@authhero/multi-tenancy 13.16.0 → 13.18.0

package/dist/multi-tenancy.mjs

@@ -1,58 +1,31 @@
-var ae = Object.defineProperty;
-var se = (t, e, n) => e in t ? ae(t, e, { enumerable: !0, configurable: !0, writable: !0, value: n }) : t[e] = n;
-var U = (t, e, n) => se(t, typeof e != "symbol" ? e + "" : e, n);
-import { Hono as ee } from "hono";
-import { getTenantAudience as oe, MANAGEMENT_API_SCOPES as ie, MANAGEMENT_API_AUDIENCE as ce, fetchAll as F, init as le } from "authhero";
-export * from "authhero";
-import { OpenAPIHono as de, createRoute as B, z } from "@hono/zod-openapi";
-import { auth0QuerySchema as ue, tenantSchema as E, tenantInsertSchema as me, connectionSchema as G, connectionOptionsSchema as K } from "@authhero/adapter-interfaces";
-var S = class extends Error {
-  /**
-   * Creates an instance of `HTTPException`.
-   * @param status - HTTP status code for the exception. Defaults to 500.
-   * @param options - Additional options for the exception.
-   */
-  constructor(e = 500, n) {
-    super(n == null ? void 0 : n.message, { cause: n == null ? void 0 : n.cause });
-    U(this, "res");
-    U(this, "status");
-    this.res = n == null ? void 0 : n.res, this.status = e;
-  }
-  /**
-   * Returns the response object associated with the exception.
-   * If a response object is not provided, a new response is created with the error message and status code.
-   * @returns The response object.
-   */
-  getResponse() {
-    return this.res ? new Response(this.res.body, {
-      status: this.status,
-      headers: this.res.headers
-    }) : new Response(this.message, {
-      status: this.status
-    });
-  }
-};
-function pe(t) {
+var V = Object.defineProperty;
+var W = (t, e, n) => e in t ? V(t, e, { enumerable: !0, configurable: !0, writable: !0, value: n }) : t[e] = n;
+var O = (t, e, n) => W(t, typeof e != "symbol" ? e + "" : e, n);
+import { Hono as Q } from "hono";
+import { getTenantAudience as J, MANAGEMENT_API_SCOPES as X, MANAGEMENT_API_AUDIENCE as Y, fetchAll as z } from "authhero";
+import { OpenAPIHono as Z, createRoute as R, z as I } from "@hono/zod-openapi";
+import { auth0QuerySchema as x, tenantSchema as j, tenantInsertSchema as ee, connectionSchema as k, connectionOptionsSchema as D } from "@authhero/adapter-interfaces";
+function te(t) {
   const { controlPlaneTenantId: e, requireOrganizationMatch: n = !0 } = t;
   return {
-    async onTenantAccessValidation(r, a) {
+    async onTenantAccessValidation(s, a) {
       if (a === e)
         return !0;
       if (n) {
-        const c = r.var.org_name, s = r.var.organization_id, i = c || s;
+        const o = s.var.org_name, r = s.var.organization_id, i = o || r;
         return i ? i === a : !1;
       }
       return !0;
     }
   };
 }
-function fe(t, e, n, r) {
+function ne(t, e, n, s) {
   if (e === n)
     return !0;
-  const a = r || t;
+  const a = s || t;
   return a ? a === e : !1;
 }
-function we(t) {
+function se(t) {
   return {
     async resolveDataAdapters(e) {
       try {
@@ -67,109 +40,109 @@ function we(t) {
     }
   };
 }
-function ge(t) {
+function ae(t) {
   return {
     async beforeCreate(e, n) {
       return !n.audience && n.id ? {
         ...n,
-        audience: oe(n.id)
+        audience: J(n.id)
       } : n;
     },
     async afterCreate(e, n) {
-      const { accessControl: r, databaseIsolation: a } = t;
-      r && e.ctx && await he(e, n, r), a != null && a.onProvision && await a.onProvision(n.id);
+      const { accessControl: s, databaseIsolation: a } = t;
+      s && e.ctx && await re(e, n, s), a != null && a.onProvision && await a.onProvision(n.id);
     },
     async beforeDelete(e, n) {
-      const { accessControl: r, databaseIsolation: a } = t;
-      if (r)
+      const { accessControl: s, databaseIsolation: a } = t;
+      if (s)
         try {
-          const s = (await e.adapters.organizations.list(
-            r.controlPlaneTenantId
+          const r = (await e.adapters.organizations.list(
+            s.controlPlaneTenantId
           )).organizations.find((i) => i.name === n);
-          s && await e.adapters.organizations.remove(
-            r.controlPlaneTenantId,
-            s.id
+          r && await e.adapters.organizations.remove(
+            s.controlPlaneTenantId,
+            r.id
           );
-        } catch (c) {
+        } catch (o) {
           console.warn(
             `Failed to remove organization for tenant ${n}:`,
-            c
+            o
           );
         }
       if (a != null && a.onDeprovision)
         try {
           await a.onDeprovision(n);
-        } catch (c) {
+        } catch (o) {
           console.warn(
             `Failed to deprovision database for tenant ${n}:`,
-            c
+            o
           );
         }
     }
   };
 }
-async function he(t, e, n) {
+async function re(t, e, n) {
   const {
-    controlPlaneTenantId: r,
+    controlPlaneTenantId: s,
     defaultPermissions: a,
-    defaultRoles: c,
-    issuer: s,
+    defaultRoles: o,
+    issuer: r,
     adminRoleName: i = "Tenant Admin",
-    adminRoleDescription: p = "Full access to all tenant management operations",
-    addCreatorToOrganization: o = !0
-  } = n, l = await t.adapters.organizations.create(
-    r,
+    adminRoleDescription: m = "Full access to all tenant management operations",
+    addCreatorToOrganization: d = !0
+  } = n, c = await t.adapters.organizations.create(
+    s,
     {
       name: e.id,
       display_name: e.friendly_name || e.id
     }
   );
-  let u;
-  if (s && (u = await _e(
+  let p;
+  if (r && (p = await ie(
     t,
-    r,
+    s,
     i,
-    p
-  )), o && t.ctx) {
-    const d = t.ctx.var.user;
-    if (d != null && d.sub && !await ve(
+    m
+  )), d && t.ctx) {
+    const l = t.ctx.var.user;
+    if (l != null && l.sub && !await oe(
       t,
-      r,
-      d.sub
+      s,
+      l.sub
     ))
       try {
-        await t.adapters.userOrganizations.create(r, {
-          user_id: d.sub,
-          organization_id: l.id
-        }), u && await t.adapters.userRoles.create(
-          r,
-          d.sub,
-          u,
-          l.id
+        await t.adapters.userOrganizations.create(s, {
+          user_id: l.sub,
+          organization_id: c.id
+        }), p && await t.adapters.userRoles.create(
+          s,
+          l.sub,
+          p,
+          c.id
           // organizationId
         );
       } catch (f) {
         console.warn(
-          `Failed to add creator ${d.sub} to organization ${l.id}:`,
