@burdenoff/be-sdk 2026.602.2 → 2026.611.1

package/dist/{chunk-OJWJVZY5.js → chunk-BJVXHIUV.js}

@@ -3,6 +3,7 @@ import { LayerManager } from './chunk-GSEPF2B6.js';
 import { DEFAULT_CIRCUIT_BREAKER_CONFIG, DEFAULT_GATEWAY_RETRY_CONFIG } from './chunk-HP6JTFNR.js';
 import { logger } from './chunk-CBZNP6RF.js';
 import { __export, __name } from './chunk-XE4OXN2W.js';
+import jwt from 'jsonwebtoken';
 
 // src/gateway/index.ts
 var gateway_exports = {};
@@ -15,20 +16,10 @@ __export(gateway_exports, {
   createGatewayClient: () => createGatewayClient,
   createGatewayClientFromEnv: () => createGatewayClientFromEnv
 });
-
-// src/gateway/service-jwt.ts
 var SIGNING_ENV_VAR = "SERVICE_JWT_SECRET";
 var KEY_ID = "service-v1";
 var DEFAULT_TTL_SECONDS = 60;
 var REFRESH_BEFORE_EXP_MS = 1e4;
-var joseModule = null;
-async function getJose() {
-  if (!joseModule) {
-    joseModule = await import('jose');
-  }
-  return joseModule;
-}
-__name(getJose, "getJose");
 var cache = /* @__PURE__ */ new Map();
 function cacheKey(actorId, ttlSeconds) {
   return `${actorId}:${ttlSeconds}`;
@@ -44,18 +35,22 @@ async function signServiceJwt(actorId, ttlSeconds = DEFAULT_TTL_SECONDS) {
   if (cached && cached.expiresAtMs - REFRESH_BEFORE_EXP_MS > Date.now()) {
     return cached.token;
   }
-  const joseLib = await getJose();
-  const encoder = new TextEncoder();
-  const keyBytes = encoder.encode(secret);
   const nowSec = Math.floor(Date.now() / 1e3);
   const expSec = nowSec + ttlSeconds;
-  const token = await new joseLib.SignJWT({
-    actor_type: "service"
-  }).setProtectedHeader({
-    alg: "HS256",
-    typ: "JWT",
-    kid: KEY_ID
-  }).setSubject(actorId).setIssuer(actorId).setIssuedAt(nowSec).setExpirationTime(expSec).sign(keyBytes);
+  const token = jwt.sign({
+    actor_type: "service",
+    iat: nowSec,
+    exp: expSec
+  }, secret, {
+    algorithm: "HS256",
+    keyid: KEY_ID,
+    subject: actorId,
+    // `iss` = the service identity that minted the token. Matches `sub`
+    // because these are self-minted tokens (caller is asserting itself).
+    // Gives the gateway room to enforce a minter allowlist later without
+    // a token-format change.
+    issuer: actorId
+  });
   cache.set(key, {
     token,
     expiresAtMs: expSec * 1e3
@@ -556,5 +551,5 @@ function createGatewayClientFromEnv() {
 __name(createGatewayClientFromEnv, "createGatewayClientFromEnv");
 
 export { CircuitState, GatewayClient, GatewayError, GatewayErrorType, createGatewayClient, createGatewayClientFromEnv, gateway_exports };
-//# sourceMappingURL=chunk-OJWJVZY5.js.map
-//# sourceMappingURL=chunk-OJWJVZY5.js.map
+//# sourceMappingURL=chunk-BJVXHIUV.js.map
+//# sourceMappingURL=chunk-BJVXHIUV.js.map

package/dist/chunk-BJVXHIUV.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/gateway/index.ts","../src/gateway/service-jwt.ts","../src/gateway/types.ts","../src/gateway/client.ts"],"names":["SIGNING_ENV_VAR","KEY_ID","DEFAULT_TTL_SECONDS","REFRESH_BEFORE_EXP_MS","cache","Map","cacheKey","actorId","ttlSeconds","signServiceJwt","secret","process","env","key","cached","get","expiresAtMs","Date","now","token","nowSec","Math","floor","expSec","jwt","sign","actor_type","iat","exp","algorithm","keyid","subject","issuer","set","CircuitState","GatewayErrorType","GatewayError","Error","type","gatewayUrl","statusCode","graphqlErrors","cause","message","options","name","Object","setPrototypeOf","prototype","uuidv4","crypto","randomUUID","hasAuthorizationHeader","headers","keys","toLowerCase","resolveBypassPermissionValue","normalizedToken","trim","CircuitBreaker","state","CLOSED","failures","successes","consecutiveFailures","lastFailureTime","lastSuccessTime","openedAt","failureTimestamps","config","getState","checkStateTransition","recordSuccess","HALF_OPEN","logger","info","recordFailure","push","windowStart","failureWindow","filter","t","length","failureThreshold","OPEN","warn","threshold","allowRequest","forceOpen","forceClose","getStats","elapsed","resetTimeout","GatewayClient","layerManager","internalCircuitBreaker","crossLayerCircuitBreaker","retryConfig","defaultHeaders","timeout","enableLogging","LayerManager","layer","serviceName","serviceIdentity","internalGatewayUrl","crossLayerGatewayUrl","cbConfig","DEFAULT_CIRCUIT_BREAKER_CONFIG","circuitBreaker","DEFAULT_GATEWAY_RETRY_CONFIG","retry","getServiceIdentity","debug","internalUrl","getInternalUrl","crossLayerUrl","getCrossLayerUrl","getInternalGatewayUrl","getCrossLayerGatewayUrl","internalQuery","context","createRequestContext","executeWithRetry","bypassPermission","crossLayerQuery","query","getInternalCircuitBreaker","getCrossLayerCircuitBreaker","getHealthStatus","internal","url","circuitState","stats","crossLayer","updateDefaultHeaders","callType","requestId","workspaceId","startTime","shouldRetryError","error","GRAPHQL_ERROR","CIRCUIT_OPEN","calculateRetryDelay","attempt","min","initialDelay","pow","backoffMultiplier","maxDelay","logRetryAttempt","maxAttempts","delay","settings","skipCircuitBreaker","skipRetry","lastError","result","executeRequest","String","sleep","UNKNOWN_ERROR","buildRequestHeaders","value","entries","undefined","toString","handleGraphQLErrors","duration","errors","errorMessages","map","e","join","handleFetchError","TIMEOUT_ERROR","NETWORK_ERROR","serviceActorId","serviceJwt","body","JSON","stringify","variables","operationName","controller","AbortController","timeoutId","setTimeout","abort","response","fetch","method","signal","clearTimeout","ok","status","statusText","json","hasData","data","ms","Promise","resolve","createGatewayClient","createGatewayClientFromEnv"],"mappings":";;;;;;;;AAAA,IAAA,eAAA,GAAA;;;;;;;;;;ACqCA,IAAMA,eAAAA,GAAkB,oBAAA;AACxB,IAAMC,MAAAA,GAAS,YAAA;AACf,IAAMC,mBAAAA,GAAsB,EAAA;AAC5B,IAAMC,qBAAAA,GAAwB,GAAA;AAO9B,IAAMC,KAAAA,uBAAYC,GAAAA,EAAAA;AAElB,SAASC,QAAAA,CAASC,SAAiBC,UAAAA,EAAkB;AACnD,EAAA,OAAO,CAAA,EAAGD,OAAAA,CAAAA,CAAAA,EAAWC,UAAAA,CAAAA,CAAAA;AACvB;AAFSF,MAAAA,CAAAA,QAAAA,EAAAA,UAAAA,CAAAA;AAWT,eAAsBG,cAAAA,CACpBF,OAAAA,EACAC,UAAAA,GAAqBN,mBAAAA,EAAmB;AAExC,EAAA,MAAMQ,MAAAA,GAASC,OAAAA,CAAQC,GAAAA,CAAIZ,eAAAA,CAAAA;AAC3B,EAAA,IAAI,CAACU,MAAAA,EAAQ;AACX,IAAA,OAAO,IAAA;AACT,EAAA;AAEA,EAAA,MAAMG,GAAAA,GAAMP,QAAAA,CAASC,OAAAA,EAASC,UAAAA,CAAAA;AAC9B,EAAA,MAAMM,MAAAA,GAASV,KAAAA,CAAMW,GAAAA,CAAIF,GAAAA,CAAAA;AACzB,EAAA,IAAIC,UAAUA,MAAAA,CAAOE,WAAAA,GAAcb,qBAAAA,GAAwBc,IAAAA,CAAKC,KAAG,EAAI;AACrE,IAAA,OAAOJ,MAAAA,CAAOK,KAAAA;AAChB,EAAA;AAEA,EAAA,MAAMC,SAASC,IAAAA,CAAKC,KAAAA,CAAML,IAAAA,CAAKC,GAAAA,KAAQ,GAAA,CAAA;AACvC,EAAA,MAAMK,SAASH,MAAAA,GAASZ,UAAAA;AAExB,EAAA,MAAMW,KAAAA,GAAQK,IAAIC,IAAAA,CAChB;IACEC,UAAAA,EAAY,SAAA;IACZC,GAAAA,EAAKP,MAAAA;IACLQ,GAAAA,EAAKL;AACP,GAAA,EACAb,MAAAA,EACA;IACEmB,SAAAA,EAAW,OAAA;IACXC,KAAAA,EAAO7B,MAAAA;IACP8B,OAAAA,EAASxB,OAAAA;;;;;IAKTyB,MAAAA,EAAQzB;GACV,CAAA;AAGFH,EAAAA,KAAAA,CAAM6B,IAAIpB,GAAAA,EAAK;AAAEM,IAAAA,KAAAA;AAAOH,IAAAA,WAAAA,EAAaO,MAAAA,GAAS;GAAK,CAAA;AACnD,EAAA,OAAOJ,KAAAA;AACT;AAvCsBV,MAAAA,CAAAA,cAAAA,EAAAA,gBAAAA,CAAAA;;;ACef,IAAKyB,YAAAA,6BAAAA,aAAAA,EAAAA;;;;AAAAA,EAAAA,OAAAA,aAAAA;;AA8ML,IAAKC,gBAAAA,6BAAAA,iBAAAA,EAAAA;;;;;;AAAAA,EAAAA,OAAAA,iBAAAA;;AAWL,IAAMC,YAAAA,GAAN,MAAMA,aAAAA,SAAqBC,KAAAA,CAAAA;EApSlC;;;AAqSEC,EAAAA,IAAAA;AACAC,EAAAA,UAAAA;AACAC,EAAAA,UAAAA;AACAC,EAAAA,aAAAA;AACSC,EAAAA,KAAAA;EAET,WAAA,CACEC,OAAAA,EACAL,IAAAA,EACAC,UAAAA,EACAK,OAAAA,EAKA;AACA,IAAA,KAAA,CAAMD,OAAAA,CAAAA;AACN,IAAA,IAAA,CAAKE,IAAAA,GAAO,cAAA;AACZ,IAAA,IAAA,CAAKP,IAAAA,GAAOA,IAAAA;AACZ,IAAA,IAAA,CAAKC,UAAAA,GAAaA,UAAAA;AAClB,IAAA,IAAA,CAAKC,aAAaI,OAAAA,EAASJ,UAAAA;AAC3B,IAAA,IAAA,CAAKC,gBAAgBG,OAAAA,EAASH,aAAAA;AAC9B,IAAA,IAAA,CAAKC,QAAQE,OAAAA,EAASF,KAAAA;AACtBI,IAAAA,MAAAA,CAAOC,cAAAA,CAAe,IAAA,EAAMX,aAAAA,CAAaY,SAAS,CAAA;AACpD,EAAA;AACF;;;ACtQA,IAAMC,MAAAA,mBAAS,MAAA,CAAA,MAAcC,MAAAA,CAAOC,UAAAA,EAAU,EAA/B,QAAA,CAAA;AASf,SAASC,uBAAuBC,OAAAA,EAA+B;AAC7D,EAAA,KAAA,MAAWxC,GAAAA,IAAOiC,MAAAA,CAAOQ,IAAAA,CAAKD,OAAAA,CAAAA,EAAU;AACtC,IAAA,IAAIxC,GAAAA,CAAI0C,WAAAA,EAAW,KAAO,eAAA,EAAiB,OAAO,IAAA;AACpD,EAAA;AACA,EAAA,OAAO,KAAA;AACT;AALSH,MAAAA,CAAAA,sBAAAA,EAAAA,wBAAAA,CAAAA;AAOF,SAASI,4BAAAA,CACdrC,KAAAA,GAA4BR,OAAAA,CAAQC,GAAAA,CAAI,wBAAA,CAAA,EAAyB;AAEjE,EAAA,MAAM6C,eAAAA,GAAkBtC,OAAOuC,IAAAA,EAAAA;AAE/B,EAAA,IAAI,CAACD,eAAAA,EAAiB;AACpB,IAAA,MAAM,IAAIpB,MAAM,4EAAA,CAAA;AAClB,EAAA;AAEA,EAAA,OAAOoB,eAAAA;AACT;AAVgBD,MAAAA,CAAAA,4BAAAA,EAAAA,8BAAAA,CAAAA;AAehB,IAAMG,cAAAA,GAAN,MAAMA,eAAAA,CAAAA;EAvFN;;;AAwFUC,EAAAA,KAAAA,GAAsB1B,YAAAA,CAAa2B,MAAAA;EACnCC,QAAAA,GAAW,CAAA;EACXC,SAAAA,GAAY,CAAA;EACZC,mBAAAA,GAAsB,CAAA;EACtBC,eAAAA,GAAiC,IAAA;EACjCC,eAAAA,GAAiC,IAAA;EACjCC,QAAAA,GAA0B,IAAA;AAC1BC,EAAAA,iBAAAA,GAA8B,EAAA;AAC9BC,EAAAA,MAAAA;AAER,EAAA,WAAA,CAAYA,MAAAA,EAA8B;AACxC,IAAA,IAAA,CAAKA,MAAAA,GAASA,MAAAA;AAChB,EAAA;EAEAC,QAAAA,GAAyB;AACvB,IAAA,IAAA,CAAKC,oBAAAA,EAAoB;AACzB,IAAA,OAAO,IAAA,CAAKX,KAAAA;AACd,EAAA;EAEAY,aAAAA,GAAsB;AACpB,IAAA,IAAA,CAAKT,SAAAA,EAAAA;AACL,IAAA,IAAA,CAAKC,mBAAAA,GAAsB,CAAA;AAC3B,IAAA,IAAA,CAAKE,eAAAA,GAAkBjD,KAAKC,GAAAA,EAAG;AAE/B,IAAA,IAAI,IAAA,CAAK0C,KAAAA,KAAU1B,YAAAA,CAAauC,SAAAA,EAAW;AACzC,MAAA,IAAA,CAAKb,QAAQ1B,YAAAA,CAAa2B,MAAAA;AAC1B,MAAA,IAAA,CAAKC,QAAAA,GAAW,CAAA;AAChB,MAAA,IAAA,CAAKM,oBAAoB,EAAA;AACzB,MAAA,IAAA,CAAKD,QAAAA,GAAW,IAAA;AAChBO,MAAAA,MAAAA,CAAOC,KAAK,uDAAA,CAAA;AACd,IAAA;AACF,EAAA;EAEAC,aAAAA,GAAsB;AACpB,IAAA,IAAA,CAAKd,QAAAA,EAAAA;AACL,IAAA,IAAA,CAAKE,mBAAAA,EAAAA;AACL,IAAA,IAAA,CAAKC,eAAAA,GAAkBhD,KAAKC,GAAAA,EAAG;AAC/B,IAAA,IAAA,CAAKkD,iBAAAA,CAAkBS,IAAAA,CAAK5D,IAAAA,CAAKC,GAAAA,EAAG,CAAA;AAGpC,IAAA,MAAM4D,WAAAA,GAAc7D,IAAAA,CAAKC,GAAAA,EAAG,GAAK,KAAKmD,MAAAA,CAAOU,aAAAA;AAC7C,IAAA,IAAA,CAAKX,oBAAoB,IAAA,CAAKA,iBAAAA,CAAkBY,OAAO,CAACC,CAAAA,KAAMA,IAAIH,WAAAA,CAAAA;AAGlE,IAAA,IAAI,IAAA,CAAKlB,UAAU1B,YAAAA,CAAa2B,MAAAA,IAAU,KAAKO,iBAAAA,CAAkBc,MAAAA,IAAU,IAAA,CAAKb,MAAAA,CAAOc,gBAAAA,EAAkB;AACvG,MAAA,IAAA,CAAKvB,QAAQ1B,YAAAA,CAAakD,IAAAA;AAC1B,MAAA,IAAA,CAAKjB,QAAAA,GAAWlD,KAAKC,GAAAA,EAAG;AACxBwD,MAAAA,MAAAA,CAAOW,KAAK,iDAAA,EAAmD;AAC7DvB,QAAAA,QAAAA,EAAU,KAAKM,iBAAAA,CAAkBc,MAAAA;AACjCI,QAAAA,SAAAA,EAAW,KAAKjB,MAAAA,CAAOc;OACzB,CAAA;AACF,IAAA;AAGA,IAAA,IAAI,IAAA,CAAKvB,KAAAA,KAAU1B,YAAAA,CAAauC,SAAAA,EAAW;AACzC,MAAA,IAAA,CAAKb,QAAQ1B,YAAAA,CAAakD,IAAAA;AAC1B,MAAA,IAAA,CAAKjB,QAAAA,GAAWlD,KAAKC,GAAAA,EAAG;AACxBwD,MAAAA,MAAAA,CAAOW,KAAK,sDAAA,CAAA;AACd,IAAA;AACF,EAAA;EAEAE,YAAAA,GAAwB;AACtB,IAAA,IAAA,CAAKhB,oBAAAA,EAAoB;AAEzB,IAAA,QAAQ,KAAKX,KAAAA;AACX,MAAA,KAAK1B,YAAAA,CAAa2B,MAAAA;AAChB,QAAA,OAAO,IAAA;AACT,MAAA,KAAK3B,YAAAA,CAAakD,IAAAA;AAChB,QAAA,OAAO,KAAA;AACT,MAAA,KAAKlD,YAAAA,CAAauC,SAAAA;AAEhB,QAAA,OAAO,IAAA;AACT,MAAA;AACE,QAAA,OAAO,IAAA;AACX;AACF,EAAA;EAEAe,SAAAA,GAAkB;AAChB,IAAA,IAAA,CAAK5B,QAAQ1B,YAAAA,CAAakD,IAAAA;AAC1B,IAAA,IAAA,CAAKjB,QAAAA,GAAWlD,KAAKC,GAAAA,EAAG;AACxBwD,IAAAA,MAAAA,CAAOC,KAAK,uCAAA,CAAA;AACd,EAAA;EAEAc,UAAAA,GAAmB;AACjB,IAAA,IAAA,CAAK7B,QAAQ1B,YAAAA,CAAa2B,MAAAA;AAC1B,IAAA,IAAA,CAAKC,QAAAA,GAAW,CAAA;AAChB,IAAA,IAAA,CAAKE,mBAAAA,GAAsB,CAAA;AAC3B,IAAA,IAAA,CAAKI,oBAAoB,EAAA;AACzB,IAAA,IAAA,CAAKD,QAAAA,GAAW,IAAA;AAChBO,IAAAA,MAAAA,CAAOC,KAAK,uCAAA,CAAA;AACd,EAAA;EAEAe,QAAAA,GAAgC;AAC9B,IAAA,OAAO;AACL9B,MAAAA,KAAAA,EAAO,IAAA,CAAKA,KAAAA;AACZE,MAAAA,QAAAA,EAAU,IAAA,CAAKA,QAAAA;AACfC,MAAAA,SAAAA,EAAW,IAAA,CAAKA,SAAAA;AAChBC,MAAAA,mBAAAA,EAAqB,IAAA,CAAKA,mBAAAA;AAC1BC,MAAAA,eAAAA,EAAiB,IAAA,CAAKA,eAAAA;AACtBC,MAAAA,eAAAA,EAAiB,IAAA,CAAKA,eAAAA;AACtBC,MAAAA,QAAAA,EAAU,IAAA,CAAKA;AACjB,KAAA;AACF,EAAA;EAEQI,oBAAAA,GAA6B;AACnC,IAAA,IAAI,IAAA,CAAKX,KAAAA,KAAU1B,YAAAA,CAAakD,IAAAA,IAAQ,KAAKjB,QAAAA,EAAU;AACrD,MAAA,MAAMwB,OAAAA,GAAU1E,IAAAA,CAAKC,GAAAA,EAAG,GAAK,IAAA,CAAKiD,QAAAA;AAClC,MAAA,IAAIwB,OAAAA,IAAW,IAAA,CAAKtB,MAAAA,CAAOuB,YAAAA,EAAc;AACvC,QAAA,IAAA,CAAKhC,QAAQ1B,YAAAA,CAAauC,SAAAA;AAC1BC,QAAAA,MAAAA,CAAOC,KAAK,qDAAA,CAAA;AACd,MAAA;AACF,IAAA;AACF,EAAA;AACF,CAAA;AAKO,IAAMkB,gBAAN,MAAMA;EA9Mb;;;AA+MUxB,EAAAA,MAAAA;AACAyB,EAAAA,YAAAA;AACAC,EAAAA,sBAAAA;AACAC,EAAAA,wBAAAA;AACAC,EAAAA,WAAAA;AACAC,EAAAA,cAAAA;AAER,EAAA,WAAA,CAAY7B,MAAAA,EAA6B;AACvC,IAAA,IAAA,CAAKA,MAAAA,GAAS;MACZ8B,OAAAA,EAAS,GAAA;MACTC,aAAAA,EAAe,IAAA;MACf,GAAG/B;AACL,KAAA;AAGA,IAAA,IAAA,CAAKyB,YAAAA,GAAe,IAAIO,YAAAA,CAAa;AACnCC,MAAAA,KAAAA,EAAOjC,MAAAA,CAAOiC,KAAAA;AACdC,MAAAA,WAAAA,EAAalC,MAAAA,CAAOkC,WAAAA;AACpBC,MAAAA,eAAAA,EAAiBnC,MAAAA,CAAOmC;KAC1B,CAAA;AAGA,IAAA,IAAInC,OAAOoC,kBAAAA,EAAoB;AAG/B,IAAA,IAAIpC,OAAOqC,oBAAAA,EAAsB;AAKjC,IAAA,MAAMC,QAAAA,GAAiC;MACrC,GAAGC,8BAAAA;AACH,MAAA,GAAGvC,MAAAA,CAAOwC;AACZ,KAAA;AACA,IAAA,IAAA,CAAKd,sBAAAA,GAAyB,IAAIpC,cAAAA,CAAegD,QAAAA,CAAAA;AACjD,IAAA,IAAA,CAAKX,wBAAAA,GAA2B,IAAIrC,cAAAA,CAAegD,QAAAA,CAAAA;AAGnD,IAAA,IAAA,CAAKV,WAAAA,GAAc;MACjB,GAAGa,4BAAAA;AACH,MAAA,GAAGzC,MAAAA,CAAO0C;AACZ,KAAA;AAGA,IAAA,IAAA,CAAKb,cAAAA,GAAiB;MACpB,oBAAA,EAAsB,IAAA,CAAKJ,aAAakB,kBAAAA,EAAkB;MAC1D,cAAA,EAAgB,SAAA;AAChB,MAAA,GAAG3C,MAAAA,CAAO6B;AACZ,KAAA;AAEAxB,IAAAA,MAAAA,CAAOuC,MAAM,6BAAA,EAA+B;AAC1CX,MAAAA,KAAAA,EAAOjC,MAAAA,CAAOiC,KAAAA;AACdC,MAAAA,WAAAA,EAAalC,MAAAA,CAAOkC,WAAAA;AACpBW,MAAAA,WAAAA,EAAa,KAAKC,cAAAA,EAAc;AAChCC,MAAAA,aAAAA,EAAe,KAAKC,gBAAAA;KACtB,CAAA;AACF,EAAA;EAEQF,cAAAA,GAAyB;AAC/B,IAAA,OAAO,IAAA,CAAK9C,MAAAA,CAAOoC,kBAAAA,IAAsB,IAAA,CAAKX,aAAawB,qBAAAA,EAAqB;AAClF,EAAA;EAEQD,gBAAAA,GAA2B;AACjC,IAAA,OAAO,IAAA,CAAKhD,MAAAA,CAAOqC,oBAAAA,IAAwB,IAAA,CAAKZ,aAAayB,uBAAAA,EAAuB;AACtF,EAAA;;;;AAKA,EAAA,MAAMC,cAA2B5E,OAAAA,EAA6D;AAC5F,IAAA,MAAM6E,OAAAA,GAAU,IAAA,CAAKC,oBAAAA,CAAqB,UAAA,EAAY9E,OAAAA,CAAAA;AAEtD,IAAA,OAAO,IAAA,CAAK+E,iBAAiB,IAAA,CAAKR,cAAAA,IAAkBvE,OAAAA,EAAS,IAAA,CAAKmD,wBAAwB0B,OAAAA,EAAS;MACjGG,gBAAAA,EAAkB;KACpB,CAAA;AACF,EAAA;;;;AAKA,EAAA,MAAMC,gBAA6BjF,OAAAA,EAA6D;AAC9F,IAAA,MAAM6E,OAAAA,GAAU,IAAA,CAAKC,oBAAAA,CAAqB,aAAA,EAAe9E,OAAAA,CAAAA;AAEzD,IAAA,OAAO,IAAA,CAAK+E,gBAAAA;AACV,MAAA,IAAA,CAAKN,gBAAAA,EAAgB;AACrBzE,MAAAA,OAAAA;MACA,IAAA,CAAKoD,wBAAAA;AACLyB,MAAAA,OAAAA;AACA,MAAA;QAAEG,gBAAAA,EAAkB;AAAM;;;AAE9B,EAAA;;;;EAKA,MAAME,KAAAA,CAAmBvF,YAAoBK,OAAAA,EAA6D;AACxG,IAAA,MAAM6E,OAAAA,GAAU,IAAA,CAAKC,oBAAAA,CAAqB,QAAA,EAAU9E,OAAAA,CAAAA;AAGpD,IAAA,OAAO,KAAK+E,gBAAAA,CAAiBpF,UAAAA,EAAYK,OAAAA,EAAS,IAAA,CAAKmD,wBAAwB0B,OAAAA,EAAS;MACtFG,gBAAAA,EAAkB;KACpB,CAAA;AACF,EAAA;EAEAG,yBAAAA,GAA6C;AAC3C,IAAA,OAAO,IAAA,CAAKhC,sBAAAA;AACd,EAAA;EAEAiC,2BAAAA,GAA+C;AAC7C,IAAA,OAAO,IAAA,CAAKhC,wBAAAA;AACd,EAAA;EAEAiC,eAAAA,GAAuC;AACrC,IAAA,OAAO;MACLC,QAAAA,EAAU;AACRC,QAAAA,GAAAA,EAAK,KAAKhB,cAAAA,EAAc;QACxBiB,YAAAA,EAAc,IAAA,CAAKrC,uBAAuBzB,QAAAA,EAAQ;QAClD+D,KAAAA,EAAO,IAAA,CAAKtC,uBAAuBL,QAAAA;AACrC,OAAA;MACA4C,UAAAA,EAAY;AACVH,QAAAA,GAAAA,EAAK,KAAKd,gBAAAA,EAAgB;QAC1Be,YAAAA,EAAc,IAAA,CAAKpC,yBAAyB1B,QAAAA,EAAQ;QACpD+D,KAAAA,EAAO,IAAA,CAAKrC,yBAAyBN,QAAAA;AACvC;AACF,KAAA;AACF,EAAA;AAEA6C,EAAAA,oBAAAA,CAAqBlF,OAAAA,EAA+C;AAClE,IAAA,IAAA,CAAK6C,cAAAA,GAAiB;AAAE,MAAA,GAAG,IAAA,CAAKA,cAAAA;MAAgB,GAAG7C;AAAQ,KAAA;AAC7D,EAAA;AAEQqE,EAAAA,oBAAAA,CACNc,UACA5F,OAAAA,EACgB;AAChB,IAAA,OAAO;AACL6F,MAAAA,SAAAA,EAAWxF,MAAAA,EAAAA;AACX1C,MAAAA,OAAAA,EAASqC,QAAQS,OAAAA,GAAU,YAAA,CAAA,IAAiB,IAAA,CAAK6C,eAAe,YAAA,CAAA;AAChEwC,MAAAA,WAAAA,EAAa9F,QAAQS,OAAAA,GAAU,gBAAA,CAAA,IAAqB,IAAA,CAAK6C,eAAe,gBAAA,CAAA;AACxEyC,MAAAA,SAAAA,EAAW1H,KAAKC,GAAAA,EAAG;AACnBsH,MAAAA;AACF,KAAA;AACF,EAAA;;;;AAKQI,EAAAA,gBAAAA,CAAiBC,KAAAA,EAAyB;AAChD,IAAA,IAAI,EAAEA,iBAAiBzG,YAAAA,CAAAA,EAAe;AACpC,MAAA,OAAO,IAAA;AACT,IAAA;AAEA,IAAA,OAAOyG,MAAMvG,IAAAA,KAASH,gBAAAA,CAAiB2G,aAAAA,IAAiBD,KAAAA,CAAMvG,SAASH,gBAAAA,CAAiB4G,YAAAA;AAC1F,EAAA;;;;AAKQC,EAAAA,mBAAAA,CAAoBC,OAAAA,EAAyB;AACnD,IAAA,OAAO5H,IAAAA,CAAK6H,GAAAA,CACV,IAAA,CAAKjD,WAAAA,CAAYkD,eAAe9H,IAAAA,CAAK+H,GAAAA,CAAI,IAAA,CAAKnD,WAAAA,CAAYoD,mBAAmBJ,OAAAA,GAAU,CAAA,CAAA,EACvF,IAAA,CAAKhD,YAAYqD,QAAQ,CAAA;AAE7B,EAAA;;;;AAKQC,EAAAA,eAAAA,CACN9B,OAAAA,EACAwB,OAAAA,EACAO,WAAAA,EACAC,KAAAA,EACAZ,KAAAA,EACM;AACN,IAAA,IAAI,IAAA,CAAKxE,OAAO+B,aAAAA,EAAe;AAC7B1B,MAAAA,MAAAA,CAAOW,KAAK,0CAAA,EAA4C;AACtDoD,QAAAA,SAAAA,EAAWhB,OAAAA,CAAQgB,SAAAA;AACnBQ,QAAAA,OAAAA;AACAO,QAAAA,WAAAA;AACAC,QAAAA,KAAAA;AACAZ,QAAAA,KAAAA,EAAOA,KAAAA,CAAMlG;OACf,CAAA;AACF,IAAA;AACF,EAAA;AAEA,EAAA,MAAcgF,gBAAAA,CACZpF,UAAAA,EACAK,OAAAA,EACAiE,cAAAA,EACAY,SACAiC,QAAAA,EAC6B;AAE7B,IAAA,IAAI,CAAC9G,OAAAA,CAAQ+G,kBAAAA,IAAsB,CAAC9C,cAAAA,CAAetB,cAAY,EAAI;AACjE,MAAA,MAAM,IAAInD,YAAAA,CAAa,CAAA,4BAAA,EAA+BG,UAAAA,CAAAA,CAAAA,EAAcJ,gBAAAA,CAAiB4G,cAAcxG,UAAAA,CAAAA;AACrG,IAAA;AAEA,IAAA,MAAMiH,WAAAA,GAAc5G,OAAAA,CAAQgH,SAAAA,GAAY,CAAA,GAAI,KAAK3D,WAAAA,CAAYuD,WAAAA;AAC7D,IAAA,IAAIK,SAAAA,GAA0B,IAAA;AAE9B,IAAA,KAAA,IAASZ,OAAAA,GAAU,CAAA,EAAGA,OAAAA,IAAWO,WAAAA,EAAaP,OAAAA,EAAAA,EAAW;AACvD,MAAA,IAAI;AACF,QAAA,MAAMa,MAAAA,GAAS,MAAM,IAAA,CAAKC,cAAAA,CAAkBxH,YAAYK,OAAAA,EAAS6E,OAAAA,EAASiC,SAAS9B,gBAAgB,CAAA;AACnG,QAAA,IAAI,CAAChF,QAAQ+G,kBAAAA,EAAoB;AAC/B9C,UAAAA,cAAAA,CAAerC,aAAAA,EAAa;AAC9B,QAAA;AACA,QAAA,OAAOsF,MAAAA;AACT,MAAA,CAAA,CAAA,OAASjB,KAAAA,EAAO;AACdgB,QAAAA,SAAAA,GAAYhB,iBAAiBxG,KAAAA,GAAQwG,KAAAA,GAAQ,IAAIxG,KAAAA,CAAM2H,MAAAA,CAAOnB,KAAAA,CAAAA,CAAAA;AAC9D,QAAA,IAAI,CAACjG,QAAQ+G,kBAAAA,EAAoB;AAC/B9C,UAAAA,cAAAA,CAAejC,aAAAA,EAAa;AAC9B,QAAA;AAEA,QAAA,IAAI,CAAC,IAAA,CAAKgE,gBAAAA,CAAiBC,KAAAA,CAAAA,EAAQ;AACjC,UAAA,MAAMA,KAAAA;AACR,QAAA;AAEA,QAAA,IAAII,UAAUO,WAAAA,EAAa;AACzB,UAAA,MAAMC,KAAAA,GAAQ,IAAA,CAAKT,mBAAAA,CAAoBC,OAAAA,CAAAA;AACvC,UAAA,IAAA,CAAKM,eAAAA,CAAgB9B,OAAAA,EAASwB,OAAAA,EAASO,WAAAA,EAAaC,OAAOI,SAAAA,CAAAA;AAC3D,UAAA,MAAM,IAAA,CAAKI,MAAMR,KAAAA,CAAAA;AACnB,QAAA;AACF,MAAA;AACF,IAAA;AAEA,IAAA,MAAMI,aAAa,IAAIzH,YAAAA,CAAa,8BAAA,EAAgCD,gBAAAA,CAAiB+H,eAAe3H,UAAAA,CAAAA;AACtG,EAAA;;;;EAKQ4H,mBAAAA,CACN1C,OAAAA,EACA7E,SACAgF,gBAAAA,EACwB;AACxB,IAAA,MAAMvE,OAAAA,GAAkC;MACtC,cAAA,EAAgB,kBAAA;AAChB,MAAA,cAAA,EAAgBoE,OAAAA,CAAQgB,SAAAA;AACxB,MAAA,aAAA,EAAehB,OAAAA,CAAQe;AACzB,KAAA;AAGA,IAAA,KAAA,MAAW,CAAC3H,KAAKuJ,KAAAA,CAAAA,IAAUtH,OAAOuH,OAAAA,CAAQ,IAAA,CAAKnE,cAAc,CAAA,EAAG;AAC9D,MAAA,IAAIkE,UAAUE,MAAAA,EAAW;AACvBjH,QAAAA,OAAAA,CAAQxC,GAAAA,CAAAA,GAAOmJ,MAAAA,CAAOI,KAAAA,CAAAA;AACxB,MAAA;AACF,IAAA;AAGA,IAAA,IAAIxH,QAAQS,OAAAA,EAAS;AACnB,MAAA,KAAA,MAAW,CAACxC,KAAKuJ,KAAAA,CAAAA,IAAUtH,OAAOuH,OAAAA,CAAQzH,OAAAA,CAAQS,OAAO,CAAA,EAAG;AAC1D,QAAA,IAAI+G,UAAUE,MAAAA,EAAW;AACvBjH,UAAAA,OAAAA,CAAQxC,GAAAA,CAAAA,GAAOmJ,MAAAA,CAAOI,KAAAA,CAAAA;AACxB,QAAA;AACF,MAAA;AACF,IAAA;AAGA,IAAA,IAAIxC,gBAAAA,EAAkB;AACpBvE,MAAAA,OAAAA,CAAQ,qBAAA,IAAyBG,4BAAAA,EAAAA;AACjCH,MAAAA,OAAAA,CAAQ,iBAAA,CAAA,GAAqB,IAAA,CAAKyC,YAAAA,CAAakB,kBAAAA,EAAkB;AACjE3D,MAAAA,OAAAA,CAAQ,oBAAA,CAAA,GAAwBpC,IAAAA,CAAKC,GAAAA,GAAMqJ,QAAAA,EAAQ;AACrD,IAAA;AAEA,IAAA,OAAOlH,OAAAA;AACT,EAAA;;;;EAKQmH,mBAAAA,CACNV,MAAAA,EACArC,OAAAA,EACAlF,UAAAA,EACAkI,QAAAA,EACM;AACN,IAAA,IAAI,CAACX,MAAAA,CAAOY,MAAAA,IAAUZ,MAAAA,CAAOY,MAAAA,CAAOxF,WAAW,CAAA,EAAG;AAChD,MAAA;AACF,IAAA;AAEA,IAAA,MAAMyF,aAAAA,GAAgBb,MAAAA,CAAOY,MAAAA,CAAOE,GAAAA,CAAI,CAACC,MAAoBA,CAAAA,CAAElI,OAAO,CAAA,CAAEmI,IAAAA,CAAK,IAAA,CAAA;AAE7E,IAAA,IAAI,IAAA,CAAKzG,OAAO+B,aAAAA,EAAe;AAC7B1B,MAAAA,MAAAA,CAAOW,KAAK,gCAAA,EAAkC;AAC5CoD,QAAAA,SAAAA,EAAWhB,OAAAA,CAAQgB,SAAAA;AACnBiC,QAAAA,MAAAA,EAAQZ,MAAAA,CAAOY,MAAAA;AACfD,QAAAA;OACF,CAAA;AACF,IAAA;AAEA,IAAA,MAAM,IAAIrI,YAAAA,CAAa,CAAA,eAAA,EAAkBuI,aAAAA,CAAAA,CAAAA,EAAiBxI,gBAAAA,CAAiB2G,eAAevG,UAAAA,EAAY;AACpGE,MAAAA,aAAAA,EAAeqH,MAAAA,CAAOY;KACxB,CAAA;AACF,EAAA;;;;AAKQK,EAAAA,gBAAAA,CACNlC,KAAAA,EACApB,OAAAA,EACAlF,UAAAA,EACA4D,OAAAA,EACAsE,QAAAA,EACO;AACP,IAAA,IAAI5B,iBAAiBzG,YAAAA,EAAc;AACjC,MAAA,MAAMyG,KAAAA;AACR,IAAA;AAEA,IAAA,IAAIA,iBAAiBxG,KAAAA,EAAO;AAC1B,MAAA,IAAIwG,KAAAA,CAAMhG,SAAS,YAAA,EAAc;AAC/B,QAAA,MAAM,IAAIT,YAAAA,CAAa,CAAA,wBAAA,EAA2B+D,OAAAA,CAAAA,EAAAA,CAAAA,EAAahE,gBAAAA,CAAiB6I,eAAezI,UAAAA,EAAY;UACzGG,KAAAA,EAAOmG;SACT,CAAA;AACF,MAAA;AAEA,MAAA,IAAI,IAAA,CAAKxE,OAAO+B,aAAAA,EAAe;AAC7B1B,QAAAA,MAAAA,CAAOmE,MAAM,gCAAA,EAAkC;AAC7CJ,UAAAA,SAAAA,EAAWhB,OAAAA,CAAQgB,SAAAA;AACnBI,UAAAA,KAAAA,EAAOA,KAAAA,CAAMlG,OAAAA;AACb8H,UAAAA;SACF,CAAA;AACF,MAAA;AAEA,MAAA,MAAM,IAAIrI,YAAAA,CAAayG,KAAAA,CAAMlG,OAAAA,EAASR,gBAAAA,CAAiB8I,eAAe1I,UAAAA,EAAY;QAChFG,KAAAA,EAAOmG;OACT,CAAA;AACF,IAAA;AAEA,IAAA,MAAM,IAAIzG,YAAAA,CAAa4H,MAAAA,CAAOnB,KAAAA,CAAAA,EAAQ1G,gBAAAA,CAAiB+H,eAAe3H,UAAAA,CAAAA;AACxE,EAAA;AAEA,EAAA,MAAcwH,cAAAA,CACZxH,UAAAA,EACAK,OAAAA,EACA6E,OAAAA,EACAG,gBAAAA,EAC6B;AAC7B,IAAA,MAAMzB,OAAAA,GAAUvD,OAAAA,CAAQuD,OAAAA,IAAW,IAAA,CAAK9B,OAAO8B,OAAAA,IAAW,GAAA;AAC1D,IAAA,MAAM9C,OAAAA,GAAU,IAAA,CAAK8G,mBAAAA,CAAoB1C,OAAAA,EAAS7E,SAASgF,gBAAAA,CAAAA;AAQ3D,IAAA,IAAIH,QAAQe,QAAAA,KAAa,aAAA,IAAiB,CAACpF,sBAAAA,CAAuBC,OAAAA,CAAAA,EAAU;AAC1E,MAAA,MAAM6H,cAAAA,GAAiB,IAAA,CAAKpF,YAAAA,CAAakB,kBAAAA,EAAkB;AAC3D,MAAA,MAAMmE,UAAAA,GAAa,MAAM1K,cAAAA,CAAeyK,cAAAA,CAAAA;AACxC,MAAA,IAAIC,UAAAA,EAAY;AACd9H,QAAAA,OAAAA,CAAQ,eAAA,CAAA,GAAmB,CAAA,OAAA,EAAU8H,UAAAA,CAAAA,CAAAA;MACvC,CAAA,MAAA,IAAW,IAAA,CAAK9G,OAAO+B,aAAAA,EAAe;AAKpC1B,QAAAA,MAAAA,CAAOuC,MACL,4GAAA,EACA;AAAEwB,UAAAA,SAAAA,EAAWhB,OAAAA,CAAQgB,SAAAA;AAAWlG,UAAAA;SAAW,CAAA;AAE/C,MAAA;AACF,IAAA;AAEA,IAAA,MAAM6I,IAAAA,GAAOC,KAAKC,SAAAA,CAAU;AAC1BxD,MAAAA,KAAAA,EAAOlF,OAAAA,CAAQkF,KAAAA;MACfyD,SAAAA,EAAW3I,OAAAA,CAAQ2I,aAAa,EAAC;AACjCC,MAAAA,aAAAA,EAAe5I,OAAAA,CAAQ4I;KACzB,CAAA;AAEA,IAAA,IAAI,IAAA,CAAKnH,OAAO+B,aAAAA,EAAe;AAC7B1B,MAAAA,MAAAA,CAAOuC,MAAM,mCAAA,EAAqC;AAChDwB,QAAAA,SAAAA,EAAWhB,OAAAA,CAAQgB,SAAAA;AACnBlG,QAAAA,UAAAA;AACAiJ,QAAAA,aAAAA,EAAe5I,OAAAA,CAAQ4I,aAAAA;AACvBhD,QAAAA,QAAAA,EAAUf,OAAAA,CAAQe,QAAAA;AAClBZ,QAAAA;OACF,CAAA;AACF,IAAA;AAEA,IAAA,IAAI;AACF,MAAA,MAAM6D,UAAAA,GAAa,IAAIC,eAAAA,EAAAA;AACvB,MAAA,MAAMC,YAAYC,UAAAA,CAAW,MAAMH,UAAAA,CAAWI,KAAAA,IAAS1F,OAAAA,CAAAA;AAEvD,MAAA,MAAM2F,QAAAA,GAAW,MAAMC,KAAAA,CAAMxJ,UAAAA,EAAY;QACvCyJ,MAAAA,EAAQ,MAAA;AACR3I,QAAAA,OAAAA;AACA+H,QAAAA,IAAAA;AACAa,QAAAA,MAAAA,EAAQR,UAAAA,CAAWQ;OACrB,CAAA;AAEAC,MAAAA,YAAAA,CAAaP,SAAAA,CAAAA;AACb,MAAA,MAAMlB,QAAAA,GAAWxJ,IAAAA,CAAKC,GAAAA,EAAG,GAAKuG,OAAAA,CAAQkB,SAAAA;AAEtC,MAAA,IAAI,CAACmD,SAASK,EAAAA,EAAI;AAChB,QAAA,MAAM,IAAI/J,YAAAA,CACR,CAAA,KAAA,EAAQ0J,QAAAA,CAASM,MAAM,CAAA,EAAA,EAAKN,QAAAA,CAASO,UAAU,CAAA,CAAA,EAC/ClK,gBAAAA,CAAiB8I,aAAAA,EACjB1I,UAAAA,EACA;AAAEC,UAAAA,UAAAA,EAAYsJ,QAAAA,CAASM;SAAO,CAAA;AAElC,MAAA;AAEA,MAAA,MAAMtC,MAAAA,GAAU,MAAMgC,QAAAA,CAASQ,IAAAA,EAAI;AACnC,MAAA,IAAA,CAAK9B,mBAAAA,CAAoBV,MAAAA,EAAQrC,OAAAA,EAASlF,UAAAA,EAAYkI,QAAAA,CAAAA;AAEtD,MAAA,IAAI,IAAA,CAAKpG,OAAO+B,aAAAA,EAAe;AAC7B1B,QAAAA,MAAAA,CAAOuC,MAAM,mCAAA,EAAqC;AAChDwB,UAAAA,SAAAA,EAAWhB,OAAAA,CAAQgB,SAAAA;AACnBgC,UAAAA,QAAAA;UACA8B,OAAAA,EAAS,CAAC,CAACzC,MAAAA,CAAO0C;SACpB,CAAA;AACF,MAAA;AAEA,MAAA,OAAO1C,MAAAA;AACT,IAAA,CAAA,CAAA,OAASjB,KAAAA,EAAO;AACd,MAAA,MAAM4B,QAAAA,GAAWxJ,IAAAA,CAAKC,GAAAA,EAAG,GAAKuG,OAAAA,CAAQkB,SAAAA;AACtC,MAAA,IAAA,CAAKoC,gBAAAA,CAAiBlC,KAAAA,EAAOpB,OAAAA,EAASlF,UAAAA,EAAY4D,SAASsE,QAAAA,CAAAA;AAC7D,IAAA;AACF,EAAA;AAEQR,EAAAA,KAAAA,CAAMwC,EAAAA,EAA2B;AACvC,IAAA,OAAO,IAAIC,OAAAA,CAAQ,CAACC,YAAYf,UAAAA,CAAWe,OAAAA,EAASF,EAAAA,CAAAA,CAAAA;AACtD,EAAA;AACF;AAKO,SAASG,oBAAoBvI,MAAAA,EAA2B;AAC7D,EAAA,OAAO,IAAIwB,cAAcxB,MAAAA,CAAAA;AAC3B;AAFgBuI,MAAAA,CAAAA,mBAAAA,EAAAA,qBAAAA,CAAAA;AAgBT,SAASC,0BAAAA,GAAAA;AACd,EAAA,MAAMvG,KAAAA,GAAQ3F,OAAAA,CAAQC,GAAAA,CAAI,eAAA,CAAA;AAE1B,EAAA,IAAI,CAAC0F,KAAAA,IAAUA,KAAAA,KAAU,QAAA,IAAYA,UAAU,QAAA,EAAW;AACxD,IAAA,MAAM,IAAIjE,KAAAA,CAAM,CAAA,sFAAA,EAAyFiE,KAAAA,CAAAA,CAAAA,CAAQ,CAAA;AACnH,EAAA;AAEA,EAAA,MAAMC,WAAAA,GAAc5F,OAAAA,CAAQC,GAAAA,CAAI,cAAA,CAAA;AAChC,EAAA,IAAI,CAAC2F,WAAAA,EAAa;AAChB,IAAA,MAAM,IAAIlE,MAAM,+DAAA,CAAA;AAClB,EAAA;AAEA,EAAA,MAAMmE,eAAAA,GAAkB7F,OAAAA,CAAQC,GAAAA,CAAI,kBAAA,CAAA,IAAuB2F,WAAAA;AAE3D,EAAA,OAAO,IAAIV,aAAAA,CAAc;AACvBS,IAAAA,KAAAA;AACAC,IAAAA,WAAAA;AACAC,IAAAA;GACF,CAAA;AACF;AAnBgBqG,MAAAA,CAAAA,0BAAAA,EAAAA,4BAAAA,CAAAA","file":"chunk-BJVXHIUV.js","sourcesContent":["/**\n * Gateway Module\n *\n * Provides unified gateway client for layer-aware M2M communication\n * with circuit breaker and retry logic.\n *\n * @module gateway\n * @category Gateway\n *\n * @example\n * ```typescript\n * import { GatewayClient, createGatewayClientFromEnv } from '@burdenoff/be-sdk/gateway';\n *\n * // Create from environment variables\n * const client = createGatewayClientFromEnv();\n *\n * // Or create manually\n * const client = new GatewayClient({\n *   layer: 'wspace',\n *   serviceName: 'wspace-tags-svc',\n * });\n *\n * // Internal call (same layer, uses int-gateway with bypass)\n * const internalResult = await client.internalQuery({\n *   query: `query { getTag(id: \"123\") { id name } }`,\n * });\n *\n * // Cross-layer call (via public gateway)\n * const crossLayerResult = await client.crossLayerQuery({\n *   query: `query { getCurrentUser { id email } }`,\n * });\n * ```\n */\n\n// Client exports\nexport { GatewayClient, createGatewayClient, createGatewayClientFromEnv } from './client.js';\n\n// Type exports\nexport {\n  CircuitState,\n  GatewayErrorType,\n  GatewayError,\n  type GatewayClientConfig,\n  type GraphQLRequestOptions,\n  type GraphQLResponse,\n  type GraphQLError,\n  type IGatewayClient,\n  type ICircuitBreaker,\n  type CircuitBreakerStats,\n  type GatewayClientHealth,\n  type RequestContext,\n} from './types.js';\n\n// Gateway-side security plugin stack (for public gateways).\n// Imported by consumers as `@burdenoff/be-sdk/gateway/security` — this\n// re-export lets `@burdenoff/be-sdk/gateway` also resolve the namespace.\nexport * as Security from './security/index.js';\n","/**\n * Service JWT minting + caching for M2M cross-layer calls.\n *\n * The public gateways (global-public-gateway, wspace-public-gateway) validate\n * every incoming request's Authorization header and only propagate `x-actor-*`\n * context headers to subgraphs when the JWT is valid. Without a JWT, raw\n * actor headers are stripped as potential client spoofing. For service-to-\n * service cross-layer calls there is no user JWT to forward — we mint a short-\n * lived service JWT with `actor_type: 'service'` so the gateway admits the\n * call and the subgraph sees a trusted service context.\n *\n * Signing key: SERVICE_JWT_SECRET — a dedicated, separate secret from\n * GLOBAL_AUTH_SECRET (which signs user tokens). Keeping them distinct means a\n * service minter that leaks its env cannot forge user logins. The gateways\n * hold both secrets and pick between them by the JWT's `kid` header\n * (this minter stamps `kid: service-v1`).\n *\n * Signing library: `jsonwebtoken` — the same library global-auth-svc and every\n * auth strategy already use to sign/verify tokens. Standardizing on it means a\n * cross-layer service caller doesn't have to additionally pull in `jose` just\n * to mint a token (a missing optional `jose` peer dep silently broke all\n * cross-layer workspace sync — see BOFF-2717). The output is a standard HS256\n * compact JWS, so the gateways keep verifying it with `jose.jwtVerify`\n * unchanged: sign and verify are wire-compatible across the two libraries.\n */\nimport jwt from 'jsonwebtoken';\n\n/**\n * Dedicated secret for service-minted JWTs.\n *\n * Deliberately separate from `GLOBAL_AUTH_SECRET` (which signs user tokens)\n * so that services that mint service JWTs do not also hold the ability to\n * forge user logins. Blast radius of a leaked secret stays scoped to 60s\n * service tokens with no PII.\n *\n * Gateways hold both secrets and select by the JWT's `kid` header.\n */\nconst SIGNING_ENV_VAR = 'SERVICE_JWT_SECRET';\nconst KEY_ID = 'service-v1';\nconst DEFAULT_TTL_SECONDS = 60;\nconst REFRESH_BEFORE_EXP_MS = 10_000;\n\ninterface CachedToken {\n  token: string;\n  expiresAtMs: number;\n}\n\nconst cache = new Map<string, CachedToken>();\n\nfunction cacheKey(actorId: string, ttlSeconds: number): string {\n  return `${actorId}:${ttlSeconds}`;\n}\n\n/**\n * Sign a service-actor JWT.\n * Returns null when no signing secret is configured (opt-in).\n *\n * Stays `async` (signing is synchronous with `jsonwebtoken`) so existing\n * `await signServiceJwt(...)` callers are unaffected.\n */\nexport async function signServiceJwt(\n  actorId: string,\n  ttlSeconds: number = DEFAULT_TTL_SECONDS\n): Promise<string | null> {\n  const secret = process.env[SIGNING_ENV_VAR];\n  if (!secret) {\n    return null;\n  }\n\n  const key = cacheKey(actorId, ttlSeconds);\n  const cached = cache.get(key);\n  if (cached && cached.expiresAtMs - REFRESH_BEFORE_EXP_MS > Date.now()) {\n    return cached.token;\n  }\n\n  const nowSec = Math.floor(Date.now() / 1000);\n  const expSec = nowSec + ttlSeconds;\n\n  const token = jwt.sign(\n    {\n      actor_type: 'service',\n      iat: nowSec,\n      exp: expSec,\n    },\n    secret,\n    {\n      algorithm: 'HS256',\n      keyid: KEY_ID,\n      subject: actorId,\n      // `iss` = the service identity that minted the token. Matches `sub`\n      // because these are self-minted tokens (caller is asserting itself).