@littlebearapps/platform-admin-sdk 1.4.2 → 2.0.0

package/templates/full/dashboard/src/pages/api/notifications/index.ts

@@ -0,0 +1,47 @@
+import type { APIRoute } from 'astro';
+
+export const GET: APIRoute = async ({ locals, url }) => {
+  const db = (locals.runtime?.env as { PLATFORM_DB?: D1Database } | undefined)?.PLATFORM_DB;
+
+  if (!db) {
+    return new Response(JSON.stringify({ notifications: [], total: 0 }), {
+      headers: { 'Content-Type': 'application/json' },
+    });
+  }
+
+  const page = parseInt(url.searchParams.get('page') ?? '1');
+  const limit = Math.min(parseInt(url.searchParams.get('limit') ?? '20'), 100);
+  const offset = (page - 1) * limit;
+
+  try {
+    const notifications = await db
+      .prepare(
+        `SELECT id, title, body, category, priority, source, created_at, read_at, action_url, expires_at
+         FROM notifications
+         WHERE expires_at IS NULL OR expires_at > unixepoch()
+         ORDER BY created_at DESC
+         LIMIT ? OFFSET ?`
+      )
+      .bind(limit, offset)
+      .all();
+
+    const total = await db
+      .prepare(`SELECT COUNT(*) as count FROM notifications WHERE expires_at IS NULL OR expires_at > unixepoch() LIMIT 1`)
+      .first<{ count: number }>();
+
+    return new Response(
+      JSON.stringify({
+        notifications: notifications.results ?? [],
+        total: total?.count ?? 0,
+        page,
+        limit,
+      }),
+      { headers: { 'Content-Type': 'application/json', 'Cache-Control': 'max-age=15' } }
+    );
+  } catch {
+    return new Response(JSON.stringify({ notifications: [], total: 0 }), {
+      status: 500,
+      headers: { 'Content-Type': 'application/json' },
+    });
+  }
+};

package/templates/full/dashboard/src/pages/api/notifications/read-all.ts

@@ -0,0 +1,28 @@
+import type { APIRoute } from 'astro';
+
+export const POST: APIRoute = async ({ locals }) => {
+  const db = (locals.runtime?.env as { PLATFORM_DB?: D1Database } | undefined)?.PLATFORM_DB;
+
+  if (!db) {
+    return new Response(JSON.stringify({ error: 'Database not available' }), {
+      status: 503,
+      headers: { 'Content-Type': 'application/json' },
+    });
+  }
+
+  try {
+    const result = await db
+      .prepare(`UPDATE notifications SET read_at = unixepoch() WHERE read_at IS NULL`)
+      .run();
+
+    return new Response(
+      JSON.stringify({ ok: true, updated: result.meta?.changes ?? 0 }),
+      { headers: { 'Content-Type': 'application/json' } }
+    );
+  } catch {
+    return new Response(JSON.stringify({ error: 'Failed to mark all as read' }), {
+      status: 500,
+      headers: { 'Content-Type': 'application/json' },
+    });
+  }
+};

package/templates/full/dashboard/src/pages/api/notifications/unread-count.ts

@@ -0,0 +1,31 @@
+import type { APIRoute } from 'astro';
+
+export const GET: APIRoute = async ({ locals }) => {
+  const db = (locals.runtime?.env as { PLATFORM_DB?: D1Database } | undefined)?.PLATFORM_DB;
+
+  if (!db) {
+    return new Response(JSON.stringify({ count: 0 }), {
+      headers: { 'Content-Type': 'application/json' },
+    });
+  }
+
+  try {
+    const result = await db
+      .prepare(
+        `SELECT COUNT(*) as count FROM notifications
+         WHERE read_at IS NULL
+           AND (expires_at IS NULL OR expires_at > unixepoch())
+         LIMIT 1`
+      )
+      .first<{ count: number }>();
+
+    return new Response(JSON.stringify({ count: result?.count ?? 0 }), {
+      headers: { 'Content-Type': 'application/json', 'Cache-Control': 'max-age=15' },
+    });
+  } catch {
+    return new Response(JSON.stringify({ count: 0 }), {
+      status: 500,
+      headers: { 'Content-Type': 'application/json' },
+    });
+  }
+};

