@dcyfr/ai 2.1.3 → 3.0.1

package/dist/ai/src/plugins/incidents/incident-response-manager.d.ts

@@ -0,0 +1,165 @@
+/**
+ * Plugin Incident Response Manager
+ *
+ * Manages the full lifecycle of security incidents for marketplace plugins,
+ * including SLA enforcement, auto-disable on critical CVEs, and notification
+ * dispatch through pluggable adapter interfaces.
+ *
+ * SLA Timers (measured from incident `createdAt`):
+ *   critical  (CVSS ≥9.0)  — 24 hours
+ *   high      (CVSS 7.0–8.9) — 48 hours
+ *   medium    (CVSS 4.0–6.9) — 7 days
+ *   low       (CVSS 0.1–3.9) — 30 days
+ *   info      (CVSS 0.0)   — 30 days
+ *
+ * Auto-disable policy:
+ *   Any incident whose CVSS score is ≥9.0 triggers automatic plugin disable.
+ *   The `onAutoDisable` hook is called synchronously so callers can update
+ *   their plugin registry, disable download links, etc.
+ *
+ * Integration adapters (all optional — pass in config):
+ *   emailNotifier  — notify affected users and plugin author
+ *   githubClient   — open GitHub issue + Security Advisory
+ *   axiomLogger    — stream SLA-breach events to Axiom dataset
+ *
+ * @module plugins/incidents/incident-response-manager
+ * @version 1.0.0
+ * @date 2026-02-28
+ * @license MIT
+ */
+import type { Incident, IncidentSeverity, IncidentStatus, CreateIncidentInput, AcknowledgeIncidentInput, ResolveIncidentInput, ListIncidentsOptions, IncidentPage, SlaConfig, EmailNotifier, GithubClient, AxiomLogger, GithubIssuePayload, GithubAdvisoryPayload, AxiomAlertPayload } from './types.js';
+export type { Incident, IncidentSeverity, IncidentStatus, CreateIncidentInput, AcknowledgeIncidentInput, ResolveIncidentInput, ListIncidentsOptions, IncidentPage, SlaConfig, EmailNotifier, GithubClient, AxiomLogger, GithubIssuePayload, GithubAdvisoryPayload, AxiomAlertPayload, };
+/** Error thrown by IncidentResponseManager operations */
+export declare class IncidentError extends Error {
+    readonly code: string;
+    constructor(message: string, code: string);
+}
+export interface IncidentResponseManagerConfig {
+    /** SLA overrides — defaults to DEFAULT_SLA */
+    sla?: Partial<SlaConfig>;
+    /**
+     * Called synchronously when a plugin is automatically disabled.
+     * @param pluginId  Plugin that was disabled
+     * @param incident  The triggering incident
+     */
+    onAutoDisable?: (pluginId: string, incident: Incident) => void;
+    /** Pluggable email notifier */
+    emailNotifier?: EmailNotifier;
+    /** Pluggable GitHub client */
+    githubClient?: GithubClient;
+    /** Pluggable Axiom logger */
+    axiomLogger?: AxiomLogger;
+    /**
+     * GitHub repo where issues and advisories will be created
+     * (e.g. "dcyfr/dcyfr-plugins"). Required to use githubClient.
+     */
+    githubRepo?: string;
+}
+/**
+ * Manages security incidents for marketplace plugins.
+ *
+ * @example
+ * ```typescript
+ * const manager = new IncidentResponseManager({ githubRepo: 'dcyfr/dcyfr-plugins' });
+ * const incident = await manager.createIncident({
+ *   pluginId: 'author/my-plugin',
+ *   title: 'Remote code execution via crafted input',
+ *   description: 'Long description...',
+ *   cvssScore: 9.8,
+ *   cveIds: ['CVE-2026-12345'],
+ * });
+ * ```
+ */
+export declare class IncidentResponseManager {
+    private readonly incidents;
+    private readonly sla;
+    private readonly config;
+    constructor(config?: IncidentResponseManagerConfig);
+    /**
+     * Create a new security incident.
+     *
+     * Side-effects:
+     *   • If cvssScore ≥9.0 → plugin is auto-disabled via `onAutoDisable` hook.
+     *   • GitHub issue + Security Advisory are created if `githubClient` is configured.
+     *   • Axiom alert is fired for critical incidents if `axiomLogger` is configured.
+     *
+     * @throws {IncidentError} code `INVALID_CVSS` if cvssScore is out of [0, 10] range.
+     */
+    createIncident(input: CreateIncidentInput): Promise<Incident>;
+    /**
+     * Acknowledge an incident — transitions status from `open` → `acknowledged`.
+     *
+     * @throws {IncidentError} code `NOT_FOUND` if incident doesn't exist.
+     * @throws {IncidentError} code `ALREADY_ACKNOWLEDGED` if already past open state.
+     */
+    acknowledgeIncident(input: AcknowledgeIncidentInput): Incident;
+    /**
+     * Move an incident to `in_progress` — transitions from `open` or `acknowledged`.
+     *
+     * @throws {IncidentError} code `NOT_FOUND` | `INVALID_TRANSITION`
+     */
+    markInProgress(id: string, assignee?: string): Incident;
+    /**
+     * Resolve or close an incident.
+     *
+     * @throws {IncidentError} code `NOT_FOUND` | `ALREADY_RESOLVED`
+     */
+    resolveIncident(input: ResolveIncidentInput): Incident;
+    /**
+     * Check all incidents for SLA breaches.
+     * Mutates affected incidents to status `sla_breached` and fires Axiom alerts.
+     *
+     * @returns Array of newly breached incidents
+     */
+    checkSlaBreaches(): Promise<Incident[]>;
+    /**
+     * Return incidents whose SLA deadline has passed and are not terminal.
