@nextsparkjs/core 0.1.0-beta.194 → 0.1.0-beta.195

package/dist/routes/_internal/superadmin-layout.cc.d.ts

@@ -10,7 +10,8 @@ export declare const withSuperadminAreaMessages: (Layout: ComponentType<Superadm
 /**
  * What a project's superadmin layout is composed with in Cache Components mode (the manifest's `compose` of that
  * variant): the mode's messages and the server-side role check, then core's client guard around the project's layout,
- * as `withSuperadminGuard` does in the ISR module. A module of its own so only the superadmin route group imports the
+ * as `withSuperadminGuard` does in the ISR module. The guard is told the server checked the role (`serverChecked`), so it
+ * renders the area while the client session loads. A module of its own so only the superadmin route group imports the
  * guard, the role check and their client components.
  */
 export declare const withSuperadminGuard: (ProjectLayout: ComponentType<SuperadminLayoutProps>) => ({ children }: {

package/dist/routes/_internal/superadmin-layout.cc.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"superadmin-layout.cc.d.ts","sourceRoot":"","sources":["../../../src/routes/_internal/superadmin-layout.cc.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,OAAO,CAAA;AAE1C,OAAO,EAAyB,KAAK,qBAAqB,EAAE,MAAM,qBAAqB,CAAA;AAGvF;;;GAGG;AACH,eAAO,MAAM,0BAA0B,GAAI,QAAQ,aAAa,CAAC,qBAAqB,CAAC;;6CAA+D,CAAA;AAEtJ;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,GAAI,eAAe,aAAa,CAAC,qBAAqB,CAAC;;6CAAqE,CAAA"}
+{"version":3,"file":"superadmin-layout.cc.d.ts","sourceRoot":"","sources":["../../../src/routes/_internal/superadmin-layout.cc.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,OAAO,CAAA;AAE1C,OAAO,EAAyB,KAAK,qBAAqB,EAAE,MAAM,qBAAqB,CAAA;AAGvF;;;GAGG;AACH,eAAO,MAAM,0BAA0B,GAAI,QAAQ,aAAa,CAAC,qBAAqB,CAAC;;6CAA+D,CAAA;AAEtJ;;;;;;GAMG;AACH,eAAO,MAAM,mBAAmB,GAAI,eAAe,aAAa,CAAC,qBAAqB,CAAC;;6CAA2E,CAAA"}

package/dist/routes/_internal/superadmin-layout.cc.js

@@ -2,4 +2,4 @@ import { withSuperadminMessages } from "./group-layouts.cc.js";
 import { guardSuperadminLayout } from "./superadmin-layout.js";
 import { withAreaGate } from "./area-access.js";
 export const withSuperadminAreaMessages = (Layout) => withSuperadminMessages(withAreaGate("superadmin", Layout));
-export const withSuperadminGuard = (ProjectLayout) => withSuperadminAreaMessages(guardSuperadminLayout(ProjectLayout));
+export const withSuperadminGuard = (ProjectLayout) => withSuperadminAreaMessages(guardSuperadminLayout(ProjectLayout, true));

package/dist/routes/_internal/superadmin-layout.d.ts

@@ -4,13 +4,17 @@ export declare const defaultMetadata: Metadata;
 export interface SuperadminLayoutProps {
     children: React.ReactNode;
 }
+/** `serverChecked`: see SuperAdminGuard (only the Cache Components module passes it, after its role check). */
+type GuardedProps = SuperadminLayoutProps & {
+    serverChecked?: boolean;
+};
 /**
  * Superadmin Layout
  *
  * Protected layout for superadmin-only sections with dedicated sidebar navigation.
  * Owns the narrowly scoped client catalog for superadmin routes.
  */
-export declare function SuperadminLayout({ children }: SuperadminLayoutProps): import("react/jsx-runtime").JSX.Element;
+export declare function SuperadminLayout({ children, serverChecked }: GuardedProps): import("react/jsx-runtime").JSX.Element;
 /**
  * Wraps a layout for this route group in the group's client messages, after the server-side role check
  * (area-access): it runs before anything is rendered or sent, so a page load without the role gets a 307. The
@@ -26,10 +30,11 @@ export declare function withSuperadminMessages(ResolvedSuperadminLayout: Compone
  * area-access). Shared by the message wrappers of both rendering modes (`withSuperadminGuard` here, and
  * in `group-layouts.cc`).
  */
-export declare function guardSuperadminLayout(ProjectLayout: ComponentType<SuperadminLayoutProps>): ({ children }: SuperadminLayoutProps) => import("react/jsx-runtime").JSX.Element;
+export declare function guardSuperadminLayout(ProjectLayout: ComponentType<SuperadminLayoutProps>, serverChecked?: boolean): ({ children }: SuperadminLayoutProps) => import("react/jsx-runtime").JSX.Element;
 /**
  * The composition of a project's superadmin layout with core (the generated host): messages, then
  * `guardSuperadminLayout` around the project's layout.
  */
 export declare function withSuperadminGuard(ProjectLayout: ComponentType<SuperadminLayoutProps>): ({ children }: SuperadminLayoutProps) => Promise<import("react/jsx-runtime").JSX.Element>;
+export {};
 //# sourceMappingURL=superadmin-layout.d.ts.map

