@vorionsys/platform-core 0.1.0

package/dist/security/anomaly/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/security/anomaly/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB;;GAEG;AACH,eAAO,MAAM,WAAW;;;;;;;CAOd,CAAC;AAEX,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,OAAO,WAAW,CAAC,CAAC;AAEzE,eAAO,MAAM,iBAAiB;;;;;;;EAA4B,CAAC;AAE3D;;GAEG;AACH,eAAO,MAAM,eAAe;;;;;CAKlB,CAAC;AAEX,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,OAAO,eAAe,CAAC,CAAC;AAErF,eAAO,MAAM,qBAAqB;;;;;EAAgC,CAAC;AAMnE;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB,wBAAwB;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,iCAAiC;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,iCAAiC;IACjC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;IACjC,kDAAkD;IAClD,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;EAK1B,CAAC;AAMH;;GAEG;AACH,MAAM,WAAW,OAAO;IACtB,wBAAwB;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,oCAAoC;IACpC,SAAS,EAAE,IAAI,CAAC;IAChB,sBAAsB;IACtB,IAAI,EAAE,WAAW,CAAC;IAClB,qBAAqB;IACrB,QAAQ,EAAE,eAAe,CAAC;IAC1B,+BAA+B;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,wCAAwC;IACxC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gCAAgC;IAChC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,6BAA6B;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iCAAiC;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,uDAAuD;IACvD,UAAU,EAAE,SAAS,EAAE,CAAC;IACxB,gCAAgC;IAChC,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,0BAA0B;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAaxB,CAAC;AAMH;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,2CAA2C;IAC3C,OAAO,EAAE,OAAO,CAAC;IACjB,qCAAqC;IACrC,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,wDAAwD;IACxD,cAAc,EAAE,MAAM,CAAC;IACvB,uDAAuD;IACvD,kBAAkB,EAAE,MAAM,CAAC;IAC3B,0DAA0D;IAC1D,SAAS,EAAE,OAAO,CAAC;IACnB,0DAA0D;IAC1D,kBAAkB,EAAE,MAAM,CAAC;IAC3B,mCAAmC;IACnC,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;EAQtC,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,+BAA+B,EAAE,qBAQ7C,CAAC;AAMF;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,kCAAkC;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,mCAAmC;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,wCAAwC;IACxC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gBAAgB;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,mBAAmB;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,eAAe;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;EAO5B,CAAC;AAEH;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,iEAAiE;IACjE,iBAAiB,EAAE,MAAM,CAAC;IAC1B,6DAA6D;IAC7D,aAAa,EAAE,MAAM,CAAC;IACtB,iDAAiD;IACjD,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,sCAAsC;IACtC,YAAY,EAAE,OAAO,CAAC;CACvB;AAED,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;EAKzC,CAAC;AAEH,eAAO,MAAM,kCAAkC,EAAE,wBAKhD,CAAC;AAMF;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,2DAA2D;IAC3D,gBAAgB,EAAE,MAAM,CAAC;IACzB,iCAAiC;IACjC,cAAc,EAAE,MAAM,CAAC;IACvB,gEAAgE;IAChE,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,8CAA8C;IAC9C,iBAAiB,EAAE,OAAO,CAAC;IAC3B,uDAAuD;IACvD,oBAAoB,EAAE,MAAM,CAAC;CAC9B;AAED,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;EAMvC,CAAC;AAEH,eAAO,MAAM,gCAAgC,EAAE,sBAM9C,CAAC;AAEF;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,cAAc;IACd,MAAM,EAAE,MAAM,CAAC;IACf,0CAA0C;IAC1C,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,wCAAwC;IACxC,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,qCAAqC;IACrC,WAAW,EAAE,MAAM,CAAC;IACpB,wCAAwC;IACxC,WAAW,EAAE,IAAI,CAAC;CACnB;AAED,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;EAMlC,CAAC;AAMH;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,kDAAkD;IAClD,aAAa,EAAE,MAAM,CAAC;IACtB,sDAAsD;IACtD,oBAAoB,EAAE,MAAM,CAAC;IAC7B,wDAAwD;IACxD,mBAAmB,EAAE,MAAM,CAAC;IAC5B,wCAAwC