@generacy-ai/control-plane 0.5.0 → 0.7.0

package/dist/src/services/jit-git-token-client.d.ts

@@ -0,0 +1,21 @@
+export type JitTokenErrorCode = 'CLUSTER_API_KEY_MISSING' | 'CREDENTIAL_NOT_CONFIGURED' | 'CLOUD_UNREACHABLE' | 'CLOUD_AUTH_REJECTED' | 'CLOUD_REQUEST_INVALID' | 'CLOUD_UPSTREAM_ERROR' | 'CLOUD_RESPONSE_INVALID' | 'CONTROL_SOCKET_UNREACHABLE' | 'RESPONSE_PARSE_ERROR';
+export declare class JitTokenError extends Error {
+    readonly code: JitTokenErrorCode;
+    readonly details?: Record<string, unknown>;
+    constructor(code: JitTokenErrorCode, message: string, details?: Record<string, unknown>);
+}
+export interface JitGitTokenResponse {
+    token: string;
+    expiresAt: Date;
+}
+export interface JitGitTokenClient {
+    fetch(credentialId?: string): Promise<JitGitTokenResponse>;
+}
+export interface JitGitTokenClientOptions {
+    socketPath: string;
+    logger?: {
+        warn(obj: Record<string, unknown>, msg: string): void;
+    };
+}
+export declare function createJitGitTokenClient(options: JitGitTokenClientOptions): JitGitTokenClient;
+//# sourceMappingURL=jit-git-token-client.d.ts.map

package/dist/src/services/jit-git-token-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jit-git-token-client.d.ts","sourceRoot":"","sources":["../../../src/services/jit-git-token-client.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,iBAAiB,GACzB,yBAAyB,GACzB,2BAA2B,GAC3B,mBAAmB,GACnB,qBAAqB,GACrB,uBAAuB,GACvB,sBAAsB,GACtB,wBAAwB,GACxB,4BAA4B,GAC5B,sBAAsB,CAAC;AAc3B,qBAAa,aAAc,SAAQ,KAAK;IACtC,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IACjC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBAE/B,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAQxF;AAED,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,IAAI,CAAC;CACjB;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;CAC5D;AAED,MAAM,WAAW,wBAAwB;IACvC,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE;QAAE,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;CACpE;AAkCD,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,wBAAwB,GAAG,iBAAiB,CAgF5F"}

package/dist/src/services/jit-git-token-client.js

@@ -0,0 +1,105 @@
+import http from 'node:http';
+const KNOWN_ERROR_CODES = new Set([
+    'CLUSTER_API_KEY_MISSING',
+    'CREDENTIAL_NOT_CONFIGURED',
+    'CLOUD_UNREACHABLE',
+    'CLOUD_AUTH_REJECTED',
+    'CLOUD_REQUEST_INVALID',
+    'CLOUD_UPSTREAM_ERROR',
+    'CLOUD_RESPONSE_INVALID',
+    'CONTROL_SOCKET_UNREACHABLE',
+    'RESPONSE_PARSE_ERROR',
+]);
+export class JitTokenError extends Error {
+    code;
+    details;
+    constructor(code, message, details) {
+        super(message);
+        this.name = 'JitTokenError';
+        this.code = code;
+        if (details !== undefined) {
+            this.details = details;
+        }
+    }
+}
+function postToControlSocket(socketPath, body) {
+    return new Promise((resolve, reject) => {
+        const req = http.request({
+            socketPath,
+            path: '/git-token',
+            method: 'POST',
+            headers: {
+                'content-type': 'application/json',
+                'content-length': Buffer.byteLength(body).toString(),
+            },
+        }, (res) => {
+            const chunks = [];
+            res.on('data', (c) => chunks.push(c));
+            res.on('end', () => {
+                resolve({ status: res.statusCode ?? 0, body: Buffer.concat(chunks).toString('utf8') });
+            });
+            res.on('error', reject);
+        });
+        req.on('error', reject);
+        req.write(body);
+        req.end();
+    });
+}
+export function createJitGitTokenClient(options) {
+    const { socketPath, logger } = options;
+    return {
+        async fetch(credentialId) {
+            const body = credentialId === undefined ? '{}' : JSON.stringify({ credentialId });
+            let response;
+            try {
+                response = await postToControlSocket(socketPath, body);
+            }
+            catch (err) {
+                const cause = err.code ?? err.message;
+                throw new JitTokenError('CONTROL_SOCKET_UNREACHABLE', `control socket at ${socketPath} unreachable (${cause})`, { cause });
+            }
+            if (response.status >= 200 && response.status < 300) {
+                let parsed;
+                try {
+                    parsed = JSON.parse(response.body);
+                }
+                catch {
+                    logger?.warn({ socketPath, status: response.status }, 'jit-git-token-client: non-JSON success body');
+                    throw new JitTokenError('RESPONSE_PARSE_ERROR', 'control-plane returned a non-JSON body on success');
+                }
+                if (typeof parsed.token !== 'string' || parsed.token.length === 0) {
+                    throw new JitTokenError('RESPONSE_PARSE_ERROR', 'control-plane response missing token');
+                }
+                if (typeof parsed.expiresAt !== 'string') {
+                    throw new JitTokenError('RESPONSE_PARSE_ERROR', 'control-plane response missing expiresAt');
+                }
+                const expiresAtMs = Date.parse(parsed.expiresAt);
+                if (!Number.isFinite(expiresAtMs)) {
+                    throw new JitTokenError('RESPONSE_PARSE_ERROR', `control-plane returned an unparseable expiresAt: ${parsed.expiresAt}`);
+                }
+                return { token: parsed.token, expiresAt: new Date(expiresAtMs) };
+            }
+            // Non-2xx — extract code/message from error body if possible.
+            let code = 'CLOUD_UPSTREAM_ERROR';
+            let message = `HTTP ${response.status}`;
+            let details;
+            try {
+                const errBody = JSON.parse(response.body);
+                if (typeof errBody.code === 'string' && KNOWN_ERROR_CODES.has(errBody.code)) {
+                    code = errBody.code;
+                }
+                if (typeof errBody.error === 'string') {
+                    message = errBody.error;
+                }
+                if (errBody.details && typeof errBody.details === 'object') {
+                    details = errBody.details;
+                }
+            }
+            catch {
+                // Body was empty / not JSON — keep defaults.
+            }
+            throw new JitTokenError(code, message, details);
+        },
+    };
+}
+//# sourceMappingURL=jit-git-token-client.js.map

