@precisa-saude/fhir-rnds 0.1.0

package/README.md

@@ -0,0 +1,129 @@
+# @precisa-saude/fhir-rnds
+
+Cliente HTTP para a RNDS (Rede Nacional de Dados em Saúde) — API FHIR R4 do DATASUS com autenticação mTLS, cache de token JWT e zero dependências runtime externas.
+
+## Instalação
+
+```bash
+npm install @precisa-saude/fhir-rnds
+```
+
+> **Nota:** Requer Node.js >= 20 (fetch nativo) e `@precisa-saude/fhir` como peer dependency.
+
+## Pré-requisitos
+
+Para utilizar a RNDS, é necessário:
+
+1. **Certificado digital ICP-Brasil** — arquivo `.pfx` emitido para o estabelecimento de saúde
+2. **CNES** — código do Cadastro Nacional de Estabelecimentos de Saúde (7 dígitos)
+3. **CNS** — Cartão Nacional de Saúde do profissional responsável (15 dígitos)
+4. **Credenciamento no Portal de Serviços DATASUS** — via conta gov.br
+
+Consulte o [guia oficial da RNDS](https://rnds-guia.saude.gov.br/docs/publico-alvo/ti/conhecer) para detalhes sobre o processo de credenciamento.
+
+## Uso rápido
+
+### Configurar o cliente
+
+```ts
+import { RNDSClient } from '@precisa-saude/fhir-rnds';
+
+const client = new RNDSClient({
+  certificate: './certificado.pfx', // caminho ou Buffer
+  certificatePassword: process.env.RNDS_CERT_PASSWORD!,
+  cnes: '1234567',
+  cns: '123456789012345',
+  environment: 'homologation', // ou 'production'
+});
+```
+
+### Consultar paciente
+
+```ts
+// Por CPF
+const patient = await client.getPatientByCpf('12345678900');
+console.log(patient?.name);
+// [{ family: 'Silva', given: ['João'] }]
+
+// Por CNS
+const patient2 = await client.getPatientByCns('123456789012345');
+```
+
+### Consultar estabelecimento e profissional
+
+```ts
+const org = await client.getOrganizationByCnes('1234567');
+console.log(org?.name);
+// 'Hospital São Paulo'
+
+const practitioner = await client.getPractitionerByCns('123456789012345');
+console.log(practitioner?.name);
+// [{ family: 'Santos', given: ['Maria'] }]
+```
+
+### Enviar resultados laboratoriais
+
+```ts
+import { labResultToFHIRBundle } from '@precisa-saude/fhir';
+
+const bundle = labResultToFHIRBundle(report, observations, profile);
+const result = await client.submitBundle(bundle);
+```
+
+## Autenticação
+
+O cliente gerencia a autenticação automaticamente:
+
+1. Apresenta o certificado `.pfx` via mutual TLS ao endpoint de autenticação
+2. Recebe um token JWT (válido por 30 minutos)
+3. Cacheia o token e renova automaticamente antes de expirar
+4. Deduplica requisições de renovação concorrentes
+
+## Ambientes
+
+| Ambiente       | Autenticação                | API                             |
+| -------------- | --------------------------- | ------------------------------- |
+| `homologation` | `ehr-auth-hmg.saude.gov.br` | `ehr-services.hmg.saude.gov.br` |
+| `production`   | `ehr-auth.saude.gov.br`     | `ehr-services.saude.gov.br`     |
+
+## API
+
+### `RNDSClient`
+
+| Método                        | Retorno                    | Descrição                                          |
+| ----------------------------- | -------------------------- | -------------------------------------------------- |
+| `getPatientByCpf(cpf)`        | `FHIRPatient \| null`      | Busca paciente por CPF                             |
+| `getPatientByCns(cns)`        | `FHIRPatient \| null`      | Busca paciente por CNS                             |
+| `getOrganizationByCnes(cnes)` | `FHIROrganization \| null` | Busca estabelecimento por CNES                     |
+| `getPractitionerByCns(cns)`   | `FHIRPractitioner \| null` | Busca profissional por CNS                         |
+| `submitBundle(bundle)`        | `FHIRBundle`               | Envia bundle FHIR (resultados laboratoriais, etc.) |
+
+### Erros
+
+| Classe                | Quando                                                  |
+| --------------------- | ------------------------------------------------------- |
+| `RNDSAuthError`       | Falha de autenticação (401, 403, certificado inválido)  |
+| `RNDSValidationError` | Erro de validação FHIR (422), inclui `OperationOutcome` |
+| `RNDSNotFoundError`   | Recurso não encontrado (404)                            |
+| `RNDSError`           | Outros erros HTTP                                       |
+
+### Tipos FHIR adicionais
+
+O pacote exporta tipos FHIR R4 que ainda não existem no core:
+
+- `FHIROrganization`, `FHIRPractitioner`, `FHIRIdentifier`
+- `FHIROperationOutcome`, `FHIROperationOutcomeIssue`
+- `RNDSSearchBundle<T>`, `RNDSTokenResponse`
+
+## Referências
+
+- [Guia oficial RNDS — DATASUS](https://rnds-guia.saude.gov.br/docs/conector)
+- [kyriosdata/rnds](https://github.com/kyriosdata/rnds) — implementação de referência
+
+## Aviso médico
+
+Este pacote é uma ferramenta de integração técnica com a RNDS. Os dados acessados ou enviados **não constituem diagnóstico médico** e não substituem avaliação profissional. Consulte o [DISCLAIMER.md](../../DISCLAIMER.md) na raiz do repositório para detalhes completos.
+
+## Licença
+
+[Apache-2.0](../../LICENSE)

package/dist/index.cjs

@@ -0,0 +1,311 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; } function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; } var _class;// src/client.ts
+var _fs = require('fs'); var _fs2 = _interopRequireDefault(_fs);
+
+// src/errors.ts
+var RNDSError = class extends Error {
+  constructor(message, statusCode, operationOutcome) {
+    super(message);
+    this.statusCode = statusCode;
+    this.operationOutcome = operationOutcome;
+    this.name = "RNDSError";
+  }
+};
+var RNDSAuthError = class extends RNDSError {
+  constructor(message, statusCode) {
+    super(message, statusCode);
+    this.name = "RNDSAuthError";
+  }
+};
+var RNDSNotFoundError = class extends RNDSError {
+  constructor(message) {
+    super(message, 404);
+    this.name = "RNDSNotFoundError";
+  }
+};
+var RNDSValidationError = class extends RNDSError {
+  constructor(message, operationOutcome) {
+    super(message, 422, operationOutcome);
+    this.name = "RNDSValidationError";
+  }
+};
+
+// src/http.ts
+var _https = require('https'); var _https2 = _interopRequireDefault(_https);
+function httpsRequestWithCert(url, certOptions, options) {
+  return new Promise((resolve, reject) => {
+    const parsedUrl = new URL(url);
+    const req = _https2.default.request(
+      {
+        headers: _optionalChain([options, 'optionalAccess', _ => _.headers]),
+        hostname: parsedUrl.hostname,
+        method: _nullishCoalesce(_optionalChain([options, 'optionalAccess', _2 => _2.method]), () => ( "GET")),
+        passphrase: certOptions.passphrase,
+        path: parsedUrl.pathname + parsedUrl.search,
+        pfx: certOptions.pfx,
+        port: Number(parsedUrl.port) || 443,
+        timeout: _nullishCoalesce(_optionalChain([options, 'optionalAccess', _3 => _3.timeout]), () => ( 3e4))
+      },
+      (res) => {
+        const chunks = [];
+        res.on("data", (chunk) => {
+          chunks.push(chunk);
+        });
+        res.on("error", (err) => {
+          reject(new Error(`Erro na resposta HTTPS: ${err.message}`));
+        });
+        res.on("end", () => {
+          resolve({
+            body: Buffer.concat(chunks).toString("utf-8"),
+            headers: res.headers,
+            statusCode: _nullishCoalesce(res.statusCode, () => ( 0))
+          });
+        });
+      }
+    );
+    req.on("error", (err) => {
+      reject(new Error(`Erro na requisi\xE7\xE3o HTTPS: ${err.message}`));
+    });
+    req.on("timeout", () => {
+      req.destroy();
+      reject(new Error("Timeout na requisi\xE7\xE3o HTTPS"));
+    });
+    if (_optionalChain([options, 'optionalAccess', _4 => _4.body])) {
+      req.write(options.body);
+    }
+    req.end();
+  });
+}
+
+// src/auth.ts
+var TOKEN_REFRESH_MARGIN_MS = 6e4;
+var RNDSAuth = (_class = class {
+  constructor(pfx, passphrase, authBaseUrl) {;_class.prototype.__init.call(this);_class.prototype.__init2.call(this);_class.prototype.__init3.call(this);
+    this.pfx = pfx;
+    this.passphrase = passphrase;
+    this.authBaseUrl = authBaseUrl;
+  }
+  __init() {this.token = null}
+  __init2() {this.expiresAt = 0}
+  __init3() {this.pendingRefresh = null}
+  async getToken() {
+    if (this.isTokenValid()) {
+      return this.token;
+    }
+    return this.refreshToken();
+  }
+  async refreshToken() {
+    if (this.pendingRefresh) {
+      return this.pendingRefresh;
+    }
+    this.pendingRefresh = this.fetchToken();
+    try {
+      const token = await this.pendingRefresh;
+      return token;
+    } finally {
+      this.pendingRefresh = null;
+    }
+  }
+  isTokenValid() {
+    return this.token !== null && Date.now() < this.expiresAt - TOKEN_REFRESH_MARGIN_MS;
+  }
+  async fetchToken() {
+    const url = `${this.authBaseUrl}/api/token`;
+    let response;
+    try {
+      response = await httpsRequestWithCert(url, {
+        passphrase: this.passphrase,
+        pfx: this.pfx
+      });
+    } catch (err) {
+      throw new RNDSAuthError(
+        `Falha na autentica\xE7\xE3o com a RNDS: ${err instanceof Error ? err.message : String(err)}`
+      );
+    }
+    if (response.statusCode !== 200) {
+      throw new RNDSAuthError(
+        `Autentica\xE7\xE3o RNDS falhou com status ${response.statusCode}: ${response.body}`,
+        response.statusCode
+      );
+    }
+    let tokenData;
+    try {
+      tokenData = JSON.parse(response.body);
+    } catch (e) {
