beddel 0.1.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +297 -0
- package/dist/agents/agentRegistry.d.ts +68 -0
- package/dist/agents/agentRegistry.d.ts.map +1 -0
- package/dist/agents/agentRegistry.js +222 -0
- package/dist/agents/agentRegistry.js.map +1 -0
- package/dist/agents/formatter-agent.d.ts +10 -0
- package/dist/agents/formatter-agent.d.ts.map +1 -0
- package/dist/agents/formatter-agent.js +49 -0
- package/dist/agents/formatter-agent.js.map +1 -0
- package/dist/agents/genkit-agent.d.ts +12 -0
- package/dist/agents/genkit-agent.d.ts.map +1 -0
- package/dist/agents/genkit-agent.js +119 -0
- package/dist/agents/genkit-agent.js.map +1 -0
- package/dist/agents/i18n-messages.d.ts +17 -0
- package/dist/agents/i18n-messages.d.ts.map +1 -0
- package/dist/agents/i18n-messages.js +92 -0
- package/dist/agents/i18n-messages.js.map +1 -0
- package/dist/agents/index.d.ts +10 -0
- package/dist/agents/index.d.ts.map +1 -0
- package/dist/agents/index.js +26 -0
- package/dist/agents/index.js.map +1 -0
- package/dist/agents/pipeline.d.ts +15 -0
- package/dist/agents/pipeline.d.ts.map +1 -0
- package/dist/agents/pipeline.js +45 -0
- package/dist/agents/pipeline.js.map +1 -0
- package/dist/agents/schema-factory.d.ts +40 -0
- package/dist/agents/schema-factory.d.ts.map +1 -0
- package/dist/agents/schema-factory.js +121 -0
- package/dist/agents/schema-factory.js.map +1 -0
- package/dist/agents/translation-validators.d.ts +26 -0
- package/dist/agents/translation-validators.d.ts.map +1 -0
- package/dist/agents/translation-validators.js +77 -0
- package/dist/agents/translation-validators.js.map +1 -0
- package/dist/agents/translator-agents.d.ts +184 -0
- package/dist/agents/translator-agents.d.ts.map +1 -0
- package/dist/agents/translator-agents.js +613 -0
- package/dist/agents/translator-agents.js.map +1 -0
- package/dist/agents/types/translation.types.d.ts +100 -0
- package/dist/agents/types/translation.types.d.ts.map +1 -0
- package/dist/agents/types/translation.types.js +3 -0
- package/dist/agents/types/translation.types.js.map +1 -0
- package/dist/agents/validator-agent.d.ts +42 -0
- package/dist/agents/validator-agent.d.ts.map +1 -0
- package/dist/agents/validator-agent.js +122 -0
- package/dist/agents/validator-agent.js.map +1 -0
- package/dist/audit/auditTrail.d.ts +55 -0
- package/dist/audit/auditTrail.d.ts.map +1 -0
- package/dist/audit/auditTrail.js +93 -0
- package/dist/audit/auditTrail.js.map +1 -0
- package/dist/compliance/gdprEngine.d.ts +44 -0
- package/dist/compliance/gdprEngine.d.ts.map +1 -0
- package/dist/compliance/gdprEngine.js +178 -0
- package/dist/compliance/gdprEngine.js.map +1 -0
- package/dist/compliance/lgpdEngine.d.ts +51 -0
- package/dist/compliance/lgpdEngine.d.ts.map +1 -0
- package/dist/compliance/lgpdEngine.js +221 -0
- package/dist/compliance/lgpdEngine.js.map +1 -0
- package/dist/config.d.ts +78 -0
- package/dist/config.d.ts.map +1 -0
- package/dist/config.js +77 -0
- package/dist/config.js.map +1 -0
- package/dist/errors.d.ts +17 -0
- package/dist/errors.d.ts.map +1 -0
- package/dist/errors.js +40 -0
- package/dist/errors.js.map +1 -0
- package/dist/firebase/tenantManager.d.ts +84 -0
- package/dist/firebase/tenantManager.d.ts.map +1 -0
- package/dist/firebase/tenantManager.js +378 -0
- package/dist/firebase/tenantManager.js.map +1 -0
- package/dist/index.d.ts +36 -0
- package/dist/index.d.ts.map +1 -0
- package/dist/index.js +118 -0
- package/dist/index.js.map +1 -0
- package/dist/integration/secure-yaml-runtime.d.ts +68 -0
- package/dist/integration/secure-yaml-runtime.d.ts.map +1 -0
- package/dist/integration/secure-yaml-runtime.js +245 -0
- package/dist/integration/secure-yaml-runtime.js.map +1 -0
- package/dist/parser/secure-yaml-parser.d.ts +62 -0
- package/dist/parser/secure-yaml-parser.d.ts.map +1 -0
- package/dist/parser/secure-yaml-parser.js +234 -0
- package/dist/parser/secure-yaml-parser.js.map +1 -0
- package/dist/performance/autoscaling.d.ts +100 -0
- package/dist/performance/autoscaling.d.ts.map +1 -0
- package/dist/performance/autoscaling.js +339 -0
- package/dist/performance/autoscaling.js.map +1 -0
- package/dist/performance/benchmark.d.ts +104 -0
- package/dist/performance/benchmark.d.ts.map +1 -0
- package/dist/performance/benchmark.js +514 -0
- package/dist/performance/benchmark.js.map +1 -0
- package/dist/performance/index.d.ts +14 -0
- package/dist/performance/index.d.ts.map +1 -0
- package/dist/performance/index.js +35 -0
- package/dist/performance/index.js.map +1 -0
- package/dist/performance/monitor.d.ts +126 -0
- package/dist/performance/monitor.d.ts.map +1 -0
- package/dist/performance/monitor.js +324 -0
- package/dist/performance/monitor.js.map +1 -0
- package/dist/performance/streaming.d.ts +82 -0
- package/dist/performance/streaming.d.ts.map +1 -0
- package/dist/performance/streaming.js +287 -0
- package/dist/performance/streaming.js.map +1 -0
- package/dist/runtime/audit.d.ts +240 -0
- package/dist/runtime/audit.d.ts.map +1 -0
- package/dist/runtime/audit.js +641 -0
- package/dist/runtime/audit.js.map +1 -0
- package/dist/runtime/declarativeAgentRuntime.d.ts +123 -0
- package/dist/runtime/declarativeAgentRuntime.d.ts.map +1 -0
