@empire-builder-kit/nx 1.0.0-beta.10

package/src/executors/dev-doctor/dev-doctor.js

@@ -0,0 +1,260 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.inspectCertificateTrust = inspectCertificateTrust;
+exports.inspectLocalDevelopment = inspectLocalDevelopment;
+const devkit_1 = require("@nx/devkit");
+const node_child_process_1 = require("node:child_process");
+const node_crypto_1 = require("node:crypto");
+const node_fs_1 = require("node:fs");
+const node_os_1 = require("node:os");
+const node_path_1 = require("node:path");
+const contracts_js_1 = require("../../local-dev/contracts.js");
+const effects_js_1 = require("../../local-dev/effects.js");
+const gateway_js_1 = require("../../local-dev/gateway.js");
+const identity_js_1 = require("../../local-dev/identity.js");
+const tls_js_1 = require("../../local-dev/tls.js");
+function inspectCertificateTrust(rootCertificatePath, intermediateCertificatePath, leafCertificatePath, hostname) {
+    try {
+        if ((0, node_os_1.platform)() === 'darwin') {
+            (0, node_child_process_1.execFileSync)('security', [
+                'verify-cert',
+                '-L',
+                '-q',
+                '-c',
+                leafCertificatePath,
+                '-c',
+                intermediateCertificatePath,
+                '-p',
+                'ssl',
+                '-n',
+                hostname,
+            ], { stdio: 'pipe' });
+            return 'ready';
+        }
+        const expected = new node_crypto_1.X509Certificate((0, node_fs_1.readFileSync)(rootCertificatePath))
+            .fingerprint256;
+        if ((0, node_os_1.platform)() === 'win32') {
+            (0, node_child_process_1.execFileSync)('certutil', [
+                '-user',
+                '-store',
+                'Root',
+                new node_crypto_1.X509Certificate((0, node_fs_1.readFileSync)(rootCertificatePath)).fingerprint.replace(/:/g, ''),
+            ], { stdio: 'pipe' });
+            return 'ready';
+        }
+        const pem = (0, node_child_process_1.execFileSync)('certutil', [
+            '-L',
+            '-d',
+            `sql:${(0, node_path_1.join)((0, node_os_1.homedir)(), '.pki', 'nssdb')}`,
+            '-n',
+            'Empire Builder Kit Local Root',
+            '-a',
+        ], { encoding: 'utf8', stdio: ['ignore', 'pipe', 'pipe'] });
+        return new node_crypto_1.X509Certificate(pem).fingerprint256 === expected
+            ? 'ready'
+            : 'missing';
+    }
+    catch {
+        return 'missing';
+    }
+}
+function packageVersion() {
+    const manifest = require('../../../package.json');
+    return manifest.version ?? '0.0.0';
+}
+function effectiveProbeAuthorities(rootCertificatePath) {
+    // The preceding platform check proves this exact root is installed in the
+    // detected user trust provider. Supplying the same root explicitly keeps the
+    // live cryptographic handshake deterministic across the supported Node 22
+    // floor instead of depending on newer system-CA enumeration APIs.
