@librechat/data-schemas 0.0.43 → 0.0.45

package/dist/models/plugins/tenantIsolation.cjs

@@ -0,0 +1,140 @@
+'use strict';
+
+var tenantContext = require('../../config/tenantContext.cjs');
+var winston = require('../../config/winston.cjs');
+
+let _strictMode;
+function isStrict() {
+    return (_strictMode !== null && _strictMode !== void 0 ? _strictMode : (_strictMode = process.env.TENANT_ISOLATION_STRICT === 'true'));
+}
+if (process.env.TENANT_ISOLATION_STRICT &&
+    process.env.TENANT_ISOLATION_STRICT !== 'true' &&
+    process.env.TENANT_ISOLATION_STRICT !== 'false') {
+    winston.warn(`[TenantIsolation] TENANT_ISOLATION_STRICT="${process.env.TENANT_ISOLATION_STRICT}" ` +
+        'is not "true" or "false"; defaulting to non-strict mode.');
+}
+const TENANT_ISOLATION_APPLIED = Symbol.for('librechat:tenantIsolation');
+const MUTATION_OPERATORS = ['$set', '$unset', '$setOnInsert', '$rename'];
+function assertNoTenantIdMutation(update) {
+    if (!update) {
+        return;
+    }
+    for (const op of MUTATION_OPERATORS) {
+        const payload = update[op];
+        if (payload && 'tenantId' in payload) {
+            throw new Error('[TenantIsolation] Modifying tenantId via update operators is not allowed');
+        }
+    }
+    if ('tenantId' in update) {
+        throw new Error('[TenantIsolation] Modifying tenantId via update operators is not allowed');
+    }
+}
+/**
+ * Mongoose schema plugin that enforces tenant-level data isolation.
+ *
+ * - `tenantId` present in async context -> injected into every query filter.
+ * - `tenantId` is `SYSTEM_TENANT_ID` -> skips injection (explicit cross-tenant op).
+ * - `tenantId` absent + `TENANT_ISOLATION_STRICT=true` -> throws (fail-closed).
+ * - `tenantId` absent + strict mode off -> passes through (transitional/pre-tenancy).
+ * - Update and replace operations that modify `tenantId` are blocked unless running as system.
+ */
+function applyTenantIsolation(schema) {
+    const s = schema;
+    if (s[TENANT_ISOLATION_APPLIED]) {
+        return;
+    }
+    s[TENANT_ISOLATION_APPLIED] = true;
+    const queryMiddleware = function () {
+        const tenantId = tenantContext.getTenantId();
+        if (!tenantId && isStrict()) {
+            throw new Error('[TenantIsolation] Query attempted without tenant context in strict mode');
+        }
+        if (!tenantId || tenantId === tenantContext.SYSTEM_TENANT_ID) {
+            return;
+        }
+        this.where({ tenantId });
+    };
+    const updateGuard = function () {
+        const tenantId = tenantContext.getTenantId();
+        if (tenantId === tenantContext.SYSTEM_TENANT_ID) {
+            return;
+        }
+        assertNoTenantIdMutation(this.getUpdate());
+    };
+    const replaceGuard = function () {
+        const tenantId = tenantContext.getTenantId();
+        if (tenantId === tenantContext.SYSTEM_TENANT_ID) {
+            return;
+        }
+        const replacement = this.getUpdate();
+        if (!replacement) {
+            return;
+        }
+        if ('tenantId' in replacement && replacement.tenantId !== tenantId) {
+            throw new Error('[TenantIsolation] Modifying tenantId via replacement is not allowed');
+        }
+        if (tenantId && !('tenantId' in replacement)) {
+            replacement.tenantId = tenantId;
+        }
+    };
+    schema.pre('find', queryMiddleware);
+    schema.pre('findOne', queryMiddleware);
+    schema.pre('findOneAndUpdate', queryMiddleware);
+    schema.pre('findOneAndDelete', queryMiddleware);
+    schema.pre('findOneAndReplace', queryMiddleware);
+    schema.pre('updateOne', queryMiddleware);
+    schema.pre('updateMany', queryMiddleware);
+    schema.pre('deleteOne', queryMiddleware);
+    schema.pre('deleteMany', queryMiddleware);
+    schema.pre('countDocuments', queryMiddleware);
+    schema.pre('replaceOne', queryMiddleware);
+    schema.pre('findOneAndUpdate', updateGuard);
+    schema.pre('updateOne', updateGuard);
+    schema.pre('updateMany', updateGuard);
+    schema.pre('replaceOne', replaceGuard);
+    schema.pre('findOneAndReplace', replaceGuard);
+    schema.pre('aggregate', function () {
+        const tenantId = tenantContext.getTenantId();
+        if (!tenantId && isStrict()) {
+            throw new Error('[TenantIsolation] Aggregate attempted without tenant context in strict mode');
+        }
+        if (!tenantId || tenantId === tenantContext.SYSTEM_TENANT_ID) {
+            return;
+        }
+        this.pipeline().unshift({ $match: { tenantId } });
+    });
+    schema.pre('save', function () {
+        const tenantId = tenantContext.getTenantId();
+        if (!tenantId && isStrict()) {
+            throw new Error('[TenantIsolation] Save attempted without tenant context in strict mode');
+        }
+        if (tenantId && tenantId !== tenantContext.SYSTEM_TENANT_ID) {
+            if (!this.tenantId) {
+                this.tenantId = tenantId;
+            }
+            else if (isStrict() && this.tenantId !== tenantId) {
+                throw new Error('[TenantIsolation] Document tenantId does not match current tenant context');
+            }
+        }
+    });
+    schema.pre('insertMany', function (next, docs) {
+        const tenantId = tenantContext.getTenantId();
+        if (!tenantId && isStrict()) {
+            return next(new Error('[TenantIsolation] insertMany attempted without tenant context in strict mode'));
+        }
+        if (tenantId && tenantId !== tenantContext.SYSTEM_TENANT_ID && Array.isArray(docs)) {
+            for (const doc of docs) {
+                if (!doc.tenantId) {
+                    doc.tenantId = tenantId;
+                }
+                else if (isStrict() && doc.tenantId !== tenantId) {
+                    return next(new Error('[TenantIsolation] Document tenantId does not match current tenant context'));
+                }
+            }
+        }
+        next();
+    });
+}
+
+exports.applyTenantIsolation = applyTenantIsolation;
+//# sourceMappingURL=tenantIsolation.cjs.map

