@burdenoff/be-sdk 2026.510.79

package/dist/sdk-THO3IWEE.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/telemetry/sdk.ts"],"names":["isThenable","value","then","asyncDisposeMetricReader","metricReaderCandidate","shutdown","result","call","createOtelSdk","cfg","sdkNodeMod","sdkMod","resourcesMod","resources","semMod","sem","traceExpMod","traceExp","metricsExp","metricsExpMod","undefined","metricReader","metricsEnabled","metricsDropReason","OTLPMetricExporter","metricsSdkMod","metricsSdk","candidate","PeriodicExportingMetricReader","exporter","url","otlpEndpoint","replace","setProducer","setMetricProducer","sampler","traceBaseMod","traceBase","ParentBasedSampler","root","TraceIdRatioBasedSampler","Math","min","max","sampleRatio","autoInstrumentations","autoMod","auto","getNodeAutoInstrumentations","enabled","serviceNamespaceByBoundary","wspace","global","gateway","resourceAttributes","serviceName","serviceVersion","boundary","env","module","serviceInstanceId","process","clusterName","resource","resourceFromAttributes","traceExporter","OTLPTraceExporter","nodeSdk","NodeSDK","instrumentations","startResult","start","otelApiMod","globalThis","__otelApi"],"mappings":";;;AA8BA,IAAMA,UAAAA,2BAAcC,KAAAA,KAAAA;AAClB,EAAA,OAAO,OAAOA,KAAAA,KAAU,QAAA,IAAYA,UAAU,IAAA,IAAQ,OAAQA,MAA6BC,IAAAA,KAAS,UAAA;AACtG,CAAA,EAFmB,YAAA,CAAA;AAInB,IAAMC,wBAAAA,iCAAkCC,qBAAAA,KAAAA;AACtC,EAAA,MAAMC,WAAYD,qBAAAA,CAAoEC,QAAAA;AACtF,EAAA,IAAI,OAAOA,aAAa,UAAA,EAAY;AAClC,IAAA,MAAMC,MAAAA,GAASD,QAAAA,CAASE,IAAAA,CAAKH,qBAAAA,CAAAA;AAC7B,IAAA,IAAIJ,UAAAA,CAAWM,MAAAA,CAAAA,EAAS,MAAMA,MAAAA;AAChC,EAAA;AACF,CAAA,EANiC,0BAAA,CAAA;AAQjC,eAAsBE,cAAcC,GAAAA,EAAkB;AAGpD,EAAA,MAAMC,UAAAA,GAAa,yBAAA;AACnB,EAAA,MAAMC,MAAAA,GAAU,MAAM,OAAOD,UAAAA,CAAAA;AAO7B,EAAA,MAAME,YAAAA,GAAe,0BAAA;AACrB,EAAA,MAAMC,SAAAA,GAAa,MAAM,OAAOD,YAAAA,CAAAA;AAIhC,EAAA,MAAME,MAAAA,GAAS,qCAAA;AACf,EAAA,MAAMC,GAAAA,GAAO,MAAM,OAAOD,MAAAA,CAAAA;AAE1B,EAAA,MAAME,WAAAA,GAAc,yCAAA;AACpB,EAAA,MAAMC,QAAAA,GAAY,MAAM,OAAOD,WAAAA,CAAAA;AAI/B,EAAA,IAAIE,UAAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAMC,aAAAA,GAAgB,2CAAA;AACtBD,IAAAA,UAAAA,GAAc,MAAM,OAAOC,aAAAA,CAAAA;EAC7B,CAAA,CAAA,MAAQ;AACND,IAAAA,UAAAA,GAAaE,MAAAA;AACf,EAAA;AAEA,EAAA,IAAIC,YAAAA;AACJ,EAAA,IAAIC,cAAAA,GAAiB,KAAA;AACrB,EAAA,IAAIC,iBAAAA;AACJ,EAAA,IAAIL,YAAYM,kBAAAA,EAAoB;AAClC,IAAA,IAAI;AACF,MAAA,MAAMC,aAAAA,GAAgB,4BAAA;AACtB,MAAA,MAAMC,UAAAA,GAAc,MAAM,OAAOD,aAAAA,CAAAA;AAGjC,MAAA,MAAME,SAAAA,GAAY,IAAID,UAAAA,CAAWE,6BAAAA,CAA8B;QAC7DC,QAAAA,EAAU,IAAIX,WAAWM,kBAAAA,CAAmB;AAC1CM,UAAAA,GAAAA,EAAK,GAAGrB,GAAAA,CAAIsB,YAAAA,CAAaC,OAAAA,CAAQ,KAAA,EAAO,EAAA,CAAA,CAAA,WAAA;SAC1C;OACF,CAAA;AAWA,MAAA,MAAMC,cAAeN,SAAAA,CAA8CO,iBAAAA;AACnE,MAAA,IAAI,OAAOD,gBAAgB,UAAA,EAAY;AACrCZ,QAAAA,YAAAA,GAAeM,SAAAA;AACfL,QAAAA,cAAAA,GAAiB,IAAA;MACnB,CAAA,MAAO;AACLC,QAAAA,iBAAAA,GACE,6FAAA;AACF,QAAA,MAAMpB,yBAAyBwB,SAAAA,CAAAA;AAC/BN,QAAAA,YAAAA,GAAeD,KAAAA,CAAAA;AACjB,MAAA;IACF,CAAA,CAAA,MAAQ;AACN,MAAA,IAAIG,sBAAsBH,MAAAA,EAAW;AACnCG,QAAAA,iBAAAA,GAAoB,0DAAA;AACtB,MAAA;AACAF,MAAAA,YAAAA,GAAeD,MAAAA;AACjB,IAAA;AACF,EAAA;AAEA,EAAA,IAAIe,OAAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAMC,YAAAA,GAAe,+BAAA;AACrB,IAAA,MAAMC,SAAAA,GAAa,MAAM,OAAOD,YAAAA,CAAAA;AAIhCD,IAAAA,OAAAA,