@authhero/multi-tenancy 14.3.0 → 14.5.0

package/dist/multi-tenancy.mjs

@@ -1,30 +1,30 @@
-var W = Object.defineProperty;
-var Q = (t, e, n) => e in t ? W(t, e, { enumerable: !0, configurable: !0, writable: !0, value: n }) : t[e] = n;
-var $ = (t, e, n) => Q(t, typeof e != "symbol" ? e + "" : e, n);
-import { Hono as V } from "hono";
-import { MANAGEMENT_API_SCOPES as J, MANAGEMENT_API_AUDIENCE as L, fetchAll as I, auth0QuerySchema as X, tenantSchema as k, tenantInsertSchema as Y, connectionSchema as z, connectionOptionsSchema as R, init as Z } from "authhero";
-import { OpenAPIHono as x, createRoute as O, z as C } from "@hono/zod-openapi";
-function ee(t) {
+var X = Object.defineProperty;
+var Y = (t, e, n) => e in t ? X(t, e, { enumerable: !0, configurable: !0, writable: !0, value: n }) : t[e] = n;
+var R = (t, e, n) => Y(t, typeof e != "symbol" ? e + "" : e, n);
+import { Hono as Z } from "hono";
+import { MANAGEMENT_API_SCOPES as x, MANAGEMENT_API_AUDIENCE as W, fetchAll as z, auth0QuerySchema as ee, tenantSchema as H, tenantInsertSchema as te, connectionSchema as F, connectionOptionsSchema as O, init as ne } from "authhero";
+import { OpenAPIHono as re, createRoute as M, z as S } from "@hono/zod-openapi";
+function se(t) {
   const { controlPlaneTenantId: e, requireOrganizationMatch: n = !0 } = t;
   return {
-    async onTenantAccessValidation(s, a) {
-      if (a === e)
+    async onTenantAccessValidation(r, s) {
+      if (s === e)
         return !0;
       if (n) {
-        const i = s.var.org_name, o = s.var.organization_id, r = i || o;
-        return r ? r.toLowerCase() === a.toLowerCase() : !1;
+        const c = r.var.org_name, o = r.var.organization_id, a = c || o;
+        return a ? a.toLowerCase() === s.toLowerCase() : !1;
       }
       return !0;
     }
   };
 }
-function te(t, e, n, s) {
+function ae(t, e, n, r) {
   if (e === n)
     return !0;
-  const a = s || t;
-  return a ? a.toLowerCase() === e.toLowerCase() : !1;
+  const s = r || t;
+  return s ? s.toLowerCase() === e.toLowerCase() : !1;
 }
-function ne(t) {
+function oe(t) {
   return {
     async resolveDataAdapters(e) {
       try {
@@ -39,248 +39,248 @@ function ne(t) {
     }
   };
 }
-function se(t) {
+function ie(t) {
   return `urn:authhero:tenant:${t.toLowerCase()}`;
 }
-function re(t) {
+function ce(t) {
   return {
     async beforeCreate(e, n) {
       return !n.audience && n.id ? {
         ...n,
-        audience: se(n.id)
+        audience: ie(n.id)
       } : n;
     },
     async afterCreate(e, n) {
-      const { accessControl: s, databaseIsolation: a } = t;
-      s && e.ctx && await ae(e, n, s), a != null && a.onProvision && await a.onProvision(n.id);
+      const { accessControl: r, databaseIsolation: s } = t;
+      r && e.ctx && await le(e, n, r), s != null && s.onProvision && await s.onProvision(n.id);
     },
     async beforeDelete(e, n) {
-      const { accessControl: s, databaseIsolation: a } = t;
-      if (s)
+      const { accessControl: r, databaseIsolation: s } = t;
+      if (r)
         try {
           const o = (await e.adapters.organizations.list(
-            s.controlPlaneTenantId
-          )).organizations.find((r) => r.name === n);
+            r.controlPlaneTenantId
+          )).organizations.find((a) => a.name === n);
           o && await e.adapters.organizations.remove(
-            s.controlPlaneTenantId,
+            r.controlPlaneTenantId,
             o.id
           );
-        } catch (i) {
+        } catch (c) {
           console.warn(
             `Failed to remove organization for tenant ${n}:`,
-            i
+            c
           );
         }
-      if (a != null && a.onDeprovision)
+      if (s != null && s.onDeprovision)
         try {
-          await a.onDeprovision(n);
-        } catch (i) {
+          await s.onDeprovision(n);
+        } catch (c) {
           console.warn(
             `Failed to deprovision database for tenant ${n}:`,
-            i
+            c
           );
         }
     }
   };
 }
-async function ae(t, e, n) {
+async function le(t, e, n) {
   const {
-    controlPlaneTenantId: s,
-    defaultPermissions: a,
-    defaultRoles: i,
+    controlPlaneTenantId: r,
+    defaultPermissions: s,
+    defaultRoles: c,
     issuer: o,
-    adminRoleName: r = "Tenant Admin",
-    adminRoleDescription: c = "Full access to all tenant management operations",
-    addCreatorToOrganization: m = !0
-  } = n, l = await t.adapters.organizations.create(
-    s,
+    adminRoleName: a = "Tenant Admin",
+    adminRoleDescription: d = "Full access to all tenant management operations",
+    addCreatorToOrganization: u = !0
+  } = n, i = await t.adapters.organizations.create(
+    r,
     {
       name: e.id,
       display_name: e.friendly_name || e.id
     }
   );
   let f;
-  if (o && (f = await ie(
+  if (o && (f = await ue(
     t,
-    s,
     r,
-    c
-  )), m && t.ctx) {
-    const d = t.ctx.var.user;
-    if (d != null && d.sub && !await oe(
+    a,
+    d
+  )), u && t.ctx) {
+    const l = t.ctx.var.user;
+    if (l != null && l.sub && !await de(
       t,
-      s,
-      d.sub
+      r,
+      l.sub
     ))
       try {
-        await t.adapters.userOrganizations.create(s, {
-          user_id: d.sub,
-          organization_id: l.id
+        await t.adapters.userOrganizations.create(r, {
+          user_id: l.sub,
+          organization_id: i.id
         }), f && await t.adapters.userRoles.create(
-          s,
-          d.sub,
+          r,
+          l.sub,
           f,
-          l.id
+          i.id
           // organizationId
         );
-      } catch (p) {
+      } catch (g) {
         console.warn(
-          `Failed to add creator ${d.sub} to organization ${l.id}:`,
-          p
+          `Failed to add creator ${l.sub} to organization ${i.id}:`,
+          g
         );
       }
   }
-  i && i.length > 0 && console.log(
-    `Would assign roles ${i.join(", ")} to organization ${l.id}`
-  ), a && a.length > 0 && console.log(
-    `Would grant permissions ${a.join(", ")} to organization ${l.id}`
+  c && c.length > 0 && console.log(
+    `Would assign roles ${c.join(", ")} to organization ${i.id}`
+  ), s && s.length > 0 && console.log(
+    `Would grant permissions ${s.join(", ")} to organization ${i.id}`
   );
 }
-async function oe(t, e, n) {
-  const s = await t.adapters.userRoles.list(
+async function de(t, e, n) {
+  const r = await t.adapters.userRoles.list(
     e,
     n,
     void 0,
     ""
     // Empty string for global roles
   );
-  for (const a of s)
+  for (const s of r)
     if ((await t.adapters.rolePermissions.list(
       e,
-      a.id,
+      s.id,
       { per_page: 1e3 }
