@insureco/cli 0.1.0

package/dist/lib/validators/route-validator.js

@@ -0,0 +1,238 @@
+import { readFile, access } from 'node:fs/promises';
+import { join } from 'node:path';
+import { parse } from 'yaml';
+// Valid HTTP methods
+const VALID_METHODS = new Set(['GET', 'POST', 'PUT', 'DELETE', 'PATCH']);
+// Valid auth types
+const VALID_AUTH_TYPES = new Set(['none', 'required', 'service']);
+// Route path patterns
+const PATH_PATTERN = /^\/[a-z0-9\-_/:{}*]*$/i;
+const PARAM_PATTERN = /\{([a-z][a-z0-9_]*)\}/gi;
+const WILDCARD_PATTERN = /\*/;
+export async function validateRoutes(cwd = process.cwd()) {
+    const checks = [];
+    const catalogPath = join(cwd, 'catalog-info.yaml');
+    try {
+        await access(catalogPath);
+    }
+    catch {
+        checks.push({
+            name: 'Routes defined',
+            status: 'skip',
+            message: 'No catalog-info.yaml found, skipping route validation',
+        });
+        return { checks };
+    }
+    try {
+        const content = await readFile(catalogPath, 'utf-8');
+        const catalogInfo = parse(content);
+        const routes = catalogInfo.spec?.routes;
+        if (!routes || routes.length === 0) {
+            checks.push({
+                name: 'Routes defined',
+                status: 'warn',
+                message: 'No routes defined in catalog-info.yaml',
+                details: [
+                    'Without routes, the service will not be accessible through Janus gateway',
+                    'Only direct Kubernetes service access will work',
+                ],
+                remediation: 'Add routes to catalog-info.yaml spec.routes section for API gateway access',
+            });
+            return { checks };
+        }
+        checks.push({
+            name: 'Routes defined',
+            status: 'pass',
+            message: `${routes.length} route(s) defined in catalog-info.yaml`,
+        });
+        // Validate each route
+        const routeValidations = routes.map(validateRoute);
+        const invalidRoutes = routeValidations.filter(v => !v.isValid);
+        if (invalidRoutes.length > 0) {
+            const details = invalidRoutes.flatMap(r => r.issues.map(i => `${r.path}: ${i}`));
+            checks.push({
+                name: 'Routes valid',
+                status: 'fail',
+                message: `${invalidRoutes.length} route(s) have validation errors`,
+                details,
+                remediation: 'Fix the route validation errors listed above',
+            });
+        }
+        else {
+            checks.push({
+                name: 'Routes valid',
+                status: 'pass',
+                message: 'All routes pass validation',
+            });
+        }
+        // Check for overlapping routes
+        const overlapCheck = checkRouteOverlaps(routes);
+        checks.push(overlapCheck);
+        // Check for security concerns
+        const securityCheck = checkRouteSecurity(routes);
+        checks.push(securityCheck);
+        // Check for rate limiting
+        const rateLimitCheck = checkRateLimits(routes);
+        checks.push(rateLimitCheck);
+    }
+    catch (error) {
+        checks.push({
+            name: 'Route validation',
+            status: 'fail',
+            message: `Failed to validate routes: ${error instanceof Error ? error.message : 'Unknown error'}`,
+        });
+    }
+    return { checks };
+}
+function validateRoute(route) {
+    const issues = [];
+    // Validate path
+    if (!route.path) {
+        issues.push('Missing path');
+    }
+    else if (!PATH_PATTERN.test(route.path)) {
+        issues.push(`Invalid path format: ${route.path}`);
+    }
+    // Validate methods
+    if (!route.methods || route.methods.length === 0) {
+        issues.push('No HTTP methods defined');
+    }
+    else {
+        const invalidMethods = route.methods.filter(m => !VALID_METHODS.has(m));
+        if (invalidMethods.length > 0) {
+            issues.push(`Invalid methods: ${invalidMethods.join(', ')}`);
+        }
+    }
+    // Validate auth
+    if (!route.auth) {
+        issues.push('Missing auth type');
+    }
+    else if (!VALID_AUTH_TYPES.has(route.auth)) {
