@hoox-sh/hoox-shared 1.4.0 → 1.5.0

package/dist/schemas/index.js

@@ -1,20 +1,4 @@
 // @bun
-var __defProp = Object.defineProperty;
-var __returnValue = (v) => v;
-function __exportSetter(name, newValue) {
-  this[name] = __returnValue.bind(null, newValue);
-}
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, {
-      get: all[name],
-      enumerable: true,
-      configurable: true,
-      set: __exportSetter.bind(all, name)
-    });
-};
-var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
-
 // src/schemas/registry.ts
 function deriveCalledBy(manifests) {
   const calledBy = {};
@@ -121,6 +105,10 @@ var manifests = {
       EXCHANGE_TESTNET_SECRET_BINDING: {
         type: "secret",
         description: "Optional unified testnet API secret"
+      },
+      WALLET_EXECUTE_KEY_BINDING: {
+        type: "secret",
+        description: "Mesh key for DEX swaps via web3-wallet-worker"
       }
     },
     services: [
@@ -133,6 +121,11 @@ var manifests = {
         binding: "TELEGRAM_SERVICE",
         service: "telegram-worker",
         description: "Notifications"
+      },
+      {
+        binding: "WEB3_WALLET_SERVICE",
+        service: "web3-wallet-worker",
+        description: "DEX spot swaps (Uniswap / Jupiter)"
       }
     ],
     infrastructure: {
@@ -230,6 +223,22 @@ var manifests = {
       WALLET_MNEMONIC_SECRET: {
         type: "secret",
         description: "Wallet mnemonic phrase"
+      },
+      WALLET_EXECUTE_KEY_BINDING: {
+        type: "secret",
+        description: "Mesh key for privileged wallet routes"
+      },
+      SOLANA_PRIVATE_KEY: {
+        type: "secret",
+        description: "Solana signing key (base58 seed or Phantom export)"
+      },
+      JUPITER_API_KEY: {
+        type: "secret",
+        description: "Jupiter Swap V2 API key"
+      },
+      RPC_URL_SOLANA: {
+        type: "plaintext",
+        description: "Solana JSON-RPC URL"
       }
     },
     services: [
@@ -467,7 +476,6 @@ var WORKER_CATALOG = WORKER_NAMES.map((name) => {
 function getWorkerDefaultEnabled(name) {
   return manifests[name]?.defaultEnabled;
 }
-
 // src/schemas/validators.ts
 import { parse } from "jsonc-parser";
 function validateWranglerJsonc(workerName, manifest, jsoncContent) {
@@ -736,15 +744,15 @@ function validateAll(workerName, manifest, files) {
   };
 }
 export {
-  validateWranglerJsonc,
-  validateRootSecrets,
-  validateDevVars,
-  validateAll,
-  getWorkerDefaultEnabled,
-  generateWranglerJsonc,
-  generateDevVars,
-  WORKER_NAMES,
-  WORKER_MANIFESTS,
+  CALLED_BY,
   WORKER_CATALOG,
-  CALLED_BY
+  WORKER_MANIFESTS,
+  WORKER_NAMES,
+  generateDevVars,
+  generateWranglerJsonc,
+  getWorkerDefaultEnabled,
+  validateAll,
+  validateDevVars,
+  validateRootSecrets,
+  validateWranglerJsonc
 };

package/dist/schemas/registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/schemas/registry.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AA4cjD,qEAAqE;AACrE,eAAO,MAAM,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAA6B,CAAC;AAE7E,sDAAsD;AACtD,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAa,CAAC;AAE1E,gDAAgD;AAChD,eAAO,MAAM,YAAY,EAAE,MAAM,EAAkC,CAAC;AAEpE;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,EAAE,OAAO,CAAC;CACzB;AAED,gFAAgF;AAChF,eAAO,MAAM,cAAc,EAAE,kBAAkB,EAO7C,CAAC;AAEH,6EAA6E;AAC7E,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAEzE"}
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/schemas/registry.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAqejD,qEAAqE;AACrE,eAAO,MAAM,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAA6B,CAAC;AAE7E,sDAAsD;AACtD,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAa,CAAC;AAE1E,gDAAgD;AAChD,eAAO,MAAM,YAAY,EAAE,MAAM,EAAkC,CAAC;AAEpE;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,EAAE,OAAO,CAAC;CACzB;AAED,gFAAgF;AAChF,eAAO,MAAM,cAAc,EAAE,kBAAkB,EAO7C,CAAC;AAEH,6EAA6E;AAC7E,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAEzE"}

