@vorionsys/platform-core 0.1.0

package/dist/security/ai-governance/index.d.ts

@@ -0,0 +1,92 @@
+/**
+ * AI Governance Module
+ * Comprehensive AI security and governance controls for the Vorion Security Platform
+ *
+ * This module provides:
+ * - Model Registry: AI model inventory, versioning, and risk classification
+ * - Access Policy: Role-based access control for AI models
+ * - Prompt Injection Defense: Detection and prevention of injection attacks
+ * - Output Filtering: PII detection, redaction, and validation
+ * - Audit Trail: Comprehensive logging and compliance reporting
+ * - Bias Detection: Fairness monitoring and alerts
+ * - Rate Limiting: Token, cost, and request-based limits
+ * - Middleware: Fastify integration for AI endpoints
+ *
+ * @module ai-governance
+ * @version 1.0.0
+ */
+export * from './types';
+export { ModelRegistry, InMemoryModelRegistryStorage, type ModelRegistrationOptions, type ModelSearchCriteria, type ModelVersionEntry, type RiskAssessmentResult, type RiskFactor, type ModelRegistryStorage, } from './model-registry';
+export { AccessPolicyManager, InMemoryPolicyStorage, InMemoryUsageTracker, type AccessRequestContext, type AccessDecision, type PolicyViolation, type PolicyViolationType, type AccessRestriction, type PolicyStorage, type UsageTracker, } from './access-policy';
+export { PromptInjectionDetector, InMemoryTemplateStorage, type InjectionDetectionConfig, type InjectionPattern, type TemplateStorage, } from './prompt-injection';
+export { OutputFilter, type OutputFilterConfig, type SensitiveDataPattern, type ValidationRule, } from './output-filter';
+export { AuditTrail, InMemoryAuditStorage, type AuditConfig, type AnomalyThresholds, type AuditQueryOptions, type AuditStorage, } from './audit-trail';
+export { BiasDetector, InMemoryBiasSampleStorage, InMemoryBiasAlertStorage, type BiasDetectionConfig, type BiasThresholds, type CustomMetricDefinition, type BiasSample, type BiasSampleStorage, type BiasAlertStorage, } from './bias-detection';
+export { AIRateLimiter, InMemoryRateLimitStorage, type RateLimiterConfig, type RateLimitCheckResult, type RateLimitStorage, } from './rate-limiter';
+export { createAIGovernanceMiddleware, aiGovernancePlugin, type AIGovernanceMiddlewareOptions, type AIGovernanceContext, type AIModelResponse, } from './middleware';
+export interface AIGovernanceSystemConfig {
+    modelRegistry?: {};
+    accessPolicy?: {};
+    injectionDetection?: {
+        enabled?: boolean;
+        strictMode?: boolean;
+        blockOnDetection?: boolean;
+        sensitivityLevel?: 'low' | 'medium' | 'high';
+    };
+    outputFiltering?: {
+        enabled?: boolean;
+        piiDetection?: boolean;
+        piiRedaction?: boolean;
+        hallucinationDetection?: boolean;
+        confidenceThreshold?: number;
+    };
+    auditTrail?: {
+        enabled?: boolean;
+        logQueries?: boolean;
+        logResponses?: boolean;
+        retentionDays?: number;
+    };
+    biasDetection?: {
+        enabled?: boolean;
+        protectedAttributes?: string[];
+        minimumSampleSize?: number;
+    };
+    rateLimiting?: {
+        enabled?: boolean;
+        defaultTokenLimit?: number;
+        defaultRequestLimit?: number;
+        defaultCostLimit?: number;
+    };
+}
+/**
+ * Create a complete AI Governance system with all components
+ */
