@bevel-software/platform-core-backend 0.20.0 → 0.21.0

package/dist/core/lifecycle.d.ts

@@ -1,6 +1,9 @@
 import type { Server } from 'node:http';
-import type { Database } from '../modules/database/connection.js';
+import { type Database } from '../modules/database/connection.js';
 import type { AdvisoryLease } from '../modules/database/advisory-lock.js';
+import { type KbStartupRunner } from '../modules/workspace/startup/kb-startup-runner.js';
+import type { WorkflowService } from '../modules/workflow/workflow.service.js';
+import type { PluginJoinRequestJobs } from '../modules/plugins/join-request-jobs.service.js';
 /**
  * The process lifecycle: who may drain the commit queue, and how the process
  * stops.
@@ -83,27 +86,79 @@ export declare function holdCommitWorkerLease(lease: AdvisoryLease, worker: Leas
  * anyway; a stop during the task waits for it, then stops the worker.
  */
 export declare function withStartupTask(worker: LeasedWorker, task: () => Promise<void>, log?: (message: string) => void): LeasedWorker;
-export interface ShutdownDeps {
-    /** The listening server — stops accepting, then drops what is connected. */
-    server: Pick<Server, 'close' | 'closeAllConnections'>;
+/**
+ * What one knowledge base's graph needs of itself to be STARTED: the boot
+ * side effects that used to run inside `createCoreServer`, named so a host
+ * can run them for a graph it builds on demand, and stop them again.
+ */
+export interface BootableCore {
+    config: {
+        workspacesRoot: string;
+    };
+    kbDirName: string;
+    kbStartupRunner: Pick<KbStartupRunner, 'runAll' | 'retryUntilMaintained'>;
+    workflowService: Pick<WorkflowService, 'closeChangeRequestsWithDeletedBranches'>;
+    pluginJoinRequestJobs: Pick<PluginJoinRequestJobs, 'startSweeping'>;
+    /**
+     * The startup phase's retry, when the boot survived an unreachable remote
+     * and is asking again on a timer; null otherwise. Set by {@link startCore},
+     * stopped by {@link stopCore}.
+     */
+    startupRetry: {
+        stop(): void;
+    } | null;
+}
+/**
+ * Bring a built graph up: the distribution's boot hook, the note about what
+ * sits beside a checkout, the knowledge-base startup phase with its
+ * unreachable-remote fallback, the deleted-branch sweep and the join-request
+ * jobs. `createCoreServer` runs this for a single-tenant deployment; a host
+ * serving several knowledge bases runs it when a tenant is activated.
+ *
+ * Throws to stop the boot on every failure but an unreachable remote — the
+ * container's restart policy is the retry — see `kb-startup-runner.ts`.
+ */
+export declare function startCore<C extends BootableCore>(core: C, ext?: {
+    onBoot?(core: C): Promise<void> | void;
+}): Promise<void>;
+/**
+ * What one knowledge base's graph holds that must be let go of when it
+ * stops: the pieces {@link stopCore} winds down, in the order it winds
+ * them down. `createShutdown` takes the same, plus the listening server.
+ */
+export interface CoreStopDeps {
     /** The lease loop from {@link holdCommitWorkerLease}: its stop finishes the in-flight commit and releases the lease. */
     commitWorker: Pick<LeaseLoopHandle, 'stop'>;
     /**
      * Background work to wind down before the pool goes — the join-request
-     * sweep and its jobs, today. The timer is stopped after the server so
-     * nothing new is scheduled, then the jobs already running are awaited
-     * (within the budget) so the pool is not ended under a clone or a push
-     * that is still writing to it. Optional: a caller that has not built them
-     * yet passes nothing.
+     * sweep and its jobs, today. The timer is stopped first so nothing new is
+     * scheduled, then the jobs already running are awaited (within the budget)
+     * so the pool is not ended under a clone or a push that is still writing
+     * to it. Optional: a caller that has not built them yet passes nothing.
      */
     backgroundJobs?: {
         stopSweeping(): void;
         drain(): Promise<void>;
     };
+    /** The startup phase's retry, if the boot left one asking — see {@link BootableCore.startupRetry}. */
+    startupRetry?: {
+        stop(): void;
+    } | null;
     /** The database — its pool is ended last, once nothing above can still need it. */
     db: Pick<Database, '$client'>;
+    /**
+     * The scope this graph's secrets vault was registered under with the UTCP
+     * variable loader (see `secrets-variable-loader.ts`); forgotten on stop so
+     * a descriptor that outlives the graph resolves nothing. Optional: a
+     * single-tenant process exits right after, and has nothing to forget.
+     */
+    secretsScope?: string;
     log?: (message: string) => void;
 }
+export interface ShutdownDeps extends CoreStopDeps {
+    /** The listening server — stops accepting, then drops what is connected. */
+    server: Pick<Server, 'close' | 'closeAllConnections'>;
+}
 export interface ShutdownOptions {
     /**
      * Total time the sequence may take. Default 8s: Docker's `stop_grace_period`
@@ -113,26 +168,17 @@ export interface ShutdownOptions {
      */
     deadlineMs?: number;
 }
+export interface StopCoreOptions {
+    /** Total time the stop may take. Default: the shutdown's 8s. */
+    deadlineMs?: number;
+}
 /**
- * The shutdown sequence, as a function the process's signal handlers call.
- * Idempotent: a second signal awaits the sequence already running rather than
- * starting another.
- *
- * The order is the point:
- *
- *   1. Stop accepting, and drop every open connection. SSE streams end here;
- *      the browser's EventSource reconnects on its own, and the replacement
- *      process — whose replay buffer is empty — answers the reconnect with a
- *      resync, which is the behaviour the event bus already defines for it.
- *      No stream is told anything, because nothing it could be told would
- *      beat that.
- *   2. Stop the commit worker, which finishes the commit it is in the middle
- *      of, then release the lease so the replacement can take it. A commit
- *      that cannot finish inside the deadline is abandoned as `running` in the
- *      queue, and the startup reconcile of the next boot returns it to
- *      `pending` — the recovery the queue has always had for a process that
- *      died mid-commit, now the exception rather than the rule.
- *   3. End the pool.
+ * Stop one knowledge base's graph without stopping the process: the
+ * shutdown sequence minus closing the server. What a host runs when it
+ * evicts a tenant, and what {@link createShutdown} runs after the server
+ * has closed. Bounded like the shutdown, so a step that hangs cannot hold
+ * the host's event loop hostage.
  */
+export declare function stopCore(core: CoreStopDeps, opts?: StopCoreOptions): Promise<void>;
 export declare function createShutdown(deps: ShutdownDeps, opts?: ShutdownOptions): (reason: string) => Promise<void>;
 //# sourceMappingURL=lifecycle.d.ts.map

