@secfn/core 0.0.1 → 0.0.3

package/dist/schema.js

@@ -0,0 +1,249 @@
+export const SECFN_SCHEMA_VERSION = 4;
+export function getSecFnSchema() {
+    return withIsoDateDefaults([
+        {
+            modelName: "secfn_namespaces",
+            fields: {
+                id: { type: "string", required: true },
+                tenantId: { type: "string", required: false, fieldName: "tenant_id" },
+                slug: { type: "string", required: true },
+                label: { type: "string", required: true },
+                description: { type: "string", required: false },
+                createdBy: { type: "string", required: true, fieldName: "created_by" },
+                createdAt: { type: "date", required: true, fieldName: "created_at" },
+                updatedAt: { type: "date", required: true, fieldName: "updated_at" },
+                metadata: { type: "json", required: false },
+            },
+            indexes: [
+                { name: "idx_secfn_namespaces_lookup", fields: ["tenantId", "slug"], unique: true },
+            ],
+        },
+        {
+            modelName: "secfn_environments",
+            fields: {
+                id: { type: "string", required: true },
+                tenantId: { type: "string", required: false, fieldName: "tenant_id" },
+                namespaceId: { type: "string", required: false, fieldName: "namespace_id" },
+                name: { type: "string", required: true },
+                description: { type: "string", required: false },
+                createdBy: { type: "string", required: true, fieldName: "created_by" },
+                createdAt: { type: "date", required: true, fieldName: "created_at" },
+                updatedAt: { type: "date", required: true, fieldName: "updated_at" },
+                metadata: { type: "json", required: false },
+            },
+            indexes: [
+                { name: "idx_secfn_environments_lookup", fields: ["tenantId", "namespaceId", "name"], unique: true },
+            ],
+        },
+        {
+            modelName: "secfn_secrets",
+            fields: {
+                id: { type: "string", required: true },
+                tenantId: { type: "string", required: false, fieldName: "tenant_id" },
+                namespaceId: { type: "string", required: true, fieldName: "namespace_id" },
+                namespace: { type: "string", required: false },
+                key: { type: "string", required: true },
+                environmentId: { type: "string", required: true, fieldName: "environment_id" },
+                environment: { type: "string", required: false },
+                description: { type: "string", required: false },
+                tags: { type: "json", required: true },
+                currentVersion: { type: "number", required: true, fieldName: "current_version" },
+                revokedAt: { type: "date", required: false, fieldName: "revoked_at" },
+                createdBy: { type: "string", required: true, fieldName: "created_by" },
+                createdAt: { type: "date", required: true, fieldName: "created_at" },
+                updatedAt: { type: "date", required: true, fieldName: "updated_at" },
+                metadata: { type: "json", required: false },
+            },
+            indexes: [
+                { name: "idx_secfn_secrets_lookup", fields: ["tenantId", "namespaceId", "environmentId", "key"], unique: true },
+                { name: "idx_secfn_secrets_revoked", fields: ["revokedAt"] },
+            ],
+        },
+        {
+            modelName: "secfn_secret_versions",
+            fields: {
+                id: { type: "string", required: true },
+                secretId: { type: "string", required: true, fieldName: "secret_id" },
+                version: { type: "number", required: true },
+                encryptedPayload: { type: "json", required: true, fieldName: "encrypted_payload" },
+                createdBy: { type: "string", required: true, fieldName: "created_by" },
+                createdAt: { type: "date", required: true, fieldName: "created_at" },
+            },
+            indexes: [
+                { name: "idx_secfn_secret_versions_secret_version", fields: ["secretId", "version"], unique: true },
+            ],
+        },
+        {
+            modelName: "secfn_secret_sets",
+            fields: {
+                id: { type: "string", required: true },
+                tenantId: { type: "string", required: false, fieldName: "tenant_id" },
