@de-otio/trellis 0.7.1 → 0.10.0

package/dist/lib/extension-context.js.map

@@ -1 +1 @@
-{"version":3,"file":"extension-context.js","sourceRoot":"","sources":["../../src/lib/extension-context.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AA4CH,wDAwBC;AA1DD;;;;;;GAMG;AACH,SAAS,0BAA0B,CAAC,KAAmB;IACrD,OAAO;QACL,eAAe,EAAE,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC;QAClD,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC;QACpD,oBAAoB,EAAE,KAAK,CAAC,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC;QAC5D,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC;QACpD,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC;QACtD,cAAc,EAAE,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC;QAChD,eAAe,EAAE,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC;QAClD,eAAe,EAAE,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC;QAClD,qBAAqB,EAAE,KAAK,CAAC,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC;QAC9D,sBAAsB,EAAE,KAAK,CAAC,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC;QAChE,6BAA6B,EAAE,KAAK,CAAC,6BAA6B,CAAC,IAAI,CAAC,KAAK,CAAC;QAC9E,eAAe,EAAE,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC;QAClD,cAAc,EAAE,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC;QAChD,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC;KACzD,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,sBAAsB,CACpC,GAAqB,EACrB,GAAQ,EACR,MAAW,EACX,KAAoB;IAEpB,OAAO;QACL,EAAE,EAAE;YACF,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;YAC3C,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;YAC7C,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B;QACD,YAAY,EAAE,KAAK,CAAC,CAAC,CAAC,0BAA0B,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS;QACnE,SAAS,EAAE,GAAG,CAAC,UAAU,IAAI,EAAE;QAC/B,MAAM,EAAE,GAAG,CAAC,OAAO,IAAI,EAAE;QACzB,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,KAAK;QACzB,MAAM,EAAE,sBAAsB,CAAC,GAAG,CAAC;KACpC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,sBAAsB,CAC7B,GAAqB;IAErB,IAAI,CAAC,GAAG,CAAC,YAAY,IAAI,CAAC,CAAC,OAAO,IAAI,GAAG,CAAC,YAAY,CAAC;QAAE,OAAO,EAAE,CAAC;IACnE,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAE,GAAG,CAAC,YAAoB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/D,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC;IACxD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"extension-context.js","sourceRoot":"","sources":["../../src/lib/extension-context.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAUH;;;;;;GAMG;AACH,SAAS,0BAA0B,CAAC,KAAmB;IACrD,OAAO;QACL,eAAe,EAAE,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC;QAClD,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC;QACpD,oBAAoB,EAAE,KAAK,CAAC,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC;QAC5D,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC;QACpD,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC;QACtD,cAAc,EAAE,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC;QAChD,eAAe,EAAE,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC;QAClD,eAAe,EAAE,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC;QAClD,qBAAqB,EAAE,KAAK,CAAC,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC;QAC9D,sBAAsB,EAAE,KAAK,CAAC,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC;QAChE,6BAA6B,EAAE,KAAK,CAAC,6BAA6B,CAAC,IAAI,CAAC,KAAK,CAAC;QAC9E,eAAe,EAAE,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC;QAClD,cAAc,EAAE,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC;QAChD,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC;KACzD,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CACpC,GAAqB,EACrB,GAAQ,EACR,MAAW,EACX,KAAoB;IAEpB,OAAO;QACL,EAAE,EAAE;YACF,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;YAC3C,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;YAC7C,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B;QACD,YAAY,EAAE,KAAK,CAAC,CAAC,CAAC,0BAA0B,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS;QACnE,SAAS,EAAE,GAAG,CAAC,UAAU,IAAI,EAAE;QAC/B,MAAM,EAAE,GAAG,CAAC,OAAO,IAAI,EAAE;QACzB,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,KAAK;QACzB,MAAM,EAAE,sBAAsB,CAAC,GAAG,CAAC;KACpC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,sBAAsB,CAC7B,GAAqB;IAErB,IAAI,CAAC,GAAG,CAAC,YAAY,IAAI,CAAC,CAAC,OAAO,IAAI,GAAG,CAAC,YAAY,CAAC;QAAE,OAAO,EAAE,CAAC;IACnE,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAE,GAAG,CAAC,YAAoB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/D,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC;IACxD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/lib/extension-route-wrapper.d.ts

@@ -9,7 +9,7 @@
  * - Scoped ExtensionContext (no secrets)
  */
 import type { TrellisExtension, ExtensionRouteDefinition } from "@de-otio/trellis-extension-api";
-import type { Route } from "./routes/types";
+import type { Route } from "./routes/types.js";
 /**
  * Wrap an extension route definition with core HTTP infrastructure.
  */

package/dist/lib/extension-route-wrapper.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"extension-route-wrapper.d.ts","sourceRoot":"","sources":["../../src/lib/extension-route-wrapper.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EACV,gBAAgB,EAChB,wBAAwB,EACzB,MAAM,gCAAgC,CAAC;AACxC,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAS5C;;GAEG;AACH,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,gBAAgB,EACrB,QAAQ,EAAE,wBAAwB,GACjC,KAAK,CA4DP;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,gBAAgB,GACpB,KAAK,EAAE,CAGT"}
+{"version":3,"file":"extension-route-wrapper.d.ts","sourceRoot":"","sources":["../../src/lib/extension-route-wrapper.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAC5B,wBAAwB,EACzB,MAAM,gCAAgC,CAAC;AACxC,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAQ/C;;GAEG;AACH,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,gBAAgB,EACrB,QAAQ,EAAE,wBAAwB,GACjC,KAAK,CA4DP;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,gBAAgB,GACpB,KAAK,EAAE,CAGT"}

