@toon-protocol/connector 3.3.1 → 3.3.2

package/dist/security/alert-notifier.js

@@ -0,0 +1,136 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AlertNotifier = void 0;
+class AlertNotifier {
+    logger;
+    config;
+    constructor(logger, config) {
+        this.logger = logger.child({ component: 'AlertNotifier' });
+        this.config = {
+            retryAttempts: 3,
+            retryDelayMs: 1000,
+            ...config,
+        };
+        this.logger.info('AlertNotifier initialized', {
+            emailEnabled: config.email?.enabled ?? false,
+            slackEnabled: config.slack?.enabled ?? false,
+        });
+    }
+    async sendAlert(event) {
+        const { severity, ruleName, peerId, details } = event;
+        if (severity === 'critical') {
+            await Promise.allSettled([
+                this.sendEmailAlert(severity, this.formatAlertMessage(event)),
+                this.sendSlackAlert(severity, this.formatAlertMessage(event)),
+            ]);
+        }
+        else if (severity === 'high') {
+            await this.sendSlackAlert(severity, this.formatAlertMessage(event));
+        }
+        else {
+            this.logger.info('Fraud alert (log only)', {
+                severity,
+                ruleName,
+                peerId,
+                details,
+            });
+        }
+    }
+    async sendEmailAlert(severity, message) {
+        if (!this.config.email?.enabled) {
+            return;
+        }
+        let lastError;
+        for (let attempt = 0; attempt < (this.config.retryAttempts ?? 3); attempt++) {
+            try {
+                await this.sendEmailAlertInternal(severity, message);
+                this.logger.info('Email alert sent successfully', { severity, attempt });
+                return;
+            }
+            catch (error) {
+                lastError = error instanceof Error ? error : new Error(String(error));
+                this.logger.warn('Email alert delivery failed, retrying', {
+                    severity,
+                    attempt,
+                    error: lastError.message,
+                });
+                const delay = (this.config.retryDelayMs ?? 1000) * Math.pow(2, attempt);
+                await this.sleep(delay);
+            }
+        }
+        this.logger.error('Failed to send email alert after retries', {
+            severity,
+            attempts: this.config.retryAttempts,
+            error: lastError?.message,
+        });
+    }
+    async sendEmailAlertInternal(severity, message) {
+        if (!this.config.email?.enabled) {
+            return;
+        }
+        this.logger.debug('Email alert would be sent', {
+            severity,
+            recipients: this.config.email.recipients,
+            message,
+            smtpHost: this.config.email.smtpHost,
+        });
+        await this.sleep(10);
+    }
+    async sendSlackAlert(severity, message) {
+        if (!this.config.slack?.enabled) {
+            return;
+        }
+        let lastError;
+        for (let attempt = 0; attempt < (this.config.retryAttempts ?? 3); attempt++) {
+            try {
+                await this.sendSlackAlertInternal(severity, message);
+                this.logger.info('Slack alert sent successfully', { severity, attempt });
+                return;
+            }
+            catch (error) {
+                lastError = error instanceof Error ? error : new Error(String(error));
+                this.logger.warn('Slack alert delivery failed, retrying', {
+                    severity,
+                    attempt,
+                    error: lastError.message,
+                });
+                const delay = (this.config.retryDelayMs ?? 1000) * Math.pow(2, attempt);
+                await this.sleep(delay);
+            }
+        }
+        this.logger.error('Failed to send Slack alert after retries', {
+            severity,
+            attempts: this.config.retryAttempts,
+            error: lastError?.message,
+        });
+    }
+    async sendSlackAlertInternal(severity, message) {
+        if (!this.config.slack?.enabled) {
+            return;
+        }
+        this.logger.debug('Slack alert would be sent', {
+            severity,
+            webhookUrl: this.config.slack.webhookUrl,
+            channel: this.config.slack.channel,
+            message,
+        });
+        await this.sleep(10);
+    }
+    formatAlertMessage(event) {
+        const { severity, ruleName, peerId, timestamp, details } = event;
+        const date = new Date(timestamp).toISOString();
+        let message = `🚨 FRAUD ALERT [${severity.toUpperCase()}]\n`;
+        message += `Rule: ${ruleName}\n`;
+        message += `Peer: ${peerId}\n`;
+        message += `Time: ${date}\n`;
+        if (details?.description) {
+            message += `\nDetails: ${details.description}\n`;
+        }
+        return message;
+    }
+    sleep(ms) {
+        return new Promise((resolve) => setTimeout(resolve, ms));
+    }
+}
+exports.AlertNotifier = AlertNotifier;
+//# sourceMappingURL=alert-notifier.js.map

