dodo-mcp 1.2.1 → 1.3.0

package/dist/services/recovery/databaseAwareness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"databaseAwareness.js","sourceRoot":"","sources":["../../../src/services/recovery/databaseAwareness.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AACtC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAErD,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;AACrE,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;AAC1E,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,wBAAwB,CAAC;IAC7E,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,2BAA2B,CAAC;IAC5E,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU;IACrC,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;CACvD,CAAC,CAAC,MAAM,EAAE,CAAC;AAMZ,MAAM,QAAQ,GAAG,CAAC,CAAW,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;AAEvE,iFAAiF;AACjF,MAAM,OAAO,iBAAiB;IACC;IAAiC;IAA9D,YAA6B,CAAc,EAAmB,CAAkB;QAAnD,MAAC,GAAD,CAAC,CAAa;QAAmB,MAAC,GAAD,CAAC,CAAiB;IAAG,CAAC;IACpF,IAAY,EAAE,KAAK,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IACpC,IAAI,CAAC,UAAsB,EAAE,QAAiB;QACpD,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;QAC7D,IAAI,GAAG,KAAK,UAAU,CAAC,YAAY;YAAE,MAAM,IAAI,SAAS,CAAC,aAAa,EAAE,sDAAsD,CAAC,CAAC;QAChI,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC;QACrD,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,EAAE,CAAC,KAAK,QAAQ,CAAC;YAC5E,MAAM,IAAI,SAAS,CAAC,aAAa,EAAE,wEAAwE,CAAC,CAAC;QAC/G,KAAI,MAAM,MAAM,IAAI,CAAC,MAAM,EAAC,MAAM,EAAC,UAAU,CAAC,EAAC,CAAC;YAC9C,MAAM,IAAI,GAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,GAAC,MAAM,EAAC,EAAC,YAAY,EAAC,IAAI,EAAC,CAAC,CAAC;YAC9D,IAAG,IAAI,CAAC,IAAI,IAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAE,IAAI,CAAC,IAAI,CAAC,KAAK,KAAG,CAAC,CAAC;gBAAC,MAAM,IAAI,SAAS,CAAC,aAAa,EAAC,iDAAiD,CAAC,CAAC;QAChJ,CAAC;QACD,OAAO,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IAC/B,CAAC;IACO,GAAG,CAAC,EAAU;QACpB,IAAI,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,uEAAuE,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,WAAW,CAAoB,CAAC;QACpJ,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,SAAS,CAAC,WAAW,EAAE,8CAA8C,CAAC,CAAC;QAAC,OAAO,GAAG,CAAC;IACzG,CAAC;IACD,IAAI;QACF,IAAI,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QACvB,OAAQ,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,0EAA0E,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAW;aAClI,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,oBAAoB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7J,CAAC;IACD,OAAO;QACL,MAAM,KAAK,GAAI,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,wFAAwF,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAmB,CAAC,CAAC,CAAC;QACrK,OAAO,EAAE,UAAU,EAAE,KAAK,GAAG,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,gBAAgB,EAAE,eAAe,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC;IACvI,CAAC;IACO,IAAI,CAAC,GAAQ;QACnB,MAAM,UAAU,GAAG,oBAAoB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;QAC1E,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC;QACxD,qFAAqF;QACrF,MAAM,EAAE,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5F,IAAI,CAAC;YACH,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;YAAC,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;YAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC9E,MAAM,KAAK,GAAG,EAAE,CAAC,OAAO,CAAC,iDAAiD,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,CAA8C,CAAC;YAC/I,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,2BAA2B,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;gBAAE,MAAM,IAAI,SAAS,CAAC,eAAe,EAAE,qDAAqD,CAAC,CAAC;YACjL,uEAAuE;YACvE,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CAAC,aAAa,UAAU,CAAC,MAAM,2BAA2B,UAAU,CAAC,KAAK,mBAAmB,CAAC,CAAC,GAAG,EAAsC,CAAC;YAClK,IAAI,MAAM,CAAC,MAAM,GAAG,IAAI;gBAAE,MAAM,IAAI,SAAS,CAAC,gBAAgB,EAAE,sDAAsD,CAAC,CAAC;YACxH,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;YACvE,IAAI,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,MAAM;gBAAE,MAAM,IAAI,SAAS,CAAC,UAAU,EAAE,2CAA2C,CAAC,CAAC;YACnH,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAClB,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC;YACzC,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;QACpB,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,SAAS,CAAC,mBAAmB,EAAE,yFAAyF,CAAC,CAAC;QACtI,CAAC;gBAAS,CAAC;YAAC,EAAE,CAAC,KAAK,EAAE,CAAC;QAAC,CAAC;IAC3B,CAAC;IACD,0EAA0E;IAC1E,KAAK,CAAC,SAAS,CAAC,GAAY,EAAE,UAAsB;QAClD,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;YACjH,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,qBAAqB,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxH,OAAO,IAAI,CAAC,CAAC,CAAC,SAAU,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE;YACtC,IAAI,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;YAAC,UAAU,EAAE,CAAC;YACrC,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,IAAI,CAAC,GAAG,EAAE,QAAQ,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,gBAAgB;gBAAE,MAAM,IAAI,SAAS,CAAC,UAAU,EAAE,kCAAkC,CAAC,CAAC;YACzH,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,IAAI,CAAC;gBAAE,MAAM,IAAI,SAAS,CAAC,gBAAgB,EAAE,+BAA+B,CAAC,CAAC;YAC5G,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,EAAE,GAAG,GAAG,EAAE,EAAE,IAAI,KAAK,CAAC,UAAU,CAAC,EAAE,QAAQ,GAAG,KAAK,CAAC,gBAAgB,GAAG,CAAC,CAAC;YACnH,MAAM,GAAG,GAAQ,EAAE,EAAE,EAAE,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,aAAa,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACtL,IAAI,KAAK,CAAC,OAAO;gBAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,mDAAmD;YACtF,UAAU,EAAE,CAAC;YACb,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;qGAC+E,CAAC;iBAC7F,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,QAAQ,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC;YACzF,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;YAAC,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAChH,CAAC,CAAC,CAAC;IACL,CAAC;IACD,YAAY,CAAC,EAAU,EAAE,UAAsB;QAC7C,UAAU,EAAE,CAAC;QAAC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAAC,UAAU,EAAE,CAAC;QAC3E,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,mBAAmB,EAAE,GAAG,EAAE,aAAa,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,gBAAgB,EAAE,eAAe,EAAE,CAAC;IAC7I,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,GAAY,EAAE,UAAsB;QAC7C,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC;YACtI,oBAAoB,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,wBAAwB,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACjK,OAAO,IAAI,CAAC,CAAC,CAAC,SAAU,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE;YACtC,UAAU,EAAE,CAAC;YAAC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACnD,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,KAAK,CAAC,gBAAgB;gBAAE,MAAM,IAAI,SAAS,CAAC,UAAU,EAAE,8CAA8C,CAAC,CAAC;YAC7I,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,oBAAoB,CAAC,MAAM;gBAAE,MAAM,IAAI,SAAS,CAAC,eAAe,EAAE,iCAAiC,CAAC,CAAC;YAC5J,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,YAAY,EAAE,EAAE,EAAE,EAAE,oBAAoB,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9G,UAAU,EAAE,CAAC;YACb,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;0JACoI,CAAC;iBAClJ,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