+                namespaceId: { type: "string", required: true, fieldName: "namespace_id" },
+                namespace: { type: "string", required: false },
+                environmentId: { type: "string", required: false, fieldName: "environment_id" },
+                name: { type: "string", required: true },
+                description: { type: "string", required: false },
+                createdBy: { type: "string", required: true, fieldName: "created_by" },
+                createdAt: { type: "date", required: true, fieldName: "created_at" },
+                updatedAt: { type: "date", required: true, fieldName: "updated_at" },
+            },
+            indexes: [
+                { name: "idx_secfn_secret_sets_lookup", fields: ["tenantId", "namespaceId", "environmentId", "name"], unique: true },
+            ],
+        },
+        {
+            modelName: "secfn_secret_set_members",
+            fields: {
+                id: { type: "string", required: true },
+                setId: { type: "string", required: true, fieldName: "set_id" },
+                secretId: { type: "string", required: true, fieldName: "secret_id" },
+                alias: { type: "string", required: false },
+                createdAt: { type: "date", required: true, fieldName: "created_at" },
+            },
+            indexes: [
+                { name: "idx_secfn_secret_set_members_set", fields: ["setId"] },
+            ],
+        },
+        {
+            modelName: "secfn_service_tokens",
+            fields: {
+                id: { type: "string", required: true },
+                tokenHash: { type: "string", required: true, fieldName: "token_hash" },
+                name: { type: "string", required: true },
+                tenantId: { type: "string", required: false, fieldName: "tenant_id" },
+                namespace: { type: "string", required: false },
+                environment: { type: "string", required: false },
+                scopes: { type: "json", required: true },
+                expiresAt: { type: "date", required: false, fieldName: "expires_at" },
+                revokedAt: { type: "date", required: false, fieldName: "revoked_at" },
+                createdBy: { type: "string", required: true, fieldName: "created_by" },
+                createdAt: { type: "date", required: true, fieldName: "created_at" },
+                lastUsedAt: { type: "date", required: false, fieldName: "last_used_at" },
+            },
+            indexes: [
+                { name: "idx_secfn_service_tokens_hash", fields: ["tokenHash"], unique: true },
+            ],
+        },
+        {
+            modelName: "secfn_roles",
+            fields: {
+                id: { type: "string", required: true },
+                name: { type: "string", required: true },
+                description: { type: "string", required: false },
+                permissions: { type: "json", required: true },
+                inherits: { type: "json", required: false },
+                createdAt: { type: "date", required: true, fieldName: "created_at" },
+                updatedAt: { type: "date", required: true, fieldName: "updated_at" },
+                metadata: { type: "json", required: false },
+            },
+            indexes: [
+                { name: "idx_secfn_roles_name", fields: ["name"], unique: true },
+            ],
+        },
+        {
+            modelName: "secfn_role_bindings",
+            fields: {
+                id: { type: "string", required: true },
+                principalId: { type: "string", required: true, fieldName: "principal_id" },
+                roleId: { type: "string", required: true, fieldName: "role_id" },
+                tenantId: { type: "string", required: false, fieldName: "tenant_id" },
+                namespace: { type: "string", required: false },
+                resourceId: { type: "string", required: false, fieldName: "resource_id" },
+                expiresAt: { type: "date", required: false, fieldName: "expires_at" },
+                createdAt: { type: "date", required: true, fieldName: "created_at" },
+                createdBy: { type: "string", required: false, fieldName: "created_by" },
+            },
+            indexes: [
+                { name: "idx_secfn_role_bindings_principal", fields: ["principalId"] },
+            ],
+        },
+        {
+            modelName: "secfn_audit_events",
+            fields: {
+                id: { type: "string", required: true },
+                timestamp: { type: "date", required: true },
