@marinoscar/platform-api 0.0.0-stage → 0.1.0-next.10

package/dist/telemetry/connection/dto/telemetry-connection.dto.d.ts

@@ -0,0 +1,92 @@
+import { telemetryConnectionResponseSchema, telemetryConnectionTestResultSchema, testTelemetryConnectionSchema, updateTelemetryConnectionSchema } from '@marinoscar/platform-contract/telemetry';
+export { telemetryConnectionProbeSchema, telemetryConnectionSkippedSchema, telemetryCredentialStatusSchema, telemetryDeploymentConnectionSchema, TELEMETRY_CONNECTION_SOURCES, } from '@marinoscar/platform-contract/telemetry';
+export { telemetryConnectionResponseSchema, telemetryConnectionTestResultSchema, testTelemetryConnectionSchema, updateTelemetryConnectionSchema, };
+export type { TelemetryConnectionProbe, TelemetryConnectionResponse, TelemetryConnectionTestResult, TestTelemetryConnectionInput, UpdateTelemetryConnectionInput, } from '@marinoscar/platform-contract/telemetry';
+declare const UpdateTelemetryConnectionDto_base: import("nestjs-zod").ZodDto<import("zod").ZodObject<{
+    host: import("zod").ZodPipe<import("zod").ZodPipe<import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>, import("zod").ZodTransform<string | null, string | null | undefined>>, import("zod").ZodNullable<import("zod").ZodString>>;
+    pgPort: import("zod").ZodDefault<import("zod").ZodNumber>;
+    database: import("zod").ZodDefault<import("zod").ZodString>;
+    readerUser: import("zod").ZodPipe<import("zod").ZodOptional<import("zod").ZodString>, import("zod").ZodTransform<string | undefined, string | undefined>>;
+    readerPassword: import("zod").ZodOptional<import("zod").ZodString>;
+    adminUser: import("zod").ZodPipe<import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>, import("zod").ZodTransform<string | null | undefined, string | null | undefined>>;
+    adminPassword: import("zod").ZodOptional<import("zod").ZodString>;
+}, import("zod/v4/core").$strip>, false>;
+export declare class UpdateTelemetryConnectionDto extends UpdateTelemetryConnectionDto_base {
+}
+declare const TestTelemetryConnectionDto_base: import("nestjs-zod").ZodDto<import("zod").ZodObject<{
+    host: import("zod").ZodPipe<import("zod").ZodPipe<import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>, import("zod").ZodTransform<string | null, string | null | undefined>>, import("zod").ZodNullable<import("zod").ZodString>>;
+    pgPort: import("zod").ZodDefault<import("zod").ZodNumber>;
+    database: import("zod").ZodDefault<import("zod").ZodString>;
+    readerUser: import("zod").ZodPipe<import("zod").ZodOptional<import("zod").ZodString>, import("zod").ZodTransform<string | undefined, string | undefined>>;
+    readerPassword: import("zod").ZodOptional<import("zod").ZodString>;
+    adminUser: import("zod").ZodPipe<import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>, import("zod").ZodTransform<string | null | undefined, string | null | undefined>>;
+    adminPassword: import("zod").ZodOptional<import("zod").ZodString>;
+}, import("zod/v4/core").$strip>, false>;
+export declare class TestTelemetryConnectionDto extends TestTelemetryConnectionDto_base {
+}
+declare const TelemetryConnectionResponseDto_base: import("nestjs-zod").ZodDto<import("zod").ZodObject<{
+    source: import("zod").ZodEnum<import("@marinoscar/platform-contract/telemetry").TelemetryEnumEntries<"none" | "stored" | "environment">>;
+    host: import("zod").ZodNullable<import("zod").ZodString>;
+    effectiveHost: import("zod").ZodString;
+    hostMode: import("zod").ZodEnum<import("@marinoscar/platform-contract/telemetry").TelemetryEnumEntries<"custom" | "auto">>;
+    deploymentManaged: import("zod").ZodBoolean;
+    deployment: import("zod").ZodObject<{
+        host: import("zod").ZodString;
+        pgPort: import("zod").ZodNumber;
+        database: import("zod").ZodString;
+        readerUser: import("zod").ZodString;
+        adminUser: import("zod").ZodNullable<import("zod").ZodString>;
+        readerConfigured: import("zod").ZodBoolean;
+        adminConfigured: import("zod").ZodBoolean;
+    }, import("zod/v4/core").$strip>;
+    problem: import("zod").ZodNullable<import("zod").ZodString>;
+    pgPort: import("zod").ZodNumber;
+    database: import("zod").ZodString;
+    readerUser: import("zod").ZodString;
+    adminUser: import("zod").ZodNullable<import("zod").ZodString>;
+    configured: import("zod").ZodBoolean;
+    adminConfigured: import("zod").ZodBoolean;
+    credentials: import("zod").ZodObject<{
+        reader: import("zod").ZodObject<{
+            configured: import("zod").ZodBoolean;
+            hint: import("zod").ZodNullable<import("zod").ZodString>;
+            updatedAt: import("zod").ZodNullable<import("zod").ZodISODateTime>;
+            updatedByUserId: import("zod").ZodNullable<import("zod").ZodString>;
+        }, import("zod/v4/core").$strip>;
+        admin: import("zod").ZodObject<{
+            configured: import("zod").ZodBoolean;
+            hint: import("zod").ZodNullable<import("zod").ZodString>;
+            updatedAt: import("zod").ZodNullable<import("zod").ZodISODateTime>;
+            updatedByUserId: import("zod").ZodNullable<import("zod").ZodString>;
+        }, import("zod/v4/core").$strip>;
+    }, import("zod/v4/core").$strip>;
+    version: import("zod").ZodNumber;
+    updatedAt: import("zod").ZodNullable<import("zod").ZodISODateTime>;
+    updatedBy: import("zod").ZodNullable<import("zod").ZodObject<{
+        id: import("zod").ZodString;
+        email: import("zod").ZodString;
+    }, import("zod/v4/core").$strip>>;
+}, import("zod/v4/core").$strip>, false>;
+export declare class TelemetryConnectionResponseDto extends TelemetryConnectionResponseDto_base {
+}
+declare const TelemetryConnectionTestResultDto_base: import("nestjs-zod").ZodDto<import("zod").ZodObject<{
+    host: import("zod").ZodString;
+    hostMode: import("zod").ZodEnum<import("@marinoscar/platform-contract/telemetry").TelemetryEnumEntries<"custom" | "auto">>;
+    reader: import("zod").ZodObject<{
+        success: import("zod").ZodBoolean;
+        latencyMs: import("zod").ZodNumber;
+        version: import("zod").ZodOptional<import("zod").ZodString>;
+        error: import("zod").ZodOptional<import("zod").ZodString>;
+    }, import("zod/v4/core").$strip>;
+    admin: import("zod").ZodUnion<readonly [import("zod").ZodObject<{
+        success: import("zod").ZodBoolean;
+        latencyMs: import("zod").ZodNumber;
+        version: import("zod").ZodOptional<import("zod").ZodString>;
+        error: import("zod").ZodOptional<import("zod").ZodString>;
+    }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+        skipped: import("zod").ZodLiteral<true>;
+    }, import("zod/v4/core").$strip>]>;
+}, import("zod/v4/core").$strip>, false>;
+export declare class TelemetryConnectionTestResultDto extends TelemetryConnectionTestResultDto_base {
+}
+//# sourceMappingURL=telemetry-connection.dto.d.ts.map

