joopjs 2.0.0

package/dist/security/index.d.mts

@@ -0,0 +1,206 @@
+export { e as JoopAnomalyEvent, J as JoopBehavioralBiometrics, f as JoopBiometricProfile, g as JoopBiometricScore, d as JoopDifferentialPrivacy, h as JoopPIIFinding, i as JoopPIIPattern, b as JoopPIIScanner, j as JoopRiskContext, a as JoopRiskEngine, k as JoopRiskFactor, l as JoopRiskScore, c as JoopSecretSharing, m as JoopShare } from '../differential-privacy-BcAv1G80.mjs';
+import { J as JoopObservable } from '../index-Dz0gOur2.mjs';
+
+interface JoopSecureStorageConfig {
+    namespace?: string;
+    backend?: 'localStorage' | 'sessionStorage' | 'memory';
+    salt?: string;
+}
+declare class JoopSecureStorage {
+    private readonly ns;
+    private readonly salt;
+    private readonly backend;
+    private _key?;
+    constructor(config?: JoopSecureStorageConfig);
+    private cryptoKey;
+    private storageKey;
+    setItem(key: string, value: unknown): Promise<void>;
+    getItem<T>(key: string): Promise<T | null>;
+    removeItem(key: string): Promise<void>;
+    has(key: string): Promise<boolean>;
+    keys(): Promise<string[]>;
+    clear(): Promise<void>;
+    setItems(entries: Record<string, unknown>): Promise<void>;
+    getAll(): Promise<Record<string, unknown>>;
+}
+
+interface JoopScreenSecurityConfig {
+    blurOnTabSwitch?: boolean;
+    clipboardProtection?: boolean;
+    devtoolsDetection?: boolean;
+    screenshotWarning?: boolean;
+}
+type JoopScreenSecurityEvent = 'devtools-open' | 'screenshot-attempt' | 'tab-hidden' | 'tab-visible' | 'clipboard-blocked';
+declare class JoopScreenSecurityService {
+    private _config;
+    private _listeners;
+    private _active;
+    private _devtoolsTimer;
+    private _sensitiveElements;
+    private _blurOverlay;
+    constructor(config?: JoopScreenSecurityConfig);
+    activate(): void;
+    deactivate(): void;
+    registerSensitive(element: Element): () => void;
+    unregisterSensitive(element: Element): void;
+    on(event: JoopScreenSecurityEvent, handler: () => void): () => void;
+    isDevtoolsOpen(): boolean;
+    destroy(): void;
+    private _onVisibilityChange;
+    private _onKeyUp;
+    private _blockCopy;
+    private _startDevtoolsDetection;
+    private _showOverlay;
+    private _removeOverlay;
+    private _emit;
+}
+
+interface JoopSignedPayload<T = unknown> {
+    data: T;
+    nonce: string;
+    timestamp: number;
+    signature: string;
+}
+interface JoopRequestSigningConfig {
+    /** Shared secret (ideally per-session key derived from server handshake) */
+    secret: string;
+    /** Max age of a request in milliseconds — server rejects older requests (default 30000 = 30s) */
+    maxAgeMs?: number;
+    /** Algorithm (only SHA-256 currently) */
+    algorithm?: 'SHA-256';
+}
+declare class JoopRequestSigningService {
+    private readonly _secret;
+    private readonly _maxAgeMs;
+    constructor(config: JoopRequestSigningConfig);
+    /** Sign a payload. Returns the signed envelope to send in the request body. */
+    sign<T>(data: T): Promise<JoopSignedPayload<T>>;
+    /** Verify a signed payload (for testing/debugging — production verification runs server-side). */
+    verify<T>(payload: JoopSignedPayload<T>): Promise<{
+        valid: boolean;
+        reason?: string;
+    }>;
+    /** Add the signed envelope as the request body, returning updated fetch init. */
+    signRequest<T>(data: T, init?: RequestInit): Promise<RequestInit>;
+}
+
+interface JoopClipboardEntry {
+    text: string;
+    copiedAt: number;
+    expiresAt: number;
+    label?: string;
+    isSensitive: boolean;
+}
+interface JoopClipboardEvent {
+    type: 'copied' | 'cleared' | 'expired';
+    entry?: JoopClipboardEntry;
+}
+interface JoopSecureClipboardConfig {
+    defaultTtlMs?: number;
+    sensitivePatterns?: RegExp[];
+    autoClearOnHide?: boolean;
+}
+declare class JoopSecureClipboard {
