@burdenoff/be-sdk 2026.618.1 → 2026.623.1

package/dist/database/index.js

@@ -1,5 +1,5 @@
-export { DatabaseModule, closeClickHouseConnection, createTable, executeQuery, getClickHouseClient, getClickHouseStats, insertData, testClickHouseConnection } from '../chunk-XNQUN3AE.js';
-import '../chunk-SMGTXYFR.js';
+export { DatabaseModule, closeClickHouseConnection, createTable, executeQuery, getClickHouseClient, getClickHouseStats, insertData, testClickHouseConnection } from '../chunk-4OQRBSHM.js';
+import '../chunk-EZ4PKRUK.js';
 import '../chunk-YFOHAHZE.js';
 import '../chunk-CBZNP6RF.js';
 import '../chunk-XE4OXN2W.js';

package/dist/event-queue/index.d.ts

@@ -1,6 +1,6 @@
-export { A as AcknowledgeableEvent, B as BaseQueueConfig, a as BulkEventPayload, C as ConsumerConfig, b as ConsumerOptions, c as EventHandler, d as EventMessage, e as EventMetadata, f as EventPriority, g as EventQueueFactory, h as EventQueueHealthCheckResult, E as EventsModule, j as GraphQLEventMessage, h as HealthCheckResult, k as IEventConsumer, I as IEventPublisher, l as IEventQueue, m as ISubscription, M as MemoryEventBus, n as MemoryEventConsumer, o as MemoryEventPublisher, p as MemoryEventQueue, q as ModuleEventPayload, r as ModuleEventsConfig, s as ModuleEventsService, P as PublishEventOptions, t as PublishOptions, u as PublishResult, v as PublisherConfig, Q as QueueStatistics, w as QueueType, R as RedisStreamsConnection, x as RedisStreamsEventConsumer, y as RedisStreamsEventPublisher, S as StreamConfig, z as StreamInfo, D as SubscribeOptions, F as SubscriptionOptions, G as createConsumer, H as createMemoryConsumer, J as createMemoryGraphEventEmitter, K as createMemoryPublisher, L as createModuleEventsService, N as createPublisher, O as redisDlqKey, T as redisStreamKey } from '../index-D7BJuXP3.js';
+export { A as AcknowledgeableEvent, B as BaseQueueConfig, a as BulkEventPayload, C as ConsumerConfig, b as ConsumerOptions, c as EventHandler, d as EventMessage, e as EventMetadata, f as EventPriority, g as EventQueueFactory, h as EventQueueHealthCheckResult, E as EventsModule, j as GraphQLEventMessage, h as HealthCheckResult, k as IEventConsumer, I as IEventPublisher, l as IEventQueue, m as ISubscription, M as MemoryEventBus, n as MemoryEventConsumer, o as MemoryEventPublisher, p as MemoryEventQueue, q as ModuleEventPayload, r as ModuleEventsConfig, s as ModuleEventsService, P as PublishEventOptions, t as PublishOptions, u as PublishResult, v as PublisherConfig, Q as QueueStatistics, w as QueueType, R as RedisStreamsConnection, x as RedisStreamsEventConsumer, y as RedisStreamsEventPublisher, S as StreamConfig, z as StreamInfo, D as SubscribeOptions, F as SubscriptionOptions, G as createConsumer, H as createMemoryConsumer, J as createMemoryGraphEventEmitter, K as createMemoryPublisher, L as createModuleEventsService, N as createPublisher, O as redisDlqKey, T as redisStreamKey } from '../index-B3ECnOLp.js';
 export { E as EntityEventRbacMetadata, a as EntityEventType, b as GraphEventEmitter, G as GraphEventEmitterImpl, c as createGraphEventEmitter, g as getGraphEventEmitter, r as resetGraphEventEmitter } from '../graph-emitter-r5TylDBm.js';
 import '../layer-GNAVXBMf.js';
-import '../graphql-CNhiZ89U.js';
+import '../graphql-BRj5KPOL.js';
 import 'graphql-request';
-import '../index-D9RN6jp1.js';
+import '../index-DDCOGyYh.js';

package/dist/export/index.js

@@ -1,7 +1,8 @@
-export { BaseModuleExporter, PaginationService, convertToCSV, csvToJSON, estimateCSVSize, getCSVHeaders, parseCSV, triggerExportJob } from '../chunk-X7QMT2P6.js';
-import '../chunk-N7UJFZQH.js';
-import '../chunk-L2P4CJUR.js';
+export { BaseModuleExporter, PaginationService, convertToCSV, csvToJSON, estimateCSVSize, getCSVHeaders, parseCSV, triggerExportJob } from '../chunk-UJI2S556.js';
+import '../chunk-OWUVYM2S.js';
+import '../chunk-B527JLOB.js';
 import '../chunk-UIMPJNWC.js';
+import '../chunk-VFCMR5GX.js';
 import '../chunk-DXX6C6X6.js';
 import '../chunk-YFOHAHZE.js';
 import '../chunk-CBZNP6RF.js';

package/dist/feature-flags/index.d.ts

@@ -1 +1 @@
-export { E as EvaluationContext, F as FeatureFlagProvider, a as FeatureFlagProviderConfig, b as FlagEvaluation, c as FlagType, R as ResolutionDetails } from '../index-jOuh_TKn.js';
+export { E as EvaluationContext, F as FeatureFlagProvider, a as FeatureFlagProviderConfig, b as FlagEvaluation, c as FlagType, R as ResolutionDetails } from '../index-BdPnlJ8_.js';

