@build-astron-co/nimbus 0.2.0

package/src/types/ambient.d.ts

@@ -0,0 +1,193 @@
+/**
+ * Ambient module declarations for optional cloud-provider SDKs and
+ * third-party libraries that are dynamically imported at runtime.
+ *
+ * These declarations prevent TS2307 "Cannot find module" errors when
+ * the packages are not installed as direct dependencies (they are
+ * loaded lazily only when the corresponding cloud provider is invoked).
+ */
+
+// ---------------------------------------------------------------------------
+// AWS SDK v3 clients
+// ---------------------------------------------------------------------------
+
+declare module '@aws-sdk/client-ec2' {
+  export class EC2Client { constructor(config?: any); send(command: any): Promise<any>; }
+  export class DescribeInstancesCommand { constructor(input?: any); }
+  export class DescribeVpcsCommand { constructor(input?: any); }
+  export class DescribeSubnetsCommand { constructor(input?: any); }
+  export class DescribeSecurityGroupsCommand { constructor(input?: any); }
+  export class DescribeVolumesCommand { constructor(input?: any); }
+  export class DescribeImagesCommand { constructor(input?: any); }
+  export class DescribeRegionsCommand { constructor(input?: any); }
+  export class DescribeAvailabilityZonesCommand { constructor(input?: any); }
+  export class DescribeRouteTablesCommand { constructor(input?: any); }
+  export class DescribeNetworkInterfacesCommand { constructor(input?: any); }
+  export class RunInstancesCommand { constructor(input?: any); }
+  export class StopInstancesCommand { constructor(input?: any); }
+  export class StartInstancesCommand { constructor(input?: any); }
+  export class TerminateInstancesCommand { constructor(input?: any); }
+  export class CreateVpcCommand { constructor(input?: any); }
+  export class CreateSubnetCommand { constructor(input?: any); }
+  export class CreateSecurityGroupCommand { constructor(input?: any); }
+  export class AuthorizeSecurityGroupIngressCommand { constructor(input?: any); }
+  export class RebootInstancesCommand { constructor(input?: any); }
+  export class DescribeInstanceStatusCommand { constructor(input?: any); }
+}
+
+declare module '@aws-sdk/client-s3' {
+  export class S3Client { constructor(config?: any); send(command: any): Promise<any>; }
+  export class ListBucketsCommand { constructor(input?: any); }
+  export class ListObjectsV2Command { constructor(input?: any); }
+  export class GetObjectCommand { constructor(input?: any); }
+  export class PutObjectCommand { constructor(input?: any); }
+  export class DeleteObjectCommand { constructor(input?: any); }
+  export class CreateBucketCommand { constructor(input?: any); }
+  export class DeleteBucketCommand { constructor(input?: any); }
+  export class GetBucketPolicyCommand { constructor(input?: any); }
+  export class PutBucketPolicyCommand { constructor(input?: any); }
+}
+
+declare module '@aws-sdk/client-iam' {
+  export class IAMClient { constructor(config?: any); send(command: any): Promise<any>; }
+  export class ListUsersCommand { constructor(input?: any); }
+  export class ListRolesCommand { constructor(input?: any); }
+  export class ListPoliciesCommand { constructor(input?: any); }
+  export class ListGroupsCommand { constructor(input?: any); }
+  export class GetUserCommand { constructor(input?: any); }
+  export class GetRoleCommand { constructor(input?: any); }
+  export class CreateUserCommand { constructor(input?: any); }
+  export class CreateRoleCommand { constructor(input?: any); }
+  export class AttachRolePolicyCommand { constructor(input?: any); }
+  export class AttachUserPolicyCommand { constructor(input?: any); }
+  export class DetachRolePolicyCommand { constructor(input?: any); }
+}
+
+// ---------------------------------------------------------------------------
+// Azure SDK