+      throw new RNDSAuthError("Resposta de autentica\xE7\xE3o RNDS inv\xE1lida: JSON malformado");
+    }
+    if (!tokenData.access_token) {
+      throw new RNDSAuthError("Resposta de autentica\xE7\xE3o RNDS n\xE3o cont\xE9m access_token");
+    }
+    this.token = tokenData.access_token;
+    this.expiresAt = this.extractExpiry(tokenData);
+    return this.token;
+  }
+  extractExpiry(tokenData) {
+    if (tokenData.expires_in) {
+      return Date.now() + tokenData.expires_in;
+    }
+    try {
+      const parts = tokenData.access_token.split(".");
+      if (parts.length === 3) {
+        const payload = JSON.parse(Buffer.from(parts[1], "base64url").toString());
+        if (payload.exp) {
+          return payload.exp * 1e3;
+        }
+      }
+    } catch (e2) {
+    }
+    return Date.now() + 30 * 60 * 1e3;
+  }
+}, _class);
+
+// src/config.ts
+var RNDS_ENDPOINTS = {
+  homologation: {
+    api: "https://ehr-services.hmg.saude.gov.br/api/fhir/r4",
+    auth: "https://ehr-auth-hmg.saude.gov.br"
+  },
+  production: {
+    api: "https://ehr-services.saude.gov.br/api/fhir/r4",
+    auth: "https://ehr-auth.saude.gov.br"
+  }
+};
+function resolveEndpoints(environment) {
+  return RNDS_ENDPOINTS[environment];
+}
+function validateConfig(config) {
+  const errors = [];
+  if (!config.certificate) {
+    errors.push("certificate \xE9 obrigat\xF3rio");
+  }
+  if (!config.certificatePassword) {
+    errors.push("certificatePassword \xE9 obrigat\xF3rio");
+  }
+  if (!config.cnes) {
+    errors.push("cnes \xE9 obrigat\xF3rio");
+  } else if (!/^\d{7}$/.test(config.cnes)) {
+    errors.push("cnes deve ter exatamente 7 d\xEDgitos");
+  }
+  if (!config.cns) {
+    errors.push("cns \xE9 obrigat\xF3rio");
+  } else if (!/^\d{15}$/.test(config.cns)) {
+    errors.push("cns deve ter exatamente 15 d\xEDgitos");
+  }
+  if (!config.environment) {
+    errors.push("environment \xE9 obrigat\xF3rio");
+  } else if (config.environment !== "homologation" && config.environment !== "production") {
+    errors.push('environment deve ser "homologation" ou "production"');
+  }
+  return { errors, valid: errors.length === 0 };
+}
+
+// src/client.ts
+var RNDS_NS = {
+  cns: "http://rnds.saude.gov.br/fhir/r4/NamingSystem/cns",
+  cpf: "http://rnds.saude.gov.br/fhir/r4/NamingSystem/cpf"
+};
+var RNDSClient = class {
+  
+  
+  
+  constructor(config) {
+    const validation = validateConfig(config);
+    if (!validation.valid) {
+      throw new RNDSError(`Configura\xE7\xE3o inv\xE1lida: ${validation.errors.join("; ")}`);
+    }
+    const pfx = typeof config.certificate === "string" ? _fs2.default.readFileSync(config.certificate) : config.certificate;
+    const endpoints = resolveEndpoints(config.environment);
+    this.apiBaseUrl = endpoints.api;
+    this.cns = config.cns;
+    this.auth = new RNDSAuth(pfx, config.certificatePassword, endpoints.auth);
+  }
+  async getPatientByCpf(cpf) {
+    return this.get(`/Patient?identifier=${RNDS_NS.cpf}|${encodeURIComponent(cpf)}`);
+  }
+  async getPatientByCns(cns) {
+    return this.get(`/Patient/${encodeURIComponent(cns)}`);
+  }
+  async getOrganizationByCnes(cnes) {
+    return this.get(`/Organization/${encodeURIComponent(cnes)}`);
+  }
+  async getPractitionerByCns(cns) {
+    return this.get(`/Practitioner/${encodeURIComponent(cns)}`);
+  }
+  async submitBundle(bundle) {
+    return this.post("/Bundle", bundle);
+  }
+  async get(path) {
+    const response = await this.request(path, "GET");
+    if (response.status === 404) {
+      return null;
+    }
+    await this.handleErrorResponse(response);
+    return await response.json();
+  }
+  async post(path, body) {
+    const response = await this.request(path, "POST", body);
+    await this.handleErrorResponse(response);
+    return await response.json();
+  }
+  async request(path, method, body) {
+    const headers = await this.buildHeaders();
+    const url = `${this.apiBaseUrl}${path}`;
+    return fetch(url, {
+      body: body ? JSON.stringify(body) : void 0,
+      headers,
+      method
+    });
+  }
+  async buildHeaders() {
+    const token = await this.auth.getToken();
+    return {
+      Accept: "application/json",
+      Authorization: this.cns,
+      "Content-Type": "application/json",
+      "X-Authorization-Server": `Bearer ${token}`
+    };
+  }
+  async handleErrorResponse(response) {
+    if (response.ok) {
+      return;
+    }
+    let body;
+    try {
+      body = await response.text();
+    } catch (e3) {
+      body = "";
+    }
+    let operationOutcome;
+    try {
+      const parsed = JSON.parse(body);
+      if (parsed.resourceType === "OperationOutcome") {
+        operationOutcome = parsed;
+      }
+    } catch (e4) {
+    }
+    if (response.status === 401 || response.status === 403) {
+      throw new RNDSAuthError(
+        `Autentica\xE7\xE3o RNDS falhou (${response.status}): ${body}`,
+        response.status
+      );
+    }
+    if (response.status === 422) {
+      throw new RNDSValidationError(`Erro de valida\xE7\xE3o FHIR (422): ${body}`, operationOutcome);
+    }
+    throw new RNDSError(
+      `Erro na requisi\xE7\xE3o RNDS (${response.status}): ${body}`,
+      response.status,
+      operationOutcome
+    );
+  }
+};
+
+
+
+
+
+
+
+
+
+exports.RNDSAuthError = RNDSAuthError; exports.RNDSClient = RNDSClient; exports.RNDSError = RNDSError; exports.RNDSNotFoundError = RNDSNotFoundError; exports.RNDSValidationError = RNDSValidationError; exports.RNDS_ENDPOINTS = RNDS_ENDPOINTS; exports.resolveEndpoints = resolveEndpoints; exports.validateConfig = validateConfig;
+//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["/home/runner/work/fhir-brasil/fhir-brasil/packages/rnds/dist/index.cjs","../src/client.ts","../src/errors.ts","../src/http.ts","../src/auth.ts","../src/config.ts"],"names":[],"mappings":"AAAA;ACQA,gEAAe;ADNf;AACA;AEGO,IAAM,UAAA,EAAN,MAAA,QAAwB,MAAM;AAAA,EACnC,WAAA,CACE,OAAA,EACgB,UAAA,EACA,gBAAA,EAChB;AACA,IAAA,KAAA,CAAM,OAAO,CAAA;AAHG,IAAA,IAAA,CAAA,WAAA,EAAA,UAAA;AACA,IAAA,IAAA,CAAA,iBAAA,EAAA,gBAAA;AAGhB,IAAA,IAAA,CAAK,KAAA,EAAO,WAAA;AAAA,EACd;AACF,CAAA;AAEO,IAAM,cAAA,EAAN,MAAA,QAA4B,UAAU;AAAA,EAC3C,WAAA,CAAY,OAAA,EAAiB,UAAA,EAAqB;AAChD,IAAA,KAAA,CAAM,OAAA,EAAS,UAAU,CAAA;AACzB,IAAA,IAAA,CAAK,KAAA,EAAO,eAAA;AAAA,EACd;AACF,CAAA;AAEO,IAAM,kBAAA,EAAN,MAAA,QAAgC,UAAU;AAAA,EAC/C,WAAA,CAAY,OAAA,EAAiB;AAC3B,IAAA,KAAA,CAAM,OAAA,EAAS,GAAG,CAAA;AAClB,IAAA,IAAA,CAAK,KAAA,EAAO,mBAAA;AAAA,EACd;AACF,CAAA;AAEO,IAAM,oBAAA,EAAN,MAAA,QAAkC,UAAU;AAAA,EACjD,WAAA,CAAY,OAAA,EAAiB,gBAAA,EAAyC;AACpE,IAAA,KAAA,CAAM,OAAA,EAAS,GAAA,EAAK,gBAAgB,CAAA;AACpC,IAAA,IAAA,CAAK,KAAA,EAAO,qBAAA;AAAA,EACd;AACF,CAAA;AFNA;AACA;AGvBA,4EAAkB;AAaX,SAAS,oBAAA,CACd,GAAA,EACA,WAAA,EACA,OAAA,EAMwB;AACxB,EAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,EAAS,MAAA,EAAA,GAAW;AACtC,IAAA,MAAM,UAAA,EAAY,IAAI,GAAA,CAAI,GAAG,CAAA;AAE7B,IAAA,MAAM,IAAA,EAAM,eAAA,CAAM,OAAA;AAAA,MAChB;AAAA,QACE,OAAA,kBAAS,OAAA,2BAAS,SAAA;AAAA,QAClB,QAAA,EAAU,SAAA,CAAU,QAAA;AAAA,QACpB,MAAA,mCAAQ,OAAA,6BAAS,QAAA,UAAU,OAAA;AAAA,QAC3B,UAAA,EAAY,WAAA,CAAY,UAAA;AAAA,QACxB,IAAA,EAAM,SAAA,CAAU,SAAA,EAAW,SAAA,CAAU,MAAA;AAAA,QACrC,GAAA,EAAK,WAAA,CAAY,GAAA;AAAA,QACjB,IAAA,EAAM,MAAA,CAAO,SAAA,CAAU,IAAI,EAAA,GAAK,GAAA;AAAA,QAChC,OAAA,mCAAS,OAAA,6BAAS,SAAA,UAAW;AAAA,MAC/B,CAAA;AAAA,MACA,CAAC,GAAA,EAAA,GAAQ;AACP,QAAA,MAAM,OAAA,EAAmB,CAAC,CAAA;AAE1B,QAAA,GAAA,CAAI,EAAA,CAAG,MAAA,EAAQ,CAAC,KAAA,EAAA,GAAkB;AAChC,UAAA,MAAA,CAAO,IAAA,CAAK,KAAK,CAAA;AAAA,QACnB,CAAC,CAAA;AAED,QAAA,GAAA,CAAI,EAAA,CAAG,OAAA,EAAS,CAAC,GAAA,EAAA,GAAQ;AACvB,UAAA,MAAA,CAAO,IAAI,KAAA,CAAM,CAAA,wBAAA,EAA2B,GAAA,CAAI,OAAO,CAAA,CAAA;AACxD,QAAA;AAEmB,QAAA;AACV,UAAA;AACsC,YAAA;AAC/B,YAAA;AACiB,YAAA;AAC/B,UAAA;AACF,QAAA;AACH,MAAA;AACF,IAAA;AAEyB,IAAA;AAC2B,MAAA;AACnD,IAAA;AAEuB,IAAA;AACV,MAAA;AACmC,MAAA;AAChD,IAAA;AAEkB,IAAA;AACK,MAAA;AACxB,IAAA;AAEQ,IAAA;AACT,EAAA;AACH;AHJkE;AACA;AIlElC;AAEV;AASlB,EAAA;AAHiB,IAAA;AACA,IAAA;AACA,IAAA;AAChB,EAAA;AAR4B,iBAAA;AACX,kBAAA;AAC6B,kBAAA;AAQf,EAAA;AACP,IAAA;AACX,MAAA;AACd,IAAA;AAEyB,IAAA;AAC3B,EAAA;AAEsC,EAAA;AACX,IAAA;AACX,MAAA;AACd,IAAA;AAEsC,IAAA;AAElC,IAAA;AACuB,MAAA;AAClB,MAAA;AACP,IAAA;AACsB,MAAA;AACxB,IAAA;AACF,EAAA;AAEwB,EAAA;AACsC,IAAA;AAC9D,EAAA;AAE4C,EAAA;AACX,IAAA;AAE3B,IAAA;AACA,IAAA;AACyC,MAAA;AACxB,QAAA;AACP,QAAA;AACX,MAAA;AACW,IAAA;AACF,MAAA;AAC4C,QAAA;AACtD,MAAA;AACF,IAAA;AAEiC,IAAA;AACrB,MAAA;AACwC,QAAA;AACvC,QAAA;AACX,MAAA;AACF,IAAA;AAEI,IAAA;AACA,IAAA;AACkC,MAAA;AAC9B,IAAA;AACkB,MAAA;AAC1B,IAAA;AAE6B,IAAA;AACH,MAAA;AAC1B,IAAA;AAEuB,IAAA;AACsB,IAAA;AAEjC,IAAA;AACd,EAAA;AAE4D,EAAA;AAEhC,IAAA;AACM,MAAA;AAChC,IAAA;AAEI,IAAA;AAC4C,MAAA;AACtB,MAAA;AAC4B,QAAA;AAGjC,QAAA;AACM,UAAA;AACvB,QAAA;AACF,MAAA;AACM,IAAA;AAER,IAAA;AAE8B,IAAA;AAChC,EAAA;AACF;AJ8CkE;AACA;AKrII;AACtD,EAAA;AACP,IAAA;AACC,IAAA;AACR,EAAA;AACY,EAAA;AACL,IAAA;AACC,IAAA;AACR,EAAA;AACF;AAE8E;AAC3C,EAAA;AACnC;AAEyF;AAC7D,EAAA;AAED,EAAA;AACgB,IAAA;AACzC,EAAA;AAEiC,EAAA;AACgB,IAAA;AACjD,EAAA;AAEkB,EAAA;AACgB,IAAA;AACO,EAAA;AACS,IAAA;AAClD,EAAA;AAEiB,EAAA;AACgB,IAAA;AACQ,EAAA;AACS,IAAA;AAClD,EAAA;AAEyB,EAAA;AACgB,IAAA;AACkB,EAAA;AAC7C,IAAA;AACd,EAAA;AAE4C,EAAA;AAC9C;AL+HkE;AACA;ACtLlD;AACT,EAAA;AACA,EAAA;AACP;AAEwB;AACL,EAAA;AACA,EAAA;AACA,EAAA;AAEe,EAAA;AACU,IAAA;AACjB,IAAA;AACyB,MAAA;AAChD,IAAA;AAIS,IAAA;AAG4C,IAAA;AACzB,IAAA;AACV,IAAA;AACwC,IAAA;AAC5D,EAAA;AAEgE,EAAA;AACK,IAAA;AACrE,EAAA;AAEgE,EAAA;AACI,IAAA;AACpE,EAAA;AAE4E,EAAA;AACG,IAAA;AAC/E,EAAA;AAE0E,EAAA;AACI,IAAA;AAC9E,EAAA;AAE4D,EAAA;AACZ,IAAA;AAChD,EAAA;AAEsD,EAAA;AACL,IAAA;AAElB,IAAA;AACpB,MAAA;AACT,IAAA;AAEuC,IAAA;AACX,IAAA;AAC9B,EAAA;AAE+D,EAAA;AACP,IAAA;AACf,IAAA;AACX,IAAA;AAC9B,EAAA;AAEuF,EAAA;AAC7C,IAAA;AACH,IAAA;AAEnB,IAAA;AACoB,MAAA;AACpC,MAAA;AACA,MAAA;AACD,IAAA;AACH,EAAA;AAE8D,EAAA;AACrB,IAAA;AAEhC,IAAA;AACG,MAAA;AACY,MAAA;AACJ,MAAA;AACyB,MAAA;AAC3C,IAAA;AACF,EAAA;AAEqE,EAAA;AAClD,IAAA;AACf,MAAA;AACF,IAAA;AAEI,IAAA;AACA,IAAA;AACyB,MAAA;AACrB,IAAA;AACC,MAAA;AACT,IAAA;AAEI,IAAA;AACA,IAAA;AAC4B,MAAA;AACkB,MAAA;AAC3B,QAAA;AACrB,MAAA;AACM,IAAA;AAER,IAAA;AAEwD,IAAA;AAC5C,MAAA;AAC0C,QAAA;AACzC,QAAA;AACX,MAAA;AACF,IAAA;AAE6B,IAAA;AACG,MAAA;AAChC,IAAA;AAEU,IAAA;AAC6C,MAAA;AAC5C,MAAA;AACT,MAAA;AACF,IAAA;AACF,EAAA;AACF;AD6JkE;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA","file":"/home/runner/work/fhir-brasil/fhir-brasil/packages/rnds/dist/index.cjs","sourcesContent":[null,"/**\n * Cliente RNDS (Rede Nacional de Dados em Saúde)\n *\n * Cliente HTTP fino para a API FHIR R4 da RNDS,\n * usando fetch nativo para chamadas de dados e\n * node:https para autenticação mTLS.