@marinoscar/platform-api 0.0.0-stage → 0.1.0-next.3

package/dist/doctor/support-bundle/redact.js

@@ -0,0 +1,236 @@
+"use strict";
+// =============================================================================
+// Support-bundle redaction, rules v1 (issue #772, PP-13.1)
+// =============================================================================
+//
+// THE SECOND LINE OF DEFENCE. Every section already allowlists its fields
+// through a strict schema; this pass runs over the whole assembled bundle
+// afterwards and replaces anything that still looks like secret material or
+// personal data. It is pure (no I/O, no clock), deterministic and counted:
+// every replacement increments `redaction.replacements` in the bundle.
+//
+// Two kinds of rule:
+//
+//   KEY-BASED. A property whose NAME matches `SENSITIVE_KEY_PATTERN` has its
+//   (non-null) value replaced by "[redacted]", whatever its type.
+//
+//   VALUE-BASED. Every string, and every property name, is rewritten by
+//   `VALUE_RULES`, in order (the order matters: a bearer token is replaced as
+//   a whole before the JWT rule could see half of it, URL userinfo before the
+//   email rule could mistake `user:pass@host.tld` for an address).
+//
+// ONE PATH ALLOWLIST. A 40-hex-digit commit SHA is needed to diagnose a
+// deployment and is not a secret, but the long-hex rule cannot tell it from a
+// key. It survives ONLY at the paths in `COMMIT_SHA_ALLOWED_PATHS`, and only
+// when the whole value is exactly 40 hex digits; anything else at those paths
+// is redacted as usual. An explicit path list, not a relaxed pattern.
+//
+// Over-redaction is the accepted failure mode: a support engineer can ask for
+// a value; a leaked key cannot be un-leaked.
+// =============================================================================
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.COMMIT_SHA_ALLOWED_PATHS = exports.SENSITIVE_KEY_PATTERN = exports.REDACTED = exports.SUPPORT_BUNDLE_REDACTION_VERSION = void 0;
+exports.redactString = redactString;
+exports.redactValue = redactValue;
+const node_net_1 = require("node:net");
+/**
+ * The rule set this file implements, as recorded in the bundle (`redaction.rules`).
+ *
+ * @stability experimental
+ */
+exports.SUPPORT_BUNDLE_REDACTION_VERSION = 'v1';
+/**
+ * What a redacted value or token becomes.
+ *
+ * @stability experimental
+ */
+exports.REDACTED = '[redacted]';
+/**
+ * A property whose name matches has its value replaced by {@link REDACTED}.
+ *
+ * @stability experimental
+ */
+exports.SENSITIVE_KEY_PATTERN = /pass(word)?|secret|token|api[_-]?key|private[_-]?key|authorization|cookie|credential|fingerprint|hint|dsn|connection[_-]?string/i;
+/**
+ * Where (dotted paths from the bundle root, `*` for an array index) a value
+ * that is exactly a 40-hex-digit commit SHA is kept.
+ *
+ * @stability experimental
+ */
+exports.COMMIT_SHA_ALLOWED_PATHS = Object.freeze([
+    'sections.versions.data.app.commitSha',
+    'sections.versions.data.history.last.commitSha',
+]);
+const COMMIT_SHA = /^[0-9a-f]{40}$/i;
+/** A piece of a long run that reads as a word, a number or an identifier part. */
+const WORDY_PIECE = [/^[a-z]+[0-9]*$/, /^[A-Z]?[a-z]+(?:[A-Z][a-z]+)*[0-9]*$/, /^[A-Z]+[0-9]*$/, /^[0-9]+$/];
+/**
+ * Whether a run of 32 or more base64/hex characters is secret-like: hex (dashes
+ * allowed between groups, so a UUID counts), or anything that is not a path or
+ * identifier made of words (`/api/admin/telemetry/stack`, `snake_case_names`,
+ * `camelCaseNames`).
+ */
+function isSecretLikeRun(run) {
+    const core = run.replace(/=+$/, '');
+    if (core.length < 32)
+        return false;
+    if (/^[0-9a-fA-F-]+$/.test(core) && core.replace(/-/g, '').length >= 32)
+        return true;
+    const pieces = core.split(/[/_.+-]+/).filter((piece) => piece !== '');
+    return !pieces.every((piece) => WORDY_PIECE.some((pattern) => pattern.test(piece)));
+}
+/** IPv6 candidates are validated by `node:net`, so times (`12:34:56`) and `std::string` survive. */
+function redactIpv6(match) {
+    let candidate = match;
+    let trailing = '';
+    while (candidate.endsWith('.')) {
+        candidate = candidate.slice(0, -1);
+        trailing += '.';
+    }
+    return (0, node_net_1.isIP)(candidate) === 6 ? `[ip]${trailing}` : null;
+}
+const OCTET = '(?:25[0-5]|2[0-4]\\d|1\\d\\d|[1-9]?\\d)';
+/**
+ * The value-based rules of v1, in the order they run.
+ */
+const VALUE_RULES = [
+    {
+        name: 'pem',
+        pattern: /-----BEGIN [A-Z0-9 ]+-----[\s\S]*?(?:-----END [A-Z0-9 ]+-----|$)/g,
+        replace: () => '[pem]',
+    },
+    {
+        // A token after `Bearer` holds at least one non-letter, so prose
+        // ("Bearer requests") survives.
+        name: 'bearer',
+        pattern: /\b(Bearer)\s+(?=[A-Za-z0-9._~+/=-]*[0-9._~+/=-])[A-Za-z0-9._~+/=-]{6,}/gi,
