@marinoscar/platform-api 0.0.0-stage → 0.1.0-next.3

package/dist/doctor/egress/network-egress.doctor-check.js

@@ -0,0 +1,226 @@
+"use strict";
+// =============================================================================
+// `network` / `network.egress`: outbound dependencies, air-gap readiness (#773)
+// =============================================================================
+//
+// Every other check validates one capability. This one answers the
+// deployment-level question: "what does this install need from the internet,
+// and will it work where it is going?" It reads the inventory every module
+// contributes to `EgressRegistry` and:
+//
+//   - online (the default): reports it, always `pass`. An internet-connected
+//     deployment SHOULD reach Google and its AI provider; a permanent warning
+//     there would only train operators to ignore the Doctor.
+//   - air-gapped (`DEPLOYMENT_NETWORK=air-gapped`): grades it. Every ENABLED
+//     dependency whose scope is not `private` will not work. A required one is
+//     `fail`, optional ones are `warn`. `unknown` counts as public (fail closed).
+//
+// CONFIGURATION ONLY: it never probes reachability (a DNS lookup or a connect
+// from an air-gapped network simply times out, and the doctor must be cheap).
+// It never throws and never skips: an inventory is always computable, and a
+// contributor that throws becomes one `unknown` entry under its own id.
+// =============================================================================
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var NetworkEgressDoctorCheck_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NetworkEgressDoctorCheck = exports.NETWORK_EGRESS_CHECK_ID = exports.AIR_GAPPED_RUNBOOK = void 0;
+exports.describeEgress = describeEgress;
+exports.gradeEgress = gradeEgress;
+const common_1 = require("@nestjs/common");
+const doctor_check_registry_1 = require("../doctor-check.registry");
+const egress_registry_1 = require("./egress.registry");
+const egress_types_1 = require("./egress.types");
+/**
+ * The runbook every `warn`/`fail` remedy of `network.egress` names: one section
+ * per dependency id, with what breaks offline and how to make it internal.
+ *
+ * @stability experimental
+ */
+exports.AIR_GAPPED_RUNBOOK = 'docs/runbooks/air-gapped.md';
+/**
+ * The id of the check: `network.egress`.
+ *
+ * @stability experimental
+ */
+exports.NETWORK_EGRESS_CHECK_ID = 'network.egress';
+/** The longest `public_ids` value in the check's `data`. */
+const PUBLIC_IDS_MAX = 500;
+function describeError(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+/**
+ * Runs every contributor of `registry` in parallel and concatenates their
+ * dependencies, in registration order. A contributor that throws (or returns
+ * something that is not an array) becomes ONE entry under its own id, scope
+ * `unknown`, enabled, so an air-gapped grading fails closed. Never throws.
+ *
+ * @param registry - the app's egress registry.
+ * @param onError - told the contributor id and message of each throw (for a log line).
+ * @returns the whole inventory.
+ *
+ * @stability experimental
+ */
+async function describeEgress(registry, onError) {
+    const contributors = registry.list();
+    const results = await Promise.all(contributors.map(async (contributor) => {
+        try {
+            const deps = await contributor.describe();
+            if (!Array.isArray(deps))
+                throw new Error('describe() did not return an array');
+            return deps;
+        }
+        catch (error) {
+            onError?.(contributor.id, describeError(error));
+            const failed = {
+                id: contributor.id,
+                capability: contributor.id,
+                direction: 'server',
+                enabled: true,
+                hosts: [],
+                scope: 'unknown',
+                required: false,
+                degradation: 'Could not be described (the contributor failed); treated as needing the internet',
+            };
+            return [failed];
+        }
+    }));
+    return results.flat();
+}
+function plural(count, one, many) {
+    return `${count} ${count === 1 ? one : many}`;
+}
+function hostsOf(dep) {
+    return dep.hosts.length > 0 ? dep.hosts.join(', ') : 'an unknown host';
+}
+function joinIds(deps) {
+    const joined = deps.map((dep) => dep.id).join(',');
+    return joined.length <= PUBLIC_IDS_MAX ? joined : `${joined.slice(0, PUBLIC_IDS_MAX - 3)}...`;
+}
+/**
+ * Pure: grades an inventory for a deployment network. Only ENABLED
+ * dependencies count; `unknown` counts as public.
+ *
+ * | network | finding | status |
+ * |---|---|---|
+ * | `online` | anything | `pass` (an inventory) |
+ * | `air-gapped` | every enabled dependency private | `pass` |
+ * | `air-gapped` | only optional dependencies public | `warn` |
+ * | `air-gapped` | a required dependency public | `fail` |
+ *
+ * `data` holds scalars only: `network`, `enabled`, `public`, `private`,
+ * `unknown`, `required_public` and `public_ids` (comma-joined, at most 500 characters).
+ *
+ * @param deps - the inventory ({@link describeEgress}).
+ * @param network - the deployment's declared network.
+ * @returns the check's outcome.
+ *
+ * @stability experimental
+ */
+function gradeEgress(deps, network) {
+    const enabled = deps.filter((dep) => dep.enabled);
+    const publicDeps = enabled.filter((dep) => dep.scope === 'public');
+    const privateDeps = enabled.filter((dep) => dep.scope === 'private');
+    const unknownDeps = enabled.filter((dep) => dep.scope === 'unknown');
+    const offline = enabled.filter((dep) => dep.scope !== 'private');
+    const requiredOffline = offline.filter((dep) => dep.required);
+    const data = {
+        network,
+        enabled: enabled.length,
+        public: publicDeps.length,
+        private: privateDeps.length,
+        unknown: unknownDeps.length,
+        required_public: requiredOffline.length,
+        public_ids: joinIds(offline),
+    };
+    if (network === 'online') {
+        if (enabled.length === 0)
+            return { status: 'pass', detail: 'No outbound dependency is enabled', data };
+        const scopes = [`${publicDeps.length} public`, `${privateDeps.length} private`];
+        if (unknownDeps.length > 0)
+            scopes.push(`${unknownDeps.length} unknown`);
+        return {
+            status: 'pass',
+            detail: `${plural(enabled.length, 'outbound dependency', 'outbound dependencies')} enabled (${scopes.join(', ')}): ` +
+                enabled.map((dep) => dep.capability).join(', '),
+            data,
+        };
+    }
+    if (offline.length === 0) {
+        return { status: 'pass', detail: 'Air-gap ready: every enabled dependency is on a private network', data };
+    }
+    if (requiredOffline.length > 0) {
+        const optional = offline.length - requiredOffline.length;
+        const needs = requiredOffline.map((dep) => `${dep.capability} needs ${hostsOf(dep)}`).join('; ');
+        return {
+            status: 'fail',
+            detail: `${needs}, which an air-gapped network cannot reach` +
+                (optional > 0 ? `; ${plural(optional, 'other public dependency', 'other public dependencies')} will not work offline` : ''),
+            remedy: `Make ${requiredOffline.map((dep) => dep.id).join(', ')} internal or replace it before going offline; ` +
+                `see ${exports.AIR_GAPPED_RUNBOOK}, section ${requiredOffline.map((dep) => `"${dep.id}"`).join(', ')}.`,
+            data,
+        };
+    }
+    return {
+        status: 'warn',
+        detail: `${plural(offline.length, 'public dependency', 'public dependencies')} will not work offline: ` +
+            offline.map((dep) => `${dep.capability} (${hostsOf(dep)})`).join(', '),
+        remedy: `Point them at internal hosts or switch them off; see ${exports.AIR_GAPPED_RUNBOOK}.`,
+        data,
+    };
+}
+/**
+ * `network` / `network.egress`: the deployment's outbound dependencies, graded
+ * for air-gap readiness when the app's {@link DeploymentNetworkSource} says
+ * `air-gapped` (`online` when none is bound). Provided by `DoctorModule.forRoot()`;
+ * the inventory comes from the app's `EgressContributor`s.
+ *
+ * @stability experimental
+ */
+let NetworkEgressDoctorCheck = NetworkEgressDoctorCheck_1 = class NetworkEgressDoctorCheck {
+    registry;
+    egress;
+    source;
+    id = exports.NETWORK_EGRESS_CHECK_ID;
+    category = 'network';
+    label = 'Outbound dependencies (air-gap readiness)';
+    timeoutMs = 5_000;
+    logger = new common_1.Logger(NetworkEgressDoctorCheck_1.name);
+    constructor(registry, egress, source) {
+        this.registry = registry;
+        this.egress = egress;
+        this.source = source;
+    }
+    /** Registers the check with the Doctor once the app's module initialises. */
+    onModuleInit() {
+        this.registry.register(this);
+    }
+    /** The declared network: the bound source's, or `online`. */
+    get network() {
+        return this.source?.network === 'air-gapped' ? 'air-gapped' : 'online';
+    }
+    /** Read-only: every contributor's `describe()`, then {@link gradeEgress}. Never throws. */
+    async run() {
+        const deps = await describeEgress(this.egress, (id, message) => this.logger.warn(`Egress contributor "${id}" threw: ${message}`));
+        return gradeEgress(deps, this.network);
+    }
+};
+exports.NetworkEgressDoctorCheck = NetworkEgressDoctorCheck;
+exports.NetworkEgressDoctorCheck = NetworkEgressDoctorCheck = NetworkEgressDoctorCheck_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __param(2, (0, common_1.Optional)()),
+    __param(2, (0, common_1.Inject)(egress_types_1.DEPLOYMENT_NETWORK_SOURCE)),
+    __metadata("design:paramtypes", [doctor_check_registry_1.DoctorCheckRegistry,
+        egress_registry_1.EgressRegistry, Object])
+], NetworkEgressDoctorCheck);
+//# sourceMappingURL=network-egress.doctor-check.js.map

