@vorionsys/security 1.0.0

package/dist/security/alerting/channels/slack.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack.js","sourceRoot":"","sources":["../../../../src/security/alerting/channels/slack.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAEL,YAAY,EACZ,aAAa,GACd,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,gBAAgB,EAA0B,MAAM,gBAAgB,CAAC;AAG1E,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,SAAS,EAAE,qBAAqB,EAAE,CAAC,CAAC;AAyClE,gFAAgF;AAChF,YAAY;AACZ,gFAAgF;AAEhF,MAAM,eAAe,GAAkC;IACrD,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,MAAM;IAC3C,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,SAAS,EAAM,SAAS;IAC9C,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,SAAS,EAAI,SAAS;IAC9C,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,SAAS,EAAO,QAAQ;IAC7C,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,SAAS,EAAM,OAAO;CAC7C,CAAC;AAEF,MAAM,eAAe,GAAkC;IACrD,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,kBAAkB;IAC5C,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,WAAW;IACjC,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,uBAAuB;IAC/C,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,sBAAsB;IAC3C,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,QAAQ;CAC/B,CAAC;AAEF,MAAM,eAAe,GAAG,KAAK,CAAC;AAC9B,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAE9B,gFAAgF;AAChF,0BAA0B;AAC1B,gFAAgF;AAEhF;;GAEG;AACH,MAAM,OAAO,iBAAkB,SAAQ,gBAAgB;IAClC,WAAW,GAAG,YAAY,CAAC,KAAK,CAAC;IACjC,WAAW,GAAG,OAAO,CAAC;IACb,MAAM,GAAG,MAAM,CAAC;IAE3B,UAAU,CAAS;IACnB,cAAc,CAAS;IACvB,QAAQ,CAAS;IACjB,SAAS,CAAS;IAClB,kBAAkB,CAAU;IAE7C,YAAY,MAA0B;QACpC,KAAK,CAAC;YACJ,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,eAAe;YAC1C,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,mBAAmB;SACrD,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACnD,CAAC;QAED,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;QACpC,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC,cAAc,IAAI,EAAE,CAAC;QAClD,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,oBAAoB,CAAC;QACxD,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,UAAU,CAAC;QAChD,IAAI,CAAC,kBAAkB,GAAG,MAAM,CAAC,kBAAkB,IAAI,IAAI,CAAC;QAE5D,MAAM,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IAC/C,CAAC;IAED;;OAEG;IACO,KAAK,CAAC,YAAY,CAAC,KAAoB;QAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAE1C,MAAM,IAAI,CAAC,kBAAkB,CAAC;YAC5B,GAAG,EAAE,IAAI,CAAC,UAAU;YACpB,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,OAAO;SACd,CAAC,CAAC;QAEH,0DAA0D;QAC1D,OAAO,EAAE,SAAS,EAAE,SAAS,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC;IAC9C,CAAC;IAED;;OAEG;IACK,aAAa,CAAC,KAAoB;QACxC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAyB,CAAC;QACjD,MAAM,KAAK,GAAG,eAAe,CAAC,QAAQ,CAAC,IAAI,eAAe,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QAC/E,MAAM,KAAK,GAAG,eAAe,CAAC,QAAQ,CAAC,IAAI,eAAe,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QAE/E,MAAM,MAAM,GAA8B;YACxC;gBACE,KAAK,EAAE,UAAU;gBACjB,KAAK,EAAE,GAAG,KAAK,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE;gBACjD,KAAK,EAAE,IAAI;aACZ;YACD;gBACE,KAAK,EAAE,MAAM;gBACb,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE;gBAClD,KAAK,EAAE,IAAI;aACZ;YACD;gBACE,KAAK,EAAE,QAAQ;gBACf,KAAK,EAAE,KAAK,CAAC,MAAM;gBACnB,KAAK,EAAE,IAAI;aACZ;YACD;gBACE,KAAK,EAAE,MAAM;gBACb,KAAK,EAAE,UAAU,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,kCAAkC,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE,GAAG;gBAC/H,KAAK,EAAE,IAAI;aACZ;SACF,CAAC;QAEF,qBAAqB;QACrB,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC5B,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;gBACzB,MAAM,CAAC,IAAI,CAAC;oBACV,KAAK,EAAE,SAAS;oBAChB,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM;oBAC3B,KAAK,EAAE,IAAI;iBACZ,CAAC,CAAC;YACL,CAAC;YACD,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;gBAC5B,MAAM,CAAC,IAAI,CAAC;oBACV,KAAK,EAAE,YAAY;oBACnB,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS;oBAC9B,KAAK,EAAE,IAAI;iBACZ,CAAC,CAAC;YACL,CAAC;YACD,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC;gBACpC,MAAM,CAAC,IAAI,CAAC;oBACV,KAAK,EAAE,UAAU;oBACjB,KAAK,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE;oBACtF,KAAK,EAAE,IAAI;iBACZ,CAAC,CAAC;YACL,CAAC;YACD,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;gBAC3B,MAAM,CAAC,IAAI,CAAC;oBACV,KAAK,EAAE,UAAU;oBACjB,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ;oBAC7B,KAAK,EAAE,IAAI;iBACZ,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,mCAAmC;QACnC,IAAI,KAAK,CAAC,gBAAgB,IAAI,KAAK,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChE,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAE,mBAAmB;gBAC1B,KAAK,EAAE,KAAK,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;gBAC3D,KAAK,EAAE,KAAK;aACb,CAAC,CAAC;QACL,CAAC;QAED,sBAAsB;QACtB,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxC,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAE,MAAM;gBACb,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;gBAChD,KAAK,EAAE,KAAK;aACb,CAAC,CAAC;QACL,CAAC;QAED,MAAM,UAAU,GAAoB;YAClC,KAAK;YACL,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,IAAI,EAAE,KAAK,CAAC,OAAO;YACnB,MAAM;YACN,MAAM,EAAE,aAAa,KAAK,CAAC,EAAE,EAAE;YAC/B,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC;SACjD,CAAC;QAEF,MAAM,OAAO,GAAiB;YAC5B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,UAAU,EAAE,IAAI,CAAC,SAAS;YAC1B,IAAI,EAAE,GAAG,KAAK,qBAAqB,KAAK,CAAC,KAAK,GAAG;YACjD,WAAW,EAAE,CAAC,UAAU,CAAC;SAC1B,CAAC;QAEF,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC;QACxC,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI;QACR,IAAI,CAAC;YACH,MAAM,WAAW,GAAiB;gBAChC,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,UAAU,EAAE,IAAI,CAAC,SAAS;gBAC1B,IAAI,EAAE,4DAA4D;gBAClE,WAAW,EAAE,CAAC;wBACZ,KAAK,EAAE,SAAS;wBAChB,KAAK,EAAE,cAAc;wBACrB,IAAI,EAAE,2DAA2D;wBACjE,MAAM,EAAE;4BACN,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE;4BACpD,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE;yBAChE;wBACD,MAAM,EAAE,uBAAuB;wBAC/B,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;qBAClC,CAAC;aACH,CAAC;YAEF,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;gBACxB,WAAW,CAAC,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC;YAC5C,CAAC;YAED,MAAM,IAAI,CAAC,kBAAkB,CAAC;gBAC5B,GAAG,EAAE,IAAI,CAAC,UAAU;gBACpB,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,WAAW;aAClB,CAAC,CAAC;YAEH,MAAM,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;YAChD,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,8BAA8B,CAAC,CAAC;YACxD,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAA0B;IAC3D,OAAO,IAAI,iBAAiB,CAAC,MAAM,CAAC,CAAC;AACvC,CAAC"}

package/dist/security/alerting/channels/sns.d.ts

@@ -0,0 +1,87 @@
+/**
+ * AWS SNS Alert Channel
+ *
+ * Sends security alerts to AWS SNS for scalable, distributed delivery.
+ * Supports topic publishing for fan-out to multiple subscribers.
+ *
+ * @packageDocumentation
+ * @module security/alerting/channels/sns
+ */
+import { type SecurityAlert, type AlertDeliveryResult, AlertSeverity } from '../types.js';
+import { BaseAlertChannel, type BaseChannelConfig } from './base.js';
+import type { SendInternalResult } from './base.js';
+export interface SNSChannelConfig extends BaseChannelConfig {
+    /** AWS region */
+    region: string;
+    /** SNS topic ARN */
+    topicArn: string;
+    /** AWS credentials (optional - uses default credential chain if not provided) */
+    credentials?: {
+        accessKeyId: string;
+        secretAccessKey: string;
+        sessionToken?: string;
+    };
+    /** Custom endpoint URL (for local development or testing) */
+    endpoint?: string;
+    /** Include message attributes for filtering */
+    includeMessageAttributes?: boolean;
+    /** Custom subject prefix */
+    subjectPrefix?: string;
+}
+/**
+ * AWS SNS integration for security alerts
+ */
+export declare class SNSAlertChannel extends BaseAlertChannel {
+    protected readonly channelType: "sns";
+    protected readonly channelName = "SNS";
+    protected readonly logger: import("pino").Logger<never>;
+    private readonly region;
+    private topicArn;
+    private readonly credentials?;
+    private readonly endpoint?;
+    private readonly includeMessageAttributes;
+    private readonly subjectPrefix;
+    private snsClient;
+    constructor(config: SNSChannelConfig);
+    /**
+     * Initialize the SNS client
+     */
+    private initClient;
+    /**
+     * Send an alert to SNS
+     */
+    protected sendInternal(alert: SecurityAlert): Promise<SendInternalResult>;
+    /**
+     * Publish message to SNS topic
+     */
+    private publishMessage;
+    /**
+     * Format alert as message string
+     */
+    private formatMessage;
+    /**
+     * Build SNS message attributes for filtering
+     */
+    private buildMessageAttributes;
+    /**
+     * Get numeric severity level for filtering
+     */
+    private getSeverityLevel;
+    /**
+     * Publish to multiple topics based on severity
+     */
+    sendToSeverityTopics(alert: SecurityAlert, topicMapping: Partial<Record<AlertSeverity, string>>): Promise<AlertDeliveryResult[]>;
+    /**
+     * Test the SNS connection
+     */
+    test(): Promise<boolean>;
+    /**
+     * Get the topic ARN
+     */
+    getTopicArn(): string;
+}
+/**
