@venturekit/runtime 0.0.0-dev.20260312005731 → 0.0.0-dev.20260329093916

package/README.md

@@ -74,7 +74,7 @@ interface RequestContext {
   sourceIp: string;
   userAgent: string;
   user: UserContext | null;       // Populated for authenticated requests
-  tenant: TenantContext | null;   // Populated when @venturekit/tenancy is enabled
+  tenant: TenantContext | null;   // Populated when @venturekit-pro/tenancy is enabled
   locale: string;
   queryParams?: Record<string, string | undefined>;
   tx?: unknown;                   // Database transaction (transactional handlers)

package/dist/config/env.d.ts

@@ -0,0 +1,62 @@
+/**
+ * VentureKit Environment Variables
+ *
+ * Runtime utility for type-safe access to environment variables.
+ * Provides get/require with defaults, coercion, and validation.
+ */
+/**
+ * Options for getting an environment variable
+ */
+export interface EnvGetOptions<T = string> {
+    /** Default value if not set */
+    default?: T;
+    /** Coerce to type */
+    as?: 'string' | 'number' | 'boolean' | 'json';
+}
+/**
+ * Environment variable client
+ */
+export interface EnvClient {
+    /** Get an env var. Returns undefined if not set (unless default provided). */
+    get(name: string): string | undefined;
+    get(name: string, defaultValue: string): string;
+    /** Get an env var as a number */
+    getNumber(name: string, defaultValue?: number): number | undefined;
+    /** Get an env var as a boolean (truthy: "true", "1", "yes") */
+    getBool(name: string, defaultValue?: boolean): boolean;
+    /** Get and parse as JSON */
+    getJson<T = unknown>(name: string): T | undefined;
+    /** Get env var, throw if missing */
+    require(name: string): string;
+    /** Get env var as number, throw if missing */
+    requireNumber(name: string): number;
+    /** Get and parse as JSON, throw if missing */
+    requireJson<T = unknown>(name: string): T;
+    /** Check if an env var is set */
+    has(name: string): boolean;
+    /** Get the current stage (from VENTURE_STAGE) */
+    stage(): string;
+    /** Check if running in production */
+    isProd(): boolean;
+    /** Check if running in development */
+    isDev(): boolean;
+}
+/**
+ * Create an environment variable client.
+ *
+ * @param source — env source (defaults to process.env). Override for testing.
+ *
+ * @example
+ * ```typescript
+ * const env = createEnvClient();
+ * const port = env.getNumber('PORT', 3000);
+ * const dbUrl = env.require('DATABASE_URL');
+ * const debug = env.getBool('DEBUG', false);
+ * ```
+ */
+export declare function createEnvClient(source?: Record<string, string | undefined>): EnvClient;
+/**
+ * Default env client instance (uses process.env)
+ */
+export declare const env: EnvClient;
+//# sourceMappingURL=env.d.ts.map

package/dist/config/env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../src/config/env.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;GAEG;AACH,MAAM,WAAW,aAAa,CAAC,CAAC,GAAG,MAAM;IACvC,+BAA+B;IAC/B,OAAO,CAAC,EAAE,CAAC,CAAC;IACZ,qBAAqB;IACrB,EAAE,CAAC,EAAE,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,MAAM,CAAC;CAC/C;AAED;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB,8EAA8E;IAC9E,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IACtC,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,CAAC;IAChD,iCAAiC;IACjC,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IACnE,+DAA+D;IAC/D,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC;IACvD,4BAA4B;IAC5B,OAAO,CAAC,CAAC,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,CAAC,GAAG,SAAS,CAAC;IAClD,oCAAoC;IACpC,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IAC9B,8CAA8C;IAC9C,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IACpC,8CAA8C;IAC9C,WAAW,CAAC,CAAC,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,CAAC,CAAC;IAC1C,iCAAiC;IACjC,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAC3B,iDAAiD;IACjD,KAAK,IAAI,MAAM,CAAC;IAChB,qCAAqC;IACrC,MAAM,IAAI,OAAO,CAAC;IAClB,sCAAsC;IACtC,KAAK,IAAI,OAAO,CAAC;CAClB;AAID;;;;;;;;;;;;GAYG;AACH,wBAAgB,eAAe,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAAG,SAAS,CAgFtF;AAED;;GAEG;AACH,eAAO,MAAM,GAAG,WAAoB,CAAC"}

