@hed-hog/core 0.0.387 → 0.0.393

package/dist/integration-profile/testers/email.testers.d.ts

@@ -0,0 +1,3 @@
+import { IntegrationTester } from './integration-tester.types';
+export declare const EMAIL_TESTERS: IntegrationTester[];
+//# sourceMappingURL=email.testers.d.ts.map

package/dist/integration-profile/testers/email.testers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"email.testers.d.ts","sourceRoot":"","sources":["../../../src/integration-profile/testers/email.testers.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AA8K/D,eAAO,MAAM,aAAa,EAAE,iBAAiB,EAM5C,CAAC"}

package/dist/integration-profile/testers/email.testers.js

@@ -0,0 +1,156 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EMAIL_TESTERS = void 0;
+const api_mail_1 = require("@hed-hog/api-mail");
+const http_probe_1 = require("./http-probe");
+/**
+ * Testadores dos providers de e-mail.
+ *
+ * Todos exigem `from_email`: sem remetente o perfil não envia nada, e essa validação
+ * já era o contrato do teste antes de existirem chamadas de rede.
+ */
+const smtpTester = {
+    providerSlug: 'smtp',
+    test: async (config) => {
+        var _a, _b;
+        const missing = (0, http_probe_1.requireFields)(config, [
+            ['host', 'SMTP host'],
+            ['from_email', 'Sender email'],
+        ]);
+        if (missing)
+            return missing;
+        const result = await (0, api_mail_1.verifySmtpConnection)({
+            host: (0, http_probe_1.str)(config, 'host'),
+            port: Number((_a = config.port) !== null && _a !== void 0 ? _a : 587),
+            secure: Boolean(config.secure),
+            username: (0, http_probe_1.str)(config, 'username'),
+            password: String((_b = config.password) !== null && _b !== void 0 ? _b : ''),
+            timeoutMs: 8000,
+        });
+        return result.ok ? (0, http_probe_1.pass)(result.info) : (0, http_probe_1.fail)(result.error);
+    },
+};
+const sesTester = {
+    providerSlug: 'ses',
+    test: async (config, ctx) => {
+        var _a;
+        const missing = (0, http_probe_1.requireFields)(config, [
+            ['region', 'AWS region'],
+            ['access_key_id', 'Access key ID'],
+            ['secret_access_key', 'Secret access key'],
+            ['from_email', 'Sender email'],
+        ]);
+        if (missing)
+            return missing;
+        const result = await (0, api_mail_1.verifySesCredentials)({
+            region: (0, http_probe_1.str)(config, 'region'),
+            accessKeyId: (0, http_probe_1.str)(config, 'access_key_id'),
+            secretAccessKey: String((_a = config.secret_access_key) !== null && _a !== void 0 ? _a : ''),
+            signal: ctx.signal,
+        });
+        return result.ok ? (0, http_probe_1.pass)(result.info) : (0, http_probe_1.fail)(result.error);
+    },
+};
+const gmailTester = {
+    providerSlug: 'gmail',
+    test: async (config, ctx) => {
+        var _a, _b, _c, _d;
+        const missing = (0, http_probe_1.requireFields)(config, [
+            ['client_id', 'Client ID'],
+            ['client_secret', 'Client secret'],
+            ['refresh_token', 'Refresh token'],
+            ['from_email', 'Sender email'],
+        ]);
+        if (missing)
+            return missing;
+        // Troca real do refresh token: separa credencial de app errada (invalid_client)
+        // de autorização revogada pelo usuário (invalid_grant).
+        const result = await (0, http_probe_1.probeJson)('https://oauth2.googleapis.com/token', {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+            body: new URLSearchParams({
+                client_id: (0, http_probe_1.str)(config, 'client_id'),
+                client_secret: String((_a = config.client_secret) !== null && _a !== void 0 ? _a : ''),
+                refresh_token: String((_b = config.refresh_token) !== null && _b !== void 0 ? _b : ''),
+                grant_type: 'refresh_token',
+            }).toString(),
+        }, ctx.signal);
+        if (result.ok) {
+            return (0, http_probe_1.pass)(`Gmail authorized for ${(0, http_probe_1.str)(config, 'from_email')}`);
+        }
+        const code = String((_d = (_c = result.body) === null || _c === void 0 ? void 0 : _c.error) !== null && _d !== void 0 ? _d : '');
+        if (code === 'invalid_client') {
+            return (0, http_probe_1.fail)('Invalid Client ID or Client secret.');
+        }
+        if (code === 'invalid_grant') {
+            return (0, http_probe_1.fail)('The refresh token is invalid or was revoked. Authorize the account again.');
+        }
+        return (0, http_probe_1.fail)((0, http_probe_1.describeHttpError)(result, 'Google rejected the credentials.'));
+    },
+};
+const resendTester = {
+    providerSlug: 'resend',
+    test: async (config, ctx) => {
+        var _a, _b, _c;
+        const missing = (0, http_probe_1.requireFields)(config, [
+            ['api_token', 'Resend API token'],
+            ['domain', 'Resend sending domain'],
+        ]);
+        if (missing)
+            return missing;
+        const domain = (0, http_probe_1.str)(config, 'domain').toLowerCase();
+        const result = await (0, http_probe_1.probeJson)('https://api.resend.com/domains', { headers: { Authorization: `Bearer ${String((_a = config.api_token) !== null && _a !== void 0 ? _a : '')}` } }, ctx.signal);
+        if (result.status === 401 || result.status === 403) {
+            return (0, http_probe_1.fail)('Invalid Resend API token.');
+        }
+        if (!result.ok) {
+            return (0, http_probe_1.fail)((0, http_probe_1.describeHttpError)(result, 'Resend rejected the credentials.'));
+        }
+        const domains = Array.isArray((_b = result.body) === null || _b === void 0 ? void 0 : _b.data)
+            ? result.body.data
+            : [];
+        const match = domains.find((item) => { var _a; return String((_a = item === null || item === void 0 ? void 0 : item.name) !== null && _a !== void 0 ? _a : '').toLowerCase() === domain; });
+        if (!match) {
+            return (0, http_probe_1.pass)(`Resend token is valid (${domains.length} domain(s))`, `The domain "${domain}" is not registered in this Resend account.`);
+        }
+        if (String((_c = match.status) !== null && _c !== void 0 ? _c : '').toLowerCase() !== 'verified') {
+            return (0, http_probe_1.pass)(`Resend token is valid — ${domain}`, `The domain "${domain}" is not verified yet (status: ${match.status}).`);
+        }
+        return (0, http_probe_1.pass)(`Resend — ${domain} (verified)`);
+    },
+};
+/**
+ * IMAP é o único provider de e-mail que não envia — ele lê uma caixa. Por isso
+ * é o único que não exige `from_email`.
+ */
+const imapTester = {
+    providerSlug: 'imap',
+    test: async (config) => {
+        var _a, _b;
+        const missing = (0, http_probe_1.requireFields)(config, [
+            ['host', 'IMAP host'],
+            ['username', 'Username'],
+            ['password', 'Password'],
+        ]);
+        if (missing)
+            return missing;
+        const result = await (0, api_mail_1.verifyImapConnection)({
+            host: (0, http_probe_1.str)(config, 'host'),
+            port: Number((_a = config.port) !== null && _a !== void 0 ? _a : 993),
+            secure: config.secure === undefined ? true : Boolean(config.secure),
+            username: (0, http_probe_1.str)(config, 'username'),
+            password: String((_b = config.password) !== null && _b !== void 0 ? _b : ''),
+            folder: (0, http_probe_1.str)(config, 'folder') || 'INBOX',
+            timeoutMs: 10000,
+        });
+        return result.ok ? (0, http_probe_1.pass)(result.info) : (0, http_probe_1.fail)(result.error);
+    },
+};
+exports.EMAIL_TESTERS = [
+    smtpTester,
+    sesTester,
+    gmailTester,
+    resendTester,
+    imapTester,
+];
+//# sourceMappingURL=email.testers.js.map

