@classytic/arc 2.9.1 → 2.10.8

package/dist/{createApp-CBJUJKGP.mjs → createApp-BwnEAO2h.mjs}

@@ -116,10 +116,7 @@ const developmentPreset = {
 			"x-request-id"
 		]
 	},
-	rateLimit: {
-		max: 1e3,
-		timeWindow: "1 minute"
-	},
+	rateLimit: false,
 	underPressure: {
 		exposeStatusRoute: true,
 		maxEventLoopDelay: 5e3
@@ -207,7 +204,7 @@ async function registerArcCore(fastify, config, trackPlugin) {
 	await fastify.register(arcCorePlugin, { emitEvents: config.arcPlugins?.emitEvents !== false });
 	trackPlugin("arc-core");
 	if (config.arcPlugins?.events !== false) {
-		const { default: eventPlugin } = await import("./eventPlugin-Dl7MoVWH.mjs").then((n) => n.n);
+		const { default: eventPlugin } = await import("./eventPlugin-ByU4Cv0e.mjs").then((n) => n.n);
 		const eventOpts = typeof config.arcPlugins?.events === "object" ? config.arcPlugins.events : {};
 		await fastify.register(eventPlugin, {
 			...eventOpts,
@@ -243,15 +240,15 @@ async function registerArcPlugins(fastify, config, trackPlugin, modules) {
 		trackPlugin("arc-graceful-shutdown");
 	}
 	if (config.arcPlugins?.caching) {
-		const { default: cachingPlugin } = await import("./caching-CjybdRwx.mjs").then((n) => n.r);
+		const { default: cachingPlugin } = await import("./caching-3h93rkJM.mjs").then((n) => n.r);
 		const opts = config.arcPlugins.caching === true ? {} : config.arcPlugins.caching;
 		await fastify.register(cachingPlugin, opts);
 		trackPlugin("arc-caching", opts);
 	}
 	if (config.arcPlugins?.queryCache) {
-		const { queryCachePlugin } = await import("./queryCachePlugin-DbUVroUG.mjs").then((n) => n.n);
+		const { queryCachePlugin } = await import("./queryCachePlugin-ChLNZvFT.mjs").then((n) => n.n);
 		const opts = config.arcPlugins.queryCache === true ? {} : config.arcPlugins.queryCache;
-		const store = config.stores?.queryCache ?? new (await (import("./memory-BFAYkf8H.mjs").then((n) => n.n))).MemoryCacheStore();
+		const store = config.stores?.queryCache ?? new (await (import("./memory-DqI-449b.mjs").then((n) => n.n))).MemoryCacheStore();
 		await fastify.register(queryCachePlugin, {
 			store,
 			...opts
@@ -260,7 +257,7 @@ async function registerArcPlugins(fastify, config, trackPlugin, modules) {
 	}
 	if (config.arcPlugins?.sse) if (config.arcPlugins?.events === false) fastify.log.warn("SSE plugin requires events plugin (arcPlugins.events). SSE disabled.");
 	else {
-		const { default: ssePlugin } = await import("./sse-CJpt7LGI.mjs").then((n) => n.r);
+		const { default: ssePlugin } = await import("./sse-D8UeDwis.mjs").then((n) => n.r);
 		const opts = config.arcPlugins.sse === true ? {} : config.arcPlugins.sse;
 		await fastify.register(ssePlugin, opts);
 		trackPlugin("arc-sse", opts);
@@ -272,7 +269,7 @@ async function registerArcPlugins(fastify, config, trackPlugin, modules) {
 		trackPlugin("arc-metrics", opts);
 	}
 	if (config.arcPlugins?.versioning) {
-		const { default: versioningPlugin } = await import("./versioning-Cm8qoFDg.mjs").then((n) => n.r);
+		const { default: versioningPlugin } = await import("./versioning-B6mimogM.mjs").then((n) => n.r);
 		await fastify.register(versioningPlugin, config.arcPlugins.versioning);
 		trackPlugin("arc-versioning", config.arcPlugins.versioning);
 	}
@@ -303,7 +300,8 @@ async function registerAuth(fastify, config, trackPlugin) {
 			const { plugin, openapi } = authConfig.betterAuth;
 			await fastify.register(plugin);
 			trackPlugin("auth-better-auth");
-			if (openapi && !fastify.arc.externalOpenApiPaths.includes(openapi)) fastify.arc.externalOpenApiPaths.push(openapi);
+			const arc = fastify.arc;
+			if (arc && openapi && !arc.externalOpenApiPaths.includes(openapi)) arc.externalOpenApiPaths.push(openapi);
 			fastify.log.debug("Better Auth authentication enabled");
 			break;
 		}
@@ -340,7 +338,7 @@ async function registerAuth(fastify, config, trackPlugin) {
 */
 async function registerElevation(fastify, config, trackPlugin) {
 	if (!config.elevation) return;
-	const { elevationPlugin } = await import("./elevation-DxQ6ACbt.mjs").then((n) => n.r);
+	const { elevationPlugin } = await import("./elevation-Dci0AYLT.mjs").then((n) => n.r);
 	await fastify.register(elevationPlugin, config.elevation);
 	trackPlugin("arc-elevation", config.elevation);
 	fastify.log.debug("Elevation plugin enabled");
@@ -350,7 +348,7 @@ async function registerElevation(fastify, config, trackPlugin) {
 */
 async function registerErrorHandler(fastify, config, trackPlugin) {
 	if (config.errorHandler === false) return;
-	const { errorHandlerPlugin } = await import("./errorHandler-CZDW4EXS.mjs").then((n) => n.r);