package/dist/core/lifecycle.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"lifecycle.d.ts","sourceRoot":"","sources":["../../src/core/lifecycle.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,mCAAmC,CAAC;AAClE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sCAAsC,CAAC;AAG1E;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,8CAA8C;AAC9C,MAAM,WAAW,YAAY;IAC3B,KAAK,IAAI,IAAI,CAAC;IACd,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACvB;AAED,MAAM,WAAW,gBAAgB;IAC/B,+EAA+E;IAC/E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iEAAiE;IACjE,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACjC;AAED,MAAM,WAAW,eAAe;IAC9B,wEAAwE;IACxE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,+EAA+E;IAC/E,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACvB;AAQD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,aAAa,EACpB,MAAM,EAAE,YAAY,EACpB,IAAI,GAAE,gBAAqB,GAC1B,eAAe,CAwEjB;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAC7B,MAAM,EAAE,YAAY,EACpB,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,EACzB,GAAG,GAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAqD,GAC9E,YAAY,CAgBd;AAED,MAAM,WAAW,YAAY;IAC3B,4EAA4E;IAC5E,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,GAAG,qBAAqB,CAAC,CAAC;IACtD,wHAAwH;IACxH,YAAY,EAAE,IAAI,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;IAC5C;;;;;;;OAOG;IACH,cAAc,CAAC,EAAE;QAAE,YAAY,IAAI,IAAI,CAAC;QAAC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;KAAE,CAAC;IAClE,mFAAmF;IACnF,EAAE,EAAE,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IAC9B,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACjC;AAED,MAAM,WAAW,eAAe;IAC9B;;;;;OAKG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAoBD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,cAAc,CAC5B,IAAI,EAAE,YAAY,EAClB,IAAI,GAAE,eAAoB,GACzB,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CA6CnC"}
+{"version":3,"file":"lifecycle.d.ts","sourceRoot":"","sources":["../../src/core/lifecycle.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAW,KAAK,QAAQ,EAAE,MAAM,mCAAmC,CAAC;AAC3E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sCAAsC,CAAC;AAC1E,OAAO,EAA4B,KAAK,eAAe,EAAE,MAAM,mDAAmD,CAAC;AAGnH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yCAAyC,CAAC;AAC/E,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,iDAAiD,CAAC;AAO7F;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,8CAA8C;AAC9C,MAAM,WAAW,YAAY;IAC3B,KAAK,IAAI,IAAI,CAAC;IACd,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACvB;AAED,MAAM,WAAW,gBAAgB;IAC/B,+EAA+E;IAC/E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iEAAiE;IACjE,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACjC;AAED,MAAM,WAAW,eAAe;IAC9B,wEAAwE;IACxE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,+EAA+E;IAC/E,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACvB;AAQD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,aAAa,EACpB,MAAM,EAAE,YAAY,EACpB,IAAI,GAAE,gBAAqB,GAC1B,eAAe,CAwEjB;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAC7B,MAAM,EAAE,YAAY,EACpB,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,EACzB,GAAG,GAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAqD,GAC9E,YAAY,CAgBd;AAED;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE;QAAE,cAAc,EAAE,MAAM,CAAA;KAAE,CAAC;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE,QAAQ,GAAG,sBAAsB,CAAC,CAAC;IAC1E,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE,wCAAwC,CAAC,CAAC;IACjF,qBAAqB,EAAE,IAAI,CAAC,qBAAqB,EAAE,eAAe,CAAC,CAAC;IACpE;;;;OAIG;IACH,YAAY,EAAE;QAAE,IAAI,IAAI,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;CACvC;AAED;;;;;;;;;GASG;AACH,wBAAsB,SAAS,CAAC,CAAC,SAAS,YAAY,EACpD,IAAI,EAAE,CAAC,EACP,GAAG,GAAE;IAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAA;CAAO,GACnD,OAAO,CAAC,IAAI,CAAC,CA2Ff;AAED;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,wHAAwH;IACxH,YAAY,EAAE,IAAI,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;IAC5C;;;;;;OAMG;IACH,cAAc,CAAC,EAAE;QAAE,YAAY,IAAI,IAAI,CAAC;QAAC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;KAAE,CAAC;IAClE,sGAAsG;IACtG,YAAY,CAAC,EAAE;QAAE,IAAI,IAAI,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;IACvC,mFAAmF;IACnF,EAAE,EAAE,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IAC9B;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACjC;AAED,MAAM,WAAW,YAAa,SAAQ,YAAY;IAChD,4EAA4E;IAC5E,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,GAAG,qBAAqB,CAAC,CAAC;CACvD;AAED,MAAM,WAAW,eAAe;IAC9B;;;;;OAKG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AA0ED,MAAM,WAAW,eAAe;IAC9B,gEAAgE;IAChE,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;GAMG;AACH,wBAAsB,QAAQ,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,GAAE,eAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAO5F;AAED,wBAAgB,cAAc,CAC5B,IAAI,EAAE,YAAY,EAClB,IAAI,GAAE,eAAoB,GACzB,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CA0BnC"}

