@de-otio/chaoskb-server 0.2.0

package/dist/lib/admin-handler/routes/metrics.ts

@@ -0,0 +1,234 @@
+import { DynamoDBDocumentClient, ScanCommand } from '@aws-sdk/lib-dynamodb';
+import { CloudWatchClient, DescribeAlarmsCommand } from '@aws-sdk/client-cloudwatch';
+import {
+  CostExplorerClient,
+  GetCostAndUsageCommand,
+  GetCostForecastCommand,
+} from '@aws-sdk/client-cost-explorer';
+import { logger } from '../../handler/logger.js';
+
+interface RouteResult {
+  statusCode: number;
+  body: string;
+  headers: Record<string, string>;
+}
+
+export async function handleUsageMetrics(
+  ddb: DynamoDBDocumentClient,
+  tableName: string,
+  environment: string,
+): Promise<RouteResult> {
+  try {
+    // Total tenants: Scan count where SK='META'
+    let totalTenants = 0;
+    let totalBlobs = 0;
+    let totalStorageBytes = 0;
+    let active7d = 0;
+    let active30d = 0;
+
+    const now = new Date();
+    const sevenDaysAgo = new Date(now.getTime() - 7 * 24 * 60 * 60 * 1000).toISOString();
+    const thirtyDaysAgo = new Date(now.getTime() - 30 * 24 * 60 * 60 * 1000).toISOString();
+
+    // Scan META records for tenant stats
+    let exclusiveStartKey: Record<string, unknown> | undefined;
+    do {
+      const result = await ddb.send(
+        new ScanCommand({
+          TableName: tableName,
+          FilterExpression: 'SK = :sk',
+          ExpressionAttributeValues: { ':sk': 'META' },
+          ProjectionExpression: 'storageUsedBytes, updatedAt',
+          ExclusiveStartKey: exclusiveStartKey,
+        }),
+      );
+
+      if (result.Items) {
+        totalTenants += result.Items.length;
+        for (const item of result.Items) {
+          totalStorageBytes += (item['storageUsedBytes'] as number) ?? 0;
+          const updatedAt = item['updatedAt'] as string | undefined;
+          if (updatedAt && updatedAt >= sevenDaysAgo) active7d++;
+          if (updatedAt && updatedAt >= thirtyDaysAgo) active30d++;
+        }
+      }
+      exclusiveStartKey = result.LastEvaluatedKey;
+    } while (exclusiveStartKey);
+
+    // Scan BLOB records for total blob count
+    let blobStartKey: Record<string, unknown> | undefined;
+    do {
+      const result = await ddb.send(
+        new ScanCommand({
+          TableName: tableName,
+          FilterExpression: 'begins_with(SK, :sk)',
+          ExpressionAttributeValues: { ':sk': 'BLOB#' },
+          Select: 'COUNT',
+          ExclusiveStartKey: blobStartKey,
+        }),
+      );
+
+      totalBlobs += result.Count ?? 0;
+      blobStartKey = result.LastEvaluatedKey;
+    } while (blobStartKey);
+
+    // Mock chart data (would come from CloudWatch in production)
+    const chartData = {
+      dailySyncRequests: Array.from({ length: 7 }, (_, i) => ({
+        date: new Date(now.getTime() - (6 - i) * 24 * 60 * 60 * 1000).toISOString().split('T')[0],
+        count: Math.floor(Math.random() * 100) + 10,
+      })),
+      tenantGrowth: Array.from({ length: 30 }, (_, i) => ({
+        date: new Date(now.getTime() - (29 - i) * 24 * 60 * 60 * 1000).toISOString().split('T')[0],
+        total: totalTenants - (29 - i),
+      })),
+    };
+
+    return {
+      statusCode: 200,
+      body: JSON.stringify({
+        environment,
+        totalTenants,
+        totalBlobs,
+        totalStorageBytes,
+        active7d,
+        active30d,
+        charts: chartData,
+      }),
+      headers: { 'Content-Type': 'application/json' },
+    };
+  } catch (err) {
+    logger.error('Failed to get usage metrics', { error: String(err) });
+    return {
+      statusCode: 500,
+      body: JSON.stringify({ error: 'internal_error', message: 'Failed to get usage metrics' }),
+      headers: { 'Content-Type': 'application/json' },
+    };
+  }
+}
+
+export async function handleHealthMetrics(environment: string): Promise<RouteResult> {
+  try {
+    const cw = new CloudWatchClient({});
+    const alarmsResult = await cw.send(
+      new DescribeAlarmsCommand({
+        AlarmNamePrefix: `chaoskb-${environment}-`,
+      }),