+	const { errorHandlerPlugin } = await import("./errorHandler-CSxe7KIM.mjs").then((n) => n.r);
 	const errorOpts = typeof config.errorHandler === "object" ? config.errorHandler : { includeStack: config.preset !== "production" };
 	await fastify.register(errorHandlerPlugin, errorOpts);
 	trackPlugin("arc-error-handler", errorOpts);
@@ -463,6 +461,40 @@ async function registerResources(fastify, config) {
 }
 //#endregion
 //#region src/factory/registerSecurity.ts
+/**
+* Translate `skipPaths` sugar into a `@fastify/rate-limit` `allowList`
+* function. A user-supplied `allowList` (array of IPs or function) is
+* preserved and OR-ed with the path match.
+*/
+function buildRateLimitOpts(input) {
+	const { skipPaths, allowList, ...rest } = input;
+	if (!skipPaths || skipPaths.length === 0) return allowList === void 0 ? rest : {
+		...rest,
+		allowList
+	};
+	const matchesPath = compilePathMatcher(skipPaths);
+	const combined = async (req, key) => {
+		if (matchesPath((req.url ?? "").split("?", 1)[0] ?? "")) return true;
+		if (typeof allowList === "function") return await allowList(req, key);
+		if (Array.isArray(allowList)) return allowList.includes(key);
+		return false;
+	};
+	return {
+		...rest,
+		allowList: combined
+	};
+}
+function compilePathMatcher(patterns) {
+	const prefixes = [];
+	const exact = /* @__PURE__ */ new Set();
+	for (const p of patterns) if (p.endsWith("*")) prefixes.push(p.slice(0, -1));
+	else exact.add(p);
+	return (path) => {
+		if (exact.has(path)) return true;
+		for (const pre of prefixes) if (path.startsWith(pre)) return true;
+		return false;
+	};
+}
 const PLUGIN_REGISTRY = {
 	cors: {
 		package: "@fastify/cors",
@@ -532,10 +564,10 @@ async function registerSecurityPlugins(fastify, config) {
 	} else fastify.log.warn("CORS disabled");
 	if (config.rateLimit !== false) {
 		const rateLimit = await loadPlugin("rateLimit");
-		const rateLimitOpts = config.rateLimit ?? {
+		const rateLimitOpts = buildRateLimitOpts(config.rateLimit ?? {
 			max: 100,
 			timeWindow: "1 minute"
-		};
+		});
 		await fastify.register(rateLimit, rateLimitOpts);
 		if (!(typeof rateLimitOpts === "object" && "store" in rateLimitOpts)) {
 			if (config.runtime === "distributed") throw new Error("[Arc] runtime: 'distributed' with rate limiting requires a shared store.\nProvide rateLimit: { store: new RedisStore({ ... }) } or disable rate limiting: rateLimit: false");
@@ -643,14 +675,14 @@ function validateDistributedRuntime(options) {
 	if (!events || MEMORY_STORE_NAMES.has(events.name)) missing.push("events transport");
 	if (options.arcPlugins?.caching) {
 		const cache = options.stores?.cache;
-		if (!cache || MEMORY_STORE_NAMES.has(cache.name)) missing.push("cache store");
+		if (!cache || cache.name !== void 0 && MEMORY_STORE_NAMES.has(cache.name)) missing.push("cache store");
 	}
 	const idempotency = options.stores?.idempotency;
 	if (idempotency && MEMORY_STORE_NAMES.has(idempotency.name)) missing.push("idempotency store (memory-backed in distributed mode)");
 	else if (!idempotency) deferredWarnings.push("runtime: 'distributed' — no idempotency store configured. Write-path deduplication will be instance-local. If resources use the idempotency plugin, provide stores.idempotency with a Redis/MongoDB store.");
 	if (options.arcPlugins?.queryCache) {
 		const qc = options.stores?.queryCache;
-		if (!qc || MEMORY_STORE_NAMES.has(qc.name)) missing.push("queryCache store");
+		if (!qc || qc.name !== void 0 && MEMORY_STORE_NAMES.has(qc.name)) missing.push("queryCache store");
 	}
 	if (missing.length > 0) throw new Error(`[Arc] runtime: 'distributed' requires Redis/durable adapters.\nMissing: ${missing.join(", ")}.\nProvide Redis-backed stores or use runtime: 'memory' for development.`);
 	return deferredWarnings;
@@ -676,7 +708,7 @@ function validateDistributedRuntime(options) {
 */
 async function createApp(options) {
 	if (options.debug !== void 0 && options.debug !== false) {
-		const { configureArcLogger } = await import("./logger-CDjpjySd.mjs").then((n) => n.r);
+		const { configureArcLogger } = await import("./logger/index.mjs");
 		configureArcLogger({ debug: options.debug });
 	}
 	validateAuthOptions(options);
@@ -717,7 +749,9 @@ async function createApp(options) {
 	await registerSecurityPlugins(fastify, config);
 	await registerUtilityPlugins(fastify, config);
 	const trackPlugin = (name, opts) => {
-		fastify.arc.plugins.set(name, {
+		const arc = fastify.arc;
+		if (!arc) return;
+		arc.plugins.set(name, {
 			name,
 			options: opts,
 			registeredAt: (/* @__PURE__ */ new Date()).toISOString()

