atabey 0.0.37 → 0.1.0

package/dist/shared/src/modules/security/pii.js

@@ -0,0 +1,276 @@
+/**
+ * [PII] Personally Identifiable Information Masking Service
+ *
+ * Detects and masks sensitive data in compliance with KVKK/GDPR.
+ * Used in audit log, logger, storage layers, and MCP middleware.
+ *
+ * Supported patterns:
+ * - Email addresses
+ * - Phone numbers (international, Turkish, US, UK)
+ * - TC Identification number (11 digits)
+ * - API keys / tokens (OpenAI, Anthropic, Google, GitHub, generic)
+ * - Bearer tokens / JWTs
+ * - IP addresses (IPv4, IPv6)
+ * - Credit card numbers (AMEX, Visa, Mastercard, etc.)
+ * - Password / secret fields in structured data
+ * - Bank account / IBAN
+ * - Date of birth / full address patterns
+ * - Custom names (configurable)
+ */
+/** Turkish TC Kimlik No checksum (reduces over-masking of arbitrary 11-digit numbers). */
+function isValidTckn(value) {
+    if (!/^[1-9]\d{10}$/.test(value))
+        return false;
+    const d = value.split("").map(Number);
+    const odd = d[0] + d[2] + d[4] + d[6] + d[8];
+    const even = d[1] + d[3] + d[5] + d[7];
+    const tenth = (((odd * 7) - even) % 10 + 10) % 10;
+    if (tenth !== d[9])
+        return false;
+    const sumFirst10 = d.slice(0, 10).reduce((a, b) => a + b, 0);
+    return sumFirst10 % 10 === d[10];
+}
+function isValidIpv4(value) {
+    return value.split(".").every((o) => {
+        const n = Number(o);
+        return Number.isInteger(n) && n >= 0 && n <= 255;
+    });
+}
+/** Only treat a colon-group as IPv6 when it has a hex letter or a `::` (not a time). */
+function looksLikeIpv6(value) {
+    return value.includes("::") || /[a-fA-F]/.test(value);
+}
+const SENSITIVE_PATTERNS = [
+    // JWT tokens (complete JWT format) - must be before Bearer
+    { pattern: /eyJ[a-zA-Z0-9_-]+\.eyJ[a-zA-Z0-9_-]+\.[a-zA-Z0-9_-]+/g, replacement: "***-JWT-REDACTED-***" },
+    // Bearer tokens in Authorization headers (case-insensitive; includes base64url chars)
+    { pattern: /Bearer\s+[A-Za-z0-9._~+/=-]+/gi, replacement: "Bearer ***-REDACTED-***" },
+    // Basic auth in Authorization headers
+    { pattern: /Basic\s+[a-zA-Z0-9=+/]+/gi, replacement: "Basic ***-REDACTED-***" },
+    // API keys (common formats) - must be before generic patterns
+    // Note: ghp_ tokens can contain digits that look like phone numbers, so we mask the entire prefix + suffix
+    { pattern: /\b(sk-[a-zA-Z0-9]{20,}|pk-[a-zA-Z0-9]{20,}|xai-[a-zA-Z0-9]{20,}|AIza[0-9A-Za-z_-]{35}|ghp_[a-zA-Z0-9]{36,}|gho_[a-zA-Z0-9]{36,}|ghu_[a-zA-Z0-9]{36,}|ghb_[a-zA-Z0-9]{36,}|github_pat_[a-zA-Z0-9]{36,}|sk-[a-zA-Z0-9_-]{32,}|sk-[a-zA-Z0-9]{48,}|whsec_[a-zA-Z0-9]{16,})\b/g, replacement: "***-REDACTED-***" },
+    // Social Security Number (US SSN: XXX-XX-XXXX) - must be before generic phone
+    { pattern: /\b(?!000|666|9[0-9]{2})\d{3}-(?!00)\d{2}-(?!0000)\d{4}\b/g, replacement: "***-**-****" },
+    // Date of birth patterns - must be before generic phone
+    { pattern: /\b(0[1-9]|[12][0-9]|3[01])[/.-](0[1-9]|1[0-2])[/.-](19[0-9]{2}|20[0-9]{2})\b/g, replacement: "**/**/****" },
+    // IBAN (international bank account) - strictly matches ISO country codes and length >= 15
+    { pattern: /\b(?:TR|DE|FR|GB|IT|ES|NL|CH|AT|BE|PL|SE|NO|DK|FI|PT|GR|IE|CZ|RO|HU|BG|HR|LT|SI|LV|EE|CY|LU|MT|SK|US|CA)\d{2}[A-Z0-9]{11,30}\b/g, replacement: "****-IBAN-REDACTED-****" },
+    // TC Kimlik (11 digits) — validated with the official checksum to avoid masking arbitrary IDs
+    { pattern: /\b[1-9]\d{10}\b/g, replacement: "***********", validate: isValidTckn },
+    // Email
+    { pattern: /[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}/g, replacement: "***@***" },
+    // Phone (Turkish: +90 5xx xxx xx xx, 05xx xxx xx xx, or formatted 5xx xxx xx xx)
+    { pattern: /(?:(?:\+90|0090|\b0)[\s.-]?)5\d{2}[\s.-]?\d{3}[\s.-]?\d{2}[\s.-]?\d{2}\b/g, replacement: "***-***-****" },
+    { pattern: /\b5\d{2}[\s.-]\d{3}[\s.-]\d{2}[\s.-]\d{2}\b/g, replacement: "***-***-****" },
+    // Phone (international with leading + or delimited format e.g. +1 (555) 123-4567, +44 20 7946 0950)
+    // Delimiters or leading '+' are strictly required so that raw Unix timestamps / IDs are not falsely masked.
