@guanjinke/artifact-client 1.18.0 → 1.20.0

package/dist/environment/hana.js

@@ -0,0 +1,238 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HanaDeployWriteError = exports.HanaPrepareWriteError = exports.VERIFIED_HANA_WINDOWS_SHA256 = void 0;
+exports.inspectWindowsHanaPackage = inspectWindowsHanaPackage;
+exports.prepareWindowsHana = prepareWindowsHana;
+exports.deployWindowsHana = deployWindowsHana;
+const fs = __importStar(require("fs/promises"));
+const path = __importStar(require("path"));
+const os = __importStar(require("os"));
+const crypto_1 = require("crypto");
+const hana_archive_1 = require("./hana-archive");
+const registry_1 = require("./registry");
+const process_1 = require("./process");
+const validate_1 = require("./validate");
+/** Fingerprint of the locally verified SAP HANA Client 2.10.15 Windows x64 DOTNETCORE.TGZ. */
+exports.VERIFIED_HANA_WINDOWS_SHA256 = '95b7b6f1dbe9f4b0367b92189e3d819a9786c178555ea2e8b6246cac01850d7b';
+const MAX_ARCHIVE_SIZE = 64 * 1024 * 1024;
+/** Inspect a known Windows package without extracting, deploying, or changing environment variables. */
+async function inspectWindowsHanaPackage(archive) {
+    if (process.platform !== 'win32' || process.arch !== 'x64')
+        throw new Error('HANA package inspection requires a Windows x64 process. On Linux install the SAP HANA Client for Linux on every Server and COT Worker host and follow the official procedure manually.');
+    if (archive !== undefined && (typeof archive !== 'string' || !archive || archive.includes('\0')))
+        throw new Error('Invalid HANA archive path.');
+    const file = path.resolve(archive ?? path.join(os.homedir(), 'Downloads', 'Hana', 'hanaclient-2.10-windows-x64', 'client', 'DOTNETCORE.TGZ'));
+    let current = path.parse(file).root;
+    for (const part of file.slice(current.length).split(path.sep).filter(Boolean)) {
+        current = path.join(current, part);
+        if ((await fs.lstat(current)).isSymbolicLink())
+            throw new Error('HANA archive path contains a link.');
+    }
+    const handle = await fs.open(file, 'r');
+    try {
+        const before = await handle.stat();
+        if (!before.isFile() || before.size <= 0 || before.size > MAX_ARCHIVE_SIZE)
+            throw new Error('Invalid HANA archive file or size.');
+        const hash = (0, crypto_1.createHash)('sha256');
+        const buffer = Buffer.alloc(1024 * 1024);
+        let offset = 0;
+        while (offset < before.size) {
+            const { bytesRead } = await handle.read(buffer, 0, Math.min(buffer.length, before.size - offset), offset);
+            if (!bytesRead)
+                throw new Error('HANA archive changed during inspection.');
+            hash.update(buffer.subarray(0, bytesRead));
+            offset += bytesRead;
+        }
+        const after = await handle.stat();
+        if (after.size !== before.size || after.mtimeMs !== before.mtimeMs || after.ctimeMs !== before.ctimeMs)
+            throw new Error('HANA archive changed during inspection.');
+        const sha256 = hash.digest('hex');
+        return { archive: file, sha256, platform: 'win32', architecture: 'x64', version: sha256 === exports.VERIFIED_HANA_WINDOWS_SHA256 ? '2.10.15' : null, verified: sha256 === exports.VERIFIED_HANA_WINDOWS_SHA256, action: 'inspection-only' };
+    }
+    finally {
+        await handle.close();
+    }
+}
+const HANA_MEMBERS = ['dotnetcore/v2.1/Sap.Data.Hana.Core.v2.1.dll', 'dotnetcore/libadonetHDB.dll'];
+class HanaPrepareWriteError extends Error {
+    created;
+    failed;
+    constructor(created, failed) {
+        super(`HANA preparation incomplete; created: ${created.join(', ') || '(none)'}; failed or possibly partial: ${failed}. No files removed.`);
+        this.created = created;
+        this.failed = failed;
+        this.name = 'HanaPrepareWriteError';
+    }
+}
+exports.HanaPrepareWriteError = HanaPrepareWriteError;
+async function missing(target) {
+    try {
+        return await fs.lstat(target);
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return undefined;
+        throw error;
+    }
+}
+/** Run a plan inside the environment lock, after ownership and stopped-state checks. */
+async function withStoppedEnvironment(name, dependencies, plan) {
+    const registry = dependencies.registry ?? new registry_1.EnvironmentRegistry();
+    const processes = dependencies.processes ?? new process_1.WindowsProcessBackend();
+    const original = await registry.get(name);
+    return registry.locked(`env-${original.id}`, async () => {
+        const entry = await registry.get(name);
+        if (entry.id !== original.id || entry.root !== original.root)
