@vorionsys/platform-core 0.1.0

package/dist/audit/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/audit/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAMxD,eAAO,MAAM,gBAAgB,mDAAoD,CAAC;AAClF,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE9D,eAAO,MAAM,cAAc,4CAA6C,CAAC;AACzE,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAM3D,eAAO,MAAM,gBAAgB,2GASnB,CAAC;AAEX,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAM9D,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAqFpB,CAAC;AAEX,MAAM,MAAM,cAAc,GAAG,MAAM,OAAO,iBAAiB,CAAC;AAM5D,eAAO,MAAM,WAAW,iDAAkD,CAAC;AAC3E,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC;AAMrD,eAAO,MAAM,YAAY,qIAYf,CAAC;AAEX,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;AAMvD;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,SAAS,CAAC;IAChB,EAAE,EAAE,EAAE,CAAC;IACP,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,EAAE,CAAC,EAAE,MAAM,CAAC;CACb;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,UAAU,CAAC;IACjB,EAAE,EAAE,EAAE,CAAC;IACP,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,EAAE,CAAC;IACP,QAAQ,EAAE,EAAE,CAAC;IAGb,SAAS,EAAE,cAAc,GAAG,MAAM,CAAC;IACnC,aAAa,EAAE,aAAa,CAAC;IAC7B,QAAQ,EAAE,aAAa,CAAC;IAGxB,KAAK,EAAE,UAAU,CAAC;IAGlB,MAAM,EAAE,WAAW,CAAC;IAGpB,SAAS,EAAE,EAAE,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAGvB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,YAAY,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAGvB,WAAW,CAAC,EAAE,gBAAgB,GAAG,IAAI,CAAC;IAGtC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC1C,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAGvB,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;IAGnB,SAAS,EAAE,SAAS,CAAC;IACrB,UAAU,EAAE,SAAS,CAAC;IAGtB,QAAQ,EAAE,OAAO,CAAC;IAClB,UAAU,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC;CAC/B;AAMD;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,EAAE,CAAC;IACb,SAAS,EAAE,cAAc,GAAG,MAAM,CAAC;IACnC,KAAK,EAAE,UAAU,CAAC;IAClB,MAAM,EAAE,WAAW,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,YAAY,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,gBAAgB,CAAC;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAEhB,SAAS,CAAC,EAAE,EAAE,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,SAAS,CAAC;CACvB;AAMD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,EAAE,CAAC;IACb,SAAS,CAAC,EAAE,cAAc,GAAG,MAAM,CAAC;IACpC,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,QAAQ,CAAC,EAAE,aAAa,CAAC;IACzB,OAAO,CAAC,EAAE,EAAE,CAAC;IACb,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,QAAQ,CAAC,EAAE,EAAE,CAAC;IACd,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,OAAO,CAAC,EAAE,YAAY,CAAC;IACvB,SAAS,CAAC,EAAE,EAAE,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,OAAO,CAAC,EAAE,SAAS,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,WAAW,GAAG,YAAY,CAAC;IACrC,cAAc,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;CACjC;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,OAAO,CAAC;CAClB;AAMD;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,OAAO,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,EAAE,CAAC;IACjB,UAAU,CAAC,EAAE,EAAE,CAAC;IAChB,QAAQ,CAAC,EAAE,EAAE,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAMD;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,kBAAkB,CAAC,EAAE,SAAS,CAAC;IAC/B,kBAAkB,CAAC,EAAE,SAAS,CAAC;CAChC;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,SAAS,CAAC;IAC7B,gBAAgB,CAAC,EAAE,SAAS,CAAC;CAC9B;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,MAAM,EAAE,gBAAgB,CAAC;IACzB,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB"}

