@classytic/arc 2.44.0 → 2.45.1

package/dist/permissions/index.mjs

@@ -1,8 +1,8 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
-import { t as conjoinPolicyFilters } from "../filter-merge-DGM-GQ1J.mjs";
-import { n as getUserRoles, r as normalizeRoles } from "../userHelpers-C76zD5pa.mjs";
-import { a as resolveEffectiveRoles, i as fields, n as applyFieldWritePermissions, t as applyFieldReadPermissions } from "../fields-A5crhsJb.mjs";
-import { i as normalizeToDecision, r as evaluatePermissionDecision, t as applyAuthorizationDecision } from "../authorizationDecision-wX3SA9w_.mjs";
-import { i as resolveResourceRateLimiter, t as createMemoryResourceRateLimiter } from "../resourceRateLimit-urWPJxrt.mjs";
-import { A as requireAgentScope, B as requireAuth, C as createOrgPermissions, D as requireScopeContext, E as requireOrgRole, F as allowPublic, G as when, H as requirePlatformRole, I as anyOf, K as scopeOf, L as deny, M as requireMandate, N as allOf, O as requireServiceScope, P as allow, R as denyAll, S as createDynamicPermissionMatrix, T as requireOrgMembership, U as requireRoles, V as requireOwnership, W as roles, _ as requireGrant, a as adminOnly, b as describePermissionMap, c as ownerWithAdminBypass, d as publicRead, f as publicReadAdminWrite, g as modeSatisfies, h as GRANT_MODES, i as introspectRegistry, j as requireDPoP, k as requireTeamMembership, l as permissionMatrix, m as createRoleHierarchy, n as introspectCheck, o as authenticated, p as readOnly, r as introspectModule, s as fullPublic, t as buildPermissionMatrix, u as presets_exports, v as collectPublicSurface, w as requireOrgInScope, x as explainAccess, y as describePermission, z as not } from "../permissions-C5ijIz5Q.mjs";
+/*! @classytic/arc v2.45.1 | MIT | https://classytic.com */
+import { t as conjoinPolicyFilters } from "../filter-merge-xaiEKtz8.mjs";
+import { n as getUserRoles, r as normalizeRoles } from "../userHelpers-oBTU3a_k.mjs";
+import { a as resolveEffectiveRoles, i as fields, n as applyFieldWritePermissions, t as applyFieldReadPermissions } from "../fields-C1e_7Fwi.mjs";
+import { i as normalizeToDecision, r as evaluatePermissionDecision, t as applyAuthorizationDecision } from "../authorizationDecision-CVlaTjAX.mjs";
+import { i as resolveResourceRateLimiter, t as createMemoryResourceRateLimiter } from "../resourceRateLimit-BBdj5yRq.mjs";
+import { A as requireAgentScope, B as requireAuth, C as createOrgPermissions, D as requireScopeContext, E as requireOrgRole, F as allowPublic, G as when, H as requirePlatformRole, I as anyOf, K as scopeOf, L as deny, M as requireMandate, N as allOf, O as requireServiceScope, P as allow, R as denyAll, S as createDynamicPermissionMatrix, T as requireOrgMembership, U as requireRoles, V as requireOwnership, W as roles, _ as requireGrant, a as adminOnly, b as describePermissionMap, c as ownerWithAdminBypass, d as publicRead, f as publicReadAdminWrite, g as modeSatisfies, h as GRANT_MODES, i as introspectRegistry, j as requireDPoP, k as requireTeamMembership, l as permissionMatrix, m as createRoleHierarchy, n as introspectCheck, o as authenticated, p as readOnly, r as introspectModule, s as fullPublic, t as buildPermissionMatrix, u as presets_exports, v as collectPublicSurface, w as requireOrgInScope, x as explainAccess, y as describePermission, z as not } from "../permissions-DN1CWH56.mjs";
 export { GRANT_MODES, adminOnly, allOf, allow, allowPublic, anyOf, applyAuthorizationDecision, applyFieldReadPermissions, applyFieldWritePermissions, authenticated, buildPermissionMatrix, collectPublicSurface, conjoinPolicyFilters, createDynamicPermissionMatrix, createMemoryResourceRateLimiter, createOrgPermissions, createRoleHierarchy, deny, denyAll, describePermission, describePermissionMap, evaluatePermissionDecision, explainAccess, fields, fullPublic, getUserRoles, introspectCheck, introspectModule, introspectRegistry, modeSatisfies, normalizeRoles, normalizeToDecision, not, ownerWithAdminBypass, permissionMatrix, presets_exports as permissions, publicRead, publicReadAdminWrite, readOnly, requireAgentScope, requireAuth, requireDPoP, requireGrant, requireMandate, requireOrgInScope, requireOrgMembership, requireOrgRole, requireOwnership, requirePlatformRole, requireRoles, requireScopeContext, requireServiceScope, requireTeamMembership, resolveEffectiveRoles, resolveResourceRateLimiter, roles, scopeOf, when };

