@uofx/cli 1.0.0

package/dist/infrastructure/utils/error-formatter.util.js

@@ -0,0 +1,29 @@
+"use strict";
+/**
+ * 錯誤格式化工具
+ * 提供統一的錯誤訊息轉換方法
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.formatErrorMessage = formatErrorMessage;
+exports.toError = toError;
+/**
+ * 從 unknown 類型的錯誤中提取訊息字串
+ * @param error - 任何類型的錯誤
+ * @returns 錯誤訊息字串
+ */
+function formatErrorMessage(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+/**
+ * 將錯誤轉換為 Error 物件
+ * @param error - 任何類型的錯誤
+ * @param defaultMessage - 當無法轉換時使用的預設訊息
+ * @returns Error 物件
+ */
+function toError(error, defaultMessage = 'Unknown error') {
+    if (error instanceof Error) {
+        return error;
+    }
+    return new Error(error ? String(error) : defaultMessage);
+}
+//# sourceMappingURL=error-formatter.util.js.map

package/dist/infrastructure/utils/file-operations.util.js

@@ -0,0 +1,201 @@
+"use strict";
+/**
+ * 檔案操作工具函數
+ *
+ * 提供同步和非同步檔案操作的統一介面，
+ * 減少重複程式碼並提高可維護性。
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.rotateLogFiles = rotateLogFiles;
+exports.cleanupOldLogFiles = cleanupOldLogFiles;
+exports.shouldRotate = shouldRotate;
+exports.rotateLogFilesSync = rotateLogFilesSync;
+exports.cleanupOldLogFilesSync = cleanupOldLogFilesSync;
+exports.shouldRotateSync = shouldRotateSync;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+// ============================================================================
+// 非同步版本
+// ============================================================================
+/**
+ * 執行日誌檔案輪轉（非同步）
+ */
+async function rotateLogFiles(config) {
+    const { filePath, maxFiles } = config;
+    const ext = path.extname(filePath);
+    const baseWithoutExt = filePath.slice(0, -ext.length);
+    // 刪除最舊的檔案
+    const oldestFile = `${baseWithoutExt}.${maxFiles}${ext}`;
+    await safeUnlink(oldestFile);
+    // 依序將 .n 移動到 .n+1
+    for (let i = maxFiles - 1; i >= 1; i--) {
+        const oldFile = `${baseWithoutExt}.${i}${ext}`;
+        const newFile = `${baseWithoutExt}.${i + 1}${ext}`;
+        await safeRename(oldFile, newFile);
+    }
+    // 將當前檔案移動到 .1
+    await safeRename(filePath, `${baseWithoutExt}.1${ext}`);
+}
+/**
+ * 清理過期的日誌檔案（非同步）
+ */
+async function cleanupOldLogFiles(config) {
+    const { baseDir, filePrefix, fileExtension, maxFiles } = config;
+    try {
+        const files = await fs.promises.readdir(baseDir);
+        const logFiles = files
+            .filter((f) => f.startsWith(filePrefix) && f.endsWith(fileExtension))
+            .sort()
+            .reverse();
+        for (let i = maxFiles; i < logFiles.length; i++) {
+            const filePath = path.join(baseDir, logFiles[i]);
+            await safeUnlink(filePath);
+        }
+    }
+    catch {
+        // 靜默處理：讀取目錄失敗
+    }
+}
+/**
+ * 檢查檔案大小是否超過限制（非同步）
+ */
+async function shouldRotate(filePath, maxSize) {
