@a5c-ai/krate 5.0.1-staging.04a3db697
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/Dockerfile +31 -0
- package/README.md +183 -0
- package/bin/krate-demo.mjs +23 -0
- package/bin/krate-server.mjs +14 -0
- package/dist/krate-controller-ui.json +3067 -0
- package/dist/krate-lifecycle.json +201 -0
- package/dist/krate-runtime-snapshot.json +2955 -0
- package/dist/krate-summary.json +722 -0
- package/docs/README.md +61 -0
- package/docs/agents/README.md +83 -0
- package/docs/agents/acceptance-test-matrix.md +193 -0
- package/docs/agents/agent-mux-adapter-contract.md +167 -0
- package/docs/agents/agent-mux-source-map.md +310 -0
- package/docs/agents/agent-run-memory-import-spec.md +256 -0
- package/docs/agents/agent-stack-management-spec.md +421 -0
- package/docs/agents/api-contract-spec.md +309 -0
- package/docs/agents/artifacts-writeback-spec.md +145 -0
- package/docs/agents/chart-packaging-spec.md +128 -0
- package/docs/agents/ci-orchestration-spec.md +140 -0
- package/docs/agents/context-assembly-spec.md +219 -0
- package/docs/agents/controller-reconciliation-spec.md +255 -0
- package/docs/agents/crd-schema-spec.md +315 -0
- package/docs/agents/decision-log-open-questions.md +169 -0
- package/docs/agents/developer-implementation-checklist.md +329 -0
- package/docs/agents/dispatching-design.md +262 -0
- package/docs/agents/gaps-agent-mux-to-krate-crds.md +298 -0
- package/docs/agents/glossary.md +66 -0
- package/docs/agents/implementation-blueprint.md +324 -0
- package/docs/agents/implementation-rollout-slices.md +251 -0
- package/docs/agents/memory-context-integration-spec.md +194 -0
- package/docs/agents/memory-ontology-schema-spec.md +253 -0
- package/docs/agents/memory-operations-runbook.md +121 -0
- package/docs/agents/mvp-vertical-slice-spec.md +146 -0
- package/docs/agents/observability-audit-spec.md +265 -0
- package/docs/agents/operator-runbook.md +174 -0
- package/docs/agents/org-memory-api-payload-examples.md +333 -0
- package/docs/agents/org-memory-controller-sequence-spec.md +181 -0
- package/docs/agents/org-memory-e2e-fixture-plan.md +161 -0
- package/docs/agents/org-memory-ui-implementation-map.md +114 -0
- package/docs/agents/org-memory-vertical-slice-spec.md +168 -0
- package/docs/agents/org-resource-model-delta-spec.md +111 -0
- package/docs/agents/org-route-resource-model-spec.md +183 -0
- package/docs/agents/org-scoping-namespace-spec.md +114 -0
- package/docs/agents/rbac-secrets-management-spec.md +406 -0
- package/docs/agents/repository-page-integration-spec.md +255 -0
- package/docs/agents/resource-contract-examples.md +808 -0
- package/docs/agents/resource-relationship-map.md +190 -0
- package/docs/agents/security-threat-model.md +188 -0
- package/docs/agents/shared-memory-company-brain-spec.md +358 -0
- package/docs/agents/storage-migration-spec.md +168 -0
- package/docs/agents/subagent-orchestration-spec.md +152 -0
- package/docs/agents/system-overview.md +88 -0
- package/docs/agents/tools-mcp-skills-spec.md +189 -0
- package/docs/agents/traceability-matrix.md +79 -0
- package/docs/agents/ui-flow-spec.md +211 -0
- package/docs/agents/ui-ux-system-spec.md +426 -0
- package/docs/agents/workspace-lifecycle-spec.md +166 -0
- package/docs/architecture-spec.md +78 -0
- package/docs/components/control-plane.md +78 -0
- package/docs/components/data-plane.md +69 -0
- package/docs/components/hooks-events.md +67 -0
- package/docs/components/identity-rbac-policy.md +73 -0
- package/docs/components/kubevela-oam.md +70 -0
- package/docs/components/operations-publishing.md +81 -0
- package/docs/components/runners-ci.md +66 -0
- package/docs/components/web-ui.md +94 -0
- package/docs/external/README.md +47 -0
- package/docs/external/bidirectional-sync-design.md +134 -0
- package/docs/external/cicd-interface.md +64 -0
- package/docs/external/external-backend-controllers.md +170 -0
- package/docs/external/external-backend-crds.md +234 -0
- package/docs/external/external-backend-ui-spec.md +151 -0
- package/docs/external/external-backend-ux-flows.md +115 -0
- package/docs/external/external-object-mapping.md +125 -0
- package/docs/external/git-forge-interface.md +68 -0
- package/docs/external/github-integration-design.md +151 -0
- package/docs/external/issue-tracking-interface.md +66 -0
