@nahisaho/musubix-security 1.8.0

package/dist/infrastructure/cache.js

@@ -0,0 +1,288 @@
+/**
+ * @fileoverview Caching infrastructure
+ * @module @nahisaho/musubix-security/infrastructure/cache
+ * @trace REQ-SEC-CACHE-001
+ */
+import { writeFile, readFile, mkdir, unlink, readdir, stat } from 'node:fs/promises';
+import { join, dirname } from 'node:path';
+import { createHash } from 'node:crypto';
+/**
+ * Memory cache implementation
+ */
+export class MemoryCache {
+    cache = new Map();
+    stats = { hits: 0, misses: 0 };
+    maxSizeBytes;
+    defaultTtlSeconds;
+    currentSize = 0;
+    constructor(options = { strategy: 'memory' }) {
+        this.maxSizeBytes = options.maxSizeBytes ?? 100 * 1024 * 1024; // 100MB
+        this.defaultTtlSeconds = options.ttlSeconds ?? 3600; // 1 hour
+    }
+    async get(key) {
+        const entry = this.cache.get(key);
+        if (!entry) {
+            this.stats.misses++;
+            return undefined;
+        }
+        // Check expiration
+        if (Date.now() > entry.expiresAt) {
+            this.cache.delete(key);
+            this.currentSize -= entry.size;
+            this.stats.misses++;
+            return undefined;
+        }
+        this.stats.hits++;
+        return entry.value;
+    }
+    async set(key, value, ttlSeconds) {
+        const serialized = JSON.stringify(value);
+        const size = Buffer.byteLength(serialized);
+        const ttl = ttlSeconds ?? this.defaultTtlSeconds;
+        // Remove existing entry if present
+        const existing = this.cache.get(key);
+        if (existing) {
+            this.currentSize -= existing.size;
+        }
+        // Evict entries if needed
+        while (this.currentSize + size > this.maxSizeBytes && this.cache.size > 0) {
+            this.evictOldest();
+        }
+        const entry = {
+            key,
+            value,
+            createdAt: Date.now(),
+            expiresAt: Date.now() + ttl * 1000,
+            size,
+        };
+        this.cache.set(key, entry);
+        this.currentSize += size;
+    }
+    async has(key) {
+        const entry = this.cache.get(key);
+        if (!entry)
+            return false;
+        if (Date.now() > entry.expiresAt) {
+            this.cache.delete(key);
+            this.currentSize -= entry.size;
+            return false;
+        }
+        return true;
+    }
+    async delete(key) {
+        const entry = this.cache.get(key);
+        if (entry) {
+            this.currentSize -= entry.size;
+            this.cache.delete(key);
+            return true;
+        }
+        return false;
+    }
+    async clear() {
+        this.cache.clear();
+        this.currentSize = 0;
+        this.stats = { hits: 0, misses: 0 };
+    }
+    getStats() {
+        const total = this.stats.hits + this.stats.misses;
+        return {
+            hits: this.stats.hits,
+            misses: this.stats.misses,
+            size: this.currentSize,
+            entryCount: this.cache.size,
+            hitRate: total > 0 ? this.stats.hits / total : 0,
+        };
+    }
+    evictOldest() {
+        let oldest;
+        let oldestTime = Infinity;
+        for (const [key, entry] of this.cache) {
+            if (entry.createdAt < oldestTime) {
+                oldestTime = entry.createdAt;
+                oldest = key;
+            }
+        }
+        if (oldest) {
+            const entry = this.cache.get(oldest);
+            this.currentSize -= entry.size;
+            this.cache.delete(oldest);
+        }
+    }
+}
+/**
+ * File-based cache implementation
+ */
+export class FileCache {
+    stats = { hits: 0, misses: 0 };
+    cacheDir;
+    defaultTtlSeconds;
+    initialized = false;
+    constructor(options) {
+        if (!options.cacheDir) {
+            throw new Error('cacheDir is required for file cache');
+        }
+        this.cacheDir = options.cacheDir;
+        this.defaultTtlSeconds = options.ttlSeconds ?? 3600;
+        // maxSizeBytes is stored for future use when implementing cache eviction
+    }
+    async ensureDir() {
+        if (this.initialized)
+            return;
+        await mkdir(this.cacheDir, { recursive: true });
+        this.initialized = true;
+    }
+    getCachePath(key) {
+        const hash = createHash('sha256').update(key).digest('hex');
