@secfn/core 0.0.1

package/dist/core/secfn.js

@@ -0,0 +1,73 @@
+import { IndexedDBStorage } from '../storage/indexeddb-storage.js';
+import { SecretsVault } from '../secrets/vault.js';
+import { SecretScanner } from '../scanning/scanner.js';
+import { AccessControl } from '../access-control/rbac.js';
+import { RateLimiter } from '../rate-limiting/rate-limiter.js';
+import { SecurityMonitor } from '../monitoring/security-monitor.js';
+export class SecFn {
+    storage;
+    masterKey;
+    initialized = false;
+    constructor(config = {}) {
+        const dbName = config.storage?.dbName || config.namespace || 'secfn';
+        this.storage = new IndexedDBStorage(dbName);
+        this.masterKey = config.masterKey;
+    }
+    async initialize() {
+        if (this.initialized)
+            return;
+        await this.storage.initialize();
+        this.initialized = true;
+    }
+    createSecretsVault(config) {
+        if (!this.masterKey && !config?.encryption?.masterKey) {
+            throw new Error('Master key is required for secrets vault');
+        }
+        return new SecretsVault({
+            storage: this.storage,
+            encryption: {
+                algorithm: 'AES-256-GCM',
+                masterKey: config?.encryption?.masterKey || this.masterKey,
+                ...config?.encryption,
+            },
+            rotation: config?.rotation,
+        });
+    }
+    createSecretScanner(config) {
+        return new SecretScanner({
+            ...config,
+            storage: this.storage,
+        });
+    }
+    createAccessControl(config) {
+        return new AccessControl({
+            storage: this.storage,
+            cache: config?.cache,
+        });
+    }
+    createRateLimiter(config) {
+        return new RateLimiter({
+            storage: this.storage,
+            rules: config.rules,
+            onLimitExceeded: config.onLimitExceeded,
+        });
+    }
+    createMonitoring(config) {
+        return new SecurityMonitor({
+            storage: this.storage,
+            retention: config?.retention,
+            anomalyDetection: config?.anomalyDetection,
+        });
+    }
+    async destroy() {
+        await this.storage.destroy();
+        this.initialized = false;
+    }
+    getStorage() {
+        return this.storage;
+    }
+}
+export function createSecFn(config) {
+    return new SecFn(config);
+}
+//# sourceMappingURL=secfn.js.map