package/dist/integration-profile/testers/email.testers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"email.testers.js","sourceRoot":"","sources":["../../../src/integration-profile/testers/email.testers.ts"],"names":[],"mappings":";;;AAAA,gDAI2B;AAC3B,6CAOsB;AAGtB;;;;;GAKG;AAEH,MAAM,UAAU,GAAsB;IACpC,YAAY,EAAE,MAAM;IACpB,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;;QACrB,MAAM,OAAO,GAAG,IAAA,0BAAa,EAAC,MAAM,EAAE;YACpC,CAAC,MAAM,EAAE,WAAW,CAAC;YACrB,CAAC,YAAY,EAAE,cAAc,CAAC;SAC/B,CAAC,CAAC;QACH,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC;QAE5B,MAAM,MAAM,GAAG,MAAM,IAAA,+BAAoB,EAAC;YACxC,IAAI,EAAE,IAAA,gBAAG,EAAC,MAAM,EAAE,MAAM,CAAC;YACzB,IAAI,EAAE,MAAM,CAAC,MAAA,MAAM,CAAC,IAAI,mCAAI,GAAG,CAAC;YAChC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;YAC9B,QAAQ,EAAE,IAAA,gBAAG,EAAC,MAAM,EAAE,UAAU,CAAC;YACjC,QAAQ,EAAE,MAAM,CAAC,MAAA,MAAM,CAAC,QAAQ,mCAAI,EAAE,CAAC;YACvC,SAAS,EAAE,IAAK;SACjB,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,IAAA,iBAAI,EAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAA,iBAAI,EAAC,MAAM,CAAC,KAAM,CAAC,CAAC;IAC7D,CAAC;CACF,CAAC;AAEF,MAAM,SAAS,GAAsB;IACnC,YAAY,EAAE,KAAK;IACnB,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;;QAC1B,MAAM,OAAO,GAAG,IAAA,0BAAa,EAAC,MAAM,EAAE;YACpC,CAAC,QAAQ,EAAE,YAAY,CAAC;YACxB,CAAC,eAAe,EAAE,eAAe,CAAC;YAClC,CAAC,mBAAmB,EAAE,mBAAmB,CAAC;YAC1C,CAAC,YAAY,EAAE,cAAc,CAAC;SAC/B,CAAC,CAAC;QACH,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC;QAE5B,MAAM,MAAM,GAAG,MAAM,IAAA,+BAAoB,EAAC;YACxC,MAAM,EAAE,IAAA,gBAAG,EAAC,MAAM,EAAE,QAAQ,CAAC;YAC7B,WAAW,EAAE,IAAA,gBAAG,EAAC,MAAM,EAAE,eAAe,CAAC;YACzC,eAAe,EAAE,MAAM,CAAC,MAAA,MAAM,CAAC,iBAAiB,mCAAI,EAAE,CAAC;YACvD,MAAM,EAAE,GAAG,CAAC,MAAM;SACnB,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,IAAA,iBAAI,EAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAA,iBAAI,EAAC,MAAM,CAAC,KAAM,CAAC,CAAC;IAC7D,CAAC;CACF,CAAC;AAEF,MAAM,WAAW,GAAsB;IACrC,YAAY,EAAE,OAAO;IACrB,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;;QAC1B,MAAM,OAAO,GAAG,IAAA,0BAAa,EAAC,MAAM,EAAE;YACpC,CAAC,WAAW,EAAE,WAAW,CAAC;YAC1B,CAAC,eAAe,EAAE,eAAe,CAAC;YAClC,CAAC,eAAe,EAAE,eAAe,CAAC;YAClC,CAAC,YAAY,EAAE,cAAc,CAAC;SAC/B,CAAC,CAAC;QACH,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC;QAE5B,gFAAgF;QAChF,wDAAwD;QACxD,MAAM,MAAM,GAAG,MAAM,IAAA,sBAAS,EAC5B,qCAAqC,EACrC;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;YAChE,IAAI,EAAE,IAAI,eAAe,CAAC;gBACxB,SAAS,EAAE,IAAA,gBAAG,EAAC,MAAM,EAAE,WAAW,CAAC;gBACnC,aAAa,EAAE,MAAM,CAAC,MAAA,MAAM,CAAC,aAAa,mCAAI,EAAE,CAAC;gBACjD,aAAa,EAAE,MAAM,CAAC,MAAA,MAAM,CAAC,aAAa,mCAAI,EAAE,CAAC;gBACjD,UAAU,EAAE,eAAe;aAC5B,CAAC,CAAC,QAAQ,EAAE;SACd,EACD,GAAG,CAAC,MAAM,CACX,CAAC;QAEF,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;YACd,OAAO,IAAA,iBAAI,EAAC,wBAAwB,IAAA,gBAAG,EAAC,MAAM,EAAE,YAAY,CAAC,EAAE,CAAC,CAAC;QACnE,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,CAAC,MAAA,MAAA,MAAM,CAAC,IAAI,0CAAE,KAAK,mCAAI,EAAE,CAAC,CAAC;QAC9C,IAAI,IAAI,KAAK,gBAAgB,EAAE,CAAC;YAC9B,OAAO,IAAA,iBAAI,EAAC,qCAAqC,CAAC,CAAC;QACrD,CAAC;QACD,IAAI,IAAI,KAAK,eAAe,EAAE,CAAC;YAC7B,OAAO,IAAA,iBAAI,EACT,2EAA2E,CAC5E,CAAC;QACJ,CAAC;QACD,OAAO,IAAA,iBAAI,EAAC,IAAA,8BAAiB,EAAC,MAAM,EAAE,kCAAkC,CAAC,CAAC,CAAC;IAC7E,CAAC;CACF,CAAC;AAEF,MAAM,YAAY,GAAsB;IACtC,YAAY,EAAE,QAAQ;IACtB,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;;QAC1B,MAAM,OAAO,GAAG,IAAA,0BAAa,EAAC,MAAM,EAAE;YACpC,CAAC,WAAW,EAAE,kBAAkB,CAAC;YACjC,CAAC,QAAQ,EAAE,uBAAuB,CAAC;SACpC,CAAC,CAAC;QACH,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC;QAE5B,MAAM,MAAM,GAAG,IAAA,gBAAG,EAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;QACnD,MAAM,MAAM,GAAG,MAAM,IAAA,sBAAS,EAC5B,gCAAgC,EAChC,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,CAAC,MAAA,MAAM,CAAC,SAAS,mCAAI,EAAE,CAAC,EAAE,EAAE,EAAE,EAC1E,GAAG,CAAC,MAAM,CACX,CAAC;QAEF,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACnD,OAAO,IAAA,iBAAI,EAAC,2BAA2B,CAAC,CAAC;QAC3C,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,OAAO,IAAA,iBAAI,EAAC,IAAA,8BAAiB,EAAC,MAAM,EAAE,kCAAkC,CAAC,CAAC,CAAC;QAC7E,CAAC;QAED,MAAM,OAAO,GAA8C,KAAK,CAAC,OAAO,CACtE,MAAA,MAAM,CAAC,IAAI,0CAAE,IAAI,CAClB;YACC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI;YAClB,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CACxB,CAAC,IAAI,EAAE,EAAE,WAAC,OAAA,MAAM,CAAC,MAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,IAAI,mCAAI,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM,CAAA,EAAA,CAC5D,CAAC;QAEF,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,IAAA,iBAAI,EACT,0BAA0B,OAAO,CAAC,MAAM,aAAa,EACrD,eAAe,MAAM,6CAA6C,CACnE,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,CAAC,MAAA,KAAK,CAAC,MAAM,mCAAI,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,UAAU,EAAE,CAAC;YAC5D,OAAO,IAAA,iBAAI,EACT,2BAA2B,MAAM,EAAE,EACnC,eAAe,MAAM,kCAAkC,KAAK,CAAC,MAAM,IAAI,CACxE,CAAC;QACJ,CAAC;QACD,OAAO,IAAA,iBAAI,EAAC,YAAY,MAAM,aAAa,CAAC,CAAC;IAC/C,CAAC;CACF,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,GAAsB;IACpC,YAAY,EAAE,MAAM;IACpB,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;;QACrB,MAAM,OAAO,GAAG,IAAA,0BAAa,EAAC,MAAM,EAAE;YACpC,CAAC,MAAM,EAAE,WAAW,CAAC;YACrB,CAAC,UAAU,EAAE,UAAU,CAAC;YACxB,CAAC,UAAU,EAAE,UAAU,CAAC;SACzB,CAAC,CAAC;QACH,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC;QAE5B,MAAM,MAAM,GAAG,MAAM,IAAA,+BAAoB,EAAC;YACxC,IAAI,EAAE,IAAA,gBAAG,EAAC,MAAM,EAAE,MAAM,CAAC;YACzB,IAAI,EAAE,MAAM,CAAC,MAAA,MAAM,CAAC,IAAI,mCAAI,GAAG,CAAC;YAChC,MAAM,EAAE,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;YACnE,QAAQ,EAAE,IAAA,gBAAG,EAAC,MAAM,EAAE,UAAU,CAAC;YACjC,QAAQ,EAAE,MAAM,CAAC,MAAA,MAAM,CAAC,QAAQ,mCAAI,EAAE,CAAC;YACvC,MAAM,EAAE,IAAA,gBAAG,EAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,OAAO;YACxC,SAAS,EAAE,KAAM;SAClB,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,IAAA,iBAAI,EAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAA,iBAAI,EAAC,MAAM,CAAC,KAAM,CAAC,CAAC;IAC7D,CAAC;CACF,CAAC;AAEW,QAAA,aAAa,GAAwB;IAChD,UAAU;IACV,SAAS;IACT,WAAW;IACX,YAAY;IACZ,UAAU;CACX,CAAC"}

