@de-otio/trellis 0.7.0 → 0.9.0

package/dist/lib/routes/tenant-audit.js

@@ -1,4 +1,3 @@
-"use strict";
 /**
  * Tenant Audit Log Routes
  *
@@ -15,46 +14,11 @@
  *   cursor      Opaque pagination cursor (base64-encoded JSON)
  *   limit       Page size; default 50, max 500 (1000 in SUPER_ADMIN CSV)
  */
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.tenantAuditRoutes = void 0;
-const middleware_1 = require("../middleware");
-const security_headers_1 = require("../security-headers");
-const auth_middleware_1 = require("../auth/auth-middleware");
-const csv_export_1 = require("../audit/csv-export");
-const errors_1 = require("./errors");
+import { corsMiddleware } from "../middleware.js";
+import { SecurityHeaders } from "../security-headers.js";
+import { authMiddleware, requireActiveTenant } from "../auth/auth-middleware.js";
+import { renderCsv } from "../audit/csv-export.js";
+import { unauthorizedError } from "./errors.js";
 const ROUTE_RE = /^\/api\/tenants\/([^/]+)\/audit$/;
 function parseQueryParams(url, isSuperAdmin) {
     const rawFrom = url.searchParams.get("from");
@@ -98,20 +62,22 @@ function parseQueryParams(url, isSuperAdmin) {
     return { from, to, type, format, cursor, limit };
 }
 async function handleAuditRead(tenantId, auth, env, url) {
-    const denied = (0, auth_middleware_1.requireActiveTenant)(auth, tenantId);
+    const denied = requireActiveTenant(auth, tenantId);
     if (denied)
         return denied;
     const isSuperAdmin = auth.globalRole === "SUPER_ADMIN";
     const params = parseQueryParams(url, isSuperAdmin);
     if (params instanceof Response)
         return params;
-    const { createPrisma } = await Promise.resolve().then(() => __importStar(require("../../db")));
+    const { createPrisma } = await import("../../db.js");
     const db = createPrisma(env);
     const where = {
         tenantId,
     };
+    // The `type` query param filters by the audit `action` string (the
+    // foundation AuditEvent open-union action; was SecurityEvent.type).
     if (params.type) {
-        where.type = params.type;
+        where.action = params.type;
     }
     if (params.from || params.to) {
         where.timestamp = {};
@@ -139,50 +105,33 @@ async function handleAuditRead(tenantId, auth, env, url) {
     }
     const MAX_CSV_ROWS = 10_000;
     const fetchLimit = params.format === "csv" ? MAX_CSV_ROWS : params.limit + 1;
-    const events = await db.securityEvent.findMany({
+    const events = await db.auditEvent.findMany({
         where,
         orderBy: [{ timestamp: "desc" }, { id: "desc" }],
         take: fetchLimit,
         select: {
             id: true,
-            type: true,
+            action: true,
             tenantId: true,
-            userId: true,
+            actorId: true,
             ipAddress: true,
-            details: true,
+            metadata: true,
             timestamp: true,
         },
     });
     if (params.format === "csv") {
-        const rows = events.map((e) => {
-            let payloadStr = e.details;
-            try {
-                const parsed = JSON.parse(e.details);
-                const eventId = typeof parsed["eventId"] === "string" ? parsed["eventId"] : "";
-                payloadStr = JSON.stringify(parsed);
-                return {
-                    eventId,
-                    type: e.type,
-                    tenantId: e.tenantId ?? "",
-                    actorUserId: e.userId ?? "",
-                    createdAt: e.timestamp.toISOString(),
-                    sourceIp: e.ipAddress ?? "",
-                    payload: payloadStr,
-                };
-            }
-            catch {
-                return {
-                    eventId: "",
-                    type: e.type,
-                    tenantId: e.tenantId ?? "",
-                    actorUserId: e.userId ?? "",
-                    createdAt: e.timestamp.toISOString(),
-                    sourceIp: e.ipAddress ?? "",
-                    payload: payloadStr,
-                };
-            }
-        });
-        const csv = (0, csv_export_1.renderCsv)(rows);
+        const rows = events.map((e) => ({
+            // The audit-event ulid is the canonical event id (was details.eventId).
+            eventId: e.id,
+            type: e.action,
+            tenantId: e.tenantId ?? "",
+            actorUserId: e.actorId ?? "",
+            createdAt: e.timestamp.toISOString(),
+            sourceIp: e.ipAddress ?? "",
+            // metadata is a JSON column (already an object) — stringify for the cell.
+            payload: e.metadata == null ? "" : JSON.stringify(e.metadata),
+        }));
+        const csv = renderCsv(rows);
         return new Response(csv, {
             status: 200,
             headers: {
@@ -203,18 +152,12 @@ async function handleAuditRead(tenantId, auth, env, url) {
     return new Response(JSON.stringify({
         events: page.map((e) => ({
             id: e.id,
-            type: e.type,
+            type: e.action,
             tenantId: e.tenantId,
-            actorUserId: e.userId,
+            actorUserId: e.actorId,
             sourceIp: e.ipAddress,
-            payload: (() => {
-                try {
-                    return JSON.parse(e.details);
-                }
-                catch {
-                    return e.details;
-                }
-            })(),
+            // metadata is a JSON column — already structured, return as-is.
+            payload: e.metadata ?? null,
             createdAt: e.timestamp.toISOString(),
         })),
         nextCursor,
@@ -224,20 +167,20 @@ async function handleAuditRead(tenantId, auth, env, url) {
         headers: { "content-type": "application/json" },
     });
 }
-exports.tenantAuditRoutes = [
+export const tenantAuditRoutes = [
     {
         path: ROUTE_RE,
         method: "GET",
         handler: async (request, env, { pathname, url }) => {
-            const securityHeaders = new security_headers_1.SecurityHeaders(env);
-            const auth = await (0, auth_middleware_1.authMiddleware)(request, env);
+            const securityHeaders = new SecurityHeaders(env);
+            const auth = await authMiddleware(request, env);
             if (!auth)
-                return (0, errors_1.unauthorizedError)(securityHeaders);
+                return unauthorizedError(securityHeaders);
             const tenantId = pathname.match(ROUTE_RE)?.[1] ?? "";
             const response = await handleAuditRead(tenantId, auth, env, url);
             return securityHeaders.addSecurityHeaders(response);
         },
-        middleware: [(0, middleware_1.corsMiddleware)()],
+        middleware: [corsMiddleware()],
         description: "Get tenant audit log (paginated, filterable, CSV-exportable)",
     },
 ];