package/dist/telemetry/connection/dto/telemetry-connection.dto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry-connection.dto.d.ts","sourceRoot":"","sources":["../../../../src/telemetry/connection/dto/telemetry-connection.dto.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,iCAAiC,EACjC,mCAAmC,EACnC,6BAA6B,EAC7B,+BAA+B,EAChC,MAAM,yCAAyC,CAAC;AAgBjD,OAAO,EACL,8BAA8B,EAC9B,gCAAgC,EAChC,+BAA+B,EAC/B,mCAAmC,EACnC,4BAA4B,GAC7B,MAAM,yCAAyC,CAAC;AACjD,OAAO,EACL,iCAAiC,EACjC,mCAAmC,EACnC,6BAA6B,EAC7B,+BAA+B,GAChC,CAAC;AACF,YAAY,EACV,wBAAwB,EACxB,2BAA2B,EAC3B,6BAA6B,EAC7B,4BAA4B,EAC5B,8BAA8B,GAC/B,MAAM,yCAAyC,CAAC;;;;;;;;;;AAEjD,qBAAa,4BAA6B,SAAQ,iCAA6C;CAAG;;;;;;;;;;AAClG,qBAAa,0BAA2B,SAAQ,+BAA2C;CAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAC9F,qBAAa,8BAA+B,SAAQ,mCAA+C;CAAG;;;;;;;;;;;;;;;;;;;AACtG,qBAAa,gCAAiC,SAAQ,qCAAiD;CAAG"}

package/dist/telemetry/connection/dto/telemetry-connection.dto.js

@@ -0,0 +1,41 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TelemetryConnectionTestResultDto = exports.TelemetryConnectionResponseDto = exports.TestTelemetryConnectionDto = exports.UpdateTelemetryConnectionDto = exports.updateTelemetryConnectionSchema = exports.testTelemetryConnectionSchema = exports.telemetryConnectionTestResultSchema = exports.telemetryConnectionResponseSchema = exports.TELEMETRY_CONNECTION_SOURCES = exports.telemetryDeploymentConnectionSchema = exports.telemetryCredentialStatusSchema = exports.telemetryConnectionSkippedSchema = exports.telemetryConnectionProbeSchema = void 0;
+const nestjs_zod_1 = require("nestjs-zod");
+const telemetry_1 = require("@marinoscar/platform-contract/telemetry");
+Object.defineProperty(exports, "telemetryConnectionResponseSchema", { enumerable: true, get: function () { return telemetry_1.telemetryConnectionResponseSchema; } });
+Object.defineProperty(exports, "telemetryConnectionTestResultSchema", { enumerable: true, get: function () { return telemetry_1.telemetryConnectionTestResultSchema; } });
+Object.defineProperty(exports, "testTelemetryConnectionSchema", { enumerable: true, get: function () { return telemetry_1.testTelemetryConnectionSchema; } });
+Object.defineProperty(exports, "updateTelemetryConnectionSchema", { enumerable: true, get: function () { return telemetry_1.updateTelemetryConnectionSchema; } });
+// =============================================================================
+// /api/admin/telemetry/connection — wire shapes (issue #558, epic #528)
+// =============================================================================
+//
+// The schemas live in `@marinoscar/platform-contract/telemetry` (#702), shared
+// with the web app; this file wraps them as nestjs-zod DTOs and re-exports the
+// names services import.
+//
+// Passwords are WRITE-ONLY. They appear in the two request bodies and in no
+// response: a response carries a masked `credentials.<login>` status built
+// from `CredentialsService.describe`, which cannot decrypt anything — the same
+// shape as storage's `secretStatus` and AI's `keyStatus`.
+// =============================================================================
+var telemetry_2 = require("@marinoscar/platform-contract/telemetry");
+Object.defineProperty(exports, "telemetryConnectionProbeSchema", { enumerable: true, get: function () { return telemetry_2.telemetryConnectionProbeSchema; } });
+Object.defineProperty(exports, "telemetryConnectionSkippedSchema", { enumerable: true, get: function () { return telemetry_2.telemetryConnectionSkippedSchema; } });
+Object.defineProperty(exports, "telemetryCredentialStatusSchema", { enumerable: true, get: function () { return telemetry_2.telemetryCredentialStatusSchema; } });
+Object.defineProperty(exports, "telemetryDeploymentConnectionSchema", { enumerable: true, get: function () { return telemetry_2.telemetryDeploymentConnectionSchema; } });
+Object.defineProperty(exports, "TELEMETRY_CONNECTION_SOURCES", { enumerable: true, get: function () { return telemetry_2.TELEMETRY_CONNECTION_SOURCES; } });
+class UpdateTelemetryConnectionDto extends (0, nestjs_zod_1.createZodDto)(telemetry_1.updateTelemetryConnectionSchema) {
+}
+exports.UpdateTelemetryConnectionDto = UpdateTelemetryConnectionDto;
+class TestTelemetryConnectionDto extends (0, nestjs_zod_1.createZodDto)(telemetry_1.testTelemetryConnectionSchema) {
+}
+exports.TestTelemetryConnectionDto = TestTelemetryConnectionDto;
+class TelemetryConnectionResponseDto extends (0, nestjs_zod_1.createZodDto)(telemetry_1.telemetryConnectionResponseSchema) {
+}
+exports.TelemetryConnectionResponseDto = TelemetryConnectionResponseDto;
+class TelemetryConnectionTestResultDto extends (0, nestjs_zod_1.createZodDto)(telemetry_1.telemetryConnectionTestResultSchema) {
+}
+exports.TelemetryConnectionTestResultDto = TelemetryConnectionTestResultDto;
+//# sourceMappingURL=telemetry-connection.dto.js.map