+    return (0, node_fs_1.readFileSync)(rootCertificatePath);
+}
+async function inspectLocalDevelopment(options, context, dependencies = {}) {
+    const hostname = options.hostname?.trim() ||
+        (0, identity_js_1.createFleetHostname)((0, identity_js_1.createFleetId)({
+            checkoutPath: context.root,
+            stage: options.stage ?? 'personal',
+            workspaceName: context.projectName ?? 'workspace',
+        }));
+    const resolver = await (dependencies.resolveHostname ?? identity_js_1.resolveFleetHostname)(hostname);
+    const paths = (0, tls_js_1.localTlsPaths)(options.appData);
+    const issues = [];
+    if (!(0, node_fs_1.existsSync)(paths.rootCertificate) ||
+        !(0, node_fs_1.existsSync)(paths.intermediateCertificate) ||
+        !(0, node_fs_1.existsSync)(paths.intermediateKey) ||
+        !(0, node_fs_1.existsSync)(paths.leafCertificate) ||
+        !(0, node_fs_1.existsSync)(paths.leafKey) ||
+        !(0, node_fs_1.existsSync)(paths.capability)) {
+        return {
+            connectivity: 'missing',
+            gateway: 'missing',
+            hostname,
+            issues: ['Local TLS or gateway capability state is missing.'],
+            portless: 'not-configured',
+            resolver,
+            tls: 'missing',
+            trust: 'missing',
+        };
+    }
+    (0, tls_js_1.assertPrivateKeyPermissions)(paths.leafKey);
+    (0, tls_js_1.assertPrivateKeyPermissions)(paths.intermediateKey);
+    const certificate = new node_crypto_1.X509Certificate((0, node_fs_1.readFileSync)(paths.leafCertificate));
+    if (!certificate.checkHost(hostname)) {
+        throw new Error(`EBK gateway certificate does not cover ${hostname}. Rerun dev-setup --upgrade --trust with the matching hostSuffix.`);
+    }
+    if (certificate.validToDate.getTime() <= Date.now()) {
+        throw new Error(`EBK gateway certificate expired at ${certificate.validTo}.`);
+    }
+    const trust = (dependencies.inspectTrust ?? inspectCertificateTrust)(paths.rootCertificate, paths.intermediateCertificate, paths.leafCertificate, hostname);
+    let authorities;
+    let connectivity = 'missing';
+    if (trust === 'ready') {
+        try {
+            authorities = effectiveProbeAuthorities(paths.rootCertificate);
+            await (dependencies.probeExplicitTls ?? effects_js_1.probeEphemeralTlsEndpoint)({
+                ca: authorities,
+                certificate: (0, node_fs_1.readFileSync)(paths.leafCertificate),
+                hostname,
+                key: (0, node_fs_1.readFileSync)(paths.leafKey),
+            });
+            connectivity = 'ready';
+        }
+        catch (error) {
+            issues.push(`Supported explicit-port TLS effect probe failed: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    }
+    else {
+        issues.push('The generated certificate chain is not trusted by the detected user trust provider.');
+    }
+    let state;
+    if ((0, node_fs_1.existsSync)(paths.gatewayState)) {
+        try {
+            state = JSON.parse((0, node_fs_1.readFileSync)(paths.gatewayState, 'utf8'));
+        }
+        catch (error) {
+            issues.push(`Gateway state is invalid JSON: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    }
+    let gateway = 'missing';
+    const send = dependencies.send ?? gateway_js_1.sendGatewayCommand;
+    const capability = (0, node_fs_1.readFileSync)(paths.capability, 'utf8').trim();
+    try {
+        const status = await send(paths.gatewaySocket, {
