@marinoscar/platform-api 0.1.0-next.3 → 0.1.0-next.4

package/dist/host/about/about.controller.js

@@ -0,0 +1,185 @@
+"use strict";
+// =============================================================================
+// /api/admin/about — what is actually deployed here (issue #401, epic #397)
+// =============================================================================
+//
+// ONE ROUTE, ONE STATUS CODE. `GET /api/admin/about` answers 200 for every
+// reachable-and-authorized caller, always. A missing deploy document, a
+// malformed one and an unreachable database are all FIELDS in the body. The
+// full argument for that lives in `dto/about-response.dto.ts`; the short version
+// is that an operator opens this page precisely when something is wrong, and a
+// 404 or a 503 would withhold the facts they came for.
+//
+// -----------------------------------------------------------------------------
+// ⚠ IT GATES ON THE EXISTING `system_settings:read`, AND INVENTS NOTHING
+// -----------------------------------------------------------------------------
+//
+// The permission is `SETTINGS_PERMISSIONS.SYSTEM_SETTINGS_READ.id` — the literal
+// string `system_settings:read`, already seeded Admin-only and already enforced
+// by `settings/system-settings/system-settings.controller.ts`.
+//
+// There is deliberately NO permission of its own. A new one would have to be
+// seeded, granted and explained, and it would buy nothing: this endpoint reports
+// the deployment's configuration, which is exactly the blast radius
+// `system_settings:read` already describes. The cases that argue for a SPLIT
+// permission elsewhere in this codebase (`push:*`, `broadcasts:*`, `nodes:*`,
+// `storage_config:*`) all turn on a DISTINCT blast radius — key material, sends
+// to every user, a fleet, a credential-bearing config screen. A read-only report
+// has none of that.
+//
+// ⚠ THE STRING HERE IS HALF OF A CROSS-APP CONTRACT. The web settings card that
+// reaches this route (a later issue in this epic) must declare the exact same
+// permission, and `apps/web/src/__tests__/config/settingsCards.test.ts` reads
+// THIS FILE'S SOURCE to prove the two agree byte for byte. Both spellings — the
+// `SETTINGS_PERMISSIONS.SYSTEM_SETTINGS_READ` reference below and the literal
+// `system_settings:read` — therefore appear in this file on purpose. Do not
+// "tidy" either of them away.
+//
+// -----------------------------------------------------------------------------
+// ⚠ THE DECORATOR IS `@Auth({ permissions: [...] })`, AND THE PERMISSION IS NOT
+// OPTIONAL
+// -----------------------------------------------------------------------------
+//
+// This follows `storage/config/storage-config.controller.ts` exactly — the
+// nearest neighbour on an `admin/` prefix — and not a hand-rolled
+// `@UseGuards(JwtAuthGuard)`. A route declared as merely AUTHENTICATED, with no
+// permission decorator, is the trap this epic has already been bitten by: the
+// resolved user is not necessarily attached to the request, `permissions` reads
+// as `undefined`, and an empty set silently filters permissioned content out of
+// a perfectly cheerful 200. Declaring the permission is what makes
+// `PermissionsGuard` run at all, and `test/about/about.integration.spec.ts`
+// drives this route through the REAL guard stack — a holder in, a non-holder
+// refused — because a unit test that hands the controller a user it built itself
+// cannot see that failure.
+//
+// Mounted at `admin/about` rather than `about` for the reason
+// `NodesAdminController` and `DatabaseBackupController` both give about their
+// prefixes: `JwtAuthGuard` treats path prefixes as part of what a non-session
+// credential may reach, and an administrative surface belongs outside the `nod_`
+// allowlist by construction rather than by a check somebody has to remember.
+// =============================================================================
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AboutController = exports.DEFAULT_ABOUT_PERMISSION = void 0;
+exports.createAboutController = createAboutController;
+const common_1 = require("@nestjs/common");
+const swagger_1 = require("@nestjs/swagger");
+const index_1 = require("../../core/index");
+const index_2 = require("../../settings/index");
+const host_access_1 = require("../internal/host-access");
+const about_service_1 = require("./about.service");
+const about_response_dto_1 = require("./dto/about-response.dto");
+/**
+ * The permission `GET /api/admin/about` requires unless the app configures another.
+ *
+ * @stability experimental
+ */
+exports.DEFAULT_ABOUT_PERMISSION = index_2.SETTINGS_PERMISSIONS.SYSTEM_SETTINGS_READ.id;
+/**
+ * Creates `GET /api/admin/about`'s controller, guarded by the app's access
+ * decorators (`PlatformHost.access`) and, by default, `system_settings:read`.
+ * `AboutModule.forRoot()` calls it.
+ *
+ * Exported for the reference app's wiring and tests; not a stable extension point (reach the report through `AboutModule.forRoot`).
+ *
+ * @param options - see {@link AboutControllerOptions}.
+ * @returns the controller class.
+ *
