@memberjunction/server 6.2.0-edge.4 → 6.2.0-edge.6

package/dist/config.d.ts

@@ -1,4 +1,5 @@
 import { z } from 'zod';
+import { type ServerRole } from './serverRoleConfigUnits.js';
 declare const userHandlingInfoSchema: z.ZodObject<{
     autoCreateNewUsers: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
     /** When true, auto-provisioning is restricted to the domains in `newUserAuthorizedDomains`. */
@@ -469,20 +470,29 @@ declare const telemetrySchema: z.ZodObject<{
     enabled?: string | number | boolean;
     level?: "minimal" | "standard" | "verbose" | "debug";
 }>;
-declare const serverExtensionSchema: z.ZodObject<{
-    Enabled: z.ZodDefault<z.ZodBoolean>;
+/**
+ * A host `mj.config.cjs` `serverExtensions[]` entry. Only `DriverClass` is required: an entry whose
+ * DriverClass an Open App package already publishes is an OVERLAY (MergeServerExtensionConfigs) and
+ * may set just the fields it overrides — `{ DriverClass: 'X', OwnsCORS: false }` — without repeating
+ * `RootPath`. `Enabled` has no schema default for the same reason: a defaulted `true` would silently
+ * re-enable an extension the package ships disabled. Whether the MERGED entry is complete (a valid
+ * `RootPath`; `Enabled` defaults to true) is validated after the merge, by prepareServerExtensionConfigs,
+ * which reports an incomplete host-only entry instead of mounting it.
+ */
+export declare const ServerExtensionSchema: z.ZodObject<{
+    Enabled: z.ZodOptional<z.ZodBoolean>;
     DriverClass: z.ZodString;
-    RootPath: z.ZodString;
+    RootPath: z.ZodOptional<z.ZodString>;
     Settings: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
 }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
-    Enabled: z.ZodDefault<z.ZodBoolean>;
+    Enabled: z.ZodOptional<z.ZodBoolean>;
     DriverClass: z.ZodString;
-    RootPath: z.ZodString;
+    RootPath: z.ZodOptional<z.ZodString>;
     Settings: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
 }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
-    Enabled: z.ZodDefault<z.ZodBoolean>;
+    Enabled: z.ZodOptional<z.ZodBoolean>;
     DriverClass: z.ZodString;
-    RootPath: z.ZodString;
+    RootPath: z.ZodOptional<z.ZodString>;
     Settings: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
 }, z.ZodTypeAny, "passthrough">>;
 declare const cacheSettingsSchema: z.ZodObject<{
@@ -490,6 +500,14 @@ declare const cacheSettingsSchema: z.ZodObject<{
     maxMemoryMB: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
     /** Maximum percentage of total cache memory that any single entity can occupy. Default: 50. Set to 0 to disable. */
     maxPercentOfCachePerEntity: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+    /**
+     * Ceiling on any ONE cache entry. 'auto' (the default) derives it from maxMemoryMB, so the
+     * largest entity the server caches scales with the memory the cache was given; a number is an
+     * explicit stricter percentage of maxMemoryMB; 0 removes the ceiling. Leave it on 'auto' unless
+     * a specific entry must be kept out of the cache — an entry declined by the ceiling is re-read
+     * from the database on every call, and the server logs which maxMemoryMB would admit it.
+     */
+    maxEntryPercentOfCache: z.ZodDefault<z.ZodOptional<z.ZodUnion<[z.ZodNumber, z.ZodLiteral<"auto">]>>>;
     /** Default TTL in seconds. 0 = no TTL, rely on event-based invalidation. Default: 0. */
     defaultTTLSeconds: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
     /** Interval in seconds for periodic eviction sweep. 0 = disabled. Default: 300 (5 minutes). */
@@ -551,9 +569,127 @@ declare const cacheSettingsSchema: z.ZodObject<{
      * for it. 0 disables the turn-taking. Default: 30.
      */
     startupWarmupLeaseSeconds: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+    /**
+     * Pluggable cache invalidation broadcast topology configuration.
+     * Defaults to `'SequencedRoleBucket'` (Topology 1 Monotonic Sequence Ring Buffer + Topology 2
+     * Role-Fingerprint $O(\text{Roles})$ evaluation & shaping memoizer).