package/dist/docs/index.d.mts

@@ -1,4 +1,4 @@
-import { rt as RegistryEntry } from "../interface-YrWsmKqE.mjs";
+import { p as RegistryEntry } from "../index-BGbpGVyM.mjs";
 import { t as ExternalOpenApiPaths } from "../externalPaths-Bapitwvd.mjs";
 import { FastifyPluginAsync } from "fastify";
 

package/dist/docs/index.mjs

@@ -1,5 +1,5 @@
-import { t as getUserRoles } from "../types-ZUu_h0jp.mjs";
-import { n as openApiPlugin, r as openapi_default, t as buildOpenApiSpec } from "../openapi-CXuTG1M9.mjs";
+import { t as getUserRoles } from "../types-D57iXYb8.mjs";
+import { n as openApiPlugin, r as openapi_default, t as buildOpenApiSpec } from "../openapi-DpNpqBmo.mjs";
 import fp from "fastify-plugin";
 //#region src/docs/scalar.ts
 const scalarPlugin = async (fastify, opts = {}) => {

package/dist/{elevation-DxQ6ACbt.mjs → elevation-Dci0AYLT.mjs}

@@ -1,6 +1,6 @@
 import { t as __exportAll } from "./chunk-BpYLSNr0.mjs";
-import { t as getUserRoles } from "./types-ZUu_h0jp.mjs";
-import { t as arcLog } from "./logger-CDjpjySd.mjs";
+import { arcLog } from "./logger/index.mjs";
+import { t as getUserRoles } from "./types-D57iXYb8.mjs";
 import fp from "fastify-plugin";
 //#region src/scope/elevation.ts
 var elevation_exports = /* @__PURE__ */ __exportAll({