+ * Create a new SNS alert channel
+ */
+export declare function createSNSChannel(config: SNSChannelConfig): SNSAlertChannel;
+//# sourceMappingURL=sns.d.ts.map

package/dist/security/alerting/channels/sns.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sns.d.ts","sourceRoot":"","sources":["../../../../src/security/alerting/channels/sns.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EACL,KAAK,aAAa,EAClB,KAAK,mBAAmB,EAExB,aAAa,EACd,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,gBAAgB,EAAE,KAAK,iBAAiB,EAAE,MAAM,WAAW,CAAC;AACrE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAQpD,MAAM,WAAW,gBAAiB,SAAQ,iBAAiB;IACzD,iBAAiB;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,oBAAoB;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,iFAAiF;IACjF,WAAW,CAAC,EAAE;QACZ,WAAW,EAAE,MAAM,CAAC;QACpB,eAAe,EAAE,MAAM,CAAC;QACxB,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,CAAC;IACF,6DAA6D;IAC7D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,+CAA+C;IAC/C,wBAAwB,CAAC,EAAE,OAAO,CAAC;IACnC,4BAA4B;IAC5B,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAuCD;;GAEG;AACH,qBAAa,eAAgB,SAAQ,gBAAgB;IACnD,SAAS,CAAC,QAAQ,CAAC,WAAW,QAAoB;IAClD,SAAS,CAAC,QAAQ,CAAC,WAAW,SAAS;IACvC,mBAA4B,MAAM,+BAAU;IAE5C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAkC;IAC/D,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAAU;IACnD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,SAAS,CAAmC;gBAExC,MAAM,EAAE,gBAAgB;IA0BpC;;OAEG;YACW,UAAU;IAiBxB;;OAEG;cACa,YAAY,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAK/E;;OAEG;YACW,cAAc;IA4B5B;;OAEG;IACH,OAAO,CAAC,aAAa;IAuBrB;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAqD9B;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAWxB;;OAEG;IACG,oBAAoB,CACxB,KAAK,EAAE,aAAa,EACpB,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,GACnD,OAAO,CAAC,mBAAmB,EAAE,CAAC;IAsBjC;;OAEG;IACG,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC;IA4B9B;;OAEG;IACH,WAAW,IAAI,MAAM;CAGtB;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,GAAG,eAAe,CAE1E"}

package/dist/security/alerting/channels/sns.js

@@ -0,0 +1,251 @@
+/**
+ * AWS SNS Alert Channel
+ *
+ * Sends security alerts to AWS SNS for scalable, distributed delivery.
+ * Supports topic publishing for fan-out to multiple subscribers.
+ *
+ * @packageDocumentation
+ * @module security/alerting/channels/sns
+ */
+import { createLogger } from '../../../common/logger.js';
+import { AlertChannel, AlertSeverity, } from '../types.js';
+import { BaseAlertChannel } from './base.js';
+const logger = createLogger({ component: 'sns-alert-channel' });
+// =============================================================================
+// Constants
+// =============================================================================
+const DEFAULT_TIMEOUT = 10000;
+const DEFAULT_MAX_RETRIES = 3;
+// =============================================================================
+// SNSAlertChannel Class
+// =============================================================================
+/**
+ * AWS SNS integration for security alerts
+ */
+export class SNSAlertChannel extends BaseAlertChannel {
+    channelType = AlertChannel.SNS;
+    channelName = 'SNS';
+    logger = logger;
+    region;
+    topicArn;
+    credentials;
+    endpoint;
+    includeMessageAttributes;
+    subjectPrefix;
+    snsClient = null;
+    constructor(config) {
+        super({
+            timeout: config.timeout ?? DEFAULT_TIMEOUT,
+            maxRetries: config.maxRetries ?? DEFAULT_MAX_RETRIES,
+        });
+        if (!config.region) {
+            throw new Error('AWS region is required');
+        }
+        if (!config.topicArn) {
+            throw new Error('SNS topic ARN is required');
+        }
+        this.region = config.region;
+        this.topicArn = config.topicArn;
+        this.credentials = config.credentials;
+        this.endpoint = config.endpoint;
+        this.includeMessageAttributes = config.includeMessageAttributes ?? true;
+        this.subjectPrefix = config.subjectPrefix ?? '[Security Alert]';
+        logger.info({ region: config.region, topicArn: config.topicArn }, 'SNSAlertChannel initialized');
+    }
+    /**
+     * Initialize the SNS client
+     */
+    async initClient() {
+        if (this.snsClient)
+            return;
+        try {
+            const { SNSClient } = await import('@aws-sdk/client-sns');
+            this.snsClient = new SNSClient({
+                region: this.region,
+                credentials: this.credentials,
+                endpoint: this.endpoint,
+            });
+        }
+        catch (error) {