;IACxC,YAAY,EAAE,OAAO,CAAC;IACtB,sCAAsC;IACtC,UAAU,EAAE,OAAO,CAAC;IACpB,4CAA4C;IAC5C,gBAAgB,EAAE,OAAO,CAAC;CAC3B;AAED,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;EAOrC,CAAC;AAEH,eAAO,MAAM,8BAA8B,EAAE,oBAO5C,CAAC;AAEF;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,4CAA4C;IAC5C,UAAU,EAAE,MAAM,CAAC;IACnB,yBAAyB;IACzB,cAAc,EAAE,MAAM,GAAG,IAAI,GAAG,UAAU,CAAC;IAC3C,+BAA+B;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,yBAAyB;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,oCAAoC;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,yCAAyC;IACzC,WAAW,EAAE,IAAI,CAAC;CACnB;AAED,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;EAO/B,CAAC;AAMH;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,sBAAsB;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,sBAAsB;IACtB,SAAS,EAAE,IAAI,CAAC;IAChB,iEAAiE;IACjE,SAAS,EAAE,MAAM,CAAC;IAClB,+BAA+B;IAC/B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gCAAgC;IAChC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gCAAgC;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,wBAAwB;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,uCAAuC;IACvC,QAAQ,CAAC,EAAE,WAAW,CAAC;IACvB,kCAAkC;IAClC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gCAAgC;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,yCAAyC;IACzC,OAAO,EAAE,OAAO,CAAC;IACjB,qCAAqC;IACrC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,sCAAsC;IACtC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,gCAAgC;IAChC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAe9B,CAAC;AAMH;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,2BAA2B;IAC3B,YAAY,EAAE,MAAM,CAAC;IACrB,sCAAsC;IACtC,eAAe,EAAE,OAAO,CAAC;IACzB,mDAAmD;IACnD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,mCAAmC;IACnC,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,iCAAiC;IACjC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,uBAAuB;IACvB,UAAU,EAAE,SAAS,EAAE,CAAC;IACxB,wBAAwB;IACxB,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,+CAA+C;IAC/C,UAAU,EAAE,MAAM,CAAC;IACnB,gCAAgC;IAChC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAUhC,CAAC;AAEH;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,kCAAkC;IAClC,KAAK,EAAE,aAAa,CAAC;IACrB,wCAAwC;IACxC,eAAe,EAAE,eAAe,EAAE,CAAC;IACnC,kCAAkC;IAClC,SAAS,EAAE,OAAO,EAAE,CAAC;IACrB,4CAA4C;IAC5C,eAAe,EAAE,MAAM,CAAC;IACxB,4BAA4B;IAC5B,UAAU,EAAE,IAAI,CAAC;CAClB;AAED,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAM1C,CAAC;AAMH;;GAEG;AACH,MAAM,WAAW,QAAQ;IACvB,kCAAkC;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,iCAAiC;IACjC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAE7B;;;;OAIG;IACH,MAAM,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAEvD;;;OAGG;IACH,KAAK,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE3C;;OAEG;IACH,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAMD;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,sBAAsB;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,2CAA2C;IAC3C,OAAO,EAAE,OAAO,CAAC;IACjB,mBAAmB;IACnB,MAAM,EAAE,MAAM,GAAG,cAAc,GAAG,UAAU,GAAG,WAAW,CAAC;IAC3D,iCAAiC;IACjC,SAAS,EAAE,IAAI,CAAC;IAChB,sCAAsC;IACtC,SAAS,EAAE,IAAI,CAAC;IAChB,+CAA+C;IAC/C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kCAAkC;IAClC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,yCAAyC;IACzC,eAAe,EAAE,OAAO,CAAC;IACzB,+CAA+C;IAC/C,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAChC;AAED,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAU7B,CAAC;AAMH;;GAEG;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAEzE;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,KAAK,EAAE,YAAY,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC"}

package/dist/security/anomaly/types.js

@@ -0,0 +1,193 @@
+/**
+ * Anomaly Detection Types
+ *
+ * Type definitions for the rule-based anomaly detection engine.
