@nextsparkjs/core 0.1.0-beta.194 → 0.1.0-beta.196

package/dist/routes/api/devtools/tests/[...path]/route.d.ts

@@ -1,4 +1,5 @@
 import { NextResponse } from "next/server";
+import { corsPreflight } from '@nextsparkjs/core/lib/api/cors-response';
 /**
  * GET /api/devtools/tests/[...path]
  *
@@ -12,4 +13,5 @@ export declare const GET: (request: import("next/server").NextRequest, args_0: {
         path: string[];
     }>;
 }) => Promise<NextResponse>;
+export declare const OPTIONS: typeof corsPreflight;
 //# sourceMappingURL=route.d.ts.map

package/dist/routes/api/devtools/tests/[...path]/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../src/routes/api/devtools/tests/[...path]/route.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAM3C;;;;;;;GAOG;AACH,eAAO,MAAM,GAAG;YAEQ,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;2BA0GzC,CAAC"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../src/routes/api/devtools/tests/[...path]/route.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAK3C,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAC;AAExE;;;;;;;GAOG;AACH,eAAO,MAAM,GAAG;YAEQ,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;2BA0GzC,CAAC;AAEX,eAAO,MAAM,OAAO,sBAAgB,CAAC"}

package/dist/routes/api/devtools/tests/[...path]/route.js

@@ -4,6 +4,7 @@ import { readFile, stat } from "fs/promises";
 import { join } from "path";
 import matter from "gray-matter";
 import { withRateLimitTier } from "@nextsparkjs/core/lib/api/rate-limit";
+import { corsPreflight } from "@nextsparkjs/core/lib/api/cors-response";
 export const GET = withRateLimitTier(async (request, { params }) => {
   try {
     const session = await getTypedSession(request.headers);
@@ -91,3 +92,4 @@ export const GET = withRateLimitTier(async (request, { params }) => {
     );
   }
 }, "read");
+export const OPTIONS = corsPreflight;

package/dist/routes/api/devtools/tests/route.d.ts

@@ -1,4 +1,5 @@
 import { NextResponse } from "next/server";
+import { corsPreflight } from '@nextsparkjs/core/lib/api/cors-response';
 /**
  * GET /api/devtools/tests
  *
@@ -6,4 +7,5 @@ import { NextResponse } from "next/server";
  * Only accessible to developer role
  */
 export declare const GET: (request: import("next/server").NextRequest) => Promise<NextResponse>;
+export declare const OPTIONS: typeof corsPreflight;
 //# sourceMappingURL=route.d.ts.map

package/dist/routes/api/devtools/tests/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../src/routes/api/devtools/tests/route.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAsD3C;;;;;GAKG;AACH,eAAO,MAAM,GAAG,uEAkEN,CAAC"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../src/routes/api/devtools/tests/route.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAI3C,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAC;AAmDxE;;;;;GAKG;AACH,eAAO,MAAM,GAAG,uEAkEN,CAAC;AAEX,eAAO,MAAM,OAAO,sBAAgB,CAAC"}

package/dist/routes/api/devtools/tests/route.js

@@ -3,6 +3,7 @@ import { NextResponse } from "next/server";
 import { readdir, stat } from "fs/promises";
 import { join } from "path";
 import { withRateLimitTier } from "@nextsparkjs/core/lib/api/rate-limit";
+import { corsPreflight } from "@nextsparkjs/core/lib/api/cors-response";
 async function buildFileTree(dirPath, basePath) {
   const entries = await readdir(dirPath, { withFileTypes: true });
   const tree = [];
@@ -87,3 +88,4 @@ export const GET = withRateLimitTier(async (request) => {
     );
   }
 }, "read");
+export const OPTIONS = corsPreflight;

package/dist/routes/api/health/route.d.ts

@@ -1,3 +1,5 @@
+import { corsPreflight } from "@nextsparkjs/core/lib/api/cors-response";
 import { NextRequest, NextResponse } from "next/server";
 export declare const GET: (request: NextRequest) => Promise<NextResponse>;
+export declare const OPTIONS: typeof corsPreflight;
 //# sourceMappingURL=route.d.ts.map

package/dist/routes/api/health/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../src/routes/api/health/route.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAExD,eAAO,MAAM,GAAG,iDA8CN,CAAC"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../src/routes/api/health/route.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAC;AAGxE,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAExD,eAAO,MAAM,GAAG,iDA8CN,CAAC;AAEX,eAAO,MAAM,OAAO,sBAAgB,CAAC"}

package/dist/routes/api/health/route.js

@@ -1,5 +1,6 @@
 import { queryWithRLS } from "@nextsparkjs/core/lib/db";
 import { withRateLimitTier } from "@nextsparkjs/core/lib/api/rate-limit";
+import { corsPreflight } from "@nextsparkjs/core/lib/api/cors-response";
 import { isRedisConfigured } from "@nextsparkjs/core/lib/rate-limit-redis";
 import { authenticateRequest } from "@nextsparkjs/core/lib/api/auth/dual-auth";
 import { NextResponse } from "next/server";
@@ -37,3 +38,4 @@ export const GET = withRateLimitTier(async (request) => {
     ...dbError ? { error: dbError } : {}
   }, { status: healthy ? 200 : 503 });
 }, "read");
+export const OPTIONS = corsPreflight;