package/dist/config/env.js

@@ -0,0 +1,98 @@
+/**
+ * VentureKit Environment Variables
+ *
+ * Runtime utility for type-safe access to environment variables.
+ * Provides get/require with defaults, coercion, and validation.
+ */
+const TRUTHY = new Set(['true', '1', 'yes', 'on']);
+/**
+ * Create an environment variable client.
+ *
+ * @param source — env source (defaults to process.env). Override for testing.
+ *
+ * @example
+ * ```typescript
+ * const env = createEnvClient();
+ * const port = env.getNumber('PORT', 3000);
+ * const dbUrl = env.require('DATABASE_URL');
+ * const debug = env.getBool('DEBUG', false);
+ * ```
+ */
+export function createEnvClient(source) {
+    const src = source ?? process.env;
+    function get(name, defaultValue) {
+        return src[name] ?? defaultValue;
+    }
+    function getNumber(name, defaultValue) {
+        const raw = src[name];
+        if (raw === undefined || raw === '')
+            return defaultValue;
+        const num = Number(raw);
+        if (Number.isNaN(num))
+            return defaultValue;
+        return num;
+    }
+    function getBool(name, defaultValue = false) {
+        const raw = src[name];
+        if (raw === undefined || raw === '')
+            return defaultValue;
+        return TRUTHY.has(raw.toLowerCase());
+    }
+    function getJson(name) {
+        const raw = src[name];
+        if (raw === undefined || raw === '')
+            return undefined;
+        return JSON.parse(raw);
+    }
+    function require(name) {
+        const value = src[name];
+        if (value === undefined || value === '') {
+            throw new Error(`Required environment variable not set: ${name}`);
+        }
+        return value;
+    }
+    function requireNumber(name) {
+        const raw = require(name);
+        const num = Number(raw);
+        if (Number.isNaN(num)) {
+            throw new Error(`Environment variable ${name} is not a valid number: ${raw}`);
+        }
+        return num;
+    }
+    function requireJson(name) {
+        const raw = require(name);
+        return JSON.parse(raw);
+    }
+    function has(name) {
+        return src[name] !== undefined && src[name] !== '';
+    }
+    function stage() {
+        return src['VENTURE_STAGE'] || 'dev';
+    }
+    function isProd() {
+        const s = stage();
+        return s === 'prod' || s === 'production';
+    }
+    function isDev() {
+        const s = stage();
+        return s === 'dev' || s === 'development';
+    }
+    return {
+        get: get,
+        getNumber,
+        getBool,
+        getJson,
+        require,
+        requireNumber,
+        requireJson,
+        has,
+        stage,
+        isProd,
+        isDev,
+    };
+}
+/**
+ * Default env client instance (uses process.env)
+ */
+export const env = createEnvClient();
+//# sourceMappingURL=env.js.map

package/dist/config/env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../../src/config/env.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAyCH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;AAEnD;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,eAAe,CAAC,MAA2C;IACzE,MAAM,GAAG,GAAG,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC;IAElC,SAAS,GAAG,CAAC,IAAY,EAAE,YAAqB;QAC9C,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,YAAY,CAAC;IACnC,CAAC;IAED,SAAS,SAAS,CAAC,IAAY,EAAE,YAAqB;QACpD,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;QACtB,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE;YAAE,OAAO,YAAY,CAAC;QACzD,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QACxB,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC;YAAE,OAAO,YAAY,CAAC;QAC3C,OAAO,GAAG,CAAC;IACb,CAAC;IAED,SAAS,OAAO,CAAC,IAAY,EAAE,eAAwB,KAAK;QAC1D,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;QACtB,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE;YAAE,OAAO,YAAY,CAAC;QACzD,OAAO,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;IACvC,CAAC;IAED,SAAS,OAAO,CAAc,IAAY;QACxC,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;QACtB,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE;YAAE,OAAO,SAAS,CAAC;QACtD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAM,CAAC;IAC9B,CAAC;IAED,SAAS,OAAO,CAAC,IAAY;QAC3B,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;QACxB,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CAAC,0CAA0C,IAAI,EAAE,CAAC,CAAC;QACpE,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,SAAS,aAAa,CAAC,IAAY;QACjC,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1B,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QACxB,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,wBAAwB,IAAI,2BAA2B,GAAG,EAAE,CAAC,CAAC;QAChF,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,SAAS,WAAW,CAAc,IAAY;QAC5C,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1B,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAM,CAAC;IAC9B,CAAC;IAED,SAAS,GAAG,CAAC,IAAY;QACvB,OAAO,GAAG,CAAC,IAAI,CAAC,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;IACrD,CAAC;IAED,SAAS,KAAK;QACZ,OAAO,GAAG,CAAC,eAAe,CAAC,IAAI,KAAK,CAAC;IACvC,CAAC;IAED,SAAS,MAAM;QACb,MAAM,CAAC,GAAG,KAAK,EAAE,CAAC;QAClB,OAAO,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,YAAY,CAAC;IAC5C,CAAC;IAED,SAAS,KAAK;QACZ,MAAM,CAAC,GAAG,KAAK,EAAE,CAAC;QAClB,OAAO,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,aAAa,CAAC;IAC5C,CAAC;IAED,OAAO;QACL,GAAG,EAAE,GAAuB;QAC5B,SAAS;QACT,OAAO;QACP,OAAO;QACP,OAAO;QACP,aAAa;QACb,WAAW;QACX,GAAG;QACH,KAAK;QACL,MAAM;QACN,KAAK;KACN,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,GAAG,GAAG,eAAe,EAAE,CAAC"}