+ * @internal
+ */
+function createAboutController(options = {}) {
+    const requireAccess = (0, host_access_1.resolveHostAccess)(options.host).requirePermissions([
+        options.permission ?? exports.DEFAULT_ABOUT_PERMISSION,
+    ]);
+    let AboutController = class AboutController {
+        about;
+        constructor(about) {
+            this.about = about;
+        }
+        async getAbout() {
+            return this.about.describe();
+        }
+    };
+    __decorate([
+        (0, common_1.Get)(),
+        requireAccess,
+        (0, swagger_1.ApiOperation)({
+            summary: 'Report what is deployed here (Admin only)',
+            description: 'Reports this deployment: the API version the process resolved for itself, the deploy ' +
+                'document `appctl deploy` left on disk, and a database liveness fact.\n\n' +
+                '**Always answers `200`.** A missing document is `deployInfoStatus: "absent"`, an ' +
+                'unreadable or malformed one is `"invalid"`, and a database that does not answer is ' +
+                '`database: null` with a `databaseError` string. None of the three is an error status: ' +
+                'this endpoint is read when something has gone wrong, so every failure it can have is a ' +
+                'field rather than a status code.\n\n' +
+                '**Three deploy states, not two.** Beyond `ok` and `absent`, a document can be complete ' +
+                'AND describe a run that failed — `deployInfoStatus: "ok"` with `run.outcome: "failure"` ' +
+                'and `run.failedStep` naming where it stopped. That run still deployed something, so ' +
+                'every fact it recorded is reported.\n\n' +
+                '**Never performs network I/O.** `remote` is copied from the document as-is; this route ' +
+                'does not contact the deploy remote, run git, or refresh anything. The document is read ' +
+                'from disk on every request, so rewriting it needs no restart.\n\n' +
+                '`deployInfoPath` is the exact path that was read, and on an `absent` answer it is the ' +
+                'actionable fact — the file may simply be at a different path, on an unattached bind ' +
+                'mount, or from a run that stopped before writing it.\n\n' +
+                '**Deployment details (issue #392).** `lastCommand`, `bindPort`, `proxy`, `host` and ' +
+                '`history` (successful runs, newest first, at most 20) are also read from the document, ' +
+                'leniently: an invalid sub-field is `null` and an invalid history entry is dropped. `host` ' +
+                'and `proxy.certificateExpiresAt` are as the CLI observed them when it wrote the file, not ' +
+                'live. `runtime` (`processStartedAt`, `nodeVersion`, `environment`) is the one live object, ' +
+                'describing this API process.\n\n' +
+                'Requires `system_settings:read`.',
+        }),
+        (0, swagger_1.ApiResponse)({
+            status: 200,
+            description: 'The deployment report. Returned for every authorized caller, whatever the state of ' +
+                'the deploy document or the database.',
+            type: about_response_dto_1.AboutResponseDto,
+        }),
+        __metadata("design:type", Function),
+        __metadata("design:paramtypes", []),
+        __metadata("design:returntype", Promise)
+    ], AboutController.prototype, "getAbout", null);
+    AboutController = __decorate([
+        (0, swagger_1.ApiTags)('About')
+        // ⚠ READABLE DURING A MAINTENANCE WINDOW, deliberately.
+        //
+        // Every other admin surface is blocked while a window is open, and that is
+        // right: they CHANGE things. This one only reports, and the moment an operator
+        // most needs it is precisely the moment a window is open -- a deploy failed
+        // partway, somebody opened the window to stop traffic, and the question they
+        // now have is "what is actually on this box?". Answering 503 to that question
+        // withholds the one page that could answer it, from the one person entitled to
+        // ask.
+        //
+        // It is safe to exempt on the same grounds the health probes are: it performs
+        // no network I/O, writes nothing, and already reports an unreachable database
+        // as a field rather than an error -- which is the state a window is often
+        // covering for. It remains gated on `system_settings:read`, so the exemption
+        // widens no surface to anyone who could not already read it.
+        ,
+        (0, index_1.AllowDuringMaintenance)(),
+        (0, common_1.Controller)('admin/about'),
+        __param(0, (0, common_1.Inject)(about_service_1.AboutService)),
+        __metadata("design:paramtypes", [about_service_1.AboutService])
+    ], AboutController);
+    return AboutController;
+}
+/**
+ * The about controller with the default permission and the identity slice's `@Auth()`.
+ *
+ * @internal
+ */
+exports.AboutController = createAboutController();
+//# sourceMappingURL=about.controller.js.map

