infrawise 0.2.2 → 0.3.0

package/dist/adapters/aws.js

@@ -22,9 +22,17 @@ const credential_providers_1 = require("@aws-sdk/credential-providers");
 const core_1 = require("../core");
 function clientConfig(cfg) {
     const region = cfg.region ?? 'us-east-1';
-    return cfg.profile
-        ? { region, credentials: (0, credential_providers_1.fromIni)({ profile: cfg.profile }) }
-        : { region };
+    const base = { region };
+    if (cfg.endpoint)
+        base.endpoint = cfg.endpoint;
+    if (cfg.profile)
+        base.credentials = (0, credential_providers_1.fromIni)({ profile: cfg.profile });
+    else if (cfg.endpoint)
+        base.credentials = {
+            accessKeyId: process.env.AWS_ACCESS_KEY_ID ?? 'test',
+            secretAccessKey: process.env.AWS_SECRET_ACCESS_KEY ?? 'test',
+        };
+    return base;
 }
 // ─── SQS ─────────────────────────────────────────────────────────────────────
 async function extractSQSMetadata(cfg = {}) {

package/dist/adapters/dynamodb.js

@@ -2,16 +2,24 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.extractDynamoMetadata = extractDynamoMetadata;
 exports.validateDynamoAccess = validateDynamoAccess;
+exports.probeDynamoAccess = probeDynamoAccess;
 const client_dynamodb_1 = require("@aws-sdk/client-dynamodb");
 const credential_providers_1 = require("@aws-sdk/credential-providers");
 const core_1 = require("../core");
 function createDynamoClient(config) {
     const region = config.aws?.region ?? 'us-east-1';
     const profile = config.aws?.profile;
+    const endpoint = config.aws?.endpoint;
     const clientConfig = { region };
-    if (profile) {
+    if (endpoint)
+        clientConfig.endpoint = endpoint;
+    if (profile)
         clientConfig.credentials = (0, credential_providers_1.fromIni)({ profile });
-    }
+    else if (endpoint)
+        clientConfig.credentials = {
+            accessKeyId: process.env.AWS_ACCESS_KEY_ID ?? 'test',
+            secretAccessKey: process.env.AWS_SECRET_ACCESS_KEY ?? 'test',
+        };
     return new client_dynamodb_1.DynamoDBClient(clientConfig);
 }
 function parseTableDescription(desc) {
@@ -95,3 +103,7 @@ async function validateDynamoAccess(config) {
         return false;
     }
 }
+async function probeDynamoAccess(config) {
+    const client = createDynamoClient(config);
+    await client.send(new client_dynamodb_1.ListTablesCommand({ Limit: 1 }));
+}

package/dist/adapters/logs.js

@@ -10,9 +10,17 @@ const MAX_LOG_GROUPS = 50;
 const MAX_EVENTS_PER_GROUP = 50;
 function clientConfig(cfg) {
     const region = cfg.region ?? 'us-east-1';
-    return cfg.profile
-        ? { region, credentials: (0, credential_providers_1.fromIni)({ profile: cfg.profile }) }
-        : { region };
+    const base = { region };
+    if (cfg.endpoint)
+        base.endpoint = cfg.endpoint;
+    if (cfg.profile)
+        base.credentials = (0, credential_providers_1.fromIni)({ profile: cfg.profile });
+    else if (cfg.endpoint)
+        base.credentials = {
+            accessKeyId: process.env.AWS_ACCESS_KEY_ID ?? 'test',
+            secretAccessKey: process.env.AWS_SECRET_ACCESS_KEY ?? 'test',
+        };
+    return base;
 }
 // Strip UUIDs, timestamps, numbers → group similar messages by pattern
 function toPattern(message) {

package/dist/cli/commands/analyze.js

@@ -64,7 +64,7 @@ async function runAnalyze(options = {}) {
         process.exit(1);
     }
     const repoPath = options.repo ?? process.cwd();
-    const awsCfg = { region: config.aws?.region, profile: config.aws?.profile };
+    const awsCfg = { region: config.aws?.region, profile: config.aws?.profile, endpoint: config.aws?.endpoint };
     const dynamoMeta = [];
     const postgresMeta = [];
     const mysqlMeta = [];