+     */
+    broadcast: z.ZodOptional<z.ZodObject<{
+        provider: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+        ringBufferSize: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+        excludedEntities: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodString, "many">>>;
+        azureWebPubSub: z.ZodOptional<z.ZodObject<{
+            endpoint: z.ZodOptional<z.ZodString>;
+            hubName: z.ZodOptional<z.ZodString>;
+            accessKey: z.ZodOptional<z.ZodString>;
+            tokenTtlMinutes: z.ZodOptional<z.ZodNumber>;
+        }, "strip", z.ZodTypeAny, {
+            endpoint?: string;
+            hubName?: string;
+            accessKey?: string;
+            tokenTtlMinutes?: number;
+        }, {
+            endpoint?: string;
+            hubName?: string;
+            accessKey?: string;
+            tokenTtlMinutes?: number;
+        }>>;
+        awsIoTCore: z.ZodOptional<z.ZodObject<{
+            endpoint: z.ZodOptional<z.ZodString>;
+            region: z.ZodOptional<z.ZodString>;
+            topicPrefix: z.ZodOptional<z.ZodString>;
+            accessKeyId: z.ZodOptional<z.ZodString>;
+            secretAccessKey: z.ZodOptional<z.ZodString>;
+            tokenTtlSeconds: z.ZodOptional<z.ZodNumber>;
+        }, "strip", z.ZodTypeAny, {
+            endpoint?: string;
+            region?: string;
+            topicPrefix?: string;
+            accessKeyId?: string;
+            secretAccessKey?: string;
+            tokenTtlSeconds?: number;
+        }, {
+            endpoint?: string;
+            region?: string;
+            topicPrefix?: string;
+            accessKeyId?: string;
+            secretAccessKey?: string;
+            tokenTtlSeconds?: number;
+        }>>;
+        gcpPubSub: z.ZodOptional<z.ZodObject<{
+            projectId: z.ZodOptional<z.ZodString>;
+            topicPrefix: z.ZodOptional<z.ZodString>;
+            gatewayUrl: z.ZodOptional<z.ZodString>;
+            signingSecret: z.ZodOptional<z.ZodString>;
+            tokenTtlSeconds: z.ZodOptional<z.ZodNumber>;
+        }, "strip", z.ZodTypeAny, {
+            topicPrefix?: string;
+            tokenTtlSeconds?: number;
+            projectId?: string;
+            gatewayUrl?: string;
+            signingSecret?: string;
+        }, {
+            topicPrefix?: string;
+            tokenTtlSeconds?: number;
+            projectId?: string;
+            gatewayUrl?: string;
+            signingSecret?: string;
+        }>>;
+    }, "strip", z.ZodTypeAny, {
+        provider?: string;
+        ringBufferSize?: number;
+        excludedEntities?: string[];
+        azureWebPubSub?: {
+            endpoint?: string;
+            hubName?: string;
+            accessKey?: string;
+            tokenTtlMinutes?: number;
+        };
+        awsIoTCore?: {
+            endpoint?: string;
+            region?: string;
+            topicPrefix?: string;
+            accessKeyId?: string;
+            secretAccessKey?: string;
+            tokenTtlSeconds?: number;
+        };
+        gcpPubSub?: {
+            topicPrefix?: string;
+            tokenTtlSeconds?: number;
+            projectId?: string;
+            gatewayUrl?: string;
+            signingSecret?: string;
+        };
+    }, {
+        provider?: string;
+        ringBufferSize?: number;
+        excludedEntities?: string[];
+        azureWebPubSub?: {
+            endpoint?: string;
+            hubName?: string;
+            accessKey?: string;
+            tokenTtlMinutes?: number;
+        };
+        awsIoTCore?: {
+            endpoint?: string;
+            region?: string;
+            topicPrefix?: string;
+            accessKeyId?: string;
+            secretAccessKey?: string;
+            tokenTtlSeconds?: number;
+        };
+        gcpPubSub?: {
+            topicPrefix?: string;
+            tokenTtlSeconds?: number;
+            projectId?: string;
+            gatewayUrl?: string;
+            signingSecret?: string;
+        };
+    }>>;
 }, "strip", z.ZodTypeAny, {
     maxMemoryMB?: number;
     maxPercentOfCachePerEntity?: number;
+    maxEntryPercentOfCache?: number | "auto";
     defaultTTLSeconds?: number;
     evictionSweepIntervalSeconds?: number;
     verboseLogging?: boolean;
@@ -563,9 +699,36 @@ declare const cacheSettingsSchema: z.ZodObject<{
     userCacheCheckIntervalSeconds?: number;
     metadataSweepIntervalSeconds?: number;
     startupWarmupLeaseSeconds?: number;
+    broadcast?: {
+        provider?: string;
+        ringBufferSize?: number;
+        excludedEntities?: string[];
+        azureWebPubSub?: {
+            endpoint?: string;
+            hubName?: string;
+            accessKey?: string;
+            tokenTtlMinutes?: number;
+        };
+        awsIoTCore?: {
+            endpoint?: string;
+            region?: string;
+            topicPrefix?: string;
+            accessKeyId?: string;
+            secretAccessKey?: string;
+            tokenTtlSeconds?: number;
+        };
+        gcpPubSub?: {
+            topicPrefix?: string;
+            tokenTtlSeconds?: number;
+            projectId?: string;
+            gatewayUrl?: string;
+            signingSecret?: string;
+        };
+    };
 }, {
     maxMemoryMB?: number;
     maxPercentOfCachePerEntity?: number;
+    maxEntryPercentOfCache?: number | "auto";
     defaultTTLSeconds?: number;
     evictionSweepIntervalSeconds?: number;
     verboseLogging?: boolean;
@@ -575,6 +738,32 @@ declare const cacheSettingsSchema: z.ZodObject<{
     userCacheCheckIntervalSeconds?: number;
     metadataSweepIntervalSeconds?: number;
     startupWarmupLeaseSeconds?: number;
+    broadcast?: {
+        provider?: string;
+        ringBufferSize?: number;
+        excludedEntities?: string[];
+        azureWebPubSub?: {
+            endpoint?: string;
+            hubName?: string;
+            accessKey?: string;
+            tokenTtlMinutes?: number;
+        };
+        awsIoTCore?: {
+            endpoint?: string;
+            region?: string;
+            topicPrefix?: string;
+            accessKeyId?: string;
+            secretAccessKey?: string;
+            tokenTtlSeconds?: number;
+        };
+        gcpPubSub?: {
+            topicPrefix?: string;
+            tokenTtlSeconds?: number;
+            projectId?: string;
+            gatewayUrl?: string;
+            signingSecret?: string;
+        };
+    };
 }>;
 declare const loggingSettingsSchema: z.ZodObject<{
     graphql: z.ZodDefault<z.ZodOptional<z.ZodObject<{
@@ -602,6 +791,18 @@ declare const loggingSettingsSchema: z.ZodObject<{
         logVariables?: boolean;
     };
 }>;
+declare const aiPromptRunsSchema: z.ZodObject<{
+    /**
+     * Server default for which template inputs prompt runs store in AIPromptRun.Messages:
+     * 'None' (key sizes only), 'Referenced' (keys the templates read) or 'Full'.