- package/dist/runtime/declarativeAgentRuntime.js +576 -0
- package/dist/runtime/declarativeAgentRuntime.js.map +1 -0
- package/dist/runtime/isolatedRuntime.d.ts +119 -0
- package/dist/runtime/isolatedRuntime.d.ts.map +1 -0
- package/dist/runtime/isolatedRuntime.js +425 -0
- package/dist/runtime/isolatedRuntime.js.map +1 -0
- package/dist/runtime/schemaCompiler.d.ts +35 -0
- package/dist/runtime/schemaCompiler.d.ts.map +1 -0
- package/dist/runtime/schemaCompiler.js +151 -0
- package/dist/runtime/schemaCompiler.js.map +1 -0
- package/dist/runtime/simpleRuntime.d.ts +57 -0
- package/dist/runtime/simpleRuntime.d.ts.map +1 -0
- package/dist/runtime/simpleRuntime.js +187 -0
- package/dist/runtime/simpleRuntime.js.map +1 -0
- package/dist/security/dashboard.d.ts +89 -0
- package/dist/security/dashboard.d.ts.map +1 -0
- package/dist/security/dashboard.js +300 -0
- package/dist/security/dashboard.js.map +1 -0
- package/dist/security/hardening.d.ts +130 -0
- package/dist/security/hardening.d.ts.map +1 -0
- package/dist/security/hardening.js +414 -0
- package/dist/security/hardening.js.map +1 -0
- package/dist/security/index.d.ts +128 -0
- package/dist/security/index.d.ts.map +1 -0
- package/dist/security/index.js +353 -0
- package/dist/security/index.js.map +1 -0
- package/dist/security/monitor.d.ts +88 -0
- package/dist/security/monitor.d.ts.map +1 -0
- package/dist/security/monitor.js +356 -0
- package/dist/security/monitor.js.map +1 -0
- package/dist/security/scanner.d.ts +104 -0
- package/dist/security/scanner.d.ts.map +1 -0
- package/dist/security/scanner.js +298 -0
- package/dist/security/scanner.js.map +1 -0
- package/dist/security/score.d.ts +150 -0
- package/dist/security/score.d.ts.map +1 -0
- package/dist/security/score.js +983 -0
- package/dist/security/score.js.map +1 -0
- package/dist/security/test-security.d.ts +22 -0
- package/dist/security/test-security.d.ts.map +1 -0
- package/dist/security/test-security.js +154 -0
- package/dist/security/test-security.js.map +1 -0
- package/dist/security/threatDetector.d.ts +39 -0
- package/dist/security/threatDetector.d.ts.map +1 -0
- package/dist/security/threatDetector.js +354 -0
- package/dist/security/threatDetector.js.map +1 -0
- package/dist/security/validation.d.ts +69 -0
- package/dist/security/validation.d.ts.map +1 -0
- package/dist/security/validation.js +286 -0
- package/dist/security/validation.js.map +1 -0
- package/dist/server/api/clientsRoute.d.ts +9 -0
- package/dist/server/api/clientsRoute.d.ts.map +1 -0
- package/dist/server/api/clientsRoute.js +71 -0
- package/dist/server/api/clientsRoute.js.map +1 -0
- package/dist/server/api/endpointsRoute.d.ts +8 -0
- package/dist/server/api/endpointsRoute.d.ts.map +1 -0
- package/dist/server/api/endpointsRoute.js +76 -0
- package/dist/server/api/endpointsRoute.js.map +1 -0
- package/dist/server/api/graphql.d.ts +9 -0
- package/dist/server/api/graphql.d.ts.map +1 -0
- package/dist/server/api/graphql.js +180 -0
- package/dist/server/api/graphql.js.map +1 -0
- package/dist/server/errors.d.ts +19 -0
- package/dist/server/errors.d.ts.map +1 -0
- package/dist/server/errors.js +42 -0
- package/dist/server/errors.js.map +1 -0
- package/dist/server/index.d.ts +7 -0
- package/dist/server/index.d.ts.map +1 -0
- package/dist/server/index.js +24 -0
- package/dist/server/index.js.map +1 -0
- package/dist/server/kvStore.d.ts +27 -0
- package/dist/server/kvStore.d.ts.map +1 -0
- package/dist/server/kvStore.js +128 -0
- package/dist/server/kvStore.js.map +1 -0
- package/dist/server/runtimeSecurity.d.ts +28 -0
- package/dist/server/runtimeSecurity.d.ts.map +1 -0
- package/dist/server/runtimeSecurity.js +85 -0
- package/dist/server/runtimeSecurity.js.map +1 -0
- package/dist/server/types.d.ts +53 -0
- package/dist/server/types.d.ts.map +1 -0
- package/dist/server/types.js +8 -0
- package/dist/server/types.js.map +1 -0
- package/dist/types/executionContext.d.ts +16 -0
- package/dist/types/executionContext.d.ts.map +1 -0
- package/dist/types/executionContext.js +3 -0
- package/dist/types/executionContext.js.map +1 -0
- package/package.json +77 -0
- package/src/agents/agentRegistry.ts +272 -0
- package/src/agents/image-agent.yaml +86 -0
- package/src/agents/joker-agent.yaml +47 -0
- package/src/agents/translator-agent.yaml +80 -0
- package/src/audit/auditTrail.ts +134 -0
- package/src/compliance/gdprEngine.ts +209 -0
- package/src/compliance/lgpdEngine.ts +268 -0
- package/src/config.ts +179 -0
- package/src/errors.ts +35 -0
- package/src/firebase/tenantManager.ts +443 -0
- package/src/index.ts +125 -0
- package/src/integration/secure-yaml-runtime.ts +341 -0
- package/src/parser/secure-yaml-parser.ts +273 -0
- package/src/performance/autoscaling.ts +495 -0
- package/src/performance/benchmark.ts +644 -0
- package/src/performance/index.ts +34 -0
- package/src/performance/monitor.ts +469 -0
- package/src/performance/streaming.ts +317 -0
- package/src/runtime/audit.ts +907 -0
- package/src/runtime/declarativeAgentRuntime.ts +836 -0
- package/src/runtime/isolatedRuntime.ts +572 -0
- package/src/runtime/schemaCompiler.ts +228 -0
- package/src/runtime/simpleRuntime.ts +201 -0
- package/src/security/dashboard.ts +462 -0
- package/src/security/hardening.ts +560 -0