package/dist/doctor/egress/network-egress.doctor-check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"network-egress.doctor-check.js","sourceRoot":"","sources":["../../../src/doctor/egress/network-egress.doctor-check.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,gFAAgF;AAChF,gFAAgF;AAChF,EAAE;AACF,mEAAmE;AACnE,6EAA6E;AAC7E,2EAA2E;AAC3E,uCAAuC;AACvC,EAAE;AACF,6EAA6E;AAC7E,8EAA8E;AAC9E,6DAA6D;AAC7D,6EAA6E;AAC7E,+EAA+E;AAC/E,kFAAkF;AAClF,EAAE;AACF,8EAA8E;AAC9E,8EAA8E;AAC9E,4EAA4E;AAC5E,wEAAwE;AACxE,gFAAgF;;;;;;;;;;;;;;;;AA4ChF,wCA4BC;AAmCD,kCA0DC;AAnKD,2CAAoF;AAGpF,oEAA+D;AAC/D,uDAAmD;AACnD,iDAA2D;AAG3D;;;;;GAKG;AACU,QAAA,kBAAkB,GAAG,6BAA6B,CAAC;AAEhE;;;;GAIG;AACU,QAAA,uBAAuB,GAAG,gBAAgB,CAAC;AAExD,4DAA4D;AAC5D,MAAM,cAAc,GAAG,GAAG,CAAC;AAE3B,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED;;;;;;;;;;;GAWG;AACI,KAAK,UAAU,cAAc,CAClC,QAAsC,EACtC,OAA0D;IAE1D,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;IACrC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,WAAW,EAAE,EAAE;QACrC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,QAAQ,EAAE,CAAC;YAC1C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;YAChF,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;YAChD,MAAM,MAAM,GAAqB;gBAC/B,EAAE,EAAE,WAAW,CAAC,EAAE;gBAClB,UAAU,EAAE,WAAW,CAAC,EAAE;gBAC1B,SAAS,EAAE,QAAQ;gBACnB,OAAO,EAAE,IAAI;gBACb,KAAK,EAAE,EAAE;gBACT,KAAK,EAAE,SAAS;gBAChB,QAAQ,EAAE,KAAK;gBACf,WAAW,EAAE,kFAAkF;aAChG,CAAC;YACF,OAAO,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CACH,CAAC;IACF,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC;AACxB,CAAC;AAED,SAAS,MAAM,CAAC,KAAa,EAAE,GAAW,EAAE,IAAY;IACtD,OAAO,GAAG,KAAK,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAChD,CAAC;AAED,SAAS,OAAO,CAAC,GAAqB;IACpC,OAAO,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC;AACzE,CAAC;AAED,SAAS,OAAO,CAAC,IAAiC;IAChD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnD,OAAO,MAAM,CAAC,MAAM,IAAI,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC;AAChG,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,SAAgB,WAAW,CAAC,IAAiC,EAAE,OAA0B;IACvF,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAClD,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC;IACnE,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;IACrE,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;IACrE,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;IACjE,MAAM,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAE9D,MAAM,IAAI,GAAoC;QAC5C,OAAO;QACP,OAAO,EAAE,OAAO,CAAC,MAAM;QACvB,MAAM,EAAE,UAAU,CAAC,MAAM;QACzB,OAAO,EAAE,WAAW,CAAC,MAAM;QAC3B,OAAO,EAAE,WAAW,CAAC,MAAM;QAC3B,eAAe,EAAE,eAAe,CAAC,MAAM;QACvC,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC;KAC7B,CAAC;IAEF,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,mCAAmC,EAAE,IAAI,EAAE,CAAC;QACvG,MAAM,MAAM,GAAG,CAAC,GAAG,UAAU,CAAC,MAAM,SAAS,EAAE,GAAG,WAAW,CAAC,MAAM,UAAU,CAAC,CAAC;QAChF,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,MAAM,UAAU,CAAC,CAAC;QACzE,OAAO;YACL,MAAM,EAAE,MAAM;YACd,MAAM,EACJ,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,qBAAqB,EAAE,uBAAuB,CAAC,aAAa,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK;gBAC5G,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YACjD,IAAI;SACL,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,iEAAiE,EAAE,IAAI,EAAE,CAAC;IAC7G,CAAC;IAED,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC;QACzD,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,UAAU,UAAU,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjG,OAAO;YACL,MAAM,EAAE,MAAM;YACd,MAAM,EACJ,GAAG,KAAK,4CAA4C;gBACpD,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,QAAQ,EAAE,yBAAyB,EAAE,2BAA2B,CAAC,wBAAwB,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7H,MAAM,EACJ,QAAQ,eAAe,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,gDAAgD;gBACvG,OAAO,0BAAkB,aAAa,eAAe,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;YACjG,IAAI;SACL,CAAC;IACJ,CAAC;IAED,OAAO;QACL,MAAM,EAAE,MAAM;QACd,MAAM,EACJ,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,mBAAmB,EAAE,qBAAqB,CAAC,0BAA0B;YAC/F,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,UAAU,KAAK,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QACxE,MAAM,EAAE,wDAAwD,0BAAkB,GAAG;QACrF,IAAI;KACL,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AAEI,IAAM,wBAAwB,gCAA9B,MAAM,wBAAwB;IAShB;IACA;IAC+C;IAVzD,EAAE,GAAG,+BAAuB,CAAC;IAC7B,QAAQ,GAAG,SAAS,CAAC;IACrB,KAAK,GAAG,2CAA2C,CAAC;IACpD,SAAS,GAAG,KAAK,CAAC;IAEV,MAAM,GAAG,IAAI,eAAM,CAAC,0BAAwB,CAAC,IAAI,CAAC,CAAC;IAEpE,YACmB,QAA6B,EAC7B,MAAsB,EACyB,MAAgC;QAF/E,aAAQ,GAAR,QAAQ,CAAqB;QAC7B,WAAM,GAAN,MAAM,CAAgB;QACyB,WAAM,GAAN,MAAM,CAA0B;IAC/F,CAAC;IAEJ,6EAA6E;IAC7E,YAAY;QACV,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAED,6DAA6D;IAC7D,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,MAAM,EAAE,OAAO,KAAK,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC;IACzE,CAAC;IAED,2FAA2F;IAC3F,KAAK,CAAC,GAAG;QACP,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE,CAC7D,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE,YAAY,OAAO,EAAE,CAAC,CACjE,CAAC;QACF,OAAO,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACzC,CAAC;CACF,CAAA;AA/BY,4DAAwB;mCAAxB,wBAAwB;IADpC,IAAA,mBAAU,GAAE;IAYR,WAAA,IAAA,iBAAQ,GAAE,CAAA;IAAE,WAAA,IAAA,eAAM,EAAC,wCAAyB,CAAC,CAAA;qCAFnB,2CAAmB;QACrB,gCAAc;GAV9B,wBAAwB,CA+BpC"}