package/dist/integration-profile/testers/http-probe.d.ts

@@ -0,0 +1,57 @@
+/**
+ * Utilidades compartilhadas pelos testadores de conexão.
+ *
+ * Concentra as três coisas que todo tester precisa acertar e que são fáceis de errar
+ * caso a caso: respeitar o timeout, não vazar segredo na mensagem de erro e traduzir
+ * falha de rede em texto que o operador entenda.
+ */
+import { IntegrationTestOutcome } from './integration-tester.types';
+/** Atalho para um veredito de sucesso. */
+export declare function pass(info?: string, warning?: string): IntegrationTestOutcome;
+/** Atalho para um veredito de falha. */
+export declare function fail(error: string): IntegrationTestOutcome;
+/**
+ * Exige que um campo esteja preenchido. Devolve `null` quando está tudo certo, ou o
+ * veredito de falha pronto — evita repetir o mesmo `if` em 31 testers.
+ */
+export declare function requireFields(config: Record<string, unknown>, fields: Array<[key: string, label: string]>): IntegrationTestOutcome | null;
+/** Lê uma chave do config como string já trimada. */
+export declare function str(config: Record<string, unknown>, key: string): string;
+/**
+ * Valida uma URL fornecida pelo usuário (host do Evolution, api_server do k8s,
+ * endpoint S3-compatible, base da ADN).
+ *
+ * Ranges privados são PERMITIDOS de propósito: k8s e Evolution self-hosted vivem em
+ * rede interna, e bloqueá-los quebraria o caso de uso principal. O que barramos são
+ * esquemas fora de http/https (file:, gopher:, etc.).
+ */
+export declare function assertHttpUrl(raw: string, field: string): URL;
+export type ProbeResult = {
+    ok: boolean;
+    status: number;
+    /** Corpo parseado como JSON, ou `{}` quando a resposta não é JSON. */
+    body: any;
+    /** Corpo cru (truncado), útil quando a API responde texto puro. */
+    text: string;
+};
+/**
+ * `fetch` que não lança em status != 2xx — o status faz parte do veredito na maioria
+ * dos testers (401 vs 404 vs 403 dizem coisas diferentes).
+ */
+export declare function probeJson(url: string, init: RequestInit, signal: AbortSignal): Promise<ProbeResult>;
+/** Remove qualquer ocorrência dos segredos do texto. */
+export declare function redactSecrets(text: string, secretValues: string[]): string;
+/**
+ * Converte qualquer erro em mensagem segura para a UI e para o config do perfil.
+ *
+ * Ordem importa: timeout e falha de DNS/conexão precisam de texto PRÓPRIO, senão o
+ * operador de um cluster sem saída para a internet lê "não foi possível validar" e
+ * conclui que a credencial está errada.
+ */
+export declare function sanitizeTesterError(error: unknown, secretValues: string[], host?: string): string;
+/**
+ * Mensagem curta a partir de uma resposta HTTP de erro, procurando o campo de mensagem
+ * nos formatos mais comuns (`error.message`, `error_description`, `message`, `error`).
+ */
+export declare function describeHttpError(result: ProbeResult, fallback: string): string;
+//# sourceMappingURL=http-probe.d.ts.map

package/dist/integration-profile/testers/http-probe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-probe.d.ts","sourceRoot":"","sources":["../../../src/integration-profile/testers/http-probe.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AAKpE,0CAA0C;AAC1C,wBAAgB,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,sBAAsB,CAE5E;AAED,wCAAwC;AACxC,wBAAgB,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,sBAAsB,CAE1D;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAC3B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,MAAM,EAAE,KAAK,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,GAC1C,sBAAsB,GAAG,IAAI,CAO/B;AAED,qDAAqD;AACrD,wBAAgB,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAExE;AAED;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,GAAG,CAW7D;AAED,MAAM,MAAM,WAAW,GAAG;IACxB,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,sEAAsE;IACtE,IAAI,EAAE,GAAG,CAAC;IACV,mEAAmE;IACnE,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF;;;GAGG;AACH,wBAAsB,SAAS,CAC7B,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,WAAW,EACjB,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,WAAW,CAAC,CAYtB;AAED,wDAAwD;AACxD,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,MAAM,CAU1E;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,OAAO,EACd,YAAY,EAAE,MAAM,EAAE,EACtB,IAAI,CAAC,EAAE,MAAM,GACZ,MAAM,CAgCR;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAa/E"}

package/dist/integration-profile/testers/http-probe.js

@@ -0,0 +1,140 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.pass = pass;
+exports.fail = fail;
+exports.requireFields = requireFields;
+exports.str = str;
+exports.assertHttpUrl = assertHttpUrl;
+exports.probeJson = probeJson;
+exports.redactSecrets = redactSecrets;
+exports.sanitizeTesterError = sanitizeTesterError;
+exports.describeHttpError = describeHttpError;
+/** Tamanho máximo de uma mensagem devolvida à UI (ela também é persistida no config). */
+const MAX_ERROR_LENGTH = 300;
+/** Atalho para um veredito de sucesso. */
+function pass(info, warning) {
+    return Object.assign(Object.assign({ ok: true }, (info ? { info } : {})), (warning ? { warning } : {}));
+}
+/** Atalho para um veredito de falha. */
+function fail(error) {
+    return { ok: false, error };
+}
+/**
+ * Exige que um campo esteja preenchido. Devolve `null` quando está tudo certo, ou o
+ * veredito de falha pronto — evita repetir o mesmo `if` em 31 testers.
+ */
+function requireFields(config, fields) {