package/dist/routes/api/internal/user-metadata/route.d.ts

@@ -1,3 +1,5 @@
 import { NextRequest, NextResponse } from 'next/server';
+import { corsPreflight } from '@nextsparkjs/core/lib/api/cors-response';
 export declare const POST: (request: NextRequest) => Promise<NextResponse>;
+export declare const OPTIONS: typeof corsPreflight;
 //# sourceMappingURL=route.d.ts.map

package/dist/routes/api/internal/user-metadata/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../src/routes/api/internal/user-metadata/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAMvD,eAAO,MAAM,IAAI,iDAwCN,CAAC"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../src/routes/api/internal/user-metadata/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAGvD,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAA;AAIvE,eAAO,MAAM,IAAI,iDAwCN,CAAC;AAEZ,eAAO,MAAM,OAAO,sBAAgB,CAAA"}

package/dist/routes/api/internal/user-metadata/route.js

@@ -1,6 +1,7 @@
 import { NextResponse } from "next/server";
 import { MetaService } from "@nextsparkjs/core/lib/services/meta.service";
 import { withRateLimitTier } from "@nextsparkjs/core/lib/api/rate-limit";
+import { corsPreflight } from "@nextsparkjs/core/lib/api/cors-response";
 import { authenticateRequest, createAuthFailureResponse } from "@nextsparkjs/core/lib/api/auth/dual-auth";
 export const POST = withRateLimitTier(async (req) => {
   try {
@@ -31,3 +32,4 @@ export const POST = withRateLimitTier(async (req) => {
     }, { status: 500 });
   }
 }, "write");
+export const OPTIONS = corsPreflight;

package/dist/routes/api/mcp/route.d.ts

@@ -21,7 +21,9 @@
  * - every tool call is audited to api_audit_log
  */
 import { NextRequest, NextResponse } from 'next/server';
+import { corsPreflight } from '@nextsparkjs/core/lib/api/cors-response';
 export declare const POST: (request: NextRequest) => Promise<NextResponse>;
 export declare function GET(): Promise<NextResponse>;
 export declare function DELETE(): Promise<NextResponse>;
+export declare const OPTIONS: typeof corsPreflight;
 //# sourceMappingURL=route.d.ts.map

package/dist/routes/api/mcp/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../src/routes/api/mcp/route.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AA0IvD,eAAO,MAAM,IAAI,iDAA0C,CAAA;AAE3D,wBAAsB,GAAG,IAAI,OAAO,CAAC,YAAY,CAAC,CAKjD;AAED,wBAAsB,MAAM,IAAI,OAAO,CAAC,YAAY,CAAC,CAKpD"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../src/routes/api/mcp/route.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAOvD,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAA;AA2IvE,eAAO,MAAM,IAAI,iDAA0C,CAAA;AAE3D,wBAAsB,GAAG,IAAI,OAAO,CAAC,YAAY,CAAC,CAKjD;AAED,wBAAsB,MAAM,IAAI,OAAO,CAAC,YAAY,CAAC,CAKpD;AAED,eAAO,MAAM,OAAO,sBAAgB,CAAA"}

package/dist/routes/api/mcp/route.js

@@ -5,8 +5,9 @@ import {
 } from "@nextsparkjs/core/lib/api/auth/dual-auth";
 import { validateApiKey } from "@nextsparkjs/core/lib/api/auth";
 import { withRateLimitTier } from "@nextsparkjs/core/lib/api/rate-limit";
+import { corsPreflight } from "@nextsparkjs/core/lib/api/cors-response";
 import { setEntityRegistry } from "@nextsparkjs/core/lib/entities/queries";
-import { createMcpEngine } from "@nextsparkjs/core/lib/mcp";
+import { createMcpEngine, RATE_LIMIT_MESSAGE } from "@nextsparkjs/core/lib/mcp";
 import { ENTITY_REGISTRY, ENTITY_METADATA } from "@nextsparkjs/registries/entity-registry";
 import { MCP_OVERRIDES } from "@nextsparkjs/registries/mcp-registry";
 import { API_PRESETS_REGISTRY } from "@nextsparkjs/registries/api-presets-registry";
@@ -55,6 +56,12 @@ async function handleMcpPost(request) {
     return jsonRpcError(403, -32e3, "Origin not allowed");
   }
   const authResult = await authenticateRequest(request, { allowAnyScope: true });
+  if (authResult.rateLimitResponse) {
+    const limited = jsonRpcError(429, -32e3, RATE_LIMIT_MESSAGE);
+    const retryAfter = authResult.rateLimitResponse.headers.get("Retry-After");
+    if (retryAfter) limited.headers.set("Retry-After", retryAfter);
+    return limited;
+  }
   if (!authResult.success || authResult.type !== "api-key" || !authResult.user) {
     return jsonRpcError(401, -32001, API_KEY_HELP);
   }
@@ -106,3 +113,4 @@ export async function DELETE() {
     { status: 405, headers: { Allow: "POST" } }
   );
 }
+export const OPTIONS = corsPreflight;