package/dist/doctor/index.d.ts

@@ -0,0 +1,19 @@
+export { DOCTOR_CATEGORIES, DOCTOR_STATUSES, DOCTOR_STATUS_RANK, PLATFORM_DOCTOR_CATEGORIES, } from './doctor-check.interface';
+export type { CoreDoctorCategory, DoctorCategory, DoctorCheck, DoctorCheckOutcome, DoctorDataValue, DoctorStatus, } from './doctor-check.interface';
+export { DoctorCheckRegistry } from './doctor-check.registry';
+export { DOCTOR_CACHE_TTL_MS, DOCTOR_DEFAULT_TIMEOUT_MS, DOCTOR_FALLBACK_REMEDY, DoctorService, worstStatus, } from './doctor.service';
+export type { DoctorRunOptions } from './doctor.service';
+export { DOCTOR_MODULE_OPTIONS } from './doctor.options';
+export type { ResolvedDoctorModuleOptions } from './doctor.options';
+export { DEFAULT_DOCTOR_PATH, DEFAULT_DOCTOR_PERMISSION, DoctorModule } from './doctor.module';
+export type { DoctorModuleOptions } from './doctor.module';
+export { createDoctorController } from './doctor.controller.factory';
+export type { DoctorControllerInstance } from './doctor.controller.factory';
+export { DoctorQueryDto } from './dto/doctor-query.dto';
+export { DoctorReportDto } from './dto/doctor-report.dto';
+export type { DoctorCheckReport, DoctorQuery, DoctorReport } from '@marinoscar/platform-contract/doctor';
+export { AIR_GAPPED_RUNBOOK, DEPLOYMENT_NETWORKS, DEPLOYMENT_NETWORK_SOURCE, EGRESS_MAX_HOSTS, EgressRegistry, NETWORK_EGRESS_CHECK_ID, NetworkEgressDoctorCheck, classifyHost, describeEgress, egressDependency, gradeEgress, hostnameOf, scopeOfHosts, } from './egress/index';
+export type { DeploymentNetwork, DeploymentNetworkSource, EgressContributor, EgressDependency, EgressDependencyInput, EgressDirection, EgressScope, } from './egress/index';
+export { COMMIT_SHA_ALLOWED_PATHS, REDACTED, SENSITIVE_KEY_PATTERN, SUPPORT_BUNDLE_AUDIT_ACTION, SUPPORT_BUNDLE_MAX_BYTES, SUPPORT_BUNDLE_REDACTION_VERSION, SUPPORT_BUNDLE_SECTION_MAX_BYTES, SUPPORT_BUNDLE_SECTION_TIMEOUT_MS, SUPPORT_BUNDLE_SUBPATH, SupportBundleDto, SupportBundleRegistry, SupportBundleService, createSupportBundleController, defaultSupportBundlePrincipal, isSupportBundleOmission, omitSupportBundleSection, redactString, redactValue, } from './support-bundle/index';
+export type { RedactValueOptions, RedactionResult, ResolvedSupportBundleOptions, SupportBundleBuild, SupportBundleControllerInstance, SupportBundleOmission, SupportBundleOptions, SupportBundlePrincipal, SupportBundleSection, SupportBundleSectionContext, } from './support-bundle/index';
+//# sourceMappingURL=index.d.ts.map

