@stratum-hq/sdk 0.1.0

package/dist/client.js

@@ -0,0 +1,176 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.StratumClient = void 0;
+const core_1 = require("@stratum-hq/core");
+const cache_js_1 = require("./cache.js");
+class StratumClient {
+    baseUrl;
+    apiKey;
+    regionUrl;
+    cache;
+    cacheEnabled;
+    constructor(options) {
+        this.baseUrl = options.controlPlaneUrl.replace(/\/$/, "");
+        this.apiKey = options.apiKey;
+        this.regionUrl = options.regionUrl?.replace(/\/$/, "");
+        this.cacheEnabled = options.cache?.enabled !== false;
+        this.cache = new cache_js_1.LRUCache({
+            ttlMs: options.cache?.ttlMs,
+            maxSize: options.cache?.maxSize,
+        });
+    }
+    async fetch(path, init) {
+        const url = `${this.baseUrl}${path}`;
+        const response = await globalThis.fetch(url, {
+            ...init,
+            headers: {
+                "Content-Type": "application/json",
+                "X-API-Key": this.apiKey,
+                ...init?.headers,
+            },
+        });
+        if (!response.ok) {
+            if (response.status === 401) {
+                throw new core_1.UnauthorizedError("Invalid or missing API key");
+            }
+            if (response.status === 404) {
+                const body = await response.json().catch(() => ({}));
+                throw new core_1.TenantNotFoundError(body?.error?.message ?? "unknown");
+            }
+            const body = await response.json().catch(() => ({}));
+            throw new Error(body?.error?.message ?? `HTTP ${response.status}`);
+        }
+        if (response.status === 204)
+            return undefined;
+        return response.json();
+    }
+    async resolveTenant(tenantId) {
+        if (this.cacheEnabled) {
+            const cached = this.cache.get(tenantId);
+            if (cached)
+                return cached;
+        }
+        const context = await this.fetch(`/api/v1/tenants/${tenantId}/context`);
+        if (this.cacheEnabled) {
+            this.cache.set(tenantId, context);
+        }
+        return context;
+    }
+    async getTenantTree(rootId) {
+        if (rootId) {
+            return this.fetch(`/api/v1/tenants/${rootId}/descendants`);
+        }
+        const result = await this.fetch(`/api/v1/tenants`);
+        return result.data;
+    }
+    async createTenant(input) {
+        return this.fetch("/api/v1/tenants", {
+            method: "POST",
+            body: JSON.stringify(input),
+        });
+    }
+    async getTenant(tenantId) {
+        return this.fetch(`/api/v1/tenants/${tenantId}`);
+    }
+    async updateTenant(tenantId, input) {
+        const node = await this.fetch(`/api/v1/tenants/${tenantId}`, {
+            method: "PATCH",
+            body: JSON.stringify(input),
+        });
+        this.cache.invalidate(tenantId);
+        return node;
+    }
+    async moveTenant(tenantId, input) {
+        const node = await this.fetch(`/api/v1/tenants/${tenantId}/move`, {
+            method: "POST",
+            body: JSON.stringify(input),
+        });
+        this.cache.invalidate(tenantId);
+        return node;
+    }
+    async archiveTenant(tenantId) {
+        await this.fetch(`/api/v1/tenants/${tenantId}`, {
+            method: "DELETE",
+        });
+        this.cache.invalidate(tenantId);
+    }
+    async deleteTenant(tenantId) {
+        await this.fetch(`/api/v1/tenants/${tenantId}`, {
+            method: "DELETE",
+        });
+        this.cache.invalidate(tenantId);
+    }
+    invalidateCache(tenantId) {
+        this.cache.invalidate(tenantId);
+    }
+    clearCache() {
+        this.cache.clear();
+    }
+    async createWebhook(input) {
+        return this.fetch("/api/v1/webhooks", {
+            method: "POST",
+            body: JSON.stringify(input),
+        });
+    }
+    async listWebhooks(tenantId) {
+        const path = tenantId
+            ? `/api/v1/webhooks?tenant_id=${encodeURIComponent(tenantId)}`
+            : "/api/v1/webhooks";
+        return this.fetch(path);
+    }
+    async getWebhook(id) {
+        return this.fetch(`/api/v1/webhooks/${id}`);
+    }
+    async updateWebhook(id, input) {
+        return this.fetch(`/api/v1/webhooks/${id}`, {
+            method: "PATCH",
+            body: JSON.stringify(input),
+        });
+    }
+    async deleteWebhook(id) {
+        await this.fetch(`/api/v1/webhooks/${id}`, {
+            method: "DELETE",
+        });
+    }
+    async rotateApiKey(keyId, name) {
+        return this.fetch(`/api/v1/api-keys/${keyId}/rotate`, {
+            method: "POST",
+            body: JSON.stringify(name ? { name } : {}),
+        });
+    }
+    async listApiKeys(tenantId) {
+        const path = tenantId
+            ? `/api/v1/api-keys?tenant_id=${encodeURIComponent(tenantId)}`
+            : "/api/v1/api-keys";
+        return this.fetch(path);
+    }
+    async listDormantKeys(days) {
+        const path = days
+            ? `/api/v1/api-keys/dormant?days=${days}`
+            : "/api/v1/api-keys/dormant";
+        return this.fetch(path);
+    }
+    // Region operations
+    async listRegions() {
+        return this.fetch("/api/v1/regions");
+    }
+    async createRegion(input) {
+        return this.fetch("/api/v1/regions", {
+            method: "POST",
+            body: JSON.stringify(input),
+        });
+    }
+    async updateRegion(id, input) {
+        return this.fetch(`/api/v1/regions/${id}`, {
