@marinoscar/platform-contract 0.0.0-stage → 0.1.0-next.4

package/dist/esm/db-backup/settings-schemas.js

@@ -0,0 +1,316 @@
+// =============================================================================
+// Database backup: the `databaseBackup` system-settings namespace's schemas
+// (issue #740, PP-8.7)
+// =============================================================================
+//
+// The five schemas the namespace declaration of
+// `@marinoscar/platform-api/db-backup` (`DATABASE_BACKUP_SYSTEM_SETTINGS`) is
+// built from: the stored value and its partial, the PUT and PATCH wire
+// branches, and the GET response branch. Moved verbatim (design comments
+// included) from the reference app's `common/schemas/settings.schema.ts`,
+// `system-settings-wire.schemas.ts` and `system-settings-response.schemas.ts`,
+// which re-export them. Every bound is unchanged, so the OpenAPI document of
+// `/api/system-settings` is too.
+// =============================================================================
+import { z } from 'zod';
+import { BACKUP_CRON_PATTERN, BACKUP_FREQUENCIES, BACKUP_TIME_OF_DAY_PATTERN, } from './constants.js';
+/**
+ * The retention policy of the `databaseBackup` namespace: how many ordinary
+ * `completed` archives to keep (`count`) and how old one may get
+ * (`maxAgeDays`). Both are optional; an archive is pruned when EITHER rule
+ * says so, and the newest completed archive is never pruned. `retentionCount`
+ * stays beside it as the alias of `count` (read and write): see
+ * `mergeDatabaseBackupSettings` for how the two stay in step.
+ *
+ * @stability experimental
+ */
+export const backupRetentionSchema = z.object({
+    /** Keep this many newest ordinary `completed` archives. */
+    count: z.number().int().min(1).max(365).optional(),
+    /** Delete ordinary `completed` archives older than this many days. */
+    maxAgeDays: z.number().int().min(1).max(3650).optional(),
+});
+/**
+ * The `cron` field: a five-field expression made of digits, `*`, `/`, `,` and
+ * `-`. A SHAPE check; the API parses it with the scheduler's own parser and
+ * enforces the one-hour minimum interval when it is written.
+ */
+const backupCronSchema = z
+    .string()
+    .max(120)
+    .regex(BACKUP_CRON_PATTERN, 'Expected a five-field cron expression such as "0 */6 * * *"');
+/**
+ * Database backup and restore policy (`databaseBackup`).
+ *
+ * `dayOfWeek` and `dayOfMonth` are BOTH always present and both always valid,
+ * whatever `frequency` says. The alternative — a discriminated union keyed on
+ * `frequency` — would mean switching a schedule from weekly to monthly and
+ * back loses the day the operator had chosen, and would make a PATCH that
+ * changes only `frequency` invalid unless it also carried the other field.
+ * Storing an inert-but-remembered value is the cheaper mistake.
+ *
+ * `dayOfMonth` stops at 28 rather than 31 so that "monthly" means every month:
+ * a schedule pinned to the 30th silently skips February.
+ *
+ * `restoreRollbackMode` decides what happens to the database a restore
+ * displaced — `retain_database` keeps it (renamed, reachable, deleted later by
+ * `oldDatabaseRetentionHours`), `drop_database` does not. The default is to
+ * retain, because the failure mode of retaining is disk and the failure mode
+ * of dropping is a restore from the wrong dump with nothing to go back to.
+ *
+ * `nodeOffloadEnabled` (#352, epic #345) decides whether `db.backup.run` may be
+ * claimed by a WORKER NODE at all. DEFAULT FALSE, and it is deliberately a
+ * SECOND switch rather than a reuse of `nodes.jobSecretBrokerEnabled`, because
+ * the two answer different questions and a deployment can genuinely want one
+ * without the other:
+ *
+ *   - `nodes.jobSecretBrokerEnabled` — MAY THE BROKER ISSUE ANYTHING AT ALL?
+ *     A statement about the fleet: are these machines inside the trust
+ *     boundary for short-lived credentials of any kind?
+ *   - `databaseBackup.nodeOffloadEnabled` — MAY *THIS* TYPE LEAVE THE SERVER?
+ *     A statement about one workload: is dumping the whole database on a
+ *     machine that is not the API server what this deployment wants, given
+ *     that the node needs a network route to PostgreSQL and the archive's
+ *     bytes will cross whatever network sits between them?
+ *
+ * Collapsing them would mean enabling brokering for any future type — a
+ * fork's own `nodeSecretBroker` — silently enables shipping the database
+ * dump off-box too, which is not a decision anybody made. Both must be true,
+ * AND the broker must report itself usable, before the type is offered to a
+ * node; see `NodesService.nodeEligibleTypes`. Off (either one) means the type
+ * is withheld from the claim and the in-process worker takes the backup, which
+ * is exactly what happened before node offload existed.
+ *
+ * `storageProvider` CARRIES NO `.min(1)`, AND ITS DEFAULT IS THE EMPTY STRING
+ * (#373, epic #372). Empty is the one spelling of "unset" — the same decision