package/dist/routes/api/superadmin/subscriptions/route.d.ts

@@ -1,4 +1,5 @@
 import { NextRequest, NextResponse } from 'next/server';
+import { corsPreflight } from '@nextsparkjs/core/lib/api/cors-response';
 /**
  * GET /api/superadmin/subscriptions
  *
@@ -6,4 +7,5 @@ import { NextRequest, NextResponse } from 'next/server';
  * Supports filtering by status and pagination.
  */
 export declare const GET: (request: NextRequest) => Promise<NextResponse>;
+export declare const OPTIONS: typeof corsPreflight;
 //# sourceMappingURL=route.d.ts.map

package/dist/routes/api/superadmin/subscriptions/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../src/routes/api/superadmin/subscriptions/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAkDxD;;;;;GAKG;AACH,eAAO,MAAM,GAAG,iDAkQJ,CAAC"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../src/routes/api/superadmin/subscriptions/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAIxD,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAC;AA+CxE;;;;;GAKG;AACH,eAAO,MAAM,GAAG,iDAkQJ,CAAC;AAEb,eAAO,MAAM,OAAO,sBAAgB,CAAC"}

package/dist/routes/api/superadmin/subscriptions/route.js

@@ -2,6 +2,7 @@ import { NextResponse } from "next/server";
 import { getTypedSession } from "@nextsparkjs/core/lib/auth";
 import { queryWithRLS } from "@nextsparkjs/core/lib/db";
 import { withRateLimitTier } from "@nextsparkjs/core/lib/api/rate-limit";
+import { corsPreflight } from "@nextsparkjs/core/lib/api/cors-response";
 import { getBillingGateway } from "@nextsparkjs/core/lib/billing/gateways/factory";
 export const GET = withRateLimitTier(async (request) => {
   var _a;
@@ -233,3 +234,4 @@ export const GET = withRateLimitTier(async (request) => {
     );
   }
 }, "strict");
+export const OPTIONS = corsPreflight;

package/dist/routes/api/superadmin/teams/[teamId]/route.d.ts

@@ -1,4 +1,5 @@
 import { NextRequest, NextResponse } from 'next/server';
+import { corsPreflight } from '@nextsparkjs/core/lib/api/cors-response';
 /**
  * GET /api/superadmin/teams/[teamId]
  *
@@ -10,4 +11,5 @@ export declare const GET: (request: NextRequest, args_0: {
         teamId: string;
     }>;
 }) => Promise<NextResponse>;
+export declare const OPTIONS: typeof corsPreflight;
 //# sourceMappingURL=route.d.ts.map

package/dist/routes/api/superadmin/teams/[teamId]/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../src/routes/api/superadmin/teams/[teamId]/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AA6DxD;;;;;GAKG;AACH,eAAO,MAAM,GAAG;YAEQ,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;2BA8NvC,CAAC"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../src/routes/api/superadmin/teams/[teamId]/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAIxD,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAC;AA0DxE;;;;;GAKG;AACH,eAAO,MAAM,GAAG;YAEQ,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;2BA8NvC,CAAC;AAEb,eAAO,MAAM,OAAO,sBAAgB,CAAC"}

package/dist/routes/api/superadmin/teams/[teamId]/route.js

@@ -2,6 +2,7 @@ import { NextResponse } from "next/server";
 import { getTypedSession } from "@nextsparkjs/core/lib/auth";
 import { queryWithRLS } from "@nextsparkjs/core/lib/db";
 import { withRateLimitTier } from "@nextsparkjs/core/lib/api/rate-limit";
+import { corsPreflight } from "@nextsparkjs/core/lib/api/cors-response";
 import { getBillingGateway } from "@nextsparkjs/core/lib/billing/gateways/factory";
 export const GET = withRateLimitTier(async (request, { params }) => {
   var _a;
@@ -202,3 +203,4 @@ export const GET = withRateLimitTier(async (request, { params }) => {
     );
   }
 }, "strict");
+export const OPTIONS = corsPreflight;

package/dist/routes/api/superadmin/teams/route.d.ts

@@ -1,4 +1,5 @@
 import { NextRequest, NextResponse } from 'next/server';
+import { corsPreflight } from '@nextsparkjs/core/lib/api/cors-response';
 /**
  * GET /api/superadmin/teams
  *
@@ -17,4 +18,5 @@ import { NextRequest, NextResponse } from 'next/server';
  * - pagination: Pagination info
  */
 export declare const GET: (request: NextRequest) => Promise<NextResponse>;
+export declare const OPTIONS: typeof corsPreflight;
 //# sourceMappingURL=route.d.ts.map