package/dist/lib/extension-route-wrapper.js

@@ -1,4 +1,3 @@
-"use strict";
 /**
  * Extension Route Wrapper
  *
@@ -9,82 +8,45 @@
  * - Error handling and logging
  * - Scoped ExtensionContext (no secrets)
  */
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.wrapExtensionRoute = wrapExtensionRoute;
-exports.wrapExtensionRoutes = wrapExtensionRoutes;
-const middleware_1 = require("./middleware");
-const security_headers_1 = require("./security-headers");
-const session_manager_1 = require("./session-manager");
-const secret_resolver_1 = require("./secret-resolver");
-const logger_1 = require("./logger");
-const extension_context_1 = require("./extension-context");
+import { corsMiddleware, csrfMiddleware } from "./middleware.js";
+import { SecurityHeaders } from "./security-headers.js";
+import { SessionManager } from "./session-cookie.js";
+import { getLogger } from "./logger.js";
+import { createExtensionContext } from "./extension-context.js";
 /**
  * Wrap an extension route definition with core HTTP infrastructure.
  */
-function wrapExtensionRoute(ext, routeDef) {
+export function wrapExtensionRoute(ext, routeDef) {
     const authLevel = routeDef.auth ?? "required";
     return {
         path: `/api/ext/${ext.id}/${routeDef.path}`,
         method: routeDef.method,
         middleware: authLevel === "none"
-            ? [(0, middleware_1.corsMiddleware)()]
-            : [(0, middleware_1.corsMiddleware)(), (0, middleware_1.csrfMiddleware)()],
+            ? [corsMiddleware()]
+            : [corsMiddleware(), csrfMiddleware()],
         description: routeDef.description,
         handler: async (request, env, { params, requestContext }) => {
-            const securityHeaders = new security_headers_1.SecurityHeaders(env);
-            const logger = logger_1.Logger.getInstance(env);
+            const securityHeaders = new SecurityHeaders(env);
+            const logger = getLogger();
             // Auth check — enforced by core
             let session = null;
             if (authLevel !== "none") {
-                const sessionManager = new session_manager_1.SessionManager();
-                const secret = secret_resolver_1.Secrets.getSessionSecret(env);
+                const sessionManager = new SessionManager();
+                const secret = env.SESSION_SECRET;
                 session = await sessionManager.getSession(request, secret, env);
                 if (!session && authLevel === "required") {
                     return securityHeaders.createSecureResponse(JSON.stringify({ error: "Unauthorized" }), { status: 401, headers: { "content-type": "application/json" } });
                 }
             }
             // Build scoped context
-            const { sharedDatabaseConnectionManager } = await Promise.resolve().then(() => __importStar(require("./database-connection-manager")));
-            const { detectRegionSync } = await Promise.resolve().then(() => __importStar(require("./region-detection")));
-            const { createGraphServiceFromEnv } = await Promise.resolve().then(() => __importStar(require("./graph")));
+            const { sharedDatabaseConnectionManager } = await import("./database-connection-manager.js");
+            const { detectRegionSync } = await import("./region-detection.js");
+            const { createGraphServiceFromEnv } = await import("./graph/index.js");
             const region = detectRegionSync(request, env);
             const managed = sharedDatabaseConnectionManager.acquireClient(region, env);
             const prisma = managed.client;
             const graph = await createGraphServiceFromEnv(env);
-            const ctx = (0, extension_context_1.createExtensionContext)(ext, env, prisma, graph);
+            const ctx = createExtensionContext(ext, env, prisma, graph);
             try {
                 const result = await routeDef.handle(request, params, session, ctx);
                 return securityHeaders.addSecurityHeaders(new Response(JSON.stringify(result.body), {
@@ -105,7 +67,7 @@ function wrapExtensionRoute(ext, routeDef) {
 /**
  * Wrap all extension routes for a given extension.
  */
-function wrapExtensionRoutes(ext) {
+export function wrapExtensionRoutes(ext) {
     if (!ext.extensionRoutes)
         return [];
     return ext.extensionRoutes.map((r) => wrapExtensionRoute(ext, r));