+                type: { type: "string", required: true },
+                severity: { type: "string", required: true },
+                tenantId: { type: "string", required: false, fieldName: "tenant_id" },
+                namespaceId: { type: "string", required: false, fieldName: "namespace_id" },
+                namespace: { type: "string", required: false },
+                environmentId: { type: "string", required: false, fieldName: "environment_id" },
+                environment: { type: "string", required: false },
+                actorId: { type: "string", required: false, fieldName: "actor_id" },
+                ip: { type: "string", required: false },
+                userAgent: { type: "string", required: false, fieldName: "user_agent" },
+                resource: { type: "string", required: false },
+                action: { type: "string", required: false },
+                requestId: { type: "string", required: false, fieldName: "request_id" },
+                metadata: { type: "json", required: true },
+                resolved: { type: "boolean", required: true },
+                resolvedAt: { type: "date", required: false, fieldName: "resolved_at" },
+                resolvedBy: { type: "string", required: false, fieldName: "resolved_by" },
+                notes: { type: "string", required: false },
+            },
+            indexes: [
+                { name: "idx_secfn_audit_events_timestamp", fields: ["timestamp"] },
+                { name: "idx_secfn_audit_events_type", fields: ["type"] },
+                { name: "idx_secfn_audit_events_severity", fields: ["severity"] },
+            ],
+        },
+        {
+            modelName: "secfn_scan_runs",
+            fields: {
+                id: { type: "string", required: true },
+                tenantId: { type: "string", required: false, fieldName: "tenant_id" },
+                startedAt: { type: "date", required: true, fieldName: "started_at" },
+                completedAt: { type: "date", required: false, fieldName: "completed_at" },
+                target: { type: "string", required: true },
+                status: { type: "string", required: true },
+                findingCount: { type: "number", required: true, fieldName: "finding_count" },
+                metadata: { type: "json", required: false },
+            },
+            indexes: [{ name: "idx_secfn_scan_runs_tenant", fields: ["tenantId"] }],
+        },
+        {
+            modelName: "secfn_scan_findings",
+            fields: {
+                id: { type: "string", required: true },
+                runId: { type: "string", required: false, fieldName: "run_id" },
+                ruleId: { type: "string", required: true, fieldName: "rule_id" },
+                ruleName: { type: "string", required: true, fieldName: "rule_name" },
+                severity: { type: "string", required: true },
+                message: { type: "string", required: true },
+                file: { type: "string", required: true },
+                line: { type: "number", required: true },
+                column: { type: "number", required: true },
+                redactedMatch: { type: "string", required: false, fieldName: "redacted_match" },
+                fingerprint: { type: "string", required: true },
+                context: { type: "string", required: false },
+                metadata: { type: "json", required: false },
+            },
+            indexes: [
+                { name: "idx_secfn_scan_findings_run", fields: ["runId"] },
+                { name: "idx_secfn_scan_findings_severity", fields: ["severity"] },
+            ],
+        },
+    ]);
+}
+export function getSchema() {
+    return {
+        version: SECFN_SCHEMA_VERSION,
+        schemas: getSecFnSchema(),
+    };
+}
+function withIsoDateDefaults(tables) {
+    return tables.map((table) => ({
+        ...table,
+        fields: Object.fromEntries(Object.entries(table.fields).map(([name, field]) => [
+            name,
+            field.type === "date" || field.type === "datetime"
+                ? {
+                    dateValueType: "iso-string",
+                    dateStorageType: "timestamptz",
+                    ...field,
+                }
+                : field,
+        ])),
+    }));
+}
+//# sourceMappingURL=schema.js.map