+        issues.push(`Invalid auth type: ${route.auth} (must be: none, required, or service)`);
+    }
+    // Validate scopes if auth requires them
+    if (route.auth === 'required' && (!route.scopes || route.scopes.length === 0)) {
+        issues.push('Auth is required but no scopes defined');
+    }
+    // Validate rate limit if present
+    if (route.rateLimit) {
+        if (!route.rateLimit.requestsPerMinute || route.rateLimit.requestsPerMinute < 1) {
+            issues.push('Invalid requestsPerMinute in rateLimit');
+        }
+        if (route.rateLimit.burstSize && route.rateLimit.burstSize < 1) {
+            issues.push('Invalid burstSize in rateLimit');
+        }
+    }
+    return {
+        path: route.path || '(no path)',
+        isValid: issues.length === 0,
+        issues,
+    };
+}
+function checkRouteOverlaps(routes) {
+    const overlaps = [];
+    for (let i = 0; i < routes.length; i++) {
+        for (let j = i + 1; j < routes.length; j++) {
+            const pathA = routes[i].path;
+            const pathB = routes[j].path;
+            // Check for exact match
+            if (pathA === pathB) {
+                const methodsA = new Set(routes[i].methods);
+                const methodsB = routes[j].methods;
+                const overlap = methodsB.filter(m => methodsA.has(m));
+                if (overlap.length > 0) {
+                    overlaps.push(`${pathA} ${overlap.join(',')} - duplicate route definition`);
+                }
+            }
+            // Check for pattern conflicts
+            if (routesPotentiallyConflict(pathA, pathB)) {
+                overlaps.push(`${pathA} may conflict with ${pathB}`);
+            }
+        }
+    }
+    if (overlaps.length > 0) {
+        return {
+            name: 'No route conflicts',
+            status: 'warn',
+            message: `${overlaps.length} potential route conflict(s) detected`,
+            details: overlaps,
+            remediation: 'Review route definitions to ensure no unintended overlaps',
+        };
+    }
+    return {
+        name: 'No route conflicts',
+        status: 'pass',
+        message: 'No route conflicts detected',
+    };
+}
+function routesPotentiallyConflict(pathA, pathB) {
+    // Normalize paths
+    const normalizeA = pathA.replace(PARAM_PATTERN, ':param').replace(WILDCARD_PATTERN, '*');
+    const normalizeB = pathB.replace(PARAM_PATTERN, ':param').replace(WILDCARD_PATTERN, '*');
+    if (normalizeA === normalizeB)
+        return true;
+    // Check if one is a prefix of another with wildcard
+    if (normalizeA.includes('*') || normalizeB.includes('*')) {
+        const baseA = normalizeA.replace(/\*.*$/, '');
+        const baseB = normalizeB.replace(/\*.*$/, '');
+        if (baseA.startsWith(baseB) || baseB.startsWith(baseA)) {
+            return true;
+        }
+    }
+    return false;
+}
+function checkRouteSecurity(routes) {
+    const issues = [];
+    const publicRoutes = routes.filter(r => r.auth === 'none');
+    const writePublicRoutes = publicRoutes.filter(r => r.methods.some(m => ['POST', 'PUT', 'DELETE', 'PATCH'].includes(m)));
+    if (writePublicRoutes.length > 0) {
+        issues.push(...writePublicRoutes.map(r => `${r.path} allows ${r.methods.filter(m => m !== 'GET').join(',')} without auth`));
+    }
+    // Check for admin-looking routes without auth
+    const adminRoutes = routes.filter(r => r.auth === 'none' &&
+        (r.path.includes('admin') || r.path.includes('internal') || r.path.includes('debug')));
+    if (adminRoutes.length > 0) {
+        issues.push(...adminRoutes.map(r => `${r.path} appears to be an admin route but has no auth`));
+    }
+    if (issues.length > 0) {
+        return {
+            name: 'Route security',
+            status: 'warn',
+            message: `${issues.length} potential security concern(s)`,
+            details: issues,
+            remediation: 'Consider adding authentication to sensitive routes',
+        };
+    }
+    return {
+        name: 'Route security',
+        status: 'pass',
+        message: 'Routes follow security best practices',
+    };
+}
+function checkRateLimits(routes) {
+    const publicRoutes = routes.filter(r => r.auth === 'none');