+    { pattern: /\b(?:\+\d{1,3}[\s.-]?)?(?:\(\d{2,4}\)[\s.-]?|\d{2,4}[\s.-])\d{3,4}[\s.-]\d{2,4}(?:[\s.-]\d{2,4})?\b/g, replacement: "***-***-****" },
+    // IP addresses (IPv4) — validated octets only
+    { pattern: /\b(?:\d{1,3}\.){3}\d{1,3}\b/g, replacement: "***.***.***.***", validate: isValidIpv4 },
+    // IP addresses (IPv6 - full form)
+    { pattern: /\b(?:[0-9a-fA-F]{1,4}:){7}[0-9a-fA-F]{1,4}\b/g, replacement: "****:****:****:****" },
+    // IPv6 compressed — requires `::` or a hex letter so clock times (10:30:45) are not masked
+    { pattern: /\b(?:[0-9a-fA-F]{0,4}:){2,7}[0-9a-fA-F]{0,4}\b/g, replacement: "****:****:****", validate: looksLikeIpv6 },
+    // Credit card (Delimited 16 digits or major card issuer BIN prefixes: Visa 4, MC 51-55/22-27, Discover 6011/65)
+    // Prevents false-positive masking of 13-digit Unix timestamps (e.g. 1713000000000)
+    { pattern: /\b\d{4}[ -]\d{4}[ -]\d{4}[ -]\d{4}\b/g, replacement: "****-****-****-****" },
+    { pattern: /\b4\d{3}[ -]?\d{4}[ -]?\d{4}[ -]?\d{4}\b/g, replacement: "****-****-****-****" },
+    { pattern: /\b(?:5[1-5]\d{2}|222[1-9]|22[3-9]\d|2[3-6]\d{2}|27[01]\d|2720)[ -]?\d{4}[ -]?\d{4}[ -]?\d{4}\b/g, replacement: "****-****-****-****" },
+    { pattern: /\b(?:6011|65\d{2})[ -]?\d{4}[ -]?\d{4}[ -]?\d{4}\b/g, replacement: "****-****-****-****" },
+    // AMEX (15 digits, starts with 34/37) — no whitespace/newlines, exact length
+    { pattern: /\b3[47]\d{2}[ -]?\d{6}[ -]?\d{5}\b/g, replacement: "****-****-***" },
+    // Password fields in JSON (double-quoted)
+    { pattern: /"(password|passwd|secret|api_key|apiKey|apikey|auth_token|refresh_token|access_token)"\s*:\s*"[^"]+"/gi, replacement: "\"$1\": \"***-REDACTED-***\"" },
+    // Password fields in JSON (single-quoted)
+    { pattern: /'(password|passwd|secret|api_key|apiKey|apikey|auth_token|refresh_token|access_token)'\s*:\s*'[^']*'/gi, replacement: "'$1': '***-REDACTED-***'" },
+    // Turkish address patterns (contextual: only when accompanied by street/neighborhood identifiers)
+    { pattern: /(?:(?:sokak|cadde|mahalle|bulvar|apt|daire|blok)[^,\n]*\b(?:no|kapı no|daire no|numara)[:\s]*\d+)/gi, replacement: "no: ****" },
+];
+// Fields that are considered sensitive and should always be redacted in structured data
+const SENSITIVE_FIELDS = [
+    "password", "passwd", "secret", "apiKey", "api_key", "apikey",
+    "token", "accessToken", "access_token", "refreshToken", "refresh_token", "authToken", "auth_token",
+    "authorization", "Authorization", "bearer",
+    "email", "e_mail", "eMail",
+    "phone", "phoneNumber", "phone_number", "telephone", "telephoneNumber", "mobile", "mobilePhone", "cellPhone",
+    "creditCard", "credit_card", "ccNumber", "cc_number", "ccn", "cvv", "cvv2", "cvc",
+    "ssn", "socialSecurity", "social_security",
+    "tcKimlik", "tc_kimlik", "identityNumber", "identity_number", "idNumber", "id_number", "nationalId",
+    "ipAddress", "ip_address", "ip",
+    "dob", "dateOfBirth", "date_of_birth", "birthDate", "birth_date",
+    "iban", "IBAN", "bankAccount", "bank_account",
+    "address", "homeAddress", "workAddress", "billingAddress", "shippingAddress",
+    "fullName", "firstName", "lastName", "surname", "middleName",
+];
+/**
+ * Mask sensitive data in a text string.
+ */
+export function maskText(text) {
+    if (!text || typeof text !== "string")
+        return text;
+    let masked = text;
+    for (const { pattern, replacement, validate } of SENSITIVE_PATTERNS) {
+        if (validate) {
+            masked = masked.replace(pattern, (match) => (validate(match) ? replacement : match));
+        }
+        else {
+            masked = masked.replace(pattern, replacement);
+        }
+    }
+    return masked;
+}
+/**
+ * Recursively mask sensitive fields in an object.
+ * Returns a new object with sensitive values redacted.
+ * Strict mode: when true, also masks values in objects even if the key
+ * is not a known sensitive field name (catches data passed to unknown schemas).