package/dist/lib/routes/tenant-audit.js.map

@@ -1 +1 @@
-{"version":3,"file":"tenant-audit.js","sourceRoot":"","sources":["../../../src/lib/routes/tenant-audit.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;GAeG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAGH,8CAA+C;AAC/C,0DAAsD;AACtD,6DAA8E;AAC9E,oDAAgD;AAChD,qCAA6C;AAK7C,MAAM,QAAQ,GAAG,kCAAkC,CAAC;AAWpD,SAAS,gBAAgB,CAAC,GAAQ,EAAE,YAAqB;IACvD,MAAM,OAAO,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;IACzE,MAAM,QAAQ,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC/C,MAAM,SAAS,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC;IAEvD,MAAM,QAAQ,GAAG,MAAM,KAAK,KAAK,IAAI,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;IAC/D,IAAI,KAAK,GAAG,EAAE,CAAC;IACf,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACtC,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC,EAC1F,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;QACJ,CAAC;QACD,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACrC,CAAC;IAED,IAAI,IAAsB,CAAC;IAC3B,IAAI,EAAoB,CAAC;IACzB,IAAI,OAAO,EAAE,CAAC;QACZ,IAAI,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC;QACzB,IAAI,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;YAC1B,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,wCAAwC,EAAE,CAAC,EAChG,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,KAAK,EAAE,CAAC;QACV,EAAE,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,IAAI,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;YACxB,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,sCAAsC,EAAE,CAAC,EAC9F,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,MAAqD,CAAC;IAC1D,IAAI,SAAS,EAAE,CAAC;QACd,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAGpE,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC,EAC3E,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AACnD,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,QAAgB,EAChB,IAAiB,EACjB,GAAQ,EACR,GAAQ;IAER,MAAM,MAAM,GAAG,IAAA,qCAAmB,EAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACnD,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAE1B,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,KAAK,aAAa,CAAC;IACvD,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IACnD,IAAI,MAAM,YAAY,QAAQ;QAAE,OAAO,MAAM,CAAC;IAE9C,MAAM,EAAE,YAAY,EAAE,GAAG,wDAAa,UAAU,GAAC,CAAC;IAClD,MAAM,EAAE,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IAE7B,MAAM,KAAK,GAAmC;QAC5C,QAAQ;KACT,CAAC;IAEF,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAChB,KAAK,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;IAC3B,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;QAC7B,KAAK,CAAC,SAAS,GAAG,EAAE,CAAC;QACrB,IAAI,MAAM,CAAC,IAAI;YAAE,KAAK,CAAC,SAAS,CAAC,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC;QACnD,IAAI,MAAM,CAAC,EAAE;YAAE,KAAK,CAAC,SAAS,CAAC,GAAG,GAAG,MAAM,CAAC,EAAE,CAAC;IACjD,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACrD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAClC,KAAK,CAAC,GAAG,GAAG;YACV;gBACE,EAAE,EAAE;oBACF,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE;oBACjC;wBACE,GAAG,EAAE;4BACH,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE;4BACrC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE;yBACzB;qBACF;iBACF;aACF;SACF,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,CAAC;IAC5B,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC;IAE7E,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,aAAa,CAAC,QAAQ,CAAC;QAC7C,KAAK;QACL,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC;QAChD,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE;YACN,EAAE,EAAE,IAAI;YACR,IAAI,EAAE,IAAI;YACV,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,IAAI;YACZ,SAAS,EAAE,IAAI;YACf,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,IAAI;SAChB;KACF,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAQxB,EAAE,EAAE;YACH,IAAI,UAAU,GAAG,CAAC,CAAC,OAAO,CAAC;YAC3B,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAA4B,CAAC;gBAChE,MAAM,OAAO,GAAG,OAAO,MAAM,CAAC,SAAS,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC/E,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;gBACpC,OAAO;oBACL,OAAO;oBACP,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,EAAE;oBAC1B,WAAW,EAAE,CAAC,CAAC,MAAM,IAAI,EAAE;oBAC3B,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE;oBACpC,QAAQ,EAAE,CAAC,CAAC,SAAS,IAAI,EAAE;oBAC3B,OAAO,EAAE,UAAU;iBACpB,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO;oBACL,OAAO,EAAE,EAAE;oBACX,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,EAAE;oBAC1B,WAAW,EAAE,CAAC,CAAC,MAAM,IAAI,EAAE;oBAC3B,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE;oBACpC,QAAQ,EAAE,CAAC,CAAC,SAAS,IAAI,EAAE;oBAC3B,OAAO,EAAE,UAAU;iBACpB,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,IAAA,sBAAS,EAAC,IAAI,CAAC,CAAC;QAC5B,OAAO,IAAI,QAAQ,CAAC,GAAG,EAAE;YACvB,MAAM,EAAE,GAAG;YACX,OAAO,EAAE;gBACP,cAAc,EAAE,yBAAyB;gBACzC,qBAAqB,EAAE,+BAA+B,QAAQ,OAAO;aACtE;SACF,CAAC,CAAC;IACL,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC;IAC7C,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAE9D,IAAI,UAAU,GAAkB,IAAI,CAAC;IACrC,IAAI,OAAO,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACnC,IAAI,IAAI,EAAE,CAAC;YACT,UAAU,GAAG,MAAM,CAAC,IAAI,CACtB,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,EACxE,MAAM,CACP,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IAED,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC;QACb,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAQjB,EAAE,EAAE,CAAC,CAAC;YACL,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,WAAW,EAAE,CAAC,CAAC,MAAM;YACrB,QAAQ,EAAE,CAAC,CAAC,SAAS;YACrB,OAAO,EAAE,CAAC,GAAG,EAAE;gBACb,IAAI,CAAC;oBACH,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAY,CAAC;gBAC1C,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,CAAC,CAAC,OAAO,CAAC;gBACnB,CAAC;YACH,CAAC,CAAC,EAAE;YACJ,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE;SACrC,CAAC,CAAC;QACH,UAAU;QACV,OAAO;KACR,CAAC,EACF;QACE,MAAM,EAAE,GAAG;QACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;KAChD,CACF,CAAC;AACJ,CAAC;AAEY,QAAA,iBAAiB,GAAY;IACxC;QACE,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,EAAE,EAAE;YACjD,MAAM,eAAe,GAAG,IAAI,kCAAe,CAAC,GAAG,CAAC,CAAC;YAEjD,MAAM,IAAI,GAAG,MAAM,IAAA,gCAAc,EAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAChD,IAAI,CAAC,IAAI;gBAAE,OAAO,IAAA,0BAAiB,EAAC,eAAe,CAAC,CAAC;YAErD,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACrD,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;YACjE,OAAO,eAAe,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QACtD,CAAC;QACD,UAAU,EAAE,CAAC,IAAA,2BAAc,GAAE,CAAC;QAC9B,WAAW,EAAE,8DAA8D;KAC5E;CACF,CAAC"}
