lsh-framework 1.3.2 → 1.4.0

package/dist/daemon/saas-api-server.js

@@ -0,0 +1,225 @@
+/**
+ * LSH SaaS API Server
+ * Express-based RESTful API for the SaaS platform
+ */
+import express from 'express';
+import cors from 'cors';
+import rateLimit from 'express-rate-limit';
+import { setupSaaSApiRoutes } from './saas-api-routes.js';
+/**
+ * SaaS API Server
+ */
+export class SaaSApiServer {
+    app;
+    config;
+    server;
+    constructor(config) {
+        this.config = {
+            port: config?.port || parseInt(process.env.LSH_SAAS_API_PORT || '3031'),
+            host: config?.host || process.env.LSH_SAAS_API_HOST || '0.0.0.0',
+            corsOrigins: config?.corsOrigins || (process.env.LSH_CORS_ORIGINS?.split(',') || ['*']),
+            rateLimitWindowMs: config?.rateLimitWindowMs || 15 * 60 * 1000, // 15 minutes
+            rateLimitMax: config?.rateLimitMax || 100, // Max 100 requests per windowMs
+        };
+        this.app = express();
+        this.setupMiddleware();
+        this.setupRoutes();
+        this.setupErrorHandlers();
+    }
+    /**
+     * Setup middleware
+     */
+    setupMiddleware() {
+        // CORS
+        this.app.use(cors({
+            origin: this.config.corsOrigins,
+            credentials: true,
+            methods: ['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'],
+            allowedHeaders: ['Content-Type', 'Authorization', 'X-Requested-With'],
+        }));
+        // Rate limiting - global limit for all requests
+        const limiter = rateLimit({
+            windowMs: this.config.rateLimitWindowMs,
+            max: this.config.rateLimitMax,
+            message: {
+                success: false,
+                error: {
+                    code: 'RATE_LIMIT_EXCEEDED',
+                    message: 'Too many requests, please try again later',
+                },
+            },
+            standardHeaders: true, // Return rate limit info in `RateLimit-*` headers
+            legacyHeaders: false, // Disable `X-RateLimit-*` headers
+        });
+        this.app.use(limiter);
+        // Body parsers
+        this.app.use(express.json({ limit: '10mb' }));
+        this.app.use(express.urlencoded({ extended: true, limit: '10mb' }));
+        // Security headers
+        this.app.use((req, res, next) => {
+            res.setHeader('X-Content-Type-Options', 'nosniff');
+            res.setHeader('X-Frame-Options', 'DENY');
+            res.setHeader('X-XSS-Protection', '1; mode=block');
+            res.setHeader('Strict-Transport-Security', 'max-age=31536000; includeSubDomains');
+            // CSP
+            res.setHeader('Content-Security-Policy', "default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self'");
+            next();
+        });
+        // Request logging
+        this.app.use((req, res, next) => {
+            const start = Date.now();
+            res.on('finish', () => {
+                const duration = Date.now() - start;
+                // Sanitize path to prevent log injection attacks
+                const sanitizedPath = req.path.replace(/[\r\n]/g, '');
+                const sanitizedIp = (req.ip || 'unknown').replace(/[\r\n]/g, '');
+                console.log(`${req.method} ${sanitizedPath} ${res.statusCode} - ${duration}ms - ${sanitizedIp}`);
+            });
+            next();
+        });
+    }
+    /**
+     * Setup routes
+     */
+    setupRoutes() {
+        // Health check
+        this.app.get('/health', (req, res) => {
+            res.json({
+                status: 'ok',
+                timestamp: new Date().toISOString(),
+                uptime: process.uptime(),
+            });
+        });
+        // API version
+        this.app.get('/api/v1', (req, res) => {
+            res.json({
+                name: 'LSH SaaS API',
+                version: '1.0.0',
+                endpoints: {
+                    auth: '/api/v1/auth/*',
+                    organizations: '/api/v1/organizations/*',
+                    teams: '/api/v1/organizations/:id/teams/*',
+                    secrets: '/api/v1/teams/:id/secrets/*',
+                    billing: '/api/v1/organizations/:id/billing/*',
+                    audit: '/api/v1/organizations/:id/audit-logs',
+                },
+            });
+        });
+        // Setup SaaS routes
+        setupSaaSApiRoutes(this.app);
+        // 404 handler
+        this.app.use((req, res) => {
+            res.status(404).json({
+                success: false,
