contrast-agent 3.12.2 → 3.15.0

data/lib/contrast/api/decorators/user_input.rb

@@ -0,0 +1,40 @@
+# Copyright (c) 2020 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
+# frozen_string_literal: true
+
+require 'contrast/utils/string_utils'
+require 'contrast/utils/assess/tracking_util'
+require 'base64'
+
+module Contrast
+  module Api
+    module Decorators
+      # Used to decorate the {Contrast::Api::Dtm::UserInput} protobuf model.
+      module UserInput
+        UNKNOWN_USER_INPUT = Contrast::Api::Dtm::UserInput.new.tap do |user_input|
+          user_input.input_type = :UNKNOWN
+        end.cs__freeze
+
+        def self.included klass
+          klass.extend(ClassMethods)
+        end
+
+        # Used to add class methods to UserInput
+        module ClassMethods
+          def build_from_ia_result ia_result
+            return UNKNOWN_USER_INPUT.dup unless ia_result
+
+            user_input = new
+            user_input.input_type = ia_result.input_type.to_i
+            user_input.matcher_ids = ia_result.ids
+            user_input.path = ia_result.path.to_s
+            user_input.key = ia_result.key.to_s
+            user_input.value = ia_result.value.to_s
+            user_input
+          end
+        end
+      end
+    end
+  end
+end
+
+Contrast::Api::Dtm::UserInput.include(Contrast::Api::Decorators::UserInput)

data/lib/contrast/common_agent_configuration.rb

@@ -1,7 +1,7 @@
 # Copyright (c) 2020 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
 # frozen_string_literal: true
 
-# rubocop:disable Style/MethodMissingSuper, Style/MissingRespondToMissing
+# rubocop:disable Style/MissingRespondToMissing
 module Contrast
   # A wrapper build around the Common Agent Configuration project to allow for
   # access of the values contained in its parent_configuration_spec.yaml
@@ -83,4 +83,4 @@ module Contrast
     end
   end
 end
-# rubocop:enable Style/MethodMissingSuper, Style/MissingRespondToMissing
+# rubocop:enable Style/MissingRespondToMissing

data/lib/contrast/components/agent.rb

@@ -1,8 +1,8 @@
 # Copyright (c) 2020 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
 # frozen_string_literal: true
 
-cs__scoped_require 'rubygems/version'
-cs__scoped_require 'contrast/agent/rule_set'
+require 'rubygems/version'
+require 'contrast/agent/rule_set'
 
 module Contrast
   module Components

data/lib/contrast/components/app_context.rb

@@ -1,8 +1,7 @@
 # Copyright (c) 2020 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
 # frozen_string_literal: true
 
-cs__scoped_require 'contrast/utils/sinatra_helper'
-cs__scoped_require 'rubygems/version'
+require 'rubygems/version'
 
 module Contrast
   module Components
@@ -16,19 +15,13 @@ module Contrast
         include Contrast::Components::ComponentBase
         include Contrast::Components::Interface
 
-        access_component :agent, :config
+        access_component :agent, :analysis, :config
 
         DEFAULT_APP_NAME    = 'rails'
         DEFAULT_APP_PATH    = '/'
         DEFAULT_SERVER_NAME = 'localhost'
         DEFAULT_SERVER_PATH = '/'
 
-        def ready?
-          @_ready ||= AGENT.enabled? &&
-              Contrast::Utils::ServiceSenderUtil.connection_established? &&
-              Contrast::Utils::ServiceResponseUtil.update_received?
-        end
-
         def initialize
           original_pid
         end
@@ -86,7 +79,6 @@ module Contrast
           msg = Contrast::Api::Dtm::ApplicationCreate.new
 
           msg.group            = Contrast::Utils::StringUtils.protobuf_format CONFIG.root.application.group
-          msg.tags             = Contrast::Utils::StringUtils.protobuf_format CONFIG.root.application.tags
           msg.app_version      = Contrast::Utils::StringUtils.protobuf_format CONFIG.root.application.version.to_s
           msg.code             = Contrast::Utils::StringUtils.protobuf_format CONFIG.root.application.code
           msg.metadata         = Contrast::Utils::StringUtils.protobuf_format CONFIG.root.application.metadata
@@ -99,13 +91,16 @@ module Contrast
 