+{"version":3,"file":"tenant-audit.js","sourceRoot":"","sources":["../../../src/lib/routes/tenant-audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjF,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAKhD,MAAM,QAAQ,GAAG,kCAAkC,CAAC;AAWpD,SAAS,gBAAgB,CAAC,GAAQ,EAAE,YAAqB;IACvD,MAAM,OAAO,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;IACzE,MAAM,QAAQ,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC/C,MAAM,SAAS,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC;IAEvD,MAAM,QAAQ,GAAG,MAAM,KAAK,KAAK,IAAI,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;IAC/D,IAAI,KAAK,GAAG,EAAE,CAAC;IACf,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACtC,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC,EAC1F,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;QACJ,CAAC;QACD,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACrC,CAAC;IAED,IAAI,IAAsB,CAAC;IAC3B,IAAI,EAAoB,CAAC;IACzB,IAAI,OAAO,EAAE,CAAC;QACZ,IAAI,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC;QACzB,IAAI,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;YAC1B,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,wCAAwC,EAAE,CAAC,EAChG,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,KAAK,EAAE,CAAC;QACV,EAAE,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,IAAI,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;YACxB,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,sCAAsC,EAAE,CAAC,EAC9F,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,MAAqD,CAAC;IAC1D,IAAI,SAAS,EAAE,CAAC;QACd,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAGpE,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC,EAC3E,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AACnD,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,QAAgB,EAChB,IAAiB,EACjB,GAAQ,EACR,GAAQ;IAER,MAAM,MAAM,GAAG,mBAAmB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACnD,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAE1B,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,KAAK,aAAa,CAAC;IACvD,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IACnD,IAAI,MAAM,YAAY,QAAQ;QAAE,OAAO,MAAM,CAAC;IAE9C,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;IACrD,MAAM,EAAE,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IAE7B,MAAM,KAAK,GAAgC;QACzC,QAAQ;KACT,CAAC;IAEF,mEAAmE;IACnE,oEAAoE;IACpE,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAChB,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC;IAC7B,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;QAC7B,KAAK,CAAC,SAAS,GAAG,EAAE,CAAC;QACrB,IAAI,MAAM,CAAC,IAAI;YAAE,KAAK,CAAC,SAAS,CAAC,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC;QACnD,IAAI,MAAM,CAAC,EAAE;YAAE,KAAK,CAAC,SAAS,CAAC,GAAG,GAAG,MAAM,CAAC,EAAE,CAAC;IACjD,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACrD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAClC,KAAK,CAAC,GAAG,GAAG;YACV;gBACE,EAAE,EAAE;oBACF,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE;oBACjC;wBACE,GAAG,EAAE;4BACH,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE;4BACrC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE;yBACzB;qBACF;iBACF;aACF;SACF,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,CAAC;IAC5B,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC;IAE7E,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;QAC1C,KAAK;QACL,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC;QAChD,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE;YACN,EAAE,EAAE,IAAI;YACR,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,IAAI;YACd,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,IAAI;YACf,QAAQ,EAAE,IAAI;YACd,SAAS,EAAE,IAAI;SAChB;KACF,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAQxB,EAAE,EAAE,CAAC,CAAC;YACL,wEAAwE;YACxE,OAAO,EAAE,CAAC,CAAC,EAAE;YACb,IAAI,EAAE,CAAC,CAAC,MAAM;YACd,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,EAAE;YAC1B,WAAW,EAAE,CAAC,CAAC,OAAO,IAAI,EAAE;YAC5B,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE;YACpC,QAAQ,EAAE,CAAC,CAAC,SAAS,IAAI,EAAE;YAC3B,0EAA0E;YAC1E,OAAO,EAAE,CAAC,CAAC,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;SAC9D,CAAC,CAAC,CAAC;QAEJ,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC5B,OAAO,IAAI,QAAQ,CAAC,GAAG,EAAE;YACvB,MAAM,EAAE,GAAG;YACX,OAAO,EAAE;gBACP,cAAc,EAAE,yBAAyB;gBACzC,qBAAqB,EAAE,+BAA+B,QAAQ,OAAO;aACtE;SACF,CAAC,CAAC;IACL,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC;IAC7C,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAE9D,IAAI,UAAU,GAAkB,IAAI,CAAC;IACrC,IAAI,OAAO,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACnC,IAAI,IAAI,EAAE,CAAC;YACT,UAAU,GAAG,MAAM,CAAC,IAAI,CACtB,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,EACxE,MAAM,CACP,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IAED,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC;QACb,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAQjB,EAAE,EAAE,CAAC,CAAC;YACL,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,IAAI,EAAE,CAAC,CAAC,MAAM;YACd,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,WAAW,EAAE,CAAC,CAAC,OAAO;YACtB,QAAQ,EAAE,CAAC,CAAC,SAAS;YACrB,gEAAgE;YAChE,OAAO,EAAE,CAAC,CAAC,QAAQ,IAAI,IAAI;YAC3B,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE;SACrC,CAAC,CAAC;QACH,UAAU;QACV,OAAO;KACR,CAAC,EACF;QACE,MAAM,EAAE,GAAG;QACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;KAChD,CACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAY;IACxC;QACE,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,EAAE,EAAE;YACjD,MAAM,eAAe,GAAG,IAAI,eAAe,CAAC,GAAG,CAAC,CAAC;YAEjD,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAChD,IAAI,CAAC,IAAI;gBAAE,OAAO,iBAAiB,CAAC,eAAe,CAAC,CAAC;YAErD,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACrD,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;YACjE,OAAO,eAAe,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QACtD,CAAC;QACD,UAAU,EAAE,CAAC,cAAc,EAAE,CAAC;QAC9B,WAAW,EAAE,8DAA8D;KAC5E;CACF,CAAC"}