package/dist/routes/api/superadmin/teams/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../src/routes/api/superadmin/teams/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAiBxD;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,GAAG,iDAwJJ,CAAC"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../src/routes/api/superadmin/teams/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAKxD,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAC;AAaxE;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,GAAG,iDAwJJ,CAAC;AAEb,eAAO,MAAM,OAAO,sBAAgB,CAAC"}

package/dist/routes/api/superadmin/teams/route.js

@@ -3,6 +3,7 @@ import { getTypedSession } from "@nextsparkjs/core/lib/auth";
 import { queryWithRLS } from "@nextsparkjs/core/lib/db";
 import { SYSTEM_ADMIN_TEAM_ID } from "@nextsparkjs/core/lib/api/auth/dual-auth";
 import { withRateLimitTier } from "@nextsparkjs/core/lib/api/rate-limit";
+import { corsPreflight } from "@nextsparkjs/core/lib/api/cors-response";
 export const GET = withRateLimitTier(async (request) => {
   var _a, _b, _c, _d;
   try {
@@ -129,3 +130,4 @@ export const GET = withRateLimitTier(async (request) => {
     );
   }
 }, "strict");
+export const OPTIONS = corsPreflight;

package/dist/routes/api/superadmin/users/[userId]/route.d.ts

@@ -1,4 +1,5 @@
 import { NextRequest, NextResponse } from 'next/server';
+import { corsPreflight } from '@nextsparkjs/core/lib/api/cors-response';
 interface RouteParams {
     params: Promise<{
         userId: string;
@@ -41,5 +42,6 @@ export declare const PATCH: (request: NextRequest, args_0: RouteParams) => Promi
  * - Delete the user account
  */
 export declare const DELETE: (request: NextRequest, args_0: RouteParams) => Promise<NextResponse>;
+export declare const OPTIONS: typeof corsPreflight;
 export {};
 //# sourceMappingURL=route.d.ts.map

package/dist/routes/api/superadmin/users/[userId]/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../src/routes/api/superadmin/users/[userId]/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAkCxD,UAAU,WAAW;IACnB,MAAM,EAAE,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACrC;AAED;;;;;;;;;;GAUG;AACH,eAAO,MAAM,GAAG,sEA6KJ,CAAC;AAOb;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,KAAK,sEA+JN,CAAC;AAEb;;;;;;;;;;GAUG;AACH,eAAO,MAAM,MAAM,sEAgIP,CAAC"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../src/routes/api/superadmin/users/[userId]/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAIxD,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAC;AA+BxE,UAAU,WAAW;IACnB,MAAM,EAAE,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACrC;AAED;;;;;;;;;;GAUG;AACH,eAAO,MAAM,GAAG,sEA6KJ,CAAC;AAOb;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,KAAK,sEA+JN,CAAC;AAEb;;;;;;;;;;GAUG;AACH,eAAO,MAAM,MAAM,sEAgIP,CAAC;AAEb,eAAO,MAAM,OAAO,sBAAgB,CAAC"}

package/dist/routes/api/superadmin/users/[userId]/route.js

@@ -2,6 +2,7 @@ import { NextResponse } from "next/server";
 import { getTypedSession } from "@nextsparkjs/core/lib/auth";
 import { queryWithRLS } from "@nextsparkjs/core/lib/db";
 import { withRateLimitTier } from "@nextsparkjs/core/lib/api/rate-limit";
+import { corsPreflight } from "@nextsparkjs/core/lib/api/cors-response";
 export const GET = withRateLimitTier(async (request, { params }) => {
   try {
     const session = await getTypedSession(request.headers);
@@ -360,3 +361,4 @@ export const DELETE = withRateLimitTier(async (request, { params }) => {
     );
   }
 }, "strict");
+export const OPTIONS = corsPreflight;

package/dist/routes/api/superadmin/users/route.d.ts

@@ -1,4 +1,5 @@
 import { NextRequest, NextResponse } from 'next/server';
+import { corsPreflight } from '@nextsparkjs/core/lib/api/cors-response';
 /**
  * GET /api/superadmin/users
  *
@@ -34,4 +35,5 @@ export declare const POST: (request: NextRequest) => Promise<NextResponse>;
  * Currently returns not implemented.
  */
 export declare const PUT: (request: NextRequest) => Promise<NextResponse>;
+export declare const OPTIONS: typeof corsPreflight;
 //# sourceMappingURL=route.d.ts.map

package/dist/routes/api/superadmin/users/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../src/routes/api/superadmin/users/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAMxD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,GAAG,iDA6QJ,CAAC;AAEb;;;;;GAKG;AACH,eAAO,MAAM,IAAI,iDAKL,CAAC;AAEb;;;;;GAKG;AACH,eAAO,MAAM,GAAG,iDAKJ,CAAC"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../src/routes/api/superadmin/users/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAKxD,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAC;AAExE;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,GAAG,iDA6QJ,CAAC;AAEb;;;;;GAKG;AACH,eAAO,MAAM,IAAI,iDAKL,CAAC;AAEb;;;;;GAKG;AACH,eAAO,MAAM,GAAG,iDAKJ,CAAC;AAEb,eAAO,MAAM,OAAO,sBAAgB,CAAC"}