\n */\n\nimport fs from 'node:fs';\n\nimport type { FHIRBundle, FHIRPatient } from '@precisa-saude/fhir';\n\nimport { RNDSAuth } from './auth';\nimport type { RNDSConfig } from './config';\nimport { resolveEndpoints, validateConfig } from './config';\nimport { RNDSAuthError, RNDSError, RNDSValidationError } from './errors';\nimport type { FHIROperationOutcome, FHIROrganization, FHIRPractitioner } from './types';\n\nconst RNDS_NS = {\n  cns: 'http://rnds.saude.gov.br/fhir/r4/NamingSystem/cns',\n  cpf: 'http://rnds.saude.gov.br/fhir/r4/NamingSystem/cpf',\n} as const;\n\nexport class RNDSClient {\n  private readonly auth: RNDSAuth;\n  private readonly apiBaseUrl: string;\n  private readonly cns: string;\n\n  constructor(config: RNDSConfig) {\n    const validation = validateConfig(config);\n    if (!validation.valid) {\n      throw new RNDSError(`Configuração inválida: ${validation.errors.join('; ')}`);\n    }\n\n    const pfx =\n      typeof config.certificate === 'string'\n        ? fs.readFileSync(config.certificate)\n        : config.certificate;\n\n    const endpoints = resolveEndpoints(config.environment);\n    this.apiBaseUrl = endpoints.api;\n    this.cns = config.cns;\n    this.auth = new RNDSAuth(pfx, config.certificatePassword, endpoints.auth);\n  }\n\n  async getPatientByCpf(cpf: string): Promise<FHIRPatient | null> {\n    return this.get<FHIRPatient>(`/Patient?identifier=${RNDS_NS.cpf}|${encodeURIComponent(cpf)}`);\n  }\n\n  async getPatientByCns(cns: string): Promise<FHIRPatient | null> {\n    return this.get<FHIRPatient>(`/Patient/${encodeURIComponent(cns)}`);\n  }\n\n  async getOrganizationByCnes(cnes: string): Promise<FHIROrganization | null> {\n    return this.get<FHIROrganization>(`/Organization/${encodeURIComponent(cnes)}`);\n  }\n\n  async getPractitionerByCns(cns: string): Promise<FHIRPractitioner | null> {\n    return this.get<FHIRPractitioner>(`/Practitioner/${encodeURIComponent(cns)}`);\n  }\n\n  async submitBundle(bundle: FHIRBundle): Promise<FHIRBundle> {\n    return this.post<FHIRBundle>('/Bundle', bundle);\n  }\n\n  private async get<T>(path: string): Promise<T | null> {\n    const response = await this.request(path, 'GET');\n\n    if (response.status === 404) {\n      return null;\n    }\n\n    await this.handleErrorResponse(response);\n    return (await response.json()) as T;\n  }\n\n  private async post<T>(path: string, body: unknown): Promise<T> {\n    const response = await this.request(path, 'POST', body);\n    await this.handleErrorResponse(response);\n    return (await response.json()) as T;\n  }\n\n  private async request(path: string, method: string, body?: unknown): Promise<Response> {\n    const headers = await this.buildHeaders();\n    const url = `${this.apiBaseUrl}${path}`;\n\n    return fetch(url, {\n      body: body ? JSON.stringify(body) : undefined,\n      headers,\n      method,\n    });\n  }\n\n  private async buildHeaders(): Promise<Record<string, string>> {\n    const token = await this.auth.getToken();\n\n    return {\n      Accept: 'application/json',\n      Authorization: this.cns,\n      'Content-Type': 'application/json',\n      'X-Authorization-Server': `Bearer ${token}`,\n    };\n  }\n\n  private async handleErrorResponse(response: Response): Promise<void> {\n    if (response.ok) {\n      return;\n    }\n\n    let body: string;\n    try {\n      body = await response.text();\n    } catch {\n      body = '';\n    }\n\n    let operationOutcome: FHIROperationOutcome | undefined;\n    try {\n      const parsed = JSON.parse(body) as { resourceType?: string };\n      if (parsed.resourceType === 'OperationOutcome') {\n        operationOutcome = parsed as FHIROperationOutcome;\n      }\n    } catch {\n      // corpo não é JSON válido\n    }\n\n    if (response.status === 401 || response.status === 403) {\n      throw new RNDSAuthError(\n        `Autenticação RNDS falhou (${response.status}): ${body}`,\n        response.status,\n      );\n    }\n\n    if (response.status === 422) {\n      throw new RNDSValidationError(`Erro de validação FHIR (422): ${body}`, operationOutcome);\n    }\n\n    throw new RNDSError(\n      `Erro na requisição RNDS (${response.status}): ${body}`,\n      response.status,\n      operationOutcome,\n    );\n  }\n}\n","/**\n * Erros customizados para o cliente RNDS\n */\n\nimport type { FHIROperationOutcome } from './types';\n\nexport class RNDSError extends Error {\n  constructor(\n    message: string,\n    public readonly statusCode?: number,\n    public readonly operationOutcome?: FHIROperationOutcome,\n  ) {\n    super(message);\n    this.name = 'RNDSError';\n  }\n}\n\nexport class RNDSAuthError extends RNDSError {\n  constructor(message: string, statusCode?: number) {\n    super(message, statusCode);\n    this.name = 'RNDSAuthError';\n  }\n}\n\nexport class RNDSNotFoundError extends RNDSError {\n  constructor(message: string) {\n    super(message, 404);\n    this.name = 'RNDSNotFoundError';\n  }\n}\n\nexport class RNDSValidationError extends RNDSError {\n  constructor(message: string, operationOutcome?: FHIROperationOutcome) {\n    super(message, 422, operationOutcome);\n    this.name = 'RNDSValidationError';\n  }\n}\n","/**\n * Wrapper mTLS sobre node:https\n *\n * Encapsula node:https.request para fazer chamadas HTTPS\n * com certificado PFX (mutual TLS). Usado apenas para\n * autenticação com a RNDS.\n */\n\nimport https from 'node:https';\n\nexport interface HttpsResponse {\n  body: string;\n  headers: Record<string, string | string[] | undefined>;\n  statusCode: number;\n}\n\nexport interface HttpsCertOptions {\n  passphrase: string;\n  pfx: Buffer;\n}\n\nexport function httpsRequestWithCert(\n  url: string,\n  certOptions: HttpsCertOptions,\n  options?: {\n    method?: string;\n    headers?: Record<string, string>;\n    body?: string;\n    timeout?: number;\n  },\n): Promise<HttpsResponse> {\n  return new Promise((resolve, reject) => {\n    const parsedUrl = new URL(url);\n\n    const req = https.request(\n      {\n        headers: options?.headers,\n        hostname: parsedUrl.hostname,\n        method: options?.method ?? 'GET',\n        passphrase: certOptions.passphrase,\n        path: parsedUrl.pathname + parsedUrl.search,\n        pfx: certOptions.pfx,\n        port: Number(parsedUrl.port) || 443,\n        timeout: options?.timeout ?? 30_000,\n      },\n      (res) => {\n        const chunks: Buffer[] = [];\n\n        res.on('data', (chunk: Buffer) => {\n          chunks.push(chunk);\n        });\n\n        res.on('error', (err) => {\n          reject(new Error(`Erro na resposta HTTPS: ${err.message}`));\n        });\n\n        res.on('end', () => {\n          resolve({\n            body: Buffer.concat(chunks).toString('utf-8'),\n            headers: res.headers as Record<string, string | string[] | undefined>,\n            statusCode: res.statusCode ?? 0,\n          });\n        });\n      },\n    );\n\n    req.on('error', (err) => {\n      reject(new Error(`Erro na requisição HTTPS: ${err.message}`));\n    });\n\n    req.on('timeout', () => {\n      req.destroy();\n      reject(new Error('Timeout na requisição HTTPS'));\n    });\n\n    if (options?.body) {\n      req.write(options.body);\n    }\n\n    req.end();\n  });\n}\n","/**\n * Autenticação RNDS com cache de token JWT\n *\n * Obtém token JWT via mutual TLS no endpoint de autenticação\n * da RNDS. O token é cacheado e renovado automaticamente\n * antes de expirar.\n */\n\nimport { RNDSAuthError } from './errors';\nimport { httpsRequestWithCert } from './http';\nimport type { RNDSTokenResponse } from './types';\n\nconst TOKEN_REFRESH_MARGIN_MS = 60_000;\n\nexport class RNDSAuth {\n  private token: string | null = null;\n  private expiresAt = 0;\n  private pendingRefresh: Promise<string> | null = null;\n\n  constructor(\n    private readonly pfx: Buffer,\n    private readonly passphrase: string,\n    private readonly authBaseUrl: string,\n  ) {}\n\n  async getToken(): Promise<string> {\n    if (this.isTokenValid()) {\n      return this.token!;\n    }\n\n    return this.refreshToken();\n  }\n\n  async refreshToken(): Promise<string> {\n    if (this.pendingRefresh) {\n      return this.pendingRefresh;\n    }\n\n    this.pendingRefresh = this.fetchToken();\n\n    try {\n      const token = await this.pendingRefresh;\n      return token;\n    } finally {\n      this.pendingRefresh = null;\n    }\n  }\n\n  isTokenValid(): boolean {\n    return this.token !