@vorionsys/platform-core 0.1.0

package/dist/security/alerting/channels/index.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Alert Channel Exports
+ *
+ * Centralizes all alert channel implementations and base classes.
+ *
+ * @packageDocumentation
+ * @module security/alerting/channels
+ */
+export { BaseAlertChannel, type BaseChannelConfig, type SendInternalResult, } from './base.js';
+export { HttpAlertChannel, type HttpChannelConfig, type HttpRequestOptions, type HttpResponse, } from './http-base.js';
+export { SlackAlertChannel, createSlackChannel, type SlackChannelConfig, } from './slack.js';
+export { PagerDutyAlertChannel, createPagerDutyChannel, type PagerDutyChannelConfig, } from './pagerduty.js';
+export { EmailAlertChannel, createEmailChannel, type EmailChannelConfig, } from './email.js';
+export { WebhookAlertChannel, createWebhookChannel, createSignedWebhookChannel, type WebhookChannelConfig, } from './webhook.js';
+export { SNSAlertChannel, createSNSChannel, type SNSChannelConfig, } from './sns.js';
+import type { SecurityAlert, AlertDeliveryResult } from '../types.js';
+/**
+ * Common interface for all alert channels
+ */
+export interface AlertChannelInterface {
+    /**
+     * Send an alert through this channel
+     */
+    send(alert: SecurityAlert): Promise<AlertDeliveryResult>;
+    /**
+     * Test the channel connection
+     */
+    test(): Promise<boolean>;
+}
+//# sourceMappingURL=index.d.ts.map

package/dist/security/alerting/channels/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/security/alerting/channels/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EACL,gBAAgB,EAChB,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,GACxB,MAAM,WAAW,CAAC;AAEnB,OAAO,EACL,gBAAgB,EAChB,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,YAAY,GAClB,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,KAAK,kBAAkB,GACxB,MAAM,YAAY,CAAC;AAGpB,OAAO,EACL,qBAAqB,EACrB,sBAAsB,EACtB,KAAK,sBAAsB,GAC5B,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,KAAK,kBAAkB,GACxB,MAAM,YAAY,CAAC;AAGpB,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,0BAA0B,EAC1B,KAAK,oBAAoB,GAC1B,MAAM,cAAc,CAAC;AAGtB,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,KAAK,gBAAgB,GACtB,MAAM,UAAU,CAAC;AAGlB,OAAO,KAAK,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAEtE;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC;;OAEG;IACH,IAAI,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAEzD;;OAEG;IACH,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;CAC1B"}

package/dist/security/alerting/channels/index.js

@@ -0,0 +1,22 @@
+/**
+ * Alert Channel Exports
+ *
+ * Centralizes all alert channel implementations and base classes.
+ *
+ * @packageDocumentation
+ * @module security/alerting/channels
+ */
+// Base classes
+export { BaseAlertChannel, } from './base.js';
+export { HttpAlertChannel, } from './http-base.js';
+// Slack
+export { SlackAlertChannel, createSlackChannel, } from './slack.js';
+// PagerDuty
+export { PagerDutyAlertChannel, createPagerDutyChannel, } from './pagerduty.js';
+// Email
+export { EmailAlertChannel, createEmailChannel, } from './email.js';
+// Webhook
+export { WebhookAlertChannel, createWebhookChannel, createSignedWebhookChannel, } from './webhook.js';
+// SNS
+export { SNSAlertChannel, createSNSChannel, } from './sns.js';
+//# sourceMappingURL=index.js.map

package/dist/security/alerting/channels/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/security/alerting/channels/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,eAAe;AACf,OAAO,EACL,gBAAgB,GAGjB,MAAM,WAAW,CAAC;AAEnB,OAAO,EACL,gBAAgB,GAIjB,MAAM,gBAAgB,CAAC;AAExB,QAAQ;AACR,OAAO,EACL,iBAAiB,EACjB,kBAAkB,GAEnB,MAAM,YAAY,CAAC;AAEpB,YAAY;AACZ,OAAO,EACL,qBAAqB,EACrB,sBAAsB,GAEvB,MAAM,gBAAgB,CAAC;AAExB,QAAQ;AACR,OAAO,EACL,iBAAiB,EACjB,kBAAkB,GAEnB,MAAM,YAAY,CAAC;AAEpB,UAAU;AACV,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,0BAA0B,GAE3B,MAAM,cAAc,CAAC;AAEtB,MAAM;AACN,OAAO,EACL,eAAe,EACf,gBAAgB,GAEjB,MAAM,UAAU,CAAC"}