package/dist/routes/api/superadmin/users/route.js

@@ -2,6 +2,7 @@ import { NextResponse } from "next/server";
 import { getTypedSession } from "@nextsparkjs/core/lib/auth";
 import { queryWithRLS } from "@nextsparkjs/core/lib/db";
 import { withRateLimitTier } from "@nextsparkjs/core/lib/api/rate-limit";
+import { corsPreflight } from "@nextsparkjs/core/lib/api/cors-response";
 export const GET = withRateLimitTier(async (request) => {
   var _a, _b, _c;
   try {
@@ -237,3 +238,4 @@ export const PUT = withRateLimitTier(async () => {
     { status: 501 }
   );
 }, "strict");
+export const OPTIONS = corsPreflight;

package/dist/routes/api/user/delete-account/route.d.ts

@@ -1,3 +1,5 @@
 import { NextRequest, NextResponse } from "next/server";
+import { corsPreflight } from "@nextsparkjs/core/lib/api/cors-response";
 export declare const DELETE: (request: NextRequest) => Promise<NextResponse>;
+export declare const OPTIONS: typeof corsPreflight;
 //# sourceMappingURL=route.d.ts.map

package/dist/routes/api/user/delete-account/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../src/routes/api/user/delete-account/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAKxD,eAAO,MAAM,MAAM,iDAoDP,CAAC"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../src/routes/api/user/delete-account/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAGxD,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAC;AAGxE,eAAO,MAAM,MAAM,iDAoDP,CAAC;AAEb,eAAO,MAAM,OAAO,sBAAgB,CAAC"}

package/dist/routes/api/user/delete-account/route.js

@@ -1,6 +1,7 @@
 import { NextResponse } from "next/server";
 import { auth } from "@nextsparkjs/core/lib/auth";
 import { withRateLimitTier } from "@nextsparkjs/core/lib/api/rate-limit";
+import { corsPreflight } from "@nextsparkjs/core/lib/api/cors-response";
 import { UserService } from "@nextsparkjs/core/lib/services";
 export const DELETE = withRateLimitTier(async (req) => {
   try {
@@ -42,3 +43,4 @@ export const DELETE = withRateLimitTier(async (req) => {
     );
   }
 }, "strict");
+export const OPTIONS = corsPreflight;

package/dist/routes/api/user/plan-flags/route.d.ts

@@ -5,6 +5,7 @@
  * for the entity system permission integration.
  */
 import { NextRequest, NextResponse } from 'next/server';
+import { corsPreflight } from '@nextsparkjs/core/lib/api/cors-response';
 /**
  * GET /api/user/plan-flags
  * Fetch user plan and flags data
@@ -20,4 +21,5 @@ export declare const PATCH: (request: NextRequest) => Promise<NextResponse>;
  * Bulk update user plans and flags (admin only)
  */
 export declare const POST: (request: NextRequest) => Promise<NextResponse>;
+export declare const OPTIONS: typeof corsPreflight;
 //# sourceMappingURL=route.d.ts.map

package/dist/routes/api/user/plan-flags/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../src/routes/api/user/plan-flags/route.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAkBvD;;;GAGG;AACH,eAAO,MAAM,GAAG,iDAwDN,CAAC;AAEX;;;GAGG;AACH,eAAO,MAAM,KAAK,iDAgFP,CAAC;AAEZ;;;GAGG;AACH,eAAO,MAAM,IAAI,iDA4FL,CAAC"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../src/routes/api/user/plan-flags/route.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAMvD,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAA;AAavE;;;GAGG;AACH,eAAO,MAAM,GAAG,iDAwDN,CAAC;AAEX;;;GAGG;AACH,eAAO,MAAM,KAAK,iDAgFP,CAAC;AAEZ;;;GAGG;AACH,eAAO,MAAM,IAAI,iDA4FL,CAAC;AAEb,eAAO,MAAM,OAAO,sBAAgB,CAAA"}

package/dist/routes/api/user/plan-flags/route.js

@@ -3,6 +3,7 @@ import { getTypedSession } from "@nextsparkjs/core/lib/auth";
 import { getUserPlanAndFlags, updateUserPlan, updateUserFlags } from "@nextsparkjs/core/lib/user-data";
 import * as z from "zod";
 import { withRateLimitTier } from "@nextsparkjs/core/lib/api/rate-limit";
+import { corsPreflight } from "@nextsparkjs/core/lib/api/cors-response";
 const planFlagsQuerySchema = z.object({
   userId: z.string().optional()
 });
@@ -199,3 +200,4 @@ export const POST = withRateLimitTier(async (request) => {
     );
   }
 }, "strict");
+export const OPTIONS = corsPreflight;

package/dist/routes/api/user/profile/route.d.ts

@@ -1,4 +1,6 @@
 import { NextRequest, NextResponse } from 'next/server';
+import { corsPreflight } from '@nextsparkjs/core/lib/api/cors-response';
 export declare const GET: (request: NextRequest) => Promise<NextResponse>;
 export declare const PATCH: (request: NextRequest) => Promise<NextResponse>;
+export declare const OPTIONS: typeof corsPreflight;
 //# sourceMappingURL=route.d.ts.map