package/dist/doctor/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/doctor/index.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,iBAAiB,EACjB,eAAe,EACf,kBAAkB,EAClB,0BAA0B,GAC3B,MAAM,0BAA0B,CAAC;AAClC,YAAY,EACV,kBAAkB,EAClB,cAAc,EACd,WAAW,EACX,kBAAkB,EAClB,eAAe,EACf,YAAY,GACb,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EACL,mBAAmB,EACnB,yBAAyB,EACzB,sBAAsB,EACtB,aAAa,EACb,WAAW,GACZ,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACzD,YAAY,EAAE,2BAA2B,EAAE,MAAM,kBAAkB,CAAC;AACpE,OAAO,EAAE,mBAAmB,EAAE,yBAAyB,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/F,YAAY,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAC3D,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,YAAY,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AAC5E,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAG1D,YAAY,EAAE,iBAAiB,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,sCAAsC,CAAC;AACzG,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,yBAAyB,EACzB,gBAAgB,EAChB,cAAc,EACd,uBAAuB,EACvB,wBAAwB,EACxB,YAAY,EACZ,cAAc,EACd,gBAAgB,EAChB,WAAW,EACX,UAAU,EACV,YAAY,GACb,MAAM,gBAAgB,CAAC;AACxB,YAAY,EACV,iBAAiB,EACjB,uBAAuB,EACvB,iBAAiB,EACjB,gBAAgB,EAChB,qBAAqB,EACrB,eAAe,EACf,WAAW,GACZ,MAAM,gBAAgB,CAAC;AAIxB,OAAO,EACL,wBAAwB,EACxB,QAAQ,EACR,qBAAqB,EACrB,2BAA2B,EAC3B,wBAAwB,EACxB,gCAAgC,EAChC,gCAAgC,EAChC,iCAAiC,EACjC,sBAAsB,EACtB,gBAAgB,EAChB,qBAAqB,EACrB,oBAAoB,EACpB,6BAA6B,EAC7B,6BAA6B,EAC7B,uBAAuB,EACvB,wBAAwB,EACxB,YAAY,EACZ,WAAW,GACZ,MAAM,wBAAwB,CAAC;AAChC,YAAY,EACV,kBAAkB,EAClB,eAAe,EACf,4BAA4B,EAC5B,kBAAkB,EAClB,+BAA+B,EAC/B,qBAAqB,EACrB,oBAAoB,EACpB,sBAAsB,EACtB,oBAAoB,EACpB,2BAA2B,GAC5B,MAAM,wBAAwB,CAAC"}

