@pax8-cta/core 0.1.0

package/dist/queue/memory-queue.js

@@ -0,0 +1,221 @@
+/**
+ * Copyright 2024 Pax8, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import crypto from "node:crypto";
+import { DEFAULT_MEMORY_QUEUE_CONCURRENCY, DEFAULT_MEMORY_QUEUE_RETRIES, DEFAULT_MEMORY_QUEUE_RETRY_DELAY_MS, } from "../constants.js";
+/**
+ * In-memory job queue for simple single-process deployments
+ *
+ * This provides a Redis-free alternative for:
+ * - Local development
+ * - Single-instance deployments
+ * - Serverless environments (Vercel, Netlify)
+ *
+ * Limitations:
+ * - Jobs are lost on restart
+ * - No persistence
+ * - No multi-process scaling
+ * - For production with multiple instances, use Redis
+ */
+import { coreLogger } from "../services/logger.js";
+const logger = coreLogger;
+export class MemoryQueue {
+    name;
+    jobs = new Map();
+    queue = [];
+    processing = new Set();
+    processor;
+    concurrency;
+    maxRetries;
+    retryDelay;
+    isRunning = false;
+    eventListeners = new Map();
+    constructor(name, options = {}) {
+        this.name = name;
+        this.concurrency = options.concurrency ?? DEFAULT_MEMORY_QUEUE_CONCURRENCY;
+        this.maxRetries = options.maxRetries ?? DEFAULT_MEMORY_QUEUE_RETRIES;
+        this.retryDelay = options.retryDelay ?? DEFAULT_MEMORY_QUEUE_RETRY_DELAY_MS;
+    }
+    /**
+     * Add a job to the queue
+     */
+    async add(name, data) {
+        const job = {
+            id: crypto.randomUUID(),
+            name,
+            data,
+            status: "pending",
+            progress: 0,
+            createdAt: new Date(),
+            attempts: 0,
+            maxAttempts: this.maxRetries,
+        };
+        this.jobs.set(job.id, job);
+        this.queue.push(job.id);
+        this.emit("waiting", job);
+        // Process if we have capacity
+        this.processNext();
+        return job;
+    }
+    /**
+     * Add multiple jobs at once
+     */
+    async addBulk(jobs) {
+        return Promise.all(jobs.map((j) => this.add(j.name, j.data)));
+    }
+    /**
+     * Set the job processor
+     */
+    process(processor) {
+        this.processor = processor;
+        this.isRunning = true;
+        this.processNext();
+    }
+    /**
+     * Get a job by ID
+     */
+    getJob(id) {
+        return this.jobs.get(id);
+    }
+    /**
+     * Get all jobs with optional status filter
+     */
+    getJobs(status) {
+        const jobs = Array.from(this.jobs.values());
+        if (status) {
+            return jobs.filter((j) => j.status === status);
+        }
+        return jobs;
+    }
+    /**
+     * Get queue counts
+     */
+    getCounts() {
+        const jobs = Array.from(this.jobs.values());
+        return {
+            pending: jobs.filter((j) => j.status === "pending").length,
+            active: jobs.filter((j) => j.status === "active").length,
+            completed: jobs.filter((j) => j.status === "completed").length,
+            failed: jobs.filter((j) => j.status === "failed").length,
+        };
+    }
+    /**
+     * Update job progress
+     */
+    updateProgress(jobId, progress) {
+        const job = this.jobs.get(jobId);
+        if (job) {
+            job.progress = progress;
+            this.emit("progress", job);
+        }
+    }
+    /**
+     * Listen to queue events
+     */
+    on(event, listener) {
+        const listeners = this.eventListeners.get(event) ?? [];
+        listeners.push(listener);
+        this.eventListeners.set(event, listeners);
+    }
+    emit(event, job, result, error) {
+        const listeners = this.eventListeners.get(event) ?? [];
+        for (const listener of listeners) {
+            try {
+                listener(job, result, error);
+            }
+            catch (e) {
+                logger.error("Error in queue event listener", e instanceof Error ? e : new Error(String(e)), {
+                    event,
+                    jobId: job.id,
+                });
+            }
+        }
+    }
+    /**
+     * Stop processing
+     */
+    close() {
+        this.isRunning = false;
+    }
+    /**
+     * Clear all jobs
+     */
+    clear() {
+        this.jobs.clear();