package/dist/models/plugins/tenantIsolation.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenantIsolation.cjs","sources":["../../../src/models/plugins/tenantIsolation.ts"],"sourcesContent":[null],"names":["logger","getTenantId","SYSTEM_TENANT_ID"],"mappings":";;;;;AAIA,IAAI,WAAgC;AAEpC,SAAS,QAAQ,GAAA;AACf,IAAA,QAAQ,WAAW,KAAA,IAAA,IAAX,WAAW,KAAA,MAAA,GAAX,WAAW,IAAX,WAAW,GAAK,OAAO,CAAC,GAAG,CAAC,uBAAuB,KAAK,MAAM;AACxE;AAOA,IACE,OAAO,CAAC,GAAG,CAAC,uBAAuB;AACnC,IAAA,OAAO,CAAC,GAAG,CAAC,uBAAuB,KAAK,MAAM;AAC9C,IAAA,OAAO,CAAC,GAAG,CAAC,uBAAuB,KAAK,OAAO,EAC/C;IACAA,OAAM,CAAC,IAAI,CACT,CAAA,2CAAA,EAA8C,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAA,EAAA,CAAI;AACnF,QAAA,0DAA0D,CAC7D;AACH;AAEA,MAAM,wBAAwB,GAAG,MAAM,CAAC,GAAG,CAAC,2BAA2B,CAAC;AAExE,MAAM,kBAAkB,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE,SAAS,CAAU;AAEjF,SAAS,wBAAwB,CAAC,MAAmC,EAAA;IACnE,IAAI,CAAC,MAAM,EAAE;QACX;IACF;AACA,IAAA,KAAK,MAAM,EAAE,IAAI,kBAAkB,EAAE;AACnC,QAAA,MAAM,OAAO,GAAG,MAAM,CAAC,EAAE,CAAwC;AACjE,QAAA,IAAI,OAAO,IAAI,UAAU,IAAI,OAAO,EAAE;AACpC,YAAA,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC;QAC7F;IACF;AACA,IAAA,IAAI,UAAU,IAAI,MAAM,EAAE;AACxB,QAAA,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC;IAC7F;AACF;AAEA;;;;;;;;AAQG;AACG,SAAU,oBAAoB,CAAC,MAAc,EAAA;IACjD,MAAM,CAAC,GAAG,MAA6C;AACvD,IAAA,IAAI,CAAC,CAAC,wBAAwB,CAAC,EAAE;QAC/B;IACF;AACA,IAAA,CAAC,CAAC,wBAAwB,CAAC,GAAG,IAAI;AAElC,IAAA,MAAM,eAAe,GAAG,YAAA;AACtB,QAAA,MAAM,QAAQ,GAAGC,yBAAW,EAAE;AAE9B,QAAA,IAAI,CAAC,QAAQ,IAAI,QAAQ,EAAE,EAAE;AAC3B,YAAA,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC;QAC5F;AAEA,QAAA,IAAI,CAAC,QAAQ,IAAI,QAAQ,KAAKC,8BAAgB,EAAE;YAC9C;QACF;AAEA,QAAA,IAAI,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,CAAC;AAC1B,IAAA,CAAC;AAED,IAAA,MAAM,WAAW,GAAG,YAAA;AAClB,QAAA,MAAM,QAAQ,GAAGD,yBAAW,EAAE;AAC9B,QAAA,IAAI,QAAQ,KAAKC,8BAAgB,EAAE;YACjC;QACF;AACA,QAAA,wBAAwB,CAAC,IAAI,CAAC,SAAS,EAAiC,CAAC;AAC3E,IAAA,CAAC;AAED,IAAA,MAAM,YAAY,GAAG,YAAA;AACnB,QAAA,MAAM,QAAQ,GAAGD,yBAAW,EAAE;AAC9B,QAAA,IAAI,QAAQ,KAAKC,8BAAgB,EAAE;YACjC;QACF;AACA,QAAA,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,EAAoC;QACtE,IAAI,CAAC,WAAW,EAAE;YAChB;QACF;QACA,IAAI,UAAU,IAAI,WAAW,IAAI,WAAW,CAAC,QAAQ,KAAK,QAAQ,EAAE;AAClE,YAAA,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC;QACxF;QACA,IAAI,QAAQ,IAAI,EAAE,UAAU,IAAI,WAAW,CAAC,EAAE;AAC5C,YAAA,WAAW,CAAC,QAAQ,GAAG,QAAQ;QACjC;AACF,IAAA,CAAC;AAED,IAAA,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC;AACnC,IAAA,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,eAAe,CAAC;AACtC,IAAA,MAAM,CAAC,GAAG,CAAC,kBAAkB,EAAE,eAAe,CAAC;AAC/C,IAAA,MAAM,CAAC,GAAG,CAAC,kBAAkB,EAAE,eAAe,CAAC;AAC/C,IAAA,MAAM,CAAC,GAAG,CAAC,mBAAmB,EAAE,eAAe,CAAC;AAChD,IAAA,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,eAAe,CAAC;AACxC,IAAA,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,eAAe,CAAC;AACzC,IAAA,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,eAAe,CAAC;AACxC,IAAA,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,eAAe,CAAC;AACzC,IAAA,MAAM,CAAC,GAAG,CAAC,gBAAgB,EAAE,eAAe,CAAC;AAC7C,IAAA,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,eAAe,CAAC;AAEzC,IAAA,MAAM,CAAC,GAAG,CAAC,kBAAkB,EAAE,WAAW,CAAC;AAC3C,IAAA,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,WAAW,CAAC;AACpC,IAAA,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,WAAW,CAAC;AAErC,IAAA,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,YAAY,CAAC;AACtC,IAAA,MAAM,CAAC,GAAG,CAAC,mBAAmB,EAAE,YAAY,CAAC;AAE7C,IAAA,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,YAAA;AACtB,QAAA,MAAM,QAAQ,GAAGD,yBAAW,EAAE;AAE9B,QAAA,IAAI,CAAC,QAAQ,IAAI,QAAQ,EAAE,EAAE;AAC3B,YAAA,MAAM,IAAI,KAAK,CACb,6EAA6E,CAC9E;QACH;AAEA,QAAA,IAAI,CAAC,QAAQ,IAAI,QAAQ,KAAKC,8BAAgB,EAAE;YAC9C;QACF;AAEA,QAAA,IAAI,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC;AACnD,IAAA,CAAC,CAAC;AAEF,IAAA,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,YAAA;AACjB,QAAA,MAAM,QAAQ,GAAGD,yBAAW,EAAE;AAE9B,QAAA,IAAI,CAAC,QAAQ,IAAI,QAAQ,EAAE,EAAE;AAC3B,YAAA,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC;QAC3F;AAEA,QAAA,IAAI,QAAQ,IAAI,QAAQ,KAAKC,8BAAgB,EAAE;AAC7C,YAAA,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE;AAClB,gBAAA,IAAI,CAAC,QAAQ,GAAG,QAAQ;YAC1B;iBAAO,IAAI,QAAQ,EAAE,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,EAAE;AACnD,gBAAA,MAAM,IAAI,KAAK,CACb,2EAA2E,CAC5E;YACH;QACF;AACF,IAAA,CAAC,CAAC;IAEF,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,UAAU,IAAI,EAAE,IAAI,EAAA;AAC3C,QAAA,MAAM,QAAQ,GAAGD,yBAAW,EAAE;AAE9B,QAAA,IAAI,CAAC,QAAQ,IAAI,QAAQ,EAAE,EAAE;YAC3B,OAAO,IAAI,CACT,IAAI,KAAK,CAAC,8EAA8E,CAAC,CAC1F;QACH;AAEA,QAAA,IAAI,QAAQ,IAAI,QAAQ,KAAKC,8BAAgB,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;AACpE,YAAA,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE;AACtB,gBAAA,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE;AACjB,oBAAA,GAAG,CAAC,QAAQ,GAAG,QAAQ;gBACzB;qBAAO,IAAI,QAAQ,EAAE,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE;oBAClD,OAAO,IAAI,CACT,IAAI,KAAK,CAAC,2EAA2E,CAAC,CACvF;gBACH;YACF;QACF;AAEA,QAAA,IAAI,EAAE;AACR,IAAA,CAAC,CAAC;AACJ;;;;"}

