@hed-hog/core 0.0.386 → 0.0.390

package/dist/integration-profile/testers/http-probe.js

@@ -0,0 +1,140 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.pass = pass;
+exports.fail = fail;
+exports.requireFields = requireFields;
+exports.str = str;
+exports.assertHttpUrl = assertHttpUrl;
+exports.probeJson = probeJson;
+exports.redactSecrets = redactSecrets;
+exports.sanitizeTesterError = sanitizeTesterError;
+exports.describeHttpError = describeHttpError;
+/** Tamanho máximo de uma mensagem devolvida à UI (ela também é persistida no config). */
+const MAX_ERROR_LENGTH = 300;
+/** Atalho para um veredito de sucesso. */
+function pass(info, warning) {
+    return Object.assign(Object.assign({ ok: true }, (info ? { info } : {})), (warning ? { warning } : {}));
+}
+/** Atalho para um veredito de falha. */
+function fail(error) {
+    return { ok: false, error };
+}
+/**
+ * Exige que um campo esteja preenchido. Devolve `null` quando está tudo certo, ou o
+ * veredito de falha pronto — evita repetir o mesmo `if` em 31 testers.
+ */
+function requireFields(config, fields) {
+    var _a;
+    for (const [key, label] of fields) {
+        if (!String((_a = config[key]) !== null && _a !== void 0 ? _a : '').trim()) {
+            return fail(`${label} is required.`);
+        }
+    }
+    return null;
+}
+/** Lê uma chave do config como string já trimada. */
+function str(config, key) {
+    var _a;
+    return String((_a = config[key]) !== null && _a !== void 0 ? _a : '').trim();
+}
+/**
+ * Valida uma URL fornecida pelo usuário (host do Evolution, api_server do k8s,
+ * endpoint S3-compatible, base da ADN).
+ *
+ * Ranges privados são PERMITIDOS de propósito: k8s e Evolution self-hosted vivem em
+ * rede interna, e bloqueá-los quebraria o caso de uso principal. O que barramos são
+ * esquemas fora de http/https (file:, gopher:, etc.).
+ */
+function assertHttpUrl(raw, field) {
+    let url;
+    try {
+        url = new URL(raw);
+    }
+    catch (_a) {
+        throw new Error(`${field} is not a valid URL.`);
+    }
+    if (url.protocol !== 'http:' && url.protocol !== 'https:') {
+        throw new Error(`${field} must use http or https.`);
+    }
+    return url;
+}
+/**
+ * `fetch` que não lança em status != 2xx — o status faz parte do veredito na maioria
+ * dos testers (401 vs 404 vs 403 dizem coisas diferentes).
+ */
+async function probeJson(url, init, signal) {
+    const response = await fetch(url, Object.assign(Object.assign({}, init), { signal }));
+    const text = (await response.text().catch(() => '')).slice(0, 2000);
+    let body = {};
+    try {
+        body = text ? JSON.parse(text) : {};
+    }
+    catch (_a) {
+        body = {};
+    }
+    return { ok: response.ok, status: response.status, body, text };
+}
+/** Remove qualquer ocorrência dos segredos do texto. */
+function redactSecrets(text, secretValues) {
+    let out = text;
+    for (const secret of secretValues) {
+        // Segredos muito curtos (ex.: uma senha de 3 letras) casariam com palavras comuns
+        // e transformariam a mensagem em ruído; o risco real está nos tokens longos.
+        if (secret && secret.length >= 6) {
+            out = out.split(secret).join('***');
+        }
+    }
+    return out;
+}
+/**
+ * Converte qualquer erro em mensagem segura para a UI e para o config do perfil.
+ *
+ * Ordem importa: timeout e falha de DNS/conexão precisam de texto PRÓPRIO, senão o
+ * operador de um cluster sem saída para a internet lê "não foi possível validar" e
+ * conclui que a credencial está errada.
+ */
+function sanitizeTesterError(error, secretValues, host) {
+    var _a, _b;
+    const target = host ? ` (${host})` : '';
+    const name = (_a = error === null || error === void 0 ? void 0 : error.name) !== null && _a !== void 0 ? _a : '';
+    const code = String((_b = error === null || error === void 0 ? void 0 : error.code) !== null && _b !== void 0 ? _b : '');
+    const raw = error instanceof Error ? error.message : String(error !== null && error !== void 0 ? error : '');
+    if (name === 'AbortError' || name === 'TimeoutError' || code === 'ABORT_ERR') {
+        return `Timed out while contacting the provider${target}. Check the server's outbound network access.`;
+    }
+    const networkCode = [code, raw].join(' ');
+    if (/ENOTFOUND|EAI_AGAIN/.test(networkCode)) {
+        return `Host not found${target}. Check the address you typed.`;
+    }
+    if (/ECONNREFUSED/.test(networkCode)) {
+        return `Connection refused${target}. Check the address, the port and the firewall.`;
+    }
+    if (/ECONNRESET|EPIPE|ETIMEDOUT/.test(networkCode)) {
+        return `Connection interrupted${target}. Check the server's outbound network access.`;
+    }
+    if (/CERT_HAS_EXPIRED/.test(networkCode)) {
+        return `The provider's TLS certificate has expired${target}.`;
+    }
+    if (/DEPTH_ZERO_SELF_SIGNED_CERT|SELF_SIGNED_CERT_IN_CHAIN|UNABLE_TO_VERIFY_LEAF_SIGNATURE/.test(networkCode)) {
+        return `The provider's TLS certificate could not be verified${target}.`;
+    }
+    // Só a mensagem — nunca o objeto de erro inteiro nem o stack.
+    const message = redactSecrets(raw || 'Unexpected error.', secretValues).trim();
+    return message.length > MAX_ERROR_LENGTH
+        ? `${message.slice(0, MAX_ERROR_LENGTH - 1)}…`
+        : message;
+}
+/**
+ * Mensagem curta a partir de uma resposta HTTP de erro, procurando o campo de mensagem
+ * nos formatos mais comuns (`error.message`, `error_description`, `message`, `error`).
+ */
+function describeHttpError(result, fallback) {
+    var _a, _b, _c, _d, _e, _f, _g;
+    const body = (_a = result.body) !== null && _a !== void 0 ? _a : {};
+    const candidate = (_f = (_e = (_d = (_c = (_b = body === null || body === void 0 ? void 0 : body.error) === null || _b === void 0 ? void 0 : _b.message) !== null && _c !== void 0 ? _c : body === null || body === void 0 ? void 0 : body.error_description) !== null && _d !== void 0 ? _d : body === null || body === void 0 ? void 0 : body.message) !== null && _e !== void 0 ? _e : (typeof (body === null || body === void 0 ? void 0 : body.error) === 'string' ? body.error : null)) !== null && _f !== void 0 ? _f : (_g = body === null || body === void 0 ? void 0 : body.error) === null || _g === void 0 ? void 0 : _g.error_user_msg;
+    const message = String(candidate !== null && candidate !== void 0 ? candidate : '').trim();
+    if (message)
+        return message;
+    return `${fallback} (HTTP ${result.status})`;
+}
+//# sourceMappingURL=http-probe.js.map

