@compforge/harness-toolbox 0.5.4 → 0.5.5

package/dist/kubernetes/pod-log-datasource.js

@@ -9,7 +9,7 @@ import {
   clientKey
 } from "../chunk-z5pm2emz.js";
 import"../chunk-v3hxvnrc.js";
-import"../chunk-rkt41za2.js";
+import"../chunk-68zz17hs.js";
 
 // src/kubernetes/pod-log-datasource.ts
 class PodLogDataSource {

package/dist/kubernetes/resource-transport.js

@@ -1,10 +1,10 @@
 import {
   KubernetesResourceTransport
-} from "../chunk-5w85c7cs.js";
-import"../chunk-dpcge1xt.js";
+} from "../chunk-361x998p.js";
+import"../chunk-jt8fn3wg.js";
 import"../chunk-a9htb6cr.js";
 import"../chunk-v3hxvnrc.js";
-import"../chunk-rkt41za2.js";
+import"../chunk-68zz17hs.js";
 export {
   KubernetesResourceTransport
 };

package/dist/kubernetes/resources.js

@@ -1,7 +1,7 @@
 import {
   resourcePath
-} from "../chunk-dpcge1xt.js";
-import"../chunk-rkt41za2.js";
+} from "../chunk-jt8fn3wg.js";
+import"../chunk-68zz17hs.js";
 export {
   resourcePath
 };

package/dist/kubernetes/secret-datasource.js

@@ -1,9 +1,9 @@
 import {
   resourcePath
-} from "../chunk-dpcge1xt.js";
+} from "../chunk-jt8fn3wg.js";
 import {
   KubernetesError
-} from "../chunk-rkt41za2.js";
+} from "../chunk-68zz17hs.js";
 
 // src/kubernetes/secret-datasource.ts
 import { clientKey } from "@compforge/harness-common";

package/dist/kubernetes/workload.js

@@ -1,7 +1,7 @@
 import {
   resolveWorkload
-} from "../chunk-ae84rzq5.js";
-import"../chunk-rkt41za2.js";
+} from "../chunk-d2y5ewbb.js";
+import"../chunk-68zz17hs.js";
 export {
   resolveWorkload
 };

package/dist/mysql/client.js

@@ -2,24 +2,24 @@ import {
   MysqlClient,
   MysqlDatabase,
   openMysql
-} from "../chunk-ex429qjt.js";
+} from "../chunk-bkz0dyx5.js";
 import"../chunk-m91t44jh.js";
 import"../chunk-db4an9td.js";
 import"../chunk-835fssgz.js";
-import"../chunk-18gcp0ck.js";
-import"../chunk-kap6ka3n.js";
+import"../chunk-ps7f1x05.js";
+import"../chunk-9d0ph5km.js";
 import"../chunk-v3hxvnrc.js";
 import"../chunk-ssj93brx.js";
-import"../chunk-ehmx0yhp.js";
+import"../chunk-47x0r2kr.js";
 import"../chunk-0d8vs5q8.js";
 import"../chunk-xgnz10sr.js";
 import"../chunk-6fnhzhdb.js";
 import"../chunk-mvkxs8d0.js";
 import"../chunk-rq5fc007.js";
 import"../chunk-9shz0bw1.js";
-import"../chunk-sb5qzv37.js";
-import"../chunk-43mcyrh4.js";
-import"../chunk-rkt41za2.js";
+import"../chunk-6rcyw5ek.js";
+import"../chunk-9f9dsjnr.js";
+import"../chunk-68zz17hs.js";
 export {
   openMysql,
   MysqlDatabase,

