@riocrypto/common 1.0.2728 → 1.0.2730

package/build/events/admin-auth-signed-in-event.d.ts

@@ -0,0 +1,9 @@
+import { Subjects } from "./subjects";
+export interface AdminAuthSignedInEvent {
+    subject: Subjects.AdminAuthSignedIn;
+    data: {
+        adminAuthId: string;
+        ip?: string;
+        requires2FAVerification?: boolean;
+    };
+}

package/build/events/admin-auth-signed-in-event.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/build/events/auth-api-key-created-event.d.ts

@@ -0,0 +1,9 @@
+import { Subjects } from "./subjects";
+export interface AuthApiKeyCreatedEvent {
+    subject: Subjects.AuthApiKeyCreated;
+    data: {
+        authId: string;
+        apiKeyId: string;
+        ip?: string;
+    };
+}

package/build/events/auth-api-key-created-event.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/build/events/auth-api-key-deleted-event.d.ts

@@ -0,0 +1,9 @@
+import { Subjects } from "./subjects";
+export interface AuthApiKeyDeletedEvent {
+    subject: Subjects.AuthApiKeyDeleted;
+    data: {
+        authId: string;
+        apiKeyId: string;
+        ip?: string;
+    };
+}

package/build/events/auth-api-key-deleted-event.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/build/events/auth-password-reset-event.d.ts

@@ -0,0 +1,9 @@
+import { Subjects } from "./subjects";
+export interface AuthPasswordResetEvent {
+    subject: Subjects.AuthPasswordReset;
+    data: {
+        authId: string;
+        channel: "phone" | "email";
+        ip?: string;
+    };
+}

package/build/events/auth-password-reset-event.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/build/events/auth-signed-in-event.d.ts

@@ -1,7 +1,11 @@
 import { Subjects } from "./subjects";
+import { AuthSignInMethod } from "../types/auth-sign-in-method";
 export interface AuthSignedInEvent {
     subject: Subjects.AuthSignedIn;
     data: {
         id: string;
+        method?: AuthSignInMethod;
+        ip?: string;
+        requires2FAVerification?: boolean;
     };
 }

package/build/events/auth-two-factor-updated-event.d.ts

@@ -0,0 +1,9 @@
+import { Subjects } from "./subjects";
+export interface AuthTwoFactorUpdatedEvent {
+    subject: Subjects.AuthTwoFactorUpdated;
+    data: {
+        authId: string;
+        action: "authenticatorRegistered" | "authenticatorRemoved";
+        ip?: string;
+    };
+}

package/build/events/auth-two-factor-updated-event.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/build/events/auth-webauthn-credential-added-event.d.ts

@@ -0,0 +1,9 @@
+import { Subjects } from "./subjects";
+export interface AuthWebauthnCredentialAddedEvent {
+    subject: Subjects.AuthWebauthnCredentialAdded;
+    data: {
+        authId: string;
+        credentialId: string;
+        ip?: string;
+    };
+}

package/build/events/auth-webauthn-credential-added-event.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/build/events/auth-webauthn-credential-deleted-event.d.ts

@@ -0,0 +1,9 @@
+import { Subjects } from "./subjects";
+export interface AuthWebauthnCredentialDeletedEvent {
+    subject: Subjects.AuthWebauthnCredentialDeleted;
+    data: {
+        authId: string;
+        credentialId: string;
+        ip?: string;
+    };
+}

package/build/events/auth-webauthn-credential-deleted-event.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/build/events/security-signal-event.d.ts

@@ -0,0 +1,14 @@
+import { Subjects } from "./subjects";
+import { SecuritySignalType } from "../types/security-signal-type";
+export interface SecuritySignalEvent {
+    subject: Subjects.SecuritySignal;
+    data: {
+        type: SecuritySignalType;
+        service: string;
+        ip: string;
+        authId?: string;
+        adminAuthId?: string;
+        count: number;
+        occurredAt: string;
+    };
+}

package/build/events/security-signal-event.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/build/events/subjects.d.ts

