@tenantscale/sdk 0.1.0

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+export { type Tenant, type TenantUser, type TenantScaleOptions, type TenantResolver, type AuditEvent, type FeatureCheck, type ImpersonationSession, type PlanTier, type TenantSettings, TenantScaleError, PlanLimitError, UnauthorizedError, } from './types.js';
+export { TenantClient } from './tenant.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,KAAK,MAAM,EACX,KAAK,UAAU,EACf,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,KAAK,YAAY,EACjB,KAAK,oBAAoB,EACzB,KAAK,QAAQ,EACb,KAAK,cAAc,EACnB,gBAAgB,EAChB,cAAc,EACd,iBAAiB,GAClB,MAAM,YAAY,CAAA;AAEnB,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA"}

package/dist/index.js

@@ -0,0 +1,6 @@
+// ──────────────────────────────────────────────────────
+// @tenantscale/sdk — Barrel exports
+// ──────────────────────────────────────────────────────
+export { TenantScaleError, PlanLimitError, UnauthorizedError, } from './types.js';
+export { TenantClient } from './tenant.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,yDAAyD;AACzD,oCAAoC;AACpC,yDAAyD;AAEzD,OAAO,EAUL,gBAAgB,EAChB,cAAc,EACd,iBAAiB,GAClB,MAAM,YAAY,CAAA;AAEnB,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA"}

package/dist/middleware/express.d.ts

@@ -0,0 +1,23 @@
+import type { Request, Response, NextFunction } from 'express';
+import { TenantClient } from '../tenant.js';
+import { type Tenant, type TenantScaleOptions } from '../types.js';
+declare global {
+    namespace Express {
+        interface Request {
+            tenant?: Tenant;
+            tenantScale?: TenantClient;
+        }
+    }
+}
+/**
+ * TenantScale Express middleware.
+ *
+ * Usage:
+ * ```ts
+ * import { expressMiddleware } from '@tenantscale/sdk/middleware'
+ *
+ * app.use('/api', expressMiddleware({ apiKey: process.env.TENANTSCALE_API_KEY }))
+ * ```
+ */
+export declare function expressMiddleware(options: TenantScaleOptions): (req: Request, res: Response, next: NextFunction) => Promise<void>;
+//# sourceMappingURL=express.d.ts.map

package/dist/middleware/express.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"express.d.ts","sourceRoot":"","sources":["../../src/middleware/express.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAC3C,OAAO,EAAE,KAAK,MAAM,EAAE,KAAK,kBAAkB,EAAkB,MAAM,aAAa,CAAA;AAGlF,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,OAAO,CAAC;QAChB,UAAU,OAAO;YACf,MAAM,CAAC,EAAE,MAAM,CAAA;YACf,WAAW,CAAC,EAAE,YAAY,CAAA;SAC3B;KACF;CACF;AAED;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,kBAAkB,IAG7C,KAAK,OAAO,EAAE,KAAK,QAAQ,EAAE,MAAM,YAAY,mBAuB9D"}

package/dist/middleware/express.js

@@ -0,0 +1,42 @@
+// ──────────────────────────────────────────────────────
+// Express Middleware — add `req.tenant` to every request
+// ──────────────────────────────────────────────────────
+import { TenantClient } from '../tenant.js';
+import { PlanLimitError } from '../types.js';
+/**
+ * TenantScale Express middleware.
+ *
+ * Usage:
+ * ```ts
+ * import { expressMiddleware } from '@tenantscale/sdk/middleware'
+ *
+ * app.use('/api', expressMiddleware({ apiKey: process.env.TENANTSCALE_API_KEY }))
+ * ```
+ */
+export function expressMiddleware(options) {
+    const client = new TenantClient(options);
+    return async (req, res, next) => {
+        // 1. Extract API key
+        const authHeader = req.headers.authorization;
+        if (!authHeader?.startsWith('Bearer ')) {
+            res.status(401).json({ error: 'Missing or invalid Authorization header' });
+            return;
+        }
+        const apiKey = authHeader.slice(7);
+        // 2. Resolve tenant
+        try {
+            const tenant = await client.resolveTenant(apiKey);
+            req.tenant = tenant;
+            req.tenantScale = client;
+            next();
+        }
+        catch (err) {
+            if (err instanceof PlanLimitError) {
+                res.status(err.status).json({ error: err.message, code: err.code });
+                return;
+            }
+            res.status(401).json({ error: 'Failed to resolve tenant' });
+        }
+    };
+}
+//# sourceMappingURL=express.js.map