+            logger.error({ error }, 'Failed to initialize SNS client');
+            throw error;
+        }
+    }
+    /**
+     * Send an alert to SNS
+     */
+    async sendInternal(alert) {
+        await this.initClient();
+        return this.publishMessage(alert);
+    }
+    /**
+     * Publish message to SNS topic
+     */
+    async publishMessage(alert) {
+        const { PublishCommand } = await import('@aws-sdk/client-sns');
+        const subject = `${this.subjectPrefix} [${alert.severity.toUpperCase()}] ${alert.title}`.slice(0, 100);
+        const message = this.formatMessage(alert);
+        const params = {
+            TopicArn: this.topicArn,
+            Subject: subject,
+            Message: message,
+        };
+        // Add message attributes for filtering
+        if (this.includeMessageAttributes) {
+            params.MessageAttributes = this.buildMessageAttributes(alert);
+        }
+        const command = new PublishCommand(params);
+        if (!this.snsClient) {
+            throw new Error('SNS client not initialized');
+        }
+        const response = await this.snsClient.send(command);
+        return { messageId: response.MessageId ?? `sns-${Date.now()}` };
+    }
+    /**
+     * Format alert as message string
+     */
+    formatMessage(alert) {
+        const data = {
+            version: '1.0',
+            alert: {
+                id: alert.id,
+                severity: alert.severity,
+                type: alert.type,
+                title: alert.title,
+                message: alert.message,
+                source: alert.source,
+                timestamp: alert.timestamp.toISOString(),
+                fingerprint: alert.fingerprint,
+                context: alert.context,
+                suggestedActions: alert.suggestedActions,
+                tags: alert.tags,
+                acknowledged: alert.acknowledged,
+                resolved: alert.resolved,
+            },
+        };
+        return JSON.stringify(data);
+    }
+    /**
+     * Build SNS message attributes for filtering
+     */
+    buildMessageAttributes(alert) {
+        const attributes = {
+            severity: {
+                DataType: 'String',
+                StringValue: alert.severity,
+            },
+            type: {
+                DataType: 'String',
+                StringValue: alert.type,
+            },
+            source: {
+                DataType: 'String',
+                StringValue: alert.source,
+            },
+            alertId: {
+                DataType: 'String',
+                StringValue: alert.id,
+            },
+        };
+        // Add context attributes if present
+        if (alert.context.tenantId) {
+            attributes.tenantId = {
+                DataType: 'String',
+                StringValue: alert.context.tenantId,
+            };
+        }
+        if (alert.context.userId) {
+            attributes.userId = {
+                DataType: 'String',
+                StringValue: alert.context.userId,
+            };
+        }
+        // Add severity level as number for comparison filters
+        const severityLevel = this.getSeverityLevel(alert.severity);
+        attributes.severityLevel = {
+            DataType: 'Number',
+            StringValue: severityLevel.toString(),
+        };
+        // Add tags as comma-separated string
+        if (alert.tags && alert.tags.length > 0) {
+            attributes.tags = {
+                DataType: 'String',
+                StringValue: alert.tags.join(','),
+            };
+        }
+        return attributes;
+    }
+    /**
+     * Get numeric severity level for filtering
+     */
+    getSeverityLevel(severity) {
+        const levels = {
+            [AlertSeverity.CRITICAL]: 5,
+            [AlertSeverity.HIGH]: 4,
+            [AlertSeverity.MEDIUM]: 3,
+            [AlertSeverity.LOW]: 2,
+            [AlertSeverity.INFO]: 1,
+        };
+        return levels[severity] ?? 0;
+    }
+    /**
+     * Publish to multiple topics based on severity
+     */
+    async sendToSeverityTopics(alert, topicMapping) {
+        const results = [];
+        // Always send to main topic
+        results.push(await this.send(alert));
+        // Also send to severity-specific topic if configured
+        const severity = alert.severity;
+        const severityTopic = topicMapping[severity];
+        if (severityTopic && severityTopic !== this.topicArn) {
+            const originalTopic = this.topicArn;
+            this.topicArn = severityTopic;
+            try {
