@de-otio/trellis 0.7.0 → 0.9.0

package/dist/lib/tenant-scope.js

@@ -0,0 +1,270 @@
+/**
+ * Tenant scoping — WS2 of the multi-tenancy plan
+ * (saas-foundation doc/14-multi-tenancy/06-implementation-plan.md).
+ *
+ * A Prisma client extension that scopes queries on tenant-owned models to the
+ * **active tenant** carried in foundation's AsyncLocalStorage
+ * (`getCurrentTenantId`, set by the auth seam — WS1). It is the Proxy-safe
+ * first line of isolation; PostgreSQL RLS (WS3) is the fail-closed backstop for
+ * paths this extension cannot cover (raw SQL, `findUnique`-by-id, nested writes).
+ *
+ * Modes:
+ *  - `off`     — not attached (zero behavior change). The default.
+ *  - `shadow`  — observe only: logs where a scoped query lacks a tenant filter
+ *                or runs with no tenant context. Does NOT modify any query.
+ *  - `enforce` — injects `tenantId = <active>` into where-mergeable reads/writes
+ *                and sets `tenantId` on creates; throws on a scoped op with no
+ *                tenant context (unless inside `runUnscoped`).
+ *
+ * `enforce` covers the where-mergeable operations (findMany/findFirst/count/
+ * aggregate/groupBy/updateMany/deleteMany and create/createMany/upsert).
+ * `findUnique`/`update`/`delete` by a unique selector cannot have a non-unique
+ * `tenantId` merged into their `where`; those rely on the RLS backstop (WS3).
+ * `shadow` logs all divergences regardless, so the gap is quantified first.
+ *
+ * SECURITY — `enforce` is a PARTIAL defense and must NOT be the sole isolation
+ * mechanism (security review, doc/14). It does not cover: unique-selector reads/
+ * writes (findUnique/update/delete by id), raw SQL ($queryRaw/$executeRaw), or
+ * `by-relation` models without their own `tenantId`. Those are closed only by
+ * the PostgreSQL RLS backstop (WS3). Do not enable `enforce` in production
+ * before RLS is deployed; also note unauthenticated/public paths (federation)
+ * that query scoped models must use `runUnscoped` or they fail closed (throw)
+ * under `enforce` (review finding 2).
+ */
+import { AsyncLocalStorage } from "node:async_hooks";
+import { Prisma } from "@prisma/client";
+import { getCurrentTenantId } from "@de-otio/saas-foundation/tenant";
+import { getLogger } from "./logger.js";
+/** Read `TENANT_SCOPE_MODE` (deploy flag); anything unrecognized → "off". */
+export function resolveTenantScopeMode(raw = process.env.TENANT_SCOPE_MODE) {
+    return raw === "shadow" || raw === "enforce" ? raw : "off";
+}
+/**
+ * Models that carry their own `tenantId` and are safe to auto-scope by the
+ * active tenant (doc/14 §04 group B). Keep in sync with the schema.
+ */
+export const TENANT_SCOPED_MODELS = new Set([
+    "Post",
+    "PostComment",
+    "Entity",
+    "Notification",
+    "Group",
+    "GroupMember",
+    "EntityOwnership",
+    "ConnectionCode",
+    "ConnectionCodeRedemption",
+    "TaxonomyDimension",
+    "TaxonomyCategory",
+    "TaxonomyTaxon",
+    // Carries its own tenantId. Spatial reads/writes go through $queryRaw and so
+    // bypass this middleware (scoped manually + RLS backstop), but classifying it
+    // here keeps the model honest and auto-scopes any future Prisma-Client op.
+    "EntityLocation",
+    // Graph edge tables (graph-db revisit 2026-06: the social graph runs in
+    // Postgres). Both carry tenantId; PostgresGraphService additionally scopes
+    // its queries manually (and its recursive-CTE $queryRaw paths, which bypass
+    // this middleware, always filter tenant_id explicitly).
+    "Relationship",
+    "EntityRelationship",
+]);
+/**
+ * Every other model, with the reason it is NOT auto-scoped. Exhaustive on
+ * purpose: the coverage test asserts every Prisma model is either here or in
+ * TENANT_SCOPED_MODELS, so a newly added model fails CI until classified
+ * (doc/14 §05 WS4 — "no silent holes").
+ */
+export const UNSCOPED_MODELS = new Map([
+    // Tenant-admin: bespoke authz (requireActiveTenant/requireOwnTenant) plus the
+    // cross-tenant membership loader (auth-middleware queries TenantMember across
+    // tenants) — auto-filtering by active tenant would break it.
+    ["Tenant", "tenant-admin"],
+    ["TenantMember", "tenant-admin"],
+    ["TenantDomain", "tenant-admin"],
+    ["TenantIdentityProvider", "tenant-admin"],
+    ["TenantRoleMapping", "tenant-admin"],
+    ["TenantInvitation", "tenant-admin"],
+    // Global by design.
+    ["Activity", "global"],
+    ["DomainReputation", "global"],
+    ["EmailSuppression", "global"],
+    ["FeatureToggle", "global"],
+    ["IngestState", "global"],
+    ["RoleMetadata", "global"],
+    ["MediaFile", "global-content-addressed"],
+    // User-scoped (boundary is userId, not tenant).
+    ["User", "user"],
+    ["CircleConfig", "user"],
+    ["CircleReadState", "user"],
+    ["CustomAudience", "user"],
+    ["CustomAudienceMember", "user"],
+    ["UploadSession", "user"],
+    ["MfaEnrollment", "user"],
+    ["UserEncryptionKey", "user"],
+    ["Consent", "user"],
+    ["NotificationPreference", "user"],
+    // Generalized report model (Surveillance-hardening Phase 0, E3; folds in the
+    // former LinkReport in P4). No own tenantId column; boundary is
+    // reporterUserId. ACCOUNT reports key on an opaque resourceId, not a tenant.
+    ["Report", "user"],
+    ["ParentalLink", "user"],
+    ["DeletionAuditLog", "user"],
+    ["Invitation", "user"],
+    ["DirectMessage", "user-pair"],
+    // Scoped-by-relation: no own tenantId yet (doc/14 §04 C / WS0). Rely on the
+    // parent's scope + the RLS backstop until tenantId is denormalized onto them.
+    ["PostMedia", "by-relation"],
+    ["PostSentiment", "by-relation"],
+    ["PostSubject", "by-relation"],
+    ["PostCommentMedia", "by-relation"],
+    ["CommentSentiment", "by-relation"],
+    ["EntityTaxonomyTag", "by-relation"],
+    ["PostTaxonomyTag", "by-relation"],
+    ["ProductTaxonomyTag", "by-relation-orphan"],
+    ["LinkCheck", "by-relation"],
+    ["PostGeoIndex", "by-relation"],
