@venturekit-pro/tenancy 0.0.50 → 0.0.51

package/dist/middleware/index.d.ts

@@ -5,7 +5,8 @@ export { createTenantMiddleware, TenantNotFoundError, TenantSuspendedError, Tena
 export { createQuotaMiddleware, QuotaExceededError, checkQuotas } from './quota-middleware.js';
 export { createRuntimeTenantMiddleware, hostPrefixDomainResolver, } from './runtime-tenant-middleware.js';
 export type { RuntimeTenantResolver, RuntimeTenantMiddlewareOptions, HostPrefixDomainResolverOptions, } from './runtime-tenant-middleware.js';
-export { createTenantRlsMiddleware } from './rls-middleware.js';
+export { createTenantRlsMiddleware, createPlatformScopeMiddleware } from './rls-middleware.js';
+export type { TenantRlsAccessCheck, TenantRlsOptions } from './rls-middleware.js';
 export { createTenantUserScopesMiddleware, getTenantUser, requireTenantUser, } from './tenant-user-scopes-middleware.js';
 export type { TenantUserWithRole, TenantUserResolver, TenantUserScopesMiddlewareOptions, RoleScopesLookup, } from './tenant-user-scopes-middleware.js';
 export { TENANT_ROLES_CLAIM, TENANT_ROLES_MAX_LENGTH, packTenantRoles, unpackTenantRoles, } from './tenant-roles-claim.js';

package/dist/middleware/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/middleware/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACL,sBAAsB,EACtB,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAC/F,OAAO,EACL,6BAA6B,EAC7B,wBAAwB,GACzB,MAAM,gCAAgC,CAAC;AACxC,YAAY,EACV,qBAAqB,EACrB,8BAA8B,EAC9B,+BAA+B,GAChC,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EACL,gCAAgC,EAChC,aAAa,EACb,iBAAiB,GAClB,MAAM,oCAAoC,CAAC;AAC5C,YAAY,EACV,kBAAkB,EAClB,kBAAkB,EAClB,iCAAiC,EACjC,gBAAgB,GACjB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,kBAAkB,EAClB,uBAAuB,EACvB,eAAe,EACf,iBAAiB,GAClB,MAAM,yBAAyB,CAAC;AACjC,YAAY,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EACL,4BAA4B,EAC5B,oBAAoB,GACrB,MAAM,wBAAwB,CAAC;AAChC,YAAY,EACV,qBAAqB,EACrB,6BAA6B,GAC9B,MAAM,wBAAwB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/middleware/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACL,sBAAsB,EACtB,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAC/F,OAAO,EACL,6BAA6B,EAC7B,wBAAwB,GACzB,MAAM,gCAAgC,CAAC;AACxC,YAAY,EACV,qBAAqB,EACrB,8BAA8B,EAC9B,+BAA+B,GAChC,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,yBAAyB,EAAE,6BAA6B,EAAE,MAAM,qBAAqB,CAAC;AAC/F,YAAY,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAClF,OAAO,EACL,gCAAgC,EAChC,aAAa,EACb,iBAAiB,GAClB,MAAM,oCAAoC,CAAC;AAC5C,YAAY,EACV,kBAAkB,EAClB,kBAAkB,EAClB,iCAAiC,EACjC,gBAAgB,GACjB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,kBAAkB,EAClB,uBAAuB,EACvB,eAAe,EACf,iBAAiB,GAClB,MAAM,yBAAyB,CAAC;AACjC,YAAY,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EACL,4BAA4B,EAC5B,oBAAoB,GACrB,MAAM,wBAAwB,CAAC;AAChC,YAAY,EACV,qBAAqB,EACrB,6BAA6B,GAC9B,MAAM,wBAAwB,CAAC"}

package/dist/middleware/index.js

@@ -4,7 +4,7 @@
 export { createTenantMiddleware, TenantNotFoundError, TenantSuspendedError, TenantInactiveError, } from './tenant-middleware.js';
 export { createQuotaMiddleware, QuotaExceededError, checkQuotas } from './quota-middleware.js';
 export { createRuntimeTenantMiddleware, hostPrefixDomainResolver, } from './runtime-tenant-middleware.js';
-export { createTenantRlsMiddleware } from './rls-middleware.js';
+export { createTenantRlsMiddleware, createPlatformScopeMiddleware } from './rls-middleware.js';
 export { createTenantUserScopesMiddleware, getTenantUser, requireTenantUser, } from './tenant-user-scopes-middleware.js';
 export { TENANT_ROLES_CLAIM, TENANT_ROLES_MAX_LENGTH, packTenantRoles, unpackTenantRoles, } from './tenant-roles-claim.js';
 export { createTenantHandoffAuthorize, normalizeHandoffHost, } from './handoff-authorize.js';