+ */
+export function maskObject(obj, depth = 0, strictMode = false) {
+    if (depth > 10)
+        return strictMode ? "***-REDACTED-***" : obj; // Prevent infinite recursion
+    if (obj === null || obj === undefined)
+        return obj;
+    if (typeof Buffer !== "undefined" && Buffer.isBuffer(obj))
+        return `<Buffer ${obj.length} bytes>`;
+    if (typeof obj === "string")
+        return maskText(obj);
+    if (typeof obj !== "object")
+        return obj;
+    if (Array.isArray(obj)) {
+        return obj.map(item => maskObject(item, depth + 1, strictMode));
+    }
+    const result = {};
+    for (const [key, value] of Object.entries(obj)) {
+        // Sensitive by exact name, or (strict mode) by name heuristic.
+        const isSensitive = SENSITIVE_FIELDS.includes(key) ||
+            (strictMode && /(pass|secret|token|key|credential|auth)/i.test(key));
+        if (isSensitive) {
+            result[key] = typeof value === "string" ? "***-REDACTED-***" : maskObject(value, depth + 1, strictMode);
+        }
+        else if (typeof value === "string") {
+            result[key] = maskText(value);
+        }
+        else if (typeof value === "object") {
+            result[key] = maskObject(value, depth + 1, strictMode);
+        }
+        else {
+            result[key] = value;
+        }
+    }
+    return result;
+}
+/**
+ * Check if a string contains potential PII.
+ * Useful for warning before sending data to external APIs.
+ */
+export function containsPII(text) {
+    for (const { pattern, validate } of SENSITIVE_PATTERNS) {
+        const re = new RegExp(pattern.source, pattern.flags);
+        let m;
+        while ((m = re.exec(text)) !== null) {
+            if (!validate || validate(m[0]))
+                return true;
+            if (m.index === re.lastIndex)
+                re.lastIndex++; // avoid zero-length loops
+        }
+    }
+    return false;
+}
+/**
+ * Check if an object contains PII in any of its string values (recursive).
+ */
+export function containsPIIInObject(obj, depth = 0) {
+    if (depth > 10)
+        return false;
+    if (obj === null || obj === undefined)
+        return false;
+    if (typeof obj === "string")
+        return containsPII(obj);
+    if (typeof obj !== "object")
+        return false;
+    if (Array.isArray(obj)) {
+        return obj.some(item => containsPIIInObject(item, depth + 1));
+    }
+    for (const [, value] of Object.entries(obj)) {
+        if (typeof value === "string") {
+            if (containsPII(value))
+                return true;
+        }
+        else if (typeof value === "object") {
+            if (containsPIIInObject(value, depth + 1))
+                return true;
+        }
+    }
+    return false;
+}
+/**
+ * Classify a piece of data based on content analysis.
+ */
+export function classifyData(text) {
+    if (!text)
+        return "public";
+    // Check for highly sensitive / critical data
+    if (/\b(sk-[a-zA-Z0-9]{20,}|Bearer\s+|eyJ[a-zA-Z0-9_-]+\.)/.test(text) ||
+        /\b[1-9][0-9]{10}\b/.test(text) ||
+        /"(password|secret|apiKey)"/i.test(text) ||
+        /\b[A-Z]{2}[0-9]{2}[A-Z0-9]{1,30}\b/.test(text) // IBAN
+    ) {
+        return "restricted";
+    }
+    // Check for personally identifiable / confidential data
+    if (/[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}/.test(text) ||
+        /(\+90|0)?\s?[0-9]{3}\s?[0-9]{3}\s?[0-9]{2}\s?[0-9]{2}/.test(text) ||
+        /\b(?:[0-9]{1,3}\.){3}[0-9]{1,3}\b/.test(text) ||
+        /\b(0[1-9]|[12][0-9]|3[01])[/.-](0[1-9]|1[0-2])[/.-](19[0-9]{2}|20[0-9]{2})\b/.test(text)) {
+        return "confidential";
+    }
+    return "internal";
+}
+/**
+ * Mask the content field of an MCP tool result.
+ * This is used by the MCP middleware layer to automatically
+ * sanitize all tool outputs before they reach the AI.
+ */
+export function maskToolResult(result) {
+    if (!result || !result.content)
+        return result;
+    return {
+        ...result,
+        content: result.content.map(block => ({
+            ...block,
+            text: block.type === "text" ? maskText(block.text) : block.text,
+        })),
+    };
+}
+/**
+ * Mask sensitive arguments in an MCP tool call.
+ * This is applied BEFORE the tool handler executes, ensuring
+ * PII never reaches any processing layer unnecessarily.
+ */
+export function maskToolArgs(args) {
+    const masked = maskObject(args, 0, true);
+    return masked;
+}
+/**
+ * Paths where PII masking of tool *results* is intentionally skipped to avoid
+ * corrupting technical content (tests, docs, examples, fixtures). Real
+ * production secrets are still caught by the secret-leak guard.