package/dist/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAEtC,MAAM,UAAU,cAAc;IAC5B,OAAO,mBAAmB,CAAC;QACzB;YACE,SAAS,EAAE,kBAAkB;YAC7B,MAAM,EAAE;gBACN,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;gBACtC,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE;gBACrE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;gBACxC,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;gBACzC,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE;gBAChD,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE;gBACtE,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE;gBACpE,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE;gBACpE,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;aAC5C;YACD,OAAO,EAAE;gBACP,EAAE,IAAI,EAAE,6BAA6B,EAAE,MAAM,EAAE,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE;aACpF;SACF;QACD;YACE,SAAS,EAAE,oBAAoB;YAC/B,MAAM,EAAE;gBACN,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;gBACtC,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE;gBACrE,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE;gBAC3E,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;gBACxC,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE;gBAChD,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE;gBACtE,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE;gBACpE,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE;gBACpE,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;aAC5C;YACD,OAAO,EAAE;gBACP,EAAE,IAAI,EAAE,+BAA+B,EAAE,MAAM,EAAE,CAAC,UAAU,EAAE,aAAa,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE;aACrG;SACF;QACD;YACE,SAAS,EAAE,eAAe;YAC1B,MAAM,EAAE;gBACN,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;gBACtC,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE;gBACrE,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,cAAc,EAAE;gBAC1E,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE;gBAC9C,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;gBACvC,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,gBAAgB,EAAE;gBAC9E,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE;gBAChD,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE;gBAChD,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE;gBACtC,cAAc,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,iBAAiB,EAAE;gBAChF,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE;gBACrE,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE;gBACtE,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE;gBACpE,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE;gBACpE,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;aAC5C;YACD,OAAO,EAAE;gBACP,EAAE,IAAI,EAAE,0BAA0B,EAAE,MAAM,EAAE,CAAC,UAAU,EAAE,aAAa,EAAE,eAAe,EAAE,KAAK,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE;gBAC/G,EAAE,IAAI,EAAE,2BAA2B,EAAE,MAAM,EAAE,CAAC,WAAW,CAAC,EAAE;aAC7D;SACF;QACD;YACE,SAAS,EAAE,uBAAuB;YAClC,MAAM,EAAE;gBACN,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;gBACtC,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE;gBACpE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;gBAC3C,gBAAgB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,mBAAmB,EAAE;gBAClF,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE;gBACtE,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE;aACrE;YACD,OAAO,EAAE;gBACP,EAAE,IAAI,EAAE,0CAA0C,EAAE,MAAM,EAAE,CAAC,UAAU,EAAE,SAAS,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE;aACpG;SACF;QACD;YACE,SAAS,EAAE,mBAAmB;YAC9B,MAAM,EAAE;gBACN,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;gBACtC,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE;gBACrE,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,cAAc,EAAE;gBAC1E,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE;gBAC9C,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,gBAAgB,EAAE;gBAC/E,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;gBACxC,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE;gBAChD,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE;gBACtE,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE;gBACpE,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE;aACrE;YACD,OAAO,EAAE;gBACP,EAAE,IAAI,EAAE,8BAA8B,EAAE,MAAM,EAAE,CAAC,UAAU,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE;aACrH;SACF;QACD;YACE,SAAS,EAAE,0BAA0B;YACrC,MAAM,EAAE;gBACN,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;gBACtC,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE;gBAC9D,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE;gBACpE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE;gBAC1C,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE;aACrE;YACD,OAAO,EAAE;gBACP,EAAE,IAAI,EAAE,kCAAkC,EAAE,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE;aAChE;SACF;QACD;YACE,SAAS