+          `Failed to add creator ${l.sub} to organization ${c.id}:`,
           f
         );
       }
   }
-  c && c.length > 0 && console.log(
-    `Would assign roles ${c.join(", ")} to organization ${l.id}`
+  o && o.length > 0 && console.log(
+    `Would assign roles ${o.join(", ")} to organization ${c.id}`
   ), a && a.length > 0 && console.log(
-    `Would grant permissions ${a.join(", ")} to organization ${l.id}`
+    `Would grant permissions ${a.join(", ")} to organization ${c.id}`
   );
 }
-async function ve(t, e, n) {
-  const r = await t.adapters.userRoles.list(
+async function oe(t, e, n) {
+  const s = await t.adapters.userRoles.list(
     e,
     n,
     void 0,
     ""
     // Empty string for global roles
   );
-  for (const a of r)
+  for (const a of s)
     if ((await t.adapters.rolePermissions.list(
       e,
       a.id,
@@ -180,25 +153,25 @@ async function ve(t, e, n) {
       return !0;
   return !1;
 }
-async function _e(t, e, n, r) {
-  const c = (await t.adapters.roles.list(e, {})).roles.find((o) => o.name === n);
-  if (c)
-    return c.id;
-  const s = await t.adapters.roles.create(e, {
+async function ie(t, e, n, s) {
+  const o = (await t.adapters.roles.list(e, {})).roles.find((d) => d.name === n);
+  if (o)
+    return o.id;
+  const r = await t.adapters.roles.create(e, {
     name: n,
-    description: r
-  }), i = ce, p = ie.map((o) => ({
-    role_id: s.id,
+    description: s
+  }), i = Y, m = X.map((d) => ({
+    role_id: r.id,
     resource_server_identifier: i,
-    permission_name: o.value
+    permission_name: d.value
   }));
   return await t.adapters.rolePermissions.assign(
     e,
-    s.id,
-    p
-  ), s.id;
+    r.id,
+    m
+  ), r.id;
 }
-const ye = [
+const ce = [
   "client_id",
   "client_secret",
   "app_secret",
@@ -207,88 +180,88 @@ const ye = [
   "twilio_sid",
   "twilio_token"
 ];
-function L(t, e, n = () => !0) {
-  const { controlPlaneTenantId: r, getChildTenantIds: a, getAdapters: c } = t, s = /* @__PURE__ */ new Map();
-  async function i(l, u, d) {
-    return (await e(l).list(u, {
-      q: `name:${d}`,
+function E(t, e, n = () => !0) {
+  const { controlPlaneTenantId: s, getChildTenantIds: a, getAdapters: o } = t, r = /* @__PURE__ */ new Map();
+  async function i(c, p, l) {
+    return (await e(c).list(p, {
+      q: `name:${l}`,
       per_page: 1
     }))[0] ?? null;
   }
-  async function p(l) {
-    const u = await a(), d = e(await c(r));
+  async function m(c) {
+    const p = await a(), l = e(await o(s));
     await Promise.all(
-      u.map(async (m) => {
+      p.map(async (u) => {
         try {
-          const f = await c(m), w = e(f), h = {
-            ...d.transform(l),
+          const f = await o(u), g = e(f), h = {
+            ...l.transform(c),
             is_system: !0
-          }, v = await i(f, m, l.name), _ = v ? w.getId(v) : void 0;
-          if (v && _) {
-            const A = w.preserveOnUpdate ? w.preserveOnUpdate(v, h) : h;
-            await w.update(m, _, A);
+          }, y = await i(f, u, c.name), v = y ? g.getId(y) : void 0;
+          if (y && v) {
+            const A = g.preserveOnUpdate ? g.preserveOnUpdate(y, h) : h;
+            await g.update(u, v, A);
           } else
-            await w.create(m, h);
+            await g.create(u, h);
         } catch (f) {
           console.error(
-            `Failed to sync ${d.listKey} "${l.name}" to tenant "${m}":`,
+            `Failed to sync ${l.listKey} "${c.name}" to tenant "${u}":`,
             f
           );
         }
       })
     );
   }
-  async function o(l) {
-    const u = await a();
+  async function d(c) {
+    const p = await a();
     await Promise.all(
-      u.map(async (d) => {
+      p.map(async (l) => {
         try {
-          const m = await c(d), f = e(m), w = await i(m, d, l), g = w ? f.getId(w) : void 0;
-          w && g && await f.remove(d, g);
-        } catch (m) {
+          const u = await o(l), f = e(u), g = await i(u, l, c), w = g ? f.getId(g) : void 0;
+          g && w && await f.remove(l, w);
+        } catch (u) {
           console.error(
-            `Failed to delete entity "${l}" from tenant "${d}":`,
-            m
+            `Failed to delete entity "${c}" from tenant "${l}":`,
+            u
           );
         }
       })
     );
   }
   return {
-    afterCreate: async (l, u) => {
-      l.tenantId === r && n(u) && await p(u);
+    afterCreate: async (c, p) => {
+      c.tenantId === s && n(p) && await m(p);
     },
-    afterUpdate: async (l, u, d) => {
-      l.tenantId === r && n(d) && await p(d);
+    afterUpdate: async (c, p, l) => {
+      c.tenantId === s && n(l) && await m(l);
     },
-    beforeDelete: async (l, u) => {
-      if (l.tenantId !== r) return;
-      const m = await e(l.adapters).get(l.tenantId, u);
-      m && n(m) && s.set(u, m);
+    beforeDelete: async (c, p) => {
+      if (c.tenantId !== s) return;
+      const u = await e(c.adapters).get(c.tenantId, p);
+      u && n(u) && r.set(p, u);
     },
-    afterDelete: async (l, u) => {
-      if (l.tenantId !== r) return;
-      const d = s.get(u);
-      d && (s.delete(u), await o(d.name));
+    afterDelete: async (c, p) => {
+      if (c.tenantId !== s) return;
+      const l = r.get(p);
+      l && (r.delete(p), await d(l.name));
     }
   };
 }
-function V(t, e, n = () => !0) {
-  const { controlPlaneTenantId: r, getControlPlaneAdapters: a, getAdapters: c } = t;
+function F(t, e, n = () => !0) {
+  const { controlPlaneTenantId: s, getControlPlaneAdapters: a, getAdapters: o } = t;
   return {
-    async afterCreate(s, i) {
-      if (i.id !== r)
+    async afterCreate(r, i) {
+      if (i.id !== s)
         try {
-          const p = await a(), o = await c(i.id), l = e(p), u = e(o), d = await F(
-            (m) => l.listPaginated(r, m),
-            l.listKey,
+          const m = await a(), d = await o(i.id), c = e(m), p = e(d), l = await z(
+            (u) => c.listPaginated(s, u),
+            c.listKey,
             { cursorField: "id", pageSize: 100 }
           );
           await Promise.all(
-            d.filter((m) => n(m)).map(async (m) => {
+            l.filter((u) => n(u)).map(async (u) => {
               try {
-                const f = l.transform(m);
-                await u.create(i.id, {
+                const f = c.transform(u);
+                await p.create(i.id, {
                   ...f,
                   is_system: !0
                 });
@@ -300,21 +273,21 @@ function V(t, e, n = () => !0) {
               }
             })
           );
-        } catch (p) {