package/dist/models/plugins/tenantIsolation.es.js

@@ -0,0 +1,138 @@
+import { getTenantId, SYSTEM_TENANT_ID } from '../../config/tenantContext.es.js';
+import logger from '../../config/winston.es.js';
+
+let _strictMode;
+function isStrict() {
+    return (_strictMode !== null && _strictMode !== void 0 ? _strictMode : (_strictMode = process.env.TENANT_ISOLATION_STRICT === 'true'));
+}
+if (process.env.TENANT_ISOLATION_STRICT &&
+    process.env.TENANT_ISOLATION_STRICT !== 'true' &&
+    process.env.TENANT_ISOLATION_STRICT !== 'false') {
+    logger.warn(`[TenantIsolation] TENANT_ISOLATION_STRICT="${process.env.TENANT_ISOLATION_STRICT}" ` +
+        'is not "true" or "false"; defaulting to non-strict mode.');
+}
+const TENANT_ISOLATION_APPLIED = Symbol.for('librechat:tenantIsolation');
+const MUTATION_OPERATORS = ['$set', '$unset', '$setOnInsert', '$rename'];
+function assertNoTenantIdMutation(update) {
+    if (!update) {
+        return;
+    }
+    for (const op of MUTATION_OPERATORS) {
+        const payload = update[op];
+        if (payload && 'tenantId' in payload) {
+            throw new Error('[TenantIsolation] Modifying tenantId via update operators is not allowed');
+        }
+    }
+    if ('tenantId' in update) {
+        throw new Error('[TenantIsolation] Modifying tenantId via update operators is not allowed');
+    }
+}
+/**
+ * Mongoose schema plugin that enforces tenant-level data isolation.
+ *
+ * - `tenantId` present in async context -> injected into every query filter.
+ * - `tenantId` is `SYSTEM_TENANT_ID` -> skips injection (explicit cross-tenant op).
+ * - `tenantId` absent + `TENANT_ISOLATION_STRICT=true` -> throws (fail-closed).
+ * - `tenantId` absent + strict mode off -> passes through (transitional/pre-tenancy).
+ * - Update and replace operations that modify `tenantId` are blocked unless running as system.
+ */
+function applyTenantIsolation(schema) {
+    const s = schema;
+    if (s[TENANT_ISOLATION_APPLIED]) {
+        return;
+    }
+    s[TENANT_ISOLATION_APPLIED] = true;
+    const queryMiddleware = function () {
+        const tenantId = getTenantId();
+        if (!tenantId && isStrict()) {
+            throw new Error('[TenantIsolation] Query attempted without tenant context in strict mode');
+        }
+        if (!tenantId || tenantId === SYSTEM_TENANT_ID) {
+            return;
+        }
+        this.where({ tenantId });
+    };
+    const updateGuard = function () {
+        const tenantId = getTenantId();
+        if (tenantId === SYSTEM_TENANT_ID) {
+            return;
+        }
+        assertNoTenantIdMutation(this.getUpdate());
+    };
+    const replaceGuard = function () {
+        const tenantId = getTenantId();
+        if (tenantId === SYSTEM_TENANT_ID) {
+            return;
+        }
+        const replacement = this.getUpdate();
+        if (!replacement) {
+            return;
+        }
+        if ('tenantId' in replacement && replacement.tenantId !== tenantId) {
+            throw new Error('[TenantIsolation] Modifying tenantId via replacement is not allowed');
+        }
+        if (tenantId && !('tenantId' in replacement)) {
+            replacement.tenantId = tenantId;
+        }
+    };
+    schema.pre('find', queryMiddleware);
+    schema.pre('findOne', queryMiddleware);
+    schema.pre('findOneAndUpdate', queryMiddleware);
+    schema.pre('findOneAndDelete', queryMiddleware);
+    schema.pre('findOneAndReplace', queryMiddleware);
+    schema.pre('updateOne', queryMiddleware);
+    schema.pre('updateMany', queryMiddleware);
+    schema.pre('deleteOne', queryMiddleware);
+    schema.pre('deleteMany', queryMiddleware);
+    schema.pre('countDocuments', queryMiddleware);
+    schema.pre('replaceOne', queryMiddleware);
+    schema.pre('findOneAndUpdate', updateGuard);
+    schema.pre('updateOne', updateGuard);
+    schema.pre('updateMany', updateGuard);
+    schema.pre('replaceOne', replaceGuard);
+    schema.pre('findOneAndReplace', replaceGuard);
+    schema.pre('aggregate', function () {
+        const tenantId = getTenantId();
+        if (!tenantId && isStrict()) {
+            throw new Error('[TenantIsolation] Aggregate attempted without tenant context in strict mode');
+        }
+        if (!tenantId || tenantId === SYSTEM_TENANT_ID) {
+            return;
+        }
+        this.pipeline().unshift({ $match: { tenantId } });
+    });
+    schema.pre('save', function () {
+        const tenantId = getTenantId();
+        if (!tenantId && isStrict()) {
+            throw new Error('[TenantIsolation] Save attempted without tenant context in strict mode');
+        }
+        if (tenantId && tenantId !== SYSTEM_TENANT_ID) {
+            if (!this.tenantId) {
+                this.tenantId = tenantId;
+            }
+            else if (isStrict() && this.tenantId !== tenantId) {
+                throw new Error('[TenantIsolation] Document tenantId does not match current tenant context');
+            }
+        }
+    });
+    schema.pre('insertMany', function (next, docs) {
+        const tenantId = getTenantId();
+        if (!tenantId && isStrict()) {
+            return next(new Error('[TenantIsolation] insertMany attempted without tenant context in strict mode'));
+        }
+        if (tenantId && tenantId !== SYSTEM_TENANT_ID && Array.isArray(docs)) {
+            for (const doc of docs) {
+                if (!doc.tenantId) {
+                    doc.tenantId = tenantId;
+                }
+                else if (isStrict() && doc.tenantId !== tenantId) {
+                    return next(new Error('[TenantIsolation] Document tenantId does not match current tenant context'));
+                }
+            }
+        }
+        next();
+    });
+}
+
+export { applyTenantIsolation };
+//# sourceMappingURL=tenantIsolation.es.js.map