package/dist/security/alert-notifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"alert-notifier.js","sourceRoot":"","sources":["../../src/security/alert-notifier.ts"],"names":[],"mappings":";;;AA6CA,MAAa,aAAa;IACP,MAAM,CAAS;IACf,MAAM,CAAc;IAErC,YAAY,MAAc,EAAE,MAAmB;QAC7C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,eAAe,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC,MAAM,GAAG;YACZ,aAAa,EAAE,CAAC;YAChB,YAAY,EAAE,IAAI;YAClB,GAAG,MAAM;SACV,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE;YAC5C,YAAY,EAAE,MAAM,CAAC,KAAK,EAAE,OAAO,IAAI,KAAK;YAC5C,YAAY,EAAE,MAAM,CAAC,KAAK,EAAE,OAAO,IAAI,KAAK;SAC7C,CAAC,CAAC;IACL,CAAC;IAKM,KAAK,CAAC,SAAS,CAAC,KAA0B;QAC/C,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;QAGtD,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;YAE5B,MAAM,OAAO,CAAC,UAAU,CAAC;gBACvB,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;gBAC7D,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;aAC9D,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;YAE/B,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC;QACtE,CAAC;aAAM,CAAC;YAEN,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE;gBACzC,QAAQ;gBACR,QAAQ;gBACR,MAAM;gBACN,OAAO;aACR,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAKM,KAAK,CAAC,cAAc,CAAC,QAAgB,EAAE,OAAe;QAC3D,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC;YAChC,OAAO;QACT,CAAC;QAED,IAAI,SAA4B,CAAC;QAEjC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,IAAI,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;YAC5E,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,sBAAsB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;gBACrD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+BAA+B,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;gBACzE,OAAO;YACT,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,SAAS,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;gBACtE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uCAAuC,EAAE;oBACxD,QAAQ;oBACR,OAAO;oBACP,KAAK,EAAE,SAAS,CAAC,OAAO;iBACzB,CAAC,CAAC;gBAGH,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;gBACxE,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;QAGD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,0CAA0C,EAAE;YAC5D,QAAQ;YACR,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa;YACnC,KAAK,EAAE,SAAS,EAAE,OAAO;SAC1B,CAAC,CAAC;IACL,CAAC;IAKO,KAAK,CAAC,sBAAsB,CAAC,QAAgB,EAAE,OAAe;QACpE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC;YAChC,OAAO;QACT,CAAC;QAGD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE;YAC7C,QAAQ;YACR,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU;YACxC,OAAO;YACP,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ;SACrC,CAAC,CAAC;QAGH,MAAM,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAIvB,CAAC;IAKM,KAAK,CAAC,cAAc,CAAC,QAAgB,EAAE,OAAe;QAC3D,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC;YAChC,OAAO;QACT,CAAC;QAED,IAAI,SAA4B,CAAC;QAEjC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,IAAI,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;YAC5E,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,sBAAsB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;gBACrD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+BAA+B,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;gBACzE,OAAO;YACT,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,SAAS,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;gBACtE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uCAAuC,EAAE;oBACxD,QAAQ;oBACR,OAAO;oBACP,KAAK,EAAE,SAAS,CAAC,OAAO;iBACzB,CAAC,CAAC;gBAGH,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;gBACxE,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;QAGD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,0CAA0C,EAAE;YAC5D,QAAQ;YACR,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa;YACnC,KAAK,EAAE,SAAS,EAAE,OAAO;SAC1B,CAAC,CAAC;IACL,CAAC;IAKO,KAAK,CAAC,sBAAsB,CAAC,QAAgB,EAAE,OAAe;QACpE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC;YAChC,OAAO;QACT,CAAC;QAGD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE;YAC7C,QAAQ;YACR,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU;YACxC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO;YAClC,OAAO;SACR,CAAC,CAAC;QAGH,MAAM,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAIvB,CAAC;IAKO,kBAAkB,CAAC,KAA0B;QACnD,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;QACjE,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC;QAE/C,IAAI,OAAO,GAAG,mBAAmB,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAC;QAC7D,OAAO,IAAI,SAAS,QAAQ,IAAI,CAAC;QACjC,OAAO,IAAI,SAAS,MAAM,IAAI,CAAC;QAC/B,OAAO,IAAI,SAAS,IAAI,IAAI,CAAC;QAE7B,IAAI,OAAO,EAAE,WAAW,EAAE,CAAC;YACzB,OAAO,IAAI,cAAc,OAAO,CAAC,WAAW,IAAI,CAAC;QACnD,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAKO,KAAK,CAAC,EAAU;QACtB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;IAC3D,CAAC;CACF;AA9LD,sCA8LC"}

package/dist/security/audit-logger.d.ts

@@ -0,0 +1,34 @@
+import pino from 'pino';
+export type AuditEventType = 'SIGN_REQUEST' | 'SIGN_SUCCESS' | 'SIGN_FAILURE' | 'KEY_ROTATION_START' | 'KEY_ROTATION_COMPLETE' | 'KEY_ACCESS_DENIED' | 'FRAUD_DETECTED' | 'PEER_PAUSED' | 'PEER_RESUMED';
+export interface AuditLogEntry {
+    event: AuditEventType;
+    keyId: string;
+    timestamp: number;
+    nodeId: string;
+    backend: string;
+    details?: Record<string, unknown>;
+}
+export interface AuditLogConfig {
+    nodeId: string;
+    backend: string;
+    retentionDays?: number;
+}
+export declare class AuditLogger {
+    private readonly logger;
+    private readonly nodeId;
+    private readonly backend;
+    private readonly retentionDays;
+    constructor(logger: pino.Logger, config: AuditLogConfig);
+    logSignRequest(keyId: string, messageHash: string): void;
+    logSignSuccess(keyId: string, signatureHash: string): void;
+    logSignFailure(keyId: string, error: Error): void;
+    logKeyRotation(oldKeyId: string, newKeyId: string, phase: 'START' | 'COMPLETE'): void;
+    logAccessDenied(keyId: string, reason: string): void;
+    logFraudDetection(peerId: string, ruleName: string, severity: 'low' | 'medium' | 'high' | 'critical', details?: Record<string, unknown>): void;
+    logPeerPause(peerId: string, reason: string, ruleViolated: string, severity: string): void;
+    logPeerResume(peerId: string, operator?: string): void;
+    exportAuditLogs(startDate: number, endDate: number): Promise<AuditLogEntry[]>;
+    private _createEntry;
+}
+export declare function createAuditLogger(_config: AuditLogConfig): pino.Logger;
+//# sourceMappingURL=audit-logger.d.ts.map

