@vorionsys/platform-core 0.1.0

package/dist/security/incident/actions/notify-stakeholders.js

@@ -0,0 +1,377 @@
+/**
+ * Stakeholder Notification Action
+ *
+ * Automated notification dispatch to relevant stakeholders during incidents.
+ * Supports multiple channels and escalation paths.
+ *
+ * @packageDocumentation
+ * @module security/incident/actions/notify-stakeholders
+ */
+import { createLogger } from '../../../common/logger.js';
+const logger = createLogger({ component: 'action-notify-stakeholders' });
+// ============================================================================
+// Default Mock Notification Service
+// ============================================================================
+class MockStakeholderNotificationService {
+    async sendSlack(channel, message) {
+        logger.info('Sending Slack message', { channel, subject: message.subject });
+        await this.simulateOperation(300);
+        return { success: true, messageId: `slack-${Date.now()}` };
+    }
+    async sendEmail(to, message) {
+        logger.info('Sending email', { to, subject: message.subject });
+        await this.simulateOperation(500);
+        return { success: true, messageId: `email-${Date.now()}` };
+    }
+    async sendPagerDuty(routingKey, message) {
+        logger.info('Sending PagerDuty alert', { routingKey, subject: message.subject });
+        await this.simulateOperation(400);
+        return { success: true, incidentId: `pd-${Date.now()}` };
+    }
+    async sendSms(phoneNumber, message) {
+        logger.info('Sending SMS', { phoneNumber: phoneNumber.slice(0, -4) + '****' });
+        await this.simulateOperation(600);
+        return { success: true, messageId: `sms-${Date.now()}` };
+    }
+    async sendTeams(webhookUrl, message) {
+        logger.info('Sending Teams message', { subject: message.subject });
+        await this.simulateOperation(350);
+        return { success: true, messageId: `teams-${Date.now()}` };
+    }
+    async getStakeholders(severity, incidentType) {
+        // Return mock stakeholders based on severity
+        const stakeholders = [
+            {
+                id: 'security-team',
+                name: 'Security Team',
+                role: 'security_team',
+                channels: [
+                    { channel: 'slack', address: '#security-incidents', priority: 1 },
+                    { channel: 'email', address: 'security@company.com', priority: 2 },
+                ],
+                severityThreshold: 'P4',
+            },
+        ];
+        if (severity === 'P1' || severity === 'P2') {
+            stakeholders.push({
+                id: 'incident-commander',
+                name: 'Incident Commander',
+                role: 'security_team',
+                channels: [
+                    { channel: 'pagerduty', address: 'security-oncall', priority: 1 },
+                    { channel: 'sms', address: '+1-555-0100', priority: 2 },
+                ],
+                severityThreshold: 'P2',
+            }, {
+                id: 'engineering-lead',
+                name: 'Engineering Lead',
+                role: 'engineering',
+                channels: [
+                    { channel: 'slack', address: '#engineering-oncall', priority: 1 },
+                    { channel: 'pagerduty', address: 'engineering-oncall', priority: 2 },
+                ],
+                severityThreshold: 'P2',
+            });
+        }
+        if (severity === 'P1') {
+            stakeholders.push({
+                id: 'ciso',
+                name: 'CISO',
+                role: 'executive',
+                channels: [
+                    { channel: 'sms', address: '+1-555-0101', priority: 1 },
+                    { channel: 'email', address: 'ciso@company.com', priority: 2 },
+                ],
+                severityThreshold: 'P1',
+            }, {