package/dist/errorHandler-2ii4RIYr.d.mts

@@ -0,0 +1,114 @@
+import { FastifyInstance, FastifyRequest } from "fastify";
+
+//#region src/plugins/errorHandler.d.ts
+/** Class-based error mapper — maps thrown error instances to HTTP responses */
+interface ErrorMapper<T extends Error = Error> {
+  /**
+   * Error class to match. Checked at runtime via `instanceof` — the constructor
+   * arity/signature is not called by the plugin, so the signature is typed
+   * permissively to accept real-world error classes:
+   *
+   * - **Abstract classes** (e.g. base domain errors) — `abstract new` is accepted.
+   * - **Specific constructor signatures** (e.g. `new InvalidTransitionError(from, to, id?)`)
+   *   — `any[]` avoids forcing consumers to widen to `unknown[]` or cast.
+   *
+   * What matters for dispatch is the `instanceof` check, not the ctor shape.
+   */
+  type: abstract new (...args: any[]) => T;
+  /** Convert the error to an HTTP response shape */
+  toResponse: (error: T) => {
+    status: number;
+    code?: string;
+    message?: string;
+    details?: Record<string, unknown>;
+  };
+}
+interface ErrorHandlerOptions {
+  /**
+   * Include stack trace in error responses (default: false in production)
+   */
+  includeStack?: boolean;
+  /**
+   * Custom error callback for logging to external services
+   */
+  onError?: (error: Error, request: FastifyRequest) => void | Promise<void>;
+  /**
+   * Map specific error types to custom responses (by error.name string)
+   */
+  errorMap?: Record<string, {
+    statusCode: number;
+    code: string;
+    message?: string;
+  }>;
+  /**
+   * Class-based error mappers — checked via `instanceof`, highest priority.
+   *
+   * Register your domain error classes once; Arc auto-catches and maps them
+   * in every handler. Handlers just `throw` — no try/catch needed.
+   *
+   * @example
+   * ```typescript
+   * class AccountingError extends Error {
+   *   constructor(message: string, public status: number, public code: string) {
+   *     super(message);
+   *   }
+   * }
+   *
+   * const app = await createApp({
+   *   errorHandler: {
+   *     errorMappers: [
+   *       {
+   *         type: AccountingError,
+   *         toResponse: (err) => ({ status: err.status, code: err.code, message: err.message }),
+   *       },
+   *     ],
+   *   },
+   * });
+   *
+   * // Now handlers just throw:
+   * handler: async (req) => {
+   *   await ledger.post(id); // throws AccountingError → Arc maps to proper HTTP response
+   * }
+   * ```
+   */
+  errorMappers?: ErrorMapper[];
+  /**
+   * Classify an error as a duplicate-key / unique-constraint violation →
+   * mapped to `409 Conflict` with `code: "DUPLICATE_KEY"`.
+   *
+   * Mirrors `RepositoryLike.isDuplicateKeyError` for the Fastify layer: errors
+   * that escape a controller (custom routes, user hooks, raw driver calls)
+   * still land here, so the classifier is duplicated at the edge. Defaults
+   * cover MongoDB (`code 11000` / `codeName "DuplicateKey"`), Prisma
+   * (`code "P2002"`), and Postgres (`code "23505"`). Override to add other
+   * backends (DynamoDB `ConditionalCheckFailedException`, etc.) or to disable
+   * the built-in detection.
+   */
+  isDuplicateKeyError?: (err: unknown) => boolean;
+}
+/**
+ * Default duplicate-key detector covering the mainstream drivers arc sees
+ * most. Detection is strictly by known driver codes — never by message
+ * string matching — because false positives on dup-key silently mask real
+ * errors (WriteConflict, NotWritablePrimary, etc.) as 409s. For long-tail
+ * drivers (Neo4j, MSSQL, DynamoDB, custom kits), compose rather than
+ * replace:
+ *
+ * ```ts
+ * import { defaultIsDuplicateKeyError } from '@classytic/arc/plugins';
+ *
+ * errorHandler: {
+ *   isDuplicateKeyError: (err) =>
+ *     defaultIsDuplicateKeyError(err) || isNeo4jDupKey(err),
+ * }
+ * ```
+ *
+ * Drizzle apps get coverage transitively (Drizzle doesn't wrap driver
+ * errors — pg/mysql2/better-sqlite3 codes propagate as-is). Neon is
+ * Postgres-wire-compatible → `23505` covers `@neondatabase/serverless`.
+ */
+declare function defaultIsDuplicateKeyError(err: unknown): boolean;
+declare function errorHandlerPluginFn(fastify: FastifyInstance, options?: ErrorHandlerOptions): Promise<void>;
+declare const errorHandlerPlugin: typeof errorHandlerPluginFn;
+//#endregion
+export { errorHandlerPlugin as i, ErrorMapper as n, defaultIsDuplicateKeyError as r, ErrorHandlerOptions as t };

package/dist/{errorHandler-CZDW4EXS.mjs → errorHandler-CSxe7KIM.mjs}

@@ -1,5 +1,5 @@
 import { t as __exportAll } from "./chunk-BpYLSNr0.mjs";
-import { p as isArcError } from "./errors-CqWnSqM-.mjs";
+import { p as isArcError } from "./errors-BqdUDja_.mjs";
 import fp from "fastify-plugin";
 //#region src/plugins/errorHandler.ts
 var errorHandler_exports = /* @__PURE__ */ __exportAll({

package/dist/{eventPlugin-Dl7MoVWH.mjs → eventPlugin-ByU4Cv0e.mjs}

@@ -1,5 +1,5 @@
 import { t as __exportAll } from "./chunk-BpYLSNr0.mjs";
-import { t as requestContext } from "./requestContext-DYtmNpm5.mjs";
+import { t as requestContext } from "./requestContext-C38GskNt.mjs";
 import fp from "fastify-plugin";
 //#region src/events/EventTransport.ts
 /**

package/dist/{eventPlugin-BxvaCIZF.d.mts → eventPlugin-D1ThQ1Pp.d.mts}

@@ -1,4 +1,4 @@
-import { i as EventLogger, n as DomainEvent, o as EventTransport, r as EventHandler } from "./EventTransport-CqZ8FyM_.mjs";
+import { i as EventLogger, n as DomainEvent, o as EventTransport, r as EventHandler } from "./EventTransport-CfVEGaEl.mjs";
 import { FastifyPluginAsync } from "fastify";
 