+export declare function createAIGovernanceSystem(config?: AIGovernanceSystemConfig): {
+    modelRegistry: any;
+    accessPolicyManager: any;
+    injectionDetector: any;
+    outputFilter: any;
+    auditTrail: any;
+    biasDetector: any;
+    rateLimiter: any;
+    /**
+     * Register event handlers for all governance events
+     */
+    onEvent(event: "model:registered" | "model:updated" | "policy:violated" | "injection:detected" | "output:filtered" | "bias:detected" | "rate-limit:exceeded" | "audit:logged", handler: (...args: unknown[]) => void): void;
+    /**
+     * Generate a comprehensive compliance report
+     */
+    generateComplianceReport(modelId: string, period: {
+        start: Date;
+        end: Date;
+    }): Promise<any>;
+    /**
+     * Cleanup old data across all components
+     */
+    cleanup(): Promise<{
+        auditEntriesDeleted: any;
+        biasSamplesDeleted: any;
+    }>;
+};
+export default createAIGovernanceSystem;
+//# sourceMappingURL=index.d.ts.map

package/dist/security/ai-governance/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/security/ai-governance/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAGH,cAAc,SAAS,CAAC;AAGxB,OAAO,EACL,aAAa,EACb,4BAA4B,EAC5B,KAAK,wBAAwB,EAC7B,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EACtB,KAAK,oBAAoB,EACzB,KAAK,UAAU,EACf,KAAK,oBAAoB,GAC1B,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,oBAAoB,EACpB,KAAK,oBAAoB,EACzB,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EACtB,KAAK,aAAa,EAClB,KAAK,YAAY,GAClB,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EACL,uBAAuB,EACvB,uBAAuB,EACvB,KAAK,wBAAwB,EAC7B,KAAK,gBAAgB,EACrB,KAAK,eAAe,GACrB,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EACL,YAAY,EACZ,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,KAAK,cAAc,GACpB,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EACL,UAAU,EACV,oBAAoB,EACpB,KAAK,WAAW,EAChB,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,EACtB,KAAK,YAAY,GAClB,MAAM,eAAe,CAAC;AAGvB,OAAO,EACL,YAAY,EACZ,yBAAyB,EACzB,wBAAwB,EACxB,KAAK,mBAAmB,EACxB,KAAK,cAAc,EACnB,KAAK,sBAAsB,EAC3B,KAAK,UAAU,EACf,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,GACtB,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EACL,aAAa,EACb,wBAAwB,EACxB,KAAK,iBAAiB,EACtB,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,GACtB,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EACL,4BAA4B,EAC5B,kBAAkB,EAClB,KAAK,6BAA6B,EAClC,KAAK,mBAAmB,EACxB,KAAK,eAAe,GACrB,MAAM,cAAc,CAAC;AAGtB,MAAM,WAAW,wBAAwB;IACvC,aAAa,CAAC,EAAE,EAEf,CAAC;IACF,YAAY,CAAC,EAAE,EAEd,CAAC;IACF,kBAAkB,CAAC,EAAE;QACnB,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,UAAU,CAAC,EAAE,OAAO,CAAC;QACrB,gBAAgB,CAAC,EAAE,OAAO,CAAC;QAC3B,gBAAgB,CAAC,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;KAC9C,CAAC;IACF,eAAe,CAAC,EAAE;QAChB,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,YAAY,CAAC,EAAE,OAAO,CAAC;QACvB,YAAY,CAAC,EAAE,OAAO,CAAC;QACvB,sBAAsB,CAAC,EAAE,OAAO,CAAC;QACjC,mBAAmB,CAAC,EAAE,MAAM,CAAC;KAC9B,CAAC;IACF,UAAU,CAAC,EAAE;QACX,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,UAAU,CAAC,EAAE,OAAO,CAAC;QACrB,YAAY,CAAC,EAAE,OAAO,CAAC;QACvB,aAAa,CAAC,EAAE,MAAM,CAAC;KACxB,CAAC;IACF,aAAa,CAAC,EAAE;QACd,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;QAC/B,iBAAiB,CAAC,EAAE,MAAM,CAAC;KAC5B,CAAC;IACF,YAAY,CAAC,EAAE;QACb,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAC7B,gBAAgB,CAAC,EAAE,MAAM,CAAC;KAC3B,CAAC;CACH;AAED;;GAEG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,GAAE,wBAA6B;;;;;;;;IAmG1E;;OAEG;mBAGG,kBAAkB,GAClB,eAAe,GACf,iBAAiB,GACjB,oBAAoB,GACpB,iBAAiB,GACjB,eAAe,GACf,qBAAqB,GACrB,cAAc,WACT,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI;IA4BvC;;OAEG;sCACqC,MAAM,UAAU;QAAE,KAAK,EAAE,IAAI,CAAC;QAAC,GAAG,EAAE,IAAI,CAAA;KAAE;IAclF;;OAEG;;;;;EAWN;AAGD,eAAe,wBAAwB,CAAC"}