package/dist/audit/types.js

@@ -0,0 +1,130 @@
+/**
+ * Audit Engine Type Definitions
+ *
+ * Defines audit events, records, and related types for comprehensive
+ * audit logging with chain integrity.
+ *
+ * Note: These audit types are designed to work with both legacy types
+ * from src/common/types.ts and canonical types from @vorionsys/contracts.
+ * For canonical proof/evidence types, see packages/contracts/src/v2/evidence.ts
+ * and packages/contracts/src/v2/proof-event.ts.
+ *
+ * @packageDocumentation
+ */
+// =============================================================================
+// AUDIT SEVERITY & OUTCOME
+// =============================================================================
+export const AUDIT_SEVERITIES = ['info', 'warning', 'error', 'critical'];
+export const AUDIT_OUTCOMES = ['success', 'failure', 'partial'];
+// =============================================================================
+// AUDIT EVENT CATEGORIES
+// =============================================================================
+export const AUDIT_CATEGORIES = [
+    'intent',
+    'policy',
+    'escalation',
+    'authentication',
+    'authorization',
+    'data',
+    'system',
+    'admin',
+];
+// =============================================================================
+// AUDIT EVENT TYPES
+// =============================================================================
+export const AUDIT_EVENT_TYPES = {
+    // Intent lifecycle
+    'intent.created': { category: 'intent', severity: 'info' },
+    'intent.submitted': { category: 'intent', severity: 'info' },
+    'intent.evaluation.started': { category: 'intent', severity: 'info' },
+    'intent.evaluation.completed': { category: 'intent', severity: 'info' },
+    'intent.approved': { category: 'intent', severity: 'info' },
+    'intent.denied': { category: 'intent', severity: 'warning' },
+    'intent.escalated': { category: 'intent', severity: 'warning' },
+    'intent.execution.started': { category: 'intent', severity: 'info' },
+    'intent.completed': { category: 'intent', severity: 'info' },
+    'intent.failed': { category: 'intent', severity: 'error' },
+    'intent.cancelled': { category: 'intent', severity: 'warning' },
+    'intent.status.changed': { category: 'intent', severity: 'info' },
+    'intent.replayed': { category: 'intent', severity: 'info' },
+    'intent.deleted': { category: 'intent', severity: 'warning' },
+    // Policy events
+    'policy.created': { category: 'policy', severity: 'info' },
+    'policy.updated': { category: 'policy', severity: 'info' },
+    'policy.published': { category: 'policy', severity: 'info' },
+    'policy.deprecated': { category: 'policy', severity: 'warning' },
+    'policy.archived': { category: 'policy', severity: 'warning' },
+    'policy.evaluation.started': { category: 'policy', severity: 'info' },
+    'policy.evaluation.completed': { category: 'policy', severity: 'info' },
+    'policy.violation': { category: 'policy', severity: 'warning' },
+    // Escalation events
+    'escalation.created': { category: 'escalation', severity: 'warning' },
+    'escalation.acknowledged': { category: 'escalation', severity: 'info' },
+    'escalation.approved': { category: 'escalation', severity: 'info' },
+    'escalation.rejected': { category: 'escalation', severity: 'warning' },
+    'escalation.timeout': { category: 'escalation', severity: 'error' },
+    'escalation.cancelled': { category: 'escalation', severity: 'warning' },
+    'escalation.sla.breached': { category: 'escalation', severity: 'critical' },
+    // Authentication events
+    'auth.login': { category: 'authentication', severity: 'info' },
+    'auth.logout': { category: 'authentication', severity: 'info' },
+    'auth.failed': { category: 'authentication', severity: 'warning' },
+    'auth.token.issued': { category: 'authentication', severity: 'info' },
+    'auth.token.revoked': { category: 'authentication', severity: 'info' },
+    'auth.token.expired': { category: 'authentication', severity: 'info' },
+    // Authorization events
+    'authz.denied': { category: 'authorization', severity: 'warning' },
+    'authz.granted': { category: 'authorization', severity: 'info' },
+    'authz.elevated': { category: 'authorization', severity: 'warning' },
+    // Data events
+    'data.read': { category: 'data', severity: 'info' },
+    'data.created': { category: 'data', severity: 'info' },
+    'data.updated': { category: 'data', severity: 'info' },
+    'data.deleted': { category: 'data', severity: 'warning' },
+    'data.exported': { category: 'data', severity: 'warning' },
+    // System events
+    'system.startup': { category: 'system', severity: 'info' },
+    'system.shutdown': { category: 'system', severity: 'info' },
+    'system.error': { category: 'system', severity: 'error' },
+    'system.warning': { category: 'system', severity: 'warning' },
+    'system.config.changed': { category: 'system', severity: 'info' },
+    // Admin events
+    'admin.user.created': { category: 'admin', severity: 'info' },
+    'admin.user.updated': { category: 'admin', severity: 'info' },
+    'admin.user.deleted': { category: 'admin', severity: 'warning' },
+    'admin.permission.granted': { category: 'admin', severity: 'info' },
+    'admin.permission.revoked': { category: 'admin', severity: 'warning' },
+    'admin.user_modified': { category: 'admin', severity: 'info' },
+    'admin.token_revoked': { category: 'admin', severity: 'warning' },
+    // Access events
+    'access.denied': { category: 'authorization', severity: 'warning' },
+    'access.granted': { category: 'authorization', severity: 'info' },
+    // Trust events
+    'trust_score.updated': { category: 'data', severity: 'info' },
+    'trust_score.recalculated': { category: 'data', severity: 'info' },
+    // Escalation assignment events
+    'escalation.assigned': { category: 'escalation', severity: 'info' },
+    // Policy lifecycle events (already exist but ensure complete)
+    'policy.deleted': { category: 'policy', severity: 'warning' },
+};
+// =============================================================================
+// ACTOR TYPES
+// =============================================================================
+export const ACTOR_TYPES = ['user', 'agent', 'service', 'system'];
+// =============================================================================
+// TARGET TYPES
+// =============================================================================
+export const TARGET_TYPES = [
+    'intent',
+    'policy',
+    'escalation',
+    'entity',
+    'agent', // Added for canonical alignment
+    'tenant',
+    'user',
+    'system',
+    'role',
+    'permission',
+    'service_account',
+];
+//# sourceMappingURL=types.js.map

