@burdenoff/be-sdk 2026.602.2 → 2026.618.1

package/dist/init/index.d.ts

@@ -1,2 +1,2 @@
-export { A as AnalyticsConfig, B as BurdenoffSDKInitConfig, C as ClickHouseConfig, D as DatabaseConfig, E as EventQueueConfig, G as GraphSyncConfig, I as InitializedSDKState, L as LayerInitConfig, a as LoggingConfig, M as MetricsConfig, O as ObservabilityConfig, b as OpenTelemetryConfig, S as SDKCacheConfig, c as SDKValkeyCacheConfig, g as getSDKState, d as initializeBurdenoffSDK, e as isSDKInitialized, r as resetSDK } from '../index-BqSh1K8I.js';
-import '../layer-CUu_cZ7d.js';
+export { A as AnalyticsConfig, B as BurdenoffSDKInitConfig, C as ClickHouseConfig, D as DatabaseConfig, E as EventQueueConfig, G as GraphSyncConfig, I as InitializedSDKState, L as LayerInitConfig, a as LoggingConfig, M as MetricsConfig, O as ObservabilityConfig, b as OpenTelemetryConfig, S as SDKCacheConfig, c as SDKValkeyCacheConfig, g as getSDKState, d as initializeBurdenoffSDK, e as isSDKInitialized, r as resetSDK } from '../index-B0ebYV9W.js';
+import '../layer-GNAVXBMf.js';

package/dist/init/index.js

@@ -1,8 +1,9 @@
-export { getSDKState, initializeBurdenoffSDK, isSDKInitialized, resetSDK } from '../chunk-RDGQEBNS.js';
-import '../chunk-OJWJVZY5.js';
-import '../chunk-4NFZOFRS.js';
-import '../chunk-GSEPF2B6.js';
-import '../chunk-HP6JTFNR.js';
+export { getSDKState, initializeBurdenoffSDK, isSDKInitialized, resetSDK } from '../chunk-5FEOFBQ4.js';
+import '../chunk-N7UJFZQH.js';
+import '../chunk-L2P4CJUR.js';
+import '../chunk-UIMPJNWC.js';
+import '../chunk-DXX6C6X6.js';
+import '../chunk-YFOHAHZE.js';
 import '../chunk-CBZNP6RF.js';
 import '../chunk-XE4OXN2W.js';
 //# sourceMappingURL=index.js.map