package/dist/schemas/registry.js

@@ -1,20 +1,4 @@
 // @bun
-var __defProp = Object.defineProperty;
-var __returnValue = (v) => v;
-function __exportSetter(name, newValue) {
-  this[name] = __returnValue.bind(null, newValue);
-}
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, {
-      get: all[name],
-      enumerable: true,
-      configurable: true,
-      set: __exportSetter.bind(all, name)
-    });
-};
-var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
-
 // src/schemas/registry.ts
 function deriveCalledBy(manifests) {
   const calledBy = {};
@@ -121,6 +105,10 @@ var manifests = {
       EXCHANGE_TESTNET_SECRET_BINDING: {
         type: "secret",
         description: "Optional unified testnet API secret"
+      },
+      WALLET_EXECUTE_KEY_BINDING: {
+        type: "secret",
+        description: "Mesh key for DEX swaps via web3-wallet-worker"
       }
     },
     services: [
@@ -133,6 +121,11 @@ var manifests = {
         binding: "TELEGRAM_SERVICE",
         service: "telegram-worker",
         description: "Notifications"
+      },
+      {
+        binding: "WEB3_WALLET_SERVICE",
+        service: "web3-wallet-worker",
+        description: "DEX spot swaps (Uniswap / Jupiter)"
       }
     ],
     infrastructure: {
@@ -230,6 +223,22 @@ var manifests = {
       WALLET_MNEMONIC_SECRET: {
         type: "secret",
         description: "Wallet mnemonic phrase"
+      },
+      WALLET_EXECUTE_KEY_BINDING: {
+        type: "secret",
+        description: "Mesh key for privileged wallet routes"
+      },
+      SOLANA_PRIVATE_KEY: {
+        type: "secret",
+        description: "Solana signing key (base58 seed or Phantom export)"
+      },
+      JUPITER_API_KEY: {
+        type: "secret",
+        description: "Jupiter Swap V2 API key"
+      },
+      RPC_URL_SOLANA: {
+        type: "plaintext",
+        description: "Solana JSON-RPC URL"
       }
     },
     services: [
@@ -468,9 +477,9 @@ function getWorkerDefaultEnabled(name) {
   return manifests[name]?.defaultEnabled;
 }
 export {
-  getWorkerDefaultEnabled,
-  WORKER_NAMES,
-  WORKER_MANIFESTS,
+  CALLED_BY,
   WORKER_CATALOG,
-  CALLED_BY
+  WORKER_MANIFESTS,
+  WORKER_NAMES,
+  getWorkerDefaultEnabled
 };

package/dist/schemas/validators.js

@@ -1,20 +1,4 @@
 // @bun
-var __defProp = Object.defineProperty;
-var __returnValue = (v) => v;
-function __exportSetter(name, newValue) {
-  this[name] = __returnValue.bind(null, newValue);
-}
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, {
-      get: all[name],
-      enumerable: true,
-      configurable: true,
-      set: __exportSetter.bind(all, name)
-    });
-};
-var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
-
 // src/schemas/validators.ts
 import { parse } from "jsonc-parser";
 function validateWranglerJsonc(workerName, manifest, jsoncContent) {
@@ -283,10 +267,10 @@ function validateAll(workerName, manifest, files) {
   };
 }
 export {
-  validateWranglerJsonc,
-  validateRootSecrets,
-  validateDevVars,
-  validateAll,
+  generateDevVars,
   generateWranglerJsonc,
-  generateDevVars
+  validateAll,
+  validateDevVars,
+  validateRootSecrets,
+  validateWranglerJsonc
 };

