@private.me/xbind 1.2.15 → 1.2.17

package/dist-standalone/security-policy.js

@@ -11,10 +11,12 @@
  * Default security policy for basic XBind.
  *
  * Rules:
- * - Transfers over $100,000: High security (3 shares, 2-of-3 threshold)
- * - Cross-entity communication: High security (3 shares, 2-of-3 threshold)
- * - Explicit 'high' override: High security (3 shares, 2-of-3 threshold)
- * - Explicit 'critical' override: Critical security (5 shares, 3-of-5 threshold)
+ * - Explicit risk tags: low → 2-of-2, medium → 2-of-3, high/critical → 3-of-5
+ * - Fiat transfers: USD/EUR/GBP >$100k → 2-of-3, >$1M → 3-of-5
+ * - Crypto transfers: Require explicit risk tag (no numeric auto-detection)
+ * - Sensitive scopes: custody/admin/settlement → 2-of-3
+ * - Cross-entity communication: 2-of-3
+ * - Explicit 'high' override: 2-of-3, 'critical' override: 3-of-5
  * - Everything else: Standard encrypted transport (V3 hybrid PQ)
  *
  * Enterprise and Government variants extend this with custom rules.
@@ -26,6 +28,7 @@ export class DefaultSecurityPolicy {
      *
      * @param options - Optional configuration
      * @param options.highValueThreshold - Amount threshold for high security (default: 100000)
+     * @param options.criticalValueThreshold - Amount threshold for critical security (default: 1000000)
      * @param options.enableXchange - Allow Xchange mode for performance (default: false)
      */
     constructor(options = {}) {
@@ -33,7 +36,8 @@ export class DefaultSecurityPolicy {
     }
     classify(context) {
         const { action, params, securityOverride } = context;
-        const threshold = this.options.highValueThreshold ?? 100_000;
+        const highThreshold = this.options.highValueThreshold ?? 100_000;
+        const criticalThreshold = this.options.criticalValueThreshold ?? 1_000_000;
         // Explicit override: critical
         if (securityOverride === 'critical') {
             return {
@@ -58,15 +62,52 @@ export class DefaultSecurityPolicy {
                 wasOverridden: true,
             };
         }
-        // Auto-detection: High-value transfer
-        if ((action === 'transfer' || action === 'execute') &&
-            typeof params.amount === 'number' &&
-            params.amount > threshold) {
-            return {
-                mode: { type: 'split', shares: 3, threshold: 2 },
-                reason: `High-value transfer ($${params.amount.toLocaleString()}) requires multi-party approval (2 of 3)`,
-                wasOverridden: false,
-            };
+        // Risk tag detection (preferred for crypto: BTC, ETH, etc.)
+        const riskTag = typeof params.risk === 'string' ? params.risk.toLowerCase() : undefined;
+        if (riskTag) {
+            if (riskTag === 'critical' || riskTag === 'high') {
+                return {
+                    mode: { type: 'split', shares: 5, threshold: 3 },
+                    reason: `Explicit risk tag "${riskTag}" requires 3-of-5 threshold`,
+                    wasOverridden: false,
+                };
+            }
+            else if (riskTag === 'medium') {
+                return {
+                    mode: { type: 'split', shares: 3, threshold: 2 },
+                    reason: `Explicit risk tag "medium" requires 2-of-3 threshold`,
+                    wasOverridden: false,
+                };
+            }
+            else if (riskTag === 'low') {
+                return {
+                    mode: { type: 'split', shares: 2, threshold: 2 },
+                    reason: `Explicit risk tag "low" requires 2-of-2 threshold`,
+                    wasOverridden: false,
+                };
+            }
+        }
+        // Numeric thresholds ONLY for fiat currencies (USD, EUR, GBP)
+        // Crypto (BTC, ETH) should use risk tags instead
+        if ((action === 'transfer' || action === 'execute') && typeof params.amount === 'number') {
+            const currency = typeof params.currency === 'string' ? params.currency.toUpperCase() : 'USD';
+            const isFiat = ['USD', 'EUR', 'GBP'].includes(currency);
+            if (isFiat) {
+                if (params.amount >= criticalThreshold) {
+                    return {
+                        mode: { type: 'split', shares: 5, threshold: 3 },
+                        reason: `Critical-value transfer (${currency} ${params.amount.toLocaleString()}) requires 3-of-5 threshold`,
+                        wasOverridden: false,
+                    };
+                }
+                else if (params.amount >= highThreshold) {
+                    return {
+                        mode: { type: 'split', shares: 3, threshold: 2 },
+                        reason: `High-value transfer (${currency} ${params.amount.toLocaleString()}) requires 2-of-3 threshold`,
+                        wasOverridden: false,
+                    };
+                }
+            }
         }
         // Auto-detection: Cross-entity communication
         if (params.crossEntity === true) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@private.me/xbind",
-  "version": "1.2.15",
+  "version": "1.2.17",
   "description": "Identity-based M2M authentication (Contains encryption - export restrictions apply)",
   "license": "Proprietary",
   "author": "Private.Me Contributors",
@@ -47,6 +47,18 @@
     "AGENTS.md",
     "llms.txt"
   ],
+  "scripts": {
+    "build": "pnpm clean:xbind && node scripts/build-with-deps.mjs && node generate-shares.mjs",
+    "clean:xbind": "rm -rf dist dist-standalone .turbo",
+    "obfuscate": "echo 'Obfuscation skipped - core IP already protected in crypto package'",
+    "lint": "eslint src/",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run",
+    "test:coverage": "vitest run --coverage",
+    "clean": "rm -rf dist dist-standalone .turbo",
+    "prepublish-check": "bash scripts/prepublish-check.sh",
+    "prepublishOnly": "node -e \"const pkg=require('./package.json');if(pkg.license!=='Proprietary'){console.error('❌ package.json license must be: Proprietary');process.exit(1)}\" && bash ../../scripts/gold-automation.sh $(pwd) && bash ../../scripts/hooks/prepublish-crypto-check.sh && bash ../../scripts/hooks/prepublish-tarball-validation.sh $(pwd)"
+  },
   "dependencies": {
     "bonjour-service": "^1.3.0",
     "mlkem": "^2.7.0",
@@ -63,16 +75,5 @@
     "#deps/xchange": "./dist-standalone/_deps/xchange/index.js",
     "#deps/ux-helpers": "./dist-standalone/_deps/ux-helpers/index.js",
     "#deps/xregistry": "./dist-standalone/_deps/xregistry/index.js"
-  },
-  "scripts": {
-    "build": "pnpm clean:xbind && node scripts/build-with-deps.mjs && node generate-shares.mjs",
-    "clean:xbind": "rm -rf dist dist-standalone .turbo",
-    "obfuscate": "echo 'Obfuscation skipped - core IP already protected in crypto package'",
-    "lint": "eslint src/",
-    "typecheck": "tsc --noEmit",
-    "test": "vitest run",
-    "test:coverage": "vitest run --coverage",
-    "clean": "rm -rf dist dist-standalone .turbo",
-    "prepublish-check": "bash scripts/prepublish-check.sh"
   }
-}
+}