+    );
+
+    const alarms = alarmsResult.MetricAlarms ?? [];
+    const services = alarms.map((alarm) => ({
+      name: alarm.AlarmName ?? 'unknown',
+      status: alarm.StateValue === 'OK' ? 'healthy' : alarm.StateValue === 'ALARM' ? 'unhealthy' : 'unknown',
+      message: alarm.StateReason ?? '',
+    }));
+
+    // If no alarms are configured, report the basic service as healthy
+    if (services.length === 0) {
+      services.push(
+        { name: 'api', status: 'healthy', message: 'No alarms configured' },
+        { name: 'database', status: 'healthy', message: 'No alarms configured' },
+      );
+    }
+
+    return {
+      statusCode: 200,
+      body: JSON.stringify({
+        environment,
+        services,
+        incidents: [],
+      }),
+      headers: { 'Content-Type': 'application/json' },
+    };
+  } catch (err) {
+    logger.error('Failed to get health metrics', { error: String(err) });
+    return {
+      statusCode: 500,
+      body: JSON.stringify({ error: 'internal_error', message: 'Failed to get health metrics' }),
+      headers: { 'Content-Type': 'application/json' },
+    };
+  }
+}
+
+export async function handleCostMetrics(environment: string): Promise<RouteResult> {
+  try {
+    const ce = new CostExplorerClient({ region: 'us-east-1' });
+
+    const now = new Date();
+    const startOfMonth = new Date(now.getFullYear(), now.getMonth(), 1).toISOString().split('T')[0];
+    const today = now.toISOString().split('T')[0];
+    const endOfMonth = new Date(now.getFullYear(), now.getMonth() + 1, 0).toISOString().split('T')[0];
+
+    // MTD spend by service
+    const costResult = await ce.send(
+      new GetCostAndUsageCommand({
+        TimePeriod: { Start: startOfMonth, End: today },
+        Granularity: 'DAILY',
+        Metrics: ['UnblendedCost'],
+        GroupBy: [{ Type: 'DIMENSION', Key: 'SERVICE' }],
+        Filter: {
+          Tags: {
+            Key: 'Project',
+            Values: [`chaoskb-${environment}`],
+          },
+        },
+      }),
+    );
+
+    const monthlySpend = (costResult.ResultsByTime ?? []).map((period) => ({
+      date: period.TimePeriod?.Start ?? '',
+      total: (period.Groups ?? []).reduce((sum, g) => {
+        return sum + parseFloat(g.Metrics?.['UnblendedCost']?.Amount ?? '0');
+      }, 0),
+    }));
+
+    const spendByService: Record<string, number> = {};
+    for (const period of costResult.ResultsByTime ?? []) {
+      for (const group of period.Groups ?? []) {
+        const service = group.Keys?.[0] ?? 'Unknown';
+        const amount = parseFloat(group.Metrics?.['UnblendedCost']?.Amount ?? '0');
+        spendByService[service] = (spendByService[service] ?? 0) + amount;
+      }
+    }
+
+    // Forecast for rest of month
+    let forecast: { forecastedTotal: string; currency: string } | null = null;
+    try {
+      const forecastResult = await ce.send(
+        new GetCostForecastCommand({
+          TimePeriod: { Start: today, End: endOfMonth },
+          Metric: 'UNBLENDED_COST',
+          Granularity: 'MONTHLY',
+        }),
+      );
+      forecast = {
+        forecastedTotal: forecastResult.Total?.Amount ?? '0',
+        currency: forecastResult.Total?.Unit ?? 'USD',
+      };
+    } catch {
+      // Forecast may fail if not enough historical data
+      logger.warn('Cost forecast unavailable');
+    }
+
+    return {
+      statusCode: 200,
+      body: JSON.stringify({
+        environment,
+        monthlySpend,
+        spendByService: Object.entries(spendByService).map(([service, amount]) => ({
+          service,
+          amount: Math.round(amount * 100) / 100,
+        })),
+        forecast,
+      }),
+      headers: { 'Content-Type': 'application/json' },
+    };
+  } catch (err) {
+    logger.error('Failed to get cost metrics', { error: String(err) });
+    return {
+      statusCode: 500,
+      body: JSON.stringify({ error: 'internal_error', message: 'Failed to get cost metrics' }),
+      headers: { 'Content-Type': 'application/json' },
+    };
+  }
+}