package/dist/core/secfn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secfn.js","sourceRoot":"","sources":["../../src/core/secfn.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,EAAE,YAAY,EAA2B,MAAM,qBAAqB,CAAC;AAC5E,OAAO,EAAE,aAAa,EAA4B,MAAM,wBAAwB,CAAC;AACjF,OAAO,EAAE,aAAa,EAA4B,MAAM,2BAA2B,CAAC;AACpF,OAAO,EAAE,WAAW,EAA0B,MAAM,kCAAkC,CAAC;AACvF,OAAO,EAAE,eAAe,EAAyB,MAAM,mCAAmC,CAAC;AAS3F,MAAM,OAAO,KAAK;IACR,OAAO,CAAmB;IAC1B,SAAS,CAAU;IACnB,WAAW,GAAY,KAAK,CAAC;IAErC,YAAY,SAAsB,EAAE;QAClC,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,EAAE,MAAM,IAAI,MAAM,CAAC,SAAS,IAAI,OAAO,CAAC;QACrE,IAAI,CAAC,OAAO,GAAG,IAAI,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,UAAU;QACd,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO;QAC7B,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;QAChC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;IAC1B,CAAC;IAED,kBAAkB,CAAC,MAAqD;QACtE,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC9D,CAAC;QAED,OAAO,IAAI,YAAY,CAAC;YACtB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,UAAU,EAAE;gBACV,SAAS,EAAE,aAAa;gBACxB,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,IAAI,IAAI,CAAC,SAAU;gBAC3D,GAAG,MAAM,EAAE,UAAU;aACtB;YACD,QAAQ,EAAE,MAAM,EAAE,QAAQ;SAC3B,CAAC,CAAC;IACL,CAAC;IAED,mBAAmB,CAAC,MAAsD;QACxE,OAAO,IAAI,aAAa,CAAC;YACvB,GAAG,MAAM;YACT,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAC,CAAC;IACL,CAAC;IAED,mBAAmB,CAAC,MAAsD;QACxE,OAAO,IAAI,aAAa,CAAC;YACvB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,KAAK,EAAE,MAAM,EAAE,KAAK;SACrB,CAAC,CAAC;IACL,CAAC;IAED,iBAAiB,CAAC,MAA0C;QAC1D,OAAO,IAAI,WAAW,CAAC;YACrB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,eAAe,EAAE,MAAM,CAAC,eAAe;SACxC,CAAC,CAAC;IACL,CAAC;IAED,gBAAgB,CAAC,MAAmD;QAClE,OAAO,IAAI,eAAe,CAAC;YACzB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,SAAS,EAAE,MAAM,EAAE,SAAS;YAC5B,gBAAgB,EAAE,MAAM,EAAE,gBAAgB;SAC3C,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,OAAO;QACX,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QAC7B,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;IAC3B,CAAC;IAED,UAAU;QACR,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;CACF;AAED,MAAM,UAAU,WAAW,CAAC,MAAoB;IAC9C,OAAO,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC;AAC3B,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,12 @@
+export { SecFn, createSecFn, type SecFnConfig } from './core/secfn.js';
+export { SecretsVault, type SecretsVaultConfig, type SetSecretOptions } from './secrets/vault.js';
+export { SecretEncryption } from './secrets/encryption.js';
+export { SecretScanner, type SecretScannerConfig, type ScanOptions, type GitScanOptions } from './scanning/scanner.js';
+export { DEFAULT_PATTERNS } from './scanning/patterns.js';
+export { AccessControl, type AccessControlConfig, type CreateRoleOptions, type AssignRoleOptions } from './access-control/rbac.js';
+export { RateLimiter, type RateLimiterConfig, type RateLimitCheckRequest } from './rate-limiting/rate-limiter.js';
+export { SecurityMonitor, type MonitoringConfig, type LogEventOptions, type ResolveEventOptions } from './monitoring/security-monitor.js';
+export { IndexedDBStorage } from './storage/indexeddb-storage.js';
+export * from './types/index.js';
+export { generateId, calculateEntropy, redactSecret, isExpired, delay, sanitizeForLog, parseTimeWindow, } from './utils/helpers.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAEvE,OAAO,EAAE,YAAY,EAAE,KAAK,kBAAkB,EAAE,KAAK,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAClG,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAE3D,OAAO,EAAE,aAAa,EAAE,KAAK,mBAAmB,EAAE,KAAK,WAAW,EAAE,KAAK,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvH,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE1D,OAAO,EAAE,aAAa,EAAE,KAAK,mBAAmB,EAAE,KAAK,iBAAiB,EAAE,KAAK,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAEnI,OAAO,EAAE,WAAW,EAAE,KAAK,iBAAiB,EAAE,KAAK,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AAElH,OAAO,EAAE,eAAe,EAAE,KAAK,gBAAgB,EAAE,KAAK,eAAe,EAAE,KAAK,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAE1I,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAElE,cAAc,kBAAkB,CAAC;AAEjC,OAAO,EACL,UAAU,EACV,gBAAgB,EAChB,YAAY,EACZ,SAAS,EACT,KAAK,EACL,cAAc,EACd,eAAe,GAChB,MAAM,oBAAoB,CAAC"}

package/dist/index.js

@@ -0,0 +1,12 @@
+export { SecFn, createSecFn } from './core/secfn.js';
+export { SecretsVault } from './secrets/vault.js';
+export { SecretEncryption } from './secrets/encryption.js';
+export { SecretScanner } from './scanning/scanner.js';
+export { DEFAULT_PATTERNS } from './scanning/patterns.js';
+export { AccessControl } from './access-control/rbac.js';
+export { RateLimiter } from './rate-limiting/rate-limiter.js';
+export { SecurityMonitor } from './monitoring/security-monitor.js';
+export { IndexedDBStorage } from './storage/indexeddb-storage.js';
+export * from './types/index.js';
+export { generateId, calculateEntropy, redactSecret, isExpired, delay, sanitizeForLog, parseTimeWindow, } from './utils/helpers.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,WAAW,EAAoB,MAAM,iBAAiB,CAAC;AAEvE,OAAO,EAAE,YAAY,EAAkD,MAAM,oBAAoB,CAAC;AAClG,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAE3D,OAAO,EAAE,aAAa,EAAmE,MAAM,uBAAuB,CAAC;AACvH,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE1D,OAAO,EAAE,aAAa,EAA4E,MAAM,0BAA0B,CAAC;AAEnI,OAAO,EAAE,WAAW,EAAsD,MAAM,iCAAiC,CAAC;AAElH,OAAO,EAAE,eAAe,EAAyE,MAAM,kCAAkC,CAAC;AAE1I,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAElE,cAAc,kBAAkB,CAAC;AAEjC,OAAO,EACL,UAAU,EACV,gBAAgB,EAChB,YAAY,EACZ,SAAS,EACT,KAAK,EACL,cAAc,EACd,eAAe,GAChB,MAAM,oBAAoB,CAAC"}

