claude-flow 2.0.0-alpha.61 → 2.0.0-alpha.62

package/dist/enterprise/security-manager.js

@@ -51,7 +51,7 @@ export class SecurityManager extends EventEmitter {
                 severity: ['critical', 'high', 'medium', 'low'],
                 formats: ['json', 'html'],
                 outputPath: join(this.securityPath, 'reports'),
-                ...scanData.configuration
+                ...scanData.configuration,
             },
             results: [],
             metrics: {
@@ -64,19 +64,19 @@ export class SecurityManager extends EventEmitter {
                 suppressed: 0,
                 scanDuration: 0,
                 filesScanned: 0,
-                linesScanned: 0
+                linesScanned: 0,
             },
             compliance: {
                 frameworks: [],
                 requirements: [],
                 overallScore: 0,
                 passedChecks: 0,
-                failedChecks: 0
+                failedChecks: 0,
             },
             remediation: {
                 autoFixAvailable: [],
                 manualReview: [],
-                recommendations: []
+                recommendations: [],
             },
             schedule: scanData.schedule,
             notifications: {
@@ -84,18 +84,18 @@ export class SecurityManager extends EventEmitter {
                 thresholds: {
                     critical: 1,
                     high: 5,
-                    medium: 10
-                }
+                    medium: 10,
+                },
             },
             createdAt: new Date(),
             updatedAt: new Date(),
             createdBy: 'system',
-            auditLog: []
+            auditLog: [],
         };
         this.addAuditEntry(scan, 'system', 'scan_created', 'scan', {
             scanId: scan.id,
             scanName: scan.name,
-            scanType: scan.type
+            scanType: scan.type,
         });
         this.scans.set(scan.id, scan);
         await this.saveScan(scan);
@@ -115,7 +115,7 @@ export class SecurityManager extends EventEmitter {
         scan.updatedAt = new Date();
         this.addAuditEntry(scan, 'system', 'scan_started', 'scan', {
             scanId,
-            target: scan.target
+            target: scan.target,
         });
         await this.saveScan(scan);
         this.emit('scan:started', scan);
@@ -139,7 +139,7 @@ export class SecurityManager extends EventEmitter {
             this.addAuditEntry(scan, 'system', 'scan_completed', 'scan', {
                 scanId,
                 duration: scan.metrics.scanDuration,
-                findingsCount: scan.results.length
+                findingsCount: scan.results.length,
             });
             await this.saveScan(scan);
             this.emit('scan:completed', scan);
@@ -150,7 +150,7 @@ export class SecurityManager extends EventEmitter {
             scan.updatedAt = new Date();
             this.addAuditEntry(scan, 'system', 'scan_failed', 'scan', {
                 scanId,
-                error: (error instanceof Error ? error.message : String(error))
+                error: error instanceof Error ? error.message : String(error),
             });
             await this.saveScan(scan);
             this.emit('scan:failed', { scan, error });
@@ -171,50 +171,50 @@ export class SecurityManager extends EventEmitter {
                 systems: [],
                 data: [],
                 users: [],
-                ...incidentData.affected
+                ...incidentData.affected,
             },
             timeline: {
                 detected: new Date(),
                 reported: new Date(),
-                acknowledged: new Date()
+                acknowledged: new Date(),
             },
             response: {
                 assignedTo: [],
                 actions: [],
                 communications: [],
-                lessons: []
+                lessons: [],
             },
             evidence: {
                 logs: [],
                 files: [],
                 screenshots: [],
-                forensics: []
+                forensics: [],
             },
             impact: {
                 confidentiality: 'none',
                 integrity: 'none',
-                availability: 'none'
+                availability: 'none',
             },
             rootCause: {
                 primary: '',
