@betterportal/config-manager 10.6.9 → 10.6.11

package/lib/plugins/service-betterportal-config-manager/previewApi.js

@@ -1,3 +1,4 @@
+import { createCipheriv, createDecipheriv, createHash, randomBytes } from "node:crypto";
 import { jsonResponse, eventObservability } from "@betterportal/framework";
 import { PREVIEW_DEPLOYMENT_API_BASE, PreviewEnvironmentError, authenticatePreviewGroup, deleteExpiredPreviewDeployments, deletePreviewDeployment, provisionPreviewDeployment } from "./previewEnvironments.js";
 const NO_STORE = { "Cache-Control": "no-store" };
@@ -15,7 +16,8 @@ export function registerPreviewDeploymentApi(input) {
         const deployment = config.previewEnvironmentDeployments.find((candidate) => candidate.groupId === group.id && candidate.key === event.context.params?.key);
         if (!deployment)
             throw new PreviewEnvironmentError("Preview deployment was not found", 404);
-        return jsonResponse(deployment, 200, NO_STORE);
+        const { credentialReplay: _replay, ...publicDeployment } = deployment;
+        return jsonResponse(publicDeployment, 200, NO_STORE);
     }));
     input.app.post(route, async (event) => withPreviewApiErrors(event, async () => {
         const config = await input.storage.loadConfig();
@@ -33,15 +35,22 @@ export function registerPreviewDeploymentApi(input) {
         const hostname = typeof body.hostname === "string" ? body.hostname : existing?.hostname;
         if (!hostname)
             throw new PreviewEnvironmentError("hostname is required when creating a preview");
-        const result = provisionPreviewDeployment(config, groupId, {
+        const request = {
             key,
             name: typeof body.name === "string" ? body.name : undefined,
             hostname,
             expiresInDays: parseExpiry(body.expiresInDays),
-            services: parseServices(body.services)
-        }, input.controlPlaneUrl);
-        await input.storage.saveConfig(config);
-        return jsonResponse({
+            services: parseServices(body.services).sort((a, b) => a.serviceId.localeCompare(b.serviceId))
+        };
+        const requestHash = createHash("sha256").update(JSON.stringify(request)).digest("hex");
+        const aad = `${groupId}:${key}:${requestHash}`;
+        const replay = existing?.credentialReplay;
+        if (replay?.requestHash === requestHash && Date.parse(replay.expiresAt) > Date.now()) {
+            const payload = openReplay(replay.ciphertext, input.replayEncryptionKey, aad);
+            return jsonResponse(payload, payload.created ? 201 : 200, NO_STORE);
+        }
+        const result = provisionPreviewDeployment(config, groupId, request, input.controlPlaneUrl);
+        const payload = {
             created: result.created,
             preview: {
                 key: result.deployment.key,
@@ -50,7 +59,14 @@ export function registerPreviewDeploymentApi(input) {
                 expiresAt: result.deployment.expiresAt ?? null
             },
             credentials: result.credentials
-        }, result.created ? 201 : 200, NO_STORE);
+        };
+        result.deployment.credentialReplay = {
+            requestHash,
+            ciphertext: sealReplay(payload, input.replayEncryptionKey, aad),
+            expiresAt: new Date(Date.now() + 15 * 60_000).toISOString()
+        };
+        await input.storage.saveConfig(config);
+        return jsonResponse(payload, result.created ? 201 : 200, NO_STORE);
     }));
     input.app.delete(route, async (event) => withPreviewApiErrors(event, async () => {
         const config = await input.storage.loadConfig();
@@ -68,6 +84,20 @@ export function registerPreviewDeploymentApi(input) {
         return new Response(null, { status: 204, headers: NO_STORE });
     }));
 }
+function sealReplay(value, secret, aad) {
+    const iv = randomBytes(12);
+    const cipher = createCipheriv("aes-256-gcm", createHash("sha256").update(secret).digest(), iv);
+    cipher.setAAD(Buffer.from(aad));
+    const body = Buffer.concat([cipher.update(JSON.stringify(value), "utf8"), cipher.final()]);
+    return Buffer.concat([iv, cipher.getAuthTag(), body]).toString("base64");
+}
+function openReplay(value, secret, aad) {
+    const bytes = Buffer.from(value, "base64");
+    const decipher = createDecipheriv("aes-256-gcm", createHash("sha256").update(secret).digest(), bytes.subarray(0, 12));