+    // Audit: nullable tenantId (system rows) — handled by an RLS policy (WS3),
+    // not the auto-scope filter.
+    ["SecurityEvent", "audit-nullable"],
+    ["AuditEvent", "audit-nullable"],
+    // Append-only behavioral event log (Surveillance-hardening Phase 0, E1).
+    // Nullable tenantId (single-tenant deployments write NULL); P2 stamps it
+    // explicitly from the graph context. Not auto-scoped — same posture as the
+    // other audit-nullable event tables (RLS backstop, retention-bound).
+    ["InteractionEvent", "audit-nullable"],
+]);
+// Operations whose `where` can safely have `{ tenantId }` AND-merged in.
+const WHERE_MERGEABLE = new Set([
+    "findFirst",
+    "findFirstOrThrow",
+    "findMany",
+    "count",
+    "aggregate",
+    "groupBy",
+    "updateMany",
+    "deleteMany",
+]);
+// `create`/`createMany`/`upsert` are stamped with the active tenant, and
+// unique-selector ops (`findUnique`/`update`/`delete`) fall through to the RLS
+// backstop (WS3) — both handled inline in `planTenantScope`.
+// Escape hatch for legitimate cross-tenant work (super-admin tooling, the
+// ActivityPub federation graph, operator analytics, the membership loader).
+const unscopedStorage = new AsyncLocalStorage();
+/**
+ * Run `fn` with tenant scoping disabled (cross-tenant/operator paths: super-admin
+ * tooling, the federation graph, operator analytics, the membership loader).
+ * Requires a `reason` and logs every entry, so disabling isolation is always
+ * auditable (security review finding 5).
+ */
+export function runUnscoped(reason, fn) {
+    getLogger().warn("[tenant-scope] unscoped (cross-tenant) execution", { reason });
+    return unscopedStorage.run(true, fn);
+}
+function isUnscoped() {
+    return unscopedStorage.getStore() === true;
+}
+function andWhere(where, tenantId) {
+    if (where && typeof where === "object") {
+        return { AND: [where, { tenantId }] };
+    }
+    return { tenantId };
+}
+/**
+ * Pure decision for one Prisma operation — no I/O, no Prisma types. The
+ * extension supplies the ambient `tenantId` and `unscoped` flag. Unit-tested
+ * exhaustively; the extension is the thin imperative shell around it.
+ */
+export function planTenantScope(input) {
+    const { mode, model, operation, args, tenantId, unscoped } = input;
+    if (mode === "off" || unscoped || !TENANT_SCOPED_MODELS.has(model)) {
+        return { action: "passthrough" };
+    }
+    if (!tenantId) {
+        return mode === "enforce"
+            ? {
+                action: "throw",
+                message: `[tenant-scope] ${model}.${operation} ran with no tenant context`,
+            }
+            : { action: "observe-no-context" };
+    }
+    if (mode === "shadow") {
+        const w = args?.where ?? undefined;
+        const wouldScope = !(w && Object.prototype.hasOwnProperty.call(w, "tenantId"));
+        return { action: "observe", wouldScope };
+    }
+    // enforce
+    const a = args ?? {};
+    if (WHERE_MERGEABLE.has(operation)) {
+        return { action: "rewrite", args: { ...a, where: andWhere(a.where, tenantId) } };
+    }
+    if (operation === "create") {
+        return { action: "rewrite", args: { ...a, data: { ...a.data, tenantId } } };
+    }
+    if (operation === "createMany") {
+        const data = a.data;
+        const stamped = Array.isArray(data)
+            ? data.map((d) => ({ ...d, tenantId }))
+            : { ...data, tenantId };
+        return { action: "rewrite", args: { ...a, data: stamped } };
+    }
+    if (operation === "upsert") {
+        return {
+            action: "rewrite",
+            args: {
+                ...a,
+                where: andWhere(a.where, tenantId),
+                create: { ...a.create, tenantId },
+                update: a.update,
+            },
+        };
+    }
+    // UNIQUE_OPS and anything else: cannot merge a non-unique tenantId — rely on
+    // the RLS backstop (WS3).
+    return { action: "passthrough" };
+}
+/**
+ * Build the tenant-scoping Prisma extension for the given mode. Attach with
+ * `prisma.$extends(tenantScopeExtension(mode))`. The imperative shell around
+ * `planTenantScope`: gathers ambient state, logs (shadow), throws/rewrites
+ * (enforce). `args` is strongly typed per-model by Prisma; a generic extension
+ * rewrites uniformly, so the rewritten shape passes through `query` with a cast
+ * (the documented pattern for `$allModels.$allOperations`).
+ */
+export function tenantScopeExtension(mode) {
+    return Prisma.defineExtension({
+        name: "tenant-scope",
+        query: {
+            $allModels: {
+                async $allOperations({ model, operation, args, query }) {
+                    const plan = planTenantScope({
+                        mode,
+                        model,
+                        operation,
+                        args: args,
+                        tenantId: getCurrentTenantId(),
+                        unscoped: isUnscoped(),
+                    });
+                    switch (plan.action) {
+                        case "passthrough":
+                            return query(args);
+                        case "throw":
+                            throw new Error(plan.message);
+                        case "observe-no-context":
+                            getLogger().warn("[tenant-scope:shadow] scoped op with no tenant context", { model, operation });
+                            return query(args);
+                        case "observe":
+                            if (plan.wouldScope) {
+                                getLogger().info("[tenant-scope:shadow] would scope query", {
+                                    model,
+                                    operation,
+                                });
+                            }
+                            return query(args);
+                        case "rewrite":
+                            return query(plan.args);
+                    }
+                },
+            },
+        },
+    });
+}
+//# sourceMappingURL=tenant-scope.js.map