package/dist/config/secrets.d.ts

@@ -0,0 +1,67 @@
+/**
+ * VentureKit Secrets Manager
+ *
+ * Runtime utility for accessing secrets from AWS SSM Parameter Store
+ * and AWS Secrets Manager. Includes caching to avoid repeated API calls.
+ *
+ * AWS SDK clients are lazily imported so the module loads without
+ * optional peer dependencies installed.
+ */
+/**
+ * Secret store type
+ */
+export type SecretStore = 'ssm' | 'secretsmanager';
+/**
+ * Secret provider interface — abstracts the underlying AWS SDK calls.
+ * Consumers can provide a custom implementation for testing.
+ */
+export interface SecretProvider {
+    getSecret(name: string): Promise<string | undefined>;
+}
+/**
+ * Options for creating a secrets client
+ */
+export interface SecretsClientOptions {
+    /** Default store to use when not specified per-secret */
+    defaultStore?: SecretStore;
+    /** Cache TTL in milliseconds (default: 300_000 = 5 minutes) */
+    cacheTtlMs?: number;
+    /** Custom provider (overrides AWS SDK calls — useful for testing) */
+    provider?: SecretProvider;
+    /** AWS region (default: process.env.AWS_REGION) */
+    region?: string;
+}
+/**
+ * Secrets client for fetching secrets at runtime
+ */
+export interface SecretsClient {
+    /** Get a secret value by name. Returns undefined if not found. */
+    get(name: string): Promise<string | undefined>;
+    /** Get a secret value, throw if not found */
+    require(name: string): Promise<string>;
+    /** Get a secret value parsed as JSON */
+    getJson<T = unknown>(name: string): Promise<T | undefined>;
+    /** Get a secret value parsed as JSON, throw if not found */
+    requireJson<T = unknown>(name: string): Promise<T>;
+    /** Clear the cache (or a single entry) */
+    invalidate(name?: string): void;
+}
+/**
+ * Create an in-memory secret provider (for testing / local dev)
+ */
+export declare function createMemorySecretProvider(initial?: Record<string, string>): SecretProvider & {
+    set(name: string, value: string): void;
+    delete(name: string): void;
+};
+/**
+ * Create a secrets client
+ *
+ * @example
+ * ```typescript
+ * const secrets = createSecretsClient({ defaultStore: 'ssm' });
+ * const dbUrl = await secrets.require('DATABASE_URL');
+ * const config = await secrets.requireJson<{ apiKey: string }>('APP_CONFIG');
+ * ```
+ */
+export declare function createSecretsClient(options?: SecretsClientOptions): SecretsClient;
+//# sourceMappingURL=secrets.d.ts.map

package/dist/config/secrets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.d.ts","sourceRoot":"","sources":["../../src/config/secrets.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH;;GAEG;AACH,MAAM,MAAM,WAAW,GAAG,KAAK,GAAG,gBAAgB,CAAC;AAEnD;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CACtD;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,yDAAyD;IACzD,YAAY,CAAC,EAAE,WAAW,CAAC;IAC3B,+DAA+D;IAC/D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,qEAAqE;IACrE,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,mDAAmD;IACnD,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAUD;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,kEAAkE;IAClE,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC/C,6CAA6C;IAC7C,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACvC,wCAAwC;IACxC,OAAO,CAAC,CAAC,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC;IAC3D,4DAA4D;IAC5D,WAAW,CAAC,CAAC,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACnD,0CAA0C;IAC1C,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AAoDD;;GAEG;AACH,wBAAgB,0BAA0B,CACxC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC/B,cAAc,GAAG;IAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAazF;AAED;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,GAAE,oBAAyB,GAAG,aAAa,CAyDrF"}