package/dist/lib/admin-handler/routes/overview.d.ts

@@ -0,0 +1,9 @@
+import { DynamoDBDocumentClient } from '@aws-sdk/lib-dynamodb';
+interface RouteResult {
+    statusCode: number;
+    body: string;
+    headers: Record<string, string>;
+}
+export declare function handleOverview(ddb: DynamoDBDocumentClient, tableName: string, environment: string): Promise<RouteResult>;
+export {};
+//# sourceMappingURL=overview.d.ts.map

package/dist/lib/admin-handler/routes/overview.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"overview.d.ts","sourceRoot":"","sources":["../../../../lib/admin-handler/routes/overview.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAe,MAAM,uBAAuB,CAAC;AAQ5E,UAAU,WAAW;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACjC;AAED,wBAAsB,cAAc,CAClC,GAAG,EAAE,sBAAsB,EAC3B,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,WAAW,CAAC,CAkHtB"}

package/dist/lib/admin-handler/routes/overview.js

@@ -0,0 +1,110 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.handleOverview = handleOverview;
+const lib_dynamodb_1 = require("@aws-sdk/lib-dynamodb");
+const client_cloudwatch_1 = require("@aws-sdk/client-cloudwatch");
+const client_cost_explorer_1 = require("@aws-sdk/client-cost-explorer");
+const logger_js_1 = require("../../handler/logger.js");
+async function handleOverview(ddb, tableName, environment) {
+    try {
+        // Tenant count, blob count, and storage total from DynamoDB
+        let totalTenants = 0;
+        let totalBlobs = 0;
+        let totalStorageBytes = 0;
+        // Scan META records
+        let exclusiveStartKey;
+        do {
+            const result = await ddb.send(new lib_dynamodb_1.ScanCommand({
+                TableName: tableName,
+                FilterExpression: 'SK = :sk',
+                ExpressionAttributeValues: { ':sk': 'META' },
+                ProjectionExpression: 'storageUsedBytes',
+                ExclusiveStartKey: exclusiveStartKey,
+            }));
+            if (result.Items) {
+                totalTenants += result.Items.length;
+                for (const item of result.Items) {
+                    totalStorageBytes += item['storageUsedBytes'] ?? 0;
+                }
+            }
+            exclusiveStartKey = result.LastEvaluatedKey;
+        } while (exclusiveStartKey);
+        // Scan BLOB records for count
+        let blobStartKey;
+        do {
+            const result = await ddb.send(new lib_dynamodb_1.ScanCommand({
+                TableName: tableName,
+                FilterExpression: 'begins_with(SK, :sk)',
+                ExpressionAttributeValues: { ':sk': 'BLOB#' },
+                Select: 'COUNT',
+                ExclusiveStartKey: blobStartKey,
+            }));
+            totalBlobs += result.Count ?? 0;
+            blobStartKey = result.LastEvaluatedKey;
+        } while (blobStartKey);
+        // Health status from CloudWatch
+        let healthStatus = 'healthy';
+        let alarmCount = 0;
+        try {
+            const cw = new client_cloudwatch_1.CloudWatchClient({});
+            const alarmsResult = await cw.send(new client_cloudwatch_1.DescribeAlarmsCommand({
+                AlarmNamePrefix: `chaoskb-${environment}-`,
+                StateValue: 'ALARM',
+            }));
+            alarmCount = alarmsResult.MetricAlarms?.length ?? 0;
+            if (alarmCount > 0)
+                healthStatus = 'unhealthy';
+        }
+        catch {
+            healthStatus = 'degraded';
+        }
+        // Cost MTD from Cost Explorer
+        let costMtd = 0;
+        try {
+            const ce = new client_cost_explorer_1.CostExplorerClient({ region: 'us-east-1' });
+            const now = new Date();
+            const startOfMonth = new Date(now.getFullYear(), now.getMonth(), 1).toISOString().split('T')[0];
+            const today = now.toISOString().split('T')[0];
+            const costResult = await ce.send(new client_cost_explorer_1.GetCostAndUsageCommand({
+                TimePeriod: { Start: startOfMonth, End: today },
+                Granularity: 'MONTHLY',
+                Metrics: ['UnblendedCost'],
+                Filter: {
+                    Tags: {
+                        Key: 'Project',
+                        Values: [`chaoskb-${environment}`],
+                    },
+                },
+            }));
+            for (const period of costResult.ResultsByTime ?? []) {
+                costMtd += parseFloat(period.Total?.['UnblendedCost']?.Amount ?? '0');
+            }
+        }
+        catch {
+            // Cost data may be unavailable
+            logger_js_1.logger.warn('Cost data unavailable for overview');
+        }
+        return {
+            statusCode: 200,
+            body: JSON.stringify({
+                environment,
+                totalTenants,
+                totalBlobs,
+                totalStorageBytes,
+                healthStatus,
+                activeAlarms: alarmCount,
+                costMtd: Math.round(costMtd * 100) / 100,
+            }),
+            headers: { 'Content-Type': 'application/json' },
+        };
+    }
+    catch (err) {
+        logger_js_1.logger.error('Failed to get overview', { error: String(err) });
+        return {
+            statusCode: 500,
+            body: JSON.stringify({ error: 'internal_error', message: 'Failed to get overview' }),
+            headers: { 'Content-Type': 'application/json' },
+        };
+    }
+}
+//# sourceMappingURL=overview.js.map