package/dist/src/services/jit-git-token-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jit-git-token-client.js","sourceRoot":"","sources":["../../../src/services/jit-git-token-client.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAa7B,MAAM,iBAAiB,GAAmC,IAAI,GAAG,CAAoB;IACnF,yBAAyB;IACzB,2BAA2B;IAC3B,mBAAmB;IACnB,qBAAqB;IACrB,uBAAuB;IACvB,sBAAsB;IACtB,wBAAwB;IACxB,4BAA4B;IAC5B,sBAAsB;CACvB,CAAC,CAAC;AAEH,MAAM,OAAO,aAAc,SAAQ,KAAK;IAC7B,IAAI,CAAoB;IACxB,OAAO,CAA2B;IAE3C,YAAY,IAAuB,EAAE,OAAe,EAAE,OAAiC;QACrF,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;QAC5B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACzB,CAAC;IACH,CAAC;CACF;AAqBD,SAAS,mBAAmB,CAAC,UAAkB,EAAE,IAAY;IAC3D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CACtB;YACE,UAAU;YACV,IAAI,EAAE,YAAY;YAClB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;aACrD;SACF,EACD,CAAC,GAAG,EAAE,EAAE;YACN,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9C,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBACjB,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,UAAU,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACzF,CAAC,CAAC,CAAC;YACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1B,CAAC,CACF,CAAC;QACF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACxB,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChB,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,OAAiC;IACvE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IAEvC,OAAO;QACL,KAAK,CAAC,KAAK,CAAC,YAAqB;YAC/B,MAAM,IAAI,GAAG,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC;YAElF,IAAI,QAAwB,CAAC;YAC7B,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,mBAAmB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;YACzD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,KAAK,GAAI,GAA6B,CAAC,IAAI,IAAK,GAAa,CAAC,OAAO,CAAC;gBAC5E,MAAM,IAAI,aAAa,CACrB,4BAA4B,EAC5B,qBAAqB,UAAU,iBAAiB,KAAK,GAAG,EACxD,EAAE,KAAK,EAAE,CACV,CAAC;YACJ,CAAC;YAED,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;gBACpD,IAAI,MAAgD,CAAC;gBACrD,IAAI,CAAC;oBACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAkB,CAAC;gBACtD,CAAC;gBAAC,MAAM,CAAC;oBACP,MAAM,EAAE,IAAI,CACV,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,EACvC,6CAA6C,CAC9C,CAAC;oBACF,MAAM,IAAI,aAAa,CACrB,sBAAsB,EACtB,mDAAmD,CACpD,CAAC;gBACJ,CAAC;gBACD,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBAClE,MAAM,IAAI,aAAa,CACrB,sBAAsB,EACtB,sCAAsC,CACvC,CAAC;gBACJ,CAAC;gBACD,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;oBACzC,MAAM,IAAI,aAAa,CACrB,sBAAsB,EACtB,0CAA0C,CAC3C,CAAC;gBACJ,CAAC;gBACD,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBACjD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;oBAClC,MAAM,IAAI,aAAa,CACrB,sBAAsB,EACtB,oDAAoD,MAAM,CAAC,SAAS,EAAE,CACvE,CAAC;gBACJ,CAAC;gBACD,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YACnE,CAAC;YAED,8DAA8D;YAC9D,IAAI,IAAI,GAAsB,sBAAsB,CAAC;YACrD,IAAI,OAAO,GAAG,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAC;YACxC,IAAI,OAA4C,CAAC;YACjD,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAIvC,CAAC;gBACF,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,IAAyB,CAAC,EAAE,CAAC;oBACjG,IAAI,GAAG,OAAO,CAAC,IAAyB,CAAC;gBAC3C,CAAC;gBACD,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;oBACtC,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC;gBAC1B,CAAC;gBACD,IAAI,OAAO,CAAC,OAAO,IAAI,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;oBAC3D,OAAO,GAAG,OAAO,CAAC,OAAkC,CAAC;gBACvD,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,6CAA6C;YAC/C,CAAC;YACD,MAAM,IAAI,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QAClD,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/src/types/git-token.d.ts