+ * the `storage` namespace below makes and for the same reason; it is not
+ * nullable and not optional-in-storage, so no consumer ever has to ask "absent,
+ * or empty?" and get two answers. Empty means "whatever provider is active",
+ * which is the only default a template repository can ship honestly: a literal
+ * would have to be a guess at somebody else's deployment, and
+ * `isUsableStorage Provider` (`db-backup/db-backup-storage.ts`) turns a disagreement with the
+ * live `storage.provider` into a loud 400. Shipping `'s3'` here meant every
+ * deployment that selected R2 failed EVERY backup on a value nobody chose —
+ * a default the operator never typed must not be able to redirect or block
+ * their backups. What did NOT change is the check: a value an operator DID
+ * type must still equal the active provider exactly, because a backup landing
+ * somewhere other than where the settings page says it lands is only ever
+ * discovered during a restore. The bound stays 64 — a provider id, not prose —
+ * and the comparison trims, so stored whitespace is still "unset".
+ *
+ * @stability stable
+ */
+export const systemDatabaseBackupSchema = z.object({
+    /** Enabled. */
+    enabled: z.boolean(),
+    /** Frequency. */
+    frequency: z.enum(BACKUP_FREQUENCIES),
+    /** Day of week. */
+    dayOfWeek: z.number().int().min(0).max(6),
+    /** Day of month. */
+    dayOfMonth: z.number().int().min(1).max(28),
+    /** Time of day: 24-hour `HH:MM`, zero-padded. */
+    timeOfDay: z
+        .string()
+        .regex(BACKUP_TIME_OF_DAY_PATTERN, 'Expected a 24-hour HH:MM time'),
+    /** Timezone. */
+    timezone: z.string().min(1).max(64),
+    /** Retention count. */
+    retentionCount: z.number().int().min(1).max(365),
+    /** Cron expression; read only when `frequency` is `cron`. */
+    cron: backupCronSchema.optional(),
+    /** Retention policy; `retentionCount` is the alias of `retention.count`. */
+    retention: backupRetentionSchema.optional(),
+    /**
+     * NO `.min(1)`: the empty string is the one spelling of "unset", and it is
+     * the SHIPPED DEFAULT. See the block comment above.
+     */
+    storageProvider: z.string().max(64),
+    /** Run stale minutes. */
+    runStaleMinutes: z.number().int().min(1).max(10080),
+    /** Compression level. */
+    compressionLevel: z.number().int().min(0).max(9),
+    /** Restore rollback mode. */
+    restoreRollbackMode: z.enum(['retain_database', 'drop_database']),
+    /** Old database retention hours. */
+    oldDatabaseRetentionHours: z.number().int().min(1).max(8760),
+    /** Node offload enabled. */
+    nodeOffloadEnabled: z.boolean(),
+});
+/**
+ * The stored partial of `databaseBackup`: every field optional, every bound
+ * the stored schema's.
+ *
+ * @stability stable
+ */
+export const systemDatabaseBackupPatchSchema = z.object({
+    /** Enabled. */
+    enabled: z.boolean().optional(),
+    /** Frequency. */
+    frequency: z.enum(BACKUP_FREQUENCIES).optional(),
+    /** Day of week. */
+    dayOfWeek: z.number().int().min(0).max(6).optional(),
+    /** Day of month. */
+    dayOfMonth: z.number().int().min(1).max(28).optional(),
+    /** Time of day: 24-hour `HH:MM`, zero-padded. */
+    timeOfDay: z
+        .string()
+        .regex(BACKUP_TIME_OF_DAY_PATTERN, 'Expected a 24-hour HH:MM time')
+        .optional(),
+    /** Timezone. */
+    timezone: z.string().min(1).max(64).optional(),
+    /** Retention count. */
+    retentionCount: z.number().int().min(1).max(365).optional(),
+    /** Cron expression; read only when `frequency` is `cron`. */
+    cron: backupCronSchema.optional(),
+    /** Retention policy; `retentionCount` is the alias of `retention.count`. */
+    retention: backupRetentionSchema.optional(),
+    /**
+     * No `.min(1)`, matching `systemDatabaseBackupSchema`: `""` CLEARS the pin
+     * back to "whatever provider is active" (absent is how a caller says "leave
+     * it alone"), which is the only way an operator can un-pin through the API.
+     * Rejecting `""` here would make the shipped default unreachable by the very
+     * endpoint that edits it.
+     */
+    storageProvider: z.string().max(64).optional(),
+    /** Run stale minutes. */
+    runStaleMinutes: z.number().int().min(1).max(10080).optional(),
+    /** Compression level. */
+    compressionLevel: z.number().int().min(0).max(9).optional(),
+    /** What a restore does with the database it displaced. */
+    restoreRollbackMode: z.enum(['retain_database', 'drop_database']).optional(),
+    /** Old database retention hours. */
+    oldDatabaseRetentionHours: z.number().int().min(1).max(8760).optional(),
+    /** Node offload enabled. */
+    nodeOffloadEnabled: z.boolean().optional(),
+});
+/**
+ * The `databaseBackup` branch of a `PUT /api/system-settings` body.
+ *
+ * @stability stable
+ */
+export const databaseBackupSettingsSchema = z.object({
+    /** Enabled. */
+    enabled: z.boolean(),
+    /** Frequency. */
+    frequency: z.enum(BACKUP_FREQUENCIES),
+    /** Day of week. */