+     * AIPrompt.TemplateDataCapture and AIPromptParams.TemplateDataCapture override it.
+     */
+    templateDataCapture: z.ZodOptional<z.ZodEnum<["None", "Referenced", "Full"]>>;
+}, "strip", z.ZodTypeAny, {
+    templateDataCapture?: "None" | "Referenced" | "Full";
+}, {
+    templateDataCapture?: "None" | "Referenced" | "Full";
+}>;
 declare const corsSchema: z.ZodObject<{
     /** Allowed origins for CORS. Default ['*'] preserves backward-compatible "allow all" behavior. */
     allowedOrigins: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
@@ -3529,6 +3730,11 @@ declare const realtimeSchema: z.ZodObject<{
             redeemPerIp?: number;
         }>>>;
     }, z.ZodTypeAny, "passthrough">>>>;
+    /**
+     * Seconds a client-direct call's recording waits for missing shards after its terminal signal before it
+     * is assembled anyway as `Partial` (gaps become silence). Defaults to 90.
+     */
+    recordingAssemblyGraceSeconds: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
 }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
     /** Master switch. When false, the WebRTC SDP broker router is not mounted. Defaults to true. */
     enabled: z.ZodDefault<z.ZodEffects<z.ZodDefault<z.ZodOptional<z.ZodUnion<[z.ZodBoolean, z.ZodString, z.ZodNumber]>>>, boolean, string | number | boolean>>;
@@ -3828,6 +4034,11 @@ declare const realtimeSchema: z.ZodObject<{
             redeemPerIp?: number;
         }>>>;
     }, z.ZodTypeAny, "passthrough">>>>;
+    /**
+     * Seconds a client-direct call's recording waits for missing shards after its terminal signal before it
+     * is assembled anyway as `Partial` (gaps become silence). Defaults to 90.
+     */
+    recordingAssemblyGraceSeconds: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
 }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
     /** Master switch. When false, the WebRTC SDP broker router is not mounted. Defaults to true. */
     enabled: z.ZodDefault<z.ZodEffects<z.ZodDefault<z.ZodOptional<z.ZodUnion<[z.ZodBoolean, z.ZodString, z.ZodNumber]>>>, boolean, string | number | boolean>>;
@@ -4127,6 +4338,11 @@ declare const realtimeSchema: z.ZodObject<{
             redeemPerIp?: number;
         }>>>;
     }, z.ZodTypeAny, "passthrough">>>>;
+    /**
+     * Seconds a client-direct call's recording waits for missing shards after its terminal signal before it
+     * is assembled anyway as `Partial` (gaps become silence). Defaults to 90.
+     */
+    recordingAssemblyGraceSeconds: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
 }, z.ZodTypeAny, "passthrough">>;
 declare const configInfoSchema: z.ZodObject<{
     userHandling: z.ZodObject<{
@@ -4392,6 +4608,22 @@ declare const configInfoSchema: z.ZodObject<{
          */
         explorerUrl: z.ZodOptional<z.ZodString>;
     }, z.ZodTypeAny, "passthrough">>>>;
+    devAuth: z.ZodDefault<z.ZodOptional<z.ZodObject<{
+        /** Master switch for local-only development JWT auth (`MJ_DEV_AUTH_ENABLED=true`). Forbidden when NODE_ENV=production. */
+        enabled: z.ZodDefault<z.ZodEffects<z.ZodDefault<z.ZodOptional<z.ZodUnion<[z.ZodBoolean, z.ZodString, z.ZodNumber]>>>, boolean, string | number | boolean>>;
+        /** Optional default email for `/auth/dev-login` when no email is specified in the request body. */
+        defaultEmail: z.ZodOptional<z.ZodString>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        /** Master switch for local-only development JWT auth (`MJ_DEV_AUTH_ENABLED=true`). Forbidden when NODE_ENV=production. */
+        enabled: z.ZodDefault<z.ZodEffects<z.ZodDefault<z.ZodOptional<z.ZodUnion<[z.ZodBoolean, z.ZodString, z.ZodNumber]>>>, boolean, string | number | boolean>>;
+        /** Optional default email for `/auth/dev-login` when no email is specified in the request body. */
+        defaultEmail: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        /** Master switch for local-only development JWT auth (`MJ_DEV_AUTH_ENABLED=true`). Forbidden when NODE_ENV=production. */
+        enabled: z.ZodDefault<z.ZodEffects<z.ZodDefault<z.ZodOptional<z.ZodUnion<[z.ZodBoolean, z.ZodString, z.ZodNumber]>>>, boolean, string | number | boolean>>;
+        /** Optional default email for `/auth/dev-login` when no email is specified in the request body. */
+        defaultEmail: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">>>>;
     widget: z.ZodDefault<z.ZodOptional<z.ZodObject<{
         /** Master switch. When false, the /widget routes are not mounted. */
         enabled: z.ZodDefault<z.ZodEffects<z.ZodDefault<z.ZodOptional<z.ZodUnion<[z.ZodBoolean, z.ZodString, z.ZodNumber]>>>, boolean, string | number | boolean>>;
@@ -6241,6 +6473,11 @@ declare const configInfoSchema: z.ZodObject<{
                 redeemPerIp?: number;
             }>>>;
         }, z.ZodTypeAny, "passthrough">>>>;
+        /**
+         * Seconds a client-direct call's recording waits for missing shards after its terminal signal before it
+         * is assembled anyway as `Partial` (gaps become silence). Defaults to 90.