package/dist/security/ai-governance/index.js

@@ -0,0 +1,184 @@
+/**
+ * AI Governance Module
+ * Comprehensive AI security and governance controls for the Vorion Security Platform
+ *
+ * This module provides:
+ * - Model Registry: AI model inventory, versioning, and risk classification
+ * - Access Policy: Role-based access control for AI models
+ * - Prompt Injection Defense: Detection and prevention of injection attacks
+ * - Output Filtering: PII detection, redaction, and validation
+ * - Audit Trail: Comprehensive logging and compliance reporting
+ * - Bias Detection: Fairness monitoring and alerts
+ * - Rate Limiting: Token, cost, and request-based limits
+ * - Middleware: Fastify integration for AI endpoints
+ *
+ * @module ai-governance
+ * @version 1.0.0
+ */
+// Types
+export * from './types';
+// Model Registry
+export { ModelRegistry, InMemoryModelRegistryStorage, } from './model-registry';
+// Access Policy
+export { AccessPolicyManager, InMemoryPolicyStorage, InMemoryUsageTracker, } from './access-policy';
+// Prompt Injection Defense
+export { PromptInjectionDetector, InMemoryTemplateStorage, } from './prompt-injection';
+// Output Filtering
+export { OutputFilter, } from './output-filter';
+// Audit Trail
+export { AuditTrail, InMemoryAuditStorage, } from './audit-trail';
+// Bias Detection
+export { BiasDetector, InMemoryBiasSampleStorage, InMemoryBiasAlertStorage, } from './bias-detection';
+// Rate Limiting
+export { AIRateLimiter, InMemoryRateLimitStorage, } from './rate-limiter';
+// Middleware
+export { createAIGovernanceMiddleware, aiGovernancePlugin, } from './middleware';
+/**
+ * Create a complete AI Governance system with all components
+ */
+export function createAIGovernanceSystem(config = {}) {
+    const { ModelRegistry } = require('./model-registry');
+    const { AccessPolicyManager } = require('./access-policy');
+    const { PromptInjectionDetector } = require('./prompt-injection');
+    const { OutputFilter } = require('./output-filter');
+    const { AuditTrail } = require('./audit-trail');
+    const { BiasDetector } = require('./bias-detection');
+    const { AIRateLimiter } = require('./rate-limiter');
+    const modelRegistry = new ModelRegistry();
+    const accessPolicyManager = new AccessPolicyManager();
+    const injectionDetector = new PromptInjectionDetector({
+        enabled: config.injectionDetection?.enabled ?? true,
+        strictMode: config.injectionDetection?.strictMode ?? false,
+        blockOnDetection: config.injectionDetection?.blockOnDetection ?? true,
+        sensitivityLevel: config.injectionDetection?.sensitivityLevel ?? 'medium',
+    });
+    const outputFilter = new OutputFilter({
+        enabled: config.outputFiltering?.enabled ?? true,
+        piiDetection: config.outputFiltering?.piiDetection ?? true,
+        piiRedaction: config.outputFiltering?.piiRedaction ?? true,