- package/docs/external/provider-capability-manifests.md +204 -0
- package/docs/external/provider-catalog.md +139 -0
- package/docs/external/provider-rollout-testing.md +78 -0
- package/docs/external/research-results.md +48 -0
- package/docs/external/security-auth-permissions.md +81 -0
- package/docs/external/sync-state-machines.md +108 -0
- package/docs/external/unified-external-backend-model.md +107 -0
- package/docs/external/user-facing-changes.md +67 -0
- package/docs/gaps.md +161 -0
- package/docs/install.md +94 -0
- package/docs/krate-design.md +334 -0
- package/docs/local-minikube.md +55 -0
- package/docs/ontology/README.md +32 -0
- package/docs/ontology/bounded-contexts.md +29 -0
- package/docs/ontology/events-and-hooks.md +32 -0
- package/docs/ontology/oam-kubevela.md +32 -0
- package/docs/ontology/operations-and-release.md +25 -0
- package/docs/ontology/personas-and-actors.md +32 -0
- package/docs/ontology/policies-and-invariants.md +33 -0
- package/docs/ontology/problem-space.md +30 -0
- package/docs/ontology/resource-contracts.md +40 -0
- package/docs/ontology/resource-taxonomy.md +42 -0
- package/docs/ontology/runners-and-ci.md +29 -0
- package/docs/ontology/solution-space.md +24 -0
- package/docs/ontology/storage-and-data-boundaries.md +29 -0
- package/docs/ontology/validation-matrix.md +24 -0
- package/docs/ontology/web-ui-excellent-flows.md +32 -0
- package/docs/ontology/workflows.md +39 -0
- package/docs/ontology/world.md +35 -0
- package/docs/product-requirements.md +62 -0
- package/docs/roadmap-mvp.md +87 -0
- package/docs/system-requirements.md +90 -0
- package/docs/tests/README.md +53 -0
- package/docs/tests/agent-qa-plan.md +63 -0
- package/docs/tests/browser-ui-tests.md +62 -0
- package/docs/tests/ci-quality-gates.md +48 -0
- package/docs/tests/coverage-model.md +64 -0
- package/docs/tests/e2e-scenario-tests.md +53 -0
- package/docs/tests/fixtures-test-data.md +63 -0
- package/docs/tests/observability-reliability-tests.md +54 -0
- package/docs/tests/product-test-matrix.md +145 -0
- package/docs/tests/qa-adoption-roadmap.md +130 -0
- package/docs/tests/qa-automation-plan.md +101 -0
- package/docs/tests/security-compliance-tests.md +57 -0
- package/docs/tests/test-framework-tools.md +88 -0
- package/docs/tests/test-suite-layout.md +121 -0
- package/docs/tests/unit-integration-tests.md +48 -0
- package/docs/todo-kyverno +714 -0
- package/docs/todos.md +4 -0
- package/docs/user-stories.md +78 -0
- package/examples/minikube-demo.yaml +190 -0
- package/examples/oam-application.yaml +23 -0
- package/examples/policy-kyverno-pr-title.yaml +18 -0
- package/package.json +63 -0
- package/scripts/build.mjs +29 -0
- package/scripts/setup-minikube.mjs +65 -0
- package/scripts/smoke.mjs +37 -0
- package/scripts/validate-doc-coverage.mjs +152 -0
- package/scripts/validate-package.mjs +93 -0
- package/scripts/validate-ui.mjs +236 -0
- package/src/agent-adapter-controller.js +169 -0
- package/src/agent-approval-controller.js +170 -0
- package/src/agent-context-bundles.js +242 -0
- package/src/agent-dispatch-controller.js +209 -0
- package/src/agent-gateway-config-controller.js +147 -0
- package/src/agent-memory-controller.js +357 -0
- package/src/agent-memory-import.js +327 -0
- package/src/agent-memory-query.js +292 -0
- package/src/agent-memory-repository-source-controller.js +255 -0
- package/src/agent-mux-client.js +280 -0
- package/src/agent-permission-review.js +250 -0
- package/src/agent-project-controller.js +117 -0
- package/src/agent-provider-config-controller.js +150 -0
- package/src/agent-secret-config-grant-controller.js +282 -0
- package/src/agent-session-transcript-controller.js +189 -0
- package/src/agent-stack-controller.js +347 -0
- package/src/agent-subagent-controller.js +160 -0
- package/src/agent-transport-binding-controller.js +121 -0
- package/src/agent-trigger-controller.js +321 -0
- package/src/agent-workspace-controller.js +447 -0
- package/src/agent-writeback-controller.js +302 -0
- package/src/api-controller.js +541 -0
- package/src/argocd-gitops.js +43 -0
- package/src/async-controller.js +207 -0
- package/src/audit-controller.js +191 -0
- package/src/auth.js +307 -0
- package/src/component-catalog.js +41 -0
