@marinoscar/platform-api 0.0.0-stage → 0.1.0-next.10

package/dist/host/deployment/deployment-network.js

@@ -0,0 +1,89 @@
+"use strict";
+// =============================================================================
+// DEPLOYMENT_NETWORK — does this deployment have internet egress? (#773)
+// =============================================================================
+//
+// On-prem and customer-cloud installs may run with no route to the internet.
+// This variable is the operator's declaration of that fact: `online` (the
+// default) or `air-gapped`. It changes one thing today: the `network.egress`
+// doctor check stops merely listing the outbound dependencies and GRADES them
+// (a required public dependency is `fail`, optional ones `warn`). See
+// docs/runbooks/air-gapped.md.
+//
+// A DEPLOYMENT-LEVEL FACT, AND THEREFORE AN ENVIRONMENT VARIABLE, exactly like
+// `DEPLOYMENT_MODE` (./deployment-mode.ts, read its header): the network
+// topology is chosen at install time by whoever runs the infrastructure, not
+// by an administrator at runtime.
+//
+// ⚠ AN INVALID VALUE FAILS STARTUP, like `DEPLOYMENT_MODE`. Guessing `online`
+// would silently hide every air-gap problem the operator asked to be shown.
+// Only unset (or empty) has a default, `online`.
+//
+// The vocabulary (`DEPLOYMENT_NETWORKS`) is the doctor slice's, so the check
+// and this parser cannot disagree about what the values are. This module is
+// PURE: no Nest, no `process.env`.
+// =============================================================================
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_DEPLOYMENT_NETWORK = exports.DEPLOYMENT_NETWORK_ENV_VAR = exports.DEPLOYMENT_NETWORKS = void 0;
+exports.parseDeploymentNetwork = parseDeploymentNetwork;
+exports.describeDeploymentNetwork = describeDeploymentNetwork;
+exports.verifyDeploymentNetworkAtStartup = verifyDeploymentNetworkAtStartup;
+const index_1 = require("../../doctor/index");
+Object.defineProperty(exports, "DEPLOYMENT_NETWORKS", { enumerable: true, get: function () { return index_1.DEPLOYMENT_NETWORKS; } });
+/** The environment variable this module parses.
+ *
+ * @stability experimental
+ */
+exports.DEPLOYMENT_NETWORK_ENV_VAR = 'DEPLOYMENT_NETWORK';
+/** What an unset or empty `DEPLOYMENT_NETWORK` means.
+ *
+ * @stability experimental
+ */
+exports.DEFAULT_DEPLOYMENT_NETWORK = 'online';
+/**
+ * Parses `DEPLOYMENT_NETWORK`.
+ *
+ * - `undefined`, `''` or whitespace only → `'online'`.
+ * - Surrounding whitespace is trimmed.
+ * - ⚠ CASE-SENSITIVE, matching the CLI wizard's validator (`Air-Gapped` is refused).
+ * - Anything else throws, naming the variable and the allowed values.
+ *
+ * @throws Error on any value that is not a deployment network.
+ *
+ * @stability experimental
+ */
+function parseDeploymentNetwork(raw) {
+    const value = (raw ?? '').trim();
+    if (value === '')
+        return exports.DEFAULT_DEPLOYMENT_NETWORK;
+    if (index_1.DEPLOYMENT_NETWORKS.includes(value)) {
+        return value;
+    }
+    throw new Error(`${exports.DEPLOYMENT_NETWORK_ENV_VAR}=${JSON.stringify(raw)} is not a valid deployment network. ` +
+        `Allowed values: ${index_1.DEPLOYMENT_NETWORKS.join(', ')} (unset means ${exports.DEFAULT_DEPLOYMENT_NETWORK}). ` +
+        'The API refuses to start rather than guess, because guessing online would hide every ' +
+        'air-gap problem the Doctor is meant to show. Fix the value in the deployment environment ' +
+        '(infra/compose/.env) and restart.');
+}
+/** One line for the startup log.
+ *
+ * @stability experimental
+ */
+function describeDeploymentNetwork(network) {
+    return network === 'air-gapped'
+        ? `Deployment network: air-gapped (${exports.DEPLOYMENT_NETWORK_ENV_VAR}). The Doctor grades outbound dependencies (network.egress).`
+        : `Deployment network: online (${exports.DEPLOYMENT_NETWORK_ENV_VAR}).`;
+}
+/**
+ * The bootstrap check: parse the variable, log the network once, return it.
+ * Called from `main.ts` beside `verifyDeploymentModeAtStartup`, before the Nest
+ * application exists, so a typo never opens a database connection.
+ *
+ * @stability experimental
+ */
+function verifyDeploymentNetworkAtStartup(env, logger) {
+    const network = parseDeploymentNetwork(env[exports.DEPLOYMENT_NETWORK_ENV_VAR]);
+    logger.log(describeDeploymentNetwork(network));
+    return network;
+}
+//# sourceMappingURL=deployment-network.js.map