package/dist/feature-flags/index.js

@@ -1,4 +1,5 @@
-export { FeatureFlagProvider } from '../chunk-HRCWJLCZ.js';
+export { FeatureFlagProvider } from '../chunk-YEA4BZOL.js';
+import '../chunk-VFCMR5GX.js';
 import '../chunk-DXX6C6X6.js';
 import '../chunk-XE4OXN2W.js';
 //# sourceMappingURL=index.js.map

package/dist/gateway/index.d.ts

@@ -1,4 +1,4 @@
-export { C as CircuitBreakerStats, a as CircuitState, G as GatewayClient, b as GatewayClientConfig, c as GatewayClientHealth, d as GatewayError, e as GatewayErrorType, f as GraphQLError, g as GraphQLRequestOptions, h as GraphQLResponse, I as ICircuitBreaker, j as IGatewayClient, R as RequestContext, k as createGatewayClient, l as createGatewayClientFromEnv } from '../index-BKjt3X8L.js';
+export { C as CircuitBreakerStats, a as CircuitState, G as GatewayClient, b as GatewayClientConfig, c as GatewayClientHealth, d as GatewayError, e as GatewayErrorType, f as GraphQLError, g as GraphQLRequestOptions, h as GraphQLResponse, I as ICircuitBreaker, j as IGatewayClient, R as RequestContext, k as createGatewayClient, l as createGatewayClientFromEnv, s as signServiceJwt } from '../index-Bm6MYdqS.js';
 export { i as Security } from '../index-UhkH2eaB.js';
 import '../layer-GNAVXBMf.js';
 import 'graphql-yoga';

package/dist/gateway/index.js

@@ -1,6 +1,7 @@
-export { CircuitState, GatewayClient, GatewayError, GatewayErrorType, createGatewayClient, createGatewayClientFromEnv } from '../chunk-N7UJFZQH.js';
-export { security_exports as Security } from '../chunk-L2P4CJUR.js';
+export { CircuitState, GatewayClient, GatewayError, GatewayErrorType, createGatewayClient, createGatewayClientFromEnv } from '../chunk-OWUVYM2S.js';
+export { security_exports as Security } from '../chunk-B527JLOB.js';
 import '../chunk-UIMPJNWC.js';
+export { signServiceJwt } from '../chunk-VFCMR5GX.js';
 import '../chunk-DXX6C6X6.js';
 import '../chunk-YFOHAHZE.js';
 import '../chunk-CBZNP6RF.js';

package/dist/gateway/security/index.js

@@ -1,4 +1,4 @@
-export { DEFAULT_ARMOR_CONFIG, DEFAULT_COST_MAP, DEFAULT_TIERS, MemoryValkey, __resetMetricsForTest, __setSecurityValkeyForTest, buildSecurityPlugins, checkRateLimit, createArmorPlugins, createOperationTimeoutPlugin, createOtelPlugin, createQueryComplexityPlugin, createRateLimitPlugin, getMetrics, getSecurityValkey, initializeMetrics, initializeOtel, initializeSecurityValkey, mergeCostMap, resolveActor, resolveSecurityOptionsFromEnv, resolveTiersFromEnv, scrapeMetrics, shutdownOtel } from '../../chunk-L2P4CJUR.js';
+export { DEFAULT_ARMOR_CONFIG, DEFAULT_COST_MAP, DEFAULT_TIERS, MemoryValkey, __resetMetricsForTest, __setSecurityValkeyForTest, buildSecurityPlugins, checkRateLimit, createArmorPlugins, createOperationTimeoutPlugin, createOtelPlugin, createQueryComplexityPlugin, createRateLimitPlugin, getMetrics, getSecurityValkey, initializeMetrics, initializeOtel, initializeSecurityValkey, mergeCostMap, resolveActor, resolveSecurityOptionsFromEnv, resolveTiersFromEnv, scrapeMetrics, shutdownOtel } from '../../chunk-B527JLOB.js';
 import '../../chunk-CBZNP6RF.js';
 import '../../chunk-XE4OXN2W.js';
 //# sourceMappingURL=index.js.map