package/dist/security/alerting/channels/pagerduty.d.ts

@@ -0,0 +1,70 @@
+/**
+ * PagerDuty Alert Channel
+ *
+ * Sends security alerts to PagerDuty via Events API v2.
+ * Supports incident creation, acknowledgment, and resolution.
+ *
+ * @packageDocumentation
+ * @module security/alerting/channels/pagerduty
+ */
+import { type SecurityAlert, type AlertDeliveryResult } from '../types.js';
+import { HttpAlertChannel, type HttpChannelConfig } from './http-base.js';
+import type { SendInternalResult } from './base.js';
+export interface PagerDutyChannelConfig extends HttpChannelConfig {
+    /** PagerDuty Events API v2 routing key (integration key) */
+    routingKey: string;
+    /** PagerDuty Events API URL (default: https://events.pagerduty.com/v2/enqueue) */
+    apiUrl?: string;
+    /** Service name for events */
+    serviceName?: string;
+    /** Custom component name */
+    component?: string;
+    /** Custom group name */
+    group?: string;
+    /** Custom class name */
+    class?: string;
+}
+/**
+ * PagerDuty Events API integration for security alerts
+ */
+export declare class PagerDutyAlertChannel extends HttpAlertChannel {
+    protected readonly channelType: "pagerduty";
+    protected readonly channelName = "PagerDuty";
+    protected readonly logger: import("pino").Logger<never>;
+    private readonly routingKey;
+    private readonly apiUrl;
+    private readonly serviceName;
+    private readonly component;
+    private readonly group;
+    private readonly classValue;
+    constructor(config: PagerDutyChannelConfig);
+    /**
+     * Send an alert to PagerDuty (trigger an incident)
+     */
+    protected sendInternal(alert: SecurityAlert): Promise<SendInternalResult>;
+    /**
+     * Acknowledge an alert in PagerDuty
+     */
+    acknowledge(alert: SecurityAlert): Promise<AlertDeliveryResult>;
+    /**
+     * Resolve an alert in PagerDuty
+     */
+    resolve(alert: SecurityAlert): Promise<AlertDeliveryResult>;
+    /**
+     * Send an event to PagerDuty
+     */
+    private sendEvent;
+    /**
+     * Format alert as PagerDuty payload
+     */
+    private formatPayload;
+    /**
+     * Test the PagerDuty connection
+     */
+    test(): Promise<boolean>;
+}
+/**
+ * Create a new PagerDuty alert channel
+ */
+export declare function createPagerDutyChannel(config: PagerDutyChannelConfig): PagerDutyAlertChannel;
+//# sourceMappingURL=pagerduty.d.ts.map

package/dist/security/alerting/channels/pagerduty.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pagerduty.d.ts","sourceRoot":"","sources":["../../../../src/security/alerting/channels/pagerduty.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EACL,KAAK,aAAa,EAClB,KAAK,mBAAmB,EAGzB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,gBAAgB,EAAE,KAAK,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAC1E,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAQpD,MAAM,WAAW,sBAAuB,SAAQ,iBAAiB;IAC/D,4DAA4D;IAC5D,UAAU,EAAE,MAAM,CAAC;IACnB,kFAAkF;IAClF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,8BAA8B;IAC9B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,4BAA4B;IAC5B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,wBAAwB;IACxB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wBAAwB;IACxB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAiED;;GAEG;AACH,qBAAa,qBAAsB,SAAQ,gBAAgB;IACzD,SAAS,CAAC,QAAQ,CAAC,WAAW,cAA0B;IACxD,SAAS,CAAC,QAAQ,CAAC,WAAW,eAAe;IAC7C,mBAA4B,MAAM,+BAAU;IAE5C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;gBAExB,MAAM,EAAE,sBAAsB;IAoB1C;;OAEG;cACa,YAAY,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAI/E;;OAEG;IACG,WAAW,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAmCrE;;OAEG;IACG,OAAO,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAmCjE;;OAEG;YACW,SAAS;IAevB;;OAEG;IACH,OAAO,CAAC,aAAa;IA2ErB;;OAEG;IACG,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC;CAiC/B;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,sBAAsB,GAAG,qBAAqB,CAE5F"}