package/dist/middleware/express.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"express.js","sourceRoot":"","sources":["../../src/middleware/express.ts"],"names":[],"mappings":"AAAA,yDAAyD;AACzD,yDAAyD;AACzD,yDAAyD;AAGzD,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAC3C,OAAO,EAAwC,cAAc,EAAE,MAAM,aAAa,CAAA;AAYlF;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAA2B;IAC3D,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,OAAO,CAAC,CAAA;IAExC,OAAO,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QAC/D,qBAAqB;QACrB,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAA;QAC5C,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACvC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yCAAyC,EAAE,CAAC,CAAA;YAC1E,OAAM;QACR,CAAC;QACD,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QAElC,oBAAoB;QACpB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAA;YACjD,GAAG,CAAC,MAAM,GAAG,MAAM,CAAA;YACnB,GAAG,CAAC,WAAW,GAAG,MAAM,CAAA;YACxB,IAAI,EAAE,CAAA;QACR,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,cAAc,EAAE,CAAC;gBAClC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAA;gBACnE,OAAM;YACR,CAAC;YACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC,CAAA;QAC7D,CAAC;IACH,CAAC,CAAA;AACH,CAAC"}

package/dist/middleware/hono.d.ts

@@ -0,0 +1,28 @@
+import { type MiddlewareHandler } from 'hono';
+import { TenantClient } from '../tenant.js';
+import { type Tenant, type TenantScaleOptions } from '../types.js';
+declare module 'hono' {
+    interface ContextVariableMap {
+        tenant: Tenant;
+        tenantClient: TenantClient;
+    }
+}
+/**
+ * TenantScale Hono middleware.
+ *
+ * Usage:
+ * ```ts
+ * import { tenantMiddleware } from '@tenantscale/sdk/middleware'
+ *
+ * const app = new Hono()
+ * app.use('/api/*', tenantMiddleware({ apiKey: process.env.TENANTSCALE_API_KEY }))
+ *
+ * app.get('/api/projects', (c) => {
+ *   const tenant = c.var.tenant
+ *   // tenant.id, tenant.plan, tenant.features
+ * })
+ * ```
+ */
+export declare function tenantMiddleware(options: TenantScaleOptions): MiddlewareHandler;
+export { TenantClient };
+//# sourceMappingURL=hono.d.ts.map

package/dist/middleware/hono.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hono.d.ts","sourceRoot":"","sources":["../../src/middleware/hono.ts"],"names":[],"mappings":"AAIA,OAAO,EAAgB,KAAK,iBAAiB,EAAE,MAAM,MAAM,CAAA;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAC3C,OAAO,EAAE,KAAK,MAAM,EAAE,KAAK,kBAAkB,EAAkB,MAAM,aAAa,CAAA;AAGlF,OAAO,QAAQ,MAAM,CAAC;IACpB,UAAU,kBAAkB;QAC1B,MAAM,EAAE,MAAM,CAAA;QACd,YAAY,EAAE,YAAY,CAAA;KAC3B;CACF;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,kBAAkB,GAC1B,iBAAiB,CA8BnB;AAED,OAAO,EAAE,YAAY,EAAE,CAAA"}

