@vorionsys/platform-core 0.1.0

package/dist/api/validation.js

@@ -0,0 +1,247 @@
+/**
+ * API Input Validation
+ *
+ * Provides Zod-based validation middleware for Fastify routes.
+ * Integrates with the validation utilities from common/validation.ts.
+ *
+ * @packageDocumentation
+ */
+import { z } from 'zod';
+import { createLogger } from '../common/logger.js';
+import { sanitizeObject, checkInjectionPatterns, validatePayloadSize, ValidationError, schemas as commonSchemas, } from '../common/validation.js';
+const logger = createLogger({ component: 'validation' });
+const DEFAULT_OPTIONS = {
+    maxPayloadSize: 1048576, // 1MB
+    checkInjection: true,
+    sanitize: true,
+    stripUnknown: true,
+};
+/**
+ * Create validation middleware for request body
+ */
+export function validateBody(schema, options = {}) {
+    const opts = { ...DEFAULT_OPTIONS, ...options };
+    return async (request, reply) => {
+        try {
+            const body = request.body;
+            // Check payload size
+            if (opts.maxPayloadSize) {
+                validatePayloadSize(body, opts.maxPayloadSize);
+            }
+            // Sanitize if enabled
+            let sanitized = body;
+            if (opts.sanitize && typeof body === 'object' && body !== null) {
+                sanitized = sanitizeObject(body);
+            }
+            // Check for injection patterns
+            if (opts.checkInjection) {
+                checkObjectForInjection(sanitized);
+            }
+            // Validate with schema
+            const result = schema.safeParse(sanitized);
+            if (!result.success) {
+                const errors = formatZodErrors(result.error);
+                logger.warn({ errors, path: request.url }, 'Request validation failed');
+                reply.status(422).send({
+                    error: {
+                        code: 'VALIDATION_ERROR',
+                        message: 'Request validation failed',
+                        details: errors,
+                    },
+                });
+                return;
+            }
+            // Replace body with validated/sanitized version
+            request.body = result.data;
+        }
+        catch (error) {
+            if (error instanceof ValidationError) {
+                reply.status(400).send({
+                    error: {
+                        code: error.code,
+                        message: error.message,
+                        field: error.field,
+                    },
+                });
+                return;
+            }
+            throw error;
+        }
+    };
+}
+/**
+ * Create validation middleware for query parameters
+ */
+export function validateQuery(schema) {
+    return async (request, reply) => {
+        const result = schema.safeParse(request.query);
+        if (!result.success) {
+            const errors = formatZodErrors(result.error);
+            reply.status(400).send({
+                error: {
+                    code: 'INVALID_QUERY',
+                    message: 'Invalid query parameters',
+                    details: errors,
+                },
+            });
+            return;
+        }
+        // Replace query with validated version
+        request.query = result.data;
+    };
+}
+/**
+ * Create validation middleware for route parameters
+ */
+export function validateParams(schema) {
+    return async (request, reply) => {
+        const result = schema.safeParse(request.params);
+        if (!result.success) {
+            const errors = formatZodErrors(result.error);
+            reply.status(400).send({
+                error: {
+                    code: 'INVALID_PARAMS',
+                    message: 'Invalid route parameters',
+                    details: errors,
+                },
+            });
+            return;
+        }
+        // Replace params with validated version
+        request.params = result.data;
+    };
+}
+/**
+ * Format Zod errors into a user-friendly structure
+ */
+function formatZodErrors(error) {
+    return error.errors.map((err) => ({
+        path: err.path.join('.'),