+ */
+const PII_BYPASS_PATH_PATTERNS = [
+    /(^|\/)tests?\//i,
+    /(^|\/)__tests__\//i,
+    /\.(test|spec)\.[cm]?[jt]sx?$/i,
+    /\.mdx?$/i,
+    /(^|\/)docs?\//i,
+    /\.env\.example$/i,
+    /\.example$/i,
+    /(^|\/)fixtures?\//i,
+];
+export function shouldBypassPiiMaskingForPath(filePath) {
+    if (!filePath)
+        return false;
+    const normalized = filePath.replace(/\\/g, "/");
+    return PII_BYPASS_PATH_PATTERNS.some((re) => re.test(normalized));
+}
+//# sourceMappingURL=pii.js.map

package/dist/shared/src/modules/security/pii.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pii.js","sourceRoot":"","sources":["../../../../../../shared/src/modules/security/pii.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAWH,0FAA0F;AAC1F,SAAS,WAAW,CAAC,KAAa;IAC9B,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/C,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACtC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC;IAClD,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACjC,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7D,OAAO,UAAU,GAAG,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAC9B,OAAO,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;QAChC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACpB,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC;IACrD,CAAC,CAAC,CAAC;AACP,CAAC;AAED,wFAAwF;AACxF,SAAS,aAAa,CAAC,KAAa;IAChC,OAAO,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,kBAAkB,GAAuB;IAC3C,2DAA2D;IAC3D,EAAE,OAAO,EAAE,uDAAuD,EAAE,WAAW,EAAE,sBAAsB,EAAE;IAEzG,sFAAsF;IACtF,EAAE,OAAO,EAAE,gCAAgC,EAAE,WAAW,EAAE,yBAAyB,EAAE;IACrF,sCAAsC;IACtC,EAAE,OAAO,EAAE,2BAA2B,EAAE,WAAW,EAAE,wBAAwB,EAAE;IAE/E,8DAA8D;IAC9D,2GAA2G;IAC3G,EAAE,OAAO,EAAE,4QAA4Q,EAAE,WAAW,EAAE,kBAAkB,EAAE;IAE1T,8EAA8E;IAC9E,EAAE,OAAO,EAAE,2DAA2D,EAAE,WAAW,EAAE,aAAa,EAAE;IAEpG,wDAAwD;IACxD,EAAE,OAAO,EAAE,+EAA+E,EAAE,WAAW,EAAE,YAAY,EAAE;IAEvH,0FAA0F;IAC1F,EAAE,OAAO,EAAE,iIAAiI,EAAE,WAAW,EAAE,yBAAyB,EAAE;IAEtL,8FAA8F;IAC9F,EAAE,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,aAAa,EAAE,QAAQ,EAAE,WAAW,EAAE;IAElF,QAAQ;IACR,EAAE,OAAO,EAAE,iDAAiD,EAAE,WAAW,EAAE,SAAS,EAAE;IAEtF,iFAAiF;IACjF,EAAE,OAAO,EAAE,2EAA2E,EAAE,WAAW,EAAE,cAAc,EAAE;IACrH,EAAE,OAAO,EAAE,8CAA8C,EAAE,WAAW,EAAE,cAAc,EAAE;IAExF,oGAAoG;IACpG,4GAA4G;IAC5G,EAAE,OAAO,EAAE,sGAAsG,EAAE,WAAW,EAAE,cAAc,EAAE;IAEhJ,8CAA8C;IAC9C,EAAE,OAAO,EAAE,8BAA8B,EAAE,WAAW,EAAE,iBAAiB,EAAE,QAAQ,EAAE,WAAW,EAAE;IAClG,kCAAkC;IAClC,EAAE,OAAO,EAAE,+CAA+C,EAAE,WAAW,EAAE,qBAAqB,EAAE;IAChG,2FAA2F;IAC3F,EAAE,OAAO,EAAE,iDAAiD,EAAE,WAAW,EAAE,gBAAgB,EAAE,QAAQ,EAAE,aAAa,EAAE;IAEtH,gHAAgH;IAChH,mFAAmF;IACnF,EAAE,OAAO,EAAE,uCAAuC,EAAE,WAAW,EAAE,qBAAqB,EAAE;IACxF,EAAE,OAAO,EAAE,2CAA2C,EAAE,WAAW,EAAE,qBAAqB,EAAE;IAC5F,EAAE,OAAO,EAAE,iGAAiG,EAAE,WAAW,EAAE,qBAAqB,EAAE;IAClJ,EAAE,OAAO,EAAE,qDAAqD,EAAE,WAAW,EAAE,qBAAqB,EAAE;IACtG,6EAA6E;IAC7E,EAAE,OAAO,EAAE,qCAAqC,EAAE,WAAW,EAAE,eAAe,EAAE;IAEhF,0CAA0C;IAC1C,EAAE,OAAO,EAAE,wGAAwG,EAAE,WAAW,EAAE,8BAA8B,EAAE;IAClK,0CAA0C;IAC1C,EAAE,OAAO,EAAE,wGAAwG,EAAE,WAAW,EAAE,0BAA0B,EAAE;IAE9J,kGAAkG;IAClG,EAAE,OAAO,EAAE,qGAAqG,EAAE,WAAW,EAAE,UAAU,EAAE;CAC9I,CAAC;AAEF,wFAAwF;AACxF,MAAM,gBAAgB,GAAG;IACrB,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ;IAC7D,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,cAAc,EAAE,eAAe,EAAE,WAAW,EAAE,YAAY;IAClG,eAAe,EAAE,eAAe,EAAE,QAAQ;IAC1C,OAAO,EAAE,QAAQ,EAAE,OAAO;IAC1B,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,WAAW,EAAE,iBAAiB,EAAE,QAAQ,EAAE,aAAa,EAAE,WAAW;IAC5G,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK;IACjF,KAAK,EAAE,gBAAgB,EAAE,iBAAiB;IAC1C,UAAU,EAAE,WAAW,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY;IACnG,WAAW,EAAE,YAAY,EAAE,IAAI;IAC/B,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,WAAW,EAAE,YAAY;IAChE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,cAAc;IAC7C,SAAS,EAAE,aAAa,EAAE,aAAa,EAAE,gBAAgB,EAAE,iBAAiB;IAC5E,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY;CAC/D,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,QAAQ,CAAC,IAAY;IACjC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAEnD,IAAI,MAAM,GAAG,IAAI,CAAC;IAClB,KAAK,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,kBAAkB,EAAE,CAAC;QAClE,IAAI,QAAQ,EAAE,CAAC;YACX,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QACzF,CAAC;aAAM,CAAC;YACJ,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QAClD,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAClB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,GAAY,EAAE,KAAK,GAAG,CAAC,EAAE,UAAU,GAAG,KAAK;IAClE,IAAI,KAAK,GAAG,EAAE;QAAE