package/dist/lib/extension-route-wrapper.js.map

@@ -1 +1 @@
-{"version":3,"file":"extension-route-wrapper.js","sourceRoot":"","sources":["../../src/lib/extension-route-wrapper.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkBH,gDA+DC;AAKD,kDAKC;AApFD,6CAA8D;AAC9D,yDAAqD;AACrD,uDAAmD;AACnD,uDAA4C;AAC5C,qCAAkC;AAClC,2DAA6D;AAG7D;;GAEG;AACH,SAAgB,kBAAkB,CAChC,GAAqB,EACrB,QAAkC;IAElC,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,IAAI,UAAU,CAAC;IAE9C,OAAO;QACL,IAAI,EAAE,YAAY,GAAG,CAAC,EAAE,IAAI,QAAQ,CAAC,IAAI,EAAE;QAC3C,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,UAAU,EAAE,SAAS,KAAK,MAAM;YAC9B,CAAC,CAAC,CAAC,IAAA,2BAAc,GAAE,CAAC;YACpB,CAAC,CAAC,CAAC,IAAA,2BAAc,GAAE,EAAE,IAAA,2BAAc,GAAE,CAAC;QACxC,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,EAAE,EAAE;YAC1D,MAAM,eAAe,GAAG,IAAI,kCAAe,CAAC,GAAG,CAAC,CAAC;YACjD,MAAM,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YAEvC,gCAAgC;YAChC,IAAI,OAAO,GAAQ,IAAI,CAAC;YACxB,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;gBACzB,MAAM,cAAc,GAAG,IAAI,gCAAc,EAAE,CAAC;gBAC5C,MAAM,MAAM,GAAG,yBAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;gBAC7C,OAAO,GAAG,MAAM,cAAc,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;gBAChE,IAAI,CAAC,OAAO,IAAI,SAAS,KAAK,UAAU,EAAE,CAAC;oBACzC,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,EACzC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,uBAAuB;YACvB,MAAM,EAAE,+BAA+B,EAAE,GAAG,wDAAa,+BAA+B,GAAC,CAAC;YAC1F,MAAM,EAAE,gBAAgB,EAAE,GAAG,wDAAa,oBAAoB,GAAC,CAAC;YAChE,MAAM,EAAE,yBAAyB,EAAE,GAAG,wDAAa,SAAS,GAAC,CAAC;YAC9D,MAAM,MAAM,GAAG,gBAAgB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAC9C,MAAM,OAAO,GAAG,+BAA+B,CAAC,aAAa,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAC3E,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;YAC9B,MAAM,KAAK,GAAG,MAAM,yBAAyB,CAAC,GAAG,CAAC,CAAC;YAEnD,MAAM,GAAG,GAAG,IAAA,0CAAsB,EAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;YAE5D,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;gBAEpE,OAAO,eAAe,CAAC,kBAAkB,CACvC,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE;oBACxC,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,OAAO,EAAE;wBACP,cAAc,EAAE,kBAAkB;wBAClC,GAAG,MAAM,CAAC,OAAO;qBAClB;iBACF,CAAC,CACH,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CAAC,cAAc,GAAG,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,CAAC;gBAC1D,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,EAClD,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;YACJ,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAgB,mBAAmB,CACjC,GAAqB;IAErB,IAAI,CAAC,GAAG,CAAC,eAAe;QAAE,OAAO,EAAE,CAAC;IACpC,OAAO,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;AACzE,CAAC"}
+{"version":3,"file":"extension-route-wrapper.js","sourceRoot":"","sources":["../../src/lib/extension-route-wrapper.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAMH,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjE,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,SAAS,EAAU,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAGhE;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAChC,GAAqB,EACrB,QAAkC;IAElC,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,IAAI,UAAU,CAAC;IAE9C,OAAO;QACL,IAAI,EAAE,YAAY,GAAG,CAAC,EAAE,IAAI,QAAQ,CAAC,IAAI,EAAE;QAC3C,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,UAAU,EAAE,SAAS,KAAK,MAAM;YAC9B,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC;YACpB,CAAC,CAAC,CAAC,cAAc,EAAE,EAAE,cAAc,EAAE,CAAC;QACxC,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,EAAE,EAAE;YAC1D,MAAM,eAAe,GAAG,IAAI,eAAe,CAAC,GAAG,CAAC,CAAC;YACjD,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;YAE3B,gCAAgC;YAChC,IAAI,OAAO,GAAQ,IAAI,CAAC;YACxB,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;gBACzB,MAAM,cAAc,GAAG,IAAI,cAAc,EAAE,CAAC;gBAC5C,MAAM,MAAM,GAAG,GAAG,CAAC,cAAc,CAAC;gBAClC,OAAO,GAAG,MAAM,cAAc,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;gBAChE,IAAI,CAAC,OAAO,IAAI,SAAS,KAAK,UAAU,EAAE,CAAC;oBACzC,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,EACzC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,uBAAuB;YACvB,MAAM,EAAE,+BAA+B,EAAE,GAAG,MAAM,MAAM,CAAC,kCAAkC,CAAC,CAAC;YAC7F,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;YACnE,MAAM,EAAE,yBAAyB,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;YACvE,MAAM,MAAM,GAAG,gBAAgB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAC9C,MAAM,OAAO,GAAG,+BAA+B,CAAC,aAAa,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAC3E,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;YAC9B,MAAM,KAAK,GAAG,MAAM,yBAAyB,CAAC,GAAG,CAAC,CAAC;YAEnD,MAAM,GAAG,GAAG,sBAAsB,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;YAE5D,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;gBAEpE,OAAO,eAAe,CAAC,kBAAkB,CACvC,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE;oBACxC,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,OAAO,EAAE;wBACP,cAAc,EAAE,kBAAkB;wBAClC,GAAG,MAAM,CAAC,OAAO;qBAClB;iBACF,CAAC,CACH,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CAAC,cAAc,GAAG,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,CAAC;gBAC1D,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,EAClD,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;YACJ,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CACjC,GAAqB;IAErB,IAAI,CAAC,GAAG,CAAC,eAAe;QAAE,OAAO,EAAE,CAAC;IACpC,OAAO,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;AACzE,CAAC"}

package/dist/lib/extension-validator.js

@@ -1,4 +1,3 @@
-"use strict";
 /**
  * Extension Validator
  *
@@ -8,9 +7,7 @@
  * - Routes don't shadow core endpoints
  * - Warns about routes without auth middleware
  */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.validateExtensions = validateExtensions;
-const logger_1 = require("./logger");
+import { getLogger } from "./logger.js";
 const RESERVED_IDS = ["user", "admin", "system", "internal", ""];
 const RESERVED_ROUTE_PREFIXES = [
     "/api/auth",
@@ -19,8 +16,8 @@ const RESERVED_ROUTE_PREFIXES = [
     "/.well-known",
 ];
 const ID_PATTERN = /^[a-z][a-z0-9_-]{1,31}$/;
-const logger = logger_1.Logger.getInstance();
-function validateExtensions(extensions) {
+const logger = getLogger();
+export function validateExtensions(extensions) {
     const seen = new Set();
     for (const ext of extensions) {
         // Validate ID format