     )).some(
-      (r) => r.permission_name === "admin:organizations"
+      (a) => a.permission_name === "admin:organizations"
     ))
       return !0;
   return !1;
 }
-async function ie(t, e, n, s) {
-  const i = (await t.adapters.roles.list(e, {})).roles.find((m) => m.name === n);
-  if (i)
-    return i.id;
+async function ue(t, e, n, r) {
+  const c = (await t.adapters.roles.list(e, {})).roles.find((u) => u.name === n);
+  if (c)
+    return c.id;
   const o = await t.adapters.roles.create(e, {
     name: n,
-    description: s
-  }), r = L, c = J.map((m) => ({
+    description: r
+  }), a = W, d = x.map((u) => ({
     role_id: o.id,
-    resource_server_identifier: r,
-    permission_name: m.value
+    resource_server_identifier: a,
+    permission_name: u.value
   }));
   return await t.adapters.rolePermissions.assign(
     e,
     o.id,
-    c
+    d
   ), o.id;
 }
-function E(t, e, n = () => !0) {
-  const { controlPlaneTenantId: s, getChildTenantIds: a, getAdapters: i } = t, o = /* @__PURE__ */ new Map();
-  async function r(l, f, d) {
-    return (await e(l).list(f, {
-      q: `name:${d}`,
+function G(t, e, n = () => !0) {
+  const { controlPlaneTenantId: r, getChildTenantIds: s, getAdapters: c } = t, o = /* @__PURE__ */ new Map();
+  async function a(i, f, l) {
+    return (await e(i).list(f, {
+      q: `name:${l}`,
       per_page: 1
     }))[0] ?? null;
   }
-  async function c(l) {
-    const f = await a(), d = e(await i(s));
+  async function d(i) {
+    const f = await s(), l = e(await c(r));
     await Promise.all(
-      f.map(async (u) => {
+      f.map(async (m) => {
         try {
-          const p = await i(u), g = e(p), w = {
-            ...d.transform(l),
+          const g = await c(m), p = e(g), w = {
+            ...l.transform(i),
             is_system: !0
-          }, A = await r(p, u, l.name), v = A ? g.getId(A) : void 0;
-          if (A && v) {
-            const h = g.preserveOnUpdate ? g.preserveOnUpdate(A, w) : w;
-            await g.update(u, v, h);
+          }, y = await a(g, m, i.name), T = y ? p.getId(y) : void 0;
+          if (y && T) {
+            const b = p.preserveOnUpdate ? p.preserveOnUpdate(y, w) : w;
+            await p.update(m, T, b);
           } else
-            await g.create(u, w);
-        } catch (p) {
+            await p.create(m, w);
+        } catch (g) {
           console.error(
-            `Failed to sync ${d.listKey} "${l.name}" to tenant "${u}":`,
-            p
+            `Failed to sync ${l.listKey} "${i.name}" to tenant "${m}":`,
+            g
           );
         }
       })
     );
   }
-  async function m(l) {
-    const f = await a();
+  async function u(i) {
+    const f = await s();
     await Promise.all(
-      f.map(async (d) => {
+      f.map(async (l) => {
         try {
-          const u = await i(d), p = e(u), g = await r(u, d, l), y = g ? p.getId(g) : void 0;
-          g && y && await p.remove(d, y);
-        } catch (u) {
+          const m = await c(l), g = e(m), p = await a(m, l, i), h = p ? g.getId(p) : void 0;
+          p && h && await g.remove(l, h);
+        } catch (m) {
           console.error(
-            `Failed to delete entity "${l}" from tenant "${d}":`,
-            u
+            `Failed to delete entity "${i}" from tenant "${l}":`,
+            m
           );
         }
       })
     );
   }
   return {
-    afterCreate: async (l, f) => {
-      l.tenantId === s && n(f) && await c(f);
+    afterCreate: async (i, f) => {
+      i.tenantId === r && n(f) && await d(f);
     },
-    afterUpdate: async (l, f, d) => {
-      l.tenantId === s && n(d) && await c(d);
+    afterUpdate: async (i, f, l) => {
+      i.tenantId === r && n(l) && await d(l);
     },
-    beforeDelete: async (l, f) => {
-      if (l.tenantId !== s) return;
-      const u = await e(l.adapters).get(l.tenantId, f);
-      u && n(u) && o.set(f, u);
+    beforeDelete: async (i, f) => {
+      if (i.tenantId !== r) return;
+      const m = await e(i.adapters).get(i.tenantId, f);
+      m && n(m) && o.set(f, m);
     },
-    afterDelete: async (l, f) => {
-      if (l.tenantId !== s) return;
-      const d = o.get(f);
-      d && (o.delete(f), await m(d.name));
+    afterDelete: async (i, f) => {
+      if (i.tenantId !== r) return;
+      const l = o.get(f);
+      l && (o.delete(f), await u(l.name));
     }
   };
 }
-function N(t, e, n = () => !0) {
-  const { controlPlaneTenantId: s, getControlPlaneAdapters: a, getAdapters: i } = t;
+function L(t, e, n = () => !0) {
+  const { controlPlaneTenantId: r, getControlPlaneAdapters: s, getAdapters: c } = t;
   return {
-    async afterCreate(o, r) {
-      if (r.id !== s)
+    async afterCreate(o, a) {
+      if (a.id !== r)
         try {
-          const c = await a(), m = await i(r.id), l = e(c), f = e(m), d = await I(
-            (u) => l.listPaginated(s, u),
-            l.listKey,
+          const d = await s(), u = await c(a.id), i = e(d), f = e(u), l = await z(
+            (m) => i.listPaginated(r, m),
+            i.listKey,
             { cursorField: "id", pageSize: 100 }
           );
           await Promise.all(
-            d.filter((u) => n(u)).map(async (u) => {
+            l.filter((m) => n(m)).map(async (m) => {
               try {
-                const p = l.transform(u);
-                await f.create(r.id, {
-                  ...p,
+                const g = i.transform(m);
+                await f.create(a.id, {
+                  ...g,
                   is_system: !0
                 });
-              } catch (p) {
+              } catch (g) {
                 console.error(
-                  `Failed to sync entity to new tenant "${r.id}":`,
-                  p
+                  `Failed to sync entity to new tenant "${a.id}":`,
+                  g
                 );
               }
             })
           );
-        } catch (c) {
+        } catch (d) {
           console.error(
-            `Failed to sync entities to new tenant "${r.id}":`,
-            c
+            `Failed to sync entities to new tenant "${a.id}":`,
+            d
           );
         }
     }
   };
 }
-const H = (t) => ({
+const U = (t) => ({
   list: async (e, n) => (await t.resourceServers.list(e, n)).resource_servers,
   listPaginated: (e, n) => t.resourceServers.list(e, n),
   get: (e, n) => t.resourceServers.get(e, n),
   create: (e, n) => t.resourceServers.create(e, n),
-  update: (e, n, s) => t.resourceServers.update(e, n, s),
+  update: (e, n, r) => t.resourceServers.update(e, n, r),
   remove: (e, n) => t.resourceServers.remove(e, n),
   listKey: "resource_servers",
   getId: (e) => e.id,