package/dist/lib/admin-handler/routes/overview.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"overview.js","sourceRoot":"","sources":["../../../../lib/admin-handler/routes/overview.ts"],"names":[],"mappings":";;AAcA,wCAsHC;AApID,wDAA4E;AAC5E,kEAAqF;AACrF,wEAGuC;AACvC,uDAAiD;AAQ1C,KAAK,UAAU,cAAc,CAClC,GAA2B,EAC3B,SAAiB,EACjB,WAAmB;IAEnB,IAAI,CAAC;QACH,4DAA4D;QAC5D,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,IAAI,iBAAiB,GAAG,CAAC,CAAC;QAE1B,oBAAoB;QACpB,IAAI,iBAAsD,CAAC;QAC3D,GAAG,CAAC;YACF,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,CAC3B,IAAI,0BAAW,CAAC;gBACd,SAAS,EAAE,SAAS;gBACpB,gBAAgB,EAAE,UAAU;gBAC5B,yBAAyB,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE;gBAC5C,oBAAoB,EAAE,kBAAkB;gBACxC,iBAAiB,EAAE,iBAAiB;aACrC,CAAC,CACH,CAAC;YAEF,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;gBACjB,YAAY,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;gBACpC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;oBAChC,iBAAiB,IAAK,IAAI,CAAC,kBAAkB,CAAY,IAAI,CAAC,CAAC;gBACjE,CAAC;YACH,CAAC;YACD,iBAAiB,GAAG,MAAM,CAAC,gBAAgB,CAAC;QAC9C,CAAC,QAAQ,iBAAiB,EAAE;QAE5B,8BAA8B;QAC9B,IAAI,YAAiD,CAAC;QACtD,GAAG,CAAC;YACF,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,CAC3B,IAAI,0BAAW,CAAC;gBACd,SAAS,EAAE,SAAS;gBACpB,gBAAgB,EAAE,sBAAsB;gBACxC,yBAAyB,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE;gBAC7C,MAAM,EAAE,OAAO;gBACf,iBAAiB,EAAE,YAAY;aAChC,CAAC,CACH,CAAC;YAEF,UAAU,IAAI,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC;YAChC,YAAY,GAAG,MAAM,CAAC,gBAAgB,CAAC;QACzC,CAAC,QAAQ,YAAY,EAAE;QAEvB,gCAAgC;QAChC,IAAI,YAAY,GAAyC,SAAS,CAAC;QACnE,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,IAAI,oCAAgB,CAAC,EAAE,CAAC,CAAC;YACpC,MAAM,YAAY,GAAG,MAAM,EAAE,CAAC,IAAI,CAChC,IAAI,yCAAqB,CAAC;gBACxB,eAAe,EAAE,WAAW,WAAW,GAAG;gBAC1C,UAAU,EAAE,OAAO;aACpB,CAAC,CACH,CAAC;YACF,UAAU,GAAG,YAAY,CAAC,YAAY,EAAE,MAAM,IAAI,CAAC,CAAC;YACpD,IAAI,UAAU,GAAG,CAAC;gBAAE,YAAY,GAAG,WAAW,CAAC;QACjD,CAAC;QAAC,MAAM,CAAC;YACP,YAAY,GAAG,UAAU,CAAC;QAC5B,CAAC;QAED,8BAA8B;QAC9B,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,IAAI,yCAAkB,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;YAC3D,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,YAAY,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAChG,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAE9C,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,IAAI,CAC9B,IAAI,6CAAsB,CAAC;gBACzB,UAAU,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,EAAE,KAAK,EAAE;gBAC/C,WAAW,EAAE,SAAS;gBACtB,OAAO,EAAE,CAAC,eAAe,CAAC;gBAC1B,MAAM,EAAE;oBACN,IAAI,EAAE;wBACJ,GAAG,EAAE,SAAS;wBACd,MAAM,EAAE,CAAC,WAAW,WAAW,EAAE,CAAC;qBACnC;iBACF;aACF,CAAC,CACH,CAAC;YAEF,KAAK,MAAM,MAAM,IAAI,UAAU,CAAC,aAAa,IAAI,EAAE,EAAE,CAAC;gBACpD,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,eAAe,CAAC,EAAE,MAAM,IAAI,GAAG,CAAC,CAAC;YACxE,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,+BAA+B;YAC/B,kBAAM,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;QACpD,CAAC;QAED,OAAO;YACL,UAAU,EAAE,GAAG;YACf,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,WAAW;gBACX,YAAY;gBACZ,UAAU;gBACV,iBAAiB;gBACjB,YAAY;gBACZ,YAAY,EAAE,UAAU;gBACxB,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,GAAG,CAAC,GAAG,GAAG;aACzC,CAAC;YACF,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;SAChD,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,kBAAM,CAAC,KAAK,CAAC,wBAAwB,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC/D,OAAO;YACL,UAAU,EAAE,GAAG;YACf,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC;YACpF,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;SAChD,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/lib/admin-handler/routes/overview.ts