+        replace: (_match, word) => `${word} ${exports.REDACTED}`,
+    },
+    {
+        name: 'jwt',
+        pattern: /\beyJ[A-Za-z0-9_-]+\.eyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]*/g,
+        replace: () => '[jwt]',
+    },
+    {
+        name: 'url-userinfo',
+        pattern: /\b([A-Za-z][A-Za-z0-9+.-]*:\/\/)[^\s/?#@]+@/g,
+        replace: (_match, scheme) => `${scheme}${exports.REDACTED}@`,
+    },
+    {
+        name: 'url-query',
+        pattern: /(\b[A-Za-z][A-Za-z0-9+.-]*:\/\/[^\s?#"'<>]*)\?[^\s#"'<>]+/g,
+        replace: (_match, url) => `${url}?${exports.REDACTED}`,
+    },
+    {
+        // A path with a query string, without a scheme (`GET /api/x?token=...`).
+        name: 'path-query',
+        pattern: /((?:^|[\s"'(=])\/[^\s?#"'<>]*)\?[^\s#"'<>)]+/g,
+        replace: (_match, path) => `${path}?${exports.REDACTED}`,
+    },
+    {
+        // Personal access tokens and node tokens (`pat_`, `nod_`).
+        name: 'opaque-token',
+        pattern: /\b(?:pat|nod)_[A-Za-z0-9_-]{8,}/g,
+        replace: () => '[token]',
+    },
+    {
+        name: 'aws-access-key-id',
+        pattern: /\b(?:AKIA|ASIA)[A-Z0-9]{16}\b/g,
+        replace: () => '[aws-key]',
+    },
+    {
+        name: 'email',
+        pattern: /[A-Za-z0-9._%+-]+@[A-Za-z0-9-]+(?:\.[A-Za-z0-9-]+)*\.[A-Za-z]{2,}/g,
+        replace: () => '[email]',
+    },
+    {
+        name: 'ipv6',
+        pattern: /(?<![0-9A-Za-z:.])(?=[0-9A-Fa-f:.]*:[0-9A-Fa-f.]*:)[0-9A-Fa-f:.]{2,45}(?![0-9A-Za-z:])/g,
+        replace: redactIpv6,
+    },
+    {
+        name: 'ipv4',
+        pattern: new RegExp(`(?<![0-9.])(?:${OCTET}\\.){3}${OCTET}(?![0-9]|\\.\\d)`, 'g'),
+        replace: () => '[ip]',
+    },
+    {
+        name: 'long-run',
+        pattern: /[A-Za-z0-9+/=_-]{32,}/g,
+        replace: (match) => (isSecretLikeRun(match) ? exports.REDACTED : null),
+    },
+];
+/**
+ * Applies the value-based rules to one string.
+ *
+ * @param input - any string.
+ * @returns the rewritten string and the number of replacements.
+ *
+ * @example
+ * ```ts
+ * redactString('mail ops@example.com from 10.0.0.1'); // { value: 'mail [email] from [ip]', replacements: 2 }
+ * ```
+ *
+ * @stability experimental
+ */
+function redactString(input) {
+    let value = input;
+    let replacements = 0;
+    for (const rule of VALUE_RULES) {
+        value = value.replace(rule.pattern, (match, ...rest) => {
+            const groups = rest.filter((part) => typeof part === 'string');
+            const replaced = rule.replace(match, ...groups);
+            if (replaced === null)
+                return match;
+            replacements += 1;
+            return replaced;
+        });
+    }
+    return { value, replacements };
+}
+/**
+ * Redacts a JSON-like value: every string and property name by the value
+ * rules, every property whose name matches {@link SENSITIVE_KEY_PATTERN} by
+ * key. Returns a new value; the input is never mutated.
+ *
+ * @param value - a JSON-like value (objects, arrays, strings, numbers, booleans, null).
+ * @param options - the value's `path` from the bundle root, and the commit-SHA allowlist.
+ * @returns the redacted copy and the number of replacements.
+ *
+ * @stability experimental
+ */
+function redactValue(value, options = {}) {
+    const allowed = new Set(options.commitShaPaths ?? exports.COMMIT_SHA_ALLOWED_PATHS);
+    let replacements = 0;
+    const walk = (node, path) => {
+        if (typeof node === 'string') {
+            if (COMMIT_SHA.test(node) && allowed.has(path.join('.')))
+                return node;
+            const result = redactString(node);
+            replacements += result.replacements;
+            return result.value;
+        }
+        if (Array.isArray(node))
+            return node.map((item) => walk(item, [...path, '*']));
+        if (node !== null && typeof node === 'object') {
+            const out = {};
+            for (const [key, child] of Object.entries(node)) {
+                const renamed = redactString(key);
+                replacements += renamed.replacements;
+                let outKey = renamed.value;
+                for (let n = 2; Object.prototype.hasOwnProperty.call(out, outKey); n += 1)
+                    outKey = `${renamed.value}#${n}`;
+                if (exports.SENSITIVE_KEY_PATTERN.test(key) && child !== null && child !== undefined) {
+                    replacements += 1;
+                    out[outKey] = exports.REDACTED;
+                }
+                else {
+                    out[outKey] = walk(child, [...path, key]);
+                }
+            }
+            return out;
+        }
+        return node;
+    };
+    return { value: walk(value, [...(options.path ?? [])]), replacements };
+}
+//# sourceMappingURL=redact.js.map