package/dist/service-bindings.js

@@ -1,20 +1,4 @@
 // @bun
-var __defProp = Object.defineProperty;
-var __returnValue = (v) => v;
-function __exportSetter(name, newValue) {
-  this[name] = __returnValue.bind(null, newValue);
-}
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, {
-      get: all[name],
-      enumerable: true,
-      configurable: true,
-      set: __exportSetter.bind(all, name)
-    });
-};
-var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
-
 // src/middleware/auth.ts
 function timingSafeEqual(a, b) {
   const encoder = new TextEncoder;
@@ -244,18 +228,18 @@ function serviceFetch(binding, path, body, options) {
   });
 }
 export {
-  serviceFetch,
-  resolveInternalAuthKey,
-  authenticatedServiceFetch,
-  WALLET_EXECUTE_AUTH_KEY_FIELDS,
-  TRADE_READ_AUTH_KEY_FIELDS,
-  TRADE_EXECUTE_AUTH_KEY_FIELDS,
-  TELEGRAM_ALERT_AUTH_KEY_FIELDS,
-  ServiceAuthError,
-  InternalAuthKeyFields,
-  DASHBOARD_TRADE_EXECUTE_AUTH_KEY_FIELDS,
-  DASHBOARD_TELEGRAM_ALERT_AUTH_KEY_FIELDS,
-  DASHBOARD_D1_READ_AUTH_KEY_FIELDS,
+  D1_READ_AUTH_KEY_FIELDS,
   D1_WRITE_AUTH_KEY_FIELDS,
-  D1_READ_AUTH_KEY_FIELDS
+  DASHBOARD_D1_READ_AUTH_KEY_FIELDS,
+  DASHBOARD_TELEGRAM_ALERT_AUTH_KEY_FIELDS,
+  DASHBOARD_TRADE_EXECUTE_AUTH_KEY_FIELDS,
+  InternalAuthKeyFields,
+  ServiceAuthError,
+  TELEGRAM_ALERT_AUTH_KEY_FIELDS,
+  TRADE_EXECUTE_AUTH_KEY_FIELDS,
+  TRADE_READ_AUTH_KEY_FIELDS,
+  WALLET_EXECUTE_AUTH_KEY_FIELDS,
+  authenticatedServiceFetch,
+  resolveInternalAuthKey,
+  serviceFetch
 };

package/dist/session.js

@@ -1,20 +1,4 @@
 // @bun
-var __defProp = Object.defineProperty;
-var __returnValue = (v) => v;
-function __exportSetter(name, newValue) {
-  this[name] = __returnValue.bind(null, newValue);
-}
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, {
-      get: all[name],
-      enumerable: true,
-      configurable: true,
-      set: __exportSetter.bind(all, name)
-    });
-};
-var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
-
 // src/path-utils.ts
 import {
   existsSync,
@@ -320,6 +304,6 @@ function validateViewId(id) {
   return typeof id === "string" && VALID_VIEW_IDS.has(id);
 }
 export {
-  saveSession,
-  restoreSession
+  restoreSession,
+  saveSession
 };

package/dist/sse.js

@@ -1,19 +1,15 @@
 // @bun
-var __defProp = Object.defineProperty;
-var __returnValue = (v) => v;
-function __exportSetter(name, newValue) {
-  this[name] = __returnValue.bind(null, newValue);
-}
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, {
-      get: all[name],
-      enumerable: true,
-      configurable: true,
-      set: __exportSetter.bind(all, name)
-    });
+var __esm = (fn, res, err) => () => {
+  if (fn)
+    try {
+      res = fn(fn = 0);
+    } catch (e) {
+      err = [e];
+    }
+  if (err)
+    throw err[0];
+  return res;
 };
-var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
 
 // src/operator-transport.ts
 function stripTrailingSlashes(url) {
@@ -83,10 +79,6 @@ var init_operator_transport = __esm(() => {
 });
 
 // src/sse.ts
-var exports_sse = {};
-__export(exports_sse, {
-  subscribeSSE: () => subscribeSSE
-});
 function subscribeSSE(path, callback, onStatus, options) {
   let aborted = false;
   const profile = options?.transport ?? (options?.transportEnv ? resolveOperatorTransportProfile(options.transportEnv) : resolveOperatorTransportProfile());

package/dist/stores/config-store.js

@@ -1,19 +1,10 @@
 // @bun
-var __defProp = Object.defineProperty;
-var __returnValue = (v) => v;
-function __exportSetter(name, newValue) {
-  this[name] = __returnValue.bind(null, newValue);
-}
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, {
-      get: all[name],
-      enumerable: true,
-      configurable: true,
-      set: __exportSetter.bind(all, name)
-    });
-};
-var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
+// src/stores/config-store.ts
+import { create } from "zustand";
+import { immer } from "zustand/middleware/immer";
+import { persist, createJSONStorage } from "zustand/middleware";
+import { chmodSync as chmodSync3, mkdirSync as mkdirSync3, existsSync as existsSync3, readFileSync as readFileSync3 } from "fs";
+import { join as join3 } from "path";
 