package/dist/cli/commands/doctor.js

@@ -113,7 +113,7 @@ async function runDoctor(options = {}) {
             detail: hasCreds ? undefined : 'Run: aws configure',
         };
     }));
-    const awsCfg = { region: config?.aws?.region, profile: config?.aws?.profile };
+    const awsCfg = { region: config?.aws?.region, profile: config?.aws?.profile, endpoint: config?.aws?.endpoint };
     // DynamoDB
     results.push(await runCheck('Testing DynamoDB access...', async () => {
         if (!config)
@@ -121,15 +121,15 @@ async function runDoctor(options = {}) {
         if (config.dynamodb?.enabled !== true)
             return { name: 'DynamoDB', status: 'skip', message: 'Disabled in config' };
         try {
-            const ok = await (0, dynamodb_1.validateDynamoAccess)(config);
-            return {
-                name: 'DynamoDB', status: ok ? 'pass' : 'warn',
-                message: ok ? `Connected (profile: ${config.aws?.profile ?? 'default'})` : 'Cannot connect',
-                detail: ok ? undefined : 'Check IAM: dynamodb:ListTables, dynamodb:DescribeTable',
-            };
+            await (0, dynamodb_1.probeDynamoAccess)(config);
+            return { name: 'DynamoDB', status: 'pass', message: `Connected (profile: ${config.aws?.profile ?? 'default'})` };
         }
         catch (err) {
-            return { name: 'DynamoDB', status: 'warn', message: err instanceof Error ? err.message : String(err) };
+            return {
+                name: 'DynamoDB', status: 'warn',
+                message: err instanceof Error ? err.message : String(err),
+                detail: 'Check IAM: dynamodb:ListTables, dynamodb:DescribeTable',
+            };
         }
     }));
     // SQS
@@ -293,7 +293,11 @@ async function runDoctor(options = {}) {
     // IaC detection
     results.push(await runCheck('Detecting IaC files...', async () => {
         const cwd = process.cwd();
-        const hasTF = fs.existsSync(path.join(cwd, 'main.tf')) || fs.readdirSync(cwd).some((f) => f.endsWith('.tf'));
+        const hasTfFile = (dir) => fs.existsSync(dir) && fs.readdirSync(dir).some((f) => f.endsWith('.tf'));
+        const hasTF = hasTfFile(cwd) || fs.readdirSync(cwd).some((entry) => {
+            const full = path.join(cwd, entry);
+            return fs.statSync(full).isDirectory() && hasTfFile(full);
+        });
         const hasCFN = fs.existsSync(path.join(cwd, 'template.yaml')) || fs.existsSync(path.join(cwd, 'template.json'));
         const hasCDK = fs.existsSync(path.join(cwd, 'cdk.json'));
         const hasCDKOut = fs.existsSync(path.join(cwd, 'cdk.out'));