package/dist/monitoring/security-monitor.d.ts

@@ -0,0 +1,46 @@
+import type { SecurityEvent, EventQuery, SecurityMetrics, TimeRange, SecurityEventType, Severity } from '../types/index.js';
+import type { IndexedDBStorage } from '../storage/indexeddb-storage.js';
+export interface MonitoringConfig {
+    storage: IndexedDBStorage;
+    retention?: number;
+    anomalyDetection?: {
+        enabled: boolean;
+        sensitivity: number;
+    };
+}
+export interface LogEventOptions {
+    type: SecurityEventType;
+    severity: Severity;
+    userId?: string;
+    ip: string;
+    userAgent?: string;
+    resource?: string;
+    action?: string;
+    metadata?: Record<string, unknown>;
+}
+export interface ResolveEventOptions {
+    resolvedBy: string;
+    notes?: string;
+}
+export declare class SecurityMonitor {
+    private storage;
+    private retention;
+    private anomalyDetection;
+    constructor(config: MonitoringConfig);
+    logEvent(options: LogEventOptions): Promise<string>;
+    queryEvents(query: EventQuery): Promise<SecurityEvent[]>;
+    getEvent(id: string): Promise<SecurityEvent | null>;
+    resolveEvent(id: string, options: ResolveEventOptions): Promise<void>;
+    getMetrics(range: TimeRange): Promise<SecurityMetrics>;
+    getRecentEvents(limit?: number): Promise<SecurityEvent[]>;
+    getUnresolvedEvents(): Promise<SecurityEvent[]>;
+    getCriticalEvents(hours?: number): Promise<SecurityEvent[]>;
+    getEventsByUser(userId: string, limit?: number): Promise<SecurityEvent[]>;
+    getEventsByIP(ip: string, limit?: number): Promise<SecurityEvent[]>;
+    cleanup(): Promise<void>;
+    private detectAnomalies;
+    private calculateFailureRate;
+    private analyzeUserActivity;
+    private detectTimeAnomalies;
+}
+//# sourceMappingURL=security-monitor.d.ts.map

package/dist/monitoring/security-monitor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-monitor.d.ts","sourceRoot":"","sources":["../../src/monitoring/security-monitor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,eAAe,EAAE,SAAS,EAAE,iBAAiB,EAAE,QAAQ,EAAmB,MAAM,mBAAmB,CAAC;AAC7I,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAGxE,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,gBAAgB,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE;QACjB,OAAO,EAAE,OAAO,CAAC;QACjB,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC;CACH;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,iBAAiB,CAAC;IACxB,QAAQ,EAAE,QAAQ,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,qBAAa,eAAe;IAC1B,OAAO,CAAC,OAAO,CAAmB;IAClC,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,gBAAgB,CAA4C;gBAExD,MAAM,EAAE,gBAAgB;IAS9B,QAAQ,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC;IAoBnD,WAAW,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAIxD,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IAKnD,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC;IAgBrE,UAAU,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,eAAe,CAAC;IAgBtD,eAAe,CAAC,KAAK,SAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAItD,mBAAmB,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;IAI/C,iBAAiB,CAAC,KAAK,SAAK,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAQvD,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,SAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAOtE,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,SAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAOhE,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;YAIhB,eAAe;IAmC7B,OAAO,CAAC,oBAAoB;IAc5B,OAAO,CAAC,mBAAmB;IA4C3B,OAAO,CAAC,mBAAmB;CAa5B"}