@@ -244,5 +244,13 @@ export declare enum Subjects {
     ComplianceSessionCompleted = "complianceSession:completed",
     MainPricingProviderOffline = "mainPricingProvider:offline",
     MalwareDetected = "malware:detected",
-    InformationRequestDocumentUploaded = "informationRequestDocument:uploaded"
+    InformationRequestDocumentUploaded = "informationRequestDocument:uploaded",
+    SecuritySignal = "security:signal",
+    AuthPasswordReset = "auth:passwordReset",
+    AuthApiKeyCreated = "auth:apiKeyCreated",
+    AuthApiKeyDeleted = "auth:apiKeyDeleted",
+    AuthWebauthnCredentialAdded = "auth:webauthnCredentialAdded",
+    AuthWebauthnCredentialDeleted = "auth:webauthnCredentialDeleted",
+    AuthTwoFactorUpdated = "auth:twoFactorUpdated",
+    AdminAuthSignedIn = "adminAuth:signedIn"
 }

package/build/events/subjects.js

@@ -249,4 +249,12 @@ var Subjects;
     Subjects["MainPricingProviderOffline"] = "mainPricingProvider:offline";
     Subjects["MalwareDetected"] = "malware:detected";
     Subjects["InformationRequestDocumentUploaded"] = "informationRequestDocument:uploaded";
+    Subjects["SecuritySignal"] = "security:signal";
+    Subjects["AuthPasswordReset"] = "auth:passwordReset";
+    Subjects["AuthApiKeyCreated"] = "auth:apiKeyCreated";
+    Subjects["AuthApiKeyDeleted"] = "auth:apiKeyDeleted";
+    Subjects["AuthWebauthnCredentialAdded"] = "auth:webauthnCredentialAdded";
+    Subjects["AuthWebauthnCredentialDeleted"] = "auth:webauthnCredentialDeleted";
+    Subjects["AuthTwoFactorUpdated"] = "auth:twoFactorUpdated";
+    Subjects["AdminAuthSignedIn"] = "adminAuth:signedIn";
 })(Subjects = exports.Subjects || (exports.Subjects = {}));

package/build/index.d.ts

@@ -46,6 +46,14 @@ export * from "./events/base-listener";
 export * from "./events/base-publisher";
 export * from "./events/subjects";
 export * from "./events/auth-signed-in-event";
+export * from "./events/security-signal-event";
+export * from "./events/auth-password-reset-event";
+export * from "./events/auth-api-key-created-event";
+export * from "./events/auth-api-key-deleted-event";
+export * from "./events/auth-webauthn-credential-added-event";
+export * from "./events/auth-webauthn-credential-deleted-event";
+export * from "./events/auth-two-factor-updated-event";
+export * from "./events/admin-auth-signed-in-event";
 export * from "./events/quote-created-event";
 export * from "./events/async-crypto-payout-completed-event";
 export * from "./events/async-crypto-payment-completed-event";
@@ -525,6 +533,16 @@ export * from "./types/compliance-rule-set";
 export * from "./types/compliance-session";
 export * from "./types/compliance-session-status";
 export * from "./types/compliance-user-cache";
+export * from "./types/internal-support-session-status";
+export * from "./types/internal-support-chat-kind";
+export * from "./types/internal-support-audit-type";
+export * from "./types/internal-support-security-signal-type";
+export * from "./types/internal-support-case-confidence";
+export * from "./types/security-finding-severity";
+export * from "./types/security-finding-status";
+export * from "./types/security-finding-source";
+export * from "./types/security-signal-type";
+export * from "./types/auth-sign-in-method";
 export * from "./types/position";
 export * from "./types/residual";
 export * from "./types/liquidity-sourcing-plan";

