@venturekit-pro/tenancy 0.0.0-dev.20260522121000 → 0.0.0-dev.20260525024212

package/dist/index.d.ts

@@ -6,5 +6,5 @@
  */
 export * from './types/index.js';
 export { TenantContext, createTenantContext, getCurrentTenant, resolveTenant, } from './context/index.js';
-export { createTenantMiddleware, createQuotaMiddleware, checkQuotas, TenantNotFoundError, TenantSuspendedError, TenantInactiveError, QuotaExceededError, } from './middleware/index.js';
+export * from './middleware/index.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,cAAc,kBAAkB,CAAC;AAGjC,OAAO,EACL,aAAa,EACb,mBAAmB,EACnB,gBAAgB,EAChB,aAAa,GACd,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EACL,sBAAsB,EACtB,qBAAqB,EACrB,WAAW,EACX,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,uBAAuB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,cAAc,kBAAkB,CAAC;AAGjC,OAAO,EACL,aAAa,EACb,mBAAmB,EACnB,gBAAgB,EAChB,aAAa,GACd,MAAM,oBAAoB,CAAC;AAG5B,cAAc,uBAAuB,CAAC"}

package/dist/index.js

@@ -9,5 +9,5 @@ export * from './types/index.js';
 // Context
 export { createTenantContext, getCurrentTenant, resolveTenant, } from './context/index.js';
 // Middleware
-export { createTenantMiddleware, createQuotaMiddleware, checkQuotas, TenantNotFoundError, TenantSuspendedError, TenantInactiveError, QuotaExceededError, } from './middleware/index.js';
+export * from './middleware/index.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,QAAQ;AACR,cAAc,kBAAkB,CAAC;AAEjC,UAAU;AACV,OAAO,EAEL,mBAAmB,EACnB,gBAAgB,EAChB,aAAa,GACd,MAAM,oBAAoB,CAAC;AAE5B,aAAa;AACb,OAAO,EACL,sBAAsB,EACtB,qBAAqB,EACrB,WAAW,EACX,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,uBAAuB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,QAAQ;AACR,cAAc,kBAAkB,CAAC;AAEjC,UAAU;AACV,OAAO,EAEL,mBAAmB,EACnB,gBAAgB,EAChB,aAAa,GACd,MAAM,oBAAoB,CAAC;AAE5B,aAAa;AACb,cAAc,uBAAuB,CAAC"}

package/dist/middleware/index.d.ts

@@ -3,4 +3,6 @@
  */
 export { createTenantMiddleware, TenantNotFoundError, TenantSuspendedError, TenantInactiveError, } from './tenant-middleware.js';
 export { createQuotaMiddleware, QuotaExceededError, checkQuotas } from './quota-middleware.js';
+export { createRuntimeTenantMiddleware, hostPrefixDomainResolver, } from './runtime-tenant-middleware.js';
+export type { RuntimeTenantResolver, RuntimeTenantMiddlewareOptions, HostPrefixDomainResolverOptions, } from './runtime-tenant-middleware.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/middleware/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/middleware/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACL,sBAAsB,EACtB,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/middleware/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACL,sBAAsB,EACtB,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAC/F,OAAO,EACL,6BAA6B,EAC7B,wBAAwB,GACzB,MAAM,gCAAgC,CAAC;AACxC,YAAY,EACV,qBAAqB,EACrB,8BAA8B,EAC9B,+BAA+B,GAChC,MAAM,gCAAgC,CAAC"}

package/dist/middleware/index.js

@@ -3,4 +3,5 @@
  */
 export { createTenantMiddleware, TenantNotFoundError, TenantSuspendedError, TenantInactiveError, } from './tenant-middleware.js';
 export { createQuotaMiddleware, QuotaExceededError, checkQuotas } from './quota-middleware.js';
+export { createRuntimeTenantMiddleware, hostPrefixDomainResolver, } from './runtime-tenant-middleware.js';
 //# sourceMappingURL=index.js.map

package/dist/middleware/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/middleware/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACL,sBAAsB,EACtB,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/middleware/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACL,sBAAsB,EACtB,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAC/F,OAAO,EACL,6BAA6B,EAC7B,wBAAwB,GACzB,MAAM,gCAAgC,CAAC"}