,KAAK,CAAC,oBAAoB,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;YAChJ,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;YAAC,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,EAAE,EAAE,YAAY,EAAE,QAAQ,CAAC,EAAE,EAAE,aAAa,EAAE,KAAK,CAAC,oBAAoB,CAAC,MAAM,EAAE,UAAU,EAAE,gBAAgB,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;QAC9M,CAAC,CAAC,CAAC;IACL,CAAC;IACD,KAAK,CAAC,aAAa,CAAC,WAAqB;QACvC,IAAI,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,wFAAwF,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAU,CAAC;QACxJ,MAAM,KAAK,GAAkB,EAAE,CAAC;QAChC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,UAAU,GAAG,oBAAoB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;YAC1E,IAAI,MAAM,GAAgB,EAAE,QAAQ,EAAE,GAAG,CAAC,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,uCAAuC,EAAE,QAAQ,EAAE,UAAU,CAAC,UAAU,KAAK,OAAO,EAAE,CAAC;YACvL,IAAI,CAAC;gBACH,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,8EAA8E,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC,CAAwB,CAAC;oBACnK,IAAI,OAAO,IAAI,OAAO,CAAC,eAAe,KAAK,GAAG,CAAC,QAAQ,EAAE,CAAC;wBACxD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAE,EAAE,EAAE,EAAE,EAAE,oBAAoB,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;wBAC3G,IAAI,OAAO,CAAC,aAAa,KAAK,QAAQ,CAAC,QAAQ,CAAC;4BAAE,MAAM,IAAI,SAAS,CAAC,mBAAmB,EAAE,0BAA0B,CAAC,CAAC;wBACvH,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;wBAClH,MAAM,UAAU,GAAG,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;wBACtI,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,cAAc,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,gCAAgC,CAAC,CAAC,CAAC,oCAAoC;4BACnK,QAAQ,EAAE,CAAC,UAAU,IAAI,UAAU,CAAC,UAAU,KAAK,OAAO,EAAE,aAAa,EAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,MAAM,EAAE,aAAa,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;oBACjK,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBAAC,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,kCAAkC,EAAE,CAAC;YAAC,CAAC;YAC/E,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrB,CAAC;QACD,MAAM,KAAK,GAAG,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,cAAc,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,YAAY;YAClM,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE,gBAAgB,EAAE,eAAe,EAAE,CAAC;QAC5G,OAAO,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;IAC/C,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,GAAY,EAAE,UAAsB;QAC/C,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,2BAA2B,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9M,OAAO,IAAI,CAAC,CAAC,CAAC,SAAU,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE;YACtC,UAAU,EAAE,CAAC;YAAC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACtD,IAAI,MAAM,CAAC,QAAQ,KAAK,KAAK,CAAC,gBAAgB;gBAAE,MAAM,IAAI,SAAS,CAAC,UAAU,EAAE,kCAAkC,CAAC,CAAC;YACpH,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,4EAA4E,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAC,KAAK,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC;YACxJ,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAC,MAAM,CAAC,EAAE,EAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;YAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAC,YAAY,EAAE,KAAK,CAAC,YAAY,EAAC,OAAO,EAAC,OAAO,GAAC,CAAC,EAAC,eAAe,EAAC,KAAK,EAAE,CAAC;QACzJ,CAAC,CAAC,CAAC;IACL,CAAC;IACO,KAAK,CAAC,MAAc,EAAE,EAAU,EAAE,MAAc;QACtD,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,oBAAoB,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,EAAE,qBAAqB,MAAM,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC,CAAC;IAC/L,CAAC;CACF"}

package/dist/services/recovery/deploymentArchive.js

@@ -0,0 +1,129 @@
+import { pack, extract } from 'tar-stream';
+import { DodoError } from '../../errors.js';
+import { sha256Bytes } from '../../util/hash.js';
+export const DEPLOYMENT_ARCHIVE_BYTES = 32 * 1024 * 1024;
+const safeName = (name) => name.length <= 1024 && !/[\\:\x00-\x1f]/.test(name)
+    && name.split('/').every(p => p !== '' && p !== '.' && p !== '..');
+/** Deterministic, bounded bytes from the verified CAS, not a walk of the live workspace. */
+export async function packDeploymentSource(entries, read, assertPath) {
+    if (entries.length > 100000)
+        throw new DodoError('RESOURCE_LIMIT', 'build context entry budget exceeded');
+    if (entries.reduce((sum, e) => sum + Math.ceil(e.bytes / 512) * 512 + 4096, 1024) > DEPLOYMENT_ARCHIVE_BYTES)
+        throw new DodoError('RESOURCE_LIMIT', 'build context archive reservation exceeds 32 MiB');
+    const stream = pack(), chunks = [];
+    let total = 0;
+    const completed = new Promise((resolve, reject) => {
+        stream.on('data', (raw) => {
+            const chunk = Buffer.from(raw);
+            total += chunk.length;
+            if (total > DEPLOYMENT_ARCHIVE_BYTES) {
+                reject(new DodoError('RESOURCE_LIMIT', 'build context archive exceeds 32 MiB'));
+                stream.destroy();
+            }
+            else
+                chunks.push(chunk);
+        });
+        stream.on('error', () => reject(new DodoError('RECOVERY_REQUIRED', 'build context archive failed')));
+        stream.on('end', () => resolve(Buffer.concat(chunks)));
+    });
+    void completed.catch(() => { });
+    try {
+        const names = new Set();
+        for (const e of [...entries].sort((a, b) => a.path < b.path ? -1 : a.path > b.path ? 1 : 0)) {
+            assertPath(e.path);
+            if (!safeName(e.path) || names.has(e.path.toLowerCase()) || e.kind === 'absent')
+                throw new DodoError('PATH_DENIED', 'build context contains an ambiguous path');
+            names.add(e.path.toLowerCase());
+            if (!Number.isSafeInteger(e.bytes) || e.bytes < 0 || total + e.bytes > DEPLOYMENT_ARCHIVE_BYTES)
+                throw new DodoError('RESOURCE_LIMIT', 'build context archive exceeds 32 MiB');
+            const bytes = e.kind === 'file' ? await read(e) : Buffer.alloc(0);
+            if (e.kind === 'file' && (bytes.length !== e.bytes || sha256Bytes(bytes).slice(7) !== e.hash))
+                throw new DodoError('RECOVERY_REQUIRED', 'build context source hash differs');
+            await new Promise((resolve, reject) => stream.entry({ name: e.path, type: e.kind === 'file' ? 'file' : 'directory', size: bytes.length,
+                mode: (e.mode ?? (e.kind === 'file' ? 0o644 : 0o755)) & 0o777, uid: 0, gid: 0, mtime: new Date(0), uname: '', gname: '' }, bytes, error => error ? reject(new DodoError('RECOVERY_REQUIRED', 'build context entry failed')) : resolve()));
+        }
+        stream.finalize();
+        return await completed;
+    }
+    catch (error) {
+        stream.destroy();
+        throw error;
+    }
+}
+/** No filesystem extraction: untrusted container tar is checked before any source bytes can be used. */
+export async function verifySourceArchive(archive, expected, assertPath, prefix = '') {
+    if (archive.length > DEPLOYMENT_ARCHIVE_BYTES)
+        throw new DodoError('RESOURCE_LIMIT', 'container source archive exceeds 32 MiB');
+    if (prefix && !safeName(prefix))
+        throw new DodoError('INVALID_INPUT', 'invalid archive prefix');