== null && Date.now() < this.expiresAt - TOKEN_REFRESH_MARGIN_MS;\n  }\n\n  private async fetchToken(): Promise<string> {\n    const url = `${this.authBaseUrl}/api/token`;\n\n    let response;\n    try {\n      response = await httpsRequestWithCert(url, {\n        passphrase: this.passphrase,\n        pfx: this.pfx,\n      });\n    } catch (err) {\n      throw new RNDSAuthError(\n        `Falha na autenticação com a RNDS: ${err instanceof Error ? err.message : String(err)}`,\n      );\n    }\n\n    if (response.statusCode !== 200) {\n      throw new RNDSAuthError(\n        `Autenticação RNDS falhou com status ${response.statusCode}: ${response.body}`,\n        response.statusCode,\n      );\n    }\n\n    let tokenData: RNDSTokenResponse;\n    try {\n      tokenData = JSON.parse(response.body) as RNDSTokenResponse;\n    } catch {\n      throw new RNDSAuthError('Resposta de autenticação RNDS inválida: JSON malformado');\n    }\n\n    if (!tokenData.access_token) {\n      throw new RNDSAuthError('Resposta de autenticação RNDS não contém access_token');\n    }\n\n    this.token = tokenData.access_token;\n    this.expiresAt = this.extractExpiry(tokenData);\n\n    return this.token;\n  }\n\n  private extractExpiry(tokenData: RNDSTokenResponse): number {\n    // RNDS retorna expires_in em milissegundos (ex: 1800000 = 30 min)\n    if (tokenData.expires_in) {\n      return Date.now() + tokenData.expires_in;\n    }\n\n    try {\n      const parts = tokenData.access_token.split('.');\n      if (parts.length === 3) {\n        const payload = JSON.parse(Buffer.from(parts[1]!, 'base64url').toString()) as {\n          exp?: number;\n        };\n        if (payload.exp) {\n          return payload.exp * 1000;\n        }\n      }\n    } catch {\n      // fallback para 30 minutos\n    }\n\n    return Date.now() + 30 * 60 * 1000;\n  }\n}\n","/**\n * Configuração do cliente RNDS\n *\n * Define tipos de configuração e constantes de ambiente para\n * conexão com a Rede Nacional de Dados em Saúde (RNDS).\n */\n\nexport type RNDSEnvironment = 'homologation' | 'production';\n\nexport interface RNDSConfig {\n  /** Certificado PFX como Buffer ou caminho do arquivo */\n  certificate: Buffer | string;\n  /** Senha do certificado PFX */\n  certificatePassword: string;\n  /** CNES do estabelecimento de saúde */\n  cnes: string;\n  /** CNS do profissional de saúde responsável */\n  cns: string;\n  /** Ambiente da RNDS */\n  environment: RNDSEnvironment;\n}\n\nexport interface RNDSEndpoints {\n  api: string;\n  auth: string;\n}\n\nexport const RNDS_ENDPOINTS: Record<RNDSEnvironment, RNDSEndpoints> = {\n  homologation: {\n    api: 'https://ehr-services.hmg.saude.gov.br/api/fhir/r4',\n    auth: 'https://ehr-auth-hmg.saude.gov.br',\n  },\n  production: {\n    api: 'https://ehr-services.saude.gov.br/api/fhir/r4',\n    auth: 'https://ehr-auth.saude.gov.br',\n  },\n};\n\nexport function resolveEndpoints(environment: RNDSEnvironment): RNDSEndpoints {\n  return RNDS_ENDPOINTS[environment];\n}\n\nexport function validateConfig(config: RNDSConfig): { valid: boolean; errors: string[] } {\n  const errors: string[] = [];\n\n  if (!config.certificate) {\n    errors.push('certificate é obrigatório');\n  }\n\n  if (!config.certificatePassword) {\n    errors.push('certificatePassword é obrigatório');\n  }\n\n  if (!config.cnes) {\n    errors.push('cnes é obrigatório');\n  } else if (!/^\\d{7}$/.test(config.cnes)) {\n    errors.push('cnes deve ter exatamente 7 dígitos');\n  }\n\n  if (!config.cns) {\n    errors.push('cns é obrigatório');\n  } else if (!/^\\d{15}$/.test(config.cns)) {\n    errors.push('cns deve ter exatamente 15 dígitos');\n  }\n\n  if (!config.environment) {\n    errors.push('environment é obrigatório');\n  } else if (config.environment !== 'homologation' && config.environment !== 'production') {\n    errors.push('environment deve ser \"homologation\" ou \"production\"');\n  }\n\n  return { errors, valid: errors.length === 0 };\n}\n"]}

package/dist/index.d.cts

@@ -0,0 +1,151 @@
+import { FHIRCodeableConcept, FHIRAddress, FHIRContactPoint, FHIRHumanName, FHIRReference, FHIRPatient, FHIRBundle } from '@precisa-saude/fhir';
+
+/**
+ * Configuração do cliente RNDS
+ *
+ * Define tipos de configuração e constantes de ambiente para
+ * conexão com a Rede Nacional de Dados em Saúde (RNDS).
+ */
+type RNDSEnvironment = 'homologation' | 'production';
+interface RNDSConfig {
+    /** Certificado PFX como Buffer ou caminho do arquivo */
+    certificate: Buffer | string;
+    /** Senha do certificado PFX */
+    certificatePassword: string;
+    /** CNES do estabelecimento de saúde */
+    cnes: string;
+    /** CNS do profissional de saúde responsável */
+    cns: string;
+    /** Ambiente da RNDS */
+    environment: RNDSEnvironment;
+}
+interface RNDSEndpoints {
+    api: string;
+    auth: string;
+}
+declare const RNDS_ENDPOINTS: Record<RNDSEnvironment, RNDSEndpoints>;
+declare function resolveEndpoints(environment: RNDSEnvironment): RNDSEndpoints;
+declare function validateConfig(config: RNDSConfig): {
+    valid: boolean;
+    errors: string[];
+};
+
+/**
+ * Tipos FHIR R4 específicos para a RNDS
+ *
+ * Tipos que ainda não existem no pacote core e são necessários
+ * para interação com a API da RNDS.
+ */
+
+interface FHIRIdentifier {
+    system?: string;
+    type?: FHIRCodeableConcept;
+    use?: 'usual' | 'official' | 'temp' | 'secondary' | 'old';
+    value?: string;
+}
+interface FHIROrganization {
+    active?: boolean;
+    address?: FHIRAddress[];
+    alias?: string[];
+    id?: string;
+    identifier?: FHIRIdentifier[];
+    name?: string;
+    resourceType: 'Organization';
+    telecom?: FHIRContactPoint[];
+    type?: FHIRCodeableConcept[];
+}
+interface FHIRPractitioner {
+    active?: boolean;
+    address?: FHIRAddress[];
+    birthDate?: string;
+    gender?: 'male' | 'female' | 'other' | 'unknown';
+    id?: string;
+    identifier?: FHIRIdentifier[];
+    name?: FHIRHumanName[];
+    qualification?: FHIRPractitionerQualification[];
+    resourceType: 'Practitioner';
+    telecom?: FHIRContactPoint[];
+}
+interface FHIRPractitionerQualification {
+    code: FHIRCodeableConcept;
+    identifier?: FHIRIdentifier[];
+    issuer?: FHIRReference;
+    period?: {
+        start?: string;
+        end?: string;
+    };
+}
+interface FHIROperationOutcomeIssue {
+    code: string;
+    details?: FHIRCodeableConcept;
+    diagnostics?: string;
+    expression?: string[];
+    location?: string[];
+    severity: 'fatal' | 'error' | 'warning' | 'information';
+}
+interface FHIROperationOutcome {
+    issue: FHIROperationOutcomeIssue[];
+    resourceType: 'OperationOutcome';
+}
+interface RNDSSearchBundleEntry<T> {
+    fullUrl?: string;
+    resource: T;
+}
+interface RNDSSearchBundle<T> {
+    entry?: RNDSSearchBundleEntry<T>[];
+    resourceType: 'Bundle';
+    total?: number;
+    type: 'searchset';
+}
+interface RNDSTokenResponse {
+    access_token: string;
+    expires_in: number;
+    scope: string;
+    token_type: string;
+}
+
+/**
+ * Cliente RNDS (Rede Nacional de Dados em Saúde)
+ *
+ * Cliente HTTP fino para a API FHIR R4 da RNDS,
+ * usando fetch nativo para chamadas de dados e
+ * node:https para autenticação mTLS.
+ */
+
+declare class RNDSClient {
+    private readonly auth;
+    private readonly apiBaseUrl;
+    private readonly cns;
+    constructor(config: RNDSConfig);
+    getPatientByCpf(cpf: string): Promise<FHIRPatient | null>;
+    getPatientByCns(cns: string): Promise<FHIRPatient | null>;
+    getOrganizationByCnes(cnes: string): Promise<FHIROrganization | null>;
+    getPractitionerByCns(cns: string): Promise<FHIRPractitioner | null>;
+    submitBundle(bundle: FHIRBundle): Promise<FHIRBundle>;
+    private get;
+    private post;
+    private request;
+    private buildHeaders;
+    private handleErrorResponse;
+}
+
+/**
+ * Erros customizados para o cliente RNDS
+ */
+
+declare class RNDSError extends Error {
+    readonly statusCode?: number | undefined;
+    readonly operationOutcome?: FHIROperationOutcome | undefined;
+    constructor(message: string, statusCode?: number | undefined, operationOutcome?: FHIROperationOutcome | undefined);
+}
+declare class RNDSAuthError extends RNDSError {
+    constructor(message: string, statusCode?: number);
+}
+declare class RNDSNotFoundError extends RNDSError {
+    constructor(message: string);
+}
+declare class RNDSValidationError extends RNDSError {
+    constructor(message: string, operationOutcome?: FHIROperationOutcome);
+}
+
+export { type FHIRIdentifier, type FHIROperationOutcome, type FHIROperationOutcomeIssue, type FHIROrganization, type FHIRPractitioner, type FHIRPractitionerQualification, RNDSAuthError, RNDSClient, type RNDSConfig, type RNDSEndpoints, type RNDSEnvironment, RNDSError, RNDSNotFoundError, type RNDSSearchBundle, type RNDSSearchBundleEntry, type RNDSTokenResponse, RNDSValidationError, RNDS_ENDPOINTS, resolveEndpoints, validateConfig };

package/dist/index.d.ts

@@ -0,0 +1,151 @@
+import { FHIRCodeableConcept, FHIRAddress, FHIRContactPoint, FHIRHumanName, FHIRReference, FHIRPatient, FHIRBundle } from '@precisa-saude/fhir';
+
+/**
+ * Configuração do cliente RNDS
+ *
+ * Define tipos de configuração e constantes de ambiente para
+ * conexão com a Rede Nacional de Dados em Saúde (RNDS).