package/dist/doctor/support-bundle/redact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.js","sourceRoot":"","sources":["../../../src/doctor/support-bundle/redact.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,2DAA2D;AAC3D,gFAAgF;AAChF,EAAE;AACF,0EAA0E;AAC1E,0EAA0E;AAC1E,4EAA4E;AAC5E,2EAA2E;AAC3E,uEAAuE;AACvE,EAAE;AACF,qBAAqB;AACrB,EAAE;AACF,6EAA6E;AAC7E,kEAAkE;AAClE,EAAE;AACF,wEAAwE;AACxE,8EAA8E;AAC9E,8EAA8E;AAC9E,mEAAmE;AACnE,EAAE;AACF,wEAAwE;AACxE,8EAA8E;AAC9E,6EAA6E;AAC7E,8EAA8E;AAC9E,sEAAsE;AACtE,EAAE;AACF,8EAA8E;AAC9E,6CAA6C;AAC7C,gFAAgF;;;AA8KhF,oCAaC;AAyBD,kCAgCC;AAlPD,uCAAgC;AAEhC;;;;GAIG;AACU,QAAA,gCAAgC,GAAG,IAAa,CAAC;AAE9D;;;;GAIG;AACU,QAAA,QAAQ,GAAG,YAAY,CAAC;AAErC;;;;GAIG;AACU,QAAA,qBAAqB,GAChC,kIAAkI,CAAC;AAErI;;;;;GAKG;AACU,QAAA,wBAAwB,GAAsB,MAAM,CAAC,MAAM,CAAC;IACvE,sCAAsC;IACtC,+CAA+C;CAChD,CAAC,CAAC;AAEH,MAAM,UAAU,GAAG,iBAAiB,CAAC;AAUrC,kFAAkF;AAClF,MAAM,WAAW,GAAG,CAAC,gBAAgB,EAAE,sCAAsC,EAAE,gBAAgB,EAAE,UAAU,CAAC,CAAC;AAE7G;;;;;GAKG;AACH,SAAS,eAAe,CAAC,GAAW;IAClC,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACpC,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE;QAAE,OAAO,KAAK,CAAC;IACnC,IAAI,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC;IACrF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC;IACtE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACtF,CAAC;AAED,oGAAoG;AACpG,SAAS,UAAU,CAAC,KAAa;IAC/B,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,QAAQ,GAAG,EAAE,CAAC;IAClB,OAAO,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/B,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACnC,QAAQ,IAAI,GAAG,CAAC;IAClB,CAAC;IACD,OAAO,IAAA,eAAI,EAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1D,CAAC;AAED,MAAM,KAAK,GAAG,yCAAyC,CAAC;AAExD;;GAEG;AACH,MAAM,WAAW,GAAyB;IACxC;QACE,IAAI,EAAE,KAAK;QACX,OAAO,EAAE,mEAAmE;QAC5E,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO;KACvB;IACD;QACE,iEAAiE;QACjE,gCAAgC;QAChC,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,0EAA0E;QACnF,OAAO,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,IAAI,gBAAQ,EAAE;KACjD;IACD;QACE,IAAI,EAAE,KAAK;QACX,OAAO,EAAE,yDAAyD;QAClE,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO;KACvB;IACD;QACE,IAAI,EAAE,cAAc;QACpB,OAAO,EAAE,8CAA8C;QACvD,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,GAAG,MAAM,GAAG,gBAAQ,GAAG;KACrD;IACD;QACE,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,4DAA4D;QACrE,OAAO,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,gBAAQ,EAAE;KAC/C;IACD;QACE,yEAAyE;QACzE,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,+CAA+C;QACxD,OAAO,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,IAAI,gBAAQ,EAAE;KACjD;IACD;QACE,2DAA2D;QAC3D,IAAI,EAAE,cAAc;QACpB,OAAO,EAAE,kCAAkC;QAC3C,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS;KACzB;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,gCAAgC;QACzC,OAAO,EAAE,GAAG,EAAE,CAAC,WAAW;KAC3B;IACD;QACE,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,oEAAoE;QAC7E,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS;KACzB;IACD;QACE,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,yFAAyF;QAClG,OAAO,EAAE,UAAU;KACpB;IACD;QACE,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,IAAI,MAAM,CAAC,iBAAiB,KAAK,UAAU,KAAK,kBAAkB,EAAE,GAAG,CAAC;QACjF,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM;KACtB;IACD;QACE,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,wBAAwB;QACjC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,gBAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;KAC/D;CACF,CAAC;AAgBF;;;;;;;;;;;;GAYG;AACH,SAAgB,YAAY,CAAC,KAAa;IACxC,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAa,EAAE,GAAG,IAAe,EAAE,EAAE;YACxE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC;YAC/E,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,MAAM,CAAC,CAAC;YAChD,IAAI,QAAQ,KAAK,IAAI;gBAAE,OAAO,KAAK,CAAC;YACpC,YAAY,IAAI,CAAC,CAAC;YAClB,OAAO,QAAQ,CAAC;QAClB,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;AACjC,CAAC;AAcD;;;;;;;;;;GAUG;AACH,SAAgB,WAAW,CAAI,KAAQ,EAAE,UAA8B,EAAE;IACvE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,cAAc,IAAI,gCAAwB,CAAC,CAAC;IAC5E,IAAI,YAAY,GAAG,CAAC,CAAC;IAErB,MAAM,IAAI,GAAG,CAAC,IAAa,EAAE,IAAc,EAAW,EAAE;QACtD,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;YACtE,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;YAClC,YAAY,IAAI,MAAM,CAAC,YAAY,CAAC;YACpC,OAAO,MAAM,CAAC,KAAK,CAAC;QACtB,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;QAC/E,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC9C,MAAM,GAAG,GAA4B,EAAE,CAAC;YACxC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAA+B,CAAC,EAAE,CAAC;gBAC3E,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;gBAClC,YAAY,IAAI,OAAO,CAAC,YAAY,CAAC;gBACrC,IAAI,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;gBAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC;oBAAE,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC;gBAC5G,IAAI,6BAAqB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;oBAC7E,YAAY,IAAI,CAAC,CAAC;oBAClB,GAAG,CAAC,MAAM,CAAC,GAAG,gBAAQ,CAAC;gBACzB,CAAC;qBAAM,CAAC;oBACN,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;gBAC5C,CAAC;YACH,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IAEF,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAM,EAAE,YAAY,EAAE,CAAC;AAC9E,CAAC"}