package/dist/host/deployment/deployment-network.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployment-network.js","sourceRoot":"","sources":["../../../src/host/deployment/deployment-network.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,yEAAyE;AACzE,gFAAgF;AAChF,EAAE;AACF,6EAA6E;AAC7E,0EAA0E;AAC1E,6EAA6E;AAC7E,8EAA8E;AAC9E,sEAAsE;AACtE,+BAA+B;AAC/B,EAAE;AACF,+EAA+E;AAC/E,yEAAyE;AACzE,6EAA6E;AAC7E,kCAAkC;AAClC,EAAE;AACF,8EAA8E;AAC9E,4EAA4E;AAC5E,iDAAiD;AACjD,EAAE;AACF,6EAA6E;AAC7E,4EAA4E;AAC5E,mCAAmC;AACnC,gFAAgF;;;AA8BhF,wDAgBC;AAMD,8DAIC;AASD,4EASC;AAxED,8CAAiF;AAExE,oGAFA,2BAAmB,OAEA;AAE5B;;;GAGG;AACU,QAAA,0BAA0B,GAAG,oBAAoB,CAAC;AAE/D;;;GAGG;AACU,QAAA,0BAA0B,GAAsB,QAAQ,CAAC;AAEtE;;;;;;;;;;;GAWG;AACH,SAAgB,sBAAsB,CAAC,GAAuB;IAC5D,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAEjC,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,kCAA0B,CAAC;IAEpD,IAAK,2BAAyC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/D,OAAO,KAA0B,CAAC;IACpC,CAAC;IAED,MAAM,IAAI,KAAK,CACb,GAAG,kCAA0B,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,sCAAsC;QACxF,mBAAmB,2BAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,kCAA0B,KAAK;QACjG,uFAAuF;QACvF,2FAA2F;QAC3F,mCAAmC,CACtC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAgB,yBAAyB,CAAC,OAA0B;IAClE,OAAO,OAAO,KAAK,YAAY;QAC7B,CAAC,CAAC,mCAAmC,kCAA0B,8DAA8D;QAC7H,CAAC,CAAC,+BAA+B,kCAA0B,IAAI,CAAC;AACpE,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,gCAAgC,CAC9C,GAAuC,EACvC,MAAsC;IAEtC,MAAM,OAAO,GAAG,sBAAsB,CAAC,GAAG,CAAC,kCAA0B,CAAC,CAAC,CAAC;IAExE,MAAM,CAAC,GAAG,CAAC,yBAAyB,CAAC,OAAO,CAAC,CAAC,CAAC;IAE/C,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/host/deployment/deployment-network.service.d.ts

@@ -0,0 +1,28 @@
+import { ConfigService } from '@nestjs/config';
+import type { DeploymentNetworkSource } from '../../doctor/index';
+import { type DeploymentNetwork } from './deployment-network';
+/**
+ * The configuration key the app publishes the raw `DEPLOYMENT_NETWORK` string
+ * under (`deployment.network`). An app that publishes none is read from the
+ * environment variable directly.
+ *
+ * @stability experimental
+ */
+export declare const DEPLOYMENT_NETWORK_CONFIG_KEY = "deployment.network";
+/**
+ * The parsed `DEPLOYMENT_NETWORK` (#773), bound globally as the doctor slice's
+ * `DEPLOYMENT_NETWORK_SOURCE` so `network.egress` knows whether to grade.
+ *
+ * Parsed ONCE, in the constructor, from the raw string `configuration.ts`
+ * publishes as `deployment.network`, through the same pure parser `main.ts`
+ * already ran at bootstrap: an invalid value fails the container build too.
+ *
+ * @stability experimental
+ */
+export declare class DeploymentNetworkService implements DeploymentNetworkSource {
+    readonly network: DeploymentNetwork;
+    constructor(config: ConfigService);
+    /** Whether the deployment declared it has no internet egress. */
+    get airGapped(): boolean;
+}
+//# sourceMappingURL=deployment-network.service.d.ts.map