+ */
+type RNDSEnvironment = 'homologation' | 'production';
+interface RNDSConfig {
+    /** Certificado PFX como Buffer ou caminho do arquivo */
+    certificate: Buffer | string;
+    /** Senha do certificado PFX */
+    certificatePassword: string;
+    /** CNES do estabelecimento de saúde */
+    cnes: string;
+    /** CNS do profissional de saúde responsável */
+    cns: string;
+    /** Ambiente da RNDS */
+    environment: RNDSEnvironment;
+}
+interface RNDSEndpoints {
+    api: string;
+    auth: string;
+}
+declare const RNDS_ENDPOINTS: Record<RNDSEnvironment, RNDSEndpoints>;
+declare function resolveEndpoints(environment: RNDSEnvironment): RNDSEndpoints;
+declare function validateConfig(config: RNDSConfig): {
+    valid: boolean;
+    errors: string[];
+};
+
+/**
+ * Tipos FHIR R4 específicos para a RNDS
+ *
+ * Tipos que ainda não existem no pacote core e são necessários
+ * para interação com a API da RNDS.
+ */
+
+interface FHIRIdentifier {
+    system?: string;
+    type?: FHIRCodeableConcept;
+    use?: 'usual' | 'official' | 'temp' | 'secondary' | 'old';
+    value?: string;
+}
+interface FHIROrganization {
+    active?: boolean;
+    address?: FHIRAddress[];
+    alias?: string[];
+    id?: string;
+    identifier?: FHIRIdentifier[];
+    name?: string;
+    resourceType: 'Organization';
+    telecom?: FHIRContactPoint[];
+    type?: FHIRCodeableConcept[];
+}
+interface FHIRPractitioner {
+    active?: boolean;
+    address?: FHIRAddress[];
+    birthDate?: string;
+    gender?: 'male' | 'female' | 'other' | 'unknown';
+    id?: string;
+    identifier?: FHIRIdentifier[];
+    name?: FHIRHumanName[];
+    qualification?: FHIRPractitionerQualification[];
+    resourceType: 'Practitioner';
+    telecom?: FHIRContactPoint[];
+}
+interface FHIRPractitionerQualification {
+    code: FHIRCodeableConcept;
+    identifier?: FHIRIdentifier[];
+    issuer?: FHIRReference;
+    period?: {
+        start?: string;
+        end?: string;
+    };
+}
+interface FHIROperationOutcomeIssue {
+    code: string;
+    details?: FHIRCodeableConcept;
+    diagnostics?: string;
+    expression?: string[];
+    location?: string[];
+    severity: 'fatal' | 'error' | 'warning' | 'information';
+}
+interface FHIROperationOutcome {
+    issue: FHIROperationOutcomeIssue[];
+    resourceType: 'OperationOutcome';
+}
+interface RNDSSearchBundleEntry<T> {
+    fullUrl?: string;
+    resource: T;
+}
+interface RNDSSearchBundle<T> {
+    entry?: RNDSSearchBundleEntry<T>[];
+    resourceType: 'Bundle';
+    total?: number;
+    type: 'searchset';
+}
+interface RNDSTokenResponse {
+    access_token: string;
+    expires_in: number;
+    scope: string;
+    token_type: string;
+}
+
+/**
+ * Cliente RNDS (Rede Nacional de Dados em Saúde)
+ *
+ * Cliente HTTP fino para a API FHIR R4 da RNDS,
+ * usando fetch nativo para chamadas de dados e
+ * node:https para autenticação mTLS.
+ */
+
+declare class RNDSClient {
+    private readonly auth;
+    private readonly apiBaseUrl;
+    private readonly cns;
+    constructor(config: RNDSConfig);
+    getPatientByCpf(cpf: string): Promise<FHIRPatient | null>;
+    getPatientByCns(cns: string): Promise<FHIRPatient | null>;
+    getOrganizationByCnes(cnes: string): Promise<FHIROrganization | null>;
+    getPractitionerByCns(cns: string): Promise<FHIRPractitioner | null>;
+    submitBundle(bundle: FHIRBundle): Promise<FHIRBundle>;
+    private get;
+    private post;
+    private request;
+    private buildHeaders;
+    private handleErrorResponse;
+}
+
+/**
+ * Erros customizados para o cliente RNDS
+ */
+
+declare class RNDSError extends Error {
+    readonly statusCode?: number | undefined;
+    readonly operationOutcome?: FHIROperationOutcome | undefined;
+    constructor(message: string, statusCode?: number | undefined, operationOutcome?: FHIROperationOutcome | undefined);
+}
+declare class RNDSAuthError extends RNDSError {
+    constructor(message: string, statusCode?: number);
+}
+declare class RNDSNotFoundError extends RNDSError {
+    constructor(message: string);
+}
+declare class RNDSValidationError extends RNDSError {
+    constructor(message: string, operationOutcome?: FHIROperationOutcome);
+}
+
+export { type FHIRIdentifier, type FHIROperationOutcome, type FHIROperationOutcomeIssue, type FHIROrganization, type FHIRPractitioner, type FHIRPractitionerQualification, RNDSAuthError, RNDSClient, type RNDSConfig, type RNDSEndpoints, type RNDSEnvironment, RNDSError, RNDSNotFoundError, type RNDSSearchBundle, type RNDSSearchBundleEntry, type RNDSTokenResponse, RNDSValidationError, RNDS_ENDPOINTS, resolveEndpoints, validateConfig };

package/dist/index.js

@@ -0,0 +1,311 @@
+// src/client.ts
+import fs from "fs";
+
+// src/errors.ts
+var RNDSError = class extends Error {
+  constructor(message, statusCode, operationOutcome) {
+    super(message);
+    this.statusCode = statusCode;
+    this.operationOutcome = operationOutcome;
+    this.name = "RNDSError";
+  }
+};
+var RNDSAuthError = class extends RNDSError {
+  constructor(message, statusCode) {
+    super(message, statusCode);
+    this.name = "RNDSAuthError";
+  }
+};
+var RNDSNotFoundError = class extends RNDSError {
+  constructor(message) {
+    super(message, 404);
+    this.name = "RNDSNotFoundError";
+  }
+};
+var RNDSValidationError = class extends RNDSError {
+  constructor(message, operationOutcome) {
+    super(message, 422, operationOutcome);
+    this.name = "RNDSValidationError";
+  }
+};
+
+// src/http.ts
+import https from "https";
+function httpsRequestWithCert(url, certOptions, options) {
+  return new Promise((resolve, reject) => {
+    const parsedUrl = new URL(url);
+    const req = https.request(
+      {
+        headers: options?.headers,
+        hostname: parsedUrl.hostname,
+        method: options?.method ?? "GET",
+        passphrase: certOptions.passphrase,
+        path: parsedUrl.pathname + parsedUrl.search,
+        pfx: certOptions.pfx,
+        port: Number(parsedUrl.port) || 443,
+        timeout: options?.timeout ?? 3e4
+      },
+      (res) => {
+        const chunks = [];
+        res.on("data", (chunk) => {
+          chunks.push(chunk);
+        });
+        res.on("error", (err) => {
+          reject(new Error(`Erro na resposta HTTPS: ${err.message}`));
+        });
+        res.on("end", () => {
+          resolve({
+            body: Buffer.concat(chunks).toString("utf-8"),
+            headers: res.headers,
+            statusCode: res.statusCode ?? 0
+          });
+        });
+      }
+    );
+    req.on("error", (err) => {
+      reject(new Error(`Erro na requisi\xE7\xE3o HTTPS: ${err.message}`));
+    });
+    req.on("timeout", () => {
+      req.destroy();
+      reject(new Error("Timeout na requisi\xE7\xE3o HTTPS"));
+    });
+    if (options?.body) {
+      req.write(options.body);
+    }
+    req.end();
+  });
+}
+
+// src/auth.ts
+var TOKEN_REFRESH_MARGIN_MS = 6e4;
+var RNDSAuth = class {
+  constructor(pfx, passphrase, authBaseUrl) {
+    this.pfx = pfx;
+    this.passphrase = passphrase;
+    this.authBaseUrl = authBaseUrl;
+  }
+  token = null;
+  expiresAt = 0;
+  pendingRefresh = null;
+  async getToken() {
+    if (this.isTokenValid()) {
+      return this.token;
+    }
+    return this.refreshToken();
+  }
+  async refreshToken() {
+    if (this.pendingRefresh) {
+      return this.pendingRefresh;
+    }
+    this.pendingRefresh = this.fetchToken();
+    try {
+      const token = await this.pendingRefresh;
+      return token;
+    } finally {
+      this.pendingRefresh = null;
+    }
+  }
+  isTokenValid() {
+    return this.token !== null && Date.now() < this.expiresAt - TOKEN_REFRESH_MARGIN_MS;
+  }
+  async fetchToken() {
+    const url = `${this.authBaseUrl}/api/token`;
+    let response;
+    try {
+      response = await httpsRequestWithCert(url, {
+        passphrase: this.passphrase,
+        pfx: this.pfx
+      });
+    } catch (err) {
+      throw new RNDSAuthError(
+        `Falha na autentica\xE7\xE3o com a RNDS: ${err instanceof Error ? err.message : String(err)}`
+      );
+    }
+    if (response.statusCode !== 200) {
+      throw new RNDSAuthError(
+        `Autentica\xE7\xE3o RNDS falhou com status ${response.statusCode}: ${response.body}`,
+        response.statusCode
+      );
+    }
+    let tokenData;
+    try {
+      tokenData = JSON.parse(response.body);
+    } catch {
+      throw new RNDSAuthError("Resposta de autentica\xE7\xE3o RNDS inv\xE1lida: JSON malformado");
+    }
+    if (!tokenData.access_token) {
