agentdb 3.0.0-alpha.11 → 3.0.0-alpha.13

package/dist/src/security/AttestationLog.js

@@ -1,174 +0,0 @@
-/**
- * ADR-060: Attestation Log
- *
- * Append-only audit log for every MutationProof and MutationDenial.
- * Backed by a better-sqlite3 (or sql.js) compatible database instance.
- *
- * The caller is responsible for opening the database and passing it in.
- * This class only creates the table schema if it does not exist yet.
- */
-// ---------------------------------------------------------------------------
-// Schema
-// ---------------------------------------------------------------------------
-const CREATE_TABLE_SQL = `
-CREATE TABLE IF NOT EXISTS mutation_attestations (
-  id INTEGER PRIMARY KEY AUTOINCREMENT,
-  ts INTEGER NOT NULL DEFAULT (strftime('%s','now')),
-  operation TEXT NOT NULL,
-  proof_hash TEXT,
-  agent_id TEXT NOT NULL,
-  namespace TEXT NOT NULL DEFAULT 'default',
-  status TEXT NOT NULL CHECK (status IN ('proved','denied')),
-  denial_reason TEXT,
-  denial_code TEXT,
-  wasm_proof_id INTEGER,
-  metadata TEXT
-);
-`;
-const CREATE_INDEXES_SQL = `
-CREATE INDEX IF NOT EXISTS idx_attestations_ts ON mutation_attestations(ts);
-CREATE INDEX IF NOT EXISTS idx_attestations_agent ON mutation_attestations(agent_id);
-CREATE INDEX IF NOT EXISTS idx_attestations_status ON mutation_attestations(status);
-`;
-// ---------------------------------------------------------------------------
-// AttestationLog
-// ---------------------------------------------------------------------------
-export class AttestationLog {
-    db;
-    constructor(db) {
-        this.db = db;
-        try {
-            this.db.exec(CREATE_TABLE_SQL);
-            this.db.exec(CREATE_INDEXES_SQL);
-        }
-        catch (err) {
-            const msg = err instanceof Error ? err.message : String(err);
-            throw new Error(`AttestationLog schema creation failed: ${msg}`);
-        }
-    }
-    /**
-     * Record a successful mutation proof.
-     */
-    record(proof) {
-        const stmt = this.db.prepare(`
-      INSERT INTO mutation_attestations
-        (ts, operation, proof_hash, agent_id, namespace, status, wasm_proof_id, metadata)
-      VALUES
-        (?, ?, ?, ?, ?, 'proved', ?, ?)
-    `);
-        const ts = Math.floor(proof.timestamp / 1000);
-        stmt.run(ts, proof.operation, proof.structuralHash, proof.attestation.agentId, proof.attestation.namespace, proof.wasmProofId ?? null, JSON.stringify({ invariantChecks: proof.invariantChecks }));
-    }
-    /**
-     * Record a denied mutation.
-     */
-    recordDenial(denial, agentId, namespace) {
-        const stmt = this.db.prepare(`
-      INSERT INTO mutation_attestations
-        (ts, operation, agent_id, namespace, status, denial_reason, denial_code, metadata)
-      VALUES
-        (?, ?, ?, ?, 'denied', ?, ?, ?)
-    `);
-        const ts = Math.floor(denial.timestamp / 1000);
-        stmt.run(ts, denial.operation, agentId, namespace, denial.reason, denial.code, denial.field ? JSON.stringify({ field: denial.field }) : null);
-    }
-    /**
-     * Query attestation records with optional filters.
-     * All filters use parameterized queries to prevent injection.
-     */
-    query(opts = {}) {
-        const conditions = [];
-        const params = [];
-        if (opts.agentId !== undefined) {
-            conditions.push('agent_id = ?');
-            params.push(opts.agentId);
-        }
-        if (opts.namespace !== undefined) {
-            conditions.push('namespace = ?');
-            params.push(opts.namespace);
-        }
-        if (opts.status !== undefined) {
-            conditions.push('status = ?');
-            params.push(opts.status);
-        }
-        if (opts.since !== undefined) {
-            conditions.push('ts >= ?');
-            params.push(Math.floor(opts.since / 1000));
-        }
-        const where = conditions.length > 0
-            ? `WHERE ${conditions.join(' AND ')}`
-            : '';
-        const limit = opts.limit !== undefined && opts.limit > 0
-            ? `LIMIT ?`
-            : '';
-        if (limit) {
-            params.push(opts.limit);
-        }
-        const sql = `SELECT * FROM mutation_attestations ${where} ORDER BY ts DESC ${limit}`;
-        return this.db.prepare(sql).all(...params);
-    }
-    /**
-     * Aggregate denial patterns grouped by denial_code.
-     */
-    getDenialPatterns(since) {
-        let sql;
-        const params = [];
-        if (since !== undefined) {
-            sql = `
-        SELECT
-          denial_code AS code,
-          COUNT(*) AS count,
-          MAX(ts) AS lastSeen
-        FROM mutation_attestations
-        WHERE status = 'denied' AND ts >= ?
-        GROUP BY denial_code
-        ORDER BY count DESC
-      `;
-            params.push(Math.floor(since / 1000));
-        }
-        else {
-            sql = `
-        SELECT
-          denial_code AS code,
-          COUNT(*) AS count,
-          MAX(ts) AS lastSeen
-        FROM mutation_attestations
-        WHERE status = 'denied'
-        GROUP BY denial_code
-        ORDER BY count DESC
-      `;
-        }
-        return this.db.prepare(sql).all(...params);
-    }
-    /**
-     * Delete attestation records older than the given age in milliseconds.
-     * Returns the number of deleted rows.