+            method: "PATCH",
+            body: JSON.stringify(input),
+        });
+    }
+    async deleteRegion(id) {
+        await this.fetch(`/api/v1/regions/${id}`, {
+            method: "DELETE",
+        });
+    }
+}
+exports.StratumClient = StratumClient;
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":";;;AAAA,2CAA0E;AAE1E,yCAAsC;AAStC,MAAa,aAAa;IACP,OAAO,CAAS;IAChB,MAAM,CAAS;IACf,SAAS,CAAqB;IAC9B,KAAK,CAAwC;IAC7C,YAAY,CAAU;IAEvC,YAAY,OAA6B;QACvC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC1D,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACvD,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,KAAK,EAAE,OAAO,KAAK,KAAK,CAAC;QACrD,IAAI,CAAC,KAAK,GAAG,IAAI,mBAAQ,CAA8B;YACrD,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,KAAK;YAC3B,OAAO,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO;SAChC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,KAAK,CAAI,IAAY,EAAE,IAAkB;QACrD,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE;YAC3C,GAAG,IAAI;YACP,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,WAAW,EAAE,IAAI,CAAC,MAAM;gBACxB,GAAI,IAAI,EAAE,OAA8C;aACzD;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC5B,MAAM,IAAI,wBAAiB,CAAC,4BAA4B,CAAC,CAAC;YAC5D,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC5B,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAqC,CAAC;gBACzF,MAAM,IAAI,0BAAmB,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,IAAI,SAAS,CAAC,CAAC;YACnE,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAqC,CAAC;YACzF,MAAM,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,IAAI,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QACrE,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,SAAc,CAAC;QACnD,OAAO,QAAQ,CAAC,IAAI,EAAgB,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,QAAgB;QAClC,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACxC,IAAI,MAAM;gBAAE,OAAO,MAAM,CAAC;QAC5B,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAsB,mBAAmB,QAAQ,UAAU,CAAC,CAAC;QAC7F,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACpC,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,MAAe;QACjC,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,IAAI,CAAC,KAAK,CAAe,mBAAmB,MAAM,cAAc,CAAC,CAAC;QAC3E,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAyB,iBAAiB,CAAC,CAAC;QAC3E,OAAO,MAAM,CAAC,IAAI,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,KAAwB;QACzC,OAAO,IAAI,CAAC,KAAK,CAAa,iBAAiB,EAAE;YAC/C,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;SAC5B,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,QAAgB;QAC9B,OAAO,IAAI,CAAC,KAAK,CAAa,mBAAmB,QAAQ,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,QAAgB,EAAE,KAAwB;QAC3D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAa,mBAAmB,QAAQ,EAAE,EAAE;YACvE,MAAM,EAAE,OAAO;YACf,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;SAC5B,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,QAAgB,EAAE,KAAsB;QACvD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAa,mBAAmB,QAAQ,OAAO,EAAE;YAC5E,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;SAC5B,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,QAAgB;QAClC,MAAM,IAAI,CAAC,KAAK,CAAO,mBAAmB,QAAQ,EAAE,EAAE;YACpD,MAAM,EAAE,QAAQ;SACjB,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,QAAgB;QACjC,MAAM,IAAI,CAAC,KAAK,CAAO,mBAAmB,QAAQ,EAAE,EAAE;YACpD,MAAM,EAAE,QAAQ;SACjB,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClC,CAAC;IAED,eAAe,CAAC,QAAgB;QAC9B,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClC,CAAC;IAED,UAAU;QACR,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,KAAyB;QAC3C,OAAO,IAAI,CAAC,KAAK,CAAU,kBAAkB,EAAE;YAC7C,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;SAC5B,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,QAAiB;QAClC,MAAM,IAAI,GAAG,QAAQ;YACnB,CAAC,CAAC,8BAA8B,kBAAkB,CAAC,QAAQ,CAAC,EAAE;YAC9D,CAAC,CAAC,kBAAkB,CAAC;QACvB,OAAO,IAAI,CAAC,KAAK,CAAY,IAAI,CAAC,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,EAAU;QACzB,OAAO,IAAI,CAAC,KAAK,CAAU,oBAAoB,EAAE,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,EAAU,EAAE,KAAyB;QACvD,OAAO,IAAI,CAAC,KAAK,CAAU,oBAAoB,EAAE,EAAE,EAAE;YACnD,MAAM,EAAE,OAAO;YACf,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;SAC5B,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,EAAU;QAC5B,MAAM,IAAI,CAAC,KAAK,CAAO,oBAAoB,EAAE,EAAE,EAAE;YAC/C,MAAM,EAAE,QAAQ;SACjB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,KAAa,EAAE,IAAa;QAC7C,OAAO,IAAI,CAAC,KAAK,CAAC,oBAAoB,KAAK,SAAS,EAAE;YACpD,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC3C,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,QAAiB;QACjC,MAAM,IAAI,GAAG,QAAQ;YACnB,CAAC,CAAC,8BAA8B,kBAAkB,CAAC,QAAQ,CAAC,EAAE;YAC9D,CAAC,CAAC,kBAAkB,CAAC;QACvB,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,IAAa;QACjC,MAAM,IAAI,GAAG,IAAI;YACf,CAAC,CAAC,iCAAiC,IAAI,EAAE;YACzC,CAAC,CAAC,0BAA0B,CAAC;QAC/B,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,oBAAoB;IACpB,KAAK,CAAC,WAAW;QACf,OAAO,IAAI,CAAC,KAAK,CAAW,iBAAiB,CAAC,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,KAAwB;QACzC,OAAO,IAAI,CAAC,KAAK,CAAS,iBAAiB,EAAE;YAC3C,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;SAC5B,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,EAAU,EAAE,KAAwB;QACrD,OAAO,IAAI,CAAC,KAAK,CAAS,mBAAmB,EAAE,EAAE,EAAE;YACjD,MAAM,EAAE,OAAO;YACf,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;SAC5B,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,EAAU;QAC3B,MAAM,IAAI,CAAC,KAAK,CAAO,mBAAmB,EAAE,EAAE,EAAE;YAC9C,MAAM,EAAE,QAAQ;SACjB,CAAC,CAAC;IACL,CAAC;CACF;AAjMD,sCAiMC"}