+     * Does NOT mutate status — use `checkSlaBreaches()` to update statuses.
+     */
+    getOverdueIncidents(): Incident[];
+    /**
+     * Get a single incident by ID.
+     * @throws {IncidentError} code `NOT_FOUND` if not found.
+     */
+    getIncident(id: string): Incident;
+    /**
+     * List incidents with optional filtering and pagination.
+     */
+    listIncidents(options?: ListIncidentsOptions): IncidentPage;
+    /**
+     * Count of all stored incidents.
+     */
+    get size(): number;
+    /**
+     * Bulk-load incidents from an external store (replaces in-memory state).
+     */
+    hydrate(incidents: Incident[]): void;
+    /**
+     * Export all incidents as a plain array (for persisting to an external store).
+     */
+    export(): Incident[];
+    /**
+     * Create a GitHub issue for an incident.
+     * Requires `githubClient` and `githubRepo` to be configured.
+     *
+     * @returns The GitHub issue URL, or null if no client is configured.
+     */
+    createGithubIssue(incident: Incident): Promise<string | null>;
+    /**
+     * Create a GitHub Security Advisory for an incident.
+     * Requires `githubClient` and `githubRepo` to be configured.
+     *
+     * @returns The advisory URL, or null if no client is configured.
+     */
+    createSecurityAdvisory(incident: Incident): Promise<string | null>;
+    /**
+     * Send an Axiom alert for an incident.
+     *
+     * @param incident The incident to alert on.
+     * @param alertType The type of alert event.
+     */
+    sendAxiomAlert(incident: Incident, alertType: AxiomAlertPayload['alertType']): Promise<void>;
+    private requireIncident;
+    private dispatchNewIncidentNotifications;
+}
+//# sourceMappingURL=incident-response-manager.d.ts.map

package/dist/ai/src/plugins/incidents/incident-response-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"incident-response-manager.d.ts","sourceRoot":"","sources":["../../../../../packages/ai/src/plugins/incidents/incident-response-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAGH,OAAO,KAAK,EACV,QAAQ,EACR,gBAAgB,EAChB,cAAc,EACd,mBAAmB,EACnB,wBAAwB,EACxB,oBAAoB,EACpB,oBAAoB,EACpB,YAAY,EACZ,SAAS,EACT,aAAa,EACb,YAAY,EACZ,WAAW,EACX,kBAAkB,EAClB,qBAAqB,EACrB,iBAAiB,EAClB,MAAM,YAAY,CAAC;AAIpB,YAAY,EACV,QAAQ,EACR,gBAAgB,EAChB,cAAc,EACd,mBAAmB,EACnB,wBAAwB,EACxB,oBAAoB,EACpB,oBAAoB,EACpB,YAAY,EACZ,SAAS,EACT,aAAa,EACb,YAAY,EACZ,WAAW,EACX,kBAAkB,EAClB,qBAAqB,EACrB,iBAAiB,GAClB,CAAC;AAMF,yDAAyD;AACzD,qBAAa,aAAc,SAAQ,KAAK;aAGpB,IAAI,EAAE,MAAM;gBAD5B,OAAO,EAAE,MAAM,EACC,IAAI,EAAE,MAAM;CAK/B;AAkDD,MAAM,WAAW,6BAA6B;IAC5C,8CAA8C;IAC9C,GAAG,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IACzB;;;;OAIG;IACH,aAAa,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,KAAK,IAAI,CAAC;IAC/D,+BAA+B;IAC/B,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,8BAA8B;IAC9B,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,6BAA6B;IAC7B,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAMD;;;;;;;;;;;;;;GAcG;AACH,qBAAa,uBAAuB;IAClC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA+B;IACzD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAY;IAChC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgC;gBAE3C,MAAM,GAAE,6BAAkC;IAStD;;;;;;;;;OASG;IACG,cAAc,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,QAAQ,CAAC;IAkDnE;;;;;OAKG;IACH,mBAAmB,CAAC,KAAK,EAAE,wBAAwB,GAAG,QAAQ;IAyB9D;;;;OAIG;IACH,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,QAAQ;IAyBvD;;;;OAIG;IACH,eAAe,CAAC,KAAK,EAAE,oBAAoB,GAAG,QAAQ;IA2BtD;;;;;OAKG;IACG,gBAAgB,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;IAoB7C;;;OAGG;IACH,mBAAmB,IAAI,QAAQ,EAAE;IASjC;;;OAGG;IACH,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,QAAQ;IAIjC;;OAEG;IACH,aAAa,CAAC,OAAO,GAAE,oBAAyB,GAAG,YAAY;IAmC/D;;OAEG;IACH,IAAI,IAAI,IAAI,MAAM,CAEjB;IAMD;;OAEG;IACH,OAAO,CAAC,SAAS,EAAE,QAAQ,EAAE,GAAG,IAAI;IAOpC;;OAEG;IACH,MAAM,IAAI,QAAQ,EAAE;IAQpB;;;;;OAKG;IACG,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IA6BnE;;;;;OAKG;IACG,sBAAsB,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAoBxE;;;;;OAKG;IACG,cAAc,CAClB,QAAQ,EAAE,QAAQ,EAClB,SAAS,EAAE,iBAAiB,CAAC,WAAW,CAAC,GACxC,OAAO,CAAC,IAAI,CAAC;IAsBhB,OAAO,CAAC,eAAe;YAQT,gCAAgC;CA4C/C"}

package/dist/ai/src/plugins/incidents/incident-response-manager.js

@@ -0,0 +1,462 @@
+/**
+ * Plugin Incident Response Manager
+ *
+ * Manages the full lifecycle of security incidents for marketplace plugins,
+ * including SLA enforcement, auto-disable on critical CVEs, and notification
+ * dispatch through pluggable adapter interfaces.