- package/src/control-plane.js +136 -0
- package/src/controller-client.js +50 -0
- package/src/controller-ui.js +551 -0
- package/src/data-plane.js +178 -0
- package/src/event-bus.js +61 -0
- package/src/external/conflict-controller.js +225 -0
- package/src/external/github/auth.js +96 -0
- package/src/external/github/cicd.js +180 -0
- package/src/external/github/git-forge.js +240 -0
- package/src/external/github/index.js +144 -0
- package/src/external/github/issue-tracking.js +163 -0
- package/src/external/provider-adapter.js +161 -0
- package/src/external/provider-resource-factory.js +161 -0
- package/src/external/sync-controller.js +235 -0
- package/src/external/webhook-controller.js +144 -0
- package/src/external/write-controller.js +283 -0
- package/src/gitea-backend.js +95 -0
- package/src/gitea-service.js +173 -0
- package/src/handoff.js +98 -0
- package/src/hooks-events.js +63 -0
- package/src/http-server.js +377 -0
- package/src/identity-policy.js +86 -0
- package/src/index.js +55 -0
- package/src/kubernetes-controller-async.js +511 -0
- package/src/kubernetes-controller.js +878 -0
- package/src/kubernetes-resource-gateway.js +48 -0
- package/src/operations.js +112 -0
- package/src/org-scoping.js +5 -0
- package/src/resource-model.js +221 -0
- package/src/runners-ci.js +48 -0
- package/src/runtime.js +196 -0
- package/src/snapshot-cache.js +157 -0
- package/src/web-ui.js +40 -0
- package/tests/agent-adapter-controller.test.js +361 -0
- package/tests/agent-approval-controller.test.js +173 -0
- package/tests/agent-context-bundles.test.js +278 -0
- package/tests/agent-dispatch-controller.test.js +315 -0
- package/tests/agent-gateway-config-controller.test.js +386 -0
- package/tests/agent-memory-controller.test.js +308 -0
- package/tests/agent-memory-import-snapshot.test.js +477 -0
- package/tests/agent-memory-query.test.js +404 -0
- package/tests/agent-memory-repository-source.test.js +514 -0
- package/tests/agent-mux-client.test.js +204 -0
- package/tests/agent-permission-review-v2.test.js +317 -0
- package/tests/agent-permission-review.test.js +209 -0
- package/tests/agent-project-controller.test.js +302 -0
- package/tests/agent-provider-config-controller.test.js +376 -0
- package/tests/agent-resources.test.js +228 -0
- package/tests/agent-secret-config-grant.test.js +231 -0
- package/tests/agent-session-transcript-controller.test.js +499 -0
- package/tests/agent-stack-controller.test.js +221 -0
- package/tests/agent-subagent-controller.test.js +201 -0
- package/tests/agent-transport-binding-controller.test.js +294 -0
- package/tests/agent-trigger-controller.test.js +211 -0
- package/tests/agent-trigger-routes.test.js +190 -0
- package/tests/agent-trigger-sources.test.js +245 -0
- package/tests/agent-workspace-controller.test.js +181 -0
- package/tests/agent-writeback.test.js +292 -0
- package/tests/approval-persistence.test.js +171 -0
- package/tests/async-controller.test.js +252 -0
- package/tests/audit-controller.test.js +227 -0
- package/tests/deployment.test.js +396 -0
- package/tests/e2e/lifecycle.test.js +117 -0
- package/tests/external-github-forge.test.js +560 -0
- package/tests/external-github-issues-cicd.test.js +520 -0
- package/tests/external-integration.test.js +470 -0
- package/tests/external-persistence.test.js +340 -0
- package/tests/external-provider-adapter.test.js +365 -0
- package/tests/external-resource-model.test.js +215 -0
- package/tests/external-webhook-sync.test.js +287 -0
- package/tests/external-write-conflict.test.js +353 -0
- package/tests/gitea-service.test.js +253 -0
- package/tests/health-check-real.test.js +165 -0
- package/tests/integration/full-flow.test.js +266 -0
- package/tests/krate.test.js +727 -0
- package/tests/memory-search-wiring.test.js +270 -0
- package/tests/org-scoping.test.js +687 -0
- package/tests/session-cookie-hmac.test.js +151 -0
- package/tests/snapshot-performance.test.js +247 -0
- package/tests/sse-events.test.js +107 -0
- package/tests/workspace-volumes.test.js +312 -0
- package/tests/writeback-persistence.test.js +207 -0
|
@@ -0,0 +1,207 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Async controller utilities for event batching, retry policies, delivery queues,
|
|
3
|
+
* and checkpoint persistence.