+         */
+        recordingAssemblyGraceSeconds: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
     }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
         /** Master switch. When false, the WebRTC SDP broker router is not mounted. Defaults to true. */
         enabled: z.ZodDefault<z.ZodEffects<z.ZodDefault<z.ZodOptional<z.ZodUnion<[z.ZodBoolean, z.ZodString, z.ZodNumber]>>>, boolean, string | number | boolean>>;
@@ -6540,6 +6777,11 @@ declare const configInfoSchema: z.ZodObject<{
                 redeemPerIp?: number;
             }>>>;
         }, z.ZodTypeAny, "passthrough">>>>;
+        /**
+         * Seconds a client-direct call's recording waits for missing shards after its terminal signal before it
+         * is assembled anyway as `Partial` (gaps become silence). Defaults to 90.
+         */
+        recordingAssemblyGraceSeconds: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
     }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
         /** Master switch. When false, the WebRTC SDP broker router is not mounted. Defaults to true. */
         enabled: z.ZodDefault<z.ZodEffects<z.ZodDefault<z.ZodOptional<z.ZodUnion<[z.ZodBoolean, z.ZodString, z.ZodNumber]>>>, boolean, string | number | boolean>>;
@@ -6839,6 +7081,11 @@ declare const configInfoSchema: z.ZodObject<{
                 redeemPerIp?: number;
             }>>>;
         }, z.ZodTypeAny, "passthrough">>>>;
+        /**
+         * Seconds a client-direct call's recording waits for missing shards after its terminal signal before it
+         * is assembled anyway as `Partial` (gaps become silence). Defaults to 90.
+         */
+        recordingAssemblyGraceSeconds: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
     }, z.ZodTypeAny, "passthrough">>>>;
     databaseSettings: z.ZodObject<{
         connectionTimeout: z.ZodNumber;
@@ -7266,19 +7513,19 @@ declare const configInfoSchema: z.ZodObject<{
         writeProtection?: "strict" | "log" | "off";
     }>>>;
     serverExtensions: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodObject<{
-        Enabled: z.ZodDefault<z.ZodBoolean>;
+        Enabled: z.ZodOptional<z.ZodBoolean>;
         DriverClass: z.ZodString;
-        RootPath: z.ZodString;
+        RootPath: z.ZodOptional<z.ZodString>;
         Settings: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
     }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
-        Enabled: z.ZodDefault<z.ZodBoolean>;
+        Enabled: z.ZodOptional<z.ZodBoolean>;
         DriverClass: z.ZodString;
-        RootPath: z.ZodString;
+        RootPath: z.ZodOptional<z.ZodString>;
         Settings: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
     }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
-        Enabled: z.ZodDefault<z.ZodBoolean>;
+        Enabled: z.ZodOptional<z.ZodBoolean>;
         DriverClass: z.ZodString;
-        RootPath: z.ZodString;
+        RootPath: z.ZodOptional<z.ZodString>;
         Settings: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
     }, z.ZodTypeAny, "passthrough">>, "many">>>;
     cacheSettings: z.ZodDefault<z.ZodOptional<z.ZodObject<{
@@ -7286,6 +7533,14 @@ declare const configInfoSchema: z.ZodObject<{
         maxMemoryMB: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
         /** Maximum percentage of total cache memory that any single entity can occupy. Default: 50. Set to 0 to disable. */
         maxPercentOfCachePerEntity: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+        /**
+         * Ceiling on any ONE cache entry. 'auto' (the default) derives it from maxMemoryMB, so the
+         * largest entity the server caches scales with the memory the cache was given; a number is an
+         * explicit stricter percentage of maxMemoryMB; 0 removes the ceiling. Leave it on 'auto' unless
+         * a specific entry must be kept out of the cache — an entry declined by the ceiling is re-read
+         * from the database on every call, and the server logs which maxMemoryMB would admit it.
+         */
+        maxEntryPercentOfCache: z.ZodDefault<z.ZodOptional<z.ZodUnion<[z.ZodNumber, z.ZodLiteral<"auto">]>>>;
         /** Default TTL in seconds. 0 = no TTL, rely on event-based invalidation. Default: 0. */
         defaultTTLSeconds: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
         /** Interval in seconds for periodic eviction sweep. 0 = disabled. Default: 300 (5 minutes). */
@@ -7347,9 +7602,127 @@ declare const configInfoSchema: z.ZodObject<{
          * for it. 0 disables the turn-taking. Default: 30.
          */
         startupWarmupLeaseSeconds: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+        /**
+         * Pluggable cache invalidation broadcast topology configuration.
+         * Defaults to `'SequencedRoleBucket'` (Topology 1 Monotonic Sequence Ring Buffer + Topology 2
+         * Role-Fingerprint $O(\text{Roles})$ evaluation & shaping memoizer).
