@astragenie/astramemory-local 0.7.2

package/dist/doctor/checks.js

@@ -0,0 +1,626 @@
+/**
+ * Doctor check registry.
+ *
+ * Track C owns the registry and the 7 core checks below.
+ * Other tracks (A, B, D) add checks via register() in their own modules —
+ * they call register() at module load time, before the CLI runs runChecks().
+ *
+ * Registry API:
+ *   register(check: Check): void
+ *   getChecks(): Check[]
+ *
+ * Example (Track A adds its check):
+ *   import { register } from '../doctor/checks.js';
+ *   register({ name: 'No stuck jobs', run: async () => { ... } });
+ */
+import { statfsSync, existsSync, accessSync, constants, mkdirSync, writeFileSync, unlinkSync, readdirSync, statSync, readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { tmpdir, platform } from 'node:os';
+import { randomUUID } from 'node:crypto';
+import { llmChatProbe } from './probes/llm-chat-probe.js';
+import { embedProbe } from './probes/embed-probe.js';
+import { pluginCoexistenceProbe } from './probes/plugin-coexistence.js';
+import { defaultConfigDir, legacyConfigDir } from '../config/datadir.js';
+import { getOrCreateKey, readBearer } from '../storage/keystore.js';
+import { readBearerFromSecretsFile } from '../storage/bearer-keystore.js';
+import { usefulnessRate, usefulnessByType } from '../storage/usefulness.js';
+// ─── Registry ────────────────────────────────────────────────────────────────
+const _registry = [];
+/**
+ * Register an additional doctor check. Called by other tracks to extend the
+ * doctor command without modifying this file.
+ *
+ * @param check - A Check object with `name` and `run()`.
+ */
+export function register(check) {
+    _registry.push(check);
+}
+/**
+ * Returns all currently registered checks (core + any added via register()).
+ * The CLI doctor command passes this to runChecks().
+ */
+export function getChecks(opts = {}) {
+    return [...coreChecks(opts), ..._registry];
+}
+// ─── Shared: open the real memory.sqlite read-only, key-aware ───────────────
+/**
+ * Opens `dbPath` read-only using the production cipher driver
+ * (better-sqlite3-multiple-ciphers). When `encryptionEnabled` is true,
+ * fetches the key from the keystore (credential store, or key-file fallback)
+ * and applies `PRAGMA key` before returning — otherwise a plain
+ * better-sqlite3 probe against an encrypted file would fail with
+ * "file is not a database", turning every doctor read-check into a false
+ * failure on encrypted installs (SEC-8/AC-5).
+ *
+ * getOrCreateKey() is idempotent — if the DB is genuinely encrypted the key
+ * already exists (created at first `serve`), so this call reads it back
+ * rather than minting a new one.
+ */
+export async function openProductionDbReadonly(dbPath, encryptionEnabled) {
+    const { default: Database } = await import('better-sqlite3-multiple-ciphers');
+    const db = new Database(dbPath, { readonly: true });
+    if (encryptionEnabled) {
+        const { key } = getOrCreateKey(defaultConfigDir());
+        db.pragma(`key='${key.replace(/'/g, "''")}'`);
+    }
+    return db;
+}
+// ─── Check 1: SQLite writable + WAL ──────────────────────────────────────────
+function checkSqliteWritable(dataDir, encryptionEnabled) {
+    return {
+        name: 'SQLite writable + WAL',
+        async run() {
+            // Try to write a probe file in the datadir
+            const probePath = join(dataDir, `.doctor-probe-${randomUUID()}`);
+            try {
+                mkdirSync(dataDir, { recursive: true });
+                writeFileSync(probePath, 'probe', 'utf8');
+                unlinkSync(probePath);
+            }
+            catch (err) {
+                return {
+                    ok: false,
+                    message: `datadir not writable: ${dataDir}`,
+                    fix: `chmod u+w "${dataDir}" or set ASTRA_MEMORY_DATADIR to a writable path`,
+                };
+            }
+            // Check WAL by opening a test DB — key-aware so this doesn't false-fail
+            // on an encrypted production DB (SEC-8).
+            try {
+                const dbPath = join(dataDir, 'memory.sqlite');
+                // DB may not exist yet — only check WAL if it does
+                if (existsSync(dbPath)) {
+                    const db = await openProductionDbReadonly(dbPath, encryptionEnabled);
+                    const row = db.prepare('PRAGMA journal_mode').get();
+                    db.close();
+                    if (row.journal_mode !== 'wal') {
+                        return {
+                            ok: false,
+                            message: `journal_mode is '${row.journal_mode}', expected 'wal'`,
+                            fix: 'Run: astramem-local serve (will apply WAL pragma on open)',
+                        };
+                    }
+                }
+                return { ok: true, message: `datadir writable, WAL ok (${dataDir})` };
+            }
+            catch (err) {
+                return { ok: false, message: `SQLite probe error: ${err}` };
+            }
+        },
+    };
+}
+// ─── Check 2: sqlite-vec extension loadable ───────────────────────────────────
+function checkSqliteVec() {
+    return {
+        name: 'sqlite-vec extension loadable',
+        async run() {
+            try {
+                const { default: Database } = await import('better-sqlite3-multiple-ciphers');
+                const { load } = await import('sqlite-vec');
+                const db = new Database(':memory:');
+                load(db);
+                const row = db.prepare("SELECT vec_version() AS v").get();
+                db.close();
+                if (!row)
+                    return { ok: false, message: 'sqlite-vec loaded but vec_version() returned nothing' };
+                return { ok: true, message: `sqlite-vec ${row.v} loaded` };
+            }
+            catch (err) {
+                return {
+                    ok: false,
+                    message: `sqlite-vec not loadable: ${err}`,
+                    fix: 'npm install sqlite-vec (or reinstall native deps for this OS/arch)',
+                };
+            }
+        },
+    };
+}
+// ─── Check 3: FTS5 available ──────────────────────────────────────────────────
+function checkFts5() {
+    return {
+        name: 'FTS5 available',
+        async run() {
+            try {
+                const { default: Database } = await import('better-sqlite3-multiple-ciphers');
+                const db = new Database(':memory:');
+                db.exec(`CREATE VIRTUAL TABLE _fts5_probe USING fts5(content)`);
+                db.exec(`DROP TABLE _fts5_probe`);
+                db.close();
+                return { ok: true, message: 'FTS5 available' };