package/dist/middleware/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/middleware/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACL,sBAAsB,EACtB,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAC/F,OAAO,EACL,6BAA6B,EAC7B,wBAAwB,GACzB,MAAM,gCAAgC,CAAC;AAMxC,OAAO,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EACL,gCAAgC,EAChC,aAAa,EACb,iBAAiB,GAClB,MAAM,oCAAoC,CAAC;AAO5C,OAAO,EACL,kBAAkB,EAClB,uBAAuB,EACvB,eAAe,EACf,iBAAiB,GAClB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,4BAA4B,EAC5B,oBAAoB,GACrB,MAAM,wBAAwB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/middleware/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACL,sBAAsB,EACtB,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAC/F,OAAO,EACL,6BAA6B,EAC7B,wBAAwB,GACzB,MAAM,gCAAgC,CAAC;AAMxC,OAAO,EAAE,yBAAyB,EAAE,6BAA6B,EAAE,MAAM,qBAAqB,CAAC;AAE/F,OAAO,EACL,gCAAgC,EAChC,aAAa,EACb,iBAAiB,GAClB,MAAM,oCAAoC,CAAC;AAO5C,OAAO,EACL,kBAAkB,EAClB,uBAAuB,EACvB,eAAe,EACf,iBAAiB,GAClB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,4BAA4B,EAC5B,oBAAoB,GACrB,MAAM,wBAAwB,CAAC"}

package/dist/middleware/quota-middleware.d.ts

@@ -26,15 +26,22 @@ export interface QuotaMiddlewareOptions {
  * Create quota enforcement middleware
  */
 export declare function createQuotaMiddleware(options: QuotaMiddlewareOptions): <T>(next: () => Promise<T>) => Promise<T>;
+/** Same value as `@venturekit/runtime`'s `VENTURE_ERROR_MARKER` — the handler's error boundary renders marked errors. */
+declare const VENTURE_ERROR_MARKER: unique symbol;
 /**
- * Quota exceeded error
+ * Quota exceeded error. Rendered by the runtime's error boundary as a 403
+ * `QUOTA_EXCEEDED` with `{ quotaKey, current, limit }` details.
  */
 export declare class QuotaExceededError extends Error {
     tenantId: string;
     quotaKey: string;
     current: number;
     limit: number;
+    readonly [VENTURE_ERROR_MARKER]: true;
+    readonly code = "QUOTA_EXCEEDED";
+    readonly statusCode = 403;
     constructor(tenantId: string, quotaKey: string, current: number, limit: number);
+    get details(): Record<string, unknown>;
 }
 /**
  * Check multiple quotas at once
@@ -45,4 +52,5 @@ export declare function checkQuotas(tenantId: string, quotas: TenantQuotas, chec
     limit: number;
     exceeded: boolean;
 }[]>;
+export {};
 //# sourceMappingURL=quota-middleware.d.ts.map

package/dist/middleware/quota-middleware.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"quota-middleware.d.ts","sourceRoot":"","sources":["../../src/middleware/quota-middleware.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAGtD;;GAEG;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC;IACvE,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;CACf,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,sCAAsC;IACtC,UAAU,EAAE,UAAU,CAAC;IAEvB,yBAAyB;IACzB,QAAQ,EAAE,MAAM,YAAY,CAAC;IAE7B,iCAAiC;IACjC,eAAe,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9E;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,sBAAsB,IAG7B,CAAC,EAAE,MAAM,MAAM,OAAO,CAAC,CAAC,CAAC,KAAG,OAAO,CAAC,CAAC,CAAC,CAmB7E;AAED;;GAEG;AACH,qBAAa,kBAAmB,SAAQ,KAAK;IAElC,QAAQ,EAAE,MAAM;IAChB,QAAQ,EAAE,MAAM;IAChB,OAAO,EAAE,MAAM;IACf,KAAK,EAAE,MAAM;gBAHb,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM;CAKvB;AAED;;GAEG;AACH,wBAAsB,WAAW,CAC/B,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,YAAY,EACpB,UAAU,EAAE,UAAU,GACrB,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAA;CAAE,EAAE,CAAC,CAgB/E"}
+{"version":3,"file":"quota-middleware.d.ts","sourceRoot":"","sources":["../../src/middleware/quota-middleware.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAGtD;;GAEG;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC;IACvE,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;CACf,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,sCAAsC;IACtC,UAAU,EAAE,UAAU,CAAC;IAEvB,yBAAyB;IACzB,QAAQ,EAAE,MAAM,YAAY,CAAC;IAE7B,iCAAiC;IACjC,eAAe,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9E;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,sBAAsB,IAG7B,CAAC,EAAE,MAAM,MAAM,OAAO,CAAC,CAAC,CAAC,KAAG,OAAO,CAAC,CAAC,CAAC,CAmB7E;AAED,yHAAyH;AACzH,QAAA,MAAM,oBAAoB,EAAE,OAAO,MAAuC,CAAC;AAE3E;;;GAGG;AACH,qBAAa,kBAAmB,SAAQ,KAAK;IAKlC,QAAQ,EAAE,MAAM;IAChB,QAAQ,EAAE,MAAM;IAChB,OAAO,EAAE,MAAM;IACf,KAAK,EAAE,MAAM;IAPtB,QAAQ,CAAC,CAAC,oBAAoB,CAAC,EAAG,IAAI,CAAU;IAChD,QAAQ,CAAC,IAAI,oBAAoB;IACjC,QAAQ,CAAC,UAAU,OAAO;gBAEjB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM;IAMtB,IAAI,OAAO,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAErC;CACF;AAED;;GAEG;AACH,wBAAsB,WAAW,CAC/B,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,YAAY,EACpB,UAAU,EAAE,UAAU,GACrB,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAA;CAAE,EAAE,CAAC,CAgB/E"}

