@baruk/core 0.3.1 → 0.4.2

package/dist/cjs/storage/r2.js

@@ -0,0 +1,181 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.R2StorageProvider = void 0;
+const node_crypto_1 = require("node:crypto");
+const types_js_1 = require("./types.js");
+const checksum_js_1 = require("./checksum.js");
+const SERVICE = 's3';
+const UNSIGNED_PAYLOAD = 'UNSIGNED-PAYLOAD';
+class R2StorageProvider {
+    key = 'r2';
+    cfg;
+    fetchImpl;
+    host;
+    constructor(config) {
+        if (!config.accountId || !config.accessKeyId || !config.secretAccessKey || !config.bucket) {
+            throw new types_js_1.StorageError('configuração R2 incompleta', 'invalid');
+        }
+        this.cfg = {
+            accountId: config.accountId,
+            accessKeyId: config.accessKeyId,
+            secretAccessKey: config.secretAccessKey,
+            bucket: config.bucket,
+            region: config.region ?? 'auto',
+        };
+        this.fetchImpl = config.fetchImpl ?? fetch;
+        this.host = `${this.cfg.accountId}.r2.cloudflarestorage.com`;
+    }
+    objectUrl(key) {
+        return `https://${this.host}/${this.cfg.bucket}/${encodeKey(key)}`;
+    }
+    async put(input) {
+        const url = this.objectUrl(input.key);
+        const payloadHash = (0, node_crypto_1.createHash)('sha256').update(input.body).digest('hex');
+        const headers = this.signedHeaders('PUT', new URL(url), payloadHash, {
+            'content-type': input.contentType,
+            'content-length': String(input.body.byteLength),
+        });
+        const res = await this.fetchImpl(url, {
+            method: 'PUT',
+            headers,
+            body: input.body,
+            signal: AbortSignal.timeout(30_000),
+        });
+        if (!res.ok) {
+            throw new types_js_1.StorageError(`R2 recusou o upload (HTTP ${res.status})`, res.status === 403 ? 'denied' : 'unavailable');
+        }
+        return {
+            key: input.key,
+            checksumSha256: (0, checksum_js_1.sha256Hex)(input.body),
+            sizeBytes: input.body.byteLength,
+        };
+    }
+    /**
+     * Presigned GET por query string (SigV4). O link carrega a assinatura e a
+     * expiração — nunca a credencial.
+     */
+    async getSignedUrl(key, options) {
+        const expires = Math.min(options?.expiresInSeconds ?? types_js_1.DEFAULT_SIGNED_URL_TTL_SECONDS, 604_800);
+        const url = new URL(this.objectUrl(key));
+        const { amzDate, dateStamp } = timestamps();
+        const credentialScope = `${dateStamp}/${this.cfg.region}/${SERVICE}/aws4_request`;
+        url.searchParams.set('X-Amz-Algorithm', 'AWS4-HMAC-SHA256');
+        url.searchParams.set('X-Amz-Credential', `${this.cfg.accessKeyId}/${credentialScope}`);
+        url.searchParams.set('X-Amz-Date', amzDate);
+        url.searchParams.set('X-Amz-Expires', String(expires));
+        url.searchParams.set('X-Amz-SignedHeaders', 'host');
+        if (options?.downloadFilename) {
+            url.searchParams.set('response-content-disposition', `attachment; filename="${options.downloadFilename.replace(/"/g, '')}"`);
+        }
+        const canonicalRequest = [
+            'GET',
+            url.pathname,
+            canonicalQuery(url.searchParams),
+            `host:${this.host}\n`,
+            'host',
+            UNSIGNED_PAYLOAD,
+        ].join('\n');
+        const signature = this.calculateSignature(canonicalRequest, amzDate, dateStamp, credentialScope);
+        url.searchParams.set('X-Amz-Signature', signature);
+        return url.toString();
+    }
+    async head(key) {
+        const url = this.objectUrl(key);
+        const headers = this.signedHeaders('HEAD', new URL(url), UNSIGNED_PAYLOAD, {});
+        const res = await this.fetchImpl(url, {
+            method: 'HEAD',
+            headers,
+            signal: AbortSignal.timeout(15_000),
+        });
+        if (res.status === 404)
+            return { exists: false };
+        if (!res.ok)
+            throw new types_js_1.StorageError(`R2 head falhou (HTTP ${res.status})`, 'unavailable');
+        const len = res.headers.get('content-length');
+        return {
+            exists: true,
+            sizeBytes: len ? Number(len) : undefined,
+            contentType: res.headers.get('content-type') ?? undefined,
+        };
+    }
+    async delete(key) {
+        const url = this.objectUrl(key);
+        const headers = this.signedHeaders('DELETE', new URL(url), UNSIGNED_PAYLOAD, {});
+        const res = await this.fetchImpl(url, {
+            method: 'DELETE',
+            headers,
+            signal: AbortSignal.timeout(15_000),
+        });
+        if (!res.ok && res.status !== 404) {
+            throw new types_js_1.StorageError(`R2 delete falhou (HTTP ${res.status})`, 'unavailable');
+        }
+    }
+    signedHeaders(method, url, payloadHash, extra) {
+        const { amzDate, dateStamp } = timestamps();
+        const credentialScope = `${dateStamp}/${this.cfg.region}/${SERVICE}/aws4_request`;
+        const headers = {
+            host: this.host,
+            'x-amz-content-sha256': payloadHash,
+            'x-amz-date': amzDate,
+            ...extra,
+        };
+        const sortedKeys = Object.keys(headers)
+            .map((k) => k.toLowerCase())
+            .sort();
+        const canonicalHeaders = sortedKeys.map((k) => `${k}:${headers[k].trim()}\n`).join('');
+        const signedHeaderList = sortedKeys.join(';');
+        const canonicalRequest = [
+            method,
+            url.pathname,
+            canonicalQuery(url.searchParams),
+            canonicalHeaders,
+            signedHeaderList,
+            payloadHash,
+        ].join('\n');
+        const signature = this.calculateSignature(canonicalRequest, amzDate, dateStamp, credentialScope);
+        return {
+            ...headers,
+            authorization: `AWS4-HMAC-SHA256 Credential=${this.cfg.accessKeyId}/${credentialScope}, ` +
+                `SignedHeaders=${signedHeaderList}, Signature=${signature}`,
+        };
+    }
+    calculateSignature(canonicalRequest, amzDate, dateStamp, credentialScope) {
+        const stringToSign = [
+            'AWS4-HMAC-SHA256',
+            amzDate,
+            credentialScope,
+            (0, node_crypto_1.createHash)('sha256').update(canonicalRequest).digest('hex'),
+        ].join('\n');
+        const kDate = (0, node_crypto_1.createHmac)('sha256', `AWS4${this.cfg.secretAccessKey}`)
+            .update(dateStamp)
+            .digest();
+        const kRegion = (0, node_crypto_1.createHmac)('sha256', kDate).update(this.cfg.region).digest();
+        const kService = (0, node_crypto_1.createHmac)('sha256', kRegion).update(SERVICE).digest();
+        const kSigning = (0, node_crypto_1.createHmac)('sha256', kService).update('aws4_request').digest();
+        return (0, node_crypto_1.createHmac)('sha256', kSigning).update(stringToSign).digest('hex');
+    }
+}
+exports.R2StorageProvider = R2StorageProvider;
+function timestamps() {
+    const amzDate = new Date().toISOString().replace(/[:-]|\.\d{3}/g, '');
+    return { amzDate, dateStamp: amzDate.slice(0, 8) };
+}
+/** Cada segmento é codificado; a barra separadora, não. */
+function encodeKey(key) {
+    return key.split('/').map(encodeURIComponent).join('/');
+}
+/** SigV4 exige query ordenada e RFC3986-encoded. */
+function canonicalQuery(params) {
+    const pairs = [];
+    params.forEach((value, name) => {
+        if (name === 'X-Amz-Signature')
+            return;
+        pairs.push([name, value]);
+    });
+    pairs.sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0));
+    return pairs.map(([k, v]) => `${rfc3986(k)}=${rfc3986(v)}`).join('&');
+}
+function rfc3986(value) {
+    return encodeURIComponent(value).replace(/[!'()*]/g, (c) => `%${c.charCodeAt(0).toString(16).toUpperCase()}`);
+}
+//# sourceMappingURL=r2.js.map