,EAAE,sBAAsB;YACjC,MAAM,EAAE;gBACN,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;gBACtC,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE;gBACtE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;gBACxC,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE;gBACrE,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE;gBAC9C,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE;gBAChD,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE;gBACxC,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE;gBACrE,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE;gBACrE,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE;gBACtE,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE;gBACpE,UAAU,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE;aACzE;YACD,OAAO,EAAE;gBACP,EAAE,IAAI,EAAE,+BAA+B,EAAE,MAAM,EAAE,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE;aAC/E;SACF;QACD;YACE,SAAS,EAAE,aAAa;YACxB,MAAM,EAAE;gBACN,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;gBACtC,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;gBACxC,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE;gBAChD,WAAW,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE;gBAC7C,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;gBAC3C,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE;gBACpE,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE;gBACpE,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;aAC5C;YACD,OAAO,EAAE;gBACP,EAAE,IAAI,EAAE,sBAAsB,EAAE,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE;aACjE;SACF;QACD;YACE,SAAS,EAAE,qBAAqB;YAChC,MAAM,EAAE;gBACN,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;gBACtC,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,cAAc,EAAE;gBAC1E,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE;gBAChE,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE;gBACrE,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE;gBAC9C,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE;gBACzE,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE;gBACrE,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE;gBACpE,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE;aACxE;YACD,OAAO,EAAE;gBACP,EAAE,IAAI,EAAE,mCAAmC,EAAE,MAAM,EAAE,CAAC,aAAa,CAAC,EAAE;aACvE;SACF;QACD;YACE,SAAS,EAAE,oBAAoB;YAC/B,MAAM,EAAE;gBACN,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;gBACtC,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE;gBAC3C,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;gBACxC,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;gBAC5C,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE;gBACrE,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE;gBAC3E,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE;gBAC9C,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,gBAAgB,EAAE;gBAC/E,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE;gBAChD,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE;gBACnE,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE;gBACvC,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE;gBACvE,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE;gBAC7C,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE;gBAC3C,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE;gBACvE,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE;gBAC1C,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE;gBAC7C,UAAU,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE;gBACvE,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE;gBACzE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE;aAC3C;YACD,OAAO,EAAE;gBACP,EAAE,IAAI,EAAE,kCAAkC,EAAE,MAAM,EAAE,CAAC,WAAW,CAAC,EAAE;gBACnE,EAAE,IAAI,EAAE,6BAA6B,EAAE,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE;gBACzD,EAAE,IAAI,EAAE,iCAAiC,EAAE,MAAM,EAAE,CAAC,UAAU,CAAC,EAAE;aAClE;SACF;QACD;YACE,SAAS,EAAE,iBAAiB;YAC5B,MAAM,EAAE;gBACN,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;gBACtC,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE;gBACrE,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE;gBACpE,WAAW,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE;gBACzE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;gBAC1C,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;gBAC1C,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,eAAe,EAAE;gBAC5E,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;aAC5C;YACD,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,4BAA4B,EAAE,MAAM,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC;SACxE;QACD;YACE,SAAS,EAAE,qBAAqB;YAChC,MAAM,EAAE;gBACN,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;gBACtC,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE;gBAC/D,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE;gBAChE,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE;gBACpE,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;gBAC5C,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;gBAC3C,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;gBACxC,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;gBACxC,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;gBAC1C,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,gBAAgB,EAAE;gBAC/E,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;gBAC/C,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE;gBAC5C,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;aAC5C;YACD,OAAO,EAAE;gBACP,EAAE,IAAI,EAAE,6BAA6B,EAAE,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE;gBAC1D,EAAE,IAAI,EAAE,kCAAkC,EAAE,MAAM,EAAE,CAAC,UAAU,CAAC,EAAE;aACnE;SACF;KACF,CAAC,CAAC;AACL,CAAC;AAOD,MAAM,UAAU,SAAS;IACvB,OAAO;QACL,OAAO,EAAE,oBAAoB;QAC7B,OAAO,EAAE,cAAc,EAAE;KAC1B,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAqB;IAChD,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC5B,GAAG,KAAK;QACR,MAAM,EAAE,MAAM,CAAC,WAAW,CACxB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;YAClD,IAAI;YACJ,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU;gBAChD,CAAC,CAAC;oBACE,aAAa,EAAE,YAAY;oBAC3B,eAAe,EAAE,aAAa;oBAC9B,GAAG,KAAK;iBACT;gBACH,CAAC,CAAC,KAAK;SACV,CAAC,CACH;KACF,CAAC,CAAC,CAAC;AACN,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,261 @@
+export type SecFnEnvironment = string;
+export type SecFnSeverity = "critical" | "high" | "medium" | "low" | "info";
+export interface SecFnLogger {
+    info(message: string, context?: Record<string, unknown>): void;
+    warn(message: string, context?: Record<string, unknown>): void;
+    error(message: string, context?: Record<string, unknown>): void;
+    debug(message: string, context?: Record<string, unknown>): void;
+}
+export interface KeyMaterial {
+    keyId: string;
+    secret: string | Uint8Array;
+}
+export interface KeyProvider {
+    resolveKey(input?: {
+        keyId?: string;
+        purpose?: "encrypt" | "decrypt";
+    }): Promise<KeyMaterial> | KeyMaterial;
+}
+export interface SecFnEncryptionConfig {
+    masterKey: string;
+    keyId?: string;
+}
+export interface SecFnSecretScope {
+    tenantId?: string;
+    namespaceId?: string;
+    namespace?: string;
+    environmentId?: string;
+    environment?: SecFnEnvironment;
+}
+export interface SecFnRuntimeClientConfig extends SecFnSecretScope {
+    endpoint: string;
+    apiKey: string;
+    cache?: {
+        ttlMs: number;
+        staleWhileRevalidate?: boolean;
+    };
+}
+export interface SecFnServerCoreConfig {
+    basePath?: string;
+    encryption?: SecFnEncryptionConfig;
+}
+export interface SecFnRateLimitPolicyConfig {
+    enabled?: boolean;
+    algorithm?: "fixed-window" | "sliding-window" | "token-bucket";
+    windowMs?: number;
+    limits?: {
+        perIP?: number;
+        perUser?: number;
+        perEndpoint?: number;
+    };
+}
+export interface EncryptedSecretPayload {
+    algorithm: "AES-256-GCM";
+    keyId: string;
+    iv: string;
+    salt: string;
+    authTag: string;
+    ciphertext: string;
+}
+export interface SecretAadInput {
+    tenantId?: string;
+    namespace?: string;
+    secretId: string;
+    version: number;
+}
+export interface NamespaceRecord {
+    id: string;
+    tenantId?: string;
+    slug: string;
+    label: string;
+    description?: string;
+    createdBy: string;
+    createdAt: string;
+    updatedAt: string;
+    metadata?: Record<string, unknown>;
+}
+export interface EnvironmentRecord {
+    id: string;
+    tenantId?: string;
+    namespaceId?: string;
+    name: string;
+    description?: string;
+    createdBy: string;
+    createdAt: string;
+    updatedAt: string;
+    metadata?: Record<string, unknown>;
+}
+export interface SecretRecord {
+    id: string;
+    tenantId?: string;
+    namespaceId: string;
+    namespace?: string;
+    key: string;
+    environmentId: string;
+    environment?: SecFnEnvironment;
+    description?: string;
+    tags: string[];
+    currentVersion: number;
+    revokedAt?: string;
+    createdBy: string;
+    createdAt: string;
+    updatedAt: string;
+    metadata?: Record<string, unknown>;
+}
+export interface SecretVersionRecord {
+    id: string;
+    secretId: string;
+    version: number;