package/dist/core/lifecycle.js

@@ -1,4 +1,11 @@
+import { closeDb } from '../modules/database/connection.js';
+import { KbRemoteUnreachableError } from '../modules/workspace/startup/kb-startup-runner.js';
+import { noteBesideCheckout } from '../modules/workspace/startup/beside-checkout.js';
+import { unregisterBevelSecretsVariableLoader } from '../modules/secrets-vault/secrets-variable-loader.js';
+import { printable } from '../shared/printable.js';
 import { logger } from '../shared/logging.js';
+const startupLog = logger('kb-startup');
+const crLog = logger('cr');
 const DEFAULT_RETRY_MS = 5_000;
 function defaultSleep(ms) {
     return new Promise((resolve) => setTimeout(resolve, ms));
@@ -136,6 +143,107 @@ export function withStartupTask(worker, task, log = (message) => logger('lifecyc
         },
     };
 }
+/**
+ * Bring a built graph up: the distribution's boot hook, the note about what
+ * sits beside a checkout, the knowledge-base startup phase with its
+ * unreachable-remote fallback, the deleted-branch sweep and the join-request
+ * jobs. `createCoreServer` runs this for a single-tenant deployment; a host
+ * serving several knowledge bases runs it when a tenant is activated.
+ *
+ * Throws to stop the boot on every failure but an unreachable remote — the
+ * container's restart policy is the retry — see `kb-startup-runner.ts`.
+ */
+export async function startCore(core, ext = {}) {
+    // Overlay boot-time side effects (startup reconciles, periodic sweeps).
+    await ext.onBoot?.(core);
+    // What is already sitting beside a checkout, named once per boot and touched
+    // by nothing. Outside the KB startup phase below on purpose: that phase is
+    // gated on the branch model and the repository URL, and a deployment whose
+    // setup never finished — or whose remote is down — is exactly one whose
+    // strays would otherwise go unmentioned. A diagnostic never stops a boot, so
+    // an unreadable workspaces root is logged and the boot carries on.
+    try {
+        await noteBesideCheckout(core.config.workspacesRoot, core.kbDirName);
+    }
+    catch (err) {
+        // `printable`, because the message quotes a path off the disk (an ENOENT
+        // or EACCES names the file it failed on) and a name carrying a control
+        // character would forge a second line of the operator's log.
+        startupLog.warn('could not look for content beside the checkouts:', {
+            detail: printable(err instanceof Error ? err.message : String(err)),
+        });
+    }
+    // The KB startup phase — AFTER the distribution's onBoot, because a FATAL
+    // template finding raised there must stop the boot before anything seeds
+    // from that template; the runner then brings every branch up to this build
+    // before any route can serve KB content. Throws to stop the boot (the
+    // container's restart policy is the retry) — see kb-startup-runner.ts.
+    //
+    // Runs in the booting process whether or not it holds the commit-worker
+    // lease, so on a redeploy it overlaps the outgoing holder's commits for the
+    // seconds it takes — the documented window at `holdCommitWorkerLease`.
+    try {
+        await core.kbStartupRunner.runAll();
+    }
+    catch (err) {
+        // The one failure a boot survives: the remote cannot be reached. That
+        // says nothing about the knowledge base — what we would write is not
+        // known to be wrong, we cannot get there — so refusing to boot only took
+        // away the login and setup screens an operator needs to fix it (a
+        // rotated token, say). The deployment comes up GATED: the setup routes
+        // read the runner's standing failure and keep the app shut, the setup
+        // screen shows why, saving it retries, and the runner keeps trying on
+        // its own. Every other failure still stops the boot, because it means
+        // the template or a step would write something wrong.
+        if (!(err instanceof KbRemoteUnreachableError))
+            throw err;
+        startupLog.error('booting UNMAINTAINED and gated — the knowledge-base remote could not be reached:', {
+            detail: err.message,
+        });
+        // Kept on the graph so that stopping the graph stops the asking: a
+        // retry that outlived its graph would clone into a workspaces folder
+        // nobody serves any more.
+        core.startupRetry = core.kbStartupRunner.retryUntilMaintained();
+    }
+    // Close change requests whose source branch has been deleted. SEQUENCED
+    // AFTER the startup phase above, for two reasons: the sweep's fresh fetch
+    // lazily bootstraps and fetches the same default-branch clone the runner
+    // maintains (kicking it off earlier races the runner's clone/fetch of that
+    // very directory), and on a brand-new deployment it would run before the
+    // empty remote is seeded, fail its clone, swallow the error, and leave
+    // deleted-branch CRs open for the whole process. Still not awaited from
+    // here on: a slow or unreachable remote must not hold up the server —
+    // nothing downstream depends on the result, and the requests it closes
+    // have been unusable since the branch went away, so landing a few seconds
+    // into uptime is soon enough. Errors are swallowed inside the sweep, which
+    // fails safe by closing nothing.
+    void core.workflowService
+        .closeChangeRequestsWithDeletedBranches()
+        .then((n) => {
+        if (n > 0) {
+            crLog.info(`closed ${n} change request${n === 1 ? '' : 's'} with a deleted branch`);
+        }
+    })
+        .catch((err) => crLog.warn('deleted-branch sweep failed:', { err }));
+    // Recorded join requests that are still owed, resumed — now, and then on a
+    // timer. SEQUENCED AFTER the startup phase for the same reason as the sweep
+    // above: the work needs the default-branch clone the runner maintains and
+    // the plugin catalog read from it, and a sweep that ran first would refuse
+    // every row for a knowledge base that simply was not ready — telling people
+    // their request could not be sent when nothing had gone wrong with it.
+    //
+    // ON A TIMER rather than at boot alone, because boot cannot cover the
+    // redeploy: this process sweeps while the outgoing one still holds a
+    // record, skips it (correctly — two servers must not do git on one branch),
+    // and the outgoing process then exits mid-work. Nothing else would look at
+    // that row again. The requester cannot prompt it either: a pending record
+    // shows them the "Requested" card, not a button.
+    //
+    // Not awaited, and nothing to report here but the failure to read the table
+    // at all: a first request from a person is a full clone, nothing else at
+    // boot depends on it, and each row records its own outcome.
+    core.pluginJoinRequestJobs.startSweeping();
+}
 const DEFAULT_SHUTDOWN_DEADLINE_MS = 8_000;
 /** Await `promise` for at most `ms`; on expiry log and move on rather than hang the exit. */
 async function bounded(promise, ms, label, log) {
@@ -177,6 +285,54 @@ async function bounded(promise, ms, label, log) {
  *      died mid-commit, now the exception rather than the rule.
  *   3. End the pool.
  */
+/**
+ * Let go of everything a graph holds, in order, within `remaining()`.
+ * The order is the point — see {@link createShutdown} for why each step
+ * sits where it does.
+ */
+async function releaseCore(deps, remaining, log) {
+    // First, and BEFORE the commit worker is stopped. Stopping that worker
+    // awaits an in-flight commit and can spend most of the remaining budget
+    // doing it; a sweep tick firing inside that window reads the still-open
+    // pool and starts fresh clone/commit/push work that the end of the
+    // sequence then kills mid-git. Nothing new can be recorded once the
+    // server is closed (or the tenant is no longer routed to), so this is the
+    // earliest point the interval is dead weight. Synchronous and unfailing
+    // — it just clears an interval — so it needs no budget of its own.
+    deps.backgroundJobs?.stopSweeping();
+    // A startup phase still asking for an unreachable remote stops asking:
+    // synchronous, and nothing after it must be able to clone into a
+    // workspaces folder that is about to belong to nobody.
+    deps.startupRetry?.stop();
+    // Clearing the interval stops future ticks; it does nothing to a job a
+    // tick already started, which holds a claim it heartbeats through the
+    // pool and is mid-clone or mid-push. Awaited here, in the budget: a job
+    // that finishes releases or marks its row; one that cannot in time is
+    // killed with the process and its claim goes stale for the next sweep
+    // — which is the recovery every crash already gets.
+    if (deps.backgroundJobs) {
+        await bounded(deps.backgroundJobs.drain(), remaining(), 'finishing the background jobs', log);
+    }
+    await bounded(deps.commitWorker.stop(), remaining(), 'stopping the commit worker', log);
+    if (deps.secretsScope !== undefined)
+        unregisterBevelSecretsVariableLoader(deps.secretsScope);
+    await bounded(closeDb(deps.db), remaining(), 'ending the database pool', log);
+}
+/**
+ * Stop one knowledge base's graph without stopping the process: the
+ * shutdown sequence minus closing the server. What a host runs when it
+ * evicts a tenant, and what {@link createShutdown} runs after the server
+ * has closed. Bounded like the shutdown, so a step that hangs cannot hold
+ * the host's event loop hostage.
+ */
+export async function stopCore(core, opts = {}) {
+    const log = core.log ?? ((message) => logger('lifecycle').info(message));
+    const deadlineMs = opts.deadlineMs ?? DEFAULT_SHUTDOWN_DEADLINE_MS;
+    const startedAt = Date.now();
+    const remaining = () => Math.max(0, deadlineMs - (Date.now() - startedAt));
+    await releaseCore(core, remaining, log);
+    log(`graph stopped in ${Date.now() - startedAt}ms`);
+}
 export function createShutdown(deps, opts = {}) {
     const log = deps.log ?? ((message) => logger('lifecycle').info(message));
     const deadlineMs = opts.deadlineMs ?? DEFAULT_SHUTDOWN_DEADLINE_MS;
@@ -190,26 +346,7 @@ export function createShutdown(deps, opts = {}) {
                 deps.server.close(() => resolve());
                 deps.server.closeAllConnections();
             }), remaining(), 'closing the server', log);
-            // Immediately after the server, and BEFORE the commit worker is stopped.
-            // Stopping that worker awaits an in-flight commit and can spend most of
-            // the remaining budget doing it; a sweep tick firing inside that window
-            // reads the still-open pool and starts fresh clone/commit/push work that
-            // the `process.exit()` at the end of the sequence then kills mid-git.
-            // Nothing new can be recorded once the server is closed, so this is the
-            // earliest point the interval is dead weight. Synchronous and unfailing
-            // — it just clears an interval — so it needs no budget of its own.
-            deps.backgroundJobs?.stopSweeping();
-            // Clearing the interval stops future ticks; it does nothing to a job a
-            // tick already started, which holds a claim it heartbeats through the
-            // pool and is mid-clone or mid-push. Awaited here, in the budget: a job
-            // that finishes releases or marks its row; one that cannot in time is
-            // killed with the process and its claim goes stale for the next sweep
-            // — which is the recovery every crash already gets.
-            if (deps.backgroundJobs) {
-                await bounded(deps.backgroundJobs.drain(), remaining(), 'finishing the background jobs', log);
-            }
-            await bounded(deps.commitWorker.stop(), remaining(), 'stopping the commit worker', log);
-            await bounded(deps.db.$client.end(), remaining(), 'ending the database pool', log);
+            await releaseCore(deps, remaining, log);
             log(`shutdown complete in ${Date.now() - startedAt}ms`);
         })();
         return inFlight;