+ * Provides interfaces for detecting suspicious patterns including:
+ * - Impossible travel (geographic anomalies)
+ * - Unusual access times (temporal anomalies)
+ * - Volume spikes (behavioral anomalies)
+ * - New device access
+ * - Authentication failure spikes
+ * - Privilege probing attempts
+ *
+ * @packageDocumentation
+ * @module security/anomaly/types
+ */
+import { z } from 'zod';
+// =============================================================================
+// Anomaly Types
+// =============================================================================
+/**
+ * Types of anomalies that can be detected
+ */
+export const AnomalyType = {
+    IMPOSSIBLE_TRAVEL: 'impossible-travel',
+    UNUSUAL_TIME: 'unusual-time',
+    VOLUME_SPIKE: 'volume-spike',
+    NEW_DEVICE: 'new-device',
+    FAILED_AUTH_SPIKE: 'failed-auth-spike',
+    PRIVILEGE_PROBE: 'privilege-probe',
+};
+export const anomalyTypeSchema = z.nativeEnum(AnomalyType);
+/**
+ * Severity levels for detected anomalies
+ */
+export const AnomalySeverity = {
+    LOW: 'low',
+    MEDIUM: 'medium',
+    HIGH: 'high',
+    CRITICAL: 'critical',
+};
+export const anomalySeveritySchema = z.nativeEnum(AnomalySeverity);
+export const indicatorSchema = z.object({
+    type: z.string().min(1),
+    description: z.string().min(1),
+    value: z.union([z.string(), z.number(), z.boolean()]),
+    weight: z.number().min(0).max(100),
+});
+export const anomalySchema = z.object({
+    id: z.string().uuid(),
+    timestamp: z.coerce.date(),
+    type: anomalyTypeSchema,
+    severity: anomalySeveritySchema,
+    confidence: z.number().min(0).max(100),
+    userId: z.string().optional(),
+    tenantId: z.string().optional(),
+    ipAddress: z.string().optional(),
+    description: z.string().min(1),
+    indicators: z.array(indicatorSchema),
+    suggestedActions: z.array(z.string()),
+    metadata: z.record(z.unknown()).optional(),
+});
+export const anomalyDetectorConfigSchema = z.object({
+    enabled: z.boolean().default(true),
+    detectors: z.array(z.string()).default(['geographic', 'temporal', 'volume']),
+    alertThreshold: z.number().min(0).max(100).default(70),
+    learningPeriodDays: z.number().int().positive().default(14),
+    autoBlock: z.boolean().default(false),
+    autoBlockThreshold: z.number().min(0).max(100).default(90),
+    redisKeyPrefix: z.string().default('vorion:anomaly:'),
+});
+/**
+ * Default configuration values
+ */
+export const DEFAULT_ANOMALY_DETECTOR_CONFIG = {
+    enabled: true,
+    detectors: ['geographic', 'temporal', 'volume'],
+    alertThreshold: 70,
+    learningPeriodDays: 14,
+    autoBlock: false,
+    autoBlockThreshold: 90,
+    redisKeyPrefix: 'vorion:anomaly:',
+};
+export const geoLocationSchema = z.object({
+    latitude: z.number().min(-90).max(90),
+    longitude: z.number().min(-180).max(180),
+    countryCode: z.string().length(2).optional(),
+    city: z.string().optional(),
+    region: z.string().optional(),
+    timezone: z.string().optional(),
+});
+export const geographicDetectorConfigSchema = z.object({
+    maxTravelSpeedKmh: z.number().positive().default(1200),
+    minDistanceKm: z.number().positive().default(100),
+    highRiskCountries: z.array(z.string().length(2)).default([]),
+    flagVpnUsage: z.boolean().default(true),
+});
+export const DEFAULT_GEOGRAPHIC_DETECTOR_CONFIG = {
+    maxTravelSpeedKmh: 1200, // Faster than commercial aviation (~900 km/h) with buffer
+    minDistanceKm: 100,
+    highRiskCountries: [],
+    flagVpnUsage: true,
+};
+export const temporalDetectorConfigSchema = z.object({
+    normalHoursStart: z.number().int().min(0).max(23).default(6),
+    normalHoursEnd: z.number().int().min(0).max(23).default(22),
+    normalDays: z.array(z.number().int().min(0).max(6)).default([1, 2, 3, 4, 5]),
+    learnUserPatterns: z.boolean().default(true),
+    minEventsForBaseline: z.number().int().positive().default(20),
+});
+export const DEFAULT_TEMPORAL_DETECTOR_CONFIG = {
+    normalHoursStart: 6, // 6 AM
+    normalHoursEnd: 22, // 10 PM
+    normalDays: [1, 2, 3, 4, 5], // Monday through Friday
+    learnUserPatterns: true,
+    minEventsForBaseline: 20,
+};
+export const userAccessPatternSchema = z.object({
+    userId: z.string().min(1),
+    hourHistogram: z.array(z.number()).length(24),
+    dayHistogram: z.array(z.number()).length(7),
+    totalEvents: z.number().int().nonnegative(),
+    lastUpdated: z.coerce.date(),
+});