package/dist/audit/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/audit/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAIH,gFAAgF;AAChF,2BAA2B;AAC3B,gFAAgF;AAEhF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,CAAU,CAAC;AAGlF,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,CAAU,CAAC;AAGzE,gFAAgF;AAChF,yBAAyB;AACzB,gFAAgF;AAEhF,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,QAAQ;IACR,QAAQ;IACR,YAAY;IACZ,gBAAgB;IAChB,eAAe;IACf,MAAM;IACN,QAAQ;IACR,OAAO;CACC,CAAC;AAIX,gFAAgF;AAChF,oBAAoB;AACpB,gFAAgF;AAEhF,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,mBAAmB;IACnB,gBAAgB,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE;IAC1D,kBAAkB,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE;IAC5D,2BAA2B,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE;IACrE,6BAA6B,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE;IACvE,iBAAiB,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE;IAC3D,eAAe,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE;IAC5D,kBAAkB,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE;IAC/D,0BAA0B,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE;IACpE,kBAAkB,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE;IAC5D,eAAe,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE;IAC1D,kBAAkB,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE;IAC/D,uBAAuB,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE;IACjE,iBAAiB,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE;IAC3D,gBAAgB,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE;IAE7D,gBAAgB;IAChB,gBAAgB,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE;IAC1D,gBAAgB,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE;IAC1D,kBAAkB,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE;IAC5D,mBAAmB,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE;IAChE,iBAAiB,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE;IAC9D,2BAA2B,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE;IACrE,6BAA6B,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE;IACvE,kBAAkB,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE;IAE/D,oBAAoB;IACpB,oBAAoB,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,SAAS,EAAE;IACrE,yBAAyB,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,EAAE;IACvE,qBAAqB,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,EAAE;IACnE,qBAAqB,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,SAAS,EAAE;IACtE,oBAAoB,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,OAAO,EAAE;IACnE,sBAAsB,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,SAAS,EAAE;IACvE,yBAAyB,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE;IAE3E,wBAAwB;IACxB,YAAY,EAAE,EAAE,QAAQ,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,EAAE;IAC9D,aAAa,EAAE,EAAE,QAAQ,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,EAAE;IAC/D,aAAa,EAAE,EAAE,QAAQ,EAAE,gBAAgB,EAAE,QAAQ,EAAE,SAAS,EAAE;IAClE,mBAAmB,EAAE,EAAE,QAAQ,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,EAAE;IACrE,oBAAoB,EAAE,EAAE,QAAQ,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,EAAE;IACtE,oBAAoB,EAAE,EAAE,QAAQ,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,EAAE;IAEtE,uBAAuB;IACvB,cAAc,EAAE,EAAE,QAAQ,EAAE,eAAe,EAAE,QAAQ,EAAE,SAAS,EAAE;IAClE,eAAe,EAAE,EAAE,QAAQ,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,EAAE;IAChE,gBAAgB,EAAE,EAAE,QAAQ,EAAE,eAAe,EAAE,QAAQ,EAAE,SAAS,EAAE;IAEpE,cAAc;IACd,WAAW,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE;IACnD,cAAc,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE;IACtD,cAAc,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE;IACtD,cAAc,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE;IACzD,eAAe,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE;IAE1D,gBAAgB;IAChB,gBAAgB,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE;IAC1D,iBAAiB,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE;IAC3D,cAAc,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE;IACzD,gBAAgB,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE;IAC7D,uBAAuB,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE;IAEjE,eAAe;IACf,oBAAoB,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE;IAC7D,oBAAoB,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE;IAC7D,oBAAoB,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE;IAChE,0BAA0B,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE;IACnE,0BAA0B,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE;IACtE,qBAAqB,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE;IAC9D,qBAAqB,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE;IAEjE,gBAAgB;IAChB,eAAe,EAAE,EAAE,QAAQ,EAAE,eAAe,EAAE,QAAQ,EAAE,SAAS,EAAE;IACnE,gBAAgB,EAAE,EAAE,QAAQ,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,EAAE;IAEjE,eAAe;IACf,qBAAqB,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE;IAC7D,0BAA0B,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE;IAElE,+BAA+B;IAC/B,qBAAqB,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,EAAE;IAEnE,8DAA8D;IAC9D,gBAAgB,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE;CACrD,CAAC;AAIX,gFAAgF;AAChF,cAAc;AACd,gFAAgF;AAEhF,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAU,CAAC;AAG3E,gFAAgF;AAChF,eAAe;AACf,gFAAgF;AAEhF,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,QAAQ;IACR,QAAQ;IACR,YAAY;IACZ,QAAQ;IACR,OAAO,EAAE,gCAAgC;IACzC,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,MAAM;IACN,YAAY;IACZ,iBAAiB;CACT,CAAC"}