|
|
4
|
+
*/
|
|
5
|
+
|
|
6
|
+
// ---------------------------------------------------------------------------
|
|
7
|
+
// Event batcher
|
|
8
|
+
// ---------------------------------------------------------------------------
|
|
9
|
+
|
|
10
|
+
/**
|
|
11
|
+
* Accumulates events and flushes them in batches either when the batch is full
|
|
12
|
+
* or when the flush interval expires.
|
|
13
|
+
*
|
|
14
|
+
* @param {(events: any[]) => void | Promise<void>} handler - Called with each flushed batch.
|
|
15
|
+
* @param {{ maxBatchSize?: number, flushIntervalMs?: number }} [options]
|
|
16
|
+
* @returns {{ push(event: any): void, flush(): Promise<void>, stop(): void }}
|
|
17
|
+
*/
|
|
18
|
+
export function createEventBatcher(handler, { maxBatchSize = 50, flushIntervalMs = 1000 } = {}) {
|
|
19
|
+
let batch = [];
|
|
20
|
+
let timer = null;
|
|
21
|
+
|
|
22
|
+
function scheduleFlush() {
|
|
23
|
+
if (timer !== null) return;
|
|
24
|
+
timer = setTimeout(async () => {
|
|
25
|
+
timer = null;
|
|
26
|
+
await flushNow();
|
|
27
|
+
}, flushIntervalMs);
|
|
28
|
+
}
|
|
29
|
+
|
|
30
|
+
async function flushNow() {
|
|
31
|
+
if (batch.length === 0) return;
|
|
32
|
+
const toFlush = batch;
|
|
33
|
+
batch = [];
|
|
34
|
+
await handler(toFlush);
|
|
35
|
+
}
|
|
36
|
+
|
|
37
|
+
return {
|
|
38
|
+
push(event) {
|
|
39
|
+
batch.push(event);
|
|
40
|
+
if (batch.length >= maxBatchSize) {
|
|
41
|
+
if (timer !== null) {
|
|
42
|
+
clearTimeout(timer);
|
|
43
|
+
timer = null;
|
|
44
|
+
}
|
|
45
|
+
// Fire-and-forget the synchronous portion; handler may return a Promise
|
|
46
|
+
const toFlush = batch;
|
|
47
|
+
batch = [];
|
|
48
|
+
Promise.resolve(handler(toFlush)).catch(() => {});
|
|
49
|
+
} else {
|
|
50
|
+
scheduleFlush();
|
|
51
|
+
}
|
|
52
|
+
},
|
|
53
|
+
async flush() {
|
|
54
|
+
if (timer !== null) {
|
|
55
|
+
clearTimeout(timer);
|
|
56
|
+
timer = null;
|
|
57
|
+
}
|
|
58
|
+
await flushNow();
|
|
59
|
+
},
|
|
60
|
+
stop() {
|
|
61
|
+
if (timer !== null) {
|
|
62
|
+
clearTimeout(timer);
|
|
63
|
+
timer = null;
|
|
64
|
+
}
|
|
65
|
+
batch = [];
|
|
66
|
+
},
|
|
67
|
+
};
|
|
68
|
+
}
|
|
69
|
+
|
|
70
|
+
// ---------------------------------------------------------------------------
|
|
71
|
+
// Retry policy
|
|
72
|
+
// ---------------------------------------------------------------------------
|
|
73
|
+
|
|
74
|
+
/**
|
|
75
|
+
* Creates a retry policy with exponential backoff and optional jitter.