+            throw new Error('Environment changed during operation.');
+        await (0, validate_1.validateEnvironmentOwnership)(entry, registry.directory);
+        const state = await (0, validate_1.observeRuntimeState)(entry, processes);
+        if (state !== 'stopped' && state !== 'ready')
+            throw new Error(`Environment must be stopped; observed state: ${state}.`);
+        return plan(entry);
+    });
+}
+/** Prepare the pinned pair only; does not configure or install a Wyn provider. */
+async function prepareWindowsHana(name, archive, dependencies = {}) {
+    const inspected = await inspectWindowsHanaPackage(archive);
+    if (!inspected.verified)
+        throw new Error('HANA archive is not the verified 2.10.15 package.');
+    const files = await (0, hana_archive_1.extractTrustedTgz)(inspected.archive, exports.VERIFIED_HANA_WINDOWS_SHA256, HANA_MEMBERS);
+    return withStoppedEnvironment(name, dependencies, async (entry) => {
+        const parent = path.join(entry.root, '.afm-hana');
+        const directory = path.join(parent, '2.10.15');
+        for (const dir of [parent, directory]) {
+            const stat = await missing(dir);
+            if (stat && (!stat.isDirectory() || stat.isSymbolicLink()))
+                throw new Error(`HANA destination is not a real directory: ${dir}.`);
+        }
+        const plans = HANA_MEMBERS.map(member => ({ name: path.posix.basename(member), content: files.get(member) }));
+        for (const plan of plans) {
+            const target = path.join(directory, plan.name);
+            if (await missing(target))
+                throw new Error(`HANA destination conflict: ${target}.`);
+        }
+        const created = [];
+        let failed = parent;
+        try {
+            for (const dir of [parent, directory]) {
+                failed = dir;
+                try {
+                    await fs.mkdir(dir);
+                }
+                catch (error) {
+                    if (error.code !== 'EEXIST')
+                        throw error;
+                }
+                const stat = await fs.lstat(dir);
+                if (!stat.isDirectory() || stat.isSymbolicLink())
+                    throw new Error('Invalid destination directory.');
+            }
+            for (const plan of plans) {
+                failed = path.join(directory, plan.name);
+                await fs.writeFile(failed, plan.content, { flag: 'wx' });
+                created.push(failed);
+            }
+        }
+        catch {
+            throw new HanaPrepareWriteError(created, failed);
+        }
+        return { name: entry.name, directory, files: created, status: 'prepared', configured: false, installed: false, loadability: 'unverified' };
+    });
+}
+class HanaDeployWriteError extends Error {
+    created;
+    failed;
+    constructor(created, failed) {
+        super(`HANA deployment incomplete; created: ${created.join(', ') || '(none)'}; failed or possibly partial: ${failed}. No files removed.`);
+        this.created = created;
+        this.failed = failed;
+        this.name = 'HanaDeployWriteError';
+    }
+}
+exports.HanaDeployWriteError = HanaDeployWriteError;
+/**
+ * Deploy the pinned managed and native files to the two Windows locations used by Wyn.
+ * The deployed files are not a complete installation: the provider stays unconfigured, plugin
+ * precedence and the native search path are not verified here, and a restart is required.
+ */
+async function deployWindowsHana(name, archive, dependencies = {}) {
+    if ((dependencies.platform ?? process.platform) !== 'win32' || (dependencies.arch ?? process.arch) !== 'x64') {
+        throw new Error('HANA deployment requires a Windows x64 process. On Linux install the SAP HANA Client for Linux on every Server and COT Worker host and follow the official procedure manually.');
+    }
+    const inspected = await inspectWindowsHanaPackage(archive);
+    if (!inspected.verified)
+        throw new Error('HANA archive is not the verified 2.10.15 package.');
+    const files = await (0, hana_archive_1.extractTrustedTgz)(inspected.archive, exports.VERIFIED_HANA_WINDOWS_SHA256, HANA_MEMBERS);
+    const plans = HANA_MEMBERS.map(member => ({ name: path.posix.basename(member), content: files.get(member) }));
+    return withStoppedEnvironment(name, dependencies, async (entry) => {
+        const destinations = [path.join(entry.root, 'Plugins', 'Dataset'), path.join(entry.root, 'CotWorker')];
+        // Preflight every destination before writing anything, so a conflict cannot leave a half-deployed pair.
