Graphorin API reference v0.7.0

---

Graphorin API reference / @graphorin/server / config / ServerConfigSpec

Interface: ServerConfigSpec

Defined in: packages/server/src/config.ts:46

Stable

Properties

Property	Modifier	Type	Description	Defined in
audit	readonly	{ cipher?: string; enabled: boolean; passphraseRef?: string; path?: string; toolEvents: "all" | "off" | "security"; }	-	packages/server/src/config.ts:128
audit.cipher?	readonly	string	-	packages/server/src/config.ts:132
audit.enabled	readonly	boolean	-	packages/server/src/config.ts:129
audit.passphraseRef?	readonly	string	-	packages/server/src/config.ts:131
audit.path?	readonly	string	-	packages/server/src/config.ts:130
audit.toolEvents	readonly	"all" | "off" | "security"	W-051: which tools/MCP audit-bus events land in the audit chain. 'security' (default) writes the security-significant subset (dataflow flagged/blocked/declassified, sanitization, approvals, collisions, cap-disabled); 'all' adds per-call tool:execute:* chatter; 'off' disables the bridge.	packages/server/src/config.ts:140
auth	readonly	{ kind: "none" | "token"; pepperRef?: string; perIpFailureThreshold?: number; perIpLockoutMs?: number; tokenEnvironments: readonly string[]; tokenPrefix: string; }	-	packages/server/src/config.ts:146
auth.kind	readonly	"none" | "token"	-	packages/server/src/config.ts:147
auth.pepperRef?	readonly	string	-	packages/server/src/config.ts:148
auth.perIpFailureThreshold?	readonly	number	-	packages/server/src/config.ts:151
auth.perIpLockoutMs?	readonly	number	-	packages/server/src/config.ts:152
auth.tokenEnvironments	readonly	readonly string[]	-	packages/server/src/config.ts:150
auth.tokenPrefix	readonly	string	-	packages/server/src/config.ts:149
hardening	readonly	{ applyOnStart: boolean; refuseRoot: boolean; umask: number; }	-	packages/server/src/config.ts:157
hardening.applyOnStart	readonly	boolean	-	packages/server/src/config.ts:158
hardening.refuseRoot	readonly	boolean	-	packages/server/src/config.ts:159
hardening.umask	readonly	number	-	packages/server/src/config.ts:160
health	readonly	{ walWarnThresholdBytes: number; }	-	packages/server/src/config.ts:167
health.walWarnThresholdBytes	readonly	number	-	packages/server/src/config.ts:168
metrics	readonly	{ enabled: boolean; path: string; requireAuth: boolean; }	-	packages/server/src/config.ts:162
metrics.enabled	readonly	boolean	-	packages/server/src/config.ts:163
metrics.path	readonly	string	-	packages/server/src/config.ts:164
metrics.requireAuth	readonly	boolean	-	packages/server/src/config.ts:165
observability	readonly	{ logger: "json" | "pretty" | "silent"; }	-	packages/server/src/config.ts:154
observability.logger	readonly	"json" | "pretty" | "silent"	-	packages/server/src/config.ts:155
retention	readonly	{ auditDays?: number; consolidatorRunsDays: number; dlqExhaustedDays: number; enabled: boolean; idempotency: boolean; intervalMs: number; memoryHistoryDays?: number; sessionsClosedOnly: boolean; sessionsDays?: number; spansDays: number; workflowThreadsDays?: number; }	-	packages/server/src/config.ts:115
retention.auditDays?	readonly	number	-	packages/server/src/config.ts:126
retention.consolidatorRunsDays	readonly	number	-	packages/server/src/config.ts:119
retention.dlqExhaustedDays	readonly	number	-	packages/server/src/config.ts:120
retention.enabled	readonly	boolean	-	packages/server/src/config.ts:116
retention.idempotency	readonly	boolean	-	packages/server/src/config.ts:121
retention.intervalMs	readonly	number	-	packages/server/src/config.ts:117
retention.memoryHistoryDays?	readonly	number	-	packages/server/src/config.ts:124