@@ -0,0 +1,133 @@
+import { DynamoDBDocumentClient, ScanCommand } from '@aws-sdk/lib-dynamodb';
+import { CloudWatchClient, DescribeAlarmsCommand } from '@aws-sdk/client-cloudwatch';
+import {
+  CostExplorerClient,
+  GetCostAndUsageCommand,
+} from '@aws-sdk/client-cost-explorer';
+import { logger } from '../../handler/logger.js';
+
+interface RouteResult {
+  statusCode: number;
+  body: string;
+  headers: Record<string, string>;
+}
+
+export async function handleOverview(
+  ddb: DynamoDBDocumentClient,
+  tableName: string,
+  environment: string,
+): Promise<RouteResult> {
+  try {
+    // Tenant count, blob count, and storage total from DynamoDB
+    let totalTenants = 0;
+    let totalBlobs = 0;
+    let totalStorageBytes = 0;
+
+    // Scan META records
+    let exclusiveStartKey: Record<string, unknown> | undefined;
+    do {
+      const result = await ddb.send(
+        new ScanCommand({
+          TableName: tableName,
+          FilterExpression: 'SK = :sk',
+          ExpressionAttributeValues: { ':sk': 'META' },
+          ProjectionExpression: 'storageUsedBytes',
+          ExclusiveStartKey: exclusiveStartKey,
+        }),
+      );
+
+      if (result.Items) {
+        totalTenants += result.Items.length;
+        for (const item of result.Items) {
+          totalStorageBytes += (item['storageUsedBytes'] as number) ?? 0;
+        }
+      }
+      exclusiveStartKey = result.LastEvaluatedKey;
+    } while (exclusiveStartKey);
+
+    // Scan BLOB records for count
+    let blobStartKey: Record<string, unknown> | undefined;
+    do {
+      const result = await ddb.send(
+        new ScanCommand({
+          TableName: tableName,
+          FilterExpression: 'begins_with(SK, :sk)',
+          ExpressionAttributeValues: { ':sk': 'BLOB#' },
+          Select: 'COUNT',
+          ExclusiveStartKey: blobStartKey,
+        }),
+      );
+
+      totalBlobs += result.Count ?? 0;
+      blobStartKey = result.LastEvaluatedKey;
+    } while (blobStartKey);
+
+    // Health status from CloudWatch
+    let healthStatus: 'healthy' | 'degraded' | 'unhealthy' = 'healthy';
+    let alarmCount = 0;
+    try {
+      const cw = new CloudWatchClient({});
+      const alarmsResult = await cw.send(
+        new DescribeAlarmsCommand({
+          AlarmNamePrefix: `chaoskb-${environment}-`,
+          StateValue: 'ALARM',
+        }),
+      );
+      alarmCount = alarmsResult.MetricAlarms?.length ?? 0;
+      if (alarmCount > 0) healthStatus = 'unhealthy';
+    } catch {
+      healthStatus = 'degraded';
+    }
+
+    // Cost MTD from Cost Explorer
+    let costMtd = 0;
+    try {
+      const ce = new CostExplorerClient({ region: 'us-east-1' });
+      const now = new Date();
+      const startOfMonth = new Date(now.getFullYear(), now.getMonth(), 1).toISOString().split('T')[0];
+      const today = now.toISOString().split('T')[0];
+
+      const costResult = await ce.send(
+        new GetCostAndUsageCommand({
+          TimePeriod: { Start: startOfMonth, End: today },
+          Granularity: 'MONTHLY',
+          Metrics: ['UnblendedCost'],
+          Filter: {
+            Tags: {
+              Key: 'Project',
+              Values: [`chaoskb-${environment}`],
+            },
+          },
+        }),
+      );
+
+      for (const period of costResult.ResultsByTime ?? []) {
+        costMtd += parseFloat(period.Total?.['UnblendedCost']?.Amount ?? '0');
+      }
+    } catch {
+      // Cost data may be unavailable
+      logger.warn('Cost data unavailable for overview');
+    }
+
+    return {
+      statusCode: 200,
+      body: JSON.stringify({
+        environment,
+        totalTenants,
+        totalBlobs,
+        totalStorageBytes,
+        healthStatus,
+        activeAlarms: alarmCount,
+        costMtd: Math.round(costMtd * 100) / 100,
+      }),
+      headers: { 'Content-Type': 'application/json' },
+    };
+  } catch (err) {
+    logger.error('Failed to get overview', { error: String(err) });
+    return {
+      statusCode: 500,
+      body: JSON.stringify({ error: 'internal_error', message: 'Failed to get overview' }),
+      headers: { 'Content-Type': 'application/json' },
+    };
+  }
+}