package/dist/graph/index.d.ts

@@ -1,8 +1,9 @@
-import '../graphql-CNhiZ89U.js';
-import '../index-D9RN6jp1.js';
-export { A as AUDIT_FIELDS, C as CreateEdgeOptions, a as CreateNodeOptions, D as DefineEntityConfigOptions, b as DefineGraphConfigOptions, c as DefineRelationshipConfigOptions, E as EdgeDocument, d as EntityDefinition, e as EntityEventContext, f as EntityEventData, g as EntityEventHook, h as EntityFetcher, j as EntityGraphConfig, k as EntityRbacConfig, l as EntityVertex, m as ExtractedEntityData, n as ExtractedRelationshipData, F as FieldMapper, o as GenericEntityConfig, p as GenericEntityRbacConfig, q as GenericGraphConfig, r as GenericRelationshipConfig, s as GraphEdge, t as GraphEntityConfig, u as GraphEntityExport, v as GraphEvent, w as GraphEventOptions, x as GraphEventPublishOptions, y as GraphEventType, z as GraphEventsHelper, B as GraphEventsHelperConfig, H as GraphEventsPublisher, I as GraphExportResponse, J as GraphExportService, K as GraphExportServiceConfig, G as GraphModule, L as GraphNode, M as GraphRegistry, N as GraphRelationshipData, O as GraphRelationshipExport, P as GraphSchema, Q as GraphValidationError, R as GraphValidationResult, S as InitializeGraphOptions, T as ModuleGraph, U as ModuleGraphConfig, V as ModuleGraphDefinition, W as PrismaGraphIntegration, X as PrismaGraphIntegrationOptions, Y as ProductFacet, Z as QueryGraphOptions, _ as RelationshipDefinition, $ as RelationshipEventData, a0 as RelationshipExportData, a1 as RelationshipFetcher, a2 as RelationshipGraphConfig, a3 as SOFT_DELETE_FIELDS, a4 as STANDARD_FIELDS, a5 as SearchFacets, a6 as SearchFilters, a7 as SearchResponse, a8 as SearchResult, a9 as TENANT_FIELDS, aa as TraverseDirection, ab as TraverseOptions, ac as TraverseResult, ad as TypeFacet, ae as ValidationErrorType, af as createEntityEvent, ag as createGraphEventsHelper, ah as createGraphExportService, ai as createPrismaGraphIntegration, aj as createRelationshipEvent, ak as createRelationshipFromEntity, al as defineEntity, am as defineGraphConfig, an as defineModuleGraph, ao as defineRelationship, ap as extractEntityTitle, aq as extractMinimalFields, ar as getCollectionForEntity, as as getGraphEventsPublisher, at as getGraphStats, au as initializeGraph, av as isGraphInitialized, aw as parseRelationship, ax as shouldSyncEntity, ay as shouldSyncRelationship } from '../index-DYQF_AIz.js';
+import '../graphql-BRj5KPOL.js';
+import '../index-DDCOGyYh.js';
+export { A as AUDIT_FIELDS, C as CreateEdgeOptions, a as CreateNodeOptions, D as DefineEntityConfigOptions, b as DefineGraphConfigOptions, c as DefineRelationshipConfigOptions, E as EdgeDocument, d as EntityDefinition, e as EntityEventContext, f as EntityEventData, g as EntityEventHook, h as EntityFetcher, j as EntityGraphConfig, k as EntityRbacConfig, l as EntityVertex, m as ExtractedEntityData, n as ExtractedRelationshipData, F as FieldMapper, o as GenericEntityConfig, p as GenericEntityRbacConfig, q as GenericGraphConfig, r as GenericRelationshipConfig, s as GraphEdge, t as GraphEntityConfig, u as GraphEntityExport, v as GraphEvent, w as GraphEventOptions, x as GraphEventPublishOptions, y as GraphEventType, z as GraphEventsHelper, B as GraphEventsHelperConfig, H as GraphEventsPublisher, I as GraphExportResponse, J as GraphExportService, K as GraphExportServiceConfig, G as GraphModule, L as GraphNode, M as GraphRegistry, N as GraphRelationshipData, O as GraphRelationshipExport, P as GraphSchema, Q as GraphValidationError, R as GraphValidationResult, S as InitializeGraphOptions, T as ModuleGraph, U as ModuleGraphConfig, V as ModuleGraphDefinition, W as PrismaGraphIntegration, X as PrismaGraphIntegrationOptions, Y as ProductFacet, Z as QueryGraphOptions, _ as RelationshipDefinition, $ as RelationshipEventData, a0 as RelationshipExportData, a1 as RelationshipFetcher, a2 as RelationshipGraphConfig, a3 as SOFT_DELETE_FIELDS, a4 as STANDARD_FIELDS, a5 as SearchFacets, a6 as SearchFilters, a7 as SearchResponse, a8 as SearchResult, a9 as TENANT_FIELDS, aa as TraverseDirection, ab as TraverseOptions, ac as TraverseResult, ad as TypeFacet, ae as ValidationErrorType, af as createEntityEvent, ag as createGraphEventsHelper, ah as createGraphExportService, ai as createPrismaGraphIntegration, aj as createRelationshipEvent, ak as createRelationshipFromEntity, al as defineEntity, am as defineGraphConfig, an as defineModuleGraph, ao as defineRelationship, ap as extractEntityTitle, aq as extractMinimalFields, ar as getCollectionForEntity, as as getGraphEventsPublisher, at as getGraphStats, au as initializeGraph, av as isGraphInitialized, aw as parseRelationship, ax as shouldSyncEntity, ay as shouldSyncRelationship } from '../index-BN_-AWdb.js';
 export { E as EntityEventType, G as GraphEventEmitter, a as GraphMiddlewareConfig, b as addGraphExtension } from '../prisma-extension-krXnYnrN.js';
 import 'graphql-request';
+import '../layer-GNAVXBMf.js';
 import '../client-CSjIrYKS.js';
 import '@prisma/adapter-pg';
 import 'pg';