package/dist/cjs/storage/r2.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"r2.js","sourceRoot":"","sources":["../../../src/storage/r2.ts"],"names":[],"mappings":";;;AAAA,6CAAqD;AACrD,yCAQoB;AACpB,+CAA0C;AA0B1C,MAAM,OAAO,GAAG,IAAI,CAAC;AACrB,MAAM,gBAAgB,GAAG,kBAAkB,CAAC;AAE5C,MAAa,iBAAiB;IACnB,GAAG,GAAG,IAAa,CAAC;IACZ,GAAG,CAAwC;IAC3C,SAAS,CAAe;IACxB,IAAI,CAAS;IAE9B,YAAY,MAAgB;QAC1B,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,CAAC,MAAM,CAAC,eAAe,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YAC1F,MAAM,IAAI,uBAAY,CAAC,4BAA4B,EAAE,SAAS,CAAC,CAAC;QAClE,CAAC;QACD,IAAI,CAAC,GAAG,GAAG;YACT,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,MAAM;SAChC,CAAC;QACF,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,KAAK,CAAC;QAC3C,IAAI,CAAC,IAAI,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,2BAA2B,CAAC;IAC/D,CAAC;IAEO,SAAS,CAAC,GAAW;QAC3B,OAAO,WAAW,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;IACrE,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,KAAqB;QAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACtC,MAAM,WAAW,GAAG,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC1E,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,IAAI,GAAG,CAAC,GAAG,CAAC,EAAE,WAAW,EAAE;YACnE,cAAc,EAAE,KAAK,CAAC,WAAW;YACjC,gBAAgB,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC;SAChD,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE;YACpC,MAAM,EAAE,KAAK;YACb,OAAO;YACP,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;SACpC,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,uBAAY,CACpB,6BAA6B,GAAG,CAAC,MAAM,GAAG,EAC1C,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,CAC9C,CAAC;QACJ,CAAC;QAED,OAAO;YACL,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,cAAc,EAAE,IAAA,uBAAS,EAAC,KAAK,CAAC,IAAI,CAAC;YACrC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,UAAU;SACjC,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,YAAY,CAAC,GAAW,EAAE,OAA0B;QACxD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,gBAAgB,IAAI,yCAA8B,EAAE,OAAO,CAAC,CAAC;QAC/F,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;QACzC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,UAAU,EAAE,CAAC;QAC5C,MAAM,eAAe,GAAG,GAAG,SAAS,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,OAAO,eAAe,CAAC;QAElF,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,iBAAiB,EAAE,kBAAkB,CAAC,CAAC;QAC5D,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,kBAAkB,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,IAAI,eAAe,EAAE,CAAC,CAAC;QACvF,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QAC5C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;QACvD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;QACpD,IAAI,OAAO,EAAE,gBAAgB,EAAE,CAAC;YAC9B,GAAG,CAAC,YAAY,CAAC,GAAG,CAClB,8BAA8B,EAC9B,yBAAyB,OAAO,CAAC,gBAAgB,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CACvE,CAAC;QACJ,CAAC;QAED,MAAM,gBAAgB,GAAG;YACvB,KAAK;YACL,GAAG,CAAC,QAAQ;YACZ,cAAc,CAAC,GAAG,CAAC,YAAY,CAAC;YAChC,QAAQ,IAAI,CAAC,IAAI,IAAI;YACrB,MAAM;YACN,gBAAgB;SACjB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEb,MAAM,SAAS,GAAG,IAAI,CAAC,kBAAkB,CACvC,gBAAgB,EAChB,OAAO,EACP,SAAS,EACT,eAAe,CAChB,CAAC;QACF,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,iBAAiB,EAAE,SAAS,CAAC,CAAC;QACnD,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,GAAW;QACpB,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,IAAI,GAAG,CAAC,GAAG,CAAC,EAAE,gBAAgB,EAAE,EAAE,CAAC,CAAC;QAC/E,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE;YACpC,MAAM,EAAE,MAAM;YACd,OAAO;YACP,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;SACpC,CAAC,CAAC;QACH,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QACjD,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,IAAI,uBAAY,CAAC,wBAAwB,GAAG,CAAC,MAAM,GAAG,EAAE,aAAa,CAAC,CAAC;QAC1F,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAC9C,OAAO;YACL,MAAM,EAAE,IAAI;YACZ,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS;YACxC,WAAW,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,SAAS;SAC1D,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,GAAG,CAAC,GAAG,CAAC,EAAE,gBAAgB,EAAE,EAAE,CAAC,CAAC;QACjF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE;YACpC,MAAM,EAAE,QAAQ;YAChB,OAAO;YACP,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;SACpC,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAClC,MAAM,IAAI,uBAAY,CAAC,0BAA0B,GAAG,CAAC,MAAM,GAAG,EAAE,aAAa,CAAC,CAAC;QACjF,CAAC;IACH,CAAC;IAEO,aAAa,CACnB,MAAc,EACd,GAAQ,EACR,WAAmB,EACnB,KAA6B;QAE7B,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,UAAU,EAAE,CAAC;QAC5C,MAAM,eAAe,GAAG,GAAG,SAAS,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,OAAO,eAAe,CAAC;QAElF,MAAM,OAAO,GAA2B;YACtC,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,sBAAsB,EAAE,WAAW;YACnC,YAAY,EAAE,OAAO;YACrB,GAAG,KAAK;SACT,CAAC;QAEF,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;aACpC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;aAC3B,IAAI,EAAE,CAAC;QACV,MAAM,gBAAgB,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACxF,MAAM,gBAAgB,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAE9C,MAAM,gBAAgB,GAAG;YACvB,MAAM;YACN,GAAG,CAAC,QAAQ;YACZ,cAAc,CAAC,GAAG,CAAC,YAAY,CAAC;YAChC,gBAAgB;YAChB,gBAAgB;YAChB,WAAW;SACZ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEb,MAAM,SAAS,GAAG,IAAI,CAAC,kBAAkB,CACvC,gBAAgB,EAChB,OAAO,EACP,SAAS,EACT,eAAe,CAChB,CAAC;QAEF,OAAO;YACL,GAAG,OAAO;YACV,aAAa,EACX,+BAA+B,IAAI,CAAC,GAAG,CAAC,WAAW,IAAI,eAAe,IAAI;gBAC1E,iBAAiB,gBAAgB,eAAe,SAAS,EAAE;SAC9D,CAAC;IACJ,CAAC;IAEO,kBAAkB,CACxB,gBAAwB,EACxB,OAAe,EACf,SAAiB,EACjB,eAAuB;QAEvB,MAAM,YAAY,GAAG;YACnB,kBAAkB;YAClB,OAAO;YACP,eAAe;YACf,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC5D,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEb,MAAM,KAAK,GAAG,IAAA,wBAAU,EAAC,QAAQ,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC;aAClE,MAAM,CAAC,SAAS,CAAC;aACjB,MAAM,EAAE,CAAC;QACZ,MAAM,OAAO,GAAG,IAAA,wBAAU,EAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC;QAC7E,MAAM,QAAQ,GAAG,IAAA,wBAAU,EAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC;QACxE,MAAM,QAAQ,GAAG,IAAA,wBAAU,EAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,MAAM,EAAE,CAAC;QAEhF,OAAO,IAAA,wBAAU,EAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3E,CAAC;CACF;AAlMD,8CAkMC;AAED,SAAS,UAAU;IACjB,MAAM,OAAO,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;IACtE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;AACrD,CAAC;AAED,2DAA2D;AAC3D,SAAS,SAAS,CAAC,GAAW;IAC5B,OAAO,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED,oDAAoD;AACpD,SAAS,cAAc,CAAC,MAAuB;IAC7C,MAAM,KAAK,GAAuB,EAAE,CAAC;IACrC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QAC7B,IAAI,IAAI,KAAK,iBAAiB;YAAE,OAAO;QACvC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;IACH,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvD,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,OAAO,CAAC,KAAa;IAC5B,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAC,OAAO,CACtC,UAAU,EACV,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,CACxD,CAAC;AACJ,CAAC"}

