@bywaretech/bysentinel-core 0.1.0

package/dist/types/event.d.ts

@@ -0,0 +1,80 @@
+/**
+ * Canonical event shape produced by the SDK and accepted by the collector.
+ * Kept intentionally provider-neutral so non-AWS runtimes can adopt it later.
+ */
+import type { ExecutionTimeline } from "../timeline/timeline.js";
+export type SecuritySignalType = "secret-in-log" | "sensitive-data-in-body" | "auth-error-spike" | "suspicious-user-agent" | "admin-route-access" | "excessive-failed-attempts" | "unsafe-headers" | "ssrf-like-url" | "sql-error-leakage" | "command-injection" | "path-traversal";
+export type SecuritySignalSeverity = "low" | "medium" | "high" | "critical";
+export interface SecuritySignal {
+    type: SecuritySignalType;
+    severity: SecuritySignalSeverity;
+    /** Short human description. Must never embed the raw sensitive value. */
+    message: string;
+    /** Where it was seen, e.g. "request.headers.authorization". */
+    location?: string;
+}
+export interface RuntimeInfo {
+    provider: "aws";
+    service: "lambda";
+    language: "nodejs";
+    version: string;
+}
+/** Deployment/source correlation. Enables release-vs-incident analysis. */
+export interface GitContext {
+    commitSha?: string;
+    branch?: string;
+    version?: string;
+    release?: string;
+    buildTimestamp?: string;
+    repositoryUrl?: string;
+}
+export interface LambdaContext {
+    functionName?: string;
+    functionVersion?: string;
+    requestId?: string;
+    memoryLimitMb?: string;
+    remainingTimeMs?: number;
+    coldStart?: boolean;
+}
+export interface ErrorInfo {
+    type: string;
+    message: string;
+    stack?: string;
+}
+export interface PerformanceInfo {
+    durationMs?: number;
+    timeoutRisk?: boolean;
+    memoryUsedMb?: number;
+}
+export interface RequestInfo {
+    method?: string;
+    path?: string;
+    headers?: Record<string, unknown>;
+    query?: Record<string, unknown>;
+    body?: unknown;
+}
+export interface BySentinelEvent {
+    id: string;
+    timestamp: string;
+    project: string;
+    environment: string;
+    release?: string;
+    runtime: RuntimeInfo;
+    lambda: LambdaContext;
+    git?: GitContext;
+    error?: ErrorInfo;
+    performance?: PerformanceInfo;
+    request?: RequestInfo;
+    /** Execution timeline / bottleneck data (see `ExecutionTimeline`). */
+    timeline?: ExecutionTimeline;
+    customContext?: Record<string, unknown>;
+    securitySignals?: SecuritySignal[];
+    /** True once redaction has run. The collector rejects events with `false`. */
+    sanitized: boolean;
+}
+/** Optional manual-capture metadata merged into `customContext`. */
+export interface CaptureContext {
+    severity?: SecuritySignalSeverity | "warning" | "info";
+    [key: string]: unknown;
+}
+//# sourceMappingURL=event.d.ts.map

package/dist/types/event.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"event.d.ts","sourceRoot":"","sources":["../../src/types/event.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAEjE,MAAM,MAAM,kBAAkB,GAC1B,eAAe,GACf,wBAAwB,GACxB,kBAAkB,GAClB,uBAAuB,GACvB,oBAAoB,GACpB,2BAA2B,GAC3B,gBAAgB,GAChB,eAAe,GACf,mBAAmB,GACnB,mBAAmB,GACnB,gBAAgB,CAAC;AAErB,MAAM,MAAM,sBAAsB,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;AAE5E,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,kBAAkB,CAAC;IACzB,QAAQ,EAAE,sBAAsB,CAAC;IACjC,yEAAyE;IACzE,OAAO,EAAE,MAAM,CAAC;IAChB,+DAA+D;IAC/D,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,KAAK,CAAC;IAChB,OAAO,EAAE,QAAQ,CAAC;IAClB,QAAQ,EAAE,QAAQ,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,2EAA2E;AAC3E,MAAM,WAAW,UAAU;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,aAAa;IAC5B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,eAAe;IAC9B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAElB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,OAAO,EAAE,WAAW,CAAC;IACrB,MAAM,EAAE,aAAa,CAAC;IACtB,GAAG,CAAC,EAAE,UAAU,CAAC;IAEjB,KAAK,CAAC,EAAE,SAAS,CAAC;IAClB,WAAW,CAAC,EAAE,eAAe,CAAC;IAC9B,OAAO,CAAC,EAAE,WAAW,CAAC;IAEtB,sEAAsE;IACtE,QAAQ,CAAC,EAAE,iBAAiB,CAAC;IAE7B,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC,eAAe,CAAC,EAAE,cAAc,EAAE,CAAC;IAEnC,8EAA8E;IAC9E,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,oEAAoE;AACpE,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,sBAAsB,GAAG,SAAS,GAAG,MAAM,CAAC;IACvD,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB"}