package/dist/models/plugins/tenantIsolation.es.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenantIsolation.es.js","sources":["../../../src/models/plugins/tenantIsolation.ts"],"sourcesContent":[null],"names":[],"mappings":";;;AAIA,IAAI,WAAgC;AAEpC,SAAS,QAAQ,GAAA;AACf,IAAA,QAAQ,WAAW,KAAA,IAAA,IAAX,WAAW,KAAA,MAAA,GAAX,WAAW,IAAX,WAAW,GAAK,OAAO,CAAC,GAAG,CAAC,uBAAuB,KAAK,MAAM;AACxE;AAOA,IACE,OAAO,CAAC,GAAG,CAAC,uBAAuB;AACnC,IAAA,OAAO,CAAC,GAAG,CAAC,uBAAuB,KAAK,MAAM;AAC9C,IAAA,OAAO,CAAC,GAAG,CAAC,uBAAuB,KAAK,OAAO,EAC/C;IACA,MAAM,CAAC,IAAI,CACT,CAAA,2CAAA,EAA8C,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAA,EAAA,CAAI;AACnF,QAAA,0DAA0D,CAC7D;AACH;AAEA,MAAM,wBAAwB,GAAG,MAAM,CAAC,GAAG,CAAC,2BAA2B,CAAC;AAExE,MAAM,kBAAkB,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE,SAAS,CAAU;AAEjF,SAAS,wBAAwB,CAAC,MAAmC,EAAA;IACnE,IAAI,CAAC,MAAM,EAAE;QACX;IACF;AACA,IAAA,KAAK,MAAM,EAAE,IAAI,kBAAkB,EAAE;AACnC,QAAA,MAAM,OAAO,GAAG,MAAM,CAAC,EAAE,CAAwC;AACjE,QAAA,IAAI,OAAO,IAAI,UAAU,IAAI,OAAO,EAAE;AACpC,YAAA,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC;QAC7F;IACF;AACA,IAAA,IAAI,UAAU,IAAI,MAAM,EAAE;AACxB,QAAA,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC;IAC7F;AACF;AAEA;;;;;;;;AAQG;AACG,SAAU,oBAAoB,CAAC,MAAc,EAAA;IACjD,MAAM,CAAC,GAAG,MAA6C;AACvD,IAAA,IAAI,CAAC,CAAC,wBAAwB,CAAC,EAAE;QAC/B;IACF;AACA,IAAA,CAAC,CAAC,wBAAwB,CAAC,GAAG,IAAI;AAElC,IAAA,MAAM,eAAe,GAAG,YAAA;AACtB,QAAA,MAAM,QAAQ,GAAG,WAAW,EAAE;AAE9B,QAAA,IAAI,CAAC,QAAQ,IAAI,QAAQ,EAAE,EAAE;AAC3B,YAAA,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC;QAC5F;AAEA,QAAA,IAAI,CAAC,QAAQ,IAAI,QAAQ,KAAK,gBAAgB,EAAE;YAC9C;QACF;AAEA,QAAA,IAAI,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,CAAC;AAC1B,IAAA,CAAC;AAED,IAAA,MAAM,WAAW,GAAG,YAAA;AAClB,QAAA,MAAM,QAAQ,GAAG,WAAW,EAAE;AAC9B,QAAA,IAAI,QAAQ,KAAK,gBAAgB,EAAE;YACjC;QACF;AACA,QAAA,wBAAwB,CAAC,IAAI,CAAC,SAAS,EAAiC,CAAC;AAC3E,IAAA,CAAC;AAED,IAAA,MAAM,YAAY,GAAG,YAAA;AACnB,QAAA,MAAM,QAAQ,GAAG,WAAW,EAAE;AAC9B,QAAA,IAAI,QAAQ,KAAK,gBAAgB,EAAE;YACjC;QACF;AACA,QAAA,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,EAAoC;QACtE,IAAI,CAAC,WAAW,EAAE;YAChB;QACF;QACA,IAAI,UAAU,IAAI,WAAW,IAAI,WAAW,CAAC,QAAQ,KAAK,QAAQ,EAAE;AAClE,YAAA,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC;QACxF;QACA,IAAI,QAAQ,IAAI,EAAE,UAAU,IAAI,WAAW,CAAC,EAAE;AAC5C,YAAA,WAAW,CAAC,QAAQ,GAAG,QAAQ;QACjC;AACF,IAAA,CAAC;AAED,IAAA,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC;AACnC,IAAA,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,eAAe,CAAC;AACtC,IAAA,MAAM,CAAC,GAAG,CAAC,kBAAkB,EAAE,eAAe,CAAC;AAC/C,IAAA,MAAM,CAAC,GAAG,CAAC,kBAAkB,EAAE,eAAe,CAAC;AAC/C,IAAA,MAAM,CAAC,GAAG,CAAC,mBAAmB,EAAE,eAAe,CAAC;AAChD,IAAA,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,eAAe,CAAC;AACxC,IAAA,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,eAAe,CAAC;AACzC,IAAA,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,eAAe,CAAC;AACxC,IAAA,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,eAAe,CAAC;AACzC,IAAA,MAAM,CAAC,GAAG,CAAC,gBAAgB,EAAE,eAAe,CAAC;AAC7C,IAAA,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,eAAe,CAAC;AAEzC,IAAA,MAAM,CAAC,GAAG,CAAC,kBAAkB,EAAE,WAAW,CAAC;AAC3C,IAAA,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,WAAW,CAAC;AACpC,IAAA,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,WAAW,CAAC;AAErC,IAAA,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,YAAY,CAAC;AACtC,IAAA,MAAM,CAAC,GAAG,CAAC,mBAAmB,EAAE,YAAY,CAAC;AAE7C,IAAA,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,YAAA;AACtB,QAAA,MAAM,QAAQ,GAAG,WAAW,EAAE;AAE9B,QAAA,IAAI,CAAC,QAAQ,IAAI,QAAQ,EAAE,EAAE;AAC3B,YAAA,MAAM,IAAI,KAAK,CACb,6EAA6E,CAC9E;QACH;AAEA,QAAA,IAAI,CAAC,QAAQ,IAAI,QAAQ,KAAK,gBAAgB,EAAE;YAC9C;QACF;AAEA,QAAA,IAAI,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC;AACnD,IAAA,CAAC,CAAC;AAEF,IAAA,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,YAAA;AACjB,QAAA,MAAM,QAAQ,GAAG,WAAW,EAAE;AAE9B,QAAA,IAAI,CAAC,QAAQ,IAAI,QAAQ,EAAE,EAAE;AAC3B,YAAA,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC;QAC3F;AAEA,QAAA,IAAI,QAAQ,IAAI,QAAQ,KAAK,gBAAgB,EAAE;AAC7C,YAAA,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE;AAClB,gBAAA,IAAI,CAAC,QAAQ,GAAG,QAAQ;YAC1B;iBAAO,IAAI,QAAQ,EAAE,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,EAAE;AACnD,gBAAA,MAAM,IAAI,KAAK,CACb,2EAA2E,CAC5E;YACH;QACF;AACF,IAAA,CAAC,CAAC;IAEF,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,UAAU,IAAI,EAAE,IAAI,EAAA;AAC3C,QAAA,MAAM,QAAQ,GAAG,WAAW,EAAE;AAE9B,QAAA,IAAI,CAAC,QAAQ,IAAI,QAAQ,EAAE,EAAE;YAC3B,OAAO,IAAI,CACT,IAAI,KAAK,CAAC,8EAA8E,CAAC,CAC1F;QACH;AAEA,QAAA,IAAI,QAAQ,IAAI,QAAQ,KAAK,gBAAgB,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;AACpE,YAAA,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE;AACtB,gBAAA,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE;AACjB,oBAAA,GAAG,CAAC,QAAQ,GAAG,QAAQ;gBACzB;qBAAO,IAAI,QAAQ,EAAE,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE;oBAClD,OAAO,IAAI,CACT,IAAI,KAAK,CAAC,2EAA2E,CAAC,CACvF;gBACH;YACF;QACF;AAEA,QAAA,IAAI,EAAE;AACR,IAAA,CAAC,CAAC;AACJ;;;;"}