-     */
-    prune(olderThanMs) {
-        const cutoffTs = Math.floor((Date.now() - olderThanMs) / 1000);
-        const result = this.db.prepare('DELETE FROM mutation_attestations WHERE ts < ?').run(cutoffTs);
-        return result.changes ?? 0;
-    }
-    /**
-     * Summary statistics for the attestation log.
-     */
-    getStats() {
-        const row = this.db.prepare(`
-      SELECT
-        COUNT(*) AS total,
-        SUM(CASE WHEN status = 'proved' THEN 1 ELSE 0 END) AS proved,
-        SUM(CASE WHEN status = 'denied' THEN 1 ELSE 0 END) AS denied,
-        COUNT(DISTINCT agent_id) AS uniqueAgents,
-        MIN(ts) AS oldestTs
-      FROM mutation_attestations
-    `).get();
-        return {
-            total: row?.total ?? 0,
-            proved: row?.proved ?? 0,
-            denied: row?.denied ?? 0,
-            uniqueAgents: row?.uniqueAgents ?? 0,
-            oldestTs: row?.oldestTs ?? 0,
-        };
-    }
-}
-//# sourceMappingURL=AttestationLog.js.map

package/dist/src/security/AttestationLog.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"AttestationLog.js","sourceRoot":"","sources":["../../../src/security/AttestationLog.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAiBH,8EAA8E;AAC9E,SAAS;AACT,8EAA8E;AAE9E,MAAM,gBAAgB,GAAG;;;;;;;;;;;;;;CAcxB,CAAC;AAEF,MAAM,kBAAkB,GAAG;;;;CAI1B,CAAC;AA4BF,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAE9E,MAAM,OAAO,cAAc;IACR,EAAE,CAAe;IAElC,YAAY,EAAgB;QAC1B,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;QACb,IAAI,CAAC;YACH,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YAC/B,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,MAAM,IAAI,KAAK,CAAC,0CAA0C,GAAG,EAAE,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAoB;QACzB,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;;;KAK5B,CAAC,CAAC;QACH,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;QAC9C,IAAI,CAAC,GAAG,CACN,EAAE,EACF,KAAK,CAAC,SAAS,EACf,KAAK,CAAC,cAAc,EACpB,KAAK,CAAC,WAAW,CAAC,OAAO,EACzB,KAAK,CAAC,WAAW,CAAC,SAAS,EAC3B,KAAK,CAAC,WAAW,IAAI,IAAI,EACzB,IAAI,CAAC,SAAS,CAAC,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE,CAAC,CAC3D,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,MAAsB,EAAE,OAAe,EAAE,SAAiB;QACrE,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;;;KAK5B,CAAC,CAAC;QACH,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;QAC/C,IAAI,CAAC,GAAG,CACN,EAAE,EACF,MAAM,CAAC,SAAS,EAChB,OAAO,EACP,SAAS,EACT,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,IAAI,EACX,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAC9D,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,OAAgC,EAAE;QACtC,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,MAAM,MAAM,GAAU,EAAE,CAAC;QAEzB,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAC/B,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAChC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5B,CAAC;QAED,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACjC,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YACjC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC9B,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC9B,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3B,CAAC;QAED,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC7B,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC3B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC;QAC7C,CAAC;QAED,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC;YACjC,CAAC,CAAC,SAAS,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE;YACrC,CAAC,CAAC,EAAE,CAAC;QAEP,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC;YACtD,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,EAAE,CAAC;QACP,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC;QAED,MAAM,GAAG,GAAG,uCAAuC,KAAK,qBAAqB,KAAK,EAAE,CAAC;QACrF,OAAO,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC;IAC7C,CAAC;IAED;;OAEG;IACH,iBAAiB,CAAC,KAAc;QAC9B,IAAI,GAAW,CAAC;QAChB,MAAM,MAAM,GAAU,EAAE,CAAC;QAEzB,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,GAAG,GAAG;;;;;;;;;OASL,CAAC;YACF,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC;QACxC,CAAC;aAAM,CAAC;YACN,GAAG,GAAG;;;;;;;;;OASL,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,MAAM,CAAoB,CAAC;IAChE,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,WAAmB;QACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAC5B,gDAAgD,CACjD,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAChB,OAAO,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;;;;;;KAQ3B,CAAC,CAAC,GAAG,EAAwC,CAAC;QAE/C,OAAO;YACL,KAAK,EAAE,GAAG,EAAE,KAAK,IAAI,CAAC;YACtB,MAAM,EAAE,GAAG,EAAE,MAAM,IAAI,CAAC;YACxB,MAAM,EAAE,GAAG,EAAE,MAAM,IAAI,CAAC;YACxB,YAAY,EAAE,GAAG,EAAE,YAAY,IAAI,CAAC;YACpC,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;SAC7B,CAAC;IACJ,CAAC;CACF"}

package/dist/src/security/MutationGuard.d.ts

@@ -1,83 +0,0 @@
-/**
- * ADR-060: Proof-Gated State Mutation
- *
- * MutationGuard is the single validation gate between controllers and backends.
- * Every mutation must produce a MutationProof before the backend executes it.
- * If validation fails a MutationDenial is returned instead.
- * Optional WASM-accelerated proofs via @ruvnet/ruvector-verified-wasm.