+        this.queue = [];
+        this.processing.clear();
+    }
+    async processNext() {
+        if (!this.isRunning || !this.processor)
+            return;
+        if (this.processing.size >= this.concurrency)
+            return;
+        if (this.queue.length === 0)
+            return;
+        const jobId = this.queue.shift();
+        if (!jobId)
+            return;
+        const job = this.jobs.get(jobId);
+        if (!job)
+            return;
+        this.processing.add(jobId);
+        job.status = "active";
+        job.startedAt = new Date();
+        job.attempts++;
+        this.emit("active", job);
+        try {
+            const result = await this.processor(job);
+            job.status = "completed";
+            job.result = result;
+            job.completedAt = new Date();
+            job.progress = 100;
+            this.emit("completed", job, result);
+        }
+        catch (error) {
+            const err = error instanceof Error ? error : new Error(String(error));
+            if (job.attempts < job.maxAttempts) {
+                // Retry
+                job.status = "pending";
+                job.error = err.message;
+                setTimeout(() => {
+                    this.queue.push(jobId);
+                    this.processNext();
+                }, this.retryDelay);
+            }
+            else {
+                // Failed permanently
+                job.status = "failed";
+                job.error = err.message;
+                job.completedAt = new Date();
+                this.emit("failed", job, undefined, err);
+            }
+        }
+        finally {
+            this.processing.delete(jobId);
+            this.processNext();
+        }
+    }
+}
+// Cache for named queues
+const queueCache = new Map();
+export function getMemoryQueue(name = "default", options) {
+    let queue = queueCache.get(name);
+    if (!queue) {
+        queue = new MemoryQueue(name, options);
+        queueCache.set(name, queue);
+    }
+    return queue;
+}
+//# sourceMappingURL=memory-queue.js.map

package/dist/queue/memory-queue.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-queue.js","sourceRoot":"","sources":["../../src/queue/memory-queue.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EACL,gCAAgC,EAChC,4BAA4B,EAC5B,mCAAmC,GACpC,MAAM,iBAAiB,CAAC;AAEzB;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAEnD,MAAM,MAAM,GAAG,UAAU,CAAC;AA2B1B,MAAM,OAAO,WAAW;IAeJ;IAdV,IAAI,GAAiC,IAAI,GAAG,EAAE,CAAC;IAC/C,KAAK,GAAa,EAAE,CAAC;IACrB,UAAU,GAAgB,IAAI,GAAG,EAAE,CAAC;IACpC,SAAS,CAAsB;IAC/B,WAAW,CAAS;IACpB,UAAU,CAAS;IACnB,UAAU,CAAS;IACnB,SAAS,GAAG,KAAK,CAAC;IAClB,cAAc,GAGlB,IAAI,GAAG,EAAE,CAAC;IAEd,YACkB,IAAY,EAC5B,UAA8B,EAAE;QADhB,SAAI,GAAJ,IAAI,CAAQ;QAG5B,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,gCAAgC,CAAC;QAC3E,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,4BAA4B,CAAC;QACrE,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,mCAAmC,CAAC;IAC9E,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,GAAG,CAAC,IAAY,EAAE,IAAO;QAC7B,MAAM,GAAG,GAAoB;YAC3B,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE;YACvB,IAAI;YACJ,IAAI;YACJ,MAAM,EAAE,SAAS;YACjB,QAAQ,EAAE,CAAC;YACX,SAAS,EAAE,IAAI,IAAI,EAAE;YACrB,QAAQ,EAAE,CAAC;YACX,WAAW,EAAE,IAAI,CAAC,UAAU;SAC7B,CAAC;QAEF,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QAC3B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAExB,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QAE1B,8BAA8B;QAC9B,IAAI,CAAC,WAAW,EAAE,CAAC;QAEnB,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,CAAC,IAAiC;QAC7C,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAChE,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,SAA6B;QACnC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,IAAI,CAAC,WAAW,EAAE,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,EAAU;QACf,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,MAAkB;QACxB,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAC5C,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;QACjD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,SAAS;QACP,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAC5C,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,MAAM;YAC1D,