package/dist/core/lifecycle.js.map

@@ -1 +1 @@
-{"version":3,"file":"lifecycle.js","sourceRoot":"","sources":["../../src/core/lifecycle.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AA4C9C,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAE/B,SAAS,YAAY,CAAC,EAAU;IAC9B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,MAAM,UAAU,qBAAqB,CACnC,KAAoB,EACpB,MAAoB,EACpB,OAAyB,EAAE;IAE3B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,gBAAgB,CAAC;IACjD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,YAAY,CAAC;IACzC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,OAAe,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAEjF,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,IAAI,QAAQ,GAAyB,IAAI,CAAC;IAC1C,IAAI,IAAI,GAAwB,IAAI,CAAC;IAErC,MAAM,UAAU,GAAG,GAAkB,EAAE;QACrC,IAAI,CAAC,aAAa;YAAE,OAAO,QAAQ,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACzD,aAAa,GAAG,KAAK,CAAC;QACtB,QAAQ,GAAG,MAAM;aACd,IAAI,EAAE;aACN,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE,CAAC,GAAG,CAAC,8BAA8B,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;aACzE,OAAO,CAAC,GAAG,EAAE;YACZ,QAAQ,GAAG,IAAI,CAAC;QAClB,CAAC,CAAC,CAAC;QACL,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC;IAEF,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE;QAChB,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,GAAG,CAAC,+EAA+E,CAAC,CAAC;QACrF,KAAK,UAAU,EAAE,CAAC;QAClB,IAAI,EAAE,EAAE,CAAC;IACX,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,CAAC,KAAK,IAAI,EAAE;QACvB,OAAO,OAAO,EAAE,CAAC;YACf,IAAI,QAAQ;gBAAE,MAAM,QAAQ,CAAC;YAC7B,IAAI,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;gBAC3B,IAAI,QAAQ,GAAG,KAAK,CAAC;gBACrB,IAAI,CAAC;oBACH,QAAQ,GAAG,MAAM,KAAK,CAAC,UAAU,EAAE,CAAC;gBACtC,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,GAAG,CAAC,8CAA8C,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACnE,CAAC;gBACD,IAAI,QAAQ,IAAI,OAAO,EAAE,CAAC;oBACxB,aAAa,GAAG,IAAI,CAAC;oBACrB,MAAM,CAAC,KAAK,EAAE,CAAC;oBACf,GAAG,CAAC,sEAAsE,CAAC,CAAC;gBAC9E,CAAC;YACH,CAAC;YACD,IAAI,CAAC,OAAO;gBAAE,MAAM;YACpB,MAAM,OAAO,CAAC,IAAI,CAAC;gBACjB,KAAK,CAAC,OAAO,CAAC;gBACd,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;oBAC5B,IAAI,GAAG,OAAO,CAAC;gBACjB,CAAC,CAAC;aACH,CAAC,CAAC;YACH,IAAI,GAAG,IAAI,CAAC;QACd,CAAC;IACH,CAAC,CAAC,EAAE,CAAC;IAEL,IAAI,OAAO,GAAyB,IAAI,CAAC;IACzC,OAAO;QACL,IAAI,IAAI;YACN,OAAO,KAAK,CAAC,IAAI,CAAC;QACpB,CAAC;QACD,IAAI;YACF,OAAO,KAAK,CAAC,KAAK,IAAI,EAAE;gBACtB,OAAO,GAAG,KAAK,CAAC;gBAChB,IAAI,EAAE,EAAE,CAAC;gBACT,MAAM,IAAI,CAAC;gBACX,MAAM,UAAU,EAAE,CAAC;gBACnB,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC;YACxB,CAAC,CAAC,EAAE,CAAC;YACL,OAAO,OAAO,CAAC;QACjB,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAC7B,MAAoB,EACpB,IAAyB,EACzB,MAAiC,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;IAE/E,IAAI,QAAQ,GAAyB,IAAI,CAAC;IAC1C,OAAO;QACL,KAAK;YACH,QAAQ,KAAK,IAAI,EAAE;iBAChB,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE,CAAC,GAAG,CAAC,sDAAsD,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;iBACjG,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;iBAC1B,OAAO,CAAC,GAAG,EAAE;gBACZ,QAAQ,GAAG,IAAI,CAAC;YAClB,CAAC,CAAC,CAAC;QACP,CAAC;QACD,KAAK,CAAC,IAAI;YACR,IAAI,QAAQ;gBAAE,MAAM,QAAQ,CAAC;YAC7B,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACtB,CAAC;KACF,CAAC;AACJ,CAAC;AA+BD,MAAM,4BAA4B,GAAG,KAAK,CAAC;AAE3C,6FAA6F;AAC7F,KAAK,UAAU,OAAO,CAAC,OAAyB,EAAE,EAAU,EAAE,KAAa,EAAE,GAAwB;IACnG,IAAI,KAAiC,CAAC;IACtC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAY,CAAC,OAAO,EAAE,EAAE;QACjD,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IACH,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,MAAe,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;QACnF,IAAI,OAAO,KAAK,SAAS;YAAE,GAAG,CAAC,GAAG,KAAK,0BAA0B,EAAE,8BAA8B,CAAC,CAAC;IACrG,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,GAAG,KAAK,YAAY,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACzC,CAAC;YAAS,CAAC;QACT,IAAI,KAAK;YAAE,YAAY,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,cAAc,CAC5B,IAAkB,EAClB,OAAwB,EAAE;IAE1B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,OAAe,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IACjF,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,4BAA4B,CAAC;IACnE,IAAI,QAAQ,GAAyB,IAAI,CAAC;IAE1C,OAAO,CAAC,MAAc,EAAE,EAAE;QACxB,QAAQ,KAAK,CAAC,KAAK,IAAI,EAAE;YACvB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC7B,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC;YAC3E,GAAG,CAAC,kBAAkB,MAAM,EAAE,CAAC,CAAC;YAEhC,MAAM,OAAO,CACX,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;gBAC5B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;gBACnC,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;YACpC,CAAC,CAAC,EACF,SAAS,EAAE,EACX,oBAAoB,EACpB,GAAG,CACJ,CAAC;YACF,yEAAyE;YACzE,wEAAwE;YACxE,wEAAwE;YACxE,yEAAyE;YACzE,sEAAsE;YACtE,wEAAwE;YACxE,wEAAwE;YACxE,mEAAmE;YACnE,IAAI,CAAC,cAAc,EAAE,YAAY,EAAE,CAAC;YACpC,uEAAuE;YACvE,sEAAsE;YACtE,wEAAwE;YACxE,sEAAsE;YACtE,sEAAsE;YACtE,oDAAoD;YACpD,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;gBACxB,MAAM,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,+BAA+B,EAAE,GAAG,CAAC,CAAC;YAChG,CAAC;YACD,MAAM,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,EAAE,4BAA4B,EAAE,GAAG,CAAC,CAAC;YACxF,MAAM,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,EAAE,0BAA0B,EAAE,GAAG,CAAC,CAAC;YAEnF,GAAG,CAAC,wBAAwB,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,IAAI,CAAC,CAAC;QAC1D,CAAC,CAAC,EAAE,CAAC;QACL,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"lifecycle.js","sourceRoot":"","sources":["../../src/core/lifecycle.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAiB,MAAM,mCAAmC,CAAC;AAE3E,OAAO,EAAE,wBAAwB,EAAwB,MAAM,mDAAmD,CAAC;AACnH,OAAO,EAAE,kBAAkB,EAAE,MAAM,iDAAiD,CAAC;AACrF,OAAO,EAAE,oCAAoC,EAAE,MAAM,qDAAqD,CAAC;AAG3G,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAE9C,MAAM,UAAU,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;AACxC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;AA4C3B,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAE/B,SAAS,YAAY,CAAC,EAAU;IAC9B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,MAAM,UAAU,qBAAqB,CACnC,KAAoB,EACpB,MAAoB,EACpB,OAAyB,EAAE;IAE3B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,gBAAgB,CAAC;IACjD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,YAAY,CAAC;IACzC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,OAAe,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAEjF,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,IAAI,QAAQ,GAAyB,IAAI,CAAC;IAC1C,IAAI,IAAI,GAAwB,IAAI,CAAC;IAErC,MAAM,UAAU,GAAG,GAAkB,EAAE;QACrC,IAAI,CAAC,aAAa;YAAE,OAAO,QAAQ,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACzD,aAAa,GAAG,KAAK,CAAC;QACtB,QAAQ,GAAG,MAAM;aACd,IAAI,EAAE;aACN,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE,CAAC,GAAG,CAAC,8BAA8B,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;aACzE,OAAO,CAAC,GAAG,EAAE;YACZ,QAAQ,GAAG,IAAI,CAAC;QAClB,CAAC,CAAC,CAAC;QACL,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC;IAEF,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE;QAChB,