infrawise 0.8.7 → 0.9.0

package/README.md

@@ -170,7 +170,7 @@ To let Claude Code manage the server lifecycle automatically:
 | `suggest_mongo_index`        | Exact `createIndex` command for a MongoDB collection + field                                                |
 | `mysql_index_suggestions`    | Exact `ALTER TABLE ADD INDEX` SQL for your MySQL table                                                      |
 | `get_queue_details`          | SQS queues — DLQ status, encryption, message counts                                                         |
-| `get_topic_details`          | SNS topics — subscription counts and protocols                                                              |
+| `get_topic_details`          | SNS topics — subscription counts, protocols, and filter policies (required message attributes per subscription) |
 | `get_secrets_overview`       | Secrets Manager — names and rotation status (values never included)                                         |
 | `get_parameter_overview`     | SSM Parameter Store — names, types, tiers (values never included)                                           |
 | `get_lambda_overview`        | Lambda functions — runtime, memory, timeout, triggers (SQS/DynamoDB/Kinesis/EventBridge/S3), env var key names |
@@ -345,6 +345,7 @@ Works from AWS APIs, database schema introspection, and IaC files — no depende
 | PostgreSQL / MySQL schema        | Tables, indexes, column types                                                                                      |
 | MongoDB schema                   | Collections, indexes                                                                                               |
 | SQS                              | Missing DLQs, unencrypted queues, large backlogs                                                                   |
+| SNS                              | Subscription filter policies — required message attributes per subscription                                        |
 | Kafka (kafkajs)                  | Producer/consumer topic mapping from code                                                                          |
 | Secrets Manager                  | Missing secret rotation                                                                                            |
 | Lambda                           | Default memory (128 MB), high timeouts, triggers (SQS/DynamoDB/Kinesis/EventBridge/S3), missing DLQ on trigger source |

package/dist/adapters/aws/services.js

@@ -1,5 +1,5 @@
 import { SQSClient, ListQueuesCommand, GetQueueAttributesCommand } from '@aws-sdk/client-sqs';
-import { SNSClient, ListTopicsCommand, GetTopicAttributesCommand, ListSubscriptionsByTopicCommand, } from '@aws-sdk/client-sns';
+import { SNSClient, ListTopicsCommand, GetTopicAttributesCommand, ListSubscriptionsByTopicCommand, GetSubscriptionAttributesCommand, } from '@aws-sdk/client-sns';
 import { SSMClient, DescribeParametersCommand } from '@aws-sdk/client-ssm';
 import { SecretsManagerClient, ListSecretsCommand } from '@aws-sdk/client-secrets-manager';
 import { LambdaClient, ListFunctionsCommand, ListEventSourceMappingsCommand, } from '@aws-sdk/client-lambda';
@@ -112,12 +112,34 @@ export async function extractSNSMetadata(cfg = {}) {
                 ]);
                 const attrs = attrsRes.Attributes ?? {};
                 const subs = subsRes.Subscriptions ?? [];
+                const filterPolicies = [];
+                for (const sub of subs) {
+                    if (!sub.SubscriptionArn || sub.SubscriptionArn === 'PendingConfirmation')
+                        continue;
+                    try {
+                        const subAttrs = await client.send(new GetSubscriptionAttributesCommand({ SubscriptionArn: sub.SubscriptionArn }));
+                        const fp = subAttrs.Attributes?.['FilterPolicy'];
+                        if (fp) {
+                            const parsed = JSON.parse(fp);
+                            filterPolicies.push({
+                                subscriptionArn: sub.SubscriptionArn,
+                                protocol: sub.Protocol ?? 'unknown',
+                                requiredAttributes: Object.keys(parsed),
+                                scope: subAttrs.Attributes?.['FilterPolicyScope'] ?? 'MessageAttributes',
+                            });
+                        }
+                    }
+                    catch {
+                        // skip subscription if attributes fetch fails
+                    }
+                }
                 topics.push({
                     name: arn.split(':').pop() ?? arn,
                     arn,
                     encrypted: !!attrs['KmsMasterKeyId'],
                     subscriptionCount: parseInt(attrs['SubscriptionsConfirmed'] ?? '0', 10),
                     subscriptionProtocols: [...new Set(subs.map((s) => s.Protocol ?? 'unknown'))],
+                    filterPolicies,
                 });
             }
             catch (err) {

package/dist/context/index.js

@@ -193,14 +193,15 @@ function resolveStringValue(node, sourceFile) {
         return result;
     }
     if (Node.isIdentifier(node)) {
-        const name = node.getText();
-        const decl = sourceFile
-            .getDescendantsOfKind(SyntaxKind.VariableDeclaration)
-            .find((d) => d.getName() === name);
-        if (decl) {
-            const init = decl.getInitializer();
-            if (init)
-                return resolveStringValue(init, sourceFile);
+        const symbol = node.getSymbol();
+        if (symbol) {
+            for (const decl of symbol.getDeclarations()) {
+                if (Node.isVariableDeclaration(decl)) {
+                    const init = decl.getInitializer();
+                    if (init)
+                        return resolveStringValue(init, sourceFile);
+                }
+            }
         }
     }
     return null;

package/dist/graph/index.js

@@ -85,6 +85,7 @@ export function buildGraph(operations, dynamoMeta, postgresMeta, mysqlMeta = [],
             provider: 'aws',
             subscriptionCount: t.subscriptionCount,
             encrypted: t.encrypted,
+            filterPolicies: t.filterPolicies?.length > 0 ? t.filterPolicies : undefined,
         });
     }
     for (const s of servicesMeta.secrets ?? []) {

package/dist/server/index.js

@@ -265,7 +265,7 @@ export function createMcpServer() {
         });
     }));
     mcp.registerTool('get_topic_details', {
-        description: 'Returns all SNS topics with subscription count and encryption status. Call this when reviewing event fan-out patterns or checking whether a topic has the expected number of subscribers.',
+        description: 'Returns all SNS topics with subscription count, encryption status, and filter policies. Filter policies list the message attributes each subscription requires — publishers must include these attributes or messages are silently dropped. Call this before writing any SNS publish code or when reviewing event fan-out patterns.',
         inputSchema: z.object({}),
     }, logged('get_topic_details', async () => {
         const topics = getTopicNodes(currentGraph);
@@ -276,6 +276,7 @@ export function createMcpServer() {
                 provider: t.provider,
                 subscriptionCount: t.subscriptionCount,
                 encrypted: t.encrypted,
+                filterPolicies: t.filterPolicies ?? [],
             })),
         });
     }));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "infrawise",
-  "version": "0.8.7",
+  "version": "0.9.0",
   "mcpName": "io.github.Sidd27/infrawise",
   "description": "CLI-first infrastructure intelligence platform — analyzes DynamoDB, PostgreSQL, MySQL, MongoDB, SQS, SNS, SSM, Secrets Manager, Lambda, S3, CloudWatch Logs and exposes findings as an MCP server for Claude Code",
   "keywords": [