package/dist/lib/admin-handler/routes/tenants.d.ts

@@ -0,0 +1,10 @@
+import { DynamoDBDocumentClient } from '@aws-sdk/lib-dynamodb';
+interface RouteResult {
+    statusCode: number;
+    body: string;
+    headers: Record<string, string>;
+}
+export declare function handleListTenants(page: number, ddb: DynamoDBDocumentClient, tableName: string): Promise<RouteResult>;
+export declare function handleGetTenantDetail(tenantId: string, ddb: DynamoDBDocumentClient, tableName: string): Promise<RouteResult>;
+export {};
+//# sourceMappingURL=tenants.d.ts.map

package/dist/lib/admin-handler/routes/tenants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenants.d.ts","sourceRoot":"","sources":["../../../../lib/admin-handler/routes/tenants.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAA6B,MAAM,uBAAuB,CAAC;AAG1F,UAAU,WAAW;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACjC;AAID,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,sBAAsB,EAC3B,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,WAAW,CAAC,CAqDtB;AAED,wBAAsB,qBAAqB,CACzC,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE,sBAAsB,EAC3B,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,WAAW,CAAC,CA2DtB"}

package/dist/lib/admin-handler/routes/tenants.js

@@ -0,0 +1,108 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.handleListTenants = handleListTenants;
+exports.handleGetTenantDetail = handleGetTenantDetail;
+const lib_dynamodb_1 = require("@aws-sdk/lib-dynamodb");
+const logger_js_1 = require("../../handler/logger.js");
+const PAGE_SIZE = 25;
+async function handleListTenants(page, ddb, tableName) {
+    try {
+        const validPage = Math.max(1, page);
+        // Scan for all META records to get tenant list
+        const allTenants = [];
+        let exclusiveStartKey;
+        do {
+            const result = await ddb.send(new lib_dynamodb_1.ScanCommand({
+                TableName: tableName,
+                FilterExpression: 'SK = :sk',
+                ExpressionAttributeValues: { ':sk': 'META' },
+                ProjectionExpression: 'PK, publicKey, createdAt, updatedAt, storageUsedBytes',
+                ExclusiveStartKey: exclusiveStartKey,
+            }));
+            if (result.Items) {
+                allTenants.push(...result.Items);
+            }
+            exclusiveStartKey = result.LastEvaluatedKey;
+        } while (exclusiveStartKey);
+        const total = allTenants.length;
+        const startIndex = (validPage - 1) * PAGE_SIZE;
+        const paginatedTenants = allTenants.slice(startIndex, startIndex + PAGE_SIZE).map((item) => ({
+            tenantId: item['PK'].replace('TENANT#', ''),
+            publicKey: item['publicKey'],
+            createdAt: item['createdAt'],
+            updatedAt: item['updatedAt'],