+        message: err.message,
+        code: err.code,
+    }));
+}
+/**
+ * Recursively check object for injection patterns
+ */
+function checkObjectForInjection(obj, path = '') {
+    for (const [key, value] of Object.entries(obj)) {
+        const fieldPath = path ? `${path}.${key}` : key;
+        if (typeof value === 'string' && checkInjectionPatterns(value)) {
+            throw new ValidationError(`Potentially dangerous pattern detected in ${fieldPath}`, 'INJECTION_DETECTED', fieldPath);
+        }
+        if (Array.isArray(value)) {
+            value.forEach((item, index) => {
+                if (typeof item === 'string' && checkInjectionPatterns(item)) {
+                    throw new ValidationError(`Potentially dangerous pattern detected in ${fieldPath}[${index}]`, 'INJECTION_DETECTED', `${fieldPath}[${index}]`);
+                }
+                if (typeof item === 'object' && item !== null) {
+                    checkObjectForInjection(item, `${fieldPath}[${index}]`);
+                }
+            });
+        }
+        if (typeof value === 'object' && value !== null && !Array.isArray(value)) {
+            checkObjectForInjection(value, fieldPath);
+        }
+    }
+}
+// ============================================================
+// API-specific schemas
+// ============================================================
+/**
+ * Escalation schemas
+ */
+export const escalationSchemas = {
+    create: z.object({
+        intentId: commonSchemas.uuid,
+        entityId: commonSchemas.uuid,
+        reason: z.string().min(1).max(1000),
+        priority: z.enum(['low', 'medium', 'high', 'critical']).optional(),
+        escalatedTo: z.string().min(1).max(100),
+        context: z.record(z.unknown()).optional(),
+        requestedAction: z.string().max(500).optional(),
+        timeoutMinutes: z.number().int().min(1).max(10080).optional(), // max 1 week
+    }),
+    resolve: z.object({
+        resolution: z.enum(['approved', 'rejected']),
+        notes: z.string().max(2000).optional(),
+    }),
+    cancel: z.object({
+        reason: z.string().max(1000).optional(),
+    }),
+    query: z.object({
+        status: z.enum(['pending', 'approved', 'rejected', 'timeout', 'cancelled']).optional(),
+        intentId: commonSchemas.uuid.optional(),
+        entityId: commonSchemas.uuid.optional(),
+        escalatedTo: z.string().max(100).optional(),
+        limit: z.coerce.number().int().min(1).max(1000).optional(),
+        offset: z.coerce.number().int().min(0).optional(),
+    }),
+    idParam: z.object({
+        id: commonSchemas.uuid,
+    }),
+};
+/**
+ * Intent schemas
+ */
+export const intentSchemas = {
+    submit: z.object({
+        entityId: commonSchemas.uuid,
+        goal: z.string().min(1).max(10000),
+        context: z.record(z.unknown()),
+        metadata: z.record(z.unknown()).optional(),
+        priority: z.number().int().min(-100).max(100).optional(),
+    }),
+    query: z.object({
+        entityId: commonSchemas.uuid.optional(),
+        status: z.enum([
+            'pending', 'evaluating', 'approved', 'denied',
+            'escalated', 'executing', 'completed', 'failed'
+        ]).optional(),
+        limit: z.coerce.number().int().min(1).max(1000).optional(),
+        offset: z.coerce.number().int().min(0).optional(),
+    }),
+    idParam: z.object({
+        id: commonSchemas.uuid,
+    }),
+};
+/**
+ * Trust schemas
+ */
+export const trustSchemas = {
+    signal: z.object({
+        entityId: commonSchemas.uuid,
+        type: z.string().min(1).max(100).regex(/^[a-z]+\.[a-z_]+$/),
+        value: z.number().min(0).max(1),
+        weight: z.number().min(0).max(10).optional(),
+        source: z.string().max(100).optional(),
+        metadata: z.record(z.unknown()).optional(),
+    }),
+    entityIdParam: z.object({
+        entityId: commonSchemas.uuid,
+    }),
+};
+/**
+ * Proof schemas
+ */
+export const proofSchemas = {
+    query: z.object({
+        entityId: commonSchemas.uuid.optional(),
+        intentId: commonSchemas.uuid.optional(),
+        startDate: z.string().datetime().optional(),
