@toon-protocol/connector 1.7.1

package/dist/security/rate-limiter.js

@@ -0,0 +1,170 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RateLimiter = void 0;
+const token_bucket_1 = require("./token-bucket");
+const violation_counter_1 = require("./violation-counter");
+class RateLimiter {
+    config;
+    logger;
+    tokenBuckets = new Map();
+    blockedPeers = new Map();
+    violationCounter;
+    metrics;
+    adaptiveLimits = new Map();
+    constructor(config, logger, metrics) {
+        this.config = config;
+        this.logger = logger;
+        this.validateConfig(config);
+        this.violationCounter = new violation_counter_1.ViolationCounter(config.violationWindowSeconds);
+        this.metrics = metrics;
+    }
+    async checkLimit(peerId, requestType) {
+        if (this.blockedPeers.has(peerId)) {
+            this.logger.debug({ peerId, requestType }, 'Request blocked by circuit breaker');
+            this.metrics?.recordBlocked(peerId, requestType);
+            return false;
+        }
+        const bucket = this.getOrCreateBucket(peerId);
+        if (bucket.tryConsume()) {
+            this.metrics?.recordAllowed(peerId, requestType);
+            return true;
+        }
+        this.logger.warn({ peerId, requestType }, 'Request rate limited');
+        this.metrics?.recordThrottled(peerId, requestType);
+        this.handleViolation(peerId, requestType);
+        return false;
+    }
+    getOrCreateBucket(peerId) {
+        let bucket = this.tokenBuckets.get(peerId);
+        if (!bucket) {
+            const { capacity, refillRate } = this.getBucketConfig(peerId);
+            bucket = new token_bucket_1.TokenBucket(capacity, refillRate);
+            this.tokenBuckets.set(peerId, bucket);
+        }
+        return bucket;
+    }
+    getBucketConfig(peerId) {
+        const peerConfig = this.config.peerLimits?.get(peerId);
+        if (peerConfig) {
+            return {
+                capacity: peerConfig.burstSize,
+                refillRate: peerConfig.maxRequestsPerSecond,
+            };
+        }
+        let refillRate = this.config.maxRequestsPerSecond;
+        if (this.config.adaptiveRateLimiting) {
+            const multiplier = this.adaptiveLimits.get(peerId) ?? 1.0;
+            refillRate = refillRate * multiplier;
+        }
+        return {
+            capacity: this.config.burstSize,
+            refillRate,
+        };
+    }
+    handleViolation(peerId, requestType) {
+        const violations = this.violationCounter.increment(peerId);
+        if (this.config.adaptiveRateLimiting && !this.config.trustedPeers?.has(peerId)) {
+            this.decreaseAdaptiveLimit(peerId);
+        }
+        if (violations >= this.config.violationThreshold) {
+            if (this.config.trustedPeers?.has(peerId)) {
+                this.logger.info({ peerId, violations, requestType }, 'Trusted peer exceeded violations but not blocked');
+                return;
+            }
+            this.blockPeer(peerId, this.config.blockDuration);
+        }
+    }
+    blockPeer(peerId, durationSeconds) {
+        if (this.blockedPeers.has(peerId)) {
+            return;
+        }
+        const violations = this.violationCounter.getCount(peerId);
+        this.logger.warn({
+            peerId,
+            violations,
+            blockDuration: durationSeconds,
+        }, 'Peer blocked due to sustained rate limit violations');
+        const unblockTimeout = setTimeout(() => {
+            this.unblockPeer(peerId);
+        }, durationSeconds * 1000);
+        this.blockedPeers.set(peerId, {
+            peerId,
+            blockedAt: Date.now(),
+            unblockTimeout,
+        });
+    }
+    unblockPeer(peerId) {
+        const blocked = this.blockedPeers.get(peerId);
+        if (!blocked) {
+            return;
+        }
+        this.logger.info({ peerId }, 'Peer unblocked');
+        this.blockedPeers.delete(peerId);
+        this.violationCounter.reset(peerId);
+        this.adaptiveLimits.delete(peerId);
+    }
+    increaseAdaptiveLimit(peerId) {
+        if (!this.config.adaptiveRateLimiting) {
+            return;
+        }
+        const current = this.adaptiveLimits.get(peerId) ?? 1.0;
+        const newLimit = Math.min(5.0, current * 1.1);
+        this.adaptiveLimits.set(peerId, newLimit);
+        this.logger.debug({ peerId, newMultiplier: newLimit }, 'Increased adaptive rate limit');
+    }
+    decreaseAdaptiveLimit(peerId) {
+        const current = this.adaptiveLimits.get(peerId) ?? 1.0;
+        const newLimit = Math.max(0.1, current * 0.9);
+        this.adaptiveLimits.set(peerId, newLimit);
+        this.logger.debug({ peerId, newMultiplier: newLimit }, 'Decreased adaptive rate limit');
+    }
+    getBlockedPeers() {
+        return Array.from(this.blockedPeers.keys());
+    }
+    getRequestsPerSecond(peerId) {
+        const bucket = this.tokenBuckets.get(peerId);
+        if (!bucket) {
+            return 0;
+        }
+        const available = bucket.getAvailableTokens();
+        const { capacity, refillRate } = this.getBucketConfig(peerId);
+        return Math.max(0, refillRate - (capacity - available));
+    }
+    unblock(peerId) {
+        const blocked = this.blockedPeers.get(peerId);
+        if (blocked) {
+            clearTimeout(blocked.unblockTimeout);
+            this.unblockPeer(peerId);
+        }
+    }
+    validateConfig(config) {
+        if (config.maxRequestsPerSecond <= 0) {
+            throw new Error('maxRequestsPerSecond must be positive');
+        }
+        if (config.maxRequestsPerMinute <= 0) {
+            throw new Error('maxRequestsPerMinute must be positive');
+        }
+        if (config.burstSize <= 0) {
+            throw new Error('burstSize must be positive');
+        }
+        if (config.blockDuration <= 0) {
+            throw new Error('blockDuration must be positive');
+        }
+        if (config.violationThreshold <= 0) {
+            throw new Error('violationThreshold must be positive');
+        }
+        if (config.violationWindowSeconds <= 0) {
+            throw new Error('violationWindowSeconds must be positive');
+        }
+    }
+    destroy() {
+        for (const blocked of this.blockedPeers.values()) {
+            clearTimeout(blocked.unblockTimeout);
+        }
+        this.blockedPeers.clear();
+        this.tokenBuckets.clear();
+        this.adaptiveLimits.clear();
+    }
+}
+exports.RateLimiter = RateLimiter;
+//# sourceMappingURL=rate-limiter.js.map