package/dist/config/secrets.js

@@ -0,0 +1,132 @@
+/**
+ * VentureKit Secrets Manager
+ *
+ * Runtime utility for accessing secrets from AWS SSM Parameter Store
+ * and AWS Secrets Manager. Includes caching to avoid repeated API calls.
+ *
+ * AWS SDK clients are lazily imported so the module loads without
+ * optional peer dependencies installed.
+ */
+/**
+ * Create an SSM Parameter Store provider (lazy AWS SDK import)
+ */
+function createSsmProvider(region) {
+    let client = null;
+    return {
+        async getSecret(name) {
+            if (!client) {
+                const ssm = await import('@aws-sdk/client-ssm');
+                client = new ssm.SSMClient({ region: region || process.env.AWS_REGION });
+            }
+            const { SSMClient: _, GetParameterCommand } = await import('@aws-sdk/client-ssm');
+            try {
+                const result = await client.send(new GetParameterCommand({ Name: name, WithDecryption: true }));
+                return result.Parameter?.Value;
+            }
+            catch (err) {
+                if (err.name === 'ParameterNotFound')
+                    return undefined;
+                throw err;
+            }
+        },
+    };
+}
+/**
+ * Create a Secrets Manager provider (lazy AWS SDK import)
+ */
+function createSecretsManagerProvider(region) {
+    let client = null;
+    return {
+        async getSecret(name) {
+            if (!client) {
+                const sm = await import('@aws-sdk/client-secrets-manager');
+                client = new sm.SecretsManagerClient({ region: region || process.env.AWS_REGION });
+            }
+            const { SecretsManagerClient: _, GetSecretValueCommand } = await import('@aws-sdk/client-secrets-manager');
+            try {
+                const result = await client.send(new GetSecretValueCommand({ SecretId: name }));
+                return result.SecretString;
+            }
+            catch (err) {
+                if (err.name === 'ResourceNotFoundException')
+                    return undefined;
+                throw err;
+            }
+        },
+    };
+}
+/**
+ * Create an in-memory secret provider (for testing / local dev)
+ */
+export function createMemorySecretProvider(initial) {
+    const store = new Map(Object.entries(initial || {}));
+    return {
+        async getSecret(name) {
+            return store.get(name);
+        },
+        set(name, value) {
+            store.set(name, value);
+        },
+        delete(name) {
+            store.delete(name);
+        },
+    };
+}
+/**
+ * Create a secrets client
+ *
+ * @example
+ * ```typescript
+ * const secrets = createSecretsClient({ defaultStore: 'ssm' });
+ * const dbUrl = await secrets.require('DATABASE_URL');
+ * const config = await secrets.requireJson<{ apiKey: string }>('APP_CONFIG');
+ * ```
+ */
+export function createSecretsClient(options = {}) {
+    const { defaultStore = 'ssm', cacheTtlMs = 300_000, region, } = options;
+    const cache = new Map();
+    // Use custom provider or create default based on store type
+    const provider = options.provider
+        ?? (defaultStore === 'secretsmanager'
+            ? createSecretsManagerProvider(region)
+            : createSsmProvider(region));
+    async function get(name) {
+        // Check cache
+        const cached = cache.get(name);
+        if (cached && cached.expiresAt > Date.now()) {
+            return cached.value;
+        }
+        const value = await provider.getSecret(name);
+        if (value !== undefined) {
+            cache.set(name, { value, expiresAt: Date.now() + cacheTtlMs });
+        }
+        return value;
+    }
+    async function require(name) {
+        const value = await get(name);
+        if (value === undefined) {
+            throw new Error(`Secret not found: ${name}`);
+        }
+        return value;
+    }
+    async function getJson(name) {
+        const raw = await get(name);
+        if (raw === undefined)
+            return undefined;
+        return JSON.parse(raw);
+    }
+    async function requireJson(name) {
+        const raw = await require(name);
+        return JSON.parse(raw);
+    }
+    function invalidate(name) {
+        if (name) {
+            cache.delete(name);
+        }
+        else {
+            cache.clear();
+        }
+    }
+    return { get, require, getJson, requireJson, invalidate };
+}
+//# sourceMappingURL=secrets.js.map

package/dist/config/secrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.js","sourceRoot":"","sources":["../../src/config/secrets.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAqDH;;GAEG;AACH,SAAS,iBAAiB,CAAC,MAAe;IACxC,IAAI,MAAM,GAAQ,IAAI,CAAC;IACvB,OAAO;QACL,KAAK,CAAC,SAAS,CAAC,IAAY;YAC1B,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;gBAChD,MAAM,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;YAC3E,CAAC;YACD,MAAM,EAAE,SAAS,EAAE,CAAC,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;YAClF,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAC9B,IAAI,mBAAmB,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAC9D,CAAC;gBACF,OAAO,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC;YACjC,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAClB,IAAI,GAAG,CAAC,IAAI,KAAK,mBAAmB;oBAAE,OAAO,SAAS,CAAC;gBACvD,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,4BAA4B,CAAC,MAAe;IACnD,IAAI,MAAM,GAAQ,IAAI,CAAC;IACvB,OAAO;QACL,KAAK,CAAC,SAAS,CAAC,IAAY;YAC1B,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,iCAAiC,CAAC,CAAC;gBAC3D,MAAM,GAAG,IAAI,EAAE,CAAC,oBAAoB,CAAC,EAAE,MAAM,EAAE,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;YACrF,CAAC;YACD,MAAM,EAAE,oBAAoB,EAAE,CAAC,EAAE,qBAAqB,EAAE,GAAG,MAAM,MAAM,CAAC,iCAAiC,CAAC,CAAC;YAC3G,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAC9B,IAAI,qBAAqB,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAC9C,CAAC;gBACF,OAAO,MAAM,CAAC,YAAY,CAAC;YAC7B,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAClB,IAAI,GAAG,CAAC,IAAI,KAAK,2BAA2B;oBAAE,OAAO,SAAS,CAAC;gBAC/D,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,0BAA0B,CACxC,OAAgC;IAEhC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAiB,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC;IACrE,OAAO;QACL,KAAK,CAAC,SAAS,CAAC,IAAY;YAC1B,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACzB,CAAC;QACD,GAAG,CAAC,IAAY,EAAE,KAAa;YAC7B,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACzB,CAAC;QACD,MAAM,CAAC,IAAY;YACjB,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,mBAAmB,CAAC,UAAgC,EAAE;IACpE,MAAM,EACJ,YAAY,GAAG,KAAK,EACpB,UAAU,GAAG,OAAO,EACpB,MAAM,GACP,GAAG,OAAO,CAAC;IAEZ,MAAM,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAC;IAE5C,4DAA4D;IAC5D,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ;WAC5B,CAAC,YAAY,KAAK,gBAAgB;YACnC,CAAC,CAAC,4BAA4B,CAAC,MAAM,CAAC;YACtC,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC;IAEjC,KAAK,UAAU,GAAG,CAAC,IAAY;QAC7B,cAAc;QACd,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,MAAM,IAAI,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAC5C,OAAO,MAAM,CAAC,KAAK,CAAC;QACtB,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,EAAE,CAAC,CAAC;QACjE,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,UAAU,OAAO,CAAC,IAAY;QACjC,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,EAAE,CAAC,CAAC;QAC/C,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,UAAU,OAAO,CAAc,IAAY;QAC9C,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC;QAC5B,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QACxC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAM,CAAC;IAC9B,CAAC;IAED,KAAK,UAAU,WAAW,CAAc,IAAY;QAClD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;QAChC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAM,CAAC;IAC9B,CAAC;IAED,SAAS,UAAU,CAAC,IAAa;QAC/B,IAAI,IAAI,EAAE,CAAC;YACT,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,KAAK,EAAE,CAAC;QAChB,CAAC;IACH,CAAC;IAED,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC;AAC5D,CAAC"}