                 contributing: [],
-                analysis: ''
+                analysis: '',
             },
             remediation: {
                 immediate: [],
                 shortTerm: [],
                 longTerm: [],
-                preventive: []
+                preventive: [],
             },
             createdAt: new Date(),
             updatedAt: new Date(),
             createdBy: 'system',
-            auditLog: []
+            auditLog: [],
         };
         this.addAuditEntry(incident, 'system', 'incident_created', 'incident', {
             incidentId: incident.id,
             severity: incident.severity,
-            type: incident.type
+            type: incident.type,
         });
         this.incidents.set(incident.id, incident);
         await this.saveIncident(incident);
@@ -244,7 +244,7 @@ export class SecurityManager extends EventEmitter {
             incidentId,
             changes: Object.keys(updates),
             oldStatus,
-            newStatus: incident.status
+            newStatus: incident.status,
         });
         await this.saveIncident(incident);
         this.emit('incident:updated', { incident, updates });
@@ -269,35 +269,35 @@ export class SecurityManager extends EventEmitter {
             type: policyData.type,
             version: '1.0.0',
             status: 'draft',
-            rules: policyData.rules.map(rule => ({
+            rules: policyData.rules.map((rule) => ({
                 id: `rule-${Date.now()}-${Math.random().toString(36).substr(2, 9)}`,
-                ...rule
+                ...rule,
             })),
             enforcement: {
                 level: 'warning',
                 exceptions: [],
                 approvers: [],
-                ...policyData.enforcement
+                ...policyData.enforcement,
             },
             applicability: {
                 projects: [],
                 environments: [],
                 resources: [],
-                ...policyData.applicability
+                ...policyData.applicability,
             },
             schedule: {
                 reviewFrequency: 'annually',
                 nextReview: new Date(Date.now() + 365 * 24 * 60 * 60 * 1000), // 1 year
-                reviewer: 'security-team'
+                reviewer: 'security-team',
             },
             metrics: {
                 violations: 0,
                 compliance: 100,
-                exceptions: 0
+                exceptions: 0,
             },
             createdAt: new Date(),
             updatedAt: new Date(),
-            createdBy: 'system'
+            createdBy: 'system',
         };
         this.policies.set(policy.id, policy);
         await this.savePolicy(policy);
@@ -311,38 +311,37 @@ export class SecurityManager extends EventEmitter {
         // Apply filters
         if (filters) {
             if (filters.timeRange) {
-                scans = scans.filter(s => s.createdAt >= filters.timeRange.start &&
-                    s.createdAt <= filters.timeRange.end);
-                incidents = incidents.filter(i => i.createdAt >= filters.timeRange.start &&
-                    i.createdAt <= filters.timeRange.end);
+                scans = scans.filter((s) => s.createdAt >= filters.timeRange.start && s.createdAt <= filters.timeRange.end);
+                incidents = incidents.filter((i) => i.createdAt >= filters.timeRange.start && i.createdAt <= filters.timeRange.end);
             }
             if (filters.projectId) {
-                scans = scans.filter(s => s.projectId === filters.projectId);
+                scans = scans.filter((s) => s.projectId === filters.projectId);
             }
         }
         // Calculate scan metrics
         const scanMetrics = {
             total: scans.length,
-            completed: scans.filter(s => s.status === 'completed').length,
-            failed: scans.filter(s => s.status === 'failed').length,
-            inProgress: scans.filter(s => s.status === 'running').length,
+            completed: scans.filter((s) => s.status === 'completed').length,
+            failed: scans.filter((s) => s.status === 'failed').length,
+            inProgress: scans.filter((s) => s.status === 'running').length,
             byType: this.groupBy(scans, 'type'),
-            averageDuration: scans.length > 0 ?
