@burdenoff/be-sdk 2026.1002.1 → 2026.1004.1

package/dist/telemetry/index.d.ts

@@ -1,7 +1,7 @@
-import { L as Logger } from '../index-hWpL68Vx.js';
-import { S as SetupInstrumentationOptions, I as InstrumentationSetupResult } from '../index-BLWIKXin.js';
-export { a as initializeInstrumentation, s as setupInstrumentation } from '../index-BLWIKXin.js';
-import '../index-B8viwwDM.js';
+import { L as Logger } from '../index-BKafOO7G.js';
+import { S as SetupInstrumentationOptions, I as InstrumentationSetupResult } from '../index-Dvv6irk0.js';
+export { a as initializeInstrumentation, s as setupInstrumentation } from '../index-Dvv6irk0.js';
+import '../index-CfRZtB99.js';
 import '../layer-GNAVXBMf.js';
 
 interface PrismaLike {

package/dist/telemetry/index.js

@@ -1,6 +1,6 @@
 export { DEFAULT_REDACT_PATHS, createPinoLogger } from '../chunk-YK7C5DU6.js';
-import { setActiveTelemetryLogger, setupInstrumentation } from '../chunk-CPLFP5JK.js';
-export { initializeInstrumentation, setupInstrumentation } from '../chunk-CPLFP5JK.js';
+import { setActiveTelemetryLogger, setupInstrumentation } from '../chunk-E5DTAGCA.js';
+export { initializeInstrumentation, setupInstrumentation } from '../chunk-E5DTAGCA.js';
 import '../chunk-AWPNRV3L.js';
 import { defaultCollectorEndpoint } from '../chunk-FZRODKIN.js';
 export { COLLECTOR_SERVICE, OTLP_HTTP_PORT, defaultCollectorEndpoint, defaultCollectorTracesEndpoint, resolveCollectorLayer } from '../chunk-FZRODKIN.js';

package/dist/tracker/index.d.ts

@@ -1,6 +1,6 @@
-import '../graphql-Dxxpbzr3.js';
-import '../index-B8viwwDM.js';
-export { a as ActivityTrackingOptions, P as ProductTracker, R as RbacCheckOptions, b as TrackOptions, c as TrackResult, T as TrackerModule, d as TrackingEvent, e as UNIFIED_TRACKER_CONSTANTS, f as UnifiedTrackerStub, g as UnifiedTrackingOptions, h as UsageMetricType, i as UsageTrackingOptions, j as createProductTracker, t as trackOperation, k as trackerStub } from '../index-MsCFY9Ht.js';
-import '../index-Cpr38QiE.js';
+import '../graphql-AaLJfGzz.js';
+import '../index-CfRZtB99.js';
+export { a as ActivityTrackingOptions, P as ProductTracker, R as RbacCheckOptions, b as TrackOptions, c as TrackResult, T as TrackerModule, d as TrackingEvent, e as UNIFIED_TRACKER_CONSTANTS, f as UnifiedTrackerStub, g as UnifiedTrackingOptions, h as UsageMetricType, i as UsageTrackingOptions, j as createProductTracker, t as trackOperation, k as trackerStub } from '../index-BSlifT21.js';
+import '../index-DMlr5R6K.js';
 import 'graphql-request';
 import '../layer-GNAVXBMf.js';

package/dist/tracker/index.js

@@ -1,4 +1,4 @@
-export { TrackerModule, UNIFIED_TRACKER_CONSTANTS, UnifiedTrackerStub, UsageMetricType, createProductTracker, trackOperation, trackerStub } from '../chunk-RDSYCRHC.js';
+export { TrackerModule, UNIFIED_TRACKER_CONSTANTS, UnifiedTrackerStub, UsageMetricType, createProductTracker, trackOperation, trackerStub } from '../chunk-NCC5UN3L.js';
 import '../chunk-5JNHVKHG.js';
 import '../chunk-INAZ3PKF.js';
 import '../chunk-QGBXVNRM.js';

package/dist/{types-BAHkj1GE.d.ts → types-Biv0uaJk.d.ts}

@@ -4,9 +4,11 @@ import { P as PrismaClientBase, a as PrismaClientConstructorOptions } from './cl
 import { W as WorkspaceExtensionConfig } from './workspace-extension-DlxYz3P4.js';
 import { I as I18nContext, L as LocaleCode } from './types-C8TbSdEj.js';
 