package/dist/lib/routes/tenant-compliance.d.ts

@@ -16,6 +16,6 @@
  * Design reference:
  *   doc/02-technical/identity-federation/11-agent-friendly-compliance.md §"Layer 2"
  */
-import type { Route } from "./types";
+import type { Route } from "./types.js";
 export declare const tenantComplianceRoutes: Route[];
 //# sourceMappingURL=tenant-compliance.d.ts.map

package/dist/lib/routes/tenant-compliance.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tenant-compliance.d.ts","sourceRoot":"","sources":["../../../src/lib/routes/tenant-compliance.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AASH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AA+DrC,eAAO,MAAM,sBAAsB,EAAE,KAAK,EAiBzC,CAAC"}
+{"version":3,"file":"tenant-compliance.d.ts","sourceRoot":"","sources":["../../../src/lib/routes/tenant-compliance.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AASH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AA+DxC,eAAO,MAAM,sBAAsB,EAAE,KAAK,EAiBzC,CAAC"}

package/dist/lib/routes/tenant-compliance.js

@@ -1,4 +1,3 @@
-"use strict";
 /**
  * Tenant Compliance Route
  *
@@ -17,59 +16,24 @@
  * Design reference:
  *   doc/02-technical/identity-federation/11-agent-friendly-compliance.md §"Layer 2"
  */
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.tenantComplianceRoutes = void 0;
-const middleware_1 = require("../middleware");
-const security_headers_1 = require("../security-headers");
-const auth_middleware_1 = require("../auth/auth-middleware");
-const require_1 = require("../auth/require");
-const baseline_1 = require("../compliance/baseline");
-const tenant_merge_1 = require("../compliance/tenant-merge");
-const errors_1 = require("./errors");
+import { corsMiddleware } from "../middleware.js";
+import { SecurityHeaders } from "../security-headers.js";
+import { authMiddleware, requireActiveTenant } from "../auth/auth-middleware.js";
+import { Capability, requireCapability } from "../auth/require.js";
+import { BASELINE_COMPLIANCE } from "../compliance/baseline.js";
+import { mergeTenantOverrides } from "../compliance/tenant-merge.js";
+import { unauthorizedError } from "./errors.js";
 const ROUTE_RE = /^\/api\/tenants\/([^/]+)\/compliance\.json$/;
 async function handleComplianceRead(tenantId, auth, env) {
     // Cross-tenant isolation: 403 if the caller's active tenant != path tenant.
-    const tenantDenied = (0, auth_middleware_1.requireActiveTenant)(auth, tenantId);
+    const tenantDenied = requireActiveTenant(auth, tenantId);
     if (tenantDenied)
         return tenantDenied;
     // Capability gate: requires audit.view (ADMIN / OWNER / SUPER_ADMIN).
-    const capDenied = (0, require_1.requireCapability)(auth, require_1.Capability.AuditView);
+    const capDenied = requireCapability(auth, Capability.AuditView);
     if (capDenied)
         return capDenied;
-    const { createPrisma } = await Promise.resolve().then(() => __importStar(require("../../db")));
+    const { createPrisma } = await import("../../db.js");
     const db = createPrisma(env);
     // Load tenant region (all queries scoped to tenantId for isolation).
     const tenant = await db.tenant.findUnique({
@@ -96,26 +60,26 @@ async function handleComplianceRead(tenantId, auth, env) {
     const idpInput = idpRow
         ? { kind: String(idpRow.kind), issuerUrl: idpRow.issuerUrl ?? null }
         : null;
-    const merged = (0, tenant_merge_1.mergeTenantOverrides)(baseline_1.BASELINE_COMPLIANCE, tenantInput, idpInput);
+    const merged = mergeTenantOverrides(BASELINE_COMPLIANCE, tenantInput, idpInput);
     return new Response(JSON.stringify(merged), {
         status: 200,
         headers: { "content-type": "application/json" },
     });
 }
-exports.tenantComplianceRoutes = [
+export const tenantComplianceRoutes = [
     {
         path: ROUTE_RE,
         method: "GET",
         handler: async (request, env, { pathname }) => {
-            const securityHeaders = new security_headers_1.SecurityHeaders(env);
-            const auth = await (0, auth_middleware_1.authMiddleware)(request, env);
+            const securityHeaders = new SecurityHeaders(env);
+            const auth = await authMiddleware(request, env);
             if (!auth)
-                return (0, errors_1.unauthorizedError)(securityHeaders);
+                return unauthorizedError(securityHeaders);
             const tenantId = pathname.match(ROUTE_RE)?.[1] ?? "";
             const response = await handleComplianceRead(tenantId, auth, env);
             return securityHeaders.addSecurityHeaders(response);
         },
-        middleware: [(0, middleware_1.corsMiddleware)()],
+        middleware: [corsMiddleware()],
         description: "Get tenant compliance bundle (baseline + tenant overrides)",
     },
 ];