package/dist/doctor/support-bundle/sections/doctor.section.d.ts

@@ -0,0 +1,81 @@
+import { OnModuleInit } from '@nestjs/common';
+import { z } from 'zod';
+import { DoctorService } from '../../doctor.service';
+import type { SupportBundleSection } from '../support-bundle-section.interface';
+import { SupportBundleRegistry } from '../support-bundle.registry';
+declare const doctorSectionSchema: z.ZodObject<{
+    verdict: z.ZodEnum<{
+        warn: "warn";
+        pass: "pass";
+        skip: "skip";
+        fail: "fail";
+    }>;
+    generatedAt: z.ZodString;
+    durationMs: z.ZodNumber;
+    checks: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        category: z.ZodString;
+        label: z.ZodString;
+        settingsPath: z.ZodNullable<z.ZodString>;
+        status: z.ZodEnum<{
+            warn: "warn";
+            pass: "pass";
+            skip: "skip";
+            fail: "fail";
+        }>;
+        detail: z.ZodString;
+        remedy: z.ZodNullable<z.ZodString>;
+        error: z.ZodNullable<z.ZodString>;
+        data: z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
+        durationMs: z.ZodNumber;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+/**
+ * The `doctor` section's data: the Doctor report.
+ *
+ * @stability experimental
+ */
+export type DoctorSupportBundleData = z.infer<typeof doctorSectionSchema>;
+/**
+ * The built-in `doctor` section: the full, cached Doctor report.
+ *
+ * @stability experimental
+ */
+export declare class DoctorSupportBundleSection implements SupportBundleSection<DoctorSupportBundleData>, OnModuleInit {
+    private readonly registry;
+    private readonly doctor;
+    readonly id = "doctor";
+    readonly label = "Doctor report";
+    readonly schema: z.ZodObject<{
+        verdict: z.ZodEnum<{
+            warn: "warn";
+            pass: "pass";
+            skip: "skip";
+            fail: "fail";
+        }>;
+        generatedAt: z.ZodString;
+        durationMs: z.ZodNumber;
+        checks: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            category: z.ZodString;
+            label: z.ZodString;
+            settingsPath: z.ZodNullable<z.ZodString>;
+            status: z.ZodEnum<{
+                warn: "warn";
+                pass: "pass";
+                skip: "skip";
+                fail: "fail";
+            }>;
+            detail: z.ZodString;
+            remedy: z.ZodNullable<z.ZodString>;
+            error: z.ZodNullable<z.ZodString>;
+            data: z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
+            durationMs: z.ZodNumber;
+        }, z.core.$strict>>;
+    }, z.core.$strict>;
+    constructor(registry: SupportBundleRegistry, doctor: DoctorService);
+    onModuleInit(): void;
+    collect(): Promise<DoctorSupportBundleData>;
+}
+export {};
+//# sourceMappingURL=doctor.section.d.ts.map

package/dist/doctor/support-bundle/sections/doctor.section.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.section.d.ts","sourceRoot":"","sources":["../../../../src/doctor/support-bundle/sections/doctor.section.ts"],"names":[],"mappings":"AASA,OAAO,EAAsB,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAClE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAChF,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAoBnE,QAAA,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;kBAOd,CAAC;AAEZ;;;;GAIG;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAE1E;;;;GAIG;AACH,qBACa,0BAA2B,YAAW,oBAAoB,CAAC,uBAAuB,CAAC,EAAE,YAAY;IAM3E,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACjC,OAAO,CAAC,QAAQ,CAAC,MAAM;IANhD,QAAQ,CAAC,EAAE,YAAY;IACvB,QAAQ,CAAC,KAAK,mBAAmB;IACjC,QAAQ,CAAC,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;uBAAuB;gBAGY,QAAQ,EAAE,qBAAqB,EACvC,MAAM,EAAE,aAAa;IAG/D,YAAY,IAAI,IAAI;IAId,OAAO,IAAI,OAAO,CAAC,uBAAuB,CAAC;CAGlD"}