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,MAAM;YACxD,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,MAAM;YAC9D,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,MAAM;SACzD,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,KAAa,EAAE,QAAgB;QAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,GAAG,EAAE,CAAC;YACR,GAAG,CAAC,QAAQ,GAAG,QAAQ,CAAC;YACxB,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IAED;;OAEG;IACH,EAAE,CACA,KAAiE,EACjE,QAAmE;QAEnE,MAAM,SAAS,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACvD,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACzB,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAC5C,CAAC;IAEO,IAAI,CACV,KAAiE,EACjE,GAAoB,EACpB,MAAU,EACV,KAAa;QAEb,MAAM,SAAS,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACvD,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,IAAI,CAAC;gBACH,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;YAC/B,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,MAAM,CAAC,KAAK,CACV,+BAA+B,EAC/B,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAC7C;oBACE,KAAK;oBACL,KAAK,EAAE,GAAG,CAAC,EAAE;iBACd,CACF,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QAClB,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;QAChB,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;IAC1B,CAAC;IAEO,KAAK,CAAC,WAAW;QACvB,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,OAAO;QAC/C,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO;QACrD,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAEpC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACjC,IAAI,CAAC,KAAK;YAAE,OAAO;QAEnB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,CAAC,GAAG;YAAE,OAAO;QAEjB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,GAAG,CAAC,MAAM,GAAG,QAAQ,CAAC;QACtB,GAAG,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAC3B,GAAG,CAAC,QAAQ,EAAE,CAAC;QAEf,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAEzB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACzC,GAAG,CAAC,MAAM,GAAG,WAAW,CAAC;YACzB,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC;YACpB,GAAG,CAAC,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC;YAC7B,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC;YACnB,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAEtE,IAAI,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;gBACnC,QAAQ;gBACR,GAAG,CAAC,MAAM,GAAG,SAAS,CAAC;gBACvB,GAAG,CAAC,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC;gBACxB,UAAU,CAAC,GAAG,EAAE;oBACd,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBACvB,IAAI,CAAC,WAAW,EAAE,CAAC;gBACrB,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;YACtB,CAAC;iBAAM,CAAC;gBACN,qBAAqB;gBACrB,GAAG,CAAC,MAAM,GAAG,QAAQ,CAAC;gBACtB,GAAG,CAAC,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC;gBACxB,GAAG,CAAC,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC;gBAC7B,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC9B,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,CAAC;IACH,CAAC;CACF;AAED,yBAAyB;AACzB,MAAM,UAAU,GAAG,IAAI,GAAG,EAAyC,CAAC;AAEpE,MAAM,UAAU,cAAc,CAC5B,OAAe,SAAS,EACxB,OAA4B;IAE5B,IAAI,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,KAAK,GAAG,IAAI,WAAW,CAAmB,IAAI,EAAE,OAAO,CAAC,CAAC;QACzD,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,KAAqC,CAAC;AAC/C,CAAC"}

package/dist/services/audit-log.d.ts

@@ -0,0 +1,59 @@
+export type AuditAction = "deployment.created" | "deployment.started" | "deployment.completed" | "deployment.failed" | "deployment.cancelled" | "deployment.retried" | "rollback.initiated" | "rollback.completed" | "rollback.failed" | "solution.exported" | "solution.imported" | "tenant.added" | "tenant.updated" | "tenant.removed" | "config.changed" | "user.login" | "user.logout" | "api.access" | "scheduled.deployment.triggered" | "scheduled.deployment.registered" | "scheduled.deployment.removed";
+export interface AuditLogEntry {
+    id: string;
+    timestamp: Date;
+    action: AuditAction;
+    userId: string;
+    userEmail?: string;
+    userRoles?: string[];
+    resourceType: string;
+    resourceId?: string;
+    resourceName?: string;
+    details?: Record<string, unknown>;
+    ipAddress?: string;
+    userAgent?: string;
+    success: boolean;
+    errorMessage?: string;
+}