+                id: 'legal-team',
+                name: 'Legal Team',
+                role: 'legal',
+                channels: [
+                    { channel: 'email', address: 'legal@company.com', priority: 1 },
+                    { channel: 'slack', address: '#legal-security', priority: 2 },
+                ],
+                severityThreshold: 'P1',
+            }, {
+                id: 'cto',
+                name: 'CTO',
+                role: 'executive',
+                channels: [
+                    { channel: 'sms', address: '+1-555-0102', priority: 1 },
+                    { channel: 'email', address: 'cto@company.com', priority: 2 },
+                ],
+                severityThreshold: 'P1',
+            });
+            // Add DPO for data breach incidents
+            if (incidentType === 'data_breach') {
+                stakeholders.push({
+                    id: 'dpo',
+                    name: 'Data Protection Officer',
+                    role: 'dpo',
+                    channels: [
+                        { channel: 'email', address: 'dpo@company.com', priority: 1 },
+                        { channel: 'sms', address: '+1-555-0103', priority: 2 },
+                    ],
+                    severityThreshold: 'P1',
+                });
+            }
+        }
+        return stakeholders;
+    }
+    simulateOperation(ms) {
+        return new Promise((resolve) => setTimeout(resolve, ms));
+    }
+}
+// ============================================================================
+// Singleton Notification Service
+// ============================================================================
+let notificationService = new MockStakeholderNotificationService();
+export function setStakeholderNotificationService(service) {
+    notificationService = service;
+}
+export function getStakeholderNotificationService() {
+    return notificationService;
+}
+// ============================================================================
+// Action Implementation
+// ============================================================================
+async function executeNotification(context) {
+    const { incident, logger: actionLogger, setVariable, getVariable } = context;
+    const startTime = Date.now();
+    const notifications = [];
+    actionLogger.info('Starting stakeholder notification', {
+        incidentId: incident.id,
+        severity: incident.severity,
+        type: incident.type,
+    });
+    try {
+        // Get stakeholders based on severity and incident type
+        const stakeholders = await notificationService.getStakeholders(incident.severity, incident.type);
+        if (stakeholders.length === 0) {
+            actionLogger.warn('No stakeholders identified for notification');
+            return {
+                success: true,
+                output: { message: 'No stakeholders identified', notifications: [] },
+                metrics: { durationMs: Date.now() - startTime, itemsProcessed: 0 },
+                canRollback: false,
+            };
+        }
+        actionLogger.info('Identified stakeholders', {
+            count: stakeholders.length,
+            roles: Array.from(new Set(stakeholders.map((s) => s.role))),
+        });
+        // Build notification message
+        const template = buildNotificationTemplate(incident);
+        let successCount = 0;
+        let failureCount = 0;
+        // Notify each stakeholder via their preferred channels
+        for (const stakeholder of stakeholders) {
+            // Check severity threshold
+            if (!meetsSeqThreshold(incident.severity, stakeholder.severityThreshold)) {
+                actionLogger.debug('Stakeholder below severity threshold', {
+                    stakeholder: stakeholder.id,
+                    incidentSeverity: incident.severity,
+                    threshold: stakeholder.severityThreshold,