+    const publicWithoutRateLimit = publicRoutes.filter(r => !r.rateLimit);
+    if (publicWithoutRateLimit.length > 0) {
+        return {
+            name: 'Rate limiting',
+            status: 'warn',
+            message: `${publicWithoutRateLimit.length} public route(s) without rate limiting`,
+            details: publicWithoutRateLimit.map(r => r.path),
+            remediation: 'Add rateLimit to public routes to prevent abuse',
+        };
+    }
+    const rateLimitedRoutes = routes.filter(r => r.rateLimit);
+    if (rateLimitedRoutes.length > 0) {
+        return {
+            name: 'Rate limiting',
+            status: 'pass',
+            message: `${rateLimitedRoutes.length} route(s) have rate limiting configured`,
+        };
+    }
+    return {
+        name: 'Rate limiting',
+        status: 'skip',
+        message: 'No public routes found',
+    };
+}
+//# sourceMappingURL=route-validator.js.map

package/dist/lib/validators/route-validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"route-validator.js","sourceRoot":"","sources":["../../../src/lib/validators/route-validator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,KAAK,EAAE,MAAM,MAAM,CAAA;AAG5B,qBAAqB;AACrB,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAA;AAExE,mBAAmB;AACnB,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,CAAA;AAEjE,sBAAsB;AACtB,MAAM,YAAY,GAAG,wBAAwB,CAAA;AAC7C,MAAM,aAAa,GAAG,yBAAyB,CAAA;AAC/C,MAAM,gBAAgB,GAAG,IAAI,CAAA;AAE7B,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,MAAc,OAAO,CAAC,GAAG,EAAE;IAC9D,MAAM,MAAM,GAAqB,EAAE,CAAA;IAEnC,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAA;IAElD,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,WAAW,CAAC,CAAA;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,gBAAgB;YACtB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,uDAAuD;SACjE,CAAC,CAAA;QACF,OAAO,EAAE,MAAM,EAAE,CAAA;IACnB,CAAC;IAED,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC,CAAA;QACpD,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAgB,CAAA;QAEjD,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,EAAE,MAAM,CAAA;QAEvC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnC,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,gBAAgB;gBACtB,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,wCAAwC;gBACjD,OAAO,EAAE;oBACP,0EAA0E;oBAC1E,iDAAiD;iBAClD;gBACD,WAAW,EAAE,4EAA4E;aAC1F,CAAC,CAAA;YACF,OAAO,EAAE,MAAM,EAAE,CAAA;QACnB,CAAC;QAED,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,gBAAgB;YACtB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,GAAG,MAAM,CAAC,MAAM,wCAAwC;SAClE,CAAC,CAAA;QAEF,sBAAsB;QACtB,MAAM,gBAAgB,GAAG,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAA;QAClD,MAAM,aAAa,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;QAE9D,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC,CAAC,CAAA;YAChF,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,cAAc;gBACpB,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,GAAG,aAAa,CAAC,MAAM,kCAAkC;gBAClE,OAAO;gBACP,WAAW,EAAE,8CAA8C;aAC5D,CAAC,CAAA;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,cAAc;gBACpB,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,4BAA4B;aACtC,CAAC,CAAA;QACJ,CAAC;QAED,+BAA+B;QAC/B,MAAM,YAAY,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAA;QAC/C,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QAEzB,8BAA8B;QAC9B,MAAM,aAAa,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAA;QAChD,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;QAE1B,0BAA0B;QAC1B,MAAM,cAAc,GAAG,eAAe,CAAC,MAAM,CAAC,CAAA;QAC9C,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;IAC7B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,kBAAkB;YACxB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,8BAA8B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE;SAClG,CAAC,CAAA;IACJ,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,CAAA;AACnB,CAAC;AAED,SAAS,aAAa,CAAC,KAAmB;IACxC,MAAM,MAAM,GAAa,EAAE,CAAA;IAE3B,gBAAgB;IAChB,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAChB,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;IAC7B,CAAC;SAAM,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC,wBAAwB,KAAK,CAAC,IAAI,EAAE,CAAC,CAAA;IACnD,CAAC;IAED,mBAAmB;IACnB,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjD,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAA;IACxC,CAAC;SAAM,CAAC;QACN,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;QACvE,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC,oBAAoB,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QAC9D,CAAC;IACH,CAAC;IAED,gBAAgB;IAChB,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAChB,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAA;IAClC,CAAC;SAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7C,MAAM,CAAC,IAAI,CAAC,sBAAsB,KAAK,CAAC,IAAI,wCAAwC,CAAC,CAAA;IACvF,CAAC;IAED,wCAAwC;IACxC,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;QAC9E,MAAM,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAA;IACvD,CAAC;IAED,iCAAiC;IACjC,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QACpB,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,iBAAiB,IAAI,KAAK,CAAC,SAAS,CAAC,iBAAiB,GAAG,CAAC,EAAE,CAAC;YAChF,MAAM,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAA;QACvD,CAAC;QACD,IAAI,KAAK,CAAC,SAAS,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,CAAC,SAAS,GAAG,CAAC,EAAE,CAAC;YAC/D,MAAM,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAA;QAC/C,CAAC;IACH,CAAC;IAED,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,WAAW;QAC/B,OAAO,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QAC5B,MAAM;KACP,CAAA;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAsB;IAChD,MAAM,QAAQ,GAAa,EAAE,CAAA;IAE7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;YAC5B,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;YAE5B,wBAAwB;YACxB,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;gBACpB,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;gBAC3C,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAA;gBAClC,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;gBAErD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACvB,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAA;gBAC7E,CAAC;YACH,CAAC;YAED,8BAA8B;YAC9B,IAAI,yBAAyB,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;gBAC5C,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,sBAAsB,KAAK,EAAE,CAAC,CAAA;YACtD,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO;YACL,IAAI,EAAE,oBAAoB;YAC1B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,GAAG,QAAQ,CAAC,MAAM,uCAAuC;YAClE,OAAO,EAAE,QAAQ;YACjB,WAAW,EAAE,2DAA2D;SACzE,CAAA;IACH,CAAC;IAED,OAAO;QACL,IAAI,EAAE,oBAAoB;QAC1B,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,6BAA6B;KACvC,CAAA;AACH,CAAC;AAED,SAAS,yBAAyB,CAAC,KAAa,EAAE,KAAa;IAC7D,kBAAkB;IAClB,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAA;IACxF,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAA;IAExF,IAAI,UAAU,KAAK,UAAU;QAAE,OAAO,IAAI,CAAA;IAE1C,oDAAoD;IACpD,IAAI,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACzD,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAA;QAC7C,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAA;QAC7C,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YACvD,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAsB;IAChD,MAAM,MAAM,GAAa,EAAE,CAAA;IAE3B,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAA;IAC1D,MAAM,iBAAiB,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAChD,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CACpE,CAAA;IAED,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjC,MAAM,CAAC,IAAI,CACT,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAC3B,GAAG,CAAC,CAAC,IAAI,WAAW,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,eAAe,CAChF,CACF,CAAA;IACH,CAAC;IAED,8CAA8C;IAC9C,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CACpC,CAAC,CAAC,IAAI,KAAK,MAAM;QACjB,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CACtF,CAAA;IAED,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,CAAC,IAAI,CACT,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,+CAA+C,CAAC,CAClF,CAAA;IACH,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,OAAO;YACL,IAAI,EAAE,gBAAgB;YACtB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,GAAG,MAAM,CAAC,MAAM,gCAAgC;YACzD,OAAO,EAAE,MAAM;YACf,WAAW,EAAE,oDAAoD;SAClE,CAAA;IACH,CAAC;IAED,OAAO;QACL,IAAI,EAAE,gBAAgB;QACtB,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,uCAAuC;KACjD,CAAA;AACH,CAAC;AAED,SAAS,eAAe,CAAC,MAAsB;IAC7C,