infrawise 0.8.2 → 0.8.3

package/dist/cli/commands/init.js

@@ -184,24 +184,42 @@ export async function runInit(options = {}) {
     ]);
     // ── Build config ───────────────────────────────────────────────────────────
     const includeTables = services.dynamoTables
-        ? services.dynamoTables.split(',').map((t) => t.trim()).filter(Boolean)
+        ? services.dynamoTables
+            .split(',')
+            .map((t) => t.trim())
+            .filter(Boolean)
         : [];
     const ssmPaths = services.ssmPaths
-        ? services.ssmPaths.split(',').map((p) => p.trim()).filter(Boolean)
+        ? services.ssmPaths
+            .split(',')
+            .map((p) => p.trim())
+            .filter(Boolean)
         : [];
     const logGroupPrefixes = services.logGroupPrefixes
-        ? services.logGroupPrefixes.split(',').map((p) => p.trim()).filter(Boolean)
+        ? services.logGroupPrefixes
+            .split(',')
+            .map((p) => p.trim())
+            .filter(Boolean)
         : [];
     const isLocalStack = core.awsProfile === '__localstack__';
     const isEnvVars = core.awsProfile === '__env__';
     const resolvedProfile = isLocalStack || isEnvVars ? '' : core.awsProfile;
-    const resolvedEndpoint = isLocalStack ? (core.endpoint || 'http://localhost:4566') : undefined;
+    const resolvedEndpoint = isLocalStack ? core.endpoint || 'http://localhost:4566' : undefined;
     const configContent = generateDefaultConfig(core.project, {
         aws: { profile: resolvedProfile, region: core.region, endpoint: resolvedEndpoint },
         dynamodb: { enabled: services.dynamoEnabled, includeTables },
-        postgres: { enabled: databases.pgEnabled, connectionString: databases.pgConnectionString ?? '' },
-        mysql: { enabled: databases.mysqlEnabled, connectionString: databases.mysqlConnectionString ?? '' },
-        mongodb: { enabled: databases.mongoEnabled, connectionString: databases.mongoConnectionString ?? '' },
+        postgres: {
+            enabled: databases.pgEnabled,
+            connectionString: databases.pgConnectionString ?? '',
+        },
+        mysql: {
+            enabled: databases.mysqlEnabled,
+            connectionString: databases.mysqlConnectionString ?? '',
+        },
+        mongodb: {
+            enabled: databases.mongoEnabled,
+            connectionString: databases.mongoConnectionString ?? '',
+        },
         sqs: { enabled: services.sqsEnabled },
         sns: { enabled: services.snsEnabled },
         ssm: { enabled: services.ssmEnabled, paths: ssmPaths },