-                scans.reduce((sum, s) => sum + s.metrics.scanDuration, 0) / scans.length : 0
+            averageDuration: scans.length > 0
+                ? scans.reduce((sum, s) => sum + s.metrics.scanDuration, 0) / scans.length
+                : 0,
         };
         // Calculate finding metrics
-        const allFindings = scans.flatMap(s => s.results);
+        const allFindings = scans.flatMap((s) => s.results);
         const findingMetrics = {
             total: allFindings.length,
-            open: allFindings.filter(f => f.status === 'open').length,
-            resolved: allFindings.filter(f => f.status === 'resolved').length,
-            suppressed: allFindings.filter(f => f.status === 'suppressed').length,
+            open: allFindings.filter((f) => f.status === 'open').length,
+            resolved: allFindings.filter((f) => f.status === 'resolved').length,
+            suppressed: allFindings.filter((f) => f.status === 'suppressed').length,
             bySeverity: this.groupBy(allFindings, 'severity'),
             byCategory: this.groupBy(allFindings, 'category'),
-            meanTimeToResolution: this.calculateMTTR(allFindings)
+            meanTimeToResolution: this.calculateMTTR(allFindings),
         };
         // Calculate compliance metrics
-        const allComplianceChecks = scans.flatMap(s => s.compliance.requirements);
+        const allComplianceChecks = scans.flatMap((s) => s.compliance.requirements);
         const complianceFrameworks = {};
         for (const check of allComplianceChecks) {
             if (!complianceFrameworks[check.framework]) {
@@ -350,7 +349,7 @@ export class SecurityManager extends EventEmitter {
                     total: 0,
                     passed: 0,
                     failed: 0,
-                    score: 0
+                    score: 0,
                 };
             }
             complianceFrameworks[check.framework].total++;
@@ -366,27 +365,29 @@ export class SecurityManager extends EventEmitter {
             const fw = complianceFrameworks[framework];
             fw.score = fw.total > 0 ? (fw.passed / fw.total) * 100 : 0;
         }
-        const overallComplianceScore = Object.values(complianceFrameworks).length > 0 ?
-            Object.values(complianceFrameworks).reduce((sum, fw) => sum + fw.score, 0) /
-                Object.values(complianceFrameworks).length : 0;
+        const overallComplianceScore = Object.values(complianceFrameworks).length > 0
+            ? Object.values(complianceFrameworks).reduce((sum, fw) => sum + fw.score, 0) /
+                Object.values(complianceFrameworks).length
+            : 0;
         // Calculate incident metrics
         const incidentMetrics = {
             total: incidents.length,
-            open: incidents.filter(i => i.status === 'open' || i.status === 'investigating').length,
-            resolved: incidents.filter(i => i.status === 'resolved' || i.status === 'closed').length,
+            open: incidents.filter((i) => i.status === 'open' || i.status === 'investigating').length,
+            resolved: incidents.filter((i) => i.status === 'resolved' || i.status === 'closed').length,
             bySeverity: this.groupBy(incidents, 'severity'),
             meanTimeToDetection: this.calculateMTTD(incidents),
             meanTimeToResponse: this.calculateMTTResponse(incidents),
-            meanTimeToResolution: this.calculateIncidentMTTR(incidents)
+            meanTimeToResolution: this.calculateIncidentMTTR(incidents),
         };
         // Policy metrics
         const policies = Array.from(this.policies.values());
         const policyMetrics = {
             total: policies.length,
-            active: policies.filter(p => p.status === 'active').length,
+            active: policies.filter((p) => p.status === 'active').length,
             violations: policies.reduce((sum, p) => sum + p.metrics.violations, 0),
-            compliance: policies.length > 0 ?