+        for (const directory of destinations) {
+            const stat = await missing(directory);
+            if (!stat || !stat.isDirectory() || stat.isSymbolicLink())
+                throw new Error(`HANA destination directory is missing or not real: ${directory}.`);
+            for (const plan of plans) {
+                const target = path.join(directory, plan.name);
+                if (await missing(target))
+                    throw new Error(`HANA destination conflict: ${target}.`);
+            }
+        }
+        const created = [];
+        let failed = destinations[0];
+        try {
+            for (const directory of destinations) {
+                for (const plan of plans) {
+                    failed = path.join(directory, plan.name);
+                    await fs.writeFile(failed, plan.content, { flag: 'wx' });
+                    created.push(failed);
+                }
+            }
+        }
+        catch {
+            throw new HanaDeployWriteError(created, failed);
+        }
+        return {
+            name: entry.name,
+            files: created,
+            status: 'deployed',
+            configured: false,
+            installed: false,
+            loadability: 'unverified',
+            restartRequired: true,
+        };
+    });
+}
+//# sourceMappingURL=hana.js.map

package/dist/environment/hana.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hana.js","sourceRoot":"","sources":["../../src/environment/hana.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAwBA,8DA0BC;AAoCD,gDAgCC;AAcD,8CAuCC;AA3KD,gDAAkC;AAClC,2CAA6B;AAC7B,uCAAyB;AACzB,mCAAoC;AACpC,iDAAmD;AACnD,yCAAiD;AACjD,uCAAkE;AAClE,yCAA+E;AAE/E,8FAA8F;AACjF,QAAA,4BAA4B,GAAG,kEAAkE,CAAC;AAC/G,MAAM,gBAAgB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAY1C,wGAAwG;AACjG,KAAK,UAAU,yBAAyB,CAAC,OAAgB;IAC9D,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,OAAO,CAAC,IAAI,KAAK,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,wLAAwL,CAAC,CAAC;IACtQ,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAChJ,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,6BAA6B,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAC9I,IAAI,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;IACpC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9E,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxG,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACxC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,MAAM,CAAC,IAAI,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,GAAG,gBAAgB;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QAClI,MAAM,IAAI,GAAG,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC;QAClC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;QACzC,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,OAAO,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;YAC5B,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;YAC1G,IAAI,CAAC,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;YAC3E,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;YAAC,MAAM,IAAI,SAAS,CAAC;QAClE,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QAClC,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,IAAI,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QACnK,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,KAAK,oCAA4B,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,KAAK,oCAA4B,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IAC9N,CAAC;YAAS,CAAC;QAAC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IAAC,CAAC;AACrC,CAAC;AAED,MAAM,YAAY,GAAG,CAAC,6CAA6C,EAAE,6BAA6B,CAAC,CAAC;AACpG,MAAa,qBAAsB,SAAQ,KAAK;IACzB;IAA4B;IAAjD,YAAqB,OAAiB,EAAW,MAAc;QAC7D,KAAK,CAAC,yCAAyC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,iCAAiC,MAAM,qBAAqB,CAAC,CAAC;QADxH,YAAO,GAAP,OAAO,CAAU;QAAW,WAAM,GAAN,MAAM,CAAQ;QAE7D,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AALD,sDAKC;AAID,KAAK,UAAU,OAAO,CAAC,MAAc;IACnC,IAAI,CAAC;QAAC,OAAO,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;AACjJ,CAAC;AAED,wFAAwF;AACxF,KAAK,UAAU,sBAAsB,CACnC,IAAY,EACZ,YAAqC,EACrC,IAA4E;IAE5E,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,IAAI,IAAI,8BAAmB,EAAE,CAAC;IACpE,MAAM,SAAS,GAAG,YAAY,CAAC,SAAS,IAAI,IAAI,+BAAqB,EAAE,CAAC;IACxE,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC1C,OAAO,QAAQ,CAAC,MAAM,CAAC,OAAO,QAAQ,CAAC,EAAE,EAAE,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,KAAK,CAAC,EAAE,KAAK,QAAQ,CAAC,EAAE,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QACvH,MAAM,IAAA,uCAA4B,EAAC,KAAK,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC9D,MAAM,KAAK,GAAG,MAAM,IAAA,8BAAmB,EAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAC1D,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,KAAK,GAAG,CAAC,CAAC;QACxH,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,kFAAkF;AAC3E,KAAK,UAAU,kBAAkB,CAAC,IAAY,EAAE,OAAgB,EAAE,eAAwC,EAAE;IACjH,MAAM,SAAS,GAAG,MAAM,yBAAyB,CAAC,OAAO,CAAC,CAAC;IAC3D,IAAI,CAAC,SAAS,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IAC9F,MAAM,KAAK,GAAG,MAAM,IAAA,gCAAiB,EAAC,SAAS,CAAC,OAAO,EAAE,oCAA4B,EAAE,YAAY,CAAC,CAAC;IACrG,OAAO,sBAAsB,CAAC,IAAI,EAAE,YAAY,EAAE,KAAK,EAAC,KAAK,EAAC,EAAE;QAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAClD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAC/C,KAAK,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;YAChC,IAAI,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,GAAG,GAAG,CAAC,CAAC;QACnI,CAAC;QACD,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,MAAM,CAAE,EAAE,CAAC,CAAC,CAAC;QAC/G,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/C,IAAI,MAAM,OAAO,CAAC,MAAM,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,MAAM,GAAG,CAAC,CAAC;QACtF,CAAC;QACD,MAAM,OAAO,GAAa,EAAE,CAAC;QAAC,IAAI,MAAM,GAAG,MAAM,CAAC;QAClD,IAAI,CAAC;YACH,KAAK,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC;gBACtC,MAAM,GAAG,GAAG,CAAC;gBACb,IAAI,CAAC;oBAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAAC,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;wBAAE,MAAM,KAAK,CAAC;gBAAC,CAAC;gBACnH,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBACjC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE;oBAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;YACtG,CAAC;YACD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;gBACzC,MAAM,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;gBACzD,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACvB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,IAAI,qBAAqB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAAC,CAAC;QAC7D,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,UAAmB,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW,EAAE,YAAqB,EAAE,CAAC;IAC/J,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAa,oBAAqB,SAAQ,KAAK;IACxB;IAA4B;IAAjD,YAAqB,OAAiB,EAAW,MAAc;QAC7D,KAAK,CAAC,wCAAwC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,iCAAiC,MAAM,qBAAqB,CAAC,CAAC;QADvH,YAAO,GAAP,OAAO,CAAU;QAAW,WAAM,GAAN,MAAM,CAAQ;QAE7D,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AALD,oDAKC;AAED;;;;GAIG;AACI,KAAK,UAAU,iBAAiB,CAAC,IAAY,EAAE,OAAgB,EAAE,eAAuC,EAAE;IAC/G,IAAI,CAAC,YAAY,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,KAAK,EAAE,CAAC;QAC7G,MAAM,IAAI,KAAK,CAAC,gLAAgL,CAAC,CAAC;IACpM,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,yBAAyB,CAAC,OAAO,CAAC,CAAC;IAC3D,IAAI,CAAC,SAAS,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IAC9F,MAAM,KAAK,GAAG,MAAM,IAAA,gCAAiB,EAAC,SAAS,CAAC,OAAO,EAAE,oCAA4B,EAAE,YAAY,CAAC,CAAC;IACrG,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,MAAM,CAAE,EAAE,CAAC,CAAC,CAAC;IAC/G,OAAO,sBAAsB,CAAC,IAAI,EAAE,YAAY,EAAE,KAAK,EAAC,KAAK,EAAC,EAAE;QAC9D,MAAM,YAAY,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC;QACvG,wGAAwG;QACxG,KAAK,MAAM,SAAS,IAAI,YAAY,EAAE,CAAC;YACrC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC;YACtC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,sDAAsD,SAAS,GAAG,CAAC,CAAC;YAC/I,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC/C,IAAI,MAAM,OAAO,CAAC,MAAM,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,MAAM,GAAG,CAAC,CAAC;YACtF,CAAC;QACH,CAAC;QACD,MAAM,OAAO,GAAa,EAAE,CAAC;QAAC,IAAI,MAAM,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;QAC3D,IAAI,CAAC;YACH,KAAK,MAAM,SAAS,IAAI,YAAY,EAAE,CAAC;gBACrC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;oBACzB,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;oBACzC,MAAM,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;oBACzD,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACvB,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,IAAI,oBAAoB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAAC,CAAC;QAC5D,OAAO;YACL,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,KAAK,EAAE,OAAO;YACd,MAAM,EAAE,UAAmB;YAC3B,UAAU,EAAE,KAAK;YACjB,SAAS,EAAE,KAAK;YAChB,WAAW,EAAE,YAAqB;YAClC,eAAe,EAAE,IAAa;SAC/B,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/environment/jdbc-connection-test.d.ts

@@ -0,0 +1,25 @@
+/** Classification of a provider connection attempt; never carries credentials or raw server text. */
+export type JdbcConnectionOutcome = 'success' | 'connection-error' | 'invalid-connection-string' | 'unsupported-protocol' | 'driver-missing' | 'unknown';
+export interface JdbcConnectionTestResult {
+    provider: string;
+    outcome: JdbcConnectionOutcome;
+    errorCode: number | null;
+    /** True only when the outcome proves the driver was registered and reached the network stage. */
+    reachedNetwork: boolean;
+}
+export interface JdbcConnectionTestOptions {
+    uri: string;
+    provider: string;
+    connectionString: string;
+    timeoutMs?: number;
+    env?: NodeJS.ProcessEnv;
+}
+/**
+ * Calls the data source service connection test and classifies the result.