@@ -293,12 +293,12 @@ const H = (t) => ({
     token_lifetime: e.token_lifetime,
     token_lifetime_for_web: e.token_lifetime_for_web
   })
-}), G = (t) => ({
+}), B = (t) => ({
   list: async (e, n) => (await t.roles.list(e, n)).roles,
   listPaginated: (e, n) => t.roles.list(e, n),
   get: (e, n) => t.roles.get(e, n),
   create: (e, n) => t.roles.create(e, n),
-  update: (e, n, s) => t.roles.update(e, n, s),
+  update: (e, n, r) => t.roles.update(e, n, r),
   remove: (e, n) => t.roles.remove(e, n),
   listKey: "roles",
   getId: (e) => e.id,
@@ -308,124 +308,128 @@ const H = (t) => ({
     description: e.description
   })
 });
-function ce(t) {
-  const { sync: e = {}, filters: n = {} } = t, s = e.resourceServers ?? !0, a = e.roles ?? !0, i = s ? E(
+function K(t) {
+  var e;
+  return ((e = t.metadata) == null ? void 0 : e.sync) !== !1;
+}
+function fe(t) {
+  const { sync: e = {}, filters: n = {} } = t, r = e.resourceServers ?? !0, s = e.roles ?? !0, c = (g) => K(g) ? n.resourceServers ? n.resourceServers(g) : !0 : !1, o = (g) => K(g) ? n.roles ? n.roles(g) : !0 : !1, a = r ? G(
     t,
-    H,
-    n.resourceServers
-  ) : void 0, o = a ? E(
+    U,
+    c
+  ) : void 0, d = s ? G(
     t,
-    G,
-    n.roles
-  ) : void 0, r = s ? N(
+    B,
+    o
+  ) : void 0, u = r ? L(
     t,
-    H,
-    n.resourceServers
-  ) : void 0, c = a ? N(
+    U,
+    c
+  ) : void 0, i = s ? L(
     t,
-    G,
-    n.roles
-  ) : void 0, m = a ? {
-    async afterCreate(d, u) {
-      var p;
-      if (u.id !== t.controlPlaneTenantId) {
-        await ((p = c == null ? void 0 : c.afterCreate) == null ? void 0 : p.call(c, d, u));
+    B,
+    o
+  ) : void 0, f = s ? {
+    async afterCreate(g, p) {
+      var h;
+      if (p.id !== t.controlPlaneTenantId) {
+        await ((h = i == null ? void 0 : i.afterCreate) == null ? void 0 : h.call(i, g, p));
         try {
-          const g = await t.getControlPlaneAdapters(), y = await t.getAdapters(u.id), w = await I(
-            (v) => g.roles.list(
+          const w = await t.getControlPlaneAdapters(), y = await t.getAdapters(p.id), T = await z(
+            (A) => w.roles.list(
               t.controlPlaneTenantId,
-              v
+              A
             ),
             "roles",
             { cursorField: "id", pageSize: 100 }
-          ), A = /* @__PURE__ */ new Map();
-          for (const v of w.filter(
-            (h) => {
-              var T;
-              return ((T = n.roles) == null ? void 0 : T.call(n, h)) ?? !0;
+          ), b = /* @__PURE__ */ new Map();
+          for (const A of T.filter(
+            (_) => {
+              var v;
+              return ((v = n.roles) == null ? void 0 : v.call(n, _)) ?? !0;
             }
           )) {
-            const h = await l(
+            const _ = await l(
               y,
-              u.id,
-              v.name
+              p.id,
+              A.name
             );
-            h && A.set(v.name, h.id);
+            _ && b.set(A.name, _.id);
           }
-          for (const v of w.filter(
-            (h) => {
-              var T;
-              return ((T = n.roles) == null ? void 0 : T.call(n, h)) ?? !0;
+          for (const A of T.filter(
+            (_) => {
+              var v;
+              return ((v = n.roles) == null ? void 0 : v.call(n, _)) ?? !0;
             }
           )) {
-            const h = A.get(v.name);
-            if (h)
+            const _ = b.get(A.name);
+            if (_)
               try {
-                const T = await g.rolePermissions.list(
+                const v = await w.rolePermissions.list(
                   t.controlPlaneTenantId,
-                  v.id,
+                  A.id,
                   {}
                 );
-                T.length > 0 && await y.rolePermissions.assign(
-                  u.id,
-                  h,
-                  T.map((_) => ({
-                    role_id: h,
-                    resource_server_identifier: _.resource_server_identifier,
-                    permission_name: _.permission_name
+                v.length > 0 && await y.rolePermissions.assign(
+                  p.id,
+                  _,
+                  v.map((P) => ({
+                    role_id: _,
+                    resource_server_identifier: P.resource_server_identifier,
+                    permission_name: P.permission_name
                   }))
                 );
-              } catch (T) {
+              } catch (v) {
                 console.error(
-                  `Failed to sync permissions for role "${v.name}" to tenant "${u.id}":`,
-                  T
+                  `Failed to sync permissions for role "${A.name}" to tenant "${p.id}":`,
+                  v
                 );
               }
           }
-        } catch (g) {
+        } catch (w) {
           console.error(
-            `Failed to sync role permissions to tenant "${u.id}":`,
-            g
+            `Failed to sync role permissions to tenant "${p.id}":`,
+            w
           );
         }
       }
     }
   } : void 0;
-  async function l(d, u, p) {
-    return (await d.roles.list(u, {
-      q: `name:${p}`,
+  async function l(g, p, h) {
+    return (await g.roles.list(p, {
+      q: `name:${h}`,
       per_page: 1
     })).roles[0] ?? null;
   }
   return {
     entityHooks: {
-      resourceServers: i,
-      roles: o
+      resourceServers: a,
+      roles: d
     },
     tenantHooks: {
-      async afterCreate(d, u) {
-        const p = [
-          r == null ? void 0 : r.afterCreate,
-          (m == null ? void 0 : m.afterCreate) ?? (c == null ? void 0 : c.afterCreate)
-        ], g = [];
-        for (const y of p)
+      async afterCreate(g, p) {
+        const h = [
+          u == null ? void 0 : u.afterCreate,
+          (f == null ? void 0 : f.afterCreate) ?? (i == null ? void 0 : i.afterCreate)
+        ], w = [];
+        for (const y of h)
           if (y)
             try {
-              await y(d, u);
-            } catch (w) {
-              g.push(w instanceof Error ? w : new Error(String(w)));
+              await y(g, p);
+            } catch (T) {
+              w.push(T instanceof Error ? T : new Error(String(T)));
             }
-        if (g.length === 1) throw g[0];
-        if (g.length > 1)
+        if (w.length === 1) throw w[0];
+        if (w.length > 1)
           throw new AggregateError(
-            g,
-            g.map((y) => y.message).join("; ")
+            w,
+            w.map((y) => y.message).join("; ")
           );
       }
     }
   };
 }
-var b = class extends Error {
+var C = class extends Error {
   /**
    * Creates an instance of `HTTPException`.