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,GAAG,CAAC,+EAA+E,CAAC,CAAC;QACrF,KAAK,UAAU,EAAE,CAAC;QAClB,IAAI,EAAE,EAAE,CAAC;IACX,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,CAAC,KAAK,IAAI,EAAE;QACvB,OAAO,OAAO,EAAE,CAAC;YACf,IAAI,QAAQ;gBAAE,MAAM,QAAQ,CAAC;YAC7B,IAAI,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;gBAC3B,IAAI,QAAQ,GAAG,KAAK,CAAC;gBACrB,IAAI,CAAC;oBACH,QAAQ,GAAG,MAAM,KAAK,CAAC,UAAU,EAAE,CAAC;gBACtC,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,GAAG,CAAC,8CAA8C,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACnE,CAAC;gBACD,IAAI,QAAQ,IAAI,OAAO,EAAE,CAAC;oBACxB,aAAa,GAAG,IAAI,CAAC;oBACrB,MAAM,CAAC,KAAK,EAAE,CAAC;oBACf,GAAG,CAAC,sEAAsE,CAAC,CAAC;gBAC9E,CAAC;YACH,CAAC;YACD,IAAI,CAAC,OAAO;gBAAE,MAAM;YACpB,MAAM,OAAO,CAAC,IAAI,CAAC;gBACjB,KAAK,CAAC,OAAO,CAAC;gBACd,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;oBAC5B,IAAI,GAAG,OAAO,CAAC;gBACjB,CAAC,CAAC;aACH,CAAC,CAAC;YACH,IAAI,GAAG,IAAI,CAAC;QACd,CAAC;IACH,CAAC,CAAC,EAAE,CAAC;IAEL,IAAI,OAAO,GAAyB,IAAI,CAAC;IACzC,OAAO;QACL,IAAI,IAAI;YACN,OAAO,KAAK,CAAC,IAAI,CAAC;QACpB,CAAC;QACD,IAAI;YACF,OAAO,KAAK,CAAC,KAAK,IAAI,EAAE;gBACtB,OAAO,GAAG,KAAK,CAAC;gBAChB,IAAI,EAAE,EAAE,CAAC;gBACT,MAAM,IAAI,CAAC;gBACX,MAAM,UAAU,EAAE,CAAC;gBACnB,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC;YACxB,CAAC,CAAC,EAAE,CAAC;YACL,OAAO,OAAO,CAAC;QACjB,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAC7B,MAAoB,EACpB,IAAyB,EACzB,MAAiC,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;IAE/E,IAAI,QAAQ,GAAyB,IAAI,CAAC;IAC1C,OAAO;QACL,KAAK;YACH,QAAQ,KAAK,IAAI,EAAE;iBAChB,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE,CAAC,GAAG,CAAC,sDAAsD,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;iBACjG,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;iBAC1B,OAAO,CAAC,GAAG,EAAE;gBACZ,QAAQ,GAAG,IAAI,CAAC;YAClB,CAAC,CAAC,CAAC;QACP,CAAC;QACD,KAAK,CAAC,IAAI;YACR,IAAI,QAAQ;gBAAE,MAAM,QAAQ,CAAC;YAC7B,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACtB,CAAC;KACF,CAAC;AACJ,CAAC;AAqBD;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,IAAO,EACP,MAAkD,EAAE;IAEpD,wEAAwE;IACxE,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC;IAEzB,6EAA6E;IAC7E,2EAA2E;IAC3E,2EAA2E;IAC3E,wEAAwE;IACxE,6EAA6E;IAC7E,mEAAmE;IACnE,IAAI,CAAC;QACH,MAAM,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IACvE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,yEAAyE;QACzE,uEAAuE;QACvE,6DAA6D;QAC7D,UAAU,CAAC,IAAI,CAAC,kDAAkD,EAAE;YAClE,MAAM,EAAE,SAAS,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;SACpE,CAAC,CAAC;IACL,CAAC;IAED,0EAA0E;IAC1E,yEAAyE;IACzE,2EAA2E;IAC3E,sEAAsE;IACtE,uEAAuE;IACvE,EAAE;IACF,wEAAwE;IACxE,4EAA4E;IAC5E,uEAAuE;IACvE,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,CAAC;IACtC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,sEAAsE;QACtE,qEAAqE;QACrE,yEAAyE;QACzE,kEAAkE;QAClE,uEAAuE;QACvE,sEAAsE;QACtE,sEAAsE;QACtE,sEAAsE;QACtE,sDAAsD;QACtD,IAAI,CAAC,CAAC,GAAG,YAAY,wBAAwB,CAAC;YAAE,MAAM,GAAG,CAAC;QAC1D,UAAU,CAAC,KAAK,CAAC,kFAAkF,EAAE;YACnG,MAAM,EAAE,GAAG,CAAC,OAAO;SACpB,CAAC,CAAC;QACH,mEAAmE;QACnE,qEAAqE;QACrE,0BAA0B;QAC1B,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,eAAe,CAAC,oBAAoB,EAAE,CAAC;IAClE,CAAC;IAED,wEAAwE;IACxE,0EAA0E;IAC1E,yEAAyE;IACzE,2EAA2E;IAC3E,yEAAyE;IACzE,uEAAuE;IACvE,wEAAwE;IACxE,sEAAsE;IACtE,uEAAuE;IACvE,0EAA0E;IAC1E,2EAA2E;IAC3E,iCAAiC;IACjC,KAAK,IAAI,CAAC,eAAe;SACtB,sCAAsC,EAAE;SACxC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;QACV,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACV,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,wBAAwB,CAAC,CAAC;QACtF,CAAC;IACH,CAAC,CAAC;SACD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,8BAA8B,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;IAEvE,2EAA2E;IAC3E,4EAA4E;IAC5E,0EAA0E;IAC1E,2EAA2E;IAC3E,4EAA4E;IAC5E,uEAAuE;IACvE,EAAE;IACF,sEAAsE;IACtE,qEAAqE;IACrE,4EAA4E;IAC5E,2EAA2E;IAC3E,0EAA0E;IAC1E,iDAAiD;IACjD,EAAE;IACF,4EAA4E;IAC5E,yEAAyE;IACzE,4DAA4D;IAC5D,IAAI,CAAC,qBAAqB,CAAC,aAAa,EAAE,CAAC;AAC7C,CAAC;AA+CD,MAAM,4BAA4B,GAAG,KAAK,CAAC;AAE3C,6FAA6F;AAC7F,KAAK,UAAU,OAAO,CAAC,OAAyB,EAAE,EAAU,EAAE,KAAa,EAAE,GAAwB;IACnG,IAAI,KAAiC,CAAC;IACtC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAY,CAAC,OAAO,EAAE,EAAE;QACjD,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IACH,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,MAAe,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;QACnF,IAAI,OAAO,KAAK,SAAS;YAAE,GAAG,CAAC,GAAG,KAAK,0BAA0B,EAAE,8BAA8B,CAAC,CAAC;IACrG,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,GAAG,KAAK,YAAY,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACzC,CAAC;YAAS,CAAC;QACT,IAAI,KAAK;YAAE,YAAY,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH;;;;GAIG;AACH,KAAK,UAAU,WAAW,CAAC,IAAkB,EAAE,SAAuB,EAAE,GAAwB;IAC9F,uEAAuE;IACvE,wEAAwE;IACxE,wEAAwE;IACxE,mEAAmE;IACnE,oEAAoE;IACpE,0EAA0E;IAC1E,wEAAwE;IACxE,mEAAmE;IACnE,IAAI,CAAC,cAAc,EAAE,YAAY,EAAE,CAAC;IACpC,uEAAuE;IACvE,iEAAiE;IACjE,uDAAuD;IACvD,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC;IAC1B,uEAAuE;IACvE,sEAAsE;IACtE,wEAAwE;IACxE,sEAAsE;IACtE,sEAAsE;IACtE,oDAAoD;IACpD,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;QACxB,MAAM,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,+BAA+B,EAAE,GAAG,CAAC,CAAC;IAChG,CAAC;IACD,MAAM,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,EAAE,4BAA4B,EAAE,GAAG,CAAC,CAAC;IACxF,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS;QAAE,oCAAoC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC7F,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,0BAA0B,EAAE,GAAG,CAAC,CAAC;AAChF,CAAC;AAOD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAkB,EAAE,OAAwB,EAAE;IAC3E,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,OAAe,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IACjF,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,4BAA4B,CAAC;IACnE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC;IAC3E,MAAM,WAAW,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;IACxC,GAAG,CAAC,oBAAoB,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,IAAI,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,IAAkB,EAClB,OAAwB,EAAE;IAE1B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,OAAe,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IACjF,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,4BAA4B,CAAC;IACnE,IAAI,QAAQ,GAAyB,IAAI,CAAC;IAE1C,OAAO,CAAC,MAAc,EAAE,EAAE;QACxB,QAAQ,KAAK,CAAC,KAAK,IAAI,EAAE;YACvB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC7B,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC;YAC3E,GAAG,CAAC,kBAAkB,MAAM,EAAE,CAAC,CAAC;YAEhC,MAAM,OAAO,CACX,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;gBAC5B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;gBACnC,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;YACpC,CAAC,CAAC,EACF,SAAS,EAAE,EACX,oBAAoB,EACpB,GAAG,CACJ,CAAC;YACF,MAAM,WAAW,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;YAExC,GAAG,CAAC,wBAAwB,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,IAAI,CAAC,CAAC;QAC1D,CAAC,CAAC,EAAE,CAAC;QACL,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC;AACJ,CAAC"}