package/dist/middleware/quota-middleware.js

@@ -25,14 +25,20 @@ export function createQuotaMiddleware(options) {
         return next();
     };
 }
+/** Same value as `@venturekit/runtime`'s `VENTURE_ERROR_MARKER` — the handler's error boundary renders marked errors. */
+const VENTURE_ERROR_MARKER = Symbol.for('venturekit.error');
 /**
- * Quota exceeded error
+ * Quota exceeded error. Rendered by the runtime's error boundary as a 403
+ * `QUOTA_EXCEEDED` with `{ quotaKey, current, limit }` details.
  */
 export class QuotaExceededError extends Error {
     tenantId;
     quotaKey;
     current;
     limit;
+    [VENTURE_ERROR_MARKER] = true;
+    code = 'QUOTA_EXCEEDED';
+    statusCode = 403;
     constructor(tenantId, quotaKey, current, limit) {
         super(`Quota exceeded for ${quotaKey}: ${current}/${limit}`);
         this.tenantId = tenantId;
@@ -41,6 +47,9 @@ export class QuotaExceededError extends Error {
         this.limit = limit;
         this.name = 'QuotaExceededError';
     }
+    get details() {
+        return { quotaKey: this.quotaKey, current: this.current, limit: this.limit };
+    }
 }
 /**
  * Check multiple quotas at once

package/dist/middleware/quota-middleware.js.map

@@ -1 +1 @@
-{"version":3,"file":"quota-middleware.js","sourceRoot":"","sources":["../../src/middleware/quota-middleware.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAwB7D;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAA+B;IACnE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,eAAe,EAAE,GAAG,OAAO,CAAC;IAE1D,OAAO,KAAK,UAAU,eAAe,CAAI,IAAsB;QAC7D,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,CAAC;QAExC,sBAAsB;QACtB,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;QAED,sBAAsB;QACtB,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,EAAE,EAAE,QAAkB,CAAC,CAAC;QAEpE,IAAI,OAAO,IAAI,KAAK,EAAE,CAAC;YACrB,eAAe,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;YAC7C,MAAM,IAAI,kBAAkB,CAAC,MAAM,CAAC,EAAE,EAAE,QAAkB,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;QAC9E,CAAC;QAED,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAElC;IACA;IACA;IACA;IAJT,YACS,QAAgB,EAChB,QAAgB,EAChB,OAAe,EACf,KAAa;QAEpB,KAAK,CAAC,sBAAsB,QAAQ,KAAK,OAAO,IAAI,KAAK,EAAE,CAAC,CAAC;QALtD,aAAQ,GAAR,QAAQ,CAAQ;QAChB,aAAQ,GAAR,QAAQ,CAAQ;QAChB,YAAO,GAAP,OAAO,CAAQ;QACf,UAAK,GAAL,KAAK,CAAQ;QAGpB,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,QAAgB,EAChB,MAAoB,EACpB,UAAsB;IAEtB,MAAM,OAAO,GAAG,EAAE,CAAC;IAEnB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAElC,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACpD,OAAO,CAAC,IAAI,CAAC;YACX,GAAG;YACH,OAAO;YACP,KAAK;YACL,QAAQ,EAAE,OAAO,IAAI,KAAK;SAC3B,CAAC,CAAC;IACL,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}
+{"version":3,"file":"quota-middleware.js","sourceRoot":"","sources":["../../src/middleware/quota-middleware.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAwB7D;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAA+B;IACnE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,eAAe,EAAE,GAAG,OAAO,CAAC;IAE1D,OAAO,KAAK,UAAU,eAAe,CAAI,IAAsB;QAC7D,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,CAAC;QAExC,sBAAsB;QACtB,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;QAED,sBAAsB;QACtB,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,EAAE,EAAE,QAAkB,CAAC,CAAC;QAEpE,IAAI,OAAO,IAAI,KAAK,EAAE,CAAC;YACrB,eAAe,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;YAC7C,MAAM,IAAI,kBAAkB,CAAC,MAAM,CAAC,EAAE,EAAE,QAAkB,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;QAC9E,CAAC;QAED,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC,CAAC;AACJ,CAAC;AAED,yHAAyH;AACzH,MAAM,oBAAoB,GAAkB,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;AAE3E;;;GAGG;AACH,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAKlC;IACA;IACA;IACA;IAPA,CAAC,oBAAoB,CAAC,GAAG,IAAa,CAAC;IACvC,IAAI,GAAG,gBAAgB,CAAC;IACxB,UAAU,GAAG,GAAG,CAAC;IAC1B,YACS,QAAgB,EAChB,QAAgB,EAChB,OAAe,EACf,KAAa;QAEpB,KAAK,CAAC,sBAAsB,QAAQ,KAAK,OAAO,IAAI,KAAK,EAAE,CAAC,CAAC;QALtD,aAAQ,GAAR,QAAQ,CAAQ;QAChB,aAAQ,GAAR,QAAQ,CAAQ;QAChB,YAAO,GAAP,OAAO,CAAQ;QACf,UAAK,GAAL,KAAK,CAAQ;QAGpB,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;IAED,IAAI,OAAO;QACT,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;IAC/E,CAAC;CACF;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,QAAgB,EAChB,MAAoB,EACpB,UAAsB;IAEtB,MAAM,OAAO,GAAG,EAAE,CAAC;IAEnB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAElC,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACpD,OAAO,CAAC,IAAI,CAAC;YACX,GAAG;YACH,OAAO;YACP,KAAK;YACL,QAAQ,EAAE,OAAO,IAAI,KAAK;SAC3B,CAAC,CAAC;IACL,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/middleware/rls-middleware.d.ts