package/dist/integration-profile/testers/http-probe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-probe.js","sourceRoot":"","sources":["../../../src/integration-profile/testers/http-probe.ts"],"names":[],"mappings":";;AAaA,oBAEC;AAGD,oBAEC;AAMD,sCAUC;AAGD,kBAEC;AAUD,sCAWC;AAeD,8BAgBC;AAGD,sCAUC;AASD,kDAoCC;AAMD,8CAaC;AAjKD,yFAAyF;AACzF,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAE7B,0CAA0C;AAC1C,SAAgB,IAAI,CAAC,IAAa,EAAE,OAAgB;IAClD,qCAAS,EAAE,EAAE,IAAI,IAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,GAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAG;AAClF,CAAC;AAED,wCAAwC;AACxC,SAAgB,IAAI,CAAC,KAAa;IAChC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAC9B,CAAC;AAED;;;GAGG;AACH,SAAgB,aAAa,CAC3B,MAA+B,EAC/B,MAA2C;;IAE3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,EAAE,CAAC;QAClC,IAAI,CAAC,MAAM,CAAC,MAAA,MAAM,CAAC,GAAG,CAAC,mCAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YACtC,OAAO,IAAI,CAAC,GAAG,KAAK,eAAe,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,qDAAqD;AACrD,SAAgB,GAAG,CAAC,MAA+B,EAAE,GAAW;;IAC9D,OAAO,MAAM,CAAC,MAAA,MAAM,CAAC,GAAG,CAAC,mCAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;AAC1C,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,aAAa,CAAC,GAAW,EAAE,KAAa;IACtD,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IAAC,WAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,sBAAsB,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,0BAA0B,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAWD;;;GAGG;AACI,KAAK,UAAU,SAAS,CAC7B,GAAW,EACX,IAAiB,EACjB,MAAmB;IAEnB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,kCAAO,IAAI,KAAE,MAAM,IAAG,CAAC;IACvD,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAK,CAAC,CAAC;IAErE,IAAI,IAAI,GAAQ,EAAE,CAAC;IACnB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACtC,CAAC;IAAC,WAAM,CAAC;QACP,IAAI,GAAG,EAAE,CAAC;IACZ,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAClE,CAAC;AAED,wDAAwD;AACxD,SAAgB,aAAa,CAAC,IAAY,EAAE,YAAsB;IAChE,IAAI,GAAG,GAAG,IAAI,CAAC;IACf,KAAK,MAAM,MAAM,IAAI,YAAY,EAAE,CAAC;QAClC,kFAAkF;QAClF,6EAA6E;QAC7E,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YACjC,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,mBAAmB,CACjC,KAAc,EACd,YAAsB,EACtB,IAAa;;IAEb,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACxC,MAAM,IAAI,GAAG,MAAC,KAA2B,aAA3B,KAAK,uBAAL,KAAK,CAAwB,IAAI,mCAAI,EAAE,CAAC;IACtD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAC,KAA2B,aAA3B,KAAK,uBAAL,KAAK,CAAwB,IAAI,mCAAI,EAAE,CAAC,CAAC;IAC9D,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,aAAL,KAAK,cAAL,KAAK,GAAI,EAAE,CAAC,CAAC;IAEzE,IAAI,IAAI,KAAK,YAAY,IAAI,IAAI,KAAK,cAAc,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;QAC7E,OAAO,0CAA0C,MAAM,+CAA+C,CAAC;IACzG,CAAC;IAED,MAAM,WAAW,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,qBAAqB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5C,OAAO,iBAAiB,MAAM,gCAAgC,CAAC;IACjE,CAAC;IACD,IAAI,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QACrC,OAAO,qBAAqB,MAAM,iDAAiD,CAAC;IACtF,CAAC;IACD,IAAI,4BAA4B,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QACnD,OAAO,yBAAyB,MAAM,+CAA+C,CAAC;IACxF,CAAC;IACD,IAAI,kBAAkB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QACzC,OAAO,6CAA6C,MAAM,GAAG,CAAC;IAChE,CAAC;IACD,IAAI,uFAAuF,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QAC9G,OAAO,uDAAuD,MAAM,GAAG,CAAC;IAC1E,CAAC;IAED,8DAA8D;IAC9D,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,IAAI,mBAAmB,EAAE,YAAY,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/E,OAAO,OAAO,CAAC,MAAM,GAAG,gBAAgB;QACtC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,GAAG,CAAC,CAAC,GAAG;QAC9C,CAAC,CAAC,OAAO,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,SAAgB,iBAAiB,CAAC,MAAmB,EAAE,QAAgB;;IACrE,MAAM,IAAI,GAAG,MAAA,MAAM,CAAC,IAAI,mCAAI,EAAE,CAAC;IAC/B,MAAM,SAAS,GACb,MAAA,MAAA,MAAA,MAAA,MAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,KAAK,0CAAE,OAAO,mCACpB,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,iBAAiB,mCACvB,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,OAAO,mCACb,CAAC,OAAO,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,KAAK,CAAA,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,mCACrD,MAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,KAAK,0CAAE,cAAc,CAAC;IAE9B,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,aAAT,SAAS,cAAT,SAAS,GAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/C,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAE5B,OAAO,GAAG,QAAQ,UAAU,MAAM,CAAC,MAAM,GAAG,CAAC;AAC/C,CAAC"}