+            }
+            catch (err) {
+                return {
+                    ok: false,
+                    message: `FTS5 not available: ${err}`,
+                    fix: 'Ensure better-sqlite3-multiple-ciphers was compiled with FTS5 (default in prebuilt binaries)',
+                };
+            }
+        },
+    };
+}
+// ─── Check 4: Daemon reachable on configured port ────────────────────────────
+function checkDaemonReachable(port) {
+    return {
+        name: `Daemon reachable on :${port}`,
+        async run() {
+            try {
+                const controller = new AbortController();
+                const timeout = setTimeout(() => controller.abort(), 3_000);
+                try {
+                    const res = await fetch(`http://127.0.0.1:${port}/health`, {
+                        signal: controller.signal,
+                    });
+                    clearTimeout(timeout);
+                    if (res.ok) {
+                        const body = await res.json();
+                        return { ok: true, message: `daemon healthy on port ${port}` };
+                    }
+                    return {
+                        ok: false,
+                        message: `daemon returned HTTP ${res.status} on :${port}`,
+                        fix: `astramem-local serve --port ${port}`,
+                    };
+                }
+                finally {
+                    clearTimeout(timeout);
+                }
+            }
+            catch {
+                return {
+                    ok: false,
+                    message: `daemon not reachable on port ${port}`,
+                    fix: `astramem-local serve --port ${port}`,
+                };
+            }
+        },
+    };
+}
+// ─── Check 5: Disk free > 1GB in datadir ─────────────────────────────────────
+const ONE_GB = 1024 * 1024 * 1024;
+function checkDiskFree(dataDir) {
+    return {
+        name: 'Disk free > 1GB in datadir',
+        async run() {
+            try {
+                mkdirSync(dataDir, { recursive: true });
+                const stats = statfsSync(dataDir);
+                const freeBytes = stats.bfree * stats.bsize;
+                const freeGb = (freeBytes / ONE_GB).toFixed(2);
+                if (freeBytes < ONE_GB) {
+                    return {
+                        ok: false,
+                        message: `Only ${freeGb}GB free in ${dataDir} (need > 1GB)`,
+                        fix: `Free disk space in the volume containing ${dataDir}`,
+                    };
+                }
+                return { ok: true, message: `${freeGb}GB free in datadir` };
+            }
+            catch (err) {
+                return { ok: false, message: `Cannot check disk space: ${err}` };
+            }
+        },
+    };
+}
+// ─── Check 6: Service unit present if installed ───────────────────────────────
+function checkServiceUnit(serviceUnitPath) {
+    return {
+        name: 'Service unit present',
+        async run() {
+            if (!serviceUnitPath) {
+                return { ok: true, message: 'service install not checked (no unit path configured)' };
+            }
+            if (existsSync(serviceUnitPath)) {
+                return { ok: true, message: `service unit found at ${serviceUnitPath}` };
+            }
+            return {
+                ok: false,
+                message: `service unit not found at ${serviceUnitPath}`,
+                fix: 'astramem-local service install',
+            };
+        },
+    };
+}
+// ─── Check 7: Configured datadir exists and is writable ───────────────────────
+function checkDatadirWritable(dataDir) {
+    return {
+        name: 'Datadir exists and writable',
+        async run() {
+            try {
+                mkdirSync(dataDir, { recursive: true });
+                accessSync(dataDir, constants.W_OK);
+                return { ok: true, message: `datadir writable: ${dataDir}` };
+            }
+            catch (err) {
+                return {
+                    ok: false,
+                    message: `datadir not writable: ${dataDir}`,
+                    fix: `mkdir -p "${dataDir}" && chmod u+w "${dataDir}"`,
+                };
+            }
+        },
+    };
+}
+// ─── Check 8: Today's budget vs cap ──────────────────────────────────────────
+function checkBudget(dataDir, dailyBudgetUsd, encryptionEnabled) {
+    return {
+        name: 'Daily budget vs cap',
+        async run() {
+            try {
+                const dbPath = join(dataDir, 'memory.sqlite');
+                if (!existsSync(dbPath)) {
+                    return { ok: true, message: 'budget check skipped (no DB yet)' };
+                }
+                const db = await openProductionDbReadonly(dbPath, encryptionEnabled);
+                const day = new Date().toISOString().slice(0, 10);
+                const row = db.prepare('SELECT usd_total, calls FROM budget_spend WHERE day = ?').get(day);
+                db.close();
+                const usd = row?.usd_total ?? 0;
+                const calls = row?.calls ?? 0;
+                const pct = dailyBudgetUsd > 0 ? ((usd / dailyBudgetUsd) * 100).toFixed(1) : '0.0';
+                if (usd >= dailyBudgetUsd && dailyBudgetUsd > 0) {
+                    return {
+                        ok: false,
+                        message: `Budget cap reached: $${usd.toFixed(4)} / $${dailyBudgetUsd.toFixed(2)} (${calls} calls) — distillation paused`,
+                        fix: 'astramem-local budget --reset  to override for today',
+                    };
+                }
+                return {
+                    ok: true,
+                    message: `Budget: $${usd.toFixed(4)} / $${dailyBudgetUsd.toFixed(2)} (${pct}%, ${calls} calls today)`,
+                };
+            }
+            catch (err) {
+                return { ok: false, message: `Budget check error: ${err}` };
+            }
+        },
+    };
+}
+// ─── Check: Secret redaction (SEC-6/8) ────────────────────────────────────────
+const SEVEN_DAYS_MS = 7 * 24 * 60 * 60 * 1000;
+function checkRedaction(dataDir, enabled, encryptionEnabled) {
+    return {
+        name: 'Secret redaction',
+        async run() {
+            if (!enabled) {
+                return {
+                    ok: false,
+                    message: 'redaction: OFF — secrets are NOT scrubbed before persistence (security.redaction.enabled=false)',
+                    fix: 'Set security.redaction.enabled=true (default) unless you have a deliberate reason to disable it.',
+                };
+            }
+            try {
+                const dbPath = join(dataDir, 'memory.sqlite');
+                if (!existsSync(dbPath)) {