package/dist/host/deployment/deployment-network.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployment-network.service.d.ts","sourceRoot":"","sources":["../../../src/host/deployment/deployment-network.service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAE/C,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAElE,OAAO,EAAsD,KAAK,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAElH;;;;;;GAMG;AACH,eAAO,MAAM,6BAA6B,uBAAuB,CAAC;AAElE;;;;;;;;;GASG;AACH,qBACa,wBAAyB,YAAW,uBAAuB;IACtE,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;gBAExB,MAAM,EAAE,aAAa;IAMjC,iEAAiE;IACjE,IAAI,SAAS,IAAI,OAAO,CAEvB;CACF"}

package/dist/host/deployment/deployment-network.service.js

@@ -0,0 +1,49 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DeploymentNetworkService = exports.DEPLOYMENT_NETWORK_CONFIG_KEY = void 0;
+const common_1 = require("@nestjs/common");
+const config_1 = require("@nestjs/config");
+const deployment_network_1 = require("./deployment-network");
+/**
+ * The configuration key the app publishes the raw `DEPLOYMENT_NETWORK` string
+ * under (`deployment.network`). An app that publishes none is read from the
+ * environment variable directly.
+ *
+ * @stability experimental
+ */
+exports.DEPLOYMENT_NETWORK_CONFIG_KEY = 'deployment.network';
+/**
+ * The parsed `DEPLOYMENT_NETWORK` (#773), bound globally as the doctor slice's
+ * `DEPLOYMENT_NETWORK_SOURCE` so `network.egress` knows whether to grade.
+ *
+ * Parsed ONCE, in the constructor, from the raw string `configuration.ts`
+ * publishes as `deployment.network`, through the same pure parser `main.ts`
+ * already ran at bootstrap: an invalid value fails the container build too.
+ *
+ * @stability experimental
+ */
+let DeploymentNetworkService = class DeploymentNetworkService {
+    network;
+    constructor(config) {
+        this.network = (0, deployment_network_1.parseDeploymentNetwork)(config.get(exports.DEPLOYMENT_NETWORK_CONFIG_KEY) ?? process.env[deployment_network_1.DEPLOYMENT_NETWORK_ENV_VAR]);
+    }
+    /** Whether the deployment declared it has no internet egress. */
+    get airGapped() {
+        return this.network === 'air-gapped';
+    }
+};
+exports.DeploymentNetworkService = DeploymentNetworkService;
+exports.DeploymentNetworkService = DeploymentNetworkService = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [config_1.ConfigService])
+], DeploymentNetworkService);
+//# sourceMappingURL=deployment-network.service.js.map

package/dist/host/deployment/deployment-network.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployment-network.service.js","sourceRoot":"","sources":["../../../src/host/deployment/deployment-network.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA4C;AAC5C,2CAA+C;AAI/C,6DAAkH;AAElH;;;;;;GAMG;AACU,QAAA,6BAA6B,GAAG,oBAAoB,CAAC;AAElE;;;;;;;;;GASG;AAEI,IAAM,wBAAwB,GAA9B,MAAM,wBAAwB;IAC1B,OAAO,CAAoB;IAEpC,YAAY,MAAqB;QAC/B,IAAI,CAAC,OAAO,GAAG,IAAA,2CAAsB,EACnC,MAAM,CAAC,GAAG,CAAS,qCAA6B,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,+CAA0B,CAAC,CAC7F,CAAC;IACJ,CAAC;IAED,iEAAiE;IACjE,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,OAAO,KAAK,YAAY,CAAC;IACvC,CAAC;CACF,CAAA;AAbY,4DAAwB;mCAAxB,wBAAwB;IADpC,IAAA,mBAAU,GAAE;qCAIS,sBAAa;GAHtB,wBAAwB,CAapC"}

package/dist/host/doctor/db-connection.doctor-check.d.ts

@@ -0,0 +1,30 @@
+import { OnModuleInit } from '@nestjs/common';
+import { type PrismaClientLike } from '../../core/index';
+import { DoctorCheckRegistry, type DoctorCheck, type DoctorCheckOutcome } from '../../doctor/index';
+/**
+ * Above this round trip the database answers, but slowly enough to notice.
+ *
+ * @stability experimental
+ */
+export declare const DB_SLOW_LATENCY_MS = 500;
+/**
+ * `core` / `db.connection` — the database answers `SELECT 1`.
+ *
+ * One `SELECT 1` through the `PLATFORM_PRISMA` host port, timed. The check has
+ * no other dependency: an app binds nothing for it beyond the port every
+ * slice already needs.
+ *
+ * @stability experimental
+ */
+export declare class DbConnectionDoctorCheck implements DoctorCheck, OnModuleInit {
+    private readonly registry;
+    private readonly prisma?;
+    readonly id = "db.connection";
+    readonly category = "core";
+    readonly label = "Database connection";
+    constructor(registry: DoctorCheckRegistry, prisma?: PrismaClientLike | undefined);
+    /** Registers the check with the Doctor. */
+    onModuleInit(): void;
+    run(): Promise<DoctorCheckOutcome>;
+}
+//# sourceMappingURL=db-connection.doctor-check.d.ts.map