+      throw new RNDSAuthError("Resposta de autentica\xE7\xE3o RNDS n\xE3o cont\xE9m access_token");
+    }
+    this.token = tokenData.access_token;
+    this.expiresAt = this.extractExpiry(tokenData);
+    return this.token;
+  }
+  extractExpiry(tokenData) {
+    if (tokenData.expires_in) {
+      return Date.now() + tokenData.expires_in;
+    }
+    try {
+      const parts = tokenData.access_token.split(".");
+      if (parts.length === 3) {
+        const payload = JSON.parse(Buffer.from(parts[1], "base64url").toString());
+        if (payload.exp) {
+          return payload.exp * 1e3;
+        }
+      }
+    } catch {
+    }
+    return Date.now() + 30 * 60 * 1e3;
+  }
+};
+
+// src/config.ts
+var RNDS_ENDPOINTS = {
+  homologation: {
+    api: "https://ehr-services.hmg.saude.gov.br/api/fhir/r4",
+    auth: "https://ehr-auth-hmg.saude.gov.br"
+  },
+  production: {
+    api: "https://ehr-services.saude.gov.br/api/fhir/r4",
+    auth: "https://ehr-auth.saude.gov.br"
+  }
+};
+function resolveEndpoints(environment) {
+  return RNDS_ENDPOINTS[environment];
+}
+function validateConfig(config) {
+  const errors = [];
+  if (!config.certificate) {
+    errors.push("certificate \xE9 obrigat\xF3rio");
+  }
+  if (!config.certificatePassword) {
+    errors.push("certificatePassword \xE9 obrigat\xF3rio");
+  }
+  if (!config.cnes) {
+    errors.push("cnes \xE9 obrigat\xF3rio");
+  } else if (!/^\d{7}$/.test(config.cnes)) {
+    errors.push("cnes deve ter exatamente 7 d\xEDgitos");
+  }
+  if (!config.cns) {
+    errors.push("cns \xE9 obrigat\xF3rio");
+  } else if (!/^\d{15}$/.test(config.cns)) {
+    errors.push("cns deve ter exatamente 15 d\xEDgitos");
+  }
+  if (!config.environment) {
+    errors.push("environment \xE9 obrigat\xF3rio");
+  } else if (config.environment !== "homologation" && config.environment !== "production") {
+    errors.push('environment deve ser "homologation" ou "production"');
+  }
+  return { errors, valid: errors.length === 0 };
+}
+
+// src/client.ts
+var RNDS_NS = {
+  cns: "http://rnds.saude.gov.br/fhir/r4/NamingSystem/cns",
+  cpf: "http://rnds.saude.gov.br/fhir/r4/NamingSystem/cpf"
+};
+var RNDSClient = class {
+  auth;
+  apiBaseUrl;
+  cns;
+  constructor(config) {
+    const validation = validateConfig(config);
+    if (!validation.valid) {
+      throw new RNDSError(`Configura\xE7\xE3o inv\xE1lida: ${validation.errors.join("; ")}`);
+    }
+    const pfx = typeof config.certificate === "string" ? fs.readFileSync(config.certificate) : config.certificate;
+    const endpoints = resolveEndpoints(config.environment);
+    this.apiBaseUrl = endpoints.api;
+    this.cns = config.cns;
+    this.auth = new RNDSAuth(pfx, config.certificatePassword, endpoints.auth);
+  }
+  async getPatientByCpf(cpf) {
+    return this.get(`/Patient?identifier=${RNDS_NS.cpf}|${encodeURIComponent(cpf)}`);
+  }
+  async getPatientByCns(cns) {
+    return this.get(`/Patient/${encodeURIComponent(cns)}`);
+  }
+  async getOrganizationByCnes(cnes) {
+    return this.get(`/Organization/${encodeURIComponent(cnes)}`);
+  }
+  async getPractitionerByCns(cns) {
+    return this.get(`/Practitioner/${encodeURIComponent(cns)}`);
+  }
+  async submitBundle(bundle) {
+    return this.post("/Bundle", bundle);
+  }
+  async get(path) {
+    const response = await this.request(path, "GET");
+    if (response.status === 404) {
+      return null;
+    }
+    await this.handleErrorResponse(response);
+    return await response.json();
+  }
+  async post(path, body) {
+    const response = await this.request(path, "POST", body);
+    await this.handleErrorResponse(response);
+    return await response.json();
+  }
+  async request(path, method, body) {
+    const headers = await this.buildHeaders();
+    const url = `${this.apiBaseUrl}${path}`;
+    return fetch(url, {
+      body: body ? JSON.stringify(body) : void 0,
+      headers,
+      method
+    });
+  }
+  async buildHeaders() {
+    const token = await this.auth.getToken();
+    return {
+      Accept: "application/json",
+      Authorization: this.cns,
+      "Content-Type": "application/json",
+      "X-Authorization-Server": `Bearer ${token}`
+    };
+  }
+  async handleErrorResponse(response) {
+    if (response.ok) {
+      return;
+    }
+    let body;
+    try {
+      body = await response.text();
+    } catch {
+      body = "";
+    }
+    let operationOutcome;
+    try {
+      const parsed = JSON.parse(body);
+      if (parsed.resourceType === "OperationOutcome") {
+        operationOutcome = parsed;
+      }
+    } catch {
+    }
+    if (response.status === 401 || response.status === 403) {
+      throw new RNDSAuthError(
+        `Autentica\xE7\xE3o RNDS falhou (${response.status}): ${body}`,
+        response.status
+      );
+    }
+    if (response.status === 422) {
+      throw new RNDSValidationError(`Erro de valida\xE7\xE3o FHIR (422): ${body}`, operationOutcome);
+    }
+    throw new RNDSError(
+      `Erro na requisi\xE7\xE3o RNDS (${response.status}): ${body}`,
+      response.status,
+      operationOutcome
+    );
+  }
+};
+export {
+  RNDSAuthError,
+  RNDSClient,
+  RNDSError,
+  RNDSNotFoundError,
+  RNDSValidationError,
+  RNDS_ENDPOINTS,
+  resolveEndpoints,
+  validateConfig
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/client.ts","../src/errors.ts","../src/http.ts","../src/auth.ts","../src/config.ts"],"sourcesContent":["/**\n * Cliente RNDS (Rede Nacional de Dados em Saúde)\n *\n * Cliente HTTP fino para a API FHIR R4 da RNDS,\n * usando fetch nativo para chamadas de dados e\n * node:https para autenticação mTLS.\n */\n\nimport fs from 'node:fs';\n\nimport type { FHIRBundle, FHIRPatient } from '@precisa-saude/fhir';\n\nimport { RNDSAuth } from './auth';\nimport type { RNDSConfig } from './config';\nimport { resolveEndpoints, validateConfig } from './config';\nimport { RNDSAuthError, RNDSError, RNDSValidationError } from './errors';\nimport type { FHIROperationOutcome, FHIROrganization, FHIRPractitioner } from './types';\n\nconst RNDS_NS = {\n  cns: 'http://rnds.saude.gov.br/fhir/r4/NamingSystem/cns',\n  cpf: 'http://rnds.saude.gov.br/fhir/r4/NamingSystem/cpf',\n} as const;\n\nexport class RNDSClient {\n  private readonly auth: RNDSAuth;\n  private readonly apiBaseUrl: string;\n  private readonly cns: string;\n\n  constructor(config: RNDSConfig) {\n    const validation = validateConfig(config);\n    if (!validation.valid) {\n      throw new RNDSError(`Configuração inválida: ${validation.errors.join('; ')}`);\n    }\n\n    const pfx =\n      typeof config.certificate === 'string'\n        ? fs.readFileSync(config.certificate)\n        : config.certificate;\n\n    const endpoints = resolveEndpoints(config.environment);\n    this.apiBaseUrl = endpoints.api;\n    this.cns = config.cns;\n    this.auth = new RNDSAuth(pfx, config.certificatePassword, endpoints.auth);\n  }\n\n  async getPatientByCpf(cpf: string): Promise<FHIRPatient | null> {\n    return this.get<FHIRPatient>(`/Patient?identifier=${RNDS_NS.cpf}|${encodeURIComponent(cpf)}`);\n  }\n\n  async getPatientByCns(cns: string): Promise<FHIRPatient | null> {\n    return this.get<FHIRPatient>(`/Patient/${encodeURIComponent(cns)}`);\n  }\n\n  async getOrganizationByCnes(cnes: string): Promise<FHIROrganization | null> {\n    return this.get<FHIROrganization>(`/Organization/${encodeURIComponent(cnes)}`);\n  }\n\n  async getPractitionerByCns(cns: string): Promise<FHIRPractitioner | null> {\n    return this.get<FHIRPractitioner>(`/Practitioner/${encodeURIComponent(cns)}`);\n  }\n\n  async submitBundle(bundle: FHIRBundle): Promise<FHIRBundle> {\n    return this.post<FHIRBundle>('/Bundle', bundle);\n  }\n\n  private async get<T>(path: string): Promise<T | null> {\n    const response = await this.request(path, 'GET');\n\n    if (response.status === 404) {\n      return null;\n    }\n\n    await this.handleErrorResponse(response);\n    return (await response.json()) as T;\n  }\n\n  private async post<T>(path: string, body: unknown): Promise<T> {\n    const response = await this.request(path, 'POST', body);\n    await this.handleErrorResponse(response);\n    return (await response.json()) as T;\n  }\n\n  private async request(path: string, method: string, body?: unknown): Promise<Response> {\n    const headers = await this.buildHeaders();\n    const url = `${this.apiBaseUrl}${path}`;\n\n    return fetch(url, {\n      body: body ? JSON.stringify(body) : undefined,\n      headers,\n      method,\n    });\n  }\n\n  private async