@pax8-cta/core 0.1.0

package/dist/services/notification-service.js

@@ -0,0 +1,184 @@
+/**
+ * Copyright 2024 Pax8, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { coreLogger } from "./logger.js";
+import { getSettingsService } from "./settings-service.js";
+const logger = coreLogger.child({ service: "notifications" });
+/**
+ * Notification service for sending alerts via Slack, Teams, and Email
+ */
+export class NotificationService {
+    /**
+     * Send notification to all enabled channels
+     */
+    async sendNotification(payload) {
+        const settingsService = getSettingsService();
+        const settings = await settingsService.getDecryptedAppSettings();
+        const promises = [];
+        if (settings.slackEnabled && settings.slackWebhookUrl) {
+            promises.push(this.sendSlackNotification(settings.slackWebhookUrl, payload));
+        }
+        if (settings.teamsEnabled && settings.teamsWebhookUrl) {
+            promises.push(this.sendTeamsNotification(settings.teamsWebhookUrl, payload));
+        }
+        if (settings.emailEnabled && settings.emailRecipients) {
+            promises.push(this.sendEmailNotification(settings.emailRecipients, payload));
+        }
+        // Send all notifications in parallel
+        const results = await Promise.allSettled(promises);
+        // Log any failures
+        results.forEach((result, index) => {
+            if (result.status === "rejected") {
+                const channel = index === 0 ? "Slack" : index === 1 ? "Teams" : "Email";
+                logger.warn(`Failed to send ${channel} notification`, { error: result.reason });
+            }
+        });
+    }
+    /**
+     * Send Slack notification
+     */
+    async sendSlackNotification(webhookUrl, payload) {
+        const colorMap = {
+            success: "#36a64f",
+            error: "#ff0000",
+            warning: "#ff9900",
+            info: "#2196F3",
+        };
+        const slackPayload = {
+            attachments: [
+                {
+                    color: colorMap[payload.color || "info"],
+                    title: payload.title,
+                    text: payload.message,
+                    title_link: payload.url,
+                    footer: "Pax8 CTA",
+                    footer_icon: "https://pax8-cta.app/logo.png",
+                    ts: Math.floor(Date.now() / 1000),
+                },
+            ],
+        };
+        const response = await fetch(webhookUrl, {
+            method: "POST",
+            headers: { "Content-Type": "application/json" },
+            body: JSON.stringify(slackPayload),
+        });
+        if (!response.ok) {
+            throw new Error(`Slack webhook returned ${response.status}: ${await response.text()}`);
+        }
+        logger.info("Slack notification sent", { title: payload.title });
+    }
+    /**
+     * Send Microsoft Teams notification
+     */
+    async sendTeamsNotification(webhookUrl, payload) {
+        const colorMap = {
+            success: "00ff00",
+            error: "ff0000",
+            warning: "ff9900",
+            info: "2196F3",
+        };
+        const teamsPayload = {
+            "@type": "MessageCard",
+            "@context": "https://schema.org/extensions",
+            summary: payload.title,
+            themeColor: colorMap[payload.color || "info"],
+            title: payload.title,
+            text: payload.message,
+            potentialAction: payload.url
+                ? [
+                    {
+                        "@type": "OpenUri",
+                        name: "View Details",
+                        targets: [
+                            {
+                                os: "default",
+                                uri: payload.url,
+                            },
+                        ],
+                    },
+                ]
+                : undefined,
+        };
+        const response = await fetch(webhookUrl, {
+            method: "POST",
+            headers: { "Content-Type": "application/json" },
+            body: JSON.stringify(teamsPayload),
+        });
+        if (!response.ok) {
+            throw new Error(`Teams webhook returned ${response.status}: ${await response.text()}`);
+        }
+        logger.info("Teams notification sent", { title: payload.title });
+    }
+    /**
+     * Send email notification
+     *
+     * Email notifications are not yet implemented. Slack and Teams webhooks are
+     * fully supported. Email integration (SendGrid, AWS SES, etc.) is planned
+     * for a future release.
