rterm-backend 2.8.8 → 2.9.0

package/package.json

@@ -1,19 +1,14 @@
 {
   "name": "rterm-backend",
-  "version": "2.8.8",
-  "description": "RTerm headless backend — run RTerm-as-a-service (AI agent, SSH/WinRM/Serial/local terminals, fleet orchestration, advanced automation with event-driven triggers + NATS event mesh, scheduled automation, SRE observability, Netdata integration, AWS APerf performance deep-dive, plugin system) and drive it over a WebSocket JSON-RPC gateway. No desktop UI required.",
-  "license": "Apache-2.0",
-  "type": "module",
+  "version": "2.9.0",
+  "description": "RTerm headless backend — run RTerm-as-a-service (AI agent, SSH/WinRM/Serial/local terminals, fleet orchestration, advanced automation with event-driven triggers + NATS event mesh, scheduled automation, SRE observability, Netdata integration, AWS APerf performance deep-dive, plugin system, governance/audit, Prometheus/OTel metrics export, secrets vault, on-call paging, AI cost budgets, GitOps, cloud inventory).",
+  "main": "bin/gybackend.js",
   "bin": {
     "gybackend": "bin/gybackend.cjs"
   },
-  "main": "bin/gybackend.js",
-  "files": [
-    "bin/",
-    "plugins/",
-    "README.md",
-    "LICENSE.md"
-  ],
+  "scripts": {
+    "start": "node bin/gybackend.cjs"
+  },
   "engines": {
     "node": ">=18"
   },
@@ -22,17 +17,10 @@
     "linux",
     "win32"
   ],
-  "dependencies": {
-    "@nats-io/transport-node": "^3.4.0",
-    "better-sqlite3": "^12.11.1",
-    "cpu-features": "^0.0.10",
-    "node-pty": "^1.2.0-beta.3",
-    "ssh2": "^1.17.0",
-    "tree-sitter-bash": "^0.25.1",
-    "web-tree-sitter": "^0.26.3"
-  },
-  "optionalDependencies": {
-    "serialport": "^13.0.0"
+  "license": "Apache-2.0",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/DrOlu/RTerm.git"
   },
   "keywords": [
     "rterm",
@@ -58,13 +46,12 @@
     "observability",
     "netdata",
     "aperf",
-    "monitoring"
-  ],
-  "author": "Hyperspace Technologies <rterm@hyperspace.ng>",
-  "homepage": "https://github.com/DrOlu/RTerm",
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/DrOlu/RTerm.git"
-  },
-  "bugs": "https://github.com/DrOlu/RTerm/issues"
+    "monitoring",
+    "prometheus",
+    "opentelemetry",
+    "secrets",
+    "on-call",
+    "gitops",
+    "cloud-inventory"
+  ]
 }

package/plugins/fraudops/index.d.mts

@@ -5,5 +5,5 @@ export function buildNatsStatusCommand(): string
 export function buildKafkaLagCommand(): string
 export function parsePipelineHealth(output: string): { status: string; jobs: any[]; running: number; failed: number }
 export function buildStrCase(txnId: string, decision: string, indicators?: string[], assignedTo?: string): any
-export function buildDecisionSummary(decisions: Array<{ decision: string }>): { total: number; blocks: number; reviews: number; approves: number; blockRate: number; reviewRate: number; approveRate: number }
+export function buildDecisionSummary(decisions: Array<{ decision: string }> | null | undefined): { total: number; blocks: number; reviews: number; approves: number; blockRate: number; reviewRate: number; approveRate: number }
 export default any

package/plugins/fraudops/index.mjs

@@ -53,10 +53,11 @@ export function buildStrCase(txnId, decision, indicators, assignedTo) {
 
