@secfn/core 0.0.1 → 0.0.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (100) hide show
  1. package/README.md +30 -322
  2. package/dist/encryption.d.ts +8 -0
  3. package/dist/encryption.d.ts.map +1 -0
  4. package/dist/encryption.js +83 -0
  5. package/dist/encryption.js.map +1 -0
  6. package/dist/errors.d.ts +24 -0
  7. package/dist/errors.d.ts.map +1 -0
  8. package/dist/errors.js +47 -0
  9. package/dist/errors.js.map +1 -0
  10. package/dist/id.d.ts +3 -0
  11. package/dist/id.d.ts.map +1 -0
  12. package/dist/id.js +11 -0
  13. package/dist/id.js.map +1 -0
  14. package/dist/index.d.ts +9 -11
  15. package/dist/index.d.ts.map +1 -1
  16. package/dist/index.js +9 -11
  17. package/dist/index.js.map +1 -1
  18. package/dist/scanner/reporters.d.ts +14 -0
  19. package/dist/scanner/reporters.d.ts.map +1 -0
  20. package/dist/scanner/reporters.js +85 -0
  21. package/dist/scanner/reporters.js.map +1 -0
  22. package/dist/scanner/rules.d.ts +24 -0
  23. package/dist/scanner/rules.d.ts.map +1 -0
  24. package/dist/scanner/rules.js +141 -0
  25. package/dist/scanner/rules.js.map +1 -0
  26. package/dist/scanner/scanner.d.ts +28 -0
  27. package/dist/scanner/scanner.d.ts.map +1 -0
  28. package/dist/scanner/scanner.js +104 -0
  29. package/dist/scanner/scanner.js.map +1 -0
  30. package/dist/scanner/utils.d.ts +15 -0
  31. package/dist/scanner/utils.d.ts.map +1 -0
  32. package/dist/scanner/utils.js +41 -0
  33. package/dist/scanner/utils.js.map +1 -0
  34. package/dist/schema.d.ts +9 -0
  35. package/dist/schema.d.ts.map +1 -0
  36. package/dist/schema.js +249 -0
  37. package/dist/schema.js.map +1 -0
  38. package/dist/types.d.ts +261 -0
  39. package/dist/types.d.ts.map +1 -0
  40. package/dist/types.js +2 -0
  41. package/dist/types.js.map +1 -0
  42. package/package.json +32 -27
  43. package/dist/access-control/rbac.d.ts +0 -48
  44. package/dist/access-control/rbac.d.ts.map +0 -1
  45. package/dist/access-control/rbac.js +0 -203
  46. package/dist/access-control/rbac.js.map +0 -1
  47. package/dist/core/secfn.d.ts +0 -28
  48. package/dist/core/secfn.d.ts.map +0 -1
  49. package/dist/core/secfn.js +0 -73
  50. package/dist/core/secfn.js.map +0 -1
  51. package/dist/monitoring/security-monitor.d.ts +0 -46
  52. package/dist/monitoring/security-monitor.d.ts.map +0 -1
  53. package/dist/monitoring/security-monitor.js +0 -172
  54. package/dist/monitoring/security-monitor.js.map +0 -1
  55. package/dist/rate-limiting/rate-limiter.d.ts +0 -31
  56. package/dist/rate-limiting/rate-limiter.d.ts.map +0 -1
  57. package/dist/rate-limiting/rate-limiter.js +0 -140
  58. package/dist/rate-limiting/rate-limiter.js.map +0 -1
  59. package/dist/scanning/patterns.d.ts +0 -3
  60. package/dist/scanning/patterns.d.ts.map +0 -1
  61. package/dist/scanning/patterns.js +0 -139
  62. package/dist/scanning/patterns.js.map +0 -1
  63. package/dist/scanning/scanner.d.ts +0 -36
  64. package/dist/scanning/scanner.d.ts.map +0 -1
  65. package/dist/scanning/scanner.js +0 -152
  66. package/dist/scanning/scanner.js.map +0 -1
  67. package/dist/secrets/encryption.d.ts +0 -17
  68. package/dist/secrets/encryption.d.ts.map +0 -1
  69. package/dist/secrets/encryption.js +0 -47
  70. package/dist/secrets/encryption.js.map +0 -1
  71. package/dist/secrets/vault.d.ts +0 -43
  72. package/dist/secrets/vault.d.ts.map +0 -1
  73. package/dist/secrets/vault.js +0 -126
  74. package/dist/secrets/vault.js.map +0 -1
  75. package/dist/storage/indexeddb-storage.d.ts +0 -37
  76. package/dist/storage/indexeddb-storage.d.ts.map +0 -1
  77. package/dist/storage/indexeddb-storage.js +0 -284
  78. package/dist/storage/indexeddb-storage.js.map +0 -1
  79. package/dist/types/index.d.ts +0 -189
  80. package/dist/types/index.d.ts.map +0 -1
  81. package/dist/types/index.js +0 -2
  82. package/dist/types/index.js.map +0 -1
  83. package/dist/utils/helpers.d.ts +0 -8
  84. package/dist/utils/helpers.d.ts.map +0 -1
  85. package/dist/utils/helpers.js +0 -73
  86. package/dist/utils/helpers.js.map +0 -1
  87. package/examples/basic-usage.ts +0 -143
  88. package/src/access-control/rbac.ts +0 -271
  89. package/src/core/secfn.ts +0 -90
  90. package/src/index.ts +0 -27
  91. package/src/monitoring/security-monitor.ts +0 -245
  92. package/src/rate-limiting/rate-limiter.ts +0 -181
  93. package/src/scanning/patterns.ts +0 -140
  94. package/src/scanning/scanner.ts +0 -199
  95. package/src/secrets/encryption.ts +0 -74
  96. package/src/secrets/vault.ts +0 -187
  97. package/src/storage/indexeddb-storage.ts +0 -355
  98. package/src/types/index.ts +0 -213
  99. package/src/utils/helpers.ts +0 -84
  100. package/tsconfig.json +0 -26
@@ -1,48 +0,0 @@
1
- import type { Role, AccessRequest } from '../types/index.js';
2
- import type { IndexedDBStorage } from '../storage/indexeddb-storage.js';
3
- export interface AccessControlConfig {
4
- storage: IndexedDBStorage;
5
- cache?: {
6
- ttl: number;
7
- maxSize: number;
8
- };
9
- }
10
- export interface CreateRoleOptions {
11
- name: string;
12
- description: string;
13
- permissions: string[];
14
- inherits?: string[];
15
- metadata?: Record<string, unknown>;
16
- }
17
- export interface AssignRoleOptions {
18
- resourceIds?: string[];
19
- expiresAt?: number;
20
- }
21
- export declare class AccessControl {
22
- private storage;
23
- private cache;
24
- private cacheTTL;
25
- private maxCacheSize;
26
- constructor(config: AccessControlConfig);
27
- createRole(options: CreateRoleOptions): Promise<string>;
28
- getRole(id: string): Promise<Role | null>;
29
- getRoleByName(name: string): Promise<Role | null>;
30
- listRoles(): Promise<Role[]>;
31
- updateRole(id: string, updates: Partial<CreateRoleOptions>): Promise<void>;