+                error: {
+                    code: 'NOT_FOUND',
+                    message: `Endpoint ${req.method} ${req.path} not found`,
+                },
+            });
+        });
+    }
+    /**
+     * Setup error handlers
+     */
+    setupErrorHandlers() {
+        // Global error handler
+        this.app.use((err, req, res, _next) => {
+            console.error('API Error:', err);
+            // Don't leak error details in production
+            const isDev = process.env.NODE_ENV !== 'production';
+            res.status(err.status || 500).json({
+                success: false,
+                error: {
+                    code: err.code || 'INTERNAL_ERROR',
+                    message: isDev ? err.message : 'Internal server error',
+                    details: isDev ? err.stack : undefined,
+                },
+            });
+        });
+    }
+    /**
+     * Start the server
+     */
+    async start() {
+        return new Promise((resolve, reject) => {
+            try {
+                this.server = this.app.listen(this.config.port, this.config.host, () => {
+                    console.log(`
+╔═══════════════════════════════════════════════════════════════╗
+║                                                               ║
+║   🔐  LSH SaaS API Server                                     ║
+║                                                               ║
+║   Status:  Running                                            ║
+║   Port:    ${this.config.port.toString().padEnd(49)} ║
+║   Host:    ${this.config.host?.padEnd(49)} ║
+║                                                               ║
+║   Endpoints:                                                  ║
+║   - Health:  http://${this.config.host}:${this.config.port}/health${' '.repeat(26)} ║
+║   - API:     http://${this.config.host}:${this.config.port}/api/v1${' '.repeat(27)} ║
+║                                                               ║
+╚═══════════════════════════════════════════════════════════════╝
+          `);
+                    resolve();
+                });
+                this.server.on('error', (error) => {
+                    if (error.code === 'EADDRINUSE') {
+                        reject(new Error(`Port ${this.config.port} is already in use`));
+                    }
+                    else {
+                        reject(error);
+                    }
+                });
+            }
+            catch (error) {
+                reject(error);
+            }
+        });
+    }
+    /**
+     * Stop the server
+     */
+    async stop() {
+        return new Promise((resolve, reject) => {
+            if (!this.server) {
+                resolve();
+                return;
+            }
+            this.server.close((err) => {
+                if (err) {
+                    reject(err);
+                }
+                else {
+                    console.log('LSH SaaS API Server stopped');
+                    resolve();
+                }
+            });
+        });
+    }
+    /**
+     * Get Express app (for testing)
+     */
+    getApp() {
+        return this.app;
+    }
+}
+/**
+ * Start the server if run directly
+ */
+if (import.meta.url === `file://${process.argv[1]}`) {
+    const server = new SaaSApiServer();
+    server.start().catch((error) => {
+        console.error('Failed to start SaaS API server:', error);
+        process.exit(1);
+    });
+    // Graceful shutdown
+    process.on('SIGINT', async () => {
+        console.log('\nShutting down gracefully...');
+        await server.stop();
+        process.exit(0);
+    });
+    process.on('SIGTERM', async () => {
+        console.log('\nShutting down gracefully...');
+        await server.stop();
+        process.exit(0);
+    });
+}

package/dist/lib/config-manager.js

@@ -0,0 +1,317 @@
+/**
+ * Configuration Manager for LSH
+ * Manages ~/.config/lsh/lshrc configuration file
+ */
+import * as fs from 'fs/promises';
+import * as fsSync from 'fs';
+import * as path from 'path';
+import * as os from 'os';
+export const DEFAULT_CONFIG_DIR = path.join(os.homedir(), '.config', 'lsh');
+export const DEFAULT_CONFIG_FILE = path.join(DEFAULT_CONFIG_DIR, 'lshrc');
+/**
+ * Default configuration template
+ */
+export const DEFAULT_CONFIG_TEMPLATE = `# LSH Configuration File
+# This file is in .env format and is automatically loaded on LSH startup
+# Location: ~/.config/lsh/lshrc
+#
+# Edit this file with: lsh config
+