 //#region src/events/defineEvent.d.ts

package/dist/events/index.d.mts

@@ -1,8 +1,8 @@
-import { o as RepositoryLike } from "../interface-YrWsmKqE.mjs";
-import { a as EventMeta, c as MemoryEventTransportOptions, d as createEvent, i as EventLogger, l as PublishManyResult, n as DomainEvent, o as EventTransport, r as EventHandler, s as MemoryEventTransport, t as DeadLetteredEvent, u as createChildEvent } from "../EventTransport-CqZ8FyM_.mjs";
-import { a as withRetry, c as EventDefinitionOutput, d as EventSchema, f as ValidationResult, i as createDeadLetterPublisher, l as EventRegistry, m as defineEvent, n as eventPlugin, o as CustomValidator, p as createEventRegistry, r as RetryOptions, s as EventDefinitionInput, t as EventPluginOptions, u as EventRegistryOptions } from "../eventPlugin-BxvaCIZF.mjs";
+import { _n as RepositoryLike } from "../index-BGbpGVyM.mjs";
+import { a as EventMeta, c as MemoryEventTransportOptions, d as createEvent, i as EventLogger, l as PublishManyResult, n as DomainEvent, o as EventTransport, r as EventHandler, s as MemoryEventTransport, t as DeadLetteredEvent, u as createChildEvent } from "../EventTransport-CfVEGaEl.mjs";
+import { a as withRetry, c as EventDefinitionOutput, d as EventSchema, f as ValidationResult, i as createDeadLetterPublisher, l as EventRegistry, m as defineEvent, n as eventPlugin, o as CustomValidator, p as createEventRegistry, r as RetryOptions, s as EventDefinitionInput, t as EventPluginOptions, u as EventRegistryOptions } from "../eventPlugin-D1ThQ1Pp.mjs";
 import { RedisEventTransportOptions, RedisLike } from "./transports/redis.mjs";
-import { r as RedisStreamTransportOptions, t as RedisStreamLike } from "../redis-stream-Bz-4q96t.mjs";
+import { r as RedisStreamTransportOptions, t as RedisStreamLike } from "../redis-stream-bkO88VHx.mjs";
 
 //#region src/events/eventTypes.d.ts
 /**
@@ -597,4 +597,7 @@ interface ExponentialBackoffOptions {
  */
 declare function exponentialBackoff(options: ExponentialBackoffOptions): Date;
 //#endregion
-export { ARC_LIFECYCLE_EVENTS, type ArcLifecycleEvent, CACHE_EVENTS, CRUD_EVENT_SUFFIXES, type CacheEvent, type CrudEventSuffix, type CustomValidator, type DeadLetteredEvent, type DomainEvent, type EventDefinitionInput, type EventDefinitionOutput, type EventHandler, type EventLogger, type EventMeta, EventOutbox, type EventOutboxOptions, type EventPluginOptions, type EventRegistry, type EventRegistryOptions, type EventSchema, type EventTransport, type ExponentialBackoffOptions, InvalidOutboxEventError, MemoryEventTransport, type MemoryEventTransportOptions, MemoryOutboxStore, type OutboxAcknowledgeOptions, type OutboxClaimOptions, type OutboxErrorInfo, type OutboxFailOptions, type OutboxFailureContext, type OutboxFailureDecision, type OutboxFailurePolicy, OutboxOwnershipError, type OutboxRelayErrorHandler, type OutboxRelayErrorKind, type OutboxStore, type OutboxWriteOptions, type PublishManyResult, type RedisEventTransportOptions, type RedisLike, type RedisStreamLike, type RedisStreamTransportOptions, type RelayResult, type RetryOptions, type ValidationResult, createChildEvent, createDeadLetterPublisher, createEvent, createEventRegistry, crudEventType, defineEvent, eventPlugin, exponentialBackoff, withRetry };
+//#region src/events/repository-outbox-adapter.d.ts
+declare function repositoryAsOutboxStore(repository: RepositoryLike): OutboxStore;
+//#endregion
+export { ARC_LIFECYCLE_EVENTS, type ArcLifecycleEvent, CACHE_EVENTS, CRUD_EVENT_SUFFIXES, type CacheEvent, type CrudEventSuffix, type CustomValidator, type DeadLetteredEvent, type DomainEvent, type EventDefinitionInput, type EventDefinitionOutput, type EventHandler, type EventLogger, type EventMeta, EventOutbox, type EventOutboxOptions, type EventPluginOptions, type EventRegistry, type EventRegistryOptions, type EventSchema, type EventTransport, type ExponentialBackoffOptions, InvalidOutboxEventError, MemoryEventTransport, type MemoryEventTransportOptions, MemoryOutboxStore, type OutboxAcknowledgeOptions, type OutboxClaimOptions, type OutboxErrorInfo, type OutboxFailOptions, type OutboxFailureContext, type OutboxFailureDecision, type OutboxFailurePolicy, OutboxOwnershipError, type OutboxRelayErrorHandler, type OutboxRelayErrorKind, type OutboxStore, type OutboxWriteOptions, type PublishManyResult, type RedisEventTransportOptions, type RedisLike, type RedisStreamLike, type RedisStreamTransportOptions, type RelayResult, type RetryOptions, type ValidationResult, createChildEvent, createDeadLetterPublisher, createEvent, createEventRegistry, crudEventType, defineEvent, eventPlugin, exponentialBackoff, repositoryAsOutboxStore, withRetry };