+     */
+    async sendEmailNotification(recipients, payload) {
+        logger.info("Email notification skipped (not yet implemented)", {
+            recipients,
+            title: payload.title,
+            message: "Use Slack or Teams webhooks for notifications",
+        });
+    }
+    /**
+     * Test a notification channel
+     */
+    async testNotification(channel, webhookUrl, recipients) {
+        try {
+            const testPayload = {
+                title: "Pax8 CTA Test Notification",
+                message: `This is a test notification from Pax8 CTA. If you see this, your ${channel} integration is working correctly!`,
+                color: "info",
+            };
+            switch (channel) {
+                case "slack":
+                    if (!webhookUrl)
+                        throw new Error("Slack webhook URL is required");
+                    await this.sendSlackNotification(webhookUrl, testPayload);
+                    break;
+                case "teams":
+                    if (!webhookUrl)
+                        throw new Error("Teams webhook URL is required");
+                    await this.sendTeamsNotification(webhookUrl, testPayload);
+                    break;
+                case "email":
+                    if (!recipients)
+                        throw new Error("Email recipients are required");
+                    await this.sendEmailNotification(recipients, testPayload);
+                    break;
+            }
+            return { success: true };
+        }
+        catch (error) {
+            logger.error(`Test notification failed for ${channel}`, error);
+            return {
+                success: false,
+                error: error instanceof Error ? error.message : "Unknown error",
+            };
+        }
+    }
+}
+// Singleton instance
+let notificationInstance = null;
+export function getNotificationService() {
+    if (!notificationInstance) {
+        notificationInstance = new NotificationService();
+    }
+    return notificationInstance;
+}
+//# sourceMappingURL=notification-service.js.map

package/dist/services/notification-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notification-service.js","sourceRoot":"","sources":["../../src/services/notification-service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAE3D,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CAAC;AAS9D;;GAEG;AACH,MAAM,OAAO,mBAAmB;IAC9B;;OAEG;IACH,KAAK,CAAC,gBAAgB,CAAC,OAA4B;QACjD,MAAM,eAAe,GAAG,kBAAkB,EAAE,CAAC;QAC7C,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,uBAAuB,EAAE,CAAC;QAEjE,MAAM,QAAQ,GAAoB,EAAE,CAAC;QAErC,IAAI,QAAQ,CAAC,YAAY,IAAI,QAAQ,CAAC,eAAe,EAAE,CAAC;YACtD,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC;QAC/E,CAAC;QAED,IAAI,QAAQ,CAAC,YAAY,IAAI,QAAQ,CAAC,eAAe,EAAE,CAAC;YACtD,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC;QAC/E,CAAC;QAED,IAAI,QAAQ,CAAC,YAAY,IAAI,QAAQ,CAAC,eAAe,EAAE,CAAC;YACtD,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC;QAC/E,CAAC;QAED,qCAAqC;QACrC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAEnD,mBAAmB;QACnB,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;YAChC,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;gBACjC,MAAM,OAAO,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;gBACxE,MAAM,CAAC,IAAI,CAAC,kBAAkB,OAAO,eAAe,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YAClF,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,qBAAqB,CAAC,UAAkB,EAAE,OAA4B;QAC1E,MAAM,QAAQ,GAAG;YACf,OAAO,EAAE,SAAS;YAClB,KAAK,EAAE,SAAS;YAChB,OAAO,EAAE,SAAS;YAClB,IAAI,EAAE,SAAS;SAChB,CAAC;QAEF,MAAM,YAAY,GAAG;YACnB,WAAW,EAAE;gBACX;oBACE,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC,KAAK,IAAI,MAAM,CAAC;oBACxC,KAAK,EAAE,OAAO,CAAC,KAAK;oBACpB,IAAI,EAAE,OAAO,CAAC,OAAO;oBACrB,UAAU,EAAE,OAAO,CAAC