- */
-export interface MutationProof {
-    id: string;
-    operation: 'insert' | 'search' | 'remove' | 'batch_insert' | 'save' | 'load';
-    timestamp: number;
-    structuralHash: string;
-    attestation: AttestationToken;
-    invariantChecks: InvariantResult[];
-    wasmProofId?: number;
-    valid: true;
-}
-export interface AttestationToken {
-    agentId: string;
-    namespace: string;
-    scope: 'read' | 'write' | 'admin';
-    issuedAt: number;
-    expiresAt: number;
-}
-export interface InvariantResult {
-    check: string;
-    passed: boolean;
-}
-export interface MutationDenial {
-    operation: string;
-    reason: string;
-    code: string;
-    field?: string;
-    timestamp: number;
-}
-export interface GuardConfig {
-    dimension: number;
-    maxElements: number;
-    enableWasmProofs: boolean;
-    enableAttestationLog: boolean;
-    defaultNamespace: string;
-}
-export declare class MutationGuard {
-    private readonly config;
-    private vectorCount;
-    private wasmEnv;
-    private wasmAvailable;
-    private engineType;
-    private nextWasmProofId;
-    private proofsIssuedCount;
-    private denialsCount;
-    private proofTimesNs;
-    constructor(config: GuardConfig);
-    initialize(): Promise<void>;
-    private validateToken;
-    proveInsert(id: string, embedding: Float32Array, metadata?: Record<string, any>, token?: AttestationToken): MutationProof | MutationDenial;
-    proveSearch(query: Float32Array, k: number, options?: any, token?: AttestationToken): MutationProof | MutationDenial;
-    proveBatchInsert(items: Array<{
-        id: string;
-        embedding: Float32Array;
-        metadata?: Record<string, any>;
-    }>, token?: AttestationToken): MutationProof | MutationDenial;
-    proveRemove(id: string, token?: AttestationToken): MutationProof | MutationDenial;
-    proveSave(path: string, token?: AttestationToken): MutationProof | MutationDenial;
-    proveLoad(path: string, token?: AttestationToken): MutationProof | MutationDenial;
-    createToken(agentId: string, namespace: string, scope: 'read' | 'write' | 'admin', ttlMs?: number): AttestationToken;
-    getStats(): {
-        proofsIssued: number;
-        denials: number;
-        wasmAvailable: boolean;
-        engineType: string;
-        avgProofTimeNs: number;
-    };
-    static isDenial(result: MutationProof | MutationDenial): result is MutationDenial;
-    getVectorCount(): number;
-    setVectorCount(count: number): void;
-    private buildProof;
-    private validateSafePath;
-    private hrtimeNs;
-    private recordProofTime;
-}
-//# sourceMappingURL=MutationGuard.d.ts.map

package/dist/src/security/MutationGuard.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"MutationGuard.d.ts","sourceRoot":"","sources":["../../../src/security/MutationGuard.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAaH,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,cAAc,GAAG,MAAM,GAAG,MAAM,CAAC;IAC7E,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,gBAAgB,CAAC;IAC9B,eAAe,EAAE,eAAe,EAAE,CAAC;IACnC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,IAAI,CAAC;CACb;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,GAAG,OAAO,GAAG,OAAO,CAAC;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,oBAAoB,EAAE,OAAO,CAAC;IAC9B,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AA2BD,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAc;IACrC,OAAO,CAAC,WAAW,CAAK;IACxB,OAAO,CAAC,OAAO,CAAa;IAC5B,OAAO,CAAC,aAAa,CAAS;IAC9B,OAAO,CAAC,UAAU,CAAkD;IACpE,OAAO,CAAC,eAAe,CAAK;IAC5B,OAAO,CAAC,iBAAiB,CAAK;IAC9B,OAAO,CAAC,YAAY,CAAK;IACzB,OAAO,CAAC,YAAY,CAAgB;gBAExB,MAAM,EAAE,WAAW;IAIzB,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAuCjC,OAAO,CAAC,aAAa;IAOrB,WAAW,CACT,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,YAAY,EACnC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,KAAK,CAAC,EAAE,gBAAgB,GACvD,aAAa,GAAG,cAAc;IAgEjC,WAAW,CACT,KAAK,EAAE,YAAY,EAAE,CAAC,EAAE,MAAM,EAC9B,OAAO,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,EAAE,gBAAgB,GACtC,aAAa,GAAG,cAAc;IA4BjC,gBAAgB,CACd,KAAK,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,YAAY,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;KAAE,CAAC,EACrF,KAAK,CAAC,EAAE,gBAAgB,GACvB,aAAa,GAAG,cAAc;IA0DjC,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,gBAAgB,GAAG,aAAa,GAAG,cAAc;IAoBjF,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,gBAAgB,GAAG,aAAa,GAAG,cAAc;IAcjF,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,gBAAgB,GAAG,aAAa,GAAG,cAAc;IAcjF,WAAW,CACT,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAClC,KAAK,EAAE,MAAM,GAAG,OAAO,GAAG,OAAO,EAAE,KAAK,GAAE,MAA6B,GACtE,gBAAgB;IAKnB,QAAQ,IAAI;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,OAAO,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE;IAOzH,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,aAAa,GAAG,cAAc,GAAG,MAAM,IAAI,cAAc;IAIjF,cAAc,IAAI,MAAM;IAExB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAEnC,OAAO,CAAC,UAAU;IAWlB,OAAO,CAAC,gBAAgB;IAcxB,OAAO,CAAC,QAAQ;IAEhB,OAAO,CAAC,eAAe;CAKxB"}

package/dist/src/security/MutationGuard.js

@@ -1,364 +0,0 @@
-/**
- * ADR-060: Proof-Gated State Mutation
- *
- * MutationGuard is the single validation gate between controllers and backends.
- * Every mutation must produce a MutationProof before the backend executes it.
- * If validation fails a MutationDenial is returned instead.
- * Optional WASM-accelerated proofs via @ruvnet/ruvector-verified-wasm.
