@dotsetlabs/bellwether 0.10.0

package/dist/cloud/http-client.js

@@ -0,0 +1,215 @@
+/**
+ * HTTP cloud client for production API.
+ *
+ * Makes real HTTP requests to the Bellwether Cloud API.
+ * Handles automatic session token rotation when the server returns
+ * a new token via the X-Rotated-Session-Token header.
+ */
+import { updateSessionToken } from './auth.js';
+import { isLocalhost } from '../utils/index.js';
+/**
+ * Header name for receiving rotated session token from server.
+ */
+const ROTATED_TOKEN_HEADER = 'x-rotated-session-token';
+/**
+ * Validate that a URL uses HTTPS in production.
+ * Allows HTTP only for localhost/127.0.0.1 for local development.
+ */
+function validateSecureUrl(url) {
+    const parsed = new URL(url);
+    // Allow HTTP for local development
+    if (parsed.protocol !== 'https:' && !isLocalhost(parsed.hostname)) {
+        throw new Error(`Insecure URL rejected: ${url}. ` +
+            'Cloud API must use HTTPS for security. ' +
+            'HTTP is only allowed for localhost.');
+    }
+}
+/**
+ * HTTP cloud client implementation.
+ */
+export class HttpCloudClient {
+    baseUrl;
+    sessionToken;
+    teamId;
+    timeout;
+    constructor(baseUrl, sessionToken, timeout = 30000, teamId) {
+        // Validate HTTPS requirement
+        validateSecureUrl(baseUrl);
+        // Remove trailing slash
+        this.baseUrl = baseUrl.replace(/\/$/, '');
+        this.sessionToken = sessionToken;
+        this.teamId = teamId;
+        this.timeout = timeout;
+    }
+    /**
+     * Make an authenticated request.
+     * Handles automatic session token rotation when the server returns
+     * a new token via the X-Rotated-Session-Token header.
+     */
+    async request(method, path, body) {
+        const url = `${this.baseUrl}${path}`;
+        const controller = new AbortController();
+        const timeoutId = setTimeout(() => controller.abort(), this.timeout);
+        // Build headers, including X-Team-Id if available
+        const headers = {
+            'Authorization': `Bearer ${this.sessionToken}`,
+            'Content-Type': 'application/json',
+            'Accept': 'application/json',
+        };
+        if (this.teamId) {
+            headers['X-Team-Id'] = this.teamId;
+        }
+        try {
+            const response = await fetch(url, {
+                method,
+                headers,
+                body: body ? JSON.stringify(body) : undefined,
+                signal: controller.signal,
+            });
+            clearTimeout(timeoutId);
+            // Check for rotated session token
+            const rotatedToken = response.headers.get(ROTATED_TOKEN_HEADER);
+            if (rotatedToken) {
+                // Update stored session with new token (non-blocking)
+                updateSessionToken(rotatedToken).catch(() => {
+                    // Silently ignore errors - rotation is best-effort
+                    // The old token will still work during grace period
+                });
+                // Update this client's token for subsequent requests
+                this.sessionToken = rotatedToken;
+            }
+            if (!response.ok) {
+                let errorData;
+                try {
+                    errorData = await response.json();
+                }
+                catch {
+                    errorData = {
+                        error: 'unknown',
+                        message: `HTTP ${response.status}: ${response.statusText}`,
+                    };
+                }
+                throw new Error(errorData.message);
+            }
+            return response.json();
+        }
+        catch (error) {
+            clearTimeout(timeoutId);
+            if (error instanceof Error && error.name === 'AbortError') {
+                throw new Error(`Request timeout after ${this.timeout}ms`);
+            }
+            throw error;
+        }
+    }
+    // ============================================================================
+    // BellwetherCloudClient Implementation
+    // ============================================================================
+    isAuthenticated() {
+        return !!this.sessionToken;
+    }
+    async whoami() {
+        if (!this.sessionToken) {
+            return null;
+        }
+        try {
+            const response = await this.request('GET', '/auth/me');
+            return response.user;
+        }
+        catch {
+            return null;
+        }
+    }
+    async listProjects() {
+        const response = await this.request('GET', '/projects');
+        return response.projects;
+    }
+    async createProject(name, serverCommand) {
+        const response = await this.request('POST', '/projects', {
+            name,
+            serverCommand,
+        });
+        return response.project;
+    }
+    async getProject(projectId) {
+        try {
+            const response = await this.request('GET', `/projects/${projectId}`);
+            return response.project;
+        }
+        catch {
+            return null;
+        }
+    }
+    async deleteProject(projectId) {
+        await this.request('DELETE', `/projects/${projectId}`);
+    }
+    async uploadBaseline(projectId, baseline) {
+        const response = await this.request('POST', `/projects/${projectId}/baselines`, baseline);
+        return {
+            baselineId: response.baseline.id,
+            version: response.baseline.version,
+            projectId,
+            viewUrl: `${this.baseUrl}/baselines/${response.baseline.id}`,
+            diffUrl: response.diff
+                ? `${this.baseUrl}/projects/${projectId}/diff/${response.baseline.version - 1}/${response.baseline.version}`
+                : undefined,
+        };
+    }
+    async getHistory(projectId, limit = 10) {
+        const response = await this.request('GET', `/projects/${projectId}/baselines?limit=${limit}`);
+        return response.baselines;
+    }
+    async getBaseline(baselineId) {
+        try {
+            const response = await this.request('GET', `/baselines/${baselineId}/download`);
+            return response;
+        }
+        catch {
+            return null;
+        }
+    }
+    async getDiff(projectId, fromVersion, toVersion) {
+        const response = await this.request('GET', `/projects/${projectId}/diff/${fromVersion}/${toVersion}`);
+        return response.diff.summary;
+    }
+    async getLatestDiff(projectId) {
+        try {
+            const response = await this.request('GET', `/projects/${projectId}/latest-diff`);
+            return response.diff?.summary ?? null;
+        }
+        catch {
+            return null;
+        }
+    }
+    async getBadgeInfo(projectId) {
+        try {
+            const response = await this.request('GET', `/projects/${projectId}/badge`);
+            return response.badge;
+        }
+        catch {
+            return null;
+        }
+    }
+    async submitVerification(projectId, result, report) {
+        const response = await this.request('POST', `/projects/${projectId}/verifications`, {
+            serverId: result.serverId,
+            version: result.version,
+            status: result.status,
+            tier: result.tier ?? null,
+            verifiedAt: result.verifiedAt,
+            expiresAt: result.expiresAt,
+            toolsVerified: result.toolsVerified,
+            testsPassed: result.testsPassed,
+            testsTotal: result.testsTotal,
+            passRate: result.passRate,
+            reportHash: result.reportHash,
+            bellwetherVersion: result.bellwetherVersion,
+            report: report ?? null,
+        });
+        return {
+            verificationId: response.verification.id,
+            projectId,
+            viewUrl: `${this.baseUrl.replace('/api', '')}/projects/${projectId}/verification`,
+        };
+    }
+}
+//# sourceMappingURL=http-client.js.map