package/dist/routes/_internal/superadmin-layout.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"superadmin-layout.d.ts","sourceRoot":"","sources":["../../../src/routes/_internal/superadmin-layout.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,OAAO,CAAA;AAU1C,OAAO,EAAE,QAAQ,EAAE,MAAM,MAAM,CAAC;AAIhC,eAAO,MAAM,eAAe,EAAE,QAI7B,CAAC;AAEF,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC;CAC3B;AA6CD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,EAAE,QAAQ,EAAE,EAAE,qBAAqB,2CAUnE;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,wBAAwB,EAAE,aAAa,CAAC,qBAAqB,CAAC,IAChD,cAAc,qBAAqB,sDAUvF;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,aAAa,EAAE,aAAa,CAAC,qBAAqB,CAAC,IAC/C,cAAc,qBAAqB,6CAe5E;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,aAAa,EAAE,aAAa,CAAC,qBAAqB,CAAC,kBA1CpB,qBAAqB,sDA4CvF"}
+{"version":3,"file":"superadmin-layout.d.ts","sourceRoot":"","sources":["../../../src/routes/_internal/superadmin-layout.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,OAAO,CAAA;AAU1C,OAAO,EAAE,QAAQ,EAAE,MAAM,MAAM,CAAC;AAIhC,eAAO,MAAM,eAAe,EAAE,QAI7B,CAAC;AAEF,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC;CAC3B;AAED,+GAA+G;AAC/G,KAAK,YAAY,GAAG,qBAAqB,GAAG;IAAE,aAAa,CAAC,EAAE,OAAO,CAAA;CAAE,CAAA;AA6CvE;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,EAAE,QAAQ,EAAE,aAAa,EAAE,EAAE,YAAY,2CAUzE;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,wBAAwB,EAAE,aAAa,CAAC,qBAAqB,CAAC,IAChD,cAAc,qBAAqB,sDAUvF;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,aAAa,EAAE,aAAa,CAAC,qBAAqB,CAAC,EAAE,aAAa,UAAQ,IACtE,cAAc,qBAAqB,6CAe5E;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,aAAa,EAAE,aAAa,CAAC,qBAAqB,CAAC,kBA1CpB,qBAAqB,sDA4CvF"}

package/dist/routes/_internal/superadmin-layout.js

@@ -16,9 +16,9 @@ export const defaultMetadata = {
   robots: "noindex, nofollow"
   // Prevent search engine indexing
 };
-function SuperadminContent({ children }) {
+function SuperadminContent({ children, serverChecked }) {
   const pluginNavItems = getAllPluginNavItems("superadmin");
-  return /* @__PURE__ */ jsx(DashboardProviders, { children: /* @__PURE__ */ jsx(SuperAdminGuard, { children: /* @__PURE__ */ jsxs("div", { className: "flex h-screen bg-background", "data-cy": "superadmin-container", children: [
+  return /* @__PURE__ */ jsx(DashboardProviders, { children: /* @__PURE__ */ jsx(SuperAdminGuard, { serverChecked, children: /* @__PURE__ */ jsxs("div", { className: "flex h-screen bg-background", "data-cy": "superadmin-container", children: [
     /* @__PURE__ */ jsx("div", { className: "hidden lg:block", children: /* @__PURE__ */ jsx(SuperadminSidebar, { pluginItems: pluginNavItems }) }),
     /* @__PURE__ */ jsxs("div", { className: "flex-1 flex flex-col overflow-hidden", children: [
       /* @__PURE__ */ jsx("div", { className: "lg:hidden bg-card border-b border-border p-4", children: /* @__PURE__ */ jsxs("div", { className: "flex items-center gap-2", children: [
@@ -32,8 +32,8 @@ function SuperadminContent({ children }) {
     ] })
   ] }) }) });
 }
-export function SuperadminLayout({ children }) {
-  return /* @__PURE__ */ jsx(Suspense, { fallback: /* @__PURE__ */ jsx("div", { className: "min-h-screen flex items-center justify-center", children: /* @__PURE__ */ jsx(Loader2, { className: "h-8 w-8 animate-spin text-muted-foreground" }) }), children: /* @__PURE__ */ jsx(SuperadminContent, { children }) });
+export function SuperadminLayout({ children, serverChecked }) {
+  return /* @__PURE__ */ jsx(Suspense, { fallback: /* @__PURE__ */ jsx("div", { className: "min-h-screen flex items-center justify-center", children: /* @__PURE__ */ jsx(Loader2, { className: "h-8 w-8 animate-spin text-muted-foreground" }) }), children: /* @__PURE__ */ jsx(SuperadminContent, { serverChecked, children }) });
 }
 export function withSuperadminMessages(ResolvedSuperadminLayout) {
   return async function SuperadminLayoutWithMessages({ children }) {
@@ -43,9 +43,9 @@ export function withSuperadminMessages(ResolvedSuperadminLayout) {
     return /* @__PURE__ */ jsx(NextIntlClientProvider, { messages: selectMessages(messages, "superadmin", configuredNamespaces.superadmin), children: /* @__PURE__ */ jsx(ResolvedSuperadminLayout, { children }) });
   };
 }
-export function guardSuperadminLayout(ProjectLayout) {
+export function guardSuperadminLayout(ProjectLayout, serverChecked = false) {
   return function GuardedSuperadminLayout({ children }) {
-    return /* @__PURE__ */ jsx(Suspense, { fallback: /* @__PURE__ */ jsx("div", { className: "min-h-screen flex items-center justify-center", children: /* @__PURE__ */ jsx(Loader2, { className: "h-8 w-8 animate-spin text-muted-foreground" }) }), children: /* @__PURE__ */ jsx(DashboardProviders, { children: /* @__PURE__ */ jsx(SuperAdminGuard, { children: /* @__PURE__ */ jsx(ProjectLayout, { children }) }) }) });
+    return /* @__PURE__ */ jsx(Suspense, { fallback: /* @__PURE__ */ jsx("div", { className: "min-h-screen flex items-center justify-center", children: /* @__PURE__ */ jsx(Loader2, { className: "h-8 w-8 animate-spin text-muted-foreground" }) }), children: /* @__PURE__ */ jsx(DashboardProviders, { children: /* @__PURE__ */ jsx(SuperAdminGuard, { serverChecked, children: /* @__PURE__ */ jsx(ProjectLayout, { children }) }) }) });
   };
 }
 export function withSuperadminGuard(ProjectLayout) {