+export const volumeDetectorConfigSchema = z.object({
+    windowMinutes: z.number().int().positive().default(5),
+    spikeThresholdStdDev: z.number().positive().default(3),
+    absoluteMaxRequests: z.number().int().positive().default(1000),
+    trackPerUser: z.boolean().default(true),
+    trackPerIp: z.boolean().default(true),
+    trackPerEndpoint: z.boolean().default(false),
+});
+export const DEFAULT_VOLUME_DETECTOR_CONFIG = {
+    windowMinutes: 5,
+    spikeThresholdStdDev: 3,
+    absoluteMaxRequests: 1000,
+    trackPerUser: true,
+    trackPerIp: true,
+    trackPerEndpoint: false,
+};
+export const volumeBaselineSchema = z.object({
+    identifier: z.string().min(1),
+    identifierType: z.enum(['user', 'ip', 'endpoint']),
+    mean: z.number().nonnegative(),
+    stdDev: z.number().nonnegative(),
+    sampleCount: z.number().int().nonnegative(),
+    lastUpdated: z.coerce.date(),
+});
+export const securityEventSchema = z.object({
+    eventId: z.string().min(1),
+    timestamp: z.coerce.date(),
+    eventType: z.string().min(1),
+    userId: z.string().optional(),
+    tenantId: z.string().optional(),
+    ipAddress: z.string().min(1),
+    userAgent: z.string().optional(),
+    location: geoLocationSchema.optional(),
+    resource: z.string().optional(),
+    method: z.string().optional(),
+    success: z.boolean(),
+    failureReason: z.string().optional(),
+    deviceFingerprint: z.string().optional(),
+    metadata: z.record(z.unknown()).optional(),
+});
+export const detectionResultSchema = z.object({
+    detectorName: z.string().min(1),
+    anomalyDetected: z.boolean(),
+    confidence: z.number().min(0).max(100).optional(),
+    severity: anomalySeveritySchema.optional(),
+    description: z.string().optional(),
+    indicators: z.array(indicatorSchema),
+    suggestedActions: z.array(z.string()),
+    durationMs: z.number().nonnegative(),
+    error: z.string().optional(),
+});
+export const aggregatedDetectionResultSchema = z.object({
+    event: securityEventSchema,
+    detectorResults: z.array(detectionResultSchema),
+    anomalies: z.array(anomalySchema),
+    totalDurationMs: z.number().nonnegative(),
+    analyzedAt: z.coerce.date(),
+});
+export const anomalyAlertSchema = z.object({
+    alertId: z.string().uuid(),
+    anomaly: anomalySchema,
+    status: z.enum(['open', 'acknowledged', 'resolved', 'dismissed']),
+    createdAt: z.coerce.date(),
+    updatedAt: z.coerce.date(),
+    handledBy: z.string().optional(),
+    notes: z.string().optional(),
+    autoActionTaken: z.boolean(),
+    autoActionDescription: z.string().optional(),
+});
+//# sourceMappingURL=types.js.map

package/dist/security/anomaly/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/security/anomaly/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,gFAAgF;AAChF,gBAAgB;AAChB,gFAAgF;AAEhF;;GAEG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,iBAAiB,EAAE,mBAAmB;IACtC,YAAY,EAAE,cAAc;IAC5B,YAAY,EAAE,cAAc;IAC5B,UAAU,EAAE,YAAY;IACxB,iBAAiB,EAAE,mBAAmB;IACtC,eAAe,EAAE,iBAAiB;CAC1B,CAAC;AAIX,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;AAE3D;;GAEG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,GAAG,EAAE,KAAK;IACV,MAAM,EAAE,QAAQ;IAChB,IAAI,EAAE,MAAM;IACZ,QAAQ,EAAE,UAAU;CACZ,CAAC;AAIX,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;AAoBnE,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IACrD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;CACnC,CAAC,CAAC;AAoCH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IACrB,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;IAC1B,IAAI,EAAE,iBAAiB;IACvB,QAAQ,EAAE,qBAAqB;IAC/B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACtC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC;IACpC,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACrC,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC3C,CAAC,CAAC;AA0BH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAClC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,YAAY,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;IAC5E,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACtD,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IAC3D,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACrC,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC1D,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,iBAAiB,CAAC;CACtD,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAA0B;IACpE,OAAO,EAAE,IAAI;IACb,SAAS,EAAE,CAAC,YAAY,EAAE,UAAU,EAAE,QAAQ,CAAC