+    private _config;
+    private _current;
+    private _timer;
+    private _event$;
+    private _visibilityHandler;
+    constructor(config?: JoopSecureClipboardConfig);
+    copy(text: string, options?: {
+        ttlMs?: number;
+        label?: string;
+    }): Promise<void>;
+    read(): Promise<string | null>;
+    clear(reason?: 'manual' | 'expired'): Promise<void>;
+    getCurrent(): JoopClipboardEntry | null;
+    isExpired(): boolean;
+    getRemainingMs(): number;
+    isSensitive(text: string): boolean;
+    events$(): JoopObservable<JoopClipboardEvent>;
+    destroy(): void;
+    private _detectSensitive;
+    private _cancelTimer;
+}
+
+type JoopTamperType = 'devtools' | 'dom-injection' | 'prototype-pollution' | 'debugger-pause' | 'console-override' | 'function-override';
+type JoopTamperSeverity = 'low' | 'medium' | 'high' | 'critical';
+interface JoopTamperCheck {
+    type: JoopTamperType;
+    detected: boolean;
+    severity: JoopTamperSeverity;
+    detail?: string;
+}
+interface JoopTamperReport {
+    timestamp: number;
+    checks: JoopTamperCheck[];
+    threatCount: number;
+    highestSeverity: JoopTamperSeverity | null;
+}
+declare class JoopAntiTamperService {
+    private _monitor;
+    private _tamper$;
+    private _alertHandlers;
+    private _lastReport;
+    private _nativeFetch;
+    private _nativeConsoleLog;
+    checkDevTools(): JoopTamperCheck;
+    checkDomInjection(): JoopTamperCheck;
+    checkPrototypePollution(): JoopTamperCheck;
+    checkConsoleOverride(): JoopTamperCheck;
+    checkFunctionOverride(): JoopTamperCheck;
+    checkIntegrity(): JoopTamperReport;
+    isTampered(): boolean;
+    getLastReport(): JoopTamperReport | null;
+    startMonitoring(intervalMs?: number): void;
+    stopMonitoring(): void;
+    isMonitoring(): boolean;
+    onTamperDetected(handler: (report: JoopTamperReport) => void): () => void;
+    tamper$(): JoopObservable<JoopTamperReport>;
+    destroy(): void;
+}
+
+interface JoopCertPin {
+    hostname: string;
+    fingerprints: string[];
+    algorithm: 'sha256' | 'sha1';
+    addedAt: number;
+    expiresAt?: number;
+    notes?: string;
+}
+interface JoopPinViolation {
+    hostname: string;
+    receivedFingerprint: string;
+    expectedFingerprints: string[];
+    timestamp: number;
+    url: string;
+}
+interface JoopPinValidationResult {
+    valid: boolean;
+    pinned: boolean;
+    violation?: JoopPinViolation;
+    pin?: JoopCertPin;
+}
+declare class JoopCertPinningService {
+    private _pins;
+    private _violations;
+    private _violation$;
+    private _violationHandlers;
+    addPin(pin: Omit<JoopCertPin, 'addedAt'>): void;
+    removePin(hostname: string): void;
+    getPin(hostname: string): JoopCertPin | undefined;
+    getAllPins(): JoopCertPin[];
+    validate(url: string, fingerprint: string): JoopPinValidationResult;
+    validateResponse(url: string, response: Response): JoopPinValidationResult;
+    getExpiring(withinMs?: number): JoopCertPin[];
+    isExpired(hostname: string): boolean;
+    getViolations(): JoopPinViolation[];
+    clearViolations(): void;
+    onViolation(handler: (v: JoopPinViolation) => void): () => void;
+    violations$(): JoopObservable<JoopPinViolation>;
+    private _normalizeHostname;
+    private _hostnameFromUrl;
+    private _findPin;
+}
+
+export { JoopAntiTamperService, type JoopCertPin, JoopCertPinningService, type JoopClipboardEntry, type JoopClipboardEvent, type JoopPinValidationResult, type JoopPinViolation, type JoopRequestSigningConfig, JoopRequestSigningService, type JoopScreenSecurityConfig, type JoopScreenSecurityEvent, JoopScreenSecurityService, JoopSecureClipboard, type JoopSecureClipboardConfig, JoopSecureStorage, type JoopSecureStorageConfig, type JoopSignedPayload, type JoopTamperCheck, type JoopTamperReport, type JoopTamperSeverity, type JoopTamperType };

