		const opts = config.arcPlugins.queryCache === true ? {} : config.arcPlugins.queryCache;
-		const store = config.stores?.queryCache ?? new (await (import("./memory-CTa5pOCW.mjs").then((n) => n.n))).MemoryCacheStore();
+		const store = config.stores?.queryCache ?? new (await (import("./memory-C0Blueoh.mjs").then((n) => n.n))).MemoryCacheStore();
 		await fastify.register(queryCachePlugin, {
 			store,
 			...opts
@@ -847,7 +847,7 @@ async function registerArcPlugins(fastify, config, trackPlugin, modules, moduleH
 	if (config.arcPlugins?.sse) {
 		if (config.arcPlugins?.events === false) fastify.log.warn("SSE plugin requires events plugin (arcPlugins.events). SSE disabled.");
 		else {
-			const { default: ssePlugin } = await import("./sse-BzJFPX_1.mjs").then((n) => n.n);
+			const { default: ssePlugin } = await import("./sse-BilBz766.mjs").then((n) => n.n);
 			const opts = config.arcPlugins.sse === true ? {} : config.arcPlugins.sse;
 			await fastify.register(ssePlugin, opts);
 			trackPlugin("arc-sse", opts);
@@ -856,20 +856,20 @@ async function registerArcPlugins(fastify, config, trackPlugin, modules, moduleH
 	if (config.arcPlugins?.realtime) {
 		if (config.arcPlugins?.events === false) fastify.log.warn("Realtime plugin requires events plugin (arcPlugins.events). Realtime disabled.");
 		else {
-			const { default: realtimePlugin } = await import("./realtime-xyubMKSB.mjs").then((n) => n.n);
+			const { default: realtimePlugin } = await import("./realtime-_59Rlje8.mjs").then((n) => n.n);
 			const opts = config.arcPlugins.realtime === true ? {} : config.arcPlugins.realtime;
 			await fastify.register(realtimePlugin, opts);
 			trackPlugin("arc-realtime", opts);
 		}
 	}
 	if (config.arcPlugins?.metrics) {
-		const { default: metricsPlugin } = await import("./metrics-DsZrvnpB.mjs").then((n) => n.n);
+		const { default: metricsPlugin } = await import("./metrics-DYka72iN.mjs").then((n) => n.n);
 		const opts = config.arcPlugins.metrics === true ? {} : config.arcPlugins.metrics;
 		await fastify.register(metricsPlugin, opts);
 		trackPlugin("arc-metrics", opts);
 	}
 	if (config.arcPlugins?.versioning) {
-		const { default: versioningPlugin } = await import("./versioning-CHhL9P3o.mjs").then((n) => n.n);
+		const { default: versioningPlugin } = await import("./versioning-P6JMNcJr.mjs").then((n) => n.n);
 		await fastify.register(versioningPlugin, config.arcPlugins.versioning);
 		trackPlugin("arc-versioning", config.arcPlugins.versioning);
 	}
@@ -946,7 +946,7 @@ async function registerAuth(fastify, config, trackPlugin) {
 */
 async function registerElevation(fastify, config, trackPlugin) {
 	if (!config.elevation) return;
-	const { elevationPlugin } = await import("./elevation-BG4gnMsJ.mjs").then((n) => n.n);
+	const { elevationPlugin } = await import("./elevation-B9wF2Z1F.mjs").then((n) => n.n);
 	await fastify.register(elevationPlugin, config.elevation);
 	trackPlugin("arc-elevation", config.elevation);
 	fastify.log.debug("Elevation plugin enabled");
@@ -961,7 +961,7 @@ async function registerElevation(fastify, config, trackPlugin) {
 */
 async function registerErrorHandler(fastify, config, trackPlugin, moduleErrorMappers) {
 	if (config.errorHandler === false) return;
-	const { errorHandlerPlugin } = await import("./errorHandler-COHw3N1b.mjs").then((n) => n.r);
+	const { errorHandlerPlugin } = await import("./errorHandler-Dr2nG0Ui.mjs").then((n) => n.r);
 	/**
 	* DISCLOSURE DEFAULTS MERGE — they used to be REPLACED, and that was two bugs.
 	*
@@ -1180,7 +1180,7 @@ async function registerResources(fastify, config, preResolvedModules, skippedBri
 		let discoveryPath;
 		let discoveryYieldedZero = false;
 		if (resolvedResources === void 0 && config.resourceDir) {
-			const { loadResources } = await import("./loadResources-6jO52-RR.mjs").then((n) => n.n);
+			const { loadResources } = await import("./loadResources-BtKj6P1P.mjs").then((n) => n.n);
 			const { resolve, dirname } = await import("node:path");
 			const { fileURLToPath } = await import("node:url");
 			const rawDir = config.resourceDir;
@@ -1305,7 +1305,7 @@ Resources supplied by "${m.name}": ${provided}.`);
 			if (fastify.hasDecorator("getScheduleStats")) throw new Error("[arc] modules declare scheduledJobs but schedulesPlugin was already registered manually. Configure their runner through arcPlugins.schedules so Arc can compose one schedule table.");
 			const frozenJobs = Object.freeze(scheduledJobs.map((job) => Object.freeze({ ...job })));
 			const scheduleOptions = typeof config.arcPlugins?.schedules === "object" ? config.arcPlugins.schedules : {};
-			const { default: schedulesPlugin } = await import("./schedules-CKTs5ys8.mjs").then((n) => n.n);
+			const { default: schedulesPlugin } = await import("./schedules-CVS7c1nv.mjs").then((n) => n.n);
 			await fastify.register(schedulesPlugin, {
 				...scheduleOptions,
 				schedules: frozenJobs
@@ -2011,7 +2011,7 @@ async function buildApp(options, loggerScope, onInstance, onBootDisposer) {
 	await registerErrorHandler(fastify, config, trackPlugin, moduleErrorMappers);
 	await registerResources(fastify, config, resolvedModules, skippedBridges);
 	if (config.replyHelpers) {
-		const { replyHelpersPlugin } = await import("./replyHelpers-Bnc6lJyy.mjs").then((n) => n.n);
+		const { replyHelpersPlugin } = await import("./replyHelpers-Dr2pnXZg.mjs").then((n) => n.n);
 		await fastify.register(replyHelpersPlugin);
 	}
 	if (config.serializeBigInt) {