+                });
+                continue;
+            }
+            // Try channels in priority order
+            let notified = false;
+            for (const channelConfig of stakeholder.channels.sort((a, b) => a.priority - b.priority)) {
+                const notification = {
+                    stakeholder: stakeholder.id,
+                    role: stakeholder.role,
+                    channel: channelConfig.channel,
+                    status: 'pending',
+                };
+                try {
+                    const result = await sendNotification(channelConfig.channel, channelConfig.address, template, actionLogger);
+                    notification.status = result.success ? 'sent' : 'failed';
+                    notification.sentAt = new Date();
+                    notification.messageId = result.messageId;
+                    if (result.success) {
+                        notified = true;
+                        actionLogger.info('Notification sent', {
+                            stakeholder: stakeholder.id,
+                            channel: channelConfig.channel,
+                        });
+                        break; // Success, don't try fallback channels
+                    }
+                    else {
+                        notification.error = result.error;
+                        actionLogger.warn('Notification failed, trying fallback', {
+                            stakeholder: stakeholder.id,
+                            channel: channelConfig.channel,
+                            error: result.error,
+                        });
+                    }
+                }
+                catch (error) {
+                    notification.status = 'failed';
+                    notification.error = error instanceof Error ? error.message : String(error);
+                    actionLogger.error('Notification error', {
+                        stakeholder: stakeholder.id,
+                        channel: channelConfig.channel,
+                        error: notification.error,
+                    });
+                }
+                notifications.push(notification);
+            }
+            if (notified) {
+                successCount++;
+            }
+            else {
+                failureCount++;
+                actionLogger.error('Failed to notify stakeholder via any channel', {
+                    stakeholder: stakeholder.id,
+                });
+            }
+        }
+        // Store notifications for reference
+        setVariable('stakeholder_notifications', notifications);
+        const durationMs = Date.now() - startTime;
+        // Consider partial success as success (some notifications went through)
+        const success = successCount > 0;
+        actionLogger.info('Stakeholder notification completed', {
+            success,
+            successCount,
+            failureCount,
+            totalNotifications: notifications.length,
+            durationMs,
+        });
+        return {
+            success,
+            output: {
+                message: success
+                    ? `Notified ${successCount} stakeholder(s) successfully`
+                    : 'Failed to notify any stakeholders',
+                notifications,
+                successCount,
+                failureCount,
+                stakeholdersNotified: stakeholders
+                    .filter((s) => notifications.some((n) => n.stakeholder === s.id && n.status === 'sent'))
+                    .map((s) => s.name),
+            },
+            metrics: {
+                durationMs,
+                itemsProcessed: successCount,
+                itemsFailed: failureCount,
+            },
+            canRollback: false, // Notifications cannot be rolled back
+        };
+    }
+    catch (error) {
+        const errorMessage = error instanceof Error ? error.message : String(error);