package/dist/lib/tenant-scope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-scope.js","sourceRoot":"","sources":["../../src/lib/tenant-scope.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AACxC,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAIxC,6EAA6E;AAC7E,MAAM,UAAU,sBAAsB,CACpC,MAA0B,OAAO,CAAC,GAAG,CAAC,iBAAiB;IAEvD,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;AAC7D,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAwB,IAAI,GAAG,CAAC;IAC/D,MAAM;IACN,aAAa;IACb,QAAQ;IACR,cAAc;IACd,OAAO;IACP,aAAa;IACb,iBAAiB;IACjB,gBAAgB;IAChB,0BAA0B;IAC1B,mBAAmB;IACnB,kBAAkB;IAClB,eAAe;IACf,6EAA6E;IAC7E,8EAA8E;IAC9E,2EAA2E;IAC3E,gBAAgB;IAChB,wEAAwE;IACxE,2EAA2E;IAC3E,4EAA4E;IAC5E,wDAAwD;IACxD,cAAc;IACd,oBAAoB;CACrB,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,eAAe,GAAgC,IAAI,GAAG,CAAC;IAClE,8EAA8E;IAC9E,8EAA8E;IAC9E,6DAA6D;IAC7D,CAAC,QAAQ,EAAE,cAAc,CAAC;IAC1B,CAAC,cAAc,EAAE,cAAc,CAAC;IAChC,CAAC,cAAc,EAAE,cAAc,CAAC;IAChC,CAAC,wBAAwB,EAAE,cAAc,CAAC;IAC1C,CAAC,mBAAmB,EAAE,cAAc,CAAC;IACrC,CAAC,kBAAkB,EAAE,cAAc,CAAC;IACpC,oBAAoB;IACpB,CAAC,UAAU,EAAE,QAAQ,CAAC;IACtB,CAAC,kBAAkB,EAAE,QAAQ,CAAC;IAC9B,CAAC,kBAAkB,EAAE,QAAQ,CAAC;IAC9B,CAAC,eAAe,EAAE,QAAQ,CAAC;IAC3B,CAAC,aAAa,EAAE,QAAQ,CAAC;IACzB,CAAC,cAAc,EAAE,QAAQ,CAAC;IAC1B,CAAC,WAAW,EAAE,0BAA0B,CAAC;IACzC,gDAAgD;IAChD,CAAC,MAAM,EAAE,MAAM,CAAC;IAChB,CAAC,cAAc,EAAE,MAAM,CAAC;IACxB,CAAC,iBAAiB,EAAE,MAAM,CAAC;IAC3B,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAC1B,CAAC,sBAAsB,EAAE,MAAM,CAAC;IAChC,CAAC,eAAe,EAAE,MAAM,CAAC;IACzB,CAAC,eAAe,EAAE,MAAM,CAAC;IACzB,CAAC,mBAAmB,EAAE,MAAM,CAAC;IAC7B,CAAC,SAAS,EAAE,MAAM,CAAC;IACnB,CAAC,wBAAwB,EAAE,MAAM,CAAC;IAClC,6EAA6E;IAC7E,gEAAgE;IAChE,6EAA6E;IAC7E,CAAC,QAAQ,EAAE,MAAM,CAAC;IAClB,CAAC,cAAc,EAAE,MAAM,CAAC;IACxB,CAAC,kBAAkB,EAAE,MAAM,CAAC;IAC5B,CAAC,YAAY,EAAE,MAAM,CAAC;IACtB,CAAC,eAAe,EAAE,WAAW,CAAC;IAC9B,4EAA4E;IAC5E,8EAA8E;IAC9E,CAAC,WAAW,EAAE,aAAa,CAAC;IAC5B,CAAC,eAAe,EAAE,aAAa,CAAC;IAChC,CAAC,aAAa,EAAE,aAAa,CAAC;IAC9B,CAAC,kBAAkB,EAAE,aAAa,CAAC;IACnC,CAAC,kBAAkB,EAAE,aAAa,CAAC;IACnC,CAAC,mBAAmB,EAAE,aAAa,CAAC;IACpC,CAAC,iBAAiB,EAAE,aAAa,CAAC;IAClC,CAAC,oBAAoB,EAAE,oBAAoB,CAAC;IAC5C,CAAC,WAAW,EAAE,aAAa,CAAC;IAC5B,CAAC,cAAc,EAAE,aAAa,CAAC;IAC/B,2EAA2E;IAC3E,6BAA6B;IAC7B,CAAC,eAAe,EAAE,gBAAgB,CAAC;IACnC,CAAC,YAAY,EAAE,gBAAgB,CAAC;IAChC,yEAAyE;IACzE,yEAAyE;IACzE,2EAA2E;IAC3E,qEAAqE;IACrE,CAAC,kBAAkB,EAAE,gBAAgB,CAAC;CACvC,CAAC,CAAC;AAEH,yEAAyE;AACzE,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC9B,WAAW;IACX,kBAAkB;IAClB,UAAU;IACV,OAAO;IACP,WAAW;IACX,SAAS;IACT,YAAY;IACZ,YAAY;CACb,CAAC,CAAC;AACH,yEAAyE;AACzE,+EAA+E;AAC/E,6DAA6D;AAE7D,0EAA0E;AAC1E,4EAA4E;AAC5E,MAAM,eAAe,GAAG,IAAI,iBAAiB,EAAQ,CAAC;AAEtD;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAI,MAAc,EAAE,EAAW;IACxD,SAAS,EAAE,CAAC,IAAI,CAAC,kDAAkD,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IACjF,OAAO,eAAe,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;AACvC,CAAC;AACD,SAAS,UAAU;IACjB,OAAO,eAAe,CAAC,QAAQ,EAAE,KAAK,IAAI,CAAC;AAC7C,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc,EAAE,QAAgB;IAChD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO,EAAE,GAAG,EAAE,CAAC,KAAgC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACnE,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,CAAC;AACtB,CAAC;AAUD;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,KAO/B;IACC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;IAEnE,IAAI,IAAI,KAAK,KAAK,IAAI,QAAQ,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACnE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IACnC,CAAC;IAED,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,IAAI,KAAK,SAAS;YACvB,CAAC,CAAC;gBACE,MAAM,EAAE,OAAO;gBACf,OAAO,EAAE,kBAAkB,KAAK,IAAI,SAAS,6BAA6B;aAC3E;YACH,CAAC,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IACvC,CAAC;IAED,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,MAAM,CAAC,GAAI,IAAI,EAAE,KAA6C,IAAI,SAAS,CAAC;QAC5E,MAAM,UAAU,GAAG,CAAC,CAClB,CAAC,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,EAAE,UAAU,CAAC,CACzD,CAAC;QACF,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;IAC3C,CAAC;IAED,UAAU;IACV,MAAM,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC;IACrB,IAAI,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QACnC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC;IACnF,CAAC;IACD,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;QAC3B,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,EAAE,GAAI,CAAC,CAAC,IAAe,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAC1F,CAAC;IACD,IAAI,SAAS,KAAK,YAAY,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC;QACpB,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YACjC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAI,CAAY,EAAE,QAAQ,EAAE,CAAC,CAAC;YACnD,CAAC,CAAC,EAAE,GAAI,IAAe,EAAE,QAAQ,EAAE,CAAC;QACtC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC;IAC9D,CAAC;IACD,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;QAC3B,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,IAAI,EAAE;gBACJ,GAAG,CAAC;gBACJ,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,KAAK,EAAE,QAAQ,CAAC;gBAClC,MAAM,EAAE,EAAE,GAAI,CAAC,CAAC,MAAiB,EAAE,QAAQ,EAAE;gBAC7C,MAAM,EAAE,CAAC,CAAC,MAAM;aACjB;SACF,CAAC;IACJ,CAAC;IACD,6EAA6E;IAC7E,0BAA0B;IAC1B,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;AACnC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAqB;IACxD,OAAO,MAAM,CAAC,eAAe,CAAC;QAC5B,IAAI,EAAE,cAAc;QACpB,KAAK,EAAE;YACL,UAAU,EAAE;gBACV,KAAK,CAAC,cAAc,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE;oBACpD,MAAM,IAAI,GAAG,eAAe,CAAC;wBAC3B,IAAI;wBACJ,KAAK;wBACL,SAAS;wBACT,IAAI,EAAE,IAA2C;wBACjD,QAAQ,EAAE,kBAAkB,EAAE;wBAC9B,QAAQ,EAAE,UAAU,EAAE;qBACvB,CAAC,CAAC;oBAEH,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;wBACpB,KAAK,aAAa;4BAChB,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC;wBACrB,KAAK,OAAO;4BACV,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;wBAChC,KAAK,oBAAoB;4BACvB,SAAS,EAAE,CAAC,IAAI,CACd,wDAAwD,EACxD,EAAE,KAAK,EAAE,SAAS,EAAE,CACrB,CAAC;4BACF,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC;wBACrB,KAAK,SAAS;4BACZ,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;gCACpB,SAAS,EAAE,CAAC,IAAI,CAAC,yCAAyC,EAAE;oCAC1D,KAAK;oCACL,SAAS;iCACV,CAAC,CAAC;4BACL,CAAC;4BACD,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC;wBACrB,KAAK,SAAS;4BACZ,OAAO,KAAK,CAAC,IAAI,CAAC,IAAmB,CAAC,CAAC;oBAC3C,CAAC;gBACH,CAAC;aACF;SACF;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/lib/terminology.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"terminology.d.ts","sourceRoot":"","sources":["../../src/lib/terminology.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;CACf;AAUD;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,WAAW,CAY/D;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,WAAW,CAEnE"}
+{"version":3,"file":"terminology.d.ts","sourceRoot":"","sources":["../../src/lib/terminology.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;CACf;AAUD;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,WAAW,CAc/D;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,WAAW,CAEnE"}