+            storageUsedBytes: item['storageUsedBytes'] ?? 0,
+        }));
+        return {
+            statusCode: 200,
+            body: JSON.stringify({
+                tenants: paginatedTenants,
+                total,
+                page: validPage,
+                pageSize: PAGE_SIZE,
+            }),
+            headers: { 'Content-Type': 'application/json' },
+        };
+    }
+    catch (err) {
+        logger_js_1.logger.error('Failed to list tenants', { error: String(err) });
+        return {
+            statusCode: 500,
+            body: JSON.stringify({ error: 'internal_error', message: 'Failed to list tenants' }),
+            headers: { 'Content-Type': 'application/json' },
+        };
+    }
+}
+async function handleGetTenantDetail(tenantId, ddb, tableName) {
+    try {
+        // Query for the META record
+        const metaResult = await ddb.send(new lib_dynamodb_1.QueryCommand({
+            TableName: tableName,
+            KeyConditionExpression: 'PK = :pk AND SK = :sk',
+            ExpressionAttributeValues: {
+                ':pk': `TENANT#${tenantId}`,
+                ':sk': 'META',
+            },
+        }));
+        if (!metaResult.Items || metaResult.Items.length === 0) {
+            return {
+                statusCode: 404,
+                body: JSON.stringify({ error: 'not_found', message: 'Tenant not found' }),
+                headers: { 'Content-Type': 'application/json' },
+            };
+        }
+        const meta = metaResult.Items[0];
+        // Count blobs for this tenant
+        const blobResult = await ddb.send(new lib_dynamodb_1.QueryCommand({
+            TableName: tableName,
+            KeyConditionExpression: 'PK = :pk AND begins_with(SK, :sk)',
+            ExpressionAttributeValues: {
+                ':pk': `TENANT#${tenantId}`,
+                ':sk': 'BLOB#',
+            },
+            Select: 'COUNT',
+        }));
+        const blobCount = blobResult.Count ?? 0;
+        return {
+            statusCode: 200,
+            body: JSON.stringify({
+                tenantId,
+                publicKey: meta['publicKey'],
+                createdAt: meta['createdAt'],
+                updatedAt: meta['updatedAt'],
+                storageUsedBytes: meta['storageUsedBytes'] ?? 0,
+                blobCount,
+            }),
+            headers: { 'Content-Type': 'application/json' },
+        };
+    }
+    catch (err) {
+        logger_js_1.logger.error('Failed to get tenant detail', { error: String(err) });
+        return {
+            statusCode: 500,
+            body: JSON.stringify({ error: 'internal_error', message: 'Failed to get tenant detail' }),
+            headers: { 'Content-Type': 'application/json' },
+        };
+    }
+}
+//# sourceMappingURL=tenants.js.map