package/dist/instrumentation/index.d.ts

@@ -1,3 +1,3 @@
-export { A as ApolloInlineTraceOptions, C as CacheInstrumentationConfig, b as Counter, D as DEFAULT_CACHE_CONFIG, c as DEFAULT_DATABASE_CONFIG, d as DEFAULT_EVENT_QUEUE_CONFIG, e as DEFAULT_FEATURE_FLAGS, f as DEFAULT_GRAPHQL_CONFIG, g as DEFAULT_HTTP_CONFIG, h as DEFAULT_LOGGING_CONFIG, j as DEFAULT_METRICS_CONFIG, k as DEFAULT_TRACING_CONFIG, l as DatabaseInstrumentationConfig, E as ENV_VARS, m as EventQueueInstrumentationConfig, G as Gauge, n as GraphQLInstrumentationConfig, o as GraphQLOperationInfo, p as GraphQLOperationType, H as HTTPInstrumentationConfig, q as Histogram, r as InitializeInstrumentationOptions, t as Instrument, u as InstrumentationConfig, v as InstrumentationContextExtension, w as InstrumentationFeatureFlags, I as InstrumentationSetupResult, L as Log, x as LoggingConfig, M as Metric, y as MetricDefinition, z as MetricLabels, B as MetricsConfig, F as MetricsRegistry, O as OperationContext, P as PrometheusPluginOptions, J as STANDARD_METRICS, S as SetupInstrumentationOptions, K as Span, N as SpanAttributes, Q as SpanContext, R as SpanEvent, T as SpanKind, U as SpanStatus, V as Trace, W as TraceContext, X as Tracer, Y as TracingConfig, Z as UpDownCounter, _ as buildDatabaseConfig, $ as buildFeatureFlags, a0 as buildGraphQLConfig, a1 as buildInstrumentationConfig, a2 as buildMetricsConfig, a3 as buildTracingConfig, a4 as createApolloInlineTracePlugin, a5 as createCounter, a6 as createGauge, a7 as createGraphQLInstrumentationPlugin, a8 as createHistogram, a9 as createPrometheusPlugin, aa as createUpDownCounter, ab as extractOperationInfo, ac as extractTraceContext, ad as getGraphQLOperationFromContext, ae as getGraphQLSpanFromContext, af as getInstrumentationConfig, ag as getLogger, ah as getMetricsRegistry, ai as getTraceContext, aj as getTracer, i as initializeInstrumentation, ak as initializeInstrumentationConfig, al as initializeMetricsRegistry, am as initializeTracer, an as injectTraceContext, ao as instrumentResolver, ap as instrumentResolverMap, aq as instrumented, ar as isApolloInlineTraceAvailable, as as isFeatureEnabled, at as isInstrumentationConfigInitialized, au as isInstrumentationInitialized, av as isMetricsRegistryInitialized, aw as isPrometheusAvailable, ax as isTracerInitialized, ay as resetInstrumentation, az as resetInstrumentationConfig, aA as resetMetricsRegistry, s as setupInstrumentation, aB as startSpan, aC as traced, aD as updateInstrumentationConfig, aE as withSpan } from '../index-fhOvuvlv.js';
-export { l as logger } from '../index-DLyc5o_K.js';
-import '../index-Caqvetqq.js';
+export { A as ApolloInlineTraceOptions, C as CacheInstrumentationConfig, b as Counter, D as DEFAULT_CACHE_CONFIG, c as DEFAULT_DATABASE_CONFIG, d as DEFAULT_EVENT_QUEUE_CONFIG, e as DEFAULT_FEATURE_FLAGS, f as DEFAULT_GRAPHQL_CONFIG, g as DEFAULT_HTTP_CONFIG, h as DEFAULT_LOGGING_CONFIG, j as DEFAULT_METRICS_CONFIG, k as DEFAULT_TRACING_CONFIG, l as DatabaseInstrumentationConfig, E as ENV_VARS, m as EventQueueInstrumentationConfig, G as Gauge, n as GraphQLInstrumentationConfig, o as GraphQLOperationInfo, p as GraphQLOperationType, H as HTTPInstrumentationConfig, q as Histogram, r as InitializeInstrumentationOptions, t as Instrument, u as InstrumentationConfig, v as InstrumentationContextExtension, w as InstrumentationFeatureFlags, I as InstrumentationSetupResult, L as Log, x as LoggingConfig, M as Metric, y as MetricDefinition, z as MetricLabels, B as MetricsConfig, F as MetricsRegistry, O as OperationContext, P as PrometheusPluginOptions, J as STANDARD_METRICS, S as SetupInstrumentationOptions, K as Span, N as SpanAttributes, Q as SpanContext, R as SpanEvent, T as SpanKind, U as SpanStatus, V as Trace, W as TraceContext, X as Tracer, Y as TracingConfig, Z as UpDownCounter, _ as buildDatabaseConfig, $ as buildFeatureFlags, a0 as buildGraphQLConfig, a1 as buildInstrumentationConfig, a2 as buildMetricsConfig, a3 as buildTracingConfig, a4 as createApolloInlineTracePlugin, a5 as createCounter, a6 as createGauge, a7 as createGraphQLInstrumentationPlugin, a8 as createHistogram, a9 as createPrometheusPlugin, aa as createUpDownCounter, ab as extractOperationInfo, ac as extractTraceContext, ad as getGraphQLOperationFromContext, ae as getGraphQLSpanFromContext, af as getInstrumentationConfig, ag as getLogger, ah as getMetricsRegistry, ai as getTraceContext, aj as getTracer, i as initializeInstrumentation, ak as initializeInstrumentationConfig, al as initializeMetricsRegistry, am as initializeTracer, an as injectTraceContext, ao as instrumentResolver, ap as instrumentResolverMap, aq as instrumented, ar as isApolloInlineTraceAvailable, as as isFeatureEnabled, at as isInstrumentationConfigInitialized, au as isInstrumentationInitialized, av as isMetricsRegistryInitialized, aw as isPrometheusAvailable, ax as isTracerInitialized, ay as resetInstrumentation, az as resetInstrumentationConfig, aA as resetMetricsRegistry, s as setupInstrumentation, aB as startSpan, aC as traced, aD as updateInstrumentationConfig, aE as withSpan } from '../index-CVFEyBvK.js';
+export { l as logger } from '../index-B-w7NWpD.js';
+import '../index-D9RN6jp1.js';

