@riocrypto/common 1.0.2729 → 1.0.2731

package/build/events/admin-auth-signed-in-event.d.ts

@@ -0,0 +1,9 @@
+import { Subjects } from "./subjects";
+export interface AdminAuthSignedInEvent {
+    subject: Subjects.AdminAuthSignedIn;
+    data: {
+        adminAuthId: string;
+        ip?: string;
+        requires2FAVerification?: boolean;
+    };
+}

package/build/events/admin-auth-signed-in-event.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/build/events/auth-api-key-created-event.d.ts

@@ -0,0 +1,9 @@
+import { Subjects } from "./subjects";
+export interface AuthApiKeyCreatedEvent {
+    subject: Subjects.AuthApiKeyCreated;
+    data: {
+        authId: string;
+        apiKeyId: string;
+        ip?: string;
+    };
+}

package/build/events/auth-api-key-created-event.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/build/events/auth-api-key-deleted-event.d.ts

@@ -0,0 +1,9 @@
+import { Subjects } from "./subjects";
+export interface AuthApiKeyDeletedEvent {
+    subject: Subjects.AuthApiKeyDeleted;
+    data: {
+        authId: string;
+        apiKeyId: string;
+        ip?: string;
+    };
+}

package/build/events/auth-api-key-deleted-event.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/build/events/auth-password-reset-event.d.ts

@@ -0,0 +1,9 @@
+import { Subjects } from "./subjects";
+export interface AuthPasswordResetEvent {
+    subject: Subjects.AuthPasswordReset;
+    data: {
+        authId: string;
+        channel: "phone" | "email";
+        ip?: string;
+    };
+}

package/build/events/auth-password-reset-event.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/build/events/auth-signed-in-event.d.ts

@@ -1,7 +1,11 @@
 import { Subjects } from "./subjects";
+import { AuthSignInMethod } from "../types/auth-sign-in-method";
 export interface AuthSignedInEvent {
     subject: Subjects.AuthSignedIn;
     data: {
         id: string;
+        method?: AuthSignInMethod;
+        ip?: string;
+        requires2FAVerification?: boolean;
     };
 }

package/build/events/auth-two-factor-updated-event.d.ts

@@ -0,0 +1,9 @@
+import { Subjects } from "./subjects";
+export interface AuthTwoFactorUpdatedEvent {
+    subject: Subjects.AuthTwoFactorUpdated;
+    data: {
+        authId: string;
+        action: "authenticatorRegistered" | "authenticatorRemoved";
+        ip?: string;
+    };
+}

package/build/events/auth-two-factor-updated-event.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/build/events/auth-webauthn-credential-added-event.d.ts

@@ -0,0 +1,9 @@
+import { Subjects } from "./subjects";
+export interface AuthWebauthnCredentialAddedEvent {
+    subject: Subjects.AuthWebauthnCredentialAdded;
+    data: {
+        authId: string;
+        credentialId: string;
+        ip?: string;
+    };
+}

package/build/events/auth-webauthn-credential-added-event.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/build/events/auth-webauthn-credential-deleted-event.d.ts

@@ -0,0 +1,9 @@
+import { Subjects } from "./subjects";
+export interface AuthWebauthnCredentialDeletedEvent {
+    subject: Subjects.AuthWebauthnCredentialDeleted;
+    data: {
+        authId: string;
+        credentialId: string;
+        ip?: string;
+    };
+}

package/build/events/auth-webauthn-credential-deleted-event.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/build/events/security-signal-event.d.ts

@@ -0,0 +1,14 @@
+import { Subjects } from "./subjects";
+import { SecuritySignalType } from "../types/security-signal-type";
+export interface SecuritySignalEvent {
+    subject: Subjects.SecuritySignal;
+    data: {
+        type: SecuritySignalType;
+        service: string;
+        ip: string;
+        authId?: string;
+        adminAuthId?: string;
+        count: number;
+        occurredAt: string;
+    };
+}

package/build/events/security-signal-event.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/build/events/subjects.d.ts

@@ -244,5 +244,13 @@ export declare enum Subjects {
     ComplianceSessionCompleted = "complianceSession:completed",
     MainPricingProviderOffline = "mainPricingProvider:offline",
     MalwareDetected = "malware:detected",
-    InformationRequestDocumentUploaded = "informationRequestDocument:uploaded"
+    InformationRequestDocumentUploaded = "informationRequestDocument:uploaded",
+    SecuritySignal = "security:signal",
+    AuthPasswordReset = "auth:passwordReset",
+    AuthApiKeyCreated = "auth:apiKeyCreated",
+    AuthApiKeyDeleted = "auth:apiKeyDeleted",
+    AuthWebauthnCredentialAdded = "auth:webauthnCredentialAdded",
+    AuthWebauthnCredentialDeleted = "auth:webauthnCredentialDeleted",
+    AuthTwoFactorUpdated = "auth:twoFactorUpdated",
+    AdminAuthSignedIn = "adminAuth:signedIn"
 }