+        actionLogger.error('Stakeholder notification failed', { error: errorMessage });
+        return {
+            success: false,
+            error: errorMessage,
+            metrics: { durationMs: Date.now() - startTime },
+            canRollback: false,
+        };
+    }
+}
+// ============================================================================
+// Helper Functions
+// ============================================================================
+function buildNotificationTemplate(incident) {
+    const severityEmoji = {
+        P1: '[CRITICAL]',
+        P2: '[HIGH]',
+        P3: '[MEDIUM]',
+        P4: '[LOW]',
+    };
+    const urgencyMap = {
+        P1: 'critical',
+        P2: 'high',
+        P3: 'normal',
+        P4: 'low',
+    };
+    const severity = incident.severity || 'P3';
+    const title = incident.title || 'Security Incident';
+    const description = incident.description || 'No description provided';
+    const id = incident.id || 'unknown';
+    const type = incident.type || 'unknown';
+    const status = incident.status || 'unknown';
+    const detectedAt = incident.detectedAt || new Date();
+    return {
+        subject: `${severityEmoji[severity]} Security Incident: ${title}`,
+        body: `
+Security Incident Alert
+=======================
+
+Incident ID: ${id}
+Severity: ${severity}
+Type: ${type}
+Status: ${status}
+Detected: ${detectedAt.toISOString()}
+
+Description:
+${description}
+
+Please review and take appropriate action.
+
+---
+This is an automated notification from the Incident Response System.
+    `.trim(),
+        urgency: urgencyMap[severity],
+    };
+}
+function meetsSeqThreshold(incidentSeverity, threshold) {
+    const severityOrder = {
+        P1: 1,
+        P2: 2,
+        P3: 3,
+        P4: 4,
+    };
+    // Lower number = higher severity
+    return severityOrder[incidentSeverity] <= severityOrder[threshold];
+}
+async function sendNotification(channel, address, template, actionLogger) {
+    switch (channel) {
+        case 'slack':
+            return notificationService.sendSlack(address, template);
+        case 'email':
+            return notificationService.sendEmail(address, template);
+        case 'pagerduty':
+            const pdResult = await notificationService.sendPagerDuty(address, template);
+            return { success: pdResult.success, messageId: pdResult.incidentId };
+        case 'sms':
+            // SMS uses abbreviated message
+            const smsMessage = `${template.subject}\n${template.body.slice(0, 140)}...`;
+            return notificationService.sendSms(address, smsMessage);
+        case 'teams':
+            return notificationService.sendTeams(address, template);
+        default:
+            actionLogger.warn('Unknown notification channel', { channel });
+            return { success: false, error: `Unknown channel: ${channel}` };
+    }
+}
+// ============================================================================
+// Action Definition Export
+// ============================================================================
+export const notifyStakeholdersAction = {
+    id: 'notify-stakeholders',
+    name: 'Notify Stakeholders',
+    description: 'Send automated notifications to relevant stakeholders based on incident severity and type',
+    category: 'notification',
+    riskLevel: 'low',
+    requiresApproval: false,
+    supportsRollback: false,
+    defaultTimeoutMs: 120000, // 2 minutes
+    maxRetries: 3,
+    execute: executeNotification,
+    validate: async (context) => {
+        const { incident } = context;
+        // Always valid - stakeholder list is determined dynamically
+        if (!incident.severity) {
+            return {
+                valid: false,
+                reason: 'Incident severity is required for stakeholder notification',
+            };