package/dist/layer/index.d.ts

@@ -1,2 +1,2 @@
-export { D as DEFAULT_GATEWAY_ROUTING, b as DEFAULT_LAYER_RESOURCES, c as DEFAULT_LAYER_STREAMS, G as GatewayRoutingConfig, L as LayerConfig, a as LayerFullConfig, d as LayerGatewayConfig, e as LayerResourceUrls, S as ServiceLayer } from '../layer-CUu_cZ7d.js';
-export { L as LayerManager, c as createLayerManagerFromEnv, d as detectLayerFromServiceName, g as getGatewayUrlForLayer, v as validateLayerConfig } from '../index-BVjR9llq.js';
+export { D as DEFAULT_GATEWAY_ROUTING, b as DEFAULT_LAYER_RESOURCES, c as DEFAULT_LAYER_STREAMS, G as GatewayRoutingConfig, L as LayerConfig, a as LayerFullConfig, d as LayerGatewayConfig, e as LayerResourceUrls, S as ServiceLayer } from '../layer-GNAVXBMf.js';
+export { L as LayerManager, c as createLayerManagerFromEnv, d as detectLayerFromServiceName, g as getGatewayUrlForLayer, v as validateLayerConfig } from '../index-BCUkR8sC.js';

package/dist/layer/index.js

@@ -1,5 +1,5 @@
-export { LayerManager, createLayerManagerFromEnv, detectLayerFromServiceName, getGatewayUrlForLayer, validateLayerConfig } from '../chunk-GSEPF2B6.js';
-export { DEFAULT_GATEWAY_ROUTING, DEFAULT_LAYER_RESOURCES, DEFAULT_LAYER_STREAMS } from '../chunk-HP6JTFNR.js';
+export { LayerManager, createLayerManagerFromEnv, detectLayerFromServiceName, getGatewayUrlForLayer, validateLayerConfig } from '../chunk-UIMPJNWC.js';
+export { DEFAULT_GATEWAY_ROUTING, DEFAULT_LAYER_RESOURCES, DEFAULT_LAYER_STREAMS } from '../chunk-YFOHAHZE.js';
 import '../chunk-CBZNP6RF.js';
 import '../chunk-XE4OXN2W.js';
 //# sourceMappingURL=index.js.map

package/dist/{layer-CUu_cZ7d.d.ts → layer-GNAVXBMf.d.ts}

@@ -62,6 +62,8 @@ interface GatewayRequestHeaders {
     'x-rbac-bypass'?: 'true' | 'false';
     'x-bypass-source'?: string;
     'x-bypass-timestamp'?: string;
+    'cf-access-client-id'?: string;
+    'cf-access-client-secret'?: string;
 }
 
 export { type CircuitBreakerConfig as C, DEFAULT_GATEWAY_ROUTING as D, type GatewayRoutingConfig as G, type LayerConfig as L, type ServiceLayer as S, type LayerFullConfig as a, DEFAULT_LAYER_RESOURCES as b, DEFAULT_LAYER_STREAMS as c, type LayerGatewayConfig as d, type LayerResourceUrls as e, type GatewayRequestHeaders as f, type GatewayRetryConfig as g, DEFAULT_CIRCUIT_BREAKER_CONFIG as h, DEFAULT_GATEWAY_RETRY_CONFIG as i };