package/dist/graph/index.js

@@ -1,10 +1,10 @@
-export { AUDIT_FIELDS, GraphEventsPublisher, GraphExportService, GraphModule, SOFT_DELETE_FIELDS, STANDARD_FIELDS, TENANT_FIELDS, createGraphEventsHelper, createGraphExportService, createPrismaGraphIntegration, createRelationshipFromEntity, defineEntity, defineGraphConfig, defineModuleGraph, defineRelationship, getGraphEventsPublisher, getGraphStats, initializeGraph, isGraphInitialized } from '../chunk-XR3KUHJ5.js';
+export { AUDIT_FIELDS, GraphEventsPublisher, GraphExportService, GraphModule, SOFT_DELETE_FIELDS, STANDARD_FIELDS, TENANT_FIELDS, createGraphEventsHelper, createGraphExportService, createPrismaGraphIntegration, createRelationshipFromEntity, defineEntity, defineGraphConfig, defineModuleGraph, defineRelationship, getGraphEventsPublisher, getGraphStats, initializeGraph, isGraphInitialized } from '../chunk-Z2423JIB.js';
 export { GraphRegistry, addGraphExtension, createEntityEvent, createRelationshipEvent, extractEntityTitle, extractMinimalFields, getCollectionForEntity, parseRelationship, shouldSyncEntity, shouldSyncRelationship } from '../chunk-5CESUKWC.js';
 import '../chunk-H3AXO5SY.js';
 import '../chunk-OHEPNJ2X.js';
 import '../chunk-MQCVQCFA.js';
 import '../chunk-MHNA7IS7.js';
-import '../chunk-SMGTXYFR.js';
+import '../chunk-EZ4PKRUK.js';
 import '../chunk-YFOHAHZE.js';
 import '../chunk-CBZNP6RF.js';
 import '../chunk-XE4OXN2W.js';

package/dist/{graphql-CNhiZ89U.d.ts → graphql-BRj5KPOL.d.ts}

@@ -1,9 +1,9 @@
 import { Variables } from 'graphql-request';
-import { a as SDKConfig, S as SDKContext } from './index-D9RN6jp1.js';
+import { a as SDKConfig, S as SDKContext } from './index-DDCOGyYh.js';
 
 declare class BurdenoffGraphQLClient {
     private workspacesClient;
-    private tenantClient?;
+    private tenantGateway?;
     private config;
     private defaultContext;
     constructor(config: SDKConfig, defaultContext?: SDKContext);
@@ -11,6 +11,7 @@ declare class BurdenoffGraphQLClient {
     updateContext(context: Partial<SDKContext>): void;
     query<T>(query: string, variables?: Variables, context?: SDKContext): Promise<T>;
     tenantQuery<T>(query: string, variables?: Variables, context?: SDKContext): Promise<T>;
+    private mapTenantError;
     private executeQuery;
     private executeWithRetry;
     private shouldRetry;

package/dist/{index-DraeealK.d.ts → index-1qCbBvKE.d.ts}

@@ -1,5 +1,5 @@
-import { B as BurdenoffGraphQLClient } from './graphql-CNhiZ89U.js';
-import { S as SDKContext } from './index-D9RN6jp1.js';
+import { B as BurdenoffGraphQLClient } from './graphql-BRj5KPOL.js';
+import { S as SDKContext } from './index-DDCOGyYh.js';
 
 declare enum NotificationChannel$1 {
     EMAIL = "EMAIL",

package/dist/{index-D7BJuXP3.d.ts → index-B3ECnOLp.d.ts}

@@ -1,7 +1,7 @@
 import { S as ServiceLayer } from './layer-GNAVXBMf.js';
 import { E as EntityEventRbacMetadata, a as EntityEventType$1, b as GraphEventEmitter$1, G as GraphEventEmitterImpl, c as createGraphEventEmitter$1, g as getGraphEventEmitter, r as resetGraphEventEmitter } from './graph-emitter-r5TylDBm.js';
-import { B as BurdenoffGraphQLClient } from './graphql-CNhiZ89U.js';
-import { S as SDKContext } from './index-D9RN6jp1.js';
+import { B as BurdenoffGraphQLClient } from './graphql-BRj5KPOL.js';
+import { S as SDKContext } from './index-DDCOGyYh.js';
 
 interface EventMessage$1<T = unknown> {
     id: string;

package/dist/{index-CVFEyBvK.d.ts → index-BIhZJ1w7.d.ts}

@@ -1,4 +1,4 @@
-import { L as Logger, l as logger } from './index-B-w7NWpD.js';
+import { L as Logger, l as logger } from './index-CNy4MwKc.js';
 
 interface InstrumentationFeatureFlags {
     tracing: boolean;

package/dist/{index-DYQF_AIz.d.ts → index-BN_-AWdb.d.ts}

@@ -1,5 +1,5 @@
-import { B as BurdenoffGraphQLClient } from './graphql-CNhiZ89U.js';
-import { S as SDKContext } from './index-D9RN6jp1.js';
+import { B as BurdenoffGraphQLClient } from './graphql-BRj5KPOL.js';
+import { S as SDKContext } from './index-DDCOGyYh.js';
 import { P as PrismaClientBase } from './client-CSjIrYKS.js';
 import { G as GraphEventEmitterImpl, E as EntityEventRbacMetadata } from './graph-emitter-r5TylDBm.js';
 import { G as GraphEventEmitter, E as EntityEventType, a as GraphMiddlewareConfig, b as addGraphExtension } from './prisma-extension-krXnYnrN.js';

package/dist/{index-jOuh_TKn.d.ts → index-BdPnlJ8_.d.ts}

@@ -23,6 +23,7 @@ interface FeatureFlagProviderConfig {
     gatewayUrl: string;
     cacheTtlSeconds?: number;
     serviceToken?: string;
+    serviceName?: string;
     defaultActorType?: 'user' | 'app' | 'service' | 'super_admin';
 }
 