package/dist/routes/_internal/suspended-route.d.ts

@@ -0,0 +1,16 @@
+import { type ReactNode } from 'react';
+/**
+ * A route component behind its own Suspense boundary, for a host with `cacheComponents` on.
+ *
+ * A page that awaits `params` (or `searchParams`), redirects or answers notFound() is request-time work. The
+ * layouts of the Cache Components host already stream the page after their shell, but Next.js's instant-navigation
+ * check (the dev server runs it on every page, and logs "Could not validate ..." when it fails) wants a boundary
+ * between the segment it validates and that work, so a navigation to the segment finishes at once and the page
+ * streams in. The status a visitor gets is the one the host already gives: a redirect or a 404 thrown after the
+ * shell is sent reaches the browser as a 200 with a redirect or a not-found page.
+ *
+ * Only the Cache Components modules (`*.cc`) use it. An ISR host's pages are rendered before anything is sent, and
+ * keep a real 307 and 404.
+ */
+export declare function behindSuspense<Props extends object>(Route: (props: Props) => ReactNode | Promise<ReactNode>): (props: Props) => import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=suspended-route.d.ts.map

package/dist/routes/_internal/suspended-route.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"suspended-route.d.ts","sourceRoot":"","sources":["../../../src/routes/_internal/suspended-route.tsx"],"names":[],"mappings":"AAAA,OAAO,EAAY,KAAK,SAAS,EAAE,MAAM,OAAO,CAAA;AAEhD;;;;;;;;;;;;GAYG;AACH,wBAAgB,cAAc,CAAC,KAAK,SAAS,MAAM,EAAE,KAAK,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,IACtE,OAAO,KAAK,6CAOjD"}

package/dist/routes/_internal/suspended-route.js

@@ -0,0 +1,7 @@
+import { jsx } from "react/jsx-runtime";
+import { Suspense } from "react";
+export function behindSuspense(Route) {
+  return function RouteBehindSuspense(props) {
+    return /* @__PURE__ */ jsx(Suspense, { fallback: null, children: /* @__PURE__ */ jsx(Route, { ...props }) });
+  };
+}

package/dist/routes/api/auth/[...all]/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../src/routes/api/auth/[...all]/route.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAiBxD,wBAAsB,OAAO,CAAC,GAAG,EAAE,WAAW,kCAE7C;AAID,wBAAsB,GAAG,CAAC,GAAG,EAAE,WAAW,EAAE,OAAO,EAAE;IAAE,MAAM,EAAE,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAA;CAAE,qBA4C1F;AAGD,wBAAsB,IAAI,CAAC,GAAG,EAAE,WAAW,qBAwJ1C"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../src/routes/api/auth/[...all]/route.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAkBxD,wBAAsB,OAAO,CAAC,GAAG,EAAE,WAAW,kCAE7C;AAID,wBAAsB,GAAG,CAAC,GAAG,EAAE,WAAW,EAAE,OAAO,EAAE;IAAE,MAAM,EAAE,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAA;CAAE,qBA4C1F;AAGD,wBAAsB,IAAI,CAAC,GAAG,EAAE,WAAW,qBAwI1C"}

package/dist/routes/api/auth/[...all]/route.js

@@ -6,6 +6,7 @@ import { isPublicSignupRestricted } from "@nextsparkjs/core/lib/teams/helpers";
 import { TeamService } from "@nextsparkjs/core/lib/services";
 import { wrapAuthHandlerWithCors, handleCorsPreflightRequest, addCorsHeaders } from "@nextsparkjs/core/lib/api/helpers";
 import { checkDistributedRateLimit } from "@nextsparkjs/core/lib/api/rate-limit";
+import { getClientIp } from "@nextsparkjs/core/lib/api/client-ip";
 import { withSignupContext } from "@nextsparkjs/core/lib/auth-context";
 import { dispatchSecurityNotificationsForRequest } from "@nextsparkjs/core/lib/auth/security-notifications";
 import { verifyEmailPageUrl } from "@nextsparkjs/core/lib/auth/verify-email-link";
@@ -39,19 +40,10 @@ export async function GET(req, context) {
 }
 export async function POST(req) {
   var _a, _b, _c, _d, _e;
-  const clientIp = (() => {
-    const cfIp = req.headers.get("cf-connecting-ip");
-    if (cfIp) return cfIp;
-    const forwardedFor = req.headers.get("x-forwarded-for");
-    if (forwardedFor) {
-      const ips = forwardedFor.split(",").map((ip) => ip.trim()).filter(Boolean);
-      if (ips.length > 0) return ips[ips.length - 1];
-    }
-    return req.headers.get("x-real-ip") || "unknown";
-  })();
+  const clientIp = getClientIp(req.headers);
   const rateLimitResult = await checkDistributedRateLimit(`auth:ip:${clientIp}`, "auth");
   if (!rateLimitResult.allowed) {
-    return new NextResponse(JSON.stringify({ error: "Too many requests" }), {
+    return wrapAuthHandlerWithCors(async () => new NextResponse(JSON.stringify({ error: "Too many requests" }), {
       status: 429,
       headers: {
         "Content-Type": "application/json",
@@ -60,7 +52,7 @@ export async function POST(req) {
         "X-RateLimit-Remaining": "0",
         "X-RateLimit-Reset": rateLimitResult.resetTime.toString()
       }
-    });
+    }), req);
   }
   const readinessResponse = await getAuthReadinessResponse(req);
   if (readinessResponse) {