package/dist/host/doctor/db-connection.doctor-check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"db-connection.doctor-check.d.ts","sourceRoot":"","sources":["../../../src/host/doctor/db-connection.doctor-check.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsB,YAAY,EAAY,MAAM,gBAAgB,CAAC;AAE5E,OAAO,EAAmB,KAAK,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAC1E,OAAO,EAAE,mBAAmB,EAAE,KAAK,WAAW,EAAE,KAAK,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAEpG;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,MAAM,CAAC;AAEtC;;;;;;;;GAQG;AACH,qBACa,uBAAwB,YAAW,WAAW,EAAE,YAAY;IAMrE,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACY,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;IAN/D,QAAQ,CAAC,EAAE,mBAAmB;IAC9B,QAAQ,CAAC,QAAQ,UAAU;IAC3B,QAAQ,CAAC,KAAK,yBAAyB;gBAGpB,QAAQ,EAAE,mBAAmB,EACQ,MAAM,CAAC,EAAE,gBAAgB,YAAA;IAGjF,2CAA2C;IAC3C,YAAY,IAAI,IAAI;IAId,GAAG,IAAI,OAAO,CAAC,kBAAkB,CAAC;CAuCzC"}

package/dist/host/doctor/db-connection.doctor-check.js

@@ -0,0 +1,90 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DbConnectionDoctorCheck = exports.DB_SLOW_LATENCY_MS = void 0;
+const common_1 = require("@nestjs/common");
+const index_1 = require("../../core/index");
+const index_2 = require("../../doctor/index");
+/**
+ * Above this round trip the database answers, but slowly enough to notice.
+ *
+ * @stability experimental
+ */
+exports.DB_SLOW_LATENCY_MS = 500;
+/**
+ * `core` / `db.connection` — the database answers `SELECT 1`.
+ *
+ * One `SELECT 1` through the `PLATFORM_PRISMA` host port, timed. The check has
+ * no other dependency: an app binds nothing for it beyond the port every
+ * slice already needs.
+ *
+ * @stability experimental
+ */
+let DbConnectionDoctorCheck = class DbConnectionDoctorCheck {
+    registry;
+    prisma;
+    id = 'db.connection';
+    category = 'core';
+    label = 'Database connection';
+    constructor(registry, prisma) {
+        this.registry = registry;
+        this.prisma = prisma;
+    }
+    /** Registers the check with the Doctor. */
+    onModuleInit() {
+        this.registry.register(this);
+    }
+    async run() {
+        if (!this.prisma) {
+            return { status: 'skip', detail: 'No database client is bound to PLATFORM_PRISMA, so there is nothing to probe' };
+        }
+        try {
+            const startedAt = Date.now();
+            await this.prisma.$queryRaw `SELECT 1`;
+            const latencyMs = Date.now() - startedAt;
+            if (latencyMs > exports.DB_SLOW_LATENCY_MS) {
+                return {
+                    status: 'warn',
+                    detail: `Connected, but SELECT 1 took ${latencyMs} ms`,
+                    remedy: 'Check the database host load and the network path between the API and PostgreSQL ' +
+                        '(POSTGRES_HOST); a healthy round trip is a few milliseconds.',
+                    data: { latencyMs },
+                };
+            }
+            return {
+                status: 'pass',
+                detail: `Connected in ${latencyMs} ms`,
+                data: { latencyMs },
+            };
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : 'Unknown error';
+            return {
+                status: 'fail',
+                detail: 'The database did not answer',
+                remedy: 'Check PostgreSQL is running and reachable, and that the POSTGRES_HOST, POSTGRES_PORT, ' +
+                    'POSTGRES_USER, POSTGRES_PASSWORD and POSTGRES_DB variables are correct.',
+                error: message,
+            };
+        }
+    }
+};
+exports.DbConnectionDoctorCheck = DbConnectionDoctorCheck;
+exports.DbConnectionDoctorCheck = DbConnectionDoctorCheck = __decorate([
+    (0, common_1.Injectable)(),
+    __param(1, (0, common_1.Optional)()),
+    __param(1, (0, common_1.Inject)(index_1.PLATFORM_PRISMA)),
+    __metadata("design:paramtypes", [index_2.DoctorCheckRegistry, Object])
+], DbConnectionDoctorCheck);
+//# sourceMappingURL=db-connection.doctor-check.js.map