+    var _a;
+    for (const [key, label] of fields) {
+        if (!String((_a = config[key]) !== null && _a !== void 0 ? _a : '').trim()) {
+            return fail(`${label} is required.`);
+        }
+    }
+    return null;
+}
+/** Lê uma chave do config como string já trimada. */
+function str(config, key) {
+    var _a;
+    return String((_a = config[key]) !== null && _a !== void 0 ? _a : '').trim();
+}
+/**
+ * Valida uma URL fornecida pelo usuário (host do Evolution, api_server do k8s,
+ * endpoint S3-compatible, base da ADN).
+ *
+ * Ranges privados são PERMITIDOS de propósito: k8s e Evolution self-hosted vivem em
+ * rede interna, e bloqueá-los quebraria o caso de uso principal. O que barramos são
+ * esquemas fora de http/https (file:, gopher:, etc.).
+ */
+function assertHttpUrl(raw, field) {
+    let url;
+    try {
+        url = new URL(raw);
+    }
+    catch (_a) {
+        throw new Error(`${field} is not a valid URL.`);
+    }
+    if (url.protocol !== 'http:' && url.protocol !== 'https:') {
+        throw new Error(`${field} must use http or https.`);
+    }
+    return url;
+}
+/**
+ * `fetch` que não lança em status != 2xx — o status faz parte do veredito na maioria
+ * dos testers (401 vs 404 vs 403 dizem coisas diferentes).
+ */
+async function probeJson(url, init, signal) {
+    const response = await fetch(url, Object.assign(Object.assign({}, init), { signal }));
+    const text = (await response.text().catch(() => '')).slice(0, 2000);
+    let body = {};
+    try {
+        body = text ? JSON.parse(text) : {};
+    }
+    catch (_a) {
+        body = {};
+    }
+    return { ok: response.ok, status: response.status, body, text };
+}
+/** Remove qualquer ocorrência dos segredos do texto. */
+function redactSecrets(text, secretValues) {
+    let out = text;
+    for (const secret of secretValues) {
+        // Segredos muito curtos (ex.: uma senha de 3 letras) casariam com palavras comuns
+        // e transformariam a mensagem em ruído; o risco real está nos tokens longos.
+        if (secret && secret.length >= 6) {
+            out = out.split(secret).join('***');
+        }
+    }
+    return out;
+}
+/**
+ * Converte qualquer erro em mensagem segura para a UI e para o config do perfil.
+ *
+ * Ordem importa: timeout e falha de DNS/conexão precisam de texto PRÓPRIO, senão o
+ * operador de um cluster sem saída para a internet lê "não foi possível validar" e
+ * conclui que a credencial está errada.
+ */
+function sanitizeTesterError(error, secretValues, host) {
+    var _a, _b;
+    const target = host ? ` (${host})` : '';
+    const name = (_a = error === null || error === void 0 ? void 0 : error.name) !== null && _a !== void 0 ? _a : '';
+    const code = String((_b = error === null || error === void 0 ? void 0 : error.code) !== null && _b !== void 0 ? _b : '');
+    const raw = error instanceof Error ? error.message : String(error !== null && error !== void 0 ? error : '');
+    if (name === 'AbortError' || name === 'TimeoutError' || code === 'ABORT_ERR') {
+        return `Timed out while contacting the provider${target}. Check the server's outbound network access.`;
+    }
+    const networkCode = [code, raw].join(' ');
+    if (/ENOTFOUND|EAI_AGAIN/.test(networkCode)) {
+        return `Host not found${target}. Check the address you typed.`;
+    }
+    if (/ECONNREFUSED/.test(networkCode)) {
+        return `Connection refused${target}. Check the address, the port and the firewall.`;
+    }
+    if (/ECONNRESET|EPIPE|ETIMEDOUT/.test(networkCode)) {
+        return `Connection interrupted${target}. Check the server's outbound network access.`;
+    }
+    if (/CERT_HAS_EXPIRED/.test(networkCode)) {
+        return `The provider's TLS certificate has expired${target}.`;
+    }
+    if (/DEPTH_ZERO_SELF_SIGNED_CERT|SELF_SIGNED_CERT_IN_CHAIN|UNABLE_TO_VERIFY_LEAF_SIGNATURE/.test(networkCode)) {
+        return `The provider's TLS certificate could not be verified${target}.`;
+    }
+    // Só a mensagem — nunca o objeto de erro inteiro nem o stack.
+    const message = redactSecrets(raw || 'Unexpected error.', secretValues).trim();
+    return message.length > MAX_ERROR_LENGTH
+        ? `${message.slice(0, MAX_ERROR_LENGTH - 1)}…`
+        : message;
+}
+/**
+ * Mensagem curta a partir de uma resposta HTTP de erro, procurando o campo de mensagem
+ * nos formatos mais comuns (`error.message`, `error_description`, `message`, `error`).
+ */
+function describeHttpError(result, fallback) {
+    var _a, _b, _c, _d, _e, _f, _g;
+    const body = (_a = result.body) !== null && _a !== void 0 ? _a : {};
+    const candidate = (_f = (_e = (_d = (_c = (_b = body === null || body === void 0 ? void 0 : body.error) === null || _b === void 0 ? void 0 : _b.message) !== null && _c !== void 0 ? _c : body === null || body === void 0 ? void 0 : body.error_description) !== null && _d !== void 0 ? _d : body === null || body === void 0 ? void 0 : body.message) !== null && _e !== void 0 ? _e : (typeof (body === null || body === void 0 ? void 0 : body.error) === 'string' ? body.error : null)) !== null && _f !== void 0 ? _f : (_g = body === null || body === void 0 ? void 0 : body.error) === null || _g === void 0 ? void 0 : _g.error_user_msg;
+    const message = String(candidate !== null && candidate !== void 0 ? candidate : '').trim();
+    if (message)
+        return message;
+    return `${fallback} (HTTP ${result.status})`;
+}
+//# sourceMappingURL=http-probe.js.map