|
|
76
|
+
*
|
|
77
|
+
* @param {{ maxRetries?: number, baseDelayMs?: number, maxDelayMs?: number, jitter?: boolean }} [options]
|
|
78
|
+
* @returns {{ shouldRetry(attempt: number, error: any): boolean, getDelay(attempt: number): number }}
|
|
79
|
+
*/
|
|
80
|
+
export function createRetryPolicy({ maxRetries = 3, baseDelayMs = 1000, maxDelayMs = 30000, jitter = true } = {}) {
|
|
81
|
+
return {
|
|
82
|
+
/**
|
|
83
|
+
* Returns true if another attempt should be made.
|
|
84
|
+
* @param {number} attempt - 0-based number of the attempt that just failed.
|
|
85
|
+
*/
|
|
86
|
+
shouldRetry(attempt, _error) {
|
|
87
|
+
return attempt < maxRetries;
|
|
88
|
+
},
|
|
89
|
+
/**
|
|
90
|
+
* Returns the delay in ms to wait before the next attempt.
|
|
91
|
+
* @param {number} attempt - 0-based number of the attempt that just failed.
|
|
92
|
+
*/
|
|
93
|
+
getDelay(attempt) {
|
|
94
|
+
const exponential = baseDelayMs * Math.pow(2, attempt);
|
|
95
|
+
const capped = Math.min(exponential, maxDelayMs);
|
|
96
|
+
if (!jitter) return capped;
|
|
97
|
+
// Full-jitter: random value in [0, capped]
|
|
98
|
+
return Math.floor(Math.random() * (capped + 1));
|
|
99
|
+
},
|
|
100
|
+
};
|
|
101
|
+
}
|
|
102
|
+
|
|
103
|
+
// ---------------------------------------------------------------------------
|
|
104
|
+
// Delivery queue
|
|
105
|
+
// ---------------------------------------------------------------------------
|
|
106
|
+
|
|
107
|
+
/**
|
|
108
|
+
* In-memory ordered queue with configurable concurrency and optional retry support.
|
|
109
|
+
*
|
|
110
|
+
* @param {(item: any) => Promise<void>} processor - Called for each dequeued item.
|
|
111
|
+
* @param {{ concurrency?: number, retryPolicy?: ReturnType<typeof createRetryPolicy> }} [options]
|
|
112
|
+
* @returns {{ enqueue(item: any): void, drain(): Promise<void>, size(): number, stop(): void }}
|
|
113
|
+
*/
|
|
114
|
+
export function createDeliveryQueue(processor, { concurrency = 5, retryPolicy } = {}) {
|
|
115
|
+
const queue = [];
|
|
116
|
+
let active = 0;
|
|
117
|
+
let stopped = false;
|
|
118
|
+
/** @type {Array<() => void>} */
|
|
119
|
+
let drainResolvers = [];
|
|
120
|
+
|
|
121
|
+
function checkDrain() {
|
|
122
|
+
if (active === 0 && queue.length === 0) {
|
|
123
|
+
for (const resolve of drainResolvers) resolve();
|
|
124
|
+
drainResolvers = [];
|
|
125
|
+
}
|
|
126
|
+
}
|
|
127
|
+
|
|
128
|
+
async function processItem(item) {
|
|
129
|
+
let attempt = 0;
|
|
130
|
+
while (true) {
|
|
131
|
+
try {
|
|
132
|
+
await processor(item);
|
|
133
|
+
return;
|
|
134
|
+
} catch (err) {
|
|
135
|
+
if (retryPolicy && retryPolicy.shouldRetry(attempt, err)) {
|
|
136
|
+
const delay = retryPolicy.getDelay(attempt);
|
|
137
|
+
attempt++;
|
|
138
|
+
if (delay > 0) await new Promise((r) => setTimeout(r, delay));
|
|
139
|
+
} else {
|
|
140
|
+
// Swallow the error; callers can handle via processor rejections externally
|
|
141
|
+
return;
|
|
142
|
+
}
|
|
143
|
+
}
|
|
144
|
+
}
|
|
145
|
+
}
|
|
146
|
+
|
|
147
|
+
function tick() {
|
|
148
|
+
while (!stopped && queue.length > 0 && active < concurrency) {
|
|
149
|
+
const item = queue.shift();
|
|
150
|
+
active++;