-                policies.reduce((sum, p) => sum + p.metrics.compliance, 0) / policies.length : 0
+            compliance: policies.length > 0
+                ? policies.reduce((sum, p) => sum + p.metrics.compliance, 0) / policies.length
+                : 0,
         };
         return {
             scans: scanMetrics,
@@ -394,15 +395,15 @@ export class SecurityManager extends EventEmitter {
             compliance: {
                 frameworks: complianceFrameworks,
                 overallScore: overallComplianceScore,
-                trending: 'stable' // Would be calculated from historical data
+                trending: 'stable', // Would be calculated from historical data
             },
             incidents: incidentMetrics,
             policies: policyMetrics,
             trends: {
                 findingsTrend: [], // Would be calculated from historical data
                 complianceTrend: [], // Would be calculated from historical data
-                incidentsTrend: [] // Would be calculated from historical data
-            }
+                incidentsTrend: [], // Would be calculated from historical data
+            },
         };
     }
     // Private helper methods
@@ -410,21 +411,21 @@ export class SecurityManager extends EventEmitter {
         try {
             // Load scans
             const scanFiles = await readdir(join(this.securityPath, 'scans'));
-            for (const file of scanFiles.filter(f => f.endsWith('.json'))) {
+            for (const file of scanFiles.filter((f) => f.endsWith('.json'))) {
                 const content = await readFile(join(this.securityPath, 'scans', file), 'utf-8');
                 const scan = JSON.parse(content);
                 this.scans.set(scan.id, scan);
             }
             // Load policies
             const policyFiles = await readdir(join(this.securityPath, 'policies'));
-            for (const file of policyFiles.filter(f => f.endsWith('.json'))) {
+            for (const file of policyFiles.filter((f) => f.endsWith('.json'))) {
                 const content = await readFile(join(this.securityPath, 'policies', file), 'utf-8');
                 const policy = JSON.parse(content);
                 this.policies.set(policy.id, policy);
             }
             // Load incidents
             const incidentFiles = await readdir(join(this.securityPath, 'incidents'));
-            for (const file of incidentFiles.filter(f => f.endsWith('.json'))) {
+            for (const file of incidentFiles.filter((f) => f.endsWith('.json'))) {
                 const content = await readFile(join(this.securityPath, 'incidents', file), 'utf-8');
                 const incident = JSON.parse(content);
                 this.incidents.set(incident.id, incident);
@@ -449,14 +450,14 @@ export class SecurityManager extends EventEmitter {
                         action: 'alert',
                         severity: 'critical',
                         parameters: { threshold: 9.0 },
-                        enabled: true
-                    }
+                        enabled: true,
+                    },
                 ],
                 enforcement: {
                     level: 'blocking',
                     exceptions: [],
-                    approvers: ['security-lead']
-                }
+                    approvers: ['security-lead'],
+                },
             },
             {
                 name: 'Secret Detection Policy',
@@ -470,13 +471,13 @@ export class SecurityManager extends EventEmitter {
                         action: 'deny',
                         severity: 'high',
                         parameters: {},
-                        enabled: true
-                    }
-                ]
-            }
+                        enabled: true,
+                    },
+                ],
+            },
         ];
         for (const policyData of defaultPolicies) {
-            if (!Array.from(this.policies.values()).some(p => p.name === policyData.name)) {
+            if (!Array.from(this.policies.values()).some((p) => p.name === policyData.name)) {
                 await this.createSecurityPolicy(policyData);
             }
         }
@@ -491,7 +492,7 @@ export class SecurityManager extends EventEmitter {
                 updateFrequency: 'daily',
                 lastUpdate: new Date(),
                 status: 'active',
-                configuration: {}
+                configuration: {},
             },
             {
                 id: 'github-advisories',
@@ -501,8 +502,8 @@ export class SecurityManager extends EventEmitter {
                 updateFrequency: 'daily',
                 lastUpdate: new Date(),
                 status: 'active',
-                configuration: {}
-            }
+                configuration: {},
+            },
         ];
         for (const db of databases) {
             this.vulnerabilityDatabases.set(db.id, db);
@@ -510,13 +511,13 @@ export class SecurityManager extends EventEmitter {
     }
     getDefaultScanner(type) {