+    try {
+        const stats = await fs.promises.stat(filePath);
+        return stats.size >= maxSize;
+    }
+    catch {
+        return false;
+    }
+}
+// ============================================================================
+// 同步版本
+// ============================================================================
+/**
+ * 執行日誌檔案輪轉（同步）
+ */
+function rotateLogFilesSync(config) {
+    const { filePath, maxFiles } = config;
+    const ext = path.extname(filePath);
+    const baseWithoutExt = filePath.slice(0, -ext.length);
+    // 刪除最舊的檔案
+    const oldestFile = `${baseWithoutExt}.${maxFiles}${ext}`;
+    safeUnlinkSync(oldestFile);
+    // 依序將 .n 移動到 .n+1
+    for (let i = maxFiles - 1; i >= 1; i--) {
+        const oldFile = `${baseWithoutExt}.${i}${ext}`;
+        const newFile = `${baseWithoutExt}.${i + 1}${ext}`;
+        safeRenameSync(oldFile, newFile);
+    }
+    // 將當前檔案移動到 .1
+    safeRenameSync(filePath, `${baseWithoutExt}.1${ext}`);
+}
+/**
+ * 清理過期的日誌檔案（同步）
+ */
+function cleanupOldLogFilesSync(config) {
+    const { baseDir, filePrefix, fileExtension, maxFiles } = config;
+    try {
+        const files = fs.readdirSync(baseDir);
+        const logFiles = files
+            .filter((f) => f.startsWith(filePrefix) && f.endsWith(fileExtension))
+            .sort()
+            .reverse();
+        for (let i = maxFiles; i < logFiles.length; i++) {
+            const filePath = path.join(baseDir, logFiles[i]);
+            safeUnlinkSync(filePath);
+        }
+    }
+    catch {
+        // 靜默處理：讀取目錄失敗
+    }
+}
+/**
+ * 檢查檔案大小是否超過限制（同步）
+ */
+function shouldRotateSync(filePath, maxSize) {
+    try {
+        if (!fs.existsSync(filePath)) {
+            return false;
+        }
+        const stats = fs.statSync(filePath);
+        return stats.size >= maxSize;
+    }
+    catch {
+        return false;
+    }
+}
+// ============================================================================
+// 內部輔助函數
+// ============================================================================
+async function safeUnlink(filePath) {
+    try {
+        await fs.promises.unlink(filePath);
+    }
+    catch {
+        // 檔案可能不存在，靜默處理
+    }
+}
+function safeUnlinkSync(filePath) {
+    try {
+        if (fs.existsSync(filePath)) {
+            fs.unlinkSync(filePath);
+        }
+    }
+    catch {
+        // 檔案可能不存在，靜默處理
+    }
+}
+async function safeRename(oldPath, newPath) {
+    try {
+        await fs.promises.access(oldPath);
+        await fs.promises.rename(oldPath, newPath);
+    }
+    catch {
+        // 檔案可能不存在，靜默處理
+    }
+}
+function safeRenameSync(oldPath, newPath) {
+    try {
+        if (fs.existsSync(oldPath)) {
+            fs.renameSync(oldPath, newPath);
+        }
+    }
+    catch {
+        // 檔案可能不存在，靜默處理
+    }
+}
+//# sourceMappingURL=file-operations.util.js.map