package/dist/doctor/support-bundle/sections/doctor.section.js

@@ -0,0 +1,83 @@
+"use strict";
+// The `doctor` support-bundle section (issue #772): the full Doctor report,
+// unchanged. Built in; registered by `DoctorModule.forRoot()`.
+//
+// `run({ refresh: false })` reads the Doctor's report cache (15 s by default),
+// so downloading a bundle never multiplies probes. The report is passed
+// through as is: every check already obeys rule 4 of the check contract (no
+// secret material in `detail`, `error` or `data`), and the central redaction
+// pass runs over it anyway.
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DoctorSupportBundleSection = void 0;
+const common_1 = require("@nestjs/common");
+const zod_1 = require("zod");
+const doctor_check_interface_1 = require("../../doctor-check.interface");
+const doctor_service_1 = require("../../doctor.service");
+const support_bundle_registry_1 = require("../support-bundle.registry");
+const status = zod_1.z.enum(doctor_check_interface_1.DOCTOR_STATUSES);
+/** The report row, field for field, strict: a new field must be allowed here first. */
+const doctorSectionCheckSchema = zod_1.z
+    .object({
+    id: zod_1.z.string(),
+    category: zod_1.z.string(),
+    label: zod_1.z.string(),
+    settingsPath: zod_1.z.string().nullable(),
+    status,
+    detail: zod_1.z.string(),
+    remedy: zod_1.z.string().nullable(),
+    error: zod_1.z.string().nullable(),
+    data: zod_1.z.record(zod_1.z.string(), zod_1.z.union([zod_1.z.string(), zod_1.z.number(), zod_1.z.boolean(), zod_1.z.null()])).nullable(),
+    durationMs: zod_1.z.number(),
+})
+    .strict();
+const doctorSectionSchema = zod_1.z
+    .object({
+    verdict: status,
+    generatedAt: zod_1.z.string(),
+    durationMs: zod_1.z.number(),
+    checks: zod_1.z.array(doctorSectionCheckSchema),
+})
+    .strict();
+/**
+ * The built-in `doctor` section: the full, cached Doctor report.
+ *
+ * @stability experimental
+ */
+let DoctorSupportBundleSection = class DoctorSupportBundleSection {
+    registry;
+    doctor;
+    id = 'doctor';
+    label = 'Doctor report';
+    schema = doctorSectionSchema;
+    constructor(registry, doctor) {
+        this.registry = registry;
+        this.doctor = doctor;
+    }
+    onModuleInit() {
+        this.registry.register(this);
+    }
+    async collect() {
+        return this.doctor.run({ refresh: false });
+    }
+};
+exports.DoctorSupportBundleSection = DoctorSupportBundleSection;
+exports.DoctorSupportBundleSection = DoctorSupportBundleSection = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Inject)(support_bundle_registry_1.SupportBundleRegistry)),
+    __param(1, (0, common_1.Inject)(doctor_service_1.DoctorService)),
+    __metadata("design:paramtypes", [support_bundle_registry_1.SupportBundleRegistry,
+        doctor_service_1.DoctorService])
+], DoctorSupportBundleSection);
+//# sourceMappingURL=doctor.section.js.map

package/dist/doctor/support-bundle/sections/doctor.section.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.section.js","sourceRoot":"","sources":["../../../../src/doctor/support-bundle/sections/doctor.section.ts"],"names":[],"mappings":";AAAA,4EAA4E;AAC5E,+DAA+D;AAC/D,EAAE;AACF,+EAA+E;AAC/E,wEAAwE;AACxE,4EAA4E;AAC5E,6EAA6E;AAC7E,4BAA4B;;;;;;;;;;;;;;;AAE5B,2CAAkE;AAClE,6BAAwB;AAExB,yEAA+D;AAC/D,yDAAqD;AAErD,wEAAmE;AAEnE,MAAM,MAAM,GAAG,OAAC,CAAC,IAAI,CAAC,wCAAe,CAAC,CAAC;AAEvC,uFAAuF;AACvF,MAAM,wBAAwB,GAAG,OAAC;KAC/B,MAAM,CAAC;IACN,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE;IACd,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE;IACpB,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE;IACjB,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,MAAM;IACN,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE;IAClB,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,IAAI,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,KAAK,CAAC,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,OAAO,EAAE,EAAE,OAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC/F,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE;CACvB,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,mBAAmB,GAAG,OAAC;KAC1B,MAAM,CAAC;IACN,OAAO,EAAE,MAAM;IACf,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE;IACvB,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE;IACtB,MAAM,EAAE,OAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC;CAC1C,CAAC;KACD,MAAM,EAAE,CAAC;AASZ;;;;GAIG;AAEI,IAAM,0BAA0B,GAAhC,MAAM,0BAA0B;IAMa;IACR;IANjC,EAAE,GAAG,QAAQ,CAAC;IACd,KAAK,GAAG,eAAe,CAAC;IACxB,MAAM,GAAG,mBAAmB,CAAC;IAEtC,YACkD,QAA+B,EACvC,MAAqB;QADb,aAAQ,GAAR,QAAQ,CAAuB;QACvC,WAAM,GAAN,MAAM,CAAe;IAC5D,CAAC;IAEJ,YAAY;QACV,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,OAAO;QACX,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7C,CAAC;CACF,CAAA;AAjBY,gEAA0B;qCAA1B,0BAA0B;IADtC,IAAA,mBAAU,GAAE;IAOR,WAAA,IAAA,eAAM,EAAC,+CAAqB,CAAC,CAAA;IAC7B,WAAA,IAAA,eAAM,EAAC,8BAAa,CAAC,CAAA;qCADoC,+CAAqB;QAC/B,8BAAa;GAPpD,0BAA0B,CAiBtC"}