+            action: 'status',
+            capability,
+        });
+        if (status.protocolVersion !== contracts_js_1.GATEWAY_PROTOCOL_VERSION) {
+            issues.push(`Machine gateway protocol ${status.protocolVersion} does not match ${contracts_js_1.GATEWAY_PROTOCOL_VERSION}.`);
+        }
+        else {
+            gateway = 'ready';
+        }
+    }
+    catch (error) {
+        issues.push(`Machine gateway status probe failed: ${error instanceof Error ? error.message : String(error)}`);
+    }
+    let portless = state?.portless
+        ? 'unreachable'
+        : 'not-configured';
+    if (state?.portless) {
+        if (state.schemaVersion !== 1 ||
+            !state.hostSuffix ||
+            !hostname.endsWith(`.${state.hostSuffix}`)) {
+            issues.push('Recorded portless gateway state is incompatible with the exact fleet hostname.');
+        }
+        else if (gateway === 'ready' &&
+            trust === 'ready' &&
+            connectivity === 'ready' &&
+            authorities) {
+            const sessionId = `__doctor__-${(0, node_crypto_1.randomUUID)()}`;
+            const registration = {
+                action: 'register',
+                capability,
+                clientFrameworkVersion: packageVersion(),
+                hostname,
+                protocol: {
+                    maximum: contracts_js_1.GATEWAY_PROTOCOL_VERSION,
+                    minimum: contracts_js_1.GATEWAY_PROTOCOL_VERSION,
+                },
+                proxyPort: 65_535,
+                sessionId,
+                sessionManifestVersion: contracts_js_1.SESSION_MANIFEST_VERSION,
+            };
+            let registered = false;
+            try {
+                try {
+                    await send(paths.gatewaySocket, registration);
+                    registered = true;
+                }
+                catch (error) {
+                    if (!(error instanceof Error) ||
+                        !error.message.includes('already registered by another checkout')) {
+                        throw error;
+                    }
+                }
+                await (dependencies.probePortlessTls ?? effects_js_1.probeTlsEndpoint)({
+                    ca: authorities,
+                    hostname,
+                    port: 443,
+                });
+                portless = 'ready';
+            }
+            catch (error) {
+                issues.push(`Configured portless gateway is not reachable through loopback port 443: ${error instanceof Error ? error.message : String(error)}`);
+            }
+            finally {
+                if (registered) {
+                    await send(paths.gatewaySocket, {
+                        action: 'unregister',
+                        capability,
+                        hostname,
+                        sessionId,
+                    }).catch((error) => issues.push(`Diagnostic gateway registration cleanup failed: ${error instanceof Error ? error.message : String(error)}`));
+                }
+            }
+        }
+    }
+    return {
+        certificateExpires: certificate.validTo,
+        connectivity,
+        gateway,
+        hostname,
+        issues,
+        portless,
+        resolver,
+        tls: 'ready',
+        trust,
+    };
+}
+const executor = async (options, context) => {
+    try {
+        const result = await inspectLocalDevelopment(options, context);
+        devkit_1.logger.info(`[dev-doctor] ${JSON.stringify(result, null, 2)}`);