;IAC/C,cAAc,EAAE,EAAE;IAClB,kBAAkB,EAAE,EAAE;IACtB,SAAS,EAAE,KAAK;IAChB,kBAAkB,EAAE,EAAE;IACtB,cAAc,EAAE,iBAAiB;CAClC,CAAC;AAwBF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IACrC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACxC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC5C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAChC,CAAC,CAAC;AAgBH,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC;IACrD,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACtD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;IACjD,iBAAiB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC5D,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;CACxC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,kCAAkC,GAA6B;IAC1E,iBAAiB,EAAE,IAAI,EAAE,0DAA0D;IACnF,aAAa,EAAE,GAAG;IAClB,iBAAiB,EAAE,EAAE;IACrB,YAAY,EAAE,IAAI;CACnB,CAAC;AAsBF,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5D,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC3D,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5E,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAC5C,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;CAC9D,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gCAAgC,GAA2B;IACtE,gBAAgB,EAAE,CAAC,EAAE,OAAO;IAC5B,cAAc,EAAE,EAAE,EAAE,QAAQ;IAC5B,UAAU,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,wBAAwB;IACrD,iBAAiB,EAAE,IAAI;IACvB,oBAAoB,EAAE,EAAE;CACzB,CAAC;AAkBF,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;IAC7C,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC3C,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;CAC7B,CAAC,CAAC;AAwBH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACrD,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACtD,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAC9D,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACvC,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACrC,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CAC7C,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,8BAA8B,GAAyB;IAClE,aAAa,EAAE,CAAC;IAChB,oBAAoB,EAAE,CAAC;IACvB,mBAAmB,EAAE,IAAI;IACzB,YAAY,EAAE,IAAI;IAClB,UAAU,EAAE,IAAI;IAChB,gBAAgB,EAAE,KAAK;CACxB,CAAC;AAoBF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;IAClD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE;IAC9B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE;IAChC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC3C,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;CAC7B,CAAC,CAAC;AAwCH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;IAC1B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,QAAQ,EAAE,iBAAiB,CAAC,QAAQ,EAAE;IACtC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACxC,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC3C,CAAC,CAAC;AA8BH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE;IAC5B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACjD,QAAQ,EAAE,qBAAqB,CAAC,QAAQ,EAAE;IAC1C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC;IACpC,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACrC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE;IACpC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC7B,CAAC,CAAC;AAkBH,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,MAAM,CAAC;IACtD,KAAK,EAAE,mBAAmB;IAC1B,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC;IAC/C,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC;IACjC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE;IACzC,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;CAC5B,CAAC,CAAC;AA+DH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IAC1B,OAAO,EAAE,aAAa;IACtB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,cAAc,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;IACjE,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;IAC1B,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;IAC1B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE;IAC5B,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC7C,CAAC,CAAC"}

package/dist/security/api-keys/cache.d.ts

@@ -0,0 +1,255 @@
+/**
+ * API Key Metadata Cache
+ *
+ * High-performance caching layer for API key validation to eliminate
+ * database lookups on every request. Provides:
+ * - In-memory LRU cache (max 10,000 entries)
+ * - Redis backing for distributed deployments
+ * - Short TTL (30 seconds) to catch revocations quickly
+ * - Redis pub/sub for cross-instance cache invalidation
+ *
+ * Expected performance improvement: 10-30ms -> 1-2ms for cached lookups.
