@littlebearapps/platform-admin-sdk 1.5.0 → 2.1.0

package/templates/full/dashboard/src/lib/usage/providers.ts

@@ -0,0 +1,331 @@
+/**
+ * Third-Party Provider Stubs
+ *
+ * Interface definitions and fetcher stubs for third-party service usage tracking.
+ * These will be implemented incrementally as integrations are built.
+ *
+ * Supported providers (planned):
+ * - GitHub (Actions minutes, Advanced Security seats, storage)
+ * - OpenAI (API usage, tokens)
+ * - Apify (Actor runs, compute units)
+ * - Anthropic (API usage, tokens)
+ * - Resend (emails sent)
+ */
+
+/**
+ * Provider identifier
+ */
+export type ProviderId = 'github' | 'openai' | 'apify' | 'anthropic' | 'resend';
+
+/**
+ * Usage record from a third-party provider
+ */
+export interface ThirdPartyUsageRecord {
+  /** Provider identifier */
+  provider: ProviderId;
+  /** Type of resource (e.g., 'actions_minutes', 'api_tokens') */
+  resourceType: string;
+  /** Optional specific resource name */
+  resourceName?: string;
+  /** Numeric usage value */
+  usageValue: number;
+  /** Unit of measurement */
+  usageUnit: string;
+  /** Estimated cost in USD */
+  costUsd: number;
+  /** When this data was collected */
+  collectedAt: Date;
+  /** Period this usage covers */
+  periodStart: Date;
+  periodEnd: Date;
+}
+
+/**
+ * Provider configuration
+ */
+export interface ProviderConfig {
+  /** Provider identifier */
+  id: ProviderId;
+  /** Human-readable name */
+  name: string;
+  /** Whether the provider is currently enabled */
+  enabled: boolean;
+  /** API key environment variable name */
+  apiKeyEnvVar: string;
+  /** Pricing model description */
+  pricingModel: string;
+  /** Documentation URL */
+  docsUrl: string;
+}
+
+/**
+ * Provider interface for fetching usage data
+ */
+export interface Provider {
+  /** Provider configuration */
+  config: ProviderConfig;
+
+  /**
+   * Fetch current usage data from the provider
+   * @param apiKey - API key for authentication
+   * @param options - Additional fetch options
+   * @returns Array of usage records
+   */
+  fetchUsage(
+    apiKey: string,
+    options?: {
+      startDate?: Date;
+      endDate?: Date;
+      includeBreakdown?: boolean;
+    }
+  ): Promise<ThirdPartyUsageRecord[]>;
+
+  /**
+   * Check if the provider credentials are valid
+   * @param apiKey - API key to validate
+   */
+  validateCredentials(apiKey: string): Promise<boolean>;
+}
+
+/**
+ * Provider configurations
+ */
+export const PROVIDER_CONFIGS: Record<ProviderId, ProviderConfig> = {
+  github: {
+    id: 'github',
+    name: 'GitHub',
+    enabled: true,
+    apiKeyEnvVar: 'GITHUB_TOKEN',
+    pricingModel: 'Actions minutes, Advanced Security seats, storage',
+    docsUrl: 'https://docs.github.com/en/billing',
+  },
+  openai: {
+    id: 'openai',
+    name: 'OpenAI',
+    enabled: false,
+    apiKeyEnvVar: 'OPENAI_ADMIN_API_KEY',
+    pricingModel: 'Per-token pricing for API usage',
+    docsUrl: 'https://platform.openai.com/docs/api-reference/usage',
+  },
+  apify: {
+    id: 'apify',
+    name: 'Apify',
+    enabled: false,
+    apiKeyEnvVar: 'APIFY_API_KEY',
+    pricingModel: 'Compute units for actor runs',
+    docsUrl: 'https://docs.apify.com/platform/billing',
+  },
+  anthropic: {
+    id: 'anthropic',
+    name: 'Anthropic',
+    enabled: false,
+    apiKeyEnvVar: 'ANTHROPIC_ADMIN_API_KEY',
+    pricingModel: 'Per-token pricing for Claude API',
+    docsUrl: 'https://docs.anthropic.com/en/api/admin-api',
+  },
+  resend: {
+    id: 'resend',
+    name: 'Resend',
+    enabled: false,
+    apiKeyEnvVar: 'RESEND_API_KEY',
+    pricingModel: 'Per-email pricing',
+    docsUrl: 'https://resend.com/docs/api-reference',
+  },
+};
+
+// =============================================================================
+// PROVIDER FETCHER STUBS
+// =============================================================================
+// Each stub returns an empty array with a TODO comment.
+// Implement these as integrations are built.
+// =============================================================================
+
+/**
+ * GitHub Usage Fetcher
+ *
+ * TODO: Implement GitHub billing API integration
+ * - GET /orgs/{org}/settings/billing/actions
+ * - GET /orgs/{org}/settings/billing/advanced-security
+ * - GET /orgs/{org}/settings/billing/shared-storage
+ *
+ * @see https://docs.github.com/en/rest/billing
+ */
+export async function fetchGitHubUsage(
+  _apiKey: string,
+  _options?: {
+    organization?: string;
+    startDate?: Date;
+    endDate?: Date;
+  }
+): Promise<ThirdPartyUsageRecord[]> {
+  // TODO: Implement GitHub billing API calls
+  // 1. Fetch Actions minutes usage
+  // 2. Fetch Advanced Security seats
+  // 3. Fetch shared storage usage