- */
-import { createHash, randomUUID } from 'crypto';
-import { posix as posixPath } from 'path';
-import { validateVector, validateVectorId, validateSearchOptions, SECURITY_LIMITS, sanitizeMetadata, } from './validation.js';
-const DEFAULT_TOKEN_TTL_MS = 300_000; // 5 minutes
-const PROOF_TIME_WINDOW_SIZE = 200;
-function makeDefaultToken(ns) {
-    const now = Date.now();
-    return { agentId: 'system', namespace: ns, scope: 'write', issuedAt: now, expiresAt: now + DEFAULT_TOKEN_TTL_MS };
-}
-function hashInsertInputs(id, embedding) {
-    const h = createHash('sha256');
-    h.update(id);
-    h.update(Buffer.from(embedding.buffer, embedding.byteOffset, embedding.byteLength));
-    return h.digest('hex');
-}
-function hashBytes(...parts) {
-    const h = createHash('sha256');
-    for (const p of parts)
-        h.update(p);
-    return h.digest('hex');
-}
-function deny(operation, reason, code, field) {
-    return { operation, reason, code, field, timestamp: Date.now() };
-}
-export class MutationGuard {
-    config;
-    vectorCount = 0;
-    wasmEnv = null;
-    wasmAvailable = false;
-    engineType = 'js';
-    nextWasmProofId = 1;
-    proofsIssuedCount = 0;
-    denialsCount = 0;
-    proofTimesNs = [];
-    constructor(config) {
-        this.config = config;
-    }
-    async initialize() {
-        if (!this.config.enableWasmProofs)
-            return;
-        // Use GraphTransformerService for unified proof backend
-        try {
-            const { GraphTransformerService } = await import('../services/GraphTransformerService.js');
-            const gts = new GraphTransformerService();
-            await gts.initialize();
-            if (gts.isAvailable()) {
-                this.wasmEnv = gts;
-                this.wasmAvailable = true;
-                const stats = gts.getStats();
-                this.engineType = stats.engineType === 'native' ? 'native' : 'wasm';
-                console.log(`[MutationGuard] Initialized with ${this.engineType} proof engine`);
-                return;
-            }
-        }
-        catch (error) {
-            console.warn('[MutationGuard] GraphTransformerService initialization failed:', error);
-        }
-        // Legacy fallback: @ruvnet/ruvector-verified-wasm
-        try {
-            const mod = await import('@ruvnet/ruvector-verified-wasm');
-            if (mod && typeof mod.JsProofEnv === 'function') {
-                this.wasmEnv = new mod.JsProofEnv();
-                this.wasmAvailable = true;
-                this.engineType = 'legacy-wasm';
-                console.log('[MutationGuard] Using legacy verified-wasm proof engine');
-                return;
-            }
-        }
-        catch { /* legacy WASM not available */ }
-        // Pure JS validation fallback (no attestations, but still validates)
-        this.engineType = 'js';
-        this.wasmAvailable = false;
-        console.log('[MutationGuard] No accelerated proof engine available, using JS validation');
-    }
-    validateToken(token) {
-        if (token.expiresAt < Date.now()) {
-            return deny('token_validation', 'Authentication token expired', 'TOKEN_EXPIRED');
-        }
-        return null;
-    }
-    proveInsert(id, embedding, metadata, token) {
-        const start = this.hrtimeNs();
-        const att = token ?? makeDefaultToken(this.config.defaultNamespace);
-        const tokenErr = this.validateToken(att);
-        if (tokenErr) {
-            this.denialsCount++;
-            return tokenErr;
-        }
-        const inv = [];
-        try {
-            validateVectorId(id);
-        }
-        catch (err) {
-            this.denialsCount++;
-            const ve = err;
-            return deny('insert', ve.message, ve.code ?? 'INVALID_ID', ve.field);
-        }
-        try {
-            validateVector(embedding, this.config.dimension);
-        }
-        catch (err) {
-            this.denialsCount++;
-            const ve = err;
-            return deny('insert', ve.message, ve.code ?? 'INVALID_VECTOR', ve.field);
-        }
-        if (metadata) {
-            try {
-                sanitizeMetadata(metadata);
-            }
-            catch (err) {
-                this.denialsCount++;
-                const ve = err;
-                return deny('insert', ve.message, ve.code ?? 'INVALID_METADATA', ve.field);
-            }
-        }
-        const capacityOk = this.vectorCount < this.config.maxElements;
-        inv.push({ check: 'capacity', passed: capacityOk });
-        if (!capacityOk) {
-            this.denialsCount++;
-            return deny('insert', 'Index capacity exceeded', 'CAPACITY_EXCEEDED');
-        }
-        let wasmProofId;
-        let attestationBytes;
-        if (this.wasmAvailable && this.wasmEnv) {
-            try {
-                if (this.engineType === 'native' || this.engineType === 'wasm') {
-                    // GraphTransformerService provides unified API
-                    const dimProof = this.wasmEnv.proveDimension(this.config.dimension, embedding.length);
-                    if (dimProof && dimProof.verified !== false) {
-                        wasmProofId = dimProof.proof_id ?? this.nextWasmProofId++;
-                        attestationBytes = this.wasmEnv.createAttestation?.(wasmProofId) ?? undefined;
-                        inv.push({ check: `graph_transformer_${this.engineType}_verify`, passed: true });
-                    }
-                    else {
-                        inv.push({ check: `graph_transformer_${this.engineType}_verify`, passed: false });
-                    }
-                }
-                else if (this.engineType === 'legacy-wasm') {
-                    // Legacy @ruvnet/ruvector-verified-wasm
-                    this.wasmEnv.verify_dim_check(this.config.dimension, embedding);
