@vorionsys/security 1.0.0

package/dist/security/alerting/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/security/alerting/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB;;GAEG;AACH,eAAO,MAAM,aAAa;;;;;;CAMhB,CAAC;AAEX,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,OAAO,aAAa,CAAC,CAAC;AAE/E,eAAO,MAAM,mBAAmB;;;;;;EAA8B,CAAC;AAE/D;;GAEG;AACH,eAAO,MAAM,YAAY;;;;;;CAMf,CAAC;AAEX,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,OAAO,YAAY,CAAC,CAAC;AAE5E,eAAO,MAAM,kBAAkB;;;;;;EAA6B,CAAC;AAE7D;;GAEG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgDpB,CAAC;AAEX,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,OAAO,iBAAiB,CAAC,CAAC;AAE3F,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAAkC,CAAC;AAMvE;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,wCAAwC;IACxC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,yCAAyC;IACzC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gCAAgC;IAChC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,wBAAwB;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0BAA0B;IAC1B,QAAQ,CAAC,EAAE;QACT,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;IACF,iCAAiC;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iCAAiC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,+BAA+B;IAC/B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,+BAA+B;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAe7B,CAAC;AAEH;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,sBAAsB;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,qBAAqB;IACrB,QAAQ,EAAE,aAAa,CAAC;IACxB,6BAA6B;IAC7B,IAAI,EAAE,iBAAiB,CAAC;IACxB,mCAAmC;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,8BAA8B;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,mCAAmC;IACnC,OAAO,EAAE,YAAY,CAAC;IACtB,iCAAiC;IACjC,SAAS,EAAE,IAAI,CAAC;IAChB,oCAAoC;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,8BAA8B;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,oCAAoC;IACpC,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,wBAAwB;IACxB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,0CAA0C;IAC1C,YAAY,EAAE,OAAO,CAAC;IACtB,iCAAiC;IACjC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,sCAAsC;IACtC,cAAc,CAAC,EAAE,IAAI,CAAC;IACtB,sCAAsC;IACtC,QAAQ,EAAE,OAAO,CAAC;IAClB,uBAAuB;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,8BAA8B;IAC9B,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAkB9B,CAAC;AAEH;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,aAAa,CAAC;IACxB,IAAI,EAAE,iBAAiB,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,YAAY,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EASjC,CAAC;AAMH;;GAEG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;CAYpB,CAAC;AAEX,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,OAAO,iBAAiB,CAAC,CAAC;AAE3F,eAAO,MAAM,uBAAuB;;;;;;;;;;;;EAAkC,CAAC;AAEvE;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,wBAAwB;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,0BAA0B;IAC1B,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,+BAA+B;IAC/B,KAAK,EAAE,OAAO,CAAC;CAChB;AAED,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;EAI/B,CAAC;AAEH;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,kCAAkC;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,6BAA6B;IAC7B,aAAa,EAAE,MAAM,CAAC;IACtB,sDAAsD;IACtD,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,eAAO,MAAM,oBAAoB;;;;;;;;;;;;EAI/B,CAAC;AAEH;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,mBAAmB;IACnB,OAAO,EAAE,YAAY,CAAC;IACtB,gCAAgC;IAChC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,2CAA2C;IAC3C,cAAc,CAAC,EAAE,aAAa,EAAE,CAAC;IACjC,iDAAiD;IACjD,WAAW,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7C,sDAAsD;IACtD,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAS9B,CAAC;AAEH;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB,qBAAqB;IACrB,EAAE,EAAE,MAAM,CAAC;IACX,gBAAgB;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,uBAAuB;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,8BAA8B;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,uCAAuC;IACvC,UAAU,EAAE,iBAAiB,EAAE,CAAC;IAChC,kCAAkC;IAClC,UAAU,CAAC,EAAE,cAAc,EAAE,CAAC;IAC9B,qCAAqC;IACrC,SAAS,CAAC,EAAE,cAAc,CAAC;IAC3B,iCAAiC;IACjC,QAAQ,EAAE,aAAa,EAAE,CAAC;IAC1B,4DAA4D;IAC5D,eAAe,EAAE,MAAM,CAAC;IACxB,+BAA+B;IAC/B,QAAQ,EAAE,aAAa,CAAC;IACxB,4BAA4B;IAC5B,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,oDAAoD;IACpD,QAAQ,EAAE,MAAM,CAAC;IACjB,sDAAsD;IACtD,WAAW,EAAE,OAAO,CAAC;IACrB,8BAA8B;IAC9B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,4BAA4B;IAC5B,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAgB1B,CAAC;AAMH;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,uBAAuB;