+        return join(this.cacheDir, `${hash}.json`);
+    }
+    async get(key) {
+        await this.ensureDir();
+        const path = this.getCachePath(key);
+        try {
+            const content = await readFile(path, 'utf-8');
+            const entry = JSON.parse(content);
+            if (Date.now() > entry.expiresAt) {
+                await unlink(path).catch(() => { });
+                this.stats.misses++;
+                return undefined;
+            }
+            this.stats.hits++;
+            return entry.value;
+        }
+        catch {
+            this.stats.misses++;
+            return undefined;
+        }
+    }
+    async set(key, value, ttlSeconds) {
+        await this.ensureDir();
+        const path = this.getCachePath(key);
+        const ttl = ttlSeconds ?? this.defaultTtlSeconds;
+        const entry = {
+            key,
+            value,
+            createdAt: Date.now(),
+            expiresAt: Date.now() + ttl * 1000,
+            size: 0,
+        };
+        const content = JSON.stringify(entry, null, 2);
+        entry.size = Buffer.byteLength(content);
+        await mkdir(dirname(path), { recursive: true });
+        await writeFile(path, content, 'utf-8');
+    }
+    async has(key) {
+        const value = await this.get(key);
+        return value !== undefined;
+    }
+    async delete(key) {
+        const path = this.getCachePath(key);
+        try {
+            await unlink(path);
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+    async clear() {
+        await this.ensureDir();
+        try {
+            const files = await readdir(this.cacheDir);
+            await Promise.all(files
+                .filter((f) => f.endsWith('.json'))
+                .map((f) => unlink(join(this.cacheDir, f)).catch(() => { })));
+        }
+        catch {
+            // Directory might not exist
+        }
+        this.stats = { hits: 0, misses: 0 };
+    }
+    async getStats() {
+        await this.ensureDir();
+        let totalSize = 0;
+        let entryCount = 0;
+        try {
+            const files = await readdir(this.cacheDir);
+            for (const file of files) {
+                if (file.endsWith('.json')) {
+                    const stats = await stat(join(this.cacheDir, file)).catch(() => null);
+                    if (stats) {
+                        totalSize += stats.size;
+                        entryCount++;
+                    }
+                }
+            }
+        }
+        catch {
+            // Directory might not exist
+        }
+        const total = this.stats.hits + this.stats.misses;
+        return {
+            hits: this.stats.hits,
+            misses: this.stats.misses,
+            size: totalSize,
+            entryCount,
+            hitRate: total > 0 ? this.stats.hits / total : 0,
+        };
+    }
+}
+/**
+ * No-op cache implementation
+ */
+export class NoopCache {
+    async get(_key) {
+        return undefined;
+    }
+    async set(_key, _value) {
+        // No-op
+    }
+    async has(_key) {
+        return false;
+    }
+    async delete(_key) {
+        return false;
+    }
+    async clear() {
+        // No-op
+    }
+    getStats() {
+        return {
+            hits: 0,
+            misses: 0,
+            size: 0,
+            entryCount: 0,
+            hitRate: 0,
+        };
+    }
+}
+/**
+ * Create a cache instance based on options
+ */
+export function createCache(options) {
+    switch (options.strategy) {
+        case 'memory':
+            return new MemoryCache(options);
+        case 'file':
+            return new FileCache(options);
+        case 'none':
+            return new NoopCache();
+        default:
+            return new MemoryCache(options);
+    }
+}
+/**
+ * Generate a cache key from multiple parts
+ */
+export function cacheKey(...parts) {
+    return parts
+        .filter((p) => p !== undefined && p !== null)
+        .map((p) => String(p))
+        .join(':');
+}
+/**
+ * Generate a hash for a file's content
+ */
+export function contentHash(content) {
+    return createHash('sha256').update(content).digest('hex').slice(0, 16);
+}
+//# sourceMappingURL=cache.js.map

