@vorionsys/security 1.0.0

package/dist/intent/classifier/risk.js

@@ -0,0 +1,335 @@
+/**
+ * Intent Risk Assessment
+ *
+ * Provides rule-based risk assessment for intents in the Vorion AI Governance Platform.
+ * Risk is calculated based on action type, resource sensitivity, and historical patterns.
+ *
+ * Risk Calculation Logic:
+ * =======================
+ *
+ * 1. Base Risk Score (from action pattern):
+ *    - Each action type has a predefined base risk score (0-100)
+ *    - Unknown actions default to medium risk (40)
+ *
+ * 2. Resource Sensitivity Modifier:
+ *    - Resources are matched against sensitivity patterns
+ *    - Highest matching sensitivity level is used
+ *    - Applied as: adjustedScore = baseScore * (1 + (sensitivity - 30) / 100)
+ *    - This can increase or decrease risk based on resource sensitivity
+ *
+ * 3. Historical Pattern Adjustment:
+ *    - High failure rate (+15 points)
+ *    - First-time action/resource combination (+10 points)
+ *    - Frequent successful history (-5 points)
+ *
+ * 4. Parameter-based Adjustments:
+ *    - Bulk operations (+20 points)
+ *    - Cross-tenant operations (+25 points)
+ *    - Elevated privilege requests (+15 points)
+ *
+ * Final Score: Clamped to 0-100 range
+ */
+import { trace, SpanKind, SpanStatusCode, } from '@opentelemetry/api';
+import { matchActionPattern, getResourceSensitivityLevel, scoreToTier, inferCategoryFromAction, } from './patterns.js';
+// Tracer for risk assessment operations
+const TRACER_NAME = 'vorion.intent.classifier';
+const TRACER_VERSION = '1.0.0';
+/**
+ * Get the risk assessment tracer
+ */
+function getTracer() {
+    return trace.getTracer(TRACER_NAME, TRACER_VERSION);
+}
+const DEFAULT_CONFIG = {
+    defaultRiskScore: 40,
+    useHistoricalPatterns: true,
+};
+/**
+ * RiskAssessor class for evaluating intent risk
+ *
+ * Provides rule-based risk assessment without external ML dependencies.
+ * Risk scores are calculated based on:
+ * - Action type and its inherent risk
+ * - Resource sensitivity (PII, financial, credentials, etc.)
+ * - Historical patterns (optional)
+ * - Parameter-based modifiers
+ */
+export class RiskAssessor {
+    config;
+    constructor(config = {}) {
+        this.config = { ...DEFAULT_CONFIG, ...config };
+    }
+    /**
+     * Assess the risk of an intent
+     *
+     * @param intent - The intent to assess
+     * @param historicalPattern - Optional historical pattern data
+     * @returns Complete risk assessment
+     */
+    async assessRisk(intent, historicalPattern) {
+        const tracer = getTracer();
+        return tracer.startActiveSpan('risk.assess', {
+            kind: SpanKind.INTERNAL,
+            attributes: {
+                'intent.action': intent.action,
+                'intent.resource': intent.resource,
+            },
+        }, async (span) => {
+            try {
+                const result = await this.performAssessment(intent, historicalPattern, span);
+                span.setStatus({ code: SpanStatusCode.OK });
+                span.setAttributes({
+                    'risk.score': result.riskScore,
+                    'risk.tier': result.riskTier,
+                    'risk.factors_count': result.factors.length,
+                });
+                return result;
+            }
+            catch (error) {
+                span.setStatus({
+                    code: SpanStatusCode.ERROR,
+                    message: error instanceof Error ? error.message : 'Unknown error',
+                });
+                if (error instanceof Error) {
+                    span.recordException(error);
+                }
+                throw error;
+            }
+            finally {
+                span.end();
+            }
+        });
+    }
+    /**
