@secfn/core 0.0.1 → 0.0.2

package/dist/access-control/rbac.d.ts

@@ -1,48 +0,0 @@
-import type { Role, AccessRequest } from '../types/index.js';
-import type { IndexedDBStorage } from '../storage/indexeddb-storage.js';
-export interface AccessControlConfig {
-    storage: IndexedDBStorage;
-    cache?: {
-        ttl: number;
-        maxSize: number;
-    };
-}
-export interface CreateRoleOptions {
-    name: string;
-    description: string;
-    permissions: string[];
-    inherits?: string[];
-    metadata?: Record<string, unknown>;
-}
-export interface AssignRoleOptions {
-    resourceIds?: string[];
-    expiresAt?: number;
-}
-export declare class AccessControl {
-    private storage;
-    private cache;
-    private cacheTTL;
-    private maxCacheSize;
-    constructor(config: AccessControlConfig);
-    createRole(options: CreateRoleOptions): Promise<string>;
-    getRole(id: string): Promise<Role | null>;
-    getRoleByName(name: string): Promise<Role | null>;
-    listRoles(): Promise<Role[]>;
-    updateRole(id: string, updates: Partial<CreateRoleOptions>): Promise<void>;
-    deleteRole(id: string): Promise<void>;
-    assignRole(userId: string, roleId: string, options?: AssignRoleOptions): Promise<void>;
-    removeRole(userId: string, roleId: string): Promise<void>;
-    getUserRoles(userId: string): Promise<Role[]>;
-    getUserPermissions(userId: string): Promise<string[]>;
-    check(request: AccessRequest): Promise<boolean>;
-    private evaluateAccess;
-    private checkRolePermission;
-    private collectPermissions;
-    private matchesPermission;
-    private getCacheKey;
-    private getCached;
-    private setCached;
-    private invalidateCache;
-    private invalidateCacheForUser;
-}
-//# sourceMappingURL=rbac.d.ts.map

package/dist/access-control/rbac.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"rbac.d.ts","sourceRoot":"","sources":["../../src/access-control/rbac.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAY,aAAa,EAAE,MAAM,mBAAmB,CAAC;AACvE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAGxE,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,gBAAgB,CAAC;IAC1B,KAAK,CAAC,EAAE;QACN,GAAG,EAAE,MAAM,CAAC;QACZ,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;CACH;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,iBAAiB;IAChC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAOD,qBAAa,aAAa;IACxB,OAAO,CAAC,OAAO,CAAmB;IAClC,OAAO,CAAC,KAAK,CAA0B;IACvC,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,YAAY,CAAS;gBAEjB,MAAM,EAAE,mBAAmB;IAOjC,UAAU,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC;IAgBvD,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAIzC,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAKjD,SAAS,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;IAI5B,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,iBAAiB,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAiB1E,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKrC,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAE,iBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC;IAkB1F,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKzD,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAkB7C,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAWrD,KAAK,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC;YAcvC,cAAc;YA0Bd,mBAAmB;YAanB,kBAAkB;IAehC,OAAO,CAAC,iBAAiB;IAgBzB,OAAO,CAAC,WAAW;IAInB,OAAO,CAAC,SAAS;IAajB,OAAO,CAAC,SAAS;IAYjB,OAAO,CAAC,eAAe;IAIvB,OAAO,CAAC,sBAAsB;CAO/B"}