+        }
+        return { valid: true };
+    },
+};
+export default notifyStakeholdersAction;
+//# sourceMappingURL=notify-stakeholders.js.map

package/dist/security/incident/actions/notify-stakeholders.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notify-stakeholders.js","sourceRoot":"","sources":["../../../../src/security/incident/actions/notify-stakeholders.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AASzD,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,SAAS,EAAE,4BAA4B,EAAE,CAAC,CAAC;AA2DzE,+EAA+E;AAC/E,oCAAoC;AACpC,+EAA+E;AAE/E,MAAM,kCAAkC;IACtC,KAAK,CAAC,SAAS,CACb,OAAe,EACf,OAA6B;QAE7B,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5E,MAAM,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC;IAC7D,CAAC;IAED,KAAK,CAAC,SAAS,CACb,EAAU,EACV,OAA6B;QAE7B,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QAC/D,MAAM,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC;IAC7D,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,UAAkB,EAClB,OAA6B;QAE7B,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QACjF,MAAM,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,OAAO,CACX,WAAmB,EACnB,OAAe;QAEf,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,WAAW,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,MAAM,EAAE,CAAC,CAAC;QAC/E,MAAM,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,SAAS,CACb,UAAkB,EAClB,OAA6B;QAE7B,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QACnE,MAAM,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC;IAC7D,CAAC;IAED,KAAK,CAAC,eAAe,CACnB,QAA0B,EAC1B,YAAoB;QAEpB,6CAA6C;QAC7C,MAAM,YAAY,GAAwB;YACxC;gBACE,EAAE,EAAE,eAAe;gBACnB,IAAI,EAAE,eAAe;gBACrB,IAAI,EAAE,eAAe;gBACrB,QAAQ,EAAE;oBACR,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,qBAAqB,EAAE,QAAQ,EAAE,CAAC,EAAE;oBACjE,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,sBAAsB,EAAE,QAAQ,EAAE,CAAC,EAAE;iBACnE;gBACD,iBAAiB,EAAE,IAAI;aACxB;SACF,CAAC;QAEF,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YAC3C,YAAY,CAAC,IAAI,CACf;gBACE,EAAE,EAAE,oBAAoB;gBACxB,IAAI,EAAE,oBAAoB;gBAC1B,IAAI,EAAE,eAAe;gBACrB,QAAQ,EAAE;oBACR,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,CAAC,EAAE;oBACjE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC,EAAE;iBACxD;gBACD,iBAAiB,EAAE,IAAI;aACxB,EACD;gBACE,EAAE,EAAE,kBAAkB;gBACtB,IAAI,EAAE,kBAAkB;gBACxB,IAAI,EAAE,aAAa;gBACnB,QAAQ,EAAE;oBACR,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,qBAAqB,EAAE,QAAQ,EAAE,CAAC,EAAE;oBACjE,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,oBAAoB,EAAE,QAAQ,EAAE,CAAC,EAAE;iBACrE;gBACD,iBAAiB,EAAE,IAAI;aACxB,CACF,CAAC;QACJ,CAAC;QAED,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,YAAY,CAAC,IAAI,CACf;gBACE,EAAE,EAAE,MAAM;gBACV,IAAI,EAAE,MAAM;gBACZ,IAAI,EAAE,WAAW;gBACjB,QAAQ,EAAE;oBACR,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC,EAAE;oBACvD,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,kBAAkB,EAAE,QAAQ,EAAE,CAAC,EAAE;iBAC/D;gBACD,iBAAiB,EAAE,IAAI;aACxB,EACD;gBACE,EAAE,EAAE,YAAY;gBAChB,IAAI,EAAE,YAAY;gBAClB,IAAI,EAAE,OAAO;gBACb,QAAQ,EAAE;oBACR,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,mBAAmB,EAAE,QAAQ,EAAE,CAAC,EAAE;oBAC/D,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,CAAC,EAAE;iBAC9D;gBACD,iBAAiB,EAAE,IAAI;aACxB,EACD;gBACE,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,KAAK;gBACX,IAAI,EAAE,WAAW;gBACjB,QAAQ,EAAE;oBACR,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC,EAAE;oBACvD,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,CAAC,EAAE;iBAC9D;gBACD,iBAAiB,EAAE,IAAI;aACxB,CACF,CAAC;YAEF,oCAAoC;YACpC,IAAI,YAAY,KAAK,aAAa,EAAE,CAAC;gBACnC,YAAY,CAAC,IAAI,CAAC;oBAChB,EAAE,EAAE,KAAK;oBACT,IAAI,EAAE,yBAAyB;oBAC/B,IAAI,EAAE,KAAK;oBACX,QAAQ,EAAE;wBACR,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,CAAC,EAAE;wBAC7D,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC,EAAE;qBACxD;oBACD,iBAAiB,EAAE,IAAI;iBACxB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