+                    return { ok: true, message: 'redaction: on (no DB yet — 0 secrets redacted)' };
+                }
+                const db = await openProductionDbReadonly(dbPath, encryptionEnabled);
+                const since = Date.now() - SEVEN_DAYS_MS;
+                const rows = db
+                    .prepare('SELECT type, SUM(count) AS n FROM redaction_log WHERE created_at >= ? GROUP BY type ORDER BY n DESC')
+                    .all(since);
+                db.close();
+                const total = rows.reduce((sum, r) => sum + r.n, 0);
+                if (total === 0) {
+                    return { ok: true, message: 'redaction: on — 0 secrets redacted in last 7d' };
+                }
+                const breakdown = rows.map(r => `${r.n} ${r.type}`).join(', ');
+                return { ok: true, message: `redaction: on — ${total} secrets redacted (${breakdown}) in last 7d` };
+            }
+            catch (err) {
+                return { ok: false, message: `Redaction check error: ${err}` };
+            }
+        },
+    };
+}
+// ─── Check: Recall usefulness (ADR-010) ───────────────────────────────────────
+function checkUsefulness(dataDir, encryptionEnabled) {
+    return {
+        name: 'Recall usefulness',
+        async run() {
+            try {
+                const dbPath = join(dataDir, 'memory.sqlite');
+                if (!existsSync(dbPath)) {
+                    return { ok: true, message: 'recall usefulness: no DB yet (0 served, 0 used)' };
+                }
+                const db = await openProductionDbReadonly(dbPath, encryptionEnabled);
+                const since = Date.now() - SEVEN_DAYS_MS;
+                const overall = usefulnessRate(db, { sinceMs: since });
+                const byType = usefulnessByType(db, { sinceMs: since });
+                db.close();
+                const rateStr = overall.rate === null ? 'n/a' : `${(overall.rate * 100).toFixed(1)}%`;
+                const breakdown = byType.length > 0
+                    ? ' — ' + byType.map(t => `${t.type}: ${t.rate === null ? 'n/a' : `${(t.rate * 100).toFixed(1)}%`} (${t.used}/${t.served})`).join(', ')
+                    : '';
+                return {
+                    ok: true,
+                    message: `recall usefulness (7d): ${rateStr} (${overall.used}/${overall.served} atoms used/served)${breakdown}`,
+                };
+            }
+            catch (err) {
+                // Informational check — never fail doctor over a metric query error.
+                return { ok: true, message: `Recall usefulness check error (non-fatal): ${err}` };
+            }
+        },
+    };
+}
+// ─── Check: Encryption at rest (SEC-1/2/8) ────────────────────────────────────
+function checkEncryption(dataDir, enabled) {
+    return {
+        name: 'Encryption at rest',
+        async run() {
+            if (!enabled) {
+                return {
+                    ok: false,
+                    message: 'encryption: OFF — memory.sqlite is stored in PLAINTEXT (security.encryption.enabled=false)',
+                    fix: 'Set security.encryption.enabled=true (default) unless you have a deliberate reason to disable it.',
+                };
+            }
+            try {
+                const { source } = getOrCreateKey(defaultConfigDir());
+                const label = source === 'credential-store' ? 'keychain' : 'key-file';
+                const dbPath = join(dataDir, 'memory.sqlite');
+                if (existsSync(dbPath)) {
+                    const header = readFileSync(dbPath).subarray(0, 16).toString('latin1');
+                    if (header.startsWith('SQLite format 3')) {
+                        return {
+                            ok: false,
+                            message: `encryption: on (${label}) but memory.sqlite header is still PLAINTEXT — auto-migration has not run yet`,
+                            fix: 'astramem-local serve  (auto-migrates a plaintext DB to encrypted form on next start)',
+                        };
+                    }
+                }
+                return { ok: true, message: `encryption: on (${label})` };
+            }
+            catch (err) {
+                return { ok: false, message: `Encryption check error: ${err}` };
+            }
+        },
+    };
+}
+// ─── Check: Bearer token location (SEC-10) ────────────────────────────────────
+function checkBearerLocation() {
+    return {
+        name: 'Bearer token location',
+        async run() {
+            try {
+                if (readBearer()) {
+                    return { ok: true, message: 'bearer: OS credential store' };
+                }
+                if (readBearerFromSecretsFile()) {
+                    return {
+                        ok: false,
+                        message: 'bearer: secrets.env (plaintext fallback) — OS credential store unavailable or not yet migrated',
+                        fix: 'Run "astramem-local token rotate" to migrate the bearer into the OS credential store.',
+                    };
+                }
+                return {
+                    ok: false,
+                    message: 'bearer: missing — no MEMORY_BEARER in credential store or secrets.env',
+                    fix: 'Run "astramem-local init" or "astramem-local token rotate" to generate one.',
+                };
+            }
+            catch (err) {
+                return { ok: false, message: `Bearer location check error: ${err}` };
+            }
+        },
+    };
+}
+// ─── Core check list builder ──────────────────────────────────────────────────
+// ─── Check 9: LLM chat probe (real 1-token call) ─────────────────────────────
+function checkLLMChat(provider, label) {
+    return {
+        name: `LLM chat probe (${label})`,
+        async run() {
+            return llmChatProbe(provider);
+        },
+    };
+}
+// ─── Check 10: Embed probe (real embed call + dim assert) ─────────────────────
+function checkEmbed(provider) {
+    return {
+        name: `Embed probe (${provider.dim}-dim)`,
+        async run() {
+            return embedProbe(provider);
+        },
+    };
+}
+// ─── Check 11: Plugin coexistence ────────────────────────────────────────────
+function checkPluginCoexistence(port) {
+    return {
+        name: 'Plugin config coexistence',
+        async run() {
+            return pluginCoexistenceProbe(port);
+        },
+    };
+}
+// ─── Check 12: Backup recency ─────────────────────────────────────────────────
+const TWENTY_FOUR_HOURS_MS = 24 * 60 * 60 * 1000;
+function checkBackupRecency(backupsDir) {
+    return {
+        name: 'Backup recency',
+        async run() {