+    const wanted = new Map(expected.filter(e => e.kind !== 'absent').map(e => [e.path, e]));
+    if (!expected.some(e => e.kind === 'file'))
+        throw new DodoError('NOT_SUPPORTED', 'no declared source manifest is available');
+    const seen = new Set(), seenFolded = new Set(), files = new Map();
+    const parser = extract();
+    let count = 0, extracted = 0;
+    const checked = new Promise((resolve, reject) => {
+        const fail = (error) => { reject(error instanceof DodoError ? error : new DodoError('RECOVERY_REQUIRED', 'invalid container source archive')); parser.destroy(); };
+        parser.on('error', fail);
+        parser.on('finish', () => resolve());
+        parser.on('entry', (header, stream, next) => {
+            stream.on('error', fail);
+            void (async () => {
+                if (++count > 100000 || !['file', 'directory'].includes(header.type) || header.linkname)
+                    throw new DodoError('PATH_DENIED', 'container source links, devices and unsupported entries are refused');
+                if (header.name.startsWith('/'))
+                    throw new DodoError('PATH_DENIED', 'absolute archive path refused');
+                if (header.pax && Object.keys(header.pax).some(key => !['path', 'size', 'mtime', 'atime', 'ctime', 'uid', 'gid', 'uname', 'gname'].includes(key)))
+                    throw new DodoError('PATH_DENIED', 'unsupported source archive metadata');
+                let name = header.name.replace(/^\.\//, '').replace(/\/$/, '');
+                if ((name === '.' || name === '' || prefix && name === prefix) && header.type === 'directory') {
+                    if (header.size !== 0)
+                        throw new DodoError('PATH_DENIED', 'invalid archive root');
+                    stream.resume();
+                    stream.on('end', () => next());
+                    return;
+                }
+                if (prefix) {
+                    if (!name.startsWith(prefix + '/'))
+                        throw new DodoError('PATH_DENIED', 'entry is outside the declared container source mapping');
+                    name = name.slice(prefix.length + 1);
+                }
+                if (!safeName(name) || seenFolded.has(name.toLowerCase()))
+                    throw new DodoError('PATH_DENIED', 'archive traversal, duplicate or ambiguous path refused');
+                assertPath(name);
+                seenFolded.add(name.toLowerCase());
+                seen.add(name);
+                const expectedEntry = wanted.get(name);
+                if (!expectedEntry || header.type !== (expectedEntry.kind === 'directory' ? 'directory' : 'file'))
+                    throw new DodoError('RECOVERY_REQUIRED', 'image source coverage differs from its recorded manifest');
+                if (!Number.isSafeInteger(header.size) || header.size < 0 || header.size !== expectedEntry.bytes
+                    || (header.mode & 0o7777) !== expectedEntry.mode)
+                    throw new DodoError('RECOVERY_REQUIRED', 'image source size or mode differs from its recorded manifest');
+                extracted += header.size;
+                if (extracted > DEPLOYMENT_ARCHIVE_BYTES)
+                    throw new DodoError('RESOURCE_LIMIT', 'container source budget exceeded');
+                const chunks = [];
+                let bytes = 0;
+                for await (const raw of stream) {
+                    const chunk = Buffer.from(raw);
+                    bytes += chunk.length;
+                    if (bytes > expectedEntry.bytes)
+                        throw new DodoError('RESOURCE_LIMIT', 'archive entry exceeds declared bytes');
+                    chunks.push(chunk);
+                }
+                const data = Buffer.concat(chunks);
+                if (bytes !== expectedEntry.bytes || header.type === 'file' && sha256Bytes(data).slice(7) !== expectedEntry.hash)
+                    throw new DodoError('RECOVERY_REQUIRED', 'image source hash differs; image labels are not proof');
+                if (header.type === 'file')
+                    files.set(name, data);
+                next();
+            })().catch(fail);
+        });
+    });
+    parser.end(archive);
+    await checked;
+    if ([...wanted.keys()].some(name => !seen.has(name)))
+        throw new DodoError('NOT_SUPPORTED', 'image source is missing or partial; exact recovery is unavailable');
+    return { files, fileCount: files.size, bytes: extracted, complete: true };
+}
+//# sourceMappingURL=deploymentArchive.js.map

package/dist/services/recovery/deploymentArchive.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deploymentArchive.js","sourceRoot":"","sources":["../../../src/services/recovery/deploymentArchive.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAGjD,MAAM,CAAC,MAAM,wBAAwB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AACzD,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;OACjF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;AAErE,4FAA4F;AAC5F,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,OAAwB,EAAE,IAA+C,EAAE,UAAkC;IACtJ,IAAI,OAAO,CAAC,MAAM,GAAG,MAAM;QAAE,MAAM,IAAI,SAAS,CAAC,gBAAgB,EAAE,qCAAqC,CAAC,CAAC;IAC1G,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,GAAG,CAAC,GAAG,GAAG,GAAG,IAAI,EAAE,IAAI,CAAC,GAAG,wBAAwB;QAC1G,MAAM,IAAI,SAAS,CAAC,gBAAgB,EAAE,kDAAkD,CAAC,CAAC;IAC5F,MAAM,MAAM,GAAG,IAAI,EAAE,EAAE,MAAM,GAAa,EAAE,CAAC;IAC7C,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,SAAS,GAAG,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACxD,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,GAAY,EAAE,EAAE;YACjC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAiB,CAAC,CAAC;YAC7C,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;YACtB,IAAI,KAAK,GAAG,wBAAwB,EAAE,CAAC;gBAAC,MAAM,CAAC,IAAI,SAAS,CAAC,gBAAgB,EAAE,sCAAsC,CAAC,CAAC,CAAC;gBAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAAC,CAAC;;gBACvI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC,mBAAmB,EAAE,8BAA8B,CAAC,CAAC,CAAC,CAAC;QACrG,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IACH,KAAK,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;QAChC,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5F,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACnB,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,IAAI,SAAS,CAAC,aAAa,EAAE,0CAA0C,CAAC,CAAC;YAChK,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;YAChC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG,wBAAwB;gBAAE,MAAM,IAAI,SAAS,CAAC,gBAAgB,EAAE,sCAAsC,CAAC,CAAC;YAC/K,MAAM,KAAK,GAAG,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAClE,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,KAAK,IAAI,WAAW,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC;gBAAE,MAAM,IAAI,SAAS,CAAC,mBAAmB,EAAE,mCAAmC,CAAC,CAAC;YAC7K,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM;gBAC1I,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,KAAK,EAClI,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC,mBAAmB,EAAE,4BAA4B,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAC1G,CAAC;QACD,MAAM,CAAC,QAAQ,EAAE,CAAC;QAClB,OAAO,MAAM,SAAS,CAAC;IACzB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;AACpD,CAAC;AAED,wGAAwG;AACxG,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,OAAe,EAAE,QAAyB,EAAE,UAAkC,EAAE,MAAM,GAAG,EAAE;IACnI,IAAI,OAAO,CAAC,MAAM,GAAG,wBAAwB;QAAE,MAAM,IAAI,SAAS,CAAC,gBAAgB,EAAE,yCAAyC,CAAC,CAAC;IAChI,IAAI,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,eAAe,EAAE,wBAAwB,CAAC,CAAC;IAChG,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACxF,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,eAAe,EAAE,0CAA0C,CAAC,CAAC;IAC7H,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,EAAE,UAAU,GAAG,IAAI,GAAG,EAAU,EAAE,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IAClG,MAAM,MAAM,GAAG,OAAO,EAAE,CAAC;IAAC,IAAI,KAAK,GAAG,CAAC,EAAE,SAAS,GAAG,CAAC,CAAC;IACvD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACpD,MAAM,IAAI,GAAG,CAAC,KAAc,EAAE,EAAE,GAAG,MAAM,CAAC,KAAK,YAAY,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,mBAAmB,EAAE,kCAAkC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;QAC5K,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACzB,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QACrC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;YAC1C,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACzB,KAAK,CAAC,KAAK,IAAI,EAAE;gBACf,IAAI,EAAE,KAAK,GAAG,MAAM,IAAI,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,QAAQ;oBACrF,MAAM,IAAI,SAAS,CAAC,aAAa,EAAE,qEAAqE,CAAC,CAAC;gBAC5G,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;oBAAE,MAAM,IAAI,SAAS,CAAC,aAAa,EAAE,+BAA+B,CAAC,CAAC;gBACrG,IAAI,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;oBAC/I,MAAM,IAAI,SAAS,CAAC,aAAa,EAAE,qCAAqC,CAAC,CAAC;gBAC5E,IAAI,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBAC/D,IAAI,CAAC,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,EAAE,IAAI,MAAM,IAAI,IAAI,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;oBAC9F,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;wBAAE,MAAM,IAAI,SAAS,CAAC,aAAa,EAAE,sBAAsB,CAAC,CAAC;oBAClF,MAAM,CAAC,MAAM,EAAE,CAAC;oBAAC,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;oBAAC,OAAO;gBAC1D,CAAC;gBACD,IAAI,MAAM,EAAE,CAAC;oBACX,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,GAAG,CAAC;wBAAE,MAAM,IAAI,SAAS,CAAC,aAAa,EAAE,wDAAwD,CAAC,CAAC;oBACjI,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;gBACvC,CAAC;gBACD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;oBAAE,MAAM,IAAI,SAAS,CAAC,aAAa,EAAE,wDAAwD,CAAC,CAAC;gBACxJ,UAAU,CAAC,IAAI,CAAC,CAAC;gBAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;gBAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACrE,MAAM,aAAa,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACvC,IAAI,CAAC,aAAa,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,aAAa,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC;oBAC/F,MAAM,IAAI,SAAS,CAAC,mBAAmB,EAAE,0DAA0D,CAAC,CAAC;gBACvG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,KAAK,aAAa,CAAC,KAAK;uBAC3F,CAAC,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,KAAK,aAAa,CAAC,IAAI;oBAAE,MAAM,IAAI,SAAS,CAAC,mBAAmB,EAAE,8DAA8D,CAAC,CAAC;gBAC7J,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC;gBACzB,IAAI,SAAS,GAAG,wBAAwB;oBAAE,MAAM,IAAI,SAAS,CAAC,gBAAgB,EAAE,kCAAkC,CAAC,CAAC;gBACpH,MAAM,MAAM,GAAa,EAAE,CAAC;gBAAC,IAAI,KAAK,GAAG,CAAC,CAAC;gBAC3C,IAAI,KAAK,EAAE,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;oBAAC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAiB,CAAC,CAAC;oBAAC,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;oBACpG,IAAI,KAAK,GAAG,aAAa,CAAC,KAAK;wBAAE,MAAM,IAAI,SAAS,CAAC,gBAAgB,EAAE,sCAAsC,CAAC,CAAC;oBAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAAC,CAAC;gBACvI,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBACnC,IAAI,KAAK,KAAK,aAAa,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,aAAa,CAAC,IAAI;oBAC9G,MAAM,IAAI,SAAS,CAAC,mBAAmB,EAAE,uDAAuD,CAAC,CAAC;gBACpG,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM;oBAAE,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBAClD,IAAI,EAAE,CAAC;YACT,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACpB,MAAM,OAAO,CAAC;IACd,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,eAAe,EAAE,mEAAmE,CAAC,CAAC;IAChK,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAa,EAAE,CAAC;AACrF,CAAC"}

package/dist/services/recovery/deploymentContracts.js

@@ -0,0 +1,70 @@
+import { z } from 'zod';
+const name = z.string().min(1).max(64).regex(/^[a-z0-9][a-z0-9_-]*$/);
+export const DeploymentHash = z.string().regex(/^sha256:[a-f0-9]{64}$/);
+// Additional filesystem/secret checks use the project's shared path policy.
+const relative = z.string().min(1).max(1024).refine(p => p === '.' || (!p.startsWith('/') && !/[\\:\x00-\x1f]/.test(p)
+    && p.split('/').every(part => part !== '' && part !== '.' && part !== '..')), 'use a canonical relative source path');
+const operation = z.object({
+    path: z.string().min(1).max(1024).startsWith('/'),
+    method: z.enum(['get', 'post', 'put', 'patch', 'delete', 'head', 'options']),
+    responses: z.array(z.string().regex(/^(?:[1-5][0-9]{2}|default)$/)).min(1).max(20),
+    // Exact hashes are deliberately conservative: uncertainty never proves compatibility.
+    contractHash: DeploymentHash.optional(),
+}).strict();
+export const DeploymentHealthCheck = z.object({
+    id: name,
+    kind: z.enum(['http', 'openapi']),
+    url: z.string().max(2048).url(),
+    allowPrivateNetwork: z.boolean().default(false),
+    expectedStatus: z.number().int().min(100).max(599).default(200),
+    requiredOperations: z.array(operation).max(100).default([]),
+}).strict().refine(c => c.kind === 'openapi' ? c.requiredOperations.length > 0 : c.requiredOperations.length === 0, 'OpenAPI checks require explicit operations; HTTP checks do not accept a contract');
+/** Owner-only input. No credential values, arbitrary argv, privileged flags or repo Compose hooks. */
+export const DeploymentTargetSchema = z.object({
+    name,
+    adapter: z.literal('docker-compose'),
+    dockerContext: name.default('default'),
+    composeProject: name,
+    service: name,
+    contextRoot: relative.default('.'),
+    dockerfile: relative.refine(p => p !== '.').default('Dockerfile'),
+    buildNetwork: z.enum(['none', 'default']).default('none'),
+    sourceMapping: z.object({
+        workspaceRoot: relative.default('.'),
+        containerRoot: z.string().min(2).max(1024).refine(p => /^\//.test(p) && !/[\\:\x00-\x1f]/.test(p)
+            && p.slice(1).split('/').every(v => v !== '' && v !== '.' && v !== '..')
+            && !/^\/(?:proc|sys|dev|run|var\/run)(?:\/|$)/.test(p), 'use a dedicated absolute container source directory'),
+    }).strict().optional(),
+    ports: z.array(z.object({
+        host: z.enum(['127.0.0.1', '0.0.0.0', '::1']).default('127.0.0.1'),
+        published: z.number().int().min(1024).max(65535),
+        target: z.number().int().min(1).max(65535),
+    }).strict()).max(20).default([]),
+    // Only existing, explicitly named volumes; never bind mounts or automatic data deletion.