package/dist/cjs/storage/registry.js

@@ -0,0 +1,41 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveStorageProvider = resolveStorageProvider;
+exports.availableStorageProviders = availableStorageProviders;
+const local_js_1 = require("./local.js");
+const r2_js_1 = require("./r2.js");
+const types_js_1 = require("./types.js");
+function resolveStorageProvider(config = {}) {
+    const key = (config.provider ?? 'local').toLowerCase();
+    if (key === 'r2') {
+        const missing = [
+            ['DOCUMENTS_R2_ACCOUNT_ID', config.r2AccountId],
+            ['DOCUMENTS_R2_ACCESS_KEY_ID', config.r2AccessKeyId],
+            ['DOCUMENTS_R2_SECRET_ACCESS_KEY', config.r2SecretAccessKey],
+            ['DOCUMENTS_R2_BUCKET', config.r2Bucket],
+        ]
+            .filter(([, value]) => !value)
+            .map(([name]) => name);
+        if (missing.length > 0) {
+            // A mensagem nomeia as variáveis ausentes e nunca o valor de nenhuma.
+            throw new types_js_1.StorageError(`storage r2 selecionado mas a configuração está incompleta: ${missing.join(', ')}`, 'invalid');
+        }
+        return new r2_js_1.R2StorageProvider({
+            accountId: config.r2AccountId,
+            accessKeyId: config.r2AccessKeyId,
+            secretAccessKey: config.r2SecretAccessKey,
+            bucket: config.r2Bucket,
+        });
+    }
+    if (key === 'local') {
+        return new local_js_1.LocalStorageProvider({
+            rootDir: config.localRootDir ?? '.storage',
+            signingSecret: config.localSigningSecret ?? 'dev-only-signing-secret',
+        });
+    }
+    throw new types_js_1.StorageError(`storage provider desconhecido: ${key}`, 'invalid');
+}
+function availableStorageProviders() {
+    return ['local', 'r2'];
+}
+//# sourceMappingURL=registry.js.map

package/dist/cjs/storage/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../../src/storage/registry.ts"],"names":[],"mappings":";;AAyBA,wDAuCC;AAED,8DAEC;AApED,yCAAkD;AAClD,mCAA4C;AAC5C,yCAAgE;AAuBhE,SAAgB,sBAAsB,CAAC,SAAwB,EAAE;IAC/D,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;IAEvD,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QACjB,MAAM,OAAO,GACX;YACE,CAAC,yBAAyB,EAAE,MAAM,CAAC,WAAW,CAAC;YAC/C,CAAC,4BAA4B,EAAE,MAAM,CAAC,aAAa,CAAC;YACpD,CAAC,gCAAgC,EAAE,MAAM,CAAC,iBAAiB,CAAC;YAC5D,CAAC,qBAAqB,EAAE,MAAM,CAAC,QAAQ,CAAC;SAE3C;aACE,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC;aAC7B,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;QAEzB,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,sEAAsE;YACtE,MAAM,IAAI,uBAAY,CACpB,8DAA8D,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAClF,SAAS,CACV,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,yBAAiB,CAAC;YAC3B,SAAS,EAAE,MAAM,CAAC,WAAY;YAC9B,WAAW,EAAE,MAAM,CAAC,aAAc;YAClC,eAAe,EAAE,MAAM,CAAC,iBAAkB;YAC1C,MAAM,EAAE,MAAM,CAAC,QAAS;SACzB,CAAC,CAAC;IACL,CAAC;IAED,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;QACpB,OAAO,IAAI,+BAAoB,CAAC;YAC9B,OAAO,EAAE,MAAM,CAAC,YAAY,IAAI,UAAU;YAC1C,aAAa,EAAE,MAAM,CAAC,kBAAkB,IAAI,yBAAyB;SACtE,CAAC,CAAC;IACL,CAAC;IAED,MAAM,IAAI,uBAAY,CAAC,kCAAkC,GAAG,EAAE,EAAE,SAAS,CAAC,CAAC;AAC7E,CAAC;AAED,SAAgB,yBAAyB;IACvC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;AACzB,CAAC"}

package/dist/cjs/storage/types.js

@@ -0,0 +1,50 @@
+"use strict";
+/**
+ * Contrato de storage de objetos (ADR 0007 D4).
+ *
+ * Mesma forma do Billing Provider Pattern (ADR 0005): o domínio conhece a
+ * interface, nunca o fornecedor. `local` é o default seguro — o produto roda em
+ * desenvolvimento e em teste sem nenhuma conta externa; `r2` é produção.
+ *
+ * O domínio Documents nunca importa SDK de fornecedor. Se um dia trocarmos R2
+ * por outro S3-compatible, só este diretório muda.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ALLOWED_MIME_TYPES = exports.MAX_UPLOAD_BYTES = exports.DEFAULT_SIGNED_URL_TTL_SECONDS = exports.StorageError = void 0;
+exports.isAllowedMimeType = isAllowedMimeType;
+class StorageError extends Error {
+    code;
+    constructor(message, code) {
+        super(message);
+        this.code = code;
+        this.name = 'StorageError';
+    }
+}
+exports.StorageError = StorageError;
+/** Validade padrão de URL assinada, em segundos (ADR 0007 D6). */
+exports.DEFAULT_SIGNED_URL_TTL_SECONDS = 300;
+/** Teto de tamanho por arquivo. Acima disso, o upload é recusado na borda. */
+exports.MAX_UPLOAD_BYTES = 25 * 1024 * 1024;
+/**
+ * Tipos aceitos. Allowlist, nunca denylist: um tipo desconhecido é recusado, e
+ * não aceito por omissão.
+ */
+exports.ALLOWED_MIME_TYPES = [
+    'application/pdf',
+    'image/jpeg',
+    'image/png',
+    'image/webp',
+    'text/xml',
+    'application/xml',
+    'text/plain',
+    'text/csv',
+    'application/vnd.ms-excel',
+    'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet',
+    'application/vnd.openxmlformats-officedocument.wordprocessingml.document',
+    'application/msword',
+    'application/zip',
+];
+function isAllowedMimeType(mime) {
+    return exports.ALLOWED_MIME_TYPES.includes(mime.toLowerCase().split(';')[0].trim());
+}
+//# sourceMappingURL=types.js.map

package/dist/cjs/storage/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/storage/types.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;;AAqFH,8CAEC;AAtCD,MAAa,YAAa,SAAQ,KAAK;IAG1B;IAFX,YACE,OAAe,EACN,IAAwD;QAEjE,KAAK,CAAC,OAAO,CAAC,CAAC;QAFN,SAAI,GAAJ,IAAI,CAAoD;QAGjE,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC7B,CAAC;CACF;AARD,oCAQC;AAED,kEAAkE;AACrD,QAAA,8BAA8B,GAAG,GAAG,CAAC;AAElD,8EAA8E;AACjE,QAAA,gBAAgB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAEjD;;;GAGG;AACU,QAAA,kBAAkB,GAAsB;IACnD,iBAAiB;IACjB,YAAY;IACZ,WAAW;IACX,YAAY;IACZ,UAAU;IACV,iBAAiB;IACjB,YAAY;IACZ,UAAU;IACV,0BAA0B;IAC1B,mEAAmE;IACnE,yEAAyE;IACzE,oBAAoB;IACpB,iBAAiB;CAClB,CAAC;AAEF,SAAgB,iBAAiB,CAAC,IAAY;IAC5C,OAAO,0BAAkB,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC,CAAC;AAC/E,CAAC"}