package/dist/integration-profile/testers/index.d.ts

@@ -0,0 +1,12 @@
+import { IntegrationTester } from './integration-tester.types';
+/**
+ * Testadores que o core registra sozinho no boot.
+ *
+ * Providers de outras libraries (nfse-national, da `fiscal`) se registram no próprio
+ * módulo, via IntegrationTesterRegistry.
+ */
+export declare const BUILTIN_INTEGRATION_TESTERS: IntegrationTester[];
+export * from './http-probe';
+export * from './integration-tester.registry';
+export * from './integration-tester.types';
+//# sourceMappingURL=index.d.ts.map

package/dist/integration-profile/testers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/integration-profile/testers/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAM/D;;;;;GAKG;AACH,eAAO,MAAM,2BAA2B,EAAE,iBAAiB,EAS1D,CAAC;AAEF,cAAc,cAAc,CAAC;AAC7B,cAAc,+BAA+B,CAAC;AAC9C,cAAc,4BAA4B,CAAC"}

package/dist/integration-profile/testers/index.js

@@ -0,0 +1,45 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BUILTIN_INTEGRATION_TESTERS = void 0;
+const ai_testers_1 = require("./ai.testers");
+const captcha_testers_1 = require("./captcha.testers");
+const email_testers_1 = require("./email.testers");
+const infrastructure_testers_1 = require("./infrastructure.testers");
+const messaging_testers_1 = require("./messaging.testers");
+const oauth_testers_1 = require("./oauth.testers");
+const payment_testers_1 = require("./payment.testers");
+const storage_testers_1 = require("./storage.testers");
+/**
+ * Testadores que o core registra sozinho no boot.
+ *
+ * Providers de outras libraries (nfse-national, da `fiscal`) se registram no próprio
+ * módulo, via IntegrationTesterRegistry.
+ */
+exports.BUILTIN_INTEGRATION_TESTERS = [
+    ...email_testers_1.EMAIL_TESTERS,
+    ...messaging_testers_1.MESSAGING_TESTERS,
+    ...storage_testers_1.STORAGE_TESTERS,
+    ...ai_testers_1.AI_TESTERS,
+    ...oauth_testers_1.OAUTH_TESTERS,
+    ...payment_testers_1.PAYMENT_TESTERS,
+    ...captcha_testers_1.CAPTCHA_TESTERS,
+    ...infrastructure_testers_1.INFRASTRUCTURE_TESTERS,
+];
+__exportStar(require("./http-probe"), exports);
+__exportStar(require("./integration-tester.registry"), exports);
+__exportStar(require("./integration-tester.types"), exports);
+//# sourceMappingURL=index.js.map

package/dist/integration-profile/testers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/integration-profile/testers/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA,6CAA0C;AAC1C,uDAAoD;AACpD,mDAAgD;AAChD,qEAAkE;AAElE,2DAAwD;AACxD,mDAAgD;AAChD,uDAAoD;AACpD,uDAAoD;AAEpD;;;;;GAKG;AACU,QAAA,2BAA2B,GAAwB;IAC9D,GAAG,6BAAa;IAChB,GAAG,qCAAiB;IACpB,GAAG,iCAAe;IAClB,GAAG,uBAAU;IACb,GAAG,6BAAa;IAChB,GAAG,iCAAe;IAClB,GAAG,iCAAe;IAClB,GAAG,+CAAsB;CAC1B,CAAC;AAEF,+CAA6B;AAC7B,gEAA8C;AAC9C,6DAA2C"}

package/dist/integration-profile/testers/infrastructure.testers.d.ts

@@ -0,0 +1,3 @@
+import { IntegrationTester } from './integration-tester.types';
+export declare const INFRASTRUCTURE_TESTERS: IntegrationTester[];
+//# sourceMappingURL=infrastructure.testers.d.ts.map

package/dist/integration-profile/testers/infrastructure.testers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"infrastructure.testers.d.ts","sourceRoot":"","sources":["../../../src/integration-profile/testers/infrastructure.testers.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AA2G/D,eAAO,MAAM,sBAAsB,EAAE,iBAAiB,EAGrD,CAAC"}