package/dist/doctor/index.js

@@ -0,0 +1,66 @@
+"use strict";
+// `@marinoscar/platform-api/doctor`: the admin Doctor (issue #634, packaged by
+// #696). Documented in ./README.md. Explicit named exports only.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.redactValue = exports.redactString = exports.omitSupportBundleSection = exports.isSupportBundleOmission = exports.defaultSupportBundlePrincipal = exports.createSupportBundleController = exports.SupportBundleService = exports.SupportBundleRegistry = exports.SupportBundleDto = exports.SUPPORT_BUNDLE_SUBPATH = exports.SUPPORT_BUNDLE_SECTION_TIMEOUT_MS = exports.SUPPORT_BUNDLE_SECTION_MAX_BYTES = exports.SUPPORT_BUNDLE_REDACTION_VERSION = exports.SUPPORT_BUNDLE_MAX_BYTES = exports.SUPPORT_BUNDLE_AUDIT_ACTION = exports.SENSITIVE_KEY_PATTERN = exports.REDACTED = exports.COMMIT_SHA_ALLOWED_PATHS = exports.scopeOfHosts = exports.hostnameOf = exports.gradeEgress = exports.egressDependency = exports.describeEgress = exports.classifyHost = exports.NetworkEgressDoctorCheck = exports.NETWORK_EGRESS_CHECK_ID = exports.EgressRegistry = exports.EGRESS_MAX_HOSTS = exports.DEPLOYMENT_NETWORK_SOURCE = exports.DEPLOYMENT_NETWORKS = exports.AIR_GAPPED_RUNBOOK = exports.DoctorReportDto = exports.DoctorQueryDto = exports.createDoctorController = exports.DoctorModule = exports.DEFAULT_DOCTOR_PERMISSION = exports.DEFAULT_DOCTOR_PATH = exports.DOCTOR_MODULE_OPTIONS = exports.worstStatus = exports.DoctorService = exports.DOCTOR_FALLBACK_REMEDY = exports.DOCTOR_DEFAULT_TIMEOUT_MS = exports.DOCTOR_CACHE_TTL_MS = exports.DoctorCheckRegistry = exports.PLATFORM_DOCTOR_CATEGORIES = exports.DOCTOR_STATUS_RANK = exports.DOCTOR_STATUSES = exports.DOCTOR_CATEGORIES = void 0;
+var doctor_check_interface_1 = require("./doctor-check.interface");
+Object.defineProperty(exports, "DOCTOR_CATEGORIES", { enumerable: true, get: function () { return doctor_check_interface_1.DOCTOR_CATEGORIES; } });
+Object.defineProperty(exports, "DOCTOR_STATUSES", { enumerable: true, get: function () { return doctor_check_interface_1.DOCTOR_STATUSES; } });
+Object.defineProperty(exports, "DOCTOR_STATUS_RANK", { enumerable: true, get: function () { return doctor_check_interface_1.DOCTOR_STATUS_RANK; } });
+Object.defineProperty(exports, "PLATFORM_DOCTOR_CATEGORIES", { enumerable: true, get: function () { return doctor_check_interface_1.PLATFORM_DOCTOR_CATEGORIES; } });
+var doctor_check_registry_1 = require("./doctor-check.registry");
+Object.defineProperty(exports, "DoctorCheckRegistry", { enumerable: true, get: function () { return doctor_check_registry_1.DoctorCheckRegistry; } });
+var doctor_service_1 = require("./doctor.service");
+Object.defineProperty(exports, "DOCTOR_CACHE_TTL_MS", { enumerable: true, get: function () { return doctor_service_1.DOCTOR_CACHE_TTL_MS; } });
+Object.defineProperty(exports, "DOCTOR_DEFAULT_TIMEOUT_MS", { enumerable: true, get: function () { return doctor_service_1.DOCTOR_DEFAULT_TIMEOUT_MS; } });
+Object.defineProperty(exports, "DOCTOR_FALLBACK_REMEDY", { enumerable: true, get: function () { return doctor_service_1.DOCTOR_FALLBACK_REMEDY; } });
+Object.defineProperty(exports, "DoctorService", { enumerable: true, get: function () { return doctor_service_1.DoctorService; } });
+Object.defineProperty(exports, "worstStatus", { enumerable: true, get: function () { return doctor_service_1.worstStatus; } });
+var doctor_options_1 = require("./doctor.options");
+Object.defineProperty(exports, "DOCTOR_MODULE_OPTIONS", { enumerable: true, get: function () { return doctor_options_1.DOCTOR_MODULE_OPTIONS; } });
+var doctor_module_1 = require("./doctor.module");
+Object.defineProperty(exports, "DEFAULT_DOCTOR_PATH", { enumerable: true, get: function () { return doctor_module_1.DEFAULT_DOCTOR_PATH; } });
+Object.defineProperty(exports, "DEFAULT_DOCTOR_PERMISSION", { enumerable: true, get: function () { return doctor_module_1.DEFAULT_DOCTOR_PERMISSION; } });
+Object.defineProperty(exports, "DoctorModule", { enumerable: true, get: function () { return doctor_module_1.DoctorModule; } });
+var doctor_controller_factory_1 = require("./doctor.controller.factory");
+Object.defineProperty(exports, "createDoctorController", { enumerable: true, get: function () { return doctor_controller_factory_1.createDoctorController; } });
+var doctor_query_dto_1 = require("./dto/doctor-query.dto");
+Object.defineProperty(exports, "DoctorQueryDto", { enumerable: true, get: function () { return doctor_query_dto_1.DoctorQueryDto; } });
+var doctor_report_dto_1 = require("./dto/doctor-report.dto");
+Object.defineProperty(exports, "DoctorReportDto", { enumerable: true, get: function () { return doctor_report_dto_1.DoctorReportDto; } });
+var index_1 = require("./egress/index");
+Object.defineProperty(exports, "AIR_GAPPED_RUNBOOK", { enumerable: true, get: function () { return index_1.AIR_GAPPED_RUNBOOK; } });
+Object.defineProperty(exports, "DEPLOYMENT_NETWORKS", { enumerable: true, get: function () { return index_1.DEPLOYMENT_NETWORKS; } });
+Object.defineProperty(exports, "DEPLOYMENT_NETWORK_SOURCE", { enumerable: true, get: function () { return index_1.DEPLOYMENT_NETWORK_SOURCE; } });
+Object.defineProperty(exports, "EGRESS_MAX_HOSTS", { enumerable: true, get: function () { return index_1.EGRESS_MAX_HOSTS; } });
+Object.defineProperty(exports, "EgressRegistry", { enumerable: true, get: function () { return index_1.EgressRegistry; } });
+Object.defineProperty(exports, "NETWORK_EGRESS_CHECK_ID", { enumerable: true, get: function () { return index_1.NETWORK_EGRESS_CHECK_ID; } });
+Object.defineProperty(exports, "NetworkEgressDoctorCheck", { enumerable: true, get: function () { return index_1.NetworkEgressDoctorCheck; } });
+Object.defineProperty(exports, "classifyHost", { enumerable: true, get: function () { return index_1.classifyHost; } });
+Object.defineProperty(exports, "describeEgress", { enumerable: true, get: function () { return index_1.describeEgress; } });
+Object.defineProperty(exports, "egressDependency", { enumerable: true, get: function () { return index_1.egressDependency; } });
+Object.defineProperty(exports, "gradeEgress", { enumerable: true, get: function () { return index_1.gradeEgress; } });
+Object.defineProperty(exports, "hostnameOf", { enumerable: true, get: function () { return index_1.hostnameOf; } });
+Object.defineProperty(exports, "scopeOfHosts", { enumerable: true, get: function () { return index_1.scopeOfHosts; } });
+// The support bundle (issue #772): `GET <path>/support-bundle`, its section
+// registry, the redaction pass and the built-in sections.
+var index_2 = require("./support-bundle/index");
+Object.defineProperty(exports, "COMMIT_SHA_ALLOWED_PATHS", { enumerable: true, get: function () { return index_2.COMMIT_SHA_ALLOWED_PATHS; } });
+Object.defineProperty(exports, "REDACTED", { enumerable: true, get: function () { return index_2.REDACTED; } });
+Object.defineProperty(exports, "SENSITIVE_KEY_PATTERN", { enumerable: true, get: function () { return index_2.SENSITIVE_KEY_PATTERN; } });
+Object.defineProperty(exports, "SUPPORT_BUNDLE_AUDIT_ACTION", { enumerable: true, get: function () { return index_2.SUPPORT_BUNDLE_AUDIT_ACTION; } });
+Object.defineProperty(exports, "SUPPORT_BUNDLE_MAX_BYTES", { enumerable: true, get: function () { return index_2.SUPPORT_BUNDLE_MAX_BYTES; } });
+Object.defineProperty(exports, "SUPPORT_BUNDLE_REDACTION_VERSION", { enumerable: true, get: function () { return index_2.SUPPORT_BUNDLE_REDACTION_VERSION; } });
+Object.defineProperty(exports, "SUPPORT_BUNDLE_SECTION_MAX_BYTES", { enumerable: true, get: function () { return index_2.SUPPORT_BUNDLE_SECTION_MAX_BYTES; } });
+Object.defineProperty(exports, "SUPPORT_BUNDLE_SECTION_TIMEOUT_MS", { enumerable: true, get: function () { return index_2.SUPPORT_BUNDLE_SECTION_TIMEOUT_MS; } });
+Object.defineProperty(exports, "SUPPORT_BUNDLE_SUBPATH", { enumerable: true, get: function () { return index_2.SUPPORT_BUNDLE_SUBPATH; } });
+Object.defineProperty(exports, "SupportBundleDto", { enumerable: true, get: function () { return index_2.SupportBundleDto; } });
+Object.defineProperty(exports, "SupportBundleRegistry", { enumerable: true, get: function () { return index_2.SupportBundleRegistry; } });
+Object.defineProperty(exports, "SupportBundleService", { enumerable: true, get: function () { return index_2.SupportBundleService; } });
+Object.defineProperty(exports, "createSupportBundleController", { enumerable: true, get: function () { return index_2.createSupportBundleController; } });
+Object.defineProperty(exports, "defaultSupportBundlePrincipal", { enumerable: true, get: function () { return index_2.defaultSupportBundlePrincipal; } });
+Object.defineProperty(exports, "isSupportBundleOmission", { enumerable: true, get: function () { return index_2.isSupportBundleOmission; } });
+Object.defineProperty(exports, "omitSupportBundleSection", { enumerable: true, get: function () { return index_2.omitSupportBundleSection; } });
+Object.defineProperty(exports, "redactString", { enumerable: true, get: function () { return index_2.redactString; } });
+Object.defineProperty(exports, "redactValue", { enumerable: true, get: function () { return index_2.redactValue; } });
+//# sourceMappingURL=index.js.map