package/dist/mysql/index.js

@@ -1,3 +1,4 @@
+import"../chunk-pfar9cm3.js";
 import {
   withReadScope
 } from "../chunk-4sqvppz7.js";
@@ -5,7 +6,7 @@ import {
   MysqlClient,
   MysqlDatabase,
   openMysql
-} from "../chunk-ex429qjt.js";
+} from "../chunk-bkz0dyx5.js";
 import"../chunk-m91t44jh.js";
 import"../chunk-db4an9td.js";
 import {
@@ -17,21 +18,20 @@ import {
   queryLimited
 } from "../chunk-1gyshqd9.js";
 import"../chunk-835fssgz.js";
-import"../chunk-pfar9cm3.js";
-import"../chunk-18gcp0ck.js";
-import"../chunk-kap6ka3n.js";
+import"../chunk-ps7f1x05.js";
+import"../chunk-9d0ph5km.js";
 import"../chunk-v3hxvnrc.js";
 import"../chunk-ssj93brx.js";
-import"../chunk-ehmx0yhp.js";
+import"../chunk-47x0r2kr.js";
 import"../chunk-0d8vs5q8.js";
 import"../chunk-xgnz10sr.js";
 import"../chunk-6fnhzhdb.js";
 import"../chunk-mvkxs8d0.js";
 import"../chunk-rq5fc007.js";
 import"../chunk-9shz0bw1.js";
-import"../chunk-sb5qzv37.js";
-import"../chunk-43mcyrh4.js";
-import"../chunk-rkt41za2.js";
+import"../chunk-6rcyw5ek.js";
+import"../chunk-9f9dsjnr.js";
+import"../chunk-68zz17hs.js";
 export {
   withReadScope,
   queryLimited,

package/dist/network/connectivity.d.ts

@@ -1,9 +1,4 @@
-/** A probe runs in the caller-selected environment; it never falls back to the Doctor/CLI host. */
-export interface ConnectivityTarget {
-    host: string;
-    port: number;
-    tls?: boolean;
-}
+import type { Endpoint } from "@compforge/harness-common";
 export interface ConnectivityStage {
     stage: "dns" | "tcp" | "tls";
     status: "passed" | "failed";
@@ -13,7 +8,7 @@ export interface ConnectivityStage {
     error?: string;
 }
 export interface ConnectivityResult {
-    target: ConnectivityTarget;
+    target: Endpoint;
     stages: ConnectivityStage[];
     status: "passed" | "failed";
 }
@@ -27,9 +22,10 @@ export interface ConnectivityExecutor {
 /**
  * @spec DNS, TCP and optional verified TLS are observed from the supplied executor's network context.
  * @rule A hostname (including service.namespace) and an IP use the same path; connectivity requires an explicit port.
+ * @spec secure uses verified direct TLS for https/wss/tls; other encrypted protocols throw ProtocolError(code=Unsupported) before I/O.
  * @rule Tool failure/timeout throws; it is not evidence that the target is unhealthy. No ICMP, credentials or HTTP policy is implied.
  */
-export declare function probeConnectivity(target: ConnectivityTarget, execute: ConnectivityExecutor, options: {
+export declare function probeConnectivity(target: Endpoint, execute: ConnectivityExecutor, options: {
     timeoutMs: number;
     signal?: AbortSignal;
 }): Promise<ConnectivityResult>;