+type ActorProvenance = 'direct_human' | 'delegated' | 'non_human' | 'unknown';
 interface IActor {
     id: string;
     type: string;
+    provenance?: ActorProvenance;
     workspace_id?: string;
     tenant_id?: string;
     org_id?: string;
@@ -32,6 +34,19 @@ interface ITracking {
     ip?: string;
     userAgent?: string;
 }
+interface VerifiedDelegationContext {
+    representedUserId: string;
+    originatingAppId: string;
+    delegationId: string;
+    scopes: readonly string[];
+    allowedWorkspaceIds: readonly string[];
+    tokenExpiresAt: Date;
+    consent: {
+        grantedBy: string;
+        grantedAt: Date;
+        expiresAt: Date | null;
+    } | null;
+}
 interface ConsentContext {
     grantedBy: string;
     scopes?: string[];
@@ -48,6 +63,7 @@ interface GraphQLContext {
     product: IProduct | null;
     tracking: ITracking;
     consentContext?: ConsentContext;
+    verifiedDelegation?: VerifiedDelegationContext;
     onBehalfOf: string;
     db: unknown;
     pubsub?: PubSub<Record<string, [unknown]>>;
@@ -222,4 +238,4 @@ interface WorkspaceSecret {
     [key: string]: unknown;
 }
 
-export type { ConsentContext as C, ElysiaApp as E, GraphQLContext as G, IActor as I, JWTPayload as J, ModuleGraphConfig as M, PrismaClientConstructor as P, RESTEndpoint as R, ServerDefinition as S, WorkspaceSecret as W, YogaPlugin as Y, ServerInstance as a, ITenant as b, IContextFilterInput as c, IOperationContext as d, IOrganization as e, IProduct as f, IProject as g, ITracking as h, IWorkspace as i, ServerConfig as j, ServerI18nConfig as k, ServerInfo as l, WspaceGraphQLContext as m };
+export type { ActorProvenance as A, ConsentContext as C, ElysiaApp as E, GraphQLContext as G, IActor as I, JWTPayload as J, ModuleGraphConfig as M, PrismaClientConstructor as P, RESTEndpoint as R, ServerDefinition as S, VerifiedDelegationContext as V, WorkspaceSecret as W, YogaPlugin as Y, ServerInstance as a, ITenant as b, IContextFilterInput as c, IOperationContext as d, IOrganization as e, IProduct as f, IProject as g, ITracking as h, IWorkspace as i, ServerConfig as j, ServerI18nConfig as k, ServerInfo as l, WspaceGraphQLContext as m };