package/dist/{permissions-C5ijIz5Q.mjs → permissions-DN1CWH56.mjs}

@@ -1,12 +1,12 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
-import { r as __exportAll } from "./rolldown-runtime-MYrLNGnq.mjs";
-import { t as arcLog } from "./logger-D4V1zGLI.mjs";
-import { t as conjoinPolicyFilters } from "./filter-merge-DGM-GQ1J.mjs";
-import { n as getUserRoles } from "./userHelpers-C76zD5pa.mjs";
-import { C as isService, S as isOrgInScope, a as getDPoPJkt, b as isElevated, d as getScopeContext, f as getScopeContextMap, g as getUserId, m as getTeamId, n as PUBLIC_SCOPE, o as getMandate, p as getServiceScopes, u as getRequestScope, v as hasOrgAccess, x as isMember } from "./types-fvO6Ovzx.mjs";
-import { i as normalizeToDecision } from "./authorizationDecision-wX3SA9w_.mjs";
-import { n as declareRuntimeCapability } from "./runtimeCapabilities-DIMKMV2G.mjs";
-import { t as MemoryCacheStore } from "./memory-CTa5pOCW.mjs";
+/*! @classytic/arc v2.45.1 | MIT | https://classytic.com */
+import { t as __exportAll } from "./rolldown-runtime-DpVPUeXF.mjs";
+import { t as arcLog } from "./logger-qQNLlOAU.mjs";
+import { t as conjoinPolicyFilters } from "./filter-merge-xaiEKtz8.mjs";
+import { n as getUserRoles } from "./userHelpers-oBTU3a_k.mjs";
+import { C as isService, S as isOrgInScope, a as getDPoPJkt, b as isElevated, d as getScopeContext, f as getScopeContextMap, g as getUserId, m as getTeamId, n as PUBLIC_SCOPE, o as getMandate, p as getServiceScopes, u as getRequestScope, v as hasOrgAccess, x as isMember } from "./types-BI4sbUJ3.mjs";
+import { i as normalizeToDecision } from "./authorizationDecision-CVlaTjAX.mjs";
+import { n as declareRuntimeCapability } from "./runtimeCapabilities-D_3eUO6V.mjs";
+import { t as MemoryCacheStore } from "./memory-C0Blueoh.mjs";
 import { randomUUID } from "node:crypto";
 //#region src/permissions/context.ts
 /**

package/dist/{pipe-D81zMtWs.mjs → pipe-B8uq865o.mjs}

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
-import { r as ForbiddenError } from "./errors-CW4anJBy.mjs";
+/*! @classytic/arc v2.45.1 | MIT | https://classytic.com */
+import { r as ForbiddenError } from "./errors-BtHzrSA6.mjs";
 //#region src/pipeline/pipe.ts
 /**
 * Compose pipeline steps into an ordered array.

package/dist/pipeline/index.mjs

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
-import { n as pipe, t as executePipeline } from "../pipe-D81zMtWs.mjs";
+/*! @classytic/arc v2.45.1 | MIT | https://classytic.com */
+import { n as pipe, t as executePipeline } from "../pipe-B8uq865o.mjs";
 //#region src/pipeline/guard.ts
 /**
 * Create a named guard.

package/dist/{plan-CJGMKoui.mjs → plan-DUGfynNg.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.45.1 | MIT | https://classytic.com */
 import { createEventRouter, matchEventPattern } from "@classytic/primitives/events";
 //#region src/factory/module/graph.ts
 /**