package/dist/host/doctor/db-connection.doctor-check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"db-connection.doctor-check.js","sourceRoot":"","sources":["../../../src/host/doctor/db-connection.doctor-check.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAA4E;AAE5E,4CAA0E;AAC1E,8CAAoG;AAEpG;;;;GAIG;AACU,QAAA,kBAAkB,GAAG,GAAG,CAAC;AAEtC;;;;;;;;GAQG;AAEI,IAAM,uBAAuB,GAA7B,MAAM,uBAAuB;IAMf;IACqC;IAN/C,EAAE,GAAG,eAAe,CAAC;IACrB,QAAQ,GAAG,MAAM,CAAC;IAClB,KAAK,GAAG,qBAAqB,CAAC;IAEvC,YACmB,QAA6B,EACQ,MAAyB;QAD9D,aAAQ,GAAR,QAAQ,CAAqB;QACQ,WAAM,GAAN,MAAM,CAAmB;IAC9E,CAAC;IAEJ,2CAA2C;IAC3C,YAAY;QACV,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,GAAG;QACP,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,8EAA8E,EAAE,CAAC;QACpH,CAAC;QAED,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC7B,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAA,UAAU,CAAC;YACtC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YAEzC,IAAI,SAAS,GAAG,0BAAkB,EAAE,CAAC;gBACnC,OAAO;oBACL,MAAM,EAAE,MAAM;oBACd,MAAM,EAAE,gCAAgC,SAAS,KAAK;oBACtD,MAAM,EACJ,mFAAmF;wBACnF,8DAA8D;oBAChE,IAAI,EAAE,EAAE,SAAS,EAAE;iBACpB,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,gBAAgB,SAAS,KAAK;gBACtC,IAAI,EAAE,EAAE,SAAS,EAAE;aACpB,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YAEzE,OAAO;gBACL,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,6BAA6B;gBACrC,MAAM,EACJ,wFAAwF;oBACxF,yEAAyE;gBAC3E,KAAK,EAAE,OAAO;aACf,CAAC;QACJ,CAAC;IACH,CAAC;CACF,CAAA;AAtDY,0DAAuB;kCAAvB,uBAAuB;IADnC,IAAA,mBAAU,GAAE;IAQR,WAAA,IAAA,iBAAQ,GAAE,CAAA;IAAE,WAAA,IAAA,eAAM,EAAC,uBAAe,CAAC,CAAA;qCADT,2BAAmB;GANrC,uBAAuB,CAsDnC"}

package/dist/host/doctor/db-migrations.doctor-check.d.ts

@@ -0,0 +1,48 @@
+import { OnModuleInit } from '@nestjs/common';
+import { type PrismaClientLike } from '../../core/index';
+import { DoctorCheckRegistry, type DoctorCheck, type DoctorCheckOutcome } from '../../doctor/index';
+/**
+ * What the one `_prisma_migrations` read returns.
+ *
+ * @stability experimental
+ */
+export interface MigrationState {
+    /** Finished and not rolled back. */
+    applied: number;
+    /** Started and never finished, not rolled back: failed or still running. */
+    unfinished: number;
+    /** Rolled back, with no later successful application of the same name. */
+    rolledBack: number;
+    /** The oldest unfinished migration's name, for the detail line. */
+    firstUnfinished: string | null;
+}
+/**
+ * Pure: the verdict on the migration history.
+ *
+ * @param state - the counts one `_prisma_migrations` read returns.
+ * @returns the check outcome.
+ *
+ * @stability experimental
+ */
+export declare function decideMigrations(state: MigrationState): DoctorCheckOutcome;
+/**
+ * `core` / `db.migrations` — no migration is half-applied.
+ *
+ * One read-only `SELECT` against Prisma's own bookkeeping table, through the
+ * `PLATFORM_PRISMA` host port.
+ *
+ * @stability experimental
+ */
+export declare class DbMigrationsDoctorCheck implements DoctorCheck, OnModuleInit {
+    private readonly registry;
+    private readonly prisma?;
+    readonly id = "db.migrations";
+    readonly category = "core";
+    readonly label = "Database migrations";
+    readonly dependsOn: string[];
+    constructor(registry: DoctorCheckRegistry, prisma?: PrismaClientLike | undefined);
+    /** Registers the check with the Doctor. */
+    onModuleInit(): void;
+    run(): Promise<DoctorCheckOutcome>;
+}
+//# sourceMappingURL=db-migrations.doctor-check.d.ts.map