@@ -30,6 +31,7 @@ declare class FeatureFlagProvider {
     private readonly gatewayUrl;
     private readonly cacheTtlMs;
     private readonly serviceToken?;
+    private readonly serviceName;
     private readonly defaultActorType;
     private readonly cache;
     constructor(config: FeatureFlagProviderConfig);

package/dist/{index-BKjt3X8L.d.ts → index-Bm6MYdqS.d.ts}

@@ -137,6 +137,8 @@ declare class GatewayClient implements IGatewayClient {
 declare function createGatewayClient(config: GatewayClientConfig): GatewayClient;
 declare function createGatewayClientFromEnv(): GatewayClient;
 
+declare function signServiceJwt(actorId: string, ttlSeconds?: number): Promise<string | null>;
+
 type index_CircuitBreakerStats = CircuitBreakerStats;
 type index_CircuitState = CircuitState;
 declare const index_CircuitState: typeof CircuitState;
@@ -156,8 +158,9 @@ type index_IGatewayClient = IGatewayClient;
 type index_RequestContext = RequestContext;
 declare const index_createGatewayClient: typeof createGatewayClient;
 declare const index_createGatewayClientFromEnv: typeof createGatewayClientFromEnv;
+declare const index_signServiceJwt: typeof signServiceJwt;
 declare namespace index {
-  export { type index_CircuitBreakerStats as CircuitBreakerStats, index_CircuitState as CircuitState, index_GatewayClient as GatewayClient, type index_GatewayClientConfig as GatewayClientConfig, type index_GatewayClientHealth as GatewayClientHealth, index_GatewayError as GatewayError, index_GatewayErrorType as GatewayErrorType, type index_GraphQLError as GraphQLError, type index_GraphQLRequestOptions as GraphQLRequestOptions, type index_GraphQLResponse as GraphQLResponse, type index_ICircuitBreaker as ICircuitBreaker, type index_IGatewayClient as IGatewayClient, type index_RequestContext as RequestContext, index$1 as Security, index_createGatewayClient as createGatewayClient, index_createGatewayClientFromEnv as createGatewayClientFromEnv };
+  export { type index_CircuitBreakerStats as CircuitBreakerStats, index_CircuitState as CircuitState, index_GatewayClient as GatewayClient, type index_GatewayClientConfig as GatewayClientConfig, type index_GatewayClientHealth as GatewayClientHealth, index_GatewayError as GatewayError, index_GatewayErrorType as GatewayErrorType, type index_GraphQLError as GraphQLError, type index_GraphQLRequestOptions as GraphQLRequestOptions, type index_GraphQLResponse as GraphQLResponse, type index_ICircuitBreaker as ICircuitBreaker, type index_IGatewayClient as IGatewayClient, type index_RequestContext as RequestContext, index$1 as Security, index_createGatewayClient as createGatewayClient, index_createGatewayClientFromEnv as createGatewayClientFromEnv, index_signServiceJwt as signServiceJwt };
 }
 
-export { type CircuitBreakerStats as C, GatewayClient as G, type ICircuitBreaker as I, type RequestContext as R, CircuitState as a, type GatewayClientConfig as b, type GatewayClientHealth as c, GatewayError as d, GatewayErrorType as e, type GraphQLError as f, type GraphQLRequestOptions as g, type GraphQLResponse as h, index as i, type IGatewayClient as j, createGatewayClient as k, createGatewayClientFromEnv as l };
+export { type CircuitBreakerStats as C, GatewayClient as G, type ICircuitBreaker as I, type RequestContext as R, CircuitState as a, type GatewayClientConfig as b, type GatewayClientHealth as c, GatewayError as d, GatewayErrorType as e, type GraphQLError as f, type GraphQLRequestOptions as g, type GraphQLResponse as h, index as i, type IGatewayClient as j, createGatewayClient as k, createGatewayClientFromEnv as l, signServiceJwt as s };

package/dist/{index-B-w7NWpD.d.ts → index-CNy4MwKc.d.ts}

@@ -1,4 +1,4 @@
-import { S as SDKContext } from './index-D9RN6jp1.js';
+import { S as SDKContext } from './index-DDCOGyYh.js';
 
 declare function redactSensitiveFields<T>(value: T): T;
 type LogLevel = 'debug' | 'info' | 'warn' | 'error';

package/dist/{index-D9RN6jp1.d.ts → index-DDCOGyYh.d.ts}

@@ -1,6 +1,10 @@
+import { S as ServiceLayer } from './layer-GNAVXBMf.js';
+
 interface SDKConfig {
     workspacesApiUrl: string;
     tenantApiUrl?: string;
+    serviceLayer?: ServiceLayer;
+    serviceName?: string;
     timeout?: number;
     retry?: RetryConfig;
     logger?: LoggerConfig;

package/dist/{index-DohlGQGw.d.ts → index-DsBZRR82.d.ts}

@@ -1,6 +1,6 @@
-import { B as BurdenoffGraphQLClient } from './graphql-CNhiZ89U.js';
-import { S as SDKContext } from './index-D9RN6jp1.js';
-import { N as NotificationType } from './index-DraeealK.js';
+import { B as BurdenoffGraphQLClient } from './graphql-BRj5KPOL.js';
+import { S as SDKContext } from './index-DDCOGyYh.js';
+import { N as NotificationType } from './index-1qCbBvKE.js';
 
