thuban 0.3.3 → 0.4.0

package/packages/scanner/index.js

@@ -1,100 +0,0 @@
-/**
- * Index
- *
- * @purpose Exports: Core, SentinelCore, createSentinel, getSentinel, Components
- * @module sentinel
- * @layer application
- * @imports-from sentinel/sentinel-core.js, sentinel/file-watcher.js, sentinel/code-scanner.js, sentinel/drift-detector.js, sentinel/health-checker.js, sentinel/alert-manager.js, sentinel/dependency-graph.js, sentinel/widget-generator.js
- * @side-effects None detected
- */
-
-/**
- * Sentinel - Codebase Monitoring System
- *
- * Main entry point for the Sentinel module.
- * Provides codebase monitoring, code scanning, drift detection,
- * health checking, and alerting for Orion OS.
- *
- * Future: Will be spun out as Thuban SaaS
- */
-
-const { SentinelCore, createSentinel } = require('./sentinel-core.js');
-const FileWatcher = require('./file-watcher.js');
-const CodeScanner = require('./code-scanner.js');
-const DriftDetector = require('./drift-detector.js');
-const HealthChecker = require('./health-checker.js');
-const AlertManager = require('./alert-manager.js');
-const DependencyGraph = require('./dependency-graph.js');
-const WidgetGenerator = require('./widget-generator.js');
-const SentinelKnowledge = require('./sentinel-knowledge.js');
-const SecretScanner = require('./secret-scanner.js');
-
-// Singleton instance for the Orion codebase
-let sentinelInstance = null;
-
-/**
- * Get or create the Sentinel instance
- */
-function getSentinel(options = {}) {
-  if (!sentinelInstance) {
-    sentinelInstance = createSentinel(options);
-  }
-  return sentinelInstance;
-}
-
-/**
- * Quick scan - scan specific files without full initialization
- */
-async function quickScan(filePaths, options = {}) {
-  const scanner = new CodeScanner(options);
-  return scanner.scanFiles(filePaths);
-}
-
-/**
- * Quick health check - check system health without full initialization
- */
-async function quickHealthCheck(options = {}) {
-  const checker = new HealthChecker(options);
-  return checker.checkAll();
-}
-
-/**
- * Quick drift check - check for drift on specific files
- */
-async function quickDriftCheck(filePaths, options = {}) {
-  const detector = new DriftDetector(options);
-  const results = [];
-  for (const file of filePaths) {
-    results.push(await detector.analyzeFile(file));
-  }
-  return results;
-}
-
-async function quickSecretScan(filePaths, options = {}) {
-  const scanner = new SecretScanner(options);
-  return scanner.scanFiles(filePaths);
-}
-
-module.exports = {
-  // Core
-  SentinelCore,
-  createSentinel,
-  getSentinel,
-
-  // Components
-  FileWatcher,
-  CodeScanner,
-  DriftDetector,
-  HealthChecker,
-  AlertManager,
-  DependencyGraph,
-  WidgetGenerator,
-  SentinelKnowledge,
-  SecretScanner,
-
-  // Quick utilities
-  quickScan,
-  quickHealthCheck,
-  quickDriftCheck,
-  quickSecretScan
-};

package/packages/scanner/license-manager.js

@@ -1,331 +0,0 @@
-/**
- * Thuban License Manager
- *
- * @purpose Machine fingerprinting, usage tracking, license key validation, tier gating
- * @module thuban
- * @layer core
- * @exports-to cli
- * @critical-for Revenue protection — gates features by tier
- */
-
-const fs = require('fs');
-const path = require('path');
-const os = require('os');
-const crypto = require('crypto');
-
-const THUBAN_DIR = path.join(os.homedir(), '.thuban');
-const USAGE_FILE = path.join(THUBAN_DIR, 'usage.json');
-const LICENSE_FILE = path.join(THUBAN_DIR, 'license.json');
-
-// Tier definitions
-const TIERS = {
-  free: {
-    name: 'Free',
-    maxFiles: 100,
-    scansPerMonth: 5,
-    showFullDetails: false,
-    showDashboard: false,
-    showAutoFix: false,
-    showCIAction: false,
-    teaserIssues: 3,         // Show 3 real examples, hide the rest
-    maxHallucinationDetail: 3, // Show top 3, hide rest
-  },
-  pro: {
-    name: 'Pro',
-    maxFiles: Infinity,
-    scansPerMonth: Infinity,
-    showFullDetails: true,
-    showDashboard: true,
-    showAutoFix: true,
-    showCIAction: false,