+ *
+ * SLA Timers (measured from incident `createdAt`):
+ *   critical  (CVSS ≥9.0)  — 24 hours
+ *   high      (CVSS 7.0–8.9) — 48 hours
+ *   medium    (CVSS 4.0–6.9) — 7 days
+ *   low       (CVSS 0.1–3.9) — 30 days
+ *   info      (CVSS 0.0)   — 30 days
+ *
+ * Auto-disable policy:
+ *   Any incident whose CVSS score is ≥9.0 triggers automatic plugin disable.
+ *   The `onAutoDisable` hook is called synchronously so callers can update
+ *   their plugin registry, disable download links, etc.
+ *
+ * Integration adapters (all optional — pass in config):
+ *   emailNotifier  — notify affected users and plugin author
+ *   githubClient   — open GitHub issue + Security Advisory
+ *   axiomLogger    — stream SLA-breach events to Axiom dataset
+ *
+ * @module plugins/incidents/incident-response-manager
+ * @version 1.0.0
+ * @date 2026-02-28
+ * @license MIT
+ */
+import { randomUUID } from 'crypto';
+import { DEFAULT_SLA } from './types.js';
+// ---------------------------------------------------------------------------
+// Custom error
+// ---------------------------------------------------------------------------
+/** Error thrown by IncidentResponseManager operations */
+export class IncidentError extends Error {
+    code;
+    constructor(message, code) {
+        super(message);
+        this.code = code;
+        this.name = 'IncidentError';
+    }
+}
+// ---------------------------------------------------------------------------
+// Internal helpers
+// ---------------------------------------------------------------------------
+const CRITICAL_CVSS_THRESHOLD = 9.0;
+/** Derive qualitative severity from a CVSS v3.1 numeric score */
+function cvssToSeverity(score) {
+    if (score >= 9.0)
+        return 'critical';
+    if (score >= 7.0)
+        return 'high';
+    if (score >= 4.0)
+        return 'medium';
+    if (score > 0.0)
+        return 'low';
+    return 'informational';
+}
+/** Map IncidentSeverity to its SLA deadline in milliseconds */
+function slaMs(severity, config) {
+    switch (severity) {
+        case 'critical': return config.criticalMs;
+        case 'high': return config.highMs;
+        case 'medium': return config.mediumMs;
+        case 'low': return config.lowMs;
+        case 'informational': return config.lowMs; // same as low
+    }
+}
+/** Compute ISO-8601 SLA deadline from creation time */
+function computeSlaDeadline(createdAt, severity, sla) {
+    const ms = slaMs(severity, sla);
+    return new Date(new Date(createdAt).getTime() + ms).toISOString();
+}
+/** Return true if the incident is past its SLA deadline and not yet resolved/closed */
+function isSlaBreached(incident, now) {
+    if (incident.status === 'resolved' || incident.status === 'closed')
+        return false;
+    return now > new Date(incident.slaDeadline);
+}
+/** Map IncidentSeverity to GHSA severity string */
+function toGhsaSeverity(severity) {
+    if (severity === 'informational')
+        return 'low';
+    return severity;
+}
+// ---------------------------------------------------------------------------
+// Manager
+// ---------------------------------------------------------------------------
+/**
+ * Manages security incidents for marketplace plugins.
+ *
+ * @example
+ * ```typescript
+ * const manager = new IncidentResponseManager({ githubRepo: 'dcyfr/dcyfr-plugins' });
+ * const incident = await manager.createIncident({
+ *   pluginId: 'author/my-plugin',
+ *   title: 'Remote code execution via crafted input',
+ *   description: 'Long description...',
+ *   cvssScore: 9.8,
+ *   cveIds: ['CVE-2026-12345'],
+ * });
+ * ```
+ */
+export class IncidentResponseManager {
+    incidents = new Map();
+    sla;
+    config;
+    constructor(config = {}) {
+        this.config = config;
+        this.sla = { ...DEFAULT_SLA, ...(config.sla ?? {}) };
+    }
+    // -------------------------------------------------------------------------
+    // Create
+    // -------------------------------------------------------------------------
+    /**
+     * Create a new security incident.
+     *
+     * Side-effects:
+     *   • If cvssScore ≥9.0 → plugin is auto-disabled via `onAutoDisable` hook.
+     *   • GitHub issue + Security Advisory are created if `githubClient` is configured.
+     *   • Axiom alert is fired for critical incidents if `axiomLogger` is configured.
+     *
+     * @throws {IncidentError} code `INVALID_CVSS` if cvssScore is out of [0, 10] range.
+     */
+    async createIncident(input) {
+        if (input.cvssScore < 0 || input.cvssScore > 10) {
+            throw new IncidentError(`cvssScore must be between 0 and 10, got ${input.cvssScore}`, 'INVALID_CVSS');
+        }
+        const now = new Date().toISOString();
+        const severity = cvssToSeverity(input.cvssScore);
+        const autoDisabled = input.cvssScore >= CRITICAL_CVSS_THRESHOLD;
+        const incident = {
+            id: randomUUID(),
+            pluginId: input.pluginId,
+            title: input.title,
+            description: input.description,
+            cvssScore: input.cvssScore,
+            severity,
+            cveIds: input.cveIds ?? [],
+            status: 'open',
+            createdAt: now,
+            acknowledgedAt: null,
+            resolvedAt: null,
+            slaDeadline: computeSlaDeadline(now, severity, this.sla),
+            autoDisabled,
+            assignee: null,
+            resolution: null,
+            githubIssueUrl: null,
+            githubAdvisoryUrl: null,
+            metadata: input.metadata ?? {},
+        };
+        this.incidents.set(incident.id, incident);
+        // Auto-disable critical plugins synchronously before async side-effects
+        if (autoDisabled && this.config.onAutoDisable) {
+            this.config.onAutoDisable(incident.pluginId, incident);
+        }
+        // Dispatch async side-effects (fire-and-forget with error isolation)
+        await this.dispatchNewIncidentNotifications(incident);
+        return incident;
+    }
+    // -------------------------------------------------------------------------
+    // Acknowledge
+    // -------------------------------------------------------------------------
+    /**
+     * Acknowledge an incident — transitions status from `open` → `acknowledged`.