+ * A connection failure that names a network error proves the driver was registered and reached the
+ * network stage; neither that nor `success` proves the driver is complete for every query the provider
+ * supports. The raw service message is never returned because the service logs and may echo the
+ * connection string, which can contain credentials.
+ */
+export declare function testJdbcConnection(options: JdbcConnectionTestOptions): Promise<JdbcConnectionTestResult>;
+//# sourceMappingURL=jdbc-connection-test.d.ts.map

package/dist/environment/jdbc-connection-test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jdbc-connection-test.d.ts","sourceRoot":"","sources":["../../src/environment/jdbc-connection-test.ts"],"names":[],"mappings":"AAEA,qGAAqG;AACrG,MAAM,MAAM,qBAAqB,GAC7B,SAAS,GACT,kBAAkB,GAClB,2BAA2B,GAC3B,sBAAsB,GACtB,gBAAgB,GAChB,SAAS,CAAC;AAEd,MAAM,WAAW,wBAAwB;IACvC,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,qBAAqB,CAAC;IAC/B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,iGAAiG;IACjG,cAAc,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,yBAAyB;IACxC,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACzB;AAkDD;;;;;;GAMG;AACH,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,yBAAyB,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAmB9G"}

package/dist/environment/jdbc-connection-test.js

@@ -0,0 +1,146 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.testJdbcConnection = testJdbcConnection;
+const http = __importStar(require("http"));
+const MAX_RESPONSE = 64 * 1024;
+const MAX_CONNECTION_STRING = 4096;
+const PARAMETER_ERROR = /project ?id|projectid|required (parameter|property|field)|missing (parameter|property|field)|invalid (connection )?(url|parameter|property|connection string)|no suitable driver/i;
+const NETWORK_ERROR = /connection refused|failed to connect|connectexception|connect timed out|unknownhost|network is unreachable|connection reset|socket|refused/i;
+const DRIVER_ERROR = /classnotfoundexception|noclassdeffounderror/i;
+function origin(value) {
+    let url;
+    try {
+        url = new URL(value);
+    }
+    catch {
+        throw new Error('Invalid JDBC service URI.');
+    }
+    if (url.protocol !== 'http:' || !['127.0.0.1', '[::1]'].includes(url.hostname) || !url.port || url.username || url.password || url.pathname !== '/' || url.search || url.hash)
+        throw new Error('JDBC service URI must be an explicit loopback HTTP origin.');
+    return url;
+}
+function post(url, endpoint, body, authorization, timeoutMs) {
+    return new Promise((resolve, reject) => {
+        let settled = false;
+        const fail = () => { if (!settled) {
+            settled = true;
+            reject(new Error('JDBC connection test request failed.'));
+        } };
+        const payload = Buffer.from(body, 'utf8');
+        const req = http.request({
+            protocol: 'http:',
+            hostname: url.hostname === '[::1]' ? '::1' : url.hostname,
+            port: url.port,
+            path: endpoint,
+            method: 'POST',
+            headers: { Authorization: authorization, 'Content-Type': 'application/json', 'Content-Length': payload.length },
+            agent: false,
+        }, response => {
+            if (response.statusCode !== 200) {
+                response.resume();
+                fail();
+                return;
+            }
+            const chunks = [];
+            let size = 0;
+            response.on('data', (chunk) => { size += chunk.length; if (size > MAX_RESPONSE) {
+                response.destroy();
+                fail();
+            }
+            else
+                chunks.push(chunk); });
+            response.on('error', fail);
+            response.on('end', () => { if (!settled) {
+                settled = true;
+                resolve(Buffer.concat(chunks).toString('utf8'));
+            } });
+        });
+        const timer = setTimeout(() => { req.destroy(); fail(); }, timeoutMs);
+        req.on('close', () => clearTimeout(timer));
+        req.on('error', fail);
+        req.end(payload);
+    });
+}
+function classify(errorCode, message) {
+    if (errorCode === 4005)
+        return { outcome: 'unsupported-protocol', reachedNetwork: false };
+    if (errorCode === 4001 || DRIVER_ERROR.test(message))
+        return { outcome: 'driver-missing', reachedNetwork: false };
+    if (PARAMETER_ERROR.test(message))
+        return { outcome: 'invalid-connection-string', reachedNetwork: false };
+    if (NETWORK_ERROR.test(message))
+        return { outcome: 'connection-error', reachedNetwork: true };
+    return { outcome: 'unknown', reachedNetwork: false };
+}
+/**
+ * Calls the data source service connection test and classifies the result.