package/dist/lib/routes/tenant-compliance.js.map

@@ -1 +1 @@
-{"version":3,"file":"tenant-compliance.js","sourceRoot":"","sources":["../../../src/lib/routes/tenant-compliance.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;GAiBG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,8CAA+C;AAC/C,0DAAsD;AACtD,6DAA8E;AAC9E,6CAAgE;AAChE,qDAA6D;AAC7D,6DAAkE;AAClE,qCAA6C;AAK7C,MAAM,QAAQ,GAAG,6CAA6C,CAAC;AAE/D,KAAK,UAAU,oBAAoB,CACjC,QAAgB,EAChB,IAAiB,EACjB,GAAQ;IAER,4EAA4E;IAC5E,MAAM,YAAY,GAAG,IAAA,qCAAmB,EAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACzD,IAAI,YAAY;QAAE,OAAO,YAAY,CAAC;IAEtC,sEAAsE;IACtE,MAAM,SAAS,GAAG,IAAA,2BAAiB,EAAC,IAAI,EAAE,oBAAU,CAAC,SAAS,CAAC,CAAC;IAChE,IAAI,SAAS;QAAE,OAAO,SAAS,CAAC;IAEhC,MAAM,EAAE,YAAY,EAAE,GAAG,wDAAa,UAAU,GAAC,CAAC;IAClD,MAAM,EAAE,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IAE7B,qEAAqE;IACrE,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC;QACxC,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE;QACvB,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;KACnC,CAAC,CAAC;IAEH,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,EACnE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;IACJ,CAAC;IAED,qCAAqC;IACrC,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,sBAAsB,CAAC,UAAU,CAAC;QACxD,KAAK,EAAE,EAAE,QAAQ,EAAE;QACnB,MAAM,EAAE;YACN,IAAI,EAAE,IAAI;YACV,SAAS,EAAE,IAAI;SAChB;KACF,CAAC,CAAC;IAEH,qEAAqE;IACrE,qEAAqE;IACrE,oEAAoE;IACpE,MAAM,WAAW,GAAG;QAClB,MAAM,EAAE,MAAM,CAAC,MAAmC;KACnD,CAAC;IAEF,MAAM,QAAQ,GAAG,MAAM;QACrB,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,IAAI,EAAE;QACpE,CAAC,CAAC,IAAI,CAAC;IAET,MAAM,MAAM,GAAG,IAAA,mCAAoB,EAAC,8BAAmB,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;IAEhF,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE;QAC1C,MAAM,EAAE,GAAG;QACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;KAChD,CAAC,CAAC;AACL,CAAC;AAEY,QAAA,sBAAsB,GAAY;IAC7C;QACE,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;YAC5C,MAAM,eAAe,GAAG,IAAI,kCAAe,CAAC,GAAG,CAAC,CAAC;YAEjD,MAAM,IAAI,GAAG,MAAM,IAAA,gCAAc,EAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAChD,IAAI,CAAC,IAAI;gBAAE,OAAO,IAAA,0BAAiB,EAAC,eAAe,CAAC,CAAC;YAErD,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACrD,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YACjE,OAAO,eAAe,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QACtD,CAAC;QACD,UAAU,EAAE,CAAC,IAAA,2BAAc,GAAE,CAAC;QAC9B,WAAW,EAAE,4DAA4D;KAC1E;CACF,CAAC"}
+{"version":3,"file":"tenant-compliance.js","sourceRoot":"","sources":["../../../src/lib/routes/tenant-compliance.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjF,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACnE,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAKhD,MAAM,QAAQ,GAAG,6CAA6C,CAAC;AAE/D,KAAK,UAAU,oBAAoB,CACjC,QAAgB,EAChB,IAAiB,EACjB,GAAQ;IAER,4EAA4E;IAC5E,MAAM,YAAY,GAAG,mBAAmB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACzD,IAAI,YAAY;QAAE,OAAO,YAAY,CAAC;IAEtC,sEAAsE;IACtE,MAAM,SAAS,GAAG,iBAAiB,CAAC,IAAI,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC;IAChE,IAAI,SAAS;QAAE,OAAO,SAAS,CAAC;IAEhC,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;IACrD,MAAM,EAAE,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IAE7B,qEAAqE;IACrE,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC;QACxC,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE;QACvB,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;KACnC,CAAC,CAAC;IAEH,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,EACnE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;IACJ,CAAC;IAED,qCAAqC;IACrC,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,sBAAsB,CAAC,UAAU,CAAC;QACxD,KAAK,EAAE,EAAE,QAAQ,EAAE;QACnB,MAAM,EAAE;YACN,IAAI,EAAE,IAAI;YACV,SAAS,EAAE,IAAI;SAChB;KACF,CAAC,CAAC;IAEH,qEAAqE;IACrE,qEAAqE;IACrE,oEAAoE;IACpE,MAAM,WAAW,GAAG;QAClB,MAAM,EAAE,MAAM,CAAC,MAAmC;KACnD,CAAC;IAEF,MAAM,QAAQ,GAAG,MAAM;QACrB,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,IAAI,EAAE;QACpE,CAAC,CAAC,IAAI,CAAC;IAET,MAAM,MAAM,GAAG,oBAAoB,CAAC,mBAAmB,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;IAEhF,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE;QAC1C,MAAM,EAAE,GAAG;QACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;KAChD,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,MAAM,sBAAsB,GAAY;IAC7C;QACE,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;YAC5C,MAAM,eAAe,GAAG,IAAI,eAAe,CAAC,GAAG,CAAC,CAAC;YAEjD,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAChD,IAAI,CAAC,IAAI;gBAAE,OAAO,iBAAiB,CAAC,eAAe,CAAC,CAAC;YAErD,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACrD,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YACjE,OAAO,eAAe,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QACtD,CAAC;QACD,UAAU,EAAE,CAAC,cAAc,EAAE,CAAC;QAC9B,WAAW,EAAE,4DAA4D;KAC1E;CACF,CAAC"}