package/dist/doctor/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/doctor/index.ts"],"names":[],"mappings":";AAAA,+EAA+E;AAC/E,iEAAiE;;;AAEjE,mEAKkC;AAJhC,2HAAA,iBAAiB,OAAA;AACjB,yHAAA,eAAe,OAAA;AACf,4HAAA,kBAAkB,OAAA;AAClB,oIAAA,0BAA0B,OAAA;AAU5B,iEAA8D;AAArD,4HAAA,mBAAmB,OAAA;AAC5B,mDAM0B;AALxB,qHAAA,mBAAmB,OAAA;AACnB,2HAAA,yBAAyB,OAAA;AACzB,wHAAA,sBAAsB,OAAA;AACtB,+GAAA,aAAa,OAAA;AACb,6GAAA,WAAW,OAAA;AAGb,mDAAyD;AAAhD,uHAAA,qBAAqB,OAAA;AAE9B,iDAA+F;AAAtF,oHAAA,mBAAmB,OAAA;AAAE,0HAAA,yBAAyB,OAAA;AAAE,6GAAA,YAAY,OAAA;AAErE,yEAAqE;AAA5D,mIAAA,sBAAsB,OAAA;AAE/B,2DAAwD;AAA/C,kHAAA,cAAc,OAAA;AACvB,6DAA0D;AAAjD,oHAAA,eAAe,OAAA;AAIxB,wCAcwB;AAbtB,2GAAA,kBAAkB,OAAA;AAClB,4GAAA,mBAAmB,OAAA;AACnB,kHAAA,yBAAyB,OAAA;AACzB,yGAAA,gBAAgB,OAAA;AAChB,uGAAA,cAAc,OAAA;AACd,gHAAA,uBAAuB,OAAA;AACvB,iHAAA,wBAAwB,OAAA;AACxB,qGAAA,YAAY,OAAA;AACZ,uGAAA,cAAc,OAAA;AACd,yGAAA,gBAAgB,OAAA;AAChB,oGAAA,WAAW,OAAA;AACX,mGAAA,UAAU,OAAA;AACV,qGAAA,YAAY,OAAA;AAYd,4EAA4E;AAC5E,0DAA0D;AAC1D,gDAmBgC;AAlB9B,iHAAA,wBAAwB,OAAA;AACxB,iGAAA,QAAQ,OAAA;AACR,8GAAA,qBAAqB,OAAA;AACrB,oHAAA,2BAA2B,OAAA;AAC3B,iHAAA,wBAAwB,OAAA;AACxB,yHAAA,gCAAgC,OAAA;AAChC,yHAAA,gCAAgC,OAAA;AAChC,0HAAA,iCAAiC,OAAA;AACjC,+GAAA,sBAAsB,OAAA;AACtB,yGAAA,gBAAgB,OAAA;AAChB,8GAAA,qBAAqB,OAAA;AACrB,6GAAA,oBAAoB,OAAA;AACpB,sHAAA,6BAA6B,OAAA;AAC7B,sHAAA,6BAA6B,OAAA;AAC7B,gHAAA,uBAAuB,OAAA;AACvB,iHAAA,wBAAwB,OAAA;AACxB,qGAAA,YAAY,OAAA;AACZ,oGAAA,WAAW,OAAA"}