package/dist/host/about/about.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"about.controller.js","sourceRoot":"","sources":["../../../src/host/about/about.controller.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,4EAA4E;AAC5E,gFAAgF;AAChF,EAAE;AACF,2EAA2E;AAC3E,wEAAwE;AACxE,4EAA4E;AAC5E,iFAAiF;AACjF,+EAA+E;AAC/E,uDAAuD;AACvD,EAAE;AACF,gFAAgF;AAChF,yEAAyE;AACzE,gFAAgF;AAChF,EAAE;AACF,iFAAiF;AACjF,gFAAgF;AAChF,+DAA+D;AAC/D,EAAE;AACF,6EAA6E;AAC7E,iFAAiF;AACjF,oEAAoE;AACpE,6EAA6E;AAC7E,8EAA8E;AAC9E,gFAAgF;AAChF,iFAAiF;AACjF,oBAAoB;AACpB,EAAE;AACF,gFAAgF;AAChF,8EAA8E;AAC9E,8EAA8E;AAC9E,gFAAgF;AAChF,8EAA8E;AAC9E,4EAA4E;AAC5E,8BAA8B;AAC9B,EAAE;AACF,gFAAgF;AAChF,gFAAgF;AAChF,WAAW;AACX,gFAAgF;AAChF,EAAE;AACF,2EAA2E;AAC3E,kEAAkE;AAClE,gFAAgF;AAChF,8EAA8E;AAC9E,gFAAgF;AAChF,gFAAgF;AAChF,mEAAmE;AACnE,4EAA4E;AAC5E,6EAA6E;AAC7E,iFAAiF;AACjF,2BAA2B;AAC3B,EAAE;AACF,8DAA8D;AAC9D,8EAA8E;AAC9E,8EAA8E;AAC9E,iFAAiF;AACjF,6EAA6E;AAC7E,gFAAgF;;;;;;;;;;;;;;;AA8DhF,sDAqEC;AAjID,2CAAyD;AACzD,6CAAqE;AAErE,4CAA6E;AAC7E,gDAA4D;AAC5D,yDAA4D;AAC5D,mDAA+C;AAC/C,iEAA4D;AAE5D;;;;GAIG;AACU,QAAA,wBAAwB,GAAW,4BAAoB,CAAC,oBAAoB,CAAC,EAAE,CAAC;AAkC7F;;;;;;;;;;;GAWG;AACH,SAAgB,qBAAqB,CAAC,UAAkC,EAAE;IACxE,MAAM,aAAa,GAAG,IAAA,+BAAiB,EAAC,OAAO,CAAC,IAAI,CAAC,CAAC,kBAAkB,CAAC;QACvE,OAAO,CAAC,UAAU,IAAI,gCAAwB;KAC/C,CAAC,CAAC;IAEH,IAkBM,eAAe,GAlBrB,MAkBM,eAAe;QACgC;QAAnD,YAAmD,KAAmB;YAAnB,UAAK,GAAL,KAAK,CAAc;QAAG,CAAC;QAuCpE,AAAN,KAAK,CAAC,QAAQ;YACZ,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC/B,CAAC;KACF,CAAA;IAHO;QArCL,IAAA,YAAG,GAAE;QACL,aAAa;QACb,IAAA,sBAAY,EAAC;YACZ,OAAO,EAAE,2CAA2C;YACpD,WAAW,EACT,uFAAuF;gBACvF,0EAA0E;gBAC1E,mFAAmF;gBACnF,qFAAqF;gBACrF,wFAAwF;gBACxF,yFAAyF;gBACzF,sCAAsC;gBACtC,yFAAyF;gBACzF,0FAA0F;gBAC1F,sFAAsF;gBACtF,yCAAyC;gBACzC,yFAAyF;gBACzF,yFAAyF;gBACzF,mEAAmE;gBACnE,wFAAwF;gBACxF,sFAAsF;gBACtF,0DAA0D;gBAC1D,sFAAsF;gBACtF,yFAAyF;gBACzF,4FAA4F;gBAC5F,4FAA4F;gBAC5F,6FAA6F;gBAC7F,kCAAkC;gBAClC,kCAAkC;SACrC,CAAC;QACD,IAAA,qBAAW,EAAC;YACX,MAAM,EAAE,GAAG;YACX,WAAW,EACT,qFAAqF;gBACrF,sCAAsC;YACxC,IAAI,EAAE,qCAAgB;SACvB,CAAC;;;;mDAGD;IA1CG,eAAe;QAlBpB,IAAA,iBAAO,EAAC,OAAO,CAAC;QACjB,wDAAwD;QACxD,EAAE;QACF,2EAA2E;QAC3E,+EAA+E;QAC/E,4EAA4E;QAC5E,6EAA6E;QAC7E,8EAA8E;QAC9E,+EAA+E;QAC/E,OAAO;QACP,EAAE;QACF,8EAA8E;QAC9E,8EAA8E;QAC9E,0EAA0E;QAC1E,6EAA6E;QAC7E,6DAA6D;;QAC5D,IAAA,8BAAsB,GAAE;QACxB,IAAA,mBAAU,EAAC,aAAa,CAAC;QAEX,WAAA,IAAA,eAAM,EAAC,4BAAY,CAAC,CAAA;yCAAyB,4BAAY;OADlE,eAAe,CA2CpB;IAED,OAAO,eAAe,CAAC;AACzB,CAAC;AAED;;;;GAIG;AACU,QAAA,eAAe,GAAyB,qBAAqB,EAAE,CAAC"}

package/dist/host/about/about.module.d.ts

@@ -0,0 +1,22 @@
+import { DynamicModule } from '@nestjs/common';
+import { type AboutModuleOptions } from './about.options';
+/**
+ * `GET /api/admin/about`: what is actually deployed here (the API version, the
+ * deploy document `appctl deploy` left on disk, the deployment mode and a
+ * database liveness fact), plus the `versions` support-bundle section.
+ *
+ * @stability experimental
+ */
+export declare class AboutModule {
+    /**
+     * The about module for one app.
+     *
+     * @param options - see {@link AboutModuleOptions}.
+     * @returns the dynamic module.
+     *
+     * @extensionPoint option
+     * @stability experimental
+     */
+    static forRoot(options: AboutModuleOptions): DynamicModule;
+}
+//# sourceMappingURL=about.module.d.ts.map

package/dist/host/about/about.module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"about.module.d.ts","sourceRoot":"","sources":["../../../src/host/about/about.module.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAU,MAAM,gBAAgB,CAAC;AAGvD,OAAO,EAAiB,KAAK,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAuBzE;;;;;;GAMG;AACH,qBACa,WAAW;IACtB;;;;;;;;OAQG;IACH,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,kBAAkB,GAAG,aAAa;CAiB3D"}

package/dist/host/about/about.module.js

@@ -0,0 +1,73 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var AboutModule_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AboutModule = void 0;
+const common_1 = require("@nestjs/common");
+const about_support_bundle_section_1 = require("./about-support-bundle.section");
+const about_options_1 = require("./about.options");
+const about_controller_1 = require("./about.controller");
+const about_service_1 = require("./about.service");
+// =============================================================================
+// AboutModule (issue #401, epic #397; packaged by #891)
+// =============================================================================
+//
+// One controller, one service, one `forRoot`.
+//
+// The database liveness fact is one `SELECT 1` through core's `PLATFORM_PRISMA`
+// host port (the same port the `db.connection` Doctor check probes), so the
+// module imports nothing from the app: the old `HealthModule` import, which
+// existed only to reuse the readiness indicator, is gone.
+//
+// This module reads no settings. The deploy document comes off the local
+// filesystem and the API version comes from the app's `apiVersion` option.
+// `DeploymentModeService` comes from `PlatformHostCoreModule` (global).
+//
+// Import it where `/api/admin/about` belongs in the generated OpenAPI document,
+// which lists paths in module order. Nothing is exported.
+// =============================================================================
+/**
+ * `GET /api/admin/about`: what is actually deployed here (the API version, the
+ * deploy document `appctl deploy` left on disk, the deployment mode and a
+ * database liveness fact), plus the `versions` support-bundle section.
+ *
+ * @stability experimental
+ */
+let AboutModule = AboutModule_1 = class AboutModule {
+    /**
+     * The about module for one app.
+     *
+     * @param options - see {@link AboutModuleOptions}.
+     * @returns the dynamic module.
+     *
+     * @extensionPoint option
+     * @stability experimental
+     */
+    static forRoot(options) {
+        if (options.permission !== undefined && (typeof options.permission !== 'string' || options.permission.trim() === '')) {
+            throw new Error('AboutModule.forRoot: permission must be a non-empty string');
+        }
+        const { host, permission, ...resolved } = options;
+        return {
+            module: AboutModule_1,
+            controllers: [(0, about_controller_1.createAboutController)({ host, permission })],
+            providers: [
+                { provide: about_options_1.ABOUT_OPTIONS, useValue: Object.freeze({ ...resolved }) },
+                about_service_1.AboutService,
+                // The `versions` support-bundle section (#772) registers itself with the
+                // global `SupportBundleRegistry` (`@marinoscar/platform-api/doctor`).
+                about_support_bundle_section_1.AboutSupportBundleSection,
+            ],
+        };
+    }
+};
+exports.AboutModule = AboutModule;
+exports.AboutModule = AboutModule = AboutModule_1 = __decorate([
+    (0, common_1.Module)({})
+], AboutModule);
+//# sourceMappingURL=about.module.js.map

package/dist/host/about/about.module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"about.module.js","sourceRoot":"","sources":["../../../src/host/about/about.module.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,2CAAuD;AAEvD,iFAA2E;AAC3E,mDAAyE;AACzE,yDAA2D;AAC3D,mDAA+C;AAE/C,gFAAgF;AAChF,wDAAwD;AACxD,gFAAgF;AAChF,EAAE;AACF,8CAA8C;AAC9C,EAAE;AACF,gFAAgF;AAChF,4EAA4E;AAC5E,4EAA4E;AAC5E,0DAA0D;AAC1D,EAAE;AACF,yEAAyE;AACzE,2EAA2E;AAC3E,wEAAwE;AACxE,EAAE;AACF,gFAAgF;AAChF,0DAA0D;AAC1D,gFAAgF;AAEhF;;;;;;GAMG;AAEI,IAAM,WAAW,mBAAjB,MAAM,WAAW;IACtB;;;;;;;;OAQG;IACH,MAAM,CAAC,OAAO,CAAC,OAA2B;QACxC,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,OAAO,OAAO,CAAC,UAAU,KAAK,QAAQ,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;YACrH,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;QAChF,CAAC;QACD,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,QAAQ,EAAE,GAAG,OAAO,CAAC;QAClD,OAAO;YACL,MAAM,EAAE,aAAW;YACnB,WAAW,EAAE,CAAC,IAAA,wCAAqB,EAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;YAC1D,SAAS,EAAE;gBACT,EAAE,OAAO,EAAE,6BAAa,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,QAAQ,EAAE,CAAC,EAAE;gBACpE,4BAAY;gBACZ,yEAAyE;gBACzE,sEAAsE;gBACtE,wDAAyB;aAC1B;SACF,CAAC;IACJ,CAAC;CACF,CAAA;AA3BY,kCAAW;sBAAX,WAAW;IADvB,IAAA,eAAM,EAAC,EAAE,CAAC;GACE,WAAW,CA2BvB"}