package/dist/middleware/runtime-tenant-middleware.d.ts

@@ -0,0 +1,114 @@
+/**
+ * Runtime-aware tenant middleware.
+ *
+ * The pre-existing {@link createTenantMiddleware} in this package is
+ * built around a generic `TenantRequest` shape and an
+ * AsyncLocalStorage-backed `TenantContext`. That works for the
+ * runtime-agnostic usage (Fastify, generic Node servers) it was
+ * originally designed for, but does **not** integrate with
+ * `@venturekit/runtime`'s `RequestContext.tenant` field.
+ *
+ * This module fills that gap. It exposes a `Middleware<RequestContext>`
+ * compatible with `handler({ middleware: [...] })` that:
+ *
+ *   1. Calls a caller-provided async resolver with the live
+ *      `RequestContext` (so the resolver can read headers, query
+ *      params, JWT claims, and the raw API Gateway event).
+ *   2. Populates `ctx.tenant` with the resolved tenant.
+ *   3. 404s with {@link TenantNotFoundError} on miss — protecting
+ *      multi-tenant Lambdas from leaking the platform's existence to
+ *      hostnames that aren't configured.
+ *
+ * A common case — derive the tenant from a host like `api.<domain>`
+ * with a `domains` table lookup — is built on top of this primitive
+ * via {@link hostPrefixDomainResolver}. Apps that need different rules
+ * (path prefix, JWT claim, header, …) plug their own resolver in.
+ */
+import type { Middleware, RequestContext, TenantContext } from '@venturekit/runtime';
+export interface RuntimeTenantResolver {
+    (ctx: RequestContext): Promise<TenantContext | null> | TenantContext | null;
+}
+export interface RuntimeTenantMiddlewareOptions {
+    /**
+     * Function that produces the tenant for the current request. Return
+     * `null` to signal "no tenant matched"; the middleware will throw
+     * {@link TenantNotFoundError} (404) unless `optional: true`.
+     *
+     * The resolver receives the full `RequestContext` so it can read
+     * `rawEvent.headers`, `queryParams`, `user`, etc.
+     */
+    resolver: RuntimeTenantResolver;
+    /**
+     * If `true`, missing tenants pass through with `ctx.tenant = null`
+     * instead of 404-ing. Use for routes that legitimately work
+     * un-scoped (e.g. health checks, platform-level admin).
+     *
+     * Default: `false`.
+     */
+    optional?: boolean;
+}
+/**
+ * Build a `@venturekit/runtime`-compatible middleware that resolves
+ * the current request's tenant and stashes it on `ctx.tenant`.
+ *
+ * Place this **before** any tenant-scoped logic in your middleware
+ * stack.
+ *
+ * @example
+ * ```ts
+ * import { handler } from '@venturekit/runtime';
+ * import {
+ *   createRuntimeTenantMiddleware,
+ *   hostPrefixDomainResolver,
+ * } from '@venturekit-pro/tenancy';
+ *
+ * const tenancy = createRuntimeTenantMiddleware({
+ *   resolver: hostPrefixDomainResolver({
+ *     prefix: 'api.',
+ *     lookup: async (domain) => loadCommunityByDomain(domain),
+ *   }),
+ * });
+ *
+ * export const main = handler(async (_b, ctx) => ({
+ *   tenant: ctx.tenant!.slug,
+ * }), { middleware: [tenancy] });
+ * ```
+ */
+export declare function createRuntimeTenantMiddleware(options: RuntimeTenantMiddlewareOptions): Middleware<RequestContext>;
+export interface HostPrefixDomainResolverOptions<T extends TenantContext> {
+    /**
+     * Prefix to strip from the request's `Host` header before looking
+     * up. Defaults to `'api.'` — so `api.insea.pro` resolves the tenant
+     * whose domain is `insea.pro`.
+     */
+    prefix?: string;
+    /**
+     * Caller-supplied DB lookup. Receives the post-strip hostname
+     * (without port) and returns the tenant or `null`.
+     */
+    lookup: (domain: string, ctx: RequestContext) => Promise<T | null> | T | null;
+    /**
+     * Dev-only overrides honored when `process.env.STAGE === 'dev'`.
+     * Lets `vk dev` serve tenanted routes from `localhost:3001` by
+     * accepting an explicit slug from a header or query param.
+     *
+     * Defaults: header `X-Tenant-Slug`, query `tenant`. Set to `false`
+     * to disable.
+     */
+    devOverrides?: false | {
+        headerName?: string;
+        queryName?: string;
+        lookupBySlug: (slug: string, ctx: RequestContext) => Promise<T | null> | T | null;
+    };
+}
+/**
+ * Build a {@link RuntimeTenantResolver} that derives the tenant from
+ * the request's `Host` header by stripping a prefix (default `api.`)
+ * and looking the remainder up in a caller-supplied store.
+ *
+ * Encapsulates the "every API hostname is `api.<tenant-domain>`"
+ * convention many multi-tenant VentureKit apps share, including the
+ * dev-only `X-Tenant-Slug` / `?tenant=` overrides for `vk dev`.
+ */
+export declare function hostPrefixDomainResolver<T extends TenantContext>(options: HostPrefixDomainResolverOptions<T>): RuntimeTenantResolver;
+//# sourceMappingURL=runtime-tenant-middleware.d.ts.map