+        if (result.tls === 'missing') {
+            devkit_1.logger.warn('Run dev-setup, inspect the generated root, then explicitly rerun with --trust.');
+        }
+        if (result.gateway === 'missing') {
+            devkit_1.logger.warn('The optional machine gateway is unavailable. Rerun dev-setup before testing experimental portless mode.');
+        }
+        if (result.trust === 'missing') {
+            devkit_1.logger.warn('The EBK root is not trusted in the detected user/browser trust store. Review it and run dev-setup --trust explicitly.');
+        }
+        if (result.connectivity === 'missing') {
+            devkit_1.logger.warn('The supported explicit-port TLS path did not complete a live trusted handshake. Review the reported effect-probe issue before starting a fleet.');
+        }
+        if (result.portless === 'unreachable') {
+            devkit_1.logger.warn('Portless intent is recorded but a live loopback port-443 TLS handshake failed. Portless remains unavailable; use the supported explicit-port origin.');
+        }
+        return {
+            success: result.tls === 'ready' &&
+                result.trust === 'ready' &&
+                result.connectivity === 'ready',
+        };
+    }
+    catch (error) {
+        devkit_1.logger.error(`[dev-doctor] ${error instanceof Error ? error.message : String(error)}`);
+        return { success: false };
+    }
+};
+exports.default = executor;
+//# sourceMappingURL=dev-doctor.js.map

package/src/executors/dev-doctor/dev-doctor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dev-doctor.js","sourceRoot":"","sources":["../../../../../../packages/nx/src/executors/dev-doctor/dev-doctor.ts"],"names":[],"mappings":";;AA+DA,0DA8DC;AAiBD,0DAmNC;AAjWD,uCAAgF;AAChF,2DAAkD;AAClD,6CAA0D;AAC1D,qCAAmD;AACnD,qCAA4C;AAC5C,yCAAiC;AAEjC,+DAGsC;AACtC,2DAGoC;AACpC,2DAIoC;AACpC,6DAIqC;AACrC,mDAGgC;AAmChC,SAAgB,uBAAuB,CACrC,mBAA2B,EAC3B,2BAAmC,EACnC,mBAA2B,EAC3B,QAAgB;IAEhB,IAAI,CAAC;QACH,IAAI,IAAA,kBAAQ,GAAE,KAAK,QAAQ,EAAE,CAAC;YAC5B,IAAA,iCAAY,EACV,UAAU,EACV;gBACE,aAAa;gBACb,IAAI;gBACJ,IAAI;gBACJ,IAAI;gBACJ,mBAAmB;gBACnB,IAAI;gBACJ,2BAA2B;gBAC3B,IAAI;gBACJ,KAAK;gBACL,IAAI;gBACJ,QAAQ;aACT,EACD,EAAE,KAAK,EAAE,MAAM,EAAE,CAClB,CAAC;YACF,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,6BAAe,CAAC,IAAA,sBAAY,EAAC,mBAAmB,CAAC,CAAC;aACpE,cAAc,CAAC;QAClB,IAAI,IAAA,kBAAQ,GAAE,KAAK,OAAO,EAAE,CAAC;YAC3B,IAAA,iCAAY,EACV,UAAU,EACV;gBACE,OAAO;gBACP,QAAQ;gBACR,MAAM;gBACN,IAAI,6BAAe,CACjB,IAAA,sBAAY,EAAC,mBAAmB,CAAC,CAClC,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;aAChC,EACD,EAAE,KAAK,EAAE,MAAM,EAAE,CAClB,CAAC;YACF,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,MAAM,GAAG,GAAG,IAAA,iCAAY,EACtB,UAAU,EACV;YACE,IAAI;YACJ,IAAI;YACJ,OAAO,IAAA,gBAAI,EAAC,IAAA,iBAAO,GAAE,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;YACzC,IAAI;YACJ,+BAA+B;YAC/B,IAAI;SACL,EACD,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CACxD,CAAC;QACF,OAAO,IAAI,6BAAe,CAAC,GAAG,CAAC,CAAC,cAAc,KAAK,QAAQ;YACzD,CAAC,CAAC,OAAO;YACT,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,cAAc;IACrB,MAAM,QAAQ,GAAG,OAAO,CAAC,uBAAuB,CAAyB,CAAC;IAC1E,OAAO,QAAQ,CAAC,OAAO,IAAI,OAAO,CAAC;AACrC,CAAC;AAED,SAAS,yBAAyB,CAChC,mBAA2B;IAE3B,0EAA0E;IAC1E,6EAA6E;IAC7E,0EAA0E;IAC1E,kEAAkE;IAClE,OAAO,IAAA,sBAAY,EAAC,mBAAmB,CAAC,CAAC;AAC3C,CAAC;AAEM,KAAK,UAAU,uBAAuB,CAC3C,OAAyB,EACzB,OAAsD,EACtD,eAAsC,EAAE;IAExC,MAAM,QAAQ,GACZ,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE;QACxB,IAAA,iCAAmB,EACjB,IAAA,2BAAa,EAAC;YACZ,YAAY,EAAE,OAAO,CAAC,IAAI;YAC