package/dist/doctor/support-bundle/sections/egress.section.d.ts

@@ -0,0 +1,73 @@
+import { OnModuleInit } from '@nestjs/common';
+import { z } from 'zod';
+import { EgressRegistry } from '../../egress/egress.registry';
+import type { DeploymentNetworkSource } from '../../egress/egress.types';
+import type { SupportBundleSection } from '../support-bundle-section.interface';
+import { SupportBundleRegistry } from '../support-bundle.registry';
+declare const egressSectionSchema: z.ZodObject<{
+    network: z.ZodEnum<{
+        online: "online";
+        "air-gapped": "air-gapped";
+    }>;
+    dependencies: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        capability: z.ZodString;
+        direction: z.ZodEnum<{
+            server: "server";
+            browser: "browser";
+            both: "both";
+        }>;
+        enabled: z.ZodBoolean;
+        hosts: z.ZodArray<z.ZodString>;
+        scope: z.ZodEnum<{
+            public: "public";
+            private: "private";
+            unknown: "unknown";
+        }>;
+        required: z.ZodBoolean;
+        degradation: z.ZodString;
+        settingsPath: z.ZodNullable<z.ZodString>;
+        count: z.ZodNullable<z.ZodNumber>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+type EgressSectionData = z.infer<typeof egressSectionSchema>;
+/** The built-in `egress` section: hosts and scopes of every outbound dependency. */
+export declare class EgressSupportBundleSection implements SupportBundleSection<EgressSectionData>, OnModuleInit {
+    private readonly registry;
+    private readonly egress;
+    private readonly source?;
+    readonly id = "egress";
+    readonly label = "Outbound dependencies";
+    readonly schema: z.ZodObject<{
+        network: z.ZodEnum<{
+            online: "online";
+            "air-gapped": "air-gapped";
+        }>;
+        dependencies: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            capability: z.ZodString;
+            direction: z.ZodEnum<{
+                server: "server";
+                browser: "browser";
+                both: "both";
+            }>;
+            enabled: z.ZodBoolean;
+            hosts: z.ZodArray<z.ZodString>;
+            scope: z.ZodEnum<{
+                public: "public";
+                private: "private";
+                unknown: "unknown";
+            }>;
+            required: z.ZodBoolean;
+            degradation: z.ZodString;
+            settingsPath: z.ZodNullable<z.ZodString>;
+            count: z.ZodNullable<z.ZodNumber>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>;
+    private readonly logger;
+    constructor(registry: SupportBundleRegistry, egress: EgressRegistry, source?: DeploymentNetworkSource | undefined);
+    onModuleInit(): void;
+    collect(): Promise<EgressSectionData>;
+}
+export {};
+//# sourceMappingURL=egress.section.d.ts.map

package/dist/doctor/support-bundle/sections/egress.section.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"egress.section.d.ts","sourceRoot":"","sources":["../../../../src/doctor/support-bundle/sections/egress.section.ts"],"names":[],"mappings":"AASA,OAAO,EAA8B,YAAY,EAAY,MAAM,gBAAgB,CAAC;AACpF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAE9D,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAEzE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAChF,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAEnE,QAAA,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;kBAoBd,CAAC;AAEZ,KAAK,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAE7D,oFAAoF;AACpF,qBACa,0BAA2B,YAAW,oBAAoB,CAAC,iBAAiB,CAAC,EAAE,YAAY;IAOrE,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAChC,OAAO,CAAC,QAAQ,CAAC,MAAM;IACA,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;IARzE,QAAQ,CAAC,EAAE,YAAY;IACvB,QAAQ,CAAC,KAAK,2BAA2B;IACzC,QAAQ,CAAC,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;uBAAuB;IACtC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA4C;gBAGjB,QAAQ,EAAE,qBAAqB,EACtC,MAAM,EAAE,cAAc,EACC,MAAM,CAAC,EAAE,uBAAuB,YAAA;IAGlG,YAAY,IAAI,IAAI;IAId,OAAO,IAAI,OAAO,CAAC,iBAAiB,CAAC;CAoB5C"}