+        hallucinationDetection: config.outputFiltering?.hallucinationDetection ?? true,
+        confidenceThreshold: config.outputFiltering?.confidenceThreshold ?? 0.7,
+    });
+    const auditTrail = new AuditTrail({
+        enabled: config.auditTrail?.enabled ?? true,
+        logQueries: config.auditTrail?.logQueries ?? true,
+        logResponses: config.auditTrail?.logResponses ?? true,
+        retentionDays: config.auditTrail?.retentionDays ?? 90,
+    });
+    const biasDetector = new BiasDetector({
+        enabled: config.biasDetection?.enabled ?? true,
+        protectedAttributes: config.biasDetection?.protectedAttributes ?? [
+            'gender',
+            'age_group',
+            'ethnicity',
+            'location',
+        ],
+        minimumSampleSize: config.biasDetection?.minimumSampleSize ?? 100,
+    });
+    const rateLimiter = new AIRateLimiter({
+        enabled: config.rateLimiting?.enabled ?? true,
+        defaultLimits: [
+            {
+                type: 'request',
+                limit: config.rateLimiting?.defaultRequestLimit ?? 100,
+                window: 3600,
+                scope: 'user',
+                action: 'block',
+            },
+            {
+                type: 'token',
+                limit: config.rateLimiting?.defaultTokenLimit ?? 100000,
+                window: 3600,
+                scope: 'user',
+                action: 'block',
+            },
+            {
+                type: 'cost',
+                limit: config.rateLimiting?.defaultCostLimit ?? 10,
+                window: 86400,
+                scope: 'user',
+                action: 'block',
+            },
+        ],
+    });
+    // Wire up events between components
+    injectionDetector.on('injection:detected', (result) => {
+        auditTrail.emit('security:injection', result);
+    });
+    outputFilter.on('output:filtered', (result) => {
+        auditTrail.emit('security:output-filtered', result);
+    });
+    biasDetector.on('bias:detected', (result) => {
+        auditTrail.emit('fairness:bias-detected', result);
+    });
+    rateLimiter.on('rate-limit:exceeded', (data) => {
+        auditTrail.emit('security:rate-limit', data);
+    });
+    return {
+        modelRegistry,
+        accessPolicyManager,
+        injectionDetector,
+        outputFilter,
+        auditTrail,
+        biasDetector,
+        rateLimiter,
+        /**
+         * Register event handlers for all governance events
+         */
+        onEvent(event, handler) {
+            switch (event) {
+                case 'model:registered':
+                case 'model:updated':
+                    modelRegistry.on(event, handler);
+                    break;
+                case 'policy:violated':
+                    accessPolicyManager.on(event, handler);
+                    break;
+                case 'injection:detected':
+                    injectionDetector.on(event, handler);
+                    break;
+                case 'output:filtered':
+                    outputFilter.on(event, handler);
+                    break;
+                case 'bias:detected':
+                    biasDetector.on(event, handler);
+                    break;
+                case 'rate-limit:exceeded':
+                    rateLimiter.on(event, handler);
+                    break;