,OAAO,UAAU,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,6BAA6B;IAC3F,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,GAAG,CAAC;IAClD,IAAI,OAAO,MAAM,KAAK,WAAW,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,WAAW,GAAG,CAAC,MAAM,SAAS,CAAC;IACjG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;IAClD,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IAExC,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,OAAO,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC;IACpE,CAAC;IAED,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAA8B,CAAC,EAAE,CAAC;QACxE,+DAA+D;QAC/D,MAAM,WAAW,GACb,gBAAgB,CAAC,QAAQ,CAAC,GAAG,CAAC;YAC9B,CAAC,UAAU,IAAI,0CAA0C,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACzE,IAAI,WAAW,EAAE,CAAC;YACd,MAAM,CAAC,GAAG,CAAC,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,EAAE,UAAU,CAAC,CAAC;QAC5G,CAAC;aAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACnC,MAAM,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;QAClC,CAAC;aAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACnC,MAAM,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,EAAE,UAAU,CAAC,CAAC;QAC3D,CAAC;aAAM,CAAC;YACJ,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACxB,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAClB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,IAAY;IACpC,KAAK,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,kBAAkB,EAAE,CAAC;QACrD,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QACrD,IAAI,CAAyB,CAAC;QAC9B,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAClC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC7C,IAAI,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC,SAAS;gBAAE,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC,0BAA0B;QAC5E,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAY,EAAE,KAAK,GAAG,CAAC;IACvD,IAAI,KAAK,GAAG,EAAE;QAAE,OAAO,KAAK,CAAC;IAC7B,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACpD,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;IACrD,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAE1C,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,mBAAmB,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IAClE,CAAC;IAED,KAAK,MAAM,CAAC,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAA8B,CAAC,EAAE,CAAC;QACrE,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC5B,IAAI,WAAW,CAAC,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;QACxC,CAAC;aAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACnC,IAAI,mBAAmB,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;QAC3D,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAOD;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACrC,IAAI,CAAC,IAAI;QAAE,OAAO,QAAQ,CAAC;IAE3B,6CAA6C;IAC7C,IACI,uDAAuD,CAAC,IAAI,CAAC,IAAI,CAAC;QAClE,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC;QAC/B,6BAA6B,CAAC,IAAI,CAAC,IAAI,CAAC;QACxC,oCAAoC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO;MACzD,CAAC;QACC,OAAO,YAAY,CAAC;IACxB,CAAC;IAED,wDAAwD;IACxD,IACI,gDAAgD,CAAC,IAAI,CAAC,IAAI,CAAC;QAC3D,uDAAuD,CAAC,IAAI,CAAC,IAAI,CAAC;QAClE,mCAAmC,CAAC,IAAI,CAAC,IAAI,CAAC;QAC9C,8EAA8E,CAAC,IAAI,CAAC,IAAI,CAAC,EAC3F,CAAC;QACC,OAAO,cAAc,CAAC;IAC1B,CAAC;IAED,OAAO,UAAU,CAAC;AACtB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,MAA0D;IACrF,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,MAAM,CAAC;IAE9C,OAAO;QACH,GAAG,MAAM;QACT,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAClC,GAAG,KAAK;YACR,IAAI,EAAE,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI;SAClE,CAAC,CAAC;KACN,CAAC;AACN,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,IAA6B;IACtD,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC,EAAE,IAAI,CAA4B,CAAC;IACpE,OAAO,MAAM,CAAC;AAClB,CAAC;AAED;;;;GAIG;AACH,MAAM,wBAAwB,GAAa;IACvC,iBAAiB;IACjB,oBAAoB;IACpB,+BAA+B;IAC/B,UAAU;IACV,gBAAgB;IAChB,kBAAkB;IAClB,aAAa;IACb,oBAAoB;CACvB,CAAC;AAEF,MAAM,UAAU,6BAA6B,CAAC,QAAiB;IAC3D,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5B,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAChD,OAAO,wBAAwB,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;AACtE,CAAC"}

package/dist/shared/src/modules/security/policy-gate.d.ts

@@ -0,0 +1,42 @@
+/**
+ * PolicyGate — single decision point for mutating / sensitive operations.
+ *
+ * Phase 0 foundation for enterprise hard-gate security.
+ * Every MCP mutating tool should call evaluateToolCall() before side effects.
+ *
+ * Decision is pure (no I/O) except optional hooks; MCP layer may enrich with
+ * project-specific RBAC before/after this gate.