+        } catch (m) {
           console.error(
             `Failed to sync entities to new tenant "${i.id}":`,
-            p
+            m
           );
         }
     }
   };
 }
-const k = (t) => ({
+const N = (t) => ({
   list: async (e, n) => (await t.resourceServers.list(e, n)).resource_servers,
   listPaginated: (e, n) => t.resourceServers.list(e, n),
   get: (e, n) => t.resourceServers.get(e, n),
   create: (e, n) => t.resourceServers.create(e, n),
-  update: (e, n, r) => t.resourceServers.update(e, n, r),
+  update: (e, n, s) => t.resourceServers.update(e, n, s),
   remove: (e, n) => t.resourceServers.remove(e, n),
   listKey: "resource_servers",
   getId: (e) => e.id,
@@ -332,7 +305,7 @@ const k = (t) => ({
   listPaginated: (e, n) => t.roles.list(e, n),
   get: (e, n) => t.roles.get(e, n),
   create: (e, n) => t.roles.create(e, n),
-  update: (e, n, r) => t.roles.update(e, n, r),
+  update: (e, n, s) => t.roles.update(e, n, s),
   remove: (e, n) => t.roles.remove(e, n),
   listKey: "roles",
   getId: (e) => e.id,
@@ -341,19 +314,19 @@ const k = (t) => ({
     name: e.name,
     description: e.description
   })
-}), x = (t) => ({
+}), U = (t) => ({
   list: async (e, n) => (await t.connections.list(e, n)).connections,
   listPaginated: (e, n) => t.connections.list(e, n),
   get: (e, n) => t.connections.get(e, n),
   create: (e, n) => t.connections.create(e, n),
-  update: (e, n, r) => t.connections.update(e, n, r),
+  update: (e, n, s) => t.connections.update(e, n, s),
   remove: (e, n) => t.connections.remove(e, n),
   listKey: "connections",
   getId: (e) => e.id,
   transform: (e) => {
     const n = e.options ? { ...e.options } : {};
-    for (const r of ye)
-      delete n[r];
+    for (const s of ce)
+      delete n[s];
     return {
       id: e.id,
       name: e.name,
@@ -368,55 +341,55 @@ const k = (t) => ({
     };
   },
   preserveOnUpdate: (e, n) => {
-    const r = e.options || {};
+    const s = e.options || {};
     return {
       ...n,
       options: {
         ...n.options,
-        client_id: r.client_id,
-        client_secret: r.client_secret,
-        app_secret: r.app_secret,
-        kid: r.kid,
-        team_id: r.team_id,
-        twilio_sid: r.twilio_sid,
-        twilio_token: r.twilio_token
+        client_id: s.client_id,
+        client_secret: s.client_secret,
+        app_secret: s.app_secret,
+        kid: s.kid,
+        team_id: s.team_id,
+        twilio_sid: s.twilio_sid,
+        twilio_token: s.twilio_token
       }
     };
   }
 });
-function be(t) {
-  const { sync: e = {}, filters: n = {} } = t, r = e.resourceServers ?? !0, a = e.roles ?? !0, c = e.connections ?? !0, s = r ? L(
+function Te(t) {
+  const { sync: e = {}, filters: n = {} } = t, s = e.resourceServers ?? !0, a = e.roles ?? !0, o = e.connections ?? !0, r = s ? E(
     t,
-    k,
+    N,
     n.resourceServers
-  ) : void 0, i = a ? L(
+  ) : void 0, i = a ? E(
     t,
     H,
     n.roles
-  ) : void 0, p = c ? L(
+  ) : void 0, m = o ? E(
     t,
-    x,
+    U,
     n.connections
-  ) : void 0, o = r ? V(
+  ) : void 0, d = s ? F(
     t,
-    k,
+    N,
     n.resourceServers
-  ) : void 0, l = a ? V(
+  ) : void 0, c = a ? F(
     t,
     H,
     n.roles
-  ) : void 0, u = c ? V(
+  ) : void 0, p = o ? F(
     t,
-    x,
+    U,
     n.connections
-  ) : void 0, d = a ? {
-    async afterCreate(w, g) {
+  ) : void 0, l = a ? {
+    async afterCreate(g, w) {
       var h;
-      if (g.id !== t.controlPlaneTenantId) {
-        await ((h = l == null ? void 0 : l.afterCreate) == null ? void 0 : h.call(l, w, g));
+      if (w.id !== t.controlPlaneTenantId) {
+        await ((h = c == null ? void 0 : c.afterCreate) == null ? void 0 : h.call(c, g, w));
         try {
-          const v = await t.getControlPlaneAdapters(), _ = await t.getAdapters(g.id), A = await F(
-            (b) => v.roles.list(
+          const y = await t.getControlPlaneAdapters(), v = await t.getAdapters(w.id), A = await z(
+            (b) => y.roles.list(
               t.controlPlaneTenantId,
               b
             ),
@@ -424,102 +397,128 @@ function be(t) {
             { cursorField: "id", pageSize: 100 }
           ), $ = /* @__PURE__ */ new Map();
           for (const b of A.filter(
-            (y) => {
-              var C;
-              return ((C = n.roles) == null ? void 0 : C.call(n, y)) ?? !0;
+            (_) => {
+              var T;
+              return ((T = n.roles) == null ? void 0 : T.call(n, _)) ?? !0;
             }
           )) {
-            const y = await m(
-              _,
-              g.id,
+            const _ = await u(
+              v,
+              w.id,
               b.name
             );
-            y && $.set(b.name, y.id);
+            _ && $.set(b.name, _.id);
           }
           for (const b of A.filter(
-            (y) => {
-              var C;
-              return ((C = n.roles) == null ? void 0 : C.call(n, y)) ?? !0;
+            (_) => {
+              var T;
+              return ((T = n.roles) == null ? void 0 : T.call(n, _)) ?? !0;
             }
           )) {
-            const y = $.get(b.name);
-            if (y)
+            const _ = $.get(b.name);
+            if (_)
               try {
-                const C = await v.rolePermissions.list(
+                const T = await y.rolePermissions.list(
                   t.controlPlaneTenantId,
                   b.id,
                   {}
                 );
-                C.length > 0 && await _.rolePermissions.assign(
-                  g.id,
-                  y,
-                  C.map((P) => ({
-                    role_id: y,
+                T.length > 0 && await v.rolePermissions.assign(
+                  w.id,
+                  _,
+                  T.map((P) => ({
+                    role_id: _,
                     resource_server_identifier: P.resource_server_identifier,
                     permission_name: P.permission_name
                   }))
                 );
-              } catch (C) {
+              } catch (T) {
                 console.error(
-                  `Failed to sync permissions for role "${b.name}" to tenant "${g.id}":`,
-                  C
+                  `Failed to sync permissions for role "${b.name}" to tenant "${w.id}":`,
+                  T
                 );
               }
           }
-        } catch (v) {
+        } catch (y) {
           console.error(
-            `Failed to sync role permissions to tenant "${g.id}":`,
-            v