         const scanners = {
-            'vulnerability': 'trivy',
-            'dependency': 'npm-audit',
+            vulnerability: 'trivy',
+            dependency: 'npm-audit',
             'code-quality': 'sonarqube',
-            'secrets': 'gitleaks',
-            'compliance': 'inspec',
-            'infrastructure': 'checkov',
-            'container': 'clair'
+            secrets: 'gitleaks',
+            compliance: 'inspec',
+            infrastructure: 'checkov',
+            container: 'clair',
         };
         return scanners[type] || 'generic';
     }
@@ -550,17 +551,17 @@ export class SecurityManager extends EventEmitter {
                     cvss: {
                         score: 9.8,
                         vector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H',
-                        version: '3.1'
+                        version: '3.1',
                     },
                     location: {
                         file: 'package-lock.json',
                         line: 125,
-                        component: 'libxml2@2.9.10'
+                        component: 'libxml2@2.9.10',
                     },
                     evidence: {
                         snippet: '"libxml2": "2.9.10"',
                         context: 'Dependency declaration',
-                        references: ['https://nvd.nist.gov/vuln/detail/CVE-2023-12345']
+                        references: ['https://nvd.nist.gov/vuln/detail/CVE-2023-12345'],
                     },
                     impact: 'Remote attackers could execute arbitrary code',
                     remediation: {
@@ -569,15 +570,15 @@ export class SecurityManager extends EventEmitter {
                         priority: 'critical',
                         autoFixable: true,
                         steps: ['npm update libxml2'],
-                        references: ['https://github.com/GNOME/libxml2/releases']
+                        references: ['https://github.com/GNOME/libxml2/releases'],
                     },
                     status: 'open',
                     tags: ['cve', 'rce', 'dependency'],
                     metadata: {},
                     firstSeen: new Date(),
                     lastSeen: new Date(),
-                    occurrences: 1
-                }
+                    occurrences: 1,
+                },
             ];
             // Simulate scan delay
             setTimeout(() => {
@@ -591,7 +592,7 @@ export class SecurityManager extends EventEmitter {
             const args = ['audit', '--json'];
             const child = spawn(command, args, {
                 cwd: scan.target.path,
-                stdio: ['pipe', 'pipe', 'pipe']
+                stdio: ['pipe', 'pipe', 'pipe'],
             });
             let stdout = '';
             let stderr = '';
@@ -608,7 +609,7 @@ export class SecurityManager extends EventEmitter {
                     resolve(findings);
                 }
                 catch (error) {
-                    reject(new Error(`Failed to parse npm audit results: ${(error instanceof Error ? error.message : String(error))}`));
+                    reject(new Error(`Failed to parse npm audit results: ${error instanceof Error ? error.message : String(error)}`));
                 }
             });
             child.on('error', (error) => {
@@ -628,11 +629,11 @@ export class SecurityManager extends EventEmitter {
                 location: {
                     file: 'config/aws.js',
                     line: 12,
-                    column: 20
+                    column: 20,
                 },
                 evidence: {
                     snippet: 'const accessKey = "AKIA123456789..."',
-                    context: 'Hardcoded AWS credentials'
+                    context: 'Hardcoded AWS credentials',
                 },
                 impact: 'Unauthorized access to AWS resources',
                 remediation: {
@@ -643,17 +644,17 @@ export class SecurityManager extends EventEmitter {
                     steps: [
                         'Remove hardcoded credentials',
                         'Use environment variables',
-                        'Rotate compromised keys'
+                        'Rotate compromised keys',
                     ],
-                    references: ['https://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.html']
+                    references: ['https://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.html'],
                 },
                 status: 'open',
                 tags: ['secret', 'aws', 'credentials'],
                 metadata: {},
                 firstSeen: new Date(),
                 lastSeen: new Date(),
-                occurrences: 1
-            }
+                occurrences: 1,
+            },
         ];
     }
     async executeCheckovScan(scan) {
@@ -678,27 +679,29 @@ export class SecurityManager extends EventEmitter {
                     cve: vuln.cve,
                     location: {
                         file: 'package.json',
