@venturekit/core 0.0.0-dev.20260307234057

package/dist/types/security.d.ts

@@ -0,0 +1,54 @@
+/**
+ * VentureKit Security Configuration Types
+ *
+ * OAuth scopes, app clients, and authentication settings.
+ * Separated from base.ts to keep config files manageable.
+ */
+/**
+ * OAuth scope definition
+ */
+export interface OAuthScope {
+    /** Scope name (e.g., 'projects.read', 'users.write') */
+    name: string;
+    /** Scope description */
+    description: string;
+}
+/**
+ * App client configuration
+ */
+export interface AppClient {
+    /** Client name (e.g., 'web-app', 'mobile-app', 'admin-dashboard') */
+    name: string;
+    /** Allowed OAuth scopes for this client */
+    allowedScopes: string[];
+    /** Whether this client supports refresh tokens */
+    supportsRefreshTokens: boolean;
+    /** Generate client secret (true for server-side, false for SPA/mobile) */
+    generateSecret?: boolean;
+    /** Access token validity in hours (default: 1) */
+    accessTokenValidityHours?: number;
+    /** Refresh token validity in days (default: 30) */
+    refreshTokenValidityDays?: number;
+}
+/**
+ * Security configuration - authentication and authorization settings
+ *
+ * Defined ONCE and shared across all environments.
+ * Keep separate from base.ts to avoid config file bloat.
+ */
+export interface SecurityConfig {
+    /** All available OAuth scopes for this project */
+    scopes: OAuthScope[];
+    /** App clients and their allowed scopes */
+    appClients: AppClient[];
+    /** MFA setting (default: 'optional') */
+    mfa?: 'off' | 'optional' | 'required';
+    /** Password policy */
+    passwordPolicy?: {
+        minLength?: number;
+        requireUppercase?: boolean;
+        requireLowercase?: boolean;
+        requireNumbers?: boolean;
+        requireSymbols?: boolean;
+    };
+}

package/dist/types/security.js

@@ -0,0 +1,9 @@
+"use strict";
+/**
+ * VentureKit Security Configuration Types
+ *
+ * OAuth scopes, app clients, and authentication settings.
+ * Separated from base.ts to keep config files manageable.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=data:application/json;base64,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

package/dist/types/vpc.d.ts

@@ -0,0 +1,65 @@
+/**
+ * VPC Environment Configuration
+ *
+ * Controls networking per environment.
+ * All fields are REQUIRED - no implicit defaults at the type level.
+ */
+/**
+ * Subnet configuration
+ */
+export interface SubnetConfig {
+    /** CIDR mask for subnets (e.g., 24 for /24) */
+    cidrMask: number;
+}
+/**
+ * Security group rule
+ */
+export interface SecurityGroupRule {
+    /** Protocol (tcp, udp, icmp, -1 for all) */
+    protocol: string;
+    /** Port range start */
+    fromPort: number;
+    /** Port range end */
+    toPort: number;
+    /** CIDR blocks to allow */
+    cidrBlocks?: string[];
+    /** Description */
+    description?: string;
+}
+/**
+ * VPC configuration
+ *
+ * All fields required - use presets or explicit values.
+ */
+export interface VpcEnvConfig {
+    /** Number of availability zones (1-3) */
+    maxAzs: number;
+    /** Number of NAT gateways (0 = no private subnet internet access) */
+    natGateways: number;
+    /** CIDR block for the VPC */
+    cidr: string;
+    /** Enable VPC flow logs for network monitoring */
+    flowLogsEnabled: boolean;
+    /** Flow logs retention in days */
+    flowLogsRetentionDays: number;
+    /** Public subnet configuration */
+    publicSubnets: SubnetConfig;
+    /** Private subnet configuration (for Lambda, RDS) */
+    privateSubnets: SubnetConfig;
+    /** Isolated subnet configuration (no internet, for RDS) */
+    isolatedSubnets: SubnetConfig | undefined;
+    /** Enable VPC endpoints for AWS services (S3, DynamoDB, etc.) */
+    enableVpcEndpoints: boolean;
+    /** Additional ingress rules for Lambda security group */
+    lambdaSecurityGroupIngress: SecurityGroupRule[];
+    /** Additional egress rules for Lambda security group */
+    lambdaSecurityGroupEgress: SecurityGroupRule[];
+}
+/**
+ * VPC configuration input (for user overrides)
+ */
+export type VpcEnvConfigInput = Partial<Omit<VpcEnvConfig, 'publicSubnets' | 'privateSubnets' | 'isolatedSubnets'>> & {
+    publicSubnets?: Partial<SubnetConfig>;
+    privateSubnets?: Partial<SubnetConfig>;
+    isolatedSubnets?: Partial<SubnetConfig>;
+};

package/dist/types/vpc.js

@@ -0,0 +1,9 @@
+"use strict";
+/**
+ * VPC Environment Configuration
+ *
+ * Controls networking per environment.
+ * All fields are REQUIRED - no implicit defaults at the type level.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=data:application/json;base64,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