+    dayOfWeek: z.number().int().min(0).max(6),
+    /** Day of month. */
+    dayOfMonth: z.number().int().min(1).max(28),
+    /** Time of day: 24-hour `HH:MM`, zero-padded. */
+    timeOfDay: z
+        .string()
+        .regex(BACKUP_TIME_OF_DAY_PATTERN, 'Expected a 24-hour HH:MM time'),
+    /** Timezone. */
+    timezone: z.string().min(1).max(64),
+    /** Retention count. */
+    retentionCount: z.number().int().min(1).max(365),
+    /** Cron expression; read only when `frequency` is `cron`. */
+    cron: backupCronSchema.optional(),
+    /** Retention policy; `retentionCount` is the alias of `retention.count`. */
+    retention: backupRetentionSchema.optional(),
+    /**
+     * No `.min(1)`: `""` is the one spelling of "unset" and is the SHIPPED
+     * DEFAULT — it means "whatever provider `storage.provider` names right now".
+     * A non-empty value must equal the active provider or the write is a loud
+     * 400 (`DatabaseBackupRunnerService.assertStorageProviderUsable`); that check
+     * is unchanged. Only the default moved, because a provider id the operator
+     * never chose must not be able to redirect or block their backups. See
+     * `common/schemas/settings.schema.ts` for the full argument.
+     */
+    storageProvider: z.string().max(64),
+    /** Run stale minutes. */
+    runStaleMinutes: z.number().int().min(1).max(10080),
+    /** Compression level. */
+    compressionLevel: z.number().int().min(0).max(9),
+    /** Restore rollback mode. */
+    restoreRollbackMode: z.enum(['retain_database', 'drop_database']),
+    /** Old database retention hours. */
+    oldDatabaseRetentionHours: z.number().int().min(1).max(8760),
+    /** Node offload enabled. */
+    nodeOffloadEnabled: z.boolean(),
+});
+/**
+ * The `databaseBackup` branch of a `PATCH /api/system-settings` body: field by field optional.
+ *
+ * @stability stable
+ */
+export const databaseBackupSettingsPatchSchema = z.object({
+    /** Enabled. */
+    enabled: z.boolean().optional(),
+    /** Frequency. */
+    frequency: z.enum(BACKUP_FREQUENCIES).optional(),
+    /** Day of week. */
+    dayOfWeek: z.number().int().min(0).max(6).optional(),
+    /** Day of month. */
+    dayOfMonth: z.number().int().min(1).max(28).optional(),
+    /** Time of day: 24-hour `HH:MM`, zero-padded. */
+    timeOfDay: z
+        .string()
+        .regex(BACKUP_TIME_OF_DAY_PATTERN, 'Expected a 24-hour HH:MM time')
+        .optional(),
+    /** Timezone. */
+    timezone: z.string().min(1).max(64).optional(),
+    /** Retention count. */
+    retentionCount: z.number().int().min(1).max(365).optional(),
+    /** Cron expression; read only when `frequency` is `cron`. */
+    cron: backupCronSchema.optional(),
+    /** Retention policy; `retentionCount` is the alias of `retention.count`. */
+    retention: backupRetentionSchema.optional(),
+    /**
+     * No `.min(1)`, matching the PUT schema above: `""` CLEARS the pin back
+     * to "whatever provider is active", absent leaves it alone. Rejecting
+     * `""` would make the shipped default unreachable by the endpoint that
+     * edits it.
+     */
+    storageProvider: z.string().max(64).optional(),
+    /** Run stale minutes. */
+    runStaleMinutes: z.number().int().min(1).max(10080).optional(),
+    /** Compression level. */
+    compressionLevel: z.number().int().min(0).max(9).optional(),
+    /** What a restore does with the database it displaced. */
+    restoreRollbackMode: z.enum(['retain_database', 'drop_database']).optional(),
+    /** Old database retention hours. */
+    oldDatabaseRetentionHours: z.number().int().min(1).max(8760).optional(),
+    /** Node offload enabled. */
+    nodeOffloadEnabled: z.boolean().optional(),
+});
+/**
+ * The `databaseBackup` branch of the `GET /api/system-settings` response.
+ *
+ * @stability stable
+ */
+export const databaseBackupResponseSchema = z.object({
+    /** Enabled. */
+    enabled: z.boolean(),
+    /** Frequency. */
+    frequency: z.enum(BACKUP_FREQUENCIES),
+    /** Day of week. */
+    dayOfWeek: z.number(),
+    /** Day of month. */
+    dayOfMonth: z.number(),
+    /** Time of day. */
+    timeOfDay: z.string(),
+    /** Timezone. */
+    timezone: z.string(),
+    /** Retention count. */
+    retentionCount: z.number(),
+    /** Cron expression; read only when `frequency` is `cron`. */
+    cron: backupCronSchema.optional(),
+    /** Retention policy; `retentionCount` is the alias of `retention.count`. */
+    retention: backupRetentionSchema.optional(),
+    /** Storage provider. */
+    storageProvider: z.string(),
+    /** Run stale minutes. */
+    runStaleMinutes: z.number(),
+    /** Compression level. */
+    compressionLevel: z.number(),
+    /** Restore rollback mode. */
+    restoreRollbackMode: z.enum(['retain_database', 'drop_database']),
+    /** Old database retention hours. */
+    oldDatabaseRetentionHours: z.number(),
+    /** Node offload enabled. */
+    nodeOffloadEnabled: z.boolean(),
+});
+//# sourceMappingURL=settings-schemas.js.map