+  // 4. Calculate costs based on GitHub pricing
+  console.log('[providers] GitHub usage fetcher not yet implemented');
+  return [];
+}
+
+/**
+ * OpenAI Usage Fetcher
+ *
+ * TODO: Implement OpenAI Usage API integration
+ * - GET /v1/usage (requires admin API key: sk-admin-...)
+ *
+ * @see https://platform.openai.com/docs/api-reference/usage
+ */
+export async function fetchOpenAIUsage(
+  _apiKey: string,
+  _options?: {
+    startDate?: Date;
+    endDate?: Date;
+  }
+): Promise<ThirdPartyUsageRecord[]> {
+  // TODO: Implement OpenAI Usage API calls
+  // 1. Fetch token usage by model
+  // 2. Calculate costs based on model pricing
+  // 3. Group by date for time-series data
+  console.log('[providers] OpenAI usage fetcher not yet implemented');
+  return [];
+}
+
+/**
+ * Apify Usage Fetcher
+ *
+ * TODO: Implement Apify billing API integration
+ * - GET /v2/users/{userId}/usage
+ *
+ * @see https://docs.apify.com/api/v2#/reference/users/account-usage
+ */
+export async function fetchApifyUsage(
+  _apiKey: string,
+  _options?: {
+    startDate?: Date;
+    endDate?: Date;
+  }
+): Promise<ThirdPartyUsageRecord[]> {
+  // TODO: Implement Apify usage API calls
+  // 1. Fetch compute unit usage
+  // 2. Fetch actor run counts
+  // 3. Calculate costs based on Apify pricing
+  console.log('[providers] Apify usage fetcher not yet implemented');
+  return [];
+}
+
+/**
+ * Anthropic Usage Fetcher
+ *
+ * TODO: Implement Anthropic Admin API integration
+ * - GET /v1/organizations/{organization_id}/usage (Admin API)
+ *
+ * @see https://docs.anthropic.com/en/api/admin-api
+ */
+export async function fetchAnthropicUsage(
+  _apiKey: string,
+  _options?: {
+    organizationId?: string;
+    startDate?: Date;
+    endDate?: Date;
+  }
+): Promise<ThirdPartyUsageRecord[]> {
+  // TODO: Implement Anthropic Admin API calls
+  // 1. Fetch token usage by model
+  // 2. Calculate costs based on Claude pricing
+  // 3. Group by date for time-series data
+  console.log('[providers] Anthropic usage fetcher not yet implemented');
+  return [];
+}
+
+/**
+ * Resend Usage Fetcher
+ *
+ * TODO: Implement Resend API integration
+ * - No direct usage endpoint; track via webhook or count emails
+ *
+ * @see https://resend.com/docs/api-reference
+ */
+export async function fetchResendUsage(
+  _apiKey: string,
+  _options?: {
+    startDate?: Date;
+    endDate?: Date;
+  }
+): Promise<ThirdPartyUsageRecord[]> {
+  // TODO: Implement Resend usage tracking
+  // 1. Query sent emails count (if available)
+  // 2. Or track via our own email logs
+  // 3. Calculate costs based on Resend pricing
+  console.log('[providers] Resend usage fetcher not yet implemented');
+  return [];
+}
+
+// =============================================================================
+// AGGREGATION UTILITIES
+// =============================================================================
+
+/**
+ * Fetch usage from all enabled providers
+ */
+export async function fetchAllProviderUsage(
+  apiKeys: Partial<Record<ProviderId, string>>,
+  options?: {
+    startDate?: Date;
+    endDate?: Date;
+  }
+): Promise<ThirdPartyUsageRecord[]> {
+  const results: ThirdPartyUsageRecord[] = [];
+
+  // Only fetch from providers that have API keys configured
+  const fetchPromises: Promise<ThirdPartyUsageRecord[]>[] = [];
+
+  if (apiKeys.github) {
+    fetchPromises.push(fetchGitHubUsage(apiKeys.github, options));
+  }
+  if (apiKeys.openai) {
+    fetchPromises.push(fetchOpenAIUsage(apiKeys.openai, options));
+  }
+  if (apiKeys.apify) {
+    fetchPromises.push(fetchApifyUsage(apiKeys.apify, options));
+  }
+  if (apiKeys.anthropic) {
+    fetchPromises.push(fetchAnthropicUsage(apiKeys.anthropic, options));
+  }
+  if (apiKeys.resend) {
+    fetchPromises.push(fetchResendUsage(apiKeys.resend, options));
+  }
+
+  // Fetch all in parallel, handle individual failures gracefully
+  const settledResults = await Promise.allSettled(fetchPromises);
+
+  for (const result of settledResults) {
+    if (result.status === 'fulfilled') {
+      results.push(...result.value);
+    } else {
+      console.error('[providers] Failed to fetch from provider:', result.reason);
+    }
+  }
+
+  return results;
+}
+
+/**
+ * Calculate total third-party costs from usage records
+ */
+export function calculateThirdPartyCosts(records: ThirdPartyUsageRecord[]): {
+  byProvider: Record<ProviderId, number>;
+  total: number;
+} {
+  const byProvider: Partial<Record<ProviderId, number>> = {};
+  let total = 0;
+
+  for (const record of records) {
+    byProvider[record.provider] = (byProvider[record.provider] ?? 0) + record.costUsd;
+    total += record.costUsd;
+  }
+
+  return {
+    byProvider: byProvider as Record<ProviderId, number>,
+    total,
+  };
+}