package/dist/monitoring/security-monitor.js

@@ -0,0 +1,172 @@
+import { generateId } from '../utils/helpers.js';
+export class SecurityMonitor {
+    storage;
+    retention;
+    anomalyDetection;
+    constructor(config) {
+        this.storage = config.storage;
+        this.retention = config.retention || 90 * 24 * 60 * 60 * 1000;
+        this.anomalyDetection = config.anomalyDetection || {
+            enabled: false,
+            sensitivity: 0.8,
+        };
+    }
+    async logEvent(options) {
+        const event = {
+            id: generateId('event'),
+            timestamp: Date.now(),
+            type: options.type,
+            severity: options.severity,
+            userId: options.userId,
+            ip: options.ip,
+            userAgent: options.userAgent,
+            resource: options.resource,
+            action: options.action,
+            metadata: options.metadata || {},
+            resolved: false,
+        };
+        await this.storage.logSecurityEvent(event);
+        return event.id;
+    }
+    async queryEvents(query) {
+        return await this.storage.queryEvents(query);
+    }
+    async getEvent(id) {
+        const events = await this.storage.queryEvents({ limit: 1 });
+        return events.find(e => e.id === id) || null;
+    }
+    async resolveEvent(id, options) {
+        const events = await this.storage.queryEvents({});
+        const event = events.find(e => e.id === id);
+        if (!event) {
+            throw new Error(`Event ${id} not found`);
+        }
+        event.resolved = true;
+        event.resolvedAt = Date.now();
+        event.resolvedBy = options.resolvedBy;
+        event.notes = options.notes;
+        await this.storage.logSecurityEvent(event);
+    }
+    async getMetrics(range) {
+        const metrics = await this.storage.getMetrics(range);
+        if (this.anomalyDetection.enabled) {
+            const events = await this.storage.queryEvents({
+                startDate: range.start,
+                endDate: range.end,
+            });
+            const anomalies = await this.detectAnomalies(events);
+            metrics.anomalies = anomalies;
+        }
+        return metrics;
+    }
+    async getRecentEvents(limit = 100) {
+        return await this.storage.queryEvents({ limit });
+    }
+    async getUnresolvedEvents() {
+        return await this.storage.queryEvents({ resolved: false });
+    }
+    async getCriticalEvents(hours = 24) {
+        const startDate = Date.now() - hours * 60 * 60 * 1000;
+        return await this.storage.queryEvents({
+            severity: 'critical',
+            startDate,
+        });
+    }
+    async getEventsByUser(userId, limit = 100) {
+        return await this.storage.queryEvents({
+            userId,
+            limit,
+        });
+    }
+    async getEventsByIP(ip, limit = 100) {
+        return await this.storage.queryEvents({
+            ip,
+            limit,
+        });
+    }
+    async cleanup() {
+        await this.storage.cleanup(this.retention);
+    }
+    async detectAnomalies(events) {
+        const anomalies = [];
+        const authFailures = events.filter(e => e.type === 'auth_failure');
+        if (authFailures.length > 0) {
+            const failureRate = this.calculateFailureRate(events, authFailures);
+            if (failureRate > this.anomalyDetection.sensitivity) {
+                anomalies.push({
+                    id: generateId('anomaly'),
+                    timestamp: Date.now(),
+                    type: 'spike_in_failures',
+                    score: failureRate,
+                    description: `Unusual spike in authentication failures: ${(failureRate * 100).toFixed(1)}%`,
+                    relatedEvents: authFailures.slice(0, 10).map(e => e.id),
+                });
+            }
+        }
+        const userActivityPatterns = this.analyzeUserActivity(events);
+        for (const pattern of userActivityPatterns) {
+            if (pattern.score > this.anomalyDetection.sensitivity) {
+                anomalies.push({
+                    id: generateId('anomaly'),
+                    timestamp: Date.now(),
+                    type: 'unusual_access_pattern',
+                    score: pattern.score,
+                    description: pattern.description,
+                    relatedEvents: pattern.eventIds,
+                });
+            }
+        }
+        return anomalies;
+    }
+    calculateFailureRate(totalEvents, failures) {
+        if (totalEvents.length === 0)
+            return 0;
+        const authRelatedEvents = totalEvents.filter(e => e.type === 'auth_failure' ||
+            e.action?.includes('auth') ||
+            e.action?.includes('login'));
+        if (authRelatedEvents.length === 0)
+            return 0;
+        return failures.length / authRelatedEvents.length;
+    }
+    analyzeUserActivity(events) {
+        const patterns = [];
+        const userGroups = new Map();
+        for (const event of events) {
+            if (!event.userId)
+                continue;
+            const userEvents = userGroups.get(event.userId) || [];
+            userEvents.push(event);
+            userGroups.set(event.userId, userEvents);
+        }
+        for (const [userId, userEvents] of userGroups) {
+            const uniqueIPs = new Set(userEvents.map(e => e.ip));
+            if (uniqueIPs.size > 5) {
+                patterns.push({
+                    score: Math.min(uniqueIPs.size / 10, 1.0),
+                    description: `User ${userId} accessed from ${uniqueIPs.size} different IP addresses`,
+                    eventIds: userEvents.slice(0, 10).map(e => e.id),
+                });
+            }
+            const timeGaps = this.detectTimeAnomalies(userEvents);
+            if (timeGaps.length > 0) {
+                patterns.push({
+                    score: 0.7,
+                    description: `Unusual access times detected for user ${userId}`,
+                    eventIds: timeGaps.map(e => e.id),
+                });
+            }
+        }
+        return patterns;
+    }
+    detectTimeAnomalies(events) {
+        const anomalous = [];
+        for (const event of events) {
+            const hour = new Date(event.timestamp).getHours();
+            if (hour >= 2 && hour <= 5) {
+                anomalous.push(event);
+            }
+        }
+        return anomalous;
+    }
+}
+//# sourceMappingURL=security-monitor.js.map