+    volumes: z.array(z.object({ name, target: z.string().regex(/^\/[a-zA-Z0-9_/-]+$/).max(256) }).strict()).max(10).default([]),
+    requiredChecks: z.array(z.object({ taskId: z.string().min(1).max(128), recipeDigest: DeploymentHash }).strict()).min(1).max(20),
+    health: z.array(DeploymentHealthCheck).min(1).max(20),
+    stabilizationMs: z.number().int().min(1000).max(300000).default(10000),
+    intervalMs: z.number().int().min(250).max(10000).default(2000),
+    commandTimeoutMs: z.number().int().min(1000).max(1800000).default(300000),
+    retainedImages: z.number().int().min(2).max(100).default(5),
+}).strict().superRefine((target, ctx) => {
+    for (const [field, values] of [
+        ['requiredChecks', target.requiredChecks.map(c => c.taskId)], ['health', target.health.map(c => c.id)],
+        ['ports', target.ports.map(p => `${p.host}:${p.published}`)], ['volumes', target.volumes.map(v => v.target)],
+    ])
+        if (new Set(values).size !== values.length)
+            ctx.addIssue({ code: 'custom', path: [field], message: 'duplicate target entry' });
+    if (target.intervalMs > target.stabilizationMs)
+        ctx.addIssue({ code: 'custom', path: ['intervalMs'], message: 'interval must fit the stabilization window' });
+    for (const v of target.volumes) {
+        if (v.target.includes('//') || /^\/(?:proc|sys|dev|run)(?:\/|$)/.test(v.target))
+            ctx.addIssue({ code: 'custom', path: ['volumes'], message: 'invalid volume destination' });
+        if (target.volumes.some(other => other !== v && (other.target.startsWith(v.target + '/') || v.target.startsWith(other.target + '/'))))
+            ctx.addIssue({ code: 'custom', path: ['volumes'], message: 'nested volume destinations are not supported' });
+        const source = target.sourceMapping?.containerRoot;
+        if (source && (source === v.target || source.startsWith(v.target + '/') || v.target.startsWith(source + '/')))
+            ctx.addIssue({ code: 'custom', path: ['volumes'], message: 'source recovery mapping must not overlap volume data' });
+    }
+});
+//# sourceMappingURL=deploymentContracts.js.map

package/dist/services/recovery/deploymentContracts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deploymentContracts.js","sourceRoot":"","sources":["../../../src/services/recovery/deploymentContracts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;AACtE,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;AACxE,4EAA4E;AAC5E,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CACtD,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;OACxD,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,EAAE,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC,CAAC,EAC9E,sCAAsC,CAAC,CAAC;AAC1C,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC;IACzB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;IACjD,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IAC5E,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IAClF,sFAAsF;IACtF,YAAY,EAAE,cAAc,CAAC,QAAQ,EAAE;CACxC,CAAC,CAAC,MAAM,EAAE,CAAC;AACZ,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,EAAE,EAAE,IAAI;IACR,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACjC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE;IAC/B,mBAAmB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAC/C,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;IAC/D,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAC5D,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,MAAM,KAAK,CAAC,EAChH,kFAAkF,CAAC,CAAC;AAEtF,sGAAsG;AACtG,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,IAAI;IACJ,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC;IACpC,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;IACtC,cAAc,EAAE,IAAI;IACpB,OAAO,EAAE,IAAI;IACb,WAAW,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC;IAClC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC;IACjE,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACzD,aAAa,EAAE,CAAC,CAAC,MAAM,CAAC;QACtB,aAAa,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC;QACpC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;eAC5F,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC;eACrE,CAAC,0CAA0C,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,qDAAqD,CAAC;KACjH,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACtB,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QACtB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;QAClE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;QAChD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;KAC3C,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAChC,yFAAyF;IACzF,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC3H,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,YAAY,EAAE,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IAC/H,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IACrD,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IACtE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IAC9D,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACzE,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;CAC5D,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE;IACtC,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI;QAC5B,CAAC,gBAAgB,EAAE,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACtG,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;KACpG;QAAE,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM;YAAE,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC,CAAC;IAC3I,IAAI,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,eAAe;QAAE,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,4CAA4C,EAAE,CAAC,CAAC;IAC9J,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QAC/B,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,iCAAiC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;YAAE,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,4BAA4B,EAAE,CAAC,CAAC;QAC5K,IAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAA,EAAE,CAAA,KAAK,KAAG,CAAC,IAAE,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,GAAC,GAAG,CAAC,IAAE,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,GAAC,GAAG,CAAC,CAAC,CAAC;YACtH,GAAG,CAAC,QAAQ,CAAC,EAAC,IAAI,EAAC,QAAQ,EAAC,IAAI,EAAC,CAAC,SAAS,CAAC,EAAC,OAAO,EAAC,8CAA8C,EAAC,CAAC,CAAC;QACxG,MAAM,MAAM,GAAG,MAAM,CAAC,aAAa,EAAE,aAAa,CAAC;QACnD,IAAI,MAAM,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC;YAC3G,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,sDAAsD,EAAE,CAAC,CAAC;IACzH,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/services/recovery/deploymentHealth.js

@@ -0,0 +1,143 @@
+import http from 'node:http';
+import https from 'node:https';
+import dns from 'node:dns/promises';
+import net from 'node:net';
+import { DodoError } from '../../errors.js';
+import { addressClass } from '../../security/outboundAddress.js';
+import { digestOf } from '../../util/hash.js';
+export function validateHealthUrl(check, config) {
+    let u;
+    try {
+        u = new URL(check.url);
+    }
+    catch {
+        throw new DodoError('INVALID_INPUT', 'invalid deployment health URL');
+    }
+    if (!['http:', 'https:'].includes(u.protocol) || u.username || u.password || u.search || u.hash)
+        throw new DodoError('INVALID_INPUT', 'health URL must be HTTP(S), without credentials, query or fragment');
+    const port = Number(u.port || (u.protocol === 'https:' ? 443 : 80));
+    if ([21730, 21731, 21732, config.port, config.configPort, ...(config.controlPorts ?? [])].includes(port)
+        || (config.publicUrl && u.origin === new URL(config.publicUrl).origin))
+        throw new DodoError('FORBIDDEN', 'DODO endpoints cannot be deployment health targets');
+    const host = u.hostname.replace(/^\[|\]$/g, '');
+    if (host === 'metadata.google.internal' || host.endsWith('.metadata.google.internal'))
+        throw new DodoError('FORBIDDEN', 'metadata endpoints cannot be health targets');
+    if (u.protocol === 'http:' && !check.allowPrivateNetwork)
+        throw new DodoError('FORBIDDEN', 'HTTP health requires explicit owner permission for this private target');
+    if (net.isIP(host))
+        validateHealthAddress(host, check, u);
+    return u;
+}
+export function validateHealthAddress(ip, check, url) {
+    const type = addressClass(ip);
+    if (!net.isIP(ip) || type === 'denied' || (type === 'private' && !check.allowPrivateNetwork) || (type === 'public' && url.protocol !== 'https:'))
+        throw new DodoError('FORBIDDEN', 'deployment health address is not permitted');
+}
+/** A bounded GET with a pinned, pre-validated DNS result. No auth, cookies, redirect or retries. */
+export async function readHealth(check, config, revalidate, signal) {
+    const url = validateHealthUrl(check, config), host = url.hostname.replace(/^\[|\]$/g, '');
+    const deadline = AbortSignal.timeout(10000), combined = signal ? AbortSignal.any([signal, deadline]) : deadline;
+    combined.throwIfAborted();
+    revalidate();
+    // dns.lookup has no AbortSignal: cap waiting and never send a late result after expiry.
+    let abort;
+    const addresses = await Promise.race([
+        net.isIP(host) ? Promise.resolve([{ address: host, family: net.isIP(host) }]) : dns.lookup(host, { all: true }),
+        new Promise((_resolve, reject) => { abort = () => reject(new DodoError('TIMEOUT', 'deployment health DNS deadline expired')); combined.addEventListener('abort', abort, { once: true }); }),
+    ]).catch(() => { throw new DodoError('CONFLICT', 'deployment health DNS unavailable; no request sent'); })
+        .finally(() => { if (abort)
+        combined.removeEventListener('abort', abort); });
+    if (!addresses.length)
+        throw new DodoError('NOT_SUPPORTED', 'deployment health hostname has no address');
+    for (const entry of addresses)
+        validateHealthAddress(entry.address, check, url);
+    const chosen = addresses.find(a => a.family === 4) ?? addresses[0];
+    combined.throwIfAborted();
+    revalidate();
+    return new Promise((resolve, reject) => {
+        const req = (url.protocol === 'https:' ? https : http).request(url, {
+            method: 'GET', headers: { accept: 'application/json', 'accept-encoding': 'identity' }, agent: false, signal: combined,
+            lookup: (_host, options, callback) => {
+                if (typeof options === 'object' && options.all)
+                    callback(null, [chosen]);
+                else
+                    callback(null, chosen.address, chosen.family);
+            },
+        }, response => {
+            const status = response.statusCode ?? 0;
+            if (status >= 300 && status < 400 || response.headers['content-encoding'] && response.headers['content-encoding'] !== 'identity') {
+                reject(new DodoError('FORBIDDEN', 'health redirects and compressed responses are refused'));
+                response.destroy();
+                return;
+            }
+            const chunks = [];
+            let size = 0;
+            response.on('data', (chunk) => {
+                size += chunk.length;
+                if (size > 2 * 1024 * 1024) {
+                    reject(new DodoError('RESOURCE_LIMIT', 'deployment health response exceeds its limit'));
+                    response.destroy();
+                }
+                else
+                    chunks.push(chunk);
+            });
+            response.on('aborted', () => reject(new DodoError('CONFLICT', 'deployment health response was interrupted')));
+            response.on('error', () => reject(new DodoError('CONFLICT', 'deployment health response failed')));
+            response.on('end', () => { try {
+                revalidate();
+                resolve({ status, body: Buffer.concat(chunks) });
+            }
+            catch (error) {
+                reject(error);
+            } });
+        });
+        req.on('error', () => reject(new DodoError('CONFLICT', 'deployment health request failed; not retried')));
+        req.end();
+    });
+}
+function object(value) {
+    return value !== null && typeof value === 'object' && !Array.isArray(value) ? value : undefined;
+}
+/** Only owner-declared operation presence/statuses or exact contracts are proven, never all semantic compatibility. */
+export function evaluateHealth(check, response) {
+    let passed = response.status === check.expectedStatus, reason = passed ? 'expected_status' : 'unexpected_status';
+    let contractDigest = null;
+    if (passed && check.kind === 'openapi') {
+        let spec;
+        try {
+            spec = object(JSON.parse(response.body.toString('utf8')));
+        }
+        catch { /* sanitized below */ }
+        const paths = object(spec?.['paths']);
+        passed = Boolean(paths && typeof spec?.['openapi'] === 'string' && /^3\.[01]\./.test(spec['openapi']));
+        const selected = [];
+        for (const expected of check.requiredOperations) {
+            const operation = object(object(paths?.[expected.path])?.[expected.method]), responses = object(operation?.['responses']);
+            if (!operation || operation['$ref'] || !responses || expected.responses.some(code => !Object.hasOwn(responses, code)))
+                passed = false;
+            else {
+                selected.push(operation);
+                if (expected.contractHash) {
+                    // The entire document participates so a changed referenced component cannot pass unnoticed.
