@powerhousedao/switchboard 6.2.3-dev.8 → 6.2.3-staging.0

package/.tsbuild/tsdown.config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tsdown.config.d.ts","sourceRoot":"","sources":["../tsdown.config.ts"],"names":[],"mappings":";AAEA,wBAaG"}
+{"version":3,"file":"tsdown.config.d.ts","sourceRoot":"","sources":["../tsdown.config.ts"],"names":[],"mappings":""}

package/.tsbuild/vitest.config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"vitest.config.d.ts","sourceRoot":"","sources":["../vitest.config.ts"],"names":[],"mappings":";AAEA,wBAQG"}
+{"version":3,"file":"vitest.config.d.ts","sourceRoot":"","sources":["../vitest.config.ts"],"names":[],"mappings":""}

package/Auth.md

@@ -133,6 +133,57 @@ interface AuthConfig {
 - **Document Owners**: implicit ADMIN on documents they create
 - **Per-Document Grants**: READ / WRITE / ADMIN granted to users or groups, inherited from protected ancestors
 
+#### Attachments
+
+An attachment is readable by whoever may read the document that references it.
+`GET /attachments/:hash/download-target` decides that twice over: the caller
+must be able to read the document's `global` scope, and the reference index
+must confirm that the document really does reference this hash. A denial is a
+single generic `404` either way, so it never tells the caller which of the two
+failed.
+
+Which model answers the first half is the deployment's choice, and by default it
+is the permission tables above — unchanged.
+
+```bash
+# Decide an attachment read with the referencing document's own policy
+export ATTACHMENT_READS_FOLLOW_DOCUMENT_POLICY=true
+```
+
+With it on, the document's **own policy** decides, evaluated for the caller's
+subject: their address *and* the `did:key` of the app instance whose token
+authenticated them, because a grant can name either and a document's creator is
+recorded by key. It needs a policy model to evaluate, which auth enforcement is
+what supplies, and refuses to boot without one rather than leave the tables
+deciding while the configuration says otherwise.
+
+Why a deployment would want it: one whose documents carry policies keeps no rows
+in the permission tables, so asking those tables about such a document returns
+whatever the host-wide policy says — under `OPEN`, `true`, for every caller
+including an anonymous one. Handing out bytes on that answer gives the file to
+anyone who learns its hash, which the document's own state may well have told
+them before their access was taken away.
+
+Two things to know before turning it on. A document that carries **no** policy
+stays readable, because an uninitialized policy is not a denial — unless the
+host also sets `DEFAULT_PROTECTION`, which tells the gate to withhold what it
+cannot decide, and then attachments on unpolicied documents are refused along
+with everything else about them. And every non-browser client that downloads
+bytes — an extraction worker, an indexer — needs a read grant of its own on the
+documents it fetches, or it stops working the moment this is enabled.
+
+The presigned URL a target carries is short-lived by design: the authorization
+behind it is decided once, when it is issued, and the URL keeps working until it
+expires however the policy changes in between. The default ceiling is **300
+seconds**, and it applies whether or not the caller asked for a lifetime —
+otherwise omitting `expiresIn` would be a way to opt out of it.
+
+```bash
+# Raise it if a deployment genuinely needs longer; still bounded by the
+# 7-day maximum a SigV4 signature can carry.
+export ATTACHMENT_DOWNLOAD_TARGET_MAX_TTL_SECONDS=1800
+```
+
 ### 6. **Session Management**
 
 Advanced session handling with multiple active sessions:
@@ -221,6 +272,49 @@ It requires a caller to be resolvable at all, so it refuses to boot without
 resolution off, no bearer is ever read and it would reject every caller,
 including authenticated ones.
 
+It also covers the attachment routes, which are mounted on the HTTP adapter and
+never pass the GraphQL fetch chain. Their own 401 keys on `AUTH_ENABLED`, so
+without this switch a deployment running `OPEN` serves them to anyone; with it,
+every attachment route refuses a caller it cannot name — `download-target` and
+the `GET`/`HEAD /attachments/:hash` byte routes included, even though they
+decide per document (or by a signed URL) on their own. A filesystem signed
+download URL therefore needs a bearer too while this switch is on.