package/templates/full/dashboard/src/pages/api/patterns/approve.ts

@@ -0,0 +1,55 @@
+import type { APIRoute } from 'astro';
+
+export const POST: APIRoute = async ({ locals, request }) => {
+  const db = (locals.runtime?.env as { PLATFORM_DB?: D1Database } | undefined)?.PLATFORM_DB;
+  const patternApi = (locals.runtime?.env as { PATTERN_DISCOVERY_API?: Fetcher } | undefined)?.PATTERN_DISCOVERY_API;
+
+  if (!db && !patternApi) {
+    return new Response(JSON.stringify({ error: 'No database or pattern API available' }), {
+      status: 500,
+      headers: { 'Content-Type': 'application/json' },
+    });
+  }
+
+  try {
+    const body = (await request.json()) as { id: number; notes?: string };
+
+    if (patternApi) {
+      const controller = new AbortController();
+      const timeout = setTimeout(() => controller.abort(), 5000);
+      const res = await patternApi.fetch(
+        `https://internal/suggestions/${body.id}?action=approve`,
+        {
+          method: 'POST',
+          headers: { 'Content-Type': 'application/json' },
+          body: JSON.stringify({ notes: body.notes }),
+          signal: controller.signal,
+        }
+      );
+      clearTimeout(timeout);
+      if (!res.ok) throw new Error(`Pattern API returned ${res.status}`);
+      return new Response(JSON.stringify({ ok: true }), {
+        headers: { 'Content-Type': 'application/json' },
+      });
+    }
+
+    // Fallback: update D1 directly
+    await db!
+      .prepare(
+        `UPDATE transient_pattern_suggestions
+         SET status = 'approved', reviewed_at = datetime('now'), reviewer_notes = ?
+         WHERE id = ?`
+      )
+      .bind(body.notes ?? null, body.id)
+      .run();
+
+    return new Response(JSON.stringify({ ok: true }), {
+      headers: { 'Content-Type': 'application/json' },
+    });
+  } catch (error) {
+    return new Response(
+      JSON.stringify({ error: error instanceof Error ? error.message : 'Failed to approve' }),
+      { status: 500, headers: { 'Content-Type': 'application/json' } }
+    );
+  }
+};

package/templates/full/dashboard/src/pages/api/patterns/cache-refresh.ts

@@ -0,0 +1,38 @@
+import type { APIRoute } from 'astro';
+
+export const POST: APIRoute = async ({ locals }) => {
+  const db = (locals.runtime?.env as { PLATFORM_DB?: D1Database } | undefined)?.PLATFORM_DB;
+  const kv = (locals.runtime?.env as { PLATFORM_CACHE?: KVNamespace } | undefined)?.PLATFORM_CACHE;
+
+  if (!db || !kv) {
+    return new Response(JSON.stringify({ error: 'Bindings not available' }), {
+      status: 503,
+      headers: { 'Content-Type': 'application/json' },
+    });
+  }
+
+  try {
+    const approved = await db
+      .prepare(
+        `SELECT id, pattern_type, pattern_value, error_type, priority
+         FROM transient_pattern_suggestions
+         WHERE status = 'approved'
+         ORDER BY match_count DESC
+         LIMIT 500`
+      )
+      .all();
+
+    const patterns = approved.results ?? [];
+    await kv.put('PATTERNS:DYNAMIC:APPROVED', JSON.stringify(patterns), { expirationTtl: 86400 });
+
+    return new Response(
+      JSON.stringify({ refreshed: true, count: patterns.length }),
+      { headers: { 'Content-Type': 'application/json' } }
+    );
+  } catch {
+    return new Response(JSON.stringify({ error: 'Cache refresh failed' }), {
+      status: 500,
+      headers: { 'Content-Type': 'application/json' },
+    });
+  }
+};