+            `Failed to sync role permissions to tenant "${w.id}":`,
+            y
           );
         }
       }
     }
   } : void 0;
-  async function m(w, g, h) {
-    return (await w.roles.list(g, {
+  async function u(g, w, h) {
+    return (await g.roles.list(w, {
       q: `name:${h}`,
       per_page: 1
     })).roles[0] ?? null;
   }
   return {
     entityHooks: {
-      resourceServers: s,
+      resourceServers: r,
       roles: i,
-      connections: p
+      connections: m
     },
     tenantHooks: {
-      async afterCreate(w, g) {
+      async afterCreate(g, w) {
         const h = [
-          o == null ? void 0 : o.afterCreate,
-          (d == null ? void 0 : d.afterCreate) ?? (l == null ? void 0 : l.afterCreate),
-          u == null ? void 0 : u.afterCreate
-        ], v = [];
-        for (const _ of h)
-          if (_)
+          d == null ? void 0 : d.afterCreate,
+          (l == null ? void 0 : l.afterCreate) ?? (c == null ? void 0 : c.afterCreate),
+          p == null ? void 0 : p.afterCreate
+        ], y = [];
+        for (const v of h)
+          if (v)
             try {
-              await _(w, g);
+              await v(g, w);
             } catch (A) {
-              v.push(A instanceof Error ? A : new Error(String(A)));
+              y.push(A instanceof Error ? A : new Error(String(A)));
             }
-        if (v.length === 1) throw v[0];
-        if (v.length > 1)
+        if (y.length === 1) throw y[0];
+        if (y.length > 1)
           throw new AggregateError(
-            v,
-            v.map((_) => _.message).join("; ")
+            y,
+            y.map((v) => v.message).join("; ")
           );
       }
     }
   };
 }
-function W(t, e) {
-  const n = new de();
+var C = class extends Error {
+  /**
+   * Creates an instance of `HTTPException`.
+   * @param status - HTTP status code for the exception. Defaults to 500.
+   * @param options - Additional options for the exception.
+   */
+  constructor(e = 500, n) {
+    super(n == null ? void 0 : n.message, { cause: n == null ? void 0 : n.cause });
+    O(this, "res");
+    O(this, "status");
+    this.res = n == null ? void 0 : n.res, this.status = e;
+  }
+  /**
+   * Returns the response object associated with the exception.
+   * If a response object is not provided, a new response is created with the error message and status code.
+   * @returns The response object.
+   */
+  getResponse() {
+    return this.res ? new Response(this.res.body, {
+      status: this.status,
+      headers: this.res.headers
+    }) : new Response(this.message, {
+      status: this.status
+    });
+  }
+};
+function B(t, e) {
+  const n = new Z();
   return n.openapi(
-    B({
+    R({
       tags: ["tenants"],
       method: "get",
       path: "/",
       request: {
-        query: ue
+        query: x
       },
       security: [
         {
@@ -530,11 +529,11 @@ function W(t, e) {
         200: {
           content: {
             "application/json": {
-              schema: z.object({
-                tenants: z.array(E),
-                start: z.number().optional(),
-                limit: z.number().optional(),
-                length: z.number().optional()
+              schema: I.object({
+                tenants: I.array(j),
+                start: I.number().optional(),
+                limit: I.number().optional(),
+                length: I.number().optional()
               })
             }
           },
@@ -542,75 +541,75 @@ function W(t, e) {
         }
       }
     }),
-    async (r) => {
-      var m, f, w, g;
-      const a = r.req.valid("query"), { page: c, per_page: s, include_totals: i, q: p } = a, o = r.var.user, l = (o == null ? void 0 : o.permissions) || [];
-      if (l.includes("auth:read") || l.includes("admin:organizations")) {
-        const h = await r.env.data.tenants.list({
-          page: c,
-          per_page: s,
+    async (s) => {
+      var u, f, g, w;
+      const a = s.req.valid("query"), { page: o, per_page: r, include_totals: i, q: m } = a, d = s.var.user, c = (d == null ? void 0 : d.permissions) || [];
+      if (c.includes("auth:read") || c.includes("admin:organizations")) {
+        const h = await s.env.data.tenants.list({
+          page: o,
+          per_page: r,
           include_totals: i,
-          q: p
+          q: m
         });
-        return i ? r.json({
+        return i ? s.json({
           tenants: h.tenants,
-          start: ((m = h.totals) == null ? void 0 : m.start) ?? 0,
-          limit: ((f = h.totals) == null ? void 0 : f.limit) ?? s,
+          start: ((u = h.totals) == null ? void 0 : u.start) ?? 0,
+          limit: ((f = h.totals) == null ? void 0 : f.limit) ?? r,
           length: h.tenants.length
-        }) : r.json({ tenants: h.tenants });
+        }) : s.json({ tenants: h.tenants });
       }
-      if (t.accessControl && (o != null && o.sub)) {
-        const h = t.accessControl.controlPlaneTenantId, _ = (await F(
-          (D) => r.env.data.userOrganizations.listUserOrganizations(
+      if (t.accessControl && (d != null && d.sub)) {
+        const h = t.accessControl.controlPlaneTenantId, v = (await z(
+          (S) => s.env.data.userOrganizations.listUserOrganizations(
             h,
-            o.sub,
-            D
+            d.sub,
+            S
           ),
           "organizations"
-        )).map((D) => D.name);
-        if (_.length === 0)
-          return i ? r.json({
+        )).map((S) => S.name);
+        if (v.length === 0)
+          return i ? s.json({
             tenants: [],
             start: 0,
-            limit: s ?? 50,
+            limit: r ?? 50,
             length: 0
-          }) : r.json({ tenants: [] });
-        const A = _.length, $ = c ?? 0, b = s ?? 50, y = $ * b, C = _.slice(y, y + b);
-        if (C.length === 0)
-          return i ? r.json({
+          }) : s.json({ tenants: [] });
+        const A = v.length, $ = o ?? 0, b = r ?? 50, _ = $ * b, T = v.slice(_, _ + b);
+        if (T.length === 0)
+          return i ? s.json({
             tenants: [],
-            start: y,
+            start: _,
             limit: b,
             length: A
-          }) : r.json({ tenants: [] });
-        const P = C.map((D) => `id:${D}`).join(" OR "), q = p ? `(${P}) AND (${p})` : P, R = await r.env.data.tenants.list({
-          q,
+          }) : s.json({ tenants: [] });
+        const P = T.map((S) => `id:${S}`).join(" OR "), L = m ? `(${P}) AND (${m})` : P, M = await s.env.data.tenants.list({
+          q: L,
           per_page: b,