package/dist/infrastructure/cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache.js","sourceRoot":"","sources":["../../src/infrastructure/cache.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACrF,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAmDzC;;GAEG;AACH,MAAM,OAAO,WAAW;IACd,KAAK,GAA+B,IAAI,GAAG,EAAE,CAAC;IAC9C,KAAK,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;IAC/B,YAAY,CAAS;IACrB,iBAAiB,CAAS;IAC1B,WAAW,GAAG,CAAC,CAAC;IAExB,YAAY,UAAwB,EAAE,QAAQ,EAAE,QAAQ,EAAE;QACxD,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,QAAQ;QACvE,IAAI,CAAC,iBAAiB,GAAG,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC,SAAS;IAChE,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAW;QACnB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAElC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACpB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,mBAAmB;QACnB,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC;YACjC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACvB,IAAI,CAAC,WAAW,IAAI,KAAK,CAAC,IAAI,CAAC;YAC/B,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACpB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAClB,OAAO,KAAK,CAAC,KAAK,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAW,EAAE,KAAQ,EAAE,UAAmB;QAClD,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QAC3C,MAAM,GAAG,GAAG,UAAU,IAAI,IAAI,CAAC,iBAAiB,CAAC;QAEjD,mCAAmC;QACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC,WAAW,IAAI,QAAQ,CAAC,IAAI,CAAC;QACpC,CAAC;QAED,0BAA0B;QAC1B,OAAO,IAAI,CAAC,WAAW,GAAG,IAAI,GAAG,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YAC1E,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,CAAC;QAED,MAAM,KAAK,GAAkB;YAC3B,GAAG;YACH,KAAK;YACL,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,IAAI;YAClC,IAAI;SACL,CAAC;QAEF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC3B,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAW;QACnB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QACzB,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC;YACjC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACvB,IAAI,CAAC,WAAW,IAAI,KAAK,CAAC,IAAI,CAAC;YAC/B,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,CAAC,WAAW,IAAI,KAAK,CAAC,IAAI,CAAC;YAC/B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACvB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACnB,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC;QACrB,IAAI,CAAC,KAAK,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;IACtC,CAAC;IAED,QAAQ;QACN,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;QAClD,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;YACrB,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM;YACzB,IAAI,EAAE,IAAI,CAAC,WAAW;YACtB,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;YAC3B,OAAO,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;SACjD,CAAC;IACJ,CAAC;IAEO,WAAW;QACjB,IAAI,MAA0B,CAAC;QAC/B,IAAI,UAAU,GAAG,QAAQ,CAAC;QAE1B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACtC,IAAI,KAAK,CAAC,SAAS,GAAG,UAAU,EAAE,CAAC;gBACjC,UAAU,GAAG,KAAK,CAAC,SAAS,CAAC;gBAC7B,MAAM,GAAG,GAAG,CAAC;YACf,CAAC;QACH,CAAC;QAED,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAE,CAAC;YACtC,IAAI,CAAC,WAAW,IAAI,KAAK,CAAC,IAAI,CAAC;YAC/B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,SAAS;IACZ,KAAK,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;IAC/B,QAAQ,CAAS;IACjB,iBAAiB,CAAS;IAC1B,WAAW,GAAG,KAAK,CAAC;IAE5B,YAAY,OAAqB;QAC/B,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QACjC,IAAI,CAAC,iBAAiB,GAAG,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC;QACpD,yEAAyE;IAC3E,CAAC;IAEO,KAAK,CAAC,SAAS;QACrB,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO;QAC7B,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;IAC1B,CAAC;IAEO,YAAY,CAAC,GAAW;QAC9B,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5D,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,IAAI,OAAO,CAAC,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAW;QACnB,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QAEpC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC9C,MAAM,KAAK,GAAkB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAEjD,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC;gBACjC,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;gBACnC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;gBACpB,OAAO,SAAS,CAAC;YACnB,CAAC;YAED,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YAClB,OAAO,KAAK,CAAC,KAAK,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACpB,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAW,EAAE,KAAQ,EAAE,UAAmB;QAClD,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QACpC,MAAM,GAAG,GAAG,UAAU,IAAI,IAAI,CAAC,iBAAiB,CAAC;QAEjD,MAAM,KAAK,GAAkB;YAC3B,GAAG;YACH,KAAK;YACL,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,IAAI;YAClC,IAAI,EAAE,CAAC;SACR,CAAC;QAEF,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAC/C,KAAK,CAAC,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAExC,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,MAAM,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAW;QACnB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAClC,OAAO,KAAK,KAAK,SAAS,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;YACnB,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK;QACT,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACvB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC3C,MAAM,OAAO,CAAC,GAAG,CACf,KAAK;iBACF,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;iBAClC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,CAC9D,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,4BAA4B;QAC9B,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACvB,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,IAAI,UAAU,GAAG,CAAC,CAAC;QAEnB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC3C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC3B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;oBACtE,IAAI,KAAK,EAAE,CAAC;wBACV,SAAS,IAAI,KAAK,CAAC,IAAI,CAAC;wBACxB,UAAU,EAAE,CAAC;oBACf,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,4BAA4B;QAC9B,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;QAClD,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;YACrB,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM;YACzB,IAAI,EAAE,SAAS;YACf,UAAU;YACV,OAAO,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;SACjD,CAAC;IACJ,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,SAAS;IACpB,KAAK,CAAC,GAAG,CAAC,IAAY;QACpB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,IAAY,EAAE,MAAS;QAC/B,QAAQ;IACV,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,IAAY;QACpB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAY;QACvB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,KAAK;QACT,QAAQ;IACV,CAAC;IAED,QAAQ;QACN,OAAO;YACL,IAAI,EAAE,CAAC;YACP,MAAM,EAAE,CAAC;YACT,IAAI,EAAE,CAAC;YACP,UAAU,EAAE,CAAC;YACb,OAAO,EAAE,CAAC;SACX,CAAC;IACJ,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CAAc,OAAqB;IAC5D,QAAQ,OAAO,CAAC,QAAQ,EAAE,CAAC;QACzB,KAAK,QAAQ;YACX,OAAO,IAAI,WAAW,CAAI,OAAO,CAAC,CAAC;QACrC,KAAK,MAAM;YACT,OAAO,IAAI,SAAS,CAAI,OAAO,CAAC,CAAC;QACnC,KAAK,MAAM;YACT,OAAO,IAAI,SAAS,EAAK,CAAC;QAC5B;YACE,OAAO,IAAI,WAAW,CAAI,OAAO,CAAC,CAAC;IACvC,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,QAAQ,CAAC,GAAG,KAAuD;IACjF,OAAO,KAAK;SACT,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI,CAAC;SAC5C,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;SACrB,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,OAAe;IACzC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACzE,CAAC"}

package/dist/infrastructure/config-loader.d.ts

@@ -0,0 +1,35 @@
+/**
+ * @fileoverview Configuration loader using cosmiconfig
+ * @module @nahisaho/musubix-security/infrastructure/config-loader
+ * @trace REQ-SEC-CONFIG-001, REQ-SEC-CONFIG-002
+ */
+import { z } from 'zod';
+import type { SecurityConfig } from '../types/index.js';
+/**
+ * Configuration loader result
+ */
+export interface ConfigLoadResult {
+    config: SecurityConfig;
+    filepath?: string;
+    isEmpty: boolean;
+}
+/**
+ * Load configuration asynchronously
+ */
+export declare function loadConfig(searchFrom?: string): Promise<ConfigLoadResult>;
+/**
+ * Load configuration synchronously
+ */
+export declare function loadConfigSync(searchFrom?: string): ConfigLoadResult;
+/**
+ * Validate a configuration object
+ */
+export declare function validateConfig(config: unknown): {
+    valid: boolean;
+    errors?: string[];
+};
+/**
+ * Get config schema for documentation
+ */
+export declare function getConfigSchema(): z.ZodType<any>;
+//# sourceMappingURL=config-loader.d.ts.map