+ *
+ * @packageDocumentation
+ */
+import type { ApiKey, ApiKeyScope, ApiKeyStatus, ApiKeyRateLimit } from './types.js';
+/**
+ * Cached API key metadata structure
+ *
+ * Contains only the fields needed for validation, reducing memory footprint.
+ */
+export interface CachedApiKeyMetadata {
+    /** Key ID */
+    id: string;
+    /** Key hash (for validation) */
+    keyHash: string;
+    /** API key prefix (first 8 chars) - used as cache key */
+    prefix: string;
+    /** Tenant ID */
+    tenantId: string;
+    /** Granted scopes */
+    scopes: ApiKeyScope[];
+    /** Expiration timestamp (null = never expires) */
+    expiresAt: number | null;
+    /** Rate limit configuration */
+    rateLimit: ApiKeyRateLimit;
+    /** Key status (active/revoked/expired) */
+    status: ApiKeyStatus;
+    /** IP whitelist (if set) */
+    allowedIps?: string[];
+    /** When this cache entry was created */
+    cachedAt: number;
+    /** When this cache entry expires */
+    expiresAtCache: number;
+}
+/**
+ * Cache invalidation event published via Redis pub/sub
+ */
+export interface CacheInvalidationEvent {
+    /** Type of invalidation */
+    type: 'revoke' | 'update' | 'expire' | 'delete';
+    /** API key prefix to invalidate */
+    prefix: string;
+    /** API key ID */
+    keyId: string;
+    /** Tenant ID */
+    tenantId: string;
+    /** Timestamp of the event */
+    timestamp: number;
+    /** Source instance ID */
+    sourceInstance: string;
+    /** Optional reason for invalidation */
+    reason?: string;
+}
+/**
+ * Cache statistics for monitoring
+ */
+export interface CacheStats {
+    /** Number of entries in local cache */
+    localCacheSize: number;
+    /** Number of cache hits */
+    hits: number;
+    /** Number of cache misses */
+    misses: number;
+    /** Hit rate percentage */
+    hitRate: number;
+    /** Number of invalidations received */
+    invalidationsReceived: number;
+    /** Number of invalidations published */
+    invalidationsPublished: number;
+    /** Whether Redis subscriber is connected */
+    redisSubscribed: boolean;
+    /** Instance ID */
+    instanceId: string;
+}
+/**
+ * API Key Metadata Cache
+ *
+ * Implements a two-tier caching strategy:
+ * 1. Local LRU cache for fastest access (< 0.1ms)
+ * 2. Redis cache for distributed deployments (< 1-2ms)
+ *
+ * Cache invalidation is propagated across instances via Redis pub/sub.
+ */
+export declare class ApiKeyMetadataCache {
+    /** Local LRU cache map */
+    private cache;
+    /** Head of LRU list (most recently used) */
+    private head;
+    /** Tail of LRU list (least recently used) */
+    private tail;
+    /** Redis client for distributed caching */
+    private redis;
+    /** Redis subscriber for invalidation events */
+    private subscriber;
+    /** Whether Redis subscriber is connected */
+    private isSubscribed;
+    /** Unique instance ID for pub/sub filtering */
+    private readonly instanceId;
+    /** Cleanup interval handle */
+    private cleanupInterval;
+    /** Cache statistics */
+    private stats;
+    constructor();
+    /**
+     * Get cached API key metadata by prefix
+     *
+     * Checks local cache first, then Redis if not found locally.
+     * This is the primary lookup path for API key validation.
+     *
+     * @param prefix - API key prefix (first 8 characters)
+     * @returns Cached metadata or null if not found/expired
+     */
+    get(prefix: string): Promise<CachedApiKeyMetadata | null>;
+    /**
+     * Store API key metadata in cache
+     *
+     * Stores in both local LRU cache and Redis for distributed access.
