@secfn/core 0.0.1 → 0.0.3

package/src/types/index.ts

@@ -1,213 +0,0 @@
-export type Severity = 'critical' | 'high' | 'medium' | 'low' | 'info';
-export type Environment = 'development' | 'staging' | 'production';
-
-export interface StorageConfig {
-  type: 'indexeddb' | 'file' | 'db';
-  dbName?: string;
-  path?: string;
-  adapter?: any;
-  retentionDays?: number;
-}
-
-export interface SecretPattern {
-  name: string;
-  pattern: RegExp;
-  entropy?: number;
-  description: string;
-  severity: Severity;
-}
-
-export interface SecretScanResult {
-  id: string;
-  timestamp: number;
-  file: string;
-  line: number;
-  column: number;
-  pattern: string;
-  match: string;
-  redactedMatch: string;
-  severity: Severity;
-  entropy: number;
-  context: string;
-  resolved: boolean;
-  falsePositive: boolean;
-  metadata?: Record<string, unknown>;
-}
-
-export interface Secret {
-  id: string;
-  key: string;
-  value: string;
-  encrypted: boolean;
-  version: number;
-  tags: string[];
-  environment?: Environment;
-  expiresAt?: number;
-  rotateEvery?: number;
-  lastRotated?: number;
-  lastAccessed?: number;
-  accessCount: number;
-  createdBy: string;
-  createdAt: number;
-  updatedAt: number;
-}
-
-export interface SecretAccess {
-  id: string;
-  secretId: string;
-  userId: string;
-  action: 'read' | 'write' | 'delete' | 'rotate';
-  timestamp: number;
-  ip?: string;
-  userAgent?: string;
-}
-
-export interface Role {
-  id: string;
-  name: string;
-  description: string;
-  permissions: string[];
-  inherits?: string[];
-  metadata?: Record<string, unknown>;
-  createdAt: number;
-  updatedAt: number;
-}
-
-export interface Permission {
-  id: string;
-  resource: string;
-  action: string;
-  conditions?: PolicyCondition[];
-}
-
-export interface UserRole {
-  userId: string;
-  roleId: string;
-  resourceIds?: string[];
-  expiresAt?: number;
-  assignedAt: number;
-}
-
-export interface PolicyCondition {
-  field: string;
-  operator: 'eq' | 'ne' | 'in' | 'nin' | 'gt' | 'lt' | 'contains';
-  value: unknown;
-}
-
-export interface AccessRequest {
-  userId: string;
-  action: string;
-  resourceId?: string;
-  context?: Record<string, unknown>;
-}
-
-export interface RateLimitRule {
-  id?: string;
-  name?: string;
-  type?: 'global' | 'perUser' | 'perIP' | 'perEndpoint';
-  requests: number;
-  window: number;
-  blockDuration?: number;
-  endpoints?: string[];
-}
-
-export interface RateLimitEntry {
-  key: string;
-  count: number;
-  resetAt: number;
-  blocked: boolean;
-  blockedUntil?: number;
-}
-
-export interface RateLimitResult {
-  allowed: boolean;
-  remaining: number;
-  resetAt: number;
-  retryAfter?: number;
-  limit?: number;
-}
-
-export interface RateLimitViolation {
-  id: string;
-  timestamp: number;
-  key: string;
-  ip: string;
-  userId?: string;
-  endpoint: string;
-  requestCount: number;
-  limit: number;
-  window: number;
-  blocked: boolean;
-}
-
-export type SecurityEventType =
-  | 'auth_failure'
-  | 'rate_limit_exceeded'
-  | 'unauthorized_access'
-  | 'secret_accessed'
-  | 'permission_denied'
-  | 'suspicious_activity'
-  | 'secret_exposed'
-  | 'policy_violation';
-
-export interface SecurityEvent {
-  id: string;
-  timestamp: number;
-  type: SecurityEventType;
-  severity: Severity;
-  userId?: string;
-  ip: string;
-  userAgent?: string;
-  resource?: string;
-  action?: string;
-  metadata: Record<string, unknown>;
-  resolved: boolean;
-  resolvedAt?: number;
-  resolvedBy?: string;
-  notes?: string;
-}
-
-export interface SecurityMetrics {
-  timeRange: { start: number; end: number };
-  totalEvents: number;
-  eventsByType: Record<string, number>;
-  eventsBySeverity: Record<string, number>;
-  topIPs: Array<{ ip: string; count: number }>;
-  topUsers: Array<{ userId: string; count: number }>;
-  anomalies?: SecurityAnomaly[];
-}
-
-export type AnomalyType =
-  | 'unusual_access_pattern'
-  | 'geographic_anomaly'
-  | 'spike_in_failures'
-  | 'new_endpoint_access'
-  | 'unusual_time';
-
-export interface SecurityAnomaly {
-  id: string;
-  timestamp: number;
-  type: AnomalyType;
-  score: number;
-  description: string;
-  relatedEvents: string[];
-  userId?: string;
-  ip?: string;
-}
-
-export interface EventQuery {
-  type?: SecurityEventType | SecurityEventType[];
-  severity?: Severity | Severity[];
-  userId?: string;
-  ip?: string;
-  startDate?: number;
-  endDate?: number;
-  resolved?: boolean;
-  limit?: number;
-  offset?: number;
-}
-
-export interface TimeRange {
-  start: number;
-  end: number;
-}