+ */
+export type PolicyEffect = "allow" | "deny";
+export type PolicyCode = "ALLOW" | "DENY_UNKNOWN_TOOL" | "DENY_PATH_TRAVERSAL" | "DENY_PROTECTED_PATH" | "DENY_ABSOLUTE_ESCAPE" | "DENY_RECON_MUTATION" | "DENY_SHELL_METACHAR" | "DENY_EMPTY_PATH";
+export interface PolicyDecision {
+    effect: PolicyEffect;
+    code: PolicyCode;
+    reason: string;
+}
+export interface ToolCallPolicyInput {
+    tool: string;
+    agent: string;
+    args: Record<string, unknown>;
+    /** Optional agent tier when known (supreme | core | recon). */
+    tier?: "supreme" | "core" | "recon";
+}
+/** Tools that mutate disk, process state, or external systems. */
+export declare const MUTATING_TOOLS: Set<string>;
+/**
+ * Normalize agent id to @name form.
+ */
+export declare function normalizeAgentId(agent: string): string;
+/**
+ * Evaluate a tool call against baseline hard rules (path safety, recon, shell meta).
+ * Does NOT replace full RBAC matrix — call permissions layer separately or wrap here later.
+ */
+export declare function evaluateToolCall(input: ToolCallPolicyInput): PolicyDecision;
+/**
+ * True when decision is allow.
+ */
+export declare function isAllowed(decision: PolicyDecision): boolean;
+/**
+ * Format decision for MCP error payloads.
+ */
+export declare function formatPolicyDenial(decision: PolicyDecision): string;

package/dist/shared/src/modules/security/policy-gate.js

@@ -0,0 +1,172 @@
+/**
+ * PolicyGate — single decision point for mutating / sensitive operations.
+ *
+ * Phase 0 foundation for enterprise hard-gate security.
+ * Every MCP mutating tool should call evaluateToolCall() before side effects.
+ *
+ * Decision is pure (no I/O) except optional hooks; MCP layer may enrich with
+ * project-specific RBAC before/after this gate.
+ */
+/** Tools that mutate disk, process state, or external systems. */
+export const MUTATING_TOOLS = new Set([
+    "write_file",
+    "replace_text",
+    "patch_file",
+    "batch_surgical_edit",
+    "run_shell_command",
+    "run_tests",
+    "check_lint",
+    "analyze_code_quality",
+    "check_architecture_compliance",
+    "delete_knowledge",
+    "update_project_memory",
+    "store_knowledge",
+    "update_contract_hash",
+    // Control-plane / security-relevant operations
+    "http_proxy_request",
+    "orchestrate_loop",
+    "submit_plan",
+    "approve_operation",
+    "register_agent",
+    "acquire_lock",
+    "release_lock",
+]);
+/** Path-like arg keys commonly used by tools. */
+const PATH_KEYS = ["path", "file", "filePath", "target", "output", "source", "archive", "filename"];
+/** Relative path segments that must never be written by agents by default. */
+const PROTECTED_PATH_PATTERNS = [
+    /(^|\/)\.env(\.|$)/i,
+    /(^|\/)\.env\.[^/]+$/i,
+    /(^|\/)\.ssh(\/|$)/i,
+    /(^|\/)\.gnupg(\/|$)/i,
+    /(^|\/)id_rsa$/i,
+    /(^|\/)id_ed25519$/i,
+    /(^|\/)credentials\.json$/i,
+    /(^|\/)\.aws\/credentials$/i,
+    /(^|\/)\.npmrc$/i,
+    /(^|\/)\.netrc$/i,
+    // Git/container/kube config and hooks — rewriting these yields code execution.
+    /(^|\/)\.git\/config$/i,
+    /(^|\/)\.git\/hooks(\/|$)/i,
+    /(^|\/)\.docker\/config\.json$/i,
+    /(^|\/)\.kube\/config$/i,
+    /(^|\/)\.gitconfig$/i,
+    // Private keys / certs
+    /\.pem$/i,
+    /\.key$/i,
+    /\.crt$/i,
+    /(^|\/)\.bashrc$/i,
+    /(^|\/)\.zshrc$/i,
+    /(^|\/)\.profile$/i,
+    /(^|\/)\.bash_profile$/i,
+];
+function allow(code = "ALLOW", reason = "Allowed") {
+    return { effect: "allow", code, reason };
+}
+function deny(code, reason) {
+    return { effect: "deny", code, reason };
+}
+function collectPaths(args) {
+    const paths = [];
+    for (const key of PATH_KEYS) {
+        const v = args[key];
+        if (typeof v === "string" && v.trim())
+            paths.push(v.trim());
+    }
+    // batch_surgical_edit
+    if (Array.isArray(args.edits)) {
+        for (const edit of args.edits) {
+            if (edit && typeof edit === "object" && typeof edit.path === "string") {
+                paths.push(edit.path.trim());
+            }
+        }
+    }
+    return paths;
+}
+/**
+ * Normalize agent id to @name form.
+ */
+export function normalizeAgentId(agent) {
+    const a = (agent || "mcp-client").trim();
+    if (!a)
+        return "@mcp-client";
+    return a.startsWith("@") ? a : `@${a}`;
+}
+/**
+ * Evaluate a tool call against baseline hard rules (path safety, recon, shell meta).
+ * Does NOT replace full RBAC matrix — call permissions layer separately or wrap here later.