\n      // Gives the gateway room to enforce a minter allowlist later without\n      // a token-format change.\n      issuer: actorId,\n    }\n  );\n\n  cache.set(key, { token, expiresAtMs: expSec * 1000 });\n  return token;\n}\n\n/** Test hook to clear the cache between tests. */\nexport function __clearServiceJwtCache(): void {\n  cache.clear();\n}\n","/**\n * Gateway Client Types\n *\n * Type definitions for the unified gateway client with\n * circuit breaker and retry logic.\n *\n * @module gateway/types\n * @category Gateway\n */\n\nimport type { ServiceLayer, CircuitBreakerConfig, GatewayRetryConfig, GatewayRequestHeaders } from '../types/layer.js';\n\n/**\n * Gateway client configuration\n */\nexport interface GatewayClientConfig {\n  /**\n   * Layer this client belongs to\n   */\n  layer: ServiceLayer;\n\n  /**\n   * Service name (for logging and headers)\n   */\n  serviceName: string;\n\n  /**\n   * Service identity for bypass headers\n   * @default serviceName\n   */\n  serviceIdentity?: string;\n\n  /**\n   * Internal gateway URL (same layer M2M)\n   * @default Resolved from layer defaults or environment\n   */\n  internalGatewayUrl?: string;\n\n  /**\n   * Cross-layer gateway URL (cross layer via public gateway)\n   * @default Resolved from layer defaults or environment\n   */\n  crossLayerGatewayUrl?: string;\n\n  /**\n   * Request timeout in milliseconds\n   * @default 30000 (30 seconds)\n   */\n  timeout?: number;\n\n  /**\n   * Circuit breaker configuration\n   */\n  circuitBreaker?: Partial<CircuitBreakerConfig>;\n\n  /**\n   * Retry configuration\n   */\n  retry?: Partial<GatewayRetryConfig>;\n\n  /**\n   * Enable request logging\n   * @default true\n   */\n  enableLogging?: boolean;\n\n  /**\n   * Default headers to include in all requests\n   */\n  defaultHeaders?: GatewayRequestHeaders;\n}\n\n/**\n * Circuit breaker states\n */\nexport enum CircuitState {\n  CLOSED = 'CLOSED',\n  OPEN = 'OPEN',\n  HALF_OPEN = 'HALF_OPEN',\n}\n\n/**\n * Circuit breaker instance interface\n */\nexport interface ICircuitBreaker {\n  /**\n   * Get current circuit state\n   */\n  getState(): CircuitState;\n\n  /**\n   * Record a successful call\n   */\n  recordSuccess(): void;\n\n  /**\n   * Record a failed call\n   */\n  recordFailure(): void;\n\n  /**\n   * Check if circuit allows calls\n   */\n  allowRequest(): boolean;\n\n  /**\n   * Force open the circuit\n   */\n  forceOpen(): void;\n\n  /**\n   * Force close the circuit\n   */\n  forceClose(): void;\n\n  /**\n   * Get circuit statistics\n   */\n  getStats(): CircuitBreakerStats;\n}\n\n/**\n * Circuit breaker statistics\n */\nexport interface CircuitBreakerStats {\n  state: CircuitState;\n  failures: number;\n  successes: number;\n  consecutiveFailures: number;\n  lastFailureTime: number | null;\n  lastSuccessTime: number | null;\n  openedAt: number | null;\n}\n\n/**\n * GraphQL request options\n */\nexport interface GraphQLRequestOptions {\n  /**\n   * GraphQL query or mutation string\n   */\n  query: string;\n\n  /**\n   * GraphQL variables\n   */\n  variables?: Record<string, unknown>;\n\n  /**\n   * Operation name (for multi-operation documents)\n   */\n  operationName?: string;\n\n  /**\n   * Additional headers for this request\n   */\n  headers?: GatewayRequestHeaders;\n\n  /**\n   * Override timeout for this request\n   */\n  timeout?: number;\n\n  /**\n   * Skip circuit breaker for this request\n   * @default false\n   */\n  skipCircuitBreaker?: boolean;\n\n  /**\n   * Skip retry logic for this request\n   * @default false\n   */\n  skipRetry?: boolean;\n}\n\n/**\n * GraphQL response\n */\nexport interface GraphQLResponse<T = unknown> {\n  /**\n   * Response data\n   */\n  data?: T;\n\n  /**\n   * GraphQL errors\n   */\n  errors?: GraphQLError[];\n}\n\n/**\n * GraphQL error structure\n */\nexport interface GraphQLError {\n  message: string;\n  locations?: Array<{ line: number; column: number }>;\n  path?: Array<string | number>;\n  extensions?: Record<string, unknown>;\n}\n\n/**\n * Gateway client interface\n */\nexport interface IGatewayClient {\n  /**\n   * Execute internal (same layer) GraphQL query/mutation\n   *\n   * Uses internal gateway with bypass headers for M2M communication.\n   *\n   * @param options - Request options\n   * @returns GraphQL response\n   */\n  internalQuery<T = unknown>(options: GraphQLRequestOptions): Promise<GraphQLResponse<T>>;\n\n  /**\n   * Execute cross-layer GraphQL query/mutation\n   *\n   * Uses public gateway for cross-layer communication.\n   *\n   * @param options - Request options\n   * @returns GraphQL response\n   */\n  crossLayerQuery<T = unknown>(options: GraphQLRequestOptions): Promise<GraphQLResponse<T>>;\n\n  /**\n   * Execute GraphQL query/mutation with explicit gateway URL\n   *\n   * @param gatewayUrl - Gateway URL to use\n   * @param options - Request options\n   * @returns GraphQL response\n   */\n  query<T = unknown>(gatewayUrl: string, options: GraphQLRequestOptions): Promise<GraphQLResponse<T>>;\n\n  /**\n   * Get internal gateway circuit breaker\n   */\n  getInternalCircuitBreaker(): ICircuitBreaker;\n\n  /**\n   * Get cross-layer gateway circuit breaker\n   */\n  getCrossLayerCircuitBreaker(): ICircuitBreaker;\n\n  /**\n   * Get client health status\n   */\n  getHealthStatus(): GatewayClientHealth;\n\n  /**\n   * Update default headers\n   */\n  updateDefaultHeaders(headers: Partial<GatewayRequestHeaders>): void;\n}\n\n/**\n * Gateway client health status\n */\nexport interface GatewayClientHealth {\n  /**\n   * Internal gateway status\n   */\n  internal: {\n    url: string;\n    circuitState: CircuitState;\n    stats: CircuitBreakerStats;\n  };\n\n  /**\n   * Cross-layer gateway status\n   */\n  crossLayer: {\n    url: string;\n    circuitState: CircuitState;\n    stats: CircuitBreakerStats;\n  };\n}\n\n/**\n * Gateway error types\n */\nexport enum GatewayErrorType {\n  NETWORK_ERROR = 'NETWORK_ERROR',\n  TIMEOUT_ERROR = 'TIMEOUT_ERROR',\n  CIRCUIT_OPEN = 'CIRCUIT_OPEN',\n  GRAPHQL_ERROR = 'GRAPHQL_ERROR',\n  UNKNOWN_ERROR = 'UNKNOWN_ERROR',\n}\n\n/**\n * Gateway error class\n */\nexport class GatewayError extends Error {\n  type: GatewayErrorType;\n  gatewayUrl: string;\n  statusCode?: number;\n  graphqlErrors?: GraphQLError[];\n  override cause?: Error;\n\n  constructor(\n    message: string,\n    type: GatewayErrorType,\n    gatewayUrl: string,\n    options?: {\n      statusCode?: number;\n      graphqlErrors?: GraphQLError[];\n      cause?: Error;\n    }\n  ) {\n    super(message);\n    this.name = 'GatewayError';\n    this.type = type;\n    this.gatewayUrl = gatewayUrl;\n    this.statusCode = options?.statusCode;\n    this.graphqlErrors = options?.graphqlErrors;\n    this.cause = options?.cause;\n    Object.setPrototypeOf(this, GatewayError.prototype);\n  }\n}\n\n/**\n * Request context for logging and tracing\n */\nexport interface RequestContext {\n  /**\n   * Request ID for tracing\n   */\n  requestId: string;\n\n  /**\n   * Actor ID making the request\n   */\n  actorId?: string;\n\n  /**\n   * Workspace ID context\n   */\n  workspaceId?: string;\n\n  /**\n   * Timestamp when request started\n   */\n  startTime: number;\n\n  /**\n   * Call type\n   */\n  callType: 'internal' | 'cross-layer' | 'direct';\n}\n","/**\n * Unified Gateway Client\n *\n * Provides a layer-aware GraphQL client with circuit breaker,\n * retry logic, and automatic header management for M2M communication.\n *\n * @module gateway/client\n * @category Gateway\n *\n * @example\n * ```typescript\n * import { GatewayClient } from '@burdenoff/be-sdk/gateway';\n *\n * const client = new GatewayClient({\n *   layer: 'wspace',\n *   serviceName: 'wspace-tags-svc',\n * });\n *\n * // Internal call (same layer)\n * const result = await client.internalQuery({\n *   query: `query { getTag(id: \"123\") { id name } }`,\n * });\n *\n * // Cross-layer call\n * const authResult = await client.crossLayerQuery({\n *   query: `query { getCurrentUser { id email } }`,\n * });\n * ```\n */\n\nimport { LayerManager } from '../layer/index.js';\nimport { logger } from '../logger/index.js';\nimport { signServiceJwt } from './service-jwt.js';\nimport {\n  DEFAULT_CIRCUIT_BREAKER_CONFIG,\n  DEFAULT_GATEWAY_RETRY_CONFIG,\n  type CircuitBreakerConfig,\n  type GatewayRequestHeaders,\n  type GatewayRetryConfig,\n  type ServiceLayer,\n} from '../types/layer.js';\nimport {\n  CircuitState,\n  GatewayError,\n  GatewayErrorType,\n  type CircuitBreakerStats,\n  type GatewayClientConfig,\n  type GatewayClientHealth,\n  type GraphQLError,\n  type GraphQLRequestOptions,\n  type GraphQLResponse,\n  type ICircuitBreaker,\n  type IGatewayClient,\n  type RequestContext,\n} from './types.js';\n\nconst uuidv4 = (): string => crypto.randomUUID();\n\n/**\n * Case-insensitive presence check for the `Authorization` header. HTTP header\n * names are case-insensitive (RFC 7230), and while the outbound `fetch` will\n * preserve whatever casing the caller supplies, callers may legitimately set\n * `authorization` / `Authorization` / even `AUTHORIZATION` via defaultHeaders\n * or options.headers. We must not overwrite an already-supplied token.\n */\nfunction hasAuthorizationHeader(headers: Record<string, string>): boolean {\n  for (const key of Object.keys(headers)) {\n    if (key.toLowerCase() === 'authorization') return true;\n  }\n  return false;\n}\n\nexport function resolveBypassPermissionValue(\n  token: string | undefined = process.env['INTERNAL_SERVICE_TOKEN']\n): string {\n  const normalizedToken = token?.trim();\n\n  if (!normalizedToken) {\n    throw new Error('INTERNAL_SERVICE_TOKEN must be configured for bypass-enabled gateway calls');\n  }\n\n  return normalizedToken;\n}\n\n/**\n * Circuit Breaker Implementation\n */\nclass CircuitBreaker implements ICircuitBreaker {\n  private state: CircuitState = CircuitState.CLOSED;\n  private failures = 0;\n  private successes = 0;\n  private consecutiveFailures = 0;\n  private lastFailureTime: number | null = null;\n  private lastSuccessTime: number | null = null;\n  private openedAt: number | null = null;\n  private failureTimestamps: number[] = [];\n  private config: CircuitBreakerConfig;\n\n  constructor(config: CircuitBreakerConfig) {\n    this.config = config;\n  }\n\n  getState(): CircuitState {\n    this.checkStateTransition();\n    return this.state;\n  }\n\n  recordSuccess(): void {\n    this.successes++;\n    this.consecutiveFailures = 0;\n    this.lastSuccessTime = Date.now();\n\n    if (this.state === CircuitState.HALF_OPEN) {\n      this.state = CircuitState.CLOSED;\n      this.failures = 0;\n      this.failureTimestamps = [];\n      this.openedAt = null;\n      logger.info('[CircuitBreaker] Circuit closed after successful test');\n    }\n  }\n\n  recordFailure(): void {\n    this.failures++;\n    this.consecutiveFailures++;\n    this.lastFailureTime = Date.now();\n    this.failureTimestamps.push(Date.now());\n\n    // Clean up old timestamps\n    const windowStart = Date.now() - this.config.failureWindow;\n    this.failureTimestamps = this.failureTimestamps.filter((t) => t > windowStart);\n\n    // Check if we should open the circuit\n    if (this.state === CircuitState.CLOSED && this.failureTimestamps.length >= this.config.failureThreshold) {\n      this.state = CircuitState.OPEN;\n      this.openedAt = Date.now();\n      logger.warn('[CircuitBreaker] Circuit opened due to failures', {\n        failures: this.failureTimestamps.length,\n        threshold: this.config.failureThreshold,\n      });\n    }\n\n    // If we're half-open and fail, go back to open\n    if (this.state === CircuitState.HALF_OPEN) {\n      this.state = CircuitState.OPEN;\n      this.openedAt = Date.now();\n      logger.warn('[CircuitBreaker] Circuit re-opened after failed test');\n    }\n  }\n\n  allowRequest(): boolean {\n    this.checkStateTransition();\n\n    switch (this.state) {\n      case CircuitState.CLOSED:\n        return true;\n      case CircuitState.OPEN:\n        return false;\n      case CircuitState.HALF_OPEN:\n        // Allow one test request\n        return true;\n      default:\n        return true;\n    }\n  }\n\n  forceOpen(): void {\n    this.state = CircuitState.OPEN;\n    this.openedAt = Date.now();\n    logger.info('[CircuitBreaker] Circuit force-opened');\n  }\n\n  forceClose(): void {\n    this.state = CircuitState.CLOSED;\n    this.failures = 0;\n    this.consecutiveFailures = 0;\n    this.failureTimestamps = [];\n    this.openedAt = null;\n    logger.info('[CircuitBreaker] Circuit force-closed');\n  }\n\n  getStats(): CircuitBreakerStats {\n    return {\n      state: this.state,\n      failures: this.failures,\n      successes: this.successes,\n      consecutiveFailures: this.consecutiveFailures,\n      lastFailureTime: this.lastFailureTime,\n      lastSuccessTime: this.lastSuccessTime,\n      openedAt: this.openedAt,\n    };\n  }\n\n  private checkStateTransition(): void {\n    if (this.state === CircuitState.OPEN && this.openedAt) {\n      const elapsed = Date.now() - this.openedAt;\n      if (elapsed >= this.config.resetTimeout) {\n        this.state = CircuitState.HALF_OPEN;\n        logger.info('[CircuitBreaker] Circuit transitioning to half-open');\n      }\n    }\n  }\n}\n\n/**\n * Unified Gateway Client\n */\nexport class GatewayClient implements IGatewayClient {\n  private config: GatewayClientConfig;\n  private layerManager: LayerManager;\n  private internalCircuitBreaker: CircuitBreaker;\n  private crossLayerCircuitBreaker: CircuitBreaker;\n  private retryConfig: GatewayRetryConfig;\n  private defaultHeaders: GatewayRequestHeaders;\n\n  constructor(config: GatewayClientConfig) {\n    this.config = {\n      timeout: 30000,\n      enableLogging: true,\n      ...config,\n    };\n\n    // Initialize layer manager\n    this.layerManager = new LayerManager({\n      layer: config.layer,\n      serviceName: config.serviceName,\n      serviceIdentity: config.serviceIdentity,\n    });\n\n    // Override URLs if provided\n    if (config.internalGatewayUrl) {\n      // Use getter internally, but we'll store the override\n    }\n    if (config.crossLayerGatewayUrl) {\n      // Use getter internally, but we'll store the override\n    }\n\n    // Initialize circuit breakers\n    const cbConfig: CircuitBreakerConfig = {\n      ...DEFAULT_CIRCUIT_BREAKER_CONFIG,\n      ...config.circuitBreaker,\n    };\n    this.internalCircuitBreaker = new CircuitBreaker(cbConfig);\n    this.crossLayerCircuitBreaker = new CircuitBreaker(cbConfig);\n\n    // Initialize retry config\n    this.retryConfig = {\n      ...DEFAULT_GATEWAY_RETRY_CONFIG,\n      ...config.retry,\n    };\n\n    // Initialize default headers\n    this.defaultHeaders = {\n      'x-service-identity': this.layerManager.getServiceIdentity(),\n      'x-actor-type': 'service',\n      ...config.defaultHeaders,\n    };\n\n    logger.debug('[GatewayClient] Initialized', {\n      layer: config.layer,\n      serviceName: config.serviceName,\n      internalUrl: this.getInternalUrl(),\n      crossLayerUrl: this.getCrossLayerUrl(),\n    });\n  }\n\n  private getInternalUrl(): string {\n    return this.config.internalGatewayUrl || this.layerManager.getInternalGatewayUrl();\n  }\n\n  private getCrossLayerUrl(): string {\n    return this.config.crossLayerGatewayUrl || this.layerManager.getCrossLayerGatewayUrl();\n  }\n\n  /**\n   * Execute internal (same layer) GraphQL query/mutation\n   */\n  async internalQuery<T = unknown>(options: GraphQLRequestOptions): Promise<GraphQLResponse<T>> {\n    const context = this.createRequestContext('internal', options);\n\n    return this.executeWithRetry(this.getInternalUrl(), options, this.internalCircuitBreaker, context, {\n      bypassPermission: true,\n    });\n  }\n\n  /**\n   * Execute cross-layer GraphQL query/mutation\n   */\n  async crossLayerQuery<T = unknown>(options: GraphQLRequestOptions): Promise<GraphQLResponse<T>> {\n    const context = this.createRequestContext('cross-layer', options);\n\n    return this.executeWithRetry(\n      this.getCrossLayerUrl(),\n      options,\n      this.crossLayerCircuitBreaker,\n      context,\n      { bypassPermission: false } // Cross-layer calls go through public gateway\n    );\n  }\n\n  /**\n   * Execute GraphQL query/mutation with explicit gateway URL\n   */\n  async query<T = unknown>(gatewayUrl: string, options: GraphQLRequestOptions): Promise<GraphQLResponse<T>> {\n    const context = this.createRequestContext('direct', options);\n\n    // Use internal circuit breaker for direct calls\n    return this.executeWithRetry(gatewayUrl, options, this.internalCircuitBreaker, context, {\n      bypassPermission: false,\n    });\n  }\n\n  getInternalCircuitBreaker(): ICircuitBreaker {\n    return this.internalCircuitBreaker;\n  }\n\n  getCrossLayerCircuitBreaker(): ICircuitBreaker {\n    return this.crossLayerCircuitBreaker;\n  }\n\n  getHealthStatus(): GatewayClientHealth {\n    return {\n      internal: {\n        url: this.getInternalUrl(),\n        circuitState: this.internalCircuitBreaker.getState(),\n        stats: this.internalCircuitBreaker.getStats(),\n      },\n      crossLayer: {\n        url: this.getCrossLayerUrl(),\n        circuitState: this.crossLayerCircuitBreaker.getState(),\n        stats: this.crossLayerCircuitBreaker.getStats(),\n      },\n    };\n  }\n\n  updateDefaultHeaders(headers: Partial<GatewayRequestHeaders>): void {\n    this.defaultHeaders = { ...this.defaultHeaders, ...headers };\n  }\n\n  private createRequestContext(\n    callType: 'internal' | 'cross-layer' | 'direct',\n    options: GraphQLRequestOptions\n  ): RequestContext {\n    return {\n      requestId: uuidv4(),\n      actorId: options.headers?.['x-actor-id'] || this.defaultHeaders['x-actor-id'],\n      workspaceId: options.headers?.['x-workspace-id'] || this.defaultHeaders['x-workspace-id'],\n      startTime: Date.now(),\n      callType,\n    };\n  }\n\n  /**\n   * Check if an error should be retried\n   */\n  private shouldRetryError(error: unknown): boolean {\n    if (!(error instanceof GatewayError)) {\n      return true;\n    }\n    // Don't retry GraphQL errors or circuit open errors\n    return error.type !== GatewayErrorType.GRAPHQL_ERROR && error.type !== GatewayErrorType.CIRCUIT_OPEN;\n  }\n\n  /**\n   * Calculate retry delay with exponential backoff\n   */\n  private calculateRetryDelay(attempt: number): number {\n    return Math.min(\n      this.retryConfig.initialDelay * Math.pow(this.retryConfig.backoffMultiplier, attempt - 1),\n      this.retryConfig.maxDelay\n    );\n  }\n\n  /**\n   * Log retry attempt if logging is enabled\n   */\n  private logRetryAttempt(\n    context: RequestContext,\n    attempt: number,\n    maxAttempts: number,\n    delay: number,\n    error: Error\n  ): void {\n    if (this.config.enableLogging) {\n      logger.warn('[GatewayClient] Request failed, retrying', {\n        requestId: context.requestId,\n        attempt,\n        maxAttempts,\n        delay,\n        error: error.message,\n      });\n    }\n  }\n\n  private async executeWithRetry<T>(\n    gatewayUrl: string,\n    options: GraphQLRequestOptions,\n    circuitBreaker: CircuitBreaker,\n    context: RequestContext,\n    settings: { bypassPermission: boolean }\n  ): Promise<GraphQLResponse<T>> {\n    // Check circuit breaker\n    if (!options.skipCircuitBreaker && !circuitBreaker.allowRequest()) {\n      throw new GatewayError(`Circuit breaker is open for ${gatewayUrl}`, GatewayErrorType.CIRCUIT_OPEN, gatewayUrl);\n    }\n\n    const maxAttempts = options.skipRetry ? 1 : this.retryConfig.maxAttempts;\n    let lastError: Error | null = null;\n\n    for (let attempt = 1; attempt <= maxAttempts; attempt++) {\n      try {\n        const result = await this.executeRequest<T>(gatewayUrl, options, context, settings.bypassPermission);\n        if (!options.skipCircuitBreaker) {\n          circuitBreaker.recordSuccess();\n        }\n        return result;\n      } catch (error) {\n        lastError = error instanceof Error ? error : new Error(String(error));\n        if (!options.skipCircuitBreaker) {\n          circuitBreaker.recordFailure();\n        }\n\n        if (!this.shouldRetryError(error)) {\n          throw error;\n        }\n\n        if (attempt < maxAttempts) {\n          const delay = this.calculateRetryDelay(attempt);\n          this.logRetryAttempt(context, attempt, maxAttempts, delay, lastError);\n          await this.sleep(delay);\n        }\n      }\n    }\n\n    throw lastError || new GatewayError('Request failed after retries', GatewayErrorType.UNKNOWN_ERROR, gatewayUrl);\n  }\n\n  /**\n   * Build headers for a request\n   */\n  private buildRequestHeaders(\n    context: RequestContext,\n    options: GraphQLRequestOptions,\n    bypassPermission: boolean\n  ): Record<string, string> {\n    const headers: Record<string, string> = {\n      'Content-Type': 'application/json',\n      'x-request-id': context.requestId,\n      'x-call-type': context.callType,\n    };\n\n    // Add default headers\n    for (const [key, value] of Object.entries(this.defaultHeaders)) {\n      if (value !== undefined) {\n        headers[key] = String(value);\n      }\n    }\n\n    // Add request-specific headers\n    if (options.headers) {\n      for (const [key, value] of Object.entries(options.headers)) {\n        if (value !== undefined) {\n          headers[key] = String(value);\n        }\n      }\n    }\n\n    // Add bypass headers for internal calls\n    if (bypassPermission) {\n      headers['x-bypass-permission'] = resolveBypassPermissionValue();\n      headers['x-bypass-source'] = this.layerManager.getServiceIdentity();\n      headers['x-bypass-timestamp'] = Date.now().toString();\n    }\n\n    return headers;\n  }\n\n  /**\n   * Handle GraphQL errors in response\n   */\n  private handleGraphQLErrors<T>(\n    result: GraphQLResponse<T>,\n    context: RequestContext,\n    gatewayUrl: string,\n    duration: number\n  ): void {\n    if (!result.errors || result.errors.length === 0) {\n      return;\n    }\n\n    const errorMessages = result.errors.map((e: GraphQLError) => e.message).join(', ');\n\n    if (this.config.enableLogging) {\n      logger.warn('[GatewayClient] GraphQL errors', {\n        requestId: context.requestId,\n        errors: result.errors,\n        duration,\n      });\n    }\n\n    throw new GatewayError(`GraphQL error: ${errorMessages}`, GatewayErrorType.GRAPHQL_ERROR, gatewayUrl, {\n      graphqlErrors: result.errors,\n    });\n  }\n\n  /**\n   * Handle fetch errors\n   */\n  private handleFetchError(\n    error: unknown,\n    context: RequestContext,\n    gatewayUrl: string,\n    timeout: number,\n    duration: number\n  ): never {\n    if (error instanceof GatewayError) {\n      throw error;\n    }\n\n    if (error instanceof Error) {\n      if (error.name === 'AbortError') {\n        throw new GatewayError(`Request timed out after ${timeout}ms`, GatewayErrorType.TIMEOUT_ERROR, gatewayUrl, {\n          cause: error,\n        });\n      }\n\n      if (this.config.enableLogging) {\n        logger.error('[GatewayClient] Request failed', {\n          requestId: context.requestId,\n          error: error.message,\n          duration,\n        });\n      }\n\n      throw new GatewayError(error.message, GatewayErrorType.NETWORK_ERROR, gatewayUrl, {\n        cause: error,\n      });\n    }\n\n    throw new GatewayError(String(error), GatewayErrorType.UNKNOWN_ERROR, gatewayUrl);\n  }\n\n  private async executeRequest<T>(\n    gatewayUrl: string,\n    options: GraphQLRequestOptions,\n    context: RequestContext,\n    bypassPermission: boolean\n  ): Promise<GraphQLResponse<T>> {\n    const timeout = options.timeout || this.config.timeout || 30000;\n    const headers = this.buildRequestHeaders(context, options, bypassPermission);\n\n    // Cross-layer calls transit the peer layer's PUBLIC gateway, which\n    // requires JWT auth to propagate actor context. Mint a short-lived\n    // service-actor JWT so the gateway admits the call and preserves\n    // `x-actor-type: service` downstream. Skipped when the caller has\n    // already supplied an Authorization header (e.g., user-originated\n    // cross-layer flows) or when SERVICE_JWT_SECRET is unset.\n    if (context.callType === 'cross-layer' && !hasAuthorizationHeader(headers)) {\n      const serviceActorId = this.layerManager.getServiceIdentity();\n      const serviceJwt = await signServiceJwt(serviceActorId);\n      if (serviceJwt) {\n        headers['Authorization'] = `Bearer ${serviceJwt}`;\n      } else if (this.config.enableLogging) {\n        // Subtle failure mode: without the JWT the public gateway strips\n        // actor headers and the subgraph rejects with `authenticationRequired`.\n        // Surface the root cause so operators rolling out a new caller don't\n        // spend time debugging the downstream error.\n        logger.debug(\n          '[GatewayClient] SERVICE_JWT_SECRET not configured — cross-layer call will proceed without service JWT',\n          { requestId: context.requestId, gatewayUrl }\n        );\n      }\n    }\n\n    const body = JSON.stringify({\n      query: options.query,\n      variables: options.variables || {},\n      operationName: options.operationName,\n    });\n\n    if (this.config.enableLogging) {\n      logger.debug('[GatewayClient] Executing request', {\n        requestId: context.requestId,\n        gatewayUrl,\n        operationName: options.operationName,\n        callType: context.callType,\n        bypassPermission,\n      });\n    }\n\n    try {\n      const controller = new AbortController();\n      const timeoutId = setTimeout(() => controller.abort(), timeout);\n\n      const response = await fetch(gatewayUrl, {\n        method: 'POST',\n        headers,\n        body,\n        signal: controller.signal,\n      });\n\n      clearTimeout(timeoutId);\n      const duration = Date.now() - context.startTime;\n\n      if (!response.ok) {\n        throw new GatewayError(\n          `HTTP ${response.status}: ${response.statusText}`,\n          GatewayErrorType.NETWORK_ERROR,\n          gatewayUrl,\n          { statusCode: response.status }\n        );\n      }\n\n      const result = (await response.json()) as GraphQLResponse<T>;\n      this.handleGraphQLErrors(result, context, gatewayUrl, duration);\n\n      if (this.config.enableLogging) {\n        logger.debug('[GatewayClient] Request completed', {\n          requestId: context.requestId,\n          duration,\n          hasData: !!result.data,\n        });\n      }\n\n      return result;\n    } catch (error) {\n      const duration = Date.now() - context.startTime;\n      this.handleFetchError(error, context, gatewayUrl, timeout, duration);\n    }\n  }\n\n  private sleep(ms: number): Promise<void> {\n    return new Promise((resolve) => setTimeout(resolve, ms));\n  }\n}\n\n/**\n * Create a gateway client for a specific layer\n */\nexport function createGatewayClient(config: GatewayClientConfig): GatewayClient {\n  return new GatewayClient(config);\n}\n\n/**\n * Create a gateway client from environment variables\n *\n * Required environment variables:\n * - SERVICE_LAYER: 'wspace' | 'global'\n * - SERVICE_NAME: Service name\n *\n * Optional:\n * - SERVICE_IDENTITY: Service identity (defaults to SERVICE_NAME)\n * - {LAYER}_INT_GATEWAY_URL: Internal gateway URL\n * - {OPPOSITE_LAYER}_PUBLIC_GATEWAY_URL: Cross-layer gateway URL\n */\nexport function createGatewayClientFromEnv(): GatewayClient {\n  const layer = process.env['SERVICE_LAYER'] as ServiceLayer;\n\n  if (!layer || (layer !== 'wspace' && layer !== 'global')) {\n    throw new Error(`[GatewayClient] Invalid or missing SERVICE_LAYER. Expected 'wspace' or 'global', got '${layer}'`);\n  }\n\n  const serviceName = process.env['SERVICE_NAME'];\n  if (!serviceName) {\n    throw new Error('[GatewayClient] SERVICE_NAME environment variable is required');\n  }\n\n  const serviceIdentity = process.env['SERVICE_IDENTITY'] || serviceName;\n\n  return new GatewayClient({\n    layer,\n    serviceName,\n    serviceIdentity,\n  });\n}\n"]}