+                    try {
+                        if (digestOf({ operation, components: spec?.['components'] ?? {} }) !== expected.contractHash)
+                            passed = false;
+                    }
+                    catch {
+                        passed = false;
+                    }
+                }
+            }
+        }
+        try {
+            contractDigest = digestOf(selected);
+        }
+        catch {
+            passed = false;
+        }
+        reason = passed ? 'declared_contract_matched' : 'contract_missing_incompatible_or_unknown';
+    }
+    return { checkId: check.id, kind: check.kind, passed, reason, status: response.status, contractDigest,
+        checkedAt: Date.now(), coverage: check.kind === 'openapi' ? 'owner_declared_operations_only' : 'expected_http_status_only' };
+}
+//# sourceMappingURL=deploymentHealth.js.map

package/dist/services/recovery/deploymentHealth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deploymentHealth.js","sourceRoot":"","sources":["../../../src/services/recovery/deploymentHealth.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,KAAK,MAAM,YAAY,CAAC;AAC/B,OAAO,GAAG,MAAM,mBAAmB,CAAC;AACpC,OAAO,GAAG,MAAM,UAAU,CAAC;AAC3B,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAE5C,OAAO,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AACjE,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAI9C,MAAM,UAAU,iBAAiB,CAAC,KAAkB,EAAE,MAAqB;IACzE,IAAI,CAAM,CAAC;IACX,IAAI,CAAC;QAAC,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,IAAI,SAAS,CAAC,eAAe,EAAE,+BAA+B,CAAC,CAAC;IAAC,CAAC;IAChH,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI;QAC7F,MAAM,IAAI,SAAS,CAAC,eAAe,EAAE,oEAAoE,CAAC,CAAC;IAC7G,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACpE,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;WACnG,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC;QACtE,MAAM,IAAI,SAAS,CAAC,WAAW,EAAE,oDAAoD,CAAC,CAAC;IACzF,MAAM,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAChD,IAAI,IAAI,KAAK,0BAA0B,IAAI,IAAI,CAAC,QAAQ,CAAC,2BAA2B,CAAC;QACnF,MAAM,IAAI,SAAS,CAAC,WAAW,EAAE,6CAA6C,CAAC,CAAC;IAClF,IAAI,CAAC,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,KAAK,CAAC,mBAAmB;QAAE,MAAM,IAAI,SAAS,CAAC,WAAW,EAAE,wEAAwE,CAAC,CAAC;IACrK,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,qBAAqB,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IAC1D,OAAO,CAAC,CAAC;AACX,CAAC;AACD,MAAM,UAAU,qBAAqB,CAAC,EAAU,EAAE,KAAkB,EAAE,GAAQ;IAC5E,MAAM,IAAI,GAAG,YAAY,CAAC,EAAE,CAAC,CAAC;IAC9B,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC;QAC9I,MAAM,IAAI,SAAS,CAAC,WAAW,EAAE,4CAA4C,CAAC,CAAC;AACnF,CAAC;AAED,oGAAoG;AACpG,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,KAAkB,EAAE,MAAqB,EAAE,UAAsB,EAAE,MAAoB;IACtH,MAAM,GAAG,GAAG,iBAAiB,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC1F,MAAM,QAAQ,GAAG,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IAChH,QAAQ,CAAC,cAAc,EAAE,CAAC;IAAC,UAAU,EAAE,CAAC;IACxC,wFAAwF;IACxF,IAAI,KAA+B,CAAC;IACpC,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;QACnC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;QAC/G,IAAI,OAAO,CAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,GAAG,KAAK,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC,SAAS,EAAE,wCAAwC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;KACnM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,MAAM,IAAI,SAAS,CAAC,UAAU,EAAE,oDAAoD,CAAC,CAAC,CAAC,CAAC,CAAC;SACvG,OAAO,CAAC,GAAG,EAAE,GAAG,IAAI,KAAK;QAAE,QAAQ,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/E,IAAI,CAAC,SAAS,CAAC,MAAM;QAAE,MAAM,IAAI,SAAS,CAAC,eAAe,EAAE,2CAA2C,CAAC,CAAC;IACzG,KAAK,MAAM,KAAK,IAAI,SAAS;QAAE,qBAAqB,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IAChF,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,CAAE,CAAC;IACpE,QAAQ,CAAC,cAAc,EAAE,CAAC;IAAC,UAAU,EAAE,CAAC;IACxC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;YAClE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ;YACrH,MAAM,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE;gBACnC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,GAAG;oBAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;;oBAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YAC/H,CAAC;SACF,EAAE,QAAQ,CAAC,EAAE;YACZ,MAAM,MAAM,GAAG,QAAQ,CAAC,UAAU,IAAI,CAAC,CAAC;YACxC,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG,IAAI,QAAQ,CAAC,OAAO,CAAC,kBAAkB,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,kBAAkB,CAAC,KAAK,UAAU,EAAE,CAAC;gBACjI,MAAM,CAAC,IAAI,SAAS,CAAC,WAAW,EAAE,uDAAuD,CAAC,CAAC,CAAC;gBAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;gBAAC,OAAO;YAC1H,CAAC;YACD,MAAM,MAAM,GAAa,EAAE,CAAC;YAAC,IAAI,IAAI,GAAG,CAAC,CAAC;YAC1C,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBACpC,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC;gBACrB,IAAI,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;oBAAC,MAAM,CAAC,IAAI,SAAS,CAAC,gBAAgB,EAAE,8CAA8C,CAAC,CAAC,CAAC;oBAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;gBAAC,CAAC;;oBACvI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1B,CAAC,CAAC,CAAC;YACH,QAAQ,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC,UAAU,EAAE,4CAA4C,CAAC,CAAC,CAAC,CAAC;YAC9G,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC,UAAU,EAAE,mCAAmC,CAAC,CAAC,CAAC,CAAC;YACnG,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;gBAAC,UAAU,EAAE,CAAC;gBAAC,OAAO,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAAC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACzI,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC,UAAU,EAAE,+CAA+C,CAAC,CAAC,CAAC,CAAC;QAC1G,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAgC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7H,CAAC;AACD,uHAAuH;AACvH,MAAM,UAAU,cAAc,CAAC,KAAkB,EAAE,QAA0C;IAC3F,IAAI,MAAM,GAAG,QAAQ,CAAC,MAAM,KAAK,KAAK,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,mBAAmB,CAAC;IACjH,IAAI,cAAc,GAAkB,IAAI,CAAC;IACzC,IAAI,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACvC,IAAI,IAAyC,CAAC;QAC9C,IAAI,CAAC;YAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,qBAAqB,CAAC,CAAC;QAClG,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QACtC,MAAM,GAAG,OAAO,CAAC,KAAK,IAAI,OAAO,IAAI,EAAE,CAAC,SAAS,CAAC,KAAK,QAAQ,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACvG,MAAM,QAAQ,GAAc,EAAE,CAAC;QAC/B,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,kBAAkB,EAAE,CAAC;YAChD,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,SAAS,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;YAC1H,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;gBAAE,MAAM,GAAG,KAAK,CAAC;iBACjI,CAAC;gBACJ,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACzB,IAAI,QAAQ,CAAC,YAAY,EAAE,CAAC;oBAC1B,4FAA4F;oBAC5F,IAAI,CAAC;wBAAC,IAAI,QAAQ,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,QAAQ,CAAC,YAAY;4BAAE,MAAM,GAAG,KAAK,CAAC;oBAAC,CAAC;oBACtH,MAAM,CAAC;wBAAC,MAAM,GAAG,KAAK,CAAC;oBAAC,CAAC;gBAC3B,CAAC;YACH,CAAC;QACH,CAAC;QACD,IAAI,CAAC;YAAC,cAAc,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,GAAG,KAAK,CAAC;QAAC,CAAC;QACtE,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,0CAA0C,CAAC;IAC7F,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,cAAc;QACnG,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,gCAAgC,CAAC,CAAC,CAAC,2BAA2B,EAAE,CAAC;AACjI,CAAC"}