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,kBAAkB;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,4BAA4B;IAC5B,SAAS,EAAE,IAAI,CAAC;IAChB,0BAA0B;IAC1B,OAAO,EAAE,IAAI,CAAC;IACd,8BAA8B;IAC9B,oBAAoB,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAC3C,6BAA6B;IAC7B,oBAAoB,CAAC,EAAE,aAAa,EAAE,CAAC;IACvC,qCAAqC;IACrC,WAAW,EAAE,OAAO,CAAC;IACrB,6BAA6B;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,6BAA6B;IAC7B,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAUlC,CAAC;AAEH;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,gBAAgB;IAChB,EAAE,EAAE,MAAM,CAAC;IACX,kBAAkB;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,wCAAwC;IACxC,UAAU,EAAE,aAAa,EAAE,CAAC;IAC5B,wBAAwB;IACxB,MAAM,EAAE,KAAK,CAAC;QACZ,sCAAsC;QACtC,YAAY,EAAE,MAAM,CAAC;QACrB,uCAAuC;QACvC,QAAQ,EAAE,aAAa,EAAE,CAAC;QAC1B,yBAAyB;QACzB,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC,CAAC;IACH,8CAA8C;IAC9C,uBAAuB,EAAE,OAAO,CAAC;IACjC,0CAA0C;IAC1C,mBAAmB,EAAE,OAAO,CAAC;CAC9B;AAED,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAWjC,CAAC;AAEH;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,kCAAkC;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,kBAAkB;IAClB,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB,yDAAyD;IACzD,eAAe,EAAE,aAAa,EAAE,CAAC;IACjC,0BAA0B;IAC1B,kBAAkB,EAAE,gBAAgB,EAAE,CAAC;IACvC,iCAAiC;IACjC,kBAAkB,EAAE,iBAAiB,EAAE,CAAC;IACxC,sCAAsC;IACtC,0BAA0B,EAAE,MAAM,CAAC;IACnC,yCAAyC;IACzC,cAAc,EAAE,MAAM,CAAC;IACvB,2DAA2D;IAC3D,sBAAsB,EAAE,MAAM,CAAC;IAC/B,sCAAsC;IACtC,eAAe,EAAE;QACf,KAAK,CAAC,EAAE;YACN,UAAU,EAAE,MAAM,CAAC;YACnB,cAAc,CAAC,EAAE,MAAM,CAAC;YACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;YAClB,SAAS,CAAC,EAAE,MAAM,CAAC;SACpB,CAAC;QACF,SAAS,CAAC,EAAE;YACV,UAAU,EAAE,MAAM,CAAC;YACnB,MAAM,CAAC,EAAE,MAAM,CAAC;SACjB,CAAC;QACF,KAAK,CAAC,EAAE;YACN,IAAI,EAAE,MAAM,CAAC;YACb,IAAI,EAAE,MAAM,CAAC;YACb,IAAI,EAAE,MAAM,CAAC;YACb,MAAM,EAAE,OAAO,CAAC;YAChB,IAAI,CAAC,EAAE;gBACL,IAAI,EAAE,MAAM,CAAC;gBACb,IAAI,EAAE,MAAM,CAAC;aACd,CAAC;YACF,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;SAC9B,CAAC;QACF,OAAO,CAAC,EAAE;YACR,UAAU,CAAC,EAAE,MAAM,CAAC;YACpB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YACjC,OAAO,CAAC,EAAE,MAAM,CAAC;SAClB,CAAC;QACF,GAAG,CAAC,EAAE;YACJ,MAAM,EAAE,MAAM,CAAC;YACf,QAAQ,CAAC,EAAE,MAAM,CAAC;YAClB,WAAW,CAAC,EAAE,MAAM,CAAC;YACrB,eAAe,CAAC,EAAE,MAAM,CAAC;SAC1B,CAAC;KACH,CAAC;CACH;AAED,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA2C5B,CAAC;AAMH;;GAEG;AACH,eAAO,MAAM,oBAAoB,EAAE,OAAO,CAAC,WAAW,CAUrD,CAAC;AAMF;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,SAAS,GAAG,MAAM,GAAG,cAAc,GAAG,UAAU,GAAG,WAAW,GAAG,YAAY,GAAG,cAAc,CAAC;IACrG,KAAK,EAAE,aAAa,CAAC;IACrB,SAAS,EAAE,IAAI,CAAC;IAChB,OAAO,CAAC,EAAE,YAAY,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,MAAM,kBAAkB,GAAG,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAE7E;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,YAAY,CAAC;IACtB,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,IAAI,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;EAOpC,CAAC"}

package/dist/security/alerting/types.js

@@ -0,0 +1,278 @@
+/**
+ * Security Alerting System - Type Definitions
+ *
+ * Comprehensive type definitions for security alerting including:
+ * - Alert severity and channel enums
+ * - Security alert structures
+ * - Alert rules and conditions
+ * - Configuration interfaces
+ *
+ * @packageDocumentation
+ * @module security/alerting/types
+ */
+import { z } from 'zod';
+// =============================================================================
+// Enums
+// =============================================================================
+/**
+ * Alert severity levels
+ */
+export const AlertSeverity = {
+    CRITICAL: 'critical', // Immediate response required - active breach
+    HIGH: 'high', // Urgent response - high-risk security event
+    MEDIUM: 'medium', // Timely response - security concern
+    LOW: 'low', // Informational - worth noting
+    INFO: 'info', // Debug/audit information
+};
+export const alertSeveritySchema = z.nativeEnum(AlertSeverity);
+/**
+ * Alert delivery channels
+ */
+export const AlertChannel = {
+    SLACK: 'slack', // Slack webhook integration
+    PAGERDUTY: 'pagerduty', // PagerDuty events API
+    EMAIL: 'email', // Email notification
+    WEBHOOK: 'webhook', // Generic webhook
+    SNS: 'sns', // AWS SNS for scalable delivery
+};
+export const alertChannelSchema = z.nativeEnum(AlertChannel);
+/**
+ * Types of security events that can trigger alerts
+ */
+export const SecurityEventType = {
+    // Authentication events
+    BRUTE_FORCE: 'brute_force',
+    CREDENTIAL_STUFFING: 'credential_stuffing',