package/dist/auth/index.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Authentication Module
+ *
+ * Provides authentication mechanisms for the Vorion platform:
+ * - PIV/CAC smart card authentication
+ *
+ * @packageDocumentation
+ */
+export * from './piv-cac/index.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/auth/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,cAAc,oBAAoB,CAAC"}

package/dist/auth/index.js

@@ -0,0 +1,10 @@
+/**
+ * Authentication Module
+ *
+ * Provides authentication mechanisms for the Vorion platform:
+ * - PIV/CAC smart card authentication
+ *
+ * @packageDocumentation
+ */
+export * from './piv-cac/index.js';
+//# sourceMappingURL=index.js.map

package/dist/auth/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,cAAc,oBAAoB,CAAC"}

package/dist/auth/mfa/index.d.ts

@@ -0,0 +1,9 @@
+/**
+ * MFA (Multi-Factor Authentication) Module
+ *
+ * Provides TOTP-based multi-factor authentication capabilities.
+ *
+ * @packageDocumentation
+ */
+export * from './totp.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/auth/mfa/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/auth/mfa/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,cAAc,WAAW,CAAC"}

package/dist/auth/mfa/index.js

@@ -0,0 +1,9 @@
+/**
+ * MFA (Multi-Factor Authentication) Module
+ *
+ * Provides TOTP-based multi-factor authentication capabilities.
+ *
+ * @packageDocumentation
+ */
+export * from './totp.js';
+//# sourceMappingURL=index.js.map

package/dist/auth/mfa/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/auth/mfa/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,cAAc,WAAW,CAAC"}