package/dist/access-control/rbac.js

@@ -1,203 +0,0 @@
-import { generateId } from '../utils/helpers.js';
-export class AccessControl {
-    storage;
-    cache;
-    cacheTTL;
-    maxCacheSize;
-    constructor(config) {
-        this.storage = config.storage;
-        this.cache = new Map();
-        this.cacheTTL = config.cache?.ttl || 300000;
-        this.maxCacheSize = config.cache?.maxSize || 1000;
-    }
-    async createRole(options) {
-        const role = {
-            id: generateId('role'),
-            name: options.name,
-            description: options.description,
-            permissions: options.permissions,
-            inherits: options.inherits,
-            metadata: options.metadata,
-            createdAt: Date.now(),
-            updatedAt: Date.now(),
-        };
-        await this.storage.saveRole(role);
-        return role.id;
-    }
-    async getRole(id) {
-        return await this.storage.getRole(id);
-    }
-    async getRoleByName(name) {
-        const roles = await this.storage.listRoles();
-        return roles.find(r => r.name === name) || null;
-    }
-    async listRoles() {
-        return await this.storage.listRoles();
-    }
-    async updateRole(id, updates) {
-        const role = await this.storage.getRole(id);
-        if (!role) {
-            throw new Error(`Role ${id} not found`);
-        }
-        if (updates.name)
-            role.name = updates.name;
-        if (updates.description)
-            role.description = updates.description;
-        if (updates.permissions)
-            role.permissions = updates.permissions;
-        if (updates.inherits)
-            role.inherits = updates.inherits;
-        if (updates.metadata)
-            role.metadata = updates.metadata;
-        role.updatedAt = Date.now();
-        await this.storage.saveRole(role);
-        this.invalidateCache();
-    }
-    async deleteRole(id) {
-        await this.storage.deleteRole(id);
-        this.invalidateCache();
-    }
-    async assignRole(userId, roleId, options = {}) {
-        const role = await this.storage.getRole(roleId);
-        if (!role) {
-            throw new Error(`Role ${roleId} not found`);
-        }
-        const userRole = {
-            userId,
-            roleId,
-            resourceIds: options.resourceIds,
-            expiresAt: options.expiresAt,
-            assignedAt: Date.now(),
-        };
-        await this.storage.assignUserRole(userRole);
-        this.invalidateCacheForUser(userId);
-    }
-    async removeRole(userId, roleId) {
-        await this.storage.removeUserRole(userId, roleId);
-        this.invalidateCacheForUser(userId);
-    }
-    async getUserRoles(userId) {
-        const userRoles = await this.storage.getUserRoles(userId);
-        const roles = [];
-        for (const userRole of userRoles) {
-            if (userRole.expiresAt && Date.now() > userRole.expiresAt) {
-                continue;
-            }
-            const role = await this.storage.getRole(userRole.roleId);
-            if (role) {
-                roles.push(role);
-            }
-        }
-        return roles;
-    }
-    async getUserPermissions(userId) {
-        const roles = await this.getUserRoles(userId);
-        const permissions = new Set();
-        for (const role of roles) {
-            await this.collectPermissions(role, permissions);
-        }
-        return Array.from(permissions);
-    }
-    async check(request) {
-        const cacheKey = this.getCacheKey(request);
-        const cached = this.getCached(cacheKey);
-        if (cached !== null) {
-            return cached;
-        }
-        const allowed = await this.evaluateAccess(request);
-        this.setCached(cacheKey, allowed);
-        return allowed;
-    }
-    async evaluateAccess(request) {
-        const userRoles = await this.storage.getUserRoles(request.userId);
-        for (const userRole of userRoles) {
-            if (userRole.expiresAt && Date.now() > userRole.expiresAt) {
-                continue;
-            }
-            if (userRole.resourceIds && request.resourceId) {
-                if (!userRole.resourceIds.includes(request.resourceId)) {
-                    continue;
-                }
-            }
-            const role = await this.storage.getRole(userRole.roleId);
-            if (!role)
-                continue;
-            const hasPermission = await this.checkRolePermission(role, request);
-            if (hasPermission) {
-                return true;
-            }
-        }
-        return false;
-    }
-    async checkRolePermission(role, request) {
-        const allPermissions = new Set();
-        await this.collectPermissions(role, allPermissions);
-        for (const permission of allPermissions) {
-            if (this.matchesPermission(permission, request.action)) {
-                return true;
-            }
-        }
-        return false;
-    }
-    async collectPermissions(role, collected) {
-        for (const permission of role.permissions) {
-            collected.add(permission);
-        }
-        if (role.inherits) {
-            for (const inheritedRoleId of role.inherits) {
-                const inheritedRole = await this.storage.getRole(inheritedRoleId);
-                if (inheritedRole) {
-                    await this.collectPermissions(inheritedRole, collected);
-                }
-            }
-        }
-    }
-    matchesPermission(permission, action) {
-        if (permission === '*:*')
-            return true;
-        const [permResource, permAction] = permission.split(':');
-        const [reqResource, reqAction] = action.split(':');
-        if (!permResource || !permAction || !reqResource || !reqAction) {
-            return false;
-        }
-        const resourceMatch = permResource === '*' || permResource === reqResource;
-        const actionMatch = permAction === '*' || permAction === reqAction;
-        return resourceMatch && actionMatch;
-    }
-    getCacheKey(request) {
-        return `${request.userId}:${request.action}:${request.resourceId || '*'}`;
-    }
-    getCached(key) {
-        const entry = this.cache.get(key);
-        if (!entry)
-            return null;
-        const age = Date.now() - entry.timestamp;
-        if (age > this.cacheTTL) {
-            this.cache.delete(key);
-            return null;
-        }
-        return entry.allowed;
-    }
-    setCached(key, allowed) {
-        if (this.cache.size >= this.maxCacheSize) {
-            const firstKey = this.cache.keys().next().value;
-            if (firstKey)
-                this.cache.delete(firstKey);
-        }
-        this.cache.set(key, {
-            allowed,
-            timestamp: Date.now(),
-        });
-    }
-    invalidateCache() {
-        this.cache.clear();
-    }
-    invalidateCacheForUser(userId) {
-        for (const [key] of this.cache) {
-            if (key.startsWith(`${userId}:`)) {
-                this.cache.delete(key);
-            }
-        }
-    }
-}
-//# sourceMappingURL=rbac.js.map