package/dist/models/preset.cjs

@@ -0,0 +1,12 @@
+'use strict';
+
+var preset = require('../schema/preset.cjs');
+var tenantIsolation = require('./plugins/tenantIsolation.cjs');
+
+function createPresetModel(mongoose) {
+    tenantIsolation.applyTenantIsolation(preset);
+    return mongoose.models.Preset || mongoose.model('Preset', preset);
+}
+
+exports.createPresetModel = createPresetModel;
+//# sourceMappingURL=preset.cjs.map

package/dist/models/preset.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"preset.cjs","sources":["../../src/models/preset.ts"],"sourcesContent":[null],"names":["applyTenantIsolation","presetSchema"],"mappings":";;;;;AAGM,SAAU,iBAAiB,CAAC,QAAmC,EAAA;IACnEA,oCAAoB,CAACC,MAAY,CAAC;AAClC,IAAA,OAAO,QAAQ,CAAC,MAAM,CAAC,MAAM,IAAI,QAAQ,CAAC,KAAK,CAAU,QAAQ,EAAEA,MAAY,CAAC;AAClF;;;;"}

package/dist/models/preset.es.js

@@ -0,0 +1,10 @@
+import presetSchema from '../schema/preset.es.js';
+import { applyTenantIsolation } from './plugins/tenantIsolation.es.js';
+
+function createPresetModel(mongoose) {
+    applyTenantIsolation(presetSchema);
+    return mongoose.models.Preset || mongoose.model('Preset', presetSchema);
+}
+
+export { createPresetModel };
+//# sourceMappingURL=preset.es.js.map

package/dist/models/preset.es.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"preset.es.js","sources":["../../src/models/preset.ts"],"sourcesContent":[null],"names":[],"mappings":";;;AAGM,SAAU,iBAAiB,CAAC,QAAmC,EAAA;IACnE,oBAAoB,CAAC,YAAY,CAAC;AAClC,IAAA,OAAO,QAAQ,CAAC,MAAM,CAAC,MAAM,IAAI,QAAQ,CAAC,KAAK,CAAU,QAAQ,EAAE,YAAY,CAAC;AAClF;;;;"}

package/dist/models/prompt.cjs

@@ -0,0 +1,12 @@
+'use strict';
+
+var prompt = require('../schema/prompt.cjs');
+var tenantIsolation = require('./plugins/tenantIsolation.cjs');
+
+function createPromptModel(mongoose) {
+    tenantIsolation.applyTenantIsolation(prompt);
+    return mongoose.models.Prompt || mongoose.model('Prompt', prompt);
+}
+
+exports.createPromptModel = createPromptModel;
+//# sourceMappingURL=prompt.cjs.map