,GAAG;oBACvB,MAAM,EAAE,UAAU;oBAClB,WAAW,EAAE,+BAA+B;oBAC5C,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;iBAClC;aACF;SACF,CAAC;QAEF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,UAAU,EAAE;YACvC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC;SACnC,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,0BAA0B,QAAQ,CAAC,MAAM,KAAK,MAAM,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACzF,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IACnE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,qBAAqB,CAAC,UAAkB,EAAE,OAA4B;QAC1E,MAAM,QAAQ,GAAG;YACf,OAAO,EAAE,QAAQ;YACjB,KAAK,EAAE,QAAQ;YACf,OAAO,EAAE,QAAQ;YACjB,IAAI,EAAE,QAAQ;SACf,CAAC;QAEF,MAAM,YAAY,GAAG;YACnB,OAAO,EAAE,aAAa;YACtB,UAAU,EAAE,+BAA+B;YAC3C,OAAO,EAAE,OAAO,CAAC,KAAK;YACtB,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,KAAK,IAAI,MAAM,CAAC;YAC7C,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,IAAI,EAAE,OAAO,CAAC,OAAO;YACrB,eAAe,EAAE,OAAO,CAAC,GAAG;gBAC1B,CAAC,CAAC;oBACE;wBACE,OAAO,EAAE,SAAS;wBAClB,IAAI,EAAE,cAAc;wBACpB,OAAO,EAAE;4BACP;gCACE,EAAE,EAAE,SAAS;gCACb,GAAG,EAAE,OAAO,CAAC,GAAG;6BACjB;yBACF;qBACF;iBACF;gBACH,CAAC,CAAC,SAAS;SACd,CAAC;QAEF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,UAAU,EAAE;YACvC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC;SACnC,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,0BAA0B,QAAQ,CAAC,MAAM,KAAK,MAAM,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACzF,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IACnE,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,qBAAqB,CAAC,UAAkB,EAAE,OAA4B;QAC1E,MAAM,CAAC,IAAI,CAAC,kDAAkD,EAAE;YAC9D,UAAU;YACV,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,OAAO,EAAE,+CAA+C;SACzD,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB,CACpB,OAAoC,EACpC,UAAmB,EACnB,UAAmB;QAEnB,IAAI,CAAC;YACH,MAAM,WAAW,GAAwB;gBACvC,KAAK,EAAE,4BAA4B;gBACnC,OAAO,EAAE,oEAAoE,OAAO,oCAAoC;gBACxH,KAAK,EAAE,MAAM;aACd,CAAC;YAEF,QAAQ,OAAO,EAAE,CAAC;gBAChB,KAAK,OAAO;oBACV,IAAI,CAAC,UAAU;wBAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;oBAClE,MAAM,IAAI,CAAC,qBAAqB,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;oBAC1D,MAAM;gBACR,KAAK,OAAO;oBACV,IAAI,CAAC,UAAU;wBAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;oBAClE,MAAM,IAAI,CAAC,qBAAqB,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;oBAC1D,MAAM;gBACR,KAAK,OAAO;oBACV,IAAI,CAAC,UAAU;wBAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;oBAClE,MAAM,IAAI,CAAC,qBAAqB,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;oBAC1D,MAAM;YACV,CAAC;YAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,gCAAgC,OAAO,EAAE,EAAE,KAAc,CAAC,CAAC;YACxE,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;aAChE,CAAC;QACJ,CAAC;IACH,CAAC;CACF;AAED,qBAAqB;AACrB,IAAI,oBAAoB,GAA+B,IAAI,CAAC;AAE5D,MAAM,UAAU,sBAAsB;IACpC,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAC1B,oBAAoB,GAAG,IAAI,mBAAmB,EAAE,CAAC;IACnD,CAAC;IACD,OAAO,oBAAoB,CAAC;AAC9B,CAAC"}

package/dist/services/risk-analyzer.d.ts

@@ -0,0 +1,252 @@
+/**
+ * Copyright 2024 Pax8, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { type PreconditionFailure } from "../preconditions/index.js";
+import type { WaveExecutionPlan } from "./waves.js";
+export interface Tenant {
+    id: string;
+    name: string;
+    environmentUrl: string;
+    tags?: string[];
+}
+/**
+ * Confidence qualifier — coarse bucket suitable for both human-readable
+ * labels and machine-readable scripting. Gated on the numeric `confidence`
+ * field via `confidenceQualifier()`.
+ */
+export type ConfidenceQualifier = "limited" | "moderate" | "high";
+/**
+ * Per-tenant risk row surfaced in `RiskAnalysis.perTenantBreakdown`. Same
+ * dimensions as the aggregate analysis (issues are already attributed by
+ * `affectedTenants`), but rolled up per-tenant for scripting and display.