package/dist/logger/index.d.ts

@@ -1,2 +1,2 @@
-import '../index-Caqvetqq.js';
-export { a as LogLevel, b as LogMeta, L as Logger, c as LoggerConfig, d as LoggerTransport, e as debug, f as error, g as log, l as logger, r as redactSensitiveFields, w as warn } from '../index-DLyc5o_K.js';
+import '../index-D9RN6jp1.js';
+export { a as LogLevel, b as LogMeta, L as Logger, c as LoggerConfig, d as LoggerTransport, e as debug, f as error, g as log, l as logger, r as redactSensitiveFields, w as warn } from '../index-B-w7NWpD.js';

package/dist/notifications/index.d.ts

@@ -1,4 +1,4 @@
-import '../graphql-DH3L5Hj7.js';
-import '../index-Caqvetqq.js';
-export { G as GetNotificationsOptions, b as Notification, c as NotificationChannel, d as NotificationPriority, e as NotificationResponse, N as NotificationType, a as NotificationsModule, R as RecipientInput, S as SendChannelNotificationOptions, f as SendNotificationOptions, g as SendTemplateNotificationOptions, T as TenantNotificationsModule } from '../index-DohaJRZP.js';
+import '../graphql-CNhiZ89U.js';
+import '../index-D9RN6jp1.js';
+export { G as GetNotificationsOptions, b as Notification, c as NotificationChannel, d as NotificationPriority, e as NotificationResponse, N as NotificationType, a as NotificationsModule, R as RecipientInput, S as SendChannelNotificationOptions, f as SendNotificationOptions, g as SendTemplateNotificationOptions, T as TenantNotificationsModule } from '../index-DraeealK.js';
 import 'graphql-request';

package/dist/notifications/index.js

@@ -1,6 +1,6 @@
-export { NotificationChannel, NotificationPriority, NotificationType, NotificationsModule, TenantNotificationsModule } from '../chunk-RMDKB5O7.js';
-import '../chunk-O6RHB2YP.js';
-import '../chunk-HP6JTFNR.js';
+export { NotificationChannel, NotificationPriority, NotificationType, NotificationsModule, TenantNotificationsModule } from '../chunk-ZHQUXD6S.js';
+import '../chunk-SMGTXYFR.js';
+import '../chunk-YFOHAHZE.js';
 import '../chunk-CBZNP6RF.js';
 import '../chunk-XE4OXN2W.js';
 //# sourceMappingURL=index.js.map

package/dist/rbac/index.d.ts

@@ -1,7 +1,7 @@
-import { B as BurdenoffGraphQLClient } from '../graphql-DH3L5Hj7.js';
-import { S as SDKContext } from '../index-Caqvetqq.js';
+import { B as BurdenoffGraphQLClient } from '../graphql-CNhiZ89U.js';
+import { S as SDKContext } from '../index-D9RN6jp1.js';
 import { Plugin } from '@envelop/core';
-import { S as ServiceLayer } from '../layer-CUu_cZ7d.js';
+import { S as ServiceLayer } from '../layer-GNAVXBMf.js';
 import 'graphql-request';
 
 type ActorType = 'USER' | 'BOT' | 'INTEGRATION' | 'DELEGATED_AGENT';

package/dist/rbac/index.js

@@ -1,6 +1,6 @@
-export { RBACClient, RBACModule, createRBACClientFromEnv, createRBACDirective, createRBACDirectiveForLayer, createRBACDirectiveFromEnv } from '../chunk-BNJFEOGH.js';
-import '../chunk-O6RHB2YP.js';
-import '../chunk-HP6JTFNR.js';
+export { RBACClient, RBACModule, createRBACClientFromEnv, createRBACDirective, createRBACDirectiveForLayer, createRBACDirectiveFromEnv } from '../chunk-FTDQ6NY5.js';
+import '../chunk-SMGTXYFR.js';
+import '../chunk-YFOHAHZE.js';
 import '../chunk-CBZNP6RF.js';
 import '../chunk-XE4OXN2W.js';
 //# sourceMappingURL=index.js.map