package/dist/security/alerting/channels/pagerduty.js

@@ -0,0 +1,248 @@
+/**
+ * PagerDuty Alert Channel
+ *
+ * Sends security alerts to PagerDuty via Events API v2.
+ * Supports incident creation, acknowledgment, and resolution.
+ *
+ * @packageDocumentation
+ * @module security/alerting/channels/pagerduty
+ */
+import { createLogger } from '../../../common/logger.js';
+import { AlertChannel, AlertSeverity, } from '../types.js';
+import { HttpAlertChannel } from './http-base.js';
+const logger = createLogger({ component: 'pagerduty-alert-channel' });
+// =============================================================================
+// Constants
+// =============================================================================
+const DEFAULT_API_URL = 'https://events.pagerduty.com/v2/enqueue';
+const DEFAULT_TIMEOUT = 10000;
+const DEFAULT_MAX_RETRIES = 3;
+/**
+ * Map our severity levels to PagerDuty severity
+ */
+const SEVERITY_MAPPING = {
+    [AlertSeverity.CRITICAL]: 'critical',
+    [AlertSeverity.HIGH]: 'error',
+    [AlertSeverity.MEDIUM]: 'warning',
+    [AlertSeverity.LOW]: 'info',
+    [AlertSeverity.INFO]: 'info',
+};
+// =============================================================================
+// PagerDutyAlertChannel Class
+// =============================================================================
+/**
+ * PagerDuty Events API integration for security alerts
+ */
+export class PagerDutyAlertChannel extends HttpAlertChannel {
+    channelType = AlertChannel.PAGERDUTY;
+    channelName = 'PagerDuty';
+    logger = logger;
+    routingKey;
+    apiUrl;
+    serviceName;
+    component;
+    group;
+    classValue;
+    constructor(config) {
+        super({
+            timeout: config.timeout ?? DEFAULT_TIMEOUT,
+            maxRetries: config.maxRetries ?? DEFAULT_MAX_RETRIES,
+        });
+        if (!config.routingKey) {
+            throw new Error('PagerDuty routing key is required');
+        }
+        this.routingKey = config.routingKey;
+        this.apiUrl = config.apiUrl ?? DEFAULT_API_URL;
+        this.serviceName = config.serviceName ?? 'Security Alert System';
+        this.component = config.component ?? 'security';
+        this.group = config.group ?? 'security-alerts';
+        this.classValue = config.class ?? 'security-incident';
+        logger.info('PagerDutyAlertChannel initialized');
+    }
+    /**
+     * Send an alert to PagerDuty (trigger an incident)
+     */
+    async sendInternal(alert) {
+        return this.sendEvent(alert, 'trigger');
+    }
+    /**
+     * Acknowledge an alert in PagerDuty
+     */
+    async acknowledge(alert) {
+        const startTime = Date.now();
+        let retryCount = 0;
+        let lastError = null;
+        while (retryCount <= this.maxRetries) {
+            try {
+                const result = await this.sendEvent(alert, 'acknowledge');
+                this.logger.info({
+                    alertId: alert.id,
+                    messageId: result.messageId,
+                    action: 'acknowledge',
+                    retryCount,
+                    durationMs: Date.now() - startTime,
+                }, 'Alert acknowledged in PagerDuty');
+                return this.createSuccessResult(result.messageId, retryCount);
+            }
+            catch (error) {
+                lastError = error instanceof Error ? error : new Error(String(error));
+                retryCount++;
+                if (retryCount <= this.maxRetries) {
+                    const delay = this.calculateBackoff(retryCount);
+                    await this.sleep(delay);
+                }
+            }
+        }
+        return this.createFailureResult(lastError?.message ?? 'Unknown error', retryCount);
+    }
+    /**
+     * Resolve an alert in PagerDuty
+     */
+    async resolve(alert) {
+        const startTime = Date.now();
+        let retryCount = 0;
+        let lastError = null;
+        while (retryCount <= this.maxRetries) {
+            try {
+                const result = await this.sendEvent(alert, 'resolve');
+                this.logger.info({
+                    alertId: alert.id,
+                    messageId: result.messageId,
+                    action: 'resolve',
+                    retryCount,
+                    durationMs: Date.now() - startTime,
+                }, 'Alert resolved in PagerDuty');
+                return this.createSuccessResult(result.messageId, retryCount);
+            }
+            catch (error) {
+                lastError = error instanceof Error ? error : new Error(String(error));
+                retryCount++;
+                if (retryCount <= this.maxRetries) {
+                    const delay = this.calculateBackoff(retryCount);