+export interface AuditLogQuery {
+    startDate?: Date;
+    endDate?: Date;
+    userId?: string;
+    action?: AuditAction;
+    resourceType?: string;
+    resourceId?: string;
+    success?: boolean;
+    limit?: number;
+    offset?: number;
+}
+export interface AuditLogStorage {
+    write(entry: AuditLogEntry): Promise<void>;
+    query(query: AuditLogQuery): Promise<AuditLogEntry[]>;
+    count(query: AuditLogQuery): Promise<number>;
+}
+export declare class AuditLogService {
+    private storages;
+    constructor(storages?: AuditLogStorage[]);
+    log(action: AuditAction, context: {
+        userId: string;
+        userEmail?: string;
+        userRoles?: string[];
+        resourceType: string;
+        resourceId?: string;
+        resourceName?: string;
+        details?: Record<string, unknown>;
+        ipAddress?: string;
+        userAgent?: string;
+        success?: boolean;
+        errorMessage?: string;
+    }): Promise<void>;
+    query(query: AuditLogQuery): Promise<AuditLogEntry[]>;
+    count(query: AuditLogQuery): Promise<number>;
+    logDeploymentCreated(userId: string, deploymentId: string, details: Record<string, unknown>): Promise<void>;
+    logDeploymentCompleted(userId: string, deploymentId: string, success: boolean, details: Record<string, unknown>): Promise<void>;
+    logRollback(userId: string, tenantId: string, tenantName: string, previousVersion: string, success: boolean, errorMessage?: string): Promise<void>;
+    logUserLogin(userId: string, userEmail: string, ipAddress: string, userAgent: string, success: boolean): Promise<void>;
+    logApiAccess(userId: string, method: string, path: string, ipAddress: string, statusCode: number): Promise<void>;
+}
+export declare function getAuditLog(): AuditLogService;
+//# sourceMappingURL=audit-log.d.ts.map

package/dist/services/audit-log.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-log.d.ts","sourceRoot":"","sources":["../../src/services/audit-log.ts"],"names":[],"mappings":"AAiBA,MAAM,MAAM,WAAW,GACnB,oBAAoB,GACpB,oBAAoB,GACpB,sBAAsB,GACtB,mBAAmB,GACnB,sBAAsB,GACtB,oBAAoB,GACpB,oBAAoB,GACpB,oBAAoB,GACpB,iBAAiB,GACjB,mBAAmB,GACnB,mBAAmB,GACnB,cAAc,GACd,gBAAgB,GAChB,gBAAgB,GAChB,gBAAgB,GAChB,YAAY,GACZ,aAAa,GACb,YAAY,GACZ,gCAAgC,GAChC,iCAAiC,GACjC,8BAA8B,CAAC;AAEnC,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,IAAI,CAAC;IAChB,MAAM,EAAE,WAAW,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,aAAa;IAC5B,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,OAAO,CAAC,EAAE,IAAI,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3C,KAAK,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;IACtD,KAAK,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CAC9C;AA2ED,qBAAa,eAAe;IAC1B,OAAO,CAAC,QAAQ,CAAyB;gBAE7B,QAAQ,CAAC,EAAE,eAAe,EAAE;IAYlC,GAAG,CACP,MAAM,EAAE,WAAW,EACnB,OAAO,EAAE;QACP,MAAM,EAAE,MAAM,CAAC;QACf,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;QACrB,YAAY,EAAE,MAAM,CAAC;QACrB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAClC,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,GACA,OAAO,CAAC,IAAI,CAAC;IAqBV,KAAK,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAWrD,KAAK,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC;IAW5C,oBAAoB,CACxB,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,OAAO,CAAC,IAAI,CAAC;IASV,sBAAsB,CAC1B,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,OAAO,CAAC,IAAI,CAAC;IAUV,WAAW,CACf,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAClB,eAAe,EAAE,MAAM,EACvB,OAAO,EAAE,OAAO,EAChB,YAAY,CAAC,EAAE,MAAM,GACpB,OAAO,CAAC,IAAI,CAAC;IAYV,YAAY,CAChB,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,IAAI,CAAC;IAWV,YAAY,CAChB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,IAAI,CAAC;CAUjB;AAKD,wBAAgB,WAAW,IAAI,eAAe,CAK7C"}

package/dist/services/audit-log.js

@@ -0,0 +1,193 @@
+/**
+ * Copyright 2024 Pax8, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import crypto from "node:crypto";
+// In-memory storage for development/testing
+class InMemoryAuditStorage {
+    entries = [];
+    maxEntries = 10000;
+    async write(entry) {
+        this.entries.unshift(entry);
+        if (this.entries.length > this.maxEntries) {
+            this.entries = this.entries.slice(0, this.maxEntries);