package/dist/cjs/subscription-billing/provider/asaas.js

@@ -121,8 +121,13 @@ class AsaasSubscriptionProvider {
                 // mesma invariante ja endurecida em 2 rounds de Certification (mail/, RFC §9).
                 const errors = json['errors'];
                 const detail = errors?.[0]?.description ?? `HTTP ${res.status}`;
-                (0, sanitize_js_1.logSanitized)(`[subscription-billing] asaas ${method} ${path} falhou:`, detail, [this.apiKey, this.webhookSecret]);
-                throw new AsaasProviderError('falha ao contatar o provider de pagamento.');
+                (0, sanitize_js_1.logSanitized)(`[subscription-billing] asaas ${method} ${path} falhou:`, detail, [
+                    this.apiKey,
+                    this.webhookSecret,
+                ]);
+                // 404 preserva o status: quem cancela precisa distinguir "não existe
+                // mais" (objetivo já atendido) de falha real de gateway.
+                throw new AsaasProviderError('falha ao contatar o provider de pagamento.', res.status === 404 ? 404 : 502);
             }
             return json;
         }
@@ -132,10 +137,7 @@ class AsaasSubscriptionProvider {
             if (err instanceof Error && err.name === 'AbortError') {
                 throw new AsaasProviderError(`timeout apos ${TIMEOUT_MS}ms`, 504);
             }
-            (0, sanitize_js_1.logSanitized)(`[subscription-billing] asaas ${method} ${path} erro de rede:`, err instanceof Error ? err.message : String(err), [
-                this.apiKey,
-                this.webhookSecret,
-            ]);
+            (0, sanitize_js_1.logSanitized)(`[subscription-billing] asaas ${method} ${path} erro de rede:`, err instanceof Error ? err.message : String(err), [this.apiKey, this.webhookSecret]);
             throw new AsaasProviderError('falha de rede ao contatar o provider de pagamento.');
         }
         finally {
@@ -166,6 +168,29 @@ class AsaasSubscriptionProvider {
         });
         return { externalId: link.id, url: link.url };
     }
+    /**
+     * `DELETE /subscriptions/{id}` — o ASAAS não emite mais cobrança da assinatura
+     * depois disso. As cobranças já geradas e ainda em aberto permanecem, que é o
+     * comportamento correto: o que foi devido antes do cancelamento continua devido.
+     *
+     * Idempotente por desenho. Assinatura inexistente devolve `alreadyCanceled`
+     * em vez de erro — o chamador quer o estado final ("não cobra mais"), e um
+     * retry depois de sucesso parcial não pode virar falha. Só erro real de
+     * gateway (rede, timeout, 5xx) propaga, e aí o cancelamento não é consolidado.
+     */
+    async cancelSubscription(externalId) {
+        try {
+            const res = await this.call('DELETE', `/subscriptions/${encodeURIComponent(externalId)}`);
+            return { status: 'canceled', alreadyCanceled: res.deleted === false };
+        }
+        catch (err) {
+            // 404: já não existe no gateway — o objetivo ("não cobra mais") está atendido.
+            if (err instanceof AsaasProviderError && err.status === 404) {
+                return { status: 'canceled', alreadyCanceled: true };
+            }
+            throw err;
+        }
+    }
     async getPayment(externalId) {
         const p = await this.call('GET', `/payments/${encodeURIComponent(externalId)}`);
         return normalizeAsaasPayment(p);
@@ -176,7 +201,7 @@ class AsaasSubscriptionProvider {
         if (!this.webhookSecret)
             return false; // sem token configurado → nunca confia no evento
         const received = headers['asaas-access-token'] ?? headers['Asaas-Access-Token'] ?? '';
-        return typeof received === 'string' && received.length > 0 && safeEqual(received, this.webhookSecret);
+        return (typeof received === 'string' && received.length > 0 && safeEqual(received, this.webhookSecret));
     }
     /**
      * Reescrito a partir do mapeamento real e ja validado em producao do Golden Project