32
- deleteRole(id: string): Promise<void>;
33
- assignRole(userId: string, roleId: string, options?: AssignRoleOptions): Promise<void>;
34
- removeRole(userId: string, roleId: string): Promise<void>;
35
- getUserRoles(userId: string): Promise<Role[]>;
36
- getUserPermissions(userId: string): Promise<string[]>;
37
- check(request: AccessRequest): Promise<boolean>;
38
- private evaluateAccess;
39
- private checkRolePermission;
40
- private collectPermissions;
41
- private matchesPermission;
42
- private getCacheKey;
43
- private getCached;
44
- private setCached;
45
- private invalidateCache;
46
- private invalidateCacheForUser;
47
- }
48
- //# sourceMappingURL=rbac.d.ts.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"rbac.d.ts","sourceRoot":"","sources":["../../src/access-control/rbac.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAY,aAAa,EAAE,MAAM,mBAAmB,CAAC;AACvE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAGxE,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,gBAAgB,CAAC;IAC1B,KAAK,CAAC,EAAE;QACN,GAAG,EAAE,MAAM,CAAC;QACZ,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;CACH;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,iBAAiB;IAChC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAOD,qBAAa,aAAa;IACxB,OAAO,CAAC,OAAO,CAAmB;IAClC,OAAO,CAAC,KAAK,CAA0B;IACvC,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,YAAY,CAAS;gBAEjB,MAAM,EAAE,mBAAmB;IAOjC,UAAU,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC;IAgBvD,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAIzC,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAKjD,SAAS,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;IAI5B,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,iBAAiB,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAiB1E,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKrC,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAE,iBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC;IAkB1F,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKzD,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAkB7C,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAWrD,KAAK,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC;YAcvC,cAAc;YA0Bd,mBAAmB;YAanB,kBAAkB;IAehC,OAAO,CAAC,iBAAiB;IAgBzB,OAAO,CAAC,WAAW;IAInB,OAAO,CAAC,SAAS;IAajB,OAAO,CAAC,SAAS;IAYjB,OAAO,CAAC,eAAe;IAIvB,OAAO,CAAC,sBAAsB;CAO/B"}
@@ -1,203 +0,0 @@
1
- import { generateId } from '../utils/helpers.js';
2
- export class AccessControl {
3
- storage;
4
- cache;
5
- cacheTTL;
6
- maxCacheSize;
7
- constructor(config) {
8
- this.storage = config.storage;
9
- this.cache = new Map();
10
- this.cacheTTL = config.cache?.ttl || 300000;
11
- this.maxCacheSize = config.cache?.maxSize || 1000;
12
- }
13
- async createRole(options) {
14
- const role = {
15
- id: generateId('role'),
16
- name: options.name,
17
- description: options.description,
18
- permissions: options.permissions,
19
- inherits: options.inherits,
20
- metadata: options.metadata,
21
- createdAt: Date.now(),
22
- updatedAt: Date.now(),
23
- };
24
- await this.storage.saveRole(role);
25
- return role.id;
26
- }
27
- async getRole(id) {
28
- return await this.storage.getRole(id);
29
- }
30
- async getRoleByName(name) {
31
- const roles = await this.storage.listRoles();
32
- return roles.find(r => r.name === name) || null;
33
- }
34
- async listRoles() {
35
- return await this.storage.listRoles();
36
- }
37
- async updateRole(id, updates) {
38
- const role = await this.storage.getRole(id);
39
- if (!role) {
40
- throw new Error(`Role ${id} not found`);
41
- }
42
- if (updates.name)
43
- role.name = updates.name;
44
- if (updates.description)
45
- role.description = updates.description;
46
- if (updates.permissions)
47
- role.permissions = updates.permissions;
48
- if (updates.inherits)
49
- role.inherits = updates.inherits;
50
- if (updates.metadata)
51
- role.metadata = updates.metadata;
52
- role.updatedAt = Date.now();
53
- await this.storage.saveRole(role);
54
- this.invalidateCache();
55
- }
56
- async deleteRole(id) {
57
- await this.storage.deleteRole(id);
58
- this.invalidateCache();
59
- }
60
- async assignRole(userId, roleId, options = {}) {
61
- const role = await this.storage.getRole(roleId);
62
- if (!role) {
63
- throw new Error(`Role ${roleId} not found`);
64
- }
65
- const userRole = {
66
- userId,
67
- roleId,
68
- resourceIds: options.resourceIds,
69
- expiresAt: options.expiresAt,
70
- assignedAt: Date.now(),
71
- };
72
- await this.storage.assignUserRole(userRole);
73
- this.invalidateCacheForUser(userId);
74
- }
75
- async removeRole(userId, roleId) {
76
- await this.storage.removeUserRole(userId, roleId);
77
- this.invalidateCacheForUser(userId);
78
- }
79
- async getUserRoles(userId) {
80
- const userRoles = await this.storage.getUserRoles(userId);
81
- const roles = [];
82
- for (const userRole of userRoles) {
83
- if (userRole.expiresAt && Date.now() > userRole.expiresAt) {
84
- continue;
85
- }
86
- const role = await this.storage.getRole(userRole.roleId);
87
- if (role) {
88
- roles.push(role);
89
- }
90
- }
91
- return roles;
92
- }
93
- async getUserPermissions(userId) {
94
- const roles = await this.getUserRoles(userId);
95
- const permissions = new Set();
96
- for (const role of roles) {
97
- await this.collectPermissions(role, permissions);
98
- }
99
- return Array.from(permissions);
100
- }
101
- async check(request) {
102
- const cacheKey = this.getCacheKey(request);
103
- const cached = this.getCached(cacheKey);
104
- if (cached !== null) {
105
- return cached;
106
- }
107
- const allowed = await this.evaluateAccess(request);
108
- this.setCached(cacheKey, allowed);
109