+        }
+    }
+    async query(query) {
+        const results = this.entries.filter((entry) => {
+            if (query.startDate && entry.timestamp < query.startDate)
+                return false;
+            if (query.endDate && entry.timestamp > query.endDate)
+                return false;
+            if (query.userId && entry.userId !== query.userId)
+                return false;
+            if (query.action && entry.action !== query.action)
+                return false;
+            if (query.resourceType && entry.resourceType !== query.resourceType)
+                return false;
+            if (query.resourceId && entry.resourceId !== query.resourceId)
+                return false;
+            if (query.success !== undefined && entry.success !== query.success)
+                return false;
+            return true;
+        });
+        const offset = query.offset || 0;
+        const limit = query.limit || 100;
+        return results.slice(offset, offset + limit);
+    }
+    async count(query) {
+        const results = await this.query({ ...query, limit: undefined, offset: undefined });
+        return results.length;
+    }
+}
+// Console/structured logging storage
+class ConsoleAuditStorage {
+    structuredLogging;
+    constructor(structuredLogging = true) {
+        this.structuredLogging = structuredLogging;
+    }
+    async write(entry) {
+        if (this.structuredLogging) {
+            console.log(JSON.stringify({
+                level: entry.success ? "info" : "warn",
+                type: "audit",
+                ...entry,
+                timestamp: entry.timestamp.toISOString(),
+            }));
+        }
+        else {
+            const status = entry.success ? "SUCCESS" : "FAILED";
+            console.log(`[AUDIT] ${entry.timestamp.toISOString()} ${status} ${entry.action} ` +
+                `user=${entry.userId} resource=${entry.resourceType}/${entry.resourceId || "n/a"}`);
+        }
+    }
+    async query(_query) {
+        // Console storage doesn't support querying
+        return [];
+    }
+    async count(_query) {
+        return 0;
+    }
+}
+export class AuditLogService {
+    storages = [];
+    constructor(storages) {
+        if (storages && storages.length > 0) {
+            this.storages = storages;
+        }
+        else {
+            // Default: use both in-memory and console logging
+            this.storages = [
+                new InMemoryAuditStorage(),
+                new ConsoleAuditStorage(process.env.NODE_ENV === "production"),
+            ];
+        }
+    }
+    async log(action, context) {
+        const entry = {
+            id: crypto.randomUUID(),
+            timestamp: new Date(),
+            action,
+            userId: context.userId,
+            userEmail: context.userEmail,
+            userRoles: context.userRoles,
+            resourceType: context.resourceType,
+            resourceId: context.resourceId,
+            resourceName: context.resourceName,
+            details: context.details,
+            ipAddress: context.ipAddress,
+            userAgent: context.userAgent,
+            success: context.success ?? true,
+            errorMessage: context.errorMessage,
+        };
+        await Promise.all(this.storages.map((storage) => storage.write(entry)));
+    }
+    async query(query) {
+        // Use the first storage that supports querying
+        for (const storage of this.storages) {
+            const results = await storage.query(query);
+            if (results.length > 0) {
+                return results;
+            }
+        }
+        return [];
+    }
+    async count(query) {
+        for (const storage of this.storages) {
+            const count = await storage.count(query);
+            if (count > 0) {
+                return count;
+            }
+        }
+        return 0;
+    }
+    // Convenience methods for common actions
+    async logDeploymentCreated(userId, deploymentId, details) {
+        await this.log("deployment.created", {
+            userId,
+            resourceType: "deployment",
+            resourceId: deploymentId,
+            details,
+        });
+    }