@@ -1,12 +1,22 @@
 import type { Middleware, RequestContext } from '@venturekit/runtime';
+/** May this request see the resolved tenant's rows? */
+export type TenantRlsAccessCheck = (ctx: RequestContext) => boolean | Promise<boolean>;
+export interface TenantRlsOptions {
+    /**
+     * REQUIRED — who enters the resolved tenant's RLS scope: a per-request
+     * {@link TenantRlsAccessCheck}, or `'resolved-tenant'` for every request
+     * resolved to the tenant (see the module docs before choosing it).
+     */
+    access: TenantRlsAccessCheck | 'resolved-tenant';
+}
 /**
  * Build the middleware that opens a `@venturekit/data` tenant scope for
  * the resolved `ctx.tenant`, so Postgres RLS policies apply to every
- * query in the request.
+ * query in the request — for requests the `access` decision admits.
  *
- * Takes no options: the scope is derived entirely from `ctx.tenant`,
- * and "no tenant" is not configurable because inheriting a stale scope
- * is never the safe choice.
+ * "No tenant" is not configurable: inheriting a stale scope from a pooled
+ * connection is never the safe choice, so such requests always run
+ * through `runWithoutTenant()`.
  *
  * @example
  * ```ts
@@ -17,12 +27,27 @@ import type { Middleware, RequestContext } from '@venturekit/runtime';
  * } from '@venturekit-pro/tenancy';
  *
  * const tenancy = createRuntimeTenantMiddleware({ resolver });
- * const rls = createTenantRlsMiddleware();
+ * const rls = createTenantRlsMiddleware({
+ *   // Members see their tenant; everyone else sees none of its rows.
+ *   access: async (ctx) => ctx.user !== null && (await isMember(ctx.tenant!.id, ctx.user.id)),
+ * });
  *
  * export const main = handler(async () => listPosts(), {
  *   middleware: [tenancy, rls],
  * });
  * ```
  */
-export declare function createTenantRlsMiddleware(): Middleware<RequestContext>;
+export declare function createTenantRlsMiddleware(options: TenantRlsOptions): Middleware<RequestContext>;
+/**
+ * Run the whole request as the PLATFORM (`@venturekit/data`
+ * `runAsPlatform`) — for entry points that are cross-tenant by design:
+ * an operator console, sign-in that looks the account up in every tenant,
+ * onboarding that creates a tenant, an account switcher.
+ *
+ * Deployed functions connect as a least-privilege login that row-level
+ * security filters everywhere, so such routes must say they need more —
+ * and saying it in the route's handler factory keeps the list reviewable.
+ * A `runWithTenant` opened inside still narrows to that tenant.
+ */
+export declare function createPlatformScopeMiddleware(): Middleware<RequestContext>;
 //# sourceMappingURL=rls-middleware.d.ts.map

package/dist/middleware/rls-middleware.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rls-middleware.d.ts","sourceRoot":"","sources":["../../src/middleware/rls-middleware.ts"],"names":[],"mappings":"AAoDA,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAEtE;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,yBAAyB,IAAI,UAAU,CAAC,cAAc,CAAC,CAStE"}
+{"version":3,"file":"rls-middleware.d.ts","sourceRoot":"","sources":["../../src/middleware/rls-middleware.ts"],"names":[],"mappings":"AAoEA,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAEtE,uDAAuD;AACvD,MAAM,MAAM,oBAAoB,GAAG,CAAC,GAAG,EAAE,cAAc,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;AAEvF,MAAM,WAAW,gBAAgB;IAC/B;;;;OAIG;IACH,MAAM,EAAE,oBAAoB,GAAG,iBAAiB,CAAC;CAClD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,gBAAgB,GAAG,UAAU,CAAC,cAAc,CAAC,CAmB/F;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,6BAA6B,IAAI,UAAU,CAAC,cAAc,CAAC,CAK1E"}