package/templates/full/dashboard/src/pages/api/patterns/discover.ts

@@ -0,0 +1,36 @@
+import type { APIRoute } from 'astro';
+
+export const POST: APIRoute = async ({ locals }) => {
+  const db = (locals.runtime?.env as { PLATFORM_DB?: D1Database } | undefined)?.PLATFORM_DB;
+
+  if (!db) {
+    return new Response(JSON.stringify({ error: 'Database not available' }), {
+      status: 503,
+      headers: { 'Content-Type': 'application/json' },
+    });
+  }
+
+  try {
+    const unclassified = await db
+      .prepare(
+        `SELECT fingerprint, script_name, error_message, priority, occurrence_count
+         FROM error_occurrences
+         WHERE fingerprint NOT IN (
+           SELECT pattern_value FROM transient_pattern_suggestions WHERE status = 'approved'
+         )
+         ORDER BY occurrence_count DESC
+         LIMIT 50`
+      )
+      .all();
+
+    return new Response(
+      JSON.stringify({ discovered: unclassified.results?.length ?? 0, errors: unclassified.results ?? [] }),
+      { headers: { 'Content-Type': 'application/json' } }
+    );
+  } catch {
+    return new Response(JSON.stringify({ error: 'Discovery failed' }), {
+      status: 500,
+      headers: { 'Content-Type': 'application/json' },
+    });
+  }
+};

package/templates/full/dashboard/src/pages/api/patterns/index.ts

@@ -0,0 +1,36 @@
+import type { APIRoute } from 'astro';
+
+export const GET: APIRoute = async ({ locals, url }) => {
+  const db = (locals.runtime?.env as { PLATFORM_DB?: D1Database } | undefined)?.PLATFORM_DB;
+
+  if (!db) {
+    return new Response(JSON.stringify({ suggestions: [] }), {
+      headers: { 'Content-Type': 'application/json' },
+    });
+  }
+
+  const status = url.searchParams.get('status') ?? 'pending';
+
+  try {
+    const suggestions = await db
+      .prepare(
+        `SELECT id, pattern_type, pattern_value, error_type, priority, status,
+                match_count, source, created_at, reviewed_at, reviewer_notes
+         FROM transient_pattern_suggestions
+         WHERE status = ?
+         ORDER BY created_at DESC
+         LIMIT 50`
+      )
+      .bind(status)
+      .all();
+
+    return new Response(JSON.stringify({ suggestions: suggestions.results ?? [] }), {
+      headers: { 'Content-Type': 'application/json', 'Cache-Control': 'max-age=30' },
+    });
+  } catch {
+    return new Response(JSON.stringify({ suggestions: [] }), {
+      status: 500,
+      headers: { 'Content-Type': 'application/json' },
+    });
+  }
+};

package/templates/full/dashboard/src/pages/api/patterns/ready-for-review.ts

@@ -0,0 +1,39 @@
+import type { APIRoute } from 'astro';
+
+export const GET: APIRoute = async ({ locals }) => {
+  const db = (locals.runtime?.env as { PLATFORM_DB?: D1Database } | undefined)?.PLATFORM_DB;
+
+  if (!db) {
+    return new Response(JSON.stringify({ patterns: [], count: 0 }), {
+      headers: { 'Content-Type': 'application/json' },
+    });
+  }
+
+  try {
+    const patterns = await db
+      .prepare(
+        `SELECT s.id, s.pattern_type, s.pattern_value, s.error_type, s.priority,
+                s.match_count, s.source, s.created_at,
+                COUNT(e.id) as evidence_count
+         FROM transient_pattern_suggestions s
+         LEFT JOIN pattern_match_evidence e ON e.suggestion_id = s.id
+         WHERE s.status = 'shadow'
+           AND s.match_count >= 3
+           AND s.created_at < datetime('now', '-3 days')
+         GROUP BY s.id
+         ORDER BY s.match_count DESC
+         LIMIT 20`
+      )
+      .all();
+
+    return new Response(
+      JSON.stringify({ patterns: patterns.results ?? [], count: patterns.results?.length ?? 0 }),
+      { headers: { 'Content-Type': 'application/json', 'Cache-Control': 'max-age=60' } }
+    );
+  } catch {
+    return new Response(JSON.stringify({ patterns: [], count: 0 }), {
+      status: 500,
+      headers: { 'Content-Type': 'application/json' },
+    });
+  }
+};