    * @param status - HTTP status code for the exception. Defaults to 500.
@@ -433,8 +437,8 @@ var b = class extends Error {
    */
   constructor(e = 500, n) {
     super(n == null ? void 0 : n.message, { cause: n == null ? void 0 : n.cause });
-    $(this, "res");
-    $(this, "status");
+    R(this, "res");
+    R(this, "status");
     this.res = n == null ? void 0 : n.res, this.status = e;
   }
   /**
@@ -451,15 +455,15 @@ var b = class extends Error {
     });
   }
 };
-function M(t, e) {
-  const n = new x();
+function D(t, e) {
+  const n = new re();
   return n.openapi(
-    O({
+    M({
       tags: ["tenants"],
       method: "get",
       path: "/",
       request: {
-        query: X
+        query: ee
       },
       security: [
         {
@@ -470,11 +474,11 @@ function M(t, e) {
         200: {
           content: {
             "application/json": {
-              schema: C.object({
-                tenants: C.array(k),
-                start: C.number().optional(),
-                limit: C.number().optional(),
-                length: C.number().optional()
+              schema: S.object({
+                tenants: S.array(H),
+                start: S.number().optional(),
+                limit: S.number().optional(),
+                length: S.number().optional()
               })
             }
           },
@@ -482,75 +486,76 @@ function M(t, e) {
         }
       }
     }),
-    async (s) => {
-      var u, p, g, y;
-      const a = s.req.valid("query"), { page: i, per_page: o, include_totals: r, q: c } = a, m = s.var.user, l = (m == null ? void 0 : m.permissions) || [];
-      if (l.includes("auth:read") || l.includes("admin:organizations")) {
-        const w = await s.env.data.tenants.list({
-          page: i,
+    async (r) => {
+      var g, p, h, w, y, T;
+      const s = r.req.valid("query"), { page: c, per_page: o, include_totals: a, q: d } = s, u = r.var.user, i = (u == null ? void 0 : u.permissions) || [];
+      if (i.includes("auth:read") || i.includes("admin:organizations")) {
+        const b = await r.env.data.tenants.list({
+          page: c,
           per_page: o,
-          include_totals: r,
-          q: c
+          include_totals: a,
+          q: d
         });
-        return r ? s.json({
-          tenants: w.tenants,
-          start: ((u = w.totals) == null ? void 0 : u.start) ?? 0,
-          limit: ((p = w.totals) == null ? void 0 : p.limit) ?? o,
-          length: w.tenants.length
-        }) : s.json({ tenants: w.tenants });
+        return a ? r.json({
+          tenants: b.tenants,
+          start: ((g = b.totals) == null ? void 0 : g.start) ?? 0,
+          limit: ((p = b.totals) == null ? void 0 : p.limit) ?? o,
+          length: b.tenants.length
+        }) : r.json({ tenants: b.tenants });
       }
-      if (t.accessControl && (m != null && m.sub)) {
-        const w = t.accessControl.controlPlaneTenantId, v = (await I(
-          (P) => s.env.data.userOrganizations.listUserOrganizations(
-            w,
-            m.sub,
-            P
+      const l = ((h = t.accessControl) == null ? void 0 : h.controlPlaneTenantId) ?? ((w = r.env.data.multiTenancyConfig) == null ? void 0 : w.controlPlaneTenantId);
+      if (l && (u != null && u.sub)) {
+        const A = (await z(
+          ($) => r.env.data.userOrganizations.listUserOrganizations(
+            l,
+            u.sub,
+            $
           ),
           "organizations"
-        )).map((P) => P.name);
-        if (v.length === 0)
-          return r ? s.json({
+        )).map(($) => $.name);
+        if (A.length === 0)
+          return a ? r.json({
             tenants: [],
             start: 0,
             limit: o ?? 50,
             length: 0
-          }) : s.json({ tenants: [] });
-        const h = v.length, T = i ?? 0, _ = o ?? 50, S = T * _, D = v.slice(S, S + _);
-        if (D.length === 0)
-          return r ? s.json({
+          }) : r.json({ tenants: [] });
+        const _ = A.length, v = c ?? 0, P = o ?? 50, I = v * P, k = A.slice(I, I + P);
+        if (k.length === 0)
+          return a ? r.json({
             tenants: [],
-            start: S,
-            limit: _,
-            length: h
-          }) : s.json({ tenants: [] });
-        const F = D.map((P) => `id:${P}`).join(" OR "), K = c ? `(${F}) AND (${c})` : F, j = await s.env.data.tenants.list({
-          q: K,
-          per_page: _,
+            start: I,
+            limit: P,
+            length: _
+          }) : r.json({ tenants: [] });
+        const E = k.map(($) => `id:${$}`).join(" OR "), J = d ? `(${E}) AND (${d})` : E, N = await r.env.data.tenants.list({
+          q: J,
+          per_page: P,
           include_totals: !1
           // We calculate totals from accessibleTenantIds
         });
-        return r ? s.json({
-          tenants: j.tenants,
-          start: S,
-          limit: _,
-          length: h
-        }) : s.json({ tenants: j.tenants });
+        return a ? r.json({
+          tenants: N.tenants,
+          start: I,
+          limit: P,
+          length: _
+        }) : r.json({ tenants: N.tenants });
       }
-      const d = await s.env.data.tenants.list({
-        page: i,
+      const m = await r.env.data.tenants.list({
+        page: c,
         per_page: o,
-        include_totals: r,
-        q: c
+        include_totals: a,
+        q: d
       });
-      return r ? s.json({
-        tenants: d.tenants,
-        start: ((g = d.totals) == null ? void 0 : g.start) ?? 0,
-        limit: ((y = d.totals) == null ? void 0 : y.limit) ?? o,
-        length: d.tenants.length
-      }) : s.json({ tenants: d.tenants });
+      return a ? r.json({
+        tenants: m.tenants,
+        start: ((y = m.totals) == null ? void 0 : y.start) ?? 0,
+        limit: ((T = m.totals) == null ? void 0 : T.limit) ?? o,
+        length: m.tenants.length
+      }) : r.json({ tenants: m.tenants });
     }
   ), n.openapi(
-    O({
+    M({
       tags: ["tenants"],
       method: "post",
       path: "/",
@@ -558,7 +563,7 @@ function M(t, e) {