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAA;IAC1D,MAAM,sBAAsB,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;IAErE,IAAI,sBAAsB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtC,OAAO;YACL,IAAI,EAAE,eAAe;YACrB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,GAAG,sBAAsB,CAAC,MAAM,wCAAwC;YACjF,OAAO,EAAE,sBAAsB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YAChD,WAAW,EAAE,iDAAiD;SAC/D,CAAA;IACH,CAAC;IAED,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;IACzD,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjC,OAAO;YACL,IAAI,EAAE,eAAe;YACrB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,GAAG,iBAAiB,CAAC,MAAM,yCAAyC;SAC9E,CAAA;IACH,CAAC;IAED,OAAO;QACL,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,wBAAwB;KAClC,CAAA;AACH,CAAC"}

package/dist/types/index.d.ts

@@ -0,0 +1,455 @@
+import { z } from 'zod';
+export interface ApiResponse<T> {
+    success: boolean;
+    data?: T;
+    error?: {
+        code: string;
+        message: string;
+        details?: Record<string, unknown>;
+    };
+    meta?: {
+        total?: number;
+        page?: number;
+        limit?: number;
+        timestamp: string;
+        requestId: string;
+    };
+}
+export interface ServiceRoute {
+    path: string;
+    methods: Array<'GET' | 'POST' | 'PUT' | 'DELETE' | 'PATCH'>;
+    auth: 'none' | 'required' | 'service';
+    scopes?: string[];
+    description?: string;
+    stripPrefix?: boolean;
+    rateLimit?: {
+        requestsPerMinute: number;
+        burstSize?: number;
+    };
+}
+export interface OAuthClientConfig {
+    clientId: string;
+    grantTypes: Array<'authorization_code' | 'client_credentials' | 'refresh_token'>;
+    redirectUris?: string[];
+    scopes: string[];
+}
+export interface Service {
+    id: string;
+    name: string;
+    description: string;
+    owner: string;
+    status: 'active' | 'inactive' | 'deprecated';
+    repo: string;
+    database: string;
+    upstream: string;
+    healthEndpoint: string;
+    tags: string[];
+    metadata: Record<string, unknown>;
+    routes?: ServiceRoute[];
+    oauth?: OAuthClientConfig;
+    createdAt: string;
+    updatedAt: string;
+}
+export interface CreateServiceRequest {
+    id: string;
+    name: string;
+    description: string;
+    owner: string;
+    repo: string;
+    database?: string;
+    upstream: string;
+    healthEndpoint?: string;
+    tags?: string[];
+    metadata?: Record<string, unknown>;
+    routes?: ServiceRoute[];
+    oauth?: OAuthClientConfig;
+}
+export interface Program {
+    id: string;
+    code: string;
+    name: string;
+    status: 'active' | 'suspended' | 'trial';
+    tier: 'starter' | 'professional' | 'enterprise';
+    companyId: string;
+    createdAt: string;
+    updatedAt: string;
+}
+export declare const ConfigSchema: z.ZodObject<{
+    koko_url: z.ZodString;
+    builder_url: z.ZodString;
+    bio_url: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+    registry: z.ZodString;
+    kubeconfig: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+    anthropic_api_key: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    koko_url: string;
+    builder_url: string;
+    bio_url: string;
+    registry: string;
+    kubeconfig: string;
+    anthropic_api_key?: string | undefined;
+}, {
+    koko_url: string;
+    builder_url: string;
+    registry: string;
+    bio_url?: string | undefined;
+    kubeconfig?: string | undefined;
+    anthropic_api_key?: string | undefined;
+}>;
+export type Config = z.infer<typeof ConfigSchema>;
+export declare const AuthSchema: z.ZodObject<{
+    token: z.ZodString;
+    user: z.ZodObject<{
+        id: z.ZodString;
+        email: z.ZodString;
+        name: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        id: string;
+        email: string;
+        name: string;
+    }, {
+        id: string;
+        email: string;
+        name: string;
+    }>;
+    expiresAt: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    token: string;
+    user: {
+        id: string;
+        email: string;
+        name: string;
+    };
+    expiresAt?: string | undefined;
+}, {
+    token: string;
+    user: {
+        id: string;
+        email: string;
+        name: string;