package/dist/access-control/rbac.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"rbac.js","sourceRoot":"","sources":["../../src/access-control/rbac.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AA4BjD,MAAM,OAAO,aAAa;IAChB,OAAO,CAAmB;IAC1B,KAAK,CAA0B;IAC/B,QAAQ,CAAS;IACjB,YAAY,CAAS;IAE7B,YAAY,MAA2B;QACrC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAC9B,IAAI,CAAC,KAAK,GAAG,IAAI,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,KAAK,EAAE,GAAG,IAAI,MAAM,CAAC;QAC5C,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,KAAK,EAAE,OAAO,IAAI,IAAI,CAAC;IACpD,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,OAA0B;QACzC,MAAM,IAAI,GAAS;YACjB,EAAE,EAAE,UAAU,CAAC,MAAM,CAAC;YACtB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC;QAEF,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAClC,OAAO,IAAI,CAAC,EAAE,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,EAAU;QACtB,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,IAAY;QAC9B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QAC7C,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,SAAS;QACb,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,EAAU,EAAE,OAAmC;QAC9D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC5C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QAC1C,CAAC;QAED,IAAI,OAAO,CAAC,IAAI;YAAE,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QAC3C,IAAI,OAAO,CAAC,WAAW;YAAE,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QAChE,IAAI,OAAO,CAAC,WAAW;YAAE,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QAChE,IAAI,OAAO,CAAC,QAAQ;YAAE,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QACvD,IAAI,OAAO,CAAC,QAAQ;YAAE,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QACvD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE5B,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC,eAAe,EAAE,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,EAAU;QACzB,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAClC,IAAI,CAAC,eAAe,EAAE,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAAc,EAAE,MAAc,EAAE,UAA6B,EAAE;QAC9E,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAChD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CAAC,QAAQ,MAAM,YAAY,CAAC,CAAC;QAC9C,CAAC;QAED,MAAM,QAAQ,GAAa;YACzB,MAAM;YACN,MAAM;YACN,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;SACvB,CAAC;QAEF,MAAM,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QAC5C,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAAc,EAAE,MAAc;QAC7C,MAAM,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAClD,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,MAAc;QAC/B,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAC1D,MAAM,KAAK,GAAW,EAAE,CAAC;QAEzB,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,IAAI,QAAQ,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAC;gBAC1D,SAAS;YACX,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACzD,IAAI,IAAI,EAAE,CAAC;gBACT,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnB,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,MAAc;QACrC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAC9C,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;QAEtC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QACnD,CAAC;QAED,OAAO,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,OAAsB;QAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAExC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QACnD,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAElC,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,OAAsB;QACjD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAElE,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,IAAI,QAAQ,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAC;gBAC1D,SAAS;YACX,CAAC;YAED,IAAI,QAAQ,CAAC,WAAW,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;gBAC/C,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;oBACvD,SAAS;gBACX,CAAC;YACH,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACzD,IAAI,CAAC,IAAI;gBAAE,SAAS;YAEpB,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACpE,IAAI,aAAa,EAAE,CAAC;gBAClB,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAAC,IAAU,EAAE,OAAsB;QAClE,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;QACzC,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;QAEpD,KAAK,MAAM,UAAU,IAAI,cAAc,EAAE,CAAC;YACxC,IAAI,IAAI,CAAC,iBAAiB,CAAC,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBACvD,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAAC,IAAU,EAAE,SAAsB;QACjE,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YAC1C,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC5B,CAAC;QAED,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,KAAK,MAAM,eAAe,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC5C,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;gBAClE,IAAI,aAAa,EAAE,CAAC;oBAClB,MAAM,IAAI,CAAC,kBAAkB,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;gBAC1D,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAEO,iBAAiB,CAAC,UAAkB,EAAE,MAAc;QAC1D,IAAI,UAAU,KAAK,KAAK;YAAE,OAAO,IAAI,CAAC;QAEtC,MAAM,CAAC,YAAY,EAAE,UAAU,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACzD,MAAM,CAAC,WAAW,EAAE,SAAS,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAEnD,IAAI,CAAC,YAAY,IAAI,CAAC,UAAU,IAAI,CAAC,WAAW,IAAI,CAAC,SAAS,EAAE,CAAC;YAC/D,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,aAAa,GAAG,YAAY,KAAK,GAAG,IAAI,YAAY,KAAK,WAAW,CAAC;QAC3E,MAAM,WAAW,GAAG,UAAU,KAAK,GAAG,IAAI,UAAU,KAAK,SAAS,CAAC;QAEnE,OAAO,aAAa,IAAI,WAAW,CAAC;IACtC,CAAC;IAEO,WAAW,CAAC,OAAsB;QACxC,OAAO,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,UAAU,IAAI,GAAG,EAAE,CAAC;IAC5E,CAAC;IAEO,SAAS,CAAC,GAAW;QAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QAExB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,SAAS,CAAC;QACzC,IAAI,GAAG,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YACxB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACvB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,KAAK,CAAC,OAAO,CAAC;IACvB,CAAC;IAEO,SAAS,CAAC,GAAW,EAAE,OAAgB;QAC7C,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;YAChD,IAAI,QAAQ;gBAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC5C,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE;YAClB,OAAO;YACP,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC,CAAC;IACL,CAAC;IAEO,eAAe;QACrB,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;IAEO,sBAAsB,CAAC,MAAc;QAC3C,KAAK,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC/B,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC;gBACjC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/dist/core/secfn.d.ts