+     * Perform the actual risk assessment
+     */
+    async performAssessment(intent, providedPattern, span) {
+        const factors = [];
+        let score = 0;
+        // 1. Get base risk from action pattern
+        const actionPattern = matchActionPattern(intent.action);
+        if (actionPattern) {
+            score = actionPattern.defaultRiskScore;
+            factors.push({
+                name: 'action_type',
+                points: score,
+                reason: `Base risk for ${actionPattern.name}: ${actionPattern.description}`,
+            });
+        }
+        else {
+            score = this.config.defaultRiskScore;
+            factors.push({
+                name: 'unknown_action',
+                points: score,
+                reason: `Unknown action type '${intent.action}', using default risk score`,
+            });
+        }
+        // 2. Apply resource sensitivity modifier
+        const sensitivityLevel = getResourceSensitivityLevel(intent.resource);
+        const sensitivityModifier = (sensitivityLevel - 30) / 100;
+        const sensitivityAdjustment = Math.round(score * sensitivityModifier);
+        if (sensitivityAdjustment !== 0) {
+            score += sensitivityAdjustment;
+            factors.push({
+                name: 'resource_sensitivity',
+                points: sensitivityAdjustment,
+                reason: `Resource sensitivity level ${sensitivityLevel}: ${sensitivityAdjustment > 0 ? 'increased' : 'decreased'} risk`,
+            });
+        }
+        // 3. Apply historical pattern adjustments
+        let historicalPattern = providedPattern;
+        if (!historicalPattern &&
+            this.config.useHistoricalPatterns &&
+            this.config.historicalPatternProvider) {
+            historicalPattern = await this.config.historicalPatternProvider(intent);
+        }
+        if (historicalPattern) {
+            const patternAdjustments = this.calculateHistoricalAdjustments(historicalPattern);
+            for (const adj of patternAdjustments) {
+                score += adj.points;
+                factors.push(adj);
+            }
+        }
+        // 4. Apply parameter-based adjustments
+        const paramAdjustments = this.calculateParameterAdjustments(intent.parameters);
+        for (const adj of paramAdjustments) {
+            score += adj.points;
+            factors.push(adj);
+        }
+        // 5. Clamp score to 0-100 range
+        const finalScore = Math.max(0, Math.min(100, score));
+        // 6. Determine risk tier
+        const riskTier = scoreToTier(finalScore);
+        // 7. Determine category
+        const category = actionPattern?.category ?? inferCategoryFromAction(intent.action);
+        // 8. Calculate required approvals
+        const requiredApprovals = this.calculateRequiredApprovals(finalScore, riskTier, category);
+        // Record additional span attributes
+        if (span) {
+            span.setAttribute('risk.category', category);
+            span.setAttribute('risk.sensitivity_level', sensitivityLevel);
+            span.setAttribute('risk.has_historical_pattern', historicalPattern !== null);
+        }
+        return {
+            riskScore: finalScore,
+            riskTier,
+            factors,
+            category,
+            requiredApprovals,
+            assessedAt: new Date().toISOString(),
+        };
+    }
+    /**
+     * Calculate risk adjustments based on historical patterns
+     *
+     * Adjustment Rules:
+     * - High failure rate (>30%): +15 points (indicates problematic pattern)
+     * - First-time action: +10 points (unknown behavior)
+     * - Frequent success (>10 with >90% success): -5 points (established safe pattern)
+     */
+    calculateHistoricalAdjustments(pattern) {