package/dist/esm/db-backup/settings-schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings-schemas.js","sourceRoot":"","sources":["../../../src/db-backup/settings-schemas.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,4EAA4E;AAC5E,uBAAuB;AACvB,gFAAgF;AAChF,EAAE;AACF,gDAAgD;AAChD,8EAA8E;AAC9E,uEAAuE;AACvE,yEAAyE;AACzE,0EAA0E;AAC1E,+EAA+E;AAC/E,6EAA6E;AAC7E,iCAAiC;AACjC,gFAAgF;AAEhF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EACL,mBAAmB,EACnB,kBAAkB,EAClB,0BAA0B,GAE3B,MAAM,gBAAgB,CAAC;AAExB;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,2DAA2D;IAC3D,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAClD,sEAAsE;IACtE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;CACzD,CAAC,CAAC;AASH;;;;GAIG;AACH,MAAM,gBAAgB,GAAG,CAAC;KACvB,MAAM,EAAE;KACR,GAAG,CAAC,GAAG,CAAC;KACR,KAAK,CAAC,mBAAmB,EAAE,6DAA6D,CAAC,CAAC;AAE7F;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4DG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,eAAe;IACf,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,iBAAiB;IACjB,SAAS,EAAG,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAwD;IAC7F,mBAAmB;IACnB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACzC,oBAAoB;IACpB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IAC3C,iDAAiD;IACjD,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,KAAK,CAAC,0BAA0B,EAAE,+BAA+B,CAAC;IACrE,gBAAgB;IAChB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IACnC,uBAAuB;IACvB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAChD,6DAA6D;IAC7D,IAAI,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IACjC,4EAA4E;IAC5E,SAAS,EAAE,qBAAqB,CAAC,QAAQ,EAAE;IAC3C;;;OAGG;IACH,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;IACnC,yBAAyB;IACzB,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;IACnD,yBAAyB;IACzB,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAChD,6BAA6B;IAC7B,mBAAmB,EAAG,CAAC,CAAC,IAAI,CAAC,CAAC,iBAAiB,EAAE,eAAe,CAAC,CAAmE;IACpI,oCAAoC;IACpC,yBAAyB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;IAC5D,4BAA4B;IAC5B,kBAAkB,EAAE,CAAC,CAAC,OAAO,EAAE;CAChC,CAAC,CAAC;AAWH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,MAAM,CAAC;IACtD,eAAe;IACf,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC/B,iBAAiB;IACjB,SAAS,EAAG,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAwD,CAAC,QAAQ,EAAE;IACxG,mBAAmB;IACnB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACpD,oBAAoB;IACpB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IACtD,iDAAiD;IACjD,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,KAAK,CAAC,0BAA0B,EAAE,+BAA+B,CAAC;SAClE,QAAQ,EAAE;IACb,gBAAgB;IAChB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC9C,uBAAuB;IACvB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC3D,6DAA6D;IAC7D,IAAI,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IACjC,4EAA4E;IAC5E,SAAS,EAAE,qBAAqB,CAAC,QAAQ,EAAE;IAC3C;;;;;;OAMG;IACH,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC9C,yBAAyB;IACzB,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE;IAC9D,yBAAyB;IACzB,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC3D,0DAA0D;IAC1D,mBAAmB,EAAG,CAAC,CAAC,IAAI,CAAC,CAAC,iBAAiB,EAAE,eAAe,CAAC,CAAmE,CAAC,QAAQ,EAAE;IAC/I,oCAAoC;IACpC,yBAAyB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IACvE,4BAA4B;IAC5B,kBAAkB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAC3C,CAAC,CAAC;AAGH;;;;GAIG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,eAAe;IACf,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,iBAAiB;IACjB,SAAS,EAAG,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAwD;IAC7F,mBAAmB;IACnB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACzC,oBAAoB;IACpB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IAC3C,iDAAiD;IACjD,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,KAAK,CAAC,0BAA0B,EAAE,+BAA+B,CAAC;IACrE,gBAAgB;IAChB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IACnC,uBAAuB;IACvB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAChD,6DAA6D;IAC7D,IAAI,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IACjC,4EAA4E;IAC5E,SAAS,EAAE,qBAAqB,CAAC,QAAQ,EAAE;IAC3C;;;;;;;;OAQG;IACH,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;IACnC,yBAAyB;IACzB,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;IACnD,yBAAyB;IACzB,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAChD,6BAA6B;IAC7B,mBAAmB,EAAG,CAAC,CAAC,IAAI,CAAC,CAAC,iBAAiB,EAAE,eAAe,CAAC,CAAmE;IACpI,oCAAoC;IACpC,yBAAyB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;IAC5D,4BAA4B;IAC5B,kBAAkB,EAAE,CAAC,CAAC,OAAO,EAAE;CAChC,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,CAAC,MAAM,CAAC;IACxD,eAAe;IACf,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC/B,iBAAiB;IACjB,SAAS,EAAG,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAwD,CAAC,QAAQ,EAAE;IACxG,mBAAmB;IACnB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACpD,oBAAoB;IACpB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IACtD,iDAAiD;IACjD,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,KAAK,CAAC,0BAA0B,EAAE,+BAA+B,CAAC;SAClE,QAAQ,EAAE;IACb,gBAAgB;IAChB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC9C,uBAAuB;IACvB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC3D,6DAA6D;IAC7D,IAAI,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IACjC,4EAA4E;IAC5E,SAAS,EAAE,qBAAqB,CAAC,QAAQ,EAAE;IAC3C;;;;;OAKG;IACH,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC9C,yBAAyB;IACzB,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE;IAC9D,yBAAyB;IACzB,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC3D,0DAA0D;IAC1D,mBAAmB,EAAG,CAAC,CAAC,IAAI,CAAC,CAAC,iBAAiB,EAAE,eAAe,CAAC,CAAmE,CAAC,QAAQ,EAAE;IAC/I,oCAAoC;IACpC,yBAAyB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IACvE,4BAA4B;IAC5B,kBAAkB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAC3C,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,eAAe;IACf,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,iBAAiB;IACjB,SAAS,EAAG,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAwD;IAC7F,mBAAmB;IACnB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,oBAAoB;IACpB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,mBAAmB;IACnB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,gBAAgB;IAChB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,uBAAuB;IACvB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1B,6DAA6D;IAC7D,IAAI,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IACjC,4EAA4E;IAC5E,SAAS,EAAE,qBAAqB,CAAC,QAAQ,EAAE;IAC3C,wBAAwB;IACxB,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE;IAC3B,yBAAyB;IACzB,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE;IAC3B,yBAAyB;IACzB,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE;IAC5B,6BAA6B;IAC7B,mBAAmB,EAAG,CAAC,CAAC,IAAI,CAAC,CAAC,iBAAiB,EAAE,eAAe,CAAC,CAAmE;IACpI,oCAAoC;IACpC,yBAAyB,EAAE,CAAC,CAAC,MAAM,EAAE;IACrC,4BAA4B;IAC5B,kBAAkB,EAAE,CAAC,CAAC,OAAO,EAAE;CAChC,CAAC,CAAC"}