@@ -1,28 +0,0 @@
-import { IndexedDBStorage } from '../storage/indexeddb-storage.js';
-import { SecretsVault, type SecretsVaultConfig } from '../secrets/vault.js';
-import { SecretScanner, type SecretScannerConfig } from '../scanning/scanner.js';
-import { AccessControl, type AccessControlConfig } from '../access-control/rbac.js';
-import { RateLimiter, type RateLimiterConfig } from '../rate-limiting/rate-limiter.js';
-import { SecurityMonitor, type MonitoringConfig } from '../monitoring/security-monitor.js';
-import type { StorageConfig } from '../types/index.js';
-export interface SecFnConfig {
-    storage?: StorageConfig;
-    masterKey?: string;
-    namespace?: string;
-}
-export declare class SecFn {
-    private storage;
-    private masterKey?;
-    private initialized;
-    constructor(config?: SecFnConfig);
-    initialize(): Promise<void>;
-    createSecretsVault(config?: Partial<Omit<SecretsVaultConfig, 'storage'>>): SecretsVault;
-    createSecretScanner(config?: Partial<Omit<SecretScannerConfig, 'storage'>>): SecretScanner;
-    createAccessControl(config?: Partial<Omit<AccessControlConfig, 'storage'>>): AccessControl;
-    createRateLimiter(config: Omit<RateLimiterConfig, 'storage'>): RateLimiter;
-    createMonitoring(config?: Partial<Omit<MonitoringConfig, 'storage'>>): SecurityMonitor;
-    destroy(): Promise<void>;
-    getStorage(): IndexedDBStorage;
-}
-export declare function createSecFn(config?: SecFnConfig): SecFn;
-//# sourceMappingURL=secfn.d.ts.map

package/dist/core/secfn.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"secfn.d.ts","sourceRoot":"","sources":["../../src/core/secfn.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,EAAE,YAAY,EAAE,KAAK,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAC5E,OAAO,EAAE,aAAa,EAAE,KAAK,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AACjF,OAAO,EAAE,aAAa,EAAE,KAAK,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AACpF,OAAO,EAAE,WAAW,EAAE,KAAK,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACvF,OAAO,EAAE,eAAe,EAAE,KAAK,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AAC3F,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAEvD,MAAM,WAAW,WAAW;IAC1B,OAAO,CAAC,EAAE,aAAa,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,qBAAa,KAAK;IAChB,OAAO,CAAC,OAAO,CAAmB;IAClC,OAAO,CAAC,SAAS,CAAC,CAAS;IAC3B,OAAO,CAAC,WAAW,CAAkB;gBAEzB,MAAM,GAAE,WAAgB;IAM9B,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAMjC,kBAAkB,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,kBAAkB,EAAE,SAAS,CAAC,CAAC,GAAG,YAAY;IAgBvF,mBAAmB,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,mBAAmB,EAAE,SAAS,CAAC,CAAC,GAAG,aAAa;IAO1F,mBAAmB,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,mBAAmB,EAAE,SAAS,CAAC,CAAC,GAAG,aAAa;IAO1F,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,iBAAiB,EAAE,SAAS,CAAC,GAAG,WAAW;IAQ1E,gBAAgB,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,gBAAgB,EAAE,SAAS,CAAC,CAAC,GAAG,eAAe;IAQhF,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAK9B,UAAU,IAAI,gBAAgB;CAG/B;AAED,wBAAgB,WAAW,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,KAAK,CAEvD"}

package/dist/core/secfn.js

@@ -1,73 +0,0 @@
-import { IndexedDBStorage } from '../storage/indexeddb-storage.js';
-import { SecretsVault } from '../secrets/vault.js';
-import { SecretScanner } from '../scanning/scanner.js';
-import { AccessControl } from '../access-control/rbac.js';
-import { RateLimiter } from '../rate-limiting/rate-limiter.js';
-import { SecurityMonitor } from '../monitoring/security-monitor.js';
-export class SecFn {
-    storage;
-    masterKey;
-    initialized = false;
-    constructor(config = {}) {
-        const dbName = config.storage?.dbName || config.namespace || 'secfn';
-        this.storage = new IndexedDBStorage(dbName);
-        this.masterKey = config.masterKey;
-    }
-    async initialize() {
-        if (this.initialized)
-            return;
-        await this.storage.initialize();
-        this.initialized = true;
-    }
-    createSecretsVault(config) {
-        if (!this.masterKey && !config?.encryption?.masterKey) {
-            throw new Error('Master key is required for secrets vault');
-        }
-        return new SecretsVault({
-            storage: this.storage,
-            encryption: {
-                algorithm: 'AES-256-GCM',
-                masterKey: config?.encryption?.masterKey || this.masterKey,
-                ...config?.encryption,
-            },
-            rotation: config?.rotation,
-        });
-    }
-    createSecretScanner(config) {
-        return new SecretScanner({
-            ...config,
-            storage: this.storage,
-        });
-    }
-    createAccessControl(config) {
-        return new AccessControl({
-            storage: this.storage,
-            cache: config?.cache,
-        });
-    }
-    createRateLimiter(config) {
-        return new RateLimiter({
-            storage: this.storage,
-            rules: config.rules,
-            onLimitExceeded: config.onLimitExceeded,
-        });
-    }
-    createMonitoring(config) {
-        return new SecurityMonitor({
-            storage: this.storage,
-            retention: config?.retention,
-            anomalyDetection: config?.anomalyDetection,
-        });
-    }
-    async destroy() {
-        await this.storage.destroy();
-        this.initialized = false;
-    }
-    getStorage() {
-        return this.storage;
-    }
-}
-export function createSecFn(config) {
-    return new SecFn(config);
-}
-//# sourceMappingURL=secfn.js.map