package/dist/events/index.mjs

@@ -1,5 +1,7 @@
-import { a as MemoryEventTransport, i as withRetry, o as createChildEvent, r as createDeadLetterPublisher, s as createEvent, t as eventPlugin } from "../eventPlugin-Dl7MoVWH.mjs";
-import { n as createSafeGetOne, t as createIsDuplicateKeyError } from "../store-helpers-DFiZl5TL.mjs";
+import { a as MemoryEventTransport, i as withRetry, o as createChildEvent, r as createDeadLetterPublisher, s as createEvent, t as eventPlugin } from "../eventPlugin-ByU4Cv0e.mjs";
+import { n as createSafeGetOne, t as createIsDuplicateKeyError } from "../store-helpers-DYYUQbQN.mjs";
+import { and, anyOf, eq, lte, ne, or } from "@classytic/repo-core/filter";
+import { update } from "@classytic/repo-core/update";
 //#region src/events/defineEvent.ts
 /**
 * defineEvent — Typed Event Definitions with Optional Schema Validation
@@ -339,6 +341,30 @@ var MemoryOutboxStore = class {
 };
 //#endregion
 //#region src/events/repository-outbox-adapter.ts
+/**
+* RepositoryLike → OutboxStore adapter.
+*
+* Maps the `OutboxStore` vocabulary (save / claimPending / acknowledge /
+* fail / getDeadLettered / purge) onto arc's own `RepositoryLike` primitives
+* (create / getOne / findAll / deleteMany / findOneAndUpdate). `EventOutbox`
+* wraps a passed repository with this helper when you use the
+* `{ repository }` option; the function is also re-exported from
+* `@classytic/arc/events` so consumers can build and decorate the store
+* manually (metrics, tracing, multi-transport fan-out).
+*
+* Portability: filters compose via `@classytic/repo-core/filter` and
+* updates via `@classytic/repo-core/update`. The primary-key column name
+* is read from `repository.idField` — mongokit defaults to `_id`,
+* sqlitekit / pgkit / prismakit to the schema's declared PK. The adapter
+* therefore runs on any kit that implements `StandardRepo.findOneAndUpdate`
+* + `getOne` + `getAll` + `deleteMany` + `create`.
+*
+* `fail()` uses a lease-gated read-then-write pair to preserve
+* `firstFailedAt` across retries without relying on Mongo's aggregation-
+* pipeline `$ifNull`. Leases guarantee single-writer during the failure
+* window (`claimPending` filters out non-owned rows), so the two calls are
+* safe under concurrent relayers.
+*/
 const DEFAULT_LEASE_MS$1 = 3e4;
 const DEFAULT_CLAIM_LIMIT = 100;
 const DEFAULT_PURGE_BATCH = 500;
@@ -346,21 +372,37 @@ function repositoryAsOutboxStore(repository) {
 	const missing = [];
 	if (typeof repository.create !== "function") missing.push("create");
 	if (typeof repository.getOne !== "function") missing.push("getOne");
-	if (typeof repository.findAll !== "function") missing.push("findAll");
+	if (typeof repository.getAll !== "function") missing.push("getAll");
 	if (typeof repository.deleteMany !== "function") missing.push("deleteMany");
 	if (typeof repository.findOneAndUpdate !== "function") missing.push("findOneAndUpdate");
-	if (missing.length > 0) throw new Error(`EventOutbox: repository is missing required methods: ${missing.join(", ")}. mongokit ≥3.8 satisfies all five; other kits must implement them to back the outbox.`);
+	if (missing.length > 0) throw new Error(`EventOutbox: repository is missing required methods: ${missing.join(", ")}. mongokit ≥3.10.2 satisfies all five; other kits must implement them to back the outbox.`);
 	const r = repository;
+	const idField = repository.idField ?? "_id";
+	/**
+	* Unwrap mongokit's pagination envelope ({ docs, total, ... }) — some
+	* kits may return a bare array when pagination is disabled. Handle both.
+	*/
+	const unwrapDocs = (result) => {
+		if (Array.isArray(result)) return result;
+		return result?.docs ?? [];
+	};
 	const isDuplicateKeyError = createIsDuplicateKeyError(repository);
 	const safeGetOne = createSafeGetOne(repository);
 	const isWellFormed = (event) => !!event && typeof event.type === "string" && !!event.meta?.id;
+	/**
+	* Filter matching every row that's eligible to be claimed by a relayer:
+	* status=pending, visible now, and either unleased or under an expired
+	* lease. Used by `getPending` and `claimPending` — defined once so the
+	* two code paths stay in lockstep.
+	*/
+	const claimableFilter = (now) => and(eq("status", "pending"), lte("visibleAt", now), or(eq("leaseOwner", null), lte("leaseExpiresAt", now)));
 	return {
 		async save(event, options) {
 			if (!event?.type || typeof event.type !== "string") throw new InvalidOutboxEventError("event.type is required");
 			if (!event.meta?.id || typeof event.meta.id !== "string") throw new InvalidOutboxEventError("event.meta.id is required");
 			const now = /* @__PURE__ */ new Date();
 			const doc = {
-				_id: event.meta.id,
+				[idField]: event.meta.id,
 				event,
 				type: event.type,
 				status: "pending",
@@ -386,12 +428,10 @@ function repositoryAsOutboxStore(repository) {
 		},
 		async getPending(limit) {
 			const now = /* @__PURE__ */ new Date();
-			return (await r.findAll({
-				status: "pending",
-				visibleAt: { $lte: now },
-				$or: [{ leaseOwner: null }, { leaseExpiresAt: { $lte: now } }]
-			}, {
+			return unwrapDocs(await r.getAll({
+				filters: claimableFilter(now),
 				sort: { createdAt: 1 },
+				page: 1,
 				limit
 			})).map((d) => d.event).filter(isWellFormed);
 		},
@@ -399,23 +439,19 @@ function repositoryAsOutboxStore(repository) {
 			const limit = options?.limit ?? DEFAULT_CLAIM_LIMIT;
 			const leaseMs = options?.leaseMs ?? DEFAULT_LEASE_MS$1;
 			const consumerId = options?.consumerId ?? "anonymous";
-			const typeFilter = options?.types?.length ? { type: { $in: options.types } } : {};