package/dist/host/about/about.options.d.ts

@@ -0,0 +1,38 @@
+import type { PlatformHost } from '../../core/index';
+/**
+ * What {@link AboutModule.forRoot} takes from the app.
+ *
+ * @example
+ * ```ts
+ * // apps/api/src/platform/about.config.ts
+ * export const aboutModule = AboutModule.forRoot({ apiVersion: resolveApiVersion });
+ * ```
+ *
+ * @extensionPoint option
+ * @stability experimental
+ */
+export interface AboutModuleOptions {
+    /**
+     * The API's own version, as the app resolves it (`resolveApiVersion(__dirname)`
+     * of the host slice, called from a directory inside the APP). Called per
+     * request and must never throw.
+     */
+    apiVersion: () => string;
+    /**
+     * The app's access decorators (`definePlatformHost(...)`), so the route is
+     * guarded exactly as the app's own admin routes are. Omitted, the identity
+     * slice's `@Auth()` is used, which is what the reference app binds.
+     */
+    host?: PlatformHost;
+    /**
+     * The permission `GET /api/admin/about` requires. Default `system_settings:read`.
+     * An app that changes it must change the About settings card's `permission`
+     * to the same string.
+     */
+    permission?: string;
+}
+/** The resolved options, as injected. */
+export type ResolvedAboutOptions = Readonly<AboutModuleOptions>;
+/** Injection token for the resolved {@link AboutModuleOptions}. */
+export declare const ABOUT_OPTIONS: unique symbol;
+//# sourceMappingURL=about.options.d.ts.map

package/dist/host/about/about.options.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"about.options.d.ts","sourceRoot":"","sources":["../../../src/host/about/about.options.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAErD;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,kBAAkB;IACjC;;;;OAIG;IACH,UAAU,EAAE,MAAM,MAAM,CAAC;IACzB;;;;OAIG;IACH,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,yCAAyC;AACzC,MAAM,MAAM,oBAAoB,GAAG,QAAQ,CAAC,kBAAkB,CAAC,CAAC;AAEhE,mEAAmE;AACnE,eAAO,MAAM,aAAa,eAA0B,CAAC"}

package/dist/host/about/about.options.js

@@ -0,0 +1,16 @@
+"use strict";
+// =============================================================================
+// AboutModule options (issue #891)
+// =============================================================================
+//
+// The report is the platform's, but one fact in it is the APP's: the version of
+// the API the process is running. The platform cannot find it (walking up from
+// this package would find the package's own `package.json`, never the app's),
+// so the app hands it a resolver, exactly as it hands `createOpenApiDocument`
+// its `version`.
+// =============================================================================
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ABOUT_OPTIONS = void 0;
+/** Injection token for the resolved {@link AboutModuleOptions}. */
+exports.ABOUT_OPTIONS = Symbol('ABOUT_OPTIONS');
+//# sourceMappingURL=about.options.js.map

package/dist/host/about/about.options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"about.options.js","sourceRoot":"","sources":["../../../src/host/about/about.options.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,mCAAmC;AACnC,gFAAgF;AAChF,EAAE;AACF,gFAAgF;AAChF,+EAA+E;AAC/E,8EAA8E;AAC9E,8EAA8E;AAC9E,iBAAiB;AACjB,gFAAgF;;;AAwChF,mEAAmE;AACtD,QAAA,aAAa,GAAG,MAAM,CAAC,eAAe,CAAC,CAAC"}

package/dist/host/about/about.service.d.ts

@@ -0,0 +1,52 @@
+import { type PrismaClientLike } from '../../core/index';
+import { DeploymentModeService } from '../deployment/deployment-mode.service';
+import { type ResolvedAboutOptions } from './about.options';
+import type { AboutResponse } from './dto/about-response.dto';
+/**
+ * Builds the deployment report served at `GET /api/admin/about`.
+ *
+ * Exported for the reference app's wiring and tests; not a stable extension point (reach the report through `AboutModule.forRoot`).
+ *
+ * @internal
+ */
+export declare class AboutService {
+    private readonly options;
+    private readonly prisma;
+    private readonly deployment;
+    private readonly logger;
+    constructor(options: ResolvedAboutOptions, prisma: PrismaClientLike | undefined, deployment: DeploymentModeService);
+    /**
+     * Builds the whole report.
+     *
+     * ⚠ NO CACHING ANYWHERE IN THIS METHOD, and that is a requirement rather than
+     * an omission. `appctl deploy update` rewrites `info.json` in place against a
+     * running container; a memoised read — even a short-lived one — would serve a
+     * stale commit SHA immediately after the deploy that changed it, which is the
+     * one moment anybody looks at this page.
+     */
+    describe(): Promise<AboutResponse>;
+    /**
+     * The facts the app's contributors report (`registerAboutContributor`), in
+     * registration order, run in parallel.
+     *
+     * ⚠ A FAILING CONTRIBUTOR IS OMITTED, NEVER AN ERROR. Like the other two
+     * facts, a contributor must not take the report down: a throw or a timeout
+     * logs a warning and that group is left out. Each group's facts are bounded
+     * and secret-filtered (`boundFacts`) before they are returned.
+     */
+    private collectExtras;
+    /**
+     * Asks the database whether it answers: one `SELECT 1` through the
+     * `PLATFORM_PRISMA` host port, timed.
+     *
+     * ⚠ A FAILURE IS A FIELD, NOT A 503. The probe throws when the database does
+     * not answer, which is the right contract for a readiness probe (it wants a
+     * non-2xx). It is the wrong contract here, so the throw is caught and turned
+     * back into data. Letting it escape would mean the one page that reports what
+     * is deployed stops loading whenever the database is the thing that is
+     * broken, hiding the API version, the commit SHA and the deploy document,
+     * none of which need a database to be known.
+     */
+    private probeDatabase;
+}
+//# sourceMappingURL=about.service.d.ts.map