+                    await this.sleep(delay);
+                }
+            }
+        }
+        return this.createFailureResult(lastError?.message ?? 'Unknown error', retryCount);
+    }
+    /**
+     * Send an event to PagerDuty
+     */
+    async sendEvent(alert, action) {
+        const payload = this.formatPayload(alert, action);
+        const response = await this.httpRequestOrThrow({
+            url: this.apiUrl,
+            method: 'POST',
+            body: payload,
+        });
+        return { messageId: response.data.dedup_key };
+    }
+    /**
+     * Format alert as PagerDuty payload
+     */
+    formatPayload(alert, action) {
+        const payload = {
+            routing_key: this.routingKey,
+            event_action: action,
+            dedup_key: alert.fingerprint, // Use fingerprint for deduplication
+        };
+        // Only include full payload for trigger action
+        if (action === 'trigger') {
+            const customDetails = {
+                alert_id: alert.id,
+                alert_type: alert.type,
+                source: alert.source,
+                fingerprint: alert.fingerprint,
+            };
+            // Add context details
+            if (alert.context.userId) {
+                customDetails.user_id = alert.context.userId;
+            }
+            if (alert.context.ipAddress) {
+                customDetails.ip_address = alert.context.ipAddress;
+            }
+            if (alert.context.tenantId) {
+                customDetails.tenant_id = alert.context.tenantId;
+            }
+            if (alert.context.resource) {
+                customDetails.resource = alert.context.resource;
+            }
+            if (alert.context.location) {
+                customDetails.location = alert.context.location;
+            }
+            if (alert.context.userAgent) {
+                customDetails.user_agent = alert.context.userAgent;
+            }
+            if (alert.context.requestId) {
+                customDetails.request_id = alert.context.requestId;
+            }
+            if (alert.context.sessionId) {
+                customDetails.session_id = alert.context.sessionId;
+            }
+            // Add suggested actions
+            if (alert.suggestedActions && alert.suggestedActions.length > 0) {
+                customDetails.suggested_actions = alert.suggestedActions;
+            }
+            // Add tags
+            if (alert.tags && alert.tags.length > 0) {
+                customDetails.tags = alert.tags;
+            }
+            // Add additional metadata
+            if (alert.context.metadata) {
+                customDetails.metadata = alert.context.metadata;
+            }
+            payload.payload = {
+                summary: `[${alert.severity.toUpperCase()}] ${alert.title}: ${alert.message.slice(0, 200)}`,
+                source: this.serviceName,
+                severity: SEVERITY_MAPPING[alert.severity],
+                timestamp: alert.timestamp.toISOString(),
+                component: this.component,
+                group: this.group,
+                class: this.classValue,
+                custom_details: customDetails,
+            };
+        }
+        return payload;
+    }
+    /**
+     * Test the PagerDuty connection
+     */
+    async test() {
+        try {
+            // Send a test event that triggers and immediately resolves
+            const testAlert = {
+                id: 'test-' + Date.now(),
+                severity: AlertSeverity.INFO,
+                type: 'custom',
+                title: 'Security Alert System Test',
+                message: 'This is a test message from the security alerting system.',
+                context: {},
+                timestamp: new Date(),
+                fingerprint: `test-connection-${Date.now()}`,
+                source: this.serviceName,
+                acknowledged: false,
+                resolved: false,
+            };
+            // Trigger test event
+            const result = await this.send(testAlert);
+            if (result.success) {
+                // Immediately resolve it
+                await this.resolve(testAlert);
+                logger.info('PagerDuty connection test successful');
+                return true;
+            }
+            return false;
+        }
+        catch (error) {
+            logger.error({ error }, 'PagerDuty connection test failed');
+            return false;
+        }
+    }
+}
+/**
+ * Create a new PagerDuty alert channel
+ */
+export function createPagerDutyChannel(config) {
+    return new PagerDutyAlertChannel(config);
+}
+//# sourceMappingURL=pagerduty.js.map