package/dist/middleware/rls-middleware.js

@@ -44,20 +44,36 @@
  * sweeps over every tenant) belongs on a database role that bypasses
  * RLS, not on an ambient scope left over from another request.
  *
+ * # Who enters the scope is a decision, not a side effect of resolution
+ *
+ * Resolution only says which tenant a request NAMES — by host, but also
+ * by a header, a query parameter or a path segment the client chose.
+ * Opening that tenant's scope for every request would let any caller read
+ * the tenant-scoped rows of any tenant through any route that does not
+ * check membership itself. So the middleware requires an explicit
+ * {@link TenantRlsOptions.access} decision:
+ *
+ *   - a predicate — evaluated INSIDE the tenant's scope (so it can read the
+ *     caller's membership row); a refused request runs with no tenant scope
+ *     at all, i.e. sees none of the tenant's rows;
+ *   - `'resolved-tenant'` — every request the resolver attributes to the
+ *     tenant enters. Choose it only when the app authorizes each route on
+ *     its own (membership-derived scopes), and say so where you choose it.
+ *
  * Like `tenant-user-scopes-middleware.ts`, this module imports VALUES
  * from an optional peer (`@venturekit/data`). That is deliberate and
  * consistent: an RLS bridge is meaningless unless the app's data layer
  * is the one publishing the GUC.
  */
-import { runWithTenant, runWithoutTenant } from '@venturekit/data';
+import { runAsPlatform, runWithTenant, runWithoutTenant } from '@venturekit/data';
 /**
  * Build the middleware that opens a `@venturekit/data` tenant scope for
  * the resolved `ctx.tenant`, so Postgres RLS policies apply to every
- * query in the request.
+ * query in the request — for requests the `access` decision admits.
  *
- * Takes no options: the scope is derived entirely from `ctx.tenant`,
- * and "no tenant" is not configurable because inheriting a stale scope
- * is never the safe choice.
+ * "No tenant" is not configurable: inheriting a stale scope from a pooled
+ * connection is never the safe choice, so such requests always run
+ * through `runWithoutTenant()`.
  *
  * @example
  * ```ts
@@ -68,22 +84,51 @@ import { runWithTenant, runWithoutTenant } from '@venturekit/data';
  * } from '@venturekit-pro/tenancy';
  *
  * const tenancy = createRuntimeTenantMiddleware({ resolver });
- * const rls = createTenantRlsMiddleware();
+ * const rls = createTenantRlsMiddleware({
+ *   // Members see their tenant; everyone else sees none of its rows.
+ *   access: async (ctx) => ctx.user !== null && (await isMember(ctx.tenant!.id, ctx.user.id)),
+ * });
  *
  * export const main = handler(async () => listPosts(), {
  *   middleware: [tenancy, rls],
  * });
  * ```
  */
-export function createTenantRlsMiddleware() {
+export function createTenantRlsMiddleware(options) {
+    // Enforced at runtime too: a JavaScript caller (or a stale call site)
+    // must not fall back to trusting whatever tenant the request named.
+    if (!options || (options.access !== 'resolved-tenant' && typeof options.access !== 'function')) {
+        throw new Error("[venturekit-pro/tenancy] createTenantRlsMiddleware requires an explicit `access` decision: a predicate, or 'resolved-tenant'");
+    }
+    const { access } = options;
     return {
         name: 'tenant-rls',
         fn: async (ctx, next) => {
             const tenantId = ctx.tenant?.id;
             if (!tenantId)
                 return runWithoutTenant(next);
-            return runWithTenant(tenantId, next);
+            if (access === 'resolved-tenant')
+                return runWithTenant(tenantId, next);
+            const admitted = await runWithTenant(tenantId, async () => access(ctx));
+            return admitted ? runWithTenant(tenantId, next) : runWithoutTenant(next);
         },
     };
 }
+/**
+ * Run the whole request as the PLATFORM (`@venturekit/data`
+ * `runAsPlatform`) — for entry points that are cross-tenant by design:
+ * an operator console, sign-in that looks the account up in every tenant,
+ * onboarding that creates a tenant, an account switcher.
+ *
+ * Deployed functions connect as a least-privilege login that row-level
+ * security filters everywhere, so such routes must say they need more —
+ * and saying it in the route's handler factory keeps the list reviewable.
+ * A `runWithTenant` opened inside still narrows to that tenant.
+ */
+export function createPlatformScopeMiddleware() {
+    return {
+        name: 'platform-scope',
+        fn: async (_ctx, next) => runAsPlatform(next),
+    };
+}
 //# sourceMappingURL=rls-middleware.js.map

package/dist/middleware/rls-middleware.js.map

@@ -1 +1 @@
-{"version":3,"file":"rls-middleware.js","sourceRoot":"","sources":["../../src/middleware/rls-middleware.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkDG;AACH,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAGnE;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,UAAU,yBAAyB;IACvC,OAAO;QACL,IAAI,EAAE,YAAY;QAClB,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YACtB,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;YAChC,IAAI,CAAC,QAAQ;gBAAE,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC;YAC7C,OAAO,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACvC,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"rls-middleware.js","sourceRoot":"","sources":["../../src/middleware/rls-middleware.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkEG;AACH,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAelF;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,UAAU,yBAAyB,CAAC,OAAyB;IACjE,sEAAsE;IACtE,oEAAoE;IACpE,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,iBAAiB,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,CAAC,EAAE,CAAC;QAC/F,MAAM,IAAI,KAAK,CACb,8HAA8H,CAC/H,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IAC3B,OAAO;QACL,IAAI,EAAE,YAAY;QAClB,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YACtB,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;YAChC,IAAI,CAAC,QAAQ;gBAAE,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC;YAC7C,IAAI,MAAM,KAAK,iBAAiB;gBAAE,OAAO,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YACvE,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YACxE,OAAO,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;QAC3E,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,6BAA6B;IAC3C,OAAO;QACL,IAAI,EAAE,gBAAgB;QACtB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC;KAC9C,CAAC;AACJ,CAAC"}