package/dist/types/websocket.d.ts

@@ -0,0 +1,24 @@
+/**
+ * VentureKit WebSocket Configuration Types
+ *
+ * WebSocket API Gateway configuration for real-time features.
+ */
+/**
+ * WebSocket configuration
+ */
+export interface WebSocketEnvConfig {
+    /** Enable WebSocket API (default: false) */
+    enabled: boolean;
+    /** Route selection expression (default: '$request.body.action') */
+    routeSelectionExpression: string;
+    /** Idle connection timeout in seconds (default: 600, max: 7200) */
+    idleTimeoutSec: number;
+    /** Throttle rate limit (messages per second) */
+    throttleRateLimit: number;
+    /** Throttle burst limit */
+    throttleBurstLimit: number;
+}
+/**
+ * WebSocket configuration input (for user overrides)
+ */
+export type WebSocketEnvConfigInput = Partial<WebSocketEnvConfig>;

package/dist/types/websocket.js

@@ -0,0 +1,8 @@
+"use strict";
+/**
+ * VentureKit WebSocket Configuration Types
+ *
+ * WebSocket API Gateway configuration for real-time features.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=data:application/json;base64,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

package/dist/validate.d.ts

@@ -0,0 +1,41 @@
+/**
+ * VentureKit Configuration Validation
+ *
+ * Validates configuration before it reaches infrastructure.
+ * Catches errors early with clear, actionable messages.
+ */
+import type { BaseConfig } from './types/base';
+import type { SecurityConfig } from './types/security';
+import type { EnvConfigInput, Environment } from './types/env';
+/**
+ * Validation error
+ */
+export declare class ValidationError extends Error {
+    readonly field: string;
+    readonly message: string;
+    readonly value?: unknown | undefined;
+    constructor(field: string, message: string, value?: unknown | undefined);
+}
+/**
+ * Validation result
+ */
+export interface ValidationResult {
+    valid: boolean;
+    errors: ValidationError[];
+}
+/**
+ * Validate base configuration
+ */
+export declare function validateBaseConfig(config: BaseConfig): ValidationResult;
+/**
+ * Validate security configuration
+ */
+export declare function validateSecurityConfig(config: SecurityConfig): ValidationResult;
+/**
+ * Validate environment configuration input
+ */
+export declare function validateEnvConfigInput(env: Environment, config: EnvConfigInput): ValidationResult;
+/**
+ * Assert validation passes, throw if not
+ */
+export declare function assertValid(result: ValidationResult): void;