+        endDate: z.string().datetime().optional(),
+        limit: z.coerce.number().int().min(1).max(1000).optional(),
+        offset: z.coerce.number().int().min(0).optional(),
+    }),
+    idParam: z.object({
+        id: commonSchemas.uuid,
+    }),
+};
+/**
+ * Common pagination schema
+ */
+export const paginationSchema = z.object({
+    limit: z.coerce.number().int().min(1).max(1000).default(100),
+    offset: z.coerce.number().int().min(0).default(0),
+});
+//# sourceMappingURL=validation.js.map

package/dist/api/validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../src/api/validation.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,CAAC,EAAuB,MAAM,KAAK,CAAC;AAC7C,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EACL,cAAc,EACd,sBAAsB,EACtB,mBAAmB,EACnB,eAAe,EACf,OAAO,IAAI,aAAa,GACzB,MAAM,yBAAyB,CAAC;AAEjC,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC,CAAC;AAgBzD,MAAM,eAAe,GAAsB;IACzC,cAAc,EAAE,OAAO,EAAE,MAAM;IAC/B,cAAc,EAAE,IAAI;IACpB,QAAQ,EAAE,IAAI;IACd,YAAY,EAAE,IAAI;CACnB,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,YAAY,CAC1B,MAAS,EACT,UAA6B,EAAE;IAE/B,MAAM,IAAI,GAAG,EAAE,GAAG,eAAe,EAAE,GAAG,OAAO,EAAE,CAAC;IAEhD,OAAO,KAAK,EAAE,OAAuB,EAAE,KAAmB,EAAiB,EAAE;QAC3E,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;YAE1B,qBAAqB;YACrB,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;gBACxB,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;YACjD,CAAC;YAED,sBAAsB;YACtB,IAAI,SAAS,GAAG,IAAI,CAAC;YACrB,IAAI,IAAI,CAAC,QAAQ,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBAC/D,SAAS,GAAG,cAAc,CAAC,IAA+B,CAAC,CAAC;YAC9D,CAAC;YAED,+BAA+B;YAC/B,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;gBACxB,uBAAuB,CAAC,SAAoC,CAAC,CAAC;YAChE,CAAC;YAED,uBAAuB;YACvB,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YAE3C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAE7C,MAAM,CAAC,IAAI,CACT,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,EAAE,EAC7B,2BAA2B,CAC5B,CAAC;gBAEF,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACrB,KAAK,EAAE;wBACL,IAAI,EAAE,kBAAkB;wBACxB,OAAO,EAAE,2BAA2B;wBACpC,OAAO,EAAE,MAAM;qBAChB;iBACF,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,gDAAgD;YAC/C,OAAgC,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QACvD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,eAAe,EAAE,CAAC;gBACrC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACrB,KAAK,EAAE;wBACL,IAAI,EAAE,KAAK,CAAC,IAAI;wBAChB,OAAO,EAAE,KAAK,CAAC,OAAO;wBACtB,KAAK,EAAE,KAAK,CAAC,KAAK;qBACnB;iBACF,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAC3B,MAAS;IAET,OAAO,KAAK,EAAE,OAAuB,EAAE,KAAmB,EAAiB,EAAE;QAC3E,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAE/C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAE7C,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACrB,KAAK,EAAE;oBACL,IAAI,EAAE,eAAe;oBACrB,OAAO,EAAE,0BAA0B;oBACnC,OAAO,EAAE,MAAM;iBAChB;aACF,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,uCAAuC;QACtC,OAAiC,CAAC,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC;IACzD,CAAC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAC5B,MAAS;IAET,OAAO,KAAK,EAAE,OAAuB,EAAE,KAAmB,EAAiB,EAAE;QAC3E,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAEhD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAE7C,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACrB,KAAK,EAAE;oBACL,IAAI,EAAE,gBAAgB;oBACtB,OAAO,EAAE,0BAA0B;oBACnC,OAAO,EAAE,MAAM;iBAChB;aACF,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,wCAAwC;QACvC,OAAkC,CAAC,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC;IAC3D,CAAC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,eAAe,CAAC,KAAe;IAKtC,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAChC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;QACxB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,IAAI,EAAE,GAAG,CAAC,IAAI;KACf,CAAC,CAAC,CAAC;AACN,CAAC;AAED;;GAEG;AACH,SAAS,uBAAuB,CAAC,GAA4B,EAAE,IAAI,GAAG,EAAE;IACtE,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,MAAM,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;QAEhD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,sBAAsB,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/D,MAAM,IAAI,eAAe,CACvB,6CAA6C,SAAS,EAAE,EACxD,oBAAoB,EACpB,SAAS,CACV,CAAC;QACJ,CAAC;QAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;gBAC5B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,sBAAsB,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC7D,MAAM,IAAI,eAAe,CACvB,6CAA6C,SAAS,IAAI,KAAK,GAAG,EAClE,oBAAoB,EACpB,GAAG,SAAS,IAAI,KAAK,GAAG,CACzB,CAAC;gBACJ,CAAC;gBACD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBAC9C,uBAAuB,CAAC,IAA+B,EAAE,GAAG,SAAS,IAAI,KAAK,GAAG,CAAC,CAAC;gBACrF,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzE,uBAAuB,CAAC,KAAgC,EAAE,SAAS,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;AACH,CAAC;AAED,+DAA+D;AAC/D,uBAAuB;AACvB,+DAA+D;AAE/D;;GAEG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,QAAQ,EAAE,aAAa,CAAC,IAAI;QAC5B,QAAQ,EAAE,aAAa,CAAC,IAAI;QAC5B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;QACnC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE;QAClE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;QACvC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;QACzC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;QAC/C,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,EAAE,aAAa;KAC7E,CAAC;IAEF,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;QAC5C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;KACvC,CAAC;IAEF,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;KACxC,CAAC;IAEF,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC;QACd,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC,QAAQ,EAAE;QACtF,QAAQ,EAAE,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE;QACvC,QAAQ,EAAE,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE;QACvC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;QAC3C,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;QAC1D,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;KAClD,CAAC;IAEF,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,EAAE,EAAE,aAAa,CAAC,IAAI;KACvB,CAAC;CACH,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,QAAQ,EAAE,aAAa,CAAC,IAAI;QAC5B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;QAClC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QAC9B,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;QAC1C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;KACzD,CAAC;IAEF,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC;QACd,QAAQ,EAAE,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE;QACvC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC;YACb,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,QAAQ;YAC7C,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,QAAQ;SAChD,CAAC,CAAC,QAAQ,EAAE;QACb,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;QAC1D,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;KAClD,CAAC;IAEF,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,EAAE,EAAE,aAAa,CAAC,IAAI;KACvB,CAAC;CACH,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,QAAQ,EAAE,aAAa,CAAC,IAAI;QAC5B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC;QAC3D,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;QAC5C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;QACtC,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;KAC3C,CAAC;IAEF,aAAa,EAAE,CAAC,CAAC,MAAM,CAAC;QACtB,QAAQ,EAAE,aAAa,CAAC,IAAI;KAC7B,CAAC;CACH,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC;QACd,QAAQ,EAAE,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE;QACvC,QAAQ,EAAE,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE;QACvC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;QAC3C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;QACzC,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;QAC1D,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;KAClD,CAAC;IAEF,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,EAAE,EAAE,aAAa,CAAC,IAAI;KACvB,CAAC;CACH,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;IAC5D,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;CAClD,CAAC,CAAC"}

package/dist/audit/compliance-reporter.d.ts

@@ -0,0 +1,271 @@
+/**
+ * Compliance Reporter
+ *
+ * Generates audit reports for SOC 2 controls and compliance requirements.
+ * Supports export in JSON and CSV formats for auditors.