package/dist/lib/terminology.js

@@ -1,14 +1,10 @@
-"use strict";
 /**
  * Terminology Abstraction
  *
  * Provides configurable terminology backed by the extension registry.
  * Each extension provides its own terminology (entity name, plural).
  */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.getTerminology = getTerminology;
-exports.getTerminologySync = getTerminologySync;
-const extensions_1 = require("../extensions");
+import { getExtension } from "../extensions.js";
 const DEFAULT_TERMINOLOGY = {
     entity: "entity",
     entityPlural: "entities",
@@ -22,9 +18,9 @@ const DEFAULT_TERMINOLOGY = {
  * If entityType is provided and a matching extension is registered,
  * its terminology overrides the defaults.
  */
-function getTerminology(entityType) {
+export function getTerminology(entityType) {
     if (entityType) {
-        const ext = (0, extensions_1.getExtension)(entityType);
+        const ext = getExtension(entityType);
         if (ext) {
             return {
                 ...DEFAULT_TERMINOLOGY,
@@ -33,12 +29,14 @@ function getTerminology(entityType) {
             };
         }
     }
-    return DEFAULT_TERMINOLOGY;
+    // Spread so callers never receive (and cannot mutate) the shared module
+    // constant — the override path above already returns a fresh object.
+    return { ...DEFAULT_TERMINOLOGY };
 }
 /**
  * Get terminology synchronously (for use in non-async contexts)
  */
-function getTerminologySync(entityType) {
+export function getTerminologySync(entityType) {
     return getTerminology(entityType);
 }
 //# sourceMappingURL=terminology.js.map

package/dist/lib/terminology.js.map

@@ -1 +1 @@
-{"version":3,"file":"terminology.js","sourceRoot":"","sources":["../../src/lib/terminology.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AA0BH,wCAYC;AAKD,gDAEC;AA3CD,8CAA6C;AAU7C,MAAM,mBAAmB,GAAgB;IACvC,MAAM,EAAE,QAAQ;IAChB,YAAY,EAAE,UAAU;IACxB,IAAI,EAAE,MAAM;IACZ,OAAO,EAAE,SAAS;IAClB,KAAK,EAAE,OAAO;CACf,CAAC;AAEF;;;;;GAKG;AACH,SAAgB,cAAc,CAAC,UAAmB;IAChD,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,GAAG,GAAG,IAAA,yBAAY,EAAC,UAAU,CAAC,CAAC;QACrC,IAAI,GAAG,EAAE,CAAC;YACR,OAAO;gBACL,GAAG,mBAAmB;gBACtB,MAAM,EAAE,GAAG,CAAC,WAAW,CAAC,MAAM;gBAC9B,YAAY,EAAE,GAAG,CAAC,WAAW,CAAC,YAAY;aAC3C,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,mBAAmB,CAAC;AAC7B,CAAC;AAED;;GAEG;AACH,SAAgB,kBAAkB,CAAC,UAAmB;IACpD,OAAO,cAAc,CAAC,UAAU,CAAC,CAAC;AACpC,CAAC"}
+{"version":3,"file":"terminology.js","sourceRoot":"","sources":["../../src/lib/terminology.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAUhD,MAAM,mBAAmB,GAAgB;IACvC,MAAM,EAAE,QAAQ;IAChB,YAAY,EAAE,UAAU;IACxB,IAAI,EAAE,MAAM;IACZ,OAAO,EAAE,SAAS;IAClB,KAAK,EAAE,OAAO;CACf,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,UAAmB;IAChD,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,GAAG,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;QACrC,IAAI,GAAG,EAAE,CAAC;YACR,OAAO;gBACL,GAAG,mBAAmB;gBACtB,MAAM,EAAE,GAAG,CAAC,WAAW,CAAC,MAAM;gBAC9B,YAAY,EAAE,GAAG,CAAC,WAAW,CAAC,YAAY;aAC3C,CAAC;QACJ,CAAC;IACH,CAAC;IACD,wEAAwE;IACxE,qEAAqE;IACrE,OAAO,EAAE,GAAG,mBAAmB,EAAE,CAAC;AACpC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,UAAmB;IACpD,OAAO,cAAc,CAAC,UAAU,CAAC,CAAC;AACpC,CAAC"}