package/dist/monitoring/security-monitor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-monitor.js","sourceRoot":"","sources":["../../src/monitoring/security-monitor.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AA2BjD,MAAM,OAAO,eAAe;IAClB,OAAO,CAAmB;IAC1B,SAAS,CAAS;IAClB,gBAAgB,CAA4C;IAEpE,YAAY,MAAwB;QAClC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAC9B,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;QAC9D,IAAI,CAAC,gBAAgB,GAAG,MAAM,CAAC,gBAAgB,IAAI;YACjD,OAAO,EAAE,KAAK;YACd,WAAW,EAAE,GAAG;SACjB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,OAAwB;QACrC,MAAM,KAAK,GAAkB;YAC3B,EAAE,EAAE,UAAU,CAAC,OAAO,CAAC;YACvB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,EAAE;YAChC,QAAQ,EAAE,KAAK;SAChB,CAAC;QAEF,MAAM,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAE3C,OAAO,KAAK,CAAC,EAAE,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,KAAiB;QACjC,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,EAAU;QACvB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QAC5D,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,IAAI,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,EAAU,EAAE,OAA4B;QACzD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAE5C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;QAC3C,CAAC;QAED,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC;QACtB,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC9B,KAAK,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QACtC,KAAK,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAE5B,MAAM,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,KAAgB;QAC/B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAErD,IAAI,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC;YAClC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;gBAC5C,SAAS,EAAE,KAAK,CAAC,KAAK;gBACtB,OAAO,EAAE,KAAK,CAAC,GAAG;aACnB,CAAC,CAAC;YAEH,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;YACrD,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC;QAChC,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,KAAK,GAAG,GAAG;QAC/B,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,mBAAmB;QACvB,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,KAAK,GAAG,EAAE;QAChC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;QACtD,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;YACpC,QAAQ,EAAE,UAAU;YACpB,SAAS;SACV,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,MAAc,EAAE,KAAK,GAAG,GAAG;QAC/C,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;YACpC,MAAM;YACN,KAAK;SACN,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,EAAU,EAAE,KAAK,GAAG,GAAG;QACzC,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;YACpC,EAAE;YACF,KAAK;SACN,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,OAAO;QACX,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC7C,CAAC;IAEO,KAAK,CAAC,eAAe,CAAC,MAAuB;QACnD,MAAM,SAAS,GAAsB,EAAE,CAAC;QAExC,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC;QACnE,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,WAAW,GAAG,IAAI,CAAC,oBAAoB,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;YACpE,IAAI,WAAW,GAAG,IAAI,CAAC,gBAAgB,CAAC,WAAW,EAAE,CAAC;gBACpD,SAAS,CAAC,IAAI,CAAC;oBACb,EAAE,EAAE,UAAU,CAAC,SAAS,CAAC;oBACzB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;oBACrB,IAAI,EAAE,mBAAmB;oBACzB,KAAK,EAAE,WAAW;oBAClB,WAAW,EAAE,6CAA6C,CAAC,WAAW,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG;oBAC3F,aAAa,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACxD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,MAAM,oBAAoB,GAAG,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;QAC9D,KAAK,MAAM,OAAO,IAAI,oBAAoB,EAAE,CAAC;YAC3C,IAAI,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,gBAAgB,CAAC,WAAW,EAAE,CAAC;gBACtD,SAAS,CAAC,IAAI,CAAC;oBACb,EAAE,EAAE,UAAU,CAAC,SAAS,CAAC;oBACzB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;oBACrB,IAAI,EAAE,wBAAwB;oBAC9B,KAAK,EAAE,OAAO,CAAC,KAAK;oBACpB,WAAW,EAAE,OAAO,CAAC,WAAW;oBAChC,aAAa,EAAE,OAAO,CAAC,QAAQ;iBAChC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,oBAAoB,CAAC,WAA4B,EAAE,QAAyB;QAClF,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC;QAEvC,MAAM,iBAAiB,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAC/C,CAAC,CAAC,IAAI,KAAK,cAAc;YACzB,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC;YAC1B,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,CAC5B,CAAC;QAEF,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC;QAE7C,OAAO,QAAQ,CAAC,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC;IACpD,CAAC;IAEO,mBAAmB,CAAC,MAAuB;QAKjD,MAAM,QAAQ,GAIT,EAAE,CAAC;QAER,MAAM,UAAU,GAAG,IAAI,GAAG,EAA2B,CAAC;QACtD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,CAAC,KAAK,CAAC,MAAM;gBAAE,SAAS;YAE5B,MAAM,UAAU,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACtD,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACvB,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAC3C,CAAC;QAED,KAAK,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,UAAU,EAAE,CAAC;YAC9C,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAErD,IAAI,SAAS,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;gBACvB,QAAQ,CAAC,IAAI,CAAC;oBACZ,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,GAAG,EAAE,EAAE,GAAG,CAAC;oBACzC,WAAW,EAAE,QAAQ,MAAM,kBAAkB,SAAS,CAAC,IAAI,yBAAyB;oBACpF,QAAQ,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACjD,CAAC,CAAC;YACL,CAAC;YAED,MAAM,QAAQ,GAAG,IAAI,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC;YACtD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,QAAQ,CAAC,IAAI,CAAC;oBACZ,KAAK,EAAE,GAAG;oBACV,WAAW,EAAE,0CAA0C,MAAM,EAAE;oBAC/D,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAClC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,mBAAmB,CAAC,MAAuB;QACjD,MAAM,SAAS,GAAoB,EAAE,CAAC;QAEtC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,CAAC;YAElD,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC;gBAC3B,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;CACF"}