buildHeaders(): Promise<Record<string, string>> {\n    const token = await this.auth.getToken();\n\n    return {\n      Accept: 'application/json',\n      Authorization: this.cns,\n      'Content-Type': 'application/json',\n      'X-Authorization-Server': `Bearer ${token}`,\n    };\n  }\n\n  private async handleErrorResponse(response: Response): Promise<void> {\n    if (response.ok) {\n      return;\n    }\n\n    let body: string;\n    try {\n      body = await response.text();\n    } catch {\n      body = '';\n    }\n\n    let operationOutcome: FHIROperationOutcome | undefined;\n    try {\n      const parsed = JSON.parse(body) as { resourceType?: string };\n      if (parsed.resourceType === 'OperationOutcome') {\n        operationOutcome = parsed as FHIROperationOutcome;\n      }\n    } catch {\n      // corpo não é JSON válido\n    }\n\n    if (response.status === 401 || response.status === 403) {\n      throw new RNDSAuthError(\n        `Autenticação RNDS falhou (${response.status}): ${body}`,\n        response.status,\n      );\n    }\n\n    if (response.status === 422) {\n      throw new RNDSValidationError(`Erro de validação FHIR (422): ${body}`, operationOutcome);\n    }\n\n    throw new RNDSError(\n      `Erro na requisição RNDS (${response.status}): ${body}`,\n      response.status,\n      operationOutcome,\n    );\n  }\n}\n","/**\n * Erros customizados para o cliente RNDS\n */\n\nimport type { FHIROperationOutcome } from './types';\n\nexport class RNDSError extends Error {\n  constructor(\n    message: string,\n    public readonly statusCode?: number,\n    public readonly operationOutcome?: FHIROperationOutcome,\n  ) {\n    super(message);\n    this.name = 'RNDSError';\n  }\n}\n\nexport class RNDSAuthError extends RNDSError {\n  constructor(message: string, statusCode?: number) {\n    super(message, statusCode);\n    this.name = 'RNDSAuthError';\n  }\n}\n\nexport class RNDSNotFoundError extends RNDSError {\n  constructor(message: string) {\n    super(message, 404);\n    this.name = 'RNDSNotFoundError';\n  }\n}\n\nexport class RNDSValidationError extends RNDSError {\n  constructor(message: string, operationOutcome?: FHIROperationOutcome) {\n    super(message, 422, operationOutcome);\n    this.name = 'RNDSValidationError';\n  }\n}\n","/**\n * Wrapper mTLS sobre node:https\n *\n * Encapsula node:https.request para fazer chamadas HTTPS\n * com certificado PFX (mutual TLS). Usado apenas para\n * autenticação com a RNDS.\n */\n\nimport https from 'node:https';\n\nexport interface HttpsResponse {\n  body: string;\n  headers: Record<string, string | string[] | undefined>;\n  statusCode: number;\n}\n\nexport interface HttpsCertOptions {\n  passphrase: string;\n  pfx: Buffer;\n}\n\nexport function httpsRequestWithCert(\n  url: string,\n  certOptions: HttpsCertOptions,\n  options?: {\n    method?: string;\n    headers?: Record<string, string>;\n    body?: string;\n    timeout?: number;\n  },\n): Promise<HttpsResponse> {\n  return new Promise((resolve, reject) => {\n    const parsedUrl = new URL(url);\n\n    const req = https.request(\n      {\n        headers: options?.headers,\n        hostname: parsedUrl.hostname,\n        method: options?.method ?? 'GET',\n        passphrase: certOptions.passphrase,\n        path: parsedUrl.pathname + parsedUrl.search,\n        pfx: certOptions.pfx,\n        port: Number(parsedUrl.port) || 443,\n        timeout: options?.timeout ?? 30_000,\n      },\n      (res) => {\n        const chunks: Buffer[] = [];\n\n        res.on('data', (chunk: Buffer) => {\n          chunks.push(chunk);\n        });\n\n        res.on('error', (err) => {\n          reject(new Error(`Erro na resposta HTTPS: ${err.message}`));\n        });\n\n        res.on('end', () => {\n          resolve({\n            body: Buffer.concat(chunks).toString('utf-8'),\n            headers: res.headers as Record<string, string | string[] | undefined>,\n            statusCode: res.statusCode ?? 0,\n          });\n        });\n      },\n    );\n\n    req.on('error', (err) => {\n      reject(new Error(`Erro na requisição HTTPS: ${err.message}`));\n    });\n\n    req.on('timeout', () => {\n      req.destroy();\n      reject(new Error('Timeout na requisição HTTPS'));\n    });\n\n    if (options?.body) {\n      req.write(options.body);\n    }\n\n    req.end();\n  });\n}\n","/**\n * Autenticação RNDS com cache de token JWT\n *\n * Obtém token JWT via mutual TLS no endpoint de autenticação\n * da RNDS. O token é cacheado e renovado automaticamente\n * antes de expirar.\n */\n\nimport { RNDSAuthError } from './errors';\nimport { httpsRequestWithCert } from './http';\nimport type { RNDSTokenResponse } from './types';\n\nconst TOKEN_REFRESH_MARGIN_MS = 60_000;\n\nexport class RNDSAuth {\n  private token: string | null = null;\n  private expiresAt = 0;\n  private pendingRefresh: Promise<string> | null = null;\n\n  constructor(\n    private readonly pfx: Buffer,\n    private readonly passphrase: string,\n    private readonly authBaseUrl: string,\n  ) {}\n\n  async getToken(): Promise<string> {\n    if (this.isTokenValid()) {\n      return this.token!;\n    }\n\n    return this.refreshToken();\n  }\n\n  async refreshToken(): Promise<string> {\n    if (this.pendingRefresh) {\n      return this.pendingRefresh;\n    }\n\n    this.pendingRefresh = this.fetchToken();\n\n    try {\n      const token = await this.pendingRefresh;\n      return token;\n    } finally {\n      this.pendingRefresh = null;\n    }\n  }\n\n  isTokenValid(): boolean {\n    return this.token !== null && Date.now() < this.expiresAt - TOKEN_REFRESH_MARGIN_MS;\n  }\n\n  private async fetchToken(): Promise<string> {\n    const url = `${this.authBaseUrl}/api/token`;\n\n    let response;\n    try {\n      response = await httpsRequestWithCert(url, {\n        passphrase: this.passphrase,\n        pfx: this.pfx,\n      });\n    } catch (err) {\n      throw new RNDSAuthError(\n        `Falha na autenticação com a RNDS: ${err instanceof Error ? err.message : String(err)}`,\n      );\n    }\n\n    if (response.statusCode !== 200) {\n      throw new RNDSAuthError(\n        `Autenticação RNDS falhou com status ${response.statusCode}: ${response.body}`,\n        response.statusCode,\n      );\n    }\n\n    let tokenData: RNDSTokenResponse;\n    try {\n      tokenData = JSON.parse(response.body) as RNDSTokenResponse;\n    } catch {\n      throw new RNDSAuthError('Resposta de autenticação RNDS inválida: JSON malformado');\n    }\n\n    if (!tokenData.access_token) {\n      throw new RNDSAuthError('Resposta de autenticação RNDS não contém access_token');\n    }\n\n    this.token = tokenData.access_token;\n    this.expiresAt = this.extractExpiry(tokenData);\n\n    return this.token;\n  }\n\n  private extractExpiry(tokenData: RNDSTokenResponse): number {\n    // RNDS retorna expires_in em milissegundos (ex: 1800000 = 30 min)\n    if (tokenData.expires_in) {\n      return Date.now() + tokenData.expires_in;\n    }\n\n    try {\n      const parts = tokenData.access_token.split('.');\n      if (parts.length === 3) {\n        const payload = JSON.parse(Buffer.from(parts[1]!, 'base64url').toString()) as {\n          exp?: number;\n        };\n        if (payload.exp) {\n          return payload.exp * 1000;\n        }\n      }\n    } catch {\n      // fallback para 30 minutos\n    }\n\n    return Date.now() + 30 * 60 * 1000;\n  }\n}\n","/**\n * Configuração do cliente RNDS\n *\n * Define tipos de configuração e constantes de ambiente para\n * conexão com a Rede Nacional de Dados em Saúde (RNDS).\n */\n\nexport type RNDSEnvironment = 'homologation' | 'production';\n\nexport interface RNDSConfig {\n  /** Certificado PFX como Buffer ou caminho do arquivo */\n  certificate: Buffer | string;\n  /** Senha do certificado PFX */\n  certificatePassword: string;\n  /** CNES do estabelecimento de saúde */\n  cnes: string;\n  /** CNS do profissional de saúde responsável */\n  cns: string;\n  /** Ambiente da RNDS */\n  environment: RNDSEnvironment;\n}\n\nexport interface RNDSEndpoints {\n  api: string;\n  auth: string;\n}\n\nexport const RNDS_ENDPOINTS: Record<RNDSEnvironment, RNDSEndpoints> = {\n  homologation: {\n    api: 'https://ehr-services.hmg.saude.gov.br/api/fhir/r4',\n    auth: 'https://ehr-auth-hmg.saude.gov.br',\n  },\n  production: {\n    api: 'https://ehr-services.saude.gov.br/api/fhir/r4',\n    auth: 'https://ehr-auth.saude.gov.br',\n  },\n};\n\nexport function resolveEndpoints(environment: RNDSEnvironment): RNDSEndpoints {\n  return RNDS_ENDPOINTS[environment];\n}\n\nexport function validateConfig(config: RNDSConfig): { valid: boolean; errors: string[] } {\n  const errors: string[] = [];\n\n  if (!config.certificate) {\n    errors.push('certificate é obrigatório');\n  }\n\n  if (!config.certificatePassword) {\n    errors.push('certificatePassword é obrigatório');\n  }\n\n  if (!config.cnes) {\n    errors.push('cnes é obrigatório');\n  } else if (!