package/dist/lib/theme.js

@@ -1,4 +1,3 @@
-"use strict";
 /**
  * Theme Configuration
  *
@@ -6,9 +5,6 @@
  * For MVP, always returns default Trellis theme.
  * Future: Will support tenant-specific themes.
  */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.getTheme = getTheme;
-exports.getThemeSync = getThemeSync;
 const DEFAULT_THEME = {
     primaryColor: "#3B82F6", // Trellis blue
     secondaryColor: "#10B981", // Trellis green
@@ -25,14 +21,14 @@ const DEFAULT_THEME = {
  * @param tenantId - Optional tenant ID (not used in MVP)
  * @returns Theme object
  */
-function getTheme(tenantId) {
+export function getTheme(tenantId) {
     // For MVP, always return default
     return DEFAULT_THEME;
 }
 /**
  * Get theme synchronously
  */
-function getThemeSync(tenantId) {
+export function getThemeSync(tenantId) {
     return DEFAULT_THEME;
 }
 //# sourceMappingURL=theme.js.map

package/dist/lib/theme.js.map

@@ -1 +1 @@
-{"version":3,"file":"theme.js","sourceRoot":"","sources":["../../src/lib/theme.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;AA2BH,4BAGC;AAKD,oCAEC;AA3BD,MAAM,aAAa,GAAU;IAC3B,YAAY,EAAE,SAAS,EAAE,eAAe;IACxC,cAAc,EAAE,SAAS,EAAE,gBAAgB;IAC3C,OAAO,EAAE,WAAW;IACpB,UAAU,EAAE,cAAc;IAC1B,IAAI,EAAE,SAAS;CAChB,CAAC;AAEF;;;;;;;;GAQG;AACH,SAAgB,QAAQ,CAAC,QAAiB;IACxC,iCAAiC;IACjC,OAAO,aAAa,CAAC;AACvB,CAAC;AAED;;GAEG;AACH,SAAgB,YAAY,CAAC,QAAiB;IAC5C,OAAO,aAAa,CAAC;AACvB,CAAC"}
+{"version":3,"file":"theme.js","sourceRoot":"","sources":["../../src/lib/theme.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAUH,MAAM,aAAa,GAAU;IAC3B,YAAY,EAAE,SAAS,EAAE,eAAe;IACxC,cAAc,EAAE,SAAS,EAAE,gBAAgB;IAC3C,OAAO,EAAE,WAAW;IACpB,UAAU,EAAE,cAAc;IAC1B,IAAI,EAAE,SAAS;CAChB,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,UAAU,QAAQ,CAAC,QAAiB;IACxC,iCAAiC;IACjC,OAAO,aAAa,CAAC;AACvB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,QAAiB;IAC5C,OAAO,aAAa,CAAC;AACvB,CAAC"}

package/dist/lib/threat-intel-service.d.ts

@@ -1,4 +1,4 @@
-import type { KVNamespace } from "../types/cloudflare-compat";
+import type { KVNamespace } from "../types/cloudflare-compat.js";
 /**
  * Threat Intelligence Service
  *
@@ -7,7 +7,7 @@ import type { KVNamespace } from "../types/cloudflare-compat";
  *
  * PREPARATORY: Designed for integration with domain reputation system.
  */
-import { type LoggerEnv } from "./logger";
+import { type LoggerEnv } from "./logger.js";
 /**
  * Threat intelligence result
  */

package/dist/lib/threat-intel-service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"threat-intel-service.d.ts","sourceRoot":"","sources":["../../src/lib/threat-intel-service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAA6B,MAAM,4BAA4B,CAAC;AACzF;;;;;;;GAOG;AAGH,OAAO,EAAU,KAAK,SAAS,EAAE,MAAM,UAAU,CAAC;AAElD;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,IAAI,CAAC;CACjB;AAeD;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,4BAA4B,CAAC,EAAE,MAAM,CAAC;IACtC,qBAAqB,CAAC,EAAE,WAAW,CAAC;CACrC;AAYD,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM,CACuC;gBAElD,GAAG,CAAC,EAAE,SAAS;IAI3B;;;;;;OAMG;IACG,iBAAiB,CACrB,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,cAAc,GAClB,OAAO,CAAC,iBAAiB,CAAC;IAgG7B;;;;;;OAMG;IACG,eAAe,CACnB,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,cAAc,GAClB,OAAO,CAAC;QAAE,IAAI,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,QAAQ,EAAE,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;IA+BxE;;;;;;OAMG;IACG,WAAW,CACf,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,iBAAiB,EACzB,GAAG,EAAE,cAAc,GAClB,OAAO,CAAC,IAAI,CAAC;IAyBhB;;;;;OAKG;IACH,OAAO,CAAC,WAAW;CAWpB"}
+{"version":3,"file":"threat-intel-service.d.ts","sourceRoot":"","sources":["../../src/lib/threat-intel-service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAA6B,MAAM,+BAA+B,CAAC;AAC5F;;;;;;;GAOG;AAGH,OAAO,EAAqB,KAAK,SAAS,EAAE,MAAM,aAAa,CAAC;AAEhE;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,IAAI,CAAC;CACjB;AAeD;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,4BAA4B,CAAC,EAAE,MAAM,CAAC;IACtC,qBAAqB,CAAC,EAAE,WAAW,CAAC;CACrC;AAYD,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM,CACuC;gBAElD,GAAG,CAAC,EAAE,SAAS;IAI3B;;;;;;OAMG;IACG,iBAAiB,CACrB,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,cAAc,GAClB,OAAO,CAAC,iBAAiB,CAAC;IAgG7B;;;;;;OAMG;IACG,eAAe,CACnB,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,cAAc,GAClB,OAAO,CAAC;QAAE,IAAI,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,QAAQ,EAAE,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;IA+BxE;;;;;;OAMG;IACG,WAAW,CACf,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,iBAAiB,EACzB,GAAG,EAAE,cAAc,GAClB,OAAO,CAAC,IAAI,CAAC;IAyBhB;;;;;OAKG;IACH,OAAO,CAAC,WAAW;CAWpB"}