package/dist/{chunk-5HL47UH2.js → chunk-GMFHIFS5.js}

@@ -1,4 +1,4 @@
-import { GatewayClient } from './chunk-OJWJVZY5.js';
+import { GatewayClient } from './chunk-BJVXHIUV.js';
 import { __export, __name } from './chunk-XE4OXN2W.js';
 
 // src/export/index.ts
@@ -624,5 +624,5 @@ async function triggerExportJob(params) {
 __name(triggerExportJob, "triggerExportJob");
 
 export { BaseModuleExporter, PaginationService, convertToCSV, csvToJSON, estimateCSVSize, export_exports, getCSVHeaders, parseCSV, triggerExportJob };
-//# sourceMappingURL=chunk-5HL47UH2.js.map
-//# sourceMappingURL=chunk-5HL47UH2.js.map
+//# sourceMappingURL=chunk-GMFHIFS5.js.map
+//# sourceMappingURL=chunk-GMFHIFS5.js.map

package/dist/{chunk-5HL47UH2.js.map → chunk-GMFHIFS5.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/export/index.ts","../src/export/base-exporter.ts","../src/export/pagination.ts","../src/export/csv.ts","../src/export/gateway-client.ts"],"names":["BaseModuleExporter","moduleKey","displayName","description","defaultExcludeFields","supportedProducts","modelName","filterFields","entity","excludeFields","fieldsToExclude","length","filtered","record","key","value","Object","entries","includes","filterFieldsMany","entities","map","paginate","queryFn","page","pageSize","skip","take","items","total","data","hasMore","nextCursor","String","undefined","fetchAll","fetchBatch","batchSize","allItems","cursor","batch","push","lastItem","id","transformForExport","validateOptions","options","validFormats","format","Error","join","getSupportedFormats","getMetadata","supportedFormats","PaginationService","params","start","end","paginatedItems","slice","totalCount","pageInfo","hasNextPage","hasPreviousPage","startCursor","endCursor","Math","min","calculatePagination","totalPages","ceil","startIndex","endIndex","currentPage","paginatedQuery","fetchFn","limit","initialCursor","totalYielded","item","collectPaginatedQuery","createPrismaFetchFn","_batchSize","calculateOffset","max","parseCursor","decoded","Buffer","from","toString","JSON","parse","createCursor","stringify","FORMULA_PREFIX_RE","sanitizeCSVCell","test","convertToCSV","delimiter","includeHeaders","flattenFields","maxFlattenDepth","flattenObject","obj","prefix","depth","result","newKey","Date","toISOString","Array","isArray","assign","flattenedRecords","allKeys","Set","keys","add","headers","sort","a","b","localeCompare","escapeCSV","sanitizedValue","replace","lines","row","header","parseCSV","csv","hasHeaders","split","filter","line","trim","parseLine","values","current","inQuotes","i","char","nextChar","dataLines","firstLine","firstRow","_","forEach","csvToJSON","pretty","parseOptions","getCSVHeaders","collectKeys","fullKey","estimateCSVSize","sampleSize","sample","sampleCSV","averageRowSize","headerSize","CREATE_EXPORT_JOB_MUTATION","triggerExportJob","serviceName","layer","actorId","actorType","workspaceId","name","entityTypes","includeMetadata","dateRangeStart","dateRangeEnd","client","GatewayClient","input","response","internalQuery","query","variables","job","createExportJob"],"mappings":";;;;AAAA,IAAA,cAAA,GAAA;;;;;;;;;;;;;ACoCO,IAAeA,qBAAf,MAAeA;EApCtB;;;;AAsCEC,EAAAA,SAAAA;;AAGAC,EAAAA,WAAAA;;AAGAC,EAAAA,WAAAA;;AAGAC,EAAAA,oBAAAA;;AAGAC,EAAAA,iBAAAA;;AAGUC,EAAAA,SAAAA;;;;;;;;;;;;;;;;;AA6BAC,EAAAA,YAAAA,CAAaC,QAAqCC,aAAAA,EAAmD;AAC7G,IAAA,MAAMC,eAAAA,GAAkBD,aAAAA,IAAiB,IAAA,CAAKL,oBAAAA,IAAwB,EAAA;AAEtE,IAAA,IAAIM,eAAAA,CAAgBC,WAAW,CAAA,EAAG;AAChC,MAAA,OAAOH,MAAAA;AACT,IAAA;AAEA,IAAA,MAAMI,WAAoC,EAAC;AAC3C,IAAA,MAAMC,MAAAA,GAASL,MAAAA;AAEf,IAAA,KAAA,MAAW,CAACM,GAAAA,EAAKC,KAAAA,KAAUC,MAAAA,CAAOC,OAAAA,CAAQJ,MAAAA,CAAAA,EAAS;AACjD,MAAA,IAAI,CAACH,eAAAA,CAAgBQ,QAAAA,CAASJ,GAAAA,CAAAA,EAAM;AAClCF,QAAAA,QAAAA,CAASE,GAAAA,CAAAA,GAAOC,KAAAA;AAClB,MAAA;AACF,IAAA;AAEA,IAAA,OAAOH,QAAAA;AACT,EAAA;;;;;;;;AASUO,EAAAA,gBAAAA,CACRC,UACAX,aAAAA,EAC2B;AAC3B,IAAA,OAAOW,QAAAA,CAASC,IAAI,CAACb,MAAAA,KAAW,KAAKD,YAAAA,CAAaC,MAAAA,EAAQC,aAAAA,CAAAA,CAAAA;AAC5D,EAAA;;;;;;;;;;;;;;;;;;;;;;;;AAyBA,EAAA,MAAgBa,QAAAA,CACdC,OAAAA,EACAC,IAAAA,GAAe,CAAA,EACfC,WAAmB,GAAA,EACS;AAC5B,IAAA,MAAMC,IAAAA,GAAAA,CAAQF,OAAO,CAAA,IAAKC,QAAAA;AAC1B,IAAA,MAAME,IAAAA,GAAOF,QAAAA;AAEb,IAAA,MAAM,EAAEG,KAAAA,EAAOC,KAAAA,EAAK,GAAK,MAAMN,OAAAA,CAAQ;AAAEG,MAAAA,IAAAA;AAAMC,MAAAA;KAAK,CAAA;AAEpD,IAAA,OAAO;MACLG,IAAAA,EAAMF,KAAAA;AACNC,MAAAA,KAAAA;MACAE,OAAAA,EAASL,IAAAA,GAAOE,MAAMjB,MAAAA,GAASkB,KAAAA;MAC/BG,UAAAA,EAAYJ,KAAAA,CAAMjB,MAAAA,GAAS,CAAA,IAAKe,IAAAA,GAAOE,KAAAA,CAAMjB,SAASkB,KAAAA,GAAQI,MAAAA,CAAOT,IAAAA,GAAO,CAAA,CAAA,GAAKU;AACnF,KAAA;AACF,EAAA;;;;;;;;;;;;;;;;;;;;;;EAuBA,MAAgBC,QAAAA,CACdC,UAAAA,EACAC,SAAAA,GAAoB,GAAA,EACN;AACd,IAAA,MAAMC,WAAgB,EAAA;AACtB,IAAA,IAAIC,MAAAA;AAEJ,IAAA,OAAO,IAAA,EAAM;AACX,MAAA,MAAMC,KAAAA,GAAQ,MAAMJ,UAAAA,CAAWG,MAAAA,CAAAA;AAE/B,MAAA,IAAIC,KAAAA,CAAM7B,WAAW,CAAA,EAAG;AACtB,QAAA;AACF,MAAA;AAEA2B,MAAAA,QAAAA,CAASG,IAAAA,CAAI,GAAID,KAAAA,CAAAA;AAGjB,MAAA,MAAME,QAAAA,GAAWF,KAAAA,CAAMA,KAAAA,CAAM7B,MAAAA,GAAS,CAAA,CAAA;AACtC,MAAA,IAAI+B,QAAAA,EAAU;AACZH,QAAAA,MAAAA,GAASG,QAAAA,CAASC,EAAAA;AACpB,MAAA;AAGA,MAAA,IAAIH,KAAAA,CAAM7B,SAAS0B,SAAAA,EAAW;AAC5B,QAAA;AACF,MAAA;AACF,IAAA;AAEA,IAAA,OAAOC,QAAAA;AACT,EAAA;;;;;;;;;;;AAYUM,EAAAA,kBAAAA,CAAmBpC,QAAWC,aAAAA,EAAmD;AACzF,IAAA,OAAO,IAAA,CAAKF,YAAAA,CAAaC,MAAAA,EAAQC,aAAAA,CAAAA;AACnC,EAAA;;;;;;;;;AAUUoC,EAAAA,eAAAA,CAAgBC,OAAAA,EAA8B;AACtD,IAAA,MAAMC,YAAAA,GAAe;AAAC,MAAA,KAAA;AAAO,MAAA,MAAA;AAAQ,MAAA;;AACrC,IAAA,IAAI,CAACA,YAAAA,CAAa7B,QAAAA,CAAS4B,OAAAA,CAAQE,MAAM,CAAA,EAAG;AAC1C,MAAA,MAAM,IAAIC,KAAAA,CAAM,CAAA,uBAAA,EAA0BH,OAAAA,CAAQE,MAAM,oBAAoBD,YAAAA,CAAaG,IAAAA,CAAK,IAAA,CAAA,CAAA,CAAO,CAAA;AACvG,IAAA;AACF,EAAA;;;;;;EAOAC,mBAAAA,GAAgC;AAC9B,IAAA,OAAO;AAAC,MAAA,KAAA;AAAO,MAAA,MAAA;AAAQ,MAAA;;AACzB,EAAA;;;;;;EAOAC,WAAAA,GAME;AACA,IAAA,OAAO;AACLnD,MAAAA,SAAAA,EAAW,IAAA,CAAKA,SAAAA;AAChBC,MAAAA,WAAAA,EAAa,IAAA,CAAKA,WAAAA;AAClBC,MAAAA,WAAAA,EAAa,IAAA,CAAKA,WAAAA;AAClBE,MAAAA,iBAAAA,EAAmB,IAAA,CAAKA,iBAAAA;AACxBgD,MAAAA,gBAAAA,EAAkB,KAAKF,mBAAAA;AACzB,KAAA;AACF,EAAA;AACF;;;AC/OO,IAAMG,iBAAAA,GAAN,MAAMA,kBAAAA,CAAAA;EA3Bb;;;;;;;;;;;;;;;;;;EA2CE,OAAOhC,QAAAA,CAAYM,OAAY2B,MAAAA,EAA8C;AAC3E,IAAA,MAAM/B,IAAAA,GAAO+B,OAAO/B,IAAAA,IAAQ,CAAA;AAC5B,IAAA,MAAMC,QAAAA,GAAW8B,OAAO9B,QAAAA,IAAY,EAAA;AACpC,IAAA,MAAM+B,KAAAA,GAAAA,CAAShC,OAAO,CAAA,IAAKC,QAAAA;AAC3B,IAAA,MAAMgC,MAAMD,KAAAA,GAAQ/B,QAAAA;AAEpB,IAAA,MAAMiC,cAAAA,GAAiB9B,KAAAA,CAAM+B,KAAAA,CAAMH,KAAAA,EAAOC,GAAAA,CAAAA;AAE1C,IAAA,OAAO;MACL7B,KAAAA,EAAO8B,cAAAA;AACPE,MAAAA,UAAAA,EAAYhC,KAAAA,CAAMjB,MAAAA;MAClBkD,QAAAA,EAAU;AACRC,QAAAA,WAAAA,EAAaL,MAAM7B,KAAAA,CAAMjB,MAAAA;AACzBoD,QAAAA,eAAAA,EAAiBvC,IAAAA,GAAO,CAAA;AACxBwC,QAAAA,WAAAA,EAAaN,cAAAA,CAAe/C,MAAAA,GAAS,CAAA,GAAIsB,MAAAA,CAAOuB,KAAAA,CAAAA,GAAStB,MAAAA;QACzD+B,SAAAA,EAAWP,cAAAA,CAAe/C,MAAAA,GAAS,CAAA,GAAIsB,MAAAA,CAAOiC,IAAAA,CAAKC,GAAAA,CAAIV,GAAAA,EAAK7B,KAAAA,CAAMjB,MAAM,CAAA,GAAI,CAAA,CAAA,GAAKuB;AACnF;AACF,KAAA;AACF,EAAA;;;;;;;;;;;;;;;;;EAkBA,OAAOkC,mBAAAA,CACLR,UAAAA,EACApC,IAAAA,EACAC,QAAAA,EASA;AACA,IAAA,MAAM4C,UAAAA,GAAaH,IAAAA,CAAKI,IAAAA,CAAKV,UAAAA,GAAanC,QAAAA,CAAAA;AAC1C,IAAA,MAAM8C,UAAAA,GAAAA,CAAc/C,OAAO,CAAA,IAAKC,QAAAA;AAChC,IAAA,MAAM+C,WAAWN,IAAAA,CAAKC,GAAAA,CAAII,aAAa9C,QAAAA,GAAW,CAAA,EAAGmC,aAAa,CAAA,CAAA;AAElE,IAAA,OAAO;AACLE,MAAAA,WAAAA,EAAatC,IAAAA,GAAO6C,UAAAA;AACpBN,MAAAA,eAAAA,EAAiBvC,IAAAA,GAAO,CAAA;AACxB6C,MAAAA,UAAAA;MACAI,WAAAA,EAAajD,IAAAA;AACbC,MAAAA,QAAAA;AACA8C,MAAAA,UAAAA;AACAC,MAAAA;AACF,KAAA;AACF,EAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA6BA,EAAA,cAAcE,cAAAA,CACZC,OAAAA,EACA7B,OAAAA,GAAiC,EAAC,EACA;AAClC,IAAA,MAAM,EAAE8B,KAAAA,EAAOC,aAAAA,EAAa,GAAK/B,OAAAA;AACjC,IAAA,IAAIP,MAAAA,GAASsC,aAAAA;AACb,IAAA,IAAI9C,OAAAA,GAAU,IAAA;AACd,IAAA,IAAI+C,YAAAA,GAAe,CAAA;AAEnB,IAAA,OAAO/C,OAAAA,EAAS;AACd,MAAA,MAAMH,KAAAA,GAAQ,MAAM+C,OAAAA,CAAQpC,MAAAA,CAAAA;AAE5B,MAAA,IAAIX,KAAAA,CAAMjB,WAAW,CAAA,EAAG;AACtB,QAAA;AACF,MAAA;AAEA,MAAA,KAAA,MAAWoE,QAAQnD,KAAAA,EAAO;AACxB,QAAA,MAAMmD,IAAAA;AACND,QAAAA,YAAAA,EAAAA;AAEA,QAAA,IAAIF,KAAAA,IAASE,gBAAgBF,KAAAA,EAAO;AAClC,UAAA;AACF,QAAA;AACF,MAAA;AAGA,MAAA,MAAMlC,QAAAA,GAAWd,KAAAA,CAAMA,KAAAA,CAAMjB,MAAAA,GAAS,CAAA,CAAA;AACtC,MAAA,IAAI+B,QAAAA,EAAU;AACZH,QAAAA,MAAAA,GAASG,QAAAA,CAASC,EAAAA;AACpB,MAAA;AAIAZ,MAAAA,OAAAA,GAAUH,MAAMjB,MAAAA,GAAS,CAAA;AAC3B,IAAA;AACF,EAAA;;;;;;;;;;;;;AAcA,EAAA,aAAaqE,qBAAAA,CACXL,OAAAA,EACA7B,OAAAA,GAAiC,EAAC,EACpB;AACd,IAAA,MAAMlB,QAAa,EAAA;AAEnB,IAAA,WAAA,MAAiBmD,IAAAA,IAAQzB,kBAAAA,CAAkBoB,cAAAA,CAAeC,OAAAA,EAAS7B,OAAAA,CAAAA,EAAU;AAC3ElB,MAAAA,KAAAA,CAAMa,KAAKsC,IAAAA,CAAAA;AACb,IAAA;AAEA,IAAA,OAAOnD,KAAAA;AACT,EAAA;;;;;;;;;;;;;;;;;;;;;;;;EAyBA,OAAOqD,mBAAAA,CACL1D,OAAAA,EACA2D,UAAAA,GAAqB,GAAA,EACc;AACnC,IAAA,OAAO3D,OAAAA;AACT,EAAA;;;;;;;;EASA,OAAO4D,eAAAA,CAAgB3D,MAAcC,QAAAA,EAA0B;AAC7D,IAAA,OAAA,CAAQyC,IAAAA,CAAKkB,GAAAA,CAAI,CAAA,EAAG5D,IAAAA,IAAQ,CAAA,IAAKC,QAAAA;AACnC,EAAA;;;;;;;AAQA,EAAA,OAAO4D,YAAyC9C,MAAAA,EAA0B;AACxE,IAAA,IAAI;AACF,MAAA,MAAM+C,UAAUC,MAAAA,CAAOC,IAAAA,CAAKjD,QAAQ,QAAA,CAAA,CAAUkD,SAAS,OAAA,CAAA;AACvD,MAAA,OAAOC,IAAAA,CAAKC,MAAML,OAAAA,CAAAA;IACpB,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,IAAA;AACT,IAAA;AACF,EAAA;;;;;;;AAQA,EAAA,OAAOM,aAAa9D,IAAAA,EAAuC;AACzD,IAAA,OAAOyD,MAAAA,CAAOC,KAAKE,IAAAA,CAAKG,SAAAA,CAAU/D,IAAAA,CAAAA,CAAAA,CAAO2D,SAAS,QAAA,CAAA;AACpD,EAAA;AACF;;;ACnPA,IAAMK,iBAAAA,GAAoB,UAAA;AAEnB,SAASC,gBAAgBhF,KAAAA,EAAa;AAC3C,EAAA,OAAO+E,kBAAkBE,IAAAA,CAAKjF,KAAAA,CAAAA,GAAS,CAAA,CAAA,EAAIA,KAAAA,CAAAA,CAAAA,GAAUA,KAAAA;AACvD;AAFgBgF,MAAAA,CAAAA,eAAAA,EAAAA,iBAAAA,CAAAA;AA6BT,SAASE,YAAAA,CAAanE,IAAAA,EAAiBgB,OAAAA,GAAgC,EAAC,EAAC;AAC9E,EAAA,MAAM,EAAEoD,YAAY,GAAA,EAAKC,cAAAA,GAAiB,MAAMC,aAAAA,GAAgB,IAAA,EAAMC,eAAAA,GAAkB,CAAA,EAAC,GAAKvD,OAAAA;AAE9F,EAAA,IAAIhB,IAAAA,CAAKnB,WAAW,CAAA,EAAG;AACrB,IAAA,OAAO,EAAA;AACT,EAAA;AAGA,EAAA,MAAM2F,gCAAgB,MAAA,CAAA,CAACC,GAAAA,EAAcC,MAAAA,GAAS,EAAA,EAAIC,QAAQ,CAAA,KAAC;AACzD,IAAA,MAAMC,SAAiC,EAAC;AAExC,IAAA,IAAIH,GAAAA,KAAQ,IAAA,IAAQA,GAAAA,KAAQrE,MAAAA,EAAW;AACrC,MAAA,OAAOwE,MAAAA;AACT,IAAA;AAEA,IAAA,IAAI,OAAOH,QAAQ,QAAA,EAAU;AAC3B,MAAA,OAAO;AAAE,QAAA,CAACC,MAAAA,IAAU,OAAA,GAAUvE,MAAAA,CAAOsE,GAAAA;AAAK,OAAA;AAC5C,IAAA;AAEA,IAAA,KAAA,MAAW,CAACzF,GAAAA,EAAKC,KAAAA,KAAUC,MAAAA,CAAOC,OAAAA,CAAQsF,GAAAA,CAAAA,EAAiC;AACzE,MAAA,MAAMI,SAASH,MAAAA,GAAS,CAAA,EAAGA,MAAAA,CAAAA,CAAAA,EAAU1F,GAAAA,CAAAA,CAAAA,GAAQA,GAAAA;AAE7C,MAAA,IAAIC,KAAAA,KAAU,IAAA,IAAQA,KAAAA,KAAUmB,MAAAA,EAAW;AACzCwE,QAAAA,MAAAA,CAAOC,MAAAA,CAAAA,GAAU,EAAA;AACnB,MAAA,CAAA,MAAA,IAAW5F,iBAAiB6F,IAAAA,EAAM;AAChCF,QAAAA,MAAAA,CAAOC,MAAAA,CAAAA,GAAU5F,KAAAA,CAAM8F,WAAAA,EAAW;MACpC,CAAA,MAAA,IAAWC,KAAAA,CAAMC,OAAAA,CAAQhG,KAAAA,CAAAA,EAAQ;AAC/B2F,QAAAA,MAAAA,CAAOC,MAAAA,CAAAA,GAAUjB,IAAAA,CAAKG,SAAAA,CAAU9E,KAAAA,CAAAA;AAClC,MAAA,CAAA,MAAA,IAAW,OAAOA,KAAAA,KAAU,QAAA,IAAYqF,aAAAA,IAAiBK,QAAQJ,eAAAA,EAAiB;AAChFrF,QAAAA,MAAAA,CAAOgG,OAAON,MAAAA,EAAQJ,aAAAA,CAAcvF,OAAO4F,MAAAA,EAAQF,KAAAA,GAAQ,CAAA,CAAA,CAAA;MAC7D,CAAA,MAAA,IAAW,OAAO1F,UAAU,QAAA,EAAU;AACpC2F,QAAAA,MAAAA,CAAOC,MAAAA,CAAAA,GAAUjB,IAAAA,CAAKG,SAAAA,CAAU9E,KAAAA,CAAAA;MAClC,CAAA,MAAO;AACL2F,QAAAA,MAAAA,CAAOC,MAAAA,CAAAA,GAAU1E,MAAAA,CAAOlB,KAAAA,CAAAA;AAC1B,MAAA;AACF,IAAA;AAEA,IAAA,OAAO2F,MAAAA;EACT,CAAA,EA9BsB,eAAA,CAAA;AAiCtB,EAAA,MAAMO,mBAAmBnF,IAAAA,CAAKT,GAAAA,CAAI,CAAC0D,IAAAA,KAASuB,aAAAA,CAAcvB,IAAAA,CAAAA,CAAAA;AAC1D,EAAA,MAAMmC,OAAAA,uBAAcC,GAAAA,EAAAA;AACpB,EAAA,KAAA,MAAWtG,UAAUoG,gBAAAA,EAAkB;AACrC,IAAA,KAAA,MAAWnG,GAAAA,IAAOE,MAAAA,CAAOoG,IAAAA,CAAKvG,MAAAA,CAAAA,EAAS;AACrCqG,MAAAA,OAAAA,CAAQG,IAAIvG,GAAAA,CAAAA;AACd,IAAA;AACF,EAAA;AAEA,EAAA,MAAMwG,OAAAA,GAAUR,KAAAA,CAAMtB,IAAAA,CAAK0B,OAAAA,CAAAA,CAASK,IAAAA,CAAK,CAACC,CAAAA,EAAGC,CAAAA,KAAMD,CAAAA,CAAEE,aAAAA,CAAcD,CAAAA,CAAAA,CAAAA;AAGnE,EAAA,MAAME,SAAAA,2BAAa5G,KAAAA,KAAAA;AACjB,IAAA,MAAM6G,cAAAA,GAAiB7B,gBAAgBhF,KAAAA,CAAAA;AAEvC,IAAA,IACE6G,cAAAA,CAAe1G,QAAAA,CAASgF,SAAAA,CAAAA,IACxB0B,eAAe1G,QAAAA,CAAS,GAAA,CAAA,IACxB0G,cAAAA,CAAe1G,SAAS,IAAA,CAAA,IACxB0G,cAAAA,CAAe1G,QAAAA,CAAS,IAAA,CAAA,EACxB;AACA,MAAA,OAAO,CAAA,CAAA,EAAI0G,cAAAA,CAAeC,OAAAA,CAAQ,IAAA,EAAM,IAAA,CAAA,CAAA,CAAA,CAAA;AAC1C,IAAA;AACA,IAAA,OAAOD,cAAAA;EACT,CAAA,EAZkB,WAAA,CAAA;AAelB,EAAA,MAAME,QAAkB,EAAA;AAExB,EAAA,IAAI3B,cAAAA,EAAgB;AAClB2B,IAAAA,KAAAA,CAAMrF,KAAK6E,OAAAA,CAAQjG,GAAAA,CAAIsG,SAAAA,CAAAA,CAAWzE,IAAAA,CAAKgD,SAAAA,CAAAA,CAAAA;AACzC,EAAA;AAEA,EAAA,KAAA,MAAWrF,UAAUoG,gBAAAA,EAAkB;AACrC,IAAA,MAAMc,GAAAA,GAAMT,OAAAA,CAAQjG,GAAAA,CAAI,CAAC2G,MAAAA,KAAWL,UAAU9G,MAAAA,CAAOmH,MAAAA,CAAAA,IAAW,EAAA,CAAA,CAAA;AAChEF,IAAAA,KAAAA,CAAMrF,IAAAA,CAAKsF,GAAAA,CAAI7E,IAAAA,CAAKgD,SAAAA,CAAAA,CAAAA;AACtB,EAAA;AAEA,EAAA,OAAO4B,KAAAA,CAAM5E,KAAK,IAAA,CAAA;AACpB;AA/EgB+C,MAAAA,CAAAA,YAAAA,EAAAA,cAAAA,CAAAA;AA+FT,SAASgC,QAAAA,CACdC,GAAAA,EACApF,OAAAA,GAAwD,EAAC,EAAC;AAE1D,EAAA,MAAM,EAAEoD,SAAAA,GAAY,GAAA,EAAKiC,UAAAA,GAAa,MAAI,GAAKrF,OAAAA;AAE/C,EAAA,MAAMgF,KAAAA,GAAQI,GAAAA,CAAIE,KAAAA,CAAM,OAAA,CAAA,CAASC,OAAO,CAACC,IAAAA,KAASA,IAAAA,CAAKC,IAAAA,EAAI,CAAA;AAE3D,EAAA,IAAIT,KAAAA,CAAMnH,WAAW,CAAA,EAAG;AACtB,IAAA,OAAO,EAAA;AACT,EAAA;AAGA,EAAA,MAAM6H,SAAAA,2BAAaF,IAAAA,KAAAA;AACjB,IAAA,MAAMG,SAAmB,EAAA;AACzB,IAAA,IAAIC,OAAAA,GAAU,EAAA;AACd,IAAA,IAAIC,QAAAA,GAAW,KAAA;AAEf,IAAA,IAAIC,CAAAA,GAAI,CAAA;AACR,IAAA,OAAOA,CAAAA,GAAIN,KAAK3H,MAAAA,EAAQ;AACtB,MAAA,MAAMkI,IAAAA,GAAOP,KAAKM,CAAAA,CAAAA;AAClB,MAAA,MAAME,QAAAA,GAAWR,IAAAA,CAAKM,CAAAA,GAAI,CAAA,CAAA;AAE1B,MAAA,IAAIC,IAAAA,KAAS,GAAA,IAAOF,QAAAA,IAAYG,QAAAA,KAAa,GAAA,EAAK;AAChDJ,QAAAA,OAAAA,IAAW,GAAA;AACXE,QAAAA,CAAAA,IAAK,CAAA;AACP,MAAA,CAAA,MAAA,IAAWC,SAAS,GAAA,EAAK;AACvBF,QAAAA,QAAAA,GAAW,CAACA,QAAAA;AACZC,QAAAA,CAAAA,EAAAA;MACF,CAAA,MAAA,IAAWC,IAAAA,KAAS3C,SAAAA,IAAa,CAACyC,QAAAA,EAAU;AAC1CF,QAAAA,MAAAA,CAAOhG,KAAKiG,OAAAA,CAAAA;AACZA,QAAAA,OAAAA,GAAU,EAAA;AACVE,QAAAA,CAAAA,EAAAA;MACF,CAAA,MAAO;AACLF,QAAAA,OAAAA,IAAWG,IAAAA;AACXD,QAAAA,CAAAA,EAAAA;AACF,MAAA;AACF,IAAA;AAEAH,IAAAA,MAAAA,CAAOhG,KAAKiG,OAAAA,CAAAA;AACZ,IAAA,OAAOD,MAAAA;EACT,CAAA,EA5BkB,WAAA,CAAA;AA8BlB,EAAA,IAAInB,OAAAA;AACJ,EAAA,IAAIyB,SAAAA;AAGJ,EAAA,MAAMC,SAAAA,GAAYlB,MAAM,CAAA,CAAA;AAExB,EAAA,IAAIK,UAAAA,EAAY;AACdb,IAAAA,OAAAA,GAAUkB,UAAUQ,SAAAA,CAAAA;AACpBD,IAAAA,SAAAA,GAAYjB,KAAAA,CAAMnE,MAAM,CAAA,CAAA;EAC1B,CAAA,MAAO;AAEL,IAAA,MAAMsF,QAAAA,GAAWT,UAAUQ,SAAAA,CAAAA;AAC3B1B,IAAAA,OAAAA,GAAU2B,SAAS5H,GAAAA,CAAI,CAAC6H,GAAGN,CAAAA,KAAM,CAAA,GAAA,EAAMA,CAAAA,CAAAA,CAAG,CAAA;AAC1CG,IAAAA,SAAAA,GAAYjB,KAAAA;AACd,EAAA;AAEA,EAAA,OAAOiB,SAAAA,CAAU1H,GAAAA,CAAI,CAACiH,IAAAA,KAAAA;AACpB,IAAA,MAAMG,MAAAA,GAASD,UAAUF,IAAAA,CAAAA;AACzB,IAAA,MAAM/B,MAA8B,EAAC;AAErCe,IAAAA,OAAAA,CAAQ6B,OAAAA,CAAQ,CAACnB,MAAAA,EAAQY,CAAAA,KAAAA;AACvBrC,MAAAA,GAAAA,CAAIyB,MAAAA,CAAAA,GAAUS,MAAAA,CAAOG,CAAAA,CAAAA,IAAM,EAAA;IAC7B,CAAA,CAAA;AAEA,IAAA,OAAOrC,GAAAA;EACT,CAAA,CAAA;AACF;AArEgB0B,MAAAA,CAAAA,QAAAA,EAAAA,UAAAA,CAAAA;AA8ET,SAASmB,SAAAA,CACdlB,GAAAA,EACApF,OAAAA,GAA0E,EAAC,EAAC;AAE5E,EAAA,MAAM,EAAEuG,MAAAA,GAAS,KAAA,EAAO,GAAGC,cAAAA,GAAiBxG,OAAAA;AAC5C,EAAA,MAAMhB,IAAAA,GAAOmG,QAAAA,CAASC,GAAAA,EAAKoB,YAAAA,CAAAA;AAC3B,EAAA,OAAOD,MAAAA,GAAS3D,KAAKG,SAAAA,CAAU/D,IAAAA,EAAM,MAAM,CAAA,CAAA,GAAK4D,IAAAA,CAAKG,SAAAA,CAAU/D,IAAAA,CAAAA;AACjE;AAPgBsH,MAAAA,CAAAA,SAAAA,EAAAA,WAAAA,CAAAA;AAgBT,SAASG,aAAAA,CAAczH,IAAAA,EAAiBsE,aAAAA,GAAyB,IAAA,EAAI;AAC1E,EAAA,IAAItE,IAAAA,CAAKnB,WAAW,CAAA,EAAG;AACrB,IAAA,OAAO,EAAA;AACT,EAAA;AAEA,EAAA,MAAM6I,8BAAc,MAAA,CAAA,CAACjD,GAAAA,EAAcC,MAAAA,GAAS,EAAA,EAAIC,QAAQ,CAAA,KAAC;AACvD,IAAA,MAAMW,OAAiB,EAAA;AAEvB,IAAA,IAAIb,QAAQ,IAAA,IAAQA,GAAAA,KAAQrE,MAAAA,IAAa,OAAOqE,QAAQ,QAAA,EAAU;AAChE,MAAA,OAAOC,MAAAA,GAAS;AAACA,QAAAA;UAAU,EAAA;AAC7B,IAAA;AAEA,IAAA,KAAA,MAAW,CAAC1F,GAAAA,EAAKC,KAAAA,KAAUC,MAAAA,CAAOC,OAAAA,CAAQsF,GAAAA,CAAAA,EAAiC;AACzE,MAAA,MAAMkD,UAAUjD,MAAAA,GAAS,CAAA,EAAGA,MAAAA,CAAAA,CAAAA,EAAU1F,GAAAA,CAAAA,CAAAA,GAAQA,GAAAA;AAE9C,MAAA,IACEC,KAAAA,KAAU,IAAA,IACV,OAAOA,KAAAA,KAAU,YACjB,CAAC+F,KAAAA,CAAMC,OAAAA,CAAQhG,KAAAA,KACf,EAAEA,KAAAA,YAAiB6F,IAAAA,CAAAA,IACnBR,aAAAA,IACAK,QAAQ,CAAA,EACR;AACAW,QAAAA,IAAAA,CAAK3E,KAAI,GAAI+G,WAAAA,CAAYzI,OAAO0I,OAAAA,EAAShD,KAAAA,GAAQ,CAAA,CAAA,CAAA;MACnD,CAAA,MAAO;AACLW,QAAAA,IAAAA,CAAK3E,KAAKgH,OAAAA,CAAAA;AACZ,MAAA;AACF,IAAA;AAEA,IAAA,OAAOrC,IAAAA;EACT,CAAA,EAzBoB,aAAA,CAAA;AA2BpB,EAAA,MAAMF,OAAAA,uBAAcC,GAAAA,EAAAA;AACpB,EAAA,KAAA,MAAWpC,QAAQjD,IAAAA,EAAM;AACvB,IAAA,KAAA,MAAWhB,GAAAA,IAAO0I,WAAAA,CAAYzE,IAAAA,CAAAA,EAAO;AACnCmC,MAAAA,OAAAA,CAAQG,IAAIvG,GAAAA,CAAAA;AACd,IAAA;AACF,EAAA;AAEA,EAAA,OAAOgG,KAAAA,CAAMtB,IAAAA,CAAK0B,OAAAA,CAAAA,CAASK,IAAAA,CAAK,CAACC,CAAAA,EAAGC,CAAAA,KAAMD,CAAAA,CAAEE,aAAAA,CAAcD,CAAAA,CAAAA,CAAAA;AAC5D;AAxCgB8B,MAAAA,CAAAA,aAAAA,EAAAA,eAAAA,CAAAA;AAiDT,SAASG,eAAAA,CAAgB5H,IAAAA,EAAiB6H,UAAAA,GAAqB,GAAA,EAAG;AACvE,EAAA,IAAI7H,IAAAA,CAAKnB,WAAW,CAAA,EAAG;AACrB,IAAA,OAAO,CAAA;AACT,EAAA;AAGA,EAAA,MAAMiJ,MAAAA,GAAS9H,KAAK6B,KAAAA,CAAM,CAAA,EAAGO,KAAKC,GAAAA,CAAIwF,UAAAA,EAAY7H,IAAAA,CAAKnB,MAAM,CAAA,CAAA;AAC7D,EAAA,MAAMkJ,SAAAA,GAAY5D,aAAa2D,MAAAA,CAAAA;AAC/B,EAAA,MAAME,cAAAA,GAAiBD,SAAAA,CAAUlJ,MAAAA,GAASiJ,MAAAA,CAAOjJ,MAAAA;AAGjD,EAAA,MAAM2G,OAAAA,GAAUiC,cAAczH,IAAAA,CAAAA;AAC9B,EAAA,MAAMiI,UAAAA,GAAazC,OAAAA,CAAQpE,IAAAA,CAAK,GAAA,EAAKvC,MAAAA,GAAS,CAAA;AAE9C,EAAA,OAAOuD,IAAAA,CAAKI,IAAAA,CAAKyF,UAAAA,GAAaD,cAAAA,GAAiBhI,KAAKnB,MAAM,CAAA;AAC5D;AAfgB+I,MAAAA,CAAAA,eAAAA,EAAAA,iBAAAA,CAAAA;;;AChQhB,IAAMM,0BAAAA,GAA6B,CAAA;;;;;;;;;;AAwDnC,eAAsBC,iBAAiB1G,MAAAA,EAA8B;AACnE,EAAA,MAAM,EACJ2G,WAAAA,EACAC,KAAAA,GAAQ,QAAA,EACRC,OAAAA,EACAC,SAAAA,EACAC,WAAAA,EACAC,IAAAA,EACAC,WAAAA,EACAxH,MAAAA,EACAyH,eAAAA,EACAC,cAAAA,EACAC,cAAY,GACVpH,MAAAA;AAEJ,EAAA,MAAMqH,MAAAA,GAAS,IAAIC,aAAAA,CAAc;AAAEV,IAAAA,KAAAA;AAAOD,IAAAA;GAAY,CAAA;AAEtD,EAAA,MAAMY,KAAAA,GAAQ;AACZR,IAAAA,WAAAA;AACAC,IAAAA,IAAAA;AACAC,IAAAA,WAAAA;AACAxH,IAAAA,MAAAA;AACA,IAAA,GAAIyH,oBAAoBvI,MAAAA,GAAY;AAAEuI,MAAAA;AAAgB,KAAA,GAAI,EAAC;AAC3D,IAAA,GAAIC,mBAAmBxI,MAAAA,GAAY;AAAEwI,MAAAA;AAAe,KAAA,GAAI,EAAC;AACzD,IAAA,GAAIC,iBAAiBzI,MAAAA,GAAY;AAAEyI,MAAAA;AAAa,KAAA,GAAI;AACtD,GAAA;AAEA,EAAA,MAAMI,QAAAA,GAAW,MAAMH,MAAAA,CAAOI,aAAAA,CAAuC;IACnEC,KAAAA,EAAOjB,0BAAAA;IACPkB,SAAAA,EAAW;AAAEJ,MAAAA;AAAM,KAAA;IACnBxD,OAAAA,EAAS;MACP,YAAA,EAAc8C,OAAAA;MACd,cAAA,EAAgBC,SAAAA;MAChB,gBAAA,EAAkBC;AACpB;GACF,CAAA;AAEA,EAAA,MAAMa,GAAAA,GAAMJ,SAASjJ,IAAAA,EAAMsJ,eAAAA;AAC3B,EAAA,IAAI,CAACD,GAAAA,EAAK;AACR,IAAA,MAAM,IAAIlI,MAAM,qCAAA,CAAA;AAClB,EAAA;AACA,EAAA,OAAOkI,GAAAA;AACT;AA1CsBlB,MAAAA,CAAAA,gBAAAA,EAAAA,kBAAAA,CAAAA","file":"chunk-5HL47UH2.js","sourcesContent":["/**\n * Export Module\n *\n * Provides common utilities for data export operations across all Burdenoff microservices.\n * Includes pagination services, base exporter classes, CSV utilities, and type definitions.\n *\n * @module export\n *\n * @example\n * ```typescript\n * // Import from the export module\n * import {\n *   BaseModuleExporter,\n *   PaginationService,\n *   convertToCSV,\n * } from '@burdenoff/be-sdk/export';\n *\n * // Create a custom exporter\n * class UserExporter extends BaseModuleExporter<User> {\n *   moduleKey = 'users';\n *   displayName = 'Users';\n *\n *   async export(options: ExportOptions): Promise<ExportResult> {\n *     const data = await this.fetchAll(\n *       (cursor) => db.user.findMany({\n *         where: cursor ? { id: { gt: cursor } } : {},\n *         take: 100,\n *       })\n *     );\n *\n *     const csv = convertToCSV(data);\n *     return { data, format: 'csv' };\n *   }\n * }\n *\n * // Use pagination utilities\n * const result = PaginationService.paginate(items, { page: 1, pageSize: 20 });\n * ```\n */\n\n// ============================================================================\n// Type Exports\n// ============================================================================\n\nexport type {\n  // Export format types\n  ExportFormat,\n  ExportFormatEnum,\n\n  // Configuration types\n  ExportConfig,\n  ExportOptions,\n\n  // Job types\n  ExportJobStatus,\n  ExportJob,\n  ExportProgress,\n  ExportResult,\n\n  // Fetch types\n  ExportFetchOptions,\n  ExportFetchResult,\n\n  // Pagination types\n  PaginationParams,\n  PaginatedResult,\n  PaginatedQueryOptions,\n  PaginateResult,\n  PaginateQueryFn,\n\n  // Module interface\n  ExportableModule,\n\n  // CSV types\n  CSVConversionOptions,\n} from './types.js';\n\n// ============================================================================\n// Class Exports\n// ============================================================================\n\nexport { BaseModuleExporter } from './base-exporter.js';\nexport { PaginationService } from './pagination.js';\n\n// ============================================================================\n// Function Exports\n// ============================================================================\n\nexport { convertToCSV, parseCSV, csvToJSON, getCSVHeaders, estimateCSVSize } from './csv.js';\n\n// ============================================================================\n// Gateway Helper Exports\n// ============================================================================\n\nexport { triggerExportJob } from './gateway-client.js';\nexport type { TriggerExportJobParams, ExportJobResult, ExportActorType, ExportFormatGql } from './gateway-client.js';\n","/**\n * Base Module Exporter\n *\n * Abstract base class for module exporters across all Burdenoff microservices.\n * Provides common functionality for exporting data from different modules.\n *\n * @module export/base-exporter\n *\n * @example\n * ```typescript\n * import { BaseModuleExporter } from '@burdenoff/be-sdk/export';\n *\n * class UserExporter extends BaseModuleExporter<User> {\n *   moduleKey = 'users';\n *   displayName = 'Users';\n *   description = 'Export user data';\n *\n *   async export(options: ExportOptions): Promise<ExportResult> {\n *     // Implementation\n *   }\n * }\n * ```\n */\n\nimport type { ExportOptions, ExportResult, PaginateQueryFn, PaginateResult } from './types.js';\n\n/**\n * Abstract base class for module exporters\n *\n * Provides common functionality that all module exporters can inherit:\n * - Field filtering\n * - Pagination helpers\n * - Module metadata\n *\n * @typeParam T - The type of entity this exporter handles\n */\nexport abstract class BaseModuleExporter<T = unknown> {\n  /** Unique key identifying this module (e.g., 'users', 'tags', 'orders') */\n  moduleKey?: string;\n\n  /** Human-readable display name for the module */\n  displayName?: string;\n\n  /** Description of what this module exports */\n  description?: string;\n\n  /** Default fields to exclude from export (e.g., sensitive data) */\n  defaultExcludeFields?: string[];\n\n  /** List of product IDs this exporter supports */\n  supportedProducts?: string[];\n\n  /** Model name for database operations */\n  protected modelName?: string;\n\n  /**\n   * Export data from this module\n   *\n   * Subclasses should implement this method to perform the actual export.\n   * The method is optional to allow for gradual implementation.\n   *\n   * @param options - Export options including format, filters, and pagination\n   * @returns Export result with data or download URL\n   */\n  export?(options: ExportOptions): Promise<ExportResult>;\n\n  /**\n   * Filter fields from an entity based on exclude list\n   *\n   * Use this to remove sensitive or unnecessary fields from exported data.\n   *\n   * @param entity - Entity to filter\n   * @param excludeFields - Fields to exclude (uses defaultExcludeFields if not provided)\n   * @returns Filtered entity as a plain object\n   *\n   * @example\n   * ```typescript\n   * const user = { id: '1', name: 'John', password: 'secret', ssn: '123' };\n   * const filtered = this.filterFields(user, ['password', 'ssn']);\n   * // Result: { id: '1', name: 'John' }\n   * ```\n   */\n  protected filterFields(entity: T | Record<string, unknown>, excludeFields?: string[]): Record<string, unknown> {\n    const fieldsToExclude = excludeFields || this.defaultExcludeFields || [];\n\n    if (fieldsToExclude.length === 0) {\n      return entity as Record<string, unknown>;\n    }\n\n    const filtered: Record<string, unknown> = {};\n    const record = entity as Record<string, unknown>;\n\n    for (const [key, value] of Object.entries(record)) {\n      if (!fieldsToExclude.includes(key)) {\n        filtered[key] = value;\n      }\n    }\n\n    return filtered;\n  }\n\n  /**\n   * Filter multiple entities\n   *\n   * @param entities - Array of entities to filter\n   * @param excludeFields - Fields to exclude\n   * @returns Array of filtered entities\n   */\n  protected filterFieldsMany(\n    entities: (T | Record<string, unknown>)[],\n    excludeFields?: string[]\n  ): Record<string, unknown>[] {\n    return entities.map((entity) => this.filterFields(entity, excludeFields));\n  }\n\n  /**\n   * Paginate helper for database queries\n   *\n   * Use this to implement paginated data fetching in your export method.\n   *\n   * @param queryFn - Function that executes the paginated query\n   * @param page - Page number (1-indexed)\n   * @param pageSize - Number of items per page\n   * @returns Paginated result with data and metadata\n   *\n   * @example\n   * ```typescript\n   * const result = await this.paginate(\n   *   async ({ skip, take }) => {\n   *     const items = await db.user.findMany({ skip, take });\n   *     const total = await db.user.count();\n   *     return { items, total };\n   *   },\n   *   1,\n   *   100\n   * );\n   * ```\n   */\n  protected async paginate(\n    queryFn: PaginateQueryFn<T>,\n    page: number = 1,\n    pageSize: number = 100\n  ): Promise<PaginateResult<T>> {\n    const skip = (page - 1) * pageSize;\n    const take = pageSize;\n\n    const { items, total } = await queryFn({ skip, take });\n\n    return {\n      data: items,\n      total,\n      hasMore: skip + items.length < total,\n      nextCursor: items.length > 0 && skip + items.length < total ? String(page + 1) : undefined,\n    };\n  }\n\n  /**\n   * Fetch all data using cursor-based pagination\n   *\n   * Use this for exporting large datasets efficiently.\n   *\n   * @param fetchBatch - Function to fetch a batch of data\n   * @param batchSize - Number of items per batch\n   * @returns All fetched items\n   *\n   * @example\n   * ```typescript\n   * const allUsers = await this.fetchAll(\n   *   async (cursor) => db.user.findMany({\n   *     where: cursor ? { id: { gt: cursor } } : undefined,\n   *     orderBy: { id: 'asc' },\n   *     take: 100,\n   *   }),\n   *   100\n   * );\n   * ```\n   */\n  protected async fetchAll(\n    fetchBatch: (cursor?: string) => Promise<(T & { id: string })[]>,\n    batchSize: number = 100\n  ): Promise<T[]> {\n    const allItems: T[] = [];\n    let cursor: string | undefined;\n\n    while (true) {\n      const batch = await fetchBatch(cursor);\n\n      if (batch.length === 0) {\n        break;\n      }\n\n      allItems.push(...batch);\n\n      // Get cursor from last item\n      const lastItem = batch[batch.length - 1];\n      if (lastItem) {\n        cursor = lastItem.id;\n      }\n\n      // If we got fewer items than batch size, we're done\n      if (batch.length < batchSize) {\n        break;\n      }\n    }\n\n    return allItems;\n  }\n\n  /**\n   * Transform entity for export\n   *\n   * Override this method to customize how entities are transformed before export.\n   * Default implementation returns the entity as-is after field filtering.\n   *\n   * @param entity - Entity to transform\n   * @param excludeFields - Fields to exclude\n   * @returns Transformed entity\n   */\n  protected transformForExport(entity: T, excludeFields?: string[]): Record<string, unknown> {\n    return this.filterFields(entity, excludeFields);\n  }\n\n  /**\n   * Validate export options\n   *\n   * Override this to add custom validation for export options.\n   *\n   * @param options - Export options to validate\n   * @throws Error if options are invalid\n   */\n  protected validateOptions(options: ExportOptions): void {\n    const validFormats = ['csv', 'json', 'xlsx'];\n    if (!validFormats.includes(options.format)) {\n      throw new Error(`Invalid export format: ${options.format}. Valid formats: ${validFormats.join(', ')}`);\n    }\n  }\n\n  /**\n   * Get supported export formats\n   *\n   * @returns Array of supported format strings\n   */\n  getSupportedFormats(): string[] {\n    return ['csv', 'json', 'xlsx'];\n  }\n\n  /**\n   * Get module metadata\n   *\n   * @returns Module metadata object\n   */\n  getMetadata(): {\n    moduleKey?: string;\n    displayName?: string;\n    description?: string;\n    supportedProducts?: string[];\n    supportedFormats: string[];\n  } {\n    return {\n      moduleKey: this.moduleKey,\n      displayName: this.displayName,\n      description: this.description,\n      supportedProducts: this.supportedProducts,\n      supportedFormats: this.getSupportedFormats(),\n    };\n  }\n}\n","/**\n * Pagination Service\n *\n * Provides pagination utilities for export operations across all Burdenoff microservices.\n * Supports both offset-based and cursor-based pagination strategies.\n *\n * @module export/pagination\n *\n * @example\n * ```typescript\n * import { PaginationService } from '@burdenoff/be-sdk/export';\n *\n * // Offset-based pagination\n * const result = PaginationService.paginate(items, { page: 2, pageSize: 20 });\n *\n * // Cursor-based pagination with async generator\n * for await (const item of PaginationService.paginatedQuery(fetchFn, { limit: 100 })) {\n *   console.log(item);\n * }\n * ```\n */\n\nimport type { PaginatedQueryOptions, PaginatedResult, PaginationParams } from './types.js';\n\n/**\n * Service providing pagination utilities for export and data fetching operations\n */\nexport class PaginationService {\n  /**\n   * Paginate an array of items using offset-based pagination\n   *\n   * @param items - Array of items to paginate\n   * @param params - Pagination parameters\n   * @returns Paginated result with items and metadata\n   *\n   * @example\n   * ```typescript\n   * const allUsers = await db.user.findMany();\n   * const page = PaginationService.paginate(allUsers, { page: 1, pageSize: 10 });\n   * console.log(page.items); // First 10 users\n   * console.log(page.pageInfo.hasNextPage); // true if more pages exist\n   * ```\n   */\n  static paginate<T>(items: T[], params: PaginationParams): PaginatedResult<T> {\n    const page = params.page ?? 1;\n    const pageSize = params.pageSize ?? 20;\n    const start = (page - 1) * pageSize;\n    const end = start + pageSize;\n\n    const paginatedItems = items.slice(start, end);\n\n    return {\n      items: paginatedItems,\n      totalCount: items.length,\n      pageInfo: {\n        hasNextPage: end < items.length,\n        hasPreviousPage: page > 1,\n        startCursor: paginatedItems.length > 0 ? String(start) : undefined,\n        endCursor: paginatedItems.length > 0 ? String(Math.min(end, items.length) - 1) : undefined,\n      },\n    };\n  }\n\n  /**\n   * Calculate pagination metadata without slicing data\n   *\n   * @param totalCount - Total number of items\n   * @param page - Current page number (1-indexed)\n   * @param pageSize - Items per page\n   * @returns Pagination metadata\n   *\n   * @example\n   * ```typescript\n   * const meta = PaginationService.calculatePagination(150, 3, 20);\n   * // meta.hasNextPage = true (page 4 exists)\n   * // meta.hasPreviousPage = true (page 2 exists)\n   * // meta.totalPages = 8\n   * ```\n   */\n  static calculatePagination(\n    totalCount: number,\n    page: number,\n    pageSize: number\n  ): {\n    hasNextPage: boolean;\n    hasPreviousPage: boolean;\n    totalPages: number;\n    currentPage: number;\n    pageSize: number;\n    startIndex: number;\n    endIndex: number;\n  } {\n    const totalPages = Math.ceil(totalCount / pageSize);\n    const startIndex = (page - 1) * pageSize;\n    const endIndex = Math.min(startIndex + pageSize - 1, totalCount - 1);\n\n    return {\n      hasNextPage: page < totalPages,\n      hasPreviousPage: page > 1,\n      totalPages,\n      currentPage: page,\n      pageSize,\n      startIndex,\n      endIndex,\n    };\n  }\n\n  /**\n   * Async generator for paginated database queries using cursor-based pagination\n   *\n   * This is ideal for processing large datasets without loading everything into memory.\n   * The generator yields items one at a time, fetching new batches as needed.\n   *\n   * @param fetchFn - Function to fetch data given a cursor\n   * @param options - Pagination options\n   * @returns Async generator of items\n   *\n   * @example\n   * ```typescript\n   * // Define fetch function that queries the database\n   * const fetchUsers = async (cursor?: string) => {\n   *   return db.user.findMany({\n   *     where: cursor ? { id: { gt: cursor } } : undefined,\n   *     orderBy: { id: 'asc' },\n   *     take: 100,\n   *   });\n   * };\n   *\n   * // Process all users without loading all into memory\n   * for await (const user of PaginationService.paginatedQuery(fetchUsers)) {\n   *   await processUser(user);\n   * }\n   * ```\n   */\n  static async *paginatedQuery<T extends { id: string }>(\n    fetchFn: (cursor?: string) => Promise<T[]>,\n    options: PaginatedQueryOptions = {}\n  ): AsyncGenerator<T, void, unknown> {\n    const { limit, initialCursor } = options;\n    let cursor = initialCursor;\n    let hasMore = true;\n    let totalYielded = 0;\n\n    while (hasMore) {\n      const items = await fetchFn(cursor);\n\n      if (items.length === 0) {\n        break;\n      }\n\n      for (const item of items) {\n        yield item;\n        totalYielded++;\n\n        if (limit && totalYielded >= limit) {\n          return;\n        }\n      }\n\n      // Get next cursor from last item\n      const lastItem = items[items.length - 1];\n      if (lastItem) {\n        cursor = lastItem.id;\n      }\n\n      // If we got fewer items than expected batch size, we're done\n      // Note: This assumes fetchFn respects a consistent batch size internally\n      hasMore = items.length > 0;\n    }\n  }\n\n  /**\n   * Collect all items from a paginated query into an array\n   *\n   * @param fetchFn - Function to fetch data given a cursor\n   * @param options - Pagination options\n   * @returns Array of all items\n   *\n   * @example\n   * ```typescript\n   * const allUsers = await PaginationService.collectPaginatedQuery(fetchUsers, { limit: 1000 });\n   * ```\n   */\n  static async collectPaginatedQuery<T extends { id: string }>(\n    fetchFn: (cursor?: string) => Promise<T[]>,\n    options: PaginatedQueryOptions = {}\n  ): Promise<T[]> {\n    const items: T[] = [];\n\n    for await (const item of PaginationService.paginatedQuery(fetchFn, options)) {\n      items.push(item);\n    }\n\n    return items;\n  }\n\n  /**\n   * Create a cursor-based paginated fetch function from a Prisma-style query\n   *\n   * @param queryFn - Prisma-style query function\n   * @param batchSize - Number of items to fetch per batch\n   * @returns Fetch function compatible with paginatedQuery\n   *\n   * @example\n   * ```typescript\n   * const fetchFn = PaginationService.createPrismaFetchFn(\n   *   (cursor) => db.user.findMany({\n   *     where: { isActive: true, ...(cursor ? { id: { gt: cursor } } : {}) },\n   *     orderBy: { id: 'asc' },\n   *     take: 100,\n   *   }),\n   *   100\n   * );\n   *\n   * for await (const user of PaginationService.paginatedQuery(fetchFn)) {\n   *   console.log(user);\n   * }\n   * ```\n   */\n  static createPrismaFetchFn<T extends { id: string }>(\n    queryFn: (cursor?: string) => Promise<T[]>,\n    _batchSize: number = 100\n  ): (cursor?: string) => Promise<T[]> {\n    return queryFn;\n  }\n\n  /**\n   * Calculate offset for skip-based pagination\n   *\n   * @param page - Page number (1-indexed)\n   * @param pageSize - Items per page\n   * @returns Offset value for skip\n   */\n  static calculateOffset(page: number, pageSize: number): number {\n    return (Math.max(1, page) - 1) * pageSize;\n  }\n\n  /**\n   * Parse cursor string to extract pagination state\n   *\n   * @param cursor - Base64-encoded cursor string\n   * @returns Decoded cursor data or null if invalid\n   */\n  static parseCursor<T = Record<string, unknown>>(cursor: string): T | null {\n    try {\n      const decoded = Buffer.from(cursor, 'base64').toString('utf-8');\n      return JSON.parse(decoded) as T;\n    } catch {\n      return null;\n    }\n  }\n\n  /**\n   * Create cursor string from pagination state\n   *\n   * @param data - Data to encode in cursor\n   * @returns Base64-encoded cursor string\n   */\n  static createCursor(data: Record<string, unknown>): string {\n    return Buffer.from(JSON.stringify(data)).toString('base64');\n  }\n}\n","/**\n * CSV Utilities\n *\n * Utilities for converting data to CSV format for export operations.\n *\n * @module export/csv\n *\n * @example\n * ```typescript\n * import { convertToCSV, parseCSV } from '@burdenoff/be-sdk/export';\n *\n * const csv = convertToCSV(users, { includeHeaders: true });\n * console.log(csv);\n * ```\n */\n\nimport type { CSVConversionOptions } from './types.js';\n\nconst FORMULA_PREFIX_RE = /^[=+\\-@]/;\n\nexport function sanitizeCSVCell(value: string): string {\n  return FORMULA_PREFIX_RE.test(value) ? `'${value}` : value;\n}\n\n/**\n * Convert an array of objects to CSV format\n *\n * Handles nested objects by flattening them with dot notation.\n * Arrays are JSON stringified.\n * Dates are converted to ISO strings.\n *\n * @param data - Array of objects to convert\n * @param options - CSV conversion options\n * @returns CSV string\n *\n * @example\n * ```typescript\n * const users = [\n *   { id: 1, name: 'John', address: { city: 'NYC' } },\n *   { id: 2, name: 'Jane', address: { city: 'LA' } },\n * ];\n *\n * const csv = convertToCSV(users);\n * // Output:\n * // id,name,address.city\n * // 1,John,NYC\n * // 2,Jane,LA\n * ```\n */\nexport function convertToCSV(data: unknown[], options: CSVConversionOptions = {}): string {\n  const { delimiter = ',', includeHeaders = true, flattenFields = true, maxFlattenDepth = 3 } = options;\n\n  if (data.length === 0) {\n    return '';\n  }\n\n  // Flatten objects and get all keys\n  const flattenObject = (obj: unknown, prefix = '', depth = 0): Record<string, string> => {\n    const result: Record<string, string> = {};\n\n    if (obj === null || obj === undefined) {\n      return result;\n    }\n\n    if (typeof obj !== 'object') {\n      return { [prefix || 'value']: String(obj) };\n    }\n\n    for (const [key, value] of Object.entries(obj as Record<string, unknown>)) {\n      const newKey = prefix ? `${prefix}.${key}` : key;\n\n      if (value === null || value === undefined) {\n        result[newKey] = '';\n      } else if (value instanceof Date) {\n        result[newKey] = value.toISOString();\n      } else if (Array.isArray(value)) {\n        result[newKey] = JSON.stringify(value);\n      } else if (typeof value === 'object' && flattenFields && depth < maxFlattenDepth) {\n        Object.assign(result, flattenObject(value, newKey, depth + 1));\n      } else if (typeof value === 'object') {\n        result[newKey] = JSON.stringify(value);\n      } else {\n        result[newKey] = String(value);\n      }\n    }\n\n    return result;\n  };\n\n  // Flatten all records and collect all keys\n  const flattenedRecords = data.map((item) => flattenObject(item));\n  const allKeys = new Set<string>();\n  for (const record of flattenedRecords) {\n    for (const key of Object.keys(record)) {\n      allKeys.add(key);\n    }\n  }\n\n  const headers = Array.from(allKeys).sort((a, b) => a.localeCompare(b));\n\n  // Escape CSV values\n  const escapeCSV = (value: string): string => {\n    const sanitizedValue = sanitizeCSVCell(value);\n\n    if (\n      sanitizedValue.includes(delimiter) ||\n      sanitizedValue.includes('\"') ||\n      sanitizedValue.includes('\\n') ||\n      sanitizedValue.includes('\\r')\n    ) {\n      return `\"${sanitizedValue.replace(/\"/g, '\"\"')}\"`;\n    }\n    return sanitizedValue;\n  };\n\n  // Build CSV\n  const lines: string[] = [];\n\n  if (includeHeaders) {\n    lines.push(headers.map(escapeCSV).join(delimiter));\n  }\n\n  for (const record of flattenedRecords) {\n    const row = headers.map((header) => escapeCSV(record[header] || ''));\n    lines.push(row.join(delimiter));\n  }\n\n  return lines.join('\\n');\n}\n\n/**\n * Parse a CSV string into an array of objects\n *\n * @param csv - CSV string to parse\n * @param options - Parse options\n * @returns Array of parsed objects\n *\n * @example\n * ```typescript\n * const csv = 'id,name\\n1,John\\n2,Jane';\n * const data = parseCSV(csv);\n * // [{ id: '1', name: 'John' }, { id: '2', name: 'Jane' }]\n * ```\n */\nexport function parseCSV(\n  csv: string,\n  options: { delimiter?: string; hasHeaders?: boolean } = {}\n): Record<string, string>[] {\n  const { delimiter = ',', hasHeaders = true } = options;\n\n  const lines = csv.split(/\\r?\\n/).filter((line) => line.trim());\n\n  if (lines.length === 0) {\n    return [];\n  }\n\n  // Parse a single CSV line, handling quoted values\n  const parseLine = (line: string): string[] => {\n    const values: string[] = [];\n    let current = '';\n    let inQuotes = false;\n\n    let i = 0;\n    while (i < line.length) {\n      const char = line[i];\n      const nextChar = line[i + 1];\n\n      if (char === '\"' && inQuotes && nextChar === '\"') {\n        current += '\"';\n        i += 2; // Skip next quote\n      } else if (char === '\"') {\n        inQuotes = !inQuotes;\n        i++;\n      } else if (char === delimiter && !inQuotes) {\n        values.push(current);\n        current = '';\n        i++;\n      } else {\n        current += char;\n        i++;\n      }\n    }\n\n    values.push(current);\n    return values;\n  };\n\n  let headers: string[];\n  let dataLines: string[];\n\n  // We've already checked that lines.length > 0, so lines[0] is guaranteed to exist\n  const firstLine = lines[0] as string;\n\n  if (hasHeaders) {\n    headers = parseLine(firstLine);\n    dataLines = lines.slice(1);\n  } else {\n    // Generate numeric headers if no header row\n    const firstRow = parseLine(firstLine);\n    headers = firstRow.map((_, i) => `col${i}`);\n    dataLines = lines;\n  }\n\n  return dataLines.map((line) => {\n    const values = parseLine(line);\n    const obj: Record<string, string> = {};\n\n    headers.forEach((header, i) => {\n      obj[header] = values[i] || '';\n    });\n\n    return obj;\n  });\n}\n\n/**\n * Convert CSV to JSON string\n *\n * @param csv - CSV string\n * @param options - Parse options\n * @returns JSON string\n */\nexport function csvToJSON(\n  csv: string,\n  options: { delimiter?: string; hasHeaders?: boolean; pretty?: boolean } = {}\n): string {\n  const { pretty = false, ...parseOptions } = options;\n  const data = parseCSV(csv, parseOptions);\n  return pretty ? JSON.stringify(data, null, 2) : JSON.stringify(data);\n}\n\n/**\n * Get CSV headers from data\n *\n * @param data - Array of objects\n * @param flattenFields - Whether to flatten nested objects\n * @returns Array of header strings\n */\nexport function getCSVHeaders(data: unknown[], flattenFields: boolean = true): string[] {\n  if (data.length === 0) {\n    return [];\n  }\n\n  const collectKeys = (obj: unknown, prefix = '', depth = 0): string[] => {\n    const keys: string[] = [];\n\n    if (obj === null || obj === undefined || typeof obj !== 'object') {\n      return prefix ? [prefix] : [];\n    }\n\n    for (const [key, value] of Object.entries(obj as Record<string, unknown>)) {\n      const fullKey = prefix ? `${prefix}.${key}` : key;\n\n      if (\n        value !== null &&\n        typeof value === 'object' &&\n        !Array.isArray(value) &&\n        !(value instanceof Date) &&\n        flattenFields &&\n        depth < 3\n      ) {\n        keys.push(...collectKeys(value, fullKey, depth + 1));\n      } else {\n        keys.push(fullKey);\n      }\n    }\n\n    return keys;\n  };\n\n  const allKeys = new Set<string>();\n  for (const item of data) {\n    for (const key of collectKeys(item)) {\n      allKeys.add(key);\n    }\n  }\n\n  return Array.from(allKeys).sort((a, b) => a.localeCompare(b));\n}\n\n/**\n * Estimate CSV file size for a dataset\n *\n * @param data - Array of objects\n * @param sampleSize - Number of records to sample for estimation\n * @returns Estimated size in bytes\n */\nexport function estimateCSVSize(data: unknown[], sampleSize: number = 100): number {\n  if (data.length === 0) {\n    return 0;\n  }\n\n  // Take a sample to estimate average row size\n  const sample = data.slice(0, Math.min(sampleSize, data.length));\n  const sampleCSV = convertToCSV(sample);\n  const averageRowSize = sampleCSV.length / sample.length;\n\n  // Estimate total size (headers + data rows)\n  const headers = getCSVHeaders(data);\n  const headerSize = headers.join(',').length + 1; // +1 for newline\n\n  return Math.ceil(headerSize + averageRowSize * data.length);\n}\n","/**\n * Export Gateway Helper\n *\n * Centralised wrapper around the workspace internal gateway's\n * `createExportJob` mutation, used by per-svc convenience resolvers\n * (e.g. `createTagsExportJob`, `createGroupsExportJob`).\n *\n * Replaces the duplicated `src/clients/export-gateway.ts` files that\n * existed in 19+ workspace svcs.\n *\n * @module export/gateway-client\n *\n * @example\n * ```typescript\n * import { triggerExportJob } from '@burdenoff/be-sdk/export';\n *\n * const result = await triggerExportJob({\n *   serviceName: 'wspace-tags-svc',\n *   workspaceId: ctx.workspaceId,\n *   name: input.name,\n *   entityTypes: ['tags', 'vocabularies'],\n *   format: input.format,\n *   actorId: ctx.actorId,\n *   actorType: ctx.actorType,\n * });\n * ```\n */\n\nimport { GatewayClient } from '../gateway/index.js';\nimport type { ServiceLayer } from '../types/layer.js';\n\nconst CREATE_EXPORT_JOB_MUTATION = `mutation CreateExportJob($input: CreateExportJobInput!) {\n  createExportJob(input: $input) {\n    id\n    status\n    workspaceId\n    entityTypes\n    format\n    createdAt\n  }\n}`;\n\nexport type ExportActorType = 'user' | 'app' | 'service' | 'super_admin';\nexport type ExportFormatGql = 'JSON' | 'CSV';\n\nexport interface TriggerExportJobParams {\n  /** Caller service name, used by gateway client telemetry/auth */\n  serviceName: string;\n  /** Layer for the gateway. Defaults to `wspace`. */\n  layer?: ServiceLayer;\n  /** Workspace context (required for wspace exports). */\n  workspaceId: string;\n  /** Human-readable name for the export job. */\n  name: string;\n  /** Entity types registered in `wspace-export-svc` to include. */\n  entityTypes: string[];\n  /** Output format. */\n  format: ExportFormatGql;\n  /** Actor making the request (forwarded to RBAC). */\n  actorId: string;\n  actorType: ExportActorType;\n  /** Whether to include extended metadata in the export ZIP. */\n  includeMetadata?: boolean;\n  /** Optional ISO date-range bounds. */\n  dateRangeStart?: string;\n  dateRangeEnd?: string;\n}\n\nexport interface ExportJobResult {\n  id: string;\n  status: string;\n  workspaceId: string;\n  entityTypes: string[];\n  format: string;\n  createdAt: string;\n}\n\ninterface CreateExportJobResponse {\n  createExportJob?: ExportJobResult;\n}\n\n/**\n * Submit a `createExportJob` mutation to the workspace internal gateway.\n *\n * The caller is expected to map the returned `ExportJobResult` to its\n * own GraphQL output type (the per-svc `ExportJobResponse`).\n */\nexport async function triggerExportJob(params: TriggerExportJobParams): Promise<ExportJobResult> {\n  const {\n    serviceName,\n    layer = 'wspace',\n    actorId,\n    actorType,\n    workspaceId,\n    name,\n    entityTypes,\n    format,\n    includeMetadata,\n    dateRangeStart,\n    dateRangeEnd,\n  } = params;\n\n  const client = new GatewayClient({ layer, serviceName });\n\n  const input = {\n    workspaceId,\n    name,\n    entityTypes,\n    format,\n    ...(includeMetadata !== undefined ? { includeMetadata } : {}),\n    ...(dateRangeStart !== undefined ? { dateRangeStart } : {}),\n    ...(dateRangeEnd !== undefined ? { dateRangeEnd } : {}),\n  };\n\n  const response = await client.internalQuery<CreateExportJobResponse>({\n    query: CREATE_EXPORT_JOB_MUTATION,\n    variables: { input },\n    headers: {\n      'x-actor-id': actorId,\n      'x-actor-type': actorType,\n      'x-workspace-id': workspaceId,\n    },\n  });\n\n  const job = response.data?.createExportJob;\n  if (!job) {\n    throw new Error('Export service did not return a job');\n  }\n  return job;\n}\n"]}