+         */
+        broadcast: z.ZodOptional<z.ZodObject<{
+            provider: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+            ringBufferSize: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+            excludedEntities: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodString, "many">>>;
+            azureWebPubSub: z.ZodOptional<z.ZodObject<{
+                endpoint: z.ZodOptional<z.ZodString>;
+                hubName: z.ZodOptional<z.ZodString>;
+                accessKey: z.ZodOptional<z.ZodString>;
+                tokenTtlMinutes: z.ZodOptional<z.ZodNumber>;
+            }, "strip", z.ZodTypeAny, {
+                endpoint?: string;
+                hubName?: string;
+                accessKey?: string;
+                tokenTtlMinutes?: number;
+            }, {
+                endpoint?: string;
+                hubName?: string;
+                accessKey?: string;
+                tokenTtlMinutes?: number;
+            }>>;
+            awsIoTCore: z.ZodOptional<z.ZodObject<{
+                endpoint: z.ZodOptional<z.ZodString>;
+                region: z.ZodOptional<z.ZodString>;
+                topicPrefix: z.ZodOptional<z.ZodString>;
+                accessKeyId: z.ZodOptional<z.ZodString>;
+                secretAccessKey: z.ZodOptional<z.ZodString>;
+                tokenTtlSeconds: z.ZodOptional<z.ZodNumber>;
+            }, "strip", z.ZodTypeAny, {
+                endpoint?: string;
+                region?: string;
+                topicPrefix?: string;
+                accessKeyId?: string;
+                secretAccessKey?: string;
+                tokenTtlSeconds?: number;
+            }, {
+                endpoint?: string;
+                region?: string;
+                topicPrefix?: string;
+                accessKeyId?: string;
+                secretAccessKey?: string;
+                tokenTtlSeconds?: number;
+            }>>;
+            gcpPubSub: z.ZodOptional<z.ZodObject<{
+                projectId: z.ZodOptional<z.ZodString>;
+                topicPrefix: z.ZodOptional<z.ZodString>;
+                gatewayUrl: z.ZodOptional<z.ZodString>;
+                signingSecret: z.ZodOptional<z.ZodString>;
+                tokenTtlSeconds: z.ZodOptional<z.ZodNumber>;
+            }, "strip", z.ZodTypeAny, {
+                topicPrefix?: string;
+                tokenTtlSeconds?: number;
+                projectId?: string;
+                gatewayUrl?: string;
+                signingSecret?: string;
+            }, {
+                topicPrefix?: string;
+                tokenTtlSeconds?: number;
+                projectId?: string;
+                gatewayUrl?: string;
+                signingSecret?: string;
+            }>>;
+        }, "strip", z.ZodTypeAny, {
+            provider?: string;
+            ringBufferSize?: number;
+            excludedEntities?: string[];
+            azureWebPubSub?: {
+                endpoint?: string;
+                hubName?: string;
+                accessKey?: string;
+                tokenTtlMinutes?: number;
+            };
+            awsIoTCore?: {
+                endpoint?: string;
+                region?: string;
+                topicPrefix?: string;
+                accessKeyId?: string;
+                secretAccessKey?: string;
+                tokenTtlSeconds?: number;
+            };
+            gcpPubSub?: {
+                topicPrefix?: string;
+                tokenTtlSeconds?: number;
+                projectId?: string;
+                gatewayUrl?: string;
+                signingSecret?: string;
+            };
+        }, {
+            provider?: string;
+            ringBufferSize?: number;
+            excludedEntities?: string[];
+            azureWebPubSub?: {
+                endpoint?: string;
+                hubName?: string;
+                accessKey?: string;
+                tokenTtlMinutes?: number;
+            };
+            awsIoTCore?: {
+                endpoint?: string;
+                region?: string;
+                topicPrefix?: string;
+                accessKeyId?: string;
+                secretAccessKey?: string;
+                tokenTtlSeconds?: number;
+            };
+            gcpPubSub?: {
+                topicPrefix?: string;
+                tokenTtlSeconds?: number;
+                projectId?: string;
+                gatewayUrl?: string;
+                signingSecret?: string;
+            };
+        }>>;
     }, "strip", z.ZodTypeAny, {
         maxMemoryMB?: number;
         maxPercentOfCachePerEntity?: number;
+        maxEntryPercentOfCache?: number | "auto";
         defaultTTLSeconds?: number;
         evictionSweepIntervalSeconds?: number;
         verboseLogging?: boolean;
@@ -7359,9 +7732,36 @@ declare const configInfoSchema: z.ZodObject<{
         userCacheCheckIntervalSeconds?: number;
         metadataSweepIntervalSeconds?: number;
         startupWarmupLeaseSeconds?: number;
+        broadcast?: {
+            provider?: string;
+            ringBufferSize?: number;
+            excludedEntities?: string[];
+            azureWebPubSub?: {
+                endpoint?: string;
+                hubName?: string;
+                accessKey?: string;
+                tokenTtlMinutes?: number;
+            };
+            awsIoTCore?: {
+                endpoint?: string;
+                region?: string;
+                topicPrefix?: string;
+                accessKeyId?: string;
+                secretAccessKey?: string;
+                tokenTtlSeconds?: number;
+            };
+            gcpPubSub?: {
+                topicPrefix?: string;
+                tokenTtlSeconds?: number;
+                projectId?: string;
+                gatewayUrl?: string;
+                signingSecret?: string;
+            };
+        };
     }, {
         maxMemoryMB?: number;
         maxPercentOfCachePerEntity?: number;
+        maxEntryPercentOfCache?: number | "auto";
         defaultTTLSeconds?: number;
         evictionSweepIntervalSeconds?: number;
         verboseLogging?: boolean;
@@ -7371,6 +7771,32 @@ declare const configInfoSchema: z.ZodObject<{
         userCacheCheckIntervalSeconds?: number;
         metadataSweepIntervalSeconds?: number;
         startupWarmupLeaseSeconds?: number;
+        broadcast?: {
+            provider?: string;
+            ringBufferSize?: number;
+            excludedEntities?: string[];
+            azureWebPubSub?: {
+                endpoint?: string;
+                hubName?: string;
+                accessKey?: string;
+                tokenTtlMinutes?: number;
+            };
+            awsIoTCore?: {
+                endpoint?: string;
+                region?: string;
+                topicPrefix?: string;
+                accessKeyId?: string;
+                secretAccessKey?: string;
+                tokenTtlSeconds?: number;
+            };
+            gcpPubSub?: {
+                topicPrefix?: string;
+                tokenTtlSeconds?: number;
+                projectId?: string;
+                gatewayUrl?: string;
+                signingSecret?: string;
+            };
+        };
     }>>>;
     loggingSettings: z.ZodDefault<z.ZodOptional<z.ZodObject<{
         graphql: z.ZodDefault<z.ZodOptional<z.ZodObject<{
@@ -7398,6 +7824,18 @@ declare const configInfoSchema: z.ZodObject<{
             logVariables?: boolean;
         };
     }>>>;
+    aiPromptRuns: z.ZodOptional<z.ZodObject<{
+        /**
+         * Server default for which template inputs prompt runs store in AIPromptRun.Messages:
+         * 'None' (key sizes only), 'Referenced' (keys the templates read) or 'Full'.