+    decipher.setAAD(Buffer.from(aad));
+    decipher.setAuthTag(bytes.subarray(12, 28));
+    return JSON.parse(Buffer.concat([decipher.update(bytes.subarray(28)), decipher.final()]).toString("utf8"));
+}
 async function withPreviewApiErrors(event, action) {
     try {
         return await action();

package/lib/plugins/service-betterportal-config-manager/previewApi.js.map

@@ -1 +1 @@
-{"version":3,"file":"previewApi.js","sourceRoot":"","sources":["../../../src/plugins/service-betterportal-config-manager/previewApi.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EACZ,kBAAkB,EAKnB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,2BAA2B,EAC3B,uBAAuB,EACvB,wBAAwB,EACxB,+BAA+B,EAC/B,uBAAuB,EACvB,0BAA0B,EAC3B,MAAM,0BAA0B,CAAC;AAElC,MAAM,QAAQ,GAAG,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC;AAEjD,MAAM,UAAU,4BAA4B,CAAC,KAI5C;IACC,MAAM,KAAK,GAAG,GAAG,2BAA2B,4BAA4B,CAAC;IAEzE,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,oBAAoB,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;QAChD,MAAM,KAAK,GAAG,MAAM,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAClH,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,uBAAuB,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC;QAClF,MAAM,wBAAwB,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC;QAC9E,MAAM,OAAO,GAAG,+BAA+B,CAAC,MAAM,CAAC,CAAC;QACxD,IAAI,OAAO,CAAC,MAAM;YAAE,MAAM,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAC3D,MAAM,UAAU,GAAG,MAAM,CAAC,6BAA6B,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CACzE,SAAS,CAAC,OAAO,KAAK,KAAK,CAAC,EAAE,IAAI,SAAS,CAAC,GAAG,KAAK,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAC9E,CAAC;QACF,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,uBAAuB,CAAC,kCAAkC,EAAE,GAAG,CAAC,CAAC;QAC5F,OAAO,YAAY,CAAC,UAAkC,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC,CAAC;IAEJ,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,oBAAoB,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;QAChD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,IAAI,EAAE,CAAC;QACpD,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,IAAI,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,MAAM,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,OAAO,CAAC,CAAC;QAC5F,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,uBAAuB,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC;QAClF,MAAM,wBAAwB,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC;QAC9E,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;YAC9D,MAAM,IAAI,uBAAuB,CAAC,2DAA2D,CAAC,CAAC;QACjG,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,CAAC,6BAA6B,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,KAAK,OAAO,IAAI,SAAS,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;QAClI,MAAM,QAAQ,GAAG,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC;QACxF,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,uBAAuB,CAAC,8CAA8C,CAAC,CAAC;QACjG,MAAM,MAAM,GAAG,0BAA0B,CAAC,MAAM,EAAE,OAAO,EAAE;YACzD,GAAG;YACH,IAAI,EAAE,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;YAC3D,QAAQ;YACR,aAAa,EAAE,WAAW,CAAC,IAAI,CAAC,aAAa,CAAC;YAC9C,QAAQ,EAAE,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC;SACvC,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;QAC1B,MAAM,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACvC,OAAO,YAAY,CAAC;YAClB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,OAAO,EAAE;gBACP,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC,GAAG;gBAC1B,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI;gBAC5B,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ;gBACpC,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,SAAS,IAAI,IAAI;aAC/C;YACD,WAAW,EAAE,MAAM,CAAC,WAAW;SACR,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC,CAAC;IAEJ,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,oBAAoB,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE;QAC9E,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;QAChD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,IAAI,EAAE,CAAC;QACpD,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,IAAI,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,MAAM,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,OAAO,CAAC,CAAC;QAC5F,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,uBAAuB,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC;QAClF,MAAM,wBAAwB,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC;QAC9E,MAAM,UAAU,GAAG,MAAM,CAAC,6BAA6B,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,KAAK,OAAO,IAAI,SAAS,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;QACpI,IAAI,UAAU,EAAE,CAAC;YACf,uBAAuB,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC;YAC/C,MAAM,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACzC,CAAC;QACD,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC,CAAC;AACN,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,KAAwB,EAAE,MAA+B;IAC3F,IAAI,CAAC;QACH,OAAO,MAAM,MAAM,EAAE,CAAC;IACxB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,uBAAuB,EAAE,CAAC;YAC7C,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACxE,CAAC;QACD,kBAAkB,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,sCAAsC,EAAE;YAC9E,GAAG,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC5D,CAAC,CAAC;QACH,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,KAAwB;IAChD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACtD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,uBAAuB,CAAC,wCAAwC,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,IAA+B,CAAC;AACzC,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,uBAAuB,CAAC,uDAAuD,CAAC,CAAC;IAC7F,CAAC;IACD,OAAO,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,GAAG,CAAC,EAAE,EAAE;QAC/E,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,MAAM,IAAI,uBAAuB,CAAC,mBAAmB,SAAS,mBAAmB,CAAC,CAAC;QAChH,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;IAC5B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IACrD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,uBAAuB,CAAC,0CAA0C,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}
+{"version":3,"file":"previewApi.js","sourceRoot":"","sources":["../../../src/plugins/service-betterportal-config-manager/previewApi.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACxF,OAAO,EACL,YAAY,EACZ,kBAAkB,EAKnB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,2BAA2B,EAC3B,uBAAuB,EACvB,wBAAwB,EACxB,+BAA+B,EAC/B,uBAAuB,EACvB,0BAA0B,EAC3B,MAAM,0BAA0B,CAAC;AAElC,MAAM,QAAQ,GAAG,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC;AAEjD,MAAM,UAAU,4BAA4B,CAAC,KAK5C;IACC,MAAM,KAAK,GAAG,GAAG,2BAA2B,4BAA4B,CAAC;IAEzE,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,oBAAoB,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;QAChD,MAAM,KAAK,GAAG,MAAM,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAClH,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,uBAAuB,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC;QAClF,MAAM,wBAAwB,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC;QAC9E,MAAM,OAAO,GAAG,+BAA+B,CAAC,MAAM,CAAC,CAAC;QACxD,IAAI,OAAO,CAAC,MAAM;YAAE,MAAM,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAC3D,MAAM,UAAU,GAAG,MAAM,CAAC,6BAA6B,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CACzE,SAAS,CAAC,OAAO,KAAK,KAAK,CAAC,EAAE,IAAI,SAAS,CAAC,GAAG,KAAK,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAC9E,CAAC;QACF,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,uBAAuB,CAAC,kCAAkC,EAAE,GAAG,CAAC,CAAC;QAC5F,MAAM,EAAE,gBAAgB,EAAE,OAAO,EAAE,GAAG,gBAAgB,EAAE,GAAG,UAAU,CAAC;QACtE,OAAO,YAAY,CAAC,gBAAwC,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC,CAAC;IAEJ,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,oBAAoB,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;QAChD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,IAAI,EAAE,CAAC;QACpD,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,IAAI,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,MAAM,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,OAAO,CAAC,CAAC;QAC5F,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,uBAAuB,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC;QAClF,MAAM,wBAAwB,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC;QAC9E,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;YAC9D,MAAM,IAAI,uBAAuB,CAAC,2DAA2D,CAAC,CAAC;QACjG,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,CAAC,6BAA6B,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,KAAK,OAAO,IAAI,SAAS,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;QAClI,MAAM,QAAQ,GAAG,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC;QACxF,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,uBAAuB,CAAC,8CAA8C,CAAC,CAAC;QACjG,MAAM,OAAO,GAAG;YACd,GAAG;YACH,IAAI,EAAE,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;YAC3D,QAAQ;YACR,aAAa,EAAE,WAAW,CAAC,IAAI,CAAC,aAAa,CAAC;YAC9C,QAAQ,EAAE,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;SAC9F,CAAC;QACF,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvF,MAAM,GAAG,GAAG,GAAG,OAAO,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC;QAC/C,MAAM,MAAM,GAAG,QAAQ,EAAE,gBAAgB,CAAC;QAC1C,IAAI,MAAM,EAAE,WAAW,KAAK,WAAW,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACrF,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC;YAC9E,OAAO,YAAY,CAAC,OAAO,EAAG,OAAgC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAChG,CAAC;QACD,MAAM,MAAM,GAAG,0BAA0B,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;QAC3F,MAAM,OAAO,GAAG;YACd,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,OAAO,EAAE;gBACP,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC,GAAG;gBAC1B,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI;gBAC5B,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ;gBACpC,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,SAAS,IAAI,IAAI;aAC/C;YACD,WAAW,EAAE,MAAM,CAAC,WAAW;SACR,CAAC;QAC1B,MAAM,CAAC,UAAU,CAAC,gBAAgB,GAAG;YACnC,WAAW;YACX,UAAU,EAAE,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,mBAAmB,EAAE,GAAG,CAAC;YAC/D,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE;SAC5D,CAAC;QACF,MAAM,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACvC,OAAO,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC,CAAC;IAEJ,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,oBAAoB,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE;QAC9E,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;QAChD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,IAAI,EAAE,CAAC;QACpD,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,IAAI,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,MAAM,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,OAAO,CAAC,CAAC;QAC5F,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,uBAAuB,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC;QAClF,MAAM,wBAAwB,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC;QAC9E,MAAM,UAAU,GAAG,MAAM,CAAC,6BAA6B,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,KAAK,OAAO,IAAI,SAAS,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;QACpI,IAAI,UAAU,EAAE,CAAC;YACf,uBAAuB,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC;YAC/C,MAAM,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACzC,CAAC;QACD,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC,CAAC;AACN,CAAC;AAED,SAAS,UAAU,CAAC,KAAgB,EAAE,MAAc,EAAE,GAAW;IAC/D,MAAM,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC3B,MAAM,MAAM,GAAG,cAAc,CAAC,aAAa,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;IAC/F,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAC3F,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAC3E,CAAC;AAED,SAAS,UAAU,CAAC,KAAa,EAAE,MAAc,EAAE,GAAW;IAC5D,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,gBAAgB,CAAC,aAAa,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACtH,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAClC,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IAC5C,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAc,CAAC;AAC1H,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,KAAwB,EAAE,MAA+B;IAC3F,IAAI,CAAC;QACH,OAAO,MAAM,MAAM,EAAE,CAAC;IACxB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,uBAAuB,EAAE,CAAC;YAC7C,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACxE,CAAC;QACD,kBAAkB,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,sCAAsC,EAAE;YAC9E,GAAG,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC5D,CAAC,CAAC;QACH,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,KAAwB;IAChD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACtD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,uBAAuB,CAAC,wCAAwC,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,IAA+B,CAAC;AACzC,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,uBAAuB,CAAC,uDAAuD,CAAC,CAAC;IAC7F,CAAC;IACD,OAAO,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,GAAG,CAAC,EAAE,EAAE;QAC/E,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,MAAM,IAAI,uBAAuB,CAAC,mBAAmB,SAAS,mBAAmB,CAAC,CAAC;QAChH,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;IAC5B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IACrD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,uBAAuB,CAAC,0CAA0C,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/lib/plugins/service-betterportal-config-manager/previewDiagnostics.d.ts