package/src/utils/helpers.ts

@@ -1,84 +0,0 @@
-import { randomBytes } from 'crypto';
-
-export function generateId(prefix?: string): string {
-  const random = randomBytes(16).toString('hex');
-  return prefix ? `${prefix}_${random}` : random;
-}
-
-export function calculateEntropy(str: string): number {
-  if (!str) return 0;
-  
-  const len = str.length;
-  const frequencies: Record<string, number> = {};
-  
-  for (let i = 0; i < len; i++) {
-    const char = str[i];
-    frequencies[char] = (frequencies[char] || 0) + 1;
-  }
-  
-  let entropy = 0;
-  for (const char in frequencies) {
-    const probability = frequencies[char] / len;
-    entropy -= probability * Math.log2(probability);
-  }
-  
-  return entropy;
-}
-
-export function redactSecret(secret: string, visibleChars = 4): string {
-  if (secret.length <= visibleChars) {
-    return '*'.repeat(secret.length);
-  }
-  
-  const start = secret.slice(0, visibleChars);
-  const rest = '*'.repeat(secret.length - visibleChars);
-  return start + rest;
-}
-
-export function isExpired(timestamp?: number): boolean {
-  if (!timestamp) return false;
-  return Date.now() > timestamp;
-}
-
-export function delay(ms: number): Promise<void> {
-  return new Promise(resolve => setTimeout(resolve, ms));
-}
-
-export function sanitizeForLog(obj: Record<string, unknown>): Record<string, unknown> {
-  const sanitized: Record<string, unknown> = {};
-  const sensitiveKeys = ['password', 'secret', 'token', 'key', 'apiKey', 'api_key'];
-  
-  for (const [key, value] of Object.entries(obj)) {
-    const lowerKey = key.toLowerCase();
-    if (sensitiveKeys.some(sk => lowerKey.includes(sk))) {
-      sanitized[key] = '[REDACTED]';
-    } else if (typeof value === 'object' && value !== null) {
-      sanitized[key] = sanitizeForLog(value as Record<string, unknown>);
-    } else {
-      sanitized[key] = value;
-    }
-  }
-  
-  return sanitized;
-}
-
-export function parseTimeWindow(window: string | number): number {
-  if (typeof window === 'number') return window;
-  
-  const match = window.match(/^(\d+)(ms|s|m|h|d)$/);
-  if (!match) {
-    throw new Error(`Invalid time window format: ${window}`);
-  }
-  
-  const [, value, unit] = match;
-  const num = parseInt(value, 10);
-  
-  switch (unit) {
-    case 'ms': return num;
-    case 's': return num * 1000;
-    case 'm': return num * 60 * 1000;
-    case 'h': return num * 60 * 60 * 1000;
-    case 'd': return num * 24 * 60 * 60 * 1000;
-    default: throw new Error(`Unknown time unit: ${unit}`);
-  }
-}

package/tsconfig.json

@@ -1,26 +0,0 @@
-{
-  "compilerOptions": {
-    "target": "ES2022",
-    "module": "ESNext",
-    "lib": ["ES2022", "DOM"],
-    "moduleResolution": "bundler",
-    "resolveJsonModule": true,
-    "allowJs": false,
-    "outDir": "./dist",
-    "rootDir": "./src",
-    "declaration": true,
-    "declarationMap": true,
-    "sourceMap": true,
-    "strict": true,
-    "noUnusedLocals": true,
-    "noUnusedParameters": true,
-    "noImplicitReturns": true,
-    "noFallthroughCasesInSwitch": true,
-    "skipLibCheck": true,
-    "esModuleInterop": true,
-    "allowSyntheticDefaultImports": true,
-    "forceConsistentCasingInFileNames": true
-  },
-  "include": ["src/**/*"],
-  "exclude": ["node_modules", "dist", "**/*.test.ts"]
-}