+         * AIPrompt.TemplateDataCapture and AIPromptParams.TemplateDataCapture override it.
+         */
+        templateDataCapture: z.ZodOptional<z.ZodEnum<["None", "Referenced", "Full"]>>;
+    }, "strip", z.ZodTypeAny, {
+        templateDataCapture?: "None" | "Referenced" | "Full";
+    }, {
+        templateDataCapture?: "None" | "Referenced" | "Full";
+    }>>;
     feedbackSettings: z.ZodDefault<z.ZodOptional<z.ZodObject<{
         /** Org-level kill switch for the in-app feedback feature. Defaults to true (enabled). */
         enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
@@ -7567,10 +8005,24 @@ declare const configInfoSchema: z.ZodObject<{
     ___codeGenAPIPort: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
     ___codeGenAPISubmissionDelay: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
     graphqlRootPath: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+    /**
+     * Path prefix MJAPI mounts every route it serves under (core routes and server extensions), on its own
+     * listener. `/` unless a proxy forwards a prefix WITHOUT stripping it (e.g. CloudFront `/api/*` → MJAPI):
+     * then set `MJAPI_BASE_PATH=/api`. Independent of `graphqlRootPath`, which is only Apollo's path. MJ #5674.
+     */
+    apiBasePath: z.ZodDefault<z.ZodOptional<z.ZodString>>;
     enableIntrospection: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
     websiteRunFromPackage: z.ZodOptional<z.ZodNumber>;
     userEmailMap: z.ZodOptional<z.ZodEffects<z.ZodString, Record<string, string>, string>>;
     mjCoreSchema: z.ZodString;
+    /**
+     * Server execution role for horizontal scaling:
+     * - `'all'` (default): runs both interactive HTTP/GraphQL/WebSocket handlers and background worker loops.
+     * - `'api'`: runs interactive HTTP/GraphQL/WebSocket handlers only; background worker loops are skipped.
+     * - `'worker'`: runs background worker loops (`ScheduledJobsService`, `IntegrationSyncWorkerService`,
+     *   `StartTaskGraphDispatcher`, `StartWorkQueueHost`, `SessionJanitor`, reconcilers).
+     */
+    serverRole: z.ZodDefault<z.ZodOptional<z.ZodEnum<["all", "api", "worker"]>>>;
 }, "strip", z.ZodTypeAny, {
     dbReadOnlyUsername?: string;
     dbReadOnlyPassword?: string;
@@ -7610,6 +8062,12 @@ declare const configInfoSchema: z.ZodObject<{
     } & {
         [k: string]: unknown;
     };
+    devAuth?: {
+        enabled?: boolean;
+        defaultEmail?: string;
+    } & {
+        [k: string]: unknown;
+    };
     widget?: {
         enabled?: boolean;
         audience?: string;
@@ -7753,6 +8211,7 @@ declare const configInfoSchema: z.ZodObject<{
         } & {
             [k: string]: unknown;
         };
+        recordingAssemblyGraceSeconds?: number;
     } & {
         [k: string]: unknown;
     };
@@ -7879,14 +8338,15 @@ declare const configInfoSchema: z.ZodObject<{
         writeProtection?: "strict" | "log" | "off";
     };
     serverExtensions?: z.objectOutputType<{
-        Enabled: z.ZodDefault<z.ZodBoolean>;
+        Enabled: z.ZodOptional<z.ZodBoolean>;
         DriverClass: z.ZodString;
-        RootPath: z.ZodString;
+        RootPath: z.ZodOptional<z.ZodString>;
         Settings: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
     }, z.ZodTypeAny, "passthrough">[];
     cacheSettings?: {
         maxMemoryMB?: number;
         maxPercentOfCachePerEntity?: number;
+        maxEntryPercentOfCache?: number | "auto";
         defaultTTLSeconds?: number;
         evictionSweepIntervalSeconds?: number;
         verboseLogging?: boolean;
@@ -7896,12 +8356,41 @@ declare const configInfoSchema: z.ZodObject<{
         userCacheCheckIntervalSeconds?: number;
         metadataSweepIntervalSeconds?: number;
         startupWarmupLeaseSeconds?: number;
+        broadcast?: {
+            provider?: string;
+            ringBufferSize?: number;
+            excludedEntities?: string[];
+            azureWebPubSub?: {
+                endpoint?: string;
+                hubName?: string;
+                accessKey?: string;
+                tokenTtlMinutes?: number;
+            };
+            awsIoTCore?: {
+                endpoint?: string;
+                region?: string;
+                topicPrefix?: string;
+                accessKeyId?: string;
+                secretAccessKey?: string;
+                tokenTtlSeconds?: number;
+            };
+            gcpPubSub?: {
+                topicPrefix?: string;
+                tokenTtlSeconds?: number;
+                projectId?: string;
+                gatewayUrl?: string;
+                signingSecret?: string;
+            };
+        };
     };
     loggingSettings?: {
         graphql?: {
             logVariables?: boolean;
         };
     };
+    aiPromptRuns?: {
+        templateDataCapture?: "None" | "Referenced" | "Full";
+    };
     feedbackSettings?: {
         enabled?: boolean;
         github?: {
@@ -7951,10 +8440,12 @@ declare const configInfoSchema: z.ZodObject<{
     ___codeGenAPIPort?: number;
     ___codeGenAPISubmissionDelay?: number;
     graphqlRootPath?: string;
+    apiBasePath?: string;
     enableIntrospection?: boolean;
     websiteRunFromPackage?: number;
     userEmailMap?: Record<string, string>;