+
+##### Serving one path anonymously
+
+Some products have a flow that runs *before* sign-in: previewing an invitation
+from the code in its e-mail, for instance, so the screen can say who the
+invitation is for. That flow has no caller by definition, and the floor above
+would answer it a `401`.
+
+```bash
+export REQUIRE_AUTHENTICATED_CALLER=true
+export REQUIRE_AUTHENTICATED_CALLER_EXEMPT_PATHS=/graphql/public
+```
+
+Comma-separated, so several paths are one variable:
+
+```bash
+export REQUIRE_AUTHENTICATED_CALLER_EXEMPT_PATHS=/graphql/public,/graphql/invites
+```
+
+Each entry is matched against the request's **pathname, in full** — never as a
+prefix, so `/graphql/public` does not also exempt `/graphql/public-admin`. A
+trailing slash on either side is ignored; a leading slash is required, and a
+path without one is refused at boot rather than left as an exemption that
+silently never applies. Configuring exemptions while the floor is off is
+refused too: it would describe a protection the server is not applying.
+
+The exempt paths are named in the boot log, because the one question worth
+asking about this floor is what is still open.
+
+Every entry is a hole in it. Only ever name a path that serves operations which
+are safe without a caller, and prefer a route mounted for exactly that purpose
+over exempting one that also serves something else. Note what this switch does
+**not** reach, in either configuration: routes registered directly on the HTTP
+adapter (`/health`, `/ready`, `/explorer`, `/d/:drive`) and package HTTP routes,
+which declare their own `auth` per route.
+
 #### Configuration File Method
 
 ```json

package/CHANGELOG.md

@@ -1,3 +1,305 @@
+## 6.2.3-staging.0 (2026-09-30)
+
+This was a version bump only for @powerhousedao/switchboard to align it with other projects, there were no code changes.
+
+## 6.2.3-dev.34 (2026-09-30)
+
+### 🚀 Features
+
+- **switchboard:** let MCP_ENABLED=false keep the MCP server unmounted ([#3146](https://github.com/powerhouse-inc/powerhouse/pull/3146))
+
+### ❤️ Thank You
+
+- Guillermo Puente Sandoval @gpuente
+
+## 6.2.3-dev.33 (2026-09-30)
+
+### 🚀 Features
+
+- **switchboard:** expose the stored-protocol startup check ([de2bf4836](https://github.com/powerhouse-inc/powerhouse/commit/de2bf4836))
+- **reactor:** add catch-up operator tools and observability ([5722d7836](https://github.com/powerhouse-inc/powerhouse/commit/5722d7836))
+
+### 🩹 Fixes
+
+- **reactor:** claim a batch for each read model as it queues ([c09b1de2a](https://github.com/powerhouse-inc/powerhouse/commit/c09b1de2a))
+- **reactor:** settle a probe on its own xid, not on an empty xip ([4e0f0dab9](https://github.com/powerhouse-inc/powerhouse/commit/4e0f0dab9))
+- **reactor:** leave a stream to the next sweep while its live pass runs ([53112bad4](https://github.com/powerhouse-inc/powerhouse/commit/53112bad4))
+- **reactor:** start a head registration at the sequence head ([e06581849](https://github.com/powerhouse-inc/powerhouse/commit/e06581849))
+- **switchboard:** resolve packages it brings from its own dependencies in dev ([7c9c55d98](https://github.com/powerhouse-inc/powerhouse/commit/7c9c55d98))
+
+### ❤️ Thank You
+
+- acaldas
+- Benjamin Jordan
+- Claude Opus 5.5
+
+## 6.2.3-dev.32 (2026-09-29)
+
+This was a version bump only for @powerhousedao/switchboard to align it with other projects, there were no code changes.