package/dist/middleware/tenant-middleware.d.ts

@@ -26,26 +26,45 @@ export interface TenantMiddlewareOptions {
  * Create tenant middleware
  */
 export declare function createTenantMiddleware(options: TenantMiddlewareOptions): <T>(request: TenantRequest, next: () => Promise<T>) => Promise<T>;
+/** Same value as `@venturekit/runtime`'s `VENTURE_ERROR_MARKER` — the handler's error boundary renders marked errors. */
+declare const VENTURE_ERROR_MARKER: unique symbol;
 /**
- * Tenant not found error
+ * Base of the tenant-resolution errors. Rendered by `@venturekit/runtime`'s
+ * error boundary as `{ error: { code, message } }` with `statusCode`,
+ * instead of an opaque 500.
  */
-export declare class TenantNotFoundError extends Error {
+declare abstract class TenantResolutionError extends Error {
+    readonly [VENTURE_ERROR_MARKER]: true;
+    abstract readonly code: string;
+    abstract readonly statusCode: number;
+}
+/**
+ * Tenant not found error (404)
+ */
+export declare class TenantNotFoundError extends TenantResolutionError {
     tenantId: string;
+    readonly code = "TENANT_NOT_FOUND";
+    readonly statusCode = 404;
     constructor(tenantId: string);
 }
 /**
- * Tenant suspended error
+ * Tenant suspended error (403)
  */
-export declare class TenantSuspendedError extends Error {
+export declare class TenantSuspendedError extends TenantResolutionError {
     tenantId: string;
+    readonly code = "TENANT_SUSPENDED";
+    readonly statusCode = 403;
     constructor(tenantId: string);
 }
 /**
- * Tenant inactive error
+ * Tenant inactive error (403)
  */
-export declare class TenantInactiveError extends Error {
+export declare class TenantInactiveError extends TenantResolutionError {
     tenantId: string;
     status: string;
+    readonly code = "TENANT_INACTIVE";
+    readonly statusCode = 403;
     constructor(tenantId: string, status: string);
 }
+export {};
 //# sourceMappingURL=tenant-middleware.d.ts.map

package/dist/middleware/tenant-middleware.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tenant-middleware.d.ts","sourceRoot":"","sources":["../../src/middleware/tenant-middleware.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AACjE,OAAO,EAAiB,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAGtE;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;AAExE;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,uBAAuB;IACvB,MAAM,EAAE,eAAe,CAAC;IAExB,sCAAsC;IACtC,YAAY,EAAE,YAAY,CAAC;IAE3B,mCAAmC;IACnC,gBAAgB,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC;IAE9C,sCAAsC;IACtC,iBAAiB,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9C;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,uBAAuB,IAG9B,CAAC,EACtC,SAAS,aAAa,EACtB,MAAM,MAAM,OAAO,CAAC,CAAC,CAAC,KACrB,OAAO,CAAC,CAAC,CAAC,CA+Bd;AAED;;GAEG;AACH,qBAAa,mBAAoB,SAAQ,KAAK;IACzB,QAAQ,EAAE,MAAM;gBAAhB,QAAQ,EAAE,MAAM;CAIpC;AAED;;GAEG;AACH,qBAAa,oBAAqB,SAAQ,KAAK;IAC1B,QAAQ,EAAE,MAAM;gBAAhB,QAAQ,EAAE,MAAM;CAIpC;AAED;;GAEG;AACH,qBAAa,mBAAoB,SAAQ,KAAK;IACzB,QAAQ,EAAE,MAAM;IAAS,MAAM,EAAE,MAAM;gBAAvC,QAAQ,EAAE,MAAM,EAAS,MAAM,EAAE,MAAM;CAI3D"}
+{"version":3,"file":"tenant-middleware.d.ts","sourceRoot":"","sources":["../../src/middleware/tenant-middleware.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AACjE,OAAO,EAAiB,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAGtE;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;AAExE;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,uBAAuB;IACvB,MAAM,EAAE,eAAe,CAAC;IAExB,sCAAsC;IACtC,YAAY,EAAE,YAAY,CAAC;IAE3B,mCAAmC;IACnC,gBAAgB,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC;IAE9C,sCAAsC;IACtC,iBAAiB,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9C;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,uBAAuB,IAG9B,CAAC,EACtC,SAAS,aAAa,EACtB,MAAM,MAAM,OAAO,CAAC,CAAC,CAAC,KACrB,OAAO,CAAC,CAAC,CAAC,CA+Bd;AAED,yHAAyH;AACzH,QAAA,MAAM,oBAAoB,EAAE,OAAO,MAAuC,CAAC;AAE3E;;;;GAIG;AACH,uBAAe,qBAAsB,SAAQ,KAAK;IAChD,QAAQ,CAAC,CAAC,oBAAoB,CAAC,EAAG,IAAI,CAAU;IAChD,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CACtC;AAED;;GAEG;AACH,qBAAa,mBAAoB,SAAQ,qBAAqB;IAGzC,QAAQ,EAAE,MAAM;IAFnC,QAAQ,CAAC,IAAI,sBAAsB;IACnC,QAAQ,CAAC,UAAU,OAAO;gBACP,QAAQ,EAAE,MAAM;CAIpC;AAED;;GAEG;AACH,qBAAa,oBAAqB,SAAQ,qBAAqB;IAG1C,QAAQ,EAAE,MAAM;IAFnC,QAAQ,CAAC,IAAI,sBAAsB;IACnC,QAAQ,CAAC,UAAU,OAAO;gBACP,QAAQ,EAAE,MAAM;CAIpC;AAED;;GAEG;AACH,qBAAa,mBAAoB,SAAQ,qBAAqB;IAGzC,QAAQ,EAAE,MAAM;IAAS,MAAM,EAAE,MAAM;IAF1D,QAAQ,CAAC,IAAI,qBAAqB;IAClC,QAAQ,CAAC,UAAU,OAAO;gBACP,QAAQ,EAAE,MAAM,EAAS,MAAM,EAAE,MAAM;CAI3D"}