+                results.push(await this.send(alert));
+            }
+            finally {
+                this.topicArn = originalTopic;
+            }
+        }
+        return results;
+    }
+    /**
+     * Test the SNS connection
+     */
+    async test() {
+        try {
+            await this.initClient();
+            // We can't easily test without actually publishing
+            // So we verify the client is initialized and topic exists
+            const { GetTopicAttributesCommand } = await import('@aws-sdk/client-sns');
+            const params = {
+                TopicArn: this.topicArn,
+            };
+            const command = new GetTopicAttributesCommand(params);
+            if (!this.snsClient) {
+                throw new Error('SNS client not initialized');
+            }
+            await this.snsClient.send(command);
+            logger.info('SNS connection test successful');
+            return true;
+        }
+        catch (error) {
+            logger.error({ error }, 'SNS connection test failed');
+            return false;
+        }
+    }
+    /**
+     * Get the topic ARN
+     */
+    getTopicArn() {
+        return this.topicArn;
+    }
+}
+/**
+ * Create a new SNS alert channel
+ */
+export function createSNSChannel(config) {
+    return new SNSAlertChannel(config);
+}
+//# sourceMappingURL=sns.js.map

package/dist/security/alerting/channels/sns.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sns.js","sourceRoot":"","sources":["../../../../src/security/alerting/channels/sns.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAGL,YAAY,EACZ,aAAa,GACd,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,gBAAgB,EAA0B,MAAM,WAAW,CAAC;AAGrE,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,SAAS,EAAE,mBAAmB,EAAE,CAAC,CAAC;AAmDhE,gFAAgF;AAChF,YAAY;AACZ,gFAAgF;AAEhF,MAAM,eAAe,GAAG,KAAK,CAAC;AAC9B,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAE9B,gFAAgF;AAChF,wBAAwB;AACxB,gFAAgF;AAEhF;;GAEG;AACH,MAAM,OAAO,eAAgB,SAAQ,gBAAgB;IAChC,WAAW,GAAG,YAAY,CAAC,GAAG,CAAC;IAC/B,WAAW,GAAG,KAAK,CAAC;IACX,MAAM,GAAG,MAAM,CAAC;IAE3B,MAAM,CAAS;IACxB,QAAQ,CAAS;IACR,WAAW,CAAmC;IAC9C,QAAQ,CAAU;IAClB,wBAAwB,CAAU;IAClC,aAAa,CAAS;IAC/B,SAAS,GAA8B,IAAI,CAAC;IAEpD,YAAY,MAAwB;QAClC,KAAK,CAAC;YACJ,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,eAAe;YAC1C,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,mBAAmB;SACrD,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC5C,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC/C,CAAC;QAED,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC5B,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QAChC,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;QACtC,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QAChC,IAAI,CAAC,wBAAwB,GAAG,MAAM,CAAC,wBAAwB,IAAI,IAAI,CAAC;QACxE,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,aAAa,IAAI,kBAAkB,CAAC;QAEhE,MAAM,CAAC,IAAI,CACT,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,EACpD,6BAA6B,CAC9B,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,UAAU;QACtB,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO;QAE3B,IAAI,CAAC;YACH,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;YAE1D,IAAI,CAAC,SAAS,GAAG,IAAI,SAAS,CAAC;gBAC7B,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,QAAQ,EAAE,IAAI,CAAC,QAAQ;aACxB,CAAuB,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,iCAAiC,CAAC,CAAC;YAC3D,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACO,KAAK,CAAC,YAAY,CAAC,KAAoB;QAC/C,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACxB,OAAO,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,cAAc,CAAC,KAAoB;QAC/C,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;QAE/D,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,aAAa,KAAK,KAAK,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACvG,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAE1C,MAAM,MAAM,GAAwB;YAClC,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,OAAO,EAAE,OAAO;YAChB,OAAO,EAAE,OAAO;SACjB,CAAC;QAEF,uCAAuC;QACvC,IAAI,IAAI,CAAC,wBAAwB,EAAE,CAAC;YAClC,MAAM,CAAC,iBAAiB,GAAG,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC;QAChE,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,cAAc,CAAC,MAAM,CAAC,CAAC;QAE3C,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAChD,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAEpD,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,IAAI,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC;IAClE,CAAC;IAED;;OAEG;IACK,aAAa,CAAC,KAAoB;QACxC,MAAM,IAAI,GAAG;YACX,OAAO,EAAE,KAAK;YACd,KAAK,EAAE;gBACL,EAAE,EAAE,KAAK,CAAC,EAAE;gBACZ,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE;gBACxC,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;gBACxC,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,QAAQ,EAAE,KAAK,CAAC,QAAQ;aACzB;SACF,CAAC;QAEF,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAED;;OAEG;IACK,sBAAsB,CAAC,KAAoB;QACjD,MAAM,UAAU,GAAyB;YACvC,QAAQ,EAAE;gBACR,QAAQ,EAAE,QAAQ;gBAClB,WAAW,EAAE,KAAK,CAAC,QAAQ;aAC5B;YACD,IAAI,EAAE;gBACJ,QAAQ,EAAE,QAAQ;gBAClB,WAAW,EAAE,KAAK,CAAC,IAAI;aACxB;YACD,MAAM,EAAE;gBACN,QAAQ,EAAE,QAAQ;gBAClB,WAAW,EAAE,KAAK,CAAC,MAAM;aAC1B;YACD,OAAO,EAAE;gBACP,QAAQ,EAAE,QAAQ;gBAClB,WAAW,EAAE,KAAK,CAAC,EAAE;aACtB;SACF,CAAC;QAEF,oCAAoC;QACpC,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YAC3B,UAAU,CAAC,QAAQ,GAAG;gBACpB,QAAQ,EAAE,QAAQ;gBAClB,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ;aACpC,CAAC;QACJ,CAAC;QAED,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YACzB,UAAU,CAAC,MAAM,GAAG;gBAClB,QAAQ,EAAE,QAAQ;gBAClB,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM;aAClC,CAAC;QACJ,CAAC;QAED,sDAAsD;QACtD,MAAM,aAAa,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,QAAyB,CAAC,CAAC;QAC7E,UAAU,CAAC,aAAa,GAAG;YACzB,QAAQ,EAAE,QAAQ;YAClB,WAAW,EAAE,aAAa,CAAC,QAAQ,EAAE;SACtC,CAAC;QAEF,qCAAqC;QACrC,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxC,UAAU,CAAC,IAAI,GAAG;gBAChB,QAAQ,EAAE,QAAQ;gBAClB,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;aAClC,CAAC;QACJ,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;OAEG;IACK,gBAAgB,CAAC,QAAuB;QAC9C,MAAM,MAAM,GAAkC;YAC5C,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3B,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;YACzB,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;SACxB,CAAC;QACF,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,oBAAoB,CACxB,KAAoB,EACpB,YAAoD;QAEpD,MAAM,OAAO,GAA0B,EAAE,CAAC;QAE1C,4BAA4B;QAC5B,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAErC,qDAAqD;QACrD,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAyB,CAAC;QACjD,MAAM,aAAa,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,aAAa,IAAI,aAAa,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;YACrD,MAAM,aAAa,GAAG,IAAI,CAAC,QAAQ,CAAC;YACpC,IAAI,CAAC,QAAQ,GAAG,aAAa,CAAC;YAC9B,IAAI,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YACvC,CAAC;oBAAS,CAAC;gBACT,IAAI,CAAC,QAAQ,GAAG,aAAa,CAAC;YAChC,CAAC;QACH,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI;QACR,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;YAExB,mDAAmD;YACnD,0DAA0D;YAC1D,MAAM,EAAE,yBAAyB,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;YAE1E,MAAM,MAAM,GAAmC;gBAC7C,QAAQ,EAAE,IAAI,CAAC,QAAQ;aACxB,CAAC;YAEF,MAAM,OAAO,GAAG,IAAI,yBAAyB,CAAC,MAAM,CAAC,CAAC;YAEtD,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;YAChD,CAAC;YAED,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAEnC,MAAM,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;YAC9C,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,4BAA4B,CAAC,CAAC;YACtD,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;OAEG;IACH,WAAW;QACT,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAwB;IACvD,OAAO,IAAI,eAAe,CAAC,MAAM,CAAC,CAAC;AACrC,CAAC"}

package/dist/security/alerting/channels/webhook.d.ts

@@ -0,0 +1,92 @@
+/**
+ * Generic Webhook Alert Channel
+ *
+ * Sends security alerts to any webhook endpoint.
+ * Supports custom headers, authentication, and payload transformation.
+ *
+ * @packageDocumentation
+ * @module security/alerting/channels/webhook
+ */
+import { type SecurityAlert } from '../types.js';
+import { HttpAlertChannel, type HttpChannelConfig } from './http-base.js';
+import type { SendInternalResult } from './base.js';
+export interface WebhookChannelConfig extends HttpChannelConfig {
+    /** Webhook URL */
+    url: string;
+    /** HTTP method (default: POST) */
+    method?: 'POST' | 'PUT' | 'PATCH';
+    /** Custom headers */
+    headers?: Record<string, string>;
+    /** Authentication configuration */
+    auth?: {
+        type: 'basic' | 'bearer' | 'api-key' | 'hmac';
+        /** For basic auth: username */
+        username?: string;
+        /** For basic auth: password; for bearer: token; for api-key: key */
+        credentials?: string;
+        /** For api-key: header name (default: X-API-Key) */
+        headerName?: string;
+        /** For HMAC: secret key */
+        secret?: string;
+        /** For HMAC: algorithm (default: sha256) */
+        algorithm?: 'sha256' | 'sha384' | 'sha512';
+        /** For HMAC: header name (default: X-Signature) */
+        signatureHeader?: string;
+    };
+    /** Custom payload transformer */
+    transformPayload?: (alert: SecurityAlert) => unknown;