GAAU,IAAIE,UAAUC,kBAAAA,CAAmB;AACzCC,MAAAA,IAAAA,EAAM,IAAIF,SAAAA,CAAUG,wBAAAA,CAAyBC,IAAAA,CAAKC,GAAAA,CAAI,CAAA,EAAGD,IAAAA,CAAKE,GAAAA,CAAI,CAAA,EAAGlC,GAAAA,CAAImC,WAAW,CAAA,CAAA;KACtF,CAAA;EACF,CAAA,CAAA,MAAQ;AACNT,IAAAA,OAAAA,GAAUf,MAAAA;AACZ,EAAA;AAGA,EAAA,IAAIyB,oBAAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAMC,OAAAA,GAAU,2CAAA;AAChB,IAAA,MAAMC,IAAAA,GAAQ,MAAM,OAAOD,OAAAA,CAAAA;AAG3BD,IAAAA,oBAAAA,GAAuBE,KAAKC,2BAAAA,CAA4B;MACtD,mCAAA,EAAqC;QAAEC,OAAAA,EAAS;AAAM;KACxD,CAAA;EACF,CAAA,CAAA,MAAQ;AACNJ,IAAAA,oBAAAA,GAAuBzB,MAAAA;AACzB,EAAA;AAEA,EAAA,MAAM8B,0BAAAA,GAAuD;IAC3DC,MAAAA,EAAQ,YAAA;IACRC,MAAAA,EAAQ,QAAA;IACRC,OAAAA,EAAS;AACX,GAAA;AACA,EAAA,MAAMC,kBAAAA,GAA6C;AACjD,IAAA,CAACvC,GAAAA,CAAI,0BAAA,CAAA,IAA+B,cAAA,GAAiBN,GAAAA,CAAI8C,WAAAA;AACzD,IAAA,CAACxC,GAAAA,CAAI,6BAAA,CAAA,IAAkC,iBAAA,GAAoBN,GAAAA,CAAI+C,cAAAA;AAC/D,IAAA,CAACzC,IAAI,+BAAA,CAAA,IAAoC,mBAAA,GAAsBmC,0BAAAA,CAA2BzC,IAAIgD,QAAQ,CAAA;AACtG,IAAA,CAAC1C,GAAAA,CAAI,oCAAA,CAAA,IAAyC,wBAAA,GAA2BN,GAAAA,CAAIiD,GAAAA;AAC7E,IAAA,oBAAA,EAAsBjD,GAAAA,CAAIgD;AAC5B,GAAA;AACA,EAAA,IAAIhD,GAAAA,CAAIkD,MAAAA,EAAQL,kBAAAA,CAAmB,kBAAA,IAAsB7C,GAAAA,CAAIkD,MAAAA;AAC7D,EAAA,MAAMC,oBAAoBC,OAAAA,CAAQH,GAAAA,CAAI,UAAA,CAAA,IAAeG,OAAAA,CAAQH,IAAI,UAAA,CAAA;AACjE,EAAA,IAAIE,iBAAAA,EAAmBN,kBAAAA,CAAmB,qBAAA,CAAA,GAAyBM,iBAAAA;AACnE,EAAA,MAAME,WAAAA,GAAcD,OAAAA,CAAQH,GAAAA,CAAI,cAAA,CAAA;AAChC,EAAA,IAAII,WAAAA,EAAa;AACfR,IAAAA,kBAAAA,CAAmB,SAAA,CAAA,GAAaQ,WAAAA;AAChCR,IAAAA,kBAAAA,CAAmB,kBAAA,CAAA,GAAsBQ,WAAAA;AAC3C,EAAA;AAEA,EAAA,MAAMC,QAAAA,GAAWlD,SAAAA,CAAUmD,sBAAAA,CAAuBV,kBAAAA,CAAAA;AAElD,EAAA,MAAMW,aAAAA,GAAgB,IAAIhD,QAAAA,CAASiD,iBAAAA,CAAkB;AACnDpC,IAAAA,GAAAA,EAAK,GAAGrB,GAAAA,CAAIsB,YAAAA,CAAaC,OAAAA,CAAQ,KAAA,EAAO,EAAA,CAAA,CAAA,UAAA;GAC1C,CAAA;AAUA,EAAA,MAAMmC,OAAAA,GAAU,IAAIxD,MAAAA,CAAOyD,OAAAA,CAAQ;AACjCL,IAAAA,QAAAA;AACAE,IAAAA,aAAAA;AACA,IAAA,GAAI5C,YAAAA,GAAe;AAAEA,MAAAA;AAAa,KAAA,GAAI,EAAC;AACvC,IAAA,GAAIc,OAAAA,GAAU;AAAEA,MAAAA;AAAQ,KAAA,GAAI,EAAC;AAC7B,IAAA,GAAIU,oBAAAA,GAAuB;MAAEwB,gBAAAA,EAAkBxB;AAAqB,KAAA,GAAI;GAC1E,CAAA;AAIA,EAAA,MAAMyB,WAAAA,GAAcH,QAAQI,KAAAA,EAAK;AACjC,EAAA,IAAIvE,UAAAA,CAAWsE,WAAAA,CAAAA,EAAc;AAC3B,IAAA,MAAMA,WAAAA;AACR,EAAA;AAGA,EAAA,IAAI;AACF,IAAA,MAAME,UAAAA,GAAa,oBAAA;AAClBC,IAAAA,UAAAA,CAAkDC,SAAAA,GAAY,MAAM,OAAOF,UAAAA,CAAAA;EAC9E,CAAA,CAAA,MAAQ;AAER,EAAA;AAEA,EAAA,OAAO;IACLnE,QAAAA,kBAAU,MAAA,CAAA,YAA2B8D,OAAAA,CAAQ9D,QAAAA,EAAQ,EAA3C,UAAA,CAAA;AACViB,IAAAA,cAAAA;AACAC,IAAAA;AACF,GAAA;AACF;AArKsBf,MAAAA,CAAAA,aAAAA,EAAAA,eAAAA,CAAAA","file":"sdk-THO3IWEE.js","sourcesContent":["/**\n * Thin wrapper that initializes `@opentelemetry/sdk-node` with the\n * OTLPTrace + OTLPMetric exporters and standard auto-instrumentations.\n *\n * All imports are dynamic so services that haven't installed sdk-node\n * still compile and run. The function resolves `undefined` when the SDK\n * isn't available, letting `bootstrapTelemetry` fall back gracefully.\n */\nimport type { Boundary, Env } from './index.js';\n\nexport interface OtelSdkConfig {\n  serviceName: string;\n  serviceVersion: string;\n  boundary: Boundary;\n  module?: string;\n  env: Env;\n  otlpEndpoint: string;\n  sampleRatio: number;\n}\n\nexport interface OtelSdkHandle {\n  shutdown: () => Promise<void>;\n  metricsEnabled: boolean;\n  metricsDropReason?: string;\n}\n\ntype Thenable = {\n  then: (onfulfilled?: (value: void) => void, onrejected?: (reason: unknown) => void) => unknown;\n};\n\nconst isThenable = (value: unknown): value is Thenable => {\n  return typeof value === 'object' && value !