package/dist/cli/utils.js

@@ -90,10 +90,14 @@ export const log = {
 // ─── Findings ────────────────────────────────────────────────────────────────
 function severityBadge(severity) {
     switch (severity) {
-        case 'high': return chalk.bgRed.white.bold(` HIGH `);
-        case 'medium': return chalk.bgYellow.black.bold(` MED  `);
-        case 'low': return chalk.bgCyan.black.bold(` LOW  `);
-        case 'verify': return chalk.bgBlue.white.bold(` VER? `);
+        case 'high':
+            return chalk.bgRed.white.bold(` HIGH `);
+        case 'medium':
+            return chalk.bgYellow.black.bold(` MED  `);
+        case 'low':
+            return chalk.bgCyan.black.bold(` LOW  `);
+        case 'verify':
+            return chalk.bgBlue.white.bold(` VER? `);
     }
 }
 export function printFinding(finding, index) {
@@ -112,11 +116,21 @@ export function printSummaryBox(findings) {
     console.log(chalk.dim('  ┌─────────────────────────────┐'));
     console.log(chalk.dim('  │') + chalk.bold('  Analysis Summary             ') + chalk.dim('│'));
     console.log(chalk.dim('  ├─────────────────────────────┤'));
-    console.log(chalk.dim('  │') + `  ${chalk.red('●')} High     ${chalk.red.bold(String(high).padStart(3))}                 ` + chalk.dim('│'));
-    console.log(chalk.dim('  │') + `  ${chalk.yellow('●')} Medium   ${chalk.yellow.bold(String(medium).padStart(3))}                 ` + chalk.dim('│'));
-    console.log(chalk.dim('  │') + `  ${chalk.cyan('●')} Low      ${chalk.cyan.bold(String(low).padStart(3))}                 ` + chalk.dim('│'));
-    console.log(chalk.dim('  │') + `  ${chalk.blue('●')} Verify   ${chalk.blue.bold(String(verify).padStart(3))}                 ` + chalk.dim('│'));
+    console.log(chalk.dim('  │') +
+        `  ${chalk.red('●')} High     ${chalk.red.bold(String(high).padStart(3))}                 ` +
+        chalk.dim('│'));
+    console.log(chalk.dim('  │') +
+        `  ${chalk.yellow('●')} Medium   ${chalk.yellow.bold(String(medium).padStart(3))}                 ` +
+        chalk.dim('│'));
+    console.log(chalk.dim('  │') +
+        `  ${chalk.cyan('●')} Low      ${chalk.cyan.bold(String(low).padStart(3))}                 ` +
+        chalk.dim('│'));
+    console.log(chalk.dim('  │') +
+        `  ${chalk.blue('●')} Verify   ${chalk.blue.bold(String(verify).padStart(3))}                 ` +
+        chalk.dim('│'));
     console.log(chalk.dim('  ├─────────────────────────────┤'));
-    console.log(chalk.dim('  │') + `  Total    ${chalk.bold(String(findings.length).padStart(3))}                 ` + chalk.dim('│'));
+    console.log(chalk.dim('  │') +
+        `  Total    ${chalk.bold(String(findings.length).padStart(3))}                 ` +
+        chalk.dim('│'));
     console.log(chalk.dim('  └─────────────────────────────┘'));
 }