+{"version":3,"sources":["../src/export/index.ts","../src/export/base-exporter.ts","../src/export/pagination.ts","../src/export/csv.ts","../src/export/gateway-client.ts"],"names":["BaseModuleExporter","moduleKey","displayName","description","defaultExcludeFields","supportedProducts","modelName","filterFields","entity","excludeFields","fieldsToExclude","length","filtered","record","key","value","Object","entries","includes","filterFieldsMany","entities","map","paginate","queryFn","page","pageSize","skip","take","items","total","data","hasMore","nextCursor","String","undefined","fetchAll","fetchBatch","batchSize","allItems","cursor","batch","push","lastItem","id","transformForExport","validateOptions","options","validFormats","format","Error","join","getSupportedFormats","getMetadata","supportedFormats","PaginationService","params","start","end","paginatedItems","slice","totalCount","pageInfo","hasNextPage","hasPreviousPage","startCursor","endCursor","Math","min","calculatePagination","totalPages","ceil","startIndex","endIndex","currentPage","paginatedQuery","fetchFn","limit","initialCursor","totalYielded","item","collectPaginatedQuery","createPrismaFetchFn","_batchSize","calculateOffset","max","parseCursor","decoded","Buffer","from","toString","JSON","parse","createCursor","stringify","FORMULA_PREFIX_RE","sanitizeCSVCell","test","convertToCSV","delimiter","includeHeaders","flattenFields","maxFlattenDepth","flattenObject","obj","prefix","depth","result","newKey","Date","toISOString","Array","isArray","assign","flattenedRecords","allKeys","Set","keys","add","headers","sort","a","b","localeCompare","escapeCSV","sanitizedValue","replace","lines","row","header","parseCSV","csv","hasHeaders","split","filter","line","trim","parseLine","values","current","inQuotes","i","char","nextChar","dataLines","firstLine","firstRow","_","forEach","csvToJSON","pretty","parseOptions","getCSVHeaders","collectKeys","fullKey","estimateCSVSize","sampleSize","sample","sampleCSV","averageRowSize","headerSize","CREATE_EXPORT_JOB_MUTATION","triggerExportJob","serviceName","layer","actorId","actorType","workspaceId","name","entityTypes","includeMetadata","dateRangeStart","dateRangeEnd","client","GatewayClient","input","response","internalQuery","query","variables","job","createExportJob"],"mappings":";;;;AAAA,IAAA,cAAA,GAAA;;;;;;;;;;;;;ACoCO,IAAeA,qBAAf,MAAeA;EApCtB;;;;AAsCEC,EAAAA,SAAAA;;AAGAC,EAAAA,WAAAA;;AAGAC,EAAAA,WAAAA;;AAGAC,EAAAA,oBAAAA;;AAGAC,EAAAA,iBAAAA;;AAGUC,EAAAA,SAAAA;;;;;;;;;;;;;;;;;AA6BAC,EAAAA,YAAAA,CAAaC,QAAqCC,aAAAA,EAAmD;AAC7G,IAAA,MAAMC,eAAAA,GAAkBD,aAAAA,IAAiB,IAAA,CAAKL,oBAAAA,IAAwB,EAAA;AAEtE,IAAA,IAAIM,eAAAA,CAAgBC,WAAW,CAAA,EAAG;AAChC,MAAA,OAAOH,MAAAA;AACT,IAAA;AAEA,IAAA,MAAMI,WAAoC,EAAC;AAC3C,IAAA,MAAMC,MAAAA,GAASL,MAAAA;AAEf,IAAA,KAAA,MAAW,CAACM,GAAAA,EAAKC,KAAAA,KAAUC,MAAAA,CAAOC,OAAAA,CAAQJ,MAAAA,CAAAA,EAAS;AACjD,MAAA,IAAI,CAACH,eAAAA,CAAgBQ,QAAAA,CAASJ,GAAAA,CAAAA,EAAM;AAClCF,QAAAA,QAAAA,CAASE,GAAAA,CAAAA,GAAOC,KAAAA;AAClB,MAAA;AACF,IAAA;AAEA,IAAA,OAAOH,QAAAA;AACT,EAAA;;;;;;;;AASUO,EAAAA,gBAAAA,CACRC,UACAX,aAAAA,EAC2B;AAC3B,IAAA,OAAOW,QAAAA,CAASC,IAAI,CAACb,MAAAA,KAAW,KAAKD,YAAAA,CAAaC,MAAAA,EAAQC,aAAAA,CAAAA,CAAAA;AAC5D,EAAA;;;;;;;;;;;;;;;;;;;;;;;;AAyBA,EAAA,MAAgBa,QAAAA,CACdC,OAAAA,EACAC,IAAAA,GAAe,CAAA,EACfC,WAAmB,GAAA,EACS;AAC5B,IAAA,MAAMC,IAAAA,GAAAA,CAAQF,OAAO,CAAA,IAAKC,QAAAA;AAC1B,IAAA,MAAME,IAAAA,GAAOF,QAAAA;AAEb,IAAA,MAAM,EAAEG,KAAAA,EAAOC,KAAAA,EAAK,GAAK,MAAMN,OAAAA,CAAQ;AAAEG,MAAAA,IAAAA;AAAMC,MAAAA;KAAK,CAAA;AAEpD,IAAA,OAAO;MACLG,IAAAA,EAAMF,KAAAA;AACNC,MAAAA,KAAAA;MACAE,OAAAA,EAASL,IAAAA,GAAOE,MAAMjB,MAAAA,GAASkB,KAAAA;MAC/BG,UAAAA,EAAYJ,KAAAA,CAAMjB,MAAAA,GAAS,CAAA,IAAKe,IAAAA,GAAOE,KAAAA,CAAMjB,SAASkB,KAAAA,GAAQI,MAAAA,CAAOT,IAAAA,GAAO,CAAA,CAAA,GAAKU;AACnF,KAAA;AACF,EAAA;;;;;;;;;;;;;;;;;;;;;;EAuBA,MAAgBC,QAAAA,CACdC,UAAAA,EACAC,SAAAA,GAAoB,GAAA,EACN;AACd,IAAA,MAAMC,WAAgB,EAAA;AACtB,IAAA,IAAIC,MAAAA;AAEJ,IAAA,OAAO,IAAA,EAAM;AACX,MAAA,MAAMC,KAAAA,GAAQ,MAAMJ,UAAAA,CAAWG,MAAAA,CAAAA;AAE/B,MAAA,IAAIC,KAAAA,CAAM7B,WAAW,CAAA,EAAG;AACtB,QAAA;AACF,MAAA;AAEA2B,MAAAA,QAAAA,CAASG,IAAAA,CAAI,GAAID,KAAAA,CAAAA;AAGjB,MAAA,MAAME,QAAAA,GAAWF,KAAAA,CAAMA,KAAAA,CAAM7B,MAAAA,GAAS,CAAA,CAAA;AACtC,MAAA,IAAI+B,QAAAA,EAAU;AACZH,QAAAA,MAAAA,GAASG,QAAAA,CAASC,EAAAA;AACpB,MAAA;AAGA,MAAA,IAAIH,KAAAA,CAAM7B,SAAS0B,SAAAA,EAAW;AAC5B,QAAA;AACF,MAAA;AACF,IAAA;AAEA,IAAA,OAAOC,QAAAA;AACT,EAAA;;;;;;;;;;;AAYUM,EAAAA,kBAAAA,CAAmBpC,QAAWC,aAAAA,EAAmD;AACzF,IAAA,OAAO,IAAA,CAAKF,YAAAA,CAAaC,MAAAA,EAAQC,aAAAA,CAAAA;AACnC,EAAA;;;;;;;;;AAUUoC,EAAAA,eAAAA,CAAgBC,OAAAA,EAA8B;AACtD,IAAA,MAAMC,YAAAA,GAAe;AAAC,MAAA,KAAA;AAAO,MAAA,MAAA;AAAQ,MAAA;;AACrC,IAAA,IAAI,CAACA,YAAAA,CAAa7B,QAAAA,CAAS4B,OAAAA,CAAQE,MAAM,CAAA,EAAG;AAC1C,MAAA,MAAM,IAAIC,KAAAA,CAAM,CAAA,uBAAA,EAA0BH,OAAAA,CAAQE,MAAM,oBAAoBD,YAAAA,CAAaG,IAAAA,CAAK,IAAA,CAAA,CAAA,CAAO,CAAA;AACvG,IAAA;AACF,EAAA;;;;;;EAOAC,mBAAAA,GAAgC;AAC9B,IAAA,OAAO;AAAC,MAAA,KAAA;AAAO,MAAA,MAAA;AAAQ,MAAA;;AACzB,EAAA;;;;;;EAOAC,WAAAA,GAME;AACA,IAAA,OAAO;AACLnD,MAAAA,SAAAA,EAAW,IAAA,CAAKA,SAAAA;AAChBC,MAAAA,WAAAA,EAAa,IAAA,CAAKA,WAAAA;AAClBC,MAAAA,WAAAA,EAAa,IAAA,CAAKA,WAAAA;AAClBE,MAAAA,iBAAAA,EAAmB,IAAA,CAAKA,iBAAAA;AACxBgD,MAAAA,gBAAAA,EAAkB,KAAKF,mBAAAA;AACzB,KAAA;AACF,EAAA;AACF;;;AC/OO,IAAMG,iBAAAA,GAAN,MAAMA,kBAAAA,CAAAA;EA3Bb;;;;;;;;;;;;;;;;;;EA2CE,OAAOhC,QAAAA,CAAYM,OAAY2B,MAAAA,EAA8C;AAC3E,IAAA,MAAM/B,IAAAA,GAAO+B,OAAO/B,IAAAA,IAAQ,CAAA;AAC5B,IAAA,MAAMC,QAAAA,GAAW8B,OAAO9B,QAAAA,IAAY,EAAA;AACpC,IAAA,MAAM+B,KAAAA,GAAAA,CAAShC,OAAO,CAAA,IAAKC,QAAAA;AAC3B,IAAA,MAAMgC,MAAMD,KAAAA,GAAQ/B,QAAAA;AAEpB,IAAA,MAAMiC,cAAAA,GAAiB9B,KAAAA,CAAM+B,KAAAA,CAAMH,KAAAA,EAAOC,GAAAA,CAAAA;AAE1C,IAAA,OAAO;MACL7B,KAAAA,EAAO8B,cAAAA;AACPE,MAAAA,UAAAA,EAAYhC,KAAAA,CAAMjB,MAAAA;MAClBkD,QAAAA,EAAU;AACRC,QAAAA,WAAAA,EAAaL,MAAM7B,KAAAA,CAAMjB,MAAAA;AACzBoD,QAAAA,eAAAA,EAAiBvC,IAAAA,GAAO,CAAA;AACxBwC,QAAAA,WAAAA,EAAaN,cAAAA,CAAe/C,MAAAA,GAAS,CAAA,GAAIsB,MAAAA,CAAOuB,KAAAA,CAAAA,GAAStB,MAAAA;QACzD+B,SAAAA,EAAWP,cAAAA,CAAe/C,MAAAA,GAAS,CAAA,GAAIsB,MAAAA,CAAOiC,IAAAA,CAAKC,GAAAA,CAAIV,GAAAA,EAAK7B,KAAAA,CAAMjB,MAAM,CAAA,GAAI,CAAA,CAAA,GAAKuB;AACnF;AACF,KAAA;AACF,EAAA;;;;;;;;;;;;;;;;;EAkBA,OAAOkC,mBAAAA,CACLR,UAAAA,EACApC,IAAAA,EACAC,QAAAA,EASA;AACA,IAAA,MAAM4C,UAAAA,GAAaH,IAAAA,CAAKI,IAAAA,CAAKV,UAAAA,GAAanC,QAAAA,CAAAA;AAC1C,IAAA,MAAM8C,UAAAA,GAAAA,CAAc/C,OAAO,CAAA,IAAKC,QAAAA;AAChC,IAAA,MAAM+C,WAAWN,IAAAA,CAAKC,GAAAA,CAAII,aAAa9C,QAAAA,GAAW,CAAA,EAAGmC,aAAa,CAAA,CAAA;AAElE,IAAA,OAAO;AACLE,MAAAA,WAAAA,EAAatC,IAAAA,GAAO6C,UAAAA;AACpBN,MAAAA,eAAAA,EAAiBvC,IAAAA,GAAO,CAAA;AACxB6C,MAAAA,UAAAA;MACAI,WAAAA,EAAajD,IAAAA;AACbC,MAAAA,QAAAA;AACA8C,MAAAA,UAAAA;AACAC,MAAAA;AACF,KAAA;AACF,EAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA6BA,EAAA,cAAcE,cAAAA,CACZC,OAAAA,EACA7B,OAAAA,GAAiC,EAAC,EACA;AAClC,IAAA,MAAM,EAAE8B,KAAAA,EAAOC,aAAAA,EAAa,GAAK/B,OAAAA;AACjC,IAAA,IAAIP,MAAAA,GAASsC,aAAAA;AACb,IAAA,IAAI9C,OAAAA,GAAU,IAAA;AACd,IAAA,IAAI+C,YAAAA,GAAe,CAAA;AAEnB,IAAA,OAAO/C,OAAAA,EAAS;AACd,MAAA,MAAMH,KAAAA,GAAQ,MAAM+C,OAAAA,CAAQpC,MAAAA,CAAAA;AAE5B,MAAA,IAAIX,KAAAA,CAAMjB,WAAW,CAAA,EAAG;AACtB,QAAA;AACF,MAAA;AAEA,MAAA,KAAA,MAAWoE,QAAQnD,KAAAA,EAAO;AACxB,QAAA,MAAMmD,IAAAA;AACND,QAAAA,YAAAA,EAAAA;AAEA,QAAA,IAAIF,KAAAA,IAASE,gBAAgBF,KAAAA,EAAO;AAClC,UAAA;AACF,QAAA;AACF,MAAA;AAGA,MAAA,MAAMlC,QAAAA,GAAWd,KAAAA,CAAMA,KAAAA,CAAMjB,MAAAA,GAAS,CAAA,CAAA;AACtC,MAAA,IAAI+B,QAAAA,EAAU;AACZH,QAAAA,MAAAA,GAASG,QAAAA,CAASC,EAAAA;AACpB,MAAA;AAIAZ,MAAAA,OAAAA,GAAUH,MAAMjB,MAAAA,GAAS,CAAA;AAC3B,IAAA;AACF,EAAA;;;;;;;;;;;;;AAcA,EAAA,aAAaqE,qBAAAA,CACXL,OAAAA,EACA7B,OAAAA,GAAiC,EAAC,EACpB;AACd,IAAA,MAAMlB,QAAa,EAAA;AAEnB,IAAA,WAAA,MAAiBmD,IAAAA,IAAQzB,kBAAAA,CAAkBoB,cAAAA,CAAeC,OAAAA,EAAS7B,OAAAA,CAAAA,EAAU;AAC3ElB,MAAAA,KAAAA,CAAMa,KAAKsC,IAAAA,CAAAA;AACb,IAAA;AAEA,IAAA,OAAOnD,KAAAA;AACT,EAAA;;;;;;;;;;;;;;;;;;;;;;;;EAyBA,OAAOqD,mBAAAA,CACL1D,OAAAA,EACA2D,UAAAA,GAAqB,GAAA,EACc;AACnC,IAAA,OAAO3D,OAAAA;AACT,EAAA;;;;;;;;EASA,OAAO4D,eAAAA,CAAgB3D,MAAcC,QAAAA,EAA0B;AAC7D,IAAA,OAAA,CAAQyC,IAAAA,CAAKkB,GAAAA,CAAI,CAAA,EAAG5D,IAAAA,IAAQ,CAAA,IAAKC,QAAAA;AACnC,EAAA;;;;;;;AAQA,EAAA,OAAO4D,YAAyC9C,MAAAA,EAA0B;AACxE,IAAA,IAAI;AACF,MAAA,MAAM+C,UAAUC,MAAAA,CAAOC,IAAAA,CAAKjD,QAAQ,QAAA,CAAA,CAAUkD,SAAS,OAAA,CAAA;AACvD,MAAA,OAAOC,IAAAA,CAAKC,MAAML,OAAAA,CAAAA;IACpB,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,IAAA;AACT,IAAA;AACF,EAAA;;;;;;;AAQA,EAAA,OAAOM,aAAa9D,IAAAA,EAAuC;AACzD,IAAA,OAAOyD,MAAAA,CAAOC,KAAKE,IAAAA,CAAKG,SAAAA,CAAU/D,IAAAA,CAAAA,CAAAA,CAAO2D,SAAS,QAAA,CAAA;AACpD,EAAA;AACF;;;ACnPA,IAAMK,iBAAAA,GAAoB,UAAA;AAEnB,SAASC,gBAAgBhF,KAAAA,EAAa;AAC3C,EAAA,OAAO+E,kBAAkBE,IAAAA,CAAKjF,KAAAA,CAAAA,GAAS,CAAA,CAAA,EAAIA,KAAAA,CAAAA,CAAAA,GAAUA,KAAAA;AACvD;AAFgBgF,MAAAA,CAAAA,eAAAA,EAAAA,iBAAAA,CAAAA;AA6BT,SAASE,YAAAA,CAAanE,IAAAA,EAAiBgB,OAAAA,GAAgC,EAAC,EAAC;AAC9E,EAAA,MAAM,EAAEoD,YAAY,GAAA,EAAKC,cAAAA,GAAiB,MAAMC,aAAAA,GAAgB,IAAA,EAAMC,eAAAA,GAAkB,CAAA,EAAC,GAAKvD,OAAAA;AAE9F,EAAA,IAAIhB,IAAAA,CAAKnB,WAAW,CAAA,EAAG;AACrB,IAAA,OAAO,EAAA;AACT,EAAA;AAGA,EAAA,MAAM2F,gCAAgB,MAAA,CAAA,CAACC,GAAAA,EAAcC,MAAAA,GAAS,EAAA,EAAIC,QAAQ,CAAA,KAAC;AACzD,IAAA,MAAMC,SAAiC,EAAC;AAExC,IAAA,IAAIH,GAAAA,KAAQ,IAAA,IAAQA,GAAAA,KAAQrE,MAAAA,EAAW;AACrC,MAAA,OAAOwE,MAAAA;AACT,IAAA;AAEA,IAAA,IAAI,OAAOH,QAAQ,QAAA,EAAU;AAC3B,MAAA,OAAO;AAAE,QAAA,CAACC,MAAAA,IAAU,OAAA,GAAUvE,MAAAA,CAAOsE,GAAAA;AAAK,OAAA;AAC5C,IAAA;AAEA,IAAA,KAAA,MAAW,CAACzF,GAAAA,EAAKC,KAAAA,KAAUC,MAAAA,CAAOC,OAAAA,CAAQsF,GAAAA,CAAAA,EAAiC;AACzE,MAAA,MAAMI,SAASH,MAAAA,GAAS,CAAA,EAAGA,MAAAA,CAAAA,CAAAA,EAAU1F,GAAAA,CAAAA,CAAAA,GAAQA,GAAAA;AAE7C,MAAA,IAAIC,KAAAA,KAAU,IAAA,IAAQA,KAAAA,KAAUmB,MAAAA,EAAW;AACzCwE,QAAAA,MAAAA,CAAOC,MAAAA,CAAAA,GAAU,EAAA;AACnB,MAAA,CAAA,MAAA,IAAW5F,iBAAiB6F,IAAAA,EAAM;AAChCF,QAAAA,MAAAA,CAAOC,MAAAA,CAAAA,GAAU5F,KAAAA,CAAM8F,WAAAA,EAAW;MACpC,CAAA,MAAA,IAAWC,KAAAA,CAAMC,OAAAA,CAAQhG,KAAAA,CAAAA,EAAQ;AAC/B2F,QAAAA,MAAAA,CAAOC,MAAAA,CAAAA,GAAUjB,IAAAA,CAAKG,SAAAA,CAAU9E,KAAAA,CAAAA;AAClC,MAAA,CAAA,MAAA,IAAW,OAAOA,KAAAA,KAAU,QAAA,IAAYqF,aAAAA,IAAiBK,QAAQJ,eAAAA,EAAiB;AAChFrF,QAAAA,MAAAA,CAAOgG,OAAON,MAAAA,EAAQJ,aAAAA,CAAcvF,OAAO4F,MAAAA,EAAQF,KAAAA,GAAQ,CAAA,CAAA,CAAA;MAC7D,CAAA,MAAA,IAAW,OAAO1F,UAAU,QAAA,EAAU;AACpC2F,QAAAA,MAAAA,CAAOC,MAAAA,CAAAA,GAAUjB,IAAAA,CAAKG,SAAAA,CAAU9E,KAAAA,CAAAA;MAClC,CAAA,MAAO;AACL2F,QAAAA,MAAAA,CAAOC,MAAAA,CAAAA,GAAU1E,MAAAA,CAAOlB,KAAAA,CAAAA;AAC1B,MAAA;AACF,IAAA;AAEA,IAAA,OAAO2F,MAAAA;EACT,CAAA,EA9BsB,eAAA,CAAA;AAiCtB,EAAA,MAAMO,mBAAmBnF,IAAAA,CAAKT,GAAAA,CAAI,CAAC0D,IAAAA,KAASuB,aAAAA,CAAcvB,IAAAA,CAAAA,CAAAA;AAC1D,EAAA,MAAMmC,OAAAA,uBAAcC,GAAAA,EAAAA;AACpB,EAAA,KAAA,MAAWtG,UAAUoG,gBAAAA,EAAkB;AACrC,IAAA,KAAA,MAAWnG,GAAAA,IAAOE,MAAAA,CAAOoG,IAAAA,CAAKvG,MAAAA,CAAAA,EAAS;AACrCqG,MAAAA,OAAAA,CAAQG,IAAIvG,GAAAA,CAAAA;AACd,IAAA;AACF,EAAA;AAEA,EAAA,MAAMwG,OAAAA,GAAUR,KAAAA,CAAMtB,IAAAA,CAAK0B,OAAAA,CAAAA,CAASK,IAAAA,CAAK,CAACC,CAAAA,EAAGC,CAAAA,KAAMD,CAAAA,CAAEE,aAAAA,CAAcD,CAAAA,CAAAA,CAAAA;AAGnE,EAAA,MAAME,SAAAA,2BAAa5G,KAAAA,KAAAA;AACjB,IAAA,MAAM6G,cAAAA,GAAiB7B,gBAAgBhF,KAAAA,CAAAA;AAEvC,IAAA,IACE6G,cAAAA,CAAe1G,QAAAA,CAASgF,SAAAA,CAAAA,IACxB0B,eAAe1G,QAAAA,CAAS,GAAA,CAAA,IACxB0G,cAAAA,CAAe1G,SAAS,IAAA,CAAA,IACxB0G,cAAAA,CAAe1G,QAAAA,CAAS,IAAA,CAAA,EACxB;AACA,MAAA,OAAO,CAAA,CAAA,EAAI0G,cAAAA,CAAeC,OAAAA,CAAQ,IAAA,EAAM,IAAA,CAAA,CAAA,CAAA,CAAA;AAC1C,IAAA;AACA,IAAA,OAAOD,cAAAA;EACT,CAAA,EAZkB,WAAA,CAAA;AAelB,EAAA,MAAME,QAAkB,EAAA;AAExB,EAAA,IAAI3B,cAAAA,EAAgB;AAClB2B,IAAAA,KAAAA,CAAMrF,KAAK6E,OAAAA,CAAQjG,GAAAA,CAAIsG,SAAAA,CAAAA,CAAWzE,IAAAA,CAAKgD,SAAAA,CAAAA,CAAAA;AACzC,EAAA;AAEA,EAAA,KAAA,MAAWrF,UAAUoG,gBAAAA,EAAkB;AACrC,IAAA,MAAMc,GAAAA,GAAMT,OAAAA,CAAQjG,GAAAA,CAAI,CAAC2G,MAAAA,KAAWL,UAAU9G,MAAAA,CAAOmH,MAAAA,CAAAA,IAAW,EAAA,CAAA,CAAA;AAChEF,IAAAA,KAAAA,CAAMrF,IAAAA,CAAKsF,GAAAA,CAAI7E,IAAAA,CAAKgD,SAAAA,CAAAA,CAAAA;AACtB,EAAA;AAEA,EAAA,OAAO4B,KAAAA,CAAM5E,KAAK,IAAA,CAAA;AACpB;AA/EgB+C,MAAAA,CAAAA,YAAAA,EAAAA,cAAAA,CAAAA;AA+FT,SAASgC,QAAAA,CACdC,GAAAA,EACApF,OAAAA,GAAwD,EAAC,EAAC;AAE1D,EAAA,MAAM,EAAEoD,SAAAA,GAAY,GAAA,EAAKiC,UAAAA,GAAa,MAAI,GAAKrF,OAAAA;AAE/C,EAAA,MAAMgF,KAAAA,GAAQI,GAAAA,CAAIE,KAAAA,CAAM,OAAA,CAAA,CAASC,OAAO,CAACC,IAAAA,KAASA,IAAAA,CAAKC,IAAAA,EAAI,CAAA;AAE3D,EAAA,IAAIT,KAAAA,CAAMnH,WAAW,CAAA,EAAG;AACtB,IAAA,OAAO,EAAA;AACT,EAAA;AAGA,EAAA,MAAM6H,SAAAA,2BAAaF,IAAAA,KAAAA;AACjB,IAAA,MAAMG,SAAmB,EAAA;AACzB,IAAA,IAAIC,OAAAA,GAAU,EAAA;AACd,IAAA,IAAIC,QAAAA,GAAW,KAAA;AAEf,IAAA,IAAIC,CAAAA,GAAI,CAAA;AACR,IAAA,OAAOA,CAAAA,GAAIN,KAAK3H,MAAAA,EAAQ;AACtB,MAAA,MAAMkI,IAAAA,GAAOP,KAAKM,CAAAA,CAAAA;AAClB,MAAA,MAAME,QAAAA,GAAWR,IAAAA,CAAKM,CAAAA,GAAI,CAAA,CAAA;AAE1B,MAAA,IAAIC,IAAAA,KAAS,GAAA,IAAOF,QAAAA,IAAYG,QAAAA,KAAa,GAAA,EAAK;AAChDJ,QAAAA,OAAAA,IAAW,GAAA;AACXE,QAAAA,CAAAA,IAAK,CAAA;AACP,MAAA,CAAA,MAAA,IAAWC,SAAS,GAAA,EAAK;AACvBF,QAAAA,QAAAA,GAAW,CAACA,QAAAA;AACZC,QAAAA,CAAAA,EAAAA;MACF,CAAA,MAAA,IAAWC,IAAAA,KAAS3C,SAAAA,IAAa,CAACyC,QAAAA,EAAU;AAC1CF,QAAAA,MAAAA,CAAOhG,KAAKiG,OAAAA,CAAAA;AACZA,QAAAA,OAAAA,GAAU,EAAA;AACVE,QAAAA,CAAAA,EAAAA;MACF,CAAA,MAAO;AACLF,QAAAA,OAAAA,IAAWG,IAAAA;AACXD,QAAAA,CAAAA,EAAAA;AACF,MAAA;AACF,IAAA;AAEAH,IAAAA,MAAAA,CAAOhG,KAAKiG,OAAAA,CAAAA;AACZ,IAAA,OAAOD,MAAAA;EACT,CAAA,EA5BkB,WAAA,CAAA;AA8BlB,EAAA,IAAInB,OAAAA;AACJ,EAAA,IAAIyB,SAAAA;AAGJ,EAAA,MAAMC,SAAAA,GAAYlB,MAAM,CAAA,CAAA;AAExB,EAAA,IAAIK,UAAAA,EAAY;AACdb,IAAAA,OAAAA,GAAUkB,UAAUQ,SAAAA,CAAAA;AACpBD,IAAAA,SAAAA,GAAYjB,KAAAA,CAAMnE,MAAM,CAAA,CAAA;EAC1B,CAAA,MAAO;AAEL,IAAA,MAAMsF,QAAAA,GAAWT,UAAUQ,SAAAA,CAAAA;AAC3B1B,IAAAA,OAAAA,GAAU2B,SAAS5H,GAAAA,CAAI,CAAC6H,GAAGN,CAAAA,KAAM,CAAA,GAAA,EAAMA,CAAAA,CAAAA,CAAG,CAAA;AAC1CG,IAAAA,SAAAA,GAAYjB,KAAAA;AACd,EAAA;AAEA,EAAA,OAAOiB,SAAAA,CAAU1H,GAAAA,CAAI,CAACiH,IAAAA,KAAAA;AACpB,IAAA,MAAMG,MAAAA,GAASD,UAAUF,IAAAA,CAAAA;AACzB,IAAA,MAAM/B,MAA8B,EAAC;AAErCe,IAAAA,OAAAA,CAAQ6B,OAAAA,CAAQ,CAACnB,MAAAA,EAAQY,CAAAA,KAAAA;AACvBrC,MAAAA,GAAAA,CAAIyB,MAAAA,CAAAA,GAAUS,MAAAA,CAAOG,CAAAA,CAAAA,IAAM,EAAA;IAC7B,CAAA,CAAA;AAEA,IAAA,OAAOrC,GAAAA;EACT,CAAA,CAAA;AACF;AArEgB0B,MAAAA,CAAAA,QAAAA,EAAAA,UAAAA,CAAAA;AA8ET,SAASmB,SAAAA,CACdlB,GAAAA,EACApF,OAAAA,GAA0E,EAAC,EAAC;AAE5E,EAAA,MAAM,EAAEuG,MAAAA,GAAS,KAAA,EAAO,GAAGC,cAAAA,GAAiBxG,OAAAA;AAC5C,EAAA,MAAMhB,IAAAA,GAAOmG,QAAAA,CAASC,GAAAA,EAAKoB,YAAAA,CAAAA;AAC3B,EAAA,OAAOD,MAAAA,GAAS3D,KAAKG,SAAAA,CAAU/D,IAAAA,EAAM,MAAM,CAAA,CAAA,GAAK4D,IAAAA,CAAKG,SAAAA,CAAU/D,IAAAA,CAAAA;AACjE;AAPgBsH,MAAAA,CAAAA,SAAAA,EAAAA,WAAAA,CAAAA;AAgBT,SAASG,aAAAA,CAAczH,IAAAA,EAAiBsE,aAAAA,GAAyB,IAAA,EAAI;AAC1E,EAAA,IAAItE,IAAAA,CAAKnB,WAAW,CAAA,EAAG;AACrB,IAAA,OAAO,EAAA;AACT,EAAA;AAEA,EAAA,MAAM6I,8BAAc,MAAA,CAAA,CAACjD,GAAAA,EAAcC,MAAAA,GAAS,EAAA,EAAIC,QAAQ,CAAA,KAAC;AACvD,IAAA,MAAMW,OAAiB,EAAA;AAEvB,IAAA,IAAIb,QAAQ,IAAA,IAAQA,GAAAA,KAAQrE,MAAAA,IAAa,OAAOqE,QAAQ,QAAA,EAAU;AAChE,MAAA,OAAOC,MAAAA,GAAS;AAACA,QAAAA;UAAU,EAAA;AAC7B,IAAA;AAEA,IAAA,KAAA,MAAW,CAAC1F,GAAAA,EAAKC,KAAAA,KAAUC,MAAAA,CAAOC,OAAAA,CAAQsF,GAAAA,CAAAA,EAAiC;AACzE,MAAA,MAAMkD,UAAUjD,MAAAA,GAAS,CAAA,EAAGA,MAAAA,CAAAA,CAAAA,EAAU1F,GAAAA,CAAAA,CAAAA,GAAQA,GAAAA;AAE9C,MAAA,IACEC,KAAAA,KAAU,IAAA,IACV,OAAOA,KAAAA,KAAU,YACjB,CAAC+F,KAAAA,CAAMC,OAAAA,CAAQhG,KAAAA,KACf,EAAEA,KAAAA,YAAiB6F,IAAAA,CAAAA,IACnBR,aAAAA,IACAK,QAAQ,CAAA,EACR;AACAW,QAAAA,IAAAA,CAAK3E,KAAI,GAAI+G,WAAAA,CAAYzI,OAAO0I,OAAAA,EAAShD,KAAAA,GAAQ,CAAA,CAAA,CAAA;MACnD,CAAA,MAAO;AACLW,QAAAA,IAAAA,CAAK3E,KAAKgH,OAAAA,CAAAA;AACZ,MAAA;AACF,IAAA;AAEA,IAAA,OAAOrC,IAAAA;EACT,CAAA,EAzBoB,aAAA,CAAA;AA2BpB,EAAA,MAAMF,OAAAA,uBAAcC,GAAAA,EAAAA;AACpB,EAAA,KAAA,MAAWpC,QAAQjD,IAAAA,EAAM;AACvB,IAAA,KAAA,MAAWhB,GAAAA,IAAO0I,WAAAA,CAAYzE,IAAAA,CAAAA,EAAO;AACnCmC,MAAAA,OAAAA,CAAQG,IAAIvG,GAAAA,CAAAA;AACd,IAAA;AACF,EAAA;AAEA,EAAA,OAAOgG,KAAAA,CAAMtB,IAAAA,CAAK0B,OAAAA,CAAAA,CAASK,IAAAA,CAAK,CAACC,CAAAA,EAAGC,CAAAA,KAAMD,CAAAA,CAAEE,aAAAA,CAAcD,CAAAA,CAAAA,CAAAA;AAC5D;AAxCgB8B,MAAAA,CAAAA,aAAAA,EAAAA,eAAAA,CAAAA;AAiDT,SAASG,eAAAA,CAAgB5H,IAAAA,EAAiB6H,UAAAA,GAAqB,GAAA,EAAG;AACvE,EAAA,IAAI7H,IAAAA,CAAKnB,WAAW,CAAA,EAAG;AACrB,IAAA,OAAO,CAAA;AACT,EAAA;AAGA,EAAA,MAAMiJ,MAAAA,GAAS9H,KAAK6B,KAAAA,CAAM,CAAA,EAAGO,KAAKC,GAAAA,CAAIwF,UAAAA,EAAY7H,IAAAA,CAAKnB,MAAM,CAAA,CAAA;AAC7D,EAAA,MAAMkJ,SAAAA,GAAY5D,aAAa2D,MAAAA,CAAAA;AAC/B,EAAA,MAAME,cAAAA,GAAiBD,SAAAA,CAAUlJ,MAAAA,GAASiJ,MAAAA,CAAOjJ,MAAAA;AAGjD,EAAA,MAAM2G,OAAAA,GAAUiC,cAAczH,IAAAA,CAAAA;AAC9B,EAAA,MAAMiI,UAAAA,GAAazC,OAAAA,CAAQpE,IAAAA,CAAK,GAAA,EAAKvC,MAAAA,GAAS,CAAA;AAE9C,EAAA,OAAOuD,IAAAA,CAAKI,IAAAA,CAAKyF,UAAAA,GAAaD,cAAAA,GAAiBhI,KAAKnB,MAAM,CAAA;AAC5D;AAfgB+I,MAAAA,CAAAA,eAAAA,EAAAA,iBAAAA,CAAAA;;;AChQhB,IAAMM,0BAAAA,GAA6B,CAAA;;;;;;;;;;AAwDnC,eAAsBC,iBAAiB1G,MAAAA,EAA8B;AACnE,EAAA,MAAM,EACJ2G,WAAAA,EACAC,KAAAA,GAAQ,QAAA,EACRC,OAAAA,EACAC,SAAAA,EACAC,WAAAA,EACAC,IAAAA,EACAC,WAAAA,EACAxH,MAAAA,EACAyH,eAAAA,EACAC,cAAAA,EACAC,cAAY,GACVpH,MAAAA;AAEJ,EAAA,MAAMqH,MAAAA,GAAS,IAAIC,aAAAA,CAAc;AAAEV,IAAAA,KAAAA;AAAOD,IAAAA;GAAY,CAAA;AAEtD,EAAA,MAAMY,KAAAA,GAAQ;AACZR,IAAAA,WAAAA;AACAC,IAAAA,IAAAA;AACAC,IAAAA,WAAAA;AACAxH,IAAAA,MAAAA;AACA,IAAA,GAAIyH,oBAAoBvI,MAAAA,GAAY;AAAEuI,MAAAA;AAAgB,KAAA,GAAI,EAAC;AAC3D,IAAA,GAAIC,mBAAmBxI,MAAAA,GAAY;AAAEwI,MAAAA;AAAe,KAAA,GAAI,EAAC;AACzD,IAAA,GAAIC,iBAAiBzI,MAAAA,GAAY;AAAEyI,MAAAA;AAAa,KAAA,GAAI;AACtD,GAAA;AAEA,EAAA,MAAMI,QAAAA,GAAW,MAAMH,MAAAA,CAAOI,aAAAA,CAAuC;IACnEC,KAAAA,EAAOjB,0BAAAA;IACPkB,SAAAA,EAAW;AAAEJ,MAAAA;AAAM,KAAA;IACnBxD,OAAAA,EAAS;MACP,YAAA,EAAc8C,OAAAA;MACd,cAAA,EAAgBC,SAAAA;MAChB,gBAAA,EAAkBC;AACpB;GACF,CAAA;AAEA,EAAA,MAAMa,GAAAA,GAAMJ,SAASjJ,IAAAA,EAAMsJ,eAAAA;AAC3B,EAAA,IAAI,CAACD,GAAAA,EAAK;AACR,IAAA,MAAM,IAAIlI,MAAM,qCAAA,CAAA;AAClB,EAAA;AACA,EAAA,OAAOkI,GAAAA;AACT;AA1CsBlB,MAAAA,CAAAA,gBAAAA,EAAAA,kBAAAA,CAAAA","file":"chunk-GMFHIFS5.js","sourcesContent":["/**\n * Export Module\n *\n * Provides common utilities for data export operations across all Burdenoff microservices.\n * Includes pagination services, base exporter classes, CSV utilities, and type definitions.\n *\n * @module export\n *\n * @example\n * ```typescript\n * // Import from the export module\n * import {\n *   BaseModuleExporter,\n *   PaginationService,\n *   convertToCSV,\n * } from '@burdenoff/be-sdk/export';\n *\n * // Create a custom exporter\n * class UserExporter extends BaseModuleExporter<User> {\n *   moduleKey = 'users';\n *   displayName = 'Users';\n *\n *   async export(options: ExportOptions): Promise<ExportResult> {\n *     const data = await this.fetchAll(\n *       (cursor) => db.user.findMany({\n *         where: cursor ? { id: { gt: cursor } } : {},\n *         take: 100,\n *       })\n *     );\n *\n *     const csv = convertToCSV(data);\n *     return { data, format: 'csv' };\n *   }\n * }\n *\n * // Use pagination utilities\n * const result = PaginationService.paginate(items, { page: 1, pageSize: 20 });\n * ```\n */\n\n// ============================================================================\n// Type Exports\n// ============================================================================\n\nexport type {\n  // Export format types\n  ExportFormat,\n  ExportFormatEnum,\n\n  // Configuration types\n  ExportConfig,\n  ExportOptions,\n\n  // Job types\n  ExportJobStatus,\n  ExportJob,\n  ExportProgress,\n  ExportResult,\n\n  // Fetch types\n  ExportFetchOptions,\n  ExportFetchResult,\n\n  // Pagination types\n  PaginationParams,\n  PaginatedResult,\n  PaginatedQueryOptions,\n  PaginateResult,\n  PaginateQueryFn,\n\n  // Module interface\n  ExportableModule,\n\n  // CSV types\n  CSVConversionOptions,\n} from './types.js';\n\n// ============================================================================\n// Class Exports\n// ============================================================================\n\nexport { BaseModuleExporter } from './base-exporter.js';\nexport { PaginationService } from './pagination.js';\n\n// ============================================================================\n// Function Exports\n// ============================================================================\n\nexport { convertToCSV, parseCSV, csvToJSON, getCSVHeaders, estimateCSVSize } from './csv.js';\n\n// ============================================================================\n// Gateway Helper Exports\n// ============================================================================\n\nexport { triggerExportJob } from './gateway-client.js';\nexport type { TriggerExportJobParams, ExportJobResult, ExportActorType, ExportFormatGql } from './gateway-client.js';\n","/**\n * Base Module Exporter\n *\n * Abstract base class for module exporters across all Burdenoff microservices.\n * Provides common functionality for exporting data from different modules.\n *\n * @module export/base-exporter\n *\n * @example\n * ```typescript\n * import { BaseModuleExporter } from '@burdenoff/be-sdk/export';\n *\n * class UserExporter extends BaseModuleExporter<User> {\n *   moduleKey = 'users';\n *   displayName = 'Users';\n *   description = 'Export user data';\n *\n *   async export(options: ExportOptions): Promise<ExportResult> {\n *     // Implementation\n *   }\n * }\n * ```\n */\n\nimport type { ExportOptions, ExportResult, PaginateQueryFn, PaginateResult } from './types.js';\n\n/**\n * Abstract base class for module exporters\n *\n * Provides common functionality that all module exporters can inherit:\n * - Field filtering\n * - Pagination helpers\n * - Module metadata\n *\n * @typeParam T - The type of entity this exporter handles\n */\nexport abstract class BaseModuleExporter<T = unknown> {\n  /** Unique key identifying this module (e.g., 'users', 'tags', 'orders') */\n  moduleKey?: string;\n\n  /** Human-readable display name for the module */\n  displayName?: string;\n\n  /** Description of what this module exports */\n  description?: string;\n\n  /** Default fields to exclude from export (e.g., sensitive data) */\n  defaultExcludeFields?: string[];\n\n  /** List of product IDs this exporter supports */\n  supportedProducts?: string[];\n\n  /** Model name for database operations */\n  protected modelName?: string;\n\n  /**\n   * Export data from this module\n   *\n   * Subclasses should implement this method to perform the actual export.\n   * The method is optional to allow for gradual implementation.\n   *\n   * @param options - Export options including format, filters, and pagination\n   * @returns Export result with data or download URL\n   */\n  export?(options: ExportOptions): Promise<ExportResult>;\n\n  /**\n   * Filter fields from an entity based on exclude list\n   *\n   * Use this to remove sensitive or unnecessary fields from exported data.\n   *\n   * @param entity - Entity to filter\n   * @param excludeFields - Fields to exclude (uses defaultExcludeFields if not provided)\n   * @returns Filtered entity as a plain object\n   *\n   * @example\n   * ```typescript\n   * const user = { id: '1', name: 'John', password: 'secret', ssn: '123' };\n   * const filtered = this.filterFields(user, ['password', 'ssn']);\n   * // Result: { id: '1', name: 'John' }\n   * ```\n   */\n  protected filterFields(entity: T | Record<string, unknown>, excludeFields?: string[]): Record<string, unknown> {\n    const fieldsToExclude = excludeFields || this.defaultExcludeFields || [];\n\n    if (fieldsToExclude.length === 0) {\n      return entity as Record<string, unknown>;\n    }\n\n    const filtered: Record<string, unknown> = {};\n    const record = entity as Record<string, unknown>;\n\n    for (const [key, value] of Object.entries(record)) {\n      if (!fieldsToExclude.includes(key)) {\n        filtered[key] = value;\n      }\n    }\n\n    return filtered;\n  }\n\n  /**\n   * Filter multiple entities\n   *\n   * @param entities - Array of entities to filter\n   * @param excludeFields - Fields to exclude\n   * @returns Array of filtered entities\n   */\n  protected filterFieldsMany(\n    entities: (T | Record<string, unknown>)[],\n    excludeFields?: string[]\n  ): Record<string, unknown>[] {\n    return entities.map((entity) => this.filterFields(entity, excludeFields));\n  }\n\n  /**\n   * Paginate helper for database queries\n   *\n   * Use this to implement paginated data fetching in your export method.\n   *\n   * @param queryFn - Function that executes the paginated query\n   * @param page - Page number (1-indexed)\n   * @param pageSize - Number of items per page\n   * @returns Paginated result with data and metadata\n   *\n   * @example\n   * ```typescript\n   * const result = await this.paginate(\n   *   async ({ skip, take }) => {\n   *     const items = await db.user.findMany({ skip, take });\n   *     const total = await db.user.count();\n   *     return { items, total };\n   *   },\n   *   1,\n   *   100\n   * );\n   * ```\n   */\n  protected async paginate(\n    queryFn: PaginateQueryFn<T>,\n    page: number = 1,\n    pageSize: number = 100\n  ): Promise<PaginateResult<T>> {\n    const skip = (page - 1) * pageSize;\n    const take = pageSize;\n\n    const { items, total } = await queryFn({ skip, take });\n\n    return {\n      data: items,\n      total,\n      hasMore: skip + items.length < total,\n      nextCursor: items.length > 0 && skip + items.length < total ? String(page + 1) : undefined,\n    };\n  }\n\n  /**\n   * Fetch all data using cursor-based pagination\n   *\n   * Use this for exporting large datasets efficiently.\n   *\n   * @param fetchBatch - Function to fetch a batch of data\n   * @param batchSize - Number of items per batch\n   * @returns All fetched items\n   *\n   * @example\n   * ```typescript\n   * const allUsers = await this.fetchAll(\n   *   async (cursor) => db.user.findMany({\n   *     where: cursor ? { id: { gt: cursor } } : undefined,\n   *     orderBy: { id: 'asc' },\n   *     take: 100,\n   *   }),\n   *   100\n   * );\n   * ```\n   */\n  protected async fetchAll(\n    fetchBatch: (cursor?: string) => Promise<(T & { id: string })[]>,\n    batchSize: number = 100\n  ): Promise<T[]> {\n    const allItems: T[] = [];\n    let cursor: string | undefined;\n\n    while (true) {\n      const batch = await fetchBatch(cursor);\n\n      if (batch.length === 0) {\n        break;\n      }\n\n      allItems.push(...batch);\n\n      // Get cursor from last item\n      const lastItem = batch[batch.length - 1];\n      if (lastItem) {\n        cursor = lastItem.id;\n      }\n\n      // If we got fewer items than batch size, we're done\n      if (batch.length < batchSize) {\n        break;\n      }\n    }\n\n    return allItems;\n  }\n\n  /**\n   * Transform entity for export\n   *\n   * Override this method to customize how entities are transformed before export.\n   * Default implementation returns the entity as-is after field filtering.\n   *\n   * @param entity - Entity to transform\n   * @param excludeFields - Fields to exclude\n   * @returns Transformed entity\n   */\n  protected transformForExport(entity: T, excludeFields?: string[]): Record<string, unknown> {\n    return this.filterFields(entity, excludeFields);\n  }\n\n  /**\n   * Validate export options\n   *\n   * Override this to add custom validation for export options.\n   *\n   * @param options - Export options to validate\n   * @throws Error if options are invalid\n   */\n  protected validateOptions(options: ExportOptions): void {\n    const validFormats = ['csv', 'json', 'xlsx'];\n    if (!validFormats.includes(options.format)) {\n      throw new Error(`Invalid export format: ${options.format}. Valid formats: ${validFormats.join(', ')}`);\n    }\n  }\n\n  /**\n   * Get supported export formats\n   *\n   * @returns Array of supported format strings\n   */\n  getSupportedFormats(): string[] {\n    return ['csv', 'json', 'xlsx'];\n  }\n\n  /**\n   * Get module metadata\n   *\n   * @returns Module metadata object\n   */\n  getMetadata(): {\n    moduleKey?: string;\n    displayName?: string;\n    description?: string;\n    supportedProducts?: string[];\n    supportedFormats: string[];\n  } {\n    return {\n      moduleKey: this.moduleKey,\n      displayName: this.displayName,\n      description: this.description,\n      supportedProducts: this.supportedProducts,\n      supportedFormats: this.getSupportedFormats(),\n    };\n  }\n}\n","/**\n * Pagination Service\n *\n * Provides pagination utilities for export operations across all Burdenoff microservices.\n * Supports both offset-based and cursor-based pagination strategies.\n *\n * @module export/pagination\n *\n * @example\n * ```typescript\n * import { PaginationService } from '@burdenoff/be-sdk/export';\n *\n * // Offset-based pagination\n * const result = PaginationService.paginate(items, { page: 2, pageSize: 20 });\n *\n * // Cursor-based pagination with async generator\n * for await (const item of PaginationService.paginatedQuery(fetchFn, { limit: 100 })) {\n *   console.log(item);\n * }\n * ```\n */\n\nimport type { PaginatedQueryOptions, PaginatedResult, PaginationParams } from './types.js';\n\n/**\n * Service providing pagination utilities for export and data fetching operations\n */\nexport class PaginationService {\n  /**\n   * Paginate an array of items using offset-based pagination\n   *\n   * @param items - Array of items to paginate\n   * @param params - Pagination parameters\n   * @returns Paginated result with items and metadata\n   *\n   * @example\n   * ```typescript\n   * const allUsers = await db.user.findMany();\n   * const page = PaginationService.paginate(allUsers, { page: 1, pageSize: 10 });\n   * console.log(page.items); // First 10 users\n   * console.log(page.pageInfo.hasNextPage); // true if more pages exist\n   * ```\n   */\n  static paginate<T>(items: T[], params: PaginationParams): PaginatedResult<T> {\n    const page = params.page ?? 1;\n    const pageSize = params.pageSize ?? 20;\n    const start = (page - 1) * pageSize;\n    const end = start + pageSize;\n\n    const paginatedItems = items.slice(start, end);\n\n    return {\n      items: paginatedItems,\n      totalCount: items.length,\n      pageInfo: {\n        hasNextPage: end < items.length,\n        hasPreviousPage: page > 1,\n        startCursor: paginatedItems.length > 0 ? String(start) : undefined,\n        endCursor: paginatedItems.length > 0 ? String(Math.min(end, items.length) - 1) : undefined,\n      },\n    };\n  }\n\n  /**\n   * Calculate pagination metadata without slicing data\n   *\n   * @param totalCount - Total number of items\n   * @param page - Current page number (1-indexed)\n   * @param pageSize - Items per page\n   * @returns Pagination metadata\n   *\n   * @example\n   * ```typescript\n   * const meta = PaginationService.calculatePagination(150, 3, 20);\n   * // meta.hasNextPage = true (page 4 exists)\n   * // meta.hasPreviousPage = true (page 2 exists)\n   * // meta.totalPages = 8\n   * ```\n   */\n  static calculatePagination(\n    totalCount: number,\n    page: number,\n    pageSize: number\n  ): {\n    hasNextPage: boolean;\n    hasPreviousPage: boolean;\n    totalPages: number;\n    currentPage: number;\n    pageSize: number;\n    startIndex: number;\n    endIndex: number;\n  } {\n    const totalPages = Math.ceil(totalCount / pageSize);\n    const startIndex = (page - 1) * pageSize;\n    const endIndex = Math.min(startIndex + pageSize - 1, totalCount - 1);\n\n    return {\n      hasNextPage: page < totalPages,\n      hasPreviousPage: page > 1,\n      totalPages,\n      currentPage: page,\n      pageSize,\n      startIndex,\n      endIndex,\n    };\n  }\n\n  /**\n   * Async generator for paginated database queries using cursor-based pagination\n   *\n   * This is ideal for processing large datasets without loading everything into memory.\n   * The generator yields items one at a time, fetching new batches as needed.\n   *\n   * @param fetchFn - Function to fetch data given a cursor\n   * @param options - Pagination options\n   * @returns Async generator of items\n   *\n   * @example\n   * ```typescript\n   * // Define fetch function that queries the database\n   * const fetchUsers = async (cursor?: string) => {\n   *   return db.user.findMany({\n   *     where: cursor ? { id: { gt: cursor } } : undefined,\n   *     orderBy: { id: 'asc' },\n   *     take: 100,\n   *   });\n   * };\n   *\n   * // Process all users without loading all into memory\n   * for await (const user of PaginationService.paginatedQuery(fetchUsers)) {\n   *   await processUser(user);\n   * }\n   * ```\n   */\n  static async *paginatedQuery<T extends { id: string }>(\n    fetchFn: (cursor?: string) => Promise<T[]>,\n    options: PaginatedQueryOptions = {}\n  ): AsyncGenerator<T, void, unknown> {\n    const { limit, initialCursor } = options;\n    let cursor = initialCursor;\n    let hasMore = true;\n    let totalYielded = 0;\n\n    while (hasMore) {\n      const items = await fetchFn(cursor);\n\n      if (items.length === 0) {\n        break;\n      }\n\n      for (const item of items) {\n        yield item;\n        totalYielded++;\n\n        if (limit && totalYielded >= limit) {\n          return;\n        }\n      }\n\n      // Get next cursor from last item\n      const lastItem = items[items.length - 1];\n      if (lastItem) {\n        cursor = lastItem.id;\n      }\n\n      // If we got fewer items than expected batch size, we're done\n      // Note: This assumes fetchFn respects a consistent batch size internally\n      hasMore = items.length > 0;\n    }\n  }\n\n  /**\n   * Collect all items from a paginated query into an array\n   *\n   * @param fetchFn - Function to fetch data given a cursor\n   * @param options - Pagination options\n   * @returns Array of all items\n   *\n   * @example\n   * ```typescript\n   * const allUsers = await PaginationService.collectPaginatedQuery(fetchUsers, { limit: 1000 });\n   * ```\n   */\n  static async collectPaginatedQuery<T extends { id: string }>(\n    fetchFn: (cursor?: string) => Promise<T[]>,\n    options: PaginatedQueryOptions = {}\n  ): Promise<T[]> {\n    const items: T[] = [];\n\n    for await (const item of PaginationService.paginatedQuery(fetchFn, options)) {\n      items.push(item);\n    }\n\n    return items;\n  }\n\n  /**\n   * Create a cursor-based paginated fetch function from a Prisma-style query\n   *\n   * @param queryFn - Prisma-style query function\n   * @param batchSize - Number of items to fetch per batch\n   * @returns Fetch function compatible with paginatedQuery\n   *\n   * @example\n   * ```typescript\n   * const fetchFn = PaginationService.createPrismaFetchFn(\n   *   (cursor) => db.user.findMany({\n   *     where: { isActive: true, ...(cursor ? { id: { gt: cursor } } : {}) },\n   *     orderBy: { id: 'asc' },\n   *     take: 100,\n   *   }),\n   *   100\n   * );\n   *\n   * for await (const user of PaginationService.paginatedQuery(fetchFn)) {\n   *   console.log(user);\n   * }\n   * ```\n   */\n  static createPrismaFetchFn<T extends { id: string }>(\n    queryFn: (cursor?: string) => Promise<T[]>,\n    _batchSize: number = 100\n  ): (cursor?: string) => Promise<T[]> {\n    return queryFn;\n  }\n\n  /**\n   * Calculate offset for skip-based pagination\n   *\n   * @param page - Page number (1-indexed)\n   * @param pageSize - Items per page\n   * @returns Offset value for skip\n   */\n  static calculateOffset(page: number, pageSize: number): number {\n    return (Math.max(1, page) - 1) * pageSize;\n  }\n\n  /**\n   * Parse cursor string to extract pagination state\n   *\n   * @param cursor - Base64-encoded cursor string\n   * @returns Decoded cursor data or null if invalid\n   */\n  static parseCursor<T = Record<string, unknown>>(cursor: string): T | null {\n    try {\n      const decoded = Buffer.from(cursor, 'base64').toString('utf-8');\n      return JSON.parse(decoded) as T;\n    } catch {\n      return null;\n    }\n  }\n\n  /**\n   * Create cursor string from pagination state\n   *\n   * @param data - Data to encode in cursor\n   * @returns Base64-encoded cursor string\n   */\n  static createCursor(data: Record<string, unknown>): string {\n    return Buffer.from(JSON.stringify(data)).toString('base64');\n  }\n}\n","/**\n * CSV Utilities\n *\n * Utilities for converting data to CSV format for export operations.\n *\n * @module export/csv\n *\n * @example\n * ```typescript\n * import { convertToCSV, parseCSV } from '@burdenoff/be-sdk/export';\n *\n * const csv = convertToCSV(users, { includeHeaders: true });\n * console.log(csv);\n * ```\n */\n\nimport type { CSVConversionOptions } from './types.js';\n\nconst FORMULA_PREFIX_RE = /^[=+\\-@]/;\n\nexport function sanitizeCSVCell(value: string): string {\n  return FORMULA_PREFIX_RE.test(value) ? `'${value}` : value;\n}\n\n/**\n * Convert an array of objects to CSV format\n *\n * Handles nested objects by flattening them with dot notation.\n * Arrays are JSON stringified.\n * Dates are converted to ISO strings.\n *\n * @param data - Array of objects to convert\n * @param options - CSV conversion options\n * @returns CSV string\n *\n * @example\n * ```typescript\n * const users = [\n *   { id: 1, name: 'John', address: { city: 'NYC' } },\n *   { id: 2, name: 'Jane', address: { city: 'LA' } },\n * ];\n *\n * const csv = convertToCSV(users);\n * // Output:\n * // id,name,address.city\n * // 1,John,NYC\n * // 2,Jane,LA\n * ```\n */\nexport function convertToCSV(data: unknown[], options: CSVConversionOptions = {}): string {\n  const { delimiter = ',', includeHeaders = true, flattenFields = true, maxFlattenDepth = 3 } = options;\n\n  if (data.length === 0) {\n    return '';\n  }\n\n  // Flatten objects and get all keys\n  const flattenObject = (obj: unknown, prefix = '', depth = 0): Record<string, string> => {\n    const result: Record<string, string> = {};\n\n    if (obj === null || obj === undefined) {\n      return result;\n    }\n\n    if (typeof obj !== 'object') {\n      return { [prefix || 'value']: String(obj) };\n    }\n\n    for (const [key, value] of Object.entries(obj as Record<string, unknown>)) {\n      const newKey = prefix ? `${prefix}.${key}` : key;\n\n      if (value === null || value === undefined) {\n        result[newKey] = '';\n      } else if (value instanceof Date) {\n        result[newKey] = value.toISOString();\n      } else if (Array.isArray(value)) {\n        result[newKey] = JSON.stringify(value);\n      } else if (typeof value === 'object' && flattenFields && depth < maxFlattenDepth) {\n        Object.assign(result, flattenObject(value, newKey, depth + 1));\n      } else if (typeof value === 'object') {\n        result[newKey] = JSON.stringify(value);\n      } else {\n        result[newKey] = String(value);\n      }\n    }\n\n    return result;\n  };\n\n  // Flatten all records and collect all keys\n  const flattenedRecords = data.map((item) => flattenObject(item));\n  const allKeys = new Set<string>();\n  for (const record of flattenedRecords) {\n    for (const key of Object.keys(record)) {\n      allKeys.add(key);\n    }\n  }\n\n  const headers = Array.from(allKeys).sort((a, b) => a.localeCompare(b));\n\n  // Escape CSV values\n  const escapeCSV = (value: string): string => {\n    const sanitizedValue = sanitizeCSVCell(value);\n\n    if (\n      sanitizedValue.includes(delimiter) ||\n      sanitizedValue.includes('\"') ||\n      sanitizedValue.includes('\\n') ||\n      sanitizedValue.includes('\\r')\n    ) {\n      return `\"${sanitizedValue.replace(/\"/g, '\"\"')}\"`;\n    }\n    return sanitizedValue;\n  };\n\n  // Build CSV\n  const lines: string[] = [];\n\n  if (includeHeaders) {\n    lines.push(headers.map(escapeCSV).join(delimiter));\n  }\n\n  for (const record of flattenedRecords) {\n    const row = headers.map((header) => escapeCSV(record[header] || ''));\n    lines.push(row.join(delimiter));\n  }\n\n  return lines.join('\\n');\n}\n\n/**\n * Parse a CSV string into an array of objects\n *\n * @param csv - CSV string to parse\n * @param options - Parse options\n * @returns Array of parsed objects\n *\n * @example\n * ```typescript\n * const csv = 'id,name\\n1,John\\n2,Jane';\n * const data = parseCSV(csv);\n * // [{ id: '1', name: 'John' }, { id: '2', name: 'Jane' }]\n * ```\n */\nexport function parseCSV(\n  csv: string,\n  options: { delimiter?: string; hasHeaders?: boolean } = {}\n): Record<string, string>[] {\n  const { delimiter = ',', hasHeaders = true } = options;\n\n  const lines = csv.split(/\\r?\\n/).filter((line) => line.trim());\n\n  if (lines.length === 0) {\n    return [];\n  }\n\n  // Parse a single CSV line, handling quoted values\n  const parseLine = (line: string): string[] => {\n    const values: string[] = [];\n    let current = '';\n    let inQuotes = false;\n\n    let i = 0;\n    while (i < line.length) {\n      const char = line[i];\n      const nextChar = line[i + 1];\n\n      if (char === '\"' && inQuotes && nextChar === '\"') {\n        current += '\"';\n        i += 2; // Skip next quote\n      } else if (char === '\"') {\n        inQuotes = !inQuotes;\n        i++;\n      } else if (char === delimiter && !inQuotes) {\n        values.push(current);\n        current = '';\n        i++;\n      } else {\n        current += char;\n        i++;\n      }\n    }\n\n    values.push(current);\n    return values;\n  };\n\n  let headers: string[];\n  let dataLines: string[];\n\n  // We've already checked that lines.length > 0, so lines[0] is guaranteed to exist\n  const firstLine = lines[0] as string;\n\n  if (hasHeaders) {\n    headers = parseLine(firstLine);\n    dataLines = lines.slice(1);\n  } else {\n    // Generate numeric headers if no header row\n    const firstRow = parseLine(firstLine);\n    headers = firstRow.map((_, i) => `col${i}`);\n    dataLines = lines;\n  }\n\n  return dataLines.map((line) => {\n    const values = parseLine(line);\n    const obj: Record<string, string> = {};\n\n    headers.forEach((header, i) => {\n      obj[header] = values[i] || '';\n    });\n\n    return obj;\n  });\n}\n\n/**\n * Convert CSV to JSON string\n *\n * @param csv - CSV string\n * @param options - Parse options\n * @returns JSON string\n */\nexport function csvToJSON(\n  csv: string,\n  options: { delimiter?: string; hasHeaders?: boolean; pretty?: boolean } = {}\n): string {\n  const { pretty = false, ...parseOptions } = options;\n  const data = parseCSV(csv, parseOptions);\n  return pretty ? JSON.stringify(data, null, 2) : JSON.stringify(data);\n}\n\n/**\n * Get CSV headers from data\n *\n * @param data - Array of objects\n * @param flattenFields - Whether to flatten nested objects\n * @returns Array of header strings\n */\nexport function getCSVHeaders(data: unknown[], flattenFields: boolean = true): string[] {\n  if (data.length === 0) {\n    return [];\n  }\n\n  const collectKeys = (obj: unknown, prefix = '', depth = 0): string[] => {\n    const keys: string[] = [];\n\n    if (obj === null || obj === undefined || typeof obj !== 'object') {\n      return prefix ? [prefix] : [];\n    }\n\n    for (const [key, value] of Object.entries(obj as Record<string, unknown>)) {\n      const fullKey = prefix ? `${prefix}.${key}` : key;\n\n      if (\n        value !== null &&\n        typeof value === 'object' &&\n        !Array.isArray(value) &&\n        !(value instanceof Date) &&\n        flattenFields &&\n        depth < 3\n      ) {\n        keys.push(...collectKeys(value, fullKey, depth + 1));\n      } else {\n        keys.push(fullKey);\n      }\n    }\n\n    return keys;\n  };\n\n  const allKeys = new Set<string>();\n  for (const item of data) {\n    for (const key of collectKeys(item)) {\n      allKeys.add(key);\n    }\n  }\n\n  return Array.from(allKeys).sort((a, b) => a.localeCompare(b));\n}\n\n/**\n * Estimate CSV file size for a dataset\n *\n * @param data - Array of objects\n * @param sampleSize - Number of records to sample for estimation\n * @returns Estimated size in bytes\n */\nexport function estimateCSVSize(data: unknown[], sampleSize: number = 100): number {\n  if (data.length === 0) {\n    return 0;\n  }\n\n  // Take a sample to estimate average row size\n  const sample = data.slice(0, Math.min(sampleSize, data.length));\n  const sampleCSV = convertToCSV(sample);\n  const averageRowSize = sampleCSV.length / sample.length;\n\n  // Estimate total size (headers + data rows)\n  const headers = getCSVHeaders(data);\n  const headerSize = headers.join(',').length + 1; // +1 for newline\n\n  return Math.ceil(headerSize + averageRowSize * data.length);\n}\n","/**\n * Export Gateway Helper\n *\n * Centralised wrapper around the workspace internal gateway's\n * `createExportJob` mutation, used by per-svc convenience resolvers\n * (e.g. `createTagsExportJob`, `createGroupsExportJob`).\n *\n * Replaces the duplicated `src/clients/export-gateway.ts` files that\n * existed in 19+ workspace svcs.\n *\n * @module export/gateway-client\n *\n * @example\n * ```typescript\n * import { triggerExportJob } from '@burdenoff/be-sdk/export';\n *\n * const result = await triggerExportJob({\n *   serviceName: 'wspace-tags-svc',\n *   workspaceId: ctx.workspaceId,\n *   name: input.name,\n *   entityTypes: ['tags', 'vocabularies'],\n *   format: input.format,\n *   actorId: ctx.actorId,\n *   actorType: ctx.actorType,\n * });\n * ```\n */\n\nimport { GatewayClient } from '../gateway/index.js';\nimport type { ServiceLayer } from '../types/layer.js';\n\nconst CREATE_EXPORT_JOB_MUTATION = `mutation CreateExportJob($input: CreateExportJobInput!) {\n  createExportJob(input: $input) {\n    id\n    status\n    workspaceId\n    entityTypes\n    format\n    createdAt\n  }\n}`;\n\nexport type ExportActorType = 'user' | 'app' | 'service' | 'super_admin';\nexport type ExportFormatGql = 'JSON' | 'CSV';\n\nexport interface TriggerExportJobParams {\n  /** Caller service name, used by gateway client telemetry/auth */\n  serviceName: string;\n  /** Layer for the gateway. Defaults to `wspace`. */\n  layer?: ServiceLayer;\n  /** Workspace context (required for wspace exports). */\n  workspaceId: string;\n  /** Human-readable name for the export job. */\n  name: string;\n  /** Entity types registered in `wspace-export-svc` to include. */\n  entityTypes: string[];\n  /** Output format. */\n  format: ExportFormatGql;\n  /** Actor making the request (forwarded to RBAC). */\n  actorId: string;\n  actorType: ExportActorType;\n  /** Whether to include extended metadata in the export ZIP. */\n  includeMetadata?: boolean;\n  /** Optional ISO date-range bounds. */\n  dateRangeStart?: string;\n  dateRangeEnd?: string;\n}\n\nexport interface ExportJobResult {\n  id: string;\n  status: string;\n  workspaceId: string;\n  entityTypes: string[];\n  format: string;\n  createdAt: string;\n}\n\ninterface CreateExportJobResponse {\n  createExportJob?: ExportJobResult;\n}\n\n/**\n * Submit a `createExportJob` mutation to the workspace internal gateway.\n *\n * The caller is expected to map the returned `ExportJobResult` to its\n * own GraphQL output type (the per-svc `ExportJobResponse`).\n */\nexport async function triggerExportJob(params: TriggerExportJobParams): Promise<ExportJobResult> {\n  const {\n    serviceName,\n    layer = 'wspace',\n    actorId,\n    actorType,\n    workspaceId,\n    name,\n    entityTypes,\n    format,\n    includeMetadata,\n    dateRangeStart,\n    dateRangeEnd,\n  } = params;\n\n  const client = new GatewayClient({ layer, serviceName });\n\n  const input = {\n    workspaceId,\n    name,\n    entityTypes,\n    format,\n    ...(includeMetadata !== undefined ? { includeMetadata } : {}),\n    ...(dateRangeStart !== undefined ? { dateRangeStart } : {}),\n    ...(dateRangeEnd !== undefined ? { dateRangeEnd } : {}),\n  };\n\n  const response = await client.internalQuery<CreateExportJobResponse>({\n    query: CREATE_EXPORT_JOB_MUTATION,\n    variables: { input },\n    headers: {\n      'x-actor-id': actorId,\n      'x-actor-type': actorType,\n      'x-workspace-id': workspaceId,\n    },\n  });\n\n  const job = response.data?.createExportJob;\n  if (!job) {\n    throw new Error('Export service did not return a job');\n  }\n  return job;\n}\n"]}