@@ -0,0 +1,107 @@
+import * as av from "anyvali";
+import type { BetterPortalConfig, PreviewEnvironmentDeployment } from "@betterportal/framework";
+export declare const PreviewServiceStatusSchema: av.ObjectSchema<{
+    state: av.EnumSchema<readonly ["missing-registration", "waiting-manifest", "needs-reconciliation", "waiting-config", "configured"]>;
+    manifestVersion: av.OptionalSchema<av.StringSchema>;
+    manifestAt: av.OptionalSchema<av.StringSchema>;
+    lastSeenAt: av.OptionalSchema<av.StringSchema>;
+    lastSyncAt: av.OptionalSchema<av.StringSchema>;
+    enabledRoutes: av.IntSchema;
+    advertisedOperations: av.IntSchema;
+    issues: av.ArraySchema<av.StringSchema>;
+}>;
+/** Configuration readiness, not a claim that a remote container or its dependencies are healthy. */
+export declare function previewServiceStatus(config: BetterPortalConfig, deployment: PreviewEnvironmentDeployment, instanceId: string): {
+    readonly state: "missing-registration" | "waiting-manifest" | "needs-reconciliation" | "waiting-config" | "configured";
+    readonly manifestVersion: string | undefined;
+    readonly manifestAt: string | undefined;
+    readonly lastSeenAt: string | undefined;
+    readonly lastSyncAt: string | undefined;
+    readonly enabledRoutes: number;
+    readonly advertisedOperations: number;
+    readonly issues: string[];
+};
+export declare const PreviewDiagnosticsSchema: av.ObjectSchema<{
+    deploymentId: av.StringSchema;
+    tenantId: av.StringSchema;
+    appId: av.StringSchema;
+    sourceTenantId: av.StringSchema;
+    sourceAppId: av.StringSchema;
+    hostname: av.StringSchema;
+    shellServiceId: av.OptionalSchema<av.StringSchema>;
+    authServiceId: av.OptionalSchema<av.StringSchema>;
+    authRedirects: av.ArraySchema<av.ObjectSchema<{
+        purpose: av.StringSchema;
+        serviceId: av.StringSchema;
+        viewId: av.StringSchema;
+        mounted: av.BoolSchema;
+    }>>;
+    services: av.ArraySchema<av.ObjectSchema<{
+        serviceId: av.StringSchema;
+        instanceId: av.StringSchema;
+        origin: av.StringSchema;
+        status: av.ObjectSchema<{
+            state: av.EnumSchema<readonly ["missing-registration", "waiting-manifest", "needs-reconciliation", "waiting-config", "configured"]>;
+            manifestVersion: av.OptionalSchema<av.StringSchema>;
+            manifestAt: av.OptionalSchema<av.StringSchema>;
+            lastSeenAt: av.OptionalSchema<av.StringSchema>;
+            lastSyncAt: av.OptionalSchema<av.StringSchema>;
+            enabledRoutes: av.IntSchema;
+            advertisedOperations: av.IntSchema;
+            issues: av.ArraySchema<av.StringSchema>;
+        }>;
+    }>>;
+    routes: av.ArraySchema<av.ObjectSchema<{
+        id: av.StringSchema;
+        serviceId: av.StringSchema;
+        viewId: av.StringSchema;
+        path: av.StringSchema;
+        targetPath: av.StringSchema;
+        operations: av.ArraySchema<av.StringSchema>;
+        enabled: av.BoolSchema;
+        menu: av.StringSchema;
+    }>>;
+}>;
+/** Explicitly allowlisted diagnostics: never serialize config values, API keys, hashes, or replay data. */
+export declare function buildPreviewDiagnostics(config: BetterPortalConfig, deploymentId: string): {
+    deploymentId: string;
+    tenantId: string;
+    appId: string;
+    sourceTenantId: string;
+    sourceAppId: string;
+    hostname: string;
+    shellServiceId: string | undefined;
+    authServiceId: string | undefined;
+    authRedirects: {
+        purpose: string;
+        serviceId: string;
+        viewId: string;
+        mounted: boolean;
+    }[];
+    services: {
+        serviceId: string;
+        instanceId: string;
+        origin: string;
+        status: {
+            readonly state: "missing-registration" | "waiting-manifest" | "needs-reconciliation" | "waiting-config" | "configured";
+            readonly manifestVersion: string | undefined;
+            readonly manifestAt: string | undefined;
+            readonly lastSeenAt: string | undefined;
+            readonly lastSyncAt: string | undefined;
+            readonly enabledRoutes: number;
+            readonly advertisedOperations: number;
+            readonly issues: string[];
+        };
+    }[];
+    routes: {
+        id: string;
+        serviceId: string;
+        viewId: string;