-                    wasmProofId = this.nextWasmProofId++;
-                    this.wasmEnv.create_attestation(wasmProofId);
-                    inv.push({ check: 'legacy_wasm_dim_verify', passed: true });
-                }
-            }
-            catch (error) {
-                inv.push({ check: 'proof_engine_verify', passed: false });
-            }
-        }
-        this.vectorCount++;
-        const proof = this.buildProof('insert', hashInsertInputs(id, embedding), att, inv, wasmProofId);
-        this.recordProofTime(start);
-        return proof;
-    }
-    proveSearch(query, k, options, token) {
-        const start = this.hrtimeNs();
-        const att = token ?? makeDefaultToken(this.config.defaultNamespace);
-        const tokenErr = this.validateToken(att);
-        if (tokenErr) {
-            this.denialsCount++;
-            return tokenErr;
-        }
-        const inv = [];
-        try {
-            validateVector(query, this.config.dimension);
-        }
-        catch (err) {
-            this.denialsCount++;
-            const ve = err;
-            return deny('search', ve.message, ve.code ?? 'INVALID_VECTOR', ve.field);
-        }
-        try {
-            validateSearchOptions({ k, ...options });
-        }
-        catch (err) {
-            this.denialsCount++;
-            const ve = err;
-            return deny('search', ve.message, ve.code ?? 'INVALID_SEARCH_OPTIONS', ve.field);
-        }
-        inv.push({ check: 'query_valid', passed: true });
-        inv.push({ check: 'options_valid', passed: true });
-        const structuralHash = hashBytes(Buffer.from(query.buffer, query.byteOffset, query.byteLength), String(k));
-        const proof = this.buildProof('search', structuralHash, att, inv);
-        this.recordProofTime(start);
-        return proof;
-    }
-    proveBatchInsert(items, token) {
-        const start = this.hrtimeNs();
-        const att = token ?? makeDefaultToken(this.config.defaultNamespace);
-        const tokenErr = this.validateToken(att);
-        if (tokenErr) {
-            this.denialsCount++;
-            return tokenErr;
-        }
-        const inv = [];
-        if (!items || items.length === 0) {
-            this.denialsCount++;
-            return deny('batch_insert', 'Batch is empty', 'EMPTY_BATCH');
-        }
-        if (items.length > SECURITY_LIMITS.MAX_BATCH_SIZE) {
-            this.denialsCount++;
-            return deny('batch_insert', 'Batch size exceeds maximum allowed limit', 'BATCH_SIZE_EXCEEDED');
-        }
-        inv.push({ check: 'batch_size', passed: true });
-        for (let i = 0; i < items.length; i++) {
-            const item = items[i];
-            try {
-                validateVectorId(item.id);
-            }
-            catch (err) {
-                this.denialsCount++;
-                const ve = err;
-                return deny('batch_insert', `Item ${i}: ${ve.message}`, ve.code ?? 'INVALID_ID', `items[${i}].id`);
-            }
-            try {
-                validateVector(item.embedding, this.config.dimension);
-            }
-            catch (err) {
-                this.denialsCount++;
-                const ve = err;
-                return deny('batch_insert', `Item ${i}: ${ve.message}`, ve.code ?? 'INVALID_VECTOR', `items[${i}].embedding`);
-            }
-            if (item.metadata) {
-                try {
-                    sanitizeMetadata(item.metadata);
-                }
-                catch (err) {
-                    this.denialsCount++;
-                    const ve = err;
-                    return deny('batch_insert', `Item ${i}: ${ve.message}`, ve.code ?? 'INVALID_METADATA', `items[${i}].metadata`);
-                }
-            }
-        }
-        inv.push({ check: 'items_valid', passed: true });
-        const capacityOk = this.vectorCount + items.length <= this.config.maxElements;
-        inv.push({ check: 'capacity', passed: capacityOk });
-        if (!capacityOk) {
-            this.denialsCount++;
-            return deny('batch_insert', 'Batch would exceed index capacity', 'CAPACITY_EXCEEDED');
-        }
-        const h = createHash('sha256');
-        for (const item of items) {
-            h.update(item.id);
-            h.update(Buffer.from(item.embedding.buffer, item.embedding.byteOffset, item.embedding.byteLength));
-        }
-        this.vectorCount += items.length;
-        const proof = this.buildProof('batch_insert', h.digest('hex'), att, inv);
-        this.recordProofTime(start);
-        return proof;
-    }
-    proveRemove(id, token) {
-        const start = this.hrtimeNs();
-        const att = token ?? makeDefaultToken(this.config.defaultNamespace);
-        const tokenErr = this.validateToken(att);
-        if (tokenErr) {
-            this.denialsCount++;
-            return tokenErr;
-        }
-        const inv = [];
-        try {
-            validateVectorId(id);
-        }
-        catch (err) {
-            this.denialsCount++;
-            const ve = err;
-            return deny('remove', ve.message, ve.code ?? 'INVALID_ID', ve.field);
-        }
-        inv.push({ check: 'id_valid', passed: true });
-        if (this.vectorCount > 0)
-            this.vectorCount--;
-        const proof = this.buildProof('remove', hashBytes(id), att, inv);
-        this.recordProofTime(start);
-        return proof;
-    }
-    proveSave(path, token) {
-        const start = this.hrtimeNs();
-        const att = token ?? makeDefaultToken(this.config.defaultNamespace);
-        const tokenErr = this.validateToken(att);
-        if (tokenErr) {
-            this.denialsCount++;
-            return tokenErr;
-        }
-        const inv = [];
-        const pathErr = this.validateSafePath(path, 'save');
-        if (pathErr !== null) {
-            this.denialsCount++;
-            return pathErr;
-        }