package/dist/routes/api/user/profile/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../src/routes/api/user/profile/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAQvD,eAAO,MAAM,GAAG,iDAgDN,CAAC;AAEX,eAAO,MAAM,KAAK,iDAsEP,CAAC"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../src/routes/api/user/profile/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAMvD,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAA;AAEvE,eAAO,MAAM,GAAG,iDAgDN,CAAC;AAEX,eAAO,MAAM,KAAK,iDAsEP,CAAC;AAEZ,eAAO,MAAM,OAAO,sBAAgB,CAAA"}

package/dist/routes/api/user/profile/route.js

@@ -1,15 +1,15 @@
 import { NextResponse } from "next/server";
 import { auth } from "@nextsparkjs/core/lib/auth";
-import { headers } from "next/headers";
 import { queryOneWithRLS, mutateWithRLS, queryOne } from "@nextsparkjs/core/lib/db";
 import { profileSchema } from "@nextsparkjs/core/lib/validation";
 import { MetaService, MetaValueTooLargeError } from "@nextsparkjs/core/lib/services/meta.service";
 import { withRateLimitTier } from "@nextsparkjs/core/lib/api/rate-limit";
+import { corsPreflight } from "@nextsparkjs/core/lib/api/cors-response";
 export const GET = withRateLimitTier(async (request) => {
   const url = new URL(request.url);
   const includeMeta = url.searchParams.get("includeMeta") === "true";
   try {
-    const sessionHeaders = await headers();
+    const sessionHeaders = request.headers;
     const session = await auth.api.getSession({ headers: sessionHeaders });
     if (!(session == null ? void 0 : session.user)) {
       return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
@@ -43,7 +43,7 @@ export const GET = withRateLimitTier(async (request) => {
 }, "read");
 export const PATCH = withRateLimitTier(async (request) => {
   try {
-    const sessionHeaders = await headers();
+    const sessionHeaders = request.headers;
     const session = await auth.api.getSession({ headers: sessionHeaders });
     if (!(session == null ? void 0 : session.user)) {
       return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
@@ -94,3 +94,4 @@ export const PATCH = withRateLimitTier(async (request) => {
     return NextResponse.json({ error: "Internal server error" }, { status: 500 });
   }
 }, "write");
+export const OPTIONS = corsPreflight;

package/dist/routes/api/v1/[entity]/[id]/child/[childType]/[childId]/route.d.ts

@@ -4,6 +4,7 @@
  * DELETE /api/v1/[entity]/[id]/child/[childType]/[childId]
  */
 import { NextRequest, NextResponse } from 'next/server';
+import { corsPreflight } from '@nextsparkjs/core/lib/api/cors-response';
 interface RouteParams {
     entity: string;
     id: string;
@@ -16,5 +17,6 @@ export declare const PUT: (request: NextRequest, args_0: {
 export declare const DELETE: (request: NextRequest, args_0: {
     params: Promise<RouteParams>;
 }) => Promise<NextResponse>;
+export declare const OPTIONS: typeof corsPreflight;
 export {};
 //# sourceMappingURL=route.d.ts.map

package/dist/routes/api/v1/[entity]/[id]/child/[childType]/[childId]/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../../../../src/routes/api/v1/[entity]/[id]/child/[childType]/[childId]/route.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAWvD,UAAU,WAAW;IACnB,MAAM,EAAE,MAAM,CAAA;IACd,EAAE,EAAE,MAAM,CAAA;IACV,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,eAAO,MAAM,GAAG;YAEQ,OAAO,CAAC,WAAW,CAAC;2BAyHjC,CAAA;AAEX,eAAO,MAAM,MAAM;YAEK,OAAO,CAAC,WAAW,CAAC;2BAwDjC,CAAA"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../../../../src/routes/api/v1/[entity]/[id]/child/[childType]/[childId]/route.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAKvD,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAA;AAOvE,UAAU,WAAW;IACnB,MAAM,EAAE,MAAM,CAAA;IACd,EAAE,EAAE,MAAM,CAAA;IACV,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,eAAO,MAAM,GAAG;YAEQ,OAAO,CAAC,WAAW,CAAC;2BAyHjC,CAAA;AAEX,eAAO,MAAM,MAAM;YAEK,OAAO,CAAC,WAAW,CAAC;2BAwDjC,CAAA;AAEX,eAAO,MAAM,OAAO,sBAAgB,CAAA"}