 // --- Pure: build a decision summary ---
 export function buildDecisionSummary(decisions) {
-  const total = decisions.length
-  const blocks = decisions.filter((d) => d.decision === 'BLOCK').length
-  const reviews = decisions.filter((d) => d.decision === 'REVIEW').length
-  const approves = decisions.filter((d) => d.decision === 'APPROVE').length
+  const list = Array.isArray(decisions) ? decisions : []
+  const total = list.length
+  const blocks = list.filter((d) => d.decision === 'BLOCK').length
+  const reviews = list.filter((d) => d.decision === 'REVIEW').length
+  const approves = list.filter((d) => d.decision === 'APPROVE').length
   return {
     total,
     blocks,

package/plugins/iam-connector/index.d.mts

@@ -4,7 +4,7 @@ export function buildUserInfoCommand(username: string, os?: string): string
 export function buildUserGroupsCommand(username: string, os?: string): string
 export function buildDisableUserCommand(username: string, os?: string): string
 export function buildAccessReviewCommand(os?: string): string
-export function parseUserInfo(output: string, os?: string): { username: string; groups: string[]; enabled: boolean; locked: boolean }
-export function parseAccessReview(output: string, os?: string): Array<{ username: string; groups?: string[]; enabled?: boolean }>
-export function isPrivileged(userInfo: { groups: string[] }, privilegedGroups?: string[]): boolean
+export function parseUserInfo(output: string | null | undefined, os?: string | null | undefined): { username: string; groups: string[]; enabled: boolean; locked: boolean }
+export function parseAccessReview(output: string | null | undefined, os?: string | null | undefined): Array<{ username: string; groups?: string[]; enabled?: boolean }>
+export function isPrivileged(userInfo: { groups: string[] } | null | undefined, privilegedGroups?: string[] | null | undefined): boolean
 export default any

package/plugins/iam-connector/index.mjs

@@ -46,13 +46,14 @@ export function buildAccessReviewCommand(os = 'linux') {
 
 // --- Pure: parse user info output ---
 export function parseUserInfo(output, os = 'linux') {
-  const o = String(os).toLowerCase()
+  const o = String(os ?? 'linux').toLowerCase()
+  const text = String(output ?? '')
   const info = { username: '', groups: [], enabled: true, locked: false }
 
   if (o === 'windows' || o === 'win32') {
-    const nameMatch = output.match(/Name\s+:\s+(\S+)/)
-    const enabledMatch = output.match(/Enabled\s+:\s+(True|False)/i)
-    const lockedMatch = output.match(/LockedOut\s+:\s+(True|False)/i)
+    const nameMatch = text.match(/Name\s+:\s+(\S+)/)
+    const enabledMatch = text.match(/Enabled\s+:\s+(True|False)/i)
+    const lockedMatch = text.match(/LockedOut\s+:\s+(True|False)/i)
     if (nameMatch) info.username = nameMatch[1]
     if (enabledMatch) info.enabled = enabledMatch[1].toLowerCase() === 'true'
     if (lockedMatch) info.locked = lockedMatch[1].toLowerCase() === 'true'
@@ -60,7 +61,7 @@ export function parseUserInfo(output, os = 'linux') {
   }
 
   // Linux: parse id + groups + passwd -S output
-  const lines = output.split(/\r?\n/)
+  const lines = text.split(/\r?\n/)
   for (const line of lines) {
     const l = line.trim()
     const idMatch = l.match(/uid=\d+\((\S+)\)/)
@@ -80,11 +81,12 @@ export function parseUserInfo(output, os = 'linux') {
 
 // --- Pure: parse access review output into a user list ---
 export function parseAccessReview(output, os = 'linux') {
-  const o = String(os).toLowerCase()
+  const o = String(os ?? 'linux').toLowerCase()
+  const text = String(output ?? '')
   const users = []
 
   if (o === 'windows' || o === 'win32') {
-    const lines = output.split(/\r?\n/)
+    const lines = text.split(/\r?\n/)
     for (const line of lines) {
       const l = line.trim()
       const match = l.match(/^(\S+)\s+(True|False)\s+/)
@@ -96,7 +98,7 @@ export function parseAccessReview(output, os = 'linux') {
   }
 