package/dist/models/prompt.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt.cjs","sources":["../../src/models/prompt.ts"],"sourcesContent":[null],"names":["applyTenantIsolation","promptSchema"],"mappings":";;;;;AAIM,SAAU,iBAAiB,CAAC,QAAmC,EAAA;IACnEA,oCAAoB,CAACC,MAAY,CAAC;AAClC,IAAA,OAAO,QAAQ,CAAC,MAAM,CAAC,MAAM,IAAI,QAAQ,CAAC,KAAK,CAAU,QAAQ,EAAEA,MAAY,CAAC;AAClF;;;;"}

package/dist/models/prompt.es.js

@@ -0,0 +1,10 @@
+import promptSchema from '../schema/prompt.es.js';
+import { applyTenantIsolation } from './plugins/tenantIsolation.es.js';
+
+function createPromptModel(mongoose) {
+    applyTenantIsolation(promptSchema);
+    return mongoose.models.Prompt || mongoose.model('Prompt', promptSchema);
+}
+
+export { createPromptModel };
+//# sourceMappingURL=prompt.es.js.map

package/dist/models/prompt.es.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt.es.js","sources":["../../src/models/prompt.ts"],"sourcesContent":[null],"names":[],"mappings":";;;AAIM,SAAU,iBAAiB,CAAC,QAAmC,EAAA;IACnE,oBAAoB,CAAC,YAAY,CAAC;AAClC,IAAA,OAAO,QAAQ,CAAC,MAAM,CAAC,MAAM,IAAI,QAAQ,CAAC,KAAK,CAAU,QAAQ,EAAE,YAAY,CAAC;AAClF;;;;"}

package/dist/models/promptGroup.cjs

@@ -0,0 +1,13 @@
+'use strict';
+
+var promptGroup = require('../schema/promptGroup.cjs');
+var tenantIsolation = require('./plugins/tenantIsolation.cjs');
+
+function createPromptGroupModel(mongoose) {
+    tenantIsolation.applyTenantIsolation(promptGroup);
+    return (mongoose.models.PromptGroup ||
+        mongoose.model('PromptGroup', promptGroup));
+}
+
+exports.createPromptGroupModel = createPromptGroupModel;
+//# sourceMappingURL=promptGroup.cjs.map

package/dist/models/promptGroup.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"promptGroup.cjs","sources":["../../src/models/promptGroup.ts"],"sourcesContent":[null],"names":["applyTenantIsolation","promptGroupSchema"],"mappings":";;;;;AAIM,SAAU,sBAAsB,CAAC,QAAmC,EAAA;IACxEA,oCAAoB,CAACC,WAAiB,CAAC;AACvC,IAAA,QACE,QAAQ,CAAC,MAAM,CAAC,WAAW;QAC3B,QAAQ,CAAC,KAAK,CAAuB,aAAa,EAAEA,WAAiB,CAAC;AAE1E;;;;"}

package/dist/models/promptGroup.es.js

@@ -0,0 +1,11 @@
+import promptGroupSchema from '../schema/promptGroup.es.js';
+import { applyTenantIsolation } from './plugins/tenantIsolation.es.js';
+
+function createPromptGroupModel(mongoose) {
+    applyTenantIsolation(promptGroupSchema);
+    return (mongoose.models.PromptGroup ||
+        mongoose.model('PromptGroup', promptGroupSchema));
+}
+
+export { createPromptGroupModel };
+//# sourceMappingURL=promptGroup.es.js.map

package/dist/models/promptGroup.es.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"promptGroup.es.js","sources":["../../src/models/promptGroup.ts"],"sourcesContent":[null],"names":[],"mappings":";;;AAIM,SAAU,sBAAsB,CAAC,QAAmC,EAAA;IACxE,oBAAoB,CAAC,iBAAiB,CAAC;AACvC,IAAA,QACE,QAAQ,CAAC,MAAM,CAAC,WAAW;QAC3B,QAAQ,CAAC,KAAK,CAAuB,aAAa,EAAE,iBAAiB,CAAC;AAE1E;;;;"}

package/dist/models/role.cjs

@@ -0,0 +1,12 @@
+'use strict';
+
+var role = require('../schema/role.cjs');
+var tenantIsolation = require('./plugins/tenantIsolation.cjs');
+
+function createRoleModel(mongoose) {
+    tenantIsolation.applyTenantIsolation(role);
+    return mongoose.models.Role || mongoose.model('Role', role);
+}
+
+exports.createRoleModel = createRoleModel;
+//# sourceMappingURL=role.cjs.map

package/dist/models/role.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"role.cjs","sources":["../../src/models/role.ts"],"sourcesContent":[null],"names":["applyTenantIsolation","roleSchema"],"mappings":";;;;;AAIM,SAAU,eAAe,CAAC,QAAmC,EAAA;IACjEA,oCAAoB,CAACC,IAAU,CAAC;AAChC,IAAA,OAAO,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,QAAQ,CAAC,KAAK,CAAQ,MAAM,EAAEA,IAAU,CAAC;AAC1E;;;;"}

package/dist/models/role.es.js

@@ -0,0 +1,10 @@
+import roleSchema from '../schema/role.es.js';
+import { applyTenantIsolation } from './plugins/tenantIsolation.es.js';
+
+function createRoleModel(mongoose) {
+    applyTenantIsolation(roleSchema);
+    return mongoose.models.Role || mongoose.model('Role', roleSchema);
+}
+
+export { createRoleModel };
+//# sourceMappingURL=role.es.js.map

package/dist/models/role.es.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"role.es.js","sources":["../../src/models/role.ts"],"sourcesContent":[null],"names":[],"mappings":";;;AAIM,SAAU,eAAe,CAAC,QAAmC,EAAA;IACjE,oBAAoB,CAAC,UAAU,CAAC;AAChC,IAAA,OAAO,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,QAAQ,CAAC,KAAK,CAAQ,MAAM,EAAE,UAAU,CAAC;AAC1E;;;;"}