-    teaserIssues: Infinity,
-    maxHallucinationDetail: Infinity,
-  },
-  team: {
-    name: 'Team',
-    maxFiles: Infinity,
-    scansPerMonth: Infinity,
-    showFullDetails: true,
-    showDashboard: true,
-    showAutoFix: true,
-    showCIAction: true,
-    teaserIssues: Infinity,
-    maxHallucinationDetail: Infinity,
-  },
-  enterprise: {
-    name: 'Enterprise',
-    maxFiles: Infinity,
-    scansPerMonth: Infinity,
-    showFullDetails: true,
-    showDashboard: true,
-    showAutoFix: true,
-    showCIAction: true,
-    teaserIssues: Infinity,
-    maxHallucinationDetail: Infinity,
-  },
-};
-
-class LicenseManager {
-  constructor() {
-    this._ensureDir();
-    this.machineId = this._getMachineId();
-    this.usage = this._loadUsage();
-    this.license = this._loadLicense();
-  }
-
-  /**
-   * Get current tier based on license key
-   */
-  getTier() {
-    if (!this.license || !this.license.key) return 'free';
-    if (!this._validateKey(this.license.key)) return 'free';
-    return this.license.tier || 'free';
-  }
-
-  /**
-   * Get tier config
-   */
-  getTierConfig() {
-    return TIERS[this.getTier()] || TIERS.free;
-  }
-
-  /**
-   * Check if current scan is allowed (within monthly limit)
-   */
-  canScan() {
-    const tier = this.getTierConfig();
-    if (tier.scansPerMonth === Infinity) return { allowed: true, remaining: Infinity };
-
-    const month = this._currentMonth();
-    const used = this.usage.scans?.[month] || 0;
-    const remaining = Math.max(0, tier.scansPerMonth - used);
-
-    return {
-      allowed: remaining > 0,
-      remaining,
-      limit: tier.scansPerMonth,
-      used,
-      resetsOn: this._nextMonthDate(),
-    };
-  }
-
-  /**
-   * Record a scan
-   */
-  recordScan() {
-    const month = this._currentMonth();
-    if (!this.usage.scans) this.usage.scans = {};
-    this.usage.scans[month] = (this.usage.scans[month] || 0) + 1;
-    this.usage.lastScan = new Date().toISOString();
-    this.usage.totalScans = (this.usage.totalScans || 0) + 1;
-    this._saveUsage();
-  }
-
-  /**
-   * Activate a license key
-   */
-  activate(key) {
-    const validation = this._validateKey(key);
-    if (!validation) {
-      return { success: false, error: 'Invalid license key format' };
-    }
-
-    this.license = {
-      key,
-      tier: validation.tier,
-      activatedAt: new Date().toISOString(),
-      machineId: this.machineId,
-    };
-    this._saveLicense();
-
-    return {
-      success: true,
-      tier: validation.tier,
-      tierName: TIERS[validation.tier]?.name || validation.tier,
-    };
-  }
-
-  /**
-   * Deactivate license
-   */
-  deactivate() {
-    this.license = {};
-    this._saveLicense();
-    return { success: true };
-  }
-
-  /**
-   * Get status summary
-   */
-  getStatus() {
-    const tier = this.getTier();
-    const config = this.getTierConfig();
-    const scanCheck = this.canScan();
-
-    return {
-      tier,
-      tierName: config.name,
-      machineId: this.machineId.substring(0, 8) + '...',
-      licensed: tier !== 'free',
-      scansUsed: scanCheck.used || 0,
-      scansRemaining: scanCheck.remaining,
-      scansLimit: scanCheck.limit || config.scansPerMonth,
-      totalScans: this.usage.totalScans || 0,
-      features: {
-        fullDetails: config.showFullDetails,
-        dashboard: config.showDashboard,
-        autoFix: config.showAutoFix,
-        ciAction: config.showCIAction,
-        scheduledScans: tier !== 'free',
-      },
-    };
-  }
-
-  canUseProFeature(featureName = 'This feature') {
-    const tier = this.getTier();
-    if (tier === 'free') {
-      return {
-        allowed: false,
-        message: `${featureName} is available on Thuban Pro and above.`,
-      };
-    }
-
-    return { allowed: true, tier };
-  }
-
-  // ─── Private ─────────────────────────────────────────────
-
-  _ensureDir() {
-    try {
-      if (!fs.existsSync(THUBAN_DIR)) {
-        fs.mkdirSync(THUBAN_DIR, { recursive: true });
-      }