package/dist/security/alerting/channels/pagerduty.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pagerduty.js","sourceRoot":"","sources":["../../../../src/security/alerting/channels/pagerduty.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAGL,YAAY,EACZ,aAAa,GACd,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,gBAAgB,EAA0B,MAAM,gBAAgB,CAAC;AAG1E,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,SAAS,EAAE,yBAAyB,EAAE,CAAC,CAAC;AA6DtE,gFAAgF;AAChF,YAAY;AACZ,gFAAgF;AAEhF,MAAM,eAAe,GAAG,yCAAyC,CAAC;AAClE,MAAM,eAAe,GAAG,KAAK,CAAC;AAC9B,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAE9B;;GAEG;AACH,MAAM,gBAAgB,GAA6C;IACjE,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,UAAU;IACpC,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,OAAO;IAC7B,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,SAAS;IACjC,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,MAAM;IAC3B,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,MAAM;CAC7B,CAAC;AAEF,gFAAgF;AAChF,8BAA8B;AAC9B,gFAAgF;AAEhF;;GAEG;AACH,MAAM,OAAO,qBAAsB,SAAQ,gBAAgB;IACtC,WAAW,GAAG,YAAY,CAAC,SAAS,CAAC;IACrC,WAAW,GAAG,WAAW,CAAC;IACjB,MAAM,GAAG,MAAM,CAAC;IAE3B,UAAU,CAAS;IACnB,MAAM,CAAS;IACf,WAAW,CAAS;IACpB,SAAS,CAAS;IAClB,KAAK,CAAS;IACd,UAAU,CAAS;IAEpC,YAAY,MAA8B;QACxC,KAAK,CAAC;YACJ,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,eAAe;YAC1C,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,mBAAmB;SACrD,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACvD,CAAC;QAED,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;QACpC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,eAAe,CAAC;QAC/C,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,IAAI,uBAAuB,CAAC;QACjE,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,UAAU,CAAC;QAChD,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,iBAAiB,CAAC;QAC/C,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,KAAK,IAAI,mBAAmB,CAAC;QAEtD,MAAM,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;IACnD,CAAC;IAED;;OAEG;IACO,KAAK,CAAC,YAAY,CAAC,KAAoB;QAC/C,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAC1C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CAAC,KAAoB;QACpC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,IAAI,SAAS,GAAiB,IAAI,CAAC;QAEnC,OAAO,UAAU,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACrC,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;gBAE1D,IAAI,CAAC,MAAM,CAAC,IAAI,CACd;oBACE,OAAO,EAAE,KAAK,CAAC,EAAE;oBACjB,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,MAAM,EAAE,aAAa;oBACrB,UAAU;oBACV,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;iBACnC,EACD,iCAAiC,CAClC,CAAC;gBAEF,OAAO,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;YAChE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,SAAS,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;gBACtE,UAAU,EAAE,CAAC;gBAEb,IAAI,UAAU,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;oBAClC,MAAM,KAAK,GAAG,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;oBAChD,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAC1B,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC,mBAAmB,CAAC,SAAS,EAAE,OAAO,IAAI,eAAe,EAAE,UAAU,CAAC,CAAC;IACrF,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,CAAC,KAAoB;QAChC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,IAAI,SAAS,GAAiB,IAAI,CAAC;QAEnC,OAAO,UAAU,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACrC,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;gBAEtD,IAAI,CAAC,MAAM,CAAC,IAAI,CACd;oBACE,OAAO,EAAE,KAAK,CAAC,EAAE;oBACjB,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,MAAM,EAAE,SAAS;oBACjB,UAAU;oBACV,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;iBACnC,EACD,6BAA6B,CAC9B,CAAC;gBAEF,OAAO,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;YAChE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,SAAS,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;gBACtE,UAAU,EAAE,CAAC;gBAEb,IAAI,UAAU,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;oBAClC,MAAM,KAAK,GAAG,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;oBAChD,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAC1B,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC,mBAAmB,CAAC,SAAS,EAAE,OAAO,IAAI,eAAe,EAAE,UAAU,CAAC,CAAC;IACrF,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,SAAS,CACrB,KAAoB,EACpB,MAA4B;QAE5B,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAElD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAoB;YAChE,GAAG,EAAE,IAAI,CAAC,MAAM;YAChB,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,OAAO;SACd,CAAC,CAAC;QAEH,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;IAChD,CAAC;IAED;;OAEG;IACK,aAAa,CACnB,KAAoB,EACpB,MAA4B;QAE5B,MAAM,OAAO,GAAqB;YAChC,WAAW,EAAE,IAAI,CAAC,UAAU;YAC5B,YAAY,EAAE,MAAM;YACpB,SAAS,EAAE,KAAK,CAAC,WAAW,EAAE,oCAAoC;SACnE,CAAC;QAEF,+CAA+C;QAC/C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,aAAa,GAA4B;gBAC7C,QAAQ,EAAE,KAAK,CAAC,EAAE;gBAClB,UAAU,EAAE,KAAK,CAAC,IAAI;gBACtB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,WAAW,EAAE,KAAK,CAAC,WAAW;aAC/B,CAAC;YAEF,sBAAsB;YACtB,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;gBACzB,aAAa,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAC/C,CAAC;YACD,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;gBAC5B,aAAa,CAAC,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;YACrD,CAAC;YACD,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;gBAC3B,aAAa,CAAC,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;YACnD,CAAC;YACD,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;gBAC3B,aAAa,CAAC,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;YAClD,CAAC;YACD,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;gBAC3B,aAAa,CAAC,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;YAClD,CAAC;YACD,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;gBAC5B,aAAa,CAAC,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;YACrD,CAAC;YACD,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;gBAC5B,aAAa,CAAC,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;YACrD,CAAC;YACD,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;gBAC5B,aAAa,CAAC,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;YACrD,CAAC;YAED,wBAAwB;YACxB,IAAI,KAAK,CAAC,gBAAgB,IAAI,KAAK,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAChE,aAAa,CAAC,iBAAiB,GAAG,KAAK,CAAC,gBAAgB,CAAC;YAC3D,CAAC;YAED,WAAW;YACX,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxC,aAAa,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;YAClC,CAAC;YAED,0BAA0B;YAC1B,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;gBAC3B,aAAa,CAAC,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;YAClD,CAAC;YAED,OAAO,CAAC,OAAO,GAAG;gBAChB,OAAO,EAAE,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;gBAC3F,MAAM,EAAE,IAAI,CAAC,WAAW;gBACxB,QAAQ,EAAE,gBAAgB,CAAC,KAAK,CAAC,QAAyB,CAAC;gBAC3D,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE;gBACxC,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,KAAK,EAAE,IAAI,CAAC,UAAU;gBACtB,cAAc,EAAE,aAAa;aAC9B,CAAC;QACJ,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI;QACR,IAAI,CAAC;YACH,2DAA2D;YAC3D,MAAM,SAAS,GAAkB;gBAC/B,EAAE,EAAE,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE;gBACxB,QAAQ,EAAE,aAAa,CAAC,IAAI;gBAC5B,IAAI,EAAE,QAAQ;gBACd,KAAK,EAAE,4BAA4B;gBACnC,OAAO,EAAE,2DAA2D;gBACpE,OAAO,EAAE,EAAE;gBACX,SAAS,EAAE,IAAI,IAAI,EAAE;gBACrB,WAAW,EAAE,mBAAmB,IAAI,CAAC,GAAG,EAAE,EAAE;gBAC5C,MAAM,EAAE,IAAI,CAAC,WAAW;gBACxB,YAAY,EAAE,KAAK;gBACnB,QAAQ,EAAE,KAAK;aAChB,CAAC;YAEF,qBAAqB;YACrB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAE1C,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,yBAAyB;gBACzB,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBAC9B,MAAM,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;gBACpD,OAAO,IAAI,CAAC;YACd,CAAC;YAED,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,kCAAkC,CAAC,CAAC;YAC5D,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAA8B;IACnE,OAAO,IAAI,qBAAqB,CAAC,MAAM,CAAC,CAAC;AAC3C,CAAC"}