package/dist/lib/extension-validator.js.map

@@ -1 +1 @@
-{"version":3,"file":"extension-validator.js","sourceRoot":"","sources":["../../src/lib/extension-validator.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;AAgBH,gDAqDC;AAlED,qCAAkC;AAElC,MAAM,YAAY,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;AACjE,MAAM,uBAAuB,GAAG;IAC9B,WAAW;IACX,YAAY;IACZ,eAAe;IACf,cAAc;CACf,CAAC;AACF,MAAM,UAAU,GAAG,yBAAyB,CAAC;AAE7C,MAAM,MAAM,GAAG,eAAM,CAAC,WAAW,EAAE,CAAC;AAEpC,SAAgB,kBAAkB,CAChC,UAA8B;IAE9B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAE/B,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,qBAAqB;QACrB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CACb,iBAAiB,GAAG,CAAC,EAAE,8CAA8C,CACtE,CAAC;QACJ,CAAC;QACD,IAAI,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,iBAAiB,GAAG,CAAC,EAAE,eAAe,CAAC,CAAC;QAC1D,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,2BAA2B,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAEjB,8CAA8C;QAC9C,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YAC/B,MAAM,IAAI,GACR,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;gBAC5B,CAAC,CAAC,KAAK,CAAC,IAAI;gBACZ,CAAC,CAAC,KAAK,CAAC,IAAI,YAAY,MAAM;oBAC5B,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM;oBACnB,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC3B,KAAK,MAAM,MAAM,IAAI,uBAAuB,EAAE,CAAC;gBAC7C,IACE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;oBACvB,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,EAC7C,CAAC;oBACD,MAAM,IAAI,KAAK,CACb,cAAc,GAAG,CAAC,EAAE,YAAY,IAAI,qCAAqC,MAAM,GAAG,CACnF,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,4CAA4C;QAC5C,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YAC/B,MAAM,OAAO,GAAG,KAAK,CAAC,UAAU,EAAE,IAAI,CACpC,CAAC,CAAM,EAAE,EAAE,CACT,CAAC,CAAC,IAAI,KAAK,gBAAgB,IAAI,CAAC,CAAC,IAAI,KAAK,gBAAgB,CAC7D,CAAC;YACF,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,CAAC,IAAI,CACT,cAAc,GAAG,CAAC,EAAE,YAAY,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,IAAI,0BAA0B,CAC1F,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC"}
+{"version":3,"file":"extension-validator.js","sourceRoot":"","sources":["../../src/lib/extension-validator.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EAAE,SAAS,EAAU,MAAM,aAAa,CAAC;AAEhD,MAAM,YAAY,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;AACjE,MAAM,uBAAuB,GAAG;IAC9B,WAAW;IACX,YAAY;IACZ,eAAe;IACf,cAAc;CACf,CAAC;AACF,MAAM,UAAU,GAAG,yBAAyB,CAAC;AAE7C,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;AAE3B,MAAM,UAAU,kBAAkB,CAChC,UAA8B;IAE9B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAE/B,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,qBAAqB;QACrB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CACb,iBAAiB,GAAG,CAAC,EAAE,8CAA8C,CACtE,CAAC;QACJ,CAAC;QACD,IAAI,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,iBAAiB,GAAG,CAAC,EAAE,eAAe,CAAC,CAAC;QAC1D,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,2BAA2B,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAEjB,8CAA8C;QAC9C,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YAC/B,MAAM,IAAI,GACR,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;gBAC5B,CAAC,CAAC,KAAK,CAAC,IAAI;gBACZ,CAAC,CAAC,KAAK,CAAC,IAAI,YAAY,MAAM;oBAC5B,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM;oBACnB,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC3B,KAAK,MAAM,MAAM,IAAI,uBAAuB,EAAE,CAAC;gBAC7C,IACE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;oBACvB,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,EAC7C,CAAC;oBACD,MAAM,IAAI,KAAK,CACb,cAAc,GAAG,CAAC,EAAE,YAAY,IAAI,qCAAqC,MAAM,GAAG,CACnF,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,4CAA4C;QAC5C,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YAC/B,MAAM,OAAO,GAAG,KAAK,CAAC,UAAU,EAAE,IAAI,CACpC,CAAC,CAAM,EAAE,EAAE,CACT,CAAC,CAAC,IAAI,KAAK,gBAAgB,IAAI,CAAC,CAAC,IAAI,KAAK,gBAAgB,CAC7D,CAAC;YACF,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,CAAC,IAAI,CACT,cAAc,GAAG,CAAC,EAAE,YAAY,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,IAAI,0BAA0B,CAC1F,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/lib/feature-flags.d.ts

@@ -4,7 +4,7 @@
  * Provides feature flag structure for white-label support.
  * Now checks FeatureToggleService for dynamic control.
  */
-import { type LoggerEnv } from "./logger";
+import { type LoggerEnv } from "./logger.js";
 export interface FeatureFlags {
     posts: boolean;
     comments: boolean;
@@ -28,7 +28,10 @@ export declare class FeatureFlagsManager {
      * Checks FeatureToggleService for each feature flag.
      * Falls back to defaults if toggle doesn't exist.
      *
-     * @param tenantId - Optional tenant ID (not used in MVP, reserved for future)
+     * @param tenantId - Optional tenant ID. When provided, each flag resolves the
+     *                   tenant override first, falling back to the global row,
+     *                   then the coded default (P5). When omitted, resolution is
+     *                   global-only — unchanged from before.
      * @returns Feature flags object
      */
     getFeatureFlags(tenantId?: string): Promise<FeatureFlags>;

package/dist/lib/feature-flags.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"feature-flags.d.ts","sourceRoot":"","sources":["../../src/lib/feature-flags.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAU,KAAK,SAAS,EAAE,MAAM,UAAU,CAAC;AAElD,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,OAAO,CAAC;IACf,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,OAAO,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,OAAO,CAAC;IACpB,KAAK,EAAE,OAAO,CAAC;IACf,GAAG,EAAE,OAAO,CAAC;CACd;AAmBD;;GAEG;AACH,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,EAAE,CAAC,CAAM;IACjB,OAAO,CAAC,GAAG,CAAC,CAAY;IACxB,OAAO,CAAC,MAAM,CAAS;gBAEX,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,SAAS;IAMrC;;;;;;;;OAQG;IACG,eAAe,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAkD/D;;;;;OAKG;IACH,mBAAmB,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,YAAY;CAGrD;AAED;;;GAGG;AACH,wBAAsB,eAAe,CACnC,QAAQ,CAAC,EAAE,MAAM,EACjB,EAAE,CAAC,EAAE,GAAG,EACR,GAAG,CAAC,EAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GAC9C,OAAO,CAAC,YAAY,CAAC,CAEvB;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,YAAY,CAEnE"}
+{"version":3,"file":"feature-flags.d.ts","sourceRoot":"","sources":["../../src/lib/feature-flags.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAqB,KAAK,SAAS,EAAE,MAAM,aAAa,CAAC;AAEhE,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,OAAO,CAAC;IACf,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,OAAO,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,OAAO,CAAC;IACpB,KAAK,EAAE,OAAO,CAAC;IACf,GAAG,EAAE,OAAO,CAAC;CACd;AAmBD;;GAEG;AACH,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,EAAE,CAAC,CAAM;IACjB,OAAO,CAAC,GAAG,CAAC,CAAY;IACxB,OAAO,CAAC,MAAM,CAAS;gBAEX,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,SAAS;IAMrC;;;;;;;;;;;OAWG;IACG,eAAe,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAqD/D;;;;;OAKG;IACH,mBAAmB,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,YAAY;CAGrD;AAED;;;GAGG;AACH,wBAAsB,eAAe,CACnC,QAAQ,CAAC,EAAE,MAAM,EACjB,EAAE,CAAC,EAAE,GAAG,EACR,GAAG,CAAC,EAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GAC9C,OAAO,CAAC,YAAY,CAAC,CAEvB;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,YAAY,CAEnE"}