package/dist/middleware/hono.js

@@ -0,0 +1,48 @@
+// ──────────────────────────────────────────────────────
+// Hono Middleware — add `c.var.tenant` to every request
+// ──────────────────────────────────────────────────────
+import { TenantClient } from '../tenant.js';
+import { PlanLimitError } from '../types.js';
+/**
+ * TenantScale Hono middleware.
+ *
+ * Usage:
+ * ```ts
+ * import { tenantMiddleware } from '@tenantscale/sdk/middleware'
+ *
+ * const app = new Hono()
+ * app.use('/api/*', tenantMiddleware({ apiKey: process.env.TENANTSCALE_API_KEY }))
+ *
+ * app.get('/api/projects', (c) => {
+ *   const tenant = c.var.tenant
+ *   // tenant.id, tenant.plan, tenant.features
+ * })
+ * ```
+ */
+export function tenantMiddleware(options) {
+    const client = new TenantClient(options);
+    return async (c, next) => {
+        // 1. Extract API key from Authorization header
+        const authHeader = c.req.header('Authorization');
+        if (!authHeader?.startsWith('Bearer ')) {
+            return c.json({ error: 'Missing or invalid Authorization header' }, 401);
+        }
+        const apiKey = authHeader.slice(7);
+        // 2. Resolve tenant
+        try {
+            const tenant = await client.resolveTenant(apiKey);
+            // 3. Attach to context
+            c.set('tenant', tenant);
+            c.set('tenantClient', client);
+            await next();
+        }
+        catch (err) {
+            if (err instanceof PlanLimitError) {
+                return c.json({ error: err.message, code: err.code }, err.status);
+            }
+            return c.json({ error: 'Failed to resolve tenant' }, 401);
+        }
+    };
+}
+export { TenantClient };
+//# sourceMappingURL=hono.js.map

package/dist/middleware/hono.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hono.js","sourceRoot":"","sources":["../../src/middleware/hono.ts"],"names":[],"mappings":"AAAA,yDAAyD;AACzD,wDAAwD;AACxD,yDAAyD;AAGzD,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAC3C,OAAO,EAAwC,cAAc,EAAE,MAAM,aAAa,CAAA;AAUlF;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,gBAAgB,CAC9B,OAA2B;IAE3B,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,OAAO,CAAC,CAAA;IAExC,OAAO,KAAK,EAAE,CAAU,EAAE,IAAI,EAAE,EAAE;QAChC,+CAA+C;QAC/C,MAAM,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAA;QAChD,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACvC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yCAAyC,EAAE,EAAE,GAAG,CAAC,CAAA;QAC1E,CAAC;QACD,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QAElC,oBAAoB;QACpB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAA;YAEjD,uBAAuB;YACvB,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;YACvB,CAAC,CAAC,GAAG,CAAC,cAAc,EAAE,MAAM,CAAC,CAAA;YAE7B,MAAM,IAAI,EAAE,CAAA;QACd,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,cAAc,EAAE,CAAC;gBAClC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC,MAAa,CAAC,CAAA;YAC1E,CAAC;YACD,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,0BAA0B,EAAE,EACrC,GAAG,CACJ,CAAA;QACH,CAAC;IACH,CAAC,CAAA;AACH,CAAC;AAED,OAAO,EAAE,YAAY,EAAE,CAAA"}

package/dist/react/index.d.ts

@@ -0,0 +1,15 @@
+import type { Tenant, TenantUser } from '../types.js';
+export interface TenantContextValue {
+    tenant: Tenant | null;
+    user: TenantUser | null;
+    loading: boolean;
+    /** Switch to a different org (for multi-tenant users) */
+    switchTenant: (slug: string) => Promise<void>;
+    /** Check if a feature is enabled */
+    hasFeature: (feature: string) => boolean;
+    /** Log out of the current tenant session */
+    logout: () => Promise<void>;
+}
+export declare const TenantContext: import("react").Context<TenantContextValue>;
+export declare function useTenant(): TenantContextValue;
+//# sourceMappingURL=index.d.ts.map

package/dist/react/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/react/index.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAErD,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,IAAI,EAAE,UAAU,GAAG,IAAI,CAAA;IACvB,OAAO,EAAE,OAAO,CAAA;IAChB,yDAAyD;IACzD,YAAY,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IAC7C,oCAAoC;IACpC,UAAU,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAA;IACxC,4CAA4C;IAC5C,MAAM,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAC5B;AAED,eAAO,MAAM,aAAa,6CAOxB,CAAA;AAEF,wBAAgB,SAAS,uBAMxB"}