package/dist/security/audit-logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-logger.d.ts","sourceRoot":"","sources":["../../src/security/audit-logger.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,MAAM,CAAC;AAKxB,MAAM,MAAM,cAAc,GACtB,cAAc,GACd,cAAc,GACd,cAAc,GACd,oBAAoB,GACpB,uBAAuB,GACvB,mBAAmB,GACnB,gBAAgB,GAChB,aAAa,GACb,cAAc,CAAC;AAKnB,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,cAAc,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAKD,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAYD,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAc;IACrC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;gBAE3B,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,cAAc;IAkBvD,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI;IAUxD,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,IAAI;IAU1D,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,GAAG,IAAI;IAWjD,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,UAAU,GAAG,IAAI;IAYrF,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAUpD,iBAAiB,CACf,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,EAChD,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAChC,IAAI;IAYP,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI;IAY1F,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI;IAkBhD,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IA6BnF,OAAO,CAAC,YAAY;CAcrB;AAYD,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,cAAc,GAAG,IAAI,CAAC,MAAM,CAoCtE"}

package/dist/security/audit-logger.js

@@ -0,0 +1,132 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuditLogger = void 0;
+exports.createAuditLogger = createAuditLogger;
+const tslib_1 = require("tslib");
+const pino_1 = tslib_1.__importDefault(require("pino"));
+class AuditLogger {
+    logger;
+    nodeId;
+    backend;
+    retentionDays;
+    constructor(logger, config) {
+        this.logger = logger.child({
+            component: 'AuditLogger',
+            nodeId: config.nodeId,
+            backend: config.backend,
+        });
+        this.nodeId = config.nodeId;
+        this.backend = config.backend;
+        this.retentionDays = config.retentionDays ?? 365;
+        this.logger.info('AuditLogger initialized', {
+            retentionDays: this.retentionDays,
+        });
+    }
+    logSignRequest(keyId, messageHash) {
+        const entry = this._createEntry('SIGN_REQUEST', keyId, {
+            messageHash: messageHash.substring(0, 16) + '...',
+        });
+        this.logger.info(entry, 'Sign request initiated');
+    }
+    logSignSuccess(keyId, signatureHash) {
+        const entry = this._createEntry('SIGN_SUCCESS', keyId, {
+            signatureHash: signatureHash.substring(0, 16) + '...',
+        });
+        this.logger.info(entry, 'Sign operation successful');
+    }
+    logSignFailure(keyId, error) {
+        const entry = this._createEntry('SIGN_FAILURE', keyId, {
+            errorMessage: error.message,
+            errorName: error.name,
+        });
+        this.logger.error(entry, 'Sign operation failed');
+    }
+    logKeyRotation(oldKeyId, newKeyId, phase) {
+        const event = phase === 'START' ? 'KEY_ROTATION_START' : 'KEY_ROTATION_COMPLETE';
+        const entry = this._createEntry(event, oldKeyId, {
+            oldKeyId,
+            newKeyId,
+        });
+        this.logger.info(entry, `Key rotation ${phase.toLowerCase()}`);
+    }
+    logAccessDenied(keyId, reason) {
+        const entry = this._createEntry('KEY_ACCESS_DENIED', keyId, {
+            reason,
+        });
+        this.logger.warn(entry, 'Key access denied');
+    }
+    logFraudDetection(peerId, ruleName, severity, details) {
+        const entry = this._createEntry('FRAUD_DETECTED', peerId, {
+            ruleName,
+            severity,
+            ...details,
+        });
+        this.logger.warn(entry, 'Fraud detected');
+    }
+    logPeerPause(peerId, reason, ruleViolated, severity) {
+        const entry = this._createEntry('PEER_PAUSED', peerId, {
+            reason,
+            ruleViolated,
+            severity,
+        });
+        this.logger.warn(entry, 'Peer paused due to fraud detection');
+    }
+    logPeerResume(peerId, operator) {
+        const entry = this._createEntry('PEER_RESUMED', peerId, {
+            operator,
+        });
+        this.logger.info(entry, 'Peer resumed after manual review');
+    }
+    async exportAuditLogs(startDate, endDate) {
+        this.logger.info('Audit log export requested', {
+            startDate: new Date(startDate).toISOString(),
+            endDate: new Date(endDate).toISOString(),
+        });
+        this.logger.warn('exportAuditLogs is a placeholder - integrate with log aggregation system for production');
+        return [];
+    }
+    _createEntry(event, keyId, details) {
+        return {
+            event,
+            keyId,
+            timestamp: Date.now(),
+            nodeId: this.nodeId,
+            backend: this.backend,
+            details,
+        };
+    }
+}
+exports.AuditLogger = AuditLogger;
+function createAuditLogger(_config) {
+    return (0, pino_1.default)({
+        serializers: {
+            privateKey: () => '[REDACTED]',
+            PIN: () => '[REDACTED]',
+            pin: () => '[REDACTED]',
+            credentials: () => '[REDACTED]',
+            secretAccessKey: () => '[REDACTED]',
+            clientSecret: () => '[REDACTED]',
+            aws: (value) => {
+                if (typeof value === 'object' && value !== null) {
+                    return {
+                        ...value,
+                        credentials: '[REDACTED]',
+                        secretAccessKey: '[REDACTED]',
+                    };
+                }
+                return value;
+            },
+            azure: (value) => {
+                if (typeof value === 'object' && value !== null) {
+                    return {
+                        ...value,
+                        credentials: '[REDACTED]',
+                        clientSecret: '[REDACTED]',
+                    };
+                }
+                return value;
+            },
+        },
+    });
+}
+//# sourceMappingURL=audit-logger.js.map