+// ---------------------------------------------------------------------------
+
+declare module '@azure/identity' {
+  export class DefaultAzureCredential { constructor(options?: any); }
+}
+
+declare module '@azure/arm-compute' {
+  export class ComputeManagementClient {
+    constructor(credential: any, subscriptionId: string);
+    virtualMachines: any;
+    disks: any;
+    images: any;
+  }
+}
+
+declare module '@azure/arm-storage' {
+  export class StorageManagementClient {
+    constructor(credential: any, subscriptionId: string);
+    storageAccounts: any;
+    blobContainers: any;
+  }
+}
+
+declare module '@azure/arm-containerservice' {
+  export class ContainerServiceClient {
+    constructor(credential: any, subscriptionId: string);
+    managedClusters: any;
+    agentPools: any;
+  }
+}
+
+declare module '@azure/arm-network' {
+  export class NetworkManagementClient {
+    constructor(credential: any, subscriptionId: string);
+    virtualNetworks: any;
+    subnets: any;
+    networkSecurityGroups: any;
+    publicIPAddresses: any;
+    loadBalancers: any;
+  }
+}
+
+// ---------------------------------------------------------------------------
+// Google Cloud SDK
+// ---------------------------------------------------------------------------
+
+declare module 'google-auth-library' {
+  export class GoogleAuth {
+    constructor(options?: any);
+    getClient(): Promise<any>;
+  }
+}
+
+declare module '@google-cloud/compute' {
+  export class InstancesClient {
+    constructor(options?: any);
+    list(request?: any): any;
+    get(request?: any): any;
+    start(request?: any): any;
+    stop(request?: any): any;
+    aggregatedListAsync(request?: any): AsyncIterable<any>;
+  }
+  export class ZonesClient { constructor(options?: any); list(request?: any): any; }
+  export class ZoneOperationsClient { constructor(options?: any); wait(request?: any): any; }
+  export class RegionsClient { constructor(options?: any); list(request?: any): any; }
+  export class NetworksClient { constructor(options?: any); list(request?: any): any; get(request?: any): any; }
+  export class SubnetworksClient {
+    constructor(options?: any);
+    list(request?: any): any;
+    aggregatedListAsync(request?: any): AsyncIterable<any>;
+  }
+  export class FirewallsClient { constructor(options?: any); list(request?: any): any; }
+  export class DisksClient { constructor(options?: any); list(request?: any): any; }
+}
+
+declare module '@google-cloud/storage' {
+  export class Storage {
+    constructor(options?: any);
+    getBuckets(options?: any): Promise<any>;
+    bucket(name: string): any;
+  }
+}
+
+declare module '@google-cloud/container' {
+  export class ClusterManagerClient {
+    constructor(options?: any);
+    listClusters(request?: any): Promise<any>;
+    getCluster(request?: any): Promise<any>;
+    listNodePools(request?: any): Promise<any>;
+  }
+}
+
+declare module '@google-cloud/iam' {
+  export class IAMClient {
+    constructor(options?: any);
+    listServiceAccounts(request?: any): Promise<any>;
+    getIamPolicy(request?: any): Promise<any>;
+  }
+}
+
+// ---------------------------------------------------------------------------
+// GitHub
+// ---------------------------------------------------------------------------
+
+declare module '@octokit/rest' {
+  export class Octokit {
+    constructor(options?: any);
+    repos: any;
+    issues: any;
+    pulls: any;
+    actions: any;
+    git: any;
+    search: any;
+    users: any;
+  }
+}
+
+// ---------------------------------------------------------------------------
+// YAML
+// ---------------------------------------------------------------------------
+
+declare module 'js-yaml' {
+  export function load(str: string, opts?: any): any;
+  export function dump(obj: any, opts?: any): string;
+  export function loadAll(str: string, iterator?: (doc: any) => void, opts?: any): any[];
+}