package/dist/doctor/support-bundle/sections/egress.section.js

@@ -0,0 +1,97 @@
+"use strict";
+// The `egress` support-bundle section (issues #772 and #773): the deployment's
+// outbound-dependency inventory, as `network.egress` reads it. Built in;
+// registered by `DoctorModule.forRoot()` next to `meta` and `doctor`.
+//
+// Hosts and scopes only. Every contributor already reduces its endpoints to
+// HOSTNAMES (`egressDependency()`: no scheme, userinfo, port, path or query),
+// and the strict schema below has no field that could carry a URL. A
+// contributor that throws becomes one `unknown` entry, as in the check.
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EgressSupportBundleSection = void 0;
+const common_1 = require("@nestjs/common");
+const zod_1 = require("zod");
+const egress_registry_1 = require("../../egress/egress.registry");
+const egress_types_1 = require("../../egress/egress.types");
+const network_egress_doctor_check_1 = require("../../egress/network-egress.doctor-check");
+const support_bundle_registry_1 = require("../support-bundle.registry");
+const egressSectionSchema = zod_1.z
+    .object({
+    network: zod_1.z.enum(egress_types_1.DEPLOYMENT_NETWORKS).describe('The declared network (`DEPLOYMENT_NETWORK`); `online` when the app binds none.'),
+    dependencies: zod_1.z.array(zod_1.z
+        .object({
+        id: zod_1.z.string(),
+        capability: zod_1.z.string(),
+        direction: zod_1.z.enum(['server', 'browser', 'both']),
+        enabled: zod_1.z.boolean(),
+        hosts: zod_1.z.array(zod_1.z.string()),
+        scope: zod_1.z.enum(['public', 'private', 'unknown']),
+        required: zod_1.z.boolean(),
+        degradation: zod_1.z.string(),
+        settingsPath: zod_1.z.string().nullable(),
+        count: zod_1.z.number().int().nullable(),
+    })
+        .strict()),
+})
+    .strict();
+/** The built-in `egress` section: hosts and scopes of every outbound dependency. */
+let EgressSupportBundleSection = class EgressSupportBundleSection {
+    registry;
+    egress;
+    source;
+    id = 'egress';
+    label = 'Outbound dependencies';
+    schema = egressSectionSchema;
+    logger = new common_1.Logger('EgressSupportBundleSection');
+    constructor(registry, egress, source) {
+        this.registry = registry;
+        this.egress = egress;
+        this.source = source;
+    }
+    onModuleInit() {
+        this.registry.register(this);
+    }
+    async collect() {
+        const dependencies = await (0, network_egress_doctor_check_1.describeEgress)(this.egress, (id) => {
+            this.logger.warn(`Egress contributor "${id}" failed while building the support bundle.`);
+        });
+        return {
+            network: this.source?.network ?? 'online',
+            dependencies: dependencies.map((dependency) => ({
+                id: dependency.id,
+                capability: dependency.capability,
+                direction: dependency.direction,
+                enabled: dependency.enabled,
+                hosts: [...dependency.hosts],
+                scope: dependency.scope,
+                required: dependency.required,
+                degradation: dependency.degradation,
+                settingsPath: dependency.settingsPath ?? null,
+                count: dependency.count ?? null,
+            })),
+        };
+    }
+};
+exports.EgressSupportBundleSection = EgressSupportBundleSection;
+exports.EgressSupportBundleSection = EgressSupportBundleSection = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Inject)(support_bundle_registry_1.SupportBundleRegistry)),
+    __param(1, (0, common_1.Inject)(egress_registry_1.EgressRegistry)),
+    __param(2, (0, common_1.Optional)()),
+    __param(2, (0, common_1.Inject)(egress_types_1.DEPLOYMENT_NETWORK_SOURCE)),
+    __metadata("design:paramtypes", [support_bundle_registry_1.SupportBundleRegistry,
+        egress_registry_1.EgressRegistry, Object])
+], EgressSupportBundleSection);
+//# sourceMappingURL=egress.section.js.map