+        const adjustments = [];
+        // First-time action adjustment
+        if (pattern.isFirstTime) {
+            adjustments.push({
+                name: 'first_time_action',
+                points: 10,
+                reason: 'First-time action/resource combination, increased scrutiny',
+            });
+        }
+        // Failure rate analysis
+        if (pattern.totalCount > 0) {
+            const failureRate = pattern.failureCount / pattern.totalCount;
+            if (failureRate > 0.3) {
+                adjustments.push({
+                    name: 'high_failure_rate',
+                    points: 15,
+                    reason: `High historical failure rate (${Math.round(failureRate * 100)}%)`,
+                });
+            }
+            else if (pattern.totalCount >= 10 && failureRate < 0.1) {
+                // Established successful pattern
+                adjustments.push({
+                    name: 'established_pattern',
+                    points: -5,
+                    reason: `Established successful pattern (${pattern.successCount} successes)`,
+                });
+            }
+        }
+        return adjustments;
+    }
+    /**
+     * Calculate risk adjustments based on intent parameters
+     *
+     * Parameter Flags:
+     * - bulk: true -> +20 points (bulk operations have wider impact)
+     * - crossTenant: true -> +25 points (cross-tenant requires extra scrutiny)
+     * - elevated: true -> +15 points (elevated privilege request)
+     * - dryRun: true -> -10 points (dry run is safer)
+     */
+    calculateParameterAdjustments(parameters) {
+        const adjustments = [];
+        if (!parameters) {
+            return adjustments;
+        }
+        // Bulk operation check
+        if (parameters.bulk === true || parameters.isBulk === true) {
+            adjustments.push({
+                name: 'bulk_operation',
+                points: 20,
+                reason: 'Bulk operation affecting multiple records',
+            });
+        }
+        // Cross-tenant operation check
+        if (parameters.crossTenant === true || parameters.isCrossTenant === true) {
+            adjustments.push({
+                name: 'cross_tenant',
+                points: 25,
+                reason: 'Cross-tenant operation requires additional security review',
+            });
+        }
+        // Elevated privilege check
+        if (parameters.elevated === true || parameters.privileged === true) {
+            adjustments.push({
+                name: 'elevated_privilege',
+                points: 15,
+                reason: 'Elevated privilege request',
+            });
+        }
+        // Dry run check (reduces risk)
+        if (parameters.dryRun === true || parameters.isDryRun === true) {
+            adjustments.push({
+                name: 'dry_run',
+                points: -10,
+                reason: 'Dry run mode - no actual changes will be made',
+            });
+        }
+        // Large batch size check
+        const batchSize = parameters.batchSize ?? parameters.count ?? parameters.limit;
+        if (typeof batchSize === 'number' && batchSize > 1000) {
+            adjustments.push({
+                name: 'large_batch',
+                points: 10,
+                reason: `Large batch size (${batchSize} records)`,
+            });
+        }
+        return adjustments;
+    }
+    /**
+     * Calculate required approvals based on risk assessment
+     *
+     * Approval Thresholds:
+     * - low (0-25): No special approvals, minTrustLevel 1
+     * - medium (26-50): Human review recommended, minTrustLevel 2
+     * - high (51-75): Human review + manager approval, minTrustLevel 3
+     * - critical (76-100): Human review + manager + security review, minTrustLevel 4