package/dist/security/index.d.ts

@@ -0,0 +1,206 @@
+export { e as JoopAnomalyEvent, J as JoopBehavioralBiometrics, f as JoopBiometricProfile, g as JoopBiometricScore, d as JoopDifferentialPrivacy, h as JoopPIIFinding, i as JoopPIIPattern, b as JoopPIIScanner, j as JoopRiskContext, a as JoopRiskEngine, k as JoopRiskFactor, l as JoopRiskScore, c as JoopSecretSharing, m as JoopShare } from '../differential-privacy-C8mAUjZr.js';
+import { J as JoopObservable } from '../index-Dz0gOur2.js';
+
+interface JoopSecureStorageConfig {
+    namespace?: string;
+    backend?: 'localStorage' | 'sessionStorage' | 'memory';
+    salt?: string;
+}
+declare class JoopSecureStorage {
+    private readonly ns;
+    private readonly salt;
+    private readonly backend;
+    private _key?;
+    constructor(config?: JoopSecureStorageConfig);
+    private cryptoKey;
+    private storageKey;
+    setItem(key: string, value: unknown): Promise<void>;
+    getItem<T>(key: string): Promise<T | null>;
+    removeItem(key: string): Promise<void>;
+    has(key: string): Promise<boolean>;
+    keys(): Promise<string[]>;
+    clear(): Promise<void>;
+    setItems(entries: Record<string, unknown>): Promise<void>;
+    getAll(): Promise<Record<string, unknown>>;
+}
+
+interface JoopScreenSecurityConfig {
+    blurOnTabSwitch?: boolean;
+    clipboardProtection?: boolean;
+    devtoolsDetection?: boolean;
+    screenshotWarning?: boolean;
+}
+type JoopScreenSecurityEvent = 'devtools-open' | 'screenshot-attempt' | 'tab-hidden' | 'tab-visible' | 'clipboard-blocked';
+declare class JoopScreenSecurityService {
+    private _config;
+    private _listeners;
+    private _active;
+    private _devtoolsTimer;
+    private _sensitiveElements;
+    private _blurOverlay;
+    constructor(config?: JoopScreenSecurityConfig);
+    activate(): void;
+    deactivate(): void;
+    registerSensitive(element: Element): () => void;
+    unregisterSensitive(element: Element): void;
+    on(event: JoopScreenSecurityEvent, handler: () => void): () => void;
+    isDevtoolsOpen(): boolean;
+    destroy(): void;
+    private _onVisibilityChange;
+    private _onKeyUp;
+    private _blockCopy;
+    private _startDevtoolsDetection;
+    private _showOverlay;
+    private _removeOverlay;
+    private _emit;
+}
+
+interface JoopSignedPayload<T = unknown> {
+    data: T;
+    nonce: string;
+    timestamp: number;
+    signature: string;
+}
+interface JoopRequestSigningConfig {
+    /** Shared secret (ideally per-session key derived from server handshake) */
+    secret: string;
+    /** Max age of a request in milliseconds — server rejects older requests (default 30000 = 30s) */
+    maxAgeMs?: number;
+    /** Algorithm (only SHA-256 currently) */
+    algorithm?: 'SHA-256';
+}
+declare class JoopRequestSigningService {
+    private readonly _secret;
+    private readonly _maxAgeMs;
+    constructor(config: JoopRequestSigningConfig);
+    /** Sign a payload. Returns the signed envelope to send in the request body. */
+    sign<T>(data: T): Promise<JoopSignedPayload<T>>;
+    /** Verify a signed payload (for testing/debugging — production verification runs server-side). */
+    verify<T>(payload: JoopSignedPayload<T>): Promise<{
+        valid: boolean;
+        reason?: string;
+    }>;
+    /** Add the signed envelope as the request body, returning updated fetch init. */
+    signRequest<T>(data: T, init?: RequestInit): Promise<RequestInit>;
+}
+
+interface JoopClipboardEntry {
+    text: string;
+    copiedAt: number;
+    expiresAt: number;
+    label?: string;
+    isSensitive: boolean;
+}
+interface JoopClipboardEvent {
+    type: 'copied' | 'cleared' | 'expired';
+    entry?: JoopClipboardEntry;
+}
+interface JoopSecureClipboardConfig {
+    defaultTtlMs?: number;
+    sensitivePatterns?: RegExp[];
+    autoClearOnHide?: boolean;
+}
+declare class JoopSecureClipboard {