package/dist/cloud/index.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Cloud integration module for Bellwether.
+ *
+ * Provides functionality for:
+ * - Authentication with Bellwether Cloud
+ * - Project and baseline management
+ * - Uploading and comparing baselines
+ *
+ * @example
+ * ```typescript
+ * import { createCloudClient, getToken, isAuthenticated } from './cloud/index.js';
+ *
+ * if (isAuthenticated()) {
+ *   const client = createCloudClient();
+ *   const projects = await client.listProjects();
+ * }
+ * ```
+ */
+export type { BellwetherCloudClient, CloudConfig, CloudUser, Project, BaselineVersion, UploadResult, DiffSummary, BellwetherBaseline, BaselineMetadata, CloudServerFingerprint, ToolCapability, ResourceCapability, PromptCapability, PersonaInterview, PersonaFinding, CloudToolProfile, ProjectLink, StoredSession, } from './types.js';
+export { createCloudClient, createCloudClientWithSession } from './client.js';
+export { getSessionToken, getStoredSession, saveSession, clearSession, getBaseUrl, isAuthenticated, isValidSessionFormat, isMockSession, getLinkedProject, saveProjectLink, removeProjectLink, isLinked, CONFIG_DIR, SESSION_FILE, SESSION_ENV_VAR, BASE_URL_ENV_VAR, SESSION_PREFIX, MOCK_SESSION_PREFIX, } from './auth.js';
+export { MockCloudClient, generateMockSession, getMockDataDir, clearMockData, } from './mock-client.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/cloud/index.js

@@ -0,0 +1,25 @@
+/**
+ * Cloud integration module for Bellwether.
+ *
+ * Provides functionality for:
+ * - Authentication with Bellwether Cloud
+ * - Project and baseline management
+ * - Uploading and comparing baselines
+ *
+ * @example
+ * ```typescript
+ * import { createCloudClient, getToken, isAuthenticated } from './cloud/index.js';
+ *
+ * if (isAuthenticated()) {
+ *   const client = createCloudClient();
+ *   const projects = await client.listProjects();
+ * }
+ * ```
+ */
+// Client factory
+export { createCloudClient, createCloudClientWithSession } from './client.js';
+// Authentication
+export { getSessionToken, getStoredSession, saveSession, clearSession, getBaseUrl, isAuthenticated, isValidSessionFormat, isMockSession, getLinkedProject, saveProjectLink, removeProjectLink, isLinked, CONFIG_DIR, SESSION_FILE, SESSION_ENV_VAR, BASE_URL_ENV_VAR, SESSION_PREFIX, MOCK_SESSION_PREFIX, } from './auth.js';
+// Mock client utilities (for testing)
+export { MockCloudClient, generateMockSession, getMockDataDir, clearMockData, } from './mock-client.js';
+//# sourceMappingURL=index.js.map