+
+## 6.2.3-dev.31 (2026-09-29)
+
+### 🚀 Features
+
+- **ph-cli:** seed a Workflows drive in vetra when workflows are on ([6e855808e](https://github.com/powerhouse-inc/powerhouse/commit/6e855808e))
+- **workflow:** sign connections in with OAuth2 using their own app ([b03b33bf0](https://github.com/powerhouse-inc/powerhouse/commit/b03b33bf0))
+- **reactor-workflow:** keyset-paginate the run listing through the subgraph and runs views ([d22a4eea5](https://github.com/powerhouse-inc/powerhouse/commit/d22a4eea5))
+- **reactor-workflow:** renew webhook trigger subscriptions ([4fc6bfea6](https://github.com/powerhouse-inc/powerhouse/commit/4fc6bfea6))
+- ⚠️  **switchboard:** block inputs, step and trigger tests, and version resolutions in the workflow API ([58b43b249](https://github.com/powerhouse-inc/powerhouse/commit/58b43b249))
+
+### 🩹 Fixes
+
+- **reactor-workflow:** order runs by a key that doesn't change when they start ([f15425dd8](https://github.com/powerhouse-inc/powerhouse/commit/f15425dd8))
+- **reactor-workflow:** disarm a workflow's trigger when its document is deleted ([866427bc6](https://github.com/powerhouse-inc/powerhouse/commit/866427bc6))
+
+### 🔥 Performance
+
+- **reactor-workflow:** batch run listing step and document reads ([c33a42f7d](https://github.com/powerhouse-inc/powerhouse/commit/c33a42f7d))
+
+### ⚠️  Breaking Changes
+
+- **switchboard:** block inputs, step and trigger tests, and version resolutions in the workflow API  ([58b43b249](https://github.com/powerhouse-inc/powerhouse/commit/58b43b249))
+
+### ❤️ Thank You
+
+- acaldas
+
+## 6.2.3-dev.30 (2026-09-29)
+
+### 🩹 Fixes
+
+- **deps:** load cmd-ts's ESM build under bun, which fails to require chalk from its CJS build ([749528c71](https://github.com/powerhouse-inc/powerhouse/commit/749528c71))
+
+### ❤️ Thank You
+
+- acaldas
+
+## 6.2.3-dev.29 (2026-09-28)
+
+### 🩹 Fixes
+
+- **reactor-workflow:** refuse a secrets master key other than the one secrets were stored with ([87cfde0f5](https://github.com/powerhouse-inc/powerhouse/commit/87cfde0f5))
+
+### ❤️ Thank You
+
+- acaldas
+
+## 6.2.3-dev.28 (2026-09-28)
+
+### 🚀 Features
+
+- **reactor-workflow:** carry Activepieces layout hints, property groups and search to the editor ([4eca1e1bd](https://github.com/powerhouse-inc/powerhouse/commit/4eca1e1bd))
+
+### ❤️ Thank You
+
+- acaldas
+
+## 6.2.3-dev.27 (2026-09-28)
+
+### 🚀 Features
+
+- ⚠️  **switchboard:** serve attachment bytes only under a document grant ([275e88da0](https://github.com/powerhouse-inc/powerhouse/commit/275e88da0))
+- **switchboard:** sign short-lived attachment byte-route URLs ([18e09cdb5](https://github.com/powerhouse-inc/powerhouse/commit/18e09cdb5))
+
+### 🩹 Fixes
+
+- **switchboard:** sign byte-route URLs under main's download-target TTL cap ([d503b4f67](https://github.com/powerhouse-inc/powerhouse/commit/d503b4f67))
+- **reactor-workflow:** serve workflow reads and runs as the caller ([b2ddd126a](https://github.com/powerhouse-inc/powerhouse/commit/b2ddd126a))
+- **reactor-drive:** gate the reactor-drive subgraph as the caller ([7041635f4](https://github.com/powerhouse-inc/powerhouse/commit/7041635f4))