package/dist/context.d.ts

@@ -0,0 +1,8 @@
+/// <reference types="node" />
+import { AsyncLocalStorage } from "node:async_hooks";
+import type { TenantContextLegacy } from "@stratum-hq/core";
+export declare const tenantStorage: AsyncLocalStorage<TenantContextLegacy>;
+export declare function getTenantContext(): TenantContextLegacy;
+export declare function runWithTenantContext<T>(context: TenantContextLegacy, fn: () => T): T;
+export declare function setTenantContext(context: TenantContextLegacy): void;
+//# sourceMappingURL=context.d.ts.map

package/dist/context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../src/context.ts"],"names":[],"mappings":";AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAErD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAE5D,eAAO,MAAM,aAAa,wCAA+C,CAAC;AAE1E,wBAAgB,gBAAgB,IAAI,mBAAmB,CAMtD;AAED,wBAAgB,oBAAoB,CAAC,CAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAEpF;AAED,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,mBAAmB,GAAG,IAAI,CAGnE"}

package/dist/context.js

@@ -0,0 +1,24 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.setTenantContext = exports.runWithTenantContext = exports.getTenantContext = exports.tenantStorage = void 0;
+const node_async_hooks_1 = require("node:async_hooks");
+const core_1 = require("@stratum-hq/core");
+exports.tenantStorage = new node_async_hooks_1.AsyncLocalStorage();
+function getTenantContext() {
+    const ctx = exports.tenantStorage.getStore();
+    if (!ctx) {
+        throw new core_1.TenantContextNotFoundError();
+    }
+    return ctx;
+}
+exports.getTenantContext = getTenantContext;
+function runWithTenantContext(context, fn) {
+    return exports.tenantStorage.run(context, fn);
+}
+exports.runWithTenantContext = runWithTenantContext;
+function setTenantContext(context) {
+    // Bind the current store value — for middleware entry points
+    exports.tenantStorage.enterWith(context);
+}
+exports.setTenantContext = setTenantContext;
+//# sourceMappingURL=context.js.map

package/dist/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../src/context.ts"],"names":[],"mappings":";;;AAAA,uDAAqD;AACrD,2CAA8D;AAGjD,QAAA,aAAa,GAAG,IAAI,oCAAiB,EAAuB,CAAC;AAE1E,SAAgB,gBAAgB;IAC9B,MAAM,GAAG,GAAG,qBAAa,CAAC,QAAQ,EAAE,CAAC;IACrC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,iCAA0B,EAAE,CAAC;IACzC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAND,4CAMC;AAED,SAAgB,oBAAoB,CAAI,OAA4B,EAAE,EAAW;IAC/E,OAAO,qBAAa,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AACxC,CAAC;AAFD,oDAEC;AAED,SAAgB,gBAAgB,CAAC,OAA4B;IAC3D,6DAA6D;IAC7D,qBAAa,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;AACnC,CAAC;AAHD,4CAGC"}