package/dist/host/about/about.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"about.service.d.ts","sourceRoot":"","sources":["../../../src/host/about/about.service.ts"],"names":[],"mappings":"AAsBA,OAAO,EAAmB,KAAK,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAC1E,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAG9E,OAAO,EAAiB,KAAK,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAE3E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAS9D;;;;;;GAMG;AACH,qBACa,YAAY;IAIE,OAAO,CAAC,QAAQ,CAAC,OAAO;IACV,OAAO,CAAC,QAAQ,CAAC,MAAM;IAG5D,OAAO,CAAC,QAAQ,CAAC,UAAU;IAP7B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiC;gBAGd,OAAO,EAAE,oBAAoB,EACf,MAAM,EAAE,gBAAgB,GAAG,SAAS,EAGzE,UAAU,EAAE,qBAAqB;IAGpD;;;;;;;;OAQG;IACG,QAAQ,IAAI,OAAO,CAAC,aAAa,CAAC;IAsDxC;;;;;;;;OAQG;YACW,aAAa;IAkB3B;;;;;;;;;;;OAWG;YACW,aAAa;CA2B5B"}

package/dist/host/about/about.service.js

@@ -0,0 +1,202 @@
+"use strict";
+// =============================================================================
+// AboutService — assembles the deployment report (issue #401, epic #397)
+// =============================================================================
+//
+// Three independent facts, gathered with a strict rule between them: NO ONE OF
+// THEM MAY TAKE DOWN THE OTHER TWO.
+//
+//   1. The API's own version, from the app's `apiVersion` option (the
+//      reference app passes its `resolveApiVersion`). Always available; the
+//      resolver never throws and falls back to `'0.0.0'`.
+//   2. The deploy document on disk, read fresh per request.
+//   3. A database liveness probe: one `SELECT 1` through the `PLATFORM_PRISMA`
+//      host port, timed.
+//
+// Each is obtained inside its own failure boundary, and every failure becomes a
+// field. Nothing here throws an HTTP exception, because the controller above it
+// has exactly one status code to return and the reason is argued at length in
+// `dto/about-response.dto.ts`.
+// =============================================================================
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var AboutService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AboutService = void 0;
+const common_1 = require("@nestjs/common");
+const index_1 = require("../../core/index");
+const deployment_mode_service_1 = require("../deployment/deployment-mode.service");
+const bounded_1 = require("../internal/bounded");
+const about_contributor_registry_1 = require("./about-contributor.registry");
+const about_options_1 = require("./about.options");
+const deploy_info_1 = require("./deploy-info");
+/**
+ * When this process started, fixed once at module load. `process.uptime()` is
+ * measured from process start, so subtracting it from "now" at load time gives
+ * the start instant; computing it per request would drift by clock jitter.
+ */
+const PROCESS_STARTED_AT = new Date(Date.now() - process.uptime() * 1000).toISOString();
+/**
+ * Builds the deployment report served at `GET /api/admin/about`.
+ *
+ * Exported for the reference app's wiring and tests; not a stable extension point (reach the report through `AboutModule.forRoot`).
+ *
+ * @internal
+ */
+let AboutService = AboutService_1 = class AboutService {
+    options;
+    prisma;
+    deployment;
+    logger = new common_1.Logger(AboutService_1.name);
+    constructor(options, prisma, 
+    // #685. Memory only: the mode was parsed when the container built, so
+    // reading it cannot fail and cannot cost the "always answers 200" rule.
+    deployment) {
+        this.options = options;
+        this.prisma = prisma;
+        this.deployment = deployment;
+    }
+    /**
+     * Builds the whole report.
+     *
+     * ⚠ NO CACHING ANYWHERE IN THIS METHOD, and that is a requirement rather than
+     * an omission. `appctl deploy update` rewrites `info.json` in place against a
+     * running container; a memoised read — even a short-lived one — would serve a
+     * stale commit SHA immediately after the deploy that changed it, which is the
+     * one moment anybody looks at this page.
+     */
+    async describe() {
+        const path = (0, deploy_info_1.resolveDeployInfoPath)();
+        const deployInfo = await (0, deploy_info_1.readDeployInfo)(path);
+        const { database, databaseError } = await this.probeDatabase();
+        const extras = await this.collectExtras();
+        const document = deployInfo.document;
+        return {
+            api: { version: this.options.apiVersion(), deploymentMode: this.deployment.mode },
+            deployInfoStatus: deployInfo.status,
+            deployInfoPath: deployInfo.path,
+            deployInfoError: deployInfo.error,
+            // Every one of these is `null` when no document was read. Deliberately
+            // not "" or a placeholder object — see the DTO's note on fabricated
+            // defaults, and note especially that `installedAt`/`updatedAt` never fall
+            // back to the current time.
+            app: document?.app ?? null,
+            installedAt: document?.installedAt ?? null,
+            updatedAt: document?.updatedAt ?? null,