package/dist/infrastructure/config-loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-loader.d.ts","sourceRoot":"","sources":["../../src/infrastructure/config-loader.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AA2LxD;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,cAAc,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;CAClB;AAyFD;;GAEG;AACH,wBAAsB,UAAU,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAiD/E;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,gBAAgB,CA4CpE;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,OAAO,GAAG;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,CAUrF;AAED;;GAEG;AACH,wBAAgB,eAAe,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAEhD"}

package/dist/infrastructure/config-loader.js

@@ -0,0 +1,358 @@
+/**
+ * @fileoverview Configuration loader using cosmiconfig
+ * @module @nahisaho/musubix-security/infrastructure/config-loader
+ * @trace REQ-SEC-CONFIG-001, REQ-SEC-CONFIG-002
+ */
+import { cosmiconfig, cosmiconfigSync } from 'cosmiconfig';
+import { z } from 'zod';
+import { DEFAULT_CONFIG, CONFIG_FILE_LOCATIONS, ENV_PREFIX } from '../types/config.js';
+/**
+ * Zod schema for severity
+ */
+const SeveritySchema = z.enum(['critical', 'high', 'medium', 'low']);
+/**
+ * Zod schema for scan options
+ */
+const ScanOptionsSchema = z.object({
+    severityFilter: z.array(SeveritySchema).optional(),
+    rulesets: z.array(z.enum(['owasp-top-10', 'cwe-top-25', 'custom'])).optional(),
+    excludePatterns: z.array(z.string()).optional(),
+    maxFileSize: z.number().positive().optional(),
+    incremental: z.boolean().optional(),
+    customRulesDir: z.string().optional(),
+}).optional();
+/**
+ * Zod schema for taint options
+ */
+const TaintOptionsSchema = z.object({
+    customSources: z.array(z.object({
+        pattern: z.string(),
+        category: z.string(),
+        description: z.string(),
+    })).optional(),
+    customSinks: z.array(z.object({
+        pattern: z.string(),
+        category: z.string(),
+        severity: SeveritySchema,
+        description: z.string(),
+    })).optional(),
+    additionalSanitizers: z.array(z.object({
+        functionName: z.string(),
+        sinkCategories: z.array(z.string()),
+    })).optional(),
+    maxPathDepth: z.number().positive().optional(),
+    interprocedural: z.boolean().optional(),
+    trackAsync: z.boolean().optional(),
+    excludePatterns: z.array(z.string()).optional(),
+}).optional();
+/**
+ * Zod schema for fix options
+ */
+const FixOptionsSchema = z.object({
+    preferredStrategies: z.array(z.string()).optional(),
+    useAI: z.boolean().optional(),
+    aiModel: z.string().optional(),
+    generateAlternatives: z.boolean().optional(),
+    maxAlternatives: z.number().positive().optional(),
+    preserveStyle: z.boolean().optional(),
+    targetFramework: z.string().optional(),
+}).optional();
+/**
+ * Zod schema for secret options
+ */
+const SecretOptionsSchema = z.object({
+    customPatterns: z.array(z.any()).optional(),
+    disablePatterns: z.array(z.string()).optional(),
+    excludePatterns: z.array(z.string()).optional(),
+    ignoreTestValues: z.boolean().optional(),
+    maxFileSize: z.number().positive().optional(),
+    verify: z.boolean().optional(),
+    entropyThreshold: z.number().min(0).max(8).optional(),
+}).optional();
+/**
+ * Zod schema for audit options
+ */
+const AuditOptionsSchema = z.object({
+    includeDevDependencies: z.boolean().optional(),
+    minSeverity: SeveritySchema.optional(),
+    sources: z.array(z.string()).optional(),
+    ignoreVulnerabilities: z.array(z.string()).optional(),
+    ignorePackages: z.array(z.string()).optional(),
+    maxDepth: z.number().positive().optional(),
+    suggestUpgrades: z.boolean().optional(),
+    checkBreaking: z.boolean().optional(),
+    registryUrl: z.string().url().optional(),
+}).optional();
+/**
+ * Zod schema for report config
+ */
+const ReportConfigSchema = z.object({
+    format: z.enum(['json', 'sarif', 'markdown', 'html', 'csv']).optional(),
+    outputPath: z.string().optional(),
+    includeCodeSnippets: z.boolean().optional(),
+    includeFixes: z.boolean().optional(),
+    includeTaintPaths: z.boolean().optional(),
+    groupBy: z.enum(['file', 'type', 'severity']).optional(),
+    maxPerFile: z.number().positive().optional(),
+    includeSummary: z.boolean().optional(),
+    templatePath: z.string().optional(),
+}).optional();
+/**
+ * Zod schema for knowledge graph config
+ */
+const KnowledgeGraphConfigSchema = z.object({
+    mode: z.enum(['local', 'global', 'hybrid', 'disabled']).optional(),