+ */
+export function evaluateToolCall(input) {
+    const tool = input.tool;
+    const agent = normalizeAgentId(input.agent);
+    const tier = input.tier;
+    const args = input.args || {};
+    if (!tool) {
+        return deny("DENY_UNKNOWN_TOOL", "Missing tool name");
+    }
+    const isMutating = MUTATING_TOOLS.has(tool);
+    // Path safety for any tool that carries paths (read or write)
+    const paths = collectPaths(args);
+    for (const p of paths) {
+        if (!p) {
+            return deny("DENY_EMPTY_PATH", "Empty path argument is not allowed");
+        }
+        // Null bytes / obvious traversal
+        if (p.includes("\0")) {
+            return deny("DENY_PATH_TRAVERSAL", "Path contains illegal null byte");
+        }
+        // Windows + POSIX traversal
+        if (p.includes("..")) {
+            // Allow only if not used as parent segment — simple hard deny for Phase 0
+            const segments = p.replace(/\\/g, "/").split("/");
+            if (segments.some((s) => s === "..")) {
+                return deny("DENY_PATH_TRAVERSAL", `Path traversal denied for "${p}". Paths must stay inside the project root.`);
+            }
+        }
+        // Absolute paths that look like host escapes (MCP should still safePath; belt-and-suspenders)
+        if (p.startsWith("/") || /^[A-Za-z]:[\\/]/.test(p)) {
+            // Absolute can be OK if still under project after safePath — flag high-risk patterns only
+            if (p.startsWith("/etc") ||
+                p.startsWith("/usr") ||
+                p.startsWith("/bin") ||
+                p.startsWith("/sbin") ||
+                p.includes("/.ssh") ||
+                p.startsWith("/System")) {
+                return deny("DENY_ABSOLUTE_ESCAPE", `Absolute system path denied: "${p}"`);
+            }
+        }
+        if (isMutating) {
+            const normalized = p.replace(/\\/g, "/");
+            for (const re of PROTECTED_PATH_PATTERNS) {
+                if (re.test(normalized)) {
+                    return deny("DENY_PROTECTED_PATH", `Write/mutate denied for protected path "${p}". Secrets and credential files are blocked by PolicyGate.`);
+                }
+            }
+        }
+    }
+    // Recon agents: no mutating tools (matrix may later grant exceptions — Phase 0 hard deny)
+    if (isMutating && tier === "recon") {
+        return deny("DENY_RECON_MUTATION", `Agent ${agent} (tier: recon) cannot invoke mutating tool "${tool}".`);
+    }
+    // Shell metacharacters (defense in depth; shell tool also checks)
+    if (tool === "run_shell_command") {
+        const command = String(args.command ?? "");
+        if (/[;&|><$`\n\r]/.test(command)) {
+            return deny("DENY_SHELL_METACHAR", "Shell metacharacters are forbidden to prevent command injection.");
+        }
+    }
+    return allow();
+}
+/**
+ * True when decision is allow.
+ */
+export function isAllowed(decision) {
+    return decision.effect === "allow";
+}
+/**
+ * Format decision for MCP error payloads.
+ */
+export function formatPolicyDenial(decision) {
+    return `[POLICY_GATE] ${decision.code}: ${decision.reason}`;
+}
+//# sourceMappingURL=policy-gate.js.map

package/dist/shared/src/modules/security/policy-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-gate.js","sourceRoot":"","sources":["../../../../../../shared/src/modules/security/policy-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AA4BH,kEAAkE;AAClE,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAClC,YAAY;IACZ,cAAc;IACd,YAAY;IACZ,qBAAqB;IACrB,mBAAmB;IACnB,WAAW;IACX,YAAY;IACZ,sBAAsB;IACtB,+BAA+B;IAC/B,kBAAkB;IAClB,uBAAuB;IACvB,iBAAiB;IACjB,sBAAsB;IACtB,+CAA+C;IAC/C,oBAAoB;IACpB,kBAAkB;IAClB,aAAa;IACb,mBAAmB;IACnB,gBAAgB;IAChB,cAAc;IACd,cAAc;CACjB,CAAC,CAAC;AAEH,iDAAiD;AACjD,MAAM,SAAS,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAU,CAAC;AAE7G,8EAA8E;AAC9E,MAAM,uBAAuB,GAAa;IACtC,oBAAoB;IACpB,sBAAsB;IACtB,oBAAoB;IACpB,sBAAsB;IACtB,gBAAgB;IAChB,oBAAoB;IACpB,2BAA2B;IAC3B,4BAA4B;IAC5B,iBAAiB;IACjB,iBAAiB;IACjB,+EAA+E;IAC/E,uBAAuB;IACvB,2BAA2B;IAC3B,gCAAgC;IAChC,wBAAwB;IACxB,qBAAqB;IACrB,uBAAuB;IACvB,SAAS;IACT,SAAS;IACT,SAAS;IACT,kBAAkB;IAClB,iBAAiB;IACjB,mBAAmB;IACnB,wBAAwB;CAC3B,CAAC;AAEF,SAAS,KAAK,CAAC,OAAmB,OAAO,EAAE,MAAM,GAAG,SAAS;IACzD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC7C,CAAC;AAED,SAAS,IAAI,CAAC,IAAgB,EAAE,MAAc;IAC1C,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC5C,CAAC;AAED,SAAS,YAAY,CAAC,IAA6B;IAC/C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;QAC1B,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;QACpB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE;YAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAChE,CAAC;IACD,sBAAsB;IACtB,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC5B,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAQ,IAA0B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC3F,KAAK,CAAC,IAAI,CAAE,IAAyB,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