 declare enum ActivityType {
     CREATE = "create",

package/dist/index.d.ts

@@ -1,19 +1,19 @@
-import { S as SDKContext, a as SDKConfig, E as EventQueueHealthStatus, T as TemporalHealthStatus, b as SDKHealthStatus, c as SDKShutdownOptions } from './index-D9RN6jp1.js';
-export { d as EventQueueSDKConfig, L as LoggerConfig, e as LoggerTransport } from './index-D9RN6jp1.js';
-import { L as Logger } from './index-B-w7NWpD.js';
-export { i as Logger } from './index-B-w7NWpD.js';
+import { S as SDKContext, a as SDKConfig, E as EventQueueHealthStatus, T as TemporalHealthStatus, b as SDKHealthStatus, c as SDKShutdownOptions } from './index-DDCOGyYh.js';
+export { d as EventQueueSDKConfig, L as LoggerConfig, e as LoggerTransport } from './index-DDCOGyYh.js';
+import { L as Logger } from './index-CNy4MwKc.js';
+export { i as Logger } from './index-CNy4MwKc.js';
 import { AuthModule } from './auth/index.js';
-import { T as TenantNotificationsModule, a as NotificationsModule } from './index-DraeealK.js';
-export { t as Notifications } from './index-DraeealK.js';
+import { T as TenantNotificationsModule, a as NotificationsModule } from './index-1qCbBvKE.js';
+export { t as Notifications } from './index-1qCbBvKE.js';
 import { RBACModule } from './rbac/index.js';
 export { LayerAwareRBACConfig, RBACDirectiveConfig, createRBACDirective, createRBACDirectiveForLayer, createRBACDirectiveFromEnv } from './rbac/index.js';
-import { A as ActivityModule, U as UsageModule, T as TrackerModule } from './index-DohlGQGw.js';
+import { A as ActivityModule, U as UsageModule, T as TrackerModule } from './index-DsBZRR82.js';
 import { DatabaseConfig, DatabaseModule } from './database/index.js';
-import { E as EventsModule, I as IEventPublisher } from './index-D7BJuXP3.js';
-export { i as EventQueue } from './index-D7BJuXP3.js';
-import { G as GraphModule } from './index-DYQF_AIz.js';
-export { i as Graph } from './index-DYQF_AIz.js';
-import { B as BurdenoffGraphQLClient } from './graphql-CNhiZ89U.js';
+import { E as EventsModule, I as IEventPublisher } from './index-B3ECnOLp.js';
+export { i as EventQueue } from './index-B3ECnOLp.js';
+import { G as GraphModule } from './index-BN_-AWdb.js';
+export { i as Graph } from './index-BN_-AWdb.js';
+import { B as BurdenoffGraphQLClient } from './graphql-BRj5KPOL.js';
 import { TemporalModule } from './temporal/index.js';
 export { TemporalClient, TemporalClientConfig, TemporalClientFactory, TemporalWorker, TemporalWorkerConfig, TemporalWorkerFactory, TemporalWorkerManager, WorkflowStartOptions } from './temporal/index.js';
 export { createInternalClient, createInternalClientForTenant, createInternalClientForWorkspaces } from './client/internal-client.js';
@@ -29,11 +29,11 @@ export { i as I18n, I as I18nCapableContext, T as Translator, c as createTransla
 export { i as Export } from './index-B4ciT3OZ.js';
 export { i as Init } from './index-B0ebYV9W.js';
 export { i as DataLoader } from './index-DW9q22GH.js';
-export { a as Instrumentation } from './index-CVFEyBvK.js';
+export { a as Instrumentation } from './index-BIhZJ1w7.js';
 export { i as Layer } from './index-BCUkR8sC.js';
 export { i as Crypto } from './index-e_18DzAg.js';
-export { i as Gateway } from './index-BKjt3X8L.js';
-export { i as FeatureFlags } from './index-jOuh_TKn.js';
+export { i as Gateway } from './index-Bm6MYdqS.js';
+export { i as FeatureFlags } from './index-BdPnlJ8_.js';
 export { i as Captcha, R as RecaptchaVerifyOptions, a as RecaptchaVerifyResult, b as isCaptchaEnabled, v as verifyCaptcha, c as verifyCaptchaIfEnabled } from './index-B70b5mYS.js';
 export { i as Platform } from './index-BQ1yJn1K.js';
 export { C as CircuitBreakerConfig, h as DEFAULT_CIRCUIT_BREAKER_CONFIG, i as DEFAULT_GATEWAY_RETRY_CONFIG, D as DEFAULT_GATEWAY_ROUTING, b as DEFAULT_LAYER_RESOURCES, c as DEFAULT_LAYER_STREAMS, f as GatewayRequestHeaders, g as GatewayRetryConfig, G as GatewayRoutingConfig, L as LayerConfig, a as LayerFullConfig, d as LayerGatewayConfig, e as LayerResourceUrls, S as ServiceLayer } from './layer-GNAVXBMf.js';