package/dist/host/doctor/db-migrations.doctor-check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"db-migrations.doctor-check.d.ts","sourceRoot":"","sources":["../../../src/host/doctor/db-migrations.doctor-check.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsB,YAAY,EAAY,MAAM,gBAAgB,CAAC;AAE5E,OAAO,EAAmB,KAAK,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAC1E,OAAO,EAAE,mBAAmB,EAAE,KAAK,WAAW,EAAE,KAAK,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAEpG;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,oCAAoC;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,4EAA4E;IAC5E,UAAU,EAAE,MAAM,CAAC;IACnB,0EAA0E;IAC1E,UAAU,EAAE,MAAM,CAAC;IACnB,mEAAmE;IACnE,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,cAAc,GAAG,kBAAkB,CAoC1E;AAED;;;;;;;GAOG;AACH,qBACa,uBAAwB,YAAW,WAAW,EAAE,YAAY;IAOrE,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACY,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;IAP/D,QAAQ,CAAC,EAAE,mBAAmB;IAC9B,QAAQ,CAAC,QAAQ,UAAU;IAC3B,QAAQ,CAAC,KAAK,yBAAyB;IACvC,QAAQ,CAAC,SAAS,WAAqB;gBAGpB,QAAQ,EAAE,mBAAmB,EACQ,MAAM,CAAC,EAAE,gBAAgB,YAAA;IAGjF,2CAA2C;IAC3C,YAAY,IAAI,IAAI;IAId,GAAG,IAAI,OAAO,CAAC,kBAAkB,CAAC;CA0CzC"}

package/dist/host/doctor/db-migrations.doctor-check.js

@@ -0,0 +1,128 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DbMigrationsDoctorCheck = void 0;
+exports.decideMigrations = decideMigrations;
+const common_1 = require("@nestjs/common");
+const index_1 = require("../../core/index");
+const index_2 = require("../../doctor/index");
+/**
+ * Pure: the verdict on the migration history.
+ *
+ * @param state - the counts one `_prisma_migrations` read returns.
+ * @returns the check outcome.
+ *
+ * @stability experimental
+ */
+function decideMigrations(state) {
+    const data = { applied: state.applied, unfinished: state.unfinished, rolledBack: state.rolledBack };
+    if (state.unfinished > 0) {
+        return {
+            status: 'fail',
+            detail: `${state.unfinished} migration(s) started but did not finish` +
+                (state.firstUnfinished ? ` (first: ${state.firstUnfinished})` : ''),
+            remedy: 'Inspect the failed migration and fix the database, then mark it with ' +
+                '`node scripts/prisma-env.js migrate resolve --rolled-back <name>` (or --applied) in the ' +
+                'api container and run `npm run prisma:migrate` again.',
+            data,
+        };
+    }
+    if (state.rolledBack > 0) {
+        return {
+            status: 'fail',
+            detail: `${state.rolledBack} migration(s) are marked rolled back and were never re-applied`,
+            remedy: 'Run `npm run prisma:migrate` (in the api container) to apply them again.',
+            data,
+        };
+    }
+    if (state.applied === 0) {
+        return {
+            status: 'fail',
+            detail: 'No migration has been applied to this database',
+            remedy: 'Run `npm run prisma:migrate` in the api container, then `npm run prisma:seed`.',
+            data,
+        };
+    }
+    return { status: 'pass', detail: `${state.applied} migrations applied, none failed`, data };
+}
+/**
+ * `core` / `db.migrations` — no migration is half-applied.
+ *
+ * One read-only `SELECT` against Prisma's own bookkeeping table, through the
+ * `PLATFORM_PRISMA` host port.
+ *
+ * @stability experimental
+ */
+let DbMigrationsDoctorCheck = class DbMigrationsDoctorCheck {
+    registry;
+    prisma;
+    id = 'db.migrations';
+    category = 'core';
+    label = 'Database migrations';
+    dependsOn = ['db.connection'];
+    constructor(registry, prisma) {
+        this.registry = registry;
+        this.prisma = prisma;
+    }
+    /** Registers the check with the Doctor. */
+    onModuleInit() {
+        this.registry.register(this);
+    }
+    async run() {
+        const prisma = this.prisma;
+        if (!prisma) {
+            return { status: 'skip', detail: 'No database client is bound to PLATFORM_PRISMA, so there is no migration history to read' };
+        }
+        try {
+            const rows = await prisma.$queryRaw `
+        SELECT
+          (SELECT count(*) FROM _prisma_migrations
+            WHERE finished_at IS NOT NULL AND rolled_back_at IS NULL)::int AS applied,
+          (SELECT count(*) FROM _prisma_migrations
+            WHERE finished_at IS NULL AND rolled_back_at IS NULL)::int AS unfinished,
+          (SELECT count(DISTINCT m.migration_name) FROM _prisma_migrations m
+            WHERE m.rolled_back_at IS NOT NULL
+              AND NOT EXISTS (
+                SELECT 1 FROM _prisma_migrations a
+                 WHERE a.migration_name = m.migration_name
+                   AND a.finished_at IS NOT NULL AND a.rolled_back_at IS NULL))::int AS rolled_back,
+          (SELECT migration_name FROM _prisma_migrations
+            WHERE finished_at IS NULL AND rolled_back_at IS NULL
+            ORDER BY started_at LIMIT 1) AS first_unfinished`;
+            const row = rows?.[0];
+            return decideMigrations({
+                applied: Number(row?.applied ?? 0),
+                unfinished: Number(row?.unfinished ?? 0),
+                rolledBack: Number(row?.rolled_back ?? 0),
+                firstUnfinished: typeof row?.first_unfinished === 'string' ? row.first_unfinished : null,
+            });
+        }
+        catch (error) {
+            return {
+                status: 'fail',
+                detail: 'Could not read the migration history (_prisma_migrations)',
+                remedy: 'Run `npm run prisma:migrate` in the api container; the table is created by the first migration.',
+                error: error instanceof Error ? error.message : String(error),
+            };
+        }
+    }
+};
+exports.DbMigrationsDoctorCheck = DbMigrationsDoctorCheck;
+exports.DbMigrationsDoctorCheck = DbMigrationsDoctorCheck = __decorate([
+    (0, common_1.Injectable)(),
+    __param(1, (0, common_1.Optional)()),
+    __param(1, (0, common_1.Inject)(index_1.PLATFORM_PRISMA)),
+    __metadata("design:paramtypes", [index_2.DoctorCheckRegistry, Object])
+], DbMigrationsDoctorCheck);
+//# sourceMappingURL=db-migrations.doctor-check.js.map