- package/src/security/index.ts +439 -0
- package/src/security/monitor.ts +490 -0
- package/src/security/scanner.ts +368 -0
- package/src/security/score.ts +1138 -0
- package/src/security/threatDetector.ts +481 -0
- package/src/security/validation.ts +365 -0
- package/src/server/api/clientsRoute.ts +92 -0
- package/src/server/api/endpointsRoute.ts +97 -0
- package/src/server/api/graphql.ts +249 -0
- package/src/server/errors.ts +38 -0
- package/src/server/index.ts +6 -0
- package/src/server/kvStore.ts +152 -0
- package/src/server/runtimeSecurity.ts +102 -0
- package/src/server/types.ts +60 -0
- package/src/types/executionContext.ts +16 -0
- package/tools/seed.ts +365 -0
- package/tools/test-endpoints.ts +174 -0
|
@@ -0,0 +1,356 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.securityMonitor = exports.MetricsCollector = exports.AlertManager = exports.ThreatMLModel = exports.AnomalyDetector = exports.ThreatDetectionEngine = exports.SecurityMonitor = exports.AlertLevel = void 0;
|
|
4
|
+
const events_1 = require("events");
|
|
5
|
+
const auditTrail_1 = require("../audit/auditTrail");
|
|
6
|
+
const config_1 = require("../config");
|
|
7
|
+
var AlertLevel;
|
|
8
|
+
(function (AlertLevel) {
|
|
9
|
+
AlertLevel["INFO"] = "info";
|
|
10
|
+
AlertLevel["WARNING"] = "warning";
|
|
11
|
+
AlertLevel["CRITICAL"] = "critical";
|
|
12
|
+
AlertLevel["EMERGENCY"] = "emergency";
|
|
13
|
+
})(AlertLevel || (exports.AlertLevel = AlertLevel = {}));
|
|
14
|
+
class SecurityMonitor extends events_1.EventEmitter {
|
|
15
|
+
constructor() {
|
|
16
|
+
super();
|
|
17
|
+
this.isMonitoring = false;
|
|
18
|
+
this.threatDetector = new ThreatDetectionEngine();
|
|
19
|
+
this.alertManager = new AlertManager();
|
|
20
|
+
this.metricsCollector = new MetricsCollector();
|
|
21
|
+
this.auditTrail = new auditTrail_1.AuditTrail();
|
|
22
|
+
this.securityConfig = {
|
|
23
|
+
alertThreshold: config_1.runtimeConfig.securityScore >= 9.5 ? 0.7 : 0.6,
|
|
24
|
+
};
|
|
25
|
+
}
|
|
26
|
+
static getInstance() {
|
|
27
|
+
if (!SecurityMonitor.instance) {
|
|
28
|
+
SecurityMonitor.instance = new SecurityMonitor();
|
|
29
|
+
}
|
|
30
|
+
return SecurityMonitor.instance;
|
|
31
|
+
}
|
|
32
|
+
startMonitoring() {
|
|
33
|
+
if (this.isMonitoring) {
|
|
34
|
+
return;
|
|
35
|
+
}
|
|
36
|
+
this.isMonitoring = true;
|
|
37
|
+
this.emit("monitoringStarted", { timestamp: new Date() });
|
|
38
|
+
this.logEvent("system", "monitoring_started", { version: "2025.1.0" });
|
|
39
|
+
}
|
|
40
|
+
stopMonitoring() {
|
|
41
|
+
if (!this.isMonitoring) {
|
|
42
|
+
return;
|
|
43
|
+
}
|
|
44
|
+
this.isMonitoring = false;
|
|
45
|
+
this.emit("monitoringStopped", { timestamp: new Date() });
|
|
46
|
+
this.logEvent("system", "monitoring_stopped", { reason: "manual" });
|
|
47
|
+
}
|
|
48
|
+
isMonitoringActive() {
|
|
49
|
+
return this.isMonitoring;
|
|
50
|
+
}
|
|
51
|
+
async monitorActivity(tenantId, operation, metadata) {
|
|
52
|
+
if (!this.isMonitoring) {
|
|
53
|
+
throw new Error("Security monitoring is not active");
|
|
54
|
+
}
|
|
55
|
+
const eventId = this.generateEventId();
|
|
56
|
+
const timestamp = new Date();
|
|
57
|
+
// Perform threat analysis
|
|
58
|
+
const threatAnalysis = await this.threatDetector.analyze(tenantId, operation, metadata);
|
|
59
|
+
const securityEvent = {
|
|
60
|
+
id: eventId,
|
|
61
|
+
tenantId,
|
|
62
|
+
operation,
|
|
63
|
+
metadata,
|
|
64
|
+
timestamp,
|
|
65
|
+
riskScore: threatAnalysis.riskScore,
|
|
66
|
+
alertLevel: this.determineAlertLevel(threatAnalysis.riskScore),
|
|
67
|
+
};
|
|
68
|
+
// Log to audit trail
|
|
69
|
+
await this.logSecurityEvent(securityEvent);
|
|
70
|
+
// Check if alert needs to be triggered
|
|
71
|
+
if (securityEvent.riskScore > this.securityConfig.alertThreshold) {
|
|
72
|
+
await this.triggerSecurityAlert(securityEvent);
|
|
73
|
+
}
|
|
74
|
+
// Emit event for real-time dashboards
|
|
75
|
+
this.emit("securityEvent", securityEvent);
|
|
76
|
+
this.metricsCollector.recordEvent(securityEvent);
|
|
77
|
+
return securityEvent;
|
|
78
|
+
}
|
|
79
|
+
generateEventId() {
|
|
80
|
+
return `sec-${Date.now()}-${Math.random().toString(36).substr(2, 9)}`;
|
|
81
|
+
}
|
|
82
|
+
determineAlertLevel(riskScore) {
|
|
83
|
+
if (riskScore >= 0.9)
|
|
84
|
+
return AlertLevel.EMERGENCY;
|
|
85
|
+
if (riskScore >= 0.7)
|
|
86
|
+
return AlertLevel.CRITICAL;
|
|
87
|
+
if (riskScore >= 0.4)
|
|
88
|
+
return AlertLevel.WARNING;
|
|
89
|
+
return AlertLevel.INFO;
|
|
90
|
+
}
|
|
91
|
+
async logSecurityEvent(event) {
|
|
92
|
+
await this.auditTrail.logOperation({
|
|
93
|
+
operationId: event.id,
|
|
94
|
+
tenantId: event.tenantId,
|
|
95
|
+
operation: `security_${event.operation}`,
|
|
96
|
+
data: {
|
|
97
|
+
metadata: event.metadata,
|
|
98
|
+
riskScore: event.riskScore,
|
|
99
|
+
alertLevel: event.alertLevel,
|
|
100
|
+
},
|
|
101
|
+
timestamp: event.timestamp,
|
|
102
|
+
success: true,
|
|
103
|
+
});
|
|
104
|
+
}
|
|
105
|
+
async triggerSecurityAlert(event) {
|
|
106
|
+
await this.alertManager.sendAlert(event);
|
|
107
|
+
this.emit("securityAlert", event);
|
|
108
|
+
}
|
|
109
|
+