+ * A connection failure that names a network error proves the driver was registered and reached the
+ * network stage; neither that nor `success` proves the driver is complete for every query the provider
+ * supports. The raw service message is never returned because the service logs and may echo the
+ * connection string, which can contain credentials.
+ */
+async function testJdbcConnection(options) {
+    const url = origin(options.uri);
+    const timeout = options.timeoutMs ?? 5000;
+    if (!Number.isInteger(timeout) || timeout < 1 || timeout > 30000)
+        throw new Error('Invalid JDBC connection test timeout.');
+    if (typeof options.provider !== 'string' || !/^[A-Za-z][A-Za-z0-9 ._-]{0,63}$/.test(options.provider))
+        throw new Error('Invalid JDBC provider name.');
+    if (typeof options.connectionString !== 'string' || !options.connectionString.trim() || options.connectionString.length > MAX_CONNECTION_STRING || /[\x00-\x1f\x7f]/.test(options.connectionString))
+        throw new Error('Invalid JDBC connection string.');
+    const env = options.env ?? process.env;
+    const user = env.AFM_JDBC_USERNAME, password = env.AFM_JDBC_PASSWORD;
+    if (!user || !password || user.includes(':') || /[\r\n]/.test(user + password))
+        throw new Error('JDBC diagnostic credentials are missing or invalid.');
+    const authorization = 'Basic ' + Buffer.from(`${user}:${password}`, 'utf8').toString('base64');
+    const response = await post(url, '/api/datasource/connection/test', JSON.stringify({ providerName: options.provider, connectionString: options.connectionString }), authorization, timeout);
+    let parsed;
+    try {
+        parsed = JSON.parse(response);
+    }
+    catch {
+        throw new Error('Invalid JDBC connection test response.');
+    }
+    if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed))
+        throw new Error('Invalid JDBC connection test response.');
+    const body = parsed;
+    if (body.isSuccess === true)
+        return { provider: options.provider, outcome: 'success', errorCode: null, reachedNetwork: true };
+    const errorCode = typeof body.errorCode === 'number' && Number.isInteger(body.errorCode) ? body.errorCode : null;
+    const message = [body.errorMessage, body.message].filter(value => typeof value === 'string').join(' ');
+    return { provider: options.provider, errorCode, ...classify(errorCode, message) };
+}
+//# sourceMappingURL=jdbc-connection-test.js.map

package/dist/environment/jdbc-connection-test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jdbc-connection-test.js","sourceRoot":"","sources":["../../src/environment/jdbc-connection-test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkFA,gDAmBC;AArGD,2CAA6B;AA2B7B,MAAM,YAAY,GAAG,EAAE,GAAG,IAAI,CAAC;AAC/B,MAAM,qBAAqB,GAAG,IAAI,CAAC;AACnC,MAAM,eAAe,GAAG,mLAAmL,CAAC;AAC5M,MAAM,aAAa,GAAG,6IAA6I,CAAC;AACpK,MAAM,YAAY,GAAG,8CAA8C,CAAC;AAEpE,SAAS,MAAM,CAAC,KAAa;IAC3B,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QAAC,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAAC,CAAC;IACrF,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAC7P,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,IAAI,CAAC,GAAQ,EAAE,QAAgB,EAAE,IAAY,EAAE,aAAqB,EAAE,SAAiB;IAC9F,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,IAAI,GAAG,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;YAAC,OAAO,GAAG,IAAI,CAAC;YAAC,MAAM,CAAC,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC,CAAC;QAAC,CAAC,CAAC,CAAC,CAAC;QACpH,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC;YACvB,QAAQ,EAAE,OAAO;YACjB,QAAQ,EAAE,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ;YACzD,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,aAAa,EAAE,aAAa,EAAE,cAAc,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,OAAO,CAAC,MAAM,EAAE;YAC/G,KAAK,EAAE,KAAK;SACb,EAAE,QAAQ,CAAC,EAAE;YACZ,IAAI,QAAQ,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;gBAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;gBAAC,IAAI,EAAE,CAAC;gBAAC,OAAO;YAAC,CAAC;YACvE,MAAM,MAAM,GAAa,EAAE,CAAC;YAAC,IAAI,IAAI,GAAG,CAAC,CAAC;YAC1C,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,GAAG,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,IAAI,GAAG,YAAY,EAAE,CAAC;gBAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;gBAAC,IAAI,EAAE,CAAC;YAAC,CAAC;;gBAAM,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACpJ,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC3B,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;gBAAC,OAAO,GAAG,IAAI,CAAC;gBAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;YAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACnH,CAAC,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QACtE,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3C,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACtB,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACnB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,QAAQ,CAAC,SAAwB,EAAE,OAAe;IACzD,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,EAAE,OAAO,EAAE,sBAAsB,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;IAC1F,IAAI,SAAS,KAAK,IAAI,IAAI,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;IAClH,IAAI,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,2BAA2B,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;IAC1G,IAAI,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;IAC9F,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;AACvD,CAAC;AAED;;;;;;GAMG;AACI,KAAK,UAAU,kBAAkB,CAAC,OAAkC;IACzE,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC;IAC1C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,IAAI,OAAO,GAAG,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3H,IAAI,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,iCAAiC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACtJ,IAAI,OAAO,OAAO,CAAC,gBAAgB,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,IAAI,EAAE,IAAI,OAAO,CAAC,gBAAgB,CAAC,MAAM,GAAG,qBAAqB,IAAI,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACxP,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,MAAM,IAAI,GAAG,GAAG,CAAC,iBAAiB,EAAE,QAAQ,GAAG,GAAG,CAAC,iBAAiB,CAAC;IACrE,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACvJ,MAAM,aAAa,GAAG,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,QAAQ,EAAE,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC/F,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,iCAAiC,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,QAAQ,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC;IAC5L,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAAC,CAAC;IAC3G,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC9H,MAAM,IAAI,GAAG,MAAiG,CAAC;IAC/G,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI;QAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;IAC9H,MAAM,SAAS,GAAG,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;IACjH,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvG,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,SAAS,EAAE,GAAG,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,CAAC;AACpF,CAAC"}

package/dist/environment/jdbc-diagnostics.d.ts

@@ -0,0 +1,13 @@
+export interface JdbcDiagnostics {
+    health: 'ok';
+    unavailableProviders: string[];
+    externalListening: 'unverified';
+}
+export interface JdbcDiagnosticOptions {
+    uri: string;
+    timeoutMs?: number;
+    env?: NodeJS.ProcessEnv;
+}
+/** Reads status only; a loopback target does not prove the service binds only to loopback. */
+export declare function diagnoseJdbcService(options: JdbcDiagnosticOptions): Promise<JdbcDiagnostics>;
+//# sourceMappingURL=jdbc-diagnostics.d.ts.map

package/dist/environment/jdbc-diagnostics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jdbc-diagnostics.d.ts","sourceRoot":"","sources":["../../src/environment/jdbc-diagnostics.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,IAAI,CAAC;IACb,oBAAoB,EAAE,MAAM,EAAE,CAAC;IAC/B,iBAAiB,EAAE,YAAY,CAAC;CACjC;AAED,MAAM,WAAW,qBAAqB;IACpC,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACzB;AA6BD,8FAA8F;AAC9F,wBAAsB,mBAAmB,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,eAAe,CAAC,CAclG"}

package/dist/environment/jdbc-diagnostics.js

@@ -0,0 +1,108 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.diagnoseJdbcService = diagnoseJdbcService;
+const http = __importStar(require("http"));
+const MAX_RESPONSE = 64 * 1024;
+function origin(value) {
+    let url;
+    try {
+        url = new URL(value);
+    }
+    catch {
+        throw new Error('Invalid JDBC service URI.');
+    }
+    if (url.protocol !== 'http:' || !['127.0.0.1', '[::1]'].includes(url.hostname) || !url.port || url.username || url.password || url.pathname !== '/' || url.search || url.hash)
+        throw new Error('JDBC service URI must be an explicit loopback HTTP origin.');
+    return url;
+}
+function get(url, endpoint, timeoutMs, authorization) {
+    return new Promise((resolve, reject) => {
+        let settled = false;
+        const fail = () => { if (!settled) {
+            settled = true;
+            reject(new Error('JDBC diagnostic request failed.'));
+        } };
+        const req = http.request({ protocol: 'http:', hostname: url.hostname === '[::1]' ? '::1' : url.hostname, port: url.port, path: endpoint, method: 'GET', headers: authorization ? { Authorization: authorization } : {}, agent: false }, response => {
+            if (response.statusCode !== 200) {
+                response.resume();
+                fail();
+                return;
+            }
+            const chunks = [];
+            let size = 0;
+            response.on('data', (chunk) => { size += chunk.length; if (size > MAX_RESPONSE) {
+                response.destroy();
+                fail();