package/dist/routes/api/v1/[entity]/[id]/child/[childType]/[childId]/route.js

@@ -3,6 +3,7 @@ import { queryWithRLS } from "@nextsparkjs/core/lib/db";
 import { resolveEntityFromUrl } from "@nextsparkjs/core/lib/api/entity/resolver";
 import { getChildEntities, getEntity, setEntityRegistry } from "@nextsparkjs/core/lib/entities/queries";
 import { withRateLimitTier } from "@nextsparkjs/core/lib/api/rate-limit";
+import { corsPreflight } from "@nextsparkjs/core/lib/api/cors-response";
 import { ENTITY_REGISTRY, ENTITY_METADATA } from "@nextsparkjs/registries/entity-registry";
 setEntityRegistry(ENTITY_REGISTRY, ENTITY_METADATA);
 export const PUT = withRateLimitTier(async (request, { params }) => {
@@ -142,3 +143,4 @@ export const DELETE = withRateLimitTier(async (request, { params }) => {
     );
   }
 }, "write");
+export const OPTIONS = corsPreflight;

package/dist/routes/api/v1/[entity]/[id]/child/[childType]/route.d.ts

@@ -4,6 +4,7 @@
  * POST /api/v1/[entity]/[id]/child/[childType]
  */
 import { NextRequest, NextResponse } from 'next/server';
+import { corsPreflight } from '@nextsparkjs/core/lib/api/cors-response';
 interface RouteParams {
     entity: string;
     id: string;
@@ -15,5 +16,6 @@ export declare const GET: (request: NextRequest, args_0: {
 export declare const POST: (request: NextRequest, args_0: {
     params: Promise<RouteParams>;
 }) => Promise<NextResponse>;
+export declare const OPTIONS: typeof corsPreflight;
 export {};
 //# sourceMappingURL=route.d.ts.map

package/dist/routes/api/v1/[entity]/[id]/child/[childType]/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../../../src/routes/api/v1/[entity]/[id]/child/[childType]/route.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAYvD,UAAU,WAAW;IACnB,MAAM,EAAE,MAAM,CAAA;IACd,EAAE,EAAE,MAAM,CAAA;IACV,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,eAAO,MAAM,GAAG;YAEQ,OAAO,CAAC,WAAW,CAAC;2BA6DlC,CAAA;AAEV,eAAO,MAAM,IAAI;YAEO,OAAO,CAAC,WAAW,CAAC;2BA6OjC,CAAA"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../../../src/routes/api/v1/[entity]/[id]/child/[childType]/route.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAKvD,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAA;AAQvE,UAAU,WAAW;IACnB,MAAM,EAAE,MAAM,CAAA;IACd,EAAE,EAAE,MAAM,CAAA;IACV,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,eAAO,MAAM,GAAG;YAEQ,OAAO,CAAC,WAAW,CAAC;2BA6DlC,CAAA;AAEV,eAAO,MAAM,IAAI;YAEO,OAAO,CAAC,WAAW,CAAC;2BA6OjC,CAAA;AAEX,eAAO,MAAM,OAAO,sBAAgB,CAAA"}

package/dist/routes/api/v1/[entity]/[id]/child/[childType]/route.js

@@ -3,6 +3,7 @@ import { queryWithRLS } from "@nextsparkjs/core/lib/db";
 import { resolveEntityFromUrl } from "@nextsparkjs/core/lib/api/entity/resolver";
 import { getChildEntities, getEntity, setEntityRegistry } from "@nextsparkjs/core/lib/entities/queries";
 import { withRateLimitTier } from "@nextsparkjs/core/lib/api/rate-limit";
+import { corsPreflight } from "@nextsparkjs/core/lib/api/cors-response";
 import { ENTITY_REGISTRY, ENTITY_METADATA } from "@nextsparkjs/registries/entity-registry";
 setEntityRegistry(ENTITY_REGISTRY, ENTITY_METADATA);
 export const GET = withRateLimitTier(async (request, { params }) => {
@@ -247,3 +248,4 @@ export const POST = withRateLimitTier(async (request, { params }) => {
     );
   }
 }, "write");
+export const OPTIONS = corsPreflight;

package/dist/routes/api/v1/billing/cancel/route.d.ts

@@ -7,6 +7,7 @@
  * P1-4: Cancel subscription directo
  */
 import { NextRequest, NextResponse } from 'next/server';
+import { corsPreflight } from '@nextsparkjs/core/lib/api/cors-response';
 /**
  * POST /api/v1/billing/cancel
  * Cancel the team's active subscription
@@ -16,4 +17,5 @@ import { NextRequest, NextResponse } from 'next/server';
  * - reason: string (optional) - Reason for cancellation (stored in metadata)
  */
 export declare const POST: (request: NextRequest) => Promise<NextResponse>;
+export declare const OPTIONS: typeof corsPreflight;
 //# sourceMappingURL=route.d.ts.map

package/dist/routes/api/v1/billing/cancel/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../src/routes/api/v1/billing/cancel/route.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAavD;;;;;;;GAOG;AACH,eAAO,MAAM,IAAI,iDAyHL,CAAC"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../src/routes/api/v1/billing/cancel/route.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAOvD,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAA;AAOvE;;;;;;;GAOG;AACH,eAAO,MAAM,IAAI,iDAyHL,CAAC;AAwDb,eAAO,MAAM,OAAO,sBAAgB,CAAA"}