package/templates/full/dashboard/src/pages/api/patterns/reject.ts

@@ -0,0 +1,54 @@
+import type { APIRoute } from 'astro';
+
+export const POST: APIRoute = async ({ locals, request }) => {
+  const db = (locals.runtime?.env as { PLATFORM_DB?: D1Database } | undefined)?.PLATFORM_DB;
+  const patternApi = (locals.runtime?.env as { PATTERN_DISCOVERY_API?: Fetcher } | undefined)?.PATTERN_DISCOVERY_API;
+
+  if (!db && !patternApi) {
+    return new Response(JSON.stringify({ error: 'No database or pattern API available' }), {
+      status: 500,
+      headers: { 'Content-Type': 'application/json' },
+    });
+  }
+
+  try {
+    const body = (await request.json()) as { id: number; notes?: string };
+
+    if (patternApi) {
+      const controller = new AbortController();
+      const timeout = setTimeout(() => controller.abort(), 5000);
+      const res = await patternApi.fetch(
+        `https://internal/suggestions/${body.id}?action=reject`,
+        {
+          method: 'POST',
+          headers: { 'Content-Type': 'application/json' },
+          body: JSON.stringify({ notes: body.notes }),
+          signal: controller.signal,
+        }
+      );
+      clearTimeout(timeout);
+      if (!res.ok) throw new Error(`Pattern API returned ${res.status}`);
+      return new Response(JSON.stringify({ ok: true }), {
+        headers: { 'Content-Type': 'application/json' },
+      });
+    }
+
+    await db!
+      .prepare(
+        `UPDATE transient_pattern_suggestions
+         SET status = 'rejected', reviewed_at = datetime('now'), reviewer_notes = ?
+         WHERE id = ?`
+      )
+      .bind(body.notes ?? null, body.id)
+      .run();
+
+    return new Response(JSON.stringify({ ok: true }), {
+      headers: { 'Content-Type': 'application/json' },
+    });
+  } catch (error) {
+    return new Response(
+      JSON.stringify({ error: error instanceof Error ? error.message : 'Failed to reject' }),
+      { status: 500, headers: { 'Content-Type': 'application/json' } }
+    );
+  }
+};

package/templates/full/dashboard/src/pages/api/patterns/stats.ts

@@ -0,0 +1,39 @@
+import type { APIRoute } from 'astro';
+
+export const GET: APIRoute = async ({ locals }) => {
+  const db = (locals.runtime?.env as { PLATFORM_DB?: D1Database } | undefined)?.PLATFORM_DB;
+
+  if (!db) {
+    return new Response(JSON.stringify({ byStatus: {}, total: 0 }), {
+      headers: { 'Content-Type': 'application/json' },
+    });
+  }
+
+  try {
+    const counts = await db
+      .prepare(
+        `SELECT status, COUNT(*) as count
+         FROM transient_pattern_suggestions
+         GROUP BY status
+         LIMIT 10`
+      )
+      .all<{ status: string; count: number }>();
+
+    const byStatus: Record<string, number> = {};
+    let total = 0;
+    for (const row of counts.results ?? []) {
+      byStatus[row.status] = row.count;
+      total += row.count;
+    }
+
+    return new Response(
+      JSON.stringify({ byStatus, total }),
+      { headers: { 'Content-Type': 'application/json', 'Cache-Control': 'max-age=60' } }
+    );
+  } catch {
+    return new Response(JSON.stringify({ byStatus: {}, total: 0 }), {
+      status: 500,
+      headers: { 'Content-Type': 'application/json' },
+    });
+  }
+};

package/templates/full/dashboard/src/pages/api/patterns/suggestions.ts

@@ -0,0 +1,43 @@
+import type { APIRoute } from 'astro';
+
+export const GET: APIRoute = async ({ locals, url }) => {
+  const db = (locals.runtime?.env as { PLATFORM_DB?: D1Database } | undefined)?.PLATFORM_DB;
+
+  if (!db) {
+    return new Response(JSON.stringify({ suggestions: [], total: 0 }), {
+      headers: { 'Content-Type': 'application/json' },
+    });
+  }
+
+  const status = url.searchParams.get('status') ?? 'pending';
+  const limit = Math.min(parseInt(url.searchParams.get('limit') ?? '50'), 100);
+
+  try {
+    const suggestions = await db
+      .prepare(
+        `SELECT id, pattern_type, pattern_value, error_type, priority, status,
+                match_count, source, created_at, reviewed_at, reviewer_notes, is_protected
+         FROM transient_pattern_suggestions
+         WHERE status = ?
+         ORDER BY match_count DESC, created_at DESC
+         LIMIT ?`
+      )
+      .bind(status, limit)
+      .all();
+
+    const total = await db
+      .prepare(`SELECT COUNT(*) as count FROM transient_pattern_suggestions WHERE status = ? LIMIT 1`)
+      .bind(status)
+      .first<{ count: number }>();
+
+    return new Response(
+      JSON.stringify({ suggestions: suggestions.results ?? [], total: total?.count ?? 0 }),
+      { headers: { 'Content-Type': 'application/json', 'Cache-Control': 'max-age=30' } }
+    );
+  } catch {
+    return new Response(JSON.stringify({ suggestions: [], total: 0 }), {
+      status: 500,
+      headers: { 'Content-Type': 'application/json' },
+    });
+  }
+};