- return allowed;
110
- }
111
- async evaluateAccess(request) {
112
- const userRoles = await this.storage.getUserRoles(request.userId);
113
- for (const userRole of userRoles) {
114
- if (userRole.expiresAt && Date.now() > userRole.expiresAt) {
115
- continue;
116
- }
117
- if (userRole.resourceIds && request.resourceId) {
118
- if (!userRole.resourceIds.includes(request.resourceId)) {
119
- continue;
120
- }
121
- }
122
- const role = await this.storage.getRole(userRole.roleId);
123
- if (!role)
124
- continue;
125
- const hasPermission = await this.checkRolePermission(role, request);
126
- if (hasPermission) {
127
- return true;
128
- }
129
- }
130
- return false;
131
- }
132
- async checkRolePermission(role, request) {
133
- const allPermissions = new Set();
134
- await this.collectPermissions(role, allPermissions);
135
- for (const permission of allPermissions) {
136
- if (this.matchesPermission(permission, request.action)) {
137
- return true;
138
- }
139
- }
140
- return false;
141
- }
142
- async collectPermissions(role, collected) {
143
- for (const permission of role.permissions) {
144
- collected.add(permission);
145
- }
146
- if (role.inherits) {
147
- for (const inheritedRoleId of role.inherits) {
148
- const inheritedRole = await this.storage.getRole(inheritedRoleId);
149
- if (inheritedRole) {
150
- await this.collectPermissions(inheritedRole, collected);
151
- }
152
- }
153
- }
154
- }
155
- matchesPermission(permission, action) {
156
- if (permission === '*:*')
157
- return true;
158
- const [permResource, permAction] = permission.split(':');
159
- const [reqResource, reqAction] = action.split(':');
160
- if (!permResource || !permAction || !reqResource || !reqAction) {
161
- return false;
162
- }
163
- const resourceMatch = permResource === '*' || permResource === reqResource;
164
- const actionMatch = permAction === '*' || permAction === reqAction;
165
- return resourceMatch && actionMatch;
166
- }
167
- getCacheKey(request) {
168
- return `${request.userId}:${request.action}:${request.resourceId || '*'}`;
169
- }
170
- getCached(key) {
171
- const entry = this.cache.get(key);
172
- if (!entry)
173
- return null;
174
- const age = Date.now() - entry.timestamp;
175
- if (age > this.cacheTTL) {
176
- this.cache.delete(key);
177
- return null;
178
- }
179
- return entry.allowed;
180
- }
181
- setCached(key, allowed) {
182
- if (this.cache.size >= this.maxCacheSize) {
183
- const firstKey = this.cache.keys().next().value;
184
- if (firstKey)
185
- this.cache.delete(firstKey);
186
- }
187
- this.cache.set(key, {
188
- allowed,
189
- timestamp: Date.now(),
190
- });
191
- }
192
- invalidateCache() {
193
- this.cache.clear();
194
- }
195
- invalidateCacheForUser(userId) {
196
- for (const [key] of this.cache) {
197
- if (key.startsWith(`${userId}:`)) {
198
- this.cache.delete(key);
199
- }
200
- }
201
- }
202
- }
203
- //# sourceMappingURL=rbac.js.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"rbac.js","sourceRoot":"","sources":["../../src/access-control/rbac.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AA4BjD,MAAM,OAAO,aAAa;IAChB,OAAO,CAAmB;IAC1B,KAAK,CAA0B;IAC/B,QAAQ,CAAS;IACjB,YAAY,CAAS;IAE7B,YAAY,MAA2B;QACrC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAC9B,IAAI,CAAC,KAAK,GAAG,IAAI,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,KAAK,EAAE,GAAG,IAAI,MAAM,CAAC;QAC5C,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,KAAK,EAAE,OAAO,IAAI,IAAI,CAAC;IACpD,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,OAA0B;QACzC,MAAM,IAAI,GAAS;YACjB,EAAE,EAAE,UAAU,CAAC,MAAM,CAAC;YACtB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC;QAEF,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAClC,OAAO,IAAI,CAAC,EAAE,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,EAAU;QACtB,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,IAAY;QAC9B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QAC7C,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,SAAS;QACb,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,EAAU,EAAE,OAAmC;QAC9D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC5C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QAC1C,CAAC;QAED,IAAI,OAAO,CAAC,IAAI;YAAE,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QAC3C,IAAI,OAAO,CAAC,WAAW;YAAE,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QAChE,IAAI,OAAO,CAAC,WAAW;YAAE,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QAChE,IAAI,OAAO,CAAC,QAAQ;YAAE,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QACvD,IAAI,OAAO,CAAC,QAAQ;YAAE,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QACvD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE5B,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC,eAAe,EAAE,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,EAAU;QACzB,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAClC,IAAI,CAAC,eAAe,EAAE,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAAc,EAAE,MAAc,EAAE,UAA6B,EAAE;QAC9E,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAChD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CAAC,QAAQ,MAAM,YAAY,CAAC,CAAC;QAC9C,CAAC;QAED,MAAM,QAAQ,GAAa;YACzB,MAAM;YACN,MAAM;YACN,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;SACvB,CAAC;QAEF,MAAM,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QAC5C,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAAc,EAAE,MAAc;QAC7C,MAAM,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAClD,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,MAAc;QAC/B,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAC1D,MAAM,KAAK,GAAW,EAAE,CAAC;QAEzB,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,IAAI,QAAQ,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAC;gBAC1D,SAAS;YACX,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACzD,IAAI,IAAI,EAAE,CAAC;gBACT,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnB,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,MAAc;QACrC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAC9C,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;QAEtC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QACnD,CAAC;QAED,OAAO,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,OAAsB;QAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAExC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QACnD,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAElC,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,OAAsB;QACjD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAElE,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,IAAI,QAAQ,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAC;gBAC1D,SAAS;YACX,CAAC;YAED,IAAI,QAAQ,CAAC,WAAW,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;gBAC/C,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;oBACvD,SAAS;gBACX,CAAC;YACH,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACzD,IAAI,CAAC,IAAI;gBAAE,SAAS;YAEpB,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACpE,IAAI,aAAa,EAAE,CAAC;gBAClB,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAAC,IAAU,EAAE,OAAsB;QAClE,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;QACzC,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;QAEpD,KAAK,MAAM,UAAU,IAAI,cAAc,EAAE,CAAC;YACxC,IAAI,IAAI,CAAC,iBAAiB,CAAC,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBACvD,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAAC,IAAU,EAAE,SAAsB;QACjE,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YAC1C,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC5B,CAAC;QAED,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,KAAK,MAAM,eAAe,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC5C,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;gBAClE,IAAI,aAAa,EAAE,CAAC;oBAClB,MAAM,IAAI,CAAC,kBAAkB,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;gBAC1D,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAEO,iBAAiB,CAAC,UAAkB,EAAE,MAAc;QAC1D,IAAI,UAAU,KAAK,KAAK;YAAE,OAAO,IAAI,CAAC;QAEtC,MAAM,CAAC,YAAY,EAAE,UAAU,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACzD,MAAM,CAAC,WAAW,EAAE,SAAS,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAEnD,IAAI,CAAC,YAAY,IAAI,CAAC,UAAU,IAAI,CAAC,WAAW,IAAI,CAAC,SAAS,EAAE,CAAC;YAC/D,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,aAAa,GAAG,YAAY,KAAK,GAAG,IAAI,YAAY,KAAK,WAAW,CAAC;QAC3E,MAAM,WAAW,GAAG,UAAU,KAAK,GAAG,IAAI,UAAU,KAAK,SAAS,CAAC;QAEnE,OAAO,aAAa,IAAI,WAAW,CAAC;IACtC,CAAC;IAEO,WAAW,CAAC,OAAsB;QACxC,OAAO,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,UAAU,IAAI,GAAG,EAAE,CAAC;IAC5E,CAAC;IAEO,SAAS,CAAC,GAAW;QAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QAExB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,SAAS,CAAC;QACzC,IAAI,GAAG,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YACxB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACvB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,KAAK,CAAC,OAAO,CAAC;IACvB,CAAC;IAEO,SAAS,CAAC,GAAW,EAAE,OAAgB;QAC7C,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;YAChD,IAAI,QAAQ;gBAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC5C,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE;YAClB,OAAO;YACP,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC,CAAC;IACL,CAAC;IAEO,eAAe;QACrB,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;IAEO,sBAAsB,CAAC,MAAc;QAC3C,KAAK,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC/B,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC;gBACjC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;IACH,CAAC;CACF"}
@@ -1,28 +0,0 @@
1
- import { IndexedDBStorage } from '../storage/indexeddb-storage.js';
2
- import { SecretsVault, type SecretsVaultConfig } from '../secrets/vault.js';
3
- import { SecretScanner, type SecretScannerConfig } from '../scanning/scanner.js';
4
- import { AccessControl, type AccessControlConfig } from '../access-control/rbac.js';
5
- import { RateLimiter, type RateLimiterConfig } from '../rate-limiting/rate-limiter.js';
6
- import { SecurityMonitor, type MonitoringConfig } from '../monitoring/security-monitor.js';
7
- import type { StorageConfig } from '../types/index.js';
8
- export interface SecFnConfig {
9
- storage?: StorageConfig;
10
- masterKey?: string;
11
- namespace?: string;
12
- }
13
- export declare class SecFn {
14
- private storage;
15
- private masterKey?;
16
- private initialized;
17
- constructor(config?: SecFnConfig);
18
- initialize(): Promise<void>;
19
- createSecretsVault(config?: Partial<Omit<SecretsVaultConfig, 'storage'>>): SecretsVault;
20
- createSecretScanner(config?: Partial<Omit<SecretScannerConfig, 'storage'>>): SecretScanner;
21
- createAccessControl(config?: Partial<Omit<AccessControlConfig, 'storage'>>): AccessControl;
22
- createRateLimiter(config: Omit<RateLimiterConfig, 'storage'>): RateLimiter;
23
- createMonitoring(config?: Partial<Omit<MonitoringConfig, 'storage'>>): SecurityMonitor;
24
- destroy(): Promise<void>;
25
- getStorage(): IndexedDBStorage;
26
- }
27
- export declare function createSecFn(config?: SecFnConfig): SecFn;
28