package/dist/lib/threat-intel-service.js

@@ -1,6 +1,3 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ThreatIntelService = void 0;
 /**
  * Threat Intelligence Service
  *
@@ -9,7 +6,7 @@ exports.ThreatIntelService = void 0;
  *
  * PREPARATORY: Designed for integration with domain reputation system.
  */
-const logger_1 = require("./logger");
+import { getLogger } from "./logger.js";
 /**
  * Cache key prefix for threat intel results
  */
@@ -18,11 +15,11 @@ const CACHE_KEY_PREFIX = "threat-intel:";
  * Cache TTL in seconds (24 hours)
  */
 const CACHE_TTL = 24 * 60 * 60;
-class ThreatIntelService {
+export class ThreatIntelService {
     logger;
     apiUrl = "https://safebrowsing.googleapis.com/v4/threatMatches:find";
     constructor(env) {
-        this.logger = logger_1.Logger.getInstance(env);
+        this.logger = getLogger();
     }
     /**
      * Check URL against Google Safe Browsing API
@@ -189,5 +186,4 @@ class ThreatIntelService {
         }
     }
 }
-exports.ThreatIntelService = ThreatIntelService;
 //# sourceMappingURL=threat-intel-service.js.map

package/dist/lib/threat-intel-service.js.map

@@ -1 +1 @@
-{"version":3,"file":"threat-intel-service.js","sourceRoot":"","sources":["../../src/lib/threat-intel-service.ts"],"names":[],"mappings":";;;AACA;;;;;;;GAOG;AAGH,qCAAkD;AAiClD;;GAEG;AACH,MAAM,gBAAgB,GAAG,eAAe,CAAC;AAEzC;;GAEG;AACH,MAAM,SAAS,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AAE/B,MAAa,kBAAkB;IACrB,MAAM,CAAS;IACN,MAAM,GACrB,2DAA2D,CAAC;IAE9D,YAAY,GAAe;QACzB,IAAI,CAAC,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACxC,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,iBAAiB,CACrB,GAAW,EACX,GAAmB;QAEnB,IAAI,CAAC,GAAG,CAAC,4BAA4B,EAAE,CAAC;YACtC,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,6DAA6D,CAC9D,CAAC;YACF,OAAO;gBACL,IAAI,EAAE,IAAI,EAAE,iDAAiD;gBAC7D,QAAQ,EAAE,KAAK;aAChB,CAAC;QACJ,CAAC;QAED,oBAAoB;QACpB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACpD,IAAI,MAAM,EAAE,CAAC;YACX,OAAO;gBACL,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,QAAQ,EAAE,IAAI;gBACd,QAAQ,EAAE,MAAM,CAAC,QAAQ;aAC1B,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,gCAAgC;YAChC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAC1B,GAAG,IAAI,CAAC,MAAM,QAAQ,GAAG,CAAC,4BAA4B,EAAE,EACxD;gBACE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;iBACnC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,MAAM,EAAE;wBACN,QAAQ,EAAE,SAAS;wBACnB,aAAa,EAAE,OAAO;qBACvB;oBACD,UAAU,EAAE;wBACV,WAAW,EAAE;4BACX,SAAS;4BACT,oBAAoB;4BACpB,mBAAmB;4BACnB,iCAAiC;yBAClC;wBACD,aAAa,EAAE,CAAC,cAAc,CAAC;wBAC/B,gBAAgB,EAAE,CAAC,KAAK,CAAC;wBACzB,aAAa,EAAE;4BACb;gCACE,GAAG,EAAE,GAAG;6BACT;yBACF;qBACF;iBACF,CAAC;aACH,CACF,CAAC;YAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACxC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE;oBAC5C,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;oBAC/B,KAAK,EAAE,SAAS;iBACjB,CAAC,CAAC;gBAEH,uCAAuC;gBACvC,OAAO;oBACL,IAAI,EAAE,IAAI;oBACV,QAAQ,EAAE,KAAK;iBAChB,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,GAAyB,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACzD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;YAC3D,MAAM,OAAO,GAAG,UAAU;gBACxB,CAAC,CAAC,IAAI,CAAC,OAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC;gBACxC,CAAC,CAAC,SAAS,CAAC;YAEd,MAAM,MAAM,GAAsB;gBAChC,IAAI,EAAE,CAAC,UAAU;gBACjB,OAAO;gBACP,QAAQ,EAAE,KAAK;aAChB,CAAC;YAEF,mBAAmB;YACnB,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;YAEzC,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,EAAE,KAAK,CAAC,CAAC;YAC9D,iDAAiD;YACjD,OAAO;gBACL,IAAI,EAAE,IAAI;gBACV,QAAQ,EAAE,KAAK;aAChB,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,eAAe,CACnB,GAAW,EACX,GAAmB;QAEnB,IAAI,CAAC,GAAG,CAAC,qBAAqB,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACvC,MAAM,MAAM,GAAG,CAAC,MAAM,GAAG,CAAC,qBAAqB,CAAC,GAAG,CACjD,QAAQ,EACR,MAAM,CACP,CAAQ,CAAC;YAEV,IACE,MAAM;gBACN,OAAO,MAAM,KAAK,QAAQ;gBAC1B,MAAM,IAAI,MAAM;gBAChB,UAAU,IAAI,MAAM,EACpB,CAAC;gBACD,OAAO;oBACL,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,OAAO,EAAE,MAAM,CAAC,OAAO;oBACvB,QAAQ,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;iBACpC,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wCAAwC,EAAE,KAAK,CAAC,CAAC;QACpE,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,WAAW,CACf,GAAW,EACX,MAAyB,EACzB,GAAmB;QAEnB,IAAI,CAAC,GAAG,CAAC,qBAAqB,EAAE,CAAC;YAC/B,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACvC,MAAM,UAAU,GAAG;gBACjB,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACnC,CAAC;YAEF,MAAM,GAAG,CAAC,qBAAqB,CAAC,GAAG,CACjC,QAAQ,EACR,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,EAC1B;gBACE,aAAa,EAAE,SAAS;aACzB,CACF,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,sCAAsC,EAAE,KAAK,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACK,WAAW,CAAC,GAAW;QAC7B,kDAAkD;QAClD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;YAC5B,MAAM,UAAU,GAAG,GAAG,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;YAC1E,OAAO,GAAG,gBAAgB,GAAG,UAAU,EAAE,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC;YACP,wCAAwC;YACxC,OAAO,GAAG,gBAAgB,GAAG,GAAG,EAAE,CAAC;QACrC,CAAC;IACH,CAAC;CACF;AAjND,gDAiNC"}