package/templates/full/dashboard/src/pages/api/notifications/[id]/read.ts

@@ -0,0 +1,37 @@
+import type { APIRoute } from 'astro';
+
+export const POST: APIRoute = async ({ params, locals }) => {
+  const db = (locals.runtime?.env as { PLATFORM_DB?: D1Database } | undefined)?.PLATFORM_DB;
+
+  if (!db) {
+    return new Response(JSON.stringify({ error: 'Database not available' }), {
+      status: 503,
+      headers: { 'Content-Type': 'application/json' },
+    });
+  }
+
+  const id = params.id;
+  if (!id) {
+    return new Response(JSON.stringify({ error: 'Missing notification id' }), {
+      status: 400,
+      headers: { 'Content-Type': 'application/json' },
+    });
+  }
+
+  try {
+    await db
+      .prepare(`UPDATE notifications SET read_at = unixepoch() WHERE id = ? AND read_at IS NULL`)
+      .bind(id)
+      .run();
+
+    return new Response(
+      JSON.stringify({ ok: true }),
+      { headers: { 'Content-Type': 'application/json' } }
+    );
+  } catch {
+    return new Response(JSON.stringify({ error: 'Failed to mark as read' }), {
+      status: 500,
+      headers: { 'Content-Type': 'application/json' },
+    });
+  }
+};