package/dist/routes/api/v1/billing/cancel/route.js

@@ -5,6 +5,7 @@ import { SubscriptionService, MembershipService } from "@nextsparkjs/core/lib/se
 import { getBillingGateway } from "@nextsparkjs/core/lib/billing/gateways/factory";
 import { queryWithRLS } from "@nextsparkjs/core/lib/db";
 import { withRateLimitTier } from "@nextsparkjs/core/lib/api/rate-limit";
+import { corsPreflight } from "@nextsparkjs/core/lib/api/cors-response";
 const cancelSchema = z.object({
   immediate: z.boolean().optional().default(false),
   reason: z.string().optional()
@@ -151,3 +152,4 @@ async function handleReactivation(teamId) {
     );
   }
 }
+export const OPTIONS = corsPreflight;

package/dist/routes/api/v1/billing/change-plan/route.d.ts

@@ -7,6 +7,7 @@
  * P1-3: Plan Change con Proration
  */
 import { NextRequest, NextResponse } from 'next/server';
+import { corsPreflight } from '@nextsparkjs/core/lib/api/cors-response';
 /**
  * POST /api/v1/billing/change-plan
  * Change the team's subscription plan (upgrade or downgrade)
@@ -16,4 +17,5 @@ import { NextRequest, NextResponse } from 'next/server';
  * - billingInterval: 'monthly' | 'yearly' (default: monthly)
  */
 export declare const POST: (request: NextRequest) => Promise<NextResponse>;
+export declare const OPTIONS: typeof corsPreflight;
 //# sourceMappingURL=route.d.ts.map

package/dist/routes/api/v1/billing/change-plan/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../src/routes/api/v1/billing/change-plan/route.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAWvD;;;;;;;GAOG;AACH,eAAO,MAAM,IAAI,iDAsEL,CAAC"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../src/routes/api/v1/billing/change-plan/route.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAKvD,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAA;AAOvE;;;;;;;GAOG;AACH,eAAO,MAAM,IAAI,iDAsEL,CAAC;AAEb,eAAO,MAAM,OAAO,sBAAgB,CAAA"}

package/dist/routes/api/v1/billing/change-plan/route.js

@@ -3,6 +3,7 @@ import * as z from "zod";
 import { authenticateRequest, createAuthFailureResponse } from "@nextsparkjs/core/lib/api/auth/dual-auth";
 import { SubscriptionService, MembershipService } from "@nextsparkjs/core/lib/services";
 import { withRateLimitTier } from "@nextsparkjs/core/lib/api/rate-limit";
+import { corsPreflight } from "@nextsparkjs/core/lib/api/cors-response";
 const changePlanSchema = z.object({
   planSlug: z.string().min(1, "Plan slug is required"),
   billingInterval: z.enum(["monthly", "yearly"]).default("monthly")
@@ -61,3 +62,4 @@ export const POST = withRateLimitTier(async (request) => {
     }
   });
 }, "strict");
+export const OPTIONS = corsPreflight;

package/dist/routes/api/v1/billing/check-action/route.d.ts

@@ -9,5 +9,7 @@
  * FIX1: This endpoint was missing, causing useMembership.canDo() to fail
  */
 import { NextRequest, NextResponse } from 'next/server';
+import { corsPreflight } from '@nextsparkjs/core/lib/api/cors-response';
 export declare const POST: (request: NextRequest) => Promise<NextResponse>;
+export declare const OPTIONS: typeof corsPreflight;
 //# sourceMappingURL=route.d.ts.map

package/dist/routes/api/v1/billing/check-action/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../src/routes/api/v1/billing/check-action/route.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAWvD,eAAO,MAAM,IAAI,iDA8DP,CAAC"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../src/routes/api/v1/billing/check-action/route.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAKvD,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAA;AAOvE,eAAO,MAAM,IAAI,iDA8DP,CAAC;AAEX,eAAO,MAAM,OAAO,sBAAgB,CAAA"}

package/dist/routes/api/v1/billing/check-action/route.js

@@ -3,6 +3,7 @@ import { authenticateRequest, createAuthFailureResponse } from "@nextsparkjs/cor
 import { SubscriptionService } from "@nextsparkjs/core/lib/services";
 import * as z from "zod";
 import { withRateLimitTier } from "@nextsparkjs/core/lib/api/rate-limit";
+import { corsPreflight } from "@nextsparkjs/core/lib/api/cors-response";
 const checkActionSchema = z.object({
   action: z.string().min(1, "Action is required"),
   teamId: z.string().uuid().optional()
@@ -53,3 +54,4 @@ export const POST = withRateLimitTier(async (request) => {
     data: result
   });
 }, "read");
+export const OPTIONS = corsPreflight;

package/dist/routes/api/v1/billing/checkout/route.d.ts

@@ -7,5 +7,7 @@
  * Security: Requires team owner/admin permission (team.billing.manage)
  */
 import { NextRequest, NextResponse } from 'next/server';
+import { corsPreflight } from '@nextsparkjs/core/lib/api/cors-response';
 export declare const POST: (request: NextRequest) => Promise<NextResponse>;
+export declare const OPTIONS: typeof corsPreflight;
 //# sourceMappingURL=route.d.ts.map