package/dist/security/rate-limiter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limiter.js","sourceRoot":"","sources":["../../src/security/rate-limiter.ts"],"names":[],"mappings":";;;AAUA,iDAA6C;AAC7C,2DAAuD;AAiEvD,MAAa,WAAW;IAQZ;IACA;IARF,YAAY,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC9C,YAAY,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC9C,gBAAgB,CAAmB;IACnC,OAAO,CAAoB;IAC3B,cAAc,GAAG,IAAI,GAAG,EAAkB,CAAC;IAEnD,YACU,MAAuB,EACvB,MAAc,EACtB,OAA0B;QAFlB,WAAM,GAAN,MAAM,CAAiB;QACvB,WAAM,GAAN,MAAM,CAAQ;QAGtB,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAC5B,IAAI,CAAC,gBAAgB,GAAG,IAAI,oCAAgB,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC;QAC5E,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAQD,KAAK,CAAC,UAAU,CAAC,MAAc,EAAE,WAAwB;QAEvD,IAAI,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAClC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,oCAAoC,CAAC,CAAC;YACjF,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;YACjD,OAAO,KAAK,CAAC;QACf,CAAC;QAGD,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAG9C,IAAI,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC;YACxB,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;YACjD,OAAO,IAAI,CAAC;QACd,CAAC;QAGD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,sBAAsB,CAAC,CAAC;QAClE,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QACnD,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAC1C,OAAO,KAAK,CAAC;IACf,CAAC;IAKO,iBAAiB,CAAC,MAAc;QACtC,IAAI,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;YAC9D,MAAM,GAAG,IAAI,0BAAW,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YAC/C,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACxC,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAKO,eAAe,CAAC,MAAc;QAEpC,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QACvD,IAAI,UAAU,EAAE,CAAC;YACf,OAAO;gBACL,QAAQ,EAAE,UAAU,CAAC,SAAS;gBAC9B,UAAU,EAAE,UAAU,CAAC,oBAAoB;aAC5C,CAAC;QACJ,CAAC;QAGD,IAAI,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC;QAClD,IAAI,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC;YACrC,MAAM,UAAU,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC;YAC1D,UAAU,GAAG,UAAU,GAAG,UAAU,CAAC;QACvC,CAAC;QAED,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;YAC/B,UAAU;SACX,CAAC;IACJ,CAAC;IAKO,eAAe,CAAC,MAAc,EAAE,WAAwB;QAC9D,MAAM,UAAU,GAAG,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAG3D,IAAI,IAAI,CAAC,MAAM,CAAC,oBAAoB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/E,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC;QACrC,CAAC;QAGD,IAAI,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC;YAEjD,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC1C,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,EACnC,kDAAkD,CACnD,CAAC;gBACF,OAAO;YACT,CAAC;YAED,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAKO,SAAS,CAAC,MAAc,EAAE,eAAuB;QAEvD,IAAI,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAClC,OAAO;QACT,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC1D,IAAI,CAAC,MAAM,CAAC,IAAI,CACd;YACE,MAAM;YACN,UAAU;YACV,aAAa,EAAE,eAAe;SAC/B,EACD,qDAAqD,CACtD,CAAC;QAGF,MAAM,cAAc,GAAG,UAAU,CAAC,GAAG,EAAE;YACrC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAC3B,CAAC,EAAE,eAAe,GAAG,IAAI,CAAC,CAAC;QAG3B,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE;YAC5B,MAAM;YACN,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,cAAc;SACf,CAAC,CAAC;IACL,CAAC;IAKO,WAAW,CAAC,MAAc;QAChC,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC9C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO;QACT,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,gBAAgB,CAAC,CAAC;QAC/C,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACjC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAGpC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;IAKD,qBAAqB,CAAC,MAAc;QAClC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC;YACtC,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC;QACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,GAAG,GAAG,CAAC,CAAC;QAC9C,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAE1C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,EAAE,+BAA+B,CAAC,CAAC;IAC1F,CAAC;IAKO,qBAAqB,CAAC,MAAc;QAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC;QACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,GAAG,GAAG,CAAC,CAAC;QAC9C,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAE1C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,EAAE,+BAA+B,CAAC,CAAC;IAC1F,CAAC;IAKD,eAAe;QACb,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC;IAC9C,CAAC;IAKD,oBAAoB,CAAC,MAAc;QACjC,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC7C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,CAAC,CAAC;QACX,CAAC;QAGD,MAAM,SAAS,GAAG,MAAM,CAAC,kBAAkB,EAAE,CAAC;QAC9C,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QAC9D,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,GAAG,CAAC,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC;IAC1D,CAAC;IAKD,OAAO,CAAC,MAAc;QACpB,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC9C,IAAI,OAAO,EAAE,CAAC;YACZ,YAAY,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;YACrC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IAKO,cAAc,CAAC,MAAuB;QAC5C,IAAI,MAAM,CAAC,oBAAoB,IAAI,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI,MAAM,CAAC,oBAAoB,IAAI,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI,MAAM,CAAC,SAAS,IAAI,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAChD,CAAC;QACD,IAAI,MAAM,CAAC,aAAa,IAAI,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,MAAM,CAAC,kBAAkB,IAAI,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,MAAM,CAAC,sBAAsB,IAAI,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IAKD,OAAO;QACL,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,EAAE,CAAC;YACjD,YAAY,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QACvC,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;QAC1B,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;QAC1B,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;IAC9B,CAAC;CACF;AA/PD,kCA+PC"}