+    private _config;
+    private _current;
+    private _timer;
+    private _event$;
+    private _visibilityHandler;
+    constructor(config?: JoopSecureClipboardConfig);
+    copy(text: string, options?: {
+        ttlMs?: number;
+        label?: string;
+    }): Promise<void>;
+    read(): Promise<string | null>;
+    clear(reason?: 'manual' | 'expired'): Promise<void>;
+    getCurrent(): JoopClipboardEntry | null;
+    isExpired(): boolean;
+    getRemainingMs(): number;
+    isSensitive(text: string): boolean;
+    events$(): JoopObservable<JoopClipboardEvent>;
+    destroy(): void;
+    private _detectSensitive;
+    private _cancelTimer;
+}
+
+type JoopTamperType = 'devtools' | 'dom-injection' | 'prototype-pollution' | 'debugger-pause' | 'console-override' | 'function-override';
+type JoopTamperSeverity = 'low' | 'medium' | 'high' | 'critical';
+interface JoopTamperCheck {
+    type: JoopTamperType;
+    detected: boolean;
+    severity: JoopTamperSeverity;
+    detail?: string;
+}
+interface JoopTamperReport {
+    timestamp: number;
+    checks: JoopTamperCheck[];
+    threatCount: number;
+    highestSeverity: JoopTamperSeverity | null;
+}
+declare class JoopAntiTamperService {
+    private _monitor;
+    private _tamper$;
+    private _alertHandlers;
+    private _lastReport;
+    private _nativeFetch;
+    private _nativeConsoleLog;
+    checkDevTools(): JoopTamperCheck;
+    checkDomInjection(): JoopTamperCheck;
+    checkPrototypePollution(): JoopTamperCheck;
+    checkConsoleOverride(): JoopTamperCheck;
+    checkFunctionOverride(): JoopTamperCheck;
+    checkIntegrity(): JoopTamperReport;
+    isTampered(): boolean;
+    getLastReport(): JoopTamperReport | null;
+    startMonitoring(intervalMs?: number): void;
+    stopMonitoring(): void;
+    isMonitoring(): boolean;
+    onTamperDetected(handler: (report: JoopTamperReport) => void): () => void;
+    tamper$(): JoopObservable<JoopTamperReport>;
+    destroy(): void;
+}
+
+interface JoopCertPin {
+    hostname: string;
+    fingerprints: string[];
+    algorithm: 'sha256' | 'sha1';
+    addedAt: number;
+    expiresAt?: number;
+    notes?: string;
+}
+interface JoopPinViolation {
+    hostname: string;
+    receivedFingerprint: string;
+    expectedFingerprints: string[];
+    timestamp: number;
+    url: string;
+}
+interface JoopPinValidationResult {
+    valid: boolean;
+    pinned: boolean;
+    violation?: JoopPinViolation;
+    pin?: JoopCertPin;
+}
+declare class JoopCertPinningService {
+    private _pins;
+    private _violations;
+    private _violation$;
+    private _violationHandlers;
+    addPin(pin: Omit<JoopCertPin, 'addedAt'>): void;
+    removePin(hostname: string): void;
+    getPin(hostname: string): JoopCertPin | undefined;
+    getAllPins(): JoopCertPin[];
+    validate(url: string, fingerprint: string): JoopPinValidationResult;
+    validateResponse(url: string, response: Response): JoopPinValidationResult;
+    getExpiring(withinMs?: number): JoopCertPin[];
+    isExpired(hostname: string): boolean;
+    getViolations(): JoopPinViolation[];
+    clearViolations(): void;
+    onViolation(handler: (v: JoopPinViolation) => void): () => void;
+    violations$(): JoopObservable<JoopPinViolation>;
+    private _normalizeHostname;
+    private _hostnameFromUrl;
+    private _findPin;
+}
+
+export { JoopAntiTamperService, type JoopCertPin, JoopCertPinningService, type JoopClipboardEntry, type JoopClipboardEvent, type JoopPinValidationResult, type JoopPinViolation, type JoopRequestSigningConfig, JoopRequestSigningService, type JoopScreenSecurityConfig, type JoopScreenSecurityEvent, JoopScreenSecurityService, JoopSecureClipboard, type JoopSecureClipboardConfig, JoopSecureStorage, type JoopSecureStorageConfig, type JoopSignedPayload, type JoopTamperCheck, type JoopTamperReport, type JoopTamperSeverity, type JoopTamperType };