package/dist/validation/index.js

@@ -1,4 +1,4 @@
-export { NAME_MAX_LENGTH, NAME_MIN_LENGTH, USERNAME_MAX_LENGTH, USERNAME_MIN_LENGTH, lengthInCodePoints, validateName, validateUserFields, validateUsername } from '../chunk-Z32KFAPT.js';
+export { NAME_MAX_LENGTH, NAME_MIN_LENGTH, USERNAME_MAX_LENGTH, USERNAME_MIN_LENGTH, lengthInCodePoints, validateName, validateUserFields, validateUsername } from '../chunk-AHEXIONU.js';
 import '../chunk-XE4OXN2W.js';
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@burdenoff/be-sdk",
-  "version": "2026.1002.1",
+  "version": "2026.1004.1",
   "description": "Backend SDK for Burdenoff products providing unified access to notifications, RBAC, activity tracking, usage monitoring, and more",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -76,8 +76,8 @@
     "deps:status": "bun scripts/deps-mode.ts status",
     "deps:workspace": "bun scripts/deps-mode.ts workspace",
     "dev": "tsx watch ./src/index.ts",
-    "build": "NODE_OPTIONS=--max-old-space-size=4096 tsup src/index.ts src/init/index.ts src/logger/index.ts src/cache/index.ts src/database/index.ts src/event-queue/index.ts src/lifecycle/index.ts src/graph/index.ts src/middleware/index.ts src/observability/index.ts src/graphql/index.ts src/graphql/services/index.ts src/prisma/index.ts src/utils/index.ts src/notifications/index.ts src/tracker/index.ts src/export/index.ts src/dataloader/index.ts src/prisma/generator/index.ts src/server/index.ts src/i18n/index.ts src/instrumentation/index.ts src/rbac/index.ts src/temporal/index.ts src/client/internal-client.ts src/layer/index.ts src/gateway/index.ts src/gateway/security/index.ts src/crypto/index.ts src/feature-flags/index.ts src/telemetry/index.ts src/auth/index.ts src/captcha/index.ts src/metrics/index.ts src/platform/index.ts src/resource-caps/index.ts src/sharding/index.ts src/sharing/index.ts src/validation/index.ts src/product-alias/index.ts --format esm --dts --clean --shims && bun run pack:tgz",
-    "build:watch": "tsup src/index.ts src/init/index.ts src/logger/index.ts src/cache/index.ts src/database/index.ts src/event-queue/index.ts src/lifecycle/index.ts src/graph/index.ts src/middleware/index.ts src/observability/index.ts src/graphql/index.ts src/graphql/services/index.ts src/prisma/index.ts src/utils/index.ts src/notifications/index.ts src/tracker/index.ts src/export/index.ts src/dataloader/index.ts src/prisma/generator/index.ts src/server/index.ts src/i18n/index.ts src/instrumentation/index.ts src/rbac/index.ts src/temporal/index.ts src/client/internal-client.ts src/layer/index.ts src/gateway/index.ts src/gateway/security/index.ts src/crypto/index.ts src/feature-flags/index.ts src/telemetry/index.ts src/auth/index.ts src/captcha/index.ts src/metrics/index.ts src/platform/index.ts src/resource-caps/index.ts src/sharding/index.ts src/sharing/index.ts src/validation/index.ts src/product-alias/index.ts --format esm --dts --watch --shims",
+    "build": "bash scripts/with-private-swc-cache.sh env NODE_OPTIONS=--max-old-space-size=4096 tsup src/index.ts src/init/index.ts src/logger/index.ts src/cache/index.ts src/database/index.ts src/event-queue/index.ts src/lifecycle/index.ts src/graph/index.ts src/middleware/index.ts src/observability/index.ts src/graphql/index.ts src/graphql/services/index.ts src/prisma/index.ts src/utils/index.ts src/notifications/index.ts src/tracker/index.ts src/export/index.ts src/dataloader/index.ts src/prisma/generator/index.ts src/server/index.ts src/i18n/index.ts src/instrumentation/index.ts src/rbac/index.ts src/temporal/index.ts src/client/internal-client.ts src/layer/index.ts src/gateway/index.ts src/gateway/security/index.ts src/crypto/index.ts src/feature-flags/index.ts src/telemetry/index.ts src/auth/index.ts src/captcha/index.ts src/metrics/index.ts src/platform/index.ts src/resource-caps/index.ts src/sharding/index.ts src/sharing/index.ts src/validation/index.ts src/product-alias/index.ts --format esm --dts --clean --shims && bun run pack:tgz",
+    "build:watch": "bash scripts/with-private-swc-cache.sh tsup src/index.ts src/init/index.ts src/logger/index.ts src/cache/index.ts src/database/index.ts src/event-queue/index.ts src/lifecycle/index.ts src/graph/index.ts src/middleware/index.ts src/observability/index.ts src/graphql/index.ts src/graphql/services/index.ts src/prisma/index.ts src/utils/index.ts src/notifications/index.ts src/tracker/index.ts src/export/index.ts src/dataloader/index.ts src/prisma/generator/index.ts src/server/index.ts src/i18n/index.ts src/instrumentation/index.ts src/rbac/index.ts src/temporal/index.ts src/client/internal-client.ts src/layer/index.ts src/gateway/index.ts src/gateway/security/index.ts src/crypto/index.ts src/feature-flags/index.ts src/telemetry/index.ts src/auth/index.ts src/captcha/index.ts src/metrics/index.ts src/platform/index.ts src/resource-caps/index.ts src/sharding/index.ts src/sharing/index.ts src/validation/index.ts src/product-alias/index.ts --format esm --dts --watch --shims",