package/templates/full/dashboard/src/pages/api/notifications/read-all.ts

@@ -0,0 +1,28 @@
+import type { APIRoute } from 'astro';
+
+export const POST: APIRoute = async ({ locals }) => {
+  const db = (locals.runtime?.env as { PLATFORM_DB?: D1Database } | undefined)?.PLATFORM_DB;
+
+  if (!db) {
+    return new Response(JSON.stringify({ error: 'Database not available' }), {
+      status: 503,
+      headers: { 'Content-Type': 'application/json' },
+    });
+  }
+
+  try {
+    const result = await db
+      .prepare(`UPDATE notifications SET read_at = unixepoch() WHERE read_at IS NULL`)
+      .run();
+
+    return new Response(
+      JSON.stringify({ ok: true, updated: result.meta?.changes ?? 0 }),
+      { headers: { 'Content-Type': 'application/json' } }
+    );
+  } catch {
+    return new Response(JSON.stringify({ error: 'Failed to mark all as read' }), {
+      status: 500,
+      headers: { 'Content-Type': 'application/json' },
+    });
+  }
+};

package/templates/full/dashboard/src/pages/api/patterns/cache-refresh.ts

@@ -0,0 +1,38 @@
+import type { APIRoute } from 'astro';
+
+export const POST: APIRoute = async ({ locals }) => {
+  const db = (locals.runtime?.env as { PLATFORM_DB?: D1Database } | undefined)?.PLATFORM_DB;
+  const kv = (locals.runtime?.env as { PLATFORM_CACHE?: KVNamespace } | undefined)?.PLATFORM_CACHE;
+
+  if (!db || !kv) {
+    return new Response(JSON.stringify({ error: 'Bindings not available' }), {
+      status: 503,
+      headers: { 'Content-Type': 'application/json' },
+    });
+  }
+
+  try {
+    const approved = await db
+      .prepare(
+        `SELECT id, pattern_type, pattern_value, error_type, priority
+         FROM transient_pattern_suggestions
+         WHERE status = 'approved'
+         ORDER BY match_count DESC
+         LIMIT 500`
+      )
+      .all();
+
+    const patterns = approved.results ?? [];
+    await kv.put('PATTERNS:DYNAMIC:APPROVED', JSON.stringify(patterns), { expirationTtl: 86400 });
+
+    return new Response(
+      JSON.stringify({ refreshed: true, count: patterns.length }),
+      { headers: { 'Content-Type': 'application/json' } }
+    );
+  } catch {
+    return new Response(JSON.stringify({ error: 'Cache refresh failed' }), {
+      status: 500,
+      headers: { 'Content-Type': 'application/json' },
+    });
+  }
+};

package/templates/full/dashboard/src/pages/api/patterns/discover.ts

@@ -0,0 +1,36 @@
+import type { APIRoute } from 'astro';
+
+export const POST: APIRoute = async ({ locals }) => {
+  const db = (locals.runtime?.env as { PLATFORM_DB?: D1Database } | undefined)?.PLATFORM_DB;
+
+  if (!db) {
+    return new Response(JSON.stringify({ error: 'Database not available' }), {
+      status: 503,
+      headers: { 'Content-Type': 'application/json' },
+    });
+  }
+
+  try {
+    const unclassified = await db
+      .prepare(
+        `SELECT fingerprint, script_name, error_message, priority, occurrence_count
+         FROM error_occurrences
+         WHERE fingerprint NOT IN (
+           SELECT pattern_value FROM transient_pattern_suggestions WHERE status = 'approved'
+         )
+         ORDER BY occurrence_count DESC
+         LIMIT 50`
+      )
+      .all();
+
+    return new Response(
+      JSON.stringify({ discovered: unclassified.results?.length ?? 0, errors: unclassified.results ?? [] }),
+      { headers: { 'Content-Type': 'application/json' } }
+    );
+  } catch {
+    return new Response(JSON.stringify({ error: 'Discovery failed' }), {
+      status: 500,
+      headers: { 'Content-Type': 'application/json' },
+    });
+  }
+};