         body: {
           content: {
             "application/json": {
-              schema: Y
+              schema: te
             }
           }
         }
@@ -572,7 +577,7 @@ function M(t, e) {
         201: {
           content: {
             "application/json": {
-              schema: k
+              schema: H
             }
           },
           description: "Tenant created"
@@ -585,30 +590,30 @@ function M(t, e) {
         }
       }
     }),
-    async (s) => {
-      var c, m;
-      const a = s.var.user;
-      if (!(a != null && a.sub))
-        throw new b(401, {
+    async (r) => {
+      var d, u;
+      const s = r.var.user;
+      if (!(s != null && s.sub))
+        throw new C(401, {
           message: "Authentication required to create tenants"
         });
-      let i = s.req.valid("json");
+      let c = r.req.valid("json");
       const o = {
-        adapters: s.env.data,
-        ctx: s
+        adapters: r.env.data,
+        ctx: r
       };
-      (c = e.tenants) != null && c.beforeCreate && (i = await e.tenants.beforeCreate(o, i));
-      const r = await s.env.data.tenants.create(i);
-      return (m = e.tenants) != null && m.afterCreate && await e.tenants.afterCreate(o, r), s.json(r, 201);
+      (d = e.tenants) != null && d.beforeCreate && (c = await e.tenants.beforeCreate(o, c));
+      const a = await r.env.data.tenants.create(c);
+      return (u = e.tenants) != null && u.afterCreate && await e.tenants.afterCreate(o, a), r.json(a, 201);
     }
   ), n.openapi(
-    O({
+    M({
       tags: ["tenants"],
       method: "delete",
       path: "/{id}",
       request: {
-        params: C.object({
-          id: C.string()
+        params: S.object({
+          id: S.string()
         })
       },
       security: [
@@ -628,44 +633,44 @@ function M(t, e) {
         }
       }
     }),
-    async (s) => {
-      var r, c;
-      const { id: a } = s.req.valid("param");
-      if (t.accessControl) {
-        const m = s.var.user, l = t.accessControl.controlPlaneTenantId;
-        if (!(m != null && m.sub))
-          throw new b(401, {
+    async (r) => {
+      var d, u, i, f;
+      const { id: s } = r.req.valid("param"), c = ((d = t.accessControl) == null ? void 0 : d.controlPlaneTenantId) ?? ((u = r.env.data.multiTenancyConfig) == null ? void 0 : u.controlPlaneTenantId);
+      if (c) {
+        const l = r.var.user;
+        if (!(l != null && l.sub))
+          throw new C(401, {
             message: "Authentication required"
           });
-        if (a === l)
-          throw new b(403, {
+        if (s === c)
+          throw new C(403, {
             message: "Cannot delete the control plane"
           });
-        if (!(await I(
-          (u) => s.env.data.userOrganizations.listUserOrganizations(
-            l,
-            m.sub,
-            u
+        if (!(await z(
+          (p) => r.env.data.userOrganizations.listUserOrganizations(
+            c,
+            l.sub,
+            p
           ),
           "organizations"
-        )).some((u) => u.name === a))
-          throw new b(403, {
+        )).some((p) => p.name === s))
+          throw new C(403, {
             message: "Access denied to this tenant"
           });
       }
-      if (!await s.env.data.tenants.get(a))
-        throw new b(404, {
+      if (!await r.env.data.tenants.get(s))
+        throw new C(404, {
           message: "Tenant not found"
         });
-      const o = {
-        adapters: s.env.data,
-        ctx: s
+      const a = {
+        adapters: r.env.data,
+        ctx: r
       };
-      return (r = e.tenants) != null && r.beforeDelete && await e.tenants.beforeDelete(o, a), await s.env.data.tenants.remove(a), (c = e.tenants) != null && c.afterDelete && await e.tenants.afterDelete(o, a), s.body(null, 204);
+      return (i = e.tenants) != null && i.beforeDelete && await e.tenants.beforeDelete(a, s), await r.env.data.tenants.remove(s), (f = e.tenants) != null && f.afterDelete && await e.tenants.afterDelete(a, s), r.body(null, 204);
     }
   ), n;
 }
-function le(t) {
+function me(t) {
   const e = [
     {
       pattern: /\/api\/v2\/resource-servers\/([^/]+)$/,
@@ -674,27 +679,27 @@ function le(t) {
     { pattern: /\/api\/v2\/roles\/([^/]+)$/, type: "role" },
     { pattern: /\/api\/v2\/connections\/([^/]+)$/, type: "connection" }
   ];
-  for (const { pattern: n, type: s } of e) {
-    const a = t.match(n);
-    if (a && a[1])
-      return { type: s, id: a[1] };
+  for (const { pattern: n, type: r } of e) {
+    const s = t.match(n);
+    if (s && s[1])
+      return { type: r, id: s[1] };
   }
   return null;
 }
-async function de(t, e, n) {
+async function ge(t, e, n) {
   try {
     switch (n.type) {
       case "resource_server": {
-        const s = await t.resourceServers.get(e, n.id);
-        return (s == null ? void 0 : s.is_system) === !0;
+        const r = await t.resourceServers.get(e, n.id);
+        return (r == null ? void 0 : r.is_system) === !0;
       }
       case "role": {
-        const s = await t.roles.get(e, n.id);
-        return (s == null ? void 0 : s.is_system) === !0;
+        const r = await t.roles.get(e, n.id);
+        return (r == null ? void 0 : r.is_system) === !0;
       }
       case "connection": {
-        const s = await t.connections.get(e, n.id);
-        return (s == null ? void 0 : s.is_system) === !0;
+        const r = await t.connections.get(e, n.id);
+        return (r == null ? void 0 : r.is_system) === !0;
       }
       default:
         return !1;
@@ -703,128 +708,133 @@ async function de(t, e, n) {
     return !1;
   }
 }
-function ue(t) {
+function pe(t) {
   return {
     resource_server: "resource server",
     role: "role",
     connection: "connection"
   }[t];
 }
-function me() {
+function we() {
   return async (t, e) => {
     if (!["PATCH", "PUT", "DELETE"].includes(t.req.method))
       return e();
-    const n = le(t.req.path);
+    const n = me(t.req.path);
     if (!n)
       return e();