== null && typeof (value as { then?: unknown }).then === 'function';\n};\n\nconst asyncDisposeMetricReader = async (metricReaderCandidate: unknown): Promise<void> => {\n  const shutdown = (metricReaderCandidate as { shutdown?: () => void | Promise<void> }).shutdown;\n  if (typeof shutdown === 'function') {\n    const result = shutdown.call(metricReaderCandidate) as unknown;\n    if (isThenable(result)) await result;\n  }\n};\n\nexport async function createOtelSdk(cfg: OtelSdkConfig): Promise<OtelSdkHandle> {\n  // Use local string variables so TypeScript skips static module resolution for\n  // optional peer dependencies that may not be installed.\n  const sdkNodeMod = '@opentelemetry/sdk-node';\n  const sdkMod = (await import(sdkNodeMod)) as unknown as {\n    NodeSDK: new (init: Record<string, unknown>) => {\n      start: () => void;\n      shutdown: () => Promise<void>;\n    };\n  };\n\n  const resourcesMod = '@opentelemetry/resources';\n  const resources = (await import(resourcesMod)) as unknown as {\n    resourceFromAttributes: (attrs: Record<string, string | number>) => unknown;\n  };\n\n  const semMod = '@opentelemetry/semantic-conventions';\n  const sem = (await import(semMod)) as unknown as Record<string, string>;\n\n  const traceExpMod = '@opentelemetry/exporter-trace-otlp-http';\n  const traceExp = (await import(traceExpMod)) as unknown as {\n    OTLPTraceExporter: new (init: Record<string, string>) => unknown;\n  };\n\n  let metricsExp: { OTLPMetricExporter?: new (init: Record<string, string>) => unknown } | undefined;\n  try {\n    const metricsExpMod = '@opentelemetry/exporter-metrics-otlp-http';\n    metricsExp = (await import(metricsExpMod)) as unknown as typeof metricsExp;\n  } catch {\n    metricsExp = undefined;\n  }\n\n  let metricReader: unknown;\n  let metricsEnabled = false;\n  let metricsDropReason: string | undefined;\n  if (metricsExp?.OTLPMetricExporter) {\n    try {\n      const metricsSdkMod = '@opentelemetry/sdk-metrics';\n      const metricsSdk = (await import(metricsSdkMod)) as unknown as {\n        PeriodicExportingMetricReader: new (init: Record<string, unknown>) => unknown;\n      };\n      const candidate = new metricsSdk.PeriodicExportingMetricReader({\n        exporter: new metricsExp.OTLPMetricExporter({\n          url: `${cfg.otlpEndpoint.replace(/\\/$/, '')}/v1/metrics`,\n        }),\n      });\n      // Pre-flight API compatibility check. Some OTel package version\n      // combinations construct `PeriodicExportingMetricReader` successfully\n      // but lack `setMetricProducer` on the prototype chain (mixed\n      // sdk-metrics versions, or runtime-specific class-inheritance\n      // quirks — Bun has surfaced this in the past). Without the check,\n      // `NodeSDK.start()` may register the global tracer provider BEFORE\n      // it tries to call `setMetricProducer` and throws — leaving the\n      // global tracer pointing at a half-initialized provider whose\n      // span pipeline never drains. Skipping the metric reader when the\n      // API isn't there avoids that whole failure mode in one pass.