package/dist/models/session.cjs

@@ -0,0 +1,12 @@
+'use strict';
+
+var session = require('../schema/session.cjs');
+var tenantIsolation = require('./plugins/tenantIsolation.cjs');
+
+function createSessionModel(mongoose) {
+    tenantIsolation.applyTenantIsolation(session);
+    return mongoose.models.Session || mongoose.model('Session', session);
+}
+
+exports.createSessionModel = createSessionModel;
+//# sourceMappingURL=session.cjs.map

package/dist/models/session.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.cjs","sources":["../../src/models/session.ts"],"sourcesContent":[null],"names":["applyTenantIsolation","sessionSchema"],"mappings":";;;;;AAIM,SAAU,kBAAkB,CAAC,QAAmC,EAAA;IACpEA,oCAAoB,CAACC,OAAa,CAAC;AACnC,IAAA,OAAO,QAAQ,CAAC,MAAM,CAAC,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAa,SAAS,EAAEA,OAAa,CAAC;AACxF;;;;"}

package/dist/models/session.es.js

@@ -0,0 +1,10 @@
+import sessionSchema from '../schema/session.es.js';
+import { applyTenantIsolation } from './plugins/tenantIsolation.es.js';
+
+function createSessionModel(mongoose) {
+    applyTenantIsolation(sessionSchema);
+    return mongoose.models.Session || mongoose.model('Session', sessionSchema);
+}
+
+export { createSessionModel };
+//# sourceMappingURL=session.es.js.map

package/dist/models/session.es.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.es.js","sources":["../../src/models/session.ts"],"sourcesContent":[null],"names":[],"mappings":";;;AAIM,SAAU,kBAAkB,CAAC,QAAmC,EAAA;IACpE,oBAAoB,CAAC,aAAa,CAAC;AACnC,IAAA,OAAO,QAAQ,CAAC,MAAM,CAAC,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAa,SAAS,EAAE,aAAa,CAAC;AACxF;;;;"}

package/dist/models/sharedLink.cjs

@@ -0,0 +1,12 @@
+'use strict';
+
+var share = require('../schema/share.cjs');
+var tenantIsolation = require('./plugins/tenantIsolation.cjs');
+
+function createSharedLinkModel(mongoose) {
+    tenantIsolation.applyTenantIsolation(share);
+    return mongoose.models.SharedLink || mongoose.model('SharedLink', share);
+}
+
+exports.createSharedLinkModel = createSharedLinkModel;
+//# sourceMappingURL=sharedLink.cjs.map

package/dist/models/sharedLink.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"sharedLink.cjs","sources":["../../src/models/sharedLink.ts"],"sourcesContent":[null],"names":["applyTenantIsolation","shareSchema"],"mappings":";;;;;AAGM,SAAU,qBAAqB,CAAC,QAAmC,EAAA;IACvEA,oCAAoB,CAACC,KAAW,CAAC;AACjC,IAAA,OAAO,QAAQ,CAAC,MAAM,CAAC,UAAU,IAAI,QAAQ,CAAC,KAAK,CAAc,YAAY,EAAEA,KAAW,CAAC;AAC7F;;;;"}

package/dist/models/sharedLink.es.js

@@ -0,0 +1,10 @@
+import shareSchema from '../schema/share.es.js';
+import { applyTenantIsolation } from './plugins/tenantIsolation.es.js';
+
+function createSharedLinkModel(mongoose) {
+    applyTenantIsolation(shareSchema);
+    return mongoose.models.SharedLink || mongoose.model('SharedLink', shareSchema);
+}
+
+export { createSharedLinkModel };
+//# sourceMappingURL=sharedLink.es.js.map

package/dist/models/sharedLink.es.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sharedLink.es.js","sources":["../../src/models/sharedLink.ts"],"sourcesContent":[null],"names":[],"mappings":";;;AAGM,SAAU,qBAAqB,CAAC,QAAmC,EAAA;IACvE,oBAAoB,CAAC,WAAW,CAAC;AACjC,IAAA,OAAO,QAAQ,CAAC,MAAM,CAAC,UAAU,IAAI,QAAQ,CAAC,KAAK,CAAc,YAAY,EAAE,WAAW,CAAC;AAC7F;;;;"}

package/dist/models/systemGrant.cjs

@@ -0,0 +1,16 @@
+'use strict';
+
+var systemGrant = require('../schema/systemGrant.cjs');
+
+/**
+ * SystemGrant is a cross-tenant control plane — its query logic in systemGrant methods
+ * explicitly handles tenantId conditions (platform-level vs tenant-scoped grants).
+ * Do NOT apply tenant isolation plugin here; it would inject a hard tenantId equality
+ * filter that conflicts with the $and/$or logic in hasCapabilityForPrincipals.
+ */
+function createSystemGrantModel(mongoose) {
+    return (mongoose.models.SystemGrant || mongoose.model('SystemGrant', systemGrant));
+}
+
+exports.createSystemGrantModel = createSystemGrantModel;
+//# sourceMappingURL=systemGrant.cjs.map

package/dist/models/systemGrant.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"systemGrant.cjs","sources":["../../src/models/systemGrant.ts"],"sourcesContent":[null],"names":["systemGrantSchema"],"mappings":";;;;AAGA;;;;;AAKG;AACG,SAAU,sBAAsB,CAAC,QAAmC,EAAA;AACxE,IAAA,QACE,QAAQ,CAAC,MAAM,CAAC,WAAW,IAAI,QAAQ,CAAC,KAAK,CAAiB,aAAa,EAAEA,WAAiB,CAAC;AAEnG;;;;"}

package/dist/models/systemGrant.es.js

@@ -0,0 +1,14 @@
+import systemGrantSchema from '../schema/systemGrant.es.js';
+
+/**
+ * SystemGrant is a cross-tenant control plane — its query logic in systemGrant methods
+ * explicitly handles tenantId conditions (platform-level vs tenant-scoped grants).
+ * Do NOT apply tenant isolation plugin here; it would inject a hard tenantId equality
+ * filter that conflicts with the $and/$or logic in hasCapabilityForPrincipals.
+ */
+function createSystemGrantModel(mongoose) {
+    return (mongoose.models.SystemGrant || mongoose.model('SystemGrant', systemGrantSchema));
+}
+
+export { createSystemGrantModel };
+//# sourceMappingURL=systemGrant.es.js.map