package/dist/security/audit-logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-logger.js","sourceRoot":"","sources":["../../src/security/audit-logger.ts"],"names":[],"mappings":";;;AAkOA,8CAoCC;;AAtQD,wDAAwB;AA+CxB,MAAa,WAAW;IACL,MAAM,CAAc;IACpB,MAAM,CAAS;IACf,OAAO,CAAS;IAChB,aAAa,CAAS;IAEvC,YAAY,MAAmB,EAAE,MAAsB;QACrD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC;YACzB,SAAS,EAAE,aAAa;YACxB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,OAAO,EAAE,MAAM,CAAC,OAAO;SACxB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC5B,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAC9B,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,aAAa,IAAI,GAAG,CAAC;QAEjD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE;YAC1C,aAAa,EAAE,IAAI,CAAC,aAAa;SAClC,CAAC,CAAC;IACL,CAAC;IAKD,cAAc,CAAC,KAAa,EAAE,WAAmB;QAC/C,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,cAAc,EAAE,KAAK,EAAE;YACrD,WAAW,EAAE,WAAW,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK;SAClD,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,wBAAwB,CAAC,CAAC;IACpD,CAAC;IAKD,cAAc,CAAC,KAAa,EAAE,aAAqB;QACjD,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,cAAc,EAAE,KAAK,EAAE;YACrD,aAAa,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK;SACtD,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,2BAA2B,CAAC,CAAC;IACvD,CAAC;IAKD,cAAc,CAAC,KAAa,EAAE,KAAY;QACxC,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,cAAc,EAAE,KAAK,EAAE;YACrD,YAAY,EAAE,KAAK,CAAC,OAAO;YAC3B,SAAS,EAAE,KAAK,CAAC,IAAI;SACtB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,uBAAuB,CAAC,CAAC;IACpD,CAAC;IAKD,cAAc,CAAC,QAAgB,EAAE,QAAgB,EAAE,KAA2B;QAC5E,MAAM,KAAK,GAAG,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,uBAAuB,CAAC;QACjF,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,QAAQ,EAAE;YAC/C,QAAQ;YACR,QAAQ;SACT,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,gBAAgB,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACjE,CAAC;IAKD,eAAe,CAAC,KAAa,EAAE,MAAc;QAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,mBAAmB,EAAE,KAAK,EAAE;YAC1D,MAAM;SACP,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC;IAC/C,CAAC;IAKD,iBAAiB,CACf,MAAc,EACd,QAAgB,EAChB,QAAgD,EAChD,OAAiC;QAEjC,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,gBAAgB,EAAE,MAAM,EAAE;YACxD,QAAQ;YACR,QAAQ;YACR,GAAG,OAAO;SACX,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;IAC5C,CAAC;IAKD,YAAY,CAAC,MAAc,EAAE,MAAc,EAAE,YAAoB,EAAE,QAAgB;QACjF,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,aAAa,EAAE,MAAM,EAAE;YACrD,MAAM;YACN,YAAY;YACZ,QAAQ;SACT,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,oCAAoC,CAAC,CAAC;IAChE,CAAC;IAKD,aAAa,CAAC,MAAc,EAAE,QAAiB;QAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,cAAc,EAAE,MAAM,EAAE;YACtD,QAAQ;SACT,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,kCAAkC,CAAC,CAAC;IAC9D,CAAC;IAaD,KAAK,CAAC,eAAe,CAAC,SAAiB,EAAE,OAAe;QACtD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE;YAC7C,SAAS,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;YAC5C,OAAO,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE;SACzC,CAAC,CAAC;QAeH,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,yFAAyF,CAC1F,CAAC;QAEF,OAAO,EAAE,CAAC;IACZ,CAAC;IAKO,YAAY,CAClB,KAAqB,EACrB,KAAa,EACb,OAAiC;QAEjC,OAAO;YACL,KAAK;YACL,KAAK;YACL,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,OAAO;SACR,CAAC;IACJ,CAAC;CACF;AAvKD,kCAuKC;AAYD,SAAgB,iBAAiB,CAAC,OAAuB;IACvD,OAAO,IAAA,cAAI,EAAC;QACV,WAAW,EAAE;YAEX,UAAU,EAAE,GAAG,EAAE,CAAC,YAAY;YAE9B,GAAG,EAAE,GAAG,EAAE,CAAC,YAAY;YACvB,GAAG,EAAE,GAAG,EAAE,CAAC,YAAY;YAEvB,WAAW,EAAE,GAAG,EAAE,CAAC,YAAY;YAC/B,eAAe,EAAE,GAAG,EAAE,CAAC,YAAY;YACnC,YAAY,EAAE,GAAG,EAAE,CAAC,YAAY;YAEhC,GAAG,EAAE,CAAC,KAAc,EAAE,EAAE;gBACtB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;oBAChD,OAAO;wBACL,GAAI,KAAiC;wBACrC,WAAW,EAAE,YAAY;wBACzB,eAAe,EAAE,YAAY;qBAC9B,CAAC;gBACJ,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC;YAED,KAAK,EAAE,CAAC,KAAc,EAAE,EAAE;gBACxB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;oBAChD,OAAO;wBACL,GAAI,KAAiC;wBACrC,WAAW,EAAE,YAAY;wBACzB,YAAY,EAAE,YAAY;qBAC3B,CAAC;gBACJ,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC;SACF;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/security/backends/environment-backend.d.ts