package/dist/react/index.js

@@ -0,0 +1,21 @@
+// ──────────────────────────────────────────────────────
+// Next.js React helpers — tenant context for the App Router
+// ──────────────────────────────────────────────────────
+'use client';
+import { createContext, useContext } from 'react';
+export const TenantContext = createContext({
+    tenant: null,
+    user: null,
+    loading: true,
+    switchTenant: async () => { },
+    hasFeature: () => false,
+    logout: async () => { },
+});
+export function useTenant() {
+    const ctx = useContext(TenantContext);
+    if (!ctx) {
+        throw new Error('useTenant must be used within a TenantProvider');
+    }
+    return ctx;
+}
+//# sourceMappingURL=index.js.map

package/dist/react/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/react/index.ts"],"names":[],"mappings":"AAAA,yDAAyD;AACzD,4DAA4D;AAC5D,yDAAyD;AAEzD,YAAY,CAAA;AAEZ,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,OAAO,CAAA;AAejD,MAAM,CAAC,MAAM,aAAa,GAAG,aAAa,CAAqB;IAC7D,MAAM,EAAE,IAAI;IACZ,IAAI,EAAE,IAAI;IACV,OAAO,EAAE,IAAI;IACb,YAAY,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;IAC5B,UAAU,EAAE,GAAG,EAAE,CAAC,KAAK;IACvB,MAAM,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;CACvB,CAAC,CAAA;AAEF,MAAM,UAAU,SAAS;IACvB,MAAM,GAAG,GAAG,UAAU,CAAC,aAAa,CAAC,CAAA;IACrC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAA;IACnE,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC"}

package/dist/tenant.d.ts

@@ -0,0 +1,30 @@
+import { type Tenant, type TenantScaleOptions } from './types.js';
+export declare class TenantClient {
+    private options;
+    private cache;
+    private cacheTtlMs;
+    constructor(options: TenantScaleOptions);
+    /**
+     * Fetch a tenant by API key.
+     * Results are cached for `cacheTtlMs` to avoid hammering the API on every request.
+     */
+    resolveTenant(apiKey: string): Promise<Tenant>;
+    /** Check if a tenant has access to a specific feature */
+    checkFeature(apiKey: string, feature: string): Promise<boolean>;
+    /** Track a usage event for metering */
+    trackEvent(apiKey: string, event: {
+        metric: string;
+        value: number;
+        properties?: Record<string, unknown>;
+    }): Promise<void>;
+    /** Log an audit event */
+    logAudit(apiKey: string, event: {
+        action: string;
+        resource: string;
+        details?: Record<string, unknown>;
+        actor_id?: string;
+    }): Promise<void>;
+    /** Invalidate cache for a specific key (called after tenant updates) */
+    invalidateCache(apiKey: string): void;
+}
+//# sourceMappingURL=tenant.d.ts.map

package/dist/tenant.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant.d.ts","sourceRoot":"","sources":["../src/tenant.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,KAAK,MAAM,EAAE,KAAK,kBAAkB,EAAoB,MAAM,YAAY,CAAA;AAOnF,qBAAa,YAAY;IAIX,OAAO,CAAC,OAAO;IAH3B,OAAO,CAAC,KAAK,CAAkC;IAC/C,OAAO,CAAC,UAAU,CAAS;gBAEP,OAAO,EAAE,kBAAkB;IAE/C;;;OAGG;IACG,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAsCpD,yDAAyD;IACnD,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAQrE,uCAAuC;IACjC,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE;QACtC,MAAM,EAAE,MAAM,CAAA;QACd,KAAK,EAAE,MAAM,CAAA;QACb,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KACrC,GAAG,OAAO,CAAC,IAAI,CAAC;IAoBjB,yBAAyB;IACnB,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE;QACpC,MAAM,EAAE,MAAM,CAAA;QACd,QAAQ,EAAE,MAAM,CAAA;QAChB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;QACjC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAClB,GAAG,OAAO,CAAC,IAAI,CAAC;IAajB,wEAAwE;IACxE,eAAe,CAAC,MAAM,EAAE,MAAM;CAG/B"}