-                        component: packageName
+                        component: packageName,
                     },
                     evidence: {
                         snippet: `"${packageName}": "${vuln.range}"`,
-                        references: vuln.url ? [vuln.url] : []
+                        references: vuln.url ? [vuln.url] : [],
                     },
                     impact: vuln.overview || 'Security vulnerability',
                     remediation: {
                         description: vuln.recommendation || 'Update to a secure version',
                         effort: 'low',
-                        priority: vuln.severity === 'info' ? 'low' : vuln.severity,
+                        priority: vuln.severity === 'info'
+                            ? 'low'
+                            : vuln.severity,
                         autoFixable: true,
                         steps: [`npm update ${packageName}`],
-                        references: vuln.url ? [vuln.url] : []
+                        references: vuln.url ? [vuln.url] : [],
                     },
                     status: 'open',
                     tags: ['npm', 'dependency'],
                     metadata: { packageName, range: vuln.range },
                     firstSeen: new Date(),
                     lastSeen: new Date(),
-                    occurrences: 1
+                    occurrences: 1,
                 });
             }
         }
@@ -707,12 +710,12 @@ export class SecurityManager extends EventEmitter {
     calculateScanMetrics(scan) {
         const findings = scan.results;
         scan.metrics.totalFindings = findings.length;
-        scan.metrics.criticalFindings = findings.filter(f => f.severity === 'critical').length;
-        scan.metrics.highFindings = findings.filter(f => f.severity === 'high').length;
-        scan.metrics.mediumFindings = findings.filter(f => f.severity === 'medium').length;
-        scan.metrics.lowFindings = findings.filter(f => f.severity === 'low').length;
-        scan.metrics.falsePositives = findings.filter(f => f.status === 'false-positive').length;
-        scan.metrics.suppressed = findings.filter(f => f.status === 'suppressed').length;
+        scan.metrics.criticalFindings = findings.filter((f) => f.severity === 'critical').length;
+        scan.metrics.highFindings = findings.filter((f) => f.severity === 'high').length;
+        scan.metrics.mediumFindings = findings.filter((f) => f.severity === 'medium').length;
+        scan.metrics.lowFindings = findings.filter((f) => f.severity === 'low').length;
+        scan.metrics.falsePositives = findings.filter((f) => f.status === 'false-positive').length;
+        scan.metrics.suppressed = findings.filter((f) => f.status === 'suppressed').length;
     }
     async runComplianceChecks(scan) {
         // Mock compliance checks
@@ -722,10 +725,12 @@ export class SecurityManager extends EventEmitter {
             scan.compliance.requirements.push(...checks);
         }
         scan.compliance.frameworks = frameworks;
-        scan.compliance.passedChecks = scan.compliance.requirements.filter(r => r.status === 'passed').length;
-        scan.compliance.failedChecks = scan.compliance.requirements.filter(r => r.status === 'failed').length;
-        scan.compliance.overallScore = scan.compliance.requirements.length > 0 ?
-            (scan.compliance.passedChecks / scan.compliance.requirements.length) * 100 : 0;
+        scan.compliance.passedChecks = scan.compliance.requirements.filter((r) => r.status === 'passed').length;
+        scan.compliance.failedChecks = scan.compliance.requirements.filter((r) => r.status === 'failed').length;
+        scan.compliance.overallScore =
+            scan.compliance.requirements.length > 0
+                ? (scan.compliance.passedChecks / scan.compliance.requirements.length) * 100
+                : 0;
     }
     async runFrameworkChecks(framework, scope) {
         // Mock compliance checks for different frameworks
@@ -738,7 +743,7 @@ export class SecurityManager extends EventEmitter {
                 status: 'passed',
                 severity: 'high',
                 evidence: 'TLS 1.2+ configured',
-                lastChecked: new Date()
+                lastChecked: new Date(),
             },
             {
                 id: `check-${Date.now()}-2`,
@@ -748,14 +753,14 @@ export class SecurityManager extends EventEmitter {
                 status: 'failed',
                 severity: 'medium',
                 remediation: 'Enable database encryption',
-                lastChecked: new Date()
-            }
+                lastChecked: new Date(),
+            },
         ];
         return mockChecks;
     }
     async generateRemediationRecommendations(scan) {
-        const autoFixable = scan.results.filter(f => f.remediation.autoFixable);
-        const manualReview = scan.results.filter(f => !f.remediation.autoFixable);
+        const autoFixable = scan.results.filter((f) => f.remediation.autoFixable);
+        const manualReview = scan.results.filter((f) => !f.remediation.autoFixable);