package/dist/handler/adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../src/handler/adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,MAAM,CAAC;AAC5D,OAAO,KAAK,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAe3F;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACrC,GAAG,EAAE,eAAe,EACpB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAClC,OAAO,CAAC,sBAAsB,CAAC,CAoDjC;AAED;;GAEG;AACH,wBAAgB,kBAAkB,IAAI,OAAO,CAgB5C;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,uBAAuB,EAC/B,GAAG,EAAE,cAAc,GAClB,IAAI,CAoCN;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAC1B,SAAS,EAAE,CAAC,KAAK,EAAE,sBAAsB,EAAE,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,uBAAuB,CAAC,GAC/F,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CAkBnG"}

package/dist/{adapter.js → handler/adapter.js}

@@ -1,4 +1,3 @@
-"use strict";
 /**
  * VentureKit Runtime Adapter
  *
@@ -9,45 +8,7 @@
  * - Local dev (Node.js HTTP server via `vk dev`)
  * - Production (AWS Lambda via API Gateway)
  */
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.httpToLambdaEvent = httpToLambdaEvent;
-exports.createLocalContext = createLocalContext;
-exports.lambdaResultToHttp = lambdaResultToHttp;
-exports.adaptHandler = adaptHandler;
-const crypto = __importStar(require("crypto"));
+import * as crypto from 'crypto';
 /**
  * Read the full body from an IncomingMessage as a string.
  */
@@ -65,7 +26,7 @@ function readBody(req) {
  * This allows existing VentureKit handler() functions to work locally
  * without modification.
  */
-async function httpToLambdaEvent(req, pathParams) {
+export async function httpToLambdaEvent(req, pathParams) {
     const url = new URL(req.url || '/', `http://${req.headers.host || 'localhost'}`);
     const body = await readBody(req);
     const method = (req.method || 'GET').toUpperCase();
@@ -119,7 +80,7 @@ async function httpToLambdaEvent(req, pathParams) {
 /**
  * Create a minimal Lambda Context for local dev.
  */
-function createLocalContext() {
+export function createLocalContext() {
     const requestId = crypto.randomUUID();
     return {
         callbackWaitsForEmptyEventLoop: true,
@@ -139,7 +100,7 @@ function createLocalContext() {
 /**
  * Write an APIGatewayProxyResultV2 to a Node.js ServerResponse.
  */
-function lambdaResultToHttp(result, res) {
+export function lambdaResultToHttp(result, res) {
     // Handle string result (API Gateway allows plain string responses)
     if (typeof result === 'string') {
         res.writeHead(200, { 'Content-Type': 'text/plain' });
@@ -179,7 +140,7 @@ function lambdaResultToHttp(result, res) {
  * @param handlerFn - A VentureKit handler (event, context) => result
  * @returns A function that takes (req, res, pathParams?) and serves HTTP
  */
-function adaptHandler(handlerFn) {
+export function adaptHandler(handlerFn) {
     return async (req, res, pathParams) => {
         try {
             const event = await httpToLambdaEvent(req, pathParams);