+    async logDeploymentCompleted(userId, deploymentId, success, details) {
+        await this.log(success ? "deployment.completed" : "deployment.failed", {
+            userId,
+            resourceType: "deployment",
+            resourceId: deploymentId,
+            success,
+            details,
+        });
+    }
+    async logRollback(userId, tenantId, tenantName, previousVersion, success, errorMessage) {
+        await this.log(success ? "rollback.completed" : "rollback.failed", {
+            userId,
+            resourceType: "tenant",
+            resourceId: tenantId,
+            resourceName: tenantName,
+            success,
+            errorMessage,
+            details: { previousVersion },
+        });
+    }
+    async logUserLogin(userId, userEmail, ipAddress, userAgent, success) {
+        await this.log("user.login", {
+            userId,
+            userEmail,
+            resourceType: "auth",
+            ipAddress,
+            userAgent,
+            success,
+        });
+    }
+    async logApiAccess(userId, method, path, ipAddress, statusCode) {
+        await this.log("api.access", {
+            userId,
+            resourceType: "api",
+            resourceId: path,
+            success: statusCode < 400,
+            details: { method, statusCode },
+            ipAddress,
+        });
+    }
+}
+// Singleton instance
+let auditLogInstance = null;
+export function getAuditLog() {
+    if (!auditLogInstance) {
+        auditLogInstance = new AuditLogService();
+    }
+    return auditLogInstance;
+}
+//# sourceMappingURL=audit-log.js.map

package/dist/services/audit-log.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-log.js","sourceRoot":"","sources":["../../src/services/audit-log.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,MAAM,MAAM,aAAa,CAAC;AA4DjC,4CAA4C;AAC5C,MAAM,oBAAoB;IAChB,OAAO,GAAoB,EAAE,CAAC;IAC9B,UAAU,GAAG,KAAK,CAAC;IAE3B,KAAK,CAAC,KAAK,CAAC,KAAoB;QAC9B,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC5B,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;YAC1C,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,KAAoB;QAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;YAC5C,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS;gBAAE,OAAO,KAAK,CAAC;YACvE,IAAI,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC,OAAO;gBAAE,OAAO,KAAK,CAAC;YACnE,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;gBAAE,OAAO,KAAK,CAAC;YAChE,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;gBAAE,OAAO,KAAK,CAAC;YAChE,IAAI,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,YAAY,KAAK,KAAK,CAAC,YAAY;gBAAE,OAAO,KAAK,CAAC;YAClF,IAAI,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU;gBAAE,OAAO,KAAK,CAAC;YAC5E,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;gBAAE,OAAO,KAAK,CAAC;YACjF,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;QACjC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,GAAG,CAAC;QAEjC,OAAO,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,CAAC,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,KAAoB;QAC9B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QACpF,OAAO,OAAO,CAAC,MAAM,CAAC;IACxB,CAAC;CACF;AAED,qCAAqC;AACrC,MAAM,mBAAmB;IACf,iBAAiB,CAAU;IAEnC,YAAY,iBAAiB,GAAG,IAAI;QAClC,IAAI,CAAC,iBAAiB,GAAG,iBAAiB,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,KAAoB;QAC9B,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC3B,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CAAC;gBACb,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;gBACtC,IAAI,EAAE,OAAO;gBACb,GAAG,KAAK;gBACR,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE;aACzC,CAAC,CACH,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;YACpD,OAAO,CAAC,GAAG,CACT,WAAW,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,MAAM,IAAI,KAAK,CAAC,MAAM,GAAG;gBACnE,QAAQ,KAAK,CAAC,MAAM,aAAa,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,UAAU,IAAI,KAAK,EAAE,CACrF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,MAAqB;QAC/B,2CAA2C;QAC3C,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,MAAqB;QAC/B,OAAO,CAAC,CAAC;IACX,CAAC;CACF;AAED,MAAM,OAAO,eAAe;IAClB,QAAQ,GAAsB,EAAE,CAAC;IAEzC,YAAY,QAA4B;QACtC,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAC3B,CAAC;aAAM,CAAC;YACN,kDAAkD;YAClD,