package/build/events/subjects.js

@@ -249,4 +249,12 @@ var Subjects;
     Subjects["MainPricingProviderOffline"] = "mainPricingProvider:offline";
     Subjects["MalwareDetected"] = "malware:detected";
     Subjects["InformationRequestDocumentUploaded"] = "informationRequestDocument:uploaded";
+    Subjects["SecuritySignal"] = "security:signal";
+    Subjects["AuthPasswordReset"] = "auth:passwordReset";
+    Subjects["AuthApiKeyCreated"] = "auth:apiKeyCreated";
+    Subjects["AuthApiKeyDeleted"] = "auth:apiKeyDeleted";
+    Subjects["AuthWebauthnCredentialAdded"] = "auth:webauthnCredentialAdded";
+    Subjects["AuthWebauthnCredentialDeleted"] = "auth:webauthnCredentialDeleted";
+    Subjects["AuthTwoFactorUpdated"] = "auth:twoFactorUpdated";
+    Subjects["AdminAuthSignedIn"] = "adminAuth:signedIn";
 })(Subjects = exports.Subjects || (exports.Subjects = {}));

package/build/index.d.ts

@@ -46,6 +46,14 @@ export * from "./events/base-listener";
 export * from "./events/base-publisher";
 export * from "./events/subjects";
 export * from "./events/auth-signed-in-event";
+export * from "./events/security-signal-event";
+export * from "./events/auth-password-reset-event";
+export * from "./events/auth-api-key-created-event";
+export * from "./events/auth-api-key-deleted-event";
+export * from "./events/auth-webauthn-credential-added-event";
+export * from "./events/auth-webauthn-credential-deleted-event";
+export * from "./events/auth-two-factor-updated-event";
+export * from "./events/admin-auth-signed-in-event";
 export * from "./events/quote-created-event";
 export * from "./events/async-crypto-payout-completed-event";
 export * from "./events/async-crypto-payment-completed-event";
@@ -530,6 +538,11 @@ export * from "./types/internal-support-chat-kind";
 export * from "./types/internal-support-audit-type";
 export * from "./types/internal-support-security-signal-type";
 export * from "./types/internal-support-case-confidence";
+export * from "./types/security-finding-severity";
+export * from "./types/security-finding-status";
+export * from "./types/security-finding-source";
+export * from "./types/security-signal-type";
+export * from "./types/auth-sign-in-method";
 export * from "./types/position";
 export * from "./types/residual";
 export * from "./types/liquidity-sourcing-plan";

package/build/index.js

@@ -62,6 +62,14 @@ __exportStar(require("./events/base-listener"), exports);
 __exportStar(require("./events/base-publisher"), exports);
 __exportStar(require("./events/subjects"), exports);
 __exportStar(require("./events/auth-signed-in-event"), exports);
+__exportStar(require("./events/security-signal-event"), exports);
+__exportStar(require("./events/auth-password-reset-event"), exports);
+__exportStar(require("./events/auth-api-key-created-event"), exports);
+__exportStar(require("./events/auth-api-key-deleted-event"), exports);
+__exportStar(require("./events/auth-webauthn-credential-added-event"), exports);
+__exportStar(require("./events/auth-webauthn-credential-deleted-event"), exports);
+__exportStar(require("./events/auth-two-factor-updated-event"), exports);
+__exportStar(require("./events/admin-auth-signed-in-event"), exports);
 __exportStar(require("./events/quote-created-event"), exports);
 __exportStar(require("./events/async-crypto-payout-completed-event"), exports);
 __exportStar(require("./events/async-crypto-payment-completed-event"), exports);
@@ -546,6 +554,11 @@ __exportStar(require("./types/internal-support-chat-kind"), exports);
 __exportStar(require("./types/internal-support-audit-type"), exports);
 __exportStar(require("./types/internal-support-security-signal-type"), exports);
 __exportStar(require("./types/internal-support-case-confidence"), exports);
+__exportStar(require("./types/security-finding-severity"), exports);
+__exportStar(require("./types/security-finding-status"), exports);
+__exportStar(require("./types/security-finding-source"), exports);
+__exportStar(require("./types/security-signal-type"), exports);
+__exportStar(require("./types/auth-sign-in-method"), exports);
 __exportStar(require("./types/position"), exports);
 __exportStar(require("./types/residual"), exports);
 __exportStar(require("./types/liquidity-sourcing-plan"), exports);

package/build/types/admin-auth-special-permission.d.ts

@@ -8,5 +8,6 @@ export declare enum AdminAuthSpecialPermission {
     ModifyTeamMembers = "modifyTeamMembers",
     ModifyOnboardingStatus = "modifyOnboardingStatus",
     UseDexter = "useDexter",
-    UseInternalSupportBot = "useInternalSupportBot"
+    UseInternalSupportBot = "useInternalSupportBot",
+    UseSecurityBot = "useSecurityBot"
 }