+    localDbPath: z.string().optional(),
+    globalEndpoint: z.string().url().optional(),
+    autoLearn: z.boolean().optional(),
+    namespace: z.string().optional(),
+    maxCachedPatterns: z.number().positive().optional(),
+}).optional();
+/**
+ * Zod schema for AI config
+ */
+const AIConfigSchema = z.object({
+    enabled: z.boolean().optional(),
+    provider: z.enum(['vscode-lm', 'openai', 'anthropic']).optional(),
+    model: z.string().optional(),
+    maxTokens: z.number().positive().optional(),
+    temperature: z.number().min(0).max(2).optional(),
+    useForFixes: z.boolean().optional(),
+    useForExplanation: z.boolean().optional(),
+}).optional();
+/**
+ * Zod schema for cache config
+ */
+const CacheConfigSchema = z.object({
+    strategy: z.enum(['memory', 'file', 'none']).optional(),
+    cacheDir: z.string().optional(),
+    ttlSeconds: z.number().positive().optional(),
+    maxSizeMB: z.number().positive().optional(),
+    cacheAST: z.boolean().optional(),
+    cachePatterns: z.boolean().optional(),
+}).optional();
+/**
+ * Zod schema for CI config
+ */
+const CIConfigSchema = z.object({
+    failOnSeverity: SeveritySchema.optional(),
+    failOnCount: z.number().nonnegative().optional(),
+    failOnNewOnly: z.boolean().optional(),
+    baselinePath: z.string().optional(),
+    sarifOutput: z.boolean().optional(),
+    sarifPath: z.string().optional(),
+    prComments: z.boolean().optional(),
+    platform: z.enum(['github', 'gitlab', 'azure-devops', 'jenkins']).optional(),
+}).optional();
+/**
+ * Complete security config schema
+ */
+const SecurityConfigSchema = z.object({
+    version: z.literal('1.0').optional(),
+    projectRoot: z.string().optional(),
+    scan: ScanOptionsSchema,
+    taint: TaintOptionsSchema,
+    fix: FixOptionsSchema,
+    secret: SecretOptionsSchema,
+    audit: AuditOptionsSchema,
+    sbom: z.object({
+        format: z.enum(['cyclonedx', 'spdx']).optional(),
+        includeDevDependencies: z.boolean().optional(),
+        includeVulnerabilities: z.boolean().optional(),
+        includeLicenses: z.boolean().optional(),
+        outputPath: z.string().optional(),
+    }).optional(),
+    licensePolicy: z.object({
+        allowed: z.array(z.string()).optional(),
+        denied: z.array(z.string()).optional(),
+        requireApproval: z.array(z.string()).optional(),
+    }).optional(),
+    report: ReportConfigSchema,
+    knowledgeGraph: KnowledgeGraphConfigSchema,
+    ai: AIConfigSchema,
+    cache: CacheConfigSchema,
+    ci: CIConfigSchema,
+    severityFilter: z.array(SeveritySchema).optional(),
+    excludePatterns: z.array(z.string()).optional(),
+    customRulesDir: z.string().optional(),
+    verbose: z.boolean().optional(),
+    debug: z.boolean().optional(),
+});
+/**
+ * Load configuration from environment variables
+ */
+function loadEnvConfig() {
+    const config = {};
+    // Helper to get env var with prefix
+    const getEnv = (key) => process.env[`${ENV_PREFIX}${key}`];
+    // Verbose mode
+    const verbose = getEnv('VERBOSE');
+    if (verbose) {
+        config.verbose = verbose === 'true' || verbose === '1';
+    }
+    // Debug mode
+    const debug = getEnv('DEBUG');
+    if (debug) {
+        config.debug = debug === 'true' || debug === '1';
+    }
+    // Severity filter
+    const severityFilter = getEnv('SEVERITY_FILTER');
+    if (severityFilter) {
+        config.severityFilter = severityFilter.split(',').map((s) => s.trim());
+    }
+    // Project root
+    const projectRoot = getEnv('PROJECT_ROOT');
+    if (projectRoot) {
+        config.projectRoot = projectRoot;
+    }
+    // AI enabled
+    const aiEnabled = getEnv('AI_ENABLED');
+    if (aiEnabled) {
+        config.ai = { enabled: aiEnabled === 'true' || aiEnabled === '1' };
+    }
+    // KG mode
+    const kgMode = getEnv('KG_MODE');
+    if (kgMode) {
+        config.knowledgeGraph = { mode: kgMode };
+    }
+    // Report format
+    const reportFormat = getEnv('REPORT_FORMAT');
+    if (reportFormat) {
+        config.report = { format: reportFormat };
+    }
+    // CI fail severity
+    const ciFailSeverity = getEnv('CI_FAIL_SEVERITY');
+    if (ciFailSeverity) {
+        config.ci = { failOnSeverity: ciFailSeverity };
+    }
+    return config;
+}
+/**
+ * Deep merge two objects
+ */
+function deepMerge(target, source) {