           include_totals: !1
           // We calculate totals from accessibleTenantIds
         });
-        return i ? r.json({
-          tenants: R.tenants,
-          start: y,
+        return i ? s.json({
+          tenants: M.tenants,
+          start: _,
           limit: b,
           length: A
-        }) : r.json({ tenants: R.tenants });
+        }) : s.json({ tenants: M.tenants });
       }
-      const d = await r.env.data.tenants.list({
-        page: c,
-        per_page: s,
+      const l = await s.env.data.tenants.list({
+        page: o,
+        per_page: r,
         include_totals: i,
-        q: p
+        q: m
       });
-      return i ? r.json({
-        tenants: d.tenants,
-        start: ((w = d.totals) == null ? void 0 : w.start) ?? 0,
-        limit: ((g = d.totals) == null ? void 0 : g.limit) ?? s,
-        length: d.tenants.length
-      }) : r.json({ tenants: d.tenants });
+      return i ? s.json({
+        tenants: l.tenants,
+        start: ((g = l.totals) == null ? void 0 : g.start) ?? 0,
+        limit: ((w = l.totals) == null ? void 0 : w.limit) ?? r,
+        length: l.tenants.length
+      }) : s.json({ tenants: l.tenants });
     }
   ), n.openapi(
-    B({
+    R({
       tags: ["tenants"],
       method: "post",
       path: "/",
@@ -618,7 +617,7 @@ function W(t, e) {
         body: {
           content: {
             "application/json": {
-              schema: me
+              schema: ee
             }
           }
         }
@@ -632,7 +631,7 @@ function W(t, e) {
         201: {
           content: {
             "application/json": {
-              schema: E
+              schema: j
             }
           },
           description: "Tenant created"
@@ -645,30 +644,30 @@ function W(t, e) {
         }
       }
     }),
-    async (r) => {
-      var p, o;
-      const a = r.var.user;
+    async (s) => {
+      var m, d;
+      const a = s.var.user;
       if (!(a != null && a.sub))
-        throw new S(401, {
+        throw new C(401, {
           message: "Authentication required to create tenants"
         });
-      let c = r.req.valid("json");
-      const s = {
-        adapters: r.env.data,
-        ctx: r
+      let o = s.req.valid("json");
+      const r = {
+        adapters: s.env.data,
+        ctx: s
       };
-      (p = e.tenants) != null && p.beforeCreate && (c = await e.tenants.beforeCreate(s, c));
-      const i = await r.env.data.tenants.create(c);
-      return (o = e.tenants) != null && o.afterCreate && await e.tenants.afterCreate(s, i), r.json(i, 201);
+      (m = e.tenants) != null && m.beforeCreate && (o = await e.tenants.beforeCreate(r, o));
+      const i = await s.env.data.tenants.create(o);
+      return (d = e.tenants) != null && d.afterCreate && await e.tenants.afterCreate(r, i), s.json(i, 201);
     }
   ), n.openapi(
-    B({
+    R({
       tags: ["tenants"],
       method: "delete",
       path: "/{id}",
       request: {
-        params: z.object({
-          id: z.string()
+        params: I.object({
+          id: I.string()
         })
       },
       security: [
@@ -688,44 +687,44 @@ function W(t, e) {
         }
       }
     }),
-    async (r) => {
-      var i, p;
-      const { id: a } = r.req.valid("param");
+    async (s) => {
+      var i, m;
+      const { id: a } = s.req.valid("param");
       if (t.accessControl) {
-        const o = r.var.user, l = t.accessControl.controlPlaneTenantId;
-        if (!(o != null && o.sub))
-          throw new S(401, {
+        const d = s.var.user, c = t.accessControl.controlPlaneTenantId;
+        if (!(d != null && d.sub))
+          throw new C(401, {
             message: "Authentication required"
           });
-        if (a === l)
-          throw new S(403, {
+        if (a === c)
+          throw new C(403, {
             message: "Cannot delete the control plane"
           });
-        if (!(await F(
-          (m) => r.env.data.userOrganizations.listUserOrganizations(
-            l,
-            o.sub,
-            m
+        if (!(await z(
+          (u) => s.env.data.userOrganizations.listUserOrganizations(
+            c,
+            d.sub,
+            u
           ),
           "organizations"
-        )).some((m) => m.name === a))
-          throw new S(403, {
+        )).some((u) => u.name === a))
+          throw new C(403, {
             message: "Access denied to this tenant"
           });
       }
-      if (!await r.env.data.tenants.get(a))
-        throw new S(404, {
+      if (!await s.env.data.tenants.get(a))
+        throw new C(404, {
           message: "Tenant not found"
         });
-      const s = {
-        adapters: r.env.data,
-        ctx: r
+      const r = {
+        adapters: s.env.data,
+        ctx: s
       };
-      return (i = e.tenants) != null && i.beforeDelete && await e.tenants.beforeDelete(s, a), await r.env.data.tenants.remove(a), (p = e.tenants) != null && p.afterDelete && await e.tenants.afterDelete(s, a), r.body(null, 204);
+      return (i = e.tenants) != null && i.beforeDelete && await e.tenants.beforeDelete(r, a), await s.env.data.tenants.remove(a), (m = e.tenants) != null && m.afterDelete && await e.tenants.afterDelete(r, a), s.body(null, 204);
     }
   ), n;
 }
-function Ce(t) {
+function le(t) {
   const e = [
     {
       pattern: /\/api\/v2\/resource-servers\/([^/]+)$/,
@@ -734,27 +733,27 @@ function Ce(t) {
     { pattern: /\/api\/v2\/roles\/([^/]+)$/, type: "role" },
     { pattern: /\/api\/v2\/connections\/([^/]+)$/, type: "connection" }
   ];
-  for (const { pattern: n, type: r } of e) {
+  for (const { pattern: n, type: s } of e) {
     const a = t.match(n);
     if (a && a[1])
-      return { type: r, id: a[1] };
+      return { type: s, id: a[1] };
   }
   return null;
 }
-async function Ae(t, e, n) {
+async function de(t, e, n) {
   try {
     switch (n.type) {
       case "resource_server": {
-        const r = await t.resourceServers.get(e, n.id);
-        return (r == null ? void 0 : r.is_system) === !0;
+        const s = await t.resourceServers.get(e, n.id);
+        return (s == null ? void 0 : s.is_system) === !0;
       }
       case "role": {
-        const r = await t.roles.get(e, n.id);
-        return (r == null ? void 0 : r.is_system) === !0;
+        const s = await t.roles.get(e, n.id);
+        return (s == null ? void 0 : s.is_system) === !0;
       }
       case "connection": {
-        const r = await t.connections.get(e, n.id);
-        return (r == null ? void 0 : r.is_system) === !0;