package/dist/integration-profile/testers/infrastructure.testers.js

@@ -0,0 +1,105 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.INFRASTRUCTURE_TESTERS = void 0;
+const axios_1 = __importDefault(require("axios"));
+const node_https_1 = require("node:https");
+const http_probe_1 = require("./http-probe");
+/**
+ * Testadores dos providers de infraestrutura (autoscaling).
+ *
+ * DUPLICAÇÃO INTENCIONAL: `libraries/queue/src/scaling/{digital-ocean,kubernetes-scaler}
+ * .service.ts` têm um `testCredentials` equivalente, batendo nos mesmos endpoints.
+ * Não dá para reaproveitar: `@hed-hog-pro/queue` depende do core, então o core não pode
+ * importá-lo de volta — e os providers `digitalocean`/`kubernetes` são semeados por uma
+ * migration do core, existindo mesmo em instalações sem o pacote da fila. Registrar o
+ * tester pela queue deixaria o botão quebrado nessas instalações. Se mudar um endpoint
+ * aqui, olhe o outro lado também.
+ */
+const digitalOceanTester = {
+    providerSlug: 'digitalocean',
+    test: async (config, ctx) => {
+        var _a, _b, _c, _d, _e;
+        const missing = (0, http_probe_1.requireFields)(config, [
+            ['api_token', 'API token'],
+            ['cluster_id', 'Cluster ID'],
+        ]);
+        if (missing)
+            return missing;
+        const token = String((_a = config.api_token) !== null && _a !== void 0 ? _a : '');
+        const clusterId = (0, http_probe_1.str)(config, 'cluster_id');
+        const result = await (0, http_probe_1.probeJson)(`https://api.digitalocean.com/v2/kubernetes/clusters/${encodeURIComponent(clusterId)}`, { headers: { Authorization: `Bearer ${token}` } }, ctx.signal);
+        if (result.status === 401)
+            return (0, http_probe_1.fail)('Invalid DigitalOcean API token.');
+        if (result.status === 403) {
+            return (0, http_probe_1.fail)('This token has no permission to read Kubernetes clusters.');
+        }
+        if (result.status === 404) {
+            return (0, http_probe_1.fail)(`Cluster "${clusterId}" was not found in this account.`);
+        }
+        if (!result.ok) {
+            return (0, http_probe_1.fail)((0, http_probe_1.describeHttpError)(result, 'DigitalOcean rejected the request.'));
+        }
+        const cluster = (_c = (_b = result.body) === null || _b === void 0 ? void 0 : _b.kubernetes_cluster) !== null && _c !== void 0 ? _c : {};
+        const label = `${(_d = cluster.name) !== null && _d !== void 0 ? _d : clusterId} (${(_e = cluster.region) !== null && _e !== void 0 ? _e : (0, http_probe_1.str)(config, 'region')})`;
+        // O pool de vídeo é escolhido por nome; se ele sumiu do cluster, o autoscaling
+        // falha silenciosamente depois — melhor avisar agora.
+        const poolName = (0, http_probe_1.str)(config, 'video_node_pool_name');
+        if (poolName) {
+            const pools = Array.isArray(cluster.node_pools)
+                ? cluster.node_pools
+                : [];
+            if (pools.length > 0 && !pools.some((pool) => pool.name === poolName)) {
+                return (0, http_probe_1.pass)(label, `The node pool "${poolName}" no longer exists in this cluster.`);
+            }
+        }
+        return (0, http_probe_1.pass)(label);
+    },
+};
+const kubernetesTester = {
+    providerSlug: 'kubernetes',
+    test: async (config, ctx) => {
+        var _a, _b, _c, _d;
+        const missing = (0, http_probe_1.requireFields)(config, [
+            ['api_server', 'API server'],
+            ['token', 'Token'],
+        ]);
+        if (missing)
+            return missing;
+        const apiServer = (0, http_probe_1.assertHttpUrl)((0, http_probe_1.str)(config, 'api_server'), 'API server');
+        const caCert = String((_a = config.ca_cert) !== null && _a !== void 0 ? _a : '').trim();
+        // Não usamos `fetch` aqui: o CA do cluster é quase sempre privado e a API de fetch
+        // não aceita um contexto TLS customizado.
+        const httpsAgent = new node_https_1.Agent(caCert ? { ca: caCert } : { rejectUnauthorized: false });
+        try {
+            const response = await axios_1.default.get(`${apiServer.origin}/version`, {
+                headers: { Authorization: `Bearer ${String((_b = config.token) !== null && _b !== void 0 ? _b : '')}` },
+                httpsAgent,
+                signal: ctx.signal,
+                validateStatus: () => true,
+            });
+            if (response.status === 401)
+                return (0, http_probe_1.fail)('The Kubernetes token was rejected.');
+            if (response.status === 403) {
+                return (0, http_probe_1.fail)('This token has no permission to read the cluster version.');
+            }
+            if (response.status >= 400) {
+                return (0, http_probe_1.fail)(`The Kubernetes API returned HTTP ${response.status}.`);
+            }
+            const version = String((_d = (_c = response.data) === null || _c === void 0 ? void 0 : _c.gitVersion) !== null && _d !== void 0 ? _d : '').trim();
+            return caCert
+                ? (0, http_probe_1.pass)(`${apiServer.host}${version ? ` — ${version}` : ''}`)
+                : (0, http_probe_1.pass)(`${apiServer.host}${version ? ` — ${version}` : ''}`, 'No CA certificate provided: the TLS certificate was not verified.');
+        }
+        finally {
+            httpsAgent.destroy();
+        }
+    },
+};
+exports.INFRASTRUCTURE_TESTERS = [
+    digitalOceanTester,
+    kubernetesTester,
+];
+//# sourceMappingURL=infrastructure.testers.js.map