package/dist/cjs/subscription-billing/provider/asaas.js.map

@@ -1 +1 @@
-{"version":3,"file":"asaas.js","sourceRoot":"","sources":["../../../../src/subscription-billing/provider/asaas.ts"],"names":[],"mappings":";;;AAAA,6CAA8C;AAC9C,0CAAyC;AACzC,wDAAsD;AAgBtD;;;;;;;GAOG;AAEH,MAAM,YAAY,GAAG,kCAAkC,CAAC;AACxD,MAAM,SAAS,GAAG,0BAA0B,CAAC;AAC7C,MAAM,UAAU,GAAG,MAAM,CAAC;AAE1B,MAAM,kBAAmB,SAAQ,iBAAQ;IACvC,YAAY,OAAe,EAAE,MAAM,GAAG,GAAG;QACvC,KAAK,CAAC,0BAA0B,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAAC,CAAC;IACzF,CAAC;CACF;AAED,SAAS,SAAS,CAAC,CAAS,EAAE,CAAS;IACrC,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1B,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1B,IAAI,EAAE,CAAC,MAAM,KAAK,EAAE,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1C,OAAO,IAAA,6BAAe,EAAC,EAAE,EAAE,EAAE,CAAC,CAAC;AACjC,CAAC;AAED;;;;;;GAMG;AACH,SAAS,oBAAoB,CAAC,MAA0B;IACtD,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QACrC,KAAK,SAAS,CAAC;QACf,KAAK,wBAAwB;YAC3B,OAAO,SAAS,CAAC;QACnB,KAAK,WAAW;YACd,OAAO,WAAW,CAAC;QACrB,KAAK,UAAU,CAAC;QAChB,KAAK,kBAAkB;YACrB,OAAO,UAAU,CAAC;QACpB,KAAK,SAAS;YACZ,OAAO,SAAS,CAAC;QACnB,KAAK,UAAU,CAAC;QAChB,KAAK,kBAAkB,CAAC;QACxB,KAAK,sBAAsB,CAAC;QAC5B,KAAK,oBAAoB;YACvB,OAAO,UAAU,CAAC;QACpB,KAAK,SAAS,CAAC;QACf,KAAK,UAAU;YACb,OAAO,UAAU,CAAC;QACpB;YACE,OAAO,QAAQ,CAAC;IACpB,CAAC;AACH,CAAC;AAED,+FAA+F;AAC/F,SAAS,gCAAgC,CAAC,MAA0B;IAClE,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QACrC,KAAK,QAAQ;YACX,OAAO,QAAQ,CAAC;QAClB,KAAK,SAAS,CAAC;QACf,KAAK,SAAS;YACZ,OAAO,UAAU,CAAC;QACpB,KAAK,UAAU,CAAC;QAChB,KAAK,UAAU;YACb,OAAO,UAAU,CAAC;QACpB;YACE,OAAO,QAAQ,CAAC;IACpB,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,CAA0B;IACvD,OAAO;QACL,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC3B,MAAM,EAAE,oBAAoB,CAAC,CAAC,CAAC,QAAQ,CAAuB,CAAC;QAC/D,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC9B,WAAW,EAAG,CAAC,CAAC,aAAa,CAAwB,IAAI,IAAI;QAC7D,OAAO,EAAG,CAAC,CAAC,SAAS,CAAwB,IAAI,IAAI;QACrD,MAAM,EAAG,CAAC,CAAC,aAAa,CAAwB,IAAI,IAAI;QACxD,sBAAsB,EAAG,CAAC,CAAC,cAAc,CAAwB,IAAI,IAAI;QACzE,UAAU,EAAG,CAAC,CAAC,YAAY,CAAwB,IAAI,IAAI;QAC3D,WAAW,EAAG,CAAC,CAAC,aAAa,CAAwB,IAAI,IAAI;QAC7D,UAAU,EAAG,CAAC,CAAC,iBAAiB,CAAwB,IAAI,IAAI;QAChE,WAAW,EAAG,CAAC,CAAC,aAAa,CAAwB,IAAI,IAAI;KAC9D,CAAC;AACJ,CAAC;AAED,MAAa,yBAAyB;IAC3B,IAAI,GAAG,OAAO,CAAC;IACf,IAAI,CAAc;IACV,MAAM,CAAS;IACf,aAAa,CAAU;IACvB,OAAO,CAAS;IAChB,SAAS,CAAe;IAEzC,YAAY,MAAkC;QAC5C,IAAI,CAAC,MAAM,CAAC,MAAM;YAAE,MAAM,IAAI,kBAAkB,CAAC,sCAAsC,EAAE,GAAG,CAAC,CAAC;QAC9F,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC5B,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,aAAa,CAAC;QAC1C,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,SAAS,CAAC;QACrC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;QACnF,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,KAAK,CAAC;IAC7C,CAAC;IAEO,KAAK,CAAC,IAAI,CAAI,MAAsB,EAAE,IAAY,EAAE,IAAc;QACxE,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,UAAU,CAAC,CAAC;QAC/D,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,EAAE;gBACzD,MAAM;gBACN,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,YAAY,EAAE,IAAI,CAAC,MAAM,EAAE;gBAC1E,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;gBAC7C,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAC9B,MAAM,IAAI,GAA4B,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACnE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,kFAAkF;gBAClF,+EAA+E;gBAC/E,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAgD,CAAC;gBAC7E,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,IAAI,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;gBAChE,IAAA,0BAAY,EAAC,gCAAgC,MAAM,IAAI,IAAI,UAAU,EAAE,MAAM,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;gBAClH,MAAM,IAAI,kBAAkB,CAAC,4CAA4C,CAAC,CAAC;YAC7E,CAAC;YACD,OAAO,IAAS,CAAC;QACnB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,kBAAkB;gBAAE,MAAM,GAAG,CAAC;YACjD,IAAI,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBACtD,MAAM,IAAI,kBAAkB,CAAC,gBAAgB,UAAU,IAAI,EAAE,GAAG,CAAC,CAAC;YACpE,CAAC;YACD,IAAA,0BAAY,EAAC,gCAAgC,MAAM,IAAI,IAAI,gBAAgB,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;gBAC7H,IAAI,CAAC,MAAM;gBACX,IAAI,CAAC,aAAa;aACnB,CAAC,CAAC;YACH,MAAM,IAAI,kBAAkB,CAAC,oDAAoD,CAAC,CAAC;QACrF,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,KAA0B;QAC7C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAiB,MAAM,EAAE,YAAY,EAAE;YACpE,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,SAAS;YAC/B,OAAO,EAAE,KAAK,CAAC,KAAK,IAAI,SAAS;YACjC,iBAAiB,EAAE,KAAK,CAAC,QAAQ;SAClC,CAAC,CAAC;QACH,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,KAA0B;QAC7C,8EAA8E;QAC9E,mFAAmF;QACnF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAA8B,MAAM,EAAE,eAAe,EAAE;YACjF,IAAI,EAAE,KAAK,CAAC,WAAW;YACvB,WAAW,EAAE,WAAW;YACxB,UAAU,EAAE,WAAW;YACvB,iBAAiB,EAAE,SAAS;YAC5B,KAAK,EAAE,KAAK,CAAC,SAAS;YACtB,gBAAgB,EAAE,CAAC;YACnB,iBAAiB,EAAE,GAAG,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,OAAO,EAAE;YACvD,QAAQ,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC,SAAS,EAAE,YAAY,EAAE,IAAI,EAAE;SAC9D,CAAC,CAAC;QACH,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,UAAkB;QACjC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,CAA0B,KAAK,EAAE,aAAa,kBAAkB,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QACzG,OAAO,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC;IAED,oFAAoF;IACpF,aAAa,CAAC,OAAuB,EAAE,QAAgB;QACrD,KAAK,QAAQ,CAAC;QACd,IAAI,CAAC,IAAI,CAAC,aAAa;YAAE,OAAO,KAAK,CAAC,CAAC,iDAAiD;QACxF,MAAM,QAAQ,GAAG,OAAO,CAAC,oBAAoB,CAAC,IAAI,OAAO,CAAC,oBAAoB,CAAC,IAAI,EAAE,CAAC;QACtF,OAAO,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;IACxG,CAAC;IAED;;;;;;;OAOG;IACH,iBAAiB,CAAC,OAAgB;QAChC,MAAM,CAAC,GAAG,OAMT,CAAC;QACF,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QAEzD,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC;QAC1B,MAAM,SAAS,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC;QAEpC,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAClC,2FAA2F;YAC3F,2EAA2E;YAC3E,MAAM,OAAO,GAAG,qBAAqB,CAAC,CAAC,CAAC,OAAQ,CAAC,CAAC;YAClD,MAAM,eAAe,GAAG,CAAC,CAAC,EAAE,IAAI,GAAG,SAAS,IAAI,SAAS,IAAI,CAAC,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC;YACnF,OAAO;gBACL,eAAe;gBACf,SAAS;gBACT,IAAI,EAAE,SAAS;gBACf,OAAO;gBACP,kBAAkB,EAAG,CAAC,CAAC,OAAQ,CAAC,UAAU,CAAwB,IAAI,IAAI;gBAC1E,iBAAiB,EAAG,CAAC,CAAC,OAAQ,CAAC,mBAAmB,CAAwB,IAAI,IAAI;gBAClF,aAAa,EAAG,CAAC,CAAC,OAAQ,CAAC,aAAa,CAAwB,IAAI,IAAI;aACzE,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,CAAC,YAAY,EAAE,EAAE,EAAE,CAAC;YACvB,MAAM,eAAe,GAAG,CAAC,CAAC,EAAE,IAAI,GAAG,SAAS,IAAI,CAAC,CAAC,YAAY,CAAC,EAAE,IAAI,CAAC,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC;YAC3F,OAAO;gBACL,eAAe;gBACf,SAAS;gBACT,IAAI,EAAE,cAAc;gBACpB,YAAY,EAAE;oBACZ,UAAU,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE;oBAC7B,MAAM,EAAE,gCAAgC,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC;iBAChE;gBACD,kBAAkB,EAAE,CAAC,CAAC,YAAY,CAAC,QAAQ,IAAI,IAAI;gBACnD,iBAAiB,EAAE,CAAC,CAAC,YAAY,CAAC,iBAAiB,IAAI,IAAI;aAC5D,CAAC;QACJ,CAAC;QAED,+FAA+F;QAC/F,OAAO;YACL,eAAe,EAAE,CAAC,CAAC,EAAE,IAAI,GAAG,SAAS,IAAI,CAAC,CAAC,WAAW,IAAI,EAAE,EAAE;YAC9D,SAAS;YACT,IAAI,EAAE,SAAS;SAChB,CAAC;IACJ,CAAC;CACF;AAvJD,8DAuJC"}