+     *
+     * Additional rules for specific categories:
+     * - system-config always requires manager approval if score > 40
+     * - external-integration with payments requires security review
+     */
+    calculateRequiredApprovals(score, tier, category) {
+        const approvals = {
+            humanReview: false,
+            managerApproval: false,
+            securityReview: false,
+            minTrustLevel: 1,
+        };
+        // Tier-based approvals
+        switch (tier) {
+            case 'low':
+                approvals.minTrustLevel = 1;
+                break;
+            case 'medium':
+                approvals.humanReview = true;
+                approvals.minTrustLevel = 2;
+                break;
+            case 'high':
+                approvals.humanReview = true;
+                approvals.managerApproval = true;
+                approvals.minTrustLevel = 3;
+                break;
+            case 'critical':
+                approvals.humanReview = true;
+                approvals.managerApproval = true;
+                approvals.securityReview = true;
+                approvals.minTrustLevel = 4;
+                break;
+        }
+        // Category-specific overrides
+        if (category === 'system-config' && score > 40) {
+            approvals.managerApproval = true;
+        }
+        if (category === 'external-integration' && score >= 75) {
+            approvals.securityReview = true;
+        }
+        return approvals;
+    }
+}
+/**
+ * Create a new RiskAssessor instance with optional configuration
+ */
+export function createRiskAssessor(config) {
+    return new RiskAssessor(config);
+}
+//# sourceMappingURL=risk.js.map

package/dist/intent/classifier/risk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"risk.js","sourceRoot":"","sources":["../../../src/intent/classifier/risk.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,EACL,KAAK,EACL,QAAQ,EACR,cAAc,GAEf,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAGL,kBAAkB,EAClB,2BAA2B,EAC3B,WAAW,EACX,uBAAuB,GACxB,MAAM,eAAe,CAAC;AAEvB,wCAAwC;AACxC,MAAM,WAAW,GAAG,0BAA0B,CAAC;AAC/C,MAAM,cAAc,GAAG,OAAO,CAAC;AAE/B;;GAEG;AACH,SAAS,SAAS;IAChB,OAAO,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;AACtD,CAAC;AAwFD,MAAM,cAAc,GAAuB;IACzC,gBAAgB,EAAE,EAAE;IACpB,qBAAqB,EAAE,IAAI;CAC5B,CAAC;AAEF;;;;;;;;;GASG;AACH,MAAM,OAAO,YAAY;IACf,MAAM,CAAqB;IAEnC,YAAY,SAAsC,EAAE;QAClD,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,MAAM,EAAE,CAAC;IACjD,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,UAAU,CACd,MAAoB,EACpB,iBAA4C;QAE5C,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAE3B,OAAO,MAAM,CAAC,eAAe,CAC3B,aAAa,EACb;YACE,IAAI,EAAE,QAAQ,CAAC,QAAQ;YACvB,UAAU,EAAE;gBACV,eAAe,EAAE,MAAM,CAAC,MAAM;gBAC9B,iBAAiB,EAAE,MAAM,CAAC,QAAQ;aACnC;SACF,EACD,KAAK,EAAE,IAAI,EAAE,EAAE;YACb,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,iBAAiB,EAAE,IAAI,CAAC,CAAC;gBAC7E,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC5C,IAAI,CAAC,aAAa,CAAC;oBACjB,YAAY,EAAE,MAAM,CAAC,SAAS;oBAC9B,WAAW,EAAE,MAAM,CAAC,QAAQ;oBAC5B,oBAAoB,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM;iBAC5C,CAAC,CAAC;gBACH,OAAO,MAAM,CAAC;YAChB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,SAAS,CAAC;oBACb,IAAI,EAAE,cAAc,CAAC,KAAK;oBAC1B,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;iBAClE,CAAC,CAAC;gBACH,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;oBAC3B,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;gBAC9B,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;oBAAS,CAAC;gBACT,IAAI,CAAC,GAAG,EAAE,CAAC;YACb,CAAC;QACH,CAAC,CACF,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,iBAAiB,CAC7B,MAAoB,EACpB,eAA0C,EAC1C,IAAW;QAEX,MAAM,OAAO,GAAiB,EAAE,CAAC;QACjC,IAAI,KAAK,GAAG,CAAC,CAAC;QAEd,uCAAuC;QACvC,MAAM,aAAa,