+        path: string;
+        targetPath: string;
+        operations: string[];
+        enabled: boolean;
+        menu: string;
+    }[];
+} | undefined;
+//# sourceMappingURL=previewDiagnostics.d.ts.map

package/lib/plugins/service-betterportal-config-manager/previewDiagnostics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"previewDiagnostics.d.ts","sourceRoot":"","sources":["../../../src/plugins/service-betterportal-config-manager/previewDiagnostics.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,kBAAkB,EAAE,4BAA4B,EAAE,MAAM,yBAAyB,CAAC;AAEhG,eAAO,MAAM,0BAA0B;;;;;;;;;EASrC,CAAC;AAEH,oGAAoG;AACpG,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,kBAAkB,EAAE,UAAU,EAAE,4BAA4B,EAAE,UAAU,EAAE,MAAM;;;;;;;;;EA8B5H;AAED,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAkBnC,CAAC;AAEH,2GAA2G;AAC3G,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAoCvF"}

package/lib/plugins/service-betterportal-config-manager/previewDiagnostics.js

@@ -0,0 +1,107 @@
+import * as av from "anyvali";
+export const PreviewServiceStatusSchema = av.object({
+    state: av.enum_(["missing-registration", "waiting-manifest", "needs-reconciliation", "waiting-config", "configured"]),
+    manifestVersion: av.optional(av.string()),
+    manifestAt: av.optional(av.string()),
+    lastSeenAt: av.optional(av.string()),
+    lastSyncAt: av.optional(av.string()),
+    enabledRoutes: av.int().min(0),
+    advertisedOperations: av.int().min(0),
+    issues: av.array(av.string())
+});
+/** Configuration readiness, not a claim that a remote container or its dependencies are healthy. */
+export function previewServiceStatus(config, deployment, instanceId) {
+    const registration = config.tenants.find(t => t.id === deployment.tenantId)?.services.find(s => s.id === instanceId);
+    const app = config.apps.find(a => a.id === deployment.appId && a.tenantId === deployment.tenantId);
+    // Deliberately use persisted metadata, not a replica's speculative hot manifest cache.
+    const manifest = config.manifestCache.find(m => m.serviceId === instanceId);
+    const routes = app?.routes.filter(r => r.serviceId === instanceId) ?? [];
+    const operations = Object.values(manifest?.viewIndex ?? {}).flatMap(view => view.operations.map(operation => ({ view, operation })));
+    const issues = [];
+    if (!app)
+        issues.push("Preview app is missing.");
+    if (registration && !registration.enabled)
+        issues.push("Service registration is disabled.");
+    for (const { view, operation } of operations) {
+        if (!routes.some(r => r.enabled && r.viewId === view.viewId && r.operations.includes(operation.operationId))) {
+            issues.push(`No enabled mount for ${operation.method} ${view.path} (${operation.operationId}).`);
+        }
+    }
+    const manifestAt = manifest?.fetchedAt;
+    const delivered = !!registration?.lastSyncAt && !!manifestAt
+        && Date.parse(registration.lastSyncAt) >= Date.parse(manifestAt);
+    const state = !registration ? "missing-registration" : !manifest ? "waiting-manifest"
+        : issues.length ? "needs-reconciliation" : !delivered ? "waiting-config" : "configured";
+    return {
+        state,
+        manifestVersion: manifest?.manifestVersion,
+        manifestAt,
+        lastSeenAt: registration?.lastSeenAt,
+        lastSyncAt: registration?.lastSyncAt,
+        enabledRoutes: routes.filter(r => r.enabled).length,
+        advertisedOperations: operations.length,
+        issues
+    };
+}
+export const PreviewDiagnosticsSchema = av.object({
+    deploymentId: av.string(),
+    tenantId: av.string(),
+    appId: av.string(),
+    sourceTenantId: av.string(),
+    sourceAppId: av.string(),
+    hostname: av.string(),
+    shellServiceId: av.optional(av.string()),
+    authServiceId: av.optional(av.string()),
+    authRedirects: av.array(av.object({ purpose: av.string(), serviceId: av.string(), viewId: av.string(), mounted: av.bool() })),
+    services: av.array(av.object({
+        serviceId: av.string(), instanceId: av.string(), origin: av.string(),
+        status: PreviewServiceStatusSchema
+    })),
+    routes: av.array(av.object({
+        id: av.string(), serviceId: av.string(), viewId: av.string(), path: av.string(),
+        targetPath: av.string(), operations: av.array(av.string()), enabled: av.bool(), menu: av.string()
+    }))