package/dist/integration-profile/testers/http-probe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-probe.js","sourceRoot":"","sources":["../../../src/integration-profile/testers/http-probe.ts"],"names":[],"mappings":";;AAaA,oBAEC;AAGD,oBAEC;AAMD,sCAUC;AAGD,kBAEC;AAUD,sCAWC;AAeD,8BAgBC;AAGD,sCAUC;AASD,kDAoCC;AAMD,8CAaC;AAjKD,yFAAyF;AACzF,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAE7B,0CAA0C;AAC1C,SAAgB,IAAI,CAAC,IAAa,EAAE,OAAgB;IAClD,qCAAS,EAAE,EAAE,IAAI,IAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,GAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAG;AAClF,CAAC;AAED,wCAAwC;AACxC,SAAgB,IAAI,CAAC,KAAa;IAChC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAC9B,CAAC;AAED;;;GAGG;AACH,SAAgB,aAAa,CAC3B,MAA+B,EAC/B,MAA2C;;IAE3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,EAAE,CAAC;QAClC,IAAI,CAAC,MAAM,CAAC,MAAA,MAAM,CAAC,GAAG,CAAC,mCAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YACtC,OAAO,IAAI,CAAC,GAAG,KAAK,eAAe,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,qDAAqD;AACrD,SAAgB,GAAG,CAAC,MAA+B,EAAE,GAAW;;IAC9D,OAAO,MAAM,CAAC,MAAA,MAAM,CAAC,GAAG,CAAC,mCAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;AAC1C,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,aAAa,CAAC,GAAW,EAAE,KAAa;IACtD,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IAAC,WAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,sBAAsB,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,0BAA0B,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAWD;;;GAGG;AACI,KAAK,UAAU,SAAS,CAC7B,GAAW,EACX,IAAiB,EACjB,MAAmB;IAEnB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,kCAAO,IAAI,KAAE,MAAM,IAAG,CAAC;IACvD,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAK,CAAC,CAAC;IAErE,IAAI,IAAI,GAAQ,EAAE,CAAC;IACnB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACtC,CAAC;IAAC,WAAM,CAAC;QACP,IAAI,GAAG,EAAE,CAAC;IACZ,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAClE,CAAC;AAED,wDAAwD;AACxD,SAAgB,aAAa,CAAC,IAAY,EAAE,YAAsB;IAChE,IAAI,GAAG,GAAG,IAAI,CAAC;IACf,KAAK,MAAM,MAAM,IAAI,YAAY,EAAE,CAAC;QAClC,kFAAkF;QAClF,6EAA6E;QAC7E,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YACjC,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,mBAAmB,CACjC,KAAc,EACd,YAAsB,EACtB,IAAa;;IAEb,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACxC,MAAM,IAAI,GAAG,MAAC,KAA2B,aAA3B,KAAK,uBAAL,KAAK,CAAwB,IAAI,mCAAI,EAAE,CAAC;IACtD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAC,KAA2B,aAA3B,KAAK,uBAAL,KAAK,CAAwB,IAAI,mCAAI,EAAE,CAAC,CAAC;IAC9D,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,aAAL,KAAK,cAAL,KAAK,GAAI,EAAE,CAAC,CAAC;IAEzE,IAAI,IAAI,KAAK,YAAY,IAAI,IAAI,KAAK,cAAc,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;QAC7E,OAAO,0CAA0C,MAAM,+CAA+C,CAAC;IACzG,CAAC;IAED,MAAM,WAAW,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,qBAAqB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5C,OAAO,iBAAiB,MAAM,gCAAgC,CAAC;IACjE,CAAC;IACD,IAAI,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QACrC,OAAO,qBAAqB,MAAM,iDAAiD,CAAC;IACtF,CAAC;IACD,IAAI,4BAA4B,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QACnD,OAAO,yBAAyB,MAAM,+CAA+C,CAAC;IACxF,CAAC;IACD,IAAI,kBAAkB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QACzC,OAAO,6CAA6C,MAAM,GAAG,CAAC;IAChE,CAAC;IACD,IAAI,uFAAuF,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QAC9G,OAAO,uDAAuD,MAAM,GAAG,CAAC;IAC1E,CAAC;IAED,8DAA8D;IAC9D,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,IAAI,mBAAmB,EAAE,YAAY,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/E,OAAO,OAAO,CAAC,MAAM,GAAG,gBAAgB;QACtC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,GAAG,CAAC,CAAC,GAAG;QAC9C,CAAC,CAAC,OAAO,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,SAAgB,iBAAiB,CAAC,MAAmB,EAAE,QAAgB;;IACrE,MAAM,IAAI,GAAG,MAAA,MAAM,CAAC,IAAI,mCAAI,EAAE,CAAC;IAC/B,MAAM,SAAS,GACb,MAAA,MAAA,MAAA,MAAA,MAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,KAAK,0CAAE,OAAO,mCACpB,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,iBAAiB,mCACvB,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,OAAO,mCACb,CAAC,OAAO,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,KAAK,CAAA,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,mCACrD,MAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,KAAK,0CAAE,cAAc,CAAC;IAE9B,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,aAAT,SAAS,cAAT,SAAS,GAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/C,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAE5B,OAAO,GAAG,QAAQ,UAAU,MAAM,CAAC,MAAM,GAAG,CAAC;AAC/C,CAAC"}