+            if (!existsSync(backupsDir)) {
+                return {
+                    ok: false,
+                    message: `No backups directory found at ${backupsDir}`,
+                    fix: 'astramem-local backup  to create the first snapshot',
+                };
+            }
+            let entries;
+            try {
+                entries = readdirSync(backupsDir).filter(n => /^memory-.*\.sqlite$/.test(n));
+            }
+            catch {
+                return { ok: false, message: `Cannot read backups directory: ${backupsDir}` };
+            }
+            if (entries.length === 0) {
+                return {
+                    ok: false,
+                    message: 'No backup snapshots found',
+                    fix: 'astramem-local backup  to create the first snapshot',
+                };
+            }
+            // Find the most-recently modified backup
+            let newestMtime = 0;
+            for (const name of entries) {
+                try {
+                    const mtime = statSync(join(backupsDir, name)).mtimeMs;
+                    if (mtime > newestMtime)
+                        newestMtime = mtime;
+                }
+                catch { /* skip files that disappeared */ }
+            }
+            const ageMs = Date.now() - newestMtime;
+            const ageH = (ageMs / 3_600_000).toFixed(1);
+            if (ageMs > TWENTY_FOUR_HOURS_MS) {
+                return {
+                    ok: false,
+                    message: `Newest backup is ${ageH}h old (> 24h)`,
+                    fix: 'astramem-local backup  or enable nightly timer: astramem-local service install --with-backup-timer',
+                };
+            }
+            return { ok: true, message: `Newest backup is ${ageH}h old (within 24h)` };
+        },
+    };
+}
+// ─── Check 13: Config dir divergence (Windows) ───────────────────────────────
+/**
+ * Warns when both the legacy (%APPDATA%\AstraMemory) and canonical
+ * (%APPDATA%\Astramem) config dirs are present simultaneously. This indicates
+ * a partially-migrated install and can cause bearer mismatches with the plugin.
+ *
+ * Also warns when the canonical dir's bearer differs from the plugin dir's
+ * bearer (legacy dir = proxy for plugin if migration hasn't run yet), which is
+ * the exact root cause of the v0.2.2 401 bug.
+ */
+function checkConfigDirDivergence() {
+    return {
+        name: 'Config dir divergence (Windows)',
+        async run() {
+            // Only meaningful on Windows; canonical and legacy are identical elsewhere.
+            if (platform() !== 'win32') {
+                return { ok: true, message: 'Config dir divergence check: N/A (non-Windows)' };
+            }
+            const canonical = defaultConfigDir();
+            const legacy = legacyConfigDir();
+            const canonicalExists = existsSync(canonical);
+            const legacyExists = existsSync(legacy);
+            // Both dirs present → migration hasn't cleaned up yet.
+            if (canonicalExists && legacyExists) {
+                // Additionally check whether the bearers differ.
+                let bearerMismatch = false;
+                let bearerDetail = '';
+                try {
+                    const readBearer = (dir) => {
+                        const p = join(dir, 'secrets.env');
+                        if (!existsSync(p))
+                            return null;
+                        const line = readFileSync(p, 'utf8')
+                            .split('\n')
+                            .find(l => l.startsWith('MEMORY_BEARER='));
+                        if (!line)
+                            return null;
+                        return line.slice('MEMORY_BEARER='.length).trim() || null;
+                    };
+                    const canonicalBearer = readBearer(canonical);
+                    const legacyBearer = readBearer(legacy);
+                    if (canonicalBearer !== null &&
+                        legacyBearer !== null &&
+                        canonicalBearer !== legacyBearer) {
+                        bearerMismatch = true;
+                        bearerDetail =
+                            ' Bearer mismatch detected — plugin will send the legacy bearer and get 401.';
+                    }
+                }
+                catch { /* non-fatal */ }
+                return {
+                    ok: false,
+                    message: `Two config dirs present: "${legacy}" (legacy <=0.2.2) and "${canonical}" (canonical).` +
+                        bearerDetail,
+                    fix: bearerMismatch
+                        ? `Run "astramem-local init" in the canonical dir to unify bearers, ` +
+                            `then delete "${legacy}" manually.`
+                        : `Delete "${legacy}" after verifying all data has migrated to "${canonical}".`,
+                };
+            }
+            // Only canonical → healthy.
+            if (canonicalExists && !legacyExists) {
+                return { ok: true, message: `Config dir canonical (${canonical})` };
+            }
+            // Only legacy → migration hasn't run yet (daemon not booted since upgrade).
+            if (!canonicalExists && legacyExists) {
+                return {
+                    ok: false,
+                    message: `Legacy config dir found at "${legacy}" but canonical "${canonical}" is absent. ` +
+                        `Migration will run on next "astramem-local serve".`,
+                    fix: 'Run "astramem-local serve" once to auto-migrate.',
+                };
+            }
+            // Neither exists → fresh install.
+            return { ok: true, message: 'Config dir: fresh install (no dirs yet)' };
+        },
+    };
+}
+function coreChecks(opts) {
+    const port = opts.port ?? 7777;
+    const dataDir = opts.dataDir ?? join(tmpdir(), 'astramem');
+    const dailyBudgetUsd = opts.dailyBudgetUsd ?? 10;
+    const encryptionEnabled = opts.encryptionEnabled ?? true;
+    const checks = [
+        checkDatadirWritable(dataDir),
+        checkSqliteWritable(dataDir, encryptionEnabled),
+        checkSqliteVec(),
+        checkFts5(),
+        checkDaemonReachable(port),
+        checkDiskFree(dataDir),
+        checkServiceUnit(opts.serviceUnitPath),
+        checkBudget(dataDir, dailyBudgetUsd, encryptionEnabled),
+        checkConfigDirDivergence(),
+        checkRedaction(dataDir, opts.redactionEnabled ?? true, encryptionEnabled),
+        checkEncryption(dataDir, encryptionEnabled),
+        checkBearerLocation(),
+        checkUsefulness(dataDir, encryptionEnabled),
+    ];
+    // LLM chat probes — real 1-token call, replaces surface-only /api/tags checks.
