{
  "repo": "clusterproxy",
  "full_name": "tidbcloud/clusterproxy",
  "status": "approved",
  "scan_started_at": "2026-03-26T04:00:00Z",
  "scan_completed_at": "2026-03-26T04:15:00Z",
  "approved_at": "2026-03-26T13:00:00Z",
  "note": "This repo has been merged into tidbcloud/infra-provider",
  "expected_binaries": [
    {"name": "versioncheck", "path": "cmd/versioncheck/main.go", "status": "skipped", "role": "admin_cli", "skip_reason": "cli_tool"},
    {"name": "proxy", "path": "cmd/proxy/main.go", "status": "completed", "role": "primary_service"}
  ],
  "scanned_binaries": [
    {"name": "proxy", "output_file": "cmd-proxy"}
  ],
  "skipped_binaries": [
    {
      "name": "versioncheck",
      "skip_reason": "cli_tool",
      "note": "version compatibility checker, no HTTP API"
    }
  ],
  "files_generated": [
    "interfaces/cmd-proxy.json",
    "service-mapping/cmd-proxy.json"
  ],
  "review_status": "approved",
  "review_participants": ["opencode", "kimi", "codex"],
  "review_cycles": 1,
  "review_note": "Fresh codex rescan completed from source; cmd-proxy now records handler-level interfaces and per-method downstream dependencies instead of a route summary.",
  "codex_rescan_at": "2026-03-27T05:00:00+08:00",
  "codex_rescan_verdict": "approved",
  "codex_rescan_note": "Rebuilt cmd-proxy into method-level interfaces, replaced the legacy provides/consumes summary with method-keyed dependencies, removed the stale aggregate mapping file, and corrected meta.json so versioncheck is treated as an admin CLI rather than an HTTP service. A later root-call-graph follow-up rewired upstream serverless-service SQL helper calls onto the existing canonical TiDBService.QueryByNamespacedCluster and TiDBService.ExecuteByNamespacedCluster roots instead of helper-only aliases.",
  "architecture": {
    "pattern": "http-proxy",
    "description": "HTTP proxy that routes requests to TiDB cluster services in Kubernetes"
  },
  "grpc_usage": {
    "external_api": false,
    "internal_usage": true,
    "description": "No external gRPC API, but uses gRPC internally for PD/etcd communication in clearcdcinfo endpoint"
  },
  "authentication": {
    "type": "Auth0 JWT",
    "dev_mode": true,
    "description": "JWT validation via Auth0, can be disabled in dev mode"
  }
}