+ *
+ * @packageDocumentation
+ */
+import type { ID, Timestamp } from '../common/types.js';
+import { AuditService } from './service.js';
+import { type SecurityEventCategory, type SecuritySeverity } from './security-events.js';
+/**
+ * SOC 2 Control mapping
+ */
+export interface Soc2Control {
+    /** Control ID (e.g., CC6.1) */
+    id: string;
+    /** Control name */
+    name: string;
+    /** Control description */
+    description: string;
+    /** Trust Services Category */
+    category: 'security' | 'availability' | 'processing_integrity' | 'confidentiality' | 'privacy';
+    /** Related event types */
+    eventTypes: string[];
+}
+/**
+ * SOC 2 Controls mapping
+ */
+export declare const SOC2_CONTROLS: Record<string, Soc2Control>;
+/**
+ * Report filter options
+ */
+export interface ReportFilters {
+    /** Start time for the report period */
+    startTime: Timestamp;
+    /** End time for the report period */
+    endTime: Timestamp;
+    /** Tenant ID to filter by */
+    tenantId: ID;
+    /** Filter by specific event types */
+    eventTypes?: string[];
+    /** Filter by event categories */
+    categories?: SecurityEventCategory[];
+    /** Filter by severities */
+    severities?: SecuritySeverity[];
+    /** Filter by SOC 2 control IDs */
+    soc2Controls?: string[];
+    /** Filter by actor IDs */
+    actorIds?: string[];
+    /** Filter by outcome */
+    outcomes?: ('success' | 'failure' | 'blocked' | 'escalated')[];
+}
+/**
+ * Report summary statistics
+ */
+export interface ReportSummary {
+    /** Total number of events in the report */
+    totalEvents: number;
+    /** Events by category */
+    byCategory: Record<string, number>;
+    /** Events by severity */
+    bySeverity: Record<string, number>;
+    /** Events by outcome */
+    byOutcome: Record<string, number>;
+    /** Events by SOC 2 control */
+    bySoc2Control: Record<string, number>;
+    /** Events by event type (top 20) */
+    topEventTypes: Array<{
+        type: string;
+        count: number;
+    }>;
+    /** Unique actors */
+    uniqueActors: number;
+    /** Report time range */
+    timeRange: {
+        start: Timestamp;
+        end: Timestamp;
+        durationHours: number;
+    };
+}
+/**
+ * Compliance report
+ */
+export interface ComplianceReport {
+    /** Report metadata */
+    metadata: {
+        /** Report ID */
+        id: string;
+        /** Report generation timestamp */
+        generatedAt: Timestamp;
+        /** Report version */
+        version: string;
+        /** Filters applied */
+        filters: ReportFilters;
+        /** Generator information */
+        generator: string;
+    };
+    /** Report summary */
+    summary: ReportSummary;
+    /** SOC 2 control coverage */
+    soc2Coverage: Soc2ControlCoverage[];
+    /** Detailed events (if includeEvents is true) */
+    events?: AuditEventRecord[];
+}
+/**
+ * SOC 2 control coverage in report
+ */
+export interface Soc2ControlCoverage {
+    /** Control definition */
+    control: Soc2Control;
+    /** Number of events for this control */
+    eventCount: number;
+    /** Breakdown by outcome */
+    byOutcome: Record<string, number>;
+    /** Breakdown by severity */
+    bySeverity: Record<string, number>;
+    /** Sample events (first 5) */
+    sampleEvents: AuditEventRecord[];
+    /** Assessment */