+- **reactor-api:** gate attachment reads through the reactor's read gate ([d6c3b4df1](https://github.com/powerhouse-inc/powerhouse/commit/d6c3b4df1))
+
+### ⚠️  Breaking Changes
+
+- **switchboard:** serve attachment bytes only under a document grant  ([275e88da0](https://github.com/powerhouse-inc/powerhouse/commit/275e88da0))
+
+### ❤️ Thank You
+
+- Benjamin Jordan
+- Claude Opus 5.5
+
+## 6.2.3-dev.26 (2026-09-26)
+
+### 🚀 Features
+
+- ⚠️  **switchboard:** serve attachment bytes only under a document grant ([275e88da0](https://github.com/powerhouse-inc/powerhouse/commit/275e88da0))
+- **switchboard:** sign short-lived attachment byte-route URLs ([18e09cdb5](https://github.com/powerhouse-inc/powerhouse/commit/18e09cdb5))
+
+### 🩹 Fixes
+
+- **switchboard:** sign byte-route URLs under main's download-target TTL cap ([d503b4f67](https://github.com/powerhouse-inc/powerhouse/commit/d503b4f67))
+- **reactor-workflow:** serve workflow reads and runs as the caller ([b2ddd126a](https://github.com/powerhouse-inc/powerhouse/commit/b2ddd126a))
+- **reactor-drive:** gate the reactor-drive subgraph as the caller ([7041635f4](https://github.com/powerhouse-inc/powerhouse/commit/7041635f4))
+- **reactor-api:** gate attachment reads through the reactor's read gate ([d6c3b4df1](https://github.com/powerhouse-inc/powerhouse/commit/d6c3b4df1))
+
+### ⚠️  Breaking Changes
+
+- **switchboard:** serve attachment bytes only under a document grant  ([275e88da0](https://github.com/powerhouse-inc/powerhouse/commit/275e88da0))
+
+### ❤️ Thank You
+
+- Benjamin Jordan
+- Claude Opus 5.5
+
+## 6.2.3-dev.25 (2026-09-25)
+
+### 🚀 Features
+
+- **workflow:** show run data in a lazy-loaded tree with copyable references, and scope the connection picker to the drive ([1d286f4a6](https://github.com/powerhouse-inc/powerhouse/commit/1d286f4a6))
+- **reactor-workflow:** record when each step starts and ends ([6f6d8a233](https://github.com/powerhouse-inc/powerhouse/commit/6f6d8a233))
+- **reactor-api:** serve an attachment only to callers who may read its document ([#3109](https://github.com/powerhouse-inc/powerhouse/pull/3109))
+
+### 🩹 Fixes
+
+- **ci:** let the release skip the transpiler TypeScript 7 broke ([#36306](https://github.com/powerhouse-inc/powerhouse/issues/36306))
+
+### ❤️ Thank You
+
+- acaldas
+- Guillermo Puente
+- Guillermo Puente Sandoval
+
+## 6.2.3-dev.24 (2026-09-25)
+
+### 🚀 Features
+
+- **reactor-api:** exempt named paths from the authenticated-caller floor, and carry it to the attachment routes ([#3108](https://github.com/powerhouse-inc/powerhouse/pull/3108))
+- **reactor:** action signature integrity ([#3088](https://github.com/powerhouse-inc/powerhouse/pull/3088), [#2894](https://github.com/powerhouse-inc/powerhouse/issues/2894), [#7](https://github.com/powerhouse-inc/powerhouse/issues/7))
+- **reactor-workflow:** refuse the auth and trigger features the engine can't run ([7ce03d28f](https://github.com/powerhouse-inc/powerhouse/commit/7ce03d28f))
+- type-safe piece authoring, upstream connection hooks, and a ph build that typechecks first ([#3082](https://github.com/powerhouse-inc/powerhouse/pull/3082))
+
+### 🩹 Fixes
+
+- **workflow:** build after powerhouse-vetra-packages so their tsc --build runs never overlap ([#3101](https://github.com/powerhouse-inc/powerhouse/pull/3101))