/^\\d{7}$/.test(config.cnes)) {\n    errors.push('cnes deve ter exatamente 7 dígitos');\n  }\n\n  if (!config.cns) {\n    errors.push('cns é obrigatório');\n  } else if (!/^\\d{15}$/.test(config.cns)) {\n    errors.push('cns deve ter exatamente 15 dígitos');\n  }\n\n  if (!config.environment) {\n    errors.push('environment é obrigatório');\n  } else if (config.environment !== 'homologation' && config.environment !== 'production') {\n    errors.push('environment deve ser \"homologation\" ou \"production\"');\n  }\n\n  return { errors, valid: errors.length === 0 };\n}\n"],"mappings":";AAQA,OAAO,QAAQ;;;ACFR,IAAM,YAAN,cAAwB,MAAM;AAAA,EACnC,YACE,SACgB,YACA,kBAChB;AACA,UAAM,OAAO;AAHG;AACA;AAGhB,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,gBAAN,cAA4B,UAAU;AAAA,EAC3C,YAAY,SAAiB,YAAqB;AAChD,UAAM,SAAS,UAAU;AACzB,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,oBAAN,cAAgC,UAAU;AAAA,EAC/C,YAAY,SAAiB;AAC3B,UAAM,SAAS,GAAG;AAClB,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,sBAAN,cAAkC,UAAU;AAAA,EACjD,YAAY,SAAiB,kBAAyC;AACpE,UAAM,SAAS,KAAK,gBAAgB;AACpC,SAAK,OAAO;AAAA,EACd;AACF;;;AC5BA,OAAO,WAAW;AAaX,SAAS,qBACd,KACA,aACA,SAMwB;AACxB,SAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,UAAM,YAAY,IAAI,IAAI,GAAG;AAE7B,UAAM,MAAM,MAAM;AAAA,MAChB;AAAA,QACE,SAAS,SAAS;AAAA,QAClB,UAAU,UAAU;AAAA,QACpB,QAAQ,SAAS,UAAU;AAAA,QAC3B,YAAY,YAAY;AAAA,QACxB,MAAM,UAAU,WAAW,UAAU;AAAA,QACrC,KAAK,YAAY;AAAA,QACjB,MAAM,OAAO,UAAU,IAAI,KAAK;AAAA,QAChC,SAAS,SAAS,WAAW;AAAA,MAC/B;AAAA,MACA,CAAC,QAAQ;AACP,cAAM,SAAmB,CAAC;AAE1B,YAAI,GAAG,QAAQ,CAAC,UAAkB;AAChC,iBAAO,KAAK,KAAK;AAAA,QACnB,CAAC;AAED,YAAI,GAAG,SAAS,CAAC,QAAQ;AACvB,iBAAO,IAAI,MAAM,2BAA2B,IAAI,OAAO,EAAE,CAAC;AAAA,QAC5D,CAAC;AAED,YAAI,GAAG,OAAO,MAAM;AAClB,kBAAQ;AAAA,YACN,MAAM,OAAO,OAAO,MAAM,EAAE,SAAS,OAAO;AAAA,YAC5C,SAAS,IAAI;AAAA,YACb,YAAY,IAAI,cAAc;AAAA,UAChC,CAAC;AAAA,QACH,CAAC;AAAA,MACH;AAAA,IACF;AAEA,QAAI,GAAG,SAAS,CAAC,QAAQ;AACvB,aAAO,IAAI,MAAM,mCAA6B,IAAI,OAAO,EAAE,CAAC;AAAA,IAC9D,CAAC;AAED,QAAI,GAAG,WAAW,MAAM;AACtB,UAAI,QAAQ;AACZ,aAAO,IAAI,MAAM,mCAA6B,CAAC;AAAA,IACjD,CAAC;AAED,QAAI,SAAS,MAAM;AACjB,UAAI,MAAM,QAAQ,IAAI;AAAA,IACxB;AAEA,QAAI,IAAI;AAAA,EACV,CAAC;AACH;;;ACrEA,IAAM,0BAA0B;AAEzB,IAAM,WAAN,MAAe;AAAA,EAKpB,YACmB,KACA,YACA,aACjB;AAHiB;AACA;AACA;AAAA,EAChB;AAAA,EARK,QAAuB;AAAA,EACvB,YAAY;AAAA,EACZ,iBAAyC;AAAA,EAQjD,MAAM,WAA4B;AAChC,QAAI,KAAK,aAAa,GAAG;AACvB,aAAO,KAAK;AAAA,IACd;AAEA,WAAO,KAAK,aAAa;AAAA,EAC3B;AAAA,EAEA,MAAM,eAAgC;AACpC,QAAI,KAAK,gBAAgB;AACvB,aAAO,KAAK;AAAA,IACd;AAEA,SAAK,iBAAiB,KAAK,WAAW;AAEtC,QAAI;AACF,YAAM,QAAQ,MAAM,KAAK;AACzB,aAAO;AAAA,IACT,UAAE;AACA,WAAK,iBAAiB;AAAA,IACxB;AAAA,EACF;AAAA,EAEA,eAAwB;AACtB,WAAO,KAAK,UAAU,QAAQ,KAAK,IAAI,IAAI,KAAK,YAAY;AAAA,EAC9D;AAAA,EAEA,MAAc,aAA8B;AAC1C,UAAM,MAAM,GAAG,KAAK,WAAW;AAE/B,QAAI;AACJ,QAAI;AACF,iBAAW,MAAM,qBAAqB,KAAK;AAAA,QACzC,YAAY,KAAK;AAAA,QACjB,KAAK,KAAK;AAAA,MACZ,CAAC;AAAA,IACH,SAAS,KAAK;AACZ,YAAM,IAAI;AAAA,QACR,2CAAqC,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,MACvF;AAAA,IACF;AAEA,QAAI,SAAS,eAAe,KAAK;AAC/B,YAAM,IAAI;AAAA,QACR,6CAAuC,SAAS,UAAU,KAAK,SAAS,IAAI;AAAA,QAC5E,SAAS;AAAA,MACX;AAAA,IACF;AAEA,QAAI;AACJ,QAAI;AACF,kBAAY,KAAK,MAAM,SAAS,IAAI;AAAA,IACtC,QAAQ;AACN,YAAM,IAAI,cAAc,kEAAyD;AAAA,IACnF;AAEA,QAAI,CAAC,UAAU,cAAc;AAC3B,YAAM,IAAI,cAAc,mEAAuD;AAAA,IACjF;AAEA,SAAK,QAAQ,UAAU;AACvB,SAAK,YAAY,KAAK,cAAc,SAAS;AAE7C,WAAO,KAAK;AAAA,EACd;AAAA,EAEQ,cAAc,WAAsC;AAE1D,QAAI,UAAU,YAAY;AACxB,aAAO,KAAK,IAAI,IAAI,UAAU;AAAA,IAChC;AAEA,QAAI;AACF,YAAM,QAAQ,UAAU,aAAa,MAAM,GAAG;AAC9C,UAAI,MAAM,WAAW,GAAG;AACtB,cAAM,UAAU,KAAK,MAAM,OAAO,KAAK,MAAM,CAAC,GAAI,WAAW,EAAE,SAAS,CAAC;AAGzE,YAAI,QAAQ,KAAK;AACf,iBAAO,QAAQ,MAAM;AAAA,QACvB;AAAA,MACF;AAAA,IACF,QAAQ;AAAA,IAER;AAEA,WAAO,KAAK,IAAI,IAAI,KAAK,KAAK;AAAA,EAChC;AACF;;;ACtFO,IAAM,iBAAyD;AAAA,EACpE,cAAc;AAAA,IACZ,KAAK;AAAA,IACL,MAAM;AAAA,EACR;AAAA,EACA,YAAY;AAAA,IACV,KAAK;AAAA,IACL,MAAM;AAAA,EACR;AACF;AAEO,SAAS,iBAAiB,aAA6C;AAC5E,SAAO,eAAe,WAAW;AACnC;AAEO,SAAS,eAAe,QAA0D;AACvF,QAAM,SAAmB,CAAC;AAE1B,MAAI,CAAC,OAAO,aAAa;AACvB,WAAO,KAAK,iCAA2B;AAAA,EACzC;AAEA,MAAI,CAAC,OAAO,qBAAqB;AAC/B,WAAO,KAAK,yCAAmC;AAAA,EACjD;AAEA,MAAI,CAAC,OAAO,MAAM;AAChB,WAAO,KAAK,0BAAoB;AAAA,EAClC,WAAW,CAAC,UAAU,KAAK,OAAO,IAAI,GAAG;AACvC,WAAO,KAAK,uCAAoC;AAAA,EAClD;AAEA,MAAI,CAAC,OAAO,KAAK;AACf,WAAO,KAAK,yBAAmB;AAAA,EACjC,WAAW,CAAC,WAAW,KAAK,OAAO,GAAG,GAAG;AACvC,WAAO,KAAK,uCAAoC;AAAA,EAClD;AAEA,MAAI,CAAC,OAAO,aAAa;AACvB,WAAO,KAAK,iCAA2B;AAAA,EACzC,WAAW,OAAO,gBAAgB,kBAAkB,OAAO,gBAAgB,cAAc;AACvF,WAAO,KAAK,qDAAqD;AAAA,EACnE;AAEA,SAAO,EAAE,QAAQ,OAAO,OAAO,WAAW,EAAE;AAC9C;;;AJtDA,IAAM,UAAU;AAAA,EACd,KAAK;AAAA,EACL,KAAK;AACP;AAEO,IAAM,aAAN,MAAiB;AAAA,EACL;AAAA,EACA;AAAA,EACA;AAAA,EAEjB,YAAY,QAAoB;AAC9B,UAAM,aAAa,eAAe,MAAM;AACxC,QAAI,CAAC,WAAW,OAAO;AACrB,YAAM,IAAI,UAAU,mCAA0B,WAAW,OAAO,KAAK,IAAI,CAAC,EAAE;AAAA,IAC9E;AAEA,UAAM,MACJ,OAAO,OAAO,gBAAgB,WAC1B,GAAG,aAAa,OAAO,WAAW,IAClC,OAAO;AAEb,UAAM,YAAY,iBAAiB,OAAO,WAAW;AACrD,SAAK,aAAa,UAAU;AAC5B,SAAK,MAAM,OAAO;AAClB,SAAK,OAAO,IAAI,SAAS,KAAK,OAAO,qBAAqB,UAAU,IAAI;AAAA,EAC1E;AAAA,EAEA,MAAM,gBAAgB,KAA0C;AAC9D,WAAO,KAAK,IAAiB,uBAAuB,QAAQ,GAAG,IAAI,mBAAmB,GAAG,CAAC,EAAE;AAAA,EAC9F;AAAA,EAEA,MAAM,gBAAgB,KAA0C;AAC9D,WAAO,KAAK,IAAiB,YAAY,mBAAmB,GAAG,CAAC,EAAE;AAAA,EACpE;AAAA,EAEA,MAAM,sBAAsB,MAAgD;AAC1E,WAAO,KAAK,IAAsB,iBAAiB,mBAAmB,IAAI,CAAC,EAAE;AAAA,EAC/E;AAAA,EAEA,MAAM,qBAAqB,KAA+C;AACxE,WAAO,KAAK,IAAsB,iBAAiB,mBAAmB,GAAG,CAAC,EAAE;AAAA,EAC9E;AAAA,EAEA,MAAM,aAAa,QAAyC;AAC1D,WAAO,KAAK,KAAiB,WAAW,MAAM;AAAA,EAChD;AAAA,EAEA,MAAc,IAAO,MAAiC;AACpD,UAAM,WAAW,MAAM,KAAK,QAAQ,MAAM,KAAK;AAE/C,QAAI,SAAS,WAAW,KAAK;AAC3B,aAAO;AAAA,IACT;AAEA,UAAM,KAAK,oBAAoB,QAAQ;AACvC,WAAQ,MAAM,SAAS,KAAK;AAAA,EAC9B;AAAA,EAEA,MAAc,KAAQ,MAAc,MAA2B;AAC7D,UAAM,WAAW,MAAM,KAAK,QAAQ,MAAM,QAAQ,IAAI;AACtD,UAAM,KAAK,oBAAoB,QAAQ;AACvC,WAAQ,MAAM,SAAS,KAAK;AAAA,EAC9B;AAAA,EAEA,MAAc,QAAQ,MAAc,QAAgB,MAAmC;AACrF,UAAM,UAAU,MAAM,KAAK,aAAa;AACxC,UAAM,MAAM,GAAG,KAAK,UAAU,GAAG,IAAI;AAErC,WAAO,MAAM,KAAK;AAAA,MAChB,MAAM,OAAO,KAAK,UAAU,IAAI,IAAI;AAAA,MACpC;AAAA,MACA;AAAA,IACF,CAAC;AAAA,EACH;AAAA,EAEA,MAAc,eAAgD;AAC5D,UAAM,QAAQ,MAAM,KAAK,KAAK,SAAS;AAEvC,WAAO;AAAA,MACL,QAAQ;AAAA,MACR,eAAe,KAAK;AAAA,MACpB,gBAAgB;AAAA,MAChB,0BAA0B,UAAU,KAAK;AAAA,IAC3C;AAAA,EACF;AAAA,EAEA,MAAc,oBAAoB,UAAmC;AACnE,QAAI,SAAS,IAAI;AACf;AAAA,IACF;AAEA,QAAI;AACJ,QAAI;AACF,aAAO,MAAM,SAAS,KAAK;AAAA,IAC7B,QAAQ;AACN,aAAO;AAAA,IACT;AAEA,QAAI;AACJ,QAAI;AACF,YAAM,SAAS,KAAK,MAAM,IAAI;AAC9B,UAAI,OAAO,iBAAiB,oBAAoB;AAC9C,2BAAmB;AAAA,MACrB;AAAA,IACF,QAAQ;AAAA,IAER;AAEA,QAAI,SAAS,WAAW,OAAO,SAAS,WAAW,KAAK;AACtD,YAAM,IAAI;AAAA,QACR,mCAA6B,SAAS,MAAM,MAAM,IAAI;AAAA,QACtD,SAAS;AAAA,MACX;AAAA,IACF;AAEA,QAAI,SAAS,WAAW,KAAK;AAC3B,YAAM,IAAI,oBAAoB,uCAAiC,IAAI,IAAI,gBAAgB;AAAA,IACzF;AAEA,UAAM,IAAI;AAAA,MACR,kCAA4B,SAAS,MAAM,MAAM,IAAI;AAAA,MACrD,SAAS;AAAA,MACT;AAAA,IACF;AAAA,EACF;AACF;","names":[]}

package/package.json

@@ -0,0 +1,63 @@
+{
+  "name": "@precisa-saude/fhir-rnds",
+  "version": "0.1.0",
+  "description": "Cliente HTTP para a RNDS (Rede Nacional de Dados em Saúde) — API FHIR R4 do DATASUS",
+  "keywords": [
+    "fhir",
+    "rnds",
+    "datasus",
+    "sus",
+    "saude",
+    "brasil"
+  ],
+  "homepage": "https://github.com/Precisa-Saude/fhir-brasil/tree/main/packages/rnds#readme",
+  "bugs": "https://github.com/Precisa-Saude/fhir-brasil/issues",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/Precisa-Saude/fhir-brasil.git",
+    "directory": "packages/rnds"
+  },
+  "license": "Apache-2.0",
+  "sideEffects": false,
+  "type": "module",
+  "exports": {
+    ".": {
+      "import": {
+        "types": "./dist/index.d.ts",
+        "default": "./dist/index.js"
+      },
+      "require": {
+        "types": "./dist/index.d.cts",
+        "default": "./dist/index.cjs"
+      }
+    }
+  },
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "tsup",
+    "clean": "rm -rf dist .turbo",
+    "lint": "eslint src/ --max-warnings 0",
+    "test": "vitest run --passWithNoTests",
+    "test:coverage": "vitest run --coverage",
+    "typecheck": "tsc --noEmit"
+  },
+  "dependencies": {
+    "@precisa-saude/fhir": "workspace:*"
+  },
+  "devDependencies": {
+    "tsup": "^8.3.5",
+    "typescript": "~5.7.3",
+    "vitest": "^2.1.8"
+  },
+  "engines": {
+    "node": ">=20"
+  },
+  "publishConfig": {
+    "access": "public"
+  }
+}