+    assessment: {
+        /** Whether control has adequate logging */
+        adequateCoverage: boolean;
+        /** Coverage percentage (based on expected event types) */
+        coveragePercent: number;
+        /** Missing event types */
+        missingEventTypes: string[];
+        /** Recommendations */
+        recommendations: string[];
+    };
+}
+/**
+ * Simplified audit event for reports
+ */
+export interface AuditEventRecord {
+    /** Event ID */
+    id: string;
+    /** Event timestamp */
+    timestamp: Timestamp;
+    /** Event type */
+    eventType: string;
+    /** Event category */
+    category: string;
+    /** Event severity */
+    severity: string;
+    /** Actor ID */
+    actorId: string;
+    /** Actor type */
+    actorType: string;
+    /** Resource type */
+    resourceType: string;
+    /** Resource ID */
+    resourceId: string;
+    /** Action performed */
+    action: string;
+    /** Outcome */
+    outcome: string;
+    /** Reason (if failure) */
+    reason?: string;
+    /** Request ID */
+    requestId: string;
+    /** SOC 2 control */
+    soc2Control?: string;
+}
+/**
+ * Export format
+ */
+export type ExportFormat = 'json' | 'csv';
+/**
+ * Report generation options
+ */
+export interface ReportOptions {
+    /** Include individual events in report (default: false for summary only) */
+    includeEvents?: boolean;
+    /** Maximum events to include (default: 10000) */
+    maxEvents?: number;
+    /** Export format (default: json) */
+    format?: ExportFormat;
+    /** Include SOC 2 control assessment (default: true) */
+    includeSoc2Assessment?: boolean;
+}
+/**
+ * Compliance Reporter
+ *
+ * Generates audit reports for SOC 2 controls and compliance requirements.
+ */
+export declare class ComplianceReporter {
+    private auditService;
+    constructor(auditService?: AuditService);
+    /**
+     * Generate a compliance report
+     */
+    generateReport(filters: ReportFilters, options?: ReportOptions): Promise<ComplianceReport>;
+    /**
+     * Export report to specified format
+     */
+    exportReport(report: ComplianceReport, format: ExportFormat): Promise<string>;
+    /**
+     * Generate report for specific SOC 2 control
+     */
+    generateSoc2ControlReport(controlId: string, filters: Omit<ReportFilters, 'soc2Controls'>, options?: ReportOptions): Promise<ComplianceReport>;
+    /**
+     * Generate summary report for all SOC 2 controls
+     */
+    generateSoc2SummaryReport(tenantId: ID, startTime: Timestamp, endTime: Timestamp): Promise<{
+        controls: Array<{
+            control: Soc2Control;
+            eventCount: number;
+            failureCount: number;
+            coveragePercent: number;
+            status: 'compliant' | 'needs_attention' | 'non_compliant';
+        }>;
+        overallStatus: 'compliant' | 'needs_attention' | 'non_compliant';
+        recommendations: string[];
+    }>;
+    /**
+     * Get event counts by time period
+     */
+    getEventTimeline(tenantId: ID, startTime: Timestamp, endTime: Timestamp, intervalHours?: number): Promise<Array<{
+        periodStart: Timestamp;
+        periodEnd: Timestamp;
+        eventCount: number;
+        byCategory: Record<string, number>;
+        bySeverity: Record<string, number>;
+    }>>;
+    /**
+     * Apply additional filters in memory
+     */