package/dist/esm/doctor/constants.d.ts

@@ -0,0 +1,59 @@
+/**
+ * Every status of a Doctor check, in severity order, lowest first
+ * (`pass < skip < warn < fail`). Also the display order of the web page.
+ *
+ * - `pass`: verified healthy.
+ * - `skip`: not evaluated (a check it depends on did not pass, or the
+ *   capability is intentionally switched off).
+ * - `warn`: works, but needs attention.
+ * - `fail`: broken.
+ *
+ * @stability stable
+ */
+export declare const DOCTOR_STATUSES: readonly ["pass", "skip", "warn", "fail"];
+/**
+ * The four outcomes of a check, identical to the CLI doctor's `CheckStatus`:
+ * `pass`, `warn`, `fail` or `skip`.
+ *
+ * @stability stable
+ */
+export type DoctorStatus = (typeof DOCTOR_STATUSES)[number];
+/**
+ * How bad a status is, for a report's overall verdict: the worst wins.
+ *
+ * `skip` ranks just above `pass`: a report whose only non-pass entries are
+ * intentional skips (AI off, telemetry off) is healthy, but it proved less than
+ * an all-pass one, and a report where nothing ran must not read as `pass`.
+ *
+ * @stability stable
+ */
+export declare const DOCTOR_STATUS_RANK: Readonly<Record<DoctorStatus, number>>;
+/**
+ * The version of the support bundle format (`GET /api/admin/doctor/support-bundle`,
+ * issue #772). Bumped only by a breaking change to `supportBundleSchema`.
+ *
+ * @stability experimental
+ */
+export declare const SUPPORT_BUNDLE_VERSION: 1;
+/**
+ * The redaction rule set applied to every support bundle. `v1` is documented
+ * in docs/specs/doctor.md ("Support bundle").
+ *
+ * @stability experimental
+ */
+export declare const SUPPORT_BUNDLE_REDACTION_RULES: "v1";
+/**
+ * The statuses of one support-bundle section: `ok` (collected), `omitted` (not
+ * collected: a permission is missing or the capability is off) and `error`
+ * (the section threw, timed out or broke its schema; its data is dropped).
+ *
+ * @stability experimental
+ */
+export declare const SUPPORT_BUNDLE_SECTION_STATUSES: readonly ["ok", "omitted", "error"];
+/**
+ * One support-bundle section's status.
+ *
+ * @stability experimental
+ */
+export type SupportBundleSectionStatus = (typeof SUPPORT_BUNDLE_SECTION_STATUSES)[number];
+//# sourceMappingURL=constants.d.ts.map