package/dist/security/reputation-tracker.d.ts

@@ -0,0 +1,30 @@
+import { Logger } from 'pino';
+import { PeerReputationScore } from './fraud-detector';
+export interface ReputationTrackerConfig {
+    autoPauseThreshold: number;
+    decayRate: number;
+    maxScore: number;
+}
+export interface FraudDetectionEvent {
+    ruleName: string;
+    severity: 'low' | 'medium' | 'high' | 'critical';
+    peerId: string;
+    timestamp: number;
+    details?: {
+        [key: string]: unknown;
+    };
+}
+export declare class ReputationTracker {
+    private readonly logger;
+    private readonly config;
+    private readonly reputationScores;
+    constructor(logger: Logger, config: ReputationTrackerConfig);
+    updateReputationScore(event: FraudDetectionEvent): Promise<void>;
+    applyScoreDecay(peerId: string, currentTime: number): void;
+    applyScoreDecayAll(currentTime: number): void;
+    getReputationScore(peerId: string): PeerReputationScore | undefined;
+    getAllReputationScores(): Map<string, PeerReputationScore>;
+    shouldAutoPause(peerId: string): boolean;
+    clearAll(): void;
+}
+//# sourceMappingURL=reputation-tracker.d.ts.map

package/dist/security/reputation-tracker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reputation-tracker.d.ts","sourceRoot":"","sources":["../../src/security/reputation-tracker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC;AAC9B,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAevD,MAAM,WAAW,uBAAuB;IAKtC,kBAAkB,EAAE,MAAM,CAAC;IAK3B,SAAS,EAAE,MAAM,CAAC;IAKlB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAKD,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;IACjD,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE;QACR,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB,CAAC;CACH;AAUD,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0B;IACjD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAmC;gBAExD,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,uBAAuB;IAe9C,qBAAqB,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC;IAuDtE,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI;IAmC1D,kBAAkB,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI;IAS7C,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,mBAAmB,GAAG,SAAS;IAOnE,sBAAsB,IAAI,GAAG,CAAC,MAAM,EAAE,mBAAmB,CAAC;IAO1D,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO;IAYxC,QAAQ,IAAI,IAAI;CAGxB"}

package/dist/security/reputation-tracker.js

@@ -0,0 +1,111 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ReputationTracker = void 0;
+const SEVERITY_PENALTIES = {
+    low: 1,
+    medium: 5,
+    high: 10,
+    critical: 25,
+};
+class ReputationTracker {
+    logger;
+    config;
+    reputationScores;
+    constructor(logger, config) {
+        this.logger = logger.child({ component: 'ReputationTracker' });
+        this.config = config;
+        this.reputationScores = new Map();
+        this.logger.info('ReputationTracker initialized', {
+            autoPauseThreshold: config.autoPauseThreshold,
+            decayRate: config.decayRate,
+            maxScore: config.maxScore,
+        });
+    }
+    async updateReputationScore(event) {
+        try {
+            const { peerId, ruleName, severity, timestamp } = event;
+            let score = this.reputationScores.get(peerId);
+            if (!score) {
+                score = {
+                    peerId,
+                    score: this.config.maxScore,
+                    lastUpdated: timestamp,
+                    violations: [],
+                };
+                this.reputationScores.set(peerId, score);
+            }
+            const penalty = SEVERITY_PENALTIES[severity];
+            const newScore = Math.max(0, score.score - penalty);
+            score.violations.push({
+                timestamp,
+                ruleViolated: ruleName,
+                severity,
+                penaltyApplied: penalty,
+            });
+            score.score = newScore;
+            score.lastUpdated = timestamp;
+            this.logger.info('Reputation score updated', {
+                peerId,
+                previousScore: score.score + penalty,
+                newScore,
+                penalty,
+                severity,
+                ruleName,
+                violationCount: score.violations.length,
+            });
+        }
+        catch (error) {
+            this.logger.error('Failed to update reputation score', {
+                peerId: event.peerId,
+                error: error instanceof Error ? error.message : String(error),
+            });
+        }
+    }
+    applyScoreDecay(peerId, currentTime) {
+        const score = this.reputationScores.get(peerId);
+        if (!score) {
+            return;
+        }
+        const msPerDay = 24 * 60 * 60 * 1000;
+        const daysElapsed = Math.floor((currentTime - score.lastUpdated) / msPerDay);
+        if (daysElapsed === 0) {
+            return;
+        }
+        const decayAmount = daysElapsed * this.config.decayRate;
+        const newScore = Math.min(this.config.maxScore, score.score + decayAmount);
+        if (newScore !== score.score) {
+            this.logger.debug('Score decay applied', {
+                peerId,
+                previousScore: score.score,
+                newScore,
+                daysElapsed,
+                decayAmount,
+            });
+            score.score = newScore;
+            score.lastUpdated = currentTime;
+        }
+    }
+    applyScoreDecayAll(currentTime) {
+        for (const [peerId] of Array.from(this.reputationScores)) {
+            this.applyScoreDecay(peerId, currentTime);
+        }
+    }
+    getReputationScore(peerId) {
+        return this.reputationScores.get(peerId);
+    }
+    getAllReputationScores() {
+        return new Map(this.reputationScores);
+    }
+    shouldAutoPause(peerId) {
+        const score = this.reputationScores.get(peerId);
+        if (!score) {
+            return false;
+        }
+        return score.score < this.config.autoPauseThreshold;
+    }
+    clearAll() {
+        this.reputationScores.clear();
+    }
+}
+exports.ReputationTracker = ReputationTracker;
+//# sourceMappingURL=reputation-tracker.js.map