package/dist/doctor/support-bundle/index.d.ts

@@ -0,0 +1,12 @@
+export { isSupportBundleOmission, omitSupportBundleSection } from './support-bundle-section.interface';
+export type { SupportBundleOmission, SupportBundlePrincipal, SupportBundleSection, SupportBundleSectionContext, } from './support-bundle-section.interface';
+export { SupportBundleRegistry } from './support-bundle.registry';
+export { SupportBundleService } from './support-bundle.service';
+export type { SupportBundleBuild } from './support-bundle.service';
+export { SUPPORT_BUNDLE_AUDIT_ACTION, SUPPORT_BUNDLE_MAX_BYTES, SUPPORT_BUNDLE_SECTION_MAX_BYTES, SUPPORT_BUNDLE_SECTION_TIMEOUT_MS, SUPPORT_BUNDLE_SUBPATH, defaultSupportBundlePrincipal, } from './support-bundle.options';
+export type { ResolvedSupportBundleOptions, SupportBundleOptions } from './support-bundle.options';
+export { SupportBundleDto, createSupportBundleController } from './support-bundle.controller';
+export type { SupportBundleControllerInstance } from './support-bundle.controller';
+export { COMMIT_SHA_ALLOWED_PATHS, REDACTED, SENSITIVE_KEY_PATTERN, SUPPORT_BUNDLE_REDACTION_VERSION, redactString, redactValue, } from './redact';
+export type { RedactValueOptions, RedactionResult } from './redact';
+//# sourceMappingURL=index.d.ts.map

package/dist/doctor/support-bundle/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/doctor/support-bundle/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,oCAAoC,CAAC;AACvG,YAAY,EACV,qBAAqB,EACrB,sBAAsB,EACtB,oBAAoB,EACpB,2BAA2B,GAC5B,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,YAAY,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AACnE,OAAO,EACL,2BAA2B,EAC3B,wBAAwB,EACxB,gCAAgC,EAChC,iCAAiC,EACjC,sBAAsB,EACtB,6BAA6B,GAC9B,MAAM,0BAA0B,CAAC;AAClC,YAAY,EAAE,4BAA4B,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AACnG,OAAO,EAAE,gBAAgB,EAAE,6BAA6B,EAAE,MAAM,6BAA6B,CAAC;AAC9F,YAAY,EAAE,+BAA+B,EAAE,MAAM,6BAA6B,CAAC;AACnF,OAAO,EACL,wBAAwB,EACxB,QAAQ,EACR,qBAAqB,EACrB,gCAAgC,EAChC,YAAY,EACZ,WAAW,GACZ,MAAM,UAAU,CAAC;AAClB,YAAY,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC"}

package/dist/doctor/support-bundle/index.js

@@ -0,0 +1,32 @@
+"use strict";
+// The support bundle (issue #772, PP-13.1): part of the Doctor slice,
+// re-exported by `@marinoscar/platform-api/doctor`. Explicit named exports only.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.redactValue = exports.redactString = exports.SUPPORT_BUNDLE_REDACTION_VERSION = exports.SENSITIVE_KEY_PATTERN = exports.REDACTED = exports.COMMIT_SHA_ALLOWED_PATHS = exports.createSupportBundleController = exports.SupportBundleDto = exports.defaultSupportBundlePrincipal = exports.SUPPORT_BUNDLE_SUBPATH = exports.SUPPORT_BUNDLE_SECTION_TIMEOUT_MS = exports.SUPPORT_BUNDLE_SECTION_MAX_BYTES = exports.SUPPORT_BUNDLE_MAX_BYTES = exports.SUPPORT_BUNDLE_AUDIT_ACTION = exports.SupportBundleService = exports.SupportBundleRegistry = exports.omitSupportBundleSection = exports.isSupportBundleOmission = void 0;
+var support_bundle_section_interface_1 = require("./support-bundle-section.interface");
+Object.defineProperty(exports, "isSupportBundleOmission", { enumerable: true, get: function () { return support_bundle_section_interface_1.isSupportBundleOmission; } });
+Object.defineProperty(exports, "omitSupportBundleSection", { enumerable: true, get: function () { return support_bundle_section_interface_1.omitSupportBundleSection; } });
+var support_bundle_registry_1 = require("./support-bundle.registry");
+Object.defineProperty(exports, "SupportBundleRegistry", { enumerable: true, get: function () { return support_bundle_registry_1.SupportBundleRegistry; } });
+var support_bundle_service_1 = require("./support-bundle.service");
+Object.defineProperty(exports, "SupportBundleService", { enumerable: true, get: function () { return support_bundle_service_1.SupportBundleService; } });
+var support_bundle_options_1 = require("./support-bundle.options");
+Object.defineProperty(exports, "SUPPORT_BUNDLE_AUDIT_ACTION", { enumerable: true, get: function () { return support_bundle_options_1.SUPPORT_BUNDLE_AUDIT_ACTION; } });
+Object.defineProperty(exports, "SUPPORT_BUNDLE_MAX_BYTES", { enumerable: true, get: function () { return support_bundle_options_1.SUPPORT_BUNDLE_MAX_BYTES; } });
+Object.defineProperty(exports, "SUPPORT_BUNDLE_SECTION_MAX_BYTES", { enumerable: true, get: function () { return support_bundle_options_1.SUPPORT_BUNDLE_SECTION_MAX_BYTES; } });
+Object.defineProperty(exports, "SUPPORT_BUNDLE_SECTION_TIMEOUT_MS", { enumerable: true, get: function () { return support_bundle_options_1.SUPPORT_BUNDLE_SECTION_TIMEOUT_MS; } });
+Object.defineProperty(exports, "SUPPORT_BUNDLE_SUBPATH", { enumerable: true, get: function () { return support_bundle_options_1.SUPPORT_BUNDLE_SUBPATH; } });
+Object.defineProperty(exports, "defaultSupportBundlePrincipal", { enumerable: true, get: function () { return support_bundle_options_1.defaultSupportBundlePrincipal; } });
+var support_bundle_controller_1 = require("./support-bundle.controller");
+Object.defineProperty(exports, "SupportBundleDto", { enumerable: true, get: function () { return support_bundle_controller_1.SupportBundleDto; } });
+Object.defineProperty(exports, "createSupportBundleController", { enumerable: true, get: function () { return support_bundle_controller_1.createSupportBundleController; } });
+var redact_1 = require("./redact");
+Object.defineProperty(exports, "COMMIT_SHA_ALLOWED_PATHS", { enumerable: true, get: function () { return redact_1.COMMIT_SHA_ALLOWED_PATHS; } });
+Object.defineProperty(exports, "REDACTED", { enumerable: true, get: function () { return redact_1.REDACTED; } });
+Object.defineProperty(exports, "SENSITIVE_KEY_PATTERN", { enumerable: true, get: function () { return redact_1.SENSITIVE_KEY_PATTERN; } });
+Object.defineProperty(exports, "SUPPORT_BUNDLE_REDACTION_VERSION", { enumerable: true, get: function () { return redact_1.SUPPORT_BUNDLE_REDACTION_VERSION; } });
+Object.defineProperty(exports, "redactString", { enumerable: true, get: function () { return redact_1.redactString; } });
+Object.defineProperty(exports, "redactValue", { enumerable: true, get: function () { return redact_1.redactValue; } });
+// The built-in `meta` and `doctor` sections are registered by
+// `DoctorModule.forRoot()` and are not part of the public surface.
+//# sourceMappingURL=index.js.map