package/dist/integration-profile/testers/index.d.ts

@@ -0,0 +1,12 @@
+import { IntegrationTester } from './integration-tester.types';
+/**
+ * Testadores que o core registra sozinho no boot.
+ *
+ * Providers de outras libraries (nfse-national, da `fiscal`) se registram no próprio
+ * módulo, via IntegrationTesterRegistry.
+ */
+export declare const BUILTIN_INTEGRATION_TESTERS: IntegrationTester[];
+export * from './http-probe';
+export * from './integration-tester.registry';
+export * from './integration-tester.types';
+//# sourceMappingURL=index.d.ts.map

package/dist/integration-profile/testers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/integration-profile/testers/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAM/D;;;;;GAKG;AACH,eAAO,MAAM,2BAA2B,EAAE,iBAAiB,EAS1D,CAAC;AAEF,cAAc,cAAc,CAAC;AAC7B,cAAc,+BAA+B,CAAC;AAC9C,cAAc,4BAA4B,CAAC"}

package/dist/integration-profile/testers/index.js

@@ -0,0 +1,45 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BUILTIN_INTEGRATION_TESTERS = void 0;
+const ai_testers_1 = require("./ai.testers");
+const captcha_testers_1 = require("./captcha.testers");
+const email_testers_1 = require("./email.testers");
+const infrastructure_testers_1 = require("./infrastructure.testers");
+const messaging_testers_1 = require("./messaging.testers");
+const oauth_testers_1 = require("./oauth.testers");
+const payment_testers_1 = require("./payment.testers");
+const storage_testers_1 = require("./storage.testers");
+/**
+ * Testadores que o core registra sozinho no boot.
+ *
+ * Providers de outras libraries (nfse-national, da `fiscal`) se registram no próprio
+ * módulo, via IntegrationTesterRegistry.
+ */
+exports.BUILTIN_INTEGRATION_TESTERS = [
+    ...email_testers_1.EMAIL_TESTERS,
+    ...messaging_testers_1.MESSAGING_TESTERS,
+    ...storage_testers_1.STORAGE_TESTERS,
+    ...ai_testers_1.AI_TESTERS,
+    ...oauth_testers_1.OAUTH_TESTERS,
+    ...payment_testers_1.PAYMENT_TESTERS,
+    ...captcha_testers_1.CAPTCHA_TESTERS,
+    ...infrastructure_testers_1.INFRASTRUCTURE_TESTERS,
+];
+__exportStar(require("./http-probe"), exports);
+__exportStar(require("./integration-tester.registry"), exports);
+__exportStar(require("./integration-tester.types"), exports);
+//# sourceMappingURL=index.js.map

package/dist/integration-profile/testers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/integration-profile/testers/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA,6CAA0C;AAC1C,uDAAoD;AACpD,mDAAgD;AAChD,qEAAkE;AAElE,2DAAwD;AACxD,mDAAgD;AAChD,uDAAoD;AACpD,uDAAoD;AAEpD;;;;;GAKG;AACU,QAAA,2BAA2B,GAAwB;IAC9D,GAAG,6BAAa;IAChB,GAAG,qCAAiB;IACpB,GAAG,iCAAe;IAClB,GAAG,uBAAU;IACb,GAAG,6BAAa;IAChB,GAAG,iCAAe;IAClB,GAAG,iCAAe;IAClB,GAAG,+CAAsB;CAC1B,CAAC;AAEF,+CAA6B;AAC7B,gEAA8C;AAC9C,6DAA2C"}

package/dist/integration-profile/testers/infrastructure.testers.d.ts

@@ -0,0 +1,3 @@
+import { IntegrationTester } from './integration-tester.types';
+export declare const INFRASTRUCTURE_TESTERS: IntegrationTester[];
+//# sourceMappingURL=infrastructure.testers.d.ts.map

package/dist/integration-profile/testers/infrastructure.testers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"infrastructure.testers.d.ts","sourceRoot":"","sources":["../../../src/integration-profile/testers/infrastructure.testers.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AA2G/D,eAAO,MAAM,sBAAsB,EAAE,iBAAiB,EAGrD,CAAC"}