async logEvent(tenantId, operation, metadata, riskScore = 0.1) {
|
|
110
|
+
return this.monitorActivity(tenantId, operation, metadata);
|
|
111
|
+
}
|
|
112
|
+
getMetrics() {
|
|
113
|
+
return this.metricsCollector.getMetrics();
|
|
114
|
+
}
|
|
115
|
+
getThreatStatistics() {
|
|
116
|
+
return this.threatDetector.getStatistics();
|
|
117
|
+
}
|
|
118
|
+
}
|
|
119
|
+
exports.SecurityMonitor = SecurityMonitor;
|
|
120
|
+
// Supporting Classes
|
|
121
|
+
class ThreatDetectionEngine {
|
|
122
|
+
constructor() {
|
|
123
|
+
this.patterns = new Map();
|
|
124
|
+
this.initializePatterns();
|
|
125
|
+
this.anomalyDetector = new AnomalyDetector();
|
|
126
|
+
this.mlModel = new ThreatMLModel();
|
|
127
|
+
}
|
|
128
|
+
initializePatterns() {
|
|
129
|
+
this.patterns.set("brute_force", /multiple_failed_attempts|rapid_login_sequence/i);
|
|
130
|
+
this.patterns.set("sql_injection", /union.*select|drop.*table|exec.*\(.*\)/i);
|
|
131
|
+
this.patterns.set("data_exfiltration", /bulk.*export|mass.*download|unusual.*access/i);
|
|
132
|
+
this.patterns.set("cross_tenant", /cross.*tenant|tenant.*injection|unauthorized.*access/i);
|
|
133
|
+
this.patterns.set("lgpd_violation", /unauthorized.*data|consent.*violation|retention.*breach/i);
|
|
134
|
+
}
|
|
135
|
+
async analyze(tenantId, operation, metadata) {
|
|
136
|
+
let riskScore = 0.1; // Base risk
|
|
137
|
+
let threatType = "low_risk";
|
|
138
|
+
let confidence = 0.9;
|
|
139
|
+
// Pattern matching
|
|
140
|
+
for (const [patternName, pattern] of this.patterns) {
|
|
141
|
+
if (pattern.test(operation) || pattern.test(JSON.stringify(metadata))) {
|
|
142
|
+
riskScore += patternName === "emergency" ? 0.8 : 0.4;
|
|
143
|
+
threatType = patternName;
|
|
144
|
+
break;
|
|
145
|
+
}
|
|
146
|
+
}
|
|
147
|
+
// Anomaly detection
|
|
148
|
+
const anomalyScore = await this.anomalyDetector.detectAnomaly(tenantId, operation, metadata);
|
|
149
|
+
riskScore += anomalyScore * 0.3;
|
|
150
|
+
// ML model prediction
|
|
151
|
+
const mlScore = await this.mlModel.predict(tenantId, operation, metadata);
|
|
152
|
+
riskScore += mlScore * 0.2;
|
|
153
|
+
// Cap risk score at 1.0
|
|
154
|
+
riskScore = Math.min(riskScore, 1.0);
|
|
155
|
+
const recommendations = this.generateRecommendations(riskScore, threatType);
|
|
156
|
+
return {
|
|
157
|
+
riskScore,
|
|
158
|
+
threatType,
|
|
159
|
+
confidence,
|
|
160
|
+
recommendations,
|
|
161
|
+
};
|
|
162
|
+
}
|
|
163
|
+
generateRecommendations(riskScore, threatType) {
|
|
164
|
+
const recommendations = [];
|
|
165
|
+
if (riskScore > 0.7) {
|
|
166
|
+
recommendations.push("Immediate investigation required");
|
|
167
|
+
recommendations.push("Consider tenant isolation");
|
|
168
|
+
recommendations.push("Notify security team");
|
|
169
|
+
}
|
|
170
|
+
else if (riskScore > 0.4) {
|
|
171
|
+
recommendations.push("Monitor closely");
|
|
172
|
+
recommendations.push("Check access logs");
|
|
173
|
+
recommendations.push("Review permissions");
|
|
174
|
+
}
|
|
175
|
+
else {
|
|
176
|
+
recommendations.push("Routine monitoring");
|
|
177
|
+
recommendations.push("Document pattern");
|
|
178
|
+
}
|
|
179
|
+
return recommendations;
|
|
180
|
+
}
|
|
181
|
+
getStatistics() {
|
|
182
|
+
return {
|
|
183
|
+
patternsLoaded: this.patterns.size,
|
|
184
|
+
lastUpdate: new Date().toISOString(),
|
|
185
|
+
mlModelVersion: "2025.1.0",
|
|
186
|
+
};
|
|
187
|
+
}
|
|
188
|
+
}
|
|
189
|
+
exports.ThreatDetectionEngine = ThreatDetectionEngine;
|
|
190
|
+
class AnomalyDetector {
|
|
191
|
+
constructor() {
|
|
192
|
+
this.normalPatterns = new Map();
|
|
193
|
+
this.anomalyThreshold = 2.5;
|
|
194
|
+
}
|
|
195
|
+
async detectAnomaly(tenantId, operation, metadata) {
|
|
196
|
+
const key = `${tenantId}:${operation}`;
|
|
197
|
+
const currentTime = new Date().getTime();
|
|
198
|
+
if (!this.normalPatterns.has(key)) {
|
|
199
|
+
this.normalPatterns.set(key, []);
|
|
200
|
+
}
|
|
201
|
+
const patterns = this.normalPatterns.get(key);
|
|
202
|
+
// Simple time-based anomaly detection
|
|
203
|
+
if (patterns.length > 10) {
|
|
204
|
+
const timeInterval = currentTime - patterns[patterns.length - 1].timestamp;
|
|
205
|
+
// Check if current operation is happening too frequently
|
|
206
|
+
if (timeInterval < 1000) {
|
|
207
|
+
// Less than 1 second
|
|
208
|
+
return 0.6; // High anomaly score
|
|
209
|
+
}
|
|
210
|
+
// Check for unusual velocity
|
|
211
|
+
const intervals = [];
|
|
212
|
+
for (let i = 1; i < patterns.length; i++) {
|
|
213
|
+
intervals.push(patterns[i].timestamp - patterns[i - 1].timestamp);
|
|
214
|
+
}
|
|
215
|
+
const avgInterval = intervals.reduce((a, b) => a + b, 0) / intervals.length;
|
|
216
|
+
const currentDeviation = Math.abs(timeInterval - avgInterval) / avgInterval;
|
|
217
|
+
if (currentDeviation > this.anomalyThreshold) {
|
|
218
|
+
return 0.4;
|
|
219
|
+
}
|
|
220
|
+
}
|
|
221
|
+
// Store current pattern
|
|
222
|
+
patterns.push({
|
|
223
|
+
timestamp: currentTime,
|
|
224
|
+
metadata: metadata,
|
|
225
|
+
});
|
|
226
|
+
// Keep only recent patterns (last 24 hours)
|
|
227
|
+
const cutoff = currentTime - 24 * 60 * 60 * 1000;
|
|
228
|
+