 // src/config.ts
 import {
@@ -353,11 +344,6 @@ function getHooxStatePath() {
 }
 
 // src/stores/config-store.ts
-import { create } from "zustand";
-import { immer } from "zustand/middleware/immer";
-import { persist, createJSONStorage } from "zustand/middleware";
-import { chmodSync as chmodSync3, mkdirSync as mkdirSync3, existsSync as existsSync3, readFileSync as readFileSync3 } from "fs";
-import { join as join3 } from "path";
 function getTuiPreferencesPath() {
   return join3(getHooxHome(), ".tui-state", "preferences.json");
 }
@@ -501,6 +487,6 @@ var useConfigStore = create()(persist(immer((set) => ({
   })
 }));
 export {
-  useConfigStore,
-  getTuiPreferencesPath
+  getTuiPreferencesPath,
+  useConfigStore
 };

package/dist/stores/service-store.js

@@ -1,19 +1,15 @@
 // @bun
-var __defProp = Object.defineProperty;
-var __returnValue = (v) => v;
-function __exportSetter(name, newValue) {
-  this[name] = __returnValue.bind(null, newValue);
-}
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, {
-      get: all[name],
-      enumerable: true,
-      configurable: true,
-      set: __exportSetter.bind(all, name)
-    });
+var __esm = (fn, res, err) => () => {
+  if (fn)
+    try {
+      res = fn(fn = 0);
+    } catch (e) {
+      err = [e];
+    }
+  if (err)
+    throw err[0];
+  return res;
 };
-var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
 
 // src/operator-transport.ts
 function stripTrailingSlashes(url) {
@@ -83,11 +79,6 @@ var init_operator_transport = __esm(() => {
 });
 
 // src/api-client.ts
-var exports_api_client = {};
-__export(exports_api_client, {
-  hooxFetch: () => hooxFetch,
-  WorkerAPIError: () => WorkerAPIError
-});
 function isRetryableStatus(status) {
   if (status === 401 || status === 403 || status === 429)
     return false;
@@ -189,10 +180,6 @@ var init_api_client = __esm(() => {
 });
 
 // src/sse.ts
-var exports_sse = {};
-__export(exports_sse, {
-  subscribeSSE: () => subscribeSSE
-});
 function subscribeSSE(path, callback, onStatus, options) {
   let aborted = false;
   const profile = options?.transport ?? (options?.transportEnv ? resolveOperatorTransportProfile(options.transportEnv) : resolveOperatorTransportProfile());
@@ -323,9 +310,9 @@ var useServiceStore = create()(immer((set, get) => ({
   ...initialState,
   fetchWorkers: async () => {
     const gen = ++fetchWorkersGeneration;
-    const { hooxFetch: hooxFetch2 } = await Promise.resolve().then(() => (init_api_client(), exports_api_client));
+    await Promise.resolve().then(() => init_api_client());
     try {
-      const data = await hooxFetch2("/v1/workers");
+      const data = await hooxFetch("/v1/workers");
       if (gen !== fetchWorkersGeneration)
         return;
       clearReconnectTimer();
@@ -386,11 +373,11 @@ var useServiceStore = create()(immer((set, get) => ({
     }
   },
   streamTrades: async () => {
-    const { subscribeSSE: subscribeSSE2 } = await Promise.resolve().then(() => (init_sse(), exports_sse));
+    await Promise.resolve().then(() => init_sse());
     tradeStreamAbort?.();
     tradeStreamAbort = null;
     try {
-      const sub = subscribeSSE2("/v1/trades/stream", (trade) => {
+      const sub = subscribeSSE("/v1/trades/stream", (trade) => {
         get().pushTrade(trade);
       });
       const resolved = await Promise.resolve(sub);
@@ -409,11 +396,11 @@ var useServiceStore = create()(immer((set, get) => ({
     }
   },
   streamLogs: async () => {
-    const { subscribeSSE: subscribeSSE2 } = await Promise.resolve().then(() => (init_sse(), exports_sse));
+    await Promise.resolve().then(() => init_sse());
     logStreamAbort?.();
     logStreamAbort = null;
     try {
-      const sub = subscribeSSE2("/v1/logs/stream", (log) => {
+      const sub = subscribeSSE("/v1/logs/stream", (log) => {
         get().pushLog(log);
       });
       const resolved = await Promise.resolve(sub);

package/dist/stores/ui-store.js

@@ -1,20 +1,4 @@
 // @bun
-var __defProp = Object.defineProperty;
-var __returnValue = (v) => v;
-function __exportSetter(name, newValue) {
-  this[name] = __returnValue.bind(null, newValue);
-}
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, {
-      get: all[name],
-      enumerable: true,
-      configurable: true,
-      set: __exportSetter.bind(all, name)
-    });
-};
-var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
-
 // src/stores/ui-store.ts
 import { create } from "zustand";
 import { immer } from "zustand/middleware/immer";