-    const s = t.var.tenant_id || t.req.header("x-tenant-id") || t.req.header("tenant-id");
-    if (!s)
+    const r = t.var.tenant_id || t.req.header("x-tenant-id") || t.req.header("tenant-id");
+    if (!r)
       return e();
-    if (await de(t.env.data, s, n))
-      throw new b(403, {
-        message: `This ${ue(n.type)} is a system resource and cannot be modified. Make changes in the control plane instead.`
+    if (await ge(t.env.data, r, n))
+      throw new C(403, {
+        message: `This ${pe(n.type)} is a system resource and cannot be modified. Make changes in the control plane instead.`
       });
     return e();
   };
 }
-function U(t, e) {
-  const { controlPlaneTenantId: n, controlPlaneClientId: s } = e;
+function Q(t, e) {
+  const { controlPlaneTenantId: n, controlPlaneClientId: r } = e;
   return {
     ...t,
+    // Store config for use by tenants route access control
+    multiTenancyConfig: {
+      controlPlaneTenantId: n,
+      controlPlaneClientId: r
+    },
     legacyClients: {
       ...t.legacyClients,
-      get: async (a) => {
+      get: async (s) => {
         var f;
-        const i = await t.legacyClients.get(a);
-        if (!i)
+        const c = await t.legacyClients.get(s);
+        if (!c)
           return null;
-        const o = s ? await t.legacyClients.get(s) : void 0, r = await t.connections.list(
-          i.tenant.id
-        ), c = n ? await t.connections.list(n) : { connections: [] }, m = r.connections.map((d) => {
-          var g;
-          const u = (g = c.connections) == null ? void 0 : g.find(
-            (y) => y.strategy === d.strategy
+        const o = r ? await t.legacyClients.get(r) : void 0, a = await t.connections.list(
+          c.tenant.id
+        ), d = n ? await t.connections.list(n) : { connections: [] }, u = a.connections.map((l) => {
+          var p;
+          const m = (p = d.connections) == null ? void 0 : p.find(
+            (h) => h.strategy === l.strategy
           );
-          if (!(u != null && u.options))
-            return d;
-          const p = z.parse({
-            ...u || {},
-            ...d
+          if (!(m != null && m.options))
+            return l;
+          const g = F.parse({
+            ...m || {},
+            ...l
           });
-          return p.options = R.parse({
-            ...u.options || {},
-            ...d.options
-          }), p;
-        }).filter((d) => d), l = {
+          return g.options = O.parse({
+            ...m.options || {},
+            ...l.options
+          }), g;
+        }).filter((l) => l), i = {
           ...(o == null ? void 0 : o.tenant) || {},
-          ...i.tenant
+          ...c.tenant
         };
-        return !i.tenant.audience && ((f = o == null ? void 0 : o.tenant) != null && f.audience) && (l.audience = o.tenant.audience), {
-          ...i,
+        return !c.tenant.audience && ((f = o == null ? void 0 : o.tenant) != null && f.audience) && (i.audience = o.tenant.audience), {
+          ...c,
           web_origins: [
             ...(o == null ? void 0 : o.web_origins) || [],
-            ...i.web_origins || []
+            ...c.web_origins || []
           ],
           allowed_logout_urls: [
             ...(o == null ? void 0 : o.allowed_logout_urls) || [],
-            ...i.allowed_logout_urls || []
+            ...c.allowed_logout_urls || []
           ],
           callbacks: [
             ...(o == null ? void 0 : o.callbacks) || [],
-            ...i.callbacks || []
+            ...c.callbacks || []
           ],
-          connections: m,
-          tenant: l
+          connections: u,
+          tenant: i
         };
       }
     },
     connections: {
       ...t.connections,
-      get: async (a, i) => {
-        var l;
+      get: async (s, c) => {
+        var i;
         const o = await t.connections.get(
-          a,
-          i
+          s,
+          c
         );
-        if (!o || !n || a === n)
+        if (!o || !n || s === n)
           return o;
-        const c = (l = (await t.connections.list(n)).connections) == null ? void 0 : l.find(
+        const d = (i = (await t.connections.list(n)).connections) == null ? void 0 : i.find(
           (f) => f.strategy === o.strategy
         );
-        if (!(c != null && c.options))
+        if (!(d != null && d.options))
           return o;
-        const m = z.parse({
-          ...c,
+        const u = F.parse({
+          ...d,
           ...o
         });
-        return m.options = R.parse({
-          ...c.options || {},
+        return u.options = O.parse({
+          ...d.options || {},
           ...o.options
-        }), m;
+        }), u;
       },
-      list: async (a, i) => {
-        const o = await t.connections.list(a, i);
-        if (!n || a === n)
+      list: async (s, c) => {
+        const o = await t.connections.list(s, c);
+        if (!n || s === n)
           return o;
-        const r = await t.connections.list(n), c = o.connections.map((m) => {
-          var d;
-          const l = (d = r.connections) == null ? void 0 : d.find(
-            (u) => u.strategy === m.strategy
+        const a = await t.connections.list(n), d = o.connections.map((u) => {
+          var l;
+          const i = (l = a.connections) == null ? void 0 : l.find(
+            (m) => m.strategy === u.strategy
           );
-          if (!(l != null && l.options))
-            return m;
-          const f = z.parse({
-            ...l,
-            ...m
+          if (!(i != null && i.options))
+            return u;
+          const f = F.parse({
+            ...i,
+            ...u
           });
-          return f.options = R.parse({
-            ...l.options || {},
-            ...m.options
+          return f.options = O.parse({
+            ...i.options || {},
+            ...u.options
           }), f;
         });
         return {
           ...o,
-          connections: c
+          connections: d
         };
       }
     }
@@ -837,171 +847,174 @@ function U(t, e) {
     // They remain part of ...baseAdapters and can be properly wrapped by caching.