package/build/index.js

@@ -62,6 +62,14 @@ __exportStar(require("./events/base-listener"), exports);
 __exportStar(require("./events/base-publisher"), exports);
 __exportStar(require("./events/subjects"), exports);
 __exportStar(require("./events/auth-signed-in-event"), exports);
+__exportStar(require("./events/security-signal-event"), exports);
+__exportStar(require("./events/auth-password-reset-event"), exports);
+__exportStar(require("./events/auth-api-key-created-event"), exports);
+__exportStar(require("./events/auth-api-key-deleted-event"), exports);
+__exportStar(require("./events/auth-webauthn-credential-added-event"), exports);
+__exportStar(require("./events/auth-webauthn-credential-deleted-event"), exports);
+__exportStar(require("./events/auth-two-factor-updated-event"), exports);
+__exportStar(require("./events/admin-auth-signed-in-event"), exports);
 __exportStar(require("./events/quote-created-event"), exports);
 __exportStar(require("./events/async-crypto-payout-completed-event"), exports);
 __exportStar(require("./events/async-crypto-payment-completed-event"), exports);
@@ -541,6 +549,16 @@ __exportStar(require("./types/compliance-rule-set"), exports);
 __exportStar(require("./types/compliance-session"), exports);
 __exportStar(require("./types/compliance-session-status"), exports);
 __exportStar(require("./types/compliance-user-cache"), exports);
+__exportStar(require("./types/internal-support-session-status"), exports);
+__exportStar(require("./types/internal-support-chat-kind"), exports);
+__exportStar(require("./types/internal-support-audit-type"), exports);
+__exportStar(require("./types/internal-support-security-signal-type"), exports);
+__exportStar(require("./types/internal-support-case-confidence"), exports);
+__exportStar(require("./types/security-finding-severity"), exports);
+__exportStar(require("./types/security-finding-status"), exports);
+__exportStar(require("./types/security-finding-source"), exports);
+__exportStar(require("./types/security-signal-type"), exports);
+__exportStar(require("./types/auth-sign-in-method"), exports);
 __exportStar(require("./types/position"), exports);
 __exportStar(require("./types/residual"), exports);
 __exportStar(require("./types/liquidity-sourcing-plan"), exports);

package/build/types/admin-auth-special-permission.d.ts

@@ -7,5 +7,7 @@ export declare enum AdminAuthSpecialPermission {
     ModifyCryptoAddresses = "modifyCryptoAddresses",
     ModifyTeamMembers = "modifyTeamMembers",
     ModifyOnboardingStatus = "modifyOnboardingStatus",
-    UseDexter = "useDexter"
+    UseDexter = "useDexter",
+    UseInternalSupportBot = "useInternalSupportBot",
+    UseSecurityBot = "useSecurityBot"
 }

package/build/types/admin-auth-special-permission.js

@@ -12,4 +12,6 @@ var AdminAuthSpecialPermission;
     AdminAuthSpecialPermission["ModifyTeamMembers"] = "modifyTeamMembers";
     AdminAuthSpecialPermission["ModifyOnboardingStatus"] = "modifyOnboardingStatus";
     AdminAuthSpecialPermission["UseDexter"] = "useDexter";
+    AdminAuthSpecialPermission["UseInternalSupportBot"] = "useInternalSupportBot";
+    AdminAuthSpecialPermission["UseSecurityBot"] = "useSecurityBot";
 })(AdminAuthSpecialPermission = exports.AdminAuthSpecialPermission || (exports.AdminAuthSpecialPermission = {}));

package/build/types/auth-sign-in-method.d.ts

@@ -0,0 +1,6 @@
+export declare enum AuthSignInMethod {
+    Phone = "phone",
+    Email = "email",
+    TwoFactor = "twoFactor",
+    WebAuthn = "webAuthn"
+}

package/build/types/auth-sign-in-method.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthSignInMethod = void 0;
+var AuthSignInMethod;
+(function (AuthSignInMethod) {
+    AuthSignInMethod["Phone"] = "phone";
+    AuthSignInMethod["Email"] = "email";
+    AuthSignInMethod["TwoFactor"] = "twoFactor";
+    AuthSignInMethod["WebAuthn"] = "webAuthn";
+})(AuthSignInMethod = exports.AuthSignInMethod || (exports.AuthSignInMethod = {}));

package/build/types/internal-support-audit-type.d.ts

@@ -0,0 +1,10 @@
+export declare enum InternalSupportAuditType {
+    SessionCreated = "sessionCreated",
+    Question = "question",
+    ToolCall = "toolCall",
+    ToolResult = "toolResult",
+    ToolError = "toolError",
+    Answer = "answer",
+    Error = "error",
+    Stopped = "stopped"
+}