+    private applyFilters;
+    /**
+     * Build report summary
+     */
+    private buildSummary;
+    /**
+     * Build SOC 2 coverage analysis
+     */
+    private buildSoc2Coverage;
+    /**
+     * Convert audit record to event record
+     */
+    private toEventRecord;
+    /**
+     * Convert report to CSV format
+     */
+    private toCsv;
+    /**
+     * Map security category to audit category
+     */
+    private mapCategory;
+    /**
+     * Map security severity to audit severity
+     */
+    private mapSeverity;
+    /**
+     * Map security outcome to audit outcome
+     */
+    private mapOutcome;
+}
+/**
+ * Create a compliance reporter instance
+ */
+export declare function createComplianceReporter(auditService?: AuditService): ComplianceReporter;
+/**
+ * Get all SOC 2 controls
+ */
+export declare function getSoc2Controls(): Soc2Control[];
+/**
+ * Get SOC 2 control by ID
+ */
+export declare function getSoc2Control(controlId: string): Soc2Control | undefined;
+//# sourceMappingURL=compliance-reporter.d.ts.map

package/dist/audit/compliance-reporter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compliance-reporter.d.ts","sourceRoot":"","sources":["../../src/audit/compliance-reporter.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,YAAY,EAAsB,MAAM,cAAc,CAAC;AAEhE,OAAO,EACL,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,EAKtB,MAAM,sBAAsB,CAAC;AAQ9B;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,+BAA+B;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,mBAAmB;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,0BAA0B;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,8BAA8B;IAC9B,QAAQ,EAAE,UAAU,GAAG,cAAc,GAAG,sBAAsB,GAAG,iBAAiB,GAAG,SAAS,CAAC;IAC/F,0BAA0B;IAC1B,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED;;GAEG;AACH,eAAO,MAAM,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAyErD,CAAC;AAEF;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,uCAAuC;IACvC,SAAS,EAAE,SAAS,CAAC;IACrB,qCAAqC;IACrC,OAAO,EAAE,SAAS,CAAC;IACnB,6BAA6B;IAC7B,QAAQ,EAAE,EAAE,CAAC;IACb,qCAAqC;IACrC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,iCAAiC;IACjC,UAAU,CAAC,EAAE,qBAAqB,EAAE,CAAC;IACrC,2BAA2B;IAC3B,UAAU,CAAC,EAAE,gBAAgB,EAAE,CAAC;IAChC,kCAAkC;IAClC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,0BAA0B;IAC1B,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,wBAAwB;IACxB,QAAQ,CAAC,EAAE,CAAC,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG,WAAW,CAAC,EAAE,CAAC;CAChE;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,2CAA2C;IAC3C,WAAW,EAAE,MAAM,CAAC;IACpB,yBAAyB;IACzB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,yBAAyB;IACzB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,wBAAwB;IACxB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC,8BAA8B;IAC9B,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,oCAAoC;IACpC,aAAa,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACtD,oBAAoB;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,wBAAwB;IACxB,SAAS,EAAE;QACT,KAAK,EAAE,SAAS,CAAC;QACjB,GAAG,EAAE,SAAS,CAAC;QACf,aAAa,EAAE,MAAM,CAAC;KACvB,CAAC;CACH;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,sBAAsB;IACtB,QAAQ,EAAE;QACR,gBAAgB;QAChB,EAAE,EAAE,MAAM,CAAC;QACX,kCAAkC;QAClC,WAAW,EAAE,SAAS,CAAC;QACvB,qBAAqB;QACrB,OAAO,EAAE,MAAM,CAAC;QAChB,sBAAsB;QACtB,OAAO,EAAE,aAAa,CAAC;QACvB,4BAA4B;QAC5B,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