package/dist/security/reputation-tracker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reputation-tracker.js","sourceRoot":"","sources":["../../src/security/reputation-tracker.ts"],"names":[],"mappings":";;;AAMA,MAAM,kBAAkB,GAAG;IACzB,GAAG,EAAE,CAAC;IACN,MAAM,EAAE,CAAC;IACT,IAAI,EAAE,EAAE;IACR,QAAQ,EAAE,EAAE;CACJ,CAAC;AA4CX,MAAa,iBAAiB;IACX,MAAM,CAAS;IACf,MAAM,CAA0B;IAChC,gBAAgB,CAAmC;IAEpE,YAAY,MAAc,EAAE,MAA+B;QACzD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,mBAAmB,EAAE,CAAC,CAAC;QAC/D,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,gBAAgB,GAAG,IAAI,GAAG,EAAE,CAAC;QAElC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+BAA+B,EAAE;YAChD,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;YAC7C,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAC,CAAC;IACL,CAAC;IAKM,KAAK,CAAC,qBAAqB,CAAC,KAA0B;QAC3D,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;YAGxD,IAAI,KAAK,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC9C,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,KAAK,GAAG;oBACN,MAAM;oBACN,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;oBAC3B,WAAW,EAAE,SAAS;oBACtB,UAAU,EAAE,EAAE;iBACf,CAAC;gBACF,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YAC3C,CAAC;YAGD,MAAM,OAAO,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;YAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,GAAG,OAAO,CAAC,CAAC;YAGpD,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;gBACpB,SAAS;gBACT,YAAY,EAAE,QAAQ;gBACtB,QAAQ;gBACR,cAAc,EAAE,OAAO;aACxB,CAAC,CAAC;YAEH,KAAK,CAAC,KAAK,GAAG,QAAQ,CAAC;YACvB,KAAK,CAAC,WAAW,GAAG,SAAS,CAAC;YAE9B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE;gBAC3C,MAAM;gBACN,aAAa,EAAE,KAAK,CAAC,KAAK,GAAG,OAAO;gBACpC,QAAQ;gBACR,OAAO;gBACP,QAAQ;gBACR,QAAQ;gBACR,cAAc,EAAE,KAAK,CAAC,UAAU,CAAC,MAAM;aACxC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAEf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,EAAE;gBACrD,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAQM,eAAe,CAAC,MAAc,EAAE,WAAmB;QACxD,MAAM,KAAK,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAChD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO;QACT,CAAC;QAGD,MAAM,QAAQ,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;QACrC,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,QAAQ,CAAC,CAAC;QAE7E,IAAI,WAAW,KAAK,CAAC,EAAE,CAAC;YACtB,OAAO;QACT,CAAC;QAGD,MAAM,WAAW,GAAG,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;QACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,GAAG,WAAW,CAAC,CAAC;QAE3E,IAAI,QAAQ,KAAK,KAAK,CAAC,KAAK,EAAE,CAAC;YAC7B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE;gBACvC,MAAM;gBACN,aAAa,EAAE,KAAK,CAAC,KAAK;gBAC1B,QAAQ;gBACR,WAAW;gBACX,WAAW;aACZ,CAAC,CAAC;YAEH,KAAK,CAAC,KAAK,GAAG,QAAQ,CAAC;YACvB,KAAK,CAAC,WAAW,GAAG,WAAW,CAAC;QAClC,CAAC;IACH,CAAC;IAKM,kBAAkB,CAAC,WAAmB;QAC3C,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACzD,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAKM,kBAAkB,CAAC,MAAc;QACtC,OAAO,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC3C,CAAC;IAKM,sBAAsB;QAC3B,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACxC,CAAC;IAKM,eAAe,CAAC,MAAc;QACnC,MAAM,KAAK,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAChD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC;IACtD,CAAC;IAKM,QAAQ;QACb,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC;IAChC,CAAC;CACF;AApJD,8CAoJC"}

package/dist/security/rules/balance-manipulation-rule.d.ts

@@ -0,0 +1,23 @@
+import { FraudRule, FraudDetection, SettlementEvent, PacketEvent, ChannelEvent } from '../fraud-detector';
+export interface BalanceEvent extends SettlementEvent {
+    previousBalance?: number;
+    newBalance?: number;
+}
+interface BalanceHistory {
+    peerId: string;
+    balances: {
+        balance: number;
+        timestamp: number;
+    }[];
+}
+export declare class BalanceManipulationRule implements FraudRule {
+    readonly name = "BalanceManipulationRule";
+    readonly severity: "critical";
+    private readonly balanceHistory;
+    constructor();
+    check(event: SettlementEvent | PacketEvent | ChannelEvent): Promise<FraudDetection>;
+    clearHistory(): void;
+    getBalanceHistory(peerId: string): BalanceHistory | undefined;
+}
+export {};
+//# sourceMappingURL=balance-manipulation-rule.d.ts.map