|
|
151
|
+
processItem(item).finally(() => {
|
|
152
|
+
active--;
|
|
153
|
+
tick();
|
|
154
|
+
checkDrain();
|
|
155
|
+
});
|
|
156
|
+
}
|
|
157
|
+
if (!stopped) checkDrain();
|
|
158
|
+
}
|
|
159
|
+
|
|
160
|
+
return {
|
|
161
|
+
enqueue(item) {
|
|
162
|
+
if (stopped) return;
|
|
163
|
+
queue.push(item);
|
|
164
|
+
tick();
|
|
165
|
+
},
|
|
166
|
+
drain() {
|
|
167
|
+
if (active === 0 && queue.length === 0) return Promise.resolve();
|
|
168
|
+
return new Promise((resolve) => drainResolvers.push(resolve));
|
|
169
|
+
},
|
|
170
|
+
size() {
|
|
171
|
+
return queue.length + active;
|
|
172
|
+
},
|
|
173
|
+
stop() {
|
|
174
|
+
stopped = true;
|
|
175
|
+
queue.length = 0;
|
|
176
|
+
for (const resolve of drainResolvers) resolve();
|
|
177
|
+
drainResolvers = [];
|
|
178
|
+
},
|
|
179
|
+
};
|
|
180
|
+
}
|
|
181
|
+
|
|
182
|
+
// ---------------------------------------------------------------------------
|
|
183
|
+
// Checkpointer
|
|
184
|
+
// ---------------------------------------------------------------------------
|
|
185
|
+
|
|
186
|
+
/**
|
|
187
|
+
* Simple key-value checkpoint persistence backed by any Map-like storage.
|
|
188
|
+
*
|
|
189
|
+
* @param {Map<string, any>} [storage]
|
|
190
|
+
* @returns {{ save(key: string, value: any): void, load(key: string): any, clear(key: string): void, listKeys(): string[] }}
|
|
191
|
+
*/
|
|
192
|
+
export function createCheckpointer(storage = new Map()) {
|
|
193
|
+
return {
|
|
194
|
+
save(key, value) {
|
|
195
|
+
storage.set(key, value);
|
|
196
|
+
},
|
|
197
|
+
load(key) {
|
|
198
|
+
return storage.has(key) ? storage.get(key) : undefined;
|
|
199
|
+
},
|
|
200
|
+
clear(key) {
|
|
201
|
+
storage.delete(key);
|
|
202
|
+
},
|
|
203
|
+
listKeys() {
|
|
204
|
+
return Array.from(storage.keys());
|
|
205
|
+
},
|
|
206
|
+
};
|
|
207
|
+
}
|
|
@@ -0,0 +1,191 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Audit Controller — Org-scoped audit log, event streaming, smart polling with
|
|
3
|
+
* exponential backoff, replay on reconnect, and metrics aggregation.
|
|
4
|
+
*
|
|
5
|
+
* @module audit-controller
|
|
6
|
+
*/
|
|
7
|
+
|
|
8
|
+
export const AUDIT_CONTROLLER_BOUNDARY = {
|
|
9
|
+
role: 'audit-controller',
|
|
10
|
+
scope: 'Org-scoped audit log — event recording, streaming, replay, metrics',
|
|
11
|
+
owns: ['audit events', 'event streaming', 'event polling', 'audit metrics'],
|
|
12
|
+
delegatesTo: [],
|
|
13
|
+
mustNotOwn: ['identity management', 'resource storage', 'git operations'],
|
|
14
|
+
};
|
|
15
|
+
|
|
16
|
+
// ─── AuditController ─────────────────────────────────────────────────────────
|
|
17
|
+
|
|
18
|
+
/**
|
|
19
|
+
* Create an in-memory audit controller.
|
|
20
|
+
*
|
|
21
|
+
* @returns {{
|
|
22
|
+
* log: Function,
|
|
23
|
+
* query: Function,
|
|
24
|
+
* getStream: Function,
|
|
25
|
+
* getMetrics: Function,
|
|
26
|
+
* }}
|
|
27
|
+
*/
|
|
28
|
+
export function createAuditController() {
|
|
29
|
+
/** @type {Array<AuditEvent>} */
|
|
30
|
+
const store = [];
|
|
31
|
+
let seq = 0;
|
|
32
|
+
|
|
33
|
+
return {
|
|
34
|
+
role: 'audit-controller',
|
|
35
|
+
|
|
36
|
+
/**
|
|
37
|
+
* Record an audit event.