package/dist/handler/adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.js","sourceRoot":"","sources":["../../src/handler/adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AAEjC;;GAEG;AACH,SAAS,QAAQ,CAAC,GAAoB;IACpC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QACtD,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACtE,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,GAAoB,EACpB,UAAmC;IAEnC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,UAAU,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC,CAAC;IACjF,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IACnD,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IAEtC,6CAA6C;IAC7C,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QACvD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACvB,CAAC;aAAM,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAChC,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAED,oCAAoC;IACpC,MAAM,qBAAqB,GAA2B,EAAE,CAAC;IACzD,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACtC,qBAAqB,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,GAAG,MAAM,IAAI,GAAG,CAAC,QAAQ,EAAE;QACrC,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,cAAc,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,qBAAqB;QAC1D,OAAO;QACP,qBAAqB,EAAE,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS;QACxG,cAAc,EAAE,UAAU,IAAI,SAAS;QACvC,IAAI,EAAE,IAAI,IAAI,SAAS;QACvB,eAAe,EAAE,KAAK;QACtB,cAAc,EAAE;YACd,SAAS,EAAE,OAAO;YAClB,KAAK,EAAE,OAAO;YACd,UAAU,EAAE,WAAW;YACvB,YAAY,EAAE,WAAW;YACzB,IAAI,EAAE;gBACJ,MAAM;gBACN,IAAI,EAAE,GAAG,CAAC,QAAQ;gBAClB,QAAQ,EAAE,UAAU;gBACpB,QAAQ,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,aAAa,IAAI,WAAW,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;gBAC3E,SAAS,EAAE,OAAO,CAAC,YAAY,CAAC,IAAI,WAAW;aAChD;YACD,SAAS;YACT,QAAQ,EAAE,GAAG,MAAM,IAAI,GAAG,CAAC,QAAQ,EAAE;YACrC,KAAK,EAAE,OAAO;YACd,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC9B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB;QACD,cAAc,EAAE,SAAS;KACA,CAAC;AAC9B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB;IAChC,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IACtC,OAAO;QACL,8BAA8B,EAAE,IAAI;QACpC,YAAY,EAAE,WAAW;QACzB,eAAe,EAAE,SAAS;QAC1B,kBAAkB,EAAE,sDAAsD;QAC1E,eAAe,EAAE,KAAK;QACtB,YAAY,EAAE,SAAS;QACvB,YAAY,EAAE,uBAAuB;QACrC,aAAa,EAAE,SAAS,SAAS,EAAE;QACnC,wBAAwB,EAAE,GAAG,EAAE,CAAC,KAAK;QACrC,IAAI,EAAE,GAAG,EAAE,GAAE,CAAC;QACd,IAAI,EAAE,GAAG,EAAE,GAAE,CAAC;QACd,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC;KAClB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAA+B,EAC/B,GAAmB;IAEnB,mEAAmE;IACnE,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAC;QACrD,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,GAAG,CAAC;IAC5C,MAAM,OAAO,GAA2B,EAAE,CAAC;IAE3C,gBAAgB;IAChB,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1D,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YAC/B,CAAC;QACH,CAAC;IACH,CAAC;IAED,8BAA8B;IAC9B,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;QACzD,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;IAC/C,CAAC;IAED,GAAG,CAAC,SAAS,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAEnC,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAChB,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;YAC3B,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC9C,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAC1B,SAAgG;IAEhG,OAAO,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE;QACpC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;YACvD,MAAM,OAAO,GAAG,kBAAkB,EAAE,CAAC;YACrC,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;YAC/C,kBAAkB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,yBAAyB,EAAE,GAAG,CAAC,CAAC;YAC9C,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;gBACrB,KAAK,EAAE;oBACL,IAAI,EAAE,gBAAgB;oBACtB,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,uBAAuB;iBACtE;aACF,CAAC,CAAC,CAAC;QACN,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/{context.d.ts → handler/context.d.ts}

@@ -5,6 +5,19 @@
  * Extensible for future auth/tenancy modules.
  */
 import type { APIGatewayProxyEventV2 } from 'aws-lambda';
+/**
+ * Transaction handle for database operations.
+ * Mirrors the Transaction interface from @venturekit/data
+ * to avoid a hard dependency.
+ */
+export interface Transaction {
+    /** Execute a query within the transaction */
+    query<T = Record<string, unknown>[]>(sql: string, params?: unknown[]): Promise<T>;
+    /** Commit the transaction */
+    commit(): Promise<void>;
+    /** Roll back the transaction */
+    rollback(): Promise<void>;
+}
 /**
  * User information extracted from JWT claims
  */
@@ -20,7 +33,7 @@ export interface UserContext {
 }
 /**
  * Tenant context for multi-tenant applications
- * (Populated by @venturekit/tenancy when enabled)
+ * (Populated by @venturekit-pro/tenancy when enabled)
  */
 export interface TenantContext {
     /** Tenant ID */
@@ -30,10 +43,26 @@ export interface TenantContext {
     /** Tenant-specific metadata */
     metadata: Record<string, unknown>;
 }
+/**
+ * Base context shared by all handler types (HTTP routes, tasks, queues, crons).
+ * Middleware written against BaseContext works in both `handler()` and `taskHandler()`.
+ */
+export interface BaseContext {
+    /** Unique request / invocation ID */
+    requestId: string;
+    /** Invocation timestamp */
+    timestamp: Date;
+    /** Database transaction (populated when transactional: true) */
+    tx?: Transaction;
+    /** Infrastructure intent outputs */
+    intentOutputs?: Record<string, unknown>;
+    /** Trace ID for distributed tracing */
+    traceId?: string;
+}
 /**
  * Request context passed to all handlers
  */
-export interface RequestContext {
+export interface RequestContext extends BaseContext {
     /** Unique request ID for tracing */
     requestId: string;
     /** Request timestamp */
@@ -61,13 +90,25 @@ export interface RequestContext {
      * Use tx.query() to run all queries within the same transaction.
      * The transaction is auto-committed on success, rolled back on error.
      */
-    tx?: unknown;
+    tx?: Transaction;
     /**
      * Infrastructure intent outputs (populated after infra provisioning).
      * Provides access to provisioned resource endpoints, ARNs, etc.
      * Hydrated from the VENTURE_INTENT_OUTPUTS environment variable.
      */
     intentOutputs?: Record<string, unknown>;
+    /**
+     * Whether this request was invoked internally by another VentureKit function
+     * (via `invoke()`) rather than from an external client through API Gateway.
+     *
+     * Use this to skip rate limiting, auth, or other external-only logic.
+     */
+    isInternal: boolean;
+    /**
+     * The invoke ID if this is an internal invocation.
+     * Useful for tracing and debugging function-to-function calls.
+     */
+    invokeId?: string;
 }
 /**
  * Extract user context from JWT claims in API Gateway event