package/dist/network/connectivity.js

@@ -1,3 +1,10 @@
+import {
+  validateEndpoint
+} from "../chunk-nr6ams69.js";
+import {
+  ProtocolError
+} from "../chunk-68zz17hs.js";
+
 // src/network/connectivity.ts
 var SCRIPT = `import json,socket,ssl,sys,time
 q=json.load(sys.stdin)
@@ -44,19 +51,26 @@ finally:
     if sock is not None: sock.close()
 print(json.dumps(dict(stages=stages,status="failed" if any(s["status"]=="failed" for s in stages) else "passed")))`;
 async function probeConnectivity(target, execute, options) {
-  if (!target.host.trim() || /[\s/\\?#@]/.test(target.host) || !Number.isInteger(target.port) || target.port < 1 || target.port > 65535) {
-    throw new Error("Connectivity requires a hostname/IP and a port between 1 and 65535");
+  validateEndpoint(target);
+  const endpoint = {
+    host: target.host,
+    port: target.port,
+    ...target.scheme !== undefined ? { scheme: target.scheme } : {},
+    ...target.secure !== undefined ? { secure: target.secure } : {}
+  };
+  if (endpoint.secure && !["https", "wss", "tls"].includes(endpoint.scheme ?? "")) {
+    throw new ProtocolError(`Encrypted connectivity is not supported for scheme ${endpoint.scheme ?? "(unspecified)"}; supported schemes: https, wss, tls`, { code: "Unsupported" });
   }
   if (!Number.isFinite(options.timeoutMs) || options.timeoutMs <= 0)
     throw new Error("Connectivity timeout must be positive");
   options.signal?.throwIfAborted();
-  const raw = await execute(["python3", "-c", SCRIPT], { ...options, stdin: JSON.stringify({ ...target, timeoutMs: options.timeoutMs }) });
+  const raw = await execute(["python3", "-c", SCRIPT], { ...options, stdin: JSON.stringify({ host: endpoint.host, port: endpoint.port, tls: endpoint.secure, timeoutMs: options.timeoutMs }) });
   options.signal?.throwIfAborted();
   const value = JSON.parse(raw);
-  const expected = ["dns", "tcp", ...target.tls ? ["tls"] : []];
+  const expected = ["dns", "tcp", ...endpoint.secure ? ["tls"] : []];
   if (!value || !Array.isArray(value.stages) || !value.stages.length || value.stages.length > expected.length || !["passed", "failed"].includes(value.status) || value.stages.some((stage, index) => !stage || stage.stage !== expected[index] || !["passed", "failed"].includes(stage.status) || !Number.isFinite(stage.elapsedMs) || stage.elapsedMs < 0 || index < value.stages.length - 1 && stage.status !== "passed") || (value.status === "passed" ? value.stages.length !== expected.length || value.stages.some((stage) => stage.status !== "passed") : value.stages.at(-1)?.status !== "failed"))
     throw new Error("Invalid connectivity probe result");
-  return { target: { ...target }, stages: value.stages, status: value.status };
+  return { target: endpoint, stages: value.stages, status: value.status };
 }
 export {
   probeConnectivity

package/dist/network/endpoint.d.ts

@@ -0,0 +1,9 @@
+import type { Endpoint } from "@compforge/harness-common";
+/** @spec Validation performs no DNS or I/O and never includes the supplied address in errors. */
+export declare function validateEndpoint(endpoint: Endpoint): void;
+/**
+ * @spec Extract only the network address from an absolute URL; discard credentials, path, query and fragment.
+ * @spec HTTP(S), WS(S) and FTP have default ports. TLS requires a port and secure=true; other schemes require a port and leave secure unspecified.
+ * @why A signed resource URL must not leak its signature into connectivity commands or evidence.
+ */
+export declare function endpointFromUrl(value: string | URL): Endpoint;

package/dist/network/endpoint.js

@@ -0,0 +1,8 @@
+import {
+  endpointFromUrl,
+  validateEndpoint
+} from "../chunk-nr6ams69.js";
+export {
+  validateEndpoint,
+  endpointFromUrl
+};

package/dist/opensearch/client.js

@@ -5,20 +5,20 @@ import {
   isOpenSearchReadApi,
   openOpenSearch,
   openSearchServername
-} from "../chunk-kxpecgy7.js";
-import"../chunk-18gcp0ck.js";
-import"../chunk-kap6ka3n.js";
+} from "../chunk-6dfcndra.js";
+import"../chunk-ps7f1x05.js";
+import"../chunk-9d0ph5km.js";
 import"../chunk-ssj93brx.js";
-import"../chunk-ehmx0yhp.js";
+import"../chunk-47x0r2kr.js";
 import"../chunk-0d8vs5q8.js";
 import"../chunk-xgnz10sr.js";
 import"../chunk-6fnhzhdb.js";
 import"../chunk-mvkxs8d0.js";
 import"../chunk-rq5fc007.js";
 import"../chunk-9shz0bw1.js";
-import"../chunk-sb5qzv37.js";
-import"../chunk-43mcyrh4.js";
-import"../chunk-rkt41za2.js";
+import"../chunk-6rcyw5ek.js";
+import"../chunk-9f9dsjnr.js";
+import"../chunk-68zz17hs.js";
 export {
   openSearchServername,
   openOpenSearch,