package/dist/{chunk-VWNL2O3G.js → chunk-OQLDXOZ3.js}

@@ -4,6 +4,7 @@ import { GraphQLError } from 'graphql';
 
 var DEFAULT_ERROR_CODE = "INTERNAL_SERVER_ERROR";
 var DEFAULT_HTTP_STATUS = 500;
+var INVALID_CREDENTIALS_USER_MESSAGE = "The password you entered is incorrect.";
 var DEFAULT_USER_MESSAGES = {
   BAD_REQUEST: "Please check the request and try again.",
   BAD_USER_INPUT: "Please check the information and try again.",
@@ -13,7 +14,7 @@ var DEFAULT_USER_MESSAGES = {
   CONFLICT: "This change conflicts with existing data. Please refresh and try again.",
   FORBIDDEN: "You do not have permission to do that.",
   INTERNAL_SERVER_ERROR: "Something went wrong. Please try again.",
-  INVALID_PASSWORD: "The password you entered is incorrect.",
+  INVALID_PASSWORD: INVALID_CREDENTIALS_USER_MESSAGE,
   NOT_FOUND: "We could not find the requested item.",
   PERMISSION_DENIED: "You do not have permission to do that.",
   QUOTA_EXCEEDED: "You've reached your usage limit.",
@@ -73,7 +74,7 @@ var GRAPHQL_VALIDATION_MESSAGE_PATTERNS = [
   /^Cannot query field\b/i,
   /^Cannot return null for non-nullable field\b/i,
   /^Unknown (argument|directive|type)\b/i,
-  /^Variable "\$[^\"]+" got invalid value/i,
+  /^Variable "\$[^"]+" got invalid value/i,
   /^Field "[^"]+" of required type/i,
   /^Field "[^"]+" must not have a selection/i,
   /^Field "[^"]+" must have a selection/i,
@@ -502,5 +503,5 @@ function createWorkspaceGuardPlugin(config) {
 __name(createWorkspaceGuardPlugin, "createWorkspaceGuardPlugin");
 
 export { UserFacingGraphQLError, createHttpErrorResponse, createHumanReadableErrorPlugin, createWorkspaceGuardPlugin, formatHttpError, normalizeError, normalizeExecutionResultErrors, normalizeGraphQLResponse, normalizeGraphQLResponsePayload, toUserFacingGraphQLError };
-//# sourceMappingURL=chunk-VWNL2O3G.js.map
-//# sourceMappingURL=chunk-VWNL2O3G.js.map
+//# sourceMappingURL=chunk-OQLDXOZ3.js.map
+//# sourceMappingURL=chunk-OQLDXOZ3.js.map

package/dist/chunk-OQLDXOZ3.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/server/errors.ts","../src/server/workspace-guard.ts"],"names":["DEFAULT_ERROR_CODE","DEFAULT_HTTP_STATUS","INVALID_CREDENTIALS_USER_MESSAGE","DEFAULT_USER_MESSAGES","BAD_REQUEST","BAD_USER_INPUT","CAPTCHA_FAILED","CAPTCHA_REQUIRED","COMPLEXITY_TOO_HIGH","CONFLICT","FORBIDDEN","INTERNAL_SERVER_ERROR","INVALID_PASSWORD","NOT_FOUND","PERMISSION_DENIED","QUOTA_EXCEEDED","QUOTA_EXHAUSTED","RATE_LIMITED","RESOURCE_CAP_EXCEEDED","STORAGE_QUOTA_EXCEEDED","TIMEOUT","UNAUTHENTICATED","VALIDATION_ERROR","WORKSPACE_REQUIRED","DEFAULT_STATUS_BY_CODE","SENSITIVE_EXTENSION_KEYS","Set","TECHNICAL_MESSAGE_PATTERNS","GRAPHQL_VALIDATION_MESSAGE_PATTERNS","isRecord","value","Array","isArray","readString","record","key","trim","length","readExtensions","error","extensions","readOriginalError","GraphQLError","originalError","Error","undefined","sanitizeExtensions","sanitized","Object","entries","has","normalizeCode","code","replace","toUpperCase","inferCodeFromMessage","message","lower","toLowerCase","some","pattern","test","includes","inferCode","extensionCode","originalCode","directCode","readErrorMessage","isLikelyTechnicalMessage","readExplicitUserMessage","resolveUserMessage","explicit","fallback","resolveTechnicalMessage","options","environment","serviceName","readHttpStatus","http","normalizeError","originalExtensions","directExtensions","mergedExtensions","userMessage","technicalMessage","status","UserFacingGraphQLError","details","httpStatus","cause","name","toUserFacingGraphQLError","normalized","nodes","source","positions","path","normalizeExecutionResultErrors","result","forEach","entry","errors","map","normalizeGraphQLResponsePayload","payload","normalizeGraphQLResponse","response","contentType","headers","get","text","Response","statusText","JSON","parse","stringify","createHumanReadableErrorPlugin","onExecute","onExecuteDone","formatHttpError","body","createHttpErrorResponse","formatted","WorkspaceRequiredError","isFieldPublic","field","directives","astNode","dir","args","arguments","arg","kind","resolveOperationType","document","operationName","defs","definitions","def","operation","allRootFieldsPublic","schema","opType","rootType","getMutationType","getSubscriptionType","getQueryType","fields","getFields","opDef","find","d","selections","selectionSet","sel","fieldName","startsWith","fieldDef","createWorkspaceGuardPlugin","config","enabled","whitelistedOperations","allowPublicDirective","errorMessage","logger","info","context","contextValue","workspaceId","workspace","id","headerWorkspaceId","request","warn"],"mappings":";;;;AAwCA,IAAMA,kBAAAA,GAAqB,uBAAA;AAC3B,IAAMC,mBAAAA,GAAsB,GAAA;AAK5B,IAAMC,gCAAAA,GAAmC,wCAAA;AAEzC,IAAMC,qBAAAA,GAAgD;EACpDC,WAAAA,EAAa,yCAAA;EACbC,cAAAA,EAAgB,6CAAA;EAChBC,cAAAA,EAAgB,4CAAA;EAChBC,gBAAAA,EAAkB,+CAAA;EAClBC,mBAAAA,EAAqB,yEAAA;EACrBC,QAAAA,EAAU,yEAAA;EACVC,SAAAA,EAAW,wCAAA;EACXC,qBAAAA,EAAuB,yCAAA;EACvBC,gBAAAA,EAAkBV,gCAAAA;EAClBW,SAAAA,EAAW,uCAAA;EACXC,iBAAAA,EAAmB,wCAAA;EACnBC,cAAAA,EAAgB,kCAAA;EAChBC,eAAAA,EAAiB,kCAAA;EACjBC,YAAAA,EAAc,wDAAA;EACdC,qBAAAA,EAAuB,gEAAA;EACvBC,sBAAAA,EAAwB,mEAAA;EACxBC,OAAAA,EAAS,8CAAA;EACTC,eAAAA,EAAiB,6BAAA;EACjBC,gBAAAA,EAAkB,6CAAA;EAClBC,kBAAAA,EAAoB;AACtB,CAAA;AAEA,IAAMC,sBAAAA,GAAiD;EACrDpB,WAAAA,EAAa,GAAA;EACbC,cAAAA,EAAgB,GAAA;EAChBC,cAAAA,EAAgB,GAAA;EAChBC,gBAAAA,EAAkB,GAAA;EAClBC,mBAAAA,EAAqB,GAAA;EACrBC,QAAAA,EAAU,GAAA;EACVC,SAAAA,EAAW,GAAA;EACXE,gBAAAA,EAAkB,GAAA;EAClBC,SAAAA,EAAW,GAAA;EACXC,iBAAAA,EAAmB,GAAA;EACnBC,cAAAA,EAAgB,GAAA;EAChBC,eAAAA,EAAiB,GAAA;EACjBC,YAAAA,EAAc,GAAA;EACdC,qBAAAA,EAAuB,GAAA;EACvBC,sBAAAA,EAAwB,GAAA;EACxBC,OAAAA,EAAS,GAAA;EACTC,eAAAA,EAAiB,GAAA;EACjBC,gBAAAA,EAAkB,GAAA;EAClBC,kBAAAA,EAAoB;AACtB,CAAA;AAEA,IAAME,wBAAAA,uBAA+BC,GAAAA,CAAI;AAAC,EAAA,WAAA;AAAa,EAAA,eAAA;AAAiB,EAAA,OAAA;AAAS,EAAA;AAAa,CAAA,CAAA;AAE9F,IAAMC,0BAAAA,GAA6B;AACjC,EAAA,aAAA;AACA,EAAA,UAAA;AACA,EAAA,iBAAA;AACA,EAAA,YAAA;AACA,EAAA,gBAAA;AACA,EAAA,WAAA;AACA,EAAA,kBAAA;AACA,EAAA,eAAA;AACA,EAAA,eAAA;AACA,EAAA,YAAA;AACA,EAAA,gCAAA;AACA,EAAA,4BAAA;AACA,EAAA;;AAGF,IAAMC,mCAAAA,GAAsC;AAC1C,EAAA,iBAAA;AACA,EAAA,wBAAA;AACA,EAAA,+CAAA;AACA,EAAA,uCAAA;AACA,EAAA,wCAAA;AACA,EAAA,kCAAA;AACA,EAAA,2CAAA;AACA,EAAA,uCAAA;AACA,EAAA,0CAAA;AACA,EAAA,yBAAA;AACA,EAAA;;AAGF,SAASC,SAASC,KAAAA,EAAc;AAC9B,EAAA,OAAO,OAAOA,UAAU,QAAA,IAAYA,KAAAA,KAAU,QAAQ,CAACC,KAAAA,CAAMC,QAAQF,KAAAA,CAAAA;AACvE;AAFSD,MAAAA,CAAAA,QAAAA,EAAAA,UAAAA,CAAAA;AAIT,SAASI,UAAAA,CAAWC,QAAiCC,GAAAA,EAAW;AAC9D,EAAA,MAAML,KAAAA,GAAQI,OAAOC,GAAAA,CAAAA;AACrB,EAAA,OAAO,OAAOL,UAAU,QAAA,IAAYA,KAAAA,CAAMM,MAAI,CAAGC,MAAAA,GAAS,IAAIP,KAAAA,GAAQ,IAAA;AACxE;AAHSG,MAAAA,CAAAA,UAAAA,EAAAA,YAAAA,CAAAA;AAKT,SAASK,eAAeC,KAAAA,EAAc;AACpC,EAAA,IAAI,CAACV,QAAAA,CAASU,KAAAA,CAAAA,SAAe,EAAC;AAC9B,EAAA,MAAMC,UAAAA,GAAaD,MAAM,YAAA,CAAA;AACzB,EAAA,OAAOV,QAAAA,CAASW,UAAAA,CAAAA,GAAcA,UAAAA,GAAa,EAAC;AAC9C;AAJSF,MAAAA,CAAAA,cAAAA,EAAAA,gBAAAA,CAAAA;AAMT,SAASG,kBAAkBF,KAAAA,EAAc;AACvC,EAAA,IAAIA,KAAAA,YAAiBG,YAAAA,IAAgBH,KAAAA,CAAMI,aAAAA,YAAyBC,KAAAA,EAAO;AACzE,IAAA,OAAOL,KAAAA,CAAMI,aAAAA;AACf,EAAA;AACA,EAAA,OAAOE,MAAAA;AACT;AALSJ,MAAAA,CAAAA,iBAAAA,EAAAA,mBAAAA,CAAAA;AAOT,SAASK,mBAAmBN,UAAAA,EAAmC;AAC7D,EAAA,MAAMO,YAAqC,EAAC;AAC5C,EAAA,KAAA,MAAW,CAACZ,GAAAA,EAAKL,KAAAA,KAAUkB,MAAAA,CAAOC,OAAAA,CAAQT,UAAAA,CAAAA,EAAa;AACrD,IAAA,IAAI,CAACf,wBAAAA,CAAyByB,GAAAA,CAAIf,GAAAA,CAAAA,EAAM;AACtCY,MAAAA,SAAAA,CAAUZ,GAAAA,CAAAA,GAAOL,KAAAA;AACnB,IAAA;AACF,EAAA;AACA,EAAA,OAAOiB,SAAAA;AACT;AARSD,MAAAA,CAAAA,kBAAAA,EAAAA,oBAAAA,CAAAA;AAUT,SAASK,cAAcC,IAAAA,EAAmB;AACxC,EAAA,IAAI,CAACA,MAAM,OAAOpD,kBAAAA;AAClB,EAAA,OAAOoD,KACJhB,IAAAA,EAAI,CACJiB,QAAQ,SAAA,EAAW,GAAA,EACnBC,WAAAA,EAAW;AAChB;AANSH,MAAAA,CAAAA,aAAAA,EAAAA,eAAAA,CAAAA;AAQT,SAASI,qBAAqBC,OAAAA,EAAe;AAC3C,EAAA,MAAMC,KAAAA,GAAQD,QAAQE,WAAAA,EAAW;AAEjC,EAAA,IAAI9B,mCAAAA,CAAoC+B,KAAK,CAACC,OAAAA,KAAYA,QAAQC,IAAAA,CAAKL,OAAAA,CAAAA,CAAAA,EAAW;AAChF,IAAA,OAAO,gBAAA;AACT,EAAA;AAEA,EAAA,IACEC,KAAAA,CAAMK,SAAS,iBAAA,CAAA,IACfL,MAAMK,QAAAA,CAAS,mBAAA,CAAA,IACfL,KAAAA,CAAMK,QAAAA,CAAS,yBAAA,KACfL,KAAAA,CAAMK,QAAAA,CAAS,cAAA,CAAA,IACfL,KAAAA,CAAMK,QAAAA,CAAS,gBAAA,CAAA,IACfL,KAAAA,CAAMK,QAAAA,CAAS,YAAA,CAAA,EACf;AACA,IAAA,OAAO,iBAAA;AACT,EAAA;AAEA,EAAA,IAAIL,MAAMK,QAAAA,CAAS,mBAAA,KAAwBL,KAAAA,CAAMK,QAAAA,CAAS,uBAAA,CAAA,EAA0B;AAClF,IAAA,OAAO,oBAAA;AACT,EAAA;AAEA,EAAA,IACEL,KAAAA,CAAMK,QAAAA,CAAS,WAAA,CAAA,IACfL,MAAMK,QAAAA,CAAS,eAAA,CAAA,IACfL,KAAAA,CAAMK,SAAS,mBAAA,CAAA,IACfL,KAAAA,CAAMK,QAAAA,CAAS,gBAAA,CAAA,EACf;AACA,IAAA,OAAO,WAAA;AACT,EAAA;AAEA,EAAA,IAAIL,MAAMK,QAAAA,CAAS,WAAA,KAAgBL,KAAAA,CAAMK,QAAAA,CAAS,aAAA,CAAA,EAAgB;AAChE,IAAA,OAAO,WAAA;AACT,EAAA;AAEA,EAAA,IAAIL,KAAAA,CAAMK,QAAAA,CAAS,gBAAA,CAAA,IAAqBL,KAAAA,CAAMK,QAAAA,CAAS,eAAA,CAAA,IAAoBL,KAAAA,CAAMK,QAAAA,CAAS,UAAA,CAAA,EAAa;AACrG,IAAA,OAAO,UAAA;AACT,EAAA;AAEA,EAAA,IAAIL,KAAAA,CAAMK,QAAAA,CAAS,OAAA,CAAA,IAAYL,KAAAA,CAAMK,QAAAA,CAAS,cAAA,CAAA,IAAmBL,KAAAA,CAAMK,QAAAA,CAAS,eAAA,CAAA,EAAkB;AAChG,IAAA,OAAO,gBAAA;AACT,EAAA;AAEA,EAAA,IAAIL,MAAMK,QAAAA,CAAS,SAAA,KAAcL,KAAAA,CAAMK,QAAAA,CAAS,WAAA,CAAA,EAAc;AAC5D,IAAA,OAAO,SAAA;AACT,EAAA;AAEA,EAAA,IACEL,KAAAA,CAAMK,QAAAA,CAAS,UAAA,CAAA,IACfL,MAAMK,QAAAA,CAAS,SAAA,CAAA,IACfL,KAAAA,CAAMK,SAAS,SAAA,CAAA,IACfL,KAAAA,CAAMK,QAAAA,CAAS,aAAA,CAAA,EACf;AACA,IAAA,OAAO,gBAAA;AACT,EAAA;AAEA,EAAA,OAAO9D,kBAAAA;AACT;AAzDSuD,MAAAA,CAAAA,oBAAAA,EAAAA,sBAAAA,CAAAA;AA2DT,SAASQ,SAAAA,CAAUxB,KAAAA,EAAgBC,UAAAA,EAAqCG,aAAAA,EAAgC;AACtG,EAAA,MAAMqB,aAAAA,GAAgB,OAAOxB,UAAAA,CAAW,MAAA,MAAY,QAAA,GAAWA,UAAAA,CAAW,MAAA,CAAA,GAAU,IAAA;AACpF,EAAA,IAAIwB,aAAAA,EAAe,OAAOb,aAAAA,CAAca,aAAAA,CAAAA;AAExC,EAAA,IAAInC,QAAAA,CAASc,aAAAA,CAAAA,EAAgB;AAC3B,IAAA,MAAMsB,YAAAA,GAAehC,UAAAA,CAAWU,aAAAA,EAAe,MAAA,CAAA;AAC/C,IAAA,IAAIsB,YAAAA,EAAc,OAAOd,aAAAA,CAAcc,YAAAA,CAAAA;AACzC,EAAA;AAEA,EAAA,IAAIpC,QAAAA,CAASU,KAAAA,CAAAA,EAAQ;AACnB,IAAA,MAAM2B,UAAAA,GAAajC,UAAAA,CAAWM,KAAAA,EAAO,MAAA,CAAA;AACrC,IAAA,IAAI2B,UAAAA,EAAY,OAAOf,aAAAA,CAAce,UAAAA,CAAAA;AACvC,EAAA;AAEA,EAAA,MAAMV,OAAAA,GAAUW,iBAAiB5B,KAAAA,CAAAA;AACjC,EAAA,OAAOgB,qBAAqBC,OAAAA,CAAAA;AAC9B;AAhBSO,MAAAA,CAAAA,SAAAA,EAAAA,WAAAA,CAAAA;AAkBT,SAASI,iBAAiB5B,KAAAA,EAAc;AACtC,EAAA,IAAIA,iBAAiBK,KAAAA,IAASL,KAAAA,CAAMiB,QAAQpB,IAAAA,EAAI,CAAGC,SAAS,CAAA,EAAG;AAC7D,IAAA,OAAOE,KAAAA,CAAMiB,OAAAA;AACf,EAAA;AACA,EAAA,IAAI3B,QAAAA,CAASU,KAAAA,CAAAA,EAAQ;AACnB,IAAA,MAAMiB,OAAAA,GAAUvB,UAAAA,CAAWM,KAAAA,EAAO,SAAA,CAAA;AAClC,IAAA,IAAIiB,SAAS,OAAOA,OAAAA;AACtB,EAAA;AACA,EAAA,OAAOrD,qBAAAA,CAAsBH,kBAAAA,CAAuB;AACtD;AATSmE,MAAAA,CAAAA,gBAAAA,EAAAA,kBAAAA,CAAAA;AAWT,SAASC,yBAAyBZ,OAAAA,EAAe;AAC/C,EAAA,IAAIA,OAAAA,CAAQnB,MAAAA,GAAS,GAAA,EAAK,OAAO,IAAA;AACjC,EAAA,IAAImB,OAAAA,CAAQM,QAAAA,CAAS,IAAA,CAAA,EAAO,OAAO,IAAA;AACnC,EAAA,IAAIN,OAAAA,CAAQM,SAAS,GAAA,CAAA,IAAQN,QAAQM,QAAAA,CAAS,GAAA,GAAM,OAAO,IAAA;AAC3D,EAAA,IAAIlC,mCAAAA,CAAoC+B,KAAK,CAACC,OAAAA,KAAYA,QAAQC,IAAAA,CAAKL,OAAAA,CAAAA,CAAAA,EAAW,OAAO,IAAA;AACzF,EAAA,OAAO7B,2BAA2BgC,IAAAA,CAAK,CAACC,YAAYA,OAAAA,CAAQC,IAAAA,CAAKL,OAAAA,CAAAA,CAAAA;AACnE;AANSY,MAAAA,CAAAA,wBAAAA,EAAAA,0BAAAA,CAAAA;AAQT,SAASC,wBAAwB7B,UAAAA,EAAmC;AAClE,EAAA,OACEP,UAAAA,CAAWO,UAAAA,EAAY,aAAA,CAAA,IACvBP,UAAAA,CAAWO,YAAY,cAAA,CAAA,IACvBP,UAAAA,CAAWO,UAAAA,EAAY,gBAAA,CAAA;AAE3B;AANS6B,MAAAA,CAAAA,uBAAAA,EAAAA,yBAAAA,CAAAA;AAQT,SAASC,kBAAAA,CAAmBlB,IAAAA,EAAcI,OAAAA,EAAiBhB,UAAAA,EAAmC;AAC5F,EAAA,MAAM+B,QAAAA,GAAWF,wBAAwB7B,UAAAA,CAAAA;AACzC,EAAA,IAAI+B,UAAU,OAAOA,QAAAA;AAErB,EAAA,MAAMC,WACJrE,qBAAAA,CAAsBiD,IAAAA,CAAAA,IACtBjD,qBAAAA,CAAsBH,kBAAAA,CAAAA,IACtB,yCAAA;AACF,EAAA,IAAIoD,SAASpD,kBAAAA,EAAoB;AAC/B,IAAA,OAAOwE,QAAAA;AACT,EAAA;AAEA,EAAA,IAAI,CAACJ,wBAAAA,CAAyBZ,OAAAA,CAAAA,EAAU;AACtC,IAAA,OAAOA,OAAAA;AACT,EAAA;AAEA,EAAA,OAAOgB,QAAAA;AACT;AAjBSF,MAAAA,CAAAA,kBAAAA,EAAAA,oBAAAA,CAAAA;AAmBT,SAASG,uBAAAA,CACPrB,IAAAA,EACAI,OAAAA,EACAhB,UAAAA,EACAkC,OAAAA,EAAkC;AAElC,EAAA,MAAMH,QAAAA,GAAWtC,UAAAA,CAAWO,UAAAA,EAAY,kBAAA,CAAA;AACxC,EAAA,IAAI+B,UAAU,OAAOA,QAAAA;AAErB,EAAA,IAAIG,OAAAA,CAAQC,WAAAA,KAAgB,YAAA,IAAgBvB,IAAAA,KAASpD,kBAAAA,EAAoB;AACvE,IAAA,OAAO0E,QAAQE,WAAAA,GAAc,CAAA,EAAGF,QAAQE,WAAW,CAAA,UAAA,EAAa5E,kBAAAA,CAAAA,CAAAA,GAAuBA,kBAAAA;AACzF,EAAA;AAEA,EAAA,OAAOwD,OAAAA;AACT;AAdSiB,MAAAA,CAAAA,uBAAAA,EAAAA,yBAAAA,CAAAA;AAgBT,SAASI,cAAAA,CAAerC,YAAqCY,IAAAA,EAAY;AACvE,EAAA,MAAM0B,IAAAA,GAAOtC,WAAW,MAAA,CAAA;AACxB,EAAA,IAAIX,SAASiD,IAAAA,CAAAA,IAAS,OAAOA,IAAAA,CAAK,QAAA,MAAc,QAAA,EAAU;AACxD,IAAA,OAAOA,KAAK,QAAA,CAAA;AACd,EAAA;AACA,EAAA,OAAOtD,sBAAAA,CAAuB4B,IAAAA,CAAAA,IAASnD,mBAAAA;AACzC;AANS4E,MAAAA,CAAAA,cAAAA,EAAAA,gBAAAA,CAAAA;AAQF,SAASE,cAAAA,CAAexC,KAAAA,EAAgBmC,OAAAA,GAAqC,EAAC,EAAC;AACpF,EAAA,MAAM/B,aAAAA,GAAgBF,kBAAkBF,KAAAA,CAAAA;AACxC,EAAA,MAAMyC,kBAAAA,GAAqB1C,eAAeK,aAAAA,CAAAA;AAC1C,EAAA,MAAMsC,gBAAAA,GAAmB3C,eAAeC,KAAAA,CAAAA;AACxC,EAAA,MAAM2C,mBAAmBpC,kBAAAA,CAAmB;IAAE,GAAGkC,kBAAAA;IAAoB,GAAGC;GAAiB,CAAA;AACzF,EAAA,MAAMzB,OAAAA,GAAUW,iBAAiB5B,KAAAA,CAAAA;AACjC,EAAA,MAAMa,IAAAA,GAAOW,SAAAA,CAAUxB,KAAAA,EAAO2C,gBAAAA,EAAkBvC,aAAAA,CAAAA;AAChD,EAAA,MAAMwC,WAAAA,GAAcb,kBAAAA,CAAmBlB,IAAAA,EAAMI,OAAAA,EAAS0B,gBAAAA,CAAAA;AACtD,EAAA,MAAME,gBAAAA,GAAmBX,uBAAAA,CAAwBrB,IAAAA,EAAMI,OAAAA,EAAS0B,kBAAkBR,OAAAA,CAAAA;AAClF,EAAA,MAAMW,MAAAA,GAASR,cAAAA,CAAeK,gBAAAA,EAAkB9B,IAAAA,CAAAA;AAEhD,EAAA,MAAMZ,UAAAA,GAAsC;IAC1C,GAAG0C,gBAAAA;AACH9B,IAAAA,IAAAA;AACA+B,IAAAA,WAAAA;AACAC,IAAAA;AACF,GAAA;AAEA,EAAA,IAAIV,QAAQE,WAAAA,EAAa;AACvBpC,IAAAA,UAAAA,CAAW,aAAA,IAAiBkC,OAAAA,CAAQE,WAAAA;AACtC,EAAA;AAEA,EAAA,IAAI,CAAC/C,QAAAA,CAASW,UAAAA,CAAW,MAAA,CAAO,CAAA,EAAG;AACjCA,IAAAA,UAAAA,CAAW,MAAA,CAAA,GAAU;AAAE6C,MAAAA;AAAO,KAAA;AAChC,EAAA;AAEA,EAAA,OAAO;AACLjC,IAAAA,IAAAA;AACA+B,IAAAA,WAAAA;AACAC,IAAAA,gBAAAA;AACA5C,IAAAA,UAAAA;AACA6C,IAAAA;AACF,GAAA;AACF;AAjCgBN,MAAAA,CAAAA,cAAAA,EAAAA,gBAAAA,CAAAA;AAmCT,IAAMO,sBAAAA,GAAN,cAAqC5C,YAAAA,CAAAA;EA3V5C;;;AA4VE,EAAA,WAAA,CAAYgC,OAAAA,EAAiC;AAC3C,IAAA,MAAMlC,UAAAA,GAAsC;MAC1CY,IAAAA,EAAMD,aAAAA,CAAcuB,QAAQtB,IAAI,CAAA;AAChC+B,MAAAA,WAAAA,EAAaT,OAAAA,CAAQS,WAAAA;MACrBC,gBAAAA,EAAkBV,OAAAA,CAAQU,oBAAoBV,OAAAA,CAAQS;AACxD,KAAA;AAEA,IAAA,IAAIT,QAAQa,OAAAA,EAAS;AACnB/C,MAAAA,UAAAA,CAAW,SAAA,IAAakC,OAAAA,CAAQa,OAAAA;AAClC,IAAA;AAEA,IAAA,IAAIb,QAAQc,UAAAA,EAAY;AACtBhD,MAAAA,UAAAA,CAAW,MAAA,CAAA,GAAU;AAAE6C,QAAAA,MAAAA,EAAQX,OAAAA,CAAQc;AAAW,OAAA;AACpD,IAAA;AAEA,IAAA,KAAA,CAAMd,QAAQS,WAAAA,EAAa;AACzBxC,MAAAA,aAAAA,EAAe+B,OAAAA,CAAQe,KAAAA;AACvBjD,MAAAA;KACF,CAAA;AACA,IAAA,IAAA,CAAKkD,IAAAA,GAAO,wBAAA;AACd,EAAA;AACF;AAEO,SAASC,wBAAAA,CAAyBpD,KAAAA,EAAgBmC,OAAAA,GAAqC,EAAC,EAAC;AAC9F,EAAA,MAAMkB,UAAAA,GAAab,cAAAA,CAAexC,KAAAA,EAAOmC,OAAAA,CAAAA;AAEzC,EAAA,IAAInC,iBAAiBG,YAAAA,EAAc;AACjC,IAAA,OAAO,IAAIA,YAAAA,CAAakD,UAAAA,CAAWT,WAAAA,EAAa;AAC9CU,MAAAA,KAAAA,EAAOtD,KAAAA,CAAMsD,KAAAA;AACbC,MAAAA,MAAAA,EAAQvD,KAAAA,CAAMuD,MAAAA;AACdC,MAAAA,SAAAA,EAAWxD,KAAAA,CAAMwD,SAAAA;AACjBC,MAAAA,IAAAA,EAAMzD,KAAAA,CAAMyD,IAAAA;AACZrD,MAAAA,aAAAA,EAAeJ,KAAAA,CAAMI,aAAAA;AACrBH,MAAAA,UAAAA,EAAYoD,UAAAA,CAAWpD;KACzB,CAAA;AACF,EAAA;AAEA,EAAA,OAAO,IAAIE,YAAAA,CAAakD,UAAAA,CAAWT,WAAAA,EAAa;IAC9CxC,aAAAA,EAAeJ,KAAAA,YAAiBK,QAAQL,KAAAA,GAAQM,MAAAA;AAChDL,IAAAA,UAAAA,EAAYoD,UAAAA,CAAWpD;GACzB,CAAA;AACF;AAlBgBmD,MAAAA,CAAAA,wBAAAA,EAAAA,0BAAAA,CAAAA;AAoBT,SAASM,8BAAAA,CAA+BC,MAAAA,EAAiBxB,OAAAA,GAAqC,EAAC,EAAC;AACrG,EAAA,IAAI3C,KAAAA,CAAMC,OAAAA,CAAQkE,MAAAA,CAAAA,EAAS;AACzBA,IAAAA,MAAAA,CAAOC,QAAQ,CAACC,KAAAA,KAAUH,8BAAAA,CAA+BG,KAAAA,EAAO1B,OAAAA,CAAAA,CAAAA;AAChE,IAAA;AACF,EAAA;AAEA,EAAA,IAAI,CAAC7C,QAAAA,CAASqE,MAAAA,CAAAA,EAAS;AACvB,EAAA,MAAMG,MAAAA,GAASH,OAAO,QAAA,CAAA;AACtB,EAAA,IAAI,CAACnE,KAAAA,CAAMC,OAAAA,CAAQqE,MAAAA,CAAAA,IAAWA,MAAAA,CAAOhE,WAAW,CAAA,EAAG;AAEnD6D,EAAAA,MAAAA,CAAO,QAAA,IAAYG,MAAAA,CAAOC,GAAAA,CAAI,CAAC/D,KAAAA,KAAUoD,wBAAAA,CAAyBpD,KAAAA,EAAOmC,OAAAA,CAAAA,CAAAA;AAC3E;AAXgBuB,MAAAA,CAAAA,8BAAAA,EAAAA,gCAAAA,CAAAA;AAaT,SAASM,+BAAAA,CAAgCC,OAAAA,EAAkB9B,OAAAA,GAAqC,EAAC,EAAC;AACvGuB,EAAAA,8BAAAA,CAA+BO,SAAS9B,OAAAA,CAAAA;AACxC,EAAA,OAAO8B,OAAAA;AACT;AAHgBD,MAAAA,CAAAA,+BAAAA,EAAAA,iCAAAA,CAAAA;AAKhB,eAAsBE,wBAAAA,CACpBC,QAAAA,EACAhC,OAAAA,GAAqC,EAAC,EAAC;AAEvC,EAAA,MAAMiC,WAAAA,GAAcD,QAAAA,CAASE,OAAAA,CAAQC,GAAAA,CAAI,cAAA,CAAA,IAAmB,EAAA;AAC5D,EAAA,IAAI,CAACF,WAAAA,CAAYjD,WAAAA,EAAW,CAAGI,QAAAA,CAAS,MAAA,CAAA,EAAS;AAC/C,IAAA,OAAO4C,QAAAA;AACT,EAAA;AAEA,EAAA,MAAMI,IAAAA,GAAO,MAAMJ,QAAAA,CAASI,IAAAA,EAAI;AAChC,EAAA,IAAI,CAACA,IAAAA,EAAM;AACT,IAAA,OAAO,IAAIC,SAASD,IAAAA,EAAM;AACxBzB,MAAAA,MAAAA,EAAQqB,QAAAA,CAASrB,MAAAA;AACjB2B,MAAAA,UAAAA,EAAYN,QAAAA,CAASM,UAAAA;AACrBJ,MAAAA,OAAAA,EAASF,QAAAA,CAASE;KACpB,CAAA;AACF,EAAA;AAEA,EAAA,IAAIJ,OAAAA;AACJ,EAAA,IAAI;AACFA,IAAAA,OAAAA,GAAUS,IAAAA,CAAKC,MAAMJ,IAAAA,CAAAA;EACvB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAIC,SAASD,IAAAA,EAAM;AACxBzB,MAAAA,MAAAA,EAAQqB,QAAAA,CAASrB,MAAAA;AACjB2B,MAAAA,UAAAA,EAAYN,QAAAA,CAASM,UAAAA;AACrBJ,MAAAA,OAAAA,EAASF,QAAAA,CAASE;KACpB,CAAA;AACF,EAAA;AAEAL,EAAAA,+BAAAA,CAAgCC,SAAS9B,OAAAA,CAAAA;AAEzC,EAAA,OAAO,IAAIqC,QAAAA,CAASE,IAAAA,CAAKE,SAAAA,CAAUX,OAAAA,CAAAA,EAAU;AAC3CnB,IAAAA,MAAAA,EAAQqB,QAAAA,CAASrB,MAAAA;AACjB2B,IAAAA,UAAAA,EAAYN,QAAAA,CAASM,UAAAA;AACrBJ,IAAAA,OAAAA,EAASF,QAAAA,CAASE;GACpB,CAAA;AACF;AApCsBH,MAAAA,CAAAA,wBAAAA,EAAAA,0BAAAA,CAAAA;AAsCf,SAASW,8BAAAA,CAA+B1C,OAAAA,GAAqC,EAAC,EAAC;AACpF,EAAA,OAAO;IACL2C,SAAAA,GAAAA;AACE,MAAA,OAAO;QACLC,aAAAA,CAAc,EAAEpB,QAAM,EAAuB;AAC3CD,UAAAA,8BAAAA,CAA+BC,QAAQxB,OAAAA,CAAAA;AACzC,QAAA;AACF,OAAA;AACF,IAAA;AACF,GAAA;AACF;AAVgB0C,MAAAA,CAAAA,8BAAAA,EAAAA,gCAAAA,CAAAA;AAYT,SAASG,eAAAA,CAAgBhF,KAAAA,EAAgBmC,OAAAA,GAAqC,EAAC,EAAC;AACrF,EAAA,MAAMkB,UAAAA,GAAab,cAAAA,CAAexC,KAAAA,EAAOmC,OAAAA,CAAAA;AACzC,EAAA,OAAO;AACLW,IAAAA,MAAAA,EAAQO,UAAAA,CAAWP,MAAAA;IACnBmC,IAAAA,EAAM;AACJjF,MAAAA,KAAAA,EAAOqD,UAAAA,CAAWT,WAAAA;AAClB3B,MAAAA,OAAAA,EAASoC,UAAAA,CAAWT,WAAAA;AACpBA,MAAAA,WAAAA,EAAaS,UAAAA,CAAWT,WAAAA;AACxBC,MAAAA,gBAAAA,EAAkBQ,UAAAA,CAAWR,gBAAAA;AAC7BhC,MAAAA,IAAAA,EAAMwC,UAAAA,CAAWxC,IAAAA;AACjBZ,MAAAA,UAAAA,EAAYoD,UAAAA,CAAWpD;AACzB;AACF,GAAA;AACF;AAbgB+E,MAAAA,CAAAA,eAAAA,EAAAA,iBAAAA,CAAAA;AAeT,SAASE,uBAAAA,CAAwBlF,KAAAA,EAAgBmC,OAAAA,GAAqC,EAAC,EAAC;AAC7F,EAAA,MAAMgD,SAAAA,GAAYH,eAAAA,CAAgBhF,KAAAA,EAAOmC,OAAAA,CAAAA;AACzC,EAAA,OAAO,IAAIqC,QAAAA,CAASE,IAAAA,CAAKE,SAAAA,CAAUO,SAAAA,CAAUF,IAAI,CAAA,EAAG;AAClDnC,IAAAA,MAAAA,EAAQqC,SAAAA,CAAUrC,MAAAA;IAClBuB,OAAAA,EAAS;MAAE,cAAA,EAAgB;AAAmB;GAChD,CAAA;AACF;AANgBa,MAAAA,CAAAA,uBAAAA,EAAAA,yBAAAA,CAAAA;;;AC7YhB,IAAME,sBAAAA,GAAN,MAAMA,uBAAAA,SAA+BrC,sBAAAA,CAAAA;EA7ErC;;;AA8EE,EAAA,WAAA,CAAY9B,OAAAA,EAAiB;AAC3B,IAAA,KAAA,CAAM;MACJJ,IAAAA,EAAM,oBAAA;MACN+B,WAAAA,EAAa,0CAAA;MACbC,gBAAAA,EAAkB5B,OAAAA;MAClBgC,UAAAA,EAAY;KACd,CAAA;AACA,IAAA,IAAA,CAAKE,IAAAA,GAAO,wBAAA;AACd,EAAA;AACF,CAAA;AAkCA,SAASkC,cAAcC,KAAAA,EAA+B;AACpD,EAAA,MAAMC,UAAAA,GAAaD,OAAOE,OAAAA,EAASD,UAAAA;AACnC,EAAA,IAAI,CAACA,UAAAA,IAAcA,UAAAA,CAAWzF,MAAAA,KAAW,GAAG,OAAO,KAAA;AAEnD,EAAA,KAAA,MAAW2F,OAAOF,UAAAA,EAAY;AAC5B,IAAA,MAAMpC,IAAAA,GAAOsC,IAAItC,IAAAA,EAAM5D,KAAAA;AACvB,IAAA,IAAI4D,IAAAA,KAAS,UAAU,OAAO,IAAA;AAC9B,IAAA,IAAIA,SAAS,MAAA,EAAQ;AACnB,MAAA,MAAMuC,IAAAA,GAAOD,GAAAA,CAAIE,SAAAA,IAAa,EAAA;AAC9B,MAAA,KAAA,MAAWC,OAAOF,IAAAA,EAAM;AACtB,QAAA,IAAIE,GAAAA,CAAIzC,IAAAA,EAAM5D,KAAAA,KAAU,QAAA,IAAYqG,GAAAA,CAAIrG,KAAAA,EAAOsG,IAAAA,KAAS,cAAA,IAAkBD,GAAAA,CAAIrG,KAAAA,CAAMA,KAAAA,KAAU,IAAA,EAAM;AAClG,UAAA,OAAO,IAAA;AACT,QAAA;AACF,MAAA;AACF,IAAA;AACF,EAAA;AACA,EAAA,OAAO,KAAA;AACT;AAjBS8F,MAAAA,CAAAA,aAAAA,EAAAA,eAAAA,CAAAA;AAqCT,SAASS,oBAAAA,CACPC,UACAC,aAAAA,EAAwC;AAExC,EAAA,MAAMC,IAAAA,GAAOF,QAAAA,EAAUG,WAAAA,IAAe,EAAA;AACtC,EAAA,KAAA,MAAWC,OAAOF,IAAAA,EAAM;AACtB,IAAA,IAAIE,GAAAA,CAAIN,SAAS,qBAAA,EAAuB;AAGxC,IAAA,IAAIM,IAAIC,SAAAA,KAAc,CAACJ,iBAAiBG,GAAAA,CAAIhD,IAAAA,EAAM5D,UAAUyG,aAAAA,CAAAA,EAAgB;AAC1E,MAAA,OAAOG,GAAAA,CAAIC,SAAAA;AACb,IAAA;AACF,EAAA;AACA,EAAA,OAAO,OAAA;AACT;AAdSN,MAAAA,CAAAA,oBAAAA,EAAAA,sBAAAA,CAAAA;AAoBT,SAASO,mBAAAA,CACPC,MAAAA,EACAP,QAAAA,EACAC,aAAAA,EAAwC;AAExC,EAAA,IAAI,CAACM,MAAAA,IAAU,CAACP,QAAAA,EAAU,OAAO,KAAA;AAEjC,EAAA,MAAMQ,MAAAA,GAAST,oBAAAA,CAAqBC,QAAAA,EAAUC,aAAAA,CAAAA;AAC9C,EAAA,IAAIQ,QAAAA;AACJ,EAAA,IAAID,WAAW,UAAA,EAAY;AACzBC,IAAAA,QAAAA,GAAWF,OAAOG,eAAAA,IAAe;AACnC,EAAA,CAAA,MAAA,IAAWF,WAAW,cAAA,EAAgB;AACpCC,IAAAA,QAAAA,GAAWF,OAAOI,mBAAAA,IAAmB;EACvC,CAAA,MAAO;AACLF,IAAAA,QAAAA,GAAWF,OAAOK,YAAAA,IAAY;AAChC,EAAA;AAEA,EAAA,IAAI,CAACH,UAAU,OAAO,KAAA;AAEtB,EAAA,MAAMI,MAAAA,GAASJ,SAASK,SAAAA,EAAS;AACjC,EAAA,MAAMZ,IAAAA,GAAOF,QAAAA,CAASG,WAAAA,IAAe,EAAA;AAGrC,EAAA,MAAMY,KAAAA,GAAQb,IAAAA,CAAKc,IAAAA,CAAK,CAACC,CAAAA,KAAMA,CAAAA,CAAEZ,SAAAA,KAAc,CAACJ,aAAAA,IAAiBgB,CAAAA,CAAE7D,IAAAA,EAAM5D,KAAAA,KAAUyG,aAAAA,CAAY,CAAA;AAC/F,EAAA,MAAMiB,UAAAA,GAAaH,KAAAA,EAAOI,YAAAA,EAAcD,UAAAA,IAAc,EAAA;AACtD,EAAA,IAAIA,UAAAA,CAAWnH,MAAAA,KAAW,CAAA,EAAG,OAAO,KAAA;AAEpC,EAAA,KAAA,MAAWqH,OAAOF,UAAAA,EAAY;AAG5B,IAAA,IAAIE,GAAAA,CAAItB,IAAAA,IAAQsB,GAAAA,CAAItB,IAAAA,KAAS,SAAS,OAAO,KAAA;AAC7C,IAAA,MAAMuB,SAAAA,GAAYD,IAAIhE,IAAAA,EAAM5D,KAAAA;AAC5B,IAAA,IAAI,CAAC6H,WAAW,OAAO,KAAA;AAGvB,IAAA,IAAIA,SAAAA,CAAUC,UAAAA,CAAW,IAAA,CAAA,EAAO;AAChC,IAAA,MAAMC,QAAAA,GAAWV,OAAOQ,SAAAA,CAAAA;AACxB,IAAA,IAAI,CAAC/B,aAAAA,CAAciC,QAAAA,CAAAA,EAAW,OAAO,KAAA;AACvC,EAAA;AACA,EAAA,OAAO,IAAA;AACT;AAxCSjB,MAAAA,CAAAA,mBAAAA,EAAAA,qBAAAA,CAAAA;AAkEF,SAASkB,2BAA2BC,MAAAA,EAA6B;AACtE,EAAA,MAAMC,OAAAA,GAAUD,QAAQC,OAAAA,IAAW,IAAA;AACnC,EAAA,MAAMC,wBAAwB,IAAIvI,GAAAA,CAAIqI,MAAAA,EAAQE,qBAAAA,IAAyB,EAAE,CAAA;AACzE,EAAA,MAAMC,oBAAAA,GAAuBH,QAAQG,oBAAAA,IAAwB,IAAA;AAC7D,EAAA,MAAMC,YAAAA,GACJJ,QAAQI,YAAAA,IACR,4GAAA;AAEF,EAAA,IAAI,CAACH,OAAAA,EAAS;AACZI,IAAAA,MAAAA,CAAOC,KAAK,2CAAA,CAAA;AACZ,IAAA,OAAO,EAAC;AACV,EAAA;AAEAD,EAAAA,MAAAA,CAAOC,KAAK,0CAAA,EAA4C;IACtDJ,qBAAAA,EAAuB;AAAIA,MAAAA,GAAAA;;AAC3BC,IAAAA;GACF,CAAA;AAEA,EAAA,OAAO;IACL7C,SAAAA,CAAU,EACRY,MAAI,EAQL;AAEC,MAAA,IAAIM,gBAAgBN,IAAAA,CAAKM,aAAAA;AAEzB,MAAA,IAAI,CAACA,aAAAA,IAAiBN,IAAAA,CAAKK,QAAAA,EAAUG,WAAAA,EAAa;AAChD,QAAA,KAAA,MAAWC,GAAAA,IAAOT,IAAAA,CAAKK,QAAAA,CAASG,WAAAA,EAAa;AAC3C,UAAA,IAAIC,GAAAA,CAAIC,SAAAA,IAAaD,GAAAA,CAAIhD,IAAAA,EAAM5D,KAAAA,EAAO;AACpCyG,YAAAA,aAAAA,GAAgBG,IAAIhD,IAAAA,CAAK5D,KAAAA;AACzB,YAAA;AACF,UAAA;AACF,QAAA;AACF,MAAA;AAGA,MAAA,IAAIyG,aAAAA,IAAiB0B,qBAAAA,CAAsB/G,GAAAA,CAAIqF,aAAAA,CAAAA,EAAgB;AAC7D,QAAA,OAAO1F,MAAAA;AACT,MAAA;AAGA,MAAA,IAAIqH,wBAAwBtB,mBAAAA,CAAoBX,IAAAA,CAAKY,QAAQZ,IAAAA,CAAKK,QAAAA,EAAUC,aAAAA,CAAAA,EAAgB;AAC1F,QAAA,OAAO1F,MAAAA;AACT,MAAA;AAGA,MAAA,MAAMyH,UAAUrC,IAAAA,CAAKsC,YAAAA;AACrB,MAAA,MAAMC,WAAAA,GAAcF,SAASG,SAAAA,EAAWC,EAAAA;AAGxC,MAAA,MAAMC,iBAAAA,GAAoBL,OAAAA,EAASM,OAAAA,EAAShE,OAAAA,EAASC,MAAM,gBAAA,CAAA;AAE3D,MAAA,IAAI,CAAC2D,WAAAA,IAAe,CAACG,iBAAAA,EAAmB;AACtCP,QAAAA,MAAAA,CAAOS,KAAK,8DAAA,EAAgE;AAC1EtC,UAAAA,aAAAA,EAAeA,aAAAA,IAAiB;SAClC,CAAA;AACA,QAAA,MAAM,IAAIZ,uBAAuBwC,YAAAA,CAAAA;AACnC,MAAA;AAEA,MAAA,OAAOtH,MAAAA;AACT,IAAA;AACF,GAAA;AACF;AApEgBiH,MAAAA,CAAAA,0BAAAA,EAAAA,4BAAAA,CAAAA","file":"chunk-OQLDXOZ3.js","sourcesContent":["import { GraphQLError } from 'graphql';\n\nimport type { YogaPlugin } from './types.js';\n\nexport interface UserFacingErrorOptions {\n  code: string;\n  userMessage: string;\n  technicalMessage?: string;\n  details?: Record<string, unknown>;\n  httpStatus?: number;\n  cause?: Error;\n}\n\nexport interface ErrorNormalizationOptions {\n  serviceName?: string;\n  environment?: string;\n}\n\nexport interface NormalizedErrorState {\n  code: string;\n  userMessage: string;\n  technicalMessage: string;\n  extensions: Record<string, unknown>;\n  status: number;\n}\n\nexport interface HttpErrorPayload {\n  error: string;\n  message: string;\n  userMessage: string;\n  technicalMessage: string;\n  code: string;\n  extensions: Record<string, unknown>;\n}\n\nexport interface HttpErrorResult {\n  status: number;\n  body: HttpErrorPayload;\n}\n\nconst DEFAULT_ERROR_CODE = 'INTERNAL_SERVER_ERROR';\nconst DEFAULT_HTTP_STATUS = 500;\n\n// Held in a separately-named const so the literal isn't assigned directly to\n// the `INVALID_PASSWORD` key — that pattern trips sonarjs/no-hardcoded-passwords\n// (a false positive: this is a user-facing message, not a credential).\nconst INVALID_CREDENTIALS_USER_MESSAGE = 'The password you entered is incorrect.';\n\nconst DEFAULT_USER_MESSAGES: Record<string, string> = {\n  BAD_REQUEST: 'Please check the request and try again.',\n  BAD_USER_INPUT: 'Please check the information and try again.',\n  CAPTCHA_FAILED: 'The verification failed. Please try again.',\n  CAPTCHA_REQUIRED: 'Please complete the verification to continue.',\n  COMPLEXITY_TOO_HIGH: 'This request is too large to process. Please simplify it and try again.',\n  CONFLICT: 'This change conflicts with existing data. Please refresh and try again.',\n  FORBIDDEN: 'You do not have permission to do that.',\n  INTERNAL_SERVER_ERROR: 'Something went wrong. Please try again.',\n  INVALID_PASSWORD: INVALID_CREDENTIALS_USER_MESSAGE,\n  NOT_FOUND: 'We could not find the requested item.',\n  PERMISSION_DENIED: 'You do not have permission to do that.',\n  QUOTA_EXCEEDED: \"You've reached your usage limit.\",\n  QUOTA_EXHAUSTED: \"You've reached your usage limit.\",\n  RATE_LIMITED: 'Too many requests. Please wait a moment and try again.',\n  RESOURCE_CAP_EXCEEDED: \"You've reached your plan limit. Upgrade your plan to continue.\",\n  STORAGE_QUOTA_EXCEEDED: \"You've reached your storage limit. Upgrade your plan to continue.\",\n  TIMEOUT: 'The request took too long. Please try again.',\n  UNAUTHENTICATED: 'Please sign in to continue.',\n  VALIDATION_ERROR: 'Please check the information and try again.',\n  WORKSPACE_REQUIRED: 'Please choose a workspace and try again.',\n};\n\nconst DEFAULT_STATUS_BY_CODE: Record<string, number> = {\n  BAD_REQUEST: 400,\n  BAD_USER_INPUT: 400,\n  CAPTCHA_FAILED: 400,\n  CAPTCHA_REQUIRED: 400,\n  COMPLEXITY_TOO_HIGH: 400,\n  CONFLICT: 409,\n  FORBIDDEN: 403,\n  INVALID_PASSWORD: 400,\n  NOT_FOUND: 404,\n  PERMISSION_DENIED: 403,\n  QUOTA_EXCEEDED: 429,\n  QUOTA_EXHAUSTED: 429,\n  RATE_LIMITED: 429,\n  RESOURCE_CAP_EXCEEDED: 429,\n  STORAGE_QUOTA_EXCEEDED: 429,\n  TIMEOUT: 504,\n  UNAUTHENTICATED: 401,\n  VALIDATION_ERROR: 400,\n  WORKSPACE_REQUIRED: 403,\n};\n\nconst SENSITIVE_EXTENSION_KEYS = new Set(['exception', 'originalError', 'stack', 'stacktrace']);\n\nconst TECHNICAL_MESSAGE_PATTERNS = [\n  /\\bprisma\\b/i,\n  /\\bsql\\b/i,\n  /\\bconstraint\\b/i,\n  /\\bstack\\b/i,\n  /\\bundefined\\b/i,\n  /\\bnull\\b/i,\n  /\\bECONN[A-Z_]*\\b/,\n  /\\bETIMEDOUT\\b/,\n  /\\bENOTFOUND\\b/,\n  /\\bP\\d{4}\\b/,\n  /Cannot (read|set|find|access)/i,\n  /Build failed \\(exit \\d+\\)/i,\n  /JSON\\.stringify/i,\n];\n\nconst GRAPHQL_VALIDATION_MESSAGE_PATTERNS = [\n  /^Syntax Error:/i,\n  /^Cannot query field\\b/i,\n  /^Cannot return null for non-nullable field\\b/i,\n  /^Unknown (argument|directive|type)\\b/i,\n  /^Variable \"\\$[^\"]+\" got invalid value/i,\n  /^Field \"[^\"]+\" of required type/i,\n  /^Field \"[^\"]+\" must not have a selection/i,\n  /^Field \"[^\"]+\" must have a selection/i,\n  /^Fragment \"[^\"]+\" cannot be spread here/i,\n  /^There can be only one/i,\n  /Did you mean /i,\n];\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value);\n}\n\nfunction readString(record: Record<string, unknown>, key: string): string | null {\n  const value = record[key];\n  return typeof value === 'string' && value.trim().length > 0 ? value : null;\n}\n\nfunction readExtensions(error: unknown): Record<string, unknown> {\n  if (!isRecord(error)) return {};\n  const extensions = error['extensions'];\n  return isRecord(extensions) ? extensions : {};\n}\n\nfunction readOriginalError(error: unknown): Error | undefined {\n  if (error instanceof GraphQLError && error.originalError instanceof Error) {\n    return error.originalError;\n  }\n  return undefined;\n}\n\nfunction sanitizeExtensions(extensions: Record<string, unknown>): Record<string, unknown> {\n  const sanitized: Record<string, unknown> = {};\n  for (const [key, value] of Object.entries(extensions)) {\n    if (!SENSITIVE_EXTENSION_KEYS.has(key)) {\n      sanitized[key] = value;\n    }\n  }\n  return sanitized;\n}\n\nfunction normalizeCode(code: string | null): string {\n  if (!code) return DEFAULT_ERROR_CODE;\n  return code\n    .trim()\n    .replace(/[\\s-]+/g, '_')\n    .toUpperCase();\n}\n\nfunction inferCodeFromMessage(message: string): string {\n  const lower = message.toLowerCase();\n\n  if (GRAPHQL_VALIDATION_MESSAGE_PATTERNS.some((pattern) => pattern.test(message))) {\n    return 'BAD_USER_INPUT';\n  }\n\n  if (\n    lower.includes('unauthenticated') ||\n    lower.includes('not authenticated') ||\n    lower.includes('authentication required') ||\n    lower.includes('unauthorized') ||\n    lower.includes('please sign in') ||\n    lower.includes('sign in to')\n  ) {\n    return 'UNAUTHENTICATED';\n  }\n\n  if (lower.includes('workspace context') || lower.includes('switch to a workspace')) {\n    return 'WORKSPACE_REQUIRED';\n  }\n\n  if (\n    lower.includes('forbidden') ||\n    lower.includes('access denied') ||\n    lower.includes('permission denied') ||\n    lower.includes('not authorized')\n  ) {\n    return 'FORBIDDEN';\n  }\n\n  if (lower.includes('not found') || lower.includes('disappeared')) {\n    return 'NOT_FOUND';\n  }\n\n  if (lower.includes('already exists') || lower.includes('already taken') || lower.includes('conflict')) {\n    return 'CONFLICT';\n  }\n\n  if (lower.includes('quota') || lower.includes('cap exceeded') || lower.includes('limit reached')) {\n    return 'QUOTA_EXCEEDED';\n  }\n\n  if (lower.includes('timeout') || lower.includes('timed out')) {\n    return 'TIMEOUT';\n  }\n\n  if (\n    lower.includes('required') ||\n    lower.includes('invalid') ||\n    lower.includes('missing') ||\n    lower.includes('unsupported')\n  ) {\n    return 'BAD_USER_INPUT';\n  }\n\n  return DEFAULT_ERROR_CODE;\n}\n\nfunction inferCode(error: unknown, extensions: Record<string, unknown>, originalError: Error | undefined): string {\n  const extensionCode = typeof extensions['code'] === 'string' ? extensions['code'] : null;\n  if (extensionCode) return normalizeCode(extensionCode);\n\n  if (isRecord(originalError)) {\n    const originalCode = readString(originalError, 'code');\n    if (originalCode) return normalizeCode(originalCode);\n  }\n\n  if (isRecord(error)) {\n    const directCode = readString(error, 'code');\n    if (directCode) return normalizeCode(directCode);\n  }\n\n  const message = readErrorMessage(error);\n  return inferCodeFromMessage(message);\n}\n\nfunction readErrorMessage(error: unknown): string {\n  if (error instanceof Error && error.message.trim().length > 0) {\n    return error.message;\n  }\n  if (isRecord(error)) {\n    const message = readString(error, 'message');\n    if (message) return message;\n  }\n  return DEFAULT_USER_MESSAGES[DEFAULT_ERROR_CODE] ?? 'Something went wrong. Please try again.';\n}\n\nfunction isLikelyTechnicalMessage(message: string): boolean {\n  if (message.length > 220) return true;\n  if (message.includes('\\n')) return true;\n  if (message.includes('{') && message.includes('}')) return true;\n  if (GRAPHQL_VALIDATION_MESSAGE_PATTERNS.some((pattern) => pattern.test(message))) return true;\n  return TECHNICAL_MESSAGE_PATTERNS.some((pattern) => pattern.test(message));\n}\n\nfunction readExplicitUserMessage(extensions: Record<string, unknown>): string | null {\n  return (\n    readString(extensions, 'userMessage') ??\n    readString(extensions, 'humanMessage') ??\n    readString(extensions, 'displayMessage')\n  );\n}\n\nfunction resolveUserMessage(code: string, message: string, extensions: Record<string, unknown>): string {\n  const explicit = readExplicitUserMessage(extensions);\n  if (explicit) return explicit;\n\n  const fallback =\n    DEFAULT_USER_MESSAGES[code] ??\n    DEFAULT_USER_MESSAGES[DEFAULT_ERROR_CODE] ??\n    'Something went wrong. Please try again.';\n  if (code === DEFAULT_ERROR_CODE) {\n    return fallback;\n  }\n\n  if (!isLikelyTechnicalMessage(message)) {\n    return message;\n  }\n\n  return fallback;\n}\n\nfunction resolveTechnicalMessage(\n  code: string,\n  message: string,\n  extensions: Record<string, unknown>,\n  options: ErrorNormalizationOptions\n): string {\n  const explicit = readString(extensions, 'technicalMessage');\n  if (explicit) return explicit;\n\n  if (options.environment === 'production' && code === DEFAULT_ERROR_CODE) {\n    return options.serviceName ? `${options.serviceName} returned ${DEFAULT_ERROR_CODE}` : DEFAULT_ERROR_CODE;\n  }\n\n  return message;\n}\n\nfunction readHttpStatus(extensions: Record<string, unknown>, code: string): number {\n  const http = extensions['http'];\n  if (isRecord(http) && typeof http['status'] === 'number') {\n    return http['status'];\n  }\n  return DEFAULT_STATUS_BY_CODE[code] ?? DEFAULT_HTTP_STATUS;\n}\n\nexport function normalizeError(error: unknown, options: ErrorNormalizationOptions = {}): NormalizedErrorState {\n  const originalError = readOriginalError(error);\n  const originalExtensions = readExtensions(originalError);\n  const directExtensions = readExtensions(error);\n  const mergedExtensions = sanitizeExtensions({ ...originalExtensions, ...directExtensions });\n  const message = readErrorMessage(error);\n  const code = inferCode(error, mergedExtensions, originalError);\n  const userMessage = resolveUserMessage(code, message, mergedExtensions);\n  const technicalMessage = resolveTechnicalMessage(code, message, mergedExtensions, options);\n  const status = readHttpStatus(mergedExtensions, code);\n\n  const extensions: Record<string, unknown> = {\n    ...mergedExtensions,\n    code,\n    userMessage,\n    technicalMessage,\n  };\n\n  if (options.serviceName) {\n    extensions['serviceName'] = options.serviceName;\n  }\n\n  if (!isRecord(extensions['http'])) {\n    extensions['http'] = { status };\n  }\n\n  return {\n    code,\n    userMessage,\n    technicalMessage,\n    extensions,\n    status,\n  };\n}\n\nexport class UserFacingGraphQLError extends GraphQLError {\n  constructor(options: UserFacingErrorOptions) {\n    const extensions: Record<string, unknown> = {\n      code: normalizeCode(options.code),\n      userMessage: options.userMessage,\n      technicalMessage: options.technicalMessage ?? options.userMessage,\n    };\n\n    if (options.details) {\n      extensions['details'] = options.details;\n    }\n\n    if (options.httpStatus) {\n      extensions['http'] = { status: options.httpStatus };\n    }\n\n    super(options.userMessage, {\n      originalError: options.cause,\n      extensions,\n    });\n    this.name = 'UserFacingGraphQLError';\n  }\n}\n\nexport function toUserFacingGraphQLError(error: unknown, options: ErrorNormalizationOptions = {}): GraphQLError {\n  const normalized = normalizeError(error, options);\n\n  if (error instanceof GraphQLError) {\n    return new GraphQLError(normalized.userMessage, {\n      nodes: error.nodes,\n      source: error.source,\n      positions: error.positions,\n      path: error.path,\n      originalError: error.originalError,\n      extensions: normalized.extensions,\n    });\n  }\n\n  return new GraphQLError(normalized.userMessage, {\n    originalError: error instanceof Error ? error : undefined,\n    extensions: normalized.extensions,\n  });\n}\n\nexport function normalizeExecutionResultErrors(result: unknown, options: ErrorNormalizationOptions = {}): void {\n  if (Array.isArray(result)) {\n    result.forEach((entry) => normalizeExecutionResultErrors(entry, options));\n    return;\n  }\n\n  if (!isRecord(result)) return;\n  const errors = result['errors'];\n  if (!Array.isArray(errors) || errors.length === 0) return;\n\n  result['errors'] = errors.map((error) => toUserFacingGraphQLError(error, options));\n}\n\nexport function normalizeGraphQLResponsePayload(payload: unknown, options: ErrorNormalizationOptions = {}): unknown {\n  normalizeExecutionResultErrors(payload, options);\n  return payload;\n}\n\nexport async function normalizeGraphQLResponse(\n  response: Response,\n  options: ErrorNormalizationOptions = {}\n): Promise<Response> {\n  const contentType = response.headers.get('content-type') ?? '';\n  if (!contentType.toLowerCase().includes('json')) {\n    return response;\n  }\n\n  const text = await response.text();\n  if (!text) {\n    return new Response(text, {\n      status: response.status,\n      statusText: response.statusText,\n      headers: response.headers,\n    });\n  }\n\n  let payload: unknown;\n  try {\n    payload = JSON.parse(text) as unknown;\n  } catch {\n    return new Response(text, {\n      status: response.status,\n      statusText: response.statusText,\n      headers: response.headers,\n    });\n  }\n\n  normalizeGraphQLResponsePayload(payload, options);\n\n  return new Response(JSON.stringify(payload), {\n    status: response.status,\n    statusText: response.statusText,\n    headers: response.headers,\n  });\n}\n\nexport function createHumanReadableErrorPlugin(options: ErrorNormalizationOptions = {}): YogaPlugin {\n  return {\n    onExecute() {\n      return {\n        onExecuteDone({ result }: { result: unknown }) {\n          normalizeExecutionResultErrors(result, options);\n        },\n      };\n    },\n  };\n}\n\nexport function formatHttpError(error: unknown, options: ErrorNormalizationOptions = {}): HttpErrorResult {\n  const normalized = normalizeError(error, options);\n  return {\n    status: normalized.status,\n    body: {\n      error: normalized.userMessage,\n      message: normalized.userMessage,\n      userMessage: normalized.userMessage,\n      technicalMessage: normalized.technicalMessage,\n      code: normalized.code,\n      extensions: normalized.extensions,\n    },\n  };\n}\n\nexport function createHttpErrorResponse(error: unknown, options: ErrorNormalizationOptions = {}): Response {\n  const formatted = formatHttpError(error, options);\n  return new Response(JSON.stringify(formatted.body), {\n    status: formatted.status,\n    headers: { 'Content-Type': 'application/json' },\n  });\n}\n","/**\n * Workspace Guard Plugin for GraphQL Yoga\n *\n * Blocks GraphQL operations that lack a valid workspace context (x-workspace-id header).\n * This provides defense-in-depth at the GraphQL layer — even if the gateway allows a request\n * through, the service itself will reject it if workspace context is missing.\n *\n * **Whitelisted operations** (e.g., workspace creation) can bypass the guard.\n *\n * **Public schema fields** marked with `@public` or `@rbac(public: true)` are auto-bypassed\n * when `allowPublicDirective` is enabled (default true). This lets anonymous public-link\n * resolvers (e.g. `accessShare`) be reached through the federation gateway without an\n * `x-workspace-id` header.\n *\n * @module server/workspace-guard\n * @category Security\n */\n\nimport { logger } from '../logger/index.js';\nimport { UserFacingGraphQLError } from './errors.js';\n\n// ============================================================================\n// Types\n// ============================================================================\n\n/**\n * Configuration for the workspace guard plugin\n */\nexport interface WorkspaceGuardConfig {\n  /**\n   * Enable the workspace guard.\n   * @default true\n   */\n  enabled?: boolean;\n\n  /**\n   * GraphQL operation names that can run without workspace context.\n   * These are typically operations like `createWorkspace` that execute\n   * before a workspace exists.\n   *\n   * Matching is case-sensitive against the operation name in the GraphQL document.\n   *\n   * @default []\n   *\n   * @example\n   * ```typescript\n   * whitelistedOperations: ['createWorkspace', 'validateTokens']\n   * ```\n   */\n  whitelistedOperations?: string[];\n\n  /**\n   * Custom error message when workspace context is missing.\n   * @default 'Workspace context required. Provide a valid X-Workspace-Authorization header.'\n   */\n  errorMessage?: string;\n\n  /**\n   * If true, fields whose schema definition carries the `@public` directive or\n   * `@rbac(public: true)` are bypassed by the guard automatically — no need to\n   * list them in `whitelistedOperations`. The check uses the GraphQL schema\n   * passed to the executor at request time.\n   *\n   * Set to false to fall back to the legacy operation-name allowlist only.\n   *\n   * @default true\n   */\n  allowPublicDirective?: boolean;\n}\n\n// ============================================================================\n// GraphQL Error\n// ============================================================================\n\n/**\n * Workspace required error with proper GraphQL error extensions\n */\nclass WorkspaceRequiredError extends UserFacingGraphQLError {\n  constructor(message: string) {\n    super({\n      code: 'WORKSPACE_REQUIRED',\n      userMessage: 'Please choose a workspace and try again.',\n      technicalMessage: message,\n      httpStatus: 403,\n    });\n    this.name = 'WorkspaceRequiredError';\n  }\n}\n\n// ============================================================================\n// Schema directive helpers\n// ============================================================================\n\n/**\n * Minimal structural typings for the bits of the GraphQL schema we look at.\n * We avoid importing the GraphQL types directly so the SDK keeps `graphql`\n * as a peer dep without a runtime hard dependency.\n */\ninterface FieldLikeDef {\n  astNode?: {\n    directives?: ReadonlyArray<{\n      name: { value: string };\n      arguments?: ReadonlyArray<{\n        name: { value: string };\n        value: { kind: string; value?: unknown };\n      }>;\n    }>;\n  };\n}\n\ninterface SchemaLike {\n  getQueryType?: () => { getFields: () => Record<string, FieldLikeDef> } | null | undefined;\n  getMutationType?: () => { getFields: () => Record<string, FieldLikeDef> } | null | undefined;\n  getSubscriptionType?: () => { getFields: () => Record<string, FieldLikeDef> } | null | undefined;\n}\n\n/**\n * Returns true iff the field carries either:\n *   - `@public` directive, OR\n *   - `@rbac(public: true)` directive (any arg-order)\n */\nfunction isFieldPublic(field: FieldLikeDef | undefined): boolean {\n  const directives = field?.astNode?.directives;\n  if (!directives || directives.length === 0) return false;\n\n  for (const dir of directives) {\n    const name = dir.name?.value;\n    if (name === 'public') return true;\n    if (name === 'rbac') {\n      const args = dir.arguments ?? [];\n      for (const arg of args) {\n        if (arg.name?.value === 'public' && arg.value?.kind === 'BooleanValue' && arg.value.value === true) {\n          return true;\n        }\n      }\n    }\n  }\n  return false;\n}\n\ninterface DocumentLike {\n  definitions?: ReadonlyArray<{\n    kind?: string;\n    operation?: string;\n    name?: { value?: string };\n    selectionSet?: {\n      selections?: ReadonlyArray<{\n        kind?: string;\n        name?: { value?: string };\n      }>;\n    };\n  }>;\n}\n\n/**\n * Resolve the operation type ('query' | 'mutation' | 'subscription') for the\n * primary operation in the document. Falls back to 'query'.\n */\nfunction resolveOperationType(\n  document: DocumentLike | undefined,\n  operationName: string | null | undefined\n): 'query' | 'mutation' | 'subscription' {\n  const defs = document?.definitions ?? [];\n  for (const def of defs) {\n    if (def.kind !== 'OperationDefinition') {\n      // Older parsers may not set kind; fall through to the operation property check below.\n    }\n    if (def.operation && (!operationName || def.name?.value === operationName)) {\n      return def.operation as 'query' | 'mutation' | 'subscription';\n    }\n  }\n  return 'query';\n}\n\n/**\n * Returns true iff every root field in the document selection set is marked\n * public on the schema. Empty selection sets return false (fail-closed).\n */\nfunction allRootFieldsPublic(\n  schema: SchemaLike | undefined,\n  document: DocumentLike | undefined,\n  operationName: string | null | undefined\n): boolean {\n  if (!schema || !document) return false;\n\n  const opType = resolveOperationType(document, operationName);\n  let rootType: ReturnType<NonNullable<SchemaLike['getQueryType']>> | undefined;\n  if (opType === 'mutation') {\n    rootType = schema.getMutationType?.();\n  } else if (opType === 'subscription') {\n    rootType = schema.getSubscriptionType?.();\n  } else {\n    rootType = schema.getQueryType?.();\n  }\n\n  if (!rootType) return false;\n\n  const fields = rootType.getFields();\n  const defs = document.definitions ?? [];\n\n  // Find the operation definition matching operationName (or first one).\n  const opDef = defs.find((d) => d.operation && (!operationName || d.name?.value === operationName));\n  const selections = opDef?.selectionSet?.selections ?? [];\n  if (selections.length === 0) return false;\n\n  for (const sel of selections) {\n    // Only consider plain Field selections (skip fragments — fragments at the root\n    // shouldn't drive a public bypass; fail-closed there).\n    if (sel.kind && sel.kind !== 'Field') return false;\n    const fieldName = sel.name?.value;\n    if (!fieldName) return false;\n    // __schema / __type introspection is always allowed without workspace context;\n    // treat them as public.\n    if (fieldName.startsWith('__')) continue;\n    const fieldDef = fields[fieldName];\n    if (!isFieldPublic(fieldDef)) return false;\n  }\n  return true;\n}\n\n// ============================================================================\n// Plugin\n// ============================================================================\n\n/**\n * Create a GraphQL Yoga plugin that guards operations requiring workspace context.\n *\n * The plugin inspects the GraphQL context for workspace information (set by the SDK's\n * buildContext from the x-workspace-id header). If missing and the operation is not\n * whitelisted (and not all-public per directive), it throws a WORKSPACE_REQUIRED error.\n *\n * @param config - Guard configuration\n * @returns A Yoga-compatible plugin\n *\n * @example\n * ```typescript\n * import { createWorkspaceGuardPlugin } from '@burdenoff/be-sdk/server';\n *\n * const guardPlugin = createWorkspaceGuardPlugin({\n *   whitelistedOperations: ['createWorkspace'],\n *   allowPublicDirective: true, // default\n * });\n * ```\n */\nexport function createWorkspaceGuardPlugin(config?: WorkspaceGuardConfig) {\n  const enabled = config?.enabled ?? true;\n  const whitelistedOperations = new Set(config?.whitelistedOperations ?? []);\n  const allowPublicDirective = config?.allowPublicDirective ?? true;\n  const errorMessage =\n    config?.errorMessage ??\n    'Workspace context required. Ensure the request includes a valid workspace context (x-workspace-id header).';\n\n  if (!enabled) {\n    logger.info('[WorkspaceGuard] Workspace guard disabled');\n    return {};\n  }\n\n  logger.info('[WorkspaceGuard] Workspace guard enabled', {\n    whitelistedOperations: [...whitelistedOperations],\n    allowPublicDirective,\n  });\n\n  return {\n    onExecute({\n      args,\n    }: {\n      args: {\n        schema?: SchemaLike;\n        document?: DocumentLike;\n        operationName?: string | null;\n        contextValue?: { workspace?: { id?: string }; request?: Request };\n      };\n    }) {\n      // Extract operation name from args or document\n      let operationName = args.operationName;\n\n      if (!operationName && args.document?.definitions) {\n        for (const def of args.document.definitions) {\n          if (def.operation && def.name?.value) {\n            operationName = def.name.value;\n            break;\n          }\n        }\n      }\n\n      // Check if operation is whitelisted by name\n      if (operationName && whitelistedOperations.has(operationName)) {\n        return undefined;\n      }\n\n      // Check schema-directive-based public bypass (Option C)\n      if (allowPublicDirective && allRootFieldsPublic(args.schema, args.document, operationName)) {\n        return undefined;\n      }\n\n      // Check for workspace context\n      const context = args.contextValue;\n      const workspaceId = context?.workspace?.id;\n\n      // Also check the raw header as a fallback\n      const headerWorkspaceId = context?.request?.headers?.get?.('x-workspace-id');\n\n      if (!workspaceId && !headerWorkspaceId) {\n        logger.warn('[WorkspaceGuard] Blocked operation without workspace context', {\n          operationName: operationName ?? '<anonymous>',\n        });\n        throw new WorkspaceRequiredError(errorMessage);\n      }\n\n      return undefined;\n    },\n  };\n}\n"]}