+# ============================================================================
+# Storage Backend (choose one)
+# ============================================================================
+
+# Option 1: Local Storage (Default - No Configuration Needed)
+# Data stored in ~/.lsh/data/storage.json
+# Perfect for: Single-user, local development, getting started
+
+# Option 2: Supabase Cloud (Team Collaboration)
+# SUPABASE_URL=https://your-project.supabase.co
+# SUPABASE_ANON_KEY=your-anon-key-here
+
+# Option 3: Local PostgreSQL (via Docker)
+# DATABASE_URL=postgresql://lsh_user:lsh_password@localhost:5432/lsh
+
+# ============================================================================
+# Secrets Management
+# ============================================================================
+
+# Encryption key for secrets (generate with: lsh key)
+# Share this key with your team for collaboration
+# LSH_SECRETS_KEY=
+
+# Master encryption key for SaaS platform
+# LSH_MASTER_KEY=
+
+# ============================================================================
+# API Server (Optional)
+# ============================================================================
+
+# LSH_API_ENABLED=false
+# LSH_API_PORT=3030
+# LSH_API_KEY=
+# LSH_JWT_SECRET=
+
+# ============================================================================
+# Webhooks (Optional)
+# ============================================================================
+
+# LSH_ENABLE_WEBHOOKS=false
+# WEBHOOK_PORT=3033
+# GITHUB_WEBHOOK_SECRET=
+# GITLAB_WEBHOOK_SECRET=
+# JENKINS_WEBHOOK_SECRET=
+
+# ============================================================================
+# Security
+# ============================================================================
+
+# WARNING: Only enable if you fully trust all job sources
+# LSH_ALLOW_DANGEROUS_COMMANDS=false
+
+# ============================================================================
+# Advanced Configuration
+# ============================================================================
+
+# Custom data directory (default: ~/.lsh/data)
+# LSH_DATA_DIR=
+
+# Node environment
+# NODE_ENV=development
+
+# Redis (for caching)
+# REDIS_URL=redis://localhost:6379
+
+# ============================================================================
+# SaaS Platform (Advanced)
+# ============================================================================
+
+# LSH_SAAS_API_PORT=3031
+# LSH_SAAS_API_HOST=0.0.0.0
+# LSH_CORS_ORIGINS=http://localhost:3000,http://localhost:3031
+
+# Email Service (Resend)
+# RESEND_API_KEY=
+# EMAIL_FROM=noreply@yourdomain.com
+# BASE_URL=https://app.yourdomain.com
+
+# Stripe Billing
+# STRIPE_SECRET_KEY=
+# STRIPE_WEBHOOK_SECRET=
+`;
+/**
+ * Parse .env format file into config object
+ */
+export function parseEnvFile(content) {
+    const config = {};
+    const lines = content.split('\n');
+    for (const line of lines) {
+        const trimmed = line.trim();
+        // Skip comments and empty lines
+        if (!trimmed || trimmed.startsWith('#')) {
+            continue;
+        }
+        // Parse KEY=VALUE
+        const match = trimmed.match(/^([^=]+)=(.*)$/);
+        if (match) {
+            const key = match[1].trim();
+            let value = match[2].trim();
+            // Remove quotes if present
+            if ((value.startsWith('"') && value.endsWith('"')) ||
+                (value.startsWith("'") && value.endsWith("'"))) {
+                value = value.slice(1, -1);
+            }
+            config[key] = value;
+        }
+    }
+    return config;
+}
+/**
+ * Serialize config object to .env format
+ */
+export function serializeConfig(config) {
+    const lines = [];
+    for (const [key, value] of Object.entries(config)) {
+        if (value !== undefined && value !== '') {
+            // Quote values that contain spaces or special characters
+            const needsQuotes = /[\s#"']/.test(value);
+            const serializedValue = needsQuotes ? `"${value}"` : value;
+            lines.push(`${key}=${serializedValue}`);
+        }
+    }
+    return lines.join('\n');
+}
+export class ConfigManager {
+    configFile;
+    config = {};
+    constructor(configFile = DEFAULT_CONFIG_FILE) {
+        this.configFile = configFile;
+    }
+    /**
+     * Get config file path
+     */
+    getConfigPath() {
+        return this.configFile;
+    }
+    /**
+     * Check if config file exists
+     */
+    async exists() {
+        try {
+            await fs.access(this.configFile);
