@autonoma-io/a6s 5.1.2

package/dist/utils/db-client.js

@@ -0,0 +1,132 @@
+"use strict";
+/**
+ * Database Client Utility
+ *
+ * Provides secure PostgreSQL client with proper AWS RDS certificate validation.
+ * Uses AWS RDS global CA bundle instead of disabling SSL verification.
+ *
+ * Security: This replaces the insecure NODE_TLS_REJECT_UNAUTHORIZED=0 approach
+ * Reference: AWS RDS Certificate Authority documentation
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_CONNECTION_STRING = void 0;
+exports.getSSLConfig = getSSLConfig;
+exports.createDbClient = createDbClient;
+exports.createConnectedDbClient = createConnectedDbClient;
+const pg_1 = require("pg");
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+// CA bundle paths to check (in order of preference)
+const CA_BUNDLE_PATHS = [
+    path.join(__dirname, '../../certs/rds-global-bundle.pem'),
+    path.join(__dirname, '../../../certs/rds-global-bundle.pem'),
+    '/app/certs/rds-global-bundle.pem',
+    '/etc/ssl/certs/rds-global-bundle.pem'
+];
+// Cache the certificate to avoid repeated file reads
+let rdsCaCertificate = null;
+let certificateLoaded = false;
+/**
+ * Load the RDS CA certificate bundle
+ * Tries multiple paths and caches the result
+ */
+function loadCaCertificate() {
+    if (certificateLoaded) {
+        return rdsCaCertificate;
+    }
+    for (const certPath of CA_BUNDLE_PATHS) {
+        try {
+            if (fs.existsSync(certPath)) {
+                rdsCaCertificate = fs.readFileSync(certPath, 'utf-8');
+                console.log(`[db-client] Loaded RDS CA bundle from: ${certPath}`);
+                certificateLoaded = true;
+                return rdsCaCertificate;
+            }
+        }
+        catch (error) {
+            // Continue to next path
+        }
+    }
+    console.warn('[db-client] Could not load RDS CA bundle from any path, falling back to insecure mode');
+    certificateLoaded = true;
+    return null;
+}
+/**
+ * Get SSL configuration for PostgreSQL client
+ * Uses CA bundle if available, falls back to insecure mode with warning
+ */
+function getSSLConfig() {
+    const caCert = loadCaCertificate();
+    if (caCert) {
+        return {
+            rejectUnauthorized: true,
+            ca: caCert
+        };
+    }
+    // Fallback to insecure mode (only for development/testing)
+    return {
+        rejectUnauthorized: false
+    };
+}
+/**
+ * Default database connection string
+ * Uses environment variable or falls back to default
+ */
+exports.DEFAULT_CONNECTION_STRING = process.env.DATABASE_URL || '';
+/**
+ * Create a new PostgreSQL client with secure SSL configuration
+ *
+ * @param connectionString - Optional connection string (defaults to DATABASE_URL)
+ * @returns Configured pg Client instance
+ */
+function createDbClient(connectionString) {
+    return new pg_1.Client({
+        connectionString: connectionString || exports.DEFAULT_CONNECTION_STRING,
+        ssl: getSSLConfig()
+    });
+}
+/**
+ * Create a new PostgreSQL client and connect it
+ *
+ * @param connectionString - Optional connection string (defaults to DATABASE_URL)
+ * @returns Promise resolving to connected pg Client instance
+ */
+async function createConnectedDbClient(connectionString) {
+    const client = createDbClient(connectionString);
+    await client.connect();
+    return client;
+}
+//# sourceMappingURL=db-client.js.map