+            deployedBy: document?.deployedBy ?? null,
+            domain: document?.domain ?? null,
+            remote: document?.remote ?? null,
+            // The third state rides here: a document whose `run.outcome` is
+            // `'failure'` still arrives with `deployInfoStatus: 'ok'` and every other
+            // field populated, plus `run.failedStep` naming where it stopped.
+            run: document?.run ?? null,
+            // Issue #392 additions — same `null`-when-no-document rule.
+            lastCommand: document?.lastCommand ?? null,
+            bindPort: document?.bindPort ?? null,
+            proxy: document?.proxy ?? null,
+            host: document?.host ?? null,
+            history: document?.history ?? null,
+            // Live, not from disk — the one part of this report always current.
+            runtime: {
+                processStartedAt: PROCESS_STARTED_AT,
+                nodeVersion: process.version,
+                environment: process.env.NODE_ENV?.trim() || null,
+            },
+            database,
+            databaseError,
+            // Only when an app registered a contributor and one answered, so a
+            // deployment with none answers exactly as it always did.
+            ...(extras.length > 0 ? { extras } : {}),
+        };
+    }
+    /**
+     * The facts the app's contributors report (`registerAboutContributor`), in
+     * registration order, run in parallel.
+     *
+     * ⚠ A FAILING CONTRIBUTOR IS OMITTED, NEVER AN ERROR. Like the other two
+     * facts, a contributor must not take the report down: a throw or a timeout
+     * logs a warning and that group is left out. Each group's facts are bounded
+     * and secret-filtered (`boundFacts`) before they are returned.
+     */
+    async collectExtras() {
+        const contributors = about_contributor_registry_1.aboutContributorRegistry.list();
+        if (contributors.length === 0)
+            return [];
+        const settled = await Promise.all(contributors.map(async (contributor) => {
+            try {
+                const facts = (0, bounded_1.boundFacts)(await (0, bounded_1.withTimeout)(contributor.describe(), about_contributor_registry_1.ABOUT_CONTRIBUTOR_TIMEOUT_MS));
+                return { id: contributor.id, label: contributor.label, facts };
+            }
+            catch (error) {
+                this.logger.warn(`About contributor "${contributor.id}" failed and was left out: ${describe(error)}`);
+                return null;
+            }
+        }));
+        return settled.filter((entry) => entry !== null);
+    }
+    /**
+     * Asks the database whether it answers: one `SELECT 1` through the
+     * `PLATFORM_PRISMA` host port, timed.
+     *
+     * ⚠ A FAILURE IS A FIELD, NOT A 503. The probe throws when the database does
+     * not answer, which is the right contract for a readiness probe (it wants a
+     * non-2xx). It is the wrong contract here, so the throw is caught and turned
+     * back into data. Letting it escape would mean the one page that reports what
+     * is deployed stops loading whenever the database is the thing that is
+     * broken, hiding the API version, the commit SHA and the deploy document,
+     * none of which need a database to be known.
+     */
+    async probeDatabase() {
+        if (!this.prisma) {
+            return {
+                database: null,
+                databaseError: 'No database client is bound to PLATFORM_PRISMA, so there is nothing to probe.',
+            };
+        }
+        const startedAt = Date.now();
+        try {
+            await this.prisma.$queryRaw `SELECT 1`;
+            return {
+                database: { status: 'up', responseTime: `${Date.now() - startedAt}ms` },
+                databaseError: null,
+            };
+        }
+        catch (error) {
+            // Logged at `warn`, not `error`: a page load is not an incident.
+            this.logger.warn(`Database probe failed while building the about report: ${describe(error)}`);
+            return { database: null, databaseError: describe(error) };
+        }
+    }
+};
+exports.AboutService = AboutService;
+exports.AboutService = AboutService = AboutService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Inject)(about_options_1.ABOUT_OPTIONS)),
+    __param(1, (0, common_1.Optional)()),
+    __param(1, (0, common_1.Inject)(index_1.PLATFORM_PRISMA)),
+    __metadata("design:paramtypes", [Object, Object, deployment_mode_service_1.DeploymentModeService])
+], AboutService);
+/**
+ * A message for the client that never leaks a stack trace.
+ *
+ * Only the MESSAGE is taken, never the error object: a stack trace must not
+ * reach a response body. An error with no message, or a value that is not an
+ * `Error`, still produces a sentence an operator can read.
+ */
+function describe(error) {
+    if (error instanceof Error) {
+        return error.message.length > 0 ? error.message : 'The database did not answer.';
+    }
+    return 'Unknown error';
+}
+//# sourceMappingURL=about.service.js.map