- //# sourceMappingURL=secfn.d.ts.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"secfn.d.ts","sourceRoot":"","sources":["../../src/core/secfn.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,EAAE,YAAY,EAAE,KAAK,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAC5E,OAAO,EAAE,aAAa,EAAE,KAAK,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AACjF,OAAO,EAAE,aAAa,EAAE,KAAK,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AACpF,OAAO,EAAE,WAAW,EAAE,KAAK,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACvF,OAAO,EAAE,eAAe,EAAE,KAAK,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AAC3F,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAEvD,MAAM,WAAW,WAAW;IAC1B,OAAO,CAAC,EAAE,aAAa,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,qBAAa,KAAK;IAChB,OAAO,CAAC,OAAO,CAAmB;IAClC,OAAO,CAAC,SAAS,CAAC,CAAS;IAC3B,OAAO,CAAC,WAAW,CAAkB;gBAEzB,MAAM,GAAE,WAAgB;IAM9B,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAMjC,kBAAkB,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,kBAAkB,EAAE,SAAS,CAAC,CAAC,GAAG,YAAY;IAgBvF,mBAAmB,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,mBAAmB,EAAE,SAAS,CAAC,CAAC,GAAG,aAAa;IAO1F,mBAAmB,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,mBAAmB,EAAE,SAAS,CAAC,CAAC,GAAG,aAAa;IAO1F,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,iBAAiB,EAAE,SAAS,CAAC,GAAG,WAAW;IAQ1E,gBAAgB,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,gBAAgB,EAAE,SAAS,CAAC,CAAC,GAAG,eAAe;IAQhF,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAK9B,UAAU,IAAI,gBAAgB;CAG/B;AAED,wBAAgB,WAAW,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,KAAK,CAEvD"}
@@ -1,73 +0,0 @@
1
- import { IndexedDBStorage } from '../storage/indexeddb-storage.js';
2
- import { SecretsVault } from '../secrets/vault.js';
3
- import { SecretScanner } from '../scanning/scanner.js';
4
- import { AccessControl } from '../access-control/rbac.js';
5
- import { RateLimiter } from '../rate-limiting/rate-limiter.js';
6
- import { SecurityMonitor } from '../monitoring/security-monitor.js';
7
- export class SecFn {
8
- storage;
9
- masterKey;
10
- initialized = false;
11
- constructor(config = {}) {
12
- const dbName = config.storage?.dbName || config.namespace || 'secfn';
13
- this.storage = new IndexedDBStorage(dbName);
14
- this.masterKey = config.masterKey;
15
- }
16
- async initialize() {
17
- if (this.initialized)
18
- return;
19
- await this.storage.initialize();
20
- this.initialized = true;
21
- }
22
- createSecretsVault(config) {
23
- if (!this.masterKey && !config?.encryption?.masterKey) {
24
- throw new Error('Master key is required for secrets vault');
25
- }
26
- return new SecretsVault({
27
- storage: this.storage,
28
- encryption: {
29
- algorithm: 'AES-256-GCM',
30
- masterKey: config?.encryption?.masterKey || this.masterKey,
31
- ...config?.encryption,
32
- },
33
- rotation: config?.rotation,
34
- });
35
- }
36
- createSecretScanner(config) {
37
- return new SecretScanner({
38
- ...config,
39
- storage: this.storage,
40
- });
41
- }
42
- createAccessControl(config) {
43
- return new AccessControl({
44
- storage: this.storage,
45
- cache: config?.cache,
46
- });
47
- }
48
- createRateLimiter(config) {
49
- return new RateLimiter({
50
- storage: this.storage,
51
- rules: config.rules,
52
- onLimitExceeded: config.onLimitExceeded,
53
- });
54
- }
55
- createMonitoring(config) {
56
- return new SecurityMonitor({
57
- storage: this.storage,
58
- retention: config?.retention,
59
- anomalyDetection: config?.anomalyDetection,
60
- });
61
- }
62
- async destroy() {
63
- await this.storage.destroy();
64
- this.initialized = false;
65
- }
66
- getStorage() {
67
- return this.storage;
68
- }
69
- }
70
- export function createSecFn(config) {
71
- return new SecFn(config);
72
- }
73
- //# sourceMappingURL=secfn.js.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"secfn.js","sourceRoot":"","sources":["../../src/core/secfn.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,EAAE,YAAY,EAA2B,MAAM,qBAAqB,CAAC;AAC5E,OAAO,EAAE,aAAa,EAA4B,MAAM,wBAAwB,CAAC;AACjF,OAAO,EAAE,aAAa,EAA4B,MAAM,2BAA2B,CAAC;AACpF,OAAO,EAAE,WAAW,EAA0B,MAAM,kCAAkC,CAAC;AACvF,OAAO,EAAE,eAAe,EAAyB,MAAM,mCAAmC,CAAC;AAS3F,MAAM,OAAO,KAAK;IACR,OAAO,CAAmB;IAC1B,SAAS,CAAU;IACnB,WAAW,GAAY,KAAK,CAAC;IAErC,YAAY,SAAsB,EAAE;QAClC,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,EAAE,MAAM,IAAI,MAAM,CAAC,SAAS,IAAI,OAAO,CAAC;QACrE,IAAI,CAAC,OAAO,GAAG,IAAI,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,UAAU;QACd,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO;QAC7B,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;QAChC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;IAC1B,CAAC;IAED,kBAAkB,CAAC,MAAqD;QACtE,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC9D,CAAC;QAED,OAAO,IAAI,YAAY,CAAC;YACtB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,UAAU,EAAE;gBACV,SAAS,EAAE,aAAa;gBACxB,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,IAAI,IAAI,CAAC,SAAU;gBAC3D,GAAG,MAAM,EAAE,UAAU;aACtB;YACD,QAAQ,EAAE,MAAM,EAAE,QAAQ;SAC3B,CAAC,CAAC;IACL,CAAC;IAED,mBAAmB,CAAC,MAAsD;QACxE,OAAO,IAAI,aAAa,CAAC;YACvB,GAAG,MAAM;YACT,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAC,CAAC;IACL,CAAC;IAED,mBAAmB,CAAC,MAAsD;QACxE,OAAO,IAAI,aAAa,CAAC;YACvB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,KAAK,EAAE,MAAM,EAAE,KAAK;SACrB,CAAC,CAAC;IACL,CAAC;IAED,iBAAiB,CAAC,MAA0C;QAC1D,OAAO,IAAI,WAAW,CAAC;YACrB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,eAAe,EAAE,MAAM,CAAC,eAAe;SACxC,CAAC,CAAC;IACL,CAAC;IAED,gBAAgB,CAAC,MAAmD;QAClE,OAAO,IAAI,eAAe,CAAC;YACzB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,SAAS,EAAE,MAAM,EAAE,SAAS;YAC5B,gBAAgB,EAAE,MAAM,EAAE,gBAAgB;SAC3C,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,OAAO;QACX,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QAC7B,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;IAC3B,CAAC;IAED,UAAU;QACR,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;CACF;AAED,MAAM,UAAU,WAAW,CAAC,MAAoB;IAC9C,OAAO,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC;AAC3B,CAAC"}
@@ -1,46 +0,0 @@
1
- import type { SecurityEvent, EventQuery, SecurityMetrics, TimeRange, SecurityEventType, Severity } from '../types/index.js';