package/dist/handler/context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../src/handler/context.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAEzD;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,6CAA6C;IAC7C,KAAK,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,EACjC,GAAG,EAAE,MAAM,EACX,MAAM,CAAC,EAAE,OAAO,EAAE,GACjB,OAAO,CAAC,CAAC,CAAC,CAAC;IACd,6BAA6B;IAC7B,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACxB,gCAAgC;IAChC,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,4BAA4B;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,iBAAiB;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,0BAA0B;IAC1B,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,6BAA6B;IAC7B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC;AAED;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,gBAAgB;IAChB,EAAE,EAAE,MAAM,CAAC;IACX,4BAA4B;IAC5B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,+BAA+B;IAC/B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,qCAAqC;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,2BAA2B;IAC3B,SAAS,EAAE,IAAI,CAAC;IAChB,gEAAgE;IAChE,EAAE,CAAC,EAAE,WAAW,CAAC;IACjB,oCAAoC;IACpC,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC,uCAAuC;IACvC,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,cAAe,SAAQ,WAAW;IACjD,oCAAoC;IACpC,SAAS,EAAE,MAAM,CAAC;IAElB,wBAAwB;IACxB,SAAS,EAAE,IAAI,CAAC;IAEhB,kBAAkB;IAClB,MAAM,EAAE,MAAM,CAAC;IAEf,mBAAmB;IACnB,IAAI,EAAE,MAAM,CAAC;IAEb,wBAAwB;IACxB,QAAQ,EAAE,MAAM,CAAC;IAEjB,iBAAiB;IACjB,SAAS,EAAE,MAAM,CAAC;IAElB,0DAA0D;IAC1D,IAAI,EAAE,WAAW,GAAG,IAAI,CAAC;IAEzB,yDAAyD;IACzD,MAAM,EAAE,aAAa,GAAG,IAAI,CAAC;IAE7B,uDAAuD;IACvD,MAAM,EAAE,MAAM,CAAC;IAEf,6CAA6C;IAC7C,QAAQ,EAAE,sBAAsB,CAAC;IAEjC,oCAAoC;IACpC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IAEjD;;;;OAIG;IACH,EAAE,CAAC,EAAE,WAAW,CAAC;IAEjB;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAExC;;;;;OAKG;IACH,UAAU,EAAE,OAAO,CAAC;IAEpB;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,sBAAsB,GAAG,WAAW,GAAG,IAAI,CAsBpF;AAED;;GAEG;AACH,wBAAgB,aAAa,CAC3B,KAAK,EAAE,sBAAsB,EAC7B,gBAAgB,EAAE,MAAM,EAAE,EAC1B,aAAa,EAAE,MAAM,GACpB,MAAM,CAWR;AAED;;GAEG;AACH,wBAAgB,YAAY,CAC1B,KAAK,EAAE,sBAAsB,EAC7B,OAAO,EAAE;IACP,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,aAAa,EAAE,MAAM,CAAC;CACvB,GACA,cAAc,CAgChB"}

package/dist/{context.js → handler/context.js}

@@ -1,18 +1,13 @@
-"use strict";
 /**
  * VentureKit Request Context
  *
  * Provides typed access to request metadata, user info, and tenant context.
  * Extensible for future auth/tenancy modules.
  */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.extractUserContext = extractUserContext;
-exports.extractLocale = extractLocale;
-exports.buildContext = buildContext;
 /**
  * Extract user context from JWT claims in API Gateway event
  */
-function extractUserContext(event) {
+export function extractUserContext(event) {
     const claims = event.requestContext?.authorizer?.jwt?.claims;
     if (!claims) {
         return null;
@@ -34,7 +29,7 @@ function extractUserContext(event) {
 /**
  * Extract locale from Accept-Language header
  */
-function extractLocale(event, supportedLocales, defaultLocale) {
+export function extractLocale(event, supportedLocales, defaultLocale) {
     const acceptLanguage = event.headers?.['accept-language'] || '';
     // Parse Accept-Language header (simplified)
     const requested = acceptLanguage.split(',')[0]?.split('-')[0]?.toLowerCase();
@@ -46,7 +41,7 @@ function extractLocale(event, supportedLocales, defaultLocale) {
 /**
  * Build request context from API Gateway event
  */
-function buildContext(event, options) {
+export function buildContext(event, options) {
     // Hydrate intent outputs from env var (set by infra layer after provisioning)
     let intentOutputs;
     try {
@@ -58,6 +53,9 @@ function buildContext(event, options) {
     catch {
         // Ignore parse errors — intentOutputs stays undefined
     }
+    // Detect internal invocation from x-venturekit-source header
+    const isInternal = event.headers?.['x-venturekit-source'] === 'internal';
+    const invokeId = event.headers?.['x-venturekit-invoke-id'] || undefined;
     return {
         requestId: event.requestContext?.requestId || crypto.randomUUID(),
         timestamp: new Date(),
@@ -66,11 +64,13 @@ function buildContext(event, options) {
         sourceIp: event.requestContext?.http?.sourceIp || 'unknown',
         userAgent: event.headers?.['user-agent'] || 'unknown',
         user: extractUserContext(event),
-        tenant: null, // Populated by @venturekit/tenancy
+        tenant: null, // Populated by @venturekit-pro/tenancy
         locale: extractLocale(event, options.supportedLocales, options.defaultLocale),
         rawEvent: event,
         queryParams: event.queryStringParameters,
         intentOutputs,
+        isInternal,
+        invokeId,
     };
 }
 //# sourceMappingURL=context.js.map