package/dist/telemetry/connection/dto/telemetry-connection.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry-connection.dto.js","sourceRoot":"","sources":["../../../../src/telemetry/connection/dto/telemetry-connection.dto.ts"],"names":[],"mappings":";;;AAAA,2CAA0C;AAE1C,uEAKiD;AAwB/C,kHA5BA,6CAAiC,OA4BA;AACjC,oHA5BA,+CAAmC,OA4BA;AACnC,8GA5BA,yCAA6B,OA4BA;AAC7B,gHA5BA,2CAA+B,OA4BA;AAzBjC,gFAAgF;AAChF,wEAAwE;AACxE,gFAAgF;AAChF,EAAE;AACF,+EAA+E;AAC/E,+EAA+E;AAC/E,yBAAyB;AACzB,EAAE;AACF,4EAA4E;AAC5E,2EAA2E;AAC3E,+EAA+E;AAC/E,0DAA0D;AAC1D,gFAAgF;AAEhF,qEAMiD;AAL/C,2HAAA,8BAA8B,OAAA;AAC9B,6HAAA,gCAAgC,OAAA;AAChC,4HAAA,+BAA+B,OAAA;AAC/B,gIAAA,mCAAmC,OAAA;AACnC,yHAAA,4BAA4B,OAAA;AAgB9B,MAAa,4BAA6B,SAAQ,IAAA,yBAAY,EAAC,2CAA+B,CAAC;CAAG;AAAlG,oEAAkG;AAClG,MAAa,0BAA2B,SAAQ,IAAA,yBAAY,EAAC,yCAA6B,CAAC;CAAG;AAA9F,gEAA8F;AAC9F,MAAa,8BAA+B,SAAQ,IAAA,yBAAY,EAAC,6CAAiC,CAAC;CAAG;AAAtG,wEAAsG;AACtG,MAAa,gCAAiC,SAAQ,IAAA,yBAAY,EAAC,+CAAmC,CAAC;CAAG;AAA1G,4EAA0G"}

package/dist/telemetry/connection/telemetry-connection-admin.service.d.ts

@@ -0,0 +1,45 @@
+import { type TelemetryAuditSink, type TelemetryCredentialStore, type TelemetryJobsPort, type TelemetrySettingsStore } from '../ports';
+import { TelemetrySettingsService } from '../telemetry-settings.service';
+import type { TelemetryConnectionResponse, UpdateTelemetryConnectionInput } from './dto/telemetry-connection.dto';
+import { type TelemetryConnectionValue } from './telemetry-connection.schema';
+import { TelemetryConnectionService, type TelemetryConnectionState } from './telemetry-connection.service';
+export declare const TELEMETRY_CONNECTION_UPDATE_AUDIT_ACTION = "telemetry:connection_update";
+export declare const TELEMETRY_CONNECTION_RESET_AUDIT_ACTION = "telemetry:connection_reset";
+export declare class TelemetryConnectionAdminService {
+    private readonly auditSink;
+    private readonly settingsStore;
+    private readonly credentials;
+    private readonly connection;
+    private readonly settings;
+    private readonly jobs;
+    private readonly logger;
+    constructor(auditSink: TelemetryAuditSink, settingsStore: TelemetrySettingsStore, credentials: TelemetryCredentialStore, connection: TelemetryConnectionService, settings: TelemetrySettingsService, jobs: TelemetryJobsPort);
+    /** `GET` — read fresh (this also refreshes this instance's snapshot). */
+    describeForAdmin(): Promise<TelemetryConnectionResponse>;
+    /**
+     * `PUT` — full replace of the stored connection. See the header for the
+     * order. An automatic host stores the marker only and clears both stored
+     * passwords; a custom host stores the row and its passwords.
+     */
+    replace(input: UpdateTelemetryConnectionInput, userId: string, expectedVersion?: number): Promise<TelemetryConnectionResponse>;
+    /**
+     * `DELETE` — forget the stored connection and both passwords, so the
+     * deployment default (or none) applies again.
+     */
+    reset(userId: string, expectedVersion?: number): Promise<TelemetryConnectionResponse>;
+    private assertVersion;
+    private setPassword;
+    /** The gate and the retention job. Neither may fail a save that already committed. */
+    private applySideEffects;
+    private audit;
+}
+/**
+ * The NAMES of the connection fields that differ — every field when nothing
+ * was stored before. Never the values. A `host` moving between automatic
+ * (null) and a literal is a change, even when the literal equals the
+ * deployment host: the connection no longer follows the deployment.
+ */
+export declare function diffConnectionFieldNames(before: TelemetryConnectionValue | null, after: TelemetryConnectionValue): string[];
+/** The admin view of a state. Non-secret by construction: it never sees a password. */
+export declare function toResponse(state: TelemetryConnectionState, connection: Pick<TelemetryConnectionService, 'isConfigured' | 'isAdminConfigured' | 'deploymentHost' | 'describeDeployment' | 'configurationProblem'>): TelemetryConnectionResponse;
+//# sourceMappingURL=telemetry-connection-admin.service.d.ts.map

package/dist/telemetry/connection/telemetry-connection-admin.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry-connection-admin.service.d.ts","sourceRoot":"","sources":["../../../src/telemetry/connection/telemetry-connection-admin.service.ts"],"names":[],"mappings":"AAIA,OAAO,EAKL,KAAK,kBAAkB,EAEvB,KAAK,wBAAwB,EAC7B,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,EAC5B,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AACzE,OAAO,KAAK,EACV,2BAA2B,EAC3B,8BAA8B,EAC/B,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAML,KAAK,wBAAwB,EAE9B,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,0BAA0B,EAAE,KAAK,wBAAwB,EAAE,MAAM,gCAAgC,CAAC;AAgC3G,eAAO,MAAM,wCAAwC,gCAAgC,CAAC;AACtF,eAAO,MAAM,uCAAuC,+BAA+B,CAAC;AAMpF,qBACa,+BAA+B;IAIV,OAAO,CAAC,QAAQ,CAAC,SAAS;IACtB,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC5B,OAAO,CAAC,QAAQ,CAAC,WAAW;IAChE,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACD,OAAO,CAAC,QAAQ,CAAC,IAAI;IAR/C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoD;gBAG1B,SAAS,EAAE,kBAAkB,EACzB,aAAa,EAAE,sBAAsB,EACnC,WAAW,EAAE,wBAAwB,EACzE,UAAU,EAAE,0BAA0B,EACtC,QAAQ,EAAE,wBAAwB,EACV,IAAI,EAAE,iBAAiB;IAGlE,yEAAyE;IACnE,gBAAgB,IAAI,OAAO,CAAC,2BAA2B,CAAC;IAI9D;;;;OAIG;IACG,OAAO,CACX,KAAK,EAAE,8BAA8B,EACrC,MAAM,EAAE,MAAM,EACd,eAAe,CAAC,EAAE,MAAM,GACvB,OAAO,CAAC,2BAA2B,CAAC;IAkGvC;;;OAGG;IACG,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,eAAe,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,2BAA2B,CAAC;IAmC3F,OAAO,CAAC,aAAa;YAUP,WAAW;IAOzB,sFAAsF;YACxE,gBAAgB;YAUhB,KAAK;CASpB;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,wBAAwB,GAAG,IAAI,EACvC,KAAK,EAAE,wBAAwB,GAC9B,MAAM,EAAE,CAQV;AAcD,uFAAuF;AACvF,wBAAgB,UAAU,CACxB,KAAK,EAAE,wBAAwB,EAC/B,UAAU,EAAE,IAAI,CACd,0BAA0B,EAC1B,cAAc,GAAG,mBAAmB,GAAG,gBAAgB,GAAG,oBAAoB,GAAG,sBAAsB,CACxG,GACA,2BAA2B,CAkD7B"}