package/dist/middleware/tenant-middleware.js

@@ -36,11 +36,23 @@ export function createTenantMiddleware(options) {
         return withTenantContext(context, next);
     };
 }
+/** Same value as `@venturekit/runtime`'s `VENTURE_ERROR_MARKER` — the handler's error boundary renders marked errors. */
+const VENTURE_ERROR_MARKER = Symbol.for('venturekit.error');
 /**
- * Tenant not found error
+ * Base of the tenant-resolution errors. Rendered by `@venturekit/runtime`'s
+ * error boundary as `{ error: { code, message } }` with `statusCode`,
+ * instead of an opaque 500.
  */
-export class TenantNotFoundError extends Error {
+class TenantResolutionError extends Error {
+    [VENTURE_ERROR_MARKER] = true;
+}
+/**
+ * Tenant not found error (404)
+ */
+export class TenantNotFoundError extends TenantResolutionError {
     tenantId;
+    code = 'TENANT_NOT_FOUND';
+    statusCode = 404;
     constructor(tenantId) {
         super(`Tenant not found: ${tenantId}`);
         this.tenantId = tenantId;
@@ -48,10 +60,12 @@ export class TenantNotFoundError extends Error {
     }
 }
 /**
- * Tenant suspended error
+ * Tenant suspended error (403)
  */
-export class TenantSuspendedError extends Error {
+export class TenantSuspendedError extends TenantResolutionError {
     tenantId;
+    code = 'TENANT_SUSPENDED';
+    statusCode = 403;
     constructor(tenantId) {
         super(`Tenant suspended: ${tenantId}`);
         this.tenantId = tenantId;
@@ -59,11 +73,13 @@ export class TenantSuspendedError extends Error {
     }
 }
 /**
- * Tenant inactive error
+ * Tenant inactive error (403)
  */
-export class TenantInactiveError extends Error {
+export class TenantInactiveError extends TenantResolutionError {
     tenantId;
     status;
+    code = 'TENANT_INACTIVE';
+    statusCode = 403;
     constructor(tenantId, status) {
         super(`Tenant inactive (${status}): ${tenantId}`);
         this.tenantId = tenantId;