package/dist/tenant.js

@@ -0,0 +1,88 @@
+// ──────────────────────────────────────────────────────
+// Tenant Client — fetches tenant context from the API
+// ──────────────────────────────────────────────────────
+import { TenantScaleError } from './types.js';
+export class TenantClient {
+    options;
+    cache = new Map();
+    cacheTtlMs = 60_000; // 1 minute
+    constructor(options) {
+        this.options = options;
+    }
+    /**
+     * Fetch a tenant by API key.
+     * Results are cached for `cacheTtlMs` to avoid hammering the API on every request.
+     */
+    async resolveTenant(apiKey) {
+        // Check cache
+        const cached = this.cache.get(apiKey);
+        if (cached && cached.expiresAt > Date.now()) {
+            return cached.data;
+        }
+        const baseUrl = this.options.baseUrl ?? 'https://api.tenantscale.com';
+        const res = await fetch(`${baseUrl}/v1/tenants/me`, {
+            headers: {
+                Authorization: `Bearer ${apiKey}`,
+                'Content-Type': 'application/json',
+            },
+        });
+        if (!res.ok) {
+            if (res.status === 401) {
+                throw new TenantScaleError('Invalid API key', 'UNAUTHORIZED', 401);
+            }
+            throw new TenantScaleError(`Failed to resolve tenant: ${res.statusText}`, 'TENANT_RESOLVE_FAILED', res.status);
+        }
+        const tenant = (await res.json());
+        // Cache it
+        this.cache.set(apiKey, {
+            data: tenant,
+            expiresAt: Date.now() + this.cacheTtlMs,
+        });
+        return tenant;
+    }
+    /** Check if a tenant has access to a specific feature */
+    async checkFeature(apiKey, feature) {
+        const tenant = await this.resolveTenant(apiKey);
+        const value = tenant.features[feature];
+        if (typeof value === 'boolean')
+            return value;
+        if (typeof value === 'number')
+            return value > 0;
+        return false;
+    }
+    /** Track a usage event for metering */
+    async trackEvent(apiKey, event) {
+        const baseUrl = this.options.baseUrl ?? 'https://api.tenantscale.com';
+        const res = await fetch(`${baseUrl}/v1/events`, {
+            method: 'POST',
+            headers: {
+                Authorization: `Bearer ${apiKey}`,
+                'Content-Type': 'application/json',
+            },
+            body: JSON.stringify(event),
+        });
+        if (!res.ok) {
+            // Fire and forget — don't crash the request for metering
+            if (this.options.logging) {
+                console.warn('[TenantScale] Failed to track event:', res.statusText);
+            }
+        }
+    }
+    /** Log an audit event */
+    async logAudit(apiKey, event) {
+        const baseUrl = this.options.baseUrl ?? 'https://api.tenantscale.com';
+        await fetch(`${baseUrl}/v1/audit`, {
+            method: 'POST',
+            headers: {
+                Authorization: `Bearer ${apiKey}`,
+                'Content-Type': 'application/json',
+            },
+            body: JSON.stringify(event),
+        });
+    }
+    /** Invalidate cache for a specific key (called after tenant updates) */
+    invalidateCache(apiKey) {
+        this.cache.delete(apiKey);
+    }
+}
+//# sourceMappingURL=tenant.js.map