     mjCoreSchema?: string;
+    serverRole?: "all" | "api" | "worker";
 }, {
     dbReadOnlyUsername?: string;
     dbReadOnlyPassword?: string;
@@ -7994,6 +8485,12 @@ declare const configInfoSchema: z.ZodObject<{
     } & {
         [k: string]: unknown;
     };
+    devAuth?: {
+        enabled?: string | number | boolean;
+        defaultEmail?: string;
+    } & {
+        [k: string]: unknown;
+    };
     widget?: {
         enabled?: string | number | boolean;
         audience?: string;
@@ -8137,6 +8634,7 @@ declare const configInfoSchema: z.ZodObject<{
         } & {
             [k: string]: unknown;
         };
+        recordingAssemblyGraceSeconds?: number;
     } & {
         [k: string]: unknown;
     };
@@ -8263,14 +8761,15 @@ declare const configInfoSchema: z.ZodObject<{
         writeProtection?: "strict" | "log" | "off";
     };
     serverExtensions?: z.objectInputType<{
-        Enabled: z.ZodDefault<z.ZodBoolean>;
+        Enabled: z.ZodOptional<z.ZodBoolean>;
         DriverClass: z.ZodString;
-        RootPath: z.ZodString;
+        RootPath: z.ZodOptional<z.ZodString>;
         Settings: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
     }, z.ZodTypeAny, "passthrough">[];
     cacheSettings?: {
         maxMemoryMB?: number;
         maxPercentOfCachePerEntity?: number;
+        maxEntryPercentOfCache?: number | "auto";
         defaultTTLSeconds?: number;
         evictionSweepIntervalSeconds?: number;
         verboseLogging?: boolean;
@@ -8280,12 +8779,41 @@ declare const configInfoSchema: z.ZodObject<{
         userCacheCheckIntervalSeconds?: number;
         metadataSweepIntervalSeconds?: number;
         startupWarmupLeaseSeconds?: number;
+        broadcast?: {
+            provider?: string;
+            ringBufferSize?: number;
+            excludedEntities?: string[];
+            azureWebPubSub?: {
+                endpoint?: string;
+                hubName?: string;
+                accessKey?: string;
+                tokenTtlMinutes?: number;
+            };
+            awsIoTCore?: {
+                endpoint?: string;
+                region?: string;
+                topicPrefix?: string;
+                accessKeyId?: string;
+                secretAccessKey?: string;
+                tokenTtlSeconds?: number;
+            };
+            gcpPubSub?: {
+                topicPrefix?: string;
+                tokenTtlSeconds?: number;
+                projectId?: string;
+                gatewayUrl?: string;
+                signingSecret?: string;
+            };
+        };
     };
     loggingSettings?: {
         graphql?: {
             logVariables?: boolean;
         };
     };
+    aiPromptRuns?: {
+        templateDataCapture?: "None" | "Referenced" | "Full";
+    };
     feedbackSettings?: {
         enabled?: boolean;
         github?: {
@@ -8335,11 +8863,14 @@ declare const configInfoSchema: z.ZodObject<{
     ___codeGenAPIPort?: number;
     ___codeGenAPISubmissionDelay?: number;
     graphqlRootPath?: string;
+    apiBasePath?: string;
     enableIntrospection?: boolean;
     websiteRunFromPackage?: number;
     userEmailMap?: string;
     mjCoreSchema?: string;
+    serverRole?: "all" | "api" | "worker";
 }>;
+export type { ServerRole };
 export type UserHandlingInfo = z.infer<typeof userHandlingInfoSchema>;
 export type MagicLinkConfig = z.infer<typeof magicLinkSchema>;
 export type WidgetConfig = z.infer<typeof widgetSchema>;
@@ -8364,9 +8895,10 @@ export type { WorkQueueConfig } from './services/workQueueConfig.js';
 export type TelemetryConfig = z.infer<typeof telemetrySchema>;
 export type QueryDialectConfig = z.infer<typeof queryDialectSchema>;
 export type MultiTenancyConfig = z.infer<typeof multiTenancySchema>;
-export type ServerExtensionConfig = z.infer<typeof serverExtensionSchema>;
+export type ServerExtensionConfig = z.infer<typeof ServerExtensionSchema>;
 export type CacheSettingsConfig = z.infer<typeof cacheSettingsSchema>;
 export type LoggingSettingsConfig = z.infer<typeof loggingSettingsSchema>;
+export type AIPromptRunsConfig = z.infer<typeof aiPromptRunsSchema>;
 export type FeedbackGithubSettingsConfig = z.infer<typeof feedbackGithubSettingsSchema>;
 export type FeedbackSettingsConfig = z.infer<typeof feedbackSettingsSchema>;
 export type CorsConfig = z.infer<typeof corsSchema>;
@@ -8443,6 +8975,12 @@ export declare function LoadConfig(): {
     } & {
         [k: string]: unknown;
     };
+    devAuth?: {
+        enabled?: boolean;
+        defaultEmail?: string;
+    } & {
+        [k: string]: unknown;
+    };
     widget?: {
         enabled?: boolean;
         audience?: string;
@@ -8586,6 +9124,7 @@ export declare function LoadConfig(): {
         } & {
             [k: string]: unknown;
         };
+        recordingAssemblyGraceSeconds?: number;
     } & {
         [k: string]: unknown;
     };
@@ -8712,14 +9251,15 @@ export declare function LoadConfig(): {
         writeProtection?: "strict" | "log" | "off";
     };
     serverExtensions?: z.objectOutputType<{
-        Enabled: z.ZodDefault<z.ZodBoolean>;
+        Enabled: z.ZodOptional<z.ZodBoolean>;
         DriverClass: z.ZodString;
-        RootPath: z.ZodString;
+        RootPath: z.ZodOptional<z.ZodString>;