package/dist/index.d.ts

@@ -0,0 +1,22 @@
+import { StratumClient } from "./client.js";
+import type { StratumClientOptions } from "./client.js";
+import { getTenantContext, runWithTenantContext } from "./context.js";
+import type { MiddlewareOptions } from "./types.js";
+export declare function stratum(options: StratumClientOptions): {
+    client: StratumClient;
+    middleware: (opts?: MiddlewareOptions) => (req: any, res: any, next: any) => Promise<void>;
+    plugin: (opts?: MiddlewareOptions) => (fastify: any, _opts: any, done: any) => void;
+    getTenantContext: typeof getTenantContext;
+    runWithTenantContext: typeof runWithTenantContext;
+};
+export { StratumClient } from "./client.js";
+export type { StratumClientOptions } from "./client.js";
+export { getTenantContext, runWithTenantContext, setTenantContext, tenantStorage } from "./context.js";
+export { expressMiddleware } from "./middleware/express.js";
+export { fastifyPlugin } from "./middleware/fastify.js";
+export { resolveFromHeader } from "./resolvers/header.js";
+export { resolveFromJwt } from "./resolvers/jwt.js";
+export type { TenantResolver } from "./resolvers/custom.js";
+export type { MiddlewareOptions } from "./types.js";
+export type { TenantContextLegacy, TenantNode, CreateTenantInput, UpdateTenantInput, MoveTenantInput, ResolvedPermission, } from "@stratum-hq/core";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAGxD,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACtE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAEpD,wBAAgB,OAAO,CAAC,OAAO,EAAE,oBAAoB;;wBAI7B,iBAAiB;oBACrB,iBAAiB,eACrB,GAAG,SAAS,GAAG,QAAQ,GAAG;;;EAKzC;AAGD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,YAAY,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AACvG,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,YAAY,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,YAAY,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAGpD,YAAY,EACV,mBAAmB,EACnB,UAAU,EACV,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,kBAAkB,GACnB,MAAM,kBAAkB,CAAC"}

package/dist/index.js

@@ -0,0 +1,35 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveFromJwt = exports.resolveFromHeader = exports.fastifyPlugin = exports.expressMiddleware = exports.tenantStorage = exports.setTenantContext = exports.runWithTenantContext = exports.getTenantContext = exports.StratumClient = exports.stratum = void 0;
+const client_js_1 = require("./client.js");
+const express_js_1 = require("./middleware/express.js");
+const fastify_js_1 = require("./middleware/fastify.js");
+const context_js_1 = require("./context.js");
+function stratum(options) {
+    const client = new client_js_1.StratumClient(options);
+    return {
+        client,
+        middleware: (opts) => (0, express_js_1.expressMiddleware)(client, opts),
+        plugin: (opts) => (fastify, _opts, done) => (0, fastify_js_1.fastifyPlugin)(fastify, { client, ...opts }, done),
+        getTenantContext: context_js_1.getTenantContext,
+        runWithTenantContext: context_js_1.runWithTenantContext,
+    };
+}
+exports.stratum = stratum;
+// Named exports for direct usage
+var client_js_2 = require("./client.js");
+Object.defineProperty(exports, "StratumClient", { enumerable: true, get: function () { return client_js_2.StratumClient; } });
+var context_js_2 = require("./context.js");
+Object.defineProperty(exports, "getTenantContext", { enumerable: true, get: function () { return context_js_2.getTenantContext; } });
+Object.defineProperty(exports, "runWithTenantContext", { enumerable: true, get: function () { return context_js_2.runWithTenantContext; } });
+Object.defineProperty(exports, "setTenantContext", { enumerable: true, get: function () { return context_js_2.setTenantContext; } });
+Object.defineProperty(exports, "tenantStorage", { enumerable: true, get: function () { return context_js_2.tenantStorage; } });
+var express_js_2 = require("./middleware/express.js");
+Object.defineProperty(exports, "expressMiddleware", { enumerable: true, get: function () { return express_js_2.expressMiddleware; } });
+var fastify_js_2 = require("./middleware/fastify.js");
+Object.defineProperty(exports, "fastifyPlugin", { enumerable: true, get: function () { return fastify_js_2.fastifyPlugin; } });
+var header_js_1 = require("./resolvers/header.js");
+Object.defineProperty(exports, "resolveFromHeader", { enumerable: true, get: function () { return header_js_1.resolveFromHeader; } });
+var jwt_js_1 = require("./resolvers/jwt.js");
+Object.defineProperty(exports, "resolveFromJwt", { enumerable: true, get: function () { return jwt_js_1.resolveFromJwt; } });
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAAA,2CAA4C;AAE5C,wDAA4D;AAC5D,wDAAwD;AACxD,6CAAsE;AAGtE,SAAgB,OAAO,CAAC,OAA6B;IACnD,MAAM,MAAM,GAAG,IAAI,yBAAa,CAAC,OAAO,CAAC,CAAC;IAC1C,OAAO;QACL,MAAM;QACN,UAAU,EAAE,CAAC,IAAwB,EAAE,EAAE,CAAC,IAAA,8BAAiB,EAAC,MAAM,EAAE,IAAI,CAAC;QACzE,MAAM,EAAE,CAAC,IAAwB,EAAE,EAAE,CACnC,CAAC,OAAY,EAAE,KAAU,EAAE,IAAS,EAAE,EAAE,CACtC,IAAA,0BAAa,EAAC,OAAO,EAAE,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,EAAE,IAAI,CAAC;QACrD,gBAAgB,EAAhB,6BAAgB;QAChB,oBAAoB,EAApB,iCAAoB;KACrB,CAAC;AACJ,CAAC;AAXD,0BAWC;AAED,iCAAiC;AACjC,yCAA4C;AAAnC,0GAAA,aAAa,OAAA;AAEtB,2CAAuG;AAA9F,8GAAA,gBAAgB,OAAA;AAAE,kHAAA,oBAAoB,OAAA;AAAE,8GAAA,gBAAgB,OAAA;AAAE,2GAAA,aAAa,OAAA;AAChF,sDAA4D;AAAnD,+GAAA,iBAAiB,OAAA;AAC1B,sDAAwD;AAA/C,2GAAA,aAAa,OAAA;AACtB,mDAA0D;AAAjD,8GAAA,iBAAiB,OAAA;AAC1B,6CAAoD;AAA3C,wGAAA,cAAc,OAAA"}