package/dist/routes/api/csp-report/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../src/routes/api/csp-report/route.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAgB,MAAM,aAAa,CAAC;AA2ExD,wBAAsB,IAAI,CAAC,OAAO,EAAE,WAAW,qBAyF9C;AAID,wBAAsB,OAAO,sBAS5B"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../src/routes/api/csp-report/route.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAgB,MAAM,aAAa,CAAC;AA2DxD,wBAAsB,IAAI,CAAC,OAAO,EAAE,WAAW,qBAyF9C;AAID,wBAAsB,OAAO,sBAS5B"}

package/dist/routes/api/csp-report/route.js

@@ -1,4 +1,5 @@
 import { randomUUID } from "node:crypto";
+import { getClientIp } from "@nextsparkjs/core/lib/api/client-ip";
 let checkDistributedRateLimit = null;
 let createRateLimitErrorResponse = null;
 let rateLimitLoaded = false;
@@ -16,25 +17,13 @@ async function ensureRateLimitLoaded() {
 const getAllowedOrigin = () => {
   return process.env.NEXT_PUBLIC_APP_URL || "http://localhost:3000";
 };
-function getClientIp(request) {
-  const forwardedFor = request.headers.get("x-forwarded-for");
-  if (forwardedFor) {
-    const ips = forwardedFor.split(",").map((ip) => ip.trim());
-    if (ips[0]) return ips[0];
-  }
-  const realIp = request.headers.get("x-real-ip");
-  if (realIp) return realIp;
-  const cfIp = request.headers.get("cf-connecting-ip");
-  if (cfIp) return cfIp;
-  return "unknown";
-}
 export async function POST(request) {
   await ensureRateLimitLoaded();
   const requestId = randomUUID().slice(0, 8);
   let rateLimitHeaders = {};
   if (checkDistributedRateLimit && createRateLimitErrorResponse) {
     try {
-      const clientIp = getClientIp(request);
+      const clientIp = getClientIp(request.headers);
       const rateLimitResult = await checkDistributedRateLimit(`csp-report:ip:${clientIp}`, "api");
       if (!rateLimitResult.allowed) {
         console.warn(`[CSP Report ${requestId}] Rate limit exceeded for IP: ${clientIp}`);

package/dist/routes/api/devtools/config/entities/route.d.ts

@@ -1,4 +1,5 @@
 import { NextResponse } from "next/server";
+import { corsPreflight } from '@nextsparkjs/core/lib/api/cors-response';
 /**
  * GET /api/devtools/config/entities
  *
@@ -6,4 +7,5 @@ import { NextResponse } from "next/server";
  * Only accessible to developer role
  */
 export declare const GET: (request: import("next/server").NextRequest) => Promise<NextResponse>;
+export declare const OPTIONS: typeof corsPreflight;
 //# sourceMappingURL=route.d.ts.map

package/dist/routes/api/devtools/config/entities/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../src/routes/api/devtools/config/entities/route.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAmC3C;;;;;GAKG;AACH,eAAO,MAAM,GAAG,uEAwEN,CAAC"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../src/routes/api/devtools/config/entities/route.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAI3C,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAC;AAgCxE;;;;;GAKG;AACH,eAAO,MAAM,GAAG,uEAwEN,CAAC;AAEX,eAAO,MAAM,OAAO,sBAAgB,CAAC"}

package/dist/routes/api/devtools/config/entities/route.js

@@ -2,6 +2,7 @@ import { getTypedSession } from "@nextsparkjs/core/lib/auth";
 import { NextResponse } from "next/server";
 import { getEntityRegistry } from "@nextsparkjs/core/lib/entities/queries";
 import { withRateLimitTier } from "@nextsparkjs/core/lib/api/rate-limit";
+import { corsPreflight } from "@nextsparkjs/core/lib/api/cors-response";
 function isEntityConfig(entity) {
   return "slug" in entity;
 }
@@ -61,3 +62,4 @@ export const GET = withRateLimitTier(async (request) => {
     );
   }
 }, "read");
+export const OPTIONS = corsPreflight;

package/dist/routes/api/devtools/config/theme/route.d.ts

@@ -1,4 +1,5 @@
 import { NextResponse } from "next/server";
+import { corsPreflight } from '@nextsparkjs/core/lib/api/cors-response';
 /**
  * GET /api/devtools/config/theme
  *
@@ -6,4 +7,5 @@ import { NextResponse } from "next/server";
  * Only accessible to developer role
  */
 export declare const GET: (request: import("next/server").NextRequest) => Promise<NextResponse>;
+export declare const OPTIONS: typeof corsPreflight;
 //# sourceMappingURL=route.d.ts.map