package/dist/utils/db-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"db-client.js","sourceRoot":"","sources":["../../src/utils/db-client.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiDH,oCAcC;AAcD,wCAKC;AAQD,0DAIC;AA5FD,2BAA0C;AAC1C,uCAAyB;AACzB,2CAA6B;AAE7B,oDAAoD;AACpD,MAAM,eAAe,GAAG;IACtB,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,mCAAmC,CAAC;IACzD,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,sCAAsC,CAAC;IAC5D,kCAAkC;IAClC,sCAAsC;CACvC,CAAC;AAEF,qDAAqD;AACrD,IAAI,gBAAgB,GAAkB,IAAI,CAAC;AAC3C,IAAI,iBAAiB,GAAG,KAAK,CAAC;AAE9B;;;GAGG;AACH,SAAS,iBAAiB;IACxB,IAAI,iBAAiB,EAAE,CAAC;QACtB,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAED,KAAK,MAAM,QAAQ,IAAI,eAAe,EAAE,CAAC;QACvC,IAAI,CAAC;YACH,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC5B,gBAAgB,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;gBACtD,OAAO,CAAC,GAAG,CAAC,0CAA0C,QAAQ,EAAE,CAAC,CAAC;gBAClE,iBAAiB,GAAG,IAAI,CAAC;gBACzB,OAAO,gBAAgB,CAAC;YAC1B,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,wBAAwB;QAC1B,CAAC;IACH,CAAC;IAED,OAAO,CAAC,IAAI,CAAC,uFAAuF,CAAC,CAAC;IACtG,iBAAiB,GAAG,IAAI,CAAC;IACzB,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,SAAgB,YAAY;IAC1B,MAAM,MAAM,GAAG,iBAAiB,EAAE,CAAC;IAEnC,IAAI,MAAM,EAAE,CAAC;QACX,OAAO;YACL,kBAAkB,EAAE,IAAI;YACxB,EAAE,EAAE,MAAM;SACX,CAAC;IACJ,CAAC;IAED,2DAA2D;IAC3D,OAAO;QACL,kBAAkB,EAAE,KAAK;KAC1B,CAAC;AACJ,CAAC;AAED;;;GAGG;AACU,QAAA,yBAAyB,GAAW,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC;AAEhF;;;;;GAKG;AACH,SAAgB,cAAc,CAAC,gBAAyB;IACtD,OAAO,IAAI,WAAM,CAAC;QAChB,gBAAgB,EAAE,gBAAgB,IAAI,iCAAyB;QAC/D,GAAG,EAAE,YAAY,EAAE;KACpB,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACI,KAAK,UAAU,uBAAuB,CAAC,gBAAyB;IACrE,MAAM,MAAM,GAAG,cAAc,CAAC,gBAAgB,CAAC,CAAC;IAChD,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;IACvB,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/package.json