+			const typeFilter = options?.types?.length ? anyOf("type", options.types) : null;
 			const claimed = [];
 			for (let i = 0; i < limit; i++) {
 				const now = /* @__PURE__ */ new Date();
 				const leaseExpiresAt = new Date(now.getTime() + leaseMs);
-				const doc = await r.findOneAndUpdate({
-					status: "pending",
-					visibleAt: { $lte: now },
-					$or: [{ leaseOwner: null }, { leaseExpiresAt: { $lte: now } }],
-					...typeFilter
-				}, {
-					$set: {
+				const filter = typeFilter ? and(claimableFilter(now), typeFilter) : claimableFilter(now);
+				const doc = await r.findOneAndUpdate(filter, update({
+					set: {
 						leaseOwner: consumerId,
 						leaseExpiresAt
 					},
-					$inc: { attempts: 1 }
-				}, {
+					inc: { attempts: 1 }
+				}), {
 					sort: { createdAt: 1 },
 					returnDocument: "after"
 				});
@@ -426,18 +462,15 @@ function repositoryAsOutboxStore(repository) {
 		},
 		async acknowledge(eventId, options) {
 			const now = /* @__PURE__ */ new Date();
-			const filter = {
-				_id: eventId,
-				status: { $ne: "delivered" }
-			};
-			if (options?.consumerId) filter.leaseOwner = options.consumerId;
-			if (await r.findOneAndUpdate(filter, { $set: {
+			const baseFilter = and(eq(idField, eventId), ne("status", "delivered"));
+			const filter = options?.consumerId ? and(baseFilter, eq("leaseOwner", options.consumerId)) : baseFilter;
+			if (await r.findOneAndUpdate(filter, update({ set: {
 				status: "delivered",
 				deliveredAt: now,
 				leaseOwner: null,
 				leaseExpiresAt: null
-			} }, { returnDocument: "after" })) return;
-			const current = await safeGetOne({ _id: eventId });
+			} }), { returnDocument: "after" })) return;
+			const current = await safeGetOne(eq(idField, eventId));
 			if (!current) return;
 			if (current.status === "delivered") return;
 			if (options?.consumerId && current.leaseOwner !== options.consumerId) throw new OutboxOwnershipError(eventId, options.consumerId, current.leaseOwner);
@@ -446,28 +479,31 @@ function repositoryAsOutboxStore(repository) {
 			const now = /* @__PURE__ */ new Date();
 			const targetStatus = options?.deadLetter ? "dead_letter" : "pending";
 			const visibleAt = options?.retryAt ?? now;
-			const filter = { _id: eventId };
-			if (options?.consumerId) filter.leaseOwner = options.consumerId;
-			const pipeline = [{ $set: {
+			const baseFilter = eq(idField, eventId);
+			const filter = options?.consumerId ? and(baseFilter, eq("leaseOwner", options.consumerId)) : baseFilter;
+			const current = await safeGetOne(baseFilter);
+			if (!current) return;
+			if (options?.consumerId && current.leaseOwner !== options.consumerId) throw new OutboxOwnershipError(eventId, options.consumerId, current.leaseOwner);
+			const errorInfo = error.code ? {
+				message: error.message,
+				code: error.code
+			} : { message: error.message };
+			const firstFailedAt = current.firstFailedAt ?? now;
+			await r.findOneAndUpdate(filter, update({ set: {
 				status: targetStatus,
 				visibleAt,
 				leaseOwner: null,
 				leaseExpiresAt: null,
 				lastFailedAt: now,
-				lastError: {
-					message: error.message,
-					...error.code ? { code: error.code } : {}
-				},
-				firstFailedAt: { $ifNull: ["$firstFailedAt", now] }
-			} }];
-			if (await r.findOneAndUpdate(filter, pipeline, { returnDocument: "after" })) return;
-			const current = await safeGetOne({ _id: eventId });
-			if (!current) return;
-			if (options?.consumerId && current.leaseOwner !== options.consumerId) throw new OutboxOwnershipError(eventId, options.consumerId, current.leaseOwner);
+				lastError: errorInfo,
+				firstFailedAt
+			} }), { returnDocument: "after" });
 		},
 		async getDeadLettered(limit) {
-			return (await r.findAll({ status: "dead_letter" }, {
-				sort: { _id: 1 },
+			return unwrapDocs(await r.getAll({
+				filters: eq("status", "dead_letter"),
+				sort: { [idField]: 1 },
+				page: 1,
 				limit
 			})).filter((d) => isWellFormed(d.event)).map((d) => ({
 				event: d.event,
@@ -484,17 +520,16 @@ function repositoryAsOutboxStore(repository) {
 			const cutoff = new Date(Date.now() - olderThanMs);
 			let totalDeleted = 0;
 			for (;;) {
-				const batch = await r.findAll({
-					status: "delivered",
-					deliveredAt: { $lte: cutoff }
-				}, {
+				const batch = unwrapDocs(await r.getAll({
+					filters: and(eq("status", "delivered"), lte("deliveredAt", cutoff)),
 					sort: { deliveredAt: 1 },
+					page: 1,
 					limit: DEFAULT_PURGE_BATCH,
-					select: "_id"
-				});
+					select: idField
+				}));
 				if (batch.length === 0) break;
-				const ids = batch.map((d) => d._id);
-				const res = await r.deleteMany({ _id: { $in: ids } });
+				const ids = batch.map((d) => d[idField]);
+				const res = await r.deleteMany(anyOf(idField, ids));
 				totalDeleted += res.deletedCount ?? 0;
 				if (batch.length < DEFAULT_PURGE_BATCH) break;
 			}
@@ -843,4 +878,4 @@ function exponentialBackoff(options) {
 	return new Date(now + jittered);
 }
 //#endregion
-export { ARC_LIFECYCLE_EVENTS, CACHE_EVENTS, CRUD_EVENT_SUFFIXES, EventOutbox, InvalidOutboxEventError, MemoryEventTransport, MemoryOutboxStore, OutboxOwnershipError, createChildEvent, createDeadLetterPublisher, createEvent, createEventRegistry, crudEventType, defineEvent, eventPlugin, exponentialBackoff, withRetry };
+export { ARC_LIFECYCLE_EVENTS, CACHE_EVENTS, CRUD_EVENT_SUFFIXES, EventOutbox, InvalidOutboxEventError, MemoryEventTransport, MemoryOutboxStore, OutboxOwnershipError, createChildEvent, createDeadLetterPublisher, createEvent, createEventRegistry, crudEventType, defineEvent, eventPlugin, exponentialBackoff, repositoryAsOutboxStore, withRetry };