this.normalPatterns.set(key, patterns.filter((p) => p.timestamp > cutoff));
|
|
229
|
+
return 0.0; // Normal behavior
|
|
230
|
+
}
|
|
231
|
+
}
|
|
232
|
+
exports.AnomalyDetector = AnomalyDetector;
|
|
233
|
+
class ThreatMLModel {
|
|
234
|
+
constructor() {
|
|
235
|
+
this.modelWeights = new Map();
|
|
236
|
+
this.initializeModel();
|
|
237
|
+
}
|
|
238
|
+
initializeModel() {
|
|
239
|
+
// Simplified ML model weights
|
|
240
|
+
this.modelWeights.set("tenant_historical_access", 0.3);
|
|
241
|
+
this.modelWeights.set("operation_frequency", 0.4);
|
|
242
|
+
this.modelWeights.set("metadata_complexity", 0.2);
|
|
243
|
+
this.modelWeights.set("time_based_anomaly", 0.1);
|
|
244
|
+
}
|
|
245
|
+
async predict(tenantId, operation, metadata) {
|
|
246
|
+
// Simplified ML prediction
|
|
247
|
+
let score = 0.0;
|
|
248
|
+
// Higher risk for operations outside business hours
|
|
249
|
+
const hour = new Date().getHours();
|
|
250
|
+
if (hour < 6 || hour > 22) {
|
|
251
|
+
score += 0.3;
|
|
252
|
+
}
|
|
253
|
+
// Higher risk for complex metadata
|
|
254
|
+
if (JSON.stringify(metadata).length > 1000) {
|
|
255
|
+
score += 0.2;
|
|
256
|
+
}
|
|
257
|
+
// Higher risk for bulk operations
|
|
258
|
+
if (operation.includes("bulk") || operation.includes("mass")) {
|
|
259
|
+
score += 0.4;
|
|
260
|
+
}
|
|
261
|
+
// Higher risk for cross-tenant operations
|
|
262
|
+
if (operation.includes("cross") || operation.includes("tenant")) {
|
|
263
|
+
score += 0.5;
|
|
264
|
+
}
|
|
265
|
+
return Math.min(score, 0.8);
|
|
266
|
+
}
|
|
267
|
+
}
|
|
268
|
+
exports.ThreatMLModel = ThreatMLModel;
|
|
269
|
+
class AlertManager {
|
|
270
|
+
constructor() {
|
|
271
|
+
this.alertHistory = new Map();
|
|
272
|
+
this.MAX_ALERTS_PER_TENANT = 100;
|
|
273
|
+
}
|
|
274
|
+
async sendAlert(event) {
|
|
275
|
+
const key = event.tenantId;
|
|
276
|
+
if (!this.alertHistory.has(key)) {
|
|
277
|
+
this.alertHistory.set(key, []);
|
|
278
|
+
}
|
|
279
|
+
const alerts = this.alertHistory.get(key);
|
|
280
|
+
alerts.push(event);
|
|
281
|
+
// Keep only recent alerts
|
|
282
|
+
if (alerts.length > this.MAX_ALERTS_PER_TENANT) {
|
|
283
|
+
alerts.shift();
|
|
284
|
+
}
|
|
285
|
+
// Log the alert
|
|
286
|
+
console.warn(`[SECURITY_ALERT] Tenant: ${event.tenantId}, Risk: ${event.riskScore}, Operation: ${event.operation}`);
|
|
287
|
+
}
|
|
288
|
+
getAlertHistory(tenantId) {
|
|
289
|
+
return this.alertHistory.get(tenantId) || [];
|
|
290
|
+
}
|
|
291
|
+
getAlertSummary() {
|
|
292
|
+
const summary = {};
|
|
293
|
+
for (const [tenantId, alerts] of this.alertHistory) {
|
|
294
|
+
summary[tenantId] = {
|
|
295
|
+
totalAlerts: alerts.length,
|
|
296
|
+
criticalAlerts: alerts.filter((a) => a.riskScore > 0.7).length,
|
|
297
|
+
lastAlert: alerts[alerts.length - 1]?.timestamp,
|
|
298
|
+
};
|
|
299
|
+
}
|
|
300
|
+
return summary;
|
|
301
|
+
}
|
|
302
|
+
}
|
|
303
|
+
exports.AlertManager = AlertManager;
|
|
304
|
+
class MetricsCollector {
|
|
305
|
+
constructor() {
|
|
306
|
+
this.metrics = {
|
|
307
|
+
totalEvents: 0,
|
|
308
|
+
totalAlerts: 0,
|
|
309
|
+
alertsByLevel: {
|
|
310
|
+
info: 0,
|
|
311
|
+
warning: 0,
|
|
312
|
+
critical: 0,
|
|
313
|
+
emergency: 0,
|
|
314
|
+
},
|
|
315
|
+
averageRiskScore: 0,
|
|
316
|
+
lastUpdate: null,
|
|
317
|
+
};
|
|
318
|
+
}
|
|
319
|
+
recordEvent(event) {
|
|
320
|
+
this.metrics.totalEvents++;
|
|
321
|
+
this.metrics.totalAlerts += event.riskScore > 0.7 ? 1 : 0;
|
|
322
|
+
this.metrics.alertsByLevel[event.alertLevel]++;
|
|
323
|
+
// Update average risk score
|
|
324
|
+
this.metrics.averageRiskScore =
|
|
325
|
+
(this.metrics.averageRiskScore * (this.metrics.totalEvents - 1) +
|
|
326
|
+
event.riskScore) /
|
|
327
|
+
this.metrics.totalEvents;
|
|
328
|
+
this.metrics.lastUpdate = new Date().toISOString();
|
|
329
|
+
}
|
|
330
|
+
getMetrics() {
|
|
331
|
+
return {
|
|
332
|
+
...this.metrics,
|
|
333
|
+
alertRate: this.metrics.totalEvents > 0
|
|
334
|
+
? this.metrics.totalAlerts / this.metrics.totalEvents
|
|
335
|
+
: 0,
|
|
336
|
+
};
|
|
337
|
+
}
|
|
338
|
+
resetMetrics() {
|
|
339
|
+
this.metrics = {
|
|
340
|
+
totalEvents: 0,
|
|
341
|
+
totalAlerts: 0,
|
|
342
|
+
alertsByLevel: {
|
|
343
|
+
info: 0,
|
|
344
|
+
warning: 0,
|
|
345
|
+
critical: 0,
|
|
346
|
+
emergency: 0,
|
|
347
|
+
},
|
|
348
|
+
averageRiskScore: 0,
|
|
349
|
+
lastUpdate: null,
|
|
350
|
+
};
|
|
351
|
+
}
|
|
352
|
+
}
|
|
353
|
+
exports.MetricsCollector = MetricsCollector;
|
|
354
|
+
// Export singleton instance
|
|
355
|
+
exports.securityMonitor = SecurityMonitor.getInstance();
|
|
356
|
+