package/dist/services/recovery/deploymentMaintenance.js

@@ -0,0 +1,197 @@
+import { z } from 'zod';
+import { DodoError } from '../../errors.js';
+import { digestOf, newId } from '../../util/hash.js';
+const id = z.string().min(1).max(128);
+export const DeploymentMaintenanceInput = z.discriminatedUnion('action', [
+    z.object({ action: z.literal('pin'), deploymentId: id, pinned: z.boolean(), expectedPinned: z.boolean() }).strict(),
+    z.object({ action: z.literal('resolve_preview'), deploymentId: id }).strict(),
+    z.object({ action: z.literal('image_preview'), deploymentId: id }).strict(),
+    z.object({ action: z.literal('probe_preview'), deploymentId: id }).strict(),
+    z.object({ action: z.literal('cleanup_preview'), targetId: id }).strict(),
+    z.object({ action: z.literal('apply'), reviewId: id, reviewHash: z.string().regex(/^sha256:[a-f0-9]{64}$/) }).strict(),
+]);
+/** Private owner administration only. Preview is durable; apply reobserves and
+ * binds the exact preview. Interrupted effects remain UNKNOWN, never replayed. */
+export class DeploymentMaintenance {
+    s;
+    revalidate;
+    inspect;
+    target;
+    adapter;
+    constructor(s, revalidate, inspect, target, adapter) {
+        this.s = s;
+        this.revalidate = revalidate;
+        this.inspect = inspect;
+        this.target = target;
+        this.adapter = adapter;
+    }
+    get db() { return this.s.store.db; }
+    meta(id) {
+        return this.db.prepare('SELECT * FROM recovery_deployment_maintenance WHERE deployment_id=?').get(id)
+            ?? { pinned: 0, retired: 0, probe_json: null, resolution_json: null, cleanup_json: null };
+    }
+    assertIdle(id) {
+        if (this.db.prepare("SELECT 1 FROM recovery_deployment_jobs d JOIN jobs j ON j.id=d.job_id WHERE d.deployment_id=? AND j.status='running' LIMIT 1").get(id))
+            throw new DodoError('CONFLICT', 'deployment jobs are still running; wait or explicitly cancel them before maintenance');
+    }
+    async observation(kind, reference) {
+        this.revalidate();
+        if (kind === 'cleanup')
+            return this.cleanup(reference);
+        const record = this.inspect(reference), target = this.target(record.plan.targetId);
+        this.assertIdle(reference);
+        if (target.hash !== record.plan.targetHash)
+            throw new DodoError('CONFLICT', 'registered target changed; do not inspect an unrelated Docker endpoint');
+        const adapter = this.adapter(record, target), meta = this.meta(reference);
+        if (kind === 'image') {
+            if (!record.imageDigest || !meta.cleanup_json)
+                throw new DodoError('NOT_FOUND', 'no image cleanup receipt to inspect');
+            return { targetHash: target.hash, image: record.imageDigest, actual: await adapter.imageInventory(record.imageDigest) };
+        }
+        if (kind === 'probe') {
+            if (!meta.probe_json)
+                throw new DodoError('NOT_FOUND', 'no recorded source probe');
+            const probe = JSON.parse(meta.probe_json);
+            return { targetHash: target.hash, probe, actual: await adapter.probeObservation(probe) };
+        }
+        if (record.state !== 'UNKNOWN' || meta.resolution_json)
+            throw new DodoError('CONFLICT', 'this deployment has no unresolved uncertain outcome');
+        return { targetHash: target.hash, planHash: record.planHash, containers: await adapter.containers(),
+            image: record.imageDigest ? await adapter.imageInventory(record.imageDigest) : null,
+            probe: meta.probe_json ? await adapter.probeObservation(JSON.parse(meta.probe_json)) : null,
+            action: 'acknowledge_uncertainty_without_retry_or_health_claim', previousKnownGoodUnchanged: true };
+    }
+    async cleanup(targetId) {
+        const target = this.target(targetId);
+        const rows = this.db.prepare('SELECT id FROM recovery_deployments WHERE target_id=? ORDER BY created_at DESC,id DESC LIMIT 501').all(targetId);
+        if (rows.length > 500)
+            throw new DodoError('RESOURCE_LIMIT', 'deployment history exceeds the bounded maintenance limit');
+        const records = rows.map(row => this.inspect(row.id));
+        if (records.some(r => r.imageDigest && !this.meta(r.plan.deploymentId).retired && r.plan.targetHash !== target.hash))
+            throw new DodoError('CONFLICT', 'image history binds an earlier target definition; restore its reviewed definition before cleanup');
+        const pointer = this.db.prepare('SELECT deployment_id,previous_id,revision FROM recovery_production_pointers WHERE target_id=?').get(targetId);
+        const groups = new Map();
+        for (const r of records)
+            if (r.imageDigest && !this.meta(r.plan.deploymentId).retired)
+                groups.set(r.imageDigest, [...(groups.get(r.imageDigest) ?? []), r]);
+        const keep = new Set([...groups.keys()].slice(0, target.definition.retainedImages));
+        const items = [];
+        for (const [image, refs] of groups) {
+            const adapter = this.adapter(refs[0], target), inventory = await adapter.imageInventory(image), reasons = new Set();
+            if (keep.has(image))
+                reasons.add('retention_budget');
+            if (inventory.used)
+                reasons.add('container_reference');
+            const managedTags = refs.filter(r => !r.plan.rollback).map(r => `dodo-recovery:${r.plan.deploymentId}`);
+            if (inventory.tags.some(tag => !managedTags.includes(tag)))
+                reasons.add('unowned_tag');
+            for (const r of refs) {
+                const deploymentId = r.plan.deploymentId, meta = this.meta(deploymentId);
+                this.assertIdle(deploymentId);
+                if (meta.pinned)
+                    reasons.add('owner_pin');
+                if (meta.cleanup_json)
+                    reasons.add('previous_cleanup_outcome_requires_inspection');
+                if (pointer?.deployment_id === deploymentId || pointer?.previous_id === deploymentId)
+                    reasons.add('known_good_pointer');
+                if (['BUILDING', 'DEPLOYING', 'HEALTH_CHECKING'].includes(r.state) || (r.state === 'UNKNOWN' && !meta.resolution_json))
+                    reasons.add('unfinished_outcome');
+                if (r.state === 'BUILT' && r.plan.expiresAt > Date.now())
+                    reasons.add('live_deployment_plan');
+            }
+            // Another project/target may use the same image ID. No cross-target purge.