package/src/types/config.ts

@@ -0,0 +1,83 @@
+/**
+ * Nimbus Configuration
+ */
+export interface NimbusConfig {
+  version: number;
+  telemetry: boolean;
+  llm: LLMConfig;
+  persona: PersonaConfig;
+  safety: SafetyConfig;
+  cloud: CloudConfig;
+  terraform: TerraformConfig;
+  kubernetes: KubernetesConfig;
+  ui: UIConfig;
+}
+
+export interface LLMConfig {
+  defaultProvider: string;
+  defaultModel: string;
+  providers: Record<string, LLMProviderConfig>;
+  costOptimization?: CostOptimizationConfig;
+}
+
+export interface LLMProviderConfig {
+  apiKey?: string;
+  baseUrl?: string;
+  models: string[];
+}
+
+export interface CostOptimizationConfig {
+  enabled: boolean;
+  useCheapModelFor?: string[];
+  useExpensiveModelFor?: string[];
+}
+
+export interface PersonaConfig {
+  mode: 'professional' | 'assistant' | 'expert';
+  verbosity: 'minimal' | 'normal' | 'detailed';
+}
+
+export interface SafetyConfig {
+  dryRun: boolean;
+  requireConfirmation: boolean;
+  autoApprove: Record<string, boolean>;
+}
+
+export interface CloudConfig {
+  defaultProvider: string;
+  aws?: AWSConfig;
+  gcp?: GCPConfig;
+  azure?: AzureConfig;
+}
+
+export interface AWSConfig {
+  defaultRegion: string;
+  defaultProfile: string;
+}
+
+export interface GCPConfig {
+  defaultProject: string;
+  defaultRegion: string;
+}
+
+export interface AzureConfig {
+  defaultSubscription: string;
+  defaultRegion: string;
+}
+
+export interface TerraformConfig {
+  defaultBackend: string;
+  stateBucket?: string;
+  lockTable?: string;
+}
+
+export interface KubernetesConfig {
+  defaultContext: string;
+  defaultNamespace: string;
+}
+
+export interface UIConfig {
+  theme: 'light' | 'dark';
+  colors: boolean;
+  spinner: string;
+}

package/src/types/drift.ts

@@ -0,0 +1,116 @@
+/**
+ * Drift Detection and Remediation Types
+ */
+
+// ==========================================
+// Provider Types
+// ==========================================
+
+export type DriftProvider = 'terraform' | 'kubernetes' | 'helm';
+
+// ==========================================
+// Drift Detection Types
+// ==========================================
+
+export interface DriftChange {
+  attribute: string;
+  expected: unknown;
+  actual: unknown;
+}
+
+export interface ResourceDrift {
+  resourceId: string;
+  resourceType: string;
+  name?: string;
+  driftType: 'added' | 'removed' | 'modified';
+  severity: 'critical' | 'high' | 'medium' | 'low';
+  changes: DriftChange[];
+  metadata?: Record<string, unknown>;
+}
+
+export interface DriftSummary {
+  total: number;
+  added: number;
+  removed: number;
+  modified: number;
+  bySeverity: Record<string, number>;
+}
+
+export interface DriftReport {
+  provider: DriftProvider;
+  directory: string;
+  detectedAt: string;
+  hasDrift: boolean;
+  summary: DriftSummary;
+  resources: ResourceDrift[];
+  metadata?: Record<string, unknown>;
+}
+
+// ==========================================
+// Remediation Types
+// ==========================================
+
+export type RemediationActionType = 'apply' | 'destroy' | 'import' | 'refresh' | 'manual';
+export type RemediationActionStatus = 'pending' | 'applied' | 'failed' | 'skipped';
+
+export interface RemediationAction {
+  id: string;
+  type: RemediationActionType;
+  resourceId: string;
+  description: string;
+  command?: string;
+  status: RemediationActionStatus;
+  error?: string;
+  startedAt?: string;
+  completedAt?: string;
+}
+
+export interface DriftRemediationOptions {
+  dryRun?: boolean;
+  autoApprove?: boolean;
+  excludeResources?: string[];
+  onlyResources?: string[];
+  force?: boolean;
+}
+
+export interface DriftRemediationResult {
+  success: boolean;
+  appliedCount: number;
+  failedCount: number;
+  skippedCount: number;
+  actions: RemediationAction[];
+  report?: string;
+  errors?: string[];
+}
+
+// ==========================================
+// Compliance Types
+// ==========================================
+
+export type ComplianceStandard = 'soc2' | 'hipaa' | 'pci' | 'gdpr' | 'cis';
+
+export interface ComplianceRule {
+  id: string;
+  standard: ComplianceStandard;
+  title: string;
+  description: string;
+  severity: 'critical' | 'high' | 'medium' | 'low';
+}
+
+export interface ComplianceViolation {
+  rule: ComplianceRule;
+  resourceId: string;
+  resourceType: string;
+  details: string;
+  remediation?: string;
+}
+
+export interface ComplianceReport {
+  standard: ComplianceStandard;
+  generatedAt: string;
+  score: number;
+  maxScore: number;
+  violations: ComplianceViolation[];
+  passed: number;
+  failed: number;
+}