+    /** Content type (default: application/json) */
+    contentType?: string;
+    /** Include timestamp header */
+    includeTimestamp?: boolean;
+    /** Timestamp header name (default: X-Timestamp) */
+    timestampHeader?: string;
+    /** Verify SSL (default: true) */
+    verifySSL?: boolean;
+}
+/**
+ * Generic webhook integration for security alerts
+ */
+export declare class WebhookAlertChannel extends HttpAlertChannel {
+    protected readonly channelType: "webhook";
+    protected readonly channelName = "Webhook";
+    protected readonly logger: import("pino").Logger<never>;
+    private readonly url;
+    private readonly method;
+    private readonly customHeaders;
+    private readonly auth?;
+    private readonly transformPayload?;
+    private readonly contentType;
+    private readonly includeTimestamp;
+    private readonly timestampHeader;
+    constructor(config: WebhookChannelConfig);
+    /**
+     * Send an alert to the webhook
+     */
+    protected sendInternal(alert: SecurityAlert): Promise<SendInternalResult>;
+    /**
+     * Add authentication headers
+     */
+    private addAuthHeaders;
+    /**
+     * Test the webhook connection
+     */
+    test(): Promise<boolean>;
+    /**
+     * Get the webhook URL (masked for debugging)
+     */
+    getUrl(): string;
+    /**
+     * Mask sensitive parts of URL
+     */
+    private maskUrl;
+}
+/**
+ * Create a new webhook alert channel
+ */
+export declare function createWebhookChannel(config: WebhookChannelConfig): WebhookAlertChannel;
+/**
+ * Create a webhook channel with HMAC signing
+ */
+export declare function createSignedWebhookChannel(url: string, secret: string, options?: Partial<WebhookChannelConfig>): WebhookAlertChannel;
+//# sourceMappingURL=webhook.d.ts.map

package/dist/security/alerting/channels/webhook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook.d.ts","sourceRoot":"","sources":["../../../../src/security/alerting/channels/webhook.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EACL,KAAK,aAAa,EAEnB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,gBAAgB,EAAE,KAAK,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAC1E,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AASpD,MAAM,WAAW,oBAAqB,SAAQ,iBAAiB;IAC7D,kBAAkB;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,kCAAkC;IAClC,MAAM,CAAC,EAAE,MAAM,GAAG,KAAK,GAAG,OAAO,CAAC;IAClC,qBAAqB;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,mCAAmC;IACnC,IAAI,CAAC,EAAE;QACL,IAAI,EAAE,OAAO,GAAG,QAAQ,GAAG,SAAS,GAAG,MAAM,CAAC;QAC9C,+BAA+B;QAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,oEAAoE;QACpE,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,oDAAoD;QACpD,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,2BAA2B;QAC3B,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,4CAA4C;QAC5C,SAAS,CAAC,EAAE,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAC;QAC3C,mDAAmD;QACnD,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B,CAAC;IACF,iCAAiC;IACjC,gBAAgB,CAAC,EAAE,CAAC,KAAK,EAAE,aAAa,KAAK,OAAO,CAAC;IACrD,+CAA+C;IAC/C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,+BAA+B;IAC/B,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,mDAAmD;IACnD,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,iCAAiC;IACjC,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAyBD;;GAEG;AACH,qBAAa,mBAAoB,SAAQ,gBAAgB;IACvD,SAAS,CAAC,QAAQ,CAAC,WAAW,YAAwB;IACtD,SAAS,CAAC,QAAQ,CAAC,WAAW,aAAa;IAC3C,mBAA4B,MAAM,+BAAU;IAE5C,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAC7B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA2B;IAClD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAyB;IACvD,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAA+B;IACrD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAA2C;IAC7E,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAU;IAC3C,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAS;gBAE7B,MAAM,EAAE,oBAAoB;IAsBxC;;OAEG;cACa,YAAY,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,kBAAkB,CAAC;IA6C/E;;OAEG;IACH,OAAO,CAAC,cAAc;IAoCtB;;OAEG;IACG,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC;IA8B9B;;OAEG;IACH,MAAM,IAAI,MAAM;IAIhB;;OAEG;IACH,OAAO,CAAC,OAAO;CAWhB;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,oBAAoB,GAAG,mBAAmB,CAEtF;AAED;;GAEG;AACH,wBAAgB,0BAA0B,CACxC,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,OAAO,CAAC,oBAAoB,CAAC,GACtC,mBAAmB,CAUrB"}

package/dist/security/alerting/channels/webhook.js

@@ -0,0 +1,203 @@
+/**
+ * Generic Webhook Alert Channel
+ *
+ * Sends security alerts to any webhook endpoint.
+ * Supports custom headers, authentication, and payload transformation.