package/dist/core/public-config.d.ts

@@ -1,3 +1,4 @@
+import type { KbContext } from '../shared/kb-context.js';
 /** The two addresses the server derives once and hands to {@link publicConfig}. */
 export interface PublicConfigAddresses {
     /** The per-user marketplace git remote, userinfo stripped. */
@@ -21,8 +22,11 @@ export interface PublicConfigAddresses {
  * means a rebuild.
  *
  * A pure function of its inputs, so the payload is testable without a server.
+ * `kb` is read at call time, not captured: the branch model arrives from the
+ * setup screen on a fresh deployment, and the next `/api/config` after that
+ * save has to carry it.
  */
-export declare function publicConfig({ marketplaceGitUrl, mcpUrl }: PublicConfigAddresses): {
+export declare function publicConfig(kb: KbContext, { marketplaceGitUrl, mcpUrl }: PublicConfigAddresses): {
     branchModel: {
         defaultBranch: string;
         protectedBranches: string[];

package/dist/core/public-config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"public-config.d.ts","sourceRoot":"","sources":["../../src/core/public-config.ts"],"names":[],"mappings":"AAEA,mFAAmF;AACnF,MAAM,WAAW,qBAAqB;IACpC,8DAA8D;IAC9D,iBAAiB,EAAE,MAAM,CAAC;IAC1B,mFAAmF;IACnF,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,YAAY,CAAC,EAAE,iBAAiB,EAAE,MAAM,EAAE,EAAE,qBAAqB;;;;;IAM7E;;;;OAIG;;IAEH;;;;OAIG;;IAEH;;;;;;;;;;;;;OAaG;;IAEH;;;;;;;;OAQG;;IAEH;;;;;;;;;;;;OAYG;;EAGN"}
+{"version":3,"file":"public-config.d.ts","sourceRoot":"","sources":["../../src/core/public-config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAEzD,mFAAmF;AACnF,MAAM,WAAW,qBAAqB;IACpC,8DAA8D;IAC9D,iBAAiB,EAAE,MAAM,CAAC;IAC1B,mFAAmF;IACnF,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,EAAE,iBAAiB,EAAE,MAAM,EAAE,EAAE,qBAAqB;;;;;IAM5F;;;;OAIG;;IAEH;;;;OAIG;;IAEH;;;;;;;;;;;;;OAaG;;IAEH;;;;;;;;OAQG;;IAEH;;;;;;;;;;;;OAYG;;EAGN"}

package/dist/core/public-config.js

@@ -1,4 +1,3 @@
-import { DEFAULT_BRANCH, PROTECTED_BRANCHES, currentKbLayout } from '@bevel-software/platform-shared';
 /**
  * The body of the unauthenticated `GET /api/config`: the handful of facts the
  * browser needs BEFORE it can render anything, and what a local bridge
@@ -15,19 +14,22 @@ import { DEFAULT_BRANCH, PROTECTED_BRANCHES, currentKbLayout } from '@bevel-soft
  * means a rebuild.
  *
  * A pure function of its inputs, so the payload is testable without a server.
+ * `kb` is read at call time, not captured: the branch model arrives from the
+ * setup screen on a fresh deployment, and the next `/api/config` after that
+ * save has to carry it.
  */
-export function publicConfig({ marketplaceGitUrl, mcpUrl }) {
+export function publicConfig(kb, { marketplaceGitUrl, mcpUrl }) {
     return {
         branchModel: {
-            defaultBranch: DEFAULT_BRANCH,
-            protectedBranches: [...PROTECTED_BRANCHES],
+            defaultBranch: kb.defaultBranch,
+            protectedBranches: [...kb.protectedBranches],
         },
         /**
          * The three renameable KB roots, for the same reason as the branch
          * model: the file tree, the library router and every path rule read
          * them, and they used to be compile-time constants.
          */
-        kbLayout: currentKbLayout(),
+        kbLayout: kb.layout,
         /**
          * The per-user marketplace git remote (see modules/marketplace). Same
          * derivation as `mcpUrl`: our address, userinfo stripped; the caller

package/dist/core/public-config.js.map

@@ -1 +1 @@
-{"version":3,"file":"public-config.js","sourceRoot":"","sources":["../../src/core/public-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAUtG;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,YAAY,CAAC,EAAE,iBAAiB,EAAE,MAAM,EAAyB;IAC/E,OAAO;QACL,WAAW,EAAE;YACX,aAAa,EAAE,cAAc;YAC7B,iBAAiB,EAAE,CAAC,GAAG,kBAAkB,CAAC;SAC3C;QACD;;;;WAIG;QACH,QAAQ,EAAE,eAAe,EAAE;QAC3B;;;;WAIG;QACH,iBAAiB;QACjB;;;;;;;;;;;;;WAaG;QACH,MAAM;QACN;;;;;;;;WAQG;QACH,iBAAiB,EAAE,IAAa;QAChC;;;;;;;;;;;;WAYG;QACH,eAAe,EAAE,IAAa;KAC/B,CAAC;AACJ,CAAC"}
+{"version":3,"file":"public-config.js","sourceRoot":"","sources":["../../src/core/public-config.ts"],"names":[],"mappings":"AAUA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,YAAY,CAAC,EAAa,EAAE,EAAE,iBAAiB,EAAE,MAAM,EAAyB;IAC9F,OAAO;QACL,WAAW,EAAE;YACX,aAAa,EAAE,EAAE,CAAC,aAAa;YAC/B,iBAAiB,EAAE,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC;SAC7C;QACD;;;;WAIG;QACH,QAAQ,EAAE,EAAE,CAAC,MAAM;QACnB;;;;WAIG;QACH,iBAAiB;QACjB;;;;;;;;;;;;;WAaG;QACH,MAAM;QACN;;;;;;;;WAQG;QACH,iBAAiB,EAAE,IAAa;QAChC;;;;;;;;;;;;WAYG;QACH,eAAe,EAAE,IAAa;KAC/B,CAAC;AACJ,CAAC"}

package/dist/core-config.d.ts

@@ -27,6 +27,86 @@ export declare function resolveDatabaseUrl(env?: NodeJS.ProcessEnv): string;
  * the first would leave `ss@` — most of the credential — in what is kept.
  */
 export declare function withoutUserinfo(url: string): string;
+/**
+ * Everything ONE knowledge base's service graph is built from — the values
+ * that differ between two knowledge bases a process might host. A