package/build/types/admin-auth-special-permission.js

@@ -13,4 +13,5 @@ var AdminAuthSpecialPermission;
     AdminAuthSpecialPermission["ModifyOnboardingStatus"] = "modifyOnboardingStatus";
     AdminAuthSpecialPermission["UseDexter"] = "useDexter";
     AdminAuthSpecialPermission["UseInternalSupportBot"] = "useInternalSupportBot";
+    AdminAuthSpecialPermission["UseSecurityBot"] = "useSecurityBot";
 })(AdminAuthSpecialPermission = exports.AdminAuthSpecialPermission || (exports.AdminAuthSpecialPermission = {}));

package/build/types/auth-sign-in-method.d.ts

@@ -0,0 +1,6 @@
+export declare enum AuthSignInMethod {
+    Phone = "phone",
+    Email = "email",
+    TwoFactor = "twoFactor",
+    WebAuthn = "webAuthn"
+}

package/build/types/auth-sign-in-method.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthSignInMethod = void 0;
+var AuthSignInMethod;
+(function (AuthSignInMethod) {
+    AuthSignInMethod["Phone"] = "phone";
+    AuthSignInMethod["Email"] = "email";
+    AuthSignInMethod["TwoFactor"] = "twoFactor";
+    AuthSignInMethod["WebAuthn"] = "webAuthn";
+})(AuthSignInMethod = exports.AuthSignInMethod || (exports.AuthSignInMethod = {}));

package/build/types/security-finding-severity.d.ts

@@ -0,0 +1,7 @@
+export declare enum SecurityFindingSeverity {
+    Info = "info",
+    Low = "low",
+    Medium = "medium",
+    High = "high",
+    Critical = "critical"
+}

package/build/types/security-finding-severity.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SecurityFindingSeverity = void 0;
+var SecurityFindingSeverity;
+(function (SecurityFindingSeverity) {
+    SecurityFindingSeverity["Info"] = "info";
+    SecurityFindingSeverity["Low"] = "low";
+    SecurityFindingSeverity["Medium"] = "medium";
+    SecurityFindingSeverity["High"] = "high";
+    SecurityFindingSeverity["Critical"] = "critical";
+})(SecurityFindingSeverity = exports.SecurityFindingSeverity || (exports.SecurityFindingSeverity = {}));

package/build/types/security-finding-source.d.ts

@@ -0,0 +1,6 @@
+export declare enum SecurityFindingSource {
+    Rule = "rule",
+    Sweep = "sweep",
+    Triage = "triage",
+    Human = "human"
+}

package/build/types/security-finding-source.js

@@ -0,0 +1,14 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SecurityFindingSource = void 0;
+var SecurityFindingSource;
+(function (SecurityFindingSource) {
+    // A deterministic rule over events or a scheduled scan.
+    SecurityFindingSource["Rule"] = "rule";
+    // The model, during a scheduled or triggered sweep.
+    SecurityFindingSource["Sweep"] = "sweep";
+    // The model, enriching a finding that already existed.
+    SecurityFindingSource["Triage"] = "triage";
+    // An admin reported it by hand.
+    SecurityFindingSource["Human"] = "human";
+})(SecurityFindingSource = exports.SecurityFindingSource || (exports.SecurityFindingSource = {}));

package/build/types/security-finding-status.d.ts

@@ -0,0 +1,5 @@
+export declare enum SecurityFindingStatus {
+    Open = "open",
+    Resolved = "resolved",
+    FalsePositive = "falsePositive"
+}

package/build/types/security-finding-status.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SecurityFindingStatus = void 0;
+var SecurityFindingStatus;
+(function (SecurityFindingStatus) {
+    SecurityFindingStatus["Open"] = "open";
+    SecurityFindingStatus["Resolved"] = "resolved";
+    SecurityFindingStatus["FalsePositive"] = "falsePositive";
+})(SecurityFindingStatus = exports.SecurityFindingStatus || (exports.SecurityFindingStatus = {}));

package/build/types/security-signal-type.d.ts

@@ -0,0 +1,6 @@
+export declare enum SecuritySignalType {
+    FailedUserAuth = "failedUserAuth",
+    ForgedJwt = "forgedJwt",
+    FailedAdminAuth = "failedAdminAuth",
+    ForgedAdminJwt = "forgedAdminJwt"
+}

package/build/types/security-signal-type.js

@@ -0,0 +1,13 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SecuritySignalType = void 0;
+// Raised by auth and auth-admin when a request looks like probing. Published
+// on every occurrence so security-bot can apply its own windows; the source
+// service keeps its own per-IP threshold for its Slack post.
+var SecuritySignalType;
+(function (SecuritySignalType) {
+    SecuritySignalType["FailedUserAuth"] = "failedUserAuth";
+    SecuritySignalType["ForgedJwt"] = "forgedJwt";
+    SecuritySignalType["FailedAdminAuth"] = "failedAdminAuth";
+    SecuritySignalType["ForgedAdminJwt"] = "forgedAdminJwt";
+})(SecuritySignalType = exports.SecuritySignalType || (exports.SecuritySignalType = {}));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@riocrypto/common",
-  "version": "1.0.2729",
+  "version": "1.0.2731",
   "description": "",
   "main": "./build/index.js",
   "types": "./build/index.d.ts",