package/templates/full/dashboard/src/pages/api/patterns/ready-for-review.ts

@@ -0,0 +1,39 @@
+import type { APIRoute } from 'astro';
+
+export const GET: APIRoute = async ({ locals }) => {
+  const db = (locals.runtime?.env as { PLATFORM_DB?: D1Database } | undefined)?.PLATFORM_DB;
+
+  if (!db) {
+    return new Response(JSON.stringify({ patterns: [], count: 0 }), {
+      headers: { 'Content-Type': 'application/json' },
+    });
+  }
+
+  try {
+    const patterns = await db
+      .prepare(
+        `SELECT s.id, s.pattern_type, s.pattern_value, s.error_type, s.priority,
+                s.match_count, s.source, s.created_at,
+                COUNT(e.id) as evidence_count
+         FROM transient_pattern_suggestions s
+         LEFT JOIN pattern_match_evidence e ON e.suggestion_id = s.id
+         WHERE s.status = 'shadow'
+           AND s.match_count >= 3
+           AND s.created_at < datetime('now', '-3 days')
+         GROUP BY s.id
+         ORDER BY s.match_count DESC
+         LIMIT 20`
+      )
+      .all();
+
+    return new Response(
+      JSON.stringify({ patterns: patterns.results ?? [], count: patterns.results?.length ?? 0 }),
+      { headers: { 'Content-Type': 'application/json', 'Cache-Control': 'max-age=60' } }
+    );
+  } catch {
+    return new Response(JSON.stringify({ patterns: [], count: 0 }), {
+      status: 500,
+      headers: { 'Content-Type': 'application/json' },
+    });
+  }
+};

package/templates/full/dashboard/src/pages/api/patterns/stats.ts

@@ -0,0 +1,39 @@
+import type { APIRoute } from 'astro';
+
+export const GET: APIRoute = async ({ locals }) => {
+  const db = (locals.runtime?.env as { PLATFORM_DB?: D1Database } | undefined)?.PLATFORM_DB;
+
+  if (!db) {
+    return new Response(JSON.stringify({ byStatus: {}, total: 0 }), {
+      headers: { 'Content-Type': 'application/json' },
+    });
+  }
+
+  try {
+    const counts = await db
+      .prepare(
+        `SELECT status, COUNT(*) as count
+         FROM transient_pattern_suggestions
+         GROUP BY status
+         LIMIT 10`
+      )
+      .all<{ status: string; count: number }>();
+
+    const byStatus: Record<string, number> = {};
+    let total = 0;
+    for (const row of counts.results ?? []) {
+      byStatus[row.status] = row.count;
+      total += row.count;
+    }
+
+    return new Response(
+      JSON.stringify({ byStatus, total }),
+      { headers: { 'Content-Type': 'application/json', 'Cache-Control': 'max-age=60' } }
+    );
+  } catch {
+    return new Response(JSON.stringify({ byStatus: {}, total: 0 }), {
+      status: 500,
+      headers: { 'Content-Type': 'application/json' },
+    });
+  }
+};

package/templates/full/dashboard/src/pages/api/patterns/suggestions.ts

@@ -0,0 +1,43 @@
+import type { APIRoute } from 'astro';
+
+export const GET: APIRoute = async ({ locals, url }) => {
+  const db = (locals.runtime?.env as { PLATFORM_DB?: D1Database } | undefined)?.PLATFORM_DB;
+
+  if (!db) {
+    return new Response(JSON.stringify({ suggestions: [], total: 0 }), {
+      headers: { 'Content-Type': 'application/json' },
+    });
+  }
+
+  const status = url.searchParams.get('status') ?? 'pending';
+  const limit = Math.min(parseInt(url.searchParams.get('limit') ?? '50'), 100);
+
+  try {
+    const suggestions = await db
+      .prepare(
+        `SELECT id, pattern_type, pattern_value, error_type, priority, status,
+                match_count, source, created_at, reviewed_at, reviewer_notes, is_protected
+         FROM transient_pattern_suggestions
+         WHERE status = ?
+         ORDER BY match_count DESC, created_at DESC
+         LIMIT ?`
+      )
+      .bind(status, limit)
+      .all();
+
+    const total = await db
+      .prepare(`SELECT COUNT(*) as count FROM transient_pattern_suggestions WHERE status = ? LIMIT 1`)
+      .bind(status)
+      .first<{ count: number }>();
+
+    return new Response(
+      JSON.stringify({ suggestions: suggestions.results ?? [], total: total?.count ?? 0 }),
+      { headers: { 'Content-Type': 'application/json', 'Cache-Control': 'max-age=30' } }
+    );
+  } catch {
+    return new Response(JSON.stringify({ suggestions: [], total: 0 }), {
+      status: 500,
+      headers: { 'Content-Type': 'application/json' },
+    });
+  }
+};