\n      const setProducer = (candidate as { setMetricProducer?: unknown }).setMetricProducer;\n      if (typeof setProducer === 'function') {\n        metricReader = candidate;\n        metricsEnabled = true;\n      } else {\n        metricsDropReason =\n          'setMetricProducer is not a function on PeriodicExportingMetricReader; skipping metrics path';\n        await asyncDisposeMetricReader(candidate);\n        metricReader = undefined;\n      }\n    } catch {\n      if (metricsDropReason === undefined) {\n        metricsDropReason = 'metric reader construction or compatibility check failed';\n      }\n      metricReader = undefined;\n    }\n  }\n\n  let sampler: unknown;\n  try {\n    const traceBaseMod = '@opentelemetry/sdk-trace-base';\n    const traceBase = (await import(traceBaseMod)) as unknown as {\n      ParentBasedSampler: new (init: Record<string, unknown>) => unknown;\n      TraceIdRatioBasedSampler: new (ratio: number) => unknown;\n    };\n    sampler = new traceBase.ParentBasedSampler({\n      root: new traceBase.TraceIdRatioBasedSampler(Math.min(1, Math.max(0, cfg.sampleRatio))),\n    });\n  } catch {\n    sampler = undefined;\n  }\n\n  // Some services have auto-instrumentations installed; optional.\n  let autoInstrumentations: unknown[] | undefined;\n  try {\n    const autoMod = '@opentelemetry/auto-instrumentations-node';\n    const auto = (await import(autoMod)) as unknown as {\n      getNodeAutoInstrumentations: (cfg?: Record<string, unknown>) => unknown[];\n    };\n    autoInstrumentations = auto.getNodeAutoInstrumentations({\n      '@opentelemetry/instrumentation-fs': { enabled: false },\n    });\n  } catch {\n    autoInstrumentations = undefined;\n  }\n\n  const serviceNamespaceByBoundary: Record<Boundary, string> = {\n    wspace: 'workspaces',\n    global: 'tenant',\n    gateway: 'gateways',\n  };\n  const resourceAttributes: Record<string, string> = {\n    [sem['SEMRESATTRS_SERVICE_NAME'] ?? 'service.name']: cfg.serviceName,\n    [sem['SEMRESATTRS_SERVICE_VERSION'] ?? 'service.version']: cfg.serviceVersion,\n    [sem['SEMRESATTRS_SERVICE_NAMESPACE'] ?? 'service.namespace']: serviceNamespaceByBoundary[cfg.boundary],\n    [sem['SEMRESATTRS_DEPLOYMENT_ENVIRONMENT'] ?? 'deployment.environment']: cfg.env,\n    'burdenoff.boundary': cfg.boundary,\n  };\n  if (cfg.module) resourceAttributes['burdenoff.module'] = cfg.module;\n  const serviceInstanceId = process.env['POD_NAME'] ?? process.env['HOSTNAME'];\n  if (serviceInstanceId) resourceAttributes['service.instance.id'] = serviceInstanceId;\n  const clusterName = process.env['CLUSTER_NAME'];\n  if (clusterName) {\n    resourceAttributes['cluster'] = clusterName;\n    resourceAttributes['k8s.cluster.name'] = clusterName;\n  }\n\n  const resource = resources.resourceFromAttributes(resourceAttributes);\n\n  const traceExporter = new traceExp.OTLPTraceExporter({\n    url: `${cfg.otlpEndpoint.replace(/\\/$/, '')}/v1/traces`,\n  });\n\n  // Single NodeSDK, single start. The pre-flight `setMetricProducer`\n  // check above means we never pass an incompatible metric reader into\n  // NodeSDK construction — so we no longer need the prior catch+rebuild\n  // fallback dance, which had its own side-effect: the failed first\n  // NodeSDK could leave the global tracer provider partially registered,\n  // and the second NodeSDK's `setGlobalTracerProvider` becomes a no-op\n  // — meaning spans flow into the FIRST (broken) provider and never\n  // reach the exporter. Eliminating the fallback eliminates that hazard.\n  const nodeSdk = new sdkMod.NodeSDK({\n    resource,\n    traceExporter,\n    ...(metricReader ? { metricReader } : {}),\n    ...(sampler ? { sampler } : {}),\n    ...(autoInstrumentations ? { instrumentations: autoInstrumentations } : {}),\n  });\n  // NodeSDK.start() returns void in modern versions and Promise<void> in older\n  // ones. Cast to a permissive thenable shape so awaiting works either way\n  // without tripping `@typescript-eslint/await-thenable`.\n  const startResult = nodeSdk.start() as unknown;\n  if (isThenable(startResult)) {\n    await startResult;\n  }\n\n  // Stash the @opentelemetry/api reference for pino-logger's mixin.\n  try {\n    const otelApiMod = '@opentelemetry/api';\n    (globalThis as unknown as { __otelApi?: unknown }).__otelApi = await import(otelApiMod);\n  } catch {\n    // Non-fatal.\n  }\n\n  return {\n    shutdown: async (): Promise<void> => nodeSdk.shutdown(),\n    metricsEnabled,\n    metricsDropReason,\n  };\n}\n"]}

package/dist/server/index.d.ts

@@ -0,0 +1,359 @@
+import { GraphQLSchema } from 'graphql';
+import { PubSub } from 'graphql-yoga';
+import { P as PrismaClientBase, a as PrismaClientConstructorOptions } from '../client-CSjIrYKS.js';
+import { I as I18nContext, L as LocaleCode, d as I18n } from '../i18n-DA6IPnYy.js';
+import * as jose from 'jose';
+import { VerifyOptions } from 'jsonwebtoken';
+import '@prisma/adapter-pg';
+import 'pg';
+
+interface IActor {
+    id: string;
+    type: string;
+    workspace_id?: string;
+    tenant_id?: string;
+    org_id?: string;
+    isAdmin?: boolean;
+}
+interface ITenant {
+    id: string;
+    endpoint: string;
+}
+interface IOrganization {
+    id: string;
+}
+interface IWorkspace {
+    id: string;
+}
+interface IProject {
+    id: string;
+}
+interface IProduct {
+    id: string;
+}
+interface ITracking {
+    ip?: string;
+    userAgent?: string;
+}
+interface ConsentContext {
+    grantedBy: string;
+    scopes?: string[];
+    grantedAt?: Date;
+    expiresAt?: Date;
+}
+interface GraphQLContext {
+    request: Request;
+    actor: IActor | null;
+    tenant: ITenant | null;
+    organization: IOrganization | null;
+    workspace: IWorkspace | null;
+    project: IProject | null;
+    product: IProduct | null;
+    tracking: ITracking;
+    consentContext?: ConsentContext;
+    onBehalfOf: string;
+    db: unknown;
+    pubsub?: PubSub<Record<string, [unknown]>>;
+    i18n?: I18nContext;
+    responseHeaders: Headers;
+}
+interface WspaceGraphQLContext extends Omit<GraphQLContext, 'workspace' | 'actor'> {
+    actor: IActor;
+    workspace: IWorkspace;
+}
+
+interface IOperationContext {
+    workspaceId?: string | null;
+    actorId?: string | null;