+            }
+            else
+                chunks.push(chunk); });
+            response.on('error', fail);
+            response.on('end', () => { if (!settled) {
+                settled = true;
+                resolve(Buffer.concat(chunks).toString('utf8'));
+            } });
+        });
+        const timer = setTimeout(() => { req.destroy(); fail(); }, timeoutMs);
+        req.on('close', () => clearTimeout(timer));
+        req.on('error', fail);
+        req.end();
+    });
+}
+/** Reads status only; a loopback target does not prove the service binds only to loopback. */
+async function diagnoseJdbcService(options) {
+    const url = origin(options.uri);
+    const timeout = options.timeoutMs ?? 5000;
+    if (!Number.isInteger(timeout) || timeout < 1 || timeout > 30000)
+        throw new Error('Invalid JDBC diagnostic timeout.');
+    const env = options.env ?? process.env;
+    const user = env.AFM_JDBC_USERNAME, password = env.AFM_JDBC_PASSWORD;
+    if (!user || !password || user.includes(':') || /[\r\n]/.test(user + password))
+        throw new Error('JDBC diagnostic credentials are missing or invalid.');
+    const auth = 'Basic ' + Buffer.from(`${user}:${password}`, 'utf8').toString('base64');
+    await get(url, '/api/healthcheck', timeout);
+    const body = await get(url, '/api/datasource/unavailableproviders/get', timeout, auth);
+    let providers;
+    try {
+        providers = JSON.parse(body);
+    }
+    catch {
+        throw new Error('Invalid JDBC provider response.');
+    }
+    if (!Array.isArray(providers) || providers.some(value => typeof value !== 'string' || value.length > 256 || /[\x00-\x1f\x7f]/.test(value)))
+        throw new Error('Invalid JDBC provider response.');
+    return { health: 'ok', unavailableProviders: providers, externalListening: 'unverified' };
+}
+//# sourceMappingURL=jdbc-diagnostics.js.map

package/dist/environment/jdbc-diagnostics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jdbc-diagnostics.js","sourceRoot":"","sources":["../../src/environment/jdbc-diagnostics.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA0CA,kDAcC;AAxDD,2CAA6B;AAc7B,MAAM,YAAY,GAAG,EAAE,GAAG,IAAI,CAAC;AAE/B,SAAS,MAAM,CAAC,KAAa;IAC3B,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QAAC,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAAC,CAAC;IACrF,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAC7P,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,GAAG,CAAC,GAAQ,EAAE,QAAgB,EAAE,SAAiB,EAAE,aAAsB;IAChF,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,IAAI,GAAG,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;YAAC,OAAO,GAAG,IAAI,CAAC;YAAC,MAAM,CAAC,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC,CAAC;QAAC,CAAC,CAAC,CAAC,CAAC;QAC/G,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,QAAQ,CAAC,EAAE;YACjP,IAAI,QAAQ,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;gBAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;gBAAC,IAAI,EAAE,CAAC;gBAAC,OAAO;YAAC,CAAC;YACvE,MAAM,MAAM,GAAa,EAAE,CAAC;YAAC,IAAI,IAAI,GAAG,CAAC,CAAC;YAC1C,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,GAAG,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,IAAI,GAAG,YAAY,EAAE,CAAC;gBAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;gBAAC,IAAI,EAAE,CAAC;YAAC,CAAC;;gBAAM,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACpJ,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC3B,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;gBAAC,OAAO,GAAG,IAAI,CAAC;gBAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;YAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACnH,CAAC,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QACtE,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3C,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACtB,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,8FAA8F;AACvF,KAAK,UAAU,mBAAmB,CAAC,OAA8B;IACtE,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC;IAC1C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,IAAI,OAAO,GAAG,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtH,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,MAAM,IAAI,GAAG,GAAG,CAAC,iBAAiB,EAAE,QAAQ,GAAG,GAAG,CAAC,iBAAiB,CAAC;IACrE,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACvJ,MAAM,IAAI,GAAG,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,QAAQ,EAAE,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACtF,MAAM,GAAG,CAAC,GAAG,EAAE,kBAAkB,EAAE,OAAO,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,GAAG,EAAE,0CAA0C,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IACvF,IAAI,SAAkB,CAAC;IACvB,IAAI,CAAC;QAAC,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAAC,CAAC;IACnG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAC/L,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAoB,EAAE,SAAS,EAAE,iBAAiB,EAAE,YAAY,EAAE,CAAC;AAC5F,CAAC"}