package/dist/{defineAggregation--3xguLkk.mjs → defineAggregation-pxbd7BBK.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.45.1 | MIT | https://classytic.com */
 //#region src/core/aggregation/defineAggregation.ts
 /**
 * Declare a single resource aggregation. Exported configs flow into

package/dist/{defineResource-gUp9ug66.mjs → defineResource-DwgEjLCO.mjs}

@@ -1,10 +1,10 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
-import { m as MUTATION_OPERATIONS, t as CRUD_OPERATIONS } from "./constants-B2QHb6u6.mjs";
-import { t as arcLog } from "./logger-D4V1zGLI.mjs";
-import { a as autoInjectTenantFieldRules, c as BaseController, i as resolveOpenApiSchemas, t as buildResourcePlugin, v as detectOverriddenWriteSlots, y as isWriteVerbCapable } from "./plugin-DALd9dcF.mjs";
-import { B as requireAuth } from "./permissions-C5ijIz5Q.mjs";
-import { n as getAvailablePresets, t as applyPresets } from "./presets-CONf2Qem.mjs";
-import { t as pluralize } from "./pluralize-COUNYo3d.mjs";
+/*! @classytic/arc v2.45.1 | MIT | https://classytic.com */
+import { m as MUTATION_OPERATIONS, t as CRUD_OPERATIONS } from "./constants-CtWkmWn3.mjs";
+import { t as arcLog } from "./logger-qQNLlOAU.mjs";
+import { a as autoInjectTenantFieldRules, c as BaseController, i as resolveOpenApiSchemas, t as buildResourcePlugin, v as detectOverriddenWriteSlots, y as isWriteVerbCapable } from "./plugin-ByU3h-bR.mjs";
+import { B as requireAuth } from "./permissions-DN1CWH56.mjs";
+import { n as getAvailablePresets, t as applyPresets } from "./presets-CCOlKTZw.mjs";
+import { t as pluralize } from "./pluralize-Cdya8zYt.mjs";
 import { isReadOnlyRepo } from "@classytic/repo-core/repository";
 import { readEnv } from "@classytic/primitives/environment";
 //#region src/core/defineResource/writeVerbs.ts

package/dist/discovery/index.mjs

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.45.1 | MIT | https://classytic.com */
 import { readdir } from "node:fs/promises";
 import { extname, join, resolve } from "node:path";
 import { pathToFileURL } from "node:url";

package/dist/docs/index.mjs

@@ -1,6 +1,6 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
-import { n as getUserRoles } from "../userHelpers-C76zD5pa.mjs";
-import { n as openapi_default, t as buildOpenApiSpec } from "../openapi-CMegfsm8.mjs";
+/*! @classytic/arc v2.45.1 | MIT | https://classytic.com */
+import { n as getUserRoles } from "../userHelpers-oBTU3a_k.mjs";
+import { n as openapi_default, t as buildOpenApiSpec } from "../openapi-BrFPc3Ny.mjs";
 import fp from "fastify-plugin";
 //#region src/docs/scalar.ts
 const scalarPlugin = async (fastify, opts = {}) => {

package/dist/{elevation-BG4gnMsJ.mjs → elevation-B9wF2Z1F.mjs}

@@ -1,8 +1,8 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
-import { r as __exportAll } from "./rolldown-runtime-MYrLNGnq.mjs";
-import { t as arcLog } from "./logger-D4V1zGLI.mjs";
-import { n as requireSingleHeaderValue } from "./headers-DKZQKL-Z.mjs";
-import { n as getUserRoles } from "./userHelpers-C76zD5pa.mjs";
+/*! @classytic/arc v2.45.1 | MIT | https://classytic.com */
+import { t as __exportAll } from "./rolldown-runtime-DpVPUeXF.mjs";
+import { t as arcLog } from "./logger-qQNLlOAU.mjs";
+import { n as requireSingleHeaderValue } from "./headers-Dr-wt6Tr.mjs";
+import { n as getUserRoles } from "./userHelpers-oBTU3a_k.mjs";
 import { ARC_ERROR_CODES } from "@classytic/repo-core/errors";
 import fp from "fastify-plugin";
 //#region src/scope/elevation.ts

package/dist/encryption/index.mjs

@@ -1,6 +1,6 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
-import { t as ArcError } from "../errors-CW4anJBy.mjs";
-import { t as parseJsonBody } from "../jsonBody-YIq-vGLv.mjs";
+/*! @classytic/arc v2.45.1 | MIT | https://classytic.com */
+import { t as ArcError } from "../errors-BtHzrSA6.mjs";
+import { t as parseJsonBody } from "../jsonBody-DPU8yYwA.mjs";
 import { createCipheriv, createDecipheriv, randomBytes } from "node:crypto";
 import fp from "fastify-plugin";
 //#region src/encryption/fieldCipher.ts