+ * single-tenant deployment reads them from the environment ({@link CoreConfig});
+ * a host serving several builds one of these per tenant from its registry.
+ * `createCoreServices` takes this shape, so the two are the same code path.
+ *
+ * `port`, `nodeEnv` and `trustProxy` are process facts a graph still needs
+ * (the loopback address the MCP proxy dials, cookie flags, the proxy hop
+ * count its Express app trusts), so they appear here as well as on
+ * {@link ProcessConfig}: a tenant's config carries the values of the process
+ * it runs in.
+ */
+export interface TenantConfig {
+    readonly port: number;
+    readonly databaseUrl: string;
+    /** The Postgres schema this knowledge base's tables live in. `public` for a single-tenant deployment. */
+    readonly dbSchema: string;
+    readonly nodeEnv: string;
+    readonly tenantId: string;
+    /** The credential prefixes derived from `tenantId` — see the getters on {@link CoreConfig}. */
+    readonly externalApiKeyPrefix: string;
+    readonly internalTokenPrefix: string;
+    readonly uploadTokenPrefix: string;
+    readonly mcpOAuthTokenPrefix: string;
+    readonly workspacesRoot: string;
+    readonly backupsRoot: string;
+    readonly spillRoot: string;
+    readonly docExtractCacheRoot: string;
+    readonly jwtSecret: string;
+    readonly adminEmail: string;
+    readonly adminPassword: string;
+    readonly oidcIssuerUrl: string;
+    readonly oidcClientId: string;
+    readonly oidcClientSecret: string;
+    readonly oidcScopes: string;
+    readonly oidcProviderLabel: string;
+    readonly kbRepoUrl: string;
+    readonly kbDirName: string;
+    readonly gitUsername: string;
+    readonly gitToken: string;
+    readonly kbTemplateDir: string;
+    readonly ontologySessionBlock: boolean;
+    readonly updateCheckEnabled: boolean;
+    readonly loginPasswordEnabled: boolean;
+    readonly allowedEmailDomains: string[];
+    readonly secretsEncKey: string;
+    readonly internalTokenSecret: string;
+    readonly trustProxy: string;
+    readonly gitTimeoutMs: number;
+    readonly publicBackendUrl: string;
+    readonly publicFrontendUrl: string;
+    readonly configuredPublicFrontendUrl: string | null;
+    /**
+     * Where this graph's own REST surface is reached from inside the process
+     * (the MCP proxy dials it, and seeds it into the UTCP manuals it builds).
+     * Unset, `http://127.0.0.1:<port>`; a tenant host names its tenant on the
+     * path — see `tenancy/tenant-host.ts`.
+     */
+    readonly loopbackBaseUrl?: string;
+    /**
+     * The environment the deployment settings (repository, git credential,
+     * branch model, SSO, sync secret, …) resolve against before the stored
+     * layer. Unset, the process's own. A tenant host builds one per tenant
+     * from its record, so a variable set on the host process never reaches
+     * every tenant and a record's values behave as environment-pinned ones.
+     */
+    readonly settingsEnv?: NodeJS.ProcessEnv;
+}
+/**
+ * What the PROCESS is configured with, independent of how many knowledge
+ * bases it serves: where it listens, which proxy hops it trusts, and the
+ * environment name. A single-tenant deployment's {@link CoreConfig} is both
+ * this and its one tenant's {@link TenantConfig}.
+ */
+export interface ProcessConfig {
+    readonly port: number;
+    readonly nodeEnv: string;
+    readonly trustProxy: string;
+}
 /**
  * Configuration for the CORE platform: the git-backed workspace/workflow,
  * skills, tools, secrets vault, access control, and the MCP surface. Contains
@@ -34,9 +114,16 @@ export declare function withoutUserinfo(url: string): string;
  * `AppConfig` (config.ts), which extends this class. A core-only deployment
  * boots from exactly these env vars.
  */
-export declare class CoreConfig {
+export declare class CoreConfig implements TenantConfig, ProcessConfig {
     readonly port: number;
     readonly databaseUrl: string;
+    /**
+     * The Postgres schema this deployment's tables live in (`DB_SCHEMA`,
+     * default `public`). Set it to host this knowledge base beside others in
+     * one database, each on a schema of its own; see
+     * `modules/database/connection.ts` for what that changes.
+     */
+    readonly dbSchema: string;
     readonly nodeEnv: string;
     /**
      * Tenant slug injected into every credential prefix so a deploy can brand its
@@ -125,6 +212,13 @@ export declare class CoreConfig {
      * credential-helper shell snippet.
      */
     readonly gitUsername: string;
+    /**
+     * The git token the environment supplied (`GIT_TOKEN`, or the legacy
+     * `GITHUB_TOKEN` / `GH_TOKEN`), or `''`. The setup screen's stored token is
+     * read through the settings service instead; the composition root folds
+     * the two into the runner's credentials, environment first.
+     */
+    readonly gitToken: string;
     /**
      * Filesystem path to the KB seed template (the `kb-template/` folder shipped
      * inside this package — see `defaultKbTemplateDir()`). The seeder reads this