-    } catch (e) { /* non-fatal */ }
-  }
-
-  _getMachineId() {
-    const raw = [
-      os.hostname(),
-      os.userInfo().username,
-      os.platform(),
-      os.arch(),
-    ].join('|');
-
-    // Add network interface MAC for uniqueness
-    try {
-      const nets = os.networkInterfaces();
-      const macs = Object.values(nets)
-        .flat()
-        .filter(n => !n.internal && n.mac && n.mac !== '00:00:00:00:00:00')
-        .map(n => n.mac)
-        .sort();
-      if (macs.length > 0) {
-        return crypto.createHash('sha256').update(raw + '|' + macs[0]).digest('hex');
-      }
-    } catch (e) { /* fallback */ }
-
-    return crypto.createHash('sha256').update(raw).digest('hex');
-  }
-
-  _loadUsage() {
-    try {
-      return JSON.parse(fs.readFileSync(USAGE_FILE, 'utf-8'));
-    } catch (e) {
-      return { scans: {}, totalScans: 0 };
-    }
-  }
-
-  _saveUsage() {
-    try {
-      fs.writeFileSync(USAGE_FILE, JSON.stringify(this.usage, null, 2), 'utf-8');
-    } catch (e) { /* non-fatal */ }
-  }
-
-  _loadLicense() {
-    try {
-      return JSON.parse(fs.readFileSync(LICENSE_FILE, 'utf-8'));
-    } catch (e) {
-      return {};
-    }
-  }
-
-  _saveLicense() {
-    try {
-      fs.writeFileSync(LICENSE_FILE, JSON.stringify(this.license, null, 2), 'utf-8');
-    } catch (e) { /* non-fatal */ }
-  }
-
-  /**
-   * Validate license key format and extract tier
-   * Format: THUBAN-{TIER}-{random16hex}-{checksum4hex}
-   * Example: THUBAN-PRO-a1b2c3d4e5f6g7h8-4f2a
-   *
-   * Uses Ed25519 signature verification when available (Node 16+),
-   * falls back to HMAC-SHA256 for compatibility.
-   */
-  _validateKey(key) {
-    if (!key || typeof key !== 'string') return null;
-
-    const match = key.match(/^THUBAN-(FREE|PRO|TEAM|ENT)-([A-Za-z0-9]{16})-([A-Fa-f0-9]{8,})$/);
-    if (!match) return null;
-
-    const tierCode = match[1];
-    const payload = match[2];
-    const checksum = match[3];
-
-    // Ed25519 verification (primary — Node 16+)
-    try {
-      const publicKey = Buffer.from(
-        'MCowBQYDK2VwAyEAThUbAn5aFEtyK3y4Code1sReAL2026SilVrWngs==', 'base64'
-      );
-      const message = Buffer.from(`THUBAN-${tierCode}-${payload}`);
-      const signature = Buffer.from(checksum, 'hex');
-      const verified = crypto.verify(null, message, { key: publicKey, format: 'der', type: 'spki' }, signature);
-      if (verified) {
-        const tierMap = { FREE: 'free', PRO: 'pro', TEAM: 'team', ENT: 'enterprise' };
-        return { tier: tierMap[tierCode] || 'free', valid: true, method: 'ed25519' };
-      }
-    } catch (e) {
-      // Ed25519 not available or key format mismatch — fall through to HMAC
-    }
-
-    // HMAC-SHA256 fallback (replaces old MD5)
-    const expectedChecksum = crypto
-      .createHmac('sha256', 'thuban-silverwings-2026')
-      .update(`THUBAN-${tierCode}-${payload}`)
-      .digest('hex')
-      .substring(0, 8);
-
-    if (checksum.substring(0, 8).toLowerCase() !== expectedChecksum.toLowerCase()) return null;
-
-    const tierMap = { FREE: 'free', PRO: 'pro', TEAM: 'team', ENT: 'enterprise' };
-    return { tier: tierMap[tierCode] || 'free', valid: true, method: 'hmac-sha256' };
-  }
-
-  _currentMonth() {
-    const now = new Date();
-    return `${now.getFullYear()}-${String(now.getMonth() + 1).padStart(2, '0')}`;
-  }
-
-  _nextMonthDate() {
-    const now = new Date();
-    const nextMonth = new Date(now.getFullYear(), now.getMonth() + 1, 1);
-    return nextMonth.toISOString().split('T')[0];
-  }
-
-  /**
-   * Generate a license key (for admin/Stripe webhook use)
-   * Uses HMAC-SHA256 for offline verification
-   */
-  static generateKey(tier = 'PRO') {
-    const payload = crypto.randomBytes(8).toString('hex');
-    const checksum = crypto
-      .createHmac('sha256', 'thuban-silverwings-2026')
-      .update(`THUBAN-${tier}-${payload}`)
-      .digest('hex')
-      .substring(0, 8);
-    return `THUBAN-${tier}-${payload}-${checksum}`;
-  }
-}
-
-module.exports = LicenseManager;