+    const result = { ...target };
+    for (const key of Object.keys(source)) {
+        const sourceValue = source[key];
+        const targetValue = target[key];
+        if (sourceValue !== undefined &&
+            sourceValue !== null &&
+            typeof sourceValue === 'object' &&
+            !Array.isArray(sourceValue) &&
+            typeof targetValue === 'object' &&
+            !Array.isArray(targetValue)) {
+            result[key] = deepMerge(targetValue, sourceValue);
+        }
+        else if (sourceValue !== undefined) {
+            result[key] = sourceValue;
+        }
+    }
+    return result;
+}
+/**
+ * Load configuration asynchronously
+ */
+export async function loadConfig(searchFrom) {
+    const explorer = cosmiconfig('musubix-security', {
+        searchPlaces: CONFIG_FILE_LOCATIONS,
+    });
+    try {
+        const result = searchFrom
+            ? await explorer.search(searchFrom)
+            : await explorer.search();
+        if (result && !result.isEmpty) {
+            // Validate loaded config
+            const parsed = SecurityConfigSchema.safeParse(result.config);
+            if (!parsed.success) {
+                console.error('Configuration validation error:', parsed.error.format());
+                throw new Error(`Invalid configuration: ${parsed.error.message}`);
+            }
+            // Merge with defaults and env
+            const envConfig = loadEnvConfig();
+            const fileConfig = parsed.data;
+            const mergedConfig = deepMerge(deepMerge(DEFAULT_CONFIG, fileConfig), envConfig);
+            return {
+                config: mergedConfig,
+                filepath: result.filepath,
+                isEmpty: false,
+            };
+        }
+        // No config file found, use defaults with env overrides
+        const envConfig = loadEnvConfig();
+        const mergedConfig = deepMerge(DEFAULT_CONFIG, envConfig);
+        return {
+            config: mergedConfig,
+            isEmpty: true,
+        };
+    }
+    catch (error) {
+        // On error, return defaults with env overrides
+        console.error('Error loading configuration:', error);
+        const envConfig = loadEnvConfig();
+        const mergedConfig = deepMerge(DEFAULT_CONFIG, envConfig);
+        return {
+            config: mergedConfig,
+            isEmpty: true,
+        };
+    }
+}
+/**
+ * Load configuration synchronously
+ */
+export function loadConfigSync(searchFrom) {
+    const explorer = cosmiconfigSync('musubix-security', {
+        searchPlaces: CONFIG_FILE_LOCATIONS,
+    });
+    try {
+        const result = searchFrom
+            ? explorer.search(searchFrom)
+            : explorer.search();
+        if (result && !result.isEmpty) {
+            const parsed = SecurityConfigSchema.safeParse(result.config);
+            if (!parsed.success) {
+                throw new Error(`Invalid configuration: ${parsed.error.message}`);
+            }
+            const envConfig = loadEnvConfig();
+            const fileConfig = parsed.data;
+            const mergedConfig = deepMerge(deepMerge(DEFAULT_CONFIG, fileConfig), envConfig);
+            return {
+                config: mergedConfig,
+                filepath: result.filepath,
+                isEmpty: false,
+            };
+        }
+        const envConfig = loadEnvConfig();
+        const mergedConfig = deepMerge(DEFAULT_CONFIG, envConfig);
+        return {
+            config: mergedConfig,
+            isEmpty: true,
+        };
+    }
+    catch (error) {
+        console.error('Error loading configuration:', error);
+        const envConfig = loadEnvConfig();
+        const mergedConfig = deepMerge(DEFAULT_CONFIG, envConfig);
+        return {
+            config: mergedConfig,
+            isEmpty: true,
+        };
+    }
+}
+/**
+ * Validate a configuration object
+ */
+export function validateConfig(config) {
+    const result = SecurityConfigSchema.safeParse(config);
+    if (result.success) {
+        return { valid: true };
+    }
+    const errors = result.error.issues.map((issue) => `${issue.path.join('.')}: ${issue.message}`);
+    return { valid: false, errors };
+}
+/**
+ * Get config schema for documentation
+ */
+export function getConfigSchema() {
+    return SecurityConfigSchema;
+}
+//# sourceMappingURL=config-loader.js.map