package/dist/routes/api/devtools/config/theme/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../src/routes/api/devtools/config/theme/route.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAI3C;;;;;GAKG;AACH,eAAO,MAAM,GAAG,uEAoDN,CAAC"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../src/routes/api/devtools/config/theme/route.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAG3C,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAC;AAExE;;;;;GAKG;AACH,eAAO,MAAM,GAAG,uEAoDN,CAAC;AAEX,eAAO,MAAM,OAAO,sBAAgB,CAAC"}

package/dist/routes/api/devtools/config/theme/route.js

@@ -2,6 +2,7 @@ import { getTypedSession } from "@nextsparkjs/core/lib/auth";
 import { NextResponse } from "next/server";
 import { ThemeService } from "@nextsparkjs/core/lib/services/theme.service";
 import { withRateLimitTier } from "@nextsparkjs/core/lib/api/rate-limit";
+import { corsPreflight } from "@nextsparkjs/core/lib/api/cors-response";
 export const GET = withRateLimitTier(async (request) => {
   try {
     const session = await getTypedSession(request.headers);
@@ -46,3 +47,4 @@ export const GET = withRateLimitTier(async (request) => {
     );
   }
 }, "read");
+export const OPTIONS = corsPreflight;

package/dist/routes/api/devtools/tests/[...path]/route.d.ts

@@ -1,4 +1,5 @@
 import { NextResponse } from "next/server";
+import { corsPreflight } from '@nextsparkjs/core/lib/api/cors-response';
 /**
  * GET /api/devtools/tests/[...path]
  *
@@ -12,4 +13,5 @@ export declare const GET: (request: import("next/server").NextRequest, args_0: {
         path: string[];
     }>;
 }) => Promise<NextResponse>;
+export declare const OPTIONS: typeof corsPreflight;
 //# sourceMappingURL=route.d.ts.map

package/dist/routes/api/devtools/tests/[...path]/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../src/routes/api/devtools/tests/[...path]/route.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAM3C;;;;;;;GAOG;AACH,eAAO,MAAM,GAAG;YAEQ,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;2BA0GzC,CAAC"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../src/routes/api/devtools/tests/[...path]/route.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAK3C,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAC;AAExE;;;;;;;GAOG;AACH,eAAO,MAAM,GAAG;YAEQ,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;2BA0GzC,CAAC;AAEX,eAAO,MAAM,OAAO,sBAAgB,CAAC"}

package/dist/routes/api/devtools/tests/[...path]/route.js

@@ -4,6 +4,7 @@ import { readFile, stat } from "fs/promises";
 import { join } from "path";
 import matter from "gray-matter";
 import { withRateLimitTier } from "@nextsparkjs/core/lib/api/rate-limit";
+import { corsPreflight } from "@nextsparkjs/core/lib/api/cors-response";
 export const GET = withRateLimitTier(async (request, { params }) => {
   try {
     const session = await getTypedSession(request.headers);
@@ -91,3 +92,4 @@ export const GET = withRateLimitTier(async (request, { params }) => {
     );
   }
 }, "read");
+export const OPTIONS = corsPreflight;

package/dist/routes/api/devtools/tests/route.d.ts

@@ -1,4 +1,5 @@
 import { NextResponse } from "next/server";
+import { corsPreflight } from '@nextsparkjs/core/lib/api/cors-response';
 /**
  * GET /api/devtools/tests
  *
@@ -6,4 +7,5 @@ import { NextResponse } from "next/server";
  * Only accessible to developer role
  */
 export declare const GET: (request: import("next/server").NextRequest) => Promise<NextResponse>;
+export declare const OPTIONS: typeof corsPreflight;
 //# sourceMappingURL=route.d.ts.map

package/dist/routes/api/devtools/tests/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../src/routes/api/devtools/tests/route.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAsD3C;;;;;GAKG;AACH,eAAO,MAAM,GAAG,uEAkEN,CAAC"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../src/routes/api/devtools/tests/route.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAI3C,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAC;AAmDxE;;;;;GAKG;AACH,eAAO,MAAM,GAAG,uEAkEN,CAAC;AAEX,eAAO,MAAM,OAAO,sBAAgB,CAAC"}

package/dist/routes/api/devtools/tests/route.js

@@ -3,6 +3,7 @@ import { NextResponse } from "next/server";
 import { readdir, stat } from "fs/promises";
 import { join } from "path";
 import { withRateLimitTier } from "@nextsparkjs/core/lib/api/rate-limit";
+import { corsPreflight } from "@nextsparkjs/core/lib/api/cors-response";
 async function buildFileTree(dirPath, basePath) {
   const entries = await readdir(dirPath, { withFileTypes: true });
   const tree = [];
@@ -87,3 +88,4 @@ export const GET = withRateLimitTier(async (request) => {
     );
   }
 }, "read");
+export const OPTIONS = corsPreflight;

package/dist/routes/api/health/route.d.ts

@@ -1,3 +1,5 @@
+import { corsPreflight } from "@nextsparkjs/core/lib/api/cors-response";
 import { NextRequest, NextResponse } from "next/server";
 export declare const GET: (request: NextRequest) => Promise<NextResponse>;
+export declare const OPTIONS: typeof corsPreflight;
 //# sourceMappingURL=route.d.ts.map

package/dist/routes/api/health/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../src/routes/api/health/route.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAExD,eAAO,MAAM,GAAG,iDA8CN,CAAC"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../src/routes/api/health/route.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAC;AAGxE,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAExD,eAAO,MAAM,GAAG,iDA8CN,CAAC;AAEX,eAAO,MAAM,OAAO,sBAAgB,CAAC"}