package/dist/middleware/express.d.ts

@@ -0,0 +1,4 @@
+import type { StratumClient } from "../client.js";
+import type { MiddlewareOptions } from "../types.js";
+export declare function expressMiddleware(client: StratumClient, options?: MiddlewareOptions): (req: any, res: any, next: any) => Promise<void>;
+//# sourceMappingURL=express.d.ts.map

package/dist/middleware/express.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"express.d.ts","sourceRoot":"","sources":["../../src/middleware/express.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAKrD,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,aAAa,EAAE,OAAO,CAAC,EAAE,iBAAiB,SAC/D,GAAG,OAAO,GAAG,QAAQ,GAAG,KAAG,QAAQ,IAAI,CAAC,CAoD5D"}

package/dist/middleware/express.js

@@ -0,0 +1,58 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.expressMiddleware = void 0;
+const core_1 = require("@stratum-hq/core");
+const context_js_1 = require("../context.js");
+const jwt_js_1 = require("../resolvers/jwt.js");
+const header_js_1 = require("../resolvers/header.js");
+function expressMiddleware(client, options) {
+    return async (req, res, next) => {
+        try {
+            // Resolve tenant ID: JWT → header → custom resolvers
+            let tenantId = null;
+            tenantId = (0, jwt_js_1.resolveFromJwt)(req, options?.jwtClaimPath, {
+                secret: options?.jwtSecret,
+                verify: options?.jwtVerify,
+            });
+            if (!tenantId) {
+                tenantId = (0, header_js_1.resolveFromHeader)(req);
+            }
+            if (!tenantId && options?.resolvers) {
+                for (const resolver of options.resolvers) {
+                    const result = await resolver.resolve(req);
+                    if (result) {
+                        tenantId = result;
+                        break;
+                    }
+                }
+            }
+            if (!tenantId) {
+                res.status(400).json({ error: { code: "MISSING_TENANT", message: "Tenant ID could not be resolved from request" } });
+                return;
+            }
+            let context;
+            try {
+                context = await client.resolveTenant(tenantId);
+            }
+            catch (err) {
+                if (err instanceof core_1.TenantNotFoundError) {
+                    res.status(404).json({ error: { code: "TENANT_NOT_FOUND", message: `Tenant not found: ${tenantId}` } });
+                    return;
+                }
+                throw err;
+            }
+            req.tenant = context;
+            (0, context_js_1.runWithTenantContext)(context, () => {
+                next();
+            });
+        }
+        catch (err) {
+            if (options?.onError && err instanceof Error) {
+                options.onError(err, req);
+            }
+            next(err);
+        }
+    };
+}
+exports.expressMiddleware = expressMiddleware;
+//# sourceMappingURL=express.js.map

package/dist/middleware/express.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"express.js","sourceRoot":"","sources":["../../src/middleware/express.ts"],"names":[],"mappings":";;;AAAA,2CAAuD;AAGvD,8CAAqD;AACrD,gDAAqD;AACrD,sDAA2D;AAE3D,SAAgB,iBAAiB,CAAC,MAAqB,EAAE,OAA2B;IAClF,OAAO,KAAK,EAAE,GAAQ,EAAE,GAAQ,EAAE,IAAS,EAAiB,EAAE;QAC5D,IAAI,CAAC;YACH,qDAAqD;YACrD,IAAI,QAAQ,GAAkB,IAAI,CAAC;YAEnC,QAAQ,GAAG,IAAA,uBAAc,EAAC,GAAG,EAAE,OAAO,EAAE,YAAY,EAAE;gBACpD,MAAM,EAAE,OAAO,EAAE,SAAS;gBAC1B,MAAM,EAAE,OAAO,EAAE,SAAS;aAC3B,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,QAAQ,GAAG,IAAA,6BAAiB,EAAC,GAAG,CAAC,CAAC;YACpC,CAAC;YAED,IAAI,CAAC,QAAQ,IAAI,OAAO,EAAE,SAAS,EAAE,CAAC;gBACpC,KAAK,MAAM,QAAQ,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;oBACzC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;oBAC3C,IAAI,MAAM,EAAE,CAAC;wBACX,QAAQ,GAAG,MAAM,CAAC;wBAClB,MAAM;oBACR,CAAC;gBACH,CAAC;YACH,CAAC;YAED,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,8CAA8C,EAAE,EAAE,CAAC,CAAC;gBACrH,OAAO;YACT,CAAC;YAED,IAAI,OAAO,CAAC;YACZ,IAAI,CAAC;gBACH,OAAO,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;YACjD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,0BAAmB,EAAE,CAAC;oBACvC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,qBAAqB,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;oBACxG,OAAO;gBACT,CAAC;gBACD,MAAM,GAAG,CAAC;YACZ,CAAC;YAED,GAAG,CAAC,MAAM,GAAG,OAAO,CAAC;YAErB,IAAA,iCAAoB,EAAC,OAAO,EAAE,GAAG,EAAE;gBACjC,IAAI,EAAE,CAAC;YACT,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,OAAO,EAAE,OAAO,IAAI,GAAG,YAAY,KAAK,EAAE,CAAC;gBAC7C,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAC5B,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,CAAC;QACZ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AArDD,8CAqDC"}