package/dist/lib/admin-handler/routes/tenants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenants.js","sourceRoot":"","sources":["../../../../lib/admin-handler/routes/tenants.ts"],"names":[],"mappings":";;AAWA,8CAyDC;AAED,sDA+DC;AArID,wDAA0F;AAC1F,uDAAiD;AAQjD,MAAM,SAAS,GAAG,EAAE,CAAC;AAEd,KAAK,UAAU,iBAAiB,CACrC,IAAY,EACZ,GAA2B,EAC3B,SAAiB;IAEjB,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QAEpC,+CAA+C;QAC/C,MAAM,UAAU,GAA8B,EAAE,CAAC;QACjD,IAAI,iBAAsD,CAAC;QAE3D,GAAG,CAAC;YACF,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,CAC3B,IAAI,0BAAW,CAAC;gBACd,SAAS,EAAE,SAAS;gBACpB,gBAAgB,EAAE,UAAU;gBAC5B,yBAAyB,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE;gBAC5C,oBAAoB,EAAE,uDAAuD;gBAC7E,iBAAiB,EAAE,iBAAiB;aACrC,CAAC,CACH,CAAC;YAEF,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;gBACjB,UAAU,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YACnC,CAAC;YACD,iBAAiB,GAAG,MAAM,CAAC,gBAAgB,CAAC;QAC9C,CAAC,QAAQ,iBAAiB,EAAE;QAE5B,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC;QAChC,MAAM,UAAU,GAAG,CAAC,SAAS,GAAG,CAAC,CAAC,GAAG,SAAS,CAAC;QAC/C,MAAM,gBAAgB,GAAG,UAAU,CAAC,KAAK,CAAC,UAAU,EAAE,UAAU,GAAG,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC3F,QAAQ,EAAG,IAAI,CAAC,IAAI,CAAY,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;YACvD,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC;YAC5B,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC;YAC5B,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC;YAC5B,gBAAgB,EAAE,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC;SAChD,CAAC,CAAC,CAAC;QAEJ,OAAO;YACL,UAAU,EAAE,GAAG;YACf,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,OAAO,EAAE,gBAAgB;gBACzB,KAAK;gBACL,IAAI,EAAE,SAAS;gBACf,QAAQ,EAAE,SAAS;aACpB,CAAC;YACF,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;SAChD,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,kBAAM,CAAC,KAAK,CAAC,wBAAwB,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC/D,OAAO;YACL,UAAU,EAAE,GAAG;YACf,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC;YACpF,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;SAChD,CAAC;IACJ,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,qBAAqB,CACzC,QAAgB,EAChB,GAA2B,EAC3B,SAAiB;IAEjB,IAAI,CAAC;QACH,4BAA4B;QAC5B,MAAM,UAAU,GAAG,MAAM,GAAG,CAAC,IAAI,CAC/B,IAAI,2BAAY,CAAC;YACf,SAAS,EAAE,SAAS;YACpB,sBAAsB,EAAE,uBAAuB;YAC/C,yBAAyB,EAAE;gBACzB,KAAK,EAAE,UAAU,QAAQ,EAAE;gBAC3B,KAAK,EAAE,MAAM;aACd;SACF,CAAC,CACH,CAAC;QAEF,IAAI,CAAC,UAAU,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvD,OAAO;gBACL,UAAU,EAAE,GAAG;gBACf,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC;gBACzE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;aAChD,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAEjC,8BAA8B;QAC9B,MAAM,UAAU,GAAG,MAAM,GAAG,CAAC,IAAI,CAC/B,IAAI,2BAAY,CAAC;YACf,SAAS,EAAE,SAAS;YACpB,sBAAsB,EAAE,mCAAmC;YAC3D,yBAAyB,EAAE;gBACzB,KAAK,EAAE,UAAU,QAAQ,EAAE;gBAC3B,KAAK,EAAE,OAAO;aACf;YACD,MAAM,EAAE,OAAO;SAChB,CAAC,CACH,CAAC;QAEF,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,IAAI,CAAC,CAAC;QAExC,OAAO;YACL,UAAU,EAAE,GAAG;YACf,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,QAAQ;gBACR,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC;gBAC5B,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC;gBAC5B,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC;gBAC5B,gBAAgB,EAAE,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC;gBAC/C,SAAS;aACV,CAAC;YACF,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;SAChD,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,kBAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpE,OAAO;YACL,UAAU,EAAE,GAAG;YACf,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,OAAO,EAAE,6BAA6B,EAAE,CAAC;YACzF,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;SAChD,CAAC;IACJ,CAAC;AACH,CAAC"}