package/dist/host/doctor/db-migrations.doctor-check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"db-migrations.doctor-check.js","sourceRoot":"","sources":["../../../src/host/doctor/db-migrations.doctor-check.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AA6BA,4CAoCC;AAjED,2CAA4E;AAE5E,4CAA0E;AAC1E,8CAAoG;AAkBpG;;;;;;;GAOG;AACH,SAAgB,gBAAgB,CAAC,KAAqB;IACpD,MAAM,IAAI,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC;IAEpG,IAAI,KAAK,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC;QACzB,OAAO;YACL,MAAM,EAAE,MAAM;YACd,MAAM,EACJ,GAAG,KAAK,CAAC,UAAU,0CAA0C;gBAC7D,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,YAAY,KAAK,CAAC,eAAe,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACrE,MAAM,EACJ,uEAAuE;gBACvE,0FAA0F;gBAC1F,uDAAuD;YACzD,IAAI;SACL,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC;QACzB,OAAO;YACL,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,GAAG,KAAK,CAAC,UAAU,gEAAgE;YAC3F,MAAM,EAAE,0EAA0E;YAClF,IAAI;SACL,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO;YACL,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,gDAAgD;YACxD,MAAM,EAAE,gFAAgF;YACxF,IAAI;SACL,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,kCAAkC,EAAE,IAAI,EAAE,CAAC;AAC9F,CAAC;AAED;;;;;;;GAOG;AAEI,IAAM,uBAAuB,GAA7B,MAAM,uBAAuB;IAOf;IACqC;IAP/C,EAAE,GAAG,eAAe,CAAC;IACrB,QAAQ,GAAG,MAAM,CAAC;IAClB,KAAK,GAAG,qBAAqB,CAAC;IAC9B,SAAS,GAAG,CAAC,eAAe,CAAC,CAAC;IAEvC,YACmB,QAA6B,EACQ,MAAyB;QAD9D,aAAQ,GAAR,QAAQ,CAAqB;QACQ,WAAM,GAAN,MAAM,CAAmB;IAC9E,CAAC;IAEJ,2CAA2C;IAC3C,YAAY;QACV,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,GAAG;QACP,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,0FAA0F,EAAE,CAAC;QAChI,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,SAAS,CAElC;;;;;;;;;;;;;;6DAcsD,CAAC;YAExD,MAAM,GAAG,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAEtB,OAAO,gBAAgB,CAAC;gBACtB,OAAO,EAAE,MAAM,CAAC,GAAG,EAAE,OAAO,IAAI,CAAC,CAAC;gBAClC,UAAU,EAAE,MAAM,CAAC,GAAG,EAAE,UAAU,IAAI,CAAC,CAAC;gBACxC,UAAU,EAAE,MAAM,CAAC,GAAG,EAAE,WAAW,IAAI,CAAC,CAAC;gBACzC,eAAe,EAAE,OAAO,GAAG,EAAE,gBAAgB,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI;aACzF,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO;gBACL,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,2DAA2D;gBACnE,MAAM,EAAE,iGAAiG;gBACzG,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC;QACJ,CAAC;IACH,CAAC;CACF,CAAA;AA1DY,0DAAuB;kCAAvB,uBAAuB;IADnC,IAAA,mBAAU,GAAE;IASR,WAAA,IAAA,iBAAQ,GAAE,CAAA;IAAE,WAAA,IAAA,eAAM,EAAC,uBAAe,CAAC,CAAA;qCADT,2BAAmB;GAPrC,uBAAuB,CA0DnC"}