+     *
+     * @throws {IncidentError} code `NOT_FOUND` if incident doesn't exist.
+     * @throws {IncidentError} code `ALREADY_ACKNOWLEDGED` if already past open state.
+     */
+    acknowledgeIncident(input) {
+        const incident = this.requireIncident(input.id);
+        if (incident.status !== 'open') {
+            throw new IncidentError(`Incident ${input.id} is in status '${incident.status}', cannot acknowledge`, 'ALREADY_ACKNOWLEDGED');
+        }
+        const updated = {
+            ...incident,
+            status: 'acknowledged',
+            acknowledgedAt: new Date().toISOString(),
+            assignee: input.assignee,
+        };
+        this.incidents.set(updated.id, updated);
+        return updated;
+    }
+    // -------------------------------------------------------------------------
+    // Progress
+    // -------------------------------------------------------------------------
+    /**
+     * Move an incident to `in_progress` — transitions from `open` or `acknowledged`.
+     *
+     * @throws {IncidentError} code `NOT_FOUND` | `INVALID_TRANSITION`
+     */
+    markInProgress(id, assignee) {
+        const incident = this.requireIncident(id);
+        const allowed = ['open', 'acknowledged'];
+        if (!allowed.includes(incident.status)) {
+            throw new IncidentError(`Cannot mark incident ${id} as in_progress from status '${incident.status}'`, 'INVALID_TRANSITION');
+        }
+        const updated = {
+            ...incident,
+            status: 'in_progress',
+            assignee: assignee ?? incident.assignee,
+        };
+        this.incidents.set(updated.id, updated);
+        return updated;
+    }
+    // -------------------------------------------------------------------------
+    // Resolve / Close
+    // -------------------------------------------------------------------------
+    /**
+     * Resolve or close an incident.
+     *
+     * @throws {IncidentError} code `NOT_FOUND` | `ALREADY_RESOLVED`
+     */
+    resolveIncident(input) {
+        const incident = this.requireIncident(input.id);
+        const terminal = ['resolved', 'closed'];
+        if (terminal.includes(incident.status)) {
+            throw new IncidentError(`Incident ${input.id} is already in terminal status '${incident.status}'`, 'ALREADY_RESOLVED');
+        }
+        const now = new Date().toISOString();
+        const updated = {
+            ...incident,
+            status: input.finalStatus ?? 'resolved',
+            resolvedAt: now,
+            resolution: input.resolution,
+        };
+        this.incidents.set(updated.id, updated);
+        return updated;
+    }
+    // -------------------------------------------------------------------------
+    // SLA breach detection
+    // -------------------------------------------------------------------------
+    /**
+     * Check all incidents for SLA breaches.
+     * Mutates affected incidents to status `sla_breached` and fires Axiom alerts.
+     *
+     * @returns Array of newly breached incidents
+     */
+    async checkSlaBreaches() {
+        const now = new Date();
+        const breached = [];
+        for (const incident of this.incidents.values()) {
+            if (incident.status === 'sla_breached')
+                continue; // already flagged
+            if (isSlaBreached(incident, now)) {
+                const updated = { ...incident, status: 'sla_breached' };
+                this.incidents.set(updated.id, updated);
+                breached.push(updated);
+                if (this.config.axiomLogger) {
+                    await this.sendAxiomAlert(updated, 'sla_breach');
+                }
+            }
+        }
+        return breached;
+    }
+    /**
+     * Return incidents whose SLA deadline has passed and are not terminal.
+     * Does NOT mutate status — use `checkSlaBreaches()` to update statuses.
+     */
+    getOverdueIncidents() {
+        const now = new Date();
+        return Array.from(this.incidents.values()).filter(i => isSlaBreached(i, now));
+    }
+    // -------------------------------------------------------------------------
+    // Queries
+    // -------------------------------------------------------------------------
+    /**
+     * Get a single incident by ID.
+     * @throws {IncidentError} code `NOT_FOUND` if not found.
+     */
+    getIncident(id) {
+        return this.requireIncident(id);
+    }
+    /**
+     * List incidents with optional filtering and pagination.
+     */
+    listIncidents(options = {}) {
+        const { pluginId, status, severity, slaBreached, page = 1, pageSize = 20 } = options;
+        const now = new Date();
+        const statusSet = status
+            ? new Set(Array.isArray(status) ? status : [status])
+            : null;
+        const severitySet = severity
+            ? new Set(Array.isArray(severity) ? severity : [severity])
+            : null;
+        const filtered = Array.from(this.incidents.values()).filter(inc => {
+            if (pluginId && inc.pluginId !== pluginId)
+                return false;
+            if (statusSet && !statusSet.has(inc.status))
+                return false;
+            if (severitySet && !severitySet.has(inc.severity))
+                return false;
+            if (slaBreached !== undefined && isSlaBreached(inc, now) !== slaBreached)
+                return false;
+            return true;
+        });
+        // Sort by createdAt descending (newest first)
+        filtered.sort((a, b) => b.createdAt.localeCompare(a.createdAt));
+        const clampedSize = Math.min(Math.max(pageSize, 1), 100);
+        const offset = (page - 1) * clampedSize;
+        const items = filtered.slice(offset, offset + clampedSize);
+        return {
+            items,
+            total: filtered.length,
+            page,
+            pageSize: clampedSize,
+            hasMore: offset + clampedSize < filtered.length,
+        };
+    }
+    /**
+     * Count of all stored incidents.