         def build_agent_startup_message
           msg = Contrast::Api::Dtm::AgentStartup.new
-          msg.server_name    = Contrast::Utils::StringUtils.protobuf_format server_name
-          msg.server_path    = Contrast::Utils::StringUtils.protobuf_format server_path
-          msg.server_type    = Contrast::Utils::StringUtils.protobuf_format server_type
-          msg.server_version = Contrast::Agent::VERSION
-          msg.version        = Contrast::Utils::StringUtils.protobuf_format CONFIG.root.server.version
-          msg.environment    = Contrast::Utils::StringUtils.protobuf_format CONFIG.root.server.environment
-          msg.tags           = Contrast::Utils::StringUtils.protobuf_format CONFIG.root.server.tags
+          msg.server_name      = Contrast::Utils::StringUtils.protobuf_format server_name
+          msg.server_path      = Contrast::Utils::StringUtils.protobuf_format server_path
+          msg.server_type      = Contrast::Utils::StringUtils.protobuf_format server_type
+          msg.server_version   = Contrast::Agent::VERSION
+          msg.version          = Contrast::Utils::StringUtils.protobuf_format CONFIG.root.server.version
+          msg.environment      = Contrast::Utils::StringUtils.protobuf_format CONFIG.root.server.environment
+          msg.server_tags      = Contrast::Utils::StringUtils.protobuf_format CONFIG.root.server.tags
+          msg.application_tags = Contrast::Utils::StringUtils.protobuf_format CONFIG.root.application.tags
+          msg.library_tags     = Contrast::Utils::StringUtils.protobuf_format CONFIG.root.inventory.tags
+          msg.finding_tags     = Contrast::Utils::StringUtils.protobuf_format ASSESS.tags
           msg
         end
 

data/lib/contrast/components/config.rb

@@ -1,9 +1,10 @@
 # Copyright (c) 2020 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
 # frozen_string_literal: true
 
-cs__scoped_require 'contrast/utils/boolean_util'
-cs__scoped_require 'contrast/utils/env_configuration_item'
-cs__scoped_require 'contrast/configuration'
+require 'contrast/utils/boolean_util'
+require 'contrast/utils/env_configuration_item'
+require 'contrast/utils/object_share'
+require 'contrast/configuration'
 
 module Contrast
   module Components
@@ -33,8 +34,7 @@ module Contrast
         def build log: true
           @_valid = nil
           @config = Contrast::Configuration.new
-          defaults
-          overrides
+          env_overrides
           validate(log: log)
         end
         alias_method :rebuild, :build
@@ -69,17 +69,11 @@ module Contrast
         end
 
         def session_id
-          @_session_id ||= begin
-                             s = raw.application.session_id || ''
-                             s.empty? ? nil : s
-                           end
+          @_session_id ||= raw.application.session_id
         end
 
         def session_metadata
-          @_session_metadata ||= begin
-                                   s = raw.application.session_metadata || ''
-                                   s.empty? ? nil : s
-                                 end
+          @_session_metadata ||= raw.application.session_metadata
         end
 
         def valid?
@@ -98,7 +92,7 @@ module Contrast
           # If the config is invalid, and you want to know about it, then
           # you have a circular dependency if you try to log it,
           # hence `log: false`.
-          if session_id && session_metadata
+          if !session_id.empty? && !session_metadata.empty?
             if log
               cs__class.log_error(SESSION_VARIABLES)
             else
@@ -110,15 +104,6 @@ module Contrast
           true
         end
 
-        def defaults
-          raw.agent.service.host ||= Contrast::Configuration::DEFAULT_HOST
-          raw.agent.service.port ||= Contrast::Configuration::DEFAULT_PORT
-        end
-
-        def overrides
-          env_overrides
-        end
-
         def env_overrides
           # For env variables resembling CONTRAST__WHATEVER__NESTED_VALUE
           # override raw.whatever.nested_value

data/lib/contrast/components/contrast_service.rb

@@ -1,7 +1,7 @@
 # Copyright (c) 2020 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
 # frozen_string_literal: true
 
-cs__scoped_require 'monitor'
+require 'monitor'
 
 module Contrast
   module Components
@@ -36,11 +36,11 @@ module Contrast
         end
 
         def host
-          @_host ||= (CONFIG.root.agent.service.host || Contrast::Configuration::DEFAULT_HOST).to_s
+          @_host ||= CONFIG.root.agent.service.host.to_s
         end
 
         def port
-          @_port ||= (CONFIG.root.agent.service.port || DEFAULT_PORT).to_i
+          @_port ||= CONFIG.root.agent.service.port.to_i
         end
 
         def socket_path

data/lib/contrast/components/interface.rb

@@ -1,9 +1,9 @@
 # Copyright (c) 2020 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
 # frozen_string_literal: true
 