package/build/types/internal-support-audit-type.js

@@ -0,0 +1,14 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.InternalSupportAuditType = void 0;
+var InternalSupportAuditType;
+(function (InternalSupportAuditType) {
+    InternalSupportAuditType["SessionCreated"] = "sessionCreated";
+    InternalSupportAuditType["Question"] = "question";
+    InternalSupportAuditType["ToolCall"] = "toolCall";
+    InternalSupportAuditType["ToolResult"] = "toolResult";
+    InternalSupportAuditType["ToolError"] = "toolError";
+    InternalSupportAuditType["Answer"] = "answer";
+    InternalSupportAuditType["Error"] = "error";
+    InternalSupportAuditType["Stopped"] = "stopped";
+})(InternalSupportAuditType = exports.InternalSupportAuditType || (exports.InternalSupportAuditType = {}));

package/build/types/internal-support-case-confidence.d.ts

@@ -0,0 +1 @@
+export type InternalSupportCaseConfidence = "low" | "medium" | "high";

package/build/types/internal-support-case-confidence.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/build/types/internal-support-chat-kind.d.ts

@@ -0,0 +1,6 @@
+export declare enum InternalSupportChatKind {
+    User = "user",
+    Assistant = "assistant",
+    Tool = "tool",
+    System = "system"
+}

package/build/types/internal-support-chat-kind.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.InternalSupportChatKind = void 0;
+var InternalSupportChatKind;
+(function (InternalSupportChatKind) {
+    InternalSupportChatKind["User"] = "user";
+    InternalSupportChatKind["Assistant"] = "assistant";
+    InternalSupportChatKind["Tool"] = "tool";
+    InternalSupportChatKind["System"] = "system";
+})(InternalSupportChatKind = exports.InternalSupportChatKind || (exports.InternalSupportChatKind = {}));

package/build/types/internal-support-security-signal-type.d.ts

@@ -0,0 +1,11 @@
+export declare enum InternalSupportSecuritySignalType {
+    ProbingQuestion = "probingQuestion",
+    ToolRefused = "toolRefused",
+    OutputGuardRedaction = "outputGuardRedaction",
+    HeavyRedaction = "heavyRedaction",
+    InjectionMarker = "injectionMarker",
+    ScopeProbe = "scopeProbe",
+    RateLimited = "rateLimited",
+    BulkLookup = "bulkLookup",
+    DailyCapReached = "dailyCapReached"
+}

package/build/types/internal-support-security-signal-type.js

@@ -0,0 +1,24 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.InternalSupportSecuritySignalType = void 0;
+var InternalSupportSecuritySignalType;
+(function (InternalSupportSecuritySignalType) {
+    // The question itself asked for secrets, credentials or bulk PII.
+    InternalSupportSecuritySignalType["ProbingQuestion"] = "probingQuestion";
+    // A tool refused a repo, path, namespace or collection outside policy.
+    InternalSupportSecuritySignalType["ToolRefused"] = "toolRefused";
+    // The final answer contained something the output guard had to mask.
+    InternalSupportSecuritySignalType["OutputGuardRedaction"] = "outputGuardRedaction";
+    // A single tool result needed an unusual number of redactions.
+    InternalSupportSecuritySignalType["HeavyRedaction"] = "heavyRedaction";
+    // Raw tool output contained instruction-like text aimed at the model.
+    InternalSupportSecuritySignalType["InjectionMarker"] = "injectionMarker";
+    // Someone asked for data they are not entitled to (other admins' sessions).
+    InternalSupportSecuritySignalType["ScopeProbe"] = "scopeProbe";
+    // The request rate limiter fired.
+    InternalSupportSecuritySignalType["RateLimited"] = "rateLimited";
+    // Many distinct users or orders resolved by one admin in a short time.
+    InternalSupportSecuritySignalType["BulkLookup"] = "bulkLookup";
+    // A daily question or token cap was reached.
+    InternalSupportSecuritySignalType["DailyCapReached"] = "dailyCapReached";
+})(InternalSupportSecuritySignalType = exports.InternalSupportSecuritySignalType || (exports.InternalSupportSecuritySignalType = {}));

package/build/types/internal-support-session-status.d.ts

@@ -0,0 +1,5 @@
+export declare enum InternalSupportSessionStatus {
+    Idle = "idle",
+    Thinking = "thinking",
+    Failed = "failed"
+}