package/dist/resource-caps/index.d.ts

@@ -1,7 +1,7 @@
 import { GraphQLError } from 'graphql';
-import { B as BurdenoffGraphQLClient } from '../graphql-DH3L5Hj7.js';
+import { B as BurdenoffGraphQLClient } from '../graphql-CNhiZ89U.js';
 import 'graphql-request';
-import '../index-Caqvetqq.js';
+import '../index-D9RN6jp1.js';
 
 type ResourceName = 'workspace' | 'workspaceMember' | 'sandbox' | 'vibe' | 'agent' | 'conversation' | 'message' | 'tag' | 'file' | 'group' | 'calendar' | 'scheduledTask' | 'form' | 'apiKey' | 'webhook';
 type PlanTier = 'free' | 'paid';

package/dist/server/index.js

@@ -1,7 +1,8 @@
-import { createHumanReadableErrorPlugin, formatHttpError, normalizeGraphQLResponse, createHttpErrorResponse } from '../chunk-VWNL2O3G.js';
-export { UserFacingGraphQLError, createHttpErrorResponse, createHumanReadableErrorPlugin, createWorkspaceGuardPlugin, formatHttpError, normalizeError, normalizeExecutionResultErrors, normalizeGraphQLResponse, normalizeGraphQLResponsePayload, toUserFacingGraphQLError } from '../chunk-VWNL2O3G.js';
+import { createHumanReadableErrorPlugin, formatHttpError, normalizeGraphQLResponse, createHttpErrorResponse } from '../chunk-OQLDXOZ3.js';
+export { UserFacingGraphQLError, createHttpErrorResponse, createHumanReadableErrorPlugin, createWorkspaceGuardPlugin, formatHttpError, normalizeError, normalizeExecutionResultErrors, normalizeGraphQLResponse, normalizeGraphQLResponsePayload, toUserFacingGraphQLError } from '../chunk-OQLDXOZ3.js';
 import { setWorkspaceContext } from '../chunk-GTEMQXCA.js';
 import { I18n } from '../chunk-ULFFX3YE.js';
+import { ContextManager } from '../chunk-DXX6C6X6.js';
 import { logger } from '../chunk-CBZNP6RF.js';
 import { __name } from '../chunk-XE4OXN2W.js';
 import crypto from 'crypto';
@@ -402,6 +403,7 @@ async function buildContext(request) {
     rawHeader: getHeader(request, "x-workspace-id") ?? "MISSING"
   });
   setWorkspaceContext(wsCtxPayload);
+  ContextManager.setCfAccessContext(getHeader(request, "cf-access-client-id"), getHeader(request, "cf-access-client-secret"));
   return {
     request,
     actor,
@@ -473,7 +475,7 @@ async function createServer(definition) {
   const { initializeDatabase, getDb: getDb2, getDatabaseManager } = await import('../prisma/index.js');
   const { createSecurityPlugin } = await import('../middleware/index.js');
   const { createMetricsPlugin } = await import('../observability/index.js');
-  const { createWorkspaceGuardPlugin: createWorkspaceGuardPlugin2 } = await import('../workspace-guard-3JLBFAMH.js');
+  const { createWorkspaceGuardPlugin: createWorkspaceGuardPlugin2 } = await import('../workspace-guard-4BUG4ZP2.js');
   logger.info(`[Server] Initializing ${config.serviceName}...`);
   const boundary = config.boundary ?? (config.serviceName.startsWith("wspace-") ? "wspace" : config.serviceName.startsWith("global-") ? "global" : "wspace");
   const shouldEnableWorkspaceExtension = disableWorkspaceExtension === true ? false : disableWorkspaceExtension === false ? true : boundary === "wspace";