package/dist/core/secfn.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"secfn.js","sourceRoot":"","sources":["../../src/core/secfn.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,EAAE,YAAY,EAA2B,MAAM,qBAAqB,CAAC;AAC5E,OAAO,EAAE,aAAa,EAA4B,MAAM,wBAAwB,CAAC;AACjF,OAAO,EAAE,aAAa,EAA4B,MAAM,2BAA2B,CAAC;AACpF,OAAO,EAAE,WAAW,EAA0B,MAAM,kCAAkC,CAAC;AACvF,OAAO,EAAE,eAAe,EAAyB,MAAM,mCAAmC,CAAC;AAS3F,MAAM,OAAO,KAAK;IACR,OAAO,CAAmB;IAC1B,SAAS,CAAU;IACnB,WAAW,GAAY,KAAK,CAAC;IAErC,YAAY,SAAsB,EAAE;QAClC,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,EAAE,MAAM,IAAI,MAAM,CAAC,SAAS,IAAI,OAAO,CAAC;QACrE,IAAI,CAAC,OAAO,GAAG,IAAI,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,UAAU;QACd,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO;QAC7B,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;QAChC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;IAC1B,CAAC;IAED,kBAAkB,CAAC,MAAqD;QACtE,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC9D,CAAC;QAED,OAAO,IAAI,YAAY,CAAC;YACtB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,UAAU,EAAE;gBACV,SAAS,EAAE,aAAa;gBACxB,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,IAAI,IAAI,CAAC,SAAU;gBAC3D,GAAG,MAAM,EAAE,UAAU;aACtB;YACD,QAAQ,EAAE,MAAM,EAAE,QAAQ;SAC3B,CAAC,CAAC;IACL,CAAC;IAED,mBAAmB,CAAC,MAAsD;QACxE,OAAO,IAAI,aAAa,CAAC;YACvB,GAAG,MAAM;YACT,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAC,CAAC;IACL,CAAC;IAED,mBAAmB,CAAC,MAAsD;QACxE,OAAO,IAAI,aAAa,CAAC;YACvB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,KAAK,EAAE,MAAM,EAAE,KAAK;SACrB,CAAC,CAAC;IACL,CAAC;IAED,iBAAiB,CAAC,MAA0C;QAC1D,OAAO,IAAI,WAAW,CAAC;YACrB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,eAAe,EAAE,MAAM,CAAC,eAAe;SACxC,CAAC,CAAC;IACL,CAAC;IAED,gBAAgB,CAAC,MAAmD;QAClE,OAAO,IAAI,eAAe,CAAC;YACzB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,SAAS,EAAE,MAAM,EAAE,SAAS;YAC5B,gBAAgB,EAAE,MAAM,EAAE,gBAAgB;SAC3C,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,OAAO;QACX,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QAC7B,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;IAC3B,CAAC;IAED,UAAU;QACR,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;CACF;AAED,MAAM,UAAU,WAAW,CAAC,MAAoB;IAC9C,OAAO,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC;AAC3B,CAAC"}

package/dist/monitoring/security-monitor.d.ts

@@ -1,46 +0,0 @@
-import type { SecurityEvent, EventQuery, SecurityMetrics, TimeRange, SecurityEventType, Severity } from '../types/index.js';
-import type { IndexedDBStorage } from '../storage/indexeddb-storage.js';
-export interface MonitoringConfig {
-    storage: IndexedDBStorage;
-    retention?: number;
-    anomalyDetection?: {
-        enabled: boolean;
-        sensitivity: number;
-    };
-}
-export interface LogEventOptions {
-    type: SecurityEventType;
-    severity: Severity;
-    userId?: string;
-    ip: string;
-    userAgent?: string;
-    resource?: string;
-    action?: string;
-    metadata?: Record<string, unknown>;
-}
-export interface ResolveEventOptions {
-    resolvedBy: string;
-    notes?: string;
-}
-export declare class SecurityMonitor {
-    private storage;
-    private retention;
-    private anomalyDetection;
-    constructor(config: MonitoringConfig);
-    logEvent(options: LogEventOptions): Promise<string>;
-    queryEvents(query: EventQuery): Promise<SecurityEvent[]>;
-    getEvent(id: string): Promise<SecurityEvent | null>;
-    resolveEvent(id: string, options: ResolveEventOptions): Promise<void>;
-    getMetrics(range: TimeRange): Promise<SecurityMetrics>;
-    getRecentEvents(limit?: number): Promise<SecurityEvent[]>;
-    getUnresolvedEvents(): Promise<SecurityEvent[]>;
-    getCriticalEvents(hours?: number): Promise<SecurityEvent[]>;
-    getEventsByUser(userId: string, limit?: number): Promise<SecurityEvent[]>;
-    getEventsByIP(ip: string, limit?: number): Promise<SecurityEvent[]>;
-    cleanup(): Promise<void>;
-    private detectAnomalies;
-    private calculateFailureRate;
-    private analyzeUserActivity;
-    private detectTimeAnomalies;
-}
-//# sourceMappingURL=security-monitor.d.ts.map