+     */
+    get size() {
+        return this.incidents.size;
+    }
+    // -------------------------------------------------------------------------
+    // Hydration / export (for persistence adapters)
+    // -------------------------------------------------------------------------
+    /**
+     * Bulk-load incidents from an external store (replaces in-memory state).
+     */
+    hydrate(incidents) {
+        this.incidents.clear();
+        for (const incident of incidents) {
+            this.incidents.set(incident.id, incident);
+        }
+    }
+    /**
+     * Export all incidents as a plain array (for persisting to an external store).
+     */
+    export() {
+        return Array.from(this.incidents.values());
+    }
+    // -------------------------------------------------------------------------
+    // External notification helpers (public for testing / direct use)
+    // -------------------------------------------------------------------------
+    /**
+     * Create a GitHub issue for an incident.
+     * Requires `githubClient` and `githubRepo` to be configured.
+     *
+     * @returns The GitHub issue URL, or null if no client is configured.
+     */
+    async createGithubIssue(incident) {
+        if (!this.config.githubClient || !this.config.githubRepo)
+            return null;
+        const cveList = incident.cveIds.length > 0 ? incident.cveIds.join(', ') : 'N/A';
+        const payload = {
+            incident,
+            repo: this.config.githubRepo,
+            title: `[SECURITY] ${incident.severity.toUpperCase()}: ${incident.title} (${incident.pluginId})`,
+            body: [
+                `## Security Incident — ${incident.severity.toUpperCase()}`,
+                '',
+                `**Plugin:** \`${incident.pluginId}\``,
+                `**CVSS Score:** ${incident.cvssScore}`,
+                `**CVE(s):** ${cveList}`,
+                `**SLA Deadline:** ${incident.slaDeadline}`,
+                `**Auto-Disabled:** ${incident.autoDisabled ? 'Yes' : 'No'}`,
+                '',
+                '### Description',
+                incident.description,
+                '',
+                '### Resolution',
+                '_Pending investigation_',
+            ].join('\n'),
+            labels: ['security', `severity:${incident.severity}`, 'plugin-incident'],
+        };
+        return this.config.githubClient.createIssue(payload);
+    }
+    /**
+     * Create a GitHub Security Advisory for an incident.
+     * Requires `githubClient` and `githubRepo` to be configured.
+     *
+     * @returns The advisory URL, or null if no client is configured.
+     */
+    async createSecurityAdvisory(incident) {
+        if (!this.config.githubClient || !this.config.githubRepo)
+            return null;
+        const payload = {
+            incident,
+            repo: this.config.githubRepo,
+            summary: `[${incident.severity.toUpperCase()}] ${incident.title}`.slice(0, 128),
+            description: [
+                `**Plugin:** \`${incident.pluginId}\``,
+                `**CVE(s):** ${incident.cveIds.join(', ') || 'N/A'}`,
+                `**CVSS Score:** ${incident.cvssScore}`,
+                '',
+                incident.description,
+            ].join('\n'),
+            ghsaSeverity: toGhsaSeverity(incident.severity),
+        };
+        return this.config.githubClient.createSecurityAdvisory(payload);
+    }
+    /**
+     * Send an Axiom alert for an incident.
+     *
+     * @param incident The incident to alert on.
+     * @param alertType The type of alert event.
+     */
+    async sendAxiomAlert(incident, alertType) {
+        if (!this.config.axiomLogger)
+            return;
+        const messages = {
+            sla_breach: `SLA BREACH: Incident for plugin '${incident.pluginId}' exceeded ${incident.severity} SLA`,
+            auto_disable: `AUTO-DISABLE: Plugin '${incident.pluginId}' disabled (CVSS ${incident.cvssScore})`,
+            new_critical: `NEW CRITICAL: Plugin '${incident.pluginId}' has CVSS ${incident.cvssScore}`,
+        };
+        const payload = {
+            incident,
+            alertType,
+            message: messages[alertType],
+        };
+        await this.config.axiomLogger.logAlert(payload);
+    }
+    // -------------------------------------------------------------------------
+    // Private helpers
+    // -------------------------------------------------------------------------
+    requireIncident(id) {
+        const incident = this.incidents.get(id);
+        if (!incident) {
+            throw new IncidentError(`Incident '${id}' not found`, 'NOT_FOUND');
+        }
+        return incident;
+    }
+    async dispatchNewIncidentNotifications(incident) {
+        // Fire-and-forget with per-integration error isolation