package/dist/lib/feature-flags.js

@@ -1,48 +1,10 @@
-"use strict";
 /**
  * Feature Flags
  *
  * Provides feature flag structure for white-label support.
  * Now checks FeatureToggleService for dynamic control.
  */
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.FeatureFlagsManager = void 0;
-exports.getFeatureFlags = getFeatureFlags;
-exports.getFeatureFlagsSync = getFeatureFlagsSync;
-const logger_1 = require("./logger");
+import { getLogger } from "./logger.js";
 /**
  * Default feature flags (general defaults - should be false for safety)
  *
@@ -62,14 +24,14 @@ const DEFAULT_FEATURES = {
 /**
  * Feature Flags Manager class
  */
-class FeatureFlagsManager {
+export class FeatureFlagsManager {
     db;
     env;
     logger;
     constructor(db, env) {
         this.db = db;
         this.env = env;
-        this.logger = logger_1.Logger.getInstance(env);
+        this.logger = getLogger();
     }
     /**
      * Get feature flags for a tenant
@@ -77,7 +39,10 @@ class FeatureFlagsManager {
      * Checks FeatureToggleService for each feature flag.
      * Falls back to defaults if toggle doesn't exist.
      *
-     * @param tenantId - Optional tenant ID (not used in MVP, reserved for future)
+     * @param tenantId - Optional tenant ID. When provided, each flag resolves the
+     *                   tenant override first, falling back to the global row,
+     *                   then the coded default (P5). When omitted, resolution is
+     *                   global-only — unchanged from before.
      * @returns Feature flags object
      */
     async getFeatureFlags(tenantId) {
@@ -86,11 +51,14 @@ class FeatureFlagsManager {
             return DEFAULT_FEATURES;
         }
         try {
-            const { FeatureToggleService } = await Promise.resolve().then(() => __importStar(require("./feature-toggle-service")));
+            const { FeatureToggleService } = await import("./feature-toggle-service.js");
             const toggleService = new FeatureToggleService(this.db);
-            // Helper function to check toggle or use default
+            // Helper function to check toggle or use default. Threads the optional
+            // tenantId through so a tenant override beats the global row, which beats
+            // the coded default. When tenantId is undefined, getToggle stays on the
+            // global (cached) path.
             const checkToggle = async (key, defaultValue) => {
-                const toggle = await toggleService.getToggle(key);
+                const toggle = await toggleService.getToggle(key, tenantId);
                 // If toggle doesn't exist, use default; otherwise use toggle value
                 return toggle === null ? defaultValue : toggle.enabled;
             };
@@ -122,19 +90,18 @@ class FeatureFlagsManager {
         return DEFAULT_FEATURES;
     }
 }
-exports.FeatureFlagsManager = FeatureFlagsManager;
 /**
  * Legacy function for backward compatibility
  * @deprecated Use new FeatureFlagsManager class instead
  */
-async function getFeatureFlags(tenantId, db, env) {
+export async function getFeatureFlags(tenantId, db, env) {
     return new FeatureFlagsManager(db, env).getFeatureFlags(tenantId);
 }
 /**
  * Legacy function for backward compatibility
  * @deprecated Use new FeatureFlagsManager class instead
  */
-function getFeatureFlagsSync(tenantId) {
+export function getFeatureFlagsSync(tenantId) {
     return DEFAULT_FEATURES;
 }
 //# sourceMappingURL=feature-flags.js.map