package/dist/middleware/fastify.d.ts

@@ -0,0 +1,6 @@
+import type { StratumClient } from "../client.js";
+import type { MiddlewareOptions } from "../types.js";
+export declare function fastifyPlugin(fastify: any, options: {
+    client: StratumClient;
+} & MiddlewareOptions, done: any): void;
+//# sourceMappingURL=fastify.d.ts.map

package/dist/middleware/fastify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fastify.d.ts","sourceRoot":"","sources":["../../src/middleware/fastify.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAKrD,wBAAgB,aAAa,CAC3B,OAAO,EAAE,GAAG,EACZ,OAAO,EAAE;IAAE,MAAM,EAAE,aAAa,CAAA;CAAE,GAAG,iBAAiB,EACtD,IAAI,EAAE,GAAG,GACR,IAAI,CA0DN"}

package/dist/middleware/fastify.js

@@ -0,0 +1,58 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.fastifyPlugin = void 0;
+const core_1 = require("@stratum-hq/core");
+const context_js_1 = require("../context.js");
+const jwt_js_1 = require("../resolvers/jwt.js");
+const header_js_1 = require("../resolvers/header.js");
+function fastifyPlugin(fastify, options, done) {
+    const { client, ...middlewareOptions } = options;
+    fastify.decorateRequest("tenant", null);
+    fastify.addHook("onRequest", (request, reply, done) => {
+        // Resolve tenant ID: JWT → header → custom resolvers
+        let tenantId = null;
+        tenantId = (0, jwt_js_1.resolveFromJwt)(request, middlewareOptions.jwtClaimPath, {
+            secret: middlewareOptions.jwtSecret,
+            verify: middlewareOptions.jwtVerify,
+        });
+        if (!tenantId) {
+            tenantId = (0, header_js_1.resolveFromHeader)(request);
+        }
+        const resolveAndRun = async () => {
+            if (!tenantId && middlewareOptions.resolvers) {
+                for (const resolver of middlewareOptions.resolvers) {
+                    const result = await resolver.resolve(request);
+                    if (result) {
+                        tenantId = result;
+                        break;
+                    }
+                }
+            }
+            if (!tenantId) {
+                reply.status(400).send({ error: { code: "MISSING_TENANT", message: "Tenant ID could not be resolved from request" } });
+                return;
+            }
+            let context;
+            try {
+                context = await client.resolveTenant(tenantId);
+            }
+            catch (err) {
+                if (err instanceof core_1.TenantNotFoundError) {
+                    reply.status(404).send({ error: { code: "TENANT_NOT_FOUND", message: `Tenant not found: ${tenantId}` } });
+                    return;
+                }
+                if (middlewareOptions.onError && err instanceof Error) {
+                    middlewareOptions.onError(err, request);
+                }
+                throw err;
+            }
+            request.tenant = context;
+            // Use run (not enterWith) to bind context only for this request's lifecycle
+            (0, context_js_1.runWithTenantContext)(context, done);
+        };
+        resolveAndRun().catch(done);
+    });
+    done();
+}
+exports.fastifyPlugin = fastifyPlugin;
+//# sourceMappingURL=fastify.js.map

