dorfteich/packages/shared/src/index.ts
Claude Fable 5 da5fd7c770
All checks were successful
CI / Lint, typecheck, test (pull_request) Successful in 6m12s
CI / Build container images (pull_request) Successful in 4m2s
CI / Auth e2e pack (pull_request) Successful in 8m29s
CI / Import/export fidelity gate (pull_request) Successful in 54s
CD / Build and push images (push) Successful in 31s
CD / Deploy to Test (push) Successful in 14s
CD / Smoke tests against Test (push) Successful in 1m29s
CD / Promote to Int (push) Successful in 14s
CI / Build container images (push) Has been skipped
CI / Lint, typecheck, test (push) Successful in 6m30s
CI / Auth e2e pack (push) Successful in 8m6s
CI / Import/export fidelity gate (push) Successful in 57s
#243: VS_NFD_MODE and the machine-readable hardening-profile catalog
The deployment declares through VS_NFD_MODE (off | marked | hidden |
enforced, default off) how the application treats configuration that
violates the VS-NfD reference profile — deploy-level like
BACKUP_ALLOWED_TARGETS, so a compromised Site Admin cannot widen it.
The catalog in shared (vs-nfd-profile.ts) is the single source of
truth: every profile-relevant setting with a decidable compliant value,
judgement calls in an explicit advisory list, and a fence test parsing
the hardening guide's reference tables so neither can drift (pattern
#201). The api evaluates the catalog against the typed settings
registry and validated env and exposes mode + verdict on
GET /admin/system/vs-nfd-profile; the admin settings view shows the
card whenever the mode is not off. Display only — the treatments land
with #244–#246 (ADR 0027, proposed).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01AUtYMxwTCMHG9mVHnwbFg8
2026-07-31 18:24:04 +02:00

41 lines
1.1 KiB
TypeScript

export * from './admin-users';
export * from './api-tokens';
export * from './feed-tokens';
export * from './api-error';
export * from './auth';
export * from './backup-set';
export * from './backup-status';
export * from './backup-target-policy';
export * from './collab-token';
export * from './comments';
export * from './editor-schema';
export * from './env';
export * from './conversion';
export * from './favorites';
export * from './files';
export * from './fonts';
export * from './health';
export * from './home';
export * from './i18n-tools';
export * from './labels';
export * from './legal';
export * from './links';
export * from './members';
export * from './users';
export * from './notifications';
export * from './pages';
export * from './permissions';
export * from './plugins';
export * from './search';
export * from './secret-store';
export * from './setup';
export * from './system';
export * from './ponds';
export * from './public-api';
export * from './quotas';
export * from './text-diff';
export * from './theme';
export * from './tree';
export * from './vs-nfd-profile';
export * from './watches';