+{"version":3,"file":"threat-intel-service.js","sourceRoot":"","sources":["../../src/lib/threat-intel-service.ts"],"names":[],"mappings":"AACA;;;;;;;GAOG;AAGH,OAAO,EAAE,SAAS,EAA0B,MAAM,aAAa,CAAC;AAiChE;;GAEG;AACH,MAAM,gBAAgB,GAAG,eAAe,CAAC;AAEzC;;GAEG;AACH,MAAM,SAAS,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AAE/B,MAAM,OAAO,kBAAkB;IACrB,MAAM,CAAS;IACN,MAAM,GACrB,2DAA2D,CAAC;IAE9D,YAAY,GAAe;QACzB,IAAI,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;IAC5B,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,iBAAiB,CACrB,GAAW,EACX,GAAmB;QAEnB,IAAI,CAAC,GAAG,CAAC,4BAA4B,EAAE,CAAC;YACtC,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,6DAA6D,CAC9D,CAAC;YACF,OAAO;gBACL,IAAI,EAAE,IAAI,EAAE,iDAAiD;gBAC7D,QAAQ,EAAE,KAAK;aAChB,CAAC;QACJ,CAAC;QAED,oBAAoB;QACpB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACpD,IAAI,MAAM,EAAE,CAAC;YACX,OAAO;gBACL,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,QAAQ,EAAE,IAAI;gBACd,QAAQ,EAAE,MAAM,CAAC,QAAQ;aAC1B,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,gCAAgC;YAChC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAC1B,GAAG,IAAI,CAAC,MAAM,QAAQ,GAAG,CAAC,4BAA4B,EAAE,EACxD;gBACE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;iBACnC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,MAAM,EAAE;wBACN,QAAQ,EAAE,SAAS;wBACnB,aAAa,EAAE,OAAO;qBACvB;oBACD,UAAU,EAAE;wBACV,WAAW,EAAE;4BACX,SAAS;4BACT,oBAAoB;4BACpB,mBAAmB;4BACnB,iCAAiC;yBAClC;wBACD,aAAa,EAAE,CAAC,cAAc,CAAC;wBAC/B,gBAAgB,EAAE,CAAC,KAAK,CAAC;wBACzB,aAAa,EAAE;4BACb;gCACE,GAAG,EAAE,GAAG;6BACT;yBACF;qBACF;iBACF,CAAC;aACH,CACF,CAAC;YAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACxC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE;oBAC5C,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;oBAC/B,KAAK,EAAE,SAAS;iBACjB,CAAC,CAAC;gBAEH,uCAAuC;gBACvC,OAAO;oBACL,IAAI,EAAE,IAAI;oBACV,QAAQ,EAAE,KAAK;iBAChB,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,GAAyB,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACzD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;YAC3D,MAAM,OAAO,GAAG,UAAU;gBACxB,CAAC,CAAC,IAAI,CAAC,OAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC;gBACxC,CAAC,CAAC,SAAS,CAAC;YAEd,MAAM,MAAM,GAAsB;gBAChC,IAAI,EAAE,CAAC,UAAU;gBACjB,OAAO;gBACP,QAAQ,EAAE,KAAK;aAChB,CAAC;YAEF,mBAAmB;YACnB,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;YAEzC,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,EAAE,KAAK,CAAC,CAAC;YAC9D,iDAAiD;YACjD,OAAO;gBACL,IAAI,EAAE,IAAI;gBACV,QAAQ,EAAE,KAAK;aAChB,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,eAAe,CACnB,GAAW,EACX,GAAmB;QAEnB,IAAI,CAAC,GAAG,CAAC,qBAAqB,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACvC,MAAM,MAAM,GAAG,CAAC,MAAM,GAAG,CAAC,qBAAqB,CAAC,GAAG,CACjD,QAAQ,EACR,MAAM,CACP,CAAQ,CAAC;YAEV,IACE,MAAM;gBACN,OAAO,MAAM,KAAK,QAAQ;gBAC1B,MAAM,IAAI,MAAM;gBAChB,UAAU,IAAI,MAAM,EACpB,CAAC;gBACD,OAAO;oBACL,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,OAAO,EAAE,MAAM,CAAC,OAAO;oBACvB,QAAQ,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;iBACpC,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wCAAwC,EAAE,KAAK,CAAC,CAAC;QACpE,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,WAAW,CACf,GAAW,EACX,MAAyB,EACzB,GAAmB;QAEnB,IAAI,CAAC,GAAG,CAAC,qBAAqB,EAAE,CAAC;YAC/B,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACvC,MAAM,UAAU,GAAG;gBACjB,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACnC,CAAC;YAEF,MAAM,GAAG,CAAC,qBAAqB,CAAC,GAAG,CACjC,QAAQ,EACR,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,EAC1B;gBACE,aAAa,EAAE,SAAS;aACzB,CACF,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,sCAAsC,EAAE,KAAK,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACK,WAAW,CAAC,GAAW;QAC7B,kDAAkD;QAClD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;YAC5B,MAAM,UAAU,GAAG,GAAG,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;YAC1E,OAAO,GAAG,gBAAgB,GAAG,UAAU,EAAE,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC;YACP,wCAAwC;YACxC,OAAO,GAAG,gBAAgB,GAAG,GAAG,EAAE,CAAC;QACrC,CAAC;IACH,CAAC;CACF"}

package/dist/lib/types/media-reconciliation.js

@@ -1,8 +1,7 @@
-"use strict";
 /**
  * Media Reconciliation Types
  *
  * Types for Option 2 (Eventual Consistency) media upload system
  */
-Object.defineProperty(exports, "__esModule", { value: true });
+export {};
 //# sourceMappingURL=media-reconciliation.js.map

package/dist/lib/types/media-reconciliation.js.map

@@ -1 +1 @@
-{"version":3,"file":"media-reconciliation.js","sourceRoot":"","sources":["../../../src/lib/types/media-reconciliation.ts"],"names":[],"mappings":";AAAA;;;;GAIG"}
+{"version":3,"file":"media-reconciliation.js","sourceRoot":"","sources":["../../../src/lib/types/media-reconciliation.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}

package/dist/lib/upload-session-handler.d.ts

@@ -4,7 +4,7 @@
  * Manages upload sessions for optimistic image uploads.
  * Provides session lifecycle management: create, add media, complete, abandon.
  */
-import type { Env } from "../env";
+import type { Env } from "../env.js";
 export interface UploadSession {
     id: string;
     userId: string;