package/dist/rate-limiting/rate-limiter.d.ts

@@ -0,0 +1,31 @@
+import type { RateLimitRule, RateLimitResult, RateLimitViolation } from '../types/index.js';
+import type { IndexedDBStorage } from '../storage/indexeddb-storage.js';
+export interface RateLimiterConfig {
+    storage: IndexedDBStorage;
+    rules: {
+        global?: RateLimitRule;
+        perUser?: RateLimitRule;
+        perIP?: RateLimitRule;
+        perEndpoint?: Record<string, RateLimitRule>;
+    };
+    onLimitExceeded?: (violation: RateLimitViolation) => void | Promise<void>;
+}
+export interface RateLimitCheckRequest {
+    userId?: string;
+    ip: string;
+    endpoint?: string;
+}
+export declare class RateLimiter {
+    private storage;
+    private rules;
+    private onLimitExceeded?;
+    constructor(config: RateLimiterConfig);
+    check(request: RateLimitCheckRequest): Promise<RateLimitResult>;
+    private checkLimit;
+    private handleViolation;
+    reset(key: string): Promise<void>;
+    resetUser(userId: string): Promise<void>;
+    resetIP(ip: string): Promise<void>;
+    unblock(key: string): Promise<void>;
+}
+//# sourceMappingURL=rate-limiter.d.ts.map

package/dist/rate-limiting/rate-limiter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limiter.d.ts","sourceRoot":"","sources":["../../src/rate-limiting/rate-limiter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAkB,eAAe,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAC5G,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAGxE,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,gBAAgB,CAAC;IAC1B,KAAK,EAAE;QACL,MAAM,CAAC,EAAE,aAAa,CAAC;QACvB,OAAO,CAAC,EAAE,aAAa,CAAC;QACxB,KAAK,CAAC,EAAE,aAAa,CAAC;QACtB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;KAC7C,CAAC;IACF,eAAe,CAAC,EAAE,CAAC,SAAS,EAAE,kBAAkB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3E;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,qBAAa,WAAW;IACtB,OAAO,CAAC,OAAO,CAAmB;IAClC,OAAO,CAAC,KAAK,CAA6B;IAC1C,OAAO,CAAC,eAAe,CAAC,CAA0D;gBAEtE,MAAM,EAAE,iBAAiB;IAM/B,KAAK,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,eAAe,CAAC;YA8DvD,UAAU;YAwDV,eAAe;IAUvB,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIjC,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIxC,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIlC,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAQ1C"}