package/dist/routes/api/health/route.js

@@ -1,5 +1,6 @@
 import { queryWithRLS } from "@nextsparkjs/core/lib/db";
 import { withRateLimitTier } from "@nextsparkjs/core/lib/api/rate-limit";
+import { corsPreflight } from "@nextsparkjs/core/lib/api/cors-response";
 import { isRedisConfigured } from "@nextsparkjs/core/lib/rate-limit-redis";
 import { authenticateRequest } from "@nextsparkjs/core/lib/api/auth/dual-auth";
 import { NextResponse } from "next/server";
@@ -37,3 +38,4 @@ export const GET = withRateLimitTier(async (request) => {
     ...dbError ? { error: dbError } : {}
   }, { status: healthy ? 200 : 503 });
 }, "read");
+export const OPTIONS = corsPreflight;

package/dist/routes/api/internal/user-metadata/route.d.ts

@@ -1,3 +1,5 @@
 import { NextRequest, NextResponse } from 'next/server';
+import { corsPreflight } from '@nextsparkjs/core/lib/api/cors-response';
 export declare const POST: (request: NextRequest) => Promise<NextResponse>;
+export declare const OPTIONS: typeof corsPreflight;
 //# sourceMappingURL=route.d.ts.map

package/dist/routes/api/internal/user-metadata/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../src/routes/api/internal/user-metadata/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAMvD,eAAO,MAAM,IAAI,iDAwCN,CAAC"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../src/routes/api/internal/user-metadata/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAGvD,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAA;AAIvE,eAAO,MAAM,IAAI,iDAwCN,CAAC;AAEZ,eAAO,MAAM,OAAO,sBAAgB,CAAA"}

package/dist/routes/api/internal/user-metadata/route.js

@@ -1,6 +1,7 @@
 import { NextResponse } from "next/server";
 import { MetaService } from "@nextsparkjs/core/lib/services/meta.service";
 import { withRateLimitTier } from "@nextsparkjs/core/lib/api/rate-limit";
+import { corsPreflight } from "@nextsparkjs/core/lib/api/cors-response";
 import { authenticateRequest, createAuthFailureResponse } from "@nextsparkjs/core/lib/api/auth/dual-auth";
 export const POST = withRateLimitTier(async (req) => {
   try {
@@ -31,3 +32,4 @@ export const POST = withRateLimitTier(async (req) => {
     }, { status: 500 });
   }
 }, "write");
+export const OPTIONS = corsPreflight;

package/dist/routes/api/mcp/route.d.ts

@@ -21,7 +21,9 @@
  * - every tool call is audited to api_audit_log
  */
 import { NextRequest, NextResponse } from 'next/server';
+import { corsPreflight } from '@nextsparkjs/core/lib/api/cors-response';
 export declare const POST: (request: NextRequest) => Promise<NextResponse>;
 export declare function GET(): Promise<NextResponse>;
 export declare function DELETE(): Promise<NextResponse>;
+export declare const OPTIONS: typeof corsPreflight;
 //# sourceMappingURL=route.d.ts.map

package/dist/routes/api/mcp/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../src/routes/api/mcp/route.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AA0IvD,eAAO,MAAM,IAAI,iDAA0C,CAAA;AAE3D,wBAAsB,GAAG,IAAI,OAAO,CAAC,YAAY,CAAC,CAKjD;AAED,wBAAsB,MAAM,IAAI,OAAO,CAAC,YAAY,CAAC,CAKpD"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../src/routes/api/mcp/route.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAOvD,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAA;AAoIvE,eAAO,MAAM,IAAI,iDAA0C,CAAA;AAE3D,wBAAsB,GAAG,IAAI,OAAO,CAAC,YAAY,CAAC,CAKjD;AAED,wBAAsB,MAAM,IAAI,OAAO,CAAC,YAAY,CAAC,CAKpD;AAED,eAAO,MAAM,OAAO,sBAAgB,CAAA"}

package/dist/routes/api/mcp/route.js

@@ -5,6 +5,7 @@ import {
 } from "@nextsparkjs/core/lib/api/auth/dual-auth";
 import { validateApiKey } from "@nextsparkjs/core/lib/api/auth";
 import { withRateLimitTier } from "@nextsparkjs/core/lib/api/rate-limit";
+import { corsPreflight } from "@nextsparkjs/core/lib/api/cors-response";
 import { setEntityRegistry } from "@nextsparkjs/core/lib/entities/queries";
 import { createMcpEngine } from "@nextsparkjs/core/lib/mcp";
 import { ENTITY_REGISTRY, ENTITY_METADATA } from "@nextsparkjs/registries/entity-registry";
@@ -106,3 +107,4 @@ export async function DELETE() {
     { status: 405, headers: { Allow: "POST" } }
   );
 }
+export const OPTIONS = corsPreflight;

package/dist/routes/api/superadmin/subscriptions/route.d.ts

@@ -1,4 +1,5 @@
 import { NextRequest, NextResponse } from 'next/server';
+import { corsPreflight } from '@nextsparkjs/core/lib/api/cors-response';
 /**
  * GET /api/superadmin/subscriptions
  *
@@ -6,4 +7,5 @@ import { NextRequest, NextResponse } from 'next/server';
  * Supports filtering by status and pagination.
  */
 export declare const GET: (request: NextRequest) => Promise<NextResponse>;
+export declare const OPTIONS: typeof corsPreflight;
 //# sourceMappingURL=route.d.ts.map