+            if (this.db.prepare('SELECT 1 FROM recovery_deployments WHERE image_digest=? AND target_id<>? LIMIT 1').get(image, targetId))
+                reasons.add('other_target_reference');
+            items.push({ image, deployments: refs.map(r => r.plan.deploymentId), ...inventory, eligible: inventory.present && !reasons.size, reasons: [...reasons].sort() });
+        }
+        return { targetId, targetHash: target.hash, pointerRevision: pointer?.revision ?? 0, retainedImages: target.definition.retainedImages,
+            items, externalImagesIncluded: false, deletesVolumes: false };
+    }
+    async execute(raw) {
+        const input = DeploymentMaintenanceInput.parse(raw);
+        this.revalidate();
+        if (input.action === 'pin') {
+            this.inspect(input.deploymentId);
+            const before = this.meta(input.deploymentId);
+            if (Boolean(before.pinned) !== input.expectedPinned || before.retired)
+                throw new DodoError('CONFLICT', 'image pin changed or image was retired');
+            this.revalidate();
+            this.db.prepare('INSERT INTO recovery_deployment_maintenance(deployment_id,pinned) VALUES (?,?) ON CONFLICT(deployment_id) DO UPDATE SET pinned=excluded.pinned')
+                .run(input.deploymentId, Number(input.pinned));
+            this.audit(input.deploymentId, 'pin', digestOf(input));
+            return { deploymentId: input.deploymentId, pinned: input.pinned };
+        }
+        if (input.action !== 'apply') {
+            const kind = input.action === 'cleanup_preview' ? 'cleanup' : input.action === 'probe_preview' ? 'probe' : input.action === 'image_preview' ? 'image' : 'resolve';
+            const reference = 'targetId' in input ? input.targetId : input.deploymentId;
+            const review = { kind, reference, epoch: this.s.epoch, observation: await this.observation(kind, reference) };
+            this.revalidate();
+            // Expired completed previews contain no source/credentials; bound owner review storage.
+            this.db.prepare('DELETE FROM recovery_deployment_reviews WHERE workspace_id=? AND expires_at<? AND result_json IS NULL').run(this.s.workspaceId, Date.now());
+            if (this.db.prepare('SELECT COUNT(*) AS n FROM recovery_deployment_reviews WHERE workspace_id=?').get(this.s.workspaceId).n >= 2000)
+                throw new DodoError('RESOURCE_LIMIT', 'deployment review limit reached');
+            const reviewId = newId('deployreview'), reviewHash = digestOf(review), expiresAt = Date.now() + 10 * 60000;
+            this.db.prepare('INSERT INTO recovery_deployment_reviews VALUES (?,?,?,?,?,?,NULL)').run(reviewId, this.s.workspaceId, kind, JSON.stringify(review), reviewHash, expiresAt);
+            return { reviewId, reviewHash, expiresAt, ...review };
+        }
+        const row = this.db.prepare('SELECT * FROM recovery_deployment_reviews WHERE id=? AND workspace_id=?').get(input.reviewId, this.s.workspaceId);
+        if (!row)
+            throw new DodoError('NOT_FOUND', 'owner review unavailable');
+        const review = JSON.parse(row.payload);
+        if (digestOf(review) !== row.digest || input.reviewHash !== row.digest)
+            throw new DodoError('PLAN_HASH_MISMATCH', 'review the exact maintenance plan');
+        if (row.result_json)
+            return { ...JSON.parse(row.result_json), replayed: true };
+        if (review.epoch !== this.s.epoch || row.expires_at < Date.now())
+            throw new DodoError('PLAN_EXPIRED', 'maintenance review expired; inspect again');
+        const actual = await this.observation(review.kind, review.reference);
+        if (digestOf(actual) !== digestOf(review.observation))
+            throw new DodoError('CONFLICT', 'live deployment state changed since maintenance preview');
+        this.revalidate();
+        const finish = (value) => {
+            this.db.prepare('UPDATE recovery_deployment_reviews SET result_json=? WHERE id=?').run(JSON.stringify(value), input.reviewId);
+            return value;
+        };
+        // Commit uncertain receipt BEFORE any daemon command. A retry only returns it.
+        finish({ state: 'UNKNOWN', retryAllowed: false, reviewId: input.reviewId });
+        try {
+            if (review.kind === 'resolve') {
+                this.db.prepare('INSERT INTO recovery_deployment_maintenance(deployment_id,resolution_json) VALUES (?,?) ON CONFLICT(deployment_id) DO UPDATE SET resolution_json=excluded.resolution_json')
+                    .run(review.reference, JSON.stringify({ reviewId: input.reviewId, acknowledgedAt: Date.now(), historicalOutcome: 'UNKNOWN', noRetry: true }));
+            }
+            else if (review.kind === 'image') {
+                const observed = actual;
+                this.db.prepare('UPDATE recovery_deployment_maintenance SET retired=?,cleanup_json=? WHERE deployment_id=?').run(Number(!observed.actual.present), observed.actual.present ? null : JSON.stringify({ state: 'REMOVAL_OBSERVED', reviewId: input.reviewId }), review.reference);
+            }
+            else if (review.kind === 'probe') {
+                const r = this.inspect(review.reference);
+                await this.adapter(r, this.target(r.plan.targetId)).removeProbe(actual.probe);
+            }
+            else {
+                const data = actual;
+                for (const item of data.items.filter(i => i.eligible)) {
+                    this.revalidate();
+                    const record = this.inspect(item.deployments[0]);
+                    for (const id of item.deployments)
+                        this.db.prepare('INSERT INTO recovery_deployment_maintenance(deployment_id,cleanup_json) VALUES (?,?) ON CONFLICT(deployment_id) DO UPDATE SET cleanup_json=excluded.cleanup_json')
+                            .run(id, JSON.stringify({ reviewId: input.reviewId, state: 'UNKNOWN', retryAllowed: false }));
+                    await this.adapter(record, this.target(data.targetId)).removeImage(item.image, item.tags);
+                    this.revalidate();
+                    for (const id of item.deployments)
+                        this.db.prepare('UPDATE recovery_deployment_maintenance SET retired=1,cleanup_json=? WHERE deployment_id=?')
+                            .run(JSON.stringify({ reviewId: input.reviewId, state: 'REMOVED' }), id);
+                }
+            }
+            this.revalidate();
+            this.audit(input.reviewId, review.kind, row.digest);
+            return finish({ state: 'COMPLETED', kind: review.kind, productionHealthClaim: false, reviewId: input.reviewId, replayed: false });
+        }
+        catch (e) {
+            return finish({ state: 'UNKNOWN', reviewId: input.reviewId, errorCode: e instanceof DodoError ? e.code : 'INTERNAL_ERROR', retryAllowed: false });
+        }
+    }
+    audit(id, action, digest) {
+        this.s.store.audit({ principal: 'local-config-owner', workspaceId: this.s.workspaceId, tool: `deployment.maintenance.${action}`, refId: id, inputDigest: digest, result: 'owner_reviewed' });
+    }
+}
+//# sourceMappingURL=deploymentMaintenance.js.map