+{"version":3,"file":"asaas.js","sourceRoot":"","sources":["../../../../src/subscription-billing/provider/asaas.ts"],"names":[],"mappings":";;;AAAA,6CAA8C;AAC9C,0CAAyC;AACzC,wDAAsD;AAgBtD;;;;;;;GAOG;AAEH,MAAM,YAAY,GAAG,kCAAkC,CAAC;AACxD,MAAM,SAAS,GAAG,0BAA0B,CAAC;AAC7C,MAAM,UAAU,GAAG,MAAM,CAAC;AAE1B,MAAM,kBAAmB,SAAQ,iBAAQ;IACvC,YAAY,OAAe,EAAE,MAAM,GAAG,GAAG;QACvC,KAAK,CAAC,0BAA0B,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAAC,CAAC;IACzF,CAAC;CACF;AAED,SAAS,SAAS,CAAC,CAAS,EAAE,CAAS;IACrC,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1B,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1B,IAAI,EAAE,CAAC,MAAM,KAAK,EAAE,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1C,OAAO,IAAA,6BAAe,EAAC,EAAE,EAAE,EAAE,CAAC,CAAC;AACjC,CAAC;AAED;;;;;;GAMG;AACH,SAAS,oBAAoB,CAAC,MAA0B;IACtD,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QACrC,KAAK,SAAS,CAAC;QACf,KAAK,wBAAwB;YAC3B,OAAO,SAAS,CAAC;QACnB,KAAK,WAAW;YACd,OAAO,WAAW,CAAC;QACrB,KAAK,UAAU,CAAC;QAChB,KAAK,kBAAkB;YACrB,OAAO,UAAU,CAAC;QACpB,KAAK,SAAS;YACZ,OAAO,SAAS,CAAC;QACnB,KAAK,UAAU,CAAC;QAChB,KAAK,kBAAkB,CAAC;QACxB,KAAK,sBAAsB,CAAC;QAC5B,KAAK,oBAAoB;YACvB,OAAO,UAAU,CAAC;QACpB,KAAK,SAAS,CAAC;QACf,KAAK,UAAU;YACb,OAAO,UAAU,CAAC;QACpB;YACE,OAAO,QAAQ,CAAC;IACpB,CAAC;AACH,CAAC;AAED,+FAA+F;AAC/F,SAAS,gCAAgC,CAAC,MAA0B;IAClE,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QACrC,KAAK,QAAQ;YACX,OAAO,QAAQ,CAAC;QAClB,KAAK,SAAS,CAAC;QACf,KAAK,SAAS;YACZ,OAAO,UAAU,CAAC;QACpB,KAAK,UAAU,CAAC;QAChB,KAAK,UAAU;YACb,OAAO,UAAU,CAAC;QACpB;YACE,OAAO,QAAQ,CAAC;IACpB,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,CAA0B;IACvD,OAAO;QACL,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC3B,MAAM,EAAE,oBAAoB,CAAC,CAAC,CAAC,QAAQ,CAAuB,CAAC;QAC/D,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC9B,WAAW,EAAG,CAAC,CAAC,aAAa,CAAwB,IAAI,IAAI;QAC7D,OAAO,EAAG,CAAC,CAAC,SAAS,CAAwB,IAAI,IAAI;QACrD,MAAM,EAAG,CAAC,CAAC,aAAa,CAAwB,IAAI,IAAI;QACxD,sBAAsB,EAAG,CAAC,CAAC,cAAc,CAAwB,IAAI,IAAI;QACzE,UAAU,EAAG,CAAC,CAAC,YAAY,CAAwB,IAAI,IAAI;QAC3D,WAAW,EAAG,CAAC,CAAC,aAAa,CAAwB,IAAI,IAAI;QAC7D,UAAU,EAAG,CAAC,CAAC,iBAAiB,CAAwB,IAAI,IAAI;QAChE,WAAW,EAAG,CAAC,CAAC,aAAa,CAAwB,IAAI,IAAI;KAC9D,CAAC;AACJ,CAAC;AAED,MAAa,yBAAyB;IAC3B,IAAI,GAAG,OAAO,CAAC;IACf,IAAI,CAAc;IACV,MAAM,CAAS;IACf,aAAa,CAAU;IACvB,OAAO,CAAS;IAChB,SAAS,CAAe;IAEzC,YAAY,MAAkC;QAC5C,IAAI,CAAC,MAAM,CAAC,MAAM;YAAE,MAAM,IAAI,kBAAkB,CAAC,sCAAsC,EAAE,GAAG,CAAC,CAAC;QAC9F,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC5B,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,aAAa,CAAC;QAC1C,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,SAAS,CAAC;QACrC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;QACnF,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,KAAK,CAAC;IAC7C,CAAC;IAEO,KAAK,CAAC,IAAI,CAChB,MAAiC,EACjC,IAAY,EACZ,IAAc;QAEd,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,UAAU,CAAC,CAAC;QAC/D,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,EAAE;gBACzD,MAAM;gBACN,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,YAAY,EAAE,IAAI,CAAC,MAAM,EAAE;gBAC1E,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;gBAC7C,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAC9B,MAAM,IAAI,GAA4B,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACnE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,kFAAkF;gBAClF,+EAA+E;gBAC/E,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAgD,CAAC;gBAC7E,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,IAAI,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;gBAChE,IAAA,0BAAY,EAAC,gCAAgC,MAAM,IAAI,IAAI,UAAU,EAAE,MAAM,EAAE;oBAC7E,IAAI,CAAC,MAAM;oBACX,IAAI,CAAC,aAAa;iBACnB,CAAC,CAAC;gBACH,qEAAqE;gBACrE,yDAAyD;gBACzD,MAAM,IAAI,kBAAkB,CAC1B,4CAA4C,EAC5C,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAC/B,CAAC;YACJ,CAAC;YACD,OAAO,IAAS,CAAC;QACnB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,kBAAkB;gBAAE,MAAM,GAAG,CAAC;YACjD,IAAI,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBACtD,MAAM,IAAI,kBAAkB,CAAC,gBAAgB,UAAU,IAAI,EAAE,GAAG,CAAC,CAAC;YACpE,CAAC;YACD,IAAA,0BAAY,EACV,gCAAgC,MAAM,IAAI,IAAI,gBAAgB,EAC9D,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAChD,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,CAClC,CAAC;YACF,MAAM,IAAI,kBAAkB,CAAC,oDAAoD,CAAC,CAAC;QACrF,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,KAA0B;QAC7C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAiB,MAAM,EAAE,YAAY,EAAE;YACpE,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,SAAS;YAC/B,OAAO,EAAE,KAAK,CAAC,KAAK,IAAI,SAAS;YACjC,iBAAiB,EAAE,KAAK,CAAC,QAAQ;SAClC,CAAC,CAAC;QACH,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,KAA0B;QAC7C,8EAA8E;QAC9E,mFAAmF;QACnF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAA8B,MAAM,EAAE,eAAe,EAAE;YACjF,IAAI,EAAE,KAAK,CAAC,WAAW;YACvB,WAAW,EAAE,WAAW;YACxB,UAAU,EAAE,WAAW;YACvB,iBAAiB,EAAE,SAAS;YAC5B,KAAK,EAAE,KAAK,CAAC,SAAS;YACtB,gBAAgB,EAAE,CAAC;YACnB,iBAAiB,EAAE,GAAG,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,OAAO,EAAE;YACvD,QAAQ,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC,SAAS,EAAE,YAAY,EAAE,IAAI,EAAE;SAC9D,CAAC,CAAC;QACH,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;IAChD,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,kBAAkB,CACtB,UAAkB;QAElB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CACzB,QAAQ,EACR,kBAAkB,kBAAkB,CAAC,UAAU,CAAC,EAAE,CACnD,CAAC;YACF,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,eAAe,EAAE,GAAG,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;QACxE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,+EAA+E;YAC/E,IAAI,GAAG,YAAY,kBAAkB,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC5D,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;YACvD,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,UAAkB;QACjC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,CACvB,KAAK,EACL,aAAa,kBAAkB,CAAC,UAAU,CAAC,EAAE,CAC9C,CAAC;QACF,OAAO,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC;IAED,oFAAoF;IACpF,aAAa,CAAC,OAAuB,EAAE,QAAgB;QACrD,KAAK,QAAQ,CAAC;QACd,IAAI,CAAC,IAAI,CAAC,aAAa;YAAE,OAAO,KAAK,CAAC,CAAC,iDAAiD;QACxF,MAAM,QAAQ,GAAG,OAAO,CAAC,oBAAoB,CAAC,IAAI,OAAO,CAAC,oBAAoB,CAAC,IAAI,EAAE,CAAC;QACtF,OAAO,CACL,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,aAAa,CAAC,CAC/F,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACH,iBAAiB,CAAC,OAAgB;QAChC,MAAM,CAAC,GAAG,OAWT,CAAC;QACF,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QAEzD,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC;QAC1B,MAAM,SAAS,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC;QAEpC,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAClC,2FAA2F;YAC3F,2EAA2E;YAC3E,MAAM,OAAO,GAAG,qBAAqB,CAAC,CAAC,CAAC,OAAQ,CAAC,CAAC;YAClD,MAAM,eAAe,GAAG,CAAC,CAAC,EAAE,IAAI,GAAG,SAAS,IAAI,SAAS,IAAI,CAAC,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC;YACnF,OAAO;gBACL,eAAe;gBACf,SAAS;gBACT,IAAI,EAAE,SAAS;gBACf,OAAO;gBACP,kBAAkB,EAAG,CAAC,CAAC,OAAQ,CAAC,UAAU,CAAwB,IAAI,IAAI;gBAC1E,iBAAiB,EAAG,CAAC,CAAC,OAAQ,CAAC,mBAAmB,CAAwB,IAAI,IAAI;gBAClF,aAAa,EAAG,CAAC,CAAC,OAAQ,CAAC,aAAa,CAAwB,IAAI,IAAI;aACzE,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,CAAC,YAAY,EAAE,EAAE,EAAE,CAAC;YACvB,MAAM,eAAe,GAAG,CAAC,CAAC,EAAE,IAAI,GAAG,SAAS,IAAI,CAAC,CAAC,YAAY,CAAC,EAAE,IAAI,CAAC,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC;YAC3F,OAAO;gBACL,eAAe;gBACf,SAAS;gBACT,IAAI,EAAE,cAAc;gBACpB,YAAY,EAAE;oBACZ,UAAU,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE;oBAC7B,MAAM,EAAE,gCAAgC,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC;iBAChE;gBACD,kBAAkB,EAAE,CAAC,CAAC,YAAY,CAAC,QAAQ,IAAI,IAAI;gBACnD,iBAAiB,EAAE,CAAC,CAAC,YAAY,CAAC,iBAAiB,IAAI,IAAI;aAC5D,CAAC;QACJ,CAAC;QAED,+FAA+F;QAC/F,OAAO;YACL,eAAe,EAAE,CAAC,CAAC,EAAE,IAAI,GAAG,SAAS,IAAI,CAAC,CAAC,WAAW,IAAI,EAAE,EAAE;YAC9D,SAAS;YACT,IAAI,EAAE,SAAS;SAChB,CAAC;IACJ,CAAC;CACF;AA1MD,8DA0MC"}