package/dist/security/alerting/channels/slack.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Slack Alert Channel
+ *
+ * Sends security alerts to Slack via webhooks.
+ * Supports rich message formatting with attachments.
+ *
+ * @packageDocumentation
+ * @module security/alerting/channels/slack
+ */
+import { type SecurityAlert } from '../types.js';
+import { HttpAlertChannel, type HttpChannelConfig } from './http-base.js';
+import type { SendInternalResult } from './base.js';
+export interface SlackChannelConfig extends HttpChannelConfig {
+    /** Slack webhook URL */
+    webhookUrl: string;
+    /** Default channel to post to (can be overridden by webhook) */
+    defaultChannel?: string;
+    /** Bot username */
+    username?: string;
+    /** Bot icon emoji */
+    iconEmoji?: string;
+    /** Include full context in message */
+    includeFullContext?: boolean;
+}
+/**
+ * Slack webhook integration for security alerts
+ */
+export declare class SlackAlertChannel extends HttpAlertChannel {
+    protected readonly channelType: "slack";
+    protected readonly channelName = "Slack";
+    protected readonly logger: import("pino").Logger<never>;
+    private readonly webhookUrl;
+    private readonly defaultChannel;
+    private readonly username;
+    private readonly iconEmoji;
+    private readonly includeFullContext;
+    constructor(config: SlackChannelConfig);
+    /**
+     * Send an alert to Slack
+     */
+    protected sendInternal(alert: SecurityAlert): Promise<SendInternalResult>;
+    /**
+     * Format alert as Slack message
+     */
+    private formatMessage;
+    /**
+     * Test the Slack connection
+     */
+    test(): Promise<boolean>;
+}
+/**
+ * Create a new Slack alert channel
+ */
+export declare function createSlackChannel(config: SlackChannelConfig): SlackAlertChannel;
+//# sourceMappingURL=slack.d.ts.map