package/dist/auth/mfa/totp.d.ts

@@ -0,0 +1,222 @@
+/**
+ * TOTP (Time-based One-Time Password) MFA Implementation for Vorion Platform
+ *
+ * Provides secure two-factor authentication using TOTP standard (RFC 6238).
+ * Compatible with Google Authenticator, Authy, Microsoft Authenticator, and other TOTP apps.
+ *
+ * @module auth/mfa/totp
+ */
+/**
+ * Configuration options for TOTP generation and verification.
+ */
+export interface TOTPConfig {
+    /** The issuer name displayed in authenticator apps (default: 'Vorion') */
+    issuer: string;
+    /** Hash algorithm for TOTP generation (default: 'SHA1' for maximum compatibility) */
+    algorithm: 'SHA1' | 'SHA256' | 'SHA512';
+    /** Number of digits in the generated code (default: 6) */
+    digits: 6 | 8;
+    /** Time period in seconds for code rotation (default: 30) */
+    period: number;
+    /** Number of periods to allow before/after current time for clock drift (default: 1) */
+    window: number;
+}
+/**
+ * Generated TOTP secret with associated metadata.
+ */
+export interface TOTPSecret {
+    /** Base32 encoded secret key */
+    secret: string;
+    /** OTPAuth URL for QR code generation */
+    otpauthUrl: string;
+    /** Optional backup codes for account recovery */
+    backupCodes?: string[];
+}
+/**
+ * Result of backup code verification.
+ */
+export interface BackupCodeVerificationResult {
+    /** Whether the backup code was valid */
+    valid: boolean;
+    /** Index of the used code in the hashed codes array (for removal) */
+    usedIndex?: number;
+}
+/**
+ * Service for managing TOTP-based multi-factor authentication.
+ *
+ * Provides methods for generating secrets, verifying tokens, managing backup codes,
+ * and generating QR codes for authenticator app enrollment.
+ *
+ * @example
+ * ```typescript
+ * const totpService = getTOTPService();
+ *
+ * // Generate a new secret for user enrollment
+ * const secret = totpService.generateTOTPSecret('user123', 'user@example.com');
+ *
+ * // Generate QR code for authenticator app scanning
+ * const qrCodeDataUrl = await totpService.generateQRCode(secret.otpauthUrl);
+ *
+ * // Verify a token from the user's authenticator app
+ * const isValid = await totpService.verifyToken(secret.secret, '123456');
+ * ```
+ */
+export declare class TOTPService {
+    private readonly config;
+    private readonly totp;
+    /**
+     * Creates a new TOTPService instance.
+     *
+     * @param config - Partial configuration to override defaults
+     */
+    constructor(config?: Partial<TOTPConfig>);
+    /**
+     * Generates a new TOTP secret for user enrollment.
+     *
+     * Creates a cryptographically secure random secret and formats it as a
+     * base32 string along with an otpauth:// URL for QR code generation.
+     *
+     * @param userId - Unique identifier for the user
+     * @param email - User's email address (used as account name in authenticator apps)
+     * @returns TOTPSecret containing the secret and otpauth URL
+     *
+     * @example
+     * ```typescript
+     * const secret = totpService.generateTOTPSecret('user123', 'user@example.com');
+     * // secret.secret: 'JBSWY3DPEHPK3PXP...'
+     * // secret.otpauthUrl: 'otpauth://totp/Vorion:user@example.com?secret=...'
+     * ```
+     */
+    generateTOTPSecret(userId: string, email: string): TOTPSecret;
+    /**
+     * Generates a QR code image as a data URL for authenticator app enrollment.
+     *
+     * The returned data URL can be directly used as an image src attribute
+     * or embedded in HTML/email for user scanning.
+     *
+     * @param otpauthUrl - The otpauth:// URL to encode in the QR code
+     * @returns Promise resolving to a data URL (base64 PNG image)
+     *
+     * @example
+     * ```typescript
+     * const dataUrl = await totpService.generateQRCode(secret.otpauthUrl);
+     * // Returns: 'data:image/png;base64,iVBORw0KGgo...'
+     * ```
+     */
+    generateQRCode(otpauthUrl: string): Promise<string>;
+    /**
+     * Verifies a TOTP token against the stored secret.
+     *
+     * Accounts for clock drift by allowing tokens within the configured
+     * time window (default: 1 period before/after current time).
+     *
+     * @param secret - The base32 encoded secret associated with the user
+     * @param token - The 6 or 8 digit token from the authenticator app
+     * @returns Promise resolving to true if the token is valid, false otherwise
+     *
+     * @example
+     * ```typescript
+     * const isValid = await totpService.verifyToken(userSecret, '123456');
+     * if (isValid) {
+     *   // Grant access
+     * }
+     * ```
+     */
+    verifyToken(secret: string, token: string): Promise<boolean>;
+    /**
+     * Generates cryptographically secure backup codes for account recovery.
+     *
+     * Backup codes are formatted as readable groups (e.g., 'XXXX-XXXX')
+     * and should be hashed before storage using hashBackupCode().
+     *
+     * @param count - Number of backup codes to generate (default: 10)
+     * @returns Array of plain-text backup codes to show to the user once
+     *
+     * @example
+     * ```typescript
+     * const codes = totpService.generateBackupCodes(10);
+     * // Returns: ['A1B2-C3D4', 'E5F6-G7H8', ...]
+     *
+     * // Hash codes before storing
+     * const hashedCodes = codes.map(code => totpService.hashBackupCode(code));
+     * ```
+     */
+    generateBackupCodes(count?: number): string[];
+    /**
+     * Hashes a backup code for secure storage.
+     *
+     * Uses SHA-256 to create a one-way hash of the backup code.
+     * The plain-text code should never be stored.
+     *
+     * @param code - The plain-text backup code to hash
+     * @returns SHA-256 hash of the backup code (hex encoded)
+     *
+     * @example
+     * ```typescript
+     * const hashed = totpService.hashBackupCode('A1B2-C3D4');
+     * // Store 'hashed' in database, never store plain-text code
+     * ```
+     */
+    hashBackupCode(code: string): string;
+    /**
+     * Verifies a backup code against a list of hashed codes.
+     *
+     * If valid, returns the index of the used code so it can be removed
+     * from the stored list (backup codes are single-use).
+     *
+     * @param code - The plain-text backup code entered by the user
+     * @param hashedCodes - Array of SHA-256 hashed backup codes from storage
+     * @returns Object indicating validity and the index of the matched code
+     *
+     * @example
+     * ```typescript
+     * const result = totpService.verifyBackupCode('A1B2-C3D4', storedHashedCodes);
+     * if (result.valid) {
+     *   // Remove used code from storage
+     *   storedHashedCodes.splice(result.usedIndex!, 1);
+     *   // Grant access
+     * }
+     * ```
+     */
+    verifyBackupCode(code: string, hashedCodes: string[]): BackupCodeVerificationResult;
+    /**
+     * Performs a timing-safe string comparison to prevent timing attacks.
+     *
+     * @param a - First string to compare
+     * @param b - Second string to compare
+     * @returns true if strings are equal, false otherwise
+     */
+    private timingSafeEqual;
+    /**
+     * Gets the current configuration.
+     *
+     * @returns The active TOTP configuration
+     */
+    getConfig(): Readonly<TOTPConfig>;
+}
+/**
+ * Gets the singleton TOTPService instance.
+ *
+ * Creates a new instance on first call with default configuration.
+ * Subsequent calls return the same instance.
+ *
+ * @param config - Optional configuration for the service (only used on first call)
+ * @returns The TOTPService singleton instance
+ *
+ * @example
+ * ```typescript
+ * // Get default instance
+ * const totpService = getTOTPService();
+ *
+ * // Or initialize with custom config on first call
+ * const totpService = getTOTPService({ issuer: 'MyApp', digits: 8 });
+ * ```
+ */
+export declare function getTOTPService(config?: Partial<TOTPConfig>): TOTPService;
+/**
+ * Resets the singleton instance (primarily for testing).
+ *
+ * @internal
+ */
+export declare function resetTOTPService(): void;
+//# sourceMappingURL=totp.d.ts.map