|
|
38
|
+
*
|
|
39
|
+
* @param {{ org: string, actor?: string, action: string, resource?: object, timestamp?: string }} params
|
|
40
|
+
* @returns {AuditEvent}
|
|
41
|
+
*/
|
|
42
|
+
log({ org, actor = 'system', action, resource = {}, timestamp } = {}) {
|
|
43
|
+
if (!org || typeof org !== 'string') {
|
|
44
|
+
throw new Error('audit.log: org is required');
|
|
45
|
+
}
|
|
46
|
+
if (!action || typeof action !== 'string') {
|
|
47
|
+
throw new Error('audit.log: action is required');
|
|
48
|
+
}
|
|
49
|
+
|
|
50
|
+
const event = {
|
|
51
|
+
id: ++seq,
|
|
52
|
+
org,
|
|
53
|
+
actor,
|
|
54
|
+
action,
|
|
55
|
+
resource: Object.assign({}, resource),
|
|
56
|
+
timestamp: timestamp || new Date().toISOString(),
|
|
57
|
+
};
|
|
58
|
+
|
|
59
|
+
store.push(event);
|
|
60
|
+
return Object.assign({}, event);
|
|
61
|
+
},
|
|
62
|
+
|
|
63
|
+
/**
|
|
64
|
+
* Query audit events with filtering and pagination.
|
|
65
|
+
*
|
|
66
|
+
* @param {{ org?: string, action?: string, since?: string, until?: string, limit?: number, offset?: number }} params
|
|
67
|
+
* @returns {{ events: AuditEvent[], total: number }}
|
|
68
|
+
*/
|
|
69
|
+
query({ org, action, since, until, limit, offset = 0 } = {}) {
|
|
70
|
+
let filtered = store.slice();
|
|
71
|
+
|
|
72
|
+
if (org) filtered = filtered.filter(e => e.org === org);
|
|
73
|
+
if (action) filtered = filtered.filter(e => e.action === action);
|
|
74
|
+
|
|
75
|
+
if (since) {
|
|
76
|
+
const sinceMs = new Date(since).getTime();
|
|
77
|
+
filtered = filtered.filter(e => new Date(e.timestamp).getTime() >= sinceMs);
|
|
78
|
+
}
|
|
79
|
+
if (until) {
|
|
80
|
+
const untilMs = new Date(until).getTime();
|
|
81
|
+
filtered = filtered.filter(e => new Date(e.timestamp).getTime() <= untilMs);
|
|
82
|
+
}
|
|
83
|
+
|
|
84
|
+
// reverse chronological
|
|
85
|
+
filtered = filtered.slice().sort((a, b) => new Date(b.timestamp).getTime() - new Date(a.timestamp).getTime());
|
|
86
|
+
|
|
87
|
+
const total = filtered.length;
|
|
88
|
+
filtered = filtered.slice(offset);
|
|
89
|
+
if (limit != null) filtered = filtered.slice(0, limit);
|
|
90
|
+
|
|
91
|
+
return { events: filtered.map(e => Object.assign({}, e)), total };
|
|
92
|
+
},
|
|
93
|
+
|
|
94
|
+
/**
|
|
95
|
+
* Return all events after the given sequence number for a given org (event replay).
|
|
96
|
+
*
|
|
97
|
+
* @param {{ org?: string, afterSeq: number }} params
|
|
98
|
+
* @returns {{ events: AuditEvent[], lastSeq: number }}
|
|
99
|
+
*/
|
|
100
|
+
getStream({ org, afterSeq = 0 } = {}) {
|
|
101
|
+
let filtered = store.filter(e => e.id > afterSeq);
|
|
102
|
+
if (org) filtered = filtered.filter(e => e.org === org);
|
|
103
|
+
// chronological order for stream replay
|
|
104
|
+
filtered = filtered.slice().sort((a, b) => a.id - b.id);
|
|
105
|
+
return {
|
|
106
|
+
events: filtered.map(e => Object.assign({}, e)),
|
|
107
|
+
lastSeq: filtered.length > 0 ? filtered[filtered.length - 1].id : afterSeq,
|
|
108
|
+
};
|
|
109
|
+
},
|
|
110
|
+
|
|
111
|
+
/**
|
|
112
|
+
* Aggregate audit metrics for an org.
