[WIP] Implement multi-tenant connector configuration (#133)

* Initial plan

* feat: implement multi-tenant connector configuration

* fix: harden tenant resolver input validation

* chore(lint): align import order and formatting for CI

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: Ricardo Cataldi <rcataldi@microsoft.com>

Author: Copilot

apps/crud-service/src/crud_service/consumers/__init__.py

@@ -1,6 +1,5 @@
 """Event consumers for background processing."""
 
-from crud_service.consumers.connector_sync import ConnectorSyncConsumer
-from crud_service.consumers.connector_sync import get_connector_sync_consumer
+from crud_service.consumers.connector_sync import ConnectorSyncConsumer, get_connector_sync_consumer
 
 __all__ = ["ConnectorSyncConsumer", "get_connector_sync_consumer"]

apps/crud-service/src/crud_service/consumers/connector_sync.py

@@ -174,7 +174,9 @@ async def on_event(partition_context, event):  # noqa: ANN001
             await partition_context.update_checkpoint(event)
 
         async def on_error(partition_context, error):  # noqa: ANN001
-            logger.error("connector_sync_consumer_error partition=%s error=%s", partition_context, error)
+            logger.error(
+                "connector_sync_consumer_error partition=%s error=%s", partition_context, error
+            )
 
         try:
             async with self._consumer:

apps/crud-service/src/crud_service/routes/connector_webhooks.py

@@ -34,7 +34,9 @@ async def replay_dead_letter(dead_letter_id: str):
 
     replayed = await connector_sync_consumer.replay_dead_letter(dead_letter_id)
     if not replayed:
-        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="Dead-letter event not found")
+        raise HTTPException(
+            status_code=status.HTTP_404_NOT_FOUND, detail="Dead-letter event not found"
+        )
 
     return {"status": "replayed", "dead_letter_id": dead_letter_id}
 

docs/IMPLEMENTATION_ROADMAP.md

@@ -514,11 +514,11 @@ This document tracks the implementation progress of the Holiday Peak Hub platfor
 **Issue**: [#81](https://github.com/Azure-Samples/holiday-peak-hub/issues/81)
 
 **Tasks**:
-- [ ] Design tenant configuration schema
-- [ ] Implement TenantResolver middleware
-- [ ] Add Azure Key Vault integration for secrets
-- [ ] Create connector instance caching
-- [ ] Document multi-tenant setup
+- [x] Design tenant configuration schema
+- [x] Implement TenantResolver middleware
+- [x] Add Azure Key Vault integration for secrets
+- [x] Create connector instance caching
+- [x] Document multi-tenant setup
 
 #### 8.5 Internal Data Guardrails
 **Priority**: CRITICAL  

docs/architecture/components/libs/integrations.md

@@ -51,3 +51,22 @@ When adding any new connector under `lib/src/holiday_peak_lib/integrations/`:
   - Auth: bearer, basic, api_key, oauth2 (pre-fetched token).
   - Operations: get/list/search products, fetch categories, fetch product assets, push enrichment.
   - Resilience: token-bucket rate limit + exponential retry for 429/5xx and transport errors.
+
+## Multi-Tenant Connector Configuration
+
+`holiday_peak_lib.connectors` provides tenant-aware connector configuration and resolution:
+
+- `tenant_config.py`
+  - `TenantConfigStore` loads per-tenant files from `connectors/config/tenant-{tenantId}.yaml`.
+  - Supports environment variable overrides per connector/domain.
+  - Resolves Azure Key Vault references for tenant-isolated secrets.
+
+- `tenant_resolver.py`
+  - `TenantResolver` resolves tenant context from request headers/query/default.
+  - `TenantContextMiddleware` propagates tenant context through request state and async context.
+  - `TenantConnectorResolver` caches connector instances by tenant/domain/vendor pool key.
+
+Recommended env override format:
+
+- `TENANT_<TENANT_ID>_CONNECTOR_<DOMAIN>_<SETTING>=value`
+- `CONNECTOR_<DOMAIN>_<SETTING>=value`

lib/src/holiday_peak_lib/connectors/__init__.py

@@ -7,11 +7,37 @@
     ConnectorRegistry,
     default_registry,
 )
+from holiday_peak_lib.connectors.tenant_config import (
+    ConnectorRuntimeConfig,
+    KeyVaultSecretResolver,
+    TenantConfig,
+    TenantConfigStore,
+    TenantConnectorConfig,
+    normalize_tenant_id,
+)
+from holiday_peak_lib.connectors.tenant_resolver import (
+    TenantConnectorResolver,
+    TenantContext,
+    TenantContextMiddleware,
+    TenantResolver,
+    get_current_tenant_context,
+)
 
 __all__ = [
     "ConnectorDefinition",
     "ConnectorHealth",
     "ConnectorRegistration",
     "ConnectorRegistry",
+    "ConnectorRuntimeConfig",
+    "KeyVaultSecretResolver",
+    "TenantConfig",
+    "TenantConfigStore",
+    "TenantConnectorConfig",
+    "normalize_tenant_id",
+    "TenantConnectorResolver",
+    "TenantContext",
+    "TenantContextMiddleware",
+    "TenantResolver",
+    "get_current_tenant_context",
     "default_registry",
 ]