package/dist/context/index.js

@@ -23,7 +23,16 @@ const DYNAMO_OPERATIONS = new Set([
 ]);
 const DYNAMO_CLIENT_PATTERNS = ['DynamoDBClient', 'DynamoDB', 'dynamoDB', 'dynamo', 'ddb'];
 const POSTGRES_QUERY_METHODS = new Set(['query', 'execute', 'exec']);
-const KNEX_METHODS = new Set(['select', 'where', 'join', 'from', 'insert', 'update', 'delete', 'del']);
+const KNEX_METHODS = new Set([
+    'select',
+    'where',
+    'join',
+    'from',
+    'insert',
+    'update',
+    'delete',
+    'del',
+]);
 // MySQL-specific patterns
 const MYSQL_QUERY_METHODS = new Set(['query', 'execute', 'exec']);
 const MYSQL_CLIENT_PATTERNS = ['mysql', 'mysql2', 'connection', 'pool', 'conn'];
@@ -44,14 +53,29 @@ const MONGO_READ_METHODS = new Set([
 ]);
 const MONGO_COLLECTION_METHODS = new Set(['collection']);
 // ── AWS service patterns ──────────────────────────────────────────────────────
-const SQS_COMMANDS = new Set(['SendMessageCommand', 'SendMessageBatchCommand', 'ReceiveMessageCommand', 'DeleteMessageCommand', 'sendMessage', 'sendMessageBatch', 'receiveMessage']);
+const SQS_COMMANDS = new Set([
+    'SendMessageCommand',
+    'SendMessageBatchCommand',
+    'ReceiveMessageCommand',
+    'DeleteMessageCommand',
+    'sendMessage',
+    'sendMessageBatch',
+    'receiveMessage',
+]);
 const SNS_COMMANDS = new Set(['PublishCommand', 'PublishBatchCommand', 'publish', 'publishBatch']);
 // kafkajs patterns — detection relies on variable naming (producer/consumer/kafka)
 const KAFKA_PRODUCER_METHODS = new Set(['send', 'sendBatch']);
 const KAFKA_CONSUMER_METHODS = new Set(['subscribe']);
 const KAFKA_CLIENT_PATTERNS = ['kafka', 'producer', 'consumer'];
 const KAFKA_TOPIC_KEYS = ['topic'];
-const SSM_COMMANDS = new Set(['GetParameterCommand', 'GetParametersCommand', 'GetParametersByPathCommand', 'getParameter', 'getParameters', 'getParametersByPath']);
+const SSM_COMMANDS = new Set([
+    'GetParameterCommand',
+    'GetParametersCommand',
+    'GetParametersByPathCommand',
+    'getParameter',
+    'getParameters',
+    'getParametersByPath',
+]);
 const SECRETS_COMMANDS = new Set(['GetSecretValueCommand', 'getSecretValue']);
 const LAMBDA_COMMANDS = new Set(['InvokeCommand', 'InvokeAsyncCommand', 'invoke', 'invokeAsync']);
 const SQS_ARG_KEYS = ['QueueUrl', 'QueueName'];
@@ -247,9 +271,7 @@ function detectPostgresOperations(callExpr, filePath) {
     if (KNEX_METHODS.has(methodName)) {
         const calleeText = objExpr.getText();
         // Check if it's a chained knex call
-        if (calleeText.includes('knex') ||
-            calleeText.includes('db(') ||
-            calleeText.includes('trx(')) {
+        if (calleeText.includes('knex') || calleeText.includes('db(') || calleeText.includes('trx(')) {
             return {
                 functionName: getEnclosingFunctionName(callExpr),
                 operationType: methodName,
@@ -261,7 +283,10 @@ function detectPostgresOperations(callExpr, filePath) {
         // Knex call expression style: knex('users').select(...)
         if (Node.isCallExpression(objExpr)) {
             const innerExpr = objExpr.getExpression();
-            if (innerExpr.getText().toLowerCase().match(/knex|db|trx/)) {
+            if (innerExpr
+                .getText()
+                .toLowerCase()
+                .match(/knex|db|trx/)) {
                 const innerArgs = objExpr.getArguments();
                 const tableName = innerArgs.length > 0 && Node.isStringLiteral(innerArgs[0])
                     ? innerArgs[0].getLiteralValue()
@@ -513,7 +538,8 @@ function detectAWSServiceOperations(callExpr, filePath) {
                 filePath,
             };
         }
-        if (SSM_COMMANDS.has(methodName) && (objText.includes('ssm') || objText.includes('parameter'))) {
+        if (SSM_COMMANDS.has(methodName) &&
+            (objText.includes('ssm') || objText.includes('parameter'))) {
             return {
                 functionName: getEnclosingFunctionName(callExpr),
                 operationType: methodName,
@@ -522,7 +548,8 @@ function detectAWSServiceOperations(callExpr, filePath) {
                 filePath,
             };
         }
-        if (SECRETS_COMMANDS.has(methodName) && (objText.includes('secret') || objText.includes('secrets'))) {
+        if (SECRETS_COMMANDS.has(methodName) &&
+            (objText.includes('secret') || objText.includes('secrets'))) {
             return {
                 functionName: getEnclosingFunctionName(callExpr),
                 operationType: methodName,