package/dist/routes/api/superadmin/subscriptions/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../src/routes/api/superadmin/subscriptions/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAkDxD;;;;;GAKG;AACH,eAAO,MAAM,GAAG,iDAkQJ,CAAC"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../src/routes/api/superadmin/subscriptions/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAIxD,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAC;AA+CxE;;;;;GAKG;AACH,eAAO,MAAM,GAAG,iDAkQJ,CAAC;AAEb,eAAO,MAAM,OAAO,sBAAgB,CAAC"}

package/dist/routes/api/superadmin/subscriptions/route.js

@@ -2,6 +2,7 @@ import { NextResponse } from "next/server";
 import { getTypedSession } from "@nextsparkjs/core/lib/auth";
 import { queryWithRLS } from "@nextsparkjs/core/lib/db";
 import { withRateLimitTier } from "@nextsparkjs/core/lib/api/rate-limit";
+import { corsPreflight } from "@nextsparkjs/core/lib/api/cors-response";
 import { getBillingGateway } from "@nextsparkjs/core/lib/billing/gateways/factory";
 export const GET = withRateLimitTier(async (request) => {
   var _a;
@@ -233,3 +234,4 @@ export const GET = withRateLimitTier(async (request) => {
     );
   }
 }, "strict");
+export const OPTIONS = corsPreflight;

package/dist/routes/api/superadmin/teams/[teamId]/route.d.ts

@@ -1,4 +1,5 @@
 import { NextRequest, NextResponse } from 'next/server';
+import { corsPreflight } from '@nextsparkjs/core/lib/api/cors-response';
 /**
  * GET /api/superadmin/teams/[teamId]
  *
@@ -10,4 +11,5 @@ export declare const GET: (request: NextRequest, args_0: {
         teamId: string;
     }>;
 }) => Promise<NextResponse>;
+export declare const OPTIONS: typeof corsPreflight;
 //# sourceMappingURL=route.d.ts.map

package/dist/routes/api/superadmin/teams/[teamId]/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../src/routes/api/superadmin/teams/[teamId]/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AA6DxD;;;;;GAKG;AACH,eAAO,MAAM,GAAG;YAEQ,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;2BA8NvC,CAAC"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../src/routes/api/superadmin/teams/[teamId]/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAIxD,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAC;AA0DxE;;;;;GAKG;AACH,eAAO,MAAM,GAAG;YAEQ,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;2BA8NvC,CAAC;AAEb,eAAO,MAAM,OAAO,sBAAgB,CAAC"}

package/dist/routes/api/superadmin/teams/[teamId]/route.js

@@ -2,6 +2,7 @@ import { NextResponse } from "next/server";
 import { getTypedSession } from "@nextsparkjs/core/lib/auth";
 import { queryWithRLS } from "@nextsparkjs/core/lib/db";
 import { withRateLimitTier } from "@nextsparkjs/core/lib/api/rate-limit";
+import { corsPreflight } from "@nextsparkjs/core/lib/api/cors-response";
 import { getBillingGateway } from "@nextsparkjs/core/lib/billing/gateways/factory";
 export const GET = withRateLimitTier(async (request, { params }) => {
   var _a;
@@ -202,3 +203,4 @@ export const GET = withRateLimitTier(async (request, { params }) => {
     );
   }
 }, "strict");
+export const OPTIONS = corsPreflight;

package/dist/routes/api/superadmin/teams/route.d.ts

@@ -1,4 +1,5 @@
 import { NextRequest, NextResponse } from 'next/server';
+import { corsPreflight } from '@nextsparkjs/core/lib/api/cors-response';
 /**
  * GET /api/superadmin/teams
  *
@@ -17,4 +18,5 @@ import { NextRequest, NextResponse } from 'next/server';
  * - pagination: Pagination info
  */
 export declare const GET: (request: NextRequest) => Promise<NextResponse>;
+export declare const OPTIONS: typeof corsPreflight;
 //# sourceMappingURL=route.d.ts.map

package/dist/routes/api/superadmin/teams/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../src/routes/api/superadmin/teams/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAiBxD;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,GAAG,iDAwJJ,CAAC"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../src/routes/api/superadmin/teams/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAKxD,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAC;AAaxE;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,GAAG,iDAwJJ,CAAC;AAEb,eAAO,MAAM,OAAO,sBAAgB,CAAC"}

package/dist/routes/api/superadmin/teams/route.js

@@ -3,6 +3,7 @@ import { getTypedSession } from "@nextsparkjs/core/lib/auth";
 import { queryWithRLS } from "@nextsparkjs/core/lib/db";
 import { SYSTEM_ADMIN_TEAM_ID } from "@nextsparkjs/core/lib/api/auth/dual-auth";
 import { withRateLimitTier } from "@nextsparkjs/core/lib/api/rate-limit";
+import { corsPreflight } from "@nextsparkjs/core/lib/api/cors-response";
 export const GET = withRateLimitTier(async (request) => {
   var _a, _b, _c, _d;
   try {
@@ -129,3 +130,4 @@ export const GET = withRateLimitTier(async (request) => {
     );
   }
 }, "strict");
+export const OPTIONS = corsPreflight;