-cs__scoped_require 'delegate'
-cs__scoped_require 'contrast/extension/module'
-cs__scoped_require 'contrast/utils/boolean_util'
+require 'delegate'
+require 'contrast/extension/module'
+require 'contrast/utils/boolean_util'
 
 module Contrast
   # This is the base module for our components classes. It is intended to
@@ -120,7 +120,7 @@ module Contrast
 
             @_access_component[sym] = true
           else
-            raise NotImplementedError, "#{ self } asked to access undefined component '#{ sym }'."
+            raise NoMethodError, "#{ self } asked to access undefined component '#{ sym }'."
           end
         end
       end
@@ -132,40 +132,40 @@ end
 # directed acyclic graph.
 
 # Scope shouldn't depend on anything.
-cs__scoped_require 'contrast/components/scope'
+require 'contrast/components/scope'
 Contrast::Components::ComponentReceiverClassInterface::COMPONENT_MAP[:scope] = [Contrast::Components::Scope]
 
 # Config depends on Scope.
-cs__scoped_require 'contrast/components/config'
+require 'contrast/components/config'
 Contrast::Components::ComponentReceiverClassInterface::COMPONENT_MAP[:config] = [Contrast::Components::Config]
 
 # Settings should not depend on anything but Config.
-cs__scoped_require 'contrast/components/settings'
+require 'contrast/components/settings'
 Contrast::Components::ComponentReceiverClassInterface::COMPONENT_MAP[:settings] = [Contrast::Components::Settings]
 
-cs__scoped_require 'contrast/components/assess'
-cs__scoped_require 'contrast/components/protect'
-cs__scoped_require 'contrast/components/inventory'
+require 'contrast/components/assess'
+require 'contrast/components/protect'
+require 'contrast/components/inventory'
 Contrast::Components::ComponentReceiverClassInterface::COMPONENT_MAP[:analysis] = [Contrast::Components::Protect,
                                                                                    Contrast::Components::Assess,
                                                                                    Contrast::Components::Inventory]
 
-cs__scoped_require 'contrast/components/logger'
+require 'contrast/components/logger'
 Contrast::Components::ComponentReceiverClassInterface::COMPONENT_MAP[:logging] = [Contrast::Components::Logger]
 
-cs__scoped_require 'contrast/components/agent'
+require 'contrast/components/agent'
 Contrast::Components::ComponentReceiverClassInterface::COMPONENT_MAP[:agent] = [Contrast::Components::Agent]
 
-cs__scoped_require 'contrast/components/contrast_service'
+require 'contrast/components/contrast_service'
 Contrast::Components::ComponentReceiverClassInterface::COMPONENT_MAP[:contrast_service] = [Contrast::Components::ContrastService]
 
-cs__scoped_require 'contrast/components/app_context'
+require 'contrast/components/app_context'
 Contrast::Components::ComponentReceiverClassInterface::COMPONENT_MAP[:app_context] = [Contrast::Components::AppContext]
 
-cs__scoped_require 'contrast/components/heap_dump'
+require 'contrast/components/heap_dump'
 Contrast::Components::ComponentReceiverClassInterface::COMPONENT_MAP[:heap_dump] = [Contrast::Components::HeapDump]
 
-cs__scoped_require 'contrast/components/sampling'
+require 'contrast/components/sampling'
 Contrast::Components::ComponentReceiverClassInterface::COMPONENT_MAP[:sampling] = [Contrast::Components::Sampling]
 
 Contrast::Components::ComponentReceiverClassInterface::COMPONENT_MAP.cs__freeze

data/lib/contrast/components/logger.rb

@@ -1,7 +1,7 @@
 # Copyright (c) 2020 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
 # frozen_string_literal: true
 
-cs__scoped_require 'contrast/logger/log'
+require 'contrast/logger/log'
 
 module Contrast
   module Components

data/lib/contrast/components/scope.rb

@@ -1,9 +1,9 @@
 # Copyright (c) 2020 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
 # frozen_string_literal: true
 