package/dist/security/rules/balance-manipulation-rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"balance-manipulation-rule.d.ts","sourceRoot":"","sources":["../../../src/security/rules/balance-manipulation-rule.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,EACT,cAAc,EACd,eAAe,EACf,WAAW,EACX,YAAY,EACb,MAAM,mBAAmB,CAAC;AAK3B,MAAM,WAAW,YAAa,SAAQ,eAAe;IACnD,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAKD,UAAU,cAAc;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE;QACR,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,MAAM,CAAC;KACnB,EAAE,CAAC;CACL;AASD,qBAAa,uBAAwB,YAAW,SAAS;IACvD,SAAgB,IAAI,6BAA6B;IACjD,SAAgB,QAAQ,EAAG,UAAU,CAAU;IAE/C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA8B;;IAShD,KAAK,CAAC,KAAK,EAAE,eAAe,GAAG,WAAW,GAAG,YAAY,GAAG,OAAO,CAAC,cAAc,CAAC;IAqEzF,YAAY,IAAI,IAAI;IAOpB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS;CAGrE"}

package/dist/security/rules/balance-manipulation-rule.js

@@ -0,0 +1,70 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BalanceManipulationRule = void 0;
+class BalanceManipulationRule {
+    name = 'BalanceManipulationRule';
+    severity = 'critical';
+    balanceHistory;
+    constructor() {
+        this.balanceHistory = new Map();
+    }
+    async check(event) {
+        if (event.type !== 'settlement') {
+            return { detected: false };
+        }
+        const balanceEvent = event;
+        if (balanceEvent.newBalance === undefined) {
+            return { detected: false };
+        }
+        if (balanceEvent.newBalance < 0) {
+            return {
+                detected: true,
+                peerId: balanceEvent.peerId,
+                details: {
+                    description: `Negative balance attempt detected: ${balanceEvent.newBalance}`,
+                    newBalance: balanceEvent.newBalance,
+                    previousBalance: balanceEvent.previousBalance,
+                    timestamp: balanceEvent.timestamp,
+                },
+            };
+        }
+        if (balanceEvent.previousBalance !== undefined) {
+            let history = this.balanceHistory.get(balanceEvent.peerId);
+            if (!history) {
+                history = {
+                    peerId: balanceEvent.peerId,
+                    balances: [],
+                };
+                this.balanceHistory.set(balanceEvent.peerId, history);
+            }
+            const balanceDecrease = balanceEvent.previousBalance - balanceEvent.newBalance;
+            if (balanceDecrease > 0 && balanceDecrease !== balanceEvent.amount) {
+                return {
+                    detected: true,
+                    peerId: balanceEvent.peerId,
+                    details: {
+                        description: `Unexpected balance decrease detected: ${balanceDecrease} units (expected: ${balanceEvent.amount})`,
+                        previousBalance: balanceEvent.previousBalance,
+                        newBalance: balanceEvent.newBalance,
+                        expectedDecrease: balanceEvent.amount,
+                        actualDecrease: balanceDecrease,
+                        timestamp: balanceEvent.timestamp,
+                    },
+                };
+            }
+            history.balances.push({
+                balance: balanceEvent.newBalance,
+                timestamp: balanceEvent.timestamp,
+            });
+        }
+        return { detected: false };
+    }
+    clearHistory() {
+        this.balanceHistory.clear();
+    }
+    getBalanceHistory(peerId) {
+        return this.balanceHistory.get(peerId);
+    }
+}
+exports.BalanceManipulationRule = BalanceManipulationRule;
+//# sourceMappingURL=balance-manipulation-rule.js.map

package/dist/security/rules/balance-manipulation-rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"balance-manipulation-rule.js","sourceRoot":"","sources":["../../../src/security/rules/balance-manipulation-rule.ts"],"names":[],"mappings":";;;AAkCA,MAAa,uBAAuB;IAClB,IAAI,GAAG,yBAAyB,CAAC;IACjC,QAAQ,GAAG,UAAmB,CAAC;IAE9B,cAAc,CAA8B;IAE7D;QACE,IAAI,CAAC,cAAc,GAAG,IAAI,GAAG,EAAE,CAAC;IAClC,CAAC;IAKM,KAAK,CAAC,KAAK,CAAC,KAAmD;QAEpE,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAChC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAC7B,CAAC;QAED,MAAM,YAAY,GAAG,KAAqB,CAAC;QAG3C,IAAI,YAAY,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YAC1C,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAC7B,CAAC;QAGD,IAAI,YAAY,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC;YAChC,OAAO;gBACL,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,YAAY,CAAC,MAAM;gBAC3B,OAAO,EAAE;oBACP,WAAW,EAAE,sCAAsC,YAAY,CAAC,UAAU,EAAE;oBAC5E,UAAU,EAAE,YAAY,CAAC,UAAU;oBACnC,eAAe,EAAE,YAAY,CAAC,eAAe;oBAC7C,SAAS,EAAE,YAAY,CAAC,SAAS;iBAClC;aACF,CAAC;QACJ,CAAC;QAGD,IAAI,YAAY,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;YAE/C,IAAI,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;YAC3D,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,GAAG;oBACR,MAAM,EAAE,YAAY,CAAC,MAAM;oBAC3B,QAAQ,EAAE,EAAE;iBACb,CAAC;gBACF,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACxD,CAAC;YAGD,MAAM,eAAe,GAAG,YAAY,CAAC,eAAe,GAAG,YAAY,CAAC,UAAU,CAAC;YAC/E,IAAI,eAAe,GAAG,CAAC,IAAI,eAAe,KAAK,YAAY,CAAC,MAAM,EAAE,CAAC;gBACnE,OAAO;oBACL,QAAQ,EAAE,IAAI;oBACd,MAAM,EAAE,YAAY,CAAC,MAAM;oBAC3B,OAAO,EAAE;wBACP,WAAW,EAAE,yCAAyC,eAAe,qBAAqB,YAAY,CAAC,MAAM,GAAG;wBAChH,eAAe,EAAE,YAAY,CAAC,eAAe;wBAC7C,UAAU,EAAE,YAAY,CAAC,UAAU;wBACnC,gBAAgB,EAAE,YAAY,CAAC,MAAM;wBACrC,cAAc,EAAE,eAAe;wBAC/B,SAAS,EAAE,YAAY,CAAC,SAAS;qBAClC;iBACF,CAAC;YACJ,CAAC;YAGD,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;gBACpB,OAAO,EAAE,YAAY,CAAC,UAAU;gBAChC,SAAS,EAAE,YAAY,CAAC,SAAS;aAClC,CAAC,CAAC;QACL,CAAC;QAED,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC7B,CAAC;IAKM,YAAY;QACjB,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;IAC9B,CAAC;IAKM,iBAAiB,CAAC,MAAc;QACrC,OAAO,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACzC,CAAC;CACF;AA5FD,0DA4FC"}