package/dist/telemetry/connection/telemetry-connection-admin.service.js

@@ -0,0 +1,303 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var TelemetryConnectionAdminService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TelemetryConnectionAdminService = exports.TELEMETRY_CONNECTION_RESET_AUDIT_ACTION = exports.TELEMETRY_CONNECTION_UPDATE_AUDIT_ACTION = void 0;
+exports.diffConnectionFieldNames = diffConnectionFieldNames;
+exports.toResponse = toResponse;
+const common_1 = require("@nestjs/common");
+const telemetry_retention_handler_1 = require("../handlers/telemetry-retention.handler");
+const blank_secret_1 = require("../internal/blank-secret");
+const ports_1 = require("../ports");
+const telemetry_settings_service_1 = require("../telemetry-settings.service");
+const telemetry_connection_schema_1 = require("./telemetry-connection.schema");
+const telemetry_connection_service_1 = require("./telemetry-connection.service");
+// =============================================================================
+// TelemetryConnectionAdminService — GET/PUT/DELETE
+// /api/admin/telemetry/connection (issue #558, epic #528)
+// =============================================================================
+//
+// The write path of the stored GreptimeDB connection. Modelled on
+// `StorageConfigAdminService.replace` and `EmailSettingsService.update`:
+//
+//   1. `If-Match` refused BEFORE anything is written (409) — against the
+//      `telemetry_connection` row's own version;
+//   2. a CUSTOM host: a missing password refused (400) — "blank preserves"
+//      only works when something is stored to preserve; an AUTOMATIC host
+//      (issue #570): nothing is required, every submitted port, database,
+//      user and password is ignored, and both stored passwords are deleted —
+//      the deployment supplies that connection wholly;
+//   3. the passwords first (so the row never names a login whose password is
+//      not stored yet), then the row (`{ host: null }` when automatic);
+//   4. the connection snapshot refreshed on THIS instance before anything else
+//      (every other instance follows within `TELEMETRY_CONNECTION_REFRESH_MS`),
+//      which is also what makes `GreptimeClient` rebuild its pools;
+//   5. the audit row — changed field NAMES and which passwords were set or
+//      cleared, never a value;
+//   6. the export gate re-applied (a store may just have become available, or
+//      gone away), and a `telemetry.retention.apply` job enqueued (the admin
+//      login may just have become usable). Neither fails the save.
+//
+// ⚠ NEVER LOG OR AUDIT A PASSWORD. The passwords are named locals that go to
+// `CredentialsService.setSecret` and nowhere else.
+// =============================================================================
+exports.TELEMETRY_CONNECTION_UPDATE_AUDIT_ACTION = 'telemetry:connection_update';
+exports.TELEMETRY_CONNECTION_RESET_AUDIT_ACTION = 'telemetry:connection_reset';
+const CONNECTION_FIELDS = ['host', 'pgPort', 'database', 'readerUser', 'adminUser'];
+let TelemetryConnectionAdminService = TelemetryConnectionAdminService_1 = class TelemetryConnectionAdminService {
+    auditSink;
+    settingsStore;
+    credentials;
+    connection;
+    settings;
+    jobs;
+    logger = new common_1.Logger(TelemetryConnectionAdminService_1.name);
+    constructor(auditSink, settingsStore, credentials, connection, settings, jobs) {
+        this.auditSink = auditSink;
+        this.settingsStore = settingsStore;
+        this.credentials = credentials;
+        this.connection = connection;
+        this.settings = settings;
+        this.jobs = jobs;
+    }
+    /** `GET` — read fresh (this also refreshes this instance's snapshot). */
+    async describeForAdmin() {
+        return toResponse(await this.connection.refresh(), this.connection);
+    }
+    /**
+     * `PUT` — full replace of the stored connection. See the header for the
+     * order. An automatic host stores the marker only and clears both stored
+     * passwords; a custom host stores the row and its passwords.
+     */
+    async replace(input, userId, expectedVersion) {
+        const before = await this.connection.refresh();
+        this.assertVersion(before, expectedVersion);
+        // Named locals, so the passwords never travel with the rest of the body.
+        const { readerPassword, adminPassword, ...fields } = input;
+        const change = {
+            reader: 'unchanged',
+            admin: 'unchanged',
+        };
+        let next;
+        let ignoredFields = [];
+        if (fields.host === null) {
+            // AUTOMATIC (issue #570): the deployment supplies the whole connection.
+            // Store the marker only, ignore whatever else was sent (older clients
+            // send the full form), and delete any stored password — it would never
+            // be used, and a stale secret must not linger for a later custom host.
+            next = { host: null };
+            ignoredFields = submittedAutomaticFieldNames(input);
+            for (const role of telemetry_connection_schema_1.TELEMETRY_CONNECTION_ROLES) {
+                if (before.credentials[role]) {
+                    await this.credentials.deleteSecret(telemetry_connection_schema_1.TELEMETRY_GREPTIME_CREDENTIAL_PURPOSE, role);
+                    change[role] = 'cleared';
+                }
+            }
+        }
+        else {
+            // CUSTOM: the row and the credential store are the connection, wholly.
+            // The schema guarantees both users were sent for a custom host.
+            const custom = {
+                host: fields.host,
+                pgPort: fields.pgPort,
+                database: fields.database,
+                readerUser: fields.readerUser,
+                adminUser: fields.adminUser ?? null,
+            };
+            next = custom;
+            const readerSupplied = !(0, blank_secret_1.isBlankSecret)(readerPassword);
+            const adminSupplied = custom.adminUser !== null && !(0, blank_secret_1.isBlankSecret)(adminPassword);
+            if (!readerSupplied && !before.credentials.reader) {
+                throw new common_1.BadRequestException('readerPassword is required: no GreptimeDB reader password is stored yet. ' +
+                    '(A blank password keeps the stored one; the deployment\'s password is never copied.)');
+            }
+            if (custom.adminUser !== null && !adminSupplied && !before.credentials.admin) {
+                throw new common_1.BadRequestException('adminPassword is required when adminUser is set: no GreptimeDB admin password is stored yet. ' +
+                    'Send adminUser as null for no admin login.');
+            }
+            if (readerSupplied) {
+                await this.setPassword('reader', readerPassword, userId);
+                change.reader = 'set';
+            }
+            if (adminSupplied) {
+                await this.setPassword('admin', adminPassword, userId);
+                change.admin = 'set';
+            }
+            else if (custom.adminUser === null && before.credentials.admin) {
+                await this.credentials.deleteSecret(telemetry_connection_schema_1.TELEMETRY_GREPTIME_CREDENTIAL_PURPOSE, 'admin');
+                change.admin = 'cleared';
+            }
+        }
+        await this.settingsStore.writeRow(telemetry_connection_schema_1.TELEMETRY_CONNECTION_SETTINGS_KEY, next, userId);
+        // Step 4 — nothing else awaits between the write and this.
+        const after = await this.connection.refresh();
+        const changedFields = diffConnectionFieldNames(before.stored, next);
+        const hostMode = next.host === null ? 'auto' : 'custom';
+        await this.audit(userId, exports.TELEMETRY_CONNECTION_UPDATE_AUDIT_ACTION, {