package/dist/monitoring/security-monitor.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"security-monitor.d.ts","sourceRoot":"","sources":["../../src/monitoring/security-monitor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,eAAe,EAAE,SAAS,EAAE,iBAAiB,EAAE,QAAQ,EAAmB,MAAM,mBAAmB,CAAC;AAC7I,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAGxE,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,gBAAgB,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE;QACjB,OAAO,EAAE,OAAO,CAAC;QACjB,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC;CACH;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,iBAAiB,CAAC;IACxB,QAAQ,EAAE,QAAQ,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,qBAAa,eAAe;IAC1B,OAAO,CAAC,OAAO,CAAmB;IAClC,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,gBAAgB,CAA4C;gBAExD,MAAM,EAAE,gBAAgB;IAS9B,QAAQ,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC;IAoBnD,WAAW,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAIxD,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IAKnD,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC;IAgBrE,UAAU,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,eAAe,CAAC;IAgBtD,eAAe,CAAC,KAAK,SAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAItD,mBAAmB,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;IAI/C,iBAAiB,CAAC,KAAK,SAAK,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAQvD,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,SAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAOtE,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,SAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAOhE,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;YAIhB,eAAe;IAmC7B,OAAO,CAAC,oBAAoB;IAc5B,OAAO,CAAC,mBAAmB;IA4C3B,OAAO,CAAC,mBAAmB;CAa5B"}

package/dist/monitoring/security-monitor.js

@@ -1,172 +0,0 @@
-import { generateId } from '../utils/helpers.js';
-export class SecurityMonitor {
-    storage;
-    retention;
-    anomalyDetection;
-    constructor(config) {
-        this.storage = config.storage;
-        this.retention = config.retention || 90 * 24 * 60 * 60 * 1000;
-        this.anomalyDetection = config.anomalyDetection || {
-            enabled: false,
-            sensitivity: 0.8,
-        };
-    }
-    async logEvent(options) {
-        const event = {
-            id: generateId('event'),
-            timestamp: Date.now(),
-            type: options.type,
-            severity: options.severity,
-            userId: options.userId,
-            ip: options.ip,
-            userAgent: options.userAgent,
-            resource: options.resource,
-            action: options.action,
-            metadata: options.metadata || {},
-            resolved: false,
-        };
-        await this.storage.logSecurityEvent(event);
-        return event.id;
-    }
-    async queryEvents(query) {
-        return await this.storage.queryEvents(query);
-    }
-    async getEvent(id) {
-        const events = await this.storage.queryEvents({ limit: 1 });
-        return events.find(e => e.id === id) || null;
-    }
-    async resolveEvent(id, options) {
-        const events = await this.storage.queryEvents({});
-        const event = events.find(e => e.id === id);
-        if (!event) {
-            throw new Error(`Event ${id} not found`);
-        }
-        event.resolved = true;
-        event.resolvedAt = Date.now();
-        event.resolvedBy = options.resolvedBy;
-        event.notes = options.notes;
-        await this.storage.logSecurityEvent(event);
-    }
-    async getMetrics(range) {
-        const metrics = await this.storage.getMetrics(range);
-        if (this.anomalyDetection.enabled) {
-            const events = await this.storage.queryEvents({
-                startDate: range.start,
-                endDate: range.end,
-            });
-            const anomalies = await this.detectAnomalies(events);
-            metrics.anomalies = anomalies;
-        }
-        return metrics;
-    }
-    async getRecentEvents(limit = 100) {
-        return await this.storage.queryEvents({ limit });
-    }
-    async getUnresolvedEvents() {
-        return await this.storage.queryEvents({ resolved: false });
-    }
-    async getCriticalEvents(hours = 24) {
-        const startDate = Date.now() - hours * 60 * 60 * 1000;
-        return await this.storage.queryEvents({
-            severity: 'critical',
-            startDate,
-        });
-    }
-    async getEventsByUser(userId, limit = 100) {
-        return await this.storage.queryEvents({
-            userId,
-            limit,
-        });
-    }
-    async getEventsByIP(ip, limit = 100) {
-        return await this.storage.queryEvents({
-            ip,
-            limit,
-        });
-    }
-    async cleanup() {
-        await this.storage.cleanup(this.retention);
-    }
-    async detectAnomalies(events) {
-        const anomalies = [];
-        const authFailures = events.filter(e => e.type === 'auth_failure');
-        if (authFailures.length > 0) {
-            const failureRate = this.calculateFailureRate(events, authFailures);
-            if (failureRate > this.anomalyDetection.sensitivity) {
-                anomalies.push({
-                    id: generateId('anomaly'),
-                    timestamp: Date.now(),
-                    type: 'spike_in_failures',
-                    score: failureRate,
-                    description: `Unusual spike in authentication failures: ${(failureRate * 100).toFixed(1)}%`,
-                    relatedEvents: authFailures.slice(0, 10).map(e => e.id),
-                });
-            }
-        }
-        const userActivityPatterns = this.analyzeUserActivity(events);
-        for (const pattern of userActivityPatterns) {
-            if (pattern.score > this.anomalyDetection.sensitivity) {
-                anomalies.push({
-                    id: generateId('anomaly'),
-                    timestamp: Date.now(),
-                    type: 'unusual_access_pattern',
-                    score: pattern.score,
-                    description: pattern.description,
-                    relatedEvents: pattern.eventIds,
-                });
-            }
-        }
-        return anomalies;
-    }
-    calculateFailureRate(totalEvents, failures) {
-        if (totalEvents.length === 0)
-            return 0;
-        const authRelatedEvents = totalEvents.filter(e => e.type === 'auth_failure' ||
-            e.action?.includes('auth') ||
-            e.action?.includes('login'));
-        if (authRelatedEvents.length === 0)
-            return 0;
-        return failures.length / authRelatedEvents.length;
-    }
-    analyzeUserActivity(events) {
-        const patterns = [];
-        const userGroups = new Map();
-        for (const event of events) {
-            if (!event.userId)
-                continue;
-            const userEvents = userGroups.get(event.userId) || [];
-            userEvents.push(event);
-            userGroups.set(event.userId, userEvents);
-        }
-        for (const [userId, userEvents] of userGroups) {
-            const uniqueIPs = new Set(userEvents.map(e => e.ip));
-            if (uniqueIPs.size > 5) {
-                patterns.push({
-                    score: Math.min(uniqueIPs.size / 10, 1.0),
-                    description: `User ${userId} accessed from ${uniqueIPs.size} different IP addresses`,
-                    eventIds: userEvents.slice(0, 10).map(e => e.id),
-                });
-            }
-            const timeGaps = this.detectTimeAnomalies(userEvents);
-            if (timeGaps.length > 0) {
-                patterns.push({
-                    score: 0.7,
-                    description: `Unusual access times detected for user ${userId}`,
-                    eventIds: timeGaps.map(e => e.id),
-                });
-            }
-        }
-        return patterns;
-    }
-    detectTimeAnomalies(events) {
-        const anomalous = [];
-        for (const event of events) {
-            const hour = new Date(event.timestamp).getHours();
-            if (hour >= 2 && hour <= 5) {
-                anomalous.push(event);
-            }
-        }
-        return anomalous;
-    }
-}
-//# sourceMappingURL=security-monitor.js.map