   };
 }
-function fe(t, e) {
-  return U(t, e);
+function q(t, e) {
+  return Q(t, e);
 }
-const Ae = U, Ce = fe;
-function ge(t) {
+const Pe = Q, Se = q;
+function ye(t) {
   return async (e, n) => {
-    const s = e.var.user;
-    return (s == null ? void 0 : s.tenant_id) === t && s.org_name && e.set("tenant_id", s.org_name), n();
+    const r = e.var.user;
+    return (r == null ? void 0 : r.tenant_id) === t && r.org_name && e.set("tenant_id", r.org_name), n();
   };
 }
-function pe(t) {
+function he(t) {
   return async (e, n) => {
     if (!t.accessControl)
       return n();
-    const { controlPlaneTenantId: s } = t.accessControl, a = e.var.org_name, i = e.var.organization_id, o = a || i;
-    let r = e.var.tenant_id;
-    const c = e.var.user, l = (c != null && c.aud ? Array.isArray(c.aud) ? c.aud : [c.aud] : []).includes(L);
-    if (!r && o && l && (e.set("tenant_id", o), r = o), !r)
-      throw new b(400, {
+    const { controlPlaneTenantId: r } = t.accessControl, s = e.var.org_name, c = e.var.organization_id, o = s || c;
+    let a = e.var.tenant_id;
+    const d = e.var.user, i = (d != null && d.aud ? Array.isArray(d.aud) ? d.aud : [d.aud] : []).includes(W);
+    if (!a && o && i && (e.set("tenant_id", o), a = o), !a)
+      throw new C(400, {
         message: "Tenant ID not found in request"
       });
-    if (!te(
-      i,
+    if (!ae(
+      c,
+      a,
       r,
-      s,
-      a
+      s
     ))
-      throw new b(403, {
-        message: `Access denied to tenant ${r}`
+      throw new C(403, {
+        message: `Access denied to tenant ${a}`
       });
     return n();
   };
 }
-function we(t) {
+function ve(t) {
   return async (e, n) => {
     if (!t.subdomainRouting)
       return n();
     const {
-      baseDomain: s,
-      reservedSubdomains: a = [],
-      resolveSubdomain: i
+      baseDomain: r,
+      reservedSubdomains: s = [],
+      resolveSubdomain: c
     } = t.subdomainRouting, o = e.req.header("host") || "";
-    let r = null;
-    if (o.endsWith(s)) {
-      const m = o.slice(0, -(s.length + 1));
-      m && !m.includes(".") && (r = m);
+    let a = null;
+    if (o.endsWith(r)) {
+      const u = o.slice(0, -(r.length + 1));
+      u && !u.includes(".") && (a = u);
     }
-    if (r && a.includes(r) && (r = null), !r)
+    if (a && s.includes(a) && (a = null), !a)
       return t.accessControl && e.set("tenant_id", t.accessControl.controlPlaneTenantId), n();
-    let c = null;
-    if (i)
-      c = await i(r);
+    let d = null;
+    if (c)
+      d = await c(a);
     else if (t.subdomainRouting.useOrganizations !== !1 && t.accessControl)
       try {
-        const m = await e.env.data.organizations.get(
+        const u = await e.env.data.organizations.get(
           t.accessControl.controlPlaneTenantId,
-          r
+          a
         );
-        m && (c = m.id);
+        u && (d = u.id);
       } catch {
       }
-    if (!c)
-      throw new b(404, {
-        message: `Tenant not found for subdomain: ${r}`
+    if (!d)
+      throw new C(404, {
+        message: `Tenant not found for subdomain: ${a}`
       });
-    return e.set("tenant_id", c), n();
+    return e.set("tenant_id", d), n();
   };
 }
-function ye(t) {
+function Te(t) {
   return async (e, n) => {
     if (!t.databaseIsolation)
       return n();
-    const s = e.var.tenant_id;
-    if (!s)
-      throw new b(400, {
+    const r = e.var.tenant_id;
+    if (!r)
+      throw new C(400, {
         message: "Tenant ID not found in request"
       });
     try {
-      const a = await t.databaseIsolation.getAdapters(s);
-      e.env.data = a;
-    } catch (a) {
+      const s = await t.databaseIsolation.getAdapters(r);
+      e.env.data = s;
+    } catch (s) {
       throw console.error(
-        `Failed to resolve database for tenant ${s}:`,
-        a
-      ), new b(500, {
+        `Failed to resolve database for tenant ${r}:`,
+        s
+      ), new C(500, {
         message: "Failed to resolve tenant database"
       });
     }
     return n();
   };
 }
-function B(t) {
-  const e = we(t), n = pe(t), s = ye(t);
-  return async (a, i) => (await e(a, async () => {
-  }), await n(a, async () => {
-  }), await s(a, async () => {
-  }), i());
+function V(t) {
+  const e = ve(t), n = he(t), r = Te(t);
+  return async (s, c) => (await e(s, async () => {
+  }), await n(s, async () => {
+  }), await r(s, async () => {
+  }), c());
 }
-function Pe(t) {
+function $e(t) {
   const {
     dataAdapter: e,
-    controlPlaneTenantId: n = "control_plane",
-    sync: s = { resourceServers: !0, roles: !0 },
-    defaultPermissions: a = ["tenant:admin"],
-    requireOrganizationMatch: i = !1,
+    controlPlane: n,
+    sync: r = { resourceServers: !0, roles: !0 },
+    defaultPermissions: s = ["tenant:admin"],
+    requireOrganizationMatch: c = !1,
     managementApiExtensions: o = [],
-    entityHooks: r,
-    getChildTenantIds: c,
-    getAdapters: m,
-    ...l
-  } = t, f = s !== !1, d = f ? {
-    resourceServers: s.resourceServers ?? !0,
-    roles: s.roles ?? !0
-  } : { resourceServers: !1, roles: !1 }, g = {
-    controlPlaneTenantId: n,
-    getChildTenantIds: c ?? (async () => (await I(
-      (_) => e.tenants.list(_),
+    entityHooks: a,
+    getChildTenantIds: d,
+    getAdapters: u,
+    ...i
+  } = t, f = (n == null ? void 0 : n.tenantId) ?? "control_plane", l = n == null ? void 0 : n.clientId, m = n ? q(e, {
+    controlPlaneTenantId: f,
+    controlPlaneClientId: l
+  }) : e, g = r !== !1, p = g ? {
+    resourceServers: r.resourceServers ?? !0,