+            previousSource: before.snapshot.source,
+            hostMode,
+            changedFields,
+            credentials: change,
+            // Names only: what an automatic save received and did not use.
+            ...(ignoredFields.length > 0 ? { ignoredFields } : {}),
+        });
+        this.logger.log(`Telemetry connection saved by user ${userId} ` +
+            `(previousSource=${before.snapshot.source} hostMode=${hostMode} changed=${changedFields.join(',') || '(none)'} ` +
+            `readerPassword=${change.reader} adminPassword=${change.admin})`);
+        await this.applySideEffects();
+        return toResponse(after, this.connection);
+    }
+    /**
+     * `DELETE` — forget the stored connection and both passwords, so the
+     * deployment default (or none) applies again.
+     */
+    async reset(userId, expectedVersion) {
+        const before = await this.connection.refresh();
+        this.assertVersion(before, expectedVersion);
+        await this.settingsStore.deleteRow(telemetry_connection_schema_1.TELEMETRY_CONNECTION_SETTINGS_KEY);
+        const cleared = [];
+        for (const role of ['reader', 'admin']) {
+            if (before.credentials[role]) {
+                await this.credentials.deleteSecret(telemetry_connection_schema_1.TELEMETRY_GREPTIME_CREDENTIAL_PURPOSE, role);
+                cleared.push(role);
+            }
+        }
+        const after = await this.connection.refresh();
+        await this.audit(userId, exports.TELEMETRY_CONNECTION_RESET_AUDIT_ACTION, {
+            previousSource: before.snapshot.source,
+            hadStoredConnection: before.row !== null,
+            credentialsCleared: cleared,
+            source: after.snapshot.source,
+        });
+        this.logger.log(`Telemetry connection reset by user ${userId} ` +
+            `(previousSource=${before.snapshot.source} source=${after.snapshot.source})`);
+        await this.applySideEffects();
+        return toResponse(after, this.connection);
+    }
+    // ---------------------------------------------------------------------------
+    assertVersion(state, expectedVersion) {
+        const currentVersion = state.row?.version ?? 0;
+        if (expectedVersion !== undefined && currentVersion !== expectedVersion) {
+            throw new common_1.ConflictException(`Telemetry connection version mismatch. Expected ${expectedVersion}, found ${currentVersion}`);
+        }
+    }
+    async setPassword(role, password, userId) {
+        await this.credentials.setSecret(telemetry_connection_schema_1.TELEMETRY_GREPTIME_CREDENTIAL_PURPOSE, role, password, {
+            label: telemetry_connection_schema_1.TELEMETRY_GREPTIME_CREDENTIAL_LABELS[role],
+            updatedByUserId: userId,
+        });
+    }
+    /** The gate and the retention job. Neither may fail a save that already committed. */
+    async applySideEffects() {
+        await this.settings.refreshGate();
+        await this.jobs.enqueueHousekeepingJob({
+            logger: this.logger,
+            type: telemetry_retention_handler_1.TELEMETRY_RETENTION_TYPE,
+            what: 'telemetry retention',
+        });
+    }
+    async audit(userId, action, meta) {
+        await this.auditSink.record({
+            actorUserId: userId,
+            action,
+            targetType: 'system_settings',
+            targetId: telemetry_connection_schema_1.TELEMETRY_CONNECTION_SETTINGS_KEY,
+            meta,
+        });
+    }
+};
+exports.TelemetryConnectionAdminService = TelemetryConnectionAdminService;
+exports.TelemetryConnectionAdminService = TelemetryConnectionAdminService = TelemetryConnectionAdminService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Inject)(ports_1.TELEMETRY_AUDIT_SINK)),
+    __param(1, (0, common_1.Inject)(ports_1.TELEMETRY_SETTINGS_STORE)),
+    __param(2, (0, common_1.Inject)(ports_1.TELEMETRY_CREDENTIAL_STORE)),
+    __param(5, (0, common_1.Inject)(ports_1.TELEMETRY_JOBS)),
+    __metadata("design:paramtypes", [Object, Object, Object, telemetry_connection_service_1.TelemetryConnectionService,
+        telemetry_settings_service_1.TelemetrySettingsService, Object])
+], TelemetryConnectionAdminService);
+/**
+ * The NAMES of the connection fields that differ — every field when nothing
+ * was stored before. Never the values. A `host` moving between automatic
+ * (null) and a literal is a change, even when the literal equals the
+ * deployment host: the connection no longer follows the deployment.
+ */
+function diffConnectionFieldNames(before, after) {
+    if (!before)
+        return after.host === null ? ['host'] : [...CONNECTION_FIELDS];
+    // An automatic value stores no field but the host: read the others as absent.
+    const field = (value, name) => value.host === null && name !== 'host' ? undefined : value[name];
+    return CONNECTION_FIELDS.filter((name) => field(before, name) !== field(after, name));
+}
+/** The NAMES of the fields an automatic save was sent and ignores. Never a value. */
+function submittedAutomaticFieldNames(input) {
+    const ignored = [];
+    if (input.readerUser !== undefined)
+        ignored.push('readerUser');
+    if (!(0, blank_secret_1.isBlankSecret)(input.readerPassword))
+        ignored.push('readerPassword');
+    if (input.adminUser !== undefined && input.adminUser !== null)
+        ignored.push('adminUser');
+    if (!(0, blank_secret_1.isBlankSecret)(input.adminPassword))
+        ignored.push('adminPassword');
+    return ignored;
+}
+/** The admin view of a state. Non-secret by construction: it never sees a password. */
+function toResponse(state, connection) {
+    const { snapshot } = state;
+    const status = (role) => {
+        const login = role === 'reader' ? snapshot.reader : snapshot.admin;
+        // Only a CUSTOM stored connection uses the credential store. A stored
+        // automatic one uses the deployment's logins (issue #570): describing a
+        // stale stored password there would claim a credential that is not used.
+        if (snapshot.source === 'stored' && !snapshot.deploymentManaged) {
+            // A stored admin password with no admin user cannot exist (a save with
+            // adminUser null deletes it), but say "not configured" if it ever does.
+            const info = login ? state.credentials[role] : null;
+            return {
+                configured: info !== null,
+                hint: info?.hint ?? null,
+                updatedAt: info?.updatedAt.toISOString() ?? null,
+                updatedByUserId: info?.updatedByUserId ?? null,
+            };
+        }
+        return {
+            configured: Boolean(login?.passwordSet),
+            hint: null,
+            updatedAt: null,
+            updatedByUserId: null,
+        };
+    };
+    return {
+        source: snapshot.source,
+        // Null when automatic: the form shows "Automatic: <effectiveHost>".
+        host: snapshot.hostMode === 'auto' ? null : snapshot.host,
+        effectiveHost: snapshot.source === 'none' ? connection.deploymentHost : snapshot.host,
+        hostMode: snapshot.hostMode,
+        deploymentManaged: snapshot.deploymentManaged,
+        deployment: connection.describeDeployment(),
+        problem: connection.configurationProblem('admin'),
+        pgPort: snapshot.pgPort,
+        database: snapshot.database,
+        readerUser: snapshot.reader.user,
+        adminUser: snapshot.admin?.user || null,
+        configured: connection.isConfigured(),
+        adminConfigured: connection.isAdminConfigured(),
+        credentials: { reader: status('reader'), admin: status('admin') },
+        version: state.row?.version ?? 0,
+        updatedAt: state.row?.updatedAt.toISOString() ?? null,
+        updatedBy: state.row?.updatedByUser ?? null,
+    };
+}
+//# sourceMappingURL=telemetry-connection-admin.service.js.map