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+    /**
+     * Check if config file exists (sync)
+     */
+    existsSync() {
+        return fsSync.existsSync(this.configFile);
+    }
+    /**
+     * Initialize config file with default template
+     */
+    async initialize() {
+        const configDir = path.dirname(this.configFile);
+        // Create config directory if it doesn't exist
+        await fs.mkdir(configDir, { recursive: true });
+        // Check if config file already exists
+        const exists = await this.exists();
+        if (exists) {
+            console.log(`Config file already exists at ${this.configFile}`);
+            return;
+        }
+        // Write default template
+        await fs.writeFile(this.configFile, DEFAULT_CONFIG_TEMPLATE, 'utf-8');
+        console.log(`✓ Created config file at ${this.configFile}`);
+        console.log(`  Edit with: lsh config`);
+    }
+    /**
+     * Load configuration from file
+     */
+    async load() {
+        try {
+            // Initialize if doesn't exist
+            if (!(await this.exists())) {
+                await this.initialize();
+            }
+            const content = await fs.readFile(this.configFile, 'utf-8');
+            this.config = parseEnvFile(content);
+            return this.config;
+        }
+        catch (error) {
+            console.error(`Failed to load config from ${this.configFile}:`, error);
+            return {};
+        }
+    }
+    /**
+     * Load configuration from file (sync)
+     */
+    loadSync() {
+        try {
+            // Check if exists
+            if (!this.existsSync()) {
+                // Can't initialize synchronously safely, return empty config
+                return {};
+            }
+            const content = fsSync.readFileSync(this.configFile, 'utf-8');
+            this.config = parseEnvFile(content);
+            return this.config;
+        }
+        catch (error) {
+            console.error(`Failed to load config from ${this.configFile}:`, error);
+            return {};
+        }
+    }
+    /**
+     * Save configuration to file
+     */
+    async save(config) {
+        try {
+            const configDir = path.dirname(this.configFile);
+            await fs.mkdir(configDir, { recursive: true });
+            // Merge with existing config
+            this.config = { ...this.config, ...config };
+            const content = serializeConfig(this.config);
+            await fs.writeFile(this.configFile, content, 'utf-8');
+            console.log(`✓ Saved config to ${this.configFile}`);
+        }
+        catch (error) {
+            console.error(`Failed to save config to ${this.configFile}:`, error);
+            throw error;
+        }
+    }
+    /**
+     * Get a specific config value
+     */
+    get(key) {
+        return this.config[key];
+    }
+    /**
+     * Set a specific config value
+     */
+    async set(key, value) {
+        this.config[key] = value;
+        await this.save(this.config);
+    }
+    /**
+     * Delete a specific config value
+     */
+    async delete(key) {
+        delete this.config[key];
+        await this.save(this.config);
+    }
+    /**
+     * Get all config values
+     */
+    getAll() {
+        return { ...this.config };
+    }
+    /**
+     * Merge config with process.env
+     * Config file values take precedence over environment variables
+     */
+    mergeWithEnv() {
+        for (const [key, value] of Object.entries(this.config)) {
+            if (value !== undefined && value !== '') {
+                process.env[key] = value;
+            }
+        }
+    }
+}
+/**
+ * Global config manager instance
+ */
+let _globalConfigManager = null;
+/**
+ * Get global config manager
+ */
+export function getConfigManager() {
+    if (!_globalConfigManager) {
+        _globalConfigManager = new ConfigManager();
+    }
+    return _globalConfigManager;
+}
+/**
+ * Load global configuration and merge with process.env
+ * This should be called early in the application startup
+ */
+export async function loadGlobalConfig() {
+    const manager = getConfigManager();
+    const config = await manager.load();
+    manager.mergeWithEnv();
+    return config;
+}
+/**
+ * Load global configuration synchronously and merge with process.env
+ */
+export function loadGlobalConfigSync() {
+    const manager = getConfigManager();
+    const config = manager.loadSync();
+    manager.mergeWithEnv();
+    return config;
+}
+export default ConfigManager;