package/dist/{plugin-DALd9dcF.mjs → plugin-ByU3h-bR.mjs}

@@ -1,23 +1,23 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
-import { g as SYSTEM_FIELDS, o as DEFAULT_TENANT_FIELD, s as DEFAULT_UPDATE_METHOD, t as CRUD_OPERATIONS } from "./constants-B2QHb6u6.mjs";
-import { t as arcLog } from "./logger-D4V1zGLI.mjs";
-import { t as conjoinPolicyFilters } from "./filter-merge-DGM-GQ1J.mjs";
-import { d as createDomainError, f as createError, i as NotFoundError, p as isArcError, r as ForbiddenError, u as ValidationError } from "./errors-CW4anJBy.mjs";
-import { t as simpleEqualityMatcher } from "./simpleEqualityMatcher-DbwIM1f1.mjs";
-import { n as requireSingleHeaderValue } from "./headers-DKZQKL-Z.mjs";
-import { n as getUserRoles, t as getUserId } from "./userHelpers-C76zD5pa.mjs";
-import { b as isElevated, c as getOrgId, n as PUBLIC_SCOPE, x as isMember } from "./types-fvO6Ovzx.mjs";
-import { r as resolveTenancy } from "./tenancy-DxV8OuX2.mjs";
-import { t as buildQueryKey } from "./keys-CpoiZ8hU.mjs";
-import { t as transactionContext } from "./transactionContext-orvnGu4F.mjs";
-import { a as resolveEffectiveRoles, n as applyFieldWritePermissions } from "./fields-A5crhsJb.mjs";
-import { E as ArcQueryParser, v as getDefaultCrudSchemas } from "./utils-BpkVZ8rB.mjs";
-import { n as convertRouteSchema, r as ensureSchemaConverter, t as convertOpenApiSchemas } from "./schemaConverter-BVjkQ5DD.mjs";
-import { i as pipeUIMessageStreamToReply, r as isReadableStream } from "./streaming-JzB5CAga.mjs";
-import { _ as buildArcDecorator, a as resolveRouterPluginMw, b as createRequestContext, c as buildPipelineHandler, d as buildCrudPermissionMw, f as buildRouteHooks, h as buildAuthMiddleware, i as buildRouteConfig, l as resolvePipelineSteps, m as routeHookOptions, n as tryRegisterRoute, o as selectPluginMw, p as resolveRoutePreHandlers, r as buildRateLimitConfig, t as resolveActionPermission, v as createCrudHandlers, y as createFastifyHandler } from "./actionPermissions-5N04zBL4.mjs";
-import { a as withoutTenantInjection } from "./tenantPreparation-CBvvAcAj.mjs";
-import { t as hasEvents } from "./typeGuards-kEaP_WmO.mjs";
-import { n as idempotencyConfigProblem } from "./requirement-Bu50QALH.mjs";
+/*! @classytic/arc v2.45.1 | MIT | https://classytic.com */
+import { g as SYSTEM_FIELDS, o as DEFAULT_TENANT_FIELD, s as DEFAULT_UPDATE_METHOD, t as CRUD_OPERATIONS } from "./constants-CtWkmWn3.mjs";
+import { t as arcLog } from "./logger-qQNLlOAU.mjs";
+import { t as conjoinPolicyFilters } from "./filter-merge-xaiEKtz8.mjs";
+import { d as createDomainError, f as createError, i as NotFoundError, p as isArcError, r as ForbiddenError, u as ValidationError } from "./errors-BtHzrSA6.mjs";
+import { t as simpleEqualityMatcher } from "./simpleEqualityMatcher-5jOzYQ_L.mjs";
+import { n as requireSingleHeaderValue } from "./headers-Dr-wt6Tr.mjs";
+import { n as getUserRoles, t as getUserId } from "./userHelpers-oBTU3a_k.mjs";
+import { b as isElevated, c as getOrgId, n as PUBLIC_SCOPE, x as isMember } from "./types-BI4sbUJ3.mjs";
+import { r as resolveTenancy } from "./tenancy-CVMvO5DH.mjs";
+import { t as buildQueryKey } from "./keys-Dgn6OYhl.mjs";
+import { t as transactionContext } from "./transactionContext-NHmhDIOF.mjs";
+import { a as resolveEffectiveRoles, n as applyFieldWritePermissions } from "./fields-C1e_7Fwi.mjs";
+import { E as ArcQueryParser, v as getDefaultCrudSchemas } from "./utils-BmE8zRrh.mjs";
+import { n as convertRouteSchema, r as ensureSchemaConverter, t as convertOpenApiSchemas } from "./schemaConverter-BQbg7loK.mjs";
+import { i as pipeUIMessageStreamToReply, r as isReadableStream } from "./streaming-DgUvMWlv.mjs";
+import { _ as buildArcDecorator, a as resolveRouterPluginMw, b as createRequestContext, c as buildPipelineHandler, d as buildCrudPermissionMw, f as buildRouteHooks, h as buildAuthMiddleware, i as buildRouteConfig, l as resolvePipelineSteps, m as routeHookOptions, n as tryRegisterRoute, o as selectPluginMw, p as resolveRoutePreHandlers, r as buildRateLimitConfig, t as resolveActionPermission, v as createCrudHandlers, y as createFastifyHandler } from "./actionPermissions-BLnbDA6g.mjs";
+import { a as withoutTenantInjection } from "./tenantPreparation-DIH-GX4g.mjs";
+import { t as hasEvents } from "./typeGuards-CPYR9RCg.mjs";
+import { n as idempotencyConfigProblem } from "./requirement-DxOaghWD.mjs";
 import { ARC_ERROR_CODES } from "@classytic/repo-core/errors";
 import { policyRecordToFilter } from "@classytic/repo-core/filter";
 import { retryingTransaction } from "@classytic/repo-core/repository";
@@ -3084,7 +3084,7 @@ function buildResourcePlugin(resource) {
 				extensions: resource.extensions
 			});
 			if (resource.actions && Object.keys(resource.actions).length > 0) {
-				const { createActionRouter } = await import("./createActionRouter-zG13rpPJ.mjs").then((n) => n.n);
+				const { createActionRouter } = await import("./createActionRouter-k-gwiPv6.mjs").then((n) => n.n);
 				const actionConfig = normalizeActionsToRouterConfig(resource.actions, resource.actionPermissions, resource.tag, resource.permissions, resource.name, typedInstance.log);
 				const actionTarget = resolveActionTargetFence(resource, actionConfig);
 				createActionRouter(typedInstance, {
@@ -3104,7 +3104,7 @@ function buildResourcePlugin(resource) {
 				});
 			}
 			if (resource.aggregations && Object.keys(resource.aggregations).length > 0) {
-				const [{ createAggregationRouter }, { adapterSupportsAggregate, ArcAggregationConfigError }] = await Promise.all([import("./createAggregationRouter-CWRz96Vr.mjs"), import("./validate-CWp-lsrm.mjs").then((n) => n.r)]);
+				const [{ createAggregationRouter }, { adapterSupportsAggregate, ArcAggregationConfigError }] = await Promise.all([import("./createAggregationRouter-BqWqhAPG.mjs"), import("./validate-Dby08LhR.mjs").then((n) => n.r)]);
 				const repoForAgg = resource.controller?.repository ?? resource.repository;
 				if (!adapterSupportsAggregate(repoForAgg)) {
 					const undispatchable = Object.entries(resource.aggregations).filter(([, cfg]) => !cfg.materialized).map(([name]) => name);