package/dist/telemetry/connection/telemetry-connection-admin.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry-connection-admin.service.js","sourceRoot":"","sources":["../../../src/telemetry/connection/telemetry-connection-admin.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAqRA,4DAWC;AAeD,gCAwDC;AAvWD,2CAAoG;AAEpG,yFAAmF;AACnF,2DAAyD;AACzD,oCAUkB;AAClB,8EAAyE;AAKzE,+EAQuC;AACvC,iFAA2G;AAE3G,gFAAgF;AAChF,mDAAmD;AACnD,0DAA0D;AAC1D,gFAAgF;AAChF,EAAE;AACF,kEAAkE;AAClE,yEAAyE;AACzE,EAAE;AACF,yEAAyE;AACzE,iDAAiD;AACjD,2EAA2E;AAC3E,0EAA0E;AAC1E,0EAA0E;AAC1E,6EAA6E;AAC7E,uDAAuD;AACvD,6EAA6E;AAC7E,wEAAwE;AACxE,+EAA+E;AAC/E,gFAAgF;AAChF,oEAAoE;AACpE,2EAA2E;AAC3E,+BAA+B;AAC/B,8EAA8E;AAC9E,6EAA6E;AAC7E,mEAAmE;AACnE,EAAE;AACF,6EAA6E;AAC7E,mDAAmD;AACnD,gFAAgF;AAEnE,QAAA,wCAAwC,GAAG,6BAA6B,CAAC;AACzE,QAAA,uCAAuC,GAAG,4BAA4B,CAAC;AAEpF,MAAM,iBAAiB,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,CAAU,CAAC;AAKtF,IAAM,+BAA+B,uCAArC,MAAM,+BAA+B;IAIO;IACI;IACE;IACpC;IACA;IACwB;IAR1B,MAAM,GAAG,IAAI,eAAM,CAAC,iCAA+B,CAAC,IAAI,CAAC,CAAC;IAE3E,YACiD,SAA6B,EACzB,aAAqC,EACnC,WAAqC,EACzE,UAAsC,EACtC,QAAkC,EACV,IAAuB;QALjB,cAAS,GAAT,SAAS,CAAoB;QACzB,kBAAa,GAAb,aAAa,CAAwB;QACnC,gBAAW,GAAX,WAAW,CAA0B;QACzE,eAAU,GAAV,UAAU,CAA4B;QACtC,aAAQ,GAAR,QAAQ,CAA0B;QACV,SAAI,GAAJ,IAAI,CAAmB;IAC/D,CAAC;IAEJ,yEAAyE;IACzE,KAAK,CAAC,gBAAgB;QACpB,OAAO,UAAU,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IACtE,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,OAAO,CACX,KAAqC,EACrC,MAAc,EACd,eAAwB;QAExB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;QAC/C,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;QAE5C,yEAAyE;QACzE,MAAM,EAAE,cAAc,EAAE,aAAa,EAAE,GAAG,MAAM,EAAE,GAAG,KAAK,CAAC;QAC3D,MAAM,MAAM,GAAsD;YAChE,MAAM,EAAE,WAAW;YACnB,KAAK,EAAE,WAAW;SACnB,CAAC;QACF,IAAI,IAA8B,CAAC;QACnC,IAAI,aAAa,GAAa,EAAE,CAAC;QAEjC,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YACzB,wEAAwE;YACxE,sEAAsE;YACtE,uEAAuE;YACvE,uEAAuE;YACvE,IAAI,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YACtB,aAAa,GAAG,4BAA4B,CAAC,KAAK,CAAC,CAAC;YAEpD,KAAK,MAAM,IAAI,IAAI,wDAA0B,EAAE,CAAC;gBAC9C,IAAI,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC7B,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,mEAAqC,EAAE,IAAI,CAAC,CAAC;oBACjF,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC;gBAC3B,CAAC;YACH,CAAC;QACH,CAAC;aAAM,CAAC;YACN,uEAAuE;YACvE,gEAAgE;YAChE,MAAM,MAAM,GAAmC;gBAC7C,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,UAAU,EAAE,MAAM,CAAC,UAAoB;gBACvC,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,IAAI;aACpC,CAAC;YACF,IAAI,GAAG,MAAM,CAAC;YAEd,MAAM,cAAc,GAAG,CAAC,IAAA,4BAAa,EAAC,cAAc,CAAC,CAAC;YACtD,MAAM,aAAa,GAAG,MAAM,CAAC,SAAS,KAAK,IAAI,IAAI,CAAC,IAAA,4BAAa,EAAC,aAAa,CAAC,CAAC;YAEjF,IAAI,CAAC,cAAc,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC;gBAClD,MAAM,IAAI,4BAAmB,CAC3B,2EAA2E;oBACzE,sFAAsF,CACzF,CAAC;YACJ,CAAC;YAED,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI,IAAI,CAAC,aAAa,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;gBAC7E,MAAM,IAAI,4BAAmB,CAC3B,+FAA+F;oBAC7F,4CAA4C,CAC/C,CAAC;YACJ,CAAC;YAED,IAAI,cAAc,EAAE,CAAC;gBACnB,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,cAAwB,EAAE,MAAM,CAAC,CAAC;gBACnE,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC;YACxB,CAAC;YAED,IAAI,aAAa,EAAE,CAAC;gBAClB,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,aAAuB,EAAE,MAAM,CAAC,CAAC;gBACjE,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC;YACvB,CAAC;iBAAM,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI,IAAI,MAAM,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;gBACjE,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,mEAAqC,EAAE,OAAO,CAAC,CAAC;gBACpF,MAAM,CAAC,KAAK,GAAG,SAAS,CAAC;YAC3B,CAAC;QACH,CAAC;QAED,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,+DAAiC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAEnF,2DAA2D;QAC3D,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;QAC9C,MAAM,aAAa,GAAG,wBAAwB,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAEpE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;QAExD,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,gDAAwC,EAAE;YACjE,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;YACtC,QAAQ;YACR,aAAa;YACb,WAAW,EAAE,MAAM;YACnB,+DAA+D;YAC/D,GAAG,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvD,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,sCAAsC,MAAM,GAAG;YAC7C,mBAAmB,MAAM,CAAC,QAAQ,CAAC,MAAM,aAAa,QAAQ,YAAY,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,GAAG;YAChH,kBAAkB,MAAM,CAAC,MAAM,kBAAkB,MAAM,CAAC,KAAK,GAAG,CACnE,CAAC;QAEF,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAE9B,OAAO,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IAC5C,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,KAAK,CAAC,MAAc,EAAE,eAAwB;QAClD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;QAC/C,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