+        const tasks = [];
+        if (this.config.githubClient && this.config.githubRepo) {
+            tasks.push(this.createGithubIssue(incident)
+                .then(url => {
+                if (url) {
+                    const updated = this.incidents.get(incident.id);
+                    if (updated) {
+                        this.incidents.set(incident.id, { ...updated, githubIssueUrl: url });
+                    }
+                }
+            })
+                .catch(() => { }));
+            if (incident.severity === 'critical' || incident.severity === 'high') {
+                tasks.push(this.createSecurityAdvisory(incident)
+                    .then(url => {
+                    if (url) {
+                        const updated = this.incidents.get(incident.id);
+                        if (updated) {
+                            this.incidents.set(incident.id, { ...updated, githubAdvisoryUrl: url });
+                        }
+                    }
+                })
+                    .catch(() => { }));
+            }
+        }
+        if (this.config.axiomLogger && incident.severity === 'critical') {
+            tasks.push(this.sendAxiomAlert(incident, 'new_critical').catch(() => { }));
+        }
+        if (this.config.axiomLogger && incident.autoDisabled) {
+            tasks.push(this.sendAxiomAlert(incident, 'auto_disable').catch(() => { }));
+        }
+        await Promise.all(tasks);
+    }
+}
+//# sourceMappingURL=incident-response-manager.js.map

package/dist/ai/src/plugins/incidents/incident-response-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"incident-response-manager.js","sourceRoot":"","sources":["../../../../../packages/ai/src/plugins/incidents/incident-response-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAkBpC,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAqBzC,8EAA8E;AAC9E,eAAe;AACf,8EAA8E;AAE9E,yDAAyD;AACzD,MAAM,OAAO,aAAc,SAAQ,KAAK;IAGpB;IAFlB,YACE,OAAe,EACC,IAAY;QAE5B,KAAK,CAAC,OAAO,CAAC,CAAC;QAFC,SAAI,GAAJ,IAAI,CAAQ;QAG5B,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC9B,CAAC;CACF;AAED,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAEpC,iEAAiE;AACjE,SAAS,cAAc,CAAC,KAAa;IACnC,IAAI,KAAK,IAAI,GAAG;QAAE,OAAO,UAAU,CAAC;IACpC,IAAI,KAAK,IAAI,GAAG;QAAE,OAAO,MAAM,CAAC;IAChC,IAAI,KAAK,IAAI,GAAG;QAAE,OAAO,QAAQ,CAAC;IAClC,IAAI,KAAK,GAAG,GAAG;QAAG,OAAO,KAAK,CAAC;IAC/B,OAAO,eAAe,CAAC;AACzB,CAAC;AAED,+DAA+D;AAC/D,SAAS,KAAK,CAAC,QAA0B,EAAE,MAAiB;IAC1D,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,UAAU,CAAC,CAAM,OAAO,MAAM,CAAC,UAAU,CAAC;QAC/C,KAAK,MAAM,CAAC,CAAU,OAAO,MAAM,CAAC,MAAM,CAAC;QAC3C,KAAK,QAAQ,CAAC,CAAQ,OAAO,MAAM,CAAC,QAAQ,CAAC;QAC7C,KAAK,KAAK,CAAC,CAAW,OAAO,MAAM,CAAC,KAAK,CAAC;QAC1C,KAAK,eAAe,CAAC,CAAC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,cAAc;IAC3D,CAAC;AACH,CAAC;AAED,uDAAuD;AACvD,SAAS,kBAAkB,CAAC,SAAiB,EAAE,QAA0B,EAAE,GAAc;IACvF,MAAM,EAAE,GAAG,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAChC,OAAO,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AACpE,CAAC;AAED,uFAAuF;AACvF,SAAS,aAAa,CAAC,QAAkB,EAAE,GAAS;IAClD,IAAI,QAAQ,CAAC,MAAM,KAAK,UAAU,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACjF,OAAO,GAAG,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC9C,CAAC;AAED,mDAAmD;AACnD,SAAS,cAAc,CAAC,QAA0B;IAChD,IAAI,QAAQ,KAAK,eAAe;QAAE,OAAO,KAAK,CAAC;IAC/C,OAAO,QAAQ,CAAC;AAClB,CAAC;AA4BD,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E;;;;;;;;;;;;;;GAcG;AACH,MAAM,OAAO,uBAAuB;IACjB,SAAS,GAAG,IAAI,GAAG,EAAoB,CAAC;IACxC,GAAG,CAAY;IACf,MAAM,CAAgC;IAEvD,YAAY,SAAwC,EAAE;QACpD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,GAAG,GAAG,EAAE,GAAG,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,CAAC;IACvD,CAAC;IAED,4EAA4E;IAC5E,SAAS;IACT,4EAA4E;IAE5E;;;;;;;;;OASG;IACH,KAAK,CAAC,cAAc,CAAC,KAA0B;QAC7C,IAAI,KAAK,CAAC,SAAS,GAAG,CAAC,IAAI,KAAK,CAAC,SAAS,GAAG,EAAE,EAAE,CAAC;YAChD,MAAM,IAAI,aAAa,CACrB,2CAA2C,KAAK,CAAC,SAAS,EAAE,EAC5D,cAAc,CACf,CAAC;QACJ,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACjD,MAAM,YAAY,GAAG,KAAK,CAAC,SAAS,IAAI,uBAAuB,CAAC;QAEhE,MAAM,QAAQ,GAAa;YACzB,EAAE,EAAE,UAAU,EAAE;YAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,QAAQ;YACR,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,EAAE;YAC1B,MAAM,EAAE,MAAM;YACd,SAAS,EAAE,GAAG;YACd,cAAc,EAAE,IAAI;YACpB,UAAU,EAAE,IAAI;YAChB,WAAW,EAAE,kBAAkB,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC;YACxD,YAAY;YACZ,QAAQ,EAAE,IAAI;YACd,UAAU,EAAE,IAAI;YAChB,cAAc,EAAE,IAAI;YACpB,iBAAiB,EAAE,IAAI;YACvB,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,EAAE;SAC/B,CAAC;QAEF,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QAE1C,wEAAwE;QACxE,IAAI,YAAY,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;YAC9C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACzD,CAAC;QAED,qEAAqE;QACrE,MAAM,IAAI,CAAC,gCAAgC,CAAC,QAAQ,CAAC,CAAC;QAEtD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,4EAA4E;IAC5E,cAAc;IACd,4EAA4E;IAE5E;;;;;OAKG;IACH,mBAAmB,CAAC,KAA+B;QACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAEhD,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC/B,MAAM,IAAI,aAAa,CACrB,YAAY,KAAK,CAAC,EAAE,kBAAkB,QAAQ,CAAC,MAAM,uBAAuB,EAC5E,sBAAsB,CACvB,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAa;YACxB,GAAG,QAAQ;YACX,MAAM,EAAE,cAAc;YACtB,cAAc,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACxC,QAAQ,EAAE,KAAK,CAAC,QAAQ;SACzB,CAAC;QAEF,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QACxC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,4EAA4E;IAC5E,WAAW;IACX,4EAA4E;IAE5E;;;;OAIG;IACH,cAAc,CAAC,EAAU,EAAE,QAAiB;QAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAqB,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QAE3D,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,aAAa,CACrB,wBAAwB,EAAE,gCAAgC,QAAQ,CAAC,MAAM,GAAG,EAC5E,oBAAoB,CACrB,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAa;YACxB,GAAG,QAAQ;YACX,MAAM,EAAE,aAAa;YACrB,QAAQ,EAAE,QAAQ,IAAI,QAAQ,CAAC,QAAQ;SACxC,CAAC;QAEF,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QACxC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,4EAA4E;IAC5E,kBAAkB;IAClB,4EAA4E;IAE5E;;;;OAIG;IACH,eAAe,CAAC,KAA2B;QACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAChD,MAAM,QAAQ,GAAqB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAE1D,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,aAAa,CACrB,YAAY,KAAK,CAAC,EAAE,mCAAmC,QAAQ,CAAC,MAAM,GAAG,EACzE,kBAAkB,CACnB,CAAC;QACJ,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,OAAO,GAAa;YACxB,GAAG,QAAQ;YACX,MAAM,EAAE,KAAK,CAAC,WAAW,IAAI,UAAU;YACvC,UAAU,EAAE,GAAG;YACf,UAAU,EAAE,KAAK,CAAC,UAAU;SAC7B,CAAC;QAEF,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QACxC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,4EAA4E;IAC5E,uBAAuB;IACvB,4EAA4E;IAE5E;;;;;OAKG;IACH,KAAK,CAAC,gBAAgB;QACpB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAe,EAAE,CAAC;QAEhC,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC;YAC/C,IAAI,QAAQ,CAAC,MAAM,KAAK,cAAc;gBAAE,SAAS,CAAC,kBAAkB;YACpE,IAAI,aAAa,CAAC,QAAQ,EAAE,GAAG,CAAC,EAAE,CAAC;gBACjC,MAAM,OAAO,GAAa,EAAE,GAAG,QAAQ,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;gBAClE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;gBACxC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAEvB,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;oBAC5B,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;gBACnD,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;;OAGG;IACH,mBAAmB;QACjB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAChF,CAAC;IAED,4EAA4E;IAC5E,UAAU;IACV,4EAA4E;IAE5E;;;OAGG;IACH,WAAW,CAAC,EAAU;QACpB,OAAO,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,UAAgC,EAAE;QAC9C,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,GAAG,CAAC,EAAE,QAAQ,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC;QACrF,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QAEvB,MAAM,SAAS,GAAG,MAAM;YACtB,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YACpD,CAAC,CAAC,IAAI,CAAC;QACT,MAAM,WAAW,GAAG,QAAQ;YAC1B,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;YAC1D,CAAC,CAAC,IAAI,CAAC;QAET,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;YAChE,IAAI,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;gBAAE,OAAO,KAAK,CAAC;YACxD,IAAI,SAAS,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC1D,IAAI,WAAW,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAAE,OAAO,KAAK,CAAC;YAChE,IAAI,WAAW,KAAK,SAAS,IAAI,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,WAAW;gBAAE,OAAO,KAAK,CAAC;YACvF,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;QAEH,8CAA8C;QAC9C,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;QAEhE,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,WAAW,CAAC;QACxC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,WAAW,CAAC,CAAC;QAE3D,OAAO;YACL,KAAK;YACL,KAAK,EAAE,QAAQ,CAAC,MAAM;YACtB,IAAI;YACJ,QAAQ,EAAE,WAAW;YACrB,OAAO,EAAE,MAAM,GAAG,WAAW,GAAG,QAAQ,CAAC,MAAM;SAChD,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;IAC7B,CAAC;IAED,4EAA4E;IAC5E,gDAAgD;IAChD,4EAA4E;IAE5E;;OAEG;IACH,OAAO,CAAC,SAAqB;QAC3B,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QACvB,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAED;;OAEG;IACH,MAAM;QACJ,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7C,CAAC;IAED,4EAA4E;IAC5E,kEAAkE;IAClE,4EAA4E;IAE5E;;;;;OAKG;IACH,KAAK,CAAC,iBAAiB,CAAC,QAAkB;QACxC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU;YAAE,OAAO,IAAI,CAAC;QAEtE,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QAChF,MAAM,OAAO,GAAuB;YAClC,QAAQ;YACR,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU;YAC5B,KAAK,EAAE,cAAc,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,KAAK,KAAK,QAAQ,CAAC,QAAQ,GAAG;YAChG,IAAI,EAAE;