package/dist/integration-profile/testers/infrastructure.testers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"infrastructure.testers.js","sourceRoot":"","sources":["../../../src/integration-profile/testers/infrastructure.testers.ts"],"names":[],"mappings":";;;;;;AAAA,kDAA0B;AAC1B,2CAAmC;AACnC,6CAQsB;AAGtB;;;;;;;;;;GAUG;AAEH,MAAM,kBAAkB,GAAsB;IAC5C,YAAY,EAAE,cAAc;IAC5B,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;;QAC1B,MAAM,OAAO,GAAG,IAAA,0BAAa,EAAC,MAAM,EAAE;YACpC,CAAC,WAAW,EAAE,WAAW,CAAC;YAC1B,CAAC,YAAY,EAAE,YAAY,CAAC;SAC7B,CAAC,CAAC;QACH,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC;QAE5B,MAAM,KAAK,GAAG,MAAM,CAAC,MAAA,MAAM,CAAC,SAAS,mCAAI,EAAE,CAAC,CAAC;QAC7C,MAAM,SAAS,GAAG,IAAA,gBAAG,EAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,MAAM,IAAA,sBAAS,EAC5B,uDAAuD,kBAAkB,CAAC,SAAS,CAAC,EAAE,EACtF,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,EAAE,EACjD,GAAG,CAAC,MAAM,CACX,CAAC;QAEF,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,IAAA,iBAAI,EAAC,iCAAiC,CAAC,CAAC;QAC1E,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC1B,OAAO,IAAA,iBAAI,EAAC,2DAA2D,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC1B,OAAO,IAAA,iBAAI,EAAC,YAAY,SAAS,kCAAkC,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,OAAO,IAAA,iBAAI,EAAC,IAAA,8BAAiB,EAAC,MAAM,EAAE,oCAAoC,CAAC,CAAC,CAAC;QAC/E,CAAC;QAED,MAAM,OAAO,GAAG,MAAA,MAAA,MAAM,CAAC,IAAI,0CAAE,kBAAkB,mCAAI,EAAE,CAAC;QACtD,MAAM,KAAK,GAAG,GAAG,MAAA,OAAO,CAAC,IAAI,mCAAI,SAAS,KAAK,MAAA,OAAO,CAAC,MAAM,mCAAI,IAAA,gBAAG,EAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC;QAE1F,+EAA+E;QAC/E,sDAAsD;QACtD,MAAM,QAAQ,GAAG,IAAA,gBAAG,EAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;QACrD,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,KAAK,GAA6B,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC;gBACvE,CAAC,CAAC,OAAO,CAAC,UAAU;gBACpB,CAAC,CAAC,EAAE,CAAC;YACP,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,EAAE,CAAC;gBACtE,OAAO,IAAA,iBAAI,EAAC,KAAK,EAAE,kBAAkB,QAAQ,qCAAqC,CAAC,CAAC;YACtF,CAAC;QACH,CAAC;QACD,OAAO,IAAA,iBAAI,EAAC,KAAK,CAAC,CAAC;IACrB,CAAC;CACF,CAAC;AAEF,MAAM,gBAAgB,GAAsB;IAC1C,YAAY,EAAE,YAAY;IAC1B,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;;QAC1B,MAAM,OAAO,GAAG,IAAA,0BAAa,EAAC,MAAM,EAAE;YACpC,CAAC,YAAY,EAAE,YAAY,CAAC;YAC5B,CAAC,OAAO,EAAE,OAAO,CAAC;SACnB,CAAC,CAAC;QACH,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC;QAE5B,MAAM,SAAS,GAAG,IAAA,0BAAa,EAAC,IAAA,gBAAG,EAAC,MAAM,EAAE,YAAY,CAAC,EAAE,YAAY,CAAC,CAAC;QACzE,MAAM,MAAM,GAAG,MAAM,CAAC,MAAA,MAAM,CAAC,OAAO,mCAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAEnD,mFAAmF;QACnF,0CAA0C;QAC1C,MAAM,UAAU,GAAG,IAAI,kBAAK,CAC1B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,KAAK,EAAE,CACxD,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,eAAK,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,MAAM,UAAU,EAAE;gBAC9D,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,CAAC,MAAA,MAAM,CAAC,KAAK,mCAAI,EAAE,CAAC,EAAE,EAAE;gBAClE,UAAU;gBACV,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI;aAC3B,CAAC,CAAC;YAEH,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;gBAAE,OAAO,IAAA,iBAAI,EAAC,oCAAoC,CAAC,CAAC;YAC/E,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC5B,OAAO,IAAA,iBAAI,EAAC,2DAA2D,CAAC,CAAC;YAC3E,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;gBAC3B,OAAO,IAAA,iBAAI,EAAC,oCAAoC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;YACtE,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,CAAC,MAAA,MAAA,QAAQ,CAAC,IAAI,0CAAE,UAAU,mCAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAC/D,OAAO,MAAM;gBACX,CAAC,CAAC,IAAA,iBAAI,EAAC,GAAG,SAAS,CAAC,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,MAAM,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;gBAC5D,CAAC,CAAC,IAAA,iBAAI,EACF,GAAG,SAAS,CAAC,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,MAAM,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EACpD,mEAAmE,CACpE,CAAC;QACR,CAAC;gBAAS,CAAC;YACT,UAAU,CAAC,OAAO,EAAE,CAAC;QACvB,CAAC;IACH,CAAC;CACF,CAAC;AAEW,QAAA,sBAAsB,GAAwB;IACzD,kBAAkB;IAClB,gBAAgB;CACjB,CAAC"}

package/dist/integration-profile/testers/integration-tester.registry.d.ts

@@ -0,0 +1,17 @@
+import { IntegrationTester } from './integration-tester.types';
+/**
+ * Registro dos testadores de conexão, no mesmo padrão do WebhookProtocolRegistry e do
+ * FiscalProviderRegistry: os testers embutidos entram no boot do IntegrationProfileModule
+ * e libraries externas registram os seus (é assim que a `fiscal` pluga o nfse-national,
+ * que precisa abrir o certificado A1 — código que não pode viver no core).
+ */
+export declare class IntegrationTesterRegistry {
+    private readonly logger;
+    private readonly testers;
+    register(tester: IntegrationTester): void;
+    find(providerSlug: string | null | undefined): IntegrationTester | null;
+    has(providerSlug: string | null | undefined): boolean;
+    /** Providers com teste disponível (para a UI decidir se mostra o botão). */
+    list(): string[];
+}
+//# sourceMappingURL=integration-tester.registry.d.ts.map

package/dist/integration-profile/testers/integration-tester.registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"integration-tester.registry.d.ts","sourceRoot":"","sources":["../../../src/integration-profile/testers/integration-tester.registry.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAE/D;;;;;GAKG;AACH,qBACa,yBAAyB;IACpC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA8C;IACrE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAwC;IAEhE,QAAQ,CAAC,MAAM,EAAE,iBAAiB,GAAG,IAAI;IAWzC,IAAI,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,iBAAiB,GAAG,IAAI;IAKvE,GAAG,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO;IAIrD,4EAA4E;IAC5E,IAAI,IAAI,MAAM,EAAE;CAGjB"}