+
+### ❤️ Thank You
+
+- acaldas
+- Benjamin Jordan
+- Claude Fable 5.1
+- Guillermo Puente Sandoval @gpuente
+
+## 6.2.3-dev.23 (2026-09-24)
+
+### 🩹 Fixes
+
+- **switchboard:** leave unhandled rejections to Sentry when it listens ([c6a40108e](https://github.com/powerhouse-inc/powerhouse/commit/c6a40108e))
+- **switchboard:** flush PGlite before exiting on an uncaught error ([#3077](https://github.com/powerhouse-inc/powerhouse/issues/3077))
+- **switchboard:** escape non-ASCII file names in attachment metadata headers ([#3077](https://github.com/powerhouse-inc/powerhouse/issues/3077))
+
+### ❤️ Thank You
+
+- Benjamin Jordan
+- Claude Opus 5.5
+
+## 6.2.3-dev.22 (2026-09-23)
+
+### 🩹 Fixes
+
+- **ci:** slice the duration-watch baseline in jq, not through head ([73db497e0](https://github.com/powerhouse-inc/powerhouse/commit/73db497e0))
+
+### ❤️ Thank You
+
+- acaldas
+
+## 6.2.3-dev.21 (2026-09-22)
+
+This was a version bump only for @powerhousedao/switchboard to align it with other projects, there were no code changes.
+
+## 6.2.3-dev.20 (2026-09-22)
+
+This was a version bump only for @powerhousedao/switchboard to align it with other projects, there were no code changes.
+
+## 6.2.3-dev.19 (2026-09-21)
+
+This was a version bump only for @powerhousedao/switchboard to align it with other projects, there were no code changes.
+
+## 6.2.3-dev.18 (2026-09-21)
+
+### 🚀 Features
+
+- **workflow:** read pieces from a Powerhouse registry ([f1467e0b0](https://github.com/powerhouse-inc/powerhouse/commit/f1467e0b0))
+
+### 🩹 Fixes
+
+- **switchboard:** load the workflow package like any other package ([7629bf71f](https://github.com/powerhouse-inc/powerhouse/commit/7629bf71f))
+
+### ❤️ Thank You
+
+- acaldas
+
+## 6.2.3-dev.17 (2026-09-21)
+
+This was a version bump only for @powerhousedao/switchboard to align it with other projects, there were no code changes.
+
+## 6.2.3-dev.16 (2026-09-21)
+
+This was a version bump only for @powerhousedao/switchboard to align it with other projects, there were no code changes.
+
+## 6.2.3-dev.15 (2026-09-20)
+
+This was a version bump only for @powerhousedao/switchboard to align it with other projects, there were no code changes.
+
+## 6.2.3-dev.14 (2026-09-19)
+
+### 🚀 Features
+
+- **ph-cli:** build pieces on ph build ([3913b0796](https://github.com/powerhouse-inc/powerhouse/commit/3913b0796))
+- **doc-harness:** serve rendered reports and transcripts from mastra studio ([fd64a4661](https://github.com/powerhouse-inc/powerhouse/commit/fd64a4661))
+- **doc-harness:** workflows, steps, and the run/resume/inspect commands ([0e116d226](https://github.com/powerhouse-inc/powerhouse/commit/0e116d226))
+- **doc-harness:** pilot task catalog with pinned recipe inputs ([74bc26129](https://github.com/powerhouse-inc/powerhouse/commit/74bc26129))
+- **doc-harness:** workspace wiring and core schemas for the docs-validation harness ([5c591ac69](https://github.com/powerhouse-inc/powerhouse/commit/5c591ac69))
+
+### ❤️ Thank You
+
+- acaldas
+- Benjamin Jordan
+- Claude Fable 5.1
+
+## 6.2.3-dev.13 (2026-09-18)
+
+This was a version bump only for @powerhousedao/switchboard to align it with other projects, there were no code changes.