package/dist/types/event.js

@@ -0,0 +1,6 @@
+/**
+ * Canonical event shape produced by the SDK and accepted by the collector.
+ * Kept intentionally provider-neutral so non-AWS runtimes can adopt it later.
+ */
+export {};
+//# sourceMappingURL=event.js.map

package/dist/types/event.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"event.js","sourceRoot":"","sources":["../../src/types/event.ts"],"names":[],"mappings":"AAAA;;;GAGG"}

package/dist/types/index.d.ts

@@ -0,0 +1,4 @@
+export * from "./event.js";
+export * from "./analysis.js";
+export * from "./config.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/types/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC"}

package/dist/types/index.js

@@ -0,0 +1,4 @@
+export * from "./event.js";
+export * from "./analysis.js";
+export * from "./config.js";
+//# sourceMappingURL=index.js.map

package/dist/types/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC"}

package/dist/util/id.d.ts

@@ -0,0 +1,4 @@
+/** BySentinel event id, e.g. `bs_evt_<uuid-no-dashes>`. */
+export declare function newEventId(): string;
+export declare function nowIso(): string;
+//# sourceMappingURL=id.d.ts.map

package/dist/util/id.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"id.d.ts","sourceRoot":"","sources":["../../src/util/id.ts"],"names":[],"mappings":"AAEA,2DAA2D;AAC3D,wBAAgB,UAAU,IAAI,MAAM,CAEnC;AAED,wBAAgB,MAAM,IAAI,MAAM,CAE/B"}

package/dist/util/id.js

@@ -0,0 +1,9 @@
+import { randomUUID } from "node:crypto";
+/** BySentinel event id, e.g. `bs_evt_<uuid-no-dashes>`. */
+export function newEventId() {
+    return `bs_evt_${randomUUID().replace(/-/g, "")}`;
+}
+export function nowIso() {
+    return new Date().toISOString();
+}
+//# sourceMappingURL=id.js.map

package/dist/util/id.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"id.js","sourceRoot":"","sources":["../../src/util/id.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,2DAA2D;AAC3D,MAAM,UAAU,UAAU;IACxB,OAAO,UAAU,UAAU,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,MAAM;IACpB,OAAO,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AAClC,CAAC"}

package/package.json

@@ -0,0 +1,55 @@
+{
+  "name": "@bywaretech/bysentinel-core",
+  "version": "0.1.0",
+  "description": "Shared types, redaction/secret-detection engine and fingerprinting for BySentinel",
+  "license": "Apache-2.0",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/bywaretech/bysentinel.git",
+    "directory": "packages/core"
+  },
+  "homepage": "https://github.com/bywaretech/bysentinel/tree/main/packages/core#readme",
+  "bugs": {
+    "url": "https://github.com/bywaretech/bysentinel/issues"
+  },
+  "keywords": [
+    "bysentinel",
+    "observability",
+    "redaction",
+    "pii",
+    "secret-detection",
+    "fingerprint",
+    "ai-analysis"
+  ],
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "sideEffects": false,
+  "publishConfig": {
+    "access": "public"
+  },
+  "devDependencies": {
+    "typescript": "^5.5.0",
+    "vitest": "^2.0.0"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "dev": "tsc -p tsconfig.json --watch",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "lint": "tsc -p tsconfig.json --noEmit",
+    "clean": "rm -rf dist .turbo coverage"
+  }
+}