package/dist/security/alerting/channels/slack.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack.d.ts","sourceRoot":"","sources":["../../../../src/security/alerting/channels/slack.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EACL,KAAK,aAAa,EAGnB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,gBAAgB,EAAE,KAAK,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAC1E,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAQpD,MAAM,WAAW,kBAAmB,SAAQ,iBAAiB;IAC3D,wBAAwB;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,gEAAgE;IAChE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,mBAAmB;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,qBAAqB;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,sCAAsC;IACtC,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AAmDD;;GAEG;AACH,qBAAa,iBAAkB,SAAQ,gBAAgB;IACrD,SAAS,CAAC,QAAQ,CAAC,WAAW,UAAsB;IACpD,SAAS,CAAC,QAAQ,CAAC,WAAW,WAAW;IACzC,mBAA4B,MAAM,+BAAU;IAE5C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;IACxC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAU;gBAEjC,MAAM,EAAE,kBAAkB;IAmBtC;;OAEG;cACa,YAAY,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAa/E;;OAEG;IACH,OAAO,CAAC,aAAa;IAqGrB;;OAEG;IACG,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC;CAoC/B;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,kBAAkB,GAAG,iBAAiB,CAEhF"}

package/dist/security/alerting/channels/slack.js

@@ -0,0 +1,215 @@
+/**
+ * Slack Alert Channel
+ *
+ * Sends security alerts to Slack via webhooks.
+ * Supports rich message formatting with attachments.
+ *
+ * @packageDocumentation
+ * @module security/alerting/channels/slack
+ */
+import { createLogger } from '../../../common/logger.js';
+import { AlertChannel, AlertSeverity, } from '../types.js';
+import { HttpAlertChannel } from './http-base.js';
+const logger = createLogger({ component: 'slack-alert-channel' });
+// =============================================================================
+// Constants
+// =============================================================================
+const SEVERITY_COLORS = {
+    [AlertSeverity.CRITICAL]: '#FF0000', // Red
+    [AlertSeverity.HIGH]: '#FF6600', // Orange
+    [AlertSeverity.MEDIUM]: '#FFCC00', // Yellow
+    [AlertSeverity.LOW]: '#00CC00', // Green
+    [AlertSeverity.INFO]: '#0066FF', // Blue
+};
+const SEVERITY_EMOJIS = {
+    [AlertSeverity.CRITICAL]: ':rotating_light:',
+    [AlertSeverity.HIGH]: ':warning:',
+    [AlertSeverity.MEDIUM]: ':large_yellow_circle:',
+    [AlertSeverity.LOW]: ':information_source:',
+    [AlertSeverity.INFO]: ':memo:',
+};
+const DEFAULT_TIMEOUT = 10000;
+const DEFAULT_MAX_RETRIES = 3;
+// =============================================================================
+// SlackAlertChannel Class
+// =============================================================================
+/**
+ * Slack webhook integration for security alerts
+ */
+export class SlackAlertChannel extends HttpAlertChannel {
+    channelType = AlertChannel.SLACK;
+    channelName = 'Slack';
+    logger = logger;
+    webhookUrl;
+    defaultChannel;
+    username;
+    iconEmoji;
+    includeFullContext;
+    constructor(config) {
+        super({
+            timeout: config.timeout ?? DEFAULT_TIMEOUT,
+            maxRetries: config.maxRetries ?? DEFAULT_MAX_RETRIES,
+        });
+        if (!config.webhookUrl) {
+            throw new Error('Slack webhook URL is required');
+        }
+        this.webhookUrl = config.webhookUrl;
+        this.defaultChannel = config.defaultChannel ?? '';
+        this.username = config.username ?? 'Security Alert Bot';
+        this.iconEmoji = config.iconEmoji ?? ':shield:';
+        this.includeFullContext = config.includeFullContext ?? true;
+        logger.info('SlackAlertChannel initialized');
+    }
+    /**
+     * Send an alert to Slack
+     */
+    async sendInternal(alert) {
+        const message = this.formatMessage(alert);
+        await this.httpRequestOrThrow({
+            url: this.webhookUrl,
+            method: 'POST',
+            body: message,
+        });
+        // Slack webhooks return "ok" on success, not a message ID
+        return { messageId: `slack-${Date.now()}` };
+    }
+    /**
+     * Format alert as Slack message
+     */
+    formatMessage(alert) {
+        const severity = alert.severity;
+        const emoji = SEVERITY_EMOJIS[severity] ?? SEVERITY_EMOJIS[AlertSeverity.INFO];
+        const color = SEVERITY_COLORS[severity] ?? SEVERITY_COLORS[AlertSeverity.INFO];
+        const fields = [
+            {
+                title: 'Severity',