package/dist/integration-profile/testers/integration-tester.registry.js

@@ -0,0 +1,52 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var IntegrationTesterRegistry_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.IntegrationTesterRegistry = void 0;
+const common_1 = require("@nestjs/common");
+/**
+ * Registro dos testadores de conexão, no mesmo padrão do WebhookProtocolRegistry e do
+ * FiscalProviderRegistry: os testers embutidos entram no boot do IntegrationProfileModule
+ * e libraries externas registram os seus (é assim que a `fiscal` pluga o nfse-national,
+ * que precisa abrir o certificado A1 — código que não pode viver no core).
+ */
+let IntegrationTesterRegistry = IntegrationTesterRegistry_1 = class IntegrationTesterRegistry {
+    constructor() {
+        this.logger = new common_1.Logger(IntegrationTesterRegistry_1.name);
+        this.testers = new Map();
+    }
+    register(tester) {
+        const key = normalizeSlug(tester === null || tester === void 0 ? void 0 : tester.providerSlug);
+        if (!key)
+            throw new Error('Integration tester requires a providerSlug.');
+        if (this.testers.has(key)) {
+            this.logger.warn(`Integration tester for provider "${key}" was overwritten.`);
+        }
+        this.testers.set(key, tester);
+    }
+    find(providerSlug) {
+        var _a;
+        const key = normalizeSlug(providerSlug);
+        return key ? ((_a = this.testers.get(key)) !== null && _a !== void 0 ? _a : null) : null;
+    }
+    has(providerSlug) {
+        return this.find(providerSlug) !== null;
+    }
+    /** Providers com teste disponível (para a UI decidir se mostra o botão). */
+    list() {
+        return [...this.testers.keys()].sort();
+    }
+};
+exports.IntegrationTesterRegistry = IntegrationTesterRegistry;
+exports.IntegrationTesterRegistry = IntegrationTesterRegistry = IntegrationTesterRegistry_1 = __decorate([
+    (0, common_1.Injectable)()
+], IntegrationTesterRegistry);
+function normalizeSlug(slug) {
+    return String(slug !== null && slug !== void 0 ? slug : '').trim().toLowerCase();
+}
+//# sourceMappingURL=integration-tester.registry.js.map

package/dist/integration-profile/testers/integration-tester.registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"integration-tester.registry.js","sourceRoot":"","sources":["../../../src/integration-profile/testers/integration-tester.registry.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,2CAAoD;AAGpD;;;;;GAKG;AAEI,IAAM,yBAAyB,iCAA/B,MAAM,yBAAyB;IAA/B;QACY,WAAM,GAAG,IAAI,eAAM,CAAC,2BAAyB,CAAC,IAAI,CAAC,CAAC;QACpD,YAAO,GAAG,IAAI,GAAG,EAA6B,CAAC;IA0BlE,CAAC;IAxBC,QAAQ,CAAC,MAAyB;QAChC,MAAM,GAAG,GAAG,aAAa,CAAC,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,YAAY,CAAC,CAAC;QAChD,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QAEzE,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oCAAoC,GAAG,oBAAoB,CAAC,CAAC;QAChF,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAChC,CAAC;IAED,IAAI,CAAC,YAAuC;;QAC1C,MAAM,GAAG,GAAG,aAAa,CAAC,YAAY,CAAC,CAAC;QACxC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,MAAA,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,mCAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACtD,CAAC;IAED,GAAG,CAAC,YAAuC;QACzC,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,IAAI,CAAC;IAC1C,CAAC;IAED,4EAA4E;IAC5E,IAAI;QACF,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACzC,CAAC;CACF,CAAA;AA5BY,8DAAyB;oCAAzB,yBAAyB;IADrC,IAAA,mBAAU,GAAE;GACA,yBAAyB,CA4BrC;AAED,SAAS,aAAa,CAAC,IAA+B;IACpD,OAAO,MAAM,CAAC,IAAI,aAAJ,IAAI,cAAJ,IAAI,GAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AACjD,CAAC"}

package/dist/integration-profile/testers/integration-tester.types.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Contrato dos testadores de conexão dos Perfis de Integração.
+ *
+ * Cada provider (smtp, s3, stripe, google-oauth, …) implementa um `IntegrationTester`
+ * que faz uma chamada verificável contra o serviço real e devolve um veredito. O
+ * `IntegrationProfileService.test()` só despacha; nenhum `if (provider === 'x')` sobra lá.
+ *
+ * Os testers são objetos literais sem estado (mesmo estilo de integration-profile.utils.ts),
+ * não providers do Nest: assim cada spec é um teste puro de função com `fetch` mockado.
+ */
+/** Timeout padrão de um teste de conexão. */
+export declare const INTEGRATION_TEST_TIMEOUT_MS = 10000;
+export type IntegrationTestOutcome = {
+    ok: boolean;
+    /**
+     * Evidência legível do que foi verificado (nome do bucket, da conta, do cluster…).
+     * NUNCA pode conter segredo: vai para a UI e é gravada no config do perfil.
+     */
+    info?: string;
+    /** Motivo legível da falha. NUNCA contém segredo nem stack trace. */
+    error?: string;
+    /**
+     * Credencial válida, mas algo secundário não pôde ser comprovado (domínio não
+     * verificado, service account sem acesso ao app, pool inexistente). Não reprova.
+     */
+    warning?: string;
+};
+export type IntegrationTestContext = {
+    /** Já combinado com o timeout do tester. Repassar a TODA chamada de rede. */
+    signal: AbortSignal;
+    /** Slug do integration_type (email, storage, oauth, …). */
+    typeSlug: string;
+    /** Slug do provider sendo testado. */
+    providerSlug: string;
+    /**
+     * Valores dos segredos deste perfil, usados só para redigir mensagens de erro
+     * (algumas APIs ecoam a entrada de volta). Nunca logar nem devolver.
+     */
+    secretValues: string[];
+};
+export interface IntegrationTester {
+    /** Slug do integration_provider que esta implementação atende. */
+    readonly providerSlug: string;
+    /** Timeout específico deste provider (default INTEGRATION_TEST_TIMEOUT_MS). */
+    readonly timeoutMs?: number;
+    /**
+     * `config` chega DECIFRADO e já mesclado com os segredos armazenados
+     * ("deixe em branco para manter"), então o tester nunca vê a máscara.
+     *
+     * Não deve lançar: devolve `{ ok: false, error }`. Exceções que escaparem viram
+     * `ok: false` com a mensagem sanitizada no dispatcher.
+     */
+    test(config: Record<string, unknown>, ctx: IntegrationTestContext): Promise<IntegrationTestOutcome>;
+}
+//# sourceMappingURL=integration-tester.types.d.ts.map