//# sourceMappingURL=monitor.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"monitor.js","sourceRoot":"","sources":["../../src/security/monitor.ts"],"names":[],"mappings":";;;AAAA,mCAAsC;AACtC,oDAAiD;AACjD,sCAA0C;AAY1C,IAAY,UAKX;AALD,WAAY,UAAU;IACpB,2BAAa,CAAA;IACb,iCAAmB,CAAA;IACnB,mCAAqB,CAAA;IACrB,qCAAuB,CAAA;AACzB,CAAC,EALW,UAAU,0BAAV,UAAU,QAKrB;AASD,MAAa,eAAgB,SAAQ,qBAAY;IAS/C;QACE,KAAK,EAAE,CAAC;QALF,iBAAY,GAAY,KAAK,CAAC;QAMpC,IAAI,CAAC,cAAc,GAAG,IAAI,qBAAqB,EAAE,CAAC;QAClD,IAAI,CAAC,YAAY,GAAG,IAAI,YAAY,EAAE,CAAC;QACvC,IAAI,CAAC,gBAAgB,GAAG,IAAI,gBAAgB,EAAE,CAAC;QAC/C,IAAI,CAAC,UAAU,GAAG,IAAI,uBAAU,EAAE,CAAC;QACnC,IAAI,CAAC,cAAc,GAAG;YACpB,cAAc,EAAE,sBAAa,CAAC,aAAa,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;SAC/D,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,WAAW;QAChB,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,CAAC;YAC9B,eAAe,CAAC,QAAQ,GAAG,IAAI,eAAe,EAAE,CAAC;QACnD,CAAC;QACD,OAAO,eAAe,CAAC,QAAQ,CAAC;IAClC,CAAC;IAEM,eAAe;QACpB,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,OAAO;QACT,CAAC;QAED,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;QAC1D,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;IACzE,CAAC;IAEM,cAAc;QACnB,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACvB,OAAO;QACT,CAAC;QAED,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;QAC1B,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;QAC1D,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IACtE,CAAC;IAEM,kBAAkB;QACvB,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAEM,KAAK,CAAC,eAAe,CAC1B,QAAgB,EAChB,SAAiB,EACjB,QAAa;QAEb,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACvD,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;QACvC,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAE7B,0BAA0B;QAC1B,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CACtD,QAAQ,EACR,SAAS,EACT,QAAQ,CACT,CAAC;QAEF,MAAM,aAAa,GAAkB;YACnC,EAAE,EAAE,OAAO;YACX,QAAQ;YACR,SAAS;YACT,QAAQ;YACR,SAAS;YACT,SAAS,EAAE,cAAc,CAAC,SAAS;YACnC,UAAU,EAAE,IAAI,CAAC,mBAAmB,CAAC,cAAc,CAAC,SAAS,CAAC;SAC/D,CAAC;QAEF,qBAAqB;QACrB,MAAM,IAAI,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAAC;QAE3C,uCAAuC;QACvC,IAAI,aAAa,CAAC,SAAS,GAAG,IAAI,CAAC,cAAc,CAAC,cAAc,EAAE,CAAC;YACjE,MAAM,IAAI,CAAC,oBAAoB,CAAC,aAAa,CAAC,CAAC;QACjD,CAAC;QAED,sCAAsC;QACtC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,aAAa,CAAC,CAAC;QAC1C,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;QAEjD,OAAO,aAAa,CAAC;IACvB,CAAC;IAEO,eAAe;QACrB,OAAO,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;IACxE,CAAC;IAEO,mBAAmB,CAAC,SAAiB;QAC3C,IAAI,SAAS,IAAI,GAAG;YAAE,OAAO,UAAU,CAAC,SAAS,CAAC;QAClD,IAAI,SAAS,IAAI,GAAG;YAAE,OAAO,UAAU,CAAC,QAAQ,CAAC;QACjD,IAAI,SAAS,IAAI,GAAG;YAAE,OAAO,UAAU,CAAC,OAAO,CAAC;QAChD,OAAO,UAAU,CAAC,IAAI,CAAC;IACzB,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,KAAoB;QACjD,MAAM,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;YACjC,WAAW,EAAE,KAAK,CAAC,EAAE;YACrB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,SAAS,EAAE,YAAY,KAAK,CAAC,SAAS,EAAE;YACxC,IAAI,EAAE;gBACJ,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,UAAU,EAAE,KAAK,CAAC,UAAU;aAC7B;YACD,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE,IAAI;SACd,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,oBAAoB,CAAC,KAAoB;QACrD,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;IACpC,CAAC;IAEM,KAAK,CAAC,QAAQ,CACnB,QAAgB,EAChB,SAAiB,EACjB,QAAa,EACb,YAAoB,GAAG;QAEvB,OAAO,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC7D,CAAC;IAEM,UAAU;QACf,OAAO,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,CAAC;IAC5C,CAAC;IAEM,mBAAmB;QACxB,OAAO,IAAI,CAAC,cAAc,CAAC,aAAa,EAAE,CAAC;IAC7C,CAAC;CACF;AA9ID,0CA8IC;AAED,qBAAqB;AAErB,MAAa,qBAAqB;IAKhC;QAJQ,aAAQ,GAAwB,IAAI,GAAG,EAAE,CAAC;QAKhD,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC1B,IAAI,CAAC,eAAe,GAAG,IAAI,eAAe,EAAE,CAAC;QAC7C,IAAI,CAAC,OAAO,GAAG,IAAI,aAAa,EAAE,CAAC;IACrC,CAAC;IAEO,kBAAkB;QACxB,IAAI,CAAC,QAAQ,CAAC,GAAG,CACf,aAAa,EACb,gDAAgD,CACjD,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,GAAG,CACf,eAAe,EACf,yCAAyC,CAC1C,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,GAAG,CACf,mBAAmB,EACnB,8CAA8C,CAC/C,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,GAAG,CACf,cAAc,EACd,uDAAuD,CACxD,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,GAAG,CACf,gBAAgB,EAChB,0DAA0D,CAC3D,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,OAAO,CAClB,QAAgB,EAChB,SAAiB,EACjB,QAAa;QAEb,IAAI,SAAS,GAAG,GAAG,CAAC,CAAC,YAAY;QACjC,IAAI,UAAU,GAAG,UAAU,CAAC;QAC5B,IAAI,UAAU,GAAG,GAAG,CAAC;QAErB,mBAAmB;QACnB,KAAK,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnD,IAAI,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;gBACtE,SAAS,IAAI,WAAW,KAAK,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;gBACrD,UAAU,GAAG,WAAW,CAAC;gBACzB,MAAM;YACR,CAAC;QACH,CAAC;QAED,oBAAoB;QACpB,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,aAAa,CAC3D,QAAQ,EACR,SAAS,EACT,QAAQ,CACT,CAAC;QACF,SAAS,IAAI,YAAY,GAAG,GAAG,CAAC;QAEhC,sBAAsB;QACtB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC1E,SAAS,IAAI,OAAO,GAAG,GAAG,CAAC;QAE3B,wBAAwB;QACxB,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QAErC,MAAM,eAAe,GAAG,IAAI,CAAC,uBAAuB,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QAE5E,OAAO;YACL,SAAS;YACT,UAAU;YACV,UAAU;YACV,eAAe;SAChB,CAAC;IACJ,CAAC;IAEO,uBAAuB,CAC7B,SAAiB,EACjB,UAAkB;QAElB,MAAM,eAAe,GAAa,EAAE,CAAC;QAErC,IAAI,SAAS,GAAG,GAAG,EAAE,CAAC;YACpB,eAAe,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;YACzD,eAAe,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;YAClD,eAAe,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QAC/C,CAAC;aAAM,IAAI,SAAS,GAAG,GAAG,EAAE,CAAC;YAC3B,eAAe,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;YACxC,eAAe,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;YAC1C,eAAe,