retention.sessionsClosedOnly	readonly	boolean	-	packages/server/src/config.ts:123
retention.sessionsDays?	readonly	number	-	packages/server/src/config.ts:122
retention.spansDays	readonly	number	-	packages/server/src/config.ts:118
retention.workflowThreadsDays?	readonly	number	-	packages/server/src/config.ts:125
secrets	readonly	{ source: SecretsSource; strict: boolean; }	-	packages/server/src/config.ts:142
secrets.source	readonly	SecretsSource	-	packages/server/src/config.ts:143
secrets.strict	readonly	boolean	-	packages/server/src/config.ts:144
server	readonly	{ basePath: string; cors: { allowCredentials: boolean; allowHeaders: readonly string[]; allowMethods: readonly string[]; allowOrigins: readonly string[]; maxAgeSeconds: number; }; csrf: { cookieName: string; enabled: boolean; headerName: string; safeMethods: readonly string[]; }; host: string; idempotency: { checkBodyFingerprint: boolean; enabled: boolean; lruCacheSize: number; requireKey: IdempotencyRequireKeyMode; ttlSeconds: number; }; port: number; rateLimit: { enabled: boolean; perIpRequests: number; windowMs: number; }; shutdown: { drainTimeoutMs: number; }; sse: { enabled: boolean; keepAliveMs: number; path: string; }; stream: { disconnectGracePeriodMs: number; disconnectPolicy: "continue" | "pause-on-disconnect" | "abort-on-disconnect"; perConnectionQueueLimit: number; replayBuffer: { maxEvents: number; pruneIntervalSeconds: number; ttlSeconds: number; }; }; trustProxy: boolean; ws: { commentarySanitization: { applyToEvents: readonly string[]; policy: DeliveryCommentaryPolicyConfig; }; enabled: boolean; path: string; ticketTtlMs: number; }; }	-	packages/server/src/config.ts:47
server.basePath	readonly	string	-	packages/server/src/config.ts:50
server.cors	readonly	{ allowCredentials: boolean; allowHeaders: readonly string[]; allowMethods: readonly string[]; allowOrigins: readonly string[]; maxAgeSeconds: number; }	-	packages/server/src/config.ts:51
server.cors.allowCredentials	readonly	boolean	-	packages/server/src/config.ts:53
server.cors.allowHeaders	readonly	readonly string[]	-	packages/server/src/config.ts:55
server.cors.allowMethods	readonly	readonly string[]	-	packages/server/src/config.ts:54
server.cors.allowOrigins	readonly	readonly string[]	-	packages/server/src/config.ts:52
server.cors.maxAgeSeconds	readonly	number	-	packages/server/src/config.ts:56
server.csrf	readonly	{ cookieName: string; enabled: boolean; headerName: string; safeMethods: readonly string[]; }	-	packages/server/src/config.ts:58
server.csrf.cookieName	readonly	string	-	packages/server/src/config.ts:60
server.csrf.enabled	readonly	boolean	-	packages/server/src/config.ts:59
server.csrf.headerName	readonly	string	-	packages/server/src/config.ts:61
server.csrf.safeMethods	readonly	readonly string[]	-	packages/server/src/config.ts:62
server.host	readonly	string	-	packages/server/src/config.ts:48
server.idempotency	readonly	{ checkBodyFingerprint: boolean; enabled: boolean; lruCacheSize: number; requireKey: IdempotencyRequireKeyMode; ttlSeconds: number; }	-	packages/server/src/config.ts:69
server.idempotency.checkBodyFingerprint	readonly	boolean	-	packages/server/src/config.ts:73
server.idempotency.enabled	readonly	boolean	-	packages/server/src/config.ts:70
server.idempotency.lruCacheSize	readonly	number	-	packages/server/src/config.ts:74
server.idempotency.requireKey	readonly	IdempotencyRequireKeyMode	-	packages/server/src/config.ts:71
server.idempotency.ttlSeconds	readonly	number	-	packages/server/src/config.ts:72
server.port	readonly	number	-	packages/server/src/config.ts:49