package/build/types/internal-support-session-status.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.InternalSupportSessionStatus = void 0;
+var InternalSupportSessionStatus;
+(function (InternalSupportSessionStatus) {
+    InternalSupportSessionStatus["Idle"] = "idle";
+    InternalSupportSessionStatus["Thinking"] = "thinking";
+    InternalSupportSessionStatus["Failed"] = "failed";
+})(InternalSupportSessionStatus = exports.InternalSupportSessionStatus || (exports.InternalSupportSessionStatus = {}));

package/build/types/security-finding-severity.d.ts

@@ -0,0 +1,7 @@
+export declare enum SecurityFindingSeverity {
+    Info = "info",
+    Low = "low",
+    Medium = "medium",
+    High = "high",
+    Critical = "critical"
+}

package/build/types/security-finding-severity.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SecurityFindingSeverity = void 0;
+var SecurityFindingSeverity;
+(function (SecurityFindingSeverity) {
+    SecurityFindingSeverity["Info"] = "info";
+    SecurityFindingSeverity["Low"] = "low";
+    SecurityFindingSeverity["Medium"] = "medium";
+    SecurityFindingSeverity["High"] = "high";
+    SecurityFindingSeverity["Critical"] = "critical";
+})(SecurityFindingSeverity = exports.SecurityFindingSeverity || (exports.SecurityFindingSeverity = {}));

package/build/types/security-finding-source.d.ts

@@ -0,0 +1,6 @@
+export declare enum SecurityFindingSource {
+    Rule = "rule",
+    Sweep = "sweep",
+    Triage = "triage",
+    Human = "human"
+}

package/build/types/security-finding-source.js

@@ -0,0 +1,14 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SecurityFindingSource = void 0;
+var SecurityFindingSource;
+(function (SecurityFindingSource) {
+    // A deterministic rule over events or a scheduled scan.
+    SecurityFindingSource["Rule"] = "rule";
+    // The model, during a scheduled or triggered sweep.
+    SecurityFindingSource["Sweep"] = "sweep";
+    // The model, enriching a finding that already existed.
+    SecurityFindingSource["Triage"] = "triage";
+    // An admin reported it by hand.
+    SecurityFindingSource["Human"] = "human";
+})(SecurityFindingSource = exports.SecurityFindingSource || (exports.SecurityFindingSource = {}));

package/build/types/security-finding-status.d.ts

@@ -0,0 +1,5 @@
+export declare enum SecurityFindingStatus {
+    Open = "open",
+    Resolved = "resolved",
+    FalsePositive = "falsePositive"
+}

package/build/types/security-finding-status.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SecurityFindingStatus = void 0;
+var SecurityFindingStatus;
+(function (SecurityFindingStatus) {
+    SecurityFindingStatus["Open"] = "open";
+    SecurityFindingStatus["Resolved"] = "resolved";
+    SecurityFindingStatus["FalsePositive"] = "falsePositive";
+})(SecurityFindingStatus = exports.SecurityFindingStatus || (exports.SecurityFindingStatus = {}));

package/build/types/security-signal-type.d.ts

@@ -0,0 +1,6 @@
+export declare enum SecuritySignalType {
+    FailedUserAuth = "failedUserAuth",
+    ForgedJwt = "forgedJwt",
+    FailedAdminAuth = "failedAdminAuth",
+    ForgedAdminJwt = "forgedAdminJwt"
+}

package/build/types/security-signal-type.js

@@ -0,0 +1,13 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SecuritySignalType = void 0;
+// Raised by auth and auth-admin when a request looks like probing. Published
+// on every occurrence so security-bot can apply its own windows; the source
+// service keeps its own per-IP threshold for its Slack post.
+var SecuritySignalType;
+(function (SecuritySignalType) {
+    SecuritySignalType["FailedUserAuth"] = "failedUserAuth";
+    SecuritySignalType["ForgedJwt"] = "forgedJwt";
+    SecuritySignalType["FailedAdminAuth"] = "failedAdminAuth";
+    SecuritySignalType["ForgedAdminJwt"] = "forgedAdminJwt";
+})(SecuritySignalType = exports.SecuritySignalType || (exports.SecuritySignalType = {}));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@riocrypto/common",
-  "version": "1.0.2728",
+  "version": "1.0.2730",
   "description": "",
   "main": "./build/index.js",
   "types": "./build/index.d.ts",