package/templates/full/dashboard/src/pages/api/reports/audit.ts

@@ -0,0 +1,45 @@
+import type { APIRoute } from 'astro';
+
+export const GET: APIRoute = async ({ locals, url }) => {
+  const db = (locals.runtime?.env as { PLATFORM_DB?: D1Database } | undefined)?.PLATFORM_DB;
+
+  if (!db) {
+    return new Response(JSON.stringify({ reports: [] }), {
+      headers: { 'Content-Type': 'application/json' },
+    });
+  }
+
+  const project = url.searchParams.get('project');
+  const limit = Math.min(parseInt(url.searchParams.get('limit') ?? '10'), 50);
+
+  try {
+    const query = project
+      ? `SELECT id, project, scan_type, ai_judge_score, sdk_score, observability_score,
+                cost_protection_score, security_score, scan_date, focused_dimensions
+         FROM audit_results
+         WHERE project = ?
+         ORDER BY scan_date DESC
+         LIMIT ?`
+      : `SELECT id, project, scan_type, ai_judge_score, sdk_score, observability_score,
+                cost_protection_score, security_score, scan_date, focused_dimensions
+         FROM audit_results
+         ORDER BY scan_date DESC
+         LIMIT ?`;
+
+    const stmt = project
+      ? db.prepare(query).bind(project, limit)
+      : db.prepare(query).bind(limit);
+
+    const reports = await stmt.all();
+
+    return new Response(
+      JSON.stringify({ reports: reports.results ?? [] }),
+      { headers: { 'Content-Type': 'application/json', 'Cache-Control': 'max-age=120' } }
+    );
+  } catch {
+    return new Response(JSON.stringify({ reports: [] }), {
+      status: 500,
+      headers: { 'Content-Type': 'application/json' },
+    });
+  }
+};

package/templates/full/dashboard/src/pages/api/reports/usage.ts

@@ -0,0 +1,52 @@
+import type { APIRoute } from 'astro';
+
+export const GET: APIRoute = async ({ locals, url }) => {
+  const db = (locals.runtime?.env as { PLATFORM_DB?: D1Database } | undefined)?.PLATFORM_DB;
+
+  if (!db) {
+    return new Response(JSON.stringify({ daily: [], monthly: [] }), {
+      headers: { 'Content-Type': 'application/json' },
+    });
+  }
+
+  const days = Math.min(parseInt(url.searchParams.get('days') ?? '30'), 90);
+  const startDate = new Date();
+  startDate.setDate(startDate.getDate() - days);
+  const startStr = startDate.toISOString().slice(0, 10);
+
+  try {
+    const [daily, monthly] = await Promise.all([
+      db
+        .prepare(
+          `SELECT snapshot_date, d1_reads, d1_writes, kv_reads, kv_writes,
+                  r2_reads, r2_writes, worker_requests, total_cost_usd
+           FROM daily_usage_rollups
+           WHERE project = 'all' AND snapshot_date >= ?
+           ORDER BY snapshot_date ASC
+           LIMIT 90`
+        )
+        .bind(startStr)
+        .all(),
+      db
+        .prepare(
+          `SELECT snapshot_month, d1_reads, d1_writes, kv_reads, kv_writes,
+                  r2_reads, r2_writes, worker_requests, total_cost_usd
+           FROM monthly_usage_rollups
+           WHERE project = 'all'
+           ORDER BY snapshot_month DESC
+           LIMIT 12`
+        )
+        .all(),
+    ]);
+
+    return new Response(
+      JSON.stringify({ daily: daily.results ?? [], monthly: monthly.results ?? [] }),
+      { headers: { 'Content-Type': 'application/json', 'Cache-Control': 'max-age=300' } }
+    );
+  } catch {
+    return new Response(JSON.stringify({ daily: [], monthly: [] }), {
+      status: 500,
+      headers: { 'Content-Type': 'application/json' },
+    });
+  }
+};