server.rateLimit	readonly	{ enabled: boolean; perIpRequests: number; windowMs: number; }	-	packages/server/src/config.ts:64
server.rateLimit.enabled	readonly	boolean	-	packages/server/src/config.ts:65
server.rateLimit.perIpRequests	readonly	number	-	packages/server/src/config.ts:67
server.rateLimit.windowMs	readonly	number	-	packages/server/src/config.ts:66
server.shutdown	readonly	{ drainTimeoutMs: number; }	-	packages/server/src/config.ts:76
server.shutdown.drainTimeoutMs	readonly	number	-	packages/server/src/config.ts:77
server.sse	readonly	{ enabled: boolean; keepAliveMs: number; path: string; }	-	packages/server/src/config.ts:99
server.sse.enabled	readonly	boolean	-	packages/server/src/config.ts:100
server.sse.keepAliveMs	readonly	number	-	packages/server/src/config.ts:102
server.sse.path	readonly	string	-	packages/server/src/config.ts:101
server.stream	readonly	{ disconnectGracePeriodMs: number; disconnectPolicy: "continue" | "pause-on-disconnect" | "abort-on-disconnect"; perConnectionQueueLimit: number; replayBuffer: { maxEvents: number; pruneIntervalSeconds: number; ttlSeconds: number; }; }	-	packages/server/src/config.ts:80
server.stream.disconnectGracePeriodMs	readonly	number	-	packages/server/src/config.ts:82
server.stream.disconnectPolicy	readonly	"continue" | "pause-on-disconnect" | "abort-on-disconnect"	-	packages/server/src/config.ts:81
server.stream.perConnectionQueueLimit	readonly	number	-	packages/server/src/config.ts:88
server.stream.replayBuffer	readonly	{ maxEvents: number; pruneIntervalSeconds: number; ttlSeconds: number; }	-	packages/server/src/config.ts:83
server.stream.replayBuffer.maxEvents	readonly	number	-	packages/server/src/config.ts:84
server.stream.replayBuffer.pruneIntervalSeconds	readonly	number	-	packages/server/src/config.ts:86
server.stream.replayBuffer.ttlSeconds	readonly	number	-	packages/server/src/config.ts:85
server.trustProxy	readonly	boolean	-	packages/server/src/config.ts:79
server.ws	readonly	{ commentarySanitization: { applyToEvents: readonly string[]; policy: DeliveryCommentaryPolicyConfig; }; enabled: boolean; path: string; ticketTtlMs: number; }	-	packages/server/src/config.ts:90
server.ws.commentarySanitization	readonly	{ applyToEvents: readonly string[]; policy: DeliveryCommentaryPolicyConfig; }	-	packages/server/src/config.ts:94
server.ws.commentarySanitization.applyToEvents	readonly	readonly string[]	-	packages/server/src/config.ts:96
server.ws.commentarySanitization.policy	readonly	DeliveryCommentaryPolicyConfig	-	packages/server/src/config.ts:95
server.ws.enabled	readonly	boolean	-	packages/server/src/config.ts:91
server.ws.path	readonly	string	-	packages/server/src/config.ts:92
server.ws.ticketTtlMs	readonly	number	-	packages/server/src/config.ts:93
storage	readonly	{ encryption: { cipher?: string; enabled: boolean; passphraseRef?: string; }; mode: "server" | "lib"; path: string; walCheckpointIntervalMs?: number; }	-	packages/server/src/config.ts:105
storage.encryption	readonly	{ cipher?: string; enabled: boolean; passphraseRef?: string; }	-	packages/server/src/config.ts:109
storage.encryption.cipher?	readonly	string	-	packages/server/src/config.ts:111
storage.encryption.enabled	readonly	boolean	-	packages/server/src/config.ts:110
storage.encryption.passphraseRef?	readonly	string	-	packages/server/src/config.ts:112
storage.mode	readonly	"server" | "lib"	-	packages/server/src/config.ts:107
storage.path	readonly	string	-	packages/server/src/config.ts:106
storage.walCheckpointIntervalMs?	readonly	number	-	packages/server/src/config.ts:108