package/dist/infrastructure/utils/input-validator.util.js

@@ -0,0 +1,152 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.validateInstanceName = validateInstanceName;
+exports.validateLinuxPath = validateLinuxPath;
+exports.validateUsername = validateUsername;
+exports.validateChartVersion = validateChartVersion;
+exports.validateCommandArg = validateCommandArg;
+exports.requireValidInstanceName = requireValidInstanceName;
+exports.requireValidUsername = requireValidUsername;
+exports.requireValidPath = requireValidPath;
+const instance_name_value_object_1 = require("../../domain/value-objects/instance-name.value-object");
+/**
+ * 輸入驗證工具
+ *
+ * 提供命令參數的安全驗證，防止 Command Injection 攻擊
+ */
+/**
+ * 驗證實例名稱格式
+ * 委託給 Domain VO 進行驗證，確保 Single Source of Truth
+ *
+ * @param name - 實例名稱
+ * @returns true 如果名稱格式正確
+ *
+ * @example
+ * validateInstanceName('dev')  // true
+ * validateInstanceName('test-env')  // true
+ * validateInstanceName('bad;name')  // false
+ * validateInstanceName('$(rm -rf /)')  // false
+ */
+function validateInstanceName(name) {
+    return instance_name_value_object_1.InstanceName.isValid(name);
+}
+/**
+ * 驗證 Linux 路徑格式
+ * 只允許安全的路徑字符，禁止命令注入字符
+ *
+ * @param path - 路徑字串
+ * @returns true 如果路徑格式安全
+ *
+ * @example
+ * validateLinuxPath('/home/ubuntu/data')  // true
+ * validateLinuxPath('/var/opt/mssql')  // true
+ * validateLinuxPath('/path/$(rm -rf /)')  // false
+ * validateLinuxPath('/path;rm -rf /')  // false
+ */
+function validateLinuxPath(path) {
+    if (!path || typeof path !== 'string') {
+        return false;
+    }
+    // 禁止命令注入字符: $, `, ;, &, |, (, ), {, }, [, ], <, >, \n, \r
+    const dangerousChars = /[$`;&|(){}[\]<>\n\r]/;
+    if (dangerousChars.test(path)) {
+        return false;
+    }
+    // 只允許安全的路徑字符
+    return /^[a-zA-Z0-9_\-./]+$/.test(path);
+}
+/**
+ * 驗證使用者名稱格式
+ * 只允許標準 Linux 使用者名稱字符
+ *
+ * @param username - 使用者名稱
+ * @returns true 如果使用者名稱格式正確
+ *
+ * @example
+ * validateUsername('ubuntu')  // true
+ * validateUsername('user_123')  // true
+ * validateUsername("user'; rm -rf /")  // false
+ */
+function validateUsername(username) {
+    if (!username || typeof username !== 'string') {
+        return false;
+    }
+    // Linux 使用者名稱規則：以字母開頭，只能包含字母、數字、底線、連字號
+    // 長度限制 1-32 字符
+    return /^[a-z_][a-z0-9_-]{0,31}$/.test(username);
+}
+/**
+ * 驗證 Chart 版本格式
+ * 只允許語義化版本號格式
+ *
+ * @param version - 版本字串
+ * @returns true 如果版本格式正確
+ *
+ * @example
+ * validateChartVersion('1.0.0')  // true
+ * validateChartVersion('1.2.3-beta.1')  // true
+ * validateChartVersion('0.0.0-dev')  // true
+ * validateChartVersion('$(rm -rf /)')  // false
+ */
+function validateChartVersion(version) {
+    if (!version || typeof version !== 'string') {
+        return false;
+    }
+    // 語義化版本號：major.minor.patch[-prerelease][+build]
+    return /^[0-9]+\.[0-9]+\.[0-9]+(-[a-zA-Z0-9.-]+)?(\+[a-zA-Z0-9.-]+)?$/.test(version);
+}
+/**
+ * 驗證命令參數是否安全
+ * 檢查是否包含危險的 shell 字符
+ *
+ * @param arg - 命令參數
+ * @returns true 如果參數安全
+ */
+function validateCommandArg(arg) {
+    if (!arg || typeof arg !== 'string') {
+        return false;
+    }
+    // 禁止 shell 元字符
+    const dangerousChars = /[$`;&|(){}[\]<>\n\r\\'"]/;
+    return !dangerousChars.test(arg);
+}
+/**
+ * 確保實例名稱有效，無效則拋出錯誤
+ *
+ * @param name - 實例名稱
+ * @throws Error 如果名稱無效
+ */
+function requireValidInstanceName(name) {
+    if (!validateInstanceName(name)) {
+        throw new Error(`Invalid instance name: '${name}'. ` +
+            `Instance name must be 1-50 characters, start and end with alphanumeric characters, ` +
+            `and contain only letters, numbers, and hyphens.`);
+    }
+}
+/**
+ * 確保使用者名稱有效，無效則拋出錯誤
+ *
+ * @param username - 使用者名稱
+ * @throws Error 如果使用者名稱無效
+ */
+function requireValidUsername(username) {
+    if (!validateUsername(username)) {
+        throw new Error(`Invalid username: '${username}'. ` +
+            `Username must start with a lowercase letter or underscore, ` +
+            `contain only lowercase letters, numbers, underscores, and hyphens, ` +
+            `and be at most 32 characters.`);
+    }
+}
+/**
+ * 確保路徑有效，無效則拋出錯誤
+ *
+ * @param path - 路徑
+ * @throws Error 如果路徑無效
+ */
+function requireValidPath(path) {
+    if (!validateLinuxPath(path)) {
+        throw new Error(`Invalid path: '${path}'. ` +
+            `Path contains dangerous characters or is in an invalid format.`);
+    }
+}
+//# sourceMappingURL=input-validator.util.js.map

package/dist/infrastructure/utils/retry.util.js

@@ -0,0 +1,98 @@
+"use strict";
+/**
+ * 重試工具
+ *
+ * 提供可配置的重試邏輯，支援退避策略
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isRetryableNetworkError = isRetryableNetworkError;
+exports.retryWithBackoff = retryWithBackoff;
+exports.createHelmRetryOptions = createHelmRetryOptions;
+/**
+ * 預設的可重試錯誤判斷
+ * 檢查是否為網路相關錯誤
+ */
+function isRetryableNetworkError(error) {
+    const message = error.message || '';
+    return (message.includes('connection refused') ||
+        message.includes('dial tcp') ||
+        message.includes('ECONNREFUSED') ||
+        message.includes('ETIMEDOUT') ||
+        message.includes('ENOTFOUND'));
+}
+/**
+ * 帶退避策略的重試執行器
+ *
+ * @param operation - 要執行的非同步操作
+ * @param options - 重試選項
+ * @returns 操作結果
+ * @throws 最後一次失敗的錯誤
+ *
+ * @example
+ * ```typescript
+ * const result = await retryWithBackoff(
+ *   () => fetchData(),
+ *   {
+ *     maxRetries: 3,
+ *     delayMs: 1000,
+ *     backoffMultiplier: 2,
+ *     shouldRetry: isRetryableNetworkError,
+ *     onRetry: (attempt, error) => console.log(`Retry ${attempt}: ${error.message}`)
+ *   }
+ * );
+ * ```
+ */
+async function retryWithBackoff(operation, options) {
+    const { maxRetries, delayMs, backoffMultiplier = 1, maxDelayMs = 60000, shouldRetry = () => true, onRetry, } = options;
+    let lastError = null;
+    let currentDelay = delayMs;
+    for (let attempt = 0; attempt <= maxRetries; attempt++) {
+        try {
+            return await operation();
+        }
+        catch (err) {
+            lastError = err;
+            // 最後一次嘗試失敗，直接拋出
+            if (attempt >= maxRetries) {
+                break;
+            }
+            // 檢查是否應該重試
+            if (!shouldRetry(lastError)) {
+                throw lastError;
+            }
+            // 執行重試回調
+            if (onRetry) {
+                onRetry(attempt + 1, lastError);
+            }
+            // 等待後重試
+            await sleep(currentDelay);
+            // 計算下次延遲（使用退避策略）
+            currentDelay = Math.min(currentDelay * backoffMultiplier, maxDelayMs);
+        }
+    }
+    throw lastError;
+}
+/**
+ * 延遲指定時間
+ * @param ms - 毫秒數
+ */
+function sleep(ms) {
+    return new Promise(resolve => setTimeout(resolve, ms));
+}
+/**
+ * 建立 Helm 安裝的重試選項
+ * 預設配置適用於 Helm chart 安裝
+ *
+ * @param options - 自訂選項
+ * @returns 完整的重試選項
+ */
+function createHelmRetryOptions(options) {
+    return {
+        maxRetries: options?.maxRetries ?? 3,
+        delayMs: options?.delayMs ?? 5000,
+        backoffMultiplier: 1,
+        shouldRetry: isRetryableNetworkError,
+        onRetry: options?.onRetry,
+    };
+}
+//# sourceMappingURL=retry.util.js.map