package/dist/lib/routes/tenant-domains.d.ts

@@ -6,6 +6,6 @@
  * - DELETE /api/tenants/:id/domains/:domainId
  * - POST   /api/tenants/:id/domains/:domainId/verify
  */
-import type { Route } from "./types";
+import type { Route } from "./types.js";
 export declare const tenantDomainRoutes: Route[];
 //# sourceMappingURL=tenant-domains.d.ts.map

package/dist/lib/routes/tenant-domains.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tenant-domains.d.ts","sourceRoot":"","sources":["../../../src/lib/routes/tenant-domains.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAQH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAMrC,eAAO,MAAM,kBAAkB,EAAE,KAAK,EA4ErC,CAAC"}
+{"version":3,"file":"tenant-domains.d.ts","sourceRoot":"","sources":["../../../src/lib/routes/tenant-domains.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAQH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAMxC,eAAO,MAAM,kBAAkB,EAAE,KAAK,EA4ErC,CAAC"}

package/dist/lib/routes/tenant-domains.js

@@ -1,4 +1,3 @@
-"use strict";
 /**
  * Tenant Domain Routes
  *
@@ -7,33 +6,31 @@
  * - DELETE /api/tenants/:id/domains/:domainId
  * - POST   /api/tenants/:id/domains/:domainId/verify
  */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.tenantDomainRoutes = void 0;
-const middleware_1 = require("../middleware");
-const idempotency_1 = require("../middleware/idempotency");
-const security_headers_1 = require("../security-headers");
-const domain_handler_1 = require("../tenant/domain-handler");
-const auth_middleware_1 = require("../auth/auth-middleware");
-const errors_1 = require("./errors");
+import { corsMiddleware, csrfMiddleware } from "../middleware.js";
+import { idempotencyMiddleware } from "../middleware/idempotency.js";
+import { SecurityHeaders } from "../security-headers.js";
+import { DomainHandler } from "../tenant/domain-handler.js";
+import { authMiddleware } from "../auth/auth-middleware.js";
+import { unauthorizedError } from "./errors.js";
 const BASE_RE = /^\/api\/tenants\/([^/]+)\/domains$/;
 const MEMBER_RE = /^\/api\/tenants\/([^/]+)\/domains\/([^/]+)$/;
 const VERIFY_RE = /^\/api\/tenants\/([^/]+)\/domains\/([^/]+)\/verify$/;
-exports.tenantDomainRoutes = [
+export const tenantDomainRoutes = [
     // ── POST /api/tenants/:id/domains ─────────────────────────────────────────
     {
         path: BASE_RE,
         method: "POST",
         handler: async (request, env, { pathname }) => {
-            const securityHeaders = new security_headers_1.SecurityHeaders(env);
-            const auth = await (0, auth_middleware_1.authMiddleware)(request, env);
+            const securityHeaders = new SecurityHeaders(env);
+            const auth = await authMiddleware(request, env);
             if (!auth)
-                return (0, errors_1.unauthorizedError)(securityHeaders);
+                return unauthorizedError(securityHeaders);
             const tenantId = BASE_RE.exec(pathname)?.[1] ?? "";
-            const handler = new domain_handler_1.DomainHandler();
+            const handler = new DomainHandler();
             const response = await handler.handleClaim(tenantId, request, auth, env);
             return securityHeaders.addSecurityHeaders(response);
         },
-        middleware: [(0, middleware_1.corsMiddleware)(), (0, middleware_1.csrfMiddleware)(), (0, idempotency_1.idempotencyMiddleware)()],
+        middleware: [corsMiddleware(), csrfMiddleware(), idempotencyMiddleware()],
         description: "Claim a domain for tenant verification",
     },
     // ── GET /api/tenants/:id/domains ──────────────────────────────────────────
@@ -41,16 +38,16 @@ exports.tenantDomainRoutes = [
         path: BASE_RE,
         method: "GET",
         handler: async (request, env, { pathname }) => {
-            const securityHeaders = new security_headers_1.SecurityHeaders(env);
-            const auth = await (0, auth_middleware_1.authMiddleware)(request, env);
+            const securityHeaders = new SecurityHeaders(env);
+            const auth = await authMiddleware(request, env);
             if (!auth)
-                return (0, errors_1.unauthorizedError)(securityHeaders);
+                return unauthorizedError(securityHeaders);
             const tenantId = BASE_RE.exec(pathname)?.[1] ?? "";
-            const handler = new domain_handler_1.DomainHandler();
+            const handler = new DomainHandler();
             const response = await handler.handleList(tenantId, auth, env);
             return securityHeaders.addSecurityHeaders(response);
         },
-        middleware: [(0, middleware_1.corsMiddleware)()],
+        middleware: [corsMiddleware()],
         description: "List tenant domains",
     },
     // ── DELETE /api/tenants/:id/domains/:domainId ──────────────────────────────
@@ -58,18 +55,18 @@ exports.tenantDomainRoutes = [
         path: MEMBER_RE,
         method: "DELETE",
         handler: async (request, env, { pathname }) => {
-            const securityHeaders = new security_headers_1.SecurityHeaders(env);
-            const auth = await (0, auth_middleware_1.authMiddleware)(request, env);
+            const securityHeaders = new SecurityHeaders(env);
+            const auth = await authMiddleware(request, env);
             if (!auth)
-                return (0, errors_1.unauthorizedError)(securityHeaders);
+                return unauthorizedError(securityHeaders);
             const match = MEMBER_RE.exec(pathname);
             const tenantId = match?.[1] ?? "";
             const domainId = match?.[2] ?? "";
-            const handler = new domain_handler_1.DomainHandler();
+            const handler = new DomainHandler();
             const response = await handler.handleDelete(tenantId, domainId, auth, env);
             return securityHeaders.addSecurityHeaders(response);
         },
-        middleware: [(0, middleware_1.corsMiddleware)(), (0, middleware_1.csrfMiddleware)()],
+        middleware: [corsMiddleware(), csrfMiddleware()],
         description: "Remove a tenant domain",
     },
     // ── POST /api/tenants/:id/domains/:domainId/verify ─────────────────────────
@@ -77,18 +74,18 @@ exports.tenantDomainRoutes = [
         path: VERIFY_RE,
         method: "POST",
         handler: async (request, env, { pathname }) => {
-            const securityHeaders = new security_headers_1.SecurityHeaders(env);
-            const auth = await (0, auth_middleware_1.authMiddleware)(request, env);
+            const securityHeaders = new SecurityHeaders(env);
+            const auth = await authMiddleware(request, env);
             if (!auth)
-                return (0, errors_1.unauthorizedError)(securityHeaders);
+                return unauthorizedError(securityHeaders);
             const match = VERIFY_RE.exec(pathname);
             const tenantId = match?.[1] ?? "";
             const domainId = match?.[2] ?? "";
-            const handler = new domain_handler_1.DomainHandler();
+            const handler = new DomainHandler();
             const response = await handler.handleVerify(tenantId, domainId, auth, env);
             return securityHeaders.addSecurityHeaders(response);
         },
-        middleware: [(0, middleware_1.corsMiddleware)(), (0, middleware_1.csrfMiddleware)(), (0, idempotency_1.idempotencyMiddleware)()],
+        middleware: [corsMiddleware(), csrfMiddleware(), idempotencyMiddleware()],
         description: "Verify tenant domain via DNS TXT",
     },
 ];