-cs__scoped_require 'fiber'
-cs__scoped_require 'monitor'
-cs__scoped_require 'contrast/agent/scope'
+require 'fiber'
+require 'monitor'
+require 'contrast/agent/scope'
 
 # This is the Scope component.
 #

data/lib/contrast/components/settings.rb

@@ -75,12 +75,6 @@ module Contrast
           end
         end
 
-        def session_id
-          # TODO: RUBY-900 we shouldn't send things w/o having session id,
-          #   figure out how this happened and fix it.
-          application_state[:session_id] || Contrast::Utils::ObjectShare::EMPTY_STRING
-        end
-
         def initialize
           reset_state
         end

data/lib/contrast/config.rb

@@ -10,24 +10,24 @@ module Contrast
   end
 end
 
-cs__scoped_require 'contrast/config/base_configuration'
-cs__scoped_require 'contrast/config/default_value'
+require 'contrast/config/base_configuration'
+require 'contrast/config/default_value'
 
-cs__scoped_require 'contrast/config/logger_configuration'
+require 'contrast/config/logger_configuration'
 
-cs__scoped_require 'contrast/config/heap_dump_configuration'
-cs__scoped_require 'contrast/config/service_configuration'
-cs__scoped_require 'contrast/config/exception_configuration'
-cs__scoped_require 'contrast/config/assess_rules_configuration'
-cs__scoped_require 'contrast/config/protect_rule_configuration'
-cs__scoped_require 'contrast/config/protect_rules_configuration'
-cs__scoped_require 'contrast/config/sampling_configuration'
+require 'contrast/config/heap_dump_configuration'
+require 'contrast/config/service_configuration'
+require 'contrast/config/exception_configuration'
+require 'contrast/config/assess_rules_configuration'
+require 'contrast/config/protect_rule_configuration'
+require 'contrast/config/protect_rules_configuration'
+require 'contrast/config/sampling_configuration'
 
-cs__scoped_require 'contrast/config/ruby_configuration'
-cs__scoped_require 'contrast/config/agent_configuration'
-cs__scoped_require 'contrast/config/application_configuration'
-cs__scoped_require 'contrast/config/server_configuration'
-cs__scoped_require 'contrast/config/assess_configuration'
-cs__scoped_require 'contrast/config/inventory_configuration'
-cs__scoped_require 'contrast/config/protect_configuration'
-cs__scoped_require 'contrast/config/root_configuration'
+require 'contrast/config/ruby_configuration'
+require 'contrast/config/agent_configuration'
+require 'contrast/config/application_configuration'
+require 'contrast/config/server_configuration'
+require 'contrast/config/assess_configuration'
+require 'contrast/config/inventory_configuration'
+require 'contrast/config/protect_configuration'
+require 'contrast/config/root_configuration'

data/lib/contrast/config/application_configuration.rb

@@ -1,6 +1,9 @@
 # Copyright (c) 2020 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
 # frozen_string_literal: true
 
+require 'contrast/config/default_value'
+require 'contrast/utils/object_share'
+
 module Contrast
   module Config
     # Common Configuration settings. Those in this section pertain to the
@@ -15,8 +18,8 @@ module Contrast
           tags: EMPTY_VALUE,
           code: EMPTY_VALUE,
           metadata: EMPTY_VALUE,
-          session_id: EMPTY_VALUE,
-          session_metadata: EMPTY_VALUE
+          session_id: Contrast::Config::DefaultValue.new(Contrast::Utils::ObjectShare::EMPTY_STRING),
+          session_metadata: Contrast::Config::DefaultValue.new(Contrast::Utils::ObjectShare::EMPTY_STRING)
       }.cs__freeze
 
       def initialize hsh

data/lib/contrast/config/base_configuration.rb

@@ -1,8 +1,8 @@
 # Copyright (c) 2020 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
 # frozen_string_literal: true
 
-cs__scoped_require 'forwardable'
-cs__scoped_require 'contrast/utils/object_share'
+require 'forwardable'
+require 'contrast/utils/object_share'
 
 module Contrast
   module Config

data/lib/contrast/config/protect_rule_configuration.rb

@@ -1,7 +1,7 @@
 # Copyright (c) 2020 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
 # frozen_string_literal: true
 
-cs__scoped_require 'set'
+require 'set'
 
 module Contrast
   module Config

data/lib/contrast/config/service_configuration.rb

@@ -1,15 +1,21 @@
 # Copyright (c) 2020 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
 # frozen_string_literal: true
 