@@ -0,0 +1,15 @@
+import { Logger } from 'pino';
+import { KeyManagerBackend } from '../key-manager';
+export declare class EnvironmentVariableBackend implements KeyManagerBackend {
+    private evmWallet?;
+    private evmPrivateKey?;
+    private logger;
+    constructor(logger: Logger, options?: {
+        evmPrivateKey?: string;
+    });
+    private _ensureEvmWallet;
+    sign(message: Buffer, _keyId: string): Promise<Buffer>;
+    getPublicKey(_keyId: string): Promise<Buffer>;
+    rotateKey(_keyId: string): Promise<string>;
+}
+//# sourceMappingURL=environment-backend.d.ts.map

package/dist/security/backends/environment-backend.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"environment-backend.d.ts","sourceRoot":"","sources":["../../../src/security/backends/environment-backend.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC;AAE9B,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAOnD,qBAAa,0BAA2B,YAAW,iBAAiB;IAClE,OAAO,CAAC,SAAS,CAAC,CAAS;IAC3B,OAAO,CAAC,aAAa,CAAC,CAAS;IAC/B,OAAO,CAAC,MAAM,CAAS;gBAQX,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE;YAmBlD,gBAAgB;IA2BxB,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAetD,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAc7C,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;CAKjD"}

package/dist/security/backends/environment-backend.js

@@ -0,0 +1,56 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EnvironmentVariableBackend = void 0;
+const optional_require_1 = require("../../utils/optional-require");
+class EnvironmentVariableBackend {
+    evmWallet;
+    evmPrivateKey;
+    logger;
+    constructor(logger, options) {
+        this.logger = logger.child({ component: 'EnvironmentVariableBackend' });
+        const evmPrivateKey = options?.evmPrivateKey ?? process.env.EVM_PRIVATE_KEY;
+        if (evmPrivateKey) {
+            this.evmPrivateKey = evmPrivateKey;
+            this.logger.info('EVM private key found in environment (wallet initialization deferred)');
+        }
+        if (!this.evmPrivateKey) {
+            this.logger.warn('No EVM private key loaded from environment (EVM_PRIVATE_KEY)');
+        }
+    }
+    async _ensureEvmWallet() {
+        if (this.evmWallet) {
+            return this.evmWallet;
+        }
+        if (!this.evmPrivateKey) {
+            throw new Error('EVM wallet not initialized. Set EVM_PRIVATE_KEY environment variable.');
+        }
+        try {
+            const { Wallet } = await (0, optional_require_1.requireOptional)('ethers', 'EVM settlement');
+            this.evmWallet = new Wallet(this.evmPrivateKey);
+            this.logger.info({ address: this.evmWallet.address }, 'EVM wallet loaded from environment');
+            return this.evmWallet;
+        }
+        catch (error) {
+            if (error instanceof Error && error.message.includes('is required for')) {
+                throw error;
+            }
+            this.logger.error({ error }, 'Failed to load EVM private key');
+            throw new Error('Invalid EVM_PRIVATE_KEY in environment');
+        }
+    }
+    async sign(message, _keyId) {
+        const evmWallet = await this._ensureEvmWallet();
+        const signature = evmWallet.signingKey.sign(message);
+        return Buffer.from(signature.serialized.slice(2), 'hex');
+    }
+    async getPublicKey(_keyId) {
+        const evmWallet = await this._ensureEvmWallet();
+        const publicKey = evmWallet.signingKey.publicKey;
+        return Buffer.from(publicKey.slice(2), 'hex');
+    }
+    async rotateKey(_keyId) {
+        throw new Error('Manual rotation required for environment backend. Update EVM_PRIVATE_KEY and restart the connector.');
+    }
+}
+exports.EnvironmentVariableBackend = EnvironmentVariableBackend;
+//# sourceMappingURL=environment-backend.js.map