package/dist/plugins/index.d.mts

@@ -4,7 +4,7 @@ import { Et as RouteDefinition, J as MiddlewareConfig, U as PresetHook, X as Rou
 import { i as errorHandlerPlugin, n as ErrorMapper, r as defaultIsDuplicateKeyError, t as ErrorHandlerOptions } from "../errorHandler--4rSMMvq.mjs";
 import { C as _default$8, E as _default$3, S as SchedulesPluginOptions, T as HealthOptions, b as ScheduleDefinition, w as HealthCheck, x as ScheduleStats } from "../types-BJ-2XqVF.mjs";
 import { i as _default, n as ArcCorePluginOptions, r as PluginMeta, t as ArcCore } from "../fastify-augmentation-DRlCIWE9.mjs";
-import { _ as _default$2, a as MetricsOptions, c as RealtimeOptions, d as _default$9, f as CachingOptions, g as ShutdownState, h as GracefulShutdownOptions, i as MetricsCollector, l as _default$6, m as _default$1, n as _default$10, o as _default$4, p as CachingRule, r as MetricEntry, s as ChangeOperation, t as VersioningOptions, u as SSEOptions } from "../versioning-Bsb51gGT.mjs";
+import { _ as ShutdownState, a as MetricsOptions, c as RealtimeOptions, d as SSEStats, f as _default$9, g as GracefulShutdownOptions, h as _default$1, i as MetricsCollector, l as _default$6, m as CachingRule, n as _default$10, o as _default$4, p as CachingOptions, r as MetricEntry, s as ChangeOperation, t as VersioningOptions, u as SSEOptions, v as _default$2 } from "../versioning-Bqm_57Qt.mjs";
 import { t as TracingOptions } from "../tracing-Dro5eH6j.mjs";
 import { PaginatedResult } from "@classytic/repo-core/pagination";
 import { FastifyInstance, FastifyPluginAsync } from "fastify";
@@ -226,4 +226,4 @@ export declare function createRequestIdGenerator(opts?: Pick<RequestIdOptions, "
 }) => string;
 declare const _default$7: FastifyPluginAsync<RequestIdOptions>;
 //#endregion
-export { type ArcCore, type ArcCorePluginOptions, type ArcPlugin, type CachingOptions, type CachingRule, type ChangeOperation, type CreatePluginDefinition, type ErrorHandlerOptions, type ErrorMapper, type GracefulShutdownOptions, type HealthCheck, type HealthOptions, type MetricEntry, type MetricsCollector, type MetricsOptions, type PluginMeta, type PluginResourceResult, type PressureApi, type PressureOptions, type PressureSignal, type PressureSnapshot, type PressureState, type PressureThresholds, type RealtimeOptions, type RequestIdOptions, type SSEOptions, type ScheduleDefinition, type ScheduleStats, type SchedulesPluginOptions, type ShutdownState, type TracingOptions, type VersioningOptions, _default as arcCorePlugin, _default$1 as cachingPlugin, defaultIsDuplicateKeyError, errorHandlerPlugin, _default$2 as gracefulShutdownPlugin, _default$3 as healthPlugin, _default$4 as metricsPlugin, _default$5 as pressurePlugin, _default$6 as realtimePlugin, _default$7 as requestIdPlugin, _default$8 as schedulesPlugin, _default$9 as ssePlugin, _default$10 as versioningPlugin };
+export { type ArcCore, type ArcCorePluginOptions, type ArcPlugin, type CachingOptions, type CachingRule, type ChangeOperation, type CreatePluginDefinition, type ErrorHandlerOptions, type ErrorMapper, type GracefulShutdownOptions, type HealthCheck, type HealthOptions, type MetricEntry, type MetricsCollector, type MetricsOptions, type PluginMeta, type PluginResourceResult, type PressureApi, type PressureOptions, type PressureSignal, type PressureSnapshot, type PressureState, type PressureThresholds, type RealtimeOptions, type RequestIdOptions, type SSEOptions, type SSEStats, type ScheduleDefinition, type ScheduleStats, type SchedulesPluginOptions, type ShutdownState, type TracingOptions, type VersioningOptions, _default as arcCorePlugin, _default$1 as cachingPlugin, defaultIsDuplicateKeyError, errorHandlerPlugin, _default$2 as gracefulShutdownPlugin, _default$3 as healthPlugin, _default$4 as metricsPlugin, _default$5 as pressurePlugin, _default$6 as realtimePlugin, _default$7 as requestIdPlugin, _default$8 as schedulesPlugin, _default$9 as ssePlugin, _default$10 as versioningPlugin };

package/dist/plugins/index.mjs

@@ -1,20 +1,20 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
-import { m as MUTATION_OPERATIONS } from "../constants-B2QHb6u6.mjs";
-import { t as arcLog } from "../logger-D4V1zGLI.mjs";
-import { c as getOrgId } from "../types-fvO6Ovzx.mjs";
-import { n as requestContext } from "../requestContext-C10UeFe5.mjs";
-import { t as hasEvents } from "../typeGuards-kEaP_WmO.mjs";
-import { t as HookSystem } from "../HookSystem-yjEgn7Cm.mjs";
-import { t as ResourceRegistry } from "../ResourceRegistry-DJxHUpE4.mjs";
-import { c as createRequestIdGenerator, l as requestId_default, n as health_default, u as sanitizeRequestId } from "../health-CrqUp3sz.mjs";
-import { t as caching_default } from "../caching-Drp68DIS.mjs";
-import { n as errorHandlerPlugin, t as defaultIsDuplicateKeyError } from "../errorHandler-COHw3N1b.mjs";
-import { t as metrics_default } from "../metrics-DsZrvnpB.mjs";
-import { t as realtime_default } from "../realtime-xyubMKSB.mjs";
-import { t as replyHelpersPlugin } from "../replyHelpers-Bnc6lJyy.mjs";
-import { t as schedules_default } from "../schedules-CKTs5ys8.mjs";
-import { t as sse_default } from "../sse-BzJFPX_1.mjs";
-import { t as versioning_default } from "../versioning-CHhL9P3o.mjs";
+/*! @classytic/arc v2.45.1 | MIT | https://classytic.com */
+import { m as MUTATION_OPERATIONS } from "../constants-CtWkmWn3.mjs";
+import { t as arcLog } from "../logger-qQNLlOAU.mjs";
+import { c as getOrgId } from "../types-BI4sbUJ3.mjs";
+import { n as requestContext } from "../requestContext-DBKIdmDi.mjs";
+import { t as hasEvents } from "../typeGuards-CPYR9RCg.mjs";
+import { t as HookSystem } from "../HookSystem-4pABQnGn.mjs";
+import { t as ResourceRegistry } from "../ResourceRegistry-BBaN_Ne-.mjs";
+import { c as createRequestIdGenerator, l as requestId_default, n as health_default, u as sanitizeRequestId } from "../health-BLYn_Hds.mjs";
+import { t as caching_default } from "../caching-DqakP2vY.mjs";
+import { n as errorHandlerPlugin, t as defaultIsDuplicateKeyError } from "../errorHandler-Dr2nG0Ui.mjs";
+import { t as metrics_default } from "../metrics-DYka72iN.mjs";
+import { t as realtime_default } from "../realtime-_59Rlje8.mjs";
+import { t as replyHelpersPlugin } from "../replyHelpers-Dr2pnXZg.mjs";
+import { t as schedules_default } from "../schedules-CVS7c1nv.mjs";
+import { t as sse_default } from "../sse-BilBz766.mjs";
+import { t as versioning_default } from "../versioning-P6JMNcJr.mjs";
 import fp from "fastify-plugin";
 import { performance as performance$1 } from "node:perf_hooks";
 //#region src/core/arcCorePlugin.ts