+require 'contrast/config/default_value'
+require 'contrast/config/logger_configuration'
+
 module Contrast
   module Config
     # Common Configuration settings. Those in this section pertain to the
     # communication between the Agent & the Service.
     class ServiceConfiguration < BaseConfiguration
+      DEFAULT_HOST       = '127.0.0.1'
+      DEFAULT_PORT       = '30555'
+
       KEYS = {
           enable: EMPTY_VALUE,
-          host: EMPTY_VALUE,
-          port: EMPTY_VALUE,
+          host: Contrast::Config::DefaultValue.new(DEFAULT_HOST),
+          port: Contrast::Config::DefaultValue.new(DEFAULT_PORT),
           socket: EMPTY_VALUE,
           logger: Contrast::Config::LoggerConfiguration
       }.cs__freeze

data/lib/contrast/configuration.rb

@@ -1,12 +1,12 @@
 # Copyright (c) 2020 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
 # frozen_string_literal: true
 
-cs__scoped_require 'yaml'
-cs__scoped_require 'fileutils'
+require 'yaml'
+require 'fileutils'
 
-cs__scoped_require 'contrast/config'
-cs__scoped_require 'contrast/utils/object_share'
-cs__scoped_require 'contrast/components/interface'
+require 'contrast/config'
+require 'contrast/utils/object_share'
+require 'contrast/components/interface'
 
 module Contrast
   # This is how we read in the local settings for the Agent, both ENV/ CMD line
@@ -24,8 +24,6 @@ module Contrast
     attr_reader :default_name, :root
 
     DEFAULT_YAML_PATH  = 'contrast_security.yaml'
-    DEFAULT_HOST       = '127.0.0.1'
-    DEFAULT_PORT       = '30555'
     MILLISECOND_MARKER = '_ms'
     CONVERSION = {
         'agent.service.enable' => 'agent.start_bundled_service'
@@ -37,9 +35,6 @@ module Contrast
       '/etc/contrast/',
       '/etc/'
     ].cs__freeze
-    REMOVE_FIELDS = [
-      'contrast'
-    ].cs__freeze
 
     def initialize cli_options = nil, default_name = DEFAULT_YAML_PATH
       @default_name = default_name
@@ -53,7 +48,6 @@ module Contrast
 
       # Some in-flight rewrites to maintain backwards compatibility
       config_kv = update_prop_keys(config_kv)
-      config_kv = deprecate_fields(config_kv)
 
       @root = Contrast::Config::RootConfiguration.new(config_kv)
     end
@@ -73,6 +67,13 @@ module Contrast
       root&.cs__respond_to?(method_name) || super
     end
 
+    # Get a loggable YAML format of this configuration
+    # @return [String] the current active configuration of the Agent,
+    #   represented as a YAML string
+    def loggable
+      convert_to_hash.to_yaml
+    end
+
     protected
 
     # TODO: RUBY-546 move utility methods to auxiliary classes
@@ -80,26 +81,16 @@ module Contrast
     def load_config
       config = {}
       configuration_paths.find do |path|
-        found = File.exist?(path)
-        next unless found
+        next unless File.exist?(path)
 
-        readable = File.readable?(path)
-        unless readable
-          puts "!!! Contrast - Configuration file at #{ path } is not readable by current user"
+        unless File.readable?(path)
+          log_file_read_error(path)
           next
         end
         config = yaml_to_hash(path) || {}
         break
       end
 
-      if config.empty?
-        puts "!!! Contrast - working directory: #{ Dir.pwd }"
-        puts '!!! Contrast - valid configuration file could not be found at any of the search paths'
-        puts 'Valid configuration paths are: '
-        configuration_paths.each do |path|
-          puts(path)
-        end
-      end
       config
     end
 
@@ -109,9 +100,10 @@ module Contrast
           yaml = IO.read(path)
           yaml = ERB.new(yaml).result if defined?(ERB)
           return YAML.safe_load(yaml)
+        rescue Psych::Exception => e
+          log_yaml_parse_error(path, e)
         rescue RuntimeError => e
-          puts "ERROR: unable to load configuration from path due to #{ e }"
-          puts "ERROR: path=#{ path } pwd=#{ Dir.pwd }"
+          puts "WARN: Unable to load configuration. #{ e }; path: #{ path }, pwd: #{ Dir.pwd }"
         end
       end
 