+    // Run extraction separately only when it uses a different provider/model.
+    if (opts.llmProviders) {
+        const { compaction, extraction } = opts.llmProviders;
+        checks.push(checkLLMChat(compaction, 'compaction'));
+        const sameProvider = compaction.name === extraction.name && compaction.model === extraction.model;
+        if (!sameProvider) {
+            checks.push(checkLLMChat(extraction, 'extraction'));
+        }
+    }
+    // Embed probe — real embed call + config-derived dim assertion (FEAT-409).
+    if (opts.embedProvider) {
+        checks.push(checkEmbed(opts.embedProvider));
+    }
+    // Plugin coexistence — warn if MEMORY_API_URL or .mcp.json points elsewhere.
+    checks.push(checkPluginCoexistence(port));
+    // Backup recency — optional; only added when caller supplies a backupsDir.
+    if (opts.backupsDir) {
+        checks.push(checkBackupRecency(opts.backupsDir));
+    }
+    return checks;
+}
+//# sourceMappingURL=checks.js.map

package/dist/doctor/checks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"checks.js","sourceRoot":"","sources":["../../src/doctor/checks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,aAAa,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnJ,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAIzC,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpE,OAAO,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAK5E,gFAAgF;AAEhF,MAAM,SAAS,GAAY,EAAE,CAAC;AAE9B;;;;;GAKG;AACH,MAAM,UAAU,QAAQ,CAAC,KAAY;IACnC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACxB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,SAAS,CACvB,OAAwB,EAAE;IAE1B,OAAO,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;AAC7C,CAAC;AAoCD,+EAA+E;AAE/E;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,MAAc,EAAE,iBAA0B;IACvF,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,iCAAiC,CAAC,CAAC;IAC9E,MAAM,EAAE,GAAG,IAAI,QAAQ,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAO,CAAC;IAC1D,IAAI,iBAAiB,EAAE,CAAC;QACtB,MAAM,EAAE,GAAG,EAAE,GAAG,cAAc,CAAC,gBAAgB,EAAE,CAAC,CAAC;QACnD,EAAE,CAAC,MAAM,CAAC,QAAQ,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,gFAAgF;AAEhF,SAAS,mBAAmB,CAAC,OAAe,EAAE,iBAA0B;IACtE,OAAO;QACL,IAAI,EAAE,uBAAuB;QAC7B,KAAK,CAAC,GAAG;YACP,2CAA2C;YAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,iBAAiB,UAAU,EAAE,EAAE,CAAC,CAAC;YACjE,IAAI,CAAC;gBACH,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBACxC,aAAa,CAAC,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;gBAC1C,UAAU,CAAC,SAAS,CAAC,CAAC;YACxB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,OAAO,EAAE,yBAAyB,OAAO,EAAE;oBAC3C,GAAG,EAAE,cAAc,OAAO,kDAAkD;iBAC7E,CAAC;YACJ,CAAC;YAED,wEAAwE;YACxE,yCAAyC;YACzC,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;gBAC9C,mDAAmD;gBACnD,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;oBACvB,MAAM,EAAE,GAAG,MAAM,wBAAwB,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;oBACrE,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC,GAAG,EAA8B,CAAC;oBAChF,EAAE,CAAC,KAAK,EAAE,CAAC;oBACX,IAAI,GAAG,CAAC,YAAY,KAAK,KAAK,EAAE,CAAC;wBAC/B,OAAO;4BACL,EAAE,EAAE,KAAK;4BACT,OAAO,EAAE,oBAAoB,GAAG,CAAC,YAAY,mBAAmB;4BAChE,GAAG,EAAE,2DAA2D;yBACjE,CAAC;oBACJ,CAAC;gBACH,CAAC;gBACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,6BAA6B,OAAO,GAAG,EAAE,CAAC;YACxE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,uBAAuB,GAAG,EAAE,EAAE,CAAC;YAC9D,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,iFAAiF;AAEjF,SAAS,cAAc;IACrB,OAAO;QACL,IAAI,EAAE,+BAA+B;QACrC,KAAK,CAAC,GAAG;YACP,IAAI,CAAC;gBACH,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,iCAAiC,CAAC,CAAC;gBAC9E,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;gBAC5C,MAAM,EAAE,GAAG,IAAI,QAAQ,CAAC,UAAU,CAAC,CAAC;gBACpC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACT,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC,GAAG,EAA+B,CAAC;gBACvF,EAAE,CAAC,KAAK,EAAE,CAAC;gBACX,IAAI,CAAC,GAAG;oBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,sDAAsD,EAAE,CAAC;gBAChG,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,cAAc,GAAG,CAAC,CAAC,SAAS,EAAE,CAAC;YAC7D,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,OAAO,EAAE,4BAA4B,GAAG,EAAE;oBAC1C,GAAG,EAAE,oEAAoE;iBAC1E,CAAC;YACJ,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,iFAAiF;AAEjF,SAAS,SAAS;IAChB,OAAO;QACL,IAAI,EAAE,gBAAgB;QACtB,KAAK,CAAC,GAAG;YACP,IAAI,CAAC;gBACH,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,iCAAiC,CAAC,CAAC;gBAC9E,MAAM,EAAE,GAAG,IAAI,QAAQ,CAAC,UAAU,CAAC,CAAC;gBACpC,EAAE,CAAC,IAAI,CAAC,sDAAsD,CAAC,CAAC;gBAChE,EAAE,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;gBAClC,EAAE,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC;YACjD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,OAAO,EAAE,uBAAuB,GAAG,EAAE;oBACrC,GAAG,EAAE,8FAA8F;iBACpG,CAAC;YACJ,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