GAAG,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACxD,IAAI,aAAa,EAAE,CAAC;YAClB,KAAK,GAAG,aAAa,CAAC,gBAAgB,CAAC;YACvC,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,aAAa;gBACnB,MAAM,EAAE,KAAK;gBACb,MAAM,EAAE,iBAAiB,aAAa,CAAC,IAAI,KAAK,aAAa,CAAC,WAAW,EAAE;aAC5E,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC;YACrC,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,gBAAgB;gBACtB,MAAM,EAAE,KAAK;gBACb,MAAM,EAAE,wBAAwB,MAAM,CAAC,MAAM,6BAA6B;aAC3E,CAAC,CAAC;QACL,CAAC;QAED,yCAAyC;QACzC,MAAM,gBAAgB,GAAG,2BAA2B,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACtE,MAAM,mBAAmB,GAAG,CAAC,gBAAgB,GAAG,EAAE,CAAC,GAAG,GAAG,CAAC;QAC1D,MAAM,qBAAqB,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,mBAAmB,CAAC,CAAC;QAEtE,IAAI,qBAAqB,KAAK,CAAC,EAAE,CAAC;YAChC,KAAK,IAAI,qBAAqB,CAAC;YAC/B,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,sBAAsB;gBAC5B,MAAM,EAAE,qBAAqB;gBAC7B,MAAM,EAAE,8BAA8B,gBAAgB,KAAK,qBAAqB,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,OAAO;aACxH,CAAC,CAAC;QACL,CAAC;QAED,0CAA0C;QAC1C,IAAI,iBAAiB,GAAG,eAAe,CAAC;QACxC,IACE,CAAC,iBAAiB;YAClB,IAAI,CAAC,MAAM,CAAC,qBAAqB;YACjC,IAAI,CAAC,MAAM,CAAC,yBAAyB,EACrC,CAAC;YACD,iBAAiB,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAC;QAC1E,CAAC;QAED,IAAI,iBAAiB,EAAE,CAAC;YACtB,MAAM,kBAAkB,GAAG,IAAI,CAAC,8BAA8B,CAAC,iBAAiB,CAAC,CAAC;YAClF,KAAK,MAAM,GAAG,IAAI,kBAAkB,EAAE,CAAC;gBACrC,KAAK,IAAI,GAAG,CAAC,MAAM,CAAC;gBACpB,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACpB,CAAC;QACH,CAAC;QAED,uCAAuC;QACvC,MAAM,gBAAgB,GAAG,IAAI,CAAC,6BAA6B,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC/E,KAAK,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;YACnC,KAAK,IAAI,GAAG,CAAC,MAAM,CAAC;YACpB,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC;QAED,gCAAgC;QAChC,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;QAErD,yBAAyB;QACzB,MAAM,QAAQ,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;QAEzC,wBAAwB;QACxB,MAAM,QAAQ,GAAG,aAAa,EAAE,QAAQ,IAAI,uBAAuB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAEnF,kCAAkC;QAClC,MAAM,iBAAiB,GAAG,IAAI,CAAC,0BAA0B,CAAC,UAAU,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAE1F,oCAAoC;QACpC,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,CAAC,YAAY,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC;YAC7C,IAAI,CAAC,YAAY,CAAC,wBAAwB,EAAE,gBAAgB,CAAC,CAAC;YAC9D,IAAI,CAAC,YAAY,CAAC,6BAA6B,EAAE,iBAAiB,KAAK,IAAI,CAAC,CAAC;QAC/E,CAAC;QAED,OAAO;YACL,SAAS,EAAE,UAAU;YACrB,QAAQ;YACR,OAAO;YACP,QAAQ;YACR,iBAAiB;YACjB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACrC,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACK,8BAA8B,CAAC,OAA0B;QAC/D,MAAM,WAAW,GAAiB,EAAE,CAAC;QAErC,+BAA+B;QAC/B,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;YACxB,WAAW,CAAC,IAAI,CAAC;gBACf,IAAI,EAAE,mBAAmB;gBACzB,MAAM,EAAE,EAAE;gBACV,MAAM,EAAE,4DAA4D;aACrE,CAAC,CAAC;QACL,CAAC;QAED,wBAAwB;QACxB,IAAI,OAAO,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC;YAC3B,MAAM,WAAW,GAAG,OAAO,CAAC,YAAY,GAAG,OAAO,CAAC,UAAU,CAAC;YAE9D,IAAI,WAAW,GAAG,GAAG,EAAE,CAAC;gBACtB,WAAW,CAAC,IAAI,CAAC;oBACf,IAAI,EAAE,mBAAmB;oBACzB,MAAM,EAAE,EAAE;oBACV,MAAM,EAAE,iCAAiC,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,GAAG,CAAC,IAAI;iBAC3E,CAAC,CAAC;YACL,CAAC;iBAAM,IAAI,OAAO,CAAC,UAAU,IAAI,EAAE,IAAI,WAAW,GAAG,GAAG,EAAE,CAAC;gBACzD,iCAAiC;gBACjC,WAAW,CAAC,IAAI,CAAC;oBACf,IAAI,EAAE,qBAAqB;oBAC3B,MAAM,EAAE,CAAC,CAAC;oBACV,MAAM,EAAE,mCAAmC,OAAO,CAAC,YAAY,aAAa;iBAC7E,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;IAED;;;;;;;;OAQG;IACK,6BAA6B,CACnC,UAAoC;QAEpC,MAAM,WAAW,GAAiB,EAAE,CAAC;QAErC,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,WAAW,CAAC;QACrB,CAAC;QAED,uBAAuB;QACvB,IAAI,UAAU,CAAC,IAAI,KAAK,IAAI,IAAI,UAAU,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YAC3D,WAAW,CAAC,IAAI,CAAC;gBACf,IAAI,EAAE,gBAAgB;