+});
+/** Explicitly allowlisted diagnostics: never serialize config values, API keys, hashes, or replay data. */
+export function buildPreviewDiagnostics(config, deploymentId) {
+    const deployment = config.previewEnvironmentDeployments.find(d => d.id === deploymentId);
+    if (!deployment)
+        return undefined;
+    const group = config.previewEnvironmentGroups.find(g => g.id === deployment.groupId);
+    const app = config.apps.find(a => a.id === deployment.appId && a.tenantId === deployment.tenantId);
+    const menuRouteIds = new Set();
+    const visit = (items, enabled = true) => {
+        for (const item of items) {
+            if (enabled && item.enabled && item.routeId)
+                menuRouteIds.add(item.routeId);
+            visit(item.children, enabled && item.enabled);
+        }
+    };
+    visit(app?.menu ?? []);
+    return {
+        deploymentId, tenantId: deployment.tenantId, appId: deployment.appId,
+        sourceTenantId: group?.sourceTenantId ?? "", sourceAppId: group?.sourceAppId ?? "",
+        hostname: deployment.hostname, shellServiceId: app?.shell?.serviceId, authServiceId: app?.auth?.serviceId,
+        authRedirects: Object.entries(app?.auth?.redirects ?? {}).flatMap(([purpose, target]) => target ? [{
+                purpose, serviceId: target.serviceId, viewId: target.viewId,
+                mounted: !!app?.routes.some(r => r.enabled && r.serviceId === target.serviceId && r.viewId === target.viewId)
+            }] : []),
+        services: deployment.services.map(service => {
+            let origin = "Invalid HTTP(S) origin";
+            try {
+                const parsed = new URL(service.url);
+                if (["http:", "https:"].includes(parsed.protocol) && !parsed.username && !parsed.password)
+                    origin = parsed.origin;
+            }
+            catch { /* Invalid registrations remain visible without turning them into links. */ }
+            return { serviceId: service.serviceId, instanceId: service.instanceId, origin, status: previewServiceStatus(config, deployment, service.instanceId) };
+        }),
+        routes: (app?.routes ?? []).map(route => ({
+            id: route.id, serviceId: route.serviceId, viewId: route.viewId, path: route.path,
+            targetPath: route.targetPath ?? "", operations: [...route.operations], enabled: route.enabled,
+            menu: !route.enabled ? "Disabled route" : route.kind === "api" ? "API only"
+                : menuRouteIds.has(route.id) ? "Included (browser auth/health policies may hide it)" : "No enabled menu item"
+        }))
+    };
+}
+//# sourceMappingURL=previewDiagnostics.js.map

package/lib/plugins/service-betterportal-config-manager/previewDiagnostics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"previewDiagnostics.js","sourceRoot":"","sources":["../../../src/plugins/service-betterportal-config-manager/previewDiagnostics.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAG9B,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,CAAC,MAAM,CAAC;IAClD,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,sBAAsB,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,YAAY,CAAU,CAAC;IAC9H,eAAe,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC;IACzC,UAAU,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC;IACpC,UAAU,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC;IACpC,UAAU,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC;IACpC,aAAa,EAAE,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,oBAAoB,EAAE,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrC,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC;CAC9B,CAAC,CAAC;AAEH,oGAAoG;AACpG,MAAM,UAAU,oBAAoB,CAAC,MAA0B,EAAE,UAAwC,EAAE,UAAkB;IAC3H,MAAM,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,UAAU,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,UAAU,CAAC,CAAC;IACrH,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,UAAU,CAAC,KAAK,IAAI,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,QAAQ,CAAC,CAAC;IACnG,uFAAuF;IACvF,MAAM,QAAQ,GAAG,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,UAAU,CAAC,CAAC;IAC5E,MAAM,MAAM,GAAG,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,UAAU,CAAC,IAAI,EAAE,CAAC;IACzE,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC;IACrI,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,CAAC,GAAG;QAAE,