package/dist/host/about/about.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"about.service.js","sourceRoot":"","sources":["../../../src/host/about/about.service.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,yEAAyE;AACzE,gFAAgF;AAChF,EAAE;AACF,+EAA+E;AAC/E,oCAAoC;AACpC,EAAE;AACF,sEAAsE;AACtE,4EAA4E;AAC5E,0DAA0D;AAC1D,4DAA4D;AAC5D,+EAA+E;AAC/E,yBAAyB;AACzB,EAAE;AACF,gFAAgF;AAChF,gFAAgF;AAChF,8EAA8E;AAC9E,+BAA+B;AAC/B,gFAAgF;;;;;;;;;;;;;;;;AAEhF,2CAAsE;AAEtE,4CAA0E;AAC1E,mFAA8E;AAC9E,iDAA8D;AAC9D,6EAAsG;AACtG,mDAA2E;AAC3E,+CAAsE;AAGtE;;;;GAIG;AACH,MAAM,kBAAkB,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;AAExF;;;;;;GAMG;AAEI,IAAM,YAAY,oBAAlB,MAAM,YAAY;IAImB;IACc;IAGrC;IAPF,MAAM,GAAG,IAAI,eAAM,CAAC,cAAY,CAAC,IAAI,CAAC,CAAC;IAExD,YAC0C,OAA6B,EACf,MAAoC;IAC1F,sEAAsE;IACtE,wEAAwE;IACvD,UAAiC;QAJV,YAAO,GAAP,OAAO,CAAsB;QACf,WAAM,GAAN,MAAM,CAA8B;QAGzE,eAAU,GAAV,UAAU,CAAuB;IACjD,CAAC;IAEJ;;;;;;;;OAQG;IACH,KAAK,CAAC,QAAQ;QACZ,MAAM,IAAI,GAAG,IAAA,mCAAqB,GAAE,CAAC;QACrC,MAAM,UAAU,GAAG,MAAM,IAAA,4BAAc,EAAC,IAAI,CAAC,CAAC;QAC9C,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAC/D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAE1C,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;QAErC,OAAO;YACL,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,cAAc,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE;YAEjF,gBAAgB,EAAE,UAAU,CAAC,MAAM;YACnC,cAAc,EAAE,UAAU,CAAC,IAAI;YAC/B,eAAe,EAAE,UAAU,CAAC,KAAK;YAEjC,uEAAuE;YACvE,oEAAoE;YACpE,0EAA0E;YAC1E,4BAA4B;YAC5B,GAAG,EAAE,QAAQ,EAAE,GAAG,IAAI,IAAI;YAC1B,WAAW,EAAE,QAAQ,EAAE,WAAW,IAAI,IAAI;YAC1C,SAAS,EAAE,QAAQ,EAAE,SAAS,IAAI,IAAI;YACtC,UAAU,EAAE,QAAQ,EAAE,UAAU,IAAI,IAAI;YACxC,MAAM,EAAE,QAAQ,EAAE,MAAM,IAAI,IAAI;YAChC,MAAM,EAAE,QAAQ,EAAE,MAAM,IAAI,IAAI;YAEhC,gEAAgE;YAChE,0EAA0E;YAC1E,kEAAkE;YAClE,GAAG,EAAE,QAAQ,EAAE,GAAG,IAAI,IAAI;YAE1B,4DAA4D;YAC5D,WAAW,EAAE,QAAQ,EAAE,WAAW,IAAI,IAAI;YAC1C,QAAQ,EAAE,QAAQ,EAAE,QAAQ,IAAI,IAAI;YACpC,KAAK,EAAE,QAAQ,EAAE,KAAK,IAAI,IAAI;YAC9B,IAAI,EAAE,QAAQ,EAAE,IAAI,IAAI,IAAI;YAC5B,OAAO,EAAE,QAAQ,EAAE,OAAO,IAAI,IAAI;YAElC,oEAAoE;YACpE,OAAO,EAAE;gBACP,gBAAgB,EAAE,kBAAkB;gBACpC,WAAW,EAAE,OAAO,CAAC,OAAO;gBAC5B,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,IAAI;aAClD;YAED,QAAQ;YACR,aAAa;YAEb,mEAAmE;YACnE,yDAAyD;YACzD,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzC,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IACK,KAAK,CAAC,aAAa;QACzB,MAAM,YAAY,GAAG,qDAAwB,CAAC,IAAI,EAAE,CAAC;QACrD,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAEzC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,WAAW,EAAE,EAAE;YACrC,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,IAAA,oBAAU,EAAC,MAAM,IAAA,qBAAW,EAAC,WAAW,CAAC,QAAQ,EAAE,EAAE,yDAA4B,CAAC,CAAC,CAAC;gBAClG,OAAO,EAAE,EAAE,EAAE,WAAW,CAAC,EAAE,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC;YACjE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,sBAAsB,WAAW,CAAC,EAAE,8BAA8B,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBACtG,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC,CAAC,CACH,CAAC;QACF,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAsC,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC;IACvF,CAAC;IAED;;;;;;;;;;;OAWG;IACK,KAAK,CAAC,aAAa;QAGzB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,OAAO;gBACL,QAAQ,EAAE,IAAI;gBACd,aAAa,EAAE,+EAA+E;aAC/F,CAAC;QACJ,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAA,UAAU,CAAC;YAEtC,OAAO;gBACL,QAAQ,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,IAAI,EAAE;gBACvE,aAAa,EAAE,IAAI;aACpB,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,iEAAiE;YACjE,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,0DAA0D,QAAQ,CAAC,KAAK,CAAC,EAAE,CAC5E,CAAC;YAEF,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5D,CAAC;IACH,CAAC;CACF,CAAA;AA5IY,oCAAY;uBAAZ,YAAY;IADxB,IAAA,mBAAU,GAAE;IAKR,WAAA,IAAA,eAAM,EAAC,6BAAa,CAAC,CAAA;IACrB,WAAA,IAAA,iBAAQ,GAAE,CAAA;IAAE,WAAA,IAAA,eAAM,EAAC,uBAAe,CAAC,CAAA;qDAGP,+CAAqB;GARzC,YAAY,CA4IxB;AAED;;;;;;GAMG;AACH,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,8BAA8B,CAAC;IACnF,CAAC;IAED,OAAO,eAAe,CAAC;AACzB,CAAC"}

package/dist/host/about/deploy-info.constants.d.ts

@@ -0,0 +1,9 @@
+/**
+ * The three deploy-document statuses, as a tuple `z.enum` can consume.
+ *
+ * Lives beside `deploy-info.ts` rather than inside it so the response DTO can
+ * import it without pulling `fs/promises` into a module that only describes a
+ * shape.
+ */
+export declare const DEPLOY_INFO_STATUSES: readonly ["ok", "absent", "invalid"];
+//# sourceMappingURL=deploy-info.constants.d.ts.map

package/dist/host/about/deploy-info.constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deploy-info.constants.d.ts","sourceRoot":"","sources":["../../../src/host/about/deploy-info.constants.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB,sCAAuC,CAAC"}