package/dist/core/config.js

@@ -12,44 +12,63 @@ export const InfrawiseConfigSchema = z.object({
     })
         .optional()
         .default({ profile: 'default', region: 'us-east-1' }),
-    dynamodb: z.object({ enabled: z.boolean().optional().default(true), includeTables: z.array(z.string()).optional() }).optional(),
-    postgres: z.object({
+    dynamodb: z
+        .object({
+        enabled: z.boolean().optional().default(true),
+        includeTables: z.array(z.string()).optional(),
+    })
+        .optional(),
+    postgres: z
+        .object({
         enabled: z.boolean().optional().default(false),
         connectionString: z.string().optional(),
-    }).optional(),
-    mysql: z.object({
+    })
+        .optional(),
+    mysql: z
+        .object({
         enabled: z.boolean().optional().default(false),
         connectionString: z.string().optional(),
-    }).optional(),
-    mongodb: z.object({
+    })
+        .optional(),
+    mongodb: z
+        .object({
         enabled: z.boolean().optional().default(false),
         connectionString: z.string().optional(),
         databases: z.array(z.string()).optional(),
-    }).optional(),
+    })
+        .optional(),
     terraform: z.object({ enabled: z.boolean().optional().default(true) }).optional(),
     sqs: z.object({ enabled: z.boolean().optional().default(true) }).optional(),
     sns: z.object({ enabled: z.boolean().optional().default(true) }).optional(),
-    ssm: z.object({
+    ssm: z
+        .object({
         enabled: z.boolean().optional().default(true),
         paths: z.array(z.string()).optional(),
-    }).optional(),
+    })
+        .optional(),
     secretsManager: z.object({ enabled: z.boolean().optional().default(true) }).optional(),
-    lambda: z.object({
+    lambda: z
+        .object({
         enabled: z.boolean().optional().default(true),
         includeFunctions: z.array(z.string()).optional(),
-    }).optional(),
+    })
+        .optional(),
     eventbridge: z.object({ enabled: z.boolean().optional().default(true) }).optional(),
     rds: z.object({ enabled: z.boolean().optional().default(false) }).optional(),
     s3: z.object({ enabled: z.boolean().optional().default(false) }).optional(),
     kafka: z.object({ enabled: z.boolean().optional().default(false) }).optional(),
-    cloudwatchLogs: z.object({
+    cloudwatchLogs: z
+        .object({
         enabled: z.boolean().optional().default(false),
         logGroupPrefixes: z.array(z.string()).optional(),
         windowHours: z.number().int().positive().optional().default(24),
-    }).optional(),
-    analysis: z.object({
+    })
+        .optional(),
+    analysis: z
+        .object({
         sampleSize: z.number().int().positive().optional().default(100),
-    }).optional(),
+    })
+        .optional(),
 });
 export class ConfigError extends Error {
     details;
@@ -103,7 +122,10 @@ export function generateDefaultConfig(projectName, options) {
             region: options?.aws?.region ?? 'us-east-1',
             ...(options?.aws?.endpoint ? { endpoint: options.aws.endpoint } : {}),
         },
-        dynamodb: { enabled: options?.dynamodb?.enabled ?? true, includeTables: options?.dynamodb?.includeTables ?? [] },
+        dynamodb: {
+            enabled: options?.dynamodb?.enabled ?? true,
+            includeTables: options?.dynamodb?.includeTables ?? [],
+        },
         postgres: {
             enabled: options?.postgres?.enabled ?? false,
             connectionString: options?.postgres?.connectionString ?? '',

package/dist/core/index.js

@@ -1,4 +1,4 @@
-export { loadConfig, generateDefaultConfig, InfrawiseConfigSchema, ConfigError as ConfigValidationError } from './config.js';
+export { loadConfig, generateDefaultConfig, InfrawiseConfigSchema, ConfigError as ConfigValidationError, } from './config.js';
 export { logger } from './logger.js';
 export { InfrawiseError, AWSConnectionError, DynamoDBError, PostgresConnectionError, RepositoryScanError, ConfigError, formatError, } from './errors.js';
 export { writeCache, readCache, clearCache } from './cache.js';