package/dist/integration-profile/testers/infrastructure.testers.js

@@ -0,0 +1,105 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.INFRASTRUCTURE_TESTERS = void 0;
+const axios_1 = __importDefault(require("axios"));
+const node_https_1 = require("node:https");
+const http_probe_1 = require("./http-probe");
+/**
+ * Testadores dos providers de infraestrutura (autoscaling).
+ *
+ * DUPLICAÇÃO INTENCIONAL: `libraries/queue/src/scaling/{digital-ocean,kubernetes-scaler}
+ * .service.ts` têm um `testCredentials` equivalente, batendo nos mesmos endpoints.
+ * Não dá para reaproveitar: `@hed-hog-pro/queue` depende do core, então o core não pode
+ * importá-lo de volta — e os providers `digitalocean`/`kubernetes` são semeados por uma
+ * migration do core, existindo mesmo em instalações sem o pacote da fila. Registrar o
+ * tester pela queue deixaria o botão quebrado nessas instalações. Se mudar um endpoint
+ * aqui, olhe o outro lado também.
+ */
+const digitalOceanTester = {
+    providerSlug: 'digitalocean',
+    test: async (config, ctx) => {
+        var _a, _b, _c, _d, _e;
+        const missing = (0, http_probe_1.requireFields)(config, [
+            ['api_token', 'API token'],
+            ['cluster_id', 'Cluster ID'],
+        ]);
+        if (missing)
+            return missing;
+        const token = String((_a = config.api_token) !== null && _a !== void 0 ? _a : '');
+        const clusterId = (0, http_probe_1.str)(config, 'cluster_id');
+        const result = await (0, http_probe_1.probeJson)(`https://api.digitalocean.com/v2/kubernetes/clusters/${encodeURIComponent(clusterId)}`, { headers: { Authorization: `Bearer ${token}` } }, ctx.signal);
+        if (result.status === 401)
+            return (0, http_probe_1.fail)('Invalid DigitalOcean API token.');
+        if (result.status === 403) {
+            return (0, http_probe_1.fail)('This token has no permission to read Kubernetes clusters.');
+        }
+        if (result.status === 404) {
+            return (0, http_probe_1.fail)(`Cluster "${clusterId}" was not found in this account.`);
+        }
+        if (!result.ok) {
+            return (0, http_probe_1.fail)((0, http_probe_1.describeHttpError)(result, 'DigitalOcean rejected the request.'));
+        }
+        const cluster = (_c = (_b = result.body) === null || _b === void 0 ? void 0 : _b.kubernetes_cluster) !== null && _c !== void 0 ? _c : {};
+        const label = `${(_d = cluster.name) !== null && _d !== void 0 ? _d : clusterId} (${(_e = cluster.region) !== null && _e !== void 0 ? _e : (0, http_probe_1.str)(config, 'region')})`;
+        // O pool de vídeo é escolhido por nome; se ele sumiu do cluster, o autoscaling
+        // falha silenciosamente depois — melhor avisar agora.
+        const poolName = (0, http_probe_1.str)(config, 'video_node_pool_name');
+        if (poolName) {
+            const pools = Array.isArray(cluster.node_pools)
+                ? cluster.node_pools
+                : [];
+            if (pools.length > 0 && !pools.some((pool) => pool.name === poolName)) {
+                return (0, http_probe_1.pass)(label, `The node pool "${poolName}" no longer exists in this cluster.`);
+            }
+        }
+        return (0, http_probe_1.pass)(label);
+    },
+};
+const kubernetesTester = {
+    providerSlug: 'kubernetes',
+    test: async (config, ctx) => {
+        var _a, _b, _c, _d;
+        const missing = (0, http_probe_1.requireFields)(config, [
+            ['api_server', 'API server'],
+            ['token', 'Token'],
+        ]);
+        if (missing)
+            return missing;
+        const apiServer = (0, http_probe_1.assertHttpUrl)((0, http_probe_1.str)(config, 'api_server'), 'API server');
+        const caCert = String((_a = config.ca_cert) !== null && _a !== void 0 ? _a : '').trim();
+        // Não usamos `fetch` aqui: o CA do cluster é quase sempre privado e a API de fetch
+        // não aceita um contexto TLS customizado.
+        const httpsAgent = new node_https_1.Agent(caCert ? { ca: caCert } : { rejectUnauthorized: false });
+        try {
+            const response = await axios_1.default.get(`${apiServer.origin}/version`, {
+                headers: { Authorization: `Bearer ${String((_b = config.token) !== null && _b !== void 0 ? _b : '')}` },
+                httpsAgent,
+                signal: ctx.signal,
+                validateStatus: () => true,
+            });
+            if (response.status === 401)
+                return (0, http_probe_1.fail)('The Kubernetes token was rejected.');
+            if (response.status === 403) {
+                return (0, http_probe_1.fail)('This token has no permission to read the cluster version.');
+            }
+            if (response.status >= 400) {
+                return (0, http_probe_1.fail)(`The Kubernetes API returned HTTP ${response.status}.`);
+            }
+            const version = String((_d = (_c = response.data) === null || _c === void 0 ? void 0 : _c.gitVersion) !== null && _d !== void 0 ? _d : '').trim();
+            return caCert
+                ? (0, http_probe_1.pass)(`${apiServer.host}${version ? ` — ${version}` : ''}`)
+                : (0, http_probe_1.pass)(`${apiServer.host}${version ? ` — ${version}` : ''}`, 'No CA certificate provided: the TLS certificate was not verified.');
+        }
+        finally {
+            httpsAgent.destroy();
+        }
+    },
+};
+exports.INFRASTRUCTURE_TESTERS = [
+    digitalOceanTester,
+    kubernetesTester,
+];
+//# sourceMappingURL=infrastructure.testers.js.map