package/dist/middleware/tenant-middleware.js.map

@@ -1 +1 @@
-{"version":3,"file":"tenant-middleware.js","sourceRoot":"","sources":["../../src/middleware/tenant-middleware.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,aAAa,EAAiB,MAAM,wBAAwB,CAAC;AACtE,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAwBtF;;GAEG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAgC;IACrE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,GAAG,OAAO,CAAC;IAE9E,OAAO,KAAK,UAAU,gBAAgB,CACpC,OAAsB,EACtB,IAAsB;QAEtB,iCAAiC;QACjC,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAEtD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,+CAA+C;YAC/C,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;QAED,gBAAgB;QAChB,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC;QAE5C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,gBAAgB,EAAE,CAAC,QAAQ,CAAC,CAAC;YAC7B,MAAM,IAAI,mBAAmB,CAAC,QAAQ,CAAC,CAAC;QAC1C,CAAC;QAED,sBAAsB;QACtB,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YAClC,iBAAiB,EAAE,CAAC,MAAM,CAAC,CAAC;YAC5B,MAAM,IAAI,oBAAoB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC5C,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC/B,MAAM,IAAI,mBAAmB,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QAC1D,CAAC;QAED,iCAAiC;QACjC,MAAM,OAAO,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;QAC5C,OAAO,iBAAiB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC1C,CAAC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IACzB;IAAnB,YAAmB,QAAgB;QACjC,KAAK,CAAC,qBAAqB,QAAQ,EAAE,CAAC,CAAC;QADtB,aAAQ,GAAR,QAAQ,CAAQ;QAEjC,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAC1B;IAAnB,YAAmB,QAAgB;QACjC,KAAK,CAAC,qBAAqB,QAAQ,EAAE,CAAC,CAAC;QADtB,aAAQ,GAAR,QAAQ,CAAQ;QAEjC,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IACzB;IAAyB;IAA5C,YAAmB,QAAgB,EAAS,MAAc;QACxD,KAAK,CAAC,oBAAoB,MAAM,MAAM,QAAQ,EAAE,CAAC,CAAC;QADjC,aAAQ,GAAR,QAAQ,CAAQ;QAAS,WAAM,GAAN,MAAM,CAAQ;QAExD,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF"}
+{"version":3,"file":"tenant-middleware.js","sourceRoot":"","sources":["../../src/middleware/tenant-middleware.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,aAAa,EAAiB,MAAM,wBAAwB,CAAC;AACtE,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAwBtF;;GAEG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAgC;IACrE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,GAAG,OAAO,CAAC;IAE9E,OAAO,KAAK,UAAU,gBAAgB,CACpC,OAAsB,EACtB,IAAsB;QAEtB,iCAAiC;QACjC,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAEtD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,+CAA+C;YAC/C,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;QAED,gBAAgB;QAChB,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC;QAE5C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,gBAAgB,EAAE,CAAC,QAAQ,CAAC,CAAC;YAC7B,MAAM,IAAI,mBAAmB,CAAC,QAAQ,CAAC,CAAC;QAC1C,CAAC;QAED,sBAAsB;QACtB,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YAClC,iBAAiB,EAAE,CAAC,MAAM,CAAC,CAAC;YAC5B,MAAM,IAAI,oBAAoB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC5C,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC/B,MAAM,IAAI,mBAAmB,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QAC1D,CAAC;QAED,iCAAiC;QACjC,MAAM,OAAO,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;QAC5C,OAAO,iBAAiB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC1C,CAAC,CAAC;AACJ,CAAC;AAED,yHAAyH;AACzH,MAAM,oBAAoB,GAAkB,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;AAE3E;;;;GAIG;AACH,MAAe,qBAAsB,SAAQ,KAAK;IACvC,CAAC,oBAAoB,CAAC,GAAG,IAAa,CAAC;CAGjD;AAED;;GAEG;AACH,MAAM,OAAO,mBAAoB,SAAQ,qBAAqB;IAGzC;IAFV,IAAI,GAAG,kBAAkB,CAAC;IAC1B,UAAU,GAAG,GAAG,CAAC;IAC1B,YAAmB,QAAgB;QACjC,KAAK,CAAC,qBAAqB,QAAQ,EAAE,CAAC,CAAC;QADtB,aAAQ,GAAR,QAAQ,CAAQ;QAEjC,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,oBAAqB,SAAQ,qBAAqB;IAG1C;IAFV,IAAI,GAAG,kBAAkB,CAAC;IAC1B,UAAU,GAAG,GAAG,CAAC;IAC1B,YAAmB,QAAgB;QACjC,KAAK,CAAC,qBAAqB,QAAQ,EAAE,CAAC,CAAC;QADtB,aAAQ,GAAR,QAAQ,CAAQ;QAEjC,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,mBAAoB,SAAQ,qBAAqB;IAGzC;IAAyB;IAFnC,IAAI,GAAG,iBAAiB,CAAC;IACzB,UAAU,GAAG,GAAG,CAAC;IAC1B,YAAmB,QAAgB,EAAS,MAAc;QACxD,KAAK,CAAC,oBAAoB,MAAM,MAAM,QAAQ,EAAE,CAAC,CAAC;QADjC,aAAQ,GAAR,QAAQ,CAAQ;QAAS,WAAM,GAAN,MAAM,CAAQ;QAExD,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@venturekit-pro/tenancy",
-  "version": "0.0.50",
+  "version": "0.0.51",
   "description": "Multi-tenant utilities for VentureKit",
   "type": "module",
   "main": "./dist/index.js",
@@ -30,11 +30,11 @@
     }
   },
   "dependencies": {
-    "@venturekit/core": "0.0.50"
+    "@venturekit/core": "0.0.51"
   },
   "peerDependencies": {
-    "@venturekit/data": "0.0.50",
-    "@venturekit/runtime": "0.0.50"
+    "@venturekit/data": "0.0.51",
+    "@venturekit/runtime": "0.0.51"
   },
   "peerDependenciesMeta": {
     "@venturekit/data": {
@@ -46,8 +46,8 @@
   },
   "devDependencies": {
     "@types/node": "^26.5.1",
-    "@venturekit/data": "0.0.50",
-    "@venturekit/runtime": "0.0.50",
+    "@venturekit/data": "0.0.51",
+    "@venturekit/runtime": "0.0.51",
     "typescript": "^5.3.0"
   },
   "scripts": {