gBACJ,0BAA0B,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE;gBAC3D,EAAE;gBACF,iBAAiB,QAAQ,CAAC,QAAQ,IAAI;gBACtC,mBAAmB,QAAQ,CAAC,SAAS,EAAE;gBACvC,eAAe,OAAO,EAAE;gBACxB,qBAAqB,QAAQ,CAAC,WAAW,EAAE;gBAC3C,sBAAsB,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE;gBAC5D,EAAE;gBACF,iBAAiB;gBACjB,QAAQ,CAAC,WAAW;gBACpB,EAAE;gBACF,gBAAgB;gBAChB,yBAAyB;aAC1B,CAAC,IAAI,CAAC,IAAI,CAAC;YACZ,MAAM,EAAE,CAAC,UAAU,EAAE,YAAY,QAAQ,CAAC,QAAQ,EAAE,EAAE,iBAAiB,CAAC;SACzE,CAAC;QAEF,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IACvD,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,sBAAsB,CAAC,QAAkB;QAC7C,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU;YAAE,OAAO,IAAI,CAAC;QAEtE,MAAM,OAAO,GAA0B;YACrC,QAAQ;YACR,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU;YAC5B,OAAO,EAAE,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;YAC/E,WAAW,EAAE;gBACX,iBAAiB,QAAQ,CAAC,QAAQ,IAAI;gBACtC,eAAe,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,EAAE;gBACpD,mBAAmB,QAAQ,CAAC,SAAS,EAAE;gBACvC,EAAE;gBACF,QAAQ,CAAC,WAAW;aACrB,CAAC,IAAI,CAAC,IAAI,CAAC;YACZ,YAAY,EAAE,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC;SAChD,CAAC;QAEF,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAClE,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,cAAc,CAClB,QAAkB,EAClB,SAAyC;QAEzC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW;YAAE,OAAO;QAErC,MAAM,QAAQ,GAAmD;YAC/D,UAAU,EAAI,oCAAoC,QAAQ,CAAC,QAAQ,cAAc,QAAQ,CAAC,QAAQ,MAAM;YACxG,YAAY,EAAE,yBAAyB,QAAQ,CAAC,QAAQ,oBAAoB,QAAQ,CAAC,SAAS,GAAG;YACjG,YAAY,EAAE,yBAAyB,QAAQ,CAAC,QAAQ,cAAc,QAAQ,CAAC,SAAS,EAAE;SAC3F,CAAC;QAEF,MAAM,OAAO,GAAsB;YACjC,QAAQ;YACR,SAAS;YACT,OAAO,EAAE,QAAQ,CAAC,SAAS,CAAC;SAC7B,CAAC;QAEF,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAClD,CAAC;IAED,4EAA4E;IAC5E,kBAAkB;IAClB,4EAA4E;IAEpE,eAAe,CAAC,EAAU;QAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACxC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,aAAa,CAAC,aAAa,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC;QACrE,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,KAAK,CAAC,gCAAgC,CAAC,QAAkB;QAC/D,uDAAuD;QACvD,MAAM,KAAK,GAAyB,EAAE,CAAC;QAEvC,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YACvD,KAAK,CAAC,IAAI,CACR,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC;iBAC7B,IAAI,CAAC,GAAG,CAAC,EAAE;gBACV,IAAI,GAAG,EAAE,CAAC;oBACR,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;oBAChD,IAAI,OAAO,EAAE,CAAC;wBACZ,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,GAAG,OAAO,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;oBACvE,CAAC;gBACH,CAAC;YACH,CAAC,CAAC;iBACD,KAAK,CAAC,GAAG,EAAE,GAAmB,CAAC,CAAC,CACpC,CAAC;YAEF,IAAI,QAAQ,CAAC,QAAQ,KAAK,UAAU,IAAI,QAAQ,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;gBACrE,KAAK,CAAC,IAAI,CACR,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC;qBAClC,IAAI,CAAC,GAAG,CAAC,EAAE;oBACV,IAAI,GAAG,EAAE,CAAC;wBACR,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;wBAChD,IAAI,OAAO,EAAE,CAAC;4BACZ,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,GAAG,OAAO,EAAE,iBAAiB,EAAE,GAAG,EAAE,CAAC,CAAC;wBAC1E,CAAC;oBACH,CAAC;gBACH,CAAC,CAAC;qBACD,KAAK,CAAC,GAAG,EAAE,GAAmB,CAAC,CAAC,CACpC,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,QAAQ,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;YAChE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAmB,CAAC,CAAC,CAAC,CAAC;QAC7F,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,QAAQ,CAAC,YAAY,EAAE,CAAC;YACrD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAmB,CAAC,CAAC,CAAC,CAAC;QAC7F,CAAC;QAED,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;CACF"}

package/dist/ai/src/plugins/incidents/index.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Plugin Incident Response — Barrel Export
+ * @module plugins/incidents
+ */
+export { IncidentResponseManager, IncidentError } from './incident-response-manager.js';
+export type { IncidentResponseManagerConfig, Incident, IncidentSeverity, IncidentStatus, CreateIncidentInput, AcknowledgeIncidentInput, ResolveIncidentInput, ListIncidentsOptions, IncidentPage, SlaConfig, EmailNotifier, GithubClient, AxiomLogger, GithubIssuePayload, GithubAdvisoryPayload, AxiomAlertPayload, } from './incident-response-manager.js';
+export { DEFAULT_SLA, PLUGIN_INCIDENTS_SCHEMA_SQL } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/ai/src/plugins/incidents/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../packages/ai/src/plugins/incidents/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,uBAAuB,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AACxF,YAAY,EACV,6BAA6B,EAC7B,QAAQ,EACR,gBAAgB,EAChB,cAAc,EACd,mBAAmB,EACnB,wBAAwB,EACxB,oBAAoB,EACpB,oBAAoB,EACpB,YAAY,EACZ,SAAS,EACT,aAAa,EACb,YAAY,EACZ,WAAW,EACX,kBAAkB,EAClB,qBAAqB,EACrB,iBAAiB,GAClB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,WAAW,EAAE,2BAA2B,EAAE,MAAM,YAAY,CAAC"}