package/dist/rate-limiting/rate-limiter.js

@@ -0,0 +1,140 @@
+import { generateId } from '../utils/helpers.js';
+export class RateLimiter {
+    storage;
+    rules;
+    onLimitExceeded;
+    constructor(config) {
+        this.storage = config.storage;
+        this.rules = config.rules;
+        this.onLimitExceeded = config.onLimitExceeded;
+    }
+    async check(request) {
+        const checks = [];
+        if (this.rules.global) {
+            checks.push({
+                key: 'global',
+                rule: this.rules.global,
+            });
+        }
+        if (this.rules.perUser && request.userId) {
+            checks.push({
+                key: `user:${request.userId}`,
+                rule: this.rules.perUser,
+            });
+        }
+        if (this.rules.perIP) {
+            checks.push({
+                key: `ip:${request.ip}`,
+                rule: this.rules.perIP,
+            });
+        }
+        if (this.rules.perEndpoint && request.endpoint) {
+            const endpointRule = this.rules.perEndpoint[request.endpoint];
+            if (endpointRule) {
+                checks.push({
+                    key: `endpoint:${request.endpoint}:${request.ip}`,
+                    rule: endpointRule,
+                });
+            }
+        }
+        for (const check of checks) {
+            const result = await this.checkLimit(check.key, check.rule);
+            if (!result.allowed) {
+                await this.handleViolation({
+                    id: generateId('violation'),
+                    timestamp: Date.now(),
+                    key: check.key,
+                    ip: request.ip,
+                    userId: request.userId,
+                    endpoint: request.endpoint || 'unknown',
+                    requestCount: result.limit || 0,
+                    limit: check.rule.requests,
+                    window: check.rule.window,
+                    blocked: true,
+                });
+                return result;
+            }
+        }
+        return {
+            allowed: true,
+            remaining: checks.length > 0 ? checks[0].rule.requests : 0,
+            resetAt: Date.now() + (checks.length > 0 ? checks[0].rule.window : 0),
+        };
+    }
+    async checkLimit(key, rule) {
+        const now = Date.now();
+        const entry = await this.storage.getRateLimitEntry(key);
+        if (!entry || now >= entry.resetAt) {
+            const newEntry = {
+                key,
+                count: 1,
+                resetAt: now + rule.window,
+                blocked: false,
+            };
+            await this.storage.setRateLimitEntry(newEntry);
+            return {
+                allowed: true,
+                remaining: rule.requests - 1,
+                resetAt: newEntry.resetAt,
+                limit: rule.requests,
+            };
+        }
+        if (entry.blocked && entry.blockedUntil && now < entry.blockedUntil) {
+            return {
+                allowed: false,
+                remaining: 0,
+                resetAt: entry.resetAt,
+                retryAfter: entry.blockedUntil - now,
+                limit: rule.requests,
+            };
+        }
+        if (entry.count >= rule.requests) {
+            entry.blocked = true;
+            entry.blockedUntil = now + (rule.blockDuration || rule.window);
+            await this.storage.setRateLimitEntry(entry);
+            return {
+                allowed: false,
+                remaining: 0,
+                resetAt: entry.resetAt,
+                retryAfter: entry.blockedUntil - now,
+                limit: rule.requests,
+            };
+        }
+        entry.count++;
+        await this.storage.setRateLimitEntry(entry);
+        return {
+            allowed: true,
+            remaining: rule.requests - entry.count,
+            resetAt: entry.resetAt,
+            limit: rule.requests,
+        };
+    }
+    async handleViolation(violation) {
+        if (this.onLimitExceeded) {
+            try {
+                await this.onLimitExceeded(violation);
+            }
+            catch (error) {
+                console.error('[SecFn] Error in rate limit violation handler:', error);
+            }
+        }
+    }
+    async reset(key) {
+        await this.storage.deleteRateLimitEntry(key);
+    }
+    async resetUser(userId) {
+        await this.reset(`user:${userId}`);
+    }
+    async resetIP(ip) {
+        await this.reset(`ip:${ip}`);
+    }
+    async unblock(key) {
+        const entry = await this.storage.getRateLimitEntry(key);
+        if (entry) {
+            entry.blocked = false;
+            entry.blockedUntil = undefined;
+            await this.storage.setRateLimitEntry(entry);
+        }
+    }
+}
+//# sourceMappingURL=rate-limiter.js.map