package/dist/integration-profile/testers/integration-tester.types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"integration-tester.types.d.ts","sourceRoot":"","sources":["../../../src/integration-profile/testers/integration-tester.types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,6CAA6C;AAC7C,eAAO,MAAM,2BAA2B,QAAS,CAAC;AAElD,MAAM,MAAM,sBAAsB,GAAG;IACnC,EAAE,EAAE,OAAO,CAAC;IACZ;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,qEAAqE;IACrE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,6EAA6E;IAC7E,MAAM,EAAE,WAAW,CAAC;IACpB,2DAA2D;IAC3D,QAAQ,EAAE,MAAM,CAAC;IACjB,sCAAsC;IACtC,YAAY,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB,CAAC;AAEF,MAAM,WAAW,iBAAiB;IAChC,kEAAkE;IAClE,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,+EAA+E;IAC/E,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;;;OAMG;IACH,IAAI,CACF,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,GAAG,EAAE,sBAAsB,GAC1B,OAAO,CAAC,sBAAsB,CAAC,CAAC;CACpC"}

package/dist/integration-profile/testers/integration-tester.types.js

@@ -0,0 +1,16 @@
+"use strict";
+/**
+ * Contrato dos testadores de conexão dos Perfis de Integração.
+ *
+ * Cada provider (smtp, s3, stripe, google-oauth, …) implementa um `IntegrationTester`
+ * que faz uma chamada verificável contra o serviço real e devolve um veredito. O
+ * `IntegrationProfileService.test()` só despacha; nenhum `if (provider === 'x')` sobra lá.
+ *
+ * Os testers são objetos literais sem estado (mesmo estilo de integration-profile.utils.ts),
+ * não providers do Nest: assim cada spec é um teste puro de função com `fetch` mockado.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.INTEGRATION_TEST_TIMEOUT_MS = void 0;
+/** Timeout padrão de um teste de conexão. */
+exports.INTEGRATION_TEST_TIMEOUT_MS = 10000;
+//# sourceMappingURL=integration-tester.types.js.map

package/dist/integration-profile/testers/integration-tester.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"integration-tester.types.js","sourceRoot":"","sources":["../../../src/integration-profile/testers/integration-tester.types.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;;AAEH,6CAA6C;AAChC,QAAA,2BAA2B,GAAG,KAAM,CAAC"}

package/dist/integration-profile/testers/messaging.testers.d.ts

@@ -0,0 +1,3 @@
+import { IntegrationTester } from './integration-tester.types';
+export declare const MESSAGING_TESTERS: IntegrationTester[];
+//# sourceMappingURL=messaging.testers.d.ts.map

package/dist/integration-profile/testers/messaging.testers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"messaging.testers.d.ts","sourceRoot":"","sources":["../../../src/integration-profile/testers/messaging.testers.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAwF/D,eAAO,MAAM,iBAAiB,EAAE,iBAAiB,EAGhD,CAAC"}

package/dist/integration-profile/testers/messaging.testers.js

@@ -0,0 +1,70 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MESSAGING_TESTERS = void 0;
+const integration_profile_utils_1 = require("../integration-profile.utils");
+const http_probe_1 = require("./http-probe");
+const evolutionApiTester = {
+    providerSlug: 'evolution-api',
+    test: async (config, ctx) => {
+        var _a, _b, _c, _d, _e, _f;
+        const missing = (0, http_probe_1.requireFields)(config, [
+            ['host', 'Evolution API host'],
+            ['token', 'Evolution API token'],
+            ['instance_name', 'Instance name'],
+        ]);
+        if (missing)
+            return missing;
+        const base = (0, http_probe_1.assertHttpUrl)((0, http_probe_1.str)(config, 'host'), 'Evolution API host');
+        const instance = (0, http_probe_1.str)(config, 'instance_name');
+        const url = `${base.origin}/instance/connectionState/${encodeURIComponent(instance)}`;
+        const result = await (0, http_probe_1.probeJson)(url, { headers: { apikey: String((_a = config.token) !== null && _a !== void 0 ? _a : '') } }, ctx.signal);
+        if (result.status === 401 || result.status === 403) {
+            return (0, http_probe_1.fail)('Invalid Evolution API token.');
+        }
+        if (result.status === 404) {
+            return (0, http_probe_1.fail)(`Instance "${instance}" was not found on this Evolution API server.`);
+        }
+        if (!result.ok) {
+            return (0, http_probe_1.fail)((0, http_probe_1.describeHttpError)(result, 'Evolution API rejected the request.'));
+        }
+        const state = String((_f = (_d = (_c = (_b = result.body) === null || _b === void 0 ? void 0 : _b.instance) === null || _c === void 0 ? void 0 : _c.state) !== null && _d !== void 0 ? _d : (_e = result.body) === null || _e === void 0 ? void 0 : _e.state) !== null && _f !== void 0 ? _f : '').trim();
+        // Credencial válida mas sessão desconectada: o perfil está certo e o QR code é
+        // outro problema — avisar sem reprovar.
+        if (state && state !== 'open') {
+            return (0, http_probe_1.pass)(`${instance} — ${state}`, `The instance is not connected (state: ${state}). Scan the QR code in Evolution API.`);
+        }
+        return (0, http_probe_1.pass)(`${instance}${state ? ` — ${state}` : ''}`);
+    },
+};
+/**
+ * Valida um perfil whatsapp-official contra a Graph API (lê o WABA com o token).
+ * Nunca devolve o token/secret na resposta.
+ */
+const whatsappOfficialTester = {
+    providerSlug: 'whatsapp-official',
+    test: async (config, ctx) => {
+        var _a, _b;
+        const cfg = (0, integration_profile_utils_1.buildWhatsappOfficialConfigFromIntegration)(config);
+        if (!cfg.accessToken)
+            return (0, http_probe_1.fail)('WhatsApp access token is required.');
+        if (!cfg.wabaId)
+            return (0, http_probe_1.fail)('WhatsApp Business Account ID is required.');
+        if (!cfg.appSecret) {
+            return (0, http_probe_1.fail)('Meta App Secret is required to validate webhook signatures.');
+        }
+        if (!cfg.verifyToken)
+            return (0, http_probe_1.fail)('Webhook verify token is required.');
+        const url = `https://graph.facebook.com/${cfg.graphApiVersion}/${encodeURIComponent(cfg.wabaId)}?fields=id,name`;
+        const result = await (0, http_probe_1.probeJson)(url, { headers: { Authorization: `Bearer ${cfg.accessToken}` } }, ctx.signal);
+        if (!result.ok) {
+            // A mensagem da Meta não contém o token; ainda assim só propagamos o texto dela.
+            return (0, http_probe_1.fail)(`WhatsApp validation failed: ${(0, http_probe_1.describeHttpError)(result, 'Graph API rejected the request.')}`);
+        }
+        return (0, http_probe_1.pass)(String((_b = (_a = result.body) === null || _a === void 0 ? void 0 : _a.name) !== null && _b !== void 0 ? _b : '') || cfg.wabaId);
+    },
+};
+exports.MESSAGING_TESTERS = [
+    evolutionApiTester,
+    whatsappOfficialTester,
+];
+//# sourceMappingURL=messaging.testers.js.map