package/dist/events/transports/redis-stream-entry.d.mts

@@ -1,2 +1,2 @@
-import { n as RedisStreamTransport, r as RedisStreamTransportOptions, t as RedisStreamLike } from "../../redis-stream-Bz-4q96t.mjs";
+import { n as RedisStreamTransport, r as RedisStreamTransportOptions, t as RedisStreamLike } from "../../redis-stream-bkO88VHx.mjs";
 export { type RedisStreamLike, RedisStreamTransport, type RedisStreamTransportOptions };

package/dist/events/transports/redis.d.mts

@@ -1,4 +1,4 @@
-import { i as EventLogger, n as DomainEvent, o as EventTransport, r as EventHandler } from "../../EventTransport-CqZ8FyM_.mjs";
+import { i as EventLogger, n as DomainEvent, o as EventTransport, r as EventHandler } from "../../EventTransport-CfVEGaEl.mjs";
 
 //#region src/events/transports/redis.d.ts
 interface RedisLike {

package/dist/factory/index.d.mts

@@ -1,4 +1,4 @@
-import { a as CustomPluginAuthOption, c as RawBodyOptions, d as ResourceLike, f as loadResources, i as CustomAuthenticatorOption, l as UnderPressureOptions, n as BetterAuthOption, o as JwtAuthOption, r as CreateAppOptions, s as MultipartOptions, t as AuthOption, u as LoadResourcesOptions } from "../types-CunEX4UX.mjs";
+import { a as CustomPluginAuthOption, c as RawBodyOptions, d as ResourceLike, f as loadResources, i as CustomAuthenticatorOption, l as UnderPressureOptions, n as BetterAuthOption, o as JwtAuthOption, r as CreateAppOptions, s as MultipartOptions, t as AuthOption, u as LoadResourcesOptions } from "../types-CVdgPXBW.mjs";
 import { FastifyInstance } from "fastify";
 
 //#region src/factory/createApp.d.ts

package/dist/factory/index.mjs

@@ -1,4 +1,4 @@
-import { a as edgePreset, c as testingPreset, i as developmentPreset, n as createApp, o as getPreset, s as productionPreset, t as ArcFactory } from "../createApp-CBJUJKGP.mjs";
+import { a as edgePreset, c as testingPreset, i as developmentPreset, n as createApp, o as getPreset, s as productionPreset, t as ArcFactory } from "../createApp-BwnEAO2h.mjs";
 import { t as loadResources } from "../loadResources-Bksk8ydA.mjs";
 //#region src/factory/edge.ts
 /**