2
- import type { IndexedDBStorage } from '../storage/indexeddb-storage.js';
3
- export interface MonitoringConfig {
4
- storage: IndexedDBStorage;
5
- retention?: number;
6
- anomalyDetection?: {
7
- enabled: boolean;
8
- sensitivity: number;
9
- };
10
- }
11
- export interface LogEventOptions {
12
- type: SecurityEventType;
13
- severity: Severity;
14
- userId?: string;
15
- ip: string;
16
- userAgent?: string;
17
- resource?: string;
18
- action?: string;
19
- metadata?: Record<string, unknown>;
20
- }
21
- export interface ResolveEventOptions {
22
- resolvedBy: string;
23
- notes?: string;
24
- }
25
- export declare class SecurityMonitor {
26
- private storage;
27
- private retention;
28
- private anomalyDetection;
29
- constructor(config: MonitoringConfig);
30
- logEvent(options: LogEventOptions): Promise<string>;
31
- queryEvents(query: EventQuery): Promise<SecurityEvent[]>;
32
- getEvent(id: string): Promise<SecurityEvent | null>;
33
- resolveEvent(id: string, options: ResolveEventOptions): Promise<void>;
34
- getMetrics(range: TimeRange): Promise<SecurityMetrics>;
35
- getRecentEvents(limit?: number): Promise<SecurityEvent[]>;
36
- getUnresolvedEvents(): Promise<SecurityEvent[]>;
37
- getCriticalEvents(hours?: number): Promise<SecurityEvent[]>;
38
- getEventsByUser(userId: string, limit?: number): Promise<SecurityEvent[]>;
39
- getEventsByIP(ip: string, limit?: number): Promise<SecurityEvent[]>;
40
- cleanup(): Promise<void>;
41
- private detectAnomalies;
42
- private calculateFailureRate;
43
- private analyzeUserActivity;
44
- private detectTimeAnomalies;
45
- }
46
- //# sourceMappingURL=security-monitor.d.ts.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"security-monitor.d.ts","sourceRoot":"","sources":["../../src/monitoring/security-monitor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,eAAe,EAAE,SAAS,EAAE,iBAAiB,EAAE,QAAQ,EAAmB,MAAM,mBAAmB,CAAC;AAC7I,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAGxE,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,gBAAgB,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE;QACjB,OAAO,EAAE,OAAO,CAAC;QACjB,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC;CACH;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,iBAAiB,CAAC;IACxB,QAAQ,EAAE,QAAQ,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,qBAAa,eAAe;IAC1B,OAAO,CAAC,OAAO,CAAmB;IAClC,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,gBAAgB,CAA4C;gBAExD,MAAM,EAAE,gBAAgB;IAS9B,QAAQ,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC;IAoBnD,WAAW,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAIxD,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IAKnD,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC;IAgBrE,UAAU,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,eAAe,CAAC;IAgBtD,eAAe,CAAC,KAAK,SAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAItD,mBAAmB,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;IAI/C,iBAAiB,CAAC,KAAK,SAAK,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAQvD,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,SAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAOtE,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,SAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAOhE,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;YAIhB,eAAe;IAmC7B,OAAO,CAAC,oBAAoB;IAc5B,OAAO,CAAC,mBAAmB;IA4C3B,OAAO,CAAC,mBAAmB;CAa5B"}
@@ -1,172 +0,0 @@
1
- import { generateId } from '../utils/helpers.js';
2
- export class SecurityMonitor {
3
- storage;
4
- retention;
5
- anomalyDetection;
6
- constructor(config) {
7
- this.storage = config.storage;
8
- this.retention = config.retention || 90 * 24 * 60 * 60 * 1000;
9
- this.anomalyDetection = config.anomalyDetection || {
10
- enabled: false,
11
- sensitivity: 0.8,
12
- };
13
- }
14
- async logEvent(options) {
15
- const event = {
16
- id: generateId('event'),
17
- timestamp: Date.now(),
18
- type: options.type,
19
- severity: options.severity,
20
- userId: options.userId,
21
- ip: options.ip,
22
- userAgent: options.userAgent,
23
- resource: options.resource,
24
- action: options.action,
25
- metadata: options.metadata || {},
26
- resolved: false,
27
- };
28
- await this.storage.logSecurityEvent(event);
29
- return event.id;
30
- }
31
- async queryEvents(query) {
32
- return await this.storage.queryEvents(query);
33
- }
34
- async getEvent(id) {
35
- const events = await this.storage.queryEvents({ limit: 1 });
36
- return events.find(e => e.id === id) || null;
37
- }
38
- async resolveEvent(id, options) {
39
- const events = await this.storage.queryEvents({});
40
- const event = events.find(e => e.id === id);
41
- if (!event) {
42
- throw new Error(`Event ${id} not found`);
43
- }
44
- event.resolved = true;
45
- event.resolvedAt = Date.now();
46
- event.resolvedBy = options.resolvedBy;
47
- event.notes = options.notes;
48
- await this.storage.logSecurityEvent(event);
49
- }
50
- async getMetrics(range) {
51
- const metrics = await this.storage.getMetrics(range);
52
- if (this.anomalyDetection.enabled) {
53
- const events = await this.storage.queryEvents({
54
- startDate: range.start,
55
- endDate: range.end,
56
- });
57
- const anomalies = await this.detectAnomalies(events);
58
- metrics.anomalies = anomalies;
59
- }
60
- return metrics;
61
- }
62
- async getRecentEvents(limit = 100) {
63
- return await this.storage.queryEvents({ limit });
64
- }
65
- async getUnresolvedEvents() {
66
- return await this.storage.queryEvents({ resolved: false });
67
- }
68
- async getCriticalEvents(hours = 24) {
69
- const startDate = Date.now() - hours * 60 * 60 * 1000;
70
- return await this.storage.queryEvents({
71
