Platform
Table of Contents
Namespaces
Interfaces
- PlatformHealthCheckerInterface
- Reports platform metadata database availability for tenant-aware entry points.
- PlatformScheduleDispatcherInterface
- PlatformTotpVerifierInterface
- TenantMigrationLockManagerInterface
- TenantMigrationMarkerServiceInterface
- TenantMigrationRunnerInterface
- TenantMigrationStateInspectorInterface
Classes
- AdministrativeDatabase
- Process-level separation for schema, provisioning, and restore jobs.
- AllowlistedPlatformScheduleDispatcher
- PlatformAdminBootstrapResult
- PlatformAdminHost
- PlatformAdminJobEnqueuer
- Enqueues platform-admin initiated operations with idempotency and audit.
- PlatformAdminRecoveryService
- PlatformAuditService
- PlatformBackupPolicyService
- Reads and writes the single global backup policy (cadence + retention).
- PlatformDataConsoleService
- Executes the platform admin data console's allowlisted read-only queries.
- PlatformEmergencyLoginResult
- PlatformFleetHealthService
- Builds a privacy-safe operational snapshot of the tenant fleet.
- PlatformHealthService
- Checks platform metadata database availability with optional bounded retry.
- PlatformHealthStatus
- Safe platform metadata database health report.
- PlatformJobAlertService
- Builds diagnostics-safe alert findings from platform schedule/job metadata.
- PlatformJobEventService
- Persists operator-safe progress events for asynchronous platform jobs.
- PlatformJobRetentionService
- Prunes terminal platform jobs while preserving active work and longer-lived failures.
- PlatformJobRunner
- Drains executable Platform Admin jobs.
- PlatformQueueDrainService
- Drains the default and active-tenant Queue plugin datasources fairly.
- PlatformScheduleRunner
- PlatformTotpChallengeService
- Consume each TOTP moving factor once across login, recovery and sensitive actions.
- PlatformTotpVerifier
- PlatformWorkerService
- Runs one bounded scheduler and queue cycle for a fleet worker execution.
- PostgresRuntimePrivileges
- Reconciles existing application roles to database-local DML privileges.
- PostgresTenantMigrationLockManager
- QueueDrainService
- Runs bounded queue workers against the current default datasource.
- ReleaseCompatibilityChecker
- Enforces release manifest tenant schema compatibility before deploy or migrate.
- ReleaseManifest
- Immutable deploy manifest describing app image and tenant schema bounds.
- TenantConfigSchema
- Validates the safe, non-secret tenant_config surface exposed to platform admins.
- TenantHostResolver
- Resolves request hostnames to platform tenant metadata.
- TenantLifecycleService
- Applies guarded tenant lifecycle transitions and records them in the platform audit chain.
- TenantMigrateCommandScrubber
- Scrubs secret-like values from migration metadata before persistence.
- TenantMigrationCatalog
- Discovers the release migration set and compares it with tenant history tables.
- TenantMigrationLockException
- TenantMigrationLockHandle
- TenantMigrationMarkerResult
- Non-sensitive pre-migration checkpoint metadata.
- TenantMigrationMarkerService
- Records a pre-migration recovery marker and tags an on-demand logical backup.
- TenantMigrationResult
- TenantMigrationState
- Immutable comparison of a tenant database against the migrations in this release.
- TenantMigrationStateInspector
- Inspects migration history through an isolated tenant connection scope.
- TenantOperationalMetricsService
- Stores bounded, privacy-safe hourly tenant request aggregates.
- TenantProvisioningRequest
- Immutable tenant provisioning inputs shared by CLI and platform jobs.
- TenantProvisioningResult
- Safe tenant provisioning result data.
- TenantProvisioningService
- Provisions tenant metadata, database resources, migrations, and lifecycle state.
- UnavailablePlatformTotpVerifier