1B,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,UAAU;YAClC,aAAa,EAAE,OAAO,CAAC,WAAW,IAAI,WAAW;SAClD,CAAC,CACH,CAAC;IACJ,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,CAAC,eAAe,IAAI,kCAAoB,CAAC,CAC3E,QAAQ,CACT,CAAC;IACF,MAAM,KAAK,GAAG,IAAA,sBAAa,EAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IACE,CAAC,IAAA,oBAAU,EAAC,KAAK,CAAC,eAAe,CAAC;QAClC,CAAC,IAAA,oBAAU,EAAC,KAAK,CAAC,uBAAuB,CAAC;QAC1C,CAAC,IAAA,oBAAU,EAAC,KAAK,CAAC,eAAe,CAAC;QAClC,CAAC,IAAA,oBAAU,EAAC,KAAK,CAAC,eAAe,CAAC;QAClC,CAAC,IAAA,oBAAU,EAAC,KAAK,CAAC,OAAO,CAAC;QAC1B,CAAC,IAAA,oBAAU,EAAC,KAAK,CAAC,UAAU,CAAC,EAC7B,CAAC;QACD,OAAO;YACL,YAAY,EAAE,SAAS;YACvB,OAAO,EAAE,SAAS;YAClB,QAAQ;YACR,MAAM,EAAE,CAAC,mDAAmD,CAAC;YAC7D,QAAQ,EAAE,gBAAgB;YAC1B,QAAQ;YACR,GAAG,EAAE,SAAS;YACd,KAAK,EAAE,SAAS;SACjB,CAAC;IACJ,CAAC;IACD,IAAA,oCAA2B,EAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC3C,IAAA,oCAA2B,EAAC,KAAK,CAAC,eAAe,CAAC,CAAC;IACnD,MAAM,WAAW,GAAG,IAAI,6BAAe,CAAC,IAAA,sBAAY,EAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC;IAC7E,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CACb,0CAA0C,QAAQ,mEAAmE,CACtH,CAAC;IACJ,CAAC;IACD,IAAI,WAAW,CAAC,WAAW,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CACb,sCAAsC,WAAW,CAAC,OAAO,GAAG,CAC7D,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,CAAC,YAAY,CAAC,YAAY,IAAI,uBAAuB,CAAC,CAClE,KAAK,CAAC,eAAe,EACrB,KAAK,CAAC,uBAAuB,EAC7B,KAAK,CAAC,eAAe,EACrB,QAAQ,CACT,CAAC;IACF,IAAI,WAAuC,CAAC;IAC5C,IAAI,YAAY,GAAoC,SAAS,CAAC;IAC9D,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;QACtB,IAAI,CAAC;YACH,WAAW,GAAG,yBAAyB,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;YAC/D,MAAM,CAAC,YAAY,CAAC,gBAAgB,IAAI,sCAAyB,CAAC,CAAC;gBACjE,EAAE,EAAE,WAAW;gBACf,WAAW,EAAE,IAAA,sBAAY,EAAC,KAAK,CAAC,eAAe,CAAC;gBAChD,QAAQ;gBACR,GAAG,EAAE,IAAA,sBAAY,EAAC,KAAK,CAAC,OAAO,CAAC;aACjC,CAAC,CAAC;YACH,YAAY,GAAG,OAAO,CAAC;QACzB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CACT,oDACE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,EAAE,CACH,CAAC;QACJ,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CACT,qFAAqF,CACtF,CAAC;IACJ,CAAC;IAED,IAAI,KAA+B,CAAC;IACpC,IAAI,IAAA,oBAAU,EAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAChB,IAAA,sBAAY,EAAC,KAAK,CAAC,YAAY,EAAE,MAAM,CAAC,CACzB,CAAC;QACpB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CACT,kCACE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,EAAE,CACH,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,OAAO,GAA+B,SAAS,CAAC;IACpD,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,IAAI,+BAAkB,CAAC;IACrD,MAAM,UAAU,GAAG,IAAA,sBAAY,EAAC,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACjE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAI,CACvB,KAAK,CAAC,aAAa,EACnB;YACE,MAAM,EAAE,QAAQ;YAChB,UAAU;SACX,CACF,CAAC;QACF,IAAI,MAAM,CAAC,eAAe,KAAK,uCAAwB,EAAE,CAAC;YACxD,MAAM,CAAC,IAAI,CACT,4BAA4B,MAAM,CAAC,eAAe,mBAAmB,uCAAwB,GAAG,CACjG,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,OAAO,GAAG,OAAO,CAAC;QACpB,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,CACT,wCACE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,EAAE,CACH,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,GAAgC,KAAK,EAAE,QAAQ;QACzD,CAAC,CAAC,aAAa;QACf,CAAC,CAAC,gBAAgB,CAAC;IACrB,IAAI,KAAK,EAAE,QAAQ,EAAE,CAAC;QACpB,IACE,KAAK,CAAC,aAAa,KAAK,CAAC;YACzB,CAAC,KAAK,CAAC,UAAU;YACjB,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC,EAC1C,CAAC;YACD,MAAM,CAAC,IAAI,CACT,gFAAgF,CACjF,CAAC;QACJ,CAAC;aAAM,IACL,OAAO,KAAK,OAAO;YACnB,KAAK,KAAK,OAAO;YACjB,YAAY,KAAK,OAAO;YACxB,WAAW,EACX,CAAC;YACD,MAAM,