package/templates/full/dashboard/src/pages/api/reports/audit.ts

@@ -0,0 +1,45 @@
+import type { APIRoute } from 'astro';
+
+export const GET: APIRoute = async ({ locals, url }) => {
+  const db = (locals.runtime?.env as { PLATFORM_DB?: D1Database } | undefined)?.PLATFORM_DB;
+
+  if (!db) {
+    return new Response(JSON.stringify({ reports: [] }), {
+      headers: { 'Content-Type': 'application/json' },
+    });
+  }
+
+  const project = url.searchParams.get('project');
+  const limit = Math.min(parseInt(url.searchParams.get('limit') ?? '10'), 50);
+
+  try {
+    const query = project
+      ? `SELECT id, project, scan_type, ai_judge_score, sdk_score, observability_score,
+                cost_protection_score, security_score, scan_date, focused_dimensions
+         FROM audit_results
+         WHERE project = ?
+         ORDER BY scan_date DESC
+         LIMIT ?`
+      : `SELECT id, project, scan_type, ai_judge_score, sdk_score, observability_score,
+                cost_protection_score, security_score, scan_date, focused_dimensions
+         FROM audit_results
+         ORDER BY scan_date DESC
+         LIMIT ?`;
+
+    const stmt = project
+      ? db.prepare(query).bind(project, limit)
+      : db.prepare(query).bind(limit);
+
+    const reports = await stmt.all();
+
+    return new Response(
+      JSON.stringify({ reports: reports.results ?? [] }),
+      { headers: { 'Content-Type': 'application/json', 'Cache-Control': 'max-age=120' } }
+    );
+  } catch {
+    return new Response(JSON.stringify({ reports: [] }), {
+      status: 500,
+      headers: { 'Content-Type': 'application/json' },
+    });
+  }
+};

package/templates/full/dashboard/src/pages/api/reports/usage.ts

@@ -0,0 +1,52 @@
+import type { APIRoute } from 'astro';
+
+export const GET: APIRoute = async ({ locals, url }) => {
+  const db = (locals.runtime?.env as { PLATFORM_DB?: D1Database } | undefined)?.PLATFORM_DB;
+
+  if (!db) {
+    return new Response(JSON.stringify({ daily: [], monthly: [] }), {
+      headers: { 'Content-Type': 'application/json' },
+    });
+  }
+
+  const days = Math.min(parseInt(url.searchParams.get('days') ?? '30'), 90);
+  const startDate = new Date();
+  startDate.setDate(startDate.getDate() - days);
+  const startStr = startDate.toISOString().slice(0, 10);
+
+  try {
+    const [daily, monthly] = await Promise.all([
+      db
+        .prepare(
+          `SELECT snapshot_date, d1_reads, d1_writes, kv_reads, kv_writes,
+                  r2_reads, r2_writes, worker_requests, total_cost_usd
+           FROM daily_usage_rollups
+           WHERE project = 'all' AND snapshot_date >= ?
+           ORDER BY snapshot_date ASC
+           LIMIT 90`
+        )
+        .bind(startStr)
+        .all(),
+      db
+        .prepare(
+          `SELECT snapshot_month, d1_reads, d1_writes, kv_reads, kv_writes,
+                  r2_reads, r2_writes, worker_requests, total_cost_usd
+           FROM monthly_usage_rollups
+           WHERE project = 'all'
+           ORDER BY snapshot_month DESC
+           LIMIT 12`
+        )
+        .all(),
+    ]);
+
+    return new Response(
+      JSON.stringify({ daily: daily.results ?? [], monthly: monthly.results ?? [] }),
+      { headers: { 'Content-Type': 'application/json', 'Cache-Control': 'max-age=300' } }
+    );
+  } catch {
+    return new Response(JSON.stringify({ daily: [], monthly: [] }), {
+      status: 500,
+      headers: { 'Content-Type': 'application/json' },
+    });
+  }
+};