package/dist/security/rules/double-spend-detection-rule.d.ts

@@ -0,0 +1,23 @@
+import { FraudRule, FraudDetection, SettlementEvent, PacketEvent, ChannelEvent } from '../fraud-detector';
+interface ClaimHistory {
+    peerId: string;
+    channelId: string;
+    claims: {
+        amount: number;
+        timestamp: number;
+    }[];
+}
+export interface ClaimEvent extends SettlementEvent {
+    claimAmount?: number;
+}
+export declare class DoubleSpendDetectionRule implements FraudRule {
+    readonly name = "DoubleSpendDetectionRule";
+    readonly severity: "critical";
+    private readonly claimHistory;
+    constructor();
+    check(event: SettlementEvent | PacketEvent | ChannelEvent): Promise<FraudDetection>;
+    clearHistory(): void;
+    getClaimHistory(peerId: string, channelId: string): ClaimHistory | undefined;
+}
+export {};
+//# sourceMappingURL=double-spend-detection-rule.d.ts.map

package/dist/security/rules/double-spend-detection-rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"double-spend-detection-rule.d.ts","sourceRoot":"","sources":["../../../src/security/rules/double-spend-detection-rule.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,EACT,cAAc,EACd,eAAe,EACf,WAAW,EACX,YAAY,EACb,MAAM,mBAAmB,CAAC;AAK3B,UAAU,YAAY;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE;QACN,MAAM,EAAE,MAAM,CAAC;QACf,SAAS,EAAE,MAAM,CAAC;KACnB,EAAE,CAAC;CACL;AAKD,MAAM,WAAW,UAAW,SAAQ,eAAe;IACjD,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AASD,qBAAa,wBAAyB,YAAW,SAAS;IACxD,SAAgB,IAAI,8BAA8B;IAClD,SAAgB,QAAQ,EAAG,UAAU,CAAU;IAE/C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA4B;;IAS5C,KAAK,CAAC,KAAK,EAAE,eAAe,GAAG,WAAW,GAAG,YAAY,GAAG,OAAO,CAAC,cAAc,CAAC;IA0DzF,YAAY,IAAI,IAAI;IAOpB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS;CAGpF"}

package/dist/security/rules/double-spend-detection-rule.js

@@ -0,0 +1,61 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DoubleSpendDetectionRule = void 0;
+class DoubleSpendDetectionRule {
+    name = 'DoubleSpendDetectionRule';
+    severity = 'critical';
+    claimHistory;
+    constructor() {
+        this.claimHistory = new Map();
+    }
+    async check(event) {
+        if (event.type !== 'settlement') {
+            return { detected: false };
+        }
+        const settlementEvent = event;
+        if (!settlementEvent.channelId || settlementEvent.claimAmount === undefined) {
+            return { detected: false };
+        }
+        const historyKey = `${settlementEvent.peerId}:${settlementEvent.channelId}`;
+        let history = this.claimHistory.get(historyKey);
+        if (!history) {
+            history = {
+                peerId: settlementEvent.peerId,
+                channelId: settlementEvent.channelId,
+                claims: [],
+            };
+            this.claimHistory.set(historyKey, history);
+        }
+        const previousClaims = history.claims;
+        if (previousClaims.length > 0) {
+            const lastClaim = previousClaims[previousClaims.length - 1];
+            if (lastClaim && settlementEvent.claimAmount < lastClaim.amount) {
+                return {
+                    detected: true,
+                    peerId: settlementEvent.peerId,
+                    details: {
+                        description: `Double-spend attempt detected: Claim amount ${settlementEvent.claimAmount} is lower than previous claim ${lastClaim.amount}`,
+                        currentClaimAmount: settlementEvent.claimAmount,
+                        previousClaimAmount: lastClaim.amount,
+                        channelId: settlementEvent.channelId,
+                        timestamp: settlementEvent.timestamp,
+                        previousClaimTimestamp: lastClaim.timestamp,
+                    },
+                };
+            }
+        }
+        history.claims.push({
+            amount: settlementEvent.claimAmount,
+            timestamp: settlementEvent.timestamp,
+        });
+        return { detected: false };
+    }
+    clearHistory() {
+        this.claimHistory.clear();
+    }
+    getClaimHistory(peerId, channelId) {
+        return this.claimHistory.get(`${peerId}:${channelId}`);
+    }
+}
+exports.DoubleSpendDetectionRule = DoubleSpendDetectionRule;
+//# sourceMappingURL=double-spend-detection-rule.js.map