     "typecheck": "bash scripts/build-limits.sh tsc --noEmit",
     "lint": "eslint ./src",
     "lint:sanity": "if [ \"${CI:-}\" = \"true\" ]; then bun run lint; else bun run lint -- --cache --cache-location .eslintcache; fi",
@@ -88,7 +88,7 @@
     "test:watch": "bun test --watch",
     "test:coverage": "bun test --coverage",
     "test:ci": "if ls src/**/*.test.ts 1>/dev/null 2>&1; then bun test; else echo 'No test files found, skipping'; fi",
-    "audit": "bunx better-npm-audit audit --level moderate 2>/dev/null || echo 'Audit completed (install better-npm-audit for detailed report)'",
+    "audit": "bun audit",
     "sanity": "bash scripts/build-limits.sh --gate bash -c 'bun run format:check && bun run lint:sanity && bun run typecheck && bun run build && bun run test:ci && bun run audit'",
     "prepublishOnly": "bun run build",
     "pack:tgz": "mkdir -p dist && rm -rf dist/burdenoff-be-sdk.tgz && bun pm pack --filename dist/burdenoff-be-sdk.tgz"
@@ -120,11 +120,11 @@
     "bun": ">=1.3.14"
   },
   "dependencies": {
-    "@graphql-yoga/logger": "^2.0.1",
-    "@prisma/generator-helper": "^7.2.0",
-    "@sinclair/typebox": "^0.34.45",
-    "@valkey/valkey-glide": "^2.2.6",
-    "jsonwebtoken": "^9.0.2"
+    "@graphql-yoga/logger": "^2.0.2",
+    "@prisma/generator-helper": "^7.10.0",
+    "@sinclair/typebox": "^0.34.52",
+    "@valkey/valkey-glide": "^2.5.3",
+    "jsonwebtoken": "^9.0.3"
   },
   "peerDependencies": {
     "@clickhouse/client": "^1.14.0",
@@ -194,50 +194,58 @@
     }
   },
   "devDependencies": {
-    "@clickhouse/client": "^1.15.0",
-    "@elysiajs/cors": "^1.4.1",
-    "@temporalio/client": "^1.11.7",
-    "@temporalio/common": "^1.11.7",
-    "@temporalio/worker": "^1.11.7",
+    "@clickhouse/client": "^1.23.1",
+    "@elysiajs/cors": "^1.4.2",
+    "@temporalio/client": "^1.24.0",
+    "@temporalio/common": "^1.24.0",
+    "@temporalio/worker": "^1.24.0",
     "graphql": "16.12.0",
-    "@eslint/js": "^9.39.2",
-    "@graphql-yoga/plugin-apollo-inline-trace": "^3.18.0",
-    "@graphql-yoga/plugin-prometheus": "^6.13.0",
-    "@prisma/adapter-pg": "^7.2.0",
-    "@prisma/client": "^7.2.0",
-    "@swc/core": "^1.15.8",
-    "@types/bun": "^1.3.9",
+    "@eslint/js": "^9.39.5",
+    "@graphql-yoga/plugin-apollo-inline-trace": "^3.24.1",
+    "@graphql-yoga/plugin-prometheus": "^6.19.1",
+    "@prisma/adapter-pg": "^7.10.0",
+    "@prisma/client": "^7.10.0",
+    "@swc/core": "^1.16.13",
+    "@types/bun": "^1.4.2",
     "@types/jsonwebtoken": "^9.0.10",
-    "@types/node": "^25.0.3",
-    "@types/pg": "^8.16.0",
-    "arangojs": "^10.1.2",
-    "elysia": "^1.4.26",
-    "eslint": "^9.39.2",
+    "@types/node": "^25.9.9",
+    "@types/pg": "^8.23.1",
+    "arangojs": "^10.5.0",
+    "elysia": "^1.4.30",
+    "eslint": "^9.39.5",
     "eslint-plugin-eslint-comments": "^3.2.0",
     "eslint-plugin-import": "^2.32.0",
     "eslint-plugin-security": "^3.0.1",
-    "eslint-plugin-sonarjs": "^3.0.5",
+    "eslint-plugin-sonarjs": "4.2.2",
     "globals": "^16.5.0",
-    "jose": "^6.1.3",
-    "lefthook": "^2.1.1",
-    "ioredis": "^5.4.1",
-    "pg": "^8.16.3",
-    "prettier": "^3.7.4",
-    "prisma": "^7.2.0",
+    "jose": "^6.2.12",
+    "lefthook": "^2.1.16",
+    "ioredis": "^5.11.1",
+    "pg": "^8.23.1",
+    "prettier": "3.8.3",
+    "prisma": "^7.10.0",
     "prom-client": "^15.1.3",
     "tsup": "^8.5.1",
-    "tsx": "^4.21.0",
+    "tsx": "^4.23.15",
     "typescript": "^5.9.3",
-    "typescript-eslint": "^8.51.0"
+    "typescript-eslint": "^8.71.0"
   },
   "publishConfig": {
     "access": "public"
   },
   "overrides": {
-    "hono": "4.10.7",
-    "valibot": "1.2.0",
-    "protobufjs": "7.5.5",
-    "serialize-javascript": "7.0.3"
+    "hono": "4.13.12",
+    "valibot": "1.5.0",
+    "protobufjs": "7.6.6",
+    "serialize-javascript": "7.1.2",
+    "@fastify/busboy": "3.2.2",
+    "@grpc/grpc-js": "1.14.5",
+    "baseline-browser-mapping": "2.11.27",
+    "browserslist": "4.29.3",
+    "deepmerge-ts": "8.0.2",
+    "fast-uri": "3.1.8",
+    "mysql2": "3.24.5",
+    "esbuild": "0.28.2"
   },
   "resolutions": {
     "graphql": "16.12.0"