+                case 'audit:logged':
+                    auditTrail.on(event, handler);
+                    break;
+            }
+        },
+        /**
+         * Generate a comprehensive compliance report
+         */
+        async generateComplianceReport(modelId, period) {
+            const report = await auditTrail.generateComplianceReport(modelId, 'on-demand', period);
+            const biasAnalysis = await biasDetector.analyzeModel(modelId, period);
+            const model = await modelRegistry.getModel(modelId);
+            const riskAssessments = await modelRegistry.getRiskAssessments(modelId);
+            return {
+                ...report,
+                biasAnalysis,
+                modelMetadata: model,
+                riskAssessments,
+            };
+        },
+        /**
+         * Cleanup old data across all components
+         */
+        async cleanup() {
+            const auditDeleted = await auditTrail.cleanup();
+            const biasDeleted = await biasDetector.cleanup();
+            return {
+                auditEntriesDeleted: auditDeleted,
+                biasSamplesDeleted: biasDeleted,
+            };
+        },
+    };
+}
+// Default export
+export default createAIGovernanceSystem;
+//# sourceMappingURL=index.js.map

package/dist/security/ai-governance/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/security/ai-governance/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,QAAQ;AACR,cAAc,SAAS,CAAC;AAExB,iBAAiB;AACjB,OAAO,EACL,aAAa,EACb,4BAA4B,GAO7B,MAAM,kBAAkB,CAAC;AAE1B,gBAAgB;AAChB,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,oBAAoB,GAQrB,MAAM,iBAAiB,CAAC;AAEzB,2BAA2B;AAC3B,OAAO,EACL,uBAAuB,EACvB,uBAAuB,GAIxB,MAAM,oBAAoB,CAAC;AAE5B,mBAAmB;AACnB,OAAO,EACL,YAAY,GAIb,MAAM,iBAAiB,CAAC;AAEzB,cAAc;AACd,OAAO,EACL,UAAU,EACV,oBAAoB,GAKrB,MAAM,eAAe,CAAC;AAEvB,iBAAiB;AACjB,OAAO,EACL,YAAY,EACZ,yBAAyB,EACzB,wBAAwB,GAOzB,MAAM,kBAAkB,CAAC;AAE1B,gBAAgB;AAChB,OAAO,EACL,aAAa,EACb,wBAAwB,GAIzB,MAAM,gBAAgB,CAAC;AAExB,aAAa;AACb,OAAO,EACL,4BAA4B,EAC5B,kBAAkB,GAInB,MAAM,cAAc,CAAC;AA0CtB;;GAEG;AACH,MAAM,UAAU,wBAAwB,CAAC,SAAmC,EAAE;IAC5E,MAAM,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACtD,MAAM,EAAE,mBAAmB,EAAE,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC3D,MAAM,EAAE,uBAAuB,EAAE,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAClE,MAAM,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACpD,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAChD,MAAM,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACrD,MAAM,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAEpD,MAAM,aAAa,GAAG,IAAI,aAAa,EAAE,CAAC;IAE1C,MAAM,mBAAmB,GAAG,IAAI,mBAAmB,EAAE,CAAC;IAEtD,MAAM,iBAAiB,GAAG,IAAI,uBAAuB,CAAC;QACpD,OAAO,EAAE,MAAM,CAAC,kBAAkB,EAAE,OAAO,IAAI,IAAI;QACnD,UAAU,EAAE,MAAM,CAAC,kBAAkB,EAAE,UAAU,IAAI,KAAK;QAC1D,gBAAgB,EAAE,MAAM,CAAC,kBAAkB,EAAE,gBAAgB,IAAI,IAAI;QACrE,gBAAgB,EAAE,MAAM,CAAC,kBAAkB,EAAE,gBAAgB,IAAI,QAAQ;KAC1E,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,IAAI,YAAY,CAAC;QACpC,OAAO,EAAE,MAAM,CAAC,eAAe,EAAE,OAAO,IAAI,IAAI;QAChD,YAAY,EAAE,MAAM,CAAC,eAAe,EAAE,YAAY,IAAI,IAAI;QAC1D,YAAY,EAAE,MAAM,CAAC,eAAe,EAAE,YAAY,IAAI,IAAI;QAC1D,sBAAsB,EAAE,MAAM,CAAC,eAAe,EAAE,sBAAsB,IAAI,IAAI;QAC9E,mBAAmB,EAAE,MAAM,CAAC,eAAe,EAAE,mBAAmB,IAAI,GAAG;KACxE,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC;QAChC,OAAO,EAAE,MAAM,CAAC,UAAU,EAAE,OAAO,IAAI,IAAI;QAC3C,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,UAAU,IAAI,IAAI;QACjD,YAAY,EAAE,MAAM,CAAC,UAAU,EAAE,YAAY,IAAI,IAAI;QACrD,aAAa,EAAE,MAAM,CAAC,UAAU,EAAE,aAAa,IAAI,EAAE;KACtD,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,IAAI,YAAY,CAAC;QACpC,OAAO,EAAE,MAAM,CAAC,aAAa,EAAE,OAAO,IAAI,IAAI;QAC9C,mBAAmB,EAAE,MAAM,CAAC,aAAa,EAAE,mBAAmB,IAAI;YAChE,QAAQ;YACR,WAAW;YACX,WAAW;YACX,UAAU;SACX;QACD,iBAAiB,EAAE,MAAM,CAAC,aAAa,EAAE,iBAAiB,IAAI,GAAG;KAClE,CAAC,CAAC;IAEH,MAAM,WAAW,GAAG,IAAI,aAAa,CAAC;QACpC,OAAO,EAAE,MAAM,CAAC,YAAY,EAAE,OAAO,IAAI,IAAI;QAC7C,aAAa,EAAE;YACb;gBACE,IAAI,EAAE,SAAS;gBACf,KAAK,EAAE,MAAM,CAAC,YAAY,EAAE,mBAAmB,IAAI,GAAG;gBACtD,MAAM,EAAE,IAAI;gBACZ,KAAK,EAAE,MAAM;gBACb,MAAM,EAAE,OAAO;aAChB;YACD;gBACE,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE,MAAM,CAAC,YAAY,EAAE,iBAAiB,IAAI,MAAM;gBACvD,MAAM,EAAE,IAAI;gBACZ,KAAK,EAAE,MAAM;gBACb,MAAM,EAAE,OAAO;aAChB;YACD;gBACE,IAAI,EAAE,MAAM;gBACZ,KAAK,EAAE,MAAM,CAAC,YAAY,EAAE,gBAAgB,IAAI,EAAE;gBAClD,MAAM,EAAE,KAAK;gBACb,KAAK,EAAE,MAAM;gBACb,MAAM,EAAE,OAAO;aAChB;SACF;KACF,CAAC,CAAC;IAEH,oCAAoC;IACpC,iBAAiB,CAAC,EAAE,CAAC,oBAAoB,EAAE,CAAC,MAAe,EAAE,EAAE;QAC7D,UAAU,CAAC,IAAI,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,YAAY,CAAC,EAAE,CAAC,iBAAiB,EAAE,CAAC,MAAe,EAAE,EAAE;QACrD,UAAU,CAAC,IAAI,CAAC,0BAA0B,EAAE,MAAM,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,YAAY,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC,MAAe,EAAE,EAAE;QACnD,UAAU,CAAC,IAAI,CAAC,wBAAwB,EAAE,MAAM,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,WAAW,CAAC,EAAE,CAAC,qBAAqB,EAAE,CAAC,IAAa,EAAE,EAAE;QACtD,UAAU,CAAC,IAAI,CAAC,qBAAqB,EAAE,IAAI,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,aAAa;QACb,mBAAmB;QACnB,iBAAiB;QACjB,YAAY;QACZ,UAAU;QACV,YAAY;QACZ,WAAW;QAEX;;WAEG;QACH,OAAO,CACL,KAQkB,EAClB,OAAqC;YAErC,QAAQ,KAAK,EAAE,CAAC;gBACd,KAAK,kBAAkB,CAAC;gBACxB,KAAK,eAAe;oBAClB,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;oBACjC,MAAM;gBACR,KAAK,iBAAiB;oBACpB,mBAAmB,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;oBACvC,MAAM;gBACR,KAAK,oBAAoB;oBACvB,iBAAiB,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;oBACrC,MAAM;gBACR,KAAK,iBAAiB;oBACpB,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;oBAChC,MAAM;gBACR,KAAK,eAAe;oBAClB,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;oBAChC,MAAM;gBACR,KAAK,qBAAqB;oBACxB,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;oBAC/B,MAAM;gBACR,KAAK,cAAc;oBACjB,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;oBAC9B,MAAM;YACV,CAAC;QACH,CAAC;QAED;;WAEG;QACH,KAAK,CAAC,wBAAwB,CAAC,OAAe,EAAE,MAAkC;YAChF,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,wBAAwB,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;YACvF,MAAM,YAAY,GAAG,MAAM,YAAY,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACtE,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACpD,MAAM,eAAe,GAAG,MAAM,aAAa,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;YAExE,OAAO;gBACL,GAAG,MAAM;gBACT,YAAY;gBACZ,aAAa,EAAE,KAAK;gBACpB,eAAe;aAChB,CAAC;QACJ,CAAC;QAED;;WAEG;QACH,KAAK,CAAC,OAAO;YACX,MAAM,YAAY,GAAG,MAAM,UAAU,CAAC,OAAO,EAAE,CAAC;YAChD,MAAM,WAAW,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,CAAC;YAEjD,OAAO;gBACL,mBAAmB,EAAE,YAAY;gBACjC,kBAAkB,EAAE,WAAW;aAChC,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,iBAAiB;AACjB,eAAe,wBAAwB,CAAC"}

package/dist/security/ai-governance/middleware.d.ts