- severity: 'critical',
72
- startDate,
73
- });
74
- }
75
- async getEventsByUser(userId, limit = 100) {
76
- return await this.storage.queryEvents({
77
- userId,
78
- limit,
79
- });
80
- }
81
- async getEventsByIP(ip, limit = 100) {
82
- return await this.storage.queryEvents({
83
- ip,
84
- limit,
85
- });
86
- }
87
- async cleanup() {
88
- await this.storage.cleanup(this.retention);
89
- }
90
- async detectAnomalies(events) {
91
- const anomalies = [];
92
- const authFailures = events.filter(e => e.type === 'auth_failure');
93
- if (authFailures.length > 0) {
94
- const failureRate = this.calculateFailureRate(events, authFailures);
95
- if (failureRate > this.anomalyDetection.sensitivity) {
96
- anomalies.push({
97
- id: generateId('anomaly'),
98
- timestamp: Date.now(),
99
- type: 'spike_in_failures',
100
- score: failureRate,
101
- description: `Unusual spike in authentication failures: ${(failureRate * 100).toFixed(1)}%`,
102
- relatedEvents: authFailures.slice(0, 10).map(e => e.id),
103
- });
104
- }
105
- }
106
- const userActivityPatterns = this.analyzeUserActivity(events);
107
- for (const pattern of userActivityPatterns) {
108
- if (pattern.score > this.anomalyDetection.sensitivity) {
109
- anomalies.push({
110
- id: generateId('anomaly'),
111
- timestamp: Date.now(),
112
- type: 'unusual_access_pattern',
113
- score: pattern.score,
114
- description: pattern.description,
115
- relatedEvents: pattern.eventIds,
116
- });
117
- }
118
- }
119
- return anomalies;
120
- }
121
- calculateFailureRate(totalEvents, failures) {
122
- if (totalEvents.length === 0)
123
- return 0;
124
- const authRelatedEvents = totalEvents.filter(e => e.type === 'auth_failure' ||
125
- e.action?.includes('auth') ||
126
- e.action?.includes('login'));
127
- if (authRelatedEvents.length === 0)
128
- return 0;
129
- return failures.length / authRelatedEvents.length;
130
- }
131
- analyzeUserActivity(events) {
132
- const patterns = [];
133
- const userGroups = new Map();
134
- for (const event of events) {
135
- if (!event.userId)
136
- continue;
137
- const userEvents = userGroups.get(event.userId) || [];
138
- userEvents.push(event);
139
- userGroups.set(event.userId, userEvents);
140
- }
141
- for (const [userId, userEvents] of userGroups) {
142
- const uniqueIPs = new Set(userEvents.map(e => e.ip));
143
- if (uniqueIPs.size > 5) {
144
- patterns.push({
145
- score: Math.min(uniqueIPs.size / 10, 1.0),
146
- description: `User ${userId} accessed from ${uniqueIPs.size} different IP addresses`,
147
- eventIds: userEvents.slice(0, 10).map(e => e.id),
148
- });
149
- }
150
- const timeGaps = this.detectTimeAnomalies(userEvents);
151
- if (timeGaps.length > 0) {
152
- patterns.push({
153
- score: 0.7,
154
- description: `Unusual access times detected for user ${userId}`,
155
- eventIds: timeGaps.map(e => e.id),
156
- });
157
- }
158
- }
159
- return patterns;
160
- }
161
- detectTimeAnomalies(events) {
162
- const anomalous = [];
163
- for (const event of events) {
164
- const hour = new Date(event.timestamp).getHours();
165
- if (hour >= 2 && hour <= 5) {
166
- anomalous.push(event);
167
- }
168
- }
169
- return anomalous;
170
- }
171
- }
172
- //# sourceMappingURL=security-monitor.js.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"security-monitor.js","sourceRoot":"","sources":["../../src/monitoring/security-monitor.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AA2BjD,MAAM,OAAO,eAAe;IAClB,OAAO,CAAmB;IAC1B,SAAS,CAAS;IAClB,gBAAgB,CAA4C;IAEpE,YAAY,MAAwB;QAClC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAC9B,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;QAC9D,IAAI,CAAC,gBAAgB,GAAG,MAAM,CAAC,gBAAgB,IAAI;YACjD,OAAO,EAAE,KAAK;YACd,WAAW,EAAE,GAAG;SACjB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,OAAwB;QACrC,MAAM,KAAK,GAAkB;YAC3B,EAAE,EAAE,UAAU,CAAC,OAAO,CAAC;YACvB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,EAAE;YAChC,QAAQ,EAAE,KAAK;SAChB,CAAC;QAEF,MAAM,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAE3C,OAAO,KAAK,CAAC,EAAE,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,KAAiB;QACjC,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,EAAU;QACvB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QAC5D,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,IAAI,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,EAAU,EAAE,OAA4B;QACzD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAE5C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;QAC3C,CAAC;QAED,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC;QACtB,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC9B,KAAK,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QACtC,KAAK,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAE5B,MAAM,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,KAAgB;QAC/B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAErD,IAAI,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC;YAClC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;gBAC5C,SAAS,EAAE,KAAK,CAAC,KAAK;gBACtB,OAAO,EAAE,KAAK,CAAC,GAAG;aACnB,CAAC,CAAC;YAEH,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;YACrD,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC;QAChC,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,KAAK,GAAG,GAAG;QAC/B,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,mBAAmB;QACvB,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,KAAK,GAAG,EAAE;QAChC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;QACtD,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;YACpC,QAAQ,EAAE,UAAU;YACpB,SAAS;SACV,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,MAAc,EAAE,KAAK,GAAG,GAAG;QAC/C,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;YACpC,MAAM;YACN,KAAK;SACN,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,EAAU,EAAE,KAAK,GAAG,GAAG;QACzC,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;YACpC,EAAE;YACF,KAAK;SACN,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,OAAO;QACX,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC7C,CAAC;IAEO,KAAK,CAAC,eAAe,CAAC,MAAuB;QACnD,MAAM,SAAS,GAAsB,EAAE,CAAC;QAExC,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC;QACnE,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,WAAW,GAAG,IAAI,CAAC,oBAAoB,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;YACpE,IAAI,WAAW,GAAG,IAAI,CAAC,gBAAgB,CAAC,WAAW,EAAE,CAAC;gBACpD,SAAS,CAAC,IAAI,CAAC;oBACb,EAAE,EAAE,UAAU,CAAC,SAAS,CAAC;oBACzB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;oBACrB,IAAI,EAAE,mBAAmB;oBACzB,KAAK,EAAE,WAAW;oBAClB,WAAW,EAAE,6CAA6C,CAAC,WAAW,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG;oBAC3F,aAAa,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACxD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,MAAM,oBAAoB,GAAG,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;QAC9D,KAAK,MAAM,OAAO,IAAI,oBAAoB,EAAE,CAAC;YAC3C,IAAI,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,gBAAgB,CAAC,WAAW,EAAE,CAAC;gBACtD,SAAS,CAAC,IAAI,CAAC;oBACb,EAAE,EAAE,UAAU,CAAC,SAAS,CAAC;oBACzB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;oBACrB,IAAI,EAAE,wBAAwB;oBAC9B,KAAK,EAAE,OAAO,CAAC,KAAK;oBACpB,WAAW,EAAE,OAAO,CAAC,WAAW;oBAChC,aAAa,EAAE,OAAO,CAAC,QAAQ;iBAChC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,oBAAoB,CAAC,WAA4B,EAAE,QAAyB;QAClF,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC;QAEvC,MAAM,iBAAiB,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAC/C,CAAC,CAAC,IAAI,KAAK,cAAc;YACzB,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC;YAC1B,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,CAC5B,CAAC;QAEF,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC;QAE7C,OAAO,QAAQ,CAAC,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC;IACpD,CAAC;IAEO,mBAAmB,CAAC,MAAuB;QAKjD,MAAM,QAAQ,GAIT,EAAE,CAAC;QAER,MAAM,UAAU,GAAG,IAAI,GAAG,EAA2B,CAAC;QACtD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,CAAC,KAAK,CAAC,MAAM;gBAAE,SAAS;YAE5B,MAAM,UAAU,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACtD,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACvB,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAC3C,CAAC;QAED,KAAK,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,UAAU,EAAE,CAAC;YAC9C,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAErD,IAAI,SAAS,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;gBACvB,QAAQ,CAAC,IAAI,CAAC;oBACZ,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,GAAG,EAAE,EAAE,GAAG,CAAC;oBACzC,WAAW,EAAE,QAAQ,MAAM,kBAAkB,SAAS,CAAC,IAAI,yBAAyB;oBACpF,QAAQ,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACjD,CAAC,CAAC;YACL,CAAC;YAED,MAAM,QAAQ,GAAG,IAAI,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC;YACtD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,QAAQ,CAAC,IAAI,CAAC;oBACZ,KAAK,EAAE,GAAG;oBACV,WAAW,EAAE,0CAA0C,MAAM,EAAE;oBAC/D,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAClC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,mBAAmB,CAAC,MAAuB;QACjD,MAAM,SAAS,GAAoB,EAAE,CAAC;QAEtC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,CAAC;YAElD,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC;gBAC3B,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;CACF"}
@@ -1,31 +0,0 @@
1
- import type { RateLimitRule, RateLimitResult, RateLimitViolation } from '../types/index.js';
2
- import type { IndexedDBStorage } from '../storage/indexeddb-storage.js';
3
- export interface RateLimiterConfig {
4
- storage: IndexedDBStorage;
5
- rules: {
6
- global?: RateLimitRule;
7
- perUser?: RateLimitRule;
8
- perIP?: RateLimitRule;
9
- perEndpoint?: Record<string, RateLimitRule>;
10
- };
11
- onLimitExceeded?: (violation: RateLimitViolation) => void | Promise<void>;
12
- }
13
- export interface RateLimitCheckRequest {
14
- userId?: string;
15
- ip: string;
16
- endpoint?: string;
17
- }
18
- export declare class RateLimiter {
19
- private storage;
20
- private rules;
21
- private onLimitExceeded?;
22
- constructor(config: RateLimiterConfig);
23
- check(request: RateLimitCheckRequest): Promise<RateLimitResult>;
24
- private checkLimit;
25
- private handleViolation;
26
- reset(key: string): Promise<void>;
27
- resetUser(userId: string): Promise<void>;
28
- resetIP(ip: string): Promise<void>;
29
- unblock(key: string): Promise<void>;
30
- }
31
- //# sourceMappingURL=rate-limiter.d.ts.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"rate-limiter.d.ts","sourceRoot":"","sources":["../../src/rate-limiting/rate-limiter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAkB,eAAe,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAC5G,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAGxE,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,gBAAgB,CAAC;IAC1B,KAAK,EAAE;QACL,MAAM,CAAC,EAAE,aAAa,CAAC;QACvB,OAAO,CAAC,EAAE,aAAa,CAAC;QACxB,KAAK,CAAC,EAAE,aAAa,CAAC;QACtB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;KAC7C,CAAC;IACF,eAAe,CAAC,EAAE,CAAC,SAAS,EAAE,kBAAkB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3E;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,qBAAa,WAAW;IACtB,OAAO,CAAC,OAAO,CAAmB;IAClC,OAAO,CAAC,KAAK,CAA6B;IAC1C,OAAO,CAAC,eAAe,CAAC,CAA0D;gBAEtE,MAAM,EAAE,iBAAiB;IAM/B,KAAK,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,eAAe,CAAC;YA8DvD,UAAU;YAwDV,eAAe;IAUvB,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIjC,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIxC,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIlC,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAQ1C"}