+        const s = await t.connections.get(e, n.id);
+        return (s == null ? void 0 : s.is_system) === !0;
       }
       default:
         return !1;
@@ -763,128 +762,128 @@ async function Ae(t, e, n) {
     return !1;
   }
 }
-function Te(t) {
+function ue(t) {
   return {
     resource_server: "resource server",
     role: "role",
     connection: "connection"
   }[t];
 }
-function Se() {
+function Ae() {
   return async (t, e) => {
     if (!["PATCH", "PUT", "DELETE"].includes(t.req.method))
       return e();
-    const n = Ce(t.req.path);
+    const n = le(t.req.path);
     if (!n)
       return e();
-    const r = t.var.tenant_id || t.req.header("x-tenant-id") || t.req.header("tenant-id");
-    if (!r)
+    const s = t.var.tenant_id || t.req.header("x-tenant-id") || t.req.header("tenant-id");
+    if (!s)
       return e();
-    if (await Ae(t.env.data, r, n))
-      throw new S(403, {
-        message: `This ${Te(n.type)} is a system resource and cannot be modified. Make changes in the control plane instead.`
+    if (await de(t.env.data, s, n))
+      throw new C(403, {
+        message: `This ${ue(n.type)} is a system resource and cannot be modified. Make changes in the control plane instead.`
       });
     return e();
   };
 }
-function te(t, e) {
-  const { controlPlaneTenantId: n, controlPlaneClientId: r } = e;
+function G(t, e) {
+  const { controlPlaneTenantId: n, controlPlaneClientId: s } = e;
   return {
     ...t,
     legacyClients: {
       ...t.legacyClients,
       get: async (a) => {
-        var u;
-        const c = await t.legacyClients.get(a);
-        if (!c)
+        var p;
+        const o = await t.legacyClients.get(a);
+        if (!o)
           return null;
-        const s = r ? await t.legacyClients.get(r) : void 0, i = await t.connections.list(
-          c.tenant.id
-        ), p = n ? await t.connections.list(n) : { connections: [] }, o = i.connections.map((d) => {
-          var w;
-          const m = (w = p.connections) == null ? void 0 : w.find(
-            (g) => g.name === d.name
+        const r = s ? await t.legacyClients.get(s) : void 0, i = await t.connections.list(
+          o.tenant.id
+        ), m = n ? await t.connections.list(n) : { connections: [] }, d = i.connections.map((l) => {
+          var g;
+          const u = (g = m.connections) == null ? void 0 : g.find(
+            (w) => w.name === l.name
           );
-          if (!(m != null && m.options))
-            return d;
-          const f = G.parse({
-            ...m || {},
-            ...d
+          if (!(u != null && u.options))
+            return l;
+          const f = k.parse({
+            ...u || {},
+            ...l
           });
-          return f.options = K.parse({
-            ...m.options || {},
-            ...d.options
+          return f.options = D.parse({
+            ...u.options || {},
+            ...l.options
           }), f;
-        }).filter((d) => d), l = {
-          ...(s == null ? void 0 : s.tenant) || {},
-          ...c.tenant
+        }).filter((l) => l), c = {
+          ...(r == null ? void 0 : r.tenant) || {},
+          ...o.tenant
         };
-        return !c.tenant.audience && ((u = s == null ? void 0 : s.tenant) != null && u.audience) && (l.audience = s.tenant.audience), {
-          ...c,
+        return !o.tenant.audience && ((p = r == null ? void 0 : r.tenant) != null && p.audience) && (c.audience = r.tenant.audience), {
+          ...o,
           web_origins: [
-            ...(s == null ? void 0 : s.web_origins) || [],
-            ...c.web_origins || []
+            ...(r == null ? void 0 : r.web_origins) || [],
+            ...o.web_origins || []
           ],
           allowed_logout_urls: [
-            ...(s == null ? void 0 : s.allowed_logout_urls) || [],
-            ...c.allowed_logout_urls || []
+            ...(r == null ? void 0 : r.allowed_logout_urls) || [],
+            ...o.allowed_logout_urls || []
           ],
           callbacks: [
-            ...(s == null ? void 0 : s.callbacks) || [],
-            ...c.callbacks || []
+            ...(r == null ? void 0 : r.callbacks) || [],
+            ...o.callbacks || []
           ],
-          connections: o,
-          tenant: l
+          connections: d,
+          tenant: c
         };
       }
     },
     connections: {
       ...t.connections,
-      get: async (a, c) => {
-        const s = await t.connections.get(
+      get: async (a, o) => {
+        const r = await t.connections.get(
           a,
-          c
+          o
         );
-        if (!s || !n)
-          return s;
+        if (!r || !n)
+          return r;
         const i = await t.connections.get(
           n,
-          c
+          o
         );
         if (!i)
-          return s;
-        const p = G.parse({
+          return r;
+        const m = k.parse({
           ...i,
-          ...s
+          ...r
         });
-        return p.options = K.parse({
+        return m.options = D.parse({
           ...i.options || {},
-          ...s.options
-        }), p;
+          ...r.options
+        }), m;
       },
-      list: async (a, c) => {
-        const s = await t.connections.list(a, c);
+      list: async (a, o) => {
+        const r = await t.connections.list(a, o);
         if (!n || a === n)
-          return s;
-        const i = await t.connections.list(n), p = s.connections.map((o) => {
-          var d;
-          const l = (d = i.connections) == null ? void 0 : d.find(
-            (m) => m.name === o.name
+          return r;
+        const i = await t.connections.list(n), m = r.connections.map((d) => {
+          var l;
+          const c = (l = i.connections) == null ? void 0 : l.find(
+            (u) => u.name === d.name
           );
-          if (!(l != null && l.options))
-            return o;
-          const u = G.parse({
-            ...l,
-            ...o
+          if (!(c != null && c.options))
+            return d;
+          const p = k.parse({
+            ...c,
+            ...d
           });
-          return u.options = K.parse({
-            ...l.options || {},
-            ...o.options
-          }), u;
+          return p.options = D.parse({
+            ...c.options || {},
+            ...d.options
+          }), p;
         });
         return {
-          ...s,
-          connections: p
+          ...r,
+          connections: m
         };
       }
     }
@@ -897,108 +896,108 @@ function te(t, e) {
     // They remain part of ...baseAdapters and can be properly wrapped by caching.