;QAE5C,MAAM,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,+DAAiC,CAAC,CAAC;QAEtE,MAAM,OAAO,GAA8B,EAAE,CAAC;QAC9C,KAAK,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAU,EAAE,CAAC;YAChD,IAAI,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC7B,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,mEAAqC,EAAE,IAAI,CAAC,CAAC;gBACjF,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;QAE9C,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,+CAAuC,EAAE;YAChE,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;YACtC,mBAAmB,EAAE,MAAM,CAAC,GAAG,KAAK,IAAI;YACxC,kBAAkB,EAAE,OAAO;YAC3B,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM;SAC9B,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,sCAAsC,MAAM,GAAG;YAC7C,mBAAmB,MAAM,CAAC,QAAQ,CAAC,MAAM,WAAW,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAC/E,CAAC;QAEF,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAE9B,OAAO,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IAC5C,CAAC;IAED,8EAA8E;IAEtE,aAAa,CAAC,KAA+B,EAAE,eAAmC;QACxF,MAAM,cAAc,GAAG,KAAK,CAAC,GAAG,EAAE,OAAO,IAAI,CAAC,CAAC;QAE/C,IAAI,eAAe,KAAK,SAAS,IAAI,cAAc,KAAK,eAAe,EAAE,CAAC;YACxE,MAAM,IAAI,0BAAiB,CACzB,mDAAmD,eAAe,WAAW,cAAc,EAAE,CAC9F,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,IAA6B,EAAE,QAAgB,EAAE,MAAc;QACvF,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,mEAAqC,EAAE,IAAI,EAAE,QAAQ,EAAE;YACtF,KAAK,EAAE,kEAAoC,CAAC,IAAI,CAAC;YACjD,eAAe,EAAE,MAAM;SACxB,CAAC,CAAC;IACL,CAAC;IAED,sFAAsF;IAC9E,KAAK,CAAC,gBAAgB;QAC5B,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QAElC,MAAM,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC;YACrC,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,IAAI,EAAE,sDAAwB;YAC9B,IAAI,EAAE,qBAAqB;SAC5B,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,KAAK,CAAC,MAAc,EAAE,MAAc,EAAE,IAA6B;QAC/E,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;YAC1B,WAAW,EAAE,MAAM;YACnB,MAAM;YACN,UAAU,EAAE,iBAAiB;YAC7B,QAAQ,EAAE,+DAAiC;YAC3C,IAAI;SACL,CAAC,CAAC;IACL,CAAC;CACF,CAAA;AAxMY,0EAA+B;0CAA/B,+BAA+B;IAD3C,IAAA,mBAAU,GAAE;IAKR,WAAA,IAAA,eAAM,EAAC,4BAAoB,CAAC,CAAA;IAC5B,WAAA,IAAA,eAAM,EAAC,gCAAwB,CAAC,CAAA;IAChC,WAAA,IAAA,eAAM,EAAC,kCAA0B,CAAC,CAAA;IAGlC,WAAA,IAAA,eAAM,EAAC,sBAAc,CAAC,CAAA;6DAFM,yDAA0B;QAC5B,qDAAwB;GAR1C,+BAA+B,CAwM3C;AAED;;;;;GAKG;AACH,SAAgB,wBAAwB,CACtC,MAAuC,EACvC,KAA+B;IAE/B,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,iBAAiB,CAAC,CAAC;IAE5E,8EAA8E;IAC9E,MAAM,KAAK,GAAG,CAAC,KAA+B,EAAE,IAAwC,EAAE,EAAE,CAC1F,KAAK,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAE,KAAiC,CAAC,IAAI,CAAC,CAAC;IAEhG,OAAO,iBAAiB,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;AACxF,CAAC;AAED,qFAAqF;AACrF,SAAS,4BAA4B,CAAC,KAAqC;IACzE,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS;QAAE,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC/D,IAAI,CAAC,IAAA,4BAAa,EAAC,KAAK,CAAC,cAAc,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACzE,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,KAAK,CAAC,SAAS,KAAK,IAAI;QAAE,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACzF,IAAI,CAAC,IAAA,4BAAa,EAAC,KAAK,CAAC,aAAa,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAEvE,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,uFAAuF;AACvF,SAAgB,UAAU,CACxB,KAA+B,EAC/B,UAGC;IAED,MAAM,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;IAE3B,MAAM,MAAM,GAAG,CAAC,IAA6B,EAAE,EAAE;QAC/C,MAAM,KAAK,GAAG,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;QAEnE,sEAAsE;QACtE,wEAAwE;QACxE,yEAAyE;QACzE,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,iBAAiB,EAAE,CAAC;YAChE,uEAAuE;YACvE,wEAAwE;YACxE,MAAM,IAAI,GAA0B,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAE3E,OAAO;gBACL,UAAU,EAAE,IAAI,KAAK,IAAI;gBACzB,IAAI,EAAE,IAAI,EAAE,IAAI,IAAI,IAAI;gBACxB,SAAS,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,IAAI,IAAI;gBAChD,eAAe,EAAE,IAAI,EAAE,eAAe,IAAI,IAAI;aAC/C,CAAC;QACJ,CAAC;QAED,OAAO;YACL,UAAU,EAAE,OAAO,CAAC,KAAK,EAAE,WAAW,CAAC;YACvC,IAAI,EAAE,IAAI;YACV,SAAS,EAAE,IAAI;YACf,eAAe,EAAE,IAAI;SACtB,CAAC;IACJ,CAAC,CAAC;IAEF,OAAO;QACL,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,oEAAoE;QACpE,IAAI,EAAE,QAAQ,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI;QACzD,aAAa,EAAE,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI;QACrF,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;QAC7C,UAAU,EAAE,UAAU,CAAC,kBAAkB,EAAE;QAC3C,OAAO,EAAE,UAAU,CAAC,oBAAoB,CAAC,OAAO,CAAC;QACjD,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,IAAI;QAChC,SAAS,EAAE,QAAQ,CAAC,KAAK,EAAE,IAAI,IAAI,IAAI;QACvC,UAAU,EAAE,UAAU,CAAC,YAAY,EAAE;QACrC,eAAe,EAAE,UAAU,CAAC,iBAAiB,EAAE;QAC/C,WAAW,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE;QACjE,OAAO,EAAE,KAAK,CAAC,GAAG,EAAE,OAAO,IAAI,CAAC;QAChC,SAAS,EAAE,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,WAAW,EAAE,IAAI,IAAI;QACrD,SAAS,EAAE,KAAK,CAAC,GAAG,EAAE,aAAa,IAAI,IAAI;KAC5C,CAAC;AACJ,CAAC"}