package/dist/cli/commands/init.js

@@ -71,7 +71,13 @@ async function runInit(options = {}) {
             type: 'list',
             name: 'awsProfile',
             message: 'AWS profile:',
-            choices: profiles,
+            choices: [
+                new inquirer_1.default.Separator('── no profile ──'),
+                { name: 'Environment variables  (CI/CD, real AWS)', value: '__env__' },
+                { name: 'LocalStack  (local development)', value: '__localstack__' },
+                new inquirer_1.default.Separator('── named profiles ──'),
+                ...profiles,
+            ],
             default: profiles[0],
         },
         {
@@ -80,24 +86,18 @@ async function runInit(options = {}) {
             message: 'AWS region:',
             default: detectedRegion,
         },
+        {
+            type: 'input',
+            name: 'endpoint',
+            message: 'LocalStack endpoint:',
+            default: 'http://localhost:4566',
+            when: (a) => a.awsProfile === '__localstack__',
+        },
     ]);
     // ── Databases ──────────────────────────────────────────────────────────────
     console.log('\n  ' + chalk_1.default.bold('Databases'));
+    console.log(chalk_1.default.dim('  Self-hosted databases (PostgreSQL, MySQL, MongoDB).'));
     const databases = await inquirer_1.default.prompt([
-        {
-            type: 'confirm',
-            name: 'dynamoEnabled',
-            message: 'Enable DynamoDB analysis?',
-            default: true,
-        },
-        {
-            type: 'input',
-            name: 'dynamoTables',
-            message: 'DynamoDB tables to include:',
-            default: '',
-            suffix: chalk_1.default.dim(' (comma-separated, blank = all)'),
-            when: (a) => a.dynamoEnabled,
-        },
         {
             type: 'confirm',
             name: 'pgEnabled',
@@ -140,8 +140,22 @@ async function runInit(options = {}) {
     ]);
     // ── AWS services ───────────────────────────────────────────────────────────
     console.log('\n  ' + chalk_1.default.bold('AWS Services'));
-    console.log(chalk_1.default.dim('  Infrawise will introspect these services — credentials from the AWS profile above.'));
+    console.log(chalk_1.default.dim('  Infrawise will introspect these services using the credentials configured above.'));
     const services = await inquirer_1.default.prompt([
+        {
+            type: 'confirm',
+            name: 'dynamoEnabled',
+            message: 'Introspect DynamoDB?',
+            default: true,
+        },
+        {
+            type: 'input',
+            name: 'dynamoTables',
+            message: 'DynamoDB tables to include:',
+            default: '',
+            suffix: chalk_1.default.dim(' (comma-separated, blank = all)'),
+            when: (a) => a.dynamoEnabled,
+        },
         {
             type: 'confirm',
             name: 'sqsEnabled',
@@ -196,8 +210,8 @@ async function runInit(options = {}) {
         },
     ]);
     // ── Build config ───────────────────────────────────────────────────────────
-    const includeTables = databases.dynamoTables
-        ? databases.dynamoTables.split(',').map((t) => t.trim()).filter(Boolean)
+    const includeTables = services.dynamoTables
+        ? services.dynamoTables.split(',').map((t) => t.trim()).filter(Boolean)
         : [];
     const ssmPaths = services.ssmPaths
         ? services.ssmPaths.split(',').map((p) => p.trim()).filter(Boolean)
@@ -205,9 +219,13 @@ async function runInit(options = {}) {
     const logGroupPrefixes = services.logGroupPrefixes
         ? services.logGroupPrefixes.split(',').map((p) => p.trim()).filter(Boolean)
         : [];
+    const isLocalStack = core.awsProfile === '__localstack__';
+    const isEnvVars = core.awsProfile === '__env__';
+    const resolvedProfile = isLocalStack || isEnvVars ? '' : core.awsProfile;
+    const resolvedEndpoint = isLocalStack ? (core.endpoint || 'http://localhost:4566') : undefined;
     const configContent = (0, core_1.generateDefaultConfig)(core.project, {
-        aws: { profile: core.awsProfile, region: core.region },
-        dynamodb: { enabled: databases.dynamoEnabled, includeTables },
+        aws: { profile: resolvedProfile, region: core.region, endpoint: resolvedEndpoint },
+        dynamodb: { enabled: services.dynamoEnabled, includeTables },
         postgres: { enabled: databases.pgEnabled, connectionString: databases.pgConnectionString ?? '' },
         mysql: { enabled: databases.mysqlEnabled, connectionString: databases.mysqlConnectionString ?? '' },
         mongodb: { enabled: databases.mongoEnabled, connectionString: databases.mongoConnectionString ?? '' },

package/dist/core/config.js

@@ -46,6 +46,7 @@ exports.InfrawiseConfigSchema = zod_1.z.object({
         .object({
         profile: zod_1.z.string().optional().default('default'),
         region: zod_1.z.string().optional().default('us-east-1'),
+        endpoint: zod_1.z.string().optional(),
     })
         .optional()
         .default({}),
@@ -128,6 +129,7 @@ function generateDefaultConfig(projectName, options) {
         aws: {
             profile: options?.aws?.profile ?? 'default',
             region: options?.aws?.region ?? 'us-east-1',
+            ...(options?.aws?.endpoint ? { endpoint: options.aws.endpoint } : {}),
         },
         dynamodb: { enabled: options?.dynamodb?.enabled ?? true, includeTables: options?.dynamodb?.includeTables ?? [] },
         postgres: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "infrawise",
-  "version": "0.2.2",
+  "version": "0.3.0",
   "description": "CLI-first infrastructure intelligence platform — analyzes DynamoDB, PostgreSQL, MySQL, MongoDB, SQS, SNS, SSM, Secrets Manager, Lambda, CloudWatch Logs and exposes findings as an MCP server for Claude Code",
   "keywords": [
     "infrastructure",