package/dist/rate-limiting/rate-limiter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limiter.js","sourceRoot":"","sources":["../../src/rate-limiting/rate-limiter.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAmBjD,MAAM,OAAO,WAAW;IACd,OAAO,CAAmB;IAC1B,KAAK,CAA6B;IAClC,eAAe,CAA2D;IAElF,YAAY,MAAyB;QACnC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAC9B,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QAC1B,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,eAAe,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,OAA8B;QACxC,MAAM,MAAM,GAAgD,EAAE,CAAC;QAE/D,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACtB,MAAM,CAAC,IAAI,CAAC;gBACV,GAAG,EAAE,QAAQ;gBACb,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM;aACxB,CAAC,CAAC;QACL,CAAC;QAED,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACzC,MAAM,CAAC,IAAI,CAAC;gBACV,GAAG,EAAE,QAAQ,OAAO,CAAC,MAAM,EAAE;gBAC7B,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO;aACzB,CAAC,CAAC;QACL,CAAC;QAED,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YACrB,MAAM,CAAC,IAAI,CAAC;gBACV,GAAG,EAAE,MAAM,OAAO,CAAC,EAAE,EAAE;gBACvB,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK;aACvB,CAAC,CAAC;QACL,CAAC;QAED,IAAI,IAAI,CAAC,KAAK,CAAC,WAAW,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YAC/C,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YAC9D,IAAI,YAAY,EAAE,CAAC;gBACjB,MAAM,CAAC,IAAI,CAAC;oBACV,GAAG,EAAE,YAAY,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,EAAE,EAAE;oBACjD,IAAI,EAAE,YAAY;iBACnB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAE5D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,MAAM,IAAI,CAAC,eAAe,CAAC;oBACzB,EAAE,EAAE,UAAU,CAAC,WAAW,CAAC;oBAC3B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;oBACrB,GAAG,EAAE,KAAK,CAAC,GAAG;oBACd,EAAE,EAAE,OAAO,CAAC,EAAE;oBACd,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,SAAS;oBACvC,YAAY,EAAE,MAAM,CAAC,KAAK,IAAI,CAAC;oBAC/B,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ;oBAC1B,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM;oBACzB,OAAO,EAAE,IAAI;iBACd,CAAC,CAAC;gBAEH,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;QAED,OAAO;YACL,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAC1D,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;SACtE,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,GAAW,EAAE,IAAmB;QACvD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAExD,IAAI,CAAC,KAAK,IAAI,GAAG,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YACnC,MAAM,QAAQ,GAAmB;gBAC/B,GAAG;gBACH,KAAK,EAAE,CAAC;gBACR,OAAO,EAAE,GAAG,GAAG,IAAI,CAAC,MAAM;gBAC1B,OAAO,EAAE,KAAK;aACf,CAAC;YACF,MAAM,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;YAE/C,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,SAAS,EAAE,IAAI,CAAC,QAAQ,GAAG,CAAC;gBAC5B,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,KAAK,EAAE,IAAI,CAAC,QAAQ;aACrB,CAAC;QACJ,CAAC;QAED,IAAI,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,YAAY,IAAI,GAAG,GAAG,KAAK,CAAC,YAAY,EAAE,CAAC;YACpE,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,SAAS,EAAE,CAAC;gBACZ,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,UAAU,EAAE,KAAK,CAAC,YAAY,GAAG,GAAG;gBACpC,KAAK,EAAE,IAAI,CAAC,QAAQ;aACrB,CAAC;QACJ,CAAC;QAED,IAAI,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACjC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC;YACrB,KAAK,CAAC,YAAY,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC;YAC/D,MAAM,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;YAE5C,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,SAAS,EAAE,CAAC;gBACZ,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,UAAU,EAAE,KAAK,CAAC,YAAY,GAAG,GAAG;gBACpC,KAAK,EAAE,IAAI,CAAC,QAAQ;aACrB,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,MAAM,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAE5C,OAAO;YACL,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,KAAK;YACtC,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,KAAK,EAAE,IAAI,CAAC,QAAQ;SACrB,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,eAAe,CAAC,SAA6B;QACzD,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;YACxC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,KAAK,CAAC,gDAAgD,EAAE,KAAK,CAAC,CAAC;YACzE,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,GAAW;QACrB,MAAM,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,MAAc;QAC5B,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,MAAM,EAAE,CAAC,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,EAAU;QACtB,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,GAAW;QACvB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACxD,IAAI,KAAK,EAAE,CAAC;YACV,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC;YACtB,KAAK,CAAC,YAAY,GAAG,SAAS,CAAC;YAC/B,MAAM,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;CACF"}

package/dist/scanning/patterns.d.ts

@@ -0,0 +1,3 @@
+import type { SecretPattern } from '../types/index.js';
+export declare const DEFAULT_PATTERNS: SecretPattern[];
+//# sourceMappingURL=patterns.d.ts.map

package/dist/scanning/patterns.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"patterns.d.ts","sourceRoot":"","sources":["../../src/scanning/patterns.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAEvD,eAAO,MAAM,gBAAgB,EAAE,aAAa,EAyI3C,CAAC"}