|
|
113
|
+
*
|
|
114
|
+
* @param {{ org?: string }} params
|
|
115
|
+
* @returns {{ byAction: object, byOrg: object, byHour: object, total: number }}
|
|
116
|
+
*/
|
|
117
|
+
getMetrics({ org } = {}) {
|
|
118
|
+
let events = store.slice();
|
|
119
|
+
if (org) events = events.filter(e => e.org === org);
|
|
120
|
+
|
|
121
|
+
const byAction = {};
|
|
122
|
+
const byOrg = {};
|
|
123
|
+
const byHour = {};
|
|
124
|
+
|
|
125
|
+
for (const event of events) {
|
|
126
|
+
byAction[event.action] = (byAction[event.action] || 0) + 1;
|
|
127
|
+
byOrg[event.org] = (byOrg[event.org] || 0) + 1;
|
|
128
|
+
// hour key: "2026-05-13T10" (drop minutes/seconds)
|
|
129
|
+
const hourKey = event.timestamp.slice(0, 13);
|
|
130
|
+
byHour[hourKey] = (byHour[hourKey] || 0) + 1;
|
|
131
|
+
}
|
|
132
|
+
|
|
133
|
+
return { byAction, byOrg, byHour, total: events.length };
|
|
134
|
+
},
|
|
135
|
+
};
|
|
136
|
+
}
|
|
137
|
+
|
|
138
|
+
// ─── EventPoller ─────────────────────────────────────────────────────────────
|
|
139
|
+
|
|
140
|
+
/**
|
|
141
|
+
* Create a smart event poller with exponential backoff.
|
|
142
|
+
*
|
|
143
|
+
* When polls return no new events the backoff interval doubles (up to maxBackoff).
|
|
144
|
+
* When new events arrive the backoff resets to initialBackoff.
|
|
145
|
+
*
|
|
146
|
+
* @param {{ controller: object, org?: string, initialBackoff?: number, maxBackoff?: number }} options
|
|
147
|
+
* @returns {{ poll: Function, getBackoff: Function, reset: Function }}
|
|
148
|
+
*/
|
|
149
|
+
export function createEventPoller({ controller, org, initialBackoff = 1000, maxBackoff = 30000 } = {}) {
|
|
150
|
+
let lastSeq = 0;
|
|
151
|
+
let currentBackoff = initialBackoff;
|
|
152
|
+
|
|
153
|
+
return {
|
|
154
|
+
/**
|
|
155
|
+
* Poll for new events. Updates backoff state.
|
|
156
|
+
* @returns {{ events: AuditEvent[], lastSeq: number }}
|
|
157
|
+
*/
|
|
158
|
+
poll() {
|
|
159
|
+
const result = controller.getStream({ org, afterSeq: lastSeq });
|
|
160
|
+
if (result.events.length > 0) {
|
|
161
|
+
// New events — reset backoff and advance cursor
|
|
162
|
+
lastSeq = result.lastSeq;
|
|
163
|
+
currentBackoff = initialBackoff;
|
|
164
|
+
} else {
|
|
165
|
+
// No new events — double the backoff, capped at maxBackoff
|
|
166
|
+
currentBackoff = Math.min(currentBackoff * 2, maxBackoff);
|
|
167
|
+
}
|
|
168
|
+
return result;
|
|
169
|
+
},
|
|
170
|
+
|
|
171
|
+
/**
|
|
172
|
+
* Get the current backoff interval in milliseconds.
|
|
173
|
+
* @returns {number}
|
|
174
|
+
*/
|
|
175
|
+
getBackoff() {
|
|
176
|
+
return currentBackoff;
|
|
177
|
+
},
|
|
178
|
+
|
|
179
|
+
/**
|
|
180
|
+
* Reset the poller cursor and backoff to their initial states.
|
|
181
|
+
*/
|
|
182
|
+
reset() {
|
|
183
|
+
lastSeq = 0;
|
|
184
|
+
currentBackoff = initialBackoff;
|
|
185
|
+
},
|
|
186
|
+
};
|
|
187
|
+
}
|
|
188
|
+
|
|
189
|
+
/**
|
|
190
|
+
* @typedef {{ id: number, org: string, actor: string, action: string, resource: object, timestamp: string }} AuditEvent
|
|
191
|
+
*/
|