+    encryptedPayload: EncryptedSecretPayload;
+    createdBy: string;
+    createdAt: string;
+}
+export interface SecretSetRecord {
+    id: string;
+    /** Optional immutable environment binding; legacy sets are unbound. */
+    environmentId?: string;
+    tenantId?: string;
+    namespaceId: string;
+    namespace?: string;
+    name: string;
+    description?: string;
+    createdBy: string;
+    createdAt: string;
+    updatedAt: string;
+}
+export interface SecretSetMemberRecord {
+    id: string;
+    setId: string;
+    secretId: string;
+    alias?: string;
+    createdAt: string;
+}
+export interface ServiceTokenRecord {
+    id: string;
+    tokenHash: string;
+    name: string;
+    tenantId?: string;
+    namespace?: string;
+    environment?: SecFnEnvironment;
+    scopes: string[];
+    expiresAt?: string;
+    revokedAt?: string;
+    createdBy: string;
+    createdAt: string;
+    lastUsedAt?: string;
+}
+export interface RoleRecord {
+    id: string;
+    name: string;
+    description?: string;
+    permissions: string[];
+    inherits?: string[];
+    createdAt: string;
+    updatedAt: string;
+    metadata?: Record<string, unknown>;
+}
+export interface RoleBindingRecord {
+    id: string;
+    principalId: string;
+    roleId: string;
+    tenantId?: string;
+    namespace?: string;
+    resourceId?: string;
+    expiresAt?: string;
+    createdAt: string;
+    createdBy?: string;
+}
+export type SecurityEventType = "auth_failure" | "rate_limit_exceeded" | "unauthorized_access" | "secret_accessed" | "permission_denied" | "suspicious_activity" | "secret_exposed" | "policy_violation";
+export interface SecurityAuditEvent {
+    id: string;
+    timestamp: string;
+    type: SecurityEventType;
+    severity: SecFnSeverity;
+    tenantId?: string;
+    namespaceId?: string;
+    namespace?: string;
+    environmentId?: string;
+    environment?: SecFnEnvironment;
+    actorId?: string;
+    ip?: string;
+    userAgent?: string;
+    resource?: string;
+    action?: string;
+    requestId?: string;
+    metadata: Record<string, unknown>;
+    resolved: boolean;
+    resolvedAt?: string;
+    resolvedBy?: string;
+    notes?: string;
+}
+export interface SecurityMetrics {
+    totalEvents: number;
+    eventsByType: Record<string, number>;
+    eventsBySeverity: Record<string, number>;
+    topActors: Array<{
+        actorId: string;
+        count: number;
+    }>;
+    topIps: Array<{
+        ip: string;
+        count: number;
+    }>;
+}
+export interface SecurityScanRun {
+    id: string;
+    tenantId?: string;
+    startedAt: string;
+    completedAt?: string;
+    target: string;
+    status: "running" | "completed" | "failed";
+    findingCount: number;
+    metadata?: Record<string, unknown>;
+}
+export interface SecurityFinding {
+    id: string;
+    ruleId: string;
+    ruleName: string;
+    severity: SecFnSeverity;
+    message: string;
+    file: string;
+    line: number;
+    column: number;
+    match?: string;
+    redactedMatch?: string;
+    fingerprint: string;
+    context?: string;
+    metadata?: Record<string, unknown>;
+}
+export interface SecurityRuleContext {
+    target: ScanTarget;
+    content: string;
+}
+export interface SecurityRule {
+    id: string;
+    name: string;
+    description: string;
+    severity: SecFnSeverity;
+    evaluate(context: SecurityRuleContext): SecurityFinding[];
+}
+export interface RulePack {
+    id: string;
+    name: string;
+    rules: SecurityRule[];
+}
+export interface ScanTarget {
+    path: string;
+    displayPath?: string;
+}
+export type ScanFormat = "table" | "json" | "sarif";
+export interface RuntimeSecretResponse {
+    key: string;
+    value: string;
+    environment?: SecFnEnvironment;
+    version: number;
+}
+export interface RuntimeSecretSetResponse {
+    name: string;
+    secrets: Record<string, string>;