package/dist/doctor/support-bundle/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/doctor/support-bundle/index.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,uFAAuG;AAA9F,2IAAA,uBAAuB,OAAA;AAAE,4IAAA,wBAAwB,OAAA;AAO1D,qEAAkE;AAAzD,gIAAA,qBAAqB,OAAA;AAC9B,mEAAgE;AAAvD,8HAAA,oBAAoB,OAAA;AAE7B,mEAOkC;AANhC,qIAAA,2BAA2B,OAAA;AAC3B,kIAAA,wBAAwB,OAAA;AACxB,0IAAA,gCAAgC,OAAA;AAChC,2IAAA,iCAAiC,OAAA;AACjC,gIAAA,sBAAsB,OAAA;AACtB,uIAAA,6BAA6B,OAAA;AAG/B,yEAA8F;AAArF,6HAAA,gBAAgB,OAAA;AAAE,0IAAA,6BAA6B,OAAA;AAExD,mCAOkB;AANhB,kHAAA,wBAAwB,OAAA;AACxB,kGAAA,QAAQ,OAAA;AACR,+GAAA,qBAAqB,OAAA;AACrB,0HAAA,gCAAgC,OAAA;AAChC,sGAAA,YAAY,OAAA;AACZ,qGAAA,WAAW,OAAA;AAGb,8DAA8D;AAC9D,mEAAmE"}

package/dist/doctor/support-bundle/redact.d.ts

@@ -0,0 +1,76 @@
+/**
+ * The rule set this file implements, as recorded in the bundle (`redaction.rules`).
+ *
+ * @stability experimental
+ */
+export declare const SUPPORT_BUNDLE_REDACTION_VERSION: "v1";
+/**
+ * What a redacted value or token becomes.
+ *
+ * @stability experimental
+ */
+export declare const REDACTED = "[redacted]";
+/**
+ * A property whose name matches has its value replaced by {@link REDACTED}.
+ *
+ * @stability experimental
+ */
+export declare const SENSITIVE_KEY_PATTERN: RegExp;
+/**
+ * Where (dotted paths from the bundle root, `*` for an array index) a value
+ * that is exactly a 40-hex-digit commit SHA is kept.
+ *
+ * @stability experimental
+ */
+export declare const COMMIT_SHA_ALLOWED_PATHS: readonly string[];
+/**
+ * A redacted value and how many replacements it took.
+ *
+ * @typeParam T - the value's type.
+ *
+ * @stability experimental
+ */
+export interface RedactionResult<T> {
+    /** The redacted copy (the input is never mutated). */
+    value: T;
+    /** How many keys, tokens or patterns were replaced. */
+    replacements: number;
+}
+/**
+ * Applies the value-based rules to one string.
+ *
+ * @param input - any string.
+ * @returns the rewritten string and the number of replacements.
+ *
+ * @example
+ * ```ts
+ * redactString('mail ops@example.com from 10.0.0.1'); // { value: 'mail [email] from [ip]', replacements: 2 }
+ * ```
+ *
+ * @stability experimental
+ */
+export declare function redactString(input: string): RedactionResult<string>;
+/**
+ * Options of {@link redactValue}.
+ *
+ * @stability experimental
+ */
+export interface RedactValueOptions {
+    /** The path of `value` from the bundle root (for the commit-SHA allowlist). Default `[]`. */
+    path?: readonly string[];
+    /** Dotted paths where an exact 40-hex commit SHA is kept. Default {@link COMMIT_SHA_ALLOWED_PATHS}. */
+    commitShaPaths?: readonly string[];
+}
+/**
+ * Redacts a JSON-like value: every string and property name by the value
+ * rules, every property whose name matches {@link SENSITIVE_KEY_PATTERN} by
+ * key. Returns a new value; the input is never mutated.
+ *
+ * @param value - a JSON-like value (objects, arrays, strings, numbers, booleans, null).
+ * @param options - the value's `path` from the bundle root, and the commit-SHA allowlist.
+ * @returns the redacted copy and the number of replacements.
+ *
+ * @stability experimental
+ */
+export declare function redactValue<T>(value: T, options?: RedactValueOptions): RedactionResult<T>;
+//# sourceMappingURL=redact.d.ts.map

package/dist/doctor/support-bundle/redact.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.d.ts","sourceRoot":"","sources":["../../../src/doctor/support-bundle/redact.ts"],"names":[],"mappings":"AAgCA;;;;GAIG;AACH,eAAO,MAAM,gCAAgC,EAAG,IAAa,CAAC;AAE9D;;;;GAIG;AACH,eAAO,MAAM,QAAQ,eAAe,CAAC;AAErC;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,QACkG,CAAC;AAErI;;;;;GAKG;AACH,eAAO,MAAM,wBAAwB,EAAE,SAAS,MAAM,EAGpD,CAAC;AAgHH;;;;;;GAMG;AACH,MAAM,WAAW,eAAe,CAAC,CAAC;IAChC,sDAAsD;IACtD,KAAK,EAAE,CAAC,CAAC;IACT,uDAAuD;IACvD,YAAY,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,CAanE;AAED;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,6FAA6F;IAC7F,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACzB,uGAAuG;IACvG,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACpC;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,WAAW,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,GAAE,kBAAuB,GAAG,eAAe,CAAC,CAAC,CAAC,CAgC7F"}