package/dist/doctor/support-bundle/sections/egress.section.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"egress.section.js","sourceRoot":"","sources":["../../../../src/doctor/support-bundle/sections/egress.section.ts"],"names":[],"mappings":";AAAA,+EAA+E;AAC/E,yEAAyE;AACzE,sEAAsE;AACtE,EAAE;AACF,4EAA4E;AAC5E,8EAA8E;AAC9E,qEAAqE;AACrE,wEAAwE;;;;;;;;;;;;;;;AAExE,2CAAoF;AACpF,6BAAwB;AAExB,kEAA8D;AAC9D,4DAA2F;AAE3F,0FAA0E;AAE1E,wEAAmE;AAEnE,MAAM,mBAAmB,GAAG,OAAC;KAC1B,MAAM,CAAC;IACN,OAAO,EAAE,OAAC,CAAC,IAAI,CAAC,kCAAmB,CAAC,CAAC,QAAQ,CAAC,gFAAgF,CAAC;IAC/H,YAAY,EAAE,OAAC,CAAC,KAAK,CACnB,OAAC;SACE,MAAM,CAAC;QACN,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE;QACd,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE;QACtB,SAAS,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QAChD,OAAO,EAAE,OAAC,CAAC,OAAO,EAAE;QACpB,KAAK,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC;QAC1B,KAAK,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QAC/C,QAAQ,EAAE,OAAC,CAAC,OAAO,EAAE;QACrB,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE;QACvB,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACnC,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;KACnC,CAAC;SACD,MAAM,EAAE,CACZ;CACF,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ,oFAAoF;AAE7E,IAAM,0BAA0B,GAAhC,MAAM,0BAA0B;IAOa;IACP;IACuB;IARzD,EAAE,GAAG,QAAQ,CAAC;IACd,KAAK,GAAG,uBAAuB,CAAC;IAChC,MAAM,GAAG,mBAAmB,CAAC;IACrB,MAAM,GAAG,IAAI,eAAM,CAAC,4BAA4B,CAAC,CAAC;IAEnE,YACkD,QAA+B,EACtC,MAAsB,EACC,MAAgC;QAFhD,aAAQ,GAAR,QAAQ,CAAuB;QACtC,WAAM,GAAN,MAAM,CAAgB;QACC,WAAM,GAAN,MAAM,CAA0B;IAC/F,CAAC;IAEJ,YAAY;QACV,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,OAAO;QACX,MAAM,YAAY,GAAG,MAAM,IAAA,4CAAc,EAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE;YAC5D,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE,6CAA6C,CAAC,CAAC;QAC3F,CAAC,CAAC,CAAC;QACH,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,IAAI,QAAQ;YACzC,YAAY,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;gBAC9C,EAAE,EAAE,UAAU,CAAC,EAAE;gBACjB,UAAU,EAAE,UAAU,CAAC,UAAU;gBACjC,SAAS,EAAE,UAAU,CAAC,SAAS;gBAC/B,OAAO,EAAE,UAAU,CAAC,OAAO;gBAC3B,KAAK,EAAE,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC;gBAC5B,KAAK,EAAE,UAAU,CAAC,KAAK;gBACvB,QAAQ,EAAE,UAAU,CAAC,QAAQ;gBAC7B,WAAW,EAAE,UAAU,CAAC,WAAW;gBACnC,YAAY,EAAE,UAAU,CAAC,YAAY,IAAI,IAAI;gBAC7C,KAAK,EAAE,UAAU,CAAC,KAAK,IAAI,IAAI;aAChC,CAAC,CAAC;SACJ,CAAC;IACJ,CAAC;CACF,CAAA;AApCY,gEAA0B;qCAA1B,0BAA0B;IADtC,IAAA,mBAAU,GAAE;IAQR,WAAA,IAAA,eAAM,EAAC,+CAAqB,CAAC,CAAA;IAC7B,WAAA,IAAA,eAAM,EAAC,gCAAc,CAAC,CAAA;IACtB,WAAA,IAAA,iBAAQ,GAAE,CAAA;IAAE,WAAA,IAAA,eAAM,EAAC,wCAAyB,CAAC,CAAA;qCAFY,+CAAqB;QAC9B,gCAAc;GARtD,0BAA0B,CAoCtC"}

package/dist/doctor/support-bundle/sections/meta.section.d.ts

@@ -0,0 +1,39 @@
+import { OnModuleInit } from '@nestjs/common';
+import { z } from 'zod';
+import type { SupportBundleSection } from '../support-bundle-section.interface';
+import { SupportBundleRegistry } from '../support-bundle.registry';
+/**
+ * The platform packages whose versions the `meta` section reports, when installed.
+ *
+ * @stability experimental
+ */
+export declare const PLATFORM_PACKAGE_NAMES: readonly string[];
+declare const metaSectionSchema: z.ZodObject<{
+    platformPackages: z.ZodRecord<z.ZodString, z.ZodString>;
+    sections: z.ZodArray<z.ZodString>;
+}, z.core.$strict>;
+/**
+ * The `meta` section's data.
+ *
+ * @stability experimental
+ */
+export type MetaSupportBundleData = z.infer<typeof metaSectionSchema>;
+/**
+ * The built-in `meta` section: platform package versions and section ids.
+ *
+ * @stability experimental
+ */
+export declare class MetaSupportBundleSection implements SupportBundleSection<MetaSupportBundleData>, OnModuleInit {
+    private readonly registry;
+    readonly id = "meta";
+    readonly label = "Bundle metadata";
+    readonly schema: z.ZodObject<{
+        platformPackages: z.ZodRecord<z.ZodString, z.ZodString>;
+        sections: z.ZodArray<z.ZodString>;
+    }, z.core.$strict>;
+    constructor(registry: SupportBundleRegistry);
+    onModuleInit(): void;
+    collect(): Promise<MetaSupportBundleData>;
+}
+export {};
+//# sourceMappingURL=meta.section.d.ts.map

package/dist/doctor/support-bundle/sections/meta.section.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"meta.section.d.ts","sourceRoot":"","sources":["../../../../src/doctor/support-bundle/sections/meta.section.ts"],"names":[],"mappings":"AAOA,OAAO,EAAsB,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAClE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAChF,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAEnE;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,EAAE,SAAS,MAAM,EAOlD,CAAC;AAEH,QAAA,MAAM,iBAAiB;;;kBAOZ,CAAC;AAEZ;;;;GAIG;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAatE;;;;GAIG;AACH,qBACa,wBAAyB,YAAW,oBAAoB,CAAC,qBAAqB,CAAC,EAAE,YAAY;IAK7D,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAJpE,QAAQ,CAAC,EAAE,UAAU;IACrB,QAAQ,CAAC,KAAK,qBAAqB;IACnC,QAAQ,CAAC,MAAM;;;uBAAqB;gBAEwB,QAAQ,EAAE,qBAAqB;IAE3F,YAAY,IAAI,IAAI;IAId,OAAO,IAAI,OAAO,CAAC,qBAAqB,CAAC;CAQhD"}