package/dist/routes/api/superadmin/users/[userId]/route.d.ts

@@ -1,4 +1,5 @@
 import { NextRequest, NextResponse } from 'next/server';
+import { corsPreflight } from '@nextsparkjs/core/lib/api/cors-response';
 interface RouteParams {
     params: Promise<{
         userId: string;
@@ -41,5 +42,6 @@ export declare const PATCH: (request: NextRequest, args_0: RouteParams) => Promi
  * - Delete the user account
  */
 export declare const DELETE: (request: NextRequest, args_0: RouteParams) => Promise<NextResponse>;
+export declare const OPTIONS: typeof corsPreflight;
 export {};
 //# sourceMappingURL=route.d.ts.map

package/dist/routes/api/superadmin/users/[userId]/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../src/routes/api/superadmin/users/[userId]/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAkCxD,UAAU,WAAW;IACnB,MAAM,EAAE,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACrC;AAED;;;;;;;;;;GAUG;AACH,eAAO,MAAM,GAAG,sEA6KJ,CAAC;AAOb;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,KAAK,sEA+JN,CAAC;AAEb;;;;;;;;;;GAUG;AACH,eAAO,MAAM,MAAM,sEAgIP,CAAC"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../src/routes/api/superadmin/users/[userId]/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAIxD,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAC;AA+BxE,UAAU,WAAW;IACnB,MAAM,EAAE,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACrC;AAED;;;;;;;;;;GAUG;AACH,eAAO,MAAM,GAAG,sEA6KJ,CAAC;AAOb;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,KAAK,sEA+JN,CAAC;AAEb;;;;;;;;;;GAUG;AACH,eAAO,MAAM,MAAM,sEAgIP,CAAC;AAEb,eAAO,MAAM,OAAO,sBAAgB,CAAC"}

package/dist/routes/api/superadmin/users/[userId]/route.js

@@ -2,6 +2,7 @@ import { NextResponse } from "next/server";
 import { getTypedSession } from "@nextsparkjs/core/lib/auth";
 import { queryWithRLS } from "@nextsparkjs/core/lib/db";
 import { withRateLimitTier } from "@nextsparkjs/core/lib/api/rate-limit";
+import { corsPreflight } from "@nextsparkjs/core/lib/api/cors-response";
 export const GET = withRateLimitTier(async (request, { params }) => {
   try {
     const session = await getTypedSession(request.headers);
@@ -360,3 +361,4 @@ export const DELETE = withRateLimitTier(async (request, { params }) => {
     );
   }
 }, "strict");
+export const OPTIONS = corsPreflight;

package/dist/routes/api/superadmin/users/route.d.ts

@@ -1,4 +1,5 @@
 import { NextRequest, NextResponse } from 'next/server';
+import { corsPreflight } from '@nextsparkjs/core/lib/api/cors-response';
 /**
  * GET /api/superadmin/users
  *
@@ -34,4 +35,5 @@ export declare const POST: (request: NextRequest) => Promise<NextResponse>;
  * Currently returns not implemented.
  */
 export declare const PUT: (request: NextRequest) => Promise<NextResponse>;
+export declare const OPTIONS: typeof corsPreflight;
 //# sourceMappingURL=route.d.ts.map

package/dist/routes/api/superadmin/users/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../src/routes/api/superadmin/users/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAMxD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,GAAG,iDA6QJ,CAAC;AAEb;;;;;GAKG;AACH,eAAO,MAAM,IAAI,iDAKL,CAAC;AAEb;;;;;GAKG;AACH,eAAO,MAAM,GAAG,iDAKJ,CAAC"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../src/routes/api/superadmin/users/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAKxD,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAC;AAExE;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,GAAG,iDA6QJ,CAAC;AAEb;;;;;GAKG;AACH,eAAO,MAAM,IAAI,iDAKL,CAAC;AAEb;;;;;GAKG;AACH,eAAO,MAAM,GAAG,iDAKJ,CAAC;AAEb,eAAO,MAAM,OAAO,sBAAgB,CAAC"}

package/dist/routes/api/superadmin/users/route.js

@@ -2,6 +2,7 @@ import { NextResponse } from "next/server";
 import { getTypedSession } from "@nextsparkjs/core/lib/auth";
 import { queryWithRLS } from "@nextsparkjs/core/lib/db";
 import { withRateLimitTier } from "@nextsparkjs/core/lib/api/rate-limit";
+import { corsPreflight } from "@nextsparkjs/core/lib/api/cors-response";
 export const GET = withRateLimitTier(async (request) => {
   var _a, _b, _c;
   try {
@@ -237,3 +238,4 @@ export const PUT = withRateLimitTier(async () => {
     { status: 501 }
   );
 }, "strict");
+export const OPTIONS = corsPreflight;

package/dist/routes/api/user/delete-account/route.d.ts

@@ -1,3 +1,5 @@
 import { NextRequest, NextResponse } from "next/server";
+import { corsPreflight } from "@nextsparkjs/core/lib/api/cors-response";
 export declare const DELETE: (request: NextRequest) => Promise<NextResponse>;
+export declare const OPTIONS: typeof corsPreflight;
 //# sourceMappingURL=route.d.ts.map

package/dist/routes/api/user/delete-account/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../src/routes/api/user/delete-account/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAKxD,eAAO,MAAM,MAAM,iDAoDP,CAAC"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../src/routes/api/user/delete-account/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAGxD,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAC;AAGxE,eAAO,MAAM,MAAM,iDAoDP,CAAC;AAEb,eAAO,MAAM,OAAO,sBAAgB,CAAC"}