+    projectId?: string | null;
+    appId?: string | null;
+    custom?: Record<string, unknown> | null;
+}
+interface IContextFilterInput {
+    workspaceId?: string | null;
+    actorId?: string | null;
+    projectId?: string | null;
+    appId?: string | null;
+}
+interface ServerI18nConfig {
+    enabled?: boolean;
+    defaultLocale?: LocaleCode;
+    fallbackLocale?: LocaleCode;
+    localesPath?: string;
+    supportedLocales?: LocaleCode[];
+    namespace?: string;
+    lazyLoad?: boolean;
+    logMissing?: boolean;
+}
+interface ServerConfig {
+    serviceName: string;
+    serviceVersion?: string;
+    port: number;
+    host?: string;
+    environment?: 'development' | 'staging' | 'production';
+    boundary?: 'wspace' | 'global';
+    graphqlEndpoint?: string;
+    corsOrigins?: string | string[];
+    sessionSecret?: string;
+    enablePlayground?: boolean;
+    enableIntrospection?: boolean;
+    csrfSkipRoutes?: string[];
+    loginEndpoints?: string[];
+    enableCSRF?: boolean;
+    enableSessionSecurity?: boolean;
+    i18n?: ServerI18nConfig;
+    workspaceGuard?: {
+        enabled?: boolean;
+        whitelistedOperations?: string[];
+    };
+}
+interface ModuleGraphConfig {
+    getSchema: () => unknown;
+    exportAll: (orgId?: string, workspaceId?: string) => Promise<unknown>;
+    exportEntities: (orgId?: string, workspaceId?: string, types?: string[]) => Promise<unknown>;
+    exportRelationships: (orgId?: string, workspaceId?: string) => Promise<unknown>;
+    initialize: () => Promise<void>;
+    shutdown: () => Promise<void>;
+}
+interface RESTEndpoint {
+    method: 'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE';
+    path: string;
+    handler: (request: Request, context: GraphQLContext, rawBody?: string) => Promise<unknown>;
+    rawBody?: boolean;
+}
+type PrismaClientConstructor<T extends PrismaClientBase = PrismaClientBase> = new (options: PrismaClientConstructorOptions) => T;
+interface YogaPlugin {
+    onExecute?: (args: {
+        args: {
+            document?: unknown;
+            operationName?: string | null;
+            variableValues?: Record<string, unknown>;
+            contextValue?: unknown;
+        };
+    }) => {
+        onExecuteDone: (args: {
+            result: unknown;
+        }) => void;
+    } | undefined | void;
+    onSubscribe?: (args: {
+        args: unknown;
+    }) => void;
+    [key: string]: unknown;
+}
+interface ServerDefinition {
+    config: ServerConfig;
+    prismaClient: PrismaClientConstructor;
+    schema: GraphQLSchema;
+    moduleGraph?: ModuleGraphConfig;
+    restEndpoints?: RESTEndpoint[];
+    yogaPlugins?: YogaPlugin[];
+    buildContext?: (defaultContext: GraphQLContext) => Promise<GraphQLContext> | GraphQLContext;
+    workspaceExtensionConfig?: {
+        strictMode?: boolean;
+        excludeModels?: string[];
+        excludeModelsFromReadIsolation?: string[];
+        allowedUnguardedOperations?: string[];
+        enableReadIsolation?: boolean;
+        enableDeleteIsolation?: boolean;
+        enableUpdateWhereIsolation?: boolean;
+        debug?: boolean;
+    };
+    disableWorkspaceExtension?: boolean;
+    onShutdown?: () => Promise<void>;