IAAI,CAAC,QAAQ,GAAG;gBACd,IAAI,oBAAoB,EAAE;gBAC1B,IAAI,mBAAmB,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,CAAC;aAC/D,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,GAAG,CACP,MAAmB,EACnB,OAYC;QAED,MAAM,KAAK,GAAkB;YAC3B,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE;YACvB,SAAS,EAAE,IAAI,IAAI,EAAE;YACrB,MAAM;YACN,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,IAAI;YAChC,YAAY,EAAE,OAAO,CAAC,YAAY;SACnC,CAAC;QAEF,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC1E,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,KAAoB;QAC9B,+CAA+C;QAC/C,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC3C,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,OAAO,OAAO,CAAC;YACjB,CAAC;QACH,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,KAAoB;QAC9B,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpC,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACzC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;gBACd,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,yCAAyC;IACzC,KAAK,CAAC,oBAAoB,CACxB,MAAc,EACd,YAAoB,EACpB,OAAgC;QAEhC,MAAM,IAAI,CAAC,GAAG,CAAC,oBAAoB,EAAE;YACnC,MAAM;YACN,YAAY,EAAE,YAAY;YAC1B,UAAU,EAAE,YAAY;YACxB,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,sBAAsB,CAC1B,MAAc,EACd,YAAoB,EACpB,OAAgB,EAChB,OAAgC;QAEhC,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,mBAAmB,EAAE;YACrE,MAAM;YACN,YAAY,EAAE,YAAY;YAC1B,UAAU,EAAE,YAAY;YACxB,OAAO;YACP,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,WAAW,CACf,MAAc,EACd,QAAgB,EAChB,UAAkB,EAClB,eAAuB,EACvB,OAAgB,EAChB,YAAqB;QAErB,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,iBAAiB,EAAE;YACjE,MAAM;YACN,YAAY,EAAE,QAAQ;YACtB,UAAU,EAAE,QAAQ;YACpB,YAAY,EAAE,UAAU;YACxB,OAAO;YACP,YAAY;YACZ,OAAO,EAAE,EAAE,eAAe,EAAE;SAC7B,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,MAAc,EACd,SAAiB,EACjB,SAAiB,EACjB,SAAiB,EACjB,OAAgB;QAEhB,MAAM,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE;YAC3B,MAAM;YACN,SAAS;YACT,YAAY,EAAE,MAAM;YACpB,SAAS;YACT,SAAS;YACT,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,MAAc,EACd,MAAc,EACd,IAAY,EACZ,SAAiB,EACjB,UAAkB;QAElB,MAAM,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE;YAC3B,MAAM;YACN,YAAY,EAAE,KAAK;YACnB,UAAU,EAAE,IAAI;YAChB,OAAO,EAAE,UAAU,GAAG,GAAG;YACzB,OAAO,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE;YAC/B,SAAS;SACV,CAAC,CAAC;IACL,CAAC;CACF;AAED,qBAAqB;AACrB,IAAI,gBAAgB,GAA2B,IAAI,CAAC;AAEpD,MAAM,UAAU,WAAW;IACzB,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,gBAAgB,GAAG,IAAI,eAAe,EAAE,CAAC;IAC3C,CAAC;IACD,OAAO,gBAAgB,CAAC;AAC1B,CAAC"}

package/dist/services/auth-error-parser.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Copyright 2024 Pax8, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * Auth Error Parser
+ *
+ * Parses common Azure AD / Dataverse authentication errors into
+ * user-friendly messages with actionable fix suggestions.
+ *
+ * Extracted from CLI validate.ts and init.ts to make this logic
+ * reusable across CLI, MCP server, and web consumers.
+ */
+export interface ParsedAuthError {
+    message: string;
+    fix: string;
+}
+/**
+ * Parse common Azure/Dataverse errors into user-friendly messages with fixes.
+ *
+ * Handles AADSTS error codes, permission errors, token acquisition failures,
+ * and other common authentication issues encountered during GDAP operations.
+ */
+export declare function parseAuthError(errorMsg: string): ParsedAuthError;
+//# sourceMappingURL=auth-error-parser.d.ts.map

package/dist/services/auth-error-parser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-error-parser.d.ts","sourceRoot":"","sources":["../../src/services/auth-error-parser.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH;;;;;;;;GAQG;AAEH,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;CACb;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,eAAe,CA8EhE"}

package/dist/services/auth-error-parser.js

@@ -0,0 +1,90 @@
+/**
+ * Copyright 2024 Pax8, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * Parse common Azure/Dataverse errors into user-friendly messages with fixes.
+ *
+ * Handles AADSTS error codes, permission errors, token acquisition failures,
+ * and other common authentication issues encountered during GDAP operations.