   };
 }
-function Ie(t, e) {
-  return te(t, e);
+function me(t, e) {
+  return G(t, e);
 }
-const Me = te, Ne = Ie;
-function Pe(t) {
+const Ce = G, Ie = me;
+function pe(t) {
   return async (e, n) => {
     if (!t.accessControl)
       return n();
-    const r = e.var.tenant_id, a = e.var.organization_id;
-    if (!r)
-      throw new S(400, {
+    const s = e.var.tenant_id, a = e.var.organization_id;
+    if (!s)
+      throw new C(400, {
         message: "Tenant ID not found in request"
       });
-    if (!fe(
+    if (!ne(
       a,
-      r,
+      s,
       t.accessControl.controlPlaneTenantId
     ))
-      throw new S(403, {
-        message: `Access denied to tenant ${r}`
+      throw new C(403, {
+        message: `Access denied to tenant ${s}`
       });
     return n();
   };
 }
-function De(t) {
+function fe(t) {
   return async (e, n) => {
     if (!t.subdomainRouting)
       return n();
     const {
-      baseDomain: r,
+      baseDomain: s,
       reservedSubdomains: a = [],
-      resolveSubdomain: c
-    } = t.subdomainRouting, s = e.req.header("host") || "";
+      resolveSubdomain: o
+    } = t.subdomainRouting, r = e.req.header("host") || "";
     let i = null;
-    if (s.endsWith(r)) {
-      const o = s.slice(0, -(r.length + 1));
-      o && !o.includes(".") && (i = o);
+    if (r.endsWith(s)) {
+      const d = r.slice(0, -(s.length + 1));
+      d && !d.includes(".") && (i = d);
     }
     if (i && a.includes(i) && (i = null), !i)
       return t.accessControl && e.set("tenant_id", t.accessControl.controlPlaneTenantId), n();
-    let p = null;
-    if (c)
-      p = await c(i);
+    let m = null;
+    if (o)
+      m = await o(i);
     else if (t.subdomainRouting.useOrganizations !== !1 && t.accessControl)
       try {
-        const o = await e.env.data.organizations.get(
+        const d = await e.env.data.organizations.get(
           t.accessControl.controlPlaneTenantId,
           i
         );
-        o && (p = o.id);
+        d && (m = d.id);
       } catch {
       }
-    if (!p)
-      throw new S(404, {
+    if (!m)
+      throw new C(404, {
         message: `Tenant not found for subdomain: ${i}`
       });
-    return e.set("tenant_id", p), n();
+    return e.set("tenant_id", m), n();
   };
 }
-function $e(t) {
+function ge(t) {
   return async (e, n) => {
     if (!t.databaseIsolation)
       return n();
-    const r = e.var.tenant_id;
-    if (!r)
-      throw new S(400, {
+    const s = e.var.tenant_id;
+    if (!s)
+      throw new C(400, {
         message: "Tenant ID not found in request"
       });
     try {
-      const a = await t.databaseIsolation.getAdapters(r);
+      const a = await t.databaseIsolation.getAdapters(s);
       e.env.data = a;
     } catch (a) {
       throw console.error(
-        `Failed to resolve database for tenant ${r}:`,
+        `Failed to resolve database for tenant ${s}:`,
         a
-      ), new S(500, {
+      ), new C(500, {
         message: "Failed to resolve tenant database"
       });
     }
     return n();
   };
 }
-function ne(t) {
-  const e = De(t), n = Pe(t), r = $e(t);
-  return async (a, c) => (await e(a, async () => {
+function K(t) {
+  const e = fe(t), n = pe(t), s = ge(t);
+  return async (a, o) => (await e(a, async () => {
   }), await n(a, async () => {
-  }), await r(a, async () => {
-  }), c());
+  }), await s(a, async () => {
+  }), o());
 }
-function Ue(t) {
-  const e = j(t);
+function Pe(t) {
+  const e = q(t);
   return {
     name: "multi-tenancy",
     // Apply multi-tenancy middleware for subdomain routing, database resolution, etc.