SAAS,GAAG,cAAc,IAAA,wBAAU,GAAE,EAAE,CAAC;YAC/C,MAAM,YAAY,GAEd;gBACF,MAAM,EAAE,UAAU;gBAClB,UAAU;gBACV,sBAAsB,EAAE,cAAc,EAAE;gBACxC,QAAQ;gBACR,QAAQ,EAAE;oBACR,OAAO,EAAE,uCAAwB;oBACjC,OAAO,EAAE,uCAAwB;iBAClC;gBACD,SAAS,EAAE,MAAM;gBACjB,SAAS;gBACT,sBAAsB,EAAE,uCAAwB;aACjD,CAAC;YACF,IAAI,UAAU,GAAG,KAAK,CAAC;YACvB,IAAI,CAAC;gBACH,IAAI,CAAC;oBACH,MAAM,IAAI,CAAsB,KAAK,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;oBACnE,UAAU,GAAG,IAAI,CAAC;gBACpB,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IACE,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC;wBACzB,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,wCAAwC,CAAC,EACjE,CAAC;wBACD,MAAM,KAAK,CAAC;oBACd,CAAC;gBACH,CAAC;gBACD,MAAM,CAAC,YAAY,CAAC,gBAAgB,IAAI,6BAAgB,CAAC,CAAC;oBACxD,EAAE,EAAE,WAAW;oBACf,QAAQ;oBACR,IAAI,EAAE,GAAG;iBACV,CAAC,CAAC;gBACH,QAAQ,GAAG,OAAO,CAAC;YACrB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,CACT,2EACE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,EAAE,CACH,CAAC;YACJ,CAAC;oBAAS,CAAC;gBACT,IAAI,UAAU,EAAE,CAAC;oBACf,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE;wBAC9B,MAAM,EAAE,YAAY;wBACpB,UAAU;wBACV,QAAQ;wBACR,SAAS;qBACV,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CACjB,MAAM,CAAC,IAAI,CACT,mDACE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,EAAE,CACH,CACF,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO;QACL,kBAAkB,EAAE,WAAW,CAAC,OAAO;QACvC,YAAY;QACZ,OAAO;QACP,QAAQ;QACR,MAAM;QACN,QAAQ;QACR,QAAQ;QACR,GAAG,EAAE,OAAO;QACZ,KAAK;KACN,CAAC;AACJ,CAAC;AAED,MAAM,QAAQ,GAAsC,KAAK,EACvD,OAAO,EACP,OAAO,EACP,EAAE;IACF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC/D,eAAM,CAAC,IAAI,CAAC,gBAAgB,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QAC/D,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YAC7B,eAAM,CAAC,IAAI,CACT,gFAAgF,CACjF,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YACjC,eAAM,CAAC,IAAI,CACT,yGAAyG,CAC1G,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC/B,eAAM,CAAC,IAAI,CACT,uHAAuH,CACxH,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YACtC,eAAM,CAAC,IAAI,CACT,iJAAiJ,CAClJ,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,CAAC,QAAQ,KAAK,aAAa,EAAE,CAAC;YACtC,eAAM,CAAC,IAAI,CACT,sJAAsJ,CACvJ,CAAC;QACJ,CAAC;QACD,OAAO;YACL,OAAO,EACL,MAAM,CAAC,GAAG,KAAK,OAAO;gBACtB,MAAM,CAAC,KAAK,KAAK,OAAO;gBACxB,MAAM,CAAC,YAAY,KAAK,OAAO;SAClC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,eAAM,CAAC,KAAK,CACV,gBAAgB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACzE,CAAC;QACF,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5B,CAAC;AACH,CAAC,CAAC;AAEF,kBAAe,QAAQ,CAAC"}

package/src/executors/dev-doctor/schema.json

@@ -0,0 +1,17 @@
+{
+  "$schema": "https://json-schema.org/schema",
+  "version": 2,
+  "title": "Empire Builder Kit local development doctor",
+  "description": "Inspect resolver, certificate, key-permission, and gateway health without mutation.",
+  "type": "object",
+  "additionalProperties": false,
+  "properties": {
+    "appData": { "type": "string" },
+    "hostname": { "type": "string" },
+    "stage": {
+      "type": "string",
+      "pattern": "^[a-z0-9][a-z0-9-]*$",
+      "default": "personal"
+    }
+  }
+}

package/src/executors/dev-setup/dev-setup.d.ts

@@ -0,0 +1,11 @@
+import { type PromiseExecutor } from '@nx/devkit';
+interface DevSetupOptions {
+    appData?: string;
+    hostSuffix?: string;
+    portless?: boolean;
+    remove?: boolean;
+    trust?: boolean;
+    upgrade?: boolean;
+}
+declare const executor: PromiseExecutor<DevSetupOptions>;
+export default executor;