package/dist/middleware/fastify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fastify.js","sourceRoot":"","sources":["../../src/middleware/fastify.ts"],"names":[],"mappings":";;;AAAA,2CAAuD;AAIvD,8CAAqD;AACrD,gDAAqD;AACrD,sDAA2D;AAE3D,SAAgB,aAAa,CAC3B,OAAY,EACZ,OAAsD,EACtD,IAAS;IAET,MAAM,EAAE,MAAM,EAAE,GAAG,iBAAiB,EAAE,GAAG,OAAO,CAAC;IAEjD,OAAO,CAAC,eAAe,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAExC,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,OAAY,EAAE,KAAU,EAAE,IAAS,EAAE,EAAE;QACnE,qDAAqD;QACrD,IAAI,QAAQ,GAAkB,IAAI,CAAC;QAEnC,QAAQ,GAAG,IAAA,uBAAc,EAAC,OAAO,EAAE,iBAAiB,CAAC,YAAY,EAAE;YACjE,MAAM,EAAE,iBAAiB,CAAC,SAAS;YACnC,MAAM,EAAE,iBAAiB,CAAC,SAAS;SACpC,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,QAAQ,GAAG,IAAA,6BAAiB,EAAC,OAAO,CAAC,CAAC;QACxC,CAAC;QAED,MAAM,aAAa,GAAG,KAAK,IAAI,EAAE;YAC/B,IAAI,CAAC,QAAQ,IAAI,iBAAiB,CAAC,SAAS,EAAE,CAAC;gBAC7C,KAAK,MAAM,QAAQ,IAAI,iBAAiB,CAAC,SAAS,EAAE,CAAC;oBACnD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;oBAC/C,IAAI,MAAM,EAAE,CAAC;wBACX,QAAQ,GAAG,MAAM,CAAC;wBAClB,MAAM;oBACR,CAAC;gBACH,CAAC;YACH,CAAC;YAED,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,8CAA8C,EAAE,EAAE,CAAC,CAAC;gBACvH,OAAO;YACT,CAAC;YAED,IAAI,OAA4B,CAAC;YACjC,IAAI,CAAC;gBACH,OAAO,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;YACjD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,0BAAmB,EAAE,CAAC;oBACvC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,qBAAqB,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;oBAC1G,OAAO;gBACT,CAAC;gBACD,IAAI,iBAAiB,CAAC,OAAO,IAAI,GAAG,YAAY,KAAK,EAAE,CAAC;oBACtD,iBAAiB,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;gBAC1C,CAAC;gBACD,MAAM,GAAG,CAAC;YACZ,CAAC;YAED,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC;YAEzB,4EAA4E;YAC5E,IAAA,iCAAoB,EAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACtC,CAAC,CAAC;QAEF,aAAa,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,IAAI,EAAE,CAAC;AACT,CAAC;AA9DD,sCA8DC"}

package/dist/resolvers/custom.d.ts

@@ -0,0 +1,4 @@
+export interface TenantResolver {
+    resolve(req: unknown): string | null | Promise<string | null>;
+}
+//# sourceMappingURL=custom.d.ts.map

package/dist/resolvers/custom.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"custom.d.ts","sourceRoot":"","sources":["../../src/resolvers/custom.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CAC/D"}

package/dist/resolvers/custom.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=custom.js.map

package/dist/resolvers/custom.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"custom.js","sourceRoot":"","sources":["../../src/resolvers/custom.ts"],"names":[],"mappings":""}

package/dist/resolvers/header.d.ts

@@ -0,0 +1,2 @@
+export declare function resolveFromHeader(req: unknown): string | null;
+//# sourceMappingURL=header.d.ts.map

package/dist/resolvers/header.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"header.d.ts","sourceRoot":"","sources":["../../src/resolvers/header.ts"],"names":[],"mappings":"AAEA,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAO7D"}

package/dist/resolvers/header.js

@@ -0,0 +1,16 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveFromHeader = void 0;
+const core_1 = require("@stratum-hq/core");
+function resolveFromHeader(req) {
+    const r = req;
+    const headers = r["headers"];
+    if (!headers)
+        return null;
+    const value = headers[core_1.TENANT_HEADER.toLowerCase()] ?? headers[core_1.TENANT_HEADER];
+    if (!value)
+        return null;
+    return Array.isArray(value) ? value[0] ?? null : value;
+}
+exports.resolveFromHeader = resolveFromHeader;
+//# sourceMappingURL=header.js.map

package/dist/resolvers/header.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"header.js","sourceRoot":"","sources":["../../src/resolvers/header.ts"],"names":[],"mappings":";;;AAAA,2CAAiD;AAEjD,SAAgB,iBAAiB,CAAC,GAAY;IAC5C,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,MAAM,OAAO,GAAG,CAAC,CAAC,SAAS,CAA8D,CAAC;IAC1F,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,MAAM,KAAK,GAAG,OAAO,CAAC,oBAAa,CAAC,WAAW,EAAE,CAAC,IAAI,OAAO,CAAC,oBAAa,CAAC,CAAC;IAC7E,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;AACzD,CAAC;AAPD,8CAOC"}

package/dist/resolvers/jwt.d.ts

@@ -0,0 +1,6 @@
+export interface JwtResolverOptions {
+    secret?: string;
+    verify?: (token: string) => Record<string, unknown> | null;
+}
+export declare function resolveFromJwt(req: unknown, claimPath?: string, options?: JwtResolverOptions): string | null;
+//# sourceMappingURL=jwt.d.ts.map

package/dist/resolvers/jwt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt.d.ts","sourceRoot":"","sources":["../../src/resolvers/jwt.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,kBAAkB;IACjC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAC5D;AAcD,wBAAgB,cAAc,CAC5B,GAAG,EAAE,OAAO,EACZ,SAAS,GAAE,MAAoB,EAC/B,OAAO,CAAC,EAAE,kBAAkB,GAC3B,MAAM,GAAG,IAAI,CAuCf"}