package/dist/host/doctor/deployment-mode.doctor-check.d.ts

@@ -0,0 +1,54 @@
+import { OnModuleInit } from '@nestjs/common';
+import { DoctorCheckRegistry, type DoctorCheck, type DoctorCheckOutcome } from '../../doctor/index';
+import { SystemSettingsService } from '../../settings/index';
+import { type DeploymentMode } from '../deployment/deployment-mode';
+import { DeploymentModeService } from '../deployment/deployment-mode.service';
+/**
+ * What the check reads besides the mode.
+ *
+ * @stability experimental
+ */
+export interface DeploymentModeFacts {
+    /**
+     * `databaseBackup.enabled` — whether in-app scheduled backups are on.
+     * `null` when the policy could not be read.
+     */
+    backupsEnabled: boolean | null;
+}
+/**
+ * Pure: reports the mode, and whether a SaaS deployment is leaning on provider
+ * backups with nothing of its own.
+ *
+ * ⚠ NEVER `fail`. An invalid `DEPLOYMENT_MODE` never boots (see
+ * `deployment-mode.ts`), so whatever mode this sees is a valid one an operator
+ * chose. The only thing worth flagging is SaaS with in-app backups off: then the
+ * provider's backups and PITR are the ONLY way back, and this application cannot
+ * see whether they are configured.
+ *
+ * @param mode - the parsed deployment mode.
+ * @param facts - the backup policy fact.
+ * @returns the check outcome.
+ *
+ * @stability experimental
+ */
+export declare function decideDeploymentMode(mode: DeploymentMode, facts: DeploymentModeFacts): DoctorCheckOutcome;
+/**
+ * `core` / `core.deployment-mode` — which deployment mode is running, and what it turns off.
+ *
+ * @stability experimental
+ */
+export declare class DeploymentModeDoctorCheck implements DoctorCheck, OnModuleInit {
+    private readonly registry;
+    private readonly deployment;
+    private readonly settings;
+    readonly id = "core.deployment-mode";
+    readonly category = "core";
+    readonly label = "Deployment mode";
+    readonly settingsPath = "/admin/settings/db-backup";
+    constructor(registry: DoctorCheckRegistry, deployment: DeploymentModeService, settings: SystemSettingsService);
+    /** Registers the check with the Doctor. */
+    onModuleInit(): void;
+    /** Read-only: the parsed mode (memory) and one settings read. */
+    run(): Promise<DoctorCheckOutcome>;
+}
+//# sourceMappingURL=deployment-mode.doctor-check.d.ts.map

package/dist/host/doctor/deployment-mode.doctor-check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployment-mode.doctor-check.d.ts","sourceRoot":"","sources":["../../../src/host/doctor/deployment-mode.doctor-check.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE1D,OAAO,EAAE,mBAAmB,EAAE,KAAK,WAAW,EAAE,KAAK,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACpG,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAA4C,KAAK,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC9G,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAI9E;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC;;;OAGG;IACH,cAAc,EAAE,OAAO,GAAG,IAAI,CAAC;CAChC;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,cAAc,EACpB,KAAK,EAAE,mBAAmB,GACzB,kBAAkB,CAmCpB;AAED;;;;GAIG;AACH,qBACa,yBAA0B,YAAW,WAAW,EAAE,YAAY;IAOvE,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAR3B,QAAQ,CAAC,EAAE,0BAA0B;IACrC,QAAQ,CAAC,QAAQ,UAAU;IAC3B,QAAQ,CAAC,KAAK,qBAAqB;IACnC,QAAQ,CAAC,YAAY,+BAAwB;gBAG1B,QAAQ,EAAE,mBAAmB,EAC7B,UAAU,EAAE,qBAAqB,EACjC,QAAQ,EAAE,qBAAqB;IAGlD,2CAA2C;IAC3C,YAAY,IAAI,IAAI;IAIpB,iEAAiE;IAC3D,GAAG,IAAI,OAAO,CAAC,kBAAkB,CAAC;CAazC"}