package/dist/esm/doctor/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../src/doctor/constants.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,eAAe,2CAA4C,CAAC;AAEzE;;;;;GAKG;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC;AAE5D;;;;;;;;GAQG;AACH,eAAO,MAAM,kBAAkB,EAAE,QAAQ,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAKrE,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB,EAAG,CAAU,CAAC;AAEjD;;;;;GAKG;AACH,eAAO,MAAM,8BAA8B,EAAG,IAAa,CAAC;AAE5D;;;;;;GAMG;AACH,eAAO,MAAM,+BAA+B,qCAAsC,CAAC;AAEnF;;;;GAIG;AACH,MAAM,MAAM,0BAA0B,GAAG,CAAC,OAAO,+BAA+B,CAAC,CAAC,MAAM,CAAC,CAAC"}

package/dist/esm/doctor/constants.js

@@ -0,0 +1,54 @@
+// The Doctor's plain values (issue #701). Zod-free by rule: a browser that only
+// needs a status list or a type never pulls the schemas, and with them zod,
+// into its bundle (test/no-zod-in-constants.test.ts).
+/**
+ * Every status of a Doctor check, in severity order, lowest first
+ * (`pass < skip < warn < fail`). Also the display order of the web page.
+ *
+ * - `pass`: verified healthy.
+ * - `skip`: not evaluated (a check it depends on did not pass, or the
+ *   capability is intentionally switched off).
+ * - `warn`: works, but needs attention.
+ * - `fail`: broken.
+ *
+ * @stability stable
+ */
+export const DOCTOR_STATUSES = ['pass', 'skip', 'warn', 'fail'];
+/**
+ * How bad a status is, for a report's overall verdict: the worst wins.
+ *
+ * `skip` ranks just above `pass`: a report whose only non-pass entries are
+ * intentional skips (AI off, telemetry off) is healthy, but it proved less than
+ * an all-pass one, and a report where nothing ran must not read as `pass`.
+ *
+ * @stability stable
+ */
+export const DOCTOR_STATUS_RANK = {
+    pass: 0,
+    skip: 1,
+    warn: 2,
+    fail: 3,
+};
+/**
+ * The version of the support bundle format (`GET /api/admin/doctor/support-bundle`,
+ * issue #772). Bumped only by a breaking change to `supportBundleSchema`.
+ *
+ * @stability experimental
+ */
+export const SUPPORT_BUNDLE_VERSION = 1;
+/**
+ * The redaction rule set applied to every support bundle. `v1` is documented
+ * in docs/specs/doctor.md ("Support bundle").
+ *
+ * @stability experimental
+ */
+export const SUPPORT_BUNDLE_REDACTION_RULES = 'v1';
+/**
+ * The statuses of one support-bundle section: `ok` (collected), `omitted` (not
+ * collected: a permission is missing or the capability is off) and `error`
+ * (the section threw, timed out or broke its schema; its data is dropped).
+ *
+ * @stability experimental
+ */
+export const SUPPORT_BUNDLE_SECTION_STATUSES = ['ok', 'omitted', 'error'];
+//# sourceMappingURL=constants.js.map

package/dist/esm/doctor/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../src/doctor/constants.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,4EAA4E;AAC5E,sDAAsD;AAEtD;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAU,CAAC;AAUzE;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAA2C;IACxE,IAAI,EAAE,CAAC;IACP,IAAI,EAAE,CAAC;IACP,IAAI,EAAE,CAAC;IACP,IAAI,EAAE,CAAC;CACR,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAU,CAAC;AAEjD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,IAAa,CAAC;AAE5D;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAU,CAAC"}