package/dist/resolvers/jwt.js

@@ -0,0 +1,55 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveFromJwt = void 0;
+function verifyWithJsonwebtoken(token, secret) {
+    try {
+        // eslint-disable-next-line @typescript-eslint/no-require-imports
+        const jwt = require("jsonwebtoken");
+        const decoded = jwt.verify(token, secret, { algorithms: ["HS256"] });
+        if (typeof decoded === "string")
+            return null;
+        return decoded;
+    }
+    catch {
+        return null;
+    }
+}
+function resolveFromJwt(req, claimPath = "tenant_id", options) {
+    const r = req;
+    const headers = r["headers"];
+    if (!headers)
+        return null;
+    const authHeader = headers["authorization"];
+    const auth = Array.isArray(authHeader) ? authHeader[0] : authHeader;
+    if (!auth || !auth.startsWith("Bearer "))
+        return null;
+    const token = auth.slice(7);
+    let claims = null;
+    if (options?.verify) {
+        // User-supplied verify function takes priority
+        claims = options.verify(token);
+    }
+    else if (options?.secret) {
+        // Try jsonwebtoken signature verification
+        claims = verifyWithJsonwebtoken(token, options.secret);
+    }
+    else {
+        // No secret or verify function provided — refuse to trust unsigned tokens
+        console.warn("[stratum] JWT ignored: no jwtSecret or jwtVerify provided. " +
+            "Configure middleware options to enable JWT tenant resolution.");
+        return null;
+    }
+    if (!claims)
+        return null;
+    // Support dotted claim paths like "stratum.tenant_id"
+    const segments = claimPath.split(".");
+    let current = claims;
+    for (const seg of segments) {
+        if (current == null || typeof current !== "object")
+            return null;
+        current = current[seg];
+    }
+    return typeof current === "string" ? current : null;
+}
+exports.resolveFromJwt = resolveFromJwt;
+//# sourceMappingURL=jwt.js.map

package/dist/resolvers/jwt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt.js","sourceRoot":"","sources":["../../src/resolvers/jwt.ts"],"names":[],"mappings":";;;AAKA,SAAS,sBAAsB,CAAC,KAAa,EAAE,MAAc;IAC3D,IAAI,CAAC;QACH,iEAAiE;QACjE,MAAM,GAAG,GAAG,OAAO,CAAC,cAAc,CAAkC,CAAC;QACrE,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACrE,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC7C,OAAO,OAAkC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAgB,cAAc,CAC5B,GAAY,EACZ,YAAoB,WAAW,EAC/B,OAA4B;IAE5B,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,MAAM,OAAO,GAAG,CAAC,CAAC,SAAS,CAA8D,CAAC;IAC1F,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,MAAM,UAAU,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;IACpE,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IAEtD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAE5B,IAAI,MAAM,GAAmC,IAAI,CAAC;IAElD,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;QACpB,+CAA+C;QAC/C,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;SAAM,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;QAC3B,0CAA0C;QAC1C,MAAM,GAAG,sBAAsB,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACzD,CAAC;SAAM,CAAC;QACN,0EAA0E;QAC1E,OAAO,CAAC,IAAI,CACV,6DAA6D;YAC7D,+DAA+D,CAChE,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEzB,sDAAsD;IACtD,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,OAAO,GAAY,MAAM,CAAC;IAC9B,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,IAAI,OAAO,IAAI,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAChE,OAAO,GAAI,OAAmC,CAAC,GAAG,CAAC,CAAC;IACtD,CAAC;IAED,OAAO,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AACtD,CAAC;AA3CD,wCA2CC"}

package/dist/types.d.ts

@@ -0,0 +1,12 @@
+import type { TenantContextLegacy, TenantNode, CreateTenantInput, UpdateTenantInput, MoveTenantInput, ResolvedPermission } from "@stratum-hq/core";
+export type { TenantContextLegacy, TenantNode, CreateTenantInput, UpdateTenantInput, MoveTenantInput, ResolvedPermission };
+export type { TenantResolver } from "./resolvers/custom.js";
+export interface MiddlewareOptions {
+    resolvers?: import("./resolvers/custom.js").TenantResolver[];
+    headerName?: string;
+    jwtClaimPath?: string;
+    jwtSecret?: string;
+    jwtVerify?: (token: string) => Record<string, unknown> | null;
+    onError?: (err: Error, req: unknown) => void;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,UAAU,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAEnJ,YAAY,EAAE,mBAAmB,EAAE,UAAU,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,eAAe,EAAE,kBAAkB,EAAE,CAAC;AAE3H,YAAY,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAE5D,MAAM,WAAW,iBAAiB;IAChC,SAAS,CAAC,EAAE,OAAO,uBAAuB,EAAE,cAAc,EAAE,CAAC;IAC7D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC9D,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,KAAK,IAAI,CAAC;CAC9C"}

package/dist/types.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/package.json

@@ -0,0 +1,39 @@
+{
+  "name": "@stratum-hq/sdk",
+  "version": "0.1.0",
+  "description": "Stratum Node.js SDK for multi-tenant context propagation",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "test": "vitest run",
+    "lint": "tsc --noEmit",
+    "clean": "rm -rf dist"
+  },
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  },
+  "dependencies": {
+    "@stratum-hq/core": "*",
+    "lru-cache": "^10.2.0"
+  },
+  "devDependencies": {
+    "@types/express": "^4.17.0",
+    "express": "^4.18.0",
+    "fastify": "^5.3.2",
+    "typescript": "^5.4.0",
+    "vitest": "^1.6.0"
+  }
+}