+    ACCOUNT_LOCKOUT: 'account_lockout',
+    SUSPICIOUS_LOGIN: 'suspicious_login',
+    SESSION_HIJACK: 'session_hijack',
+    MFA_BYPASS_ATTEMPT: 'mfa_bypass_attempt',
+    // Authorization events
+    PRIVILEGE_ESCALATION: 'privilege_escalation',
+    UNAUTHORIZED_ACCESS: 'unauthorized_access',
+    PERMISSION_DENIED_SPIKE: 'permission_denied_spike',
+    // API security events
+    API_KEY_ABUSE: 'api_key_abuse',
+    RATE_LIMIT_EXCEEDED: 'rate_limit_exceeded',
+    INVALID_TOKEN: 'invalid_token',
+    TOKEN_REVOKED: 'token_revoked',
+    // Anomaly events
+    UNUSUAL_ACCESS_PATTERN: 'unusual_access_pattern',
+    IMPOSSIBLE_TRAVEL: 'impossible_travel',
+    NEW_DEVICE_LOGIN: 'new_device_login',
+    UNUSUAL_TIME_ACCESS: 'unusual_time_access',
+    // Configuration events
+    SECURITY_CONFIG_CHANGE: 'security_config_change',
+    ADMIN_ACTION: 'admin_action',
+    KEY_ROTATION: 'key_rotation',
+    POLICY_VIOLATION: 'policy_violation',
+    // Data security events
+    DATA_EXFILTRATION: 'data_exfiltration',
+    INJECTION_ATTEMPT: 'injection_attempt',
+    XSS_ATTEMPT: 'xss_attempt',
+    // System events
+    CERTIFICATE_EXPIRY: 'certificate_expiry',
+    SECRET_EXPOSED: 'secret_exposed',
+    VULNERABILITY_DETECTED: 'vulnerability_detected',
+    // Incident events
+    INCIDENT_CREATED: 'incident_created',
+    INCIDENT_ESCALATED: 'incident_escalated',
+    // Custom event type
+    CUSTOM: 'custom',
+};
+export const securityEventTypeSchema = z.nativeEnum(SecurityEventType);
+export const alertContextSchema = z.object({
+    userId: z.string().optional(),
+    tenantId: z.string().optional(),
+    ipAddress: z.string().optional(),
+    userAgent: z.string().optional(),
+    location: z.object({
+        country: z.string().optional(),
+        city: z.string().optional(),
+        latitude: z.number().optional(),
+        longitude: z.number().optional(),
+    }).optional(),
+    resource: z.string().optional(),
+    requestId: z.string().optional(),
+    sessionId: z.string().optional(),
+    metadata: z.record(z.unknown()).optional(),
+});
+export const securityAlertSchema = z.object({
+    id: z.string().uuid(),
+    severity: alertSeveritySchema,
+    type: securityEventTypeSchema,
+    message: z.string().min(1),
+    title: z.string().min(1).max(255),
+    context: alertContextSchema,
+    timestamp: z.coerce.date(),
+    fingerprint: z.string().min(1),
+    source: z.string().min(1),
+    suggestedActions: z.array(z.string()).optional(),
+    relatedAlerts: z.array(z.string().uuid()).optional(),
+    acknowledged: z.boolean().default(false),
+    acknowledgedBy: z.string().optional(),
+    acknowledgedAt: z.coerce.date().optional(),
+    resolved: z.boolean().default(false),
+    resolutionNotes: z.string().optional(),
+    tags: z.array(z.string()).optional(),
+});
+export const createAlertInputSchema = z.object({
+    severity: alertSeveritySchema,
+    type: securityEventTypeSchema,
+    message: z.string().min(1),
+    title: z.string().min(1).max(255),
+    context: alertContextSchema,
+    source: z.string().min(1),
+    suggestedActions: z.array(z.string()).optional(),
+    tags: z.array(z.string()).optional(),
+});
+// =============================================================================
+// Alert Rule Interface
+// =============================================================================
+/**
+ * Condition operators for alert rules
+ */
+export const ConditionOperator = {
+    EQUALS: 'equals',
+    NOT_EQUALS: 'not_equals',
+    GREATER_THAN: 'greater_than',
+    LESS_THAN: 'less_than',
+    GREATER_THAN_OR_EQUALS: 'greater_than_or_equals',
+    LESS_THAN_OR_EQUALS: 'less_than_or_equals',
+    CONTAINS: 'contains',
+    NOT_CONTAINS: 'not_contains',
+    MATCHES: 'matches', // Regex match
+    IN: 'in', // Value in array
+    NOT_IN: 'not_in',
+};
+export const conditionOperatorSchema = z.nativeEnum(ConditionOperator);
+export const alertConditionSchema = z.object({
+    field: z.string().min(1),
+    operator: conditionOperatorSchema,
+    value: z.unknown(),
+});
+export const alertThresholdSchema = z.object({
+    count: z.number().int().positive(),
+    windowSeconds: z.number().int().positive(),
+    groupBy: z.string().optional(),
+});
+export const channelConfigSchema = z.object({
+    channel: alertChannelSchema,
+    config: z.record(z.unknown()),
+    severityFilter: z.array(alertSeveritySchema).optional(),
+    activeHours: z.object({
+        start: z.number().int().min(0).max(23),
+        end: z.number().int().min(0).max(23),
+    }).optional(),