+    roles: r.roles ?? !0
+  } : { resourceServers: !1, roles: !1 }, y = {
+    controlPlaneTenantId: f,
+    getChildTenantIds: d ?? (async () => (await z(
+      (I) => m.tenants.list(I),
       "tenants",
       { cursorField: "id", pageSize: 100 }
-    )).filter((_) => _.id !== n).map((_) => _.id)),
-    getAdapters: m ?? (async () => e),
-    getControlPlaneAdapters: async () => e,
-    sync: d
-  }, { entityHooks: y, tenantHooks: w } = ce(g), A = {
+    )).filter((I) => I.id !== f).map((I) => I.id)),
+    getAdapters: u ?? (async () => m),
+    getControlPlaneAdapters: async () => m,
+    sync: p
+  }, { entityHooks: T, tenantHooks: b } = fe(y), A = {
     resourceServers: [
-      y.resourceServers,
-      ...(r == null ? void 0 : r.resourceServers) ?? []
+      T.resourceServers,
+      ...(a == null ? void 0 : a.resourceServers) ?? []
     ],
-    roles: [y.roles, ...(r == null ? void 0 : r.roles) ?? []],
-    connections: (r == null ? void 0 : r.connections) ?? [],
-    tenants: (r == null ? void 0 : r.tenants) ?? [],
-    rolePermissions: (r == null ? void 0 : r.rolePermissions) ?? []
-  }, v = M(
+    roles: [T.roles, ...(a == null ? void 0 : a.roles) ?? []],
+    connections: (a == null ? void 0 : a.connections) ?? [],
+    tenants: (a == null ? void 0 : a.tenants) ?? [],
+    rolePermissions: (a == null ? void 0 : a.rolePermissions) ?? []
+  }, _ = D(
     {
       accessControl: {
-        controlPlaneTenantId: n,
-        requireOrganizationMatch: i,
-        defaultPermissions: a
+        controlPlaneTenantId: f,
+        requireOrganizationMatch: c,
+        defaultPermissions: s
       }
     },
-    { tenants: w }
-  ), { app: h } = Z({
-    dataAdapter: e,
-    ...l,
+    { tenants: b }
+  ), { app: v } = ne({
+    dataAdapter: m,
+    ...i,
     entityHooks: A,
     managementApiExtensions: [
       ...o,
-      { path: "/tenants", router: v }
+      { path: "/tenants", router: _ }
     ]
   });
-  return h.use("/api/v2/*", ge(n)), f && h.use("/api/v2/*", me()), { app: h, controlPlaneTenantId: n };
+  return v.use("/api/v2/*", ye(f)), g && v.use("/api/v2/*", we()), { app: v, controlPlaneTenantId: f };
 }
-function Ie(t) {
-  const e = q(t);
+function ze(t) {
+  const e = j(t);
   return {
     name: "multi-tenancy",
     // Apply multi-tenancy middleware for subdomain routing, database resolution, etc.
-    middleware: B(t),
+    middleware: V(t),
     // Provide lifecycle hooks
     hooks: e,
     // Mount tenant management routes
     routes: [
       {
         path: "/management",
-        handler: M(t, e)
+        handler: D(t, e)
       }
     ],
     // Called when plugin is registered
@@ -1014,46 +1027,61 @@ function Ie(t) {
     }
   };
 }
-function q(t) {
-  const e = t.accessControl ? ee(t.accessControl) : {}, n = t.databaseIsolation ? ne(t.databaseIsolation) : {}, s = re(t);
+function j(t) {
+  const e = t.accessControl ? se(t.accessControl) : {}, n = t.databaseIsolation ? oe(t.databaseIsolation) : {}, r = ce(t);
   return {
     ...e,
     ...n,
-    tenants: s
+    tenants: r
   };
 }
-function he(t) {
-  const e = new V(), n = q(t);
-  return e.route("/tenants", M(t, n)), e;
+function _e(t) {
+  const e = new Z(), n = j(t);
+  return e.route("/tenants", D(t, n)), e;
 }
-function Se(t) {
+function Re(t) {
   return {
-    hooks: q(t),
-    middleware: B(t),
-    app: he(t),
-    config: t
+    hooks: j(t),
+    middleware: V(t),
+    app: _e(t),
+    config: t,
+    /**
+     * Wraps data adapters with runtime fallback from the control plane.
+     * Uses the controlPlaneTenantId from the multi-tenancy config.
+     *
+     * @param adapters - Base data adapters to wrap
+     * @param additionalConfig - Additional config (controlPlaneClientId, etc.)
+     * @returns Wrapped adapters with runtime fallback
+     */
+    wrapAdapters: (e, n) => {
+      var r;
+      return q(e, {
+        controlPlaneTenantId: (r = t.accessControl) == null ? void 0 : r.controlPlaneTenantId,
+        controlPlaneClientId: n == null ? void 0 : n.controlPlaneClientId
+      });
+    }
   };
 }
 export {
-  ee as createAccessControlHooks,
-  pe as createAccessControlMiddleware,
-  ge as createControlPlaneTenantMiddleware,
-  ne as createDatabaseHooks,
-  ye as createDatabaseMiddleware,
-  he as createMultiTenancy,
-  q as createMultiTenancyHooks,
-  B as createMultiTenancyMiddleware,
-  Ie as createMultiTenancyPlugin,
-  me as createProtectSyncedMiddleware,
-  re as createProvisioningHooks,
-  U as createRuntimeFallbackAdapter,
-  Ae as createSettingsInheritanceAdapter,
-  we as createSubdomainMiddleware,
-  ce as createSyncHooks,
-  M as createTenantsOpenAPIRouter,
-  Pe as initMultiTenant,
-  Se as setupMultiTenancy,
-  te as validateTenantAccess,
-  fe as withRuntimeFallback,
-  Ce as withSettingsInheritance
+  se as createAccessControlHooks,
+  he as createAccessControlMiddleware,
+  ye as createControlPlaneTenantMiddleware,
+  oe as createDatabaseHooks,
+  Te as createDatabaseMiddleware,
+  _e as createMultiTenancy,
+  j as createMultiTenancyHooks,
+  V as createMultiTenancyMiddleware,
+  ze as createMultiTenancyPlugin,
+  we as createProtectSyncedMiddleware,
+  ce as createProvisioningHooks,
+  Q as createRuntimeFallbackAdapter,
+  Pe as createSettingsInheritanceAdapter,
+  ve as createSubdomainMiddleware,
+  fe as createSyncHooks,
+  D as createTenantsOpenAPIRouter,
+  $e as initMultiTenant,
+  Re as setupMultiTenancy,
+  ae as validateTenantAccess,
+  q as withRuntimeFallback,
+  Se as withSettingsInheritance
 };