package/dist/plugins/response-cache.mjs

@@ -1,7 +1,7 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
-import { n as declareRuntimeCapability } from "../runtimeCapabilities-DIMKMV2G.mjs";
-import { t as hasEvents } from "../typeGuards-kEaP_WmO.mjs";
-import { n as evictToSize, r as touch, t as assertCapacity } from "../boundedMap-DWiKW7lP.mjs";
+/*! @classytic/arc v2.45.1 | MIT | https://classytic.com */
+import { n as declareRuntimeCapability } from "../runtimeCapabilities-D_3eUO6V.mjs";
+import { t as hasEvents } from "../typeGuards-CPYR9RCg.mjs";
+import { n as evictToSize, r as touch, t as assertCapacity } from "../boundedMap-DSy7KkeX.mjs";
 import fp from "fastify-plugin";
 //#region src/plugins/response-cache.ts
 /**

package/dist/plugins/tracing-entry.mjs

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.45.1 | MIT | https://classytic.com */
 import { createRequire } from "node:module";
 import fp from "fastify-plugin";
 //#region src/plugins/tracing.ts
@@ -59,7 +59,7 @@ try {
 function createTracerProvider(options) {
 	if (!isAvailable || !NodeTracerProvider || !BatchSpanProcessor || !OTLPTraceExporter) return null;
 	const { serviceName = "@classytic/arc", serviceVersion, exporterUrl = "http://localhost:4318/v1/traces" } = options;
-	const resolvedVersion = serviceVersion ?? "2.44.0";
+	const resolvedVersion = serviceVersion ?? "2.45.1";
 	const exporter = new OTLPTraceExporter({ url: exporterUrl });
 	const provider = new NodeTracerProvider({ resource: { attributes: {
 		"service.name": serviceName,

package/dist/{pluralize-COUNYo3d.mjs → pluralize-Cdya8zYt.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.45.1 | MIT | https://classytic.com */
 //#region src/utils/pluralize.ts
 /**
 * Lightweight English pluralization for the Arc CLI.

package/dist/presets/filesUpload.mjs

@@ -1,8 +1,8 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
-import { i as NotFoundError, u as ValidationError } from "../errors-CW4anJBy.mjs";
-import { c as getOrgId, g as getUserId } from "../types-fvO6Ovzx.mjs";
-import { B as requireAuth, F as allowPublic } from "../permissions-C5ijIz5Q.mjs";
-import { t as multipartBody } from "../multipartBody-Cc7eZ9cq.mjs";
+/*! @classytic/arc v2.45.1 | MIT | https://classytic.com */
+import { i as NotFoundError, u as ValidationError } from "../errors-BtHzrSA6.mjs";
+import { c as getOrgId, g as getUserId } from "../types-BI4sbUJ3.mjs";
+import { B as requireAuth, F as allowPublic } from "../permissions-DN1CWH56.mjs";
+import { t as multipartBody } from "../multipartBody-RHvIkNmc.mjs";
 //#region src/presets/filesUpload.ts
 const DEFAULT_FIELD_NAME = "file";
 const DEFAULT_MAX_FILE_SIZE = 10485760;

package/dist/presets/index.mjs

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
-import { a as treePreset, c as ownedByUserPreset, i as registerPreset, l as bulkPreset, n as getAvailablePresets, o as softDeletePreset, r as getPreset, s as slugLookupPreset, t as applyPresets, u as auditedPreset } from "../presets-CONf2Qem.mjs";
+/*! @classytic/arc v2.45.1 | MIT | https://classytic.com */
+import { a as treePreset, c as ownedByUserPreset, i as registerPreset, l as bulkPreset, n as getAvailablePresets, o as softDeletePreset, r as getPreset, s as slugLookupPreset, t as applyPresets, u as auditedPreset } from "../presets-CCOlKTZw.mjs";
 import { filesUploadPreset } from "./filesUpload.mjs";
 import { multiTenantPreset } from "./multiTenant.mjs";
 import { searchPreset } from "./search.mjs";

package/dist/presets/multiTenant.mjs

@@ -1,8 +1,8 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
-import "../constants-B2QHb6u6.mjs";
-import { t as ArcError } from "../errors-CW4anJBy.mjs";
-import { u as getRequestScope } from "../types-fvO6Ovzx.mjs";
-import { i as tagTenantPreparation, t as applyTenantPreparation } from "../tenantPreparation-CBvvAcAj.mjs";
+/*! @classytic/arc v2.45.1 | MIT | https://classytic.com */
+import "../constants-CtWkmWn3.mjs";
+import { t as ArcError } from "../errors-BtHzrSA6.mjs";
+import { u as getRequestScope } from "../types-BI4sbUJ3.mjs";
+import { i as tagTenantPreparation, t as applyTenantPreparation } from "../tenantPreparation-DIH-GX4g.mjs";
 //#region src/presets/multiTenant.ts
 function createTenantMiddleware(specs, mode) {
 	const preparation = {

package/dist/presets/search.mjs

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
-import { B as requireAuth, F as allowPublic } from "../permissions-C5ijIz5Q.mjs";
+/*! @classytic/arc v2.45.1 | MIT | https://classytic.com */
+import { B as requireAuth, F as allowPublic } from "../permissions-DN1CWH56.mjs";
 //#region src/presets/search.ts
 const BUILTINS = [
 	{