+    rateLimit: z.number().int().positive().optional(),
+});
+export const alertRuleSchema = z.object({
+    id: z.string().min(1),
+    name: z.string().min(1).max(255),
+    description: z.string().optional(),
+    enabled: z.boolean().default(true),
+    eventTypes: z.array(securityEventTypeSchema).min(1),
+    conditions: z.array(alertConditionSchema).optional(),
+    threshold: alertThresholdSchema.optional(),
+    channels: z.array(channelConfigSchema).min(1),
+    cooldownSeconds: z.number().int().nonnegative().default(300),
+    severity: alertSeveritySchema,
+    tags: z.array(z.string()).optional(),
+    priority: z.number().int().default(0),
+    stopOnMatch: z.boolean().default(false),
+    messageTemplate: z.string().optional(),
+    titleTemplate: z.string().optional(),
+});
+export const maintenanceWindowSchema = z.object({
+    id: z.string().uuid(),
+    name: z.string().min(1).max(255),
+    startTime: z.coerce.date(),
+    endTime: z.coerce.date(),
+    suppressedEventTypes: z.array(securityEventTypeSchema).optional(),
+    suppressedSeverities: z.array(alertSeveritySchema).optional(),
+    suppressAll: z.boolean().default(false),
+    reason: z.string().optional(),
+    createdBy: z.string().min(1),
+});
+export const escalationPolicySchema = z.object({
+    id: z.string().min(1),
+    name: z.string().min(1).max(255),
+    severities: z.array(alertSeveritySchema).min(1),
+    levels: z.array(z.object({
+        afterMinutes: z.number().int().positive(),
+        channels: z.array(channelConfigSchema).min(1),
+        message: z.string().optional(),
+    })).min(1),
+    escalateOnNoAcknowledge: z.boolean().default(true),
+    escalateOnNoResolve: z.boolean().default(true),
+});
+export const alertConfigSchema = z.object({
+    enabled: z.boolean().default(true),
+    rules: z.array(alertRuleSchema).default([]),
+    defaultChannels: z.array(channelConfigSchema).default([]),
+    escalationPolicies: z.array(escalationPolicySchema).default([]),
+    maintenanceWindows: z.array(maintenanceWindowSchema).default([]),
+    deduplicationWindowSeconds: z.number().int().positive().default(300),
+    redisKeyPrefix: z.string().default('vorion:alerting:'),
+    defaultCooldownSeconds: z.number().int().nonnegative().default(300),
+    channelSettings: z.object({
+        slack: z.object({
+            webhookUrl: z.string().url(),
+            defaultChannel: z.string().optional(),
+            username: z.string().optional(),
+            iconEmoji: z.string().optional(),
+        }).optional(),
+        pagerduty: z.object({
+            routingKey: z.string().min(1),
+            apiUrl: z.string().url().optional(),
+        }).optional(),
+        email: z.object({
+            from: z.string().email(),
+            host: z.string().min(1),
+            port: z.number().int().positive(),
+            secure: z.boolean(),
+            auth: z.object({
+                user: z.string().min(1),
+                pass: z.string().min(1),
+            }).optional(),
+            defaultRecipients: z.array(z.string().email()).optional(),
+        }).optional(),
+        webhook: z.object({
+            defaultUrl: z.string().url().optional(),
+            headers: z.record(z.string()).optional(),
+            timeout: z.number().int().positive().optional(),
+        }).optional(),
+        sns: z.object({
+            region: z.string().min(1),
+            topicArn: z.string().optional(),
+            accessKeyId: z.string().optional(),
+            secretAccessKey: z.string().optional(),
+        }).optional(),
+    }).default({}),
+});
+// =============================================================================
+// Default Configuration
+// =============================================================================
+/**
+ * Default alerting configuration
+ */
+export const DEFAULT_ALERT_CONFIG = {
+    enabled: true,
+    rules: [],
+    defaultChannels: [],
+    escalationPolicies: [],
+    maintenanceWindows: [],
+    deduplicationWindowSeconds: 300,
+    redisKeyPrefix: 'vorion:alerting:',
+    defaultCooldownSeconds: 300,
+    channelSettings: {},
+};
+export const alertDeliveryResultSchema = z.object({
+    channel: alertChannelSchema,
+    success: z.boolean(),
+    messageId: z.string().optional(),
+    error: z.string().optional(),
+    timestamp: z.coerce.date(),
+    retryCount: z.number().int().nonnegative(),
+});
+//# sourceMappingURL=types.js.map