package/dist/models/systemGrant.es.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"systemGrant.es.js","sources":["../../src/models/systemGrant.ts"],"sourcesContent":[null],"names":[],"mappings":";;AAGA;;;;;AAKG;AACG,SAAU,sBAAsB,CAAC,QAAmC,EAAA;AACxE,IAAA,QACE,QAAQ,CAAC,MAAM,CAAC,WAAW,IAAI,QAAQ,CAAC,KAAK,CAAiB,aAAa,EAAE,iBAAiB,CAAC;AAEnG;;;;"}

package/dist/models/token.cjs

@@ -0,0 +1,12 @@
+'use strict';
+
+var token = require('../schema/token.cjs');
+var tenantIsolation = require('./plugins/tenantIsolation.cjs');
+
+function createTokenModel(mongoose) {
+    tenantIsolation.applyTenantIsolation(token);
+    return mongoose.models.Token || mongoose.model('Token', token);
+}
+
+exports.createTokenModel = createTokenModel;
+//# sourceMappingURL=token.cjs.map

package/dist/models/token.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.cjs","sources":["../../src/models/token.ts"],"sourcesContent":[null],"names":["applyTenantIsolation","tokenSchema"],"mappings":";;;;;AAIM,SAAU,gBAAgB,CAAC,QAAmC,EAAA;IAClEA,oCAAoB,CAACC,KAAW,CAAC;AACjC,IAAA,OAAO,QAAQ,CAAC,MAAM,CAAC,KAAK,IAAI,QAAQ,CAAC,KAAK,CAAW,OAAO,EAAEA,KAAW,CAAC;AAChF;;;;"}

package/dist/models/token.es.js

@@ -0,0 +1,10 @@
+import tokenSchema from '../schema/token.es.js';
+import { applyTenantIsolation } from './plugins/tenantIsolation.es.js';
+
+function createTokenModel(mongoose) {
+    applyTenantIsolation(tokenSchema);
+    return mongoose.models.Token || mongoose.model('Token', tokenSchema);
+}
+
+export { createTokenModel };
+//# sourceMappingURL=token.es.js.map

package/dist/models/token.es.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.es.js","sources":["../../src/models/token.ts"],"sourcesContent":[null],"names":[],"mappings":";;;AAIM,SAAU,gBAAgB,CAAC,QAAmC,EAAA;IAClE,oBAAoB,CAAC,WAAW,CAAC;AACjC,IAAA,OAAO,QAAQ,CAAC,MAAM,CAAC,KAAK,IAAI,QAAQ,CAAC,KAAK,CAAW,OAAO,EAAE,WAAW,CAAC;AAChF;;;;"}

package/dist/models/toolCall.cjs

@@ -0,0 +1,12 @@
+'use strict';
+
+var toolCall = require('../schema/toolCall.cjs');
+var tenantIsolation = require('./plugins/tenantIsolation.cjs');
+
+function createToolCallModel(mongoose) {
+    tenantIsolation.applyTenantIsolation(toolCall);
+    return mongoose.models.ToolCall || mongoose.model('ToolCall', toolCall);
+}
+
+exports.createToolCallModel = createToolCallModel;
+//# sourceMappingURL=toolCall.cjs.map

package/dist/models/toolCall.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"toolCall.cjs","sources":["../../src/models/toolCall.ts"],"sourcesContent":[null],"names":["applyTenantIsolation","toolCallSchema"],"mappings":";;;;;AAGM,SAAU,mBAAmB,CAAC,QAAmC,EAAA;IACrEA,oCAAoB,CAACC,QAAc,CAAC;AACpC,IAAA,OAAO,QAAQ,CAAC,MAAM,CAAC,QAAQ,IAAI,QAAQ,CAAC,KAAK,CAAgB,UAAU,EAAEA,QAAc,CAAC;AAC9F;;;;"}

package/dist/models/toolCall.es.js

@@ -0,0 +1,10 @@
+import toolCallSchema from '../schema/toolCall.es.js';
+import { applyTenantIsolation } from './plugins/tenantIsolation.es.js';
+
+function createToolCallModel(mongoose) {
+    applyTenantIsolation(toolCallSchema);
+    return mongoose.models.ToolCall || mongoose.model('ToolCall', toolCallSchema);
+}
+
+export { createToolCallModel };
+//# sourceMappingURL=toolCall.es.js.map

package/dist/models/toolCall.es.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"toolCall.es.js","sources":["../../src/models/toolCall.ts"],"sourcesContent":[null],"names":[],"mappings":";;;AAGM,SAAU,mBAAmB,CAAC,QAAmC,EAAA;IACrE,oBAAoB,CAAC,cAAc,CAAC;AACpC,IAAA,OAAO,QAAQ,CAAC,MAAM,CAAC,QAAQ,IAAI,QAAQ,CAAC,KAAK,CAAgB,UAAU,EAAE,cAAc,CAAC;AAC9F;;;;"}

package/dist/models/transaction.cjs

@@ -0,0 +1,12 @@
+'use strict';
+
+var transaction = require('../schema/transaction.cjs');
+var tenantIsolation = require('./plugins/tenantIsolation.cjs');
+
+function createTransactionModel(mongoose) {
+    tenantIsolation.applyTenantIsolation(transaction);
+    return (mongoose.models.Transaction || mongoose.model('Transaction', transaction));
+}
+
+exports.createTransactionModel = createTransactionModel;
+//# sourceMappingURL=transaction.cjs.map

package/dist/models/transaction.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"transaction.cjs","sources":["../../src/models/transaction.ts"],"sourcesContent":[null],"names":["applyTenantIsolation","transactionSchema"],"mappings":";;;;;AAGM,SAAU,sBAAsB,CAAC,QAAmC,EAAA;IACxEA,oCAAoB,CAACC,WAAiB,CAAC;AACvC,IAAA,QACE,QAAQ,CAAC,MAAM,CAAC,WAAW,IAAI,QAAQ,CAAC,KAAK,CAAe,aAAa,EAAEA,WAAiB,CAAC;AAEjG;;;;"}

package/dist/models/transaction.es.js

@@ -0,0 +1,10 @@
+import transactionSchema from '../schema/transaction.es.js';
+import { applyTenantIsolation } from './plugins/tenantIsolation.es.js';
+
+function createTransactionModel(mongoose) {
+    applyTenantIsolation(transactionSchema);
+    return (mongoose.models.Transaction || mongoose.model('Transaction', transactionSchema));
+}
+
+export { createTransactionModel };
+//# sourceMappingURL=transaction.es.js.map