package/dist/cloud/mock-client.d.ts

@@ -0,0 +1,107 @@
+/**
+ * Mock cloud client for LOCAL DEVELOPMENT AND TESTING ONLY.
+ *
+ * ⚠️  WARNING: This is NOT a production implementation!
+ *
+ * This mock client:
+ * - Stores data locally in ~/.bellwether/mock-cloud/ as JSON files
+ * - Simulates cloud API responses for development purposes
+ * - Does NOT sync data to any remote server
+ * - Should ONLY be used with mock sessions (sess_mock_*)
+ *
+ * For production use, connect to the real Bellwether Cloud API.
+ *
+ * Usage:
+ *   bellwether login --mock   # Creates a mock session for development
+ */
+import type { BellwetherCloudClient, CloudUser, Project, BaselineVersion, UploadResult, DiffSummary, BellwetherBaseline, StoredSession, BadgeInfo, CloudVerificationResult, VerificationSubmissionResult } from './types.js';
+/**
+ * Mock cloud client implementation for development and testing.
+ *
+ * ⚠️  DEVELOPMENT ONLY - NOT FOR PRODUCTION USE!
+ *
+ * This client:
+ * - Stores all data locally in ~/.bellwether/mock-cloud/
+ * - Provides a full implementation of the BellwetherCloudClient interface
+ * - Does NOT communicate with any remote servers
+ * - Should only be used with mock sessions (generated via `bellwether login --mock`)
+ *
+ * Features that work differently in mock mode:
+ * - Badge URLs point to shields.io for display purposes only
+ * - Project URLs are local file:// paths
+ * - No data synchronization across machines
+ *
+ * For production deployments, use the real CloudClient with proper authentication.
+ */
+export declare class MockCloudClient implements BellwetherCloudClient {
+    private dataDir;
+    private sessionToken;
+    /**
+     * Create a new MockCloudClient.
+     *
+     * @param sessionToken - A mock session token (must start with 'sess_mock_')
+     */
+    constructor(sessionToken?: string);
+    /**
+     * Ensure the mock data directory exists.
+     */
+    private ensureDataDir;
+    /**
+     * Get path to projects file.
+     */
+    private get projectsFile();
+    /**
+     * Get path to baselines file for a project.
+     */
+    private getBaselinesFile;
+    /**
+     * Get path to a specific baseline data file.
+     */
+    private getBaselineDataFile;
+    /**
+     * Load projects from storage.
+     */
+    private loadProjects;
+    /**
+     * Save projects to storage.
+     */
+    private saveProjects;
+    /**
+     * Load baselines for a project.
+     */
+    private loadBaselines;
+    /**
+     * Save baselines for a project.
+     */
+    private saveBaselines;
+    isAuthenticated(): boolean;
+    whoami(): Promise<CloudUser | null>;
+    listProjects(): Promise<Project[]>;
+    createProject(name: string, serverCommand: string): Promise<Project>;
+    getProject(projectId: string): Promise<Project | null>;
+    deleteProject(projectId: string): Promise<void>;
+    uploadBaseline(projectId: string, baseline: BellwetherBaseline): Promise<UploadResult>;
+    getHistory(projectId: string, limit?: number): Promise<BaselineVersion[]>;
+    getBaseline(baselineId: string): Promise<BellwetherBaseline | null>;
+    getDiff(projectId: string, fromVersion: number, toVersion: number): Promise<DiffSummary>;
+    getLatestDiff(projectId: string): Promise<DiffSummary | null>;
+    getBadgeInfo(projectId: string): Promise<BadgeInfo | null>;
+    submitVerification(projectId: string, result: CloudVerificationResult, report?: Record<string, unknown>): Promise<VerificationSubmissionResult>;
+    /**
+     * Compute diff between two baselines.
+     */
+    private computeDiff;
+}
+/**
+ * Generate a mock session for development.
+ */
+export declare function generateMockSession(username?: string): StoredSession;
+/**
+ * Get the mock data directory path.
+ */
+export declare function getMockDataDir(): string;
+/**
+ * Clear all mock data (for testing).
+ */
+export declare function clearMockData(): void;
+//# sourceMappingURL=mock-client.d.ts.map