package/dist/security/alerting/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/security/alerting/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,gFAAgF;AAChF,QAAQ;AACR,gFAAgF;AAEhF;;GAEG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,QAAQ,EAAE,UAAU,EAAE,8CAA8C;IACpE,IAAI,EAAE,MAAM,EAAU,6CAA6C;IACnE,MAAM,EAAE,QAAQ,EAAM,qCAAqC;IAC3D,GAAG,EAAE,KAAK,EAAY,+BAA+B;IACrD,IAAI,EAAE,MAAM,EAAU,0BAA0B;CACxC,CAAC;AAIX,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;AAE/D;;GAEG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,KAAK,EAAE,OAAO,EAAY,4BAA4B;IACtD,SAAS,EAAE,WAAW,EAAI,uBAAuB;IACjD,KAAK,EAAE,OAAO,EAAY,qBAAqB;IAC/C,OAAO,EAAE,SAAS,EAAQ,kBAAkB;IAC5C,GAAG,EAAE,KAAK,EAAgB,gCAAgC;CAClD,CAAC;AAIX,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;AAE7D;;GAEG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,wBAAwB;IACxB,WAAW,EAAE,aAAa;IAC1B,mBAAmB,EAAE,qBAAqB;IAC1C,eAAe,EAAE,iBAAiB;IAClC,gBAAgB,EAAE,kBAAkB;IACpC,cAAc,EAAE,gBAAgB;IAChC,kBAAkB,EAAE,oBAAoB;IAExC,uBAAuB;IACvB,oBAAoB,EAAE,sBAAsB;IAC5C,mBAAmB,EAAE,qBAAqB;IAC1C,uBAAuB,EAAE,yBAAyB;IAElD,sBAAsB;IACtB,aAAa,EAAE,eAAe;IAC9B,mBAAmB,EAAE,qBAAqB;IAC1C,aAAa,EAAE,eAAe;IAC9B,aAAa,EAAE,eAAe;IAE9B,iBAAiB;IACjB,sBAAsB,EAAE,wBAAwB;IAChD,iBAAiB,EAAE,mBAAmB;IACtC,gBAAgB,EAAE,kBAAkB;IACpC,mBAAmB,EAAE,qBAAqB;IAE1C,uBAAuB;IACvB,sBAAsB,EAAE,wBAAwB;IAChD,YAAY,EAAE,cAAc;IAC5B,YAAY,EAAE,cAAc;IAC5B,gBAAgB,EAAE,kBAAkB;IAEpC,uBAAuB;IACvB,iBAAiB,EAAE,mBAAmB;IACtC,iBAAiB,EAAE,mBAAmB;IACtC,WAAW,EAAE,aAAa;IAE1B,gBAAgB;IAChB,kBAAkB,EAAE,oBAAoB;IACxC,cAAc,EAAE,gBAAgB;IAChC,sBAAsB,EAAE,wBAAwB;IAEhD,kBAAkB;IAClB,gBAAgB,EAAE,kBAAkB;IACpC,kBAAkB,EAAE,oBAAoB;IAExC,oBAAoB;IACpB,MAAM,EAAE,QAAQ;CACR,CAAC;AAIX,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;AAmCvE,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC;QACjB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC9B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC3B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC/B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACjC,CAAC,CAAC,QAAQ,EAAE;IACb,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC3C,CAAC,CAAC;AA0CH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IACrB,QAAQ,EAAE,mBAAmB;IAC7B,IAAI,EAAE,uBAAuB;IAC7B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACjC,OAAO,EAAE,kBAAkB;IAC3B,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;IAC1B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAChD,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE;IACpD,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACxC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACrC,cAAc,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAC1C,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACpC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACtC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CACrC,CAAC,CAAC;AAgBH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,QAAQ,EAAE,mBAAmB;IAC7B,IAAI,EAAE,uBAAuB;IAC7B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACjC,OAAO,EAAE,kBAAkB;IAC3B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAChD,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CACrC,CAAC,CAAC;AAEH,gFAAgF;AAChF,uBAAuB;AACvB,gFAAgF;AAEhF;;GAEG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,MAAM,EAAE,QAAQ;IAChB,UAAU,EAAE,YAAY;IACxB,YAAY,EAAE,cAAc;IAC5B,SAAS,EAAE,WAAW;IACtB,sBAAsB,EAAE,wBAAwB;IAChD,mBAAmB,EAAE,qBAAqB;IAC1C,QAAQ,EAAE,UAAU;IACpB,YAAY,EAAE,cAAc;IAC5B,OAAO,EAAE,SAAS,EAAY,cAAc;IAC5C,EAAE,EAAE,IAAI,EAAsB,iBAAiB;IAC/C,MAAM,EAAE,QAAQ;CACR,CAAC;AAIX,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;AAcvE,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,QAAQ,EAAE,uBAAuB;IACjC,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE;CACnB,CAAC,CAAC;AAcH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAClC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC1C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAC,CAAC;AAkBH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,OAAO,EAAE,kBAAkB;IAC3B,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IAC7B,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,QAAQ,EAAE;IACvD,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;QACtC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;KACrC,CAAC,CAAC,QAAQ,EAAE;IACb,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAClD,CAAC,CAAC;AAsCH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAChC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAClC,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACnD,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,QAAQ,EAAE;IACpD,SAAS,EAAE,oBAAoB,CAAC,QAAQ,EAAE;IAC1C,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7C,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;IAC5D,QAAQ,EAAE,mBAAmB;IAC7B,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACpC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACrC,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACvC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACtC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACrC,CAAC,CAAC;AA8BH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IACrB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAChC,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;IAC1B,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;IACxB,oBAAoB,EAAE,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,QAAQ,EAAE;IACjE,oBAAoB,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,QAAQ,EAAE;IAC7D,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACvC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC7B,CAAC,CAAC;AA2BH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAChC,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/C,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QACvB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;QACzC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC/B,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACV,uBAAuB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAClD,mBAAmB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;CAC/C,CAAC,CAAC;AA2DH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAClC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC3C,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACzD,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC/D,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAChE,0BAA0B,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;IACpE,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,kBAAkB,CAAC;IACtD,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;IACnE,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC;QACxB,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC;YACd,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;YAC5B,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YACrC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YAC/B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;SACjC,CAAC,CAAC,QAAQ,EAAE;QACb,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC;YAClB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YAC7B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;SACpC,CAAC,CAAC,QAAQ,EAAE;QACb,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC;YACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;YACxB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACvB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;YACjC,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;YACnB,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;gBACb,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;gBACvB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;aACxB,CAAC,CAAC,QAAQ,EAAE;YACb,iBAAiB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,QAAQ,EAAE;SAC1D,CAAC,CAAC,QAAQ,EAAE;QACb,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;YAChB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;YACvC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;YACxC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;SAChD,CAAC,CAAC,QAAQ,EAAE;QACb,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC;YACZ,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACzB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YAC/B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YAClC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;SACvC,CAAC,CAAC,QAAQ,EAAE;KACd,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACf,CAAC,CAAC;AAEH,gFAAgF;AAChF,wBAAwB;AACxB,gFAAgF;AAEhF;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAyB;IACxD,OAAO,EAAE,IAAI;IACb,KAAK,EAAE,EAAE;IACT,eAAe,EAAE,EAAE;IACnB,kBAAkB,EAAE,EAAE;IACtB,kBAAkB,EAAE,EAAE;IACtB,0BAA0B,EAAE,GAAG;IAC/B,cAAc,EAAE,kBAAkB;IAClC,sBAAsB,EAAE,GAAG;IAC3B,eAAe,EAAE,EAAE;CACpB,CAAC;AA+BF,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,OAAO,EAAE,kBAAkB;IAC3B,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;IAC1B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;CAC3C,CAAC,CAAC"}

package/dist/security/anomaly/detectors/account-compromise.d.ts

@@ -0,0 +1,198 @@
+/**
+ * Account Compromise Detector
+ *
+ * Detects potential account compromise by analyzing:
+ * - Password/MFA changes followed by unusual activity
+ * - Session from new device after credential change
+ * - Activity during user's typical offline hours
+ * - Combined signals: impossible travel + new device + sensitive access
+ *
+ * Uses multi-signal fusion to identify compromised accounts with
+ * high confidence.