   // Linux: parse "user: group1 group2" lines
-  const lines = output.split(/\r?\n/)
+  const lines = text.split(/\r?\n/)
   for (const line of lines) {
     const l = line.trim()
     const match = l.match(/^(\S+):\s*(.*)/)
@@ -109,7 +111,9 @@ export function parseAccessReview(output, os = 'linux') {
 
 // --- Pure: check if a user has privileged access ---
 export function isPrivileged(userInfo, privilegedGroups = ['sudo', 'wheel', 'admin', 'root', 'Administrators']) {
-  return userInfo.groups.some((g) => privilegedGroups.some((pg) => g.toLowerCase().includes(pg.toLowerCase())))
+  const groups = Array.isArray(userInfo?.groups) ? userInfo.groups : []
+  const privs = Array.isArray(privilegedGroups) ? privilegedGroups : []
+  return groups.some((g) => privs.some((pg) => String(g).toLowerCase().includes(String(pg).toLowerCase())))
 }
 
 // --- Plugin entry ---

package/plugins/patch-manager/index.d.mts

@@ -4,7 +4,7 @@ export function buildPatchStatusCommand(os: string): string
 export function buildPatchApplyCommand(os: string, opts?: { severity?: string; dryRun?: boolean }): string
 export function buildPrePatchCheckCommand(os: string): string
 export function buildPostPatchCheckCommand(os: string): string
-export function parsePatchStatus(output: string, os: string): { patches: Array<{ id: string; title: string; severity: string; os: string }>; summary: { total: number; critical: number; security: number; recommended: number } }
+export function parsePatchStatus(output: string | null | undefined, os: string | null | undefined): { patches: Array<{ id: string; title: string; severity: string; os: string }>; summary: { total: number; critical: number; security: number; recommended: number } }
 export function buildPatchPlan(host: string, os: string, patchStatus: any, opts?: { severity?: string }): any
-export function buildComplianceReport(hostStatuses: Record<string, any>): any
+export function buildComplianceReport(hostStatuses: Record<string, any> | null | undefined): any
 export default any

package/plugins/patch-manager/index.mjs

@@ -70,8 +70,8 @@ export function buildPostPatchCheckCommand(os) {
 
 // --- Pure: parse patch status output into structured results ---
 export function parsePatchStatus(output, os) {
-  const o = String(os).toLowerCase()
-  const lines = output.split(/\r?\n/).filter((l) => l.trim().length > 0)
+  const o = String(os ?? '').toLowerCase()
+  const lines = String(output ?? '').split(/\r?\n/).filter((l) => l.trim().length > 0)
   const patches = []
   let summary = { total: 0, critical: 0, security: 0, recommended: 0 }
 
@@ -151,7 +151,7 @@ export function buildPatchPlan(host, os, patchStatus, opts = {}) {
 
 // --- Pure: build a compliance report for a fleet ---
 export function buildComplianceReport(hostStatuses) {
-  const hosts = Object.entries(hostStatuses).map(([host, status]) => ({
+  const hosts = Object.entries(hostStatuses ?? {}).map(([host, status]) => ({
     host,
     os: status.os ?? 'unknown',
     totalPatches: status.summary?.total ?? 0,

package/plugins/request-router/index.d.mts

@@ -5,5 +5,5 @@ export function routeRequest(request: any): { route: string; risk: string; reaso
 export function buildRequestId(): string
 export function buildApprovalRecord(requestId: string, approvedBy: string, rationale: string, decision: string): any
 export function buildQueueEntry(request: any, requestId: string): any
-export function filterQueue(queue: any[], filter?: any): any[]
+export function filterQueue(queue: any[] | null | undefined, filter?: any): any[]
 export default any

package/plugins/request-router/index.mjs

@@ -9,9 +9,10 @@
 
 // --- Pure: classify a request by risk ---
 export function classifyRequest(request) {
-  const type = String(request.type ?? '').toLowerCase()
-  const urgency = String(request.urgency ?? 'low').toLowerCase()
-  const target = String(request.target ?? '').toLowerCase()
+  const req = request ?? {}
+  const type = String(req.type ?? '').toLowerCase()
+  const urgency = String(req.urgency ?? 'low').toLowerCase()
+  const target = String(req.target ?? '').toLowerCase()
 