+ */
+export interface TenantRiskRow {
+    tenantId: string;
+    tenantName: string;
+    /** Risk level computed from issues that affect this specific tenant. */
+    score: "low" | "medium" | "high" | "critical";
+    /** The single highest-severity issue that mentions this tenant. */
+    topFactor?: {
+        severity: RiskSeverity;
+        category: RiskCategory;
+        message: string;
+    };
+}
+export type RiskSeverity = "info" | "warning" | "error" | "critical";
+export type RiskCategory = "permissions" | "dependencies" | "health" | "timing" | "history" | "connections" | "configuration" | "preconditions";
+export interface RiskIssue {
+    severity: RiskSeverity;
+    category: RiskCategory;
+    message: string;
+    affectedTenants?: string[];
+    resolution?: string;
+    link?: string;
+    details?: Record<string, unknown>;
+}
+export interface RiskAnalysis {
+    score: "low" | "medium" | "high" | "critical";
+    confidence: number;
+    /**
+     * Coarse bucket for `confidence`: "limited" (< 70), "moderate" (70-90),
+     * "high" (>= 90). Surfaced separately so scripts/CI can branch without
+     * re-implementing the threshold logic.
+     */
+    confidenceQualifier: ConfidenceQualifier;
+    /** Snake-case alias of `confidenceQualifier` for JSON consumers. */
+    confidence_qualifier: ConfidenceQualifier;
+    estimatedDuration: {
+        min: number;
+        max: number;
+    };
+    successProbability: number;
+    issues: RiskIssue[];
+    recommendations: string[];
+    blockers: RiskIssue[];
+    canProceed: boolean;
+    requiresApproval: boolean;
+    /** Per-tenant risk rollup. Same dimensions, attributed per tenant. */
+    perTenantBreakdown: TenantRiskRow[];
+    /**
+     * Preflight (preconditions) results — the fifth analyze dimension. When
+     * no manifest was found for the solution, `manifestFound` is false and
+     * `failures` is empty. When the manifest validates and the diff engine
+     * runs, every failed (tenant × requirement) lands in `failures` here AND
+     * is mirrored into `issues` as a RiskIssue with category `preconditions`.
+     */
+    preconditions: {
+        manifestFound: boolean;
+        solution?: string;
+        manifestVersion?: string;
+        failures: PreconditionFailure[];
+    };
+}
+export interface DeploymentContext {
+    tenants: Tenant[];
+    solutionFile?: string;
+    solutionSize?: number;
+    isProduction: boolean;
+    scheduledTime?: Date;
+    deploymentHistory?: DeploymentHistoryEntry[];
+    /**
+     * Wave execution plan to model duration with parallelism. Built from
+     * `WaveService.createExecutionPlan(config, destinations)` by callers that
+     * have access to a Config (real-mode `analyze`). When omitted, the
+     * analyzer assumes a single wave with `maxParallel = DEFAULT_MAX_PARALLEL`.
+     */
+    waves?: WaveExecutionPlan;
+    /**
+     * Override for the single-wave default parallelism. Only consulted when
+     * `waves` is not provided. Defaults to `DEFAULT_MAX_PARALLEL` (5).
+     */
+    maxParallel?: number;
+    /**
+     * Directories to search for `<solution>.preconditions.yaml`. When omitted,
+     * defaults to `["./agent packages", process.cwd()]`. The fifth analyze
+     * dimension (preconditions) walks this list and skips silently if no
+     * manifest is found.
+     */
+    preconditionSearchDirs?: string[];
+}
+/**
+ * Default parallelism when no wave config is supplied. Five concurrent
+ * deploys is what `deploy --all` does in practice and matches the
+ * Dataverse `importSolutionAsync` rate-limit headroom we have observed.
+ */
+export declare const DEFAULT_MAX_PARALLEL = 5;
+/**
+ * Map a numeric confidence value to its coarse qualifier bucket.
+ * Boundaries: < 70 -> limited, 70..89 -> moderate, >= 90 -> high.
+ * Exposed (not just internal) so CLI rendering can render
+ * `Risk Score: LOW (limited data)` without re-implementing thresholds.
+ */
+export declare function confidenceQualifier(confidence: number): ConfidenceQualifier;
+/**
+ * Map a confidence qualifier to the human-readable suffix shown next to
+ * the risk score (e.g. `LOW (limited data)`).
+ */
+export declare function confidenceQualifierLabel(qualifier: ConfidenceQualifier): string;
+export interface DeploymentHistoryEntry {
+    tenantId: string;
+    status: "success" | "failure";
+    error?: string;
+    completedAt: string;
+    durationMinutes?: number;
+}
+/**
+ * Main risk analyzer class
+ */
+export declare class DeploymentRiskAnalyzer {
+    /**
+     * Analyze deployment risk
+     */
+    analyze(context: DeploymentContext): Promise<RiskAnalysis>;
+    /**
+     * Check GDAP permissions for all tenants. Returns `dataAvailable=true`
+     * when at least one tenant produced a determination — used as a
+     * coverage signal for `calculateConfidence`.