package/dist/opensearch/index.js

@@ -12,20 +12,20 @@ import {
   isOpenSearchReadApi,
   openOpenSearch,
   openSearchServername
-} from "../chunk-kxpecgy7.js";
-import"../chunk-18gcp0ck.js";
-import"../chunk-kap6ka3n.js";
+} from "../chunk-6dfcndra.js";
+import"../chunk-ps7f1x05.js";
+import"../chunk-9d0ph5km.js";
 import"../chunk-ssj93brx.js";
-import"../chunk-ehmx0yhp.js";
+import"../chunk-47x0r2kr.js";
 import"../chunk-0d8vs5q8.js";
 import"../chunk-xgnz10sr.js";
 import"../chunk-6fnhzhdb.js";
 import"../chunk-mvkxs8d0.js";
 import"../chunk-rq5fc007.js";
 import"../chunk-9shz0bw1.js";
-import"../chunk-sb5qzv37.js";
-import"../chunk-43mcyrh4.js";
-import"../chunk-rkt41za2.js";
+import"../chunk-6rcyw5ek.js";
+import"../chunk-9f9dsjnr.js";
+import"../chunk-68zz17hs.js";
 export {
   searchAfterPages,
   parseOpenSearchEndpoint,

package/dist/redis/client.js

@@ -4,21 +4,21 @@ import {
   RedisConnection,
   openRedis,
   parseRedisInfo
-} from "../chunk-njs48b51.js";
+} from "../chunk-ywk81p8a.js";
 import"../chunk-5tbzf9wd.js";
-import"../chunk-18gcp0ck.js";
-import"../chunk-kap6ka3n.js";
+import"../chunk-ps7f1x05.js";
+import"../chunk-9d0ph5km.js";
 import"../chunk-ssj93brx.js";
-import"../chunk-ehmx0yhp.js";
+import"../chunk-47x0r2kr.js";
 import"../chunk-0d8vs5q8.js";
 import"../chunk-xgnz10sr.js";
 import"../chunk-6fnhzhdb.js";
 import"../chunk-mvkxs8d0.js";
 import"../chunk-rq5fc007.js";
 import"../chunk-9shz0bw1.js";
-import"../chunk-sb5qzv37.js";
-import"../chunk-43mcyrh4.js";
-import"../chunk-rkt41za2.js";
+import"../chunk-6rcyw5ek.js";
+import"../chunk-9f9dsjnr.js";
+import"../chunk-68zz17hs.js";
 export {
   parseRedisInfo,
   openRedis,

package/dist/redis/index.js

@@ -8,23 +8,23 @@ import {
   RedisConnection,
   openRedis,
   parseRedisInfo
-} from "../chunk-njs48b51.js";
+} from "../chunk-ywk81p8a.js";
 import {
   discoverRedisTopology
 } from "../chunk-5tbzf9wd.js";
-import"../chunk-18gcp0ck.js";
-import"../chunk-kap6ka3n.js";
+import"../chunk-ps7f1x05.js";
+import"../chunk-9d0ph5km.js";
 import"../chunk-ssj93brx.js";
-import"../chunk-ehmx0yhp.js";
+import"../chunk-47x0r2kr.js";
 import"../chunk-0d8vs5q8.js";
 import"../chunk-xgnz10sr.js";
 import"../chunk-6fnhzhdb.js";
 import"../chunk-mvkxs8d0.js";
 import"../chunk-rq5fc007.js";
 import"../chunk-9shz0bw1.js";
-import"../chunk-sb5qzv37.js";
-import"../chunk-43mcyrh4.js";
-import"../chunk-rkt41za2.js";
+import"../chunk-6rcyw5ek.js";
+import"../chunk-9f9dsjnr.js";
+import"../chunk-68zz17hs.js";
 export {
   redisGroupedSampleSizes,
   parseRedisInfo,