+ */
+export function parseAuthError(errorMsg) {
+    // Invalid client secret
+    if (errorMsg.includes("AADSTS7000215") || errorMsg.includes("Invalid client secret")) {
+        return {
+            message: "Invalid client secret",
+            fix: "Ensure PARTNER_CLIENT_SECRET contains the secret value (not the secret ID). Generate a new secret in Azure Portal if needed.",
+        };
+    }
+    // Client secret expired
+    if (errorMsg.includes("AADSTS7000222") || errorMsg.includes("expired")) {
+        return {
+            message: "Client secret has expired",
+            fix: "Generate a new client secret in Azure Portal → App registrations → Your app → Certificates & secrets",
+        };
+    }
+    // App not found
+    if (errorMsg.includes("AADSTS700016") || errorMsg.includes("Application.*not found")) {
+        return {
+            message: "Application not found in Azure AD",
+            fix: "Verify the PARTNER_CLIENT_ID is correct. Check Azure Portal → App registrations.",
+        };
+    }
+    // Tenant not found
+    if (errorMsg.includes("AADSTS90002") || errorMsg.includes("tenant.*not found")) {
+        return {
+            message: "Tenant not found",
+            fix: "Verify the PARTNER_TENANT_ID is correct. Check Azure Portal → Azure Active Directory → Overview.",
+        };
+    }
+    // Not a member of organization (GDAP/app user issue)
+    if (errorMsg.includes("not a member of the organization") ||
+        errorMsg.includes("is not a member")) {
+        return {
+            message: "App not registered in environment",
+            fix: "Create app user in Power Platform Admin Center, or run 'setup --all'",
+        };
+    }
+    // Permission denied
+    if (errorMsg.includes("prvRead") ||
+        errorMsg.includes("prvWrite") ||
+        errorMsg.includes("privilege") ||
+        errorMsg.includes("403")) {
+        return {
+            message: "Insufficient permissions",
+            fix: "Assign System Administrator role to the app user in Power Platform Admin Center",
+        };
+    }
+    // Token acquisition failed (generic)
+    if (errorMsg.includes("Token acquisition failed")) {
+        // Extract the AADSTS code if present
+        const aadstsMatch = errorMsg.match(/AADSTS\d+/);
+        if (aadstsMatch) {
+            return {
+                message: `Authentication failed (${aadstsMatch[0]})`,
+                fix: "Check Azure AD app configuration. Verify client ID, tenant ID, and secret are correct.",
+            };
+        }
+        return {
+            message: "Authentication failed",
+            fix: "Check client credentials. Run 'auth status' to verify configuration.",
+        };
+    }
+    // Default: return first line of error
+    return {
+        message: errorMsg.split("\n")[0].slice(0, 100),
+        fix: "Check the error message above and verify your configuration",
+    };
+}
+//# sourceMappingURL=auth-error-parser.js.map

package/dist/services/auth-error-parser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-error-parser.js","sourceRoot":"","sources":["../../src/services/auth-error-parser.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAiBH;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,QAAgB;IAC7C,wBAAwB;IACxB,IAAI,QAAQ,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,uBAAuB,CAAC,EAAE,CAAC;QACrF,OAAO;YACL,OAAO,EAAE,uBAAuB;YAChC,GAAG,EAAE,8HAA8H;SACpI,CAAC;IACJ,CAAC;IAED,wBAAwB;IACxB,IAAI,QAAQ,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACvE,OAAO;YACL,OAAO,EAAE,2BAA2B;YACpC,GAAG,EAAE,sGAAsG;SAC5G,CAAC;IACJ,CAAC;IAED,gBAAgB;IAChB,IAAI,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,wBAAwB,CAAC,EAAE,CAAC;QACrF,OAAO;YACL,OAAO,EAAE,mCAAmC;YAC5C,GAAG,EAAE,kFAAkF;SACxF,CAAC;IACJ,CAAC;IAED,mBAAmB;IACnB,IAAI,QAAQ,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;QAC/E,OAAO;YACL,OAAO,EAAE,kBAAkB;YAC3B,GAAG,EAAE,kGAAkG;SACxG,CAAC;IACJ,CAAC;IAED,qDAAqD;IACrD,IACE,QAAQ,CAAC,QAAQ,CAAC,kCAAkC,CAAC;QACrD,QAAQ,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EACpC,CAAC;QACD,OAAO;YACL,OAAO,EAAE,mCAAmC;YAC5C,GAAG,EAAE,sEAAsE;SAC5E,CAAC;IACJ,CAAC;IAED,oBAAoB;IACpB,IACE,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC;QAC5B,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC;QAC7B,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC9B,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,EACxB,CAAC;QACD,OAAO;YACL,OAAO,EAAE,0BAA0B;YACnC,GAAG,EAAE,iFAAiF;SACvF,CAAC;IACJ,CAAC;IAED,qCAAqC;IACrC,IAAI,QAAQ,CAAC,QAAQ,CAAC,0BAA0B,CAAC,EAAE,CAAC;QAClD,qCAAqC;QACrC,MAAM,WAAW,GAAG,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAChD,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO;gBACL,OAAO,EAAE,0BAA0B,WAAW,CAAC,CAAC,CAAC,GAAG;gBACpD,GAAG,EAAE,wFAAwF;aAC9F,CAAC;QACJ,CAAC;QACD,OAAO;YACL,OAAO,EAAE,uBAAuB;YAChC,GAAG,EAAE,sEAAsE;SAC5E,CAAC;IACJ,CAAC;IAED,sCAAsC;IACtC,OAAO;QACL,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;QAC9C,GAAG,EAAE,6DAA6D;KACnE,CAAC;AACJ,CAAC"}