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAC7C,CAAC;aAAM,CAAC;YACN,eAAe,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;YAC3C,eAAe,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAC3C,CAAC;QAED,OAAO,eAAe,CAAC;IACzB,CAAC;IAEM,aAAa;QAClB,OAAO;YACL,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;YAClC,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACpC,cAAc,EAAE,UAAU;SAC3B,CAAC;IACJ,CAAC;CACF;AA1GD,sDA0GC;AAED,MAAa,eAAe;IAA5B;QACU,mBAAc,GAAuB,IAAI,GAAG,EAAE,CAAC;QAC/C,qBAAgB,GAAW,GAAG,CAAC;IA0DzC,CAAC;IAxDQ,KAAK,CAAC,aAAa,CACxB,QAAgB,EAChB,SAAiB,EACjB,QAAa;QAEb,MAAM,GAAG,GAAG,GAAG,QAAQ,IAAI,SAAS,EAAE,CAAC;QACvC,MAAM,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;QAEzC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAClC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACnC,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC;QAE/C,sCAAsC;QACtC,IAAI,QAAQ,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YACzB,MAAM,YAAY,GAChB,WAAW,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;YAExD,yDAAyD;YACzD,IAAI,YAAY,GAAG,IAAI,EAAE,CAAC;gBACxB,qBAAqB;gBACrB,OAAO,GAAG,CAAC,CAAC,qBAAqB;YACnC,CAAC;YAED,6BAA6B;YAC7B,MAAM,SAAS,GAAG,EAAE,CAAC;YACrB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACzC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YACpE,CAAC;YAED,MAAM,WAAW,GACf,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,SAAS,CAAC,MAAM,CAAC;YAC1D,MAAM,gBAAgB,GACpB,IAAI,CAAC,GAAG,CAAC,YAAY,GAAG,WAAW,CAAC,GAAG,WAAW,CAAC;YAErD,IAAI,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBAC7C,OAAO,GAAG,CAAC;YACb,CAAC;QACH,CAAC;QAED,wBAAwB;QACxB,QAAQ,CAAC,IAAI,CAAC;YACZ,SAAS,EAAE,WAAW;YACtB,QAAQ,EAAE,QAAQ;SACnB,CAAC,CAAC;QAEH,4CAA4C;QAC5C,MAAM,MAAM,GAAG,WAAW,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;QACjD,IAAI,CAAC,cAAc,CAAC,GAAG,CACrB,GAAG,EACH,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,MAAM,CAAC,CAC7C,CAAC;QAEF,OAAO,GAAG,CAAC,CAAC,kBAAkB;IAChC,CAAC;CACF;AA5DD,0CA4DC;AAED,MAAa,aAAa;IAGxB;QAFQ,iBAAY,GAAwB,IAAI,GAAG,EAAE,CAAC;QAGpD,IAAI,CAAC,eAAe,EAAE,CAAC;IACzB,CAAC;IAEO,eAAe;QACrB,8BAA8B;QAC9B,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,0BAA0B,EAAE,GAAG,CAAC,CAAC;QACvD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,qBAAqB,EAAE,GAAG,CAAC,CAAC;QAClD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,qBAAqB,EAAE,GAAG,CAAC,CAAC;QAClD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,oBAAoB,EAAE,GAAG,CAAC,CAAC;IACnD,CAAC;IAEM,KAAK,CAAC,OAAO,CAClB,QAAgB,EAChB,SAAiB,EACjB,QAAa;QAEb,2BAA2B;QAC3B,IAAI,KAAK,GAAG,GAAG,CAAC;QAEhB,oDAAoD;QACpD,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC;QACnC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,EAAE,EAAE,CAAC;YAC1B,KAAK,IAAI,GAAG,CAAC;QACf,CAAC;QAED,mCAAmC;QACnC,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;YAC3C,KAAK,IAAI,GAAG,CAAC;QACf,CAAC;QAED,kCAAkC;QAClC,IAAI,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7D,KAAK,IAAI,GAAG,CAAC;QACf,CAAC;QAED,0CAA0C;QAC1C,IAAI,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChE,KAAK,IAAI,GAAG,CAAC;QACf,CAAC;QAED,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC9B,CAAC;CACF;AA9CD,sCA8CC;AAED,MAAa,YAAY;IAAzB;QACU,iBAAY,GAAiC,IAAI,GAAG,EAAE,CAAC;QAC9C,0BAAqB,GAAG,GAAG,CAAC;IAsC/C,CAAC;IApCQ,KAAK,CAAC,SAAS,CAAC,KAAoB;QACzC,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC;QAE3B,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAChC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACjC,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAEnB,0BAA0B;QAC1B,IAAI,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,qBAAqB,EAAE,CAAC;YAC/C,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,CAAC;QAED,gBAAgB;QAChB,OAAO,CAAC,IAAI,CACV,4BAA4B,KAAK,CAAC,QAAQ,WAAW,KAAK,CAAC,SAAS,gBAAgB,KAAK,CAAC,SAAS,EAAE,CACtG,CAAC;IACJ,CAAC;IAEM,eAAe,CAAC,QAAgB;QACrC,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC/C,CAAC;IAEM,eAAe;QACpB,MAAM,OAAO,GAAwB,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACnD,OAAO,CAAC,QAAQ,CAAC,GAAG;gBAClB,WAAW,EAAE,MAAM,CAAC,MAAM;gBAC1B,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC,MAAM;gBAC9D,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,SAAS;aAChD,CAAC;QACJ,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;CACF;AAxCD,oCAwCC;AAED,MAAa,gBAAgB;IAA7B;QACU,YAAO,GAAQ;YACrB,WAAW,EAAE,CAAC;YACd,WAAW,EAAE,CAAC;YACd,aAAa,EAAE;gBACb,IAAI,EAAE,CAAC;gBACP,OAAO,EAAE,CAAC;gBACV,QAAQ,EAAE,CAAC;gBACX,SAAS,EAAE,CAAC;aACb;YACD,gBAAgB,EAAE,CAAC;YACnB,UAAU,EAAE,IAAI;SACjB,CAAC;IAwCJ,CAAC;IAtCQ,WAAW,CAAC,KAAoB;QACrC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;QAC3B,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,KAAK,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1D,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;QAE/C,4BAA4B;QAC5B,IAAI,CAAC,OAAO,CAAC,gBAAgB;YAC3B,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,GAAG,CAAC,CAAC;gBAC7D,KAAK,CAAC,SAAS,CAAC;gBAClB,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;QAE3B,IAAI,CAAC,OAAO,CAAC,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrD,CAAC;IAEM,UAAU;QACf,OAAO;YACL,GAAG,IAAI,CAAC,OAAO;YACf,SAAS,EACP,IAAI,CAAC,OAAO,CAAC,WAAW,GAAG,CAAC;gBAC1B,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW;gBACrD,CAAC,CAAC,CAAC;SACR,CAAC;IACJ,CAAC;IAEM,YAAY;QACjB,IAAI,CAAC,OAAO,GAAG;YACb,WAAW,EAAE,CAAC;YACd,WAAW,EAAE,CAAC;YACd,aAAa,EAAE;gBACb,IAAI,EAAE,CAAC;gBACP,OAAO,EAAE,CAAC;gBACV,QAAQ,EAAE,CAAC;gBACX,SAAS,EAAE,CAAC;aACb;YACD,gBAAgB,EAAE,CAAC;YACnB,UAAU,EAAE,IAAI;SACjB,CAAC;IACJ,CAAC;CACF;AApDD,4CAoDC;AAED,4BAA4B;AACf,QAAA,eAAe,GAAG,eAAe,CAAC,WAAW,EAAE,CAAC"}