         Settings: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
     }, z.ZodTypeAny, "passthrough">[];
     cacheSettings?: {
         maxMemoryMB?: number;
         maxPercentOfCachePerEntity?: number;
+        maxEntryPercentOfCache?: number | "auto";
         defaultTTLSeconds?: number;
         evictionSweepIntervalSeconds?: number;
         verboseLogging?: boolean;
@@ -8729,12 +9269,41 @@ export declare function LoadConfig(): {
         userCacheCheckIntervalSeconds?: number;
         metadataSweepIntervalSeconds?: number;
         startupWarmupLeaseSeconds?: number;
+        broadcast?: {
+            provider?: string;
+            ringBufferSize?: number;
+            excludedEntities?: string[];
+            azureWebPubSub?: {
+                endpoint?: string;
+                hubName?: string;
+                accessKey?: string;
+                tokenTtlMinutes?: number;
+            };
+            awsIoTCore?: {
+                endpoint?: string;
+                region?: string;
+                topicPrefix?: string;
+                accessKeyId?: string;
+                secretAccessKey?: string;
+                tokenTtlSeconds?: number;
+            };
+            gcpPubSub?: {
+                topicPrefix?: string;
+                tokenTtlSeconds?: number;
+                projectId?: string;
+                gatewayUrl?: string;
+                signingSecret?: string;
+            };
+        };
     };
     loggingSettings?: {
         graphql?: {
             logVariables?: boolean;
         };
     };
+    aiPromptRuns?: {
+        templateDataCapture?: "None" | "Referenced" | "Full";
+    };
     feedbackSettings?: {
         enabled?: boolean;
         github?: {
@@ -8784,10 +9353,12 @@ export declare function LoadConfig(): {
     ___codeGenAPIPort?: number;
     ___codeGenAPISubmissionDelay?: number;
     graphqlRootPath?: string;
+    apiBasePath?: string;
     enableIntrospection?: boolean;
     websiteRunFromPackage?: number;
     userEmailMap?: Record<string, string>;
     mjCoreSchema?: string;
+    serverRole?: "all" | "api" | "worker";
 };
 /** @deprecated Use {@link LoadConfig}. */
 export declare function loadConfig(): {
@@ -8829,6 +9400,12 @@ export declare function loadConfig(): {
     } & {
         [k: string]: unknown;
     };
+    devAuth?: {
+        enabled?: boolean;
+        defaultEmail?: string;
+    } & {
+        [k: string]: unknown;
+    };
     widget?: {
         enabled?: boolean;
         audience?: string;
@@ -8972,6 +9549,7 @@ export declare function loadConfig(): {
         } & {
             [k: string]: unknown;
         };
+        recordingAssemblyGraceSeconds?: number;
     } & {
         [k: string]: unknown;
     };
@@ -9098,14 +9676,15 @@ export declare function loadConfig(): {
         writeProtection?: "strict" | "log" | "off";
     };
     serverExtensions?: z.objectOutputType<{
-        Enabled: z.ZodDefault<z.ZodBoolean>;
+        Enabled: z.ZodOptional<z.ZodBoolean>;
         DriverClass: z.ZodString;
-        RootPath: z.ZodString;
+        RootPath: z.ZodOptional<z.ZodString>;
         Settings: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
     }, z.ZodTypeAny, "passthrough">[];
     cacheSettings?: {
         maxMemoryMB?: number;
         maxPercentOfCachePerEntity?: number;
+        maxEntryPercentOfCache?: number | "auto";
         defaultTTLSeconds?: number;
         evictionSweepIntervalSeconds?: number;
         verboseLogging?: boolean;
@@ -9115,12 +9694,41 @@ export declare function loadConfig(): {
         userCacheCheckIntervalSeconds?: number;
         metadataSweepIntervalSeconds?: number;
         startupWarmupLeaseSeconds?: number;
+        broadcast?: {
+            provider?: string;
+            ringBufferSize?: number;
+            excludedEntities?: string[];
+            azureWebPubSub?: {
+                endpoint?: string;
+                hubName?: string;
+                accessKey?: string;
+                tokenTtlMinutes?: number;
+            };
+            awsIoTCore?: {
+                endpoint?: string;
+                region?: string;
+                topicPrefix?: string;
+                accessKeyId?: string;
+                secretAccessKey?: string;
+                tokenTtlSeconds?: number;
+            };
+            gcpPubSub?: {
+                topicPrefix?: string;
+                tokenTtlSeconds?: number;
+                projectId?: string;
+                gatewayUrl?: string;
+                signingSecret?: string;
+            };
+        };
     };
     loggingSettings?: {
         graphql?: {
             logVariables?: boolean;
         };
     };
+    aiPromptRuns?: {
+        templateDataCapture?: "None" | "Referenced" | "Full";
+    };
     feedbackSettings?: {
         enabled?: boolean;
         github?: {
@@ -9170,9 +9778,11 @@ export declare function loadConfig(): {
     ___codeGenAPIPort?: number;
     ___codeGenAPISubmissionDelay?: number;
     graphqlRootPath?: string;
+    apiBasePath?: string;
     enableIntrospection?: boolean;
     websiteRunFromPackage?: number;
     userEmailMap?: Record<string, string>;
     mjCoreSchema?: string;
+    serverRole?: "all" | "api" | "worker";
 };
 //# sourceMappingURL=config.d.ts.map