+    };
+    expiresAt?: string | undefined;
+}>;
+export type Auth = z.infer<typeof AuthSchema>;
+export declare const LinkedRepoSchema: z.ZodObject<{
+    serviceId: z.ZodString;
+    programId: z.ZodOptional<z.ZodString>;
+    repo: z.ZodString;
+    provider: z.ZodEnum<["github", "gitlab", "bitbucket"]>;
+    linkedAt: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    serviceId: string;
+    repo: string;
+    provider: "github" | "gitlab" | "bitbucket";
+    linkedAt: string;
+    programId?: string | undefined;
+}, {
+    serviceId: string;
+    repo: string;
+    provider: "github" | "gitlab" | "bitbucket";
+    linkedAt: string;
+    programId?: string | undefined;
+}>;
+export type LinkedRepo = z.infer<typeof LinkedRepoSchema>;
+export interface GitRemote {
+    provider: 'github' | 'gitlab' | 'bitbucket' | 'unknown';
+    owner: string;
+    repo: string;
+    url: string;
+}
+export interface LinkRepoRequest {
+    serviceId: string;
+    provider: 'github' | 'gitlab' | 'bitbucket';
+    owner: string;
+    repo: string;
+    branch?: string;
+}
+export interface LinkRepoResponse {
+    serviceId: string;
+    webhookId: string;
+    webhookUrl: string;
+    status: 'linked';
+}
+export interface CatalogInfo {
+    apiVersion: string;
+    kind: 'Component';
+    metadata: {
+        name: string;
+        description: string;
+        tags?: string[];
+        annotations?: Record<string, string>;
+    };
+    spec: {
+        type: 'service';
+        lifecycle: 'production' | 'experimental' | 'deprecated';
+        owner: string;
+        system?: string;
+        providesApis?: string[];
+        consumesApis?: string[];
+        routes?: ServiceRoute[];
+        oauth?: OAuthClientConfig;
+    };
+}
+export interface ProvisionDatabaseResponse {
+    database: string;
+    connectionString: string;
+    user: string;
+    status: 'provisioned';
+}
+export interface BuilderService {
+    id: string;
+    name: string;
+    repoUrl: string;
+    branch: string;
+    dockerfilePath: string;
+    helmChart?: string;
+    helmValues?: Record<string, unknown>;
+    webhookSecret: string;
+    createdAt: string;
+    updatedAt: string;
+}
+export interface CreateBuilderServiceRequest {
+    name: string;
+    repoUrl: string;
+    branch?: string;
+    dockerfilePath?: string;
+    helmChart?: string;
+    helmValues?: Record<string, unknown>;
+}
+export interface Build {
+    id: string;
+    serviceId: string;
+    status: 'queued' | 'cloning' | 'building' | 'pushing' | 'deploying' | 'completed' | 'failed' | 'cancelled';
+    branch: string;
+    environment?: Environment;
+    commitSha?: string;
+    commitMessage?: string;
+    imageTag?: string;
+    logs?: string;
+    error?: string;
+    startedAt?: string;
+    completedAt?: string;
+    createdAt: string;
+}
+export type Environment = 'prod' | 'sandbox' | 'uat' | 'dev';
+export interface TriggerBuildRequest {
+    serviceId: string;
+    branch?: string;
+    commitSha?: string;
+    environment?: Environment;
+}
+export interface TriggerBuildResponse {
+    buildId: string;
+    message: string;
+    service: string;
+}
+export declare const LinkedServiceSchema: z.ZodObject<{
+    serviceId: z.ZodString;
+    serviceName: z.ZodString;
+    repoUrl: z.ZodString;
+    branch: z.ZodString;
+    linkedAt: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    serviceId: string;
+    linkedAt: string;
+    serviceName: string;
+    repoUrl: string;
+    branch: string;
+}, {
+    serviceId: string;
+    linkedAt: string;
+    serviceName: string;
+    repoUrl: string;
+    branch: string;
+}>;
+export type LinkedService = z.infer<typeof LinkedServiceSchema>;
+export interface Version {
+    id: string;
+    serviceId: string;
+    serviceName: string;
+    archiveId: string;
+    checksum: string;
+    size: number;
+    message: string;
+    uploadedBy: string;
+    deployedTo?: string[];
+    builds?: string[];
+    createdAt: string;
+    updatedAt: string;
+}
+export interface PushRequest {
+    serviceId: string;
+    serviceName: string;
+    archive: Buffer;
+    checksum: string;
+    message?: string;
+}
+export interface PushResponse {
+    versionId: string;