package/dist/integration-profile/testers/infrastructure.testers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"infrastructure.testers.js","sourceRoot":"","sources":["../../../src/integration-profile/testers/infrastructure.testers.ts"],"names":[],"mappings":";;;;;;AAAA,kDAA0B;AAC1B,2CAAmC;AACnC,6CAQsB;AAGtB;;;;;;;;;;GAUG;AAEH,MAAM,kBAAkB,GAAsB;IAC5C,YAAY,EAAE,cAAc;IAC5B,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;;QAC1B,MAAM,OAAO,GAAG,IAAA,0BAAa,EAAC,MAAM,EAAE;YACpC,CAAC,WAAW,EAAE,WAAW,CAAC;YAC1B,CAAC,YAAY,EAAE,YAAY,CAAC;SAC7B,CAAC,CAAC;QACH,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC;QAE5B,MAAM,KAAK,GAAG,MAAM,CAAC,MAAA,MAAM,CAAC,SAAS,mCAAI,EAAE,CAAC,CAAC;QAC7C,MAAM,SAAS,GAAG,IAAA,gBAAG,EAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,MAAM,IAAA,sBAAS,EAC5B,uDAAuD,kBAAkB,CAAC,SAAS,CAAC,EAAE,EACtF,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,EAAE,EACjD,GAAG,CAAC,MAAM,CACX,CAAC;QAEF,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,IAAA,iBAAI,EAAC,iCAAiC,CAAC,CAAC;QAC1E,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC1B,OAAO,IAAA,iBAAI,EAAC,2DAA2D,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC1B,OAAO,IAAA,iBAAI,EAAC,YAAY,SAAS,kCAAkC,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,OAAO,IAAA,iBAAI,EAAC,IAAA,8BAAiB,EAAC,MAAM,EAAE,oCAAoC,CAAC,CAAC,CAAC;QAC/E,CAAC;QAED,MAAM,OAAO,GAAG,MAAA,MAAA,MAAM,CAAC,IAAI,0CAAE,kBAAkB,mCAAI,EAAE,CAAC;QACtD,MAAM,KAAK,GAAG,GAAG,MAAA,OAAO,CAAC,IAAI,mCAAI,SAAS,KAAK,MAAA,OAAO,CAAC,MAAM,mCAAI,IAAA,gBAAG,EAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC;QAE1F,+EAA+E;QAC/E,sDAAsD;QACtD,MAAM,QAAQ,GAAG,IAAA,gBAAG,EAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;QACrD,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,KAAK,GAA6B,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC;gBACvE,CAAC,CAAC,OAAO,CAAC,UAAU;gBACpB,CAAC,CAAC,EAAE,CAAC;YACP,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,EAAE,CAAC;gBACtE,OAAO,IAAA,iBAAI,EAAC,KAAK,EAAE,kBAAkB,QAAQ,qCAAqC,CAAC,CAAC;YACtF,CAAC;QACH,CAAC;QACD,OAAO,IAAA,iBAAI,EAAC,KAAK,CAAC,CAAC;IACrB,CAAC;CACF,CAAC;AAEF,MAAM,gBAAgB,GAAsB;IAC1C,YAAY,EAAE,YAAY;IAC1B,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;;QAC1B,MAAM,OAAO,GAAG,IAAA,0BAAa,EAAC,MAAM,EAAE;YACpC,CAAC,YAAY,EAAE,YAAY,CAAC;YAC5B,CAAC,OAAO,EAAE,OAAO,CAAC;SACnB,CAAC,CAAC;QACH,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC;QAE5B,MAAM,SAAS,GAAG,IAAA,0BAAa,EAAC,IAAA,gBAAG,EAAC,MAAM,EAAE,YAAY,CAAC,EAAE,YAAY,CAAC,CAAC;QACzE,MAAM,MAAM,GAAG,MAAM,CAAC,MAAA,MAAM,CAAC,OAAO,mCAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAEnD,mFAAmF;QACnF,0CAA0C;QAC1C,MAAM,UAAU,GAAG,IAAI,kBAAK,CAC1B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,KAAK,EAAE,CACxD,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,eAAK,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,MAAM,UAAU,EAAE;gBAC9D,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,CAAC,MAAA,MAAM,CAAC,KAAK,mCAAI,EAAE,CAAC,EAAE,EAAE;gBAClE,UAAU;gBACV,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI;aAC3B,CAAC,CAAC;YAEH,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;gBAAE,OAAO,IAAA,iBAAI,EAAC,oCAAoC,CAAC,CAAC;YAC/E,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC5B,OAAO,IAAA,iBAAI,EAAC,2DAA2D,CAAC,CAAC;YAC3E,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;gBAC3B,OAAO,IAAA,iBAAI,EAAC,oCAAoC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;YACtE,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,CAAC,MAAA,MAAA,QAAQ,CAAC,IAAI,0CAAE,UAAU,mCAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAC/D,OAAO,MAAM;gBACX,CAAC,CAAC,IAAA,iBAAI,EAAC,GAAG,SAAS,CAAC,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,MAAM,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;gBAC5D,CAAC,CAAC,IAAA,iBAAI,EACF,GAAG,SAAS,CAAC,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,MAAM,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EACpD,mEAAmE,CACpE,CAAC;QACR,CAAC;gBAAS,CAAC;YACT,UAAU,CAAC,OAAO,EAAE,CAAC;QACvB,CAAC;IACH,CAAC;CACF,CAAC;AAEW,QAAA,sBAAsB,GAAwB;IACzD,kBAAkB;IAClB,gBAAgB;CACjB,CAAC"}

package/dist/integration-profile/testers/integration-tester.registry.d.ts

@@ -0,0 +1,17 @@
+import { IntegrationTester } from './integration-tester.types';
+/**
+ * Registro dos testadores de conexão, no mesmo padrão do WebhookProtocolRegistry e do
+ * FiscalProviderRegistry: os testers embutidos entram no boot do IntegrationProfileModule
+ * e libraries externas registram os seus (é assim que a `fiscal` pluga o nfse-national,
+ * que precisa abrir o certificado A1 — código que não pode viver no core).
+ */
+export declare class IntegrationTesterRegistry {
+    private readonly logger;
+    private readonly testers;
+    register(tester: IntegrationTester): void;
+    find(providerSlug: string | null | undefined): IntegrationTester | null;
+    has(providerSlug: string | null | undefined): boolean;
+    /** Providers com teste disponível (para a UI decidir se mostra o botão). */
+    list(): string[];
+}
+//# sourceMappingURL=integration-tester.registry.d.ts.map

package/dist/integration-profile/testers/integration-tester.registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"integration-tester.registry.d.ts","sourceRoot":"","sources":["../../../src/integration-profile/testers/integration-tester.registry.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAE/D;;;;;GAKG;AACH,qBACa,yBAAyB;IACpC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA8C;IACrE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAwC;IAEhE,QAAQ,CAAC,MAAM,EAAE,iBAAiB,GAAG,IAAI;IAWzC,IAAI,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,iBAAiB,GAAG,IAAI;IAKvE,GAAG,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO;IAIrD,4EAA4E;IAC5E,IAAI,IAAI,MAAM,EAAE;CAGjB"}