package/dist/tenant.d.ts

@@ -0,0 +1,61 @@
+/**
+ * Copyright (c) 2026 HOOX · jango-blockchained (hoox-sh)
+ * SPDX-License-Identifier: Apache-2.0
+ */
+/**
+ * Opt-in tenant isolation for worker state.
+ *
+ * Self-hosted single-tenant deployments are unaffected: every helper below
+ * is a no-op unless `TENANT_MODE` is explicitly enabled (`"true"` / `"1"`).
+ * Setting `TENANT_ID` alone does NOT enable scoping — the flag is the switch.
+ *
+ * When enabled, `TENANT_ID` (required, `[A-Za-z0-9_-]{1,64}`) namespaces:
+ * - KV keys and Durable Object names via {@link scopeKey}
+ * - R2 object keys via {@link scopeR2Key} (`t-<id>/…`, R2-safe charset)
+ * - queue / service payloads via {@link withTenantId}
+ *
+ * Misconfiguration fails loudly: resolving a scope with the flag on and an
+ * invalid id throws. Message-carried ids (shared queue consumer) are
+ * validated leniently instead — untrusted input must never throw.
+ */
+import type { TenantContext } from "./types";
+export interface TenantEnv {
+    TENANT_ID?: string;
+    TENANT_MODE?: string;
+}
+export interface TenantScope {
+    enabled: boolean;
+    tenantId: string | null;
+}
+export declare function isTenantFlagOn(env: TenantEnv | undefined | null): boolean;
+/**
+ * Resolve the tenant scope for an env. Throws when the flag is on but the
+ * id is missing/invalid (fail-closed platform deploys). Returns disabled
+ * without throwing when the flag is off (self-host default).
+ */
+export declare function tenantScope(env: TenantEnv | undefined | null): TenantScope;
+/** True when tenant scoping is active (flag on + valid id). Never throws. */
+export declare function isTenantMode(env: TenantEnv | undefined | null): boolean;
+/**
+ * Effective tenant for a scope decision: the env tenant when the flag is on,
+ * otherwise a message-carried id (shared queue consumer path), else null.
+ * Lenient on message input — untrusted data never throws here.
+ */
+export declare function effectiveTenantId(env: TenantEnv | undefined | null, msg?: {
+    tenantId?: unknown;
+}): string | null;
+/** Namespace a KV key or DO name: `t/<id>/<key>` when scoped, else `key`. */
+export declare function scopeKey(env: TenantEnv | undefined | null, key: string, msg?: {
+    tenantId?: unknown;
+}): string;
+/** Namespace an R2 object key: `t-<id>/<key>` (colon-free for key guards). */
+export declare function scopeR2Key(env: TenantEnv | undefined | null, key: string, msg?: {
+    tenantId?: unknown;
+}): string;
+/** Attach `tenantId` to an outbound payload object when scoped. */
+export declare function withTenantId<T extends object>(env: TenantEnv | undefined | null, obj: T): T & {
+    tenantId?: string;
+};
+/** Build the shared {@link TenantContext} when scoped, else null. */
+export declare function tenantContextOf(env: TenantEnv | undefined | null): TenantContext | null;
+//# sourceMappingURL=tenant.d.ts.map

package/dist/tenant.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant.d.ts","sourceRoot":"","sources":["../src/tenant.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAE7C,MAAM,WAAW,SAAS;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAID,wBAAgB,cAAc,CAAC,GAAG,EAAE,SAAS,GAAG,SAAS,GAAG,IAAI,GAAG,OAAO,CAGzE;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,SAAS,GAAG,SAAS,GAAG,IAAI,GAAG,WAAW,CAS1E;AAED,6EAA6E;AAC7E,wBAAgB,YAAY,CAAC,GAAG,EAAE,SAAS,GAAG,SAAS,GAAG,IAAI,GAAG,OAAO,CAMvE;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,SAAS,GAAG,SAAS,GAAG,IAAI,EACjC,GAAG,CAAC,EAAE;IAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAE,GAC3B,MAAM,GAAG,IAAI,CAOf;AAED,6EAA6E;AAC7E,wBAAgB,QAAQ,CACtB,GAAG,EAAE,SAAS,GAAG,SAAS,GAAG,IAAI,EACjC,GAAG,EAAE,MAAM,EACX,GAAG,CAAC,EAAE;IAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAE,GAC3B,MAAM,CAGR;AAED,8EAA8E;AAC9E,wBAAgB,UAAU,CACxB,GAAG,EAAE,SAAS,GAAG,SAAS,GAAG,IAAI,EACjC,GAAG,EAAE,MAAM,EACX,GAAG,CAAC,EAAE;IAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAE,GAC3B,MAAM,CAGR;AAED,mEAAmE;AACnE,wBAAgB,YAAY,CAAC,CAAC,SAAS,MAAM,EAC3C,GAAG,EAAE,SAAS,GAAG,SAAS,GAAG,IAAI,EACjC,GAAG,EAAE,CAAC,GACL,CAAC,GAAG;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,CAG3B;AAED,qEAAqE;AACrE,wBAAgB,eAAe,CAC7B,GAAG,EAAE,SAAS,GAAG,SAAS,GAAG,IAAI,GAChC,aAAa,GAAG,IAAI,CAGtB"}