package/dist/cjs/subscription-billing/provider/disabled.js

@@ -35,6 +35,14 @@ class DisabledSubscriptionProvider {
     async getPayment(_externalId) {
         return null;
     }
+    /**
+     * Sem gateway não há recorrência a cancelar — o objetivo ("não gerar cobrança
+     * futura") já é verdade. Devolve sucesso para que o cancelamento local não
+     * fique bloqueado quando o billing está desligado.
+     */
+    async cancelSubscription(_externalId) {
+        return { status: 'canceled', alreadyCanceled: true };
+    }
     verifyWebhook(_headers, _rawBody) {
         return false; // nenhum webhook e confiavel quando desabilitado — nao ha token para validar
     }

package/dist/cjs/subscription-billing/provider/disabled.js.map

@@ -1 +1 @@
-{"version":3,"file":"disabled.js","sourceRoot":"","sources":["../../../../src/subscription-billing/provider/disabled.ts"],"names":[],"mappings":";;;AAWA;;;;;;;;;;;GAWG;AACH,MAAa,4BAA4B;IAC9B,IAAI,CAAS;IACb,IAAI,GAAG,UAAmB,CAAC;IAEpC,YAAY,IAAI,GAAG,UAAU;QAC3B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,cAAc,CAAC,MAA2B;QAC9C,KAAK,MAAM,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC/E,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,MAA2B;QAC9C,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,WAAmB;QAClC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,aAAa,CAAC,QAAwB,EAAE,QAAgB;QACtD,OAAO,KAAK,CAAC,CAAC,6EAA6E;IAC7F,CAAC;IAED,iBAAiB,CAAC,QAAiB;QACjC,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAlCD,oEAkCC"}
+{"version":3,"file":"disabled.js","sourceRoot":"","sources":["../../../../src/subscription-billing/provider/disabled.ts"],"names":[],"mappings":";;;AAWA;;;;;;;;;;;GAWG;AACH,MAAa,4BAA4B;IAC9B,IAAI,CAAS;IACb,IAAI,GAAG,UAAmB,CAAC;IAEpC,YAAY,IAAI,GAAG,UAAU;QAC3B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,cAAc,CAAC,MAA2B;QAC9C,KAAK,MAAM,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC/E,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,MAA2B;QAC9C,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,WAAmB;QAClC,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,kBAAkB,CACtB,WAAmB;QAEnB,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;IACvD,CAAC;IAED,aAAa,CAAC,QAAwB,EAAE,QAAgB;QACtD,OAAO,KAAK,CAAC,CAAC,6EAA6E;IAC7F,CAAC;IAED,iBAAiB,CAAC,QAAiB;QACjC,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AA7CD,oEA6CC"}

package/dist/cjs/subscription-billing/provider/registry.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.resolveSubscriptionBillingProvider = resolveSubscriptionBillingProvider;
 const shared_1 = require("@baruk/shared");
+const live_guard_js_1 = require("../../billing/live-guard.js");
 const asaas_js_1 = require("./asaas.js");
 const disabled_js_1 = require("./disabled.js");
 const FACTORIES = {
@@ -13,6 +14,16 @@ const FACTORIES = {
  * `provider/asaas.ts` diretamente. Sem `apiKey` configurada, resolve para
  * `disabled` automaticamente, independente do nome pedido — nunca cobra por
  * falta de configuracao (mesmo padrao best-effort de `cap.communication.transactional-email`).
+ *
+ * Modo `live` passa pela MESMA grade do trilho merchant. Esta camada de billing
+ * tinha caminho próprio até o gateway e nenhuma grade: a contenção era o valor
+ * de uma única variável de ambiente. Agora um provedor live sequer é
+ * CONSTRUÍDO fora de uma aplicação declarada como produção — o gateway não
+ * chega a ser chamado porque o objeto que fala com ele não existe.
+ *
+ * A grade é `resolve`, não `charge`: pausar emissão não pode impedir de
+ * verificar webhook e reconhecer dinheiro que já entrou. A chave geral entra
+ * onde a cobrança nasce (`startCheckout`).
  */
 function resolveSubscriptionBillingProvider(name, config) {
     if (!config.apiKey || config.mode === 'disabled') {
@@ -20,6 +31,12 @@ function resolveSubscriptionBillingProvider(name, config) {
         // gravam `provider.name` em DB precisam do nome configurado, nao do literal `'disabled'`.
         return new disabled_js_1.DisabledSubscriptionProvider(name);
     }
+    // A grade vem DEPOIS do rebaixamento: sem credencial não existe dinheiro
+    // possível, e transformar "produto sem chave própria" em exceção quebraria o
+    // isolamento multi-produto, que depende de ficar desabilitado em silêncio.
+    if (config.mode === 'live') {
+        (0, live_guard_js_1.assertLiveProviderAllowed)('live', (0, live_guard_js_1.readLiveRuntime)(), 'resolve');
+    }
     const factory = FACTORIES[name];
     if (!factory) {
         throw new shared_1.ValidationError(`Provider de pagamento desconhecido: "${name}".`);