@@ -0,0 +1,97 @@
+{
+  "name": "@autonoma-io/a6s",
+  "version": "5.1.2",
+  "description": "A6s — Autonoma's AI development CLI with Natural Language Processing, 28 specialized agents, and a bundled Go daemon serving IDE extensions",
+  "main": "dist/index.js",
+  "bin": {
+    "a6s": "./dist/index.js"
+  },
+  "files": [
+    "dist/",
+    "bin/binaries/",
+    "scripts/chmod-binaries.js",
+    "README.md"
+  ],
+  "engines": {
+    "node": ">=18"
+  },
+  "os": [
+    "darwin",
+    "linux",
+    "win32"
+  ],
+  "cpu": [
+    "x64",
+    "arm64"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/The-Autonoma/a6s.git"
+  },
+  "homepage": "https://www.theautonoma.io",
+  "license": "UNLICENSED",
+  "scripts": {
+    "build": "tsc",
+    "build:go": "bash scripts/build-go-binaries.sh",
+    "build:all": "npm run build && npm run build:go",
+    "dev": "tsx src/index.ts",
+    "test": "jest",
+    "lint": "eslint src/**/*.ts",
+    "package": "pkg . --targets node18-macos-x64,node18-linux-x64 --output bin/a6s",
+    "prepublishOnly": "npm run build:all && node scripts/prepublish-secret-scan.js",
+    "postinstall": "node scripts/chmod-binaries.js"
+  },
+  "dependencies": {
+    "@aws-sdk/client-rds": "^3.600.0",
+    "commander": "^12.0.0",
+    "compromise": "^14.12.0",
+    "dotenv": "^16.4.5",
+    "natural": "^6.10.0",
+    "node-schedule": "^2.1.1"
+  },
+  "devDependencies": {
+    "@aws-sdk/client-backup": "^3.876.0",
+    "@aws-sdk/client-bedrock": "^3.876.0",
+    "@aws-sdk/client-cloudwatch": "^3.876.0",
+    "@aws-sdk/client-cloudwatch-logs": "^3.876.0",
+    "@aws-sdk/client-cognito-identity-provider": "^3.972.0",
+    "@aws-sdk/client-ecr": "^3.876.0",
+    "@aws-sdk/client-ecs": "^3.876.0",
+    "@aws-sdk/client-guardduty": "^3.876.0",
+    "@aws-sdk/client-iam": "^3.876.0",
+    "@aws-sdk/client-lambda": "^3.876.0",
+    "@aws-sdk/client-quicksight": "^3.876.0",
+    "@aws-sdk/client-route-53": "^3.876.0",
+    "@aws-sdk/client-secrets-manager": "^3.972.0",
+    "@aws-sdk/client-ssm": "^3.972.0",
+    "@jest/globals": "^30.1.1",
+    "@sendgrid/mail": "^8.1.5",
+    "@types/inquirer": "^9.0.7",
+    "@types/jest": "^29.5.14",
+    "@types/node": "^20.11.24",
+    "@types/node-schedule": "^2.1.6",
+    "@types/nodemailer": "^7.0.5",
+    "@types/pg": "^8.11.2",
+    "@types/prompts": "^2.4.9",
+    "@types/qrcode": "^1.5.6",
+    "@types/speakeasy": "^2.0.10",
+    "chalk": "^5.6.0",
+    "eslint": "^8.57.0",
+    "inquirer": "^12.9.4",
+    "jest": "^29.7.0",
+    "nodemailer": "^7.0.12",
+    "ora": "^8.2.0",
+    "pg": "^8.16.3",
+    "pkg": "^5.8.1",
+    "prompts": "^2.4.2",
+    "qrcode": "^1.5.4",
+    "speakeasy": "^2.0.0",
+    "table": "^6.9.0",
+    "ts-jest": "^29.4.1",
+    "tsx": "^4.7.1",
+    "typescript": "^5.3.3"
+  }
+}

package/scripts/chmod-binaries.js

@@ -0,0 +1,33 @@
+#!/usr/bin/env node
+// postinstall: ensure the platform-specific Go binary is executable.
+// npm tarballs lose the +x bit on POSIX systems; this restores it on
+// the user's machine. Skip on Windows -- .exe files don't need chmod.
+
+const fs = require('fs');
+const path = require('path');
+
+if (process.platform === 'win32') {
+  // No-op on Windows; .exe is executable by extension.
+  process.exit(0);
+}
+
+const binDir = path.join(__dirname, '..', 'bin', 'binaries');
+const targetName = `a6s-${process.platform}-${process.arch}`;
+const targetPath = path.join(binDir, targetName);
+
+if (!fs.existsSync(targetPath)) {
+  console.warn(
+    `[a6s] No prebuilt binary for ${process.platform}-${process.arch}. ` +
+    `The CLI will still work for non-daemon commands, but \`a6s code --daemon\` will not start. ` +
+    `Please file an issue or build from source.`,
+  );
+  process.exit(0);
+}
+
+try {
+  fs.chmodSync(targetPath, 0o755);
+} catch (err) {
+  // Non-fatal: Linux without execute permissions is rare; the user will
+  // see a clearer error if they actually try to run the daemon.
+  console.warn(`[a6s] Could not chmod ${targetPath}: ${err.message}`);
+}