+
+## 6.2.3-dev.12 (2026-09-17)
+
+### 🚀 Features
+
+- **switchboard:** own the workflow runtime, feed it through a read model, and take workflows out of reactor-api ([#3042](https://github.com/powerhouse-inc/powerhouse/issues/3042))
+- **reactor-workflow:** the workflow engine, composed in reactor-api behind the workflows flag ([cb807bf5d](https://github.com/powerhouse-inc/powerhouse/commit/cb807bf5d))
+- **workflow:** the Connect-loaded workflow package, and the workflows flag in reactor-api ([0953fc254](https://github.com/powerhouse-inc/powerhouse/commit/0953fc254))
+- **pieces-framework:** vendor the Activepieces piece framework as a Powerhouse package ([3da5dbea8](https://github.com/powerhouse-inc/powerhouse/commit/3da5dbea8))
+
+### ❤️ Thank You
+
+- acaldas
+
+## 6.2.3-dev.11 (2026-09-17)
+
+### 🚀 Features
+
+- **reactor-browser,design-system:** keep the legacy useDocumentOperations and RevisionHistory shapes as deprecated aliases ([6de05e632](https://github.com/powerhouse-inc/powerhouse/commit/6de05e632))
+
+### 🩹 Fixes
+
+- **design-system,connect:** end the history walk on a failed page and show what loaded ([95f815b46](https://github.com/powerhouse-inc/powerhouse/commit/95f815b46))
+- hold the timeline revision until the global history is loaded, default to the global scope, hide paging mid-load ([80c3b1289](https://github.com/powerhouse-inc/powerhouse/commit/80c3b1289))
+- **reactor-browser:** page operations through nextCursor and invalidate alias keys ([ccb965869](https://github.com/powerhouse-inc/powerhouse/commit/ccb965869))
+
+### 🔥 Performance
+
+- **design-system,connect:** wait for the whole history before rendering the timeline, yield between pages, fetch 500 per page ([86435721c](https://github.com/powerhouse-inc/powerhouse/commit/86435721c))
+
+### ❤️ Thank You
+
+- Frank Pfeift
+
+## 6.2.3-dev.10 (2026-09-16)
+
+This was a version bump only for @powerhousedao/switchboard to align it with other projects, there were no code changes.
+
+## 6.2.3-dev.9 (2026-09-15)
+
+This was a version bump only for @powerhousedao/switchboard to align it with other projects, there were no code changes.
+
 ## 6.2.3-dev.8 (2026-09-15)
 
 This was a version bump only for @powerhousedao/switchboard to align it with other projects, there were no code changes.

package/README.md

@@ -110,6 +110,7 @@ pnpm add -g @powerhousedao/switchboard
 | `REDIS_TLS_URL`             | Redis TLS connection URL           | -                     |
 | `PYROSCOPE_SERVER_ADDRESS`  | Pyroscope server address           | -                     |
 | `FEATURE_REACTORV2_ENABLED` | Enable Reactor v2 subgraph feature | `false`               |
+| `MCP_ENABLED`               | `false` keeps `/mcp` unmounted     | `true`                |
 
 See [Observability](#observability) below for Sentry and OpenTelemetry variables.
 
@@ -186,6 +187,40 @@ exits non-zero instead of waiting out the init timeout.
 
 Programmatically: `startSwitchboard({ projectionWorker: { enabled, dbPoolSize } })`.
 
+### Creation Signature Policy
+
+| Variable                  | Description                                                  | Default       |
+| ------------------------- | ------------------------------------------------------------ | ------------- |
+| `CREATE_SIGNATURE_POLICY` | What new documents are created as: `legacy` or `v2-required` | `v2-required` |
+
+A v2-required document accepts only v2 action signatures and takes a
+content-addressed id. Set `legacy` while any reactor that syncs with this one
+predates v2-required documents. It only decides what new documents are born
+as; existing documents keep their policy, and it does not change what the
+switchboard accepts. Without a Renown identity the switchboard has no signer,
+so it creates legacy documents and logs a warning. A default drive configured
+with a fixed `id` is always created legacy.