package/templates/full/dashboard/src/pages/api/search/index.ts

@@ -0,0 +1,74 @@
+import type { APIRoute } from 'astro';
+
+export const GET: APIRoute = async ({ locals, url }) => {
+  const searchApi = (locals.runtime?.env as { SEARCH_API?: Fetcher } | undefined)?.SEARCH_API;
+  const db = (locals.runtime?.env as { PLATFORM_DB?: D1Database } | undefined)?.PLATFORM_DB;
+  const query = url.searchParams.get('q')?.trim();
+
+  if (!query || query.length < 2) {
+    return new Response(JSON.stringify({ results: [], query: '' }), {
+      headers: { 'Content-Type': 'application/json' },
+    });
+  }
+
+  // Prefer search API service binding
+  if (searchApi) {
+    try {
+      const controller = new AbortController();
+      const timeout = setTimeout(() => controller.abort(), 5000);
+      const res = await searchApi.fetch(`https://internal/search?q=${encodeURIComponent(query)}`, {
+        signal: controller.signal,
+      });
+      clearTimeout(timeout);
+      if (res.ok) {
+        const data = await res.json();
+        return new Response(JSON.stringify(data), {
+          headers: { 'Content-Type': 'application/json', 'Cache-Control': 'max-age=30' },
+        });
+      }
+    } catch {
+      // Fall through to D1 fallback
+    }
+  }
+
+  // D1 fallback: basic LIKE search
+  if (!db) {
+    return new Response(JSON.stringify({ results: [], query }), {
+      headers: { 'Content-Type': 'application/json' },
+    });
+  }
+
+  try {
+    const pattern = `%${query}%`;
+    const errors = await db
+      .prepare(
+        `SELECT 'error' as type, fingerprint as id, normalized_message as title, script_name as subtitle
+         FROM error_occurrences
+         WHERE normalized_message LIKE ? OR script_name LIKE ?
+         LIMIT 5`
+      )
+      .bind(pattern, pattern)
+      .all();
+
+    const notifications = await db
+      .prepare(
+        `SELECT 'notification' as type, id, title, category as subtitle
+         FROM notifications
+         WHERE title LIKE ?
+         LIMIT 5`
+      )
+      .bind(pattern)
+      .all();
+
+    const results = [...(errors.results ?? []), ...(notifications.results ?? [])];
+
+    return new Response(JSON.stringify({ results, query }), {
+      headers: { 'Content-Type': 'application/json', 'Cache-Control': 'max-age=30' },
+    });
+  } catch {
+    return new Response(JSON.stringify({ results: [], query }), {
+      status: 500,
+      headers: { 'Content-Type': 'application/json' },
+    });
+  }
+};

package/templates/full/dashboard/src/pages/api/search/reindex.ts

@@ -0,0 +1,28 @@
+import type { APIRoute } from 'astro';
+
+export const POST: APIRoute = async ({ locals }) => {
+  const db = (locals.runtime?.env as { PLATFORM_DB?: D1Database } | undefined)?.PLATFORM_DB;
+
+  if (!db) {
+    return new Response(JSON.stringify({ error: 'Database not available' }), {
+      status: 503,
+      headers: { 'Content-Type': 'application/json' },
+    });
+  }
+
+  try {
+    await db
+      .prepare(`INSERT INTO search_index(search_index) VALUES('rebuild')`)
+      .run();
+
+    return new Response(
+      JSON.stringify({ ok: true, message: 'FTS5 reindex started' }),
+      { headers: { 'Content-Type': 'application/json' } }
+    );
+  } catch {
+    return new Response(JSON.stringify({ error: 'Reindex failed' }), {
+      status: 500,
+      headers: { 'Content-Type': 'application/json' },
+    });
+  }
+};