,YAAY,CAAC;IACtB,CAAC;IAEO,iBAAiB,CAAC,EAAU;QAClC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;IAC3D,CAAC;CACF;AAED,+EAA+E;AAC/E,iCAAiC;AACjC,+EAA+E;AAE/E,IAAI,mBAAmB,GAAmC,IAAI,kCAAkC,EAAE,CAAC;AAEnG,MAAM,UAAU,iCAAiC,CAAC,OAAuC;IACvF,mBAAmB,GAAG,OAAO,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,iCAAiC;IAC/C,OAAO,mBAAmB,CAAC;AAC7B,CAAC;AAED,+EAA+E;AAC/E,wBAAwB;AACxB,+EAA+E;AAE/E,KAAK,UAAU,mBAAmB,CAAC,OAAsB;IACvD,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC;IAC7E,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,aAAa,GAA8B,EAAE,CAAC;IAEpD,YAAY,CAAC,IAAI,CAAC,mCAAmC,EAAE;QACrD,UAAU,EAAE,QAAQ,CAAC,EAAE;QACvB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,IAAI,EAAE,QAAQ,CAAC,IAAI;KACpB,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,uDAAuD;QACvD,MAAM,YAAY,GAAG,MAAM,mBAAmB,CAAC,eAAe,CAC5D,QAAQ,CAAC,QAAQ,EACjB,QAAQ,CAAC,IAAI,CACd,CAAC;QAEF,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9B,YAAY,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;YACjE,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,EAAE,OAAO,EAAE,4BAA4B,EAAE,aAAa,EAAE,EAAE,EAAE;gBACpE,OAAO,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,cAAc,EAAE,CAAC,EAAE;gBAClE,WAAW,EAAE,KAAK;aACnB,CAAC;QACJ,CAAC;QAED,YAAY,CAAC,IAAI,CAAC,yBAAyB,EAAE;YAC3C,KAAK,EAAE,YAAY,CAAC,MAAM;YAC1B,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;SAC5D,CAAC,CAAC;QAEH,6BAA6B;QAC7B,MAAM,QAAQ,GAAG,yBAAyB,CAAC,QAAQ,CAAC,CAAC;QAErD,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,IAAI,YAAY,GAAG,CAAC,CAAC;QAErB,uDAAuD;QACvD,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;YACvC,2BAA2B;YAC3B,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC,iBAAiB,CAAC,EAAE,CAAC;gBACzE,YAAY,CAAC,KAAK,CAAC,sCAAsC,EAAE;oBACzD,WAAW,EAAE,WAAW,CAAC,EAAE;oBAC3B,gBAAgB,EAAE,QAAQ,CAAC,QAAQ;oBACnC,SAAS,EAAE,WAAW,CAAC,iBAAiB;iBACzC,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YAED,iCAAiC;YACjC,IAAI,QAAQ,GAAG,KAAK,CAAC;YACrB,KAAK,MAAM,aAAa,IAAI,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACzF,MAAM,YAAY,GAA4B;oBAC5C,WAAW,EAAE,WAAW,CAAC,EAAE;oBAC3B,IAAI,EAAE,WAAW,CAAC,IAAI;oBACtB,OAAO,EAAE,aAAa,CAAC,OAAO;oBAC9B,MAAM,EAAE,SAAS;iBAClB,CAAC;gBAEF,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,MAAM,gBAAgB,CACnC,aAAa,CAAC,OAAO,EACrB,aAAa,CAAC,OAAO,EACrB,QAAQ,EACR,YAAY,CACb,CAAC;oBAEF,YAAY,CAAC,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;oBACzD,YAAY,CAAC,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;oBACjC,YAAY,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;oBAE1C,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;wBACnB,QAAQ,GAAG,IAAI,CAAC;wBAChB,YAAY,CAAC,IAAI,CAAC,mBAAmB,EAAE;4BACrC,WAAW,EAAE,WAAW,CAAC,EAAE;4BAC3B,OAAO,EAAE,aAAa,CAAC,OAAO;yBAC/B,CAAC,CAAC;wBACH,MAAM,CAAC,uCAAuC;oBAChD,CAAC;yBAAM,CAAC;wBACN,YAAY,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;wBAClC,YAAY,CAAC,IAAI,CAAC,sCAAsC,EAAE;4BACxD,WAAW,EAAE,WAAW,CAAC,EAAE;4BAC3B,OAAO,EAAE,aAAa,CAAC,OAAO;4BAC9B,KAAK,EAAE,MAAM,CAAC,KAAK;yBACpB,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,YAAY,CAAC,MAAM,GAAG,QAAQ,CAAC;oBAC/B,YAAY,CAAC,KAAK,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;oBAC5E,YAAY,CAAC,KAAK,CAAC,oBAAoB,EAAE;wBACvC,WAAW,EAAE,WAAW,CAAC,EAAE;wBAC3B,OAAO,EAAE,aAAa,CAAC,OAAO;wBAC9B,KAAK,EAAE,YAAY,CAAC,KAAK;qBAC1B,CAAC,CAAC;gBACL,CAAC;gBAED,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACnC,CAAC;YAED,IAAI,QAAQ,EAAE,CAAC;gBACb,YAAY,EAAE,CAAC;YACjB,CAAC;iBAAM,CAAC;gBACN,YAAY,EAAE,CAAC;gBACf,YAAY,CAAC,KAAK,CAAC,8CAA8C,EAAE;oBACjE,WAAW,EAAE,WAAW,CAAC,EAAE;iBAC5B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,oCAAoC;QACpC,WAAW,CAAC,2BAA2B,EAAE,aAAa,CAAC,CAAC;QAExD,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QAE1C,wEAAwE;QACxE,MAAM,OAAO,GAAG,YAAY,GAAG,CAAC,CAAC;QAEjC,YAAY,CAAC,IAAI,CAAC,oCAAoC,EAAE;YACtD,OAAO;YACP,YAAY;YACZ,YAAY;YACZ,kBAAkB,EAAE,aAAa,CAAC,MAAM;YACxC,UAAU;SACX,CAAC,CAAC;QAEH,OAAO;YACL