,gFAAgF;AAEhF,SAAS,oBAAoB,CAAC,IAAY;IACxC,OAAO;QACL,IAAI,EAAE,wBAAwB,IAAI,EAAE;QACpC,KAAK,CAAC,GAAG;YACP,IAAI,CAAC;gBACH,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;gBACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,KAAK,CAAC,CAAC;gBAC5D,IAAI,CAAC;oBACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,oBAAoB,IAAI,SAAS,EAAE;wBACzD,MAAM,EAAE,UAAU,CAAC,MAAM;qBAC1B,CAAC,CAAC;oBACH,YAAY,CAAC,OAAO,CAAC,CAAC;oBACtB,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;wBACX,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAsB,CAAC;wBAClD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,0BAA0B,IAAI,EAAE,EAAE,CAAC;oBACjE,CAAC;oBACD,OAAO;wBACL,EAAE,EAAE,KAAK;wBACT,OAAO,EAAE,wBAAwB,GAAG,CAAC,MAAM,QAAQ,IAAI,EAAE;wBACzD,GAAG,EAAE,+BAA+B,IAAI,EAAE;qBAC3C,CAAC;gBACJ,CAAC;wBAAS,CAAC;oBACT,YAAY,CAAC,OAAO,CAAC,CAAC;gBACxB,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,OAAO,EAAE,gCAAgC,IAAI,EAAE;oBAC/C,GAAG,EAAE,+BAA+B,IAAI,EAAE;iBAC3C,CAAC;YACJ,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,gFAAgF;AAEhF,MAAM,MAAM,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC;AAElC,SAAS,aAAa,CAAC,OAAe;IACpC,OAAO;QACL,IAAI,EAAE,4BAA4B;QAClC,KAAK,CAAC,GAAG;YACP,IAAI,CAAC;gBACH,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBACxC,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;gBAClC,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;gBAC5C,MAAM,MAAM,GAAG,CAAC,SAAS,GAAG,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;gBAC/C,IAAI,SAAS,GAAG,MAAM,EAAE,CAAC;oBACvB,OAAO;wBACL,EAAE,EAAE,KAAK;wBACT,OAAO,EAAE,QAAQ,MAAM,cAAc,OAAO,eAAe;wBAC3D,GAAG,EAAE,4CAA4C,OAAO,EAAE;qBAC3D,CAAC;gBACJ,CAAC;gBACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,MAAM,oBAAoB,EAAE,CAAC;YAC9D,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,4BAA4B,GAAG,EAAE,EAAE,CAAC;YACnE,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,iFAAiF;AAEjF,SAAS,gBAAgB,CAAC,eAAmC;IAC3D,OAAO;QACL,IAAI,EAAE,sBAAsB;QAC5B,KAAK,CAAC,GAAG;YACP,IAAI,CAAC,eAAe,EAAE,CAAC;gBACrB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,uDAAuD,EAAE,CAAC;YACxF,CAAC;YACD,IAAI,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;gBAChC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,yBAAyB,eAAe,EAAE,EAAE,CAAC;YAC3E,CAAC;YACD,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,OAAO,EAAE,6BAA6B,eAAe,EAAE;gBACvD,GAAG,EAAE,gCAAgC;aACtC,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,iFAAiF;AAEjF,SAAS,oBAAoB,CAAC,OAAe;IAC3C,OAAO;QACL,IAAI,EAAE,6BAA6B;QACnC,KAAK,CAAC,GAAG;YACP,IAAI,CAAC;gBACH,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBACxC,UAAU,CAAC,OAAO,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;gBACpC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,qBAAqB,OAAO,EAAE,EAAE,CAAC;YAC/D,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,OAAO,EAAE,yBAAyB,OAAO,EAAE;oBAC3C,GAAG,EAAE,aAAa,OAAO,mBAAmB,OAAO,GAAG;iBACvD,CAAC;YACJ,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,gFAAgF;AAEhF,SAAS,WAAW,CAAC,OAAe,EAAE,cAAsB,EAAE,iBAA0B;IACtF,OAAO;QACL,IAAI,EAAE,qBAAqB;QAC3B,KAAK,CAAC,GAAG;YACP,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;gBAC9C,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;oBACxB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC;gBACnE,CAAC;gBACD,MAAM,EAAE,GAAG,MAAM,wBAAwB,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;gBACrE,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAClD,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,yDAAyD,CAAC,CAAC,GAAG,CAAC,GAAG,CAE5E,CAAC;gBACd,EAAE,CAAC,KAAK,EAAE,CAAC;gBAEX,MAAM,GAAG,GAAG,GAAG,EAAE,SAAS,IAAI,CAAC,CAAC;gBAChC,MAAM,KAAK,GAAG,GAAG,EAAE,KAAK,IAAI,CAAC,CAAC;gBAC9B,MAAM,GAAG,GAAG,cAAc,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,cAAc,CAAC,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;gBAEnF,IAAI,GAAG,IAAI,cAAc,IAAI,cAAc,GAAG,CAAC,EAAE,CAAC;oBAChD,OAAO;wBACL,EAAE,EAAE,KAAK;wBACT,OAAO,EAAE,wBAAwB,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,KAAK,+BAA+B;wBACxH,GAAG,EAAE,sDAAsD;qBAC5D,CAAC;gBACJ,CAAC;gBAED,OAAO;oBACL,EAAE,EAAE,IAAI;oBACR,OAAO,EAAE,YAAY,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,GAAG,MAAM,KAAK,eAAe;iBACtG,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,uBAAuB,GAAG,EAAE,EAAE,CAAC;YAC9D,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,iFAAiF;AAEjF,MAAM,aAAa,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAE9C,SAAS,cAAc,CAAC,OAAe,EAAE,OAAgB,EAAE,iBAA0B;IACnF,OAAO;QACL,IAAI,EAAE,kBAAkB;QACxB,KAAK,CAAC,GAAG;YACP,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,OAAO,EAAE,iGAAiG;oBAC1G,GAAG,EAAE,kGAAkG;iBACxG,CAAC;YACJ,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;gBAC9C,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;oBACxB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,gDAAgD,EAAE,CAAC;gBACjF,CAAC;gBACD,MAAM,EAAE,GAAG,MAAM,wBAAwB,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