@@ -0,0 +1,24 @@
+export interface GitTokenCacheEntry {
+    token: string;
+    expiresAt: Date;
+    credentialId: string;
+    fetchedAt: Date;
+}
+export type GitHelperErrorCode = 'CLUSTER_API_KEY_MISSING' | 'CLOUD_UNREACHABLE' | 'CLOUD_AUTH_REJECTED' | 'CLOUD_REQUEST_INVALID' | 'CLOUD_UPSTREAM_ERROR' | 'CLOUD_RESPONSE_INVALID' | 'CREDENTIAL_NOT_CONFIGURED';
+export declare class GitHelperError extends Error {
+    readonly code: GitHelperErrorCode;
+    readonly details?: Record<string, unknown>;
+    constructor(code: GitHelperErrorCode, message: string, details?: Record<string, unknown>);
+}
+export interface CloudPullRequest {
+    credentialId: string;
+}
+export interface CloudPullResponse {
+    token: string;
+    expiresAt: string;
+}
+export interface GitTokenResponse {
+    token: string;
+    expiresAt: string;
+}
+//# sourceMappingURL=git-token.d.ts.map

package/dist/src/types/git-token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-token.d.ts","sourceRoot":"","sources":["../../../src/types/git-token.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,IAAI,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,IAAI,CAAC;CACjB;AAED,MAAM,MAAM,kBAAkB,GAC1B,yBAAyB,GACzB,mBAAmB,GACnB,qBAAqB,GACrB,uBAAuB,GACvB,sBAAsB,GACtB,wBAAwB,GACxB,2BAA2B,CAAC;AAEhC,qBAAa,cAAe,SAAQ,KAAK;IACvC,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBAE/B,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAQzF;AAED,MAAM,WAAW,gBAAgB;IAC/B,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;CACnB"}

package/dist/src/types/git-token.js

@@ -0,0 +1,13 @@
+export class GitHelperError extends Error {
+    code;
+    details;
+    constructor(code, message, details) {
+        super(message);
+        this.name = 'GitHelperError';
+        this.code = code;
+        if (details !== undefined) {
+            this.details = details;
+        }
+    }
+}
+//# sourceMappingURL=git-token.js.map

package/dist/src/types/git-token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-token.js","sourceRoot":"","sources":["../../../src/types/git-token.ts"],"names":[],"mappings":"AAgBA,MAAM,OAAO,cAAe,SAAQ,KAAK;IAC9B,IAAI,CAAqB;IACzB,OAAO,CAA2B;IAE3C,YAAY,IAAwB,EAAE,OAAe,EAAE,OAAiC;QACtF,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;QAC7B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACzB,CAAC;IACH,CAAC;CACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@generacy-ai/control-plane",
-  "version": "0.5.0",
+  "version": "0.7.0",
   "description": "In-cluster control-plane HTTP service over Unix socket for cloud-hosted bootstrap UI",
   "main": "dist/src/index.js",
   "types": "dist/src/index.d.ts",
@@ -12,7 +12,9 @@
     }
   },
   "bin": {
-    "control-plane": "./dist/bin/control-plane.js"
+    "control-plane": "./dist/bin/control-plane.js",
+    "git-credential-generacy": "./dist/bin/git-credential-generacy.js",
+    "git-token-proxy": "./dist/bin/git-token-proxy.js"
   },
   "author": "Generacy AI",
   "license": "Apache-2.0",