-    middleware: ne(t),
+    middleware: K(t),
     // Provide lifecycle hooks
     hooks: e,
     // Mount tenant management routes
     routes: [
       {
         path: "/management",
-        handler: W(t, e)
+        handler: B(t, e)
       }
     ],
     // Called when plugin is registered
@@ -1011,180 +1010,44 @@ function Ue(t) {
     }
   };
 }
-function j(t) {
-  const e = t.accessControl ? pe(t.accessControl) : {}, n = t.databaseIsolation ? we(t.databaseIsolation) : {}, r = ge(t);
+function q(t) {
+  const e = t.accessControl ? te(t.accessControl) : {}, n = t.databaseIsolation ? se(t.databaseIsolation) : {}, s = ae(t);
   return {
     ...e,
     ...n,
-    tenants: r
+    tenants: s
   };
 }
-function ze(t) {
-  const e = new ee(), n = j(t);
-  return e.route("/tenants", W(t, n)), e;
+function we(t) {
+  const e = new Q(), n = q(t);
+  return e.route("/tenants", B(t, n)), e;
 }
-function Be(t) {
+function Se(t) {
   return {
-    hooks: j(t),
-    middleware: ne(t),
-    app: ze(t),
+    hooks: q(t),
+    middleware: K(t),
+    app: we(t),
     config: t
   };
 }
-function Ge(t) {
-  var A, $, b, y, C, P, q, R, D, Q, J, X, Y, Z;
-  const {
-    controlPlaneTenantId: e = "control_plane",
-    sync: n,
-    multiTenancy: r,
-    entityHooks: a,
-    ...c
-  } = t, s = {
-    ...r,
-    accessControl: {
-      controlPlaneTenantId: e,
-      requireOrganizationMatch: !1,
-      defaultPermissions: ["tenant:admin"],
-      ...r == null ? void 0 : r.accessControl
-    }
-  }, i = j(s), p = ((A = r == null ? void 0 : r.databaseIsolation) == null ? void 0 : A.getAdapters) ?? (async () => t.dataAdapter), { entityHooks: o, tenantHooks: l } = be({
-    controlPlaneTenantId: e,
-    getChildTenantIds: async () => (await F(
-      (T) => t.dataAdapter.tenants.list(T),
-      "tenants",
-      { cursorField: "id", pageSize: 100 }
-    )).filter((T) => T.id !== e).map((T) => T.id),
-    getAdapters: p,
-    getControlPlaneAdapters: async () => p(e),
-    sync: n
-  });
-  function u(I, T) {
-    if (!(!I && !T))
-      return I ? T ? async (...re) => {
-        const O = [];
-        for (const M of [I, T])
-          try {
-            await M(...re);
-          } catch (N) {
-            O.push(N instanceof Error ? N : new Error(String(N)));
-          }
-        if (O.length === 1) throw O[0];
-        if (O.length > 1)
-          throw new AggregateError(
-            O,
-            O.map((M) => M.message).join("; ")
-          );
-      } : I : T;
-  }
-  const d = {
-    ...a,
-    resourceServers: o != null && o.resourceServers ? {
-      ...a == null ? void 0 : a.resourceServers,
-      afterCreate: u(
-        ($ = a == null ? void 0 : a.resourceServers) == null ? void 0 : $.afterCreate,
-        o.resourceServers.afterCreate
-      ),
-      afterUpdate: u(
-        (b = a == null ? void 0 : a.resourceServers) == null ? void 0 : b.afterUpdate,
-        o.resourceServers.afterUpdate
-      ),
-      beforeDelete: u(
-        (y = a == null ? void 0 : a.resourceServers) == null ? void 0 : y.beforeDelete,
-        o.resourceServers.beforeDelete
-      ),
-      afterDelete: u(
-        (C = a == null ? void 0 : a.resourceServers) == null ? void 0 : C.afterDelete,
-        o.resourceServers.afterDelete
-      )
-    } : a == null ? void 0 : a.resourceServers,
-    roles: o != null && o.roles ? {
-      ...a == null ? void 0 : a.roles,
-      afterCreate: u(
-        (P = a == null ? void 0 : a.roles) == null ? void 0 : P.afterCreate,
-        o.roles.afterCreate
-      ),
-      afterUpdate: u(
-        (q = a == null ? void 0 : a.roles) == null ? void 0 : q.afterUpdate,
-        o.roles.afterUpdate
-      ),
-      beforeDelete: u(
-        (R = a == null ? void 0 : a.roles) == null ? void 0 : R.beforeDelete,
-        o.roles.beforeDelete
-      ),
-      afterDelete: u(
-        (D = a == null ? void 0 : a.roles) == null ? void 0 : D.afterDelete,
-        o.roles.afterDelete
-      )
-    } : a == null ? void 0 : a.roles,
-    connections: o != null && o.connections ? {
-      ...a == null ? void 0 : a.connections,
-      afterCreate: u(
-        (Q = a == null ? void 0 : a.connections) == null ? void 0 : Q.afterCreate,
-        o.connections.afterCreate
-      ),
-      afterUpdate: u(
-        (J = a == null ? void 0 : a.connections) == null ? void 0 : J.afterUpdate,
-        o.connections.afterUpdate
-      ),
-      beforeDelete: u(
-        (X = a == null ? void 0 : a.connections) == null ? void 0 : X.beforeDelete,
-        o.connections.beforeDelete
-      ),
-      afterDelete: u(
-        (Y = a == null ? void 0 : a.connections) == null ? void 0 : Y.afterDelete,
-        o.connections.afterDelete
-      )
-    } : a == null ? void 0 : a.connections,
-    // Note: tenant sync hooks are only attached to combinedTenantHooks (for router use)
-    // to avoid duplicate execution. The entityHooks.tenants doesn't need the sync hook.
-    tenants: a == null ? void 0 : a.tenants
-  }, m = {
-    ...i,
-    tenants: l ? {
-      ...i.tenants,
-      afterCreate: u(
-        (Z = i.tenants) == null ? void 0 : Z.afterCreate,
-        l.afterCreate
-      )
-    } : i.tenants
-  }, f = W(
-    s,
-    m
-  ), w = le({
-    ...c,
-    entityHooks: d,
-    managementApiExtensions: [
-      ...c.managementApiExtensions || [],
-      { path: "/tenants", router: f }
-    ]
-  }), { app: g, managementApp: h, ...v } = w, _ = new ee();
-  return _.onError((I, T) => I instanceof S ? I.getResponse() : (console.error(I), T.json({ message: "Internal Server Error" }, 500))), _.use("/api/v2/*", Se()), _.route("/", g), {
-    app: _,
-    managementApp: h,
-    ...v,
-    multiTenancyConfig: s,
-    multiTenancyHooks: i
-  };
-}
 export {
-  pe as createAccessControlHooks,
-  Pe as createAccessControlMiddleware,
-  we as createDatabaseHooks,
-  $e as createDatabaseMiddleware,
-  ze as createMultiTenancy,
-  j as createMultiTenancyHooks,
-  ne as createMultiTenancyMiddleware,
-  Ue as createMultiTenancyPlugin,
-  Se as createProtectSyncedMiddleware,
-  ge as createProvisioningHooks,
-  te as createRuntimeFallbackAdapter,
-  Me as createSettingsInheritanceAdapter,
-  De as createSubdomainMiddleware,
-  be as createSyncHooks,
-  W as createTenantsOpenAPIRouter,
-  Ge as init,
-  Be as setupMultiTenancy,
-  fe as validateTenantAccess,
-  Ie as withRuntimeFallback,
-  Ne as withSettingsInheritance
+  te as createAccessControlHooks,
+  pe as createAccessControlMiddleware,
+  se as createDatabaseHooks,
+  ge as createDatabaseMiddleware,
+  we as createMultiTenancy,
+  q as createMultiTenancyHooks,
+  K as createMultiTenancyMiddleware,
+  Pe as createMultiTenancyPlugin,
+  Ae as createProtectSyncedMiddleware,
+  ae as createProvisioningHooks,
+  G as createRuntimeFallbackAdapter,
+  Ce as createSettingsInheritanceAdapter,
+  fe as createSubdomainMiddleware,
+  Te as createSyncHooks,
+  B as createTenantsOpenAPIRouter,
+  Se as setupMultiTenancy,
+  ne as validateTenantAccess,
+  me as withRuntimeFallback,
+  Ie as withSettingsInheritance
 };