gBACtB,MAAM,EAAE,EAAE;gBACV,MAAM,EAAE,2CAA2C;aACpD,CAAC,CAAC;QACL,CAAC;QAED,+BAA+B;QAC/B,IAAI,UAAU,CAAC,WAAW,KAAK,IAAI,IAAI,UAAU,CAAC,aAAa,KAAK,IAAI,EAAE,CAAC;YACzE,WAAW,CAAC,IAAI,CAAC;gBACf,IAAI,EAAE,cAAc;gBACpB,MAAM,EAAE,EAAE;gBACV,MAAM,EAAE,4DAA4D;aACrE,CAAC,CAAC;QACL,CAAC;QAED,2BAA2B;QAC3B,IAAI,UAAU,CAAC,QAAQ,KAAK,IAAI,IAAI,UAAU,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;YACnE,WAAW,CAAC,IAAI,CAAC;gBACf,IAAI,EAAE,oBAAoB;gBAC1B,MAAM,EAAE,EAAE;gBACV,MAAM,EAAE,4BAA4B;aACrC,CAAC,CAAC;QACL,CAAC;QAED,+BAA+B;QAC/B,IAAI,UAAU,CAAC,MAAM,KAAK,IAAI,IAAI,UAAU,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;YAC/D,WAAW,CAAC,IAAI,CAAC;gBACf,IAAI,EAAE,SAAS;gBACf,MAAM,EAAE,CAAC,EAAE;gBACX,MAAM,EAAE,+CAA+C;aACxD,CAAC,CAAC;QACL,CAAC;QAED,yBAAyB;QACzB,MAAM,SAAS,GAAG,UAAU,CAAC,SAAS,IAAI,UAAU,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;QAC/E,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,GAAG,IAAI,EAAE,CAAC;YACtD,WAAW,CAAC,IAAI,CAAC;gBACf,IAAI,EAAE,aAAa;gBACnB,MAAM,EAAE,EAAE;gBACV,MAAM,EAAE,qBAAqB,SAAS,WAAW;aAClD,CAAC,CAAC;QACL,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;IAED;;;;;;;;;;;;OAYG;IACK,0BAA0B,CAChC,KAAa,EACb,IAAc,EACd,QAAwB;QAExB,MAAM,SAAS,GAAsB;YACnC,WAAW,EAAE,KAAK;YAClB,eAAe,EAAE,KAAK;YACtB,cAAc,EAAE,KAAK;YACrB,aAAa,EAAE,CAAC;SACjB,CAAC;QAEF,uBAAuB;QACvB,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,KAAK;gBACR,SAAS,CAAC,aAAa,GAAG,CAAC,CAAC;gBAC5B,MAAM;YACR,KAAK,QAAQ;gBACX,SAAS,CAAC,WAAW,GAAG,IAAI,CAAC;gBAC7B,SAAS,CAAC,aAAa,GAAG,CAAC,CAAC;gBAC5B,MAAM;YACR,KAAK,MAAM;gBACT,SAAS,CAAC,WAAW,GAAG,IAAI,CAAC;gBAC7B,SAAS,CAAC,eAAe,GAAG,IAAI,CAAC;gBACjC,SAAS,CAAC,aAAa,GAAG,CAAC,CAAC;gBAC5B,MAAM;YACR,KAAK,UAAU;gBACb,SAAS,CAAC,WAAW,GAAG,IAAI,CAAC;gBAC7B,SAAS,CAAC,eAAe,GAAG,IAAI,CAAC;gBACjC,SAAS,CAAC,cAAc,GAAG,IAAI,CAAC;gBAChC,SAAS,CAAC,aAAa,GAAG,CAAC,CAAC;gBAC5B,MAAM;QACV,CAAC;QAED,8BAA8B;QAC9B,IAAI,QAAQ,KAAK,eAAe,IAAI,KAAK,GAAG,EAAE,EAAE,CAAC;YAC/C,SAAS,CAAC,eAAe,GAAG,IAAI,CAAC;QACnC,CAAC;QAED,IAAI,QAAQ,KAAK,sBAAsB,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC;YACvD,SAAS,CAAC,cAAc,GAAG,IAAI,CAAC;QAClC,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAAoC;IAEpC,OAAO,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC;AAClC,CAAC"}

package/dist/intent/cleanup.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Intent Cleanup Job
+ *
+ * Handles retention policy enforcement for intents, events, and audit records.
+ * Run as a scheduled job (cron) or call directly.
+ */
+import { type AuditCleanupResult } from '../audit/index.js';
+export interface CleanupResult {
+    eventsDeleted: number;
+    intentsPurged: number;
+    auditCleanup?: AuditCleanupResult;
+    durationMs: number;
+    errors: string[];
+}
+/**
+ * Run cleanup for old events, soft-deleted intents, and audit records
+ */
+export declare function runCleanup(): Promise<CleanupResult>;
+/**
+ * Schedule cleanup job to run at interval
+ * Returns a function to stop the scheduled job
+ */
+export declare function scheduleCleanup(intervalMs?: number): () => void;
+//# sourceMappingURL=cleanup.d.ts.map

package/dist/intent/cleanup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cleanup.d.ts","sourceRoot":"","sources":["../../src/intent/cleanup.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,OAAO,EAAsB,KAAK,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAIhF,MAAM,WAAW,aAAa;IAC5B,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,kBAAkB,CAAC;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED;;GAEG;AACH,wBAAsB,UAAU,IAAI,OAAO,CAAC,aAAa,CAAC,CA0FzD;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,UAAU,GAAE,MAA4B,GAAG,MAAM,IAAI,CAgBpF"}

package/dist/intent/cleanup.js

@@ -0,0 +1,104 @@
+/**
+ * Intent Cleanup Job
+ *
+ * Handles retention policy enforcement for intents, events, and audit records.