+}
+interface BunServerHandle {
+    stop(): void;
+    port: number;
+    hostname: string;
+}
+interface ElysiaLikeServer {
+    server: BunServerHandle | null;
+    listen(options: {
+        port: number;
+        hostname?: string;
+    }): ElysiaLikeServer;
+    use(plugin: unknown): ElysiaLikeServer;
+    all(path: string, handler: (ctx: {
+        request: Request;
+    }) => unknown): ElysiaLikeServer;
+    get(path: string, handler: (ctx: {
+        request: Request;
+        query: Record<string, string | undefined>;
+    }) => unknown): ElysiaLikeServer;
+    post(path: string, handler: (ctx: {
+        request: Request;
+    }) => unknown): ElysiaLikeServer;
+    put(path: string, handler: (ctx: {
+        request: Request;
+    }) => unknown): ElysiaLikeServer;
+    patch(path: string, handler: (ctx: {
+        request: Request;
+    }) => unknown): ElysiaLikeServer;
+    delete(path: string, handler: (ctx: {
+        request: Request;
+    }) => unknown): ElysiaLikeServer;
+}
+type ElysiaApp = ElysiaLikeServer;
+interface ServerInstance {
+    app: ElysiaApp;
+    server: BunServerHandle | null;
+    start: () => Promise<void>;
+    stop: () => Promise<void>;
+    getInfo: () => ServerInfo;
+}
+interface ServerInfo {
+    serviceName: string;
+    serviceVersion: string;
+    environment: string;
+    port: number;
+    host: string;
+    graphqlEndpoint: string;
+    startedAt: string;
+    uptime: number;
+}
+interface JWTPayload {
+    sub: string;
+    actor_type?: string;
+    workspace_id?: string;
+    org_id?: string;
+    tenant_id?: string;
+    iat?: number;
+    exp?: number;
+    [key: string]: unknown;
+}
+interface WorkspaceSecret {
+    kty: string;
+    k: string;
+    alg?: string;
+    [key: string]: unknown;
+}
+
+type FetchWorkspaceSecretFn = (workspaceId: string) => Promise<WorkspaceSecret | null>;
+interface AuthConfig {
+    fetchWorkspaceSecret: FetchWorkspaceSecretFn;
+}
+declare function configureAuth(config: AuthConfig): void;
+declare function fetchWorkspaceSecret(workspaceId: string): Promise<WorkspaceSecret | null>;
+declare function configureDefaultAuth(): void;
+declare function generateSymmetricSecret(): Promise<jose.JWK>;
+declare function verifyJWT(token: string, secret?: string, options?: VerifyOptions): Promise<IActor | null>;
+declare function decodeJWT(token: string): Promise<JWTPayload | null>;
+declare function authCheck(actor: IActor | null): IActor;
+declare function workspaceCheck(context: {
+    actor: IActor | null;
+    workspace: {
+        id: string;
+    } | null;
+}): {
+    actorId: string;
+    workspaceId: string;
+};
+declare function requireWorkspace<T extends {
+    actor: IActor | null;
+    workspace: {
+        id: string;
+    } | null;
+}>(context: T): T & {
+    actor: IActor;
+    workspace: {
+        id: string;
+    };
+};
+declare function orgCheck(context: {
+    actor: IActor | null;
+    organization: {
+        id: string;
+    } | null;
+}): {
+    actorId: string;
+    orgId: string;
+};
+declare function tenantCheck(context: {
+    tenant: {
+        id: string;
+    } | null;
+}): string;
+
+declare function createServer(definition: ServerDefinition): Promise<ServerInstance>;