package/dist/{chunk-RDGQEBNS.js → chunk-ZRRLY7SM.js}

@@ -1,4 +1,4 @@
-import { GatewayClient } from './chunk-OJWJVZY5.js';
+import { GatewayClient } from './chunk-BJVXHIUV.js';
 import { LayerManager } from './chunk-GSEPF2B6.js';
 import { logger } from './chunk-CBZNP6RF.js';
 import { __export, __name } from './chunk-XE4OXN2W.js';
@@ -237,5 +237,5 @@ async function initializeLayerStreams(config) {
 __name(initializeLayerStreams, "initializeLayerStreams");
 
 export { getSDKState, init_exports, initializeBurdenoffSDK, isSDKInitialized, resetSDK };
-//# sourceMappingURL=chunk-RDGQEBNS.js.map
-//# sourceMappingURL=chunk-RDGQEBNS.js.map
+//# sourceMappingURL=chunk-ZRRLY7SM.js.map
+//# sourceMappingURL=chunk-ZRRLY7SM.js.map

package/dist/{chunk-RDGQEBNS.js.map → chunk-ZRRLY7SM.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/init/index.ts"],"names":["sdkState","isInitialized","initializeBurdenoffSDK","config","logger","warn","info","startTime","Date","now","initializeLogging","layerManager","gatewayClient","initializeLayer","prisma","initializeDatabase","valkey","initializeCache","eventPublisher","initializeEventQueue","layer","autoCreateStreams","initializeLayerStreams","graphSync","initializeGraphSync","clickhouse","initializeAnalytics","initializeObservability","graphSyncEnabled","graph","enabled","analyticsEnabled","analytics","observabilityEnabled","observability","metrics","layerAwareEnabled","duration","initializedState","type","serviceName","error","getSDKState","Error","isSDKInitialized","resetSDK","loggingConfig","logging","isDevelopment","app","nodeEnv","level","setLevel","console","setConsoleEnabled","format","database","url","maxConnections","enableQueryLogging","undefined","cacheConfig","cache","defaultTTL","_config","process","env","EventQueueFactory","publisher","createPublisherFromEnv","connect","message","String","note","eventsEnabled","productSource","streamName","syncInterval","batchSize","requestTimeout","openTelemetry","port","endpoint","samplingRate","LayerManager","serviceIdentity","GatewayClient","internalGatewayUrl","getInternalGatewayUrl","crossLayerGatewayUrl","getCrossLayerGatewayUrl","debug"],"mappings":";;;;;;AAAA,IAAA,YAAA,GAAA;;;;;;;AAkBA,IAAIA,QAAAA,GAAuC,IAAA;AAC3C,IAAIC,aAAAA,GAAgB,KAAA;AAsCpB,eAAsBC,uBAAuBC,MAAAA,EAA8B;AACzE,EAAA,IAAIF,iBAAiBD,QAAAA,EAAU;AAC7BI,IAAAA,MAAAA,CAAOC,KAAK,8DAAA,CAAA;AACZ,IAAA,OAAOL,QAAAA;AACT,EAAA;AAEAI,EAAAA,MAAAA,CAAOE,KAAK,2CAAA,CAAA;AACZ,EAAA,MAAMC,SAAAA,GAAYC,KAAKC,GAAAA,EAAG;AAE1B,EAAA,IAAI;AAEF,IAAA,MAAMC,kBAAkBP,MAAAA,CAAAA;AAGxB,IAAA,MAAM,EAAEQ,YAAAA,EAAcC,aAAAA,EAAa,GAAK,MAAMC,gBAAgBV,MAAAA,CAAAA;AAG9D,IAAA,MAAMW,MAAAA,GAAS,MAAMC,kBAAAA,CAAmBZ,MAAAA,CAAAA;AAGxC,IAAA,MAAMa,MAAAA,GAAS,MAAMC,eAAAA,CAAgBd,MAAAA,CAAAA;AAGrC,IAAA,MAAMe,cAAAA,GAAiB,MAAMC,oBAAAA,CAAqBhB,MAAAA,CAAAA;AAGlD,IAAA,IAAIA,MAAAA,CAAOiB,KAAAA,EAAOC,iBAAAA,KAAsB,KAAA,IAASlB,OAAOiB,KAAAA,EAAO;AAC7D,MAAA,MAAME,uBAAuBnB,MAAAA,CAAAA;AAC/B,IAAA;AAIA,IAAA,MAAMoB,SAAAA,GAAY,MAAMC,mBAAAA,CAAoBrB,MAAAA,CAAAA;AAG5C,IAAA,MAAMsB,UAAAA,GAAa,MAAMC,mBAAAA,CAAoBvB,MAAAA,CAAAA;AAG7C,IAAA,MAAMwB,wBAAwBxB,MAAAA,CAAAA;AAK9B,IAAA,KAAKoB,SAAAA;AACLvB,IAAAA,QAAAA,GAAW;AACTc,MAAAA,MAAAA;AACAE,MAAAA,MAAAA;AACAS,MAAAA,UAAAA;AACAP,MAAAA,cAAAA;AACAP,MAAAA,YAAAA;AACAC,MAAAA,aAAAA;MACAgB,gBAAAA,EAAkBzB,MAAAA,CAAO0B,OAAOC,OAAAA,IAAW,KAAA;MAC3CC,gBAAAA,EAAkB,CAAC,CAAC5B,MAAAA,CAAO6B,SAAAA,EAAWP,UAAAA;MACtCQ,oBAAAA,EAAsB9B,MAAAA,CAAO+B,aAAAA,EAAeC,OAAAA,EAASL,OAAAA,IAAW,KAAA;MAChEM,iBAAAA,EAAmB,CAAC,CAACjC,MAAAA,CAAOiB;AAC9B,KAAA;AAEAnB,IAAAA,aAAAA,GAAgB,IAAA;AAEhB,IAAA,MAAMoC,QAAAA,GAAW7B,IAAAA,CAAKC,GAAAA,EAAG,GAAKF,SAAAA;AAE9B,IAAA,MAAM+B,gBAAAA,GAAmBtC,QAAAA;AACzBI,IAAAA,MAAAA,CAAOE,IAAAA,CAAK,CAAA,2CAAA,EAA8C+B,QAAAA,CAAAA,EAAAA,CAAAA,EAAc;AACtET,MAAAA,gBAAAA,EAAkBU,gBAAAA,CAAiBV,gBAAAA;AACnCG,MAAAA,gBAAAA,EAAkBO,gBAAAA,CAAiBP,gBAAAA;AACnCE,MAAAA,oBAAAA,EAAsBK,gBAAAA,CAAiBL,oBAAAA;AACvCG,MAAAA,iBAAAA,EAAmBE,gBAAAA,CAAiBF,iBAAAA;AACpChB,MAAAA,KAAAA,EAAOjB,OAAOiB,KAAAA,EAAOmB,IAAAA;AACrBC,MAAAA,WAAAA,EAAarC,OAAOiB,KAAAA,EAAOoB;KAC7B,CAAA;AAEA,IAAA,OAAOF,gBAAAA;AACT,EAAA,CAAA,CAAA,OAASG,KAAAA,EAAO;AACdrC,IAAAA,MAAAA,CAAOqC,KAAAA,CAAM,wCAAwCA,KAAAA,CAAAA;AACrD,IAAA,MAAMA,KAAAA;AACR,EAAA;AACF;AA5EsBvC,MAAAA,CAAAA,sBAAAA,EAAAA,wBAAAA,CAAAA;AAkFf,SAASwC,WAAAA,GAAAA;AACd,EAAA,IAAI,CAACzC,aAAAA,IAAiB,CAACD,QAAAA,EAAU;AAC/B,IAAA,MAAM,IAAI2C,MAAM,2DAAA,CAAA;AAClB,EAAA;AACA,EAAA,OAAO3C,QAAAA;AACT;AALgB0C,MAAAA,CAAAA,WAAAA,EAAAA,aAAAA,CAAAA;AAUT,SAASE,gBAAAA,GAAAA;AACd,EAAA,OAAO3C,aAAAA;AACT;AAFgB2C,MAAAA,CAAAA,gBAAAA,EAAAA,kBAAAA,CAAAA;AAOhB,eAAsBC,QAAAA,GAAAA;AACpBzC,EAAAA,MAAAA,CAAOE,KAAK,mCAAA,CAAA;AAEZ,EAAA,IAAIN,QAAAA,EAAU;AAGZA,IAAAA,QAAAA,GAAW,IAAA;AACb,EAAA;AAEAC,EAAAA,aAAAA,GAAgB,KAAA;AAChBG,EAAAA,MAAAA,CAAOE,KAAK,4BAAA,CAAA;AACd;AAXsBuC,MAAAA,CAAAA,QAAAA,EAAAA,UAAAA,CAAAA;AAgBtB,eAAenC,kBAAkBP,MAAAA,EAA8B;AAC7DC,EAAAA,MAAAA,CAAOE,KAAK,mCAAA,CAAA;AAEZ,EAAA,MAAMwC,aAAAA,GAAgB3C,MAAAA,CAAO4C,OAAAA,IAAW,EAAC;AACzC,EAAA,MAAMC,aAAAA,GAAgB7C,MAAAA,CAAO8C,GAAAA,EAAKC,OAAAA,KAAY,aAAA;AAG9C,EAAA,MAAMC,KAAAA,GAAQL,cAAcK,KAAAA,IAAS,MAAA;AACrC/C,EAAAA,MAAAA,CAAOgD,SAASD,KAAAA,CAAAA;AAGhB,EAAA,MAAME,OAAAA,GAAUP,cAAcO,OAAAA,IAAW,IAAA;AACzCjD,EAAAA,MAAAA,CAAOkD,kBAAkBD,OAAAA,CAAAA;AAEzBjD,EAAAA,MAAAA,CAAOE,KAAK,+BAAA,EAAiC;AAC3C6C,IAAAA,KAAAA;AACAE,IAAAA,OAAAA;IACAE,MAAAA,EAAQT,aAAAA,CAAcS,MAAAA,KAAWP,aAAAA,GAAgB,QAAA,GAAW,MAAA;GAC9D,CAAA;AACF;AAnBetC,MAAAA,CAAAA,iBAAAA,EAAAA,mBAAAA,CAAAA;AAwBf,eAAeK,mBAAmBZ,MAAAA,EAA8B;AAC9DC,EAAAA,MAAAA,CAAOE,KAAK,qCAAA,CAAA;AAKZ,EAAA,IAAI,CAACH,MAAAA,CAAOqD,QAAAA,EAAUC,GAAAA,EAAK;AACzB,IAAA,MAAM,IAAId,MAAM,0BAAA,CAAA;AAClB,EAAA;AAEAvC,EAAAA,MAAAA,CAAOE,KAAK,6CAAA,EAA+C;IACzDoD,cAAAA,EAAgBvD,MAAAA,CAAOqD,SAASE,cAAAA,IAAkB,EAAA;IAClDC,kBAAAA,EAAoBxD,MAAAA,CAAOqD,SAASG,kBAAAA,IAAsB;GAC5D,CAAA;AAGA,EAAA,OAAOC,MAAAA;AACT;AAjBe7C,MAAAA,CAAAA,kBAAAA,EAAAA,oBAAAA,CAAAA;AAsBf,eAAeE,gBAAgBd,MAAAA,EAA8B;AAC3D,EAAA,MAAM0D,WAAAA,GAAc1D,OAAO2D,KAAAA,EAAO9C,MAAAA;AAElC,EAAA,IAAI,CAAC6C,WAAAA,EAAa;AAChBzD,IAAAA,MAAAA,CAAOE,KAAK,2CAAA,CAAA;AACZ,IAAA,OAAOsD,MAAAA;AACT,EAAA;AAEAxD,EAAAA,MAAAA,CAAOE,KAAK,yCAAA,CAAA;AAIZF,EAAAA,MAAAA,CAAOE,KAAK,iDAAA,EAAmD;IAC7DmD,GAAAA,EAAKI,WAAAA,CAAYJ,MAAM,KAAA,GAAQG,MAAAA;AAC/BG,IAAAA,UAAAA,EAAYF,YAAYE,UAAAA,IAAc;GACxC,CAAA;AAEA,EAAA,OAAOH,MAAAA;AACT;AAlBe3C,MAAAA,CAAAA,eAAAA,EAAAA,iBAAAA,CAAAA;AA2Bf,eAAeE,qBAAqB6C,OAAAA,EAA+B;AACjE,EAAA,IAAI,CAACC,OAAAA,CAAQC,GAAAA,CAAI,WAAA,CAAA,EAAc;AAC7B9D,IAAAA,MAAAA,CAAOE,KAAK,yDAAA,CAAA;AACZ,IAAA,OAAOsD,MAAAA;AACT,EAAA;AAEA,EAAA,IAAI;AACF,IAAA,MAAM,EAAEO,iBAAAA,EAAiB,GAAK,MAAM,OAAO,iCAAA,CAAA;AAC3C,IAAA,MAAMC,SAAAA,GAAYD,kBAAkBE,sBAAAA,EAAsB;AAC1D,IAAA,MAAMD,UAAUE,OAAAA,EAAO;AAEvBlE,IAAAA,MAAAA,CAAOE,KAAK,oDAAA,CAAA;AAEZ,IAAA,OAAO8D,SAAAA;AACT,EAAA,CAAA,CAAA,OAAS3B,KAAAA,EAAO;AACdrC,IAAAA,MAAAA,CAAOC,KAAK,wEAAA,EAA0E;AACpFoC,MAAAA,KAAAA,EAAOA,KAAAA,YAAiBE,KAAAA,GAAQF,KAAAA,CAAM8B,OAAAA,GAAUC,OAAO/B,KAAAA,CAAAA;MACvDgC,IAAAA,EAAM;KACR,CAAA;AACA,IAAA,OAAOb,MAAAA;AACT,EAAA;AACF;AArBezC,MAAAA,CAAAA,oBAAAA,EAAAA,sBAAAA,CAAAA;AA+Bf,eAAeK,oBAAoBrB,MAAAA,EAA8B;AAC/D,EAAA,IAAI,CAACA,MAAAA,CAAO0B,KAAAA,EAAOC,OAAAA,EAAS;AAC1B1B,IAAAA,MAAAA,CAAOE,KAAK,6CAAA,CAAA;AACZ,IAAA,OAAOsD,MAAAA;AACT,EAAA;AAEAxD,EAAAA,MAAAA,CAAOE,KAAK,qDAAA,EAAuD;IACjEoE,aAAAA,EAAevE,MAAAA,CAAO0B,MAAM6C,aAAAA,IAAiB,IAAA;AAC7CC,IAAAA,aAAAA,EAAexE,OAAO0B,KAAAA,CAAM8C,aAAAA;IAC5BC,UAAAA,EAAYzE,MAAAA,CAAO0B,MAAM+C,UAAAA,IAAc,cAAA;IACvCC,YAAAA,EAAc1E,MAAAA,CAAO0B,MAAMgD,YAAAA,IAAgB,GAAA;IAC3CC,SAAAA,EAAW3E,MAAAA,CAAO0B,MAAMiD,SAAAA,IAAa;GACvC,CAAA;AAEA,EAAA,OAAOlB,MAAAA;AACT;AAfepC,MAAAA,CAAAA,mBAAAA,EAAAA,qBAAAA,CAAAA;AAoBf,eAAeE,oBAAoBvB,MAAAA,EAA8B;AAC/D,EAAA,IAAI,CAACA,MAAAA,CAAO6B,SAAAA,EAAWP,UAAAA,EAAY;AACjCrB,IAAAA,MAAAA,CAAOE,KAAK,+CAAA,CAAA;AACZ,IAAA,OAAOsD,MAAAA;AACT,EAAA;AAEAxD,EAAAA,MAAAA,CAAOE,KAAK,qDAAA,CAAA;AAIZF,EAAAA,MAAAA,CAAOE,KAAK,+CAAA,EAAiD;IAC3DmD,GAAAA,EAAKtD,MAAAA,CAAO6B,UAAUP,UAAAA,CAAWgC,GAAAA;IACjCD,QAAAA,EAAUrD,MAAAA,CAAO6B,UAAUP,UAAAA,CAAW+B,QAAAA;IACtCuB,cAAAA,EAAgB5E,MAAAA,CAAO6B,SAAAA,CAAUP,UAAAA,CAAWsD,cAAAA,IAAkB;GAChE,CAAA;AAEA,EAAA,OAAOnB,MAAAA;AACT;AAjBelC,MAAAA,CAAAA,mBAAAA,EAAAA,qBAAAA,CAAAA;AAsBf,eAAeC,wBAAwBxB,MAAAA,EAA8B;AACnE,EAAA,IAAI,CAACA,OAAO+B,aAAAA,EAAeC,OAAAA,EAASL,WAAW,CAAC3B,MAAAA,CAAO+B,aAAAA,EAAe8C,aAAAA,EAAelD,OAAAA,EAAS;AAC5F1B,IAAAA,MAAAA,CAAOE,KAAK,mDAAA,CAAA;AACZ,IAAA;AACF,EAAA;AAEAF,EAAAA,MAAAA,CAAOE,KAAK,0CAAA,CAAA;AAIZ,EAAA,IAAIH,MAAAA,CAAO+B,aAAAA,CAAcC,OAAAA,EAASL,OAAAA,EAAS;AACzC1B,IAAAA,MAAAA,CAAOE,KAAK,4CAAA,EAA8C;MACxD2E,IAAAA,EAAM9E,MAAAA,CAAO+B,aAAAA,CAAcC,OAAAA,CAAQ8C,IAAAA,IAAQ,IAAA;MAC3CC,QAAAA,EAAU/E,MAAAA,CAAO+B,aAAAA,CAAcC,OAAAA,CAAQ+C,QAAAA,IAAY;KACrD,CAAA;AACF,EAAA;AAEA,EAAA,IAAI/E,MAAAA,CAAO+B,aAAAA,CAAc8C,aAAAA,EAAelD,OAAAA,EAAS;AAC/C1B,IAAAA,MAAAA,CAAOE,KAAK,kDAAA,EAAoD;MAC9DkC,WAAAA,EAAarC,MAAAA,CAAO+B,cAAc8C,aAAAA,CAAcxC,WAAAA;MAChD2C,YAAAA,EAAchF,MAAAA,CAAO+B,aAAAA,CAAc8C,aAAAA,CAAcG,YAAAA,IAAgB;KACnE,CAAA;AACF,EAAA;AACF;AAvBexD,MAAAA,CAAAA,uBAAAA,EAAAA,yBAAAA,CAAAA;AA4Bf,eAAed,gBACbV,MAAAA,EAA8B;AAE9B,EAAA,IAAI,CAACA,OAAOiB,KAAAA,EAAO;AACjBhB,IAAAA,MAAAA,CAAOE,KAAK,4EAAA,CAAA;AACZ,IAAA,OAAO,EAAC;AACV,EAAA;AAEAF,EAAAA,MAAAA,CAAOE,KAAK,0CAAA,EAA4C;AACtDc,IAAAA,KAAAA,EAAOjB,OAAOiB,KAAAA,CAAMmB,IAAAA;AACpBC,IAAAA,WAAAA,EAAarC,OAAOiB,KAAAA,CAAMoB;GAC5B,CAAA;AAGA,EAAA,MAAM7B,YAAAA,GAAe,IAAIyE,YAAAA,CAAa;AACpChE,IAAAA,KAAAA,EAAOjB,OAAOiB,KAAAA,CAAMmB,IAAAA;AACpBC,IAAAA,WAAAA,EAAarC,OAAOiB,KAAAA,CAAMoB,WAAAA;AAC1B6C,IAAAA,eAAAA,EAAiBlF,OAAOiB,KAAAA,CAAMiE;GAChC,CAAA;AAGA,EAAA,MAAMzE,aAAAA,GAAgB,IAAI0E,aAAAA,CAAc;AACtClE,IAAAA,KAAAA,EAAOjB,OAAOiB,KAAAA,CAAMmB,IAAAA;AACpBC,IAAAA,WAAAA,EAAarC,OAAOiB,KAAAA,CAAMoB,WAAAA;AAC1B6C,IAAAA,eAAAA,EAAiBlF,OAAOiB,KAAAA,CAAMiE,eAAAA;AAC9BE,IAAAA,kBAAAA,EAAoB5E,aAAa6E,qBAAAA,EAAqB;AACtDC,IAAAA,oBAAAA,EAAsB9E,aAAa+E,uBAAAA;GACrC,CAAA;AAEAtF,EAAAA,MAAAA,CAAOE,KAAK,sCAAA,EAAwC;AAClDc,IAAAA,KAAAA,EAAOjB,OAAOiB,KAAAA,CAAMmB,IAAAA;AACpBC,IAAAA,WAAAA,EAAarC,OAAOiB,KAAAA,CAAMoB,WAAAA;AAC1B+C,IAAAA,kBAAAA,EAAoB5E,aAAa6E,qBAAAA,EAAqB;AACtDC,IAAAA,oBAAAA,EAAsB9E,aAAa+E,uBAAAA;GACrC,CAAA;AAEA,EAAA,OAAO;AAAE/E,IAAAA,YAAAA;AAAcC,IAAAA;AAAc,GAAA;AACvC;AArCeC,MAAAA,CAAAA,eAAAA,EAAAA,iBAAAA,CAAAA;AA8Cf,eAAeS,uBAAuBnB,MAAAA,EAA8B;AAClE,EAAA,IAAI,CAACA,OAAOiB,KAAAA,EAAO;AACjB,IAAA;AACF,EAAA;AACAhB,EAAAA,MAAAA,CAAOuF,MAAM,gGAAA,EAAkG;AAC7GvE,IAAAA,KAAAA,EAAOjB,OAAOiB,KAAAA,CAAMmB;GACtB,CAAA;AACF;AAPejB,MAAAA,CAAAA,sBAAAA,EAAAA,wBAAAA,CAAAA","file":"chunk-RDGQEBNS.js","sourcesContent":["/**\n * Burdenoff SDK Initialization Module\n *\n * Provides a unified initialization function for all state services\n * including database, cache, analytics, event queue, and graph sync.\n *\n * @module init\n * @category Initialization\n */\n\nimport { logger } from '../logger/index.js';\nimport { LayerManager } from '../layer/index.js';\nimport { GatewayClient } from '../gateway/index.js';\nimport type { BurdenoffSDKInitConfig, InitializedSDKState } from './types.js';\n\n/**\n * Global SDK state\n */\nlet sdkState: InitializedSDKState | null = null;\nlet isInitialized = false;\n\n/**\n * Initialize Burdenoff SDK with unified configuration\n *\n * This function initializes all configured state services in the correct order:\n * 1. Logging configuration\n * 2. Database (Prisma with PostgreSQL)\n * 3. Cache (Valkey)\n * 4. Event Queue (Redis Streams)\n * 5. Graph Sync (Redis Streams-based — Apache AGE writes happen inside wspace-graph-svc)\n * 6. Analytics (ClickHouse)\n * 7. Observability (Metrics, OpenTelemetry)\n *\n * @param config - SDK initialization configuration\n * @returns Initialized SDK state\n *\n * @example\n * ```typescript\n * import { initializeBurdenoffSDK } from '@burdenoff/be-sdk/init';\n *\n * const state = await initializeBurdenoffSDK({\n *   database: {\n *     url: process.env.DATABASE_URL!,\n *     maxConnections: 20,\n *   },\n *   graph: {\n *     enabled: true,\n *     eventsEnabled: true,\n *   },\n *   cache: {\n *     valkey: {\n *       url: process.env.VALKEY_URL!,\n *     },\n *   },\n * });\n * ```\n */\nexport async function initializeBurdenoffSDK(config: BurdenoffSDKInitConfig): Promise<InitializedSDKState> {\n  if (isInitialized && sdkState) {\n    logger.warn('[SDK Init] SDK already initialized, returning existing state');\n    return sdkState;\n  }\n\n  logger.info('[SDK Init] Starting SDK initialization...');\n  const startTime = Date.now();\n\n  try {\n    // 1. Configure logging\n    await initializeLogging(config);\n\n    // 2. Initialize layer manager (if configured)\n    const { layerManager, gatewayClient } = await initializeLayer(config);\n\n    // 3. Initialize database (required)\n    const prisma = await initializeDatabase(config);\n\n    // 4. Initialize cache (optional)\n    const valkey = await initializeCache(config);\n\n    // 5. Initialize event queue (optional) — Redis Streams via REDIS_URL\n    const eventPublisher = await initializeEventQueue(config);\n\n    // 6. Initialize layer streams (if layer configured)\n    if (config.layer?.autoCreateStreams !== false && config.layer) {\n      await initializeLayerStreams(config);\n    }\n\n    // 7. Initialize graph sync (optional) — publisher emits to Redis Streams,\n    //    never opens a graph-DB connection\n    const graphSync = await initializeGraphSync(config);\n\n    // 8. Initialize analytics (optional)\n    const clickhouse = await initializeAnalytics(config);\n\n    // 9. Initialize observability (optional)\n    await initializeObservability(config);\n\n    // Create SDK state\n    // graphSync is a publisher-side placeholder; services emit Redis Streams\n    // events and wspace-graph-svc owns the sole Apache AGE connection.\n    void graphSync;\n    sdkState = {\n      prisma,\n      valkey,\n      clickhouse,\n      eventPublisher,\n      layerManager,\n      gatewayClient,\n      graphSyncEnabled: config.graph?.enabled ?? false,\n      analyticsEnabled: !!config.analytics?.clickhouse,\n      observabilityEnabled: config.observability?.metrics?.enabled ?? false,\n      layerAwareEnabled: !!config.layer,\n    };\n\n    isInitialized = true;\n\n    const duration = Date.now() - startTime;\n    // sdkState is guaranteed non-null here since we just assigned it above\n    const initializedState = sdkState;\n    logger.info(`[SDK Init] SDK initialized successfully in ${duration}ms`, {\n      graphSyncEnabled: initializedState.graphSyncEnabled,\n      analyticsEnabled: initializedState.analyticsEnabled,\n      observabilityEnabled: initializedState.observabilityEnabled,\n      layerAwareEnabled: initializedState.layerAwareEnabled,\n      layer: config.layer?.type,\n      serviceName: config.layer?.serviceName,\n    });\n\n    return initializedState;\n  } catch (error) {\n    logger.error('[SDK Init] Failed to initialize SDK:', error);\n    throw error;\n  }\n}\n\n/**\n * Get current SDK state\n * @throws Error if SDK is not initialized\n */\nexport function getSDKState(): InitializedSDKState {\n  if (!isInitialized || !sdkState) {\n    throw new Error('SDK not initialized. Call initializeBurdenoffSDK() first.');\n  }\n  return sdkState;\n}\n\n/**\n * Check if SDK is initialized\n */\nexport function isSDKInitialized(): boolean {\n  return isInitialized;\n}\n\n/**\n * Reset SDK state (useful for testing)\n */\nexport async function resetSDK(): Promise<void> {\n  logger.info('[SDK Init] Resetting SDK state...');\n\n  if (sdkState) {\n    // Cleanup resources\n    // Note: Individual cleanup will be handled by service-specific shutdown handlers\n    sdkState = null;\n  }\n\n  isInitialized = false;\n  logger.info('[SDK Init] SDK state reset');\n}\n\n/**\n * Initialize logging configuration\n */\nasync function initializeLogging(config: BurdenoffSDKInitConfig): Promise<void> {\n  logger.info('[SDK Init] Configuring logging...');\n\n  const loggingConfig = config.logging ?? {};\n  const isDevelopment = config.app?.nodeEnv === 'development';\n\n  // Set log level\n  const level = loggingConfig.level ?? 'info';\n  logger.setLevel(level);\n\n  // Set console logging\n  const console = loggingConfig.console ?? true;\n  logger.setConsoleEnabled(console);\n\n  logger.info('[SDK Init] Logging configured', {\n    level,\n    console,\n    format: loggingConfig.format ?? (isDevelopment ? 'pretty' : 'json'),\n  });\n}\n\n/**\n * Initialize database (Prisma with PostgreSQL)\n */\nasync function initializeDatabase(config: BurdenoffSDKInitConfig): Promise<unknown> {\n  logger.info('[SDK Init] Initializing database...');\n\n  // Note: Database initialization is handled by createPrismaClient in prisma/client.ts\n  // This is called by the application (e.g., workspaces-backend)\n  // We just validate the config here\n  if (!config.database?.url) {\n    throw new Error('Database URL is required');\n  }\n\n  logger.info('[SDK Init] Database configuration validated', {\n    maxConnections: config.database.maxConnections ?? 20,\n    enableQueryLogging: config.database.enableQueryLogging ?? false,\n  });\n\n  // Return undefined as database client is created separately\n  return undefined;\n}\n\n/**\n * Initialize cache (Valkey)\n */\nasync function initializeCache(config: BurdenoffSDKInitConfig): Promise<unknown> {\n  const cacheConfig = config.cache?.valkey;\n\n  if (!cacheConfig) {\n    logger.info('[SDK Init] Cache not configured, skipping');\n    return undefined;\n  }\n\n  logger.info('[SDK Init] Initializing Valkey cache...');\n\n  // Note: Valkey initialization is handled by cache module\n  // This is a placeholder for future implementation\n  logger.info('[SDK Init] Valkey cache configuration validated', {\n    url: cacheConfig.url ? '***' : undefined,\n    defaultTTL: cacheConfig.defaultTTL ?? 3600,\n  });\n\n  return undefined;\n}\n\n/**\n * Initialize event queue (Redis Streams).\n *\n * NATS was retired on 2026-05-16. The publisher is created from\n * `REDIS_URL` (set platform-wide in KV). Legacy `config.eventQueue.nats`\n * values are ignored — kept on the type only as a back-compat shim.\n */\nasync function initializeEventQueue(_config: BurdenoffSDKInitConfig): Promise<unknown> {\n  if (!process.env['REDIS_URL']) {\n    logger.info('[SDK Init] REDIS_URL not set, skipping event queue init');\n    return undefined;\n  }\n\n  try {\n    const { EventQueueFactory } = await import('../event-queue/factory/EventQueueFactory.js');\n    const publisher = EventQueueFactory.createPublisherFromEnv();\n    await publisher.connect();\n\n    logger.info('[SDK Init] Redis Streams event publisher connected');\n\n    return publisher;\n  } catch (error) {\n    logger.warn('[SDK Init] Failed to connect Redis Streams event publisher (non-fatal)', {\n      error: error instanceof Error ? error.message : String(error),\n      note: 'Service will continue without event publishing. Use direct API calls as fallback.',\n    });\n    return undefined;\n  }\n}\n\n/**\n * Initialize graph sync (Redis Streams publisher side).\n *\n * Services publish entity events to Redis Streams; the `wspace-graph-svc`\n * consumer (and only it) persists them into Apache AGE via Azure PG\n * sidecar. This SDK function does no DB work — it just validates that the\n * publisher-side config is sensible and logs it.\n */\nasync function initializeGraphSync(config: BurdenoffSDKInitConfig): Promise<unknown> {\n  if (!config.graph?.enabled) {\n    logger.info('[SDK Init] Graph sync not enabled, skipping');\n    return undefined;\n  }\n\n  logger.info('[SDK Init] Graph sync enabled (publisher-only mode)', {\n    eventsEnabled: config.graph.eventsEnabled ?? true,\n    productSource: config.graph.productSource,\n    streamName: config.graph.streamName ?? 'graph_events',\n    syncInterval: config.graph.syncInterval ?? 1000,\n    batchSize: config.graph.batchSize ?? 10,\n  });\n\n  return undefined;\n}\n\n/**\n * Initialize analytics (ClickHouse)\n */\nasync function initializeAnalytics(config: BurdenoffSDKInitConfig): Promise<unknown> {\n  if (!config.analytics?.clickhouse) {\n    logger.info('[SDK Init] Analytics not configured, skipping');\n    return undefined;\n  }\n\n  logger.info('[SDK Init] Initializing ClickHouse for analytics...');\n\n  // Note: ClickHouse initialization is handled by analytics module\n  // This is a placeholder for future implementation\n  logger.info('[SDK Init] ClickHouse configuration validated', {\n    url: config.analytics.clickhouse.url,\n    database: config.analytics.clickhouse.database,\n    requestTimeout: config.analytics.clickhouse.requestTimeout ?? 60000,\n  });\n\n  return undefined;\n}\n\n/**\n * Initialize observability (metrics, tracing)\n */\nasync function initializeObservability(config: BurdenoffSDKInitConfig): Promise<void> {\n  if (!config.observability?.metrics?.enabled && !config.observability?.openTelemetry?.enabled) {\n    logger.info('[SDK Init] Observability not configured, skipping');\n    return;\n  }\n\n  logger.info('[SDK Init] Initializing observability...');\n\n  // Note: Observability initialization is handled by observability module\n  // This is a placeholder for future implementation\n  if (config.observability.metrics?.enabled) {\n    logger.info('[SDK Init] Metrics configuration validated', {\n      port: config.observability.metrics.port ?? 9090,\n      endpoint: config.observability.metrics.endpoint ?? '/metrics',\n    });\n  }\n\n  if (config.observability.openTelemetry?.enabled) {\n    logger.info('[SDK Init] OpenTelemetry configuration validated', {\n      serviceName: config.observability.openTelemetry.serviceName,\n      samplingRate: config.observability.openTelemetry.samplingRate ?? 1.0,\n    });\n  }\n}\n\n/**\n * Initialize layer manager and gateway client\n */\nasync function initializeLayer(\n  config: BurdenoffSDKInitConfig\n): Promise<{ layerManager?: LayerManager; gatewayClient?: GatewayClient }> {\n  if (!config.layer) {\n    logger.info('[SDK Init] Layer configuration not provided, skipping layer initialization');\n    return {};\n  }\n\n  logger.info('[SDK Init] Initializing layer manager...', {\n    layer: config.layer.type,\n    serviceName: config.layer.serviceName,\n  });\n\n  // Create layer manager\n  const layerManager = new LayerManager({\n    layer: config.layer.type,\n    serviceName: config.layer.serviceName,\n    serviceIdentity: config.layer.serviceIdentity,\n  });\n\n  // Create gateway client\n  const gatewayClient = new GatewayClient({\n    layer: config.layer.type,\n    serviceName: config.layer.serviceName,\n    serviceIdentity: config.layer.serviceIdentity,\n    internalGatewayUrl: layerManager.getInternalGatewayUrl(),\n    crossLayerGatewayUrl: layerManager.getCrossLayerGatewayUrl(),\n  });\n\n  logger.info('[SDK Init] Layer manager initialized', {\n    layer: config.layer.type,\n    serviceName: config.layer.serviceName,\n    internalGatewayUrl: layerManager.getInternalGatewayUrl(),\n    crossLayerGatewayUrl: layerManager.getCrossLayerGatewayUrl(),\n  });\n\n  return { layerManager, gatewayClient };\n}\n\n/**\n * Initialize layer-specific Redis streams.\n *\n * No-op since the 2026-05-16 NATS retirement: Redis Streams are created\n * on demand by `XGROUP CREATE ... MKSTREAM` inside the consumer, so no\n * upfront connect-and-provision step is needed.\n */\nasync function initializeLayerStreams(config: BurdenoffSDKInitConfig): Promise<void> {\n  if (!config.layer) {\n    return;\n  }\n  logger.debug('[SDK Init] Layer streams init is a no-op for Redis Streams (auto-created on first XADD/XGROUP)', {\n    layer: config.layer.type,\n  });\n}\n\n// Export types\nexport type * from './types.js';\n"]}
+{"version":3,"sources":["../src/init/index.ts"],"names":["sdkState","isInitialized","initializeBurdenoffSDK","config","logger","warn","info","startTime","Date","now","initializeLogging","layerManager","gatewayClient","initializeLayer","prisma","initializeDatabase","valkey","initializeCache","eventPublisher","initializeEventQueue","layer","autoCreateStreams","initializeLayerStreams","graphSync","initializeGraphSync","clickhouse","initializeAnalytics","initializeObservability","graphSyncEnabled","graph","enabled","analyticsEnabled","analytics","observabilityEnabled","observability","metrics","layerAwareEnabled","duration","initializedState","type","serviceName","error","getSDKState","Error","isSDKInitialized","resetSDK","loggingConfig","logging","isDevelopment","app","nodeEnv","level","setLevel","console","setConsoleEnabled","format","database","url","maxConnections","enableQueryLogging","undefined","cacheConfig","cache","defaultTTL","_config","process","env","EventQueueFactory","publisher","createPublisherFromEnv","connect","message","String","note","eventsEnabled","productSource","streamName","syncInterval","batchSize","requestTimeout","openTelemetry","port","endpoint","samplingRate","LayerManager","serviceIdentity","GatewayClient","internalGatewayUrl","getInternalGatewayUrl","crossLayerGatewayUrl","getCrossLayerGatewayUrl","debug"],"mappings":";;;;;;AAAA,IAAA,YAAA,GAAA;;;;;;;AAkBA,IAAIA,QAAAA,GAAuC,IAAA;AAC3C,IAAIC,aAAAA,GAAgB,KAAA;AAsCpB,eAAsBC,uBAAuBC,MAAAA,EAA8B;AACzE,EAAA,IAAIF,iBAAiBD,QAAAA,EAAU;AAC7BI,IAAAA,MAAAA,CAAOC,KAAK,8DAAA,CAAA;AACZ,IAAA,OAAOL,QAAAA;AACT,EAAA;AAEAI,EAAAA,MAAAA,CAAOE,KAAK,2CAAA,CAAA;AACZ,EAAA,MAAMC,SAAAA,GAAYC,KAAKC,GAAAA,EAAG;AAE1B,EAAA,IAAI;AAEF,IAAA,MAAMC,kBAAkBP,MAAAA,CAAAA;AAGxB,IAAA,MAAM,EAAEQ,YAAAA,EAAcC,aAAAA,EAAa,GAAK,MAAMC,gBAAgBV,MAAAA,CAAAA;AAG9D,IAAA,MAAMW,MAAAA,GAAS,MAAMC,kBAAAA,CAAmBZ,MAAAA,CAAAA;AAGxC,IAAA,MAAMa,MAAAA,GAAS,MAAMC,eAAAA,CAAgBd,MAAAA,CAAAA;AAGrC,IAAA,MAAMe,cAAAA,GAAiB,MAAMC,oBAAAA,CAAqBhB,MAAAA,CAAAA;AAGlD,IAAA,IAAIA,MAAAA,CAAOiB,KAAAA,EAAOC,iBAAAA,KAAsB,KAAA,IAASlB,OAAOiB,KAAAA,EAAO;AAC7D,MAAA,MAAME,uBAAuBnB,MAAAA,CAAAA;AAC/B,IAAA;AAIA,IAAA,MAAMoB,SAAAA,GAAY,MAAMC,mBAAAA,CAAoBrB,MAAAA,CAAAA;AAG5C,IAAA,MAAMsB,UAAAA,GAAa,MAAMC,mBAAAA,CAAoBvB,MAAAA,CAAAA;AAG7C,IAAA,MAAMwB,wBAAwBxB,MAAAA,CAAAA;AAK9B,IAAA,KAAKoB,SAAAA;AACLvB,IAAAA,QAAAA,GAAW;AACTc,MAAAA,MAAAA;AACAE,MAAAA,MAAAA;AACAS,MAAAA,UAAAA;AACAP,MAAAA,cAAAA;AACAP,MAAAA,YAAAA;AACAC,MAAAA,aAAAA;MACAgB,gBAAAA,EAAkBzB,MAAAA,CAAO0B,OAAOC,OAAAA,IAAW,KAAA;MAC3CC,gBAAAA,EAAkB,CAAC,CAAC5B,MAAAA,CAAO6B,SAAAA,EAAWP,UAAAA;MACtCQ,oBAAAA,EAAsB9B,MAAAA,CAAO+B,aAAAA,EAAeC,OAAAA,EAASL,OAAAA,IAAW,KAAA;MAChEM,iBAAAA,EAAmB,CAAC,CAACjC,MAAAA,CAAOiB;AAC9B,KAAA;AAEAnB,IAAAA,aAAAA,GAAgB,IAAA;AAEhB,IAAA,MAAMoC,QAAAA,GAAW7B,IAAAA,CAAKC,GAAAA,EAAG,GAAKF,SAAAA;AAE9B,IAAA,MAAM+B,gBAAAA,GAAmBtC,QAAAA;AACzBI,IAAAA,MAAAA,CAAOE,IAAAA,CAAK,CAAA,2CAAA,EAA8C+B,QAAAA,CAAAA,EAAAA,CAAAA,EAAc;AACtET,MAAAA,gBAAAA,EAAkBU,gBAAAA,CAAiBV,gBAAAA;AACnCG,MAAAA,gBAAAA,EAAkBO,gBAAAA,CAAiBP,gBAAAA;AACnCE,MAAAA,oBAAAA,EAAsBK,gBAAAA,CAAiBL,oBAAAA;AACvCG,MAAAA,iBAAAA,EAAmBE,gBAAAA,CAAiBF,iBAAAA;AACpChB,MAAAA,KAAAA,EAAOjB,OAAOiB,KAAAA,EAAOmB,IAAAA;AACrBC,MAAAA,WAAAA,EAAarC,OAAOiB,KAAAA,EAAOoB;KAC7B,CAAA;AAEA,IAAA,OAAOF,gBAAAA;AACT,EAAA,CAAA,CAAA,OAASG,KAAAA,EAAO;AACdrC,IAAAA,MAAAA,CAAOqC,KAAAA,CAAM,wCAAwCA,KAAAA,CAAAA;AACrD,IAAA,MAAMA,KAAAA;AACR,EAAA;AACF;AA5EsBvC,MAAAA,CAAAA,sBAAAA,EAAAA,wBAAAA,CAAAA;AAkFf,SAASwC,WAAAA,GAAAA;AACd,EAAA,IAAI,CAACzC,aAAAA,IAAiB,CAACD,QAAAA,EAAU;AAC/B,IAAA,MAAM,IAAI2C,MAAM,2DAAA,CAAA;AAClB,EAAA;AACA,EAAA,OAAO3C,QAAAA;AACT;AALgB0C,MAAAA,CAAAA,WAAAA,EAAAA,aAAAA,CAAAA;AAUT,SAASE,gBAAAA,GAAAA;AACd,EAAA,OAAO3C,aAAAA;AACT;AAFgB2C,MAAAA,CAAAA,gBAAAA,EAAAA,kBAAAA,CAAAA;AAOhB,eAAsBC,QAAAA,GAAAA;AACpBzC,EAAAA,MAAAA,CAAOE,KAAK,mCAAA,CAAA;AAEZ,EAAA,IAAIN,QAAAA,EAAU;AAGZA,IAAAA,QAAAA,GAAW,IAAA;AACb,EAAA;AAEAC,EAAAA,aAAAA,GAAgB,KAAA;AAChBG,EAAAA,MAAAA,CAAOE,KAAK,4BAAA,CAAA;AACd;AAXsBuC,MAAAA,CAAAA,QAAAA,EAAAA,UAAAA,CAAAA;AAgBtB,eAAenC,kBAAkBP,MAAAA,EAA8B;AAC7DC,EAAAA,MAAAA,CAAOE,KAAK,mCAAA,CAAA;AAEZ,EAAA,MAAMwC,aAAAA,GAAgB3C,MAAAA,CAAO4C,OAAAA,IAAW,EAAC;AACzC,EAAA,MAAMC,aAAAA,GAAgB7C,MAAAA,CAAO8C,GAAAA,EAAKC,OAAAA,KAAY,aAAA;AAG9C,EAAA,MAAMC,KAAAA,GAAQL,cAAcK,KAAAA,IAAS,MAAA;AACrC/C,EAAAA,MAAAA,CAAOgD,SAASD,KAAAA,CAAAA;AAGhB,EAAA,MAAME,OAAAA,GAAUP,cAAcO,OAAAA,IAAW,IAAA;AACzCjD,EAAAA,MAAAA,CAAOkD,kBAAkBD,OAAAA,CAAAA;AAEzBjD,EAAAA,MAAAA,CAAOE,KAAK,+BAAA,EAAiC;AAC3C6C,IAAAA,KAAAA;AACAE,IAAAA,OAAAA;IACAE,MAAAA,EAAQT,aAAAA,CAAcS,MAAAA,KAAWP,aAAAA,GAAgB,QAAA,GAAW,MAAA;GAC9D,CAAA;AACF;AAnBetC,MAAAA,CAAAA,iBAAAA,EAAAA,mBAAAA,CAAAA;AAwBf,eAAeK,mBAAmBZ,MAAAA,EAA8B;AAC9DC,EAAAA,MAAAA,CAAOE,KAAK,qCAAA,CAAA;AAKZ,EAAA,IAAI,CAACH,MAAAA,CAAOqD,QAAAA,EAAUC,GAAAA,EAAK;AACzB,IAAA,MAAM,IAAId,MAAM,0BAAA,CAAA;AAClB,EAAA;AAEAvC,EAAAA,MAAAA,CAAOE,KAAK,6CAAA,EAA+C;IACzDoD,cAAAA,EAAgBvD,MAAAA,CAAOqD,SAASE,cAAAA,IAAkB,EAAA;IAClDC,kBAAAA,EAAoBxD,MAAAA,CAAOqD,SAASG,kBAAAA,IAAsB;GAC5D,CAAA;AAGA,EAAA,OAAOC,MAAAA;AACT;AAjBe7C,MAAAA,CAAAA,kBAAAA,EAAAA,oBAAAA,CAAAA;AAsBf,eAAeE,gBAAgBd,MAAAA,EAA8B;AAC3D,EAAA,MAAM0D,WAAAA,GAAc1D,OAAO2D,KAAAA,EAAO9C,MAAAA;AAElC,EAAA,IAAI,CAAC6C,WAAAA,EAAa;AAChBzD,IAAAA,MAAAA,CAAOE,KAAK,2CAAA,CAAA;AACZ,IAAA,OAAOsD,MAAAA;AACT,EAAA;AAEAxD,EAAAA,MAAAA,CAAOE,KAAK,yCAAA,CAAA;AAIZF,EAAAA,MAAAA,CAAOE,KAAK,iDAAA,EAAmD;IAC7DmD,GAAAA,EAAKI,WAAAA,CAAYJ,MAAM,KAAA,GAAQG,MAAAA;AAC/BG,IAAAA,UAAAA,EAAYF,YAAYE,UAAAA,IAAc;GACxC,CAAA;AAEA,EAAA,OAAOH,MAAAA;AACT;AAlBe3C,MAAAA,CAAAA,eAAAA,EAAAA,iBAAAA,CAAAA;AA2Bf,eAAeE,qBAAqB6C,OAAAA,EAA+B;AACjE,EAAA,IAAI,CAACC,OAAAA,CAAQC,GAAAA,CAAI,WAAA,CAAA,EAAc;AAC7B9D,IAAAA,MAAAA,CAAOE,KAAK,yDAAA,CAAA;AACZ,IAAA,OAAOsD,MAAAA;AACT,EAAA;AAEA,EAAA,IAAI;AACF,IAAA,MAAM,EAAEO,iBAAAA,EAAiB,GAAK,MAAM,OAAO,iCAAA,CAAA;AAC3C,IAAA,MAAMC,SAAAA,GAAYD,kBAAkBE,sBAAAA,EAAsB;AAC1D,IAAA,MAAMD,UAAUE,OAAAA,EAAO;AAEvBlE,IAAAA,MAAAA,CAAOE,KAAK,oDAAA,CAAA;AAEZ,IAAA,OAAO8D,SAAAA;AACT,EAAA,CAAA,CAAA,OAAS3B,KAAAA,EAAO;AACdrC,IAAAA,MAAAA,CAAOC,KAAK,wEAAA,EAA0E;AACpFoC,MAAAA,KAAAA,EAAOA,KAAAA,YAAiBE,KAAAA,GAAQF,KAAAA,CAAM8B,OAAAA,GAAUC,OAAO/B,KAAAA,CAAAA;MACvDgC,IAAAA,EAAM;KACR,CAAA;AACA,IAAA,OAAOb,MAAAA;AACT,EAAA;AACF;AArBezC,MAAAA,CAAAA,oBAAAA,EAAAA,sBAAAA,CAAAA;AA+Bf,eAAeK,oBAAoBrB,MAAAA,EAA8B;AAC/D,EAAA,IAAI,CAACA,MAAAA,CAAO0B,KAAAA,EAAOC,OAAAA,EAAS;AAC1B1B,IAAAA,MAAAA,CAAOE,KAAK,6CAAA,CAAA;AACZ,IAAA,OAAOsD,MAAAA;AACT,EAAA;AAEAxD,EAAAA,MAAAA,CAAOE,KAAK,qDAAA,EAAuD;IACjEoE,aAAAA,EAAevE,MAAAA,CAAO0B,MAAM6C,aAAAA,IAAiB,IAAA;AAC7CC,IAAAA,aAAAA,EAAexE,OAAO0B,KAAAA,CAAM8C,aAAAA;IAC5BC,UAAAA,EAAYzE,MAAAA,CAAO0B,MAAM+C,UAAAA,IAAc,cAAA;IACvCC,YAAAA,EAAc1E,MAAAA,CAAO0B,MAAMgD,YAAAA,IAAgB,GAAA;IAC3CC,SAAAA,EAAW3E,MAAAA,CAAO0B,MAAMiD,SAAAA,IAAa;GACvC,CAAA;AAEA,EAAA,OAAOlB,MAAAA;AACT;AAfepC,MAAAA,CAAAA,mBAAAA,EAAAA,qBAAAA,CAAAA;AAoBf,eAAeE,oBAAoBvB,MAAAA,EAA8B;AAC/D,EAAA,IAAI,CAACA,MAAAA,CAAO6B,SAAAA,EAAWP,UAAAA,EAAY;AACjCrB,IAAAA,MAAAA,CAAOE,KAAK,+CAAA,CAAA;AACZ,IAAA,OAAOsD,MAAAA;AACT,EAAA;AAEAxD,EAAAA,MAAAA,CAAOE,KAAK,qDAAA,CAAA;AAIZF,EAAAA,MAAAA,CAAOE,KAAK,+CAAA,EAAiD;IAC3DmD,GAAAA,EAAKtD,MAAAA,CAAO6B,UAAUP,UAAAA,CAAWgC,GAAAA;IACjCD,QAAAA,EAAUrD,MAAAA,CAAO6B,UAAUP,UAAAA,CAAW+B,QAAAA;IACtCuB,cAAAA,EAAgB5E,MAAAA,CAAO6B,SAAAA,CAAUP,UAAAA,CAAWsD,cAAAA,IAAkB;GAChE,CAAA;AAEA,EAAA,OAAOnB,MAAAA;AACT;AAjBelC,MAAAA,CAAAA,mBAAAA,EAAAA,qBAAAA,CAAAA;AAsBf,eAAeC,wBAAwBxB,MAAAA,EAA8B;AACnE,EAAA,IAAI,CAACA,OAAO+B,aAAAA,EAAeC,OAAAA,EAASL,WAAW,CAAC3B,MAAAA,CAAO+B,aAAAA,EAAe8C,aAAAA,EAAelD,OAAAA,EAAS;AAC5F1B,IAAAA,MAAAA,CAAOE,KAAK,mDAAA,CAAA;AACZ,IAAA;AACF,EAAA;AAEAF,EAAAA,MAAAA,CAAOE,KAAK,0CAAA,CAAA;AAIZ,EAAA,IAAIH,MAAAA,CAAO+B,aAAAA,CAAcC,OAAAA,EAASL,OAAAA,EAAS;AACzC1B,IAAAA,MAAAA,CAAOE,KAAK,4CAAA,EAA8C;MACxD2E,IAAAA,EAAM9E,MAAAA,CAAO+B,aAAAA,CAAcC,OAAAA,CAAQ8C,IAAAA,IAAQ,IAAA;MAC3CC,QAAAA,EAAU/E,MAAAA,CAAO+B,aAAAA,CAAcC,OAAAA,CAAQ+C,QAAAA,IAAY;KACrD,CAAA;AACF,EAAA;AAEA,EAAA,IAAI/E,MAAAA,CAAO+B,aAAAA,CAAc8C,aAAAA,EAAelD,OAAAA,EAAS;AAC/C1B,IAAAA,MAAAA,CAAOE,KAAK,kDAAA,EAAoD;MAC9DkC,WAAAA,EAAarC,MAAAA,CAAO+B,cAAc8C,aAAAA,CAAcxC,WAAAA;MAChD2C,YAAAA,EAAchF,MAAAA,CAAO+B,aAAAA,CAAc8C,aAAAA,CAAcG,YAAAA,IAAgB;KACnE,CAAA;AACF,EAAA;AACF;AAvBexD,MAAAA,CAAAA,uBAAAA,EAAAA,yBAAAA,CAAAA;AA4Bf,eAAed,gBACbV,MAAAA,EAA8B;AAE9B,EAAA,IAAI,CAACA,OAAOiB,KAAAA,EAAO;AACjBhB,IAAAA,MAAAA,CAAOE,KAAK,4EAAA,CAAA;AACZ,IAAA,OAAO,EAAC;AACV,EAAA;AAEAF,EAAAA,MAAAA,CAAOE,KAAK,0CAAA,EAA4C;AACtDc,IAAAA,KAAAA,EAAOjB,OAAOiB,KAAAA,CAAMmB,IAAAA;AACpBC,IAAAA,WAAAA,EAAarC,OAAOiB,KAAAA,CAAMoB;GAC5B,CAAA;AAGA,EAAA,MAAM7B,YAAAA,GAAe,IAAIyE,YAAAA,CAAa;AACpChE,IAAAA,KAAAA,EAAOjB,OAAOiB,KAAAA,CAAMmB,IAAAA;AACpBC,IAAAA,WAAAA,EAAarC,OAAOiB,KAAAA,CAAMoB,WAAAA;AAC1B6C,IAAAA,eAAAA,EAAiBlF,OAAOiB,KAAAA,CAAMiE;GAChC,CAAA;AAGA,EAAA,MAAMzE,aAAAA,GAAgB,IAAI0E,aAAAA,CAAc;AACtClE,IAAAA,KAAAA,EAAOjB,OAAOiB,KAAAA,CAAMmB,IAAAA;AACpBC,IAAAA,WAAAA,EAAarC,OAAOiB,KAAAA,CAAMoB,WAAAA;AAC1B6C,IAAAA,eAAAA,EAAiBlF,OAAOiB,KAAAA,CAAMiE,eAAAA;AAC9BE,IAAAA,kBAAAA,EAAoB5E,aAAa6E,qBAAAA,EAAqB;AACtDC,IAAAA,oBAAAA,EAAsB9E,aAAa+E,uBAAAA;GACrC,CAAA;AAEAtF,EAAAA,MAAAA,CAAOE,KAAK,sCAAA,EAAwC;AAClDc,IAAAA,KAAAA,EAAOjB,OAAOiB,KAAAA,CAAMmB,IAAAA;AACpBC,IAAAA,WAAAA,EAAarC,OAAOiB,KAAAA,CAAMoB,WAAAA;AAC1B+C,IAAAA,kBAAAA,EAAoB5E,aAAa6E,qBAAAA,EAAqB;AACtDC,IAAAA,oBAAAA,EAAsB9E,aAAa+E,uBAAAA;GACrC,CAAA;AAEA,EAAA,OAAO;AAAE/E,IAAAA,YAAAA;AAAcC,IAAAA;AAAc,GAAA;AACvC;AArCeC,MAAAA,CAAAA,eAAAA,EAAAA,iBAAAA,CAAAA;AA8Cf,eAAeS,uBAAuBnB,MAAAA,EAA8B;AAClE,EAAA,IAAI,CAACA,OAAOiB,KAAAA,EAAO;AACjB,IAAA;AACF,EAAA;AACAhB,EAAAA,MAAAA,CAAOuF,MAAM,gGAAA,EAAkG;AAC7GvE,IAAAA,KAAAA,EAAOjB,OAAOiB,KAAAA,CAAMmB;GACtB,CAAA;AACF;AAPejB,MAAAA,CAAAA,sBAAAA,EAAAA,wBAAAA,CAAAA","file":"chunk-ZRRLY7SM.js","sourcesContent":["/**\n * Burdenoff SDK Initialization Module\n *\n * Provides a unified initialization function for all state services\n * including database, cache, analytics, event queue, and graph sync.\n *\n * @module init\n * @category Initialization\n */\n\nimport { logger } from '../logger/index.js';\nimport { LayerManager } from '../layer/index.js';\nimport { GatewayClient } from '../gateway/index.js';\nimport type { BurdenoffSDKInitConfig, InitializedSDKState } from './types.js';\n\n/**\n * Global SDK state\n */\nlet sdkState: InitializedSDKState | null = null;\nlet isInitialized = false;\n\n/**\n * Initialize Burdenoff SDK with unified configuration\n *\n * This function initializes all configured state services in the correct order:\n * 1. Logging configuration\n * 2. Database (Prisma with PostgreSQL)\n * 3. Cache (Valkey)\n * 4. Event Queue (Redis Streams)\n * 5. Graph Sync (Redis Streams-based — Apache AGE writes happen inside wspace-graph-svc)\n * 6. Analytics (ClickHouse)\n * 7. Observability (Metrics, OpenTelemetry)\n *\n * @param config - SDK initialization configuration\n * @returns Initialized SDK state\n *\n * @example\n * ```typescript\n * import { initializeBurdenoffSDK } from '@burdenoff/be-sdk/init';\n *\n * const state = await initializeBurdenoffSDK({\n *   database: {\n *     url: process.env.DATABASE_URL!,\n *     maxConnections: 20,\n *   },\n *   graph: {\n *     enabled: true,\n *     eventsEnabled: true,\n *   },\n *   cache: {\n *     valkey: {\n *       url: process.env.VALKEY_URL!,\n *     },\n *   },\n * });\n * ```\n */\nexport async function initializeBurdenoffSDK(config: BurdenoffSDKInitConfig): Promise<InitializedSDKState> {\n  if (isInitialized && sdkState) {\n    logger.warn('[SDK Init] SDK already initialized, returning existing state');\n    return sdkState;\n  }\n\n  logger.info('[SDK Init] Starting SDK initialization...');\n  const startTime = Date.now();\n\n  try {\n    // 1. Configure logging\n    await initializeLogging(config);\n\n    // 2. Initialize layer manager (if configured)\n    const { layerManager, gatewayClient } = await initializeLayer(config);\n\n    // 3. Initialize database (required)\n    const prisma = await initializeDatabase(config);\n\n    // 4. Initialize cache (optional)\n    const valkey = await initializeCache(config);\n\n    // 5. Initialize event queue (optional) — Redis Streams via REDIS_URL\n    const eventPublisher = await initializeEventQueue(config);\n\n    // 6. Initialize layer streams (if layer configured)\n    if (config.layer?.autoCreateStreams !== false && config.layer) {\n      await initializeLayerStreams(config);\n    }\n\n    // 7. Initialize graph sync (optional) — publisher emits to Redis Streams,\n    //    never opens a graph-DB connection\n    const graphSync = await initializeGraphSync(config);\n\n    // 8. Initialize analytics (optional)\n    const clickhouse = await initializeAnalytics(config);\n\n    // 9. Initialize observability (optional)\n    await initializeObservability(config);\n\n    // Create SDK state\n    // graphSync is a publisher-side placeholder; services emit Redis Streams\n    // events and wspace-graph-svc owns the sole Apache AGE connection.\n    void graphSync;\n    sdkState = {\n      prisma,\n      valkey,\n      clickhouse,\n      eventPublisher,\n      layerManager,\n      gatewayClient,\n      graphSyncEnabled: config.graph?.enabled ?? false,\n      analyticsEnabled: !!config.analytics?.clickhouse,\n      observabilityEnabled: config.observability?.metrics?.enabled ?? false,\n      layerAwareEnabled: !!config.layer,\n    };\n\n    isInitialized = true;\n\n    const duration = Date.now() - startTime;\n    // sdkState is guaranteed non-null here since we just assigned it above\n    const initializedState = sdkState;\n    logger.info(`[SDK Init] SDK initialized successfully in ${duration}ms`, {\n      graphSyncEnabled: initializedState.graphSyncEnabled,\n      analyticsEnabled: initializedState.analyticsEnabled,\n      observabilityEnabled: initializedState.observabilityEnabled,\n      layerAwareEnabled: initializedState.layerAwareEnabled,\n      layer: config.layer?.type,\n      serviceName: config.layer?.serviceName,\n    });\n\n    return initializedState;\n  } catch (error) {\n    logger.error('[SDK Init] Failed to initialize SDK:', error);\n    throw error;\n  }\n}\n\n/**\n * Get current SDK state\n * @throws Error if SDK is not initialized\n */\nexport function getSDKState(): InitializedSDKState {\n  if (!isInitialized || !sdkState) {\n    throw new Error('SDK not initialized. Call initializeBurdenoffSDK() first.');\n  }\n  return sdkState;\n}\n\n/**\n * Check if SDK is initialized\n */\nexport function isSDKInitialized(): boolean {\n  return isInitialized;\n}\n\n/**\n * Reset SDK state (useful for testing)\n */\nexport async function resetSDK(): Promise<void> {\n  logger.info('[SDK Init] Resetting SDK state...');\n\n  if (sdkState) {\n    // Cleanup resources\n    // Note: Individual cleanup will be handled by service-specific shutdown handlers\n    sdkState = null;\n  }\n\n  isInitialized = false;\n  logger.info('[SDK Init] SDK state reset');\n}\n\n/**\n * Initialize logging configuration\n */\nasync function initializeLogging(config: BurdenoffSDKInitConfig): Promise<void> {\n  logger.info('[SDK Init] Configuring logging...');\n\n  const loggingConfig = config.logging ?? {};\n  const isDevelopment = config.app?.nodeEnv === 'development';\n\n  // Set log level\n  const level = loggingConfig.level ?? 'info';\n  logger.setLevel(level);\n\n  // Set console logging\n  const console = loggingConfig.console ?? true;\n  logger.setConsoleEnabled(console);\n\n  logger.info('[SDK Init] Logging configured', {\n    level,\n    console,\n    format: loggingConfig.format ?? (isDevelopment ? 'pretty' : 'json'),\n  });\n}\n\n/**\n * Initialize database (Prisma with PostgreSQL)\n */\nasync function initializeDatabase(config: BurdenoffSDKInitConfig): Promise<unknown> {\n  logger.info('[SDK Init] Initializing database...');\n\n  // Note: Database initialization is handled by createPrismaClient in prisma/client.ts\n  // This is called by the application (e.g., workspaces-backend)\n  // We just validate the config here\n  if (!config.database?.url) {\n    throw new Error('Database URL is required');\n  }\n\n  logger.info('[SDK Init] Database configuration validated', {\n    maxConnections: config.database.maxConnections ?? 20,\n    enableQueryLogging: config.database.enableQueryLogging ?? false,\n  });\n\n  // Return undefined as database client is created separately\n  return undefined;\n}\n\n/**\n * Initialize cache (Valkey)\n */\nasync function initializeCache(config: BurdenoffSDKInitConfig): Promise<unknown> {\n  const cacheConfig = config.cache?.valkey;\n\n  if (!cacheConfig) {\n    logger.info('[SDK Init] Cache not configured, skipping');\n    return undefined;\n  }\n\n  logger.info('[SDK Init] Initializing Valkey cache...');\n\n  // Note: Valkey initialization is handled by cache module\n  // This is a placeholder for future implementation\n  logger.info('[SDK Init] Valkey cache configuration validated', {\n    url: cacheConfig.url ? '***' : undefined,\n    defaultTTL: cacheConfig.defaultTTL ?? 3600,\n  });\n\n  return undefined;\n}\n\n/**\n * Initialize event queue (Redis Streams).\n *\n * NATS was retired on 2026-05-16. The publisher is created from\n * `REDIS_URL` (set platform-wide in KV). Legacy `config.eventQueue.nats`\n * values are ignored — kept on the type only as a back-compat shim.\n */\nasync function initializeEventQueue(_config: BurdenoffSDKInitConfig): Promise<unknown> {\n  if (!process.env['REDIS_URL']) {\n    logger.info('[SDK Init] REDIS_URL not set, skipping event queue init');\n    return undefined;\n  }\n\n  try {\n    const { EventQueueFactory } = await import('../event-queue/factory/EventQueueFactory.js');\n    const publisher = EventQueueFactory.createPublisherFromEnv();\n    await publisher.connect();\n\n    logger.info('[SDK Init] Redis Streams event publisher connected');\n\n    return publisher;\n  } catch (error) {\n    logger.warn('[SDK Init] Failed to connect Redis Streams event publisher (non-fatal)', {\n      error: error instanceof Error ? error.message : String(error),\n      note: 'Service will continue without event publishing. Use direct API calls as fallback.',\n    });\n    return undefined;\n  }\n}\n\n/**\n * Initialize graph sync (Redis Streams publisher side).\n *\n * Services publish entity events to Redis Streams; the `wspace-graph-svc`\n * consumer (and only it) persists them into Apache AGE via Azure PG\n * sidecar. This SDK function does no DB work — it just validates that the\n * publisher-side config is sensible and logs it.\n */\nasync function initializeGraphSync(config: BurdenoffSDKInitConfig): Promise<unknown> {\n  if (!config.graph?.enabled) {\n    logger.info('[SDK Init] Graph sync not enabled, skipping');\n    return undefined;\n  }\n\n  logger.info('[SDK Init] Graph sync enabled (publisher-only mode)', {\n    eventsEnabled: config.graph.eventsEnabled ?? true,\n    productSource: config.graph.productSource,\n    streamName: config.graph.streamName ?? 'graph_events',\n    syncInterval: config.graph.syncInterval ?? 1000,\n    batchSize: config.graph.batchSize ?? 10,\n  });\n\n  return undefined;\n}\n\n/**\n * Initialize analytics (ClickHouse)\n */\nasync function initializeAnalytics(config: BurdenoffSDKInitConfig): Promise<unknown> {\n  if (!config.analytics?.clickhouse) {\n    logger.info('[SDK Init] Analytics not configured, skipping');\n    return undefined;\n  }\n\n  logger.info('[SDK Init] Initializing ClickHouse for analytics...');\n\n  // Note: ClickHouse initialization is handled by analytics module\n  // This is a placeholder for future implementation\n  logger.info('[SDK Init] ClickHouse configuration validated', {\n    url: config.analytics.clickhouse.url,\n    database: config.analytics.clickhouse.database,\n    requestTimeout: config.analytics.clickhouse.requestTimeout ?? 60000,\n  });\n\n  return undefined;\n}\n\n/**\n * Initialize observability (metrics, tracing)\n */\nasync function initializeObservability(config: BurdenoffSDKInitConfig): Promise<void> {\n  if (!config.observability?.metrics?.enabled && !config.observability?.openTelemetry?.enabled) {\n    logger.info('[SDK Init] Observability not configured, skipping');\n    return;\n  }\n\n  logger.info('[SDK Init] Initializing observability...');\n\n  // Note: Observability initialization is handled by observability module\n  // This is a placeholder for future implementation\n  if (config.observability.metrics?.enabled) {\n    logger.info('[SDK Init] Metrics configuration validated', {\n      port: config.observability.metrics.port ?? 9090,\n      endpoint: config.observability.metrics.endpoint ?? '/metrics',\n    });\n  }\n\n  if (config.observability.openTelemetry?.enabled) {\n    logger.info('[SDK Init] OpenTelemetry configuration validated', {\n      serviceName: config.observability.openTelemetry.serviceName,\n      samplingRate: config.observability.openTelemetry.samplingRate ?? 1.0,\n    });\n  }\n}\n\n/**\n * Initialize layer manager and gateway client\n */\nasync function initializeLayer(\n  config: BurdenoffSDKInitConfig\n): Promise<{ layerManager?: LayerManager; gatewayClient?: GatewayClient }> {\n  if (!config.layer) {\n    logger.info('[SDK Init] Layer configuration not provided, skipping layer initialization');\n    return {};\n  }\n\n  logger.info('[SDK Init] Initializing layer manager...', {\n    layer: config.layer.type,\n    serviceName: config.layer.serviceName,\n  });\n\n  // Create layer manager\n  const layerManager = new LayerManager({\n    layer: config.layer.type,\n    serviceName: config.layer.serviceName,\n    serviceIdentity: config.layer.serviceIdentity,\n  });\n\n  // Create gateway client\n  const gatewayClient = new GatewayClient({\n    layer: config.layer.type,\n    serviceName: config.layer.serviceName,\n    serviceIdentity: config.layer.serviceIdentity,\n    internalGatewayUrl: layerManager.getInternalGatewayUrl(),\n    crossLayerGatewayUrl: layerManager.getCrossLayerGatewayUrl(),\n  });\n\n  logger.info('[SDK Init] Layer manager initialized', {\n    layer: config.layer.type,\n    serviceName: config.layer.serviceName,\n    internalGatewayUrl: layerManager.getInternalGatewayUrl(),\n    crossLayerGatewayUrl: layerManager.getCrossLayerGatewayUrl(),\n  });\n\n  return { layerManager, gatewayClient };\n}\n\n/**\n * Initialize layer-specific Redis streams.\n *\n * No-op since the 2026-05-16 NATS retirement: Redis Streams are created\n * on demand by `XGROUP CREATE ... MKSTREAM` inside the consumer, so no\n * upfront connect-and-provision step is needed.\n */\nasync function initializeLayerStreams(config: BurdenoffSDKInitConfig): Promise<void> {\n  if (!config.layer) {\n    return;\n  }\n  logger.debug('[SDK Init] Layer streams init is a no-op for Redis Streams (auto-created on first XADD/XGROUP)', {\n    layer: config.layer.type,\n  });\n}\n\n// Export types\nexport type * from './types.js';\n"]}

package/dist/export/index.js

@@ -1,5 +1,5 @@
-export { BaseModuleExporter, PaginationService, convertToCSV, csvToJSON, estimateCSVSize, getCSVHeaders, parseCSV, triggerExportJob } from '../chunk-5HL47UH2.js';
-import '../chunk-OJWJVZY5.js';
+export { BaseModuleExporter, PaginationService, convertToCSV, csvToJSON, estimateCSVSize, getCSVHeaders, parseCSV, triggerExportJob } from '../chunk-GMFHIFS5.js';
+import '../chunk-BJVXHIUV.js';
 import '../chunk-4NFZOFRS.js';
 import '../chunk-GSEPF2B6.js';
 import '../chunk-HP6JTFNR.js';

package/dist/gateway/index.js

@@ -1,4 +1,4 @@
-export { CircuitState, GatewayClient, GatewayError, GatewayErrorType, createGatewayClient, createGatewayClientFromEnv } from '../chunk-OJWJVZY5.js';
+export { CircuitState, GatewayClient, GatewayError, GatewayErrorType, createGatewayClient, createGatewayClientFromEnv } from '../chunk-BJVXHIUV.js';
 export { security_exports as Security } from '../chunk-4NFZOFRS.js';
 import '../chunk-GSEPF2B6.js';
 import '../chunk-HP6JTFNR.js';

package/dist/index.js

@@ -14,7 +14,7 @@ import { TenantNotificationsModule, NotificationsModule } from './chunk-RMDKB5O7
 export { tenant_notifications_exports as Notifications, NotificationsModule } from './chunk-RMDKB5O7.js';
 export { observability_exports as Observability } from './chunk-5LXDPGDH.js';
 export { platform_exports as Platform } from './chunk-PHKK7725.js';
-export { export_exports as Export } from './chunk-5HL47UH2.js';
+export { export_exports as Export } from './chunk-GMFHIFS5.js';
 export { feature_flags_exports as FeatureFlags } from './chunk-VWCN5PMD.js';
 import { GraphModule } from './chunk-TIINMQSD.js';
 export { graph_exports as Graph, GraphModule } from './chunk-TIINMQSD.js';
@@ -27,8 +27,8 @@ export { graphql_exports as GraphQL } from './chunk-X4NELQLV.js';
 import './chunk-QLVKMWFA.js';
 import './chunk-MHNA7IS7.js';
 export { i18n_exports as I18n, createTranslator, getLanguage, getLocale, hasI18n, t } from './chunk-ULFFX3YE.js';
-export { init_exports as Init } from './chunk-RDGQEBNS.js';
-export { gateway_exports as Gateway } from './chunk-OJWJVZY5.js';
+export { init_exports as Init } from './chunk-ZRRLY7SM.js';
+export { gateway_exports as Gateway } from './chunk-BJVXHIUV.js';
 import './chunk-4NFZOFRS.js';
 export { layer_exports as Layer } from './chunk-GSEPF2B6.js';
 import { AuthModule } from './chunk-KKCC3Z4I.js';

package/dist/init/index.js

@@ -1,5 +1,5 @@
-export { getSDKState, initializeBurdenoffSDK, isSDKInitialized, resetSDK } from '../chunk-RDGQEBNS.js';
-import '../chunk-OJWJVZY5.js';
+export { getSDKState, initializeBurdenoffSDK, isSDKInitialized, resetSDK } from '../chunk-ZRRLY7SM.js';
+import '../chunk-BJVXHIUV.js';
 import '../chunk-4NFZOFRS.js';
 import '../chunk-GSEPF2B6.js';
 import '../chunk-HP6JTFNR.js';

package/dist/server/index.js

@@ -1,5 +1,5 @@
-import { createHumanReadableErrorPlugin, formatHttpError, normalizeGraphQLResponse, createHttpErrorResponse } from '../chunk-VWNL2O3G.js';
-export { UserFacingGraphQLError, createHttpErrorResponse, createHumanReadableErrorPlugin, createWorkspaceGuardPlugin, formatHttpError, normalizeError, normalizeExecutionResultErrors, normalizeGraphQLResponse, normalizeGraphQLResponsePayload, toUserFacingGraphQLError } from '../chunk-VWNL2O3G.js';
+import { createHumanReadableErrorPlugin, formatHttpError, normalizeGraphQLResponse, createHttpErrorResponse } from '../chunk-OQLDXOZ3.js';
+export { UserFacingGraphQLError, createHttpErrorResponse, createHumanReadableErrorPlugin, createWorkspaceGuardPlugin, formatHttpError, normalizeError, normalizeExecutionResultErrors, normalizeGraphQLResponse, normalizeGraphQLResponsePayload, toUserFacingGraphQLError } from '../chunk-OQLDXOZ3.js';
 import { setWorkspaceContext } from '../chunk-GTEMQXCA.js';
 import { I18n } from '../chunk-ULFFX3YE.js';
 import { logger } from '../chunk-CBZNP6RF.js';
@@ -473,7 +473,7 @@ async function createServer(definition) {
   const { initializeDatabase, getDb: getDb2, getDatabaseManager } = await import('../prisma/index.js');
   const { createSecurityPlugin } = await import('../middleware/index.js');
   const { createMetricsPlugin } = await import('../observability/index.js');
-  const { createWorkspaceGuardPlugin: createWorkspaceGuardPlugin2 } = await import('../workspace-guard-3JLBFAMH.js');
+  const { createWorkspaceGuardPlugin: createWorkspaceGuardPlugin2 } = await import('../workspace-guard-4BUG4ZP2.js');
   logger.info(`[Server] Initializing ${config.serviceName}...`);
   const boundary = config.boundary ?? (config.serviceName.startsWith("wspace-") ? "wspace" : config.serviceName.startsWith("global-") ? "global" : "wspace");
   const shouldEnableWorkspaceExtension = disableWorkspaceExtension === true ? false : disableWorkspaceExtension === false ? true : boundary === "wspace";

package/dist/workspace-guard-4BUG4ZP2.js

@@ -0,0 +1,5 @@
+export { createWorkspaceGuardPlugin } from './chunk-OQLDXOZ3.js';
+import './chunk-CBZNP6RF.js';
+import './chunk-XE4OXN2W.js';
+//# sourceMappingURL=workspace-guard-4BUG4ZP2.js.map
+//# sourceMappingURL=workspace-guard-4BUG4ZP2.js.map

package/dist/{workspace-guard-3JLBFAMH.js.map → workspace-guard-4BUG4ZP2.js.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"workspace-guard-3JLBFAMH.js"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"workspace-guard-4BUG4ZP2.js"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@burdenoff/be-sdk",
-  "version": "2026.602.2",
+  "version": "2026.611.1",
   "description": "Backend SDK for Burdenoff products providing unified access to notifications, RBAC, activity tracking, usage monitoring, and more",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -117,7 +117,8 @@
   "dependencies": {
     "@graphql-yoga/logger": "^2.0.1",
     "@prisma/generator-helper": "^7.2.0",
-    "@sinclair/typebox": "^0.34.45"
+    "@sinclair/typebox": "^0.34.45",
+    "jsonwebtoken": "^9.0.2"
   },
   "peerDependencies": {
     "@clickhouse/client": "^1.14.0",
@@ -138,7 +139,6 @@
     "graphql-yoga": "^5.17.0",
     "@valkey/valkey-glide": "^2.2.6",
     "jose": "^6.1.2",
-    "jsonwebtoken": "^9.0.2",
     "ioredis": "^5.4.1",
     "pg": "^8.16.3",
     "prom-client": "^15.1.3",
@@ -169,9 +169,6 @@
     "jose": {
       "optional": true
     },
-    "jsonwebtoken": {
-      "optional": true
-    },
     "@temporalio/client": {
       "optional": true
     },
@@ -221,7 +218,6 @@
     "globals": "^16.5.0",
     "@valkey/valkey-glide": "^2.2.6",
     "jose": "^6.1.3",
-    "jsonwebtoken": "^9.0.3",
     "lefthook": "^2.1.1",
     "ioredis": "^5.4.1",
     "pg": "^8.16.3",