@@ -122,29 +114,20 @@ module Contrast
     # files to match the new agreed upon standard configuration
     # names, so that one file works for all agents
     def update_prop_keys config
-      converted = false
       CONVERSION.each_pair do |old_method, new_method|
         # See if the old value was set and needs to be translated
         deprecated_keys = old_method.split('.')
-
         old_value = config
         deprecated_keys.each do |key|
           old_value = old_value[key]
           break if old_value.nil?
         end
+        next if old_value.nil? # have to account for literal false
 
-        next if old_value.nil?
-
-        converted = true
-
-        puts "The deprecated property #{ old_method } is being set."
-        puts "Please update your config to use the property #{ new_method } instead."
-
+        log_deprecated_property(old_method, new_method)
         new_keys = new_method.split('.')
-
         # We changed the seconds values into ms values. Multiply them accordingly
         old_value = old_value.to_i * 1000 if new_method.end_with?(MILLISECOND_MARKER)
-
         new_value = config
         end_idx = new_keys.length - 1
         new_keys.each_with_index do |new_key, index|
@@ -161,21 +144,6 @@ module Contrast
       config
     end
 
-    def deprecate_fields hash
-      REMOVE_FIELDS.each do |field|
-        path = field.split('.')
-        active_path = hash
-        path.each_with_index do |delete_path, index|
-          if index == path.length - 1 && active_path
-            active_path.delete(delete_path)
-          elsif active_path
-            active_path = active_path[delete_path]
-          end
-        end
-      end
-      hash
-    end
-
     # Base paths to check for the contrast configuration file, sorted by
     # reverse order of precedence (first is most important).
     def configuration_paths
@@ -208,5 +176,78 @@ module Contrast
       end
       new_hash
     end
+
+    private
+
+    # We cannot use all access components at this point, unfortunately, as they
+    # may not have been initialized. Instead, we need to access the logger
+    # directly.
+    def logger
+      @_logger ||= (Contrast::Logger::Log.instance.logger if defined?(Contrast::Logger::Log))
+    end
+
+    # When we fail to parse a configuration because it is misformatted, log an
+    # appropriate message based on the Agent Onboarding specification
+    def log_yaml_parse_error path, exception
+      hash = {
+          path: path,
+          pwd: Dir.pwd
+      }
+      if exception.is_a?(Psych::SyntaxError)
+        hash[:context] = exception.context
+        hash[:column] = exception.column
+        hash[:line] = exception.line
+        hash[:offset] = exception.offset
+        hash[:problem] = exception.problem
+      end
+
+      if logger
+        logger.warn('YAML validator found an error', hash)
+      else
+        puts "CONTRAST - WARN: YAML validator found an error. #{ hash.inspect }"
+      end
+    end
+
+    def log_file_read_error path
+      if logger
+        logger.warn('Configuration file is not readable by current user', path: path)
+      else
+        puts "CONTRAST - WARN: Configuration file is not readable by current user; path: #{ path }"
+      end
+    end
+
+    def log_deprecated_property old_method, new_method
+      if logger
+        logger.warn('Deprecated property in use', old_method: old_method, new_method: new_method)
+      else
+        puts "CONTRAST - WARN: Deprecated property in use; old_method: #{ old_method }, new_method: #{ new_method }"
+      end
+    end
+
+    # Convert this entire configuration into a hash, walking down the entries
+    # in the thing to convert and setting them in the given hash. For now, this
+    # logs every possible key, whether set or not. If we want to change that
+    # behavior, we can skip adding keys to the hash if the value is nil, blank,
+    # or Contrast::Config::DefaultValue depending on desired behavior
+    #
+    # @param hash [Hash] the hash to populate
+    # @param convert [Contrast::Config::BaseConfiguration, Object] the level of
+    #   configuration from which to convert. Note that at least one top level
+    #   Contrast::Config::BaseConfiguration is required for anything to be set
+    #   in the hash
+    # @return [Hash, Object] the leaf of each
+    #   Contrast::Config::BaseConfiguration will be returned in the N > 0 steps
+    #   the Hash will be returned at the end of the 0 level
+    def convert_to_hash convert=root, hash={}
+      case convert
+      when Contrast::Config::BaseConfiguration
+        convert.cs__class::KEYS.each_key do |key|
+          hash[key] = convert_to_hash(convert.send(key), {})
+        end
+        hash
+      else
+        convert
+      end
+    end
   end
 end