package/dist/cjs/subscription-billing/provider/registry.js.map

@@ -1 +1 @@
-{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../../../src/subscription-billing/provider/registry.ts"],"names":[],"mappings":";;AAkBA,gFAWC;AA7BD,0CAAgD;AAEhD,yCAAuD;AACvD,+CAA6D;AAI7D,MAAM,SAAS,GAAgD;IAC7D,KAAK,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,oCAAyB,CAAC,MAAM,CAAC;IACxD,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,0CAA4B,EAAE;CACnD,CAAC;AAEF;;;;;GAKG;AACH,SAAgB,kCAAkC,CAAC,IAAY,EAAE,MAAkC;IACjG,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QACjD,mFAAmF;QACnF,0FAA0F;QAC1F,OAAO,IAAI,0CAA4B,CAAC,IAAI,CAAC,CAAC;IAChD,CAAC;IACD,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,wBAAe,CAAC,wCAAwC,IAAI,IAAI,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC;AACzB,CAAC"}
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../../../src/subscription-billing/provider/registry.ts"],"names":[],"mappings":";;AA+BA,gFAoBC;AAnDD,0CAAgD;AAChD,+DAAyF;AAEzF,yCAAuD;AACvD,+CAA6D;AAM7D,MAAM,SAAS,GAAgD;IAC7D,KAAK,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,oCAAyB,CAAC,MAAM,CAAC;IACxD,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,0CAA4B,EAAE;CACnD,CAAC;AAEF;;;;;;;;;;;;;;;GAeG;AACH,SAAgB,kCAAkC,CAChD,IAAY,EACZ,MAAkC;IAElC,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QACjD,mFAAmF;QACnF,0FAA0F;QAC1F,OAAO,IAAI,0CAA4B,CAAC,IAAI,CAAC,CAAC;IAChD,CAAC;IACD,yEAAyE;IACzE,6EAA6E;IAC7E,2EAA2E;IAC3E,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC3B,IAAA,yCAAyB,EAAC,MAAM,EAAE,IAAA,+BAAe,GAAE,EAAE,SAAS,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,wBAAe,CAAC,wCAAwC,IAAI,IAAI,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC;AACzB,CAAC"}

package/dist/cjs/subscription-billing/service.js

@@ -24,9 +24,10 @@ const password_js_1 = require("../auth/password.js");
 const provisioning_js_1 = require("../tenancy/provisioning.js");
 const repository_js_1 = require("../products/repository.js");
 const derive_js_1 = require("../entitlements/derive.js");
-const resend_js_1 = require("../mail/resend.js");
+const transactional_outbound_js_1 = require("../mail/transactional-outbound.js");
 const reconcile_js_1 = require("./reconcile.js");
 const dunning_js_1 = require("./dunning.js");
+const live_guard_js_1 = require("../billing/live-guard.js");
 const registry_js_1 = require("./provider/registry.js");
 const repository_js_2 = require("./repository.js");
 Object.defineProperty(exports, "ensureSaasPlanCatalog", { enumerable: true, get: function () { return repository_js_2.ensureSaasPlanCatalog; } });
@@ -254,6 +255,13 @@ async function startCheckout(db, ctx, source, planKey, _nowIso, productKey = pla
     if (provider.mode === 'disabled') {
         return { mode: 'disabled', provider: provider.name, url: null };
     }
+    // Chave geral, no ponto em que dívida real nasce — e ANTES de qualquer
+    // chamada ao gateway. O modo lido é o EFETIVO (a fábrica rebaixa para
+    // `disabled` quem não tem credencial), então só um provedor genuinamente
+    // live é barrado aqui.
+    if (provider.mode === 'live') {
+        (0, live_guard_js_1.assertLiveProviderAllowed)('live', (0, live_guard_js_1.readLiveRuntime)(), 'charge');
+    }
     // 1) Leitura curta (transação própria) — nada de rede com transação aberta.
     const snapshot = await (0, context_js_1.withContext)(db, ctx, async (tx) => {
         const tenantRows = await tx `
@@ -521,12 +529,46 @@ async function changePlanForTenant(db, ctx, newPlanKey, nowIso) {
         return row;
     });
 }
-async function cancelForTenant(db, ctx, nowIso) {
+/**
+ * Cancelamento — GATEWAY-FIRST.
+ *
+ * A recorrência é cancelada no provider ANTES de o estado local virar
+ * `canceled`. A ordem inversa produzia o pior resultado possível: a aplicação
+ * dizia "cancelado", o acesso era suspenso, e o ASAAS seguia emitindo cobrança
+ * mensal — cliente pagando por serviço que já não usa.
+ *
+ * Se o gateway falhar, o erro sobe e o estado local NÃO é consolidado: melhor o
+ * usuário ver a falha e tentar de novo do que acreditar num cancelamento que não
+ * aconteceu. A operação é segura para retry porque `cancelSubscription` do
+ * provider é idempotente — cancelar o que já está cancelado devolve sucesso.
+ *
+ * Assinatura sem `providerSubscriptionId` (trial que nunca chegou ao checkout)
+ * não tem o que cancelar no gateway: segue direto para o estado local.
+ */
+async function cancelForTenant(db, ctx, source, nowIso, productKey = plans_js_1.DEFAULT_PRODUCT_KEY) {
+    // Fora da transação: chamada de rede não pode segurar o lock do tenant.
+    const existing = await (0, context_js_1.withContext)(db, ctx, (tx) => (0, repository_js_2.getSubscription)(tx, productKey));
+    if (!existing)
+        throw new shared_1.NotFoundError('Nenhuma assinatura para este tenant');
+    let providerOutcome = 'skipped_no_provider_id';
+    if (existing.status !== 'canceled' && existing.providerSubscriptionId) {
+        // Mesma resolução por produto usada no checkout: a conta de gateway sai do
+        // PRODUTO, nunca de configuração global. Cancelar na conta errada seria tão
+        // grave quanto cobrar na conta errada.
+        const cfg = asRegistry(source).resolve({ productKey, tenantId: ctx.tenantId });
+        const provider = providerFor(cfg);
+        if (provider.cancelSubscription) {
+            const res = await provider.cancelSubscription(existing.providerSubscriptionId);
+            providerOutcome = res.alreadyCanceled ? 'already_canceled' : 'canceled';
+        }
+    }
     return (0, context_js_1.withContext)(db, ctx, async (tx) => {
         await (0, repository_js_2.lockTenantBilling)(tx, ctx.tenantId);
-        const current = await (0, repository_js_2.getSubscription)(tx);
+        const current = await (0, repository_js_2.getSubscription)(tx, productKey);
         if (!current)
             throw new shared_1.NotFoundError('Nenhuma assinatura para este tenant');
+        // Idempotência: cancelar o que já está cancelado devolve o estado, sem erro
+        // e sem novo evento — inclusive quando dois pedidos correm em paralelo.
         if (current.status === 'canceled')
             return current;
         const { subscription, domainEvents } = (0, reconcile_js_1.cancelSubscription)(current, nowIso);
@@ -542,6 +584,9 @@ async function cancelForTenant(db, ctx, nowIso) {
             action: 'subscription_canceled',
             resourceType: 'saas_subscription',
             resourceId: row.rowId,
+            // Registra o que aconteceu no gateway: auditoria de cancelamento sem isso
+            // não distingue "cancelei a recorrência" de "não havia recorrência".
+            diff: { providerOutcome, productKey },
         });
         return row;
     });
@@ -818,11 +863,15 @@ async function runBillingCron(db, source, nowIso) {
             });
             // Envio FORA da transação (best-effort com timeout): rede nunca segura o banco.
             if (dunningEmailTo) {
-                const sent = await (0, resend_js_1.sendEmail)(cfg.resendApiKey, {
-                    from: cfg.emailFrom,
-                    to: dunningEmailTo,
-                    subject: 'Sua assinatura Baruk está com pagamento pendente',
-                    html: `<p>Olá,</p><p>Identificamos uma pendência na assinatura da sua conta Baruk.</p><p>Regularize para manter seus serviços ativos: <a href="${cfg.webBaseUrl}/assinatura">gerenciar assinatura</a>.</p><p>Se o pagamento já foi feito, desconsidere este aviso.</p>`,
+                const sent = await (0, transactional_outbound_js_1.sendTransactionalOutbound)({
+                    kind: 'subscription_dunning',
+                    apiKey: cfg.resendApiKey,
+                    message: {
+                        from: cfg.emailFrom,
+                        to: dunningEmailTo,
+                        subject: 'Sua assinatura Baruk está com pagamento pendente',
+                        html: `<p>Olá,</p><p>Identificamos uma pendência na assinatura da sua conta Baruk.</p><p>Regularize para manter seus serviços ativos: <a href="${cfg.webBaseUrl}/assinatura">gerenciar assinatura</a>.</p><p>Se o pagamento já foi feito, desconsidere este aviso.</p>`,
+                    },
                 });
                 if (sent)
                     report.emailsSent += 1;