package/dist/tenant.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant.js","sourceRoot":"","sources":["../src/tenant.ts"],"names":[],"mappings":"AAAA,yDAAyD;AACzD,sDAAsD;AACtD,yDAAyD;AAEzD,OAAO,EAAwC,gBAAgB,EAAE,MAAM,YAAY,CAAA;AAOnF,MAAM,OAAO,YAAY;IAIH;IAHZ,KAAK,GAAG,IAAI,GAAG,EAAwB,CAAA;IACvC,UAAU,GAAG,MAAM,CAAA,CAAC,WAAW;IAEvC,YAAoB,OAA2B;QAA3B,YAAO,GAAP,OAAO,CAAoB;IAAG,CAAC;IAEnD;;;OAGG;IACH,KAAK,CAAC,aAAa,CAAC,MAAc;QAChC,cAAc;QACd,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QACrC,IAAI,MAAM,IAAI,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAC5C,OAAO,MAAM,CAAC,IAAI,CAAA;QACpB,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,6BAA6B,CAAA;QAErE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,gBAAgB,EAAE;YAClD,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,MAAM,EAAE;gBACjC,cAAc,EAAE,kBAAkB;aACnC;SACF,CAAC,CAAA;QAEF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACvB,MAAM,IAAI,gBAAgB,CAAC,iBAAiB,EAAE,cAAc,EAAE,GAAG,CAAC,CAAA;YACpE,CAAC;YACD,MAAM,IAAI,gBAAgB,CACxB,6BAA6B,GAAG,CAAC,UAAU,EAAE,EAC7C,uBAAuB,EACvB,GAAG,CAAC,MAAM,CACX,CAAA;QACH,CAAC;QAED,MAAM,MAAM,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAW,CAAA;QAE3C,WAAW;QACX,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE;YACrB,IAAI,EAAE,MAAM;YACZ,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,UAAU;SACxC,CAAC,CAAA;QAEF,OAAO,MAAM,CAAA;IACf,CAAC;IAED,yDAAyD;IACzD,KAAK,CAAC,YAAY,CAAC,MAAc,EAAE,OAAe;QAChD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAA;QAC/C,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;QACtC,IAAI,OAAO,KAAK,KAAK,SAAS;YAAE,OAAO,KAAK,CAAA;QAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,KAAK,GAAG,CAAC,CAAA;QAC/C,OAAO,KAAK,CAAA;IACd,CAAC;IAED,uCAAuC;IACvC,KAAK,CAAC,UAAU,CAAC,MAAc,EAAE,KAIhC;QACC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,6BAA6B,CAAA;QAErE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,YAAY,EAAE;YAC9C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,MAAM,EAAE;gBACjC,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;SAC5B,CAAC,CAAA;QAEF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,yDAAyD;YACzD,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;gBACzB,OAAO,CAAC,IAAI,CAAC,sCAAsC,EAAE,GAAG,CAAC,UAAU,CAAC,CAAA;YACtE,CAAC;QACH,CAAC;IACH,CAAC;IAED,yBAAyB;IACzB,KAAK,CAAC,QAAQ,CAAC,MAAc,EAAE,KAK9B;QACC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,6BAA6B,CAAA;QAErE,MAAM,KAAK,CAAC,GAAG,OAAO,WAAW,EAAE;YACjC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,MAAM,EAAE;gBACjC,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;SAC5B,CAAC,CAAA;IACJ,CAAC;IAED,wEAAwE;IACxE,eAAe,CAAC,MAAc;QAC5B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAC3B,CAAC;CACF"}