package/dist/graph/index.js

@@ -22,7 +22,12 @@ export function buildGraph(operations, dynamoMeta, postgresMeta, mysqlMeta = [],
     }
     for (const table of postgresMeta) {
         const nodeId = `table:postgres:${table.schema}.${table.table}`;
-        addNode({ id: nodeId, type: 'table', name: `${table.schema}.${table.table}`, databaseType: 'postgres' });
+        addNode({
+            id: nodeId,
+            type: 'table',
+            name: `${table.schema}.${table.table}`,
+            databaseType: 'postgres',
+        });
         for (const indexName of table.indexes) {
             const indexNodeId = `index:${table.schema}.${table.table}:${indexName}`;
             addNode({ id: indexNodeId, type: 'index', name: indexName });
@@ -31,7 +36,12 @@ export function buildGraph(operations, dynamoMeta, postgresMeta, mysqlMeta = [],
     }
     for (const table of mysqlMeta) {
         const nodeId = `table:mysql:${table.schema}.${table.table}`;
-        addNode({ id: nodeId, type: 'table', name: `${table.schema}.${table.table}`, databaseType: 'mysql' });
+        addNode({
+            id: nodeId,
+            type: 'table',
+            name: `${table.schema}.${table.table}`,
+            databaseType: 'mysql',
+        });
         for (const indexName of table.indexes) {
             const indexNodeId = `index:${table.schema}.${table.table}:${indexName}`;
             addNode({ id: indexNodeId, type: 'index', name: indexName });
@@ -40,7 +50,12 @@ export function buildGraph(operations, dynamoMeta, postgresMeta, mysqlMeta = [],
     }
     for (const coll of mongoMeta) {
         const nodeId = `table:mongodb:${coll.database}.${coll.collection}`;
-        addNode({ id: nodeId, type: 'table', name: `${coll.database}.${coll.collection}`, databaseType: 'mongodb' });
+        addNode({
+            id: nodeId,
+            type: 'table',
+            name: `${coll.database}.${coll.collection}`,
+            databaseType: 'mongodb',
+        });
         for (const idx of coll.indexes) {
             if (idx.name === '_id_')
                 continue;
@@ -122,15 +137,34 @@ export function buildGraph(operations, dynamoMeta, postgresMeta, mysqlMeta = [],
             let sourceId;
             if (trigger.type === 'sqs') {
                 sourceId = `queue:aws:${trigger.sourceName}`;
-                addNode({ id: sourceId, type: 'queue', name: trigger.sourceName, provider: 'aws', hasDLQ: false, encrypted: false });
+                addNode({
+                    id: sourceId,
+                    type: 'queue',
+                    name: trigger.sourceName,
+                    provider: 'aws',
+                    hasDLQ: false,
+                    encrypted: false,
+                });
             }
             else if (trigger.type === 'dynamodb') {
                 sourceId = `table:dynamo:${trigger.sourceName}`;
-                addNode({ id: sourceId, type: 'table', name: trigger.sourceName, databaseType: 'dynamodb' });
+                addNode({
+                    id: sourceId,
+                    type: 'table',
+                    name: trigger.sourceName,
+                    databaseType: 'dynamodb',
+                });
             }
             else if (trigger.type === 'kinesis') {
                 sourceId = `queue:aws:${trigger.sourceName}`;
-                addNode({ id: sourceId, type: 'queue', name: trigger.sourceName, provider: 'aws', hasDLQ: false, encrypted: false });
+                addNode({
+                    id: sourceId,
+                    type: 'queue',
+                    name: trigger.sourceName,
+                    provider: 'aws',
+                    hasDLQ: false,
+                    encrypted: false,
+                });
             }
             else {
                 continue;
@@ -223,7 +257,14 @@ export function buildGraph(operations, dynamoMeta, postgresMeta, mysqlMeta = [],
         // AWS service operations create edges to service nodes
         if (op.serviceType === 'sqs') {
             const queueId = `queue:aws:${op.target}`;
-            addNode({ id: queueId, type: 'queue', name: op.target, provider: 'aws', hasDLQ: false, encrypted: false });
+            addNode({
+                id: queueId,
+                type: 'queue',
+                name: op.target,
+                provider: 'aws',
+                hasDLQ: false,
+                encrypted: false,
+            });
             edges.push({ from: funcNodeId, to: queueId, type: 'publishes_to' });
             continue;
         }
@@ -242,13 +283,26 @@ export function buildGraph(operations, dynamoMeta, postgresMeta, mysqlMeta = [],
         }
         if (op.serviceType === 'ssm') {
             const paramId = `parameter:aws:${op.target}`;
-            addNode({ id: paramId, type: 'parameter', name: op.target, provider: 'aws', paramType: 'String', tier: 'Standard' });
+            addNode({
+                id: paramId,
+                type: 'parameter',
+                name: op.target,
+                provider: 'aws',
+                paramType: 'String',
+                tier: 'Standard',
+            });
             edges.push({ from: funcNodeId, to: paramId, type: 'reads_parameter' });
             continue;
         }
         if (op.serviceType === 'secretsmanager') {
             const secretId = `secret:aws:${op.target}`;
-            addNode({ id: secretId, type: 'secret', name: op.target, provider: 'aws', rotationEnabled: false });
+            addNode({
+                id: secretId,
+                type: 'secret',
+                name: op.target,
+                provider: 'aws',
+                rotationEnabled: false,
+            });
             edges.push({ from: funcNodeId, to: secretId, type: 'reads_secret' });
             continue;
         }