+ * Run as a scheduled job (cron) or call directly.
+ */
+import { createLogger } from '../common/logger.js';
+import { getConfig } from '../common/config.js';
+import { IntentRepository } from './repository.js';
+import { createAuditService } from '../audit/index.js';
+const logger = createLogger({ component: 'intent-cleanup' });
+/**
+ * Run cleanup for old events, soft-deleted intents, and audit records
+ */
+export async function runCleanup() {
+    const startTime = performance.now();
+    const config = getConfig();
+    const repository = new IntentRepository();
+    const auditService = createAuditService();
+    const errors = [];
+    let eventsDeleted = 0;
+    let intentsPurged = 0;
+    let auditCleanup;
+    // Delete old events based on retention policy
+    try {
+        eventsDeleted = await repository.deleteOldEvents(config.intent.eventRetentionDays);
+        logger.info({ eventsDeleted, retentionDays: config.intent.eventRetentionDays }, 'Old events deleted');
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : 'Unknown error';
+        errors.push(`Event cleanup failed: ${message}`);
+        logger.error({ error }, 'Failed to delete old events');
+    }
+    // Purge soft-deleted intents past retention period
+    try {
+        intentsPurged = await repository.purgeDeletedIntents(config.intent.softDeleteRetentionDays);
+        logger.info({ intentsPurged, retentionDays: config.intent.softDeleteRetentionDays }, 'Soft-deleted intents purged');
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : 'Unknown error';
+        errors.push(`Intent purge failed: ${message}`);
+        logger.error({ error }, 'Failed to purge soft-deleted intents');
+    }
+    // Run audit cleanup (archive + purge based on retention settings)
+    try {
+        auditCleanup = await auditService.runCleanup({
+            archiveAfterDays: config.audit.archiveAfterDays,
+            retentionDays: config.audit.retentionDays,
+            batchSize: config.audit.cleanupBatchSize,
+            archiveEnabled: config.audit.archiveEnabled,
+        });
+        if (auditCleanup.errors.length > 0) {
+            errors.push(...auditCleanup.errors);
+        }
+        logger.info({
+            auditArchived: auditCleanup.archived.recordsArchived,
+            auditPurged: auditCleanup.purged.recordsPurged,
+            archiveAfterDays: config.audit.archiveAfterDays,
+            retentionDays: config.audit.retentionDays,
+        }, 'Audit cleanup completed');
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : 'Unknown error';
+        errors.push(`Audit cleanup failed: ${message}`);
+        logger.error({ error }, 'Failed to run audit cleanup');
+    }
+    const durationMs = Math.round(performance.now() - startTime);
+    logger.info({
+        eventsDeleted,
+        intentsPurged,
+        auditArchived: auditCleanup?.archived.recordsArchived ?? 0,
+        auditPurged: auditCleanup?.purged.recordsPurged ?? 0,
+        durationMs,
+        errorCount: errors.length,
+    }, 'Cleanup job completed');
+    return {
+        eventsDeleted,
+        intentsPurged,
+        auditCleanup,
+        durationMs,
+        errors,
+    };
+}
+/**
+ * Schedule cleanup job to run at interval
+ * Returns a function to stop the scheduled job
+ */
+export function scheduleCleanup(intervalMs = 24 * 60 * 60 * 1000) {
+    logger.info({ intervalMs }, 'Scheduling cleanup job');
+    const intervalId = setInterval(async () => {
+        try {