package/dist/types.d.ts

@@ -0,0 +1,84 @@
+/** A tenant (customer organization) as seen by the SDK */
+export interface Tenant {
+    id: string;
+    name: string;
+    slug: string;
+    plan: PlanTier;
+    features: Record<string, boolean | number | string>;
+    config: Record<string, unknown>;
+    settings: TenantSettings;
+}
+export type PlanTier = 'free' | 'indie' | 'pro' | 'business';
+export interface TenantSettings {
+    name?: string;
+    logo_url?: string;
+    primary_color?: string;
+    custom_domain?: string;
+}
+/** The user within a tenant context */
+export interface TenantUser {
+    id: string;
+    email: string;
+    name: string;
+    role: 'owner' | 'admin' | 'member' | 'viewer';
+    tenant_id: string;
+}
+/** Options passed to the TenantScale constructor */
+export interface TenantScaleOptions {
+    /** Your TenantScale API key (tk_xxx) */
+    apiKey: string;
+    /** Base URL for the TenantScale API (default: https://api.tenantscale.com) */
+    baseUrl?: string;
+    /** How to resolve the current tenant from the request */
+    tenantResolver?: TenantResolver;
+    /** Enable request logging */
+    logging?: boolean;
+}
+export type TenantResolver = {
+    type: 'header';
+    name: string;
+} | {
+    type: 'subdomain';
+    extract: (host: string) => string | null;
+} | {
+    type: 'jwt';
+    path: string[];
+} | {
+    type: 'custom';
+    fn: (req: unknown) => string | null;
+};
+/** Audit event shape pushed from customer apps */
+export interface AuditEvent {
+    action: string;
+    resource: string;
+    details?: Record<string, unknown>;
+    actor_id?: string;
+}
+/** Result of a feature check */
+export interface FeatureCheck {
+    enabled: boolean;
+    /** If limited, how much is remaining (e.g. API calls left) */
+    remaining?: number;
+    /** The limit value from the plan */
+    limit?: number | null;
+}
+/** Impersonation session created by the admin */
+export interface ImpersonationSession {
+    token: string;
+    targetUserId: string;
+    targetTenantId: string;
+    expiresAt: string;
+    redirectUrl: string;
+}
+export declare class TenantScaleError extends Error {
+    code: string;
+    status: number;
+    constructor(message: string, code: string, status?: number);
+}
+export declare class PlanLimitError extends TenantScaleError {
+    constructor(feature: string);
+}
+export declare class UnauthorizedError extends TenantScaleError {
+    constructor(message?: string);
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAIA,0DAA0D;AAC1D,MAAM,WAAW,MAAM;IACrB,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,QAAQ,CAAA;IACd,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,CAAC,CAAA;IACnD,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC/B,QAAQ,EAAE,cAAc,CAAA;CACzB;AAED,MAAM,MAAM,QAAQ,GAAG,MAAM,GAAG,OAAO,GAAG,KAAK,GAAG,UAAU,CAAA;AAE5D,MAAM,WAAW,cAAc;IAC7B,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB;AAED,uCAAuC;AACvC,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,OAAO,GAAG,OAAO,GAAG,QAAQ,GAAG,QAAQ,CAAA;IAC7C,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,oDAAoD;AACpD,MAAM,WAAW,kBAAkB;IACjC,wCAAwC;IACxC,MAAM,EAAE,MAAM,CAAA;IACd,8EAA8E;IAC9E,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,yDAAyD;IACzD,cAAc,CAAC,EAAE,cAAc,CAAA;IAC/B,6BAA6B;IAC7B,OAAO,CAAC,EAAE,OAAO,CAAA;CAClB;AAED,MAAM,MAAM,cAAc,GACtB;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAChC;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAA;CAAE,GAC/D;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,GAC/B;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,EAAE,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,MAAM,GAAG,IAAI,CAAA;CAAE,CAAA;AAE3D,kDAAkD;AAClD,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED,gCAAgC;AAChC,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,OAAO,CAAA;IAChB,8DAA8D;IAC9D,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,oCAAoC;IACpC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CACtB;AAED,iDAAiD;AACjD,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,MAAM,CAAA;IACb,YAAY,EAAE,MAAM,CAAA;IACpB,cAAc,EAAE,MAAM,CAAA;IACtB,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,EAAE,MAAM,CAAA;CACpB;AAMD,qBAAa,gBAAiB,SAAQ,KAAK;IAGhC,IAAI,EAAE,MAAM;IACZ,MAAM,EAAE,MAAM;gBAFrB,OAAO,EAAE,MAAM,EACR,IAAI,EAAE,MAAM,EACZ,MAAM,GAAE,MAAY;CAK9B;AAED,qBAAa,cAAe,SAAQ,gBAAgB;gBACtC,OAAO,EAAE,MAAM;CAQ5B;AAED,qBAAa,iBAAkB,SAAQ,gBAAgB;gBACzC,OAAO,SAA+B;CAInD"}