,OAAO;YACP,MAAM,EAAE;gBACN,OAAO,EAAE,OAAO;oBACd,CAAC,CAAC,YAAY,YAAY,8BAA8B;oBACxD,CAAC,CAAC,mCAAmC;gBACvC,aAAa;gBACb,YAAY;gBACZ,YAAY;gBACZ,oBAAoB,EAAE,YAAY;qBAC/B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;qBACvF,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;aACtB;YACD,OAAO,EAAE;gBACP,UAAU;gBACV,cAAc,EAAE,YAAY;gBAC5B,WAAW,EAAE,YAAY;aAC1B;YACD,WAAW,EAAE,KAAK,EAAE,sCAAsC;SAC3D,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5E,YAAY,CAAC,KAAK,CAAC,iCAAiC,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;QAE/E,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,YAAY;YACnB,OAAO,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE;YAC/C,WAAW,EAAE,KAAK;SACnB,CAAC;IACJ,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,mBAAmB;AACnB,+EAA+E;AAE/E,SAAS,yBAAyB,CAAC,QAQlC;IACC,MAAM,aAAa,GAAqC;QACtD,EAAE,EAAE,YAAY;QAChB,EAAE,EAAE,QAAQ;QACZ,EAAE,EAAE,UAAU;QACd,EAAE,EAAE,OAAO;KACZ,CAAC;IAEF,MAAM,UAAU,GAA8D;QAC5E,EAAE,EAAE,UAAU;QACd,EAAE,EAAE,MAAM;QACV,EAAE,EAAE,QAAQ;QACZ,EAAE,EAAE,KAAK;KACV,CAAC;IAEF,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,IAAI,IAAI,CAAC;IAC3C,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,IAAI,mBAAmB,CAAC;IACpD,MAAM,WAAW,GAAG,QAAQ,CAAC,WAAW,IAAI,yBAAyB,CAAC;IACtE,MAAM,EAAE,GAAG,QAAQ,CAAC,EAAE,IAAI,SAAS,CAAC;IACpC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,IAAI,SAAS,CAAC;IACxC,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,IAAI,SAAS,CAAC;IAC5C,MAAM,UAAU,GAAG,QAAQ,CAAC,UAAU,IAAI,IAAI,IAAI,EAAE,CAAC;IAErD,OAAO;QACL,OAAO,EAAE,GAAG,aAAa,CAAC,QAAQ,CAAC,uBAAuB,KAAK,EAAE;QACjE,IAAI,EAAE;;;;eAIK,EAAE;YACL,QAAQ;QACZ,IAAI;UACF,MAAM;YACJ,UAAU,CAAC,WAAW,EAAE;;;EAGlC,WAAW;;;;;;KAMR,CAAC,IAAI,EAAE;QACR,OAAO,EAAE,UAAU,CAAC,QAAQ,CAAC;KAC9B,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CACxB,gBAAkC,EAClC,SAA2B;IAE3B,MAAM,aAAa,GAAqC;QACtD,EAAE,EAAE,CAAC;QACL,EAAE,EAAE,CAAC;QACL,EAAE,EAAE,CAAC;QACL,EAAE,EAAE,CAAC;KACN,CAAC;IAEF,iCAAiC;IACjC,OAAO,aAAa,CAAC,gBAAgB,CAAC,IAAI,aAAa,CAAC,SAAS,CAAC,CAAC;AACrE,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,OAAe,EACf,OAAe,EACf,QAA8B,EAC9B,YAAqC;IAErC,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,OAAO;YACV,OAAO,mBAAmB,CAAC,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAE1D,KAAK,OAAO;YACV,OAAO,mBAAmB,CAAC,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAE1D,KAAK,WAAW;YACd,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YAC5E,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC;QAEvE,KAAK,KAAK;YACR,+BAA+B;YAC/B,MAAM,UAAU,GAAG,GAAG,QAAQ,CAAC,OAAO,KAAK,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC;YAC5E,OAAO,mBAAmB,CAAC,OAAO,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAE1D,KAAK,OAAO;YACV,OAAO,mBAAmB,CAAC,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAE1D;YACE,YAAY,CAAC,IAAI,CAAC,8BAA8B,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;YAC/D,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,oBAAoB,OAAO,EAAE,EAAE,CAAC;IACpE,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,2BAA2B;AAC3B,+EAA+E;AAE/E,MAAM,CAAC,MAAM,wBAAwB,GAAqB;IACxD,EAAE,EAAE,qBAAqB;IACzB,IAAI,EAAE,qBAAqB;IAC3B,WAAW,EAAE,2FAA2F;IACxG,QAAQ,EAAE,cAAc;IACxB,SAAS,EAAE,KAAK;IAChB,gBAAgB,EAAE,KAAK;IACvB,gBAAgB,EAAE,KAAK;IACvB,gBAAgB,EAAE,MAAM,EAAE,YAAY;IACtC,UAAU,EAAE,CAAC;IACb,OAAO,EAAE,mBAAmB;IAC5B,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAC1B,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;QAE7B,4DAA4D;QAC5D,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACvB,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,MAAM,EAAE,4DAA4D;aACrE,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACzB,CAAC;CACF,CAAC;AAEF,eAAe,wBAAwB,CAAC"}

package/dist/security/incident/actions/revoke-credentials.d.ts

@@ -0,0 +1,75 @@
+/**
+ * Credential Revocation Action
+ *
+ * Automated credential revocation for compromised accounts.
+ * Handles passwords, API keys, tokens, sessions, and OAuth grants.