package/dist/index.js

@@ -3,21 +3,21 @@ export { RESOURCE_CAP_DEFAULTS, ResourceCapExceededError, ResourceCapsModule, ge
 import './chunk-GTEMQXCA.js';
 export { sharing_exports as Sharing } from './chunk-XD5ZK727.js';
 export { TemporalClient, TemporalClientFactory, TemporalModule, TemporalWorker, TemporalWorkerFactory, TemporalWorkerManager } from './chunk-IC7YDBGE.js';
-import { ActivityModule, UsageModule, TrackerModule } from './chunk-ZPEDC5V3.js';
-export { ActivityModule, TrackerModule, UsageModule } from './chunk-ZPEDC5V3.js';
-import { RBACModule } from './chunk-FTDQ6NY5.js';
-export { RBACModule, createRBACDirective, createRBACDirectiveForLayer, createRBACDirectiveFromEnv } from './chunk-FTDQ6NY5.js';
+import { ActivityModule, UsageModule, TrackerModule } from './chunk-TYXGWVRL.js';
+export { ActivityModule, TrackerModule, UsageModule } from './chunk-TYXGWVRL.js';
+import { RBACModule } from './chunk-6NB7P6SR.js';
+export { RBACModule, createRBACDirective, createRBACDirectiveForLayer, createRBACDirectiveFromEnv } from './chunk-6NB7P6SR.js';
 export { instrumentation_exports as Instrumentation } from './chunk-ACYGOENW.js';
 import './chunk-REF7PANB.js';
 export { middleware_exports as Middleware } from './chunk-2HANKZZM.js';
-import { TenantNotificationsModule, NotificationsModule } from './chunk-ZHQUXD6S.js';
-export { tenant_notifications_exports as Notifications, NotificationsModule } from './chunk-ZHQUXD6S.js';
 export { observability_exports as Observability } from './chunk-5LXDPGDH.js';
+import { TenantNotificationsModule, NotificationsModule } from './chunk-IUL5TEKE.js';
+export { tenant_notifications_exports as Notifications, NotificationsModule } from './chunk-IUL5TEKE.js';
 export { platform_exports as Platform } from './chunk-PHKK7725.js';
-export { export_exports as Export } from './chunk-X7QMT2P6.js';
-export { feature_flags_exports as FeatureFlags } from './chunk-HRCWJLCZ.js';
-import { GraphModule } from './chunk-XR3KUHJ5.js';
-export { graph_exports as Graph, GraphModule } from './chunk-XR3KUHJ5.js';
+export { export_exports as Export } from './chunk-UJI2S556.js';
+export { feature_flags_exports as FeatureFlags } from './chunk-YEA4BZOL.js';
+import { GraphModule } from './chunk-Z2423JIB.js';
+export { graph_exports as Graph, GraphModule } from './chunk-Z2423JIB.js';
 import './chunk-5CESUKWC.js';
 import { EventsModule } from './chunk-H3AXO5SY.js';
 export { event_queue_exports as EventQueue, EventsModule } from './chunk-H3AXO5SY.js';
@@ -27,35 +27,49 @@ export { graphql_exports as GraphQL } from './chunk-X4NELQLV.js';
 import './chunk-QLVKMWFA.js';
 import './chunk-MHNA7IS7.js';
 export { i18n_exports as I18n, createTranslator, getLanguage, getLocale, hasI18n, t } from './chunk-ULFFX3YE.js';
-export { init_exports as Init } from './chunk-5FEOFBQ4.js';
-export { gateway_exports as Gateway } from './chunk-N7UJFZQH.js';
-import './chunk-L2P4CJUR.js';
+export { init_exports as Init } from './chunk-F5BPKP75.js';
+import { GatewayClient, GatewayError, GatewayErrorType } from './chunk-OWUVYM2S.js';
+export { gateway_exports as Gateway } from './chunk-OWUVYM2S.js';
+import './chunk-B527JLOB.js';
 export { layer_exports as Layer } from './chunk-UIMPJNWC.js';
+import './chunk-VFCMR5GX.js';
 import { ContextManager } from './chunk-DXX6C6X6.js';
 export { ContextManager } from './chunk-DXX6C6X6.js';
+import { AuthModule } from './chunk-SS4XWRYR.js';
+export { AuthModule } from './chunk-SS4XWRYR.js';
+export { utils_exports as Utils } from './chunk-B7I4TABG.js';
 export { cache_exports as Cache } from './chunk-UYE4IEPT.js';
 export { captcha_exports as Captcha, isCaptchaEnabled, verifyCaptcha, verifyCaptchaIfEnabled } from './chunk-YMZEUTD2.js';
 export { createInternalClient, createInternalClientForTenant, createInternalClientForWorkspaces } from './chunk-VI4VSNTI.js';
-export { crypto_exports as Crypto } from './chunk-SBS4S2PJ.js';
-import { DatabaseModule } from './chunk-XNQUN3AE.js';
-export { DatabaseModule } from './chunk-XNQUN3AE.js';
-export { dataloader_exports as DataLoader } from './chunk-NUB5GQTU.js';
-import { AuthModule } from './chunk-FKSMQLIV.js';
-export { AuthModule } from './chunk-FKSMQLIV.js';
-export { utils_exports as Utils } from './chunk-B7I4TABG.js';
-import { APIError, NetworkError, TimeoutError, ValidationError } from './chunk-SMGTXYFR.js';
+import { DatabaseModule } from './chunk-4OQRBSHM.js';
+export { DatabaseModule } from './chunk-4OQRBSHM.js';
+import { APIError, NetworkError, TimeoutError, ValidationError } from './chunk-EZ4PKRUK.js';
 export { DEFAULT_CIRCUIT_BREAKER_CONFIG, DEFAULT_GATEWAY_RETRY_CONFIG, DEFAULT_GATEWAY_ROUTING, DEFAULT_LAYER_RESOURCES, DEFAULT_LAYER_STREAMS } from './chunk-YFOHAHZE.js';
 import { logger } from './chunk-CBZNP6RF.js';
 export { logger_exports as Logger } from './chunk-CBZNP6RF.js';
+export { crypto_exports as Crypto } from './chunk-SBS4S2PJ.js';
+export { dataloader_exports as DataLoader } from './chunk-NUB5GQTU.js';
 import { __name } from './chunk-XE4OXN2W.js';
 import { GraphQLClient } from 'graphql-request';
 