package/dist/chunk-OJWJVZY5.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/gateway/index.ts","../src/gateway/service-jwt.ts","../src/gateway/types.ts","../src/gateway/client.ts"],"names":["SIGNING_ENV_VAR","KEY_ID","DEFAULT_TTL_SECONDS","REFRESH_BEFORE_EXP_MS","joseModule","getJose","cache","Map","cacheKey","actorId","ttlSeconds","signServiceJwt","secret","process","env","key","cached","get","expiresAtMs","Date","now","token","joseLib","encoder","TextEncoder","keyBytes","encode","nowSec","Math","floor","expSec","SignJWT","actor_type","setProtectedHeader","alg","typ","kid","setSubject","setIssuer","setIssuedAt","setExpirationTime","sign","set","CircuitState","GatewayErrorType","GatewayError","Error","type","gatewayUrl","statusCode","graphqlErrors","cause","message","options","name","Object","setPrototypeOf","prototype","uuidv4","crypto","randomUUID","hasAuthorizationHeader","headers","keys","toLowerCase","resolveBypassPermissionValue","normalizedToken","trim","CircuitBreaker","state","CLOSED","failures","successes","consecutiveFailures","lastFailureTime","lastSuccessTime","openedAt","failureTimestamps","config","getState","checkStateTransition","recordSuccess","HALF_OPEN","logger","info","recordFailure","push","windowStart","failureWindow","filter","t","length","failureThreshold","OPEN","warn","threshold","allowRequest","forceOpen","forceClose","getStats","elapsed","resetTimeout","GatewayClient","layerManager","internalCircuitBreaker","crossLayerCircuitBreaker","retryConfig","defaultHeaders","timeout","enableLogging","LayerManager","layer","serviceName","serviceIdentity","internalGatewayUrl","crossLayerGatewayUrl","cbConfig","DEFAULT_CIRCUIT_BREAKER_CONFIG","circuitBreaker","DEFAULT_GATEWAY_RETRY_CONFIG","retry","getServiceIdentity","debug","internalUrl","getInternalUrl","crossLayerUrl","getCrossLayerUrl","getInternalGatewayUrl","getCrossLayerGatewayUrl","internalQuery","context","createRequestContext","executeWithRetry","bypassPermission","crossLayerQuery","query","getInternalCircuitBreaker","getCrossLayerCircuitBreaker","getHealthStatus","internal","url","circuitState","stats","crossLayer","updateDefaultHeaders","callType","requestId","workspaceId","startTime","shouldRetryError","error","GRAPHQL_ERROR","CIRCUIT_OPEN","calculateRetryDelay","attempt","min","initialDelay","pow","backoffMultiplier","maxDelay","logRetryAttempt","maxAttempts","delay","settings","skipCircuitBreaker","skipRetry","lastError","result","executeRequest","String","sleep","UNKNOWN_ERROR","buildRequestHeaders","value","entries","undefined","toString","handleGraphQLErrors","duration","errors","errorMessages","map","e","join","handleFetchError","TIMEOUT_ERROR","NETWORK_ERROR","serviceActorId","serviceJwt","body","JSON","stringify","variables","operationName","controller","AbortController","timeoutId","setTimeout","abort","response","fetch","method","signal","clearTimeout","ok","status","statusText","json","hasData","data","ms","Promise","resolve","createGatewayClient","createGatewayClientFromEnv"],"mappings":";;;;;;;AAAA,IAAA,eAAA,GAAA;;;;;;;;;;;;AC6BA,IAAMA,eAAAA,GAAkB,oBAAA;AACxB,IAAMC,MAAAA,GAAS,YAAA;AACf,IAAMC,mBAAAA,GAAsB,EAAA;AAC5B,IAAMC,qBAAAA,GAAwB,GAAA;AAE9B,IAAIC,UAAAA,GAAiC,IAAA;AAErC,eAAeC,OAAAA,GAAAA;AACb,EAAA,IAAI,CAACD,UAAAA,EAAY;AACfA,IAAAA,UAAAA,GAAa,MAAM,OAAO,MAAA,CAAA;AAC5B,EAAA;AACA,EAAA,OAAOA,UAAAA;AACT;AALeC,MAAAA,CAAAA,OAAAA,EAAAA,SAAAA,CAAAA;AAYf,IAAMC,KAAAA,uBAAYC,GAAAA,EAAAA;AAElB,SAASC,QAAAA,CAASC,SAAiBC,UAAAA,EAAkB;AACnD,EAAA,OAAO,CAAA,EAAGD,OAAAA,CAAAA,CAAAA,EAAWC,UAAAA,CAAAA,CAAAA;AACvB;AAFSF,MAAAA,CAAAA,QAAAA,EAAAA,UAAAA,CAAAA;AAQT,eAAsBG,cAAAA,CACpBF,OAAAA,EACAC,UAAAA,GAAqBR,mBAAAA,EAAmB;AAExC,EAAA,MAAMU,MAAAA,GAASC,OAAAA,CAAQC,GAAAA,CAAId,eAAAA,CAAAA;AAC3B,EAAA,IAAI,CAACY,MAAAA,EAAQ;AACX,IAAA,OAAO,IAAA;AACT,EAAA;AAEA,EAAA,MAAMG,GAAAA,GAAMP,QAAAA,CAASC,OAAAA,EAASC,UAAAA,CAAAA;AAC9B,EAAA,MAAMM,MAAAA,GAASV,KAAAA,CAAMW,GAAAA,CAAIF,GAAAA,CAAAA;AACzB,EAAA,IAAIC,UAAUA,MAAAA,CAAOE,WAAAA,GAAcf,qBAAAA,GAAwBgB,IAAAA,CAAKC,KAAG,EAAI;AACrE,IAAA,OAAOJ,MAAAA,CAAOK,KAAAA;AAChB,EAAA;AAEA,EAAA,MAAMC,OAAAA,GAAU,MAAMjB,OAAAA,EAAAA;AACtB,EAAA,MAAMkB,OAAAA,GAAU,IAAIC,WAAAA,EAAAA;AACpB,EAAA,MAAMC,QAAAA,GAAWF,OAAAA,CAAQG,MAAAA,CAAOd,MAAAA,CAAAA;AAEhC,EAAA,MAAMe,SAASC,IAAAA,CAAKC,KAAAA,CAAMV,IAAAA,CAAKC,GAAAA,KAAQ,GAAA,CAAA;AACvC,EAAA,MAAMU,SAASH,MAAAA,GAASjB,UAAAA;AAExB,EAAA,MAAMW,KAAAA,GAAQ,MAAM,IAAIC,OAAAA,CAAQS,OAAAA,CAAQ;IACtCC,UAAAA,EAAY;AACd,GAAA,EACGC,kBAAAA,CAAmB;IAAEC,GAAAA,EAAK,OAAA;IAASC,GAAAA,EAAK,KAAA;IAAOC,GAAAA,EAAKnC;AAAO,GAAA,CAAA,CAC3DoC,UAAAA,CAAW5B,OAAAA,CAAAA,CAKX6B,UAAU7B,OAAAA,CAAAA,CACV8B,WAAAA,CAAYZ,MAAAA,CAAAA,CACZa,iBAAAA,CAAkBV,MAAAA,CAAAA,CAClBW,KAAKhB,QAAAA,CAAAA;AAERnB,EAAAA,KAAAA,CAAMoC,IAAI3B,GAAAA,EAAK;AAAEM,IAAAA,KAAAA;AAAOH,IAAAA,WAAAA,EAAaY,MAAAA,GAAS;GAAK,CAAA;AACnD,EAAA,OAAOT,KAAAA;AACT;AAtCsBV,MAAAA,CAAAA,cAAAA,EAAAA,gBAAAA,CAAAA;;;ACiBf,IAAKgC,YAAAA,6BAAAA,aAAAA,EAAAA;;;;AAAAA,EAAAA,OAAAA,aAAAA;;AA8ML,IAAKC,gBAAAA,6BAAAA,iBAAAA,EAAAA;;;;;;AAAAA,EAAAA,OAAAA,iBAAAA;;AAWL,IAAMC,YAAAA,GAAN,MAAMA,aAAAA,SAAqBC,KAAAA,CAAAA;EApSlC;;;AAqSEC,EAAAA,IAAAA;AACAC,EAAAA,UAAAA;AACAC,EAAAA,UAAAA;AACAC,EAAAA,aAAAA;AACSC,EAAAA,KAAAA;EAET,WAAA,CACEC,OAAAA,EACAL,IAAAA,EACAC,UAAAA,EACAK,OAAAA,EAKA;AACA,IAAA,KAAA,CAAMD,OAAAA,CAAAA;AACN,IAAA,IAAA,CAAKE,IAAAA,GAAO,cAAA;AACZ,IAAA,IAAA,CAAKP,IAAAA,GAAOA,IAAAA;AACZ,IAAA,IAAA,CAAKC,UAAAA,GAAaA,UAAAA;AAClB,IAAA,IAAA,CAAKC,aAAaI,OAAAA,EAASJ,UAAAA;AAC3B,IAAA,IAAA,CAAKC,gBAAgBG,OAAAA,EAASH,aAAAA;AAC9B,IAAA,IAAA,CAAKC,QAAQE,OAAAA,EAASF,KAAAA;AACtBI,IAAAA,MAAAA,CAAOC,cAAAA,CAAe,IAAA,EAAMX,aAAAA,CAAaY,SAAS,CAAA;AACpD,EAAA;AACF;;;ACtQA,IAAMC,MAAAA,mBAAS,MAAA,CAAA,MAAcC,MAAAA,CAAOC,UAAAA,EAAU,EAA/B,QAAA,CAAA;AASf,SAASC,uBAAuBC,OAAAA,EAA+B;AAC7D,EAAA,KAAA,MAAW/C,GAAAA,IAAOwC,MAAAA,CAAOQ,IAAAA,CAAKD,OAAAA,CAAAA,EAAU;AACtC,IAAA,IAAI/C,GAAAA,CAAIiD,WAAAA,EAAW,KAAO,eAAA,EAAiB,OAAO,IAAA;AACpD,EAAA;AACA,EAAA,OAAO,KAAA;AACT;AALSH,MAAAA,CAAAA,sBAAAA,EAAAA,wBAAAA,CAAAA;AAOF,SAASI,4BAAAA,CACd5C,KAAAA,GAA4BR,OAAAA,CAAQC,GAAAA,CAAI,wBAAA,CAAA,EAAyB;AAEjE,EAAA,MAAMoD,eAAAA,GAAkB7C,OAAO8C,IAAAA,EAAAA;AAE/B,EAAA,IAAI,CAACD,eAAAA,EAAiB;AACpB,IAAA,MAAM,IAAIpB,MAAM,4EAAA,CAAA;AAClB,EAAA;AAEA,EAAA,OAAOoB,eAAAA;AACT;AAVgBD,MAAAA,CAAAA,4BAAAA,EAAAA,8BAAAA,CAAAA;AAehB,IAAMG,cAAAA,GAAN,MAAMA,eAAAA,CAAAA;EAvFN;;;AAwFUC,EAAAA,KAAAA,GAAsB1B,YAAAA,CAAa2B,MAAAA;EACnCC,QAAAA,GAAW,CAAA;EACXC,SAAAA,GAAY,CAAA;EACZC,mBAAAA,GAAsB,CAAA;EACtBC,eAAAA,GAAiC,IAAA;EACjCC,eAAAA,GAAiC,IAAA;EACjCC,QAAAA,GAA0B,IAAA;AAC1BC,EAAAA,iBAAAA,GAA8B,EAAA;AAC9BC,EAAAA,MAAAA;AAER,EAAA,WAAA,CAAYA,MAAAA,EAA8B;AACxC,IAAA,IAAA,CAAKA,MAAAA,GAASA,MAAAA;AAChB,EAAA;EAEAC,QAAAA,GAAyB;AACvB,IAAA,IAAA,CAAKC,oBAAAA,EAAoB;AACzB,IAAA,OAAO,IAAA,CAAKX,KAAAA;AACd,EAAA;EAEAY,aAAAA,GAAsB;AACpB,IAAA,IAAA,CAAKT,SAAAA,EAAAA;AACL,IAAA,IAAA,CAAKC,mBAAAA,GAAsB,CAAA;AAC3B,IAAA,IAAA,CAAKE,eAAAA,GAAkBxD,KAAKC,GAAAA,EAAG;AAE/B,IAAA,IAAI,IAAA,CAAKiD,KAAAA,KAAU1B,YAAAA,CAAauC,SAAAA,EAAW;AACzC,MAAA,IAAA,CAAKb,QAAQ1B,YAAAA,CAAa2B,MAAAA;AAC1B,MAAA,IAAA,CAAKC,QAAAA,GAAW,CAAA;AAChB,MAAA,IAAA,CAAKM,oBAAoB,EAAA;AACzB,MAAA,IAAA,CAAKD,QAAAA,GAAW,IAAA;AAChBO,MAAAA,MAAAA,CAAOC,KAAK,uDAAA,CAAA;AACd,IAAA;AACF,EAAA;EAEAC,aAAAA,GAAsB;AACpB,IAAA,IAAA,CAAKd,QAAAA,EAAAA;AACL,IAAA,IAAA,CAAKE,mBAAAA,EAAAA;AACL,IAAA,IAAA,CAAKC,eAAAA,GAAkBvD,KAAKC,GAAAA,EAAG;AAC/B,IAAA,IAAA,CAAKyD,iBAAAA,CAAkBS,IAAAA,CAAKnE,IAAAA,CAAKC,GAAAA,EAAG,CAAA;AAGpC,IAAA,MAAMmE,WAAAA,GAAcpE,IAAAA,CAAKC,GAAAA,EAAG,GAAK,KAAK0D,MAAAA,CAAOU,aAAAA;AAC7C,IAAA,IAAA,CAAKX,oBAAoB,IAAA,CAAKA,iBAAAA,CAAkBY,OAAO,CAACC,CAAAA,KAAMA,IAAIH,WAAAA,CAAAA;AAGlE,IAAA,IAAI,IAAA,CAAKlB,UAAU1B,YAAAA,CAAa2B,MAAAA,IAAU,KAAKO,iBAAAA,CAAkBc,MAAAA,IAAU,IAAA,CAAKb,MAAAA,CAAOc,gBAAAA,EAAkB;AACvG,MAAA,IAAA,CAAKvB,QAAQ1B,YAAAA,CAAakD,IAAAA;AAC1B,MAAA,IAAA,CAAKjB,QAAAA,GAAWzD,KAAKC,GAAAA,EAAG;AACxB+D,MAAAA,MAAAA,CAAOW,KAAK,iDAAA,EAAmD;AAC7DvB,QAAAA,QAAAA,EAAU,KAAKM,iBAAAA,CAAkBc,MAAAA;AACjCI,QAAAA,SAAAA,EAAW,KAAKjB,MAAAA,CAAOc;OACzB,CAAA;AACF,IAAA;AAGA,IAAA,IAAI,IAAA,CAAKvB,KAAAA,KAAU1B,YAAAA,CAAauC,SAAAA,EAAW;AACzC,MAAA,IAAA,CAAKb,QAAQ1B,YAAAA,CAAakD,IAAAA;AAC1B,MAAA,IAAA,CAAKjB,QAAAA,GAAWzD,KAAKC,GAAAA,EAAG;AACxB+D,MAAAA,MAAAA,CAAOW,KAAK,sDAAA,CAAA;AACd,IAAA;AACF,EAAA;EAEAE,YAAAA,GAAwB;AACtB,IAAA,IAAA,CAAKhB,oBAAAA,EAAoB;AAEzB,IAAA,QAAQ,KAAKX,KAAAA;AACX,MAAA,KAAK1B,YAAAA,CAAa2B,MAAAA;AAChB,QAAA,OAAO,IAAA;AACT,MAAA,KAAK3B,YAAAA,CAAakD,IAAAA;AAChB,QAAA,OAAO,KAAA;AACT,MAAA,KAAKlD,YAAAA,CAAauC,SAAAA;AAEhB,QAAA,OAAO,IAAA;AACT,MAAA;AACE,QAAA,OAAO,IAAA;AACX;AACF,EAAA;EAEAe,SAAAA,GAAkB;AAChB,IAAA,IAAA,CAAK5B,QAAQ1B,YAAAA,CAAakD,IAAAA;AAC1B,IAAA,IAAA,CAAKjB,QAAAA,GAAWzD,KAAKC,GAAAA,EAAG;AACxB+D,IAAAA,MAAAA,CAAOC,KAAK,uCAAA,CAAA;AACd,EAAA;EAEAc,UAAAA,GAAmB;AACjB,IAAA,IAAA,CAAK7B,QAAQ1B,YAAAA,CAAa2B,MAAAA;AAC1B,IAAA,IAAA,CAAKC,QAAAA,GAAW,CAAA;AAChB,IAAA,IAAA,CAAKE,mBAAAA,GAAsB,CAAA;AAC3B,IAAA,IAAA,CAAKI,oBAAoB,EAAA;AACzB,IAAA,IAAA,CAAKD,QAAAA,GAAW,IAAA;AAChBO,IAAAA,MAAAA,CAAOC,KAAK,uCAAA,CAAA;AACd,EAAA;EAEAe,QAAAA,GAAgC;AAC9B,IAAA,OAAO;AACL9B,MAAAA,KAAAA,EAAO,IAAA,CAAKA,KAAAA;AACZE,MAAAA,QAAAA,EAAU,IAAA,CAAKA,QAAAA;AACfC,MAAAA,SAAAA,EAAW,IAAA,CAAKA,SAAAA;AAChBC,MAAAA,mBAAAA,EAAqB,IAAA,CAAKA,mBAAAA;AAC1BC,MAAAA,eAAAA,EAAiB,IAAA,CAAKA,eAAAA;AACtBC,MAAAA,eAAAA,EAAiB,IAAA,CAAKA,eAAAA;AACtBC,MAAAA,QAAAA,EAAU,IAAA,CAAKA;AACjB,KAAA;AACF,EAAA;EAEQI,oBAAAA,GAA6B;AACnC,IAAA,IAAI,IAAA,CAAKX,KAAAA,KAAU1B,YAAAA,CAAakD,IAAAA,IAAQ,KAAKjB,QAAAA,EAAU;AACrD,MAAA,MAAMwB,OAAAA,GAAUjF,IAAAA,CAAKC,GAAAA,EAAG,GAAK,IAAA,CAAKwD,QAAAA;AAClC,MAAA,IAAIwB,OAAAA,IAAW,IAAA,CAAKtB,MAAAA,CAAOuB,YAAAA,EAAc;AACvC,QAAA,IAAA,CAAKhC,QAAQ1B,YAAAA,CAAauC,SAAAA;AAC1BC,QAAAA,MAAAA,CAAOC,KAAK,qDAAA,CAAA;AACd,MAAA;AACF,IAAA;AACF,EAAA;AACF,CAAA;AAKO,IAAMkB,gBAAN,MAAMA;EA9Mb;;;AA+MUxB,EAAAA,MAAAA;AACAyB,EAAAA,YAAAA;AACAC,EAAAA,sBAAAA;AACAC,EAAAA,wBAAAA;AACAC,EAAAA,WAAAA;AACAC,EAAAA,cAAAA;AAER,EAAA,WAAA,CAAY7B,MAAAA,EAA6B;AACvC,IAAA,IAAA,CAAKA,MAAAA,GAAS;MACZ8B,OAAAA,EAAS,GAAA;MACTC,aAAAA,EAAe,IAAA;MACf,GAAG/B;AACL,KAAA;AAGA,IAAA,IAAA,CAAKyB,YAAAA,GAAe,IAAIO,YAAAA,CAAa;AACnCC,MAAAA,KAAAA,EAAOjC,MAAAA,CAAOiC,KAAAA;AACdC,MAAAA,WAAAA,EAAalC,MAAAA,CAAOkC,WAAAA;AACpBC,MAAAA,eAAAA,EAAiBnC,MAAAA,CAAOmC;KAC1B,CAAA;AAGA,IAAA,IAAInC,OAAOoC,kBAAAA,EAAoB;AAG/B,IAAA,IAAIpC,OAAOqC,oBAAAA,EAAsB;AAKjC,IAAA,MAAMC,QAAAA,GAAiC;MACrC,GAAGC,8BAAAA;AACH,MAAA,GAAGvC,MAAAA,CAAOwC;AACZ,KAAA;AACA,IAAA,IAAA,CAAKd,sBAAAA,GAAyB,IAAIpC,cAAAA,CAAegD,QAAAA,CAAAA;AACjD,IAAA,IAAA,CAAKX,wBAAAA,GAA2B,IAAIrC,cAAAA,CAAegD,QAAAA,CAAAA;AAGnD,IAAA,IAAA,CAAKV,WAAAA,GAAc;MACjB,GAAGa,4BAAAA;AACH,MAAA,GAAGzC,MAAAA,CAAO0C;AACZ,KAAA;AAGA,IAAA,IAAA,CAAKb,cAAAA,GAAiB;MACpB,oBAAA,EAAsB,IAAA,CAAKJ,aAAakB,kBAAAA,EAAkB;MAC1D,cAAA,EAAgB,SAAA;AAChB,MAAA,GAAG3C,MAAAA,CAAO6B;AACZ,KAAA;AAEAxB,IAAAA,MAAAA,CAAOuC,MAAM,6BAAA,EAA+B;AAC1CX,MAAAA,KAAAA,EAAOjC,MAAAA,CAAOiC,KAAAA;AACdC,MAAAA,WAAAA,EAAalC,MAAAA,CAAOkC,WAAAA;AACpBW,MAAAA,WAAAA,EAAa,KAAKC,cAAAA,EAAc;AAChCC,MAAAA,aAAAA,EAAe,KAAKC,gBAAAA;KACtB,CAAA;AACF,EAAA;EAEQF,cAAAA,GAAyB;AAC/B,IAAA,OAAO,IAAA,CAAK9C,MAAAA,CAAOoC,kBAAAA,IAAsB,IAAA,CAAKX,aAAawB,qBAAAA,EAAqB;AAClF,EAAA;EAEQD,gBAAAA,GAA2B;AACjC,IAAA,OAAO,IAAA,CAAKhD,MAAAA,CAAOqC,oBAAAA,IAAwB,IAAA,CAAKZ,aAAayB,uBAAAA,EAAuB;AACtF,EAAA;;;;AAKA,EAAA,MAAMC,cAA2B5E,OAAAA,EAA6D;AAC5F,IAAA,MAAM6E,OAAAA,GAAU,IAAA,CAAKC,oBAAAA,CAAqB,UAAA,EAAY9E,OAAAA,CAAAA;AAEtD,IAAA,OAAO,IAAA,CAAK+E,iBAAiB,IAAA,CAAKR,cAAAA,IAAkBvE,OAAAA,EAAS,IAAA,CAAKmD,wBAAwB0B,OAAAA,EAAS;MACjGG,gBAAAA,EAAkB;KACpB,CAAA;AACF,EAAA;;;;AAKA,EAAA,MAAMC,gBAA6BjF,OAAAA,EAA6D;AAC9F,IAAA,MAAM6E,OAAAA,GAAU,IAAA,CAAKC,oBAAAA,CAAqB,aAAA,EAAe9E,OAAAA,CAAAA;AAEzD,IAAA,OAAO,IAAA,CAAK+E,gBAAAA;AACV,MAAA,IAAA,CAAKN,gBAAAA,EAAgB;AACrBzE,MAAAA,OAAAA;MACA,IAAA,CAAKoD,wBAAAA;AACLyB,MAAAA,OAAAA;AACA,MAAA;QAAEG,gBAAAA,EAAkB;AAAM;;;AAE9B,EAAA;;;;EAKA,MAAME,KAAAA,CAAmBvF,YAAoBK,OAAAA,EAA6D;AACxG,IAAA,MAAM6E,OAAAA,GAAU,IAAA,CAAKC,oBAAAA,CAAqB,QAAA,EAAU9E,OAAAA,CAAAA;AAGpD,IAAA,OAAO,KAAK+E,gBAAAA,CAAiBpF,UAAAA,EAAYK,OAAAA,EAAS,IAAA,CAAKmD,wBAAwB0B,OAAAA,EAAS;MACtFG,gBAAAA,EAAkB;KACpB,CAAA;AACF,EAAA;EAEAG,yBAAAA,GAA6C;AAC3C,IAAA,OAAO,IAAA,CAAKhC,sBAAAA;AACd,EAAA;EAEAiC,2BAAAA,GAA+C;AAC7C,IAAA,OAAO,IAAA,CAAKhC,wBAAAA;AACd,EAAA;EAEAiC,eAAAA,GAAuC;AACrC,IAAA,OAAO;MACLC,QAAAA,EAAU;AACRC,QAAAA,GAAAA,EAAK,KAAKhB,cAAAA,EAAc;QACxBiB,YAAAA,EAAc,IAAA,CAAKrC,uBAAuBzB,QAAAA,EAAQ;QAClD+D,KAAAA,EAAO,IAAA,CAAKtC,uBAAuBL,QAAAA;AACrC,OAAA;MACA4C,UAAAA,EAAY;AACVH,QAAAA,GAAAA,EAAK,KAAKd,gBAAAA,EAAgB;QAC1Be,YAAAA,EAAc,IAAA,CAAKpC,yBAAyB1B,QAAAA,EAAQ;QACpD+D,KAAAA,EAAO,IAAA,CAAKrC,yBAAyBN,QAAAA;AACvC;AACF,KAAA;AACF,EAAA;AAEA6C,EAAAA,oBAAAA,CAAqBlF,OAAAA,EAA+C;AAClE,IAAA,IAAA,CAAK6C,cAAAA,GAAiB;AAAE,MAAA,GAAG,IAAA,CAAKA,cAAAA;MAAgB,GAAG7C;AAAQ,KAAA;AAC7D,EAAA;AAEQqE,EAAAA,oBAAAA,CACNc,UACA5F,OAAAA,EACgB;AAChB,IAAA,OAAO;AACL6F,MAAAA,SAAAA,EAAWxF,MAAAA,EAAAA;AACXjD,MAAAA,OAAAA,EAAS4C,QAAQS,OAAAA,GAAU,YAAA,CAAA,IAAiB,IAAA,CAAK6C,eAAe,YAAA,CAAA;AAChEwC,MAAAA,WAAAA,EAAa9F,QAAQS,OAAAA,GAAU,gBAAA,CAAA,IAAqB,IAAA,CAAK6C,eAAe,gBAAA,CAAA;AACxEyC,MAAAA,SAAAA,EAAWjI,KAAKC,GAAAA,EAAG;AACnB6H,MAAAA;AACF,KAAA;AACF,EAAA;;;;AAKQI,EAAAA,gBAAAA,CAAiBC,KAAAA,EAAyB;AAChD,IAAA,IAAI,EAAEA,iBAAiBzG,YAAAA,CAAAA,EAAe;AACpC,MAAA,OAAO,IAAA;AACT,IAAA;AAEA,IAAA,OAAOyG,MAAMvG,IAAAA,KAASH,gBAAAA,CAAiB2G,aAAAA,IAAiBD,KAAAA,CAAMvG,SAASH,gBAAAA,CAAiB4G,YAAAA;AAC1F,EAAA;;;;AAKQC,EAAAA,mBAAAA,CAAoBC,OAAAA,EAAyB;AACnD,IAAA,OAAO9H,IAAAA,CAAK+H,GAAAA,CACV,IAAA,CAAKjD,WAAAA,CAAYkD,eAAehI,IAAAA,CAAKiI,GAAAA,CAAI,IAAA,CAAKnD,WAAAA,CAAYoD,mBAAmBJ,OAAAA,GAAU,CAAA,CAAA,EACvF,IAAA,CAAKhD,YAAYqD,QAAQ,CAAA;AAE7B,EAAA;;;;AAKQC,EAAAA,eAAAA,CACN9B,OAAAA,EACAwB,OAAAA,EACAO,WAAAA,EACAC,KAAAA,EACAZ,KAAAA,EACM;AACN,IAAA,IAAI,IAAA,CAAKxE,OAAO+B,aAAAA,EAAe;AAC7B1B,MAAAA,MAAAA,CAAOW,KAAK,0CAAA,EAA4C;AACtDoD,QAAAA,SAAAA,EAAWhB,OAAAA,CAAQgB,SAAAA;AACnBQ,QAAAA,OAAAA;AACAO,QAAAA,WAAAA;AACAC,QAAAA,KAAAA;AACAZ,QAAAA,KAAAA,EAAOA,KAAAA,CAAMlG;OACf,CAAA;AACF,IAAA;AACF,EAAA;AAEA,EAAA,MAAcgF,gBAAAA,CACZpF,UAAAA,EACAK,OAAAA,EACAiE,cAAAA,EACAY,SACAiC,QAAAA,EAC6B;AAE7B,IAAA,IAAI,CAAC9G,OAAAA,CAAQ+G,kBAAAA,IAAsB,CAAC9C,cAAAA,CAAetB,cAAY,EAAI;AACjE,MAAA,MAAM,IAAInD,YAAAA,CAAa,CAAA,4BAAA,EAA+BG,UAAAA,CAAAA,CAAAA,EAAcJ,gBAAAA,CAAiB4G,cAAcxG,UAAAA,CAAAA;AACrG,IAAA;AAEA,IAAA,MAAMiH,WAAAA,GAAc5G,OAAAA,CAAQgH,SAAAA,GAAY,CAAA,GAAI,KAAK3D,WAAAA,CAAYuD,WAAAA;AAC7D,IAAA,IAAIK,SAAAA,GAA0B,IAAA;AAE9B,IAAA,KAAA,IAASZ,OAAAA,GAAU,CAAA,EAAGA,OAAAA,IAAWO,WAAAA,EAAaP,OAAAA,EAAAA,EAAW;AACvD,MAAA,IAAI;AACF,QAAA,MAAMa,MAAAA,GAAS,MAAM,IAAA,CAAKC,cAAAA,CAAkBxH,YAAYK,OAAAA,EAAS6E,OAAAA,EAASiC,SAAS9B,gBAAgB,CAAA;AACnG,QAAA,IAAI,CAAChF,QAAQ+G,kBAAAA,EAAoB;AAC/B9C,UAAAA,cAAAA,CAAerC,aAAAA,EAAa;AAC9B,QAAA;AACA,QAAA,OAAOsF,MAAAA;AACT,MAAA,CAAA,CAAA,OAASjB,KAAAA,EAAO;AACdgB,QAAAA,SAAAA,GAAYhB,iBAAiBxG,KAAAA,GAAQwG,KAAAA,GAAQ,IAAIxG,KAAAA,CAAM2H,MAAAA,CAAOnB,KAAAA,CAAAA,CAAAA;AAC9D,QAAA,IAAI,CAACjG,QAAQ+G,kBAAAA,EAAoB;AAC/B9C,UAAAA,cAAAA,CAAejC,aAAAA,EAAa;AAC9B,QAAA;AAEA,QAAA,IAAI,CAAC,IAAA,CAAKgE,gBAAAA,CAAiBC,KAAAA,CAAAA,EAAQ;AACjC,UAAA,MAAMA,KAAAA;AACR,QAAA;AAEA,QAAA,IAAII,UAAUO,WAAAA,EAAa;AACzB,UAAA,MAAMC,KAAAA,GAAQ,IAAA,CAAKT,mBAAAA,CAAoBC,OAAAA,CAAAA;AACvC,UAAA,IAAA,CAAKM,eAAAA,CAAgB9B,OAAAA,EAASwB,OAAAA,EAASO,WAAAA,EAAaC,OAAOI,SAAAA,CAAAA;AAC3D,UAAA,MAAM,IAAA,CAAKI,MAAMR,KAAAA,CAAAA;AACnB,QAAA;AACF,MAAA;AACF,IAAA;AAEA,IAAA,MAAMI,aAAa,IAAIzH,YAAAA,CAAa,8BAAA,EAAgCD,gBAAAA,CAAiB+H,eAAe3H,UAAAA,CAAAA;AACtG,EAAA;;;;EAKQ4H,mBAAAA,CACN1C,OAAAA,EACA7E,SACAgF,gBAAAA,EACwB;AACxB,IAAA,MAAMvE,OAAAA,GAAkC;MACtC,cAAA,EAAgB,kBAAA;AAChB,MAAA,cAAA,EAAgBoE,OAAAA,CAAQgB,SAAAA;AACxB,MAAA,aAAA,EAAehB,OAAAA,CAAQe;AACzB,KAAA;AAGA,IAAA,KAAA,MAAW,CAAClI,KAAK8J,KAAAA,CAAAA,IAAUtH,OAAOuH,OAAAA,CAAQ,IAAA,CAAKnE,cAAc,CAAA,EAAG;AAC9D,MAAA,IAAIkE,UAAUE,MAAAA,EAAW;AACvBjH,QAAAA,OAAAA,CAAQ/C,GAAAA,CAAAA,GAAO0J,MAAAA,CAAOI,KAAAA,CAAAA;AACxB,MAAA;AACF,IAAA;AAGA,IAAA,IAAIxH,QAAQS,OAAAA,EAAS;AACnB,MAAA,KAAA,MAAW,CAAC/C,KAAK8J,KAAAA,CAAAA,IAAUtH,OAAOuH,OAAAA,CAAQzH,OAAAA,CAAQS,OAAO,CAAA,EAAG;AAC1D,QAAA,IAAI+G,UAAUE,MAAAA,EAAW;AACvBjH,UAAAA,OAAAA,CAAQ/C,GAAAA,CAAAA,GAAO0J,MAAAA,CAAOI,KAAAA,CAAAA;AACxB,QAAA;AACF,MAAA;AACF,IAAA;AAGA,IAAA,IAAIxC,gBAAAA,EAAkB;AACpBvE,MAAAA,OAAAA,CAAQ,qBAAA,IAAyBG,4BAAAA,EAAAA;AACjCH,MAAAA,OAAAA,CAAQ,iBAAA,CAAA,GAAqB,IAAA,CAAKyC,YAAAA,CAAakB,kBAAAA,EAAkB;AACjE3D,MAAAA,OAAAA,CAAQ,oBAAA,CAAA,GAAwB3C,IAAAA,CAAKC,GAAAA,GAAM4J,QAAAA,EAAQ;AACrD,IAAA;AAEA,IAAA,OAAOlH,OAAAA;AACT,EAAA;;;;EAKQmH,mBAAAA,CACNV,MAAAA,EACArC,OAAAA,EACAlF,UAAAA,EACAkI,QAAAA,EACM;AACN,IAAA,IAAI,CAACX,MAAAA,CAAOY,MAAAA,IAAUZ,MAAAA,CAAOY,MAAAA,CAAOxF,WAAW,CAAA,EAAG;AAChD,MAAA;AACF,IAAA;AAEA,IAAA,MAAMyF,aAAAA,GAAgBb,MAAAA,CAAOY,MAAAA,CAAOE,GAAAA,CAAI,CAACC,MAAoBA,CAAAA,CAAElI,OAAO,CAAA,CAAEmI,IAAAA,CAAK,IAAA,CAAA;AAE7E,IAAA,IAAI,IAAA,CAAKzG,OAAO+B,aAAAA,EAAe;AAC7B1B,MAAAA,MAAAA,CAAOW,KAAK,gCAAA,EAAkC;AAC5CoD,QAAAA,SAAAA,EAAWhB,OAAAA,CAAQgB,SAAAA;AACnBiC,QAAAA,MAAAA,EAAQZ,MAAAA,CAAOY,MAAAA;AACfD,QAAAA;OACF,CAAA;AACF,IAAA;AAEA,IAAA,MAAM,IAAIrI,YAAAA,CAAa,CAAA,eAAA,EAAkBuI,aAAAA,CAAAA,CAAAA,EAAiBxI,gBAAAA,CAAiB2G,eAAevG,UAAAA,EAAY;AACpGE,MAAAA,aAAAA,EAAeqH,MAAAA,CAAOY;KACxB,CAAA;AACF,EAAA;;;;AAKQK,EAAAA,gBAAAA,CACNlC,KAAAA,EACApB,OAAAA,EACAlF,UAAAA,EACA4D,OAAAA,EACAsE,QAAAA,EACO;AACP,IAAA,IAAI5B,iBAAiBzG,YAAAA,EAAc;AACjC,MAAA,MAAMyG,KAAAA;AACR,IAAA;AAEA,IAAA,IAAIA,iBAAiBxG,KAAAA,EAAO;AAC1B,MAAA,IAAIwG,KAAAA,CAAMhG,SAAS,YAAA,EAAc;AAC/B,QAAA,MAAM,IAAIT,YAAAA,CAAa,CAAA,wBAAA,EAA2B+D,OAAAA,CAAAA,EAAAA,CAAAA,EAAahE,gBAAAA,CAAiB6I,eAAezI,UAAAA,EAAY;UACzGG,KAAAA,EAAOmG;SACT,CAAA;AACF,MAAA;AAEA,MAAA,IAAI,IAAA,CAAKxE,OAAO+B,aAAAA,EAAe;AAC7B1B,QAAAA,MAAAA,CAAOmE,MAAM,gCAAA,EAAkC;AAC7CJ,UAAAA,SAAAA,EAAWhB,OAAAA,CAAQgB,SAAAA;AACnBI,UAAAA,KAAAA,EAAOA,KAAAA,CAAMlG,OAAAA;AACb8H,UAAAA;SACF,CAAA;AACF,MAAA;AAEA,MAAA,MAAM,IAAIrI,YAAAA,CAAayG,KAAAA,CAAMlG,OAAAA,EAASR,gBAAAA,CAAiB8I,eAAe1I,UAAAA,EAAY;QAChFG,KAAAA,EAAOmG;OACT,CAAA;AACF,IAAA;AAEA,IAAA,MAAM,IAAIzG,YAAAA,CAAa4H,MAAAA,CAAOnB,KAAAA,CAAAA,EAAQ1G,gBAAAA,CAAiB+H,eAAe3H,UAAAA,CAAAA;AACxE,EAAA;AAEA,EAAA,MAAcwH,cAAAA,CACZxH,UAAAA,EACAK,OAAAA,EACA6E,OAAAA,EACAG,gBAAAA,EAC6B;AAC7B,IAAA,MAAMzB,OAAAA,GAAUvD,OAAAA,CAAQuD,OAAAA,IAAW,IAAA,CAAK9B,OAAO8B,OAAAA,IAAW,GAAA;AAC1D,IAAA,MAAM9C,OAAAA,GAAU,IAAA,CAAK8G,mBAAAA,CAAoB1C,OAAAA,EAAS7E,SAASgF,gBAAAA,CAAAA;AAQ3D,IAAA,IAAIH,QAAQe,QAAAA,KAAa,aAAA,IAAiB,CAACpF,sBAAAA,CAAuBC,OAAAA,CAAAA,EAAU;AAC1E,MAAA,MAAM6H,cAAAA,GAAiB,IAAA,CAAKpF,YAAAA,CAAakB,kBAAAA,EAAkB;AAC3D,MAAA,MAAMmE,UAAAA,GAAa,MAAMjL,cAAAA,CAAegL,cAAAA,CAAAA;AACxC,MAAA,IAAIC,UAAAA,EAAY;AACd9H,QAAAA,OAAAA,CAAQ,eAAA,CAAA,GAAmB,CAAA,OAAA,EAAU8H,UAAAA,CAAAA,CAAAA;MACvC,CAAA,MAAA,IAAW,IAAA,CAAK9G,OAAO+B,aAAAA,EAAe;AAKpC1B,QAAAA,MAAAA,CAAOuC,MACL,4GAAA,EACA;AAAEwB,UAAAA,SAAAA,EAAWhB,OAAAA,CAAQgB,SAAAA;AAAWlG,UAAAA;SAAW,CAAA;AAE/C,MAAA;AACF,IAAA;AAEA,IAAA,MAAM6I,IAAAA,GAAOC,KAAKC,SAAAA,CAAU;AAC1BxD,MAAAA,KAAAA,EAAOlF,OAAAA,CAAQkF,KAAAA;MACfyD,SAAAA,EAAW3I,OAAAA,CAAQ2I,aAAa,EAAC;AACjCC,MAAAA,aAAAA,EAAe5I,OAAAA,CAAQ4I;KACzB,CAAA;AAEA,IAAA,IAAI,IAAA,CAAKnH,OAAO+B,aAAAA,EAAe;AAC7B1B,MAAAA,MAAAA,CAAOuC,MAAM,mCAAA,EAAqC;AAChDwB,QAAAA,SAAAA,EAAWhB,OAAAA,CAAQgB,SAAAA;AACnBlG,QAAAA,UAAAA;AACAiJ,QAAAA,aAAAA,EAAe5I,OAAAA,CAAQ4I,aAAAA;AACvBhD,QAAAA,QAAAA,EAAUf,OAAAA,CAAQe,QAAAA;AAClBZ,QAAAA;OACF,CAAA;AACF,IAAA;AAEA,IAAA,IAAI;AACF,MAAA,MAAM6D,UAAAA,GAAa,IAAIC,eAAAA,EAAAA;AACvB,MAAA,MAAMC,YAAYC,UAAAA,CAAW,MAAMH,UAAAA,CAAWI,KAAAA,IAAS1F,OAAAA,CAAAA;AAEvD,MAAA,MAAM2F,QAAAA,GAAW,MAAMC,KAAAA,CAAMxJ,UAAAA,EAAY;QACvCyJ,MAAAA,EAAQ,MAAA;AACR3I,QAAAA,OAAAA;AACA+H,QAAAA,IAAAA;AACAa,QAAAA,MAAAA,EAAQR,UAAAA,CAAWQ;OACrB,CAAA;AAEAC,MAAAA,YAAAA,CAAaP,SAAAA,CAAAA;AACb,MAAA,MAAMlB,QAAAA,GAAW/J,IAAAA,CAAKC,GAAAA,EAAG,GAAK8G,OAAAA,CAAQkB,SAAAA;AAEtC,MAAA,IAAI,CAACmD,SAASK,EAAAA,EAAI;AAChB,QAAA,MAAM,IAAI/J,YAAAA,CACR,CAAA,KAAA,EAAQ0J,QAAAA,CAASM,MAAM,CAAA,EAAA,EAAKN,QAAAA,CAASO,UAAU,CAAA,CAAA,EAC/ClK,gBAAAA,CAAiB8I,aAAAA,EACjB1I,UAAAA,EACA;AAAEC,UAAAA,UAAAA,EAAYsJ,QAAAA,CAASM;SAAO,CAAA;AAElC,MAAA;AAEA,MAAA,MAAMtC,MAAAA,GAAU,MAAMgC,QAAAA,CAASQ,IAAAA,EAAI;AACnC,MAAA,IAAA,CAAK9B,mBAAAA,CAAoBV,MAAAA,EAAQrC,OAAAA,EAASlF,UAAAA,EAAYkI,QAAAA,CAAAA;AAEtD,MAAA,IAAI,IAAA,CAAKpG,OAAO+B,aAAAA,EAAe;AAC7B1B,QAAAA,MAAAA,CAAOuC,MAAM,mCAAA,EAAqC;AAChDwB,UAAAA,SAAAA,EAAWhB,OAAAA,CAAQgB,SAAAA;AACnBgC,UAAAA,QAAAA;UACA8B,OAAAA,EAAS,CAAC,CAACzC,MAAAA,CAAO0C;SACpB,CAAA;AACF,MAAA;AAEA,MAAA,OAAO1C,MAAAA;AACT,IAAA,CAAA,CAAA,OAASjB,KAAAA,EAAO;AACd,MAAA,MAAM4B,QAAAA,GAAW/J,IAAAA,CAAKC,GAAAA,EAAG,GAAK8G,OAAAA,CAAQkB,SAAAA;AACtC,MAAA,IAAA,CAAKoC,gBAAAA,CAAiBlC,KAAAA,EAAOpB,OAAAA,EAASlF,UAAAA,EAAY4D,SAASsE,QAAAA,CAAAA;AAC7D,IAAA;AACF,EAAA;AAEQR,EAAAA,KAAAA,CAAMwC,EAAAA,EAA2B;AACvC,IAAA,OAAO,IAAIC,OAAAA,CAAQ,CAACC,YAAYf,UAAAA,CAAWe,OAAAA,EAASF,EAAAA,CAAAA,CAAAA;AACtD,EAAA;AACF;AAKO,SAASG,oBAAoBvI,MAAAA,EAA2B;AAC7D,EAAA,OAAO,IAAIwB,cAAcxB,MAAAA,CAAAA;AAC3B;AAFgBuI,MAAAA,CAAAA,mBAAAA,EAAAA,qBAAAA,CAAAA;AAgBT,SAASC,0BAAAA,GAAAA;AACd,EAAA,MAAMvG,KAAAA,GAAQlG,OAAAA,CAAQC,GAAAA,CAAI,eAAA,CAAA;AAE1B,EAAA,IAAI,CAACiG,KAAAA,IAAUA,KAAAA,KAAU,QAAA,IAAYA,UAAU,QAAA,EAAW;AACxD,IAAA,MAAM,IAAIjE,KAAAA,CAAM,CAAA,sFAAA,EAAyFiE,KAAAA,CAAAA,CAAAA,CAAQ,CAAA;AACnH,EAAA;AAEA,EAAA,MAAMC,WAAAA,GAAcnG,OAAAA,CAAQC,GAAAA,CAAI,cAAA,CAAA;AAChC,EAAA,IAAI,CAACkG,WAAAA,EAAa;AAChB,IAAA,MAAM,IAAIlE,MAAM,+DAAA,CAAA;AAClB,EAAA;AAEA,EAAA,MAAMmE,eAAAA,GAAkBpG,OAAAA,CAAQC,GAAAA,CAAI,kBAAA,CAAA,IAAuBkG,WAAAA;AAE3D,EAAA,OAAO,IAAIV,aAAAA,CAAc;AACvBS,IAAAA,KAAAA;AACAC,IAAAA,WAAAA;AACAC,IAAAA;GACF,CAAA;AACF;AAnBgBqG,MAAAA,CAAAA,0BAAAA,EAAAA,4BAAAA,CAAAA","file":"chunk-OJWJVZY5.js","sourcesContent":["/**\n * Gateway Module\n *\n * Provides unified gateway client for layer-aware M2M communication\n * with circuit breaker and retry logic.\n *\n * @module gateway\n * @category Gateway\n *\n * @example\n * ```typescript\n * import { GatewayClient, createGatewayClientFromEnv } from '@burdenoff/be-sdk/gateway';\n *\n * // Create from environment variables\n * const client = createGatewayClientFromEnv();\n *\n * // Or create manually\n * const client = new GatewayClient({\n *   layer: 'wspace',\n *   serviceName: 'wspace-tags-svc',\n * });\n *\n * // Internal call (same layer, uses int-gateway with bypass)\n * const internalResult = await client.internalQuery({\n *   query: `query { getTag(id: \"123\") { id name } }`,\n * });\n *\n * // Cross-layer call (via public gateway)\n * const crossLayerResult = await client.crossLayerQuery({\n *   query: `query { getCurrentUser { id email } }`,\n * });\n * ```\n */\n\n// Client exports\nexport { GatewayClient, createGatewayClient, createGatewayClientFromEnv } from './client.js';\n\n// Type exports\nexport {\n  CircuitState,\n  GatewayErrorType,\n  GatewayError,\n  type GatewayClientConfig,\n  type GraphQLRequestOptions,\n  type GraphQLResponse,\n  type GraphQLError,\n  type IGatewayClient,\n  type ICircuitBreaker,\n  type CircuitBreakerStats,\n  type GatewayClientHealth,\n  type RequestContext,\n} from './types.js';\n\n// Gateway-side security plugin stack (for public gateways).\n// Imported by consumers as `@burdenoff/be-sdk/gateway/security` — this\n// re-export lets `@burdenoff/be-sdk/gateway` also resolve the namespace.\nexport * as Security from './security/index.js';\n","/**\n * Service JWT minting + caching for M2M cross-layer calls.\n *\n * The public gateways (global-public-gateway, wspace-public-gateway) validate\n * every incoming request's Authorization header and only propagate `x-actor-*`\n * context headers to subgraphs when the JWT is valid. Without a JWT, raw\n * actor headers are stripped as potential client spoofing. For service-to-\n * service cross-layer calls there is no user JWT to forward — we mint a short-\n * lived service JWT with `actor_type: 'service'` so the gateway admits the\n * call and the subgraph sees a trusted service context.\n *\n * Signing key: SERVICE_JWT_SECRET — a dedicated, separate secret from\n * GLOBAL_AUTH_SECRET (which signs user tokens). Keeping them distinct means a\n * service minter that leaks its env cannot forge user logins. The gateways\n * hold both secrets and pick between them by the JWT's `kid` header\n * (this minter stamps `kid: service-v1`).\n */\nimport type * as jose from 'jose';\n\n/**\n * Dedicated secret for service-minted JWTs.\n *\n * Deliberately separate from `GLOBAL_AUTH_SECRET` (which signs user tokens)\n * so that services that mint service JWTs do not also hold the ability to\n * forge user logins. Blast radius of a leaked secret stays scoped to 60s\n * service tokens with no PII.\n *\n * Gateways hold both secrets and select by the JWT's `kid` header.\n */\nconst SIGNING_ENV_VAR = 'SERVICE_JWT_SECRET';\nconst KEY_ID = 'service-v1';\nconst DEFAULT_TTL_SECONDS = 60;\nconst REFRESH_BEFORE_EXP_MS = 10_000;\n\nlet joseModule: typeof jose | null = null;\n\nasync function getJose(): Promise<typeof jose> {\n  if (!joseModule) {\n    joseModule = await import('jose');\n  }\n  return joseModule;\n}\n\ninterface CachedToken {\n  token: string;\n  expiresAtMs: number;\n}\n\nconst cache = new Map<string, CachedToken>();\n\nfunction cacheKey(actorId: string, ttlSeconds: number): string {\n  return `${actorId}:${ttlSeconds}`;\n}\n\n/**\n * Sign a service-actor JWT.\n * Returns null when no signing secret is configured (opt-in).\n */\nexport async function signServiceJwt(\n  actorId: string,\n  ttlSeconds: number = DEFAULT_TTL_SECONDS\n): Promise<string | null> {\n  const secret = process.env[SIGNING_ENV_VAR];\n  if (!secret) {\n    return null;\n  }\n\n  const key = cacheKey(actorId, ttlSeconds);\n  const cached = cache.get(key);\n  if (cached && cached.expiresAtMs - REFRESH_BEFORE_EXP_MS > Date.now()) {\n    return cached.token;\n  }\n\n  const joseLib = await getJose();\n  const encoder = new TextEncoder();\n  const keyBytes = encoder.encode(secret);\n\n  const nowSec = Math.floor(Date.now() / 1000);\n  const expSec = nowSec + ttlSeconds;\n\n  const token = await new joseLib.SignJWT({\n    actor_type: 'service',\n  })\n    .setProtectedHeader({ alg: 'HS256', typ: 'JWT', kid: KEY_ID })\n    .setSubject(actorId)\n    // `iss` = the service identity that minted the token. Matches `sub`\n    // because these are self-minted tokens (caller is asserting itself).\n    // Gives the gateway room to enforce a minter allowlist later without\n    // a token-format change.\n    .setIssuer(actorId)\n    .setIssuedAt(nowSec)\n    .setExpirationTime(expSec)\n    .sign(keyBytes);\n\n  cache.set(key, { token, expiresAtMs: expSec * 1000 });\n  return token;\n}\n\n/** Test hook to clear the cache between tests. */\nexport function __clearServiceJwtCache(): void {\n  cache.clear();\n}\n","/**\n * Gateway Client Types\n *\n * Type definitions for the unified gateway client with\n * circuit breaker and retry logic.\n *\n * @module gateway/types\n * @category Gateway\n */\n\nimport type { ServiceLayer, CircuitBreakerConfig, GatewayRetryConfig, GatewayRequestHeaders } from '../types/layer.js';\n\n/**\n * Gateway client configuration\n */\nexport interface GatewayClientConfig {\n  /**\n   * Layer this client belongs to\n   */\n  layer: ServiceLayer;\n\n  /**\n   * Service name (for logging and headers)\n   */\n  serviceName: string;\n\n  /**\n   * Service identity for bypass headers\n   * @default serviceName\n   */\n  serviceIdentity?: string;\n\n  /**\n   * Internal gateway URL (same layer M2M)\n   * @default Resolved from layer defaults or environment\n   */\n  internalGatewayUrl?: string;\n\n  /**\n   * Cross-layer gateway URL (cross layer via public gateway)\n   * @default Resolved from layer defaults or environment\n   */\n  crossLayerGatewayUrl?: string;\n\n  /**\n   * Request timeout in milliseconds\n   * @default 30000 (30 seconds)\n   */\n  timeout?: number;\n\n  /**\n   * Circuit breaker configuration\n   */\n  circuitBreaker?: Partial<CircuitBreakerConfig>;\n\n  /**\n   * Retry configuration\n   */\n  retry?: Partial<GatewayRetryConfig>;\n\n  /**\n   * Enable request logging\n   * @default true\n   */\n  enableLogging?: boolean;\n\n  /**\n   * Default headers to include in all requests\n   */\n  defaultHeaders?: GatewayRequestHeaders;\n}\n\n/**\n * Circuit breaker states\n */\nexport enum CircuitState {\n  CLOSED = 'CLOSED',\n  OPEN = 'OPEN',\n  HALF_OPEN = 'HALF_OPEN',\n}\n\n/**\n * Circuit breaker instance interface\n */\nexport interface ICircuitBreaker {\n  /**\n   * Get current circuit state\n   */\n  getState(): CircuitState;\n\n  /**\n   * Record a successful call\n   */\n  recordSuccess(): void;\n\n  /**\n   * Record a failed call\n   */\n  recordFailure(): void;\n\n  /**\n   * Check if circuit allows calls\n   */\n  allowRequest(): boolean;\n\n  /**\n   * Force open the circuit\n   */\n  forceOpen(): void;\n\n  /**\n   * Force close the circuit\n   */\n  forceClose(): void;\n\n  /**\n   * Get circuit statistics\n   */\n  getStats(): CircuitBreakerStats;\n}\n\n/**\n * Circuit breaker statistics\n */\nexport interface CircuitBreakerStats {\n  state: CircuitState;\n  failures: number;\n  successes: number;\n  consecutiveFailures: number;\n  lastFailureTime: number | null;\n  lastSuccessTime: number | null;\n  openedAt: number | null;\n}\n\n/**\n * GraphQL request options\n */\nexport interface GraphQLRequestOptions {\n  /**\n   * GraphQL query or mutation string\n   */\n  query: string;\n\n  /**\n   * GraphQL variables\n   */\n  variables?: Record<string, unknown>;\n\n  /**\n   * Operation name (for multi-operation documents)\n   */\n  operationName?: string;\n\n  /**\n   * Additional headers for this request\n   */\n  headers?: GatewayRequestHeaders;\n\n  /**\n   * Override timeout for this request\n   */\n  timeout?: number;\n\n  /**\n   * Skip circuit breaker for this request\n   * @default false\n   */\n  skipCircuitBreaker?: boolean;\n\n  /**\n   * Skip retry logic for this request\n   * @default false\n   */\n  skipRetry?: boolean;\n}\n\n/**\n * GraphQL response\n */\nexport interface GraphQLResponse<T = unknown> {\n  /**\n   * Response data\n   */\n  data?: T;\n\n  /**\n   * GraphQL errors\n   */\n  errors?: GraphQLError[];\n}\n\n/**\n * GraphQL error structure\n */\nexport interface GraphQLError {\n  message: string;\n  locations?: Array<{ line: number; column: number }>;\n  path?: Array<string | number>;\n  extensions?: Record<string, unknown>;\n}\n\n/**\n * Gateway client interface\n */\nexport interface IGatewayClient {\n  /**\n   * Execute internal (same layer) GraphQL query/mutation\n   *\n   * Uses internal gateway with bypass headers for M2M communication.\n   *\n   * @param options - Request options\n   * @returns GraphQL response\n   */\n  internalQuery<T = unknown>(options: GraphQLRequestOptions): Promise<GraphQLResponse<T>>;\n\n  /**\n   * Execute cross-layer GraphQL query/mutation\n   *\n   * Uses public gateway for cross-layer communication.\n   *\n   * @param options - Request options\n   * @returns GraphQL response\n   */\n  crossLayerQuery<T = unknown>(options: GraphQLRequestOptions): Promise<GraphQLResponse<T>>;\n\n  /**\n   * Execute GraphQL query/mutation with explicit gateway URL\n   *\n   * @param gatewayUrl - Gateway URL to use\n   * @param options - Request options\n   * @returns GraphQL response\n   */\n  query<T = unknown>(gatewayUrl: string, options: GraphQLRequestOptions): Promise<GraphQLResponse<T>>;\n\n  /**\n   * Get internal gateway circuit breaker\n   */\n  getInternalCircuitBreaker(): ICircuitBreaker;\n\n  /**\n   * Get cross-layer gateway circuit breaker\n   */\n  getCrossLayerCircuitBreaker(): ICircuitBreaker;\n\n  /**\n   * Get client health status\n   */\n  getHealthStatus(): GatewayClientHealth;\n\n  /**\n   * Update default headers\n   */\n  updateDefaultHeaders(headers: Partial<GatewayRequestHeaders>): void;\n}\n\n/**\n * Gateway client health status\n */\nexport interface GatewayClientHealth {\n  /**\n   * Internal gateway status\n   */\n  internal: {\n    url: string;\n    circuitState: CircuitState;\n    stats: CircuitBreakerStats;\n  };\n\n  /**\n   * Cross-layer gateway status\n   */\n  crossLayer: {\n    url: string;\n    circuitState: CircuitState;\n    stats: CircuitBreakerStats;\n  };\n}\n\n/**\n * Gateway error types\n */\nexport enum GatewayErrorType {\n  NETWORK_ERROR = 'NETWORK_ERROR',\n  TIMEOUT_ERROR = 'TIMEOUT_ERROR',\n  CIRCUIT_OPEN = 'CIRCUIT_OPEN',\n  GRAPHQL_ERROR = 'GRAPHQL_ERROR',\n  UNKNOWN_ERROR = 'UNKNOWN_ERROR',\n}\n\n/**\n * Gateway error class\n */\nexport class GatewayError extends Error {\n  type: GatewayErrorType;\n  gatewayUrl: string;\n  statusCode?: number;\n  graphqlErrors?: GraphQLError[];\n  override cause?: Error;\n\n  constructor(\n    message: string,\n    type: GatewayErrorType,\n    gatewayUrl: string,\n    options?: {\n      statusCode?: number;\n      graphqlErrors?: GraphQLError[];\n      cause?: Error;\n    }\n  ) {\n    super(message);\n    this.name = 'GatewayError';\n    this.type = type;\n    this.gatewayUrl = gatewayUrl;\n    this.statusCode = options?.statusCode;\n    this.graphqlErrors = options?.graphqlErrors;\n    this.cause = options?.cause;\n    Object.setPrototypeOf(this, GatewayError.prototype);\n  }\n}\n\n/**\n * Request context for logging and tracing\n */\nexport interface RequestContext {\n  /**\n   * Request ID for tracing\n   */\n  requestId: string;\n\n  /**\n   * Actor ID making the request\n   */\n  actorId?: string;\n\n  /**\n   * Workspace ID context\n   */\n  workspaceId?: string;\n\n  /**\n   * Timestamp when request started\n   */\n  startTime: number;\n\n  /**\n   * Call type\n   */\n  callType: 'internal' | 'cross-layer' | 'direct';\n}\n","/**\n * Unified Gateway Client\n *\n * Provides a layer-aware GraphQL client with circuit breaker,\n * retry logic, and automatic header management for M2M communication.\n *\n * @module gateway/client\n * @category Gateway\n *\n * @example\n * ```typescript\n * import { GatewayClient } from '@burdenoff/be-sdk/gateway';\n *\n * const client = new GatewayClient({\n *   layer: 'wspace',\n *   serviceName: 'wspace-tags-svc',\n * });\n *\n * // Internal call (same layer)\n * const result = await client.internalQuery({\n *   query: `query { getTag(id: \"123\") { id name } }`,\n * });\n *\n * // Cross-layer call\n * const authResult = await client.crossLayerQuery({\n *   query: `query { getCurrentUser { id email } }`,\n * });\n * ```\n */\n\nimport { LayerManager } from '../layer/index.js';\nimport { logger } from '../logger/index.js';\nimport { signServiceJwt } from './service-jwt.js';\nimport {\n  DEFAULT_CIRCUIT_BREAKER_CONFIG,\n  DEFAULT_GATEWAY_RETRY_CONFIG,\n  type CircuitBreakerConfig,\n  type GatewayRequestHeaders,\n  type GatewayRetryConfig,\n  type ServiceLayer,\n} from '../types/layer.js';\nimport {\n  CircuitState,\n  GatewayError,\n  GatewayErrorType,\n  type CircuitBreakerStats,\n  type GatewayClientConfig,\n  type GatewayClientHealth,\n  type GraphQLError,\n  type GraphQLRequestOptions,\n  type GraphQLResponse,\n  type ICircuitBreaker,\n  type IGatewayClient,\n  type RequestContext,\n} from './types.js';\n\nconst uuidv4 = (): string => crypto.randomUUID();\n\n/**\n * Case-insensitive presence check for the `Authorization` header. HTTP header\n * names are case-insensitive (RFC 7230), and while the outbound `fetch` will\n * preserve whatever casing the caller supplies, callers may legitimately set\n * `authorization` / `Authorization` / even `AUTHORIZATION` via defaultHeaders\n * or options.headers. We must not overwrite an already-supplied token.\n */\nfunction hasAuthorizationHeader(headers: Record<string, string>): boolean {\n  for (const key of Object.keys(headers)) {\n    if (key.toLowerCase() === 'authorization') return true;\n  }\n  return false;\n}\n\nexport function resolveBypassPermissionValue(\n  token: string | undefined = process.env['INTERNAL_SERVICE_TOKEN']\n): string {\n  const normalizedToken = token?.trim();\n\n  if (!normalizedToken) {\n    throw new Error('INTERNAL_SERVICE_TOKEN must be configured for bypass-enabled gateway calls');\n  }\n\n  return normalizedToken;\n}\n\n/**\n * Circuit Breaker Implementation\n */\nclass CircuitBreaker implements ICircuitBreaker {\n  private state: CircuitState = CircuitState.CLOSED;\n  private failures = 0;\n  private successes = 0;\n  private consecutiveFailures = 0;\n  private lastFailureTime: number | null = null;\n  private lastSuccessTime: number | null = null;\n  private openedAt: number | null = null;\n  private failureTimestamps: number[] = [];\n  private config: CircuitBreakerConfig;\n\n  constructor(config: CircuitBreakerConfig) {\n    this.config = config;\n  }\n\n  getState(): CircuitState {\n    this.checkStateTransition();\n    return this.state;\n  }\n\n  recordSuccess(): void {\n    this.successes++;\n    this.consecutiveFailures = 0;\n    this.lastSuccessTime = Date.now();\n\n    if (this.state === CircuitState.HALF_OPEN) {\n      this.state = CircuitState.CLOSED;\n      this.failures = 0;\n      this.failureTimestamps = [];\n      this.openedAt = null;\n      logger.info('[CircuitBreaker] Circuit closed after successful test');\n    }\n  }\n\n  recordFailure(): void {\n    this.failures++;\n    this.consecutiveFailures++;\n    this.lastFailureTime = Date.now();\n    this.failureTimestamps.push(Date.now());\n\n    // Clean up old timestamps\n    const windowStart = Date.now() - this.config.failureWindow;\n    this.failureTimestamps = this.failureTimestamps.filter((t) => t > windowStart);\n\n    // Check if we should open the circuit\n    if (this.state === CircuitState.CLOSED && this.failureTimestamps.length >= this.config.failureThreshold) {\n      this.state = CircuitState.OPEN;\n      this.openedAt = Date.now();\n      logger.warn('[CircuitBreaker] Circuit opened due to failures', {\n        failures: this.failureTimestamps.length,\n        threshold: this.config.failureThreshold,\n      });\n    }\n\n    // If we're half-open and fail, go back to open\n    if (this.state === CircuitState.HALF_OPEN) {\n      this.state = CircuitState.OPEN;\n      this.openedAt = Date.now();\n      logger.warn('[CircuitBreaker] Circuit re-opened after failed test');\n    }\n  }\n\n  allowRequest(): boolean {\n    this.checkStateTransition();\n\n    switch (this.state) {\n      case CircuitState.CLOSED:\n        return true;\n      case CircuitState.OPEN:\n        return false;\n      case CircuitState.HALF_OPEN:\n        // Allow one test request\n        return true;\n      default:\n        return true;\n    }\n  }\n\n  forceOpen(): void {\n    this.state = CircuitState.OPEN;\n    this.openedAt = Date.now();\n    logger.info('[CircuitBreaker] Circuit force-opened');\n  }\n\n  forceClose(): void {\n    this.state = CircuitState.CLOSED;\n    this.failures = 0;\n    this.consecutiveFailures = 0;\n    this.failureTimestamps = [];\n    this.openedAt = null;\n    logger.info('[CircuitBreaker] Circuit force-closed');\n  }\n\n  getStats(): CircuitBreakerStats {\n    return {\n      state: this.state,\n      failures: this.failures,\n      successes: this.successes,\n      consecutiveFailures: this.consecutiveFailures,\n      lastFailureTime: this.lastFailureTime,\n      lastSuccessTime: this.lastSuccessTime,\n      openedAt: this.openedAt,\n    };\n  }\n\n  private checkStateTransition(): void {\n    if (this.state === CircuitState.OPEN && this.openedAt) {\n      const elapsed = Date.now() - this.openedAt;\n      if (elapsed >= this.config.resetTimeout) {\n        this.state = CircuitState.HALF_OPEN;\n        logger.info('[CircuitBreaker] Circuit transitioning to half-open');\n      }\n    }\n  }\n}\n\n/**\n * Unified Gateway Client\n */\nexport class GatewayClient implements IGatewayClient {\n  private config: GatewayClientConfig;\n  private layerManager: LayerManager;\n  private internalCircuitBreaker: CircuitBreaker;\n  private crossLayerCircuitBreaker: CircuitBreaker;\n  private retryConfig: GatewayRetryConfig;\n  private defaultHeaders: GatewayRequestHeaders;\n\n  constructor(config: GatewayClientConfig) {\n    this.config = {\n      timeout: 30000,\n      enableLogging: true,\n      ...config,\n    };\n\n    // Initialize layer manager\n    this.layerManager = new LayerManager({\n      layer: config.layer,\n      serviceName: config.serviceName,\n      serviceIdentity: config.serviceIdentity,\n    });\n\n    // Override URLs if provided\n    if (config.internalGatewayUrl) {\n      // Use getter internally, but we'll store the override\n    }\n    if (config.crossLayerGatewayUrl) {\n      // Use getter internally, but we'll store the override\n    }\n\n    // Initialize circuit breakers\n    const cbConfig: CircuitBreakerConfig = {\n      ...DEFAULT_CIRCUIT_BREAKER_CONFIG,\n      ...config.circuitBreaker,\n    };\n    this.internalCircuitBreaker = new CircuitBreaker(cbConfig);\n    this.crossLayerCircuitBreaker = new CircuitBreaker(cbConfig);\n\n    // Initialize retry config\n    this.retryConfig = {\n      ...DEFAULT_GATEWAY_RETRY_CONFIG,\n      ...config.retry,\n    };\n\n    // Initialize default headers\n    this.defaultHeaders = {\n      'x-service-identity': this.layerManager.getServiceIdentity(),\n      'x-actor-type': 'service',\n      ...config.defaultHeaders,\n    };\n\n    logger.debug('[GatewayClient] Initialized', {\n      layer: config.layer,\n      serviceName: config.serviceName,\n      internalUrl: this.getInternalUrl(),\n      crossLayerUrl: this.getCrossLayerUrl(),\n    });\n  }\n\n  private getInternalUrl(): string {\n    return this.config.internalGatewayUrl || this.layerManager.getInternalGatewayUrl();\n  }\n\n  private getCrossLayerUrl(): string {\n    return this.config.crossLayerGatewayUrl || this.layerManager.getCrossLayerGatewayUrl();\n  }\n\n  /**\n   * Execute internal (same layer) GraphQL query/mutation\n   */\n  async internalQuery<T = unknown>(options: GraphQLRequestOptions): Promise<GraphQLResponse<T>> {\n    const context = this.createRequestContext('internal', options);\n\n    return this.executeWithRetry(this.getInternalUrl(), options, this.internalCircuitBreaker, context, {\n      bypassPermission: true,\n    });\n  }\n\n  /**\n   * Execute cross-layer GraphQL query/mutation\n   */\n  async crossLayerQuery<T = unknown>(options: GraphQLRequestOptions): Promise<GraphQLResponse<T>> {\n    const context = this.createRequestContext('cross-layer', options);\n\n    return this.executeWithRetry(\n      this.getCrossLayerUrl(),\n      options,\n      this.crossLayerCircuitBreaker,\n      context,\n      { bypassPermission: false } // Cross-layer calls go through public gateway\n    );\n  }\n\n  /**\n   * Execute GraphQL query/mutation with explicit gateway URL\n   */\n  async query<T = unknown>(gatewayUrl: string, options: GraphQLRequestOptions): Promise<GraphQLResponse<T>> {\n    const context = this.createRequestContext('direct', options);\n\n    // Use internal circuit breaker for direct calls\n    return this.executeWithRetry(gatewayUrl, options, this.internalCircuitBreaker, context, {\n      bypassPermission: false,\n    });\n  }\n\n  getInternalCircuitBreaker(): ICircuitBreaker {\n    return this.internalCircuitBreaker;\n  }\n\n  getCrossLayerCircuitBreaker(): ICircuitBreaker {\n    return this.crossLayerCircuitBreaker;\n  }\n\n  getHealthStatus(): GatewayClientHealth {\n    return {\n      internal: {\n        url: this.getInternalUrl(),\n        circuitState: this.internalCircuitBreaker.getState(),\n        stats: this.internalCircuitBreaker.getStats(),\n      },\n      crossLayer: {\n        url: this.getCrossLayerUrl(),\n        circuitState: this.crossLayerCircuitBreaker.getState(),\n        stats: this.crossLayerCircuitBreaker.getStats(),\n      },\n    };\n  }\n\n  updateDefaultHeaders(headers: Partial<GatewayRequestHeaders>): void {\n    this.defaultHeaders = { ...this.defaultHeaders, ...headers };\n  }\n\n  private createRequestContext(\n    callType: 'internal' | 'cross-layer' | 'direct',\n    options: GraphQLRequestOptions\n  ): RequestContext {\n    return {\n      requestId: uuidv4(),\n      actorId: options.headers?.['x-actor-id'] || this.defaultHeaders['x-actor-id'],\n      workspaceId: options.headers?.['x-workspace-id'] || this.defaultHeaders['x-workspace-id'],\n      startTime: Date.now(),\n      callType,\n    };\n  }\n\n  /**\n   * Check if an error should be retried\n   */\n  private shouldRetryError(error: unknown): boolean {\n    if (!(error instanceof GatewayError)) {\n      return true;\n    }\n    // Don't retry GraphQL errors or circuit open errors\n    return error.type !== GatewayErrorType.GRAPHQL_ERROR && error.type !== GatewayErrorType.CIRCUIT_OPEN;\n  }\n\n  /**\n   * Calculate retry delay with exponential backoff\n   */\n  private calculateRetryDelay(attempt: number): number {\n    return Math.min(\n      this.retryConfig.initialDelay * Math.pow(this.retryConfig.backoffMultiplier, attempt - 1),\n      this.retryConfig.maxDelay\n    );\n  }\n\n  /**\n   * Log retry attempt if logging is enabled\n   */\n  private logRetryAttempt(\n    context: RequestContext,\n    attempt: number,\n    maxAttempts: number,\n    delay: number,\n    error: Error\n  ): void {\n    if (this.config.enableLogging) {\n      logger.warn('[GatewayClient] Request failed, retrying', {\n        requestId: context.requestId,\n        attempt,\n        maxAttempts,\n        delay,\n        error: error.message,\n      });\n    }\n  }\n\n  private async executeWithRetry<T>(\n    gatewayUrl: string,\n    options: GraphQLRequestOptions,\n    circuitBreaker: CircuitBreaker,\n    context: RequestContext,\n    settings: { bypassPermission: boolean }\n  ): Promise<GraphQLResponse<T>> {\n    // Check circuit breaker\n    if (!options.skipCircuitBreaker && !circuitBreaker.allowRequest()) {\n      throw new GatewayError(`Circuit breaker is open for ${gatewayUrl}`, GatewayErrorType.CIRCUIT_OPEN, gatewayUrl);\n    }\n\n    const maxAttempts = options.skipRetry ? 1 : this.retryConfig.maxAttempts;\n    let lastError: Error | null = null;\n\n    for (let attempt = 1; attempt <= maxAttempts; attempt++) {\n      try {\n        const result = await this.executeRequest<T>(gatewayUrl, options, context, settings.bypassPermission);\n        if (!options.skipCircuitBreaker) {\n          circuitBreaker.recordSuccess();\n        }\n        return result;\n      } catch (error) {\n        lastError = error instanceof Error ? error : new Error(String(error));\n        if (!options.skipCircuitBreaker) {\n          circuitBreaker.recordFailure();\n        }\n\n        if (!this.shouldRetryError(error)) {\n          throw error;\n        }\n\n        if (attempt < maxAttempts) {\n          const delay = this.calculateRetryDelay(attempt);\n          this.logRetryAttempt(context, attempt, maxAttempts, delay, lastError);\n          await this.sleep(delay);\n        }\n      }\n    }\n\n    throw lastError || new GatewayError('Request failed after retries', GatewayErrorType.UNKNOWN_ERROR, gatewayUrl);\n  }\n\n  /**\n   * Build headers for a request\n   */\n  private buildRequestHeaders(\n    context: RequestContext,\n    options: GraphQLRequestOptions,\n    bypassPermission: boolean\n  ): Record<string, string> {\n    const headers: Record<string, string> = {\n      'Content-Type': 'application/json',\n      'x-request-id': context.requestId,\n      'x-call-type': context.callType,\n    };\n\n    // Add default headers\n    for (const [key, value] of Object.entries(this.defaultHeaders)) {\n      if (value !== undefined) {\n        headers[key] = String(value);\n      }\n    }\n\n    // Add request-specific headers\n    if (options.headers) {\n      for (const [key, value] of Object.entries(options.headers)) {\n        if (value !== undefined) {\n          headers[key] = String(value);\n        }\n      }\n    }\n\n    // Add bypass headers for internal calls\n    if (bypassPermission) {\n      headers['x-bypass-permission'] = resolveBypassPermissionValue();\n      headers['x-bypass-source'] = this.layerManager.getServiceIdentity();\n      headers['x-bypass-timestamp'] = Date.now().toString();\n    }\n\n    return headers;\n  }\n\n  /**\n   * Handle GraphQL errors in response\n   */\n  private handleGraphQLErrors<T>(\n    result: GraphQLResponse<T>,\n    context: RequestContext,\n    gatewayUrl: string,\n    duration: number\n  ): void {\n    if (!result.errors || result.errors.length === 0) {\n      return;\n    }\n\n    const errorMessages = result.errors.map((e: GraphQLError) => e.message).join(', ');\n\n    if (this.config.enableLogging) {\n      logger.warn('[GatewayClient] GraphQL errors', {\n        requestId: context.requestId,\n        errors: result.errors,\n        duration,\n      });\n    }\n\n    throw new GatewayError(`GraphQL error: ${errorMessages}`, GatewayErrorType.GRAPHQL_ERROR, gatewayUrl, {\n      graphqlErrors: result.errors,\n    });\n  }\n\n  /**\n   * Handle fetch errors\n   */\n  private handleFetchError(\n    error: unknown,\n    context: RequestContext,\n    gatewayUrl: string,\n    timeout: number,\n    duration: number\n  ): never {\n    if (error instanceof GatewayError) {\n      throw error;\n    }\n\n    if (error instanceof Error) {\n      if (error.name === 'AbortError') {\n        throw new GatewayError(`Request timed out after ${timeout}ms`, GatewayErrorType.TIMEOUT_ERROR, gatewayUrl, {\n          cause: error,\n        });\n      }\n\n      if (this.config.enableLogging) {\n        logger.error('[GatewayClient] Request failed', {\n          requestId: context.requestId,\n          error: error.message,\n          duration,\n        });\n      }\n\n      throw new GatewayError(error.message, GatewayErrorType.NETWORK_ERROR, gatewayUrl, {\n        cause: error,\n      });\n    }\n\n    throw new GatewayError(String(error), GatewayErrorType.UNKNOWN_ERROR, gatewayUrl);\n  }\n\n  private async executeRequest<T>(\n    gatewayUrl: string,\n    options: GraphQLRequestOptions,\n    context: RequestContext,\n    bypassPermission: boolean\n  ): Promise<GraphQLResponse<T>> {\n    const timeout = options.timeout || this.config.timeout || 30000;\n    const headers = this.buildRequestHeaders(context, options, bypassPermission);\n\n    // Cross-layer calls transit the peer layer's PUBLIC gateway, which\n    // requires JWT auth to propagate actor context. Mint a short-lived\n    // service-actor JWT so the gateway admits the call and preserves\n    // `x-actor-type: service` downstream. Skipped when the caller has\n    // already supplied an Authorization header (e.g., user-originated\n    // cross-layer flows) or when SERVICE_JWT_SECRET is unset.\n    if (context.callType === 'cross-layer' && !hasAuthorizationHeader(headers)) {\n      const serviceActorId = this.layerManager.getServiceIdentity();\n      const serviceJwt = await signServiceJwt(serviceActorId);\n      if (serviceJwt) {\n        headers['Authorization'] = `Bearer ${serviceJwt}`;\n      } else if (this.config.enableLogging) {\n        // Subtle failure mode: without the JWT the public gateway strips\n        // actor headers and the subgraph rejects with `authenticationRequired`.\n        // Surface the root cause so operators rolling out a new caller don't\n        // spend time debugging the downstream error.\n        logger.debug(\n          '[GatewayClient] SERVICE_JWT_SECRET not configured — cross-layer call will proceed without service JWT',\n          { requestId: context.requestId, gatewayUrl }\n        );\n      }\n    }\n\n    const body = JSON.stringify({\n      query: options.query,\n      variables: options.variables || {},\n      operationName: options.operationName,\n    });\n\n    if (this.config.enableLogging) {\n      logger.debug('[GatewayClient] Executing request', {\n        requestId: context.requestId,\n        gatewayUrl,\n        operationName: options.operationName,\n        callType: context.callType,\n        bypassPermission,\n      });\n    }\n\n    try {\n      const controller = new AbortController();\n      const timeoutId = setTimeout(() => controller.abort(), timeout);\n\n      const response = await fetch(gatewayUrl, {\n        method: 'POST',\n        headers,\n        body,\n        signal: controller.signal,\n      });\n\n      clearTimeout(timeoutId);\n      const duration = Date.now() - context.startTime;\n\n      if (!response.ok) {\n        throw new GatewayError(\n          `HTTP ${response.status}: ${response.statusText}`,\n          GatewayErrorType.NETWORK_ERROR,\n          gatewayUrl,\n          { statusCode: response.status }\n        );\n      }\n\n      const result = (await response.json()) as GraphQLResponse<T>;\n      this.handleGraphQLErrors(result, context, gatewayUrl, duration);\n\n      if (this.config.enableLogging) {\n        logger.debug('[GatewayClient] Request completed', {\n          requestId: context.requestId,\n          duration,\n          hasData: !!result.data,\n        });\n      }\n\n      return result;\n    } catch (error) {\n      const duration = Date.now() - context.startTime;\n      this.handleFetchError(error, context, gatewayUrl, timeout, duration);\n    }\n  }\n\n  private sleep(ms: number): Promise<void> {\n    return new Promise((resolve) => setTimeout(resolve, ms));\n  }\n}\n\n/**\n * Create a gateway client for a specific layer\n */\nexport function createGatewayClient(config: GatewayClientConfig): GatewayClient {\n  return new GatewayClient(config);\n}\n\n/**\n * Create a gateway client from environment variables\n *\n * Required environment variables:\n * - SERVICE_LAYER: 'wspace' | 'global'\n * - SERVICE_NAME: Service name\n *\n * Optional:\n * - SERVICE_IDENTITY: Service identity (defaults to SERVICE_NAME)\n * - {LAYER}_INT_GATEWAY_URL: Internal gateway URL\n * - {OPPOSITE_LAYER}_PUBLIC_GATEWAY_URL: Cross-layer gateway URL\n */\nexport function createGatewayClientFromEnv(): GatewayClient {\n  const layer = process.env['SERVICE_LAYER'] as ServiceLayer;\n\n  if (!layer || (layer !== 'wspace' && layer !== 'global')) {\n    throw new Error(`[GatewayClient] Invalid or missing SERVICE_LAYER. Expected 'wspace' or 'global', got '${layer}'`);\n  }\n\n  const serviceName = process.env['SERVICE_NAME'];\n  if (!serviceName) {\n    throw new Error('[GatewayClient] SERVICE_NAME environment variable is required');\n  }\n\n  const serviceIdentity = process.env['SERVICE_IDENTITY'] || serviceName;\n\n  return new GatewayClient({\n    layer,\n    serviceName,\n    serviceIdentity,\n  });\n}\n"]}