@@ -0,0 +1,110 @@
+/**
+ * Fastify Middleware for AI Governance
+ * Integrates AI governance controls into Fastify endpoints
+ * Vorion Security Platform
+ */
+import { FastifyRequest, FastifyReply, FastifyPluginCallback } from 'fastify';
+import fp from 'fastify-plugin';
+import { ModelRegistry } from './model-registry';
+import { AccessPolicyManager } from './access-policy';
+import { PromptInjectionDetector } from './prompt-injection';
+import { OutputFilter } from './output-filter';
+import { AuditTrail } from './audit-trail';
+import { BiasDetector } from './bias-detection';
+import { AIRateLimiter } from './rate-limiter';
+import { AuditLevel, TokenUsage, InjectionDetectionResult, OutputFilterResult } from './types';
+/**
+ * AI Governance middleware options
+ */
+export interface AIGovernanceMiddlewareOptions {
+    modelRegistry: ModelRegistry;
+    accessPolicyManager: AccessPolicyManager;
+    injectionDetector: PromptInjectionDetector;
+    outputFilter: OutputFilter;
+    auditTrail: AuditTrail;
+    biasDetector: BiasDetector;
+    rateLimiter: AIRateLimiter;
+    enabled?: boolean;
+    skipPaths?: string[];
+    extractModelId?: (request: FastifyRequest) => string;
+    extractUserId?: (request: FastifyRequest) => string;
+    extractRoles?: (request: FastifyRequest) => string[];
+    extractDepartment?: (request: FastifyRequest) => string;
+    extractPrompt?: (request: FastifyRequest) => string;
+    onAccessDenied?: (request: FastifyRequest, reply: FastifyReply, reason: string) => Promise<void>;
+    onInjectionDetected?: (request: FastifyRequest, reply: FastifyReply, result: InjectionDetectionResult) => Promise<void>;
+    onRateLimitExceeded?: (request: FastifyRequest, reply: FastifyReply, status: {
+        retryAfterSeconds?: number;
+    }) => Promise<void>;
+}
+/**
+ * Extended request with AI governance context
+ */
+declare module 'fastify' {
+    interface FastifyRequest {
+        aiGovernance?: AIGovernanceContext;
+    }
+}
+/**
+ * AI Governance context attached to requests
+ */
+export interface AIGovernanceContext {
+    modelId: string;
+    userId: string;
+    sessionId: string;
+    roles: string[];
+    department: string;
+    auditLevel: AuditLevel;
+    injectionResult?: InjectionDetectionResult;
+    sanitizedPrompt?: string;
+    startTime: number;
+    tokenEstimate?: number;
+}
+/**
+ * AI model response wrapper
+ */
+export interface AIModelResponse {
+    content: string;
+    tokenUsage: TokenUsage;
+    modelVersion: string;
+    metadata?: Record<string, unknown>;
+}
+/**
+ * Create AI Governance middleware plugin
+ */
+declare const aiGovernancePlugin: FastifyPluginCallback<AIGovernanceMiddlewareOptions>;
+/**
+ * Create pre-configured AI Governance middleware
+ */
+export declare function createAIGovernanceMiddleware(options?: Partial<AIGovernanceMiddlewareOptions>): {
+    plugin: ReturnType<typeof fp>;
+    components: {
+        modelRegistry: ModelRegistry;
+        accessPolicyManager: AccessPolicyManager;
+        injectionDetector: PromptInjectionDetector;
+        outputFilter: OutputFilter;
+        auditTrail: AuditTrail;
+        biasDetector: BiasDetector;
+        rateLimiter: AIRateLimiter;
+    };
+};
+/**
+ * Type declarations for fastify instance decoration
+ */
+declare module 'fastify' {
+    interface FastifyInstance {
+        aiGovernance: {