package/dist/s3/client.js

@@ -1,22 +1,22 @@
 import {
   S3Client
-} from "../chunk-7m95c7pn.js";
-import"../chunk-18gcp0ck.js";
-import"../chunk-kap6ka3n.js";
+} from "../chunk-mj6ckk1g.js";
+import"../chunk-ps7f1x05.js";
+import"../chunk-9d0ph5km.js";
 import"../chunk-v3hxvnrc.js";
 import"../chunk-z8e1ckkq.js";
 import"../chunk-c2b2jwm4.js";
 import"../chunk-ssj93brx.js";
-import"../chunk-ehmx0yhp.js";
+import"../chunk-47x0r2kr.js";
 import"../chunk-0d8vs5q8.js";
 import"../chunk-xgnz10sr.js";
 import"../chunk-6fnhzhdb.js";
 import"../chunk-mvkxs8d0.js";
 import"../chunk-rq5fc007.js";
 import"../chunk-9shz0bw1.js";
-import"../chunk-sb5qzv37.js";
-import"../chunk-43mcyrh4.js";
-import"../chunk-rkt41za2.js";
+import"../chunk-6rcyw5ek.js";
+import"../chunk-9f9dsjnr.js";
+import"../chunk-68zz17hs.js";
 export {
   S3Client
 };

package/dist/s3/datasource.js

@@ -1,24 +1,24 @@
 import {
   S3DataSource
-} from "../chunk-3b877a0y.js";
+} from "../chunk-hj14hfvz.js";
 import"../chunk-z5pm2emz.js";
-import"../chunk-7m95c7pn.js";
-import"../chunk-18gcp0ck.js";
-import"../chunk-kap6ka3n.js";
+import"../chunk-mj6ckk1g.js";
+import"../chunk-ps7f1x05.js";
+import"../chunk-9d0ph5km.js";
 import"../chunk-v3hxvnrc.js";
 import"../chunk-z8e1ckkq.js";
 import"../chunk-c2b2jwm4.js";
 import"../chunk-ssj93brx.js";
-import"../chunk-ehmx0yhp.js";
+import"../chunk-47x0r2kr.js";
 import"../chunk-0d8vs5q8.js";
 import"../chunk-xgnz10sr.js";
 import"../chunk-6fnhzhdb.js";
 import"../chunk-mvkxs8d0.js";
 import"../chunk-rq5fc007.js";
 import"../chunk-9shz0bw1.js";
-import"../chunk-sb5qzv37.js";
-import"../chunk-43mcyrh4.js";
-import"../chunk-rkt41za2.js";
+import"../chunk-6rcyw5ek.js";
+import"../chunk-9f9dsjnr.js";
+import"../chunk-68zz17hs.js";
 export {
   S3DataSource
 };

package/dist/s3/index.js

@@ -1,26 +1,26 @@
 import {
   S3DataSource
-} from "../chunk-3b877a0y.js";
+} from "../chunk-hj14hfvz.js";
 import"../chunk-z5pm2emz.js";
 import {
   S3Client
-} from "../chunk-7m95c7pn.js";
-import"../chunk-18gcp0ck.js";
-import"../chunk-kap6ka3n.js";
+} from "../chunk-mj6ckk1g.js";
+import"../chunk-ps7f1x05.js";
+import"../chunk-9d0ph5km.js";
 import"../chunk-v3hxvnrc.js";
 import"../chunk-z8e1ckkq.js";
 import"../chunk-c2b2jwm4.js";
 import"../chunk-ssj93brx.js";
-import"../chunk-ehmx0yhp.js";
+import"../chunk-47x0r2kr.js";
 import"../chunk-0d8vs5q8.js";
 import"../chunk-xgnz10sr.js";
 import"../chunk-6fnhzhdb.js";
 import"../chunk-mvkxs8d0.js";
 import"../chunk-rq5fc007.js";
 import"../chunk-9shz0bw1.js";
-import"../chunk-sb5qzv37.js";
-import"../chunk-43mcyrh4.js";
-import"../chunk-rkt41za2.js";
+import"../chunk-6rcyw5ek.js";
+import"../chunk-9f9dsjnr.js";
+import"../chunk-68zz17hs.js";
 export {
   S3DataSource,
   S3Client