+ *
+ * @packageDocumentation
+ * @module security/anomaly/detectors/account-compromise
+ */
+import type { Detector, DetectionResult, SecurityEvent } from '../types.js';
+/**
+ * Configuration for account compromise detection
+ */
+export interface AccountCompromiseDetectorConfig {
+    /** Hours in a day (24-hour format) */
+    hoursInDay: number;
+    /** Weight for impossible travel signal */
+    impossibleTravelWeight: number;
+    /** Weight for new device signal */
+    newDeviceWeight: number;
+    /** Weight for credential change + activity signal */
+    credentialChangeActivityWeight: number;
+    /** Weight for unusual time signal */
+    unusualTimeWeight: number;
+    /** Weight for sensitive access signal */
+    sensitiveAccessWeight: number;
+    /** Sensitive resources that increase risk */
+    sensitiveResources: string[];
+    /** Minimum confidence to combine signals */
+    signalCombinationThreshold: number;
+    /** Number of signals required for high confidence */
+    minSignalsForHighConfidence: number;
+    /** Track user active hours */
+    trackActiveHours: boolean;
+}
+export declare const DEFAULT_ACCOUNT_COMPROMISE_CONFIG: AccountCompromiseDetectorConfig;
+/**
+ * User's activity baseline for compromise detection
+ */
+interface UserActivityBaseline {
+    userId: string;
+    /** Known device fingerprints */
+    knownDevices: string[];
+    /** Known IP addresses */
+    knownIps: string[];
+    /** Active hours histogram (24 bins) */
+    activeHourHistogram: number[];
+    /** Typical locations */
+    typicalLocations: Array<{
+        latitude: number;
+        longitude: number;
+        countryCode?: string;
+        city?: string;
+    }>;
+    /** Resources typically accessed */
+    typicalResources: string[];
+    /** Last credential change timestamp */
+    lastCredentialChange?: string;
+    /** Total events tracked */
+    totalEvents: number;
+    /** Last updated */
+    lastUpdated: string;
+}
+/**
+ * Account compromise anomaly detector
+ */
+export declare class AccountCompromiseDetector implements Detector {
+    readonly name = "account-compromise";
+    readonly description = "Detects account compromise through credential changes, device analysis, and multi-signal fusion";
+    private readonly config;
+    private readonly redis;
+    private readonly keyPrefix;
+    constructor(config?: Partial<AccountCompromiseDetectorConfig>, keyPrefix?: string);
+    /**
+     * Analyze an event for account compromise indicators
+     */
+    detect(event: SecurityEvent): Promise<DetectionResult>;
+    /**
+     * Learn from an event by updating baselines
+     */
+    learn(event: SecurityEvent): Promise<void>;
+    /**
+     * Reset all learned baselines
+     */
+    reset(): Promise<void>;
+    /**
+     * Get baseline for a specific user
+     */
+    getBaseline(userId: string): Promise<UserActivityBaseline>;
+    /**
+     * Update baseline for a user based on a security event
+     */
+    updateBaseline(userId: string, event: SecurityEvent): Promise<void>;
+    /**
+     * Check if event is a credential change event
+     */
+    private isCredentialChangeEvent;
+    /**
+     * Record a credential change event
+     */
+    private recordCredentialChange;
+    /**
+     * Get the type of credential change
+     */
+    private getCredentialChangeType;
+    /**
+     * Check for unusual activity after recent credential change
+     */
+    private checkPostCredentialChangeActivity;
+    /**
+     * Check for activity from new device
+     */
+    private checkNewDevice;
+    /**
+     * Check for impossible travel
+     */
+    private checkImpossibleTravel;
+    /**
+     * Check for activity during unusual hours
+     */
+    private checkUnusualTimeActivity;
+    /**
+     * Check for access to sensitive resources
+     */
+    private checkSensitiveAccess;
+    /**
+     * Perform multi-signal fusion for compromise detection
+     */
+    private performSignalFusion;
+    /**
+     * Update user's activity baseline
+     */
+    private updateUserBaseline;
+    /**
+     * Update device tracking
+     */
+    private updateDeviceTracking;
+    /**
+     * Update location history
+     */
+    private updateLocationHistory;
+    /**
+     * Get recent locations for a user
+     */
+    private getRecentLocations;
+    /**