+ *
+ * @packageDocumentation
+ * @module security/alerting/channels/webhook
+ */
+import { createLogger } from '../../../common/logger.js';
+import { AlertChannel, } from '../types.js';
+import { HttpAlertChannel } from './http-base.js';
+import { createHmac } from 'crypto';
+const logger = createLogger({ component: 'webhook-alert-channel' });
+// =============================================================================
+// Constants
+// =============================================================================
+const DEFAULT_TIMEOUT = 10000;
+const DEFAULT_MAX_RETRIES = 3;
+const PAYLOAD_VERSION = '1.0';
+// =============================================================================
+// WebhookAlertChannel Class
+// =============================================================================
+/**
+ * Generic webhook integration for security alerts
+ */
+export class WebhookAlertChannel extends HttpAlertChannel {
+    channelType = AlertChannel.WEBHOOK;
+    channelName = 'Webhook';
+    logger = logger;
+    url;
+    method;
+    customHeaders;
+    auth;
+    transformPayload;
+    contentType;
+    includeTimestamp;
+    timestampHeader;
+    constructor(config) {
+        super({
+            timeout: config.timeout ?? DEFAULT_TIMEOUT,
+            maxRetries: config.maxRetries ?? DEFAULT_MAX_RETRIES,
+        });
+        if (!config.url) {
+            throw new Error('Webhook URL is required');
+        }
+        this.url = config.url;
+        this.method = config.method ?? 'POST';
+        this.customHeaders = config.headers ?? {};
+        this.auth = config.auth;
+        this.transformPayload = config.transformPayload;
+        this.contentType = config.contentType ?? 'application/json';
+        this.includeTimestamp = config.includeTimestamp ?? true;
+        this.timestampHeader = config.timestampHeader ?? 'X-Timestamp';
+        logger.info({ url: this.maskUrl(config.url) }, 'WebhookAlertChannel initialized');
+    }
+    /**
+     * Send an alert to the webhook
+     */
+    async sendInternal(alert) {
+        const timestamp = new Date().toISOString();
+        // Build payload
+        let payload;
+        if (this.transformPayload) {
+            payload = this.transformPayload(alert);
+        }
+        else {
+            payload = {
+                alert,
+                timestamp,
+                version: PAYLOAD_VERSION,
+            };
+        }
+        const body = JSON.stringify(payload);
+        // Build headers
+        const headers = {
+            'Content-Type': this.contentType,
+            ...this.customHeaders,
+        };
+        // Add timestamp header
+        if (this.includeTimestamp) {
+            headers[this.timestampHeader] = timestamp;
+        }
+        // Add authentication
+        this.addAuthHeaders(headers, body);
+        // Make request
+        const response = await this.httpRequestOrThrow({
+            url: this.url,
+            method: this.method,
+            headers,
+            body: payload,
+        });
+        // Try to get message ID from response
+        const messageId = response.data?.id || response.data?.messageId || `webhook-${Date.now()}`;
+        return { messageId };
+    }
+    /**
+     * Add authentication headers
+     */
+    addAuthHeaders(headers, body) {
+        if (!this.auth)
+            return;
+        const { type, credentials, username, headerName, secret, algorithm, signatureHeader } = this.auth;
+        switch (type) {
+            case 'basic':
+                if (username && credentials) {
+                    const encoded = Buffer.from(`${username}:${credentials}`).toString('base64');
+                    headers['Authorization'] = `Basic ${encoded}`;
+                }
+                break;
+            case 'bearer':
+                if (credentials) {
+                    headers['Authorization'] = `Bearer ${credentials}`;
+                }
+                break;
+            case 'api-key':
+                if (credentials) {
+                    headers[headerName ?? 'X-API-Key'] = credentials;
+                }
+                break;
+            case 'hmac':
+                if (secret) {
+                    const hmac = createHmac(algorithm ?? 'sha256', secret);
+                    hmac.update(body);
+                    const signature = hmac.digest('hex');
+                    headers[signatureHeader ?? 'X-Signature'] = signature;
+                }
+                break;
+        }
+    }
+    /**
+     * Test the webhook connection
+     */
+    async test() {
+        try {
+            const testAlert = {
+                id: 'test-' + Date.now(),
+                severity: 'info',
+                type: 'custom',
+                title: 'Webhook Connection Test',
+                message: 'This is a test message from the security alerting system.',
+                context: {},
+                timestamp: new Date(),
+                fingerprint: `test-${Date.now()}`,
+                source: 'webhook-test',
+                acknowledged: false,
+                resolved: false,
+            };
+            const result = await this.send(testAlert);
+            if (result.success) {
+                logger.info('Webhook connection test successful');
+                return true;
+            }
+            return false;
+        }
+        catch (error) {
+            logger.error({ error }, 'Webhook connection test failed');
+            return false;
+        }
+    }
+    /**
+     * Get the webhook URL (masked for debugging)
+     */
+    getUrl() {
+        return this.maskUrl(this.url);
+    }
+    /**
+     * Mask sensitive parts of URL
+     */
+    maskUrl(urlString) {
+        try {
+            const url = new URL(urlString);
+            if (url.password) {
+                url.password = '***';
+            }
+            return url.toString();
+        }
+        catch {
+            return '[invalid url]';
+        }
+    }
+}
+/**
+ * Create a new webhook alert channel
+ */
+export function createWebhookChannel(config) {
+    return new WebhookAlertChannel(config);
+}
+/**
+ * Create a webhook channel with HMAC signing
+ */
+export function createSignedWebhookChannel(url, secret, options) {
+    return new WebhookAlertChannel({
+        url,
+        auth: {
+            type: 'hmac',
+            secret,
+            algorithm: 'sha256',
+        },
+        ...options,
+    });
+}
+//# sourceMappingURL=webhook.js.map