+    archiveId: string;
+    message: string;
+    size: number;
+}
+export interface DeployVersionResponse {
+    buildId: string;
+    versionId: string;
+    environment: string;
+    message: string;
+}
+export type PreflightStatus = 'pass' | 'fail' | 'warn' | 'skip';
+export interface PreflightCheck {
+    name: string;
+    status: PreflightStatus;
+    message: string;
+    details?: string[];
+    remediation?: string;
+}
+export interface PreflightResult {
+    checks: PreflightCheck[];
+}
+export interface FrameworkInfo {
+    name: string;
+    dockerfile?: string;
+    defaultPort: number;
+    healthPath: string;
+}
+export interface EnvVarReference {
+    name: string;
+    file: string;
+    line: number;
+}
+export interface RouteValidation {
+    path: string;
+    isValid: boolean;
+    issues: string[];
+}
+export interface LogEntry {
+    timestamp: string;
+    level: 'debug' | 'info' | 'warn' | 'error' | 'fatal';
+    message: string;
+    service: string;
+    traceId?: string;
+    spanId?: string;
+    metadata?: Record<string, unknown>;
+}
+export interface LogTimeline {
+    entries: LogEntry[];
+    startTime: string;
+    endTime: string;
+    services: string[];
+}
+export type IssueType = 'missing_scope' | 'service_not_registered' | 'upstream_down' | 'dns_not_propagated' | 'oom_killed' | 'crash_loop' | 'health_check_failure' | 'connection_refused' | 'authentication_failure' | 'rate_limited' | 'unknown';
+export interface DetectedIssue {
+    type: IssueType;
+    severity: 'critical' | 'high' | 'medium' | 'low';
+    title: string;
+    description: string;
+    evidence: string[];
+    affectedService: string;
+    relatedServices?: string[];
+}
+export interface TroubleshootRecommendation {
+    id: string;
+    priority: number;
+    title: string;
+    description: string;
+    action: TroubleshootAction;
+    autoFixAvailable: boolean;
+    estimatedImpact: string;
+}
+export type TroubleshootAction = {
+    type: 'add_scope';
+    scope: string;
+    service: string;
+} | {
+    type: 'register_service';
+    serviceName: string;
+} | {
+    type: 'update_catalog';
+    field: string;
+    value: unknown;
+} | {
+    type: 'update_helm_values';
+    path: string;
+    value: unknown;
+} | {
+    type: 'redeploy';
+    environment: Environment;
+} | {
+    type: 'check_upstream';
+    upstream: string;
+} | {
+    type: 'increase_memory';
+    currentLimit: string;
+    suggestedLimit: string;
+} | {
+    type: 'fix_health_endpoint';
+    path: string;
+} | {
+    type: 'manual';
+    instructions: string;
+};
+export interface TroubleshootResult {
+    timestamp: string;
+    service: string;
+    environment: Environment;
+    status: 'healthy' | 'degraded' | 'unhealthy';
+    issues: DetectedIssue[];
+    recommendations: TroubleshootRecommendation[];
+    context: TroubleshootContext;
+}
+export interface TroubleshootContext {
+    service: {
+        name: string;
+        id?: string;
+        upstream?: string;
+        routes?: ServiceRoute[];
+    };
+    recentBuilds: Array<{
+        id: string;
+        status: string;
+        createdAt: string;
+    }>;
+    dependencies: string[];
+    podStatus?: {
+        name: string;
+        status: string;
+        restarts: number;
+        ready: boolean;
+        reason?: string;
+    }[];
+    recentEvents?: Array<{
+        type: string;
+        reason: string;
+        message: string;
+        timestamp: string;
+    }>;
+}
+export interface LogFetchConfig {
+    serviceName: string;
+    namespace: string;
+    environment: Environment;
+    tailLines: number;
+    since?: string;
+    includeJanus?: boolean;
+    includeDependencies?: boolean;
+}
+export interface RedactionConfig {
+    redactBearerTokens: boolean;
+    redactApiKeys: boolean;
+    redactRequestBodies: boolean;
+    redactResponseBodies: boolean;
+    allowedServices: string[];
+    preserveFields: string[];
+}
+export interface FixPreview {
+    description: string;
+    files: Array<{
+        path: string;
+        before: string;
+        after: string;
+        changeType: 'create' | 'modify' | 'delete';
+    }>;
+    commands: string[];
+}
+//# sourceMappingURL=index.d.ts.map