package/dist/telemetry/connection/telemetry-connection-test.service.d.ts

@@ -0,0 +1,41 @@
+import { type ClientConfig } from 'pg';
+import type { TelemetryConnectionTestResult, TestTelemetryConnectionInput } from './dto/telemetry-connection.dto';
+import { type HostCheckOptions } from '../stores/greptime/greptime-host';
+import { TelemetryConnectionService } from './telemetry-connection.service';
+/** The subset of `pg.Client` a probe uses — what a test substitutes. */
+export interface TelemetryProbeClient {
+    connect(): Promise<unknown>;
+    query(config: {
+        text: string;
+        rowMode: 'array';
+    }): Promise<{
+        rows: unknown[][];
+    }>;
+    end(): Promise<void>;
+    on(event: 'error', listener: (error: Error) => void): unknown;
+}
+export declare class TelemetryConnectionTestService {
+    private readonly connection;
+    private readonly logger;
+    constructor(connection: TelemetryConnectionService);
+    test(input: TestTelemetryConnectionInput, userId: string): Promise<TelemetryConnectionTestResult>;
+    /** Builds a client. A seam for tests; production code never overrides it. */
+    protected createClient(config: ClientConfig): TelemetryProbeClient;
+    /**
+     * `null` when `host` resolves (or the check is inconclusive), else why it
+     * does not. A seam for tests; production code never overrides it.
+     */
+    protected resolveHost(host: string, options: HostCheckOptions): Promise<string | null>;
+    /**
+     * AUTOMATIC (issue #570): the GreptimeDB deployed with this application, with
+     * the deployment's host, port, database, logins and passwords — whatever the
+     * request carried. An administrator never supplies them, so a guess typed
+     * into the form can neither be tested here nor mask a working deployment.
+     */
+    private deploymentCandidate;
+    /** CUSTOM: the submitted connection; a blank password is the one in force. */
+    private customCandidate;
+    private passwordFor;
+    private probe;
+}
+//# sourceMappingURL=telemetry-connection-test.service.d.ts.map

package/dist/telemetry/connection/telemetry-connection-test.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry-connection-test.service.d.ts","sourceRoot":"","sources":["../../../src/telemetry/connection/telemetry-connection-test.service.ts"],"names":[],"mappings":"AACA,OAAO,EAAU,KAAK,YAAY,EAAE,MAAM,IAAI,CAAC;AAG/C,OAAO,KAAK,EAEV,6BAA6B,EAC7B,4BAA4B,EAC7B,MAAM,gCAAgC,CAAC;AAExC,OAAO,EAAsD,KAAK,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AAE7H,OAAO,EAGL,0BAA0B,EAC3B,MAAM,gCAAgC,CAAC;AA0DxC,wEAAwE;AACxE,MAAM,WAAW,oBAAoB;IACnC,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5B,KAAK,CAAC,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAA;KAAE,CAAC,CAAC;IAClF,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACrB,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,GAAG,OAAO,CAAC;CAC/D;AA4BD,qBACa,8BAA8B;IAG7B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAFvC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAmD;gBAE7C,UAAU,EAAE,0BAA0B;IAE7D,IAAI,CAAC,KAAK,EAAE,4BAA4B,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,6BAA6B,CAAC;IA8CvG,6EAA6E;IAC7E,SAAS,CAAC,YAAY,CAAC,MAAM,EAAE,YAAY,GAAG,oBAAoB;IAIlE;;;OAGG;IACH,SAAS,CAAC,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAMtF;;;;;OAKG;IACH,OAAO,CAAC,mBAAmB;IAkB3B,8EAA8E;YAChE,eAAe;YAiBf,WAAW;YAMX,KAAK;CAuDpB"}