package/dist/types.js

@@ -0,0 +1,29 @@
+// ──────────────────────────────────────────────────────
+// Tenant Types — the domain model for the SDK
+// ──────────────────────────────────────────────────────
+// ──────────────────────────────────────────────────────
+// Error types
+// ──────────────────────────────────────────────────────
+export class TenantScaleError extends Error {
+    code;
+    status;
+    constructor(message, code, status = 500) {
+        super(message);
+        this.code = code;
+        this.status = status;
+        this.name = 'TenantScaleError';
+    }
+}
+export class PlanLimitError extends TenantScaleError {
+    constructor(feature) {
+        super(`Plan limit reached: ${feature}. Upgrade your plan to unlock this feature.`, 'PLAN_LIMIT_REACHED', 403);
+        this.name = 'PlanLimitError';
+    }
+}
+export class UnauthorizedError extends TenantScaleError {
+    constructor(message = 'Invalid or missing API key') {
+        super(message, 'UNAUTHORIZED', 401);
+        this.name = 'UnauthorizedError';
+    }
+}
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,yDAAyD;AACzD,8CAA8C;AAC9C,yDAAyD;AA2EzD,yDAAyD;AACzD,cAAc;AACd,yDAAyD;AAEzD,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IAGhC;IACA;IAHT,YACE,OAAe,EACR,IAAY,EACZ,SAAiB,GAAG;QAE3B,KAAK,CAAC,OAAO,CAAC,CAAA;QAHP,SAAI,GAAJ,IAAI,CAAQ;QACZ,WAAM,GAAN,MAAM,CAAc;QAG3B,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAA;IAChC,CAAC;CACF;AAED,MAAM,OAAO,cAAe,SAAQ,gBAAgB;IAClD,YAAY,OAAe;QACzB,KAAK,CACH,uBAAuB,OAAO,6CAA6C,EAC3E,oBAAoB,EACpB,GAAG,CACJ,CAAA;QACD,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAA;IAC9B,CAAC;CACF;AAED,MAAM,OAAO,iBAAkB,SAAQ,gBAAgB;IACrD,YAAY,OAAO,GAAG,4BAA4B;QAChD,KAAK,CAAC,OAAO,EAAE,cAAc,EAAE,GAAG,CAAC,CAAA;QACnC,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAA;IACjC,CAAC;CACF"}

package/package.json

@@ -0,0 +1,63 @@
+{
+  "name": "@tenantscale/sdk",
+  "version": "0.1.0",
+  "description": "Multi-tenant middleware SDK for B2B SaaS",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": "./dist/index.js",
+      "types": "./dist/index.d.ts"
+    },
+    "./middleware": {
+      "import": "./dist/middleware/index.js",
+      "types": "./dist/middleware/index.d.ts"
+    },
+    "./react": {
+      "import": "./dist/react/index.js",
+      "types": "./dist/react/index.d.ts"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsc --watch",
+    "test": "vitest run",
+    "lint": "eslint src/"
+  },
+  "dependencies": {
+    "superjson": "^2.2.0"
+  },
+  "peerDependencies": {
+    "express": "^5.0.0",
+    "hono": "^4.6.0",
+    "next": "^15.0.0"
+  },
+  "peerDependenciesMeta": {
+    "hono": {
+      "optional": true
+    },
+    "next": {
+      "optional": true
+    },
+    "express": {
+      "optional": true
+    }
+  },
+  "devDependencies": {
+    "@types/express": "^5.0.0",
+    "@types/react": "^19.0.0",
+    "@vitest/coverage-v8": "^3.2.6",
+    "hono": "^4.6.0",
+    "next": "^15.0.0",
+    "react": "^19.0.0",
+    "typescript": "^5.7.0",
+    "vitest": "^3.0.0"
+  },
+  "publishConfig": {
+    "access": "public"
+  }
+}