package/dist/monitoring/security-monitor.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"security-monitor.js","sourceRoot":"","sources":["../../src/monitoring/security-monitor.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AA2BjD,MAAM,OAAO,eAAe;IAClB,OAAO,CAAmB;IAC1B,SAAS,CAAS;IAClB,gBAAgB,CAA4C;IAEpE,YAAY,MAAwB;QAClC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAC9B,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;QAC9D,IAAI,CAAC,gBAAgB,GAAG,MAAM,CAAC,gBAAgB,IAAI;YACjD,OAAO,EAAE,KAAK;YACd,WAAW,EAAE,GAAG;SACjB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,OAAwB;QACrC,MAAM,KAAK,GAAkB;YAC3B,EAAE,EAAE,UAAU,CAAC,OAAO,CAAC;YACvB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,EAAE;YAChC,QAAQ,EAAE,KAAK;SAChB,CAAC;QAEF,MAAM,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAE3C,OAAO,KAAK,CAAC,EAAE,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,KAAiB;QACjC,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,EAAU;QACvB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QAC5D,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,IAAI,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,EAAU,EAAE,OAA4B;QACzD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAE5C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;QAC3C,CAAC;QAED,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC;QACtB,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC9B,KAAK,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QACtC,KAAK,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAE5B,MAAM,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,KAAgB;QAC/B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAErD,IAAI,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC;YAClC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;gBAC5C,SAAS,EAAE,KAAK,CAAC,KAAK;gBACtB,OAAO,EAAE,KAAK,CAAC,GAAG;aACnB,CAAC,CAAC;YAEH,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;YACrD,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC;QAChC,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,KAAK,GAAG,GAAG;QAC/B,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,mBAAmB;QACvB,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,KAAK,GAAG,EAAE;QAChC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;QACtD,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;YACpC,QAAQ,EAAE,UAAU;YACpB,SAAS;SACV,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,MAAc,EAAE,KAAK,GAAG,GAAG;QAC/C,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;YACpC,MAAM;YACN,KAAK;SACN,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,EAAU,EAAE,KAAK,GAAG,GAAG;QACzC,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;YACpC,EAAE;YACF,KAAK;SACN,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,OAAO;QACX,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC7C,CAAC;IAEO,KAAK,CAAC,eAAe,CAAC,MAAuB;QACnD,MAAM,SAAS,GAAsB,EAAE,CAAC;QAExC,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC;QACnE,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,WAAW,GAAG,IAAI,CAAC,oBAAoB,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;YACpE,IAAI,WAAW,GAAG,IAAI,CAAC,gBAAgB,CAAC,WAAW,EAAE,CAAC;gBACpD,SAAS,CAAC,IAAI,CAAC;oBACb,EAAE,EAAE,UAAU,CAAC,SAAS,CAAC;oBACzB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;oBACrB,IAAI,EAAE,mBAAmB;oBACzB,KAAK,EAAE,WAAW;oBAClB,WAAW,EAAE,6CAA6C,CAAC,WAAW,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG;oBAC3F,aAAa,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACxD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,MAAM,oBAAoB,GAAG,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;QAC9D,KAAK,MAAM,OAAO,IAAI,oBAAoB,EAAE,CAAC;YAC3C,IAAI,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,gBAAgB,CAAC,WAAW,EAAE,CAAC;gBACtD,SAAS,CAAC,IAAI,CAAC;oBACb,EAAE,EAAE,UAAU,CAAC,SAAS,CAAC;oBACzB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;oBACrB,IAAI,EAAE,wBAAwB;oBAC9B,KAAK,EAAE,OAAO,CAAC,KAAK;oBACpB,WAAW,EAAE,OAAO,CAAC,WAAW;oBAChC,aAAa,EAAE,OAAO,CAAC,QAAQ;iBAChC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,oBAAoB,CAAC,WAA4B,EAAE,QAAyB;QAClF,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC;QAEvC,MAAM,iBAAiB,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAC/C,CAAC,CAAC,IAAI,KAAK,cAAc;YACzB,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC;YAC1B,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,CAC5B,CAAC;QAEF,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC;QAE7C,OAAO,QAAQ,CAAC,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC;IACpD,CAAC;IAEO,mBAAmB,CAAC,MAAuB;QAKjD,MAAM,QAAQ,GAIT,EAAE,CAAC;QAER,MAAM,UAAU,GAAG,IAAI,GAAG,EAA2B,CAAC;QACtD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,CAAC,KAAK,CAAC,MAAM;gBAAE,SAAS;YAE5B,MAAM,UAAU,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACtD,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACvB,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAC3C,CAAC;QAED,KAAK,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,UAAU,EAAE,CAAC;YAC9C,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAErD,IAAI,SAAS,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;gBACvB,QAAQ,CAAC,IAAI,CAAC;oBACZ,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,GAAG,EAAE,EAAE,GAAG,CAAC;oBACzC,WAAW,EAAE,QAAQ,MAAM,kBAAkB,SAAS,CAAC,IAAI,yBAAyB;oBACpF,QAAQ,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACjD,CAAC,CAAC;YACL,CAAC;YAED,MAAM,QAAQ,GAAG,IAAI,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC;YACtD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,QAAQ,CAAC,IAAI,CAAC;oBACZ,KAAK,EAAE,GAAG;oBACV,WAAW,EAAE,0CAA0C,MAAM,EAAE;oBAC/D,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAClC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,mBAAmB,CAAC,MAAuB;QACjD,MAAM,SAAS,GAAoB,EAAE,CAAC;QAEtC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,CAAC;YAElD,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC;gBAC3B,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;CACF"}