+declare function configureServerAuth(fetchWorkspaceSecret: FetchWorkspaceSecretFn): void;
+
+interface ContextBuilderOptions {
+    getDb: () => unknown;
+    defaultTenant?: ITenant;
+    i18n?: I18n;
+}
+declare function configureContext(options: ContextBuilderOptions): void;
+declare function buildContext(request: Request): Promise<GraphQLContext>;
+declare function getContextOptions(): ContextBuilderOptions | null;
+
+interface WorkspaceGuardConfig {
+    enabled?: boolean;
+    whitelistedOperations?: string[];
+    errorMessage?: string;
+    allowPublicDirective?: boolean;
+}
+interface FieldLikeDef {
+    astNode?: {
+        directives?: ReadonlyArray<{
+            name: {
+                value: string;
+            };
+            arguments?: ReadonlyArray<{
+                name: {
+                    value: string;
+                };
+                value: {
+                    kind: string;
+                    value?: unknown;
+                };
+            }>;
+        }>;
+    };
+}
+interface SchemaLike {
+    getQueryType?: () => {
+        getFields: () => Record<string, FieldLikeDef>;
+    } | null | undefined;
+    getMutationType?: () => {
+        getFields: () => Record<string, FieldLikeDef>;
+    } | null | undefined;
+    getSubscriptionType?: () => {
+        getFields: () => Record<string, FieldLikeDef>;
+    } | null | undefined;
+}
+interface DocumentLike {
+    definitions?: ReadonlyArray<{
+        kind?: string;
+        operation?: string;
+        name?: {
+            value?: string;
+        };
+        selectionSet?: {
+            selections?: ReadonlyArray<{
+                kind?: string;
+                name?: {
+                    value?: string;
+                };
+            }>;
+        };
+    }>;
+}
+declare function createWorkspaceGuardPlugin(config?: WorkspaceGuardConfig): {
+    onExecute?: undefined;
+} | {
+    onExecute({ args, }: {
+        args: {
+            schema?: SchemaLike;
+            document?: DocumentLike;
+            operationName?: string | null;
+            contextValue?: {
+                workspace?: {
+                    id?: string;
+                };
+                request?: Request;
+            };
+        };
+    }): undefined;
+};
+
+export { type AuthConfig, type ConsentContext, type ContextBuilderOptions, type ElysiaApp, type FetchWorkspaceSecretFn, type GraphQLContext, I18nContext, type IActor, type IContextFilterInput, type IOperationContext, type IOrganization, type IProduct, type IProject, type ITenant, type ITracking, type IWorkspace, type JWTPayload, LocaleCode, type ModuleGraphConfig, PrismaClientBase, type PrismaClientConstructor, type RESTEndpoint, type ServerConfig, type ServerDefinition, type ServerI18nConfig, type ServerInfo, type ServerInstance, type WorkspaceGuardConfig, type WorkspaceSecret, type WspaceGraphQLContext, type YogaPlugin, authCheck, buildContext, configureAuth, configureContext, configureDefaultAuth, configureServerAuth, createServer, createWorkspaceGuardPlugin, decodeJWT, fetchWorkspaceSecret, generateSymmetricSecret, getContextOptions, orgCheck, requireWorkspace, tenantCheck, verifyJWT, workspaceCheck };