package/dist/presentation/controllers/config.controller.js

@@ -0,0 +1,146 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ConfigController = void 0;
+const tsyringe_1 = require("tsyringe");
+const tokens_1 = require("../../di/tokens");
+const get_config_use_case_1 = require("../../application/use-cases/config/get-config.use-case");
+const set_config_use_case_1 = require("../../application/use-cases/config/set-config.use-case");
+const error_formatter_util_1 = require("../../infrastructure/utils/error-formatter.util");
+/**
+ * Config Controller
+ *
+ * 處理設定相關的 CLI 命令
+ */
+let ConfigController = class ConfigController {
+    constructor(getConfigUseCase, setConfigUseCase, output) {
+        this.getConfigUseCase = getConfigUseCase;
+        this.setConfigUseCase = setConfigUseCase;
+        this.output = output;
+    }
+    /**
+     * 列出所有配置
+     */
+    async list(_format = 'table') {
+        try {
+            const configs = await this.getConfigUseCase.getAll();
+            this.output
+                .newline()
+                .section('Current Configurations')
+                .divider();
+            // 顯示 Log Level
+            if (configs.logLevel) {
+                this.output
+                    .newline()
+                    .item('bullet', `Log Level: ${configs.logLevel}`);
+            }
+            // 顯示 ACR 憑證（如果有）
+            if (configs.defaultAcrCredentials) {
+                this.output
+                    .newline()
+                    .section('Default ACR Credentials')
+                    .item('bullet', `Name: ${configs.defaultAcrCredentials.name}`)
+                    .item('bullet', `Account: ${configs.defaultAcrCredentials.account}`)
+                    .item('bullet', `Password: ********`);
+            }
+            else {
+                this.output
+                    .newline()
+                    .item('bullet', 'Default ACR Credentials: (not set)');
+            }
+            this.output
+                .newline()
+                .divider()
+                .render();
+        }
+        catch (error) {
+            this.output
+                .error(`Failed to list configurations: ${(0, error_formatter_util_1.formatErrorMessage)(error)}`)
+                .render();
+            throw error;
+        }
+    }
+    /**
+     * 設定配置值
+     */
+    async set(options) {
+        try {
+            // 驗證 log-level
+            if (options.logLevel) {
+                const validLevels = ['debug', 'info', 'error'];
+                if (!validLevels.includes(options.logLevel)) {
+                    this.output
+                        .error(`Invalid log level: ${options.logLevel}. Valid values: ${validLevels.join(', ')}`)
+                        .render();
+                    return;
+                }
+            }
+            // 處理 ACR credentials
+            const acrName = options['acr.name'];
+            const acrAccount = options['acr.account'];
+            const acrPassword = options['acr.password'];
+            // 驗證 ACR credentials
+            if ((acrName || acrAccount || acrPassword) && !(acrName && acrAccount && acrPassword)) {
+                this.output
+                    .error('ACR credentials require all three: --acr.name, --acr.account, --acr.password')
+                    .render();
+                return;
+            }
+            // 檢查是否有任何配置變更
+            const hasChanges = options.logLevel || (acrName && acrAccount && acrPassword);
+            if (!hasChanges) {
+                this.output
+                    .info('No configuration changes specified')
+                    .newline()
+                    .section('Available Options')
+                    .item('bullet', '--log-level <level>     Set log level (debug, info, error)')
+                    .item('bullet', '--acr.name <name>       Set ACR name')
+                    .item('bullet', '--acr.account <account> Set ACR account')
+                    .item('bullet', '--acr.password <pass>   Set ACR password')
+                    .render();
+                return;
+            }
+            // 使用統一的 execute 方法
+            await this.setConfigUseCase.execute({
+                logLevel: options.logLevel,
+                acrName,
+                acrAccount,
+                acrPassword,
+            });
+            if (options.logLevel) {
+                this.output.success(`Log level set to "${options.logLevel}"`);
+            }
+            if (acrName && acrAccount && acrPassword) {
+                this.output.success('Default ACR credentials set');
+            }
+            this.output.render();
+        }
+        catch (error) {
+            this.output
+                .error(`Failed to set configuration: ${(0, error_formatter_util_1.formatErrorMessage)(error)}`)
+                .render();
+            throw error;
+        }
+    }
+};
+exports.ConfigController = ConfigController;
+exports.ConfigController = ConfigController = __decorate([
+    (0, tsyringe_1.injectable)(),
+    __param(0, (0, tsyringe_1.inject)(tokens_1.TOKENS.GetConfigUseCase)),
+    __param(1, (0, tsyringe_1.inject)(tokens_1.TOKENS.SetConfigUseCase)),
+    __param(2, (0, tsyringe_1.inject)(tokens_1.TOKENS.IOutputPort)),
+    __metadata("design:paramtypes", [get_config_use_case_1.GetConfigUseCase,
+        set_config_use_case_1.SetConfigUseCase, Object])
+], ConfigController);
+//# sourceMappingURL=config.controller.js.map