-        inv.push({ check: 'path_safe', passed: true });
-        const proof = this.buildProof('save', hashBytes(path), att, inv);
-        this.recordProofTime(start);
-        return proof;
-    }
-    proveLoad(path, token) {
-        const start = this.hrtimeNs();
-        const att = token ?? makeDefaultToken(this.config.defaultNamespace);
-        const tokenErr = this.validateToken(att);
-        if (tokenErr) {
-            this.denialsCount++;
-            return tokenErr;
-        }
-        const inv = [];
-        const pathErr = this.validateSafePath(path, 'load');
-        if (pathErr !== null) {
-            this.denialsCount++;
-            return pathErr;
-        }
-        inv.push({ check: 'path_safe', passed: true });
-        const proof = this.buildProof('load', hashBytes(path), att, inv);
-        this.recordProofTime(start);
-        return proof;
-    }
-    createToken(agentId, namespace, scope, ttlMs = DEFAULT_TOKEN_TTL_MS) {
-        const now = Date.now();
-        return { agentId, namespace, scope, issuedAt: now, expiresAt: now + ttlMs };
-    }
-    getStats() {
-        const avg = this.proofTimesNs.length > 0
-            ? this.proofTimesNs.reduce((a, b) => a + b, 0) / this.proofTimesNs.length
-            : 0;
-        return { proofsIssued: this.proofsIssuedCount, denials: this.denialsCount, wasmAvailable: this.wasmAvailable, engineType: this.engineType, avgProofTimeNs: avg };
-    }
-    static isDenial(result) {
-        return !('valid' in result);
-    }
-    getVectorCount() { return this.vectorCount; }
-    setVectorCount(count) { this.vectorCount = count; }
-    buildProof(operation, structuralHash, attestation, invariantChecks, wasmProofId) {
-        this.proofsIssuedCount++;
-        return {
-            id: randomUUID(), operation, timestamp: Date.now(),
-            structuralHash, attestation, invariantChecks, wasmProofId, valid: true,
-        };
-    }
-    validateSafePath(filePath, operation) {
-        if (!filePath || typeof filePath !== 'string')
-            return deny(operation, 'Path must be a non-empty string', 'INVALID_PATH', 'path');
-        if (filePath.includes('\x00'))
-            return deny(operation, 'Path contains null bytes', 'NULL_BYTE_IN_PATH', 'path');
-        // Normalize to resolve sequences like a/../b, then reject traversal
-        const normalized = posixPath.normalize(filePath);
-        if (normalized.startsWith('..') || normalized.includes('/..'))
-            return deny(operation, 'Path traversal attempt detected', 'PATH_TRAVERSAL', 'path');
-        if (posixPath.isAbsolute(normalized) || /^[a-zA-Z]:[\\/]/.test(filePath))
-            return deny(operation, 'Absolute paths are not allowed', 'ABSOLUTE_PATH', 'path');
-        return null;
-    }
-    hrtimeNs() { return process.hrtime.bigint(); }
-    recordProofTime(start) {
-        const elapsed = Number(process.hrtime.bigint() - start);
-        this.proofTimesNs.push(elapsed);
-        if (this.proofTimesNs.length > PROOF_TIME_WINDOW_SIZE)
-            this.proofTimesNs.shift();
-    }
-}
-//# sourceMappingURL=MutationGuard.js.map

package/dist/src/security/MutationGuard.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"MutationGuard.js","sourceRoot":"","sources":["../../../src/security/MutationGuard.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAChD,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,qBAAqB,EACrB,eAAe,EACf,gBAAgB,GACjB,MAAM,iBAAiB,CAAC;AA2CzB,MAAM,oBAAoB,GAAG,OAAO,CAAC,CAAC,YAAY;AAClD,MAAM,sBAAsB,GAAG,GAAG,CAAC;AAEnC,SAAS,gBAAgB,CAAC,EAAU;IAClC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,GAAG,oBAAoB,EAAE,CAAC;AACpH,CAAC;AAED,SAAS,gBAAgB,CAAC,EAAU,EAAE,SAAuB;IAC3D,MAAM,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC/B,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACb,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,UAAU,EAAE,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;IACpF,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,SAAS,CAAC,GAAG,KAA0B;IAC9C,MAAM,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACnC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,IAAI,CAAC,SAAiB,EAAE,MAAc,EAAE,IAAY,EAAE,KAAc;IAC3E,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;AACnE,CAAC;AAED,MAAM,OAAO,aAAa;IACP,MAAM,CAAc;IAC7B,WAAW,GAAG,CAAC,CAAC;IAChB,OAAO,GAAQ,IAAI,CAAC;IACpB,aAAa,GAAG,KAAK,CAAC;IACtB,UAAU,GAA6C,IAAI,CAAC;IAC5D,eAAe,GAAG,CAAC,CAAC;IACpB,iBAAiB,GAAG,CAAC,CAAC;IACtB,YAAY,GAAG,CAAC,CAAC;IACjB,YAAY,GAAa,EAAE,CAAC;IAEpC,YAAY,MAAmB;QAC7B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,UAAU;QACd,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB;YAAE,OAAO;QAE1C,wDAAwD;QACxD,IAAI,CAAC;YACH,MAAM,EAAE,uBAAuB,EAAE,GAAG,MAAM,MAAM,CAAC,wCAAwC,CAAC,CAAC;YAC3F,MAAM,GAAG,GAAG,IAAI,uBAAuB,EAAE,CAAC;YAC1C,MAAM,GAAG,CAAC,UAAU,EAAE,CAAC;YAEvB,IAAI,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC;gBACtB,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC;gBACnB,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;gBAC1B,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAC;gBAC7B,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;gBACpE,OAAO,CAAC,GAAG,CAAC,oCAAoC,IAAI,CAAC,UAAU,eAAe,CAAC,CAAC;gBAChF,OAAO;YACT,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,gEAAgE,EAAE,KAAK,CAAC,CAAC;QACxF,CAAC;QAED,kDAAkD;QAClD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,gCAA0C,CAAC,CAAC;YACrE,IAAI,GAAG,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;gBAChD,IAAI,CAAC,OAAO,GAAG,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;gBACpC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;gBAC1B,IAAI,CAAC,UAAU,GAAG,aAAa,CAAC;gBAChC,OAAO,CAAC,GAAG,CAAC,yDAAyD,CAAC,CAAC;gBACvE,OAAO;YACT,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,+BAA+B,CAAC,CAAC;QAE3C,qEAAqE;QACrE,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACvB,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,4EAA4E,CAAC,CAAC;IAC5F,CAAC;IAEO,aAAa,CAAC,KAAuB;QAC3C,IAAI,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC,kBAAkB,EAAE,8BAA8B,EAAE,eAAe,CAAC,CAAC;QACnF,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,WAAW,CACT,EAAU,EAAE,SAAuB,EACnC,QAA8B,EAAE,KAAwB;QAExD,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,KAAK,IAAI,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QACpE,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,QAAQ,EAAE,CAAC;YAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YAAC,OAAO,QAAQ,CAAC;QAAC,CAAC;QACvD,MAAM,GAAG,GAAsB,EAAE,CAAC;QAElC,IAAI,CAAC;YAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACzC,IAAI,CAAC,YAAY,EAAE,CAAC;YACpB,MAAM,EAAE,GAAG,GAAsB,CAAC;YAClC,OAAO,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,IAAI,YAAY,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,CAAC;YAAC,cAAc,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAAC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACrE,IAAI,CAAC,YAAY,EAAE,CAAC;YACpB,MAAM,EAAE,GAAG,GAAsB,CAAC;YAClC,OAAO,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,IAAI,gBAAgB,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC;gBAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAAC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBAC/C,IAAI,CAAC,YAAY,EAAE,CAAC;gBACpB,MAAM,EAAE,GAAG,GAAsB,CAAC;gBAClC,OAAO,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,IAAI,kBAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;YAC7E,CAAC;QACH,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;QAC9D,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;QACpD,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,IAAI,CAAC,YAAY,EAAE,CAAC;YACpB,OAAO,IAAI,CAAC,QAAQ,EAAE,yBAAyB,EAAE,mBAAmB,CAAC,CAAC;QACxE,CAAC;QAED,IAAI,WAA+B,CAAC;QACpC,IAAI,gBAAwC,CAAC;QAC7C,IAAI,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACvC,IAAI,CAAC;gBACH,IAAI,IAAI,CAAC,UAAU,KAAK,QAAQ,IAAI,IAAI,CAAC,UAAU,KAAK,MAAM,EAAE,CAAC;oBAC/D,+CAA+C;oBAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;oBACtF,IAAI,QAAQ,IAAI,QAAQ,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;wBAC5C,WAAW,GAAG,QAAQ,CAAC,QAAQ,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;wBAC1D,gBAAgB,GAAG,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC,WAAW,CAAC,IAAI,SAAS,CAAC;wBAC9E,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qBAAqB,IAAI,CAAC,UAAU,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;oBACnF,CAAC;yBAAM,CAAC;wBACN,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qBAAqB,IAAI,CAAC,UAAU,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;oBACpF,CAAC;gBACH,CAAC;qBAAM,IAAI,IAAI,CAAC,UAAU,KAAK,aAAa,EAAE,CAAC;oBAC7C,wCAAwC;oBACxC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;oBAChE,WAAW,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;oBACrC,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,WAAW,CAAC,CAAC;oBAC7C,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC9D,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;QAED,IAAI,CAAC,WAAW,EAAE,CAAC;QACnB,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,gBAAgB,CAAC,EAAE,EAAE,SAAS,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;QAChG,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAC5B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,WAAW,CACT,KAAmB,EAAE,CAAS,EAC9B,OAAa,EAAE,KAAwB;QAEvC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,KAAK,IAAI,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QACpE,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,QAAQ,EAAE,CAAC;YAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YAAC,OAAO,QAAQ,CAAC;QAAC,CAAC;QACvD,MAAM,GAAG,GAAsB,EAAE,CAAC;QAElC,IAAI,CAAC;YAAC,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAAC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACjE,IAAI,CAAC,YAAY,EAAE,CAAC;YACpB,MAAM,EAAE,GAAG,GAAsB,CAAC;YAClC,OAAO,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,IAAI,gBAAgB,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,CAAC;YAAC,qBAAqB,CAAC,EAAE,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YAC7D,IAAI,CAAC,YAAY,EAAE,CAAC;YACpB,MAAM,EAAE,GAAG,GAAsB,CAAC;YAClC,OAAO,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,IAAI,wBAAwB,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;QACnF,CAAC;QAED,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,MAAM,cAAc,GAAG,SAAS,CAC9B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CACzE,CAAC;QACF,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,cAAc,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QAClE,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAC5B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,gBAAgB,CACd,KAAqF,EACrF,KAAwB;QAExB,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,KAAK,IAAI,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QACpE,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,QAAQ,EAAE,CAAC;YAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YAAC,OAAO,QAAQ,CAAC;QAAC,CAAC;QACvD,MAAM,GAAG,GAAsB,EAAE,CAAC;QAElC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjC,IAAI,CAAC,YAAY,EAAE,CAAC;YACpB,OAAO,IAAI,CAAC,cAAc,EAAE,gBAAgB,EAAE,aAAa,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,GAAG,eAAe,CAAC,cAAc,EAAE,CAAC;YAClD,IAAI,CAAC,YAAY,EAAE,CAAC;YACpB,OAAO,IAAI,CAAC,cAAc,EAAE,0CAA0C,EAAE,qBAAqB,CAAC,CAAC;QACjG,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAEhD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACtB,IAAI,CAAC;gBAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAAC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBAC9C,IAAI,CAAC,YAAY,EAAE,CAAC;gBACpB,MAAM,EAAE,GAAG,GAAsB,CAAC;gBAClC,OAAO,IAAI,CAAC,cAAc,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC,IAAI,IAAI,YAAY,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;YACrG,CAAC;YACD,IAAI,CAAC;gBAAC,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAAC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBAC1E,IAAI,CAAC,YAAY,EAAE,CAAC;gBACpB,MAAM,EAAE,GAAG,GAAsB,CAAC;gBAClC,OAAO,IAAI,CAAC,cAAc,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC,IAAI,IAAI,gBAAgB,EAAE,SAAS,CAAC,aAAa,CAAC,CAAC;YAChH,CAAC;YACD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAClB,IAAI,CAAC;oBAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAAC,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACpD,IAAI,CAAC,YAAY,EAAE,CAAC;oBACpB,MAAM,EAAE,GAAG,GAAsB,CAAC;oBAClC,OAAO,IAAI,CAAC,cAAc,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC,IAAI,IAAI,kBAAkB,EAAE,SAAS,CAAC,YAAY,CAAC,CAAC;gBACjH,CAAC;YACH,CAAC;QACH,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAEjD,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;QAC9E,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;QACpD,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,IAAI,CAAC,YAAY,EAAE,CAAC;YACpB,OAAO,IAAI,CAAC,cAAc,EAAE,mCAAmC,EAAE,mBAAmB,CAAC,CAAC;QACxF,CAAC;QAED,MAAM,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;QAC/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAClB,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;QACrG,CAAC;QAED,IAAI,CAAC,WAAW,IAAI,KAAK,CAAC,MAAM,CAAC;QACjC,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,cAAc,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QACzE,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAC5B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,WAAW,CAAC,EAAU,EAAE,KAAwB;QAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,KAAK,IAAI,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QACpE,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,QAAQ,EAAE,CAAC;YAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YAAC,OAAO,QAAQ,CAAC;QAAC,CAAC;QACvD,MAAM,GAAG,GAAsB,EAAE,CAAC;QAElC,IAAI,CAAC;YAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACzC,IAAI,CAAC,YAAY,EAAE,CAAC;YACpB,MAAM,EAAE,GAAG,GAAsB,CAAC;YAClC,OAAO,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,IAAI,YAAY,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;QACvE,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAE9C,IAAI,IAAI,CAAC,WAAW,GAAG,CAAC;YAAE,IAAI,CAAC,WAAW,EAAE,CAAC;QAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QACjE,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAC5B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,SAAS,CAAC,IAAY,EAAE,KAAwB;QAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,KAAK,IAAI,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QACpE,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,QAAQ,EAAE,CAAC;YAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YAAC,OAAO,QAAQ,CAAC;QAAC,CAAC;QACvD,MAAM,GAAG,GAAsB,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACpD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YAAC,OAAO,OAAO,CAAC;QAAC,CAAC;QAC9D,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QACjE,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAC5B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,SAAS,CAAC,IAAY,EAAE,KAAwB;QAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,KAAK,IAAI,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QACpE,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,QAAQ,EAAE,CAAC;YAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YAAC,OAAO,QAAQ,CAAC;QAAC,CAAC;QACvD,MAAM,GAAG,GAAsB,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACpD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YAAC,OAAO,OAAO,CAAC;QAAC,CAAC;QAC9D,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QACjE,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAC5B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,WAAW,CACT,OAAe,EAAE,SAAiB,EAClC,KAAiC,EAAE,QAAgB,oBAAoB;QAEvE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,GAAG,KAAK,EAAE,CAAC;IAC9E,CAAC;IAED,QAAQ;QACN,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;YACtC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM;YACzE,CAAC,CAAC,CAAC,CAAC;QACN,OAAO,EAAE,YAAY,EAAE,IAAI,CAAC,iBAAiB,EAAE,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC;IACnK,CAAC;IAED,MAAM,CAAC,QAAQ,CAAC,MAAsC;QACpD,OAAO,CAAC,CAAC,OAAO,IAAI,MAAM,CAAC,CAAC;IAC9B,CAAC;IAED,cAAc,KAAa,OAAO,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;IAErD,cAAc,CAAC,KAAa,IAAU,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC;IAEzD,UAAU,CAChB,SAAqC,EAAE,cAAsB,EAC7D,WAA6B,EAAE,eAAkC,EAAE,WAAoB;QAEvF,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,OAAO;YACL,EAAE,EAAE,UAAU,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YAClD,cAAc,EAAE,WAAW,EAAE,eAAe,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI;SACvE,CAAC;IACJ,CAAC;IAEO,gBAAgB,CAAC,QAAgB,EAAE,SAAiB;QAC1D,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ;YAC3C,OAAO,IAAI,CAAC,SAAS,EAAE,iCAAiC,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC;QACpF,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;YAC3B,OAAO,IAAI,CAAC,SAAS,EAAE,0BAA0B,EAAE,mBAAmB,EAAE,MAAM,CAAC,CAAC;QAClF,oEAAoE;QACpE,MAAM,UAAU,GAAG,SAAS,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACjD,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC;YAC3D,OAAO,IAAI,CAAC,SAAS,EAAE,iCAAiC,EAAE,gBAAgB,EAAE,MAAM,CAAC,CAAC;QACtF,IAAI,SAAS,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC;YACtE,OAAO,IAAI,CAAC,SAAS,EAAE,gCAAgC,EAAE,eAAe,EAAE,MAAM,CAAC,CAAC;QACpF,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,QAAQ,KAAa,OAAO,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAEtD,eAAe,CAAC,KAAa;QACnC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC;QACxD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAChC,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,GAAG,sBAAsB;YAAE,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;IACnF,CAAC;CACF"}

package/dist/src/security/index.cjs

@@ -1,6 +0,0 @@
-/**
- * CommonJS wrapper for ESM module
- * Auto-generated by scripts/build-cjs.js
- */
-const mod = require('./security/index.js');
-module.exports = mod;