package/dist/{presets-CONf2Qem.mjs → presets-CCOlKTZw.mjs}

@@ -1,7 +1,7 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
-import { l as UnauthorizedError } from "./errors-CW4anJBy.mjs";
-import { b as isElevated, n as PUBLIC_SCOPE } from "./types-fvO6Ovzx.mjs";
-import { B as requireAuth, F as allowPublic, U as requireRoles } from "./permissions-C5ijIz5Q.mjs";
+/*! @classytic/arc v2.45.1 | MIT | https://classytic.com */
+import { l as UnauthorizedError } from "./errors-BtHzrSA6.mjs";
+import { b as isElevated, n as PUBLIC_SCOPE } from "./types-BI4sbUJ3.mjs";
+import { B as requireAuth, F as allowPublic, U as requireRoles } from "./permissions-DN1CWH56.mjs";
 import { multiTenantPreset } from "./presets/multiTenant.mjs";
 //#region src/presets/audited.ts
 /**

package/dist/{projection-wFoLqdss.mjs → projection-BGty6ie4.mjs}

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
-import { c as getOrgId, f as getScopeContextMap, g as getUserId, m as getTeamId, x as isMember } from "./types-fvO6Ovzx.mjs";
+/*! @classytic/arc v2.45.1 | MIT | https://classytic.com */
+import { c as getOrgId, f as getScopeContextMap, g as getUserId, m as getTeamId, x as isMember } from "./types-BI4sbUJ3.mjs";
 //#region src/scope/projection.ts
 /**
 * Compute the request-scope projection. Returns `undefined` when no

package/dist/{queryCachePlugin-BATECpyh.mjs → queryCachePlugin-B7itTkWu.mjs}

@@ -1,9 +1,9 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
-import { r as __exportAll } from "./rolldown-runtime-MYrLNGnq.mjs";
-import { i as versionKey, r as tagVersionKey } from "./keys-CpoiZ8hU.mjs";
-import { n as declareRuntimeCapability } from "./runtimeCapabilities-DIMKMV2G.mjs";
-import { t as hasEvents } from "./typeGuards-kEaP_WmO.mjs";
-import { t as MemoryCacheStore } from "./memory-CTa5pOCW.mjs";
+/*! @classytic/arc v2.45.1 | MIT | https://classytic.com */
+import { t as __exportAll } from "./rolldown-runtime-DpVPUeXF.mjs";
+import { i as versionKey, r as tagVersionKey } from "./keys-Dgn6OYhl.mjs";
+import { n as declareRuntimeCapability } from "./runtimeCapabilities-D_3eUO6V.mjs";
+import { t as hasEvents } from "./typeGuards-CPYR9RCg.mjs";
+import { t as MemoryCacheStore } from "./memory-C0Blueoh.mjs";
 import fp from "fastify-plugin";
 //#region src/cache/QueryCache.ts
 const MISS = Object.freeze({

package/dist/{rateLimitKey-DVEZ_UpV.mjs → rateLimitKey-DBWO59H9.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.45.1 | MIT | https://classytic.com */
 //#region src/scope/rateLimitKey.ts
 /**
 * Marks a key generator as SCOPE-AWARE, so `buildRateLimitOpts` can place the rate-limit

package/dist/{realtime-xyubMKSB.mjs → realtime-_59Rlje8.mjs}

@@ -1,14 +1,14 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
-import { r as __exportAll } from "./rolldown-runtime-MYrLNGnq.mjs";
-import { t as arcLog } from "./logger-D4V1zGLI.mjs";
-import { t as simpleEqualityMatcher } from "./simpleEqualityMatcher-DbwIM1f1.mjs";
-import { n as getUserRoles } from "./userHelpers-C76zD5pa.mjs";
-import { n as isEventVisible, t as eventAudienceOf } from "./tenancy-DxV8OuX2.mjs";
-import { t as applyFieldReadPermissions } from "./fields-A5crhsJb.mjs";
-import { a as promoteStreamTokenToHeader } from "./streaming-JzB5CAga.mjs";
-import { n as evaluateAndApplyPermission } from "./authorizationDecision-wX3SA9w_.mjs";
-import { t as openSseStream } from "./sseStream-DQChzGTs.mjs";
-import { n as arcRouteValidatorCompiler } from "./routeValidator-DHtpzrzk.mjs";
+/*! @classytic/arc v2.45.1 | MIT | https://classytic.com */
+import { t as __exportAll } from "./rolldown-runtime-DpVPUeXF.mjs";
+import { t as arcLog } from "./logger-qQNLlOAU.mjs";
+import { t as simpleEqualityMatcher } from "./simpleEqualityMatcher-5jOzYQ_L.mjs";
+import { n as getUserRoles } from "./userHelpers-oBTU3a_k.mjs";
+import { n as isEventVisible, t as eventAudienceOf } from "./tenancy-CVMvO5DH.mjs";
+import { t as applyFieldReadPermissions } from "./fields-C1e_7Fwi.mjs";
+import { a as promoteStreamTokenToHeader } from "./streaming-DgUvMWlv.mjs";
+import { n as evaluateAndApplyPermission } from "./authorizationDecision-CVlaTjAX.mjs";
+import { t as openSseStream } from "./sseStream-BG_uJL6J.mjs";
+import { n as arcRouteValidatorCompiler } from "./routeValidator-BNTqM1Eh.mjs";
 import fp from "fastify-plugin";
 //#region src/plugins/realtime.ts
 var realtime_exports = /* @__PURE__ */ __exportAll({