package/dist/security/backends/environment-backend.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"environment-backend.js","sourceRoot":"","sources":["../../../src/security/backends/environment-backend.ts"],"names":[],"mappings":";;;AAGA,mEAA+D;AAM/D,MAAa,0BAA0B;IAC7B,SAAS,CAAU;IACnB,aAAa,CAAU;IACvB,MAAM,CAAS;IAQvB,YAAY,MAAc,EAAE,OAAoC;QAC9D,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,4BAA4B,EAAE,CAAC,CAAC;QAIxE,MAAM,aAAa,GAAG,OAAO,EAAE,aAAa,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;QAC5E,IAAI,aAAa,EAAE,CAAC;YAClB,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;YACnC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uEAAuE,CAAC,CAAC;QAC5F,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACxB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,8DAA8D,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;IAKO,KAAK,CAAC,gBAAgB;QAC5B,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC,SAAS,CAAC;QACxB,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;QAC3F,CAAC;QACD,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAA,kCAAe,EAA0B,QAAQ,EAAE,gBAAgB,CAAC,CAAC;YAC9F,IAAI,CAAC,SAAS,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAChD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,oCAAoC,CAAC,CAAC;YAC5F,OAAO,IAAI,CAAC,SAAS,CAAC;QACxB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;gBACxE,MAAM,KAAK,CAAC;YACd,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,gCAAgC,CAAC,CAAC;YAC/D,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IAQD,KAAK,CAAC,IAAI,CAAC,OAAe,EAAE,MAAc;QACxC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAIhD,MAAM,SAAS,GAAG,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAErD,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAC3D,CAAC;IAOD,KAAK,CAAC,YAAY,CAAC,MAAc;QAC/B,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAGhD,MAAM,SAAS,GAAG,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC;QACjD,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAChD,CAAC;IAQD,KAAK,CAAC,SAAS,CAAC,MAAc;QAC5B,MAAM,IAAI,KAAK,CACb,qGAAqG,CACtG,CAAC;IACJ,CAAC;CACF;AA3FD,gEA2FC"}

package/dist/security/fraud-detector.d.ts

@@ -0,0 +1,79 @@
+import { EventEmitter } from 'events';
+import { Logger } from 'pino';
+export interface FraudRule {
+    name: string;
+    check(event: SettlementEvent | PacketEvent | ChannelEvent): Promise<FraudDetection>;
+    severity: 'low' | 'medium' | 'high' | 'critical';
+}
+export interface FraudDetection {
+    detected: boolean;
+    peerId?: string;
+    details?: {
+        [key: string]: unknown;
+        description?: string;
+    };
+}
+export interface SettlementEvent {
+    type: 'settlement';
+    peerId: string;
+    amount: number;
+    timestamp: number;
+    channelId?: string;
+}
+export interface PacketEvent {
+    type: 'packet';
+    peerId: string;
+    packetCount: number;
+    timestamp: number;
+}
+export interface ChannelEvent {
+    type: 'channel';
+    peerId: string;
+    action: 'open' | 'close';
+    channelId: string;
+    timestamp: number;
+}
+export interface PeerReputationScore {
+    peerId: string;
+    score: number;
+    lastUpdated: number;
+    violations: {
+        timestamp: number;
+        ruleViolated: string;
+        severity: 'low' | 'medium' | 'high' | 'critical';
+        penaltyApplied: number;
+    }[];
+}
+export interface PauseReason {
+    peerId: string;
+    reason: string;
+    timestamp: number;
+    ruleViolated: string;
+    severity: 'low' | 'medium' | 'high' | 'critical';
+}
+export interface FraudDetectorConfig {
+    enabled: boolean;
+    autoPauseThreshold: number;
+    rules: FraudRule[];
+}
+export declare class FraudDetector extends EventEmitter {
+    private readonly logger;
+    private readonly config;
+    private readonly rules;
+    private readonly pausedPeers;
+    private readonly boundHandlers;
+    constructor(logger: Logger, config: FraudDetectorConfig);
+    start(): void;
+    stop(): void;
+    private handleSettlementEvent;
+    private handlePacketEvent;
+    private handleChannelEvent;
+    analyzeEvent(event: SettlementEvent | PacketEvent | ChannelEvent): Promise<void>;
+    private handleFraudDetection;
+    pausePeer(peerId: string, reason: string, ruleViolated: string, severity: 'low' | 'medium' | 'high' | 'critical'): Promise<void>;
+    resumePeer(peerId: string): Promise<void>;
+    isPeerPaused(peerId: string): boolean;
+    getPauseReason(peerId: string): PauseReason | undefined;
+    getPausedPeers(): Map<string, PauseReason>;
+}
+//# sourceMappingURL=fraud-detector.d.ts.map