package/dist/lib/upload-session-handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"upload-session-handler.d.ts","sourceRoot":"","sources":["../../src/lib/upload-session-handler.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,QAAQ,CAAC;AAGlC,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,MAAM,EAAE,QAAQ,GAAG,WAAW,GAAG,WAAW,CAAC;IAC7C,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;CACjB;AAED,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,MAAM,CAAS;gBAEX,GAAG,CAAC,EAAE,GAAG;IAIrB;;;OAGG;IACG,aAAa,CACjB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,GAAG,GACP,OAAO,CAAC,mBAAmB,CAAC;IAkD/B;;OAEG;IACG,eAAe,CACnB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,GAAG,GACP,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IAgDhC;;OAEG;IACG,iBAAiB,CACrB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,GAAG,GACP,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IA+GhD;;;OAGG;IACG,eAAe,CACnB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,GAAG,GACP,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IA+EhD;;;OAGG;IACG,cAAc,CAClB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,GAAG,GACP,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CA8EjD"}
+{"version":3,"file":"upload-session-handler.d.ts","sourceRoot":"","sources":["../../src/lib/upload-session-handler.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAGrC,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,MAAM,EAAE,QAAQ,GAAG,WAAW,GAAG,WAAW,CAAC;IAC7C,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;CACjB;AAED,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,MAAM,CAAS;gBAEX,GAAG,CAAC,EAAE,GAAG;IAIrB;;;OAGG;IACG,aAAa,CACjB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,GAAG,GACP,OAAO,CAAC,mBAAmB,CAAC;IAkD/B;;OAEG;IACG,eAAe,CACnB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,GAAG,GACP,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IAgDhC;;OAEG;IACG,iBAAiB,CACrB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,GAAG,GACP,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IA+GhD;;;OAGG;IACG,eAAe,CACnB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,GAAG,GACP,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IA+EhD;;;OAGG;IACG,cAAc,CAClB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,GAAG,GACP,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CA8EjD"}

package/dist/lib/upload-session-handler.js

@@ -1,50 +1,14 @@
-"use strict";
 /**
  * Upload Session Handler
  *
  * Manages upload sessions for optimistic image uploads.
  * Provides session lifecycle management: create, add media, complete, abandon.
  */
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.UploadSessionHandler = void 0;
-const logger_1 = require("./logger");
-class UploadSessionHandler {
+import { getLogger } from "./logger.js";
+export class UploadSessionHandler {
     logger;
     constructor(env) {
-        this.logger = env ? logger_1.Logger.getInstance(env) : {};
+        this.logger = env ? getLogger() : {};
     }
     /**
      * Create a new upload session
@@ -52,8 +16,8 @@ class UploadSessionHandler {
      */
     async createSession(userId, region, env) {
         const startTime = Date.now();
-        const { sharedDatabaseConnectionManager } = await Promise.resolve().then(() => __importStar(require("./database-connection-manager")));
-        const { withQueryTimeoutAndRetry, QueryTimeoutPresets } = await Promise.resolve().then(() => __importStar(require("./db-query-helper")));
+        const { sharedDatabaseConnectionManager } = await import("./database-connection-manager.js");
+        const { withQueryTimeoutAndRetry, QueryTimeoutPresets } = await import("./db-query-helper.js");
         try {
             // Set expiry to 24 hours from now
             const expiresAt = new Date();
@@ -89,8 +53,8 @@ class UploadSessionHandler {
      * Validate session exists, belongs to user, and is not expired
      */
     async validateSession(sessionId, userId, region, env) {
-        const { sharedDatabaseConnectionManager } = await Promise.resolve().then(() => __importStar(require("./database-connection-manager")));
-        const { withQueryTimeoutAndRetry, QueryTimeoutPresets } = await Promise.resolve().then(() => __importStar(require("./db-query-helper")));
+        const { sharedDatabaseConnectionManager } = await import("./database-connection-manager.js");
+        const { withQueryTimeoutAndRetry, QueryTimeoutPresets } = await import("./db-query-helper.js");
         try {
             const session = await withQueryTimeoutAndRetry(sharedDatabaseConnectionManager, region, env, (db) => db.uploadSession.findFirst({
                 where: {
@@ -126,8 +90,8 @@ class UploadSessionHandler {
      */
     async addMediaToSession(sessionId, userId, mediaId, region, env) {
         const startTime = Date.now();
-        const { sharedDatabaseConnectionManager } = await Promise.resolve().then(() => __importStar(require("./database-connection-manager")));
-        const { withQueryTimeoutAndRetry, QueryTimeoutPresets } = await Promise.resolve().then(() => __importStar(require("./db-query-helper")));
+        const { sharedDatabaseConnectionManager } = await import("./database-connection-manager.js");
+        const { withQueryTimeoutAndRetry, QueryTimeoutPresets } = await import("./db-query-helper.js");
         try {
             // Validate session
             const session = await this.validateSession(sessionId, userId, region, env);
@@ -203,8 +167,8 @@ class UploadSessionHandler {
      */
     async completeSession(sessionId, userId, region, env) {
         const startTime = Date.now();
-        const { sharedDatabaseConnectionManager } = await Promise.resolve().then(() => __importStar(require("./database-connection-manager")));
-        const { withQueryTimeoutAndRetry, QueryTimeoutPresets } = await Promise.resolve().then(() => __importStar(require("./db-query-helper")));
+        const { sharedDatabaseConnectionManager } = await import("./database-connection-manager.js");
+        const { withQueryTimeoutAndRetry, QueryTimeoutPresets } = await import("./db-query-helper.js");
         try {
             // Validate session
             const session = await this.validateSession(sessionId, userId, region, env);
@@ -258,8 +222,8 @@ class UploadSessionHandler {
      */
     async abandonSession(sessionId, userId, region, env) {
         const startTime = Date.now();
-        const { sharedDatabaseConnectionManager } = await Promise.resolve().then(() => __importStar(require("./database-connection-manager")));
-        const { withQueryTimeoutAndRetry, QueryTimeoutPresets } = await Promise.resolve().then(() => __importStar(require("./db-query-helper")));
+        const { sharedDatabaseConnectionManager } = await import("./database-connection-manager.js");
+        const { withQueryTimeoutAndRetry, QueryTimeoutPresets } = await import("./db-query-helper.js");
         try {
             // Validate session
             const session = await this.validateSession(sessionId, userId, region, env);
@@ -308,5 +272,4 @@ class UploadSessionHandler {
         }
     }
 }
-exports.UploadSessionHandler = UploadSessionHandler;
 //# sourceMappingURL=upload-session-handler.js.map