+                value: `${emoji} ${alert.severity.toUpperCase()}`,
+                short: true,
+            },
+            {
+                title: 'Type',
+                value: alert.type.replace(/_/g, ' ').toUpperCase(),
+                short: true,
+            },
+            {
+                title: 'Source',
+                value: alert.source,
+                short: true,
+            },
+            {
+                title: 'Time',
+                value: `<!date^${Math.floor(alert.timestamp.getTime() / 1000)}^{date_short_pretty} at {time}|${alert.timestamp.toISOString()}>`,
+                short: true,
+            },
+        ];
+        // Add context fields
+        if (this.includeFullContext) {
+            if (alert.context.userId) {
+                fields.push({
+                    title: 'User ID',
+                    value: alert.context.userId,
+                    short: true,
+                });
+            }
+            if (alert.context.ipAddress) {
+                fields.push({
+                    title: 'IP Address',
+                    value: alert.context.ipAddress,
+                    short: true,
+                });
+            }
+            if (alert.context.location?.country) {
+                fields.push({
+                    title: 'Location',
+                    value: `${alert.context.location.city || ''} ${alert.context.location.country}`.trim(),
+                    short: true,
+                });
+            }
+            if (alert.context.resource) {
+                fields.push({
+                    title: 'Resource',
+                    value: alert.context.resource,
+                    short: true,
+                });
+            }
+        }
+        // Add suggested actions if present
+        if (alert.suggestedActions && alert.suggestedActions.length > 0) {
+            fields.push({
+                title: 'Suggested Actions',
+                value: alert.suggestedActions.map(a => `* ${a}`).join('\n'),
+                short: false,
+            });
+        }
+        // Add tags if present
+        if (alert.tags && alert.tags.length > 0) {
+            fields.push({
+                title: 'Tags',
+                value: alert.tags.map(t => `\`${t}\``).join(' '),
+                short: false,
+            });
+        }
+        const attachment = {
+            color,
+            title: alert.title,
+            text: alert.message,
+            fields,
+            footer: `Alert ID: ${alert.id}`,
+            ts: Math.floor(alert.timestamp.getTime() / 1000),
+        };
+        const message = {
+            username: this.username,
+            icon_emoji: this.iconEmoji,
+            text: `${emoji} *Security Alert: ${alert.title}*`,
+            attachments: [attachment],
+        };
+        if (this.defaultChannel) {
+            message.channel = this.defaultChannel;
+        }
+        return message;
+    }
+    /**
+     * Test the Slack connection
+     */
+    async test() {
+        try {
+            const testMessage = {
+                username: this.username,
+                icon_emoji: this.iconEmoji,
+                text: ':white_check_mark: Security Alert System - Connection Test',
+                attachments: [{
+                        color: '#00CC00',
+                        title: 'Test Message',
+                        text: 'This is a test message from the security alerting system.',
+                        fields: [
+                            { title: 'Status', value: 'Connected', short: true },
+                            { title: 'Time', value: new Date().toISOString(), short: true },
+                        ],
+                        footer: 'Security Alert System',
+                        ts: Math.floor(Date.now() / 1000),
+                    }],
+            };
+            if (this.defaultChannel) {
+                testMessage.channel = this.defaultChannel;
+            }
+            await this.httpRequestOrThrow({
+                url: this.webhookUrl,
+                method: 'POST',
+                body: testMessage,
+            });
+            logger.info('Slack connection test successful');
+            return true;
+        }
+        catch (error) {
+            logger.error({ error }, 'Slack connection test failed');
+            return false;
+        }
+    }
+}
+/**
+ * Create a new Slack alert channel
+ */
+export function createSlackChannel(config) {
+    return new SlackAlertChannel(config);
+}
+//# sourceMappingURL=slack.js.map