package/dist/security/fraud-detector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fraud-detector.d.ts","sourceRoot":"","sources":["../../src/security/fraud-detector.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AACtC,OAAO,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC;AAK9B,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,KAAK,EAAE,eAAe,GAAG,WAAW,GAAG,YAAY,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IACpF,QAAQ,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;CAClD;AAKD,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE;QACR,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;QACvB,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;CACH;AAKD,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,YAAY,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAKD,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB;AAKD,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,SAAS,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAKD,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE;QACV,SAAS,EAAE,MAAM,CAAC;QAClB,YAAY,EAAE,MAAM,CAAC;QACrB,QAAQ,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;QACjD,cAAc,EAAE,MAAM,CAAC;KACxB,EAAE,CAAC;CACL;AAKD,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;CAClD;AAKD,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,KAAK,EAAE,SAAS,EAAE,CAAC;CACpB;AAQD,qBAAa,aAAc,SAAQ,YAAY;IAC7C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAsB;IAC7C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAc;IACpC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA2B;IAGvD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAI5B;gBAEU,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,mBAAmB;IAwBhD,KAAK,IAAI,IAAI;IAiBb,IAAI,IAAI,IAAI;YAYL,qBAAqB;YAOrB,iBAAiB;YAOjB,kBAAkB;IAOnB,YAAY,CAAC,KAAK,EAAE,eAAe,GAAG,WAAW,GAAG,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC;YA+B/E,oBAAoB;IAgCrB,SAAS,CACpB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,GAC/C,OAAO,CAAC,IAAI,CAAC;IAoCH,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA0B/C,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO;IAOrC,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS;IAOvD,cAAc,IAAI,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC;CAGlD"}

package/dist/security/fraud-detector.js

@@ -0,0 +1,147 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FraudDetector = void 0;
+const events_1 = require("events");
+class FraudDetector extends events_1.EventEmitter {
+    logger;
+    config;
+    rules;
+    pausedPeers;
+    boundHandlers;
+    constructor(logger, config) {
+        super();
+        this.logger = logger.child({ component: 'FraudDetector' });
+        this.config = config;
+        this.rules = config.rules;
+        this.pausedPeers = new Map();
+        this.boundHandlers = {
+            handleSettlementEvent: this.handleSettlementEvent.bind(this),
+            handlePacketEvent: this.handlePacketEvent.bind(this),
+            handleChannelEvent: this.handleChannelEvent.bind(this),
+        };
+        this.logger.info('FraudDetector initialized', {
+            enabled: config.enabled,
+            ruleCount: this.rules.length,
+            autoPauseThreshold: config.autoPauseThreshold,
+        });
+    }
+    start() {
+        if (!this.config.enabled) {
+            this.logger.info('FraudDetector is disabled');
+            return;
+        }
+        this.on('SETTLEMENT_EVENT', this.boundHandlers.handleSettlementEvent);
+        this.on('PACKET_EVENT', this.boundHandlers.handlePacketEvent);
+        this.on('CHANNEL_EVENT', this.boundHandlers.handleChannelEvent);
+        this.logger.info('FraudDetector started');
+    }
+    stop() {
+        this.off('SETTLEMENT_EVENT', this.boundHandlers.handleSettlementEvent);
+        this.off('PACKET_EVENT', this.boundHandlers.handlePacketEvent);
+        this.off('CHANNEL_EVENT', this.boundHandlers.handleChannelEvent);
+        this.logger.info('FraudDetector stopped');
+    }
+    async handleSettlementEvent(event) {
+        await this.analyzeEvent(event);
+    }
+    async handlePacketEvent(event) {
+        await this.analyzeEvent(event);
+    }
+    async handleChannelEvent(event) {
+        await this.analyzeEvent(event);
+    }
+    async analyzeEvent(event) {
+        if (!this.config.enabled) {
+            return;
+        }
+        if (event.peerId && this.pausedPeers.has(event.peerId)) {
+            this.logger.debug('Event from paused peer ignored', { peerId: event.peerId });
+            return;
+        }
+        for (const rule of this.rules) {
+            try {
+                const detection = await rule.check(event);
+                if (detection.detected) {
+                    await this.handleFraudDetection(rule, detection, event);
+                }
+            }
+            catch (error) {
+                this.logger.error('Fraud rule evaluation failed', {
+                    ruleName: rule.name,
+                    error: error instanceof Error ? error.message : String(error),
+                });
+            }
+        }
+    }
+    async handleFraudDetection(rule, detection, event) {
+        const peerId = detection.peerId || event.peerId;
+        this.logger.warn('Fraud detected', {
+            ruleName: rule.name,
+            severity: rule.severity,
+            peerId,
+            details: detection.details,
+        });
+        this.emit('FRAUD_DETECTED', {
+            ruleName: rule.name,
+            severity: rule.severity,
+            peerId,
+            timestamp: Date.now(),
+            details: detection.details,
+        });
+    }
+    async pausePeer(peerId, reason, ruleViolated, severity) {
+        try {
+            const pauseReason = {
+                peerId,
+                reason,
+                timestamp: Date.now(),
+                ruleViolated,
+                severity,
+            };
+            this.pausedPeers.set(peerId, pauseReason);
+            this.logger.warn('Peer paused due to fraud detection', {
+                peerId,
+                reason,
+                ruleViolated,
+                severity,
+            });
+            this.emit('PEER_PAUSED', { peerId, reason, ruleViolated, severity });
+        }
+        catch (error) {
+            this.logger.error('Failed to pause peer', {
+                peerId,
+                error: error instanceof Error ? error.message : String(error),
+            });
+            throw error;
+        }
+    }
+    async resumePeer(peerId) {
+        try {
+            if (!this.pausedPeers.has(peerId)) {
+                this.logger.warn('Attempted to resume peer that is not paused', { peerId });
+                return;
+            }
+            this.pausedPeers.delete(peerId);
+            this.logger.info('Peer resumed after manual review', { peerId });
+            this.emit('PEER_RESUMED', { peerId });
+        }
+        catch (error) {
+            this.logger.error('Failed to resume peer', {
+                peerId,
+                error: error instanceof Error ? error.message : String(error),
+            });
+            throw error;
+        }
+    }
+    isPeerPaused(peerId) {
+        return this.pausedPeers.has(peerId);
+    }
+    getPauseReason(peerId) {
+        return this.pausedPeers.get(peerId);
+    }
+    getPausedPeers() {
+        return new Map(this.pausedPeers);
+    }
+}
+exports.FraudDetector = FraudDetector;
+//# sourceMappingURL=fraud-detector.js.map