package/dist/esm/doctor/index.d.ts

@@ -0,0 +1,5 @@
+export { DOCTOR_STATUSES, DOCTOR_STATUS_RANK, SUPPORT_BUNDLE_REDACTION_RULES, SUPPORT_BUNDLE_SECTION_STATUSES, SUPPORT_BUNDLE_VERSION, } from './constants.js';
+export type { DoctorStatus, SupportBundleSectionStatus } from './constants.js';
+export { doctorCheckReportSchema, doctorQuerySchema, doctorReportSchema, doctorStatusSchema, supportBundleSchema, supportBundleSectionResultSchema, } from './schemas.js';
+export type { DoctorBooleanStringEnum, DoctorCheckReport, DoctorQuery, DoctorReport, DoctorReportQueryInput, DoctorStatusEnum, SupportBundle, SupportBundleSectionResult, } from './schemas.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/esm/doctor/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/doctor/index.ts"],"names":[],"mappings":"AAQA,OAAO,EACL,eAAe,EACf,kBAAkB,EAClB,8BAA8B,EAC9B,+BAA+B,EAC/B,sBAAsB,GACvB,MAAM,gBAAgB,CAAC;AACxB,YAAY,EAAE,YAAY,EAAE,0BAA0B,EAAE,MAAM,gBAAgB,CAAC;AAC/E,OAAO,EACL,uBAAuB,EACvB,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,EAClB,mBAAmB,EACnB,gCAAgC,GACjC,MAAM,cAAc,CAAC;AACtB,YAAY,EACV,uBAAuB,EACvB,iBAAiB,EACjB,WAAW,EACX,YAAY,EACZ,sBAAsB,EACtB,gBAAgB,EAChB,aAAa,EACb,0BAA0B,GAC3B,MAAM,cAAc,CAAC"}

package/dist/esm/doctor/index.js

@@ -0,0 +1,10 @@
+// `@marinoscar/platform-contract/doctor`: the Doctor's wire shapes, shared by
+// `@marinoscar/platform-api/doctor` (the DTOs) and
+// `@marinoscar/platform-web/doctor` (the client's types) (issue #701).
+// Documented in ./README.md. Explicit named exports only.
+//
+// constants.ts is zod-free; a consumer that imports only the constants and the
+// types (the web app) never bundles schemas.ts or zod (`"sideEffects": false`).
+export { DOCTOR_STATUSES, DOCTOR_STATUS_RANK, SUPPORT_BUNDLE_REDACTION_RULES, SUPPORT_BUNDLE_SECTION_STATUSES, SUPPORT_BUNDLE_VERSION, } from './constants.js';
+export { doctorCheckReportSchema, doctorQuerySchema, doctorReportSchema, doctorStatusSchema, supportBundleSchema, supportBundleSectionResultSchema, } from './schemas.js';
+//# sourceMappingURL=index.js.map

package/dist/esm/doctor/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/doctor/index.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,mDAAmD;AACnD,uEAAuE;AACvE,0DAA0D;AAC1D,EAAE;AACF,+EAA+E;AAC/E,gFAAgF;AAEhF,OAAO,EACL,eAAe,EACf,kBAAkB,EAClB,8BAA8B,EAC9B,+BAA+B,EAC/B,sBAAsB,GACvB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,uBAAuB,EACvB,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,EAClB,mBAAmB,EACnB,gCAAgC,GACjC,MAAM,cAAc,CAAC"}