package/dist/middleware/runtime-tenant-middleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-tenant-middleware.d.ts","sourceRoot":"","sources":["../../src/middleware/runtime-tenant-middleware.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAIrF,MAAM,WAAW,qBAAqB;IACpC,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,aAAa,GAAG,IAAI,CAAC;CAC7E;AAED,MAAM,WAAW,8BAA8B;IAC7C;;;;;;;OAOG;IACH,QAAQ,EAAE,qBAAqB,CAAC;IAEhC;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,8BAA8B,GACtC,UAAU,CAAC,cAAc,CAAC,CAiB5B;AAED,MAAM,WAAW,+BAA+B,CAAC,CAAC,SAAS,aAAa;IACtE;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,MAAM,EAAE,CACN,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,cAAc,KAChB,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;IAClC;;;;;;;OAOG;IACH,YAAY,CAAC,EACT,KAAK,GACL;QACE,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,YAAY,EAAE,CACZ,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,cAAc,KAChB,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;KACnC,CAAC;CACP;AAED;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CAAC,CAAC,SAAS,aAAa,EAC9D,OAAO,EAAE,+BAA+B,CAAC,CAAC,CAAC,GAC1C,qBAAqB,CAgCvB"}

package/dist/middleware/runtime-tenant-middleware.js

@@ -0,0 +1,84 @@
+import { TenantNotFoundError } from './tenant-middleware.js';
+/**
+ * Build a `@venturekit/runtime`-compatible middleware that resolves
+ * the current request's tenant and stashes it on `ctx.tenant`.
+ *
+ * Place this **before** any tenant-scoped logic in your middleware
+ * stack.
+ *
+ * @example
+ * ```ts
+ * import { handler } from '@venturekit/runtime';
+ * import {
+ *   createRuntimeTenantMiddleware,
+ *   hostPrefixDomainResolver,
+ * } from '@venturekit-pro/tenancy';
+ *
+ * const tenancy = createRuntimeTenantMiddleware({
+ *   resolver: hostPrefixDomainResolver({
+ *     prefix: 'api.',
+ *     lookup: async (domain) => loadCommunityByDomain(domain),
+ *   }),
+ * });
+ *
+ * export const main = handler(async (_b, ctx) => ({
+ *   tenant: ctx.tenant!.slug,
+ * }), { middleware: [tenancy] });
+ * ```
+ */
+export function createRuntimeTenantMiddleware(options) {
+    const { resolver, optional = false } = options;
+    return {
+        name: 'runtime-tenant',
+        fn: async (ctx, next) => {
+            const tenant = await resolver(ctx);
+            if (!tenant) {
+                if (optional) {
+                    ctx.tenant = null;
+                    return next();
+                }
+                throw new TenantNotFoundError('unknown');
+            }
+            ctx.tenant = tenant;
+            return next();
+        },
+    };
+}
+/**
+ * Build a {@link RuntimeTenantResolver} that derives the tenant from
+ * the request's `Host` header by stripping a prefix (default `api.`)
+ * and looking the remainder up in a caller-supplied store.
+ *
+ * Encapsulates the "every API hostname is `api.<tenant-domain>`"
+ * convention many multi-tenant VentureKit apps share, including the
+ * dev-only `X-Tenant-Slug` / `?tenant=` overrides for `vk dev`.
+ */
+export function hostPrefixDomainResolver(options) {
+    const prefix = options.prefix ?? 'api.';
+    const dev = options.devOverrides;
+    return async (ctx) => {
+        const headers = ctx.rawEvent.headers ?? {};
+        if (process.env.STAGE === 'dev' && dev !== false) {
+            const headerName = (dev?.headerName ?? 'x-tenant-slug').toLowerCase();
+            const queryName = dev?.queryName ?? 'tenant';
+            const headerValue = headers[headerName] ??
+                headers[headerName.toUpperCase()] ??
+                headers[headerName
+                    .split('-')
+                    .map((p) => p.charAt(0).toUpperCase() + p.slice(1))
+                    .join('-')];
+            const querySlug = ctx.queryParams?.[queryName];
+            const slug = headerValue ?? querySlug;
+            if (slug && dev?.lookupBySlug) {
+                return (await dev.lookupBySlug(slug, ctx)) ?? null;
+            }
+        }
+        const rawHost = (headers['host'] ?? headers['Host'] ?? '').toLowerCase();
+        if (!rawHost)
+            return null;
+        const host = rawHost.split(':', 1)[0];
+        const domain = host.startsWith(prefix) ? host.slice(prefix.length) : host;
+        return (await options.lookup(domain, ctx)) ?? null;
+    };
+}
+//# sourceMappingURL=runtime-tenant-middleware.js.map