package/dist/security/fraud-detector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fraud-detector.js","sourceRoot":"","sources":["../../src/security/fraud-detector.ts"],"names":[],"mappings":";;;AAAA,mCAAsC;AAiGtC,MAAa,aAAc,SAAQ,qBAAY;IAC5B,MAAM,CAAS;IACf,MAAM,CAAsB;IAC5B,KAAK,CAAc;IACnB,WAAW,CAA2B;IAGtC,aAAa,CAI5B;IAEF,YAAY,MAAc,EAAE,MAA2B;QACrD,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,eAAe,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QAC1B,IAAI,CAAC,WAAW,GAAG,IAAI,GAAG,EAAE,CAAC;QAG7B,IAAI,CAAC,aAAa,GAAG;YACnB,qBAAqB,EAAE,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC;YAC5D,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC;YACpD,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC;SACvD,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE;YAC5C,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM;YAC5B,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;SAC9C,CAAC,CAAC;IACL,CAAC;IAKM,KAAK;QACV,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACzB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;YAC9C,OAAO;QACT,CAAC;QAGD,IAAI,CAAC,EAAE,CAAC,kBAAkB,EAAE,IAAI,CAAC,aAAa,CAAC,qBAAqB,CAAC,CAAC;QACtE,IAAI,CAAC,EAAE,CAAC,cAAc,EAAE,IAAI,CAAC,aAAa,CAAC,iBAAiB,CAAC,CAAC;QAC9D,IAAI,CAAC,EAAE,CAAC,eAAe,EAAE,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,CAAC;QAEhE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IAC5C,CAAC;IAKM,IAAI;QAET,IAAI,CAAC,GAAG,CAAC,kBAAkB,EAAE,IAAI,CAAC,aAAa,CAAC,qBAAqB,CAAC,CAAC;QACvE,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,aAAa,CAAC,iBAAiB,CAAC,CAAC;QAC/D,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,CAAC;QAEjE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IAC5C,CAAC;IAKO,KAAK,CAAC,qBAAqB,CAAC,KAAsB;QACxD,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;IAKO,KAAK,CAAC,iBAAiB,CAAC,KAAkB;QAChD,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;IAKO,KAAK,CAAC,kBAAkB,CAAC,KAAmB;QAClD,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;IAKM,KAAK,CAAC,YAAY,CAAC,KAAmD;QAC3E,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACzB,OAAO;QACT,CAAC;QAGD,IAAI,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YACvD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YAC9E,OAAO;QACT,CAAC;QAGD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAC1C,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;oBACvB,MAAM,IAAI,CAAC,oBAAoB,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;gBAC1D,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAEf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE;oBAChD,QAAQ,EAAE,IAAI,CAAC,IAAI;oBACnB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;iBAC9D,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAKO,KAAK,CAAC,oBAAoB,CAChC,IAAe,EACf,SAAyB,EACzB,KAAmD;QAEnD,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC;QAEhD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE;YACjC,QAAQ,EAAE,IAAI,CAAC,IAAI;YACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,MAAM;YACN,OAAO,EAAE,SAAS,CAAC,OAAO;SAC3B,CAAC,CAAC;QAGH,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE;YAC1B,QAAQ,EAAE,IAAI,CAAC,IAAI;YACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,MAAM;YACN,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,OAAO,EAAE,SAAS,CAAC,OAAO;SAC3B,CAAC,CAAC;IACL,CAAC;IAUM,KAAK,CAAC,SAAS,CACpB,MAAc,EACd,MAAc,EACd,YAAoB,EACpB,QAAgD;QAEhD,IAAI,CAAC;YACH,MAAM,WAAW,GAAgB;gBAC/B,MAAM;gBACN,MAAM;gBACN,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;gBACrB,YAAY;gBACZ,QAAQ;aACT,CAAC;YAEF,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;YAE1C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oCAAoC,EAAE;gBACrD,MAAM;gBACN,MAAM;gBACN,YAAY;gBACZ,QAAQ;aACT,CAAC,CAAC;YAGH,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC,CAAC;QACvE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAEf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,EAAE;gBACxC,MAAM;gBACN,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;YACH,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAOM,KAAK,CAAC,UAAU,CAAC,MAAc;QACpC,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBAClC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,6CAA6C,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;gBAC5E,OAAO;YACT,CAAC;YAED,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAEhC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kCAAkC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YAGjE,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAEf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,EAAE;gBACzC,MAAM;gBACN,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;YACH,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAKM,YAAY,CAAC,MAAc;QAChC,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;IAKM,cAAc,CAAC,MAAc;QAClC,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;IAKM,cAAc;QACnB,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACnC,CAAC;CACF;AA1OD,sCA0OC"}