package/dist/core-config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"core-config.d.ts","sourceRoot":"","sources":["../src/core-config.ts"],"names":[],"mappings":"AAgBA;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAU/E;AAED;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED;;;;;;GAMG;AACH,qBAAa,UAAU;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB;;;;;;;OAOG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC;;;;;;OAMG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B;;;;;OAKG;IACH,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;;;;;OAKG;IACH,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B;;;;;;OAMG;IACH,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,yEAAyE;IACzE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,qDAAqD;IACrD,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,iHAAiH;IACjH,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,0EAA0E;IAC1E,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;;;;;;;OAOG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B;;;;;;;;;OASG;IACH,QAAQ,CAAC,oBAAoB,EAAE,OAAO,CAAC;IACvC;;;;;;;;OAQG;IACH,QAAQ,CAAC,kBAAkB,EAAE,OAAO,CAAC;IACrC;;;;;OAKG;IACH,QAAQ,CAAC,oBAAoB,EAAE,OAAO,CAAC;IACvC;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,QAAQ,CAAC,mBAAmB,EAAE,MAAM,EAAE,CAAC;IACvC;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B;;;;;;;OAOG;IACH,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B;;;;;;;;;OASG;IACH,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B;;;;OAIG;IACH,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC;;;;;OAKG;IACH,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC;;;;;;OAMG;IACH,QAAQ,CAAC,2BAA2B,EAAE,MAAM,GAAG,IAAI,CAAC;;IAmMpD,mEAAmE;IACnE,IAAI,oBAAoB,IAAI,MAAM,CAEjC;IAED,mEAAmE;IACnE,IAAI,mBAAmB,IAAI,MAAM,CAEhC;IAED,uEAAuE;IACvE,IAAI,iBAAiB,IAAI,MAAM,CAE9B;IAED,2DAA2D;IAC3D,IAAI,mBAAmB,IAAI,MAAM,CAEhC;IAED;;;;OAIG;IACH,OAAO,CAAC,kBAAkB;CA0B3B"}
+{"version":3,"file":"core-config.d.ts","sourceRoot":"","sources":["../src/core-config.ts"],"names":[],"mappings":"AAiBA;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAU/E;AAED;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,yGAAyG;IACzG,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,+FAA+F;IAC/F,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,oBAAoB,EAAE,OAAO,CAAC;IACvC,QAAQ,CAAC,kBAAkB,EAAE,OAAO,CAAC;IACrC,QAAQ,CAAC,oBAAoB,EAAE,OAAO,CAAC;IACvC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,EAAE,CAAC;IACvC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,2BAA2B,EAAE,MAAM,GAAG,IAAI,CAAC;IACpD;;;;;OAKG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC;;;;;;OAMG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CAC1C;AAED;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;;GAMG;AACH,qBAAa,UAAW,YAAW,YAAY,EAAE,aAAa;IAC5D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B;;;;;OAKG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB;;;;;;;OAOG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC;;;;;;OAMG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B;;;;;OAKG;IACH,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;;;;;OAKG;IACH,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B;;;;;;OAMG;IACH,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,yEAAyE;IACzE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,qDAAqD;IACrD,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,iHAAiH;IACjH,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,0EAA0E;IAC1E,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;;;;;;;OAOG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B;;;;;OAKG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B;;;;;;;;;OASG;IACH,QAAQ,CAAC,oBAAoB,EAAE,OAAO,CAAC;IACvC;;;;;;;;OAQG;IACH,QAAQ,CAAC,kBAAkB,EAAE,OAAO,CAAC;IACrC;;;;;OAKG;IACH,QAAQ,CAAC,oBAAoB,EAAE,OAAO,CAAC;IACvC;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,QAAQ,CAAC,mBAAmB,EAAE,MAAM,EAAE,CAAC;IACvC;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B;;;;;;;OAOG;IACH,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B;;;;;;;;;OASG;IACH,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B;;;;OAIG;IACH,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC;;;;;OAKG;IACH,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC;;;;;;OAMG;IACH,QAAQ,CAAC,2BAA2B,EAAE,MAAM,GAAG,IAAI,CAAC;;IAqMpD,mEAAmE;IACnE,IAAI,oBAAoB,IAAI,MAAM,CAEjC;IAED,mEAAmE;IACnE,IAAI,mBAAmB,IAAI,MAAM,CAEhC;IAED,uEAAuE;IACvE,IAAI,iBAAiB,IAAI,MAAM,CAE9B;IAED,2DAA2D;IAC3D,IAAI,mBAAmB,IAAI,MAAM,CAEhC;IAED;;;;OAIG;IACH,OAAO,CAAC,kBAAkB;CA0B3B"}