package/dist/esm/doctor/schemas.d.ts

@@ -0,0 +1,186 @@
+import { z } from 'zod';
+import type { DoctorStatus } from './constants.js';
+/**
+ * The entries of {@link doctorStatusSchema}, as `z.enum` types them: each
+ * status keyed by itself. Named so the schema's type reads as a reference.
+ *
+ * @stability stable
+ */
+export type DoctorStatusEnum = {
+    [S in DoctorStatus]: S;
+};
+/**
+ * The entries of the `refresh` query parameter: the strings `'true'` and
+ * `'false'`, each keyed by itself, as `z.enum` types them.
+ *
+ * @stability stable
+ */
+export type DoctorBooleanStringEnum = {
+    [S in 'true' | 'false']: S;
+};
+/**
+ * A check's status on the wire.
+ *
+ * The enum lists the values in the order the OpenAPI document has always
+ * published (`pass, warn, fail, skip`), which is not the severity order of
+ * {@link DOCTOR_STATUSES}; rank statuses with {@link DOCTOR_STATUS_RANK}.
+ *
+ * @extensionPoint schema
+ * @stability stable
+ */
+export declare const doctorStatusSchema: z.ZodEnum<DoctorStatusEnum>;
+/**
+ * One row of the report, as `GET /api/admin/doctor` returns it.
+ *
+ * Fields: `id` (stable dotted id, `storage.bucket`), `category` (`core`,
+ * `auth`, ...; an app may add its own), `label`, `settingsPath` (the web route
+ * that fixes it, or `null`), `status`, `detail` (one line: what was found),
+ * `remedy` (set on `warn` and `fail`, otherwise `null`), `error` (the
+ * underlying probe error, or `null`), `data` (small scalar facts, never secret
+ * material, or `null`) and `durationMs` (0 when skipped without running).
+ *
+ * @extensionPoint schema
+ * @stability stable
+ */
+export declare const doctorCheckReportSchema: z.ZodObject<{
+    id: z.ZodString;
+    category: z.ZodString;
+    label: z.ZodString;
+    settingsPath: z.ZodNullable<z.ZodString>;
+    status: z.ZodEnum<DoctorStatusEnum>;
+    detail: z.ZodString;
+    remedy: z.ZodNullable<z.ZodString>;
+    error: z.ZodNullable<z.ZodString>;
+    data: z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
+    durationMs: z.ZodNumber;
+}, z.core.$strip>;
+/**
+ * The whole report, as `GET /api/admin/doctor` returns it: `verdict` (the
+ * worst status in `checks`, `skip` when none ran), `generatedAt` (ISO 8601; a
+ * cached report keeps its original time), `durationMs` (wall time of the run)
+ * and `checks` (sorted by category, configured order first, then registration
+ * order).
+ *
+ * @extensionPoint schema
+ * @stability stable
+ */
+export declare const doctorReportSchema: z.ZodObject<{
+    verdict: z.ZodEnum<DoctorStatusEnum>;
+    generatedAt: z.ZodISODateTime;
+    durationMs: z.ZodNumber;
+    checks: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        category: z.ZodString;
+        label: z.ZodString;
+        settingsPath: z.ZodNullable<z.ZodString>;
+        status: z.ZodEnum<DoctorStatusEnum>;
+        detail: z.ZodString;
+        remedy: z.ZodNullable<z.ZodString>;
+        error: z.ZodNullable<z.ZodString>;
+        data: z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
+        durationMs: z.ZodNumber;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+/**
+ * `GET /api/admin/doctor` query: `category` (a lowercase identifier; only the
+ * checks in that category, plus, unreported, whatever they depend on) and
+ * `refresh` (`'true'` bypasses the 15-second report cache).
+ *
+ * `refresh` is `z.enum(['true','false']).transform(...)` and NOT
+ * `z.coerce.boolean()`: every query parameter is a string and
+ * `Boolean('false')` is `true`.
+ *
+ * @extensionPoint schema
+ * @stability stable
+ */
+export declare const doctorQuerySchema: z.ZodObject<{
+    category: z.ZodOptional<z.ZodString>;
+    refresh: z.ZodOptional<z.ZodPipe<z.ZodEnum<DoctorBooleanStringEnum>, z.ZodTransform<boolean, "true" | "false">>>;
+}, z.core.$strip>;
+/**
+ * One row of the report. Every nullable field is present on every row.
+ *
+ * @stability stable
+ */
+export type DoctorCheckReport = z.infer<typeof doctorCheckReportSchema>;
+/**
+ * The whole report.
+ *
+ * @stability stable
+ */
+export type DoctorReport = z.infer<typeof doctorReportSchema>;
+/**
+ * The parsed query of `GET /api/admin/doctor` (`refresh` already a boolean).
+ *
+ * @stability stable
+ */
+export type DoctorQuery = z.output<typeof doctorQuerySchema>;
+/**
+ * The query a client builds before serializing it: restrict the run to one
+ * `category`, or `refresh` to bypass the server-side cache.
+ *
+ * @stability stable
+ */
+export interface DoctorReportQueryInput {
+    /** Restrict the run to one category (a lowercase identifier). */
+    category?: string;
+    /** Bypass the server-side report cache and run every probe again. */
+    refresh?: boolean;
+}
+/**
+ * One section of a bundle. `truncated: true` with `data: null` means the
+ * section was larger than its size cap and its data was dropped.
+ *
+ * @extensionPoint schema
+ * @stability experimental
+ */
+export declare const supportBundleSectionResultSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    status: z.ZodLiteral<"ok">;
+    data: z.ZodUnknown;
+    truncated: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strip>, z.ZodObject<{
+    status: z.ZodLiteral<"omitted">;
+    reason: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    status: z.ZodLiteral<"error">;
+    error: z.ZodString;
+}, z.core.$strip>], "status">;
+/**
+ * One section of a bundle, as parsed.
+ *
+ * @stability experimental
+ */
+export type SupportBundleSectionResult = z.infer<typeof supportBundleSectionResultSchema>;
+/**
+ * The support bundle: what `GET /api/admin/doctor/support-bundle` returns as a
+ * JSON attachment.
+ *
+ * @extensionPoint schema
+ * @stability experimental
+ */
+export declare const supportBundleSchema: z.ZodObject<{
+    bundleVersion: z.ZodLiteral<1>;
+    generatedAt: z.ZodString;
+    redaction: z.ZodObject<{
+        rules: z.ZodLiteral<"v1">;
+        replacements: z.ZodNumber;
+    }, z.core.$strip>;
+    sections: z.ZodRecord<z.ZodString, z.ZodDiscriminatedUnion<[z.ZodObject<{
+        status: z.ZodLiteral<"ok">;
+        data: z.ZodUnknown;
+        truncated: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>, z.ZodObject<{
+        status: z.ZodLiteral<"omitted">;
+        reason: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        status: z.ZodLiteral<"error">;
+        error: z.ZodString;
+    }, z.core.$strip>], "status">>;
+}, z.core.$strip>;
+/**
+ * The support bundle, as parsed.
+ *
+ * @stability experimental
+ */
+export type SupportBundle = z.infer<typeof supportBundleSchema>;
+//# sourceMappingURL=schemas.d.ts.map