package/dist/validate.js

@@ -0,0 +1,162 @@
+"use strict";
+/**
+ * VentureKit Configuration Validation
+ *
+ * Validates configuration before it reaches infrastructure.
+ * Catches errors early with clear, actionable messages.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ValidationError = void 0;
+exports.validateBaseConfig = validateBaseConfig;
+exports.validateSecurityConfig = validateSecurityConfig;
+exports.validateEnvConfigInput = validateEnvConfigInput;
+exports.assertValid = assertValid;
+/**
+ * Validation error
+ */
+class ValidationError extends Error {
+    field;
+    message;
+    value;
+    constructor(field, message, value) {
+        super(`${field}: ${message}`);
+        this.field = field;
+        this.message = message;
+        this.value = value;
+        this.name = 'ValidationError';
+    }
+}
+exports.ValidationError = ValidationError;
+/**
+ * Create a successful validation result
+ */
+function ok() {
+    return { valid: true, errors: [] };
+}
+/**
+ * Create a failed validation result
+ */
+function fail(errors) {
+    return { valid: false, errors };
+}
+/**
+ * Merge validation results
+ */
+function merge(...results) {
+    const errors = results.flatMap(r => r.errors);
+    return { valid: errors.length === 0, errors };
+}
+/**
+ * Validate base configuration
+ */
+function validateBaseConfig(config) {
+    const errors = [];
+    // Name validation
+    if (!config.name) {
+        errors.push(new ValidationError('name', 'Project name is required'));
+    }
+    else if (!/^[a-z][a-z0-9-]*$/.test(config.name)) {
+        errors.push(new ValidationError('name', 'Project name must start with lowercase letter and contain only lowercase letters, numbers, and hyphens', config.name));
+    }
+    else if (config.name.length > 32) {
+        errors.push(new ValidationError('name', 'Project name must be 32 characters or less', config.name));
+    }
+    // Display name
+    if (!config.displayName) {
+        errors.push(new ValidationError('displayName', 'Display name is required'));
+    }
+    // Region validation
+    if (!config.region) {
+        errors.push(new ValidationError('region', 'AWS region is required'));
+    }
+    else if (!/^[a-z]{2}-[a-z]+-\d$/.test(config.region)) {
+        errors.push(new ValidationError('region', 'Invalid AWS region format (e.g., eu-west-1)', config.region));
+    }
+    return errors.length > 0 ? fail(errors) : ok();
+}
+/**
+ * Validate security configuration
+ */
+function validateSecurityConfig(config) {
+    const errors = [];
+    // Scopes validation
+    if (!config.scopes || config.scopes.length === 0) {
+        errors.push(new ValidationError('scopes', 'At least one OAuth scope is required'));
+    }
+    else {
+        config.scopes.forEach((scope, i) => {
+            if (!scope.name) {
+                errors.push(new ValidationError(`scopes[${i}].name`, 'Scope name is required'));
+            }
+            else if (!/^[a-z][a-z0-9.]*$/.test(scope.name)) {
+                errors.push(new ValidationError(`scopes[${i}].name`, 'Scope name must be lowercase with dots (e.g., projects.read)', scope.name));
+            }
+        });
+    }
+    // App clients validation
+    if (!config.appClients || config.appClients.length === 0) {
+        errors.push(new ValidationError('appClients', 'At least one app client is required'));
+    }
+    else {
+        const scopeNames = new Set(config.scopes?.map(s => s.name) || []);
+        config.appClients.forEach((client, i) => {
+            if (!client.name) {
+                errors.push(new ValidationError(`appClients[${i}].name`, 'Client name is required'));
+            }
+            client.allowedScopes.forEach((scope, j) => {
+                if (!scopeNames.has(scope)) {
+                    errors.push(new ValidationError(`appClients[${i}].allowedScopes[${j}]`, `Scope "${scope}" is not defined in scopes`, scope));
+                }
+            });
+        });
+    }
+    return errors.length > 0 ? fail(errors) : ok();
+}
+/**
+ * Validate environment configuration input
+ */
+function validateEnvConfigInput(env, config) {
+    const errors = [];
+    // Lambda validation
+    if (config.lambda) {
+        if (config.lambda.memoryMb !== undefined) {
+            if (config.lambda.memoryMb < 128 || config.lambda.memoryMb > 10240) {
+                errors.push(new ValidationError(`${env}.lambda.memoryMb`, 'Lambda memory must be between 128 and 10240 MB', config.lambda.memoryMb));
+            }
+        }
+        if (config.lambda.timeoutSec !== undefined) {
+            if (config.lambda.timeoutSec < 1 || config.lambda.timeoutSec > 900) {
+                errors.push(new ValidationError(`${env}.lambda.timeoutSec`, 'Lambda timeout must be between 1 and 900 seconds', config.lambda.timeoutSec));
+            }
+        }
+    }
+    // API validation
+    if (config.api) {
+        if (config.api.throttleRateLimit !== undefined && config.api.throttleRateLimit < 1) {
+            errors.push(new ValidationError(`${env}.api.throttleRateLimit`, 'API rate limit must be at least 1', config.api.throttleRateLimit));
+        }
+        if (config.api.throttleBurstLimit !== undefined && config.api.throttleBurstLimit < 1) {
+            errors.push(new ValidationError(`${env}.api.throttleBurstLimit`, 'API burst limit must be at least 1', config.api.throttleBurstLimit));
+        }
+    }
+    // VPC validation
+    if (config.vpc) {
+        if (config.vpc.maxAzs !== undefined && (config.vpc.maxAzs < 1 || config.vpc.maxAzs > 3)) {
+            errors.push(new ValidationError(`${env}.vpc.maxAzs`, 'VPC must have 1-3 availability zones', config.vpc.maxAzs));
+        }
+        if (config.vpc.natGateways !== undefined && config.vpc.natGateways < 0) {
+            errors.push(new ValidationError(`${env}.vpc.natGateways`, 'NAT gateways cannot be negative', config.vpc.natGateways));
+        }
+    }
+    return errors.length > 0 ? fail(errors) : ok();
+}
+/**
+ * Assert validation passes, throw if not
+ */
+function assertValid(result) {
+    if (!result.valid) {
+        const messages = result.errors.map(e => `  - ${e.field}: ${e.message}`).join('\n');
+        throw new Error(`Configuration validation failed:\n${messages}`);
+    }
+}
+//# sourceMappingURL=data:application/json;base64,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

package/package.json

@@ -0,0 +1,33 @@
+{
+  "name": "@venturekit/core",
+  "version": "0.0.0-dev.20260307234057",
+  "description": "VentureKit core types, presets, and configuration resolution.",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "files": [
+    "dist"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/venturekit-dev/venturekit.private.git",
+    "directory": "packages/core"
+  },
+  "publishConfig": {
+    "registry": "https://registry.npmjs.org",
+    "access": "public"
+  },
+  "keywords": [
+    "venturekit",
+    "saas",
+    "config"
+  ],
+  "license": "Apache-2.0",
+  "devDependencies": {
+    "typescript": "^5.3.0"
+  },
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsc --watch",
+    "clean": "rm -rf dist"
+  }
+}