Files · AWS Bedrock Reliability Suite for Auth0 SMB Auth Operations
66 (1 binary, 630.7 kB total)attempt 1
README.md·2106 B·markdown
markdown
# AWS Bedrock Reliability Suite for Auth0 SMB Auth Operations
> Circuit-break Auth0 API calls, rotate secrets automatically, and auto-run incident runbooks when authentication failures spike—keeping SMB login flows resilient.
## Problem
SMBs relying on Auth0 for customer login experience silent outages or lockouts from misconfigured secrets, quota spikes, or expired certificates, with no automated recovery.
## Architecture
- **Auth0 Management API** — All API calls wrapped with `@reaatech/circuit-breaker-core` and `@reaatech/idempotency-middleware`
- **Secret Rotation** — `@reaatech/secret-rotation-core` with `@reaatech/secret-rotation-provider-aws` rotates client secrets in AWS Secrets Manager
- **Alert Monitoring** — Log stream analysis via `@reaatech/agent-runbook-alerts`, runbook generation via `@reaatech/agent-runbook-agent` with AWS Bedrock
- **Notifications** — Alerts sent via Slack `@slack/web-api`
- **Workflow Orchestration** — `@trigger.dev/sdk` durable jobs
## API Routes
| Endpoint | Method | Purpose |
|---|---|---|
| `/api/reliability/status` | GET | System health and circuit breaker state |
| `/api/reliability/rotate` | POST | Trigger manual secret rotation |
| `/api/reliability/runbook` | POST | Trigger incident runbook |
## Quick Start
```bash
cp .env.example .env
# Fill in your credentials
pnpm install
pnpm test
pnpm dev
```
## Testing
```bash
pnpm test # vitest run with coverage (>= 90% required)
pnpm typecheck # TypeScript strict check
pnpm lint # ESLint flat config
```
## Dependencies
| Package | Version |
|---|---|
| `@reaatech/circuit-breaker-core` | 0.1.1 |
| `@reaatech/idempotency-middleware` | 1.0.0 |
| `@reaatech/secret-rotation-core` | 0.1.0 |
| `@reaatech/secret-rotation-provider-aws` | 0.1.0 |
| `@reaatech/agent-runbook-agent` | 0.1.0 |
| `@reaatech/agent-runbook-alerts` | 0.1.0 |
| `@trigger.dev/sdk` | 4.4.6 |
| `@aws-sdk/client-bedrock-runtime` | 3.1064.0 |
| `jose` | 6.2.3 |
| `@slack/web-api` | 7.16.0 |
| `zod` | 4.4.3 |
| `langfuse` | 3.38.20 |
## License
MIT — see [LICENSE](./LICENSE).