+     * Check if resource is sensitive
+     */
+    private isSensitiveResource;
+    /**
+     * Calculate distance between two points using Haversine formula
+     */
+    private calculateDistance;
+    /**
+     * Convert degrees to radians
+     */
+    private toRadians;
+    /**
+     * Format location for display
+     */
+    private formatLocation;
+    /**
+     * Save baseline to Redis
+     */
+    private saveBaseline;
+    /**
+     * Create empty baseline for new user
+     */
+    private createEmptyBaseline;
+    /**
+     * Calculate combined risk score
+     */
+    private calculateRiskScore;
+    /**
+     * Generate human-readable description
+     */
+    private generateDescription;
+    /**
+     * Create a detection result
+     */
+    private createResult;
+    /**
+     * Delete keys matching a pattern
+     */
+    private deleteKeysByPattern;
+}
+/**
+ * Create a new account compromise detector instance
+ */
+export declare function createAccountCompromiseDetector(config?: Partial<AccountCompromiseDetectorConfig>, keyPrefix?: string): AccountCompromiseDetector;
+export {};
+//# sourceMappingURL=account-compromise.d.ts.map

package/dist/security/anomaly/detectors/account-compromise.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-compromise.d.ts","sourceRoot":"","sources":["../../../../src/security/anomaly/detectors/account-compromise.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAKH,OAAO,KAAK,EACV,QAAQ,EACR,eAAe,EACf,aAAa,EAId,MAAM,aAAa,CAAC;AA2CrB;;GAEG;AACH,MAAM,WAAW,+BAA+B;IAC9C,sCAAsC;IACtC,UAAU,EAAE,MAAM,CAAC;IACnB,0CAA0C;IAC1C,sBAAsB,EAAE,MAAM,CAAC;IAC/B,mCAAmC;IACnC,eAAe,EAAE,MAAM,CAAC;IACxB,qDAAqD;IACrD,8BAA8B,EAAE,MAAM,CAAC;IACvC,qCAAqC;IACrC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,yCAAyC;IACzC,qBAAqB,EAAE,MAAM,CAAC;IAC9B,6CAA6C;IAC7C,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,4CAA4C;IAC5C,0BAA0B,EAAE,MAAM,CAAC;IACnC,qDAAqD;IACrD,2BAA2B,EAAE,MAAM,CAAC;IACpC,8BAA8B;IAC9B,gBAAgB,EAAE,OAAO,CAAC;CAC3B;AAED,eAAO,MAAM,iCAAiC,EAAE,+BAuB/C,CAAC;AAMF;;GAEG;AACH,UAAU,oBAAoB;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,gCAAgC;IAChC,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,yBAAyB;IACzB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,uCAAuC;IACvC,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,wBAAwB;IACxB,gBAAgB,EAAE,KAAK,CAAC;QACtB,QAAQ,EAAE,MAAM,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;QAClB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,CAAC,CAAC;IACH,mCAAmC;IACnC,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,uCAAuC;IACvC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,2BAA2B;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,mBAAmB;IACnB,WAAW,EAAE,MAAM,CAAC;CACrB;AA4CD;;GAEG;AACH,qBAAa,yBAA0B,YAAW,QAAQ;IACxD,SAAgB,IAAI,wBAAwB;IAC5C,SAAgB,WAAW,qGACyE;IAEpG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkC;IACzD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAQ;IAC9B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;gBAGjC,MAAM,GAAE,OAAO,CAAC,+BAA+B,CAAM,EACrD,SAAS,GAAE,MAAiC;IAO9C;;OAEG;IACG,MAAM,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,eAAe,CAAC;IAkJ5D;;OAEG;IACG,KAAK,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAqBhD;;OAEG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAqB5B;;OAEG;IACG,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAehE;;OAEG;IACG,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAQzE;;OAEG;IACH,OAAO,CAAC,uBAAuB;IAoB/B;;OAEG;YACW,sBAAsB;IAyBpC;;OAEG;IACH,OAAO,CAAC,uBAAuB;IAa/B;;OAEG;YACW,iCAAiC;IAiE/C;;OAEG;YACW,cAAc;IAkD5B;;OAEG;YACW,qBAAqB;IA+CnC;;OAEG;IACH,OAAO,CAAC,wBAAwB;IAsChC;;OAEG;IACH,OAAO,CAAC,oBAAoB;IA4B5B;;OAEG;IACH,OAAO,CAAC,mBAAmB;IA6D3B;;OAEG;YACW,kBAAkB;IAwDhC;;OAEG;YACW,oBAAoB;IA4BlC;;OAEG;YACW,qBAAqB;IA4BnC;;OAEG;YACW,kBAAkB;IAahC;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAO3B;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAqBzB;;OAEG;IACH,OAAO,CAAC,SAAS;IAIjB;;OAEG;IACH,OAAO,CAAC,cAAc;IAUtB;;OAEG;YACW,YAAY;IAK1B;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAa3B;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAwC1B;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAwB3B;;OAEG;IACH,OAAO,CAAC,YAAY;IAepB;;OAEG;YACW,mBAAmB;CAkBlC;AAED;;GAEG;AACH,wBAAgB,+BAA+B,CAC7C,MAAM,CAAC,EAAE,OAAO,CAAC,+BAA+B,CAAC,EACjD,SAAS,CAAC,EAAE,MAAM,GACjB,yBAAyB,CAE3B"}