package/dist/rate-limiting/rate-limiter.d.ts

@@ -1,31 +0,0 @@
-import type { RateLimitRule, RateLimitResult, RateLimitViolation } from '../types/index.js';
-import type { IndexedDBStorage } from '../storage/indexeddb-storage.js';
-export interface RateLimiterConfig {
-    storage: IndexedDBStorage;
-    rules: {
-        global?: RateLimitRule;
-        perUser?: RateLimitRule;
-        perIP?: RateLimitRule;
-        perEndpoint?: Record<string, RateLimitRule>;
-    };
-    onLimitExceeded?: (violation: RateLimitViolation) => void | Promise<void>;
-}
-export interface RateLimitCheckRequest {
-    userId?: string;
-    ip: string;
-    endpoint?: string;
-}
-export declare class RateLimiter {
-    private storage;
-    private rules;
-    private onLimitExceeded?;
-    constructor(config: RateLimiterConfig);
-    check(request: RateLimitCheckRequest): Promise<RateLimitResult>;
-    private checkLimit;
-    private handleViolation;
-    reset(key: string): Promise<void>;
-    resetUser(userId: string): Promise<void>;
-    resetIP(ip: string): Promise<void>;
-    unblock(key: string): Promise<void>;
-}
-//# sourceMappingURL=rate-limiter.d.ts.map

package/dist/rate-limiting/rate-limiter.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"rate-limiter.d.ts","sourceRoot":"","sources":["../../src/rate-limiting/rate-limiter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAkB,eAAe,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAC5G,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAGxE,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,gBAAgB,CAAC;IAC1B,KAAK,EAAE;QACL,MAAM,CAAC,EAAE,aAAa,CAAC;QACvB,OAAO,CAAC,EAAE,aAAa,CAAC;QACxB,KAAK,CAAC,EAAE,aAAa,CAAC;QACtB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;KAC7C,CAAC;IACF,eAAe,CAAC,EAAE,CAAC,SAAS,EAAE,kBAAkB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3E;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,qBAAa,WAAW;IACtB,OAAO,CAAC,OAAO,CAAmB;IAClC,OAAO,CAAC,KAAK,CAA6B;IAC1C,OAAO,CAAC,eAAe,CAAC,CAA0D;gBAEtE,MAAM,EAAE,iBAAiB;IAM/B,KAAK,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,eAAe,CAAC;YA8DvD,UAAU;YAwDV,eAAe;IAUvB,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIjC,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIxC,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIlC,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAQ1C"}