;gBACrE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,aAAa,CAAC;gBACzC,MAAM,IAAI,GAAG,EAAE;qBACZ,OAAO,CAAC,qGAAqG,CAAC;qBAC9G,GAAG,CAAC,KAAK,CAAkC,CAAC;gBAC/C,EAAE,CAAC,KAAK,EAAE,CAAC;gBAEX,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBACpD,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;oBAChB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,+CAA+C,EAAE,CAAC;gBAChF,CAAC;gBACD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC/D,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,mBAAmB,KAAK,sBAAsB,SAAS,cAAc,EAAE,CAAC;YACtG,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,0BAA0B,GAAG,EAAE,EAAE,CAAC;YACjE,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,iFAAiF;AAEjF,SAAS,eAAe,CAAC,OAAe,EAAE,iBAA0B;IAClE,OAAO;QACL,IAAI,EAAE,mBAAmB;QACzB,KAAK,CAAC,GAAG;YACP,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;gBAC9C,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;oBACxB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,iDAAiD,EAAE,CAAC;gBAClF,CAAC;gBACD,MAAM,EAAE,GAAG,MAAM,wBAAwB,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;gBACrE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,aAAa,CAAC;gBACzC,MAAM,OAAO,GAAG,cAAc,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;gBACvD,MAAM,MAAM,GAAG,gBAAgB,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;gBACxD,EAAE,CAAC,KAAK,EAAE,CAAC;gBAEX,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;gBACtF,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC;oBACjC,CAAC,CAAC,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;oBACvI,CAAC,CAAC,EAAE,CAAC;gBACP,OAAO;oBACL,EAAE,EAAE,IAAI;oBACR,OAAO,EAAE,2BAA2B,OAAO,KAAK,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,MAAM,sBAAsB,SAAS,EAAE;iBAChH,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,qEAAqE;gBACrE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,8CAA8C,GAAG,EAAE,EAAE,CAAC;YACpF,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,iFAAiF;AAEjF,SAAS,eAAe,CAAC,OAAe,EAAE,OAAgB;IACxD,OAAO;QACL,IAAI,EAAE,oBAAoB;QAC1B,KAAK,CAAC,GAAG;YACP,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,OAAO,EAAE,4FAA4F;oBACrG,GAAG,EAAE,mGAAmG;iBACzG,CAAC;YACJ,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,EAAE,MAAM,EAAE,GAAG,cAAc,CAAC,gBAAgB,EAAE,CAAC,CAAC;gBACtD,MAAM,KAAK,GAAG,MAAM,KAAK,kBAAkB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC;gBAEtE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;gBAC9C,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;oBACvB,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;oBACvE,IAAI,MAAM,CAAC,UAAU,CAAC,iBAAiB,CAAC,EAAE,CAAC;wBACzC,OAAO;4BACL,EAAE,EAAE,KAAK;4BACT,OAAO,EAAE,mBAAmB,KAAK,gFAAgF;4BACjH,GAAG,EAAE,sFAAsF;yBAC5F,CAAC;oBACJ,CAAC;gBACH,CAAC;gBACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,mBAAmB,KAAK,GAAG,EAAE,CAAC;YAC5D,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,2BAA2B,GAAG,EAAE,EAAE,CAAC;YAClE,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,iFAAiF;AAEjF,SAAS,mBAAmB;IAC1B,OAAO;QACL,IAAI,EAAE,uBAAuB;QAC7B,KAAK,CAAC,GAAG;YACP,IAAI,CAAC;gBACH,IAAI,UAAU,EAAE,EAAE,CAAC;oBACjB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,6BAA6B,EAAE,CAAC;gBAC9D,CAAC;gBACD,IAAI,yBAAyB,EAAE,EAAE,CAAC;oBAChC,OAAO;wBACL,EAAE,EAAE,KAAK;wBACT,OAAO,EAAE,gGAAgG;wBACzG,GAAG,EAAE,uFAAuF;qBAC7F,CAAC;gBACJ,CAAC;gBACD,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,OAAO,EAAE,uEAAuE;oBAChF,GAAG,EAAE,6EAA6E;iBACnF,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,gCAAgC,GAAG,EAAE,EAAE,CAAC;YACvE,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,iFAAiF;AAEjF,gFAAgF;AAEhF,SAAS,YAAY,CAAC,QAAqB,EAAE,KAAa;IACxD,OAAO;QACL,IAAI,EAAE,mBAAmB,KAAK,GAAG;QACjC,KAAK,CAAC,GAAG;YACP,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAC;QAChC,CAAC;KACF,CAAC;AACJ,CAAC;AAED,iFAAiF;AAEjF,SAAS,UAAU,CAAC,QAAuB;IACzC,OAAO;QACL,IAAI,EAAE,gBAAgB,QAAQ,CAAC,GAAG,OAAO;QACzC,KAAK,CAAC,GAAG;YACP,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC;QAC9B,CAAC;KACF,CAAC;AACJ,CAAC;AAED,gFAAgF;AAEhF,SAAS,sBAAsB,CAAC,IAAY;IAC1C,OAAO;QACL,IAAI,EAAE,2BAA2B;QACjC,KAAK,CAAC,GAAG;YACP,OAAO,sBAAsB,CAAC,IAAI,CAAC,CAAC;QACtC,CAAC;KACF,CAAC;AACJ,CAAC;AAED,iFAAiF;AAEjF,MAAM,oBAAoB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEjD,SAAS,kBAAkB,CAAC,UAAkB;IAC5C,OAAO;QACL,IAAI,EAAE,gBAAgB;QACtB,KAAK,CAAC,GAAG;YACP,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC5B,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,OAAO,EAAE,iCAAiC,UAAU,EAAE;oBACtD,GAAG,EAAE,qDAAqD;iBAC3D,CAAC;YACJ,CAAC;YAED,IAAI,OAAiB,CAAC;YACtB,IAAI,CAAC;gBACH,OAAO,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAC/E,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,kCAAkC,UAAU,EAAE,EAAE,CAAC;YAChF,CAAC;YAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACzB,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,OAAO,EAAE,2BAA2B;oBACpC,GAAG,EAAE,qDAAqD;iBAC3D,CAAC;YACJ,CAAC;YAED,yCAAyC;YACzC,IAAI,WAAW,GAAG,CAAC,CAAC;YACpB,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;gBAC3B,IAAI,CAAC;oBACH,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;oBACvD,IAAI,KAAK,GAAG,WAAW;wBAAE,WAAW,GAAG,KAAK,CAAC;gBAC/C,CAAC;gBAAC,MAAM,CAAC,CAAC,iCAAiC,CAAC,CAAC;YAC/C,CAAC;YAED,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,CAAC;YACvC,MAAM,IAAI,GAAG,CAAC,KAAK,GAAG,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YAE5C,IAAI,KAAK,GAAG,oBAAoB,EAAE,CAAC;gBACjC,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,OAAO,EAAE,oBAAoB,IAAI,eAAe;oBAChD,GAAG,EAAE,oGAAoG;iBAC1G,CAAC;YACJ,CAAC;YAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,oBAAoB,IAAI,oBAAoB,EAAE,CAAC;QAC7E,CAAC;KACF,CAAC;AACJ,CAAC;AAED,gFAAgF;AAEhF;;;;;;;;GAQG;AACH,SAAS,wBAAwB;IAC/B,OAAO;QACL,IAAI,EAAE,iCAAiC;QACvC,KAAK,CAAC,GAAG;YACP,4EAA4E;YAC5E,IAAI,QAAQ,EAAE,KAAK,OAAO,EAAE,CAAC;gBAC3B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,gDAAgD,EAAE,CAAC;YACjF,CAAC;YAED,MAAM,SAAS,GAAG,gBAAgB,EAAE,CAAC;YACrC,MAAM,MAAM,GAAG,eAAe,EAAE,CAAC;YAEjC,MAAM,eAAe,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;YAC9C,MAAM,YAAY,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;YAExC,uDAAuD;YACvD,IAAI,eAAe,IAAI,YAAY,EAAE,CAAC;gBACpC,iDAAiD;gBACjD,IAAI,cAAc,GAAG,KAAK,CAAC;gBAC3B,IAAI,YAAY,GAAG,EAAE,CAAC;gBACtB,IAAI,CAAC;oBACH,MAAM,UAAU,GAAG,CAAC,GAAW,EAAiB,EAAE;wBAChD,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;wBACnC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;4BAAE,OAAO,IAAI,CAAC;wBAChC,MAAM,IAAI,GAAG,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC;6BACjC,KAAK,CAAC,IAAI,CAAC;6BACX,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,CAAC;wBAC7C,IAAI,CAAC,IAAI;4BAAE,OAAO,IAAI,CAAC;wBACvB,OAAO,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;oBAC5D,CAAC,CAAC;oBACF,MAAM,eAAe,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;oBAC9C,MAAM,YAAY,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;oBACxC,IACE,eAAe,KAAK,IAAI;wBACxB,YAAY,KAAK,IAAI;wBACrB,eAAe,KAAK,YAAY,EAChC,CAAC;wBACD,cAAc,GAAG,IAAI,CAAC;wBACtB,YAAY;4BACV,6EAA6E,CAAC;oBAClF,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC;gBAE3B,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,OAAO,EACL,6BAA6B,MAAM,2BAA2B,SAAS,gBAAgB;wBACvF,YAAY;oBACd,GAAG,EACD,cAAc;wBACZ,CAAC,CAAC,mEAAmE;4BACnE,gBAAgB,MAAM,aAAa;wBACrC,CAAC,CAAC,WAAW,MAAM,+CAA+C,SAAS,IAAI;iBACpF,CAAC;YACJ,CAAC;YAED,4BAA4B;YAC5B,IAAI,eAAe,IAAI,CAAC,YAAY,EAAE,CAAC;gBACrC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,yBAAyB,SAAS,GAAG,EAAE,CAAC;YACtE,CAAC;YAED,4EAA4E;YAC5E,IAAI,CAAC,eAAe,IAAI,YAAY,EAAE,CAAC;gBACrC,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,OAAO,EACL,+BAA+B,MAAM,oBAAoB,SAAS,eAAe;wBACjF,oDAAoD;oBACtD,GAAG,EAAE,kDAAkD;iBACxD,CAAC;YACJ,CAAC;YAED,kCAAkC;YAClC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,yCAAyC,EAAE,CAAC;QAC1E,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,IAAqB;IACvC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC;IAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,UAAU,CAAC,CAAC;IAC3D,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,EAAE,CAAC;IAEjD,MAAM,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC;IAEzD,MAAM,MAAM,GAAY;QACtB,oBAAoB,CAAC,OAAO,CAAC;QAC7B,mBAAmB,CAAC,OAAO,EAAE,iBAAiB,CAAC;QAC/C,cAAc,EAAE;QAChB,SAAS,EAAE;QACX,oBAAoB,CAAC,IAAI,CAAC;QAC1B,aAAa,CAAC,OAAO,CAAC;QACtB,gBAAgB,CAAC,IAAI,CAAC,eAAe,CAAC;QACtC,WAAW,CAAC,OAAO,EAAE,cAAc,EAAE,iBAAiB,CAAC;QACvD,wBAAwB,EAAE;QAC1B,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,gBAAgB,IAAI,IAAI,EAAE,iBAAiB,CAAC;QACzE,eAAe,CAAC,OAAO,EAAE,iBAAiB,CAAC;QAC3C,mBAAmB,EAAE;QACrB,eAAe,CAAC,OAAO,EAAE,iBAAiB,CAAC;KAC5C,CAAC;IAEF,+EAA+E;IAC/E,0EAA0E;IAC1E,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;QACtB,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC;QACrD,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC,CAAC;QACpD,MAAM,YAAY,GAChB,UAAU,CAAC,IAAI,KAAK,UAAU,CAAC,IAAI,IAAI,UAAU,CAAC,KAAK,KAAK,UAAU,CAAC,KAAK,CAAC;QAC/E,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IAED,2EAA2E;IAC3E,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;QACvB,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;IAC9C,CAAC;IAED,6EAA6E;IAC7E,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC;IAE1C,2EAA2E;IAC3E,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACpB,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;IACnD,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/doctor/hardening-checks.d.ts

@@ -0,0 +1,9 @@
+import type { Check } from './types.js';
+import type { DB } from '../storage/db.js';
+export interface HardeningCheckOpts {
+    dataDir: string;
+    port: number;
+    /** Same key-aware read-only opener the core checks use. */
+    openDbReadonly: () => Promise<DB>;
+}
+export declare function getHardeningChecks(opts: HardeningCheckOpts): Check[];