,qBAAqB;IACrB,OAAO,EAAE,aAAa,CAAC;IACvB,6BAA6B;IAC7B,YAAY,EAAE,mBAAmB,EAAE,CAAC;IACpC,iDAAiD;IACjD,MAAM,CAAC,EAAE,gBAAgB,EAAE,CAAC;CAC7B;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,yBAAyB;IACzB,OAAO,EAAE,WAAW,CAAC;IACrB,wCAAwC;IACxC,UAAU,EAAE,MAAM,CAAC;IACnB,2BAA2B;IAC3B,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC,4BAA4B;IAC5B,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,8BAA8B;IAC9B,YAAY,EAAE,gBAAgB,EAAE,CAAC;IACjC,iBAAiB;IACjB,UAAU,EAAE;QACV,2CAA2C;QAC3C,gBAAgB,EAAE,OAAO,CAAC;QAC1B,0DAA0D;QAC1D,eAAe,EAAE,MAAM,CAAC;QACxB,0BAA0B;QAC1B,iBAAiB,EAAE,MAAM,EAAE,CAAC;QAC5B,sBAAsB;QACtB,eAAe,EAAE,MAAM,EAAE,CAAC;KAC3B,CAAC;CACH;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,eAAe;IACf,EAAE,EAAE,MAAM,CAAC;IACX,sBAAsB;IACtB,SAAS,EAAE,SAAS,CAAC;IACrB,iBAAiB;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,qBAAqB;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,qBAAqB;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,oBAAoB;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,kBAAkB;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,uBAAuB;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,cAAc;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,0BAA0B;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iBAAiB;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,oBAAoB;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,KAAK,CAAC;AAE1C;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,4EAA4E;IAC5E,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,iDAAiD;IACjD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oCAAoC;IACpC,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,uDAAuD;IACvD,qBAAqB,CAAC,EAAE,OAAO,CAAC;CACjC;AAMD;;;;GAIG;AACH,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,YAAY,CAAe;gBAEvB,YAAY,CAAC,EAAE,YAAY;IAIvC;;OAEG;IACG,cAAc,CAClB,OAAO,EAAE,aAAa,EACtB,OAAO,GAAE,aAAkB,GAC1B,OAAO,CAAC,gBAAgB,CAAC;IAmF5B;;OAEG;IACG,YAAY,CAChB,MAAM,EAAE,gBAAgB,EACxB,MAAM,EAAE,YAAY,GACnB,OAAO,CAAC,MAAM,CAAC;IAWlB;;OAEG;IACG,yBAAyB,CAC7B,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,IAAI,CAAC,aAAa,EAAE,cAAc,CAAC,EAC5C,OAAO,GAAE,aAAkB,GAC1B,OAAO,CAAC,gBAAgB,CAAC;IAgB5B;;OAEG;IACG,yBAAyB,CAC7B,QAAQ,EAAE,EAAE,EACZ,SAAS,EAAE,SAAS,EACpB,OAAO,EAAE,SAAS,GACjB,OAAO,CAAC;QACT,QAAQ,EAAE,KAAK,CAAC;YACd,OAAO,EAAE,WAAW,CAAC;YACrB,UAAU,EAAE,MAAM,CAAC;YACnB,YAAY,EAAE,MAAM,CAAC;YACrB,eAAe,EAAE,MAAM,CAAC;YACxB,MAAM,EAAE,WAAW,GAAG,iBAAiB,GAAG,eAAe,CAAC;SAC3D,CAAC,CAAC;QACH,aAAa,EAAE,WAAW,GAAG,iBAAiB,GAAG,eAAe,CAAC;QACjE,eAAe,EAAE,MAAM,EAAE,CAAC;KAC3B,CAAC;IAuFF;;OAEG;IACG,gBAAgB,CACpB,QAAQ,EAAE,EAAE,EACZ,SAAS,EAAE,SAAS,EACpB,OAAO,EAAE,SAAS,EAClB,aAAa,GAAE,MAAW,GACzB,OAAO,CAAC,KAAK,CAAC;QACf,WAAW,EAAE,SAAS,CAAC;QACvB,SAAS,EAAE,SAAS,CAAC;QACrB,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACnC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;KACpC,CAAC,CAAC;IAsDH;;OAEG;IACH,OAAO,CAAC,YAAY;IA+CpB;;OAEG;IACH,OAAO,CAAC,YAAY;IAiDpB;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAoEzB;;OAEG;IACH,OAAO,CAAC,aAAa,CA0BnB;IAEF;;OAEG;IACH,OAAO,CAAC,KAAK;IAoFb;;OAEG;IACH,OAAO,CAAC,WAAW;IAWnB;;OAEG;IACH,OAAO,CAAC,WAAW;IAWnB;;OAEG;IACH,OAAO,CAAC,UAAU;CAKnB;AAMD;;GAEG;AACH,wBAAgB,wBAAwB,CAAC,YAAY,CAAC,EAAE,YAAY,GAAG,kBAAkB,CAExF;AAED;;GAEG;AACH,wBAAgB,eAAe,IAAI,WAAW,EAAE,CAE/C;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,CAEzE"}