   // Destructive operations = high risk
   if (['delete', 'drop', 'purge', 'format', 'destroy'].some((w) => type.includes(w))) return 'high'
@@ -32,8 +33,9 @@ export function classifyRequest(request) {
 
 // --- Pure: route a request based on risk ---
 export function routeRequest(request) {
-  const risk = classifyRequest(request)
-  const urgency = String(request.urgency ?? 'low').toLowerCase()
+  const req = request ?? {}
+  const risk = classifyRequest(req)
+  const urgency = String(req.urgency ?? 'low').toLowerCase()
 
   if (risk === 'low') return { route: 'auto_approve', risk, reason: 'low-risk read-only operation' }
   if (risk === 'medium') {
@@ -63,18 +65,19 @@ export function buildApprovalRecord(requestId, approvedBy, rationale, decision)
 
 // --- Pure: build a request queue entry ---
 export function buildQueueEntry(request, requestId) {
-  const { route, risk, reason } = routeRequest(request)
+  const req = request ?? {}
+  const { route, risk, reason } = routeRequest(req)
   return {
     id: requestId,
-    type: request.type,
-    target: request.target,
-    justification: request.justification ?? '',
-    urgency: request.urgency ?? 'low',
+    type: req.type,
+    target: req.target,
+    justification: req.justification ?? '',
+    urgency: req.urgency ?? 'low',
     risk,
     route,
     routeReason: reason,
     status: route === 'auto_approve' ? 'auto_approved' : 'pending',
-    submittedBy: request.submittedBy ?? 'unknown',
+    submittedBy: req.submittedBy ?? 'unknown',
     submittedAt: Date.now(),
     ...(route === 'auto_approve' ? { approvedAt: Date.now(), approvedBy: 'system' } : {}),
   }
@@ -82,11 +85,12 @@ export function buildQueueEntry(request, requestId) {
 
 // --- Pure: filter the request queue ---
 export function filterQueue(queue, filter = {}) {
-  let out = [...queue]
-  if (filter.status) out = out.filter((r) => r.status === filter.status)
-  if (filter.risk) out = out.filter((r) => r.risk === filter.risk)
-  if (filter.urgency) out = out.filter((r) => r.urgency === filter.urgency)
-  if (filter.target) out = out.filter((r) => r.target.includes(filter.target))
+  let out = Array.isArray(queue) ? [...queue] : []
+  const f = filter ?? {}
+  if (f.status) out = out.filter((r) => r.status === f.status)
+  if (f.risk) out = out.filter((r) => r.risk === f.risk)
+  if (f.urgency) out = out.filter((r) => r.urgency === f.urgency)
+  if (f.target) out = out.filter((r) => String(r.target ?? '').includes(f.target))
   return out
 }
 

package/plugins/sop-assistant/index.mjs

@@ -214,8 +214,8 @@ export function searchIamPolicies(query, policies = IAM_POLICIES) {
 
 // --- Pure: build the command for a SOP step (with variable substitution) ---
 export function buildStepCommand(step, vars = {}) {
-  let cmd = step.command
-  for (const [key, value] of Object.entries(vars)) {
+  let cmd = String(step?.command ?? '')
+  for (const [key, value] of Object.entries(vars ?? {})) {
     cmd = cmd.replace(new RegExp(`\\{${key}\\}`, 'g'), String(value))
   }
   return cmd