package/dist/security/rules/double-spend-detection-rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"double-spend-detection-rule.js","sourceRoot":"","sources":["../../../src/security/rules/double-spend-detection-rule.ts"],"names":[],"mappings":";;;AAkCA,MAAa,wBAAwB;IACnB,IAAI,GAAG,0BAA0B,CAAC;IAClC,QAAQ,GAAG,UAAmB,CAAC;IAE9B,YAAY,CAA4B;IAEzD;QACE,IAAI,CAAC,YAAY,GAAG,IAAI,GAAG,EAAE,CAAC;IAChC,CAAC;IAKM,KAAK,CAAC,KAAK,CAAC,KAAmD;QAEpE,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAChC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAC7B,CAAC;QAED,MAAM,eAAe,GAAG,KAAmB,CAAC;QAG5C,IAAI,CAAC,eAAe,CAAC,SAAS,IAAI,eAAe,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YAC5E,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAC7B,CAAC;QAED,MAAM,UAAU,GAAG,GAAG,eAAe,CAAC,MAAM,IAAI,eAAe,CAAC,SAAS,EAAE,CAAC;QAG5E,IAAI,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAChD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,GAAG;gBACR,MAAM,EAAE,eAAe,CAAC,MAAM;gBAC9B,SAAS,EAAE,eAAe,CAAC,SAAS;gBACpC,MAAM,EAAE,EAAE;aACX,CAAC;YACF,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC7C,CAAC;QAGD,MAAM,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC;QACtC,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,SAAS,GAAG,cAAc,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YAC5D,IAAI,SAAS,IAAI,eAAe,CAAC,WAAW,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC;gBAChE,OAAO;oBACL,QAAQ,EAAE,IAAI;oBACd,MAAM,EAAE,eAAe,CAAC,MAAM;oBAC9B,OAAO,EAAE;wBACP,WAAW,EAAE,+CAA+C,eAAe,CAAC,WAAW,iCAAiC,SAAS,CAAC,MAAM,EAAE;wBAC1I,kBAAkB,EAAE,eAAe,CAAC,WAAW;wBAC/C,mBAAmB,EAAE,SAAS,CAAC,MAAM;wBACrC,SAAS,EAAE,eAAe,CAAC,SAAS;wBACpC,SAAS,EAAE,eAAe,CAAC,SAAS;wBACpC,sBAAsB,EAAE,SAAS,CAAC,SAAS;qBAC5C;iBACF,CAAC;YACJ,CAAC;QACH,CAAC;QAGD,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC;YAClB,MAAM,EAAE,eAAe,CAAC,WAAW;YACnC,SAAS,EAAE,eAAe,CAAC,SAAS;SACrC,CAAC,CAAC;QAEH,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC7B,CAAC;IAKM,YAAY;QACjB,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;IAC5B,CAAC;IAKM,eAAe,CAAC,MAAc,EAAE,SAAiB;QACtD,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,SAAS,EAAE,CAAC,CAAC;IACzD,CAAC;CACF;AAjFD,4DAiFC"}

package/dist/security/rules/rapid-channel-closure-rule.d.ts

@@ -0,0 +1,16 @@
+import { FraudRule, FraudDetection, SettlementEvent, PacketEvent, ChannelEvent } from '../fraud-detector';
+export interface RapidChannelClosureConfig {
+    maxClosures: number;
+    timeWindow: number;
+}
+export declare class RapidChannelClosureRule implements FraudRule {
+    readonly name = "RapidChannelClosureRule";
+    readonly severity: "high";
+    private readonly config;
+    private readonly closureHistory;
+    constructor(config: RapidChannelClosureConfig);
+    check(event: SettlementEvent | PacketEvent | ChannelEvent): Promise<FraudDetection>;
+    private cleanupOldClosures;
+    clearHistory(): void;
+}
+//# sourceMappingURL=rapid-channel-closure-rule.d.ts.map

package/dist/security/rules/rapid-channel-closure-rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rapid-channel-closure-rule.d.ts","sourceRoot":"","sources":["../../../src/security/rules/rapid-channel-closure-rule.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,EACT,cAAc,EACd,eAAe,EACf,WAAW,EACX,YAAY,EACb,MAAM,mBAAmB,CAAC;AAK3B,MAAM,WAAW,yBAAyB;IAIxC,WAAW,EAAE,MAAM,CAAC;IAKpB,UAAU,EAAE,MAAM,CAAC;CACpB;AAmBD,qBAAa,uBAAwB,YAAW,SAAS;IACvD,SAAgB,IAAI,6BAA6B;IACjD,SAAgB,QAAQ,EAAG,MAAM,CAAU;IAE3C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA4B;IACnD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA8B;gBAEjD,MAAM,EAAE,yBAAyB;IAQhC,KAAK,CAAC,KAAK,EAAE,eAAe,GAAG,WAAW,GAAG,YAAY,GAAG,OAAO,CAAC,cAAc,CAAC;IAkDhG,OAAO,CAAC,kBAAkB;IAQnB,YAAY,IAAI,IAAI;CAG5B"}