package/dist/registry/index.mjs

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
-import { a as getCascadingResources, i as cascadeDeleteForOrganization, n as buildResourceManifestFromRegistry, o as getCascadingResourcesWithMetadata, r as introspectionPlugin_default, s as assertNoTenantData, t as buildResourceManifest } from "../registry-Bdzg-hdm.mjs";
-import { t as ResourceRegistry } from "../ResourceRegistry-DJxHUpE4.mjs";
+/*! @classytic/arc v2.45.1 | MIT | https://classytic.com */
+import { a as getCascadingResources, i as cascadeDeleteForOrganization, n as buildResourceManifestFromRegistry, o as getCascadingResourcesWithMetadata, r as introspectionPlugin_default, s as assertNoTenantData, t as buildResourceManifest } from "../registry-uG4wr541.mjs";
+import { t as ResourceRegistry } from "../ResourceRegistry-BBaN_Ne-.mjs";
 export { ResourceRegistry, assertNoTenantData, buildResourceManifest, buildResourceManifestFromRegistry, cascadeDeleteForOrganization, getCascadingResources, getCascadingResourcesWithMetadata, introspectionPlugin_default as introspectionPlugin };

package/dist/{registry-Bdzg-hdm.mjs → registry-uG4wr541.mjs}

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
-import { t as CRUD_OPERATIONS } from "./constants-B2QHb6u6.mjs";
+/*! @classytic/arc v2.45.1 | MIT | https://classytic.com */
+import { t as CRUD_OPERATIONS } from "./constants-CtWkmWn3.mjs";
 import fp from "fastify-plugin";
 //#region src/registry/assertNoTenantData.ts
 /**

package/dist/{renewingLease-BFJxGPuh.mjs → renewingLease-CiU3ZynH.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.45.1 | MIT | https://classytic.com */
 //#region src/lock/renewingLease.ts
 /**
 * Start renewing an ALREADY-ACQUIRED lease. The caller performed the

package/dist/{replyHelpers-Bnc6lJyy.mjs → replyHelpers-Dr2pnXZg.mjs}

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
-import { r as __exportAll } from "./rolldown-runtime-MYrLNGnq.mjs";
+/*! @classytic/arc v2.45.1 | MIT | https://classytic.com */
+import { t as __exportAll } from "./rolldown-runtime-DpVPUeXF.mjs";
 import { toCanonicalList } from "@classytic/repo-core/pagination";
 import fp from "fastify-plugin";
 //#region src/plugins/replyHelpers.ts

package/dist/{requestContext-C10UeFe5.mjs → requestContext-DBKIdmDi.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.45.1 | MIT | https://classytic.com */
 import { AsyncLocalStorage } from "node:async_hooks";
 //#region src/context/requestContext.ts
 /**

package/dist/{requirement-Bu50QALH.mjs → requirement-DxOaghWD.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.45.1 | MIT | https://classytic.com */
 //#region src/idempotency/requirement.ts
 /** What is wrong with a route's idempotency declaration, or `undefined` when it is sound. */
 function idempotencyConfigProblem(config) {

package/dist/{resourceRateLimit-urWPJxrt.mjs → resourceRateLimit-BBdj5yRq.mjs}

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
-import { t as createTenantKeyGenerator } from "./rateLimitKey-DVEZ_UpV.mjs";
+/*! @classytic/arc v2.45.1 | MIT | https://classytic.com */
+import { t as createTenantKeyGenerator } from "./rateLimitKey-DBWO59H9.mjs";
 //#region src/permissions/resourceRateLimit.ts
 function decision(allowed, max, remaining, ttlSeconds) {
 	const reset = Math.max(1, ttlSeconds);

package/dist/rolldown-runtime-DpVPUeXF.mjs

@@ -0,0 +1,15 @@
+/*! @classytic/arc v2.45.1 | MIT | https://classytic.com */
+import "node:module";
+//#region \0rolldown/runtime.js
+var __defProp = Object.defineProperty;
+var __exportAll = (all, no_symbols) => {
+	let target = {};
+	for (var name in all) __defProp(target, name, {
+		get: all[name],
+		enumerable: true
+	});
+	if (!no_symbols) __defProp(target, Symbol.toStringTag, { value: "Module" });
+	return target;
+};
+//#endregion
+export { __exportAll as t };

package/dist/{routeValidator-DHtpzrzk.mjs → routeValidator-BNTqM1Eh.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.45.1 | MIT | https://classytic.com */
 import { AjvCompiler } from "@fastify/ajv-compiler";
 //#region src/core/routeValidator.ts
 /**

package/dist/{runtimeCapabilities-DIMKMV2G.mjs → runtimeCapabilities-D_3eUO6V.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.45.1 | MIT | https://classytic.com */
 //#region src/utils/runtimeCapabilities.ts
 /**
 * `Symbol.for` so declarations from two arc copies in one dependency graph

package/dist/{schedules-CKTs5ys8.mjs → schedules-CVS7c1nv.mjs}

@@ -1,8 +1,8 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
-import { r as __exportAll } from "./rolldown-runtime-MYrLNGnq.mjs";
-import { a as runShutdown, i as runAdmittedWork, r as registerShutdownParticipant } from "./shutdown-LpLMH8T1.mjs";
-import { t as runWorkScope } from "./workScope-n9a7d_lZ.mjs";
-import { t as startRenewingLease } from "./renewingLease-BFJxGPuh.mjs";
+/*! @classytic/arc v2.45.1 | MIT | https://classytic.com */
+import { t as __exportAll } from "./rolldown-runtime-DpVPUeXF.mjs";
+import { a as runShutdown, i as runAdmittedWork, r as registerShutdownParticipant } from "./shutdown-BCXCwghd.mjs";
+import { t as runWorkScope } from "./workScope-BcMLKa3G.mjs";
+import { t as startRenewingLease } from "./renewingLease-CiU3ZynH.mjs";
 import fp from "fastify-plugin";
 //#region src/plugins/schedules.ts
 var schedules_exports = /* @__PURE__ */ __exportAll({

package/dist/{schemaConverter-BVjkQ5DD.mjs → schemaConverter-BQbg7loK.mjs}

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
-import { t as arcLog } from "./logger-D4V1zGLI.mjs";
+/*! @classytic/arc v2.45.1 | MIT | https://classytic.com */
+import { t as arcLog } from "./logger-qQNLlOAU.mjs";
 //#region src/utils/schemaConverter.ts
 /**
 * Schema Converter — Detect-First, Convert-Only-When-Needed

package/dist/{schemaIR-BA0Hb21Y.mjs → schemaIR-CUI3hPQR.mjs}

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
-import { o as toJsonSchema } from "./schemaConverter-BVjkQ5DD.mjs";
+/*! @classytic/arc v2.45.1 | MIT | https://classytic.com */
+import { o as toJsonSchema } from "./schemaConverter-BQbg7loK.mjs";
 //#region src/core/schemaIR.ts
 /**
 * Schema IR — one canonical representation, two adapters.