         scan.remediation.autoFixAvailable = autoFixable;
         scan.remediation.manualReview = manualReview;
         // Generate general recommendations
@@ -772,18 +777,18 @@ export class SecurityManager extends EventEmitter {
                     steps: [
                         'Configure Dependabot or Renovate',
                         'Set up automated testing pipeline',
-                        'Enable auto-merge for low-risk updates'
+                        'Enable auto-merge for low-risk updates',
                     ],
                     tools: ['Dependabot', 'Renovate', 'GitHub Actions'],
                     timeEstimate: '2-4 hours',
-                    cost: 'Free'
+                    cost: 'Free',
                 },
                 references: [
                     'https://docs.github.com/en/code-security/dependabot',
-                    'https://renovatebot.com/'
+                    'https://renovatebot.com/',
                 ],
-                applicableFrameworks: ['SOC2', 'ISO27001']
-            }
+                applicableFrameworks: ['SOC2', 'ISO27001'],
+            },
         ];
     }
     async checkNotificationThresholds(scan) {
@@ -799,18 +804,21 @@ export class SecurityManager extends EventEmitter {
         this.emit('notification:scan', {
             scan,
             message,
-            severity: scan.metrics.criticalFindings > 0 ? 'critical' :
-                scan.metrics.highFindings > 0 ? 'high' : 'medium'
+            severity: scan.metrics.criticalFindings > 0
+                ? 'critical'
+                : scan.metrics.highFindings > 0
+                    ? 'high'
+                    : 'medium',
         });
         this.logger.warn(message);
     }
     async autoAssignIncident(incident) {
         // Auto-assign based on severity and type
         const assignmentRules = {
-            'critical': ['security-lead', 'ciso'],
-            'high': ['security-team'],
-            'medium': ['security-analyst'],
-            'low': ['security-analyst']
+            critical: ['security-lead', 'ciso'],
+            high: ['security-team'],
+            medium: ['security-analyst'],
+            low: ['security-analyst'],
         };
         incident.response.assignedTo = assignmentRules[incident.severity] || ['security-team'];
     }
@@ -819,7 +827,7 @@ export class SecurityManager extends EventEmitter {
         this.emit('notification:incident', {
             incident,
             message,
-            urgency: incident.severity === 'critical' ? 'immediate' : 'high'
+            urgency: incident.severity === 'critical' ? 'immediate' : 'high',
         });
         this.logger.error(message);
     }
@@ -859,7 +867,7 @@ export class SecurityManager extends EventEmitter {
             userId,
             action,
             target: targetType,
-            details
+            details,
         };
         target.auditLog.push(entry);
     }
@@ -871,28 +879,28 @@ export class SecurityManager extends EventEmitter {
         }, {});
     }
     calculateMTTR(findings) {
-        const resolvedFindings = findings.filter(f => f.status === 'resolved' && f.firstSeen && f.lastSeen);
+        const resolvedFindings = findings.filter((f) => f.status === 'resolved' && f.firstSeen && f.lastSeen);
         if (resolvedFindings.length === 0)
             return 0;
         const totalTime = resolvedFindings.reduce((sum, f) => sum + (f.lastSeen.getTime() - f.firstSeen.getTime()), 0);
         return totalTime / resolvedFindings.length;
     }
     calculateMTTD(incidents) {
-        const detectedIncidents = incidents.filter(i => i.timeline.detected && i.timeline.reported);
+        const detectedIncidents = incidents.filter((i) => i.timeline.detected && i.timeline.reported);
         if (detectedIncidents.length === 0)
             return 0;
         const totalTime = detectedIncidents.reduce((sum, i) => sum + (i.timeline.reported.getTime() - i.timeline.detected.getTime()), 0);
         return totalTime / detectedIncidents.length;
     }
     calculateMTTResponse(incidents) {
-        const respondedIncidents = incidents.filter(i => i.timeline.reported && i.timeline.acknowledged);
+        const respondedIncidents = incidents.filter((i) => i.timeline.reported && i.timeline.acknowledged);
         if (respondedIncidents.length === 0)
             return 0;
         const totalTime = respondedIncidents.reduce((sum, i) => sum + (i.timeline.acknowledged.getTime() - i.timeline.reported.getTime()), 0);
         return totalTime / respondedIncidents.length;
     }
     calculateIncidentMTTR(incidents) {
-        const resolvedIncidents = incidents.filter(i => i.timeline.reported && i.timeline.resolved);
+        const resolvedIncidents = incidents.filter((i) => i.timeline.reported && i.timeline.resolved);
         if (resolvedIncidents.length === 0)
             return 0;
         const totalTime = resolvedIncidents.reduce((sum, i) => sum + (i.timeline.resolved.getTime() - i.timeline.reported.getTime()), 0);