package/dist/lib/feature-flags.js.map

@@ -1 +1 @@
-{"version":3,"file":"feature-flags.js","sourceRoot":"","sources":["../../src/lib/feature-flags.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuHH,0CAMC;AAMD,kDAEC;AAnID,qCAAkD;AAYlD;;;;;;GAMG;AACH,MAAM,gBAAgB,GAAiB;IACrC,KAAK,EAAE,KAAK,EAAE,gCAAgC;IAC9C,QAAQ,EAAE,KAAK,EAAE,gCAAgC;IACjD,QAAQ,EAAE,KAAK,EAAE,gCAAgC;IACjD,OAAO,EAAE,KAAK,EAAE,gCAAgC;IAChD,UAAU,EAAE,KAAK,EAAE,gCAAgC;IACnD,KAAK,EAAE,KAAK,EAAE,gCAAgC;IAC9C,GAAG,EAAE,KAAK,EAAE,gCAAgC;CAC7C,CAAC;AAEF;;GAEG;AACH,MAAa,mBAAmB;IACtB,EAAE,CAAO;IACT,GAAG,CAAa;IAChB,MAAM,CAAS;IAEvB,YAAY,EAAQ,EAAE,GAAe;QACnC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACxC,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,eAAe,CAAC,QAAiB;QACrC,oEAAoE;QACpE,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,OAAO,gBAAgB,CAAC;QAC1B,CAAC;QAED,IAAI,CAAC;YACH,MAAM,EAAE,oBAAoB,EAAE,GAAG,wDAAa,0BAA0B,GAAC,CAAC;YAC1E,MAAM,aAAa,GAAG,IAAI,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAExD,iDAAiD;YACjD,MAAM,WAAW,GAAG,KAAK,EACvB,GAAW,EACX,YAAqB,EACH,EAAE;gBACpB,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBAClD,mEAAmE;gBACnE,OAAO,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;YACzD,CAAC,CAAC;YAEF,4BAA4B;YAC5B,kDAAkD;YAClD,OAAO;gBACL,KAAK,EAAE,MAAM,WAAW,CAAC,eAAe,EAAE,gBAAgB,CAAC,KAAK,CAAC;gBACjE,QAAQ,EAAE,MAAM,WAAW,CACzB,kBAAkB,EAClB,gBAAgB,CAAC,QAAQ,CAC1B;gBACD,QAAQ,EAAE,MAAM,WAAW,CACzB,yBAAyB,EACzB,gBAAgB,CAAC,QAAQ,CAC1B;gBACD,OAAO,EAAE,MAAM,WAAW,CAAC,iBAAiB,EAAE,gBAAgB,CAAC,OAAO,CAAC;gBACvE,UAAU,EAAE,MAAM,WAAW,CAC3B,oBAAoB,EACpB,gBAAgB,CAAC,UAAU,CAC5B;gBACD,KAAK,EAAE,MAAM,WAAW,CAAC,eAAe,EAAE,gBAAgB,CAAC,KAAK,CAAC;gBACjE,GAAG,EAAE,MAAM,WAAW,CAAC,aAAa,EAAE,gBAAgB,CAAC,GAAG,CAAC;aAC5D,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,gDAAgD,EAChD,KAAK,CACN,CAAC;YACF,iCAAiC;YACjC,OAAO,gBAAgB,CAAC;QAC1B,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,mBAAmB,CAAC,QAAiB;QACnC,OAAO,gBAAgB,CAAC;IAC1B,CAAC;CACF;AA/ED,kDA+EC;AAED;;;GAGG;AACI,KAAK,UAAU,eAAe,CACnC,QAAiB,EACjB,EAAQ,EACR,GAA+C;IAE/C,OAAO,IAAI,mBAAmB,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;AACpE,CAAC;AAED;;;GAGG;AACH,SAAgB,mBAAmB,CAAC,QAAiB;IACnD,OAAO,gBAAgB,CAAC;AAC1B,CAAC"}
+{"version":3,"file":"feature-flags.js","sourceRoot":"","sources":["../../src/lib/feature-flags.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,SAAS,EAA0B,MAAM,aAAa,CAAC;AAYhE;;;;;;GAMG;AACH,MAAM,gBAAgB,GAAiB;IACrC,KAAK,EAAE,KAAK,EAAE,gCAAgC;IAC9C,QAAQ,EAAE,KAAK,EAAE,gCAAgC;IACjD,QAAQ,EAAE,KAAK,EAAE,gCAAgC;IACjD,OAAO,EAAE,KAAK,EAAE,gCAAgC;IAChD,UAAU,EAAE,KAAK,EAAE,gCAAgC;IACnD,KAAK,EAAE,KAAK,EAAE,gCAAgC;IAC9C,GAAG,EAAE,KAAK,EAAE,gCAAgC;CAC7C,CAAC;AAEF;;GAEG;AACH,MAAM,OAAO,mBAAmB;IACtB,EAAE,CAAO;IACT,GAAG,CAAa;IAChB,MAAM,CAAS;IAEvB,YAAY,EAAQ,EAAE,GAAe;QACnC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;IAC5B,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,eAAe,CAAC,QAAiB;QACrC,oEAAoE;QACpE,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,OAAO,gBAAgB,CAAC;QAC1B,CAAC;QAED,IAAI,CAAC;YACH,MAAM,EAAE,oBAAoB,EAAE,GAAG,MAAM,MAAM,CAAC,6BAA6B,CAAC,CAAC;YAC7E,MAAM,aAAa,GAAG,IAAI,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAExD,uEAAuE;YACvE,0EAA0E;YAC1E,wEAAwE;YACxE,wBAAwB;YACxB,MAAM,WAAW,GAAG,KAAK,EACvB,GAAW,EACX,YAAqB,EACH,EAAE;gBACpB,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,SAAS,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;gBAC5D,mEAAmE;gBACnE,OAAO,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;YACzD,CAAC,CAAC;YAEF,4BAA4B;YAC5B,kDAAkD;YAClD,OAAO;gBACL,KAAK,EAAE,MAAM,WAAW,CAAC,eAAe,EAAE,gBAAgB,CAAC,KAAK,CAAC;gBACjE,QAAQ,EAAE,MAAM,WAAW,CACzB,kBAAkB,EAClB,gBAAgB,CAAC,QAAQ,CAC1B;gBACD,QAAQ,EAAE,MAAM,WAAW,CACzB,yBAAyB,EACzB,gBAAgB,CAAC,QAAQ,CAC1B;gBACD,OAAO,EAAE,MAAM,WAAW,CAAC,iBAAiB,EAAE,gBAAgB,CAAC,OAAO,CAAC;gBACvE,UAAU,EAAE,MAAM,WAAW,CAC3B,oBAAoB,EACpB,gBAAgB,CAAC,UAAU,CAC5B;gBACD,KAAK,EAAE,MAAM,WAAW,CAAC,eAAe,EAAE,gBAAgB,CAAC,KAAK,CAAC;gBACjE,GAAG,EAAE,MAAM,WAAW,CAAC,aAAa,EAAE,gBAAgB,CAAC,GAAG,CAAC;aAC5D,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,gDAAgD,EAChD,KAAK,CACN,CAAC;YACF,iCAAiC;YACjC,OAAO,gBAAgB,CAAC;QAC1B,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,mBAAmB,CAAC,QAAiB;QACnC,OAAO,gBAAgB,CAAC;IAC1B,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,QAAiB,EACjB,EAAQ,EACR,GAA+C;IAE/C,OAAO,IAAI,mBAAmB,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;AACpE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAiB;IACnD,OAAO,gBAAgB,CAAC;AAC1B,CAAC"}

package/dist/lib/feature-toggle-global-client.d.ts

@@ -0,0 +1,6 @@
+import type { PrismaClient } from "@prisma/client";
+import type { PrismaFeatureToggleStore } from "@de-otio/saas-foundation/feature-toggles/prisma";
+type FoundationClient = ConstructorParameters<typeof PrismaFeatureToggleStore>[0];
+export declare function globalScopedFeatureToggleClient(prisma: PrismaClient): FoundationClient;
+export {};
+//# sourceMappingURL=feature-toggle-global-client.d.ts.map

package/dist/lib/feature-toggle-global-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"feature-toggle-global-client.d.ts","sourceRoot":"","sources":["../../src/lib/feature-toggle-global-client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,iDAAiD,CAAC;AA6ChG,KAAK,gBAAgB,GAAG,qBAAqB,CAAC,OAAO,wBAAwB,CAAC,CAAC,CAAC,CAAC,CAAC;AAElF,wBAAgB,+BAA+B,CAC7C,MAAM,EAAE,YAAY,GACnB,gBAAgB,CAmDlB"}