package/dist/transport/index.js

@@ -3,14 +3,14 @@ import {
   PodPythonTransport,
   PortForwardTransport,
   isConnectionNetworkError
-} from "../chunk-18gcp0ck.js";
+} from "../chunk-ps7f1x05.js";
 import {
   PodRelayTransport
-} from "../chunk-kap6ka3n.js";
+} from "../chunk-9d0ph5km.js";
 import"../chunk-ssj93brx.js";
 import {
   ServicePortForwardTransport
-} from "../chunk-ehmx0yhp.js";
+} from "../chunk-47x0r2kr.js";
 import"../chunk-0d8vs5q8.js";
 import"../chunk-xgnz10sr.js";
 import"../chunk-6fnhzhdb.js";
@@ -19,9 +19,9 @@ import"../chunk-rq5fc007.js";
 import"../chunk-9shz0bw1.js";
 import {
   Transport
-} from "../chunk-sb5qzv37.js";
-import"../chunk-43mcyrh4.js";
-import"../chunk-rkt41za2.js";
+} from "../chunk-6rcyw5ek.js";
+import"../chunk-9f9dsjnr.js";
+import"../chunk-68zz17hs.js";
 export {
   isConnectionNetworkError,
   Transport,

package/dist/transport/lifecycle.js

@@ -1,8 +1,8 @@
 import {
   Transport
-} from "../chunk-sb5qzv37.js";
-import"../chunk-43mcyrh4.js";
-import"../chunk-rkt41za2.js";
+} from "../chunk-6rcyw5ek.js";
+import"../chunk-9f9dsjnr.js";
+import"../chunk-68zz17hs.js";
 export {
   Transport
 };

package/dist/transport/pod-relay.js

@@ -1,13 +1,13 @@
 import {
   PodRelayTransport
-} from "../chunk-kap6ka3n.js";
+} from "../chunk-9d0ph5km.js";
 import"../chunk-ssj93brx.js";
 import"../chunk-mvkxs8d0.js";
 import"../chunk-rq5fc007.js";
 import"../chunk-9shz0bw1.js";
-import"../chunk-sb5qzv37.js";
-import"../chunk-43mcyrh4.js";
-import"../chunk-rkt41za2.js";
+import"../chunk-6rcyw5ek.js";
+import"../chunk-9f9dsjnr.js";
+import"../chunk-68zz17hs.js";
 export {
   PodRelayTransport
 };

package/dist/transport/service-port-forward.js

@@ -1,15 +1,15 @@
 import {
   ServicePortForwardTransport
-} from "../chunk-ehmx0yhp.js";
+} from "../chunk-47x0r2kr.js";
 import"../chunk-0d8vs5q8.js";
 import"../chunk-xgnz10sr.js";
 import"../chunk-6fnhzhdb.js";
 import"../chunk-mvkxs8d0.js";
 import"../chunk-rq5fc007.js";
 import"../chunk-9shz0bw1.js";
-import"../chunk-sb5qzv37.js";
-import"../chunk-43mcyrh4.js";
-import"../chunk-rkt41za2.js";
+import"../chunk-6rcyw5ek.js";
+import"../chunk-9f9dsjnr.js";
+import"../chunk-68zz17hs.js";
 export {
   ServicePortForwardTransport
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@compforge/harness-toolbox",
-  "version": "0.5.4",
+  "version": "0.5.5",
   "description": "Shared infrastructure clients, transports and bounded data capture",
   "type": "module",
   "scripts": {
@@ -100,6 +100,10 @@
     "./network": {
       "types": "./dist/network/connectivity.d.ts",
       "import": "./dist/network/connectivity.js"
+    },
+    "./endpoint": {
+      "types": "./dist/network/endpoint.d.ts",
+      "import": "./dist/network/endpoint.js"
     }
   },
   "files": [
@@ -108,7 +112,7 @@
   ],
   "dependencies": {
     "@aws-sdk/client-s3": "3.1133.0",
-    "@compforge/harness-common": "0.5.11",
+    "@compforge/harness-common": "0.5.13",
     "@kubernetes/client-node": "1.4.0",
     "@opensearch-project/opensearch": "3.6.0",
     "@redis/client": "6.1.0",