+     *
+     * @param apiKey - Full API key record to cache
+     */
+    set(apiKey: ApiKey): Promise<void>;
+    /**
+     * Invalidate cached API key metadata
+     *
+     * Removes from local cache and Redis, and publishes invalidation
+     * event to other instances.
+     *
+     * @param prefix - API key prefix to invalidate
+     * @param keyId - API key ID
+     * @param tenantId - Tenant ID
+     * @param type - Type of invalidation
+     * @param reason - Optional reason for invalidation
+     */
+    invalidate(prefix: string, keyId: string, tenantId: string, type: CacheInvalidationEvent['type'], reason?: string): Promise<void>;
+    /**
+     * Bulk invalidate all cached entries for a tenant
+     *
+     * @param tenantId - Tenant ID to invalidate
+     * @param reason - Reason for invalidation
+     */
+    invalidateTenant(tenantId: string, reason?: string): Promise<number>;
+    /**
+     * Get from local LRU cache
+     */
+    private getFromLocal;
+    /**
+     * Set in local LRU cache
+     */
+    private setLocal;
+    /**
+     * Remove from local LRU cache
+     */
+    private removeFromLocal;
+    /**
+     * Move node to front of LRU list
+     */
+    private moveToFront;
+    /**
+     * Evict least recently used entry
+     */
+    private evictLRU;
+    /**
+     * Get Redis client, initializing if needed
+     */
+    private getRedis;
+    /**
+     * Generate Redis key for cached metadata
+     */
+    private redisKey;
+    /**
+     * Get from Redis cache
+     */
+    private getFromRedis;
+    /**
+     * Set in Redis cache
+     */
+    private setInRedis;
+    /**
+     * Remove from Redis cache
+     */
+    private removeFromRedis;
+    /**
+     * Subscribe to cache invalidation events from other instances
+     */
+    private subscribeToInvalidations;
+    /**
+     * Handle incoming invalidation event from another instance
+     */
+    private handleInvalidationEvent;
+    /**
+     * Publish cache invalidation event to other instances
+     */
+    private publishInvalidation;
+    /**
+     * Convert full API key to cached metadata
+     */
+    private apiKeyToMetadata;
+    /**
+     * Serialize metadata for Redis storage
+     */
+    private serializeMetadata;
+    /**
+     * Deserialize metadata from Redis storage
+     */
+    private deserializeMetadata;
+    /**
+     * Start periodic cleanup of expired entries
+     */
+    private startCleanupInterval;
+    /**
+     * Stop the cache and cleanup resources
+     */
+    stop(): Promise<void>;
+    /**
+     * Clear all cached entries (for testing)
+     */
+    clear(): Promise<void>;
+    /**
+     * Get cache statistics
+     */
+    getStats(): CacheStats;
+    /**
+     * Check cache health including Redis connectivity
+     */
+    checkHealth(): Promise<{
+        healthy: boolean;
+        localCacheSize: number;
+        redisHealthy: boolean;
+        latencyMs?: number;
+        error?: string;
+    }>;
+}
+/**
+ * Get the API key metadata cache singleton
+ */
+export declare function getApiKeyMetadataCache(): ApiKeyMetadataCache;
+/**
+ * Create a new API key metadata cache instance (for testing)
+ */
+export declare function createApiKeyMetadataCache(): ApiKeyMetadataCache;
+/**
+ * Reset the API key metadata cache singleton (for testing)
+ */
+export declare function resetApiKeyMetadataCache(): Promise<void>;
+//# sourceMappingURL=cache.d.ts.map