+            await runCleanup();
+        }
+        catch (error) {
+            logger.error({ error }, 'Scheduled cleanup failed');
+        }
+    }, intervalMs);
+    // Return cleanup function
+    return () => {
+        clearInterval(intervalId);
+        logger.info('Cleanup job unscheduled');
+    };
+}
+//# sourceMappingURL=cleanup.js.map

package/dist/intent/cleanup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cleanup.js","sourceRoot":"","sources":["../../src/intent/cleanup.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAA2B,MAAM,mBAAmB,CAAC;AAEhF,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAAC,CAAC;AAU7D;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU;IAC9B,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;IACpC,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,UAAU,GAAG,IAAI,gBAAgB,EAAE,CAAC;IAC1C,MAAM,YAAY,GAAG,kBAAkB,EAAE,CAAC;IAC1C,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,IAAI,YAA4C,CAAC;IAEjD,8CAA8C;IAC9C,IAAI,CAAC;QACH,aAAa,GAAG,MAAM,UAAU,CAAC,eAAe,CAC9C,MAAM,CAAC,MAAM,CAAC,kBAAkB,CACjC,CAAC;QACF,MAAM,CAAC,IAAI,CACT,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,kBAAkB,EAAE,EAClE,oBAAoB,CACrB,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;QACzE,MAAM,CAAC,IAAI,CAAC,yBAAyB,OAAO,EAAE,CAAC,CAAC;QAChD,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,6BAA6B,CAAC,CAAC;IACzD,CAAC;IAED,mDAAmD;IACnD,IAAI,CAAC;QACH,aAAa,GAAG,MAAM,UAAU,CAAC,mBAAmB,CAClD,MAAM,CAAC,MAAM,CAAC,uBAAuB,CACtC,CAAC;QACF,MAAM,CAAC,IAAI,CACT,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,uBAAuB,EAAE,EACvE,6BAA6B,CAC9B,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;QACzE,MAAM,CAAC,IAAI,CAAC,wBAAwB,OAAO,EAAE,CAAC,CAAC;QAC/C,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,sCAAsC,CAAC,CAAC;IAClE,CAAC;IAED,kEAAkE;IAClE,IAAI,CAAC;QACH,YAAY,GAAG,MAAM,YAAY,CAAC,UAAU,CAAC;YAC3C,gBAAgB,EAAE,MAAM,CAAC,KAAK,CAAC,gBAAgB;YAC/C,aAAa,EAAE,MAAM,CAAC,KAAK,CAAC,aAAa;YACzC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,gBAAgB;YACxC,cAAc,EAAE,MAAM,CAAC,KAAK,CAAC,cAAc;SAC5C,CAAC,CAAC;QAEH,IAAI,YAAY,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnC,MAAM,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;QACtC,CAAC;QAED,MAAM,CAAC,IAAI,CACT;YACE,aAAa,EAAE,YAAY,CAAC,QAAQ,CAAC,eAAe;YACpD,WAAW,EAAE,YAAY,CAAC,MAAM,CAAC,aAAa;YAC9C,gBAAgB,EAAE,MAAM,CAAC,KAAK,CAAC,gBAAgB;YAC/C,aAAa,EAAE,MAAM,CAAC,KAAK,CAAC,aAAa;SAC1C,EACD,yBAAyB,CAC1B,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;QACzE,MAAM,CAAC,IAAI,CAAC,yBAAyB,OAAO,EAAE,CAAC,CAAC;QAChD,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,6BAA6B,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,CAAC;IAE7D,MAAM,CAAC,IAAI,CACT;QACE,aAAa;QACb,aAAa;QACb,aAAa,EAAE,YAAY,EAAE,QAAQ,CAAC,eAAe,IAAI,CAAC;QAC1D,WAAW,EAAE,YAAY,EAAE,MAAM,CAAC,aAAa,IAAI,CAAC;QACpD,UAAU;QACV,UAAU,EAAE,MAAM,CAAC,MAAM;KAC1B,EACD,uBAAuB,CACxB,CAAC;IAEF,OAAO;QACL,aAAa;QACb,aAAa;QACb,YAAY;QACZ,UAAU;QACV,MAAM;KACP,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,aAAqB,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;IACtE,MAAM,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,EAAE,wBAAwB,CAAC,CAAC;IAEtD,MAAM,UAAU,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QACxC,IAAI,CAAC;YACH,MAAM,UAAU,EAAE,CAAC;QACrB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,0BAA0B,CAAC,CAAC;QACtD,CAAC;IACH,CAAC,EAAE,UAAU,CAAC,CAAC;IAEf,0BAA0B;IAC1B,OAAO,GAAG,EAAE;QACV,aAAa,CAAC,UAAU,CAAC,CAAC;QAC1B,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IACzC,CAAC,CAAC;AACJ,CAAC"}