package/dist/tenant.js

@@ -0,0 +1,56 @@
+// @bun
+// src/tenant.ts
+var TENANT_ID_RE = /^[A-Za-z0-9_-]{1,64}$/;
+function isTenantFlagOn(env) {
+  const v = env?.TENANT_MODE;
+  return v === "true" || v === "1";
+}
+function tenantScope(env) {
+  if (!isTenantFlagOn(env))
+    return { enabled: false, tenantId: null };
+  const id = (env?.TENANT_ID ?? "").trim();
+  if (!id || !TENANT_ID_RE.test(id)) {
+    throw new Error("TENANT_MODE is enabled but TENANT_ID is missing or invalid (expected [A-Za-z0-9_-], 1-64 chars)");
+  }
+  return { enabled: true, tenantId: id };
+}
+function isTenantMode(env) {
+  try {
+    return tenantScope(env).enabled;
+  } catch {
+    return false;
+  }
+}
+function effectiveTenantId(env, msg) {
+  if (isTenantFlagOn(env)) {
+    return tenantScope(env).tenantId;
+  }
+  const m = typeof msg?.tenantId === "string" ? msg.tenantId.trim() : "";
+  return m && TENANT_ID_RE.test(m) ? m : null;
+}
+function scopeKey(env, key, msg) {
+  const id = effectiveTenantId(env, msg);
+  return id ? `t/${id}/${key}` : key;
+}
+function scopeR2Key(env, key, msg) {
+  const id = effectiveTenantId(env, msg);
+  return id ? `t-${id}/${key}` : key;
+}
+function withTenantId(env, obj) {
+  const ts = tenantScope(env);
+  return ts.enabled && ts.tenantId ? { ...obj, tenantId: ts.tenantId } : obj;
+}
+function tenantContextOf(env) {
+  const ts = tenantScope(env);
+  return ts.enabled && ts.tenantId ? { tenantId: ts.tenantId } : null;
+}
+export {
+  effectiveTenantId,
+  isTenantFlagOn,
+  isTenantMode,
+  scopeKey,
+  scopeR2Key,
+  tenantContextOf,
+  tenantScope,
+  withTenantId
+};

package/dist/test-utils.js

@@ -1,20 +1,4 @@
 // @bun
-var __defProp = Object.defineProperty;
-var __returnValue = (v) => v;
-function __exportSetter(name, newValue) {
-  this[name] = __returnValue.bind(null, newValue);
-}
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, {
-      get: all[name],
-      enumerable: true,
-      configurable: true,
-      set: __exportSetter.bind(all, name)
-    });
-};
-var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
-
 // src/test-utils.ts
 function createMockKV(overrides) {
   return {
@@ -113,16 +97,16 @@ function createMockEnv(overrides) {
   return overrides;
 }
 export {
-  createMockVectorizeIndex,
-  createMockSecretsStore,
-  createMockR2,
-  createMockQueue,
-  createMockKV,
-  createMockFetcher,
-  createMockExecutionContext,
-  createMockEnv,
-  createMockD1,
-  createMockAnalyticsEngineDataset,
+  createMockAi,
   createMockAnalyticsEngine,
-  createMockAi
+  createMockAnalyticsEngineDataset,
+  createMockD1,
+  createMockEnv,
+  createMockExecutionContext,
+  createMockFetcher,
+  createMockKV,
+  createMockQueue,
+  createMockR2,
+  createMockSecretsStore,
+  createMockVectorizeIndex
 };