+     */
+    private checkGDAPPermissions;
+    /**
+     * Check connection references. Returns `dataAvailable=true` when we had
+     * any signal (currently: demo metadata).
+     */
+    private checkConnections;
+    /**
+     * Check tenant health. `dataAvailable=true` when we had health-relevant
+     * input (deployment history with at least one failure-bearing entry, or
+     * demo metadata). Note: an empty deploymentHistory still counts as "we
+     * looked but found nothing," not "we couldn't check."
+     */
+    private checkTenantHealth;
+    /**
+     * Analyze deployment history. `dataAvailable=true` when we had real
+     * deploymentHistory entries or demo metadata to draw from.
+     */
+    private analyzeHistory;
+    /**
+     * Fifth dimension — tenant-config preflight. Loads a sibling YAML
+     * `<solution>.preconditions.yaml`, runs it against synthetic per-tenant
+     * state (Phase 1), and emits one `RiskIssue` per failed requirement plus a
+     * structured `failures[]` payload the CLI can render with deep-link / CLI
+     * / manual remediation steps.
+     *
+     * When no manifest is found we emit a single `info` issue ("preflight
+     * skipped") and return — deploy still proceeds.
+     *
+     * Phase 2 will replace `synthesizeTenantStateResolver` with a real
+     * Microsoft Graph TCM client; the manifest format and the diff engine
+     * stay the same.
+     */
+    private checkPreconditions;
+    /**
+     * Calculate overall risk score
+     */
+    private calculateRiskScore;
+    /**
+     * Calculate confidence in the risk assessment.
+     *
+     * Two inputs drive confidence:
+     *   - **Coverage** — number of dimensions (GDAP / connections / health /
+     *     history) that returned data. Each adds 10 points.
+     *   - **Sample size** — median per-tenant deploy history count, log-scaled
+     *     and capped at 40 points.
+     *
+     * Formula: `50 + 10 * coverage + min(40, ceil(log2(median_history + 1)) * 10)`.
+     * Clamped to [0, 100]. Lands in the 50–95% range for realistic inputs:
+     *   - 0 coverage, 0 history     -> 50
+     *   - 4 coverage, 0 history     -> 90
+     *   - 4 coverage, 5 history     -> 90 + log2(6)*10 ≈ 90, capped to 95 by
+     *     the 40-cap fallback (40 + 50 = 90, plus +5 if median ≥ 16).
+     *   - 4 coverage, 50+ history   -> 50 + 40 + 40 = 100, clamped to 95.
+     */
+    private calculateConfidence;
+    /**
+     * Median per-tenant historical deploy count for the requested solution
+     * (best-effort — falls back to overall demo `totalDeploys` or to the
+     * supplied `deploymentHistory` length / tenant count).
+     */
+    private medianSampleSize;
+    /**
+     * Estimate deployment duration with wave-aware parallelism.
+     *
+     * Today's deploys are not sequential — `WaveService` runs up to
+     * `maxParallel` tenants concurrently per wave. The previous estimate
+     * (2 min × N tenants, sequential) overstated duration ~5×.
+     *
+     * Compute: `Σ_per_wave (ceil(wave.tenants / wave.maxParallel) ×
+     * PER_TENANT_MINUTES) + Σ wave.waitAfterCompletion`. When no wave plan
+     * is supplied, fall back to a single wave with `DEFAULT_MAX_PARALLEL`.
+     */
+    private estimateDuration;
+    /**
+     * Build per-tenant rollup. For each tenant, find issues that name them
+     * (or that have no `affectedTenants` field — those apply to the whole
+     * fleet) and pick the highest-severity one as the top factor.