package/dist/security/rules/rapid-channel-closure-rule.js

@@ -0,0 +1,57 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RapidChannelClosureRule = void 0;
+class RapidChannelClosureRule {
+    name = 'RapidChannelClosureRule';
+    severity = 'high';
+    config;
+    closureHistory;
+    constructor(config) {
+        this.config = config;
+        this.closureHistory = new Map();
+    }
+    async check(event) {
+        if (event.type !== 'channel' || event.action !== 'close') {
+            return { detected: false };
+        }
+        const channelEvent = event;
+        const now = channelEvent.timestamp;
+        let history = this.closureHistory.get(channelEvent.peerId);
+        if (!history) {
+            history = {
+                peerId: channelEvent.peerId,
+                closures: [],
+            };
+            this.closureHistory.set(channelEvent.peerId, history);
+        }
+        history.closures.push({
+            channelId: channelEvent.channelId,
+            timestamp: now,
+        });
+        this.cleanupOldClosures(history, now);
+        if (history.closures.length > this.config.maxClosures) {
+            const closureCount = history.closures.length;
+            return {
+                detected: true,
+                peerId: channelEvent.peerId,
+                details: {
+                    description: `Rapid channel closures detected: ${closureCount} closures in ${this.config.timeWindow / 1000}s (threshold: ${this.config.maxClosures})`,
+                    closureCount,
+                    maxClosures: this.config.maxClosures,
+                    timeWindow: this.config.timeWindow,
+                    channelIds: history.closures.map((c) => c.channelId),
+                },
+            };
+        }
+        return { detected: false };
+    }
+    cleanupOldClosures(history, now) {
+        const cutoffTime = now - this.config.timeWindow;
+        history.closures = history.closures.filter((closure) => closure.timestamp >= cutoffTime);
+    }
+    clearHistory() {
+        this.closureHistory.clear();
+    }
+}
+exports.RapidChannelClosureRule = RapidChannelClosureRule;
+//# sourceMappingURL=rapid-channel-closure-rule.js.map

package/dist/security/rules/rapid-channel-closure-rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rapid-channel-closure-rule.js","sourceRoot":"","sources":["../../../src/security/rules/rapid-channel-closure-rule.ts"],"names":[],"mappings":";;;AAwCA,MAAa,uBAAuB;IAClB,IAAI,GAAG,yBAAyB,CAAC;IACjC,QAAQ,GAAG,MAAe,CAAC;IAE1B,MAAM,CAA4B;IAClC,cAAc,CAA8B;IAE7D,YAAY,MAAiC;QAC3C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,cAAc,GAAG,IAAI,GAAG,EAAE,CAAC;IAClC,CAAC;IAKM,KAAK,CAAC,KAAK,CAAC,KAAmD;QAEpE,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YACzD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAC7B,CAAC;QAED,MAAM,YAAY,GAAG,KAAqB,CAAC;QAC3C,MAAM,GAAG,GAAG,YAAY,CAAC,SAAS,CAAC;QAGnC,IAAI,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAC3D,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,GAAG;gBACR,MAAM,EAAE,YAAY,CAAC,MAAM;gBAC3B,QAAQ,EAAE,EAAE;aACb,CAAC;YACF,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACxD,CAAC;QAGD,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;YACpB,SAAS,EAAE,YAAY,CAAC,SAAS;YACjC,SAAS,EAAE,GAAG;SACf,CAAC,CAAC;QAGH,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAGtC,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YACtD,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;YAC7C,OAAO;gBACL,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,YAAY,CAAC,MAAM;gBAC3B,OAAO,EAAE;oBACP,WAAW,EAAE,oCAAoC,YAAY,gBAAgB,IAAI,CAAC,MAAM,CAAC,UAAU,GAAG,IAAI,iBAAiB,IAAI,CAAC,MAAM,CAAC,WAAW,GAAG;oBACrJ,YAAY;oBACZ,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;oBACpC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU;oBAClC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;iBACrD;aACF,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC7B,CAAC;IAKO,kBAAkB,CAAC,OAAuB,EAAE,GAAW;QAC7D,MAAM,UAAU,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC;QAChD,OAAO,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,SAAS,IAAI,UAAU,CAAC,CAAC;IAC3F,CAAC;IAKM,YAAY;QACjB,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;IAC9B,CAAC;CACF;AA5ED,0DA4EC"}

package/dist/security/rules/sudden-traffic-spike-rule.d.ts

@@ -0,0 +1,18 @@
+import { FraudRule, FraudDetection, SettlementEvent, PacketEvent, ChannelEvent } from '../fraud-detector';
+export interface SuddenTrafficSpikeConfig {
+    spikeThreshold: number;
+    timeWindow: number;
+}
+export declare class SuddenTrafficSpikeRule implements FraudRule {
+    readonly name = "SuddenTrafficSpikeRule";
+    readonly severity: "medium";
+    private readonly config;
+    private readonly trafficHistory;
+    constructor(config: SuddenTrafficSpikeConfig);
+    check(event: SettlementEvent | PacketEvent | ChannelEvent): Promise<FraudDetection>;
+    private cleanupOldEntries;
+    private calculateCurrentRate;
+    private calculateHistoricalAverage;
+    clearHistory(): void;
+}
+//# sourceMappingURL=sudden-traffic-spike-rule.d.ts.map

package/dist/security/rules/sudden-traffic-spike-rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sudden-traffic-spike-rule.d.ts","sourceRoot":"","sources":["../../../src/security/rules/sudden-traffic-spike-rule.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,EACT,cAAc,EACd,eAAe,EACf,WAAW,EACX,YAAY,EACb,MAAM,mBAAmB,CAAC;AAK3B,MAAM,WAAW,wBAAwB;IAIvC,cAAc,EAAE,MAAM,CAAC;IAKvB,UAAU,EAAE,MAAM,CAAC;CACpB;AAkBD,qBAAa,sBAAuB,YAAW,SAAS;IACtD,SAAgB,IAAI,4BAA4B;IAChD,SAAgB,QAAQ,EAAG,QAAQ,CAAU;IAE7C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA2B;IAClD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA8B;gBAEjD,MAAM,EAAE,wBAAwB;IAQ/B,KAAK,CAAC,KAAK,EAAE,eAAe,GAAG,WAAW,GAAG,YAAY,GAAG,OAAO,CAAC,cAAc,CAAC;IA4DhG,OAAO,CAAC,iBAAiB;IAuBzB,OAAO,CAAC,oBAAoB;IAkB5B,OAAO,CAAC,0BAA0B;IAe3B,YAAY,IAAI,IAAI;CAG5B"}