+            processResponse(request: FastifyRequest, response: AIModelResponse): Promise<{
+                filteredContent: string;
+                filterResult: OutputFilterResult;
+                auditEntryId: string;
+            }>;
+            logQuery(request: FastifyRequest, prompt: string, tokenUsage: TokenUsage): Promise<string>;
+            getContext(request: FastifyRequest): AIGovernanceContext | undefined;
+            getSanitizedPrompt(request: FastifyRequest): string | undefined;
+        };
+    }
+}
+export { aiGovernancePlugin };
+export default createAIGovernanceMiddleware;
+//# sourceMappingURL=middleware.d.ts.map

package/dist/security/ai-governance/middleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../../../src/security/ai-governance/middleware.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAmB,cAAc,EAAE,YAAY,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAC;AAC/F,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAChC,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAAwB,MAAM,iBAAiB,CAAC;AAC5E,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EACL,UAAU,EACV,UAAU,EACV,wBAAwB,EACxB,kBAAkB,EACnB,MAAM,SAAS,CAAC;AAEjB;;GAEG;AACH,MAAM,WAAW,6BAA6B;IAC5C,aAAa,EAAE,aAAa,CAAC;IAC7B,mBAAmB,EAAE,mBAAmB,CAAC;IACzC,iBAAiB,EAAE,uBAAuB,CAAC;IAC3C,YAAY,EAAE,YAAY,CAAC;IAC3B,UAAU,EAAE,UAAU,CAAC;IACvB,YAAY,EAAE,YAAY,CAAC;IAC3B,WAAW,EAAE,aAAa,CAAC;IAC3B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK,MAAM,CAAC;IACrD,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK,MAAM,CAAC;IACpD,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK,MAAM,EAAE,CAAC;IACrD,iBAAiB,CAAC,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK,MAAM,CAAC;IACxD,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK,MAAM,CAAC;IACpD,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACjG,mBAAmB,CAAC,EAAE,CACpB,OAAO,EAAE,cAAc,EACvB,KAAK,EAAE,YAAY,EACnB,MAAM,EAAE,wBAAwB,KAC7B,OAAO,CAAC,IAAI,CAAC,CAAC;IACnB,mBAAmB,CAAC,EAAE,CACpB,OAAO,EAAE,cAAc,EACvB,KAAK,EAAE,YAAY,EACnB,MAAM,EAAE;QAAE,iBAAiB,CAAC,EAAE,MAAM,CAAA;KAAE,KACnC,OAAO,CAAC,IAAI,CAAC,CAAC;CACpB;AAED;;GAEG;AACH,OAAO,QAAQ,SAAS,CAAC;IACvB,UAAU,cAAc;QACtB,YAAY,CAAC,EAAE,mBAAmB,CAAC;KACpC;CACF;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,UAAU,CAAC;IACvB,eAAe,CAAC,EAAE,wBAAwB,CAAC;IAC3C,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,UAAU,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAgDD;;GAEG;AACH,QAAA,MAAM,kBAAkB,EAAE,qBAAqB,CAAC,6BAA6B,CAgU5E,CAAC;AAkBF;;GAEG;AACH,wBAAgB,4BAA4B,CAC1C,OAAO,GAAE,OAAO,CAAC,6BAA6B,CAAM,GACnD;IACD,MAAM,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;IAC9B,UAAU,EAAE;QACV,aAAa,EAAE,aAAa,CAAC;QAC7B,mBAAmB,EAAE,mBAAmB,CAAC;QACzC,iBAAiB,EAAE,uBAAuB,CAAC;QAC3C,YAAY,EAAE,YAAY,CAAC;QAC3B,UAAU,EAAE,UAAU,CAAC;QACvB,YAAY,EAAE,YAAY,CAAC;QAC3B,WAAW,EAAE,aAAa,CAAC;KAC5B,CAAC;CACH,CAqCA;AAED;;GAEG;AACH,OAAO,QAAQ,SAAS,CAAC;IACvB,UAAU,eAAe;QACvB,YAAY,EAAE;YACZ,eAAe,CACb,OAAO,EAAE,cAAc,EACvB,QAAQ,EAAE,eAAe,GACxB,OAAO,CAAC;gBACT,eAAe,EAAE,MAAM,CAAC;gBACxB,YAAY,EAAE,kBAAkB,CAAC;gBACjC,YAAY,EAAE,MAAM,CAAC;aACtB,CAAC,CAAC;YACH,QAAQ,CAAC,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;YAC3F,UAAU,CAAC,OAAO,EAAE,cAAc,GAAG,mBAAmB,GAAG,SAAS,CAAC;YACrE,kBAAkB,CAAC,OAAO,EAAE,cAAc,GAAG,MAAM,GAAG,SAAS,CAAC;SACjE,CAAC;KACH;CACF;AAED,OAAO,EAAE,kBAAkB,EAAE,CAAC;AAC9B,eAAe,4BAA4B,CAAC"}