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IACjD,IAAI,YAAY,IAAI,CAAC,YAAY,CAAC,OAAO;QAAE,MAAM,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;IAC5F,KAAK,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,UAAU,EAAE,CAAC;QAC7C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;YAC7G,MAAM,CAAC,IAAI,CAAC,wBAAwB,SAAS,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,WAAW,IAAI,CAAC,CAAC;QACnG,CAAC;IACH,CAAC;IACD,MAAM,UAAU,GAAG,QAAQ,EAAE,SAAS,CAAC;IACvC,MAAM,SAAS,GAAG,CAAC,CAAC,YAAY,EAAE,UAAU,IAAI,CAAC,CAAC,UAAU;WACvD,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACnE,MAAM,KAAK,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,kBAAkB;QACnF,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,YAAY,CAAC;IAC1F,OAAO;QACL,KAAK;QACL,eAAe,EAAE,QAAQ,EAAE,eAAe;QAC1C,UAAU;QACV,UAAU,EAAE,YAAY,EAAE,UAAU;QACpC,UAAU,EAAE,YAAY,EAAE,UAAU;QACpC,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM;QACnD,oBAAoB,EAAE,UAAU,CAAC,MAAM;QACvC,MAAM;KACE,CAAC;AACb,CAAC;AAED,MAAM,CAAC,MAAM,wBAAwB,GAAG,EAAE,CAAC,MAAM,CAAC;IAChD,YAAY,EAAE,EAAE,CAAC,MAAM,EAAE;IACzB,QAAQ,EAAE,EAAE,CAAC,MAAM,EAAE;IACrB,KAAK,EAAE,EAAE,CAAC,MAAM,EAAE;IAClB,cAAc,EAAE,EAAE,CAAC,MAAM,EAAE;IAC3B,WAAW,EAAE,EAAE,CAAC,MAAM,EAAE;IACxB,QAAQ,EAAE,EAAE,CAAC,MAAM,EAAE;IACrB,cAAc,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC;IACxC,aAAa,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC;IACvC,aAAa,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC7H,QAAQ,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC;QAC3B,SAAS,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE,UAAU,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE;QACpE,MAAM,EAAE,0BAA0B;KACnC,CAAC,CAAC;IACH,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC;QACzB,EAAE,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,EAAE;QAC/E,UAAU,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE,UAAU,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,EAAE;KAClG,CAAC,CAAC;CACJ,CAAC,CAAC;AAEH,2GAA2G;AAC3G,MAAM,UAAU,uBAAuB,CAAC,MAA0B,EAAE,YAAoB;IACtF,MAAM,UAAU,GAAG,MAAM,CAAC,6BAA6B,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,YAAY,CAAC,CAAC;IACzF,IAAI,CAAC,UAAU;QAAE,OAAO,SAAS,CAAC;IAClC,MAAM,KAAK,GAAG,MAAM,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,UAAU,CAAC,OAAO,CAAC,CAAC;IACrF,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,UAAU,CAAC,KAAK,IAAI,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,QAAQ,CAAC,CAAC;IACnG,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IACvC,MAAM,KAAK,GAAG,CAAC,KAAsC,EAAE,OAAO,GAAG,IAAI,EAAQ,EAAE;QAC7E,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,OAAO,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO;gBAAE,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC5E,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC;QAChD,CAAC;IACH,CAAC,CAAC;IACF,KAAK,CAAC,GAAG,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACvB,OAAO;QACL,YAAY,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK;QACpE,cAAc,EAAE,KAAK,EAAE,cAAc,IAAI,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,WAAW,IAAI,EAAE;QAClF,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE,cAAc,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS;QACzG,aAAa,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBACjG,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM;gBAC3D,OAAO,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC;aAC9G,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACR,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE;YAC1C,IAAI,MAAM,GAAG,wBAAwB,CAAC;YACtC,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBACpC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ;oBAAE,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;YACpH,CAAC;YAAC,MAAM,CAAC,CAAC,2EAA2E,CAAC,CAAC;YACvF,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,oBAAoB,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QACxJ,CAAC,CAAC;QACF,MAAM,EAAE,CAAC,GAAG,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACxC,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI;YAChF,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,EAAE,EAAE,UAAU,EAAE,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO;YAC7F,IAAI,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,UAAU;gBACzE,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,qDAAqD,CAAC,CAAC,CAAC,sBAAsB;SAChH,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC"}