|
|
@@ -0,0 +1,104 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Security scanner for YAML parsing
|
|
3
|
+
* Comprehensive vulnerability detection and security analysis
|
|
4
|
+
*/
|
|
5
|
+
export interface ScanResult {
|
|
6
|
+
secure: boolean;
|
|
7
|
+
score: number;
|
|
8
|
+
grade: string;
|
|
9
|
+
vulnerabilities: any[];
|
|
10
|
+
warnings: string[];
|
|
11
|
+
recommendations: string[];
|
|
12
|
+
details: SecurityDetails;
|
|
13
|
+
}
|
|
14
|
+
export interface SecurityDetails {
|
|
15
|
+
timestamp: number;
|
|
16
|
+
objectId: string;
|
|
17
|
+
size: number;
|
|
18
|
+
depth: number;
|
|
19
|
+
complexity: string;
|
|
20
|
+
riskLevel: 'LOW' | 'MEDIUM' | 'HIGH' | 'CRITICAL';
|
|
21
|
+
scanDuration: number;
|
|
22
|
+
}
|
|
23
|
+
declare class SecurityScanner {
|
|
24
|
+
private validator;
|
|
25
|
+
private hardening;
|
|
26
|
+
private scanHistory;
|
|
27
|
+
constructor();
|
|
28
|
+
/**
|
|
29
|
+
* Executa scanning completo de segurança
|
|
30
|
+
*/
|
|
31
|
+
scan(obj: any): Promise<ScanResult>;
|
|
32
|
+
/**
|
|
33
|
+
* Rápida validação de segurança
|
|
34
|
+
*/
|
|
35
|
+
quickValidate(obj: any): {
|
|
36
|
+
isValid: boolean;
|
|
37
|
+
warnings: number;
|
|
38
|
+
errors: number;
|
|
39
|
+
};
|
|
40
|
+
/**
|
|
41
|
+
* Análise aprofundada de risco
|
|
42
|
+
*/
|
|
43
|
+
analyzeRisk(obj: any): {
|
|
44
|
+
riskLevel: string;
|
|
45
|
+
factors: string[];
|
|
46
|
+
score: number;
|
|
47
|
+
};
|
|
48
|
+
/**
|
|
49
|
+
* Gera relatório de segurança
|
|
50
|
+
*/
|
|
51
|
+
generateReport(obj: any): string;
|
|
52
|
+
/**
|
|
53
|
+
* Estatísticas do histórico de scans
|
|
54
|
+
*/
|
|
55
|
+
getScanHistory(): {
|
|
56
|
+
totalScans: number;
|
|
57
|
+
averageScore: number;
|
|
58
|
+
secureScans: number;
|
|
59
|
+
insecureScans: number;
|
|
60
|
+
averageRiskLevel: string;
|
|
61
|
+
};
|
|
62
|
+
/**
|
|
63
|
+
* Extrai warnings dos resultados
|
|
64
|
+
*/
|
|
65
|
+
private extractWarnings;
|
|
66
|
+
/**
|
|
67
|
+
* Estima tamanho do objeto
|
|
68
|
+
*/
|
|
69
|
+
private estimateObjectSize;
|
|
70
|
+
/**
|
|
71
|
+
* Calcula profundidade máxima
|
|
72
|
+
*/
|
|
73
|
+
private calculateMaxDepth;
|
|
74
|
+
/**
|
|
75
|
+
* Estima complexidade do objeto
|
|
76
|
+
*/
|
|
77
|
+
private estimateComplexity;
|
|
78
|
+
/**
|
|
79
|
+
* Conta chaves totais
|
|
80
|
+
*/
|
|
81
|
+
private countTotalKeys;
|
|
82
|
+
/**
|
|
83
|
+
* Gera ID único do objeto
|
|
84
|
+
*/
|
|
85
|
+
private generateObjectId;
|
|
86
|
+
/**
|
|
87
|
+
* Formata bytes
|
|
88
|
+
*/
|
|
89
|
+
private formatBytes;
|
|
90
|
+
/**
|
|
91
|
+
* Reinicializa o scanner
|
|
92
|
+
*/
|
|
93
|
+
reset(): void;
|
|
94
|
+
}
|
|
95
|
+
/**
|
|
96
|
+
* Função auxiliar para realizar scan rápido
|
|
97
|
+
*/
|
|
98
|
+
export declare function quickSecurityScan(obj: any): Promise<ScanResult>;
|
|
99
|
+
/**
|
|
100
|
+
* Função auxiliar para validar segurança básica
|
|
101
|
+
*/
|
|
102
|
+
export declare function validateSecurityBasic(obj: any): boolean;
|
|
103
|
+
export { SecurityScanner as SecurityScanner };
|
|
104
|
+
//# sourceMappingURL=scanner.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"scanner.d.ts","sourceRoot":"","sources":["../../src/security/scanner.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAMH,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,EAAE,GAAG,EAAE,CAAC;IACvB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,OAAO,EAAE,eAAe,CAAC;CAC1B;AAED,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;IAClD,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,cAAM,eAAe;IACnB,OAAO,CAAC,SAAS,CAAoB;IACrC,OAAO,CAAC,SAAS,CAAoB;IACrC,OAAO,CAAC,WAAW,CAAoB;;IAOvC;;OAEG;IACU,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,UAAU,CAAC;IA6ChD;;OAEG;IACI,aAAa,CAAC,GAAG,EAAE,GAAG,GAAG;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE;IAStF;;OAEG;IACI,WAAW,CAAC,GAAG,EAAE,GAAG,GAAG;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,EAAE,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE;IAqCrF;;OAEG;IACI,cAAc,CAAC,GAAG,EAAE,GAAG,GAAG,MAAM;IA0CvC;;OAEG;IACI,cAAc,IAAI;QACvB,UAAU,EAAE,MAAM,CAAC;QACnB,YAAY,EAAE,MAAM,CAAC;QACrB,WAAW,EAAE,MAAM,CAAC;QACpB,aAAa,EAAE,MAAM,CAAC;QACtB,gBAAgB,EAAE,MAAM,CAAC;KAC1B;IA8BD;;OAEG;IACH,OAAO,CAAC,eAAe;IAoBvB;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAQ1B;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAgBzB;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAU1B;;OAEG;IACH,OAAO,CAAC,cAAc;IAoBtB;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAexB;;OAEG;IACH,OAAO,CAAC,WAAW;IAMnB;;OAEG;IACI,KAAK,IAAI,IAAI;CAKrB;AAED;;GAEG;AACH,wBAAsB,iBAAiB,CAAC,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,UAAU,CAAC,CAGrE;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,GAAG,GAAG,OAAO,CAKvD;AAED,OAAO,EAAE,eAAe,IAAI,eAAe,EAAE,CAAC"}
|