+ *
+ * @packageDocumentation
+ * @module security/incident/actions/revoke-credentials
+ */
+import type { ActionDefinition } from '../types.js';
+export interface CredentialTarget {
+    type: 'password' | 'api_key' | 'oauth_token' | 'session' | 'ssh_key' | 'certificate';
+    userId?: string;
+    keyId?: string;
+    sessionId?: string;
+    scope?: string;
+}
+export interface RevocationResult {
+    credentialType: string;
+    identifier: string;
+    revoked: boolean;
+    timestamp: Date;
+    previousState?: unknown;
+}
+export interface RevocationRollbackData {
+    revocations: RevocationResult[];
+    incidentId: string;
+    canRestore: boolean;
+}
+export interface CredentialService {
+    /** Invalidate user password and require reset */
+    invalidatePassword(userId: string): Promise<{
+        success: boolean;
+        resetToken?: string;
+    }>;
+    /** Revoke API keys for a user */
+    revokeApiKeys(userId: string, keyIds?: string[]): Promise<{
+        success: boolean;
+        revokedCount: number;
+        keyIds: string[];
+    }>;
+    /** Revoke OAuth tokens */
+    revokeOAuthTokens(userId: string, clientIds?: string[]): Promise<{
+        success: boolean;
+        revokedCount: number;
+    }>;
+    /** Terminate all active sessions */
+    terminateSessions(userId: string, sessionIds?: string[]): Promise<{
+        success: boolean;
+        terminatedCount: number;
+    }>;
+    /** Revoke SSH keys */
+    revokeSshKeys(userId: string, keyIds?: string[]): Promise<{
+        success: boolean;
+        revokedCount: number;
+    }>;
+    /** Revoke certificates */
+    revokeCertificates(userId: string, certIds?: string[]): Promise<{
+        success: boolean;
+        revokedCount: number;
+    }>;
+    /** Get all active credentials for a user (for comprehensive revocation) */
+    getActiveCredentials(userId: string): Promise<{
+        apiKeys: string[];
+        oauthClients: string[];
+        activeSessions: string[];
+        sshKeys: string[];
+        certificates: string[];
+    }>;
+}
+export declare function setCredentialService(service: CredentialService): void;
+export declare function getCredentialService(): CredentialService;
+export declare const revokeCredentialsAction: ActionDefinition;
+export default revokeCredentialsAction;
+//# sourceMappingURL=revoke-credentials.d.ts.map

package/dist/security/incident/actions/revoke-credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"revoke-credentials.d.ts","sourceRoot":"","sources":["../../../../src/security/incident/actions/revoke-credentials.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,KAAK,EAAE,gBAAgB,EAA+B,MAAM,aAAa,CAAC;AAQjF,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,UAAU,GAAG,SAAS,GAAG,aAAa,GAAG,SAAS,GAAG,SAAS,GAAG,aAAa,CAAC;IACrF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,gBAAgB;IAC/B,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,IAAI,CAAC;IAChB,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,sBAAsB;IACrC,WAAW,EAAE,gBAAgB,EAAE,CAAC;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,OAAO,CAAC;CACrB;AAMD,MAAM,WAAW,iBAAiB;IAChC,iDAAiD;IACjD,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAEvF,iCAAiC;IACjC,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;IAExH,0BAA0B;IAC1B,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAE7G,oCAAoC;IACpC,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,eAAe,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAEjH,sBAAsB;IACtB,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAEtG,0BAA0B;IAC1B,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAE5G,2EAA2E;IAC3E,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;QAC5C,OAAO,EAAE,MAAM,EAAE,CAAC;QAClB,YAAY,EAAE,MAAM,EAAE,CAAC;QACvB,cAAc,EAAE,MAAM,EAAE,CAAC;QACzB,OAAO,EAAE,MAAM,EAAE,CAAC;QAClB,YAAY,EAAE,MAAM,EAAE,CAAC;KACxB,CAAC,CAAC;CACJ;AAyED,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,iBAAiB,GAAG,IAAI,CAErE;AAED,wBAAgB,oBAAoB,IAAI,iBAAiB,CAExD;AAsPD,eAAO,MAAM,uBAAuB,EAAE,gBAwBrC,CAAC;AAEF,eAAe,uBAAuB,CAAC"}