YACvD,CAAC;QACL,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC1C,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,YAAY,CAAC,CAAC,IAAI,EAAE,CAAC;IACzC,IAAI,CAAC,CAAC;QAAE,OAAO,aAAa,CAAC;IAC7B,OAAO,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;AAC3C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAA0B;IACvD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IACxB,MAAM,KAAK,GAAG,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IACxB,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;IAE9B,IAAI,CAAC,IAAI,EAAE,CAAC;QACR,OAAO,IAAI,CAAC,mBAAmB,EAAE,mBAAmB,CAAC,CAAC;IAC1D,CAAC;IAED,MAAM,UAAU,GAAG,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAE5C,8DAA8D;IAC9D,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACjC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACpB,IAAI,CAAC,CAAC,EAAE,CAAC;YACL,OAAO,IAAI,CAAC,iBAAiB,EAAE,oCAAoC,CAAC,CAAC;QACzE,CAAC;QACD,iCAAiC;QACjC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC,qBAAqB,EAAE,iCAAiC,CAAC,CAAC;QAC1E,CAAC;QACD,4BAA4B;QAC5B,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACnB,0EAA0E;YAC1E,MAAM,QAAQ,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAClD,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC;gBACnC,OAAO,IAAI,CACP,qBAAqB,EACrB,8BAA8B,CAAC,6CAA6C,CAC/E,CAAC;YACN,CAAC;QACL,CAAC;QACD,8FAA8F;QAC9F,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,0FAA0F;YAC1F,IACI,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC;gBACpB,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC;gBACpB,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC;gBACpB,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC;gBACrB,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;gBACnB,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,EACzB,CAAC;gBACC,OAAO,IAAI,CACP,sBAAsB,EACtB,iCAAiC,CAAC,GAAG,CACxC,CAAC;YACN,CAAC;QACL,CAAC;QAED,IAAI,UAAU,EAAE,CAAC;YACb,MAAM,UAAU,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YACzC,KAAK,MAAM,EAAE,IAAI,uBAAuB,EAAE,CAAC;gBACvC,IAAI,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;oBACtB,OAAO,IAAI,CACP,qBAAqB,EACrB,2CAA2C,CAAC,4DAA4D,CAC3G,CAAC;gBACN,CAAC;YACL,CAAC;QACL,CAAC;IACL,CAAC;IAED,0FAA0F;IAC1F,IAAI,UAAU,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACjC,OAAO,IAAI,CACP,qBAAqB,EACrB,SAAS,KAAK,+CAA+C,IAAI,IAAI,CACxE,CAAC;IACN,CAAC;IAED,kEAAkE;IAClE,IAAI,IAAI,KAAK,mBAAmB,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;QAC3C,IAAI,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAChC,OAAO,IAAI,CACP,qBAAqB,EACrB,kEAAkE,CACrE,CAAC;QACN,CAAC;IACL,CAAC;IAED,OAAO,KAAK,EAAE,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,SAAS,CAAC,QAAwB;IAC9C,OAAO,QAAQ,CAAC,MAAM,KAAK,OAAO,CAAC;AACvC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,QAAwB;IACvD,OAAO,iBAAiB,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;AAChE,CAAC"}

package/dist/shared/src/modules/security/retention.d.ts

@@ -0,0 +1,68 @@
+/**
+ * Data retention categories and default durations (days)
+ */
+export declare const RETENTION_POLICIES: Record<string, number>;
+/**
+ * [KVKK/GDPR] Data Retention Manager
+ */
+export declare class DataRetention {
+    private static cleanupInterval;
+    /**
+   * Initialize data retention with automatic cleanup.
+   * Starts a periodic cleanup job.
+   *
+   * @param intervalMs Cleanup interval in milliseconds (default: 1 hour)
+   */
+    static initialize(intervalMs?: number): void;
+    /**
+   * Run cleanup for all data stores.
+   * Cleans audit logs, messages, and logs based on retention policies.
+   */
+    static runCleanup(): {
+        audit: number;
+        messages: number;
+        logs: number;
+    };
+    /**
+   * [KVKK Art. 7] "Right to Erasure" — Deletes all data for a given trace ID.
+   * Cleans audit records, messages, logs, and tasks.
+   *
+   * @param traceId Trace ID to erase
+   * @returns Total number of deleted records
+   */
+    static eraseTraceData(traceId: string): number;
+    /**
+   * [KVKK Art. 11] Erases all data across every store (full right-to-erasure).
+   * Only works with the confirmation code.
+   */
+    static eraseAllData(confirmationCode: string): number;
+    /**
+     * Recompute the agent-log chain anchor after a legitimate deletion so that
+     * verification does not mistake retention/erasure for tampering.
+     */
+    private static refreshLogAnchor;
+    /**
+   * Get retention statistics.
+   */
+    static getStats(): {
+        auditExpired: number;
+        messageCount: number;
+        logCount: number;
+        taskCount: number;
+        policies: Record<string, number>;
+    };
+    /**
+   * Stop the periodic cleanup job.
+   */
+    static shutdown(): void;
+    /**
+   * Clean old messages from the Hermes queue.
+   * Messages older than 30 days are removed.
+   */
+    private static cleanOldMessages;
+    /**
+   * Clean old logs.
+   * Logs older than 30 days are removed.
+   */
+    private static cleanOldLogs;
+}