+
+### Stored Documents This Build Does Not Run
+
+| Variable                               | Description                                                                            | Default  |
+| -------------------------------------- | -------------------------------------------------------------------------------------- | -------- |
+| `REACTOR_UNSUPPORTED_STORED_DOCUMENTS` | Stored documents at protocol versions this build does not run: `refuse` or `read-only` | `refuse` |
+
+Before it starts, the reactor reads the protocol versions its stored documents
+were created with. If this build does not run one of them, for example after a
+rollback, switchboard logs this and exits with code 1:
+
+```
+Refusing to start: 12 stored document(s) require base-reducer 3, which this switchboard does not run. Either start a switchboard build that runs base-reducer 3, or set REACTOR_UNSUPPORTED_STORED_DOCUMENTS=read-only to start with those documents read-only.
+```
+
+With `read-only` it starts and logs a warning. Every write into those documents
+and every operation received for them is refused; the rest of the store works
+as usual. The check runs once on the host, so it covers the executor worker
+pool too. Any other value fails the boot. Programmatically:
+`startSwitchboard({ unsupportedStoredDocuments: "read-only" })`.
+
 ### Reactor Enforcement Flags
 
 | Variable                       | Description                                                        | Default |

package/dist/index.d.mts

@@ -1,2 +1,3 @@
 import { NodeSDK } from "@opentelemetry/sdk-node";
-import { MeterProvider } from "@opentelemetry/sdk-metrics";
+import { MeterProvider } from "@opentelemetry/sdk-metrics";
+export {};

package/dist/index.mjs

@@ -1,8 +1,7 @@
 #!/usr/bin/env node
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="c6c10af1-f4cc-56a5-abf6-fa35cf0de956")}catch(e){}}();
-import { a as parseForcePgVersion, r as startSwitchboard } from "./server-CiKkVE6g.mjs";
-import "./utils-Baw7rThP.mjs";
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="691165f8-a729-5658-bf22-e7b2440e6156")}catch(e){}}();
+import { i as StoredDocumentsRefusedError, r as startSwitchboard, s as parseForcePgVersion } from "./server-sQoWp21G.mjs";
 import { metrics } from "@opentelemetry/api";
 import { OTLPTraceExporter } from "@opentelemetry/exporter-trace-otlp-http";
 import { ExpressInstrumentation } from "@opentelemetry/instrumentation-express";
@@ -201,7 +200,7 @@ async function initProfilerFromEnv(env) {
 			collectCpuTime: true
 		},
 		heap: {
-			samplingIntervalBytes: 512 * 1024,
+			samplingIntervalBytes: 524288,
 			stackDepth: 64
 		}
 	}, {
@@ -246,11 +245,14 @@ try {
 	await startSwitchboard({
 		...config,
 		migratePglite: cliMigratePglite || config.migratePglite,
-		forcePgVersion: config.forcePgVersion ?? void 0
+		forcePgVersion: config.forcePgVersion ?? void 0,
+		fatalErrorShutdown: true
 	});
 } catch (e) {
-	Sentry.captureException(e);
-	logger.error("Switchboard failed to start: @error", e);
+	if (!StoredDocumentsRefusedError.isError(e)) {
+		Sentry.captureException(e);
+		logger.error("Switchboard failed to start: @error", e);
+	}
 	await Sentry.flush(2e3).catch(() => void 0);
 	process.exit(1);
 }
@@ -258,4 +260,4 @@ try {
 export {};
 
 //# sourceMappingURL=index.mjs.map
-//# debugId=c6c10af1-f4cc-56a5-abf6-fa35cf0de956
+//# debugId=691165f8-a729-5658-bf22-e7b2440e6156