package/dist/security/api-keys/cache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache.d.ts","sourceRoot":"","sources":["../../../src/security/api-keys/cache.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAKH,OAAO,KAAK,EACV,MAAM,EACN,WAAW,EACX,YAAY,EACZ,eAAe,EAChB,MAAM,YAAY,CAAC;AA2BpB;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,aAAa;IACb,EAAE,EAAE,MAAM,CAAC;IACX,gCAAgC;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,yDAAyD;IACzD,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,qBAAqB;IACrB,MAAM,EAAE,WAAW,EAAE,CAAC;IACtB,kDAAkD;IAClD,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,+BAA+B;IAC/B,SAAS,EAAE,eAAe,CAAC;IAC3B,0CAA0C;IAC1C,MAAM,EAAE,YAAY,CAAC;IACrB,4BAA4B;IAC5B,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,wCAAwC;IACxC,QAAQ,EAAE,MAAM,CAAC;IACjB,oCAAoC;IACpC,cAAc,EAAE,MAAM,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,2BAA2B;IAC3B,IAAI,EAAE,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAC;IAChD,mCAAmC;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,iBAAiB;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,gBAAgB;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,6BAA6B;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,yBAAyB;IACzB,cAAc,EAAE,MAAM,CAAC;IACvB,uCAAuC;IACvC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,uCAAuC;IACvC,cAAc,EAAE,MAAM,CAAC;IACvB,2BAA2B;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,6BAA6B;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,0BAA0B;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,uCAAuC;IACvC,qBAAqB,EAAE,MAAM,CAAC;IAC9B,wCAAwC;IACxC,sBAAsB,EAAE,MAAM,CAAC;IAC/B,4CAA4C;IAC5C,eAAe,EAAE,OAAO,CAAC;IACzB,kBAAkB;IAClB,UAAU,EAAE,MAAM,CAAC;CACpB;AAqBD;;;;;;;;GAQG;AACH,qBAAa,mBAAmB;IAC9B,0BAA0B;IAC1B,OAAO,CAAC,KAAK,CAAmC;IAEhD,4CAA4C;IAC5C,OAAO,CAAC,IAAI,CAAwB;IAEpC,6CAA6C;IAC7C,OAAO,CAAC,IAAI,CAAwB;IAEpC,2CAA2C;IAC3C,OAAO,CAAC,KAAK,CAAsB;IAEnC,+CAA+C;IAC/C,OAAO,CAAC,UAAU,CAAsB;IAExC,4CAA4C;IAC5C,OAAO,CAAC,YAAY,CAAkB;IAEtC,+CAA+C;IAC/C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IAEpC,8BAA8B;IAC9B,OAAO,CAAC,eAAe,CAA+B;IAEtD,uBAAuB;IACvB,OAAO,CAAC,KAAK,CAKX;;IAYF;;;;;;;;OAQG;IACG,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC;IAqB/D;;;;;;OAMG;IACG,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAexC;;;;;;;;;;;OAWG;IACG,UAAU,CACd,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,sBAAsB,CAAC,MAAM,CAAC,EACpC,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,IAAI,CAAC;IAwBhB;;;;;OAKG;IACG,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAmC1E;;OAEG;IACH,OAAO,CAAC,YAAY;IAkBpB;;OAEG;IACH,OAAO,CAAC,QAAQ;IAsChB;;OAEG;IACH,OAAO,CAAC,eAAe;IAsBvB;;OAEG;IACH,OAAO,CAAC,WAAW;IA0BnB;;OAEG;IACH,OAAO,CAAC,QAAQ;IAehB;;OAEG;YACW,QAAQ;IAQtB;;OAEG;IACH,OAAO,CAAC,QAAQ;IAIhB;;OAEG;YACW,YAAY;IAwB1B;;OAEG;YACW,UAAU;IAexB;;OAEG;YACW,eAAe;IAa7B;;OAEG;YACW,wBAAwB;IAwBtC;;OAEG;IACH,OAAO,CAAC,uBAAuB;IAqC/B;;OAEG;YACW,mBAAmB;IAcjC;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAiBxB;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAUzB;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAoB3B;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAsB5B;;OAEG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAoB3B;;OAEG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAe5B;;OAEG;IACH,QAAQ,IAAI,UAAU;IActB;;OAEG;IACG,WAAW,IAAI,OAAO,CAAC;QAC3B,OAAO,EAAE,OAAO,CAAC;QACjB,cAAc,EAAE,MAAM,CAAC;QACvB,YAAY,EAAE,OAAO,CAAC;QACtB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;CAYH;AAQD;;GAEG;AACH,wBAAgB,sBAAsB,IAAI,mBAAmB,CAM5D;AAED;;GAEG;AACH,wBAAgB,yBAAyB,IAAI,mBAAmB,CAE/D;AAED;;GAEG;AACH,wBAAsB,wBAAwB,IAAI,OAAO,CAAC,IAAI,CAAC,CAM9D"}