package/dist/middleware/runtime-tenant-middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-tenant-middleware.js","sourceRoot":"","sources":["../../src/middleware/runtime-tenant-middleware.ts"],"names":[],"mappings":"AA4BA,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AA2B7D;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,UAAU,6BAA6B,CAC3C,OAAuC;IAEvC,MAAM,EAAE,QAAQ,EAAE,QAAQ,GAAG,KAAK,EAAE,GAAG,OAAO,CAAC;IAC/C,OAAO;QACL,IAAI,EAAE,gBAAgB;QACtB,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YACtB,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;YACnC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,IAAI,QAAQ,EAAE,CAAC;oBACb,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC;oBAClB,OAAO,IAAI,EAAE,CAAC;gBAChB,CAAC;gBACD,MAAM,IAAI,mBAAmB,CAAC,SAAS,CAAC,CAAC;YAC3C,CAAC;YACD,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC;YACpB,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;KACF,CAAC;AACJ,CAAC;AAqCD;;;;;;;;GAQG;AACH,MAAM,UAAU,wBAAwB,CACtC,OAA2C;IAE3C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC;IACxC,MAAM,GAAG,GAAG,OAAO,CAAC,YAAY,CAAC;IAEjC,OAAO,KAAK,EAAE,GAAmB,EAAqB,EAAE;QACtD,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAC;QAE3C,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,KAAK,IAAI,GAAG,KAAK,KAAK,EAAE,CAAC;YACjD,MAAM,UAAU,GAAG,CAAC,GAAG,EAAE,UAAU,IAAI,eAAe,CAAC,CAAC,WAAW,EAAE,CAAC;YACtE,MAAM,SAAS,GAAG,GAAG,EAAE,SAAS,IAAI,QAAQ,CAAC;YAC7C,MAAM,WAAW,GACf,OAAO,CAAC,UAAU,CAAC;gBACnB,OAAO,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC;gBACjC,OAAO,CACL,UAAU;qBACP,KAAK,CAAC,GAAG,CAAC;qBACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;qBAClD,IAAI,CAAC,GAAG,CAAC,CACb,CAAC;YACJ,MAAM,SAAS,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,SAAS,CAAC,CAAC;YAC/C,MAAM,IAAI,GAAG,WAAW,IAAI,SAAS,CAAC;YACtC,IAAI,IAAI,IAAI,GAAG,EAAE,YAAY,EAAE,CAAC;gBAC9B,OAAO,CAAC,MAAM,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC;YACrD,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QACzE,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAC1B,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACtC,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC1E,OAAO,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC;IACrD,CAAC,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@venturekit-pro/tenancy",
-  "version": "0.0.0-dev.20260522121000",
+  "version": "0.0.0-dev.20260525024212",
   "description": "Multi-tenant utilities for VentureKit",
   "type": "module",
   "main": "./dist/index.js",
@@ -26,10 +26,19 @@
     }
   },
   "dependencies": {
-    "@venturekit/core": "0.0.0-dev.20260522121000"
+    "@venturekit/core": "0.0.0-dev.20260525024212"
+  },
+  "peerDependencies": {
+    "@venturekit/runtime": "0.0.0-dev.20260525024212"
+  },
+  "peerDependenciesMeta": {
+    "@venturekit/runtime": {
+      "optional": true
+    }
   },
   "devDependencies": {
     "@types/node": "^25.6.0",
+    "@venturekit/runtime": "0.0.0-dev.20260525024212",
     "typescript": "^5.3.0"
   },
   "scripts": {