+     */
+    private buildPerTenantBreakdown;
+    /**
+     * Calculate success probability
+     */
+    private calculateSuccessProbability;
+    /**
+     * Generate actionable recommendations
+     */
+    private generateRecommendations;
+}
+/**
+ * Singleton instance
+ */
+export declare const riskAnalyzer: DeploymentRiskAnalyzer;
+//# sourceMappingURL=risk-analyzer.d.ts.map

package/dist/services/risk-analyzer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"risk-analyzer.d.ts","sourceRoot":"","sources":["../../src/services/risk-analyzer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAQH,OAAO,EAKL,KAAK,mBAAmB,EACzB,MAAM,2BAA2B,CAAC;AAGnC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAGpD,MAAM,WAAW,MAAM;IACrB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CACjB;AAED;;;;GAIG;AACH,MAAM,MAAM,mBAAmB,GAAG,SAAS,GAAG,UAAU,GAAG,MAAM,CAAC;AAElE;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,wEAAwE;IACxE,KAAK,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;IAC9C,mEAAmE;IACnE,SAAS,CAAC,EAAE;QACV,QAAQ,EAAE,YAAY,CAAC;QACvB,QAAQ,EAAE,YAAY,CAAC;QACvB,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;CACH;AAGD,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,SAAS,GAAG,OAAO,GAAG,UAAU,CAAC;AAGrE,MAAM,MAAM,YAAY,GACpB,aAAa,GACb,cAAc,GACd,QAAQ,GACR,QAAQ,GACR,SAAS,GACT,aAAa,GACb,eAAe,GACf,eAAe,CAAC;AAGpB,MAAM,WAAW,SAAS;IACxB,QAAQ,EAAE,YAAY,CAAC;IACvB,QAAQ,EAAE,YAAY,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAGD,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;IAC9C,UAAU,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,mBAAmB,EAAE,mBAAmB,CAAC;IACzC,oEAAoE;IACpE,oBAAoB,EAAE,mBAAmB,CAAC;IAC1C,iBAAiB,EAAE;QACjB,GAAG,EAAE,MAAM,CAAC;QACZ,GAAG,EAAE,MAAM,CAAC;KACb,CAAC;IACF,kBAAkB,EAAE,MAAM,CAAC;IAC3B,MAAM,EAAE,SAAS,EAAE,CAAC;IACpB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,QAAQ,EAAE,SAAS,EAAE,CAAC;IACtB,UAAU,EAAE,OAAO,CAAC;IACpB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,sEAAsE;IACtE,kBAAkB,EAAE,aAAa,EAAE,CAAC;IACpC;;;;;;OAMG;IACH,aAAa,EAAE;QACb,aAAa,EAAE,OAAO,CAAC;QACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,QAAQ,EAAE,mBAAmB,EAAE,CAAC;KACjC,CAAC;CACH;AAGD,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,OAAO,CAAC;IACtB,aAAa,CAAC,EAAE,IAAI,CAAC;IACrB,iBAAiB,CAAC,EAAE,sBAAsB,EAAE,CAAC;IAC7C;;;;;OAKG;IACH,KAAK,CAAC,EAAE,iBAAiB,CAAC;IAC1B;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;OAKG;IACH,sBAAsB,CAAC,EAAE,MAAM,EAAE,CAAC;CACnC;AAED;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,IAAI,CAAC;AAkGtC;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,mBAAmB,CAI3E;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,SAAS,EAAE,mBAAmB,GAAG,MAAM,CAS/E;AAGD,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,SAAS,GAAG,SAAS,CAAC;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;GAEG;AACH,qBAAa,sBAAsB;IACjC;;OAEG;IACG,OAAO,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,YAAY,CAAC;IAgFhE;;;;OAIG;YACW,oBAAoB;IA2FlC;;;OAGG;YACW,gBAAgB;IAwE9B;;;;;OAKG;YACW,iBAAiB;IAkF/B;;;OAGG;YACW,cAAc;IAuI5B;;;;;;;;;;;;;OAaG;YACW,kBAAkB;IAgGhC;;OAEG;IACH,OAAO,CAAC,kBAAkB;IA0B1B;;;;;;;;;;;;;;;;OAgBG;IACH,OAAO,CAAC,mBAAmB;IAa3B;;;;OAIG;IACH,OAAO,CAAC,gBAAgB;IA0BxB;;;;;;;;;;OAUG;IACH,OAAO,CAAC,gBAAgB;IA+CxB;;;;OAIG;IACH,OAAO,CAAC,uBAAuB;IAsC/B;;OAEG;IACH,OAAO,CAAC,2BAA2B;IAiCnC;;OAEG;IACH,OAAO,CAAC,uBAAuB;CA8BhC;AAED;;GAEG;AACH,eAAO,MAAM,YAAY,wBAA+B,CAAC"}