package/dist/chunk-VWNL2O3G.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/server/errors.ts","../src/server/workspace-guard.ts"],"names":["DEFAULT_ERROR_CODE","DEFAULT_HTTP_STATUS","DEFAULT_USER_MESSAGES","BAD_REQUEST","BAD_USER_INPUT","CAPTCHA_FAILED","CAPTCHA_REQUIRED","COMPLEXITY_TOO_HIGH","CONFLICT","FORBIDDEN","INTERNAL_SERVER_ERROR","INVALID_PASSWORD","NOT_FOUND","PERMISSION_DENIED","QUOTA_EXCEEDED","QUOTA_EXHAUSTED","RATE_LIMITED","RESOURCE_CAP_EXCEEDED","STORAGE_QUOTA_EXCEEDED","TIMEOUT","UNAUTHENTICATED","VALIDATION_ERROR","WORKSPACE_REQUIRED","DEFAULT_STATUS_BY_CODE","SENSITIVE_EXTENSION_KEYS","Set","TECHNICAL_MESSAGE_PATTERNS","GRAPHQL_VALIDATION_MESSAGE_PATTERNS","isRecord","value","Array","isArray","readString","record","key","trim","length","readExtensions","error","extensions","readOriginalError","GraphQLError","originalError","Error","undefined","sanitizeExtensions","sanitized","Object","entries","has","normalizeCode","code","replace","toUpperCase","inferCodeFromMessage","message","lower","toLowerCase","some","pattern","test","includes","inferCode","extensionCode","originalCode","directCode","readErrorMessage","isLikelyTechnicalMessage","readExplicitUserMessage","resolveUserMessage","explicit","fallback","resolveTechnicalMessage","options","environment","serviceName","readHttpStatus","http","normalizeError","originalExtensions","directExtensions","mergedExtensions","userMessage","technicalMessage","status","UserFacingGraphQLError","details","httpStatus","cause","name","toUserFacingGraphQLError","normalized","nodes","source","positions","path","normalizeExecutionResultErrors","result","forEach","entry","errors","map","normalizeGraphQLResponsePayload","payload","normalizeGraphQLResponse","response","contentType","headers","get","text","Response","statusText","JSON","parse","stringify","createHumanReadableErrorPlugin","onExecute","onExecuteDone","formatHttpError","body","createHttpErrorResponse","formatted","WorkspaceRequiredError","isFieldPublic","field","directives","astNode","dir","args","arguments","arg","kind","resolveOperationType","document","operationName","defs","definitions","def","operation","allRootFieldsPublic","schema","opType","rootType","getMutationType","getSubscriptionType","getQueryType","fields","getFields","opDef","find","d","selections","selectionSet","sel","fieldName","startsWith","fieldDef","createWorkspaceGuardPlugin","config","enabled","whitelistedOperations","allowPublicDirective","errorMessage","logger","info","context","contextValue","workspaceId","workspace","id","headerWorkspaceId","request","warn"],"mappings":";;;;AAwCA,IAAMA,kBAAAA,GAAqB,uBAAA;AAC3B,IAAMC,mBAAAA,GAAsB,GAAA;AAE5B,IAAMC,qBAAAA,GAAgD;EACpDC,WAAAA,EAAa,yCAAA;EACbC,cAAAA,EAAgB,6CAAA;EAChBC,cAAAA,EAAgB,4CAAA;EAChBC,gBAAAA,EAAkB,+CAAA;EAClBC,mBAAAA,EAAqB,yEAAA;EACrBC,QAAAA,EAAU,yEAAA;EACVC,SAAAA,EAAW,wCAAA;EACXC,qBAAAA,EAAuB,yCAAA;EACvBC,gBAAAA,EAAkB,wCAAA;EAClBC,SAAAA,EAAW,uCAAA;EACXC,iBAAAA,EAAmB,wCAAA;EACnBC,cAAAA,EAAgB,kCAAA;EAChBC,eAAAA,EAAiB,kCAAA;EACjBC,YAAAA,EAAc,wDAAA;EACdC,qBAAAA,EAAuB,gEAAA;EACvBC,sBAAAA,EAAwB,mEAAA;EACxBC,OAAAA,EAAS,8CAAA;EACTC,eAAAA,EAAiB,6BAAA;EACjBC,gBAAAA,EAAkB,6CAAA;EAClBC,kBAAAA,EAAoB;AACtB,CAAA;AAEA,IAAMC,sBAAAA,GAAiD;EACrDpB,WAAAA,EAAa,GAAA;EACbC,cAAAA,EAAgB,GAAA;EAChBC,cAAAA,EAAgB,GAAA;EAChBC,gBAAAA,EAAkB,GAAA;EAClBC,mBAAAA,EAAqB,GAAA;EACrBC,QAAAA,EAAU,GAAA;EACVC,SAAAA,EAAW,GAAA;EACXE,gBAAAA,EAAkB,GAAA;EAClBC,SAAAA,EAAW,GAAA;EACXC,iBAAAA,EAAmB,GAAA;EACnBC,cAAAA,EAAgB,GAAA;EAChBC,eAAAA,EAAiB,GAAA;EACjBC,YAAAA,EAAc,GAAA;EACdC,qBAAAA,EAAuB,GAAA;EACvBC,sBAAAA,EAAwB,GAAA;EACxBC,OAAAA,EAAS,GAAA;EACTC,eAAAA,EAAiB,GAAA;EACjBC,gBAAAA,EAAkB,GAAA;EAClBC,kBAAAA,EAAoB;AACtB,CAAA;AAEA,IAAME,wBAAAA,uBAA+BC,GAAAA,CAAI;AAAC,EAAA,WAAA;AAAa,EAAA,eAAA;AAAiB,EAAA,OAAA;AAAS,EAAA;AAAa,CAAA,CAAA;AAE9F,IAAMC,0BAAAA,GAA6B;AACjC,EAAA,aAAA;AACA,EAAA,UAAA;AACA,EAAA,iBAAA;AACA,EAAA,YAAA;AACA,EAAA,gBAAA;AACA,EAAA,WAAA;AACA,EAAA,kBAAA;AACA,EAAA,eAAA;AACA,EAAA,eAAA;AACA,EAAA,YAAA;AACA,EAAA,gCAAA;AACA,EAAA,4BAAA;AACA,EAAA;;AAGF,IAAMC,mCAAAA,GAAsC;AAC1C,EAAA,iBAAA;AACA,EAAA,wBAAA;AACA,EAAA,+CAAA;AACA,EAAA,uCAAA;AACA,EAAA,yCAAA;AACA,EAAA,kCAAA;AACA,EAAA,2CAAA;AACA,EAAA,uCAAA;AACA,EAAA,0CAAA;AACA,EAAA,yBAAA;AACA,EAAA;;AAGF,SAASC,SAASC,KAAAA,EAAc;AAC9B,EAAA,OAAO,OAAOA,UAAU,QAAA,IAAYA,KAAAA,KAAU,QAAQ,CAACC,KAAAA,CAAMC,QAAQF,KAAAA,CAAAA;AACvE;AAFSD,MAAAA,CAAAA,QAAAA,EAAAA,UAAAA,CAAAA;AAIT,SAASI,UAAAA,CAAWC,QAAiCC,GAAAA,EAAW;AAC9D,EAAA,MAAML,KAAAA,GAAQI,OAAOC,GAAAA,CAAAA;AACrB,EAAA,OAAO,OAAOL,UAAU,QAAA,IAAYA,KAAAA,CAAMM,MAAI,CAAGC,MAAAA,GAAS,IAAIP,KAAAA,GAAQ,IAAA;AACxE;AAHSG,MAAAA,CAAAA,UAAAA,EAAAA,YAAAA,CAAAA;AAKT,SAASK,eAAeC,KAAAA,EAAc;AACpC,EAAA,IAAI,CAACV,QAAAA,CAASU,KAAAA,CAAAA,SAAe,EAAC;AAC9B,EAAA,MAAMC,UAAAA,GAAaD,MAAM,YAAA,CAAA;AACzB,EAAA,OAAOV,QAAAA,CAASW,UAAAA,CAAAA,GAAcA,UAAAA,GAAa,EAAC;AAC9C;AAJSF,MAAAA,CAAAA,cAAAA,EAAAA,gBAAAA,CAAAA;AAMT,SAASG,kBAAkBF,KAAAA,EAAc;AACvC,EAAA,IAAIA,KAAAA,YAAiBG,YAAAA,IAAgBH,KAAAA,CAAMI,aAAAA,YAAyBC,KAAAA,EAAO;AACzE,IAAA,OAAOL,KAAAA,CAAMI,aAAAA;AACf,EAAA;AACA,EAAA,OAAOE,MAAAA;AACT;AALSJ,MAAAA,CAAAA,iBAAAA,EAAAA,mBAAAA,CAAAA;AAOT,SAASK,mBAAmBN,UAAAA,EAAmC;AAC7D,EAAA,MAAMO,YAAqC,EAAC;AAC5C,EAAA,KAAA,MAAW,CAACZ,GAAAA,EAAKL,KAAAA,KAAUkB,MAAAA,CAAOC,OAAAA,CAAQT,UAAAA,CAAAA,EAAa;AACrD,IAAA,IAAI,CAACf,wBAAAA,CAAyByB,GAAAA,CAAIf,GAAAA,CAAAA,EAAM;AACtCY,MAAAA,SAAAA,CAAUZ,GAAAA,CAAAA,GAAOL,KAAAA;AACnB,IAAA;AACF,EAAA;AACA,EAAA,OAAOiB,SAAAA;AACT;AARSD,MAAAA,CAAAA,kBAAAA,EAAAA,oBAAAA,CAAAA;AAUT,SAASK,cAAcC,IAAAA,EAAmB;AACxC,EAAA,IAAI,CAACA,MAAM,OAAOnD,kBAAAA;AAClB,EAAA,OAAOmD,KACJhB,IAAAA,EAAI,CACJiB,QAAQ,SAAA,EAAW,GAAA,EACnBC,WAAAA,EAAW;AAChB;AANSH,MAAAA,CAAAA,aAAAA,EAAAA,eAAAA,CAAAA;AAQT,SAASI,qBAAqBC,OAAAA,EAAe;AAC3C,EAAA,MAAMC,KAAAA,GAAQD,QAAQE,WAAAA,EAAW;AAEjC,EAAA,IAAI9B,mCAAAA,CAAoC+B,KAAK,CAACC,OAAAA,KAAYA,QAAQC,IAAAA,CAAKL,OAAAA,CAAAA,CAAAA,EAAW;AAChF,IAAA,OAAO,gBAAA;AACT,EAAA;AAEA,EAAA,IACEC,KAAAA,CAAMK,SAAS,iBAAA,CAAA,IACfL,MAAMK,QAAAA,CAAS,mBAAA,CAAA,IACfL,KAAAA,CAAMK,QAAAA,CAAS,yBAAA,KACfL,KAAAA,CAAMK,QAAAA,CAAS,cAAA,CAAA,IACfL,KAAAA,CAAMK,QAAAA,CAAS,gBAAA,CAAA,IACfL,KAAAA,CAAMK,QAAAA,CAAS,YAAA,CAAA,EACf;AACA,IAAA,OAAO,iBAAA;AACT,EAAA;AAEA,EAAA,IAAIL,MAAMK,QAAAA,CAAS,mBAAA,KAAwBL,KAAAA,CAAMK,QAAAA,CAAS,uBAAA,CAAA,EAA0B;AAClF,IAAA,OAAO,oBAAA;AACT,EAAA;AAEA,EAAA,IACEL,KAAAA,CAAMK,QAAAA,CAAS,WAAA,CAAA,IACfL,MAAMK,QAAAA,CAAS,eAAA,CAAA,IACfL,KAAAA,CAAMK,SAAS,mBAAA,CAAA,IACfL,KAAAA,CAAMK,QAAAA,CAAS,gBAAA,CAAA,EACf;AACA,IAAA,OAAO,WAAA;AACT,EAAA;AAEA,EAAA,IAAIL,MAAMK,QAAAA,CAAS,WAAA,KAAgBL,KAAAA,CAAMK,QAAAA,CAAS,aAAA,CAAA,EAAgB;AAChE,IAAA,OAAO,WAAA;AACT,EAAA;AAEA,EAAA,IAAIL,KAAAA,CAAMK,QAAAA,CAAS,gBAAA,CAAA,IAAqBL,KAAAA,CAAMK,QAAAA,CAAS,eAAA,CAAA,IAAoBL,KAAAA,CAAMK,QAAAA,CAAS,UAAA,CAAA,EAAa;AACrG,IAAA,OAAO,UAAA;AACT,EAAA;AAEA,EAAA,IAAIL,KAAAA,CAAMK,QAAAA,CAAS,OAAA,CAAA,IAAYL,KAAAA,CAAMK,QAAAA,CAAS,cAAA,CAAA,IAAmBL,KAAAA,CAAMK,QAAAA,CAAS,eAAA,CAAA,EAAkB;AAChG,IAAA,OAAO,gBAAA;AACT,EAAA;AAEA,EAAA,IAAIL,MAAMK,QAAAA,CAAS,SAAA,KAAcL,KAAAA,CAAMK,QAAAA,CAAS,WAAA,CAAA,EAAc;AAC5D,IAAA,OAAO,SAAA;AACT,EAAA;AAEA,EAAA,IACEL,KAAAA,CAAMK,QAAAA,CAAS,UAAA,CAAA,IACfL,MAAMK,QAAAA,CAAS,SAAA,CAAA,IACfL,KAAAA,CAAMK,SAAS,SAAA,CAAA,IACfL,KAAAA,CAAMK,QAAAA,CAAS,aAAA,CAAA,EACf;AACA,IAAA,OAAO,gBAAA;AACT,EAAA;AAEA,EAAA,OAAO7D,kBAAAA;AACT;AAzDSsD,MAAAA,CAAAA,oBAAAA,EAAAA,sBAAAA,CAAAA;AA2DT,SAASQ,SAAAA,CAAUxB,KAAAA,EAAgBC,UAAAA,EAAqCG,aAAAA,EAAgC;AACtG,EAAA,MAAMqB,aAAAA,GAAgB,OAAOxB,UAAAA,CAAW,MAAA,MAAY,QAAA,GAAWA,UAAAA,CAAW,MAAA,CAAA,GAAU,IAAA;AACpF,EAAA,IAAIwB,aAAAA,EAAe,OAAOb,aAAAA,CAAca,aAAAA,CAAAA;AAExC,EAAA,IAAInC,QAAAA,CAASc,aAAAA,CAAAA,EAAgB;AAC3B,IAAA,MAAMsB,YAAAA,GAAehC,UAAAA,CAAWU,aAAAA,EAAe,MAAA,CAAA;AAC/C,IAAA,IAAIsB,YAAAA,EAAc,OAAOd,aAAAA,CAAcc,YAAAA,CAAAA;AACzC,EAAA;AAEA,EAAA,IAAIpC,QAAAA,CAASU,KAAAA,CAAAA,EAAQ;AACnB,IAAA,MAAM2B,UAAAA,GAAajC,UAAAA,CAAWM,KAAAA,EAAO,MAAA,CAAA;AACrC,IAAA,IAAI2B,UAAAA,EAAY,OAAOf,aAAAA,CAAce,UAAAA,CAAAA;AACvC,EAAA;AAEA,EAAA,MAAMV,OAAAA,GAAUW,iBAAiB5B,KAAAA,CAAAA;AACjC,EAAA,OAAOgB,qBAAqBC,OAAAA,CAAAA;AAC9B;AAhBSO,MAAAA,CAAAA,SAAAA,EAAAA,WAAAA,CAAAA;AAkBT,SAASI,iBAAiB5B,KAAAA,EAAc;AACtC,EAAA,IAAIA,iBAAiBK,KAAAA,IAASL,KAAAA,CAAMiB,QAAQpB,IAAAA,EAAI,CAAGC,SAAS,CAAA,EAAG;AAC7D,IAAA,OAAOE,KAAAA,CAAMiB,OAAAA;AACf,EAAA;AACA,EAAA,IAAI3B,QAAAA,CAASU,KAAAA,CAAAA,EAAQ;AACnB,IAAA,MAAMiB,OAAAA,GAAUvB,UAAAA,CAAWM,KAAAA,EAAO,SAAA,CAAA;AAClC,IAAA,IAAIiB,SAAS,OAAOA,OAAAA;AACtB,EAAA;AACA,EAAA,OAAOrD,qBAAAA,CAAsBF,kBAAAA,CAAuB;AACtD;AATSkE,MAAAA,CAAAA,gBAAAA,EAAAA,kBAAAA,CAAAA;AAWT,SAASC,yBAAyBZ,OAAAA,EAAe;AAC/C,EAAA,IAAIA,OAAAA,CAAQnB,MAAAA,GAAS,GAAA,EAAK,OAAO,IAAA;AACjC,EAAA,IAAImB,OAAAA,CAAQM,QAAAA,CAAS,IAAA,CAAA,EAAO,OAAO,IAAA;AACnC,EAAA,IAAIN,OAAAA,CAAQM,SAAS,GAAA,CAAA,IAAQN,QAAQM,QAAAA,CAAS,GAAA,GAAM,OAAO,IAAA;AAC3D,EAAA,IAAIlC,mCAAAA,CAAoC+B,KAAK,CAACC,OAAAA,KAAYA,QAAQC,IAAAA,CAAKL,OAAAA,CAAAA,CAAAA,EAAW,OAAO,IAAA;AACzF,EAAA,OAAO7B,2BAA2BgC,IAAAA,CAAK,CAACC,YAAYA,OAAAA,CAAQC,IAAAA,CAAKL,OAAAA,CAAAA,CAAAA;AACnE;AANSY,MAAAA,CAAAA,wBAAAA,EAAAA,0BAAAA,CAAAA;AAQT,SAASC,wBAAwB7B,UAAAA,EAAmC;AAClE,EAAA,OACEP,UAAAA,CAAWO,UAAAA,EAAY,aAAA,CAAA,IACvBP,UAAAA,CAAWO,YAAY,cAAA,CAAA,IACvBP,UAAAA,CAAWO,UAAAA,EAAY,gBAAA,CAAA;AAE3B;AANS6B,MAAAA,CAAAA,uBAAAA,EAAAA,yBAAAA,CAAAA;AAQT,SAASC,kBAAAA,CAAmBlB,IAAAA,EAAcI,OAAAA,EAAiBhB,UAAAA,EAAmC;AAC5F,EAAA,MAAM+B,QAAAA,GAAWF,wBAAwB7B,UAAAA,CAAAA;AACzC,EAAA,IAAI+B,UAAU,OAAOA,QAAAA;AAErB,EAAA,MAAMC,WACJrE,qBAAAA,CAAsBiD,IAAAA,CAAAA,IACtBjD,qBAAAA,CAAsBF,kBAAAA,CAAAA,IACtB,yCAAA;AACF,EAAA,IAAImD,SAASnD,kBAAAA,EAAoB;AAC/B,IAAA,OAAOuE,QAAAA;AACT,EAAA;AAEA,EAAA,IAAI,CAACJ,wBAAAA,CAAyBZ,OAAAA,CAAAA,EAAU;AACtC,IAAA,OAAOA,OAAAA;AACT,EAAA;AAEA,EAAA,OAAOgB,QAAAA;AACT;AAjBSF,MAAAA,CAAAA,kBAAAA,EAAAA,oBAAAA,CAAAA;AAmBT,SAASG,uBAAAA,CACPrB,IAAAA,EACAI,OAAAA,EACAhB,UAAAA,EACAkC,OAAAA,EAAkC;AAElC,EAAA,MAAMH,QAAAA,GAAWtC,UAAAA,CAAWO,UAAAA,EAAY,kBAAA,CAAA;AACxC,EAAA,IAAI+B,UAAU,OAAOA,QAAAA;AAErB,EAAA,IAAIG,OAAAA,CAAQC,WAAAA,KAAgB,YAAA,IAAgBvB,IAAAA,KAASnD,kBAAAA,EAAoB;AACvE,IAAA,OAAOyE,QAAQE,WAAAA,GAAc,CAAA,EAAGF,QAAQE,WAAW,CAAA,UAAA,EAAa3E,kBAAAA,CAAAA,CAAAA,GAAuBA,kBAAAA;AACzF,EAAA;AAEA,EAAA,OAAOuD,OAAAA;AACT;AAdSiB,MAAAA,CAAAA,uBAAAA,EAAAA,yBAAAA,CAAAA;AAgBT,SAASI,cAAAA,CAAerC,YAAqCY,IAAAA,EAAY;AACvE,EAAA,MAAM0B,IAAAA,GAAOtC,WAAW,MAAA,CAAA;AACxB,EAAA,IAAIX,SAASiD,IAAAA,CAAAA,IAAS,OAAOA,IAAAA,CAAK,QAAA,MAAc,QAAA,EAAU;AACxD,IAAA,OAAOA,KAAK,QAAA,CAAA;AACd,EAAA;AACA,EAAA,OAAOtD,sBAAAA,CAAuB4B,IAAAA,CAAAA,IAASlD,mBAAAA;AACzC;AANS2E,MAAAA,CAAAA,cAAAA,EAAAA,gBAAAA,CAAAA;AAQF,SAASE,cAAAA,CAAexC,KAAAA,EAAgBmC,OAAAA,GAAqC,EAAC,EAAC;AACpF,EAAA,MAAM/B,aAAAA,GAAgBF,kBAAkBF,KAAAA,CAAAA;AACxC,EAAA,MAAMyC,kBAAAA,GAAqB1C,eAAeK,aAAAA,CAAAA;AAC1C,EAAA,MAAMsC,gBAAAA,GAAmB3C,eAAeC,KAAAA,CAAAA;AACxC,EAAA,MAAM2C,mBAAmBpC,kBAAAA,CAAmB;IAAE,GAAGkC,kBAAAA;IAAoB,GAAGC;GAAiB,CAAA;AACzF,EAAA,MAAMzB,OAAAA,GAAUW,iBAAiB5B,KAAAA,CAAAA;AACjC,EAAA,MAAMa,IAAAA,GAAOW,SAAAA,CAAUxB,KAAAA,EAAO2C,gBAAAA,EAAkBvC,aAAAA,CAAAA;AAChD,EAAA,MAAMwC,WAAAA,GAAcb,kBAAAA,CAAmBlB,IAAAA,EAAMI,OAAAA,EAAS0B,gBAAAA,CAAAA;AACtD,EAAA,MAAME,gBAAAA,GAAmBX,uBAAAA,CAAwBrB,IAAAA,EAAMI,OAAAA,EAAS0B,kBAAkBR,OAAAA,CAAAA;AAClF,EAAA,MAAMW,MAAAA,GAASR,cAAAA,CAAeK,gBAAAA,EAAkB9B,IAAAA,CAAAA;AAEhD,EAAA,MAAMZ,UAAAA,GAAsC;IAC1C,GAAG0C,gBAAAA;AACH9B,IAAAA,IAAAA;AACA+B,IAAAA,WAAAA;AACAC,IAAAA;AACF,GAAA;AAEA,EAAA,IAAIV,QAAQE,WAAAA,EAAa;AACvBpC,IAAAA,UAAAA,CAAW,aAAA,IAAiBkC,OAAAA,CAAQE,WAAAA;AACtC,EAAA;AAEA,EAAA,IAAI,CAAC/C,QAAAA,CAASW,UAAAA,CAAW,MAAA,CAAO,CAAA,EAAG;AACjCA,IAAAA,UAAAA,CAAW,MAAA,CAAA,GAAU;AAAE6C,MAAAA;AAAO,KAAA;AAChC,EAAA;AAEA,EAAA,OAAO;AACLjC,IAAAA,IAAAA;AACA+B,IAAAA,WAAAA;AACAC,IAAAA,gBAAAA;AACA5C,IAAAA,UAAAA;AACA6C,IAAAA;AACF,GAAA;AACF;AAjCgBN,MAAAA,CAAAA,cAAAA,EAAAA,gBAAAA,CAAAA;AAmCT,IAAMO,sBAAAA,GAAN,cAAqC5C,YAAAA,CAAAA;EAtV5C;;;AAuVE,EAAA,WAAA,CAAYgC,OAAAA,EAAiC;AAC3C,IAAA,MAAMlC,UAAAA,GAAsC;MAC1CY,IAAAA,EAAMD,aAAAA,CAAcuB,QAAQtB,IAAI,CAAA;AAChC+B,MAAAA,WAAAA,EAAaT,OAAAA,CAAQS,WAAAA;MACrBC,gBAAAA,EAAkBV,OAAAA,CAAQU,oBAAoBV,OAAAA,CAAQS;AACxD,KAAA;AAEA,IAAA,IAAIT,QAAQa,OAAAA,EAAS;AACnB/C,MAAAA,UAAAA,CAAW,SAAA,IAAakC,OAAAA,CAAQa,OAAAA;AAClC,IAAA;AAEA,IAAA,IAAIb,QAAQc,UAAAA,EAAY;AACtBhD,MAAAA,UAAAA,CAAW,MAAA,CAAA,GAAU;AAAE6C,QAAAA,MAAAA,EAAQX,OAAAA,CAAQc;AAAW,OAAA;AACpD,IAAA;AAEA,IAAA,KAAA,CAAMd,QAAQS,WAAAA,EAAa;AACzBxC,MAAAA,aAAAA,EAAe+B,OAAAA,CAAQe,KAAAA;AACvBjD,MAAAA;KACF,CAAA;AACA,IAAA,IAAA,CAAKkD,IAAAA,GAAO,wBAAA;AACd,EAAA;AACF;AAEO,SAASC,wBAAAA,CAAyBpD,KAAAA,EAAgBmC,OAAAA,GAAqC,EAAC,EAAC;AAC9F,EAAA,MAAMkB,UAAAA,GAAab,cAAAA,CAAexC,KAAAA,EAAOmC,OAAAA,CAAAA;AAEzC,EAAA,IAAInC,iBAAiBG,YAAAA,EAAc;AACjC,IAAA,OAAO,IAAIA,YAAAA,CAAakD,UAAAA,CAAWT,WAAAA,EAAa;AAC9CU,MAAAA,KAAAA,EAAOtD,KAAAA,CAAMsD,KAAAA;AACbC,MAAAA,MAAAA,EAAQvD,KAAAA,CAAMuD,MAAAA;AACdC,MAAAA,SAAAA,EAAWxD,KAAAA,CAAMwD,SAAAA;AACjBC,MAAAA,IAAAA,EAAMzD,KAAAA,CAAMyD,IAAAA;AACZrD,MAAAA,aAAAA,EAAeJ,KAAAA,CAAMI,aAAAA;AACrBH,MAAAA,UAAAA,EAAYoD,UAAAA,CAAWpD;KACzB,CAAA;AACF,EAAA;AAEA,EAAA,OAAO,IAAIE,YAAAA,CAAakD,UAAAA,CAAWT,WAAAA,EAAa;IAC9CxC,aAAAA,EAAeJ,KAAAA,YAAiBK,QAAQL,KAAAA,GAAQM,MAAAA;AAChDL,IAAAA,UAAAA,EAAYoD,UAAAA,CAAWpD;GACzB,CAAA;AACF;AAlBgBmD,MAAAA,CAAAA,wBAAAA,EAAAA,0BAAAA,CAAAA;AAoBT,SAASM,8BAAAA,CAA+BC,MAAAA,EAAiBxB,OAAAA,GAAqC,EAAC,EAAC;AACrG,EAAA,IAAI3C,KAAAA,CAAMC,OAAAA,CAAQkE,MAAAA,CAAAA,EAAS;AACzBA,IAAAA,MAAAA,CAAOC,QAAQ,CAACC,KAAAA,KAAUH,8BAAAA,CAA+BG,KAAAA,EAAO1B,OAAAA,CAAAA,CAAAA;AAChE,IAAA;AACF,EAAA;AAEA,EAAA,IAAI,CAAC7C,QAAAA,CAASqE,MAAAA,CAAAA,EAAS;AACvB,EAAA,MAAMG,MAAAA,GAASH,OAAO,QAAA,CAAA;AACtB,EAAA,IAAI,CAACnE,KAAAA,CAAMC,OAAAA,CAAQqE,MAAAA,CAAAA,IAAWA,MAAAA,CAAOhE,WAAW,CAAA,EAAG;AAEnD6D,EAAAA,MAAAA,CAAO,QAAA,IAAYG,MAAAA,CAAOC,GAAAA,CAAI,CAAC/D,KAAAA,KAAUoD,wBAAAA,CAAyBpD,KAAAA,EAAOmC,OAAAA,CAAAA,CAAAA;AAC3E;AAXgBuB,MAAAA,CAAAA,8BAAAA,EAAAA,gCAAAA,CAAAA;AAaT,SAASM,+BAAAA,CACdC,OAAAA,EACA9B,OAAAA,GAAqC,EAAC,EAAC;AAEvCuB,EAAAA,8BAAAA,CAA+BO,SAAS9B,OAAAA,CAAAA;AACxC,EAAA,OAAO8B,OAAAA;AACT;AANgBD,MAAAA,CAAAA,+BAAAA,EAAAA,iCAAAA,CAAAA;AAQhB,eAAsBE,wBAAAA,CACpBC,QAAAA,EACAhC,OAAAA,GAAqC,EAAC,EAAC;AAEvC,EAAA,MAAMiC,WAAAA,GAAcD,QAAAA,CAASE,OAAAA,CAAQC,GAAAA,CAAI,cAAA,CAAA,IAAmB,EAAA;AAC5D,EAAA,IAAI,CAACF,WAAAA,CAAYjD,WAAAA,EAAW,CAAGI,QAAAA,CAAS,MAAA,CAAA,EAAS;AAC/C,IAAA,OAAO4C,QAAAA;AACT,EAAA;AAEA,EAAA,MAAMI,IAAAA,GAAO,MAAMJ,QAAAA,CAASI,IAAAA,EAAI;AAChC,EAAA,IAAI,CAACA,IAAAA,EAAM;AACT,IAAA,OAAO,IAAIC,SAASD,IAAAA,EAAM;AACxBzB,MAAAA,MAAAA,EAAQqB,QAAAA,CAASrB,MAAAA;AACjB2B,MAAAA,UAAAA,EAAYN,QAAAA,CAASM,UAAAA;AACrBJ,MAAAA,OAAAA,EAASF,QAAAA,CAASE;KACpB,CAAA;AACF,EAAA;AAEA,EAAA,IAAIJ,OAAAA;AACJ,EAAA,IAAI;AACFA,IAAAA,OAAAA,GAAUS,IAAAA,CAAKC,MAAMJ,IAAAA,CAAAA;EACvB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAIC,SAASD,IAAAA,EAAM;AACxBzB,MAAAA,MAAAA,EAAQqB,QAAAA,CAASrB,MAAAA;AACjB2B,MAAAA,UAAAA,EAAYN,QAAAA,CAASM,UAAAA;AACrBJ,MAAAA,OAAAA,EAASF,QAAAA,CAASE;KACpB,CAAA;AACF,EAAA;AAEAL,EAAAA,+BAAAA,CAAgCC,SAAS9B,OAAAA,CAAAA;AAEzC,EAAA,OAAO,IAAIqC,QAAAA,CAASE,IAAAA,CAAKE,SAAAA,CAAUX,OAAAA,CAAAA,EAAU;AAC3CnB,IAAAA,MAAAA,EAAQqB,QAAAA,CAASrB,MAAAA;AACjB2B,IAAAA,UAAAA,EAAYN,QAAAA,CAASM,UAAAA;AACrBJ,IAAAA,OAAAA,EAASF,QAAAA,CAASE;GACpB,CAAA;AACF;AApCsBH,MAAAA,CAAAA,wBAAAA,EAAAA,0BAAAA,CAAAA;AAsCf,SAASW,8BAAAA,CAA+B1C,OAAAA,GAAqC,EAAC,EAAC;AACpF,EAAA,OAAO;IACL2C,SAAAA,GAAAA;AACE,MAAA,OAAO;QACLC,aAAAA,CAAc,EAAEpB,QAAM,EAAuB;AAC3CD,UAAAA,8BAAAA,CAA+BC,QAAQxB,OAAAA,CAAAA;AACzC,QAAA;AACF,OAAA;AACF,IAAA;AACF,GAAA;AACF;AAVgB0C,MAAAA,CAAAA,8BAAAA,EAAAA,gCAAAA,CAAAA;AAYT,SAASG,eAAAA,CAAgBhF,KAAAA,EAAgBmC,OAAAA,GAAqC,EAAC,EAAC;AACrF,EAAA,MAAMkB,UAAAA,GAAab,cAAAA,CAAexC,KAAAA,EAAOmC,OAAAA,CAAAA;AACzC,EAAA,OAAO;AACLW,IAAAA,MAAAA,EAAQO,UAAAA,CAAWP,MAAAA;IACnBmC,IAAAA,EAAM;AACJjF,MAAAA,KAAAA,EAAOqD,UAAAA,CAAWT,WAAAA;AAClB3B,MAAAA,OAAAA,EAASoC,UAAAA,CAAWT,WAAAA;AACpBA,MAAAA,WAAAA,EAAaS,UAAAA,CAAWT,WAAAA;AACxBC,MAAAA,gBAAAA,EAAkBQ,UAAAA,CAAWR,gBAAAA;AAC7BhC,MAAAA,IAAAA,EAAMwC,UAAAA,CAAWxC,IAAAA;AACjBZ,MAAAA,UAAAA,EAAYoD,UAAAA,CAAWpD;AACzB;AACF,GAAA;AACF;AAbgB+E,MAAAA,CAAAA,eAAAA,EAAAA,iBAAAA,CAAAA;AAeT,SAASE,uBAAAA,CAAwBlF,KAAAA,EAAgBmC,OAAAA,GAAqC,EAAC,EAAC;AAC7F,EAAA,MAAMgD,SAAAA,GAAYH,eAAAA,CAAgBhF,KAAAA,EAAOmC,OAAAA,CAAAA;AACzC,EAAA,OAAO,IAAIqC,QAAAA,CAASE,IAAAA,CAAKE,SAAAA,CAAUO,SAAAA,CAAUF,IAAI,CAAA,EAAG;AAClDnC,IAAAA,MAAAA,EAAQqC,SAAAA,CAAUrC,MAAAA;IAClBuB,OAAAA,EAAS;MAAE,cAAA,EAAgB;AAAmB;GAChD,CAAA;AACF;AANgBa,MAAAA,CAAAA,uBAAAA,EAAAA,yBAAAA,CAAAA;;;AC3YhB,IAAME,sBAAAA,GAAN,MAAMA,uBAAAA,SAA+BrC,sBAAAA,CAAAA;EA7ErC;;;AA8EE,EAAA,WAAA,CAAY9B,OAAAA,EAAiB;AAC3B,IAAA,KAAA,CAAM;MACJJ,IAAAA,EAAM,oBAAA;MACN+B,WAAAA,EAAa,0CAAA;MACbC,gBAAAA,EAAkB5B,OAAAA;MAClBgC,UAAAA,EAAY;KACd,CAAA;AACA,IAAA,IAAA,CAAKE,IAAAA,GAAO,wBAAA;AACd,EAAA;AACF,CAAA;AAkCA,SAASkC,cAAcC,KAAAA,EAA+B;AACpD,EAAA,MAAMC,UAAAA,GAAaD,OAAOE,OAAAA,EAASD,UAAAA;AACnC,EAAA,IAAI,CAACA,UAAAA,IAAcA,UAAAA,CAAWzF,MAAAA,KAAW,GAAG,OAAO,KAAA;AAEnD,EAAA,KAAA,MAAW2F,OAAOF,UAAAA,EAAY;AAC5B,IAAA,MAAMpC,IAAAA,GAAOsC,IAAItC,IAAAA,EAAM5D,KAAAA;AACvB,IAAA,IAAI4D,IAAAA,KAAS,UAAU,OAAO,IAAA;AAC9B,IAAA,IAAIA,SAAS,MAAA,EAAQ;AACnB,MAAA,MAAMuC,IAAAA,GAAOD,GAAAA,CAAIE,SAAAA,IAAa,EAAA;AAC9B,MAAA,KAAA,MAAWC,OAAOF,IAAAA,EAAM;AACtB,QAAA,IAAIE,GAAAA,CAAIzC,IAAAA,EAAM5D,KAAAA,KAAU,QAAA,IAAYqG,GAAAA,CAAIrG,KAAAA,EAAOsG,IAAAA,KAAS,cAAA,IAAkBD,GAAAA,CAAIrG,KAAAA,CAAMA,KAAAA,KAAU,IAAA,EAAM;AAClG,UAAA,OAAO,IAAA;AACT,QAAA;AACF,MAAA;AACF,IAAA;AACF,EAAA;AACA,EAAA,OAAO,KAAA;AACT;AAjBS8F,MAAAA,CAAAA,aAAAA,EAAAA,eAAAA,CAAAA;AAqCT,SAASS,oBAAAA,CACPC,UACAC,aAAAA,EAAwC;AAExC,EAAA,MAAMC,IAAAA,GAAOF,QAAAA,EAAUG,WAAAA,IAAe,EAAA;AACtC,EAAA,KAAA,MAAWC,OAAOF,IAAAA,EAAM;AACtB,IAAA,IAAIE,GAAAA,CAAIN,SAAS,qBAAA,EAAuB;AAGxC,IAAA,IAAIM,IAAIC,SAAAA,KAAc,CAACJ,iBAAiBG,GAAAA,CAAIhD,IAAAA,EAAM5D,UAAUyG,aAAAA,CAAAA,EAAgB;AAC1E,MAAA,OAAOG,GAAAA,CAAIC,SAAAA;AACb,IAAA;AACF,EAAA;AACA,EAAA,OAAO,OAAA;AACT;AAdSN,MAAAA,CAAAA,oBAAAA,EAAAA,sBAAAA,CAAAA;AAoBT,SAASO,mBAAAA,CACPC,MAAAA,EACAP,QAAAA,EACAC,aAAAA,EAAwC;AAExC,EAAA,IAAI,CAACM,MAAAA,IAAU,CAACP,QAAAA,EAAU,OAAO,KAAA;AAEjC,EAAA,MAAMQ,MAAAA,GAAST,oBAAAA,CAAqBC,QAAAA,EAAUC,aAAAA,CAAAA;AAC9C,EAAA,IAAIQ,QAAAA;AACJ,EAAA,IAAID,WAAW,UAAA,EAAY;AACzBC,IAAAA,QAAAA,GAAWF,OAAOG,eAAAA,IAAe;AACnC,EAAA,CAAA,MAAA,IAAWF,WAAW,cAAA,EAAgB;AACpCC,IAAAA,QAAAA,GAAWF,OAAOI,mBAAAA,IAAmB;EACvC,CAAA,MAAO;AACLF,IAAAA,QAAAA,GAAWF,OAAOK,YAAAA,IAAY;AAChC,EAAA;AAEA,EAAA,IAAI,CAACH,UAAU,OAAO,KAAA;AAEtB,EAAA,MAAMI,MAAAA,GAASJ,SAASK,SAAAA,EAAS;AACjC,EAAA,MAAMZ,IAAAA,GAAOF,QAAAA,CAASG,WAAAA,IAAe,EAAA;AAGrC,EAAA,MAAMY,KAAAA,GAAQb,IAAAA,CAAKc,IAAAA,CAAK,CAACC,CAAAA,KAAMA,CAAAA,CAAEZ,SAAAA,KAAc,CAACJ,aAAAA,IAAiBgB,CAAAA,CAAE7D,IAAAA,EAAM5D,KAAAA,KAAUyG,aAAAA,CAAY,CAAA;AAC/F,EAAA,MAAMiB,UAAAA,GAAaH,KAAAA,EAAOI,YAAAA,EAAcD,UAAAA,IAAc,EAAA;AACtD,EAAA,IAAIA,UAAAA,CAAWnH,MAAAA,KAAW,CAAA,EAAG,OAAO,KAAA;AAEpC,EAAA,KAAA,MAAWqH,OAAOF,UAAAA,EAAY;AAG5B,IAAA,IAAIE,GAAAA,CAAItB,IAAAA,IAAQsB,GAAAA,CAAItB,IAAAA,KAAS,SAAS,OAAO,KAAA;AAC7C,IAAA,MAAMuB,SAAAA,GAAYD,IAAIhE,IAAAA,EAAM5D,KAAAA;AAC5B,IAAA,IAAI,CAAC6H,WAAW,OAAO,KAAA;AAGvB,IAAA,IAAIA,SAAAA,CAAUC,UAAAA,CAAW,IAAA,CAAA,EAAO;AAChC,IAAA,MAAMC,QAAAA,GAAWV,OAAOQ,SAAAA,CAAAA;AACxB,IAAA,IAAI,CAAC/B,aAAAA,CAAciC,QAAAA,CAAAA,EAAW,OAAO,KAAA;AACvC,EAAA;AACA,EAAA,OAAO,IAAA;AACT;AAxCSjB,MAAAA,CAAAA,mBAAAA,EAAAA,qBAAAA,CAAAA;AAkEF,SAASkB,2BAA2BC,MAAAA,EAA6B;AACtE,EAAA,MAAMC,OAAAA,GAAUD,QAAQC,OAAAA,IAAW,IAAA;AACnC,EAAA,MAAMC,wBAAwB,IAAIvI,GAAAA,CAAIqI,MAAAA,EAAQE,qBAAAA,IAAyB,EAAE,CAAA;AACzE,EAAA,MAAMC,oBAAAA,GAAuBH,QAAQG,oBAAAA,IAAwB,IAAA;AAC7D,EAAA,MAAMC,YAAAA,GACJJ,QAAQI,YAAAA,IACR,4GAAA;AAEF,EAAA,IAAI,CAACH,OAAAA,EAAS;AACZI,IAAAA,MAAAA,CAAOC,KAAK,2CAAA,CAAA;AACZ,IAAA,OAAO,EAAC;AACV,EAAA;AAEAD,EAAAA,MAAAA,CAAOC,KAAK,0CAAA,EAA4C;IACtDJ,qBAAAA,EAAuB;AAAIA,MAAAA,GAAAA;;AAC3BC,IAAAA;GACF,CAAA;AAEA,EAAA,OAAO;IACL7C,SAAAA,CAAU,EACRY,MAAI,EAQL;AAEC,MAAA,IAAIM,gBAAgBN,IAAAA,CAAKM,aAAAA;AAEzB,MAAA,IAAI,CAACA,aAAAA,IAAiBN,IAAAA,CAAKK,QAAAA,EAAUG,WAAAA,EAAa;AAChD,QAAA,KAAA,MAAWC,GAAAA,IAAOT,IAAAA,CAAKK,QAAAA,CAASG,WAAAA,EAAa;AAC3C,UAAA,IAAIC,GAAAA,CAAIC,SAAAA,IAAaD,GAAAA,CAAIhD,IAAAA,EAAM5D,KAAAA,EAAO;AACpCyG,YAAAA,aAAAA,GAAgBG,IAAIhD,IAAAA,CAAK5D,KAAAA;AACzB,YAAA;AACF,UAAA;AACF,QAAA;AACF,MAAA;AAGA,MAAA,IAAIyG,aAAAA,IAAiB0B,qBAAAA,CAAsB/G,GAAAA,CAAIqF,aAAAA,CAAAA,EAAgB;AAC7D,QAAA,OAAO1F,MAAAA;AACT,MAAA;AAGA,MAAA,IAAIqH,wBAAwBtB,mBAAAA,CAAoBX,IAAAA,CAAKY,QAAQZ,IAAAA,CAAKK,QAAAA,EAAUC,aAAAA,CAAAA,EAAgB;AAC1F,QAAA,OAAO1F,MAAAA;AACT,MAAA;AAGA,MAAA,MAAMyH,UAAUrC,IAAAA,CAAKsC,YAAAA;AACrB,MAAA,MAAMC,WAAAA,GAAcF,SAASG,SAAAA,EAAWC,EAAAA;AAGxC,MAAA,MAAMC,iBAAAA,GAAoBL,OAAAA,EAASM,OAAAA,EAAShE,OAAAA,EAASC,MAAM,gBAAA,CAAA;AAE3D,MAAA,IAAI,CAAC2D,WAAAA,IAAe,CAACG,iBAAAA,EAAmB;AACtCP,QAAAA,MAAAA,CAAOS,KAAK,8DAAA,EAAgE;AAC1EtC,UAAAA,aAAAA,EAAeA,aAAAA,IAAiB;SAClC,CAAA;AACA,QAAA,MAAM,IAAIZ,uBAAuBwC,YAAAA,CAAAA;AACnC,MAAA;AAEA,MAAA,OAAOtH,MAAAA;AACT,IAAA;AACF,GAAA;AACF;AApEgBiH,MAAAA,CAAAA,0BAAAA,EAAAA,4BAAAA,CAAAA","file":"chunk-VWNL2O3G.js","sourcesContent":["import { GraphQLError } from 'graphql';\n\nimport type { YogaPlugin } from './types.js';\n\nexport interface UserFacingErrorOptions {\n  code: string;\n  userMessage: string;\n  technicalMessage?: string;\n  details?: Record<string, unknown>;\n  httpStatus?: number;\n  cause?: Error;\n}\n\nexport interface ErrorNormalizationOptions {\n  serviceName?: string;\n  environment?: string;\n}\n\nexport interface NormalizedErrorState {\n  code: string;\n  userMessage: string;\n  technicalMessage: string;\n  extensions: Record<string, unknown>;\n  status: number;\n}\n\nexport interface HttpErrorPayload {\n  error: string;\n  message: string;\n  userMessage: string;\n  technicalMessage: string;\n  code: string;\n  extensions: Record<string, unknown>;\n}\n\nexport interface HttpErrorResult {\n  status: number;\n  body: HttpErrorPayload;\n}\n\nconst DEFAULT_ERROR_CODE = 'INTERNAL_SERVER_ERROR';\nconst DEFAULT_HTTP_STATUS = 500;\n\nconst DEFAULT_USER_MESSAGES: Record<string, string> = {\n  BAD_REQUEST: 'Please check the request and try again.',\n  BAD_USER_INPUT: 'Please check the information and try again.',\n  CAPTCHA_FAILED: 'The verification failed. Please try again.',\n  CAPTCHA_REQUIRED: 'Please complete the verification to continue.',\n  COMPLEXITY_TOO_HIGH: 'This request is too large to process. Please simplify it and try again.',\n  CONFLICT: 'This change conflicts with existing data. Please refresh and try again.',\n  FORBIDDEN: 'You do not have permission to do that.',\n  INTERNAL_SERVER_ERROR: 'Something went wrong. Please try again.',\n  INVALID_PASSWORD: 'The password you entered is incorrect.',\n  NOT_FOUND: 'We could not find the requested item.',\n  PERMISSION_DENIED: 'You do not have permission to do that.',\n  QUOTA_EXCEEDED: \"You've reached your usage limit.\",\n  QUOTA_EXHAUSTED: \"You've reached your usage limit.\",\n  RATE_LIMITED: 'Too many requests. Please wait a moment and try again.',\n  RESOURCE_CAP_EXCEEDED: \"You've reached your plan limit. Upgrade your plan to continue.\",\n  STORAGE_QUOTA_EXCEEDED: \"You've reached your storage limit. Upgrade your plan to continue.\",\n  TIMEOUT: 'The request took too long. Please try again.',\n  UNAUTHENTICATED: 'Please sign in to continue.',\n  VALIDATION_ERROR: 'Please check the information and try again.',\n  WORKSPACE_REQUIRED: 'Please choose a workspace and try again.',\n};\n\nconst DEFAULT_STATUS_BY_CODE: Record<string, number> = {\n  BAD_REQUEST: 400,\n  BAD_USER_INPUT: 400,\n  CAPTCHA_FAILED: 400,\n  CAPTCHA_REQUIRED: 400,\n  COMPLEXITY_TOO_HIGH: 400,\n  CONFLICT: 409,\n  FORBIDDEN: 403,\n  INVALID_PASSWORD: 400,\n  NOT_FOUND: 404,\n  PERMISSION_DENIED: 403,\n  QUOTA_EXCEEDED: 429,\n  QUOTA_EXHAUSTED: 429,\n  RATE_LIMITED: 429,\n  RESOURCE_CAP_EXCEEDED: 429,\n  STORAGE_QUOTA_EXCEEDED: 429,\n  TIMEOUT: 504,\n  UNAUTHENTICATED: 401,\n  VALIDATION_ERROR: 400,\n  WORKSPACE_REQUIRED: 403,\n};\n\nconst SENSITIVE_EXTENSION_KEYS = new Set(['exception', 'originalError', 'stack', 'stacktrace']);\n\nconst TECHNICAL_MESSAGE_PATTERNS = [\n  /\\bprisma\\b/i,\n  /\\bsql\\b/i,\n  /\\bconstraint\\b/i,\n  /\\bstack\\b/i,\n  /\\bundefined\\b/i,\n  /\\bnull\\b/i,\n  /\\bECONN[A-Z_]*\\b/,\n  /\\bETIMEDOUT\\b/,\n  /\\bENOTFOUND\\b/,\n  /\\bP\\d{4}\\b/,\n  /Cannot (read|set|find|access)/i,\n  /Build failed \\(exit \\d+\\)/i,\n  /JSON\\.stringify/i,\n];\n\nconst GRAPHQL_VALIDATION_MESSAGE_PATTERNS = [\n  /^Syntax Error:/i,\n  /^Cannot query field\\b/i,\n  /^Cannot return null for non-nullable field\\b/i,\n  /^Unknown (argument|directive|type)\\b/i,\n  /^Variable \"\\$[^\\\"]+\" got invalid value/i,\n  /^Field \"[^\"]+\" of required type/i,\n  /^Field \"[^\"]+\" must not have a selection/i,\n  /^Field \"[^\"]+\" must have a selection/i,\n  /^Fragment \"[^\"]+\" cannot be spread here/i,\n  /^There can be only one/i,\n  /Did you mean /i,\n];\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value);\n}\n\nfunction readString(record: Record<string, unknown>, key: string): string | null {\n  const value = record[key];\n  return typeof value === 'string' && value.trim().length > 0 ? value : null;\n}\n\nfunction readExtensions(error: unknown): Record<string, unknown> {\n  if (!isRecord(error)) return {};\n  const extensions = error['extensions'];\n  return isRecord(extensions) ? extensions : {};\n}\n\nfunction readOriginalError(error: unknown): Error | undefined {\n  if (error instanceof GraphQLError && error.originalError instanceof Error) {\n    return error.originalError;\n  }\n  return undefined;\n}\n\nfunction sanitizeExtensions(extensions: Record<string, unknown>): Record<string, unknown> {\n  const sanitized: Record<string, unknown> = {};\n  for (const [key, value] of Object.entries(extensions)) {\n    if (!SENSITIVE_EXTENSION_KEYS.has(key)) {\n      sanitized[key] = value;\n    }\n  }\n  return sanitized;\n}\n\nfunction normalizeCode(code: string | null): string {\n  if (!code) return DEFAULT_ERROR_CODE;\n  return code\n    .trim()\n    .replace(/[\\s-]+/g, '_')\n    .toUpperCase();\n}\n\nfunction inferCodeFromMessage(message: string): string {\n  const lower = message.toLowerCase();\n\n  if (GRAPHQL_VALIDATION_MESSAGE_PATTERNS.some((pattern) => pattern.test(message))) {\n    return 'BAD_USER_INPUT';\n  }\n\n  if (\n    lower.includes('unauthenticated') ||\n    lower.includes('not authenticated') ||\n    lower.includes('authentication required') ||\n    lower.includes('unauthorized') ||\n    lower.includes('please sign in') ||\n    lower.includes('sign in to')\n  ) {\n    return 'UNAUTHENTICATED';\n  }\n\n  if (lower.includes('workspace context') || lower.includes('switch to a workspace')) {\n    return 'WORKSPACE_REQUIRED';\n  }\n\n  if (\n    lower.includes('forbidden') ||\n    lower.includes('access denied') ||\n    lower.includes('permission denied') ||\n    lower.includes('not authorized')\n  ) {\n    return 'FORBIDDEN';\n  }\n\n  if (lower.includes('not found') || lower.includes('disappeared')) {\n    return 'NOT_FOUND';\n  }\n\n  if (lower.includes('already exists') || lower.includes('already taken') || lower.includes('conflict')) {\n    return 'CONFLICT';\n  }\n\n  if (lower.includes('quota') || lower.includes('cap exceeded') || lower.includes('limit reached')) {\n    return 'QUOTA_EXCEEDED';\n  }\n\n  if (lower.includes('timeout') || lower.includes('timed out')) {\n    return 'TIMEOUT';\n  }\n\n  if (\n    lower.includes('required') ||\n    lower.includes('invalid') ||\n    lower.includes('missing') ||\n    lower.includes('unsupported')\n  ) {\n    return 'BAD_USER_INPUT';\n  }\n\n  return DEFAULT_ERROR_CODE;\n}\n\nfunction inferCode(error: unknown, extensions: Record<string, unknown>, originalError: Error | undefined): string {\n  const extensionCode = typeof extensions['code'] === 'string' ? extensions['code'] : null;\n  if (extensionCode) return normalizeCode(extensionCode);\n\n  if (isRecord(originalError)) {\n    const originalCode = readString(originalError, 'code');\n    if (originalCode) return normalizeCode(originalCode);\n  }\n\n  if (isRecord(error)) {\n    const directCode = readString(error, 'code');\n    if (directCode) return normalizeCode(directCode);\n  }\n\n  const message = readErrorMessage(error);\n  return inferCodeFromMessage(message);\n}\n\nfunction readErrorMessage(error: unknown): string {\n  if (error instanceof Error && error.message.trim().length > 0) {\n    return error.message;\n  }\n  if (isRecord(error)) {\n    const message = readString(error, 'message');\n    if (message) return message;\n  }\n  return DEFAULT_USER_MESSAGES[DEFAULT_ERROR_CODE] ?? 'Something went wrong. Please try again.';\n}\n\nfunction isLikelyTechnicalMessage(message: string): boolean {\n  if (message.length > 220) return true;\n  if (message.includes('\\n')) return true;\n  if (message.includes('{') && message.includes('}')) return true;\n  if (GRAPHQL_VALIDATION_MESSAGE_PATTERNS.some((pattern) => pattern.test(message))) return true;\n  return TECHNICAL_MESSAGE_PATTERNS.some((pattern) => pattern.test(message));\n}\n\nfunction readExplicitUserMessage(extensions: Record<string, unknown>): string | null {\n  return (\n    readString(extensions, 'userMessage') ??\n    readString(extensions, 'humanMessage') ??\n    readString(extensions, 'displayMessage')\n  );\n}\n\nfunction resolveUserMessage(code: string, message: string, extensions: Record<string, unknown>): string {\n  const explicit = readExplicitUserMessage(extensions);\n  if (explicit) return explicit;\n\n  const fallback =\n    DEFAULT_USER_MESSAGES[code] ??\n    DEFAULT_USER_MESSAGES[DEFAULT_ERROR_CODE] ??\n    'Something went wrong. Please try again.';\n  if (code === DEFAULT_ERROR_CODE) {\n    return fallback;\n  }\n\n  if (!isLikelyTechnicalMessage(message)) {\n    return message;\n  }\n\n  return fallback;\n}\n\nfunction resolveTechnicalMessage(\n  code: string,\n  message: string,\n  extensions: Record<string, unknown>,\n  options: ErrorNormalizationOptions\n): string {\n  const explicit = readString(extensions, 'technicalMessage');\n  if (explicit) return explicit;\n\n  if (options.environment === 'production' && code === DEFAULT_ERROR_CODE) {\n    return options.serviceName ? `${options.serviceName} returned ${DEFAULT_ERROR_CODE}` : DEFAULT_ERROR_CODE;\n  }\n\n  return message;\n}\n\nfunction readHttpStatus(extensions: Record<string, unknown>, code: string): number {\n  const http = extensions['http'];\n  if (isRecord(http) && typeof http['status'] === 'number') {\n    return http['status'];\n  }\n  return DEFAULT_STATUS_BY_CODE[code] ?? DEFAULT_HTTP_STATUS;\n}\n\nexport function normalizeError(error: unknown, options: ErrorNormalizationOptions = {}): NormalizedErrorState {\n  const originalError = readOriginalError(error);\n  const originalExtensions = readExtensions(originalError);\n  const directExtensions = readExtensions(error);\n  const mergedExtensions = sanitizeExtensions({ ...originalExtensions, ...directExtensions });\n  const message = readErrorMessage(error);\n  const code = inferCode(error, mergedExtensions, originalError);\n  const userMessage = resolveUserMessage(code, message, mergedExtensions);\n  const technicalMessage = resolveTechnicalMessage(code, message, mergedExtensions, options);\n  const status = readHttpStatus(mergedExtensions, code);\n\n  const extensions: Record<string, unknown> = {\n    ...mergedExtensions,\n    code,\n    userMessage,\n    technicalMessage,\n  };\n\n  if (options.serviceName) {\n    extensions['serviceName'] = options.serviceName;\n  }\n\n  if (!isRecord(extensions['http'])) {\n    extensions['http'] = { status };\n  }\n\n  return {\n    code,\n    userMessage,\n    technicalMessage,\n    extensions,\n    status,\n  };\n}\n\nexport class UserFacingGraphQLError extends GraphQLError {\n  constructor(options: UserFacingErrorOptions) {\n    const extensions: Record<string, unknown> = {\n      code: normalizeCode(options.code),\n      userMessage: options.userMessage,\n      technicalMessage: options.technicalMessage ?? options.userMessage,\n    };\n\n    if (options.details) {\n      extensions['details'] = options.details;\n    }\n\n    if (options.httpStatus) {\n      extensions['http'] = { status: options.httpStatus };\n    }\n\n    super(options.userMessage, {\n      originalError: options.cause,\n      extensions,\n    });\n    this.name = 'UserFacingGraphQLError';\n  }\n}\n\nexport function toUserFacingGraphQLError(error: unknown, options: ErrorNormalizationOptions = {}): GraphQLError {\n  const normalized = normalizeError(error, options);\n\n  if (error instanceof GraphQLError) {\n    return new GraphQLError(normalized.userMessage, {\n      nodes: error.nodes,\n      source: error.source,\n      positions: error.positions,\n      path: error.path,\n      originalError: error.originalError,\n      extensions: normalized.extensions,\n    });\n  }\n\n  return new GraphQLError(normalized.userMessage, {\n    originalError: error instanceof Error ? error : undefined,\n    extensions: normalized.extensions,\n  });\n}\n\nexport function normalizeExecutionResultErrors(result: unknown, options: ErrorNormalizationOptions = {}): void {\n  if (Array.isArray(result)) {\n    result.forEach((entry) => normalizeExecutionResultErrors(entry, options));\n    return;\n  }\n\n  if (!isRecord(result)) return;\n  const errors = result['errors'];\n  if (!Array.isArray(errors) || errors.length === 0) return;\n\n  result['errors'] = errors.map((error) => toUserFacingGraphQLError(error, options));\n}\n\nexport function normalizeGraphQLResponsePayload(\n  payload: unknown,\n  options: ErrorNormalizationOptions = {}\n): unknown {\n  normalizeExecutionResultErrors(payload, options);\n  return payload;\n}\n\nexport async function normalizeGraphQLResponse(\n  response: Response,\n  options: ErrorNormalizationOptions = {}\n): Promise<Response> {\n  const contentType = response.headers.get('content-type') ?? '';\n  if (!contentType.toLowerCase().includes('json')) {\n    return response;\n  }\n\n  const text = await response.text();\n  if (!text) {\n    return new Response(text, {\n      status: response.status,\n      statusText: response.statusText,\n      headers: response.headers,\n    });\n  }\n\n  let payload: unknown;\n  try {\n    payload = JSON.parse(text) as unknown;\n  } catch {\n    return new Response(text, {\n      status: response.status,\n      statusText: response.statusText,\n      headers: response.headers,\n    });\n  }\n\n  normalizeGraphQLResponsePayload(payload, options);\n\n  return new Response(JSON.stringify(payload), {\n    status: response.status,\n    statusText: response.statusText,\n    headers: response.headers,\n  });\n}\n\nexport function createHumanReadableErrorPlugin(options: ErrorNormalizationOptions = {}): YogaPlugin {\n  return {\n    onExecute() {\n      return {\n        onExecuteDone({ result }: { result: unknown }) {\n          normalizeExecutionResultErrors(result, options);\n        },\n      };\n    },\n  };\n}\n\nexport function formatHttpError(error: unknown, options: ErrorNormalizationOptions = {}): HttpErrorResult {\n  const normalized = normalizeError(error, options);\n  return {\n    status: normalized.status,\n    body: {\n      error: normalized.userMessage,\n      message: normalized.userMessage,\n      userMessage: normalized.userMessage,\n      technicalMessage: normalized.technicalMessage,\n      code: normalized.code,\n      extensions: normalized.extensions,\n    },\n  };\n}\n\nexport function createHttpErrorResponse(error: unknown, options: ErrorNormalizationOptions = {}): Response {\n  const formatted = formatHttpError(error, options);\n  return new Response(JSON.stringify(formatted.body), {\n    status: formatted.status,\n    headers: { 'Content-Type': 'application/json' },\n  });\n}\n","/**\n * Workspace Guard Plugin for GraphQL Yoga\n *\n * Blocks GraphQL operations that lack a valid workspace context (x-workspace-id header).\n * This provides defense-in-depth at the GraphQL layer — even if the gateway allows a request\n * through, the service itself will reject it if workspace context is missing.\n *\n * **Whitelisted operations** (e.g., workspace creation) can bypass the guard.\n *\n * **Public schema fields** marked with `@public` or `@rbac(public: true)` are auto-bypassed\n * when `allowPublicDirective` is enabled (default true). This lets anonymous public-link\n * resolvers (e.g. `accessShare`) be reached through the federation gateway without an\n * `x-workspace-id` header.\n *\n * @module server/workspace-guard\n * @category Security\n */\n\nimport { logger } from '../logger/index.js';\nimport { UserFacingGraphQLError } from './errors.js';\n\n// ============================================================================\n// Types\n// ============================================================================\n\n/**\n * Configuration for the workspace guard plugin\n */\nexport interface WorkspaceGuardConfig {\n  /**\n   * Enable the workspace guard.\n   * @default true\n   */\n  enabled?: boolean;\n\n  /**\n   * GraphQL operation names that can run without workspace context.\n   * These are typically operations like `createWorkspace` that execute\n   * before a workspace exists.\n   *\n   * Matching is case-sensitive against the operation name in the GraphQL document.\n   *\n   * @default []\n   *\n   * @example\n   * ```typescript\n   * whitelistedOperations: ['createWorkspace', 'validateTokens']\n   * ```\n   */\n  whitelistedOperations?: string[];\n\n  /**\n   * Custom error message when workspace context is missing.\n   * @default 'Workspace context required. Provide a valid X-Workspace-Authorization header.'\n   */\n  errorMessage?: string;\n\n  /**\n   * If true, fields whose schema definition carries the `@public` directive or\n   * `@rbac(public: true)` are bypassed by the guard automatically — no need to\n   * list them in `whitelistedOperations`. The check uses the GraphQL schema\n   * passed to the executor at request time.\n   *\n   * Set to false to fall back to the legacy operation-name allowlist only.\n   *\n   * @default true\n   */\n  allowPublicDirective?: boolean;\n}\n\n// ============================================================================\n// GraphQL Error\n// ============================================================================\n\n/**\n * Workspace required error with proper GraphQL error extensions\n */\nclass WorkspaceRequiredError extends UserFacingGraphQLError {\n  constructor(message: string) {\n    super({\n      code: 'WORKSPACE_REQUIRED',\n      userMessage: 'Please choose a workspace and try again.',\n      technicalMessage: message,\n      httpStatus: 403,\n    });\n    this.name = 'WorkspaceRequiredError';\n  }\n}\n\n// ============================================================================\n// Schema directive helpers\n// ============================================================================\n\n/**\n * Minimal structural typings for the bits of the GraphQL schema we look at.\n * We avoid importing the GraphQL types directly so the SDK keeps `graphql`\n * as a peer dep without a runtime hard dependency.\n */\ninterface FieldLikeDef {\n  astNode?: {\n    directives?: ReadonlyArray<{\n      name: { value: string };\n      arguments?: ReadonlyArray<{\n        name: { value: string };\n        value: { kind: string; value?: unknown };\n      }>;\n    }>;\n  };\n}\n\ninterface SchemaLike {\n  getQueryType?: () => { getFields: () => Record<string, FieldLikeDef> } | null | undefined;\n  getMutationType?: () => { getFields: () => Record<string, FieldLikeDef> } | null | undefined;\n  getSubscriptionType?: () => { getFields: () => Record<string, FieldLikeDef> } | null | undefined;\n}\n\n/**\n * Returns true iff the field carries either:\n *   - `@public` directive, OR\n *   - `@rbac(public: true)` directive (any arg-order)\n */\nfunction isFieldPublic(field: FieldLikeDef | undefined): boolean {\n  const directives = field?.astNode?.directives;\n  if (!directives || directives.length === 0) return false;\n\n  for (const dir of directives) {\n    const name = dir.name?.value;\n    if (name === 'public') return true;\n    if (name === 'rbac') {\n      const args = dir.arguments ?? [];\n      for (const arg of args) {\n        if (arg.name?.value === 'public' && arg.value?.kind === 'BooleanValue' && arg.value.value === true) {\n          return true;\n        }\n      }\n    }\n  }\n  return false;\n}\n\ninterface DocumentLike {\n  definitions?: ReadonlyArray<{\n    kind?: string;\n    operation?: string;\n    name?: { value?: string };\n    selectionSet?: {\n      selections?: ReadonlyArray<{\n        kind?: string;\n        name?: { value?: string };\n      }>;\n    };\n  }>;\n}\n\n/**\n * Resolve the operation type ('query' | 'mutation' | 'subscription') for the\n * primary operation in the document. Falls back to 'query'.\n */\nfunction resolveOperationType(\n  document: DocumentLike | undefined,\n  operationName: string | null | undefined\n): 'query' | 'mutation' | 'subscription' {\n  const defs = document?.definitions ?? [];\n  for (const def of defs) {\n    if (def.kind !== 'OperationDefinition') {\n      // Older parsers may not set kind; fall through to the operation property check below.\n    }\n    if (def.operation && (!operationName || def.name?.value === operationName)) {\n      return def.operation as 'query' | 'mutation' | 'subscription';\n    }\n  }\n  return 'query';\n}\n\n/**\n * Returns true iff every root field in the document selection set is marked\n * public on the schema. Empty selection sets return false (fail-closed).\n */\nfunction allRootFieldsPublic(\n  schema: SchemaLike | undefined,\n  document: DocumentLike | undefined,\n  operationName: string | null | undefined\n): boolean {\n  if (!schema || !document) return false;\n\n  const opType = resolveOperationType(document, operationName);\n  let rootType: ReturnType<NonNullable<SchemaLike['getQueryType']>> | undefined;\n  if (opType === 'mutation') {\n    rootType = schema.getMutationType?.();\n  } else if (opType === 'subscription') {\n    rootType = schema.getSubscriptionType?.();\n  } else {\n    rootType = schema.getQueryType?.();\n  }\n\n  if (!rootType) return false;\n\n  const fields = rootType.getFields();\n  const defs = document.definitions ?? [];\n\n  // Find the operation definition matching operationName (or first one).\n  const opDef = defs.find((d) => d.operation && (!operationName || d.name?.value === operationName));\n  const selections = opDef?.selectionSet?.selections ?? [];\n  if (selections.length === 0) return false;\n\n  for (const sel of selections) {\n    // Only consider plain Field selections (skip fragments — fragments at the root\n    // shouldn't drive a public bypass; fail-closed there).\n    if (sel.kind && sel.kind !== 'Field') return false;\n    const fieldName = sel.name?.value;\n    if (!fieldName) return false;\n    // __schema / __type introspection is always allowed without workspace context;\n    // treat them as public.\n    if (fieldName.startsWith('__')) continue;\n    const fieldDef = fields[fieldName];\n    if (!isFieldPublic(fieldDef)) return false;\n  }\n  return true;\n}\n\n// ============================================================================\n// Plugin\n// ============================================================================\n\n/**\n * Create a GraphQL Yoga plugin that guards operations requiring workspace context.\n *\n * The plugin inspects the GraphQL context for workspace information (set by the SDK's\n * buildContext from the x-workspace-id header). If missing and the operation is not\n * whitelisted (and not all-public per directive), it throws a WORKSPACE_REQUIRED error.\n *\n * @param config - Guard configuration\n * @returns A Yoga-compatible plugin\n *\n * @example\n * ```typescript\n * import { createWorkspaceGuardPlugin } from '@burdenoff/be-sdk/server';\n *\n * const guardPlugin = createWorkspaceGuardPlugin({\n *   whitelistedOperations: ['createWorkspace'],\n *   allowPublicDirective: true, // default\n * });\n * ```\n */\nexport function createWorkspaceGuardPlugin(config?: WorkspaceGuardConfig) {\n  const enabled = config?.enabled ?? true;\n  const whitelistedOperations = new Set(config?.whitelistedOperations ?? []);\n  const allowPublicDirective = config?.allowPublicDirective ?? true;\n  const errorMessage =\n    config?.errorMessage ??\n    'Workspace context required. Ensure the request includes a valid workspace context (x-workspace-id header).';\n\n  if (!enabled) {\n    logger.info('[WorkspaceGuard] Workspace guard disabled');\n    return {};\n  }\n\n  logger.info('[WorkspaceGuard] Workspace guard enabled', {\n    whitelistedOperations: [...whitelistedOperations],\n    allowPublicDirective,\n  });\n\n  return {\n    onExecute({\n      args,\n    }: {\n      args: {\n        schema?: SchemaLike;\n        document?: DocumentLike;\n        operationName?: string | null;\n        contextValue?: { workspace?: { id?: string }; request?: Request };\n      };\n    }) {\n      // Extract operation name from args or document\n      let operationName = args.operationName;\n\n      if (!operationName && args.document?.definitions) {\n        for (const def of args.document.definitions) {\n          if (def.operation && def.name?.value) {\n            operationName = def.name.value;\n            break;\n          }\n        }\n      }\n\n      // Check if operation is whitelisted by name\n      if (operationName && whitelistedOperations.has(operationName)) {\n        return undefined;\n      }\n\n      // Check schema-directive-based public bypass (Option C)\n      if (allowPublicDirective && allRootFieldsPublic(args.schema, args.document, operationName)) {\n        return undefined;\n      }\n\n      // Check for workspace context\n      const context = args.contextValue;\n      const workspaceId = context?.workspace?.id;\n\n      // Also check the raw header as a fallback\n      const headerWorkspaceId = context?.request?.headers?.get?.('x-workspace-id');\n\n      if (!workspaceId && !headerWorkspaceId) {\n        logger.warn('[WorkspaceGuard] Blocked operation without workspace context', {\n          operationName: operationName ?? '<anonymous>',\n        });\n        throw new WorkspaceRequiredError(errorMessage);\n      }\n\n      return undefined;\n    },\n  };\n}\n"]}

package/dist/workspace-guard-3JLBFAMH.js

@@ -1,5 +0,0 @@
-export { createWorkspaceGuardPlugin } from './chunk-VWNL2O3G.js';
-import './chunk-CBZNP6RF.js';
-import './chunk-XE4OXN2W.js';
-//# sourceMappingURL=workspace-guard-3JLBFAMH.js.map
-//# sourceMappingURL=workspace-guard-3JLBFAMH.js.map