package/dist/lib/routes/tenant-domains.js.map

@@ -1 +1 @@
-{"version":3,"file":"tenant-domains.js","sourceRoot":"","sources":["../../../src/lib/routes/tenant-domains.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;AAEH,8CAA+D;AAC/D,2DAAkE;AAClE,0DAAsD;AACtD,6DAAyD;AACzD,6DAAyD;AACzD,qCAA6C;AAG7C,MAAM,OAAO,GAAG,oCAAoC,CAAC;AACrD,MAAM,SAAS,GAAG,6CAA6C,CAAC;AAChE,MAAM,SAAS,GAAG,qDAAqD,CAAC;AAE3D,QAAA,kBAAkB,GAAY;IACzC,6EAA6E;IAC7E;QACE,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;YAC5C,MAAM,eAAe,GAAG,IAAI,kCAAe,CAAC,GAAG,CAAC,CAAC;YACjD,MAAM,IAAI,GAAG,MAAM,IAAA,gCAAc,EAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAChD,IAAI,CAAC,IAAI;gBAAE,OAAO,IAAA,0BAAiB,EAAC,eAAe,CAAC,CAAC;YAErD,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACnD,MAAM,OAAO,GAAG,IAAI,8BAAa,EAAE,CAAC;YACpC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YACzE,OAAO,eAAe,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QACtD,CAAC;QACD,UAAU,EAAE,CAAC,IAAA,2BAAc,GAAE,EAAE,IAAA,2BAAc,GAAE,EAAE,IAAA,mCAAqB,GAAE,CAAC;QACzE,WAAW,EAAE,wCAAwC;KACtD;IAED,6EAA6E;IAC7E;QACE,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;YAC5C,MAAM,eAAe,GAAG,IAAI,kCAAe,CAAC,GAAG,CAAC,CAAC;YACjD,MAAM,IAAI,GAAG,MAAM,IAAA,gCAAc,EAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAChD,IAAI,CAAC,IAAI;gBAAE,OAAO,IAAA,0BAAiB,EAAC,eAAe,CAAC,CAAC;YAErD,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACnD,MAAM,OAAO,GAAG,IAAI,8BAAa,EAAE,CAAC;YACpC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAC/D,OAAO,eAAe,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QACtD,CAAC;QACD,UAAU,EAAE,CAAC,IAAA,2BAAc,GAAE,CAAC;QAC9B,WAAW,EAAE,qBAAqB;KACnC;IAED,8EAA8E;IAC9E;QACE,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,QAAQ;QAChB,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;YAC5C,MAAM,eAAe,GAAG,IAAI,kCAAe,CAAC,GAAG,CAAC,CAAC;YACjD,MAAM,IAAI,GAAG,MAAM,IAAA,gCAAc,EAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAChD,IAAI,CAAC,IAAI;gBAAE,OAAO,IAAA,0BAAiB,EAAC,eAAe,CAAC,CAAC;YAErD,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACvC,MAAM,QAAQ,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAClC,MAAM,QAAQ,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAClC,MAAM,OAAO,GAAG,IAAI,8BAAa,EAAE,CAAC;YACpC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAC3E,OAAO,eAAe,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QACtD,CAAC;QACD,UAAU,EAAE,CAAC,IAAA,2BAAc,GAAE,EAAE,IAAA,2BAAc,GAAE,CAAC;QAChD,WAAW,EAAE,wBAAwB;KACtC;IAED,8EAA8E;IAC9E;QACE,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;YAC5C,MAAM,eAAe,GAAG,IAAI,kCAAe,CAAC,GAAG,CAAC,CAAC;YACjD,MAAM,IAAI,GAAG,MAAM,IAAA,gCAAc,EAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAChD,IAAI,CAAC,IAAI;gBAAE,OAAO,IAAA,0BAAiB,EAAC,eAAe,CAAC,CAAC;YAErD,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACvC,MAAM,QAAQ,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAClC,MAAM,QAAQ,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAClC,MAAM,OAAO,GAAG,IAAI,8BAAa,EAAE,CAAC;YACpC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAC3E,OAAO,eAAe,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QACtD,CAAC;QACD,UAAU,EAAE,CAAC,IAAA,2BAAc,GAAE,EAAE,IAAA,2BAAc,GAAE,EAAE,IAAA,mCAAqB,GAAE,CAAC;QACzE,WAAW,EAAE,kCAAkC;KAChD;CACF,CAAC"}