package/dist/integration-profile/testers/messaging.testers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"messaging.testers.js","sourceRoot":"","sources":["../../../src/integration-profile/testers/messaging.testers.ts"],"names":[],"mappings":";;;AAAA,4EAA0F;AAC1F,6CAQsB;AAGtB,MAAM,kBAAkB,GAAsB;IAC5C,YAAY,EAAE,eAAe;IAC7B,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;;QAC1B,MAAM,OAAO,GAAG,IAAA,0BAAa,EAAC,MAAM,EAAE;YACpC,CAAC,MAAM,EAAE,oBAAoB,CAAC;YAC9B,CAAC,OAAO,EAAE,qBAAqB,CAAC;YAChC,CAAC,eAAe,EAAE,eAAe,CAAC;SACnC,CAAC,CAAC;QACH,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC;QAE5B,MAAM,IAAI,GAAG,IAAA,0BAAa,EAAC,IAAA,gBAAG,EAAC,MAAM,EAAE,MAAM,CAAC,EAAE,oBAAoB,CAAC,CAAC;QACtE,MAAM,QAAQ,GAAG,IAAA,gBAAG,EAAC,MAAM,EAAE,eAAe,CAAC,CAAC;QAC9C,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,6BAA6B,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;QAEtF,MAAM,MAAM,GAAG,MAAM,IAAA,sBAAS,EAC5B,GAAG,EACH,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAA,MAAM,CAAC,KAAK,mCAAI,EAAE,CAAC,EAAE,EAAE,EACnD,GAAG,CAAC,MAAM,CACX,CAAC;QAEF,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACnD,OAAO,IAAA,iBAAI,EAAC,8BAA8B,CAAC,CAAC;QAC9C,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC1B,OAAO,IAAA,iBAAI,EAAC,aAAa,QAAQ,+CAA+C,CAAC,CAAC;QACpF,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,OAAO,IAAA,iBAAI,EAAC,IAAA,8BAAiB,EAAC,MAAM,EAAE,qCAAqC,CAAC,CAAC,CAAC;QAChF,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,CAClB,MAAA,MAAA,MAAA,MAAA,MAAM,CAAC,IAAI,0CAAE,QAAQ,0CAAE,KAAK,mCAAI,MAAA,MAAM,CAAC,IAAI,0CAAE,KAAK,mCAAI,EAAE,CACzD,CAAC,IAAI,EAAE,CAAC;QAET,+EAA+E;QAC/E,wCAAwC;QACxC,IAAI,KAAK,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;YAC9B,OAAO,IAAA,iBAAI,EACT,GAAG,QAAQ,MAAM,KAAK,EAAE,EACxB,yCAAyC,KAAK,uCAAuC,CACtF,CAAC;QACJ,CAAC;QACD,OAAO,IAAA,iBAAI,EAAC,GAAG,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC1D,CAAC;CACF,CAAC;AAEF;;;GAGG;AACH,MAAM,sBAAsB,GAAsB;IAChD,YAAY,EAAE,mBAAmB;IACjC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;;QAC1B,MAAM,GAAG,GAAG,IAAA,sEAA0C,EAAC,MAAM,CAAC,CAAC;QAE/D,IAAI,CAAC,GAAG,CAAC,WAAW;YAAE,OAAO,IAAA,iBAAI,EAAC,oCAAoC,CAAC,CAAC;QACxE,IAAI,CAAC,GAAG,CAAC,MAAM;YAAE,OAAO,IAAA,iBAAI,EAAC,2CAA2C,CAAC,CAAC;QAC1E,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;YACnB,OAAO,IAAA,iBAAI,EAAC,6DAA6D,CAAC,CAAC;QAC7E,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,WAAW;YAAE,OAAO,IAAA,iBAAI,EAAC,mCAAmC,CAAC,CAAC;QAEvE,MAAM,GAAG,GAAG,8BAA8B,GAAG,CAAC,eAAe,IAAI,kBAAkB,CACjF,GAAG,CAAC,MAAM,CACX,iBAAiB,CAAC;QAEnB,MAAM,MAAM,GAAG,MAAM,IAAA,sBAAS,EAC5B,GAAG,EACH,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,GAAG,CAAC,WAAW,EAAE,EAAE,EAAE,EAC3D,GAAG,CAAC,MAAM,CACX,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,iFAAiF;YACjF,OAAO,IAAA,iBAAI,EACT,+BAA+B,IAAA,8BAAiB,EAC9C,MAAM,EACN,iCAAiC,CAClC,EAAE,CACJ,CAAC;QACJ,CAAC;QAED,OAAO,IAAA,iBAAI,EAAC,MAAM,CAAC,MAAA,MAAA,MAAM,CAAC,IAAI,0CAAE,IAAI,mCAAI,EAAE,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IAC7D,CAAC;CACF,CAAC;AAEW,QAAA,iBAAiB,GAAwB;IACpD,kBAAkB;IAClB,sBAAsB;CACvB,CAAC"}

package/dist/integration-profile/testers/oauth.testers.d.ts

@@ -0,0 +1,3 @@
+import { IntegrationTester } from './integration-tester.types';
+export declare const OAUTH_TESTERS: IntegrationTester[];
+//# sourceMappingURL=oauth.testers.d.ts.map

package/dist/integration-profile/testers/oauth.testers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.testers.d.ts","sourceRoot":"","sources":["../../../src/integration-profile/testers/oauth.testers.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AA+R/D,eAAO,MAAM,aAAa,EAAE,iBAAiB,EAQ5C,CAAC"}