package/dist/handler/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../../src/handler/context.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAmIH;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAA6B;IAC9D,MAAM,MAAM,GAAI,KAAK,CAAC,cAAsB,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,CAAC;IAEtE,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,CAAC,GAAyB,CAAC;IAC7C,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,IAAI,CAAC;IACd,CAAC;IAED,sDAAsD;IACtD,MAAM,WAAW,GAAG,MAAM,CAAC,KAA2B,CAAC;IACvD,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAEzD,OAAO;QACL,EAAE,EAAE,GAAG;QACP,KAAK,EAAE,MAAM,CAAC,KAA2B;QACzC,MAAM;QACN,MAAM,EAAE,MAAiC;KAC1C,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAC3B,KAA6B,EAC7B,gBAA0B,EAC1B,aAAqB;IAErB,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAAC;IAEhE,4CAA4C;IAC5C,MAAM,SAAS,GAAG,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;IAE7E,IAAI,SAAS,IAAI,gBAAgB,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACtD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,aAAa,CAAC;AACvB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAC1B,KAA6B,EAC7B,OAGC;IAED,8EAA8E;IAC9E,IAAI,aAAkD,CAAC;IACvD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;QAC/C,IAAI,GAAG,EAAE,CAAC;YACR,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,sDAAsD;IACxD,CAAC;IAED,6DAA6D;IAC7D,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,qBAAqB,CAAC,KAAK,UAAU,CAAC;IACzE,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,wBAAwB,CAAC,IAAI,SAAS,CAAC;IAExE,OAAO;QACL,SAAS,EAAE,KAAK,CAAC,cAAc,EAAE,SAAS,IAAI,MAAM,CAAC,UAAU,EAAE;QACjE,SAAS,EAAE,IAAI,IAAI,EAAE;QACrB,MAAM,EAAE,KAAK,CAAC,cAAc,EAAE,IAAI,EAAE,MAAM,IAAI,SAAS;QACvD,IAAI,EAAE,KAAK,CAAC,cAAc,EAAE,IAAI,EAAE,IAAI,IAAI,GAAG;QAC7C,QAAQ,EAAE,KAAK,CAAC,cAAc,EAAE,IAAI,EAAE,QAAQ,IAAI,SAAS;QAC3D,SAAS,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,YAAY,CAAC,IAAI,SAAS;QACrD,IAAI,EAAE,kBAAkB,CAAC,KAAK,CAAC;QAC/B,MAAM,EAAE,IAAI,EAAE,uCAAuC;QACrD,MAAM,EAAE,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,gBAAgB,EAAE,OAAO,CAAC,aAAa,CAAC;QAC7E,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,KAAK,CAAC,qBAAuE;QAC1F,aAAa;QACb,UAAU;QACV,QAAQ;KACT,CAAC;AACJ,CAAC"}

package/dist/handler/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/handler/errors.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;GAEG;AACH,qBAAa,YAAa,SAAQ,KAAK;aAEnB,IAAI,EAAE,MAAM;aAEZ,UAAU,EAAE,MAAM;aAClB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;gBAHjC,IAAI,EAAE,MAAM,EAC5B,OAAO,EAAE,MAAM,EACC,UAAU,GAAE,MAAY,EACxB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,YAAA;IAMnD,MAAM;;;;;;;CASP;AAED;;GAEG;AACH,qBAAa,eAAgB,SAAQ,YAAY;gBACnC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAI/D;AAED;;GAEG;AACH,qBAAa,iBAAkB,SAAQ,YAAY;gBACrC,OAAO,GAAE,MAAkC;CAIxD;AAED;;GAEG;AACH,qBAAa,cAAe,SAAQ,YAAY;gBAClC,OAAO,GAAE,MAAwB;CAI9C;AAED;;GAEG;AACH,qBAAa,aAAc,SAAQ,YAAY;gBACjC,QAAQ,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,MAAM;CAK1C;AAED;;GAEG;AACH,qBAAa,aAAc,SAAQ,YAAY;gBACjC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAI/D;AAED;;GAEG;AACH,qBAAa,eAAgB,SAAQ,YAAY;aAG7B,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;gBADrD,OAAO,EAAE,MAAM,EACC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;CAKxD;AAED;;GAEG;AACH,qBAAa,cAAe,SAAQ,YAAY;gBAClC,aAAa,CAAC,EAAE,MAAM;CAMnC;AAED;;GAEG;AACH,qBAAa,aAAc,SAAQ,YAAY;gBACjC,OAAO,GAAE,MAAgC;CAItD;AAED;;GAEG;AACH,qBAAa,uBAAwB,SAAQ,YAAY;gBAC3C,OAAO,EAAE,MAAM;CAI5B;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,YAAY,CAEpE"}