+{"version":3,"file":"tenant-domains.js","sourceRoot":"","sources":["../../../src/lib/routes/tenant-domains.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAGhD,MAAM,OAAO,GAAG,oCAAoC,CAAC;AACrD,MAAM,SAAS,GAAG,6CAA6C,CAAC;AAChE,MAAM,SAAS,GAAG,qDAAqD,CAAC;AAExE,MAAM,CAAC,MAAM,kBAAkB,GAAY;IACzC,6EAA6E;IAC7E;QACE,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;YAC5C,MAAM,eAAe,GAAG,IAAI,eAAe,CAAC,GAAG,CAAC,CAAC;YACjD,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAChD,IAAI,CAAC,IAAI;gBAAE,OAAO,iBAAiB,CAAC,eAAe,CAAC,CAAC;YAErD,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACnD,MAAM,OAAO,GAAG,IAAI,aAAa,EAAE,CAAC;YACpC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YACzE,OAAO,eAAe,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QACtD,CAAC;QACD,UAAU,EAAE,CAAC,cAAc,EAAE,EAAE,cAAc,EAAE,EAAE,qBAAqB,EAAE,CAAC;QACzE,WAAW,EAAE,wCAAwC;KACtD;IAED,6EAA6E;IAC7E;QACE,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;YAC5C,MAAM,eAAe,GAAG,IAAI,eAAe,CAAC,GAAG,CAAC,CAAC;YACjD,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAChD,IAAI,CAAC,IAAI;gBAAE,OAAO,iBAAiB,CAAC,eAAe,CAAC,CAAC;YAErD,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACnD,MAAM,OAAO,GAAG,IAAI,aAAa,EAAE,CAAC;YACpC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAC/D,OAAO,eAAe,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QACtD,CAAC;QACD,UAAU,EAAE,CAAC,cAAc,EAAE,CAAC;QAC9B,WAAW,EAAE,qBAAqB;KACnC;IAED,8EAA8E;IAC9E;QACE,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,QAAQ;QAChB,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;YAC5C,MAAM,eAAe,GAAG,IAAI,eAAe,CAAC,GAAG,CAAC,CAAC;YACjD,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAChD,IAAI,CAAC,IAAI;gBAAE,OAAO,iBAAiB,CAAC,eAAe,CAAC,CAAC;YAErD,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACvC,MAAM,QAAQ,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAClC,MAAM,QAAQ,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAClC,MAAM,OAAO,GAAG,IAAI,aAAa,EAAE,CAAC;YACpC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAC3E,OAAO,eAAe,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QACtD,CAAC;QACD,UAAU,EAAE,CAAC,cAAc,EAAE,EAAE,cAAc,EAAE,CAAC;QAChD,WAAW,EAAE,wBAAwB;KACtC;IAED,8EAA8E;IAC9E;QACE,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;YAC5C,MAAM,eAAe,GAAG,IAAI,eAAe,CAAC,GAAG,CAAC,CAAC;YACjD,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAChD,IAAI,CAAC,IAAI;gBAAE,OAAO,iBAAiB,CAAC,eAAe,CAAC,CAAC;YAErD,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACvC,MAAM,QAAQ,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAClC,MAAM,QAAQ,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAClC,MAAM,OAAO,GAAG,IAAI,aAAa,EAAE,CAAC;YACpC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAC3E,OAAO,eAAe,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QACtD,CAAC;QACD,UAAU,EAAE,CAAC,cAAc,EAAE,EAAE,cAAc,EAAE,EAAE,qBAAqB,EAAE,CAAC;QACzE,WAAW,EAAE,kCAAkC;KAChD;CACF,CAAC"}

package/dist/lib/routes/tenant-idp.d.ts

@@ -1,3 +1,3 @@
-import type { Route } from "./types";
+import type { Route } from "./types.js";
 export declare const tenantIdpRoutes: Route[];
 //# sourceMappingURL=tenant-idp.d.ts.map

package/dist/lib/routes/tenant-idp.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tenant-idp.d.ts","sourceRoot":"","sources":["../../../src/lib/routes/tenant-idp.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAIrC,eAAO,MAAM,eAAe,EAAE,KAAK,EA6DlC,CAAC"}
+{"version":3,"file":"tenant-idp.d.ts","sourceRoot":"","sources":["../../../src/lib/routes/tenant-idp.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAIxC,eAAO,MAAM,eAAe,EAAE,KAAK,EA6DlC,CAAC"}