package/dist/auth/mfa/totp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"totp.d.ts","sourceRoot":"","sources":["../../../src/auth/mfa/totp.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AASH;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,0EAA0E;IAC1E,MAAM,EAAE,MAAM,CAAC;IACf,qFAAqF;IACrF,SAAS,EAAE,MAAM,GAAG,QAAQ,GAAG,QAAQ,CAAC;IACxC,0DAA0D;IAC1D,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC;IACd,6DAA6D;IAC7D,MAAM,EAAE,MAAM,CAAC;IACf,wFAAwF;IACxF,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,gCAAgC;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,yCAAyC;IACzC,UAAU,EAAE,MAAM,CAAC;IACnB,iDAAiD;IACjD,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,4BAA4B;IAC3C,wCAAwC;IACxC,KAAK,EAAE,OAAO,CAAC;IACf,qEAAqE;IACrE,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAeD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAa;IACpC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAO;IAE5B;;;;OAIG;gBACS,MAAM,GAAE,OAAO,CAAC,UAAU,CAAM;IAa5C;;;;;;;;;;;;;;;;OAgBG;IACH,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,UAAU;IAe7D;;;;;;;;;;;;;;OAcG;IACG,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAiBzD;;;;;;;;;;;;;;;;;OAiBG;IACG,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IA+BlE;;;;;;;;;;;;;;;;;OAiBG;IACH,mBAAmB,CAAC,KAAK,GAAE,MAAW,GAAG,MAAM,EAAE;IAsBjD;;;;;;;;;;;;;;OAcG;IACH,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;IAOpC;;;;;;;;;;;;;;;;;;;OAmBG;IACH,gBAAgB,CACd,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,EAAE,GACpB,4BAA4B;IAkB/B;;;;;;OAMG;IACH,OAAO,CAAC,eAAe;IAqBvB;;;;OAIG;IACH,SAAS,IAAI,QAAQ,CAAC,UAAU,CAAC;CAGlC;AAKD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,cAAc,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC,GAAG,WAAW,CAKxE;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,IAAI,IAAI,CAEvC"}