+    namespace?: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAEtC,MAAM,MAAM,aAAa,GAAG,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;AAE5E,MAAM,WAAW,WAAW;IAC1B,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC/D,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC/D,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAChE,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CACjE;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,GAAG,UAAU,CAAC;CAC7B;AAED,MAAM,WAAW,WAAW;IAC1B,UAAU,CAAC,KAAK,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,SAAS,GAAG,SAAS,CAAA;KAAE,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,WAAW,CAAC;CAC7G;AAED,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,gBAAgB,CAAC;CAChC;AAED,MAAM,WAAW,wBAAyB,SAAQ,gBAAgB;IAChE,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE;QACN,KAAK,EAAE,MAAM,CAAC;QACd,oBAAoB,CAAC,EAAE,OAAO,CAAC;KAChC,CAAC;CACH;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,qBAAqB,CAAC;CACpC;AAED,MAAM,WAAW,0BAA0B;IACzC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE,cAAc,GAAG,gBAAgB,GAAG,cAAc,CAAC;IAC/D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE;QACP,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;CACH;AAED,MAAM,WAAW,sBAAsB;IACrC,SAAS,EAAE,aAAa,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;IACZ,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,gBAAgB,CAAC;IAC/B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,gBAAgB,EAAE,sBAAsB,CAAC;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,uEAAuE;IACvE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,gBAAgB,CAAC;IAC/B,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,iBAAiB,GACzB,cAAc,GACd,qBAAqB,GACrB,qBAAqB,GACrB,iBAAiB,GACjB,mBAAmB,GACnB,qBAAqB,GACrB,gBAAgB,GAChB,kBAAkB,CAAC;AAEvB,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,iBAAiB,CAAC;IACxB,QAAQ,EAAE,aAAa,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,gBAAgB,CAAC;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,QAAQ,EAAE,OAAO,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,SAAS,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACrD,MAAM,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC9C;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,SAAS,GAAG,WAAW,GAAG,QAAQ,CAAC;IAC3C,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,aAAa,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,UAAU,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,aAAa,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,mBAAmB,GAAG,eAAe,EAAE,CAAC;CAC3D;AAED,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,YAAY,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,MAAM,GAAG,OAAO,CAAC;AAEpD,MAAM,WAAW,qBAAqB;IACpC,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,gBAAgB,CAAC;IAC/B,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB"}

package/dist/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/package.json

@@ -1,18 +1,32 @@
 {
   "name": "@secfn/core",
-  "version": "0.0.1",
-  "description": "Comprehensive self-hosted security platform for developers",
-  "main": "dist/index.js",
-  "types": "dist/index.d.ts",
+  "version": "0.0.3",
+  "description": "Core contracts, encryption, scanning, and schema primitives for SecFn",
   "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./id": {
+      "types": "./dist/id.d.ts",
+      "default": "./dist/id.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
   "scripts": {
     "build": "tsc",
     "build:watch": "tsc --watch",
-    "test": "vitest",
+    "test": "vitest run",
     "test:watch": "vitest --watch",
     "test:coverage": "vitest --coverage",
-    "lint": "eslint src/**/*.ts",
-    "typecheck": "tsc --noEmit"
+    "lint": "eslint \"src/**/*.ts\"",
+    "typecheck": "tsc --noEmit",
+    "clean": "rm -rf dist"
   },
   "keywords": [
     "security",
@@ -28,26 +42,21 @@
   "author": "21n",
   "license": "MIT",
   "dependencies": {
-    "glob": "^11.0.0",
-    "simple-git": "^3.27.0"
+    "fast-glob": "^3.3.3"
   },
   "devDependencies": {
+    "@superfunctions/db": "0.3.0",
     "@types/node": "^20.0.0",
-    "typescript": "^5.6.0",
-    "vitest": "^3.2.4",
-    "fake-indexeddb": "^6.0.0",
+    "@typescript-eslint/eslint-plugin": "^8.0.0",
+    "@typescript-eslint/parser": "^8.0.0",
     "@vitest/coverage-v8": "^3.2.4",
     "eslint": "^9.0.0",
-    "@typescript-eslint/eslint-plugin": "^8.0.0",
-    "@typescript-eslint/parser": "^8.0.0"
+    "fake-indexeddb": "^6.0.0",
+    "typescript": "^5.6.0",
+    "vitest": "^3.2.4"
   },
   "peerDependencies": {
-    "@superfunctions/db": "^0.1.0"
-  },
-  "peerDependenciesMeta": {
-    "@superfunctions/db": {
-      "optional": true
-    }
+    "@superfunctions/db": "0.3.0"
   },
   "bugs": {
     "url": "https://github.com/21nCo/super-functions/issues"
@@ -55,14 +64,10 @@
   "repository": {
     "type": "git",
     "url": "git+https://github.com/21nCo/super-functions.git",
-    "directory": "secfn/typescript"
+    "directory": "secfn/core"
   },
   "publishConfig": {
     "access": "public"
   },
-  "superfunctions": {
-    "initFunction": "secFn",
-    "schemaVersion": 1,
-    "namespace": "secfn"
-  }
-}
+  "gitHead": "11f7e104d2d59f62ac94ab2dd06fc01144d0390b"
+}