package/dist/schemas/index.mjs

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.45.1 | MIT | https://classytic.com */
 import { errorContractSchema, errorDetailSchema } from "@classytic/repo-core/errors";
 import { Type, Type as Type$1 } from "typebox";
 //#region src/schemas/index.ts

package/dist/scim/index.mjs

@@ -1,5 +1,5 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
-import { t as parseJsonBody } from "../jsonBody-YIq-vGLv.mjs";
+/*! @classytic/arc v2.45.1 | MIT | https://classytic.com */
+import { t as parseJsonBody } from "../jsonBody-DPU8yYwA.mjs";
 import fp from "fastify-plugin";
 //#region src/scim/errors.ts
 var ScimError = class extends Error {

package/dist/scope/index.mjs

@@ -1,6 +1,6 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
-import { C as isService, D as requireUserId, E as requireTeamId, O as scopeFirstCtx, S as isOrgInScope, T as requireOrgId, _ as getUserRoles, a as getDPoPJkt, b as isElevated, c as getOrgId, d as getScopeContext, f as getScopeContextMap, g as getUserId, h as getTenantFromRequest, i as getClientId, l as getOrgRoles, m as getTeamId, n as PUBLIC_SCOPE, o as getMandate, p as getServiceScopes, r as getAncestorOrgIds, s as getOrgContext, t as AUTHENTICATED_SCOPE, u as getRequestScope, v as hasOrgAccess, w as requireClientId, x as isMember, y as isAuthenticated } from "../types-fvO6Ovzx.mjs";
-import { t as createTenantKeyGenerator } from "../rateLimitKey-DVEZ_UpV.mjs";
-import { t as elevation_default } from "../elevation-BG4gnMsJ.mjs";
-import { t as resolveOrgFromHeader } from "../scope-DINaj7Ax.mjs";
+/*! @classytic/arc v2.45.1 | MIT | https://classytic.com */
+import { C as isService, D as requireUserId, E as requireTeamId, O as scopeFirstCtx, S as isOrgInScope, T as requireOrgId, _ as getUserRoles, a as getDPoPJkt, b as isElevated, c as getOrgId, d as getScopeContext, f as getScopeContextMap, g as getUserId, h as getTenantFromRequest, i as getClientId, l as getOrgRoles, m as getTeamId, n as PUBLIC_SCOPE, o as getMandate, p as getServiceScopes, r as getAncestorOrgIds, s as getOrgContext, t as AUTHENTICATED_SCOPE, u as getRequestScope, v as hasOrgAccess, w as requireClientId, x as isMember, y as isAuthenticated } from "../types-BI4sbUJ3.mjs";
+import { t as createTenantKeyGenerator } from "../rateLimitKey-DBWO59H9.mjs";
+import { t as elevation_default } from "../elevation-B9wF2Z1F.mjs";
+import { t as resolveOrgFromHeader } from "../scope-DFXngazv.mjs";
 export { AUTHENTICATED_SCOPE, PUBLIC_SCOPE, createTenantKeyGenerator, elevation_default as elevationPlugin, getAncestorOrgIds, getClientId, getDPoPJkt, getMandate, getOrgContext, getOrgId, getOrgRoles, getRequestScope, getScopeContext, getScopeContextMap, getServiceScopes, getTeamId, getTenantFromRequest, getUserId, getUserRoles, hasOrgAccess, isAuthenticated, isElevated, isMember, isOrgInScope, isService, requireClientId, requireOrgId, requireTeamId, requireUserId, resolveOrgFromHeader, scopeFirstCtx };

package/dist/{scope-DINaj7Ax.mjs → scope-DFXngazv.mjs}

@@ -1,7 +1,7 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
-import { a as OrgAccessDeniedError, l as UnauthorizedError } from "./errors-CW4anJBy.mjs";
-import { n as requireSingleHeaderValue } from "./headers-DKZQKL-Z.mjs";
-import { n as getUserRoles } from "./userHelpers-C76zD5pa.mjs";
+/*! @classytic/arc v2.45.1 | MIT | https://classytic.com */
+import { a as OrgAccessDeniedError, l as UnauthorizedError } from "./errors-BtHzrSA6.mjs";
+import { n as requireSingleHeaderValue } from "./headers-Dr-wt6Tr.mjs";
+import { n as getUserRoles } from "./userHelpers-oBTU3a_k.mjs";
 //#region src/scope/resolveOrgFromHeader.ts
 /**
 * Create a preHandler hook that resolves org scope from a header.

package/dist/{shutdown-LpLMH8T1.mjs → shutdown-BCXCwghd.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.45.1 | MIT | https://classytic.com */
 import { AsyncLocalStorage } from "node:async_hooks";
 //#region src/utils/shutdown.ts
 /** Stop admissions across every runtime before draining work and disposing domain engines. */

package/dist/{simpleEqualityMatcher-DbwIM1f1.mjs → simpleEqualityMatcher-5jOzYQ_L.mjs}

@@ -1,4 +1,4 @@
-/*! @classytic/arc v2.44.0 | MIT | https://classytic.com */
+/*! @classytic/arc v2.45.1 | MIT | https://classytic.com */
 //#region src/utils/simpleEqualityMatcher.ts
 /**
 * `simpleEqualityMatcher` — a minimal, dialect-agnostic flat-key equality