+function isServiceLayer(value) {
+  return value === "wspace" || value === "global";
+}
+__name(isServiceLayer, "isServiceLayer");
 var BurdenoffGraphQLClient = class {
   static {
     __name(this, "BurdenoffGraphQLClient");
   }
   workspacesClient;
-  tenantClient;
+  /**
+  * Cross-layer (tenant) calls go through the unified GatewayClient, which
+  * targets the peer layer's PUBLIC gateway and mints a short-lived `service`
+  * actor JWT (via signServiceJwt) so the gateway admits the M2M call and the
+  * subgraph sees a trusted service context. This is the same mechanism used by
+  * `GatewayClient.crossLayerQuery` everywhere else — kept consistent here so
+  * tenant SDK calls (notifications, tenant lookups) authenticate identically.
+  */
+  tenantGateway;
   config;
   defaultContext;
   constructor(config, defaultContext = {}) {
@@ -65,8 +79,15 @@ var BurdenoffGraphQLClient = class {
       headers: this.getHeaders(defaultContext)
     });
     if (config.tenantApiUrl) {
-      this.tenantClient = new GraphQLClient(config.tenantApiUrl, {
-        headers: this.getHeaders(defaultContext)
+      this.tenantGateway = new GatewayClient({
+        layer: config.serviceLayer ?? (isServiceLayer(process.env["SERVICE_LAYER"]) ? process.env["SERVICE_LAYER"] : "wspace"),
+        serviceName: config.serviceName ?? process.env["SERVICE_NAME"] ?? "burdenoff-be-sdk",
+        crossLayerGatewayUrl: config.tenantApiUrl,
+        timeout: config.timeout,
+        // Honor the SDK's retry config (same field shape) so callers that lower
+        // maxAttempts for non-idempotent tenant mutations (e.g. notification
+        // sends) are respected instead of falling back to the gateway default.
+        retry: config.retry
       });
     }
   }
@@ -104,9 +125,6 @@ var BurdenoffGraphQLClient = class {
       ...context
     };
     this.workspacesClient.setHeaders(this.getHeaders(this.defaultContext));
-    if (this.tenantClient) {
-      this.tenantClient.setHeaders(this.getHeaders(this.defaultContext));
-    }
   }
   /**
   * Execute GraphQL query/mutation against workspaces API
@@ -115,15 +133,79 @@ var BurdenoffGraphQLClient = class {
     return this.executeWithRetry(() => this.executeQuery(this.workspacesClient, query, variables, context), "workspaces");
   }
   /**
-  * Execute GraphQL query/mutation against tenant API
+  * Execute GraphQL query/mutation against the tenant (cross-layer) API.
+  *
+  * Routed through GatewayClient.crossLayerQuery: targets the peer layer's
+  * PUBLIC gateway and mints a short-lived `service` actor JWT. Only routing
+  * context (workspace / product) is forwarded — the end-user identity is not,
+  * because cross-layer tenant operations are service-to-service M2M. Retry and
+  * circuit-breaking are handled inside GatewayClient.
   */
   async tenantQuery(query, variables, context) {
-    if (!this.tenantClient) {
+    if (!this.tenantGateway) {
       throw new APIError("Tenant API URL not configured", {
         operation: "tenantQuery"
       });
     }
-    return this.executeWithRetry(() => this.executeQuery(this.tenantClient, query, variables, context), "tenant");
+    const mergedContext = {
+      ...this.defaultContext,
+      ...context
+    };
+    const headers = {};
+    if (mergedContext.workspaceId) {
+      headers["x-workspace-id"] = mergedContext.workspaceId;
+    }
+    if (mergedContext.productId) {
+      headers["x-product-id"] = mergedContext.productId;
+    }
+    try {
+      const response = await this.tenantGateway.crossLayerQuery({
+        query,
+        variables,
+        headers
+      });
+      if (response.data == null) {
+        throw new APIError("Tenant query returned no data", {
+          api: "tenant"
+        });
+      }
+      return response.data;
+    } catch (error) {
+      throw this.mapTenantError(error);
+    }
+  }
+  /**
+  * Map a GatewayClient failure back to the SDK's APIError contract so existing
+  * tenant callers (which inspect `error.message` / extensions, e.g. "Forbidden")
+  * keep working unchanged.
+  */
+  mapTenantError(error) {
+    if (error instanceof APIError) {
+      return error;
+    }
+    if (error instanceof GatewayError) {
+      const first = error.graphqlErrors?.[0];
+      if (first) {
+        return new APIError(first.message, {
+          graphqlErrors: error.graphqlErrors,
+          extensions: first.extensions
+        });
+      }
+      if (error.type === GatewayErrorType.NETWORK_ERROR) {
+        return new NetworkError(error.message, {
+          gatewayErrorType: error.type
+        });
+      }
+      if (error.type === GatewayErrorType.TIMEOUT_ERROR) {
+        return new TimeoutError(error.message, {
+          gatewayErrorType: error.type
+        });
+      }
+      return new APIError(error.message, {
+        gatewayErrorType: error.type
+      });
+    }
+    return this.handleError(error);
   }
   /**
   * Execute GraphQL request
@@ -135,8 +217,7 @@ var BurdenoffGraphQLClient = class {
         ...context
       };
       if (context) {
-        const headers = this.getHeaders(mergedContext);
-        client.setHeaders(headers);
+        client.setHeaders(this.getHeaders(mergedContext));
       }
       const response = await client.request(query, variables);
       return response;