package/dist/lib/feature-toggle-global-client.js

@@ -0,0 +1,73 @@
+/**
+ * Global-scoped Prisma adapter for foundation's `PrismaFeatureToggleStore`.
+ *
+ * Surveillance-hardening Phase 0 (P1) replaced the standalone `@unique` on
+ * `FeatureToggle.key` with `@@unique([key, tenantId])` plus a partial
+ * global-unique index. That means `key` is no longer a valid `findUnique`
+ * selector, so foundation's store — which queries `where: { key }` — would
+ * fail at both the type and runtime level.
+ *
+ * This adapter preserves EXACTLY the pre-P1 behavior: every operation is
+ * scoped to GLOBAL rows (`tenant_id IS NULL`). Per-tenant resolution
+ * (tenant row → global row → default) is P5's job; it will supersede this
+ * adapter (or parameterize it by tenantId). Until then the platform behaves
+ * as a single global toggle namespace, which is what every current caller
+ * already assumes.
+ *
+ * The `key`-only compound selector can't be used for global rows via Prisma's
+ * `findUnique`/`upsert`/`delete`: SQL treats `(key, NULL)` as non-unique, so
+ * Prisma's compound `key_tenantId` where-input types `tenantId` as a non-null
+ * string. Global-row uniqueness is enforced by the partial index instead, and
+ * reached here via `findFirst` / manual upsert / `deleteMany`.
+ */
+const TOGGLE_SELECT = {
+    key: true,
+    enabled: true,
+    changedAt: true,
+    changedBy: true,
+    description: true,
+};
+export function globalScopedFeatureToggleClient(prisma) {
+    return {
+        featureToggle: {
+            async findUnique(args) {
+                return prisma.featureToggle.findFirst({
+                    where: { key: args.where.key, tenantId: null },
+                    select: TOGGLE_SELECT,
+                });
+            },
+            async findMany(args) {
+                return prisma.featureToggle.findMany({
+                    where: { tenantId: null },
+                    select: TOGGLE_SELECT,
+                    orderBy: args.orderBy,
+                });
+            },
+            async upsert(args) {
+                const existing = await prisma.featureToggle.findFirst({
+                    where: { key: args.where.key, tenantId: null },
+                    select: { id: true },
+                });
+                if (existing) {
+                    return prisma.featureToggle.update({
+                        where: { id: existing.id },
+                        data: args.update,
+                        select: TOGGLE_SELECT,
+                    });
+                }
+                return prisma.featureToggle.create({
+                    data: { ...args.create, tenantId: null },
+                    select: TOGGLE_SELECT,
+                });
+            },
+            async delete(args) {
+                // deleteMany returns a count and never throws P2025 — foundation's
+                // "record not found = no-op" semantics are preserved naturally.
+                return prisma.featureToggle.deleteMany({
+                    where: { key: args.where.key, tenantId: null },
+                });
+            },
+        },
+    };
+}
+//# sourceMappingURL=feature-toggle-global-client.js.map

package/dist/lib/feature-toggle-global-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"feature-toggle-global-client.js","sourceRoot":"","sources":["../../src/lib/feature-toggle-global-client.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,MAAM,aAAa,GAAG;IACpB,GAAG,EAAE,IAAI;IACT,OAAO,EAAE,IAAI;IACb,SAAS,EAAE,IAAI;IACf,SAAS,EAAE,IAAI;IACf,WAAW,EAAE,IAAI;CACT,CAAC;AAgBX,MAAM,UAAU,+BAA+B,CAC7C,MAAoB;IAEpB,OAAO;QACL,aAAa,EAAE;YACb,KAAK,CAAC,UAAU,CAAC,IAAgC;gBAC/C,OAAO,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC;oBACpC,KAAK,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE;oBAC9C,MAAM,EAAE,aAAa;iBACtB,CAAC,CAAC;YACL,CAAC;YAED,KAAK,CAAC,QAAQ,CAAC,IAEd;gBACC,OAAO,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC;oBACnC,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;oBACzB,MAAM,EAAE,aAAa;oBACrB,OAAO,EAAE,IAAI,CAAC,OAAO;iBACtB,CAAC,CAAC;YACL,CAAC;YAED,KAAK,CAAC,MAAM,CAAC,IAIZ;gBACC,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC;oBACpD,KAAK,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE;oBAC9C,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE;iBACrB,CAAC,CAAC;gBACH,IAAI,QAAQ,EAAE,CAAC;oBACb,OAAO,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC;wBACjC,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE;wBAC1B,IAAI,EAAE,IAAI,CAAC,MAAM;wBACjB,MAAM,EAAE,aAAa;qBACtB,CAAC,CAAC;gBACL,CAAC;gBACD,OAAO,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC;oBACjC,IAAI,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE;oBACxC,MAAM,EAAE,aAAa;iBACtB,CAAC,CAAC;YACL,CAAC;YAED,KAAK,CAAC,MAAM,CAAC,IAAgC;gBAC3C,mEAAmE;gBACnE,gEAAgE;gBAChE,OAAO,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC;oBACrC,KAAK,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE;iBAC/C,CAAC,CAAC;YACL,CAAC;SACF;KACF,CAAC;AACJ,CAAC"}

package/dist/lib/feature-toggle-service.d.ts

@@ -1,48 +1,158 @@
-import { PrismaClient } from "@prisma/client";
-import { type LoggerEnv } from "./logger";
+import type { LoggerEnv } from "./logger.js";
+import type { PrismaClient } from "@prisma/client";
+import type { TrellisAuditLoggerEnv } from "./audit-composer.js";
+import type { Region } from "./region-detection.js";
 /**
- * Simple feature toggle service for global feature flags
+ * Optional context for emitting a `feature_toggle.changed` audit event.
+ * Callers (admin routes) supply this to bind the write to a user identity.
+ *
+ * - `userId`: admin's USER ID (never email) used as `changedBy` in audit metadata.
+ * - `env`: provides DB access + region defaults for the audit Prisma client.
+ * - `region`: resolved request region; defaults to `env.DEFAULT_REGION ?? "EU"`.
+ *
+ * Emission is best-effort — a failure here NEVER blocks the toggle write.
+ */
+export interface ToggleAuditContext {
+    userId: string;
+    env: TrellisAuditLoggerEnv;
+    region?: Region;
+}
+/**
+ * Feature toggle service for global feature flags.
+ *
+ * This is a thin adapter over foundation's PrismaFeatureToggleStore.
+ * The public surface is preserved exactly so all existing consumers remain
+ * unchanged:
+ *   - getToggle / setToggle / getAllToggles return `lastChanged` (trellis shape)
+ *   - foundation internally uses `changedAt`; this adapter maps between them
+ *
+ * The `env` constructor parameter is kept for source-compatibility but is
+ * no longer used — foundation's PrismaFeatureToggleStore calls getLogger()
+ * internally.
  *
- * This is a simplified implementation for the global public posting toggle.
  * For a full feature toggle system with regions, targeting, etc., see
  * doc/requirements/feature-toggle/RECOMMENDED_IMPLEMENTATION.md
  */
+/**
+ * P5 authorization for a tenant-scoped toggle write.
+ *
+ * Pure decision (no I/O) so the authorization boundary is unit-testable in
+ * isolation. A SUPER_ADMIN may write any tenant's override (operator tooling,
+ * by design). Any other caller may write ONLY their own active tenant's row —
+ * cross-tenant toggle writes are forbidden, since a tenant override carries
+ * the operational thresholds an adversary would target.
+ *
+ * Global writes (`targetTenantId === undefined`) are NOT governed here — they
+ * stay SUPER_ADMIN-gated at the route layer exactly as before.
+ *
+ * @returns `true` when the write is allowed, `false` to deny (→ 403).
+ */
+export declare function canWriteTenantToggle(input: {
+    role: string | undefined;
+    callerTenantId: string | undefined;
+    targetTenantId: string;
+}): boolean;
+/** Shape returned by the resolution/list paths (trellis `lastChanged` shape). */
+export interface ToggleView {
+    key: string;
+    enabled: boolean;
+    lastChanged?: Date;
+    changedBy?: string;
+    description?: string;
+}
 export declare class FeatureToggleService {
-    private prisma;
-    private logger;
-    constructor(prisma: PrismaClient, env?: LoggerEnv);
+    private readonly store;
+    private readonly prisma;
+    constructor(prisma: PrismaClient, _env?: LoggerEnv);
     /**
-     * Check if a feature toggle is enabled
+     * Resolve a single tenant-scoped row → global row, in ONE query.
+     * Returns the tenant override when one exists, else the global row, else
+     * null. Fail-soft (returns null) on DB error, mirroring foundation's `get`.
+     *
+     * NOTE: deliberately does NOT use foundation's store cache — that cache is
+     * keyed by `key` only and would leak tenant A's value to tenant B. This path
+     * is uncached; the global path (store) keeps its cache.
      */
-    isEnabled(key: string): Promise<boolean>;
+    private resolveScoped;
     /**
-     * Get feature toggle with full details
+     * Check if a feature toggle is enabled.
+     * Returns false when the toggle does not exist or on any error (fail-safe).
+     *
+     * @param key      Toggle key.
+     * @param tenantId Optional tenant. When provided, resolves the tenant
+     *                 override first, falling back to the global row. When
+     *                 omitted, behaves EXACTLY as before (global-only, cached).
      */
-    getToggle(key: string): Promise<{
-        key: string;
-        enabled: boolean;
-        lastChanged?: Date;
-        changedBy?: string;
-        description?: string;
-    } | null>;
+    isEnabled(key: string, tenantId?: string): Promise<boolean>;
     /**
-     * Set feature toggle state
+     * Get feature toggle with full details.
+     * Maps foundation's `changedAt` → trellis's `lastChanged`.
+     *
+     * @param key      Toggle key.
+     * @param tenantId Optional tenant. When provided, resolves tenant override →
+     *                 global → null. When omitted, returns the GLOBAL row only —
+     *                 byte-identical to pre-P5 behavior.
      */
-    setToggle(key: string, enabled: boolean, changedBy: string, description?: string): Promise<{
+    getToggle(key: string, tenantId?: string): Promise<ToggleView | null>;
+    /**
+     * Set feature toggle state (upsert).
+     * Maps foundation's `changedAt` → trellis's `lastChanged` on the return.
+     *
+     * When `auditCtx` is provided a `feature_toggle.changed` audit event is
+     * emitted best-effort after the store write. The event metadata carries:
+     *   { key, oldEnabled, newEnabled, changedBy: auditCtx.userId }
+     * where `changedBy` in audit metadata is the admin's USER ID (NOT their
+     * email). The FeatureToggle.changedBy DB column is unchanged — it still
+     * receives the `changedBy` string argument (typically the admin's email).
+     *
+     * NOTE: Full durable (SQS at-least-once) audit delivery is a deferred
+     * follow-up. Current delivery is Postgres best-effort.
+     *
+     * @param tenantId Optional tenant. When provided, the write targets the
+     *                 `[key, tenantId]` row (a per-tenant OVERRIDE), leaving the
+     *                 global row untouched. When omitted, writes the GLOBAL row —
+     *                 byte-identical to pre-P5 behavior. AUTHORIZATION (caller is
+     *                 scoped to the tenant, or SUPER_ADMIN) is enforced at the
+     *                 route layer, not here.
+     */
+    setToggle(key: string, enabled: boolean, changedBy: string, description?: string, auditCtx?: ToggleAuditContext, tenantId?: string): Promise<{
         key: string;
         enabled: boolean;
         lastChanged: Date;
         changedBy: string;
     }>;
     /**
-     * Get all feature toggles
+     * Tenant-scoped upsert of the `[key, tenantId]` override row. Mirrors
+     * foundation's `set` return contract ({ previous, current }) so the caller
+     * is agnostic to which path ran. The compound `@@unique([key, tenantId])`
+     * makes the find-then-update/create race-equivalent to foundation's upsert.
      */
-    getAllToggles(): Promise<Array<{
-        key: string;
-        enabled: boolean;
-        lastChanged?: Date;
-        changedBy?: string;
-        description?: string;
-    }>>;
+    private _setScoped;
+    /**
+     * Emit the `feature_toggle.changed` audit event via TrellisAuditLogger.
+     * Called only when `auditCtx` is provided in `setToggle`; always
+     * best-effort — errors are caught by the caller's `.catch()`.
+     *
+     * `tenantId` (when present) is recorded in the audit metadata so the change
+     * history of a per-tenant override is attributable to its tenant — these are
+     * the operational thresholds of the future, and their provenance matters.
+     */
+    private _emitToggleAudit;
+    /**
+     * Get all feature toggles.
+     * Maps foundation's `changedAt` → trellis's `lastChanged` on each entry.
+     *
+     * @param tenantId Optional tenant. When omitted, returns the GLOBAL rows only
+     *                 (byte-identical to pre-P5). When provided, returns the
+     *                 EFFECTIVE config for that tenant: global rows, with each key
+     *                 the tenant overrides replaced by the tenant's row. Another
+     *                 tenant's rows are NEVER returned — not even their key names,
+     *                 since the mere existence of an override is target-selection
+     *                 intel for an adversary.
+     *
+     * Isolation note: the query filters to `(tenant_id = ? OR tenant_id IS NULL)`,
+     * so a foreign tenant's rows are excluded at the DB, not post-filtered.
+     */
+    getAllToggles(tenantId?: string): Promise<ToggleView[]>;
 }
 //# sourceMappingURL=feature-toggle-service.d.ts.map